[Tue Nov 11 12:53:31.527174 2025] [:error] [pid 53414:tid 53426] [client 45.153.34.41:59418] [client 45.153.34.41] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.git/config"] [unique_id "aRLBSws6pHd_Z5oc1edD5QAAAQo"]
[Tue Nov 11 13:33:27.256415 2025] [:error] [pid 53449:tid 53472] [client 45.153.34.41:35118] [client 45.153.34.41] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.git/config"] [unique_id "aRLKp9pz08j5NoUSzp8NOwAAAVI"]
[Tue Nov 11 14:57:40.947995 2025] [proxy_fcgi:error] [pid 59670:tid 59693] [client 141.98.11.16:51002] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 20:44:33.879904 2025] [:error] [pid 36579:tid 36619] [client 138.197.42.17:51012] [client 138.197.42.17] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.git/config"] [unique_id "aRMvsemuedRSntjwLw6QRwAAAAg"]
[Tue Nov 11 23:31:45.621254 2025] [:error] [pid 49628:tid 49638] [client 138.197.42.17:57592] [client 138.197.42.17] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dwelectservices.com.au"] [uri "/.git/config"] [unique_id "aRNW4b82AgnfnwL7V2Zb0gAAAIg"]
2025/11/12 08:09:17 [error] 57093#57093: *138 openat() "/home/dwelects/public_html/robots.txt" failed (2: No such file or directory), client: 69.171.230.6, server: dwelectservices.com.au, request: "GET /robots.txt HTTP/1.1", host: "dwelectservices.com.au"
[Thu Nov 13 17:55:43.567400 2025] [:error] [pid 62215:tid 62225] [client 150.241.107.255:56193] [client 150.241.107.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/"] [unique_id "aRWrH0vClof1c6XaOBWsGgAAAMY"]
[Thu Nov 13 17:55:44.114603 2025] [:error] [pid 62216:tid 62261] [client 150.241.107.255:56553] [client 150.241.107.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/"] [unique_id "aRWrIOpyFB9M2aVQhwM0kQAAAA4"]
[Thu Nov 13 17:55:44.661575 2025] [:error] [pid 44354:tid 44359] [client 150.241.107.255:56746] [client 150.241.107.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "aRWrIHqKopQhy3G4s3l0egAAAYA"]
[Thu Nov 13 22:51:44.732044 2025] [:error] [pid 4993:tid 5050] [client 45.138.16.29:60795] [client 45.138.16.29] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/postnews.php"] [unique_id "aRXwgMl_cC0Js5xNCU1X7wAAABg"]
[Thu Nov 13 22:51:45.261929 2025] [:error] [pid 28868:tid 28877] [client 45.138.16.29:60871] [client 45.138.16.29] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-content/postnews.php"] [unique_id "aRXwgYq9fgBJ6LAEEDzdHAAAAUc"]
[Thu Nov 13 22:51:45.789276 2025] [:error] [pid 4994:tid 5057] [client 45.138.16.29:61002] [client 45.138.16.29] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/postnews.php"] [unique_id "aRXwgQVaYoYtjfBbabUf-wAAAIQ"]
[Sat Nov 15 00:29:14.943641 2025] [proxy_fcgi:error] [pid 45995:tid 46022] [client 4.205.91.17:57208] AH01071: Got error 'Primary script unknown'
[Sat Nov 15 00:29:15.174751 2025] [proxy_fcgi:error] [pid 45995:tid 46005] [client 4.205.91.17:57208] AH01071: Got error 'Primary script unknown'
[Sat Nov 15 00:29:15.402724 2025] [proxy_fcgi:error] [pid 45995:tid 46013] [client 4.205.91.17:57208] AH01071: Got error 'Primary script unknown'
[Sat Nov 15 00:29:15.616691 2025] [proxy_fcgi:error] [pid 45995:tid 46000] [client 4.205.91.17:57208] AH01071: Got error 'Primary script unknown'
[Sat Nov 15 00:29:15.826940 2025] [proxy_fcgi:error] [pid 45995:tid 46016] [client 4.205.91.17:57208] AH01071: Got error 'Primary script unknown'
[Sat Nov 15 00:29:16.036523 2025] [proxy_fcgi:error] [pid 45995:tid 46019] [client 4.205.91.17:57208] AH01071: Got error 'Primary script unknown'
[Sat Nov 15 00:29:16.258309 2025] [proxy_fcgi:error] [pid 45995:tid 46003] [client 4.205.91.17:57208] AH01071: Got error 'Primary script unknown'
[Sat Nov 15 00:29:16.503524 2025] [proxy_fcgi:error] [pid 45995:tid 46002] [client 4.205.91.17:57208] AH01071: Got error 'Primary script unknown'
[Sat Nov 15 00:29:16.712250 2025] [proxy_fcgi:error] [pid 45995:tid 46001] [client 4.205.91.17:57208] AH01071: Got error 'Primary script unknown'
[Sat Nov 15 00:29:16.934424 2025] [proxy_fcgi:error] [pid 45995:tid 46018] [client 4.205.91.17:57208] AH01071: Got error 'Primary script unknown'
[Sat Nov 15 00:29:17.140283 2025] [:error] [pid 45995:tid 46006] [client 4.205.91.17:57208] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/filesss.php"] [unique_id "aRdY3cfhZrb6EV4SvFupWwAAAgY"]
[Sat Nov 15 00:29:18.625066 2025] [:error] [pid 45907:tid 45913] [client 4.205.91.17:57096] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/filesss.php"] [unique_id "aRdY3lAqmYxCpnT9gJFuZAAAAUI"]
[Sat Nov 15 00:29:19.658864 2025] [:error] [pid 45995:tid 46024] [client 4.205.91.17:54981] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/filesss.php"] [unique_id "aRdY38fhZrb6EV4SvFupYAAAAhg"]
[Sat Nov 15 00:29:21.191626 2025] [:error] [pid 45995:tid 46011] [client 4.205.91.17:57106] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/filesss.php"] [unique_id "aRdY4cfhZrb6EV4SvFupZgAAAgs"]
[Sat Nov 15 00:29:22.514290 2025] [:error] [pid 45909:tid 45984] [client 4.205.91.17:57180] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file88.php"] [unique_id "aRdY4sZqItrYybG86kiEWwAAAdM"]
[Sat Nov 15 00:29:23.218639 2025] [:error] [pid 45995:tid 46012] [client 4.205.91.17:57190] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file88.php"] [unique_id "aRdY48fhZrb6EV4SvFupaQAAAgw"]
[Sat Nov 15 00:29:24.114248 2025] [:error] [pid 45908:tid 45959] [client 4.205.91.17:57166] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file88.php"] [unique_id "aRdY5GWG19mWwZX7KatPAgAAABU"]
[Sat Nov 15 00:29:24.830903 2025] [:error] [pid 45995:tid 46020] [client 4.205.91.17:57189] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file88.php"] [unique_id "aRdY5MfhZrb6EV4SvFupbAAAAhQ"]
[Sat Nov 15 00:29:25.411462 2025] [:error] [pid 45908:tid 45945] [client 4.205.91.17:57146] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gifclass4.php"] [unique_id "aRdY5WWG19mWwZX7KatPBgAAAAc"]
[Sat Nov 15 00:29:26.671435 2025] [:error] [pid 45995:tid 46008] [client 4.205.91.17:57184] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gifclass4.php"] [unique_id "aRdY5sfhZrb6EV4SvFupbwAAAgg"]
[Sat Nov 15 00:29:27.481177 2025] [:error] [pid 45995:tid 46014] [client 4.205.91.17:54944] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gifclass4.php"] [unique_id "aRdY58fhZrb6EV4SvFupcQAAAg4"]
[Sat Nov 15 00:29:28.417971 2025] [:error] [pid 45908:tid 45959] [client 4.205.91.17:57094] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gifclass4.php"] [unique_id "aRdY6GWG19mWwZX7KatPCQAAABU"]
[Sat Nov 15 00:29:29.087638 2025] [:error] [pid 45907:tid 45918] [client 4.205.91.17:47606] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class19.php"] [unique_id "aRdY6VAqmYxCpnT9gJFubgAAAUc"]
[Sat Nov 15 00:29:29.868772 2025] [:error] [pid 45909:tid 45977] [client 4.205.91.17:46031] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class19.php"] [unique_id "aRdY6cZqItrYybG86kiEZAAAAcw"]
[Sat Nov 15 00:29:30.349831 2025] [:error] [pid 45995:tid 46002] [client 4.205.91.17:57160] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class19.php"] [unique_id "aRdY6sfhZrb6EV4SvFupeAAAAgI"]
[Sat Nov 15 00:29:30.849427 2025] [:error] [pid 45909:tid 45973] [client 4.205.91.17:57151] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class19.php"] [unique_id "aRdY6sZqItrYybG86kiEZQAAAcg"]
[Sat Nov 15 00:29:31.505397 2025] [:error] [pid 45907:tid 45915] [client 4.205.91.17:55000] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2clas.php"] [unique_id "aRdY61AqmYxCpnT9gJFucAAAAUQ"]
[Sat Nov 15 00:29:32.069067 2025] [:error] [pid 45909:tid 45978] [client 4.205.91.17:57193] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2clas.php"] [unique_id "aRdY7MZqItrYybG86kiEZwAAAc0"]
[Sat Nov 15 00:29:32.699580 2025] [:error] [pid 45995:tid 46007] [client 4.205.91.17:57105] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2clas.php"] [unique_id "aRdY7MfhZrb6EV4SvFupggAAAgc"]
[Sat Nov 15 00:29:33.298788 2025] [:error] [pid 45907:tid 45911] [client 4.205.91.17:55002] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2clas.php"] [unique_id "aRdY7VAqmYxCpnT9gJFudQAAAUA"]
[Sat Nov 15 00:29:33.942886 2025] [:error] [pid 45995:tid 46001] [client 4.205.91.17:57141] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bless5.php"] [unique_id "aRdY7cfhZrb6EV4SvFuphAAAAgE"]
[Sat Nov 15 00:29:34.511224 2025] [:error] [pid 45907:tid 45924] [client 4.205.91.17:57150] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bless5.php"] [unique_id "aRdY7lAqmYxCpnT9gJFudwAAAU0"]
[Sat Nov 15 00:29:35.343249 2025] [:error] [pid 45907:tid 45913] [client 4.205.91.17:57165] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bless5.php"] [unique_id "aRdY71AqmYxCpnT9gJFuewAAAUI"]
[Sat Nov 15 00:29:35.892509 2025] [:error] [pid 45995:tid 46009] [client 4.205.91.17:57214] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bless5.php"] [unique_id "aRdY78fhZrb6EV4SvFupiAAAAgk"]
[Sat Nov 15 00:29:36.512905 2025] [:error] [pid 45907:tid 45911] [client 4.205.91.17:55010] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file15.php"] [unique_id "aRdY8FAqmYxCpnT9gJFuggAAAUA"]
[Sat Nov 15 00:29:37.142210 2025] [:error] [pid 45908:tid 45946] [client 4.205.91.17:57211] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file15.php"] [unique_id "aRdY8WWG19mWwZX7KatPFwAAAAg"]
[Sat Nov 15 00:29:37.788390 2025] [:error] [pid 45907:tid 45933] [client 4.205.91.17:55009] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file15.php"] [unique_id "aRdY8VAqmYxCpnT9gJFuhwAAAVY"]
[Sat Nov 15 00:29:38.330611 2025] [:error] [pid 45907:tid 45914] [client 4.205.91.17:57134] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file15.php"] [unique_id "aRdY8lAqmYxCpnT9gJFuiQAAAUM"]
[Sat Nov 15 00:29:39.617214 2025] [:error] [pid 45907:tid 45927] [client 4.205.91.17:57130] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/333.php"] [unique_id "aRdY81AqmYxCpnT9gJFulAAAAVA"]
[Sat Nov 15 00:29:40.334483 2025] [:error] [pid 45909:tid 45979] [client 4.205.91.17:47538] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/333.php"] [unique_id "aRdY9MZqItrYybG86kiEgAAAAc4"]
[Sat Nov 15 00:29:40.880877 2025] [:error] [pid 45995:tid 46024] [client 4.205.91.17:47517] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/333.php"] [unique_id "aRdY9MfhZrb6EV4SvFupjgAAAhg"]
[Sat Nov 15 00:29:41.603076 2025] [:error] [pid 45909:tid 45970] [client 4.205.91.17:54983] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/333.php"] [unique_id "aRdY9cZqItrYybG86kiEigAAAcU"]
[Sat Nov 15 00:29:42.376147 2025] [:error] [pid 45995:tid 46000] [client 4.205.91.17:57112] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/alpa.php"] [unique_id "aRdY9sfhZrb6EV4SvFupjwAAAgA"]
[Sat Nov 15 00:29:42.895298 2025] [:error] [pid 45995:tid 46002] [client 4.205.91.17:57152] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/alpa.php"] [unique_id "aRdY9sfhZrb6EV4SvFupkAAAAgI"]
[Sat Nov 15 00:29:43.473945 2025] [:error] [pid 45995:tid 46023] [client 4.205.91.17:57116] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/alpa.php"] [unique_id "aRdY98fhZrb6EV4SvFupkgAAAhc"]
[Sat Nov 15 00:29:44.214115 2025] [:error] [pid 45995:tid 46009] [client 4.205.91.17:55034] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/alpa.php"] [unique_id "aRdY-MfhZrb6EV4SvFupmAAAAgk"]
[Sat Nov 15 00:29:44.797107 2025] [:error] [pid 45908:tid 45941] [client 4.205.91.17:54928] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file21.php"] [unique_id "aRdY-GWG19mWwZX7KatPJQAAAAM"]
[Sat Nov 15 00:29:45.703242 2025] [:error] [pid 45995:tid 46017] [client 4.205.91.17:57162] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file21.php"] [unique_id "aRdY-cfhZrb6EV4SvFupnwAAAhE"]
[Sat Nov 15 00:29:46.182747 2025] [:error] [pid 45995:tid 46001] [client 4.205.91.17:57149] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file21.php"] [unique_id "aRdY-sfhZrb6EV4SvFupoQAAAgE"]
[Sat Nov 15 00:29:46.891470 2025] [:error] [pid 45907:tid 45926] [client 4.205.91.17:57154] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file21.php"] [unique_id "aRdY-lAqmYxCpnT9gJFuqAAAAU8"]
[Sat Nov 15 00:29:47.353051 2025] [:error] [pid 45995:tid 46016] [client 4.205.91.17:57119] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ut.php"] [unique_id "aRdY-8fhZrb6EV4SvFuppAAAAhA"]
[Sat Nov 15 00:29:47.828464 2025] [:error] [pid 45908:tid 45953] [client 4.205.91.17:57163] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ut.php"] [unique_id "aRdY-2WG19mWwZX7KatPKAAAAA8"]
[Sat Nov 15 00:29:48.420050 2025] [:error] [pid 45995:tid 46008] [client 4.205.91.17:57188] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ut.php"] [unique_id "aRdY_MfhZrb6EV4SvFupqAAAAgg"]
[Sat Nov 15 00:29:49.078292 2025] [:error] [pid 45909:tid 45974] [client 4.205.91.17:57124] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ut.php"] [unique_id "aRdY_cZqItrYybG86kiElAAAAck"]
[Sat Nov 15 00:29:49.704404 2025] [:error] [pid 45907:tid 45916] [client 4.205.91.17:55025] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/inde.php"] [unique_id "aRdY_VAqmYxCpnT9gJFusgAAAUU"]
[Sat Nov 15 00:29:50.240602 2025] [:error] [pid 45995:tid 46007] [client 4.205.91.17:55024] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/inde.php"] [unique_id "aRdY_sfhZrb6EV4SvFupsQAAAgc"]
[Sat Nov 15 00:29:50.870630 2025] [:error] [pid 45995:tid 46024] [client 4.205.91.17:57093] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/inde.php"] [unique_id "aRdY_sfhZrb6EV4SvFuptAAAAhg"]
[Sat Nov 15 00:29:51.472731 2025] [:error] [pid 45995:tid 46020] [client 4.205.91.17:54990] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/inde.php"] [unique_id "aRdY_8fhZrb6EV4SvFuptQAAAhQ"]
[Sat Nov 15 00:29:52.064979 2025] [:error] [pid 45995:tid 46010] [client 4.205.91.17:47530] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/classgoto24.php"] [unique_id "aRdZAMfhZrb6EV4SvFupugAAAgo"]
[Sat Nov 15 00:29:52.623122 2025] [:error] [pid 45907:tid 45920] [client 4.205.91.17:54929] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/classgoto24.php"] [unique_id "aRdZAFAqmYxCpnT9gJFuugAAAUk"]
[Sat Nov 15 00:29:53.292245 2025] [:error] [pid 45909:tid 45978] [client 4.205.91.17:57192] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/classgoto24.php"] [unique_id "aRdZAcZqItrYybG86kiEmAAAAc0"]
[Sat Nov 15 00:29:53.886901 2025] [:error] [pid 45909:tid 45973] [client 4.205.91.17:57207] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/classgoto24.php"] [unique_id "aRdZAcZqItrYybG86kiEmwAAAcg"]
[Sat Nov 15 00:29:54.477215 2025] [:error] [pid 45908:tid 45953] [client 4.205.91.17:57187] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/thh.php"] [unique_id "aRdZAmWG19mWwZX7KatPLwAAAA8"]
[Sat Nov 15 00:29:55.151367 2025] [:error] [pid 45909:tid 45967] [client 4.205.91.17:47580] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/thh.php"] [unique_id "aRdZA8ZqItrYybG86kiEngAAAcI"]
[Sat Nov 15 00:29:55.599652 2025] [:error] [pid 45907:tid 45917] [client 4.205.91.17:57135] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/thh.php"] [unique_id "aRdZA1AqmYxCpnT9gJFuwQAAAUY"]
[Sat Nov 15 00:29:56.272604 2025] [:error] [pid 45907:tid 45916] [client 4.205.91.17:57185] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/thh.php"] [unique_id "aRdZBFAqmYxCpnT9gJFuxAAAAUU"]
[Sat Nov 15 00:29:56.949808 2025] [:error] [pid 45995:tid 46009] [client 4.205.91.17:57127] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fffff.php"] [unique_id "aRdZBMfhZrb6EV4SvFupygAAAgk"]
[Sat Nov 15 00:29:57.538357 2025] [:error] [pid 45907:tid 45934] [client 4.205.91.17:57144] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fffff.php"] [unique_id "aRdZBVAqmYxCpnT9gJFuxwAAAVc"]
[Sat Nov 15 00:29:58.262496 2025] [:error] [pid 45907:tid 45915] [client 4.205.91.17:57200] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fffff.php"] [unique_id "aRdZBlAqmYxCpnT9gJFuyAAAAUQ"]
[Sat Nov 15 00:29:59.068197 2025] [:error] [pid 45909:tid 45978] [client 4.205.91.17:47543] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fffff.php"] [unique_id "aRdZB8ZqItrYybG86kiEpQAAAc0"]
[Sat Nov 15 00:29:59.947024 2025] [:error] [pid 45909:tid 45967] [client 4.205.91.17:57212] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/indo.php"] [unique_id "aRdZB8ZqItrYybG86kiEpgAAAcI"]
[Sat Nov 15 00:30:00.489384 2025] [:error] [pid 45907:tid 45932] [client 4.205.91.17:57215] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/indo.php"] [unique_id "aRdZCFAqmYxCpnT9gJFuyQAAAVU"]
[Sat Nov 15 00:30:01.019638 2025] [:error] [pid 45907:tid 45920] [client 4.205.91.17:57204] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/indo.php"] [unique_id "aRdZCVAqmYxCpnT9gJFuzAAAAUk"]
[Sat Nov 15 00:30:01.689117 2025] [:error] [pid 45908:tid 45951] [client 4.205.91.17:57156] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/indo.php"] [unique_id "aRdZCWWG19mWwZX7KatPMwAAAA0"]
[Sat Nov 15 00:30:02.304467 2025] [:error] [pid 45995:tid 46002] [client 4.205.91.17:57157] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fileas.php"] [unique_id "aRdZCsfhZrb6EV4SvFup2AAAAgI"]
[Sat Nov 15 00:30:02.812451 2025] [:error] [pid 45995:tid 46024] [client 4.205.91.17:55007] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fileas.php"] [unique_id "aRdZCsfhZrb6EV4SvFup2wAAAhg"]
[Sat Nov 15 00:30:03.404460 2025] [:error] [pid 45907:tid 45924] [client 4.205.91.17:57197] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fileas.php"] [unique_id "aRdZC1AqmYxCpnT9gJFu0QAAAU0"]
[Sat Nov 15 00:30:03.875695 2025] [:error] [pid 45907:tid 45915] [client 4.205.91.17:57213] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fileas.php"] [unique_id "aRdZC1AqmYxCpnT9gJFu1AAAAUQ"]
[Sat Nov 15 00:30:04.327443 2025] [:error] [pid 45909:tid 45979] [client 4.205.91.17:57089] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/yellow.php"] [unique_id "aRdZDMZqItrYybG86kiErQAAAc4"]
[Sat Nov 15 00:30:05.061333 2025] [:error] [pid 45907:tid 45922] [client 4.205.91.17:55021] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/yellow.php"] [unique_id "aRdZDVAqmYxCpnT9gJFu1wAAAUs"]
[Sat Nov 15 00:30:05.666871 2025] [:error] [pid 45995:tid 46022] [client 4.205.91.17:54968] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/yellow.php"] [unique_id "aRdZDcfhZrb6EV4SvFup3wAAAhY"]
[Sat Nov 15 00:30:06.242736 2025] [:error] [pid 45908:tid 45942] [client 4.205.91.17:57145] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/yellow.php"] [unique_id "aRdZDmWG19mWwZX7KatPNgAAAAQ"]
[Sat Nov 15 00:30:06.951963 2025] [:error] [pid 45907:tid 45930] [client 4.205.91.17:47604] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wfile.php"] [unique_id "aRdZDlAqmYxCpnT9gJFu3QAAAVM"]
[Sat Nov 15 00:30:07.470867 2025] [:error] [pid 45995:tid 46021] [client 4.205.91.17:57153] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wfile.php"] [unique_id "aRdZD8fhZrb6EV4SvFup4QAAAhU"]
[Sat Nov 15 00:30:08.059425 2025] [:error] [pid 45909:tid 45989] [client 4.205.91.17:57131] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wfile.php"] [unique_id "aRdZEMZqItrYybG86kiEsQAAAdg"]
[Sat Nov 15 00:30:09.101503 2025] [:error] [pid 45908:tid 45951] [client 4.205.91.17:55012] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wfile.php"] [unique_id "aRdZEWWG19mWwZX7KatPPQAAAA0"]
[Sat Nov 15 00:30:10.012405 2025] [:error] [pid 45908:tid 45939] [client 4.205.91.17:54986] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class20.php"] [unique_id "aRdZEmWG19mWwZX7KatPQAAAAAE"]
[Sat Nov 15 00:30:10.609857 2025] [:error] [pid 45907:tid 45922] [client 4.205.91.17:57210] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class20.php"] [unique_id "aRdZElAqmYxCpnT9gJFu6QAAAUs"]
[Sat Nov 15 00:30:11.207808 2025] [:error] [pid 45908:tid 45943] [client 4.205.91.17:54918] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class20.php"] [unique_id "aRdZE2WG19mWwZX7KatPRAAAAAU"]
[Sat Nov 15 00:30:11.850675 2025] [:error] [pid 45907:tid 45913] [client 4.205.91.17:54987] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class20.php"] [unique_id "aRdZE1AqmYxCpnT9gJFu8AAAAUI"]
[Sat Nov 15 00:30:12.430712 2025] [:error] [pid 45909:tid 45976] [client 4.205.91.17:57148] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/build.php"] [unique_id "aRdZFMZqItrYybG86kiEtwAAAcs"]
[Sat Nov 15 00:30:13.512779 2025] [:error] [pid 45909:tid 45968] [client 4.205.91.17:54976] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/build.php"] [unique_id "aRdZFcZqItrYybG86kiEugAAAcM"]
[Sat Nov 15 00:30:14.187356 2025] [:error] [pid 45907:tid 45935] [client 4.205.91.17:57102] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/build.php"] [unique_id "aRdZFlAqmYxCpnT9gJFu-gAAAVg"]
[Sat Nov 15 00:30:14.803218 2025] [:error] [pid 45908:tid 45949] [client 4.205.91.17:55035] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/build.php"] [unique_id "aRdZFmWG19mWwZX7KatPUAAAAAs"]
[Sat Nov 15 00:30:15.722909 2025] [:error] [pid 45995:tid 46005] [client 4.205.91.17:54955] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/1.php"] [unique_id "aRdZF8fhZrb6EV4SvFup7AAAAgU"]
[Sat Nov 15 00:30:16.274949 2025] [proxy_fcgi:error] [pid 45907:tid 45929] [client 4.205.91.17:57159] AH01071: Got error 'Primary script unknown'
[Sat Nov 15 00:30:16.496210 2025] [proxy_fcgi:error] [pid 45907:tid 45933] [client 4.205.91.17:57159] AH01071: Got error 'Primary script unknown'
[Sat Nov 15 00:30:16.770846 2025] [proxy_fcgi:error] [pid 45907:tid 45919] [client 4.205.91.17:57159] AH01071: Got error 'Primary script unknown'
[Sat Nov 15 00:30:16.978036 2025] [proxy_fcgi:error] [pid 45907:tid 45921] [client 4.205.91.17:57159] AH01071: Got error 'Primary script unknown'
[Sat Nov 15 00:30:17.186599 2025] [proxy_fcgi:error] [pid 45907:tid 45935] [client 4.205.91.17:57159] AH01071: Got error 'Primary script unknown'
[Sat Nov 15 00:30:17.395159 2025] [proxy_fcgi:error] [pid 45907:tid 45926] [client 4.205.91.17:57159] AH01071: Got error 'Primary script unknown'
[Sat Nov 15 00:30:17.751787 2025] [proxy_fcgi:error] [pid 45907:tid 45931] [client 4.205.91.17:57159] AH01071: Got error 'Primary script unknown'
[Sat Nov 15 00:30:17.961643 2025] [proxy_fcgi:error] [pid 45907:tid 45914] [client 4.205.91.17:57159] AH01071: Got error 'Primary script unknown'
[Sat Nov 15 00:30:18.187542 2025] [proxy_fcgi:error] [pid 45907:tid 45920] [client 4.205.91.17:57159] AH01071: Got error 'Primary script unknown'
[Sat Nov 15 00:30:18.413567 2025] [proxy_fcgi:error] [pid 45907:tid 45930] [client 4.205.91.17:57159] AH01071: Got error 'Primary script unknown'
[Sat Nov 15 00:30:18.626714 2025] [proxy_fcgi:error] [pid 45907:tid 45911] [client 4.205.91.17:57159] AH01071: Got error 'Primary script unknown'
[Sat Nov 15 00:30:18.832828 2025] [:error] [pid 45907:tid 45932] [client 4.205.91.17:57159] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lock360.php"] [unique_id "aRdZGlAqmYxCpnT9gJFvEQAAAVU"]
[Sat Nov 15 00:30:19.526325 2025] [:error] [pid 45907:tid 45917] [client 4.205.91.17:57173] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lock360.php"] [unique_id "aRdZG1AqmYxCpnT9gJFvEwAAAUY"]
[Sat Nov 15 00:30:20.087947 2025] [:error] [pid 45908:tid 45957] [client 4.205.91.17:57109] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lock360.php"] [unique_id "aRdZHGWG19mWwZX7KatPWgAAABM"]
[Sat Nov 15 00:30:20.737943 2025] [:error] [pid 45908:tid 45944] [client 4.205.91.17:57170] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lock360.php"] [unique_id "aRdZHGWG19mWwZX7KatPXAAAAAY"]
[Sat Nov 15 00:30:21.348105 2025] [:error] [pid 45995:tid 46024] [client 4.205.91.17:54993] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/pp.php"] [unique_id "aRdZHcfhZrb6EV4SvFup-QAAAhg"]
[Sat Nov 15 00:30:21.898847 2025] [:error] [pid 45995:tid 46016] [client 4.205.91.17:57164] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/pp.php"] [unique_id "aRdZHcfhZrb6EV4SvFup-wAAAhA"]
[Sat Nov 15 00:30:22.524448 2025] [:error] [pid 45907:tid 45929] [client 4.205.91.17:57092] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/pp.php"] [unique_id "aRdZHlAqmYxCpnT9gJFvGwAAAVI"]
[Sat Nov 15 00:30:23.264627 2025] [:error] [pid 45995:tid 46020] [client 4.205.91.17:57183] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/pp.php"] [unique_id "aRdZH8fhZrb6EV4SvFup_QAAAhQ"]
[Sat Nov 15 00:30:23.876811 2025] [:error] [pid 45995:tid 46012] [client 4.205.91.17:57097] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/geck.php"] [unique_id "aRdZH8fhZrb6EV4SvFuqAAAAAgw"]
[Sat Nov 15 00:30:24.624187 2025] [:error] [pid 45908:tid 45943] [client 4.205.91.17:57125] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/geck.php"] [unique_id "aRdZIGWG19mWwZX7KatPYwAAAAU"]
[Sat Nov 15 00:30:25.434334 2025] [:error] [pid 45995:tid 46005] [client 4.205.91.17:57138] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/geck.php"] [unique_id "aRdZIcfhZrb6EV4SvFuqBQAAAgU"]
[Sat Nov 15 00:30:26.009632 2025] [:error] [pid 45908:tid 45960] [client 4.205.91.17:57095] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/geck.php"] [unique_id "aRdZImWG19mWwZX7KatPaAAAABY"]
[Sat Nov 15 00:30:26.687710 2025] [:error] [pid 45909:tid 45977] [client 4.205.91.17:54969] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gm.php"] [unique_id "aRdZIsZqItrYybG86kiE3wAAAcw"]
[Sat Nov 15 00:30:27.262322 2025] [:error] [pid 45995:tid 46004] [client 4.205.91.17:57168] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gm.php"] [unique_id "aRdZI8fhZrb6EV4SvFuqCgAAAgQ"]
[Sat Nov 15 00:30:28.344986 2025] [:error] [pid 45909:tid 45979] [client 4.205.91.17:47610] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gm.php"] [unique_id "aRdZJMZqItrYybG86kiE5QAAAc4"]
[Sat Nov 15 00:30:28.968415 2025] [:error] [pid 45909:tid 45971] [client 4.205.91.17:47558] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gm.php"] [unique_id "aRdZJMZqItrYybG86kiE5gAAAcY"]
[Sat Nov 15 00:30:29.538397 2025] [:error] [pid 45908:tid 45943] [client 4.205.91.17:57107] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file4.php"] [unique_id "aRdZJWWG19mWwZX7KatPcAAAAAU"]
[Sat Nov 15 00:30:30.714782 2025] [:error] [pid 45995:tid 46005] [client 4.205.91.17:55005] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file4.php"] [unique_id "aRdZJsfhZrb6EV4SvFuqDQAAAgU"]
[Sat Nov 15 00:30:31.214649 2025] [:error] [pid 45909:tid 45986] [client 4.205.91.17:57133] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file4.php"] [unique_id "aRdZJ8ZqItrYybG86kiE7wAAAdU"]
[Sat Nov 15 00:30:31.806770 2025] [:error] [pid 45995:tid 46017] [client 4.205.91.17:54980] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file4.php"] [unique_id "aRdZJ8fhZrb6EV4SvFuqEAAAAhE"]
[Sat Nov 15 00:30:32.495124 2025] [:error] [pid 45907:tid 45919] [client 4.205.91.17:54922] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/520.php"] [unique_id "aRdZKFAqmYxCpnT9gJFvLwAAAUg"]
[Sat Nov 15 00:30:33.334151 2025] [:error] [pid 45909:tid 45970] [client 4.205.91.17:57101] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/520.php"] [unique_id "aRdZKcZqItrYybG86kiFCAAAAcU"]
[Sat Nov 15 00:30:33.949209 2025] [:error] [pid 45907:tid 45935] [client 4.205.91.17:54984] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/520.php"] [unique_id "aRdZKVAqmYxCpnT9gJFvOAAAAVg"]
[Sat Nov 15 00:30:34.445240 2025] [:error] [pid 45907:tid 45913] [client 4.205.91.17:54914] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/520.php"] [unique_id "aRdZKlAqmYxCpnT9gJFvOgAAAUI"]
[Sat Nov 15 00:30:35.316085 2025] [:error] [pid 45995:tid 46019] [client 4.205.91.17:54943] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file18.php"] [unique_id "aRdZK8fhZrb6EV4SvFuqKwAAAhM"]
[Sat Nov 15 00:30:36.850918 2025] [:error] [pid 45909:tid 45981] [client 4.205.91.17:47529] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file18.php"] [unique_id "aRdZLMZqItrYybG86kiFGwAAAdA"]
[Sat Nov 15 00:30:37.515960 2025] [:error] [pid 45908:tid 45947] [client 4.205.91.17:57110] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file18.php"] [unique_id "aRdZLWWG19mWwZX7KatPggAAAAk"]
[Sat Nov 15 00:30:38.222091 2025] [:error] [pid 45995:tid 46001] [client 4.205.91.17:47593] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file18.php"] [unique_id "aRdZLsfhZrb6EV4SvFuqMgAAAgE"]
[Sat Nov 15 00:30:38.986665 2025] [:error] [pid 45908:tid 45953] [client 4.205.91.17:57126] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ffile.php"] [unique_id "aRdZLmWG19mWwZX7KatPhAAAAA8"]
[Sat Nov 15 00:30:39.502944 2025] [:error] [pid 45908:tid 45950] [client 4.205.91.17:54937] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ffile.php"] [unique_id "aRdZL2WG19mWwZX7KatPhQAAAAw"]
[Sat Nov 15 00:30:40.103619 2025] [:error] [pid 45907:tid 45931] [client 4.205.91.17:47553] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ffile.php"] [unique_id "aRdZMFAqmYxCpnT9gJFvPAAAAVQ"]
[Sat Nov 15 00:30:40.695643 2025] [:error] [pid 45908:tid 45956] [client 4.205.91.17:47490] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ffile.php"] [unique_id "aRdZMGWG19mWwZX7KatPiAAAABI"]
[Sat Nov 15 00:30:41.411699 2025] [:error] [pid 45908:tid 45939] [client 4.205.91.17:55004] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file7.php"] [unique_id "aRdZMWWG19mWwZX7KatPjAAAAAE"]
[Sat Nov 15 00:30:41.968402 2025] [:error] [pid 45908:tid 45942] [client 4.205.91.17:57203] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file7.php"] [unique_id "aRdZMWWG19mWwZX7KatPjQAAAAQ"]
[Sat Nov 15 00:30:42.638675 2025] [:error] [pid 45908:tid 45954] [client 4.205.91.17:54917] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file7.php"] [unique_id "aRdZMmWG19mWwZX7KatPkAAAABA"]
[Sat Nov 15 00:30:43.283048 2025] [:error] [pid 45909:tid 45981] [client 4.205.91.17:54938] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file7.php"] [unique_id "aRdZM8ZqItrYybG86kiFJgAAAdA"]
[Sat Nov 15 00:30:43.845704 2025] [:error] [pid 45907:tid 45913] [client 4.205.91.17:47555] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aaa.php"] [unique_id "aRdZM1AqmYxCpnT9gJFvPwAAAUI"]
[Sat Nov 15 00:30:44.473255 2025] [:error] [pid 45908:tid 45944] [client 4.205.91.17:54980] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aaa.php"] [unique_id "aRdZNGWG19mWwZX7KatPlAAAAAY"]
[Sat Nov 15 00:30:44.931718 2025] [:error] [pid 45908:tid 45959] [client 4.205.91.17:47505] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aaa.php"] [unique_id "aRdZNGWG19mWwZX7KatPlgAAABU"]
[Sat Nov 15 00:30:45.753782 2025] [:error] [pid 45907:tid 45916] [client 4.205.91.17:47563] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aaa.php"] [unique_id "aRdZNVAqmYxCpnT9gJFvRAAAAUU"]
[Sat Nov 15 00:30:46.488086 2025] [:error] [pid 45995:tid 46005] [client 4.205.91.17:57181] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vee.php"] [unique_id "aRdZNsfhZrb6EV4SvFuqOQAAAgU"]
[Sat Nov 15 00:30:47.542443 2025] [:error] [pid 45995:tid 46003] [client 4.205.91.17:55023] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vee.php"] [unique_id "aRdZN8fhZrb6EV4SvFuqOwAAAgM"]
[Sat Nov 15 00:30:49.631903 2025] [:error] [pid 45909:tid 45972] [client 4.205.91.17:57104] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vee.php"] [unique_id "aRdZOcZqItrYybG86kiFKAAAAcc"]
[Sat Nov 15 00:30:50.773002 2025] [:error] [pid 45995:tid 46021] [client 4.205.91.17:57161] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vee.php"] [unique_id "aRdZOsfhZrb6EV4SvFuqQgAAAhU"]
[Sat Nov 15 00:30:53.321933 2025] [:error] [pid 45908:tid 45951] [client 4.205.91.17:54912] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/efile.php"] [unique_id "aRdZPWWG19mWwZX7KatPowAAAA0"]
[Sat Nov 15 00:30:55.023165 2025] [:error] [pid 45909:tid 45986] [client 4.205.91.17:57191] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/efile.php"] [unique_id "aRdZP8ZqItrYybG86kiFLwAAAdU"]
[Sat Nov 15 00:30:56.174597 2025] [:error] [pid 45909:tid 45968] [client 4.205.91.17:47515] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/efile.php"] [unique_id "aRdZQMZqItrYybG86kiFMgAAAcM"]
[Sat Nov 15 00:30:57.048839 2025] [:error] [pid 45907:tid 45914] [client 4.205.91.17:57201] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/efile.php"] [unique_id "aRdZQVAqmYxCpnT9gJFvUgAAAUM"]
[Sat Nov 15 00:30:57.755488 2025] [:error] [pid 45995:tid 46010] [client 4.205.91.17:55001] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/afile.php"] [unique_id "aRdZQcfhZrb6EV4SvFuqUgAAAgo"]
[Sat Nov 15 00:30:58.652653 2025] [:error] [pid 45907:tid 45930] [client 4.205.91.17:54995] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/afile.php"] [unique_id "aRdZQlAqmYxCpnT9gJFvVAAAAVM"]
[Sat Nov 15 00:30:59.473508 2025] [:error] [pid 45908:tid 45942] [client 4.205.91.17:46021] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/afile.php"] [unique_id "aRdZQ2WG19mWwZX7KatPsQAAAAQ"]
[Sat Nov 15 00:31:00.021632 2025] [:error] [pid 45907:tid 45934] [client 4.205.91.17:46034] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/afile.php"] [unique_id "aRdZRFAqmYxCpnT9gJFvVgAAAVc"]
[Sat Nov 15 00:31:00.805860 2025] [:error] [pid 45995:tid 46013] [client 4.205.91.17:57195] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f35.php"] [unique_id "aRdZRMfhZrb6EV4SvFuqXgAAAg0"]
[Sat Nov 15 00:31:01.565174 2025] [:error] [pid 45909:tid 45965] [client 4.205.91.17:55030] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f35.php"] [unique_id "aRdZRcZqItrYybG86kiFOwAAAcA"]
[Sat Nov 15 00:31:02.396134 2025] [:error] [pid 45907:tid 45918] [client 4.205.91.17:55029] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f35.php"] [unique_id "aRdZRlAqmYxCpnT9gJFvWQAAAUc"]
[Sat Nov 15 00:31:03.761308 2025] [:error] [pid 45909:tid 45970] [client 4.205.91.17:57121] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f35.php"] [unique_id "aRdZR8ZqItrYybG86kiFQQAAAcU"]
[Sat Nov 15 00:31:04.775890 2025] [:error] [pid 45995:tid 46002] [client 4.205.91.17:55011] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/goods.php"] [unique_id "aRdZSMfhZrb6EV4SvFuqaAAAAgI"]
[Sat Nov 15 00:31:05.848165 2025] [:error] [pid 45995:tid 46011] [client 4.205.91.17:47556] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/goods.php"] [unique_id "aRdZScfhZrb6EV4SvFuqbgAAAgs"]
[Sat Nov 15 00:31:06.648291 2025] [:error] [pid 45907:tid 45913] [client 4.205.91.17:57136] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/goods.php"] [unique_id "aRdZSlAqmYxCpnT9gJFvXQAAAUI"]
[Sat Nov 15 00:31:08.559384 2025] [:error] [pid 45995:tid 46023] [client 4.205.91.17:46039] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/goods.php"] [unique_id "aRdZTMfhZrb6EV4SvFuqcgAAAhc"]
[Sat Nov 15 00:31:10.889428 2025] [:error] [pid 45909:tid 45980] [client 4.205.91.17:47504] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/enclas.php"] [unique_id "aRdZTsZqItrYybG86kiFaQAAAc8"]
[Sat Nov 15 00:31:13.421456 2025] [:error] [pid 45995:tid 46010] [client 4.205.91.17:57186] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/enclas.php"] [unique_id "aRdZUcfhZrb6EV4SvFuqewAAAgo"]
[Sat Nov 15 00:31:14.563227 2025] [:error] [pid 45995:tid 46005] [client 4.205.91.17:55027] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/enclas.php"] [unique_id "aRdZUsfhZrb6EV4SvFuqgQAAAgU"]
[Sat Nov 15 00:31:15.698528 2025] [:error] [pid 45995:tid 46007] [client 4.205.91.17:54994] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/enclas.php"] [unique_id "aRdZU8fhZrb6EV4SvFuqhAAAAgc"]
[Sat Nov 15 00:31:19.302685 2025] [proxy_fcgi:error] [pid 45907:tid 45921] [client 4.205.91.17:54977] AH01071: Got error 'Primary script unknown'
[Sat Nov 15 00:31:19.747174 2025] [proxy_fcgi:error] [pid 45907:tid 45931] [client 4.205.91.17:54977] AH01071: Got error 'Primary script unknown'
[Sat Nov 15 00:31:19.983615 2025] [proxy_fcgi:error] [pid 45907:tid 45935] [client 4.205.91.17:54977] AH01071: Got error 'Primary script unknown'
[Sat Nov 15 00:31:20.411019 2025] [proxy_fcgi:error] [pid 45907:tid 45934] [client 4.205.91.17:54977] AH01071: Got error 'Primary script unknown'
[Sat Nov 15 00:31:20.619928 2025] [proxy_fcgi:error] [pid 45907:tid 45912] [client 4.205.91.17:54977] AH01071: Got error 'Primary script unknown'
[Sat Nov 15 00:31:20.845032 2025] [proxy_fcgi:error] [pid 45907:tid 45933] [client 4.205.91.17:54977] AH01071: Got error 'Primary script unknown'
[Sat Nov 15 00:31:21.055614 2025] [proxy_fcgi:error] [pid 45907:tid 45920] [client 4.205.91.17:54977] AH01071: Got error 'Primary script unknown'
[Sat Nov 15 00:31:21.271330 2025] [proxy_fcgi:error] [pid 45907:tid 45911] [client 4.205.91.17:54977] AH01071: Got error 'Primary script unknown'
[Sat Nov 15 00:31:21.506504 2025] [proxy_fcgi:error] [pid 45907:tid 45921] [client 4.205.91.17:54977] AH01071: Got error 'Primary script unknown'
[Sat Nov 15 00:31:21.711902 2025] [:error] [pid 45907:tid 45919] [client 4.205.91.17:54977] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aj.php"] [unique_id "aRdZWVAqmYxCpnT9gJFvhAAAAUg"]
[Sat Nov 15 00:31:23.138023 2025] [:error] [pid 45908:tid 45944] [client 4.205.91.17:47591] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aj.php"] [unique_id "aRdZW2WG19mWwZX7KatP5gAAAAY"]
[Sat Nov 15 00:31:25.373692 2025] [:error] [pid 45995:tid 46012] [client 4.205.91.17:57182] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aj.php"] [unique_id "aRdZXcfhZrb6EV4SvFuqoQAAAgw"]
[Sat Nov 15 00:31:28.595493 2025] [:error] [pid 45995:tid 46007] [client 4.205.91.17:47594] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aj.php"] [unique_id "aRdZYMfhZrb6EV4SvFuqqwAAAgc"]
[Sat Nov 15 00:31:30.681077 2025] [:error] [pid 45907:tid 45934] [client 4.205.91.17:47507] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/opts.php"] [unique_id "aRdZYlAqmYxCpnT9gJFvkwAAAVc"]
[Sat Nov 15 00:31:31.672083 2025] [:error] [pid 45908:tid 45943] [client 4.205.91.17:57169] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/opts.php"] [unique_id "aRdZY2WG19mWwZX7KatP_QAAAAU"]
[Sat Nov 15 00:31:32.536359 2025] [:error] [pid 45907:tid 45919] [client 4.205.91.17:54997] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/opts.php"] [unique_id "aRdZZFAqmYxCpnT9gJFvmQAAAUg"]
[Sat Nov 15 00:31:33.566696 2025] [:error] [pid 45995:tid 46005] [client 4.205.91.17:47489] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/opts.php"] [unique_id "aRdZZcfhZrb6EV4SvFuqtQAAAgU"]
[Sat Nov 15 00:31:34.885091 2025] [:error] [pid 45907:tid 45927] [client 4.205.91.17:57100] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/filer.php"] [unique_id "aRdZZlAqmYxCpnT9gJFvnQAAAVA"]
[Sat Nov 15 00:31:35.386645 2025] [:error] [pid 45909:tid 45984] [client 4.205.91.17:57088] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/filer.php"] [unique_id "aRdZZ8ZqItrYybG86kiFjAAAAdM"]
[Sat Nov 15 00:31:35.976467 2025] [:error] [pid 45907:tid 45911] [client 4.205.91.17:47560] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/filer.php"] [unique_id "aRdZZ1AqmYxCpnT9gJFvnwAAAUA"]
[Sat Nov 15 00:31:36.947175 2025] [:error] [pid 45995:tid 46000] [client 4.205.91.17:54970] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/filer.php"] [unique_id "aRdZaMfhZrb6EV4SvFuquwAAAgA"]
[Sat Nov 15 00:31:37.676866 2025] [:error] [pid 45908:tid 45953] [client 4.205.91.17:57176] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lites.php"] [unique_id "aRdZaWWG19mWwZX7KatQCwAAAA8"]
[Sat Nov 15 00:31:38.835263 2025] [:error] [pid 45909:tid 45987] [client 4.205.91.17:55014] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lites.php"] [unique_id "aRdZasZqItrYybG86kiFjgAAAdY"]
[Sat Nov 15 00:31:39.618199 2025] [:error] [pid 45908:tid 45938] [client 4.205.91.17:55008] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lites.php"] [unique_id "aRdZa2WG19mWwZX7KatQEQAAAAA"]
[Sat Nov 15 00:31:40.319753 2025] [:error] [pid 45995:tid 46015] [client 4.205.91.17:57174] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lites.php"] [unique_id "aRdZbMfhZrb6EV4SvFuqxAAAAg8"]
[Sat Nov 15 00:31:41.225200 2025] [:error] [pid 45907:tid 45932] [client 4.205.91.17:47532] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/0x.php"] [unique_id "aRdZbVAqmYxCpnT9gJFvpwAAAVU"]
[Sat Nov 15 00:31:42.173507 2025] [:error] [pid 45907:tid 45921] [client 4.205.91.17:55038] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/0x.php"] [unique_id "aRdZblAqmYxCpnT9gJFvqQAAAUo"]
[Sat Nov 15 00:31:42.918608 2025] [:error] [pid 45908:tid 45939] [client 4.205.91.17:54996] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/0x.php"] [unique_id "aRdZbmWG19mWwZX7KatQFgAAAAE"]
[Sat Nov 15 00:31:43.584764 2025] [:error] [pid 45995:tid 46013] [client 4.205.91.17:47495] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/0x.php"] [unique_id "aRdZb8fhZrb6EV4SvFuqyQAAAg0"]
[Sat Nov 15 00:31:44.252127 2025] [:error] [pid 45995:tid 46001] [client 4.205.91.17:57111] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bless3.php"] [unique_id "aRdZcMfhZrb6EV4SvFuqywAAAgE"]
[Sat Nov 15 00:31:44.772822 2025] [:error] [pid 45907:tid 45933] [client 4.205.91.17:47607] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bless3.php"] [unique_id "aRdZcFAqmYxCpnT9gJFvrgAAAVY"]
[Sat Nov 15 00:31:45.670440 2025] [:error] [pid 45995:tid 46004] [client 4.205.91.17:54953] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bless3.php"] [unique_id "aRdZccfhZrb6EV4SvFuqzgAAAgQ"]
[Sat Nov 15 00:31:46.564531 2025] [:error] [pid 45907:tid 45916] [client 4.205.91.17:57196] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bless3.php"] [unique_id "aRdZclAqmYxCpnT9gJFvsgAAAUU"]
[Sat Nov 15 00:31:47.128522 2025] [:error] [pid 45907:tid 45931] [client 4.205.91.17:57099] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wsd.php"] [unique_id "aRdZc1AqmYxCpnT9gJFvtQAAAVQ"]
[Sat Nov 15 00:31:47.874585 2025] [:error] [pid 45907:tid 45912] [client 4.205.91.17:54991] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wsd.php"] [unique_id "aRdZc1AqmYxCpnT9gJFvuAAAAUE"]
[Sat Nov 15 00:31:48.367259 2025] [:error] [pid 45995:tid 46008] [client 4.205.91.17:47569] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wsd.php"] [unique_id "aRdZdMfhZrb6EV4SvFuq0QAAAgg"]
[Sat Nov 15 00:31:48.890469 2025] [:error] [pid 45909:tid 45986] [client 4.205.91.17:47600] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wsd.php"] [unique_id "aRdZdMZqItrYybG86kiFmAAAAdU"]
[Sat Nov 15 00:31:49.849094 2025] [:error] [pid 45995:tid 46017] [client 4.205.91.17:54921] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f6.php"] [unique_id "aRdZdcfhZrb6EV4SvFuq1AAAAhE"]
[Sat Nov 15 00:31:50.522013 2025] [:error] [pid 45907:tid 45911] [client 4.205.91.17:47613] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f6.php"] [unique_id "aRdZdlAqmYxCpnT9gJFvuwAAAUA"]
[Sat Nov 15 00:31:51.345517 2025] [:error] [pid 45995:tid 46003] [client 4.205.91.17:55037] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f6.php"] [unique_id "aRdZd8fhZrb6EV4SvFuq2gAAAgM"]
[Sat Nov 15 00:31:52.247803 2025] [:error] [pid 45907:tid 45913] [client 4.205.91.17:57137] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f6.php"] [unique_id "aRdZeFAqmYxCpnT9gJFvvAAAAUI"]
[Sat Nov 15 00:31:52.861958 2025] [:error] [pid 45907:tid 45930] [client 4.205.91.17:46046] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/he.php"] [unique_id "aRdZeFAqmYxCpnT9gJFvvQAAAVM"]
[Sat Nov 15 00:31:53.600520 2025] [:error] [pid 45909:tid 45968] [client 4.205.91.17:55006] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/he.php"] [unique_id "aRdZecZqItrYybG86kiFoQAAAcM"]
[Sat Nov 15 00:31:54.061097 2025] [:error] [pid 45907:tid 45927] [client 4.205.91.17:55015] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/he.php"] [unique_id "aRdZelAqmYxCpnT9gJFvwAAAAVA"]
[Sat Nov 15 00:31:54.581860 2025] [:error] [pid 45907:tid 45932] [client 4.205.91.17:57118] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/he.php"] [unique_id "aRdZelAqmYxCpnT9gJFvwgAAAVU"]
[Sat Nov 15 00:31:55.211136 2025] [:error] [pid 45907:tid 45917] [client 4.205.91.17:54933] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aves.php"] [unique_id "aRdZe1AqmYxCpnT9gJFvxQAAAUY"]
[Sat Nov 15 00:31:56.105765 2025] [:error] [pid 45995:tid 46015] [client 4.205.91.17:45163] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aves.php"] [unique_id "aRdZfMfhZrb6EV4SvFuq3QAAAg8"]
[Sat Nov 15 00:31:56.742395 2025] [:error] [pid 45995:tid 46005] [client 4.205.91.17:57167] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aves.php"] [unique_id "aRdZfMfhZrb6EV4SvFuq3gAAAgU"]
[Sat Nov 15 00:31:57.854065 2025] [:error] [pid 45907:tid 45926] [client 4.205.91.17:57172] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aves.php"] [unique_id "aRdZfVAqmYxCpnT9gJFvyQAAAU8"]
[Sat Nov 15 00:31:58.685590 2025] [:error] [pid 45909:tid 45973] [client 4.205.91.17:47590] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/acme-challenge/about.php"] [unique_id "aRdZfsZqItrYybG86kiFrQAAAcg"]
[Sat Nov 15 00:31:59.200054 2025] [:error] [pid 45907:tid 45919] [client 4.205.91.17:57155] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/acme-challenge/about.php"] [unique_id "aRdZf1AqmYxCpnT9gJFvywAAAUg"]
[Sat Nov 15 00:31:59.674509 2025] [:error] [pid 45995:tid 46012] [client 4.205.91.17:57140] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/acme-challenge/about.php"] [unique_id "aRdZf8fhZrb6EV4SvFuq4gAAAgw"]
[Sat Nov 15 00:32:00.320764 2025] [:error] [pid 45908:tid 45944] [client 4.205.91.17:57122] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/acme-challenge/about.php"] [unique_id "aRdZgGWG19mWwZX7KatQLQAAAAY"]
[Sat Nov 15 00:32:01.234047 2025] [:error] [pid 45907:tid 45922] [client 4.205.91.17:47492] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gorila.php"] [unique_id "aRdZgVAqmYxCpnT9gJFvzQAAAUs"]
[Sat Nov 15 00:32:02.086366 2025] [:error] [pid 45909:tid 45984] [client 4.205.91.17:46063] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gorila.php"] [unique_id "aRdZgsZqItrYybG86kiFtAAAAdM"]
[Sat Nov 15 00:32:02.680009 2025] [:error] [pid 45907:tid 45912] [client 4.205.91.17:54979] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gorila.php"] [unique_id "aRdZglAqmYxCpnT9gJFv0AAAAUE"]
[Sat Nov 15 00:32:03.283649 2025] [:error] [pid 45909:tid 45973] [client 4.205.91.17:57202] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gorila.php"] [unique_id "aRdZg8ZqItrYybG86kiFtQAAAcg"]
[Sat Nov 15 00:32:04.009174 2025] [:error] [pid 45909:tid 45978] [client 4.205.91.17:47524] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vanta.php"] [unique_id "aRdZhMZqItrYybG86kiFtgAAAc0"]
[Sat Nov 15 00:32:04.592506 2025] [:error] [pid 45909:tid 45966] [client 4.205.91.17:54978] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vanta.php"] [unique_id "aRdZhMZqItrYybG86kiFuAAAAcE"]
[Sat Nov 15 00:32:05.224070 2025] [:error] [pid 45995:tid 46004] [client 4.205.91.17:54945] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vanta.php"] [unique_id "aRdZhcfhZrb6EV4SvFuq6gAAAgQ"]
[Sat Nov 15 00:32:06.394654 2025] [:error] [pid 45907:tid 45921] [client 4.205.91.17:47564] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vanta.php"] [unique_id "aRdZhlAqmYxCpnT9gJFv1wAAAUo"]
[Sat Nov 15 00:32:07.072470 2025] [:error] [pid 45907:tid 45933] [client 4.205.91.17:47503] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sh3ll.php"] [unique_id "aRdZh1AqmYxCpnT9gJFv2wAAAVY"]
[Sat Nov 15 00:32:07.769325 2025] [:error] [pid 45995:tid 46024] [client 4.205.91.17:57142] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sh3ll.php"] [unique_id "aRdZh8fhZrb6EV4SvFuq7QAAAhg"]
[Sat Nov 15 00:32:08.512991 2025] [:error] [pid 45907:tid 45926] [client 4.205.91.17:55039] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sh3ll.php"] [unique_id "aRdZiFAqmYxCpnT9gJFv3AAAAU8"]
[Sat Nov 15 00:32:09.563060 2025] [:error] [pid 45909:tid 45978] [client 4.205.91.17:54965] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sh3ll.php"] [unique_id "aRdZicZqItrYybG86kiFvQAAAc0"]
[Sat Nov 15 00:32:10.242073 2025] [:error] [pid 45909:tid 45987] [client 4.205.91.17:47571] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cabs.php"] [unique_id "aRdZisZqItrYybG86kiFwQAAAdY"]
[Sat Nov 15 00:32:10.688976 2025] [:error] [pid 45909:tid 45971] [client 4.205.91.17:57143] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cabs.php"] [unique_id "aRdZisZqItrYybG86kiFxAAAAcY"]
[Sat Nov 15 00:32:11.302854 2025] [:error] [pid 45907:tid 45914] [client 4.205.91.17:57103] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cabs.php"] [unique_id "aRdZi1AqmYxCpnT9gJFv4AAAAUM"]
[Sat Nov 15 00:32:12.242742 2025] [:error] [pid 45909:tid 45973] [client 4.205.91.17:57090] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cabs.php"] [unique_id "aRdZjMZqItrYybG86kiFxgAAAcg"]
[Sat Nov 15 00:32:12.881347 2025] [:error] [pid 45907:tid 45925] [client 4.205.91.17:54925] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/filesss.php"] [unique_id "aRdZjFAqmYxCpnT9gJFv4QAAAU4"]
[Sat Nov 15 00:32:13.690101 2025] [:error] [pid 45907:tid 45932] [client 4.205.91.17:55031] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/filesss.php"] [unique_id "aRdZjVAqmYxCpnT9gJFv4gAAAVU"]
[Sat Nov 15 00:32:14.559941 2025] [:error] [pid 45995:tid 46021] [client 4.205.91.17:55020] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/filesss.php"] [unique_id "aRdZjsfhZrb6EV4SvFuq_AAAAhU"]
[Sat Nov 15 00:32:15.047334 2025] [:error] [pid 45909:tid 45970] [client 4.205.91.17:54936] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/filesss.php"] [unique_id "aRdZj8ZqItrYybG86kiFxwAAAcU"]
[Sat Nov 15 00:32:15.706658 2025] [:error] [pid 45908:tid 45955] [client 4.205.91.17:54971] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-aaa.php"] [unique_id "aRdZj2WG19mWwZX7KatQQAAAABE"]
[Sat Nov 15 00:32:16.164786 2025] [:error] [pid 45995:tid 46007] [client 4.205.91.17:54913] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-aaa.php"] [unique_id "aRdZkMfhZrb6EV4SvFurAgAAAgc"]
[Sat Nov 15 00:32:16.952072 2025] [:error] [pid 45995:tid 46006] [client 4.205.91.17:54923] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-aaa.php"] [unique_id "aRdZkMfhZrb6EV4SvFurBAAAAgY"]
[Sat Nov 15 00:32:17.713707 2025] [:error] [pid 45908:tid 45941] [client 4.205.91.17:47601] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-aaa.php"] [unique_id "aRdZkWWG19mWwZX7KatQRwAAAAM"]
[Sat Nov 15 00:32:18.366210 2025] [:error] [pid 45909:tid 45980] [client 4.205.91.17:47545] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/css.php"] [unique_id "aRdZksZqItrYybG86kiFzgAAAc8"]
[Sat Nov 15 00:32:19.007800 2025] [:error] [pid 45907:tid 45914] [client 4.205.91.17:54959] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/css.php"] [unique_id "aRdZk1AqmYxCpnT9gJFv6gAAAUM"]
[Sat Nov 15 00:32:19.634151 2025] [:error] [pid 45908:tid 45944] [client 4.205.91.17:46016] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/css.php"] [unique_id "aRdZk2WG19mWwZX7KatQSAAAAAY"]
[Sat Nov 15 00:32:20.099645 2025] [:error] [pid 45908:tid 45958] [client 4.205.91.17:54966] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/css.php"] [unique_id "aRdZlGWG19mWwZX7KatQSQAAABQ"]
[Sat Nov 15 00:32:20.724358 2025] [:error] [pid 45908:tid 45938] [client 4.205.91.17:54998] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aRdZlGWG19mWwZX7KatQSwAAAAA"]
[Sat Nov 15 00:32:22.688448 2025] [proxy_fcgi:error] [pid 45907:tid 45915] [client 4.205.91.17:54960] AH01071: Got error 'Primary script unknown'
[Sat Nov 15 00:32:23.259347 2025] [proxy_fcgi:error] [pid 45907:tid 45929] [client 4.205.91.17:54960] AH01071: Got error 'Primary script unknown'
[Sat Nov 15 00:32:23.472592 2025] [:error] [pid 45907:tid 45935] [client 4.205.91.17:54960] [client 4.205.91.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dwelectservices.com.au"] [uri "/fm.php"] [unique_id "aRdZl1AqmYxCpnT9gJFv8gAAAVg"]
[Sat Nov 15 00:32:24.158386 2025] [proxy_fcgi:error] [pid 45908:tid 45944] [client 4.205.91.17:54992] AH01071: Got error 'Primary script unknown'
[Sat Nov 15 00:32:24.367477 2025] [proxy_fcgi:error] [pid 45908:tid 45958] [client 4.205.91.17:54992] AH01071: Got error 'Primary script unknown'
[Sat Nov 15 00:32:24.579173 2025] [proxy_fcgi:error] [pid 45908:tid 45955] [client 4.205.91.17:54992] AH01071: Got error 'Primary script unknown'
[Sat Nov 15 00:32:24.788825 2025] [proxy_fcgi:error] [pid 45908:tid 45951] [client 4.205.91.17:54992] AH01071: Got error 'Primary script unknown'
[Sat Nov 15 00:32:25.000141 2025] [proxy_fcgi:error] [pid 45908:tid 45947] [client 4.205.91.17:54992] AH01071: Got error 'Primary script unknown'
[Sat Nov 15 00:32:25.211687 2025] [proxy_fcgi:error] [pid 45908:tid 45956] [client 4.205.91.17:54992] AH01071: Got error 'Primary script unknown'
[Sat Nov 15 00:32:25.422602 2025] [proxy_fcgi:error] [pid 45908:tid 45949] [client 4.205.91.17:54992] AH01071: Got error 'Primary script unknown'
[Sat Nov 15 00:32:25.631539 2025] [proxy_fcgi:error] [pid 45908:tid 45939] [client 4.205.91.17:54992] AH01071: Got error 'Primary script unknown'
[Sat Nov 15 00:32:25.842207 2025] [proxy_fcgi:error] [pid 45908:tid 45950] [client 4.205.91.17:54992] AH01071: Got error 'Primary script unknown'
[Sat Nov 15 00:32:26.065565 2025] [:error] [pid 45908:tid 45952] [client 4.205.91.17:54992] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/goat1.php"] [unique_id "aRdZmmWG19mWwZX7KatQYAAAAA4"]
[Sat Nov 15 00:32:26.561636 2025] [:error] [pid 45909:tid 45967] [client 4.205.91.17:57209] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/goat1.php"] [unique_id "aRdZmsZqItrYybG86kiF2wAAAcI"]
[Sat Nov 15 00:32:27.160403 2025] [:error] [pid 45995:tid 46009] [client 4.205.91.17:55026] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/goat1.php"] [unique_id "aRdZm8fhZrb6EV4SvFurGgAAAgk"]
[Sat Nov 15 00:32:27.880312 2025] [:error] [pid 45908:tid 45949] [client 4.205.91.17:46049] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/goat1.php"] [unique_id "aRdZm2WG19mWwZX7KatQZQAAAAs"]
[Sat Nov 15 00:32:29.078039 2025] [:error] [pid 45908:tid 45943] [client 4.205.91.17:55017] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lock.php"] [unique_id "aRdZnWWG19mWwZX7KatQawAAAAU"]
[Sat Nov 15 00:32:29.547092 2025] [:error] [pid 45907:tid 45917] [client 4.205.91.17:54939] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lock.php"] [unique_id "aRdZnVAqmYxCpnT9gJFv-AAAAUY"]
[Sat Nov 15 00:32:30.020103 2025] [:error] [pid 45907:tid 45926] [client 4.205.91.17:54951] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lock.php"] [unique_id "aRdZnlAqmYxCpnT9gJFv-QAAAU8"]
[Sat Nov 15 00:32:30.628636 2025] [:error] [pid 45995:tid 46004] [client 4.205.91.17:54942] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lock.php"] [unique_id "aRdZnsfhZrb6EV4SvFurHgAAAgQ"]
[Sat Nov 15 00:32:31.336824 2025] [:error] [pid 45995:tid 46020] [client 4.205.91.17:47542] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cong.php"] [unique_id "aRdZn8fhZrb6EV4SvFurJgAAAhQ"]
[Sat Nov 15 00:32:31.887869 2025] [:error] [pid 45907:tid 45935] [client 4.205.91.17:54920] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cong.php"] [unique_id "aRdZn1AqmYxCpnT9gJFv-wAAAVg"]
[Sat Nov 15 00:32:32.562132 2025] [:error] [pid 45908:tid 45940] [client 4.205.91.17:47537] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cong.php"] [unique_id "aRdZoGWG19mWwZX7KatQjQAAAAI"]
[Sat Nov 15 00:32:33.337749 2025] [:error] [pid 45908:tid 45956] [client 4.205.91.17:55016] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cong.php"] [unique_id "aRdZoWWG19mWwZX7KatQlgAAABI"]
[Sat Nov 15 00:32:33.890128 2025] [:error] [pid 45909:tid 45967] [client 4.205.91.17:46028] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/i1.php"] [unique_id "aRdZocZqItrYybG86kiF4QAAAcI"]
[Sat Nov 15 00:32:34.467544 2025] [:error] [pid 45909:tid 45965] [client 4.205.91.17:57199] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/i1.php"] [unique_id "aRdZosZqItrYybG86kiF4wAAAcA"]
[Sat Nov 15 00:32:35.105785 2025] [:error] [pid 45995:tid 46013] [client 4.205.91.17:47552] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/i1.php"] [unique_id "aRdZo8fhZrb6EV4SvFurQgAAAg0"]
[Sat Nov 15 00:32:35.645574 2025] [:error] [pid 45909:tid 45979] [client 4.205.91.17:54957] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/i1.php"] [unique_id "aRdZo8ZqItrYybG86kiF5AAAAc4"]
[Sat Nov 15 00:32:36.412796 2025] [:error] [pid 45908:tid 45959] [client 4.205.91.17:47592] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/thai.php"] [unique_id "aRdZpGWG19mWwZX7KatQtAAAABU"]
[Sat Nov 15 00:32:37.018748 2025] [:error] [pid 45995:tid 46010] [client 4.205.91.17:54989] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/thai.php"] [unique_id "aRdZpcfhZrb6EV4SvFurTwAAAgo"]
[Sat Nov 15 00:32:37.533226 2025] [:error] [pid 45908:tid 45958] [client 4.205.91.17:55032] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/thai.php"] [unique_id "aRdZpWWG19mWwZX7KatQvQAAABQ"]
[Sat Nov 15 00:32:38.128578 2025] [:error] [pid 45907:tid 45934] [client 4.205.91.17:47577] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/thai.php"] [unique_id "aRdZplAqmYxCpnT9gJFwCAAAAVc"]
[Sat Nov 15 20:16:29.722520 2025] [:error] [pid 27909:tid 27924] [client 45.138.16.215:57683] [client 45.138.16.215] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/postnews.php"] [unique_id "aRhvHSTfZ6B57n8HepU8YgAAAAs"]
[Sat Nov 15 20:16:30.289843 2025] [:error] [pid 20346:tid 20372] [client 45.138.16.215:57775] [client 45.138.16.215] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-content/postnews.php"] [unique_id "aRhvHp7hsydZdIoVTltK5QAAAxc"]
[Sat Nov 15 20:16:30.824407 2025] [:error] [pid 22765:tid 22777] [client 45.138.16.215:57863] [client 45.138.16.215] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/postnews.php"] [unique_id "aRhvHqbrQzjuZmPIWDb9EwAAAoc"]
[Sat Nov 15 20:26:25.765635 2025] [:error] [pid 22765:tid 22790] [client 45.134.79.103:62931] [client 45.134.79.103] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.134.79.103, incrementing ddos counter"] [hostname "dwelectservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aRhxcabrQzjuZmPIWDb-dQAAApQ"]
[Sat Nov 15 20:26:25.776533 2025] [proxy_fcgi:error] [pid 22765:tid 22790] [client 45.134.79.103:62931] AH01071: Got error 'Primary script unknown'
[Sat Nov 15 20:26:26.102266 2025] [:error] [pid 22765:tid 22792] [client 45.134.79.103:62931] [client 45.134.79.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/"] [unique_id "aRhxcqbrQzjuZmPIWDb-eQAAApY"]
[Sat Nov 15 20:26:26.743804 2025] [:error] [pid 27911:tid 27989] [client 45.134.79.103:63562] [client 45.134.79.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/blog/wp-includes/wlwmanifest.xml"] [unique_id "aRhxcsGzUdrhGBIfiKR15wAAAJU"]
[Sat Nov 15 20:26:27.377564 2025] [:error] [pid 19961:tid 20011] [client 45.134.79.103:63829] [client 45.134.79.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "aRhxczar7Si-84EApVSFmAAAAdI"]
[Sat Nov 15 20:26:28.020338 2025] [:error] [pid 27997:tid 28007] [client 45.134.79.103:64087] [client 45.134.79.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "aRhxdNpja_6cDxKbxFnq9QAAAMg"]
[Sat Nov 15 20:26:28.663333 2025] [:error] [pid 20313:tid 20317] [client 45.134.79.103:64275] [client 45.134.79.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "aRhxdBI9DXIgPadBLUaeQgAAAsE"]
[Sat Nov 15 20:26:29.305250 2025] [:error] [pid 27997:tid 28021] [client 45.134.79.103:64432] [client 45.134.79.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "aRhxddpja_6cDxKbxFnrAQAAANY"]
[Sat Nov 15 20:26:29.958098 2025] [:error] [pid 22613:tid 22632] [client 45.134.79.103:64571] [client 45.134.79.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "aRhxdSoyR3cDsIRGPRnSaAAAAhE"]
[Sat Nov 15 20:26:30.591101 2025] [:error] [pid 20654:tid 20666] [client 45.134.79.103:64689] [client 45.134.79.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2018/wp-includes/wlwmanifest.xml"] [unique_id "aRhxdncS7eC8vO76_ycJAAAAA4k"]
[Sun Nov 16 17:58:56.126123 2025] [:error] [pid 52563:tid 52570] [client 155.94.163.116:65107] [client 155.94.163.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/"] [unique_id "aRmgYM-l3ey-hVJ5Auuk2QAAAMQ"], referer: binance.com
[Mon Nov 17 13:36:17.164435 2025] [:error] [pid 19303:tid 19320] [client 207.241.235.149:57926] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ufabet%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2.aspx"] [unique_id "aRq0UYG5BTwyMI8KItr2kQAAAw4"], referer: http://dwelectservices.com.au/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B8%97%E0%B8%B8%E0%B8%81%E0%B8%84%E0%B9%88%E0%B8%B2%E0%B8%A2.aspx
[Mon Nov 17 13:36:17.476880 2025] [:error] [pid 40548:tid 40557] [client 207.241.235.149:58228] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ufabet%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2.aspx"] [unique_id "aRq0UQM_PykfYnxh-j85ogAAAQc"], referer: http://dwelectservices.com.au/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B8%97%E0%B8%B8%E0%B8%81%E0%B8%84%E0%B9%88%E0%B8%B2%E0%B8%A2.aspx
[Mon Nov 17 13:36:17.792627 2025] [:error] [pid 19303:tid 19306] [client 207.241.235.149:58278] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ufabet%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2.aspx"] [unique_id "aRq0UYG5BTwyMI8KItr2lAAAAwA"], referer: http://dwelectservices.com.au/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B8%97%E0%B8%B8%E0%B8%81%E0%B8%84%E0%B9%88%E0%B8%B2%E0%B8%A2.aspx
[Mon Nov 17 13:36:18.105271 2025] [:error] [pid 16993:tid 17020] [client 207.241.235.149:58322] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ufabet%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2.aspx"] [unique_id "aRq0UljwKFPe3xGFV1zEXgAAAhg"], referer: http://dwelectservices.com.au/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B8%97%E0%B8%B8%E0%B8%81%E0%B8%84%E0%B9%88%E0%B8%B2%E0%B8%A2.aspx
[Mon Nov 17 13:41:35.830218 2025] [:error] [pid 30801:tid 30810] [client 207.241.235.149:35982] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95joker.aspx"] [unique_id "aRq1jzbGAU49DhMTBD67fwAAAkc"], referer: http://dwelectservices.com.au/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20pg%20%E0%B8%8B%E0%B8%B7%E0%B9%89%E0%B8%AD%20%E0%B8%9F%E0%B8%A3%E0%B8%B5%20%E0%B8%AA%20%E0%B8%9B%E0%B8%B4%20%E0%B8%99.aspx
[Mon Nov 17 13:41:36.146000 2025] [:error] [pid 15150:tid 15166] [client 207.241.235.149:36004] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95joker.aspx"] [unique_id "aRq1kH2DEo_rcsFuxj1O3AAAAY4"], referer: http://dwelectservices.com.au/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20pg%20%E0%B8%8B%E0%B8%B7%E0%B9%89%E0%B8%AD%20%E0%B8%9F%E0%B8%A3%E0%B8%B5%20%E0%B8%AA%20%E0%B8%9B%E0%B8%B4%20%E0%B8%99.aspx
[Mon Nov 17 13:41:36.462810 2025] [:error] [pid 15150:tid 15156] [client 207.241.235.149:36044] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95joker.aspx"] [unique_id "aRq1kH2DEo_rcsFuxj1O3QAAAYQ"], referer: http://dwelectservices.com.au/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20pg%20%E0%B8%8B%E0%B8%B7%E0%B9%89%E0%B8%AD%20%E0%B8%9F%E0%B8%A3%E0%B8%B5%20%E0%B8%AA%20%E0%B8%9B%E0%B8%B4%20%E0%B8%99.aspx
[Mon Nov 17 13:41:36.789283 2025] [:error] [pid 30801:tid 30810] [client 207.241.235.149:36092] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95joker.aspx"] [unique_id "aRq1kDbGAU49DhMTBD67gwAAAkc"], referer: http://dwelectservices.com.au/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20pg%20%E0%B8%8B%E0%B8%B7%E0%B9%89%E0%B8%AD%20%E0%B8%9F%E0%B8%A3%E0%B8%B5%20%E0%B8%AA%20%E0%B8%9B%E0%B8%B4%20%E0%B8%99.aspx
[Mon Nov 17 13:47:11.885544 2025] [:error] [pid 39537:tid 39559] [client 207.241.235.149:41468] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aRq234ZRrh1pcrdcLB-IMQAAANM"], referer: http://dwelectservices.com.au/888%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx
[Mon Nov 17 13:47:14.859254 2025] [:error] [pid 39537:tid 39562] [client 207.241.235.149:41940] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aRq24oZRrh1pcrdcLB-IOAAAANY"], referer: http://dwelectservices.com.au/888%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx
[Mon Nov 17 13:47:15.219432 2025] [:error] [pid 39537:tid 39540] [client 207.241.235.149:42314] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aRq244ZRrh1pcrdcLB-IPwAAAMA"], referer: http://dwelectservices.com.au/888%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx
[Mon Nov 17 13:47:16.057384 2025] [:error] [pid 39537:tid 39540] [client 207.241.235.149:42348] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aRq25IZRrh1pcrdcLB-IQwAAAMA"], referer: http://dwelectservices.com.au/888%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx
[Mon Nov 17 13:52:35.145843 2025] [:error] [pid 65302:tid 65323] [client 207.241.235.149:47052] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5.aspx"] [unique_id "aRq4IwPMSx2v85r8y7zMOwAAAVM"], referer: http://dwelectservices.com.au/pg%20slot%20auto.aspx
[Mon Nov 17 13:52:35.465218 2025] [:error] [pid 21538:tid 21552] [client 207.241.235.149:47102] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5.aspx"] [unique_id "aRq4I6dTlflWtZ7KEyhJtgAAA4w"], referer: http://dwelectservices.com.au/pg%20slot%20auto.aspx
[Mon Nov 17 13:52:35.779756 2025] [:error] [pid 39450:tid 39496] [client 207.241.235.149:47140] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5.aspx"] [unique_id "aRq4I-oZqPB4_7vNEDQPTAAAAE8"], referer: http://dwelectservices.com.au/pg%20slot%20auto.aspx
[Mon Nov 17 13:52:36.417498 2025] [:error] [pid 39451:tid 39517] [client 207.241.235.149:47184] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5.aspx"] [unique_id "aRq4JOfgkqXTS0SO3fDzRQAAAIk"], referer: http://dwelectservices.com.au/pg%20slot%20auto.aspx
[Mon Nov 17 13:57:52.401061 2025] [:error] [pid 39449:tid 39459] [client 207.241.235.149:56408] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/%E0%B8%A7%E0%B8%B4%E0%B8%98%E0%B8%B5%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20pg%20%E0%B9%83%E0%B8%AB%E0%B9%89%20%E0%B9%81%E0%B8%95%E0%B8%81.aspx"] [unique_id "aRq5YKUCymTA3MDfzLMRvAAAAAU"], referer: http://dwelectservices.com.au/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%20slot%20joker123%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx
[Mon Nov 17 13:57:52.718568 2025] [:error] [pid 32753:tid 32762] [client 207.241.235.149:56448] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/%E0%B8%A7%E0%B8%B4%E0%B8%98%E0%B8%B5%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20pg%20%E0%B9%83%E0%B8%AB%E0%B9%89%20%E0%B9%81%E0%B8%95%E0%B8%81.aspx"] [unique_id "aRq5YE6YNqI5vkht920gnAAAA8Y"], referer: http://dwelectservices.com.au/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%20slot%20joker123%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx
[Mon Nov 17 13:57:53.034907 2025] [:error] [pid 30801:tid 30815] [client 207.241.235.149:56502] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/%E0%B8%A7%E0%B8%B4%E0%B8%98%E0%B8%B5%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20pg%20%E0%B9%83%E0%B8%AB%E0%B9%89%20%E0%B9%81%E0%B8%95%E0%B8%81.aspx"] [unique_id "aRq5YTbGAU49DhMTBD69ewAAAkw"], referer: http://dwelectservices.com.au/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%20slot%20joker123%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx
[Mon Nov 17 13:57:53.358294 2025] [:error] [pid 65302:tid 65328] [client 207.241.235.149:56542] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/%E0%B8%A7%E0%B8%B4%E0%B8%98%E0%B8%B5%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20pg%20%E0%B9%83%E0%B8%AB%E0%B9%89%20%E0%B9%81%E0%B8%95%E0%B8%81.aspx"] [unique_id "aRq5YQPMSx2v85r8y7zM4QAAAVg"], referer: http://dwelectservices.com.au/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%20slot%20joker123%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx
[Mon Nov 17 14:03:37.649901 2025] [:error] [pid 31419:tid 31443] [client 207.241.235.149:37842] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20789.aspx"] [unique_id "aRq6uQHQ5Sbp7elmDZhYiQAAApY"], referer: http://dwelectservices.com.au/pg123.aspx
[Mon Nov 17 14:03:38.468994 2025] [:error] [pid 32753:tid 32764] [client 207.241.235.149:38068] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20789.aspx"] [unique_id "aRq6uk6YNqI5vkht920hgAAAA8g"], referer: http://dwelectservices.com.au/pg123.aspx
[Mon Nov 17 14:03:39.177155 2025] [:error] [pid 32753:tid 32764] [client 207.241.235.149:38146] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20789.aspx"] [unique_id "aRq6u06YNqI5vkht920hgwAAA8g"], referer: http://dwelectservices.com.au/pg123.aspx
[Mon Nov 17 14:03:41.638947 2025] [:error] [pid 32753:tid 32766] [client 207.241.235.149:38244] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20789.aspx"] [unique_id "aRq6vU6YNqI5vkht920hiAAAA8o"], referer: http://dwelectservices.com.au/pg123.aspx
[Mon Nov 17 14:08:57.460840 2025] [:error] [pid 39537:tid 39564] [client 207.241.235.149:44704] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95pg.aspx"] [unique_id "aRq7-YZRrh1pcrdcLB-LHgAAANg"], referer: http://dwelectservices.com.au/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%2050%20%E0%B8%A2%E0%B8%B7%E0%B8%99%E0%B8%A2%E0%B8%B1%E0%B8%99%E0%B9%80%E0%B8%9A%E0%B8%AD%E0%B8%A3%E0%B9%8C.aspx
[Mon Nov 17 14:08:57.820760 2025] [:error] [pid 15888:tid 15913] [client 207.241.235.149:44836] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95pg.aspx"] [unique_id "aRq7-QjAdDTBm4W3qW0H-gAAAdY"], referer: http://dwelectservices.com.au/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%2050%20%E0%B8%A2%E0%B8%B7%E0%B8%99%E0%B8%A2%E0%B8%B1%E0%B8%99%E0%B9%80%E0%B8%9A%E0%B8%AD%E0%B8%A3%E0%B9%8C.aspx
[Mon Nov 17 14:08:58.621298 2025] [:error] [pid 16993:tid 16997] [client 207.241.235.149:44876] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95pg.aspx"] [unique_id "aRq7-ljwKFPe3xGFV1zIawAAAgE"], referer: http://dwelectservices.com.au/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%2050%20%E0%B8%A2%E0%B8%B7%E0%B8%99%E0%B8%A2%E0%B8%B1%E0%B8%99%E0%B9%80%E0%B8%9A%E0%B8%AD%E0%B8%A3%E0%B9%8C.aspx
[Mon Nov 17 14:08:58.940666 2025] [:error] [pid 31419:tid 31433] [client 207.241.235.149:44956] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95pg.aspx"] [unique_id "aRq7-gHQ5Sbp7elmDZhY-AAAAow"], referer: http://dwelectservices.com.au/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%2050%20%E0%B8%A2%E0%B8%B7%E0%B8%99%E0%B8%A2%E0%B8%B1%E0%B8%99%E0%B9%80%E0%B8%9A%E0%B8%AD%E0%B8%A3%E0%B9%8C.aspx
[Mon Nov 17 14:14:21.760524 2025] [:error] [pid 19120:tid 19126] [client 207.241.235.149:52748] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95789.aspx"] [unique_id "aRq9PYO1H08wfYmhCh-7BQAAAsQ"], referer: http://dwelectservices.com.au/%E0%B9%80%E0%B8%AE%E0%B8%87%20666.aspx
[Mon Nov 17 14:14:22.515698 2025] [:error] [pid 19120:tid 19126] [client 207.241.235.149:52820] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95789.aspx"] [unique_id "aRq9PoO1H08wfYmhCh-7CAAAAsQ"], referer: http://dwelectservices.com.au/%E0%B9%80%E0%B8%AE%E0%B8%87%20666.aspx
[Mon Nov 17 14:14:24.144625 2025] [:error] [pid 15888:tid 15913] [client 207.241.235.149:52904] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95789.aspx"] [unique_id "aRq9QAjAdDTBm4W3qW0J0QAAAdY"], referer: http://dwelectservices.com.au/%E0%B9%80%E0%B8%AE%E0%B8%87%20666.aspx
[Mon Nov 17 14:14:24.957710 2025] [:error] [pid 15888:tid 15913] [client 207.241.235.149:53062] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95789.aspx"] [unique_id "aRq9QAjAdDTBm4W3qW0J1QAAAdY"], referer: http://dwelectservices.com.au/%E0%B9%80%E0%B8%AE%E0%B8%87%20666.aspx
[Mon Nov 17 14:19:48.662621 2025] [:error] [pid 40548:tid 40566] [client 207.241.235.149:55144] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B8%9D%E0%B8%B2%E0%B8%81%E0%B8%96%E0%B8%AD%E0%B8%99%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%A1%E0%B8%B5%20%E0%B8%82%E0%B8%B1%E0%B9%89%E0%B8%99%E0%B8%95%E0%B9%88%E0%B8%B3%201%20%E0%B8%9A%E0%B8%B2%E0%B8%97%E0%B8%81%E0%B9%87%20%E0%B8%96%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%94%E0%B9%89.aspx"] [unique_id "aRq-hAM_PykfYnxh-j88vwAAARA"], referer: http://dwelectservices.com.au/pg%20%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87.aspx
[Mon Nov 17 14:19:51.376746 2025] [:error] [pid 19120:tid 19127] [client 207.241.235.149:55214] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B8%9D%E0%B8%B2%E0%B8%81%E0%B8%96%E0%B8%AD%E0%B8%99%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%A1%E0%B8%B5%20%E0%B8%82%E0%B8%B1%E0%B9%89%E0%B8%99%E0%B8%95%E0%B9%88%E0%B8%B3%201%20%E0%B8%9A%E0%B8%B2%E0%B8%97%E0%B8%81%E0%B9%87%20%E0%B8%96%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%94%E0%B9%89.aspx"] [unique_id "aRq-h4O1H08wfYmhCh-8NAAAAsU"], referer: http://dwelectservices.com.au/pg%20%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87.aspx
[Mon Nov 17 14:19:52.306927 2025] [:error] [pid 16993:tid 17002] [client 207.241.235.149:55504] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B8%9D%E0%B8%B2%E0%B8%81%E0%B8%96%E0%B8%AD%E0%B8%99%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%A1%E0%B8%B5%20%E0%B8%82%E0%B8%B1%E0%B9%89%E0%B8%99%E0%B8%95%E0%B9%88%E0%B8%B3%201%20%E0%B8%9A%E0%B8%B2%E0%B8%97%E0%B8%81%E0%B9%87%20%E0%B8%96%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%94%E0%B9%89.aspx"] [unique_id "aRq-iFjwKFPe3xGFV1zJkwAAAgY"], referer: http://dwelectservices.com.au/pg%20%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87.aspx
[Mon Nov 17 14:19:53.016370 2025] [:error] [pid 16993:tid 16999] [client 207.241.235.149:55614] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B8%9D%E0%B8%B2%E0%B8%81%E0%B8%96%E0%B8%AD%E0%B8%99%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%A1%E0%B8%B5%20%E0%B8%82%E0%B8%B1%E0%B9%89%E0%B8%99%E0%B8%95%E0%B9%88%E0%B8%B3%201%20%E0%B8%9A%E0%B8%B2%E0%B8%97%E0%B8%81%E0%B9%87%20%E0%B8%96%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%94%E0%B9%89.aspx"] [unique_id "aRq-iVjwKFPe3xGFV1zJlgAAAgM"], referer: http://dwelectservices.com.au/pg%20%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87.aspx
[Mon Nov 17 14:25:23.335470 2025] [:error] [pid 32753:tid 32779] [client 207.241.235.149:59538] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kingslot.aspx"] [unique_id "aRq_006YNqI5vkht920kXgAAA9c"], referer: http://dwelectservices.com.au/777superslot.aspx
[Mon Nov 17 14:25:25.289280 2025] [:error] [pid 15888:tid 15912] [client 207.241.235.149:59622] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kingslot.aspx"] [unique_id "aRq_1QjAdDTBm4W3qW0K1AAAAdU"], referer: http://dwelectservices.com.au/777superslot.aspx
[Mon Nov 17 14:25:25.790768 2025] [:error] [pid 15888:tid 15892] [client 207.241.235.149:59868] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kingslot.aspx"] [unique_id "aRq_1QjAdDTBm4W3qW0K1gAAAcE"], referer: http://dwelectservices.com.au/777superslot.aspx
[Mon Nov 17 14:25:26.460725 2025] [:error] [pid 31419:tid 31445] [client 207.241.235.149:59914] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kingslot.aspx"] [unique_id "aRq_1gHQ5Sbp7elmDZhZVQAAApg"], referer: http://dwelectservices.com.au/777superslot.aspx
[Mon Nov 17 14:35:43.061161 2025] [:error] [pid 39537:tid 39555] [client 207.241.235.149:35530] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%9524.aspx"] [unique_id "aRrCP4ZRrh1pcrdcLB-NVgAAAM8"], referer: http://dwelectservices.com.au/spg%20slot.aspx
[Mon Nov 17 14:35:43.377564 2025] [:error] [pid 65302:tid 65327] [client 207.241.235.149:35602] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%9524.aspx"] [unique_id "aRrCPwPMSx2v85r8y7zRVgAAAVc"], referer: http://dwelectservices.com.au/spg%20slot.aspx
[Mon Nov 17 14:35:43.690226 2025] [:error] [pid 39449:tid 39468] [client 207.241.235.149:35628] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%9524.aspx"] [unique_id "aRrCP6UCymTA3MDfzLMUMQAAAA4"], referer: http://dwelectservices.com.au/spg%20slot.aspx
[Mon Nov 17 14:35:44.077483 2025] [:error] [pid 65302:tid 65309] [client 207.241.235.149:35668] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%9524.aspx"] [unique_id "aRrCQAPMSx2v85r8y7zRVwAAAUU"], referer: http://dwelectservices.com.au/spg%20slot.aspx
[Mon Nov 17 14:40:44.641773 2025] [:error] [pid 39537:tid 39544] [client 207.241.235.149:34172] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%9524.aspx"] [unique_id "aRrDbIZRrh1pcrdcLB-OWAAAAMQ"], referer: http://dwelectservices.com.au/spg%20slot.aspx
[Mon Nov 17 14:40:44.977690 2025] [:error] [pid 32753:tid 32777] [client 207.241.235.149:34198] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%9524.aspx"] [unique_id "aRrDbE6YNqI5vkht920lYwAAA9U"], referer: http://dwelectservices.com.au/spg%20slot.aspx
[Mon Nov 17 14:40:45.292819 2025] [:error] [pid 20913:tid 20935] [client 207.241.235.149:34252] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%9524.aspx"] [unique_id "aRrDbekafGNeN3nY1bcirwAAA1Q"], referer: http://dwelectservices.com.au/spg%20slot.aspx
[Mon Nov 17 14:40:45.613890 2025] [:error] [pid 39449:tid 39469] [client 207.241.235.149:34278] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%9524.aspx"] [unique_id "aRrDbaUCymTA3MDfzLMUhwAAAA8"], referer: http://dwelectservices.com.au/spg%20slot.aspx
[Mon Nov 17 14:45:49.068148 2025] [:error] [pid 15888:tid 15896] [client 207.241.235.149:58716] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/allslot888.aspx"] [unique_id "aRrEnQjAdDTBm4W3qW0MfgAAAcU"], referer: http://dwelectservices.com.au/spg%20slot.aspx
[Mon Nov 17 14:45:49.385651 2025] [:error] [pid 65302:tid 65312] [client 207.241.235.149:58740] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/allslot888.aspx"] [unique_id "aRrEnQPMSx2v85r8y7zSbgAAAUg"], referer: http://dwelectservices.com.au/spg%20slot.aspx
[Mon Nov 17 14:45:49.701348 2025] [:error] [pid 32753:tid 32768] [client 207.241.235.149:58788] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/allslot888.aspx"] [unique_id "aRrEnU6YNqI5vkht920mPAAAA8w"], referer: http://dwelectservices.com.au/spg%20slot.aspx
[Mon Nov 17 14:45:50.014486 2025] [:error] [pid 31419:tid 31439] [client 207.241.235.149:58806] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/allslot888.aspx"] [unique_id "aRrEngHQ5Sbp7elmDZhbVQAAApI"], referer: http://dwelectservices.com.au/spg%20slot.aspx
[Mon Nov 17 14:51:01.639322 2025] [:error] [pid 19120:tid 19124] [client 207.241.235.149:55654] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lava909%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aRrF1YO1H08wfYmhCh-_EAAAAsI"], referer: http://dwelectservices.com.au/autobet.aspx
[Mon Nov 17 14:51:01.954847 2025] [:error] [pid 65302:tid 65311] [client 207.241.235.149:55690] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lava909%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aRrF1QPMSx2v85r8y7zTCgAAAUc"], referer: http://dwelectservices.com.au/autobet.aspx
[Mon Nov 17 14:51:02.274520 2025] [:error] [pid 40548:tid 40566] [client 207.241.235.149:55722] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lava909%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aRrF1gM_PykfYnxh-j9AYgAAARA"], referer: http://dwelectservices.com.au/autobet.aspx
[Mon Nov 17 14:51:02.604100 2025] [:error] [pid 39451:tid 39513] [client 207.241.235.149:55756] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lava909%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aRrF1ufgkqXTS0SO3fD34QAAAIU"], referer: http://dwelectservices.com.au/autobet.aspx
[Mon Nov 17 14:56:18.572035 2025] [:error] [pid 19303:tid 19318] [client 207.241.235.149:56916] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/789%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aRrHEoG5BTwyMI8KItr9KwAAAww"], referer: http://dwelectservices.com.au/pg%20wallet.aspx
[Mon Nov 17 14:56:18.892690 2025] [:error] [pid 19303:tid 19328] [client 207.241.235.149:56930] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/789%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aRrHEoG5BTwyMI8KItr9LAAAAxY"], referer: http://dwelectservices.com.au/pg%20wallet.aspx
[Mon Nov 17 14:56:19.213208 2025] [:error] [pid 19303:tid 19316] [client 207.241.235.149:56986] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/789%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aRrHE4G5BTwyMI8KItr9LwAAAwo"], referer: http://dwelectservices.com.au/pg%20wallet.aspx
[Mon Nov 17 14:56:19.526246 2025] [:error] [pid 31419:tid 31431] [client 207.241.235.149:57014] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/789%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aRrHEwHQ5Sbp7elmDZhb8wAAAoo"], referer: http://dwelectservices.com.au/pg%20wallet.aspx
[Mon Nov 17 15:01:31.478565 2025] [:error] [pid 31419:tid 31424] [client 207.241.235.149:59504] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2pg.aspx"] [unique_id "aRrISwHQ5Sbp7elmDZhcWwAAAoM"], referer: http://dwelectservices.com.au/ufa888%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%20ufabet%20%E0%B8%A1%E0%B8%B7%E0%B8%AD%E0%B8%96%E0%B8%B7%E0%B8%AD.aspx
[Mon Nov 17 15:01:31.796845 2025] [:error] [pid 39449:tid 39454] [client 207.241.235.149:59536] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2pg.aspx"] [unique_id "aRrIS6UCymTA3MDfzLMWcgAAAAA"], referer: http://dwelectservices.com.au/ufa888%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%20ufabet%20%E0%B8%A1%E0%B8%B7%E0%B8%AD%E0%B8%96%E0%B8%B7%E0%B8%AD.aspx
[Mon Nov 17 15:01:32.136975 2025] [:error] [pid 16993:tid 17015] [client 207.241.235.149:59572] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2pg.aspx"] [unique_id "aRrITFjwKFPe3xGFV1zNWAAAAhM"], referer: http://dwelectservices.com.au/ufa888%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%20ufabet%20%E0%B8%A1%E0%B8%B7%E0%B8%AD%E0%B8%96%E0%B8%B7%E0%B8%AD.aspx
[Mon Nov 17 15:01:32.449935 2025] [:error] [pid 31419:tid 31430] [client 207.241.235.149:59600] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2pg.aspx"] [unique_id "aRrITAHQ5Sbp7elmDZhcXQAAAok"], referer: http://dwelectservices.com.au/ufa888%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%20ufabet%20%E0%B8%A1%E0%B8%B7%E0%B8%AD%E0%B8%96%E0%B8%B7%E0%B8%AD.aspx
[Mon Nov 17 15:06:41.794322 2025] [:error] [pid 16993:tid 17014] [client 207.241.235.149:33366] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "aRrJgVjwKFPe3xGFV1zOIwAAAhI"], referer: http://dwelectservices.com.au/superslot.aspx
[Mon Nov 17 15:06:42.114414 2025] [:error] [pid 65302:tid 65319] [client 207.241.235.149:33402] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "aRrJggPMSx2v85r8y7zULAAAAU8"], referer: http://dwelectservices.com.au/superslot.aspx
[Mon Nov 17 15:06:42.425928 2025] [:error] [pid 15888:tid 15913] [client 207.241.235.149:33442] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "aRrJggjAdDTBm4W3qW0OGQAAAdY"], referer: http://dwelectservices.com.au/superslot.aspx
[Mon Nov 17 15:06:42.740129 2025] [:error] [pid 31419:tid 31424] [client 207.241.235.149:33488] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "aRrJggHQ5Sbp7elmDZhdIQAAAoM"], referer: http://dwelectservices.com.au/superslot.aspx
[Mon Nov 17 15:11:54.826042 2025] [:error] [pid 39449:tid 39469] [client 207.241.235.149:36314] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%8799.aspx"] [unique_id "aRrKuqUCymTA3MDfzLMXzAAAAA8"], referer: http://dwelectservices.com.au/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B8%9B%E0%B8%B1%E0%B9%88%E0%B8%99%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx
[Mon Nov 17 15:11:55.139033 2025] [:error] [pid 31419:tid 31433] [client 207.241.235.149:36360] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%8799.aspx"] [unique_id "aRrKuwHQ5Sbp7elmDZhd5AAAAow"], referer: http://dwelectservices.com.au/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B8%9B%E0%B8%B1%E0%B9%88%E0%B8%99%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx
[Mon Nov 17 15:11:55.462784 2025] [:error] [pid 31419:tid 31440] [client 207.241.235.149:36408] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%8799.aspx"] [unique_id "aRrKuwHQ5Sbp7elmDZhd7QAAApM"], referer: http://dwelectservices.com.au/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B8%9B%E0%B8%B1%E0%B9%88%E0%B8%99%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx
[Mon Nov 17 15:11:55.780209 2025] [:error] [pid 40548:tid 40567] [client 207.241.235.149:36442] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%8799.aspx"] [unique_id "aRrKuwM_PykfYnxh-j9CfwAAARE"], referer: http://dwelectservices.com.au/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B8%9B%E0%B8%B1%E0%B9%88%E0%B8%99%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx
[Mon Nov 17 15:17:05.835689 2025] [:error] [pid 31419:tid 31426] [client 207.241.235.149:41418] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ufacash%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A.aspx"] [unique_id "aRrL8QHQ5Sbp7elmDZhe6QAAAoU"], referer: http://dwelectservices.com.au/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9D%E0%B8%B2%E0%B8%81%E0%B8%96%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%A1%E0%B8%B5%E0%B8%82%E0%B8%B1%E0%B9%89%E0%B8%99%E0%B8%95%E0%B9%88%E0%B9%8D%E0%B8%B2.aspx
[Mon Nov 17 15:17:06.149300 2025] [:error] [pid 65302:tid 65304] [client 207.241.235.149:41460] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ufacash%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A.aspx"] [unique_id "aRrL8gPMSx2v85r8y7zVcgAAAUA"], referer: http://dwelectservices.com.au/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9D%E0%B8%B2%E0%B8%81%E0%B8%96%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%A1%E0%B8%B5%E0%B8%82%E0%B8%B1%E0%B9%89%E0%B8%99%E0%B8%95%E0%B9%88%E0%B9%8D%E0%B8%B2.aspx
[Mon Nov 17 15:17:06.462866 2025] [:error] [pid 20913:tid 20915] [client 207.241.235.149:41508] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ufacash%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A.aspx"] [unique_id "aRrL8ukafGNeN3nY1bcmYAAAA0A"], referer: http://dwelectservices.com.au/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9D%E0%B8%B2%E0%B8%81%E0%B8%96%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%A1%E0%B8%B5%E0%B8%82%E0%B8%B1%E0%B9%89%E0%B8%99%E0%B8%95%E0%B9%88%E0%B9%8D%E0%B8%B2.aspx
[Mon Nov 17 15:17:06.828243 2025] [:error] [pid 39451:tid 39508] [client 207.241.235.149:41526] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ufacash%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A.aspx"] [unique_id "aRrL8ufgkqXTS0SO3fD6xwAAAIA"], referer: http://dwelectservices.com.au/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9D%E0%B8%B2%E0%B8%81%E0%B8%96%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%A1%E0%B8%B5%E0%B8%82%E0%B8%B1%E0%B9%89%E0%B8%99%E0%B8%95%E0%B9%88%E0%B9%8D%E0%B8%B2.aspx
[Mon Nov 17 15:22:19.549519 2025] [:error] [pid 20913:tid 20919] [client 207.241.235.149:49376] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ambbet.aspx"] [unique_id "aRrNK-kafGNeN3nY1bcnLwAAA0Q"], referer: http://dwelectservices.com.au/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20pg%20%E0%B9%80%E0%B8%81%E0%B8%A1%E0%B9%83%E0%B8%AB%E0%B8%A1%E0%B9%88.aspx
[Mon Nov 17 15:22:19.867680 2025] [:error] [pid 40548:tid 40552] [client 207.241.235.149:49420] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ambbet.aspx"] [unique_id "aRrNKwM_PykfYnxh-j9EHAAAAQI"], referer: http://dwelectservices.com.au/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20pg%20%E0%B9%80%E0%B8%81%E0%B8%A1%E0%B9%83%E0%B8%AB%E0%B8%A1%E0%B9%88.aspx
[Mon Nov 17 15:22:20.182897 2025] [:error] [pid 39449:tid 39464] [client 207.241.235.149:49454] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ambbet.aspx"] [unique_id "aRrNLKUCymTA3MDfzLMakQAAAAo"], referer: http://dwelectservices.com.au/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20pg%20%E0%B9%80%E0%B8%81%E0%B8%A1%E0%B9%83%E0%B8%AB%E0%B8%A1%E0%B9%88.aspx
[Mon Nov 17 15:22:20.592215 2025] [:error] [pid 32753:tid 32773] [client 207.241.235.149:49496] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ambbet.aspx"] [unique_id "aRrNLE6YNqI5vkht920sAgAAA9E"], referer: http://dwelectservices.com.au/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20pg%20%E0%B9%80%E0%B8%81%E0%B8%A1%E0%B9%83%E0%B8%AB%E0%B8%A1%E0%B9%88.aspx
[Mon Nov 17 15:27:31.118846 2025] [:error] [pid 65302:tid 65324] [client 207.241.235.149:58436] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9D%E0%B8%B2%E0%B8%81%E0%B8%96%E0%B8%AD%E0%B8%99%20true%20wallet%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aRrOYwPMSx2v85r8y7zXlAAAAVQ"], referer: http://dwelectservices.com.au/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%E0%B8%9D%E0%B8%B2%E0%B8%81%E0%B8%96%E0%B8%AD%E0%B8%99%20true%20wallet%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%A1%E0%B8%B5%E0%B8%82%E0%B8%B1%E0%B9%89%E0%B8%99%E0%B8%95%E0%B9%88%E0%B9%8D%E0%B8%B2.aspx
[Mon Nov 17 15:27:31.437084 2025] [:error] [pid 65302:tid 65328] [client 207.241.235.149:58476] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9D%E0%B8%B2%E0%B8%81%E0%B8%96%E0%B8%AD%E0%B8%99%20true%20wallet%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aRrOYwPMSx2v85r8y7zXlQAAAVg"], referer: http://dwelectservices.com.au/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%E0%B8%9D%E0%B8%B2%E0%B8%81%E0%B8%96%E0%B8%AD%E0%B8%99%20true%20wallet%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%A1%E0%B8%B5%E0%B8%82%E0%B8%B1%E0%B9%89%E0%B8%99%E0%B8%95%E0%B9%88%E0%B9%8D%E0%B8%B2.aspx
[Mon Nov 17 15:27:31.750408 2025] [:error] [pid 15888:tid 15914] [client 207.241.235.149:58536] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9D%E0%B8%B2%E0%B8%81%E0%B8%96%E0%B8%AD%E0%B8%99%20true%20wallet%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aRrOYwjAdDTBm4W3qW0QYQAAAdc"], referer: http://dwelectservices.com.au/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%E0%B8%9D%E0%B8%B2%E0%B8%81%E0%B8%96%E0%B8%AD%E0%B8%99%20true%20wallet%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%A1%E0%B8%B5%E0%B8%82%E0%B8%B1%E0%B9%89%E0%B8%99%E0%B8%95%E0%B9%88%E0%B9%8D%E0%B8%B2.aspx
[Mon Nov 17 15:27:32.071804 2025] [:error] [pid 32753:tid 32761] [client 207.241.235.149:58572] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9D%E0%B8%B2%E0%B8%81%E0%B8%96%E0%B8%AD%E0%B8%99%20true%20wallet%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aRrOZE6YNqI5vkht920uTAAAA8U"], referer: http://dwelectservices.com.au/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%E0%B8%9D%E0%B8%B2%E0%B8%81%E0%B8%96%E0%B8%AD%E0%B8%99%20true%20wallet%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%A1%E0%B8%B5%E0%B8%82%E0%B8%B1%E0%B9%89%E0%B8%99%E0%B8%95%E0%B9%88%E0%B9%8D%E0%B8%B2.aspx
[Mon Nov 17 15:32:42.289256 2025] [:error] [pid 39449:tid 39473] [client 207.241.235.149:36698] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20pg.aspx"] [unique_id "aRrPmqUCymTA3MDfzLMc8gAAABM"], referer: http://dwelectservices.com.au/%E0%B9%82%E0%B8%9B%E0%B8%A3%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%AA%E0%B8%A1%E0%B8%B2%E0%B8%8A%E0%B8%B4%E0%B8%81%E0%B9%83%E0%B8%AB%E0%B8%A1%E0%B9%88%20%E0%B8%9D%E0%B8%B2%E0%B8%8110%E0%B8%A3%E0%B8%B1%E0%B8%9A100%20%E0%B8%A7%E0%B8%AD%20%E0%B9%80%E0%B8%A5%E0%B8%97%202565.aspx
[Mon Nov 17 15:32:42.602721 2025] [:error] [pid 40548:tid 40557] [client 207.241.235.149:36754] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20pg.aspx"] [unique_id "aRrPmgM_PykfYnxh-j9FUgAAAQc"], referer: http://dwelectservices.com.au/%E0%B9%82%E0%B8%9B%E0%B8%A3%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%AA%E0%B8%A1%E0%B8%B2%E0%B8%8A%E0%B8%B4%E0%B8%81%E0%B9%83%E0%B8%AB%E0%B8%A1%E0%B9%88%20%E0%B8%9D%E0%B8%B2%E0%B8%8110%E0%B8%A3%E0%B8%B1%E0%B8%9A100%20%E0%B8%A7%E0%B8%AD%20%E0%B9%80%E0%B8%A5%E0%B8%97%202565.aspx
[Mon Nov 17 15:32:42.914878 2025] [:error] [pid 40548:tid 40574] [client 207.241.235.149:36792] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20pg.aspx"] [unique_id "aRrPmgM_PykfYnxh-j9FUwAAARg"], referer: http://dwelectservices.com.au/%E0%B9%82%E0%B8%9B%E0%B8%A3%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%AA%E0%B8%A1%E0%B8%B2%E0%B8%8A%E0%B8%B4%E0%B8%81%E0%B9%83%E0%B8%AB%E0%B8%A1%E0%B9%88%20%E0%B8%9D%E0%B8%B2%E0%B8%8110%E0%B8%A3%E0%B8%B1%E0%B8%9A100%20%E0%B8%A7%E0%B8%AD%20%E0%B9%80%E0%B8%A5%E0%B8%97%202565.aspx
[Mon Nov 17 15:32:43.231322 2025] [:error] [pid 31419:tid 31439] [client 207.241.235.149:36822] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20pg.aspx"] [unique_id "aRrPmwHQ5Sbp7elmDZhipwAAApI"], referer: http://dwelectservices.com.au/%E0%B9%82%E0%B8%9B%E0%B8%A3%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%AA%E0%B8%A1%E0%B8%B2%E0%B8%8A%E0%B8%B4%E0%B8%81%E0%B9%83%E0%B8%AB%E0%B8%A1%E0%B9%88%20%E0%B8%9D%E0%B8%B2%E0%B8%8110%E0%B8%A3%E0%B8%B1%E0%B8%9A100%20%E0%B8%A7%E0%B8%AD%20%E0%B9%80%E0%B8%A5%E0%B8%97%202565.aspx
[Mon Nov 17 15:37:54.094776 2025] [:error] [pid 65302:tid 65311] [client 207.241.235.149:44882] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%95%E0%B8%A3%E0%B8%87%20%E0%B8%97%E0%B8%B1%E0%B9%89%E0%B8%87%E0%B8%AB%E0%B8%A1%E0%B8%94.aspx"] [unique_id "aRrQ0gPMSx2v85r8y7zY4wAAAUc"], referer: http://dwelectservices.com.au/ufabet%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A.aspx
[Mon Nov 17 15:37:54.410484 2025] [:error] [pid 20913:tid 20915] [client 207.241.235.149:44922] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%95%E0%B8%A3%E0%B8%87%20%E0%B8%97%E0%B8%B1%E0%B9%89%E0%B8%87%E0%B8%AB%E0%B8%A1%E0%B8%94.aspx"] [unique_id "aRrQ0ukafGNeN3nY1bcqpQAAA0A"], referer: http://dwelectservices.com.au/ufabet%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A.aspx
[Mon Nov 17 15:37:54.726721 2025] [:error] [pid 32753:tid 32780] [client 207.241.235.149:44966] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%95%E0%B8%A3%E0%B8%87%20%E0%B8%97%E0%B8%B1%E0%B9%89%E0%B8%87%E0%B8%AB%E0%B8%A1%E0%B8%94.aspx"] [unique_id "aRrQ0k6YNqI5vkht920xXgAAA9g"], referer: http://dwelectservices.com.au/ufabet%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A.aspx
[Mon Nov 17 15:37:55.039810 2025] [:error] [pid 20913:tid 20937] [client 207.241.235.149:45014] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%95%E0%B8%A3%E0%B8%87%20%E0%B8%97%E0%B8%B1%E0%B9%89%E0%B8%87%E0%B8%AB%E0%B8%A1%E0%B8%94.aspx"] [unique_id "aRrQ0-kafGNeN3nY1bcqpwAAA1Y"], referer: http://dwelectservices.com.au/ufabet%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A.aspx
[Mon Nov 17 15:43:07.766817 2025] [:error] [pid 31419:tid 31444] [client 207.241.235.149:52196] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5.aspx"] [unique_id "aRrSCwHQ5Sbp7elmDZhlWQAAApc"], referer: http://dwelectservices.com.au/m98%20%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%20188.aspx
[Mon Nov 17 15:43:08.083743 2025] [:error] [pid 20913:tid 20917] [client 207.241.235.149:52224] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5.aspx"] [unique_id "aRrSDOkafGNeN3nY1bcrtAAAA0I"], referer: http://dwelectservices.com.au/m98%20%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%20188.aspx
[Mon Nov 17 15:43:08.402613 2025] [:error] [pid 65302:tid 65319] [client 207.241.235.149:52272] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5.aspx"] [unique_id "aRrSDAPMSx2v85r8y7zZugAAAU8"], referer: http://dwelectservices.com.au/m98%20%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%20188.aspx
[Mon Nov 17 15:43:08.717563 2025] [:error] [pid 40548:tid 40564] [client 207.241.235.149:52330] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5.aspx"] [unique_id "aRrSDAM_PykfYnxh-j9GmwAAAQ4"], referer: http://dwelectservices.com.au/m98%20%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%20188.aspx
[Mon Nov 17 15:48:21.282825 2025] [:error] [pid 31419:tid 31441] [client 207.241.235.149:60970] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/pg%20slot.aspx"] [unique_id "aRrTRQHQ5Sbp7elmDZhmjwAAApQ"], referer: http://dwelectservices.com.au/%E0%B9%80%E0%B8%9A%E0%B8%97%E0%B8%9F%E0%B8%B4%E0%B8%81.aspx
[Mon Nov 17 15:48:21.605172 2025] [:error] [pid 39449:tid 39456] [client 207.241.235.149:60988] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/pg%20slot.aspx"] [unique_id "aRrTRaUCymTA3MDfzLMgygAAAAI"], referer: http://dwelectservices.com.au/%E0%B9%80%E0%B8%9A%E0%B8%97%E0%B8%9F%E0%B8%B4%E0%B8%81.aspx
[Mon Nov 17 15:48:22.032389 2025] [:error] [pid 31419:tid 31445] [client 207.241.235.149:60994] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/pg%20slot.aspx"] [unique_id "aRrTRgHQ5Sbp7elmDZhmkAAAApg"], referer: http://dwelectservices.com.au/%E0%B9%80%E0%B8%9A%E0%B8%97%E0%B8%9F%E0%B8%B4%E0%B8%81.aspx
[Mon Nov 17 15:48:22.348114 2025] [:error] [pid 65302:tid 65314] [client 207.241.235.149:32806] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/pg%20slot.aspx"] [unique_id "aRrTRgPMSx2v85r8y7zakQAAAUo"], referer: http://dwelectservices.com.au/%E0%B9%80%E0%B8%9A%E0%B8%97%E0%B8%9F%E0%B8%B4%E0%B8%81.aspx
[Mon Nov 17 15:53:44.070778 2025] [:error] [pid 30801:tid 30823] [client 207.241.235.149:59104] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/slot123.aspx"] [unique_id "aRrUiDbGAU49DhMTBD7JUwAAAlQ"], referer: http://dwelectservices.com.au/slot%20%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87.aspx
[Mon Nov 17 15:53:44.384264 2025] [:error] [pid 65302:tid 65323] [client 207.241.235.149:59140] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/slot123.aspx"] [unique_id "aRrUiAPMSx2v85r8y7zbxgAAAVM"], referer: http://dwelectservices.com.au/slot%20%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87.aspx
[Mon Nov 17 15:53:44.706510 2025] [:error] [pid 39451:tid 39528] [client 207.241.235.149:59182] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/slot123.aspx"] [unique_id "aRrUiOfgkqXTS0SO3fAAVgAAAJQ"], referer: http://dwelectservices.com.au/slot%20%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87.aspx
[Mon Nov 17 15:53:45.017767 2025] [:error] [pid 32753:tid 32768] [client 207.241.235.149:59230] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/slot123.aspx"] [unique_id "aRrUiU6YNqI5vkht9203SQAAA8w"], referer: http://dwelectservices.com.au/slot%20%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87.aspx
[Mon Nov 17 15:58:54.115322 2025] [:error] [pid 39449:tid 39462] [client 207.241.235.149:38970] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "aRrVvqUCymTA3MDfzLMipgAAAAg"], referer: http://dwelectservices.com.au/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%AD%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%A5%E0%B8%99%E0%B9%8C%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95.aspx
[Mon Nov 17 15:58:54.435086 2025] [:error] [pid 32753:tid 32761] [client 207.241.235.149:39000] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "aRrVvk6YNqI5vkht9204ewAAA8U"], referer: http://dwelectservices.com.au/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%AD%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%A5%E0%B8%99%E0%B9%8C%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95.aspx
[Mon Nov 17 15:58:54.755244 2025] [:error] [pid 39451:tid 39519] [client 207.241.235.149:39042] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "aRrVvufgkqXTS0SO3fAAxwAAAIs"], referer: http://dwelectservices.com.au/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%AD%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%A5%E0%B8%99%E0%B9%8C%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95.aspx
[Mon Nov 17 15:58:55.068633 2025] [:error] [pid 40548:tid 40571] [client 207.241.235.149:39086] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "aRrVvwM_PykfYnxh-j9I1wAAARU"], referer: http://dwelectservices.com.au/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%AD%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%A5%E0%B8%99%E0%B9%8C%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95.aspx
[Tue Nov 18 01:41:27.250899 2025] [:error] [pid 40562:tid 40634] [client 207.241.235.149:56540] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/pxj.com%20%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%20188.aspx"] [unique_id "aRteRx18kaCmPuHE4a8T4AAAAUs"], referer: http://dwelectservices.com.au/slot%20%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87.aspx
[Tue Nov 18 01:41:28.563374 2025] [:error] [pid 40561:tid 40611] [client 207.241.235.149:56568] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/pxj.com%20%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%20188.aspx"] [unique_id "aRteSJdU597fIdQPRD_FRAAAAM8"], referer: http://dwelectservices.com.au/slot%20%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87.aspx
[Tue Nov 18 01:41:28.879644 2025] [:error] [pid 40793:tid 40856] [client 207.241.235.149:56718] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/pxj.com%20%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%20188.aspx"] [unique_id "aRteSAzccxeNeH-NUVgy3AAAAEY"], referer: http://dwelectservices.com.au/slot%20%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87.aspx
[Tue Nov 18 01:41:29.301100 2025] [:error] [pid 40561:tid 40615] [client 207.241.235.149:56748] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/pxj.com%20%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%20188.aspx"] [unique_id "aRteSZdU597fIdQPRD_FSAAAANM"], referer: http://dwelectservices.com.au/slot%20%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87.aspx
[Tue Nov 18 01:46:40.667648 2025] [:error] [pid 39189:tid 39204] [client 207.241.235.149:40026] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "aRtfgJJJLi753QwyqGzlLgAAAIs"], referer: http://dwelectservices.com.au/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%AD%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%A5%E0%B8%99%E0%B9%8C%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95.aspx
[Tue Nov 18 01:46:40.989323 2025] [:error] [pid 40561:tid 40617] [client 207.241.235.149:40070] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "aRtfgJdU597fIdQPRD_HhAAAANU"], referer: http://dwelectservices.com.au/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%AD%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%A5%E0%B8%99%E0%B9%8C%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95.aspx
[Tue Nov 18 01:46:41.307386 2025] [:error] [pid 40561:tid 40618] [client 207.241.235.149:40116] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "aRtfgZdU597fIdQPRD_HhgAAANY"], referer: http://dwelectservices.com.au/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%AD%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%A5%E0%B8%99%E0%B9%8C%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95.aspx
[Tue Nov 18 01:46:41.620319 2025] [:error] [pid 40561:tid 40603] [client 207.241.235.149:40160] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "aRtfgZdU597fIdQPRD_HiAAAAMc"], referer: http://dwelectservices.com.au/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%AD%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%A5%E0%B8%99%E0%B9%8C%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95.aspx
[Tue Nov 18 01:51:50.880030 2025] [:error] [pid 39189:tid 39212] [client 207.241.235.149:49264] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ufa369%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2.aspx"] [unique_id "aRtgtpJJLi753QwyqGzoQAAAAJM"], referer: http://dwelectservices.com.au/ufa777.aspx
[Tue Nov 18 01:51:51.260600 2025] [:error] [pid 40561:tid 40617] [client 207.241.235.149:49288] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ufa369%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2.aspx"] [unique_id "aRtgt5dU597fIdQPRD_JegAAANU"], referer: http://dwelectservices.com.au/ufa777.aspx
[Tue Nov 18 01:51:51.574627 2025] [:error] [pid 40562:tid 40631] [client 207.241.235.149:49316] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ufa369%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2.aspx"] [unique_id "aRtgtx18kaCmPuHE4a8YbAAAAUg"], referer: http://dwelectservices.com.au/ufa777.aspx
[Tue Nov 18 01:51:51.892156 2025] [:error] [pid 40562:tid 40635] [client 207.241.235.149:49346] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ufa369%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2.aspx"] [unique_id "aRtgtx18kaCmPuHE4a8YbQAAAUw"], referer: http://dwelectservices.com.au/ufa777.aspx
[Tue Nov 18 01:57:03.648752 2025] [:error] [pid 40793:tid 40868] [client 207.241.235.149:57590] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "aRth7wzccxeNeH-NUVg6OQAAAFI"], referer: http://dwelectservices.com.au/xoslotz.aspx
[Tue Nov 18 01:57:03.968003 2025] [:error] [pid 40793:tid 40860] [client 207.241.235.149:57622] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "aRth7wzccxeNeH-NUVg6OgAAAEo"], referer: http://dwelectservices.com.au/xoslotz.aspx
[Tue Nov 18 01:57:04.284329 2025] [:error] [pid 40562:tid 40641] [client 207.241.235.149:57652] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "aRth8B18kaCmPuHE4a8bBQAAAVI"], referer: http://dwelectservices.com.au/xoslotz.aspx
[Tue Nov 18 01:57:04.609845 2025] [:error] [pid 40793:tid 40872] [client 207.241.235.149:57690] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "aRth8AzccxeNeH-NUVg6PgAAAFY"], referer: http://dwelectservices.com.au/xoslotz.aspx
[Tue Nov 18 02:02:15.183365 2025] [:error] [pid 39189:tid 39198] [client 207.241.235.149:33754] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/pgneko.aspx"] [unique_id "aRtjJ5JJLi753QwyqGzuWwAAAIU"], referer: http://dwelectservices.com.au/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95789.aspx
[Tue Nov 18 02:02:15.499725 2025] [:error] [pid 40793:tid 40863] [client 207.241.235.149:33788] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/pgneko.aspx"] [unique_id "aRtjJwzccxeNeH-NUVg8MQAAAE0"], referer: http://dwelectservices.com.au/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95789.aspx
[Tue Nov 18 02:02:15.814293 2025] [:error] [pid 40553:tid 40593] [client 207.241.235.149:33838] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/pgneko.aspx"] [unique_id "aRtjJ9uLE1BqoX0RcsL1uAAAABg"], referer: http://dwelectservices.com.au/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95789.aspx
[Tue Nov 18 02:02:16.127321 2025] [:error] [pid 40561:tid 40608] [client 207.241.235.149:33874] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/pgneko.aspx"] [unique_id "aRtjKJdU597fIdQPRD_NuwAAAMw"], referer: http://dwelectservices.com.au/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95789.aspx
[Tue Nov 18 02:07:26.772591 2025] [:error] [pid 40553:tid 40570] [client 207.241.235.149:41318] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5.aspx"] [unique_id "aRtkXtuLE1BqoX0RcsL3KgAAAAI"], referer: http://dwelectservices.com.au/%E0%B8%A2%E0%B8%B9%20%E0%B8%9F%E0%B9%88%E0%B8%B2%20168%20vip.aspx
[Tue Nov 18 02:07:27.092363 2025] [:error] [pid 40793:tid 40860] [client 207.241.235.149:41360] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5.aspx"] [unique_id "aRtkXwzccxeNeH-NUVg-PwAAAEo"], referer: http://dwelectservices.com.au/%E0%B8%A2%E0%B8%B9%20%E0%B8%9F%E0%B9%88%E0%B8%B2%20168%20vip.aspx
[Tue Nov 18 02:07:27.404086 2025] [:error] [pid 40793:tid 40854] [client 207.241.235.149:41420] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5.aspx"] [unique_id "aRtkXwzccxeNeH-NUVg-QAAAAEQ"], referer: http://dwelectservices.com.au/%E0%B8%A2%E0%B8%B9%20%E0%B8%9F%E0%B9%88%E0%B8%B2%20168%20vip.aspx
[Tue Nov 18 02:07:27.718454 2025] [:error] [pid 40561:tid 40605] [client 207.241.235.149:41464] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5.aspx"] [unique_id "aRtkX5dU597fIdQPRD_POwAAAMk"], referer: http://dwelectservices.com.au/%E0%B8%A2%E0%B8%B9%20%E0%B8%9F%E0%B9%88%E0%B8%B2%20168%20vip.aspx
[Tue Nov 18 02:12:36.353144 2025] [:error] [pid 40793:tid 40853] [client 207.241.235.149:48870] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%2088.aspx"] [unique_id "aRtllAzccxeNeH-NUVhAHgAAAEM"], referer: http://dwelectservices.com.au/%E0%B8%AB%E0%B8%A7%E0%B8%A2%E0%B8%AE%E0%B8%B2%E0%B8%99%E0%B8%AD%E0%B8%A2%E0%B8%9E%E0%B8%B4%E0%B9%80%E0%B8%A8%E0%B8%A9%20ruay.aspx
[Tue Nov 18 02:12:36.674105 2025] [:error] [pid 40553:tid 40587] [client 207.241.235.149:48904] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%2088.aspx"] [unique_id "aRtllNuLE1BqoX0RcsL4WgAAABI"], referer: http://dwelectservices.com.au/%E0%B8%AB%E0%B8%A7%E0%B8%A2%E0%B8%AE%E0%B8%B2%E0%B8%99%E0%B8%AD%E0%B8%A2%E0%B8%9E%E0%B8%B4%E0%B9%80%E0%B8%A8%E0%B8%A9%20ruay.aspx
[Tue Nov 18 02:12:36.991298 2025] [:error] [pid 40553:tid 40568] [client 207.241.235.149:48948] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%2088.aspx"] [unique_id "aRtllNuLE1BqoX0RcsL4XQAAAAA"], referer: http://dwelectservices.com.au/%E0%B8%AB%E0%B8%A7%E0%B8%A2%E0%B8%AE%E0%B8%B2%E0%B8%99%E0%B8%AD%E0%B8%A2%E0%B8%9E%E0%B8%B4%E0%B9%80%E0%B8%A8%E0%B8%A9%20ruay.aspx
[Tue Nov 18 02:12:38.324748 2025] [:error] [pid 40553:tid 40577] [client 207.241.235.149:49006] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%2088.aspx"] [unique_id "aRtlltuLE1BqoX0RcsL4ZAAAAAg"], referer: http://dwelectservices.com.au/%E0%B8%AB%E0%B8%A7%E0%B8%A2%E0%B8%AE%E0%B8%B2%E0%B8%99%E0%B8%AD%E0%B8%A2%E0%B8%9E%E0%B8%B4%E0%B9%80%E0%B8%A8%E0%B8%A9%20ruay.aspx
[Tue Nov 18 02:17:49.336688 2025] [:error] [pid 40553:tid 40587] [client 207.241.235.149:56312] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20%E0%B8%9D%E0%B8%B2%E0%B8%81%E0%B8%96%E0%B8%AD%E0%B8%99%20true%20wallet%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%A1%E0%B8%B5%20%E0%B8%82%E0%B8%B1%E0%B9%89%E0%B8%99%20%E0%B8%95%E0%B9%88%E0%B9%8D%E0%B8%B2%2010%20%E0%B8%A3%E0%B8%B1%E0%B8%9A%20100.aspx"] [unique_id "aRtmzduLE1BqoX0RcsL5qQAAABI"], referer: http://dwelectservices.com.au/%E0%B8%AB%E0%B8%A7%E0%B8%B2%E0%B8%99%E0%B9%80%E0%B8%88%E0%B8%B5%E0%B9%8A%E0%B8%A2%E0%B8%9A777.aspx
[Tue Nov 18 02:17:49.651453 2025] [:error] [pid 40553:tid 40573] [client 207.241.235.149:56370] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20%E0%B8%9D%E0%B8%B2%E0%B8%81%E0%B8%96%E0%B8%AD%E0%B8%99%20true%20wallet%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%A1%E0%B8%B5%20%E0%B8%82%E0%B8%B1%E0%B9%89%E0%B8%99%20%E0%B8%95%E0%B9%88%E0%B9%8D%E0%B8%B2%2010%20%E0%B8%A3%E0%B8%B1%E0%B8%9A%20100.aspx"] [unique_id "aRtmzduLE1BqoX0RcsL5qgAAAAU"], referer: http://dwelectservices.com.au/%E0%B8%AB%E0%B8%A7%E0%B8%B2%E0%B8%99%E0%B9%80%E0%B8%88%E0%B8%B5%E0%B9%8A%E0%B8%A2%E0%B8%9A777.aspx
[Tue Nov 18 02:17:49.969352 2025] [:error] [pid 39189:tid 39210] [client 207.241.235.149:56404] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20%E0%B8%9D%E0%B8%B2%E0%B8%81%E0%B8%96%E0%B8%AD%E0%B8%99%20true%20wallet%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%A1%E0%B8%B5%20%E0%B8%82%E0%B8%B1%E0%B9%89%E0%B8%99%20%E0%B8%95%E0%B9%88%E0%B9%8D%E0%B8%B2%2010%20%E0%B8%A3%E0%B8%B1%E0%B8%9A%20100.aspx"] [unique_id "aRtmzZJJLi753QwyqGz0yQAAAJE"], referer: http://dwelectservices.com.au/%E0%B8%AB%E0%B8%A7%E0%B8%B2%E0%B8%99%E0%B9%80%E0%B8%88%E0%B8%B5%E0%B9%8A%E0%B8%A2%E0%B8%9A777.aspx
[Tue Nov 18 02:17:50.289124 2025] [:error] [pid 40553:tid 40593] [client 207.241.235.149:56464] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20%E0%B8%9D%E0%B8%B2%E0%B8%81%E0%B8%96%E0%B8%AD%E0%B8%99%20true%20wallet%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%A1%E0%B8%B5%20%E0%B8%82%E0%B8%B1%E0%B9%89%E0%B8%99%20%E0%B8%95%E0%B9%88%E0%B9%8D%E0%B8%B2%2010%20%E0%B8%A3%E0%B8%B1%E0%B8%9A%20100.aspx"] [unique_id "aRtmztuLE1BqoX0RcsL5rQAAABg"], referer: http://dwelectservices.com.au/%E0%B8%AB%E0%B8%A7%E0%B8%B2%E0%B8%99%E0%B9%80%E0%B8%88%E0%B8%B5%E0%B9%8A%E0%B8%A2%E0%B8%9A777.aspx
[Tue Nov 18 02:22:58.969008 2025] [:error] [pid 40793:tid 40868] [client 207.241.235.149:36096] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/%E0%B8%9A%E0%B8%B2%E0%B8%84%E0%B8%B2%E0%B8%A3%E0%B9%88%E0%B8%B2%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87.aspx"] [unique_id "aRtoAgzccxeNeH-NUVhDkAAAAFI"], referer: http://dwelectservices.com.au/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9D%E0%B8%B2%E0%B8%81%E0%B8%96%E0%B8%AD%E0%B8%99%20true%20wallet%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%A1%E0%B8%B5%20%E0%B8%82%E0%B8%B1%E0%B9%89%E0%B8%99%E0%B8%95%E0%B9%88%E0%B9%8D%E0%B8%B2.aspx
[Tue Nov 18 02:22:59.285104 2025] [:error] [pid 40562:tid 40631] [client 207.241.235.149:36134] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/%E0%B8%9A%E0%B8%B2%E0%B8%84%E0%B8%B2%E0%B8%A3%E0%B9%88%E0%B8%B2%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87.aspx"] [unique_id "aRtoAx18kaCmPuHE4a8i3QAAAUg"], referer: http://dwelectservices.com.au/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9D%E0%B8%B2%E0%B8%81%E0%B8%96%E0%B8%AD%E0%B8%99%20true%20wallet%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%A1%E0%B8%B5%20%E0%B8%82%E0%B8%B1%E0%B9%89%E0%B8%99%E0%B8%95%E0%B9%88%E0%B9%8D%E0%B8%B2.aspx
[Tue Nov 18 02:22:59.600865 2025] [:error] [pid 40562:tid 40643] [client 207.241.235.149:36170] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/%E0%B8%9A%E0%B8%B2%E0%B8%84%E0%B8%B2%E0%B8%A3%E0%B9%88%E0%B8%B2%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87.aspx"] [unique_id "aRtoAx18kaCmPuHE4a8i3wAAAVQ"], referer: http://dwelectservices.com.au/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9D%E0%B8%B2%E0%B8%81%E0%B8%96%E0%B8%AD%E0%B8%99%20true%20wallet%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%A1%E0%B8%B5%20%E0%B8%82%E0%B8%B1%E0%B9%89%E0%B8%99%E0%B8%95%E0%B9%88%E0%B9%8D%E0%B8%B2.aspx
[Tue Nov 18 02:22:59.912663 2025] [:error] [pid 39189:tid 39202] [client 207.241.235.149:36208] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/%E0%B8%9A%E0%B8%B2%E0%B8%84%E0%B8%B2%E0%B8%A3%E0%B9%88%E0%B8%B2%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87.aspx"] [unique_id "aRtoA5JJLi753QwyqGz36gAAAIk"], referer: http://dwelectservices.com.au/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9D%E0%B8%B2%E0%B8%81%E0%B8%96%E0%B8%AD%E0%B8%99%20true%20wallet%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%A1%E0%B8%B5%20%E0%B8%82%E0%B8%B1%E0%B9%89%E0%B8%99%E0%B8%95%E0%B9%88%E0%B9%8D%E0%B8%B2.aspx
[Tue Nov 18 02:28:12.028648 2025] [:error] [pid 40793:tid 40850] [client 207.241.235.149:43354] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/24th%20slot.aspx"] [unique_id "aRtpPAzccxeNeH-NUVhFYgAAAEA"], referer: http://dwelectservices.com.au/metal%20slot.aspx
[Tue Nov 18 02:28:12.342073 2025] [:error] [pid 40793:tid 40873] [client 207.241.235.149:43402] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/24th%20slot.aspx"] [unique_id "aRtpPAzccxeNeH-NUVhFZQAAAFc"], referer: http://dwelectservices.com.au/metal%20slot.aspx
[Tue Nov 18 02:28:12.657446 2025] [:error] [pid 40561:tid 40602] [client 207.241.235.149:43428] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/24th%20slot.aspx"] [unique_id "aRtpPJdU597fIdQPRD_VvwAAAMY"], referer: http://dwelectservices.com.au/metal%20slot.aspx
[Tue Nov 18 02:28:12.968611 2025] [:error] [pid 40561:tid 40614] [client 207.241.235.149:43462] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/24th%20slot.aspx"] [unique_id "aRtpPJdU597fIdQPRD_VwAAAANI"], referer: http://dwelectservices.com.au/metal%20slot.aspx
[Tue Nov 18 02:33:22.153353 2025] [:error] [pid 39189:tid 39216] [client 207.241.235.149:50470] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aRtqcpJJLi753QwyqGz8PQAAAJc"], referer: http://dwelectservices.com.au/10%E0%B8%A3%E0%B8%B1%E0%B8%9A100%E0%B8%AA%E0%B8%A1%E0%B8%B2%E0%B8%8A%E0%B8%B4%E0%B8%81%E0%B9%83%E0%B8%AB%E0%B8%A1%E0%B9%88%20wallet.aspx
[Tue Nov 18 02:33:22.464915 2025] [:error] [pid 40553:tid 40583] [client 207.241.235.149:50510] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aRtqctuLE1BqoX0RcsL-pQAAAA4"], referer: http://dwelectservices.com.au/10%E0%B8%A3%E0%B8%B1%E0%B8%9A100%E0%B8%AA%E0%B8%A1%E0%B8%B2%E0%B8%8A%E0%B8%B4%E0%B8%81%E0%B9%83%E0%B8%AB%E0%B8%A1%E0%B9%88%20wallet.aspx
[Tue Nov 18 02:33:23.213651 2025] [:error] [pid 40553:tid 40592] [client 207.241.235.149:50598] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aRtqc9uLE1BqoX0RcsL-qQAAABc"], referer: http://dwelectservices.com.au/10%E0%B8%A3%E0%B8%B1%E0%B8%9A100%E0%B8%AA%E0%B8%A1%E0%B8%B2%E0%B8%8A%E0%B8%B4%E0%B8%81%E0%B9%83%E0%B8%AB%E0%B8%A1%E0%B9%88%20wallet.aspx
[Tue Nov 18 02:33:23.530202 2025] [:error] [pid 40553:tid 40590] [client 207.241.235.149:50634] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aRtqc9uLE1BqoX0RcsL-qwAAABU"], referer: http://dwelectservices.com.au/10%E0%B8%A3%E0%B8%B1%E0%B8%9A100%E0%B8%AA%E0%B8%A1%E0%B8%B2%E0%B8%8A%E0%B8%B4%E0%B8%81%E0%B9%83%E0%B8%AB%E0%B8%A1%E0%B9%88%20wallet.aspx
[Tue Nov 18 02:43:46.826741 2025] [:error] [pid 25055:tid 25086] [client 207.241.235.149:57132] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20pg999.aspx"] [unique_id "aRts4i1ycIUMyo0DEcLpaQAAA8I"], referer: http://dwelectservices.com.au/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx
[Tue Nov 18 02:43:47.169530 2025] [:error] [pid 25054:tid 25062] [client 207.241.235.149:57178] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20pg999.aspx"] [unique_id "aRts47kemTDclsD2J9jYPAAAA4U"], referer: http://dwelectservices.com.au/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx
[Tue Nov 18 02:43:47.502133 2025] [:error] [pid 39189:tid 39204] [client 207.241.235.149:57200] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20pg999.aspx"] [unique_id "aRts45JJLi753QwyqGz_LwAAAIs"], referer: http://dwelectservices.com.au/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx
[Tue Nov 18 02:43:47.821177 2025] [:error] [pid 39189:tid 39211] [client 207.241.235.149:57226] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20pg999.aspx"] [unique_id "aRts45JJLi753QwyqGz_MwAAAJI"], referer: http://dwelectservices.com.au/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx
[Tue Nov 18 02:48:58.637785 2025] [:error] [pid 25055:tid 25103] [client 207.241.235.149:60826] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87.aspx"] [unique_id "aRtuGi1ycIUMyo0DEcLqtgAAA9M"], referer: http://dwelectservices.com.au/betflix%20thailand.aspx
[Tue Nov 18 02:48:58.962614 2025] [:error] [pid 24993:tid 25019] [client 207.241.235.149:60854] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87.aspx"] [unique_id "aRtuGttVbCOW5QnBx1R-ygAAAxg"], referer: http://dwelectservices.com.au/betflix%20thailand.aspx
[Tue Nov 18 02:48:59.274963 2025] [:error] [pid 24898:tid 24922] [client 207.241.235.149:60888] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87.aspx"] [unique_id "aRtuG2Qbwxb61buaxA9r1QAAAlU"], referer: http://dwelectservices.com.au/betflix%20thailand.aspx
[Tue Nov 18 02:48:59.594121 2025] [:error] [pid 25055:tid 25104] [client 207.241.235.149:60920] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87.aspx"] [unique_id "aRtuGy1ycIUMyo0DEcLquQAAA9Q"], referer: http://dwelectservices.com.au/betflix%20thailand.aspx
[Tue Nov 18 02:54:00.226941 2025] [:error] [pid 24928:tid 24933] [client 207.241.235.149:39682] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87.aspx"] [unique_id "aRtvSOe2a38O8HjCzurtOwAAAoM"], referer: http://dwelectservices.com.au/betflix%20thailand.aspx
[Tue Nov 18 02:54:00.545137 2025] [:error] [pid 24898:tid 24911] [client 207.241.235.149:39706] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87.aspx"] [unique_id "aRtvSGQbwxb61buaxA9sngAAAko"], referer: http://dwelectservices.com.au/betflix%20thailand.aspx
[Tue Nov 18 02:54:00.857530 2025] [:error] [pid 24777:tid 24790] [client 207.241.235.149:39752] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87.aspx"] [unique_id "aRtvSPYMFHMtkgWmmlKXbgAAAQs"], referer: http://dwelectservices.com.au/betflix%20thailand.aspx
[Tue Nov 18 02:54:01.169046 2025] [:error] [pid 24898:tid 24914] [client 207.241.235.149:39802] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87.aspx"] [unique_id "aRtvSWQbwxb61buaxA9snwAAAk0"], referer: http://dwelectservices.com.au/betflix%20thailand.aspx
[Tue Nov 18 02:59:09.012940 2025] [:error] [pid 24840:tid 24858] [client 207.241.235.149:48496] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "aRtwfZRvn8wwYMxA_KWfaAAAAdA"], referer: http://dwelectservices.com.au/%E0%B8%84%E0%B9%88%E0%B8%B2%E0%B8%A2%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20888.aspx
[Tue Nov 18 02:59:09.332742 2025] [:error] [pid 24777:tid 24792] [client 207.241.235.149:48538] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "aRtwffYMFHMtkgWmmlKYBgAAAQ0"], referer: http://dwelectservices.com.au/%E0%B8%84%E0%B9%88%E0%B8%B2%E0%B8%A2%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20888.aspx
[Tue Nov 18 02:59:09.657027 2025] [:error] [pid 40562:tid 40641] [client 207.241.235.149:48578] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "aRtwfR18kaCmPuHE4a8qUgAAAVI"], referer: http://dwelectservices.com.au/%E0%B8%84%E0%B9%88%E0%B8%B2%E0%B8%A2%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20888.aspx
[Tue Nov 18 02:59:09.973004 2025] [:error] [pid 24993:tid 25001] [client 207.241.235.149:48622] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "aRtwfdtVbCOW5QnBx1SAsAAAAwY"], referer: http://dwelectservices.com.au/%E0%B8%84%E0%B9%88%E0%B8%B2%E0%B8%A2%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20888.aspx
[Tue Nov 18 03:04:20.576927 2025] [:error] [pid 25055:tid 25088] [client 207.241.235.149:54068] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2slotxo.aspx"] [unique_id "aRtxtC1ycIUMyo0DEcLtSwAAA8Q"], referer: http://dwelectservices.com.au/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%2050%20%E0%B8%96%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%94%E0%B9%89%20300.aspx
[Tue Nov 18 03:04:20.888563 2025] [:error] [pid 40562:tid 40641] [client 207.241.235.149:54110] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2slotxo.aspx"] [unique_id "aRtxtB18kaCmPuHE4a8q6AAAAVI"], referer: http://dwelectservices.com.au/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%2050%20%E0%B8%96%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%94%E0%B9%89%20300.aspx
[Tue Nov 18 03:04:21.200931 2025] [:error] [pid 25054:tid 25066] [client 207.241.235.149:54156] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2slotxo.aspx"] [unique_id "aRtxtbkemTDclsD2J9jdsAAAA4k"], referer: http://dwelectservices.com.au/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%2050%20%E0%B8%96%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%94%E0%B9%89%20300.aspx
[Tue Nov 18 03:04:21.529191 2025] [:error] [pid 24928:tid 24954] [client 207.241.235.149:54178] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2slotxo.aspx"] [unique_id "aRtxtee2a38O8HjCzurvbgAAApg"], referer: http://dwelectservices.com.au/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%2050%20%E0%B8%96%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%94%E0%B9%89%20300.aspx
[Tue Nov 18 03:09:33.017179 2025] [:error] [pid 24928:tid 24940] [client 207.241.235.149:33578] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%9A%E0%B8%B2%E0%B8%84%E0%B8%B2%E0%B8%A3%E0%B9%88%E0%B8%B2.aspx"] [unique_id "aRty7ee2a38O8HjCzurwcAAAAoo"], referer: http://dwelectservices.com.au/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95100.aspx
[Tue Nov 18 03:09:33.329225 2025] [:error] [pid 24840:tid 24856] [client 207.241.235.149:33618] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%9A%E0%B8%B2%E0%B8%84%E0%B8%B2%E0%B8%A3%E0%B9%88%E0%B8%B2.aspx"] [unique_id "aRty7ZRvn8wwYMxA_KWgywAAAc4"], referer: http://dwelectservices.com.au/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95100.aspx
[Tue Nov 18 03:09:33.643876 2025] [:error] [pid 24993:tid 24998] [client 207.241.235.149:33652] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%9A%E0%B8%B2%E0%B8%84%E0%B8%B2%E0%B8%A3%E0%B9%88%E0%B8%B2.aspx"] [unique_id "aRty7dtVbCOW5QnBx1SCogAAAwM"], referer: http://dwelectservices.com.au/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95100.aspx
[Tue Nov 18 03:09:33.961485 2025] [:error] [pid 25054:tid 25058] [client 207.241.235.149:33698] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%9A%E0%B8%B2%E0%B8%84%E0%B8%B2%E0%B8%A3%E0%B9%88%E0%B8%B2.aspx"] [unique_id "aRty7bkemTDclsD2J9jfMwAAA4E"], referer: http://dwelectservices.com.au/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95100.aspx
[Tue Nov 18 03:14:43.726422 2025] [:error] [pid 24777:tid 24789] [client 207.241.235.149:41630] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aRt0I_YMFHMtkgWmmlKZ0wAAAQo"], referer: http://dwelectservices.com.au/%E0%B8%A2%E0%B8%B7%E0%B8%99%E0%B8%A2%E0%B8%B1%E0%B8%99%E0%B9%80%E0%B8%9A%E0%B8%AD%E0%B8%A3%E0%B9%8C%20%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5.aspx
[Tue Nov 18 03:14:44.040623 2025] [:error] [pid 25054:tid 25061] [client 207.241.235.149:41676] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aRt0JLkemTDclsD2J9jgJQAAA4Q"], referer: http://dwelectservices.com.au/%E0%B8%A2%E0%B8%B7%E0%B8%99%E0%B8%A2%E0%B8%B1%E0%B8%99%E0%B9%80%E0%B8%9A%E0%B8%AD%E0%B8%A3%E0%B9%8C%20%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5.aspx
[Tue Nov 18 03:14:44.353220 2025] [:error] [pid 25054:tid 25058] [client 207.241.235.149:41728] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aRt0JLkemTDclsD2J9jgJwAAA4E"], referer: http://dwelectservices.com.au/%E0%B8%A2%E0%B8%B7%E0%B8%99%E0%B8%A2%E0%B8%B1%E0%B8%99%E0%B9%80%E0%B8%9A%E0%B8%AD%E0%B8%A3%E0%B9%8C%20%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5.aspx
[Tue Nov 18 03:14:44.664832 2025] [:error] [pid 25055:tid 25106] [client 207.241.235.149:41752] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aRt0JC1ycIUMyo0DEcLvHAAAA9Y"], referer: http://dwelectservices.com.au/%E0%B8%A2%E0%B8%B7%E0%B8%99%E0%B8%A2%E0%B8%B1%E0%B8%99%E0%B9%80%E0%B8%9A%E0%B8%AD%E0%B8%A3%E0%B9%8C%20%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5.aspx
[Tue Nov 18 03:19:56.090787 2025] [:error] [pid 25054:tid 25076] [client 207.241.235.149:52944] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/%E0%B9%80%E0%B8%81%E0%B8%A1%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B8%84%E0%B9%88%E0%B8%B2%E0%B8%A2%20pg%20%E0%B9%83%E0%B8%AB%E0%B8%A1%E0%B9%88%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aRt1XLkemTDclsD2J9jiBwAAA5M"], referer: http://dwelectservices.com.au/superslot%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2.aspx
[Tue Nov 18 03:19:56.410989 2025] [:error] [pid 25055:tid 25105] [client 207.241.235.149:52974] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/%E0%B9%80%E0%B8%81%E0%B8%A1%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B8%84%E0%B9%88%E0%B8%B2%E0%B8%A2%20pg%20%E0%B9%83%E0%B8%AB%E0%B8%A1%E0%B9%88%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aRt1XC1ycIUMyo0DEcLwRgAAA9U"], referer: http://dwelectservices.com.au/superslot%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2.aspx
[Tue Nov 18 03:19:56.740871 2025] [:error] [pid 25055:tid 25100] [client 207.241.235.149:53028] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/%E0%B9%80%E0%B8%81%E0%B8%A1%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B8%84%E0%B9%88%E0%B8%B2%E0%B8%A2%20pg%20%E0%B9%83%E0%B8%AB%E0%B8%A1%E0%B9%88%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aRt1XC1ycIUMyo0DEcLwSAAAA9A"], referer: http://dwelectservices.com.au/superslot%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2.aspx
[Tue Nov 18 03:19:57.053950 2025] [:error] [pid 25054:tid 25075] [client 207.241.235.149:53090] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/%E0%B9%80%E0%B8%81%E0%B8%A1%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B8%84%E0%B9%88%E0%B8%B2%E0%B8%A2%20pg%20%E0%B9%83%E0%B8%AB%E0%B8%A1%E0%B9%88%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aRt1XbkemTDclsD2J9jiCgAAA5I"], referer: http://dwelectservices.com.au/superslot%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2.aspx
[Tue Nov 18 03:25:05.995164 2025] [:error] [pid 39644:tid 39723] [client 207.241.235.149:38794] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mega%20slot.aspx"] [unique_id "aRt2keURIAAEDxhC3eu_jAAAAJI"], referer: http://dwelectservices.com.au/ufa168bet.aspx
[Tue Nov 18 03:25:06.310140 2025] [:error] [pid 39762:tid 39768] [client 207.241.235.149:38848] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mega%20slot.aspx"] [unique_id "aRt2kpWSJFResg9YHzgVLAAAAMI"], referer: http://dwelectservices.com.au/ufa168bet.aspx
[Tue Nov 18 03:25:06.628233 2025] [:error] [pid 39762:tid 39766] [client 207.241.235.149:38898] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mega%20slot.aspx"] [unique_id "aRt2kpWSJFResg9YHzgVLQAAAME"], referer: http://dwelectservices.com.au/ufa168bet.aspx
[Tue Nov 18 03:25:06.940743 2025] [:error] [pid 39644:tid 39717] [client 207.241.235.149:38950] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mega%20slot.aspx"] [unique_id "aRt2kuURIAAEDxhC3eu_kAAAAIw"], referer: http://dwelectservices.com.au/ufa168bet.aspx
[Tue Nov 18 03:35:29.014563 2025] [:error] [pid 11968:tid 12011] [client 207.241.235.149:54896] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%95%E0%B9%89%E0%B8%AD%E0%B8%87%E0%B8%9D%E0%B8%B2%E0%B8%81.aspx"] [unique_id "aRt5ASXd29tbwxi5Fj25eQAAAEU"], referer: http://dwelectservices.com.au/mafia%20slot%20%E0%B9%83%E0%B8%AB%E0%B8%A1%E0%B9%88%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx
[Tue Nov 18 03:35:29.336819 2025] [:error] [pid 11970:tid 12046] [client 207.241.235.149:54912] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%95%E0%B9%89%E0%B8%AD%E0%B8%87%E0%B8%9D%E0%B8%B2%E0%B8%81.aspx"] [unique_id "aRt5AXHLRG0HuH4aZ9VuogAAAI0"], referer: http://dwelectservices.com.au/mafia%20slot%20%E0%B9%83%E0%B8%AB%E0%B8%A1%E0%B9%88%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx
[Tue Nov 18 03:35:30.677920 2025] [:error] [pid 11968:tid 12026] [client 207.241.235.149:54946] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%95%E0%B9%89%E0%B8%AD%E0%B8%87%E0%B8%9D%E0%B8%B2%E0%B8%81.aspx"] [unique_id "aRt5AiXd29tbwxi5Fj25fgAAAFQ"], referer: http://dwelectservices.com.au/mafia%20slot%20%E0%B9%83%E0%B8%AB%E0%B8%A1%E0%B9%88%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx
[Tue Nov 18 03:35:30.998667 2025] [:error] [pid 11970:tid 12035] [client 207.241.235.149:55072] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%95%E0%B9%89%E0%B8%AD%E0%B8%87%E0%B8%9D%E0%B8%B2%E0%B8%81.aspx"] [unique_id "aRt5AnHLRG0HuH4aZ9VupAAAAII"], referer: http://dwelectservices.com.au/mafia%20slot%20%E0%B9%83%E0%B8%AB%E0%B8%A1%E0%B9%88%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx
[Tue Nov 18 03:40:41.344531 2025] [:error] [pid 43154:tid 43179] [client 207.241.235.149:55938] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/betflix%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2.aspx"] [unique_id "aRt6ORss0cH8aoO-cLKu7AAAANQ"], referer: http://dwelectservices.com.au/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95.aspx
[Tue Nov 18 03:40:41.658767 2025] [:error] [pid 43154:tid 43175] [client 207.241.235.149:55970] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/betflix%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2.aspx"] [unique_id "aRt6ORss0cH8aoO-cLKu7gAAANA"], referer: http://dwelectservices.com.au/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95.aspx
[Tue Nov 18 03:40:41.985165 2025] [:error] [pid 43059:tid 43107] [client 207.241.235.149:55996] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/betflix%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2.aspx"] [unique_id "aRt6OVGovOS5Clvw1z1BDAAAAEk"], referer: http://dwelectservices.com.au/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95.aspx
[Tue Nov 18 03:40:42.297866 2025] [:error] [pid 43060:tid 43141] [client 207.241.235.149:56032] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/betflix%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2.aspx"] [unique_id "aRt6OmKGiRR6-dIELSffzAAAAJA"], referer: http://dwelectservices.com.au/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95.aspx
[Tue Nov 18 03:45:52.693403 2025] [:error] [pid 43154:tid 43166] [client 207.241.235.149:59820] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/%E0%B8%88%E0%B8%B5%E0%B8%84%E0%B8%A5%E0%B8%B1%E0%B8%9A.aspx"] [unique_id "aRt7cBss0cH8aoO-cLKxdwAAAMc"], referer: http://dwelectservices.com.au/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%95%E0%B9%89%E0%B8%AD%E0%B8%87%E0%B8%9D%E0%B8%B2%E0%B8%81%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%95%E0%B9%89%E0%B8%AD%E0%B8%87%E0%B9%81%E0%B8%8A%E0%B8%A3%E0%B9%8C%202022%20%E0%B8%81%E0%B8%94%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B9%80%E0%B8%AD%E0%B8%87.aspx
[Tue Nov 18 03:45:54.038096 2025] [:error] [pid 43060:tid 43125] [client 207.241.235.149:59846] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/%E0%B8%88%E0%B8%B5%E0%B8%84%E0%B8%A5%E0%B8%B1%E0%B8%9A.aspx"] [unique_id "aRt7cmKGiRR6-dIELSfhzAAAAIA"], referer: http://dwelectservices.com.au/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%95%E0%B9%89%E0%B8%AD%E0%B8%87%E0%B8%9D%E0%B8%B2%E0%B8%81%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%95%E0%B9%89%E0%B8%AD%E0%B8%87%E0%B9%81%E0%B8%8A%E0%B8%A3%E0%B9%8C%202022%20%E0%B8%81%E0%B8%94%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B9%80%E0%B8%AD%E0%B8%87.aspx
[Tue Nov 18 03:45:54.353158 2025] [:error] [pid 43060:tid 43143] [client 207.241.235.149:60004] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/%E0%B8%88%E0%B8%B5%E0%B8%84%E0%B8%A5%E0%B8%B1%E0%B8%9A.aspx"] [unique_id "aRt7cmKGiRR6-dIELSfhzgAAAJI"], referer: http://dwelectservices.com.au/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%95%E0%B9%89%E0%B8%AD%E0%B8%87%E0%B8%9D%E0%B8%B2%E0%B8%81%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%95%E0%B9%89%E0%B8%AD%E0%B8%87%E0%B9%81%E0%B8%8A%E0%B8%A3%E0%B9%8C%202022%20%E0%B8%81%E0%B8%94%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B9%80%E0%B8%AD%E0%B8%87.aspx
[Tue Nov 18 03:45:54.665720 2025] [:error] [pid 43060:tid 43140] [client 207.241.235.149:60036] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/%E0%B8%88%E0%B8%B5%E0%B8%84%E0%B8%A5%E0%B8%B1%E0%B8%9A.aspx"] [unique_id "aRt7cmKGiRR6-dIELSfhzwAAAI8"], referer: http://dwelectservices.com.au/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%95%E0%B9%89%E0%B8%AD%E0%B8%87%E0%B8%9D%E0%B8%B2%E0%B8%81%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%95%E0%B9%89%E0%B8%AD%E0%B8%87%E0%B9%81%E0%B8%8A%E0%B8%A3%E0%B9%8C%202022%20%E0%B8%81%E0%B8%94%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B9%80%E0%B8%AD%E0%B8%87.aspx
[Tue Nov 18 03:51:09.897528 2025] [:error] [pid 16433:tid 16492] [client 207.241.235.149:38096] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "aRt8rVw93sqXL8h98r03lwAAAFI"], referer: http://dwelectservices.com.au/%E0%B8%AA%E0%B8%A1%E0%B8%B1%E0%B8%84%E0%B8%A3%E0%B8%9A%E0%B8%B2%E0%B8%84%E0%B8%B2%E0%B8%A3%E0%B9%88%E0%B8%B2888.aspx
[Tue Nov 18 03:51:10.213956 2025] [:error] [pid 16433:tid 16474] [client 207.241.235.149:38152] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "aRt8rlw93sqXL8h98r03mwAAAEA"], referer: http://dwelectservices.com.au/%E0%B8%AA%E0%B8%A1%E0%B8%B1%E0%B8%84%E0%B8%A3%E0%B8%9A%E0%B8%B2%E0%B8%84%E0%B8%B2%E0%B8%A3%E0%B9%88%E0%B8%B2888.aspx
[Tue Nov 18 03:51:10.543712 2025] [:error] [pid 16434:tid 16510] [client 207.241.235.149:38184] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "aRt8ru59VW7UV0FYXhWFOgAAAIk"], referer: http://dwelectservices.com.au/%E0%B8%AA%E0%B8%A1%E0%B8%B1%E0%B8%84%E0%B8%A3%E0%B8%9A%E0%B8%B2%E0%B8%84%E0%B8%B2%E0%B8%A3%E0%B9%88%E0%B8%B2888.aspx
[Tue Nov 18 03:51:10.895758 2025] [:error] [pid 16433:tid 16484] [client 207.241.235.149:38226] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "aRt8rlw93sqXL8h98r03nQAAAEo"], referer: http://dwelectservices.com.au/%E0%B8%AA%E0%B8%A1%E0%B8%B1%E0%B8%84%E0%B8%A3%E0%B8%9A%E0%B8%B2%E0%B8%84%E0%B8%B2%E0%B8%A3%E0%B9%88%E0%B8%B2888.aspx
[Tue Nov 18 03:56:31.833348 2025] [:error] [pid 61482:tid 61508] [client 207.241.235.149:47508] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%20gclub1688.aspx"] [unique_id "aRt97_tNHsWZClVWav4guQAAANU"], referer: http://dwelectservices.com.au/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87.aspx
[Tue Nov 18 03:56:32.154035 2025] [:error] [pid 61391:tid 61417] [client 207.241.235.149:47550] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%20gclub1688.aspx"] [unique_id "aRt98IwXIKmhlnkP3-c6ywAAABE"], referer: http://dwelectservices.com.au/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87.aspx
[Tue Nov 18 03:56:32.470214 2025] [:error] [pid 61482:tid 61497] [client 207.241.235.149:47598] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%20gclub1688.aspx"] [unique_id "aRt98PtNHsWZClVWav4gvAAAAMo"], referer: http://dwelectservices.com.au/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87.aspx
[Tue Nov 18 03:56:32.803601 2025] [:error] [pid 61392:tid 61431] [client 207.241.235.149:47634] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%20gclub1688.aspx"] [unique_id "aRt98HSmvb496zZxueKoPQAAAEI"], referer: http://dwelectservices.com.au/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87.aspx
[Tue Nov 18 04:01:50.331611 2025] [:error] [pid 61391:tid 61422] [client 207.241.235.149:49996] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20pg%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20%E0%B9%81%E0%B8%95%E0%B8%81%E0%B8%AB%E0%B8%99%E0%B8%B1%E0%B8%81.aspx"] [unique_id "aRt_LowXIKmhlnkP3-c8uwAAABY"], referer: http://dwelectservices.com.au/betflik%20%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%2050.aspx
[Tue Nov 18 04:01:50.646244 2025] [:error] [pid 61393:tid 61462] [client 207.241.235.149:50032] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20pg%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20%E0%B9%81%E0%B8%95%E0%B8%81%E0%B8%AB%E0%B8%99%E0%B8%B1%E0%B8%81.aspx"] [unique_id "aRt_LmH9XjlbVPv9gQX7HgAAAIY"], referer: http://dwelectservices.com.au/betflik%20%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%2050.aspx
[Tue Nov 18 04:01:50.965106 2025] [:error] [pid 61391:tid 61405] [client 207.241.235.149:50080] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20pg%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20%E0%B9%81%E0%B8%95%E0%B8%81%E0%B8%AB%E0%B8%99%E0%B8%B1%E0%B8%81.aspx"] [unique_id "aRt_LowXIKmhlnkP3-c8vAAAAAU"], referer: http://dwelectservices.com.au/betflik%20%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%2050.aspx
[Tue Nov 18 04:01:51.277391 2025] [:error] [pid 61482:tid 61506] [client 207.241.235.149:50110] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20pg%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20%E0%B9%81%E0%B8%95%E0%B8%81%E0%B8%AB%E0%B8%99%E0%B8%B1%E0%B8%81.aspx"] [unique_id "aRt_L_tNHsWZClVWav4jdQAAANM"], referer: http://dwelectservices.com.au/betflik%20%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%2050.aspx
[Tue Nov 18 04:07:09.661228 2025] [:error] [pid 61391:tid 61418] [client 207.241.235.149:52704] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9B%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9B%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aRuAbYwXIKmhlnkP3-c-lwAAABI"], referer: http://dwelectservices.com.au/mm88%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2.aspx
[Tue Nov 18 04:07:09.986736 2025] [:error] [pid 61393:tid 61477] [client 207.241.235.149:52734] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9B%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9B%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aRuAbWH9XjlbVPv9gQX80wAAAJU"], referer: http://dwelectservices.com.au/mm88%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2.aspx
[Tue Nov 18 04:07:10.309788 2025] [:error] [pid 61392:tid 61435] [client 207.241.235.149:52780] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9B%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9B%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aRuAbnSmvb496zZxueKrsQAAAEY"], referer: http://dwelectservices.com.au/mm88%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2.aspx
[Tue Nov 18 04:07:10.629817 2025] [:error] [pid 61392:tid 61437] [client 207.241.235.149:52812] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9B%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9B%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aRuAbnSmvb496zZxueKrsgAAAEg"], referer: http://dwelectservices.com.au/mm88%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2.aspx
[Tue Nov 18 04:12:28.582242 2025] [:error] [pid 61482:tid 61496] [client 207.241.235.149:60114] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "aRuBrPtNHsWZClVWav4oUwAAAMk"], referer: http://dwelectservices.com.au/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%A7%E0%B8%AD%E0%B9%80%E0%B8%A5%E0%B8%97%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx
[Tue Nov 18 04:12:28.937250 2025] [:error] [pid 29195:tid 29202] [client 207.241.235.149:60164] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "aRuBrBMeonxy_4yeOTUNvwAAAQU"], referer: http://dwelectservices.com.au/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%A7%E0%B8%AD%E0%B9%80%E0%B8%A5%E0%B8%97%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx
[Tue Nov 18 04:12:29.255254 2025] [:error] [pid 29195:tid 29213] [client 207.241.235.149:60214] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "aRuBrRMeonxy_4yeOTUNwgAAARA"], referer: http://dwelectservices.com.au/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%A7%E0%B8%AD%E0%B9%80%E0%B8%A5%E0%B8%97%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx
[Tue Nov 18 04:12:29.575899 2025] [:error] [pid 61482:tid 61487] [client 207.241.235.149:60260] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "aRuBrftNHsWZClVWav4oVgAAAMA"], referer: http://dwelectservices.com.au/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%A7%E0%B8%AD%E0%B9%80%E0%B8%A5%E0%B8%97%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx
[Tue Nov 18 04:17:49.838456 2025] [:error] [pid 61482:tid 61502] [client 207.241.235.149:39066] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/%E0%B8%AA%E0%B8%B9%E0%B8%95%E0%B8%A3%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20pg%20%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%9F%E0%B8%A3%E0%B8%B5.aspx"] [unique_id "aRuC7ftNHsWZClVWav4p_QAAAM8"], referer: http://dwelectservices.com.au/spx%20slot.aspx
[Tue Nov 18 04:17:50.155597 2025] [:error] [pid 29195:tid 29209] [client 207.241.235.149:39110] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/%E0%B8%AA%E0%B8%B9%E0%B8%95%E0%B8%A3%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20pg%20%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%9F%E0%B8%A3%E0%B8%B5.aspx"] [unique_id "aRuC7hMeonxy_4yeOTUQfgAAAQw"], referer: http://dwelectservices.com.au/spx%20slot.aspx
[Tue Nov 18 04:17:50.469353 2025] [:error] [pid 61393:tid 61457] [client 207.241.235.149:39144] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/%E0%B8%AA%E0%B8%B9%E0%B8%95%E0%B8%A3%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20pg%20%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%9F%E0%B8%A3%E0%B8%B5.aspx"] [unique_id "aRuC7mH9XjlbVPv9gQUANQAAAIE"], referer: http://dwelectservices.com.au/spx%20slot.aspx
[Tue Nov 18 04:17:50.781569 2025] [:error] [pid 61393:tid 61473] [client 207.241.235.149:39178] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/%E0%B8%AA%E0%B8%B9%E0%B8%95%E0%B8%A3%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20pg%20%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%9F%E0%B8%A3%E0%B8%B5.aspx"] [unique_id "aRuC7mH9XjlbVPv9gQUANgAAAJE"], referer: http://dwelectservices.com.au/spx%20slot.aspx
[Tue Nov 18 04:23:09.353394 2025] [:error] [pid 61393:tid 61476] [client 207.241.235.149:48698] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/789%20slot.aspx"] [unique_id "aRuELWH9XjlbVPv9gQUCQAAAAJQ"], referer: http://dwelectservices.com.au/%E0%B8%9D%E0%B8%B2%E0%B8%81%2010%20%E0%B8%A3%E0%B8%B1%E0%B8%9A100%20%E0%B8%97%E0%B9%8D%E0%B8%B2%20%E0%B8%A2%E0%B8%AD%E0%B8%94%20300%20%E0%B8%96%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%94%E0%B9%89%20100.aspx
[Tue Nov 18 04:23:09.669302 2025] [:error] [pid 61482:tid 61492] [client 207.241.235.149:48732] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/789%20slot.aspx"] [unique_id "aRuELftNHsWZClVWav4rzwAAAMU"], referer: http://dwelectservices.com.au/%E0%B8%9D%E0%B8%B2%E0%B8%81%2010%20%E0%B8%A3%E0%B8%B1%E0%B8%9A100%20%E0%B8%97%E0%B9%8D%E0%B8%B2%20%E0%B8%A2%E0%B8%AD%E0%B8%94%20300%20%E0%B8%96%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%94%E0%B9%89%20100.aspx
[Tue Nov 18 04:23:09.985294 2025] [:error] [pid 61482:tid 61504] [client 207.241.235.149:48758] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/789%20slot.aspx"] [unique_id "aRuELftNHsWZClVWav4r0AAAANE"], referer: http://dwelectservices.com.au/%E0%B8%9D%E0%B8%B2%E0%B8%81%2010%20%E0%B8%A3%E0%B8%B1%E0%B8%9A100%20%E0%B8%97%E0%B9%8D%E0%B8%B2%20%E0%B8%A2%E0%B8%AD%E0%B8%94%20300%20%E0%B8%96%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%94%E0%B9%89%20100.aspx
[Tue Nov 18 04:23:10.364148 2025] [:error] [pid 61482:tid 61491] [client 207.241.235.149:48788] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/789%20slot.aspx"] [unique_id "aRuELvtNHsWZClVWav4r0QAAAMQ"], referer: http://dwelectservices.com.au/%E0%B8%9D%E0%B8%B2%E0%B8%81%2010%20%E0%B8%A3%E0%B8%B1%E0%B8%9A100%20%E0%B8%97%E0%B9%8D%E0%B8%B2%20%E0%B8%A2%E0%B8%AD%E0%B8%94%20300%20%E0%B8%96%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%94%E0%B9%89%20100.aspx
[Tue Nov 18 04:28:28.841158 2025] [:error] [pid 61391:tid 61421] [client 207.241.235.149:57460] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20pg%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20100.aspx"] [unique_id "aRuFbIwXIKmhlnkP3-dEmQAAABU"], referer: http://dwelectservices.com.au/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%A2%E0%B8%B9%E0%B8%9F%E0%B9%88%E0%B8%B2.aspx
[Tue Nov 18 04:28:29.156949 2025] [:error] [pid 29195:tid 29217] [client 207.241.235.149:57508] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20pg%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20100.aspx"] [unique_id "aRuFbRMeonxy_4yeOTUVMQAAARQ"], referer: http://dwelectservices.com.au/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%A2%E0%B8%B9%E0%B8%9F%E0%B9%88%E0%B8%B2.aspx
[Tue Nov 18 04:28:29.473163 2025] [:error] [pid 61392:tid 61438] [client 207.241.235.149:57550] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20pg%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20100.aspx"] [unique_id "aRuFbXSmvb496zZxueKx3QAAAEk"], referer: http://dwelectservices.com.au/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%A2%E0%B8%B9%E0%B8%9F%E0%B9%88%E0%B8%B2.aspx
[Tue Nov 18 04:28:29.785607 2025] [:error] [pid 61391:tid 61406] [client 207.241.235.149:57592] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20pg%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20100.aspx"] [unique_id "aRuFbYwXIKmhlnkP3-dEngAAAAY"], referer: http://dwelectservices.com.au/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%A2%E0%B8%B9%E0%B8%9F%E0%B9%88%E0%B8%B2.aspx
[Tue Nov 18 04:33:46.867144 2025] [:error] [pid 61391:tid 61400] [client 207.241.235.149:37074] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "aRuGqowXIKmhlnkP3-dGHwAAAAA"], referer: http://dwelectservices.com.au/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B9%84%E0%B8%AB%E0%B8%99%E0%B8%94%E0%B8%B5%20%E0%B9%81%E0%B8%95%E0%B8%81%E0%B8%87%E0%B9%88%E0%B8%B2%E0%B8%A2.aspx
[Tue Nov 18 04:33:47.187817 2025] [:error] [pid 61393:tid 61462] [client 207.241.235.149:37118] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "aRuGq2H9XjlbVPv9gQUE9QAAAIY"], referer: http://dwelectservices.com.au/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B9%84%E0%B8%AB%E0%B8%99%E0%B8%94%E0%B8%B5%20%E0%B9%81%E0%B8%95%E0%B8%81%E0%B8%87%E0%B9%88%E0%B8%B2%E0%B8%A2.aspx
[Tue Nov 18 04:33:47.512252 2025] [:error] [pid 61392:tid 61448] [client 207.241.235.149:37158] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "aRuGq3Smvb496zZxueKzjwAAAFM"], referer: http://dwelectservices.com.au/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B9%84%E0%B8%AB%E0%B8%99%E0%B8%94%E0%B8%B5%20%E0%B9%81%E0%B8%95%E0%B8%81%E0%B8%87%E0%B9%88%E0%B8%B2%E0%B8%A2.aspx
[Tue Nov 18 04:33:47.826669 2025] [:error] [pid 61392:tid 61429] [client 207.241.235.149:37204] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "aRuGq3Smvb496zZxueKzkAAAAEA"], referer: http://dwelectservices.com.au/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B9%84%E0%B8%AB%E0%B8%99%E0%B8%94%E0%B8%B5%20%E0%B9%81%E0%B8%95%E0%B8%81%E0%B8%87%E0%B9%88%E0%B8%B2%E0%B8%A2.aspx
[Tue Nov 18 04:39:05.928719 2025] [:error] [pid 61482:tid 61500] [client 207.241.235.149:45492] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/%E0%B8%9D%E0%B8%B2%E0%B8%819%E0%B8%9A%E0%B8%B2%E0%B8%97%E0%B8%A3%E0%B8%B1%E0%B8%9A100%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aRuH6ftNHsWZClVWav4wwwAAAM0"], referer: http://dwelectservices.com.au/2xl%20slot.aspx
[Tue Nov 18 04:39:06.241395 2025] [:error] [pid 61391:tid 61418] [client 207.241.235.149:45530] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/%E0%B8%9D%E0%B8%B2%E0%B8%819%E0%B8%9A%E0%B8%B2%E0%B8%97%E0%B8%A3%E0%B8%B1%E0%B8%9A100%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aRuH6owXIKmhlnkP3-dHcQAAABI"], referer: http://dwelectservices.com.au/2xl%20slot.aspx
[Tue Nov 18 04:39:06.560987 2025] [:error] [pid 61392:tid 61434] [client 207.241.235.149:45554] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/%E0%B8%9D%E0%B8%B2%E0%B8%819%E0%B8%9A%E0%B8%B2%E0%B8%97%E0%B8%A3%E0%B8%B1%E0%B8%9A100%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aRuH6nSmvb496zZxueK1AQAAAEU"], referer: http://dwelectservices.com.au/2xl%20slot.aspx
[Tue Nov 18 04:39:06.872821 2025] [:error] [pid 61392:tid 61429] [client 207.241.235.149:45596] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/%E0%B8%9D%E0%B8%B2%E0%B8%819%E0%B8%9A%E0%B8%B2%E0%B8%97%E0%B8%A3%E0%B8%B1%E0%B8%9A100%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aRuH6nSmvb496zZxueK1AgAAAEA"], referer: http://dwelectservices.com.au/2xl%20slot.aspx
[Tue Nov 18 04:44:23.196766 2025] [:error] [pid 61482:tid 61494] [client 207.241.235.149:54298] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/superslot%20%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B550%20%E0%B8%A2%E0%B8%B7%E0%B8%99%E0%B8%A2%E0%B8%B1%E0%B8%99%E0%B9%80%E0%B8%9A%E0%B8%AD%E0%B8%A3%E0%B9%8C.aspx"] [unique_id "aRuJJ_tNHsWZClVWav4y4QAAAMc"], referer: http://dwelectservices.com.au/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%88%E0%B8%B5%E0%B8%84%E0%B8%A5%E0%B8%B1%E0%B8%9A.aspx
[Tue Nov 18 04:44:23.508867 2025] [:error] [pid 61392:tid 61448] [client 207.241.235.149:54354] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/superslot%20%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B550%20%E0%B8%A2%E0%B8%B7%E0%B8%99%E0%B8%A2%E0%B8%B1%E0%B8%99%E0%B9%80%E0%B8%9A%E0%B8%AD%E0%B8%A3%E0%B9%8C.aspx"] [unique_id "aRuJJ3Smvb496zZxueK2ZwAAAFM"], referer: http://dwelectservices.com.au/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%88%E0%B8%B5%E0%B8%84%E0%B8%A5%E0%B8%B1%E0%B8%9A.aspx
[Tue Nov 18 04:44:23.820796 2025] [:error] [pid 61482:tid 61495] [client 207.241.235.149:54398] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/superslot%20%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B550%20%E0%B8%A2%E0%B8%B7%E0%B8%99%E0%B8%A2%E0%B8%B1%E0%B8%99%E0%B9%80%E0%B8%9A%E0%B8%AD%E0%B8%A3%E0%B9%8C.aspx"] [unique_id "aRuJJ_tNHsWZClVWav4y5AAAAMg"], referer: http://dwelectservices.com.au/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%88%E0%B8%B5%E0%B8%84%E0%B8%A5%E0%B8%B1%E0%B8%9A.aspx
[Tue Nov 18 04:44:24.134601 2025] [:error] [pid 61482:tid 61497] [client 207.241.235.149:54434] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/superslot%20%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B550%20%E0%B8%A2%E0%B8%B7%E0%B8%99%E0%B8%A2%E0%B8%B1%E0%B8%99%E0%B9%80%E0%B8%9A%E0%B8%AD%E0%B8%A3%E0%B9%8C.aspx"] [unique_id "aRuJKPtNHsWZClVWav4y5QAAAMo"], referer: http://dwelectservices.com.au/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%88%E0%B8%B5%E0%B8%84%E0%B8%A5%E0%B8%B1%E0%B8%9A.aspx
[Tue Nov 18 04:49:41.751627 2025] [:error] [pid 61482:tid 61498] [client 207.241.235.149:38488] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9D%E0%B8%B2%E0%B8%81%E0%B8%96%E0%B8%AD%E0%B8%99%E0%B8%A7%E0%B8%AD%E0%B9%80%E0%B8%A5%E0%B8%97.aspx"] [unique_id "aRuKZftNHsWZClVWav405AAAAMs"], referer: http://dwelectservices.com.au/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5.aspx
[Tue Nov 18 04:49:42.068877 2025] [:error] [pid 29195:tid 29213] [client 207.241.235.149:38538] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9D%E0%B8%B2%E0%B8%81%E0%B8%96%E0%B8%AD%E0%B8%99%E0%B8%A7%E0%B8%AD%E0%B9%80%E0%B8%A5%E0%B8%97.aspx"] [unique_id "aRuKZhMeonxy_4yeOTUeowAAARA"], referer: http://dwelectservices.com.au/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5.aspx
[Tue Nov 18 04:49:42.382451 2025] [:error] [pid 29195:tid 29217] [client 207.241.235.149:38590] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9D%E0%B8%B2%E0%B8%81%E0%B8%96%E0%B8%AD%E0%B8%99%E0%B8%A7%E0%B8%AD%E0%B9%80%E0%B8%A5%E0%B8%97.aspx"] [unique_id "aRuKZhMeonxy_4yeOTUepQAAARQ"], referer: http://dwelectservices.com.au/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5.aspx
[Tue Nov 18 04:49:42.697952 2025] [:error] [pid 61482:tid 61500] [client 207.241.235.149:38632] [client 207.241.235.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9D%E0%B8%B2%E0%B8%81%E0%B8%96%E0%B8%AD%E0%B8%99%E0%B8%A7%E0%B8%AD%E0%B9%80%E0%B8%A5%E0%B8%97.aspx"] [unique_id "aRuKZvtNHsWZClVWav406AAAAM0"], referer: http://dwelectservices.com.au/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5.aspx
[Tue Nov 18 05:14:11.022760 2025] [proxy_fcgi:error] [pid 29195:tid 29203] [client 74.176.48.190:38853] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 05:14:11.142971 2025] [proxy_fcgi:error] [pid 29195:tid 29220] [client 74.176.48.190:38853] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 05:14:11.281850 2025] [proxy_fcgi:error] [pid 29195:tid 29217] [client 74.176.48.190:38853] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 05:14:11.399729 2025] [proxy_fcgi:error] [pid 29195:tid 29208] [client 74.176.48.190:38853] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 05:14:11.544686 2025] [proxy_fcgi:error] [pid 29195:tid 29199] [client 74.176.48.190:38853] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 05:14:11.782886 2025] [proxy_fcgi:error] [pid 29195:tid 29213] [client 74.176.48.190:38853] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 05:14:11.901827 2025] [proxy_fcgi:error] [pid 29195:tid 29205] [client 74.176.48.190:38853] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 05:14:12.022754 2025] [proxy_fcgi:error] [pid 29195:tid 29198] [client 74.176.48.190:38853] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 05:14:12.180201 2025] [proxy_fcgi:error] [pid 29195:tid 29204] [client 74.176.48.190:38853] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 05:14:12.335126 2025] [proxy_fcgi:error] [pid 29195:tid 29221] [client 74.176.48.190:38853] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 05:14:12.449223 2025] [:error] [pid 29195:tid 29200] [client 74.176.48.190:38853] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/filei.php"] [unique_id "aRuQJBMeonxy_4yeOTUm2gAAAQM"]
[Tue Nov 18 05:14:13.979284 2025] [:error] [pid 61391:tid 61418] [client 74.176.48.190:38862] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/filei.php"] [unique_id "aRuQJYwXIKmhlnkP3-dRdAAAABI"]
[Tue Nov 18 05:14:15.655156 2025] [:error] [pid 61482:tid 61498] [client 74.176.48.190:38826] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/filei.php"] [unique_id "aRuQJ_tNHsWZClVWav48TAAAAMs"]
[Tue Nov 18 05:14:16.934761 2025] [:error] [pid 61391:tid 61408] [client 74.176.48.190:38794] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/filei.php"] [unique_id "aRuQKIwXIKmhlnkP3-dRdgAAAAg"]
[Tue Nov 18 05:14:23.253973 2025] [:error] [pid 61391:tid 61410] [client 74.176.48.190:38784] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/v2.php"] [unique_id "aRuQL4wXIKmhlnkP3-dRgQAAAAo"]
[Tue Nov 18 05:14:25.162912 2025] [:error] [pid 61391:tid 61422] [client 74.176.48.190:38845] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/v2.php"] [unique_id "aRuQMYwXIKmhlnkP3-dRgwAAABY"]
[Tue Nov 18 05:14:26.197656 2025] [:error] [pid 61393:tid 61477] [client 74.176.48.190:38785] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/v2.php"] [unique_id "aRuQMmH9XjlbVPv9gQUP6AAAAJU"]
[Tue Nov 18 05:14:28.000623 2025] [:error] [pid 61393:tid 61462] [client 74.176.48.190:38814] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/v2.php"] [unique_id "aRuQM2H9XjlbVPv9gQUP7gAAAIY"]
[Tue Nov 18 05:14:29.973373 2025] [:error] [pid 42804:tid 42817] [client 74.176.48.190:38864] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/3.php"] [unique_id "aRuQNfpXARlE6tIuBnk9FAAAAUs"]
[Tue Nov 18 05:14:30.919699 2025] [:error] [pid 61393:tid 61467] [client 74.176.48.190:38806] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/3.php"] [unique_id "aRuQNmH9XjlbVPv9gQUP8QAAAIs"]
[Tue Nov 18 05:14:32.170258 2025] [:error] [pid 61391:tid 61405] [client 74.176.48.190:38863] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/3.php"] [unique_id "aRuQOIwXIKmhlnkP3-dRigAAAAU"]
[Tue Nov 18 05:14:34.541211 2025] [:error] [pid 42804:tid 42822] [client 74.176.48.190:38873] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/3.php"] [unique_id "aRuQOvpXARlE6tIuBnk9GAAAAVA"]
[Tue Nov 18 05:14:41.823605 2025] [:error] [pid 61482:tid 61493] [client 74.176.48.190:38855] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/10.php"] [unique_id "aRuQQftNHsWZClVWav48ZgAAAMY"]
[Tue Nov 18 05:14:59.403752 2025] [:error] [pid 61482:tid 61493] [client 74.176.48.190:38878] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/info.php"] [unique_id "aRuQU_tNHsWZClVWav48fgAAAMY"]
[Tue Nov 18 05:15:00.433518 2025] [:error] [pid 42804:tid 42822] [client 74.176.48.190:38790] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/info.php"] [unique_id "aRuQVPpXARlE6tIuBnk9QwAAAVA"]
[Tue Nov 18 05:15:01.635782 2025] [:error] [pid 61392:tid 61449] [client 74.176.48.190:38803] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/info.php"] [unique_id "aRuQVXSmvb496zZxueK_BQAAAFQ"]
[Tue Nov 18 05:15:02.213419 2025] [:error] [pid 61482:tid 61494] [client 74.176.48.190:38847] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/info.php"] [unique_id "aRuQVvtNHsWZClVWav48hAAAAMc"]
[Tue Nov 18 05:15:02.916905 2025] [:error] [pid 42804:tid 42829] [client 74.176.48.190:38857] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ee.php"] [unique_id "aRuQVvpXARlE6tIuBnk9SAAAAVc"]
[Tue Nov 18 05:15:08.051071 2025] [:error] [pid 61393:tid 61471] [client 74.176.48.190:38804] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ee.php"] [unique_id "aRuQXGH9XjlbVPv9gQUQLQAAAI8"]
[Tue Nov 18 05:15:10.078500 2025] [:error] [pid 29195:tid 29211] [client 74.176.48.190:38815] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ee.php"] [unique_id "aRuQXhMeonxy_4yeOTUnNQAAAQ4"]
[Tue Nov 18 05:15:11.797171 2025] [:error] [pid 42804:tid 42806] [client 74.176.48.190:38831] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ee.php"] [unique_id "aRuQX_pXARlE6tIuBnk9ZAAAAUA"]
[Tue Nov 18 05:15:14.897738 2025] [proxy_fcgi:error] [pid 42804:tid 42825] [client 74.176.48.190:38866] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 05:15:15.016710 2025] [proxy_fcgi:error] [pid 42804:tid 42806] [client 74.176.48.190:38866] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 05:15:15.135346 2025] [proxy_fcgi:error] [pid 42804:tid 42812] [client 74.176.48.190:38866] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 05:15:15.276187 2025] [proxy_fcgi:error] [pid 42804:tid 42820] [client 74.176.48.190:38866] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 05:15:15.393486 2025] [proxy_fcgi:error] [pid 42804:tid 42829] [client 74.176.48.190:38866] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 05:15:15.513792 2025] [proxy_fcgi:error] [pid 42804:tid 42817] [client 74.176.48.190:38866] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 05:15:15.630938 2025] [proxy_fcgi:error] [pid 42804:tid 42813] [client 74.176.48.190:38866] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 05:15:15.754622 2025] [proxy_fcgi:error] [pid 42804:tid 42827] [client 74.176.48.190:38866] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 05:15:15.873290 2025] [proxy_fcgi:error] [pid 42804:tid 42807] [client 74.176.48.190:38866] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 05:15:15.992694 2025] [proxy_fcgi:error] [pid 42804:tid 42830] [client 74.176.48.190:38866] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 05:15:16.338838 2025] [proxy_fcgi:error] [pid 42804:tid 42815] [client 74.176.48.190:38866] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 05:15:16.452213 2025] [:error] [pid 42804:tid 42816] [client 74.176.48.190:38866] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nij.php"] [unique_id "aRuQZPpXARlE6tIuBnk9dwAAAUo"]
[Tue Nov 18 05:15:19.693013 2025] [:error] [pid 61482:tid 61495] [client 74.176.48.190:38868] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nij.php"] [unique_id "aRuQZ_tNHsWZClVWav48mQAAAMg"]
[Tue Nov 18 05:15:21.442336 2025] [:error] [pid 42804:tid 42807] [client 74.176.48.190:38786] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nij.php"] [unique_id "aRuQafpXARlE6tIuBnk9eQAAAUE"]
[Tue Nov 18 05:15:41.809418 2025] [:error] [pid 42804:tid 42829] [client 74.176.48.190:38796] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gfile.php"] [unique_id "aRuQffpXARlE6tIuBnk9zQAAAVc"]
[Tue Nov 18 05:15:45.686906 2025] [:error] [pid 61482:tid 61494] [client 74.176.48.190:38825] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gfile.php"] [unique_id "aRuQgftNHsWZClVWav480gAAAMc"]
[Tue Nov 18 05:15:47.330808 2025] [:error] [pid 61482:tid 61487] [client 74.176.48.190:38879] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gfile.php"] [unique_id "aRuQg_tNHsWZClVWav481AAAAMA"]
[Tue Nov 18 05:15:48.539998 2025] [:error] [pid 29195:tid 29205] [client 74.176.48.190:38837] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gfile.php"] [unique_id "aRuQhBMeonxy_4yeOTUnggAAAQg"]
[Tue Nov 18 05:15:49.778924 2025] [:error] [pid 61482:tid 61495] [client 74.176.48.190:38812] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xpas2.php"] [unique_id "aRuQhftNHsWZClVWav482AAAAMg"]
[Tue Nov 18 05:15:51.521422 2025] [:error] [pid 61391:tid 61414] [client 74.176.48.190:38895] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xpas2.php"] [unique_id "aRuQh4wXIKmhlnkP3-dR8wAAAA4"]
[Tue Nov 18 05:15:53.505614 2025] [:error] [pid 29195:tid 29215] [client 74.176.48.190:38856] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xpas2.php"] [unique_id "aRuQiRMeonxy_4yeOTUnhwAAARI"]
[Tue Nov 18 05:15:54.221626 2025] [:error] [pid 29195:tid 29216] [client 74.176.48.190:38808] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xpas2.php"] [unique_id "aRuQihMeonxy_4yeOTUniQAAARM"]
[Tue Nov 18 05:16:02.745097 2025] [:error] [pid 42804:tid 42810] [client 74.176.48.190:38846] [client 74.176.48.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dwelectservices.com.au"] [uri "/filemanager.php"] [unique_id "aRuQkvpXARlE6tIuBnk96QAAAUQ"]
[Tue Nov 18 05:16:04.035792 2025] [:error] [pid 29195:tid 29216] [client 74.176.48.190:38893] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x.php"] [unique_id "aRuQlBMeonxy_4yeOTUnkQAAARM"]
[Tue Nov 18 05:16:05.551928 2025] [:error] [pid 61393:tid 61460] [client 74.176.48.190:38816] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x.php"] [unique_id "aRuQlWH9XjlbVPv9gQUQegAAAIQ"]
[Tue Nov 18 05:16:07.091243 2025] [:error] [pid 61392:tid 61431] [client 74.176.48.190:38807] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x.php"] [unique_id "aRuQl3Smvb496zZxueK_XAAAAEI"]
[Tue Nov 18 05:16:11.545978 2025] [:error] [pid 29195:tid 29202] [client 74.176.48.190:38801] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/asd67.php"] [unique_id "aRuQmxMeonxy_4yeOTUnnAAAAQU"]
[Tue Nov 18 05:17:44.452440 2025] [proxy_fcgi:error] [pid 61391:tid 61423] [client 74.176.48.190:38881] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 05:17:44.614218 2025] [proxy_fcgi:error] [pid 61391:tid 61402] [client 74.176.48.190:38881] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 05:17:44.792565 2025] [:error] [pid 61391:tid 61413] [client 74.176.48.190:38881] [client 74.176.48.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dwelectservices.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aRuQ-IwXIKmhlnkP3-dSVwAAAA0"]
[Tue Nov 18 05:17:48.922498 2025] [proxy_fcgi:error] [pid 61393:tid 61464] [client 74.176.48.190:38810] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 05:17:49.209003 2025] [proxy_fcgi:error] [pid 61393:tid 61466] [client 74.176.48.190:38810] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 05:17:49.327857 2025] [proxy_fcgi:error] [pid 61393:tid 61465] [client 74.176.48.190:38810] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 05:17:49.444798 2025] [proxy_fcgi:error] [pid 61393:tid 61470] [client 74.176.48.190:38810] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 05:17:49.700716 2025] [proxy_fcgi:error] [pid 61393:tid 61472] [client 74.176.48.190:38810] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 05:17:49.829600 2025] [proxy_fcgi:error] [pid 61393:tid 61459] [client 74.176.48.190:38810] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 05:17:49.957937 2025] [proxy_fcgi:error] [pid 61393:tid 61456] [client 74.176.48.190:38810] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 05:17:50.084727 2025] [:error] [pid 61393:tid 61458] [client 74.176.48.190:38810] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aRuQ_mH9XjlbVPv9gQUQ4QAAAII"]
[Tue Nov 18 05:17:53.132325 2025] [:error] [pid 29195:tid 29221] [client 74.176.48.190:38861] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aRuRARMeonxy_4yeOTUoGgAAARg"]
[Tue Nov 18 05:17:56.714464 2025] [:error] [pid 61393:tid 61478] [client 74.176.48.190:38830] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aRuRBGH9XjlbVPv9gQUQ7QAAAJY"]
[Tue Nov 18 05:17:59.758272 2025] [:error] [pid 61482:tid 61493] [client 74.176.48.190:38809] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aRuRB_tNHsWZClVWav49WAAAAMY"]
[Tue Nov 18 05:18:03.032204 2025] [:error] [pid 42804:tid 42811] [client 74.176.48.190:38848] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws.php"] [unique_id "aRuRC_pXARlE6tIuBnk-5gAAAUU"]
[Tue Nov 18 05:18:05.040655 2025] [:error] [pid 29195:tid 29201] [client 74.176.48.190:38798] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws.php"] [unique_id "aRuRDRMeonxy_4yeOTUoHwAAAQQ"]
[Tue Nov 18 05:18:19.883301 2025] [:error] [pid 61391:tid 61401] [client 74.176.48.190:38724] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/7h.php"] [unique_id "aRuRG4wXIKmhlnkP3-dSdQAAAAE"]
[Tue Nov 18 05:18:21.031596 2025] [:error] [pid 42804:tid 42820] [client 74.176.48.190:38731] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/7h.php"] [unique_id "aRuRHfpXARlE6tIuBnk_CgAAAU4"]
[Tue Nov 18 05:18:22.163147 2025] [:error] [pid 61393:tid 61467] [client 74.176.48.190:38820] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/7h.php"] [unique_id "aRuRHmH9XjlbVPv9gQURBgAAAIs"]
[Tue Nov 18 05:18:25.732563 2025] [:error] [pid 42804:tid 42815] [client 74.176.48.190:38835] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/7h.php"] [unique_id "aRuRIfpXARlE6tIuBnk_DgAAAUk"]
[Tue Nov 18 05:18:26.915608 2025] [:error] [pid 61391:tid 61405] [client 74.176.48.190:38795] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gg.php"] [unique_id "aRuRIowXIKmhlnkP3-dSggAAAAU"]
[Tue Nov 18 05:18:29.813109 2025] [:error] [pid 61392:tid 61450] [client 74.176.48.190:38886] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gg.php"] [unique_id "aRuRJXSmvb496zZxueLASwAAAFU"]
[Tue Nov 18 05:19:12.497443 2025] [proxy_fcgi:error] [pid 61482:tid 61500] [client 74.176.48.190:38785] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 05:19:12.623899 2025] [proxy_fcgi:error] [pid 61482:tid 61508] [client 74.176.48.190:38785] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 05:19:12.754223 2025] [proxy_fcgi:error] [pid 61482:tid 61491] [client 74.176.48.190:38785] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 05:19:12.934165 2025] [proxy_fcgi:error] [pid 61482:tid 61501] [client 74.176.48.190:38785] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 05:19:13.051754 2025] [proxy_fcgi:error] [pid 61482:tid 61490] [client 74.176.48.190:38785] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 05:19:13.181939 2025] [proxy_fcgi:error] [pid 61482:tid 61502] [client 74.176.48.190:38785] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 05:19:13.482263 2025] [proxy_fcgi:error] [pid 61482:tid 61511] [client 74.176.48.190:38785] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 05:19:13.729840 2025] [proxy_fcgi:error] [pid 61482:tid 61487] [client 74.176.48.190:38785] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 05:19:13.977880 2025] [proxy_fcgi:error] [pid 61482:tid 61492] [client 74.176.48.190:38785] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 05:19:14.098895 2025] [proxy_fcgi:error] [pid 61482:tid 61494] [client 74.176.48.190:38785] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 05:19:14.215000 2025] [:error] [pid 61482:tid 61510] [client 74.176.48.190:38785] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aua.php"] [unique_id "aRuRUvtNHsWZClVWav49lAAAANc"]
[Tue Nov 18 05:19:16.217750 2025] [:error] [pid 29195:tid 29218] [client 74.176.48.190:38802] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aua.php"] [unique_id "aRuRVBMeonxy_4yeOTUoVgAAARU"]
[Tue Nov 18 05:19:18.040715 2025] [:error] [pid 61482:tid 61497] [client 74.176.48.190:38859] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aua.php"] [unique_id "aRuRVvtNHsWZClVWav49lQAAAMo"]
[Tue Nov 18 05:19:22.276974 2025] [:error] [pid 61482:tid 61501] [client 74.176.48.190:38884] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aua.php"] [unique_id "aRuRWvtNHsWZClVWav49mgAAAM4"]
[Tue Nov 18 05:19:30.314434 2025] [:error] [pid 29195:tid 29199] [client 74.176.48.190:38828] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/c4.php"] [unique_id "aRuRYhMeonxy_4yeOTUoXgAAAQI"]
[Tue Nov 18 05:19:31.933527 2025] [:error] [pid 61393:tid 61474] [client 74.176.48.190:38887] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/c4.php"] [unique_id "aRuRY2H9XjlbVPv9gQURQgAAAJI"]
[Tue Nov 18 05:19:35.416002 2025] [:error] [pid 61391:tid 61411] [client 74.176.48.190:38792] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/c4.php"] [unique_id "aRuRZ4wXIKmhlnkP3-dSqQAAAAs"]
[Tue Nov 18 05:19:41.802845 2025] [:error] [pid 61393:tid 61466] [client 74.176.48.190:38823] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bu5.php"] [unique_id "aRuRbWH9XjlbVPv9gQURZgAAAIo"]
[Tue Nov 18 05:19:42.869091 2025] [:error] [pid 42804:tid 42822] [client 74.176.48.190:38841] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bu5.php"] [unique_id "aRuRbvpXARlE6tIuBnk_cQAAAVA"]
[Tue Nov 18 05:19:44.408458 2025] [:error] [pid 42804:tid 42806] [client 74.176.48.190:38855] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bu5.php"] [unique_id "aRuRcPpXARlE6tIuBnk_dQAAAUA"]
[Tue Nov 18 05:19:45.890963 2025] [:error] [pid 61392:tid 61437] [client 74.176.48.190:38836] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bu5.php"] [unique_id "aRuRcXSmvb496zZxueLAgwAAAEg"]
[Tue Nov 18 05:19:47.813088 2025] [:error] [pid 29195:tid 29206] [client 74.176.48.190:38811] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lhh2.php"] [unique_id "aRuRcxMeonxy_4yeOTUocwAAAQk"]
[Tue Nov 18 05:19:49.922058 2025] [:error] [pid 42804:tid 42818] [client 74.176.48.190:38826] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lhh2.php"] [unique_id "aRuRdfpXARlE6tIuBnk_fAAAAUw"]
[Tue Nov 18 05:19:59.349973 2025] [:error] [pid 29195:tid 29220] [client 74.176.48.190:38818] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lhh2.php"] [unique_id "aRuRfxMeonxy_4yeOTUoggAAARc"]
[Tue Nov 18 05:20:10.180067 2025] [:error] [pid 42804:tid 42817] [client 74.176.48.190:38837] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/an.php"] [unique_id "aRuRivpXARlE6tIuBnk_nAAAAUs"]
[Tue Nov 18 05:20:15.237202 2025] [proxy_fcgi:error] [pid 61391:tid 61405] [client 74.176.48.190:38813] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 05:20:15.356892 2025] [proxy_fcgi:error] [pid 61391:tid 61416] [client 74.176.48.190:38813] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 05:20:16.505359 2025] [proxy_fcgi:error] [pid 61391:tid 61422] [client 74.176.48.190:38813] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 05:20:16.677993 2025] [proxy_fcgi:error] [pid 61391:tid 61403] [client 74.176.48.190:38813] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 05:20:16.799498 2025] [proxy_fcgi:error] [pid 61391:tid 61412] [client 74.176.48.190:38813] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 05:20:16.930749 2025] [proxy_fcgi:error] [pid 61391:tid 61401] [client 74.176.48.190:38813] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 05:20:17.047537 2025] [proxy_fcgi:error] [pid 61391:tid 61410] [client 74.176.48.190:38813] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 05:20:17.167386 2025] [proxy_fcgi:error] [pid 61391:tid 61415] [client 74.176.48.190:38813] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 05:20:17.283995 2025] [proxy_fcgi:error] [pid 61391:tid 61407] [client 74.176.48.190:38813] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 05:20:17.418617 2025] [proxy_fcgi:error] [pid 61391:tid 61406] [client 74.176.48.190:38813] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 05:20:17.540225 2025] [:error] [pid 61391:tid 61417] [client 74.176.48.190:38813] [client 74.176.48.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/buy.php"] [unique_id "aRuRkYwXIKmhlnkP3-dS8QAAABE"]
[Tue Nov 18 05:20:20.428672 2025] [:error] [pid 61392:tid 61430] [client 74.176.48.190:38786] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lo.php"] [unique_id "aRuRlHSmvb496zZxueLAtQAAAEE"]
[Tue Nov 18 05:20:21.952951 2025] [:error] [pid 61482:tid 61503] [client 74.176.48.190:38838] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lo.php"] [unique_id "aRuRlftNHsWZClVWav49_AAAANA"]
[Tue Nov 18 05:20:25.923987 2025] [:error] [pid 29195:tid 29200] [client 74.176.48.190:38796] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lo.php"] [unique_id "aRuRmRMeonxy_4yeOTUokwAAAQM"]
[Tue Nov 18 05:20:27.950764 2025] [:error] [pid 61391:tid 61401] [client 74.176.48.190:38821] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lo.php"] [unique_id "aRuRm4wXIKmhlnkP3-dS9gAAAAE"]
[Tue Nov 18 05:20:29.222257 2025] [:error] [pid 61482:tid 61489] [client 74.176.48.190:38840] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fb.php"] [unique_id "aRuRnftNHsWZClVWav4-BQAAAMI"]
[Tue Nov 18 05:20:29.931973 2025] [:error] [pid 42804:tid 42808] [client 74.176.48.190:38885] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fb.php"] [unique_id "aRuRnfpXARlE6tIuBnk_swAAAUI"]
[Tue Nov 18 05:20:33.529238 2025] [:error] [pid 61391:tid 61421] [client 74.176.48.190:38790] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fb.php"] [unique_id "aRuRoYwXIKmhlnkP3-dS_gAAABU"]
[Tue Nov 18 05:20:45.188797 2025] [:error] [pid 61391:tid 61418] [client 74.176.48.190:38862] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-update.php"] [unique_id "aRuRrYwXIKmhlnkP3-dTCQAAABI"]
[Tue Nov 18 05:20:46.172866 2025] [:error] [pid 29195:tid 29199] [client 74.176.48.190:38863] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-update.php"] [unique_id "aRuRrhMeonxy_4yeOTUoqgAAAQI"]
[Tue Nov 18 05:20:47.683511 2025] [:error] [pid 61482:tid 61490] [client 74.176.48.190:38799] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-update.php"] [unique_id "aRuRr_tNHsWZClVWav4-EgAAAMM"]
[Tue Nov 18 05:20:51.813683 2025] [:error] [pid 42804:tid 42823] [client 74.176.48.190:38831] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-update.php"] [unique_id "aRuRs_pXARlE6tIuBnk_zQAAAVE"]
[Tue Nov 18 05:21:11.694200 2025] [:error] [pid 29195:tid 29204] [client 74.176.48.190:38869] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dropdown.php"] [unique_id "aRuRxxMeonxy_4yeOTUoyAAAAQc"]
[Tue Nov 18 05:21:23.520694 2025] [proxy_fcgi:error] [pid 29195:tid 29210] [client 74.176.48.190:38906] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 05:21:23.679992 2025] [proxy_fcgi:error] [pid 29195:tid 29215] [client 74.176.48.190:38906] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 05:21:24.062333 2025] [proxy_fcgi:error] [pid 29195:tid 29220] [client 74.176.48.190:38906] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 05:21:24.218166 2025] [proxy_fcgi:error] [pid 29195:tid 29218] [client 74.176.48.190:38906] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 05:21:24.369486 2025] [proxy_fcgi:error] [pid 29195:tid 29206] [client 74.176.48.190:38906] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 05:21:24.538057 2025] [proxy_fcgi:error] [pid 29195:tid 29198] [client 74.176.48.190:38906] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 05:21:24.691797 2025] [proxy_fcgi:error] [pid 29195:tid 29208] [client 74.176.48.190:38906] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 05:21:24.843198 2025] [proxy_fcgi:error] [pid 29195:tid 29214] [client 74.176.48.190:38906] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 05:21:25.001252 2025] [proxy_fcgi:error] [pid 29195:tid 29203] [client 74.176.48.190:38906] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 05:21:25.156705 2025] [proxy_fcgi:error] [pid 29195:tid 29219] [client 74.176.48.190:38906] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 05:21:25.308166 2025] [:error] [pid 29195:tid 29209] [client 74.176.48.190:38906] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bluejackets.php"] [unique_id "aRuR1RMeonxy_4yeOTUo6gAAAQw"]
[Tue Nov 18 05:21:27.184937 2025] [:error] [pid 61393:tid 61475] [client 74.176.48.190:38680] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bluejackets.php"] [unique_id "aRuR12H9XjlbVPv9gQURtgAAAJM"]
[Tue Nov 18 05:21:28.454373 2025] [:error] [pid 61391:tid 61414] [client 74.176.48.190:38847] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bluejackets.php"] [unique_id "aRuR2IwXIKmhlnkP3-dTJwAAAA4"]
[Tue Nov 18 05:21:29.628907 2025] [:error] [pid 29195:tid 29205] [client 74.176.48.190:38816] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bluejackets.php"] [unique_id "aRuR2RMeonxy_4yeOTUo7AAAAQg"]
[Tue Nov 18 05:21:31.984338 2025] [:error] [pid 61392:tid 61436] [client 74.176.48.190:38857] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zt2.php"] [unique_id "aRuR23Smvb496zZxueLA5AAAAEc"]
[Tue Nov 18 05:21:39.690858 2025] [:error] [pid 42804:tid 42818] [client 74.176.48.190:38870] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zt2.php"] [unique_id "aRuR4_pXARlE6tIuBnlAEQAAAUw"]
[Tue Nov 18 05:21:44.951389 2025] [:error] [pid 61393:tid 61472] [client 74.176.48.190:38815] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zt2.php"] [unique_id "aRuR6GH9XjlbVPv9gQUSAQAAAJA"]
[Tue Nov 18 05:21:47.118171 2025] [:error] [pid 29195:tid 29205] [client 74.176.48.190:38812] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f35.php"] [unique_id "aRuR6xMeonxy_4yeOTUpFgAAAQg"]
[Tue Nov 18 05:21:48.873227 2025] [:error] [pid 42804:tid 42815] [client 74.176.48.190:38892] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f35.php"] [unique_id "aRuR7PpXARlE6tIuBnlAIAAAAUk"]
[Tue Nov 18 05:21:50.493738 2025] [:error] [pid 42804:tid 42829] [client 74.176.48.190:38801] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f35.php"] [unique_id "aRuR7vpXARlE6tIuBnlAJAAAAVc"]
[Tue Nov 18 05:21:53.753042 2025] [:error] [pid 61391:tid 61402] [client 74.176.48.190:38876] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f35.php"] [unique_id "aRuR8YwXIKmhlnkP3-dTOwAAAAI"]
[Tue Nov 18 05:21:55.912351 2025] [:error] [pid 29195:tid 29200] [client 74.176.48.190:38793] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-mn.php"] [unique_id "aRuR8xMeonxy_4yeOTUpHAAAAQM"]
[Tue Nov 18 05:21:59.668652 2025] [:error] [pid 61393:tid 61462] [client 74.176.48.190:38804] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-mn.php"] [unique_id "aRuR92H9XjlbVPv9gQUSEAAAAIY"]
[Tue Nov 18 05:22:03.348709 2025] [:error] [pid 61393:tid 61479] [client 74.176.48.190:38727] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-mn.php"] [unique_id "aRuR-2H9XjlbVPv9gQUSEgAAAJc"]
[Tue Nov 18 05:22:05.067453 2025] [:error] [pid 29195:tid 29198] [client 74.176.48.190:38797] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-mn.php"] [unique_id "aRuR_RMeonxy_4yeOTUpIQAAAQE"]
[Tue Nov 18 05:22:05.996158 2025] [:error] [pid 61392:tid 61443] [client 74.176.48.190:38868] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/modules/mod_simplefileuploadv1.3/elements/wpxadmin.php"] [unique_id "aRuR_XSmvb496zZxueLA-AAAAE4"]
[Tue Nov 18 05:22:10.229346 2025] [:error] [pid 29195:tid 29201] [client 74.176.48.190:38827] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/modules/mod_simplefileuploadv1.3/elements/wpxadmin.php"] [unique_id "aRuSAhMeonxy_4yeOTUpLAAAAQQ"]
[Tue Nov 18 05:22:13.093700 2025] [:error] [pid 29195:tid 29198] [client 74.176.48.190:38905] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/modules/mod_simplefileuploadv1.3/elements/wpxadmin.php"] [unique_id "aRuSBRMeonxy_4yeOTUpMAAAAQE"]
[Tue Nov 18 05:22:14.649794 2025] [:error] [pid 42804:tid 42827] [client 74.176.48.190:38845] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/modules/mod_simplefileuploadv1.3/elements/wpxadmin.php"] [unique_id "aRuSBvpXARlE6tIuBnlATAAAAVU"]
[Tue Nov 18 05:22:16.705889 2025] [:error] [pid 61392:tid 61450] [client 74.176.48.190:38867] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aa8.php"] [unique_id "aRuSCHSmvb496zZxueLBCAAAAFU"]
[Tue Nov 18 05:22:19.612127 2025] [:error] [pid 61392:tid 61438] [client 74.176.48.190:38850] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aa8.php"] [unique_id "aRuSC3Smvb496zZxueLBCgAAAEk"]
[Tue Nov 18 05:22:21.074323 2025] [:error] [pid 29195:tid 29207] [client 74.176.48.190:38733] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aa8.php"] [unique_id "aRuSDRMeonxy_4yeOTUpPgAAAQo"]
[Tue Nov 18 05:22:25.580154 2025] [proxy_fcgi:error] [pid 61392:tid 61435] [client 74.176.48.190:38852] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 05:22:25.698000 2025] [proxy_fcgi:error] [pid 61392:tid 61432] [client 74.176.48.190:38852] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 05:22:25.829131 2025] [proxy_fcgi:error] [pid 61392:tid 61431] [client 74.176.48.190:38852] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 05:22:25.968096 2025] [proxy_fcgi:error] [pid 61392:tid 61438] [client 74.176.48.190:38852] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 05:22:26.093830 2025] [proxy_fcgi:error] [pid 61392:tid 61437] [client 74.176.48.190:38852] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 05:22:26.225760 2025] [proxy_fcgi:error] [pid 61392:tid 61429] [client 74.176.48.190:38852] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 05:22:26.362358 2025] [proxy_fcgi:error] [pid 61392:tid 61433] [client 74.176.48.190:38852] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 05:22:26.539654 2025] [proxy_fcgi:error] [pid 61392:tid 61436] [client 74.176.48.190:38852] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 05:22:26.658708 2025] [proxy_fcgi:error] [pid 61392:tid 61445] [client 74.176.48.190:38852] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 05:22:26.785317 2025] [proxy_fcgi:error] [pid 61392:tid 61434] [client 74.176.48.190:38852] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 05:22:27.020447 2025] [:error] [pid 61392:tid 61440] [client 74.176.48.190:38852] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tcp.php"] [unique_id "aRuSE3Smvb496zZxueLBJAAAAEs"]
[Tue Nov 18 05:22:30.757393 2025] [:error] [pid 61393:tid 61457] [client 74.176.48.190:38789] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tcp.php"] [unique_id "aRuSFmH9XjlbVPv9gQUSJgAAAIE"]
[Tue Nov 18 05:22:57.586510 2025] [:error] [pid 61393:tid 61458] [client 74.176.48.190:38871] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/witmm.php"] [unique_id "aRuSMWH9XjlbVPv9gQUSNwAAAII"]
[Tue Nov 18 05:23:10.206807 2025] [:error] [pid 61392:tid 61440] [client 74.176.48.190:38883] [client 74.176.48.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dwelectservices.com.au"] [uri "/fm.php"] [unique_id "aRuSPnSmvb496zZxueLBPgAAAEs"]
[Tue Nov 18 05:23:13.412068 2025] [:error] [pid 61391:tid 61410] [client 74.176.48.190:38805] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jga.php"] [unique_id "aRuSQYwXIKmhlnkP3-dTewAAAAo"]
[Tue Nov 18 05:23:14.584512 2025] [:error] [pid 61393:tid 61477] [client 74.176.48.190:38866] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jga.php"] [unique_id "aRuSQmH9XjlbVPv9gQUSPwAAAJU"]
[Tue Nov 18 05:23:18.960085 2025] [:error] [pid 61392:tid 61446] [client 74.176.48.190:38843] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jga.php"] [unique_id "aRuSRnSmvb496zZxueLBSgAAAFE"]
[Tue Nov 18 05:23:26.890314 2025] [proxy_fcgi:error] [pid 61393:tid 61461] [client 74.176.48.190:38814] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 05:23:41.998113 2025] [proxy_fcgi:error] [pid 61482:tid 61493] [client 74.176.48.190:38856] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 05:23:42.117956 2025] [proxy_fcgi:error] [pid 61482:tid 61505] [client 74.176.48.190:38856] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 05:23:42.238003 2025] [proxy_fcgi:error] [pid 61482:tid 61498] [client 74.176.48.190:38856] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 05:23:42.572201 2025] [proxy_fcgi:error] [pid 61482:tid 61487] [client 74.176.48.190:38856] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 05:23:42.705952 2025] [proxy_fcgi:error] [pid 61482:tid 61492] [client 74.176.48.190:38856] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 05:23:42.825322 2025] [proxy_fcgi:error] [pid 61482:tid 61508] [client 74.176.48.190:38856] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 05:23:44.243036 2025] [proxy_fcgi:error] [pid 61482:tid 61496] [client 74.176.48.190:38856] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 05:23:44.361078 2025] [proxy_fcgi:error] [pid 61482:tid 61495] [client 74.176.48.190:38856] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 05:23:44.479480 2025] [proxy_fcgi:error] [pid 61482:tid 61509] [client 74.176.48.190:38856] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 05:23:44.604321 2025] [proxy_fcgi:error] [pid 61482:tid 61501] [client 74.176.48.190:38856] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 05:23:44.757169 2025] [:error] [pid 61482:tid 61489] [client 74.176.48.190:38856] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sder52u.php"] [unique_id "aRuSYPtNHsWZClVWav4-zAAAAMI"]
[Tue Nov 18 05:23:47.622901 2025] [:error] [pid 61393:tid 61466] [client 74.176.48.190:38726] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sder52u.php"] [unique_id "aRuSY2H9XjlbVPv9gQUSVwAAAIo"]
[Tue Nov 18 05:23:49.179103 2025] [:error] [pid 61482:tid 61487] [client 74.176.48.190:38842] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sder52u.php"] [unique_id "aRuSZftNHsWZClVWav4-0AAAAMA"]
[Tue Nov 18 05:23:49.984960 2025] [:error] [pid 61392:tid 61432] [client 74.176.48.190:38839] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sder52u.php"] [unique_id "aRuSZXSmvb496zZxueLBXQAAAEM"]
[Tue Nov 18 05:23:52.134735 2025] [:error] [pid 42804:tid 42825] [client 74.176.48.190:38832] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/asserter.php"] [unique_id "aRuSaPpXARlE6tIuBnlA2wAAAVM"]
[Tue Nov 18 05:23:56.281966 2025] [:error] [pid 29195:tid 29203] [client 74.176.48.190:38800] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/asserter.php"] [unique_id "aRuSbBMeonxy_4yeOTUpkwAAAQY"]
[Tue Nov 18 05:23:57.904069 2025] [:error] [pid 61482:tid 61506] [client 74.176.48.190:38810] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/asserter.php"] [unique_id "aRuSbftNHsWZClVWav4-2wAAANM"]
[Tue Nov 18 05:24:12.219403 2025] [:error] [pid 61482:tid 61498] [client 74.176.48.190:38848] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ol.php"] [unique_id "aRuSfPtNHsWZClVWav4-7QAAAMs"]
[Tue Nov 18 05:24:14.277093 2025] [:error] [pid 61482:tid 61502] [client 74.176.48.190:38873] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ol.php"] [unique_id "aRuSfvtNHsWZClVWav4-8QAAAM8"]
[Tue Nov 18 05:24:35.935607 2025] [:error] [pid 61391:tid 61411] [client 74.176.48.190:38879] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/pass.php"] [unique_id "aRuSk4wXIKmhlnkP3-dTzAAAAAs"]
[Tue Nov 18 05:24:37.303330 2025] [:error] [pid 29195:tid 29205] [client 74.176.48.190:38908] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/pass.php"] [unique_id "aRuSlRMeonxy_4yeOTUp0AAAAQg"]
[Tue Nov 18 05:24:38.616225 2025] [:error] [pid 61482:tid 61487] [client 74.176.48.190:38853] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/pass.php"] [unique_id "aRuSlvtNHsWZClVWav4-9gAAAMA"]
[Tue Nov 18 05:24:40.586135 2025] [:error] [pid 29195:tid 29218] [client 74.176.48.190:38806] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/pass.php"] [unique_id "aRuSmBMeonxy_4yeOTUp1QAAARU"]
[Tue Nov 18 05:24:41.964984 2025] [:error] [pid 61482:tid 61505] [client 74.176.48.190:38725] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/l.php"] [unique_id "aRuSmftNHsWZClVWav4-_gAAANI"]
[Tue Nov 18 05:24:43.491960 2025] [:error] [pid 29195:tid 29201] [client 74.176.48.190:38829] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/l.php"] [unique_id "aRuSmxMeonxy_4yeOTUp2AAAAQQ"]
[Tue Nov 18 05:24:47.755645 2025] [proxy_fcgi:error] [pid 61393:tid 61457] [client 74.176.48.190:38825] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 05:24:48.053503 2025] [proxy_fcgi:error] [pid 61393:tid 61475] [client 74.176.48.190:38825] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 05:24:48.368231 2025] [proxy_fcgi:error] [pid 61393:tid 61465] [client 74.176.48.190:38825] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 05:24:48.494222 2025] [proxy_fcgi:error] [pid 61393:tid 61460] [client 74.176.48.190:38825] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 05:24:48.675635 2025] [proxy_fcgi:error] [pid 61393:tid 61477] [client 74.176.48.190:38825] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 05:24:48.800225 2025] [proxy_fcgi:error] [pid 61393:tid 61469] [client 74.176.48.190:38825] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 05:24:48.929395 2025] [proxy_fcgi:error] [pid 61393:tid 61473] [client 74.176.48.190:38825] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 05:24:49.064657 2025] [proxy_fcgi:error] [pid 61393:tid 61461] [client 74.176.48.190:38825] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 05:24:49.191136 2025] [proxy_fcgi:error] [pid 61393:tid 61462] [client 74.176.48.190:38825] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 05:24:49.314682 2025] [proxy_fcgi:error] [pid 61393:tid 61474] [client 74.176.48.190:38825] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 05:24:49.435066 2025] [proxy_fcgi:error] [pid 61393:tid 61470] [client 74.176.48.190:38825] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 05:24:49.566647 2025] [:error] [pid 61393:tid 61468] [client 74.176.48.190:38825] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/667.php"] [unique_id "aRuSoWH9XjlbVPv9gQUSigAAAIw"]
[Tue Nov 18 05:24:50.461740 2025] [:error] [pid 42804:tid 42810] [client 74.176.48.190:38882] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/667.php"] [unique_id "aRuSovpXARlE6tIuBnlBJAAAAUQ"]
[Tue Nov 18 05:24:55.810518 2025] [:error] [pid 61393:tid 61477] [client 74.176.48.190:38895] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/667.php"] [unique_id "aRuSp2H9XjlbVPv9gQUSjwAAAJU"]
[Tue Nov 18 05:24:58.129717 2025] [:error] [pid 42804:tid 42809] [client 74.176.48.190:38877] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/667.php"] [unique_id "aRuSqvpXARlE6tIuBnlBNgAAAUM"]
[Tue Nov 18 05:25:06.932014 2025] [:error] [pid 61482:tid 61499] [client 74.176.48.190:38902] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/we.php"] [unique_id "aRuSsvtNHsWZClVWav4_DgAAAMw"]
[Tue Nov 18 05:25:08.650583 2025] [:error] [pid 61393:tid 61469] [client 74.176.48.190:38880] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/we.php"] [unique_id "aRuStGH9XjlbVPv9gQUSmQAAAI0"]
[Tue Nov 18 05:25:11.152838 2025] [:error] [pid 42804:tid 42827] [client 74.176.48.190:38818] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/we.php"] [unique_id "aRuSt_pXARlE6tIuBnlBTQAAAVU"]
[Tue Nov 18 05:25:12.670450 2025] [:error] [pid 42804:tid 42824] [client 74.176.48.190:38811] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/we.php"] [unique_id "aRuSuPpXARlE6tIuBnlBUAAAAVI"]
[Tue Nov 18 05:25:13.396602 2025] [:error] [pid 61391:tid 61423] [client 74.176.48.190:38837] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-su.php"] [unique_id "aRuSuYwXIKmhlnkP3-dT9QAAABc"]
[Tue Nov 18 05:25:14.308195 2025] [:error] [pid 42804:tid 42822] [client 74.176.48.190:38794] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-su.php"] [unique_id "aRuSuvpXARlE6tIuBnlBVgAAAVA"]
[Tue Nov 18 05:25:14.997056 2025] [:error] [pid 42804:tid 42810] [client 74.176.48.190:38911] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-su.php"] [unique_id "aRuSuvpXARlE6tIuBnlBWgAAAUQ"]
[Tue Nov 18 05:25:19.132883 2025] [:error] [pid 29195:tid 29211] [client 74.176.48.190:38861] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-su.php"] [unique_id "aRuSvxMeonxy_4yeOTUp_wAAAQ4"]
[Tue Nov 18 05:25:32.630234 2025] [:error] [pid 61482:tid 61487] [client 74.176.48.190:38805] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/t3x.php"] [unique_id "aRuSzPtNHsWZClVWav4_MAAAAMA"]
[Tue Nov 18 05:25:33.409917 2025] [:error] [pid 61482:tid 61499] [client 74.176.48.190:38784] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/t3x.php"] [unique_id "aRuSzftNHsWZClVWav4_NQAAAMw"]
[Tue Nov 18 05:25:35.914099 2025] [:error] [pid 61482:tid 61510] [client 74.176.48.190:38736] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/13.php"] [unique_id "aRuSz_tNHsWZClVWav4_OgAAANc"]
[Tue Nov 18 05:25:39.071962 2025] [:error] [pid 29195:tid 29197] [client 74.176.48.190:38854] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/13.php"] [unique_id "aRuS0xMeonxy_4yeOTUqGwAAAQA"]
[Tue Nov 18 05:25:40.519493 2025] [:error] [pid 29195:tid 29202] [client 74.176.48.190:38888] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/13.php"] [unique_id "aRuS1BMeonxy_4yeOTUqHgAAAQU"]
[Tue Nov 18 05:25:42.195228 2025] [:error] [pid 61482:tid 61506] [client 74.176.48.190:38849] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/13.php"] [unique_id "aRuS1vtNHsWZClVWav4_QQAAANM"]
[Tue Nov 18 05:25:44.599380 2025] [:error] [pid 29195:tid 29200] [client 74.176.48.190:38838] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/yasnu.php"] [unique_id "aRuS2BMeonxy_4yeOTUqJAAAAQM"]
[Tue Nov 18 05:25:48.513230 2025] [:error] [pid 61482:tid 61499] [client 74.176.48.190:38880] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/yasnu.php"] [unique_id "aRuS3PtNHsWZClVWav4_RwAAAMw"]
[Tue Nov 18 05:25:50.011198 2025] [proxy_fcgi:error] [pid 42804:tid 42812] [client 74.176.48.190:38821] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 05:25:50.149625 2025] [proxy_fcgi:error] [pid 42804:tid 42826] [client 74.176.48.190:38821] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 05:25:50.501458 2025] [proxy_fcgi:error] [pid 42804:tid 42806] [client 74.176.48.190:38821] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 05:25:52.052611 2025] [proxy_fcgi:error] [pid 42804:tid 42807] [client 74.176.48.190:38821] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 05:25:52.188900 2025] [proxy_fcgi:error] [pid 42804:tid 42809] [client 74.176.48.190:38821] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 05:25:52.325303 2025] [proxy_fcgi:error] [pid 42804:tid 42810] [client 74.176.48.190:38821] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 05:25:52.446988 2025] [proxy_fcgi:error] [pid 42804:tid 42823] [client 74.176.48.190:38821] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 05:25:52.690343 2025] [proxy_fcgi:error] [pid 42804:tid 42813] [client 74.176.48.190:38821] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 05:25:52.890719 2025] [proxy_fcgi:error] [pid 42804:tid 42816] [client 74.176.48.190:38821] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 05:25:53.009270 2025] [proxy_fcgi:error] [pid 42804:tid 42825] [client 74.176.48.190:38821] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 05:25:53.128828 2025] [proxy_fcgi:error] [pid 42804:tid 42811] [client 74.176.48.190:38821] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 05:25:55.576507 2025] [:error] [pid 42804:tid 42807] [client 74.176.48.190:38821] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/s.php"] [unique_id "aRuS4_pXARlE6tIuBnlBmQAAAUE"]
[Tue Nov 18 05:25:57.825010 2025] [:error] [pid 61392:tid 61430] [client 74.176.48.190:38813] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/s.php"] [unique_id "aRuS5XSmvb496zZxueLB2wAAAEE"]
[Tue Nov 18 05:25:59.494641 2025] [:error] [pid 61393:tid 61476] [client 74.176.48.190:38833] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/s.php"] [unique_id "aRuS52H9XjlbVPv9gQUS5wAAAJQ"]
[Tue Nov 18 05:26:10.302025 2025] [:error] [pid 29195:tid 29218] [client 74.176.48.190:38758] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/s.php"] [unique_id "aRuS8hMeonxy_4yeOTUqSQAAARU"]
[Tue Nov 18 05:26:12.201273 2025] [:error] [pid 42804:tid 42813] [client 74.176.48.190:38816] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/yzkvrell.php"] [unique_id "aRuS9PpXARlE6tIuBnlBtAAAAUc"]
[Tue Nov 18 05:26:13.643137 2025] [:error] [pid 42804:tid 42810] [client 74.176.48.190:38892] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/yzkvrell.php"] [unique_id "aRuS9fpXARlE6tIuBnlBtwAAAUQ"]
[Tue Nov 18 05:26:16.231714 2025] [:error] [pid 61393:tid 61477] [client 74.176.48.190:38847] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/yzkvrell.php"] [unique_id "aRuS-GH9XjlbVPv9gQUS9AAAAJU"]
[Tue Nov 18 05:26:19.745481 2025] [:error] [pid 61391:tid 61403] [client 74.176.48.190:38869] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/yzkvrell.php"] [unique_id "aRuS-4wXIKmhlnkP3-dUNAAAAAM"]
[Tue Nov 18 05:26:23.014503 2025] [:error] [pid 29195:tid 29206] [client 74.176.48.190:38738] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gmo.php"] [unique_id "aRuS_xMeonxy_4yeOTUqWQAAAQk"]
[Tue Nov 18 05:26:24.581953 2025] [:error] [pid 61482:tid 61507] [client 74.176.48.190:38806] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gmo.php"] [unique_id "aRuTAPtNHsWZClVWav4_ZgAAANQ"]
[Tue Nov 18 05:26:26.219316 2025] [:error] [pid 61393:tid 61460] [client 74.176.48.190:38835] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gmo.php"] [unique_id "aRuTAmH9XjlbVPv9gQUTBAAAAIQ"]
[Tue Nov 18 05:26:29.105987 2025] [:error] [pid 42804:tid 42815] [client 74.176.48.190:38804] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gmo.php"] [unique_id "aRuTBfpXARlE6tIuBnlB0QAAAUk"]
[Tue Nov 18 05:26:31.633087 2025] [:error] [pid 29195:tid 29203] [client 74.176.48.190:38862] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zc-749.php"] [unique_id "aRuTBxMeonxy_4yeOTUqZAAAAQY"]
[Tue Nov 18 05:26:32.973055 2025] [:error] [pid 29195:tid 29197] [client 74.176.48.190:38903] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zc-749.php"] [unique_id "aRuTCBMeonxy_4yeOTUqZgAAAQA"]
[Tue Nov 18 05:26:34.426513 2025] [:error] [pid 61391:tid 61403] [client 74.176.48.190:38723] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zc-749.php"] [unique_id "aRuTCowXIKmhlnkP3-dURAAAAAM"]
[Tue Nov 18 05:26:36.580907 2025] [:error] [pid 42804:tid 42824] [client 74.176.48.190:38791] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zc-749.php"] [unique_id "aRuTDPpXARlE6tIuBnlB5QAAAVI"]
[Tue Nov 18 05:26:38.752013 2025] [:error] [pid 42804:tid 42809] [client 74.176.48.190:38834] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/fm.php"] [unique_id "aRuTDvpXARlE6tIuBnlB7gAAAUM"]
[Tue Nov 18 05:26:41.249878 2025] [:error] [pid 61482:tid 61500] [client 74.176.48.190:38845] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/fm.php"] [unique_id "aRuTEftNHsWZClVWav4_hAAAAM0"]
[Tue Nov 18 05:26:44.079107 2025] [:error] [pid 61392:tid 61441] [client 74.176.48.190:38737] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/fm.php"] [unique_id "aRuTFHSmvb496zZxueLCCwAAAEw"]
[Tue Nov 18 05:26:48.045078 2025] [:error] [pid 61482:tid 61504] [client 74.176.48.190:38863] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/fm.php"] [unique_id "aRuTGPtNHsWZClVWav4_mQAAANE"]
[Tue Nov 18 05:26:49.311298 2025] [:error] [pid 61393:tid 61456] [client 74.176.48.190:38787] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ava.php"] [unique_id "aRuTGWH9XjlbVPv9gQUTNAAAAIA"]
[Tue Nov 18 05:26:51.943620 2025] [:error] [pid 29195:tid 29197] [client 74.176.48.190:38785] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ava.php"] [unique_id "aRuTGxMeonxy_4yeOTUqgQAAAQA"]
[Tue Nov 18 05:26:53.548054 2025] [proxy_fcgi:error] [pid 29195:tid 29205] [client 74.176.48.190:38797] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 05:26:53.667217 2025] [proxy_fcgi:error] [pid 29195:tid 29210] [client 74.176.48.190:38797] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 05:26:53.804087 2025] [proxy_fcgi:error] [pid 29195:tid 29207] [client 74.176.48.190:38797] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 05:26:53.921320 2025] [proxy_fcgi:error] [pid 29195:tid 29218] [client 74.176.48.190:38797] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 05:26:54.060108 2025] [proxy_fcgi:error] [pid 29195:tid 29214] [client 74.176.48.190:38797] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 05:26:54.204061 2025] [proxy_fcgi:error] [pid 29195:tid 29221] [client 74.176.48.190:38797] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 05:26:54.321659 2025] [proxy_fcgi:error] [pid 29195:tid 29217] [client 74.176.48.190:38797] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 05:26:54.588888 2025] [proxy_fcgi:error] [pid 29195:tid 29200] [client 74.176.48.190:38797] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 05:26:54.738770 2025] [proxy_fcgi:error] [pid 29195:tid 29212] [client 74.176.48.190:38797] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 05:26:54.857405 2025] [proxy_fcgi:error] [pid 29195:tid 29209] [client 74.176.48.190:38797] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 05:26:54.981092 2025] [proxy_fcgi:error] [pid 29195:tid 29197] [client 74.176.48.190:38797] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 05:26:55.098123 2025] [:error] [pid 29195:tid 29199] [client 74.176.48.190:38797] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/efile.php"] [unique_id "aRuTHxMeonxy_4yeOTUqlQAAAQI"]
[Tue Nov 18 05:26:57.819770 2025] [:error] [pid 29195:tid 29216] [client 74.176.48.190:38782] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/efile.php"] [unique_id "aRuTIRMeonxy_4yeOTUqlwAAARM"]
[Tue Nov 18 05:27:07.608603 2025] [:error] [pid 61482:tid 61505] [client 74.176.48.190:38826] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/efile.php"] [unique_id "aRuTK_tNHsWZClVWav4_swAAANI"]
[Tue Nov 18 05:27:20.835699 2025] [:error] [pid 29195:tid 29209] [client 74.176.48.190:38733] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/past1.php"] [unique_id "aRuTOBMeonxy_4yeOTUqqgAAAQw"]
[Tue Nov 18 05:27:22.576454 2025] [:error] [pid 61393:tid 61463] [client 74.176.48.190:38812] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/past1.php"] [unique_id "aRuTOmH9XjlbVPv9gQUTXgAAAIc"]
[Tue Nov 18 05:27:23.479133 2025] [:error] [pid 29195:tid 29210] [client 74.176.48.190:38795] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/past1.php"] [unique_id "aRuTOxMeonxy_4yeOTUqsQAAAQ0"]
[Tue Nov 18 05:27:24.907967 2025] [:error] [pid 61482:tid 61498] [client 74.176.48.190:38868] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/past1.php"] [unique_id "aRuTPPtNHsWZClVWav4_zgAAAMs"]
[Tue Nov 18 05:27:25.996624 2025] [:error] [pid 29195:tid 29198] [client 74.176.48.190:38870] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/7.php"] [unique_id "aRuTPRMeonxy_4yeOTUqtQAAAQE"]
[Tue Nov 18 05:27:34.053126 2025] [:error] [pid 61392:tid 61441] [client 74.176.48.190:38720] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/7.php"] [unique_id "aRuTRnSmvb496zZxueLCQwAAAEw"]
[Tue Nov 18 05:27:35.248723 2025] [:error] [pid 61482:tid 61504] [client 74.176.48.190:38741] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/7.php"] [unique_id "aRuTR_tNHsWZClVWav4_0QAAANE"]
[Tue Nov 18 05:27:43.447156 2025] [:error] [pid 61392:tid 61449] [client 74.176.48.190:38855] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/4563.php"] [unique_id "aRuTT3Smvb496zZxueLCTAAAAFQ"]
[Tue Nov 18 05:27:45.113836 2025] [:error] [pid 61393:tid 61466] [client 74.176.48.190:38841] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/4563.php"] [unique_id "aRuTUWH9XjlbVPv9gQUTdAAAAIo"]
[Tue Nov 18 05:27:46.368716 2025] [:error] [pid 29195:tid 29197] [client 74.176.48.190:38852] [client 74.176.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/4563.php"] [unique_id "aRuTUhMeonxy_4yeOTUqywAAAQA"]
[Tue Nov 18 05:27:59.082690 2025] [proxy_fcgi:error] [pid 61482:tid 61500] [client 74.176.48.190:38844] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 05:27:59.202824 2025] [proxy_fcgi:error] [pid 61482:tid 61494] [client 74.176.48.190:38844] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 05:27:59.330442 2025] [proxy_fcgi:error] [pid 61482:tid 61492] [client 74.176.48.190:38844] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 05:27:59.465607 2025] [proxy_fcgi:error] [pid 61482:tid 61498] [client 74.176.48.190:38844] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 05:27:59.600628 2025] [proxy_fcgi:error] [pid 61482:tid 61508] [client 74.176.48.190:38844] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 05:27:59.721573 2025] [proxy_fcgi:error] [pid 61482:tid 61496] [client 74.176.48.190:38844] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 05:27:59.854445 2025] [proxy_fcgi:error] [pid 61482:tid 61505] [client 74.176.48.190:38844] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 05:28:00.015955 2025] [proxy_fcgi:error] [pid 61482:tid 61511] [client 74.176.48.190:38844] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 05:28:00.140305 2025] [proxy_fcgi:error] [pid 61482:tid 61510] [client 74.176.48.190:38844] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 05:28:00.268009 2025] [proxy_fcgi:error] [pid 61482:tid 61502] [client 74.176.48.190:38844] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 05:28:00.392960 2025] [proxy_fcgi:error] [pid 61482:tid 61509] [client 74.176.48.190:38844] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 21:00:44.418524 2025] [:error] [pid 44560:tid 44571] [client 84.247.191.22:59146] [client 84.247.191.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/images/"] [unique_id "aRxt_AnbP7etF3q5-5u-KQAAAMA"], referer: binance.com
[Tue Nov 18 21:00:48.283510 2025] [:error] [pid 44624:tid 44628] [client 84.247.191.22:59168] [client 84.247.191.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/files/"] [unique_id "aRxuACllffozoBluWCXEbQAAAYE"], referer: binance.com
[Tue Nov 18 21:37:28.829426 2025] [:error] [pid 44471:tid 44522] [client 45.134.79.103:62751] [client 45.134.79.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "aRx2mO_6m0bQO14XwtOCugAAARI"]
[Wed Nov 19 20:35:57.233432 2025] [:error] [pid 6644:tid 6653] [client 104.196.176.201:57902] [client 104.196.176.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/media/system/js/core.js"] [unique_id "aR25rU0i6Rf788MB6sbRAQAAAMc"]
[Wed Nov 19 23:27:53.926022 2025] [:error] [pid 12673:tid 12723] [client 34.171.40.65:55871] [client 34.171.40.65] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.171.40.65, incrementing ddos counter"] [hostname "dwelectservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aR3h-cab1F0fb062dH2UPQAAAhM"]
[Wed Nov 19 23:27:53.938138 2025] [proxy_fcgi:error] [pid 12673:tid 12723] [client 34.171.40.65:55871] AH01071: Got error 'Primary script unknown'
[Wed Nov 19 23:27:56.339935 2025] [:error] [pid 12673:tid 12726] [client 34.171.40.65:55871] [client 34.171.40.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aR3h_Mab1F0fb062dH2USgAAAhY"]
[Wed Nov 19 23:27:56.852237 2025] [:error] [pid 6555:tid 6607] [client 34.171.40.65:57948] [client 34.171.40.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aR3h_EbVJm8eMsGMTCNLewAAAFA"]
[Wed Nov 19 23:27:57.325366 2025] [:error] [pid 6555:tid 6600] [client 34.171.40.65:61894] [client 34.171.40.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aR3h_UbVJm8eMsGMTCNLfQAAAEk"]
[Wed Nov 19 23:27:57.833671 2025] [:error] [pid 6644:tid 6659] [client 34.171.40.65:54351] [client 34.171.40.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aR3h_U0i6Rf788MB6sYANQAAAM0"]
[Wed Nov 19 23:27:58.324601 2025] [:error] [pid 6555:tid 6592] [client 34.171.40.65:61750] [client 34.171.40.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aR3h_kbVJm8eMsGMTCNLfwAAAEE"]
[Wed Nov 19 23:27:58.813640 2025] [:error] [pid 6556:tid 6638] [client 34.171.40.65:59194] [client 34.171.40.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aR3h_puL7hhgrmdM1ms-PgAAAJQ"]
[Wed Nov 19 23:27:59.310645 2025] [:error] [pid 6556:tid 6627] [client 34.171.40.65:49725] [client 34.171.40.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aR3h_5uL7hhgrmdM1ms-PwAAAIk"]
[Thu Nov 20 03:28:13.935955 2025] [:error] [pid 8396:tid 8418] [client 34.123.104.178:57161] [client 34.123.104.178] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.123.104.178, incrementing ddos counter"] [hostname "dwelectservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aR4aTYolA09HZQNzyMAAqQAAAtQ"]
[Thu Nov 20 03:28:13.945596 2025] [proxy_fcgi:error] [pid 8396:tid 8418] [client 34.123.104.178:57161] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 03:28:16.799074 2025] [:error] [pid 8396:tid 8408] [client 34.123.104.178:57161] [client 34.123.104.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aR4aUIolA09HZQNzyMAAugAAAso"]
[Thu Nov 20 03:28:17.213772 2025] [:error] [pid 50223:tid 50357] [client 34.123.104.178:52965] [client 34.123.104.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aR4aUT4iSUKl66cdvvbzJAAAAFY"]
[Thu Nov 20 03:28:17.614173 2025] [:error] [pid 8030:tid 8047] [client 34.123.104.178:61456] [client 34.123.104.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aR4aUYaRI7v0Hh2prI9EPAAAAY4"]
[Thu Nov 20 03:28:18.111533 2025] [:error] [pid 8365:tid 8393] [client 34.123.104.178:63848] [client 34.123.104.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aR4aUhhyiKKdRMrEbr24mgAAApg"]
[Thu Nov 20 03:28:18.574081 2025] [:error] [pid 11265:tid 11269] [client 34.123.104.178:55609] [client 34.123.104.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aR4aUi7bjlU5JLV744xfPwAAAAI"]
[Thu Nov 20 03:28:18.975004 2025] [:error] [pid 11265:tid 11288] [client 34.123.104.178:59108] [client 34.123.104.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aR4aUi7bjlU5JLV744xfQQAAABU"]
[Thu Nov 20 03:28:19.483063 2025] [:error] [pid 11265:tid 11268] [client 34.123.104.178:56898] [client 34.123.104.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aR4aUy7bjlU5JLV744xfQwAAAAE"]
[Thu Nov 20 12:10:20.054735 2025] [:error] [pid 34405:tid 34431] [client 98.81.111.26:56942] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wordpress"] [unique_id "aR6UrDFpvu8oRK7ATfvIwwAAARg"]
[Thu Nov 20 12:10:20.459329 2025] [:error] [pid 55340:tid 55354] [client 98.81.111.26:60817] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wordpress"] [unique_id "aR6UrPOxD-NeMydTybBJhQAAAAk"]
[Thu Nov 20 12:10:20.866100 2025] [:error] [pid 34405:tid 34431] [client 98.81.111.26:64609] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wordpress"] [unique_id "aR6UrDFpvu8oRK7ATfvI0wAAARg"]
[Thu Nov 20 12:10:21.281618 2025] [:error] [pid 34405:tid 34407] [client 98.81.111.26:60193] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wordpress"] [unique_id "aR6UrTFpvu8oRK7ATfvI4AAAAQA"]
[Thu Nov 20 12:10:21.684881 2025] [:error] [pid 55340:tid 55348] [client 98.81.111.26:65264] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wordpress"] [unique_id "aR6UrfOxD-NeMydTybBJuQAAAAM"]
[Thu Nov 20 12:10:22.092290 2025] [:error] [pid 804:tid 822] [client 98.81.111.26:62180] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/setup-config.php"] [unique_id "aR6UrvaRHpUlPL9O0Lk1ngAAAYY"]
[Thu Nov 20 12:10:22.499397 2025] [:error] [pid 804:tid 806] [client 98.81.111.26:55629] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/setup-config.php"] [unique_id "aR6UrvaRHpUlPL9O0Lk1uAAAAYA"]
[Thu Nov 20 12:10:22.906498 2025] [:error] [pid 55430:tid 55452] [client 98.81.111.26:58138] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/setup-config.php"] [unique_id "aR6UrvPZXaIMEU4pE7ug4gAAANM"]
[Thu Nov 20 12:10:23.318805 2025] [:error] [pid 55340:tid 55347] [client 98.81.111.26:51273] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/setup-config.php"] [unique_id "aR6Ur_OxD-NeMydTybBKAwAAAAI"]
[Thu Nov 20 12:10:23.734774 2025] [:error] [pid 34405:tid 34420] [client 98.81.111.26:59018] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/setup-config.php"] [unique_id "aR6UrzFpvu8oRK7ATfvJbwAAAQ0"]
[Thu Nov 20 12:10:24.155417 2025] [:error] [pid 55430:tid 55450] [client 98.81.111.26:60056] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/install.php"] [unique_id "aR6UsPPZXaIMEU4pE7uhQgAAANE"]
[Thu Nov 20 12:10:24.564656 2025] [:error] [pid 55342:tid 55376] [client 98.81.111.26:50701] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/install.php"] [unique_id "aR6UsLg6x32Tvk7fIG-MMAAAAEQ"]
[Thu Nov 20 12:10:24.970695 2025] [:error] [pid 804:tid 844] [client 98.81.111.26:57071] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/install.php"] [unique_id "aR6UsPaRHpUlPL9O0Lk2AgAAAZQ"]
[Thu Nov 20 12:10:25.379513 2025] [:error] [pid 55430:tid 55440] [client 98.81.111.26:53439] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/install.php"] [unique_id "aR6UsfPZXaIMEU4pE7uhZAAAAMc"]
[Thu Nov 20 12:10:25.785395 2025] [:error] [pid 55343:tid 55411] [client 98.81.111.26:63504] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/install.php"] [unique_id "aR6UsVWlO3EnyVMV7w5lcwAAAIw"]
[Thu Nov 20 12:10:26.197442 2025] [:error] [pid 804:tid 834] [client 98.81.111.26:59676] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp"] [unique_id "aR6UsvaRHpUlPL9O0Lk2GQAAAYo"]
[Thu Nov 20 12:10:26.602836 2025] [:error] [pid 804:tid 820] [client 98.81.111.26:53987] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp"] [unique_id "aR6UsvaRHpUlPL9O0Lk2IwAAAYQ"]
[Thu Nov 20 12:10:27.009695 2025] [:error] [pid 55343:tid 55416] [client 98.81.111.26:61753] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp"] [unique_id "aR6Us1WlO3EnyVMV7w5lfwAAAJE"]
[Thu Nov 20 12:10:27.415051 2025] [:error] [pid 804:tid 817] [client 98.81.111.26:64130] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp"] [unique_id "aR6Us_aRHpUlPL9O0Lk2LQAAAYM"]
[Thu Nov 20 12:10:27.819697 2025] [:error] [pid 55342:tid 55372] [client 98.81.111.26:59453] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp"] [unique_id "aR6Us7g6x32Tvk7fIG-MWAAAAEA"]
[Thu Nov 20 12:10:28.227535 2025] [:error] [pid 34405:tid 34419] [client 98.81.111.26:51819] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/blog"] [unique_id "aR6UtDFpvu8oRK7ATfvJqAAAAQw"]
[Thu Nov 20 12:10:28.632606 2025] [:error] [pid 804:tid 842] [client 98.81.111.26:55652] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/blog"] [unique_id "aR6UtPaRHpUlPL9O0Lk2PQAAAZI"]
[Thu Nov 20 12:10:29.035602 2025] [:error] [pid 34405:tid 34416] [client 98.81.111.26:50103] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/blog"] [unique_id "aR6UtTFpvu8oRK7ATfvJrAAAAQk"]
[Thu Nov 20 12:10:29.441778 2025] [:error] [pid 55340:tid 55358] [client 98.81.111.26:57011] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/blog"] [unique_id "aR6UtfOxD-NeMydTybBKXQAAAA0"]
[Thu Nov 20 12:10:29.850356 2025] [:error] [pid 55342:tid 55377] [client 98.81.111.26:54328] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/blog"] [unique_id "aR6Utbg6x32Tvk7fIG-McgAAAEU"]
[Thu Nov 20 12:10:30.255494 2025] [:error] [pid 34405:tid 34428] [client 98.81.111.26:59372] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/new"] [unique_id "aR6UtjFpvu8oRK7ATfvJwgAAARU"]
[Thu Nov 20 12:10:30.660473 2025] [:error] [pid 34405:tid 34427] [client 98.81.111.26:58348] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/new"] [unique_id "aR6UtjFpvu8oRK7ATfvJyAAAARQ"]
[Thu Nov 20 12:10:31.065484 2025] [:error] [pid 804:tid 841] [client 98.81.111.26:52848] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/old"] [unique_id "aR6Ut_aRHpUlPL9O0Lk2UAAAAZE"]
[Thu Nov 20 12:10:31.481959 2025] [:error] [pid 55342:tid 55385] [client 98.81.111.26:62005] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/old"] [unique_id "aR6Ut7g6x32Tvk7fIG-MhgAAAE0"]
[Thu Nov 20 12:10:31.886111 2025] [:error] [pid 55340:tid 55360] [client 98.81.111.26:51330] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/old"] [unique_id "aR6Ut_OxD-NeMydTybBKagAAAA8"]
[Thu Nov 20 12:10:32.291463 2025] [:error] [pid 55430:tid 55447] [client 98.81.111.26:61585] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/old"] [unique_id "aR6UuPPZXaIMEU4pE7uhpgAAAM4"]
[Thu Nov 20 12:10:32.695215 2025] [:error] [pid 34405:tid 34427] [client 98.81.111.26:50725] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/old"] [unique_id "aR6UuDFpvu8oRK7ATfvJ3gAAARQ"]
[Thu Nov 20 12:10:33.098206 2025] [:error] [pid 34444:tid 34449] [client 98.81.111.26:59841] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/newsite"] [unique_id "aR6UuVNEol4jlmmA_GPxcwAAAUM"]
[Thu Nov 20 12:10:33.502222 2025] [:error] [pid 55430:tid 55444] [client 98.81.111.26:62691] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/newsite"] [unique_id "aR6UufPZXaIMEU4pE7uhtwAAAMs"]
[Thu Nov 20 12:10:33.905733 2025] [:error] [pid 55340:tid 55357] [client 98.81.111.26:62430] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/newsite"] [unique_id "aR6UufOxD-NeMydTybBKfQAAAAw"]
[Thu Nov 20 12:10:34.310434 2025] [:error] [pid 55343:tid 55413] [client 98.81.111.26:53681] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/newsite"] [unique_id "aR6UulWlO3EnyVMV7w5luQAAAI4"]
[Thu Nov 20 12:10:34.718460 2025] [:error] [pid 55343:tid 55405] [client 98.81.111.26:56277] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/newsite"] [unique_id "aR6UulWlO3EnyVMV7w5luwAAAIY"]
[Thu Nov 20 12:10:35.125033 2025] [:error] [pid 55340:tid 55350] [client 98.81.111.26:58053] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/test"] [unique_id "aR6Uu_OxD-NeMydTybBKjAAAAAU"]
[Thu Nov 20 12:10:35.532996 2025] [:error] [pid 34444:tid 34464] [client 98.81.111.26:55607] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/test"] [unique_id "aR6Uu1NEol4jlmmA_GPxjQAAAVI"]
[Thu Nov 20 12:10:35.939802 2025] [:error] [pid 55340:tid 55366] [client 98.81.111.26:56279] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/test"] [unique_id "aR6Uu_OxD-NeMydTybBKmQAAABU"]
[Thu Nov 20 12:10:36.344452 2025] [:error] [pid 34444:tid 34452] [client 98.81.111.26:64675] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/test"] [unique_id "aR6UvFNEol4jlmmA_GPxnAAAAUY"]
[Thu Nov 20 12:10:36.752459 2025] [:error] [pid 55430:tid 55457] [client 98.81.111.26:61828] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/test"] [unique_id "aR6UvPPZXaIMEU4pE7uh0QAAANg"]
[Thu Nov 20 12:10:37.156529 2025] [:error] [pid 34405:tid 34420] [client 98.81.111.26:56190] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/main"] [unique_id "aR6UvTFpvu8oRK7ATfvKAgAAAQ0"]
[Thu Nov 20 12:10:37.564029 2025] [:error] [pid 55342:tid 55387] [client 98.81.111.26:63280] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/main"] [unique_id "aR6Uvbg6x32Tvk7fIG-MygAAAE8"]
[Thu Nov 20 12:10:37.971206 2025] [:error] [pid 804:tid 843] [client 98.81.111.26:61829] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/main"] [unique_id "aR6UvfaRHpUlPL9O0Lk2jgAAAZM"]
[Thu Nov 20 12:10:38.380138 2025] [:error] [pid 55430:tid 55454] [client 98.81.111.26:53636] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/main"] [unique_id "aR6UvvPZXaIMEU4pE7uh3gAAANU"]
[Thu Nov 20 12:10:38.788528 2025] [:error] [pid 804:tid 806] [client 98.81.111.26:63280] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/main"] [unique_id "aR6UvvaRHpUlPL9O0Lk2mQAAAYA"]
[Thu Nov 20 12:10:39.195902 2025] [:error] [pid 55342:tid 55389] [client 98.81.111.26:55737] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/testing"] [unique_id "aR6Uv7g6x32Tvk7fIG-M3AAAAFE"]
[Thu Nov 20 12:10:39.601689 2025] [:error] [pid 55342:tid 55392] [client 98.81.111.26:52357] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/testing"] [unique_id "aR6Uv7g6x32Tvk7fIG-M4AAAAFQ"]
[Thu Nov 20 12:10:40.006107 2025] [:error] [pid 34444:tid 34455] [client 98.81.111.26:63280] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/testing"] [unique_id "aR6UwFNEol4jlmmA_GPxwgAAAUk"]
[Thu Nov 20 12:10:40.417138 2025] [:error] [pid 55340:tid 55345] [client 98.81.111.26:55117] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/testing"] [unique_id "aR6UwPOxD-NeMydTybBKxAAAAAA"]
[Thu Nov 20 12:10:40.823786 2025] [:error] [pid 804:tid 833] [client 98.81.111.26:51389] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/testing"] [unique_id "aR6UwPaRHpUlPL9O0Lk2tAAAAYk"]
[Thu Nov 20 12:10:41.228517 2025] [:error] [pid 34444:tid 34456] [client 98.81.111.26:61686] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/site"] [unique_id "aR6UwVNEol4jlmmA_GPx0wAAAUo"]
[Thu Nov 20 12:10:41.640495 2025] [:error] [pid 34444:tid 34449] [client 98.81.111.26:51968] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/site"] [unique_id "aR6UwVNEol4jlmmA_GPx4AAAAUM"]
[Thu Nov 20 12:10:42.051048 2025] [:error] [pid 804:tid 834] [client 98.81.111.26:51389] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/site"] [unique_id "aR6UwvaRHpUlPL9O0Lk2ywAAAYo"]
[Thu Nov 20 12:10:42.457176 2025] [:error] [pid 55430:tid 55433] [client 98.81.111.26:62317] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/site"] [unique_id "aR6UwvPZXaIMEU4pE7uh9wAAAMA"]
[Thu Nov 20 12:10:42.863476 2025] [:error] [pid 55343:tid 55403] [client 98.81.111.26:56929] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/site"] [unique_id "aR6UwlWlO3EnyVMV7w5l8AAAAIQ"]
[Thu Nov 20 12:10:43.269108 2025] [:error] [pid 55340:tid 55368] [client 98.81.111.26:60391] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/backup"] [unique_id "aR6Uw_OxD-NeMydTybBK3wAAABc"]
[Thu Nov 20 12:10:43.672825 2025] [:error] [pid 55342:tid 55388] [client 98.81.111.26:59872] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/backup"] [unique_id "aR6Uw7g6x32Tvk7fIG-M-AAAAFA"]
[Thu Nov 20 12:10:44.079927 2025] [:error] [pid 55430:tid 55435] [client 98.81.111.26:60042] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/backup"] [unique_id "aR6UxPPZXaIMEU4pE7uiBQAAAMI"]
[Thu Nov 20 12:10:44.485464 2025] [:error] [pid 804:tid 821] [client 98.81.111.26:53734] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/backup"] [unique_id "aR6UxPaRHpUlPL9O0Lk26gAAAYU"]
[Thu Nov 20 12:10:44.891228 2025] [:error] [pid 34405:tid 34418] [client 98.81.111.26:61598] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/backup"] [unique_id "aR6UxDFpvu8oRK7ATfvKTwAAAQs"]
[Thu Nov 20 12:10:45.295919 2025] [:error] [pid 34444:tid 34468] [client 98.81.111.26:62209] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/demo"] [unique_id "aR6UxVNEol4jlmmA_GPyCwAAAVY"]
[Thu Nov 20 12:10:45.701305 2025] [:error] [pid 34444:tid 34449] [client 98.81.111.26:59790] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/demo"] [unique_id "aR6UxVNEol4jlmmA_GPyDgAAAUM"]
[Thu Nov 20 12:10:46.108484 2025] [:error] [pid 55343:tid 55415] [client 98.81.111.26:64222] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/demo"] [unique_id "aR6UxlWlO3EnyVMV7w5mDgAAAJA"]
[Thu Nov 20 12:10:46.513643 2025] [:error] [pid 34444:tid 34453] [client 98.81.111.26:56342] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/demo"] [unique_id "aR6UxlNEol4jlmmA_GPyGgAAAUc"]
[Thu Nov 20 12:10:46.919047 2025] [:error] [pid 34405:tid 34426] [client 98.81.111.26:59247] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/demo"] [unique_id "aR6UxjFpvu8oRK7ATfvKXAAAARM"]
[Thu Nov 20 12:10:47.325725 2025] [:error] [pid 34405:tid 34414] [client 98.81.111.26:52122] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/home"] [unique_id "aR6UxzFpvu8oRK7ATfvKXgAAAQc"]
[Thu Nov 20 12:10:47.728909 2025] [:error] [pid 34444:tid 34464] [client 98.81.111.26:63407] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/home"] [unique_id "aR6Ux1NEol4jlmmA_GPyLwAAAVI"]
[Thu Nov 20 12:10:48.133605 2025] [:error] [pid 55342:tid 55379] [client 98.81.111.26:53023] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/home"] [unique_id "aR6UyLg6x32Tvk7fIG-NGwAAAEc"]
[Thu Nov 20 12:10:48.538662 2025] [:error] [pid 55343:tid 55406] [client 98.81.111.26:60138] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/home"] [unique_id "aR6UyFWlO3EnyVMV7w5mHgAAAIc"]
[Thu Nov 20 12:10:48.945055 2025] [:error] [pid 55430:tid 55445] [client 98.81.111.26:59645] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/home"] [unique_id "aR6UyPPZXaIMEU4pE7uiRQAAAMw"]
[Thu Nov 20 12:10:49.355654 2025] [:error] [pid 34444:tid 34456] [client 98.81.111.26:56377] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dev"] [unique_id "aR6UyVNEol4jlmmA_GPyTQAAAUo"]
[Thu Nov 20 12:10:49.762335 2025] [:error] [pid 55430:tid 55439] [client 98.81.111.26:63848] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dev"] [unique_id "aR6UyfPZXaIMEU4pE7uiUgAAAMY"]
[Thu Nov 20 12:10:50.166825 2025] [:error] [pid 55430:tid 55448] [client 98.81.111.26:59899] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dev"] [unique_id "aR6UyvPZXaIMEU4pE7uiVwAAAM8"]
[Thu Nov 20 12:10:50.571285 2025] [:error] [pid 55342:tid 55383] [client 98.81.111.26:56995] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dev"] [unique_id "aR6Uyrg6x32Tvk7fIG-NOgAAAEs"]
[Thu Nov 20 12:10:50.975460 2025] [:error] [pid 55343:tid 55413] [client 98.81.111.26:54424] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dev"] [unique_id "aR6UylWlO3EnyVMV7w5mMQAAAI4"]
[Thu Nov 20 12:10:51.378494 2025] [:error] [pid 55343:tid 55418] [client 98.81.111.26:57325] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cms"] [unique_id "aR6Uy1WlO3EnyVMV7w5mNwAAAJM"]
[Thu Nov 20 12:10:51.780748 2025] [:error] [pid 55342:tid 55382] [client 98.81.111.26:63037] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cms"] [unique_id "aR6Uy7g6x32Tvk7fIG-NUAAAAEo"]
[Thu Nov 20 12:10:52.190584 2025] [:error] [pid 55340:tid 55356] [client 98.81.111.26:49352] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cms"] [unique_id "aR6UzPOxD-NeMydTybBLIQAAAAs"]
[Thu Nov 20 12:10:52.594212 2025] [:error] [pid 55343:tid 55407] [client 98.81.111.26:60163] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cms"] [unique_id "aR6UzFWlO3EnyVMV7w5mSQAAAIg"]
[Thu Nov 20 12:10:52.999640 2025] [:error] [pid 34444:tid 34469] [client 98.81.111.26:55753] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cms"] [unique_id "aR6UzFNEol4jlmmA_GPyaQAAAVc"]
[Thu Nov 20 12:10:53.411143 2025] [:error] [pid 34405:tid 34418] [client 98.81.111.26:59249] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/portal"] [unique_id "aR6UzTFpvu8oRK7ATfvKjAAAAQs"]
[Thu Nov 20 12:10:53.816850 2025] [:error] [pid 55430:tid 55445] [client 98.81.111.26:63477] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/portal"] [unique_id "aR6UzfPZXaIMEU4pE7uiggAAAMw"]
[Thu Nov 20 12:10:54.220062 2025] [:error] [pid 55342:tid 55372] [client 98.81.111.26:52076] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/portal"] [unique_id "aR6Uzrg6x32Tvk7fIG-NagAAAEA"]
[Thu Nov 20 12:10:54.624763 2025] [:error] [pid 55430:tid 55449] [client 98.81.111.26:53022] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/portal"] [unique_id "aR6UzvPZXaIMEU4pE7uihgAAANA"]
[Thu Nov 20 12:10:55.030079 2025] [:error] [pid 34444:tid 34455] [client 98.81.111.26:58304] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/portal"] [unique_id "aR6Uz1NEol4jlmmA_GPyewAAAUk"]
[Thu Nov 20 12:10:55.437401 2025] [:error] [pid 55340:tid 55353] [client 98.81.111.26:55249] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/web"] [unique_id "aR6Uz_OxD-NeMydTybBLOwAAAAg"]
[Thu Nov 20 12:10:55.840583 2025] [:error] [pid 55430:tid 55446] [client 98.81.111.26:56929] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/web"] [unique_id "aR6Uz_PZXaIMEU4pE7uimQAAAM0"]
[Thu Nov 20 12:10:56.245456 2025] [:error] [pid 34444:tid 34446] [client 98.81.111.26:54911] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/web"] [unique_id "aR6U0FNEol4jlmmA_GPyhgAAAUA"]
[Thu Nov 20 12:10:56.649619 2025] [:error] [pid 55430:tid 55455] [client 98.81.111.26:61455] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/web"] [unique_id "aR6U0PPZXaIMEU4pE7uipQAAANY"]
[Thu Nov 20 12:10:57.054566 2025] [:error] [pid 804:tid 834] [client 98.81.111.26:55662] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/web"] [unique_id "aR6U0faRHpUlPL9O0Lk3XQAAAYo"]
[Thu Nov 20 15:15:55.751003 2025] [:error] [pid 40636:tid 40652] [client 4.215.215.139:19624] [client 4.215.215.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/network.php"] [unique_id "aR7AKwK8BWUoW3xq0HDsFQAAA4w"]
[Thu Nov 20 15:15:56.555856 2025] [:error] [pid 55340:tid 55346] [client 4.215.215.139:10882] [client 4.215.215.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/theme-compat/chosen.php"] [unique_id "aR7ALPOxD-NeMydTybB5iAAAAAE"]
[Thu Nov 20 15:15:58.029313 2025] [proxy_fcgi:error] [pid 55340:tid 55357] [client 4.215.215.139:10921] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 15:15:58.169191 2025] [:error] [pid 55340:tid 55368] [client 4.215.215.139:10921] [client 4.215.215.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aR7ALvOxD-NeMydTybB5igAAABc"]
[Thu Nov 20 15:15:59.488783 2025] [proxy_fcgi:error] [pid 40508:tid 40521] [client 4.215.215.139:19602] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 15:15:59.904843 2025] [proxy_fcgi:error] [pid 40508:tid 40511] [client 4.215.215.139:19602] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 15:16:00.341186 2025] [proxy_fcgi:error] [pid 40508:tid 40531] [client 4.215.215.139:19602] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 15:16:00.589224 2025] [proxy_fcgi:error] [pid 40508:tid 40513] [client 4.215.215.139:19602] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 15:16:00.745347 2025] [:error] [pid 40508:tid 40510] [client 4.215.215.139:19602] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/db.php"] [unique_id "aR7AMKxXNVCMW_ksxPtf6QAAAoA"]
[Thu Nov 20 15:16:01.368365 2025] [:error] [pid 55342:tid 55390] [client 4.215.215.139:20286] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/db.php"] [unique_id "aR7AMbg6x32Tvk7fIG-0BAAAAFI"]
[Thu Nov 20 15:16:02.410827 2025] [:error] [pid 55340:tid 55362] [client 4.215.215.139:19616] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/db.php"] [unique_id "aR7AMvOxD-NeMydTybB5jgAAABE"]
[Thu Nov 20 15:16:03.341134 2025] [:error] [pid 34405:tid 34425] [client 4.215.215.139:20266] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/db.php"] [unique_id "aR7AMzFpvu8oRK7ATfvytAAAARI"]
[Thu Nov 20 15:16:03.911741 2025] [:error] [pid 34405:tid 34410] [client 4.215.215.139:10920] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gecko.php"] [unique_id "aR7AMzFpvu8oRK7ATfvytQAAAQM"]
[Thu Nov 20 15:16:05.360621 2025] [:error] [pid 40508:tid 40515] [client 4.215.215.139:20229] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gecko.php"] [unique_id "aR7ANaxXNVCMW_ksxPtf6wAAAoU"]
[Thu Nov 20 15:16:08.198765 2025] [:error] [pid 40537:tid 40561] [client 4.215.215.139:20233] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gecko.php"] [unique_id "aR7AOKKlsL5kxTa3c1zC_AAAAtQ"]
[Thu Nov 20 15:16:10.569478 2025] [:error] [pid 40445:tid 40481] [client 4.215.215.139:19626] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gecko.php"] [unique_id "aR7AOlH-MuFcoWRjXpYggAAAAkY"]
[Thu Nov 20 15:16:12.751973 2025] [:error] [pid 40415:tid 40422] [client 4.215.215.139:19603] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/abe.php"] [unique_id "aR7APKhjIyLSv09svwN5aQAAAcQ"]
[Thu Nov 20 15:16:16.322915 2025] [:error] [pid 40508:tid 40532] [client 4.215.215.139:20232] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/abe.php"] [unique_id "aR7AQKxXNVCMW_ksxPtf7gAAApY"]
[Thu Nov 20 15:16:16.767854 2025] [:error] [pid 40508:tid 40533] [client 4.215.215.139:10842] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/abe.php"] [unique_id "aR7AQKxXNVCMW_ksxPtf8AAAApc"]
[Thu Nov 20 15:16:21.080032 2025] [:error] [pid 40415:tid 40426] [client 4.215.215.139:24464] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/abe.php"] [unique_id "aR7ARahjIyLSv09svwN5fwAAAcg"]
[Thu Nov 20 15:16:21.631376 2025] [:error] [pid 55342:tid 55385] [client 4.215.215.139:25740] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bs1.php"] [unique_id "aR7ARbg6x32Tvk7fIG-0BgAAAE0"]
[Thu Nov 20 15:16:22.023379 2025] [:error] [pid 40508:tid 40531] [client 4.215.215.139:20309] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bs1.php"] [unique_id "aR7ARqxXNVCMW_ksxPtf9gAAApU"]
[Thu Nov 20 15:16:23.257340 2025] [:error] [pid 34405:tid 34421] [client 4.215.215.139:20337] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bs1.php"] [unique_id "aR7ARzFpvu8oRK7ATfvyugAAAQ4"]
[Thu Nov 20 15:16:24.063369 2025] [:error] [pid 40537:tid 40550] [client 4.215.215.139:20307] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bs1.php"] [unique_id "aR7ASKKlsL5kxTa3c1zC_gAAAsk"]
[Thu Nov 20 15:16:26.396530 2025] [:error] [pid 40537:tid 40542] [client 4.215.215.139:19623] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/content.php"] [unique_id "aR7ASqKlsL5kxTa3c1zDAAAAAsE"]
[Thu Nov 20 15:16:28.147433 2025] [:error] [pid 55343:tid 55420] [client 4.215.215.139:19601] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/content.php"] [unique_id "aR7ATFWlO3EnyVMV7w6P6wAAAJU"]
[Thu Nov 20 15:16:29.057683 2025] [:error] [pid 40415:tid 40430] [client 4.215.215.139:45325] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/content.php"] [unique_id "aR7ATahjIyLSv09svwN5hQAAAcw"]
[Thu Nov 20 15:16:29.588872 2025] [:error] [pid 40537:tid 40564] [client 4.215.215.139:25755] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/content.php"] [unique_id "aR7ATaKlsL5kxTa3c1zDBQAAAtc"]
[Thu Nov 20 15:16:31.250775 2025] [:error] [pid 55430:tid 55444] [client 4.215.215.139:10691] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cc.php"] [unique_id "aR7AT_PZXaIMEU4pE7vcYAAAAMs"]
[Thu Nov 20 15:16:32.799965 2025] [:error] [pid 55340:tid 55350] [client 4.215.215.139:19587] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cc.php"] [unique_id "aR7AUPOxD-NeMydTybB5mwAAAAU"]
[Thu Nov 20 15:16:34.236727 2025] [:error] [pid 40636:tid 40642] [client 4.215.215.139:25739] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cc.php"] [unique_id "aR7AUgK8BWUoW3xq0HDsKAAAA4I"]
[Thu Nov 20 15:16:37.270257 2025] [:error] [pid 40445:tid 40484] [client 4.215.215.139:10737] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cc.php"] [unique_id "aR7AVVH-MuFcoWRjXpYgtwAAAkk"]
[Thu Nov 20 15:16:39.079990 2025] [:error] [pid 40415:tid 40424] [client 4.215.215.139:20295] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-cron.php"] [unique_id "aR7AV6hjIyLSv09svwN5igAAAcY"]
[Thu Nov 20 15:16:40.844901 2025] [:error] [pid 34405:tid 34410] [client 4.215.215.139:10853] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-cron.php"] [unique_id "aR7AWDFpvu8oRK7ATfvyyQAAAQM"]
[Thu Nov 20 15:16:42.618078 2025] [:error] [pid 55343:tid 55422] [client 4.215.215.139:24495] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-cron.php"] [unique_id "aR7AWlWlO3EnyVMV7w6P7wAAAJc"]
[Thu Nov 20 15:16:43.929399 2025] [:error] [pid 34405:tid 34428] [client 4.215.215.139:10718] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-cron.php"] [unique_id "aR7AWzFpvu8oRK7ATfvyzAAAARU"]
[Thu Nov 20 15:16:44.431671 2025] [:error] [pid 55430:tid 55441] [client 4.215.215.139:45324] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/css.php"] [unique_id "aR7AXPPZXaIMEU4pE7vcaQAAAMg"]
[Thu Nov 20 15:16:45.996344 2025] [:error] [pid 40508:tid 40511] [client 4.215.215.139:25776] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/css.php"] [unique_id "aR7AXaxXNVCMW_ksxPtgAgAAAoE"]
[Thu Nov 20 15:16:48.169365 2025] [:error] [pid 55430:tid 55448] [client 4.215.215.139:19598] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/css.php"] [unique_id "aR7AYPPZXaIMEU4pE7vcagAAAM8"]
[Thu Nov 20 15:16:49.653896 2025] [:error] [pid 40415:tid 40425] [client 4.215.215.139:10850] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/css.php"] [unique_id "aR7AYahjIyLSv09svwN5jQAAAcc"]
[Thu Nov 20 15:16:50.685242 2025] [:error] [pid 40636:tid 40650] [client 4.215.215.139:25771] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cloud.php"] [unique_id "aR7AYgK8BWUoW3xq0HDsLgAAA4o"]
[Thu Nov 20 15:16:51.931833 2025] [:error] [pid 40445:tid 40483] [client 4.215.215.139:19600] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cloud.php"] [unique_id "aR7AY1H-MuFcoWRjXpYgvwAAAkg"]
[Thu Nov 20 15:16:53.453633 2025] [:error] [pid 40445:tid 40487] [client 4.215.215.139:19637] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cloud.php"] [unique_id "aR7AZVH-MuFcoWRjXpYgwQAAAkw"]
[Thu Nov 20 15:16:54.512613 2025] [:error] [pid 40508:tid 40513] [client 4.215.215.139:20343] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cloud.php"] [unique_id "aR7AZqxXNVCMW_ksxPtgBAAAAoM"]
[Thu Nov 20 15:16:55.411189 2025] [:error] [pid 34405:tid 34416] [client 4.215.215.139:10838] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bless.php"] [unique_id "aR7AZzFpvu8oRK7ATfvyzwAAAQk"]
[Thu Nov 20 15:16:56.745201 2025] [:error] [pid 55342:tid 55390] [client 4.215.215.139:19646] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bless.php"] [unique_id "aR7AaLg6x32Tvk7fIG-0EgAAAFI"]
[Thu Nov 20 15:16:58.892160 2025] [:error] [pid 55343:tid 55411] [client 4.215.215.139:45365] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bless.php"] [unique_id "aR7AalWlO3EnyVMV7w6P8wAAAIw"]
[Thu Nov 20 15:17:00.772791 2025] [proxy_fcgi:error] [pid 55343:tid 55410] [client 4.215.215.139:20311] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 15:17:02.242402 2025] [proxy_fcgi:error] [pid 55343:tid 55403] [client 4.215.215.139:20311] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 15:17:02.386110 2025] [proxy_fcgi:error] [pid 55343:tid 55423] [client 4.215.215.139:20311] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 15:17:02.525277 2025] [proxy_fcgi:error] [pid 55343:tid 55404] [client 4.215.215.139:20311] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 15:17:02.719930 2025] [proxy_fcgi:error] [pid 55343:tid 55419] [client 4.215.215.139:20311] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 15:17:03.917229 2025] [proxy_fcgi:error] [pid 55343:tid 55407] [client 4.215.215.139:20311] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 15:17:04.037026 2025] [proxy_fcgi:error] [pid 55343:tid 55401] [client 4.215.215.139:20311] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 15:17:04.157434 2025] [proxy_fcgi:error] [pid 55343:tid 55417] [client 4.215.215.139:20311] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 15:17:04.280304 2025] [proxy_fcgi:error] [pid 55343:tid 55414] [client 4.215.215.139:20311] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 15:17:04.401661 2025] [proxy_fcgi:error] [pid 55343:tid 55409] [client 4.215.215.139:20311] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 15:17:04.646960 2025] [:error] [pid 55343:tid 55416] [client 4.215.215.139:20311] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file.php"] [unique_id "aR7AcFWlO3EnyVMV7w6QAAAAAJE"]
[Thu Nov 20 15:17:05.902962 2025] [:error] [pid 34405:tid 34422] [client 4.215.215.139:24491] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file.php"] [unique_id "aR7AcTFpvu8oRK7ATfvy1QAAAQ8"]
[Thu Nov 20 15:17:08.305626 2025] [:error] [pid 40445:tid 40478] [client 4.215.215.139:45364] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file.php"] [unique_id "aR7AdFH-MuFcoWRjXpYg0QAAAkM"]
[Thu Nov 20 15:17:09.554078 2025] [:error] [pid 40508:tid 40515] [client 4.215.215.139:19684] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file.php"] [unique_id "aR7AdaxXNVCMW_ksxPtgFgAAAoU"]
[Thu Nov 20 15:17:11.095979 2025] [:error] [pid 40508:tid 40522] [client 4.215.215.139:46123] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/test.php"] [unique_id "aR7Ad6xXNVCMW_ksxPtgGAAAAow"]
[Thu Nov 20 15:17:11.872084 2025] [:error] [pid 40508:tid 40532] [client 4.215.215.139:10327] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/test.php"] [unique_id "aR7Ad6xXNVCMW_ksxPtgGgAAApY"]
[Thu Nov 20 15:17:12.760877 2025] [:error] [pid 55343:tid 55411] [client 4.215.215.139:35414] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/test.php"] [unique_id "aR7AeFWlO3EnyVMV7w6QBQAAAIw"]
[Thu Nov 20 15:17:13.948850 2025] [:error] [pid 55342:tid 55385] [client 4.215.215.139:24564] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/test.php"] [unique_id "aR7Aebg6x32Tvk7fIG-0FAAAAE0"]
[Thu Nov 20 15:17:14.953671 2025] [:error] [pid 55343:tid 55423] [client 4.215.215.139:35401] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/chosen.php"] [unique_id "aR7AelWlO3EnyVMV7w6QCAAAAJg"]
[Thu Nov 20 15:17:15.619412 2025] [:error] [pid 55343:tid 55419] [client 4.215.215.139:22112] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/chosen.php"] [unique_id "aR7Ae1WlO3EnyVMV7w6QCQAAAJQ"]
[Thu Nov 20 15:17:16.955840 2025] [:error] [pid 40508:tid 40521] [client 4.215.215.139:35442] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/chosen.php"] [unique_id "aR7AfKxXNVCMW_ksxPtgHgAAAos"]
[Thu Nov 20 15:17:18.084770 2025] [:error] [pid 55430:tid 55450] [client 4.215.215.139:35373] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/chosen.php"] [unique_id "aR7AfvPZXaIMEU4pE7vccwAAANE"]
[Thu Nov 20 15:17:20.047249 2025] [:error] [pid 40508:tid 40522] [client 4.215.215.139:35385] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/files/css_compare.php"] [unique_id "aR7AgKxXNVCMW_ksxPtgIwAAAow"]
[Thu Nov 20 15:17:21.339956 2025] [:error] [pid 40636:tid 40650] [client 4.215.215.139:35394] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/files/css_compare.php"] [unique_id "aR7AgQK8BWUoW3xq0HDsOQAAA4o"]
[Thu Nov 20 15:17:23.110484 2025] [:error] [pid 40415:tid 40424] [client 4.215.215.139:35386] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/files/css_compare.php"] [unique_id "aR7Ag6hjIyLSv09svwN5sAAAAcY"]
[Thu Nov 20 15:17:23.713810 2025] [:error] [pid 55343:tid 55421] [client 4.215.215.139:35358] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/files/css_compare.php"] [unique_id "aR7Ag1WlO3EnyVMV7w6QDwAAAJY"]
[Thu Nov 20 15:17:25.404627 2025] [:error] [pid 40415:tid 40442] [client 4.215.215.139:24536] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp.php"] [unique_id "aR7AhahjIyLSv09svwN5uQAAAdg"]
[Thu Nov 20 15:17:27.225393 2025] [:error] [pid 55343:tid 55405] [client 4.215.215.139:24541] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp.php"] [unique_id "aR7Ah1WlO3EnyVMV7w6QFAAAAIY"]
[Thu Nov 20 15:17:28.995819 2025] [:error] [pid 40508:tid 40516] [client 4.215.215.139:25203] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp.php"] [unique_id "aR7AiKxXNVCMW_ksxPtgLgAAAoY"]
[Thu Nov 20 15:17:31.281741 2025] [:error] [pid 55430:tid 55450] [client 4.215.215.139:25132] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp.php"] [unique_id "aR7Ai_PZXaIMEU4pE7vcngAAANE"]
[Thu Nov 20 15:17:31.989306 2025] [:error] [pid 34405:tid 34413] [client 4.215.215.139:25124] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/uana.php"] [unique_id "aR7AizFpvu8oRK7ATfvy5gAAAQY"]
[Thu Nov 20 15:17:35.173157 2025] [:error] [pid 34405:tid 34421] [client 4.215.215.139:10448] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/uana.php"] [unique_id "aR7AjzFpvu8oRK7ATfvy6QAAAQ4"]
[Thu Nov 20 15:17:36.762432 2025] [:error] [pid 55342:tid 55389] [client 4.215.215.139:26564] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/uana.php"] [unique_id "aR7AkLg6x32Tvk7fIG-0IwAAAFE"]
[Thu Nov 20 15:17:38.265629 2025] [:error] [pid 40636:tid 40649] [client 4.215.215.139:28248] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/uana.php"] [unique_id "aR7AkgK8BWUoW3xq0HDsSQAAA4k"]
[Thu Nov 20 15:17:39.021616 2025] [:error] [pid 55343:tid 55405] [client 4.215.215.139:47236] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/duck.php"] [unique_id "aR7Ak1WlO3EnyVMV7w6QKQAAAIY"]
[Thu Nov 20 15:17:40.030255 2025] [:error] [pid 55430:tid 55442] [client 4.215.215.139:26574] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/duck.php"] [unique_id "aR7AlPPZXaIMEU4pE7vcogAAAMk"]
[Thu Nov 20 15:17:41.596976 2025] [:error] [pid 40537:tid 40549] [client 4.215.215.139:27228] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/duck.php"] [unique_id "aR7AlaKlsL5kxTa3c1zDRAAAAsg"]
[Thu Nov 20 15:17:42.381470 2025] [:error] [pid 40508:tid 40518] [client 4.215.215.139:10372] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/duck.php"] [unique_id "aR7AlqxXNVCMW_ksxPtgNgAAAog"]
[Thu Nov 20 15:17:44.182207 2025] [:error] [pid 55430:tid 55440] [client 4.215.215.139:30858] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lock360.php"] [unique_id "aR7AmPPZXaIMEU4pE7vcpQAAAMc"]
[Thu Nov 20 15:17:45.989771 2025] [:error] [pid 55340:tid 55350] [client 4.215.215.139:29105] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lock360.php"] [unique_id "aR7AmfOxD-NeMydTybB5xwAAAAU"]
[Thu Nov 20 15:17:46.765671 2025] [:error] [pid 40537:tid 40565] [client 4.215.215.139:20892] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lock360.php"] [unique_id "aR7AmqKlsL5kxTa3c1zDTwAAAtg"]
[Thu Nov 20 15:17:48.005699 2025] [:error] [pid 34405:tid 34430] [client 4.215.215.139:10384] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lock360.php"] [unique_id "aR7AnDFpvu8oRK7ATfvzEgAAARc"]
[Thu Nov 20 15:17:49.001449 2025] [:error] [pid 55342:tid 55382] [client 4.215.215.139:30941] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a.php"] [unique_id "aR7Anbg6x32Tvk7fIG-0QgAAAEo"]
[Thu Nov 20 15:17:49.930900 2025] [:error] [pid 40537:tid 40548] [client 4.215.215.139:30949] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a.php"] [unique_id "aR7AnaKlsL5kxTa3c1zDUQAAAsc"]
[Thu Nov 20 15:17:50.806468 2025] [:error] [pid 55430:tid 55451] [client 4.215.215.139:30882] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a.php"] [unique_id "aR7AnvPZXaIMEU4pE7vcqQAAANI"]
[Thu Nov 20 15:17:51.546283 2025] [:error] [pid 55430:tid 55434] [client 4.215.215.139:30904] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a.php"] [unique_id "aR7An_PZXaIMEU4pE7vcqgAAAME"]
[Thu Nov 20 15:17:52.388884 2025] [:error] [pid 40537:tid 40545] [client 4.215.215.139:30939] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/api.php"] [unique_id "aR7AoKKlsL5kxTa3c1zDUgAAAsQ"]
[Thu Nov 20 15:17:54.002833 2025] [:error] [pid 40508:tid 40522] [client 4.215.215.139:29635] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/api.php"] [unique_id "aR7AoqxXNVCMW_ksxPtgPQAAAow"]
[Thu Nov 20 15:17:55.300613 2025] [:error] [pid 40636:tid 40649] [client 4.215.215.139:30449] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/api.php"] [unique_id "aR7AowK8BWUoW3xq0HDsXAAAA4k"]
[Thu Nov 20 15:17:56.717441 2025] [:error] [pid 55343:tid 55410] [client 4.215.215.139:32781] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/api.php"] [unique_id "aR7ApFWlO3EnyVMV7w6QQQAAAIs"]
[Thu Nov 20 15:17:57.560118 2025] [:error] [pid 40636:tid 40657] [client 4.215.215.139:30462] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/inc.php"] [unique_id "aR7ApQK8BWUoW3xq0HDsYQAAA5E"]
[Thu Nov 20 15:17:58.270176 2025] [:error] [pid 40415:tid 40427] [client 4.215.215.139:23419] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/inc.php"] [unique_id "aR7ApqhjIyLSv09svwN5zgAAAck"]
[Thu Nov 20 15:17:58.569131 2025] [:error] [pid 55340:tid 55360] [client 4.215.215.139:11072] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/inc.php"] [unique_id "aR7ApvOxD-NeMydTybB51wAAAA8"]
[Thu Nov 20 15:17:59.360651 2025] [:error] [pid 40508:tid 40527] [client 4.215.215.139:23389] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/inc.php"] [unique_id "aR7Ap6xXNVCMW_ksxPtgSAAAApE"]
[Thu Nov 20 15:18:00.276729 2025] [:error] [pid 55340:tid 55349] [client 4.215.215.139:27670] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/siteheads.php"] [unique_id "aR7AqPOxD-NeMydTybB54QAAAAQ"]
[Thu Nov 20 15:18:02.855724 2025] [:error] [pid 55340:tid 55354] [client 4.215.215.139:33413] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/siteheads.php"] [unique_id "aR7AqvOxD-NeMydTybB54gAAAAk"]
[Thu Nov 20 15:18:04.097132 2025] [proxy_fcgi:error] [pid 55430:tid 55442] [client 4.215.215.139:29126] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 15:18:04.215745 2025] [proxy_fcgi:error] [pid 55430:tid 55436] [client 4.215.215.139:29126] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 15:18:04.333605 2025] [proxy_fcgi:error] [pid 55430:tid 55439] [client 4.215.215.139:29126] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 15:18:04.567298 2025] [proxy_fcgi:error] [pid 55430:tid 55440] [client 4.215.215.139:29126] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 15:18:04.686321 2025] [proxy_fcgi:error] [pid 55430:tid 55452] [client 4.215.215.139:29126] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 15:18:05.316858 2025] [proxy_fcgi:error] [pid 55430:tid 55454] [client 4.215.215.139:29126] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 15:18:05.434730 2025] [proxy_fcgi:error] [pid 55430:tid 55434] [client 4.215.215.139:29126] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 15:18:05.554083 2025] [proxy_fcgi:error] [pid 55430:tid 55445] [client 4.215.215.139:29126] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 15:18:05.684625 2025] [:error] [pid 55430:tid 55453] [client 4.215.215.139:29126] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-aa.php"] [unique_id "aR7ArfPZXaIMEU4pE7vcvgAAANQ"]
[Thu Nov 20 15:18:06.736290 2025] [:error] [pid 40415:tid 40439] [client 4.215.215.139:34735] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-aa.php"] [unique_id "aR7ArqhjIyLSv09svwN52QAAAdU"]
[Thu Nov 20 15:18:07.651322 2025] [:error] [pid 40508:tid 40524] [client 4.215.215.139:34796] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-aa.php"] [unique_id "aR7Ar6xXNVCMW_ksxPtgVwAAAo4"]
[Thu Nov 20 15:18:08.430466 2025] [:error] [pid 55430:tid 55455] [client 4.215.215.139:23822] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-aa.php"] [unique_id "aR7AsPPZXaIMEU4pE7vcvwAAANY"]
[Thu Nov 20 15:18:09.145176 2025] [:error] [pid 34405:tid 34422] [client 4.215.215.139:33422] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cart.php"] [unique_id "aR7AsTFpvu8oRK7ATfvzJQAAAQ8"]
[Thu Nov 20 15:18:10.057332 2025] [:error] [pid 55340:tid 55346] [client 4.215.215.139:23833] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cart.php"] [unique_id "aR7AsvOxD-NeMydTybB55AAAAAE"]
[Thu Nov 20 15:18:10.908956 2025] [:error] [pid 55342:tid 55374] [client 4.215.215.139:27714] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cart.php"] [unique_id "aR7Asrg6x32Tvk7fIG-0VAAAAEI"]
[Thu Nov 20 15:18:11.821253 2025] [:error] [pid 55343:tid 55423] [client 4.215.215.139:23853] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cart.php"] [unique_id "aR7As1WlO3EnyVMV7w6QSQAAAJg"]
[Thu Nov 20 15:18:13.335929 2025] [:error] [pid 40537:tid 40547] [client 4.215.215.139:44775] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/categories.php"] [unique_id "aR7AtaKlsL5kxTa3c1zDaQAAAsY"]
[Thu Nov 20 15:18:14.671611 2025] [:error] [pid 55343:tid 55414] [client 4.215.215.139:27670] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/categories.php"] [unique_id "aR7AtlWlO3EnyVMV7w6QTQAAAI8"]
[Thu Nov 20 15:18:16.047987 2025] [:error] [pid 40445:tid 40493] [client 4.215.215.139:11176] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/categories.php"] [unique_id "aR7AuFH-MuFcoWRjXpYhJgAAAlI"]
[Thu Nov 20 15:18:17.025907 2025] [:error] [pid 40415:tid 40432] [client 4.215.215.139:10970] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/categories.php"] [unique_id "aR7AuahjIyLSv09svwN53gAAAc4"]
[Thu Nov 20 15:18:18.326069 2025] [:error] [pid 40445:tid 40496] [client 4.215.215.139:44694] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/compare.php"] [unique_id "aR7AulH-MuFcoWRjXpYhKgAAAlU"]
[Thu Nov 20 15:18:19.889786 2025] [:error] [pid 40415:tid 40438] [client 4.215.215.139:34693] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/compare.php"] [unique_id "aR7Au6hjIyLSv09svwN54QAAAdQ"]
[Thu Nov 20 15:18:20.981759 2025] [:error] [pid 40415:tid 40426] [client 4.215.215.139:23850] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/compare.php"] [unique_id "aR7AvKhjIyLSv09svwN54wAAAcg"]
[Thu Nov 20 15:18:24.834672 2025] [:error] [pid 55342:tid 55382] [client 4.215.215.139:44723] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/compare.php"] [unique_id "aR7AwLg6x32Tvk7fIG-0WAAAAEo"]
[Thu Nov 20 15:18:25.275863 2025] [:error] [pid 55342:tid 55392] [client 4.215.215.139:11053] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/refund.php"] [unique_id "aR7Awbg6x32Tvk7fIG-0WwAAAFQ"]
[Thu Nov 20 15:18:26.084200 2025] [:error] [pid 40445:tid 40492] [client 4.215.215.139:11016] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/refund.php"] [unique_id "aR7AwlH-MuFcoWRjXpYhNAAAAlE"]
[Thu Nov 20 15:18:27.023490 2025] [:error] [pid 40636:tid 40641] [client 4.215.215.139:11039] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/refund.php"] [unique_id "aR7AwwK8BWUoW3xq0HDsgQAAA4E"]
[Thu Nov 20 15:18:28.734393 2025] [:error] [pid 40636:tid 40650] [client 4.215.215.139:23921] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/refund.php"] [unique_id "aR7AxAK8BWUoW3xq0HDshgAAA4o"]
[Thu Nov 20 15:18:30.043001 2025] [:error] [pid 40636:tid 40661] [client 4.215.215.139:34091] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/shop.php"] [unique_id "aR7AxgK8BWUoW3xq0HDsjAAAA5U"]
[Thu Nov 20 15:18:30.784985 2025] [:error] [pid 55340:tid 55368] [client 4.215.215.139:34136] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/shop.php"] [unique_id "aR7AxvOxD-NeMydTybB6CgAAABc"]
[Thu Nov 20 15:18:31.366391 2025] [:error] [pid 40508:tid 40530] [client 4.215.215.139:23370] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/shop.php"] [unique_id "aR7Ax6xXNVCMW_ksxPtgnAAAApQ"]
[Thu Nov 20 15:18:32.270902 2025] [:error] [pid 34405:tid 34425] [client 4.215.215.139:11175] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/shop.php"] [unique_id "aR7AyDFpvu8oRK7ATfvzOwAAARI"]
[Thu Nov 20 15:18:33.655703 2025] [:error] [pid 55340:tid 55345] [client 4.215.215.139:44718] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wishlist.php"] [unique_id "aR7AyfOxD-NeMydTybB6EQAAAAA"]
[Thu Nov 20 15:18:35.450392 2025] [:error] [pid 40508:tid 40512] [client 4.215.215.139:11167] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wishlist.php"] [unique_id "aR7Ay6xXNVCMW_ksxPtgpQAAAoI"]
[Thu Nov 20 15:18:37.315410 2025] [:error] [pid 40508:tid 40513] [client 4.215.215.139:23896] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wishlist.php"] [unique_id "aR7AzaxXNVCMW_ksxPtgqQAAAoM"]
[Thu Nov 20 15:18:38.360272 2025] [:error] [pid 55342:tid 55390] [client 4.215.215.139:10968] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wishlist.php"] [unique_id "aR7Azrg6x32Tvk7fIG-0cQAAAFI"]
[Thu Nov 20 15:18:39.194432 2025] [:error] [pid 40415:tid 40418] [client 4.215.215.139:11051] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/results.php"] [unique_id "aR7Az6hjIyLSv09svwN6BQAAAcA"]
[Thu Nov 20 15:18:41.304821 2025] [:error] [pid 40445:tid 40482] [client 4.215.215.139:23351] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/results.php"] [unique_id "aR7A0VH-MuFcoWRjXpYhSAAAAkc"]
[Thu Nov 20 15:18:42.396478 2025] [:error] [pid 40537:tid 40553] [client 4.215.215.139:34066] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/results.php"] [unique_id "aR7A0qKlsL5kxTa3c1zDdAAAAsw"]
[Thu Nov 20 15:18:42.940808 2025] [:error] [pid 40415:tid 40425] [client 4.215.215.139:21331] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/results.php"] [unique_id "aR7A0qhjIyLSv09svwN6BwAAAcc"]
[Thu Nov 20 15:18:43.500266 2025] [:error] [pid 40508:tid 40530] [client 4.215.215.139:34100] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/api.php"] [unique_id "aR7A06xXNVCMW_ksxPtgrAAAApQ"]
[Thu Nov 20 15:18:44.994795 2025] [:error] [pid 40508:tid 40534] [client 4.215.215.139:34118] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/api.php"] [unique_id "aR7A1KxXNVCMW_ksxPtgsAAAApg"]
[Thu Nov 20 15:18:47.213147 2025] [:error] [pid 40537:tid 40555] [client 4.215.215.139:11040] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/api.php"] [unique_id "aR7A16KlsL5kxTa3c1zDeQAAAs4"]
[Thu Nov 20 15:18:48.068936 2025] [:error] [pid 40445:tid 40492] [client 4.215.215.139:23349] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/api.php"] [unique_id "aR7A2FH-MuFcoWRjXpYhUAAAAlE"]
[Thu Nov 20 15:18:49.254425 2025] [:error] [pid 34405:tid 34412] [client 4.215.215.139:10597] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/222.php"] [unique_id "aR7A2TFpvu8oRK7ATfvzQwAAAQU"]
[Thu Nov 20 15:18:49.921991 2025] [:error] [pid 55342:tid 55376] [client 4.215.215.139:43958] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/222.php"] [unique_id "aR7A2bg6x32Tvk7fIG-0dgAAAEQ"]
[Thu Nov 20 15:18:50.908979 2025] [:error] [pid 40508:tid 40531] [client 4.215.215.139:44026] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/222.php"] [unique_id "aR7A2qxXNVCMW_ksxPtgtwAAApU"]
[Thu Nov 20 15:18:51.833376 2025] [:error] [pid 55340:tid 55367] [client 4.215.215.139:34092] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/222.php"] [unique_id "aR7A2_OxD-NeMydTybB6GgAAABY"]
[Thu Nov 20 15:18:52.615405 2025] [:error] [pid 40445:tid 40483] [client 4.215.215.139:34173] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/atom.php"] [unique_id "aR7A3FH-MuFcoWRjXpYhWQAAAkg"]
[Thu Nov 20 15:18:53.267149 2025] [:error] [pid 40508:tid 40533] [client 4.215.215.139:43977] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/atom.php"] [unique_id "aR7A3axXNVCMW_ksxPtgwwAAApc"]
[Thu Nov 20 15:18:54.042473 2025] [:error] [pid 40415:tid 40421] [client 4.215.215.139:34159] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/atom.php"] [unique_id "aR7A3qhjIyLSv09svwN6DwAAAcM"]
[Thu Nov 20 15:18:55.352629 2025] [:error] [pid 40415:tid 40438] [client 4.215.215.139:21318] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/atom.php"] [unique_id "aR7A36hjIyLSv09svwN6EQAAAdQ"]
[Thu Nov 20 15:18:55.927372 2025] [:error] [pid 34405:tid 34409] [client 4.215.215.139:31638] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/case.php"] [unique_id "aR7A3zFpvu8oRK7ATfvzUwAAAQI"]
[Thu Nov 20 15:18:56.419035 2025] [:error] [pid 40636:tid 40658] [client 4.215.215.139:10576] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/case.php"] [unique_id "aR7A4AK8BWUoW3xq0HDsmAAAA5I"]
[Thu Nov 20 15:18:58.198421 2025] [:error] [pid 40445:tid 40478] [client 4.215.215.139:10587] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/case.php"] [unique_id "aR7A4lH-MuFcoWRjXpYhZwAAAkM"]
[Thu Nov 20 15:18:58.862227 2025] [:error] [pid 40508:tid 40517] [client 4.215.215.139:43961] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/case.php"] [unique_id "aR7A4qxXNVCMW_ksxPtgzAAAAoc"]
[Thu Nov 20 15:18:59.712294 2025] [:error] [pid 40445:tid 40498] [client 4.215.215.139:23298] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/docs.php"] [unique_id "aR7A41H-MuFcoWRjXpYhbwAAAlc"]
[Thu Nov 20 15:19:00.893730 2025] [:error] [pid 40537:tid 40546] [client 4.215.215.139:23388] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/docs.php"] [unique_id "aR7A5KKlsL5kxTa3c1zDkAAAAsU"]
[Thu Nov 20 15:19:02.730219 2025] [:error] [pid 55342:tid 55390] [client 4.215.215.139:32891] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/docs.php"] [unique_id "aR7A5rg6x32Tvk7fIG-0fwAAAFI"]
[Thu Nov 20 15:19:03.547745 2025] [:error] [pid 55342:tid 55394] [client 4.215.215.139:34079] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/docs.php"] [unique_id "aR7A57g6x32Tvk7fIG-0gAAAAFY"]
[Thu Nov 20 15:19:04.732487 2025] [:error] [pid 40508:tid 40517] [client 4.215.215.139:23909] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ios.php"] [unique_id "aR7A6KxXNVCMW_ksxPtg3wAAAoc"]
[Thu Nov 20 15:19:05.901841 2025] [proxy_fcgi:error] [pid 55343:tid 55399] [client 4.215.215.139:23890] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 15:19:06.034492 2025] [proxy_fcgi:error] [pid 55343:tid 55403] [client 4.215.215.139:23890] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 15:19:06.185009 2025] [proxy_fcgi:error] [pid 55343:tid 55422] [client 4.215.215.139:23890] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 15:19:06.329452 2025] [proxy_fcgi:error] [pid 55343:tid 55420] [client 4.215.215.139:23890] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 15:19:06.455705 2025] [proxy_fcgi:error] [pid 55343:tid 55400] [client 4.215.215.139:23890] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 15:19:06.847810 2025] [proxy_fcgi:error] [pid 55343:tid 55415] [client 4.215.215.139:23890] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 15:19:07.237128 2025] [proxy_fcgi:error] [pid 55343:tid 55407] [client 4.215.215.139:23890] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 15:19:07.788768 2025] [proxy_fcgi:error] [pid 55343:tid 55408] [client 4.215.215.139:23890] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 15:19:07.905480 2025] [proxy_fcgi:error] [pid 55343:tid 55411] [client 4.215.215.139:23890] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 15:19:08.025061 2025] [proxy_fcgi:error] [pid 55343:tid 55406] [client 4.215.215.139:23890] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 15:19:08.141674 2025] [proxy_fcgi:error] [pid 55343:tid 55412] [client 4.215.215.139:23890] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 15:19:08.264447 2025] [:error] [pid 55343:tid 55413] [client 4.215.215.139:23890] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/v.php"] [unique_id "aR7A7FWlO3EnyVMV7w6QfAAAAI4"]
[Thu Nov 20 15:19:08.580449 2025] [:error] [pid 55342:tid 55378] [client 4.215.215.139:22540] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/v.php"] [unique_id "aR7A7Lg6x32Tvk7fIG-0iAAAAEY"]
[Thu Nov 20 15:19:09.709401 2025] [:error] [pid 40445:tid 40490] [client 4.215.215.139:34078] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/v.php"] [unique_id "aR7A7VH-MuFcoWRjXpYhgwAAAk8"]
[Thu Nov 20 15:19:11.724809 2025] [:error] [pid 40445:tid 40489] [client 4.215.215.139:34121] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/v.php"] [unique_id "aR7A71H-MuFcoWRjXpYhiAAAAk4"]
[Thu Nov 20 15:19:12.834157 2025] [:error] [pid 40508:tid 40513] [client 4.215.215.139:43997] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bless.php"] [unique_id "aR7A8KxXNVCMW_ksxPtg6QAAAoM"]
[Thu Nov 20 15:19:13.213371 2025] [:error] [pid 55430:tid 55434] [client 4.215.215.139:23876] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bless.php"] [unique_id "aR7A8fPZXaIMEU4pE7vc7AAAAME"]
[Thu Nov 20 15:19:13.706109 2025] [:error] [pid 55342:tid 55395] [client 4.215.215.139:11029] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bless.php"] [unique_id "aR7A8bg6x32Tvk7fIG-0jwAAAFc"]
[Thu Nov 20 15:19:14.504399 2025] [:error] [pid 40636:tid 40655] [client 4.215.215.139:44688] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bless.php"] [unique_id "aR7A8gK8BWUoW3xq0HDsqQAAA48"]
[Thu Nov 20 15:19:16.256545 2025] [:error] [pid 40445:tid 40484] [client 4.215.215.139:43981] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vv.php"] [unique_id "aR7A9FH-MuFcoWRjXpYhjQAAAkk"]
[Thu Nov 20 15:19:17.200222 2025] [:error] [pid 55342:tid 55386] [client 4.215.215.139:43904] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vv.php"] [unique_id "aR7A9bg6x32Tvk7fIG-0kgAAAE4"]
[Thu Nov 20 15:19:17.686932 2025] [:error] [pid 34405:tid 34426] [client 4.215.215.139:23873] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vv.php"] [unique_id "aR7A9TFpvu8oRK7ATfvzbQAAARM"]
[Thu Nov 20 15:19:18.428581 2025] [:error] [pid 34405:tid 34428] [client 4.215.215.139:31666] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vv.php"] [unique_id "aR7A9jFpvu8oRK7ATfvzcAAAARU"]
[Thu Nov 20 15:19:19.289898 2025] [:error] [pid 40415:tid 40435] [client 4.215.215.139:11052] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/0.php"] [unique_id "aR7A96hjIyLSv09svwN6IgAAAdE"]
[Thu Nov 20 15:19:20.447198 2025] [:error] [pid 40636:tid 40640] [client 4.215.215.139:31692] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/0.php"] [unique_id "aR7A-AK8BWUoW3xq0HDsrAAAA4A"]
[Thu Nov 20 15:19:21.588761 2025] [:error] [pid 40537:tid 40546] [client 4.215.215.139:31668] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/0.php"] [unique_id "aR7A-aKlsL5kxTa3c1zDoQAAAsU"]
[Thu Nov 20 15:19:22.225621 2025] [:error] [pid 40537:tid 40552] [client 4.215.215.139:11063] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/0.php"] [unique_id "aR7A-qKlsL5kxTa3c1zDogAAAss"]
[Thu Nov 20 15:19:23.108450 2025] [:error] [pid 55342:tid 55392] [client 4.215.215.139:21339] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jp.php"] [unique_id "aR7A-7g6x32Tvk7fIG-0mQAAAFQ"]
[Thu Nov 20 15:19:24.419213 2025] [:error] [pid 55340:tid 55362] [client 4.215.215.139:11065] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jp.php"] [unique_id "aR7A_POxD-NeMydTybB6KwAAABE"]
[Thu Nov 20 15:19:25.316247 2025] [:error] [pid 40508:tid 40533] [client 4.215.215.139:34145] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jp.php"] [unique_id "aR7A_axXNVCMW_ksxPtg_AAAApc"]
[Thu Nov 20 15:19:26.210119 2025] [:error] [pid 40415:tid 40434] [client 4.215.215.139:34116] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jp.php"] [unique_id "aR7A_qhjIyLSv09svwN6KQAAAdA"]
[Thu Nov 20 15:19:26.729963 2025] [:error] [pid 40508:tid 40525] [client 4.215.215.139:34174] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2.php"] [unique_id "aR7A_qxXNVCMW_ksxPtg_gAAAo8"]
[Thu Nov 20 15:19:27.010874 2025] [:error] [pid 40508:tid 40520] [client 4.215.215.139:43992] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2.php"] [unique_id "aR7A_6xXNVCMW_ksxPtg_wAAAoo"]
[Thu Nov 20 15:19:27.856764 2025] [:error] [pid 55340:tid 55368] [client 4.215.215.139:34152] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2.php"] [unique_id "aR7A__OxD-NeMydTybB6LwAAABc"]
[Thu Nov 20 15:19:28.290771 2025] [:error] [pid 40508:tid 40529] [client 4.215.215.139:31653] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2.php"] [unique_id "aR7BAKxXNVCMW_ksxPthAAAAApM"]
[Thu Nov 20 15:19:29.328508 2025] [:error] [pid 40508:tid 40521] [client 4.215.215.139:34167] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/goods.php"] [unique_id "aR7BAaxXNVCMW_ksxPthAwAAAos"]
[Thu Nov 20 15:19:30.813235 2025] [:error] [pid 40445:tid 40492] [client 4.215.215.139:31736] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/goods.php"] [unique_id "aR7BAlH-MuFcoWRjXpYhnQAAAlE"]
[Thu Nov 20 15:19:33.318485 2025] [:error] [pid 40415:tid 40436] [client 4.215.215.139:34059] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/goods.php"] [unique_id "aR7BBahjIyLSv09svwN6LwAAAdI"]
[Thu Nov 20 15:19:35.504626 2025] [:error] [pid 40508:tid 40520] [client 4.215.215.139:32886] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/goods.php"] [unique_id "aR7BB6xXNVCMW_ksxPthDQAAAoo"]
[Thu Nov 20 15:19:37.254430 2025] [:error] [pid 55340:tid 55352] [client 4.215.215.139:31636] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/manager.php"] [unique_id "aR7BCfOxD-NeMydTybB6MwAAAAc"]
[Thu Nov 20 15:19:38.835279 2025] [:error] [pid 40508:tid 40531] [client 4.215.215.139:21294] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/manager.php"] [unique_id "aR7BCqxXNVCMW_ksxPthEgAAApU"]
[Thu Nov 20 15:19:40.065763 2025] [:error] [pid 40445:tid 40497] [client 4.215.215.139:11060] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/manager.php"] [unique_id "aR7BDFH-MuFcoWRjXpYhogAAAlY"]
[Thu Nov 20 15:19:42.029201 2025] [:error] [pid 40508:tid 40511] [client 4.215.215.139:23931] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/manager.php"] [unique_id "aR7BDqxXNVCMW_ksxPthGAAAAoE"]
[Thu Nov 20 15:19:43.404202 2025] [:error] [pid 40636:tid 40644] [client 4.215.215.139:21297] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/new.php"] [unique_id "aR7BDwK8BWUoW3xq0HDstQAAA4Q"]
[Thu Nov 20 15:19:44.062846 2025] [:error] [pid 40537:tid 40558] [client 4.215.215.139:34130] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/new.php"] [unique_id "aR7BEKKlsL5kxTa3c1zDqAAAAtE"]
[Thu Nov 20 15:19:45.153429 2025] [:error] [pid 55343:tid 55413] [client 4.215.215.139:23321] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/new.php"] [unique_id "aR7BEVWlO3EnyVMV7w6QigAAAI4"]
[Thu Nov 20 15:19:46.822460 2025] [:error] [pid 40537:tid 40541] [client 4.215.215.139:31674] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/new.php"] [unique_id "aR7BEqKlsL5kxTa3c1zDqgAAAsA"]
[Thu Nov 20 15:19:48.780392 2025] [:error] [pid 55340:tid 55369] [client 4.215.215.139:11023] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/info.php"] [unique_id "aR7BFPOxD-NeMydTybB6NwAAABg"]
[Thu Nov 20 15:19:49.673529 2025] [:error] [pid 55340:tid 55363] [client 4.215.215.139:10499] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/info.php"] [unique_id "aR7BFfOxD-NeMydTybB6OQAAABI"]
[Thu Nov 20 15:19:50.741901 2025] [:error] [pid 40636:tid 40656] [client 4.215.215.139:45365] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/info.php"] [unique_id "aR7BFgK8BWUoW3xq0HDstwAAA5A"]
[Thu Nov 20 15:19:51.444130 2025] [:error] [pid 55430:tid 55455] [client 4.215.215.139:43990] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/info.php"] [unique_id "aR7BF_PZXaIMEU4pE7vc8QAAANY"]
[Thu Nov 20 15:19:52.499844 2025] [:error] [pid 55430:tid 55435] [client 4.215.215.139:10558] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/doc.php"] [unique_id "aR7BGPPZXaIMEU4pE7vc8gAAAMI"]
[Thu Nov 20 15:19:53.143716 2025] [:error] [pid 40508:tid 40517] [client 4.215.215.139:32858] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/doc.php"] [unique_id "aR7BGaxXNVCMW_ksxPthJAAAAoc"]
[Thu Nov 20 15:19:53.887140 2025] [:error] [pid 55343:tid 55399] [client 4.215.215.139:10533] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/doc.php"] [unique_id "aR7BGVWlO3EnyVMV7w6QkQAAAIA"]
[Thu Nov 20 15:19:54.565062 2025] [:error] [pid 55343:tid 55415] [client 4.215.215.139:10497] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/doc.php"] [unique_id "aR7BGlWlO3EnyVMV7w6QlAAAAJA"]
[Thu Nov 20 15:19:55.339426 2025] [:error] [pid 40415:tid 40439] [client 4.215.215.139:10974] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/go.php"] [unique_id "aR7BG6hjIyLSv09svwN6aAAAAdU"]
[Thu Nov 20 15:19:55.917251 2025] [:error] [pid 40636:tid 40659] [client 4.215.215.139:11030] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/go.php"] [unique_id "aR7BGwK8BWUoW3xq0HDsuAAAA5M"]
[Thu Nov 20 15:19:57.100173 2025] [:error] [pid 40445:tid 40488] [client 4.215.215.139:34102] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/go.php"] [unique_id "aR7BHVH-MuFcoWRjXpYhqQAAAk0"]
[Thu Nov 20 15:19:57.770589 2025] [:error] [pid 55340:tid 55352] [client 4.215.215.139:44019] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/go.php"] [unique_id "aR7BHfOxD-NeMydTybB6QAAAAAc"]
[Thu Nov 20 15:19:58.998492 2025] [:error] [pid 40537:tid 40545] [client 4.215.215.139:34068] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/el.php"] [unique_id "aR7BHqKlsL5kxTa3c1zDrwAAAsQ"]
[Thu Nov 20 15:20:00.030499 2025] [:error] [pid 34405:tid 34408] [client 4.215.215.139:32880] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/el.php"] [unique_id "aR7BIDFpvu8oRK7ATfvzgAAAAQE"]
[Thu Nov 20 15:20:00.714298 2025] [:error] [pid 40636:tid 40650] [client 4.215.215.139:32846] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/el.php"] [unique_id "aR7BIAK8BWUoW3xq0HDswQAAA4o"]
[Thu Nov 20 15:20:01.326144 2025] [:error] [pid 40445:tid 40490] [client 4.215.215.139:34088] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/el.php"] [unique_id "aR7BIVH-MuFcoWRjXpYhrAAAAk8"]
[Thu Nov 20 15:20:02.729244 2025] [:error] [pid 40636:tid 40661] [client 4.215.215.139:34128] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mail.php"] [unique_id "aR7BIgK8BWUoW3xq0HDswwAAA5U"]
[Thu Nov 20 15:20:03.562645 2025] [:error] [pid 55342:tid 55382] [client 4.215.215.139:43996] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mail.php"] [unique_id "aR7BI7g6x32Tvk7fIG-0ogAAAEo"]
[Thu Nov 20 15:20:04.272461 2025] [:error] [pid 55340:tid 55345] [client 4.215.215.139:34093] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mail.php"] [unique_id "aR7BJPOxD-NeMydTybB6RQAAAAA"]
[Thu Nov 20 15:20:06.554181 2025] [:error] [pid 40508:tid 40528] [client 4.215.215.139:34168] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mail.php"] [unique_id "aR7BJqxXNVCMW_ksxPthKwAAApI"]
[Thu Nov 20 15:20:07.240719 2025] [:error] [pid 34405:tid 34412] [client 4.215.215.139:43993] [client 4.215.215.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/11.php"] [unique_id "aR7BJzFpvu8oRK7ATfvzhQAAAQU"]
[Thu Nov 20 15:20:08.678790 2025] [proxy_fcgi:error] [pid 55430:tid 55434] [client 4.215.215.139:34107] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 15:20:08.799244 2025] [proxy_fcgi:error] [pid 55430:tid 55436] [client 4.215.215.139:34107] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 15:20:08.916981 2025] [proxy_fcgi:error] [pid 55430:tid 55441] [client 4.215.215.139:34107] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 19:41:23.208516 2025] [:error] [pid 55342:tid 55395] [client 48.218.7.25:5096] [client 48.218.7.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aR7-Y7g6x32Tvk7fIG_owgAAAFc"]
[Thu Nov 20 19:41:24.332869 2025] [:error] [pid 55340:tid 55361] [client 48.218.7.25:5109] [client 48.218.7.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aR7-ZPOxD-NeMydTybCoIwAAABA"]
[Thu Nov 20 19:41:27.145522 2025] [:error] [pid 40508:tid 40532] [client 48.218.7.25:5071] [client 48.218.7.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aR7-Z6xXNVCMW_ksxPu9AQAAApY"]
[Thu Nov 20 19:41:28.015247 2025] [:error] [pid 55342:tid 55389] [client 48.218.7.25:5083] [client 48.218.7.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aR7-aLg6x32Tvk7fIG_oyAAAAFE"]
[Thu Nov 20 20:56:57.423885 2025] [proxy_fcgi:error] [pid 40445:tid 40479] [client 20.243.53.228:32655] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 20:56:57.540721 2025] [proxy_fcgi:error] [pid 40445:tid 40477] [client 20.243.53.228:32655] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 20:56:57.675366 2025] [proxy_fcgi:error] [pid 40445:tid 40490] [client 20.243.53.228:32655] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 20:56:57.793508 2025] [proxy_fcgi:error] [pid 40445:tid 40488] [client 20.243.53.228:32655] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 20:56:57.920739 2025] [proxy_fcgi:error] [pid 40445:tid 40481] [client 20.243.53.228:32655] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 20:56:58.171309 2025] [proxy_fcgi:error] [pid 40445:tid 40475] [client 20.243.53.228:32655] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 20:56:58.305739 2025] [proxy_fcgi:error] [pid 40445:tid 40496] [client 20.243.53.228:32655] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 20:56:58.426456 2025] [proxy_fcgi:error] [pid 40445:tid 40478] [client 20.243.53.228:32655] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 20:56:58.566121 2025] [proxy_fcgi:error] [pid 40445:tid 40498] [client 20.243.53.228:32655] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 20:56:58.685699 2025] [proxy_fcgi:error] [pid 40445:tid 40495] [client 20.243.53.228:32655] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 20:56:58.825772 2025] [:error] [pid 40445:tid 40492] [client 20.243.53.228:32655] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kki.php"] [unique_id "aR8QGlH-MuFcoWRjXpaGjAAAAlE"]
[Thu Nov 20 20:57:02.132467 2025] [:error] [pid 55342:tid 55374] [client 20.243.53.228:32725] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kki.php"] [unique_id "aR8QHrg6x32Tvk7fIG_6IwAAAEI"]
[Thu Nov 20 20:57:03.592377 2025] [:error] [pid 55342:tid 55390] [client 20.243.53.228:32649] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kki.php"] [unique_id "aR8QH7g6x32Tvk7fIG_6JgAAAFI"]
[Thu Nov 20 20:57:05.021160 2025] [:error] [pid 40445:tid 40476] [client 20.243.53.228:32754] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kki.php"] [unique_id "aR8QIVH-MuFcoWRjXpaGmwAAAkE"]
[Thu Nov 20 20:57:06.637353 2025] [:error] [pid 55342:tid 55387] [client 20.243.53.228:32717] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/js.php"] [unique_id "aR8QIrg6x32Tvk7fIG_6KgAAAE8"]
[Thu Nov 20 20:57:07.457832 2025] [:error] [pid 55430:tid 55434] [client 20.243.53.228:32713] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/js.php"] [unique_id "aR8QI_PZXaIMEU4pE7sY8QAAAME"]
[Thu Nov 20 20:57:08.934028 2025] [:error] [pid 40508:tid 40516] [client 20.243.53.228:32645] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/js.php"] [unique_id "aR8QJKxXNVCMW_ksxPvTPgAAAoY"]
[Thu Nov 20 20:57:13.868504 2025] [:error] [pid 55340:tid 55350] [client 20.243.53.228:32735] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/js.php"] [unique_id "aR8QKfOxD-NeMydTybC2zwAAAAU"]
[Thu Nov 20 20:57:16.013519 2025] [:error] [pid 40508:tid 40521] [client 20.243.53.228:32718] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/view.php"] [unique_id "aR8QLKxXNVCMW_ksxPvTSwAAAos"]
[Thu Nov 20 20:57:18.407160 2025] [:error] [pid 40445:tid 40483] [client 20.243.53.228:32747] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/view.php"] [unique_id "aR8QLlH-MuFcoWRjXpaGpAAAAkg"]
[Thu Nov 20 20:57:19.687931 2025] [:error] [pid 55342:tid 55377] [client 20.243.53.228:32741] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/view.php"] [unique_id "aR8QL7g6x32Tvk7fIG_6NgAAAEU"]
[Thu Nov 20 20:57:20.561699 2025] [:error] [pid 55342:tid 55392] [client 20.243.53.228:32757] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/view.php"] [unique_id "aR8QMLg6x32Tvk7fIG_6OgAAAFQ"]
[Thu Nov 20 20:57:25.761740 2025] [:error] [pid 34405:tid 34422] [client 20.243.53.228:32646] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wso.php"] [unique_id "aR8QNTFpvu8oRK7ATfs1egAAAQ8"]
[Thu Nov 20 20:57:27.540299 2025] [:error] [pid 55343:tid 55423] [client 20.243.53.228:32744] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wso.php"] [unique_id "aR8QN1WlO3EnyVMV7w7JJAAAAJg"]
[Thu Nov 20 20:57:29.135679 2025] [:error] [pid 55430:tid 55453] [client 20.243.53.228:32750] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wso.php"] [unique_id "aR8QOfPZXaIMEU4pE7sZCgAAANQ"]
[Thu Nov 20 20:57:31.008789 2025] [:error] [pid 55340:tid 55362] [client 20.243.53.228:32659] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wso.php"] [unique_id "aR8QO_OxD-NeMydTybC22AAAABE"]
[Thu Nov 20 20:57:33.128056 2025] [:error] [pid 40537:tid 40553] [client 20.243.53.228:32656] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sid3.php"] [unique_id "aR8QPaKlsL5kxTa3c1z5sQAAAsw"]
[Thu Nov 20 20:57:34.172721 2025] [:error] [pid 40537:tid 40544] [client 20.243.53.228:32732] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sid3.php"] [unique_id "aR8QPqKlsL5kxTa3c1z5sgAAAsM"]
[Thu Nov 20 20:57:34.903900 2025] [:error] [pid 40445:tid 40488] [client 20.243.53.228:32728] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sid3.php"] [unique_id "aR8QPlH-MuFcoWRjXpaGxwAAAk0"]
[Thu Nov 20 20:57:36.444607 2025] [:error] [pid 55342:tid 55383] [client 20.243.53.228:32730] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sid3.php"] [unique_id "aR8QQLg6x32Tvk7fIG_6TwAAAEs"]
[Thu Nov 20 20:57:38.047440 2025] [:error] [pid 40445:tid 40483] [client 20.243.53.228:32709] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mans.php"] [unique_id "aR8QQlH-MuFcoWRjXpaG0QAAAkg"]
[Thu Nov 20 20:57:39.100318 2025] [:error] [pid 34405:tid 34412] [client 20.243.53.228:32711] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mans.php"] [unique_id "aR8QQzFpvu8oRK7ATfs1iQAAAQU"]
[Thu Nov 20 20:57:41.456614 2025] [:error] [pid 40445:tid 40483] [client 20.243.53.228:32662] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mans.php"] [unique_id "aR8QRVH-MuFcoWRjXpaG3gAAAkg"]
[Thu Nov 20 20:57:44.116643 2025] [:error] [pid 34405:tid 34428] [client 20.243.53.228:32755] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mans.php"] [unique_id "aR8QSDFpvu8oRK7ATfs1jgAAARU"]
[Thu Nov 20 20:57:45.404647 2025] [:error] [pid 40508:tid 40532] [client 20.243.53.228:32739] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/111.php"] [unique_id "aR8QSaxXNVCMW_ksxPvTewAAApY"]
[Thu Nov 20 20:57:48.542707 2025] [:error] [pid 40508:tid 40533] [client 20.243.53.228:32715] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/111.php"] [unique_id "aR8QTKxXNVCMW_ksxPvTgAAAApc"]
[Thu Nov 20 20:57:58.198385 2025] [proxy_fcgi:error] [pid 40445:tid 40484] [client 20.243.53.228:32756] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 20:57:58.350394 2025] [proxy_fcgi:error] [pid 40445:tid 40497] [client 20.243.53.228:32756] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 20:57:59.794142 2025] [proxy_fcgi:error] [pid 40445:tid 40481] [client 20.243.53.228:32756] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 20:58:00.079404 2025] [proxy_fcgi:error] [pid 40445:tid 40485] [client 20.243.53.228:32756] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 20:58:00.490338 2025] [proxy_fcgi:error] [pid 40445:tid 40483] [client 20.243.53.228:32756] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 20:58:00.659275 2025] [proxy_fcgi:error] [pid 40445:tid 40492] [client 20.243.53.228:32756] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 20:58:00.810137 2025] [proxy_fcgi:error] [pid 40445:tid 40480] [client 20.243.53.228:32756] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 20:58:00.975275 2025] [proxy_fcgi:error] [pid 40445:tid 40478] [client 20.243.53.228:32756] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 20:58:01.143948 2025] [proxy_fcgi:error] [pid 40445:tid 40493] [client 20.243.53.228:32756] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 20:58:01.295236 2025] [proxy_fcgi:error] [pid 40445:tid 40499] [client 20.243.53.228:32756] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 20:58:01.682547 2025] [proxy_fcgi:error] [pid 40445:tid 40479] [client 20.243.53.228:32756] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 20:58:01.849462 2025] [:error] [pid 40445:tid 40482] [client 20.243.53.228:32756] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/404.php"] [unique_id "aR8QWVH-MuFcoWRjXpaHPAAAAkc"]
[Thu Nov 20 20:58:05.375192 2025] [:error] [pid 55343:tid 55417] [client 20.243.53.228:32720] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/404.php"] [unique_id "aR8QXVWlO3EnyVMV7w7JSAAAAJI"]
[Thu Nov 20 20:58:06.045168 2025] [:error] [pid 34405:tid 34417] [client 20.243.53.228:32597] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/404.php"] [unique_id "aR8QXjFpvu8oRK7ATfs1ogAAAQo"]
[Thu Nov 20 20:58:07.205838 2025] [:error] [pid 40415:tid 40420] [client 20.243.53.228:32606] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/404.php"] [unique_id "aR8QX6hjIyLSv09svwPHgQAAAcI"]
[Thu Nov 20 20:58:08.115140 2025] [:error] [pid 34405:tid 34416] [client 20.243.53.228:32710] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/an7.php"] [unique_id "aR8QYDFpvu8oRK7ATfs1pQAAAQk"]
[Thu Nov 20 20:58:09.156043 2025] [:error] [pid 40537:tid 40554] [client 20.243.53.228:32664] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/an7.php"] [unique_id "aR8QYaKlsL5kxTa3c1z5yAAAAs0"]
[Thu Nov 20 20:58:10.502415 2025] [:error] [pid 55342:tid 55392] [client 20.243.53.228:32733] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/an7.php"] [unique_id "aR8QYrg6x32Tvk7fIG_6WgAAAFQ"]
[Thu Nov 20 20:58:11.534703 2025] [:error] [pid 55342:tid 55388] [client 20.243.53.228:32672] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/an7.php"] [unique_id "aR8QY7g6x32Tvk7fIG_6WwAAAFA"]
[Thu Nov 20 20:58:13.752264 2025] [:error] [pid 40508:tid 40516] [client 20.243.53.228:32648] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fs7.php"] [unique_id "aR8QZaxXNVCMW_ksxPvTsgAAAoY"]
[Thu Nov 20 20:58:15.313724 2025] [:error] [pid 55430:tid 55448] [client 20.243.53.228:32763] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fs7.php"] [unique_id "aR8QZ_PZXaIMEU4pE7sZIgAAAM8"]
[Thu Nov 20 20:58:16.904750 2025] [:error] [pid 40508:tid 40525] [client 20.243.53.228:32651] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fs7.php"] [unique_id "aR8QaKxXNVCMW_ksxPvTwgAAAo8"]
[Thu Nov 20 20:58:18.940844 2025] [:error] [pid 55342:tid 55377] [client 20.243.53.228:32654] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fs7.php"] [unique_id "aR8Qarg6x32Tvk7fIG_6ZgAAAEU"]
[Thu Nov 20 20:58:20.111025 2025] [:error] [pid 55430:tid 55446] [client 20.243.53.228:32706] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/new4.php"] [unique_id "aR8QbPPZXaIMEU4pE7sZJAAAAM0"]
[Thu Nov 20 20:58:20.763575 2025] [:error] [pid 40445:tid 40480] [client 20.243.53.228:32734] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/new4.php"] [unique_id "aR8QbFH-MuFcoWRjXpaHXgAAAkU"]
[Thu Nov 20 20:58:23.160801 2025] [:error] [pid 40508:tid 40514] [client 20.243.53.228:32689] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/new4.php"] [unique_id "aR8Qb6xXNVCMW_ksxPvT3wAAAoQ"]
[Thu Nov 20 20:58:24.921412 2025] [:error] [pid 40636:tid 40658] [client 20.243.53.228:32643] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/new4.php"] [unique_id "aR8QcAK8BWUoW3xq0HAlIAAAA5I"]
[Thu Nov 20 20:58:28.111431 2025] [:error] [pid 40636:tid 40651] [client 20.243.53.228:32745] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/icon.php"] [unique_id "aR8QdAK8BWUoW3xq0HAlJQAAA4s"]
[Thu Nov 20 20:58:28.656800 2025] [:error] [pid 40415:tid 40424] [client 20.243.53.228:32577] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/icon.php"] [unique_id "aR8QdKhjIyLSv09svwPHkQAAAcY"]
[Thu Nov 20 20:58:31.348069 2025] [:error] [pid 55343:tid 55416] [client 20.243.53.228:32759] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/icon.php"] [unique_id "aR8Qd1WlO3EnyVMV7w7JVQAAAJE"]
[Thu Nov 20 20:58:34.121307 2025] [:error] [pid 40445:tid 40490] [client 20.243.53.228:32647] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/icon.php"] [unique_id "aR8QelH-MuFcoWRjXpaHbQAAAk8"]
[Thu Nov 20 20:58:36.034388 2025] [:error] [pid 40415:tid 40438] [client 20.243.53.228:32712] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/blox.php"] [unique_id "aR8QfKhjIyLSv09svwPHngAAAdQ"]
[Thu Nov 20 20:58:37.496223 2025] [:error] [pid 55430:tid 55441] [client 20.243.53.228:32687] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/blox.php"] [unique_id "aR8QffPZXaIMEU4pE7sZKwAAAMg"]
[Thu Nov 20 20:58:38.839258 2025] [:error] [pid 40508:tid 40523] [client 20.243.53.228:32765] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/blox.php"] [unique_id "aR8QfqxXNVCMW_ksxPvT7gAAAo0"]
[Thu Nov 20 20:58:41.459692 2025] [:error] [pid 55340:tid 55362] [client 20.243.53.228:32766] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/blox.php"] [unique_id "aR8QgfOxD-NeMydTybC3AgAAABE"]
[Thu Nov 20 20:58:43.961714 2025] [:error] [pid 55343:tid 55408] [client 20.243.53.228:32738] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gm.php"] [unique_id "aR8Qg1WlO3EnyVMV7w7JXQAAAIk"]
[Thu Nov 20 20:58:44.500291 2025] [:error] [pid 40445:tid 40483] [client 20.243.53.228:32749] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gm.php"] [unique_id "aR8QhFH-MuFcoWRjXpaHrwAAAkg"]
[Thu Nov 20 20:58:46.489482 2025] [:error] [pid 34405:tid 34407] [client 20.243.53.228:32661] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gm.php"] [unique_id "aR8QhjFpvu8oRK7ATfs14wAAAQA"]
[Thu Nov 20 20:58:47.652511 2025] [:error] [pid 40636:tid 40656] [client 20.243.53.228:32668] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gm.php"] [unique_id "aR8QhwK8BWUoW3xq0HAlRAAAA5A"]
[Thu Nov 20 20:58:51.561676 2025] [:error] [pid 40508:tid 40528] [client 20.243.53.228:32705] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/iko.php"] [unique_id "aR8Qi6xXNVCMW_ksxPvT-gAAApI"]
[Thu Nov 20 20:58:55.802430 2025] [:error] [pid 40508:tid 40516] [client 20.243.53.228:32675] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/iko.php"] [unique_id "aR8Qj6xXNVCMW_ksxPvT_wAAAoY"]
[Thu Nov 20 20:58:58.541193 2025] [:error] [pid 55342:tid 55372] [client 20.243.53.228:32680] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/iko.php"] [unique_id "aR8Qkrg6x32Tvk7fIG_6jQAAAEA"]
[Thu Nov 20 20:58:59.199395 2025] [:error] [pid 40445:tid 40493] [client 20.243.53.228:32581] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/iko.php"] [unique_id "aR8Qk1H-MuFcoWRjXpaHwQAAAlI"]
[Thu Nov 20 20:59:00.603353 2025] [:error] [pid 55340:tid 55355] [client 20.243.53.228:32708] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/miso.php"] [unique_id "aR8QlPOxD-NeMydTybC3GAAAAAo"]
[Thu Nov 20 20:59:03.629005 2025] [proxy_fcgi:error] [pid 40415:tid 40441] [client 20.243.53.228:32576] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 20:59:03.747774 2025] [proxy_fcgi:error] [pid 40415:tid 40418] [client 20.243.53.228:32576] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 20:59:03.868953 2025] [proxy_fcgi:error] [pid 40415:tid 40429] [client 20.243.53.228:32576] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 20:59:04.007907 2025] [proxy_fcgi:error] [pid 40415:tid 40432] [client 20.243.53.228:32576] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 20:59:04.126128 2025] [proxy_fcgi:error] [pid 40415:tid 40424] [client 20.243.53.228:32576] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 20:59:04.245121 2025] [proxy_fcgi:error] [pid 40415:tid 40440] [client 20.243.53.228:32576] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 20:59:04.365334 2025] [proxy_fcgi:error] [pid 40415:tid 40428] [client 20.243.53.228:32576] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 20:59:04.512114 2025] [proxy_fcgi:error] [pid 40415:tid 40423] [client 20.243.53.228:32576] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 20:59:04.630499 2025] [proxy_fcgi:error] [pid 40415:tid 40421] [client 20.243.53.228:32576] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 20:59:04.891176 2025] [proxy_fcgi:error] [pid 40415:tid 40433] [client 20.243.53.228:32576] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 20:59:05.522695 2025] [proxy_fcgi:error] [pid 40415:tid 40419] [client 20.243.53.228:32576] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 20:59:05.636411 2025] [:error] [pid 40415:tid 40426] [client 20.243.53.228:32576] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/filesss.php"] [unique_id "aR8QmahjIyLSv09svwPH0gAAAcg"]
[Thu Nov 20 20:59:06.858475 2025] [:error] [pid 55343:tid 55414] [client 20.243.53.228:32731] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/filesss.php"] [unique_id "aR8QmlWlO3EnyVMV7w7JagAAAI8"]
[Thu Nov 20 20:59:08.619867 2025] [:error] [pid 55430:tid 55446] [client 20.243.53.228:32721] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/filesss.php"] [unique_id "aR8QnPPZXaIMEU4pE7sZSwAAAM0"]
[Thu Nov 20 20:59:09.860301 2025] [:error] [pid 40636:tid 40662] [client 20.243.53.228:32650] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/filesss.php"] [unique_id "aR8QnQK8BWUoW3xq0HAlUAAAA5Y"]
[Thu Nov 20 20:59:10.363068 2025] [:error] [pid 34405:tid 34417] [client 20.243.53.228:32641] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ss.php"] [unique_id "aR8QnjFpvu8oRK7ATfs2AQAAAQo"]
[Thu Nov 20 20:59:13.065878 2025] [:error] [pid 55342:tid 55388] [client 20.243.53.228:32760] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ss.php"] [unique_id "aR8Qobg6x32Tvk7fIG_6kQAAAFA"]
[Thu Nov 20 20:59:15.144970 2025] [:error] [pid 40445:tid 40484] [client 20.243.53.228:32752] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ss.php"] [unique_id "aR8Qo1H-MuFcoWRjXpaH8wAAAkk"]
[Thu Nov 20 20:59:20.305094 2025] [:error] [pid 55340:tid 55358] [client 20.243.53.228:32682] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ss.php"] [unique_id "aR8QqPOxD-NeMydTybC3MAAAAA0"]
[Thu Nov 20 20:59:24.928458 2025] [:error] [pid 55343:tid 55413] [client 20.243.53.228:32726] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-is.php"] [unique_id "aR8QrFWlO3EnyVMV7w7JfwAAAI4"]
[Thu Nov 20 20:59:27.514250 2025] [:error] [pid 40508:tid 40526] [client 20.243.53.228:32663] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-is.php"] [unique_id "aR8Qr6xXNVCMW_ksxPvUQQAAApA"]
[Thu Nov 20 20:59:29.045092 2025] [:error] [pid 40537:tid 40551] [client 20.243.53.228:32678] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-is.php"] [unique_id "aR8QsaKlsL5kxTa3c1z6GQAAAso"]
[Thu Nov 20 20:59:30.492348 2025] [:error] [pid 40636:tid 40656] [client 20.243.53.228:32512] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-is.php"] [unique_id "aR8QsgK8BWUoW3xq0HAlXwAAA5A"]
[Thu Nov 20 20:59:32.658869 2025] [:error] [pid 40508:tid 40533] [client 20.243.53.228:32722] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jmfi2.php"] [unique_id "aR8QtKxXNVCMW_ksxPvURQAAApc"]
[Thu Nov 20 20:59:37.295126 2025] [:error] [pid 40537:tid 40554] [client 20.243.53.228:32670] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jmfi2.php"] [unique_id "aR8QuaKlsL5kxTa3c1z6IgAAAs0"]
[Thu Nov 20 20:59:40.722408 2025] [:error] [pid 55340:tid 55345] [client 20.243.53.228:32596] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jmfi2.php"] [unique_id "aR8QvPOxD-NeMydTybC3NwAAAAA"]
[Thu Nov 20 20:59:45.241633 2025] [:error] [pid 40537:tid 40565] [client 20.243.53.228:32742] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jmfi2.php"] [unique_id "aR8QwaKlsL5kxTa3c1z6KAAAAtg"]
[Thu Nov 20 20:59:52.284355 2025] [:error] [pid 40508:tid 40512] [client 20.243.53.228:32673] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/scx.php7"] [unique_id "aR8QyKxXNVCMW_ksxPvUTAAAAoI"]
[Thu Nov 20 20:59:55.130921 2025] [:error] [pid 40445:tid 40495] [client 20.243.53.228:32642] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/scx.php7"] [unique_id "aR8Qy1H-MuFcoWRjXpaIBwAAAlQ"]
[Thu Nov 20 20:59:56.295195 2025] [:error] [pid 40415:tid 40431] [client 20.243.53.228:32743] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/scx.php7"] [unique_id "aR8QzKhjIyLSv09svwPH9AAAAc0"]
[Thu Nov 20 20:59:57.270415 2025] [:error] [pid 40415:tid 40435] [client 20.243.53.228:32740] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/scx.php7"] [unique_id "aR8QzahjIyLSv09svwPH9QAAAdE"]
[Thu Nov 20 21:00:01.487638 2025] [:error] [pid 40508:tid 40534] [client 20.243.53.228:32652] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/777.php"] [unique_id "aR8Q0axXNVCMW_ksxPvUWAAAApg"]
[Thu Nov 20 21:00:01.966513 2025] [:error] [pid 40537:tid 40553] [client 20.243.53.228:32660] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/777.php"] [unique_id "aR8Q0aKlsL5kxTa3c1z6MQAAAsw"]
[Thu Nov 20 21:00:05.460226 2025] [proxy_fcgi:error] [pid 34405:tid 34412] [client 20.243.53.228:32699] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 21:00:11.881196 2025] [proxy_fcgi:error] [pid 40445:tid 40490] [client 20.243.53.228:32761] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 21:00:12.040203 2025] [proxy_fcgi:error] [pid 40445:tid 40495] [client 20.243.53.228:32761] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 21:00:12.211614 2025] [proxy_fcgi:error] [pid 40445:tid 40477] [client 20.243.53.228:32761] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 21:00:12.362481 2025] [proxy_fcgi:error] [pid 40445:tid 40497] [client 20.243.53.228:32761] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 21:00:12.530531 2025] [proxy_fcgi:error] [pid 40445:tid 40476] [client 20.243.53.228:32761] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 21:00:12.684538 2025] [proxy_fcgi:error] [pid 40445:tid 40479] [client 20.243.53.228:32761] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 21:00:12.841764 2025] [proxy_fcgi:error] [pid 40445:tid 40480] [client 20.243.53.228:32761] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 21:00:13.073008 2025] [proxy_fcgi:error] [pid 40445:tid 40485] [client 20.243.53.228:32761] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 21:00:13.224067 2025] [proxy_fcgi:error] [pid 40445:tid 40493] [client 20.243.53.228:32761] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 21:00:13.578040 2025] [proxy_fcgi:error] [pid 40445:tid 40491] [client 20.243.53.228:32761] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 21:00:13.751216 2025] [:error] [pid 40445:tid 40496] [client 20.243.53.228:32761] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xpas22.php"] [unique_id "aR8Q3VH-MuFcoWRjXpaIKgAAAlU"]
[Thu Nov 20 21:00:16.103693 2025] [:error] [pid 55340:tid 55361] [client 20.243.53.228:32737] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xpas22.php"] [unique_id "aR8Q4POxD-NeMydTybC3TgAAABA"]
[Thu Nov 20 21:00:18.580566 2025] [:error] [pid 40445:tid 40490] [client 20.243.53.228:32603] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xpas22.php"] [unique_id "aR8Q4lH-MuFcoWRjXpaILgAAAk8"]
[Thu Nov 20 21:00:19.631706 2025] [:error] [pid 55343:tid 55417] [client 20.243.53.228:32683] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xpas22.php"] [unique_id "aR8Q41WlO3EnyVMV7w7JlgAAAJI"]
[Thu Nov 20 21:00:20.901535 2025] [:error] [pid 55342:tid 55380] [client 20.243.53.228:32677] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp1.php"] [unique_id "aR8Q5Lg6x32Tvk7fIG_6uQAAAEg"]
[Thu Nov 20 21:00:23.698923 2025] [:error] [pid 40445:tid 40493] [client 20.243.53.228:32694] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp1.php"] [unique_id "aR8Q51H-MuFcoWRjXpaIMwAAAlI"]
[Thu Nov 20 21:00:26.759224 2025] [:error] [pid 55430:tid 55455] [client 20.243.53.228:32676] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp1.php"] [unique_id "aR8Q6vPZXaIMEU4pE7sZhgAAANY"]
[Thu Nov 20 21:00:28.328877 2025] [:error] [pid 40445:tid 40499] [client 20.243.53.228:32688] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp1.php"] [unique_id "aR8Q7FH-MuFcoWRjXpaIOAAAAlg"]
[Thu Nov 20 21:00:29.819485 2025] [:error] [pid 40445:tid 40475] [client 20.243.53.228:32591] [client 20.243.53.228] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dwelectservices.com.au"] [uri "/fm.php"] [unique_id "aR8Q7VH-MuFcoWRjXpaIOgAAAkA"]
[Thu Nov 20 21:00:30.794182 2025] [:error] [pid 55342:tid 55383] [client 20.243.53.228:32686] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/eauu.php"] [unique_id "aR8Q7rg6x32Tvk7fIG_6vwAAAEs"]
[Thu Nov 20 21:00:32.182970 2025] [:error] [pid 55430:tid 55435] [client 20.243.53.228:32685] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/eauu.php"] [unique_id "aR8Q8PPZXaIMEU4pE7sZkwAAAMI"]
[Thu Nov 20 21:00:34.144333 2025] [:error] [pid 40508:tid 40512] [client 20.243.53.228:32758] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/eauu.php"] [unique_id "aR8Q8qxXNVCMW_ksxPvUlAAAAoI"]
[Thu Nov 20 21:00:35.024496 2025] [:error] [pid 34405:tid 34421] [client 20.243.53.228:32684] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/css.php"] [unique_id "aR8Q8zFpvu8oRK7ATfs2TQAAAQ4"]
[Thu Nov 20 21:00:38.721479 2025] [:error] [pid 40537:tid 40552] [client 20.243.53.228:32695] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/css.php"] [unique_id "aR8Q9qKlsL5kxTa3c1z6RwAAAss"]
[Thu Nov 20 21:00:39.903337 2025] [:error] [pid 40445:tid 40482] [client 20.243.53.228:32753] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/css.php"] [unique_id "aR8Q91H-MuFcoWRjXpaIRwAAAkc"]
[Thu Nov 20 21:00:43.313525 2025] [:error] [pid 40445:tid 40486] [client 20.243.53.228:32610] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/css.php"] [unique_id "aR8Q-1H-MuFcoWRjXpaIVQAAAks"]
[Thu Nov 20 21:00:44.656903 2025] [:error] [pid 34405:tid 34427] [client 20.243.53.228:32696] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ru.php"] [unique_id "aR8Q_DFpvu8oRK7ATfs2WAAAARQ"]
[Thu Nov 20 21:00:45.674880 2025] [:error] [pid 40508:tid 40510] [client 20.243.53.228:32580] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ru.php"] [unique_id "aR8Q_axXNVCMW_ksxPvUnAAAAoA"]
[Thu Nov 20 21:00:46.289826 2025] [:error] [pid 55340:tid 55357] [client 20.243.53.228:32665] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ru.php"] [unique_id "aR8Q_vOxD-NeMydTybC3awAAAAw"]
[Thu Nov 20 21:00:49.060534 2025] [:error] [pid 40636:tid 40642] [client 20.243.53.228:32698] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ru.php"] [unique_id "aR8RAQK8BWUoW3xq0HAlggAAA4I"]
[Thu Nov 20 21:00:53.159098 2025] [:error] [pid 40508:tid 40534] [client 20.243.53.228:32589] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tmpls.php"] [unique_id "aR8RBaxXNVCMW_ksxPvUogAAApg"]
[Thu Nov 20 21:00:56.366200 2025] [:error] [pid 55340:tid 55356] [client 20.243.53.228:32767] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tmpls.php"] [unique_id "aR8RCPOxD-NeMydTybC3dAAAAAs"]
[Thu Nov 20 21:00:58.087248 2025] [:error] [pid 40445:tid 40495] [client 20.243.53.228:32587] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tmpls.php"] [unique_id "aR8RClH-MuFcoWRjXpaIZwAAAlQ"]
[Thu Nov 20 21:01:07.990178 2025] [:error] [pid 40415:tid 40436] [client 20.243.53.228:32657] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/shell.php"] [unique_id "aR8RE6hjIyLSv09svwPIFAAAAdI"]
[Thu Nov 20 21:01:09.637634 2025] [:error] [pid 40537:tid 40558] [client 20.243.53.228:32584] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/shell.php"] [unique_id "aR8RFaKlsL5kxTa3c1z6aQAAAtE"]
[Thu Nov 20 21:01:10.992756 2025] [:error] [pid 40537:tid 40557] [client 20.243.53.228:32635] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/shell.php"] [unique_id "aR8RFqKlsL5kxTa3c1z6agAAAtA"]
[Thu Nov 20 21:01:13.759508 2025] [proxy_fcgi:error] [pid 34405:tid 34427] [client 20.243.53.228:32604] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 21:01:14.002073 2025] [proxy_fcgi:error] [pid 34405:tid 34429] [client 20.243.53.228:32604] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 21:01:14.137888 2025] [proxy_fcgi:error] [pid 34405:tid 34426] [client 20.243.53.228:32604] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 21:01:14.257010 2025] [proxy_fcgi:error] [pid 34405:tid 34428] [client 20.243.53.228:32604] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 21:01:14.379611 2025] [proxy_fcgi:error] [pid 34405:tid 34409] [client 20.243.53.228:32604] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 21:01:14.497404 2025] [proxy_fcgi:error] [pid 34405:tid 34413] [client 20.243.53.228:32604] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 21:01:14.615132 2025] [proxy_fcgi:error] [pid 34405:tid 34423] [client 20.243.53.228:32604] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 21:01:14.738234 2025] [proxy_fcgi:error] [pid 34405:tid 34419] [client 20.243.53.228:32604] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 21:01:14.856577 2025] [proxy_fcgi:error] [pid 34405:tid 34414] [client 20.243.53.228:32604] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 21:01:14.979035 2025] [proxy_fcgi:error] [pid 34405:tid 34418] [client 20.243.53.228:32604] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 21:01:15.097145 2025] [proxy_fcgi:error] [pid 34405:tid 34431] [client 20.243.53.228:32604] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 21:01:15.213424 2025] [:error] [pid 34405:tid 34411] [client 20.243.53.228:32604] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wio.php"] [unique_id "aR8RGzFpvu8oRK7ATfs2nAAAAQQ"]
[Thu Nov 20 21:01:18.220879 2025] [:error] [pid 55340:tid 55355] [client 20.243.53.228:32582] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wio.php"] [unique_id "aR8RHvOxD-NeMydTybC3gAAAAAo"]
[Thu Nov 20 21:01:20.162276 2025] [:error] [pid 34405:tid 34409] [client 20.243.53.228:32627] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wio.php"] [unique_id "aR8RIDFpvu8oRK7ATfs2pAAAAQI"]
[Thu Nov 20 21:01:21.505465 2025] [:error] [pid 55342:tid 55390] [client 20.243.53.228:32602] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wio.php"] [unique_id "aR8RIbg6x32Tvk7fIG_7DgAAAFI"]
[Thu Nov 20 21:01:23.102647 2025] [:error] [pid 40415:tid 40436] [client 20.243.53.228:32601] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/oswkk.php"] [unique_id "aR8RI6hjIyLSv09svwPIHwAAAdI"]
[Thu Nov 20 21:01:26.935661 2025] [:error] [pid 55342:tid 55382] [client 20.243.53.228:32613] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/oswkk.php"] [unique_id "aR8RJrg6x32Tvk7fIG_7FQAAAEo"]
[Thu Nov 20 21:01:33.884613 2025] [:error] [pid 55340:tid 55349] [client 20.243.53.228:32513] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/oswkk.php"] [unique_id "aR8RLfOxD-NeMydTybC3iwAAAAQ"]
[Thu Nov 20 21:01:35.800539 2025] [:error] [pid 40508:tid 40523] [client 20.243.53.228:32608] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/oswkk.php"] [unique_id "aR8RL6xXNVCMW_ksxPvU0AAAAo0"]
[Thu Nov 20 21:01:38.634123 2025] [:error] [pid 40508:tid 40516] [client 20.243.53.228:32649] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rex.php"] [unique_id "aR8RMqxXNVCMW_ksxPvU0gAAAoY"]
[Thu Nov 20 21:01:40.147708 2025] [:error] [pid 55343:tid 55407] [client 20.243.53.228:32583] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rex.php"] [unique_id "aR8RNFWlO3EnyVMV7w7J3wAAAIg"]
[Thu Nov 20 21:01:42.956626 2025] [:error] [pid 40537:tid 40552] [client 20.243.53.228:32666] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rex.php"] [unique_id "aR8RNqKlsL5kxTa3c1z6fwAAAss"]
[Thu Nov 20 21:01:44.404698 2025] [:error] [pid 40508:tid 40521] [client 20.243.53.228:32691] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rex.php"] [unique_id "aR8ROKxXNVCMW_ksxPvU1wAAAos"]
[Thu Nov 20 21:01:45.563842 2025] [:error] [pid 40415:tid 40419] [client 20.243.53.228:32751] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aj.php"] [unique_id "aR8ROahjIyLSv09svwPILAAAAcE"]
[Thu Nov 20 21:01:46.595389 2025] [:error] [pid 55430:tid 55451] [client 20.243.53.228:32714] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aj.php"] [unique_id "aR8ROvPZXaIMEU4pE7sZywAAANI"]
[Thu Nov 20 21:01:47.369146 2025] [:error] [pid 34405:tid 34414] [client 20.243.53.228:32724] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aj.php"] [unique_id "aR8ROzFpvu8oRK7ATfs23wAAAQc"]
[Thu Nov 20 21:01:48.369007 2025] [:error] [pid 40537:tid 40558] [client 20.243.53.228:32709] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aj.php"] [unique_id "aR8RPKKlsL5kxTa3c1z6ggAAAtE"]
[Thu Nov 20 21:01:48.960438 2025] [:error] [pid 40445:tid 40494] [client 20.243.53.228:32609] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/snus.php"] [unique_id "aR8RPFH-MuFcoWRjXpaIrgAAAlM"]
[Thu Nov 20 21:01:50.045567 2025] [:error] [pid 34405:tid 34410] [client 20.243.53.228:32757] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/snus.php"] [unique_id "aR8RPjFpvu8oRK7ATfs25QAAAQM"]
[Thu Nov 20 21:01:50.833763 2025] [:error] [pid 40636:tid 40664] [client 20.243.53.228:32640] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/snus.php"] [unique_id "aR8RPgK8BWUoW3xq0HAlwAAAA5g"]
[Thu Nov 20 21:01:54.781814 2025] [:error] [pid 55343:tid 55404] [client 20.243.53.228:32764] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/snus.php"] [unique_id "aR8RQlWlO3EnyVMV7w7J4gAAAIU"]
[Thu Nov 20 21:01:55.468815 2025] [:error] [pid 55340:tid 55357] [client 20.243.53.228:32623] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/naxc.php"] [unique_id "aR8RQ_OxD-NeMydTybC3mgAAAAw"]
[Thu Nov 20 21:02:00.593911 2025] [:error] [pid 40415:tid 40434] [client 20.243.53.228:32619] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/naxc.php"] [unique_id "aR8RSKhjIyLSv09svwPIMwAAAdA"]
[Thu Nov 20 21:02:02.067454 2025] [:error] [pid 40415:tid 40442] [client 20.243.53.228:32747] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/naxc.php"] [unique_id "aR8RSqhjIyLSv09svwPINQAAAdg"]
[Thu Nov 20 21:02:04.231185 2025] [:error] [pid 40415:tid 40439] [client 20.243.53.228:32739] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/naxc.php"] [unique_id "aR8RTKhjIyLSv09svwPIOAAAAdU"]
[Thu Nov 20 21:02:05.598046 2025] [:error] [pid 40537:tid 40562] [client 20.243.53.228:32598] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/v3.php"] [unique_id "aR8RTaKlsL5kxTa3c1z6mwAAAtU"]
[Thu Nov 20 21:02:07.229256 2025] [:error] [pid 55342:tid 55395] [client 20.243.53.228:32514] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/v3.php"] [unique_id "aR8RT7g6x32Tvk7fIG_7MAAAAFc"]
[Thu Nov 20 21:02:07.934750 2025] [:error] [pid 40445:tid 40485] [client 20.243.53.228:32707] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/v3.php"] [unique_id "aR8RT1H-MuFcoWRjXpaIxQAAAko"]
[Thu Nov 20 21:02:09.096166 2025] [:error] [pid 40445:tid 40497] [client 20.243.53.228:32667] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/v3.php"] [unique_id "aR8RUVH-MuFcoWRjXpaIywAAAlY"]
[Thu Nov 20 21:02:10.430756 2025] [:error] [pid 40508:tid 40527] [client 20.243.53.228:32679] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nc4.php"] [unique_id "aR8RUqxXNVCMW_ksxPvU9gAAApE"]
[Thu Nov 20 21:02:13.949974 2025] [:error] [pid 55340:tid 55364] [client 20.243.53.228:32579] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nc4.php"] [unique_id "aR8RVfOxD-NeMydTybC3sgAAABM"]
[Thu Nov 20 21:02:15.629634 2025] [proxy_fcgi:error] [pid 40508:tid 40517] [client 20.243.53.228:32645] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 21:02:15.782218 2025] [proxy_fcgi:error] [pid 40508:tid 40513] [client 20.243.53.228:32645] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 21:02:15.954272 2025] [proxy_fcgi:error] [pid 40508:tid 40523] [client 20.243.53.228:32645] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 21:02:17.668786 2025] [proxy_fcgi:error] [pid 40508:tid 40515] [client 20.243.53.228:32645] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 21:02:17.829459 2025] [proxy_fcgi:error] [pid 40508:tid 40532] [client 20.243.53.228:32645] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 21:02:17.986513 2025] [proxy_fcgi:error] [pid 40508:tid 40516] [client 20.243.53.228:32645] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 21:02:18.154614 2025] [proxy_fcgi:error] [pid 40508:tid 40521] [client 20.243.53.228:32645] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 21:02:18.317997 2025] [proxy_fcgi:error] [pid 40508:tid 40510] [client 20.243.53.228:32645] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 21:02:18.484388 2025] [proxy_fcgi:error] [pid 40508:tid 40534] [client 20.243.53.228:32645] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 21:02:18.636832 2025] [proxy_fcgi:error] [pid 40508:tid 40519] [client 20.243.53.228:32645] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 21:02:18.871241 2025] [proxy_fcgi:error] [pid 40508:tid 40533] [client 20.243.53.228:32645] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 21:02:19.021807 2025] [:error] [pid 40508:tid 40520] [client 20.243.53.228:32645] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/asd67.php"] [unique_id "aR8RW6xXNVCMW_ksxPvVGwAAAoo"]
[Thu Nov 20 21:02:19.681091 2025] [:error] [pid 55342:tid 55373] [client 20.243.53.228:32693] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/asd67.php"] [unique_id "aR8RW7g6x32Tvk7fIG_7XAAAAEE"]
[Thu Nov 20 21:02:20.685772 2025] [:error] [pid 40445:tid 40483] [client 20.243.53.228:32537] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/asd67.php"] [unique_id "aR8RXFH-MuFcoWRjXpaI2QAAAkg"]
[Thu Nov 20 21:02:22.364686 2025] [:error] [pid 55430:tid 55451] [client 20.243.53.228:32644] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/asd67.php"] [unique_id "aR8RXvPZXaIMEU4pE7sZ5gAAANI"]
[Thu Nov 20 21:02:23.976479 2025] [:error] [pid 34405:tid 34419] [client 20.243.53.228:32664] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/st.php"] [unique_id "aR8RXzFpvu8oRK7ATfs3IAAAAQw"]
[Thu Nov 20 21:02:28.644062 2025] [:error] [pid 55342:tid 55380] [client 20.243.53.228:32656] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/st.php"] [unique_id "aR8RZLg6x32Tvk7fIG_7YQAAAEg"]
[Thu Nov 20 21:02:29.962023 2025] [:error] [pid 55430:tid 55439] [client 20.243.53.228:32646] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/st.php"] [unique_id "aR8RZfPZXaIMEU4pE7sZ8QAAAMY"]
[Thu Nov 20 21:02:36.971601 2025] [:error] [pid 55343:tid 55413] [client 20.243.53.228:32728] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/st.php"] [unique_id "aR8RbFWlO3EnyVMV7w7KCQAAAI4"]
[Thu Nov 20 21:02:37.882353 2025] [:error] [pid 55342:tid 55391] [client 20.243.53.228:32756] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/an.php"] [unique_id "aR8Rbbg6x32Tvk7fIG_7bQAAAFM"]
[Thu Nov 20 21:02:38.752484 2025] [:error] [pid 40445:tid 40478] [client 20.243.53.228:32578] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/an.php"] [unique_id "aR8RblH-MuFcoWRjXpaI8wAAAkM"]
[Thu Nov 20 21:02:39.152382 2025] [:error] [pid 40445:tid 40488] [client 20.243.53.228:32750] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/an.php"] [unique_id "aR8Rb1H-MuFcoWRjXpaI9QAAAk0"]
[Thu Nov 20 21:02:40.874884 2025] [:error] [pid 55430:tid 55450] [client 20.243.53.228:32697] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/an.php"] [unique_id "aR8RcPPZXaIMEU4pE7sZ_QAAANE"]
[Thu Nov 20 21:02:44.792088 2025] [:error] [pid 40445:tid 40491] [client 20.243.53.228:32653] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/enkkk.php"] [unique_id "aR8RdFH-MuFcoWRjXpaI_QAAAlA"]
[Thu Nov 20 21:02:46.082751 2025] [:error] [pid 55430:tid 55433] [client 20.243.53.228:32659] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/enkkk.php"] [unique_id "aR8RdvPZXaIMEU4pE7saBgAAAMA"]
[Thu Nov 20 21:02:46.733044 2025] [:error] [pid 40445:tid 40483] [client 20.243.53.228:32548] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/enkkk.php"] [unique_id "aR8RdlH-MuFcoWRjXpaJAAAAAkg"]
[Thu Nov 20 21:02:48.524403 2025] [:error] [pid 40445:tid 40492] [client 20.243.53.228:32544] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/enkkk.php"] [unique_id "aR8ReFH-MuFcoWRjXpaJAwAAAlE"]
[Thu Nov 20 21:02:50.228981 2025] [:error] [pid 55343:tid 55404] [client 20.243.53.228:32586] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ext.php"] [unique_id "aR8RelWlO3EnyVMV7w7KEAAAAIU"]
[Thu Nov 20 21:02:51.056928 2025] [:error] [pid 40636:tid 40661] [client 20.243.53.228:32519] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ext.php"] [unique_id "aR8RewK8BWUoW3xq0HAl8gAAA5U"]
[Thu Nov 20 21:02:53.599513 2025] [:error] [pid 40415:tid 40425] [client 20.243.53.228:32590] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ext.php"] [unique_id "aR8RfahjIyLSv09svwPIcwAAAcc"]
[Thu Nov 20 21:02:54.691675 2025] [:error] [pid 40445:tid 40495] [client 20.243.53.228:32712] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ext.php"] [unique_id "aR8RflH-MuFcoWRjXpaJFQAAAlQ"]
[Thu Nov 20 21:02:58.926692 2025] [:error] [pid 55430:tid 55450] [client 20.243.53.228:32597] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fe5.php"] [unique_id "aR8RgvPZXaIMEU4pE7saHAAAANE"]
[Thu Nov 20 21:03:00.709142 2025] [:error] [pid 40636:tid 40647] [client 20.243.53.228:32734] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fe5.php"] [unique_id "aR8RhAK8BWUoW3xq0HAl-gAAA4c"]
[Thu Nov 20 21:03:04.750405 2025] [:error] [pid 40445:tid 40497] [client 20.243.53.228:32725] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fe5.php"] [unique_id "aR8RiFH-MuFcoWRjXpaJLgAAAlY"]
[Thu Nov 20 21:03:09.554485 2025] [:error] [pid 55342:tid 55383] [client 20.243.53.228:32655] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fe5.php"] [unique_id "aR8Rjbg6x32Tvk7fIG_7hQAAAEs"]
[Thu Nov 20 21:03:10.834793 2025] [:error] [pid 40537:tid 40541] [client 20.243.53.228:32654] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/13.php"] [unique_id "aR8RjqKlsL5kxTa3c1z60gAAAsA"]
[Thu Nov 20 21:03:11.661106 2025] [:error] [pid 55343:tid 55401] [client 20.243.53.228:32701] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/13.php"] [unique_id "aR8Rj1WlO3EnyVMV7w7KIwAAAII"]
[Thu Nov 20 21:03:12.133081 2025] [:error] [pid 40537:tid 40547] [client 20.243.53.228:32692] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/13.php"] [unique_id "aR8RkKKlsL5kxTa3c1z61AAAAsY"]
[Thu Nov 20 21:03:19.455035 2025] [proxy_fcgi:error] [pid 40415:tid 40418] [client 20.243.53.228:32706] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 21:03:19.607586 2025] [proxy_fcgi:error] [pid 40415:tid 40423] [client 20.243.53.228:32706] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 21:03:19.757875 2025] [proxy_fcgi:error] [pid 40415:tid 40437] [client 20.243.53.228:32706] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 21:03:19.973734 2025] [proxy_fcgi:error] [pid 40415:tid 40431] [client 20.243.53.228:32706] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 21:03:20.188001 2025] [proxy_fcgi:error] [pid 40415:tid 40419] [client 20.243.53.228:32706] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 21:03:21.713639 2025] [proxy_fcgi:error] [pid 40415:tid 40438] [client 20.243.53.228:32706] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 21:03:21.877889 2025] [proxy_fcgi:error] [pid 40415:tid 40428] [client 20.243.53.228:32706] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 21:03:22.037529 2025] [proxy_fcgi:error] [pid 40415:tid 40427] [client 20.243.53.228:32706] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 21:03:22.205649 2025] [proxy_fcgi:error] [pid 40415:tid 40426] [client 20.243.53.228:32706] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 21:03:22.385173 2025] [proxy_fcgi:error] [pid 40415:tid 40442] [client 20.243.53.228:32706] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 21:03:22.573317 2025] [proxy_fcgi:error] [pid 40415:tid 40436] [client 20.243.53.228:32706] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 21:03:22.728272 2025] [:error] [pid 40415:tid 40424] [client 20.243.53.228:32706] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lc.php"] [unique_id "aR8RmqhjIyLSv09svwPIpAAAAcY"]
[Thu Nov 20 21:03:24.831730 2025] [:error] [pid 40508:tid 40523] [client 20.243.53.228:32766] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lc.php"] [unique_id "aR8RnKxXNVCMW_ksxPvVWgAAAo0"]
[Thu Nov 20 21:03:27.059070 2025] [:error] [pid 34405:tid 34424] [client 20.243.53.228:32733] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lc.php"] [unique_id "aR8RnzFpvu8oRK7ATfs3jgAAARE"]
[Thu Nov 20 21:03:34.646764 2025] [:error] [pid 40445:tid 40485] [client 20.243.53.228:32643] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lc.php"] [unique_id "aR8RplH-MuFcoWRjXpaJWQAAAko"]
[Thu Nov 20 21:03:36.785206 2025] [:error] [pid 40508:tid 40531] [client 20.243.53.228:32658] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gmo.php"] [unique_id "aR8RqKxXNVCMW_ksxPvVgQAAApU"]
[Thu Nov 20 21:03:39.815608 2025] [:error] [pid 40445:tid 40487] [client 20.243.53.228:32614] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gmo.php"] [unique_id "aR8Rq1H-MuFcoWRjXpaJaQAAAkw"]
[Thu Nov 20 21:03:40.800360 2025] [:error] [pid 40445:tid 40485] [client 20.243.53.228:32633] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gmo.php"] [unique_id "aR8RrFH-MuFcoWRjXpaJbQAAAko"]
[Thu Nov 20 21:03:42.062408 2025] [:error] [pid 55342:tid 55381] [client 20.243.53.228:32616] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gmo.php"] [unique_id "aR8Rrrg6x32Tvk7fIG_7qAAAAEk"]
[Thu Nov 20 21:03:45.498614 2025] [:error] [pid 40415:tid 40442] [client 20.243.53.228:32727] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/CLA.php"] [unique_id "aR8RsahjIyLSv09svwPIwQAAAdg"]
[Thu Nov 20 21:04:02.499694 2025] [:error] [pid 40537:tid 40562] [client 20.243.53.228:32738] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gfile.php"] [unique_id "aR8RwqKlsL5kxTa3c1z7BgAAAtU"]
[Thu Nov 20 21:04:03.383656 2025] [:error] [pid 55430:tid 55450] [client 20.243.53.228:32762] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gfile.php"] [unique_id "aR8Rw_PZXaIMEU4pE7saeAAAANE"]
[Thu Nov 20 21:04:06.192140 2025] [:error] [pid 40445:tid 40485] [client 20.243.53.228:32674] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gfile.php"] [unique_id "aR8RxlH-MuFcoWRjXpaJjQAAAko"]
[Thu Nov 20 21:04:07.292610 2025] [:error] [pid 40508:tid 40531] [client 20.243.53.228:32705] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gfile.php"] [unique_id "aR8Rx6xXNVCMW_ksxPvVpQAAApU"]
[Thu Nov 20 21:04:09.877136 2025] [:error] [pid 40445:tid 40481] [client 20.243.53.228:32672] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ahax.php"] [unique_id "aR8RyVH-MuFcoWRjXpaJkwAAAkY"]
[Thu Nov 20 21:04:13.190707 2025] [:error] [pid 40508:tid 40513] [client 20.243.53.228:32642] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ahax.php"] [unique_id "aR8RzaxXNVCMW_ksxPvVqgAAAoM"]
[Thu Nov 20 21:04:16.858626 2025] [:error] [pid 40445:tid 40490] [client 20.243.53.228:32678] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ahax.php"] [unique_id "aR8R0FH-MuFcoWRjXpaJrwAAAk8"]
[Thu Nov 20 21:04:18.985758 2025] [:error] [pid 55343:tid 55420] [client 20.243.53.228:32670] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ahax.php"] [unique_id "aR8R0lWlO3EnyVMV7w7KYQAAAJU"]
[Thu Nov 20 21:04:22.217707 2025] [proxy_fcgi:error] [pid 40537:tid 40546] [client 20.243.53.228:32585] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 21:04:22.353243 2025] [proxy_fcgi:error] [pid 40537:tid 40554] [client 20.243.53.228:32585] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 21:04:22.487212 2025] [proxy_fcgi:error] [pid 40537:tid 40565] [client 20.243.53.228:32585] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 21:04:22.615915 2025] [proxy_fcgi:error] [pid 40537:tid 40564] [client 20.243.53.228:32585] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 21:04:22.744517 2025] [proxy_fcgi:error] [pid 40537:tid 40542] [client 20.243.53.228:32585] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 21:04:22.886757 2025] [proxy_fcgi:error] [pid 40537:tid 40551] [client 20.243.53.228:32585] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 21:04:23.025110 2025] [proxy_fcgi:error] [pid 40537:tid 40560] [client 20.243.53.228:32585] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 21:04:23.142883 2025] [proxy_fcgi:error] [pid 40537:tid 40558] [client 20.243.53.228:32585] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 21:04:23.260485 2025] [proxy_fcgi:error] [pid 40537:tid 40545] [client 20.243.53.228:32585] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 21:04:23.378392 2025] [proxy_fcgi:error] [pid 40537:tid 40561] [client 20.243.53.228:32585] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 21:04:23.496905 2025] [proxy_fcgi:error] [pid 40537:tid 40557] [client 20.243.53.228:32585] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 21:04:23.634198 2025] [:error] [pid 40537:tid 40559] [client 20.243.53.228:32585] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/witmm.php"] [unique_id "aR8R16KlsL5kxTa3c1z7IwAAAtI"]
[Thu Nov 20 21:04:25.954072 2025] [:error] [pid 40445:tid 40475] [client 20.243.53.228:32711] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/witmm.php"] [unique_id "aR8R2VH-MuFcoWRjXpaJxAAAAkA"]
[Thu Nov 20 21:04:43.256943 2025] [:error] [pid 55342:tid 55392] [client 20.243.53.228:32641] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lo.php"] [unique_id "aR8R67g6x32Tvk7fIG_72gAAAFQ"]
[Thu Nov 20 21:04:45.015189 2025] [:error] [pid 40508:tid 40521] [client 20.243.53.228:32595] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lo.php"] [unique_id "aR8R7axXNVCMW_ksxPvV3gAAAos"]
[Thu Nov 20 21:04:46.325430 2025] [:error] [pid 34405:tid 34413] [client 20.243.53.228:32673] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lo.php"] [unique_id "aR8R7jFpvu8oRK7ATfs33AAAAQY"]
[Thu Nov 20 21:04:49.465485 2025] [:error] [pid 40415:tid 40436] [client 20.243.53.228:32744] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lo.php"] [unique_id "aR8R8ahjIyLSv09svwPI6QAAAdI"]
[Thu Nov 20 21:04:50.966626 2025] [:error] [pid 40445:tid 40478] [client 20.243.53.228:32651] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vxrl.php"] [unique_id "aR8R8lH-MuFcoWRjXpaKGgAAAkM"]
[Thu Nov 20 21:04:51.834910 2025] [:error] [pid 55340:tid 55348] [client 20.243.53.228:32577] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vxrl.php"] [unique_id "aR8R8_OxD-NeMydTybC4UQAAAAM"]
[Thu Nov 20 21:04:53.156153 2025] [:error] [pid 40445:tid 40477] [client 20.243.53.228:32763] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vxrl.php"] [unique_id "aR8R9VH-MuFcoWRjXpaKHwAAAkI"]
[Thu Nov 20 21:04:54.547104 2025] [:error] [pid 40636:tid 40642] [client 20.243.53.228:32729] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vxrl.php"] [unique_id "aR8R9gK8BWUoW3xq0HAmUQAAA4I"]
[Thu Nov 20 21:05:00.284760 2025] [:error] [pid 40537:tid 40553] [client 20.243.53.228:32749] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vxonb.php"] [unique_id "aR8R_KKlsL5kxTa3c1z7SwAAAsw"]
[Thu Nov 20 21:05:05.440545 2025] [:error] [pid 40537:tid 40551] [client 20.243.53.228:32704] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vxonb.php"] [unique_id "aR8SAaKlsL5kxTa3c1z7UAAAAso"]
[Thu Nov 20 21:05:06.732036 2025] [:error] [pid 40636:tid 40664] [client 20.243.53.228:32675] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vxonb.php"] [unique_id "aR8SAgK8BWUoW3xq0HAmWAAAA5g"]
[Thu Nov 20 21:05:08.189194 2025] [:error] [pid 40508:tid 40532] [client 20.243.53.228:32682] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vxonb.php"] [unique_id "aR8SBKxXNVCMW_ksxPvV9QAAApY"]
[Thu Nov 20 21:05:09.582787 2025] [:error] [pid 40508:tid 40525] [client 20.243.53.228:32708] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wozxsh.php"] [unique_id "aR8SBaxXNVCMW_ksxPvV-QAAAo8"]
[Thu Nov 20 21:05:10.966474 2025] [:error] [pid 40636:tid 40655] [client 20.243.53.228:32717] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wozxsh.php"] [unique_id "aR8SBgK8BWUoW3xq0HAmawAAA48"]
[Thu Nov 20 21:05:11.899466 2025] [:error] [pid 55430:tid 55438] [client 20.243.53.228:32624] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wozxsh.php"] [unique_id "aR8SB_PZXaIMEU4pE7sawgAAAMU"]
[Thu Nov 20 21:05:16.657099 2025] [:error] [pid 40537:tid 40552] [client 20.243.53.228:32587] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wozxsh.php"] [unique_id "aR8SDKKlsL5kxTa3c1z7VwAAAss"]
[Thu Nov 20 21:05:19.890024 2025] [:error] [pid 55430:tid 55445] [client 20.243.53.228:32576] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/whf.php"] [unique_id "aR8SD_PZXaIMEU4pE7sa0gAAAMw"]
[Thu Nov 20 21:05:23.100915 2025] [proxy_fcgi:error] [pid 40636:tid 40649] [client 20.243.53.228:32715] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 21:05:23.565331 2025] [proxy_fcgi:error] [pid 40636:tid 40643] [client 20.243.53.228:32715] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 21:05:23.683695 2025] [proxy_fcgi:error] [pid 40636:tid 40640] [client 20.243.53.228:32715] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 21:05:23.821074 2025] [proxy_fcgi:error] [pid 40636:tid 40653] [client 20.243.53.228:32715] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 21:05:23.950952 2025] [proxy_fcgi:error] [pid 40636:tid 40642] [client 20.243.53.228:32715] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 21:05:24.087884 2025] [proxy_fcgi:error] [pid 40636:tid 40659] [client 20.243.53.228:32715] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 21:05:24.204993 2025] [proxy_fcgi:error] [pid 40636:tid 40663] [client 20.243.53.228:32715] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 21:05:24.330741 2025] [proxy_fcgi:error] [pid 40636:tid 40662] [client 20.243.53.228:32715] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 21:05:24.455389 2025] [proxy_fcgi:error] [pid 40636:tid 40646] [client 20.243.53.228:32715] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 21:05:24.573656 2025] [proxy_fcgi:error] [pid 40636:tid 40644] [client 20.243.53.228:32715] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 21:05:24.703010 2025] [proxy_fcgi:error] [pid 40636:tid 40641] [client 20.243.53.228:32715] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 21:05:24.830341 2025] [:error] [pid 40636:tid 40655] [client 20.243.53.228:32715] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nax.php"] [unique_id "aR8SFAK8BWUoW3xq0HAmjAAAA48"]
[Thu Nov 20 21:05:37.033402 2025] [:error] [pid 40537:tid 40559] [client 20.243.53.228:32755] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nax.php"] [unique_id "aR8SIaKlsL5kxTa3c1z7YQAAAtI"]
[Thu Nov 20 21:05:38.857248 2025] [:error] [pid 34405:tid 34413] [client 20.243.53.228:32761] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nax.php"] [unique_id "aR8SIjFpvu8oRK7ATfs3-wAAAQY"]
[Thu Nov 20 21:05:40.834615 2025] [:error] [pid 40445:tid 40492] [client 20.243.53.228:32753] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wolv2.php"] [unique_id "aR8SJFH-MuFcoWRjXpaKjQAAAlE"]
[Thu Nov 20 21:05:44.267967 2025] [:error] [pid 40445:tid 40496] [client 20.243.53.228:32626] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wolv2.php"] [unique_id "aR8SKFH-MuFcoWRjXpaKoQAAAlU"]
[Thu Nov 20 21:05:46.145996 2025] [:error] [pid 55342:tid 55373] [client 20.243.53.228:32558] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wolv2.php"] [unique_id "aR8SKrg6x32Tvk7fIG_8CQAAAEE"]
[Thu Nov 20 21:05:56.742172 2025] [:error] [pid 40415:tid 40442] [client 20.243.53.228:32716] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mtvcrew.php"] [unique_id "aR8SNKhjIyLSv09svwPJFwAAAdg"]
[Thu Nov 20 21:05:58.476227 2025] [:error] [pid 40537:tid 40559] [client 20.243.53.228:32649] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mtvcrew.php"] [unique_id "aR8SNqKlsL5kxTa3c1z7bgAAAtI"]
[Thu Nov 20 21:05:59.738431 2025] [:error] [pid 55342:tid 55384] [client 20.243.53.228:32732] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mtvcrew.php"] [unique_id "aR8SN7g6x32Tvk7fIG_8EQAAAEw"]
[Thu Nov 20 21:06:04.871297 2025] [:error] [pid 55340:tid 55353] [client 20.243.53.228:32742] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mtvcrew.php"] [unique_id "aR8SPPOxD-NeMydTybC4jAAAAAg"]
[Thu Nov 20 21:06:08.419646 2025] [:error] [pid 40415:tid 40434] [client 20.243.53.228:32687] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/twso.php"] [unique_id "aR8SQKhjIyLSv09svwPJIgAAAdA"]
[Thu Nov 20 21:06:10.198063 2025] [:error] [pid 55430:tid 55456] [client 20.243.53.228:32627] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/twso.php"] [unique_id "aR8SQvPZXaIMEU4pE7sa_gAAANc"]
[Thu Nov 20 21:06:11.270554 2025] [:error] [pid 40445:tid 40480] [client 20.243.53.228:32694] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/twso.php"] [unique_id "aR8SQ1H-MuFcoWRjXpaKzwAAAkU"]
[Thu Nov 20 21:06:14.521236 2025] [:error] [pid 55430:tid 55449] [client 20.243.53.228:32754] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/twso.php"] [unique_id "aR8SRvPZXaIMEU4pE7sa_wAAANA"]
[Thu Nov 20 21:06:16.126723 2025] [:error] [pid 40445:tid 40481] [client 20.243.53.228:32730] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/144.php"] [unique_id "aR8SSFH-MuFcoWRjXpaK1QAAAkY"]
[Thu Nov 20 21:06:18.831414 2025] [:error] [pid 40445:tid 40480] [client 20.243.53.228:32647] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/144.php"] [unique_id "aR8SSlH-MuFcoWRjXpaK3QAAAkU"]
[Thu Nov 20 21:06:20.365349 2025] [:error] [pid 40636:tid 40660] [client 20.243.53.228:32726] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/144.php"] [unique_id "aR8STAK8BWUoW3xq0HAmtQAAA5Q"]
[Thu Nov 20 21:06:22.231544 2025] [:error] [pid 40415:tid 40430] [client 20.243.53.228:32737] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/144.php"] [unique_id "aR8STqhjIyLSv09svwPJPgAAAcw"]
[Thu Nov 20 21:06:23.571435 2025] [:error] [pid 40445:tid 40486] [client 20.243.53.228:32721] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/exhitrgp.php"] [unique_id "aR8ST1H-MuFcoWRjXpaK5AAAAks"]
[Thu Nov 20 21:06:24.521758 2025] [proxy_fcgi:error] [pid 55343:tid 55410] [client 20.243.53.228:32722] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 21:06:24.646376 2025] [proxy_fcgi:error] [pid 55343:tid 55415] [client 20.243.53.228:32722] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 01:14:08.119292 2025] [:error] [pid 13805:tid 13816] [client 20.243.53.228:6366] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aR9MYFurU5-GZdwKvr68JwAAAUg"]
[Fri Nov 21 01:14:08.964292 2025] [:error] [pid 13522:tid 13708] [client 20.243.53.228:6368] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aR9MYKOM9BReD2C3mbLaLAAAAEg"]
[Fri Nov 21 01:14:09.587837 2025] [:error] [pid 13536:tid 13735] [client 20.243.53.228:6286] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aR9MYawnCU8z6PX3-ZmvjgAAAIg"]
[Fri Nov 21 01:14:10.317379 2025] [:error] [pid 13522:tid 13714] [client 20.243.53.228:6381] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aR9MYqOM9BReD2C3mbLaMgAAAE4"]
[Fri Nov 21 01:16:57.730489 2025] [proxy_fcgi:error] [pid 13536:tid 13749] [client 20.196.110.97:29688] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 01:16:57.906157 2025] [proxy_fcgi:error] [pid 13536:tid 13750] [client 20.196.110.97:29688] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 01:16:58.577183 2025] [proxy_fcgi:error] [pid 13536:tid 13731] [client 20.196.110.97:29688] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 01:16:58.730385 2025] [proxy_fcgi:error] [pid 13536:tid 13730] [client 20.196.110.97:29688] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 01:16:58.884511 2025] [proxy_fcgi:error] [pid 13536:tid 13738] [client 20.196.110.97:29688] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 01:16:59.056153 2025] [:error] [pid 13536:tid 13733] [client 20.196.110.97:29688] [client 20.196.110.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/0.php"] [unique_id "aR9NC6wnCU8z6PX3-Zmw2wAAAIY"]
[Fri Nov 21 01:16:59.407314 2025] [proxy_fcgi:error] [pid 13805:tid 13823] [client 20.196.110.97:29679] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 01:16:59.576777 2025] [proxy_fcgi:error] [pid 13805:tid 13832] [client 20.196.110.97:29679] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 01:16:59.725765 2025] [:error] [pid 13805:tid 13808] [client 20.196.110.97:29679] [client 20.196.110.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/cs.php"] [unique_id "aR9NC1urU5-GZdwKvr69_gAAAUA"]
[Fri Nov 21 01:17:00.064330 2025] [:error] [pid 13506:tid 13673] [client 20.196.110.97:29687] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wikindex.php"] [unique_id "aR9NDKTbGYpGB-467xZKSgAAAAM"]
[Fri Nov 21 01:17:00.883600 2025] [:error] [pid 13506:tid 13693] [client 20.196.110.97:29693] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wikindex.php"] [unique_id "aR9NDKTbGYpGB-467xZKUAAAABc"]
[Fri Nov 21 01:17:01.259712 2025] [:error] [pid 13805:tid 13827] [client 20.196.110.97:29577] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wikindex.php"] [unique_id "aR9NDVurU5-GZdwKvr6-AwAAAVM"]
[Fri Nov 21 01:17:01.704678 2025] [:error] [pid 13536:tid 13751] [client 20.196.110.97:29637] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wikindex.php"] [unique_id "aR9NDawnCU8z6PX3-Zmw4AAAAJg"]
[Fri Nov 21 01:17:02.252957 2025] [:error] [pid 13506:tid 13675] [client 20.196.110.97:29686] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/images/m.php"] [unique_id "aR9NDqTbGYpGB-467xZKXAAAAAU"]
[Fri Nov 21 01:17:02.731864 2025] [:error] [pid 13805:tid 13830] [client 20.196.110.97:29672] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/images/m.php"] [unique_id "aR9NDlurU5-GZdwKvr6-BQAAAVY"]
[Fri Nov 21 01:17:03.187300 2025] [:error] [pid 13805:tid 13824] [client 20.196.110.97:29638] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/images/m.php"] [unique_id "aR9ND1urU5-GZdwKvr6-BwAAAVA"]
[Fri Nov 21 01:17:03.620922 2025] [:error] [pid 13805:tid 13832] [client 20.196.110.97:29633] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/images/m.php"] [unique_id "aR9ND1urU5-GZdwKvr6-CQAAAVg"]
[Fri Nov 21 01:17:03.937776 2025] [:error] [pid 13536:tid 13742] [client 20.196.110.97:29570] [client 20.196.110.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/kses.php"] [unique_id "aR9ND6wnCU8z6PX3-Zmw5gAAAI8"]
[Fri Nov 21 01:17:04.292718 2025] [:error] [pid 13805:tid 13821] [client 20.196.110.97:29673] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jagoan.php"] [unique_id "aR9NEFurU5-GZdwKvr6-DAAAAU0"]
[Fri Nov 21 01:17:04.802757 2025] [:error] [pid 13805:tid 13809] [client 20.196.110.97:29573] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jagoan.php"] [unique_id "aR9NEFurU5-GZdwKvr6-DgAAAUE"]
[Fri Nov 21 01:17:05.178194 2025] [:error] [pid 13522:tid 13711] [client 20.196.110.97:29685] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jagoan.php"] [unique_id "aR9NEaOM9BReD2C3mbLbaAAAAEs"]
[Fri Nov 21 01:17:05.539979 2025] [:error] [pid 13522:tid 13702] [client 20.196.110.97:29516] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jagoan.php"] [unique_id "aR9NEaOM9BReD2C3mbLbaQAAAEI"]
[Fri Nov 21 01:17:05.885059 2025] [:error] [pid 13536:tid 13728] [client 20.196.110.97:29662] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/images/g3.php"] [unique_id "aR9NEawnCU8z6PX3-Zmw6wAAAIE"]
[Fri Nov 21 01:17:06.350982 2025] [:error] [pid 13536:tid 13749] [client 20.196.110.97:29677] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/images/g3.php"] [unique_id "aR9NEqwnCU8z6PX3-Zmw7AAAAJY"]
[Fri Nov 21 01:17:06.712949 2025] [:error] [pid 13536:tid 13727] [client 20.196.110.97:29674] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/images/g3.php"] [unique_id "aR9NEqwnCU8z6PX3-Zmw8AAAAIA"]
[Fri Nov 21 01:17:07.166689 2025] [:error] [pid 13506:tid 13681] [client 20.196.110.97:29613] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/images/g3.php"] [unique_id "aR9NE6TbGYpGB-467xZKaQAAAAs"]
[Fri Nov 21 01:17:07.580089 2025] [:error] [pid 13522:tid 13713] [client 20.196.110.97:29656] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/zaza.php"] [unique_id "aR9NE6OM9BReD2C3mbLbcQAAAE0"]
[Fri Nov 21 01:17:08.016608 2025] [:error] [pid 13506:tid 13670] [client 20.196.110.97:29579] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/zaza.php"] [unique_id "aR9NFKTbGYpGB-467xZKbQAAAAA"]
[Fri Nov 21 01:17:08.368425 2025] [:error] [pid 13506:tid 13685] [client 20.196.110.97:29587] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/zaza.php"] [unique_id "aR9NFKTbGYpGB-467xZKbgAAAA8"]
[Fri Nov 21 01:17:08.792121 2025] [:error] [pid 13522:tid 13717] [client 20.196.110.97:29639] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/zaza.php"] [unique_id "aR9NFKOM9BReD2C3mbLbcwAAAFE"]
[Fri Nov 21 01:17:09.179471 2025] [:error] [pid 13805:tid 13817] [client 20.196.110.97:29691] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/acme-challenge/myip.php"] [unique_id "aR9NFVurU5-GZdwKvr6-GQAAAUk"]
[Fri Nov 21 01:17:09.531239 2025] [:error] [pid 13805:tid 13823] [client 20.196.110.97:29574] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/acme-challenge/myip.php"] [unique_id "aR9NFVurU5-GZdwKvr6-HAAAAU8"]
[Fri Nov 21 01:17:10.102824 2025] [:error] [pid 13506:tid 13679] [client 20.196.110.97:29689] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/acme-challenge/myip.php"] [unique_id "aR9NFqTbGYpGB-467xZKcwAAAAk"]
[Fri Nov 21 01:17:10.583938 2025] [:error] [pid 13805:tid 13812] [client 20.196.110.97:29580] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/acme-challenge/myip.php"] [unique_id "aR9NFlurU5-GZdwKvr6-HwAAAUQ"]
[Fri Nov 21 01:17:10.959231 2025] [:error] [pid 13805:tid 13821] [client 20.196.110.97:29568] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/htaccess.php"] [unique_id "aR9NFlurU5-GZdwKvr6-IAAAAU0"]
[Fri Nov 21 01:17:11.739356 2025] [:error] [pid 13522:tid 13716] [client 20.196.110.97:29538] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/htaccess.php"] [unique_id "aR9NF6OM9BReD2C3mbLbdAAAAFA"]
[Fri Nov 21 01:17:12.169454 2025] [:error] [pid 13805:tid 13817] [client 20.196.110.97:29660] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/htaccess.php"] [unique_id "aR9NGFurU5-GZdwKvr6-JgAAAUk"]
[Fri Nov 21 01:17:12.521035 2025] [:error] [pid 13805:tid 13830] [client 20.196.110.97:29610] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/htaccess.php"] [unique_id "aR9NGFurU5-GZdwKvr6-JwAAAVY"]
[Fri Nov 21 01:17:12.860423 2025] [:error] [pid 13805:tid 13813] [client 20.196.110.97:29644] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/readme.php"] [unique_id "aR9NGFurU5-GZdwKvr6-KQAAAUU"]
[Fri Nov 21 01:17:13.215714 2025] [:error] [pid 13522:tid 13704] [client 20.196.110.97:29641] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/readme.php"] [unique_id "aR9NGaOM9BReD2C3mbLbeAAAAEQ"]
[Fri Nov 21 01:17:13.674759 2025] [:error] [pid 13522:tid 13705] [client 20.196.110.97:29654] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/readme.php"] [unique_id "aR9NGaOM9BReD2C3mbLbewAAAEU"]
[Fri Nov 21 01:17:14.174983 2025] [:error] [pid 13522:tid 13717] [client 20.196.110.97:29658] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/readme.php"] [unique_id "aR9NGqOM9BReD2C3mbLbfQAAAFE"]
[Fri Nov 21 01:17:14.651303 2025] [:error] [pid 13506:tid 13680] [client 20.196.110.97:29572] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Cok.php"] [unique_id "aR9NGqTbGYpGB-467xZKegAAAAo"]
[Fri Nov 21 01:17:15.127486 2025] [:error] [pid 13506:tid 13690] [client 20.196.110.97:29612] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Cok.php"] [unique_id "aR9NG6TbGYpGB-467xZKewAAABQ"]
[Fri Nov 21 01:17:15.540037 2025] [:error] [pid 13536:tid 13727] [client 20.196.110.97:29643] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Cok.php"] [unique_id "aR9NG6wnCU8z6PX3-ZmxBgAAAIA"]
[Fri Nov 21 01:17:16.022732 2025] [:error] [pid 13506:tid 13674] [client 20.196.110.97:29681] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Cok.php"] [unique_id "aR9NHKTbGYpGB-467xZKfgAAAAQ"]
[Fri Nov 21 01:17:16.426602 2025] [:error] [pid 13536:tid 13740] [client 20.196.110.97:29669] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hob.php"] [unique_id "aR9NHKwnCU8z6PX3-ZmxDAAAAI0"]
[Fri Nov 21 01:17:16.839517 2025] [:error] [pid 13536:tid 13736] [client 20.196.110.97:29671] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hob.php"] [unique_id "aR9NHKwnCU8z6PX3-ZmxDQAAAIk"]
[Fri Nov 21 01:17:17.323732 2025] [:error] [pid 13506:tid 13689] [client 20.196.110.97:29622] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hob.php"] [unique_id "aR9NHaTbGYpGB-467xZKgAAAABM"]
[Fri Nov 21 01:17:18.030507 2025] [:error] [pid 13536:tid 13746] [client 20.196.110.97:29600] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hob.php"] [unique_id "aR9NHqwnCU8z6PX3-ZmxEgAAAJM"]
[Fri Nov 21 01:17:18.411435 2025] [:error] [pid 13805:tid 13823] [client 20.196.110.97:29657] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kal.php"] [unique_id "aR9NHlurU5-GZdwKvr6-LgAAAU8"]
[Fri Nov 21 01:17:18.842223 2025] [:error] [pid 13536:tid 13727] [client 20.196.110.97:29695] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kal.php"] [unique_id "aR9NHqwnCU8z6PX3-ZmxFQAAAIA"]
[Fri Nov 21 01:17:19.185462 2025] [:error] [pid 13536:tid 13751] [client 20.196.110.97:29519] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kal.php"] [unique_id "aR9NH6wnCU8z6PX3-ZmxFwAAAJg"]
[Fri Nov 21 01:17:19.582581 2025] [:error] [pid 13506:tid 13678] [client 20.196.110.97:29571] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kal.php"] [unique_id "aR9NH6TbGYpGB-467xZKhQAAAAg"]
[Fri Nov 21 01:17:19.941101 2025] [:error] [pid 13536:tid 13729] [client 20.196.110.97:29584] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fv.php"] [unique_id "aR9NH6wnCU8z6PX3-ZmxGAAAAII"]
[Fri Nov 21 01:17:20.411823 2025] [:error] [pid 13536:tid 13736] [client 20.196.110.97:29582] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fv.php"] [unique_id "aR9NIKwnCU8z6PX3-ZmxHAAAAIk"]
[Fri Nov 21 01:17:20.728973 2025] [:error] [pid 13536:tid 13737] [client 20.196.110.97:29576] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fv.php"] [unique_id "aR9NIKwnCU8z6PX3-ZmxHgAAAIo"]
[Fri Nov 21 01:17:21.099261 2025] [:error] [pid 13805:tid 13821] [client 20.196.110.97:29675] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fv.php"] [unique_id "aR9NIVurU5-GZdwKvr6-MQAAAU0"]
[Fri Nov 21 01:17:21.481918 2025] [:error] [pid 13506:tid 13681] [client 20.196.110.97:29694] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lx.php"] [unique_id "aR9NIaTbGYpGB-467xZKjQAAAAs"]
[Fri Nov 21 01:17:21.989443 2025] [:error] [pid 13536:tid 13749] [client 20.196.110.97:29659] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lx.php"] [unique_id "aR9NIawnCU8z6PX3-ZmxJQAAAJY"]
[Fri Nov 21 01:17:22.347282 2025] [:error] [pid 13805:tid 13829] [client 20.196.110.97:29663] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lx.php"] [unique_id "aR9NIlurU5-GZdwKvr6-NAAAAVU"]
[Fri Nov 21 01:17:22.757657 2025] [:error] [pid 13805:tid 13830] [client 20.196.110.97:29676] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lx.php"] [unique_id "aR9NIlurU5-GZdwKvr6-NQAAAVY"]
[Fri Nov 21 01:17:23.255727 2025] [:error] [pid 13805:tid 13816] [client 20.196.110.97:29557] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/w1w.php"] [unique_id "aR9NI1urU5-GZdwKvr6-OAAAAUg"]
[Fri Nov 21 01:17:23.561606 2025] [:error] [pid 13522:tid 13717] [client 20.196.110.97:29631] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/w1w.php"] [unique_id "aR9NI6OM9BReD2C3mbLbiAAAAFE"]
[Fri Nov 21 01:17:23.905584 2025] [:error] [pid 13522:tid 13702] [client 20.196.110.97:29667] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/w1w.php"] [unique_id "aR9NI6OM9BReD2C3mbLbigAAAEI"]
[Fri Nov 21 01:17:24.267744 2025] [:error] [pid 13522:tid 13719] [client 20.196.110.97:29517] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/w1w.php"] [unique_id "aR9NJKOM9BReD2C3mbLbjAAAAFM"]
[Fri Nov 21 01:17:24.575420 2025] [:error] [pid 13536:tid 13736] [client 20.196.110.97:29578] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Contrller.php"] [unique_id "aR9NJKwnCU8z6PX3-ZmxJgAAAIk"]
[Fri Nov 21 01:17:24.987881 2025] [:error] [pid 13536:tid 13743] [client 20.196.110.97:29614] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Contrller.php"] [unique_id "aR9NJKwnCU8z6PX3-ZmxJwAAAJA"]
[Fri Nov 21 01:17:25.467295 2025] [:error] [pid 13536:tid 13742] [client 20.196.110.97:29680] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Contrller.php"] [unique_id "aR9NJawnCU8z6PX3-ZmxKwAAAI8"]
[Fri Nov 21 01:17:25.999684 2025] [:error] [pid 13522:tid 13722] [client 20.196.110.97:29521] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Contrller.php"] [unique_id "aR9NJaOM9BReD2C3mbLbjgAAAFY"]
[Fri Nov 21 01:17:26.351120 2025] [:error] [pid 13522:tid 13721] [client 20.196.110.97:29546] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cafe.php"] [unique_id "aR9NJqOM9BReD2C3mbLbjwAAAFU"]
[Fri Nov 21 01:17:26.714360 2025] [:error] [pid 13506:tid 13684] [client 20.196.110.97:29589] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cafe.php"] [unique_id "aR9NJqTbGYpGB-467xZKowAAAA4"]
[Fri Nov 21 01:17:27.153468 2025] [:error] [pid 13536:tid 13741] [client 20.196.110.97:29440] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cafe.php"] [unique_id "aR9NJ6wnCU8z6PX3-ZmxLgAAAI4"]
[Fri Nov 21 01:17:27.457718 2025] [:error] [pid 13522:tid 13717] [client 20.196.110.97:29581] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cafe.php"] [unique_id "aR9NJ6OM9BReD2C3mbLbkQAAAFE"]
[Fri Nov 21 01:17:27.768977 2025] [:error] [pid 13522:tid 13710] [client 20.196.110.97:29666] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ww2.php"] [unique_id "aR9NJ6OM9BReD2C3mbLbkgAAAEo"]
[Fri Nov 21 01:17:28.347956 2025] [:error] [pid 13805:tid 13812] [client 20.196.110.97:29595] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ww2.php"] [unique_id "aR9NKFurU5-GZdwKvr6-QQAAAUQ"]
[Fri Nov 21 01:17:28.963930 2025] [:error] [pid 13506:tid 13682] [client 20.196.110.97:29683] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ww2.php"] [unique_id "aR9NKKTbGYpGB-467xZKpwAAAAw"]
[Fri Nov 21 01:17:29.408859 2025] [:error] [pid 13536:tid 13739] [client 20.196.110.97:29596] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ww2.php"] [unique_id "aR9NKawnCU8z6PX3-ZmxMgAAAIw"]
[Fri Nov 21 01:17:30.021380 2025] [:error] [pid 13536:tid 13745] [client 20.196.110.97:29684] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ww3.php"] [unique_id "aR9NKqwnCU8z6PX3-ZmxMwAAAJI"]
[Fri Nov 21 01:17:30.771679 2025] [:error] [pid 13522:tid 13716] [client 20.196.110.97:29664] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ww3.php"] [unique_id "aR9NKqOM9BReD2C3mbLblgAAAFA"]
[Fri Nov 21 01:17:31.901850 2025] [:error] [pid 13506:tid 13689] [client 20.196.110.97:29651] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ww3.php"] [unique_id "aR9NK6TbGYpGB-467xZKqwAAABM"]
[Fri Nov 21 01:17:32.258785 2025] [:error] [pid 13522:tid 13711] [client 20.196.110.97:29668] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ww3.php"] [unique_id "aR9NLKOM9BReD2C3mbLbmwAAAEs"]
[Fri Nov 21 01:17:33.103380 2025] [:error] [pid 13522:tid 13701] [client 20.196.110.97:29692] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ww4.php"] [unique_id "aR9NLaOM9BReD2C3mbLbnQAAAEE"]
[Fri Nov 21 01:17:34.454988 2025] [:error] [pid 13522:tid 13707] [client 20.196.110.97:29602] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ww4.php"] [unique_id "aR9NLqOM9BReD2C3mbLboQAAAEc"]
[Fri Nov 21 01:17:35.434024 2025] [:error] [pid 13522:tid 13719] [client 20.196.110.97:29593] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ww4.php"] [unique_id "aR9NL6OM9BReD2C3mbLbowAAAFM"]
[Fri Nov 21 01:17:37.468722 2025] [:error] [pid 13805:tid 13819] [client 20.196.110.97:29621] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ww4.php"] [unique_id "aR9NMVurU5-GZdwKvr6-UAAAAUs"]
[Fri Nov 21 01:17:38.839482 2025] [:error] [pid 13522:tid 13712] [client 20.196.110.97:29594] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/as.php"] [unique_id "aR9NMqOM9BReD2C3mbLbqwAAAEw"]
[Fri Nov 21 01:17:41.489649 2025] [:error] [pid 13522:tid 13712] [client 20.196.110.97:29586] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/as.php"] [unique_id "aR9NNaOM9BReD2C3mbLbugAAAEw"]
[Fri Nov 21 01:17:42.945714 2025] [:error] [pid 13536:tid 13748] [client 20.196.110.97:29690] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/as.php"] [unique_id "aR9NNqwnCU8z6PX3-ZmxOgAAAJU"]
[Fri Nov 21 01:17:43.515283 2025] [:error] [pid 13805:tid 13824] [client 20.196.110.97:29653] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/as.php"] [unique_id "aR9NN1urU5-GZdwKvr6-bgAAAVA"]
[Fri Nov 21 01:17:44.531274 2025] [:error] [pid 13536:tid 13735] [client 20.196.110.97:29585] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wsd.php"] [unique_id "aR9NOKwnCU8z6PX3-ZmxQAAAAIg"]
[Fri Nov 21 01:17:45.300017 2025] [:error] [pid 13805:tid 13813] [client 20.196.110.97:29624] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wsd.php"] [unique_id "aR9NOVurU5-GZdwKvr6-cwAAAUU"]
[Fri Nov 21 01:17:46.660931 2025] [:error] [pid 13805:tid 13821] [client 20.196.110.97:29607] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wsd.php"] [unique_id "aR9NOlurU5-GZdwKvr6-eAAAAU0"]
[Fri Nov 21 01:17:47.664021 2025] [:error] [pid 13536:tid 13736] [client 20.196.110.97:29618] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wsd.php"] [unique_id "aR9NO6wnCU8z6PX3-ZmxSwAAAIk"]
[Fri Nov 21 01:17:48.342193 2025] [:error] [pid 13805:tid 13818] [client 20.196.110.97:29640] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/403.php"] [unique_id "aR9NPFurU5-GZdwKvr6-gQAAAUo"]
[Fri Nov 21 01:17:49.273372 2025] [:error] [pid 13522:tid 13707] [client 20.196.110.97:29509] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/403.php"] [unique_id "aR9NPaOM9BReD2C3mbLbyAAAAEc"]
[Fri Nov 21 01:17:49.906951 2025] [:error] [pid 13522:tid 13716] [client 20.196.110.97:29470] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/403.php"] [unique_id "aR9NPaOM9BReD2C3mbLbywAAAFA"]
[Fri Nov 21 01:17:50.368159 2025] [:error] [pid 13805:tid 13821] [client 20.196.110.97:29508] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/403.php"] [unique_id "aR9NPlurU5-GZdwKvr6-iwAAAU0"]
[Fri Nov 21 01:17:51.061622 2025] [:error] [pid 13805:tid 13832] [client 20.196.110.97:29605] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/max.php"] [unique_id "aR9NP1urU5-GZdwKvr6-jgAAAVg"]
[Fri Nov 21 01:17:51.483605 2025] [:error] [pid 13805:tid 13817] [client 20.196.110.97:29603] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/max.php"] [unique_id "aR9NP1urU5-GZdwKvr6-kQAAAUk"]
[Fri Nov 21 01:17:51.899981 2025] [:error] [pid 13536:tid 13729] [client 20.196.110.97:29655] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/max.php"] [unique_id "aR9NP6wnCU8z6PX3-ZmxWQAAAII"]
[Fri Nov 21 01:17:52.346041 2025] [:error] [pid 13805:tid 13826] [client 20.196.110.97:29575] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/max.php"] [unique_id "aR9NQFurU5-GZdwKvr6-lgAAAVI"]
[Fri Nov 21 01:17:52.694358 2025] [:error] [pid 13805:tid 13813] [client 20.196.110.97:29526] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/m.php"] [unique_id "aR9NQFurU5-GZdwKvr6-lwAAAUU"]
[Fri Nov 21 01:17:53.137656 2025] [:error] [pid 13536:tid 13744] [client 20.196.110.97:29560] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/m.php"] [unique_id "aR9NQawnCU8z6PX3-ZmxXAAAAJE"]
[Fri Nov 21 01:17:54.061525 2025] [:error] [pid 13536:tid 13730] [client 20.196.110.97:29625] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/m.php"] [unique_id "aR9NQqwnCU8z6PX3-ZmxXQAAAIM"]
[Fri Nov 21 01:17:54.850087 2025] [:error] [pid 13536:tid 13738] [client 20.196.110.97:29534] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/m.php"] [unique_id "aR9NQqwnCU8z6PX3-ZmxYgAAAIs"]
[Fri Nov 21 01:17:55.285110 2025] [:error] [pid 13522:tid 13711] [client 20.196.110.97:29623] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/post.php"] [unique_id "aR9NQ6OM9BReD2C3mbLb0QAAAEs"]
[Fri Nov 21 01:17:55.774848 2025] [:error] [pid 13506:tid 13684] [client 20.196.110.97:29598] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/post.php"] [unique_id "aR9NQ6TbGYpGB-467xZKwAAAAA4"]
[Fri Nov 21 01:17:56.145466 2025] [:error] [pid 13805:tid 13822] [client 20.196.110.97:29682] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/post.php"] [unique_id "aR9NRFurU5-GZdwKvr6-mQAAAU4"]
[Fri Nov 21 01:17:56.568347 2025] [:error] [pid 13805:tid 13828] [client 20.196.110.97:29527] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/post.php"] [unique_id "aR9NRFurU5-GZdwKvr6-nAAAAVQ"]
[Fri Nov 21 01:17:57.064647 2025] [:error] [pid 13805:tid 13824] [client 20.196.110.97:29535] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/themes.php"] [unique_id "aR9NRVurU5-GZdwKvr6-nQAAAVA"]
[Fri Nov 21 01:17:57.851499 2025] [:error] [pid 13522:tid 13710] [client 20.196.110.97:29567] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/themes.php"] [unique_id "aR9NRaOM9BReD2C3mbLb0gAAAEo"]
[Fri Nov 21 01:17:58.819364 2025] [:error] [pid 13536:tid 13743] [client 20.196.110.97:29466] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/themes.php"] [unique_id "aR9NRqwnCU8z6PX3-ZmxbAAAAJA"]
[Fri Nov 21 01:17:59.197763 2025] [proxy_fcgi:error] [pid 13536:tid 13738] [client 20.196.110.97:29670] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 01:18:00.076771 2025] [proxy_fcgi:error] [pid 13536:tid 13749] [client 20.196.110.97:29670] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 01:18:00.232418 2025] [proxy_fcgi:error] [pid 13536:tid 13740] [client 20.196.110.97:29670] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 01:18:00.385989 2025] [proxy_fcgi:error] [pid 13536:tid 13741] [client 20.196.110.97:29670] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 01:18:00.538143 2025] [proxy_fcgi:error] [pid 13536:tid 13729] [client 20.196.110.97:29670] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 01:18:00.692709 2025] [proxy_fcgi:error] [pid 13536:tid 13739] [client 20.196.110.97:29670] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 01:18:00.843417 2025] [proxy_fcgi:error] [pid 13536:tid 13744] [client 20.196.110.97:29670] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 01:18:00.992685 2025] [:error] [pid 13536:tid 13751] [client 20.196.110.97:29670] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/yellow.php"] [unique_id "aR9NSKwnCU8z6PX3-ZmxegAAAJg"]
[Fri Nov 21 01:18:01.583148 2025] [:error] [pid 13805:tid 13830] [client 20.196.110.97:29646] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/yellow.php"] [unique_id "aR9NSVurU5-GZdwKvr6-qwAAAVY"]
[Fri Nov 21 01:18:02.014922 2025] [:error] [pid 13805:tid 13826] [client 20.196.110.97:29618] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/yellow.php"] [unique_id "aR9NSlurU5-GZdwKvr6-rAAAAVI"]
[Fri Nov 21 01:18:02.322812 2025] [:error] [pid 13805:tid 13823] [client 20.196.110.97:29632] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/yellow.php"] [unique_id "aR9NSlurU5-GZdwKvr6-rgAAAU8"]
[Fri Nov 21 01:18:02.744634 2025] [:error] [pid 13805:tid 13819] [client 20.196.110.97:29615] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cong.php"] [unique_id "aR9NSlurU5-GZdwKvr6-sAAAAUs"]
[Fri Nov 21 01:18:03.087478 2025] [:error] [pid 13805:tid 13829] [client 20.196.110.97:29599] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cong.php"] [unique_id "aR9NS1urU5-GZdwKvr6-swAAAVU"]
[Fri Nov 21 01:18:03.465988 2025] [:error] [pid 13522:tid 13716] [client 20.196.110.97:29525] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cong.php"] [unique_id "aR9NS6OM9BReD2C3mbLb1wAAAFA"]
[Fri Nov 21 01:18:03.840277 2025] [:error] [pid 13536:tid 13728] [client 20.196.110.97:29647] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cong.php"] [unique_id "aR9NS6wnCU8z6PX3-ZmxfAAAAIE"]
[Fri Nov 21 01:18:04.235089 2025] [:error] [pid 13506:tid 13675] [client 20.196.110.97:29562] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fw.php"] [unique_id "aR9NTKTbGYpGB-467xZKygAAAAU"]
[Fri Nov 21 01:18:04.540425 2025] [:error] [pid 13536:tid 13743] [client 20.196.110.97:29520] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fw.php"] [unique_id "aR9NTKwnCU8z6PX3-ZmxfQAAAJA"]
[Fri Nov 21 01:18:05.218311 2025] [:error] [pid 13522:tid 13723] [client 20.196.110.97:29542] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fw.php"] [unique_id "aR9NTaOM9BReD2C3mbLb2wAAAFc"]
[Fri Nov 21 01:18:06.067170 2025] [:error] [pid 13522:tid 13703] [client 20.196.110.97:29554] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fw.php"] [unique_id "aR9NTqOM9BReD2C3mbLb3QAAAEM"]
[Fri Nov 21 01:18:06.433680 2025] [:error] [pid 13536:tid 13738] [client 20.196.110.97:29645] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bs1.php"] [unique_id "aR9NTqwnCU8z6PX3-ZmxgQAAAIs"]
[Fri Nov 21 01:18:06.782763 2025] [:error] [pid 13506:tid 13685] [client 20.196.110.97:29507] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bs1.php"] [unique_id "aR9NTqTbGYpGB-467xZKzgAAAA8"]
[Fri Nov 21 01:18:07.105194 2025] [:error] [pid 13506:tid 13678] [client 20.196.110.97:29522] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bs1.php"] [unique_id "aR9NT6TbGYpGB-467xZK0AAAAAg"]
[Fri Nov 21 01:18:07.425020 2025] [:error] [pid 13506:tid 13689] [client 20.196.110.97:29529] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bs1.php"] [unique_id "aR9NT6TbGYpGB-467xZK0QAAABM"]
[Fri Nov 21 01:18:07.797396 2025] [:error] [pid 13536:tid 13750] [client 20.196.110.97:29635] [client 20.196.110.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aR9NT6wnCU8z6PX3-ZmxgwAAAJc"]
[Fri Nov 21 01:18:08.232627 2025] [:error] [pid 13522:tid 13710] [client 20.196.110.97:29588] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/termps.php"] [unique_id "aR9NUKOM9BReD2C3mbLb4wAAAEo"]
[Fri Nov 21 01:18:08.575427 2025] [:error] [pid 13805:tid 13809] [client 20.196.110.97:29678] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/termps.php"] [unique_id "aR9NUFurU5-GZdwKvr6-vAAAAUE"]
[Fri Nov 21 01:18:09.049275 2025] [:error] [pid 13805:tid 13815] [client 20.196.110.97:29536] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/termps.php"] [unique_id "aR9NUVurU5-GZdwKvr6-vQAAAUc"]
[Fri Nov 21 01:18:09.796305 2025] [:error] [pid 13805:tid 13829] [client 20.196.110.97:29606] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/termps.php"] [unique_id "aR9NUVurU5-GZdwKvr6-vwAAAVU"]
[Fri Nov 21 01:18:10.199961 2025] [:error] [pid 13805:tid 13825] [client 20.196.110.97:29565] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/co.php"] [unique_id "aR9NUlurU5-GZdwKvr6-wQAAAVE"]
[Fri Nov 21 01:18:10.556021 2025] [:error] [pid 13522:tid 13715] [client 20.196.110.97:29608] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/co.php"] [unique_id "aR9NUqOM9BReD2C3mbLb6QAAAE8"]
[Fri Nov 21 01:18:10.957214 2025] [:error] [pid 13506:tid 13688] [client 20.196.110.97:29604] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/co.php"] [unique_id "aR9NUqTbGYpGB-467xZK2AAAABI"]
[Fri Nov 21 01:18:11.322510 2025] [:error] [pid 13522:tid 13708] [client 20.196.110.97:29523] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/co.php"] [unique_id "aR9NU6OM9BReD2C3mbLb6wAAAEg"]
[Fri Nov 21 01:18:11.747257 2025] [:error] [pid 13522:tid 13713] [client 20.196.110.97:29551] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cong.php"] [unique_id "aR9NU6OM9BReD2C3mbLb7AAAAE0"]
[Fri Nov 21 01:18:12.043370 2025] [:error] [pid 13536:tid 13732] [client 20.196.110.97:29601] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cong.php"] [unique_id "aR9NVKwnCU8z6PX3-ZmxigAAAIU"]
[Fri Nov 21 01:18:12.761733 2025] [:error] [pid 13506:tid 13674] [client 20.196.110.97:29452] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cong.php"] [unique_id "aR9NVKTbGYpGB-467xZK2wAAAAQ"]
[Fri Nov 21 01:18:13.300678 2025] [:error] [pid 13805:tid 13820] [client 20.196.110.97:29592] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cong.php"] [unique_id "aR9NVVurU5-GZdwKvr6-wwAAAUw"]
[Fri Nov 21 01:18:13.887871 2025] [:error] [pid 13536:tid 13730] [client 20.196.110.97:29456] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/atomlib.php"] [unique_id "aR9NVawnCU8z6PX3-ZmxjQAAAIM"]
[Fri Nov 21 01:18:14.407903 2025] [:error] [pid 13805:tid 13810] [client 20.196.110.97:29549] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/atomlib.php"] [unique_id "aR9NVlurU5-GZdwKvr6-yAAAAUI"]
[Fri Nov 21 01:18:14.770941 2025] [:error] [pid 13506:tid 13683] [client 20.196.110.97:29537] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/atomlib.php"] [unique_id "aR9NVqTbGYpGB-467xZK3QAAAA0"]
[Fri Nov 21 01:18:15.077317 2025] [:error] [pid 13536:tid 13736] [client 20.196.110.97:29550] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/atomlib.php"] [unique_id "aR9NV6wnCU8z6PX3-ZmxjgAAAIk"]
[Fri Nov 21 01:18:15.533506 2025] [:error] [pid 13506:tid 13689] [client 20.196.110.97:29545] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/w.php"] [unique_id "aR9NV6TbGYpGB-467xZK3wAAABM"]
[Fri Nov 21 01:18:15.859150 2025] [:error] [pid 13522:tid 13712] [client 20.196.110.97:29642] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/w.php"] [unique_id "aR9NV6OM9BReD2C3mbLb8QAAAEw"]
[Fri Nov 21 01:18:16.171031 2025] [:error] [pid 13805:tid 13824] [client 20.196.110.97:29472] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/w.php"] [unique_id "aR9NWFurU5-GZdwKvr6-zQAAAVA"]
[Fri Nov 21 01:18:16.612468 2025] [:error] [pid 13522:tid 13718] [client 20.196.110.97:29510] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/w.php"] [unique_id "aR9NWKOM9BReD2C3mbLb8gAAAFI"]
[Fri Nov 21 01:18:17.194945 2025] [:error] [pid 13536:tid 13748] [client 20.196.110.97:29695] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/404.php"] [unique_id "aR9NWawnCU8z6PX3-ZmxkgAAAJU"]
[Fri Nov 21 01:18:17.814912 2025] [:error] [pid 13522:tid 13714] [client 20.196.110.97:29561] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/404.php"] [unique_id "aR9NWaOM9BReD2C3mbLb9QAAAE4"]
[Fri Nov 21 01:18:18.476256 2025] [:error] [pid 13522:tid 13704] [client 20.196.110.97:29619] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/404.php"] [unique_id "aR9NWqOM9BReD2C3mbLb9gAAAEQ"]
[Fri Nov 21 01:18:18.794128 2025] [:error] [pid 13506:tid 13688] [client 20.196.110.97:29634] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/404.php"] [unique_id "aR9NWqTbGYpGB-467xZK5QAAABI"]
[Fri Nov 21 01:18:19.154025 2025] [:error] [pid 13506:tid 13684] [client 20.196.110.97:29591] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aR9NW6TbGYpGB-467xZK5gAAAA4"]
[Fri Nov 21 01:18:19.540483 2025] [:error] [pid 13506:tid 13685] [client 20.196.110.97:29543] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aR9NW6TbGYpGB-467xZK6QAAAA8"]
[Fri Nov 21 01:18:19.880652 2025] [:error] [pid 13522:tid 13713] [client 20.196.110.97:29630] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aR9NW6OM9BReD2C3mbLb-AAAAE0"]
[Fri Nov 21 01:18:20.627166 2025] [:error] [pid 13506:tid 13689] [client 20.196.110.97:29479] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aR9NXKTbGYpGB-467xZK6wAAABM"]
[Fri Nov 21 01:18:21.354216 2025] [:error] [pid 13506:tid 13694] [client 20.196.110.97:29553] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/product.php"] [unique_id "aR9NXaTbGYpGB-467xZK7gAAABg"]
[Fri Nov 21 01:18:21.744307 2025] [:error] [pid 13522:tid 13724] [client 20.196.110.97:29590] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/product.php"] [unique_id "aR9NXaOM9BReD2C3mbLb-gAAAFg"]
[Fri Nov 21 01:18:22.128209 2025] [:error] [pid 13805:tid 13810] [client 20.196.110.97:29444] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/product.php"] [unique_id "aR9NXlurU5-GZdwKvr6-0gAAAUI"]
[Fri Nov 21 01:18:22.565849 2025] [:error] [pid 13522:tid 13710] [client 20.196.110.97:29524] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/product.php"] [unique_id "aR9NXqOM9BReD2C3mbLb_AAAAEo"]
[Fri Nov 21 01:18:22.945764 2025] [:error] [pid 13522:tid 13712] [client 20.196.110.97:29533] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/function.php"] [unique_id "aR9NXqOM9BReD2C3mbLcAAAAAEw"]
[Fri Nov 21 01:18:23.272667 2025] [:error] [pid 13522:tid 13718] [client 20.196.110.97:29611] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/function.php"] [unique_id "aR9NX6OM9BReD2C3mbLcAQAAAFI"]
[Fri Nov 21 01:18:23.701346 2025] [:error] [pid 13805:tid 13825] [client 20.196.110.97:29477] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/function.php"] [unique_id "aR9NX1urU5-GZdwKvr6-0wAAAVE"]
[Fri Nov 21 01:18:24.121212 2025] [:error] [pid 13805:tid 13821] [client 20.196.110.97:29649] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/function.php"] [unique_id "aR9NYFurU5-GZdwKvr6-1gAAAU0"]
[Fri Nov 21 01:18:24.630409 2025] [:error] [pid 13506:tid 13672] [client 20.196.110.97:29555] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/0x.php"] [unique_id "aR9NYKTbGYpGB-467xZK8AAAAAI"]
[Fri Nov 21 01:18:25.008161 2025] [:error] [pid 13536:tid 13743] [client 20.196.110.97:29552] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/0x.php"] [unique_id "aR9NYawnCU8z6PX3-ZmxmAAAAJA"]
[Fri Nov 21 01:18:25.470232 2025] [:error] [pid 13805:tid 13819] [client 20.196.110.97:29506] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/0x.php"] [unique_id "aR9NYVurU5-GZdwKvr6-2QAAAUs"]
[Fri Nov 21 01:18:25.787641 2025] [:error] [pid 13805:tid 13815] [client 20.196.110.97:29445] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/0x.php"] [unique_id "aR9NYVurU5-GZdwKvr6-2gAAAUc"]
[Fri Nov 21 01:18:26.219495 2025] [:error] [pid 13805:tid 13822] [client 20.196.110.97:29475] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/css.php"] [unique_id "aR9NYlurU5-GZdwKvr6-3wAAAU4"]
[Fri Nov 21 01:18:26.720267 2025] [:error] [pid 13805:tid 13818] [client 20.196.110.97:29539] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/css.php"] [unique_id "aR9NYlurU5-GZdwKvr6-4gAAAUo"]
[Fri Nov 21 01:18:27.042687 2025] [:error] [pid 13805:tid 13832] [client 20.196.110.97:29458] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/css.php"] [unique_id "aR9NY1urU5-GZdwKvr6-5gAAAVg"]
[Fri Nov 21 01:18:27.338082 2025] [:error] [pid 13522:tid 13702] [client 20.196.110.97:29448] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/css.php"] [unique_id "aR9NY6OM9BReD2C3mbLcAgAAAEI"]
[Fri Nov 21 01:18:27.674925 2025] [:error] [pid 13536:tid 13738] [client 20.196.110.97:29453] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/222.php"] [unique_id "aR9NY6wnCU8z6PX3-ZmxmwAAAIs"]
[Fri Nov 21 01:18:28.078058 2025] [:error] [pid 13536:tid 13733] [client 20.196.110.97:29583] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/222.php"] [unique_id "aR9NZKwnCU8z6PX3-ZmxnQAAAIY"]
[Fri Nov 21 01:18:29.235912 2025] [:error] [pid 13805:tid 13825] [client 20.196.110.97:29449] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/222.php"] [unique_id "aR9NZVurU5-GZdwKvr6-8AAAAVE"]
[Fri Nov 21 01:18:29.561735 2025] [:error] [pid 13536:tid 13735] [client 20.196.110.97:29548] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/222.php"] [unique_id "aR9NZawnCU8z6PX3-ZmxowAAAIg"]
[Fri Nov 21 01:18:30.021123 2025] [:error] [pid 13536:tid 13751] [client 20.196.110.97:29381] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/index.php"] [unique_id "aR9NZqwnCU8z6PX3-ZmxpgAAAJg"]
[Fri Nov 21 01:18:30.332351 2025] [:error] [pid 13506:tid 13683] [client 20.196.110.97:29464] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/index.php"] [unique_id "aR9NZqTbGYpGB-467xZK9gAAAA0"]
[Fri Nov 21 01:18:30.690823 2025] [:error] [pid 13506:tid 13670] [client 20.196.110.97:29665] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/index.php"] [unique_id "aR9NZqTbGYpGB-467xZK9wAAAAA"]
[Fri Nov 21 01:18:31.055911 2025] [:error] [pid 13536:tid 13737] [client 20.196.110.97:29636] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/index.php"] [unique_id "aR9NZ6wnCU8z6PX3-ZmxqAAAAIo"]
[Fri Nov 21 01:18:31.391210 2025] [:error] [pid 13506:tid 13689] [client 20.196.110.97:29528] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/1.php"] [unique_id "aR9NZ6TbGYpGB-467xZK-AAAABM"]
[Fri Nov 21 01:18:31.708545 2025] [:error] [pid 13805:tid 13808] [client 20.196.110.97:29518] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/1.php"] [unique_id "aR9NZ1urU5-GZdwKvr6-9gAAAUA"]
[Fri Nov 21 01:18:32.035432 2025] [:error] [pid 13805:tid 13809] [client 20.196.110.97:29532] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/1.php"] [unique_id "aR9NaFurU5-GZdwKvr6-9wAAAUE"]
[Fri Nov 21 01:18:33.045918 2025] [:error] [pid 13506:tid 13692] [client 20.196.110.97:29513] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/1.php"] [unique_id "aR9NaaTbGYpGB-467xZK-wAAABY"]
[Fri Nov 21 01:18:33.381676 2025] [:error] [pid 13506:tid 13676] [client 20.196.110.97:29626] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin.php"] [unique_id "aR9NaaTbGYpGB-467xZK_AAAAAY"]
[Fri Nov 21 01:18:33.750780 2025] [:error] [pid 13805:tid 13831] [client 20.196.110.97:29443] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin.php"] [unique_id "aR9NaVurU5-GZdwKvr6-_AAAAVc"]
[Fri Nov 21 01:18:34.055982 2025] [:error] [pid 13805:tid 13811] [client 20.196.110.97:29498] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin.php"] [unique_id "aR9NalurU5-GZdwKvr6-_QAAAUM"]
[Fri Nov 21 01:18:34.371095 2025] [:error] [pid 13536:tid 13751] [client 20.196.110.97:29451] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin.php"] [unique_id "aR9NaqwnCU8z6PX3-ZmxrAAAAJg"]
[Fri Nov 21 01:18:34.699844 2025] [:error] [pid 13805:tid 13810] [client 20.196.110.97:29540] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aR9NalurU5-GZdwKvr6-_wAAAUI"]
[Fri Nov 21 01:18:35.020133 2025] [:error] [pid 13805:tid 13816] [client 20.196.110.97:29492] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aR9Na1urU5-GZdwKvr6_AAAAAUg"]
[Fri Nov 21 01:18:35.364172 2025] [:error] [pid 13506:tid 13693] [client 20.196.110.97:29402] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aR9Na6TbGYpGB-467xZLAAAAABc"]
[Fri Nov 21 01:18:35.874685 2025] [:error] [pid 13805:tid 13809] [client 20.196.110.97:29629] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aR9Na1urU5-GZdwKvr6_BQAAAUE"]
[Fri Nov 21 01:18:36.266096 2025] [:error] [pid 13536:tid 13747] [client 20.196.110.97:29547] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aR9NbKwnCU8z6PX3-ZmxsgAAAJQ"]
[Fri Nov 21 01:18:36.593592 2025] [:error] [pid 13536:tid 13733] [client 20.196.110.97:29530] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aR9NbKwnCU8z6PX3-ZmxswAAAIY"]
[Fri Nov 21 01:18:36.939849 2025] [:error] [pid 13506:tid 13681] [client 20.196.110.97:29499] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aR9NbKTbGYpGB-467xZLAgAAAAs"]
[Fri Nov 21 01:18:37.279021 2025] [:error] [pid 13536:tid 13736] [client 20.196.110.97:29431] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aR9NbawnCU8z6PX3-ZmxtQAAAIk"]
[Fri Nov 21 01:18:37.745549 2025] [:error] [pid 13522:tid 13716] [client 20.196.110.97:29403] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/abcd.php"] [unique_id "aR9NbaOM9BReD2C3mbLcBQAAAFA"]
[Fri Nov 21 01:18:38.113855 2025] [:error] [pid 13805:tid 13823] [client 20.196.110.97:29461] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/abcd.php"] [unique_id "aR9NblurU5-GZdwKvr6_CgAAAU8"]
[Fri Nov 21 01:18:38.422067 2025] [:error] [pid 13805:tid 13827] [client 20.196.110.97:29497] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/abcd.php"] [unique_id "aR9NblurU5-GZdwKvr6_CwAAAVM"]
[Fri Nov 21 01:18:38.737833 2025] [:error] [pid 13805:tid 13832] [client 20.196.110.97:29505] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/abcd.php"] [unique_id "aR9NblurU5-GZdwKvr6_DwAAAVg"]
[Fri Nov 21 01:18:39.146545 2025] [:error] [pid 13805:tid 13831] [client 20.196.110.97:29496] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dropdown.php"] [unique_id "aR9Nb1urU5-GZdwKvr6_EQAAAVc"]
[Fri Nov 21 01:18:39.762685 2025] [:error] [pid 13522:tid 13701] [client 20.196.110.97:29616] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dropdown.php"] [unique_id "aR9Nb6OM9BReD2C3mbLcBgAAAEE"]
[Fri Nov 21 01:18:40.312898 2025] [:error] [pid 13522:tid 13723] [client 20.196.110.97:29661] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dropdown.php"] [unique_id "aR9NcKOM9BReD2C3mbLcCAAAAFc"]
[Fri Nov 21 01:18:40.880075 2025] [:error] [pid 13522:tid 13706] [client 20.196.110.97:29480] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dropdown.php"] [unique_id "aR9NcKOM9BReD2C3mbLcCwAAAEY"]
[Fri Nov 21 01:18:41.250226 2025] [:error] [pid 13536:tid 13741] [client 20.196.110.97:29502] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/moon.php"] [unique_id "aR9NcawnCU8z6PX3-ZmxuwAAAI4"]
[Fri Nov 21 01:18:41.616783 2025] [:error] [pid 13506:tid 13691] [client 20.196.110.97:29556] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/moon.php"] [unique_id "aR9NcaTbGYpGB-467xZLBAAAABU"]
[Fri Nov 21 01:18:41.934053 2025] [:error] [pid 13506:tid 13694] [client 20.196.110.97:29376] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/moon.php"] [unique_id "aR9NcaTbGYpGB-467xZLBwAAABg"]
[Fri Nov 21 01:18:42.243168 2025] [:error] [pid 13805:tid 13820] [client 20.196.110.97:29379] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/moon.php"] [unique_id "aR9NclurU5-GZdwKvr6_GAAAAUw"]
[Fri Nov 21 01:18:42.550885 2025] [:error] [pid 13805:tid 13825] [client 20.196.110.97:29597] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/0x.php"] [unique_id "aR9NclurU5-GZdwKvr6_GwAAAVE"]
[Fri Nov 21 01:18:42.872631 2025] [:error] [pid 13805:tid 13812] [client 20.196.110.97:29488] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/0x.php"] [unique_id "aR9NclurU5-GZdwKvr6_HgAAAUQ"]
[Fri Nov 21 01:18:43.430458 2025] [:error] [pid 13536:tid 13737] [client 20.196.110.97:29617] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/0x.php"] [unique_id "aR9Nc6wnCU8z6PX3-ZmxvgAAAIo"]
[Fri Nov 21 01:18:44.081200 2025] [:error] [pid 13522:tid 13705] [client 20.196.110.97:29463] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/0x.php"] [unique_id "aR9NdKOM9BReD2C3mbLcDAAAAEU"]
[Fri Nov 21 01:18:44.422995 2025] [:error] [pid 13536:tid 13750] [client 20.196.110.97:29558] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/moon.php"] [unique_id "aR9NdKwnCU8z6PX3-ZmxwAAAAJc"]
[Fri Nov 21 01:18:44.755846 2025] [:error] [pid 13536:tid 13736] [client 20.196.110.97:29481] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/moon.php"] [unique_id "aR9NdKwnCU8z6PX3-ZmxwgAAAIk"]
[Fri Nov 21 01:18:45.095311 2025] [:error] [pid 13522:tid 13721] [client 20.196.110.97:29504] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/moon.php"] [unique_id "aR9NdaOM9BReD2C3mbLcDQAAAFU"]
[Fri Nov 21 01:18:45.398538 2025] [:error] [pid 13536:tid 13744] [client 20.196.110.97:29401] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/moon.php"] [unique_id "aR9NdawnCU8z6PX3-ZmxxgAAAJE"]
[Fri Nov 21 01:18:45.788100 2025] [:error] [pid 13522:tid 13712] [client 20.196.110.97:29609] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/autoload_classmap.php"] [unique_id "aR9NdaOM9BReD2C3mbLcEAAAAEw"]
[Fri Nov 21 01:18:46.085413 2025] [:error] [pid 13522:tid 13715] [client 20.196.110.97:29380] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/autoload_classmap.php"] [unique_id "aR9NdqOM9BReD2C3mbLcEwAAAE8"]
[Fri Nov 21 01:18:46.400740 2025] [:error] [pid 13522:tid 13701] [client 20.196.110.97:29442] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/autoload_classmap.php"] [unique_id "aR9NdqOM9BReD2C3mbLcFgAAAEE"]
[Fri Nov 21 01:18:46.705008 2025] [:error] [pid 13536:tid 13729] [client 20.196.110.97:29501] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/autoload_classmap.php"] [unique_id "aR9NdqwnCU8z6PX3-ZmxyAAAAII"]
[Fri Nov 21 01:18:47.302375 2025] [:error] [pid 13506:tid 13693] [client 20.196.110.97:29486] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/inputs.php"] [unique_id "aR9Nd6TbGYpGB-467xZLDAAAABc"]
[Fri Nov 21 01:18:47.787502 2025] [:error] [pid 13506:tid 13687] [client 20.196.110.97:29474] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/inputs.php"] [unique_id "aR9Nd6TbGYpGB-467xZLDQAAABE"]
[Fri Nov 21 01:18:48.216190 2025] [:error] [pid 13536:tid 13733] [client 20.196.110.97:29489] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/inputs.php"] [unique_id "aR9NeKwnCU8z6PX3-ZmxzgAAAIY"]
[Fri Nov 21 01:18:48.609989 2025] [:error] [pid 13522:tid 13708] [client 20.196.110.97:29460] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/inputs.php"] [unique_id "aR9NeKOM9BReD2C3mbLcFwAAAEg"]
[Fri Nov 21 01:18:48.947501 2025] [:error] [pid 13805:tid 13831] [client 20.196.110.97:29412] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/default.php"] [unique_id "aR9NeFurU5-GZdwKvr6_KAAAAVc"]
[Fri Nov 21 01:18:49.284630 2025] [:error] [pid 13805:tid 13822] [client 20.196.110.97:29430] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/default.php"] [unique_id "aR9NeVurU5-GZdwKvr6_KQAAAU4"]
[Fri Nov 21 01:18:49.596127 2025] [:error] [pid 13506:tid 13681] [client 20.196.110.97:29391] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/default.php"] [unique_id "aR9NeaTbGYpGB-467xZLDwAAAAs"]
[Fri Nov 21 01:18:49.938964 2025] [:error] [pid 13805:tid 13811] [client 20.196.110.97:29514] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/default.php"] [unique_id "aR9NeVurU5-GZdwKvr6_KgAAAUM"]
[Fri Nov 21 01:18:50.286083 2025] [:error] [pid 13522:tid 13710] [client 20.196.110.97:29648] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fm.php"] [unique_id "aR9NeqOM9BReD2C3mbLcGgAAAEo"]
[Fri Nov 21 01:18:51.009740 2025] [:error] [pid 13506:tid 13685] [client 20.196.110.97:29512] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fm.php"] [unique_id "aR9Ne6TbGYpGB-467xZLEAAAAA8"]
[Fri Nov 21 01:18:51.638885 2025] [:error] [pid 13536:tid 13728] [client 20.196.110.97:29494] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fm.php"] [unique_id "aR9Ne6wnCU8z6PX3-Zmx1QAAAIE"]
[Fri Nov 21 01:18:51.995929 2025] [:error] [pid 13522:tid 13707] [client 20.196.110.97:29459] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fm.php"] [unique_id "aR9Ne6OM9BReD2C3mbLcHAAAAEc"]
[Fri Nov 21 01:18:52.406272 2025] [:error] [pid 13536:tid 13742] [client 20.196.110.97:29564] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/about.php"] [unique_id "aR9NfKwnCU8z6PX3-Zmx1wAAAI8"]
[Fri Nov 21 01:18:52.718097 2025] [:error] [pid 13522:tid 13708] [client 20.196.110.97:29467] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/about.php"] [unique_id "aR9NfKOM9BReD2C3mbLcHwAAAEg"]
[Fri Nov 21 01:18:53.057346 2025] [:error] [pid 13506:tid 13678] [client 20.196.110.97:29569] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/about.php"] [unique_id "aR9NfaTbGYpGB-467xZLEwAAAAg"]
[Fri Nov 21 01:18:53.388760 2025] [:error] [pid 13536:tid 13735] [client 20.196.110.97:29395] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/about.php"] [unique_id "aR9NfawnCU8z6PX3-Zmx2AAAAIg"]
[Fri Nov 21 01:18:53.803644 2025] [:error] [pid 13506:tid 13692] [client 20.196.110.97:29487] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/alfa.php"] [unique_id "aR9NfaTbGYpGB-467xZLFAAAABY"]
[Fri Nov 21 01:18:54.246735 2025] [:error] [pid 13522:tid 13711] [client 20.196.110.97:29392] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/alfa.php"] [unique_id "aR9NfqOM9BReD2C3mbLcJAAAAEs"]
[Fri Nov 21 01:18:54.747479 2025] [:error] [pid 13506:tid 13688] [client 20.196.110.97:29482] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/alfa.php"] [unique_id "aR9NfqTbGYpGB-467xZLFQAAABI"]
[Fri Nov 21 01:18:55.262654 2025] [:error] [pid 13522:tid 13717] [client 20.196.110.97:29628] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/alfa.php"] [unique_id "aR9Nf6OM9BReD2C3mbLcKQAAAFE"]
[Fri Nov 21 01:18:56.260180 2025] [:error] [pid 13506:tid 13670] [client 20.196.110.97:29432] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/buy.php"] [unique_id "aR9NgKTbGYpGB-467xZLGwAAAAA"]
[Fri Nov 21 01:18:56.758573 2025] [:error] [pid 13536:tid 13728] [client 20.196.110.97:29399] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/buy.php"] [unique_id "aR9NgKwnCU8z6PX3-Zmx3gAAAIE"]
[Fri Nov 21 01:18:57.141214 2025] [:error] [pid 13805:tid 13813] [client 20.196.110.97:29455] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/buy.php"] [unique_id "aR9NgVurU5-GZdwKvr6_MgAAAUU"]
[Fri Nov 21 01:18:57.490934 2025] [:error] [pid 13506:tid 13694] [client 20.196.110.97:29382] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/buy.php"] [unique_id "aR9NgaTbGYpGB-467xZLHgAAABg"]
[Fri Nov 21 01:18:57.879244 2025] [:error] [pid 13506:tid 13676] [client 20.196.110.97:29495] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aR9NgaTbGYpGB-467xZLIQAAAAY"]
[Fri Nov 21 01:18:58.312808 2025] [:error] [pid 13522:tid 13724] [client 20.196.110.97:29454] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aR9NgqOM9BReD2C3mbLcLgAAAFg"]
[Fri Nov 21 01:18:58.941191 2025] [:error] [pid 13522:tid 13716] [client 20.196.110.97:29483] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aR9NgqOM9BReD2C3mbLcLwAAAFA"]
[Fri Nov 21 01:18:59.707841 2025] [:error] [pid 13522:tid 13711] [client 20.196.110.97:29331] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aR9Ng6OM9BReD2C3mbLcMQAAAEs"]
[Fri Nov 21 01:19:00.906723 2025] [proxy_fcgi:error] [pid 13506:tid 13682] [client 20.196.110.97:29472] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 01:19:01.248614 2025] [proxy_fcgi:error] [pid 13506:tid 13690] [client 20.196.110.97:29472] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 01:19:01.556321 2025] [proxy_fcgi:error] [pid 13506:tid 13670] [client 20.196.110.97:29472] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 01:19:01.715547 2025] [proxy_fcgi:error] [pid 13506:tid 13693] [client 20.196.110.97:29472] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 01:19:02.018405 2025] [proxy_fcgi:error] [pid 13506:tid 13689] [client 20.196.110.97:29472] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 01:19:02.166656 2025] [:error] [pid 13506:tid 13685] [client 20.196.110.97:29472] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aR9NhqTbGYpGB-467xZLPAAAAA8"]
[Fri Nov 21 01:19:02.491926 2025] [:error] [pid 13805:tid 13823] [client 20.196.110.97:29465] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aR9NhlurU5-GZdwKvr6_MwAAAU8"]
[Fri Nov 21 01:19:02.946964 2025] [:error] [pid 13805:tid 13818] [client 20.196.110.97:29408] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aR9NhlurU5-GZdwKvr6_NAAAAUo"]
[Fri Nov 21 01:19:03.350439 2025] [:error] [pid 13805:tid 13832] [client 20.196.110.97:29400] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aR9Nh1urU5-GZdwKvr6_NgAAAVg"]
[Fri Nov 21 01:19:03.757099 2025] [:error] [pid 13536:tid 13749] [client 20.196.110.97:29559] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/article.php"] [unique_id "aR9Nh6wnCU8z6PX3-Zmx5gAAAJY"]
[Fri Nov 21 01:19:04.257030 2025] [:error] [pid 13522:tid 13717] [client 20.196.110.97:29436] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/article.php"] [unique_id "aR9NiKOM9BReD2C3mbLcNQAAAFE"]
[Fri Nov 21 01:19:04.621421 2025] [:error] [pid 13522:tid 13719] [client 20.196.110.97:29424] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/article.php"] [unique_id "aR9NiKOM9BReD2C3mbLcNgAAAFM"]
[Fri Nov 21 01:19:04.919899 2025] [:error] [pid 13536:tid 13747] [client 20.196.110.97:29421] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/article.php"] [unique_id "aR9NiKwnCU8z6PX3-Zmx6QAAAJQ"]
[Fri Nov 21 01:19:05.405392 2025] [:error] [pid 13506:tid 13680] [client 20.196.110.97:29476] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/alfa.php"] [unique_id "aR9NiaTbGYpGB-467xZLPwAAAAo"]
[Fri Nov 21 01:19:05.751085 2025] [:error] [pid 13522:tid 13713] [client 20.196.110.97:29383] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/alfa.php"] [unique_id "aR9NiaOM9BReD2C3mbLcOQAAAE0"]
[Fri Nov 21 01:19:06.135389 2025] [:error] [pid 13506:tid 13671] [client 20.196.110.97:29566] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/alfa.php"] [unique_id "aR9NiqTbGYpGB-467xZLQgAAAAE"]
[Fri Nov 21 01:19:06.518686 2025] [:error] [pid 13536:tid 13742] [client 20.196.110.97:29378] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/alfa.php"] [unique_id "aR9NiqwnCU8z6PX3-Zmx7QAAAI8"]
[Fri Nov 21 01:19:07.061416 2025] [:error] [pid 13805:tid 13830] [client 20.196.110.97:29380] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/1.php"] [unique_id "aR9Ni1urU5-GZdwKvr6_OwAAAVY"]
[Fri Nov 21 01:19:07.635730 2025] [:error] [pid 13522:tid 13710] [client 20.196.110.97:29316] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/1.php"] [unique_id "aR9Ni6OM9BReD2C3mbLcPAAAAEo"]
[Fri Nov 21 01:19:07.974186 2025] [:error] [pid 13805:tid 13810] [client 20.196.110.97:29322] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/1.php"] [unique_id "aR9Ni1urU5-GZdwKvr6_PQAAAUI"]
[Fri Nov 21 01:19:08.345919 2025] [:error] [pid 13805:tid 13823] [client 20.196.110.97:29418] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/1.php"] [unique_id "aR9NjFurU5-GZdwKvr6_PwAAAU8"]
[Fri Nov 21 01:19:08.651807 2025] [:error] [pid 13805:tid 13818] [client 20.196.110.97:29407] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/403.php"] [unique_id "aR9NjFurU5-GZdwKvr6_QAAAAUo"]
[Fri Nov 21 01:19:08.987630 2025] [:error] [pid 13522:tid 13711] [client 20.196.110.97:29531] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/403.php"] [unique_id "aR9NjKOM9BReD2C3mbLcQQAAAEs"]
[Fri Nov 21 01:19:09.287179 2025] [:error] [pid 13536:tid 13745] [client 20.196.110.97:29439] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/403.php"] [unique_id "aR9NjawnCU8z6PX3-Zmx8QAAAJI"]
[Fri Nov 21 01:19:09.615984 2025] [:error] [pid 13522:tid 13703] [client 20.196.110.97:29356] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/403.php"] [unique_id "aR9NjaOM9BReD2C3mbLcQgAAAEM"]
[Fri Nov 21 01:19:09.920029 2025] [:error] [pid 13536:tid 13750] [client 20.196.110.97:29325] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/link.php"] [unique_id "aR9NjawnCU8z6PX3-Zmx8gAAAJc"]
[Fri Nov 21 01:19:10.240871 2025] [:error] [pid 13805:tid 13809] [client 20.196.110.97:29503] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/link.php"] [unique_id "aR9NjlurU5-GZdwKvr6_RQAAAUE"]
[Fri Nov 21 01:19:10.565114 2025] [:error] [pid 13805:tid 13812] [client 20.196.110.97:29441] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/link.php"] [unique_id "aR9NjlurU5-GZdwKvr6_RgAAAUQ"]
[Fri Nov 21 01:19:12.236846 2025] [:error] [pid 13536:tid 13734] [client 20.196.110.97:29406] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/link.php"] [unique_id "aR9NkKwnCU8z6PX3-Zmx-QAAAIc"]
[Fri Nov 21 01:19:12.657893 2025] [:error] [pid 13506:tid 13689] [client 20.196.110.97:29405] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/byp.php"] [unique_id "aR9NkKTbGYpGB-467xZLTwAAABM"]
[Fri Nov 21 01:19:12.996190 2025] [:error] [pid 13805:tid 13822] [client 20.196.110.97:29493] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/byp.php"] [unique_id "aR9NkFurU5-GZdwKvr6_SAAAAU4"]
[Fri Nov 21 01:19:13.437296 2025] [:error] [pid 13805:tid 13816] [client 20.196.110.97:29398] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/byp.php"] [unique_id "aR9NkVurU5-GZdwKvr6_TAAAAUg"]
[Fri Nov 21 01:19:13.897367 2025] [:error] [pid 13536:tid 13743] [client 20.196.110.97:29413] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/byp.php"] [unique_id "aR9NkawnCU8z6PX3-Zmx_QAAAJA"]
[Fri Nov 21 01:19:14.268661 2025] [:error] [pid 13536:tid 13751] [client 20.196.110.97:29473] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws.php"] [unique_id "aR9NkqwnCU8z6PX3-Zmx_wAAAJg"]
[Fri Nov 21 01:19:14.939383 2025] [:error] [pid 13805:tid 13808] [client 20.196.110.97:29511] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws.php"] [unique_id "aR9NklurU5-GZdwKvr6_TgAAAUA"]
[Fri Nov 21 01:19:15.355484 2025] [:error] [pid 13805:tid 13820] [client 20.196.110.97:29457] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws.php"] [unique_id "aR9Nk1urU5-GZdwKvr6_UQAAAUw"]
[Fri Nov 21 01:19:16.015863 2025] [:error] [pid 13522:tid 13703] [client 20.196.110.97:29341] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws.php"] [unique_id "aR9NlKOM9BReD2C3mbLcTgAAAEM"]
[Fri Nov 21 01:19:16.353865 2025] [:error] [pid 13805:tid 13812] [client 20.196.110.97:29349] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-trackback.php"] [unique_id "aR9NlFurU5-GZdwKvr6_UwAAAUQ"]
[Fri Nov 21 01:19:16.711712 2025] [:error] [pid 13805:tid 13829] [client 20.196.110.97:29312] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-trackback.php"] [unique_id "aR9NlFurU5-GZdwKvr6_VAAAAVU"]
[Fri Nov 21 01:19:17.109101 2025] [:error] [pid 13805:tid 13811] [client 20.196.110.97:29433] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-trackback.php"] [unique_id "aR9NlVurU5-GZdwKvr6_VwAAAUM"]
[Fri Nov 21 01:19:17.448600 2025] [:error] [pid 13506:tid 13673] [client 20.196.110.97:29462] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-trackback.php"] [unique_id "aR9NlaTbGYpGB-467xZLUwAAAAM"]
[Fri Nov 21 01:19:17.806350 2025] [:error] [pid 13506:tid 13680] [client 20.196.110.97:29420] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/index.php"] [unique_id "aR9NlaTbGYpGB-467xZLVQAAAAo"]
[Fri Nov 21 01:19:18.152797 2025] [:error] [pid 13522:tid 13713] [client 20.196.110.97:29471] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/index.php"] [unique_id "aR9NlqOM9BReD2C3mbLcUwAAAE0"]
[Fri Nov 21 01:19:18.608138 2025] [:error] [pid 13805:tid 13830] [client 20.196.110.97:29541] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/index.php"] [unique_id "aR9NllurU5-GZdwKvr6_WQAAAVY"]
[Fri Nov 21 01:19:19.160255 2025] [:error] [pid 13805:tid 13827] [client 20.196.110.97:29385] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/index.php"] [unique_id "aR9Nl1urU5-GZdwKvr6_WgAAAVM"]
[Fri Nov 21 01:19:20.027663 2025] [:error] [pid 13805:tid 13819] [client 20.196.110.97:29369] [client 20.196.110.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/certificates/plugins.php"] [unique_id "aR9NmFurU5-GZdwKvr6_XQAAAUs"]
[Fri Nov 21 01:19:20.483697 2025] [:error] [pid 13536:tid 13728] [client 20.196.110.97:29396] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "aR9NmKwnCU8z6PX3-ZmyBQAAAIE"]
[Fri Nov 21 01:19:20.825209 2025] [:error] [pid 13536:tid 13742] [client 20.196.110.97:29468] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "aR9NmKwnCU8z6PX3-ZmyBgAAAI8"]
[Fri Nov 21 01:19:21.132504 2025] [:error] [pid 13506:tid 13679] [client 20.196.110.97:29333] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "aR9NmaTbGYpGB-467xZLWAAAAAk"]
[Fri Nov 21 01:19:21.456062 2025] [:error] [pid 13506:tid 13693] [client 20.196.110.97:29425] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "aR9NmaTbGYpGB-467xZLWQAAABc"]
[Fri Nov 21 01:19:21.884677 2025] [:error] [pid 13522:tid 13708] [client 20.196.110.97:29388] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aR9NmaOM9BReD2C3mbLcVwAAAEg"]
[Fri Nov 21 01:19:22.210366 2025] [:error] [pid 13522:tid 13712] [client 20.196.110.97:29394] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aR9NmqOM9BReD2C3mbLcWAAAAEw"]
[Fri Nov 21 01:19:22.569646 2025] [:error] [pid 13805:tid 13832] [client 20.196.110.97:29389] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aR9NmlurU5-GZdwKvr6_YQAAAVg"]
[Fri Nov 21 01:19:22.977285 2025] [:error] [pid 13536:tid 13735] [client 20.196.110.97:29563] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aR9NmqwnCU8z6PX3-ZmyCgAAAIg"]
[Fri Nov 21 01:19:23.443680 2025] [:error] [pid 13522:tid 13704] [client 20.196.110.97:29652] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/about.php"] [unique_id "aR9Nm6OM9BReD2C3mbLcWwAAAEQ"]
[Fri Nov 21 01:19:24.383769 2025] [:error] [pid 13506:tid 13672] [client 20.196.110.97:29500] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/about.php"] [unique_id "aR9NnKTbGYpGB-467xZLXQAAAAI"]
[Fri Nov 21 01:19:24.801406 2025] [:error] [pid 13506:tid 13673] [client 20.196.110.97:29434] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/about.php"] [unique_id "aR9NnKTbGYpGB-467xZLXwAAAAM"]
[Fri Nov 21 01:19:25.148114 2025] [:error] [pid 13536:tid 13727] [client 20.196.110.97:29390] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/about.php"] [unique_id "aR9NnawnCU8z6PX3-ZmyDQAAAIA"]
[Fri Nov 21 01:19:25.655895 2025] [:error] [pid 13805:tid 13813] [client 20.196.110.97:29435] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gmo.php"] [unique_id "aR9NnVurU5-GZdwKvr6_aQAAAUU"]
[Fri Nov 21 01:19:26.016480 2025] [:error] [pid 13805:tid 13819] [client 20.196.110.97:29419] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gmo.php"] [unique_id "aR9NnlurU5-GZdwKvr6_bAAAAUs"]
[Fri Nov 21 01:19:26.385302 2025] [:error] [pid 13805:tid 13828] [client 20.196.110.97:29469] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gmo.php"] [unique_id "aR9NnlurU5-GZdwKvr6_cAAAAVQ"]
[Fri Nov 21 01:19:26.777874 2025] [:error] [pid 13536:tid 13748] [client 20.196.110.97:29410] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gmo.php"] [unique_id "aR9NnqwnCU8z6PX3-ZmyDwAAAJU"]
[Fri Nov 21 01:19:27.254048 2025] [:error] [pid 13506:tid 13678] [client 20.196.110.97:29491] [client 20.196.110.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aR9Nn6TbGYpGB-467xZLYgAAAAg"]
[Fri Nov 21 01:19:27.731474 2025] [:error] [pid 13522:tid 13701] [client 20.196.110.97:29620] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/css/index.php"] [unique_id "aR9Nn6OM9BReD2C3mbLcXgAAAEE"]
[Fri Nov 21 01:19:28.180907 2025] [:error] [pid 13536:tid 13749] [client 20.196.110.97:29313] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/css/index.php"] [unique_id "aR9NoKwnCU8z6PX3-ZmyEQAAAJY"]
[Fri Nov 21 01:19:28.497092 2025] [:error] [pid 13522:tid 13707] [client 20.196.110.97:29429] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/css/index.php"] [unique_id "aR9NoKOM9BReD2C3mbLcYAAAAEc"]
[Fri Nov 21 01:19:28.827503 2025] [:error] [pid 13805:tid 13816] [client 20.196.110.97:29478] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "aR9NoFurU5-GZdwKvr6_eQAAAUg"]
[Fri Nov 21 01:19:29.205129 2025] [:error] [pid 13805:tid 13820] [client 20.196.110.97:29315] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "aR9NoVurU5-GZdwKvr6_ewAAAUw"]
[Fri Nov 21 01:19:29.740394 2025] [:error] [pid 13506:tid 13690] [client 20.196.110.97:29377] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "aR9NoaTbGYpGB-467xZLbwAAABQ"]
[Fri Nov 21 01:19:30.055682 2025] [:error] [pid 13805:tid 13812] [client 20.196.110.97:29450] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "aR9NolurU5-GZdwKvr6_fwAAAUQ"]
[Fri Nov 21 01:19:30.457837 2025] [:error] [pid 13805:tid 13815] [client 20.196.110.97:29397] [client 20.196.110.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "aR9NolurU5-GZdwKvr6_gAAAAUc"]
[Fri Nov 21 01:19:30.847781 2025] [:error] [pid 13522:tid 13720] [client 20.196.110.97:29428] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aR9NoqOM9BReD2C3mbLcZwAAAFQ"]
[Fri Nov 21 01:19:31.180863 2025] [:error] [pid 13536:tid 13738] [client 20.196.110.97:29416] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aR9No6wnCU8z6PX3-ZmyFgAAAIs"]
[Fri Nov 21 01:19:31.504553 2025] [:error] [pid 13536:tid 13743] [client 20.196.110.97:29423] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aR9No6wnCU8z6PX3-ZmyGQAAAJA"]
[Fri Nov 21 01:19:31.901656 2025] [:error] [pid 13805:tid 13811] [client 20.196.110.97:29364] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aR9No1urU5-GZdwKvr6_ggAAAUM"]
[Fri Nov 21 01:19:32.383888 2025] [:error] [pid 13506:tid 13670] [client 20.196.110.97:29352] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aR9NpKTbGYpGB-467xZLdwAAAAA"]
[Fri Nov 21 01:19:32.721851 2025] [:error] [pid 13522:tid 13715] [client 20.196.110.97:29363] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aR9NpKOM9BReD2C3mbLcagAAAE8"]
[Fri Nov 21 01:19:33.030208 2025] [:error] [pid 13506:tid 13684] [client 20.196.110.97:29346] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aR9NpaTbGYpGB-467xZLeAAAAA4"]
[Fri Nov 21 01:19:33.354527 2025] [:error] [pid 13522:tid 13724] [client 20.196.110.97:29417] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aR9NpaOM9BReD2C3mbLcbAAAAFg"]
[Fri Nov 21 01:19:33.684177 2025] [:error] [pid 13522:tid 13708] [client 20.196.110.97:29321] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aR9NpaOM9BReD2C3mbLcbwAAAEg"]
[Fri Nov 21 01:19:34.016522 2025] [:error] [pid 13536:tid 13736] [client 20.196.110.97:29347] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aR9NpqwnCU8z6PX3-ZmyGwAAAIk"]
[Fri Nov 21 01:19:34.350153 2025] [:error] [pid 13506:tid 13673] [client 20.196.110.97:29343] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aR9NpqTbGYpGB-467xZLfgAAAAM"]
[Fri Nov 21 01:19:34.700179 2025] [:error] [pid 13506:tid 13687] [client 20.196.110.97:29415] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aR9NpqTbGYpGB-467xZLgQAAABE"]
[Fri Nov 21 01:19:35.062655 2025] [:error] [pid 13536:tid 13743] [client 20.196.110.97:29384] [client 20.196.110.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Requests/Text/admin.php"] [unique_id "aR9Np6wnCU8z6PX3-ZmyIQAAAJA"]
[Fri Nov 21 01:19:35.408615 2025] [:error] [pid 13805:tid 13817] [client 20.196.110.97:29357] [client 20.196.110.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aR9Np1urU5-GZdwKvr6_iQAAAUk"]
[Fri Nov 21 01:19:35.723612 2025] [:error] [pid 13536:tid 13727] [client 20.196.110.97:29515] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/index/function.php"] [unique_id "aR9Np6wnCU8z6PX3-ZmyJAAAAIA"]
[Fri Nov 21 01:19:36.056782 2025] [:error] [pid 13805:tid 13816] [client 20.196.110.97:29329] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/index/function.php"] [unique_id "aR9NqFurU5-GZdwKvr6_jwAAAUg"]
[Fri Nov 21 01:19:36.364377 2025] [:error] [pid 13522:tid 13706] [client 20.196.110.97:29260] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/index/function.php"] [unique_id "aR9NqKOM9BReD2C3mbLccQAAAEY"]
[Fri Nov 21 01:19:36.680451 2025] [:error] [pid 13805:tid 13808] [client 20.196.110.97:29368] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aR9NqFurU5-GZdwKvr6_kAAAAUA"]
[Fri Nov 21 01:19:37.070676 2025] [:error] [pid 13536:tid 13749] [client 20.196.110.97:29327] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aR9NqawnCU8z6PX3-ZmyKAAAAJY"]
[Fri Nov 21 01:19:37.446479 2025] [:error] [pid 13536:tid 13746] [client 20.196.110.97:29627] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aR9NqawnCU8z6PX3-ZmyKgAAAJM"]
[Fri Nov 21 01:19:37.816016 2025] [:error] [pid 13522:tid 13704] [client 20.196.110.97:29184] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aR9NqaOM9BReD2C3mbLccgAAAEQ"]
[Fri Nov 21 01:19:38.618701 2025] [:error] [pid 13506:tid 13673] [client 20.196.110.97:29360] [client 20.196.110.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/dist/preferences/wp-login.php"] [unique_id "aR9NqqTbGYpGB-467xZLiQAAAAM"]
[Fri Nov 21 01:19:38.925707 2025] [:error] [pid 13805:tid 13817] [client 20.196.110.97:29253] [client 20.196.110.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aR9NqlurU5-GZdwKvr6_lgAAAUk"]
[Fri Nov 21 01:19:39.231644 2025] [:error] [pid 13522:tid 13709] [client 20.196.110.97:29544] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ww1.php"] [unique_id "aR9Nq6OM9BReD2C3mbLcdQAAAEk"]
[Fri Nov 21 01:19:39.582742 2025] [:error] [pid 13805:tid 13822] [client 20.196.110.97:29324] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ww1.php"] [unique_id "aR9Nq1urU5-GZdwKvr6_mQAAAU4"]
[Fri Nov 21 01:19:39.902208 2025] [:error] [pid 13805:tid 13813] [client 20.196.110.97:29257] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ww1.php"] [unique_id "aR9Nq1urU5-GZdwKvr6_mgAAAUU"]
[Fri Nov 21 01:19:40.250885 2025] [:error] [pid 13522:tid 13707] [client 20.196.110.97:29426] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/qqq.php"] [unique_id "aR9NrKOM9BReD2C3mbLcegAAAEc"]
[Fri Nov 21 01:19:40.590917 2025] [:error] [pid 13522:tid 13711] [client 20.196.110.97:29317] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/qqq.php"] [unique_id "aR9NrKOM9BReD2C3mbLcfAAAAEs"]
[Fri Nov 21 01:19:40.898270 2025] [:error] [pid 13522:tid 13710] [client 20.196.110.97:29298] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/qqq.php"] [unique_id "aR9NrKOM9BReD2C3mbLcfQAAAEo"]
[Fri Nov 21 01:19:41.214126 2025] [:error] [pid 13522:tid 13712] [client 20.196.110.97:29274] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/qqq.php"] [unique_id "aR9NraOM9BReD2C3mbLcfgAAAEw"]
[Fri Nov 21 01:19:41.523360 2025] [:error] [pid 13536:tid 13736] [client 20.196.110.97:29292] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/about/function.php"] [unique_id "aR9NrawnCU8z6PX3-ZmyNAAAAIk"]
[Fri Nov 21 01:19:41.826595 2025] [:error] [pid 13506:tid 13692] [client 20.196.110.97:29296] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/about/function.php"] [unique_id "aR9NraTbGYpGB-467xZLjwAAABY"]
[Fri Nov 21 01:19:42.127707 2025] [:error] [pid 13536:tid 13737] [client 20.196.110.97:29323] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/about/function.php"] [unique_id "aR9NrqwnCU8z6PX3-ZmyNgAAAIo"]
[Fri Nov 21 01:19:42.422809 2025] [:error] [pid 13805:tid 13815] [client 20.196.110.97:29319] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/about/function.php"] [unique_id "aR9NrlurU5-GZdwKvr6_ngAAAUc"]
[Fri Nov 21 01:19:42.720358 2025] [:error] [pid 13536:tid 13743] [client 20.196.110.97:29373] [client 20.196.110.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/theme-compat/chosen.php"] [unique_id "aR9NrqwnCU8z6PX3-ZmyOwAAAJA"]
[Fri Nov 21 01:19:43.039413 2025] [:error] [pid 13536:tid 13738] [client 20.196.110.97:29259] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin/function.php"] [unique_id "aR9Nr6wnCU8z6PX3-ZmyPgAAAIs"]
[Fri Nov 21 01:19:43.342240 2025] [:error] [pid 13506:tid 13672] [client 20.196.110.97:29614] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin/function.php"] [unique_id "aR9Nr6TbGYpGB-467xZLkQAAAAI"]
[Fri Nov 21 01:19:43.650391 2025] [:error] [pid 13506:tid 13690] [client 20.196.110.97:29350] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin/function.php"] [unique_id "aR9Nr6TbGYpGB-467xZLkgAAABQ"]
[Fri Nov 21 01:19:43.945798 2025] [:error] [pid 13522:tid 13709] [client 20.196.110.97:29339] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin/function.php"] [unique_id "aR9Nr6OM9BReD2C3mbLchAAAAEk"]
[Fri Nov 21 01:19:44.244105 2025] [:error] [pid 13522:tid 13723] [client 20.196.110.97:29263] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aR9NsKOM9BReD2C3mbLchQAAAFc"]
[Fri Nov 21 01:19:44.576360 2025] [:error] [pid 13522:tid 13713] [client 20.196.110.97:29287] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aR9NsKOM9BReD2C3mbLchwAAAE0"]
[Fri Nov 21 01:19:44.876382 2025] [:error] [pid 13522:tid 13715] [client 20.196.110.97:29330] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aR9NsKOM9BReD2C3mbLciQAAAE8"]
[Fri Nov 21 01:19:45.199514 2025] [:error] [pid 13536:tid 13737] [client 20.196.110.97:29345] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aR9NsawnCU8z6PX3-ZmyQQAAAIo"]
[Fri Nov 21 01:19:45.524443 2025] [:error] [pid 13506:tid 13673] [client 20.196.110.97:29342] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aR9NsaTbGYpGB-467xZLkwAAAAM"]
[Fri Nov 21 01:19:45.874406 2025] [:error] [pid 13506:tid 13680] [client 20.196.110.97:29365] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aR9NsaTbGYpGB-467xZLlAAAAAo"]
[Fri Nov 21 01:19:46.187476 2025] [:error] [pid 13805:tid 13811] [client 20.196.110.97:29348] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aR9NslurU5-GZdwKvr6_pQAAAUM"]
[Fri Nov 21 01:19:46.492416 2025] [:error] [pid 13506:tid 13687] [client 20.196.110.97:29279] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aR9NsqTbGYpGB-467xZLlQAAABE"]
[Fri Nov 21 01:19:46.830328 2025] [:error] [pid 13805:tid 13820] [client 20.196.110.97:29337] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aR9NslurU5-GZdwKvr6_qwAAAUw"]
[Fri Nov 21 01:19:47.140652 2025] [:error] [pid 13805:tid 13828] [client 20.196.110.97:29251] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aR9Ns1urU5-GZdwKvr6_rAAAAVQ"]
[Fri Nov 21 01:19:47.471981 2025] [:error] [pid 13805:tid 13826] [client 20.196.110.97:29361] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aR9Ns1urU5-GZdwKvr6_rQAAAVI"]
[Fri Nov 21 01:19:47.800454 2025] [:error] [pid 13805:tid 13821] [client 20.196.110.97:29248] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aR9Ns1urU5-GZdwKvr6_sAAAAU0"]
[Fri Nov 21 01:19:48.167445 2025] [:error] [pid 13506:tid 13670] [client 20.196.110.97:29447] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/setup-config.php"] [unique_id "aR9NtKTbGYpGB-467xZLmQAAAAA"]
[Fri Nov 21 01:19:48.490333 2025] [:error] [pid 13506:tid 13674] [client 20.196.110.97:29393] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/setup-config.php"] [unique_id "aR9NtKTbGYpGB-467xZLmgAAAAQ"]
[Fri Nov 21 01:19:48.810808 2025] [:error] [pid 13506:tid 13683] [client 20.196.110.97:29314] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/setup-config.php"] [unique_id "aR9NtKTbGYpGB-467xZLnQAAAA0"]
[Fri Nov 21 01:19:49.120888 2025] [:error] [pid 13536:tid 13728] [client 20.196.110.97:29305] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/setup-config.php"] [unique_id "aR9NtawnCU8z6PX3-ZmySAAAAIE"]
[Fri Nov 21 01:19:49.449247 2025] [:error] [pid 13506:tid 13694] [client 20.196.110.97:29264] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aR9NtaTbGYpGB-467xZLoAAAABg"]
[Fri Nov 21 01:19:49.776613 2025] [:error] [pid 13805:tid 13809] [client 20.196.110.97:29267] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aR9NtVurU5-GZdwKvr6_tQAAAUE"]
[Fri Nov 21 01:19:50.131356 2025] [:error] [pid 13805:tid 13827] [client 20.196.110.97:29359] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aR9NtlurU5-GZdwKvr6_uwAAAVM"]
[Fri Nov 21 01:19:50.489615 2025] [:error] [pid 13805:tid 13812] [client 20.196.110.97:29387] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aR9NtlurU5-GZdwKvr6_vAAAAUQ"]
[Fri Nov 21 01:19:50.845382 2025] [:error] [pid 13805:tid 13810] [client 20.196.110.97:29328] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aR9NtlurU5-GZdwKvr6_wAAAAUI"]
[Fri Nov 21 01:19:51.146436 2025] [:error] [pid 13805:tid 13819] [client 20.196.110.97:29286] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aR9Nt1urU5-GZdwKvr6_wgAAAUs"]
[Fri Nov 21 01:19:51.495155 2025] [:error] [pid 13536:tid 13736] [client 20.196.110.97:29271] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aR9Nt6wnCU8z6PX3-ZmySwAAAIk"]
[Fri Nov 21 01:19:51.836353 2025] [:error] [pid 13805:tid 13828] [client 20.196.110.97:29272] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aR9Nt1urU5-GZdwKvr6_xQAAAVQ"]
[Fri Nov 21 01:19:52.133922 2025] [:error] [pid 13805:tid 13822] [client 20.196.110.97:29289] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aR9NuFurU5-GZdwKvr6_xwAAAU4"]
[Fri Nov 21 01:19:52.468953 2025] [:error] [pid 13506:tid 13677] [client 20.196.110.97:29375] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aR9NuKTbGYpGB-467xZLpAAAAAc"]
[Fri Nov 21 01:19:52.787118 2025] [:error] [pid 13805:tid 13832] [client 20.196.110.97:29262] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aR9NuFurU5-GZdwKvr6_ygAAAVg"]
[Fri Nov 21 01:19:53.112006 2025] [:error] [pid 13506:tid 13685] [client 20.196.110.97:29258] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aR9NuaTbGYpGB-467xZLpQAAAA8"]
[Fri Nov 21 01:19:53.438650 2025] [:error] [pid 13506:tid 13686] [client 20.196.110.97:29541] [client 20.196.110.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aR9NuaTbGYpGB-467xZLpgAAABA"]
[Fri Nov 21 01:19:53.794727 2025] [:error] [pid 13506:tid 13679] [client 20.196.110.97:29409] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/radio.php"] [unique_id "aR9NuaTbGYpGB-467xZLqAAAAAk"]
[Fri Nov 21 01:19:54.103449 2025] [:error] [pid 13522:tid 13703] [client 20.196.110.97:29186] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/radio.php"] [unique_id "aR9NuqOM9BReD2C3mbLclQAAAEM"]
[Fri Nov 21 01:19:54.405811 2025] [:error] [pid 13522:tid 13717] [client 20.196.110.97:29490] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/radio.php"] [unique_id "aR9NuqOM9BReD2C3mbLclwAAAFE"]
[Fri Nov 21 01:19:54.705981 2025] [:error] [pid 13805:tid 13819] [client 20.196.110.97:29252] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aR9NulurU5-GZdwKvr6_zwAAAUs"]
[Fri Nov 21 01:19:55.050085 2025] [:error] [pid 13536:tid 13732] [client 20.196.110.97:29195] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aR9Nu6wnCU8z6PX3-ZmyUgAAAIU"]
[Fri Nov 21 01:19:55.366943 2025] [:error] [pid 13522:tid 13705] [client 20.196.110.97:29326] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aR9Nu6OM9BReD2C3mbLcmwAAAEU"]
[Fri Nov 21 01:19:55.662604 2025] [:error] [pid 13522:tid 13709] [client 20.196.110.97:29358] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aR9Nu6OM9BReD2C3mbLcnAAAAEk"]
[Fri Nov 21 01:19:55.986106 2025] [:error] [pid 13522:tid 13701] [client 20.196.110.97:29207] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aR9Nu6OM9BReD2C3mbLcnQAAAEE"]
[Fri Nov 21 01:19:56.339629 2025] [:error] [pid 13506:tid 13682] [client 20.196.110.97:29285] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aR9NvKTbGYpGB-467xZLrAAAAAw"]
[Fri Nov 21 01:19:56.666486 2025] [:error] [pid 13536:tid 13741] [client 20.196.110.97:29422] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aR9NvKwnCU8z6PX3-ZmyWAAAAI4"]
[Fri Nov 21 01:19:57.007729 2025] [:error] [pid 13536:tid 13751] [client 20.196.110.97:29484] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aR9NvawnCU8z6PX3-ZmyWgAAAJg"]
[Fri Nov 21 01:19:57.329052 2025] [:error] [pid 13506:tid 13681] [client 20.196.110.97:29249] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/admin.php"] [unique_id "aR9NvaTbGYpGB-467xZLsgAAAAs"]
[Fri Nov 21 01:19:57.671276 2025] [:error] [pid 13805:tid 13813] [client 20.196.110.97:29297] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/admin.php"] [unique_id "aR9NvVurU5-GZdwKvr6_0gAAAUU"]
[Fri Nov 21 01:19:58.006342 2025] [:error] [pid 13805:tid 13821] [client 20.196.110.97:29224] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/admin.php"] [unique_id "aR9NvlurU5-GZdwKvr6_1AAAAU0"]
[Fri Nov 21 01:19:58.419503 2025] [:error] [pid 13805:tid 13829] [client 20.196.110.97:29193] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/admin.php"] [unique_id "aR9NvlurU5-GZdwKvr6_1wAAAVU"]
[Fri Nov 21 01:19:58.718515 2025] [:error] [pid 13506:tid 13686] [client 20.196.110.97:29293] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "aR9NvqTbGYpGB-467xZLtgAAABA"]
[Fri Nov 21 01:19:59.048643 2025] [:error] [pid 13805:tid 13811] [client 20.196.110.97:29344] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "aR9Nv1urU5-GZdwKvr6_2gAAAUM"]
[Fri Nov 21 01:19:59.617715 2025] [:error] [pid 13506:tid 13670] [client 20.196.110.97:29266] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "aR9Nv6TbGYpGB-467xZLtwAAAAA"]
[Fri Nov 21 01:19:59.936581 2025] [:error] [pid 13536:tid 13743] [client 20.196.110.97:29367] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "aR9Nv6wnCU8z6PX3-ZmyWwAAAJA"]
[Fri Nov 21 01:20:00.301044 2025] [:error] [pid 13536:tid 13727] [client 20.196.110.97:29372] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aR9NwKwnCU8z6PX3-ZmyXAAAAIA"]
[Fri Nov 21 01:20:00.646565 2025] [:error] [pid 13536:tid 13733] [client 20.196.110.97:29241] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aR9NwKwnCU8z6PX3-ZmyYAAAAIY"]
[Fri Nov 21 01:20:00.967044 2025] [:error] [pid 13536:tid 13730] [client 20.196.110.97:29366] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aR9NwKwnCU8z6PX3-ZmyYgAAAIM"]
[Fri Nov 21 01:20:01.308869 2025] [:error] [pid 13506:tid 13674] [client 20.196.110.97:29300] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aR9NwaTbGYpGB-467xZLuQAAAAQ"]
[Fri Nov 21 01:20:01.632302 2025] [:error] [pid 13522:tid 13710] [client 20.196.110.97:29338] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aR9NwaOM9BReD2C3mbLcogAAAEo"]
[Fri Nov 21 01:20:01.965872 2025] [:error] [pid 13506:tid 13679] [client 20.196.110.97:29427] [client 20.196.110.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aR9NwaTbGYpGB-467xZLugAAAAk"]
[Fri Nov 21 01:20:03.879880 2025] [proxy_fcgi:error] [pid 13522:tid 13724] [client 20.196.110.97:29650] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 01:20:04.031651 2025] [proxy_fcgi:error] [pid 13522:tid 13709] [client 20.196.110.97:29650] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 01:20:04.179300 2025] [:error] [pid 13522:tid 13701] [client 20.196.110.97:29650] [client 20.196.110.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aR9NxKOM9BReD2C3mbLcqgAAAEE"]
[Fri Nov 21 01:20:04.494522 2025] [:error] [pid 13506:tid 13681] [client 20.196.110.97:29217] [client 20.196.110.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/block-patterns/index.php"] [unique_id "aR9NxKTbGYpGB-467xZLvQAAAAs"]
[Fri Nov 21 01:20:04.838459 2025] [proxy_fcgi:error] [pid 13522:tid 13722] [client 20.196.110.97:29189] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 01:20:05.000685 2025] [proxy_fcgi:error] [pid 13522:tid 13720] [client 20.196.110.97:29189] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 01:20:05.158715 2025] [proxy_fcgi:error] [pid 13522:tid 13723] [client 20.196.110.97:29189] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 01:20:05.310336 2025] [proxy_fcgi:error] [pid 13522:tid 13715] [client 20.196.110.97:29189] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 01:20:05.493226 2025] [proxy_fcgi:error] [pid 13522:tid 13711] [client 20.196.110.97:29189] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 01:20:05.645165 2025] [proxy_fcgi:error] [pid 13522:tid 13702] [client 20.196.110.97:29189] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 01:20:05.796628 2025] [proxy_fcgi:error] [pid 13522:tid 13712] [client 20.196.110.97:29189] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:22:02.754164 2025] [proxy_fcgi:error] [pid 46237:tid 46247] [client 45.132.227.55:21083] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:22:03.247769 2025] [proxy_fcgi:error] [pid 46237:tid 46241] [client 45.132.227.55:21083] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:22:03.787704 2025] [proxy_fcgi:error] [pid 46237:tid 46239] [client 45.132.227.55:21083] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:22:04.223416 2025] [proxy_fcgi:error] [pid 46237:tid 46242] [client 45.132.227.55:21083] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:22:04.703504 2025] [proxy_fcgi:error] [pid 46237:tid 46260] [client 45.132.227.55:21083] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:22:05.221144 2025] [proxy_fcgi:error] [pid 46237:tid 46254] [client 45.132.227.55:21083] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:22:05.653459 2025] [proxy_fcgi:error] [pid 46237:tid 46263] [client 45.132.227.55:21083] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:22:06.082474 2025] [proxy_fcgi:error] [pid 46237:tid 46256] [client 45.132.227.55:21083] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:22:07.035016 2025] [proxy_fcgi:error] [pid 46237:tid 46241] [client 45.132.227.55:21083] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:22:07.937457 2025] [proxy_fcgi:error] [pid 46237:tid 46261] [client 45.132.227.55:21083] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:22:08.371863 2025] [proxy_fcgi:error] [pid 46237:tid 46242] [client 45.132.227.55:21083] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:22:08.833785 2025] [proxy_fcgi:error] [pid 46237:tid 46251] [client 45.132.227.55:21083] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:22:09.274274 2025] [proxy_fcgi:error] [pid 46237:tid 46260] [client 45.132.227.55:21083] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:22:09.732797 2025] [proxy_fcgi:error] [pid 46237:tid 46244] [client 45.132.227.55:21083] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:22:10.163055 2025] [proxy_fcgi:error] [pid 46237:tid 46255] [client 45.132.227.55:21083] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:22:10.612098 2025] [proxy_fcgi:error] [pid 46237:tid 46263] [client 45.132.227.55:21083] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:22:11.052928 2025] [proxy_fcgi:error] [pid 46237:tid 46245] [client 45.132.227.55:21083] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:22:11.514294 2025] [proxy_fcgi:error] [pid 46237:tid 46258] [client 45.132.227.55:21083] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:22:17.752622 2025] [:error] [pid 46237:tid 46241] [client 45.132.227.55:21083] [client 45.132.227.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aR_3CSo2qlis7MUDbMI9rgAAAcI"]
[Fri Nov 21 13:22:19.929706 2025] [:error] [pid 17882:tid 17903] [client 172.98.32.91:24219] [client 172.98.32.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aR_3C4wFFssEn348h96c9gAAAVM"]
[Fri Nov 21 13:22:22.221946 2025] [proxy_fcgi:error] [pid 17882:tid 17889] [client 172.98.32.98:53879] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:22:23.524468 2025] [:error] [pid 17882:tid 17901] [client 172.98.32.98:53879] [client 172.98.32.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.dwelectservices.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aR_3D4wFFssEn348h96dDAAAAVE"]
[Fri Nov 21 13:22:25.334321 2025] [proxy_fcgi:error] [pid 17882:tid 17893] [client 172.98.32.96:43441] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:22:26.706194 2025] [:error] [pid 17882:tid 17895] [client 172.98.32.96:43441] [client 172.98.32.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aR_3EowFFssEn348h96dIwAAAUs"]
[Fri Nov 21 13:22:28.050131 2025] [proxy_fcgi:error] [pid 17882:tid 17905] [client 45.132.227.59:26195] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:22:30.350396 2025] [:error] [pid 17882:tid 17897] [client 45.132.227.59:26195] [client 45.132.227.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aR_3FowFFssEn348h96dPAAAAU0"]
[Fri Nov 21 13:22:31.714311 2025] [:error] [pid 13327:tid 13409] [client 172.98.32.83:27063] [client 172.98.32.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aR_3F_BXf-8B6mFkLePujwAAAJg"]
[Fri Nov 21 13:22:32.589413 2025] [:error] [pid 46194:tid 46208] [client 136.144.42.78:37285] [client 136.144.42.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aR_3GJDRPrSqclDqoQH4cwAAAYs"]
[Fri Nov 21 13:22:33.450280 2025] [:error] [pid 13326:tid 13376] [client 172.98.32.89:31941] [client 172.98.32.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aR_3Gdh942-HkDIkOWpZegAAAFI"]
[Fri Nov 21 13:22:34.357883 2025] [:error] [pid 46237:tid 46261] [client 172.98.32.96:33047] [client 172.98.32.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aR_3Gio2qlis7MUDbMI9-AAAAdY"]
[Fri Nov 21 13:22:35.319326 2025] [:error] [pid 13325:tid 13337] [client 172.98.32.93:44601] [client 172.98.32.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aR_3GyBUXj9tD75On3AT9AAAAAc"]
[Fri Nov 21 13:22:36.693375 2025] [:error] [pid 13326:tid 13378] [client 172.98.32.98:26659] [client 172.98.32.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aR_3HNh942-HkDIkOWpZhQAAAFQ"]
[Fri Nov 21 13:22:37.578019 2025] [proxy_fcgi:error] [pid 13326:tid 13364] [client 45.132.227.65:61183] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:22:38.546473 2025] [:error] [pid 13326:tid 13378] [client 45.132.227.65:61183] [client 45.132.227.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.dwelectservices.com.au"] [uri "/filemanager.php"] [unique_id "aR_3Hth942-HkDIkOWpZkQAAAFQ"]
[Fri Nov 21 13:22:40.331453 2025] [:error] [pid 13326:tid 13374] [client 45.132.227.66:64395] [client 45.132.227.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aR_3INh942-HkDIkOWpZmgAAAFA"]
[Fri Nov 21 13:22:41.786255 2025] [:error] [pid 17882:tid 17898] [client 45.132.227.64:34673] [client 45.132.227.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aR_3IYwFFssEn348h96dYAAAAU4"]
[Fri Nov 21 13:22:42.644777 2025] [proxy_fcgi:error] [pid 13326:tid 13370] [client 172.98.32.80:60969] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:22:43.089318 2025] [:error] [pid 13326:tid 13376] [client 172.98.32.80:60969] [client 172.98.32.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aR_3I9h942-HkDIkOWpZogAAAFI"]
[Fri Nov 21 13:22:44.057013 2025] [proxy_fcgi:error] [pid 17882:tid 17908] [client 136.144.42.75:57309] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:22:45.365981 2025] [proxy_fcgi:error] [pid 17882:tid 17889] [client 136.144.42.75:57309] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:22:46.715422 2025] [:error] [pid 17882:tid 17903] [client 136.144.42.75:57309] [client 136.144.42.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aR_3JowFFssEn348h96ddwAAAVM"]
[Fri Nov 21 13:22:47.622566 2025] [proxy_fcgi:error] [pid 17882:tid 17898] [client 172.98.32.77:26763] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:22:48.072310 2025] [:error] [pid 17882:tid 17884] [client 172.98.32.77:26763] [client 172.98.32.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aR_3KIwFFssEn348h96digAAAUA"]
[Fri Nov 21 13:22:49.008989 2025] [proxy_fcgi:error] [pid 17882:tid 17895] [client 172.98.32.82:30089] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:22:49.868784 2025] [:error] [pid 17882:tid 17902] [client 172.98.32.82:30089] [client 172.98.32.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "aR_3KYwFFssEn348h96dmAAAAVI"]
[Fri Nov 21 13:22:51.273943 2025] [:error] [pid 46194:tid 46197] [client 172.98.32.83:53669] [client 172.98.32.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aR_3K5DRPrSqclDqoQH4kAAAAYA"]
[Fri Nov 21 13:22:52.634660 2025] [proxy_fcgi:error] [pid 51434:tid 51437] [client 172.98.32.95:44641] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:22:53.115963 2025] [proxy_fcgi:error] [pid 51434:tid 51436] [client 172.98.32.95:44641] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:22:54.056353 2025] [:error] [pid 51434:tid 51460] [client 172.98.32.95:44641] [client 172.98.32.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aR_3LvU96liplEDkw_RP8gAAARg"]
[Fri Nov 21 13:22:55.382333 2025] [:error] [pid 17882:tid 17891] [client 45.132.227.55:26075] [client 45.132.227.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aR_3L4wFFssEn348h96dnAAAAUc"]
[Fri Nov 21 13:22:56.732213 2025] [:error] [pid 46276:tid 46296] [client 172.98.32.84:57297] [client 172.98.32.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aR_3MHbpxuSAfajqqKPi7QAAAg0"]
[Fri Nov 21 13:22:57.607684 2025] [:error] [pid 46237:tid 46253] [client 172.98.32.95:34469] [client 172.98.32.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aR_3MSo2qlis7MUDbMI-OAAAAc4"]
[Fri Nov 21 13:22:58.492225 2025] [:error] [pid 17882:tid 17901] [client 172.98.32.85:44173] [client 172.98.32.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aR_3MowFFssEn348h96dogAAAVE"]
[Fri Nov 21 13:23:01.565783 2025] [proxy_fcgi:error] [pid 51434:tid 51459] [client 45.132.227.60:42121] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:23:01.991848 2025] [:error] [pid 51434:tid 51437] [client 45.132.227.60:42121] [client 45.132.227.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "aR_3NfU96liplEDkw_RQEgAAAQE"]
[Fri Nov 21 13:23:02.919259 2025] [:error] [pid 51434:tid 51450] [client 172.98.32.95:43451] [client 172.98.32.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "aR_3NvU96liplEDkw_RQFwAAAQ4"]
[Fri Nov 21 13:23:03.877686 2025] [:error] [pid 46276:tid 46286] [client 45.132.227.64:55481] [client 45.132.227.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aR_3N3bpxuSAfajqqKPi9gAAAgM"]
[Fri Nov 21 13:23:05.694245 2025] [proxy_fcgi:error] [pid 46276:tid 46301] [client 172.98.32.81:35135] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:23:06.572744 2025] [proxy_fcgi:error] [pid 46276:tid 46291] [client 172.98.32.81:35135] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:23:09.284524 2025] [:error] [pid 46276:tid 46295] [client 172.98.32.81:35135] [client 172.98.32.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/admin.php"] [unique_id "aR_3PXbpxuSAfajqqKPjBAAAAgw"]
[Fri Nov 21 13:23:11.498620 2025] [:error] [pid 51434:tid 51454] [client 45.132.227.53:37777] [client 45.132.227.53] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.132.227.53, incrementing brute counter"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aR_3P_U96liplEDkw_RQMAAAARI"]
[Fri Nov 21 13:23:11.953816 2025] [proxy_fcgi:error] [pid 51434:tid 51453] [client 45.132.227.53:37777] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:23:14.231332 2025] [proxy_fcgi:error] [pid 51434:tid 51448] [client 45.132.227.53:37777] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:23:14.681830 2025] [proxy_fcgi:error] [pid 51434:tid 51442] [client 45.132.227.53:37777] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:23:16.914691 2025] [:error] [pid 51434:tid 51437] [client 45.132.227.53:37777] [client 45.132.227.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aR_3RPU96liplEDkw_RQSgAAAQE"]
[Fri Nov 21 13:23:17.824505 2025] [proxy_fcgi:error] [pid 46237:tid 46244] [client 136.144.42.73:45073] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:23:18.263364 2025] [proxy_fcgi:error] [pid 46237:tid 46260] [client 136.144.42.73:45073] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:23:18.689818 2025] [:error] [pid 46237:tid 46243] [client 136.144.42.73:45073] [client 136.144.42.73] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.144.42.73, incrementing brute counter"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aR_3Rio2qlis7MUDbMI-lQAAAcQ"]
[Fri Nov 21 13:23:19.554398 2025] [:error] [pid 46237:tid 46259] [client 136.144.42.73:45073] [client 136.144.42.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/item.php"] [unique_id "aR_3Ryo2qlis7MUDbMI-mwAAAdQ"]
[Fri Nov 21 13:23:22.865390 2025] [proxy_fcgi:error] [pid 13326:tid 13371] [client 45.132.227.58:31121] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:23:23.311652 2025] [proxy_fcgi:error] [pid 13326:tid 13372] [client 45.132.227.58:31121] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:23:24.210646 2025] [proxy_fcgi:error] [pid 13326:tid 13367] [client 45.132.227.58:31121] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:23:25.126168 2025] [:error] [pid 13326:tid 13363] [client 45.132.227.58:31121] [client 45.132.227.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aR_3Tdh942-HkDIkOWpa6gAAAEU"]
[Fri Nov 21 13:23:26.002712 2025] [proxy_fcgi:error] [pid 46276:tid 46294] [client 172.98.32.87:51667] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:23:28.089719 2025] [proxy_fcgi:error] [pid 46276:tid 46290] [client 172.98.32.87:51667] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:23:29.015331 2025] [proxy_fcgi:error] [pid 46276:tid 46283] [client 172.98.32.87:51667] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:23:29.919435 2025] [proxy_fcgi:error] [pid 46276:tid 46296] [client 172.98.32.87:51667] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:23:30.409976 2025] [:error] [pid 46276:tid 46305] [client 172.98.32.87:51667] [client 172.98.32.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aR_3UnbpxuSAfajqqKPjawAAAhY"]
[Fri Nov 21 13:23:31.326809 2025] [proxy_fcgi:error] [pid 46237:tid 46246] [client 136.144.42.73:53391] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:23:31.759512 2025] [proxy_fcgi:error] [pid 46237:tid 46244] [client 136.144.42.73:53391] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:23:32.189255 2025] [:error] [pid 46237:tid 46258] [client 136.144.42.73:53391] [client 136.144.42.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aR_3VCo2qlis7MUDbMI-xQAAAdM"]
[Fri Nov 21 13:23:33.548234 2025] [proxy_fcgi:error] [pid 13325:tid 13333] [client 45.132.227.65:55865] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:23:34.443636 2025] [:error] [pid 13325:tid 13341] [client 45.132.227.65:55865] [client 45.132.227.65] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.132.227.65, incrementing brute counter"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "aR_3ViBUXj9tD75On3AUigAAAAs"]
[Fri Nov 21 13:23:34.943636 2025] [:error] [pid 13325:tid 13350] [client 45.132.227.65:55865] [client 45.132.227.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aR_3ViBUXj9tD75On3AUjgAAABQ"]
[Fri Nov 21 13:23:40.516617 2025] [proxy_fcgi:error] [pid 13325:tid 13339] [client 45.132.227.61:45763] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:23:43.586496 2025] [proxy_fcgi:error] [pid 13325:tid 13350] [client 45.132.227.61:45763] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:23:44.016284 2025] [:error] [pid 13325:tid 13336] [client 45.132.227.61:45763] [client 45.132.227.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aR_3YCBUXj9tD75On3AUzQAAAAY"]
[Fri Nov 21 13:23:44.892662 2025] [proxy_fcgi:error] [pid 13326:tid 13371] [client 45.132.227.60:26681] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:23:46.282053 2025] [:error] [pid 13326:tid 13365] [client 45.132.227.60:26681] [client 45.132.227.60] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.132.227.60, incrementing brute counter"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aR_3Yth942-HkDIkOWpbZwAAAEc"]
[Fri Nov 21 13:23:46.742080 2025] [proxy_fcgi:error] [pid 13326:tid 13359] [client 45.132.227.60:26681] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:23:47.172692 2025] [proxy_fcgi:error] [pid 13326:tid 13381] [client 45.132.227.60:26681] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:23:47.671598 2025] [proxy_fcgi:error] [pid 13326:tid 13377] [client 45.132.227.60:26681] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:23:48.097014 2025] [:error] [pid 13326:tid 13361] [client 45.132.227.60:26681] [client 45.132.227.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aR_3ZNh942-HkDIkOWpbdAAAAEM"]
[Fri Nov 21 13:23:49.043727 2025] [proxy_fcgi:error] [pid 17882:tid 17901] [client 172.98.32.91:45311] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:23:49.514414 2025] [:error] [pid 17882:tid 17902] [client 172.98.32.91:45311] [client 172.98.32.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/infi.php"] [unique_id "aR_3ZYwFFssEn348h96ekgAAAVI"]
[Fri Nov 21 13:23:51.851307 2025] [proxy_fcgi:error] [pid 46237:tid 46250] [client 45.132.227.55:59937] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:23:52.295413 2025] [:error] [pid 46237:tid 46259] [client 45.132.227.55:59937] [client 45.132.227.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aR_3aCo2qlis7MUDbMI-8gAAAdQ"]
[Fri Nov 21 13:23:53.185583 2025] [proxy_fcgi:error] [pid 13412:tid 13427] [client 172.98.32.81:20499] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:23:54.742131 2025] [proxy_fcgi:error] [pid 13412:tid 13431] [client 172.98.32.81:20499] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:23:56.273890 2025] [:error] [pid 13412:tid 13422] [client 172.98.32.81:20499] [client 172.98.32.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "aR_3bH3-knz3ZB6HogEXeAAAAMU"]
[Fri Nov 21 13:23:57.122937 2025] [:error] [pid 46276:tid 46292] [client 172.98.32.79:55973] [client 172.98.32.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "aR_3bXbpxuSAfajqqKPjkgAAAgk"]
[Fri Nov 21 13:23:58.039584 2025] [proxy_fcgi:error] [pid 46237:tid 46263] [client 172.98.32.92:25135] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:23:58.473527 2025] [proxy_fcgi:error] [pid 46237:tid 46247] [client 172.98.32.92:25135] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:24:00.379972 2025] [:error] [pid 46237:tid 46243] [client 172.98.32.92:25135] [client 172.98.32.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aR_3cCo2qlis7MUDbMI-_wAAAcQ"]
[Fri Nov 21 13:24:01.901592 2025] [:error] [pid 13326:tid 13382] [client 136.144.42.73:41895] [client 136.144.42.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "aR_3cdh942-HkDIkOWpb0QAAAFg"]
[Fri Nov 21 13:24:04.406285 2025] [:error] [pid 46276:tid 46302] [client 172.98.32.89:27113] [client 172.98.32.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/edit.php"] [unique_id "aR_3dHbpxuSAfajqqKPjmAAAAhM"]
[Fri Nov 21 13:24:05.305410 2025] [proxy_fcgi:error] [pid 17882:tid 17894] [client 45.132.227.66:61315] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:24:06.248887 2025] [proxy_fcgi:error] [pid 17882:tid 17895] [client 45.132.227.66:61315] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:24:06.703717 2025] [:error] [pid 17882:tid 17901] [client 45.132.227.66:61315] [client 45.132.227.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "aR_3dowFFssEn348h96e9QAAAVE"]
[Fri Nov 21 13:24:07.604260 2025] [proxy_fcgi:error] [pid 46194:tid 46202] [client 172.98.32.96:21685] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:24:08.511945 2025] [:error] [pid 46194:tid 46205] [client 172.98.32.96:21685] [client 172.98.32.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/click.php"] [unique_id "aR_3eJDRPrSqclDqoQH5QgAAAYg"]
[Fri Nov 21 13:24:10.808641 2025] [:error] [pid 13412:tid 13422] [client 136.144.42.73:29601] [client 136.144.42.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "aR_3en3-knz3ZB6HogEXhQAAAMU"]
[Fri Nov 21 13:24:12.334271 2025] [proxy_fcgi:error] [pid 13326:tid 13370] [client 136.144.42.77:38357] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:24:13.828749 2025] [proxy_fcgi:error] [pid 13326:tid 13371] [client 136.144.42.77:38357] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:24:14.751832 2025] [proxy_fcgi:error] [pid 13326:tid 13379] [client 136.144.42.77:38357] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:24:15.189689 2025] [:error] [pid 13326:tid 13359] [client 136.144.42.77:38357] [client 136.144.42.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "aR_3f9h942-HkDIkOWpcDAAAAEE"]
[Fri Nov 21 13:24:16.097772 2025] [:error] [pid 13326:tid 13374] [client 172.98.32.99:59335] [client 172.98.32.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/xl2023.php"] [unique_id "aR_3gNh942-HkDIkOWpcFgAAAFA"]
[Fri Nov 21 13:24:16.985046 2025] [:error] [pid 51434:tid 51437] [client 172.98.32.99:46831] [client 172.98.32.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/certificates/admin.php"] [unique_id "aR_3gPU96liplEDkw_RQtQAAAQE"]
[Fri Nov 21 13:24:17.865110 2025] [:error] [pid 13326:tid 13367] [client 172.98.32.100:33153] [client 172.98.32.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/images/media/dog.php"] [unique_id "aR_3gdh942-HkDIkOWpcIwAAAEk"]
[Fri Nov 21 13:24:18.748846 2025] [proxy_fcgi:error] [pid 13326:tid 13376] [client 172.98.32.91:29539] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:24:19.608345 2025] [:error] [pid 13326:tid 13378] [client 172.98.32.91:29539] [client 172.98.32.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "aR_3g9h942-HkDIkOWpcMgAAAFQ"]
[Fri Nov 21 13:24:20.495804 2025] [:error] [pid 13412:tid 13421] [client 172.98.32.82:32591] [client 172.98.32.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aR_3hH3-knz3ZB6HogEXjgAAAMQ"]
[Fri Nov 21 13:24:21.433189 2025] [proxy_fcgi:error] [pid 46276:tid 46296] [client 172.98.32.98:59327] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:24:22.325082 2025] [:error] [pid 46276:tid 46305] [client 172.98.32.98:59327] [client 172.98.32.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aR_3hnbpxuSAfajqqKPjugAAAhY"]
[Fri Nov 21 13:24:23.378940 2025] [:error] [pid 46276:tid 46293] [client 172.98.32.89:42295] [client 172.98.32.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aR_3h3bpxuSAfajqqKPjuwAAAgo"]
[Fri Nov 21 13:24:24.231244 2025] [:error] [pid 13326:tid 13373] [client 45.132.227.67:30921] [client 45.132.227.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/pomo/admin.php"] [unique_id "aR_3iNh942-HkDIkOWpcTgAAAE8"]
[Fri Nov 21 13:24:25.108483 2025] [:error] [pid 46276:tid 46290] [client 172.98.32.99:31695] [client 172.98.32.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/IXR/security.php"] [unique_id "aR_3iXbpxuSAfajqqKPjzwAAAgc"]
[Fri Nov 21 13:24:27.453287 2025] [:error] [pid 13325:tid 13330] [client 45.132.227.58:40321] [client 45.132.227.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aR_3iyBUXj9tD75On3AV1QAAAAA"]
[Fri Nov 21 13:24:29.243065 2025] [:error] [pid 13326:tid 13364] [client 45.132.227.62:60213] [client 45.132.227.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/fonts/about.php"] [unique_id "aR_3jdh942-HkDIkOWpccAAAAEY"]
[Fri Nov 21 13:24:31.385283 2025] [proxy_fcgi:error] [pid 46237:tid 46260] [client 45.132.227.53:23837] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:24:33.585860 2025] [proxy_fcgi:error] [pid 46237:tid 46258] [client 45.132.227.53:23837] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:24:34.075594 2025] [:error] [pid 46237:tid 46247] [client 45.132.227.53:23837] [client 45.132.227.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "aR_3kio2qlis7MUDbMI_WAAAAcg"]
[Fri Nov 21 13:24:35.401586 2025] [proxy_fcgi:error] [pid 46194:tid 46210] [client 172.98.32.90:35691] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:24:35.873052 2025] [proxy_fcgi:error] [pid 46194:tid 46203] [client 172.98.32.90:35691] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:24:38.423470 2025] [:error] [pid 46194:tid 46210] [client 172.98.32.90:35691] [client 172.98.32.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/assets/file.php"] [unique_id "aR_3lpDRPrSqclDqoQH5mwAAAY0"]
[Fri Nov 21 13:24:40.807124 2025] [:error] [pid 17882:tid 17895] [client 172.98.32.89:39385] [client 172.98.32.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "aR_3mIwFFssEn348h96fiwAAAUs"]
[Fri Nov 21 13:24:41.717951 2025] [:error] [pid 13325:tid 13353] [client 45.132.227.62:57067] [client 45.132.227.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "aR_3mSBUXj9tD75On3AWEwAAABc"]
[Fri Nov 21 13:24:44.482949 2025] [:error] [pid 17882:tid 17898] [client 172.98.32.85:61767] [client 172.98.32.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aR_3nIwFFssEn348h96foQAAAU4"]
[Fri Nov 21 13:24:46.399974 2025] [proxy_fcgi:error] [pid 13412:tid 13424] [client 45.132.227.55:29755] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:24:46.877567 2025] [proxy_fcgi:error] [pid 13412:tid 13430] [client 45.132.227.55:29755] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:24:47.325846 2025] [proxy_fcgi:error] [pid 13412:tid 13421] [client 45.132.227.55:29755] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:24:47.787668 2025] [proxy_fcgi:error] [pid 13412:tid 13426] [client 45.132.227.55:29755] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:24:50.155120 2025] [:error] [pid 13412:tid 13425] [client 45.132.227.55:29755] [client 45.132.227.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aR_3on3-knz3ZB6HogEXtQAAAMg"]
[Fri Nov 21 13:24:51.104165 2025] [:error] [pid 13325:tid 13333] [client 172.98.32.85:60643] [client 172.98.32.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "aR_3oyBUXj9tD75On3AWQQAAAAM"]
[Fri Nov 21 13:24:52.113673 2025] [:error] [pid 13326:tid 13381] [client 45.132.227.52:26797] [client 45.132.227.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "aR_3pNh942-HkDIkOWpdCwAAAFc"]
[Fri Nov 21 13:24:53.097367 2025] [:error] [pid 46276:tid 46301] [client 45.132.227.67:39005] [client 45.132.227.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "aR_3pXbpxuSAfajqqKPkQwAAAhI"]
[Fri Nov 21 13:24:54.044794 2025] [:error] [pid 17882:tid 17887] [client 172.98.32.78:41975] [client 172.98.32.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aR_3powFFssEn348h96f1AAAAUM"]
[Fri Nov 21 13:24:55.029471 2025] [:error] [pid 13325:tid 13352] [client 172.98.32.76:27981] [client 172.98.32.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aR_3pyBUXj9tD75On3AWTQAAABY"]
[Fri Nov 21 13:24:56.872299 2025] [:error] [pid 46194:tid 46216] [client 45.132.227.55:25807] [client 45.132.227.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/images/media/index.php"] [unique_id "aR_3qJDRPrSqclDqoQH56QAAAZM"]
[Fri Nov 21 13:24:58.364690 2025] [:error] [pid 46276:tid 46290] [client 172.98.32.83:30575] [client 172.98.32.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "aR_3qnbpxuSAfajqqKPkWwAAAgc"]
[Fri Nov 21 13:24:59.276585 2025] [:error] [pid 13327:tid 13398] [client 172.98.32.78:52067] [client 172.98.32.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "aR_3q_BXf-8B6mFkLePv7gAAAI0"]
[Fri Nov 21 13:25:00.186332 2025] [:error] [pid 46276:tid 46289] [client 45.132.227.52:22765] [client 45.132.227.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "aR_3rHbpxuSAfajqqKPkZAAAAgY"]
[Fri Nov 21 13:25:02.264668 2025] [:error] [pid 13412:tid 13437] [client 45.132.227.63:21117] [client 45.132.227.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/fonts/themes.php"] [unique_id "aR_3rn3-knz3ZB6HogEXyQAAANQ"]
[Fri Nov 21 13:25:03.865371 2025] [:error] [pid 46276:tid 46296] [client 45.132.227.66:40655] [client 45.132.227.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/certificates/index.php"] [unique_id "aR_3r3bpxuSAfajqqKPkcgAAAg0"]
[Fri Nov 21 13:25:04.845755 2025] [proxy_fcgi:error] [pid 13325:tid 13333] [client 45.132.227.56:63515] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:25:05.804286 2025] [:error] [pid 13325:tid 13354] [client 45.132.227.56:63515] [client 45.132.227.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "aR_3sSBUXj9tD75On3AWewAAABg"]
[Fri Nov 21 13:25:07.686696 2025] [:error] [pid 17882:tid 17898] [client 172.98.32.89:28527] [client 172.98.32.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "aR_3s4wFFssEn348h96gFQAAAU4"]
[Fri Nov 21 13:25:09.705613 2025] [proxy_fcgi:error] [pid 17882:tid 17901] [client 172.98.32.85:40551] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:25:10.133849 2025] [:error] [pid 17882:tid 17897] [client 172.98.32.85:40551] [client 172.98.32.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aR_3towFFssEn348h96gJAAAAU0"]
[Fri Nov 21 13:25:11.635945 2025] [proxy_fcgi:error] [pid 46276:tid 46302] [client 45.132.227.53:29285] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:25:12.075489 2025] [proxy_fcgi:error] [pid 46276:tid 46290] [client 45.132.227.53:29285] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:25:12.612877 2025] [proxy_fcgi:error] [pid 46276:tid 46303] [client 45.132.227.53:29285] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:25:13.040459 2025] [:error] [pid 46276:tid 46298] [client 45.132.227.53:29285] [client 45.132.227.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "aR_3uXbpxuSAfajqqKPklQAAAg8"]
[Fri Nov 21 13:25:13.926225 2025] [proxy_fcgi:error] [pid 13326:tid 13366] [client 172.98.32.84:31131] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:25:14.395451 2025] [:error] [pid 13326:tid 13375] [client 172.98.32.84:31131] [client 172.98.32.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "aR_3uth942-HkDIkOWpdbAAAAFE"]
[Fri Nov 21 13:25:16.345413 2025] [proxy_fcgi:error] [pid 13326:tid 13362] [client 172.98.32.100:57683] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:25:16.798627 2025] [proxy_fcgi:error] [pid 13326:tid 13373] [client 172.98.32.100:57683] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:25:17.228309 2025] [proxy_fcgi:error] [pid 13326:tid 13367] [client 172.98.32.100:57683] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:25:20.448305 2025] [proxy_fcgi:error] [pid 13326:tid 13378] [client 172.98.32.100:57683] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:25:20.966304 2025] [proxy_fcgi:error] [pid 13326:tid 13375] [client 172.98.32.100:57683] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:25:21.875981 2025] [proxy_fcgi:error] [pid 13326:tid 13377] [client 172.98.32.100:57683] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:25:23.349460 2025] [proxy_fcgi:error] [pid 13326:tid 13359] [client 172.98.32.100:57683] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:25:23.783732 2025] [:error] [pid 13326:tid 13378] [client 172.98.32.100:57683] [client 172.98.32.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "aR_3w9h942-HkDIkOWpdnwAAAFQ"]
[Fri Nov 21 13:25:24.766894 2025] [:error] [pid 17882:tid 17890] [client 136.144.42.73:40975] [client 136.144.42.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aR_3xIwFFssEn348h96gQwAAAUY"]
[Fri Nov 21 13:25:25.720481 2025] [:error] [pid 46237:tid 46256] [client 172.98.32.100:61619] [client 172.98.32.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.98.32.100, incrementing brute counter"] [hostname "www.dwelectservices.com.au"] [uri "/wp-login.php"] [unique_id "aR_3xSo2qlis7MUDbMJAKQAAAdE"]
[Fri Nov 21 13:25:25.727499 2025] [proxy_fcgi:error] [pid 46237:tid 46256] [client 172.98.32.100:61619] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:25:26.239131 2025] [proxy_fcgi:error] [pid 46237:tid 46255] [client 172.98.32.100:61619] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:25:26.715800 2025] [:error] [pid 46237:tid 46257] [client 172.98.32.100:61619] [client 172.98.32.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "aR_3xio2qlis7MUDbMJALgAAAdI"]
[Fri Nov 21 13:25:28.169796 2025] [proxy_fcgi:error] [pid 13325:tid 13339] [client 136.144.42.75:28311] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:25:28.656098 2025] [:error] [pid 13325:tid 13346] [client 136.144.42.75:28311] [client 136.144.42.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aR_3yCBUXj9tD75On3AW9gAAABA"]
[Fri Nov 21 13:25:29.623275 2025] [:error] [pid 13326:tid 13370] [client 136.144.42.69:24699] [client 136.144.42.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aR_3ydh942-HkDIkOWpdtwAAAEw"]
[Fri Nov 21 13:25:33.370463 2025] [:error] [pid 51434:tid 51439] [client 136.144.42.78:35535] [client 136.144.42.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aR_3zfU96liplEDkw_RRLwAAAQM"]
[Fri Nov 21 13:25:36.802884 2025] [:error] [pid 51434:tid 51437] [client 172.98.32.90:60517] [client 172.98.32.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.dwelectservices.com.au"] [uri "/fm.php"] [unique_id "aR_30PU96liplEDkw_RRNgAAAQE"]
[Fri Nov 21 13:25:40.553752 2025] [proxy_fcgi:error] [pid 17882:tid 17893] [client 45.132.227.66:24655] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:25:42.131079 2025] [:error] [pid 17882:tid 17898] [client 45.132.227.66:24655] [client 45.132.227.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "aR_31owFFssEn348h96gjQAAAU4"]
[Fri Nov 21 13:25:44.699705 2025] [proxy_fcgi:error] [pid 13325:tid 13332] [client 172.98.32.90:46671] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:25:45.561798 2025] [:error] [pid 13325:tid 13344] [client 172.98.32.90:46671] [client 172.98.32.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/function.php"] [unique_id "aR_32SBUXj9tD75On3AXZAAAAA4"]
[Fri Nov 21 13:25:46.559358 2025] [:error] [pid 46276:tid 46297] [client 172.98.32.80:45421] [client 172.98.32.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/plugins.php"] [unique_id "aR_32nbpxuSAfajqqKPlFQAAAg4"]
[Fri Nov 21 13:25:48.022496 2025] [proxy_fcgi:error] [pid 13326:tid 13372] [client 136.144.42.77:53065] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:25:48.455222 2025] [:error] [pid 13326:tid 13359] [client 136.144.42.77:53065] [client 136.144.42.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/css/chosen.php"] [unique_id "aR_33Nh942-HkDIkOWpeAAAAAEE"]
[Fri Nov 21 13:25:49.333346 2025] [:error] [pid 46237:tid 46241] [client 172.98.32.86:23107] [client 172.98.32.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "aR_33So2qlis7MUDbMJAbQAAAcI"]
[Fri Nov 21 13:25:51.231720 2025] [proxy_fcgi:error] [pid 13412:tid 13434] [client 136.144.42.75:38811] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:25:51.687666 2025] [proxy_fcgi:error] [pid 13412:tid 13426] [client 136.144.42.75:38811] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:25:52.598926 2025] [proxy_fcgi:error] [pid 13412:tid 13423] [client 136.144.42.75:38811] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:25:53.521563 2025] [:error] [pid 13412:tid 13436] [client 136.144.42.75:38811] [client 136.144.42.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/atomlib.php"] [unique_id "aR_34X3-knz3ZB6HogEYCAAAANM"]
[Fri Nov 21 13:25:54.463534 2025] [:error] [pid 46194:tid 46217] [client 172.98.32.93:49209] [client 172.98.32.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/rest-api/index.php"] [unique_id "aR_34pDRPrSqclDqoQH6zgAAAZQ"]
[Fri Nov 21 13:25:56.750642 2025] [proxy_fcgi:error] [pid 13325:tid 13350] [client 45.132.227.55:31785] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:25:57.223303 2025] [:error] [pid 13325:tid 13340] [client 45.132.227.55:31785] [client 45.132.227.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/index.php"] [unique_id "aR_35SBUXj9tD75On3AXmQAAAAo"]
[Fri Nov 21 13:25:58.163718 2025] [:error] [pid 46276:tid 46292] [client 136.144.42.70:40641] [client 136.144.42.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aR_35nbpxuSAfajqqKPlMAAAAgk"]
[Fri Nov 21 13:25:59.102075 2025] [:error] [pid 46237:tid 46261] [client 45.132.227.63:51101] [client 45.132.227.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aR_35yo2qlis7MUDbMJAdwAAAdY"]
[Fri Nov 21 13:26:01.975044 2025] [proxy_fcgi:error] [pid 46276:tid 46286] [client 45.132.227.63:54977] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:26:02.424127 2025] [:error] [pid 46276:tid 46294] [client 45.132.227.63:54977] [client 45.132.227.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/SimplePie/Exception-wp.php"] [unique_id "aR_36nbpxuSAfajqqKPlUQAAAgs"]
[Fri Nov 21 13:26:03.854403 2025] [:error] [pid 46237:tid 46256] [client 45.132.227.62:26497] [client 45.132.227.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aR_36yo2qlis7MUDbMJAhAAAAdE"]
[Fri Nov 21 13:26:04.888989 2025] [proxy_fcgi:error] [pid 13412:tid 13421] [client 172.98.32.87:33237] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:26:05.368913 2025] [proxy_fcgi:error] [pid 13412:tid 13439] [client 172.98.32.87:33237] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:26:06.294111 2025] [proxy_fcgi:error] [pid 13412:tid 13420] [client 172.98.32.87:33237] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:26:08.296516 2025] [:error] [pid 13412:tid 13432] [client 172.98.32.87:33237] [client 172.98.32.87] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.98.32.87, incrementing brute counter"] [hostname "www.dwelectservices.com.au"] [uri "/js/wp-login.php"] [unique_id "aR_38H3-knz3ZB6HogEYLQAAAM8"]
[Fri Nov 21 13:26:09.168193 2025] [:error] [pid 13412:tid 13426] [client 172.98.32.87:33237] File does not exist: /home/dwelects/public_html/worm.PhP
[Fri Nov 21 13:26:09.660615 2025] [proxy_fcgi:error] [pid 13412:tid 13441] [client 172.98.32.87:33237] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:26:10.099330 2025] [proxy_fcgi:error] [pid 13412:tid 13435] [client 172.98.32.87:33237] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:26:11.031212 2025] [:error] [pid 13412:tid 13440] [client 172.98.32.87:33237] [client 172.98.32.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/bk/index.php"] [unique_id "aR_3833-knz3ZB6HogEYNwAAANc"]
[Fri Nov 21 13:26:11.985949 2025] [:error] [pid 17882:tid 17899] [client 136.144.42.78:24387] [client 136.144.42.78] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.144.42.78, incrementing brute counter"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "aR_384wFFssEn348h96hLAAAAU8"]
[Fri Nov 21 13:26:13.304121 2025] [proxy_fcgi:error] [pid 17882:tid 17885] [client 136.144.42.78:24387] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:26:13.833559 2025] [proxy_fcgi:error] [pid 17882:tid 17897] [client 136.144.42.78:24387] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:26:14.793211 2025] [proxy_fcgi:error] [pid 17882:tid 17888] [client 136.144.42.78:24387] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:26:15.796543 2025] [proxy_fcgi:error] [pid 17882:tid 17900] [client 136.144.42.78:24387] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:26:17.159060 2025] [proxy_fcgi:error] [pid 17882:tid 17901] [client 136.144.42.78:24387] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:26:20.318174 2025] [proxy_fcgi:error] [pid 17882:tid 17891] [client 136.144.42.78:24387] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:26:20.819306 2025] [proxy_fcgi:error] [pid 17882:tid 17884] [client 136.144.42.78:24387] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:26:23.208227 2025] [proxy_fcgi:error] [pid 17882:tid 17894] [client 136.144.42.78:24387] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:26:24.594008 2025] [:error] [pid 17882:tid 17890] [client 136.144.42.78:24387] [client 136.144.42.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "aR_4AIwFFssEn348h96hqgAAAUY"]
[Fri Nov 21 13:26:26.639660 2025] [proxy_fcgi:error] [pid 13326:tid 13380] [client 136.144.42.69:33715] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:26:27.124756 2025] [:error] [pid 13326:tid 13371] [client 136.144.42.69:33715] [client 136.144.42.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aR_4A9h942-HkDIkOWpe0AAAAE0"]
[Fri Nov 21 13:26:29.091675 2025] [proxy_fcgi:error] [pid 46276:tid 46297] [client 136.144.42.74:25139] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:26:29.526005 2025] [proxy_fcgi:error] [pid 46276:tid 46285] [client 136.144.42.74:25139] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:26:29.983692 2025] [:error] [pid 46276:tid 46289] [client 136.144.42.74:25139] [client 136.144.42.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/css/atomlib.php"] [unique_id "aR_4BXbpxuSAfajqqKPlxQAAAgY"]
[Fri Nov 21 13:26:32.837097 2025] [proxy_fcgi:error] [pid 17882:tid 17897] [client 45.132.227.62:52051] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:26:33.835702 2025] [proxy_fcgi:error] [pid 17882:tid 17884] [client 45.132.227.62:52051] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:26:34.738673 2025] [proxy_fcgi:error] [pid 17882:tid 17900] [client 45.132.227.62:52051] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:26:35.164769 2025] [proxy_fcgi:error] [pid 17882:tid 17892] [client 45.132.227.62:52051] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:26:36.064346 2025] [:error] [pid 17882:tid 17893] [client 45.132.227.62:52051] [client 45.132.227.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aR_4DIwFFssEn348h96iGAAAAUk"]
[Fri Nov 21 13:26:37.279762 2025] [proxy_fcgi:error] [pid 46276:tid 46302] [client 136.144.42.69:49043] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:26:37.718168 2025] [proxy_fcgi:error] [pid 46276:tid 46294] [client 136.144.42.69:49043] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:26:38.176597 2025] [:error] [pid 46276:tid 46285] [client 136.144.42.69:49043] [client 136.144.42.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aR_4DnbpxuSAfajqqKPl7AAAAgI"]
[Fri Nov 21 13:26:40.573747 2025] [:error] [pid 13327:tid 13393] [client 136.144.42.75:55747] [client 136.144.42.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aR_4EPBXf-8B6mFkLePxRwAAAIg"]
[Fri Nov 21 13:26:42.077570 2025] [proxy_fcgi:error] [pid 46194:tid 46209] [client 136.144.42.72:27081] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:26:44.056999 2025] [proxy_fcgi:error] [pid 46194:tid 46198] [client 136.144.42.72:27081] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:26:44.512368 2025] [proxy_fcgi:error] [pid 46194:tid 46212] [client 136.144.42.72:27081] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:26:44.995290 2025] [:error] [pid 46194:tid 46216] [client 136.144.42.72:27081] [client 136.144.42.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "aR_4FJDRPrSqclDqoQH7GQAAAZM"]
[Fri Nov 21 13:26:45.938673 2025] [:error] [pid 13325:tid 13351] [client 172.98.32.83:41829] [client 172.98.32.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "aR_4FSBUXj9tD75On3AYPQAAABU"]
[Fri Nov 21 13:26:50.876121 2025] [proxy_fcgi:error] [pid 13325:tid 13335] [client 172.98.32.84:35533] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:26:52.902304 2025] [:error] [pid 13325:tid 13337] [client 172.98.32.84:35533] [client 172.98.32.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/js/dist/default.php"] [unique_id "aR_4HCBUXj9tD75On3AYUAAAAAc"]
[Fri Nov 21 13:26:54.256705 2025] [:error] [pid 46194:tid 46217] [client 172.98.32.82:35487] [client 172.98.32.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.dwelectservices.com.au"] [uri "/tiny.php"] [unique_id "aR_4HpDRPrSqclDqoQH7KgAAAZQ"]
[Fri Nov 21 13:26:56.434072 2025] [proxy_fcgi:error] [pid 17882:tid 17905] [client 172.98.32.92:32461] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:26:56.961472 2025] [proxy_fcgi:error] [pid 17882:tid 17886] [client 172.98.32.92:32461] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:26:57.386625 2025] [:error] [pid 17882:tid 17902] [client 172.98.32.92:32461] [client 172.98.32.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "aR_4IYwFFssEn348h96iogAAAVI"]
[Fri Nov 21 13:26:58.874621 2025] [proxy_fcgi:error] [pid 46237:tid 46245] [client 136.144.42.75:35885] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:26:59.386005 2025] [proxy_fcgi:error] [pid 46237:tid 46249] [client 136.144.42.75:35885] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:27:01.000955 2025] [proxy_fcgi:error] [pid 46237:tid 46242] [client 136.144.42.75:35885] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:27:02.382607 2025] [:error] [pid 46237:tid 46253] [client 136.144.42.75:35885] [client 136.144.42.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/SimplePie/Parse/about.php"] [unique_id "aR_4Jio2qlis7MUDbMJA2QAAAc4"]
[Fri Nov 21 13:27:03.266528 2025] [proxy_fcgi:error] [pid 46237:tid 46254] [client 45.132.227.66:26607] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:27:04.675208 2025] [:error] [pid 46237:tid 46260] [client 45.132.227.66:26607] [client 45.132.227.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "aR_4KCo2qlis7MUDbMJA4gAAAdU"]
[Fri Nov 21 13:27:06.077935 2025] [proxy_fcgi:error] [pid 46276:tid 46285] [client 45.132.227.68:31935] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:27:07.391726 2025] [proxy_fcgi:error] [pid 46276:tid 46301] [client 45.132.227.68:31935] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:27:07.878645 2025] [proxy_fcgi:error] [pid 46276:tid 46291] [client 45.132.227.68:31935] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:27:09.503732 2025] [:error] [pid 46276:tid 46283] [client 45.132.227.68:31935] [client 45.132.227.68] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.132.227.68, incrementing brute counter"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/css/colors/ocean/wp-login.php"] [unique_id "aR_4LXbpxuSAfajqqKPmQgAAAgA"]
[Fri Nov 21 13:27:10.857686 2025] [proxy_fcgi:error] [pid 46276:tid 46303] [client 45.132.227.68:31935] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:27:11.855064 2025] [:error] [pid 46276:tid 46286] [client 45.132.227.68:31935] [client 45.132.227.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/SimplePie/Cache/upfile.php"] [unique_id "aR_4L3bpxuSAfajqqKPmSQAAAgM"]
[Fri Nov 21 13:27:12.862882 2025] [proxy_fcgi:error] [pid 51434:tid 51456] [client 172.98.32.77:42857] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:27:13.309911 2025] [:error] [pid 51434:tid 51449] [client 172.98.32.77:42857] [client 172.98.32.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "aR_4MfU96liplEDkw_RSCQAAAQ0"]
[Fri Nov 21 13:27:15.826405 2025] [proxy_fcgi:error] [pid 51434:tid 51437] [client 45.132.227.66:57139] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:27:17.533383 2025] [proxy_fcgi:error] [pid 51434:tid 51446] [client 45.132.227.66:57139] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:27:18.437362 2025] [:error] [pid 51434:tid 51441] [client 45.132.227.66:57139] [client 45.132.227.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/widgets/class-wp-widget-search-function.php"] [unique_id "aR_4NvU96liplEDkw_RSFwAAAQU"]
[Fri Nov 21 13:27:20.858210 2025] [proxy_fcgi:error] [pid 51434:tid 51449] [client 45.132.227.63:58019] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:27:21.342299 2025] [proxy_fcgi:error] [pid 51434:tid 51455] [client 45.132.227.63:58019] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:27:22.201132 2025] [:error] [pid 51434:tid 51451] [client 45.132.227.63:58019] [client 45.132.227.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/SimplePie/Canonical.php"] [unique_id "aR_4OvU96liplEDkw_RSHQAAAQ8"]
[Fri Nov 21 13:27:23.624947 2025] [:error] [pid 46237:tid 46252] [client 172.98.32.92:33531] [client 172.98.32.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "aR_4Oyo2qlis7MUDbMJBEQAAAc0"]
[Fri Nov 21 13:27:25.930277 2025] [proxy_fcgi:error] [pid 46237:tid 46244] [client 45.132.227.64:56707] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:27:26.478827 2025] [proxy_fcgi:error] [pid 46237:tid 46258] [client 45.132.227.64:56707] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:27:27.541371 2025] [:error] [pid 46237:tid 46263] [client 45.132.227.64:56707] [client 45.132.227.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/class-feed-index.php"] [unique_id "aR_4Pyo2qlis7MUDbMJBGAAAAdg"]
[Fri Nov 21 13:27:28.484180 2025] [proxy_fcgi:error] [pid 13412:tid 13425] [client 172.98.32.86:53029] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:27:29.459783 2025] [proxy_fcgi:error] [pid 13412:tid 13432] [client 172.98.32.86:53029] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:27:29.895419 2025] [:error] [pid 13412:tid 13417] [client 172.98.32.86:53029] [client 172.98.32.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php"] [unique_id "aR_4QX3-knz3ZB6HogEZRgAAAMA"]
[Fri Nov 21 13:27:31.403215 2025] [:error] [pid 13326:tid 13363] [client 45.132.227.61:53161] [client 45.132.227.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/db.php"] [unique_id "aR_4Q9h942-HkDIkOWpf5gAAAEU"]
[Fri Nov 21 13:27:33.419804 2025] [:error] [pid 13327:tid 13407] [client 45.132.227.55:57499] [client 45.132.227.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/class-wp-dependency-float.php"] [unique_id "aR_4RfBXf-8B6mFkLePxdQAAAJY"]
[Fri Nov 21 13:27:34.356524 2025] [:error] [pid 17882:tid 17905] [client 136.144.42.72:30673] [client 136.144.42.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "aR_4RowFFssEn348h96jnAAAAVU"]
[Fri Nov 21 13:27:35.279380 2025] [:error] [pid 13325:tid 13338] [client 172.98.32.83:56097] [client 172.98.32.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/PHPMailer/purna.php"] [unique_id "aR_4RyBUXj9tD75On3AY7wAAAAg"]
[Fri Nov 21 13:27:36.248766 2025] [:error] [pid 13327:tid 13394] [client 172.98.32.92:57629] [client 172.98.32.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/interactivity-api/interactivity-api-class.php"] [unique_id "aR_4SPBXf-8B6mFkLePxegAAAIk"]
[Fri Nov 21 13:27:38.116930 2025] [:error] [pid 17882:tid 17902] [client 172.98.32.83:32599] [client 172.98.32.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/l10n/class-wp-widddget-pages.php"] [unique_id "aR_4SowFFssEn348h96jtAAAAVI"]
[Fri Nov 21 13:27:40.630289 2025] [:error] [pid 13326:tid 13365] [client 172.98.32.78:55673] [client 172.98.32.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php"] [unique_id "aR_4TNh942-HkDIkOWpgBQAAAEc"]
[Fri Nov 21 13:27:41.611949 2025] [:error] [pid 17882:tid 17899] [client 45.132.227.63:39157] [client 45.132.227.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php"] [unique_id "aR_4TYwFFssEn348h96jxgAAAU8"]
[Fri Nov 21 13:27:42.562092 2025] [:error] [pid 46276:tid 46283] [client 172.98.32.100:28997] [client 172.98.32.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/ID3/module.audio-video.riff-set.php"] [unique_id "aR_4TnbpxuSAfajqqKPmmQAAAgA"]
[Fri Nov 21 13:27:44.962687 2025] [:error] [pid 46276:tid 46289] [client 172.98.32.100:62517] [client 172.98.32.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/js/tinymce/utils/license.php"] [unique_id "aR_4UHbpxuSAfajqqKPmnQAAAgY"]
[Fri Nov 21 13:27:46.764801 2025] [:error] [pid 13326:tid 13371] [client 136.144.42.69:54077] [client 136.144.42.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/Text/options.php"] [unique_id "aR_4Uth942-HkDIkOWpgHQAAAE0"]
[Fri Nov 21 13:27:47.973183 2025] [proxy_fcgi:error] [pid 46194:tid 46198] [client 172.98.32.96:43663] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:27:49.919699 2025] [:error] [pid 46194:tid 46208] [client 172.98.32.96:43663] [client 172.98.32.96] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.98.32.96, incrementing brute counter"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "aR_4VZDRPrSqclDqoQH8XwAAAYs"]
[Fri Nov 21 13:27:53.422872 2025] [:error] [pid 46194:tid 46210] [client 172.98.32.96:43663] [client 172.98.32.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/feed-rsss.php"] [unique_id "aR_4WZDRPrSqclDqoQH8cQAAAY0"]
[Fri Nov 21 13:27:54.361131 2025] [:error] [pid 13412:tid 13429] [client 45.132.227.58:63693] [client 45.132.227.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/IXR/goto.php"] [unique_id "aR_4Wn3-knz3ZB6HogEZjAAAAMw"]
[Fri Nov 21 13:27:56.738296 2025] [proxy_fcgi:error] [pid 46237:tid 46250] [client 172.98.32.78:39107] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:27:57.216285 2025] [proxy_fcgi:error] [pid 46237:tid 46256] [client 172.98.32.78:39107] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:27:59.646717 2025] [proxy_fcgi:error] [pid 46237:tid 46242] [client 172.98.32.78:39107] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:28:00.087568 2025] [proxy_fcgi:error] [pid 46237:tid 46250] [client 172.98.32.78:39107] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:28:01.990125 2025] [proxy_fcgi:error] [pid 46237:tid 46245] [client 172.98.32.78:39107] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:28:02.457094 2025] [proxy_fcgi:error] [pid 46237:tid 46249] [client 172.98.32.78:39107] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:28:02.907313 2025] [proxy_fcgi:error] [pid 46237:tid 46242] [client 172.98.32.78:39107] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:28:03.362999 2025] [proxy_fcgi:error] [pid 46237:tid 46257] [client 172.98.32.78:39107] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:28:04.271763 2025] [:error] [pid 46237:tid 46254] [client 172.98.32.78:39107] [client 172.98.32.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aR_4ZCo2qlis7MUDbMJBggAAAc8"]
[Fri Nov 21 13:28:05.150133 2025] [:error] [pid 46237:tid 46260] [client 45.132.227.54:21499] [client 45.132.227.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/wp_class_datlib.php"] [unique_id "aR_4ZSo2qlis7MUDbMJBhQAAAdU"]
[Fri Nov 21 13:28:06.169195 2025] [:error] [pid 13412:tid 13439] [client 172.98.32.93:44205] [client 172.98.32.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "aR_4Zn3-knz3ZB6HogEZpwAAANY"]
[Fri Nov 21 13:28:07.539374 2025] [proxy_fcgi:error] [pid 46237:tid 46241] [client 136.144.42.75:50881] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:28:08.051497 2025] [proxy_fcgi:error] [pid 46237:tid 46262] [client 136.144.42.75:50881] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:28:08.968371 2025] [proxy_fcgi:error] [pid 46237:tid 46253] [client 136.144.42.75:50881] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:28:09.874973 2025] [:error] [pid 46237:tid 46244] [client 136.144.42.75:50881] [client 136.144.42.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/SimplePie/Registry-private.php"] [unique_id "aR_4aSo2qlis7MUDbMJBoQAAAcU"]
[Fri Nov 21 13:28:12.867367 2025] [:error] [pid 46237:tid 46260] [client 45.132.227.58:55077] [client 45.132.227.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-meta.php"] [unique_id "aR_4bCo2qlis7MUDbMJBrAAAAdU"]
[Fri Nov 21 13:28:13.898692 2025] [:error] [pid 46276:tid 46307] [client 45.132.227.56:61655] [client 45.132.227.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/widgets/bypass.php"] [unique_id "aR_4bXbpxuSAfajqqKPmxAAAAhg"]
[Fri Nov 21 13:28:16.658650 2025] [:error] [pid 17882:tid 17901] [client 172.98.32.97:32091] [client 172.98.32.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/style-engine/adminfus.php"] [unique_id "aR_4cIwFFssEn348h96kiAAAAVE"]
[Fri Nov 21 13:28:17.550195 2025] [proxy_fcgi:error] [pid 51434:tid 51458] [client 172.98.32.76:52207] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:28:18.731327 2025] [:error] [pid 51434:tid 51449] [client 172.98.32.76:52207] [client 172.98.32.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/blocks/group/wp-style.php"] [unique_id "aR_4cvU96liplEDkw_RScAAAAQ0"]
[Fri Nov 21 13:28:20.540848 2025] [:error] [pid 13326:tid 13362] [client 172.98.32.92:62013] [client 172.98.32.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/widgets/class-wp-wolf-widget.php"] [unique_id "aR_4dNh942-HkDIkOWpgxAAAAEQ"]
[Fri Nov 21 13:28:26.643274 2025] [:error] [pid 46237:tid 46263] [client 45.132.227.63:62321] [client 45.132.227.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/Text/index.php"] [unique_id "aR_4eio2qlis7MUDbMJB5gAAAdg"]
[Fri Nov 21 13:28:28.615683 2025] [proxy_fcgi:error] [pid 46276:tid 46293] [client 45.132.227.58:51505] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:28:29.791390 2025] [:error] [pid 46276:tid 46305] [client 45.132.227.58:51505] [client 45.132.227.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/about.php"] [unique_id "aR_4fXbpxuSAfajqqKPm7AAAAhY"]
[Fri Nov 21 13:28:31.671433 2025] [proxy_fcgi:error] [pid 46237:tid 46258] [client 45.132.227.54:47133] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:28:33.074910 2025] [proxy_fcgi:error] [pid 46237:tid 46249] [client 45.132.227.54:47133] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:28:33.518946 2025] [:error] [pid 46237:tid 46260] [client 45.132.227.54:47133] [client 45.132.227.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/wp-sup.php"] [unique_id "aR_4gSo2qlis7MUDbMJB-wAAAdU"]
[Fri Nov 21 13:28:35.579804 2025] [:error] [pid 13326:tid 13372] [client 45.132.227.58:58263] [client 45.132.227.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/widgets/class-t.api.php"] [unique_id "aR_4g9h942-HkDIkOWpg-wAAAE4"]
[Fri Nov 21 13:28:38.444191 2025] [:error] [pid 13412:tid 13427] [client 172.98.32.83:25525] [client 172.98.32.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/css/dist/require-dynamic-blocks.php"] [unique_id "aR_4hn3-knz3ZB6HogEaEgAAAMo"]
[Fri Nov 21 13:28:41.672501 2025] [:error] [pid 46194:tid 46200] [client 172.98.32.87:39799] [client 172.98.32.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/widgets/class-wp-widget-rss-database.php"] [unique_id "aR_4iZDRPrSqclDqoQH8-wAAAYM"]
[Fri Nov 21 13:28:44.085820 2025] [proxy_fcgi:error] [pid 46276:tid 46286] [client 172.98.32.85:33733] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:28:44.551128 2025] [:error] [pid 46276:tid 46298] [client 172.98.32.85:33733] [client 172.98.32.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/class-wp-customize-manager-client.php"] [unique_id "aR_4jHbpxuSAfajqqKPm_AAAAg8"]
[Fri Nov 21 13:28:45.531875 2025] [:error] [pid 13326:tid 13365] [client 136.144.42.73:43455] [client 136.144.42.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-boolean.php"] [unique_id "aR_4jdh942-HkDIkOWphGQAAAEc"]
[Fri Nov 21 13:28:50.394998 2025] [:error] [pid 17882:tid 17896] [client 45.132.227.56:49127] [client 45.132.227.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/images/smilies/simi.php"] [unique_id "aR_4kowFFssEn348h96lVgAAAUw"]
[Fri Nov 21 13:28:51.382812 2025] [proxy_fcgi:error] [pid 46276:tid 46300] [client 45.132.227.64:32001] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:28:53.929313 2025] [proxy_fcgi:error] [pid 46276:tid 46303] [client 45.132.227.64:32001] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:28:54.375786 2025] [:error] [pid 46276:tid 46304] [client 45.132.227.64:32001] [client 45.132.227.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/style-engine-session.php"] [unique_id "aR_4lnbpxuSAfajqqKPnGQAAAhU"]
[Fri Nov 21 13:28:57.436111 2025] [proxy_fcgi:error] [pid 17882:tid 17901] [client 172.98.32.82:46877] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:28:58.328902 2025] [:error] [pid 17882:tid 17907] [client 172.98.32.82:46877] [client 172.98.32.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aR_4mowFFssEn348h96lbgAAAVc"]
[Fri Nov 21 13:28:59.292172 2025] [:error] [pid 13325:tid 13333] [client 45.132.227.58:33343] [client 45.132.227.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/blocks/file/wp-style.php"] [unique_id "aR_4myBUXj9tD75On3Aa8gAAAAM"]
[Fri Nov 21 13:29:01.173441 2025] [:error] [pid 13327:tid 13405] [client 136.144.42.72:56131] [client 136.144.42.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/IXR/class-IXR-cilent.php"] [unique_id "aR_4nfBXf-8B6mFkLePyiwAAAJQ"]
[Fri Nov 21 13:29:03.601978 2025] [:error] [pid 46194:tid 46206] [client 45.132.227.64:47439] [client 45.132.227.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/images/install.php"] [unique_id "aR_4n5DRPrSqclDqoQH9OgAAAYk"]
[Fri Nov 21 13:29:04.485716 2025] [:error] [pid 17882:tid 17897] [client 172.98.32.93:57031] [client 172.98.32.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/PHPMailer/xleet.php"] [unique_id "aR_4oIwFFssEn348h96liwAAAU0"]
[Fri Nov 21 13:29:06.052648 2025] [proxy_fcgi:error] [pid 17882:tid 17897] [client 172.98.32.94:63945] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:29:09.180361 2025] [:error] [pid 17882:tid 17890] [client 172.98.32.94:63945] [client 172.98.32.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/category-double.php"] [unique_id "aR_4pYwFFssEn348h96lzAAAAUY"]
[Fri Nov 21 13:29:10.963079 2025] [:error] [pid 46237:tid 46255] [client 172.98.32.91:59781] [client 172.98.32.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/assets/db.php"] [unique_id "aR_4pio2qlis7MUDbMJCcwAAAdA"]
[Fri Nov 21 13:29:11.825993 2025] [:error] [pid 51434:tid 51442] [client 136.144.42.74:26439] [client 136.144.42.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/widgets/security.php"] [unique_id "aR_4p_U96liplEDkw_RTBwAAAQY"]
[Fri Nov 21 13:29:14.252734 2025] [proxy_fcgi:error] [pid 13412:tid 13422] [client 45.132.227.66:29413] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:29:15.406878 2025] [:error] [pid 13412:tid 13436] [client 45.132.227.66:29413] [client 45.132.227.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/class-wp-language-pack.php"] [unique_id "aR_4q33-knz3ZB6HogEa5gAAANM"]
[Fri Nov 21 13:29:17.136629 2025] [:error] [pid 46276:tid 46298] [client 136.144.42.69:45745] [client 136.144.42.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/class-walker-comment-client.php"] [unique_id "aR_4rXbpxuSAfajqqKPnpgAAAg8"]
[Fri Nov 21 13:29:21.990908 2025] [:error] [pid 46276:tid 46296] [client 172.98.32.100:58701] [client 172.98.32.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/class-wp-network-query-stat.php"] [unique_id "aR_4sXbpxuSAfajqqKPnuAAAAg0"]
[Fri Nov 21 13:29:23.385678 2025] [proxy_fcgi:error] [pid 51434:tid 51451] [client 45.132.227.53:21493] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:29:24.784626 2025] [:error] [pid 51434:tid 51446] [client 45.132.227.53:21493] [client 45.132.227.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/class-wp-session-tokens-https.php"] [unique_id "aR_4tPU96liplEDkw_RTOwAAAQo"]
[Fri Nov 21 13:29:28.056840 2025] [:error] [pid 13412:tid 13420] [client 172.98.32.83:62749] [client 172.98.32.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/images/crystal/lrs_dage.php"] [unique_id "aR_4uH3-knz3ZB6HogEbJgAAAMM"]
[Fri Nov 21 13:29:29.442186 2025] [:error] [pid 46276:tid 46286] [client 172.98.32.100:58525] [client 172.98.32.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/as.php"] [unique_id "aR_4uXbpxuSAfajqqKPnwAAAAgM"]
[Fri Nov 21 13:29:30.863179 2025] [:error] [pid 13327:tid 13387] [client 136.144.42.69:52335] [client 136.144.42.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/certificates/wp-conflg.php"] [unique_id "aR_4uvBXf-8B6mFkLePyxgAAAII"]
[Fri Nov 21 13:29:31.795951 2025] [:error] [pid 51434:tid 51453] [client 172.98.32.96:35295] [client 172.98.32.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/install.php"] [unique_id "aR_4u_U96liplEDkw_RTVgAAARE"]
[Fri Nov 21 13:29:32.701547 2025] [:error] [pid 13327:tid 13398] [client 172.98.32.93:35141] [client 172.98.32.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/customize/db.php"] [unique_id "aR_4vPBXf-8B6mFkLePyxwAAAI0"]
[Fri Nov 21 13:29:33.644737 2025] [proxy_fcgi:error] [pid 13327:tid 13405] [client 172.98.32.90:34461] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:29:36.514984 2025] [:error] [pid 13327:tid 13403] [client 172.98.32.90:34461] [client 172.98.32.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/js/thickbox/about.php"] [unique_id "aR_4wPBXf-8B6mFkLePyzwAAAJI"]
[Fri Nov 21 13:29:39.009568 2025] [:error] [pid 13325:tid 13351] [client 172.98.32.93:48955] [client 172.98.32.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/rk2.php"] [unique_id "aR_4wyBUXj9tD75On3AbmgAAABU"]
[Fri Nov 21 13:29:41.073566 2025] [proxy_fcgi:error] [pid 46276:tid 46291] [client 45.132.227.61:61421] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:29:41.508503 2025] [:error] [pid 46276:tid 46302] [client 45.132.227.61:61421] [client 45.132.227.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/certificates/past.php"] [unique_id "aR_4xXbpxuSAfajqqKPn1QAAAhM"]
[Fri Nov 21 13:29:42.921276 2025] [proxy_fcgi:error] [pid 13412:tid 13436] [client 136.144.42.77:36267] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:29:43.808656 2025] [:error] [pid 13412:tid 13426] [client 136.144.42.77:36267] [client 136.144.42.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/edit-tags.php"] [unique_id "aR_4x33-knz3ZB6HogEbZwAAAMk"]
[Fri Nov 21 13:29:44.775050 2025] [proxy_fcgi:error] [pid 51434:tid 51454] [client 45.132.227.64:26149] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:29:48.607094 2025] [:error] [pid 51434:tid 51445] [client 45.132.227.64:26149] [client 45.132.227.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/css/dist/footer-default.php"] [unique_id "aR_4zPU96liplEDkw_RTcAAAAQk"]
[Fri Nov 21 13:29:50.005962 2025] [:error] [pid 46194:tid 46214] [client 172.98.32.95:58097] [client 172.98.32.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/widgets/class-wp-widget-meta-request.php"] [unique_id "aR_4zpDRPrSqclDqoQH9agAAAZE"]
[Fri Nov 21 13:29:51.377068 2025] [:error] [pid 46194:tid 46218] [client 136.144.42.78:33817] [client 136.144.42.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/css/dist/edit-widgets/bypass.php"] [unique_id "aR_4z5DRPrSqclDqoQH9bQAAAZU"]
[Fri Nov 21 13:29:53.195976 2025] [:error] [pid 46237:tid 46257] [client 172.98.32.85:61427] [client 172.98.32.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/l10n/wp-login.php"] [unique_id "aR_40So2qlis7MUDbMJDgwAAAdI"]
[Fri Nov 21 13:30:00.040644 2025] [:error] [pid 13327:tid 13393] [client 45.132.227.59:48699] [client 45.132.227.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/widgets/wp-ss.php"] [unique_id "aR_42PBXf-8B6mFkLePy8AAAAIg"]
[Fri Nov 21 13:30:01.022004 2025] [:error] [pid 13326:tid 13379] [client 45.132.227.64:42091] [client 45.132.227.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/IXR/xsec1.php"] [unique_id "aR_42dh942-HkDIkOWpinAAAAFU"]
[Fri Nov 21 13:30:04.227985 2025] [:error] [pid 17882:tid 17899] [client 45.132.227.54:20005] [client 45.132.227.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/images/crystal/sad.php"] [unique_id "aR_43IwFFssEn348h96muAAAAU8"]
[Fri Nov 21 13:30:05.178097 2025] [:error] [pid 51434:tid 51454] [client 172.98.32.94:48455] [client 172.98.32.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aR_43fU96liplEDkw_RTiQAAARI"]
[Fri Nov 21 13:30:07.062122 2025] [:error] [pid 46276:tid 46300] [client 172.98.32.97:53015] [client 172.98.32.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/class-phpmailer-beta.php"] [unique_id "aR_433bpxuSAfajqqKPoSQAAAhE"]
[Fri Nov 21 13:30:07.958052 2025] [:error] [pid 13326:tid 13359] [client 45.132.227.52:48243] [client 45.132.227.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/ms-file.php"] [unique_id "aR_439h942-HkDIkOWpirwAAAEE"]
[Fri Nov 21 13:30:08.939128 2025] [:error] [pid 46276:tid 46298] [client 45.132.227.58:23377] [client 45.132.227.58] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.132.227.58, incrementing brute counter"] [hostname "www.dwelectservices.com.au"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aR_44HbpxuSAfajqqKPoUAAAAg8"]
[Fri Nov 21 13:30:08.952017 2025] [proxy_fcgi:error] [pid 46276:tid 46298] [client 45.132.227.58:23377] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:30:09.413529 2025] [:error] [pid 46276:tid 46283] [client 45.132.227.58:23377] [client 45.132.227.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/widgets/av.php"] [unique_id "aR_44XbpxuSAfajqqKPoVAAAAgA"]
[Fri Nov 21 13:30:11.278500 2025] [proxy_fcgi:error] [pid 13326:tid 13365] [client 172.98.32.96:61705] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:30:12.453960 2025] [:error] [pid 13326:tid 13368] [client 172.98.32.96:61705] [client 172.98.32.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aR_45Nh942-HkDIkOWpixwAAAEo"]
[Fri Nov 21 13:30:13.332684 2025] [:error] [pid 46276:tid 46288] [client 136.144.42.69:36789] [client 136.144.42.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/network.php"] [unique_id "aR_45XbpxuSAfajqqKPobAAAAgU"]
[Fri Nov 21 13:30:15.526766 2025] [proxy_fcgi:error] [pid 13325:tid 13330] [client 172.98.32.82:20063] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:30:18.904218 2025] [:error] [pid 13325:tid 13331] [client 172.98.32.82:20063] [client 172.98.32.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/SimplePie/XML/content.php"] [unique_id "aR_46iBUXj9tD75On3AcAwAAAAE"]
[Fri Nov 21 13:30:19.915519 2025] [:error] [pid 46276:tid 46294] [client 45.132.227.53:47157] [client 45.132.227.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/pomo/item.php"] [unique_id "aR_463bpxuSAfajqqKPohgAAAgs"]
[Fri Nov 21 13:30:21.818304 2025] [:error] [pid 46194:tid 46221] [client 172.98.32.83:64117] [client 172.98.32.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/pomo/plugins.php"] [unique_id "aR_47ZDRPrSqclDqoQH9ogAAAZg"]
[Fri Nov 21 13:30:24.087929 2025] [:error] [pid 13327:tid 13400] [client 136.144.42.79:32771] [client 136.144.42.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/assets/install.php"] [unique_id "aR_48PBXf-8B6mFkLePzJQAAAI8"]
[Fri Nov 21 13:30:24.984656 2025] [proxy_fcgi:error] [pid 46237:tid 46248] [client 45.132.227.68:49821] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:30:26.103356 2025] [:error] [pid 46237:tid 46241] [client 45.132.227.68:49821] [client 45.132.227.68] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.132.227.68, incrementing brute counter"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/css/wp-login.php"] [unique_id "aR_48io2qlis7MUDbMJELgAAAcI"]
[Fri Nov 21 13:30:27.040686 2025] [:error] [pid 46237:tid 46258] [client 45.132.227.68:49821] [client 45.132.227.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/widgets/class-wp-nav-widgets.php"] [unique_id "aR_48yo2qlis7MUDbMJEMwAAAdM"]
[Fri Nov 21 13:30:31.057860 2025] [:error] [pid 46237:tid 46262] [client 172.98.32.79:44837] [client 172.98.32.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/sitemaps/providers/doc.php"] [unique_id "aR_49yo2qlis7MUDbMJEPwAAAdc"]
[Fri Nov 21 13:30:32.050332 2025] [proxy_fcgi:error] [pid 46237:tid 46241] [client 45.132.227.60:23499] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:30:33.370442 2025] [:error] [pid 46237:tid 46243] [client 45.132.227.60:23499] [client 45.132.227.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/rest-api/1.php"] [unique_id "aR_4-So2qlis7MUDbMJERwAAAcQ"]
[Fri Nov 21 13:30:35.399838 2025] [:error] [pid 13327:tid 13387] [client 172.98.32.91:32793] [client 172.98.32.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/fonts/class_api.php"] [unique_id "aR_4-_BXf-8B6mFkLePzNgAAAII"]
[Fri Nov 21 13:30:36.333325 2025] [proxy_fcgi:error] [pid 17882:tid 17906] [client 172.98.32.78:61813] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:30:37.734573 2025] [:error] [pid 17882:tid 17894] [client 172.98.32.78:61813] [client 172.98.32.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/images/smilies/admin.php"] [unique_id "aR_4_YwFFssEn348h96nhwAAAUo"]
[Fri Nov 21 13:30:40.682421 2025] [:error] [pid 13412:tid 13424] [client 45.132.227.55:52003] [client 45.132.227.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/IXR/about.php"] [unique_id "aR_5AH3-knz3ZB6HogEccwAAAMc"]
[Fri Nov 21 13:30:43.189830 2025] [proxy_fcgi:error] [pid 46194:tid 46198] [client 172.98.32.98:57519] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:30:44.073971 2025] [proxy_fcgi:error] [pid 46194:tid 46211] [client 172.98.32.98:57519] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:30:45.175592 2025] [:error] [pid 46194:tid 46219] [client 172.98.32.98:57519] [client 172.98.32.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/class-wp-customize-manager-interpreter.php"] [unique_id "aR_5BZDRPrSqclDqoQH9ugAAAZY"]
[Fri Nov 21 13:30:46.247590 2025] [:error] [pid 13325:tid 13351] [client 172.98.32.95:32827] [client 172.98.32.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/bypass.php"] [unique_id "aR_5BiBUXj9tD75On3AcRwAAABU"]
[Fri Nov 21 13:30:47.813222 2025] [:error] [pid 13325:tid 13339] [client 172.98.32.78:59639] [client 172.98.32.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/count.php"] [unique_id "aR_5ByBUXj9tD75On3AcVAAAAAk"]
[Fri Nov 21 13:30:48.698480 2025] [proxy_fcgi:error] [pid 13326:tid 13364] [client 172.98.32.96:42829] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:30:51.567311 2025] [:error] [pid 13326:tid 13369] [client 172.98.32.96:42829] [client 172.98.32.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "aR_5C9h942-HkDIkOWpjPQAAAEs"]
[Fri Nov 21 13:30:53.499326 2025] [:error] [pid 17882:tid 17903] [client 45.132.227.54:63367] [client 45.132.227.54] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/usr/local/apache/modsecurity-cwaf/rules/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder||www.dwelectservices.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "www.dwelectservices.com.au"] [uri "/images/stories/themes.php"] [unique_id "aR_5DYwFFssEn348h96n6gAAAVM"]
[Fri Nov 21 13:30:53.928008 2025] [:error] [pid 17882:tid 17893] [client 45.132.227.54:63367] [client 45.132.227.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/theme-compat/footer-embed-function.php"] [unique_id "aR_5DYwFFssEn348h96n8AAAAUk"]
[Fri Nov 21 13:30:55.907299 2025] [:error] [pid 13326:tid 13382] [client 172.98.32.87:35489] [client 172.98.32.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/l10n/class-wp-translation-file-mo-event.php"] [unique_id "aR_5D9h942-HkDIkOWpjZAAAAFg"]
[Fri Nov 21 13:30:56.827888 2025] [:error] [pid 13326:tid 13380] [client 45.132.227.58:33211] [client 45.132.227.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/vars-soap.php"] [unique_id "aR_5ENh942-HkDIkOWpjbgAAAFY"]
[Fri Nov 21 13:30:58.712727 2025] [proxy_fcgi:error] [pid 13327:tid 13395] [client 172.98.32.94:44671] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:31:00.619652 2025] [:error] [pid 13327:tid 13403] [client 172.98.32.94:44671] [client 172.98.32.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/id3/wp-work.php"] [unique_id "aR_5FPBXf-8B6mFkLePzaAAAAJI"]
[Fri Nov 21 13:31:02.524124 2025] [:error] [pid 17882:tid 17906] [client 172.98.32.99:57687] [client 172.98.32.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/class-wp-taxonomy.editor.php"] [unique_id "aR_5FowFFssEn348h96oLAAAAVY"]
[Fri Nov 21 13:31:03.991347 2025] [:error] [pid 17882:tid 17902] [client 45.132.227.64:28455] [client 45.132.227.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/js/wp-conflg.php"] [unique_id "aR_5F4wFFssEn348h96oNwAAAVI"]
[Fri Nov 21 13:31:04.958298 2025] [proxy_fcgi:error] [pid 46276:tid 46289] [client 172.98.32.88:23659] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:31:07.328966 2025] [:error] [pid 46276:tid 46286] [client 172.98.32.88:23659] [client 172.98.32.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/interactivity-api/interactivity-api-xml.php"] [unique_id "aR_5G3bpxuSAfajqqKPpGwAAAgM"]
[Fri Nov 21 13:31:08.742755 2025] [:error] [pid 46194:tid 46207] [client 136.144.42.75:35099] [client 136.144.42.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/colour.php"] [unique_id "aR_5HJDRPrSqclDqoQH9zgAAAYo"]
[Fri Nov 21 13:31:09.675707 2025] [proxy_fcgi:error] [pid 51434:tid 51442] [client 172.98.32.93:43941] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:31:10.107425 2025] [:error] [pid 51434:tid 51447] [client 172.98.32.93:43941] [client 172.98.32.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/customize/class-wp-customize-background-position-control-variable.php"] [unique_id "aR_5HvU96liplEDkw_RUjQAAAQs"]
[Fri Nov 21 13:31:11.123780 2025] [:error] [pid 46194:tid 46213] [client 136.144.42.78:56385] [client 136.144.42.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/images/include.php"] [unique_id "aR_5H5DRPrSqclDqoQH91gAAAZA"]
[Fri Nov 21 13:31:12.980104 2025] [:error] [pid 17882:tid 17905] [client 172.98.32.93:52579] [client 172.98.32.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/js/imgareaselect/wp-login.php"] [unique_id "aR_5IIwFFssEn348h96oZwAAAVU"]
[Fri Nov 21 13:31:15.338808 2025] [proxy_fcgi:error] [pid 13412:tid 13423] [client 172.98.32.76:62699] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:31:15.879799 2025] [:error] [pid 13412:tid 13436] [client 172.98.32.76:62699] [client 172.98.32.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/l10n/class-wp-translations-interface.php"] [unique_id "aR_5I33-knz3ZB6HogEcvAAAANM"]
[Fri Nov 21 13:31:16.783711 2025] [:error] [pid 46194:tid 46212] [client 45.132.227.56:34307] [client 45.132.227.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/assets/about5.php"] [unique_id "aR_5JJDRPrSqclDqoQH94AAAAY8"]
[Fri Nov 21 13:31:21.258164 2025] [:error] [pid 17882:tid 17893] [client 172.98.32.99:50115] [client 172.98.32.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/ID3/db.php"] [unique_id "aR_5KYwFFssEn348h96ojAAAAUk"]
[Fri Nov 21 13:31:23.135409 2025] [:error] [pid 46237:tid 46254] [client 45.132.227.68:64075] [client 45.132.227.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/js/dist/bypass.php"] [unique_id "aR_5Kyo2qlis7MUDbMJE3QAAAc8"]
[Fri Nov 21 13:31:24.002048 2025] [proxy_fcgi:error] [pid 13326:tid 13377] [client 45.132.227.54:20819] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:31:26.155497 2025] [:error] [pid 13326:tid 13367] [client 45.132.227.54:20819] [client 45.132.227.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/sitemaps/wp-conflg.php"] [unique_id "aR_5Lth942-HkDIkOWpkBQAAAEk"]
[Fri Nov 21 13:31:27.039518 2025] [:error] [pid 46276:tid 46293] [client 172.98.32.99:62071] [client 172.98.32.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.php"] [unique_id "aR_5L3bpxuSAfajqqKPpXwAAAgo"]
[Fri Nov 21 13:31:28.539769 2025] [:error] [pid 46276:tid 46301] [client 45.132.227.63:61413] [client 45.132.227.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/SimplePie/login.php"] [unique_id "aR_5MHbpxuSAfajqqKPpagAAAhI"]
[Fri Nov 21 13:31:29.432855 2025] [proxy_fcgi:error] [pid 17882:tid 17888] [client 136.144.42.79:34887] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:31:30.354843 2025] [:error] [pid 17882:tid 17898] [client 136.144.42.79:34887] [client 136.144.42.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/sitemaps/chosen.php"] [unique_id "aR_5MowFFssEn348h96o0QAAAU4"]
[Fri Nov 21 13:31:31.397258 2025] [proxy_fcgi:error] [pid 46194:tid 46216] [client 172.98.32.82:53259] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:31:32.299146 2025] [:error] [pid 46194:tid 46208] [client 172.98.32.82:53259] [client 172.98.32.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/SimplePie/Cache/index.php"] [unique_id "aR_5NJDRPrSqclDqoQH-CQAAAYs"]
[Fri Nov 21 13:31:34.213267 2025] [:error] [pid 51434:tid 51455] [client 172.98.32.94:62019] [client 172.98.32.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/css/dist/about.php"] [unique_id "aR_5NvU96liplEDkw_RUvQAAARM"]
[Fri Nov 21 13:31:36.343406 2025] [:error] [pid 13327:tid 13400] [client 45.132.227.67:27587] [client 45.132.227.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aR_5OPBXf-8B6mFkLePzwwAAAI8"]
[Fri Nov 21 13:31:37.294919 2025] [:error] [pid 13412:tid 13436] [client 172.98.32.78:34197] [client 172.98.32.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/js/simi.php"] [unique_id "aR_5OX3-knz3ZB6HogEc8wAAANM"]
[Fri Nov 21 13:31:39.129785 2025] [:error] [pid 46194:tid 46204] [client 172.98.32.90:60667] [client 172.98.32.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/Requests/Text/index.php"] [unique_id "aR_5O5DRPrSqclDqoQH-GQAAAYc"]
[Fri Nov 21 13:31:40.596228 2025] [:error] [pid 17882:tid 17890] [client 172.98.32.93:20303] [client 172.98.32.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/sitemaps/abcd.php"] [unique_id "aR_5PIwFFssEn348h96pIgAAAUY"]
[Fri Nov 21 13:31:41.864653 2025] [:error] [pid 17882:tid 17897] [client 172.98.32.83:23713] [client 172.98.32.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/ID3/rk2.php"] [unique_id "aR_5PYwFFssEn348h96pNQAAAU0"]
[Fri Nov 21 13:31:44.214180 2025] [:error] [pid 46276:tid 46304] [client 136.144.42.74:26001] [client 136.144.42.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/widgets/class-wp-widget-search-interpreter.php"] [unique_id "aR_5QHbpxuSAfajqqKPpogAAAhU"]
[Fri Nov 21 13:31:46.525912 2025] [:error] [pid 13325:tid 13350] [client 172.98.32.87:35313] [client 172.98.32.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/block-template-utils-other.php"] [unique_id "aR_5QiBUXj9tD75On3AdlQAAABQ"]
[Fri Nov 21 13:31:47.888724 2025] [proxy_fcgi:error] [pid 46276:tid 46290] [client 172.98.32.84:30431] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:31:48.355737 2025] [:error] [pid 46276:tid 46292] [client 172.98.32.84:30431] [client 172.98.32.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/sodium_compat/lib/widget-group.php"] [unique_id "aR_5RHbpxuSAfajqqKPptgAAAgk"]
[Fri Nov 21 13:31:50.964747 2025] [:error] [pid 17882:tid 17907] [client 45.132.227.61:57203] [client 45.132.227.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/js/jcrop/about.php"] [unique_id "aR_5RowFFssEn348h96pdwAAAVc"]
[Fri Nov 21 13:31:52.957139 2025] [:error] [pid 13325:tid 13332] [client 136.144.42.74:64601] [client 136.144.42.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/customize/chosen.php"] [unique_id "aR_5SCBUXj9tD75On3AdrgAAAAI"]
[Fri Nov 21 13:31:54.786069 2025] [proxy_fcgi:error] [pid 46194:tid 46217] [client 136.144.42.73:42921] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:31:57.723446 2025] [:error] [pid 46194:tid 46206] [client 136.144.42.73:42921] [client 136.144.42.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/plugin.php"] [unique_id "aR_5TZDRPrSqclDqoQH-LwAAAYk"]
[Fri Nov 21 13:31:58.684990 2025] [:error] [pid 46194:tid 46216] [client 45.132.227.64:35717] [client 45.132.227.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/class-wp-scripts-query.php"] [unique_id "aR_5TpDRPrSqclDqoQH-MAAAAZM"]
[Fri Nov 21 13:32:00.187949 2025] [proxy_fcgi:error] [pid 46194:tid 46199] [client 136.144.42.77:62095] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:32:01.356023 2025] [:error] [pid 46194:tid 46207] [client 136.144.42.77:62095] [client 136.144.42.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/ID3/module.audio-license.php"] [unique_id "aR_5UZDRPrSqclDqoQH-OAAAAYo"]
[Fri Nov 21 13:32:05.645977 2025] [:error] [pid 46276:tid 46289] [client 172.98.32.78:60125] [client 172.98.32.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/class-wp-error-module.php"] [unique_id "aR_5VXbpxuSAfajqqKPpzQAAAgY"]
[Fri Nov 21 13:32:06.537443 2025] [proxy_fcgi:error] [pid 46237:tid 46259] [client 172.98.32.91:45237] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:32:07.687075 2025] [proxy_fcgi:error] [pid 46237:tid 46258] [client 172.98.32.91:45237] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:32:08.249600 2025] [:error] [pid 46237:tid 46249] [client 172.98.32.91:45237] [client 172.98.32.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/css/litespeed.php"] [unique_id "aR_5WCo2qlis7MUDbMJFGQAAAco"]
[Fri Nov 21 13:32:10.402476 2025] [:error] [pid 46276:tid 46286] [client 172.98.32.86:48155] [client 172.98.32.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/css/dist/alam.php"] [unique_id "aR_5WnbpxuSAfajqqKPp2wAAAgM"]
[Fri Nov 21 13:32:11.633452 2025] [proxy_fcgi:error] [pid 13325:tid 13350] [client 172.98.32.78:34665] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:32:12.290359 2025] [:error] [pid 13325:tid 13347] [client 172.98.32.78:34665] [client 172.98.32.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/block-bindings/imagess.php"] [unique_id "aR_5XCBUXj9tD75On3AeFwAAABE"]
[Fri Nov 21 13:32:14.539808 2025] [:error] [pid 46237:tid 46244] [client 172.98.32.82:42439] [client 172.98.32.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/default-filters-edit.php"] [unique_id "aR_5Xio2qlis7MUDbMJFHwAAAcU"]
[Fri Nov 21 13:32:15.555239 2025] [proxy_fcgi:error] [pid 51434:tid 51460] [client 172.98.32.76:63977] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:32:18.162790 2025] [proxy_fcgi:error] [pid 51434:tid 51443] [client 172.98.32.76:63977] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:32:18.600263 2025] [:error] [pid 51434:tid 51441] [client 172.98.32.76:63977] [client 172.98.32.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/Requests/Auth/index.php"] [unique_id "aR_5YvU96liplEDkw_RVCAAAAQU"]
[Fri Nov 21 13:32:20.957750 2025] [:error] [pid 13326:tid 13364] [client 45.132.227.67:61951] [client 45.132.227.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/Text/Diff/Engine/theme.php"] [unique_id "aR_5ZNh942-HkDIkOWplJwAAAEY"]
[Fri Nov 21 13:32:21.927018 2025] [proxy_fcgi:error] [pid 13327:tid 13395] [client 172.98.32.76:59895] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:32:22.354650 2025] [:error] [pid 13327:tid 13397] [client 172.98.32.76:59895] [client 172.98.32.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/ID3/shell.php"] [unique_id "aR_5ZvBXf-8B6mFkLeP0RgAAAIw"]
[Fri Nov 21 13:32:23.287230 2025] [:error] [pid 46194:tid 46216] [client 45.132.227.59:22347] [client 45.132.227.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/customize/class-wp-customize-selective-refresh-library.php"] [unique_id "aR_5Z5DRPrSqclDqoQH-UAAAAZM"]
[Fri Nov 21 13:32:24.279901 2025] [proxy_fcgi:error] [pid 46276:tid 46305] [client 45.132.227.63:45975] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:32:25.216274 2025] [:error] [pid 46276:tid 46291] [client 45.132.227.63:45975] [client 45.132.227.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/Requests/library/wp-login.php"] [unique_id "aR_5aXbpxuSAfajqqKPp8wAAAgg"]
[Fri Nov 21 13:32:26.127888 2025] [:error] [pid 46276:tid 46292] [client 45.132.227.61:60117] [client 45.132.227.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/interactivity-api/about.php"] [unique_id "aR_5anbpxuSAfajqqKPp9wAAAgk"]
[Fri Nov 21 13:32:27.157625 2025] [proxy_fcgi:error] [pid 17882:tid 17895] [client 172.98.32.94:24707] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:32:29.982276 2025] [:error] [pid 17882:tid 17899] [client 172.98.32.94:24707] [client 172.98.32.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/wp-2019.php"] [unique_id "aR_5bYwFFssEn348h96p2QAAAU8"]
[Fri Nov 21 13:32:30.898151 2025] [:error] [pid 13326:tid 13361] [client 172.98.32.77:30535] [client 172.98.32.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/SimplePie/info.php"] [unique_id "aR_5bth942-HkDIkOWplVwAAAEM"]
[Fri Nov 21 13:32:33.728076 2025] [:error] [pid 13325:tid 13332] [client 136.144.42.80:61371] [client 136.144.42.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/log.php"] [unique_id "aR_5cSBUXj9tD75On3AecQAAAAI"]
[Fri Nov 21 13:32:34.707686 2025] [:error] [pid 13326:tid 13366] [client 45.132.227.68:54033] [client 45.132.227.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime-num.php"] [unique_id "aR_5cth942-HkDIkOWpldQAAAEg"]
[Fri Nov 21 13:32:35.574622 2025] [:error] [pid 17882:tid 17900] [client 45.132.227.59:51449] [client 45.132.227.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-entry.min-object.php"] [unique_id "aR_5c4wFFssEn348h96p5QAAAVA"]
[Fri Nov 21 13:32:36.516244 2025] [:error] [pid 46237:tid 46249] [client 45.132.227.55:33701] [client 45.132.227.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/aw.php"] [unique_id "aR_5dCo2qlis7MUDbMJFOAAAAco"]
[Fri Nov 21 13:32:39.434180 2025] [:error] [pid 46237:tid 46245] [client 45.132.227.55:24601] [client 45.132.227.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/IXR/db.php"] [unique_id "aR_5dyo2qlis7MUDbMJFPgAAAcY"]
[Fri Nov 21 13:32:40.335713 2025] [:error] [pid 51434:tid 51443] [client 172.98.32.89:24371] [client 172.98.32.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/css/install.php"] [unique_id "aR_5ePU96liplEDkw_RVJAAAAQc"]
[Fri Nov 21 13:32:43.094161 2025] [proxy_fcgi:error] [pid 17882:tid 17908] [client 172.98.32.90:46185] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:32:43.556670 2025] [:error] [pid 17882:tid 17905] [client 172.98.32.90:46185] [client 172.98.32.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/css/dist/install.php"] [unique_id "aR_5e4wFFssEn348h96p-AAAAVU"]
[Fri Nov 21 13:32:44.603509 2025] [:error] [pid 17882:tid 17906] [client 45.132.227.52:23895] [client 45.132.227.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/style-engine/dedi1.php"] [unique_id "aR_5fIwFFssEn348h96p-wAAAVY"]
[Fri Nov 21 13:32:47.510648 2025] [:error] [pid 13327:tid 13402] [client 172.98.32.98:43323] [client 172.98.32.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/template-less.php"] [unique_id "aR_5f_BXf-8B6mFkLeP0cgAAAJE"]
[Fri Nov 21 13:32:48.495838 2025] [:error] [pid 13327:tid 13404] [client 172.98.32.82:56483] [client 172.98.32.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/pomo/alfa-rex.php"] [unique_id "aR_5gPBXf-8B6mFkLeP0dAAAAJM"]
[Fri Nov 21 13:32:54.679492 2025] [:error] [pid 17882:tid 17892] [client 45.132.227.59:48239] [client 45.132.227.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/assets/min.php"] [unique_id "aR_5howFFssEn348h96qFgAAAUg"]
[Fri Nov 21 13:32:55.619993 2025] [:error] [pid 13327:tid 13396] [client 172.98.32.91:62065] [client 172.98.32.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/wp-conflg.php"] [unique_id "aR_5h_BXf-8B6mFkLeP0eAAAAIs"]
[Fri Nov 21 13:32:57.471322 2025] [:error] [pid 46276:tid 46285] [client 172.98.32.79:44357] [client 172.98.32.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/file.php"] [unique_id "aR_5iXbpxuSAfajqqKPqLgAAAgI"]
[Fri Nov 21 13:33:01.918951 2025] [:error] [pid 17882:tid 17889] [client 172.98.32.86:63235] [client 172.98.32.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/block-patterns/about.php"] [unique_id "aR_5jYwFFssEn348h96qKAAAAUU"]
[Fri Nov 21 13:33:04.847376 2025] [:error] [pid 13325:tid 13331] [client 136.144.42.75:35093] [client 136.144.42.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/load.php"] [unique_id "aR_5kCBUXj9tD75On3AepAAAAAE"]
[Fri Nov 21 13:33:05.846786 2025] [:error] [pid 46237:tid 46261] [client 136.144.42.77:60163] [client 136.144.42.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/ID3/chosen.php"] [unique_id "aR_5kSo2qlis7MUDbMJFbgAAAdY"]
[Fri Nov 21 13:33:06.707869 2025] [:error] [pid 51434:tid 51443] [client 45.132.227.65:25829] [client 45.132.227.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/class-wp-theme-float.php"] [unique_id "aR_5kvU96liplEDkw_RVRgAAAQc"]
[Fri Nov 21 13:33:09.151122 2025] [:error] [pid 13327:tid 13407] [client 45.132.227.57:33633] [client 45.132.227.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/widgets/wp-style.php"] [unique_id "aR_5lfBXf-8B6mFkLeP0jwAAAJY"]
[Fri Nov 21 13:33:10.074612 2025] [proxy_fcgi:error] [pid 46194:tid 46218] [client 172.98.32.81:26367] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:33:10.559001 2025] [:error] [pid 46194:tid 46216] [client 172.98.32.81:26367] [client 172.98.32.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/widgets/autoload_classmap.php"] [unique_id "aR_5lpDRPrSqclDqoQH-pwAAAZM"]
[Fri Nov 21 13:33:12.992016 2025] [proxy_fcgi:error] [pid 17882:tid 17897] [client 136.144.42.72:28875] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:33:14.544913 2025] [:error] [pid 17882:tid 17889] [client 136.144.42.72:28875] [client 136.144.42.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/block-bindings/admin.php"] [unique_id "aR_5mowFFssEn348h96qPAAAAUU"]
[Fri Nov 21 13:33:16.455135 2025] [:error] [pid 17882:tid 17887] [client 172.98.32.85:61357] [client 172.98.32.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/PHPMailer/autoload_classmap.php"] [unique_id "aR_5nIwFFssEn348h96qPwAAAUM"]
[Fri Nov 21 13:33:20.427910 2025] [:error] [pid 46194:tid 46197] [client 136.144.42.75:24903] [client 136.144.42.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/theme-compat/db.php"] [unique_id "aR_5oJDRPrSqclDqoQH-wAAAAYA"]
[Fri Nov 21 13:33:21.807711 2025] [proxy_fcgi:error] [pid 46194:tid 46209] [client 45.132.227.57:52443] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:33:22.292561 2025] [proxy_fcgi:error] [pid 46194:tid 46214] [client 45.132.227.57:52443] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:33:23.637585 2025] [proxy_fcgi:error] [pid 46194:tid 46206] [client 45.132.227.57:52443] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:33:25.443446 2025] [:error] [pid 46194:tid 46217] [client 45.132.227.57:52443] [client 45.132.227.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/assets/system.php"] [unique_id "aR_5pZDRPrSqclDqoQH-2gAAAZQ"]
[Fri Nov 21 13:33:26.830681 2025] [:error] [pid 17882:tid 17905] [client 172.98.32.76:62415] [client 172.98.32.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/block-bindings/about.php"] [unique_id "aR_5powFFssEn348h96qUwAAAVU"]
[Fri Nov 21 13:33:28.686023 2025] [:error] [pid 51434:tid 51452] [client 172.98.32.96:55721] [client 172.98.32.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/customize/class-wp-customize-upload-control-cookie.php"] [unique_id "aR_5qPU96liplEDkw_RVZgAAARA"]
[Fri Nov 21 13:33:29.556095 2025] [:error] [pid 46237:tid 46257] [client 45.132.227.65:61029] [client 45.132.227.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/ID3/simi.php"] [unique_id "aR_5qSo2qlis7MUDbMJFiAAAAdI"]
[Fri Nov 21 13:33:30.504274 2025] [:error] [pid 46276:tid 46303] [client 172.98.32.79:58341] [client 172.98.32.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/class-wp-taxonomy-sample.php"] [unique_id "aR_5qnbpxuSAfajqqKPqYgAAAhQ"]
[Fri Nov 21 13:34:44.474017 2025] [autoindex:error] [pid 46276:tid 46289] [client 45.132.227.53:32805] AH01276: Cannot serve directory /home/dwelects/public_html/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 21 14:34:04.226760 2025] [:error] [pid 25521:tid 25545] [client 213.21.239.4:38306] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.git/config"] [unique_id "aSAH3PhXnBMilDddn3WuGAAAANY"]
[Fri Nov 21 14:34:05.646239 2025] [:error] [pid 25554:tid 25571] [client 213.21.239.4:48466] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.git/config"] [unique_id "aSAH3R-NtB-9AzFZrk4KkwAAAQ0"]
[Fri Nov 21 15:05:18.268246 2025] [:error] [pid 25554:tid 25582] [client 213.21.239.4:37446] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dwelectservices.com.au"] [uri "/.git/config"] [unique_id "aSAPLh-NtB-9AzFZrk4e0gAAARg"]
[Fri Nov 21 15:33:05.960386 2025] [:error] [pid 25430:tid 25484] [client 213.21.239.4:52824] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.svn/wc.db"] [unique_id "aSAVsapnWJcWt_4foXkrsgAAAFg"]
[Fri Nov 21 16:04:21.742281 2025] [:error] [pid 25431:tid 25493] [client 213.21.239.4:39968] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dwelectservices.com.au"] [uri "/.svn/wc.db"] [unique_id "aSAdBcklhXxmoIExII03wwAAAIY"]
[Fri Nov 21 19:13:29.093163 2025] [proxy_fcgi:error] [pid 25430:tid 25478] [client 31.171.130.151:53167] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:13:30.140544 2025] [proxy_fcgi:error] [pid 25430:tid 25484] [client 31.171.130.151:53167] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:13:30.626509 2025] [:error] [pid 25430:tid 25476] [client 31.171.130.151:53167] [client 31.171.130.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aSBJWqpnWJcWt_4foXl6QwAAAFA"]
[Fri Nov 21 19:13:31.541810 2025] [proxy_fcgi:error] [pid 25431:tid 25493] [client 31.171.130.151:46501] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:13:32.040500 2025] [:error] [pid 25431:tid 25501] [client 31.171.130.151:46501] [client 31.171.130.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/bk/index.php"] [unique_id "aSBJXMklhXxmoIExII15vwAAAI4"]
[Fri Nov 21 19:13:33.058252 2025] [proxy_fcgi:error] [pid 25429:tid 25450] [client 31.171.130.109:52603] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:13:34.089290 2025] [proxy_fcgi:error] [pid 25429:tid 25453] [client 31.171.130.109:52603] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:13:35.319346 2025] [proxy_fcgi:error] [pid 25429:tid 25433] [client 31.171.130.109:52603] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:13:35.800856 2025] [proxy_fcgi:error] [pid 25429:tid 25446] [client 31.171.130.109:52603] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:13:36.815813 2025] [:error] [pid 25429:tid 25439] [client 31.171.130.109:52603] [client 31.171.130.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/theme-compat/chosen.php"] [unique_id "aSBJYD4rZbRSr7vu-NPhOQAAAAY"]
[Fri Nov 21 19:13:37.837777 2025] [proxy_fcgi:error] [pid 25554:tid 25558] [client 31.171.130.115:40093] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:13:38.347321 2025] [proxy_fcgi:error] [pid 25554:tid 25568] [client 31.171.130.115:40093] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:13:38.816597 2025] [:error] [pid 25554:tid 25579] [client 31.171.130.115:40093] [client 31.171.130.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/IXR/chosen.php"] [unique_id "aSBJYh-NtB-9AzFZrk6STgAAARU"]
[Fri Nov 21 19:13:40.840039 2025] [:error] [pid 46939:tid 46947] [client 31.171.130.135:21813] [client 31.171.130.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/chosen.php"] [unique_id "aSBJZO0OmVoxD4VZ_ZnM-gAAAUU"]
[Fri Nov 21 19:13:42.846987 2025] [:error] [pid 25554:tid 25565] [client 31.171.130.152:62527] [client 31.171.130.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/pomo/wp-conflg.php"] [unique_id "aSBJZh-NtB-9AzFZrk6SUAAAAQc"]
[Fri Nov 21 19:13:44.319496 2025] [:error] [pid 25521:tid 25546] [client 31.171.130.152:34667] [client 31.171.130.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "aSBJaPhXnBMilDddn3UoHgAAANc"]
[Fri Nov 21 19:13:46.866468 2025] [:error] [pid 46939:tid 46965] [client 31.171.130.110:33767] [client 31.171.130.110] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Requests/Auth/index.php"] [unique_id "aSBJau0OmVoxD4VZ_ZnNBAAAAVc"]
[Fri Nov 21 19:13:48.837541 2025] [proxy_fcgi:error] [pid 25521:tid 25532] [client 31.171.130.145:45421] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:13:50.413424 2025] [proxy_fcgi:error] [pid 25521:tid 25529] [client 31.171.130.145:45421] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:13:50.869714 2025] [:error] [pid 25521:tid 25540] [client 31.171.130.145:45421] [client 31.171.130.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aSBJbvhXnBMilDddn3UoKwAAANE"]
[Fri Nov 21 19:13:51.848722 2025] [:error] [pid 25521:tid 25523] [client 31.171.130.165:24361] [client 31.171.130.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "aSBJb_hXnBMilDddn3UoLAAAAMA"]
[Fri Nov 21 19:13:53.380205 2025] [proxy_fcgi:error] [pid 46939:tid 46943] [client 31.171.130.148:33339] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:13:53.848849 2025] [proxy_fcgi:error] [pid 46939:tid 46942] [client 31.171.130.148:33339] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:13:54.318225 2025] [proxy_fcgi:error] [pid 46939:tid 46961] [client 31.171.130.148:33339] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:13:54.833208 2025] [proxy_fcgi:error] [pid 46939:tid 46953] [client 31.171.130.148:33339] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:13:55.311962 2025] [proxy_fcgi:error] [pid 46939:tid 46957] [client 31.171.130.148:33339] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:13:56.136956 2025] [proxy_fcgi:error] [pid 46939:tid 46960] [client 31.171.130.148:33339] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:13:56.785800 2025] [proxy_fcgi:error] [pid 46939:tid 46951] [client 31.171.130.148:33339] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:13:57.211784 2025] [proxy_fcgi:error] [pid 46939:tid 46948] [client 31.171.130.148:33339] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:13:58.573255 2025] [proxy_fcgi:error] [pid 46939:tid 46958] [client 31.171.130.148:33339] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:14:00.013923 2025] [proxy_fcgi:error] [pid 46939:tid 46964] [client 31.171.130.148:33339] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:14:01.333937 2025] [proxy_fcgi:error] [pid 46939:tid 46949] [client 31.171.130.148:33339] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:14:02.050373 2025] [proxy_fcgi:error] [pid 46939:tid 46944] [client 31.171.130.148:33339] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:14:02.587044 2025] [proxy_fcgi:error] [pid 46939:tid 46953] [client 31.171.130.148:33339] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:14:03.347114 2025] [proxy_fcgi:error] [pid 46939:tid 46946] [client 31.171.130.148:33339] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:14:03.773612 2025] [proxy_fcgi:error] [pid 46939:tid 46960] [client 31.171.130.148:33339] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:14:04.334674 2025] [proxy_fcgi:error] [pid 46939:tid 46965] [client 31.171.130.148:33339] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:14:04.851664 2025] [proxy_fcgi:error] [pid 46939:tid 46962] [client 31.171.130.148:33339] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:14:05.333283 2025] [proxy_fcgi:error] [pid 46939:tid 46954] [client 31.171.130.148:33339] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:14:05.811092 2025] [proxy_fcgi:error] [pid 46939:tid 46958] [client 31.171.130.148:33339] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:14:06.338113 2025] [proxy_fcgi:error] [pid 46939:tid 46942] [client 31.171.130.148:33339] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:14:06.831781 2025] [proxy_fcgi:error] [pid 46939:tid 46943] [client 31.171.130.148:33339] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:14:07.317910 2025] [proxy_fcgi:error] [pid 46939:tid 46964] [client 31.171.130.148:33339] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:14:07.832196 2025] [proxy_fcgi:error] [pid 46939:tid 46961] [client 31.171.130.148:33339] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:14:08.260628 2025] [proxy_fcgi:error] [pid 46939:tid 46945] [client 31.171.130.148:33339] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:14:08.820786 2025] [proxy_fcgi:error] [pid 46939:tid 46949] [client 31.171.130.148:33339] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:14:10.026737 2025] [proxy_fcgi:error] [pid 46939:tid 46946] [client 31.171.130.148:33339] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:14:10.647397 2025] [proxy_fcgi:error] [pid 46939:tid 46960] [client 31.171.130.148:33339] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:14:11.172989 2025] [proxy_fcgi:error] [pid 46939:tid 46952] [client 31.171.130.148:33339] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:14:11.663631 2025] [proxy_fcgi:error] [pid 46939:tid 46966] [client 31.171.130.148:33339] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:14:12.207245 2025] [proxy_fcgi:error] [pid 46939:tid 46965] [client 31.171.130.148:33339] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:14:12.731042 2025] [proxy_fcgi:error] [pid 46939:tid 46957] [client 31.171.130.148:33339] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:14:13.243919 2025] [proxy_fcgi:error] [pid 46939:tid 46948] [client 31.171.130.148:33339] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:14:13.728054 2025] [proxy_fcgi:error] [pid 46939:tid 46962] [client 31.171.130.148:33339] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:14:14.341912 2025] [:error] [pid 46939:tid 46950] [client 31.171.130.148:33339] [client 31.171.130.148] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.148, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-login.php"] [unique_id "aSBJhu0OmVoxD4VZ_ZnNNgAAAUg"]
[Fri Nov 21 19:14:14.347662 2025] [proxy_fcgi:error] [pid 46939:tid 46950] [client 31.171.130.148:33339] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:14:15.361209 2025] [proxy_fcgi:error] [pid 46939:tid 46959] [client 31.171.130.148:33339] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:14:16.614820 2025] [proxy_fcgi:error] [pid 46939:tid 46958] [client 31.171.130.148:33339] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:14:17.084758 2025] [:error] [pid 46939:tid 46942] [client 31.171.130.148:33339] [client 31.171.130.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/modules.php"] [unique_id "aSBJie0OmVoxD4VZ_ZnNOgAAAUA"]
[Fri Nov 21 19:14:18.351199 2025] [proxy_fcgi:error] [pid 25521:tid 25535] [client 31.171.130.143:64103] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:14:18.830161 2025] [proxy_fcgi:error] [pid 25521:tid 25526] [client 31.171.130.143:64103] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:14:19.824509 2025] [proxy_fcgi:error] [pid 25521:tid 25525] [client 31.171.130.143:64103] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:14:20.315843 2025] [proxy_fcgi:error] [pid 25521:tid 25546] [client 31.171.130.143:64103] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:14:21.021035 2025] [proxy_fcgi:error] [pid 25521:tid 25536] [client 31.171.130.143:64103] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:14:21.455218 2025] [proxy_fcgi:error] [pid 25521:tid 25545] [client 31.171.130.143:64103] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:14:22.545761 2025] [proxy_fcgi:error] [pid 25521:tid 25542] [client 31.171.130.143:64103] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:14:23.091031 2025] [proxy_fcgi:error] [pid 25521:tid 25539] [client 31.171.130.143:64103] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:14:23.553019 2025] [proxy_fcgi:error] [pid 25521:tid 25541] [client 31.171.130.143:64103] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:14:24.711568 2025] [:error] [pid 25521:tid 25536] [client 31.171.130.143:64103] [client 31.171.130.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/codeboy1877_up.php"] [unique_id "aSBJkPhXnBMilDddn3UobAAAAM0"]
[Fri Nov 21 19:14:25.664184 2025] [proxy_fcgi:error] [pid 25431:tid 25500] [client 31.171.130.163:33463] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:14:26.154666 2025] [proxy_fcgi:error] [pid 25431:tid 25506] [client 31.171.130.163:33463] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:14:28.751107 2025] [proxy_fcgi:error] [pid 25431:tid 25507] [client 31.171.130.163:33463] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:14:29.233663 2025] [proxy_fcgi:error] [pid 25431:tid 25499] [client 31.171.130.163:33463] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:14:29.807646 2025] [proxy_fcgi:error] [pid 25431:tid 25503] [client 31.171.130.163:33463] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:14:30.245118 2025] [proxy_fcgi:error] [pid 25431:tid 25498] [client 31.171.130.163:33463] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:14:30.902811 2025] [proxy_fcgi:error] [pid 25431:tid 25511] [client 31.171.130.163:33463] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:14:32.444914 2025] [proxy_fcgi:error] [pid 25431:tid 25497] [client 31.171.130.163:33463] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:14:34.033256 2025] [proxy_fcgi:error] [pid 25431:tid 25489] [client 31.171.130.163:33463] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:14:34.451362 2025] [proxy_fcgi:error] [pid 25431:tid 25491] [client 31.171.130.163:33463] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:14:35.443604 2025] [proxy_fcgi:error] [pid 25431:tid 25496] [client 31.171.130.163:33463] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:14:35.917520 2025] [proxy_fcgi:error] [pid 25431:tid 25493] [client 31.171.130.163:33463] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:14:36.373399 2025] [proxy_fcgi:error] [pid 25431:tid 25499] [client 31.171.130.163:33463] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:14:36.852515 2025] [proxy_fcgi:error] [pid 25431:tid 25504] [client 31.171.130.163:33463] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:14:38.136483 2025] [proxy_fcgi:error] [pid 25431:tid 25489] [client 31.171.130.163:33463] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:14:38.560121 2025] [proxy_fcgi:error] [pid 25431:tid 25492] [client 31.171.130.163:33463] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:14:39.518487 2025] [proxy_fcgi:error] [pid 25431:tid 25491] [client 31.171.130.163:33463] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:14:40.123959 2025] [proxy_fcgi:error] [pid 25431:tid 25495] [client 31.171.130.163:33463] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:14:40.573240 2025] [proxy_fcgi:error] [pid 25431:tid 25493] [client 31.171.130.163:33463] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:14:41.035870 2025] [proxy_fcgi:error] [pid 25431:tid 25504] [client 31.171.130.163:33463] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:14:41.552686 2025] [proxy_fcgi:error] [pid 25431:tid 25501] [client 31.171.130.163:33463] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:14:42.043700 2025] [:error] [pid 25431:tid 25502] [client 31.171.130.163:33463] [client 31.171.130.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/lx.php"] [unique_id "aSBJosklhXxmoIExII16KAAAAI8"]
[Fri Nov 21 19:14:44.636543 2025] [proxy_fcgi:error] [pid 25431:tid 25506] [client 31.171.130.138:32381] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:14:45.148871 2025] [proxy_fcgi:error] [pid 25431:tid 25497] [client 31.171.130.138:32381] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:14:45.662475 2025] [proxy_fcgi:error] [pid 25431:tid 25490] [client 31.171.130.138:32381] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:14:46.361926 2025] [proxy_fcgi:error] [pid 25431:tid 25495] [client 31.171.130.138:32381] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:14:46.820795 2025] [proxy_fcgi:error] [pid 25431:tid 25493] [client 31.171.130.138:32381] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:14:47.311081 2025] [proxy_fcgi:error] [pid 25431:tid 25509] [client 31.171.130.138:32381] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:14:47.760467 2025] [proxy_fcgi:error] [pid 25431:tid 25494] [client 31.171.130.138:32381] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:14:48.229174 2025] [proxy_fcgi:error] [pid 25431:tid 25499] [client 31.171.130.138:32381] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:14:48.667640 2025] [proxy_fcgi:error] [pid 25431:tid 25511] [client 31.171.130.138:32381] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:14:49.148067 2025] [proxy_fcgi:error] [pid 25431:tid 25510] [client 31.171.130.138:32381] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:14:49.601932 2025] [proxy_fcgi:error] [pid 25431:tid 25489] [client 31.171.130.138:32381] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:14:50.049387 2025] [proxy_fcgi:error] [pid 25431:tid 25487] [client 31.171.130.138:32381] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:14:50.502316 2025] [proxy_fcgi:error] [pid 25431:tid 25505] [client 31.171.130.138:32381] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:14:50.960316 2025] [proxy_fcgi:error] [pid 25431:tid 25492] [client 31.171.130.138:32381] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:14:51.423314 2025] [proxy_fcgi:error] [pid 25431:tid 25500] [client 31.171.130.138:32381] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:14:51.871020 2025] [proxy_fcgi:error] [pid 25431:tid 25507] [client 31.171.130.138:32381] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:14:52.305045 2025] [proxy_fcgi:error] [pid 25431:tid 25508] [client 31.171.130.138:32381] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:14:52.808298 2025] [proxy_fcgi:error] [pid 25431:tid 25503] [client 31.171.130.138:32381] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:14:53.323602 2025] [proxy_fcgi:error] [pid 25431:tid 25497] [client 31.171.130.138:32381] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:14:53.814907 2025] [proxy_fcgi:error] [pid 25431:tid 25490] [client 31.171.130.138:32381] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:14:54.255691 2025] [proxy_fcgi:error] [pid 25431:tid 25495] [client 31.171.130.138:32381] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:14:54.744393 2025] [proxy_fcgi:error] [pid 25431:tid 25493] [client 31.171.130.138:32381] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:14:55.211907 2025] [proxy_fcgi:error] [pid 25431:tid 25509] [client 31.171.130.138:32381] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:14:55.741594 2025] [proxy_fcgi:error] [pid 25431:tid 25496] [client 31.171.130.138:32381] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:14:56.208228 2025] [proxy_fcgi:error] [pid 25431:tid 25488] [client 31.171.130.138:32381] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:14:56.660348 2025] [proxy_fcgi:error] [pid 25431:tid 25494] [client 31.171.130.138:32381] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:14:57.249190 2025] [proxy_fcgi:error] [pid 25431:tid 25511] [client 31.171.130.138:32381] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:14:57.703413 2025] [proxy_fcgi:error] [pid 25431:tid 25502] [client 31.171.130.138:32381] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:14:59.250802 2025] [proxy_fcgi:error] [pid 25431:tid 25490] [client 31.171.130.138:32381] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:15:12.629511 2025] [:error] [pid 25431:tid 25490] [client 31.171.130.138:32381] [client 31.171.130.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/F0x.php"] [unique_id "aSBJwMklhXxmoIExII16fgAAAIM"]
[Fri Nov 21 19:15:14.230150 2025] [proxy_fcgi:error] [pid 46939:tid 46957] [client 31.171.130.145:46341] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:15:20.388066 2025] [proxy_fcgi:error] [pid 46939:tid 46961] [client 31.171.130.145:46341] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:15:20.833749 2025] [proxy_fcgi:error] [pid 46939:tid 46947] [client 31.171.130.145:46341] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:15:21.436995 2025] [proxy_fcgi:error] [pid 46939:tid 46945] [client 31.171.130.145:46341] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:15:23.698505 2025] [proxy_fcgi:error] [pid 46939:tid 46952] [client 31.171.130.145:46341] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:15:33.754999 2025] [proxy_fcgi:error] [pid 46939:tid 46943] [client 31.171.130.145:46341] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:15:34.333999 2025] [proxy_fcgi:error] [pid 46939:tid 46964] [client 31.171.130.145:46341] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:15:34.770700 2025] [proxy_fcgi:error] [pid 46939:tid 46957] [client 31.171.130.145:46341] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:15:35.313566 2025] [proxy_fcgi:error] [pid 46939:tid 46946] [client 31.171.130.145:46341] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:15:35.843687 2025] [proxy_fcgi:error] [pid 46939:tid 46965] [client 31.171.130.145:46341] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:15:36.338970 2025] [proxy_fcgi:error] [pid 46939:tid 46953] [client 31.171.130.145:46341] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:15:37.349694 2025] [:error] [pid 46939:tid 46958] [client 31.171.130.145:46341] [client 31.171.130.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aSBJ2e0OmVoxD4VZ_ZnNvQAAAVA"]
[Fri Nov 21 19:15:38.580730 2025] [:error] [pid 25521:tid 25523] [client 31.171.130.140:21601] [client 31.171.130.140] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 31.171.130.140, incrementing ddos counter"] [hostname "dwelectservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aSBJ2vhXnBMilDddn3Uo8AAAAMA"]
[Fri Nov 21 19:15:38.584279 2025] [proxy_fcgi:error] [pid 25521:tid 25523] [client 31.171.130.140:21601] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:15:39.248088 2025] [proxy_fcgi:error] [pid 25521:tid 25531] [client 31.171.130.140:21601] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:15:40.249110 2025] [:error] [pid 25521:tid 25542] [client 31.171.130.140:21601] [client 31.171.130.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aSBJ3PhXnBMilDddn3Uo9gAAANM"]
[Fri Nov 21 19:15:42.436249 2025] [proxy_fcgi:error] [pid 25431:tid 25488] [client 31.171.130.154:32693] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:15:45.252808 2025] [proxy_fcgi:error] [pid 25431:tid 25495] [client 31.171.130.154:32693] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:15:46.223695 2025] [proxy_fcgi:error] [pid 25431:tid 25494] [client 31.171.130.154:32693] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:15:46.737060 2025] [:error] [pid 25431:tid 25491] [client 31.171.130.154:32693] [client 31.171.130.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aSBJ4sklhXxmoIExII16tAAAAIQ"]
[Fri Nov 21 19:15:47.635595 2025] [proxy_fcgi:error] [pid 25521:tid 25527] [client 31.171.130.149:59595] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:15:48.110877 2025] [proxy_fcgi:error] [pid 25521:tid 25529] [client 31.171.130.149:59595] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:15:48.578969 2025] [proxy_fcgi:error] [pid 25521:tid 25533] [client 31.171.130.149:59595] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:15:50.609019 2025] [proxy_fcgi:error] [pid 25521:tid 25540] [client 31.171.130.149:59595] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:15:51.042497 2025] [proxy_fcgi:error] [pid 25521:tid 25541] [client 31.171.130.149:59595] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:15:51.721566 2025] [proxy_fcgi:error] [pid 25521:tid 25538] [client 31.171.130.149:59595] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:15:52.874430 2025] [proxy_fcgi:error] [pid 25521:tid 25543] [client 31.171.130.149:59595] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:15:55.721447 2025] [proxy_fcgi:error] [pid 25521:tid 25541] [client 31.171.130.149:59595] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:15:56.709211 2025] [:error] [pid 25521:tid 25536] [client 31.171.130.149:59595] [client 31.171.130.149] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aSBJ7PhXnBMilDddn3UpVwAAAM0"]
[Fri Nov 21 19:15:57.583875 2025] [:error] [pid 25431:tid 25492] [client 31.171.130.160:36357] [client 31.171.130.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aSBJ7cklhXxmoIExII16ugAAAIU"]
[Fri Nov 21 19:15:59.540032 2025] [:error] [pid 46939:tid 46951] [client 31.171.130.134:55163] [client 31.171.130.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "aSBJ7-0OmVoxD4VZ_ZnN0wAAAUk"]
[Fri Nov 21 19:16:00.658210 2025] [:error] [pid 46939:tid 46955] [client 31.171.130.152:24165] [client 31.171.130.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "aSBJ8O0OmVoxD4VZ_ZnN1QAAAU0"]
[Fri Nov 21 19:16:01.883098 2025] [proxy_fcgi:error] [pid 25521:tid 25529] [client 31.171.130.114:41797] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:16:05.052502 2025] [proxy_fcgi:error] [pid 25521:tid 25527] [client 31.171.130.114:41797] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:16:07.434097 2025] [:error] [pid 25521:tid 25536] [client 31.171.130.114:41797] [client 31.171.130.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.114, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/images/wp-login.php"] [unique_id "aSBJ9_hXnBMilDddn3UpYAAAAM0"]
[Fri Nov 21 19:16:09.919329 2025] [proxy_fcgi:error] [pid 25521:tid 25545] [client 31.171.130.114:41797] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:16:10.437126 2025] [proxy_fcgi:error] [pid 25521:tid 25529] [client 31.171.130.114:41797] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:16:11.350119 2025] [proxy_fcgi:error] [pid 25521:tid 25540] [client 31.171.130.114:41797] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:16:14.321087 2025] [:error] [pid 25521:tid 25536] [client 31.171.130.114:41797] [client 31.171.130.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "aSBJ_vhXnBMilDddn3UpcgAAAM0"]
[Fri Nov 21 19:16:15.365645 2025] [proxy_fcgi:error] [pid 46939:tid 46965] [client 31.171.130.160:41153] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:16:16.845998 2025] [:error] [pid 46939:tid 46962] [client 31.171.130.160:41153] [client 31.171.130.160] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.160, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/wp-login.php"] [unique_id "aSBKAO0OmVoxD4VZ_ZnN5wAAAVQ"]
[Fri Nov 21 19:16:17.329811 2025] [proxy_fcgi:error] [pid 46939:tid 46951] [client 31.171.130.160:41153] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:16:18.264768 2025] [proxy_fcgi:error] [pid 46939:tid 46948] [client 31.171.130.160:41153] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:16:18.762059 2025] [proxy_fcgi:error] [pid 46939:tid 46947] [client 31.171.130.160:41153] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:16:19.814379 2025] [proxy_fcgi:error] [pid 46939:tid 46943] [client 31.171.130.160:41153] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:16:20.269229 2025] [proxy_fcgi:error] [pid 46939:tid 46956] [client 31.171.130.160:41153] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:16:20.752148 2025] [:error] [pid 46939:tid 46953] [client 31.171.130.160:41153] [client 31.171.130.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/makeasmtp.php"] [unique_id "aSBKBO0OmVoxD4VZ_ZnN8QAAAUs"]
[Fri Nov 21 19:16:21.735422 2025] [:error] [pid 25521:tid 25524] [client 31.171.130.116:64077] [client 31.171.130.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/about.php"] [unique_id "aSBKBfhXnBMilDddn3UpfQAAAME"]
[Fri Nov 21 19:16:23.677091 2025] [proxy_fcgi:error] [pid 25429:tid 25441] [client 31.171.130.142:28227] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:16:24.158403 2025] [proxy_fcgi:error] [pid 25429:tid 25438] [client 31.171.130.142:28227] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:16:24.681193 2025] [proxy_fcgi:error] [pid 25429:tid 25434] [client 31.171.130.142:28227] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:16:25.831372 2025] [proxy_fcgi:error] [pid 25429:tid 25456] [client 31.171.130.142:28227] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:16:26.881460 2025] [proxy_fcgi:error] [pid 25429:tid 25445] [client 31.171.130.142:28227] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:16:30.313034 2025] [proxy_fcgi:error] [pid 25429:tid 25452] [client 31.171.130.142:28227] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:16:35.214259 2025] [proxy_fcgi:error] [pid 25429:tid 25435] [client 31.171.130.142:28227] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:16:36.151448 2025] [proxy_fcgi:error] [pid 25429:tid 25447] [client 31.171.130.142:28227] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:16:36.605146 2025] [proxy_fcgi:error] [pid 25429:tid 25450] [client 31.171.130.142:28227] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:16:38.033809 2025] [:error] [pid 25429:tid 25446] [client 31.171.130.142:28227] [client 31.171.130.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aSBKFj4rZbRSr7vu-NPh3wAAAA0"]
[Fri Nov 21 19:16:41.546267 2025] [:error] [pid 46939:tid 46942] [client 31.171.130.138:46471] [client 31.171.130.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/bak.php"] [unique_id "aSBKGe0OmVoxD4VZ_ZnOBAAAAUA"]
[Fri Nov 21 19:16:42.573132 2025] [proxy_fcgi:error] [pid 46939:tid 46946] [client 31.171.130.122:58997] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:16:43.841965 2025] [:error] [pid 46939:tid 46953] [client 31.171.130.122:58997] [client 31.171.130.122] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aSBKG-0OmVoxD4VZ_ZnOCgAAAUs"]
[Fri Nov 21 19:16:45.956958 2025] [proxy_fcgi:error] [pid 25521:tid 25540] [client 31.171.130.121:27991] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:16:47.163122 2025] [proxy_fcgi:error] [pid 25521:tid 25532] [client 31.171.130.121:27991] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:16:47.640233 2025] [:error] [pid 25521:tid 25535] [client 31.171.130.121:27991] [client 31.171.130.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dwelectservices.com.au"] [uri "/fm.php"] [unique_id "aSBKH_hXnBMilDddn3UpnQAAAMw"]
[Fri Nov 21 19:16:48.960038 2025] [:error] [pid 25521:tid 25534] [client 31.171.130.132:35519] [client 31.171.130.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aSBKIPhXnBMilDddn3UpngAAAMs"]
[Fri Nov 21 19:16:49.880935 2025] [:error] [pid 25521:tid 25533] [client 31.171.130.156:28213] [client 31.171.130.156] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.156, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-content/upgrade-temp-backup/wp-login.php"] [unique_id "aSBKIfhXnBMilDddn3UpnwAAAMo"]
[Fri Nov 21 19:16:50.365144 2025] [proxy_fcgi:error] [pid 25521:tid 25541] [client 31.171.130.156:28213] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:16:51.254652 2025] [:error] [pid 25521:tid 25539] [client 31.171.130.156:28213] [client 31.171.130.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/themes.php"] [unique_id "aSBKI_hXnBMilDddn3UppAAAANA"]
[Fri Nov 21 19:16:52.478812 2025] [proxy_fcgi:error] [pid 25429:tid 25441] [client 31.171.130.108:53241] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:16:53.440565 2025] [proxy_fcgi:error] [pid 25429:tid 25456] [client 31.171.130.108:53241] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:16:57.454398 2025] [:error] [pid 25429:tid 25433] [client 31.171.130.108:53241] [client 31.171.130.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/wp-includes_function.php"] [unique_id "aSBKKT4rZbRSr7vu-NPh6wAAAAA"]
[Fri Nov 21 19:16:58.586000 2025] [proxy_fcgi:error] [pid 46939:tid 46947] [client 31.171.130.150:55113] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:17:00.381576 2025] [:error] [pid 46939:tid 46964] [client 31.171.130.150:55113] [client 31.171.130.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/about.php"] [unique_id "aSBKLO0OmVoxD4VZ_ZnOHQAAAVY"]
[Fri Nov 21 19:17:03.734713 2025] [proxy_fcgi:error] [pid 25430:tid 25467] [client 31.171.130.158:59063] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:17:04.252596 2025] [:error] [pid 25430:tid 25460] [client 31.171.130.158:59063] [client 31.171.130.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/codemirror/about.php"] [unique_id "aSBKMKpnWJcWt_4foXl6zQAAAEA"]
[Fri Nov 21 19:17:06.309047 2025] [proxy_fcgi:error] [pid 25521:tid 25524] [client 31.171.130.143:24361] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:17:06.764087 2025] [:error] [pid 25521:tid 25531] [client 31.171.130.143:24361] [client 31.171.130.143] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.143, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-content/languages/themes/wp-login.php"] [unique_id "aSBKMvhXnBMilDddn3UpxwAAAMg"]
[Fri Nov 21 19:17:10.127434 2025] [:error] [pid 25521:tid 25526] [client 31.171.130.143:24361] [client 31.171.130.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/block-supports/index.php"] [unique_id "aSBKNvhXnBMilDddn3UpygAAAMM"]
[Fri Nov 21 19:17:11.279691 2025] [:error] [pid 25431:tid 25494] [client 31.171.130.141:44067] [client 31.171.130.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aSBKN8klhXxmoIExII168AAAAIc"]
[Fri Nov 21 19:17:16.841509 2025] [proxy_fcgi:error] [pid 46939:tid 46962] [client 31.171.130.137:33289] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:17:18.385123 2025] [proxy_fcgi:error] [pid 46939:tid 46952] [client 31.171.130.137:33289] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:17:19.650080 2025] [proxy_fcgi:error] [pid 46939:tid 46944] [client 31.171.130.137:33289] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:17:20.109325 2025] [proxy_fcgi:error] [pid 46939:tid 46943] [client 31.171.130.137:33289] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:17:21.016013 2025] [:error] [pid 46939:tid 46945] [client 31.171.130.137:33289] [client 31.171.130.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/block-patterns/about.php"] [unique_id "aSBKQe0OmVoxD4VZ_ZnONAAAAUM"]
[Fri Nov 21 19:17:23.123103 2025] [:error] [pid 25521:tid 25545] [client 31.171.130.132:32973] [client 31.171.130.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aSBKQ_hXnBMilDddn3Up2QAAANY"]
[Fri Nov 21 19:17:28.577455 2025] [:error] [pid 25430:tid 25468] [client 31.171.130.152:57337] [client 31.171.130.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/widgets/about.php"] [unique_id "aSBKSKpnWJcWt_4foXl61QAAAEg"]
[Fri Nov 21 19:17:29.850047 2025] [:error] [pid 25521:tid 25526] [client 31.171.130.139:33065] [client 31.171.130.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/Content/index.php"] [unique_id "aSBKSfhXnBMilDddn3Up4AAAAMM"]
[Fri Nov 21 19:17:30.867468 2025] [:error] [pid 25431:tid 25493] [client 31.171.130.163:36461] [client 31.171.130.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aSBKSsklhXxmoIExII17AAAAAIY"]
[Fri Nov 21 19:17:35.506971 2025] [proxy_fcgi:error] [pid 25554:tid 25579] [client 31.171.130.134:20823] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:17:36.410491 2025] [:error] [pid 25554:tid 25570] [client 31.171.130.134:20823] [client 31.171.130.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/ID3/autoload_classmap.php"] [unique_id "aSBKUB-NtB-9AzFZrk6TLwAAAQw"]
[Fri Nov 21 19:17:39.762669 2025] [proxy_fcgi:error] [pid 25431:tid 25487] [client 31.171.130.115:36687] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:17:40.219993 2025] [proxy_fcgi:error] [pid 25431:tid 25509] [client 31.171.130.115:36687] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:17:40.705409 2025] [:error] [pid 25431:tid 25488] [client 31.171.130.115:36687] [client 31.171.130.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "aSBKVMklhXxmoIExII17EQAAAIE"]
[Fri Nov 21 19:17:41.723496 2025] [proxy_fcgi:error] [pid 25429:tid 25439] [client 31.171.130.142:64097] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:17:43.613861 2025] [proxy_fcgi:error] [pid 25429:tid 25450] [client 31.171.130.142:64097] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:17:44.111069 2025] [:error] [pid 25429:tid 25454] [client 31.171.130.142:64097] [client 31.171.130.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aSBKWD4rZbRSr7vu-NPiCQAAABU"]
[Fri Nov 21 19:17:45.172515 2025] [proxy_fcgi:error] [pid 25429:tid 25436] [client 31.171.130.159:64929] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:17:45.646382 2025] [:error] [pid 25429:tid 25456] [client 31.171.130.159:64929] [client 31.171.130.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/IXR/autoload_classmap.php"] [unique_id "aSBKWT4rZbRSr7vu-NPiDQAAABc"]
[Fri Nov 21 19:17:48.137755 2025] [:error] [pid 46939:tid 46957] [client 31.171.130.109:34447] [client 31.171.130.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aSBKXO0OmVoxD4VZ_ZnOTwAAAU8"]
[Fri Nov 21 19:17:49.040296 2025] [:error] [pid 25430:tid 25463] [client 31.171.130.120:45107] [client 31.171.130.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/sitemaps/providers/zmFM.php"] [unique_id "aSBKXapnWJcWt_4foXl64wAAAEM"]
[Fri Nov 21 19:17:51.635665 2025] [:error] [pid 25431:tid 25504] [client 31.171.130.165:43451] [client 31.171.130.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aSBKX8klhXxmoIExII17HgAAAJE"]
[Fri Nov 21 19:17:52.473056 2025] [proxy_fcgi:error] [pid 46939:tid 46946] [client 31.171.130.143:43639] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:17:53.433398 2025] [proxy_fcgi:error] [pid 46939:tid 46954] [client 31.171.130.143:43639] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:17:53.858081 2025] [:error] [pid 46939:tid 46955] [client 31.171.130.143:43639] [client 31.171.130.143] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.143, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/cgi-bin/wp-login.php"] [unique_id "aSBKYe0OmVoxD4VZ_ZnOWgAAAU0"]
[Fri Nov 21 19:17:54.828566 2025] [:error] [pid 46939:tid 46953] [client 31.171.130.143:43639] [client 31.171.130.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/sodium_compat/wp-login.php"] [unique_id "aSBKYu0OmVoxD4VZ_ZnOXAAAAUs"]
[Fri Nov 21 19:17:55.753854 2025] [:error] [pid 25521:tid 25533] [client 31.171.130.152:58333] [client 31.171.130.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "aSBKY_hXnBMilDddn3Up7AAAAMo"]
[Fri Nov 21 19:17:56.724286 2025] [proxy_fcgi:error] [pid 25429:tid 25445] [client 31.171.130.148:61957] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:17:57.200891 2025] [proxy_fcgi:error] [pid 25429:tid 25439] [client 31.171.130.148:61957] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:18:00.454311 2025] [proxy_fcgi:error] [pid 25429:tid 25456] [client 31.171.130.148:61957] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:18:01.849215 2025] [:error] [pid 25429:tid 25445] [client 31.171.130.148:61957] [client 31.171.130.148] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.148, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/wp-login.php"] [unique_id "aSBKaT4rZbRSr7vu-NPiLwAAAAw"]
[Fri Nov 21 19:18:02.377459 2025] [:error] [pid 25429:tid 25457] [client 31.171.130.148:61957] [client 31.171.130.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aSBKaj4rZbRSr7vu-NPiMAAAABg"]
[Fri Nov 21 19:18:04.507187 2025] [:error] [pid 25554:tid 25569] [client 31.171.130.145:50093] [client 31.171.130.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Text/network.php"] [unique_id "aSBKbB-NtB-9AzFZrk6TQgAAAQs"]
[Fri Nov 21 19:18:06.993852 2025] [:error] [pid 25430:tid 25465] [client 31.171.130.115:58113] [client 31.171.130.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/index.php"] [unique_id "aSBKbqpnWJcWt_4foXl7BAAAAEU"]
[Fri Nov 21 19:18:09.362335 2025] [proxy_fcgi:error] [pid 25431:tid 25491] [client 31.171.130.152:55079] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:18:09.849154 2025] [:error] [pid 25431:tid 25504] [client 31.171.130.152:55079] [client 31.171.130.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/php-compat/autoload_classmap.php"] [unique_id "aSBKccklhXxmoIExII17KQAAAJE"]
[Fri Nov 21 19:18:11.335541 2025] [proxy_fcgi:error] [pid 25554:tid 25577] [client 31.171.130.123:26117] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:18:14.523879 2025] [proxy_fcgi:error] [pid 25554:tid 25561] [client 31.171.130.123:26117] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:18:16.296295 2025] [proxy_fcgi:error] [pid 25554:tid 25564] [client 31.171.130.123:26117] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:18:16.773039 2025] [:error] [pid 25554:tid 25558] [client 31.171.130.123:26117] [client 31.171.130.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aSBKeB-NtB-9AzFZrk6TUAAAAQA"]
[Fri Nov 21 19:18:19.345421 2025] [proxy_fcgi:error] [pid 46939:tid 46961] [client 31.171.130.158:57527] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:18:20.293132 2025] [:error] [pid 46939:tid 46949] [client 31.171.130.158:57527] [client 31.171.130.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aSBKfO0OmVoxD4VZ_ZnO2AAAAUc"]
[Fri Nov 21 19:18:21.828006 2025] [proxy_fcgi:error] [pid 46939:tid 46964] [client 31.171.130.121:59639] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:18:23.253209 2025] [:error] [pid 46939:tid 46942] [client 31.171.130.121:59639] [client 31.171.130.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/IXR/about.php"] [unique_id "aSBKf-0OmVoxD4VZ_ZnO4wAAAUA"]
[Fri Nov 21 19:18:24.720523 2025] [:error] [pid 25521:tid 25526] [client 31.171.130.118:37197] [client 31.171.130.118] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aSBKgPhXnBMilDddn3UqTgAAAMM"]
[Fri Nov 21 19:18:26.932523 2025] [:error] [pid 25431:tid 25492] [client 31.171.130.137:25039] [client 31.171.130.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aSBKgsklhXxmoIExII17PgAAAIU"]
[Fri Nov 21 19:18:37.159334 2025] [:error] [pid 25429:tid 25454] [client 31.171.130.160:47941] [client 31.171.130.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aSBKjT4rZbRSr7vu-NPiVwAAABU"]
[Fri Nov 21 19:18:38.837706 2025] [:error] [pid 25521:tid 25539] [client 31.171.130.115:49693] [client 31.171.130.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aSBKjvhXnBMilDddn3UqZQAAANA"]
[Fri Nov 21 19:18:40.990864 2025] [:error] [pid 25554:tid 25577] [client 31.171.130.137:20637] [client 31.171.130.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aSBKkB-NtB-9AzFZrk6TZAAAARM"]
[Fri Nov 21 19:18:45.435792 2025] [proxy_fcgi:error] [pid 25554:tid 25571] [client 31.171.130.119:54681] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:18:46.382038 2025] [:error] [pid 25554:tid 25576] [client 31.171.130.119:54681] [client 31.171.130.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aSBKlh-NtB-9AzFZrk6TaQAAARI"]
[Fri Nov 21 19:18:48.355336 2025] [proxy_fcgi:error] [pid 25429:tid 25450] [client 31.171.130.118:50855] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:18:48.777313 2025] [proxy_fcgi:error] [pid 25429:tid 25440] [client 31.171.130.118:50855] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:18:49.259382 2025] [:error] [pid 25429:tid 25433] [client 31.171.130.118:50855] [client 31.171.130.118] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aSBKmT4rZbRSr7vu-NPiXwAAAAA"]
[Fri Nov 21 19:18:51.921779 2025] [:error] [pid 25430:tid 25475] [client 31.171.130.148:40969] [client 31.171.130.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "aSBKm6pnWJcWt_4foXl7cgAAAE8"]
[Fri Nov 21 19:18:52.907911 2025] [proxy_fcgi:error] [pid 25429:tid 25437] [client 31.171.130.145:63461] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:18:53.828309 2025] [proxy_fcgi:error] [pid 25429:tid 25434] [client 31.171.130.145:63461] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:18:54.755904 2025] [proxy_fcgi:error] [pid 25429:tid 25443] [client 31.171.130.145:63461] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:18:55.190512 2025] [:error] [pid 25429:tid 25456] [client 31.171.130.145:63461] [client 31.171.130.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/autoload_classmap.php"] [unique_id "aSBKnz4rZbRSr7vu-NPiaQAAABc"]
[Fri Nov 21 19:18:57.251304 2025] [proxy_fcgi:error] [pid 25430:tid 25462] [client 31.171.130.114:46897] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:18:58.633695 2025] [proxy_fcgi:error] [pid 25430:tid 25484] [client 31.171.130.114:46897] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:18:59.107756 2025] [proxy_fcgi:error] [pid 25430:tid 25469] [client 31.171.130.114:46897] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:19:00.613256 2025] [proxy_fcgi:error] [pid 25430:tid 25468] [client 31.171.130.114:46897] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:19:01.122627 2025] [proxy_fcgi:error] [pid 25430:tid 25466] [client 31.171.130.114:46897] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:19:03.533144 2025] [proxy_fcgi:error] [pid 25430:tid 25464] [client 31.171.130.114:46897] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:19:05.038287 2025] [:error] [pid 25430:tid 25482] [client 31.171.130.114:46897] [client 31.171.130.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Text/autoload_classmap.php"] [unique_id "aSBKqapnWJcWt_4foXl7jAAAAFY"]
[Fri Nov 21 19:19:07.599446 2025] [:error] [pid 25430:tid 25468] [client 31.171.130.160:41449] [client 31.171.130.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aSBKq6pnWJcWt_4foXl7jQAAAEg"]
[Fri Nov 21 19:19:08.679732 2025] [proxy_fcgi:error] [pid 25521:tid 25523] [client 31.171.130.107:64289] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:19:09.124406 2025] [proxy_fcgi:error] [pid 25521:tid 25542] [client 31.171.130.107:64289] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:19:10.238373 2025] [proxy_fcgi:error] [pid 25521:tid 25525] [client 31.171.130.107:64289] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:19:10.687499 2025] [:error] [pid 25521:tid 25546] [client 31.171.130.107:64289] [client 31.171.130.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/html-api/index.php"] [unique_id "aSBKrvhXnBMilDddn3UqgwAAANc"]
[Fri Nov 21 19:19:12.775282 2025] [:error] [pid 25429:tid 25443] [client 31.171.130.113:46343] [client 31.171.130.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aSBKsD4rZbRSr7vu-NPicgAAAAo"]
[Fri Nov 21 19:19:13.736619 2025] [proxy_fcgi:error] [pid 25430:tid 25480] [client 31.171.130.107:59499] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:19:14.704495 2025] [:error] [pid 25430:tid 25464] [client 31.171.130.107:59499] [client 31.171.130.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/fonts/wp-login.php"] [unique_id "aSBKsqpnWJcWt_4foXl7kgAAAEQ"]
[Fri Nov 21 19:19:15.625454 2025] [proxy_fcgi:error] [pid 25521:tid 25537] [client 31.171.130.138:43423] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:19:16.215190 2025] [proxy_fcgi:error] [pid 25521:tid 25532] [client 31.171.130.138:43423] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:19:16.742822 2025] [proxy_fcgi:error] [pid 25521:tid 25528] [client 31.171.130.138:43423] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:19:17.759124 2025] [proxy_fcgi:error] [pid 25521:tid 25531] [client 31.171.130.138:43423] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:19:18.289226 2025] [proxy_fcgi:error] [pid 25521:tid 25541] [client 31.171.130.138:43423] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:19:18.751636 2025] [:error] [pid 25521:tid 25535] [client 31.171.130.138:43423] [client 31.171.130.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aSBKtvhXnBMilDddn3UqjgAAAMw"]
[Fri Nov 21 19:19:22.334872 2025] [:error] [pid 25521:tid 25537] [client 31.171.130.135:45387] [client 31.171.130.135] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.135, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "aSBKuvhXnBMilDddn3UqlQAAAM4"]
[Fri Nov 21 19:19:22.901079 2025] [proxy_fcgi:error] [pid 25521:tid 25547] [client 31.171.130.135:45387] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:19:23.444131 2025] [:error] [pid 25521:tid 25528] [client 31.171.130.135:45387] [client 31.171.130.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aSBKu_hXnBMilDddn3UqmQAAAMU"]
[Fri Nov 21 19:19:24.534470 2025] [:error] [pid 25521:tid 25541] [client 31.171.130.164:25091] [client 31.171.130.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Text/index.php"] [unique_id "aSBKvPhXnBMilDddn3UqmgAAANI"]
[Fri Nov 21 19:19:29.439077 2025] [proxy_fcgi:error] [pid 46939:tid 46947] [client 31.171.130.145:63629] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:19:29.903990 2025] [proxy_fcgi:error] [pid 46939:tid 46953] [client 31.171.130.145:63629] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:19:30.401463 2025] [:error] [pid 46939:tid 46965] [client 31.171.130.145:63629] [client 31.171.130.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/dist/autoload_classmap.php"] [unique_id "aSBKwu0OmVoxD4VZ_ZnPLQAAAVc"]
[Fri Nov 21 19:19:31.466482 2025] [proxy_fcgi:error] [pid 46939:tid 46952] [client 31.171.130.143:23227] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:19:32.881155 2025] [:error] [pid 46939:tid 46945] [client 31.171.130.143:23227] [client 31.171.130.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/rk2.php"] [unique_id "aSBKxO0OmVoxD4VZ_ZnPNAAAAUM"]
[Fri Nov 21 19:19:34.255027 2025] [proxy_fcgi:error] [pid 25521:tid 25531] [client 31.171.130.129:45661] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:19:34.748594 2025] [proxy_fcgi:error] [pid 25521:tid 25525] [client 31.171.130.129:45661] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:19:35.206604 2025] [proxy_fcgi:error] [pid 25521:tid 25534] [client 31.171.130.129:45661] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:19:37.580685 2025] [proxy_fcgi:error] [pid 25521:tid 25547] [client 31.171.130.129:45661] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:19:38.044134 2025] [proxy_fcgi:error] [pid 25521:tid 25538] [client 31.171.130.129:45661] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:19:39.005658 2025] [:error] [pid 25521:tid 25545] [client 31.171.130.129:45661] [client 31.171.130.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/plugin.php"] [unique_id "aSBKy_hXnBMilDddn3UquAAAANY"]
[Fri Nov 21 19:19:39.882954 2025] [proxy_fcgi:error] [pid 46939:tid 46959] [client 31.171.130.138:22781] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:19:41.456143 2025] [proxy_fcgi:error] [pid 46939:tid 46964] [client 31.171.130.138:22781] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:19:41.922984 2025] [:error] [pid 46939:tid 46959] [client 31.171.130.138:22781] [client 31.171.130.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/tinymce/wp-tinymce.php"] [unique_id "aSBKze0OmVoxD4VZ_ZnPTAAAAVE"]
[Fri Nov 21 19:19:43.339322 2025] [proxy_fcgi:error] [pid 46939:tid 46965] [client 31.171.130.150:27907] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:19:43.823082 2025] [proxy_fcgi:error] [pid 46939:tid 46957] [client 31.171.130.150:27907] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:19:44.249352 2025] [:error] [pid 46939:tid 46958] [client 31.171.130.150:27907] [client 31.171.130.150] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.150, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aSBK0O0OmVoxD4VZ_ZnPVQAAAVA"]
[Fri Nov 21 19:19:44.254135 2025] [proxy_fcgi:error] [pid 46939:tid 46958] [client 31.171.130.150:27907] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:19:45.607856 2025] [proxy_fcgi:error] [pid 46939:tid 46945] [client 31.171.130.150:27907] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:19:46.041868 2025] [proxy_fcgi:error] [pid 46939:tid 46962] [client 31.171.130.150:27907] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:19:46.986896 2025] [:error] [pid 46939:tid 46964] [client 31.171.130.150:27907] [client 31.171.130.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/mah.php"] [unique_id "aSBK0u0OmVoxD4VZ_ZnPXAAAAVY"]
[Fri Nov 21 19:19:47.898469 2025] [:error] [pid 25521:tid 25545] [client 31.171.130.115:23289] [client 31.171.130.115] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.115, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/colors/sunrise/wp-login.php"] [unique_id "aSBK0_hXnBMilDddn3Uq1gAAANY"]
[Fri Nov 21 19:19:48.946436 2025] [:error] [pid 25521:tid 25535] [client 31.171.130.115:23289] [client 31.171.130.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/customize/lmfi.php"] [unique_id "aSBK1PhXnBMilDddn3Uq3AAAAMw"]
[Fri Nov 21 19:19:52.959200 2025] [proxy_fcgi:error] [pid 25554:tid 25566] [client 31.171.130.129:44155] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:19:54.363235 2025] [:error] [pid 25554:tid 25572] [client 31.171.130.129:44155] [client 31.171.130.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "aSBK2h-NtB-9AzFZrk6TtgAAAQ4"]
[Fri Nov 21 19:19:55.434053 2025] [proxy_fcgi:error] [pid 25429:tid 25455] [client 31.171.130.132:47895] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:19:56.412954 2025] [:error] [pid 25429:tid 25440] [client 31.171.130.132:47895] [client 31.171.130.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aSBK3D4rZbRSr7vu-NPilgAAAAc"]
[Fri Nov 21 19:19:57.939227 2025] [:error] [pid 25554:tid 25558] [client 31.171.130.129:51293] [client 31.171.130.129] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.129, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/colors/light/wp-login.php"] [unique_id "aSBK3R-NtB-9AzFZrk6TuQAAAQA"]
[Fri Nov 21 19:20:00.060904 2025] [proxy_fcgi:error] [pid 25554:tid 25581] [client 31.171.130.129:51293] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:20:00.596209 2025] [proxy_fcgi:error] [pid 25554:tid 25582] [client 31.171.130.129:51293] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:20:01.154332 2025] [proxy_fcgi:error] [pid 25554:tid 25570] [client 31.171.130.129:51293] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:20:02.512790 2025] [proxy_fcgi:error] [pid 25554:tid 25571] [client 31.171.130.129:51293] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:20:04.243782 2025] [:error] [pid 25554:tid 25569] [client 31.171.130.129:51293] [client 31.171.130.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/button/index.php"] [unique_id "aSBK5B-NtB-9AzFZrk6TwgAAAQs"]
[Fri Nov 21 19:20:07.096691 2025] [:error] [pid 25429:tid 25453] [client 31.171.130.118:40087] [client 31.171.130.118] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/packed.php"] [unique_id "aSBK5z4rZbRSr7vu-NPipAAAABQ"]
[Fri Nov 21 19:20:08.234769 2025] [proxy_fcgi:error] [pid 25431:tid 25492] [client 31.171.130.123:47991] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:20:08.835711 2025] [proxy_fcgi:error] [pid 25431:tid 25489] [client 31.171.130.123:47991] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:20:11.363389 2025] [proxy_fcgi:error] [pid 25431:tid 25494] [client 31.171.130.123:47991] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:20:11.849931 2025] [proxy_fcgi:error] [pid 25431:tid 25499] [client 31.171.130.123:47991] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:20:15.270433 2025] [:error] [pid 25431:tid 25487] [client 31.171.130.123:47991] [client 31.171.130.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/file.php"] [unique_id "aSBK78klhXxmoIExII17lwAAAIA"]
[Fri Nov 21 19:20:16.716453 2025] [:error] [pid 25554:tid 25576] [client 31.171.130.121:65017] [client 31.171.130.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/chosen.php"] [unique_id "aSBK8B-NtB-9AzFZrk6T0gAAARI"]
[Fri Nov 21 19:20:19.472940 2025] [:error] [pid 25521:tid 25539] [client 31.171.130.163:46327] [client 31.171.130.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/Cache/about.php"] [unique_id "aSBK8_hXnBMilDddn3UrGAAAANA"]
[Fri Nov 21 19:20:20.788905 2025] [proxy_fcgi:error] [pid 25431:tid 25507] [client 31.171.130.113:39867] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:20:23.350857 2025] [:error] [pid 25431:tid 25497] [client 31.171.130.113:39867] [client 31.171.130.113] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.113, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-content/languages/wp-login.php"] [unique_id "aSBK98klhXxmoIExII17pgAAAIo"]
[Fri Nov 21 19:20:23.976111 2025] [:error] [pid 25431:tid 25502] [client 31.171.130.113:39867] [client 31.171.130.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aSBK98klhXxmoIExII17pwAAAI8"]
[Fri Nov 21 19:20:28.487309 2025] [proxy_fcgi:error] [pid 25429:tid 25453] [client 31.171.130.108:43933] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:20:29.092282 2025] [proxy_fcgi:error] [pid 25429:tid 25438] [client 31.171.130.108:43933] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:20:30.108945 2025] [:error] [pid 25429:tid 25448] [client 31.171.130.108:43933] [client 31.171.130.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aSBK_j4rZbRSr7vu-NPi6AAAAA8"]
[Fri Nov 21 19:20:31.187613 2025] [:error] [pid 25429:tid 25455] [client 31.171.130.163:52141] [client 31.171.130.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Text/wp-login.php"] [unique_id "aSBK_z4rZbRSr7vu-NPi7AAAABY"]
[Fri Nov 21 19:20:32.180027 2025] [proxy_fcgi:error] [pid 25431:tid 25499] [client 31.171.130.135:64039] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:20:35.050015 2025] [proxy_fcgi:error] [pid 25431:tid 25500] [client 31.171.130.135:64039] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:20:36.854464 2025] [proxy_fcgi:error] [pid 25431:tid 25510] [client 31.171.130.135:64039] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:20:38.128757 2025] [:error] [pid 25431:tid 25502] [client 31.171.130.135:64039] [client 31.171.130.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/function.php"] [unique_id "aSBLBsklhXxmoIExII171wAAAI8"]
[Fri Nov 21 19:20:39.274921 2025] [proxy_fcgi:error] [pid 25430:tid 25482] [client 31.171.130.115:25271] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:20:41.649120 2025] [proxy_fcgi:error] [pid 25430:tid 25460] [client 31.171.130.115:25271] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:20:42.835093 2025] [:error] [pid 25430:tid 25462] [client 31.171.130.115:25271] [client 31.171.130.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/votes.php"] [unique_id "aSBLCqpnWJcWt_4foXl8AQAAAEI"]
[Fri Nov 21 19:20:46.844718 2025] [proxy_fcgi:error] [pid 25430:tid 25462] [client 31.171.130.158:51771] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:20:47.828186 2025] [proxy_fcgi:error] [pid 25430:tid 25483] [client 31.171.130.158:51771] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:20:48.784580 2025] [:error] [pid 25430:tid 25477] [client 31.171.130.158:51771] [client 31.171.130.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/certificates/file.php"] [unique_id "aSBLEKpnWJcWt_4foXl8HAAAAFE"]
[Fri Nov 21 19:20:53.825521 2025] [:error] [pid 25429:tid 25439] [client 31.171.130.157:63921] [client 31.171.130.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/fonts/parx.php"] [unique_id "aSBLFT4rZbRSr7vu-NPjFgAAAAY"]
[Fri Nov 21 19:20:57.046499 2025] [proxy_fcgi:error] [pid 25521:tid 25526] [client 31.171.130.136:62859] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:20:59.152889 2025] [proxy_fcgi:error] [pid 25521:tid 25535] [client 31.171.130.136:62859] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:20:59.740259 2025] [proxy_fcgi:error] [pid 25521:tid 25544] [client 31.171.130.136:62859] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:21:00.337596 2025] [proxy_fcgi:error] [pid 25521:tid 25540] [client 31.171.130.136:62859] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:21:00.938342 2025] [:error] [pid 25521:tid 25547] [client 31.171.130.136:62859] [client 31.171.130.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/dist/components/about.php"] [unique_id "aSBLHPhXnBMilDddn3UrbgAAANg"]
[Fri Nov 21 19:21:01.997766 2025] [proxy_fcgi:error] [pid 25521:tid 25539] [client 31.171.130.132:25743] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:21:02.444702 2025] [proxy_fcgi:error] [pid 25521:tid 25542] [client 31.171.130.132:25743] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:21:05.298644 2025] [proxy_fcgi:error] [pid 25521:tid 25543] [client 31.171.130.132:25743] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:21:05.816739 2025] [:error] [pid 25521:tid 25530] [client 31.171.130.132:25743] [client 31.171.130.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "aSBLIfhXnBMilDddn3UrdgAAAMc"]
[Fri Nov 21 19:21:07.224420 2025] [proxy_fcgi:error] [pid 46939:tid 46949] [client 31.171.130.121:40951] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:21:08.339581 2025] [proxy_fcgi:error] [pid 46939:tid 46943] [client 31.171.130.121:40951] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:21:09.338328 2025] [proxy_fcgi:error] [pid 46939:tid 46965] [client 31.171.130.121:40951] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:21:10.387631 2025] [proxy_fcgi:error] [pid 46939:tid 46963] [client 31.171.130.121:40951] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:21:11.838145 2025] [:error] [pid 46939:tid 46955] [client 31.171.130.121:40951] [client 31.171.130.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/item.php"] [unique_id "aSBLJ-0OmVoxD4VZ_ZnPxAAAAU0"]
[Fri Nov 21 19:21:17.179812 2025] [:error] [pid 25429:tid 25447] [client 31.171.130.122:57053] [client 31.171.130.122] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.122, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/.well-known/pki-validation/wp-login.php"] [unique_id "aSBLLT4rZbRSr7vu-NPjLQAAAA4"]
[Fri Nov 21 19:21:17.635628 2025] [:error] [pid 25429:tid 25445] [client 31.171.130.122:57053] [client 31.171.130.122] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.122, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/classic-editor/wp-login.php"] [unique_id "aSBLLT4rZbRSr7vu-NPjMAAAAAw"]
[Fri Nov 21 19:21:18.126164 2025] [:error] [pid 25429:tid 25442] [client 31.171.130.122:57053] [client 31.171.130.122] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/mani.php"] [unique_id "aSBLLj4rZbRSr7vu-NPjOAAAAAk"]
[Fri Nov 21 19:21:19.271110 2025] [proxy_fcgi:error] [pid 25521:tid 25533] [client 31.171.130.107:33841] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:21:21.473060 2025] [proxy_fcgi:error] [pid 25521:tid 25538] [client 31.171.130.107:33841] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:21:24.129205 2025] [:error] [pid 25521:tid 25533] [client 31.171.130.107:33841] [client 31.171.130.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/network.php"] [unique_id "aSBLNPhXnBMilDddn3UrmwAAAMo"]
[Fri Nov 21 19:21:25.195962 2025] [proxy_fcgi:error] [pid 25429:tid 25444] [client 31.171.130.161:65177] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:21:25.663329 2025] [proxy_fcgi:error] [pid 25429:tid 25438] [client 31.171.130.161:65177] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:21:26.137540 2025] [:error] [pid 25429:tid 25451] [client 31.171.130.161:65177] [client 31.171.130.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "aSBLNj4rZbRSr7vu-NPjWQAAABI"]
[Fri Nov 21 19:21:32.035428 2025] [proxy_fcgi:error] [pid 25554:tid 25561] [client 31.171.130.151:24767] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:21:33.550442 2025] [proxy_fcgi:error] [pid 25554:tid 25579] [client 31.171.130.151:24767] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:21:34.544288 2025] [:error] [pid 25554:tid 25565] [client 31.171.130.151:24767] [client 31.171.130.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "aSBLPh-NtB-9AzFZrk6UXQAAAQc"]
[Fri Nov 21 19:21:35.467397 2025] [:error] [pid 25430:tid 25477] [client 31.171.130.156:36939] [client 31.171.130.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/block-supports/about.php"] [unique_id "aSBLP6pnWJcWt_4foXl8UwAAAFE"]
[Fri Nov 21 19:21:36.940132 2025] [proxy_fcgi:error] [pid 46939:tid 46961] [client 31.171.130.136:57401] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:21:38.329331 2025] [:error] [pid 46939:tid 46952] [client 31.171.130.136:57401] [client 31.171.130.136] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.136, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-content/wp-login.php"] [unique_id "aSBLQu0OmVoxD4VZ_ZnP5wAAAUo"]
[Fri Nov 21 19:21:41.176752 2025] [:error] [pid 46939:tid 46962] [client 31.171.130.136:57401] [client 31.171.130.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/PHPMailer/file.php"] [unique_id "aSBLRe0OmVoxD4VZ_ZnP7AAAAVQ"]
[Fri Nov 21 19:21:42.096695 2025] [proxy_fcgi:error] [pid 25431:tid 25506] [client 31.171.130.135:21675] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:21:42.536441 2025] [:error] [pid 25431:tid 25490] [client 31.171.130.135:21675] [client 31.171.130.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Requests/xBrain.php"] [unique_id "aSBLRsklhXxmoIExII18FQAAAIM"]
[Fri Nov 21 19:21:44.601148 2025] [:error] [pid 25521:tid 25543] [client 31.171.130.140:20615] [client 31.171.130.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "aSBLSPhXnBMilDddn3UrtAAAANQ"]
[Fri Nov 21 19:21:50.099460 2025] [:error] [pid 25430:tid 25483] [client 31.171.130.108:38703] [client 31.171.130.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aSBLTqpnWJcWt_4foXl8XwAAAFc"]
[Fri Nov 21 19:21:53.998820 2025] [proxy_fcgi:error] [pid 46939:tid 46965] [client 31.171.130.155:30157] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:21:54.928639 2025] [:error] [pid 46939:tid 46966] [client 31.171.130.155:30157] [client 31.171.130.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/dist/widgets/about.php"] [unique_id "aSBLUu0OmVoxD4VZ_ZnP_AAAAVg"]
[Fri Nov 21 19:21:56.400715 2025] [proxy_fcgi:error] [pid 25429:tid 25449] [client 31.171.130.109:43627] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:21:56.922913 2025] [proxy_fcgi:error] [pid 25429:tid 25456] [client 31.171.130.109:43627] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:22:00.512989 2025] [proxy_fcgi:error] [pid 25429:tid 25446] [client 31.171.130.109:43627] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:22:01.051702 2025] [proxy_fcgi:error] [pid 25429:tid 25435] [client 31.171.130.109:43627] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:22:01.630302 2025] [proxy_fcgi:error] [pid 25429:tid 25457] [client 31.171.130.109:43627] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:22:02.271074 2025] [proxy_fcgi:error] [pid 25429:tid 25448] [client 31.171.130.109:43627] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:22:03.317641 2025] [proxy_fcgi:error] [pid 25429:tid 25455] [client 31.171.130.109:43627] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:22:04.718983 2025] [:error] [pid 25429:tid 25449] [client 31.171.130.109:43627] [client 31.171.130.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/radio.php"] [unique_id "aSBLXD4rZbRSr7vu-NPjiAAAABA"]
[Fri Nov 21 19:22:07.100271 2025] [proxy_fcgi:error] [pid 46939:tid 46946] [client 31.171.130.156:63835] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:22:07.540734 2025] [proxy_fcgi:error] [pid 46939:tid 46965] [client 31.171.130.156:63835] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:22:08.026467 2025] [proxy_fcgi:error] [pid 46939:tid 46962] [client 31.171.130.156:63835] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:22:08.518981 2025] [proxy_fcgi:error] [pid 46939:tid 46963] [client 31.171.130.156:63835] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:22:10.115404 2025] [proxy_fcgi:error] [pid 46939:tid 46960] [client 31.171.130.156:63835] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:22:10.648833 2025] [proxy_fcgi:error] [pid 46939:tid 46955] [client 31.171.130.156:63835] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:22:11.541735 2025] [:error] [pid 46939:tid 46947] [client 31.171.130.156:63835] [client 31.171.130.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/sodium_compat/src/Core/Curve25519/Ge/wp_blog.php"] [unique_id "aSBLY-0OmVoxD4VZ_ZnQDAAAAUU"]
[Fri Nov 21 19:22:15.121325 2025] [:error] [pid 46939:tid 46946] [client 31.171.130.154:48229] [client 31.171.130.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "aSBLZ-0OmVoxD4VZ_ZnQFgAAAUQ"]
[Fri Nov 21 19:22:18.328433 2025] [:error] [pid 25431:tid 25511] [client 31.171.130.132:35585] [client 31.171.130.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/fonts/index.php"] [unique_id "aSBLasklhXxmoIExII18PQAAAJg"]
[Fri Nov 21 19:22:19.264350 2025] [proxy_fcgi:error] [pid 25431:tid 25489] [client 31.171.130.148:47031] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:22:19.778807 2025] [proxy_fcgi:error] [pid 25431:tid 25490] [client 31.171.130.148:47031] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:22:20.346008 2025] [proxy_fcgi:error] [pid 25431:tid 25499] [client 31.171.130.148:47031] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:22:22.136945 2025] [proxy_fcgi:error] [pid 25431:tid 25504] [client 31.171.130.148:47031] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:22:22.645750 2025] [proxy_fcgi:error] [pid 25431:tid 25511] [client 31.171.130.148:47031] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:22:23.161200 2025] [proxy_fcgi:error] [pid 25431:tid 25489] [client 31.171.130.148:47031] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:22:23.712333 2025] [:error] [pid 25431:tid 25490] [client 31.171.130.148:47031] [client 31.171.130.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/tinymce/plugins/compat3x/css/index.php"] [unique_id "aSBLb8klhXxmoIExII18TgAAAIM"]
[Fri Nov 21 19:22:25.583486 2025] [:error] [pid 25431:tid 25503] [client 31.171.130.112:51651] [client 31.171.130.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Requests/Text/index.php"] [unique_id "aSBLccklhXxmoIExII18UwAAAJA"]
[Fri Nov 21 19:22:30.141895 2025] [:error] [pid 25554:tid 25581] [client 31.171.130.131:42193] [client 31.171.130.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/random_compat/about.php"] [unique_id "aSBLdh-NtB-9AzFZrk6UmwAAARc"]
[Fri Nov 21 19:22:31.952419 2025] [proxy_fcgi:error] [pid 25431:tid 25501] [client 31.171.130.145:57771] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:22:32.456951 2025] [proxy_fcgi:error] [pid 25431:tid 25509] [client 31.171.130.145:57771] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:22:32.938388 2025] [proxy_fcgi:error] [pid 25431:tid 25507] [client 31.171.130.145:57771] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:22:33.415899 2025] [proxy_fcgi:error] [pid 25431:tid 25500] [client 31.171.130.145:57771] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:22:34.665982 2025] [proxy_fcgi:error] [pid 25431:tid 25502] [client 31.171.130.145:57771] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:22:35.104294 2025] [proxy_fcgi:error] [pid 25431:tid 25504] [client 31.171.130.145:57771] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:22:35.752155 2025] [proxy_fcgi:error] [pid 25431:tid 25511] [client 31.171.130.145:57771] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:22:36.247216 2025] [proxy_fcgi:error] [pid 25431:tid 25496] [client 31.171.130.145:57771] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:22:36.753477 2025] [proxy_fcgi:error] [pid 25431:tid 25494] [client 31.171.130.145:57771] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:22:37.214196 2025] [proxy_fcgi:error] [pid 25431:tid 25501] [client 31.171.130.145:57771] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:22:38.236716 2025] [proxy_fcgi:error] [pid 25431:tid 25500] [client 31.171.130.145:57771] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:22:38.823208 2025] [proxy_fcgi:error] [pid 25431:tid 25492] [client 31.171.130.145:57771] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:22:39.253821 2025] [proxy_fcgi:error] [pid 25431:tid 25511] [client 31.171.130.145:57771] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:22:39.764342 2025] [proxy_fcgi:error] [pid 25431:tid 25491] [client 31.171.130.145:57771] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:22:40.260688 2025] [proxy_fcgi:error] [pid 25431:tid 25494] [client 31.171.130.145:57771] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:22:41.417437 2025] [proxy_fcgi:error] [pid 25431:tid 25510] [client 31.171.130.145:57771] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:22:41.867453 2025] [proxy_fcgi:error] [pid 25431:tid 25488] [client 31.171.130.145:57771] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:22:42.315077 2025] [proxy_fcgi:error] [pid 25431:tid 25505] [client 31.171.130.145:57771] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:22:42.817624 2025] [proxy_fcgi:error] [pid 25431:tid 25502] [client 31.171.130.145:57771] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:22:43.313352 2025] [proxy_fcgi:error] [pid 25431:tid 25492] [client 31.171.130.145:57771] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:22:43.756071 2025] [proxy_fcgi:error] [pid 25431:tid 25495] [client 31.171.130.145:57771] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:22:44.240636 2025] [proxy_fcgi:error] [pid 25431:tid 25506] [client 31.171.130.145:57771] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:22:44.739154 2025] [proxy_fcgi:error] [pid 25431:tid 25499] [client 31.171.130.145:57771] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:22:45.670259 2025] [proxy_fcgi:error] [pid 25431:tid 25505] [client 31.171.130.145:57771] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:22:46.645598 2025] [proxy_fcgi:error] [pid 25431:tid 25491] [client 31.171.130.145:57771] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:22:47.170091 2025] [proxy_fcgi:error] [pid 25431:tid 25494] [client 31.171.130.145:57771] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:22:47.614451 2025] [proxy_fcgi:error] [pid 25431:tid 25496] [client 31.171.130.145:57771] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:22:48.140189 2025] [proxy_fcgi:error] [pid 25431:tid 25489] [client 31.171.130.145:57771] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:22:48.622767 2025] [proxy_fcgi:error] [pid 25431:tid 25508] [client 31.171.130.145:57771] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:22:49.148946 2025] [:error] [pid 25431:tid 25491] [client 31.171.130.145:57771] [client 31.171.130.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/include.php"] [unique_id "aSBLicklhXxmoIExII18pgAAAIQ"]
[Fri Nov 21 19:22:50.437050 2025] [proxy_fcgi:error] [pid 25554:tid 25568] [client 31.171.130.156:46271] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:22:50.942106 2025] [proxy_fcgi:error] [pid 25554:tid 25569] [client 31.171.130.156:46271] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:22:51.550991 2025] [proxy_fcgi:error] [pid 25554:tid 25561] [client 31.171.130.156:46271] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:22:52.084098 2025] [proxy_fcgi:error] [pid 25554:tid 25579] [client 31.171.130.156:46271] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:22:52.549407 2025] [proxy_fcgi:error] [pid 25554:tid 25582] [client 31.171.130.156:46271] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:22:53.040158 2025] [proxy_fcgi:error] [pid 25554:tid 25574] [client 31.171.130.156:46271] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:22:53.542260 2025] [proxy_fcgi:error] [pid 25554:tid 25558] [client 31.171.130.156:46271] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:22:54.069802 2025] [proxy_fcgi:error] [pid 25554:tid 25560] [client 31.171.130.156:46271] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:22:55.140455 2025] [proxy_fcgi:error] [pid 25554:tid 25577] [client 31.171.130.156:46271] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:22:55.590503 2025] [:error] [pid 25554:tid 25572] [client 31.171.130.156:46271] [client 31.171.130.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/fonts/css.php"] [unique_id "aSBLjx-NtB-9AzFZrk6UvAAAAQ4"]
[Fri Nov 21 19:22:59.122366 2025] [proxy_fcgi:error] [pid 25429:tid 25435] [client 31.171.130.131:31415] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:23:00.549875 2025] [proxy_fcgi:error] [pid 25429:tid 25443] [client 31.171.130.131:31415] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:23:04.723164 2025] [:error] [pid 25429:tid 25452] [client 31.171.130.131:31415] [client 31.171.130.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/wso112233.php"] [unique_id "aSBLmD4rZbRSr7vu-NPj0QAAABM"]
[Fri Nov 21 19:23:05.688259 2025] [:error] [pid 25521:tid 25539] [client 31.171.130.158:42687] [client 31.171.130.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/shell20211028.php"] [unique_id "aSBLmfhXnBMilDddn3UsHAAAANA"]
[Fri Nov 21 19:23:08.400832 2025] [:error] [pid 46939:tid 46960] [client 31.171.130.156:57697] [client 31.171.130.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/dropdown.php"] [unique_id "aSBLnO0OmVoxD4VZ_ZnQZAAAAVI"]
[Fri Nov 21 19:23:09.939216 2025] [:error] [pid 25431:tid 25506] [client 31.171.130.159:42477] [client 31.171.130.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/repeater.php"] [unique_id "aSBLncklhXxmoIExII18vQAAAJM"]
[Fri Nov 21 19:23:15.545406 2025] [proxy_fcgi:error] [pid 25431:tid 25491] [client 31.171.130.155:24993] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:23:16.028970 2025] [proxy_fcgi:error] [pid 25431:tid 25495] [client 31.171.130.155:24993] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:23:17.170009 2025] [proxy_fcgi:error] [pid 25431:tid 25506] [client 31.171.130.155:24993] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:23:27.810633 2025] [:error] [pid 25521:tid 25545] [client 31.171.130.164:21859] [client 31.171.130.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/test.php"] [unique_id "aSBLr_hXnBMilDddn3UsSgAAANY"]
[Fri Nov 21 19:23:30.130850 2025] [:error] [pid 25429:tid 25446] [client 31.171.130.142:32223] [client 31.171.130.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/sitemaps/providers/ultra.php"] [unique_id "aSBLsj4rZbRSr7vu-NPj4gAAAA0"]
[Fri Nov 21 19:23:31.683036 2025] [:error] [pid 25431:tid 25492] [client 31.171.130.143:35565] [client 31.171.130.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/options.php"] [unique_id "aSBLs8klhXxmoIExII184AAAAIU"]
[Fri Nov 21 19:23:32.765137 2025] [proxy_fcgi:error] [pid 25431:tid 25501] [client 31.171.130.118:59987] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:23:33.741685 2025] [:error] [pid 25431:tid 25507] [client 31.171.130.118:59987] [client 31.171.130.118] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/gzdecode.php"] [unique_id "aSBLtcklhXxmoIExII185AAAAJQ"]
[Fri Nov 21 19:23:37.159131 2025] [:error] [pid 46939:tid 46957] [client 31.171.130.133:41237] [client 31.171.130.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/wp-includes/atomlib.php"] [unique_id "aSBLue0OmVoxD4VZ_ZnQgAAAAU8"]
[Fri Nov 21 19:23:41.640370 2025] [:error] [pid 25429:tid 25452] [client 31.171.130.137:25133] [client 31.171.130.137] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.137, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/images/wp-login.php"] [unique_id "aSBLvT4rZbRSr7vu-NPj7AAAABM"]
[Fri Nov 21 19:23:42.099748 2025] [proxy_fcgi:error] [pid 25429:tid 25439] [client 31.171.130.137:25133] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:23:43.699330 2025] [:error] [pid 25429:tid 25436] [client 31.171.130.137:25133] [client 31.171.130.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/plupload/wp-login.php"] [unique_id "aSBLvz4rZbRSr7vu-NPj8gAAAAM"]
[Fri Nov 21 19:23:44.584154 2025] [proxy_fcgi:error] [pid 25430:tid 25463] [client 31.171.130.161:55651] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:23:46.619331 2025] [:error] [pid 25430:tid 25482] [client 31.171.130.161:55651] [client 31.171.130.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/block-patterns/themes.php"] [unique_id "aSBLwqpnWJcWt_4foXl8ugAAAFY"]
[Fri Nov 21 19:23:47.713671 2025] [:error] [pid 25431:tid 25493] [client 31.171.130.109:27867] [client 31.171.130.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/site-title/index.php"] [unique_id "aSBLw8klhXxmoIExII19DgAAAIY"]
[Fri Nov 21 19:23:48.687165 2025] [proxy_fcgi:error] [pid 25554:tid 25571] [client 31.171.130.133:54513] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:23:49.142439 2025] [:error] [pid 25554:tid 25573] [client 31.171.130.133:54513] [client 31.171.130.133] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.133, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/includes/wp-login.php"] [unique_id "aSBLxR-NtB-9AzFZrk6U7QAAAQ8"]
[Fri Nov 21 19:23:49.831409 2025] [proxy_fcgi:error] [pid 25554:tid 25569] [client 31.171.130.133:54513] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:23:50.320404 2025] [:error] [pid 25554:tid 25567] [client 31.171.130.133:54513] [client 31.171.130.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/wp-includes/admin-bar.php"] [unique_id "aSBLxh-NtB-9AzFZrk6U7wAAAQk"]
[Fri Nov 21 19:23:51.350122 2025] [proxy_fcgi:error] [pid 25431:tid 25509] [client 31.171.130.119:53185] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:23:51.870515 2025] [proxy_fcgi:error] [pid 25431:tid 25503] [client 31.171.130.119:53185] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:23:53.264919 2025] [:error] [pid 25431:tid 25488] [client 31.171.130.119:53185] [client 31.171.130.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/customize/plugins.php"] [unique_id "aSBLycklhXxmoIExII19FQAAAIE"]
[Fri Nov 21 19:23:54.163442 2025] [proxy_fcgi:error] [pid 46939:tid 46946] [client 31.171.130.146:45977] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:23:55.118215 2025] [proxy_fcgi:error] [pid 46939:tid 46953] [client 31.171.130.146:45977] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:23:55.542721 2025] [proxy_fcgi:error] [pid 46939:tid 46962] [client 31.171.130.146:45977] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:23:56.287026 2025] [proxy_fcgi:error] [pid 46939:tid 46951] [client 31.171.130.146:45977] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:23:56.721088 2025] [proxy_fcgi:error] [pid 46939:tid 46956] [client 31.171.130.146:45977] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:23:57.176405 2025] [proxy_fcgi:error] [pid 46939:tid 46949] [client 31.171.130.146:45977] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:23:57.646950 2025] [proxy_fcgi:error] [pid 46939:tid 46948] [client 31.171.130.146:45977] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:23:58.242788 2025] [proxy_fcgi:error] [pid 46939:tid 46954] [client 31.171.130.146:45977] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:23:58.853740 2025] [proxy_fcgi:error] [pid 46939:tid 46946] [client 31.171.130.146:45977] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:23:59.421014 2025] [proxy_fcgi:error] [pid 46939:tid 46947] [client 31.171.130.146:45977] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:23:59.939942 2025] [proxy_fcgi:error] [pid 46939:tid 46943] [client 31.171.130.146:45977] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:24:00.453740 2025] [proxy_fcgi:error] [pid 46939:tid 46961] [client 31.171.130.146:45977] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:24:00.887355 2025] [proxy_fcgi:error] [pid 46939:tid 46966] [client 31.171.130.146:45977] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:24:02.480784 2025] [proxy_fcgi:error] [pid 46939:tid 46952] [client 31.171.130.146:45977] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:24:03.018474 2025] [proxy_fcgi:error] [pid 46939:tid 46948] [client 31.171.130.146:45977] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:24:03.469971 2025] [proxy_fcgi:error] [pid 46939:tid 46963] [client 31.171.130.146:45977] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:24:03.963160 2025] [proxy_fcgi:error] [pid 46939:tid 46950] [client 31.171.130.146:45977] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:24:04.453148 2025] [proxy_fcgi:error] [pid 46939:tid 46942] [client 31.171.130.146:45977] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:24:04.933734 2025] [proxy_fcgi:error] [pid 46939:tid 46962] [client 31.171.130.146:45977] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:24:05.362650 2025] [proxy_fcgi:error] [pid 46939:tid 46945] [client 31.171.130.146:45977] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:24:05.819826 2025] [proxy_fcgi:error] [pid 46939:tid 46955] [client 31.171.130.146:45977] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:24:06.339033 2025] [proxy_fcgi:error] [pid 46939:tid 46966] [client 31.171.130.146:45977] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:24:06.843734 2025] [proxy_fcgi:error] [pid 46939:tid 46958] [client 31.171.130.146:45977] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:24:07.323070 2025] [proxy_fcgi:error] [pid 46939:tid 46957] [client 31.171.130.146:45977] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:24:07.752641 2025] [proxy_fcgi:error] [pid 46939:tid 46949] [client 31.171.130.146:45977] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:24:09.151204 2025] [proxy_fcgi:error] [pid 46939:tid 46950] [client 31.171.130.146:45977] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:24:09.668681 2025] [proxy_fcgi:error] [pid 46939:tid 46942] [client 31.171.130.146:45977] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:24:10.117750 2025] [proxy_fcgi:error] [pid 46939:tid 46946] [client 31.171.130.146:45977] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:24:10.625476 2025] [proxy_fcgi:error] [pid 46939:tid 46947] [client 31.171.130.146:45977] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:24:11.108488 2025] [proxy_fcgi:error] [pid 46939:tid 46943] [client 31.171.130.146:45977] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:24:11.663618 2025] [proxy_fcgi:error] [pid 46939:tid 46955] [client 31.171.130.146:45977] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:24:12.191041 2025] [proxy_fcgi:error] [pid 46939:tid 46959] [client 31.171.130.146:45977] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:24:12.659763 2025] [proxy_fcgi:error] [pid 46939:tid 46951] [client 31.171.130.146:45977] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:24:13.117190 2025] [proxy_fcgi:error] [pid 46939:tid 46960] [client 31.171.130.146:45977] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:24:14.628604 2025] [proxy_fcgi:error] [pid 46939:tid 46965] [client 31.171.130.146:45977] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:24:15.722003 2025] [proxy_fcgi:error] [pid 46939:tid 46947] [client 31.171.130.146:45977] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:24:18.100216 2025] [proxy_fcgi:error] [pid 46939:tid 46959] [client 31.171.130.146:45977] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:24:19.551372 2025] [:error] [pid 46939:tid 46942] [client 31.171.130.146:45977] [client 31.171.130.146] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.146, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/classic-editor/wp-login.php"] [unique_id "aSBL4-0OmVoxD4VZ_ZnQ8gAAAUA"]
[Fri Nov 21 19:24:20.115316 2025] [proxy_fcgi:error] [pid 46939:tid 46946] [client 31.171.130.146:45977] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:24:21.772829 2025] [:error] [pid 46939:tid 46955] [client 31.171.130.146:45977] [client 31.171.130.146] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.146, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/.tmb/wp-login.php"] [unique_id "aSBL5e0OmVoxD4VZ_ZnQ-gAAAU0"]
[Fri Nov 21 19:24:23.416680 2025] [proxy_fcgi:error] [pid 46939:tid 46957] [client 31.171.130.146:45977] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:24:23.835638 2025] [:error] [pid 46939:tid 46944] [client 31.171.130.146:45977] [client 31.171.130.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/certificates/plugins.php"] [unique_id "aSBL5-0OmVoxD4VZ_ZnRAQAAAUI"]
[Fri Nov 21 19:24:27.456977 2025] [:error] [pid 46939:tid 46947] [client 31.171.130.144:27711] [client 31.171.130.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/pomo/wp-login.php"] [unique_id "aSBL6-0OmVoxD4VZ_ZnRBgAAAUU"]
[Fri Nov 21 19:24:28.562483 2025] [:error] [pid 25429:tid 25436] [client 31.171.130.134:52627] [client 31.171.130.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/install.php"] [unique_id "aSBL7D4rZbRSr7vu-NPkKAAAAAM"]
[Fri Nov 21 19:24:29.476250 2025] [proxy_fcgi:error] [pid 25521:tid 25529] [client 31.171.130.156:41403] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:24:33.470019 2025] [proxy_fcgi:error] [pid 25521:tid 25542] [client 31.171.130.156:41403] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:24:33.955132 2025] [proxy_fcgi:error] [pid 25521:tid 25525] [client 31.171.130.156:41403] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:24:35.782425 2025] [:error] [pid 25521:tid 25532] [client 31.171.130.156:41403] [client 31.171.130.156] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.156, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/modules/karakaroa/wp-login.php"] [unique_id "aSBL8_hXnBMilDddn3UsywAAAMk"]
[Fri Nov 21 19:24:36.260765 2025] [:error] [pid 25521:tid 25538] [client 31.171.130.156:41403] [client 31.171.130.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aSBL9PhXnBMilDddn3UszAAAAM8"]
[Fri Nov 21 19:24:38.545900 2025] [proxy_fcgi:error] [pid 25554:tid 25563] [client 31.171.130.136:56791] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:24:39.160965 2025] [:error] [pid 25554:tid 25560] [client 31.171.130.136:56791] [client 31.171.130.136] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.136, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aSBL9x-NtB-9AzFZrk6VOwAAAQI"]
[Fri Nov 21 19:24:40.230731 2025] [proxy_fcgi:error] [pid 25554:tid 25570] [client 31.171.130.136:56791] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:24:41.897234 2025] [proxy_fcgi:error] [pid 25554:tid 25573] [client 31.171.130.136:56791] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:24:42.348439 2025] [proxy_fcgi:error] [pid 25554:tid 25566] [client 31.171.130.136:56791] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:24:42.861997 2025] [proxy_fcgi:error] [pid 25554:tid 25576] [client 31.171.130.136:56791] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:24:43.423089 2025] [proxy_fcgi:error] [pid 25554:tid 25567] [client 31.171.130.136:56791] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:24:43.879566 2025] [proxy_fcgi:error] [pid 25554:tid 25571] [client 31.171.130.136:56791] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:24:44.368469 2025] [proxy_fcgi:error] [pid 25554:tid 25575] [client 31.171.130.136:56791] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:24:44.836656 2025] [proxy_fcgi:error] [pid 25554:tid 25580] [client 31.171.130.136:56791] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:24:45.256034 2025] [proxy_fcgi:error] [pid 25554:tid 25564] [client 31.171.130.136:56791] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:24:46.673612 2025] [proxy_fcgi:error] [pid 25554:tid 25579] [client 31.171.130.136:56791] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:24:48.050730 2025] [:error] [pid 25554:tid 25574] [client 31.171.130.136:56791] [client 31.171.130.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/dist/editor/fxp.php"] [unique_id "aSBMAB-NtB-9AzFZrk6VTgAAARA"]
[Fri Nov 21 19:24:48.964203 2025] [proxy_fcgi:error] [pid 46939:tid 46946] [client 31.171.130.148:31923] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:24:49.437380 2025] [proxy_fcgi:error] [pid 46939:tid 46963] [client 31.171.130.148:31923] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:24:49.908275 2025] [proxy_fcgi:error] [pid 46939:tid 46944] [client 31.171.130.148:31923] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:24:50.373327 2025] [proxy_fcgi:error] [pid 46939:tid 46951] [client 31.171.130.148:31923] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:24:51.431572 2025] [proxy_fcgi:error] [pid 46939:tid 46950] [client 31.171.130.148:31923] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:24:52.547415 2025] [proxy_fcgi:error] [pid 46939:tid 46953] [client 31.171.130.148:31923] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:24:53.420731 2025] [proxy_fcgi:error] [pid 46939:tid 46943] [client 31.171.130.148:31923] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:24:53.915721 2025] [proxy_fcgi:error] [pid 46939:tid 46947] [client 31.171.130.148:31923] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:24:54.438993 2025] [proxy_fcgi:error] [pid 46939:tid 46961] [client 31.171.130.148:31923] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:24:54.905582 2025] [proxy_fcgi:error] [pid 46939:tid 46966] [client 31.171.130.148:31923] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:24:55.347791 2025] [:error] [pid 46939:tid 46962] [client 31.171.130.148:31923] [client 31.171.130.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/Cache/index.php"] [unique_id "aSBMB-0OmVoxD4VZ_ZnRqgAAAVQ"]
[Fri Nov 21 19:24:57.384788 2025] [proxy_fcgi:error] [pid 25521:tid 25533] [client 31.171.130.137:42781] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:24:58.861614 2025] [proxy_fcgi:error] [pid 25521:tid 25547] [client 31.171.130.137:42781] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:24:59.389636 2025] [proxy_fcgi:error] [pid 25521:tid 25530] [client 31.171.130.137:42781] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:25:00.948227 2025] [proxy_fcgi:error] [pid 25521:tid 25525] [client 31.171.130.137:42781] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:25:01.613142 2025] [proxy_fcgi:error] [pid 25521:tid 25533] [client 31.171.130.137:42781] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:25:02.092717 2025] [proxy_fcgi:error] [pid 25521:tid 25547] [client 31.171.130.137:42781] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:25:03.316502 2025] [proxy_fcgi:error] [pid 25521:tid 25543] [client 31.171.130.137:42781] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:25:04.931042 2025] [:error] [pid 25521:tid 25535] [client 31.171.130.137:42781] [client 31.171.130.137] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.137, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "aSBMEPhXnBMilDddn3UtUAAAAMw"]
[Fri Nov 21 19:25:07.033662 2025] [proxy_fcgi:error] [pid 25521:tid 25533] [client 31.171.130.137:42781] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:25:08.432654 2025] [proxy_fcgi:error] [pid 25521:tid 25531] [client 31.171.130.137:42781] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:25:08.928177 2025] [proxy_fcgi:error] [pid 25521:tid 25530] [client 31.171.130.137:42781] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:25:09.420197 2025] [proxy_fcgi:error] [pid 25521:tid 25543] [client 31.171.130.137:42781] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:25:10.642770 2025] [proxy_fcgi:error] [pid 25521:tid 25538] [client 31.171.130.137:42781] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:25:12.239728 2025] [proxy_fcgi:error] [pid 25521:tid 25545] [client 31.171.130.137:42781] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:25:12.750902 2025] [proxy_fcgi:error] [pid 25521:tid 25534] [client 31.171.130.137:42781] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 19:25:14.716980 2025] [autoindex:error] [pid 25521:tid 25539] [client 31.171.130.137:42781] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 21 19:26:29.257900 2025] [autoindex:error] [pid 25430:tid 25479] [client 31.171.130.165:57855] AH01276: Cannot serve directory /home/dwelects/public_html/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 21 20:09:42.015683 2025] [proxy_fcgi:error] [pid 25430:tid 25473] [client 141.98.11.16:53501] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 20:09:42.752699 2025] [proxy_fcgi:error] [pid 25429:tid 25453] [client 141.98.11.16:56166] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 20:53:49.427468 2025] [:error] [pid 25521:tid 25535] [client 173.239.254.65:24675] [client 173.239.254.65] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.65, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-login.php"] [unique_id "aSBg3fhXnBMilDddn3VR5gAAAMw"]
[Fri Nov 21 20:53:49.440160 2025] [proxy_fcgi:error] [pid 25521:tid 25535] [client 173.239.254.65:24675] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:24:31.186792 2025] [proxy_fcgi:error] [pid 9180:tid 9201] [client 173.239.211.212:23077] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:24:32.614009 2025] [proxy_fcgi:error] [pid 9180:tid 9200] [client 173.239.211.212:23077] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:24:33.152827 2025] [:error] [pid 9180:tid 9198] [client 173.239.211.212:23077] [client 173.239.211.212] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aSCgUbrk9msixUFV2i-TGQAAAFA"]
[Sat Nov 22 01:24:34.251954 2025] [proxy_fcgi:error] [pid 9180:tid 9184] [client 216.73.161.105:45017] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:24:34.741162 2025] [:error] [pid 9180:tid 9185] [client 216.73.161.105:45017] [client 216.73.161.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/bk/index.php"] [unique_id "aSCgUrrk9msixUFV2i-THwAAAEM"]
[Sat Nov 22 01:24:36.376881 2025] [proxy_fcgi:error] [pid 49642:tid 49897] [client 216.73.161.93:56313] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:24:37.375024 2025] [proxy_fcgi:error] [pid 49642:tid 49898] [client 216.73.161.93:56313] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:24:38.010755 2025] [proxy_fcgi:error] [pid 49642:tid 49899] [client 216.73.161.93:56313] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:24:38.982275 2025] [proxy_fcgi:error] [pid 49642:tid 49904] [client 216.73.161.93:56313] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:24:41.274773 2025] [:error] [pid 49642:tid 49905] [client 216.73.161.93:56313] [client 216.73.161.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/theme-compat/chosen.php"] [unique_id "aSCgWYOXTPSuQfgUUtWPygAAAI4"]
[Sat Nov 22 01:24:42.657211 2025] [proxy_fcgi:error] [pid 49643:tid 49939] [client 173.239.211.206:29551] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:24:43.230238 2025] [proxy_fcgi:error] [pid 49643:tid 49932] [client 173.239.211.206:29551] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:24:43.963759 2025] [:error] [pid 49643:tid 49919] [client 173.239.211.206:29551] [client 173.239.211.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/IXR/chosen.php"] [unique_id "aSCgW5wUojIRHhF_fj-OXQAAAMA"]
[Sat Nov 22 01:24:44.916763 2025] [:error] [pid 50057:tid 50073] [client 216.73.161.103:49645] [client 216.73.161.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/chosen.php"] [unique_id "aSCgXFb9j9fTBoI0sRVJswAAAQ4"]
[Sat Nov 22 01:24:46.799421 2025] [:error] [pid 49643:tid 49925] [client 173.239.211.215:28257] [client 173.239.211.215] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/pomo/wp-conflg.php"] [unique_id "aSCgXpwUojIRHhF_fj-OXwAAAMY"]
[Sat Nov 22 01:24:49.274353 2025] [:error] [pid 49641:tid 49832] [client 173.239.211.220:21839] [client 173.239.211.220] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "aSCgYVnhuiDak938N_a4GwAAAAk"]
[Sat Nov 22 01:24:52.320429 2025] [:error] [pid 49641:tid 49843] [client 173.239.211.210:40803] [client 173.239.211.210] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Requests/Auth/index.php"] [unique_id "aSCgZFnhuiDak938N_a4IQAAABQ"]
[Sat Nov 22 01:24:55.672811 2025] [proxy_fcgi:error] [pid 9180:tid 9205] [client 216.73.161.100:30465] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:24:58.936417 2025] [proxy_fcgi:error] [pid 9180:tid 9191] [client 216.73.161.100:30465] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:25:00.965457 2025] [:error] [pid 9180:tid 9202] [client 216.73.161.100:30465] [client 216.73.161.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aSCgbLrk9msixUFV2i-TogAAAFQ"]
[Sat Nov 22 01:25:02.200725 2025] [:error] [pid 50057:tid 50077] [client 173.239.211.209:25867] [client 173.239.211.209] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "aSCgblb9j9fTBoI0sRVJ2QAAARI"]
[Sat Nov 22 01:25:05.255989 2025] [proxy_fcgi:error] [pid 49641:tid 49837] [client 173.239.211.211:46789] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:25:07.648589 2025] [proxy_fcgi:error] [pid 49641:tid 49823] [client 173.239.211.211:46789] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:25:08.300133 2025] [proxy_fcgi:error] [pid 49641:tid 49826] [client 173.239.211.211:46789] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:25:10.261583 2025] [proxy_fcgi:error] [pid 49641:tid 49833] [client 173.239.211.211:46789] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:25:10.940836 2025] [proxy_fcgi:error] [pid 49641:tid 49836] [client 173.239.211.211:46789] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:25:12.595308 2025] [proxy_fcgi:error] [pid 49641:tid 49842] [client 173.239.211.211:46789] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:25:13.364416 2025] [proxy_fcgi:error] [pid 49641:tid 49838] [client 173.239.211.211:46789] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:25:14.690559 2025] [proxy_fcgi:error] [pid 49641:tid 49847] [client 173.239.211.211:46789] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:25:15.308066 2025] [proxy_fcgi:error] [pid 49641:tid 49841] [client 173.239.211.211:46789] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:25:16.311040 2025] [proxy_fcgi:error] [pid 49641:tid 49835] [client 173.239.211.211:46789] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:25:16.924061 2025] [proxy_fcgi:error] [pid 49641:tid 49838] [client 173.239.211.211:46789] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:25:17.719668 2025] [proxy_fcgi:error] [pid 49641:tid 49829] [client 173.239.211.211:46789] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:25:18.239225 2025] [proxy_fcgi:error] [pid 49641:tid 49832] [client 173.239.211.211:46789] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:25:21.824325 2025] [proxy_fcgi:error] [pid 49641:tid 49840] [client 173.239.211.211:46789] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:25:22.550237 2025] [proxy_fcgi:error] [pid 49641:tid 49831] [client 173.239.211.211:46789] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:25:23.624522 2025] [proxy_fcgi:error] [pid 49641:tid 49847] [client 173.239.211.211:46789] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:25:24.444155 2025] [proxy_fcgi:error] [pid 49641:tid 49843] [client 173.239.211.211:46789] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:25:25.209799 2025] [proxy_fcgi:error] [pid 49641:tid 49823] [client 173.239.211.211:46789] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:25:27.219652 2025] [proxy_fcgi:error] [pid 49641:tid 49826] [client 173.239.211.211:46789] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:25:27.849735 2025] [proxy_fcgi:error] [pid 49641:tid 49829] [client 173.239.211.211:46789] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:25:28.291172 2025] [proxy_fcgi:error] [pid 49641:tid 49832] [client 173.239.211.211:46789] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:25:28.863327 2025] [proxy_fcgi:error] [pid 49641:tid 49831] [client 173.239.211.211:46789] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:25:29.390464 2025] [proxy_fcgi:error] [pid 49641:tid 49837] [client 173.239.211.211:46789] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:25:30.771180 2025] [proxy_fcgi:error] [pid 49641:tid 49843] [client 173.239.211.211:46789] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:25:31.319471 2025] [proxy_fcgi:error] [pid 49641:tid 49833] [client 173.239.211.211:46789] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:25:31.960932 2025] [proxy_fcgi:error] [pid 49641:tid 49836] [client 173.239.211.211:46789] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:25:32.576825 2025] [proxy_fcgi:error] [pid 49641:tid 49824] [client 173.239.211.211:46789] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:25:34.886431 2025] [proxy_fcgi:error] [pid 49641:tid 49840] [client 173.239.211.211:46789] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:25:35.541166 2025] [proxy_fcgi:error] [pid 49641:tid 49831] [client 173.239.211.211:46789] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:25:36.034043 2025] [proxy_fcgi:error] [pid 49641:tid 49843] [client 173.239.211.211:46789] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:25:36.479491 2025] [proxy_fcgi:error] [pid 49641:tid 49841] [client 173.239.211.211:46789] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:25:37.430847 2025] [proxy_fcgi:error] [pid 49641:tid 49836] [client 173.239.211.211:46789] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:25:38.694112 2025] [proxy_fcgi:error] [pid 49641:tid 49834] [client 173.239.211.211:46789] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:25:41.105391 2025] [:error] [pid 49641:tid 49826] [client 173.239.211.211:46789] [client 173.239.211.211] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.211.211, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-login.php"] [unique_id "aSCglVnhuiDak938N_a45wAAAAM"]
[Sat Nov 22 01:25:41.109814 2025] [proxy_fcgi:error] [pid 49641:tid 49826] [client 173.239.211.211:46789] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:25:42.438852 2025] [proxy_fcgi:error] [pid 49641:tid 49840] [client 173.239.211.211:46789] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:25:43.129054 2025] [proxy_fcgi:error] [pid 49641:tid 49832] [client 173.239.211.211:46789] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:25:43.578564 2025] [:error] [pid 49641:tid 49831] [client 173.239.211.211:46789] [client 173.239.211.211] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/modules.php"] [unique_id "aSCgl1nhuiDak938N_a46wAAAAg"]
[Sat Nov 22 01:25:45.895589 2025] [proxy_fcgi:error] [pid 9180:tid 9206] [client 173.239.211.207:52367] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:25:47.988011 2025] [proxy_fcgi:error] [pid 9180:tid 9184] [client 173.239.211.207:52367] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:25:51.054115 2025] [proxy_fcgi:error] [pid 9180:tid 9204] [client 173.239.211.207:52367] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:25:51.674942 2025] [proxy_fcgi:error] [pid 9180:tid 9205] [client 173.239.211.207:52367] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:25:53.353041 2025] [proxy_fcgi:error] [pid 9180:tid 9194] [client 173.239.211.207:52367] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:25:53.815879 2025] [proxy_fcgi:error] [pid 9180:tid 9186] [client 173.239.211.207:52367] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:25:54.714027 2025] [proxy_fcgi:error] [pid 9180:tid 9185] [client 173.239.211.207:52367] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:25:55.453093 2025] [proxy_fcgi:error] [pid 9180:tid 9187] [client 173.239.211.207:52367] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:25:56.030377 2025] [proxy_fcgi:error] [pid 9180:tid 9192] [client 173.239.211.207:52367] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:25:57.204453 2025] [:error] [pid 9180:tid 9205] [client 173.239.211.207:52367] [client 173.239.211.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/codeboy1877_up.php"] [unique_id "aSCgpbrk9msixUFV2i-UhQAAAFc"]
[Sat Nov 22 01:26:02.987308 2025] [proxy_fcgi:error] [pid 49641:tid 49841] [client 173.239.211.218:48227] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:26:03.724198 2025] [proxy_fcgi:error] [pid 49641:tid 49824] [client 173.239.211.218:48227] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:26:11.432101 2025] [proxy_fcgi:error] [pid 49641:tid 49829] [client 173.239.211.218:48227] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:26:12.289402 2025] [proxy_fcgi:error] [pid 49641:tid 49826] [client 173.239.211.218:48227] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:26:12.809984 2025] [proxy_fcgi:error] [pid 49641:tid 49837] [client 173.239.211.218:48227] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:26:13.264967 2025] [proxy_fcgi:error] [pid 49641:tid 49842] [client 173.239.211.218:48227] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:26:13.811824 2025] [proxy_fcgi:error] [pid 49641:tid 49833] [client 173.239.211.218:48227] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:26:22.202346 2025] [proxy_fcgi:error] [pid 49643:tid 49933] [client 173.239.211.218:28973] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:26:23.029384 2025] [proxy_fcgi:error] [pid 49643:tid 49931] [client 173.239.211.218:28973] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:26:23.745151 2025] [proxy_fcgi:error] [pid 49643:tid 49935] [client 173.239.211.218:28973] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:26:24.445564 2025] [proxy_fcgi:error] [pid 49643:tid 49922] [client 173.239.211.218:28973] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:26:25.172904 2025] [proxy_fcgi:error] [pid 49643:tid 49923] [client 173.239.211.218:28973] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:26:25.807448 2025] [proxy_fcgi:error] [pid 49643:tid 49930] [client 173.239.211.218:28973] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:26:29.926141 2025] [proxy_fcgi:error] [pid 49643:tid 49940] [client 173.239.211.218:28973] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:26:31.445382 2025] [proxy_fcgi:error] [pid 49643:tid 49933] [client 173.239.211.218:28973] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:26:31.919325 2025] [proxy_fcgi:error] [pid 49643:tid 49927] [client 173.239.211.218:28973] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:26:34.114194 2025] [proxy_fcgi:error] [pid 49643:tid 49942] [client 173.239.211.218:28973] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:26:34.636263 2025] [proxy_fcgi:error] [pid 49643:tid 49935] [client 173.239.211.218:28973] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:26:35.483354 2025] [proxy_fcgi:error] [pid 49643:tid 49926] [client 173.239.211.218:28973] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:26:36.879178 2025] [proxy_fcgi:error] [pid 49643:tid 49939] [client 173.239.211.218:28973] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:26:37.453866 2025] [proxy_fcgi:error] [pid 49643:tid 49922] [client 173.239.211.218:28973] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:26:39.139458 2025] [:error] [pid 49643:tid 49938] [client 173.239.211.218:28973] [client 173.239.211.218] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/lx.php"] [unique_id "aSCgz5wUojIRHhF_fj-PNwAAANI"]
[Sat Nov 22 01:26:41.896944 2025] [proxy_fcgi:error] [pid 9180:tid 9205] [client 173.239.211.222:25041] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:26:42.650334 2025] [proxy_fcgi:error] [pid 9180:tid 9197] [client 173.239.211.222:25041] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:26:43.250131 2025] [proxy_fcgi:error] [pid 9180:tid 9196] [client 173.239.211.222:25041] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:26:43.713097 2025] [proxy_fcgi:error] [pid 9180:tid 9184] [client 173.239.211.222:25041] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:26:44.674174 2025] [proxy_fcgi:error] [pid 9180:tid 9193] [client 173.239.211.222:25041] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:26:45.320405 2025] [proxy_fcgi:error] [pid 9180:tid 9204] [client 173.239.211.222:25041] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:26:47.064351 2025] [proxy_fcgi:error] [pid 9180:tid 9194] [client 173.239.211.222:25041] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:26:47.821115 2025] [proxy_fcgi:error] [pid 9180:tid 9199] [client 173.239.211.222:25041] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:26:50.106988 2025] [proxy_fcgi:error] [pid 9180:tid 9184] [client 173.239.211.222:25041] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:26:51.700458 2025] [proxy_fcgi:error] [pid 9180:tid 9185] [client 173.239.211.222:25041] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:26:52.680367 2025] [proxy_fcgi:error] [pid 9180:tid 9199] [client 173.239.211.222:25041] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:26:53.430480 2025] [proxy_fcgi:error] [pid 9180:tid 9192] [client 173.239.211.222:25041] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:26:55.734047 2025] [proxy_fcgi:error] [pid 9180:tid 9183] [client 173.239.211.222:25041] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:26:56.766082 2025] [proxy_fcgi:error] [pid 9180:tid 9199] [client 173.239.211.222:25041] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:26:57.358022 2025] [proxy_fcgi:error] [pid 9180:tid 9195] [client 173.239.211.222:25041] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:26:58.094388 2025] [proxy_fcgi:error] [pid 9180:tid 9191] [client 173.239.211.222:25041] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:27:00.518447 2025] [proxy_fcgi:error] [pid 9180:tid 9189] [client 173.239.211.222:25041] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:27:01.156012 2025] [proxy_fcgi:error] [pid 9180:tid 9187] [client 173.239.211.222:25041] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:27:02.703432 2025] [proxy_fcgi:error] [pid 9180:tid 9200] [client 173.239.211.222:25041] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:27:03.708824 2025] [proxy_fcgi:error] [pid 9180:tid 9198] [client 173.239.211.222:25041] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:27:04.621817 2025] [proxy_fcgi:error] [pid 9180:tid 9199] [client 173.239.211.222:25041] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:27:05.379477 2025] [proxy_fcgi:error] [pid 9180:tid 9201] [client 173.239.211.222:25041] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:27:06.053129 2025] [proxy_fcgi:error] [pid 9180:tid 9193] [client 173.239.211.222:25041] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:27:08.640389 2025] [proxy_fcgi:error] [pid 9180:tid 9182] [client 173.239.211.222:25041] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:27:09.392456 2025] [proxy_fcgi:error] [pid 9180:tid 9196] [client 173.239.211.222:25041] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:27:09.990988 2025] [proxy_fcgi:error] [pid 9180:tid 9205] [client 173.239.211.222:25041] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:27:10.606797 2025] [proxy_fcgi:error] [pid 9180:tid 9183] [client 173.239.211.222:25041] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:27:11.107784 2025] [proxy_fcgi:error] [pid 9180:tid 9187] [client 173.239.211.222:25041] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:27:11.937192 2025] [proxy_fcgi:error] [pid 9180:tid 9203] [client 173.239.211.222:25041] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:27:30.330359 2025] [:error] [pid 9180:tid 9189] [client 173.239.211.222:25041] [client 173.239.211.222] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/F0x.php"] [unique_id "aSChArrk9msixUFV2i-V8wAAAEc"]
[Sat Nov 22 01:27:32.311919 2025] [proxy_fcgi:error] [pid 49641:tid 49840] [client 216.73.161.98:61729] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:27:51.612593 2025] [proxy_fcgi:error] [pid 50057:tid 50082] [client 216.73.161.97:58391] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:27:52.342431 2025] [proxy_fcgi:error] [pid 50057:tid 50075] [client 216.73.161.97:58391] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:27:54.253042 2025] [proxy_fcgi:error] [pid 50057:tid 50076] [client 216.73.161.97:58391] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:27:56.938660 2025] [proxy_fcgi:error] [pid 50057:tid 50063] [client 216.73.161.97:58391] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:28:02.476553 2025] [proxy_fcgi:error] [pid 50057:tid 50061] [client 216.73.161.97:58391] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:28:03.574565 2025] [proxy_fcgi:error] [pid 50057:tid 50076] [client 216.73.161.97:58391] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:28:05.924096 2025] [proxy_fcgi:error] [pid 50057:tid 50069] [client 216.73.161.97:58391] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:28:06.553344 2025] [proxy_fcgi:error] [pid 50057:tid 50062] [client 216.73.161.97:58391] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:28:07.305336 2025] [proxy_fcgi:error] [pid 50057:tid 50064] [client 216.73.161.97:58391] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:28:09.280934 2025] [proxy_fcgi:error] [pid 50057:tid 50081] [client 216.73.161.97:58391] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:28:10.280465 2025] [:error] [pid 50057:tid 50083] [client 216.73.161.97:58391] [client 216.73.161.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aSChKlb9j9fTBoI0sRVLRAAAARg"]
[Sat Nov 22 01:28:14.615867 2025] [:error] [pid 49643:tid 49943] [client 216.73.161.110:39305] [client 216.73.161.110] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 216.73.161.110, incrementing ddos counter"] [hostname "dwelectservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aSChLpwUojIRHhF_fj-PswAAANc"]
[Sat Nov 22 01:28:14.619770 2025] [proxy_fcgi:error] [pid 49643:tid 49943] [client 216.73.161.110:39305] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:28:15.234946 2025] [proxy_fcgi:error] [pid 49643:tid 49929] [client 216.73.161.110:39305] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:28:18.256053 2025] [:error] [pid 49643:tid 49938] [client 216.73.161.110:39305] [client 216.73.161.110] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aSChMpwUojIRHhF_fj-PuwAAANI"]
[Sat Nov 22 01:28:20.827066 2025] [proxy_fcgi:error] [pid 49642:tid 49907] [client 216.73.161.98:43431] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:28:23.634791 2025] [proxy_fcgi:error] [pid 49642:tid 49895] [client 216.73.161.98:43431] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:28:24.912053 2025] [proxy_fcgi:error] [pid 49642:tid 49898] [client 216.73.161.98:43431] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:28:25.766019 2025] [:error] [pid 49642:tid 49904] [client 216.73.161.98:43431] [client 216.73.161.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aSChOYOXTPSuQfgUUtWRXQAAAI0"]
[Sat Nov 22 01:28:28.702812 2025] [proxy_fcgi:error] [pid 49641:tid 49843] [client 216.73.161.93:63549] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:28:29.224761 2025] [proxy_fcgi:error] [pid 49641:tid 49829] [client 216.73.161.93:63549] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:28:31.267953 2025] [proxy_fcgi:error] [pid 49641:tid 49826] [client 216.73.161.93:63549] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:28:34.861461 2025] [proxy_fcgi:error] [pid 49641:tid 49844] [client 216.73.161.93:63549] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:28:35.318896 2025] [proxy_fcgi:error] [pid 49641:tid 49839] [client 216.73.161.93:63549] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:28:35.797409 2025] [proxy_fcgi:error] [pid 49641:tid 49831] [client 216.73.161.93:63549] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:28:38.430268 2025] [proxy_fcgi:error] [pid 49641:tid 49843] [client 216.73.161.93:63549] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:28:41.825052 2025] [proxy_fcgi:error] [pid 49641:tid 49825] [client 216.73.161.93:63549] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:28:43.250676 2025] [:error] [pid 49641:tid 49844] [client 216.73.161.93:63549] [client 216.73.161.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aSChS1nhuiDak938N_a6CAAAABU"]
[Sat Nov 22 01:28:44.450635 2025] [:error] [pid 9180:tid 9205] [client 216.73.161.111:49019] [client 216.73.161.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aSChTLrk9msixUFV2i-W5wAAAFc"]
[Sat Nov 22 01:28:50.726466 2025] [:error] [pid 49643:tid 49919] [client 173.239.211.211:55503] [client 173.239.211.211] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "aSChUpwUojIRHhF_fj-P7AAAAMA"]
[Sat Nov 22 01:28:53.865927 2025] [:error] [pid 50057:tid 50062] [client 173.239.211.211:42423] [client 173.239.211.211] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "aSChVVb9j9fTBoI0sRVLnwAAAQM"]
[Sat Nov 22 01:28:55.463189 2025] [proxy_fcgi:error] [pid 50057:tid 50081] [client 216.73.161.98:30445] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:28:55.991066 2025] [proxy_fcgi:error] [pid 50057:tid 50075] [client 216.73.161.98:30445] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:28:58.796503 2025] [:error] [pid 50057:tid 50062] [client 216.73.161.98:30445] [client 216.73.161.98] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.73.161.98, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/images/wp-login.php"] [unique_id "aSChWlb9j9fTBoI0sRVLrgAAAQM"]
[Sat Nov 22 01:29:02.937682 2025] [proxy_fcgi:error] [pid 50057:tid 50060] [client 216.73.161.98:30445] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:29:03.812813 2025] [proxy_fcgi:error] [pid 50057:tid 50072] [client 216.73.161.98:30445] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:29:08.835358 2025] [proxy_fcgi:error] [pid 50057:tid 50083] [client 216.73.161.98:30445] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:29:12.659405 2025] [:error] [pid 50057:tid 50072] [client 216.73.161.98:30445] [client 216.73.161.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "aSChaFb9j9fTBoI0sRVL0wAAAQ0"]
[Sat Nov 22 01:29:14.126061 2025] [proxy_fcgi:error] [pid 49642:tid 49909] [client 216.73.161.100:51055] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:29:19.058975 2025] [:error] [pid 49642:tid 49906] [client 216.73.161.100:51055] [client 216.73.161.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.73.161.100, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/wp-login.php"] [unique_id "aSChb4OXTPSuQfgUUtWRkgAAAI8"]
[Sat Nov 22 01:29:20.091852 2025] [proxy_fcgi:error] [pid 49642:tid 49912] [client 216.73.161.100:51055] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:29:21.614458 2025] [proxy_fcgi:error] [pid 49642:tid 49908] [client 216.73.161.100:51055] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:29:22.296344 2025] [proxy_fcgi:error] [pid 49642:tid 49904] [client 216.73.161.100:51055] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:29:24.715204 2025] [proxy_fcgi:error] [pid 49642:tid 49902] [client 216.73.161.100:51055] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:29:25.316007 2025] [proxy_fcgi:error] [pid 49642:tid 49903] [client 216.73.161.100:51055] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:29:26.009767 2025] [:error] [pid 49642:tid 49892] [client 216.73.161.100:51055] [client 216.73.161.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/makeasmtp.php"] [unique_id "aSChdoOXTPSuQfgUUtWRpAAAAIE"]
[Sat Nov 22 01:29:27.110776 2025] [:error] [pid 49643:tid 49939] [client 216.73.161.111:31193] [client 216.73.161.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/about.php"] [unique_id "aSChd5wUojIRHhF_fj-QAgAAANM"]
[Sat Nov 22 01:29:34.532749 2025] [proxy_fcgi:error] [pid 9180:tid 9193] [client 173.239.211.218:37253] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:29:35.124344 2025] [proxy_fcgi:error] [pid 9180:tid 9205] [client 173.239.211.218:37253] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:29:35.849346 2025] [proxy_fcgi:error] [pid 9180:tid 9198] [client 173.239.211.218:37253] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:29:36.327262 2025] [proxy_fcgi:error] [pid 9180:tid 9189] [client 173.239.211.218:37253] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:29:37.638994 2025] [proxy_fcgi:error] [pid 9180:tid 9195] [client 173.239.211.218:37253] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:29:40.493287 2025] [proxy_fcgi:error] [pid 9180:tid 9197] [client 173.239.211.218:37253] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:29:50.127504 2025] [proxy_fcgi:error] [pid 9180:tid 9196] [client 173.239.211.218:37253] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:29:51.760941 2025] [proxy_fcgi:error] [pid 9180:tid 9202] [client 173.239.211.218:37253] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:29:52.390708 2025] [proxy_fcgi:error] [pid 9180:tid 9192] [client 173.239.211.218:37253] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:29:53.703045 2025] [:error] [pid 9180:tid 9193] [client 173.239.211.218:37253] [client 173.239.211.218] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aSChkbrk9msixUFV2i-XTgAAAEs"]
[Sat Nov 22 01:30:02.146879 2025] [:error] [pid 49641:tid 49847] [client 173.239.211.205:29991] [client 173.239.211.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/bak.php"] [unique_id "aSChmlnhuiDak938N_a6UwAAABg"]
[Sat Nov 22 01:30:03.676701 2025] [proxy_fcgi:error] [pid 49642:tid 49898] [client 173.239.211.223:20881] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:30:04.259033 2025] [:error] [pid 49642:tid 49913] [client 173.239.211.223:20881] [client 173.239.211.223] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aSChnIOXTPSuQfgUUtWRygAAAJY"]
[Sat Nov 22 01:30:08.916300 2025] [proxy_fcgi:error] [pid 49641:tid 49832] [client 216.73.161.100:55597] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:30:10.545802 2025] [proxy_fcgi:error] [pid 49641:tid 49825] [client 216.73.161.100:55597] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:30:11.297536 2025] [:error] [pid 49641:tid 49847] [client 216.73.161.100:55597] [client 216.73.161.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dwelectservices.com.au"] [uri "/fm.php"] [unique_id "aSCho1nhuiDak938N_a6YgAAABg"]
[Sat Nov 22 01:30:12.190468 2025] [:error] [pid 49643:tid 49933] [client 173.239.211.211:26921] [client 173.239.211.211] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aSChpJwUojIRHhF_fj-QLAAAAM0"]
[Sat Nov 22 01:30:16.336519 2025] [:error] [pid 9180:tid 9186] [client 216.73.161.103:30655] [client 216.73.161.103] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.73.161.103, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-content/upgrade-temp-backup/wp-login.php"] [unique_id "aSChqLrk9msixUFV2i-XYQAAAEQ"]
[Sat Nov 22 01:30:17.318808 2025] [proxy_fcgi:error] [pid 9180:tid 9199] [client 216.73.161.103:30655] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:30:19.220363 2025] [:error] [pid 9180:tid 9197] [client 216.73.161.103:30655] [client 216.73.161.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/themes.php"] [unique_id "aSChq7rk9msixUFV2i-XZwAAAE8"]
[Sat Nov 22 01:30:21.156668 2025] [proxy_fcgi:error] [pid 9180:tid 9190] [client 173.239.211.223:37805] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:30:24.187746 2025] [proxy_fcgi:error] [pid 9180:tid 9201] [client 173.239.211.223:37805] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:30:29.579690 2025] [:error] [pid 9180:tid 9200] [client 173.239.211.223:37805] [client 173.239.211.223] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/wp-includes_function.php"] [unique_id "aSChtbrk9msixUFV2i-XdQAAAFI"]
[Sat Nov 22 01:30:30.779205 2025] [proxy_fcgi:error] [pid 9180:tid 9204] [client 173.239.211.209:44571] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:30:32.327492 2025] [:error] [pid 9180:tid 9187] [client 173.239.211.209:44571] [client 173.239.211.209] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/about.php"] [unique_id "aSChuLrk9msixUFV2i-XegAAAEU"]
[Sat Nov 22 01:30:35.703399 2025] [proxy_fcgi:error] [pid 49643:tid 49922] [client 216.73.161.95:38425] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:30:37.008902 2025] [:error] [pid 49643:tid 49944] [client 216.73.161.95:38425] [client 216.73.161.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/codemirror/about.php"] [unique_id "aSChvZwUojIRHhF_fj-QQwAAANg"]
[Sat Nov 22 01:30:54.906109 2025] [autoindex:error] [pid 9180:tid 9197] [client 173.239.211.220:46375] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 01:32:49.127839 2025] [autoindex:error] [pid 9180:tid 9200] [client 173.239.211.226:43049] AH01276: Cannot serve directory /home/dwelects/public_html/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 03:52:52.907007 2025] [:error] [pid 53479:tid 53536] [client 103.167.150.158:59424] [client 103.167.150.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/media/system/js/core.js"] [unique_id "aSDDFG6cicFF3Aas-oQ7vAAAAIA"]
[Sat Nov 22 06:03:15.202698 2025] [proxy_fcgi:error] [pid 25856:tid 25866] [client 48.210.84.77:21385] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:03:15.452747 2025] [proxy_fcgi:error] [pid 25856:tid 25859] [client 48.210.84.77:21385] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:03:15.576394 2025] [proxy_fcgi:error] [pid 25856:tid 25858] [client 48.210.84.77:21385] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:03:15.703948 2025] [proxy_fcgi:error] [pid 25856:tid 25861] [client 48.210.84.77:21385] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:03:15.968415 2025] [proxy_fcgi:error] [pid 25856:tid 25879] [client 48.210.84.77:21385] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:03:16.094158 2025] [proxy_fcgi:error] [pid 25856:tid 25873] [client 48.210.84.77:21385] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:03:16.211671 2025] [proxy_fcgi:error] [pid 25856:tid 25877] [client 48.210.84.77:21385] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:03:16.566491 2025] [proxy_fcgi:error] [pid 25856:tid 25874] [client 48.210.84.77:21385] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:03:16.703405 2025] [proxy_fcgi:error] [pid 25856:tid 25878] [client 48.210.84.77:21385] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:03:16.827214 2025] [proxy_fcgi:error] [pid 25856:tid 25862] [client 48.210.84.77:21385] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:03:16.941280 2025] [:error] [pid 25856:tid 25870] [client 48.210.84.77:21385] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/byp7.php"] [unique_id "aSDhpBsTP0wy94zKUvG7kgAAAQw"]
[Sat Nov 22 06:03:18.014514 2025] [:error] [pid 53566:tid 53588] [client 48.210.84.77:21473] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/byp7.php"] [unique_id "aSDhpsbSHDBkRbwMbd5FBgAAANQ"]
[Sat Nov 22 06:03:18.750472 2025] [:error] [pid 53478:tid 53527] [client 48.210.84.77:21449] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/byp7.php"] [unique_id "aSDhpghUYdXBbQswAdQbGQAAAFI"]
[Sat Nov 22 06:03:24.875431 2025] [:error] [pid 53478:tid 53513] [client 48.210.84.77:21467] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/byp7.php"] [unique_id "aSDhrAhUYdXBbQswAdQbOAAAAEQ"]
[Sat Nov 22 06:03:25.511336 2025] [:error] [pid 53566:tid 53573] [client 48.210.84.77:21380] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/0x.php"] [unique_id "aSDhrcbSHDBkRbwMbd5FIQAAAMU"]
[Sat Nov 22 06:03:29.662653 2025] [:error] [pid 53566:tid 53591] [client 48.210.84.77:21495] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/0x.php"] [unique_id "aSDhscbSHDBkRbwMbd5FLgAAANc"]
[Sat Nov 22 06:03:31.635322 2025] [:error] [pid 53478:tid 53515] [client 48.210.84.77:21459] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/0x.php"] [unique_id "aSDhswhUYdXBbQswAdQbUQAAAEY"]
[Sat Nov 22 06:03:34.024728 2025] [:error] [pid 53477:tid 53481] [client 48.210.84.77:21475] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/0x.php"] [unique_id "aSDhtn7Lu30Ku9O40aLmmgAAAAA"]
[Sat Nov 22 06:03:37.012662 2025] [:error] [pid 53477:tid 53484] [client 48.210.84.77:21448] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/s.php"] [unique_id "aSDhuX7Lu30Ku9O40aLmsQAAAAM"]
[Sat Nov 22 06:03:41.576393 2025] [:error] [pid 25856:tid 25863] [client 48.210.84.77:21484] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/s.php"] [unique_id "aSDhvRsTP0wy94zKUvG8egAAAQU"]
[Sat Nov 22 06:03:47.690663 2025] [:error] [pid 25856:tid 25882] [client 48.210.84.77:21502] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/s.php"] [unique_id "aSDhwxsTP0wy94zKUvG8rgAAARg"]
[Sat Nov 22 06:03:49.539218 2025] [:error] [pid 53479:tid 53544] [client 48.210.84.77:21500] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/s.php"] [unique_id "aSDhxW6cicFF3Aas-oSAtgAAAIg"]
[Sat Nov 22 06:03:51.279465 2025] [:error] [pid 53479:tid 53540] [client 48.210.84.77:21386] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/unwattled.php"] [unique_id "aSDhx26cicFF3Aas-oSAugAAAIQ"]
[Sat Nov 22 06:03:53.437328 2025] [:error] [pid 53478:tid 53511] [client 48.210.84.77:21388] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/unwattled.php"] [unique_id "aSDhyQhUYdXBbQswAdQbygAAAEI"]
[Sat Nov 22 06:03:57.612450 2025] [:error] [pid 25856:tid 25879] [client 48.210.84.77:21477] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/unwattled.php"] [unique_id "aSDhzRsTP0wy94zKUvG86QAAARU"]
[Sat Nov 22 06:03:59.695570 2025] [:error] [pid 53479:tid 53536] [client 48.210.84.77:21501] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/unwattled.php"] [unique_id "aSDhz26cicFF3Aas-oSA0gAAAIA"]
[Sat Nov 22 06:04:03.550019 2025] [:error] [pid 53478:tid 53517] [client 48.210.84.77:21392] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ww1.php"] [unique_id "aSDh0whUYdXBbQswAdQb9QAAAEg"]
[Sat Nov 22 06:04:03.905543 2025] [:error] [pid 53477:tid 53503] [client 48.210.84.77:21468] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ww1.php"] [unique_id "aSDh037Lu30Ku9O40aLnPAAAABY"]
[Sat Nov 22 06:04:14.988496 2025] [:error] [pid 53478:tid 53513] [client 48.210.84.77:21432] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ww1.php"] [unique_id "aSDh3ghUYdXBbQswAdQcHgAAAEQ"]
[Sat Nov 22 06:04:20.277959 2025] [proxy_fcgi:error] [pid 53479:tid 53556] [client 48.210.84.77:21482] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:04:20.406137 2025] [proxy_fcgi:error] [pid 53479:tid 53549] [client 48.210.84.77:21482] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:04:20.526120 2025] [proxy_fcgi:error] [pid 53479:tid 53554] [client 48.210.84.77:21482] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:04:20.645627 2025] [proxy_fcgi:error] [pid 53479:tid 53560] [client 48.210.84.77:21482] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:04:20.764627 2025] [proxy_fcgi:error] [pid 53479:tid 53547] [client 48.210.84.77:21482] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:04:20.884218 2025] [proxy_fcgi:error] [pid 53479:tid 53550] [client 48.210.84.77:21482] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:04:21.004087 2025] [proxy_fcgi:error] [pid 53479:tid 53559] [client 48.210.84.77:21482] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:04:21.121310 2025] [proxy_fcgi:error] [pid 53479:tid 53538] [client 48.210.84.77:21482] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:04:21.240250 2025] [proxy_fcgi:error] [pid 53479:tid 53545] [client 48.210.84.77:21482] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:04:21.380619 2025] [proxy_fcgi:error] [pid 53479:tid 53557] [client 48.210.84.77:21482] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:04:21.499893 2025] [proxy_fcgi:error] [pid 53479:tid 53540] [client 48.210.84.77:21482] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:04:21.614204 2025] [:error] [pid 53479:tid 53544] [client 48.210.84.77:21482] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2co_ipn.php"] [unique_id "aSDh5W6cicFF3Aas-oSBQQAAAIg"]
[Sat Nov 22 06:04:23.602352 2025] [:error] [pid 53566:tid 53577] [client 48.210.84.77:21441] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2co_ipn.php"] [unique_id "aSDh58bSHDBkRbwMbd5GdQAAAMk"]
[Sat Nov 22 06:04:25.597723 2025] [:error] [pid 53478:tid 53524] [client 48.210.84.77:21377] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2co_ipn.php"] [unique_id "aSDh6QhUYdXBbQswAdQcVwAAAE8"]
[Sat Nov 22 06:04:27.770406 2025] [:error] [pid 53477:tid 53484] [client 48.210.84.77:21402] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2co_ipn.php"] [unique_id "aSDh637Lu30Ku9O40aLniwAAAAM"]
[Sat Nov 22 06:04:31.102112 2025] [:error] [pid 53478:tid 53512] [client 48.210.84.77:21494] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/speculative.php"] [unique_id "aSDh7whUYdXBbQswAdQcfAAAAEM"]
[Sat Nov 22 06:04:39.588407 2025] [:error] [pid 53479:tid 53556] [client 48.210.84.77:21408] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/speculative.php"] [unique_id "aSDh926cicFF3Aas-oSBzQAAAJQ"]
[Sat Nov 22 06:04:42.198366 2025] [:error] [pid 53566:tid 53579] [client 48.210.84.77:21474] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/speculative.php"] [unique_id "aSDh-sbSHDBkRbwMbd5G4QAAAMs"]
[Sat Nov 22 06:04:45.280930 2025] [:error] [pid 53479:tid 53550] [client 48.210.84.77:21453] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hans.php"] [unique_id "aSDh_W6cicFF3Aas-oSB7wAAAI4"]
[Sat Nov 22 06:04:47.003354 2025] [:error] [pid 53477:tid 53498] [client 48.210.84.77:21393] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hans.php"] [unique_id "aSDh_37Lu30Ku9O40aLn7gAAABE"]
[Sat Nov 22 06:04:49.229314 2025] [:error] [pid 53479:tid 53556] [client 48.210.84.77:21462] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hans.php"] [unique_id "aSDiAW6cicFF3Aas-oSCBQAAAJQ"]
[Sat Nov 22 06:04:51.947363 2025] [:error] [pid 53479:tid 53559] [client 48.210.84.77:21485] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hans.php"] [unique_id "aSDiA26cicFF3Aas-oSCFAAAAJc"]
[Sat Nov 22 06:04:54.457467 2025] [:error] [pid 53566:tid 53570] [client 48.210.84.77:21436] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/krypton.php"] [unique_id "aSDiBsbSHDBkRbwMbd5HHAAAAMI"]
[Sat Nov 22 06:04:55.699629 2025] [:error] [pid 53477:tid 53490] [client 48.210.84.77:21486] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/krypton.php"] [unique_id "aSDiB37Lu30Ku9O40aLoJAAAAAk"]
[Sat Nov 22 06:04:59.900634 2025] [:error] [pid 53478:tid 53525] [client 48.210.84.77:21461] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/krypton.php"] [unique_id "aSDiCwhUYdXBbQswAdQc6QAAAFA"]
[Sat Nov 22 06:05:02.733867 2025] [:error] [pid 53479:tid 53544] [client 48.210.84.77:21460] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/krypton.php"] [unique_id "aSDiDm6cicFF3Aas-oSCWwAAAIg"]
[Sat Nov 22 06:05:04.655426 2025] [:error] [pid 53566:tid 53579] [client 48.210.84.77:21444] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/acholuria.php"] [unique_id "aSDiEMbSHDBkRbwMbd5HTwAAAMs"]
[Sat Nov 22 06:05:06.879116 2025] [:error] [pid 53478:tid 53514] [client 48.210.84.77:21382] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/acholuria.php"] [unique_id "aSDiEghUYdXBbQswAdQdFwAAAEU"]
[Sat Nov 22 06:05:16.257492 2025] [:error] [pid 25856:tid 25871] [client 48.210.84.77:21446] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/acholuria.php"] [unique_id "aSDiHBsTP0wy94zKUvG-3QAAAQ0"]
[Sat Nov 22 06:05:18.341494 2025] [:error] [pid 53477:tid 53502] [client 48.210.84.77:21442] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/acholuria.php"] [unique_id "aSDiHn7Lu30Ku9O40aLokAAAABU"]
[Sat Nov 22 06:05:21.776173 2025] [proxy_fcgi:error] [pid 53479:tid 53555] [client 48.210.84.77:21443] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:05:21.900376 2025] [proxy_fcgi:error] [pid 53479:tid 53545] [client 48.210.84.77:21443] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:05:22.029606 2025] [proxy_fcgi:error] [pid 53479:tid 53559] [client 48.210.84.77:21443] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:05:22.153624 2025] [proxy_fcgi:error] [pid 53479:tid 53542] [client 48.210.84.77:21443] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:05:22.283584 2025] [proxy_fcgi:error] [pid 53479:tid 53557] [client 48.210.84.77:21443] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:05:22.403252 2025] [proxy_fcgi:error] [pid 53479:tid 53554] [client 48.210.84.77:21443] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:05:22.668958 2025] [proxy_fcgi:error] [pid 53479:tid 53551] [client 48.210.84.77:21443] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:05:22.814987 2025] [proxy_fcgi:error] [pid 53479:tid 53552] [client 48.210.84.77:21443] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:05:22.935067 2025] [proxy_fcgi:error] [pid 53479:tid 53536] [client 48.210.84.77:21443] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:05:23.052842 2025] [proxy_fcgi:error] [pid 53479:tid 53544] [client 48.210.84.77:21443] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:05:23.398917 2025] [:error] [pid 53479:tid 53537] [client 48.210.84.77:21443] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/domains.php"] [unique_id "aSDiI26cicFF3Aas-oSCtQAAAIE"]
[Sat Nov 22 06:05:37.636342 2025] [:error] [pid 53477:tid 53488] [client 48.210.84.77:21454] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/domains.php"] [unique_id "aSDiMX7Lu30Ku9O40aLozgAAAAc"]
[Sat Nov 22 06:05:52.679621 2025] [:error] [pid 53479:tid 53549] [client 48.210.84.77:21498] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lock360.php"] [unique_id "aSDiQG6cicFF3Aas-oSDMgAAAI0"]
[Sat Nov 22 06:06:05.129543 2025] [:error] [pid 53477:tid 53499] [client 48.210.84.77:21421] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/d12.php"] [unique_id "aSDiTX7Lu30Ku9O40aLpNQAAABI"]
[Sat Nov 22 06:06:06.537667 2025] [:error] [pid 53566:tid 53571] [client 48.210.84.77:21335] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/d12.php"] [unique_id "aSDiTsbSHDBkRbwMbd5IpQAAAMM"]
[Sat Nov 22 06:06:07.488486 2025] [:error] [pid 53566:tid 53572] [client 48.210.84.77:21483] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/d12.php"] [unique_id "aSDiT8bSHDBkRbwMbd5IpgAAAMQ"]
[Sat Nov 22 06:06:08.144489 2025] [:error] [pid 25856:tid 25869] [client 48.210.84.77:21383] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/d12.php"] [unique_id "aSDiUBsTP0wy94zKUvHAHQAAAQs"]
[Sat Nov 22 06:06:09.181617 2025] [:error] [pid 53478:tid 53531] [client 48.210.84.77:21410] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/boyfile.php"] [unique_id "aSDiUQhUYdXBbQswAdQfTQAAAFY"]
[Sat Nov 22 06:06:10.245786 2025] [:error] [pid 53566:tid 53587] [client 48.210.84.77:21338] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/boyfile.php"] [unique_id "aSDiUsbSHDBkRbwMbd5IrgAAANM"]
[Sat Nov 22 06:06:12.404814 2025] [:error] [pid 53477:tid 53500] [client 48.210.84.77:21492] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/boyfile.php"] [unique_id "aSDiVH7Lu30Ku9O40aLpSgAAABM"]
[Sat Nov 22 06:06:13.154695 2025] [:error] [pid 53477:tid 53487] [client 48.210.84.77:21404] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/boyfile.php"] [unique_id "aSDiVX7Lu30Ku9O40aLpTAAAAAY"]
[Sat Nov 22 06:06:23.191825 2025] [proxy_fcgi:error] [pid 53477:tid 53501] [client 48.210.84.77:21326] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:06:23.365810 2025] [proxy_fcgi:error] [pid 53477:tid 53490] [client 48.210.84.77:21326] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:06:23.530180 2025] [proxy_fcgi:error] [pid 53477:tid 53498] [client 48.210.84.77:21326] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:06:23.690096 2025] [proxy_fcgi:error] [pid 53477:tid 53491] [client 48.210.84.77:21326] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:06:23.862766 2025] [proxy_fcgi:error] [pid 53477:tid 53496] [client 48.210.84.77:21326] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:06:24.023062 2025] [proxy_fcgi:error] [pid 53477:tid 53486] [client 48.210.84.77:21326] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:06:24.177213 2025] [proxy_fcgi:error] [pid 53477:tid 53503] [client 48.210.84.77:21326] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:06:24.330372 2025] [proxy_fcgi:error] [pid 53477:tid 53485] [client 48.210.84.77:21326] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:06:24.483041 2025] [proxy_fcgi:error] [pid 53477:tid 53483] [client 48.210.84.77:21326] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:06:24.634203 2025] [proxy_fcgi:error] [pid 53477:tid 53482] [client 48.210.84.77:21326] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:15:51.501010 2025] [proxy_fcgi:error] [pid 53478:tid 53512] [client 194.5.82.127:34151] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:15:52.018674 2025] [proxy_fcgi:error] [pid 53478:tid 53514] [client 194.5.82.127:34151] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:15:52.112617 2025] [proxy_fcgi:error] [pid 53478:tid 53524] [client 194.5.82.127:34151] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:15:52.207723 2025] [proxy_fcgi:error] [pid 53478:tid 53510] [client 194.5.82.127:34151] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:15:52.302728 2025] [proxy_fcgi:error] [pid 53478:tid 53515] [client 194.5.82.127:34151] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:15:52.398663 2025] [proxy_fcgi:error] [pid 53478:tid 53518] [client 194.5.82.127:34151] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:15:52.492871 2025] [proxy_fcgi:error] [pid 53478:tid 53522] [client 194.5.82.127:34151] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:15:52.586781 2025] [proxy_fcgi:error] [pid 53478:tid 53517] [client 194.5.82.127:34151] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:15:52.789073 2025] [proxy_fcgi:error] [pid 53478:tid 53513] [client 194.5.82.127:34151] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:15:52.994093 2025] [proxy_fcgi:error] [pid 53478:tid 53529] [client 194.5.82.127:34151] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:15:53.088315 2025] [proxy_fcgi:error] [pid 53478:tid 53519] [client 194.5.82.127:34151] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:15:53.182443 2025] [proxy_fcgi:error] [pid 53478:tid 53528] [client 194.5.82.127:34151] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:15:53.283731 2025] [proxy_fcgi:error] [pid 53478:tid 53509] [client 194.5.82.127:34151] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:15:53.377633 2025] [proxy_fcgi:error] [pid 53478:tid 53514] [client 194.5.82.127:34151] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:15:53.472530 2025] [proxy_fcgi:error] [pid 53478:tid 53530] [client 194.5.82.127:34151] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:15:53.573944 2025] [proxy_fcgi:error] [pid 53478:tid 53521] [client 194.5.82.127:34151] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:15:53.712281 2025] [proxy_fcgi:error] [pid 53478:tid 53531] [client 194.5.82.127:34151] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:15:53.807458 2025] [proxy_fcgi:error] [pid 53478:tid 53510] [client 194.5.82.127:34151] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:15:55.137684 2025] [:error] [pid 53478:tid 53524] [client 194.5.82.127:34151] [client 194.5.82.127] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aSDkmwhUYdXBbQswAdQpLQAAAE8"]
[Sat Nov 22 06:15:55.625500 2025] [:error] [pid 53479:tid 53537] [client 194.5.82.125:62295] [client 194.5.82.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aSDkm26cicFF3Aas-oSKUgAAAIE"]
[Sat Nov 22 06:15:56.109187 2025] [proxy_fcgi:error] [pid 25856:tid 25861] [client 194.5.82.144:27287] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:15:56.388022 2025] [:error] [pid 25856:tid 25864] [client 194.5.82.144:27287] [client 194.5.82.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dwelectservices.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aSDknBsTP0wy94zKUvHI9wAAAQY"]
[Sat Nov 22 06:15:56.763718 2025] [proxy_fcgi:error] [pid 25856:tid 25863] [client 194.5.82.111:34779] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:15:56.858464 2025] [:error] [pid 25856:tid 25875] [client 194.5.82.111:34779] [client 194.5.82.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aSDknBsTP0wy94zKUvHI_AAAARE"]
[Sat Nov 22 06:15:57.155710 2025] [proxy_fcgi:error] [pid 53479:tid 53555] [client 194.5.82.157:47779] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:15:57.641037 2025] [:error] [pid 53479:tid 53546] [client 194.5.82.157:47779] [client 194.5.82.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aSDknW6cicFF3Aas-oSKWgAAAIo"]
[Sat Nov 22 06:15:57.914690 2025] [:error] [pid 53478:tid 53518] [client 194.5.82.113:52911] [client 194.5.82.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aSDknQhUYdXBbQswAdQpMAAAAEk"]
[Sat Nov 22 06:15:58.101640 2025] [:error] [pid 53479:tid 53559] [client 194.5.82.130:33227] [client 194.5.82.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aSDknm6cicFF3Aas-oSKWwAAAJc"]
[Sat Nov 22 06:15:58.284808 2025] [:error] [pid 53477:tid 53481] [client 194.5.82.162:51263] [client 194.5.82.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aSDknn7Lu30Ku9O40aLw2gAAAAA"]
[Sat Nov 22 06:15:58.464652 2025] [:error] [pid 53479:tid 53536] [client 194.5.82.162:54947] [client 194.5.82.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aSDknm6cicFF3Aas-oSKXAAAAIA"]
[Sat Nov 22 06:15:58.643887 2025] [:error] [pid 53479:tid 53538] [client 194.5.82.114:60933] [client 194.5.82.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aSDknm6cicFF3Aas-oSKXgAAAII"]
[Sat Nov 22 06:15:58.919294 2025] [:error] [pid 25856:tid 25862] [client 194.5.82.107:40441] [client 194.5.82.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aSDknhsTP0wy94zKUvHJAwAAAQQ"]
[Sat Nov 22 06:15:59.104085 2025] [proxy_fcgi:error] [pid 53477:tid 53482] [client 194.5.82.117:23449] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:15:59.288928 2025] [:error] [pid 53477:tid 53486] [client 194.5.82.117:23449] [client 194.5.82.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dwelectservices.com.au"] [uri "/filemanager.php"] [unique_id "aSDkn37Lu30Ku9O40aLw4AAAAAU"]
[Sat Nov 22 06:15:59.658800 2025] [:error] [pid 53479:tid 53552] [client 194.5.82.123:42987] [client 194.5.82.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aSDkn26cicFF3Aas-oSKYgAAAJA"]
[Sat Nov 22 06:15:59.933410 2025] [:error] [pid 53479:tid 53539] [client 194.5.82.160:40895] [client 194.5.82.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aSDkn26cicFF3Aas-oSKZAAAAIM"]
[Sat Nov 22 06:16:00.116738 2025] [proxy_fcgi:error] [pid 53479:tid 53544] [client 194.5.82.120:39859] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:16:00.248690 2025] [:error] [pid 53479:tid 53545] [client 194.5.82.120:39859] [client 194.5.82.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aSDkoG6cicFF3Aas-oSKZwAAAIk"]
[Sat Nov 22 06:16:00.442660 2025] [proxy_fcgi:error] [pid 25856:tid 25865] [client 194.5.82.163:31167] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:16:00.840015 2025] [proxy_fcgi:error] [pid 25856:tid 25860] [client 194.5.82.163:31167] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:16:01.210656 2025] [:error] [pid 25856:tid 25868] [client 194.5.82.163:31167] [client 194.5.82.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aSDkoRsTP0wy94zKUvHJFQAAAQo"]
[Sat Nov 22 06:16:01.398281 2025] [proxy_fcgi:error] [pid 25856:tid 25882] [client 194.5.82.138:55647] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:16:01.490836 2025] [:error] [pid 25856:tid 25866] [client 194.5.82.138:55647] [client 194.5.82.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aSDkoRsTP0wy94zKUvHJGAAAAQg"]
[Sat Nov 22 06:16:01.681497 2025] [proxy_fcgi:error] [pid 53477:tid 53501] [client 194.5.82.119:36007] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:16:01.866141 2025] [:error] [pid 53477:tid 53490] [client 194.5.82.119:36007] [client 194.5.82.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "aSDkoX7Lu30Ku9O40aLw6gAAAAk"]
[Sat Nov 22 06:16:02.252316 2025] [:error] [pid 53478:tid 53517] [client 194.5.82.163:59011] [client 194.5.82.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aSDkoghUYdXBbQswAdQpNgAAAEg"]
[Sat Nov 22 06:16:02.538912 2025] [proxy_fcgi:error] [pid 53477:tid 53492] [client 194.5.82.143:54851] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:16:02.632966 2025] [proxy_fcgi:error] [pid 53477:tid 53489] [client 194.5.82.143:54851] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:16:02.817091 2025] [:error] [pid 53477:tid 53495] [client 194.5.82.143:54851] [client 194.5.82.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aSDkon7Lu30Ku9O40aLw8QAAAA4"]
[Sat Nov 22 06:16:03.091370 2025] [:error] [pid 53566:tid 53584] [client 194.5.82.143:28423] [client 194.5.82.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aSDko8bSHDBkRbwMbd5QLAAAANA"]
[Sat Nov 22 06:16:03.368785 2025] [:error] [pid 25856:tid 25863] [client 194.5.82.152:37673] [client 194.5.82.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aSDkoxsTP0wy94zKUvHJIQAAAQU"]
[Sat Nov 22 06:16:03.552755 2025] [:error] [pid 53566:tid 53574] [client 194.5.82.156:54101] [client 194.5.82.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aSDko8bSHDBkRbwMbd5QLwAAAMY"]
[Sat Nov 22 06:16:03.731484 2025] [:error] [pid 25856:tid 25878] [client 194.5.82.139:37587] [client 194.5.82.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aSDkoxsTP0wy94zKUvHJJQAAARQ"]
[Sat Nov 22 06:16:04.107963 2025] [proxy_fcgi:error] [pid 53566:tid 53578] [client 194.5.82.125:54889] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:16:04.196941 2025] [:error] [pid 53566:tid 53581] [client 194.5.82.125:54889] [client 194.5.82.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "aSDkpMbSHDBkRbwMbd5QNAAAAM0"]
[Sat Nov 22 06:16:04.385090 2025] [:error] [pid 53479:tid 53551] [client 194.5.82.121:42591] [client 194.5.82.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "aSDkpG6cicFF3Aas-oSKbgAAAI8"]
[Sat Nov 22 06:16:04.582428 2025] [:error] [pid 53477:tid 53490] [client 194.5.82.125:50295] [client 194.5.82.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aSDkpH7Lu30Ku9O40aLw9AAAAAk"]
[Sat Nov 22 06:16:04.969497 2025] [proxy_fcgi:error] [pid 53477:tid 53486] [client 194.5.82.128:22609] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:16:05.162483 2025] [proxy_fcgi:error] [pid 53477:tid 53485] [client 194.5.82.128:22609] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:16:05.546444 2025] [:error] [pid 53477:tid 53503] [client 194.5.82.128:22609] [client 194.5.82.128] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/admin.php"] [unique_id "aSDkpX7Lu30Ku9O40aLxAQAAABY"]
[Sat Nov 22 06:16:06.008829 2025] [:error] [pid 53479:tid 53560] [client 194.5.82.132:34163] [client 194.5.82.132] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.5.82.132, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aSDkpm6cicFF3Aas-oSKcwAAAJg"]
[Sat Nov 22 06:16:06.107071 2025] [proxy_fcgi:error] [pid 53479:tid 53553] [client 194.5.82.132:34163] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:16:06.598412 2025] [proxy_fcgi:error] [pid 53479:tid 53558] [client 194.5.82.132:34163] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:16:06.695361 2025] [proxy_fcgi:error] [pid 53479:tid 53557] [client 194.5.82.132:34163] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:16:07.171642 2025] [:error] [pid 53479:tid 53542] [client 194.5.82.132:34163] [client 194.5.82.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aSDkp26cicFF3Aas-oSKgQAAAIY"]
[Sat Nov 22 06:16:07.355853 2025] [proxy_fcgi:error] [pid 53479:tid 53543] [client 194.5.82.113:65417] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:16:07.452643 2025] [proxy_fcgi:error] [pid 53479:tid 53539] [client 194.5.82.113:65417] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:16:07.544326 2025] [:error] [pid 53479:tid 53555] [client 194.5.82.113:65417] [client 194.5.82.113] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.5.82.113, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aSDkp26cicFF3Aas-oSKhAAAAJM"]
[Sat Nov 22 06:16:07.735976 2025] [:error] [pid 53479:tid 53544] [client 194.5.82.113:65417] [client 194.5.82.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/item.php"] [unique_id "aSDkp26cicFF3Aas-oSKhgAAAIg"]
[Sat Nov 22 06:16:08.204435 2025] [proxy_fcgi:error] [pid 53566:tid 53591] [client 194.5.82.109:54579] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:16:08.304608 2025] [proxy_fcgi:error] [pid 53566:tid 53573] [client 194.5.82.109:54579] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:16:08.495043 2025] [proxy_fcgi:error] [pid 53566:tid 53576] [client 194.5.82.109:54579] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:16:08.681090 2025] [:error] [pid 53566:tid 53582] [client 194.5.82.109:54579] [client 194.5.82.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aSDkqMbSHDBkRbwMbd5QSQAAAM4"]
[Sat Nov 22 06:16:08.868126 2025] [proxy_fcgi:error] [pid 53478:tid 53517] [client 194.5.82.105:27661] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:16:09.190024 2025] [proxy_fcgi:error] [pid 53478:tid 53527] [client 194.5.82.105:27661] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:16:09.380139 2025] [proxy_fcgi:error] [pid 53478:tid 53523] [client 194.5.82.105:27661] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:16:09.571274 2025] [proxy_fcgi:error] [pid 53478:tid 53513] [client 194.5.82.105:27661] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:16:09.661684 2025] [:error] [pid 53478:tid 53532] [client 194.5.82.105:27661] [client 194.5.82.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aSDkqQhUYdXBbQswAdQpTQAAAFc"]
[Sat Nov 22 06:16:09.857357 2025] [proxy_fcgi:error] [pid 25856:tid 25878] [client 194.5.82.164:50639] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:16:09.963562 2025] [proxy_fcgi:error] [pid 25856:tid 25869] [client 194.5.82.164:50639] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:16:10.054365 2025] [:error] [pid 25856:tid 25872] [client 194.5.82.164:50639] [client 194.5.82.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aSDkqhsTP0wy94zKUvHJPgAAAQ4"]
[Sat Nov 22 06:16:11.954814 2025] [proxy_fcgi:error] [pid 53477:tid 53500] [client 194.5.82.136:22329] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:16:12.143371 2025] [:error] [pid 53477:tid 53487] [client 194.5.82.136:22329] [client 194.5.82.136] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.5.82.136, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "aSDkrH7Lu30Ku9O40aLxDAAAAAY"]
[Sat Nov 22 06:16:12.238593 2025] [:error] [pid 53477:tid 53503] [client 194.5.82.136:22329] [client 194.5.82.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aSDkrH7Lu30Ku9O40aLxDgAAABY"]
[Sat Nov 22 06:16:13.373811 2025] [proxy_fcgi:error] [pid 53566:tid 53591] [client 194.5.82.128:56183] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:16:13.954374 2025] [proxy_fcgi:error] [pid 53566:tid 53580] [client 194.5.82.128:56183] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:16:14.047805 2025] [:error] [pid 53566:tid 53589] [client 194.5.82.128:56183] [client 194.5.82.128] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aSDkrsbSHDBkRbwMbd5QigAAANU"]
[Sat Nov 22 06:16:14.235413 2025] [proxy_fcgi:error] [pid 53479:tid 53555] [client 194.5.82.105:22159] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:16:14.521722 2025] [:error] [pid 53479:tid 53560] [client 194.5.82.105:22159] [client 194.5.82.105] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.5.82.105, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aSDkrm6cicFF3Aas-oSKlwAAAJg"]
[Sat Nov 22 06:16:14.620903 2025] [proxy_fcgi:error] [pid 53479:tid 53554] [client 194.5.82.105:22159] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:16:14.716158 2025] [proxy_fcgi:error] [pid 53479:tid 53551] [client 194.5.82.105:22159] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:16:14.809856 2025] [proxy_fcgi:error] [pid 53479:tid 53553] [client 194.5.82.105:22159] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:16:14.900337 2025] [:error] [pid 53479:tid 53547] [client 194.5.82.105:22159] [client 194.5.82.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aSDkrm6cicFF3Aas-oSKnAAAAIs"]
[Sat Nov 22 06:16:15.089027 2025] [proxy_fcgi:error] [pid 25856:tid 25858] [client 194.5.82.144:52901] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:16:15.180939 2025] [:error] [pid 25856:tid 25871] [client 194.5.82.144:52901] [client 194.5.82.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/infi.php"] [unique_id "aSDkrxsTP0wy94zKUvHJSwAAAQ0"]
[Sat Nov 22 06:16:15.473005 2025] [proxy_fcgi:error] [pid 53478:tid 53515] [client 194.5.82.157:39303] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:16:15.577842 2025] [:error] [pid 53478:tid 53529] [client 194.5.82.157:39303] [client 194.5.82.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aSDkrwhUYdXBbQswAdQpaAAAAFQ"]
[Sat Nov 22 06:16:15.762794 2025] [proxy_fcgi:error] [pid 53477:tid 53497] [client 194.5.82.120:26411] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:16:15.983338 2025] [proxy_fcgi:error] [pid 53477:tid 53492] [client 194.5.82.120:26411] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:16:16.076083 2025] [:error] [pid 53477:tid 53486] [client 194.5.82.120:26411] [client 194.5.82.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "aSDksH7Lu30Ku9O40aLxGAAAAAU"]
[Sat Nov 22 06:16:16.258937 2025] [:error] [pid 53479:tid 53540] [client 194.5.82.153:23539] [client 194.5.82.153] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "aSDksG6cicFF3Aas-oSKoQAAAIQ"]
[Sat Nov 22 06:16:16.441513 2025] [proxy_fcgi:error] [pid 53478:tid 53528] [client 194.5.82.106:64675] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:16:16.540472 2025] [proxy_fcgi:error] [pid 53478:tid 53512] [client 194.5.82.106:64675] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:16:16.914248 2025] [:error] [pid 53478:tid 53527] [client 194.5.82.106:64675] [client 194.5.82.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aSDksAhUYdXBbQswAdQpdAAAAFI"]
[Sat Nov 22 06:16:17.196642 2025] [:error] [pid 53479:tid 53551] [client 194.5.82.146:55239] [client 194.5.82.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "aSDksW6cicFF3Aas-oSKqgAAAI8"]
[Sat Nov 22 06:16:17.664971 2025] [:error] [pid 53479:tid 53548] [client 194.5.82.143:42389] [client 194.5.82.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/edit.php"] [unique_id "aSDksW6cicFF3Aas-oSKsAAAAIw"]
[Sat Nov 22 06:16:17.847940 2025] [proxy_fcgi:error] [pid 53478:tid 53513] [client 194.5.82.147:62881] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:16:18.033734 2025] [proxy_fcgi:error] [pid 53478:tid 53533] [client 194.5.82.147:62881] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:16:18.127078 2025] [:error] [pid 53478:tid 53524] [client 194.5.82.147:62881] [client 194.5.82.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "aSDksghUYdXBbQswAdQpegAAAE8"]
[Sat Nov 22 06:16:18.314969 2025] [proxy_fcgi:error] [pid 25856:tid 25864] [client 194.5.82.111:36635] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:16:18.500392 2025] [:error] [pid 25856:tid 25865] [client 194.5.82.111:36635] [client 194.5.82.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/click.php"] [unique_id "aSDkshsTP0wy94zKUvHJYQAAAQc"]
[Sat Nov 22 06:16:18.975564 2025] [:error] [pid 53477:tid 53497] [client 194.5.82.159:58891] [client 194.5.82.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "aSDksn7Lu30Ku9O40aLxJwAAABA"]
[Sat Nov 22 06:16:19.275765 2025] [proxy_fcgi:error] [pid 53479:tid 53546] [client 194.5.82.139:50443] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:16:20.908066 2025] [proxy_fcgi:error] [pid 53479:tid 53540] [client 194.5.82.139:50443] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:16:21.095815 2025] [proxy_fcgi:error] [pid 53479:tid 53543] [client 194.5.82.139:50443] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:16:21.186589 2025] [:error] [pid 53479:tid 53542] [client 194.5.82.139:50443] [client 194.5.82.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "aSDktW6cicFF3Aas-oSKxAAAAIY"]
[Sat Nov 22 06:16:21.370527 2025] [:error] [pid 25856:tid 25867] [client 194.5.82.117:29955] [client 194.5.82.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/xl2023.php"] [unique_id "aSDktRsTP0wy94zKUvHJdQAAAQk"]
[Sat Nov 22 06:16:21.549460 2025] [:error] [pid 25856:tid 25863] [client 194.5.82.118:20503] [client 194.5.82.118] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/certificates/admin.php"] [unique_id "aSDktRsTP0wy94zKUvHJdgAAAQU"]
[Sat Nov 22 06:16:21.730490 2025] [:error] [pid 25856:tid 25880] [client 194.5.82.106:26643] [client 194.5.82.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/media/dog.php"] [unique_id "aSDktRsTP0wy94zKUvHJeAAAARY"]
[Sat Nov 22 06:16:21.913123 2025] [proxy_fcgi:error] [pid 53478:tid 53518] [client 194.5.82.109:36059] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:16:22.007705 2025] [:error] [pid 53478:tid 53514] [client 194.5.82.109:36059] [client 194.5.82.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "aSDktghUYdXBbQswAdQpggAAAEU"]
[Sat Nov 22 06:16:22.187475 2025] [:error] [pid 53478:tid 53516] [client 194.5.82.108:56377] [client 194.5.82.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aSDktghUYdXBbQswAdQpgwAAAEc"]
[Sat Nov 22 06:16:22.372597 2025] [proxy_fcgi:error] [pid 53566:tid 53571] [client 194.5.82.150:47961] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:16:23.698597 2025] [:error] [pid 53566:tid 53590] [client 194.5.82.150:47961] [client 194.5.82.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aSDkt8bSHDBkRbwMbd5QsgAAANY"]
[Sat Nov 22 06:16:23.879752 2025] [:error] [pid 53479:tid 53552] [client 194.5.82.105:46767] [client 194.5.82.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aSDkt26cicFF3Aas-oSKxwAAAJA"]
[Sat Nov 22 06:16:24.059109 2025] [:error] [pid 25856:tid 25866] [client 194.5.82.140:25849] [client 194.5.82.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/pomo/admin.php"] [unique_id "aSDkuBsTP0wy94zKUvHJggAAAQg"]
[Sat Nov 22 06:16:24.238233 2025] [:error] [pid 53478:tid 53532] [client 194.5.82.164:53279] [client 194.5.82.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/IXR/security.php"] [unique_id "aSDkuAhUYdXBbQswAdQphgAAAFc"]
[Sat Nov 22 06:16:24.514026 2025] [:error] [pid 25856:tid 25860] [client 194.5.82.132:30269] [client 194.5.82.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aSDkuBsTP0wy94zKUvHJhAAAAQI"]
[Sat Nov 22 06:16:24.880424 2025] [:error] [pid 53478:tid 53517] [client 194.5.82.146:59185] [client 194.5.82.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/fonts/about.php"] [unique_id "aSDkuAhUYdXBbQswAdQpigAAAEg"]
[Sat Nov 22 06:16:25.064450 2025] [proxy_fcgi:error] [pid 53479:tid 53540] [client 194.5.82.116:59403] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:16:25.352527 2025] [proxy_fcgi:error] [pid 53479:tid 53547] [client 194.5.82.116:59403] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:16:25.443966 2025] [:error] [pid 53479:tid 53537] [client 194.5.82.116:59403] [client 194.5.82.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "aSDkuW6cicFF3Aas-oSK1QAAAIE"]
[Sat Nov 22 06:16:25.729734 2025] [proxy_fcgi:error] [pid 53566:tid 53582] [client 194.5.82.105:54777] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:16:25.824399 2025] [proxy_fcgi:error] [pid 53566:tid 53592] [client 194.5.82.105:54777] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:16:26.288370 2025] [:error] [pid 53566:tid 53587] [client 194.5.82.105:54777] [client 194.5.82.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/file.php"] [unique_id "aSDkusbSHDBkRbwMbd5QwQAAANM"]
[Sat Nov 22 06:16:26.778845 2025] [:error] [pid 25856:tid 25879] [client 194.5.82.109:48741] [client 194.5.82.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "aSDkuhsTP0wy94zKUvHJjAAAARU"]
[Sat Nov 22 06:16:26.968503 2025] [:error] [pid 25856:tid 25881] [client 194.5.82.145:41227] [client 194.5.82.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "aSDkuhsTP0wy94zKUvHJjgAAARc"]
[Sat Nov 22 06:16:27.541416 2025] [:error] [pid 25856:tid 25860] [client 194.5.82.159:32793] [client 194.5.82.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aSDkuxsTP0wy94zKUvHJlgAAAQI"]
[Sat Nov 22 06:16:27.916995 2025] [proxy_fcgi:error] [pid 53566:tid 53589] [client 194.5.82.163:28857] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:16:28.012322 2025] [proxy_fcgi:error] [pid 53566:tid 53571] [client 194.5.82.163:28857] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:16:28.107458 2025] [proxy_fcgi:error] [pid 53566:tid 53569] [client 194.5.82.163:28857] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:16:28.208728 2025] [proxy_fcgi:error] [pid 53566:tid 53583] [client 194.5.82.163:28857] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:16:28.682008 2025] [:error] [pid 53566:tid 53586] [client 194.5.82.163:28857] [client 194.5.82.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aSDkvMbSHDBkRbwMbd5QzwAAANI"]
[Sat Nov 22 06:16:28.861509 2025] [:error] [pid 53478:tid 53512] [client 194.5.82.161:51759] [client 194.5.82.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "aSDkvAhUYdXBbQswAdQppAAAAEM"]
[Sat Nov 22 06:16:29.041005 2025] [:error] [pid 53566:tid 53570] [client 194.5.82.155:25171] [client 194.5.82.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "aSDkvcbSHDBkRbwMbd5Q0AAAAMI"]
[Sat Nov 22 06:16:29.221247 2025] [:error] [pid 53479:tid 53540] [client 194.5.82.111:42361] [client 194.5.82.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "aSDkvW6cicFF3Aas-oSK4wAAAIQ"]
[Sat Nov 22 06:16:29.403354 2025] [:error] [pid 53477:tid 53482] [client 194.5.82.134:20667] [client 194.5.82.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aSDkvX7Lu30Ku9O40aLxSAAAAAE"]
[Sat Nov 22 06:16:29.584250 2025] [:error] [pid 53566:tid 53568] [client 194.5.82.111:26449] [client 194.5.82.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aSDkvcbSHDBkRbwMbd5Q0QAAAMA"]
[Sat Nov 22 06:16:29.857715 2025] [:error] [pid 25856:tid 25874] [client 194.5.82.125:52385] [client 194.5.82.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/media/index.php"] [unique_id "aSDkvRsTP0wy94zKUvHJpQAAARA"]
[Sat Nov 22 06:16:30.043056 2025] [:error] [pid 53478:tid 53516] [client 194.5.82.132:35415] [client 194.5.82.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "aSDkvghUYdXBbQswAdQppwAAAEc"]
[Sat Nov 22 06:16:30.223518 2025] [:error] [pid 53566:tid 53591] [client 194.5.82.106:48101] [client 194.5.82.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "aSDkvsbSHDBkRbwMbd5Q0gAAANc"]
[Sat Nov 22 06:16:30.402187 2025] [:error] [pid 53478:tid 53526] [client 194.5.82.147:29695] [client 194.5.82.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "aSDkvghUYdXBbQswAdQpqAAAAFE"]
[Sat Nov 22 06:16:30.910274 2025] [:error] [pid 53477:tid 53483] [client 194.5.82.117:30305] [client 194.5.82.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/fonts/themes.php"] [unique_id "aSDkvn7Lu30Ku9O40aLxTQAAAAI"]
[Sat Nov 22 06:16:31.221700 2025] [:error] [pid 25856:tid 25860] [client 194.5.82.135:53221] [client 194.5.82.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/certificates/index.php"] [unique_id "aSDkvxsTP0wy94zKUvHJrgAAAQI"]
[Sat Nov 22 06:16:31.411018 2025] [proxy_fcgi:error] [pid 53566:tid 53576] [client 194.5.82.105:42409] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:16:31.595634 2025] [:error] [pid 53566:tid 53584] [client 194.5.82.105:42409] [client 194.5.82.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "aSDkv8bSHDBkRbwMbd5Q1wAAANA"]
[Sat Nov 22 06:16:31.961634 2025] [:error] [pid 53477:tid 53486] [client 194.5.82.132:52233] [client 194.5.82.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "aSDkv37Lu30Ku9O40aLxUgAAAAU"]
[Sat Nov 22 06:16:32.331146 2025] [proxy_fcgi:error] [pid 53478:tid 53514] [client 194.5.82.128:54621] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:16:32.420900 2025] [:error] [pid 53478:tid 53527] [client 194.5.82.128:54621] [client 194.5.82.128] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aSDkwAhUYdXBbQswAdQptAAAAFI"]
[Sat Nov 22 06:16:32.704081 2025] [proxy_fcgi:error] [pid 25856:tid 25878] [client 194.5.82.139:25477] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:16:32.797662 2025] [proxy_fcgi:error] [pid 25856:tid 25879] [client 194.5.82.139:25477] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:16:32.893628 2025] [proxy_fcgi:error] [pid 25856:tid 25861] [client 194.5.82.139:25477] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:16:32.985067 2025] [:error] [pid 25856:tid 25881] [client 194.5.82.139:25477] [client 194.5.82.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "aSDkwBsTP0wy94zKUvHJuQAAARc"]
[Sat Nov 22 06:16:33.169858 2025] [proxy_fcgi:error] [pid 25856:tid 25866] [client 194.5.82.109:41483] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:16:33.265606 2025] [:error] [pid 25856:tid 25863] [client 194.5.82.109:41483] [client 194.5.82.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "aSDkwRsTP0wy94zKUvHJuwAAAQU"]
[Sat Nov 22 06:16:33.640796 2025] [proxy_fcgi:error] [pid 53477:tid 53485] [client 194.5.82.152:54329] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:16:33.734676 2025] [proxy_fcgi:error] [pid 53477:tid 53502] [client 194.5.82.152:54329] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:16:33.830702 2025] [proxy_fcgi:error] [pid 53477:tid 53489] [client 194.5.82.152:54329] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:16:34.299965 2025] [proxy_fcgi:error] [pid 53477:tid 53491] [client 194.5.82.152:54329] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:16:34.393122 2025] [proxy_fcgi:error] [pid 53477:tid 53483] [client 194.5.82.152:54329] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:16:34.580281 2025] [proxy_fcgi:error] [pid 53477:tid 53490] [client 194.5.82.152:54329] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:16:34.871030 2025] [proxy_fcgi:error] [pid 53477:tid 53504] [client 194.5.82.152:54329] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:16:34.961352 2025] [:error] [pid 53477:tid 53485] [client 194.5.82.152:54329] [client 194.5.82.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "aSDkwn7Lu30Ku9O40aLxdwAAAAQ"]
[Sat Nov 22 06:16:35.143947 2025] [:error] [pid 53478:tid 53532] [client 194.5.82.123:45291] [client 194.5.82.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aSDkwwhUYdXBbQswAdQpugAAAFc"]
[Sat Nov 22 06:16:35.329711 2025] [:error] [pid 53479:tid 53551] [client 194.5.82.106:49949] [client 194.5.82.106] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.5.82.106, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-login.php"] [unique_id "aSDkw26cicFF3Aas-oSK_QAAAI8"]
[Sat Nov 22 06:16:35.334258 2025] [proxy_fcgi:error] [pid 53479:tid 53551] [client 194.5.82.106:49949] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:16:35.431850 2025] [proxy_fcgi:error] [pid 53479:tid 53550] [client 194.5.82.106:49949] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:16:35.522820 2025] [:error] [pid 53479:tid 53545] [client 194.5.82.106:49949] [client 194.5.82.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "aSDkw26cicFF3Aas-oSK_wAAAIk"]
[Sat Nov 22 06:16:35.809313 2025] [proxy_fcgi:error] [pid 53478:tid 53522] [client 194.5.82.121:44041] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:16:35.906389 2025] [:error] [pid 53478:tid 53530] [client 194.5.82.121:44041] [client 194.5.82.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aSDkwwhUYdXBbQswAdQpvwAAAFU"]
[Sat Nov 22 06:16:36.086839 2025] [:error] [pid 53566:tid 53571] [client 194.5.82.154:55307] [client 194.5.82.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aSDkxMbSHDBkRbwMbd5Q4gAAAMM"]
[Sat Nov 22 06:16:36.649976 2025] [:error] [pid 53477:tid 53491] [client 194.5.82.137:34867] [client 194.5.82.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aSDkxH7Lu30Ku9O40aLxgQAAAAo"]
[Sat Nov 22 06:16:36.867471 2025] [:error] [pid 25856:tid 25878] [client 194.5.82.122:40311] [client 194.5.82.122] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dwelectservices.com.au"] [uri "/fm.php"] [unique_id "aSDkxBsTP0wy94zKUvHJ1AAAARQ"]
[Sat Nov 22 06:16:37.334377 2025] [proxy_fcgi:error] [pid 53566:tid 53570] [client 194.5.82.105:62263] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:16:37.518402 2025] [:error] [pid 53566:tid 53581] [client 194.5.82.105:62263] [client 194.5.82.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "aSDkxcbSHDBkRbwMbd5Q8gAAAM0"]
[Sat Nov 22 06:16:37.902517 2025] [proxy_fcgi:error] [pid 53478:tid 53525] [client 194.5.82.130:45541] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:16:38.093663 2025] [:error] [pid 53478:tid 53509] [client 194.5.82.130:45541] [client 194.5.82.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/function.php"] [unique_id "aSDkxghUYdXBbQswAdQpzgAAAEA"]
[Sat Nov 22 06:16:38.279085 2025] [:error] [pid 53477:tid 53496] [client 194.5.82.107:58351] [client 194.5.82.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/plugins.php"] [unique_id "aSDkxn7Lu30Ku9O40aLxhwAAAA8"]
[Sat Nov 22 06:16:38.584454 2025] [proxy_fcgi:error] [pid 53566:tid 53571] [client 194.5.82.130:32521] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:16:38.673512 2025] [:error] [pid 53566:tid 53569] [client 194.5.82.130:32521] [client 194.5.82.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/chosen.php"] [unique_id "aSDkxsbSHDBkRbwMbd5Q9wAAAME"]
[Sat Nov 22 06:16:38.856768 2025] [:error] [pid 53478:tid 53528] [client 194.5.82.146:41921] [client 194.5.82.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "aSDkxghUYdXBbQswAdQp0AAAAFM"]
[Sat Nov 22 06:16:39.233508 2025] [proxy_fcgi:error] [pid 53477:tid 53484] [client 194.5.82.145:50583] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:16:39.338717 2025] [proxy_fcgi:error] [pid 53477:tid 53491] [client 194.5.82.145:50583] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:16:39.538936 2025] [proxy_fcgi:error] [pid 53477:tid 53487] [client 194.5.82.145:50583] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:16:39.722860 2025] [:error] [pid 53477:tid 53493] [client 194.5.82.145:50583] [client 194.5.82.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/atomlib.php"] [unique_id "aSDkx37Lu30Ku9O40aLxkQAAAAw"]
[Sat Nov 22 06:16:39.915128 2025] [:error] [pid 53566:tid 53570] [client 194.5.82.136:33017] [client 194.5.82.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/rest-api/index.php"] [unique_id "aSDkx8bSHDBkRbwMbd5Q_gAAAMI"]
[Sat Nov 22 06:16:40.391600 2025] [proxy_fcgi:error] [pid 53566:tid 53589] [client 194.5.82.117:23869] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:16:40.483385 2025] [:error] [pid 53566:tid 53569] [client 194.5.82.117:23869] [client 194.5.82.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/index.php"] [unique_id "aSDkyMbSHDBkRbwMbd5RBgAAAME"]
[Sat Nov 22 06:16:40.664457 2025] [:error] [pid 53477:tid 53499] [client 194.5.82.118:31093] [client 194.5.82.118] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aSDkyH7Lu30Ku9O40aLxkwAAABI"]
[Sat Nov 22 06:16:40.845469 2025] [:error] [pid 53479:tid 53550] [client 194.5.82.145:24325] [client 194.5.82.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aSDkyG6cicFF3Aas-oSLEQAAAI4"]
[Sat Nov 22 06:16:41.446155 2025] [proxy_fcgi:error] [pid 25856:tid 25877] [client 194.5.82.132:62151] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:16:41.538732 2025] [:error] [pid 25856:tid 25870] [client 194.5.82.132:62151] [client 194.5.82.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/Exception-wp.php"] [unique_id "aSDkyRsTP0wy94zKUvHJ7QAAAQw"]
[Sat Nov 22 06:16:41.817524 2025] [:error] [pid 53477:tid 53500] [client 194.5.82.114:64233] [client 194.5.82.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aSDkyX7Lu30Ku9O40aLxmQAAABM"]
[Sat Nov 22 06:16:42.002809 2025] [proxy_fcgi:error] [pid 53479:tid 53548] [client 194.5.82.140:27137] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:16:42.095796 2025] [proxy_fcgi:error] [pid 53479:tid 53540] [client 194.5.82.140:27137] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:16:42.281581 2025] [proxy_fcgi:error] [pid 53479:tid 53542] [client 194.5.82.140:27137] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:16:42.657116 2025] [:error] [pid 53479:tid 53555] [client 194.5.82.140:27137] [client 194.5.82.140] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.5.82.140, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/js/wp-login.php"] [unique_id "aSDkym6cicFF3Aas-oSLKAAAAJM"]
[Sat Nov 22 06:16:42.850415 2025] [:error] [pid 53479:tid 53556] [client 194.5.82.140:27137] File does not exist: /home/dwelects/public_html/worm.PhP
[Sat Nov 22 06:16:42.948890 2025] [proxy_fcgi:error] [pid 53479:tid 53538] [client 194.5.82.140:27137] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:16:43.042640 2025] [proxy_fcgi:error] [pid 53479:tid 53548] [client 194.5.82.140:27137] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:16:43.229654 2025] [:error] [pid 53479:tid 53540] [client 194.5.82.140:27137] [client 194.5.82.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/bk/index.php"] [unique_id "aSDky26cicFF3Aas-oSLLgAAAIQ"]
[Sat Nov 22 06:16:43.413203 2025] [:error] [pid 53566:tid 53577] [client 194.5.82.143:44559] [client 194.5.82.143] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.5.82.143, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "aSDky8bSHDBkRbwMbd5RFwAAAMk"]
[Sat Nov 22 06:16:43.701720 2025] [proxy_fcgi:error] [pid 53566:tid 53587] [client 194.5.82.143:44559] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:16:43.813064 2025] [proxy_fcgi:error] [pid 53566:tid 53573] [client 194.5.82.143:44559] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:16:44.028980 2025] [proxy_fcgi:error] [pid 53566:tid 53592] [client 194.5.82.143:44559] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:16:44.212524 2025] [proxy_fcgi:error] [pid 53566:tid 53570] [client 194.5.82.143:44559] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:16:44.491736 2025] [proxy_fcgi:error] [pid 53566:tid 53569] [client 194.5.82.143:44559] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:16:45.148494 2025] [proxy_fcgi:error] [pid 53566:tid 53591] [client 194.5.82.143:44559] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:16:45.242362 2025] [proxy_fcgi:error] [pid 53566:tid 53575] [client 194.5.82.143:44559] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:16:45.718231 2025] [proxy_fcgi:error] [pid 53566:tid 53568] [client 194.5.82.143:44559] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:16:45.901322 2025] [:error] [pid 53566:tid 53570] [client 194.5.82.143:44559] [client 194.5.82.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "aSDkzcbSHDBkRbwMbd5RSgAAAMI"]
[Sat Nov 22 06:16:46.282043 2025] [proxy_fcgi:error] [pid 53479:tid 53536] [client 194.5.82.160:60267] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:16:46.371288 2025] [:error] [pid 53479:tid 53559] [client 194.5.82.160:60267] [client 194.5.82.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aSDkzm6cicFF3Aas-oSLQwAAAJc"]
[Sat Nov 22 06:16:46.554631 2025] [proxy_fcgi:error] [pid 53478:tid 53516] [client 194.5.82.105:50185] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:16:46.647201 2025] [proxy_fcgi:error] [pid 53478:tid 53530] [client 194.5.82.105:50185] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:16:46.737262 2025] [:error] [pid 53478:tid 53529] [client 194.5.82.105:50185] [client 194.5.82.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/atomlib.php"] [unique_id "aSDkzghUYdXBbQswAdQp5wAAAFQ"]
[Sat Nov 22 06:16:47.108880 2025] [proxy_fcgi:error] [pid 53478:tid 53525] [client 194.5.82.139:26981] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:16:47.299543 2025] [proxy_fcgi:error] [pid 53478:tid 53527] [client 194.5.82.139:26981] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:16:47.489148 2025] [proxy_fcgi:error] [pid 53478:tid 53532] [client 194.5.82.139:26981] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:16:47.588179 2025] [proxy_fcgi:error] [pid 53478:tid 53512] [client 194.5.82.139:26981] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:16:47.777985 2025] [:error] [pid 53478:tid 53517] [client 194.5.82.139:26981] [client 194.5.82.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aSDkzwhUYdXBbQswAdQp9QAAAEg"]
[Sat Nov 22 06:16:47.968070 2025] [proxy_fcgi:error] [pid 53477:tid 53482] [client 194.5.82.152:37619] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:16:48.066249 2025] [proxy_fcgi:error] [pid 53477:tid 53484] [client 194.5.82.152:37619] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:16:48.157360 2025] [:error] [pid 53477:tid 53491] [client 194.5.82.152:37619] [client 194.5.82.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aSDk0H7Lu30Ku9O40aLxqgAAAAo"]
[Sat Nov 22 06:16:50.198016 2025] [:error] [pid 53477:tid 53484] [client 194.5.82.108:42233] [client 194.5.82.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aSDk0n7Lu30Ku9O40aLxuAAAAAM"]
[Sat Nov 22 06:16:50.478520 2025] [proxy_fcgi:error] [pid 53479:tid 53540] [client 194.5.82.128:24315] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:16:50.764810 2025] [proxy_fcgi:error] [pid 53479:tid 53559] [client 194.5.82.128:24315] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:16:50.860310 2025] [proxy_fcgi:error] [pid 53479:tid 53543] [client 194.5.82.128:24315] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:16:50.951198 2025] [:error] [pid 53479:tid 53556] [client 194.5.82.128:24315] [client 194.5.82.128] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "aSDk0m6cicFF3Aas-oSLUwAAAJQ"]
[Sat Nov 22 06:16:51.131793 2025] [:error] [pid 25856:tid 25868] [client 194.5.82.122:22109] [client 194.5.82.122] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "aSDk0xsTP0wy94zKUvHKGAAAAQo"]
[Sat Nov 22 06:16:53.355397 2025] [proxy_fcgi:error] [pid 53477:tid 53482] [client 194.5.82.121:56523] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:16:53.538002 2025] [:error] [pid 53477:tid 53495] [client 194.5.82.121:56523] [client 194.5.82.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/dist/default.php"] [unique_id "aSDk1X7Lu30Ku9O40aLxxwAAAA4"]
[Sat Nov 22 06:16:53.812447 2025] [:error] [pid 25856:tid 25862] [client 194.5.82.144:58731] [client 194.5.82.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dwelectservices.com.au"] [uri "/tiny.php"] [unique_id "aSDk1RsTP0wy94zKUvHKKwAAAQQ"]
[Sat Nov 22 06:16:54.089900 2025] [proxy_fcgi:error] [pid 53478:tid 53523] [client 194.5.82.164:62931] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:16:54.185179 2025] [proxy_fcgi:error] [pid 53478:tid 53516] [client 194.5.82.164:62931] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:16:54.275159 2025] [:error] [pid 53478:tid 53514] [client 194.5.82.164:62931] [client 194.5.82.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "aSDk1ghUYdXBbQswAdQqEAAAAEU"]
[Sat Nov 22 06:16:54.554754 2025] [proxy_fcgi:error] [pid 25856:tid 25882] [client 194.5.82.124:27387] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:16:54.648460 2025] [proxy_fcgi:error] [pid 25856:tid 25862] [client 194.5.82.124:27387] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:16:54.837107 2025] [proxy_fcgi:error] [pid 25856:tid 25875] [client 194.5.82.124:27387] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:16:55.128536 2025] [:error] [pid 25856:tid 25870] [client 194.5.82.124:27387] [client 194.5.82.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/Parse/about.php"] [unique_id "aSDk1xsTP0wy94zKUvHKQgAAAQw"]
[Sat Nov 22 06:16:55.316126 2025] [proxy_fcgi:error] [pid 53477:tid 53487] [client 194.5.82.150:26713] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:16:55.611379 2025] [:error] [pid 53477:tid 53499] [client 194.5.82.150:26713] [client 194.5.82.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "aSDk137Lu30Ku9O40aLxzgAAABI"]
[Sat Nov 22 06:16:55.898195 2025] [proxy_fcgi:error] [pid 53478:tid 53532] [client 194.5.82.120:21523] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:16:56.188881 2025] [proxy_fcgi:error] [pid 53478:tid 53522] [client 194.5.82.120:21523] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:16:56.287637 2025] [proxy_fcgi:error] [pid 53478:tid 53530] [client 194.5.82.120:21523] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:16:56.473431 2025] [:error] [pid 53478:tid 53529] [client 194.5.82.120:21523] [client 194.5.82.120] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.5.82.120, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/colors/ocean/wp-login.php"] [unique_id "aSDk2AhUYdXBbQswAdQqHQAAAFQ"]
[Sat Nov 22 06:16:56.754155 2025] [proxy_fcgi:error] [pid 53478:tid 53515] [client 194.5.82.120:21523] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:16:56.938099 2025] [:error] [pid 53478:tid 53516] [client 194.5.82.120:21523] [client 194.5.82.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/Cache/upfile.php"] [unique_id "aSDk2AhUYdXBbQswAdQqIwAAAEc"]
[Sat Nov 22 06:16:57.131048 2025] [proxy_fcgi:error] [pid 53479:tid 53536] [client 194.5.82.137:20963] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:16:57.220752 2025] [:error] [pid 53479:tid 53559] [client 194.5.82.137:20963] [client 194.5.82.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "aSDk2W6cicFF3Aas-oSLYAAAAJc"]
[Sat Nov 22 06:16:57.410656 2025] [proxy_fcgi:error] [pid 53479:tid 53550] [client 194.5.82.107:47845] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:16:57.600662 2025] [proxy_fcgi:error] [pid 53479:tid 53560] [client 194.5.82.107:47845] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:16:57.793227 2025] [:error] [pid 53479:tid 53542] [client 194.5.82.107:47845] [client 194.5.82.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/widgets/class-wp-widget-search-function.php"] [unique_id "aSDk2W6cicFF3Aas-oSLaQAAAIY"]
[Sat Nov 22 06:16:58.069094 2025] [proxy_fcgi:error] [pid 53477:tid 53492] [client 194.5.82.124:59625] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:16:58.162747 2025] [proxy_fcgi:error] [pid 53477:tid 53486] [client 194.5.82.124:59625] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:16:58.349319 2025] [:error] [pid 53477:tid 53490] [client 194.5.82.124:59625] [client 194.5.82.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/Canonical.php"] [unique_id "aSDk2n7Lu30Ku9O40aLx3gAAAAk"]
[Sat Nov 22 06:16:58.719522 2025] [:error] [pid 53566:tid 53573] [client 194.5.82.139:43849] [client 194.5.82.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "aSDk2sbSHDBkRbwMbd5RhgAAAMU"]
[Sat Nov 22 06:16:58.915803 2025] [proxy_fcgi:error] [pid 53478:tid 53515] [client 194.5.82.162:64617] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:16:59.017909 2025] [proxy_fcgi:error] [pid 53478:tid 53523] [client 194.5.82.162:64617] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:16:59.205871 2025] [:error] [pid 53478:tid 53514] [client 194.5.82.162:64617] [client 194.5.82.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/class-feed-index.php"] [unique_id "aSDk2whUYdXBbQswAdQqNgAAAEU"]
[Sat Nov 22 06:16:59.416313 2025] [proxy_fcgi:error] [pid 53477:tid 53491] [client 194.5.82.127:65481] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:16:59.606699 2025] [proxy_fcgi:error] [pid 53477:tid 53481] [client 194.5.82.127:65481] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:16:59.697770 2025] [:error] [pid 53477:tid 53503] [client 194.5.82.127:65481] [client 194.5.82.127] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php"] [unique_id "aSDk237Lu30Ku9O40aLx5gAAABY"]
[Sat Nov 22 06:16:59.973830 2025] [:error] [pid 25856:tid 25878] [client 194.5.82.143:44341] [client 194.5.82.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/db.php"] [unique_id "aSDk2xsTP0wy94zKUvHKUwAAARQ"]
[Sat Nov 22 06:17:00.158965 2025] [:error] [pid 53477:tid 53486] [client 194.5.82.127:38333] [client 194.5.82.127] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/class-wp-dependency-float.php"] [unique_id "aSDk3H7Lu30Ku9O40aLx6AAAAAU"]
[Sat Nov 22 06:17:00.348672 2025] [:error] [pid 53478:tid 53510] [client 194.5.82.152:59897] [client 194.5.82.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "aSDk3AhUYdXBbQswAdQqPAAAAEE"]
[Sat Nov 22 06:17:00.528424 2025] [:error] [pid 53479:tid 53539] [client 194.5.82.108:57571] [client 194.5.82.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/PHPMailer/purna.php"] [unique_id "aSDk3G6cicFF3Aas-oSLcAAAAIM"]
[Sat Nov 22 06:17:00.725927 2025] [:error] [pid 53479:tid 53557] [client 194.5.82.124:26687] [client 194.5.82.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/interactivity-api/interactivity-api-class.php"] [unique_id "aSDk3G6cicFF3Aas-oSLcQAAAJU"]
[Sat Nov 22 06:17:01.012211 2025] [:error] [pid 25856:tid 25869] [client 194.5.82.123:31835] [client 194.5.82.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/l10n/class-wp-widddget-pages.php"] [unique_id "aSDk3RsTP0wy94zKUvHKWAAAAQs"]
[Sat Nov 22 06:17:01.424219 2025] [:error] [pid 53478:tid 53516] [client 194.5.82.134:21049] [client 194.5.82.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php"] [unique_id "aSDk3QhUYdXBbQswAdQqQwAAAEc"]
[Sat Nov 22 06:17:01.625502 2025] [:error] [pid 53477:tid 53493] [client 194.5.82.114:20403] [client 194.5.82.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php"] [unique_id "aSDk3X7Lu30Ku9O40aLx6QAAAAw"]
[Sat Nov 22 06:17:01.852379 2025] [:error] [pid 25856:tid 25874] [client 194.5.82.162:36397] [client 194.5.82.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/ID3/module.audio-video.riff-set.php"] [unique_id "aSDk3RsTP0wy94zKUvHKXQAAARA"]
[Sat Nov 22 06:17:02.165567 2025] [:error] [pid 53479:tid 53549] [client 194.5.82.138:46451] [client 194.5.82.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/tinymce/utils/license.php"] [unique_id "aSDk3m6cicFF3Aas-oSLdwAAAI0"]
[Sat Nov 22 06:17:02.585082 2025] [:error] [pid 53477:tid 53482] [client 194.5.82.153:20539] [client 194.5.82.153] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Text/options.php"] [unique_id "aSDk3n7Lu30Ku9O40aLx7gAAAAE"]
[Sat Nov 22 06:17:02.835043 2025] [proxy_fcgi:error] [pid 53479:tid 53553] [client 194.5.82.122:29361] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:17:03.282858 2025] [:error] [pid 53479:tid 53554] [client 194.5.82.122:29361] [client 194.5.82.122] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.5.82.122, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "aSDk326cicFF3Aas-oSLfgAAAJI"]
[Sat Nov 22 06:17:04.068313 2025] [:error] [pid 53479:tid 53540] [client 194.5.82.122:29361] [client 194.5.82.122] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/feed-rsss.php"] [unique_id "aSDk4G6cicFF3Aas-oSLiwAAAIQ"]
[Sat Nov 22 06:17:04.332675 2025] [:error] [pid 53479:tid 53555] [client 194.5.82.121:42041] [client 194.5.82.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/IXR/goto.php"] [unique_id "aSDk4G6cicFF3Aas-oSLjwAAAJM"]
[Sat Nov 22 06:17:04.821487 2025] [proxy_fcgi:error] [pid 53478:tid 53517] [client 194.5.82.135:42307] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:17:04.920492 2025] [proxy_fcgi:error] [pid 53478:tid 53515] [client 194.5.82.135:42307] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:17:05.306393 2025] [proxy_fcgi:error] [pid 53478:tid 53513] [client 194.5.82.135:42307] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:17:05.419181 2025] [proxy_fcgi:error] [pid 53478:tid 53526] [client 194.5.82.135:42307] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:17:05.820566 2025] [proxy_fcgi:error] [pid 53478:tid 53521] [client 194.5.82.135:42307] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:17:05.927659 2025] [proxy_fcgi:error] [pid 53478:tid 53532] [client 194.5.82.135:42307] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:17:06.055639 2025] [proxy_fcgi:error] [pid 53478:tid 53512] [client 194.5.82.135:42307] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:17:06.194075 2025] [proxy_fcgi:error] [pid 53478:tid 53518] [client 194.5.82.135:42307] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:17:06.296473 2025] [:error] [pid 53478:tid 53522] [client 194.5.82.135:42307] [client 194.5.82.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aSDk4ghUYdXBbQswAdQqYwAAAE0"]
[Sat Nov 22 06:17:06.489621 2025] [:error] [pid 53477:tid 53485] [client 194.5.82.137:45625] [client 194.5.82.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/wp_class_datlib.php"] [unique_id "aSDk4n7Lu30Ku9O40aLyBQAAAAQ"]
[Sat Nov 22 06:17:06.673248 2025] [:error] [pid 25856:tid 25865] [client 194.5.82.113:54479] [client 194.5.82.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "aSDk4hsTP0wy94zKUvHKcgAAAQc"]
[Sat Nov 22 06:17:07.010766 2025] [proxy_fcgi:error] [pid 53479:tid 53544] [client 194.5.82.132:29681] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:17:07.114827 2025] [proxy_fcgi:error] [pid 53479:tid 53540] [client 194.5.82.132:29681] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:17:07.342617 2025] [proxy_fcgi:error] [pid 53479:tid 53536] [client 194.5.82.132:29681] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:17:07.540835 2025] [:error] [pid 53479:tid 53553] [client 194.5.82.132:29681] [client 194.5.82.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/Registry-private.php"] [unique_id "aSDk426cicFF3Aas-oSLoQAAAJE"]
[Sat Nov 22 06:17:07.730438 2025] [:error] [pid 53479:tid 53556] [client 194.5.82.122:44349] [client 194.5.82.122] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-meta.php"] [unique_id "aSDk426cicFF3Aas-oSLogAAAJQ"]
[Sat Nov 22 06:17:07.977821 2025] [:error] [pid 25856:tid 25872] [client 194.5.82.170:56069] [client 194.5.82.170] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/widgets/bypass.php"] [unique_id "aSDk4xsTP0wy94zKUvHKeAAAAQ4"]
[Sat Nov 22 06:17:08.603719 2025] [:error] [pid 53477:tid 53483] [client 194.5.82.147:44671] [client 194.5.82.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/style-engine/adminfus.php"] [unique_id "aSDk5H7Lu30Ku9O40aLyHQAAAAI"]
[Sat Nov 22 06:17:08.844835 2025] [proxy_fcgi:error] [pid 25856:tid 25861] [client 194.5.82.127:28723] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:17:08.945715 2025] [:error] [pid 25856:tid 25869] [client 194.5.82.127:28723] [client 194.5.82.127] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/group/wp-style.php"] [unique_id "aSDk5BsTP0wy94zKUvHKfQAAAQs"]
[Sat Nov 22 06:17:09.370604 2025] [:error] [pid 53479:tid 53540] [client 194.5.82.116:42639] [client 194.5.82.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/widgets/class-wp-wolf-widget.php"] [unique_id "aSDk5W6cicFF3Aas-oSLqwAAAIQ"]
[Sat Nov 22 06:17:10.839895 2025] [:error] [pid 53478:tid 53533] [client 194.5.82.154:32083] [client 194.5.82.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Text/index.php"] [unique_id "aSDk5ghUYdXBbQswAdQqeAAAAFg"]
[Sat Nov 22 06:17:11.030069 2025] [proxy_fcgi:error] [pid 53478:tid 53519] [client 194.5.82.122:44051] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:17:11.221567 2025] [:error] [pid 53478:tid 53531] [client 194.5.82.122:44051] [client 194.5.82.122] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/about.php"] [unique_id "aSDk5whUYdXBbQswAdQqewAAAFY"]
[Sat Nov 22 06:17:11.938739 2025] [proxy_fcgi:error] [pid 53566:tid 53570] [client 194.5.82.136:35055] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:17:12.283852 2025] [proxy_fcgi:error] [pid 53566:tid 53579] [client 194.5.82.136:35055] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:17:12.374490 2025] [:error] [pid 53566:tid 53577] [client 194.5.82.136:35055] [client 194.5.82.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/wp-sup.php"] [unique_id "aSDk6MbSHDBkRbwMbd5RvQAAAMk"]
[Sat Nov 22 06:17:12.765866 2025] [:error] [pid 53478:tid 53524] [client 194.5.82.113:24567] [client 194.5.82.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/widgets/class-t.api.php"] [unique_id "aSDk6AhUYdXBbQswAdQqgAAAAE8"]
[Sat Nov 22 06:17:13.394423 2025] [:error] [pid 53477:tid 53492] [client 194.5.82.136:47869] [client 194.5.82.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/dist/require-dynamic-blocks.php"] [unique_id "aSDk6X7Lu30Ku9O40aLyMwAAAAs"]
[Sat Nov 22 06:17:14.209471 2025] [:error] [pid 53477:tid 53504] [client 194.5.82.141:48211] [client 194.5.82.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/widgets/class-wp-widget-rss-database.php"] [unique_id "aSDk6n7Lu30Ku9O40aLyPwAAABc"]
[Sat Nov 22 06:17:14.612465 2025] [proxy_fcgi:error] [pid 53479:tid 53548] [client 194.5.82.122:46475] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:17:14.713982 2025] [:error] [pid 53479:tid 53541] [client 194.5.82.122:46475] [client 194.5.82.122] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/class-wp-customize-manager-client.php"] [unique_id "aSDk6m6cicFF3Aas-oSLvwAAAIU"]
[Sat Nov 22 06:17:14.962292 2025] [:error] [pid 25856:tid 25869] [client 194.5.82.160:26491] [client 194.5.82.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-boolean.php"] [unique_id "aSDk6hsTP0wy94zKUvHKiQAAAQs"]
[Sat Nov 22 06:17:15.788977 2025] [:error] [pid 53478:tid 53530] [client 194.5.82.125:37123] [client 194.5.82.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/smilies/simi.php"] [unique_id "aSDk6whUYdXBbQswAdQqigAAAFU"]
[Sat Nov 22 06:17:16.012909 2025] [proxy_fcgi:error] [pid 25856:tid 25871] [client 194.5.82.144:45491] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:17:18.941998 2025] [proxy_fcgi:error] [pid 25856:tid 25877] [client 194.5.82.144:45491] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:17:19.041299 2025] [:error] [pid 25856:tid 25868] [client 194.5.82.144:45491] [client 194.5.82.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/style-engine-session.php"] [unique_id "aSDk7xsTP0wy94zKUvHKnAAAAQo"]
[Sat Nov 22 06:17:19.533828 2025] [proxy_fcgi:error] [pid 25856:tid 25875] [client 194.5.82.130:45781] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:17:19.759506 2025] [:error] [pid 25856:tid 25870] [client 194.5.82.130:45781] [client 194.5.82.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aSDk7xsTP0wy94zKUvHKogAAAQw"]
[Sat Nov 22 06:17:19.984052 2025] [:error] [pid 53478:tid 53524] [client 194.5.82.140:60727] [client 194.5.82.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/file/wp-style.php"] [unique_id "aSDk7whUYdXBbQswAdQqnQAAAE8"]
[Sat Nov 22 06:17:20.439391 2025] [:error] [pid 53566:tid 53572] [client 194.5.82.114:49125] [client 194.5.82.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/IXR/class-IXR-cilent.php"] [unique_id "aSDk8MbSHDBkRbwMbd5RzwAAAMQ"]
[Sat Nov 22 06:17:20.952229 2025] [:error] [pid 53479:tid 53537] [client 194.5.82.141:25269] [client 194.5.82.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/install.php"] [unique_id "aSDk8G6cicFF3Aas-oSL1wAAAIE"]
[Sat Nov 22 06:17:21.147240 2025] [:error] [pid 25856:tid 25863] [client 194.5.82.153:27503] [client 194.5.82.153] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/PHPMailer/xleet.php"] [unique_id "aSDk8RsTP0wy94zKUvHKpQAAAQU"]
[Sat Nov 22 06:17:21.493757 2025] [proxy_fcgi:error] [pid 53477:tid 53491] [client 194.5.82.107:62343] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:17:22.014874 2025] [:error] [pid 53477:tid 53482] [client 194.5.82.107:62343] [client 194.5.82.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/category-double.php"] [unique_id "aSDk8n7Lu30Ku9O40aLyZwAAAAE"]
[Sat Nov 22 06:17:22.389484 2025] [:error] [pid 25856:tid 25870] [client 194.5.82.136:41773] [client 194.5.82.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/db.php"] [unique_id "aSDk8hsTP0wy94zKUvHKrgAAAQw"]
[Sat Nov 22 06:17:22.599713 2025] [:error] [pid 53566:tid 53577] [client 194.5.82.141:30387] [client 194.5.82.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/widgets/security.php"] [unique_id "aSDk8sbSHDBkRbwMbd5R2QAAAMk"]
[Sat Nov 22 06:17:22.950869 2025] [proxy_fcgi:error] [pid 25856:tid 25865] [client 194.5.82.119:23533] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:17:23.041955 2025] [:error] [pid 25856:tid 25882] [client 194.5.82.119:23533] [client 194.5.82.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/class-wp-language-pack.php"] [unique_id "aSDk8xsTP0wy94zKUvHKtQAAARg"]
[Sat Nov 22 06:17:24.966582 2025] [:error] [pid 53479:tid 53542] [client 194.5.82.117:58597] [client 194.5.82.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/class-walker-comment-client.php"] [unique_id "aSDk9G6cicFF3Aas-oSL5QAAAIY"]
[Sat Nov 22 06:17:25.722120 2025] [:error] [pid 53477:tid 53494] [client 194.5.82.170:53555] [client 194.5.82.170] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/class-wp-network-query-stat.php"] [unique_id "aSDk9X7Lu30Ku9O40aLyfQAAAA0"]
[Sat Nov 22 06:17:26.062611 2025] [proxy_fcgi:error] [pid 53478:tid 53520] [client 194.5.82.143:21045] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:17:26.155760 2025] [:error] [pid 53478:tid 53522] [client 194.5.82.143:21045] [client 194.5.82.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/class-wp-session-tokens-https.php"] [unique_id "aSDk9ghUYdXBbQswAdQqsQAAAE0"]
[Sat Nov 22 06:17:26.550409 2025] [:error] [pid 53478:tid 53525] [client 194.5.82.159:65317] [client 194.5.82.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/crystal/lrs_dage.php"] [unique_id "aSDk9ghUYdXBbQswAdQqtAAAAFA"]
[Sat Nov 22 06:17:26.912239 2025] [:error] [pid 53566:tid 53571] [client 194.5.82.144:47141] [client 194.5.82.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/as.php"] [unique_id "aSDk9sbSHDBkRbwMbd5R6gAAAMM"]
[Sat Nov 22 06:17:27.200240 2025] [:error] [pid 53478:tid 53509] [client 194.5.82.122:50785] [client 194.5.82.122] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/certificates/wp-conflg.php"] [unique_id "aSDk9whUYdXBbQswAdQquwAAAEA"]
[Sat Nov 22 06:17:27.401045 2025] [:error] [pid 53478:tid 53529] [client 194.5.82.105:30633] [client 194.5.82.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/install.php"] [unique_id "aSDk9whUYdXBbQswAdQqvgAAAFQ"]
[Sat Nov 22 06:17:27.660755 2025] [:error] [pid 53566:tid 53572] [client 194.5.82.108:48265] [client 194.5.82.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/customize/db.php"] [unique_id "aSDk98bSHDBkRbwMbd5R7AAAAMQ"]
[Sat Nov 22 06:17:27.845422 2025] [proxy_fcgi:error] [pid 25856:tid 25874] [client 194.5.82.124:58051] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:17:28.505637 2025] [:error] [pid 25856:tid 25878] [client 194.5.82.124:58051] [client 194.5.82.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/thickbox/about.php"] [unique_id "aSDk-BsTP0wy94zKUvHKxQAAARQ"]
[Sat Nov 22 06:17:29.005330 2025] [:error] [pid 25856:tid 25862] [client 194.5.82.153:44793] [client 194.5.82.153] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/rk2.php"] [unique_id "aSDk-RsTP0wy94zKUvHKygAAAQQ"]
[Sat Nov 22 06:17:29.391032 2025] [proxy_fcgi:error] [pid 25856:tid 25876] [client 194.5.82.125:55553] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:17:29.490735 2025] [:error] [pid 25856:tid 25874] [client 194.5.82.125:55553] [client 194.5.82.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/certificates/past.php"] [unique_id "aSDk-RsTP0wy94zKUvHKzgAAARA"]
[Sat Nov 22 06:17:29.803742 2025] [proxy_fcgi:error] [pid 53477:tid 53486] [client 194.5.82.164:58329] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:17:30.014711 2025] [:error] [pid 53477:tid 53492] [client 194.5.82.164:58329] [client 194.5.82.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/edit-tags.php"] [unique_id "aSDk-n7Lu30Ku9O40aLynAAAAAs"]
[Sat Nov 22 06:17:30.199525 2025] [proxy_fcgi:error] [pid 25856:tid 25865] [client 194.5.82.147:41299] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:17:32.348613 2025] [:error] [pid 25856:tid 25859] [client 194.5.82.147:41299] [client 194.5.82.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/dist/footer-default.php"] [unique_id "aSDk_BsTP0wy94zKUvHK1wAAAQE"]
[Sat Nov 22 06:17:32.651087 2025] [:error] [pid 53566:tid 53568] [client 194.5.82.109:51423] [client 194.5.82.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/widgets/class-wp-widget-meta-request.php"] [unique_id "aSDk_MbSHDBkRbwMbd5R-wAAAMA"]
[Sat Nov 22 06:17:32.926417 2025] [:error] [pid 53477:tid 53493] [client 194.5.82.130:24467] [client 194.5.82.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/dist/edit-widgets/bypass.php"] [unique_id "aSDk_H7Lu30Ku9O40aLypgAAAAw"]
[Sat Nov 22 06:17:33.326434 2025] [:error] [pid 25856:tid 25868] [client 194.5.82.160:35975] [client 194.5.82.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/l10n/wp-login.php"] [unique_id "aSDk_RsTP0wy94zKUvHK2wAAAQo"]
[Sat Nov 22 06:17:34.401083 2025] [:error] [pid 53566:tid 53571] [client 194.5.82.147:41849] [client 194.5.82.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/widgets/wp-ss.php"] [unique_id "aSDk_sbSHDBkRbwMbd5SDAAAAMM"]
[Sat Nov 22 06:17:34.672258 2025] [:error] [pid 25856:tid 25871] [client 194.5.82.134:46785] [client 194.5.82.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/IXR/xsec1.php"] [unique_id "aSDk_hsTP0wy94zKUvHK4wAAAQ0"]
[Sat Nov 22 06:17:35.209274 2025] [:error] [pid 53478:tid 53525] [client 194.5.82.107:49051] [client 194.5.82.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/crystal/sad.php"] [unique_id "aSDk_whUYdXBbQswAdQqywAAAFA"]
[Sat Nov 22 06:17:35.452464 2025] [:error] [pid 53479:tid 53550] [client 194.5.82.152:36661] [client 194.5.82.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aSDk_26cicFF3Aas-oSMJwAAAI4"]
[Sat Nov 22 06:17:35.848423 2025] [:error] [pid 25856:tid 25872] [client 194.5.82.155:59061] [client 194.5.82.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/class-phpmailer-beta.php"] [unique_id "aSDk_xsTP0wy94zKUvHK7QAAAQ4"]
[Sat Nov 22 06:17:36.035437 2025] [:error] [pid 25856:tid 25879] [client 194.5.82.164:49109] [client 194.5.82.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/ms-file.php"] [unique_id "aSDlABsTP0wy94zKUvHK8AAAARU"]
[Sat Nov 22 06:17:36.239255 2025] [:error] [pid 53479:tid 53542] [client 194.5.82.150:62181] [client 194.5.82.150] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.5.82.150, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aSDlAG6cicFF3Aas-oSMKwAAAIY"]
[Sat Nov 22 06:17:36.244784 2025] [proxy_fcgi:error] [pid 53479:tid 53542] [client 194.5.82.150:62181] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:17:36.345446 2025] [:error] [pid 53479:tid 53552] [client 194.5.82.150:62181] [client 194.5.82.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/widgets/av.php"] [unique_id "aSDlAG6cicFF3Aas-oSMLQAAAJA"]
[Sat Nov 22 06:17:36.724535 2025] [proxy_fcgi:error] [pid 53566:tid 53570] [client 194.5.82.136:50181] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:17:36.815375 2025] [:error] [pid 53566:tid 53586] [client 194.5.82.136:50181] [client 194.5.82.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aSDlAMbSHDBkRbwMbd5SFAAAANI"]
[Sat Nov 22 06:17:37.000209 2025] [:error] [pid 53479:tid 53549] [client 194.5.82.128:41221] [client 194.5.82.128] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/network.php"] [unique_id "aSDlAG6cicFF3Aas-oSMOQAAAI0"]
[Sat Nov 22 06:17:37.195952 2025] [proxy_fcgi:error] [pid 25856:tid 25876] [client 194.5.82.107:63137] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:17:37.900880 2025] [:error] [pid 25856:tid 25882] [client 194.5.82.107:63137] [client 194.5.82.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/XML/content.php"] [unique_id "aSDlARsTP0wy94zKUvHLAQAAARg"]
[Sat Nov 22 06:17:38.086896 2025] [:error] [pid 53566:tid 53571] [client 194.5.82.147:33193] [client 194.5.82.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/pomo/item.php"] [unique_id "aSDlAsbSHDBkRbwMbd5SGQAAAMM"]
[Sat Nov 22 06:17:38.458349 2025] [:error] [pid 25856:tid 25879] [client 194.5.82.134:56399] [client 194.5.82.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/pomo/plugins.php"] [unique_id "aSDlAhsTP0wy94zKUvHLCgAAARU"]
[Sat Nov 22 06:17:38.640162 2025] [:error] [pid 25856:tid 25863] [client 194.5.82.116:35327] [client 194.5.82.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/install.php"] [unique_id "aSDlAhsTP0wy94zKUvHLCwAAAQU"]
[Sat Nov 22 06:17:38.966489 2025] [proxy_fcgi:error] [pid 53566:tid 53575] [client 194.5.82.160:40549] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:17:39.165483 2025] [:error] [pid 53566:tid 53574] [client 194.5.82.160:40549] [client 194.5.82.160] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.5.82.160, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/wp-login.php"] [unique_id "aSDlA8bSHDBkRbwMbd5SHQAAAMY"]
[Sat Nov 22 06:17:39.370968 2025] [:error] [pid 53566:tid 53580] [client 194.5.82.160:40549] [client 194.5.82.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/widgets/class-wp-nav-widgets.php"] [unique_id "aSDlA8bSHDBkRbwMbd5SHwAAAMw"]
[Sat Nov 22 06:17:40.077966 2025] [:error] [pid 25856:tid 25875] [client 194.5.82.105:54233] [client 194.5.82.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/sitemaps/providers/doc.php"] [unique_id "aSDlBBsTP0wy94zKUvHLFwAAARE"]
[Sat Nov 22 06:17:40.273902 2025] [proxy_fcgi:error] [pid 53566:tid 53576] [client 194.5.82.150:21355] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:17:40.364888 2025] [:error] [pid 53566:tid 53583] [client 194.5.82.150:21355] [client 194.5.82.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/rest-api/1.php"] [unique_id "aSDlBMbSHDBkRbwMbd5SIgAAAM8"]
[Sat Nov 22 06:17:40.545704 2025] [:error] [pid 53478:tid 53513] [client 194.5.82.123:53001] [client 194.5.82.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/fonts/class_api.php"] [unique_id "aSDlBAhUYdXBbQswAdQq1wAAAEQ"]
[Sat Nov 22 06:17:40.729985 2025] [proxy_fcgi:error] [pid 53479:tid 53547] [client 194.5.82.155:51165] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:17:41.035032 2025] [:error] [pid 53479:tid 53557] [client 194.5.82.155:51165] [client 194.5.82.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/smilies/admin.php"] [unique_id "aSDlBW6cicFF3Aas-oSMVwAAAJU"]
[Sat Nov 22 06:17:41.419754 2025] [:error] [pid 53566:tid 53571] [client 194.5.82.105:38253] [client 194.5.82.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/IXR/about.php"] [unique_id "aSDlBcbSHDBkRbwMbd5SJwAAAMM"]
[Sat Nov 22 06:17:41.610709 2025] [proxy_fcgi:error] [pid 53479:tid 53550] [client 194.5.82.155:35429] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:17:41.813356 2025] [proxy_fcgi:error] [pid 53479:tid 53548] [client 194.5.82.155:35429] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:17:41.998167 2025] [:error] [pid 53479:tid 53556] [client 194.5.82.155:35429] [client 194.5.82.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/class-wp-customize-manager-interpreter.php"] [unique_id "aSDlBW6cicFF3Aas-oSMYQAAAJQ"]
[Sat Nov 22 06:17:42.177854 2025] [:error] [pid 25856:tid 25869] [client 194.5.82.107:37291] [client 194.5.82.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/bypass.php"] [unique_id "aSDlBhsTP0wy94zKUvHLGwAAAQs"]
[Sat Nov 22 06:17:42.512910 2025] [:error] [pid 25856:tid 25872] [client 194.5.82.155:59291] [client 194.5.82.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/count.php"] [unique_id "aSDlBhsTP0wy94zKUvHLIQAAAQ4"]
[Sat Nov 22 06:17:42.701022 2025] [proxy_fcgi:error] [pid 53478:tid 53520] [client 194.5.82.141:54095] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:17:43.278836 2025] [:error] [pid 53478:tid 53532] [client 194.5.82.141:54095] [client 194.5.82.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "aSDlBwhUYdXBbQswAdQq5wAAAFc"]
[Sat Nov 22 06:17:43.656399 2025] [:error] [pid 53478:tid 53526] [client 194.5.82.130:62275] [client 194.5.82.130] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/usr/local/apache/modsecurity-cwaf/rules/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder||dwelectservices.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "dwelectservices.com.au"] [uri "/images/stories/themes.php"] [unique_id "aSDlBwhUYdXBbQswAdQq6gAAAFE"]
[Sat Nov 22 06:17:45.248085 2025] [:error] [pid 53478:tid 53516] [client 194.5.82.130:62275] [client 194.5.82.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/theme-compat/footer-embed-function.php"] [unique_id "aSDlCQhUYdXBbQswAdQq6wAAAEc"]
[Sat Nov 22 06:17:45.659692 2025] [:error] [pid 53478:tid 53515] [client 194.5.82.114:62765] [client 194.5.82.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/l10n/class-wp-translation-file-mo-event.php"] [unique_id "aSDlCQhUYdXBbQswAdQq7gAAAEY"]
[Sat Nov 22 06:17:45.869019 2025] [:error] [pid 53479:tid 53538] [client 194.5.82.140:29855] [client 194.5.82.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/vars-soap.php"] [unique_id "aSDlCW6cicFF3Aas-oSMeQAAAII"]
[Sat Nov 22 06:17:46.282684 2025] [proxy_fcgi:error] [pid 53566:tid 53571] [client 194.5.82.111:38891] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:17:46.815561 2025] [:error] [pid 53566:tid 53577] [client 194.5.82.111:38891] [client 194.5.82.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/id3/wp-work.php"] [unique_id "aSDlCsbSHDBkRbwMbd5SOQAAAMk"]
[Sat Nov 22 06:17:47.187783 2025] [:error] [pid 53479:tid 53538] [client 194.5.82.141:48299] [client 194.5.82.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/class-wp-taxonomy.editor.php"] [unique_id "aSDlC26cicFF3Aas-oSMhgAAAII"]
[Sat Nov 22 06:17:47.475363 2025] [:error] [pid 53477:tid 53489] [client 194.5.82.142:54117] [client 194.5.82.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/wp-conflg.php"] [unique_id "aSDlC37Lu30Ku9O40aLy3gAAAAg"]
[Sat Nov 22 06:17:47.664631 2025] [proxy_fcgi:error] [pid 53478:tid 53509] [client 194.5.82.139:46253] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:17:48.188897 2025] [:error] [pid 53478:tid 53518] [client 194.5.82.139:46253] [client 194.5.82.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/interactivity-api/interactivity-api-xml.php"] [unique_id "aSDlDAhUYdXBbQswAdQq-AAAAEk"]
[Sat Nov 22 06:17:48.476961 2025] [:error] [pid 53478:tid 53526] [client 194.5.82.139:57283] [client 194.5.82.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/colour.php"] [unique_id "aSDlDAhUYdXBbQswAdQq_AAAAFE"]
[Sat Nov 22 06:17:48.666197 2025] [proxy_fcgi:error] [pid 53566:tid 53580] [client 194.5.82.122:50991] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:17:48.762795 2025] [:error] [pid 53566:tid 53570] [client 194.5.82.122:50991] [client 194.5.82.122] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/customize/class-wp-customize-background-position-control-variable.php"] [unique_id "aSDlDMbSHDBkRbwMbd5SQgAAAMI"]
[Sat Nov 22 06:17:48.991634 2025] [:error] [pid 53566:tid 53587] [client 194.5.82.134:36837] [client 194.5.82.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/include.php"] [unique_id "aSDlDMbSHDBkRbwMbd5SQwAAANM"]
[Sat Nov 22 06:17:49.360843 2025] [:error] [pid 53478:tid 53523] [client 194.5.82.128:46819] [client 194.5.82.128] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/imgareaselect/wp-login.php"] [unique_id "aSDlDQhUYdXBbQswAdQrAgAAAE4"]
[Sat Nov 22 06:17:49.884057 2025] [proxy_fcgi:error] [pid 25856:tid 25868] [client 194.5.82.127:52495] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:17:49.986454 2025] [:error] [pid 25856:tid 25872] [client 194.5.82.127:52495] [client 194.5.82.127] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/l10n/class-wp-translations-interface.php"] [unique_id "aSDlDRsTP0wy94zKUvHLOwAAAQ4"]
[Sat Nov 22 06:17:50.205504 2025] [:error] [pid 53479:tid 53557] [client 194.5.82.138:59529] [client 194.5.82.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/about5.php"] [unique_id "aSDlDm6cicFF3Aas-oSMlwAAAJU"]
[Sat Nov 22 06:17:50.919882 2025] [:error] [pid 53566:tid 53582] [client 194.5.82.146:44951] [client 194.5.82.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/ID3/db.php"] [unique_id "aSDlDsbSHDBkRbwMbd5SSwAAAM4"]
[Sat Nov 22 06:17:51.339310 2025] [:error] [pid 53566:tid 53586] [client 194.5.82.155:46161] [client 194.5.82.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/dist/bypass.php"] [unique_id "aSDlD8bSHDBkRbwMbd5STwAAANI"]
[Sat Nov 22 06:17:52.983087 2025] [proxy_fcgi:error] [pid 53479:tid 53560] [client 194.5.82.106:60293] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:17:53.312179 2025] [:error] [pid 53479:tid 53557] [client 194.5.82.106:60293] [client 194.5.82.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/sitemaps/wp-conflg.php"] [unique_id "aSDlEW6cicFF3Aas-oSMqAAAAJU"]
[Sat Nov 22 06:17:53.522097 2025] [:error] [pid 53477:tid 53495] [client 194.5.82.130:30441] [client 194.5.82.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.php"] [unique_id "aSDlEX7Lu30Ku9O40aLy_gAAAA4"]
[Sat Nov 22 06:17:53.901207 2025] [:error] [pid 53566:tid 53587] [client 194.5.82.121:65263] [client 194.5.82.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/login.php"] [unique_id "aSDlEcbSHDBkRbwMbd5SYwAAANM"]
[Sat Nov 22 06:17:54.125056 2025] [proxy_fcgi:error] [pid 53478:tid 53512] [client 194.5.82.123:65417] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:17:54.307934 2025] [:error] [pid 53478:tid 53514] [client 194.5.82.123:65417] [client 194.5.82.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/sitemaps/chosen.php"] [unique_id "aSDlEghUYdXBbQswAdQrFgAAAEU"]
[Sat Nov 22 06:17:54.551137 2025] [proxy_fcgi:error] [pid 53566:tid 53571] [client 194.5.82.153:59909] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:17:54.801128 2025] [:error] [pid 53566:tid 53584] [client 194.5.82.153:59909] [client 194.5.82.153] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/Cache/index.php"] [unique_id "aSDlEsbSHDBkRbwMbd5SaQAAANA"]
[Sat Nov 22 06:17:55.035566 2025] [:error] [pid 53566:tid 53578] [client 194.5.82.125:25985] [client 194.5.82.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/dist/about.php"] [unique_id "aSDlE8bSHDBkRbwMbd5SagAAAMo"]
[Sat Nov 22 06:17:55.334403 2025] [:error] [pid 53478:tid 53510] [client 194.5.82.130:47501] [client 194.5.82.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aSDlEwhUYdXBbQswAdQrGQAAAEE"]
[Sat Nov 22 06:17:55.531856 2025] [:error] [pid 53478:tid 53527] [client 194.5.82.139:58479] [client 194.5.82.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/simi.php"] [unique_id "aSDlEwhUYdXBbQswAdQrGgAAAFI"]
[Sat Nov 22 06:17:55.944175 2025] [:error] [pid 53566:tid 53572] [client 194.5.82.150:39991] [client 194.5.82.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Requests/Text/index.php"] [unique_id "aSDlE8bSHDBkRbwMbd5SbQAAAMQ"]
[Sat Nov 22 06:17:56.221330 2025] [:error] [pid 25856:tid 25860] [client 194.5.82.161:24057] [client 194.5.82.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/sitemaps/abcd.php"] [unique_id "aSDlFBsTP0wy94zKUvHLTwAAAQI"]
[Sat Nov 22 06:17:56.401100 2025] [:error] [pid 25856:tid 25866] [client 194.5.82.153:60995] [client 194.5.82.153] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/ID3/rk2.php"] [unique_id "aSDlFBsTP0wy94zKUvHLUAAAAQg"]
[Sat Nov 22 06:17:56.580927 2025] [:error] [pid 53478:tid 53532] [client 194.5.82.163:46187] [client 194.5.82.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/widgets/class-wp-widget-search-interpreter.php"] [unique_id "aSDlFAhUYdXBbQswAdQrIgAAAFc"]
[Sat Nov 22 06:17:57.114310 2025] [:error] [pid 53477:tid 53488] [client 194.5.82.130:44271] [client 194.5.82.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/block-template-utils-other.php"] [unique_id "aSDlFX7Lu30Ku9O40aLzBwAAAAc"]
[Sat Nov 22 06:17:57.435645 2025] [proxy_fcgi:error] [pid 25856:tid 25872] [client 194.5.82.144:32819] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:17:57.556977 2025] [:error] [pid 25856:tid 25880] [client 194.5.82.144:32819] [client 194.5.82.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/sodium_compat/lib/widget-group.php"] [unique_id "aSDlFRsTP0wy94zKUvHLVwAAARY"]
[Sat Nov 22 06:17:57.915764 2025] [:error] [pid 53566:tid 53592] [client 194.5.82.138:20325] [client 194.5.82.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/jcrop/about.php"] [unique_id "aSDlFcbSHDBkRbwMbd5ScQAAANg"]
[Sat Nov 22 06:17:58.193765 2025] [:error] [pid 53478:tid 53513] [client 194.5.82.144:27689] [client 194.5.82.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/customize/chosen.php"] [unique_id "aSDlFghUYdXBbQswAdQrKQAAAEQ"]
[Sat Nov 22 06:17:58.577595 2025] [proxy_fcgi:error] [pid 53566:tid 53580] [client 194.5.82.144:28821] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:17:58.994461 2025] [:error] [pid 53566:tid 53575] [client 194.5.82.144:28821] [client 194.5.82.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/plugin.php"] [unique_id "aSDlFsbSHDBkRbwMbd5SgAAAAMc"]
[Sat Nov 22 06:17:59.186925 2025] [:error] [pid 53479:tid 53537] [client 194.5.82.113:37291] [client 194.5.82.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/class-wp-scripts-query.php"] [unique_id "aSDlF26cicFF3Aas-oSMxAAAAIE"]
[Sat Nov 22 06:17:59.485186 2025] [proxy_fcgi:error] [pid 53478:tid 53533] [client 194.5.82.113:64235] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:17:59.580943 2025] [:error] [pid 53478:tid 53518] [client 194.5.82.113:64235] [client 194.5.82.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/ID3/module.audio-license.php"] [unique_id "aSDlFwhUYdXBbQswAdQrLwAAAEk"]
[Sat Nov 22 06:18:03.095293 2025] [:error] [pid 53479:tid 53557] [client 194.5.82.119:41205] [client 194.5.82.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/class-wp-error-module.php"] [unique_id "aSDlG26cicFF3Aas-oSM1wAAAJU"]
[Sat Nov 22 06:18:03.343295 2025] [proxy_fcgi:error] [pid 53479:tid 53555] [client 194.5.82.139:51515] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:18:03.444218 2025] [proxy_fcgi:error] [pid 53479:tid 53551] [client 194.5.82.139:51515] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:18:03.569293 2025] [:error] [pid 53479:tid 53541] [client 194.5.82.139:51515] [client 194.5.82.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/litespeed.php"] [unique_id "aSDlG26cicFF3Aas-oSM3AAAAIU"]
[Sat Nov 22 06:18:03.988288 2025] [:error] [pid 25856:tid 25877] [client 194.5.82.159:26555] [client 194.5.82.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/dist/alam.php"] [unique_id "aSDlGxsTP0wy94zKUvHLcwAAARM"]
[Sat Nov 22 06:18:04.175581 2025] [proxy_fcgi:error] [pid 25856:tid 25881] [client 194.5.82.127:63881] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:18:04.266352 2025] [:error] [pid 25856:tid 25858] [client 194.5.82.127:63881] [client 194.5.82.127] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/block-bindings/imagess.php"] [unique_id "aSDlHBsTP0wy94zKUvHLdwAAAQA"]
[Sat Nov 22 06:18:04.596055 2025] [:error] [pid 53478:tid 53522] [client 194.5.82.154:55117] [client 194.5.82.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/default-filters-edit.php"] [unique_id "aSDlHAhUYdXBbQswAdQrPgAAAE0"]
[Sat Nov 22 06:18:04.790089 2025] [proxy_fcgi:error] [pid 53478:tid 53513] [client 194.5.82.111:34291] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:18:05.079039 2025] [proxy_fcgi:error] [pid 53478:tid 53529] [client 194.5.82.111:34291] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:18:05.176029 2025] [:error] [pid 53478:tid 53523] [client 194.5.82.111:34291] [client 194.5.82.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Requests/Auth/index.php"] [unique_id "aSDlHQhUYdXBbQswAdQrRgAAAE4"]
[Sat Nov 22 06:18:05.672299 2025] [:error] [pid 53477:tid 53490] [client 194.5.82.156:55147] [client 194.5.82.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Text/Diff/Engine/theme.php"] [unique_id "aSDlHX7Lu30Ku9O40aLzLgAAAAk"]
[Sat Nov 22 06:18:05.857997 2025] [proxy_fcgi:error] [pid 53478:tid 53524] [client 194.5.82.122:55373] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:18:05.950655 2025] [:error] [pid 53478:tid 53511] [client 194.5.82.122:55373] [client 194.5.82.122] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/ID3/shell.php"] [unique_id "aSDlHQhUYdXBbQswAdQrTgAAAEI"]
[Sat Nov 22 06:18:06.187113 2025] [:error] [pid 53566:tid 53586] [client 194.5.82.114:40595] [client 194.5.82.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/customize/class-wp-customize-selective-refresh-library.php"] [unique_id "aSDlHsbSHDBkRbwMbd5SlwAAANI"]
[Sat Nov 22 06:18:07.399598 2025] [proxy_fcgi:error] [pid 53478:tid 53513] [client 194.5.82.161:31139] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:18:07.590086 2025] [:error] [pid 53478:tid 53510] [client 194.5.82.161:31139] [client 194.5.82.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Requests/library/wp-login.php"] [unique_id "aSDlHwhUYdXBbQswAdQrXgAAAEE"]
[Sat Nov 22 06:18:07.776800 2025] [:error] [pid 53479:tid 53538] [client 194.5.82.131:58109] [client 194.5.82.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/interactivity-api/about.php"] [unique_id "aSDlH26cicFF3Aas-oSM8AAAAII"]
[Sat Nov 22 06:18:07.966273 2025] [proxy_fcgi:error] [pid 53478:tid 53521] [client 194.5.82.157:49751] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:18:08.559282 2025] [:error] [pid 53478:tid 53510] [client 194.5.82.157:49751] [client 194.5.82.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/wp-2019.php"] [unique_id "aSDlIAhUYdXBbQswAdQragAAAEE"]
[Sat Nov 22 06:18:08.756317 2025] [:error] [pid 53478:tid 53532] [client 194.5.82.141:45275] [client 194.5.82.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/info.php"] [unique_id "aSDlIAhUYdXBbQswAdQrbAAAAFc"]
[Sat Nov 22 06:18:09.047889 2025] [:error] [pid 53477:tid 53504] [client 194.5.82.121:42345] [client 194.5.82.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/log.php"] [unique_id "aSDlIX7Lu30Ku9O40aLzPQAAABc"]
[Sat Nov 22 06:18:09.240757 2025] [:error] [pid 53477:tid 53505] [client 194.5.82.144:31383] [client 194.5.82.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime-num.php"] [unique_id "aSDlIX7Lu30Ku9O40aLzQAAAABg"]
[Sat Nov 22 06:18:09.428425 2025] [:error] [pid 53566:tid 53582] [client 194.5.82.143:23551] [client 194.5.82.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-entry.min-object.php"] [unique_id "aSDlIcbSHDBkRbwMbd5SnwAAAM4"]
[Sat Nov 22 06:18:09.611124 2025] [:error] [pid 53478:tid 53515] [client 194.5.82.116:20027] [client 194.5.82.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/aw.php"] [unique_id "aSDlIQhUYdXBbQswAdQrbwAAAEY"]
[Sat Nov 22 06:18:10.209329 2025] [:error] [pid 53477:tid 53504] [client 194.5.82.137:60129] [client 194.5.82.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/IXR/db.php"] [unique_id "aSDlIn7Lu30Ku9O40aLzTwAAABc"]
[Sat Nov 22 06:18:10.408048 2025] [:error] [pid 25856:tid 25881] [client 194.5.82.134:41549] [client 194.5.82.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/install.php"] [unique_id "aSDlIhsTP0wy94zKUvHLgwAAARc"]
[Sat Nov 22 06:18:10.740387 2025] [proxy_fcgi:error] [pid 25856:tid 25880] [client 194.5.82.120:58789] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:18:10.870906 2025] [:error] [pid 25856:tid 25864] [client 194.5.82.120:58789] [client 194.5.82.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/dist/install.php"] [unique_id "aSDlIhsTP0wy94zKUvHLiAAAAQY"]
[Sat Nov 22 06:18:11.068950 2025] [:error] [pid 53478:tid 53525] [client 194.5.82.127:47113] [client 194.5.82.127] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/style-engine/dedi1.php"] [unique_id "aSDlIwhUYdXBbQswAdQrdQAAAFA"]
[Sat Nov 22 06:18:11.458607 2025] [:error] [pid 53478:tid 53524] [client 194.5.82.159:45831] [client 194.5.82.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/template-less.php"] [unique_id "aSDlIwhUYdXBbQswAdQregAAAE8"]
[Sat Nov 22 06:18:11.642299 2025] [:error] [pid 53478:tid 53510] [client 194.5.82.130:48841] [client 194.5.82.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/pomo/alfa-rex.php"] [unique_id "aSDlIwhUYdXBbQswAdQrfQAAAEE"]
[Sat Nov 22 06:18:12.564231 2025] [:error] [pid 53477:tid 53491] [client 194.5.82.152:31585] [client 194.5.82.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/min.php"] [unique_id "aSDlJH7Lu30Ku9O40aLzYAAAAAo"]
[Sat Nov 22 06:18:12.747223 2025] [:error] [pid 53479:tid 53555] [client 194.5.82.157:52307] [client 194.5.82.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/wp-conflg.php"] [unique_id "aSDlJG6cicFF3Aas-oSNDwAAAJM"]
[Sat Nov 22 06:18:13.133243 2025] [:error] [pid 25856:tid 25878] [client 194.5.82.139:46617] [client 194.5.82.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/file.php"] [unique_id "aSDlJRsTP0wy94zKUvHLjgAAARQ"]
[Sat Nov 22 06:18:13.427832 2025] [:error] [pid 25856:tid 25880] [client 194.5.82.111:40911] [client 194.5.82.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/block-patterns/about.php"] [unique_id "aSDlJRsTP0wy94zKUvHLlgAAARY"]
[Sat Nov 22 06:18:13.729483 2025] [:error] [pid 53477:tid 53484] [client 194.5.82.120:34849] [client 194.5.82.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/load.php"] [unique_id "aSDlJX7Lu30Ku9O40aLzZAAAAAM"]
[Sat Nov 22 06:18:13.974626 2025] [:error] [pid 53477:tid 53503] [client 194.5.82.120:53891] [client 194.5.82.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/ID3/chosen.php"] [unique_id "aSDlJX7Lu30Ku9O40aLzZQAAABY"]
[Sat Nov 22 06:18:14.192446 2025] [:error] [pid 53566:tid 53572] [client 194.5.82.124:52071] [client 194.5.82.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/class-wp-theme-float.php"] [unique_id "aSDlJsbSHDBkRbwMbd5SsgAAAMQ"]
[Sat Nov 22 06:18:14.674565 2025] [:error] [pid 53477:tid 53481] [client 194.5.82.162:60515] [client 194.5.82.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/widgets/wp-style.php"] [unique_id "aSDlJn7Lu30Ku9O40aLzbQAAAAA"]
[Sat Nov 22 06:18:14.864241 2025] [proxy_fcgi:error] [pid 53478:tid 53515] [client 194.5.82.159:36009] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:18:14.985847 2025] [:error] [pid 53478:tid 53514] [client 194.5.82.159:36009] [client 194.5.82.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/widgets/autoload_classmap.php"] [unique_id "aSDlJghUYdXBbQswAdQrkAAAAEU"]
[Sat Nov 22 06:18:15.408110 2025] [proxy_fcgi:error] [pid 53479:tid 53556] [client 194.5.82.137:59253] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:18:15.508921 2025] [:error] [pid 53479:tid 53552] [client 194.5.82.137:59253] [client 194.5.82.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/block-bindings/admin.php"] [unique_id "aSDlJ26cicFF3Aas-oSNJQAAAJA"]
[Sat Nov 22 06:18:15.721311 2025] [:error] [pid 53566:tid 53582] [client 194.5.82.111:59371] [client 194.5.82.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/PHPMailer/autoload_classmap.php"] [unique_id "aSDlJ8bSHDBkRbwMbd5SuAAAAM4"]
[Sat Nov 22 06:18:16.022898 2025] [:error] [pid 53479:tid 53544] [client 194.5.82.120:46901] [client 194.5.82.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/theme-compat/db.php"] [unique_id "aSDlKG6cicFF3Aas-oSNKwAAAIg"]
[Sat Nov 22 06:18:16.302834 2025] [proxy_fcgi:error] [pid 53477:tid 53501] [client 194.5.82.113:28469] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:18:16.413636 2025] [proxy_fcgi:error] [pid 53477:tid 53502] [client 194.5.82.113:28469] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:18:16.719375 2025] [proxy_fcgi:error] [pid 53477:tid 53481] [client 194.5.82.113:28469] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:18:17.100290 2025] [:error] [pid 53477:tid 53489] [client 194.5.82.113:28469] [client 194.5.82.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/system.php"] [unique_id "aSDlKX7Lu30Ku9O40aLzgQAAAAg"]
[Sat Nov 22 06:18:17.376734 2025] [:error] [pid 53479:tid 53556] [client 194.5.82.114:47081] [client 194.5.82.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/block-bindings/about.php"] [unique_id "aSDlKW6cicFF3Aas-oSNMQAAAJQ"]
[Sat Nov 22 06:18:17.759879 2025] [:error] [pid 53566:tid 53587] [client 194.5.82.157:29385] [client 194.5.82.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/customize/class-wp-customize-upload-control-cookie.php"] [unique_id "aSDlKcbSHDBkRbwMbd5SwQAAANM"]
[Sat Nov 22 06:18:17.941064 2025] [:error] [pid 53479:tid 53540] [client 194.5.82.157:31385] [client 194.5.82.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/ID3/simi.php"] [unique_id "aSDlKW6cicFF3Aas-oSNOQAAAIQ"]
[Sat Nov 22 06:18:18.122058 2025] [:error] [pid 53477:tid 53496] [client 194.5.82.145:44673] [client 194.5.82.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/class-wp-taxonomy-sample.php"] [unique_id "aSDlKn7Lu30Ku9O40aLzggAAAA8"]
[Sat Nov 22 06:18:32.643445 2025] [autoindex:error] [pid 25856:tid 25872] [client 194.5.82.120:57627] AH01276: Cannot serve directory /home/dwelects/public_html/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 06:56:38.645882 2025] [proxy_fcgi:error] [pid 25856:tid 25881] [client 212.116.231.26:60742] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:56:39.080603 2025] [proxy_fcgi:error] [pid 25856:tid 25871] [client 212.116.231.26:60742] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:56:39.503660 2025] [proxy_fcgi:error] [pid 25856:tid 25880] [client 212.116.231.26:60742] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:56:39.935630 2025] [proxy_fcgi:error] [pid 25856:tid 25860] [client 212.116.231.26:60742] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:56:40.369676 2025] [proxy_fcgi:error] [pid 25856:tid 25858] [client 212.116.231.26:60742] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:56:40.788486 2025] [:error] [pid 25856:tid 25864] [client 212.116.231.26:60742] [client 212.116.231.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/chosen.php"] [unique_id "aSDuKBsTP0wy94zKUvHnIQAAAQY"]
[Sat Nov 22 06:56:41.604961 2025] [:error] [pid 9547:tid 9553] [client 212.116.231.26:48504] [client 212.116.231.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/chosen.php"] [unique_id "aSDuKdClOR5qk7DoMeGlXAAAAUA"]
[Sat Nov 22 06:56:42.419584 2025] [:error] [pid 25856:tid 25882] [client 212.116.231.26:48950] [client 212.116.231.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/chosen.php"] [unique_id "aSDuKhsTP0wy94zKUvHnNQAAARg"]
[Sat Nov 22 06:56:43.271645 2025] [:error] [pid 53477:tid 53495] [client 212.116.231.26:49418] [client 212.116.231.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/chosen.php"] [unique_id "aSDuK37Lu30Ku9O40aIG2QAAAA4"]
[Sat Nov 22 06:56:44.105809 2025] [:error] [pid 53478:tid 53514] [client 212.116.231.26:49868] [client 212.116.231.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/chosen.php"] [unique_id "aSDuLAhUYdXBbQswAdRAEAAAAEU"]
[Sat Nov 22 06:56:45.820822 2025] [:error] [pid 53478:tid 53517] [client 212.116.231.26:50318] [client 212.116.231.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/"] [unique_id "aSDuLQhUYdXBbQswAdRAMgAAAEg"]
[Sat Nov 22 06:56:46.674992 2025] [:error] [pid 25856:tid 25871] [client 212.116.231.26:51176] [client 212.116.231.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/"] [unique_id "aSDuLhsTP0wy94zKUvHngAAAAQ0"]
[Sat Nov 22 06:56:47.508210 2025] [:error] [pid 25856:tid 25879] [client 212.116.231.26:51558] [client 212.116.231.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/"] [unique_id "aSDuLxsTP0wy94zKUvHnnQAAARU"]
[Sat Nov 22 06:56:48.319277 2025] [:error] [pid 53566:tid 53582] [client 212.116.231.26:52046] [client 212.116.231.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/"] [unique_id "aSDuMMbSHDBkRbwMbd5npAAAAM4"]
[Sat Nov 22 06:56:49.135434 2025] [:error] [pid 53566:tid 53570] [client 212.116.231.26:52492] [client 212.116.231.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/"] [unique_id "aSDuMcbSHDBkRbwMbd5nsgAAAMI"]
[Sat Nov 22 10:37:15.178662 2025] [:error] [pid 53478:tid 53530] [client 139.59.37.180:54430] [client 139.59.37.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/images/"] [unique_id "aSEh2whUYdXBbQswAdSBAwAAAFU"], referer: binance.com
[Sat Nov 22 10:37:21.554405 2025] [:error] [pid 53479:tid 53558] [client 139.59.37.180:57569] [client 139.59.37.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/files/"] [unique_id "aSEh4W6cicFF3Aas-oTh5AAAAJY"], referer: binance.com
[Sat Nov 22 16:14:55.008718 2025] [:error] [pid 9547:tid 9568] [client 98.71.99.66:63432] [client 98.71.99.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aSFw_9ClOR5qk7DoMeF-HQAAAU8"]
[Sat Nov 22 16:14:55.808243 2025] [:error] [pid 53478:tid 53527] [client 98.71.99.66:61134] [client 98.71.99.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aSFw_whUYdXBbQswAdTQQwAAAFI"]
[Sat Nov 22 16:14:56.975904 2025] [:error] [pid 53477:tid 53501] [client 98.71.99.66:61151] [client 98.71.99.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aSFxAH7Lu30Ku9O40aKQzAAAABQ"]
[Sat Nov 22 16:15:01.220237 2025] [:error] [pid 9547:tid 9567] [client 98.71.99.66:63477] [client 98.71.99.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aSFxBdClOR5qk7DoMeF-JQAAAU4"]
[Sat Nov 22 19:09:13.948054 2025] [proxy_fcgi:error] [pid 53479:tid 53550] [client 48.210.12.181:2960] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 19:09:14.067193 2025] [proxy_fcgi:error] [pid 53479:tid 53537] [client 48.210.12.181:2960] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 19:09:14.190492 2025] [proxy_fcgi:error] [pid 53479:tid 53541] [client 48.210.12.181:2960] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 19:09:14.308611 2025] [proxy_fcgi:error] [pid 53479:tid 53560] [client 48.210.12.181:2960] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 19:09:14.426522 2025] [proxy_fcgi:error] [pid 53479:tid 53542] [client 48.210.12.181:2960] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 19:09:14.540602 2025] [:error] [pid 53479:tid 53553] [client 48.210.12.181:2960] [client 48.210.12.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dwelectservices.com.au"] [uri "/fm.php"] [unique_id "aSGZ2m6cicFF3Aas-oSaWQAAAJE"]
[Sat Nov 22 19:09:14.786376 2025] [proxy_fcgi:error] [pid 9547:tid 9559] [client 48.210.12.181:3039] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 19:09:14.912992 2025] [proxy_fcgi:error] [pid 9547:tid 9553] [client 48.210.12.181:3039] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 19:09:15.033511 2025] [proxy_fcgi:error] [pid 9547:tid 9574] [client 48.210.12.181:3039] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 19:09:16.474994 2025] [proxy_fcgi:error] [pid 9547:tid 9576] [client 48.210.12.181:3039] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 19:09:16.591359 2025] [proxy_fcgi:error] [pid 9547:tid 9558] [client 48.210.12.181:3039] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 19:09:16.708992 2025] [:error] [pid 9547:tid 9568] [client 48.210.12.181:3039] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bolt.php"] [unique_id "aSGZ3NClOR5qk7DoMeG-oQAAAU8"]
[Sat Nov 22 19:09:16.954239 2025] [:error] [pid 53477:tid 53491] [client 48.210.12.181:2961] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bolt.php"] [unique_id "aSGZ3H7Lu30Ku9O40aLDOAAAAAo"]
[Sat Nov 22 19:09:17.211544 2025] [:error] [pid 9547:tid 9556] [client 48.210.12.181:2954] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bolt.php"] [unique_id "aSGZ3dClOR5qk7DoMeG-pAAAAUM"]
[Sat Nov 22 19:09:17.443018 2025] [:error] [pid 53477:tid 53496] [client 48.210.12.181:3037] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bolt.php"] [unique_id "aSGZ3X7Lu30Ku9O40aLDOQAAAA8"]
[Sat Nov 22 19:09:17.695170 2025] [:error] [pid 9547:tid 9561] [client 48.210.12.181:3057] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file7.php"] [unique_id "aSGZ3dClOR5qk7DoMeG-pQAAAUg"]
[Sat Nov 22 19:09:17.927619 2025] [:error] [pid 53566:tid 53584] [client 48.210.12.181:3038] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file7.php"] [unique_id "aSGZ3cbSHDBkRbwMbd4yDgAAANA"]
[Sat Nov 22 19:09:18.158501 2025] [:error] [pid 53478:tid 53530] [client 48.210.12.181:2956] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file7.php"] [unique_id "aSGZ3ghUYdXBbQswAdT-bAAAAFU"]
[Sat Nov 22 19:09:18.444666 2025] [:error] [pid 53479:tid 53537] [client 48.210.12.181:2959] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file7.php"] [unique_id "aSGZ3m6cicFF3Aas-oSaZgAAAIE"]
[Sat Nov 22 19:09:18.693223 2025] [:error] [pid 53478:tid 53518] [client 48.210.12.181:2957] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gmo.php"] [unique_id "aSGZ3ghUYdXBbQswAdT-cAAAAEk"]
[Sat Nov 22 19:09:19.016050 2025] [:error] [pid 53477:tid 53489] [client 48.210.12.181:3024] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gmo.php"] [unique_id "aSGZ337Lu30Ku9O40aLDOwAAAAg"]
[Sat Nov 22 19:09:19.276585 2025] [:error] [pid 53566:tid 53580] [client 48.210.12.181:3025] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gmo.php"] [unique_id "aSGZ38bSHDBkRbwMbd4yDwAAAMw"]
[Sat Nov 22 19:09:19.531791 2025] [:error] [pid 9547:tid 9577] [client 48.210.12.181:3045] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gmo.php"] [unique_id "aSGZ39ClOR5qk7DoMeG-qQAAAVg"]
[Sat Nov 22 19:09:19.828418 2025] [:error] [pid 53479:tid 53551] [client 48.210.12.181:3009] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bless2.php"] [unique_id "aSGZ326cicFF3Aas-oSabwAAAI8"]
[Sat Nov 22 19:09:20.086500 2025] [:error] [pid 9547:tid 9554] [client 48.210.12.181:3071] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bless2.php"] [unique_id "aSGZ4NClOR5qk7DoMeG-qwAAAUE"]
[Sat Nov 22 19:09:20.430503 2025] [:error] [pid 9547:tid 9562] [client 48.210.12.181:3032] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bless2.php"] [unique_id "aSGZ4NClOR5qk7DoMeG-rQAAAUk"]
[Sat Nov 22 19:09:20.683479 2025] [:error] [pid 9547:tid 9559] [client 48.210.12.181:3043] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bless2.php"] [unique_id "aSGZ4NClOR5qk7DoMeG-rgAAAUY"]
[Sat Nov 22 19:09:20.925313 2025] [:error] [pid 9547:tid 9555] [client 48.210.12.181:3044] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-blog.php"] [unique_id "aSGZ4NClOR5qk7DoMeG-sQAAAUI"]
[Sat Nov 22 19:09:21.243948 2025] [:error] [pid 53478:tid 53520] [client 48.210.12.181:2967] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-blog.php"] [unique_id "aSGZ4QhUYdXBbQswAdT-dgAAAEs"]
[Sat Nov 22 19:09:21.511207 2025] [:error] [pid 53478:tid 53512] [client 48.210.12.181:2944] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-blog.php"] [unique_id "aSGZ4QhUYdXBbQswAdT-eAAAAEM"]
[Sat Nov 22 19:09:21.783258 2025] [:error] [pid 53566:tid 53592] [client 48.210.12.181:3011] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-blog.php"] [unique_id "aSGZ4cbSHDBkRbwMbd4yEAAAANg"]
[Sat Nov 22 19:09:22.022354 2025] [:error] [pid 53479:tid 53557] [client 48.210.12.181:2902] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-class.php"] [unique_id "aSGZ4m6cicFF3Aas-oSafAAAAJU"]
[Sat Nov 22 19:09:22.255075 2025] [:error] [pid 9547:tid 9556] [client 48.210.12.181:2958] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-class.php"] [unique_id "aSGZ4tClOR5qk7DoMeG-twAAAUM"]
[Sat Nov 22 19:09:22.493717 2025] [:error] [pid 44259:tid 44278] [client 48.210.12.181:3014] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-class.php"] [unique_id "aSGZ4nXe1xL-_YOdRmSBAgAAAZA"]
[Sat Nov 22 19:09:22.720879 2025] [:error] [pid 9547:tid 9577] [client 48.210.12.181:3010] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-class.php"] [unique_id "aSGZ4tClOR5qk7DoMeG-ugAAAVg"]
[Sat Nov 22 19:09:23.071545 2025] [:error] [pid 9547:tid 9563] [client 48.210.12.181:3029] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wsa.php"] [unique_id "aSGZ49ClOR5qk7DoMeG-uwAAAUo"]
[Sat Nov 22 19:09:23.369114 2025] [:error] [pid 9547:tid 9575] [client 48.210.12.181:2981] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wsa.php"] [unique_id "aSGZ49ClOR5qk7DoMeG-vAAAAVY"]
[Sat Nov 22 19:09:23.759473 2025] [:error] [pid 25856:tid 25868] [client 48.210.12.181:3012] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wsa.php"] [unique_id "aSGZ4xsTP0wy94zKUvHDtQAAAQo"]
[Sat Nov 22 19:09:24.017033 2025] [:error] [pid 53566:tid 53574] [client 48.210.12.181:3070] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wsa.php"] [unique_id "aSGZ5MbSHDBkRbwMbd4yEgAAAMY"]
[Sat Nov 22 19:09:24.454365 2025] [:error] [pid 53479:tid 53548] [client 48.210.12.181:3069] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/z.php"] [unique_id "aSGZ5G6cicFF3Aas-oSaiwAAAIw"]
[Sat Nov 22 19:09:24.714341 2025] [:error] [pid 53479:tid 53537] [client 48.210.12.181:3049] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/z.php"] [unique_id "aSGZ5G6cicFF3Aas-oSajAAAAIE"]
[Sat Nov 22 19:09:25.028318 2025] [:error] [pid 53566:tid 53578] [client 48.210.12.181:3031] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/z.php"] [unique_id "aSGZ5cbSHDBkRbwMbd4yFwAAAMo"]
[Sat Nov 22 19:09:25.418461 2025] [:error] [pid 9547:tid 9555] [client 48.210.12.181:3054] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/z.php"] [unique_id "aSGZ5dClOR5qk7DoMeG-wQAAAUI"]
[Sat Nov 22 19:09:25.692787 2025] [:error] [pid 9547:tid 9573] [client 48.210.12.181:2883] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nc4.php"] [unique_id "aSGZ5dClOR5qk7DoMeG-wgAAAVQ"]
[Sat Nov 22 19:09:26.028119 2025] [:error] [pid 44259:tid 44276] [client 48.210.12.181:3021] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nc4.php"] [unique_id "aSGZ5nXe1xL-_YOdRmSBEgAAAY4"]
[Sat Nov 22 19:09:26.276461 2025] [:error] [pid 53477:tid 53486] [client 48.210.12.181:3019] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nc4.php"] [unique_id "aSGZ5n7Lu30Ku9O40aLDSAAAAAU"]
[Sat Nov 22 19:09:26.550400 2025] [:error] [pid 44259:tid 44266] [client 48.210.12.181:2979] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nc4.php"] [unique_id "aSGZ5nXe1xL-_YOdRmSBFAAAAYQ"]
[Sat Nov 22 19:09:26.904531 2025] [:error] [pid 44259:tid 44269] [client 48.210.12.181:2980] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ahax.php"] [unique_id "aSGZ5nXe1xL-_YOdRmSBGAAAAYc"]
[Sat Nov 22 19:09:27.161699 2025] [:error] [pid 53566:tid 53577] [client 48.210.12.181:3033] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ahax.php"] [unique_id "aSGZ58bSHDBkRbwMbd4yGwAAAMk"]
[Sat Nov 22 19:09:27.448917 2025] [:error] [pid 9547:tid 9574] [client 48.210.12.181:3047] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ahax.php"] [unique_id "aSGZ59ClOR5qk7DoMeG-xQAAAVU"]
[Sat Nov 22 19:09:27.702743 2025] [:error] [pid 9547:tid 9568] [client 48.210.12.181:2951] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ahax.php"] [unique_id "aSGZ59ClOR5qk7DoMeG-xwAAAU8"]
[Sat Nov 22 19:09:27.965375 2025] [:error] [pid 53477:tid 53496] [client 48.210.12.181:2984] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dejavu.php"] [unique_id "aSGZ537Lu30Ku9O40aLDSgAAAA8"]
[Sat Nov 22 19:09:28.296778 2025] [:error] [pid 9547:tid 9569] [client 48.210.12.181:2999] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dejavu.php"] [unique_id "aSGZ6NClOR5qk7DoMeG-yQAAAVA"]
[Sat Nov 22 19:09:28.628585 2025] [:error] [pid 53478:tid 53509] [client 48.210.12.181:2964] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dejavu.php"] [unique_id "aSGZ6AhUYdXBbQswAdT-fAAAAEA"]
[Sat Nov 22 19:09:28.882003 2025] [:error] [pid 53478:tid 53519] [client 48.210.12.181:2966] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dejavu.php"] [unique_id "aSGZ6AhUYdXBbQswAdT-fQAAAEo"]
[Sat Nov 22 19:09:29.122755 2025] [:error] [pid 9547:tid 9556] [client 48.210.12.181:3030] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/config.php"] [unique_id "aSGZ6dClOR5qk7DoMeG-ywAAAUM"]
[Sat Nov 22 19:09:29.496659 2025] [:error] [pid 25856:tid 25880] [client 48.210.12.181:2953] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/config.php"] [unique_id "aSGZ6RsTP0wy94zKUvHDvAAAARY"]
[Sat Nov 22 19:09:29.763789 2025] [:error] [pid 53478:tid 53528] [client 48.210.12.181:2963] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/config.php"] [unique_id "aSGZ6QhUYdXBbQswAdT-fgAAAFM"]
[Sat Nov 22 19:09:30.106017 2025] [:error] [pid 44259:tid 44263] [client 48.210.12.181:3040] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/config.php"] [unique_id "aSGZ6nXe1xL-_YOdRmSBJQAAAYE"]
[Sat Nov 22 19:09:30.336912 2025] [:error] [pid 44259:tid 44285] [client 48.210.12.181:2949] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/atomlib.php"] [unique_id "aSGZ6nXe1xL-_YOdRmSBJwAAAZc"]
[Sat Nov 22 19:09:30.567868 2025] [:error] [pid 53566:tid 53579] [client 48.210.12.181:3036] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/atomlib.php"] [unique_id "aSGZ6sbSHDBkRbwMbd4yIgAAAMs"]
[Sat Nov 22 19:09:30.796915 2025] [:error] [pid 9547:tid 9559] [client 48.210.12.181:3059] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/atomlib.php"] [unique_id "aSGZ6tClOR5qk7DoMeG-0gAAAUY"]
[Sat Nov 22 19:09:31.037851 2025] [:error] [pid 44259:tid 44278] [client 48.210.12.181:3068] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/atomlib.php"] [unique_id "aSGZ63Xe1xL-_YOdRmSBMAAAAZA"]
[Sat Nov 22 19:09:31.341738 2025] [:error] [pid 53478:tid 53525] [client 48.210.12.181:3051] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/css.php"] [unique_id "aSGZ6whUYdXBbQswAdT-fwAAAFA"]
[Sat Nov 22 19:09:31.597804 2025] [:error] [pid 53566:tid 53583] [client 48.210.12.181:3060] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/css.php"] [unique_id "aSGZ68bSHDBkRbwMbd4yKAAAAM8"]
[Sat Nov 22 19:09:31.835293 2025] [:error] [pid 9547:tid 9573] [client 48.210.12.181:2911] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/css.php"] [unique_id "aSGZ69ClOR5qk7DoMeG-1gAAAVQ"]
[Sat Nov 22 19:09:32.133496 2025] [:error] [pid 53478:tid 53521] [client 48.210.12.181:2974] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/css.php"] [unique_id "aSGZ7AhUYdXBbQswAdT-gAAAAEw"]
[Sat Nov 22 19:09:32.368245 2025] [:error] [pid 25856:tid 25872] [client 48.210.12.181:3030] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/past.php"] [unique_id "aSGZ7BsTP0wy94zKUvHDvwAAAQ4"]
[Sat Nov 22 19:09:32.664482 2025] [:error] [pid 53479:tid 53547] [client 48.210.12.181:3063] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/past.php"] [unique_id "aSGZ7G6cicFF3Aas-oSanQAAAIs"]
[Sat Nov 22 19:09:32.892246 2025] [:error] [pid 25856:tid 25866] [client 48.210.12.181:3052] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/past.php"] [unique_id "aSGZ7BsTP0wy94zKUvHDwQAAAQg"]
[Sat Nov 22 19:09:33.119464 2025] [:error] [pid 53566:tid 53581] [client 48.210.12.181:2907] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/past.php"] [unique_id "aSGZ7cbSHDBkRbwMbd4yLAAAAM0"]
[Sat Nov 22 19:09:33.376305 2025] [:error] [pid 53566:tid 53590] [client 48.210.12.181:3022] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin.php"] [unique_id "aSGZ7cbSHDBkRbwMbd4yLQAAANY"]
[Sat Nov 22 19:09:33.671003 2025] [:error] [pid 53566:tid 53584] [client 48.210.12.181:3064] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin.php"] [unique_id "aSGZ7cbSHDBkRbwMbd4yLgAAANA"]
[Sat Nov 22 19:09:33.903724 2025] [:error] [pid 53478:tid 53512] [client 48.210.12.181:2989] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin.php"] [unique_id "aSGZ7QhUYdXBbQswAdT-hAAAAEM"]
[Sat Nov 22 19:09:34.131665 2025] [:error] [pid 53566:tid 53589] [client 48.210.12.181:3020] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin.php"] [unique_id "aSGZ7sbSHDBkRbwMbd4yMAAAANU"]
[Sat Nov 22 19:09:34.414317 2025] [:error] [pid 53478:tid 53513] [client 48.210.12.181:2964] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ol.php"] [unique_id "aSGZ7ghUYdXBbQswAdT-hgAAAEQ"]
[Sat Nov 22 19:09:34.666636 2025] [:error] [pid 44259:tid 44278] [client 48.210.12.181:3055] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ol.php"] [unique_id "aSGZ7nXe1xL-_YOdRmSBUgAAAZA"]
[Sat Nov 22 19:09:34.904533 2025] [:error] [pid 25856:tid 25876] [client 48.210.12.181:2998] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ol.php"] [unique_id "aSGZ7hsTP0wy94zKUvHDxAAAARI"]
[Sat Nov 22 19:09:35.168247 2025] [:error] [pid 53566:tid 53585] [client 48.210.12.181:3035] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ol.php"] [unique_id "aSGZ78bSHDBkRbwMbd4yMwAAANE"]
[Sat Nov 22 19:09:35.441542 2025] [:error] [pid 25856:tid 25868] [client 48.210.12.181:2978] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/we.php"] [unique_id "aSGZ7xsTP0wy94zKUvHDxQAAAQo"]
[Sat Nov 22 19:09:35.764882 2025] [:error] [pid 25856:tid 25858] [client 48.210.12.181:2949] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/we.php"] [unique_id "aSGZ7xsTP0wy94zKUvHDxwAAAQA"]
[Sat Nov 22 19:09:36.019793 2025] [:error] [pid 25856:tid 25860] [client 48.210.12.181:3061] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/we.php"] [unique_id "aSGZ8BsTP0wy94zKUvHDyQAAAQI"]
[Sat Nov 22 19:09:36.346759 2025] [:error] [pid 44259:tid 44269] [client 48.210.12.181:2996] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/we.php"] [unique_id "aSGZ8HXe1xL-_YOdRmSBWgAAAYc"]
[Sat Nov 22 19:09:36.684047 2025] [:error] [pid 44259:tid 44270] [client 48.210.12.181:2881] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/404.php"] [unique_id "aSGZ8HXe1xL-_YOdRmSBYQAAAYg"]
[Sat Nov 22 19:09:36.956465 2025] [:error] [pid 9547:tid 9561] [client 48.210.12.181:2973] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/404.php"] [unique_id "aSGZ8NClOR5qk7DoMeG-3wAAAUg"]
[Sat Nov 22 19:09:37.238893 2025] [:error] [pid 44259:tid 44278] [client 48.210.12.181:3067] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/404.php"] [unique_id "aSGZ8XXe1xL-_YOdRmSBZQAAAZA"]
[Sat Nov 22 19:09:37.602335 2025] [:error] [pid 53477:tid 53490] [client 48.210.12.181:2917] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/404.php"] [unique_id "aSGZ8X7Lu30Ku9O40aLDUwAAAAk"]
[Sat Nov 22 19:09:37.902487 2025] [:error] [pid 53479:tid 53546] [client 48.210.12.181:3065] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/goods.php"] [unique_id "aSGZ8W6cicFF3Aas-oSaqAAAAIo"]
[Sat Nov 22 19:09:38.274915 2025] [:error] [pid 25856:tid 25862] [client 48.210.12.181:2939] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/goods.php"] [unique_id "aSGZ8hsTP0wy94zKUvHDzAAAAQQ"]
[Sat Nov 22 19:09:38.592168 2025] [:error] [pid 44259:tid 44263] [client 48.210.12.181:3062] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/goods.php"] [unique_id "aSGZ8nXe1xL-_YOdRmSBagAAAYE"]
[Sat Nov 22 19:09:38.937491 2025] [:error] [pid 53477:tid 53496] [client 48.210.12.181:2970] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/goods.php"] [unique_id "aSGZ8n7Lu30Ku9O40aLDVwAAAA8"]
[Sat Nov 22 19:09:39.220870 2025] [:error] [pid 53477:tid 53491] [client 48.210.12.181:3007] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/build.php"] [unique_id "aSGZ837Lu30Ku9O40aLDWAAAAAo"]
[Sat Nov 22 19:09:39.600518 2025] [:error] [pid 9547:tid 9564] [client 48.210.12.181:3048] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/build.php"] [unique_id "aSGZ89ClOR5qk7DoMeG-4QAAAUs"]
[Sat Nov 22 19:09:39.867863 2025] [:error] [pid 53477:tid 53482] [client 48.210.12.181:2992] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/build.php"] [unique_id "aSGZ837Lu30Ku9O40aLDWQAAAAE"]
[Sat Nov 22 19:09:40.163370 2025] [:error] [pid 25856:tid 25866] [client 48.210.12.181:2889] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/build.php"] [unique_id "aSGZ9BsTP0wy94zKUvHD0QAAAQg"]
[Sat Nov 22 19:09:40.630633 2025] [:error] [pid 53478:tid 53520] [client 48.210.12.181:2986] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ot.php"] [unique_id "aSGZ9AhUYdXBbQswAdT-lgAAAEs"]
[Sat Nov 22 19:09:40.893624 2025] [:error] [pid 9547:tid 9559] [client 48.210.12.181:2885] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ot.php"] [unique_id "aSGZ9NClOR5qk7DoMeG-4gAAAUY"]
[Sat Nov 22 19:09:41.272211 2025] [:error] [pid 53478:tid 53529] [client 48.210.12.181:2968] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ot.php"] [unique_id "aSGZ9QhUYdXBbQswAdT-lwAAAFQ"]
[Sat Nov 22 19:09:41.522797 2025] [:error] [pid 53478:tid 53524] [client 48.210.12.181:3058] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ot.php"] [unique_id "aSGZ9QhUYdXBbQswAdT-mgAAAE8"]
[Sat Nov 22 19:09:41.974292 2025] [:error] [pid 25856:tid 25868] [client 48.210.12.181:3042] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lc.php"] [unique_id "aSGZ9RsTP0wy94zKUvHD1AAAAQo"]
[Sat Nov 22 19:09:42.337275 2025] [:error] [pid 53477:tid 53501] [client 48.210.12.181:2947] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lc.php"] [unique_id "aSGZ9n7Lu30Ku9O40aLDWwAAABQ"]
[Sat Nov 22 19:09:42.629418 2025] [:error] [pid 25856:tid 25865] [client 48.210.12.181:3013] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lc.php"] [unique_id "aSGZ9hsTP0wy94zKUvHD1QAAAQc"]
[Sat Nov 22 19:09:42.985125 2025] [:error] [pid 53479:tid 53538] [client 48.210.12.181:2983] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lc.php"] [unique_id "aSGZ9m6cicFF3Aas-oSaswAAAII"]
[Sat Nov 22 19:09:43.227442 2025] [:error] [pid 9547:tid 9571] [client 48.210.12.181:2987] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cool.php"] [unique_id "aSGZ99ClOR5qk7DoMeG-5wAAAVI"]
[Sat Nov 22 19:09:43.476147 2025] [:error] [pid 9547:tid 9568] [client 48.210.12.181:3000] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cool.php"] [unique_id "aSGZ99ClOR5qk7DoMeG-6AAAAU8"]
[Sat Nov 22 19:09:43.780128 2025] [:error] [pid 53479:tid 53543] [client 48.210.12.181:2903] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cool.php"] [unique_id "aSGZ926cicFF3Aas-oSatQAAAIc"]
[Sat Nov 22 19:09:44.036423 2025] [:error] [pid 53479:tid 53536] [client 48.210.12.181:2890] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cool.php"] [unique_id "aSGZ-G6cicFF3Aas-oSatgAAAIA"]
[Sat Nov 22 19:09:44.458900 2025] [:error] [pid 9547:tid 9569] [client 48.210.12.181:2884] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/manager.php"] [unique_id "aSGZ-NClOR5qk7DoMeG-6wAAAVA"]
[Sat Nov 22 19:09:44.727510 2025] [:error] [pid 9547:tid 9556] [client 48.210.12.181:2997] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/manager.php"] [unique_id "aSGZ-NClOR5qk7DoMeG-7AAAAUM"]
[Sat Nov 22 19:09:44.995480 2025] [:error] [pid 44259:tid 44267] [client 48.210.12.181:2827] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/manager.php"] [unique_id "aSGZ-HXe1xL-_YOdRmSBeAAAAYU"]
[Sat Nov 22 19:09:45.290565 2025] [:error] [pid 53478:tid 53518] [client 48.210.12.181:2977] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/manager.php"] [unique_id "aSGZ-QhUYdXBbQswAdT-oAAAAEk"]
[Sat Nov 22 19:09:45.530936 2025] [:error] [pid 44259:tid 44281] [client 48.210.12.181:2962] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aa.php"] [unique_id "aSGZ-XXe1xL-_YOdRmSBfAAAAZM"]
[Sat Nov 22 19:09:45.762904 2025] [:error] [pid 25856:tid 25862] [client 48.210.12.181:3027] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aa.php"] [unique_id "aSGZ-RsTP0wy94zKUvHD2wAAAQQ"]
[Sat Nov 22 19:09:45.992485 2025] [:error] [pid 25856:tid 25867] [client 48.210.12.181:2895] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aa.php"] [unique_id "aSGZ-RsTP0wy94zKUvHD3AAAAQk"]
[Sat Nov 22 19:09:46.234868 2025] [:error] [pid 44259:tid 44275] [client 48.210.12.181:2972] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aa.php"] [unique_id "aSGZ-nXe1xL-_YOdRmSBfgAAAY0"]
[Sat Nov 22 19:09:46.559076 2025] [:error] [pid 44259:tid 44279] [client 48.210.12.181:2985] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gfile.php"] [unique_id "aSGZ-nXe1xL-_YOdRmSBgAAAAZE"]
[Sat Nov 22 19:09:46.807743 2025] [:error] [pid 53566:tid 53580] [client 48.210.12.181:2891] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gfile.php"] [unique_id "aSGZ-sbSHDBkRbwMbd4yQAAAAMw"]
[Sat Nov 22 19:09:47.049633 2025] [:error] [pid 44259:tid 44285] [client 48.210.12.181:2948] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gfile.php"] [unique_id "aSGZ-3Xe1xL-_YOdRmSBgQAAAZc"]
[Sat Nov 22 19:09:47.389443 2025] [:error] [pid 9547:tid 9572] [client 48.210.12.181:3028] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gfile.php"] [unique_id "aSGZ-9ClOR5qk7DoMeG-8gAAAVM"]
[Sat Nov 22 19:09:47.625779 2025] [:error] [pid 25856:tid 25879] [client 48.210.12.181:2934] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file5.php"] [unique_id "aSGZ-xsTP0wy94zKUvHD3wAAARU"]
[Sat Nov 22 19:09:47.894197 2025] [:error] [pid 53477:tid 53495] [client 48.210.12.181:2976] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file5.php"] [unique_id "aSGZ-37Lu30Ku9O40aLDYAAAAA4"]
[Sat Nov 22 19:09:48.199817 2025] [:error] [pid 9547:tid 9576] [client 48.210.12.181:2945] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file5.php"] [unique_id "aSGZ_NClOR5qk7DoMeG-8wAAAVc"]
[Sat Nov 22 19:09:48.430705 2025] [:error] [pid 25856:tid 25866] [client 48.210.12.181:3046] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file5.php"] [unique_id "aSGZ_BsTP0wy94zKUvHD4AAAAQg"]
[Sat Nov 22 19:09:48.677795 2025] [:error] [pid 53477:tid 53485] [client 48.210.12.181:2893] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/k.php"] [unique_id "aSGZ_H7Lu30Ku9O40aLDYQAAAAQ"]
[Sat Nov 22 19:09:48.919547 2025] [:error] [pid 25856:tid 25881] [client 48.210.12.181:2887] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/k.php"] [unique_id "aSGZ_BsTP0wy94zKUvHD4QAAARc"]
[Sat Nov 22 19:09:49.227816 2025] [:error] [pid 53479:tid 53548] [client 48.210.12.181:2902] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/k.php"] [unique_id "aSGZ_W6cicFF3Aas-oSaxAAAAIw"]
[Sat Nov 22 19:09:49.468290 2025] [:error] [pid 44259:tid 44262] [client 48.210.12.181:2993] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/k.php"] [unique_id "aSGZ_XXe1xL-_YOdRmSBhQAAAYA"]
[Sat Nov 22 19:09:49.767493 2025] [:error] [pid 53566:tid 53583] [client 48.210.12.181:3001] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/num.php"] [unique_id "aSGZ_cbSHDBkRbwMbd4yQQAAAM8"]
[Sat Nov 22 19:09:50.043981 2025] [:error] [pid 53479:tid 53536] [client 48.210.12.181:2937] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/num.php"] [unique_id "aSGZ_m6cicFF3Aas-oSaygAAAIA"]
[Sat Nov 22 19:09:50.392626 2025] [:error] [pid 53479:tid 53549] [client 48.210.12.181:3053] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/num.php"] [unique_id "aSGZ_m6cicFF3Aas-oSazQAAAI0"]
[Sat Nov 22 19:09:50.635011 2025] [:error] [pid 53479:tid 53546] [client 48.210.12.181:2952] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/num.php"] [unique_id "aSGZ_m6cicFF3Aas-oSazwAAAIo"]
[Sat Nov 22 19:09:50.866469 2025] [:error] [pid 53477:tid 53488] [client 48.210.12.181:2910] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/astab.php"] [unique_id "aSGZ_n7Lu30Ku9O40aLDYgAAAAc"]
[Sat Nov 22 19:09:51.108492 2025] [:error] [pid 53478:tid 53512] [client 48.210.12.181:3004] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/astab.php"] [unique_id "aSGZ_whUYdXBbQswAdT-ogAAAEM"]
[Sat Nov 22 19:09:51.352014 2025] [:error] [pid 44259:tid 44264] [client 48.210.12.181:3066] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/astab.php"] [unique_id "aSGZ_3Xe1xL-_YOdRmSBiwAAAYI"]
[Sat Nov 22 19:09:51.599773 2025] [:error] [pid 53478:tid 53529] [client 48.210.12.181:2933] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/astab.php"] [unique_id "aSGZ_whUYdXBbQswAdT-pQAAAFQ"]
[Sat Nov 22 19:09:51.834225 2025] [:error] [pid 9547:tid 9572] [client 48.210.12.181:2906] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xl.php"] [unique_id "aSGZ_9ClOR5qk7DoMeG_AwAAAVM"]
[Sat Nov 22 19:09:52.079865 2025] [:error] [pid 9547:tid 9554] [client 48.210.12.181:2927] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xl.php"] [unique_id "aSGaANClOR5qk7DoMeG_BwAAAUE"]
[Sat Nov 22 19:09:52.349848 2025] [:error] [pid 9547:tid 9568] [client 48.210.12.181:3026] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xl.php"] [unique_id "aSGaANClOR5qk7DoMeG_CQAAAU8"]
[Sat Nov 22 19:09:52.588467 2025] [:error] [pid 44259:tid 44285] [client 48.210.12.181:2969] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xl.php"] [unique_id "aSGaAHXe1xL-_YOdRmSBjgAAAZc"]
[Sat Nov 22 19:09:52.844062 2025] [:error] [pid 53478:tid 53527] [client 48.210.12.181:2928] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file17.php"] [unique_id "aSGaAAhUYdXBbQswAdT-pwAAAFI"]
[Sat Nov 22 19:09:53.072218 2025] [:error] [pid 44259:tid 44276] [client 48.210.12.181:2940] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file17.php"] [unique_id "aSGaAXXe1xL-_YOdRmSBkAAAAY4"]
[Sat Nov 22 19:09:53.299045 2025] [:error] [pid 9547:tid 9565] [client 48.210.12.181:2839] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file17.php"] [unique_id "aSGaAdClOR5qk7DoMeG_EQAAAUw"]
[Sat Nov 22 19:09:53.526749 2025] [:error] [pid 53566:tid 53573] [client 48.210.12.181:2971] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file17.php"] [unique_id "aSGaAcbSHDBkRbwMbd4yQwAAAMU"]
[Sat Nov 22 19:09:53.765411 2025] [:error] [pid 53478:tid 53526] [client 48.210.12.181:2975] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/pepe.php"] [unique_id "aSGaAQhUYdXBbQswAdT-qAAAAFE"]
[Sat Nov 22 19:09:54.005278 2025] [:error] [pid 53566:tid 53572] [client 48.210.12.181:2899] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/pepe.php"] [unique_id "aSGaAsbSHDBkRbwMbd4yRAAAAMQ"]
[Sat Nov 22 19:09:54.344381 2025] [:error] [pid 53566:tid 53586] [client 48.210.12.181:2935] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/pepe.php"] [unique_id "aSGaAsbSHDBkRbwMbd4yRQAAANI"]
[Sat Nov 22 19:09:54.576621 2025] [:error] [pid 53566:tid 53581] [client 48.210.12.181:2822] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/pepe.php"] [unique_id "aSGaAsbSHDBkRbwMbd4yRwAAAM0"]
[Sat Nov 22 19:09:54.829291 2025] [:error] [pid 53477:tid 53489] [client 48.210.12.181:2894] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/about.php"] [unique_id "aSGaAn7Lu30Ku9O40aLDaAAAAAg"]
[Sat Nov 22 19:09:55.070892 2025] [:error] [pid 53566:tid 53584] [client 48.210.12.181:2946] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/about.php"] [unique_id "aSGaA8bSHDBkRbwMbd4ySQAAANA"]
[Sat Nov 22 19:09:55.310876 2025] [:error] [pid 53566:tid 53589] [client 48.210.12.181:3041] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/about.php"] [unique_id "aSGaA8bSHDBkRbwMbd4ySgAAANU"]
[Sat Nov 22 19:09:55.553619 2025] [:error] [pid 9547:tid 9574] [client 48.210.12.181:3003] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/about.php"] [unique_id "aSGaA9ClOR5qk7DoMeG_GwAAAVU"]
[Sat Nov 22 19:09:55.836285 2025] [:error] [pid 53566:tid 53590] [client 48.210.12.181:2950] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-update.php"] [unique_id "aSGaA8bSHDBkRbwMbd4ySwAAANY"]
[Sat Nov 22 19:09:56.163219 2025] [:error] [pid 53566:tid 53592] [client 48.210.12.181:2929] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-update.php"] [unique_id "aSGaBMbSHDBkRbwMbd4yTAAAANg"]
[Sat Nov 22 19:09:56.428539 2025] [:error] [pid 53478:tid 53518] [client 48.210.12.181:2925] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-update.php"] [unique_id "aSGaBAhUYdXBbQswAdT-qwAAAEk"]
[Sat Nov 22 19:09:56.782460 2025] [:error] [pid 53478:tid 53519] [client 48.210.12.181:2892] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-update.php"] [unique_id "aSGaBAhUYdXBbQswAdT-rQAAAEo"]
[Sat Nov 22 19:09:57.591615 2025] [:error] [pid 53478:tid 53533] [client 48.210.12.181:2928] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bless.php"] [unique_id "aSGaBQhUYdXBbQswAdT-rwAAAFg"]
[Sat Nov 22 19:09:59.495819 2025] [:error] [pid 25856:tid 25871] [client 48.210.12.181:2913] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bless.php"] [unique_id "aSGaBxsTP0wy94zKUvHD7AAAAQ0"]
[Sat Nov 22 19:10:00.583072 2025] [:error] [pid 25856:tid 25867] [client 48.210.12.181:3002] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bless.php"] [unique_id "aSGaCBsTP0wy94zKUvHD7QAAAQk"]
[Sat Nov 22 19:10:01.048374 2025] [:error] [pid 25856:tid 25861] [client 48.210.12.181:2880] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bless.php"] [unique_id "aSGaCRsTP0wy94zKUvHD7gAAAQM"]
[Sat Nov 22 19:10:01.595495 2025] [:error] [pid 53479:tid 53540] [client 48.210.12.181:2829] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/faq.php"] [unique_id "aSGaCW6cicFF3Aas-oSa3wAAAIQ"]
[Sat Nov 22 19:10:01.944058 2025] [:error] [pid 53477:tid 53496] [client 48.210.12.181:2988] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/faq.php"] [unique_id "aSGaCX7Lu30Ku9O40aLDcQAAAA8"]
[Sat Nov 22 19:10:02.262879 2025] [:error] [pid 53477:tid 53491] [client 48.210.12.181:2955] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/faq.php"] [unique_id "aSGaCn7Lu30Ku9O40aLDdAAAAAo"]
[Sat Nov 22 19:10:02.509870 2025] [:error] [pid 9547:tid 9557] [client 48.210.12.181:2888] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/faq.php"] [unique_id "aSGaCtClOR5qk7DoMeG_LwAAAUQ"]
[Sat Nov 22 19:10:02.788306 2025] [:error] [pid 53479:tid 53547] [client 48.210.12.181:2816] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/abcd.php"] [unique_id "aSGaCm6cicFF3Aas-oSa4QAAAIs"]
[Sat Nov 22 19:10:03.037725 2025] [:error] [pid 44259:tid 44273] [client 48.210.12.181:3008] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/abcd.php"] [unique_id "aSGaC3Xe1xL-_YOdRmSBogAAAYs"]
[Sat Nov 22 19:10:03.288672 2025] [:error] [pid 53477:tid 53500] [client 48.210.12.181:3034] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/abcd.php"] [unique_id "aSGaC37Lu30Ku9O40aLDdwAAABM"]
[Sat Nov 22 19:10:03.569261 2025] [:error] [pid 53477:tid 53483] [client 48.210.12.181:2836] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/abcd.php"] [unique_id "aSGaC37Lu30Ku9O40aLDegAAAAI"]
[Sat Nov 22 19:10:03.844294 2025] [:error] [pid 9547:tid 9575] [client 48.210.12.181:2921] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/CLA.php"] [unique_id "aSGaC9ClOR5qk7DoMeG_NAAAAVY"]
[Sat Nov 22 19:10:04.178185 2025] [:error] [pid 53477:tid 53503] [client 48.210.12.181:2908] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/CLA.php"] [unique_id "aSGaDH7Lu30Ku9O40aLDfgAAABY"]
[Sat Nov 22 19:10:04.418819 2025] [:error] [pid 53566:tid 53568] [client 48.210.12.181:3006] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/CLA.php"] [unique_id "aSGaDMbSHDBkRbwMbd4yUAAAAMA"]
[Sat Nov 22 19:10:04.817923 2025] [:error] [pid 25856:tid 25879] [client 48.210.12.181:2930] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/CLA.php"] [unique_id "aSGaDBsTP0wy94zKUvHD8QAAARU"]
[Sat Nov 22 19:10:05.106846 2025] [:error] [pid 53478:tid 53522] [client 48.210.12.181:2965] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/chosen.php"] [unique_id "aSGaDQhUYdXBbQswAdT-tQAAAE0"]
[Sat Nov 22 19:10:05.487568 2025] [:error] [pid 53477:tid 53491] [client 48.210.12.181:2897] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/chosen.php"] [unique_id "aSGaDX7Lu30Ku9O40aLDhgAAAAo"]
[Sat Nov 22 19:10:05.750899 2025] [:error] [pid 25856:tid 25866] [client 48.210.12.181:2982] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/chosen.php"] [unique_id "aSGaDRsTP0wy94zKUvHD8gAAAQg"]
[Sat Nov 22 19:10:06.133729 2025] [:error] [pid 44259:tid 44271] [client 48.210.12.181:2821] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/chosen.php"] [unique_id "aSGaDnXe1xL-_YOdRmSBqQAAAYk"]
[Sat Nov 22 19:10:06.540861 2025] [:error] [pid 25856:tid 25876] [client 48.210.12.181:2826] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-mn.php"] [unique_id "aSGaDhsTP0wy94zKUvHD9QAAARI"]
[Sat Nov 22 19:10:06.913647 2025] [:error] [pid 53478:tid 53532] [client 48.210.12.181:2994] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-mn.php"] [unique_id "aSGaDghUYdXBbQswAdT-twAAAFc"]
[Sat Nov 22 19:10:07.194565 2025] [:error] [pid 53478:tid 53525] [client 48.210.12.181:2825] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-mn.php"] [unique_id "aSGaDwhUYdXBbQswAdT-ugAAAFA"]
[Sat Nov 22 19:10:07.548360 2025] [:error] [pid 25856:tid 25868] [client 48.210.12.181:2856] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-mn.php"] [unique_id "aSGaDxsTP0wy94zKUvHD-AAAAQo"]
[Sat Nov 22 19:10:07.784490 2025] [:error] [pid 25856:tid 25865] [client 48.210.12.181:2936] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ss.php"] [unique_id "aSGaDxsTP0wy94zKUvHD-QAAAQc"]
[Sat Nov 22 19:10:08.059864 2025] [:error] [pid 25856:tid 25864] [client 48.210.12.181:2901] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ss.php"] [unique_id "aSGaEBsTP0wy94zKUvHD-gAAAQY"]
[Sat Nov 22 19:10:08.324919 2025] [:error] [pid 25856:tid 25860] [client 48.210.12.181:3008] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ss.php"] [unique_id "aSGaEBsTP0wy94zKUvHD_AAAAQI"]
[Sat Nov 22 19:10:08.584739 2025] [:error] [pid 25856:tid 25873] [client 48.210.12.181:3060] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ss.php"] [unique_id "aSGaEBsTP0wy94zKUvHD_QAAAQ8"]
[Sat Nov 22 19:10:08.900461 2025] [:error] [pid 53566:tid 53573] [client 48.210.12.181:3056] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-logiin.php"] [unique_id "aSGaEMbSHDBkRbwMbd4yVAAAAMU"]
[Sat Nov 22 19:10:09.153743 2025] [:error] [pid 44259:tid 44284] [client 48.210.12.181:2833] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-logiin.php"] [unique_id "aSGaEXXe1xL-_YOdRmSBswAAAZY"]
[Sat Nov 22 19:10:09.634074 2025] [:error] [pid 44259:tid 44281] [client 48.210.12.181:2919] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-logiin.php"] [unique_id "aSGaEXXe1xL-_YOdRmSBtQAAAZM"]
[Sat Nov 22 19:10:09.997405 2025] [:error] [pid 53477:tid 53500] [client 48.210.12.181:3018] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-logiin.php"] [unique_id "aSGaEX7Lu30Ku9O40aLDmQAAABM"]
[Sun Nov 23 02:41:49.354694 2025] [:error] [pid 39719:tid 39798] [client 216.126.225.91:49246] [client 216.126.225.91] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.git/config"] [unique_id "aSID7RmP4k0tY5Yex-XjMAAAARY"]
[Sun Nov 23 09:29:58.497939 2025] [:error] [pid 38739:tid 38783] [client 54.226.125.235:55382] [client 54.226.125.235] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.git/config"] [unique_id "aSJjlgdvEgJm2n2cDmp0PwAAAE4"]
[Sun Nov 23 09:38:26.409326 2025] [proxy_fcgi:error] [pid 38740:tid 38805] [client 167.71.203.246:58537] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 13:20:15.575387 2025] [:error] [pid 38740:tid 38817] [client 54.226.125.235:56170] [client 54.226.125.235] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dwelectservices.com.au"] [uri "/.git/config"] [unique_id "aSKZjw13QPZSi6O8umUsAwAAAJU"]
[Sun Nov 23 13:28:35.786394 2025] [:error] [pid 38738:tid 38758] [client 134.122.13.30:58065] [client 134.122.13.30] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 134.122.13.30, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-login.php"] [unique_id "aSKbgwytc6TL9XavPmN-WgAAABA"]
[Sun Nov 23 13:28:35.796724 2025] [proxy_fcgi:error] [pid 38738:tid 38758] [client 134.122.13.30:58065] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 14:02:12.430149 2025] [:error] [pid 44652:tid 44714] [client 108.162.226.29:14293] [client 108.162.226.29] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.git/config"] [unique_id "aSKjZNiQFwsyXQDhwyBdRgAAAQg"]
[Sun Nov 23 16:45:30.294290 2025] [proxy_fcgi:error] [pid 38740:tid 38816] [client 140.99.1.15:23789] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:45:30.407312 2025] [proxy_fcgi:error] [pid 38740:tid 38808] [client 140.99.1.15:23789] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:45:30.616649 2025] [proxy_fcgi:error] [pid 38740:tid 38803] [client 140.99.1.15:23789] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:45:30.789598 2025] [proxy_fcgi:error] [pid 38740:tid 38815] [client 140.99.1.15:23789] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:45:30.949788 2025] [proxy_fcgi:error] [pid 38740:tid 38808] [client 140.99.1.15:23789] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:45:31.155620 2025] [proxy_fcgi:error] [pid 38740:tid 38811] [client 140.99.1.15:23789] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:45:31.355656 2025] [proxy_fcgi:error] [pid 38740:tid 38804] [client 140.99.1.15:23789] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:45:31.527612 2025] [proxy_fcgi:error] [pid 38740:tid 38819] [client 140.99.1.15:23789] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:45:31.784609 2025] [proxy_fcgi:error] [pid 38740:tid 38819] [client 140.99.1.15:23789] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:45:32.190630 2025] [proxy_fcgi:error] [pid 38740:tid 38798] [client 140.99.1.15:23789] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:45:32.325909 2025] [proxy_fcgi:error] [pid 38740:tid 38805] [client 140.99.1.15:23789] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:45:32.427629 2025] [proxy_fcgi:error] [pid 38740:tid 38808] [client 140.99.1.15:23789] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:45:32.541082 2025] [proxy_fcgi:error] [pid 38740:tid 38798] [client 140.99.1.15:23789] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:45:32.777871 2025] [proxy_fcgi:error] [pid 38740:tid 38803] [client 140.99.1.15:23789] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:45:32.970954 2025] [proxy_fcgi:error] [pid 38740:tid 38811] [client 140.99.1.15:23789] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:45:33.159605 2025] [proxy_fcgi:error] [pid 38740:tid 38807] [client 140.99.1.15:23789] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:45:33.379623 2025] [proxy_fcgi:error] [pid 38740:tid 38803] [client 140.99.1.15:23789] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:45:33.779233 2025] [proxy_fcgi:error] [pid 38740:tid 38807] [client 140.99.1.15:23789] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:45:36.618915 2025] [:error] [pid 38740:tid 38820] [client 140.99.1.15:23789] [client 140.99.1.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aSLJsA13QPZSi6O8umWmOQAAAJg"]
[Sun Nov 23 16:45:38.007195 2025] [:error] [pid 16066:tid 16071] [client 140.99.1.62:55867] [client 140.99.1.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aSLJsfq-c47Q5mW5E9F39AAAAYI"]
[Sun Nov 23 16:45:38.782614 2025] [proxy_fcgi:error] [pid 38738:tid 38748] [client 140.99.1.15:64341] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:45:39.493066 2025] [:error] [pid 38738:tid 38758] [client 140.99.1.15:64341] [client 140.99.1.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dwelectservices.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aSLJswytc6TL9XavPmMJsQAAABA"]
[Sun Nov 23 16:45:40.260776 2025] [proxy_fcgi:error] [pid 16066:tid 16074] [client 140.99.1.78:30633] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:45:40.378795 2025] [:error] [pid 16066:tid 16091] [client 140.99.1.78:30633] [client 140.99.1.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aSLJtPq-c47Q5mW5E9F4QAAAAZY"]
[Sun Nov 23 16:45:41.027709 2025] [proxy_fcgi:error] [pid 38739:tid 38789] [client 140.99.1.69:38939] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:45:42.065961 2025] [:error] [pid 38739:tid 38779] [client 140.99.1.69:38939] [client 140.99.1.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aSLJtgdvEgJm2n2cDmo29AAAAEo"]
[Sun Nov 23 16:45:42.634301 2025] [:error] [pid 38740:tid 38818] [client 140.99.1.76:21301] [client 140.99.1.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aSLJtg13QPZSi6O8umWmmQAAAJY"]
[Sun Nov 23 16:45:42.923788 2025] [:error] [pid 14602:tid 14631] [client 140.99.1.77:56427] [client 140.99.1.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aSLJth-I77jdD81pU-mlGwAAAUo"]
[Sun Nov 23 16:45:43.206902 2025] [:error] [pid 38738:tid 38746] [client 140.99.1.65:58859] [client 140.99.1.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aSLJtwytc6TL9XavPmMJ-wAAAAQ"]
[Sun Nov 23 16:45:43.448464 2025] [:error] [pid 38740:tid 38800] [client 140.99.1.46:50421] [client 140.99.1.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aSLJtw13QPZSi6O8umWmrAAAAIQ"]
[Sun Nov 23 16:45:43.677689 2025] [:error] [pid 16066:tid 16089] [client 140.99.1.32:63887] [client 140.99.1.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aSLJt_q-c47Q5mW5E9F4qAAAAZQ"]
[Sun Nov 23 16:45:44.000862 2025] [:error] [pid 38739:tid 38787] [client 140.99.1.76:35177] [client 140.99.1.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aSLJtwdvEgJm2n2cDmo3FAAAAFI"]
[Sun Nov 23 16:45:44.285682 2025] [proxy_fcgi:error] [pid 44652:tid 44718] [client 140.99.1.14:21499] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:45:44.542570 2025] [:error] [pid 44652:tid 44718] [client 140.99.1.14:21499] [client 140.99.1.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dwelectservices.com.au"] [uri "/filemanager.php"] [unique_id "aSLJuNiQFwsyXQDhwyC6ugAAAQw"]
[Sun Nov 23 16:45:45.166842 2025] [:error] [pid 44652:tid 44721] [client 140.99.1.50:30097] [client 140.99.1.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aSLJudiQFwsyXQDhwyC6xQAAAQ8"]
[Sun Nov 23 16:45:45.590924 2025] [:error] [pid 16066:tid 16091] [client 140.99.1.31:40279] [client 140.99.1.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aSLJufq-c47Q5mW5E9F43wAAAZY"]
[Sun Nov 23 16:45:45.823821 2025] [proxy_fcgi:error] [pid 14602:tid 14622] [client 140.99.1.14:51189] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:45:45.997640 2025] [:error] [pid 14602:tid 14631] [client 140.99.1.14:51189] [client 140.99.1.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aSLJuR-I77jdD81pU-mlSwAAAUo"]
[Sun Nov 23 16:45:46.304619 2025] [proxy_fcgi:error] [pid 38740:tid 38798] [client 140.99.1.17:52741] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:45:46.764736 2025] [proxy_fcgi:error] [pid 38740:tid 38806] [client 140.99.1.17:52741] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:45:47.219132 2025] [:error] [pid 38740:tid 38796] [client 140.99.1.17:52741] [client 140.99.1.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aSLJuw13QPZSi6O8umWnDwAAAIA"]
[Sun Nov 23 16:45:47.429077 2025] [proxy_fcgi:error] [pid 17534:tid 17559] [client 140.99.1.78:24949] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:45:47.583630 2025] [:error] [pid 17534:tid 17537] [client 140.99.1.78:24949] [client 140.99.1.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aSLJu3PX9nXBrhgM8swqOAAAAcE"]
[Sun Nov 23 16:45:47.808630 2025] [proxy_fcgi:error] [pid 38739:tid 38793] [client 140.99.1.63:44421] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:45:48.182281 2025] [:error] [pid 38739:tid 38774] [client 140.99.1.63:44421] [client 140.99.1.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "aSLJvAdvEgJm2n2cDmo3OgAAAEU"]
[Sun Nov 23 16:45:48.528440 2025] [:error] [pid 44652:tid 44709] [client 140.99.1.42:36139] [client 140.99.1.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aSLJvNiQFwsyXQDhwyC7AQAAAQM"]
[Sun Nov 23 16:45:48.974615 2025] [proxy_fcgi:error] [pid 44652:tid 44719] [client 140.99.1.39:54595] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:45:49.801733 2025] [proxy_fcgi:error] [pid 44652:tid 44726] [client 140.99.1.39:54595] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:45:50.139097 2025] [:error] [pid 44652:tid 44719] [client 140.99.1.39:54595] [client 140.99.1.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aSLJvtiQFwsyXQDhwyC7GQAAAQ0"]
[Sun Nov 23 16:45:50.612737 2025] [:error] [pid 38739:tid 38791] [client 140.99.1.7:55343] [client 140.99.1.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aSLJvgdvEgJm2n2cDmo3RwAAAFY"]
[Sun Nov 23 16:45:51.038958 2025] [:error] [pid 38738:tid 38753] [client 140.99.1.9:60521] [client 140.99.1.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aSLJvgytc6TL9XavPmMKoAAAAAs"]
[Sun Nov 23 16:45:51.322115 2025] [:error] [pid 16066:tid 16089] [client 140.99.1.73:27603] [client 140.99.1.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aSLJv_q-c47Q5mW5E9F5XQAAAZQ"]
[Sun Nov 23 16:45:52.217021 2025] [:error] [pid 17534:tid 17554] [client 140.99.1.73:40101] [client 140.99.1.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aSLJwHPX9nXBrhgM8swqdQAAAdI"]
[Sun Nov 23 16:45:54.021641 2025] [proxy_fcgi:error] [pid 38738:tid 38755] [client 140.99.1.37:40503] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:45:54.167027 2025] [:error] [pid 38738:tid 38765] [client 140.99.1.37:40503] [client 140.99.1.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "aSLJwgytc6TL9XavPmMK1AAAABc"]
[Sun Nov 23 16:45:54.465988 2025] [:error] [pid 38738:tid 38758] [client 140.99.1.28:28387] [client 140.99.1.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "aSLJwgytc6TL9XavPmMK2wAAABA"]
[Sun Nov 23 16:45:54.743922 2025] [:error] [pid 38739:tid 38790] [client 140.99.1.67:33037] [client 140.99.1.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aSLJwgdvEgJm2n2cDmo3XwAAAFU"]
[Sun Nov 23 16:45:55.323651 2025] [proxy_fcgi:error] [pid 44652:tid 44710] [client 140.99.1.53:34591] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:45:55.629654 2025] [proxy_fcgi:error] [pid 44652:tid 44712] [client 140.99.1.53:34591] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:45:56.393097 2025] [:error] [pid 44652:tid 44722] [client 140.99.1.53:34591] [client 140.99.1.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/admin.php"] [unique_id "aSLJxNiQFwsyXQDhwyC7lgAAARA"]
[Sun Nov 23 16:45:56.973202 2025] [:error] [pid 38739:tid 38784] [client 140.99.1.77:24897] [client 140.99.1.77] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 140.99.1.77, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aSLJxAdvEgJm2n2cDmo3iwAAAE8"]
[Sun Nov 23 16:45:57.212615 2025] [proxy_fcgi:error] [pid 38739:tid 38781] [client 140.99.1.77:24897] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:45:57.853608 2025] [proxy_fcgi:error] [pid 38739:tid 38773] [client 140.99.1.77:24897] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:45:59.130627 2025] [proxy_fcgi:error] [pid 38739:tid 38784] [client 140.99.1.77:24897] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:45:59.924322 2025] [:error] [pid 38739:tid 38784] [client 140.99.1.77:24897] [client 140.99.1.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aSLJxwdvEgJm2n2cDmo3vAAAAE8"]
[Sun Nov 23 16:46:00.317624 2025] [proxy_fcgi:error] [pid 44652:tid 44710] [client 140.99.1.20:23477] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:46:00.492384 2025] [proxy_fcgi:error] [pid 44652:tid 44722] [client 140.99.1.20:23477] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:46:00.635568 2025] [:error] [pid 44652:tid 44724] [client 140.99.1.20:23477] [client 140.99.1.20] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 140.99.1.20, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aSLJyNiQFwsyXQDhwyC8HAAAARI"]
[Sun Nov 23 16:46:00.943875 2025] [:error] [pid 44652:tid 44724] [client 140.99.1.20:23477] [client 140.99.1.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/item.php"] [unique_id "aSLJyNiQFwsyXQDhwyC8LAAAARI"]
[Sun Nov 23 16:46:01.566460 2025] [proxy_fcgi:error] [pid 38740:tid 38807] [client 140.99.1.30:57761] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:46:01.676755 2025] [proxy_fcgi:error] [pid 38740:tid 38804] [client 140.99.1.30:57761] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:46:01.904018 2025] [proxy_fcgi:error] [pid 38740:tid 38817] [client 140.99.1.30:57761] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:46:02.266997 2025] [:error] [pid 38740:tid 38805] [client 140.99.1.30:57761] [client 140.99.1.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aSLJyg13QPZSi6O8umWoPAAAAIk"]
[Sun Nov 23 16:46:02.537649 2025] [proxy_fcgi:error] [pid 16066:tid 16086] [client 140.99.1.11:34523] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:46:02.931610 2025] [proxy_fcgi:error] [pid 16066:tid 16075] [client 140.99.1.11:34523] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:46:03.246612 2025] [proxy_fcgi:error] [pid 16066:tid 16085] [client 140.99.1.11:34523] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:46:03.485613 2025] [:error] [pid 16066:tid 16083] [client 140.99.1.11:34523] [client 140.99.1.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-class.php"] [unique_id "aSLJy_q-c47Q5mW5E9F5uwAAAY4"]
[Sun Nov 23 16:46:03.693985 2025] [:error] [pid 17534:tid 17547] [client 140.99.1.11:56819] [client 140.99.1.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-class.php"] [unique_id "aSLJy3PX9nXBrhgM8swrcQAAAcs"]
[Sun Nov 23 16:46:03.942621 2025] [proxy_fcgi:error] [pid 44652:tid 44725] [client 140.99.1.2:36367] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:46:04.150233 2025] [:error] [pid 44652:tid 44708] [client 140.99.1.2:36367] [client 140.99.1.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aSLJzNiQFwsyXQDhwyC8pAAAAQI"]
[Sun Nov 23 16:46:04.346632 2025] [proxy_fcgi:error] [pid 38739:tid 38773] [client 140.99.1.68:43779] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:46:04.526908 2025] [proxy_fcgi:error] [pid 38739:tid 38784] [client 140.99.1.68:43779] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:46:05.011409 2025] [:error] [pid 38739:tid 38789] [client 140.99.1.68:43779] [client 140.99.1.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aSLJzQdvEgJm2n2cDmo37QAAAFQ"]
[Sun Nov 23 16:46:05.347902 2025] [proxy_fcgi:error] [pid 14602:tid 14629] [client 140.99.1.67:49253] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:46:05.607316 2025] [:error] [pid 14602:tid 14641] [client 140.99.1.67:49253] [client 140.99.1.67] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 140.99.1.67, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "aSLJzR-I77jdD81pU-mmLgAAAVQ"]
[Sun Nov 23 16:46:05.737296 2025] [:error] [pid 14602:tid 14643] [client 140.99.1.67:49253] [client 140.99.1.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aSLJzR-I77jdD81pU-mmMAAAAVY"]
[Sun Nov 23 16:46:07.482052 2025] [proxy_fcgi:error] [pid 38739:tid 38791] [client 140.99.1.16:54917] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:46:08.098678 2025] [:error] [pid 38739:tid 38769] [client 140.99.1.16:54917] [client 140.99.1.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/colors/midnight/install.php"] [unique_id "aSLJ0AdvEgJm2n2cDmo4HAAAAEA"]
[Sun Nov 23 16:46:08.467803 2025] [proxy_fcgi:error] [pid 14602:tid 14639] [client 140.99.1.74:52939] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:46:08.573315 2025] [:error] [pid 14602:tid 14636] [client 140.99.1.74:52939] [client 140.99.1.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aSLJ0B-I77jdD81pU-mmUwAAAU8"]
[Sun Nov 23 16:46:08.937622 2025] [proxy_fcgi:error] [pid 44652:tid 44725] [client 140.99.1.47:62793] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:46:09.270074 2025] [:error] [pid 44652:tid 44720] [client 140.99.1.47:62793] [client 140.99.1.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/dummyyummy/wp-signup.php"] [unique_id "aSLJ0diQFwsyXQDhwyC9GwAAAQ4"]
[Sun Nov 23 16:46:09.680417 2025] [:error] [pid 38738:tid 38742] [client 140.99.1.50:55341] [client 140.99.1.50] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 140.99.1.50, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aSLJ0Qytc6TL9XavPmMMAAAAAAA"]
[Sun Nov 23 16:46:09.819502 2025] [proxy_fcgi:error] [pid 38738:tid 38744] [client 140.99.1.50:55341] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:46:09.940636 2025] [proxy_fcgi:error] [pid 38738:tid 38751] [client 140.99.1.50:55341] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:46:10.049792 2025] [proxy_fcgi:error] [pid 38738:tid 38748] [client 140.99.1.50:55341] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:46:10.160610 2025] [:error] [pid 38738:tid 38762] [client 140.99.1.50:55341] [client 140.99.1.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aSLJ0gytc6TL9XavPmMMDAAAABQ"]
[Sun Nov 23 16:46:10.483665 2025] [proxy_fcgi:error] [pid 44652:tid 44730] [client 140.99.1.49:46555] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:46:10.686404 2025] [:error] [pid 16066:tid 16085] [client 140.99.1.15:36143] [client 140.99.1.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/infi.php"] [unique_id "aSLJ0vq-c47Q5mW5E9F6PgAAAZA"]
[Sun Nov 23 16:46:11.508831 2025] [proxy_fcgi:error] [pid 17534:tid 17536] [client 140.99.1.27:37787] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:46:11.618021 2025] [:error] [pid 17534:tid 17546] [client 140.99.1.27:37787] [client 140.99.1.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aSLJ03PX9nXBrhgM8swsDgAAAco"]
[Sun Nov 23 16:46:11.825089 2025] [proxy_fcgi:error] [pid 44652:tid 44712] [client 140.99.1.43:23973] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:46:12.336640 2025] [proxy_fcgi:error] [pid 44652:tid 44729] [client 140.99.1.43:23973] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:46:18.139521 2025] [:error] [pid 44652:tid 44729] [client 140.99.1.43:23973] [client 140.99.1.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "aSLJ2tiQFwsyXQDhwyC9ZwAAARc"]
[Sun Nov 23 16:46:18.380804 2025] [:error] [pid 17534:tid 17550] [client 140.99.1.46:28355] [client 140.99.1.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "aSLJ2nPX9nXBrhgM8swsowAAAc4"]
[Sun Nov 23 16:46:18.671654 2025] [proxy_fcgi:error] [pid 17534:tid 17551] [client 140.99.1.52:36045] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:46:18.796622 2025] [proxy_fcgi:error] [pid 17534:tid 17542] [client 140.99.1.52:36045] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:46:22.965849 2025] [:error] [pid 17534:tid 17544] [client 140.99.1.52:36045] [client 140.99.1.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aSLJ3nPX9nXBrhgM8sws6QAAAcg"]
[Sun Nov 23 16:46:23.736814 2025] [:error] [pid 16066:tid 16090] [client 140.99.1.50:31343] [client 140.99.1.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "aSLJ3_q-c47Q5mW5E9F7PwAAAZU"]
[Sun Nov 23 16:46:24.340118 2025] [:error] [pid 38824:tid 38836] [client 140.99.1.10:41309] [client 140.99.1.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/edit.php"] [unique_id "aSLJ4E8WZjXLvbHTHPfDDAAAAMk"]
[Sun Nov 23 16:46:24.553622 2025] [proxy_fcgi:error] [pid 44652:tid 44709] [client 140.99.1.71:54177] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:46:24.815634 2025] [proxy_fcgi:error] [pid 44652:tid 44709] [client 140.99.1.71:54177] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:46:24.954460 2025] [:error] [pid 44652:tid 44729] [client 140.99.1.71:54177] [client 140.99.1.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "aSLJ4NiQFwsyXQDhwyC9oAAAARc"]
[Sun Nov 23 16:46:25.283612 2025] [proxy_fcgi:error] [pid 38824:tid 38850] [client 140.99.1.73:23803] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:46:25.505997 2025] [:error] [pid 38824:tid 38845] [client 140.99.1.73:23803] [client 140.99.1.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/click.php"] [unique_id "aSLJ4U8WZjXLvbHTHPfDHQAAANI"]
[Sun Nov 23 16:46:26.045389 2025] [:error] [pid 16066:tid 16090] [client 140.99.1.39:62411] [client 140.99.1.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "aSLJ4vq-c47Q5mW5E9F7cQAAAZU"]
[Sun Nov 23 16:46:26.345426 2025] [:error] [pid 38738:tid 38754] [client 140.99.1.20:21779] [client 140.99.1.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/edit.php"] [unique_id "aSLJ4gytc6TL9XavPmMM6wAAAAw"]
[Sun Nov 23 16:46:26.694804 2025] [proxy_fcgi:error] [pid 38739:tid 38782] [client 140.99.1.65:20727] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:46:27.133818 2025] [proxy_fcgi:error] [pid 38739:tid 38787] [client 140.99.1.65:20727] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:46:27.348678 2025] [proxy_fcgi:error] [pid 38739:tid 38780] [client 140.99.1.65:20727] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:46:27.473137 2025] [:error] [pid 38739:tid 38775] [client 140.99.1.65:20727] [client 140.99.1.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "aSLJ4wdvEgJm2n2cDmo5ggAAAEY"]
[Sun Nov 23 16:46:27.706271 2025] [:error] [pid 38824:tid 38846] [client 140.99.1.63:37269] [client 140.99.1.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/xl2023.php"] [unique_id "aSLJ408WZjXLvbHTHPfDQAAAANM"]
[Sun Nov 23 16:46:27.983063 2025] [:error] [pid 16066:tid 16074] [client 140.99.1.65:55037] [client 140.99.1.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/certificates/admin.php"] [unique_id "aSLJ4_q-c47Q5mW5E9F7hQAAAYU"]
[Sun Nov 23 16:46:28.179401 2025] [:error] [pid 38740:tid 38809] [client 140.99.1.5:30969] [client 140.99.1.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/media/dog.php"] [unique_id "aSLJ5A13QPZSi6O8umWp0AAAAI0"]
[Sun Nov 23 16:46:28.383638 2025] [proxy_fcgi:error] [pid 44652:tid 44729] [client 140.99.1.9:55399] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:46:28.767286 2025] [:error] [pid 17534:tid 17559] [client 140.99.1.7:45801] [client 140.99.1.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "aSLJ5HPX9nXBrhgM8swtjQAAAdc"]
[Sun Nov 23 16:46:29.012669 2025] [:error] [pid 38824:tid 38847] [client 140.99.1.32:32963] [client 140.99.1.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aSLJ5U8WZjXLvbHTHPfDaQAAANQ"]
[Sun Nov 23 16:46:29.275034 2025] [proxy_fcgi:error] [pid 17534:tid 17557] [client 140.99.1.26:30943] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:46:29.538943 2025] [:error] [pid 17534:tid 17544] [client 140.99.1.26:30943] [client 140.99.1.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aSLJ5XPX9nXBrhgM8swtpwAAAcg"]
[Sun Nov 23 16:46:29.816640 2025] [:error] [pid 14602:tid 14635] [client 140.99.1.46:27227] [client 140.99.1.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aSLJ5R-I77jdD81pU-mnkwAAAU4"]
[Sun Nov 23 16:46:30.042985 2025] [:error] [pid 14602:tid 14627] [client 140.99.1.75:37631] [client 140.99.1.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/pomo/admin.php"] [unique_id "aSLJ5h-I77jdD81pU-mnmQAAAUY"]
[Sun Nov 23 16:46:30.250844 2025] [:error] [pid 38740:tid 38807] [client 140.99.1.47:21643] [client 140.99.1.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/IXR/security.php"] [unique_id "aSLJ5g13QPZSi6O8umWp3wAAAIs"]
[Sun Nov 23 16:46:30.567684 2025] [:error] [pid 38738:tid 38754] [client 140.99.1.16:34191] [client 140.99.1.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aSLJ5gytc6TL9XavPmMNNAAAAAw"]
[Sun Nov 23 16:46:31.150333 2025] [:error] [pid 17534:tid 17549] [client 140.99.1.43:41459] [client 140.99.1.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/fonts/about.php"] [unique_id "aSLJ53PX9nXBrhgM8swt4QAAAc0"]
[Sun Nov 23 16:46:31.528645 2025] [proxy_fcgi:error] [pid 38739:tid 38786] [client 140.99.1.44:65365] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:46:31.986628 2025] [proxy_fcgi:error] [pid 38739:tid 38777] [client 140.99.1.44:65365] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:46:32.305693 2025] [:error] [pid 38739:tid 38791] [client 140.99.1.44:65365] [client 140.99.1.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "aSLJ6AdvEgJm2n2cDmo5-wAAAFY"]
[Sun Nov 23 16:46:32.736427 2025] [proxy_fcgi:error] [pid 17534:tid 17549] [client 140.99.1.30:57457] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:46:32.942589 2025] [:error] [pid 17534:tid 17553] [client 140.99.1.30:57457] [client 140.99.1.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/go.php"] [unique_id "aSLJ6HPX9nXBrhgM8swuJAAAAdE"]
[Sun Nov 23 16:46:33.160676 2025] [proxy_fcgi:error] [pid 17534:tid 17553] [client 140.99.1.75:54805] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:46:34.102976 2025] [:error] [pid 17534:tid 17559] [client 140.99.1.75:54805] [client 140.99.1.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/file.php"] [unique_id "aSLJ6nPX9nXBrhgM8swuVgAAAdc"]
[Sun Nov 23 16:46:34.923376 2025] [:error] [pid 16066:tid 16069] [client 140.99.1.49:46959] [client 140.99.1.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "aSLJ6vq-c47Q5mW5E9F8EgAAAYA"]
[Sun Nov 23 16:46:35.791879 2025] [:error] [pid 44652:tid 44715] [client 140.99.1.68:42011] [client 140.99.1.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "aSLJ69iQFwsyXQDhwyC-DQAAAQk"]
[Sun Nov 23 16:46:37.494392 2025] [:error] [pid 38824:tid 38846] [client 140.99.1.33:48697] [client 140.99.1.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aSLJ7U8WZjXLvbHTHPfECAAAANM"]
[Sun Nov 23 16:46:37.941627 2025] [proxy_fcgi:error] [pid 17534:tid 17546] [client 140.99.1.38:34133] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:46:38.065192 2025] [proxy_fcgi:error] [pid 17534:tid 17538] [client 140.99.1.38:34133] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:46:38.185014 2025] [proxy_fcgi:error] [pid 17534:tid 17542] [client 140.99.1.38:34133] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:46:38.397441 2025] [proxy_fcgi:error] [pid 17534:tid 17545] [client 140.99.1.38:34133] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:46:39.398570 2025] [proxy_fcgi:error] [pid 17534:tid 17543] [client 140.99.1.3:33633] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:46:39.497649 2025] [proxy_fcgi:error] [pid 17534:tid 17549] [client 140.99.1.3:33633] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:46:39.670953 2025] [proxy_fcgi:error] [pid 17534:tid 17551] [client 140.99.1.3:33633] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:46:39.831537 2025] [:error] [pid 17534:tid 17537] [client 140.99.1.38:34133] [client 140.99.1.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/ccx/index.php"] [unique_id "aSLJ73PX9nXBrhgM8swu0QAAAcE"]
[Sun Nov 23 16:46:39.852678 2025] [proxy_fcgi:error] [pid 17534:tid 17538] [client 140.99.1.3:33633] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:46:39.970605 2025] [proxy_fcgi:error] [pid 17534:tid 17546] [client 140.99.1.3:33633] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:46:40.112608 2025] [proxy_fcgi:error] [pid 17534:tid 17538] [client 140.99.1.3:33633] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:46:40.224612 2025] [proxy_fcgi:error] [pid 17534:tid 17545] [client 140.99.1.3:33633] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:46:40.339620 2025] [proxy_fcgi:error] [pid 17534:tid 17543] [client 140.99.1.3:33633] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:46:40.620625 2025] [proxy_fcgi:error] [pid 17534:tid 17545] [client 140.99.1.3:33633] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:46:40.707171 2025] [:error] [pid 38739:tid 38784] [client 140.99.1.65:29829] [client 140.99.1.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aSLJ8AdvEgJm2n2cDmo6tgAAAE8"]
[Sun Nov 23 16:46:40.851793 2025] [proxy_fcgi:error] [pid 17534:tid 17545] [client 140.99.1.3:33633] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:46:40.915191 2025] [:error] [pid 38738:tid 38755] [client 140.99.1.24:33067] [client 140.99.1.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "aSLJ8Aytc6TL9XavPmMNrAAAAA0"]
[Sun Nov 23 16:46:40.964615 2025] [proxy_fcgi:error] [pid 17534:tid 17546] [client 140.99.1.3:33633] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:46:41.133647 2025] [proxy_fcgi:error] [pid 17534:tid 17556] [client 140.99.1.3:33633] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:46:41.209955 2025] [:error] [pid 38738:tid 38743] [client 140.99.1.72:38261] [client 140.99.1.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "aSLJ8Qytc6TL9XavPmMNrgAAAAE"]
[Sun Nov 23 16:46:41.298640 2025] [proxy_fcgi:error] [pid 17534:tid 17546] [client 140.99.1.3:33633] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:46:41.396317 2025] [:error] [pid 38739:tid 38777] [client 140.99.1.39:43571] [client 140.99.1.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "aSLJ8QdvEgJm2n2cDmo6wgAAAEg"]
[Sun Nov 23 16:46:41.403608 2025] [proxy_fcgi:error] [pid 17534:tid 17548] [client 140.99.1.3:33633] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:46:41.564466 2025] [proxy_fcgi:error] [pid 17534:tid 17549] [client 140.99.1.3:33633] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:46:41.647171 2025] [:error] [pid 38740:tid 38812] [client 140.99.1.47:60647] [client 140.99.1.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aSLJ8Q13QPZSi6O8umWqZQAAAJA"]
[Sun Nov 23 16:46:41.706180 2025] [proxy_fcgi:error] [pid 17534:tid 17546] [client 140.99.1.3:33633] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:46:41.848977 2025] [proxy_fcgi:error] [pid 17534:tid 17543] [client 140.99.1.3:33633] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:46:41.880820 2025] [:error] [pid 38740:tid 38798] [client 140.99.1.67:65043] [client 140.99.1.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aSLJ8Q13QPZSi6O8umWqaQAAAII"]
[Sun Nov 23 16:46:42.008642 2025] [proxy_fcgi:error] [pid 17534:tid 17537] [client 140.99.1.3:33633] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:46:42.263396 2025] [:error] [pid 38740:tid 38818] [client 140.99.1.52:23027] [client 140.99.1.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/media/index.php"] [unique_id "aSLJ8g13QPZSi6O8umWqcwAAAJY"]
[Sun Nov 23 16:46:42.545917 2025] [:error] [pid 44652:tid 44712] [client 140.99.1.10:42299] [client 140.99.1.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "aSLJ8tiQFwsyXQDhwyC-ZwAAAQY"]
[Sun Nov 23 16:46:42.921412 2025] [:error] [pid 38739:tid 38779] [client 140.99.1.5:30623] [client 140.99.1.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "aSLJ8gdvEgJm2n2cDmo62AAAAEo"]
[Sun Nov 23 16:46:43.257505 2025] [:error] [pid 44652:tid 44730] [client 140.99.1.48:26449] [client 140.99.1.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "aSLJ89iQFwsyXQDhwyC-dQAAARg"]
[Sun Nov 23 16:46:44.009253 2025] [:error] [pid 44652:tid 44707] [client 140.99.1.52:59845] [client 140.99.1.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/fonts/themes.php"] [unique_id "aSLJ89iQFwsyXQDhwyC-jgAAAQE"]
[Sun Nov 23 16:46:44.376816 2025] [:error] [pid 17534:tid 17556] [client 140.99.1.53:48989] [client 140.99.1.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/certificates/index.php"] [unique_id "aSLJ9HPX9nXBrhgM8swvYAAAAdQ"]
[Sun Nov 23 16:46:44.638407 2025] [proxy_fcgi:error] [pid 38738:tid 38764] [client 140.99.1.74:57393] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:46:44.959613 2025] [:error] [pid 38738:tid 38744] [client 140.99.1.74:57393] [client 140.99.1.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "aSLJ9Aytc6TL9XavPmMN7gAAAAI"]
[Sun Nov 23 16:46:45.439331 2025] [:error] [pid 44652:tid 44728] [client 140.99.1.26:58155] [client 140.99.1.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "aSLJ9diQFwsyXQDhwyC-uQAAARY"]
[Sun Nov 23 16:46:46.105735 2025] [proxy_fcgi:error] [pid 44652:tid 44707] [client 140.99.1.75:59851] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:46:46.211077 2025] [:error] [pid 44652:tid 44710] [client 140.99.1.75:59851] [client 140.99.1.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aSLJ9tiQFwsyXQDhwyC-0AAAAQQ"]
[Sun Nov 23 16:46:46.613641 2025] [proxy_fcgi:error] [pid 38824:tid 38837] [client 140.99.1.27:56377] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:46:57.834615 2025] [proxy_fcgi:error] [pid 38824:tid 38848] [client 140.99.1.27:56377] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:47:22.630780 2025] [autoindex:error] [pid 17534:tid 17557] [client 140.99.1.72:31427] AH01276: Cannot serve directory /home/dwelects/public_html/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 23 16:51:12.711264 2025] [:error] [pid 38739:tid 38772] [client 176.65.132.18:39848] [client 176.65.132.18] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dwelectservices.com.au"] [uri "/.git/config"] [unique_id "aSLLAAdvEgJm2n2cDmpIDQAAAEM"]
[Mon Nov 24 01:08:39.449437 2025] [:error] [pid 8337:tid 8357] [client 176.65.132.18:39892] [client 176.65.132.18] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dwelectservices.com.au"] [uri "/.git/config"] [unique_id "aSM_l-Smps4S2j95D5hybgAAABI"]
[Mon Nov 24 04:09:30.650844 2025] [:error] [pid 59958:tid 59999] [client 162.158.110.172:10954] [client 162.158.110.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dwelectservices.com.au"] [uri "/.git/config"] [unique_id "aSNp-uar7CWszFXSk6EI9QAAAEo"]
[Mon Nov 24 08:17:05.484045 2025] [:error] [pid 48601:tid 48676] [client 103.65.237.124:59999] [client 103.65.237.124] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/sftp-config.json"] [unique_id "aSOkAYMM4MaVTk74-AYmswAAAhM"]
[Mon Nov 24 08:17:05.738765 2025] [:error] [pid 48601:tid 48661] [client 103.65.237.124:64028] [client 103.65.237.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.vscode/sftp.json"] [unique_id "aSOkAYMM4MaVTk74-AYmtQAAAgQ"]
[Mon Nov 24 15:36:07.290254 2025] [:error] [pid 49900:tid 49907] [client 44.251.97.48:54224] [client 44.251.97.48] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.git/config"] [unique_id "aSQK5zCyPLrvg06aorn3YAAAAAU"]
[Mon Nov 24 15:59:29.247105 2025] [:error] [pid 48688:tid 48696] [client 35.95.106.200:36560] [client 35.95.106.200] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dwelectservices.com.au"] [uri "/.git/config"] [unique_id "aSQQYRm2q1FkzLam7A2OUAAAAkQ"]
[Mon Nov 24 20:57:39.411166 2025] [:error] [pid 16516:tid 16530] [client 3.86.214.214:51040] [client 3.86.214.214] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dwelectservices.com.au"] [uri "/.git/config"] [unique_id "aSRWQ_qZbniwaNwL8XkFXwAAAQs"]
[Mon Nov 24 21:45:37.526654 2025] [:error] [pid 48600:tid 48636] [client 193.32.126.212:53402] [client 193.32.126.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/"] [unique_id "aSRhgftOzSUAQvWVjBeiAgAAAcY"]
[Mon Nov 24 21:45:38.019773 2025] [:error] [pid 48688:tid 48699] [client 193.32.126.212:54142] [client 193.32.126.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/"] [unique_id "aSRhghm2q1FkzLam7A3PwwAAAkc"]
[Mon Nov 24 21:45:38.511499 2025] [:error] [pid 16549:tid 16573] [client 193.32.126.212:54629] [client 193.32.126.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "aSRhgqeWW19A99PUw_dn-wAAAVQ"]
[Tue Nov 25 02:58:54.643744 2025] [proxy_fcgi:error] [pid 9630:tid 9654] [client 172.177.187.227:3747] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 02:58:54.862831 2025] [proxy_fcgi:error] [pid 9630:tid 9651] [client 172.177.187.227:3747] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 02:58:55.080496 2025] [proxy_fcgi:error] [pid 9630:tid 9639] [client 172.177.187.227:3747] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 02:58:55.298317 2025] [proxy_fcgi:error] [pid 9630:tid 9647] [client 172.177.187.227:3747] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 02:58:55.542315 2025] [proxy_fcgi:error] [pid 9630:tid 9635] [client 172.177.187.227:3747] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 02:58:55.766835 2025] [proxy_fcgi:error] [pid 9630:tid 9643] [client 172.177.187.227:3747] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 02:58:55.983343 2025] [proxy_fcgi:error] [pid 9630:tid 9653] [client 172.177.187.227:3747] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 02:58:57.232032 2025] [proxy_fcgi:error] [pid 9630:tid 9632] [client 172.177.187.227:3747] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 02:58:57.725413 2025] [proxy_fcgi:error] [pid 9630:tid 9649] [client 172.177.187.227:3747] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 02:58:57.947609 2025] [:error] [pid 9630:tid 9655] [client 172.177.187.227:3747] [client 172.177.187.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/0x.php"] [unique_id "aSSq8SrSgUgPGkizt2qEbgAAAFc"]
[Tue Nov 25 02:58:59.849065 2025] [:error] [pid 16441:tid 16462] [client 172.177.187.227:5955] [client 172.177.187.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/0x.php"] [unique_id "aSSq84q_bc5MOa9Hfln7FAAAAJI"]
[Tue Nov 25 02:59:00.929394 2025] [:error] [pid 16549:tid 16563] [client 172.177.187.227:6854] [client 172.177.187.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/0x.php"] [unique_id "aSSq9KeWW19A99PUw_eUwQAAAUs"]
[Tue Nov 25 02:59:01.986080 2025] [:error] [pid 48688:tid 48705] [client 172.177.187.227:1843] [client 172.177.187.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/0x.php"] [unique_id "aSSq9Rm2q1FkzLam7A0FpwAAAk0"]
[Tue Nov 25 02:59:04.254993 2025] [:error] [pid 16516:tid 16541] [client 172.177.187.227:5086] [client 172.177.187.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cyanamids.php"] [unique_id "aSSq-PqZbniwaNwL8Xk5bwAAARY"]
[Tue Nov 25 02:59:07.047633 2025] [:error] [pid 16516:tid 16536] [client 172.177.187.227:3729] [client 172.177.187.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cyanamids.php"] [unique_id "aSSq-_qZbniwaNwL8Xk5cAAAARE"]
[Tue Nov 25 02:59:08.460253 2025] [:error] [pid 9630:tid 9634] [client 172.177.187.227:3276] [client 172.177.187.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cyanamids.php"] [unique_id "aSSq_CrSgUgPGkizt2qEfgAAAEI"]
[Tue Nov 25 02:59:10.734539 2025] [:error] [pid 16441:tid 16452] [client 172.177.187.227:5108] [client 172.177.187.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cyanamids.php"] [unique_id "aSSq_oq_bc5MOa9Hfln7MwAAAIg"]
[Tue Nov 25 02:59:13.779418 2025] [:error] [pid 48688:tid 48694] [client 172.177.187.227:3948] [client 172.177.187.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xl6.php"] [unique_id "aSSrARm2q1FkzLam7A0FvwAAAkI"]
[Tue Nov 25 02:59:16.103268 2025] [:error] [pid 16441:tid 16450] [client 172.177.187.227:3127] [client 172.177.187.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xl6.php"] [unique_id "aSSrBIq_bc5MOa9Hfln7RQAAAIY"]
[Tue Nov 25 02:59:18.599309 2025] [:error] [pid 16593:tid 16600] [client 172.177.187.227:3083] [client 172.177.187.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xl6.php"] [unique_id "aSSrBhVGznHBJI2LKpSaRwAAAoU"]
[Tue Nov 25 02:59:20.355880 2025] [:error] [pid 48601:tid 48675] [client 172.177.187.227:5248] [client 172.177.187.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xl6.php"] [unique_id "aSSrCIMM4MaVTk74-AYjfAAAAhI"]
[Tue Nov 25 02:59:25.668689 2025] [:error] [pid 16516:tid 16520] [client 172.177.187.227:2496] [client 172.177.187.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/attaining.php"] [unique_id "aSSrDfqZbniwaNwL8Xk5fwAAAQE"]
[Tue Nov 25 02:59:28.251531 2025] [:error] [pid 16441:tid 16456] [client 172.177.187.227:3729] [client 172.177.187.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/attaining.php"] [unique_id "aSSrEIq_bc5MOa9Hfln7VgAAAIw"]
[Tue Nov 25 02:59:29.809098 2025] [:error] [pid 48600:tid 48642] [client 172.177.187.227:5243] [client 172.177.187.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/attaining.php"] [unique_id "aSSrEftOzSUAQvWVjBfLiQAAAcw"]
[Tue Nov 25 02:59:31.066740 2025] [:error] [pid 9630:tid 9656] [client 172.177.187.227:4074] [client 172.177.187.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/attaining.php"] [unique_id "aSSrEyrSgUgPGkizt2qElAAAAFg"]
[Tue Nov 25 02:59:33.872565 2025] [:error] [pid 48599:tid 48617] [client 172.177.187.227:6559] [client 172.177.187.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-home.php"] [unique_id "aSSrFZzvu6PDJiRKE3KExgAAAY4"]
[Tue Nov 25 02:59:35.326735 2025] [:error] [pid 16516:tid 16521] [client 172.177.187.227:8144] [client 172.177.187.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-home.php"] [unique_id "aSSrF_qZbniwaNwL8Xk5hQAAAQI"]
[Tue Nov 25 02:59:36.900487 2025] [:error] [pid 9630:tid 9633] [client 172.177.187.227:8040] [client 172.177.187.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-home.php"] [unique_id "aSSrGCrSgUgPGkizt2qEoQAAAEE"]
[Tue Nov 25 02:59:38.233693 2025] [:error] [pid 9630:tid 9639] [client 172.177.187.227:2187] [client 172.177.187.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-home.php"] [unique_id "aSSrGirSgUgPGkizt2qEowAAAEc"]
[Tue Nov 25 02:59:39.711930 2025] [:error] [pid 48599:tid 48615] [client 172.177.187.227:2755] [client 172.177.187.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-securitiy.php"] [unique_id "aSSrG5zvu6PDJiRKE3KEygAAAYw"]
[Tue Nov 25 02:59:42.137473 2025] [:error] [pid 48599:tid 48616] [client 172.177.187.227:4092] [client 172.177.187.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-securitiy.php"] [unique_id "aSSrHpzvu6PDJiRKE3KEzAAAAY0"]
[Tue Nov 25 02:59:43.033172 2025] [:error] [pid 48601:tid 48669] [client 172.177.187.227:2197] [client 172.177.187.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-securitiy.php"] [unique_id "aSSrH4MM4MaVTk74-AYjjgAAAgw"]
[Tue Nov 25 02:59:44.746983 2025] [:error] [pid 16549:tid 16562] [client 172.177.187.227:4271] [client 172.177.187.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-securitiy.php"] [unique_id "aSSrIKeWW19A99PUw_eU6AAAAUo"]
[Tue Nov 25 02:59:45.638590 2025] [:error] [pid 48599:tid 48626] [client 172.177.187.227:4036] [client 172.177.187.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2co_ipn.php"] [unique_id "aSSrIZzvu6PDJiRKE3KEzwAAAZc"]
[Tue Nov 25 02:59:47.141139 2025] [:error] [pid 16516:tid 16538] [client 172.177.187.227:8150] [client 172.177.187.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2co_ipn.php"] [unique_id "aSSrI_qZbniwaNwL8Xk5igAAARM"]
[Tue Nov 25 02:59:49.339088 2025] [:error] [pid 16549:tid 16559] [client 172.177.187.227:5360] [client 172.177.187.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2co_ipn.php"] [unique_id "aSSrJaeWW19A99PUw_eU7wAAAUc"]
[Tue Nov 25 02:59:50.595509 2025] [:error] [pid 16441:tid 16458] [client 172.177.187.227:1991] [client 172.177.187.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2co_ipn.php"] [unique_id "aSSrJoq_bc5MOa9Hfln7aAAAAI4"]
[Tue Nov 25 02:59:53.484121 2025] [:error] [pid 48600:tid 48649] [client 172.177.187.227:5366] [client 172.177.187.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/glucosidase.php"] [unique_id "aSSrKftOzSUAQvWVjBfLnAAAAdM"]
[Tue Nov 25 02:59:54.626805 2025] [:error] [pid 16549:tid 16554] [client 172.177.187.227:4142] [client 172.177.187.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/glucosidase.php"] [unique_id "aSSrKqeWW19A99PUw_eU8wAAAUI"]
[Tue Nov 25 02:59:56.245158 2025] [:error] [pid 16441:tid 16457] [client 172.177.187.227:1992] [client 172.177.187.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/glucosidase.php"] [unique_id "aSSrLIq_bc5MOa9Hfln7dAAAAI0"]
[Tue Nov 25 02:59:58.146249 2025] [proxy_fcgi:error] [pid 16549:tid 16573] [client 172.177.187.227:3455] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 02:59:58.370973 2025] [proxy_fcgi:error] [pid 16549:tid 16563] [client 172.177.187.227:3455] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 02:59:58.635874 2025] [proxy_fcgi:error] [pid 16549:tid 16565] [client 172.177.187.227:3455] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 02:59:58.853933 2025] [proxy_fcgi:error] [pid 16549:tid 16573] [client 172.177.187.227:3455] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 02:59:59.072717 2025] [proxy_fcgi:error] [pid 16549:tid 16555] [client 172.177.187.227:3455] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 02:59:59.291168 2025] [proxy_fcgi:error] [pid 16549:tid 16554] [client 172.177.187.227:3455] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 02:59:59.528886 2025] [proxy_fcgi:error] [pid 16549:tid 16572] [client 172.177.187.227:3455] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 02:59:59.910962 2025] [proxy_fcgi:error] [pid 16549:tid 16564] [client 172.177.187.227:3455] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 03:00:00.130575 2025] [proxy_fcgi:error] [pid 16549:tid 16552] [client 172.177.187.227:3455] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 03:00:00.367995 2025] [proxy_fcgi:error] [pid 16549:tid 16553] [client 172.177.187.227:3455] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 03:00:00.595011 2025] [proxy_fcgi:error] [pid 16549:tid 16575] [client 172.177.187.227:3455] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 03:00:01.155495 2025] [:error] [pid 16549:tid 16568] [client 172.177.187.227:3455] [client 172.177.187.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x.php"] [unique_id "aSSrMaeWW19A99PUw_eVFwAAAVA"]
[Tue Nov 25 03:00:02.319486 2025] [:error] [pid 16593:tid 16614] [client 172.177.187.227:5482] [client 172.177.187.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x.php"] [unique_id "aSSrMhVGznHBJI2LKpSaYQAAApM"]
[Tue Nov 25 03:00:06.054707 2025] [:error] [pid 16593:tid 16595] [client 172.177.187.227:7349] [client 172.177.187.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x.php"] [unique_id "aSSrNhVGznHBJI2LKpSaZAAAAoA"]
[Tue Nov 25 03:00:06.701558 2025] [:error] [pid 16516:tid 16533] [client 172.177.187.227:4156] [client 172.177.187.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x.php"] [unique_id "aSSrNvqZbniwaNwL8Xk5ngAAAQ4"]
[Tue Nov 25 03:00:07.941439 2025] [:error] [pid 16441:tid 16451] [client 172.177.187.227:7346] [client 172.177.187.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/t.php"] [unique_id "aSSrN4q_bc5MOa9Hfln7iQAAAIc"]
[Tue Nov 25 03:00:10.840187 2025] [:error] [pid 16549:tid 16554] [client 172.177.187.227:7322] [client 172.177.187.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/t.php"] [unique_id "aSSrOqeWW19A99PUw_eVHgAAAUI"]
[Tue Nov 25 03:00:13.057335 2025] [:error] [pid 48600:tid 48637] [client 172.177.187.227:5835] [client 172.177.187.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/t.php"] [unique_id "aSSrPftOzSUAQvWVjBfLtwAAAcc"]
[Tue Nov 25 03:00:14.759428 2025] [:error] [pid 48600:tid 48653] [client 172.177.187.227:5472] [client 172.177.187.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/t.php"] [unique_id "aSSrPvtOzSUAQvWVjBfLvAAAAdc"]
[Tue Nov 25 03:00:16.598962 2025] [:error] [pid 49900:tid 49911] [client 172.177.187.227:5841] [client 172.177.187.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/twohandedness.php"] [unique_id "aSSrQDCyPLrvg06aormL7wAAAAk"]
[Tue Nov 25 03:00:18.143452 2025] [:error] [pid 16441:tid 16455] [client 172.177.187.227:5827] [client 172.177.187.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/twohandedness.php"] [unique_id "aSSrQoq_bc5MOa9Hfln7lgAAAIs"]
[Tue Nov 25 03:00:19.156112 2025] [:error] [pid 16549:tid 16564] [client 172.177.187.227:8360] [client 172.177.187.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/twohandedness.php"] [unique_id "aSSrQ6eWW19A99PUw_eVIAAAAUw"]
[Tue Nov 25 03:00:20.668233 2025] [:error] [pid 16441:tid 16462] [client 172.177.187.227:3402] [client 172.177.187.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/twohandedness.php"] [unique_id "aSSrRIq_bc5MOa9Hfln7lwAAAJI"]
[Tue Nov 25 03:00:22.203777 2025] [:error] [pid 48599:tid 48614] [client 172.177.187.227:8358] [client 172.177.187.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/acholuria.php"] [unique_id "aSSrRpzvu6PDJiRKE3KE8AAAAYs"]
[Tue Nov 25 03:00:24.161202 2025] [:error] [pid 49900:tid 49920] [client 172.177.187.227:1244] [client 172.177.187.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/acholuria.php"] [unique_id "aSSrSDCyPLrvg06aormL9gAAABI"]
[Tue Nov 25 03:00:26.252530 2025] [:error] [pid 48688:tid 48716] [client 172.177.187.227:2707] [client 172.177.187.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/acholuria.php"] [unique_id "aSSrShm2q1FkzLam7A0F-wAAAlg"]
[Tue Nov 25 03:00:27.298653 2025] [:error] [pid 16441:tid 16445] [client 172.177.187.227:2160] [client 172.177.187.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/acholuria.php"] [unique_id "aSSrS4q_bc5MOa9Hfln7nAAAAIE"]
[Tue Nov 25 03:00:30.988182 2025] [:error] [pid 49900:tid 49914] [client 172.177.187.227:7463] [client 172.177.187.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lock360.php"] [unique_id "aSSrTjCyPLrvg06aormL_QAAAAw"]
[Tue Nov 25 03:00:32.484595 2025] [:error] [pid 49900:tid 49915] [client 172.177.187.227:7444] [client 172.177.187.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lock360.php"] [unique_id "aSSrUDCyPLrvg06aormMAQAAAA0"]
[Tue Nov 25 03:00:33.979936 2025] [:error] [pid 9630:tid 9649] [client 172.177.187.227:7468] [client 172.177.187.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lock360.php"] [unique_id "aSSrUSrSgUgPGkizt2qEwwAAAFE"]
[Tue Nov 25 03:00:35.098129 2025] [:error] [pid 16516:tid 16539] [client 172.177.187.227:5801] [client 172.177.187.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lock360.php"] [unique_id "aSSrU_qZbniwaNwL8Xk5tQAAARQ"]
[Tue Nov 25 03:00:36.801724 2025] [:error] [pid 16549:tid 16562] [client 172.177.187.227:5794] [client 172.177.187.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2co_ipn_sub.php"] [unique_id "aSSrVKeWW19A99PUw_eVIwAAAUo"]
[Tue Nov 25 03:00:37.685770 2025] [:error] [pid 16516:tid 16542] [client 172.177.187.227:5847] [client 172.177.187.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2co_ipn_sub.php"] [unique_id "aSSrVfqZbniwaNwL8Xk5twAAARc"]
[Tue Nov 25 03:00:39.205628 2025] [:error] [pid 48601:tid 48680] [client 172.177.187.227:1073] [client 172.177.187.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2co_ipn_sub.php"] [unique_id "aSSrV4MM4MaVTk74-AYjtQAAAhc"]
[Tue Nov 25 03:00:39.984306 2025] [:error] [pid 48601:tid 48661] [client 172.177.187.227:2163] [client 172.177.187.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2co_ipn_sub.php"] [unique_id "aSSrV4MM4MaVTk74-AYjtgAAAgQ"]
[Tue Nov 25 03:00:41.731818 2025] [:error] [pid 48601:tid 48671] [client 172.177.187.227:7645] [client 172.177.187.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bunnies.php"] [unique_id "aSSrWYMM4MaVTk74-AYjuAAAAg4"]
[Tue Nov 25 03:00:43.325289 2025] [:error] [pid 48601:tid 48677] [client 172.177.187.227:7641] [client 172.177.187.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bunnies.php"] [unique_id "aSSrW4MM4MaVTk74-AYjvAAAAhQ"]
[Tue Nov 25 03:00:45.688764 2025] [:error] [pid 48599:tid 48616] [client 172.177.187.227:1043] [client 172.177.187.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bunnies.php"] [unique_id "aSSrXZzvu6PDJiRKE3KE_QAAAY0"]
[Tue Nov 25 03:00:47.166027 2025] [:error] [pid 48601:tid 48665] [client 172.177.187.227:3711] [client 172.177.187.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bunnies.php"] [unique_id "aSSrX4MM4MaVTk74-AYjwAAAAgg"]
[Tue Nov 25 03:00:48.018003 2025] [:error] [pid 16549:tid 16558] [client 172.177.187.227:7568] [client 172.177.187.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/d12.php"] [unique_id "aSSrYKeWW19A99PUw_eVJgAAAUY"]
[Tue Nov 25 03:00:48.819881 2025] [:error] [pid 48601:tid 48681] [client 172.177.187.227:3701] [client 172.177.187.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/d12.php"] [unique_id "aSSrYIMM4MaVTk74-AYjwgAAAhg"]
[Tue Nov 25 03:00:49.665157 2025] [:error] [pid 48599:tid 48620] [client 172.177.187.227:7603] [client 172.177.187.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/d12.php"] [unique_id "aSSrYZzvu6PDJiRKE3KFAQAAAZE"]
[Tue Nov 25 03:00:50.772262 2025] [:error] [pid 16441:tid 16466] [client 172.177.187.227:2161] [client 172.177.187.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/d12.php"] [unique_id "aSSrYoq_bc5MOa9Hfln7twAAAJY"]
[Tue Nov 25 03:00:51.817315 2025] [:error] [pid 16441:tid 16463] [client 172.177.187.227:2155] [client 172.177.187.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/diesinker.php"] [unique_id "aSSrY4q_bc5MOa9Hfln7vAAAAJM"]
[Tue Nov 25 03:00:53.441482 2025] [:error] [pid 16549:tid 16554] [client 172.177.187.227:3898] [client 172.177.187.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/diesinker.php"] [unique_id "aSSrZaeWW19A99PUw_eVMwAAAUI"]
[Tue Nov 25 03:00:54.150606 2025] [:error] [pid 48688:tid 48701] [client 172.177.187.227:7578] [client 172.177.187.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/diesinker.php"] [unique_id "aSSrZhm2q1FkzLam7A0GEwAAAkk"]
[Tue Nov 25 03:00:54.903780 2025] [:error] [pid 16441:tid 16455] [client 172.177.187.227:2157] [client 172.177.187.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/diesinker.php"] [unique_id "aSSrZoq_bc5MOa9Hfln7xAAAAIs"]
[Tue Nov 25 03:00:56.558864 2025] [:error] [pid 16441:tid 16466] [client 172.177.187.227:7600] [client 172.177.187.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/phrensying.php"] [unique_id "aSSraIq_bc5MOa9Hfln7xwAAAJY"]
[Tue Nov 25 03:00:57.677744 2025] [:error] [pid 48601:tid 48675] [client 172.177.187.227:3682] [client 172.177.187.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/phrensying.php"] [unique_id "aSSraYMM4MaVTk74-AYj1AAAAhI"]
[Tue Nov 25 03:01:00.402802 2025] [proxy_fcgi:error] [pid 49900:tid 49908] [client 172.177.187.227:7554] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 03:01:00.621046 2025] [proxy_fcgi:error] [pid 49900:tid 49920] [client 172.177.187.227:7554] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 03:01:00.854043 2025] [proxy_fcgi:error] [pid 49900:tid 49913] [client 172.177.187.227:7554] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 03:01:01.072324 2025] [proxy_fcgi:error] [pid 49900:tid 49910] [client 172.177.187.227:7554] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 03:01:01.292849 2025] [proxy_fcgi:error] [pid 49900:tid 49918] [client 172.177.187.227:7554] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 03:01:01.525629 2025] [proxy_fcgi:error] [pid 49900:tid 49917] [client 172.177.187.227:7554] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 03:01:01.746860 2025] [proxy_fcgi:error] [pid 49900:tid 49914] [client 172.177.187.227:7554] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 03:01:01.962874 2025] [proxy_fcgi:error] [pid 49900:tid 49904] [client 172.177.187.227:7554] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 03:01:02.996051 2025] [proxy_fcgi:error] [pid 49900:tid 49925] [client 172.177.187.227:7554] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 03:01:03.234470 2025] [proxy_fcgi:error] [pid 49900:tid 49909] [client 172.177.187.227:7554] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 03:01:03.487002 2025] [proxy_fcgi:error] [pid 49900:tid 49923] [client 172.177.187.227:7554] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 03:01:03.700023 2025] [:error] [pid 49900:tid 49902] [client 172.177.187.227:7554] [client 172.177.187.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/pyrometry.php"] [unique_id "aSSrbzCyPLrvg06aormMIwAAAAA"]
[Tue Nov 25 03:01:05.040273 2025] [:error] [pid 16593:tid 16608] [client 172.177.187.227:6715] [client 172.177.187.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/pyrometry.php"] [unique_id "aSSrcRVGznHBJI2LKpSakAAAAo0"]
[Tue Nov 25 03:01:05.905088 2025] [:error] [pid 49900:tid 49913] [client 172.177.187.227:3540] [client 172.177.187.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/pyrometry.php"] [unique_id "aSSrcTCyPLrvg06aormMJQAAAAs"]
[Tue Nov 25 03:01:07.817045 2025] [:error] [pid 48601:tid 48678] [client 172.177.187.227:3525] [client 172.177.187.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/pyrometry.php"] [unique_id "aSSrc4MM4MaVTk74-AYj2QAAAhU"]
[Tue Nov 25 03:01:09.979631 2025] [:error] [pid 16441:tid 16463] [client 172.177.187.227:6332] [client 172.177.187.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/frenchwomen.php"] [unique_id "aSSrdYq_bc5MOa9Hfln7ygAAAJM"]
[Tue Nov 25 03:01:11.540141 2025] [:error] [pid 48601:tid 48663] [client 172.177.187.227:5713] [client 172.177.187.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/frenchwomen.php"] [unique_id "aSSrd4MM4MaVTk74-AYj3AAAAgY"]
[Tue Nov 25 03:01:13.374712 2025] [:error] [pid 16549:tid 16558] [client 172.177.187.227:6291] [client 172.177.187.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/frenchwomen.php"] [unique_id "aSSreaeWW19A99PUw_eVZQAAAUY"]
[Tue Nov 25 03:01:15.191418 2025] [:error] [pid 48688:tid 48696] [client 172.177.187.227:1931] [client 172.177.187.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/frenchwomen.php"] [unique_id "aSSrexm2q1FkzLam7A0GJQAAAkQ"]
[Tue Nov 25 03:01:19.013687 2025] [:error] [pid 48600:tid 48643] [client 172.177.187.227:7037] [client 172.177.187.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sx.php"] [unique_id "aSSrf_tOzSUAQvWVjBfL9gAAAc0"]
[Tue Nov 25 03:01:20.350061 2025] [:error] [pid 9630:tid 9641] [client 172.177.187.227:1914] [client 172.177.187.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sx.php"] [unique_id "aSSrgCrSgUgPGkizt2qFCgAAAEk"]
[Tue Nov 25 03:01:22.148161 2025] [:error] [pid 16593:tid 16614] [client 172.177.187.227:7048] [client 172.177.187.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sx.php"] [unique_id "aSSrghVGznHBJI2LKpSapAAAApM"]
[Tue Nov 25 03:01:22.899392 2025] [:error] [pid 49900:tid 49915] [client 172.177.187.227:7054] [client 172.177.187.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sx.php"] [unique_id "aSSrgjCyPLrvg06aormMLwAAAA0"]
[Tue Nov 25 03:01:24.109842 2025] [:error] [pid 9630:tid 9653] [client 172.177.187.227:1917] [client 172.177.187.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/microspore.php"] [unique_id "aSSrhCrSgUgPGkizt2qFDwAAAFU"]
[Tue Nov 25 03:01:25.320904 2025] [:error] [pid 48688:tid 48702] [client 172.177.187.227:6384] [client 172.177.187.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/microspore.php"] [unique_id "aSSrhRm2q1FkzLam7A0GMwAAAko"]
[Tue Nov 25 03:01:26.836893 2025] [:error] [pid 48599:tid 48611] [client 172.177.187.227:8234] [client 172.177.187.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/microspore.php"] [unique_id "aSSrhpzvu6PDJiRKE3KFEgAAAYg"]
[Tue Nov 25 03:01:28.860751 2025] [:error] [pid 49900:tid 49916] [client 172.177.187.227:2402] [client 172.177.187.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/microspore.php"] [unique_id "aSSriDCyPLrvg06aormMOAAAAA4"]
[Tue Nov 25 03:01:30.992190 2025] [:error] [pid 9630:tid 9643] [client 172.177.187.227:4746] [client 172.177.187.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dinah.php"] [unique_id "aSSriirSgUgPGkizt2qFFAAAAEs"]
[Tue Nov 25 03:01:32.917064 2025] [:error] [pid 16549:tid 16561] [client 172.177.187.227:6350] [client 172.177.187.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dinah.php"] [unique_id "aSSrjKeWW19A99PUw_eVmQAAAUk"]
[Tue Nov 25 03:01:33.936371 2025] [:error] [pid 16441:tid 16444] [client 172.177.187.227:1542] [client 172.177.187.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dinah.php"] [unique_id "aSSrjYq_bc5MOa9Hfln72QAAAIA"]
[Tue Nov 25 03:01:35.444154 2025] [:error] [pid 48688:tid 48696] [client 172.177.187.227:7385] [client 172.177.187.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dinah.php"] [unique_id "aSSrjxm2q1FkzLam7A0GRAAAAkQ"]
[Tue Nov 25 03:01:36.415601 2025] [:error] [pid 49900:tid 49902] [client 172.177.187.227:1576] [client 172.177.187.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/abc.php"] [unique_id "aSSrkDCyPLrvg06aormMOwAAAAA"]
[Tue Nov 25 03:01:38.877978 2025] [:error] [pid 16516:tid 16522] [client 172.177.187.227:2400] [client 172.177.187.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/abc.php"] [unique_id "aSSrkvqZbniwaNwL8Xk54AAAAQM"]
[Tue Nov 25 03:01:41.149688 2025] [:error] [pid 48600:tid 48648] [client 172.177.187.227:2378] [client 172.177.187.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/abc.php"] [unique_id "aSSrlftOzSUAQvWVjBfMBAAAAdI"]
[Tue Nov 25 03:01:44.372052 2025] [:error] [pid 48688:tid 48701] [client 172.177.187.227:7378] [client 172.177.187.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/abc.php"] [unique_id "aSSrmBm2q1FkzLam7A0GUAAAAkk"]
[Tue Nov 25 03:01:46.268879 2025] [:error] [pid 48688:tid 48709] [client 172.177.187.227:6016] [client 172.177.187.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zc-729.php"] [unique_id "aSSrmhm2q1FkzLam7A0GWAAAAlE"]
[Tue Nov 25 03:01:49.045252 2025] [:error] [pid 48601:tid 48676] [client 172.177.187.227:1579] [client 172.177.187.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zc-729.php"] [unique_id "aSSrnYMM4MaVTk74-AYj6gAAAhM"]
[Tue Nov 25 03:01:50.997786 2025] [:error] [pid 16516:tid 16532] [client 172.177.187.227:3474] [client 172.177.187.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zc-729.php"] [unique_id "aSSrnvqZbniwaNwL8Xk57QAAAQ0"]
[Tue Nov 25 03:01:52.900827 2025] [:error] [pid 49900:tid 49912] [client 172.177.187.227:3476] [client 172.177.187.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zc-729.php"] [unique_id "aSSroDCyPLrvg06aormMRQAAAAo"]
[Tue Nov 25 03:01:54.625651 2025] [:error] [pid 16516:tid 16537] [client 172.177.187.227:4973] [client 172.177.187.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bo.php"] [unique_id "aSSrovqZbniwaNwL8Xk58wAAARI"]
[Tue Nov 25 03:01:56.010160 2025] [:error] [pid 16549:tid 16562] [client 172.177.187.227:4952] [client 172.177.187.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bo.php"] [unique_id "aSSrpKeWW19A99PUw_eVpAAAAUo"]
[Tue Nov 25 03:01:57.979739 2025] [:error] [pid 16516:tid 16543] [client 172.177.187.227:1536] [client 172.177.187.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bo.php"] [unique_id "aSSrpfqZbniwaNwL8Xk59gAAARg"]
[Tue Nov 25 03:01:59.317807 2025] [:error] [pid 48688:tid 48692] [client 172.177.187.227:4991] [client 172.177.187.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bo.php"] [unique_id "aSSrpxm2q1FkzLam7A0GdgAAAkA"]
[Tue Nov 25 03:02:01.441446 2025] [:error] [pid 16593:tid 16611] [client 172.177.187.227:4679] [client 172.177.187.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Contrller.php"] [unique_id "aSSrqRVGznHBJI2LKpSaxgAAApA"]
[Tue Nov 25 03:02:03.267605 2025] [proxy_fcgi:error] [pid 48688:tid 48695] [client 172.177.187.227:3457] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 03:02:04.865990 2025] [proxy_fcgi:error] [pid 48688:tid 48694] [client 172.177.187.227:3457] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 03:02:05.089758 2025] [proxy_fcgi:error] [pid 48688:tid 48700] [client 172.177.187.227:3457] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 03:02:05.311468 2025] [proxy_fcgi:error] [pid 48688:tid 48697] [client 172.177.187.227:3457] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 03:02:06.971064 2025] [proxy_fcgi:error] [pid 48688:tid 48711] [client 172.177.187.227:3457] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 03:02:07.210987 2025] [proxy_fcgi:error] [pid 48688:tid 48706] [client 172.177.187.227:3457] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 03:02:07.431597 2025] [proxy_fcgi:error] [pid 48688:tid 48696] [client 172.177.187.227:3457] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 03:02:07.658893 2025] [proxy_fcgi:error] [pid 48688:tid 48704] [client 172.177.187.227:3457] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 03:02:07.879917 2025] [proxy_fcgi:error] [pid 48688:tid 48692] [client 172.177.187.227:3457] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 03:02:08.107620 2025] [proxy_fcgi:error] [pid 48688:tid 48701] [client 172.177.187.227:3457] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 03:02:08.327514 2025] [proxy_fcgi:error] [pid 48688:tid 48714] [client 172.177.187.227:3457] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 03:02:09.273598 2025] [:error] [pid 48688:tid 48695] [client 172.177.187.227:3457] [client 172.177.187.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/disengaging.php"] [unique_id "aSSrsRm2q1FkzLam7A0GmwAAAkM"]
[Tue Nov 25 03:02:11.009812 2025] [:error] [pid 48600:tid 48648] [client 172.177.187.227:7249] [client 172.177.187.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/disengaging.php"] [unique_id "aSSrsvtOzSUAQvWVjBfMHwAAAdI"]
[Tue Nov 25 03:02:12.392966 2025] [:error] [pid 16441:tid 16445] [client 172.177.187.227:6757] [client 172.177.187.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/disengaging.php"] [unique_id "aSSrtIq_bc5MOa9Hfln79QAAAIE"]
[Tue Nov 25 03:02:13.851581 2025] [:error] [pid 48601:tid 48669] [client 172.177.187.227:4856] [client 172.177.187.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/disengaging.php"] [unique_id "aSSrtYMM4MaVTk74-AYkEAAAAgw"]
[Tue Nov 25 03:02:16.481500 2025] [:error] [pid 16441:tid 16468] [client 172.177.187.227:3459] [client 172.177.187.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tithings.php"] [unique_id "aSSruIq_bc5MOa9Hfln7_wAAAJg"]
[Tue Nov 25 03:02:17.570489 2025] [:error] [pid 16593:tid 16610] [client 172.177.187.227:3488] [client 172.177.187.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tithings.php"] [unique_id "aSSruRVGznHBJI2LKpSazwAAAo8"]
[Tue Nov 25 03:02:18.680280 2025] [:error] [pid 49900:tid 49905] [client 172.177.187.227:7289] [client 172.177.187.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tithings.php"] [unique_id "aSSrujCyPLrvg06aormMdQAAAAM"]
[Tue Nov 25 03:02:20.300537 2025] [:error] [pid 48600:tid 48646] [client 172.177.187.227:1125] [client 172.177.187.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tithings.php"] [unique_id "aSSrvPtOzSUAQvWVjBfMKgAAAdA"]
[Tue Nov 25 03:02:23.301385 2025] [:error] [pid 16441:tid 16446] [client 172.177.187.227:6950] [client 172.177.187.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/muscovadite.php"] [unique_id "aSSrv4q_bc5MOa9Hfln8DQAAAII"]
[Tue Nov 25 03:02:24.091604 2025] [:error] [pid 16441:tid 16467] [client 172.177.187.227:3457] [client 172.177.187.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/muscovadite.php"] [unique_id "aSSrwIq_bc5MOa9Hfln8EQAAAJc"]
[Tue Nov 25 03:02:25.425469 2025] [:error] [pid 48688:tid 48710] [client 172.177.187.227:6359] [client 172.177.187.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/muscovadite.php"] [unique_id "aSSrwRm2q1FkzLam7A0GpgAAAlI"]
[Tue Nov 25 03:02:27.802482 2025] [:error] [pid 9630:tid 9652] [client 172.177.187.227:8197] [client 172.177.187.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/muscovadite.php"] [unique_id "aSSrwyrSgUgPGkizt2qFTQAAAFQ"]
[Tue Nov 25 03:02:31.217056 2025] [:error] [pid 9630:tid 9649] [client 172.177.187.227:2407] [client 172.177.187.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hans.php"] [unique_id "aSSrxyrSgUgPGkizt2qFTwAAAFE"]
[Tue Nov 25 03:02:34.086785 2025] [:error] [pid 48688:tid 48697] [client 172.177.187.227:7006] [client 172.177.187.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hans.php"] [unique_id "aSSryhm2q1FkzLam7A0GswAAAkU"]
[Tue Nov 25 03:02:36.131798 2025] [:error] [pid 16593:tid 16600] [client 172.177.187.227:2329] [client 172.177.187.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hans.php"] [unique_id "aSSrzBVGznHBJI2LKpSa2AAAAoU"]
[Tue Nov 25 03:02:38.132720 2025] [:error] [pid 48688:tid 48716] [client 172.177.187.227:1920] [client 172.177.187.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hans.php"] [unique_id "aSSrzhm2q1FkzLam7A0GuAAAAlg"]
[Tue Nov 25 03:02:39.006128 2025] [:error] [pid 49900:tid 49903] [client 172.177.187.227:7018] [client 172.177.187.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/coenoecic.php"] [unique_id "aSSrzzCyPLrvg06aormMkgAAAAE"]
[Tue Nov 25 03:02:40.277582 2025] [:error] [pid 48688:tid 48714] [client 172.177.187.227:7071] [client 172.177.187.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/coenoecic.php"] [unique_id "aSSr0Bm2q1FkzLam7A0GvAAAAlY"]
[Tue Nov 25 03:02:41.477202 2025] [:error] [pid 16593:tid 16616] [client 172.177.187.227:6683] [client 172.177.187.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/coenoecic.php"] [unique_id "aSSr0RVGznHBJI2LKpSa2gAAApU"]
[Tue Nov 25 03:02:43.603046 2025] [:error] [pid 16441:tid 16444] [client 172.177.187.227:6674] [client 172.177.187.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/coenoecic.php"] [unique_id "aSSr04q_bc5MOa9Hfln8JgAAAIA"]
[Tue Nov 25 03:02:45.069527 2025] [:error] [pid 16441:tid 16456] [client 172.177.187.227:7109] [client 172.177.187.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xtt.php"] [unique_id "aSSr1Yq_bc5MOa9Hfln8KAAAAIw"]
[Tue Nov 25 03:02:46.143859 2025] [:error] [pid 48688:tid 48709] [client 172.177.187.227:1263] [client 172.177.187.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xtt.php"] [unique_id "aSSr1hm2q1FkzLam7A0GwgAAAlE"]
[Tue Nov 25 03:02:48.302995 2025] [:error] [pid 48688:tid 48698] [client 172.177.187.227:7308] [client 172.177.187.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xtt.php"] [unique_id "aSSr2Bm2q1FkzLam7A0GwwAAAkY"]
[Tue Nov 25 03:02:49.681002 2025] [:error] [pid 16593:tid 16618] [client 172.177.187.227:2820] [client 172.177.187.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xtt.php"] [unique_id "aSSr2RVGznHBJI2LKpSa3wAAApc"]
[Tue Nov 25 03:02:52.125345 2025] [:error] [pid 49900:tid 49905] [client 172.177.187.227:8008] [client 172.177.187.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/edd.php"] [unique_id "aSSr3DCyPLrvg06aormMnwAAAAM"]
[Tue Nov 25 03:02:54.475889 2025] [:error] [pid 49900:tid 49919] [client 172.177.187.227:7918] [client 172.177.187.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/edd.php"] [unique_id "aSSr3jCyPLrvg06aormMpAAAABE"]
[Tue Nov 25 03:02:55.891728 2025] [:error] [pid 16516:tid 16526] [client 172.177.187.227:6143] [client 172.177.187.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/edd.php"] [unique_id "aSSr3_qZbniwaNwL8Xk6BwAAAQc"]
[Tue Nov 25 03:02:58.239572 2025] [:error] [pid 16516:tid 16529] [client 172.177.187.227:1819] [client 172.177.187.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/edd.php"] [unique_id "aSSr4vqZbniwaNwL8Xk6CAAAAQo"]
[Tue Nov 25 03:02:59.265303 2025] [:error] [pid 49900:tid 49911] [client 172.177.187.227:1802] [client 172.177.187.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/prototheria.php"] [unique_id "aSSr4zCyPLrvg06aormMrAAAAAk"]
[Tue Nov 25 03:03:01.172417 2025] [:error] [pid 9630:tid 9648] [client 172.177.187.227:1825] [client 172.177.187.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/prototheria.php"] [unique_id "aSSr5SrSgUgPGkizt2qFXgAAAFA"]
[Tue Nov 25 03:03:02.967341 2025] [:error] [pid 49900:tid 49913] [client 172.177.187.227:3129] [client 172.177.187.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/prototheria.php"] [unique_id "aSSr5jCyPLrvg06aormMrgAAAAs"]
[Tue Nov 25 03:03:05.877149 2025] [:error] [pid 16516:tid 16522] [client 172.177.187.227:3016] [client 172.177.187.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/prototheria.php"] [unique_id "aSSr6fqZbniwaNwL8Xk6CQAAAQM"]
[Tue Nov 25 03:03:07.844922 2025] [:error] [pid 49900:tid 49924] [client 172.177.187.227:3834] [client 172.177.187.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/washland.php"] [unique_id "aSSr6zCyPLrvg06aormMsAAAABY"]
[Tue Nov 25 03:03:09.510930 2025] [proxy_fcgi:error] [pid 16516:tid 16519] [client 172.177.187.227:3298] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 03:03:09.742473 2025] [proxy_fcgi:error] [pid 16516:tid 16522] [client 172.177.187.227:3298] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 03:03:09.953560 2025] [proxy_fcgi:error] [pid 16516:tid 16539] [client 172.177.187.227:3298] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 03:03:10.775208 2025] [proxy_fcgi:error] [pid 16516:tid 16537] [client 172.177.187.227:3298] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 03:03:11.007160 2025] [proxy_fcgi:error] [pid 16516:tid 16521] [client 172.177.187.227:3298] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 04:35:11.253820 2025] [:error] [pid 14168:tid 14190] [client 3.86.214.214:57904] [client 3.86.214.214] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.git/config"] [unique_id "aSTBf_R-ZDU0QEgAIItbfgAAANM"]
[Tue Nov 25 09:20:18.674066 2025] [:error] [pid 14688:tid 14703] [client 94.247.172.129:48694] [client 94.247.172.129] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dwelectservices.com.au|F|4"] [data "close, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dwelectservices.com.au"] [uri "/"] [unique_id "aSUEUm9vYrBoEsiDniwiFQAAAQ0"]
[Tue Nov 25 10:55:58.320359 2025] [:error] [pid 14078:tid 14143] [client 213.21.239.4:39074] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/css../.git/config"] [unique_id "aSUavtVXYbb0ii_rVoKlkQAAAIY"]
[Tue Nov 25 10:55:58.320961 2025] [:error] [pid 14076:tid 14096] [client 213.21.239.4:39112] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/dwelectservices/static../.git/config"] [unique_id "aSUavnsB4Gz6Qw-pvBtdTwAAAA8"]
[Tue Nov 25 10:55:58.322753 2025] [:error] [pid 14076:tid 14089] [client 213.21.239.4:39114] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/content../.git/config"] [unique_id "aSUavnsB4Gz6Qw-pvBtdUAAAAAg"]
[Tue Nov 25 10:55:58.324330 2025] [:error] [pid 28842:tid 28999] [client 213.21.239.4:39140] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/backup/.git/config"] [unique_id "aSUavtNmoaPf6T4-6C3qMgAAA0k"]
[Tue Nov 25 10:55:58.324834 2025] [:error] [pid 14688:tid 14699] [client 213.21.239.4:39170] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/admin/.git/config"] [unique_id "aSUavm9vYrBoEsiDniw3ugAAAQk"]
[Tue Nov 25 10:55:58.329600 2025] [:error] [pid 14078:tid 14145] [client 213.21.239.4:39040] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/app/.git/config"] [unique_id "aSUavtVXYbb0ii_rVoKlkgAAAIg"]
[Tue Nov 25 10:55:58.330082 2025] [:error] [pid 14076:tid 14094] [client 213.21.239.4:39030] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/dwelectservices/..;/.git/config"] [unique_id "aSUavnsB4Gz6Qw-pvBtdUQAAAA0"]
[Tue Nov 25 10:55:58.330443 2025] [:error] [pid 14688:tid 14702] [client 213.21.239.4:39086] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/dwelectservices/.git/config;.."] [unique_id "aSUavm9vYrBoEsiDniw3uwAAAQw"]
[Tue Nov 25 10:55:58.332216 2025] [:error] [pid 14688:tid 14692] [client 213.21.239.4:39146] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/dev/.git/config"] [unique_id "aSUavm9vYrBoEsiDniw3vAAAAQI"]
[Tue Nov 25 10:55:58.335050 2025] [:error] [pid 14078:tid 14160] [client 213.21.239.4:39206] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/api/.git/config"] [unique_id "aSUavtVXYbb0ii_rVoKllQAAAJc"]
[Tue Nov 25 10:55:58.336381 2025] [:error] [pid 14078:tid 14155] [client 213.21.239.4:39008] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/dwelectservices../.git/config"] [unique_id "aSUavtVXYbb0ii_rVoKllgAAAJI"]
[Tue Nov 25 10:55:58.336931 2025] [:error] [pid 14078:tid 14144] [client 213.21.239.4:39098] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/dwelectservices/.git/%0Aconfig"] [unique_id "aSUavtVXYbb0ii_rVoKllwAAAIc"]
[Tue Nov 25 10:55:58.340094 2025] [:error] [pid 14076:tid 14093] [client 213.21.239.4:39122] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/database/.git/config"] [unique_id "aSUavnsB4Gz6Qw-pvBtdUwAAAAw"]
[Tue Nov 25 10:55:58.343608 2025] [:error] [pid 14076:tid 14081] [client 213.21.239.4:39020] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/dwelectservices/.git/config;"] [unique_id "aSUavnsB4Gz6Qw-pvBtdVQAAAAA"]
[Tue Nov 25 10:55:58.344212 2025] [:error] [pid 14076:tid 14082] [client 213.21.239.4:39070] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/dwelectservices/;/.git/config"] [unique_id "aSUavnsB4Gz6Qw-pvBtdVgAAAAE"]
[Tue Nov 25 10:55:58.345601 2025] [:error] [pid 14076:tid 14098] [client 213.21.239.4:39068] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/assets../.git/config"] [unique_id "aSUavnsB4Gz6Qw-pvBtdVwAAABE"]
[Tue Nov 25 10:55:58.346415 2025] [:error] [pid 14078:tid 14153] [client 213.21.239.4:39088] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/dwelectservices/.git/config"] [unique_id "aSUavtVXYbb0ii_rVoKlmAAAAJA"]
[Tue Nov 25 10:55:58.347702 2025] [:error] [pid 28836:tid 28968] [client 213.21.239.4:39158] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/application/.git/config"] [unique_id "aSUavpwNRsoxcLQGkTc7cwAAAs0"]
[Tue Nov 25 10:55:58.349224 2025] [:error] [pid 14168:tid 14174] [client 213.21.239.4:39230] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/common/.git/config"] [unique_id "aSUavvR-ZDU0QEgAIIvLsQAAAMM"]
[Tue Nov 25 10:55:58.349918 2025] [:error] [pid 28842:tid 29020] [client 213.21.239.4:39228] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/developer/.git/config"] [unique_id "aSUavtNmoaPf6T4-6C3qMwAAA1I"]
[Tue Nov 25 10:56:00.896430 2025] [:error] [pid 28836:tid 28962] [client 213.21.239.4:39468] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.git/%0Aconfig"] [unique_id "aSUawJwNRsoxcLQGkTc7dwAAAsc"]
[Tue Nov 25 10:56:00.897838 2025] [:error] [pid 14688:tid 14700] [client 213.21.239.4:39530] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/..;/.git/config"] [unique_id "aSUawG9vYrBoEsiDniw3xAAAAQo"]
[Tue Nov 25 10:56:00.899292 2025] [:error] [pid 14688:tid 14710] [client 213.21.239.4:39602] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/dwelectservices.com.au/.git/config;.."] [unique_id "aSUawG9vYrBoEsiDniw3xQAAARQ"]
[Tue Nov 25 10:56:00.903711 2025] [:error] [pid 28836:tid 28965] [client 213.21.239.4:39448] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/dwelectservices.com.au/;/.git/config"] [unique_id "aSUawJwNRsoxcLQGkTc7eAAAAso"]
[Tue Nov 25 10:56:00.903717 2025] [:error] [pid 28609:tid 28638] [client 213.21.239.4:39452] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/dwelectservices.com.au/static../.git/config"] [unique_id "aSUawCGGdT-nZJVs3x1JagAAAZQ"]
[Tue Nov 25 10:56:00.905768 2025] [:error] [pid 28842:tid 28993] [client 213.21.239.4:39568] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/dwelectservices.com.au/.git/config;"] [unique_id "aSUawNNmoaPf6T4-6C3qNAAAA0M"]
[Tue Nov 25 10:56:00.906250 2025] [:error] [pid 28740:tid 28795] [client 213.21.239.4:39574] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.git/config"] [unique_id "aSUawFppQCoYxWW6V0X1VAAAAkQ"]
[Tue Nov 25 10:56:00.907130 2025] [:error] [pid 14688:tid 14707] [client 213.21.239.4:39472] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/images../.git/config"] [unique_id "aSUawG9vYrBoEsiDniw3xgAAARE"]
[Tue Nov 25 10:56:00.911517 2025] [:error] [pid 28842:tid 28997] [client 213.21.239.4:39552] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/dwelectservices.com.au/..;/.git/config"] [unique_id "aSUawNNmoaPf6T4-6C3qNQAAA0c"]
[Tue Nov 25 10:56:00.911517 2025] [:error] [pid 28739:tid 28764] [client 213.21.239.4:39524] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/dwelectservices.com.au../.git/config"] [unique_id "aSUawBxGpKmlkG4FexQCwgAAAgI"]
[Tue Nov 25 10:56:00.912087 2025] [:error] [pid 14688:tid 14696] [client 213.21.239.4:39554] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/dwelectservices.com.au/.git/%0Aconfig"] [unique_id "aSUawG9vYrBoEsiDniw3xwAAAQY"]
[Tue Nov 25 10:56:00.912138 2025] [:error] [pid 14077:tid 14117] [client 213.21.239.4:39596] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/;/.git/config"] [unique_id "aSUawBG9n7UHEkwDTyjBtAAAAEc"]
[Tue Nov 25 10:56:00.913471 2025] [:error] [pid 28739:tid 28776] [client 213.21.239.4:39598] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/git/.git/config"] [unique_id "aSUawBxGpKmlkG4FexQCwwAAAg4"]
[Tue Nov 25 10:56:00.918751 2025] [:error] [pid 28740:tid 28791] [client 213.21.239.4:39536] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/dwelectservices.com.au/.git/config"] [unique_id "aSUawFppQCoYxWW6V0X1VQAAAkA"]
[Tue Nov 25 10:56:00.919067 2025] [:error] [pid 28740:tid 28792] [client 213.21.239.4:39484] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.git/config;.."] [unique_id "aSUawFppQCoYxWW6V0X1VgAAAkE"]
[Tue Nov 25 10:56:00.926559 2025] [:error] [pid 28740:tid 28794] [client 213.21.239.4:39588] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.git/config;"] [unique_id "aSUawFppQCoYxWW6V0X1VwAAAkM"]
[Tue Nov 25 10:56:01.878322 2025] [:error] [pid 14077:tid 14122] [client 213.21.239.4:53512] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/js../.git/config"] [unique_id "aSUawRG9n7UHEkwDTyjBtQAAAEw"]
[Tue Nov 25 10:56:01.878726 2025] [:error] [pid 28739:tid 28773] [client 213.21.239.4:53518] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/m/.git/config"] [unique_id "aSUawRxGpKmlkG4FexQCxgAAAgs"]
[Tue Nov 25 10:56:01.886251 2025] [:error] [pid 28739:tid 28762] [client 213.21.239.4:53520] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/live/.git/config"] [unique_id "aSUawRxGpKmlkG4FexQCyAAAAgA"]
[Tue Nov 25 10:56:01.887441 2025] [:error] [pid 28739:tid 28779] [client 213.21.239.4:53504] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/message-api/.git/config"] [unique_id "aSUawRxGpKmlkG4FexQCyQAAAhE"]
[Tue Nov 25 10:56:01.886230 2025] [:error] [pid 28739:tid 28780] [client 213.21.239.4:53492] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/lib../.git/config"] [unique_id "aSUawRxGpKmlkG4FexQCxwAAAhI"]
[Tue Nov 25 10:56:01.898352 2025] [:error] [pid 28739:tid 28786] [client 213.21.239.4:53500] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/img../.git/config"] [unique_id "aSUawRxGpKmlkG4FexQCygAAAhg"]
[Tue Nov 25 10:56:03.881859 2025] [:error] [pid 14076:tid 14102] [client 213.21.239.4:54010] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.git/%0Aconfig"] [unique_id "aSUaw3sB4Gz6Qw-pvBtdYQAAABU"]
[Tue Nov 25 10:56:03.886377 2025] [:error] [pid 28740:tid 28810] [client 213.21.239.4:54070] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/dwelectservices.com.au/.git/%0Aconfig"] [unique_id "aSUaw1ppQCoYxWW6V0X1WwAAAlM"]
[Tue Nov 25 10:56:03.887540 2025] [:error] [pid 14168:tid 14194] [client 213.21.239.4:53978] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/dwelectservices.com.au/static../.git/config"] [unique_id "aSUaw_R-ZDU0QEgAIIvLtgAAANc"]
[Tue Nov 25 10:56:03.889034 2025] [:error] [pid 28740:tid 28807] [client 213.21.239.4:54006] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/public/.git/config"] [unique_id "aSUaw1ppQCoYxWW6V0X1XgAAAlA"]
[Tue Nov 25 10:56:03.892479 2025] [:error] [pid 28836:tid 28967] [client 213.21.239.4:54146] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/dwelectservices.com.au/.git/config;"] [unique_id "aSUaw5wNRsoxcLQGkTc7egAAAsw"]
[Tue Nov 25 10:56:03.892489 2025] [:error] [pid 28740:tid 28802] [client 213.21.239.4:54046] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/qa/.git/config"] [unique_id "aSUaw1ppQCoYxWW6V0X1XwAAAks"]
[Tue Nov 25 10:56:03.895469 2025] [:error] [pid 28842:tid 29005] [client 213.21.239.4:53964] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/new/.git/config"] [unique_id "aSUaw9NmoaPf6T4-6C3qPwAAA08"]
[Tue Nov 25 10:56:03.899171 2025] [:error] [pid 14688:tid 14700] [client 213.21.239.4:53990] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/prod/.git/config"] [unique_id "aSUaw29vYrBoEsiDniw3ygAAAQo"]
[Tue Nov 25 10:56:03.901372 2025] [:error] [pid 28609:tid 28635] [client 213.21.239.4:54140] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/../.git/config"] [unique_id "aSUawyGGdT-nZJVs3x1JbAAAAZE"]
[Tue Nov 25 10:56:03.901962 2025] [core:error] [pid 28609:tid 28633] [client 213.21.239.4:54096] AH10244: invalid URI path (/../config)
[Tue Nov 25 10:56:03.909112 2025] [:error] [pid 14078:tid 14145] [client 213.21.239.4:54086] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/dwelectservices.com.au../.git/config"] [unique_id "aSUaw9VXYbb0ii_rVoKlnAAAAIg"]
[Tue Nov 25 10:56:03.910952 2025] [:error] [pid 28609:tid 28625] [client 213.21.239.4:54218] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/dwelectservices.com.au/;/.git/config"] [unique_id "aSUawyGGdT-nZJVs3x1JbgAAAYc"]
[Tue Nov 25 10:56:03.914596 2025] [:error] [pid 14078:tid 14160] [client 213.21.239.4:54050] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dwelectservices.com.au../config"] [unique_id "aSUaw9VXYbb0ii_rVoKlnQAAAJc"]
[Tue Nov 25 10:56:03.925076 2025] [:error] [pid 28740:tid 28791] [client 213.21.239.4:54322] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/dwelectservices.com.au/..;/.git/config"] [unique_id "aSUaw1ppQCoYxWW6V0X1YgAAAkA"]
[Tue Nov 25 10:56:03.925946 2025] [:error] [pid 28842:tid 29017] [client 213.21.239.4:54162] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/dwelectservices.com.au/.git/config;.."] [unique_id "aSUaw9NmoaPf6T4-6C3qQQAAA1A"]
[Tue Nov 25 10:56:03.926675 2025] [:error] [pid 28842:tid 29018] [client 213.21.239.4:54114] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/dwelectservices.com.au/.git/config"] [unique_id "aSUaw9NmoaPf6T4-6C3qQwAAA1E"]
[Tue Nov 25 10:56:04.906013 2025] [:error] [pid 14168:tid 14178] [client 213.21.239.4:54368] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/..;/.git/config"] [unique_id "aSUaxPR-ZDU0QEgAIIvLuwAAAMc"]
[Tue Nov 25 10:56:05.903329 2025] [:error] [pid 14688:tid 14703] [client 213.21.239.4:54582] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.git/config"] [unique_id "aSUaxW9vYrBoEsiDniw30AAAAQ0"]
[Tue Nov 25 10:56:05.910346 2025] [:error] [pid 28842:tid 28997] [client 213.21.239.4:54540] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.git;/config"] [unique_id "aSUaxdNmoaPf6T4-6C3qSAAAA0c"]
[Tue Nov 25 10:56:05.920340 2025] [:error] [pid 14078:tid 14147] [client 213.21.239.4:54696] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/;/.git/config"] [unique_id "aSUaxdVXYbb0ii_rVoKlpAAAAIo"]
[Tue Nov 25 10:56:05.932523 2025] [:error] [pid 28836:tid 28962] [client 213.21.239.4:54844] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.git/config;"] [unique_id "aSUaxZwNRsoxcLQGkTc7gwAAAsc"]
[Tue Nov 25 10:56:05.955004 2025] [:error] [pid 14077:tid 14114] [client 213.21.239.4:54828] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.git/config;.."] [unique_id "aSUaxRG9n7UHEkwDTyjByQAAAEQ"]
[Tue Nov 25 10:56:05.958590 2025] [:error] [pid 14077:tid 14112] [client 213.21.239.4:54852] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dwelectservices.com.au../config"] [unique_id "aSUaxRG9n7UHEkwDTyjBywAAAEI"]
[Tue Nov 25 10:56:06.885108 2025] [:error] [pid 14077:tid 14127] [client 213.21.239.4:54904] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/wp-content/.git/config"] [unique_id "aSUaxhG9n7UHEkwDTyjBzAAAAFE"]
[Tue Nov 25 10:56:06.889050 2025] [:error] [pid 14077:tid 14129] [client 213.21.239.4:54920] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/.git/config"] [unique_id "aSUaxhG9n7UHEkwDTyjBzwAAAFM"]
[Tue Nov 25 10:56:06.901699 2025] [:error] [pid 14077:tid 14124] [client 213.21.239.4:54896] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/web/.git/config"] [unique_id "aSUaxhG9n7UHEkwDTyjB0wAAAE4"]
[Tue Nov 25 10:56:06.903274 2025] [:error] [pid 14077:tid 14128] [client 213.21.239.4:54992] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/staging/.git/config"] [unique_id "aSUaxhG9n7UHEkwDTyjB1AAAAFI"]
[Tue Nov 25 10:56:06.903357 2025] [:error] [pid 28842:tid 28990] [client 213.21.239.4:54886] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/uat/.git/config"] [unique_id "aSUaxtNmoaPf6T4-6C3qTgAAA0A"]
[Tue Nov 25 10:56:06.904455 2025] [:error] [pid 14077:tid 14119] [client 213.21.239.4:54994] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/static../.git/config"] [unique_id "aSUaxhG9n7UHEkwDTyjB1QAAAEk"]
[Tue Nov 25 10:56:06.909057 2025] [:error] [pid 14077:tid 14122] [client 213.21.239.4:54936] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/.git/config"] [unique_id "aSUaxhG9n7UHEkwDTyjB1gAAAEw"]
[Tue Nov 25 10:56:06.912366 2025] [:error] [pid 14688:tid 14703] [client 213.21.239.4:55028] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/static../.git/config"] [unique_id "aSUaxm9vYrBoEsiDniw32QAAAQ0"]
[Tue Nov 25 10:56:07.963980 2025] [:error] [pid 14168:tid 14194] [client 213.21.239.4:55096] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.git;/config"] [unique_id "aSUax_R-ZDU0QEgAIIvLzwAAANc"]
[Tue Nov 25 12:00:07.556300 2025] [:error] [pid 14688:tid 14709] [client 52.58.106.193:41510] [client 52.58.106.193] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env"] [unique_id "aSUpx29vYrBoEsiDnixH1wAAARM"]
[Tue Nov 25 12:00:08.533065 2025] [:error] [pid 28842:tid 29017] [client 52.58.106.193:41520] [client 52.58.106.193] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.local"] [unique_id "aSUpyNNmoaPf6T4-6C364QAAA1A"]
[Tue Nov 25 12:00:09.509684 2025] [:error] [pid 14168:tid 14187] [client 52.58.106.193:41532] [client 52.58.106.193] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.dev"] [unique_id "aSUpyfR-ZDU0QEgAIIvh3wAAANA"]
[Tue Nov 25 12:00:10.486251 2025] [:error] [pid 28836:tid 28962] [client 52.58.106.193:41534] [client 52.58.106.193] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.prod"] [unique_id "aSUpypwNRsoxcLQGkTdL3AAAAsc"]
[Tue Nov 25 12:00:11.454381 2025] [:error] [pid 14077:tid 14119] [client 52.58.106.193:41538] [client 52.58.106.193] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.staging"] [unique_id "aSUpyxG9n7UHEkwDTyjQYQAAAEk"]
[Tue Nov 25 12:00:12.438010 2025] [:error] [pid 14168:tid 14176] [client 52.58.106.193:41552] [client 52.58.106.193] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.development"] [unique_id "aSUpzPR-ZDU0QEgAIIvh7gAAAMU"]
[Tue Nov 25 12:00:13.414687 2025] [:error] [pid 28739:tid 28770] [client 52.58.106.193:41562] [client 52.58.106.193] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.production"] [unique_id "aSUpzRxGpKmlkG4FexQQpgAAAgg"]
[Tue Nov 25 12:00:14.382343 2025] [:error] [pid 14168:tid 14187] [client 52.58.106.193:41574] [client 52.58.106.193] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.test"] [unique_id "aSUpzvR-ZDU0QEgAIIvh8gAAANA"]
[Tue Nov 25 12:00:15.348217 2025] [:error] [pid 28609:tid 28636] [client 52.58.106.193:49002] [client 52.58.106.193] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.backup"] [unique_id "aSUpzyGGdT-nZJVs3x1W8wAAAZI"]
[Tue Nov 25 12:00:16.324105 2025] [:error] [pid 28739:tid 28782] [client 52.58.106.193:49018] [client 52.58.106.193] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env~"] [unique_id "aSUp0BxGpKmlkG4FexQQqAAAAhQ"]
[Tue Nov 25 12:00:17.334604 2025] [:error] [pid 14076:tid 14099] [client 52.58.106.193:49024] [client 52.58.106.193] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.sample"] [unique_id "aSUp0XsB4Gz6Qw-pvBt6rAAAABI"]
[Tue Nov 25 12:00:18.310123 2025] [:error] [pid 28836:tid 28956] [client 52.58.106.193:49036] [client 52.58.106.193] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.old"] [unique_id "aSUp0pwNRsoxcLQGkTdL4AAAAsE"]
[Tue Nov 25 12:00:19.279405 2025] [:error] [pid 14076:tid 14087] [client 52.58.106.193:49052] [client 52.58.106.193] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.bak"] [unique_id "aSUp03sB4Gz6Qw-pvBt6sgAAAAY"]
[Tue Nov 25 12:00:20.260791 2025] [:error] [pid 28740:tid 28815] [client 52.58.106.193:49060] [client 52.58.106.193] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.save"] [unique_id "aSUp1FppQCoYxWW6V0UCDAAAAlg"]
[Tue Nov 25 12:00:21.234996 2025] [:error] [pid 14078:tid 14142] [client 52.58.106.193:49070] [client 52.58.106.193] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.orig"] [unique_id "aSUp1dVXYbb0ii_rVoK5mQAAAIU"]
[Tue Nov 25 12:00:22.200662 2025] [:error] [pid 14076:tid 14084] [client 52.58.106.193:49078] [client 52.58.106.193] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.swp"] [unique_id "aSUp1nsB4Gz6Qw-pvBt6tAAAAAM"]
[Tue Nov 25 12:00:23.176204 2025] [:error] [pid 14076:tid 14099] [client 52.58.106.193:49090] [client 52.58.106.193] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.tmp"] [unique_id "aSUp13sB4Gz6Qw-pvBt6uAAAABI"]
[Tue Nov 25 12:00:24.152589 2025] [:error] [pid 14076:tid 14088] [client 52.58.106.193:49102] [client 52.58.106.193] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.dist"] [unique_id "aSUp2HsB4Gz6Qw-pvBt6vAAAAAc"]
[Tue Nov 25 12:00:25.130275 2025] [:error] [pid 14688:tid 14693] [client 52.58.106.193:52544] [client 52.58.106.193] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/admin/.env"] [unique_id "aSUp2W9vYrBoEsiDnixH6gAAAQM"]
[Tue Nov 25 12:00:26.097398 2025] [:error] [pid 14076:tid 14086] [client 52.58.106.193:52560] [client 52.58.106.193] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/admin/.env.save"] [unique_id "aSUp2nsB4Gz6Qw-pvBt6wwAAAAU"]
[Tue Nov 25 12:00:27.064277 2025] [:error] [pid 14076:tid 14090] [client 52.58.106.193:52570] [client 52.58.106.193] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/admin/.env.bak"] [unique_id "aSUp23sB4Gz6Qw-pvBt6xwAAAAk"]
[Tue Nov 25 12:00:28.038457 2025] [:error] [pid 14688:tid 14707] [client 52.58.106.193:52580] [client 52.58.106.193] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/admin/.env.old"] [unique_id "aSUp3G9vYrBoEsiDnixH8QAAARE"]
[Tue Nov 25 12:00:29.015246 2025] [:error] [pid 14076:tid 14084] [client 52.58.106.193:52584] [client 52.58.106.193] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/api/.env"] [unique_id "aSUp3XsB4Gz6Qw-pvBt6zAAAAAM"]
[Tue Nov 25 12:00:29.983193 2025] [:error] [pid 14078:tid 14150] [client 52.58.106.193:52600] [client 52.58.106.193] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/api/.env.save"] [unique_id "aSUp3dVXYbb0ii_rVoK5nAAAAI0"]
[Tue Nov 25 12:00:30.952892 2025] [:error] [pid 14168:tid 14194] [client 52.58.106.193:52616] [client 52.58.106.193] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/api/.env.bak"] [unique_id "aSUp3vR-ZDU0QEgAIIviAAAAANc"]
[Tue Nov 25 12:00:31.924186 2025] [:error] [pid 28739:tid 28778] [client 52.58.106.193:52622] [client 52.58.106.193] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/api/.env.old"] [unique_id "aSUp3xxGpKmlkG4FexQQtAAAAhA"]
[Tue Nov 25 12:00:32.900199 2025] [:error] [pid 28609:tid 28637] [client 52.58.106.193:52632] [client 52.58.106.193] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/app/.env"] [unique_id "aSUp4CGGdT-nZJVs3x1XDAAAAZM"]
[Tue Nov 25 12:00:33.876645 2025] [:error] [pid 28836:tid 29014] [client 52.58.106.193:52634] [client 52.58.106.193] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/app/.env.save"] [unique_id "aSUp4ZwNRsoxcLQGkTdL7wAAAtg"]
[Tue Nov 25 12:00:34.852596 2025] [:error] [pid 14688:tid 14696] [client 52.58.106.193:47472] [client 52.58.106.193] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/app/.env.bak"] [unique_id "aSUp4m9vYrBoEsiDnixH-QAAAQY"]
[Tue Nov 25 12:00:35.827213 2025] [:error] [pid 14078:tid 14138] [client 52.58.106.193:47486] [client 52.58.106.193] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/app/.env.old"] [unique_id "aSUp49VXYbb0ii_rVoK5owAAAIE"]
[Tue Nov 25 12:00:36.801198 2025] [:error] [pid 14168:tid 14190] [client 52.58.106.193:47494] [client 52.58.106.193] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/config/.env"] [unique_id "aSUp5PR-ZDU0QEgAIIviCQAAANM"]
[Tue Nov 25 18:53:04.557625 2025] [proxy_fcgi:error] [pid 14078:tid 14140] [client 138.199.60.187:43280] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 18:53:04.707468 2025] [proxy_fcgi:error] [pid 14078:tid 14155] [client 138.199.60.187:43280] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 18:53:04.848495 2025] [:error] [pid 14078:tid 14157] [client 138.199.60.187:43280] [client 138.199.60.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/O-Simple.php"] [unique_id "aSWKkNVXYbb0ii_rVoI3wAAAAJQ"]
[Tue Nov 25 18:53:05.072516 2025] [:error] [pid 14078:tid 14160] [client 138.199.60.187:43648] [client 138.199.60.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/O-Simple.php"] [unique_id "aSWKkdVXYbb0ii_rVoI3wwAAAJc"]
[Tue Nov 25 18:53:05.350995 2025] [:error] [pid 28836:tid 29006] [client 138.199.60.187:43826] [client 138.199.60.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/O-Simple.php"] [unique_id "aSWKkZwNRsoxcLQGkTe3QwAAAtA"]
[Tue Nov 25 18:53:05.638516 2025] [:error] [pid 2987:tid 3005] [client 138.199.60.187:43978] [client 138.199.60.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/O-Simple.php"] [unique_id "aSWKkc-djEt-pTzPxnyTwAAAAVA"]
[Tue Nov 25 18:53:05.923860 2025] [:error] [pid 14168:tid 14176] [client 138.199.60.187:44160] [client 138.199.60.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/O-Simple.php"] [unique_id "aSWKkfR-ZDU0QEgAIItb_wAAAMU"]
[Tue Nov 25 18:53:06.321241 2025] [:error] [pid 2987:tid 3010] [client 138.199.60.187:44338] [client 138.199.60.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/dist/"] [unique_id "aSWKks-djEt-pTzPxnyTzAAAAVU"]
[Tue Nov 25 18:53:06.543637 2025] [:error] [pid 28836:tid 29009] [client 138.199.60.187:44578] [client 138.199.60.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/dist/"] [unique_id "aSWKkpwNRsoxcLQGkTe3WAAAAtM"]
[Tue Nov 25 18:53:06.820650 2025] [:error] [pid 14077:tid 14126] [client 138.199.60.187:44726] [client 138.199.60.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/dist/"] [unique_id "aSWKkhG9n7UHEkwDTyh9-QAAAFA"]
[Tue Nov 25 18:53:07.078511 2025] [:error] [pid 14076:tid 14101] [client 138.199.60.187:44856] [client 138.199.60.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/dist/"] [unique_id "aSWKk3sB4Gz6Qw-pvBsKFAAAABQ"]
[Tue Nov 25 18:53:07.341696 2025] [:error] [pid 28842:tid 28990] [client 138.199.60.187:45022] [client 138.199.60.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/dist/"] [unique_id "aSWKk9NmoaPf6T4-6C2DjgAAA0A"]
[Tue Nov 25 22:55:18.496044 2025] [:error] [pid 14076:tid 14104] [client 20.36.171.210:39277] [client 20.36.171.210] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/certificates/index.php"] [unique_id "aSXDVnsB4Gz6Qw-pvBtb6QAAABc"]
[Tue Nov 25 22:55:20.503872 2025] [:error] [pid 28609:tid 28629] [client 20.36.171.210:60790] [client 20.36.171.210] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aSXDWCGGdT-nZJVs3x0F2wAAAYs"]
[Tue Nov 25 22:55:23.395567 2025] [:error] [pid 43981:tid 44006] [client 20.36.171.210:40465] [client 20.36.171.210] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/html-api/wp-conflg.php"] [unique_id "aSXDWwgZn97m_qh_RaF9RwAAAxc"]
[Tue Nov 25 22:55:26.717372 2025] [:error] [pid 14078:tid 14143] [client 20.36.171.210:39293] [client 20.36.171.210] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aSXDXtVXYbb0ii_rVoKkAQAAAIY"]
[Tue Nov 25 22:55:30.679355 2025] [proxy_fcgi:error] [pid 43981:tid 43989] [client 20.36.171.210:40532] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 22:55:32.933784 2025] [:error] [pid 43981:tid 43986] [client 20.36.171.210:40532] [client 20.36.171.210] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/index.php"] [unique_id "aSXDZAgZn97m_qh_RaF9YwAAAwM"]
[Tue Nov 25 22:55:38.518638 2025] [:error] [pid 43843:tid 43847] [client 20.36.171.210:39862] [client 20.36.171.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/about.php"] [unique_id "aSXDahhx4v3NUNdMKDMIcAAAAcI"]
[Tue Nov 25 22:55:40.457716 2025] [:error] [pid 43843:tid 43845] [client 20.36.171.210:39856] [client 20.36.171.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/about.php"] [unique_id "aSXDbBhx4v3NUNdMKDMIdwAAAcA"]
[Tue Nov 25 22:55:44.370635 2025] [:error] [pid 2987:tid 3010] [client 20.36.171.210:39828] [client 20.36.171.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/about.php"] [unique_id "aSXDcM-djEt-pTzPxnzh7AAAAVU"]
[Tue Nov 25 22:55:49.623556 2025] [:error] [pid 43843:tid 43862] [client 20.36.171.210:40523] [client 20.36.171.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/includes/plugins.php"] [unique_id "aSXDdRhx4v3NUNdMKDMIhgAAAdE"]
[Tue Nov 25 22:55:51.480543 2025] [:error] [pid 14078:tid 14145] [client 20.36.171.210:39869] [client 20.36.171.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/includes/plugins.php"] [unique_id "aSXDd9VXYbb0ii_rVoKkPgAAAIg"]
[Tue Nov 25 22:55:53.831633 2025] [:error] [pid 14168:tid 14175] [client 20.36.171.210:39812] [client 20.36.171.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/includes/plugins.php"] [unique_id "aSXDefR-ZDU0QEgAIIuiEwAAAMQ"]
[Tue Nov 25 22:55:56.108560 2025] [:error] [pid 28739:tid 28771] [client 20.36.171.210:40480] [client 20.36.171.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/includes/plugins.php"] [unique_id "aSXDfBxGpKmlkG4FexTI0wAAAgk"]
[Tue Nov 25 22:55:57.971086 2025] [:error] [pid 43843:tid 43859] [client 20.36.171.210:40467] [client 20.36.171.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/autoload_classmap.php"] [unique_id "aSXDfRhx4v3NUNdMKDMIlwAAAc4"]
[Tue Nov 25 22:56:01.434413 2025] [:error] [pid 43981:tid 43994] [client 20.36.171.210:39273] [client 20.36.171.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/autoload_classmap.php"] [unique_id "aSXDgQgZn97m_qh_RaF9iAAAAws"]
[Tue Nov 25 22:56:04.695255 2025] [:error] [pid 14076:tid 14094] [client 20.36.171.210:60782] [client 20.36.171.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/autoload_classmap.php"] [unique_id "aSXDhHsB4Gz6Qw-pvBtcRAAAAA0"]
[Tue Nov 25 22:56:06.127647 2025] [:error] [pid 14078:tid 14145] [client 20.36.171.210:39244] [client 20.36.171.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/autoload_classmap.php"] [unique_id "aSXDhtVXYbb0ii_rVoKkagAAAIg"]
[Tue Nov 25 22:56:08.284771 2025] [:error] [pid 14078:tid 14160] [client 20.36.171.210:60788] [client 20.36.171.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/network/index.php"] [unique_id "aSXDiNVXYbb0ii_rVoKkcwAAAJc"]
[Tue Nov 25 22:56:11.336879 2025] [:error] [pid 14076:tid 14102] [client 20.36.171.210:60751] [client 20.36.171.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/network/index.php"] [unique_id "aSXDi3sB4Gz6Qw-pvBtcRgAAABU"]
[Tue Nov 25 22:56:13.806344 2025] [:error] [pid 14076:tid 14101] [client 20.36.171.210:39270] [client 20.36.171.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/network/index.php"] [unique_id "aSXDjXsB4Gz6Qw-pvBtcRwAAABQ"]
[Tue Nov 25 22:56:15.769180 2025] [:error] [pid 2987:tid 2989] [client 20.36.171.210:60766] [client 20.36.171.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/network/index.php"] [unique_id "aSXDj8-djEt-pTzPxnziGgAAAUA"]
[Tue Nov 25 22:56:17.445626 2025] [:error] [pid 2987:tid 3003] [client 20.36.171.210:39235] [client 20.36.171.210] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/admin.php"] [unique_id "aSXDkc-djEt-pTzPxnziHgAAAU4"]
[Tue Nov 25 22:56:20.057995 2025] [:error] [pid 43843:tid 43868] [client 20.36.171.210:60778] [client 20.36.171.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/alfa.php"] [unique_id "aSXDlBhx4v3NUNdMKDMIpQAAAdc"]
[Tue Nov 25 22:56:21.888104 2025] [:error] [pid 43981:tid 44006] [client 20.36.171.210:39867] [client 20.36.171.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/alfa.php"] [unique_id "aSXDlQgZn97m_qh_RaF9ogAAAxc"]
[Tue Nov 25 22:56:22.737762 2025] [:error] [pid 14078:tid 14140] [client 20.36.171.210:39817] [client 20.36.171.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/alfa.php"] [unique_id "aSXDltVXYbb0ii_rVoKklAAAAIM"]
[Tue Nov 25 22:56:25.285057 2025] [:error] [pid 28609:tid 28634] [client 20.36.171.210:39292] [client 20.36.171.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/alfa.php"] [unique_id "aSXDmSGGdT-nZJVs3x0GSgAAAZA"]
[Tue Nov 25 22:56:27.388981 2025] [:error] [pid 28609:tid 28624] [client 20.36.171.210:60787] [client 20.36.171.210] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/theme-compat/wp-conflg.php"] [unique_id "aSXDmyGGdT-nZJVs3x0GUQAAAYY"]
[Tue Nov 25 22:56:28.081741 2025] [:error] [pid 14078:tid 14150] [client 20.36.171.210:40509] [client 20.36.171.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/google-seo-rank/index.php"] [unique_id "aSXDnNVXYbb0ii_rVoKkqAAAAI0"]
[Tue Nov 25 22:56:32.272837 2025] [:error] [pid 28836:tid 28967] [client 20.36.171.210:40501] [client 20.36.171.210] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/theme-compat/wp-conflg.php/wp-content/plugins/google-seo-rank/index.php"] [unique_id "aSXDoJwNRsoxcLQGkTf-jwAAAsw"]
[Tue Nov 25 23:08:12.235383 2025] [:error] [pid 28739:tid 28762] [client 4.206.43.141:43996] [client 4.206.43.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/network.php"] [unique_id "aSXGXBxGpKmlkG4FexTNKQAAAgA"]
[Tue Nov 25 23:08:14.258079 2025] [:error] [pid 14078:tid 14156] [client 4.206.43.141:64241] [client 4.206.43.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/theme-compat/chosen.php"] [unique_id "aSXGXtVXYbb0ii_rVoKpkAAAAJM"]
[Tue Nov 25 23:08:16.514405 2025] [proxy_fcgi:error] [pid 28609:tid 28638] [client 4.206.43.141:49362] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 23:08:16.722559 2025] [proxy_fcgi:error] [pid 28609:tid 28639] [client 4.206.43.141:49362] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 23:08:16.936192 2025] [proxy_fcgi:error] [pid 28609:tid 28623] [client 4.206.43.141:49362] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 23:08:17.170227 2025] [:error] [pid 28609:tid 28633] [client 4.206.43.141:49362] [client 4.206.43.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aSXGYSGGdT-nZJVs3x0JXgAAAY8"]
[Tue Nov 25 23:08:21.437355 2025] [proxy_fcgi:error] [pid 14078:tid 14149] [client 4.206.43.141:14076] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 23:08:21.654623 2025] [proxy_fcgi:error] [pid 14078:tid 14161] [client 4.206.43.141:14076] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 23:08:22.803340 2025] [proxy_fcgi:error] [pid 14078:tid 14160] [client 4.206.43.141:14076] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 23:08:24.350800 2025] [:error] [pid 14078:tid 14154] [client 4.206.43.141:14076] [client 4.206.43.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/default.php"] [unique_id "aSXGaNVXYbb0ii_rVoKprgAAAJE"]
[Tue Nov 25 23:08:25.419568 2025] [:error] [pid 2987:tid 2996] [client 4.206.43.141:40188] [client 4.206.43.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/default.php"] [unique_id "aSXGac-djEt-pTzPxnzk9wAAAUc"]
[Tue Nov 25 23:08:28.220783 2025] [:error] [pid 28836:tid 29009] [client 4.206.43.141:59670] [client 4.206.43.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/default.php"] [unique_id "aSXGbJwNRsoxcLQGkTcB-gAAAtM"]
[Tue Nov 25 23:08:29.390518 2025] [:error] [pid 14076:tid 14102] [client 4.206.43.141:40615] [client 4.206.43.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/default.php"] [unique_id "aSXGbXsB4Gz6Qw-pvBtfkQAAABU"]
[Tue Nov 25 23:08:30.618370 2025] [:error] [pid 43843:tid 43858] [client 4.206.43.141:44359] [client 4.206.43.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/db.php"] [unique_id "aSXGbhhx4v3NUNdMKDMLmwAAAc0"]
[Tue Nov 25 23:08:33.270101 2025] [:error] [pid 28836:tid 29008] [client 4.206.43.141:13567] [client 4.206.43.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/db.php"] [unique_id "aSXGcZwNRsoxcLQGkTcCBQAAAtI"]
[Tue Nov 25 23:08:35.610158 2025] [:error] [pid 14077:tid 14122] [client 4.206.43.141:48736] [client 4.206.43.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/db.php"] [unique_id "aSXGcxG9n7UHEkwDTyjnCgAAAEw"]
[Tue Nov 25 23:08:38.628520 2025] [:error] [pid 14078:tid 14139] [client 4.206.43.141:40140] [client 4.206.43.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/db.php"] [unique_id "aSXGdtVXYbb0ii_rVoKptgAAAII"]
[Tue Nov 25 23:08:41.571869 2025] [:error] [pid 28836:tid 28961] [client 4.206.43.141:43083] [client 4.206.43.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gecko.php"] [unique_id "aSXGeZwNRsoxcLQGkTcCFgAAAsY"]
[Tue Nov 25 23:08:45.102245 2025] [:error] [pid 28836:tid 28963] [client 4.206.43.141:13528] [client 4.206.43.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gecko.php"] [unique_id "aSXGfZwNRsoxcLQGkTcCHgAAAsg"]
[Tue Nov 25 23:08:47.893310 2025] [:error] [pid 28609:tid 28630] [client 4.206.43.141:44356] [client 4.206.43.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gecko.php"] [unique_id "aSXGfyGGdT-nZJVs3x0JgwAAAYw"]
[Tue Nov 25 23:08:49.399666 2025] [:error] [pid 14076:tid 14102] [client 4.206.43.141:43110] [client 4.206.43.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gecko.php"] [unique_id "aSXGgXsB4Gz6Qw-pvBtfnQAAABU"]
[Tue Nov 25 23:08:51.976478 2025] [:error] [pid 14076:tid 14086] [client 4.206.43.141:43102] [client 4.206.43.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/abe.php"] [unique_id "aSXGg3sB4Gz6Qw-pvBtfoQAAAAU"]
[Tue Nov 25 23:08:53.614775 2025] [:error] [pid 43843:tid 43865] [client 4.206.43.141:48709] [client 4.206.43.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/abe.php"] [unique_id "aSXGhRhx4v3NUNdMKDMLqgAAAdQ"]
[Tue Nov 25 23:08:55.103508 2025] [:error] [pid 14168:tid 14181] [client 4.206.43.141:44339] [client 4.206.43.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/abe.php"] [unique_id "aSXGh_R-ZDU0QEgAIIulmAAAAMo"]
[Tue Nov 25 23:08:57.169485 2025] [:error] [pid 43843:tid 43852] [client 4.206.43.141:59253] [client 4.206.43.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/abe.php"] [unique_id "aSXGiRhx4v3NUNdMKDMLrwAAAcc"]
[Tue Nov 25 23:08:59.553069 2025] [:error] [pid 14168:tid 14182] [client 4.206.43.141:43128] [client 4.206.43.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bs1.php"] [unique_id "aSXGi_R-ZDU0QEgAIIuloAAAAMs"]
[Tue Nov 25 23:09:01.388875 2025] [:error] [pid 28739:tid 28778] [client 4.206.43.141:13522] [client 4.206.43.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bs1.php"] [unique_id "aSXGjRxGpKmlkG4FexTNfAAAAhA"]
[Tue Nov 25 23:09:02.438088 2025] [:error] [pid 14078:tid 14160] [client 4.206.43.141:43014] [client 4.206.43.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bs1.php"] [unique_id "aSXGjtVXYbb0ii_rVoKp7gAAAJc"]
[Tue Nov 25 23:09:04.345027 2025] [:error] [pid 28836:tid 28962] [client 4.206.43.141:59228] [client 4.206.43.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bs1.php"] [unique_id "aSXGkJwNRsoxcLQGkTcCMQAAAsc"]
[Tue Nov 25 23:09:05.571330 2025] [:error] [pid 2987:tid 2994] [client 4.206.43.141:13555] [client 4.206.43.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/content.php"] [unique_id "aSXGkc-djEt-pTzPxnzlCwAAAUU"]
[Tue Nov 25 23:09:09.072587 2025] [:error] [pid 28836:tid 28965] [client 4.206.43.141:43017] [client 4.206.43.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/content.php"] [unique_id "aSXGlZwNRsoxcLQGkTcCNAAAAso"]
[Tue Nov 25 23:09:10.989352 2025] [:error] [pid 28836:tid 28960] [client 4.206.43.141:64293] [client 4.206.43.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/content.php"] [unique_id "aSXGlpwNRsoxcLQGkTcCNQAAAsU"]
[Tue Nov 25 23:09:12.699804 2025] [:error] [pid 28739:tid 28778] [client 4.206.43.141:43059] [client 4.206.43.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/content.php"] [unique_id "aSXGmBxGpKmlkG4FexTNhwAAAhA"]
[Tue Nov 25 23:09:13.734599 2025] [:error] [pid 28836:tid 28961] [client 4.206.43.141:64303] [client 4.206.43.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cc.php"] [unique_id "aSXGmZwNRsoxcLQGkTcCPAAAAsY"]
[Tue Nov 25 23:09:15.237465 2025] [:error] [pid 28739:tid 28786] [client 4.206.43.141:44330] [client 4.206.43.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cc.php"] [unique_id "aSXGmxxGpKmlkG4FexTNjwAAAhg"]
[Tue Nov 25 23:09:17.055424 2025] [:error] [pid 28609:tid 28630] [client 4.206.43.141:50025] [client 4.206.43.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cc.php"] [unique_id "aSXGnSGGdT-nZJVs3x0JswAAAYw"]
[Tue Nov 25 23:09:18.451501 2025] [:error] [pid 28739:tid 28773] [client 4.206.43.141:41798] [client 4.206.43.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cc.php"] [unique_id "aSXGnhxGpKmlkG4FexTNlwAAAgs"]
[Tue Nov 25 23:09:21.181194 2025] [:error] [pid 43843:tid 43850] [client 4.206.43.141:44320] [client 4.206.43.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-cron.php"] [unique_id "aSXGoRhx4v3NUNdMKDMLzQAAAcU"]
[Tue Nov 25 23:09:22.930826 2025] [:error] [pid 28739:tid 28764] [client 4.206.43.141:43040] [client 4.206.43.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-cron.php"] [unique_id "aSXGohxGpKmlkG4FexTNpQAAAgI"]
[Tue Nov 25 23:09:23.856598 2025] [proxy_fcgi:error] [pid 14168:tid 14193] [client 4.206.43.141:14023] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 23:09:24.075299 2025] [proxy_fcgi:error] [pid 14168:tid 14173] [client 4.206.43.141:14023] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 23:09:25.155032 2025] [proxy_fcgi:error] [pid 14168:tid 14183] [client 4.206.43.141:14023] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 23:09:25.365579 2025] [proxy_fcgi:error] [pid 14168:tid 14191] [client 4.206.43.141:14023] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 23:09:25.575553 2025] [proxy_fcgi:error] [pid 14168:tid 14188] [client 4.206.43.141:14023] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 23:09:25.797917 2025] [proxy_fcgi:error] [pid 14168:tid 14192] [client 4.206.43.141:14023] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 23:09:26.031370 2025] [proxy_fcgi:error] [pid 14168:tid 14184] [client 4.206.43.141:14023] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 23:09:26.242692 2025] [proxy_fcgi:error] [pid 14168:tid 14186] [client 4.206.43.141:14023] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 23:09:26.469341 2025] [proxy_fcgi:error] [pid 14168:tid 14177] [client 4.206.43.141:14023] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 23:09:26.690787 2025] [proxy_fcgi:error] [pid 14168:tid 14175] [client 4.206.43.141:14023] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 23:09:26.902231 2025] [proxy_fcgi:error] [pid 14168:tid 14179] [client 4.206.43.141:14023] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 23:09:27.120736 2025] [:error] [pid 14168:tid 14171] [client 4.206.43.141:14023] [client 4.206.43.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/link.php"] [unique_id "aSXGp_R-ZDU0QEgAIIulvwAAAMA"]
[Tue Nov 25 23:09:29.017546 2025] [:error] [pid 14078:tid 14158] [client 4.206.43.141:64317] [client 4.206.43.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/link.php"] [unique_id "aSXGqdVXYbb0ii_rVoKqGwAAAJU"]
[Tue Nov 25 23:09:30.353108 2025] [:error] [pid 14076:tid 14084] [client 4.206.43.141:53813] [client 4.206.43.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/link.php"] [unique_id "aSXGqnsB4Gz6Qw-pvBtf6AAAAAM"]
[Tue Nov 25 23:09:32.381411 2025] [:error] [pid 14168:tid 14188] [client 4.206.43.141:57765] [client 4.206.43.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/link.php"] [unique_id "aSXGrPR-ZDU0QEgAIIulwgAAANE"]
[Tue Nov 25 23:09:34.070014 2025] [:error] [pid 28739:tid 28768] [client 4.206.43.141:41853] [client 4.206.43.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/makeasmtp.php"] [unique_id "aSXGrhxGpKmlkG4FexTNtQAAAgY"]
[Tue Nov 25 23:09:35.618613 2025] [:error] [pid 14076:tid 14095] [client 4.206.43.141:14018] [client 4.206.43.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/makeasmtp.php"] [unique_id "aSXGr3sB4Gz6Qw-pvBtf8AAAAA4"]
[Tue Nov 25 23:09:37.345881 2025] [:error] [pid 14076:tid 14093] [client 4.206.43.141:50043] [client 4.206.43.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/makeasmtp.php"] [unique_id "aSXGsXsB4Gz6Qw-pvBtf9gAAAAw"]
[Tue Nov 25 23:09:39.156599 2025] [:error] [pid 2987:tid 3005] [client 4.206.43.141:64301] [client 4.206.43.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/makeasmtp.php"] [unique_id "aSXGs8-djEt-pTzPxnzlKwAAAVA"]
[Tue Nov 25 23:09:41.004141 2025] [:error] [pid 28609:tid 28633] [client 4.206.43.141:57739] [client 4.206.43.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aSXGtSGGdT-nZJVs3x0J2AAAAY8"]
[Tue Nov 25 23:09:43.119468 2025] [:error] [pid 2987:tid 3004] [client 4.206.43.141:41810] [client 4.206.43.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aSXGt8-djEt-pTzPxnzlLgAAAU8"]
[Tue Nov 25 23:09:45.294817 2025] [:error] [pid 43981:tid 43983] [client 4.206.43.141:41846] [client 4.206.43.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aSXGuQgZn97m_qh_RaGBDwAAAwA"]
[Tue Nov 25 23:09:46.206164 2025] [:error] [pid 14077:tid 14119] [client 4.206.43.141:13368] [client 4.206.43.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aSXGuhG9n7UHEkwDTyjnRgAAAEk"]
[Tue Nov 25 23:09:47.556523 2025] [:error] [pid 28609:tid 28624] [client 4.206.43.141:53764] [client 4.206.43.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file.php"] [unique_id "aSXGuyGGdT-nZJVs3x0J3AAAAYY"]
[Tue Nov 25 23:09:49.118227 2025] [:error] [pid 14076:tid 14104] [client 4.206.43.141:41854] [client 4.206.43.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file.php"] [unique_id "aSXGvXsB4Gz6Qw-pvBtgAAAAABc"]
[Tue Nov 25 23:09:50.177650 2025] [:error] [pid 2987:tid 2993] [client 4.206.43.141:14041] [client 4.206.43.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file.php"] [unique_id "aSXGvs-djEt-pTzPxnzlOAAAAUQ"]
[Tue Nov 25 23:09:51.731644 2025] [:error] [pid 14076:tid 14086] [client 4.206.43.141:57744] [client 4.206.43.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file.php"] [unique_id "aSXGv3sB4Gz6Qw-pvBtgAgAAAAU"]
[Tue Nov 25 23:09:53.013161 2025] [:error] [pid 43843:tid 43865] [client 4.206.43.141:39562] [client 4.206.43.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/test.php"] [unique_id "aSXGwRhx4v3NUNdMKDML6QAAAdQ"]
[Tue Nov 25 23:09:54.441659 2025] [:error] [pid 43981:tid 43993] [client 4.206.43.141:50008] [client 4.206.43.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/test.php"] [unique_id "aSXGwggZn97m_qh_RaGBJgAAAwo"]
[Tue Nov 25 23:09:55.409967 2025] [:error] [pid 14076:tid 14090] [client 4.206.43.141:53771] [client 4.206.43.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/test.php"] [unique_id "aSXGw3sB4Gz6Qw-pvBtgBgAAAAk"]
[Tue Nov 25 23:09:55.949499 2025] [:error] [pid 14078:tid 14157] [client 4.206.43.141:57784] [client 4.206.43.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/test.php"] [unique_id "aSXGw9VXYbb0ii_rVoKqPQAAAJQ"]
[Tue Nov 25 23:09:57.274081 2025] [:error] [pid 14076:tid 14094] [client 4.206.43.141:41796] [client 4.206.43.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/chosen.php"] [unique_id "aSXGxXsB4Gz6Qw-pvBtgCAAAAA0"]
[Tue Nov 25 23:09:58.184414 2025] [:error] [pid 43981:tid 43992] [client 4.206.43.141:13374] [client 4.206.43.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/chosen.php"] [unique_id "aSXGxggZn97m_qh_RaGBLgAAAwk"]
[Tue Nov 25 23:09:59.369489 2025] [:error] [pid 14078:tid 14145] [client 4.206.43.141:57754] [client 4.206.43.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/chosen.php"] [unique_id "aSXGx9VXYbb0ii_rVoKqSQAAAIg"]
[Tue Nov 25 23:09:59.943936 2025] [:error] [pid 28836:tid 29008] [client 4.206.43.141:13687] [client 4.206.43.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/chosen.php"] [unique_id "aSXGx5wNRsoxcLQGkTcCWgAAAtI"]
[Tue Nov 25 23:10:01.051350 2025] [:error] [pid 43843:tid 43862] [client 4.206.43.141:13676] [client 4.206.43.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/files/css_compare.php"] [unique_id "aSXGyRhx4v3NUNdMKDML8gAAAdE"]
[Tue Nov 25 23:10:01.706112 2025] [:error] [pid 2987:tid 2997] [client 4.206.43.141:41095] [client 4.206.43.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/files/css_compare.php"] [unique_id "aSXGyc-djEt-pTzPxnzlPwAAAUg"]
[Tue Nov 25 23:10:03.415914 2025] [:error] [pid 28739:tid 28785] [client 4.206.43.141:13364] [client 4.206.43.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/files/css_compare.php"] [unique_id "aSXGyxxGpKmlkG4FexTN0AAAAhc"]
[Tue Nov 25 23:10:05.510793 2025] [:error] [pid 14077:tid 14112] [client 4.206.43.141:47461] [client 4.206.43.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/files/css_compare.php"] [unique_id "aSXGzRG9n7UHEkwDTyjnUwAAAEI"]
[Tue Nov 25 23:10:08.081912 2025] [:error] [pid 28836:tid 28960] [client 4.206.43.141:53803] [client 4.206.43.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp.php"] [unique_id "aSXG0JwNRsoxcLQGkTcCZQAAAsU"]
[Tue Nov 25 23:10:10.041034 2025] [:error] [pid 14077:tid 14133] [client 4.206.43.141:13359] [client 4.206.43.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp.php"] [unique_id "aSXG0hG9n7UHEkwDTyjnYgAAAFc"]
[Tue Nov 25 23:10:11.533782 2025] [:error] [pid 14168:tid 14193] [client 4.206.43.141:57748] [client 4.206.43.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp.php"] [unique_id "aSXG0_R-ZDU0QEgAIIul4wAAANY"]
[Tue Nov 25 23:10:13.269523 2025] [:error] [pid 28609:tid 28642] [client 4.206.43.141:13314] [client 4.206.43.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp.php"] [unique_id "aSXG1SGGdT-nZJVs3x0J_wAAAZg"]
[Tue Nov 25 23:10:13.969431 2025] [:error] [pid 28609:tid 28628] [client 4.206.43.141:53790] [client 4.206.43.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/uana.php"] [unique_id "aSXG1SGGdT-nZJVs3x0KAQAAAYo"]
[Tue Nov 25 23:10:14.990224 2025] [:error] [pid 14076:tid 14103] [client 4.206.43.141:53806] [client 4.206.43.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/uana.php"] [unique_id "aSXG1nsB4Gz6Qw-pvBtgGgAAABY"]
[Tue Nov 25 23:10:15.869876 2025] [:error] [pid 28739:tid 28773] [client 4.206.43.141:47455] [client 4.206.43.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/uana.php"] [unique_id "aSXG1xxGpKmlkG4FexTN4gAAAgs"]
[Tue Nov 25 23:10:16.774620 2025] [:error] [pid 43843:tid 43858] [client 4.206.43.141:53808] [client 4.206.43.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/uana.php"] [unique_id "aSXG2Bhx4v3NUNdMKDML_QAAAc0"]
[Tue Nov 25 23:10:17.838153 2025] [:error] [pid 43981:tid 43995] [client 4.206.43.141:13633] [client 4.206.43.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/duck.php"] [unique_id "aSXG2QgZn97m_qh_RaGBRwAAAww"]
[Tue Nov 25 23:10:19.023690 2025] [:error] [pid 43843:tid 43867] [client 4.206.43.141:47473] [client 4.206.43.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/duck.php"] [unique_id "aSXG2xhx4v3NUNdMKDMMAQAAAdY"]
[Tue Nov 25 23:10:20.600112 2025] [:error] [pid 14168:tid 14194] [client 4.206.43.141:40073] [client 4.206.43.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/duck.php"] [unique_id "aSXG3PR-ZDU0QEgAIIul6gAAANc"]
[Tue Nov 25 23:10:22.558782 2025] [:error] [pid 28609:tid 28622] [client 4.206.43.141:13655] [client 4.206.43.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/duck.php"] [unique_id "aSXG3iGGdT-nZJVs3x0KEAAAAYQ"]
[Tue Nov 25 23:10:24.516064 2025] [:error] [pid 14078:tid 14147] [client 4.206.43.141:13650] [client 4.206.43.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lock360.php"] [unique_id "aSXG4NVXYbb0ii_rVoKqYQAAAIo"]
[Tue Nov 25 23:10:27.357074 2025] [proxy_fcgi:error] [pid 28609:tid 28635] [client 4.206.43.141:47460] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 23:10:27.586207 2025] [proxy_fcgi:error] [pid 28609:tid 28624] [client 4.206.43.141:47460] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 23:10:27.814644 2025] [proxy_fcgi:error] [pid 28609:tid 28640] [client 4.206.43.141:47460] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 23:10:28.031832 2025] [proxy_fcgi:error] [pid 28609:tid 28637] [client 4.206.43.141:47460] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 23:10:28.274190 2025] [proxy_fcgi:error] [pid 28609:tid 28628] [client 4.206.43.141:47460] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 23:10:28.484348 2025] [proxy_fcgi:error] [pid 28609:tid 28630] [client 4.206.43.141:47460] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 23:10:28.966402 2025] [proxy_fcgi:error] [pid 28609:tid 28621] [client 4.206.43.141:47460] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 23:10:29.473766 2025] [proxy_fcgi:error] [pid 28609:tid 28619] [client 4.206.43.141:47460] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 23:10:29.683249 2025] [proxy_fcgi:error] [pid 28609:tid 28627] [client 4.206.43.141:47460] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 23:10:30.109554 2025] [:error] [pid 28609:tid 28624] [client 4.206.43.141:47460] [client 4.206.43.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws.php7"] [unique_id "aSXG5iGGdT-nZJVs3x0KKQAAAYY"]
[Tue Nov 25 23:10:31.261695 2025] [:error] [pid 28739:tid 28773] [client 4.206.43.141:39604] [client 4.206.43.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws.php7"] [unique_id "aSXG5xxGpKmlkG4FexTN8gAAAgs"]
[Tue Nov 25 23:10:32.155733 2025] [:error] [pid 14076:tid 14102] [client 4.206.43.141:39596] [client 4.206.43.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws.php7"] [unique_id "aSXG6HsB4Gz6Qw-pvBtgMAAAABU"]
[Tue Nov 25 23:10:33.626222 2025] [:error] [pid 14168:tid 14188] [client 4.206.43.141:39611] [client 4.206.43.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws.php7"] [unique_id "aSXG6fR-ZDU0QEgAIIul8gAAANE"]
[Tue Nov 25 23:10:35.066988 2025] [:error] [pid 43981:tid 43991] [client 4.206.43.141:13370] [client 4.206.43.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rss.php"] [unique_id "aSXG6wgZn97m_qh_RaGBTwAAAwg"]
[Tue Nov 25 23:10:35.887700 2025] [:error] [pid 2987:tid 2993] [client 4.206.43.141:41094] [client 4.206.43.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rss.php"] [unique_id "aSXG68-djEt-pTzPxnzlSwAAAUQ"]
[Tue Nov 25 23:10:36.717334 2025] [:error] [pid 43981:tid 43988] [client 4.206.43.141:41099] [client 4.206.43.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rss.php"] [unique_id "aSXG7AgZn97m_qh_RaGBVAAAAwU"]
[Tue Nov 25 23:10:37.745772 2025] [:error] [pid 14078:tid 14151] [client 4.206.43.141:13362] [client 4.206.43.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rss.php"] [unique_id "aSXG7dVXYbb0ii_rVoKqdgAAAI4"]
[Tue Nov 25 23:10:39.447442 2025] [:error] [pid 43843:tid 43850] [client 4.206.43.141:53786] [client 4.206.43.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/pekok.php"] [unique_id "aSXG7xhx4v3NUNdMKDMMGAAAAcU"]
[Tue Nov 25 23:10:40.686106 2025] [:error] [pid 28609:tid 28635] [client 4.206.43.141:41821] [client 4.206.43.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/pekok.php"] [unique_id "aSXG8CGGdT-nZJVs3x0KPQAAAZE"]
[Tue Nov 25 23:10:42.087028 2025] [:error] [pid 28739:tid 28780] [client 4.206.43.141:53801] [client 4.206.43.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/pekok.php"] [unique_id "aSXG8hxGpKmlkG4FexTOAQAAAhI"]
[Tue Nov 25 23:10:42.891652 2025] [:error] [pid 14078:tid 14156] [client 4.206.43.141:13372] [client 4.206.43.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/pekok.php"] [unique_id "aSXG8tVXYbb0ii_rVoKqfgAAAJM"]
[Tue Nov 25 23:10:43.767117 2025] [:error] [pid 14076:tid 14095] [client 4.206.43.141:41146] [client 4.206.43.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/elp.php"] [unique_id "aSXG83sB4Gz6Qw-pvBtgMwAAAA4"]
[Tue Nov 25 23:10:44.843841 2025] [:error] [pid 14168:tid 14193] [client 4.206.43.141:47445] [client 4.206.43.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/elp.php"] [unique_id "aSXG9PR-ZDU0QEgAIIul9wAAANY"]
[Tue Nov 25 23:10:45.621030 2025] [:error] [pid 14078:tid 14157] [client 4.206.43.141:40067] [client 4.206.43.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/elp.php"] [unique_id "aSXG9dVXYbb0ii_rVoKqhAAAAJQ"]
[Tue Nov 25 23:10:47.243371 2025] [:error] [pid 14078:tid 14154] [client 4.206.43.141:40081] [client 4.206.43.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/elp.php"] [unique_id "aSXG99VXYbb0ii_rVoKqhwAAAJE"]
[Tue Nov 25 23:10:48.241014 2025] [:error] [pid 14076:tid 14102] [client 4.206.43.141:50026] [client 4.206.43.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-aa.php"] [unique_id "aSXG-HsB4Gz6Qw-pvBtgNgAAABU"]
[Tue Nov 25 23:10:50.173054 2025] [:error] [pid 43843:tid 43852] [client 4.206.43.141:44293] [client 4.206.43.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-aa.php"] [unique_id "aSXG-hhx4v3NUNdMKDMMIwAAAcc"]
[Tue Nov 25 23:10:53.631730 2025] [:error] [pid 14076:tid 14091] [client 4.206.43.141:53794] [client 4.206.43.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-aa.php"] [unique_id "aSXG_XsB4Gz6Qw-pvBtgRAAAAAo"]
[Tue Nov 25 23:10:54.715347 2025] [:error] [pid 14078:tid 14151] [client 4.206.43.141:50017] [client 4.206.43.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-aa.php"] [unique_id "aSXG_tVXYbb0ii_rVoKqsQAAAI4"]
[Tue Nov 25 23:10:56.937009 2025] [:error] [pid 14077:tid 14128] [client 4.206.43.141:53822] [client 4.206.43.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cart.php"] [unique_id "aSXHABG9n7UHEkwDTyjnmgAAAFI"]
[Tue Nov 25 23:10:58.520675 2025] [:error] [pid 14076:tid 14098] [client 4.206.43.141:13649] [client 4.206.43.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cart.php"] [unique_id "aSXHAnsB4Gz6Qw-pvBtgYgAAABE"]
[Tue Nov 25 23:10:59.571272 2025] [:error] [pid 2987:tid 2994] [client 4.206.43.141:57730] [client 4.206.43.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cart.php"] [unique_id "aSXHA8-djEt-pTzPxnzlXQAAAUU"]
[Tue Nov 25 23:11:00.853607 2025] [:error] [pid 14168:tid 14188] [client 4.206.43.141:13334] [client 4.206.43.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cart.php"] [unique_id "aSXHBPR-ZDU0QEgAIIumBgAAANE"]
[Tue Nov 25 23:11:01.923543 2025] [:error] [pid 28836:tid 29011] [client 4.206.43.141:41813] [client 4.206.43.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/categories.php"] [unique_id "aSXHBZwNRsoxcLQGkTcCjQAAAtU"]
[Tue Nov 25 23:11:03.601304 2025] [:error] [pid 14168:tid 14186] [client 4.206.43.141:50000] [client 4.206.43.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/categories.php"] [unique_id "aSXHB_R-ZDU0QEgAIIumDgAAAM8"]
[Tue Nov 25 23:11:05.325465 2025] [:error] [pid 14076:tid 14090] [client 4.206.43.141:53793] [client 4.206.43.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/categories.php"] [unique_id "aSXHCXsB4Gz6Qw-pvBtgaAAAAAk"]
[Tue Nov 25 23:11:08.042698 2025] [:error] [pid 14078:tid 14159] [client 4.206.43.141:14031] [client 4.206.43.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/categories.php"] [unique_id "aSXHDNVXYbb0ii_rVoKq7QAAAJY"]
[Tue Nov 25 23:11:09.538828 2025] [:error] [pid 43981:tid 43998] [client 4.206.43.141:64289] [client 4.206.43.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/compare.php"] [unique_id "aSXHDQgZn97m_qh_RaGBYgAAAw8"]
[Tue Nov 25 23:11:10.727319 2025] [:error] [pid 43981:tid 43990] [client 4.206.43.141:64311] [client 4.206.43.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/compare.php"] [unique_id "aSXHDggZn97m_qh_RaGBaAAAAwc"]
[Tue Nov 25 23:11:12.295468 2025] [:error] [pid 28609:tid 28622] [client 4.206.43.141:43039] [client 4.206.43.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/compare.php"] [unique_id "aSXHECGGdT-nZJVs3x0KfwAAAYQ"]
[Tue Nov 25 23:11:13.582490 2025] [:error] [pid 14078:tid 14148] [client 4.206.43.141:13551] [client 4.206.43.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/compare.php"] [unique_id "aSXHEdVXYbb0ii_rVoKq9gAAAIs"]
[Tue Nov 25 23:11:14.980760 2025] [:error] [pid 28836:tid 29007] [client 4.206.43.141:64286] [client 4.206.43.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/refund.php"] [unique_id "aSXHEpwNRsoxcLQGkTcCkwAAAtE"]
[Tue Nov 25 23:11:17.048821 2025] [:error] [pid 28836:tid 29014] [client 4.206.43.141:41800] [client 4.206.43.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/refund.php"] [unique_id "aSXHFZwNRsoxcLQGkTcClQAAAtg"]
[Tue Nov 25 23:11:18.257040 2025] [:error] [pid 28609:tid 28631] [client 4.206.43.141:14020] [client 4.206.43.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/refund.php"] [unique_id "aSXHFiGGdT-nZJVs3x0KigAAAY0"]
[Tue Nov 25 23:11:20.217928 2025] [:error] [pid 14078:tid 14148] [client 4.206.43.141:40137] [client 4.206.43.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/refund.php"] [unique_id "aSXHGNVXYbb0ii_rVoKrAwAAAIs"]
[Tue Nov 25 23:11:21.248352 2025] [:error] [pid 14076:tid 14099] [client 4.206.43.141:44304] [client 4.206.43.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/shop.php"] [unique_id "aSXHGXsB4Gz6Qw-pvBtgeQAAABI"]
[Tue Nov 25 23:11:22.084153 2025] [:error] [pid 43843:tid 43854] [client 4.206.43.141:64275] [client 4.206.43.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/shop.php"] [unique_id "aSXHGhhx4v3NUNdMKDMMOwAAAck"]
[Tue Nov 25 23:11:22.911453 2025] [:error] [pid 14076:tid 14103] [client 4.206.43.141:43021] [client 4.206.43.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/shop.php"] [unique_id "aSXHGnsB4Gz6Qw-pvBtgfgAAABY"]
[Tue Nov 25 23:11:24.261265 2025] [:error] [pid 14077:tid 14120] [client 4.206.43.141:13557] [client 4.206.43.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/shop.php"] [unique_id "aSXHHBG9n7UHEkwDTyjnsAAAAEo"]
[Tue Nov 25 23:11:25.859788 2025] [:error] [pid 28739:tid 28775] [client 4.206.43.141:48762] [client 4.206.43.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wishlist.php"] [unique_id "aSXHHRxGpKmlkG4FexTOOgAAAg0"]
[Tue Nov 25 23:11:27.131162 2025] [:error] [pid 28609:tid 28621] [client 4.206.43.141:13537] [client 4.206.43.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wishlist.php"] [unique_id "aSXHHyGGdT-nZJVs3x0KlgAAAYM"]
[Tue Nov 25 23:11:28.426170 2025] [:error] [pid 14076:tid 14085] [client 4.206.43.141:40178] [client 4.206.43.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wishlist.php"] [unique_id "aSXHIHsB4Gz6Qw-pvBtgiwAAAAQ"]
[Tue Nov 25 23:11:29.769086 2025] [proxy_fcgi:error] [pid 14078:tid 14137] [client 4.206.43.141:44367] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 23:11:30.053584 2025] [proxy_fcgi:error] [pid 14078:tid 14148] [client 4.206.43.141:44367] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 23:11:30.264196 2025] [proxy_fcgi:error] [pid 14078:tid 14158] [client 4.206.43.141:44367] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 23:11:30.490715 2025] [proxy_fcgi:error] [pid 14078:tid 14153] [client 4.206.43.141:44367] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 23:11:30.714642 2025] [proxy_fcgi:error] [pid 14078:tid 14140] [client 4.206.43.141:44367] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 23:11:31.100669 2025] [proxy_fcgi:error] [pid 14078:tid 14149] [client 4.206.43.141:44367] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 23:11:31.933889 2025] [proxy_fcgi:error] [pid 14078:tid 14143] [client 4.206.43.141:44367] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 23:11:32.145019 2025] [proxy_fcgi:error] [pid 14078:tid 14150] [client 4.206.43.141:44367] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 23:11:32.355700 2025] [proxy_fcgi:error] [pid 14078:tid 14157] [client 4.206.43.141:44367] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 23:11:32.566414 2025] [proxy_fcgi:error] [pid 14078:tid 14147] [client 4.206.43.141:44367] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 23:11:34.015148 2025] [proxy_fcgi:error] [pid 14078:tid 14152] [client 4.206.43.141:44367] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 23:11:34.222317 2025] [:error] [pid 14078:tid 14149] [client 4.206.43.141:44367] [client 4.206.43.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/alfa.php"] [unique_id "aSXHJtVXYbb0ii_rVoKrJQAAAIw"]
[Tue Nov 25 23:11:35.757159 2025] [:error] [pid 14078:tid 14142] [client 4.206.43.141:40131] [client 4.206.43.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/alfa.php"] [unique_id "aSXHJ9VXYbb0ii_rVoKrJwAAAIU"]
[Tue Nov 25 23:11:37.337084 2025] [:error] [pid 43843:tid 43845] [client 4.206.43.141:40583] [client 4.206.43.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/alfa.php"] [unique_id "aSXHKRhx4v3NUNdMKDMMRgAAAcA"]
[Tue Nov 25 23:11:39.149817 2025] [:error] [pid 43981:tid 43983] [client 4.206.43.141:59697] [client 4.206.43.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/alfa.php"] [unique_id "aSXHKwgZn97m_qh_RaGBegAAAwA"]
[Tue Nov 25 23:11:39.820849 2025] [:error] [pid 2987:tid 3003] [client 4.206.43.141:13844] [client 4.206.43.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/byp.php"] [unique_id "aSXHK8-djEt-pTzPxnzljQAAAU4"]
[Tue Nov 25 23:11:41.481399 2025] [:error] [pid 14078:tid 14141] [client 4.206.43.141:40171] [client 4.206.43.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/byp.php"] [unique_id "aSXHLdVXYbb0ii_rVoKrMgAAAIQ"]
[Tue Nov 25 23:11:42.345100 2025] [:error] [pid 14078:tid 14145] [client 4.206.43.141:43740] [client 4.206.43.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/byp.php"] [unique_id "aSXHLtVXYbb0ii_rVoKrNQAAAIg"]
[Tue Nov 25 23:11:43.385065 2025] [:error] [pid 14078:tid 14159] [client 4.206.43.141:59700] [client 4.206.43.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/byp.php"] [unique_id "aSXHL9VXYbb0ii_rVoKrOQAAAJY"]
[Tue Nov 25 23:11:44.961771 2025] [:error] [pid 2987:tid 3006] [client 4.206.43.141:13847] [client 4.206.43.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/goat1.php"] [unique_id "aSXHMM-djEt-pTzPxnzlmAAAAVE"]
[Tue Nov 25 23:11:46.638905 2025] [:error] [pid 28739:tid 28775] [client 4.206.43.141:41196] [client 4.206.43.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/goat1.php"] [unique_id "aSXHMhxGpKmlkG4FexTOTQAAAg0"]
[Tue Nov 25 23:11:48.673467 2025] [:error] [pid 43981:tid 44003] [client 4.206.43.141:59659] [client 4.206.43.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/goat1.php"] [unique_id "aSXHNAgZn97m_qh_RaGBfgAAAxQ"]
[Tue Nov 25 23:11:51.663097 2025] [:error] [pid 28836:tid 28986] [client 4.206.43.141:13881] [client 4.206.43.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/goat1.php"] [unique_id "aSXHN5wNRsoxcLQGkTcCrAAAAs8"]
[Tue Nov 25 23:11:54.512185 2025] [:error] [pid 28836:tid 28955] [client 4.206.43.141:48219] [client 4.206.43.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f.php"] [unique_id "aSXHOpwNRsoxcLQGkTcCsQAAAsA"]
[Tue Nov 25 23:11:57.120595 2025] [:error] [pid 14078:tid 14144] [client 4.206.43.141:48206] [client 4.206.43.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f.php"] [unique_id "aSXHPdVXYbb0ii_rVoKrYAAAAIc"]
[Tue Nov 25 23:11:59.617440 2025] [:error] [pid 43981:tid 44005] [client 4.206.43.141:48232] [client 4.206.43.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f.php"] [unique_id "aSXHPwgZn97m_qh_RaGBhgAAAxY"]
[Tue Nov 25 23:12:02.054299 2025] [:error] [pid 28609:tid 28637] [client 4.206.43.141:55062] [client 4.206.43.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f.php"] [unique_id "aSXHQiGGdT-nZJVs3x0KsgAAAZM"]
[Tue Nov 25 23:12:04.439621 2025] [:error] [pid 43981:tid 44002] [client 4.206.43.141:44014] [client 4.206.43.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/max.php"] [unique_id "aSXHRAgZn97m_qh_RaGBjgAAAxM"]
[Tue Nov 25 23:12:06.912739 2025] [:error] [pid 28739:tid 28782] [client 4.206.43.141:49399] [client 4.206.43.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/max.php"] [unique_id "aSXHRhxGpKmlkG4FexTOWgAAAhQ"]
[Tue Nov 25 23:12:08.258415 2025] [:error] [pid 14168:tid 14174] [client 4.206.43.141:44011] [client 4.206.43.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/max.php"] [unique_id "aSXHSPR-ZDU0QEgAIIumOAAAAMM"]
[Tue Nov 25 23:12:09.428224 2025] [:error] [pid 14078:tid 14151] [client 4.206.43.141:49371] [client 4.206.43.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/max.php"] [unique_id "aSXHSdVXYbb0ii_rVoKrdAAAAI4"]
[Tue Nov 25 23:12:10.204810 2025] [:error] [pid 28739:tid 28783] [client 4.206.43.141:13438] [client 4.206.43.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/m.php"] [unique_id "aSXHShxGpKmlkG4FexTOXQAAAhU"]
[Tue Nov 25 23:12:11.635515 2025] [:error] [pid 43843:tid 43862] [client 4.206.43.141:43658] [client 4.206.43.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/m.php"] [unique_id "aSXHSxhx4v3NUNdMKDMMWgAAAdE"]
[Tue Nov 25 23:12:13.195918 2025] [:error] [pid 14078:tid 14146] [client 4.206.43.141:55042] [client 4.206.43.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/m.php"] [unique_id "aSXHTdVXYbb0ii_rVoKregAAAIk"]
[Tue Nov 25 23:12:14.806246 2025] [:error] [pid 14078:tid 14153] [client 4.206.43.141:14283] [client 4.206.43.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/m.php"] [unique_id "aSXHTtVXYbb0ii_rVoKrfQAAAJA"]
[Tue Nov 25 23:12:15.667656 2025] [:error] [pid 28836:tid 29010] [client 4.206.43.141:14320] [client 4.206.43.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/as.php"] [unique_id "aSXHT5wNRsoxcLQGkTcCvQAAAtQ"]
[Tue Nov 25 23:12:16.633768 2025] [:error] [pid 28739:tid 28771] [client 4.206.43.141:43976] [client 4.206.43.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/as.php"] [unique_id "aSXHUBxGpKmlkG4FexTOZAAAAgk"]
[Tue Nov 25 23:12:17.778869 2025] [:error] [pid 2987:tid 3013] [client 4.206.43.141:14305] [client 4.206.43.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/as.php"] [unique_id "aSXHUc-djEt-pTzPxnzlywAAAVg"]
[Tue Nov 25 23:12:19.283116 2025] [:error] [pid 14078:tid 14160] [client 4.206.43.141:42448] [client 4.206.43.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/as.php"] [unique_id "aSXHU9VXYbb0ii_rVoKriwAAAJc"]
[Tue Nov 25 23:12:20.387610 2025] [:error] [pid 28609:tid 28637] [client 4.206.43.141:13991] [client 4.206.43.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/v.php"] [unique_id "aSXHVCGGdT-nZJVs3x0KugAAAZM"]
[Tue Nov 25 23:12:21.260106 2025] [:error] [pid 28836:tid 29008] [client 4.206.43.141:43698] [client 4.206.43.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/v.php"] [unique_id "aSXHVZwNRsoxcLQGkTcCzQAAAtI"]
[Tue Nov 25 23:12:22.500717 2025] [:error] [pid 14168:tid 14172] [client 4.206.43.141:62752] [client 4.206.43.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/v.php"] [unique_id "aSXHVvR-ZDU0QEgAIIumTgAAAME"]
[Tue Nov 25 23:12:24.092123 2025] [:error] [pid 14078:tid 14150] [client 4.206.43.141:57717] [client 4.206.43.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/v.php"] [unique_id "aSXHWNVXYbb0ii_rVoKrnQAAAI0"]
[Tue Nov 25 23:12:25.807196 2025] [:error] [pid 14077:tid 14124] [client 4.206.43.141:13730] [client 4.206.43.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bless.php"] [unique_id "aSXHWRG9n7UHEkwDTyjn3wAAAE4"]
[Tue Nov 25 23:12:26.716479 2025] [:error] [pid 28609:tid 28619] [client 4.206.43.141:13976] [client 4.206.43.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bless.php"] [unique_id "aSXHWiGGdT-nZJVs3x0KwQAAAYE"]
[Tue Nov 25 23:12:30.896250 2025] [:error] [pid 14077:tid 14126] [client 4.206.43.141:44991] [client 4.206.43.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bless.php"] [unique_id "aSXHXhG9n7UHEkwDTyjn4wAAAFA"]
[Tue Nov 25 23:12:31.441533 2025] [:error] [pid 28836:tid 29012] [client 4.206.43.141:49943] [client 4.206.43.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bless.php"] [unique_id "aSXHX5wNRsoxcLQGkTcCzwAAAtY"]
[Tue Nov 25 23:12:32.082525 2025] [:error] [pid 28836:tid 29006] [client 4.206.43.141:14129] [client 4.206.43.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vv.php"] [unique_id "aSXHYJwNRsoxcLQGkTcC0AAAAtA"]
[Tue Nov 25 23:12:33.316904 2025] [:error] [pid 14077:tid 14110] [client 4.206.43.141:14117] [client 4.206.43.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vv.php"] [unique_id "aSXHYRG9n7UHEkwDTyjn5wAAAEA"]
[Tue Nov 25 23:12:34.141345 2025] [proxy_fcgi:error] [pid 43981:tid 43989] [client 4.206.43.141:13823] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 23:12:34.354387 2025] [proxy_fcgi:error] [pid 43981:tid 43993] [client 4.206.43.141:13823] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 23:12:34.564680 2025] [proxy_fcgi:error] [pid 43981:tid 44006] [client 4.206.43.141:13823] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 23:12:34.774806 2025] [proxy_fcgi:error] [pid 43981:tid 43984] [client 4.206.43.141:13823] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 23:12:35.020088 2025] [proxy_fcgi:error] [pid 43981:tid 43983] [client 4.206.43.141:13823] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 23:12:35.540243 2025] [proxy_fcgi:error] [pid 43981:tid 44005] [client 4.206.43.141:13823] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 23:12:35.749525 2025] [proxy_fcgi:error] [pid 43981:tid 43992] [client 4.206.43.141:13823] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 23:12:35.983944 2025] [proxy_fcgi:error] [pid 43981:tid 43998] [client 4.206.43.141:13823] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 23:12:36.504034 2025] [proxy_fcgi:error] [pid 43981:tid 43986] [client 4.206.43.141:13823] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 23:12:36.719797 2025] [proxy_fcgi:error] [pid 43981:tid 43987] [client 4.206.43.141:13823] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 23:12:37.927030 2025] [proxy_fcgi:error] [pid 43981:tid 43994] [client 4.206.43.141:13823] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 23:12:38.884448 2025] [:error] [pid 43981:tid 43997] [client 4.206.43.141:13823] [client 4.206.43.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mail.php"] [unique_id "aSXHZggZn97m_qh_RaGBvgAAAw4"]
[Tue Nov 25 23:12:40.268485 2025] [:error] [pid 28739:tid 28769] [client 4.206.43.141:51140] [client 4.206.43.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mail.php"] [unique_id "aSXHaBxGpKmlkG4FexTOdwAAAgc"]
[Tue Nov 25 23:12:41.437039 2025] [:error] [pid 14078:tid 14148] [client 4.206.43.141:51213] [client 4.206.43.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mail.php"] [unique_id "aSXHadVXYbb0ii_rVoKrvAAAAIs"]
[Tue Nov 25 23:12:43.355584 2025] [:error] [pid 28836:tid 29014] [client 4.206.43.141:40698] [client 4.206.43.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mail.php"] [unique_id "aSXHa5wNRsoxcLQGkTcC1wAAAtg"]
[Tue Nov 25 23:12:44.548790 2025] [:error] [pid 14076:tid 14102] [client 4.206.43.141:40697] [client 4.206.43.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/11.php"] [unique_id "aSXHbHsB4Gz6Qw-pvBtg6QAAABU"]
[Tue Nov 25 23:12:46.610065 2025] [:error] [pid 2987:tid 2999] [client 4.206.43.141:46227] [client 4.206.43.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/11.php"] [unique_id "aSXHbs-djEt-pTzPxnzmAgAAAUo"]
[Tue Nov 25 23:12:47.850448 2025] [:error] [pid 2987:tid 3007] [client 4.206.43.141:55647] [client 4.206.43.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/11.php"] [unique_id "aSXHb8-djEt-pTzPxnzmBgAAAVI"]
[Tue Nov 25 23:12:48.667816 2025] [:error] [pid 14078:tid 14152] [client 4.206.43.141:55641] [client 4.206.43.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/11.php"] [unique_id "aSXHcNVXYbb0ii_rVoKrzgAAAI8"]
[Tue Nov 25 23:12:50.307485 2025] [:error] [pid 28609:tid 28639] [client 4.206.43.141:40657] [client 4.206.43.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/conflg.php"] [unique_id "aSXHciGGdT-nZJVs3x0KyAAAAZU"]
[Tue Nov 25 23:12:53.146392 2025] [:error] [pid 28836:tid 29013] [client 4.206.43.141:13463] [client 4.206.43.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/conflg.php"] [unique_id "aSXHdZwNRsoxcLQGkTcC3gAAAtc"]
[Tue Nov 25 23:12:53.894932 2025] [:error] [pid 28836:tid 28959] [client 4.206.43.141:13478] [client 4.206.43.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/conflg.php"] [unique_id "aSXHdZwNRsoxcLQGkTcC3wAAAsQ"]
[Tue Nov 25 23:12:56.162138 2025] [:error] [pid 14078:tid 14146] [client 4.206.43.141:51231] [client 4.206.43.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/conflg.php"] [unique_id "aSXHeNVXYbb0ii_rVoKr6QAAAIk"]
[Tue Nov 25 23:12:58.055430 2025] [:error] [pid 28609:tid 28635] [client 4.206.43.141:13891] [client 4.206.43.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xmrlpc.php"] [unique_id "aSXHeiGGdT-nZJVs3x0KzAAAAZE"]
[Tue Nov 25 23:12:59.778124 2025] [:error] [pid 28739:tid 28765] [client 4.206.43.141:39679] [client 4.206.43.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xmrlpc.php"] [unique_id "aSXHexxGpKmlkG4FexTOmQAAAgM"]
[Tue Nov 25 23:13:01.296393 2025] [:error] [pid 28836:tid 28968] [client 4.206.43.141:60520] [client 4.206.43.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xmrlpc.php"] [unique_id "aSXHfZwNRsoxcLQGkTcC5gAAAs0"]
[Tue Nov 25 23:13:02.527140 2025] [:error] [pid 43981:tid 43992] [client 4.206.43.141:13467] [client 4.206.43.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xmrlpc.php"] [unique_id "aSXHfggZn97m_qh_RaGB0wAAAwk"]
[Wed Nov 26 02:43:35.426437 2025] [:error] [pid 43981:tid 43985] [client 34.9.80.39:50237] [client 34.9.80.39] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.9.80.39, incrementing ddos counter"] [hostname "dwelectservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aSX41wgZn97m_qh_RaGoqgAAAwI"]
[Wed Nov 26 02:43:35.436970 2025] [proxy_fcgi:error] [pid 43981:tid 43985] [client 34.9.80.39:50237] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 02:43:38.036819 2025] [:error] [pid 43981:tid 43990] [client 34.9.80.39:50237] [client 34.9.80.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aSX42ggZn97m_qh_RaGotQAAAwc"]
[Wed Nov 26 02:43:38.449598 2025] [:error] [pid 28609:tid 28632] [client 34.9.80.39:62884] [client 34.9.80.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aSX42iGGdT-nZJVs3x09RgAAAY4"]
[Wed Nov 26 02:43:38.999298 2025] [:error] [pid 28609:tid 28634] [client 34.9.80.39:65474] [client 34.9.80.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aSX42iGGdT-nZJVs3x09SAAAAZA"]
[Wed Nov 26 02:43:39.472425 2025] [:error] [pid 28836:tid 28969] [client 34.9.80.39:56753] [client 34.9.80.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aSX425wNRsoxcLQGkTcwNAAAAs4"]
[Wed Nov 26 02:43:39.956703 2025] [:error] [pid 28836:tid 28986] [client 34.9.80.39:63965] [client 34.9.80.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aSX425wNRsoxcLQGkTcwNQAAAs8"]
[Wed Nov 26 02:43:40.466226 2025] [:error] [pid 2987:tid 2998] [client 34.9.80.39:56409] [client 34.9.80.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aSX43M-djEt-pTzPxnwSzQAAAUk"]
[Wed Nov 26 02:43:41.006142 2025] [:error] [pid 2987:tid 3010] [client 34.9.80.39:50836] [client 34.9.80.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aSX43c-djEt-pTzPxnwSzgAAAVU"]
[Wed Nov 26 14:14:29.587440 2025] [proxy_fcgi:error] [pid 10383:tid 10395] [client 45.131.195.233:53073] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:14:31.985695 2025] [proxy_fcgi:error] [pid 10383:tid 10399] [client 45.131.195.233:53073] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:14:32.679139 2025] [:error] [pid 10383:tid 10396] [client 45.131.195.233:53073] [client 45.131.195.233] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aSaayK0RJ-zjhOVjD8_ZzwAAAco"]
[Wed Nov 26 14:14:34.079448 2025] [proxy_fcgi:error] [pid 34742:tid 34756] [client 209.87.169.4:55759] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:14:34.767156 2025] [:error] [pid 34742:tid 34752] [client 209.87.169.4:55759] [client 209.87.169.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/bk/index.php"] [unique_id "aSaaypSuLNwpQF_jzAdHEwAAAEQ"]
[Wed Nov 26 14:14:36.085654 2025] [proxy_fcgi:error] [pid 34742:tid 34757] [client 209.87.169.17:45443] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:14:37.401624 2025] [proxy_fcgi:error] [pid 34742:tid 34750] [client 209.87.169.17:45443] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:14:38.094223 2025] [proxy_fcgi:error] [pid 34742:tid 34748] [client 209.87.169.17:45443] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:14:38.780002 2025] [proxy_fcgi:error] [pid 34742:tid 34751] [client 209.87.169.17:45443] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:14:40.175585 2025] [:error] [pid 34742:tid 34765] [client 209.87.169.17:45443] [client 209.87.169.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/theme-compat/chosen.php"] [unique_id "aSaa0JSuLNwpQF_jzAdHIQAAAFE"]
[Wed Nov 26 14:14:41.498968 2025] [proxy_fcgi:error] [pid 45836:tid 45865] [client 209.87.169.26:29219] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:14:44.685082 2025] [proxy_fcgi:error] [pid 45836:tid 45854] [client 209.87.169.26:29219] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:14:45.574816 2025] [:error] [pid 45836:tid 45869] [client 209.87.169.26:29219] [client 209.87.169.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/IXR/chosen.php"] [unique_id "aSaa1ZfrnOGqL-seZAxFWQAAANc"]
[Wed Nov 26 14:14:46.978899 2025] [:error] [pid 10383:tid 10386] [client 185.198.240.232:49217] [client 185.198.240.232] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/chosen.php"] [unique_id "aSaa1q0RJ-zjhOVjD8_Z2QAAAcA"]
[Wed Nov 26 14:14:48.366009 2025] [:error] [pid 34744:tid 34811] [client 209.87.169.202:34985] [client 209.87.169.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/pomo/wp-conflg.php"] [unique_id "aSaa2EtgOvVbhyALkTQIZwAAAYg"]
[Wed Nov 26 14:14:50.277139 2025] [:error] [pid 45901:tid 45905] [client 209.87.169.197:63035] [client 209.87.169.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "aSaa2iunQ1SpfPRNrtywPwAAAQI"]
[Wed Nov 26 14:14:55.175396 2025] [:error] [pid 10383:tid 10409] [client 209.87.169.200:36693] [client 209.87.169.200] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Requests/Auth/index.php"] [unique_id "aSaa360RJ-zjhOVjD8_Z3AAAAdc"]
[Wed Nov 26 14:14:57.980756 2025] [proxy_fcgi:error] [pid 10383:tid 10388] [client 209.87.169.200:30795] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:14:59.886761 2025] [proxy_fcgi:error] [pid 10383:tid 10407] [client 209.87.169.200:30795] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:15:01.701194 2025] [:error] [pid 10383:tid 10410] [client 209.87.169.200:30795] [client 209.87.169.200] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aSaa5a0RJ-zjhOVjD8_aGAAAAdg"]
[Wed Nov 26 14:15:03.076026 2025] [:error] [pid 34830:tid 34839] [client 209.87.169.198:44431] [client 209.87.169.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "aSaa50ukvkWgWN6jCR2szAAAAAc"]
[Wed Nov 26 14:15:06.294020 2025] [proxy_fcgi:error] [pid 34744:tid 34812] [client 209.87.169.205:54733] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:15:08.581025 2025] [proxy_fcgi:error] [pid 34744:tid 34815] [client 209.87.169.205:54733] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:15:09.286322 2025] [proxy_fcgi:error] [pid 34744:tid 34817] [client 209.87.169.205:54733] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:15:09.974795 2025] [proxy_fcgi:error] [pid 34744:tid 34809] [client 209.87.169.205:54733] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:15:10.687406 2025] [proxy_fcgi:error] [pid 34744:tid 34803] [client 209.87.169.205:54733] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:15:11.390656 2025] [proxy_fcgi:error] [pid 34744:tid 34808] [client 209.87.169.205:54733] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:15:12.168321 2025] [proxy_fcgi:error] [pid 34744:tid 34818] [client 209.87.169.205:54733] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:15:12.876408 2025] [proxy_fcgi:error] [pid 34744:tid 34813] [client 209.87.169.205:54733] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:15:13.579039 2025] [proxy_fcgi:error] [pid 34744:tid 34827] [client 209.87.169.205:54733] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:15:14.284098 2025] [proxy_fcgi:error] [pid 34744:tid 34825] [client 209.87.169.205:54733] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:15:15.885036 2025] [proxy_fcgi:error] [pid 34744:tid 34803] [client 209.87.169.205:54733] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:15:23.728249 2025] [proxy_fcgi:error] [pid 34830:tid 34841] [client 209.87.169.18:57731] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:15:24.375207 2025] [proxy_fcgi:error] [pid 34830:tid 34833] [client 209.87.169.18:57731] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:15:25.093246 2025] [proxy_fcgi:error] [pid 34830:tid 34839] [client 209.87.169.18:57731] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:15:25.783686 2025] [proxy_fcgi:error] [pid 34830:tid 34849] [client 209.87.169.18:57731] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:15:26.483762 2025] [proxy_fcgi:error] [pid 34830:tid 34843] [client 209.87.169.18:57731] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:15:27.195126 2025] [proxy_fcgi:error] [pid 34830:tid 34851] [client 209.87.169.18:57731] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:15:27.892183 2025] [proxy_fcgi:error] [pid 34830:tid 34837] [client 209.87.169.18:57731] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:15:29.598260 2025] [proxy_fcgi:error] [pid 34830:tid 34853] [client 209.87.169.18:57731] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:15:30.287069 2025] [proxy_fcgi:error] [pid 34830:tid 34840] [client 209.87.169.18:57731] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:15:30.971779 2025] [proxy_fcgi:error] [pid 34830:tid 34855] [client 209.87.169.18:57731] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:15:31.680680 2025] [proxy_fcgi:error] [pid 34830:tid 34842] [client 209.87.169.18:57731] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:15:32.369011 2025] [proxy_fcgi:error] [pid 34830:tid 34838] [client 209.87.169.18:57731] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:15:33.090262 2025] [proxy_fcgi:error] [pid 34830:tid 34845] [client 209.87.169.18:57731] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:15:36.979134 2025] [proxy_fcgi:error] [pid 34830:tid 34847] [client 209.87.169.18:57731] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:15:37.676699 2025] [proxy_fcgi:error] [pid 34830:tid 34836] [client 209.87.169.18:57731] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:15:38.372508 2025] [proxy_fcgi:error] [pid 34830:tid 34841] [client 209.87.169.18:57731] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:15:39.071113 2025] [proxy_fcgi:error] [pid 34830:tid 34833] [client 209.87.169.18:57731] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:15:39.771931 2025] [proxy_fcgi:error] [pid 34830:tid 34839] [client 209.87.169.18:57731] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:15:40.489701 2025] [proxy_fcgi:error] [pid 34830:tid 34849] [client 209.87.169.18:57731] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:15:41.187047 2025] [proxy_fcgi:error] [pid 34830:tid 34843] [client 209.87.169.18:57731] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:15:41.896324 2025] [proxy_fcgi:error] [pid 34830:tid 34851] [client 209.87.169.18:57731] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:15:44.176183 2025] [proxy_fcgi:error] [pid 34830:tid 34844] [client 209.87.169.18:57731] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:15:44.889086 2025] [:error] [pid 34830:tid 34832] [client 209.87.169.18:57731] [client 209.87.169.18] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.87.169.18, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-login.php"] [unique_id "aSabEEukvkWgWN6jCR2s_QAAAAA"]
[Wed Nov 26 14:15:44.894704 2025] [proxy_fcgi:error] [pid 34830:tid 34832] [client 209.87.169.18:57731] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:15:46.383316 2025] [proxy_fcgi:error] [pid 34830:tid 34852] [client 209.87.169.18:57731] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:15:47.865639 2025] [proxy_fcgi:error] [pid 34830:tid 34853] [client 209.87.169.18:57731] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:15:48.578612 2025] [:error] [pid 34830:tid 34840] [client 209.87.169.18:57731] [client 209.87.169.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/modules.php"] [unique_id "aSabFEukvkWgWN6jCR2tAQAAAAg"]
[Wed Nov 26 14:15:50.184733 2025] [proxy_fcgi:error] [pid 34744:tid 34821] [client 209.87.169.18:62261] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:15:50.982330 2025] [proxy_fcgi:error] [pid 34744:tid 34803] [client 209.87.169.18:62261] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:15:52.373310 2025] [proxy_fcgi:error] [pid 34744:tid 34805] [client 209.87.169.18:62261] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:15:53.078524 2025] [proxy_fcgi:error] [pid 34744:tid 34817] [client 209.87.169.18:62261] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:15:54.013464 2025] [proxy_fcgi:error] [pid 34744:tid 34814] [client 209.87.169.18:62261] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:15:55.794015 2025] [proxy_fcgi:error] [pid 34744:tid 34820] [client 209.87.169.18:62261] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:15:56.489265 2025] [proxy_fcgi:error] [pid 34744:tid 34809] [client 209.87.169.18:62261] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:15:57.183272 2025] [proxy_fcgi:error] [pid 34744:tid 34822] [client 209.87.169.18:62261] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:15:57.885311 2025] [proxy_fcgi:error] [pid 34744:tid 34812] [client 209.87.169.18:62261] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:15:59.279188 2025] [:error] [pid 34744:tid 34815] [client 209.87.169.18:62261] [client 209.87.169.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/codeboy1877_up.php"] [unique_id "aSabH0tgOvVbhyALkTQJWAAAAYw"]
[Wed Nov 26 14:16:00.686955 2025] [proxy_fcgi:error] [pid 10383:tid 10389] [client 185.198.240.250:43609] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:16:01.391158 2025] [proxy_fcgi:error] [pid 10383:tid 10405] [client 185.198.240.250:43609] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:16:04.973403 2025] [proxy_fcgi:error] [pid 10383:tid 10392] [client 185.198.240.250:43609] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:16:05.679514 2025] [proxy_fcgi:error] [pid 10383:tid 10408] [client 185.198.240.250:43609] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:16:06.391374 2025] [proxy_fcgi:error] [pid 10383:tid 10391] [client 185.198.240.250:43609] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:16:07.083292 2025] [proxy_fcgi:error] [pid 10383:tid 10406] [client 185.198.240.250:43609] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:16:07.810262 2025] [proxy_fcgi:error] [pid 10383:tid 10401] [client 185.198.240.250:43609] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:16:09.893657 2025] [proxy_fcgi:error] [pid 10383:tid 10399] [client 185.198.240.250:43609] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:16:10.593793 2025] [proxy_fcgi:error] [pid 10383:tid 10386] [client 185.198.240.250:43609] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:16:11.291169 2025] [proxy_fcgi:error] [pid 10383:tid 10398] [client 185.198.240.250:43609] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:16:11.988941 2025] [proxy_fcgi:error] [pid 10383:tid 10388] [client 185.198.240.250:43609] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:16:14.190205 2025] [proxy_fcgi:error] [pid 10383:tid 10400] [client 185.198.240.250:43609] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:16:14.896875 2025] [proxy_fcgi:error] [pid 10383:tid 10392] [client 185.198.240.250:43609] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:16:15.580574 2025] [proxy_fcgi:error] [pid 10383:tid 10391] [client 185.198.240.250:43609] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:16:16.995872 2025] [proxy_fcgi:error] [pid 10383:tid 10404] [client 185.198.240.250:43609] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:16:17.670954 2025] [proxy_fcgi:error] [pid 10383:tid 10393] [client 185.198.240.250:43609] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:16:19.090260 2025] [proxy_fcgi:error] [pid 10383:tid 10386] [client 185.198.240.250:43609] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:16:20.233756 2025] [proxy_fcgi:error] [pid 10383:tid 10394] [client 185.198.240.250:43609] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:16:20.882164 2025] [proxy_fcgi:error] [pid 10383:tid 10388] [client 185.198.240.250:43609] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:16:21.587537 2025] [proxy_fcgi:error] [pid 10383:tid 10405] [client 185.198.240.250:43609] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:16:22.278699 2025] [proxy_fcgi:error] [pid 10383:tid 10410] [client 185.198.240.250:43609] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:16:22.894790 2025] [:error] [pid 10383:tid 10407] [client 185.198.240.250:43609] [client 185.198.240.250] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/lx.php"] [unique_id "aSabNq0RJ-zjhOVjD8_acwAAAdU"]
[Wed Nov 26 14:16:25.774209 2025] [proxy_fcgi:error] [pid 45836:tid 45856] [client 185.198.240.242:29879] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:16:26.484145 2025] [proxy_fcgi:error] [pid 45836:tid 45860] [client 185.198.240.242:29879] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:16:27.195204 2025] [proxy_fcgi:error] [pid 45836:tid 45866] [client 185.198.240.242:29879] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:16:27.895855 2025] [proxy_fcgi:error] [pid 45836:tid 45858] [client 185.198.240.242:29879] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:16:28.579205 2025] [proxy_fcgi:error] [pid 45836:tid 45846] [client 185.198.240.242:29879] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:16:29.573958 2025] [proxy_fcgi:error] [pid 45836:tid 45869] [client 185.198.240.242:29879] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:16:34.200207 2025] [proxy_fcgi:error] [pid 45836:tid 45864] [client 185.198.240.242:29879] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:16:34.878445 2025] [proxy_fcgi:error] [pid 45836:tid 45852] [client 185.198.240.242:29879] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:16:36.586610 2025] [proxy_fcgi:error] [pid 45836:tid 45847] [client 185.198.240.242:29879] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:16:37.384724 2025] [proxy_fcgi:error] [pid 45836:tid 45868] [client 185.198.240.242:29879] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:16:39.002762 2025] [proxy_fcgi:error] [pid 45836:tid 45859] [client 185.198.240.242:29879] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:16:39.691328 2025] [proxy_fcgi:error] [pid 45836:tid 45849] [client 185.198.240.242:29879] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:16:40.379765 2025] [proxy_fcgi:error] [pid 45836:tid 45848] [client 185.198.240.242:29879] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:16:41.190421 2025] [proxy_fcgi:error] [pid 45836:tid 45865] [client 185.198.240.242:29879] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:16:41.986257 2025] [proxy_fcgi:error] [pid 45836:tid 45856] [client 185.198.240.242:29879] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:16:42.873257 2025] [proxy_fcgi:error] [pid 45836:tid 45853] [client 185.198.240.242:29879] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:16:43.591911 2025] [proxy_fcgi:error] [pid 45836:tid 45852] [client 185.198.240.242:29879] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:16:44.282992 2025] [proxy_fcgi:error] [pid 45836:tid 45855] [client 185.198.240.242:29879] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:16:44.981269 2025] [proxy_fcgi:error] [pid 45836:tid 45846] [client 185.198.240.242:29879] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:16:45.679122 2025] [proxy_fcgi:error] [pid 45836:tid 45850] [client 185.198.240.242:29879] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:16:46.384537 2025] [proxy_fcgi:error] [pid 45836:tid 45859] [client 185.198.240.242:29879] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:16:47.074708 2025] [proxy_fcgi:error] [pid 45836:tid 45857] [client 185.198.240.242:29879] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:16:47.795832 2025] [proxy_fcgi:error] [pid 45836:tid 45848] [client 185.198.240.242:29879] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:16:48.492942 2025] [proxy_fcgi:error] [pid 45836:tid 45865] [client 185.198.240.242:29879] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:16:49.181725 2025] [proxy_fcgi:error] [pid 45836:tid 45856] [client 185.198.240.242:29879] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:16:49.892833 2025] [proxy_fcgi:error] [pid 45836:tid 45863] [client 185.198.240.242:29879] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:16:50.597467 2025] [proxy_fcgi:error] [pid 45836:tid 45858] [client 185.198.240.242:29879] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:16:51.293580 2025] [proxy_fcgi:error] [pid 45836:tid 45864] [client 185.198.240.242:29879] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:16:53.384883 2025] [proxy_fcgi:error] [pid 45836:tid 45853] [client 185.198.240.242:29879] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:17:10.579268 2025] [:error] [pid 45836:tid 45859] [client 185.198.240.242:29879] [client 185.198.240.242] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/F0x.php"] [unique_id "aSabZpfrnOGqL-seZAxGIAAAAM0"]
[Wed Nov 26 14:17:12.691774 2025] [proxy_fcgi:error] [pid 34744:tid 34813] [client 209.87.169.10:41315] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:17:20.188128 2025] [proxy_fcgi:error] [pid 34744:tid 34810] [client 209.87.169.10:41315] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:17:20.894859 2025] [proxy_fcgi:error] [pid 34744:tid 34818] [client 209.87.169.10:41315] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:17:21.569092 2025] [proxy_fcgi:error] [pid 34744:tid 34804] [client 209.87.169.10:41315] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:17:24.516261 2025] [proxy_fcgi:error] [pid 34744:tid 34819] [client 209.87.169.10:41315] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:17:29.392406 2025] [proxy_fcgi:error] [pid 34744:tid 34812] [client 209.87.169.10:41315] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:17:30.842780 2025] [proxy_fcgi:error] [pid 34744:tid 34825] [client 209.87.169.10:41315] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:17:31.487304 2025] [proxy_fcgi:error] [pid 34744:tid 34823] [client 209.87.169.10:41315] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:17:32.287368 2025] [proxy_fcgi:error] [pid 34744:tid 34807] [client 209.87.169.10:41315] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:17:32.990149 2025] [proxy_fcgi:error] [pid 34744:tid 34818] [client 209.87.169.10:41315] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:17:33.815208 2025] [proxy_fcgi:error] [pid 34744:tid 34803] [client 209.87.169.10:41315] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:17:35.366970 2025] [:error] [pid 34744:tid 34808] [client 209.87.169.10:41315] [client 209.87.169.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aSabf0tgOvVbhyALkTQKNQAAAYU"]
[Wed Nov 26 14:17:38.382492 2025] [:error] [pid 34744:tid 34825] [client 209.87.169.7:38391] [client 209.87.169.7] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 209.87.169.7, incrementing ddos counter"] [hostname "dwelectservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aSabgktgOvVbhyALkTQKOQAAAZY"]
[Wed Nov 26 14:17:38.387130 2025] [proxy_fcgi:error] [pid 34744:tid 34825] [client 209.87.169.7:38391] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:17:39.098390 2025] [proxy_fcgi:error] [pid 34744:tid 34815] [client 209.87.169.7:38391] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:17:40.490704 2025] [:error] [pid 34744:tid 34810] [client 209.87.169.7:38391] [client 209.87.169.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aSabhEtgOvVbhyALkTQKPAAAAYc"]
[Wed Nov 26 14:17:42.682596 2025] [proxy_fcgi:error] [pid 35540:tid 35550] [client 209.87.169.183:39353] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:17:46.194848 2025] [proxy_fcgi:error] [pid 35540:tid 35554] [client 209.87.169.183:39353] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:17:47.491164 2025] [proxy_fcgi:error] [pid 35540:tid 35562] [client 209.87.169.183:39353] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:17:49.187583 2025] [:error] [pid 35540:tid 35568] [client 209.87.169.183:39353] [client 209.87.169.183] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aSabjcGrIq2A6SZSnkKECgAAAJY"]
[Wed Nov 26 14:17:50.603040 2025] [proxy_fcgi:error] [pid 34743:tid 34786] [client 209.87.169.194:47703] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:17:51.286025 2025] [proxy_fcgi:error] [pid 34743:tid 34794] [client 209.87.169.194:47703] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:17:51.903782 2025] [proxy_fcgi:error] [pid 34743:tid 34777] [client 209.87.169.194:47703] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:17:55.793441 2025] [proxy_fcgi:error] [pid 34743:tid 34788] [client 209.87.169.194:47703] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:17:56.484042 2025] [proxy_fcgi:error] [pid 34743:tid 34790] [client 209.87.169.194:47703] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:17:57.180988 2025] [proxy_fcgi:error] [pid 34743:tid 34798] [client 209.87.169.194:47703] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:17:57.872308 2025] [proxy_fcgi:error] [pid 34743:tid 34776] [client 209.87.169.194:47703] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:18:00.503018 2025] [proxy_fcgi:error] [pid 34743:tid 34778] [client 209.87.169.194:47703] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:18:01.966576 2025] [:error] [pid 34743:tid 34793] [client 209.87.169.194:47703] [client 209.87.169.194] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aSabmQvyX7Q5oU7_mByhZwAAAVE"]
[Wed Nov 26 14:18:03.375991 2025] [:error] [pid 34744:tid 34816] [client 209.87.169.7:41515] [client 209.87.169.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aSabm0tgOvVbhyALkTQKZQAAAY0"]
[Wed Nov 26 14:18:04.794868 2025] [:error] [pid 35540:tid 35570] [client 185.198.240.249:32051] [client 185.198.240.249] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "aSabnMGrIq2A6SZSnkKEJgAAAJg"]
[Wed Nov 26 14:18:06.204283 2025] [:error] [pid 45901:tid 45904] [client 209.87.169.204:59247] [client 209.87.169.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "aSabniunQ1SpfPRNrtyxTgAAAQE"]
[Wed Nov 26 14:18:07.590794 2025] [proxy_fcgi:error] [pid 34742:tid 34753] [client 209.87.169.21:32295] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:18:08.379017 2025] [proxy_fcgi:error] [pid 34742:tid 34762] [client 209.87.169.21:32295] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:18:09.774895 2025] [:error] [pid 34742:tid 34749] [client 209.87.169.21:32295] [client 209.87.169.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.87.169.21, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/images/wp-login.php"] [unique_id "aSaboZSuLNwpQF_jzAdIDgAAAEE"]
[Wed Nov 26 14:18:15.670376 2025] [proxy_fcgi:error] [pid 34742:tid 34767] [client 209.87.169.21:32295] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:18:16.373280 2025] [proxy_fcgi:error] [pid 34742:tid 34763] [client 209.87.169.21:32295] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:18:17.703726 2025] [proxy_fcgi:error] [pid 34742:tid 34769] [client 209.87.169.21:32295] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:18:22.583386 2025] [:error] [pid 34742:tid 34755] [client 209.87.169.21:32295] [client 209.87.169.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "aSabrpSuLNwpQF_jzAdIHQAAAEc"]
[Wed Nov 26 14:18:23.976646 2025] [proxy_fcgi:error] [pid 34830:tid 34852] [client 209.87.169.193:38199] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:18:25.981957 2025] [:error] [pid 34830:tid 34853] [client 209.87.169.193:38199] [client 209.87.169.193] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.87.169.193, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/wp-login.php"] [unique_id "aSabsUukvkWgWN6jCR2tsgAAABU"]
[Wed Nov 26 14:18:26.685556 2025] [proxy_fcgi:error] [pid 34830:tid 34856] [client 209.87.169.193:38199] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:18:28.379916 2025] [proxy_fcgi:error] [pid 34830:tid 34846] [client 209.87.169.193:38199] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:18:29.189327 2025] [proxy_fcgi:error] [pid 34830:tid 34855] [client 209.87.169.193:38199] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:18:30.587569 2025] [proxy_fcgi:error] [pid 34830:tid 34845] [client 209.87.169.193:38199] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:18:31.292647 2025] [proxy_fcgi:error] [pid 34830:tid 34836] [client 209.87.169.193:38199] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:18:31.987333 2025] [:error] [pid 34830:tid 34847] [client 209.87.169.193:38199] [client 209.87.169.193] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/makeasmtp.php"] [unique_id "aSabt0ukvkWgWN6jCR2tuwAAAA8"]
[Wed Nov 26 14:18:33.578916 2025] [:error] [pid 35540:tid 35560] [client 209.87.169.12:33011] [client 209.87.169.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/about.php"] [unique_id "aSabucGrIq2A6SZSnkKEPwAAAI4"]
[Wed Nov 26 14:18:34.983401 2025] [proxy_fcgi:error] [pid 45901:tid 45911] [client 185.198.240.253:56647] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:18:35.682290 2025] [proxy_fcgi:error] [pid 45901:tid 45921] [client 185.198.240.253:56647] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:18:36.384709 2025] [proxy_fcgi:error] [pid 45901:tid 45910] [client 185.198.240.253:56647] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:18:37.086622 2025] [proxy_fcgi:error] [pid 45901:tid 45924] [client 185.198.240.253:56647] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:18:38.499224 2025] [proxy_fcgi:error] [pid 45901:tid 45922] [client 185.198.240.253:56647] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:18:41.288407 2025] [proxy_fcgi:error] [pid 45901:tid 45917] [client 185.198.240.253:56647] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:19:00.487692 2025] [proxy_fcgi:error] [pid 34742:tid 34768] [client 209.87.169.187:60957] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:19:01.392138 2025] [proxy_fcgi:error] [pid 34742:tid 34762] [client 209.87.169.187:60957] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:19:02.874444 2025] [proxy_fcgi:error] [pid 34742:tid 34751] [client 209.87.169.187:60957] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:19:05.280225 2025] [:error] [pid 34742:tid 34771] [client 209.87.169.187:60957] [client 209.87.169.187] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aSab2ZSuLNwpQF_jzAdIQAAAAFc"]
[Wed Nov 26 14:19:09.388971 2025] [:error] [pid 10383:tid 10402] [client 209.87.169.21:33015] [client 209.87.169.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/bak.php"] [unique_id "aSab3a0RJ-zjhOVjD8_bqAAAAdA"]
[Wed Nov 26 14:19:12.985431 2025] [proxy_fcgi:error] [pid 34744:tid 34816] [client 209.87.169.197:45107] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:19:13.762414 2025] [:error] [pid 34744:tid 34804] [client 209.87.169.197:45107] [client 209.87.169.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aSab4UtgOvVbhyALkTQLMwAAAYE"]
[Wed Nov 26 14:19:16.394016 2025] [proxy_fcgi:error] [pid 34743:tid 34784] [client 209.87.169.15:62113] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:19:19.285247 2025] [proxy_fcgi:error] [pid 34743:tid 34797] [client 209.87.169.15:62113] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:19:19.971424 2025] [:error] [pid 34743:tid 34790] [client 209.87.169.15:62113] [client 209.87.169.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dwelectservices.com.au"] [uri "/fm.php"] [unique_id "aSab5wvyX7Q5oU7_mByhxQAAAU4"]
[Wed Nov 26 14:19:21.302963 2025] [:error] [pid 34744:tid 34823] [client 209.87.169.7:27529] [client 209.87.169.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aSab6UtgOvVbhyALkTQLRgAAAZQ"]
[Wed Nov 26 14:19:22.681091 2025] [:error] [pid 35540:tid 35559] [client 209.87.169.205:35137] [client 209.87.169.205] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.87.169.205, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-content/upgrade-temp-backup/wp-login.php"] [unique_id "aSab6sGrIq2A6SZSnkKEeAAAAI0"]
[Wed Nov 26 14:19:23.387727 2025] [proxy_fcgi:error] [pid 35540:tid 35553] [client 209.87.169.205:35137] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:19:24.784082 2025] [:error] [pid 35540:tid 35566] [client 209.87.169.205:35137] [client 209.87.169.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/themes.php"] [unique_id "aSab7MGrIq2A6SZSnkKEfgAAAJQ"]
[Wed Nov 26 14:19:26.691138 2025] [proxy_fcgi:error] [pid 34744:tid 34804] [client 209.87.169.16:60333] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:19:28.278445 2025] [proxy_fcgi:error] [pid 34744:tid 34805] [client 209.87.169.16:60333] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:19:34.491991 2025] [:error] [pid 34744:tid 34813] [client 209.87.169.16:60333] [client 209.87.169.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/wp-includes_function.php"] [unique_id "aSab9ktgOvVbhyALkTQLcwAAAYo"]
[Wed Nov 26 14:19:35.887736 2025] [proxy_fcgi:error] [pid 45901:tid 45916] [client 209.87.169.199:32071] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:19:37.276988 2025] [:error] [pid 45901:tid 45915] [client 209.87.169.199:32071] [client 209.87.169.199] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/about.php"] [unique_id "aSab-SunQ1SpfPRNrtyx_gAAAQw"]
[Wed Nov 26 14:19:39.589173 2025] [proxy_fcgi:error] [pid 45836:tid 45854] [client 185.198.240.184:57073] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:19:40.280971 2025] [:error] [pid 45836:tid 45856] [client 185.198.240.184:57073] [client 185.198.240.184] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/codemirror/about.php"] [unique_id "aSab_JfrnOGqL-seZAxG8wAAAMo"]
[Wed Nov 26 14:19:42.969599 2025] [proxy_fcgi:error] [pid 34742:tid 34757] [client 185.198.240.248:60763] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:19:43.668313 2025] [:error] [pid 34742:tid 34764] [client 185.198.240.248:60763] [client 185.198.240.248] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.198.240.248, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-content/languages/themes/wp-login.php"] [unique_id "aSab_5SuLNwpQF_jzAdIggAAAFA"]
[Wed Nov 26 14:19:45.582274 2025] [:error] [pid 34742:tid 34772] [client 185.198.240.248:60763] [client 185.198.240.248] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/block-supports/index.php"] [unique_id "aSacAZSuLNwpQF_jzAdIhgAAAFg"]
[Wed Nov 26 14:19:47.078793 2025] [:error] [pid 34744:tid 34822] [client 209.87.169.22:20583] [client 209.87.169.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aSacA0tgOvVbhyALkTQLlgAAAZM"]
[Wed Nov 26 14:19:50.482054 2025] [proxy_fcgi:error] [pid 34744:tid 34817] [client 185.198.240.249:59847] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:19:52.571739 2025] [proxy_fcgi:error] [pid 34744:tid 34818] [client 185.198.240.249:59847] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:19:53.878542 2025] [proxy_fcgi:error] [pid 34744:tid 34819] [client 185.198.240.249:59847] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:19:54.578664 2025] [proxy_fcgi:error] [pid 34744:tid 34826] [client 185.198.240.249:59847] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:19:55.875002 2025] [:error] [pid 34744:tid 34811] [client 185.198.240.249:59847] [client 185.198.240.249] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/block-patterns/about.php"] [unique_id "aSacC0tgOvVbhyALkTQLyAAAAYg"]
[Wed Nov 26 14:19:58.571754 2025] [:error] [pid 34744:tid 34821] [client 209.87.169.25:29155] [client 209.87.169.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aSacDktgOvVbhyALkTQLzgAAAZI"]
[Wed Nov 26 14:19:59.872235 2025] [:error] [pid 34744:tid 34805] [client 209.87.169.194:56027] [client 209.87.169.194] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/widgets/about.php"] [unique_id "aSacD0tgOvVbhyALkTQL0QAAAYI"]
[Wed Nov 26 14:20:01.381784 2025] [:error] [pid 35540:tid 35554] [client 209.87.169.7:25753] [client 209.87.169.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/Content/index.php"] [unique_id "aSacEcGrIq2A6SZSnkKErwAAAIg"]
[Wed Nov 26 14:20:02.848233 2025] [:error] [pid 34744:tid 34827] [client 209.87.169.196:23473] [client 209.87.169.196] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aSacEktgOvVbhyALkTQL0gAAAZg"]
[Wed Nov 26 14:20:06.878182 2025] [proxy_fcgi:error] [pid 34744:tid 34816] [client 209.87.169.196:20619] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:20:07.582930 2025] [:error] [pid 34744:tid 34821] [client 209.87.169.196:20619] [client 209.87.169.196] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/ID3/autoload_classmap.php"] [unique_id "aSacF0tgOvVbhyALkTQL3AAAAZI"]
[Wed Nov 26 14:20:09.682855 2025] [proxy_fcgi:error] [pid 10383:tid 10410] [client 209.87.169.10:44149] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:20:10.382281 2025] [proxy_fcgi:error] [pid 10383:tid 10393] [client 209.87.169.10:44149] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:20:11.070733 2025] [:error] [pid 10383:tid 10398] [client 209.87.169.10:44149] [client 209.87.169.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "aSacG60RJ-zjhOVjD8_cLAAAAcw"]
[Wed Nov 26 14:20:12.395688 2025] [proxy_fcgi:error] [pid 10383:tid 10405] [client 209.87.169.205:33107] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:20:14.374095 2025] [proxy_fcgi:error] [pid 10383:tid 10409] [client 209.87.169.205:33107] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:20:15.068046 2025] [:error] [pid 10383:tid 10397] [client 209.87.169.205:33107] [client 209.87.169.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aSacH60RJ-zjhOVjD8_cMAAAAcs"]
[Wed Nov 26 14:20:16.392875 2025] [proxy_fcgi:error] [pid 10383:tid 10392] [client 209.87.169.24:50627] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:20:17.090723 2025] [:error] [pid 10383:tid 10386] [client 209.87.169.24:50627] [client 209.87.169.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/IXR/autoload_classmap.php"] [unique_id "aSacIa0RJ-zjhOVjD8_cNgAAAcA"]
[Wed Nov 26 14:20:21.675510 2025] [:error] [pid 35540:tid 35569] [client 209.87.169.21:64745] [client 209.87.169.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aSacJcGrIq2A6SZSnkKEtQAAAJc"]
[Wed Nov 26 14:20:23.195695 2025] [:error] [pid 34742:tid 34758] [client 209.87.169.198:33079] [client 209.87.169.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/sitemaps/providers/zmFM.php"] [unique_id "aSacJ5SuLNwpQF_jzAdImwAAAEo"]
[Wed Nov 26 14:20:25.288647 2025] [:error] [pid 34743:tid 34779] [client 185.198.240.235:62895] [client 185.198.240.235] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aSacKQvyX7Q5oU7_mByh6gAAAUM"]
[Wed Nov 26 14:20:26.490928 2025] [proxy_fcgi:error] [pid 35540:tid 35562] [client 209.87.169.9:27269] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:20:27.873658 2025] [proxy_fcgi:error] [pid 35540:tid 35547] [client 209.87.169.9:27269] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:20:28.577025 2025] [:error] [pid 35540:tid 35564] [client 209.87.169.9:27269] [client 209.87.169.9] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.87.169.9, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/cgi-bin/wp-login.php"] [unique_id "aSacLMGrIq2A6SZSnkKEugAAAJI"]
[Wed Nov 26 14:20:29.986969 2025] [:error] [pid 35540:tid 35558] [client 209.87.169.9:27269] [client 209.87.169.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/sodium_compat/wp-login.php"] [unique_id "aSacLcGrIq2A6SZSnkKEvAAAAIw"]
[Wed Nov 26 14:20:31.797569 2025] [:error] [pid 10383:tid 10394] [client 209.87.169.9:25309] [client 209.87.169.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "aSacL60RJ-zjhOVjD8_cPwAAAcg"]
[Wed Nov 26 14:20:45.786460 2025] [proxy_fcgi:error] [pid 45901:tid 45912] [client 209.87.169.14:29693] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:20:46.473794 2025] [proxy_fcgi:error] [pid 45901:tid 45910] [client 209.87.169.14:29693] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:20:49.187136 2025] [proxy_fcgi:error] [pid 45901:tid 45903] [client 209.87.169.14:29693] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:20:52.181290 2025] [:error] [pid 45901:tid 45924] [client 209.87.169.14:29693] [client 209.87.169.14] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.87.169.14, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/wp-login.php"] [unique_id "aSacRCunQ1SpfPRNrtyyOQAAARU"]
[Wed Nov 26 14:20:52.868735 2025] [:error] [pid 45901:tid 45915] [client 209.87.169.14:29693] [client 209.87.169.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aSacRCunQ1SpfPRNrtyyOgAAAQw"]
[Wed Nov 26 14:20:54.270142 2025] [:error] [pid 34830:tid 34850] [client 209.87.169.201:56501] [client 209.87.169.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Text/network.php"] [unique_id "aSacRkukvkWgWN6jCR2uWAAAABI"]
[Wed Nov 26 14:20:55.571504 2025] [:error] [pid 10383:tid 10408] [client 209.87.169.196:53829] [client 209.87.169.196] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/index.php"] [unique_id "aSacR60RJ-zjhOVjD8_cWQAAAdY"]
[Wed Nov 26 14:20:58.895305 2025] [proxy_fcgi:error] [pid 34742:tid 34749] [client 209.87.169.196:20229] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:20:59.584514 2025] [:error] [pid 34742:tid 34766] [client 209.87.169.196:20229] [client 209.87.169.196] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/php-compat/autoload_classmap.php"] [unique_id "aSacS5SuLNwpQF_jzAdIqwAAAFI"]
[Wed Nov 26 14:21:01.689816 2025] [proxy_fcgi:error] [pid 35540:tid 35548] [client 185.198.240.236:28861] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:21:05.286621 2025] [proxy_fcgi:error] [pid 35540:tid 35566] [client 185.198.240.236:28861] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:21:07.285745 2025] [proxy_fcgi:error] [pid 35540:tid 35549] [client 185.198.240.236:28861] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:21:07.982268 2025] [:error] [pid 35540:tid 35552] [client 185.198.240.236:28861] [client 185.198.240.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aSacU8GrIq2A6SZSnkKE9AAAAIY"]
[Wed Nov 26 14:21:10.078949 2025] [proxy_fcgi:error] [pid 35540:tid 35568] [client 209.87.169.203:34479] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:21:11.472086 2025] [:error] [pid 35540:tid 35548] [client 209.87.169.203:34479] [client 209.87.169.203] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aSacV8GrIq2A6SZSnkKE-QAAAII"]
[Wed Nov 26 14:21:13.582971 2025] [proxy_fcgi:error] [pid 35540:tid 35550] [client 45.131.195.235:30885] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:21:15.782477 2025] [:error] [pid 35540:tid 35566] [client 45.131.195.235:30885] [client 45.131.195.235] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/IXR/about.php"] [unique_id "aSacW8GrIq2A6SZSnkKFAAAAAJQ"]
[Wed Nov 26 14:21:18.167773 2025] [:error] [pid 35540:tid 35547] [client 209.87.169.8:20749] [client 209.87.169.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aSacXsGrIq2A6SZSnkKFBgAAAIE"]
[Wed Nov 26 14:21:26.774457 2025] [:error] [pid 34744:tid 34824] [client 209.87.169.186:43799] [client 209.87.169.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aSacZktgOvVbhyALkTQMGwAAAZU"]
[Wed Nov 26 14:21:28.785607 2025] [:error] [pid 34743:tid 34795] [client 209.87.169.192:42321] [client 209.87.169.192] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aSacaAvyX7Q5oU7_mByh9QAAAVM"]
[Wed Nov 26 14:21:31.980453 2025] [:error] [pid 35540:tid 35566] [client 45.131.195.235:51865] [client 45.131.195.235] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aSaca8GrIq2A6SZSnkKFCwAAAJQ"]
[Wed Nov 26 14:21:34.799941 2025] [:error] [pid 10383:tid 10400] [client 185.198.240.237:37263] [client 185.198.240.237] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aSacbq0RJ-zjhOVjD8_cbwAAAc4"]
[Wed Nov 26 14:21:38.896543 2025] [proxy_fcgi:error] [pid 34742:tid 34757] [client 45.131.195.233:20267] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:21:42.586558 2025] [:error] [pid 34742:tid 34769] [client 45.131.195.233:20267] [client 45.131.195.233] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aSacdpSuLNwpQF_jzAdI0gAAAFU"]
[Wed Nov 26 14:21:44.890858 2025] [proxy_fcgi:error] [pid 10383:tid 10403] [client 209.87.169.7:31211] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:21:46.889321 2025] [proxy_fcgi:error] [pid 10383:tid 10391] [client 209.87.169.7:31211] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:21:47.775234 2025] [:error] [pid 10383:tid 10393] [client 209.87.169.7:31211] [client 209.87.169.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aSace60RJ-zjhOVjD8_cdwAAAcc"]
[Wed Nov 26 14:21:53.464187 2025] [:error] [pid 34744:tid 34806] [client 209.87.169.15:22095] [client 209.87.169.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "aSacgUtgOvVbhyALkTQMKgAAAYM"]
[Wed Nov 26 14:21:54.796933 2025] [proxy_fcgi:error] [pid 34830:tid 34854] [client 185.198.240.243:33249] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:21:56.103358 2025] [proxy_fcgi:error] [pid 34830:tid 34832] [client 185.198.240.243:33249] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:21:57.381527 2025] [proxy_fcgi:error] [pid 34830:tid 34840] [client 185.198.240.243:33249] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:21:58.086792 2025] [:error] [pid 34830:tid 34833] [client 185.198.240.243:33249] [client 185.198.240.243] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/autoload_classmap.php"] [unique_id "aSachkukvkWgWN6jCR2ugwAAAAE"]
[Wed Nov 26 14:22:00.181662 2025] [proxy_fcgi:error] [pid 45836:tid 45862] [client 209.87.169.198:62645] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:22:02.203451 2025] [proxy_fcgi:error] [pid 45836:tid 45853] [client 209.87.169.198:62645] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:22:03.980708 2025] [proxy_fcgi:error] [pid 45836:tid 45852] [client 209.87.169.198:62645] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:22:07.078137 2025] [proxy_fcgi:error] [pid 45836:tid 45860] [client 209.87.169.198:62645] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:22:07.684445 2025] [proxy_fcgi:error] [pid 45836:tid 45848] [client 209.87.169.198:62645] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:22:11.174957 2025] [proxy_fcgi:error] [pid 45836:tid 45868] [client 209.87.169.198:62645] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:22:11.879780 2025] [:error] [pid 45836:tid 45847] [client 209.87.169.198:62645] [client 209.87.169.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Text/autoload_classmap.php"] [unique_id "aSack5frnOGqL-seZAxHUwAAAME"]
[Wed Nov 26 14:22:13.290917 2025] [:error] [pid 34743:tid 34784] [client 185.198.240.239:25757] [client 185.198.240.239] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aSaclQvyX7Q5oU7_mByiHAAAAUg"]
[Wed Nov 26 14:22:14.580920 2025] [proxy_fcgi:error] [pid 45901:tid 45923] [client 209.87.169.185:20579] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:22:15.183392 2025] [proxy_fcgi:error] [pid 45901:tid 45927] [client 209.87.169.185:20579] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:22:15.880877 2025] [proxy_fcgi:error] [pid 45901:tid 45926] [client 209.87.169.185:20579] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:22:16.567378 2025] [:error] [pid 45901:tid 45925] [client 209.87.169.185:20579] [client 209.87.169.185] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/html-api/index.php"] [unique_id "aSacmCunQ1SpfPRNrtyyVQAAARY"]
[Wed Nov 26 14:22:17.792837 2025] [:error] [pid 34830:tid 34852] [client 209.87.169.182:63995] [client 209.87.169.182] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aSacmUukvkWgWN6jCR2unwAAABQ"]
[Wed Nov 26 14:22:19.200214 2025] [proxy_fcgi:error] [pid 35540:tid 35546] [client 209.87.169.191:33011] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:22:19.877625 2025] [:error] [pid 35540:tid 35568] [client 209.87.169.191:33011] [client 209.87.169.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/fonts/wp-login.php"] [unique_id "aSacm8GrIq2A6SZSnkKFHwAAAJY"]
[Wed Nov 26 14:22:21.295255 2025] [proxy_fcgi:error] [pid 34743:tid 34794] [client 209.87.169.203:63967] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:22:21.980580 2025] [proxy_fcgi:error] [pid 34743:tid 34798] [client 209.87.169.203:63967] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:22:22.589376 2025] [proxy_fcgi:error] [pid 34743:tid 34781] [client 209.87.169.203:63967] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:22:23.968799 2025] [proxy_fcgi:error] [pid 34743:tid 34776] [client 209.87.169.203:63967] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:22:24.676366 2025] [proxy_fcgi:error] [pid 34743:tid 34788] [client 209.87.169.203:63967] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:22:26.285495 2025] [:error] [pid 34743:tid 34779] [client 209.87.169.203:63967] [client 209.87.169.203] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aSacogvyX7Q5oU7_mByiLgAAAUM"]
[Wed Nov 26 14:22:28.277875 2025] [:error] [pid 45836:tid 45849] [client 209.87.169.185:50011] [client 209.87.169.185] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.87.169.185, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "aSacpJfrnOGqL-seZAxHYwAAAMM"]
[Wed Nov 26 14:22:29.069761 2025] [proxy_fcgi:error] [pid 45836:tid 45852] [client 209.87.169.185:50011] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:22:29.683739 2025] [:error] [pid 45836:tid 45865] [client 209.87.169.185:50011] [client 209.87.169.185] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aSacpZfrnOGqL-seZAxHbgAAANM"]
[Wed Nov 26 14:22:31.071412 2025] [:error] [pid 45836:tid 45856] [client 209.87.169.201:30255] [client 209.87.169.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Text/index.php"] [unique_id "aSacp5frnOGqL-seZAxHfAAAAMo"]
[Wed Nov 26 14:22:33.176564 2025] [proxy_fcgi:error] [pid 34743:tid 34793] [client 185.198.240.240:33391] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:22:33.800996 2025] [proxy_fcgi:error] [pid 34743:tid 34797] [client 185.198.240.240:33391] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:22:34.485749 2025] [:error] [pid 34743:tid 34777] [client 185.198.240.240:33391] [client 185.198.240.240] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/dist/autoload_classmap.php"] [unique_id "aSacqgvyX7Q5oU7_mByifAAAAUE"]
[Wed Nov 26 14:22:35.874495 2025] [proxy_fcgi:error] [pid 10383:tid 10391] [client 209.87.169.197:56447] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:22:36.568940 2025] [:error] [pid 10383:tid 10401] [client 209.87.169.197:56447] [client 209.87.169.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/rk2.php"] [unique_id "aSacrK0RJ-zjhOVjD8_csgAAAc8"]
[Wed Nov 26 14:22:39.593012 2025] [proxy_fcgi:error] [pid 10383:tid 10397] [client 209.87.169.198:41221] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:22:40.274321 2025] [proxy_fcgi:error] [pid 10383:tid 10387] [client 209.87.169.198:41221] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:22:40.967085 2025] [proxy_fcgi:error] [pid 10383:tid 10394] [client 209.87.169.198:41221] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:22:44.528020 2025] [proxy_fcgi:error] [pid 10383:tid 10392] [client 209.87.169.198:41221] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:22:46.391032 2025] [proxy_fcgi:error] [pid 10383:tid 10409] [client 209.87.169.198:41221] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:22:47.773636 2025] [:error] [pid 10383:tid 10393] [client 209.87.169.198:41221] [client 209.87.169.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/plugin.php"] [unique_id "aSact60RJ-zjhOVjD8_c2wAAAcc"]
[Wed Nov 26 14:22:49.687048 2025] [proxy_fcgi:error] [pid 45901:tid 45910] [client 209.87.169.18:35353] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:22:51.289258 2025] [proxy_fcgi:error] [pid 45901:tid 45917] [client 209.87.169.18:35353] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:22:54.683088 2025] [:error] [pid 45901:tid 45914] [client 209.87.169.18:35353] [client 209.87.169.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/tinymce/wp-tinymce.php"] [unique_id "aSacviunQ1SpfPRNrtyynAAAAQs"]
[Wed Nov 26 14:22:56.678124 2025] [proxy_fcgi:error] [pid 34743:tid 34790] [client 209.87.169.26:35509] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:22:57.374249 2025] [proxy_fcgi:error] [pid 34743:tid 34796] [client 209.87.169.26:35509] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:22:57.984361 2025] [:error] [pid 34743:tid 34785] [client 209.87.169.26:35509] [client 209.87.169.26] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.87.169.26, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aSacwQvyX7Q5oU7_mByigwAAAUk"]
[Wed Nov 26 14:22:57.989045 2025] [proxy_fcgi:error] [pid 34743:tid 34785] [client 209.87.169.26:35509] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:22:59.981129 2025] [proxy_fcgi:error] [pid 34743:tid 34798] [client 209.87.169.26:35509] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:23:00.671715 2025] [proxy_fcgi:error] [pid 34743:tid 34793] [client 209.87.169.26:35509] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:23:02.067885 2025] [:error] [pid 34743:tid 34797] [client 209.87.169.26:35509] [client 209.87.169.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/mah.php"] [unique_id "aSacxgvyX7Q5oU7_mByiigAAAVU"]
[Wed Nov 26 14:23:03.473133 2025] [:error] [pid 34743:tid 34782] [client 209.87.169.203:34845] [client 209.87.169.203] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.87.169.203, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/colors/sunrise/wp-login.php"] [unique_id "aSacxwvyX7Q5oU7_mByiiwAAAUY"]
[Wed Nov 26 14:23:04.176639 2025] [:error] [pid 34743:tid 34789] [client 209.87.169.203:34845] [client 209.87.169.203] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/customize/lmfi.php"] [unique_id "aSacyAvyX7Q5oU7_mByijAAAAU0"]
[Wed Nov 26 14:23:09.774445 2025] [proxy_fcgi:error] [pid 34742:tid 34758] [client 209.87.169.5:47075] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:23:11.688476 2025] [:error] [pid 34742:tid 34770] [client 209.87.169.5:47075] [client 209.87.169.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "aSacz5SuLNwpQF_jzAdJhQAAAFY"]
[Wed Nov 26 14:23:14.095517 2025] [proxy_fcgi:error] [pid 34744:tid 34803] [client 209.87.169.21:34633] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:23:15.484188 2025] [:error] [pid 34744:tid 34822] [client 209.87.169.21:34633] [client 209.87.169.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aSac00tgOvVbhyALkTQNUQAAAZM"]
[Wed Nov 26 14:23:18.099345 2025] [:error] [pid 45901:tid 45915] [client 185.198.240.250:21995] [client 185.198.240.250] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.198.240.250, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/colors/light/wp-login.php"] [unique_id "aSac1iunQ1SpfPRNrtyypgAAAQw"]
[Wed Nov 26 14:23:21.192892 2025] [proxy_fcgi:error] [pid 45901:tid 45907] [client 185.198.240.250:21995] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:23:21.882823 2025] [proxy_fcgi:error] [pid 45901:tid 45906] [client 185.198.240.250:21995] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:23:22.598304 2025] [proxy_fcgi:error] [pid 45901:tid 45905] [client 185.198.240.250:21995] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:23:23.981223 2025] [proxy_fcgi:error] [pid 45901:tid 45922] [client 185.198.240.250:21995] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:23:24.685424 2025] [:error] [pid 45901:tid 45912] [client 185.198.240.250:21995] [client 185.198.240.250] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/button/index.php"] [unique_id "aSac3CunQ1SpfPRNrtyysQAAAQk"]
[Wed Nov 26 14:23:26.690779 2025] [:error] [pid 45901:tid 45911] [client 209.87.169.195:39009] [client 209.87.169.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/packed.php"] [unique_id "aSac3iunQ1SpfPRNrtyyswAAAQg"]
[Wed Nov 26 14:23:28.076422 2025] [proxy_fcgi:error] [pid 45836:tid 45867] [client 209.87.169.193:64279] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:23:28.791877 2025] [proxy_fcgi:error] [pid 45836:tid 45855] [client 209.87.169.193:64279] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:23:32.301913 2025] [proxy_fcgi:error] [pid 45836:tid 45869] [client 209.87.169.193:64279] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:23:34.170951 2025] [proxy_fcgi:error] [pid 45836:tid 45846] [client 209.87.169.193:64279] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:23:36.277052 2025] [:error] [pid 45836:tid 45849] [client 209.87.169.193:64279] [client 209.87.169.193] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/file.php"] [unique_id "aSac6JfrnOGqL-seZAxH8wAAAMM"]
[Wed Nov 26 14:23:38.467628 2025] [:error] [pid 35540:tid 35547] [client 45.131.195.235:44055] [client 45.131.195.235] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/chosen.php"] [unique_id "aSac6sGrIq2A6SZSnkKFvQAAAIE"]
[Wed Nov 26 14:23:40.770464 2025] [:error] [pid 35540:tid 35548] [client 209.87.169.24:52023] [client 209.87.169.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/Cache/about.php"] [unique_id "aSac7MGrIq2A6SZSnkKFxAAAAII"]
[Wed Nov 26 14:23:42.093847 2025] [proxy_fcgi:error] [pid 34743:tid 34799] [client 185.198.240.240:23327] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:23:44.776349 2025] [:error] [pid 34743:tid 34776] [client 185.198.240.240:23327] [client 185.198.240.240] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.198.240.240, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-content/languages/wp-login.php"] [unique_id "aSac8AvyX7Q5oU7_mByimAAAAUA"]
[Wed Nov 26 14:23:45.575834 2025] [:error] [pid 34743:tid 34794] [client 185.198.240.240:23327] [client 185.198.240.240] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aSac8QvyX7Q5oU7_mByimQAAAVI"]
[Wed Nov 26 14:23:50.191976 2025] [proxy_fcgi:error] [pid 34830:tid 34840] [client 209.87.169.11:29833] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:23:59.994564 2025] [proxy_fcgi:error] [pid 35540:tid 35548] [client 209.87.169.184:40139] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:24:01.569227 2025] [:error] [pid 35540:tid 35550] [client 209.87.169.184:40139] [client 209.87.169.184] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aSadAcGrIq2A6SZSnkKF7AAAAIQ"]
[Wed Nov 26 14:24:02.974134 2025] [:error] [pid 10383:tid 10390] [client 209.87.169.187:21423] [client 209.87.169.187] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Text/wp-login.php"] [unique_id "aSadAq0RJ-zjhOVjD8_dGQAAAcQ"]
[Wed Nov 26 14:24:04.394018 2025] [proxy_fcgi:error] [pid 34743:tid 34778] [client 209.87.169.182:62415] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:24:07.180241 2025] [proxy_fcgi:error] [pid 34743:tid 34787] [client 209.87.169.182:62415] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:24:10.483978 2025] [proxy_fcgi:error] [pid 34743:tid 34783] [client 209.87.169.182:62415] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:24:11.186405 2025] [:error] [pid 34743:tid 34786] [client 209.87.169.182:62415] [client 209.87.169.182] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/function.php"] [unique_id "aSadCwvyX7Q5oU7_mByjCAAAAUo"]
[Wed Nov 26 14:24:12.594140 2025] [proxy_fcgi:error] [pid 35540:tid 35560] [client 185.198.240.252:53293] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:24:13.308226 2025] [proxy_fcgi:error] [pid 35540:tid 35555] [client 185.198.240.252:53293] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:24:14.820815 2025] [:error] [pid 35540:tid 35557] [client 185.198.240.252:53293] [client 185.198.240.252] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/votes.php"] [unique_id "aSadDsGrIq2A6SZSnkKGhwAAAIs"]
[Wed Nov 26 14:24:22.181075 2025] [proxy_fcgi:error] [pid 10383:tid 10398] [client 185.198.240.253:42501] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:24:23.587245 2025] [proxy_fcgi:error] [pid 10383:tid 10393] [client 185.198.240.253:42501] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:24:24.902851 2025] [:error] [pid 10383:tid 10391] [client 185.198.240.253:42501] [client 185.198.240.253] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/certificates/file.php"] [unique_id "aSadGK0RJ-zjhOVjD8_d8wAAAcU"]
[Wed Nov 26 14:24:28.985119 2025] [:error] [pid 34744:tid 34814] [client 209.87.169.20:22917] [client 209.87.169.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/fonts/parx.php"] [unique_id "aSadHEtgOvVbhyALkTQO7gAAAYs"]
[Wed Nov 26 14:24:32.473830 2025] [proxy_fcgi:error] [pid 34743:tid 34789] [client 185.198.240.241:48731] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:24:34.578451 2025] [proxy_fcgi:error] [pid 34743:tid 34790] [client 185.198.240.241:48731] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:24:35.268867 2025] [proxy_fcgi:error] [pid 34743:tid 34792] [client 185.198.240.241:48731] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:24:35.978682 2025] [proxy_fcgi:error] [pid 34743:tid 34779] [client 185.198.240.241:48731] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:24:36.680852 2025] [:error] [pid 34743:tid 34797] [client 185.198.240.241:48731] [client 185.198.240.241] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/dist/components/about.php"] [unique_id "aSadJAvyX7Q5oU7_mByjcwAAAVU"]
[Wed Nov 26 14:24:37.991082 2025] [proxy_fcgi:error] [pid 34744:tid 34816] [client 209.87.169.3:31913] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:24:38.773852 2025] [proxy_fcgi:error] [pid 34744:tid 34824] [client 209.87.169.3:31913] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:24:40.867695 2025] [proxy_fcgi:error] [pid 34744:tid 34826] [client 209.87.169.3:31913] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:24:41.563001 2025] [:error] [pid 34744:tid 34808] [client 209.87.169.3:31913] [client 209.87.169.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "aSadKUtgOvVbhyALkTQPDQAAAYU"]
[Wed Nov 26 14:24:43.089514 2025] [proxy_fcgi:error] [pid 45901:tid 45917] [client 185.198.240.243:32211] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:24:43.981742 2025] [proxy_fcgi:error] [pid 45901:tid 45906] [client 185.198.240.243:32211] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:24:45.582802 2025] [proxy_fcgi:error] [pid 45901:tid 45918] [client 185.198.240.243:32211] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:24:47.074510 2025] [proxy_fcgi:error] [pid 45901:tid 45903] [client 185.198.240.243:32211] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:24:49.363303 2025] [:error] [pid 45901:tid 45908] [client 185.198.240.243:32211] [client 185.198.240.243] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/item.php"] [unique_id "aSadMSunQ1SpfPRNrtyzgwAAAQU"]
[Wed Nov 26 14:24:55.371648 2025] [:error] [pid 34830:tid 34846] [client 185.198.240.245:57175] [client 185.198.240.245] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.198.240.245, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/.well-known/pki-validation/wp-login.php"] [unique_id "aSadN0ukvkWgWN6jCR2voAAAAA4"]
[Wed Nov 26 14:24:56.086628 2025] [:error] [pid 34830:tid 34838] [client 185.198.240.245:57175] [client 185.198.240.245] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.198.240.245, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/classic-editor/wp-login.php"] [unique_id "aSadOEukvkWgWN6jCR2vogAAAAY"]
[Wed Nov 26 14:24:56.774139 2025] [:error] [pid 34830:tid 34836] [client 185.198.240.245:57175] [client 185.198.240.245] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/mani.php"] [unique_id "aSadOEukvkWgWN6jCR2vowAAAAQ"]
[Wed Nov 26 14:24:58.294405 2025] [proxy_fcgi:error] [pid 35540:tid 35557] [client 209.87.169.16:20901] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:25:00.488608 2025] [proxy_fcgi:error] [pid 35540:tid 35556] [client 209.87.169.16:20901] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:25:06.802770 2025] [:error] [pid 35540:tid 35562] [client 209.87.169.16:20901] [client 209.87.169.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/network.php"] [unique_id "aSadQsGrIq2A6SZSnkKHWwAAAJA"]
[Wed Nov 26 14:25:08.283265 2025] [proxy_fcgi:error] [pid 34830:tid 34848] [client 185.198.240.240:21341] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:25:08.982769 2025] [proxy_fcgi:error] [pid 34830:tid 34834] [client 185.198.240.240:21341] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:25:12.764908 2025] [:error] [pid 34830:tid 34852] [client 185.198.240.240:21341] [client 185.198.240.240] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "aSadSEukvkWgWN6jCR2vrAAAABQ"]
[Wed Nov 26 14:25:16.978721 2025] [proxy_fcgi:error] [pid 45836:tid 45868] [client 209.87.169.15:64061] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:25:18.994353 2025] [proxy_fcgi:error] [pid 45836:tid 45852] [client 209.87.169.15:64061] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:25:20.383266 2025] [:error] [pid 45836:tid 45863] [client 209.87.169.15:64061] [client 209.87.169.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "aSadUJfrnOGqL-seZAxIhQAAANE"]
[Wed Nov 26 14:25:22.291741 2025] [:error] [pid 34743:tid 34785] [client 185.198.240.245:25489] [client 185.198.240.245] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/block-supports/about.php"] [unique_id "aSadUgvyX7Q5oU7_mByjhQAAAUk"]
[Wed Nov 26 14:25:24.276004 2025] [proxy_fcgi:error] [pid 34743:tid 34776] [client 209.87.169.201:30307] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:25:26.379572 2025] [:error] [pid 34743:tid 34788] [client 209.87.169.201:30307] [client 209.87.169.201] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.87.169.201, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-content/wp-login.php"] [unique_id "aSadVgvyX7Q5oU7_mByjkAAAAUw"]
[Wed Nov 26 14:25:29.171133 2025] [:error] [pid 34743:tid 34789] [client 209.87.169.201:30307] [client 209.87.169.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/PHPMailer/file.php"] [unique_id "aSadWQvyX7Q5oU7_mByjlAAAAU0"]
[Wed Nov 26 14:25:30.471828 2025] [proxy_fcgi:error] [pid 34743:tid 34781] [client 209.87.169.5:35555] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:25:31.071959 2025] [:error] [pid 34743:tid 34777] [client 209.87.169.5:35555] [client 209.87.169.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Requests/xBrain.php"] [unique_id "aSadWwvyX7Q5oU7_mByjlgAAAUE"]
[Wed Nov 26 14:25:34.578708 2025] [:error] [pid 34744:tid 34803] [client 185.198.240.253:23785] [client 185.198.240.253] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "aSadXktgOvVbhyALkTQPRgAAAYA"]
[Wed Nov 26 14:25:36.759909 2025] [:error] [pid 45901:tid 45922] [client 185.198.240.249:38509] [client 185.198.240.249] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aSadYCunQ1SpfPRNrtyzpQAAARM"]
[Wed Nov 26 14:25:45.764024 2025] [proxy_fcgi:error] [pid 34830:tid 34849] [client 209.87.169.184:45621] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:25:47.158044 2025] [:error] [pid 34830:tid 34848] [client 209.87.169.184:45621] [client 209.87.169.184] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/dist/widgets/about.php"] [unique_id "aSada0ukvkWgWN6jCR2vuAAAABA"]
[Wed Nov 26 14:25:49.182052 2025] [proxy_fcgi:error] [pid 34742:tid 34766] [client 209.87.169.14:20409] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:25:49.879386 2025] [proxy_fcgi:error] [pid 34742:tid 34771] [client 209.87.169.14:20409] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:25:52.580317 2025] [proxy_fcgi:error] [pid 34742:tid 34755] [client 209.87.169.14:20409] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:25:53.282237 2025] [proxy_fcgi:error] [pid 34742:tid 34751] [client 209.87.169.14:20409] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:25:53.986888 2025] [proxy_fcgi:error] [pid 34742:tid 34770] [client 209.87.169.14:20409] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:25:54.670082 2025] [proxy_fcgi:error] [pid 34742:tid 34759] [client 209.87.169.14:20409] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:25:56.088411 2025] [proxy_fcgi:error] [pid 34742:tid 34758] [client 209.87.169.14:20409] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:25:58.171922 2025] [:error] [pid 34742:tid 34765] [client 209.87.169.14:20409] [client 209.87.169.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/radio.php"] [unique_id "aSaddpSuLNwpQF_jzAdKVQAAAFE"]
[Wed Nov 26 14:26:02.289446 2025] [proxy_fcgi:error] [pid 45901:tid 45912] [client 185.198.240.241:62055] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:26:02.996325 2025] [proxy_fcgi:error] [pid 45901:tid 45921] [client 185.198.240.241:62055] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:26:03.674207 2025] [proxy_fcgi:error] [pid 45901:tid 45916] [client 185.198.240.241:62055] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:26:04.292345 2025] [proxy_fcgi:error] [pid 45901:tid 45919] [client 185.198.240.241:62055] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:26:05.774678 2025] [proxy_fcgi:error] [pid 45901:tid 45920] [client 185.198.240.241:62055] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:26:06.389836 2025] [proxy_fcgi:error] [pid 45901:tid 45911] [client 185.198.240.241:62055] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:26:07.763934 2025] [:error] [pid 45901:tid 45905] [client 185.198.240.241:62055] [client 185.198.240.241] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/sodium_compat/src/Core/Curve25519/Ge/wp_blog.php"] [unique_id "aSadfyunQ1SpfPRNrtyztQAAAQI"]
[Wed Nov 26 14:26:12.461499 2025] [:error] [pid 34742:tid 34766] [client 209.87.169.183:38397] [client 209.87.169.183] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "aSadhJSuLNwpQF_jzAdKXAAAAFI"]
[Wed Nov 26 14:26:15.182436 2025] [:error] [pid 34744:tid 34814] [client 209.87.169.12:50819] [client 209.87.169.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/fonts/index.php"] [unique_id "aSadh0tgOvVbhyALkTQPWQAAAYs"]
[Wed Nov 26 14:26:17.483902 2025] [proxy_fcgi:error] [pid 34830:tid 34832] [client 185.198.240.233:53277] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:26:18.179962 2025] [proxy_fcgi:error] [pid 34830:tid 34847] [client 185.198.240.233:53277] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:26:18.874978 2025] [proxy_fcgi:error] [pid 34830:tid 34837] [client 185.198.240.233:53277] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:26:20.270782 2025] [proxy_fcgi:error] [pid 34830:tid 34839] [client 185.198.240.233:53277] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:26:20.890405 2025] [proxy_fcgi:error] [pid 34830:tid 34843] [client 185.198.240.233:53277] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:26:21.586607 2025] [proxy_fcgi:error] [pid 34830:tid 34849] [client 185.198.240.233:53277] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:26:22.270206 2025] [:error] [pid 34830:tid 34844] [client 185.198.240.233:53277] [client 185.198.240.233] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/tinymce/plugins/compat3x/css/index.php"] [unique_id "aSadjkukvkWgWN6jCR2vxgAAAAw"]
[Wed Nov 26 14:26:23.585515 2025] [:error] [pid 45901:tid 45905] [client 209.87.169.193:61263] [client 209.87.169.193] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Requests/Text/index.php"] [unique_id "aSadjyunQ1SpfPRNrtyzxQAAAQI"]
[Wed Nov 26 14:26:26.268819 2025] [:error] [pid 34742:tid 34769] [client 185.198.240.252:52765] [client 185.198.240.252] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/random_compat/about.php"] [unique_id "aSadkpSuLNwpQF_jzAdKZgAAAFU"]
[Wed Nov 26 14:26:28.289981 2025] [proxy_fcgi:error] [pid 45901:tid 45916] [client 209.87.169.26:34003] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:26:28.990857 2025] [proxy_fcgi:error] [pid 45901:tid 45918] [client 209.87.169.26:34003] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:26:29.683514 2025] [proxy_fcgi:error] [pid 45901:tid 45908] [client 209.87.169.26:34003] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:26:30.371447 2025] [proxy_fcgi:error] [pid 45901:tid 45910] [client 209.87.169.26:34003] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:26:31.069659 2025] [proxy_fcgi:error] [pid 45901:tid 45906] [client 209.87.169.26:34003] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:26:31.784167 2025] [proxy_fcgi:error] [pid 45901:tid 45911] [client 209.87.169.26:34003] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:26:32.462779 2025] [proxy_fcgi:error] [pid 45901:tid 45926] [client 209.87.169.26:34003] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:26:33.083751 2025] [proxy_fcgi:error] [pid 45901:tid 45904] [client 209.87.169.26:34003] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:26:33.793255 2025] [proxy_fcgi:error] [pid 45901:tid 45909] [client 209.87.169.26:34003] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:26:36.091166 2025] [proxy_fcgi:error] [pid 45901:tid 45912] [client 209.87.169.26:34003] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:26:36.764706 2025] [proxy_fcgi:error] [pid 45901:tid 45925] [client 209.87.169.26:34003] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:26:37.594751 2025] [proxy_fcgi:error] [pid 45901:tid 45917] [client 209.87.169.26:34003] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:26:38.375073 2025] [proxy_fcgi:error] [pid 45901:tid 45913] [client 209.87.169.26:34003] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:26:39.084421 2025] [proxy_fcgi:error] [pid 45901:tid 45921] [client 209.87.169.26:34003] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:26:39.788028 2025] [proxy_fcgi:error] [pid 45901:tid 45916] [client 209.87.169.26:34003] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:26:40.488069 2025] [proxy_fcgi:error] [pid 45901:tid 45918] [client 209.87.169.26:34003] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:26:41.175289 2025] [proxy_fcgi:error] [pid 45901:tid 45908] [client 209.87.169.26:34003] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:26:42.214973 2025] [proxy_fcgi:error] [pid 45901:tid 45910] [client 209.87.169.26:34003] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:26:43.678363 2025] [proxy_fcgi:error] [pid 45901:tid 45903] [client 209.87.169.26:34003] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:26:44.484457 2025] [proxy_fcgi:error] [pid 45901:tid 45906] [client 209.87.169.26:34003] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:26:46.663102 2025] [proxy_fcgi:error] [pid 45901:tid 45911] [client 209.87.169.26:34003] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:26:47.284725 2025] [proxy_fcgi:error] [pid 45901:tid 45907] [client 209.87.169.26:34003] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:26:48.075620 2025] [proxy_fcgi:error] [pid 45901:tid 45922] [client 209.87.169.26:34003] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:26:48.695023 2025] [proxy_fcgi:error] [pid 45901:tid 45923] [client 209.87.169.26:34003] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:26:49.468376 2025] [proxy_fcgi:error] [pid 45901:tid 45926] [client 209.87.169.26:34003] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:26:50.168607 2025] [proxy_fcgi:error] [pid 45901:tid 45904] [client 209.87.169.26:34003] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:26:52.465314 2025] [proxy_fcgi:error] [pid 45901:tid 45927] [client 209.87.169.26:34003] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:26:53.164634 2025] [proxy_fcgi:error] [pid 45901:tid 45915] [client 209.87.169.26:34003] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:26:53.870022 2025] [proxy_fcgi:error] [pid 45901:tid 45912] [client 209.87.169.26:34003] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:26:54.659666 2025] [:error] [pid 45901:tid 45925] [client 209.87.169.26:34003] [client 209.87.169.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/include.php"] [unique_id "aSadriunQ1SpfPRNrtyz8gAAARY"]
[Wed Nov 26 14:26:56.296045 2025] [proxy_fcgi:error] [pid 45901:tid 45924] [client 45.131.195.233:58493] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:26:59.791324 2025] [proxy_fcgi:error] [pid 45901:tid 45921] [client 45.131.195.233:58493] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:27:00.483148 2025] [proxy_fcgi:error] [pid 45901:tid 45916] [client 45.131.195.233:58493] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:27:01.181540 2025] [proxy_fcgi:error] [pid 45901:tid 45918] [client 45.131.195.233:58493] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:27:01.896719 2025] [proxy_fcgi:error] [pid 45901:tid 45910] [client 45.131.195.233:58493] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:27:02.573899 2025] [proxy_fcgi:error] [pid 45901:tid 45911] [client 45.131.195.233:58493] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:27:03.273759 2025] [proxy_fcgi:error] [pid 45901:tid 45905] [client 45.131.195.233:58493] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:27:03.977147 2025] [proxy_fcgi:error] [pid 45901:tid 45922] [client 45.131.195.233:58493] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:27:06.365232 2025] [proxy_fcgi:error] [pid 45901:tid 45920] [client 45.131.195.233:58493] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:27:07.068399 2025] [:error] [pid 45901:tid 45914] [client 45.131.195.233:58493] [client 45.131.195.233] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/fonts/css.php"] [unique_id "aSaduyunQ1SpfPRNrty0AAAAAQs"]
[Wed Nov 26 14:27:10.470677 2025] [proxy_fcgi:error] [pid 34744:tid 34819] [client 209.87.169.195:26277] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:27:12.465955 2025] [proxy_fcgi:error] [pid 34744:tid 34821] [client 209.87.169.195:26277] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:27:17.168521 2025] [:error] [pid 34744:tid 34805] [client 209.87.169.195:26277] [client 209.87.169.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/wso112233.php"] [unique_id "aSadxUtgOvVbhyALkTQPlgAAAYI"]
[Wed Nov 26 14:27:18.490014 2025] [:error] [pid 35540:tid 35560] [client 185.198.240.245:33867] [client 185.198.240.245] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/shell20211028.php"] [unique_id "aSadxsGrIq2A6SZSnkKHnwAAAI4"]
[Wed Nov 26 14:27:22.374373 2025] [:error] [pid 45901:tid 45908] [client 209.87.169.186:48489] [client 209.87.169.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/dropdown.php"] [unique_id "aSadyiunQ1SpfPRNrty0EgAAAQU"]
[Wed Nov 26 14:27:24.381069 2025] [:error] [pid 45836:tid 45847] [client 185.198.240.253:45377] [client 185.198.240.253] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/repeater.php"] [unique_id "aSadzJfrnOGqL-seZAxIwQAAAME"]
[Wed Nov 26 14:27:28.365173 2025] [proxy_fcgi:error] [pid 34743:tid 34777] [client 185.198.240.245:43903] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:27:28.984824 2025] [proxy_fcgi:error] [pid 34743:tid 34783] [client 185.198.240.245:43903] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:27:31.580177 2025] [proxy_fcgi:error] [pid 34743:tid 34779] [client 185.198.240.245:43903] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:27:36.975635 2025] [:error] [pid 34743:tid 34777] [client 185.198.240.245:43903] [client 185.198.240.245] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/test.php"] [unique_id "aSad2AvyX7Q5oU7_mByj6AAAAUE"]
[Wed Nov 26 14:27:38.384427 2025] [:error] [pid 34744:tid 34827] [client 185.198.240.184:62751] [client 185.198.240.184] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/sitemaps/providers/ultra.php"] [unique_id "aSad2ktgOvVbhyALkTQPnQAAAZg"]
[Wed Nov 26 14:27:40.470391 2025] [:error] [pid 35540:tid 35552] [client 209.87.169.6:49095] [client 209.87.169.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/options.php"] [unique_id "aSad3MGrIq2A6SZSnkKHsQAAAIY"]
[Wed Nov 26 14:27:41.787061 2025] [proxy_fcgi:error] [pid 45836:tid 45870] [client 185.198.240.253:29159] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:27:43.169053 2025] [:error] [pid 45836:tid 45868] [client 185.198.240.253:29159] [client 185.198.240.253] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/gzdecode.php"] [unique_id "aSad35frnOGqL-seZAxI1wAAANY"]
[Wed Nov 26 14:27:44.569498 2025] [:error] [pid 35540:tid 35557] [client 209.87.169.198:62295] [client 209.87.169.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/wp-includes/atomlib.php"] [unique_id "aSad4MGrIq2A6SZSnkKHtAAAAIs"]
[Wed Nov 26 14:27:47.188044 2025] [:error] [pid 34830:tid 34845] [client 209.87.169.2:24165] [client 209.87.169.2] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.87.169.2, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/images/wp-login.php"] [unique_id "aSad40ukvkWgWN6jCR2v_wAAAA0"]
[Wed Nov 26 14:27:47.888854 2025] [proxy_fcgi:error] [pid 34830:tid 34843] [client 209.87.169.2:24165] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:27:49.973027 2025] [:error] [pid 34830:tid 34855] [client 209.87.169.2:24165] [client 209.87.169.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/plupload/wp-login.php"] [unique_id "aSad5UukvkWgWN6jCR2wBAAAABc"]
[Wed Nov 26 14:27:51.467161 2025] [proxy_fcgi:error] [pid 10383:tid 10405] [client 209.87.169.14:64797] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:27:54.376469 2025] [:error] [pid 10383:tid 10397] [client 209.87.169.14:64797] [client 209.87.169.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/block-patterns/themes.php"] [unique_id "aSad6q0RJ-zjhOVjD8_fRQAAAcs"]
[Wed Nov 26 14:27:55.676383 2025] [:error] [pid 45901:tid 45910] [client 209.87.169.17:27819] [client 209.87.169.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/site-title/index.php"] [unique_id "aSad6yunQ1SpfPRNrty0LgAAAQc"]
[Wed Nov 26 14:27:57.176657 2025] [proxy_fcgi:error] [pid 34743:tid 34786] [client 209.87.169.19:33877] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:27:57.967162 2025] [:error] [pid 34743:tid 34793] [client 209.87.169.19:33877] [client 209.87.169.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.87.169.19, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/includes/wp-login.php"] [unique_id "aSad7QvyX7Q5oU7_mByj8QAAAVE"]
[Wed Nov 26 14:27:58.766947 2025] [proxy_fcgi:error] [pid 34743:tid 34794] [client 209.87.169.19:33877] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:27:59.473760 2025] [:error] [pid 34743:tid 34791] [client 209.87.169.19:33877] [client 209.87.169.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/wp-includes/admin-bar.php"] [unique_id "aSad7wvyX7Q5oU7_mByj8wAAAU8"]
[Wed Nov 26 14:28:03.598246 2025] [proxy_fcgi:error] [pid 10383:tid 10395] [client 209.87.169.198:44235] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:28:04.286408 2025] [proxy_fcgi:error] [pid 10383:tid 10405] [client 209.87.169.198:44235] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:28:07.477095 2025] [:error] [pid 10383:tid 10394] [client 209.87.169.198:44235] [client 209.87.169.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/customize/plugins.php"] [unique_id "aSad960RJ-zjhOVjD8_fUgAAAcg"]
[Wed Nov 26 14:28:10.272891 2025] [proxy_fcgi:error] [pid 34742:tid 34756] [client 185.198.240.241:51379] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:28:11.672568 2025] [proxy_fcgi:error] [pid 34742:tid 34772] [client 185.198.240.241:51379] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:28:12.283352 2025] [proxy_fcgi:error] [pid 34742:tid 34764] [client 185.198.240.241:51379] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:28:12.974080 2025] [proxy_fcgi:error] [pid 34742:tid 34771] [client 185.198.240.241:51379] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:28:13.582453 2025] [proxy_fcgi:error] [pid 34742:tid 34767] [client 185.198.240.241:51379] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:28:14.187268 2025] [proxy_fcgi:error] [pid 34742:tid 34760] [client 185.198.240.241:51379] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:28:14.871709 2025] [proxy_fcgi:error] [pid 34742:tid 34749] [client 185.198.240.241:51379] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:28:15.486413 2025] [proxy_fcgi:error] [pid 34742:tid 34770] [client 185.198.240.241:51379] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:28:16.175748 2025] [proxy_fcgi:error] [pid 34742:tid 34766] [client 185.198.240.241:51379] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:28:16.874277 2025] [proxy_fcgi:error] [pid 34742:tid 34768] [client 185.198.240.241:51379] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:28:17.970559 2025] [proxy_fcgi:error] [pid 34742:tid 34748] [client 185.198.240.241:51379] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:28:18.673180 2025] [proxy_fcgi:error] [pid 34742:tid 34754] [client 185.198.240.241:51379] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:28:19.289877 2025] [proxy_fcgi:error] [pid 34742:tid 34752] [client 185.198.240.241:51379] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:28:19.981227 2025] [proxy_fcgi:error] [pid 34742:tid 34757] [client 185.198.240.241:51379] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:28:22.085347 2025] [proxy_fcgi:error] [pid 34742:tid 34756] [client 185.198.240.241:51379] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:28:22.774458 2025] [proxy_fcgi:error] [pid 34742:tid 34769] [client 185.198.240.241:51379] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:28:24.010116 2025] [proxy_fcgi:error] [pid 34742:tid 34761] [client 185.198.240.241:51379] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:28:25.390716 2025] [proxy_fcgi:error] [pid 34742:tid 34763] [client 185.198.240.241:51379] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:28:26.065159 2025] [proxy_fcgi:error] [pid 34742:tid 34764] [client 185.198.240.241:51379] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:28:26.773675 2025] [proxy_fcgi:error] [pid 34742:tid 34750] [client 185.198.240.241:51379] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:28:27.475013 2025] [proxy_fcgi:error] [pid 34742:tid 34767] [client 185.198.240.241:51379] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:28:28.186594 2025] [proxy_fcgi:error] [pid 34742:tid 34755] [client 185.198.240.241:51379] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:28:28.787821 2025] [proxy_fcgi:error] [pid 34742:tid 34751] [client 185.198.240.241:51379] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:28:29.578162 2025] [proxy_fcgi:error] [pid 34742:tid 34760] [client 185.198.240.241:51379] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:28:30.271657 2025] [proxy_fcgi:error] [pid 34742:tid 34749] [client 185.198.240.241:51379] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:28:30.986581 2025] [proxy_fcgi:error] [pid 34742:tid 34770] [client 185.198.240.241:51379] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:28:31.585874 2025] [proxy_fcgi:error] [pid 34742:tid 34766] [client 185.198.240.241:51379] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:28:32.189248 2025] [proxy_fcgi:error] [pid 34742:tid 34758] [client 185.198.240.241:51379] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:28:32.863881 2025] [proxy_fcgi:error] [pid 34742:tid 34759] [client 185.198.240.241:51379] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:28:33.490956 2025] [proxy_fcgi:error] [pid 34742:tid 34768] [client 185.198.240.241:51379] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:28:34.167680 2025] [proxy_fcgi:error] [pid 34742:tid 34748] [client 185.198.240.241:51379] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:28:34.784662 2025] [proxy_fcgi:error] [pid 34742:tid 34754] [client 185.198.240.241:51379] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:28:35.468932 2025] [proxy_fcgi:error] [pid 34742:tid 34757] [client 185.198.240.241:51379] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:28:36.168682 2025] [proxy_fcgi:error] [pid 34742:tid 34753] [client 185.198.240.241:51379] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:28:38.276069 2025] [proxy_fcgi:error] [pid 34742:tid 34771] [client 185.198.240.241:51379] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:28:39.667161 2025] [proxy_fcgi:error] [pid 34742:tid 34767] [client 185.198.240.241:51379] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:28:42.885537 2025] [proxy_fcgi:error] [pid 34742:tid 34772] [client 185.198.240.241:51379] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:28:43.568909 2025] [:error] [pid 34742:tid 34766] [client 185.198.240.241:51379] [client 185.198.240.241] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.198.240.241, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/classic-editor/wp-login.php"] [unique_id "aSaeG5SuLNwpQF_jzAdK0AAAAFI"]
[Wed Nov 26 14:28:44.270104 2025] [proxy_fcgi:error] [pid 34742:tid 34758] [client 185.198.240.241:51379] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:28:47.887921 2025] [:error] [pid 34742:tid 34761] [client 185.198.240.241:51379] [client 185.198.240.241] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.198.240.241, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/.tmb/wp-login.php"] [unique_id "aSaeH5SuLNwpQF_jzAdK1gAAAE0"]
[Wed Nov 26 14:28:49.376356 2025] [proxy_fcgi:error] [pid 34742:tid 34763] [client 185.198.240.241:51379] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:28:50.063673 2025] [:error] [pid 34742:tid 34764] [client 185.198.240.241:51379] [client 185.198.240.241] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/certificates/plugins.php"] [unique_id "aSaeIpSuLNwpQF_jzAdK2QAAAFA"]
[Wed Nov 26 14:28:51.584425 2025] [:error] [pid 10383:tid 10387] [client 209.87.169.191:50985] [client 209.87.169.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/pomo/wp-login.php"] [unique_id "aSaeI60RJ-zjhOVjD8_f_AAAAcE"]
[Wed Nov 26 14:28:52.886474 2025] [:error] [pid 10383:tid 10409] [client 185.198.240.234:33785] [client 185.198.240.234] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/install.php"] [unique_id "aSaeJK0RJ-zjhOVjD8_f_gAAAdc"]
[Wed Nov 26 14:28:54.181072 2025] [proxy_fcgi:error] [pid 34744:tid 34806] [client 209.87.169.183:63311] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:28:58.372966 2025] [proxy_fcgi:error] [pid 34744:tid 34814] [client 209.87.169.183:63311] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:28:59.068537 2025] [proxy_fcgi:error] [pid 34744:tid 34817] [client 209.87.169.183:63311] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:29:01.770987 2025] [:error] [pid 34744:tid 34810] [client 209.87.169.183:63311] [client 209.87.169.183] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.87.169.183, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/modules/karakaroa/wp-login.php"] [unique_id "aSaeLUtgOvVbhyALkTQQcQAAAYc"]
[Wed Nov 26 14:29:02.479334 2025] [:error] [pid 34744:tid 34803] [client 209.87.169.183:63311] [client 209.87.169.183] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aSaeLktgOvVbhyALkTQQdQAAAYA"]
[Wed Nov 26 14:29:05.174068 2025] [proxy_fcgi:error] [pid 34743:tid 34793] [client 185.198.240.246:27081] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:29:05.963881 2025] [:error] [pid 34743:tid 34792] [client 185.198.240.246:27081] [client 185.198.240.246] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.198.240.246, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aSaeMQvyX7Q5oU7_mBykLgAAAVA"]
[Wed Nov 26 14:29:07.378765 2025] [proxy_fcgi:error] [pid 34743:tid 34783] [client 185.198.240.246:27081] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:29:10.177386 2025] [proxy_fcgi:error] [pid 34743:tid 34797] [client 185.198.240.246:27081] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:29:10.885591 2025] [proxy_fcgi:error] [pid 34743:tid 34790] [client 185.198.240.246:27081] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:29:11.574809 2025] [proxy_fcgi:error] [pid 34743:tid 34799] [client 185.198.240.246:27081] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:29:12.273125 2025] [proxy_fcgi:error] [pid 34743:tid 34789] [client 185.198.240.246:27081] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:29:13.078321 2025] [proxy_fcgi:error] [pid 34743:tid 34785] [client 185.198.240.246:27081] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:29:13.769965 2025] [proxy_fcgi:error] [pid 34743:tid 34776] [client 185.198.240.246:27081] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:29:14.387900 2025] [proxy_fcgi:error] [pid 34743:tid 34795] [client 185.198.240.246:27081] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:29:15.078538 2025] [proxy_fcgi:error] [pid 34743:tid 34800] [client 185.198.240.246:27081] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:29:16.826928 2025] [proxy_fcgi:error] [pid 34743:tid 34788] [client 185.198.240.246:27081] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:29:18.977948 2025] [:error] [pid 34743:tid 34779] [client 185.198.240.246:27081] [client 185.198.240.246] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/dist/editor/fxp.php"] [unique_id "aSaePgvyX7Q5oU7_mBykPwAAAUM"]
[Wed Nov 26 14:29:20.266606 2025] [proxy_fcgi:error] [pid 45901:tid 45927] [client 209.87.169.193:45473] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:29:20.885840 2025] [proxy_fcgi:error] [pid 45901:tid 45925] [client 209.87.169.193:45473] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:29:21.589055 2025] [proxy_fcgi:error] [pid 45901:tid 45909] [client 209.87.169.193:45473] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:29:22.264426 2025] [proxy_fcgi:error] [pid 45901:tid 45913] [client 209.87.169.193:45473] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:29:22.885829 2025] [proxy_fcgi:error] [pid 45901:tid 45907] [client 209.87.169.193:45473] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:29:23.578591 2025] [proxy_fcgi:error] [pid 45901:tid 45904] [client 209.87.169.193:45473] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:29:24.969584 2025] [proxy_fcgi:error] [pid 45901:tid 45919] [client 209.87.169.193:45473] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:29:25.583173 2025] [proxy_fcgi:error] [pid 45901:tid 45911] [client 209.87.169.193:45473] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:29:26.265648 2025] [proxy_fcgi:error] [pid 45901:tid 45907] [client 209.87.169.193:45473] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:29:26.872171 2025] [proxy_fcgi:error] [pid 45901:tid 45910] [client 209.87.169.193:45473] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:29:27.482267 2025] [:error] [pid 45901:tid 45927] [client 209.87.169.193:45473] [client 209.87.169.193] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/Cache/index.php"] [unique_id "aSaeRyunQ1SpfPRNrty0mgAAARg"]
[Wed Nov 26 14:29:28.880002 2025] [proxy_fcgi:error] [pid 45836:tid 45866] [client 185.198.240.236:58775] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:29:36.676034 2025] [proxy_fcgi:error] [pid 34743:tid 34782] [client 185.198.240.239:34449] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:29:37.378771 2025] [proxy_fcgi:error] [pid 34743:tid 34797] [client 185.198.240.239:34449] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:29:39.471407 2025] [proxy_fcgi:error] [pid 34743:tid 34789] [client 185.198.240.239:34449] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:29:40.165501 2025] [proxy_fcgi:error] [pid 34743:tid 34785] [client 185.198.240.239:34449] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:29:40.786819 2025] [proxy_fcgi:error] [pid 34743:tid 34795] [client 185.198.240.239:34449] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:29:42.095331 2025] [proxy_fcgi:error] [pid 34743:tid 34794] [client 185.198.240.239:34449] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:29:43.483941 2025] [:error] [pid 34743:tid 34798] [client 185.198.240.239:34449] [client 185.198.240.239] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.198.240.239, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "aSaeVwvyX7Q5oU7_mBykZQAAAVY"]
[Wed Nov 26 14:29:44.170188 2025] [proxy_fcgi:error] [pid 34743:tid 34786] [client 185.198.240.239:34449] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:29:45.488078 2025] [proxy_fcgi:error] [pid 34743:tid 34793] [client 185.198.240.239:34449] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:29:46.270036 2025] [proxy_fcgi:error] [pid 34743:tid 34791] [client 185.198.240.239:34449] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:29:46.972291 2025] [proxy_fcgi:error] [pid 34743:tid 34792] [client 185.198.240.239:34449] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:29:47.574100 2025] [proxy_fcgi:error] [pid 34743:tid 34780] [client 185.198.240.239:34449] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:29:49.686855 2025] [proxy_fcgi:error] [pid 34743:tid 34797] [client 185.198.240.239:34449] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:29:50.579340 2025] [proxy_fcgi:error] [pid 34743:tid 34799] [client 185.198.240.239:34449] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 14:29:53.178852 2025] [autoindex:error] [pid 34743:tid 34778] [client 185.198.240.239:34449] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Nov 26 14:31:32.931443 2025] [autoindex:error] [pid 34744:tid 34805] [client 209.87.169.9:39541] AH01276: Cannot serve directory /home/dwelects/public_html/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Nov 26 17:23:49.826168 2025] [:error] [pid 45769:tid 45775] [client 216.126.239.203:48944] [client 216.126.239.203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.git/config"] [unique_id "aSbHJVdG5Eht9c3yy4MHvQAAAcM"]
[Thu Nov 27 00:48:45.800086 2025] [:error] [pid 54723:tid 54746] [client 103.77.107.57:54327] [client 103.77.107.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/sftp-config.json"] [unique_id "aScvbQ2CEg7QoyDosdLxVQAAABA"]
[Thu Nov 27 00:48:46.079685 2025] [:error] [pid 24814:tid 25082] [client 103.77.107.57:55567] [client 103.77.107.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.vscode/sftp.json"] [unique_id "aScvbgPn1NMGCdo6RsigFAAAAUc"]
[Thu Nov 27 02:17:17.276969 2025] [:error] [pid 24814:tid 25087] [client 34.61.197.228:51046] [client 34.61.197.228] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.61.197.228, incrementing ddos counter"] [hostname "dwelectservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aSdELQPn1NMGCdo6RsiwdgAAAUw"]
[Thu Nov 27 02:17:17.288825 2025] [proxy_fcgi:error] [pid 24814:tid 25087] [client 34.61.197.228:51046] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 02:17:19.662172 2025] [:error] [pid 24814:tid 25092] [client 34.61.197.228:51046] [client 34.61.197.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aSdELwPn1NMGCdo6RsiwggAAAVE"]
[Thu Nov 27 02:17:20.162940 2025] [:error] [pid 24826:tid 25135] [client 34.61.197.228:60816] [client 34.61.197.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aSdEMFEvPXLVl-nh-yLtqgAAARM"]
[Thu Nov 27 02:17:20.648242 2025] [:error] [pid 8184:tid 8257] [client 34.61.197.228:57549] [client 34.61.197.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aSdEML-M2IHkRYVrcbOZoQAAAFM"]
[Thu Nov 27 02:17:21.106217 2025] [:error] [pid 24826:tid 25125] [client 34.61.197.228:51336] [client 34.61.197.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aSdEMVEvPXLVl-nh-yLtrQAAAQo"]
[Thu Nov 27 02:17:21.591992 2025] [:error] [pid 54723:tid 54752] [client 34.61.197.228:61462] [client 34.61.197.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aSdEMQ2CEg7QoyDosdIHagAAABY"]
[Thu Nov 27 02:17:22.090765 2025] [:error] [pid 8184:tid 8259] [client 34.61.197.228:52513] [client 34.61.197.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aSdEMr-M2IHkRYVrcbOZvAAAAFU"]
[Thu Nov 27 02:17:22.628413 2025] [:error] [pid 8184:tid 8260] [client 34.61.197.228:64880] [client 34.61.197.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aSdEMr-M2IHkRYVrcbOZwwAAAFY"]
[Thu Nov 27 07:38:47.830371 2025] [:error] [pid 40904:tid 40940] [client 68.183.9.16:56510] [client 68.183.9.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/server"] [unique_id "aSePh3J1jozOs8KgKmtM-QAAAQI"]
[Thu Nov 27 07:38:48.549850 2025] [:error] [pid 40903:tid 40924] [client 68.183.9.16:56536] [client 68.183.9.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/.vscode/sftp.json"] [unique_id "aSePiGamXKAP8yZholwneAAAAY0"]
[Thu Nov 27 07:38:49.275676 2025] [:error] [pid 40905:tid 40984] [client 68.183.9.16:56552] [client 68.183.9.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/about"] [unique_id "aSePiW-gHkfbWmv7XlQ4igAAAVM"]
[Thu Nov 27 07:38:50.050863 2025] [:error] [pid 40994:tid 41010] [client 68.183.9.16:56556] [client 68.183.9.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/debug/default/view"] [unique_id "aSePihEaoaa-CIBg8ekJJQAAAAs"]
[Thu Nov 27 07:38:50.780779 2025] [:error] [pid 40905:tid 40976] [client 68.183.9.16:56584] [client 68.183.9.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/v2/_catalog"] [unique_id "aSePim-gHkfbWmv7XlQ4kgAAAUs"]
[Thu Nov 27 07:38:51.507323 2025] [:error] [pid 40903:tid 40924] [client 68.183.9.16:56626] [client 68.183.9.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application"] [unique_id "aSePi2amXKAP8yZholwnpwAAAY0"]
[Thu Nov 27 07:38:52.229338 2025] [:error] [pid 40903:tid 40916] [client 68.183.9.16:56634] [client 68.183.9.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/server-status"] [unique_id "aSePjGamXKAP8yZholwnrgAAAYU"]
[Thu Nov 27 07:38:52.956714 2025] [:error] [pid 41333:tid 41353] [client 68.183.9.16:56652] [client 68.183.9.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/login.action"] [unique_id "aSePjMPZlsys_ig6DWmV0gAAAJA"]
[Thu Nov 27 07:38:53.694218 2025] [:error] [pid 41333:tid 41360] [client 68.183.9.16:56684] [client 68.183.9.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/_all_dbs"] [unique_id "aSePjcPZlsys_ig6DWmV2AAAAJc"]
[Thu Nov 27 07:38:54.418360 2025] [:error] [pid 41333:tid 41347] [client 68.183.9.16:56700] [client 68.183.9.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/.DS_Store"] [unique_id "aSePjsPZlsys_ig6DWmV3AAAAIo"]
[Thu Nov 27 07:38:55.150694 2025] [:error] [pid 41333:tid 41351] [client 68.183.9.16:56724] [client 68.183.9.16] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dwelectservices.com.au"] [uri "/.env"] [unique_id "aSePj8PZlsys_ig6DWmV3wAAAI4"]
[Thu Nov 27 07:38:55.911870 2025] [:error] [pid 41333:tid 41353] [client 68.183.9.16:56756] [client 68.183.9.16] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dwelectservices.com.au"] [uri "/.git/config"] [unique_id "aSePj8PZlsys_ig6DWmV4QAAAJA"]
[Thu Nov 27 07:38:56.630175 2025] [:error] [pid 40903:tid 40911] [client 68.183.9.16:56782] [client 68.183.9.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/s/4313e2232313e243e2330313/_/;/META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties"] [unique_id "aSePkGamXKAP8yZholwnyQAAAYA"]
[Mon Jan 26 00:45:45.847724 2026] [proxy_fcgi:error] [pid 48919:tid 48972] [client 20.227.142.200:3265] AH01071: Got error 'Primary script unknown'
[Mon Jan 26 00:45:45.866115 2026] [proxy_fcgi:error] [pid 48919:tid 48956] [client 20.227.142.200:3265] AH01071: Got error 'Primary script unknown'
[Mon Jan 26 00:45:45.885936 2026] [proxy_fcgi:error] [pid 48919:tid 48959] [client 20.227.142.200:3265] AH01071: Got error 'Primary script unknown'
[Mon Jan 26 00:45:45.906344 2026] [proxy_fcgi:error] [pid 48919:tid 48961] [client 20.227.142.200:3265] AH01071: Got error 'Primary script unknown'
[Mon Jan 26 01:01:22.120875 2026] [proxy_fcgi:error] [pid 48918:tid 48939] [client 54.172.235.197:42864] AH01071: Got error 'Primary script unknown'
[Mon Jan 26 01:01:22.331471 2026] [proxy_fcgi:error] [pid 48918:tid 48950] [client 54.172.235.197:42864] AH01071: Got error 'Primary script unknown'
[Mon Jan 26 01:01:22.540610 2026] [proxy_fcgi:error] [pid 48918:tid 48937] [client 54.172.235.197:42864] AH01071: Got error 'Primary script unknown'
[Mon Jan 26 01:01:22.750161 2026] [proxy_fcgi:error] [pid 48918:tid 48944] [client 54.172.235.197:42864] AH01071: Got error 'Primary script unknown'
[Mon Jan 26 02:55:17.881648 2026] [:error] [pid 49084:tid 49096] [client 23.226.132.115:38266] [client 23.226.132.115] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dwelectservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dwelectservices.com.au"] [uri "/"] [unique_id "aXZnFZHUOXll3XccoO45_gAAAUo"], referer: https://www.bing.com/
[Mon Jan 26 12:21:56.466253 2026] [:error] [pid 61252:tid 61270] [client 206.189.135.129:65246] [client 206.189.135.129] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 206.189.135.129, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-login.php"] [unique_id "aXbr5LrGlf8FG2etxUApQAAAARA"]
[Mon Jan 26 12:21:56.475768 2026] [proxy_fcgi:error] [pid 61252:tid 61270] [client 206.189.135.129:65246] AH01071: Got error 'Primary script unknown'
[Mon Jan 26 12:41:01.719752 2026] [:error] [pid 24558:tid 24635] [client 139.59.88.212:57318] [client 139.59.88.212] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 139.59.88.212, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-login.php"] [unique_id "aXbwXQo1PXqeJqIMTQZccwAAAI4"]
[Mon Jan 26 12:41:01.729244 2026] [proxy_fcgi:error] [pid 24558:tid 24635] [client 139.59.88.212:57318] AH01071: Got error 'Primary script unknown'
[Mon Jan 26 23:14:19.039482 2026] [:error] [pid 24557:tid 24602] [client 45.133.5.85:61423] [client 45.133.5.85] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.133.5.85, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-login.php"] [unique_id "aXeEy-rlG7Vm9pxV14xKfgAAAEg"]
[Mon Jan 26 23:14:19.083293 2026] [proxy_fcgi:error] [pid 24557:tid 24602] [client 45.133.5.85:61423] AH01071: Got error 'Primary script unknown'
[Tue Jan 27 11:43:28.342487 2026] [:error] [pid 48412:tid 48436] [client 64.225.49.30:56308] [client 64.225.49.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/css/"] [unique_id "aXg0YHbJMfAKlln88JGH2QAAAVY"], referer: binance.com
[Tue Jan 27 18:28:17.077750 2026] [:error] [pid 48412:tid 48423] [client 45.137.126.49:46575] [client 45.137.126.49] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.git/HEAD"] [unique_id "aXiTQXbJMfAKlln88JHjMQAAAUk"]
[Tue Jan 27 18:28:17.995910 2026] [:error] [pid 48412:tid 48437] [client 45.137.126.23:60727] [client 45.137.126.23] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dwelectservices.com.au"] [uri "/.git/HEAD"] [unique_id "aXiTQXbJMfAKlln88JHjMgAAAVc"]
[Tue Jan 27 21:28:27.379081 2026] [:error] [pid 39017:tid 39071] [client 15.152.93.39:39570] [client 15.152.93.39] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env"] [unique_id "aXi9e8553xt-F_10bG6qlgAAAxc"], referer: https://www.google.com/
[Tue Jan 27 21:28:27.632221 2026] [:error] [pid 39016:tid 39027] [client 15.152.93.39:39576] [client 15.152.93.39] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.local"] [unique_id "aXi9e_B6_y9crthwy8qxHAAAAsY"], referer: https://www.google.com/
[Tue Jan 27 21:28:27.893307 2026] [:error] [pid 48446:tid 48483] [client 15.152.93.39:39586] [client 15.152.93.39] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.production"] [unique_id "aXi9e8DRSaZ8F8aaLxmlDAAAAcY"], referer: https://www.google.com/
[Tue Jan 27 21:28:28.150528 2026] [:error] [pid 48446:tid 48496] [client 15.152.93.39:39588] [client 15.152.93.39] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.development"] [unique_id "aXi9fMDRSaZ8F8aaLxmlDQAAAdI"], referer: https://www.google.com/
[Tue Jan 27 21:28:28.418340 2026] [:error] [pid 7454:tid 7540] [client 15.152.93.39:52062] [client 15.152.93.39] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.staging"] [unique_id "aXi9fJltCoZEfMmfl8AizAAAAJg"], referer: https://www.google.com/
[Tue Jan 27 21:28:28.679121 2026] [:error] [pid 48528:tid 48538] [client 15.152.93.39:52068] [client 15.152.93.39] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.prod"] [unique_id "aXi9fAOGRrquT9N7CZp5mQAAAgg"], referer: https://www.google.com/
[Tue Jan 27 21:28:28.938265 2026] [:error] [pid 48662:tid 48675] [client 15.152.93.39:52076] [client 15.152.93.39] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.dev"] [unique_id "aXi9fOD8iESUP9uRiRP3OQAAAoc"], referer: https://www.google.com/
[Tue Jan 27 21:28:29.189796 2026] [:error] [pid 48412:tid 48421] [client 15.152.93.39:52080] [client 15.152.93.39] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.test"] [unique_id "aXi9fXbJMfAKlln88JENDwAAAUc"], referer: https://www.google.com/
[Tue Jan 27 21:28:29.448181 2026] [:error] [pid 7453:tid 7513] [client 15.152.93.39:52086] [client 15.152.93.39] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.backup"] [unique_id "aXi9fRfsyA2ws_ADquipXQAAAFg"], referer: https://www.google.com/
[Tue Jan 27 21:28:29.703873 2026] [:error] [pid 48412:tid 48429] [client 15.152.93.39:52096] [client 15.152.93.39] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.old"] [unique_id "aXi9fXbJMfAKlln88JENEQAAAU8"], referer: https://www.google.com/
[Tue Jan 27 21:28:29.959803 2026] [:error] [pid 48412:tid 48419] [client 15.152.93.39:52100] [client 15.152.93.39] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.bak"] [unique_id "aXi9fXbJMfAKlln88JENFAAAAUU"], referer: https://www.google.com/
[Tue Jan 27 21:28:30.208802 2026] [:error] [pid 48412:tid 48417] [client 15.152.93.39:52106] [client 15.152.93.39] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.save"] [unique_id "aXi9fnbJMfAKlln88JENFQAAAUM"], referer: https://www.google.com/
[Tue Jan 27 21:28:30.459538 2026] [:error] [pid 48528:tid 48536] [client 15.152.93.39:52116] [client 15.152.93.39] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.sample"] [unique_id "aXi9fgOGRrquT9N7CZp5mgAAAgY"], referer: https://www.google.com/
[Tue Jan 27 21:28:30.722606 2026] [:error] [pid 48528:tid 48544] [client 15.152.93.39:52128] [client 15.152.93.39] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.example"] [unique_id "aXi9fgOGRrquT9N7CZp5mwAAAg4"], referer: https://www.google.com/
[Tue Jan 27 21:28:30.976155 2026] [:error] [pid 7454:tid 7522] [client 15.152.93.39:52132] [client 15.152.93.39] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.dist"] [unique_id "aXi9fpltCoZEfMmfl8AizQAAAIY"], referer: https://www.google.com/
[Tue Jan 27 21:28:31.240127 2026] [:error] [pid 38987:tid 39014] [client 15.152.93.39:52144] [client 15.152.93.39] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.prod.local"] [unique_id "aXi9f6TH0bU76Ifu_XczDgAAABg"], referer: https://www.google.com/
[Tue Jan 27 21:28:31.492815 2026] [:error] [pid 48662:tid 48674] [client 15.152.93.39:52154] [client 15.152.93.39] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.dev.local"] [unique_id "aXi9f-D8iESUP9uRiRP3OwAAAoY"], referer: https://www.google.com/
[Tue Jan 27 21:28:31.754241 2026] [:error] [pid 48528:tid 48549] [client 15.152.93.39:52164] [client 15.152.93.39] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.remote"] [unique_id "aXi9fwOGRrquT9N7CZp5ngAAAhM"], referer: https://www.google.com/
[Tue Jan 27 21:28:32.029977 2026] [:error] [pid 48662:tid 48688] [client 15.152.93.39:52172] [client 15.152.93.39] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.1"] [unique_id "aXi9gOD8iESUP9uRiRP3PAAAApQ"], referer: https://www.google.com/
[Tue Jan 27 21:28:32.286685 2026] [:error] [pid 48446:tid 48493] [client 15.152.93.39:52188] [client 15.152.93.39] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.2"] [unique_id "aXi9gMDRSaZ8F8aaLxmlEQAAAc8"], referer: https://www.google.com/
[Tue Jan 27 21:28:32.543025 2026] [:error] [pid 7453:tid 7505] [client 15.152.93.39:52190] [client 15.152.93.39] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.3"] [unique_id "aXi9gBfsyA2ws_ADquipXgAAAFA"], referer: https://www.google.com/
[Tue Jan 27 21:28:32.927106 2026] [:error] [pid 39017:tid 39066] [client 15.152.93.39:52192] [client 15.152.93.39] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/api/.env"] [unique_id "aXi9gM553xt-F_10bG6qmAAAAxI"], referer: https://www.google.com/
[Tue Jan 27 21:28:34.889867 2026] [:error] [pid 7453:tid 7510] [client 15.152.93.39:52198] [client 15.152.93.39] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/api/v1/.env"] [unique_id "aXi9ghfsyA2ws_ADquipZwAAAFU"], referer: https://www.google.com/
[Tue Jan 27 21:28:35.147476 2026] [:error] [pid 7453:tid 7509] [client 15.152.93.39:52200] [client 15.152.93.39] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/api/v2/.env"] [unique_id "aXi9gxfsyA2ws_ADquipaAAAAFQ"], referer: https://www.google.com/
[Tue Jan 27 21:28:35.442635 2026] [:error] [pid 7453:tid 7508] [client 15.152.93.39:52216] [client 15.152.93.39] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/api/v3/.env"] [unique_id "aXi9gxfsyA2ws_ADquipagAAAFM"], referer: https://www.google.com/
[Tue Jan 27 21:28:35.709193 2026] [:error] [pid 48412:tid 48421] [client 15.152.93.39:52228] [client 15.152.93.39] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/rest/.env"] [unique_id "aXi9g3bJMfAKlln88JENGwAAAUc"], referer: https://www.google.com/
[Tue Jan 27 21:28:35.965431 2026] [:error] [pid 7453:tid 7503] [client 15.152.93.39:52234] [client 15.152.93.39] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/backend/.env"] [unique_id "aXi9gxfsyA2ws_ADquipawAAAE4"], referer: https://www.google.com/
[Tue Jan 27 21:28:36.225685 2026] [:error] [pid 48412:tid 48433] [client 15.152.93.39:52246] [client 15.152.93.39] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/backend/api/.env"] [unique_id "aXi9hHbJMfAKlln88JENHgAAAVM"], referer: https://www.google.com/
[Tue Jan 27 21:28:36.477223 2026] [:error] [pid 48412:tid 48436] [client 15.152.93.39:52250] [client 15.152.93.39] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/server/.env"] [unique_id "aXi9hHbJMfAKlln88JENIgAAAVY"], referer: https://www.google.com/
[Tue Jan 27 21:28:36.732446 2026] [:error] [pid 48412:tid 48426] [client 15.152.93.39:52252] [client 15.152.93.39] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/server/api/.env"] [unique_id "aXi9hHbJMfAKlln88JENIwAAAUw"], referer: https://www.google.com/
[Tue Jan 27 21:28:36.992944 2026] [:error] [pid 7453:tid 7501] [client 15.152.93.39:52268] [client 15.152.93.39] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/graphql/.env"] [unique_id "aXi9hBfsyA2ws_ADquipcAAAAEw"], referer: https://www.google.com/
[Tue Jan 27 21:28:37.259695 2026] [:error] [pid 48412:tid 48422] [client 15.152.93.39:52276] [client 15.152.93.39] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/webhook/.env"] [unique_id "aXi9hXbJMfAKlln88JENJQAAAUg"], referer: https://www.google.com/
[Tue Jan 27 21:28:37.511126 2026] [:error] [pid 38987:tid 38996] [client 15.152.93.39:52284] [client 15.152.93.39] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/webhooks/.env"] [unique_id "aXi9haTH0bU76Ifu_XczDwAAAAY"], referer: https://www.google.com/
[Tue Jan 27 21:28:37.766610 2026] [:error] [pid 48412:tid 48418] [client 15.152.93.39:52286] [client 15.152.93.39] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/payment/.env"] [unique_id "aXi9hXbJMfAKlln88JENJwAAAUQ"], referer: https://www.google.com/
[Wed Jan 28 03:08:24.407256 2026] [:error] [pid 41678:tid 41699] [client 134.122.11.22:64922] [client 134.122.11.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/images/"] [unique_id "aXkNKKja89ZyPVwMdihSEQAAAAY"], referer: binance.com
[Wed Jan 28 03:08:29.263206 2026] [:error] [pid 24426:tid 24478] [client 134.122.11.22:54520] [client 134.122.11.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/files/"] [unique_id "aXkNLfbw8B_M5J5XrXQU1gAAAVQ"], referer: binance.com
[Wed Jan 28 05:15:11.604613 2026] [proxy_fcgi:error] [pid 17426:tid 17503] [client 45.154.138.27:24563] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:15:12.541612 2026] [proxy_fcgi:error] [pid 17426:tid 17509] [client 45.154.138.27:24563] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:15:13.013517 2026] [:error] [pid 17426:tid 17494] [client 45.154.138.27:24563] [client 45.154.138.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aXkq4U8zvf_03BnziRf0PwAAAIU"]
[Wed Jan 28 05:15:13.951630 2026] [proxy_fcgi:error] [pid 17535:tid 17555] [client 45.154.138.21:20617] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:15:14.423357 2026] [:error] [pid 17535:tid 17556] [client 45.154.138.21:20617] [client 45.154.138.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/bk/index.php"] [unique_id "aXkq4q3QiSMgVscnN5IN3QAAANI"]
[Wed Jan 28 05:15:15.435624 2026] [proxy_fcgi:error] [pid 17424:tid 17441] [client 45.154.138.13:25971] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:15:16.380475 2026] [proxy_fcgi:error] [pid 17424:tid 17433] [client 45.154.138.13:25971] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:15:16.860614 2026] [proxy_fcgi:error] [pid 17424:tid 17456] [client 45.154.138.13:25971] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:15:17.346613 2026] [proxy_fcgi:error] [pid 17424:tid 17436] [client 45.154.138.13:25971] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:15:18.304762 2026] [:error] [pid 17424:tid 17452] [client 45.154.138.13:25971] [client 45.154.138.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/theme-compat/chosen.php"] [unique_id "aXkq5mRvtDRvGDe-pIs9jQAAABM"]
[Wed Jan 28 05:15:19.277829 2026] [proxy_fcgi:error] [pid 64842:tid 64847] [client 45.154.138.16:34919] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:15:19.825621 2026] [proxy_fcgi:error] [pid 64842:tid 64859] [client 45.154.138.16:34919] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:15:20.286391 2026] [:error] [pid 64842:tid 64845] [client 45.154.138.16:34919] [client 45.154.138.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/IXR/chosen.php"] [unique_id "aXkq6FuAAQZ5AN_SnDbw0QAAAUE"]
[Wed Jan 28 05:15:21.208426 2026] [:error] [pid 64842:tid 64868] [client 45.154.138.34:64855] [client 45.154.138.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/chosen.php"] [unique_id "aXkq6VuAAQZ5AN_SnDbw2wAAAVg"]
[Wed Jan 28 05:15:22.129800 2026] [:error] [pid 17535:tid 17539] [client 45.154.138.38:39601] [client 45.154.138.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/pomo/wp-conflg.php"] [unique_id "aXkq6q3QiSMgVscnN5IONAAAAME"]
[Wed Jan 28 05:15:23.539642 2026] [:error] [pid 17424:tid 17439] [client 45.154.138.15:35585] [client 45.154.138.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "aXkq62RvtDRvGDe-pIs92wAAAAY"]
[Wed Jan 28 05:15:24.926460 2026] [:error] [pid 17426:tid 17510] [client 45.154.138.4:24525] [client 45.154.138.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Requests/Auth/index.php"] [unique_id "aXkq7E8zvf_03BnziRf0sgAAAJU"]
[Wed Jan 28 05:15:26.810901 2026] [proxy_fcgi:error] [pid 58254:tid 58257] [client 45.154.138.43:22885] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:15:28.226619 2026] [proxy_fcgi:error] [pid 58254:tid 58273] [client 45.154.138.43:22885] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:15:28.737022 2026] [:error] [pid 58254:tid 58274] [client 45.154.138.43:22885] [client 45.154.138.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aXkq8PF8nSyBg9wOsa8IsQAAARI"]
[Wed Jan 28 05:15:29.687340 2026] [:error] [pid 17535:tid 17552] [client 45.154.138.235:55379] [client 45.154.138.235] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "aXkq8a3QiSMgVscnN5IOjwAAAM4"]
[Wed Jan 28 05:15:31.121846 2026] [proxy_fcgi:error] [pid 17425:tid 17474] [client 45.154.138.15:55645] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:15:31.610664 2026] [proxy_fcgi:error] [pid 17425:tid 17482] [client 45.154.138.15:55645] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:15:32.115627 2026] [proxy_fcgi:error] [pid 17425:tid 17468] [client 45.154.138.15:55645] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:15:32.590642 2026] [proxy_fcgi:error] [pid 17425:tid 17477] [client 45.154.138.15:55645] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:15:33.070663 2026] [proxy_fcgi:error] [pid 17425:tid 17464] [client 45.154.138.15:55645] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:15:33.543609 2026] [proxy_fcgi:error] [pid 17425:tid 17462] [client 45.154.138.15:55645] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:15:34.040672 2026] [proxy_fcgi:error] [pid 17425:tid 17478] [client 45.154.138.15:55645] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:15:34.517638 2026] [proxy_fcgi:error] [pid 17425:tid 17471] [client 45.154.138.15:55645] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:15:34.992615 2026] [proxy_fcgi:error] [pid 17425:tid 17487] [client 45.154.138.15:55645] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:15:35.474617 2026] [proxy_fcgi:error] [pid 17425:tid 17465] [client 45.154.138.15:55645] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:15:35.959613 2026] [proxy_fcgi:error] [pid 17425:tid 17473] [client 45.154.138.15:55645] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:15:36.451631 2026] [proxy_fcgi:error] [pid 17425:tid 17478] [client 45.154.138.15:55645] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:15:36.925611 2026] [proxy_fcgi:error] [pid 17425:tid 17463] [client 45.154.138.15:55645] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:15:39.973654 2026] [proxy_fcgi:error] [pid 17425:tid 17467] [client 45.154.138.15:55645] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:15:40.441611 2026] [proxy_fcgi:error] [pid 17425:tid 17485] [client 45.154.138.15:55645] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:15:40.933616 2026] [proxy_fcgi:error] [pid 17425:tid 17477] [client 45.154.138.15:55645] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:15:41.405638 2026] [proxy_fcgi:error] [pid 17425:tid 17483] [client 45.154.138.15:55645] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:15:41.882733 2026] [proxy_fcgi:error] [pid 17425:tid 17467] [client 45.154.138.15:55645] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:15:42.363640 2026] [proxy_fcgi:error] [pid 17425:tid 17466] [client 45.154.138.15:55645] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:15:42.840628 2026] [proxy_fcgi:error] [pid 17425:tid 17468] [client 45.154.138.15:55645] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:15:43.313635 2026] [proxy_fcgi:error] [pid 17425:tid 17465] [client 45.154.138.15:55645] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:15:43.792626 2026] [proxy_fcgi:error] [pid 17425:tid 17479] [client 45.154.138.15:55645] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:15:44.276639 2026] [proxy_fcgi:error] [pid 17425:tid 17478] [client 45.154.138.15:55645] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:15:44.745613 2026] [proxy_fcgi:error] [pid 17425:tid 17481] [client 45.154.138.15:55645] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:15:45.219604 2026] [proxy_fcgi:error] [pid 17425:tid 17475] [client 45.154.138.15:55645] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:15:45.686614 2026] [proxy_fcgi:error] [pid 17425:tid 17487] [client 45.154.138.15:55645] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:15:46.160634 2026] [proxy_fcgi:error] [pid 17425:tid 17466] [client 45.154.138.15:55645] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:15:46.637648 2026] [proxy_fcgi:error] [pid 17425:tid 17478] [client 45.154.138.15:55645] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:15:47.118258 2026] [proxy_fcgi:error] [pid 17425:tid 17487] [client 45.154.138.15:55645] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:15:47.597620 2026] [proxy_fcgi:error] [pid 17425:tid 17478] [client 45.154.138.15:55645] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:15:48.064616 2026] [proxy_fcgi:error] [pid 17425:tid 17474] [client 45.154.138.15:55645] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:15:48.557675 2026] [proxy_fcgi:error] [pid 17425:tid 17467] [client 45.154.138.15:55645] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:15:49.030322 2026] [proxy_fcgi:error] [pid 17425:tid 17475] [client 45.154.138.15:55645] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:15:49.490049 2026] [:error] [pid 17425:tid 17487] [client 45.154.138.15:55645] [client 45.154.138.15] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.154.138.15, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-login.php"] [unique_id "aXkrBarcODKH1Dl7aZAecwAAAFg"]
[Wed Jan 28 05:15:49.499607 2026] [proxy_fcgi:error] [pid 17425:tid 17487] [client 45.154.138.15:55645] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:15:50.469617 2026] [proxy_fcgi:error] [pid 17425:tid 17482] [client 45.154.138.15:55645] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:15:50.936637 2026] [proxy_fcgi:error] [pid 17425:tid 17478] [client 45.154.138.15:55645] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:15:51.403171 2026] [:error] [pid 17425:tid 17483] [client 45.154.138.15:55645] [client 45.154.138.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/modules.php"] [unique_id "aXkrB6rcODKH1Dl7aZAelQAAAFU"]
[Wed Jan 28 05:15:52.348621 2026] [proxy_fcgi:error] [pid 58254:tid 58259] [client 45.154.138.29:26175] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:15:52.851648 2026] [proxy_fcgi:error] [pid 58254:tid 58271] [client 45.154.138.29:26175] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:15:53.806621 2026] [proxy_fcgi:error] [pid 58254:tid 58267] [client 45.154.138.29:26175] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:15:54.272605 2026] [proxy_fcgi:error] [pid 58254:tid 58275] [client 45.154.138.29:26175] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:15:54.745600 2026] [proxy_fcgi:error] [pid 58254:tid 58270] [client 45.154.138.29:26175] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:15:55.220605 2026] [proxy_fcgi:error] [pid 58254:tid 58261] [client 45.154.138.29:26175] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:15:55.686623 2026] [proxy_fcgi:error] [pid 58254:tid 58262] [client 45.154.138.29:26175] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:15:56.158630 2026] [proxy_fcgi:error] [pid 58254:tid 58277] [client 45.154.138.29:26175] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:15:56.701609 2026] [proxy_fcgi:error] [pid 58254:tid 58262] [client 45.154.138.29:26175] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:15:57.641184 2026] [:error] [pid 58254:tid 58269] [client 45.154.138.29:26175] [client 45.154.138.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/codeboy1877_up.php"] [unique_id "aXkrDfF8nSyBg9wOsa8KzwAAAQ0"]
[Wed Jan 28 05:15:58.568638 2026] [proxy_fcgi:error] [pid 17424:tid 17440] [client 45.154.138.24:49411] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:15:59.040632 2026] [proxy_fcgi:error] [pid 17424:tid 17447] [client 45.154.138.24:49411] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:16:04.390619 2026] [proxy_fcgi:error] [pid 17424:tid 17438] [client 45.154.138.24:49411] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:16:04.865615 2026] [proxy_fcgi:error] [pid 17424:tid 17433] [client 45.154.138.24:49411] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:16:05.334652 2026] [proxy_fcgi:error] [pid 17424:tid 17439] [client 45.154.138.24:49411] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:16:05.822622 2026] [proxy_fcgi:error] [pid 17424:tid 17457] [client 45.154.138.24:49411] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:16:06.466633 2026] [proxy_fcgi:error] [pid 17424:tid 17456] [client 45.154.138.24:49411] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:16:08.011612 2026] [proxy_fcgi:error] [pid 17424:tid 17452] [client 45.154.138.24:49411] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:16:08.493697 2026] [proxy_fcgi:error] [pid 17424:tid 17436] [client 45.154.138.24:49411] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:16:08.964961 2026] [proxy_fcgi:error] [pid 17424:tid 17443] [client 45.154.138.24:49411] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:16:09.437610 2026] [proxy_fcgi:error] [pid 17424:tid 17446] [client 45.154.138.24:49411] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:16:09.922331 2026] [proxy_fcgi:error] [pid 17424:tid 17435] [client 45.154.138.24:49411] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:16:10.441615 2026] [proxy_fcgi:error] [pid 17424:tid 17443] [client 45.154.138.24:49411] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:16:10.918617 2026] [proxy_fcgi:error] [pid 17424:tid 17454] [client 45.154.138.24:49411] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:16:11.848936 2026] [proxy_fcgi:error] [pid 17424:tid 17445] [client 45.154.138.24:49411] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:16:12.333623 2026] [proxy_fcgi:error] [pid 17424:tid 17443] [client 45.154.138.24:49411] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:16:13.264624 2026] [proxy_fcgi:error] [pid 17424:tid 17448] [client 45.154.138.24:49411] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:16:13.731600 2026] [proxy_fcgi:error] [pid 17424:tid 17445] [client 45.154.138.24:49411] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:16:14.203692 2026] [proxy_fcgi:error] [pid 17424:tid 17444] [client 45.154.138.24:49411] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:16:14.673411 2026] [proxy_fcgi:error] [pid 17424:tid 17443] [client 45.154.138.24:49411] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:16:15.157799 2026] [proxy_fcgi:error] [pid 17424:tid 17450] [client 45.154.138.24:49411] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:16:15.621482 2026] [:error] [pid 17424:tid 17457] [client 45.154.138.24:49411] [client 45.154.138.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/lx.php"] [unique_id "aXkrH2RvtDRvGDe-pItArwAAABg"]
[Wed Jan 28 05:16:17.643615 2026] [proxy_fcgi:error] [pid 58254:tid 58276] [client 45.154.138.7:55173] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:16:18.113437 2026] [proxy_fcgi:error] [pid 58254:tid 58279] [client 45.154.138.7:55173] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:16:18.582676 2026] [proxy_fcgi:error] [pid 58254:tid 58258] [client 45.154.138.7:55173] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:16:19.051956 2026] [proxy_fcgi:error] [pid 58254:tid 58260] [client 45.154.138.7:55173] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:16:19.519602 2026] [proxy_fcgi:error] [pid 58254:tid 58269] [client 45.154.138.7:55173] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:16:19.997914 2026] [proxy_fcgi:error] [pid 58254:tid 58257] [client 45.154.138.7:55173] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:16:20.488608 2026] [proxy_fcgi:error] [pid 58254:tid 58262] [client 45.154.138.7:55173] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:16:20.962606 2026] [proxy_fcgi:error] [pid 58254:tid 58265] [client 45.154.138.7:55173] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:16:21.428614 2026] [proxy_fcgi:error] [pid 58254:tid 58260] [client 45.154.138.7:55173] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:16:21.902615 2026] [proxy_fcgi:error] [pid 58254:tid 58261] [client 45.154.138.7:55173] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:16:22.373681 2026] [proxy_fcgi:error] [pid 58254:tid 58267] [client 45.154.138.7:55173] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:16:22.838624 2026] [proxy_fcgi:error] [pid 58254:tid 58258] [client 45.154.138.7:55173] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:16:23.312685 2026] [proxy_fcgi:error] [pid 58254:tid 58272] [client 45.154.138.7:55173] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:16:23.811616 2026] [proxy_fcgi:error] [pid 58254:tid 58261] [client 45.154.138.7:55173] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:16:24.282607 2026] [proxy_fcgi:error] [pid 58254:tid 58257] [client 45.154.138.7:55173] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:16:24.759666 2026] [proxy_fcgi:error] [pid 58254:tid 58277] [client 45.154.138.7:55173] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:16:25.227611 2026] [proxy_fcgi:error] [pid 58254:tid 58256] [client 45.154.138.7:55173] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:16:25.698670 2026] [proxy_fcgi:error] [pid 58254:tid 58258] [client 45.154.138.7:55173] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:16:26.166614 2026] [proxy_fcgi:error] [pid 58254:tid 58272] [client 45.154.138.7:55173] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:16:26.670033 2026] [proxy_fcgi:error] [pid 58254:tid 58264] [client 45.154.138.7:55173] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:16:27.151600 2026] [proxy_fcgi:error] [pid 58254:tid 58257] [client 45.154.138.7:55173] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:16:27.621611 2026] [proxy_fcgi:error] [pid 58254:tid 58263] [client 45.154.138.7:55173] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:16:28.088611 2026] [proxy_fcgi:error] [pid 58254:tid 58258] [client 45.154.138.7:55173] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:16:28.560726 2026] [proxy_fcgi:error] [pid 58254:tid 58273] [client 45.154.138.7:55173] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:16:29.027612 2026] [proxy_fcgi:error] [pid 58254:tid 58270] [client 45.154.138.7:55173] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:16:29.498885 2026] [proxy_fcgi:error] [pid 58254:tid 58256] [client 45.154.138.7:55173] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:16:29.962616 2026] [proxy_fcgi:error] [pid 58254:tid 58280] [client 45.154.138.7:55173] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:16:30.428614 2026] [proxy_fcgi:error] [pid 58254:tid 58261] [client 45.154.138.7:55173] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:16:31.004917 2026] [proxy_fcgi:error] [pid 58254:tid 58264] [client 45.154.138.7:55173] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:16:43.028430 2026] [:error] [pid 58254:tid 58259] [client 45.154.138.7:55173] [client 45.154.138.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/F0x.php"] [unique_id "aXkrO_F8nSyBg9wOsa8N3QAAAQM"]
[Wed Jan 28 05:16:44.437685 2026] [proxy_fcgi:error] [pid 64842:tid 64868] [client 45.154.138.9:47713] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:16:48.752454 2026] [proxy_fcgi:error] [pid 64842:tid 64848] [client 45.154.138.9:47713] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:16:49.233740 2026] [proxy_fcgi:error] [pid 64842:tid 64866] [client 45.154.138.9:47713] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:16:49.700968 2026] [proxy_fcgi:error] [pid 64842:tid 64857] [client 45.154.138.9:47713] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:16:51.256451 2026] [proxy_fcgi:error] [pid 64842:tid 64852] [client 45.154.138.9:47713] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:16:54.137006 2026] [proxy_fcgi:error] [pid 64842:tid 64858] [client 45.154.138.9:47713] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:16:54.604689 2026] [proxy_fcgi:error] [pid 64842:tid 64855] [client 45.154.138.9:47713] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:16:55.079995 2026] [proxy_fcgi:error] [pid 64842:tid 64868] [client 45.154.138.9:47713] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:16:55.550603 2026] [proxy_fcgi:error] [pid 64842:tid 64858] [client 45.154.138.9:47713] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:16:56.028156 2026] [proxy_fcgi:error] [pid 64842:tid 64860] [client 45.154.138.9:47713] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:16:56.503625 2026] [proxy_fcgi:error] [pid 64842:tid 64868] [client 45.154.138.9:47713] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:16:57.438905 2026] [:error] [pid 64842:tid 64859] [client 45.154.138.9:47713] [client 45.154.138.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aXkrSVuAAQZ5AN_SnDb1qgAAAU8"]
[Wed Jan 28 05:16:58.360084 2026] [:error] [pid 17426:tid 17502] [client 45.154.138.42:58393] [client 45.154.138.42] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.154.138.42, incrementing ddos counter"] [hostname "dwelectservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aXkrSk8zvf_03BnziRf53wAAAI0"]
[Wed Jan 28 05:16:58.369635 2026] [proxy_fcgi:error] [pid 17426:tid 17502] [client 45.154.138.42:58393] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:16:58.834966 2026] [proxy_fcgi:error] [pid 17426:tid 17507] [client 45.154.138.42:58393] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:16:59.769198 2026] [:error] [pid 17426:tid 17488] [client 45.154.138.42:58393] [client 45.154.138.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aXkrS08zvf_03BnziRf58gAAAIA"]
[Wed Jan 28 05:17:01.262832 2026] [proxy_fcgi:error] [pid 2454:tid 2469] [client 45.154.138.9:56269] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:17:03.672628 2026] [proxy_fcgi:error] [pid 2454:tid 2460] [client 45.154.138.9:56269] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:17:04.625624 2026] [proxy_fcgi:error] [pid 2454:tid 2474] [client 45.154.138.9:56269] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:17:05.109066 2026] [:error] [pid 2454:tid 2458] [client 45.154.138.9:56269] [client 45.154.138.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aXkrUZvv4I21Ywd7NNblIQAAAYA"]
[Wed Jan 28 05:17:06.088438 2026] [proxy_fcgi:error] [pid 2454:tid 2469] [client 45.154.138.2:33233] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:17:06.558612 2026] [proxy_fcgi:error] [pid 2454:tid 2466] [client 45.154.138.2:33233] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:17:07.042619 2026] [proxy_fcgi:error] [pid 2454:tid 2482] [client 45.154.138.2:33233] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:17:09.028636 2026] [proxy_fcgi:error] [pid 2454:tid 2475] [client 45.154.138.2:33233] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:17:09.573610 2026] [proxy_fcgi:error] [pid 2454:tid 2467] [client 45.154.138.2:33233] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:17:10.052564 2026] [proxy_fcgi:error] [pid 2454:tid 2476] [client 45.154.138.2:33233] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:17:10.523606 2026] [proxy_fcgi:error] [pid 2454:tid 2467] [client 45.154.138.2:33233] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:17:12.483651 2026] [proxy_fcgi:error] [pid 2454:tid 2466] [client 45.154.138.2:33233] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:17:13.453222 2026] [:error] [pid 2454:tid 2467] [client 45.154.138.2:33233] [client 45.154.138.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aXkrWZvv4I21Ywd7NNblyQAAAYk"]
[Wed Jan 28 05:17:14.378537 2026] [:error] [pid 17424:tid 17436] [client 45.154.138.49:53575] [client 45.154.138.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aXkrWmRvtDRvGDe-pItETgAAAAM"]
[Wed Jan 28 05:17:15.301417 2026] [:error] [pid 17426:tid 17503] [client 45.154.138.28:29003] [client 45.154.138.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "aXkrW08zvf_03BnziRf61wAAAI4"]
[Wed Jan 28 05:17:16.225941 2026] [:error] [pid 2454:tid 2458] [client 45.154.138.37:44067] [client 45.154.138.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "aXkrXJvv4I21Ywd7NNbmAAAAAYA"]
[Wed Jan 28 05:17:17.191640 2026] [proxy_fcgi:error] [pid 17535:tid 17552] [client 45.154.138.34:51289] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:17:17.664607 2026] [proxy_fcgi:error] [pid 17535:tid 17543] [client 45.154.138.34:51289] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:17:18.595406 2026] [:error] [pid 17535:tid 17556] [client 45.154.138.34:51289] [client 45.154.138.34] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.154.138.34, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/images/wp-login.php"] [unique_id "aXkrXq3QiSMgVscnN5IUoQAAANI"]
[Wed Jan 28 05:17:21.001623 2026] [proxy_fcgi:error] [pid 17535:tid 17551] [client 45.154.138.34:51289] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:17:21.501678 2026] [proxy_fcgi:error] [pid 17535:tid 17558] [client 45.154.138.34:51289] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:17:22.468610 2026] [proxy_fcgi:error] [pid 17535:tid 17554] [client 45.154.138.34:51289] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:17:25.269668 2026] [:error] [pid 17535:tid 17548] [client 45.154.138.34:51289] [client 45.154.138.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "aXkrZa3QiSMgVscnN5IVBQAAAMo"]
[Wed Jan 28 05:17:26.199716 2026] [proxy_fcgi:error] [pid 17425:tid 17462] [client 45.154.138.16:39571] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:17:27.614165 2026] [:error] [pid 17425:tid 17475] [client 45.154.138.16:39571] [client 45.154.138.16] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.154.138.16, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/wp-login.php"] [unique_id "aXkrZ6rcODKH1Dl7aZAjRAAAAE0"]
[Wed Jan 28 05:17:28.099620 2026] [proxy_fcgi:error] [pid 17425:tid 17470] [client 45.154.138.16:39571] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:17:29.090612 2026] [proxy_fcgi:error] [pid 17425:tid 17467] [client 45.154.138.16:39571] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:17:29.563623 2026] [proxy_fcgi:error] [pid 17425:tid 17476] [client 45.154.138.16:39571] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:17:30.499642 2026] [proxy_fcgi:error] [pid 17425:tid 17463] [client 45.154.138.16:39571] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:17:31.090615 2026] [proxy_fcgi:error] [pid 17425:tid 17478] [client 45.154.138.16:39571] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:17:31.574953 2026] [:error] [pid 17425:tid 17482] [client 45.154.138.16:39571] [client 45.154.138.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/makeasmtp.php"] [unique_id "aXkra6rcODKH1Dl7aZAjbAAAAFQ"]
[Wed Jan 28 05:17:32.504895 2026] [:error] [pid 2454:tid 2462] [client 45.154.138.10:28993] [client 45.154.138.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/about.php"] [unique_id "aXkrbJvv4I21Ywd7NNbnFgAAAYQ"]
[Wed Jan 28 05:17:33.470820 2026] [proxy_fcgi:error] [pid 17424:tid 17454] [client 45.154.138.13:58083] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:17:33.940629 2026] [proxy_fcgi:error] [pid 17424:tid 17447] [client 45.154.138.13:58083] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:17:34.435617 2026] [proxy_fcgi:error] [pid 17424:tid 17454] [client 45.154.138.13:58083] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:17:34.909621 2026] [proxy_fcgi:error] [pid 17424:tid 17438] [client 45.154.138.13:58083] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:17:35.867107 2026] [proxy_fcgi:error] [pid 17424:tid 17438] [client 45.154.138.13:58083] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:17:37.736614 2026] [proxy_fcgi:error] [pid 17424:tid 17436] [client 45.154.138.13:58083] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:17:41.968602 2026] [proxy_fcgi:error] [pid 17424:tid 17436] [client 45.154.138.13:58083] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:17:42.449635 2026] [proxy_fcgi:error] [pid 17424:tid 17434] [client 45.154.138.13:58083] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:17:42.936456 2026] [proxy_fcgi:error] [pid 17424:tid 17433] [client 45.154.138.13:58083] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:17:43.864813 2026] [:error] [pid 17424:tid 17439] [client 45.154.138.13:58083] [client 45.154.138.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aXkrd2RvtDRvGDe-pItGHgAAAAY"]
[Wed Jan 28 05:17:46.672646 2026] [:error] [pid 58254:tid 58274] [client 45.154.138.1:48129] [client 45.154.138.1] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/bak.php"] [unique_id "aXkrevF8nSyBg9wOsa8RDAAAARI"]
[Wed Jan 28 05:17:47.599443 2026] [proxy_fcgi:error] [pid 58254:tid 58262] [client 45.154.138.48:61343] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:17:48.079650 2026] [:error] [pid 58254:tid 58272] [client 45.154.138.48:61343] [client 45.154.138.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aXkrfPF8nSyBg9wOsa8RGQAAARA"]
[Wed Jan 28 05:17:49.988621 2026] [proxy_fcgi:error] [pid 17426:tid 17510] [client 45.154.138.6:44547] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:17:50.922815 2026] [proxy_fcgi:error] [pid 17426:tid 17511] [client 45.154.138.6:44547] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:17:51.386332 2026] [:error] [pid 17426:tid 17498] [client 45.154.138.6:44547] [client 45.154.138.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dwelectservices.com.au"] [uri "/fm.php"] [unique_id "aXkrf08zvf_03BnziRf8kAAAAIk"]
[Wed Jan 28 05:17:52.311296 2026] [:error] [pid 58254:tid 58263] [client 45.154.138.46:28853] [client 45.154.138.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aXkrgPF8nSyBg9wOsa8RRQAAAQc"]
[Wed Jan 28 05:17:53.233475 2026] [:error] [pid 17426:tid 17503] [client 45.154.138.3:40091] [client 45.154.138.3] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.154.138.3, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-content/upgrade-temp-backup/wp-login.php"] [unique_id "aXkrgU8zvf_03BnziRf8qQAAAI4"]
[Wed Jan 28 05:17:53.730897 2026] [proxy_fcgi:error] [pid 17426:tid 17510] [client 45.154.138.3:40091] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:17:54.715925 2026] [:error] [pid 17426:tid 17492] [client 45.154.138.3:40091] [client 45.154.138.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/themes.php"] [unique_id "aXkrgk8zvf_03BnziRf8ugAAAIM"]
[Wed Jan 28 05:17:55.702719 2026] [proxy_fcgi:error] [pid 17426:tid 17511] [client 45.154.138.48:33765] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:17:56.671956 2026] [proxy_fcgi:error] [pid 17426:tid 17498] [client 45.154.138.48:33765] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:17:59.014893 2026] [:error] [pid 17426:tid 17510] [client 45.154.138.48:33765] [client 45.154.138.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/wp-includes_function.php"] [unique_id "aXkrh08zvf_03BnziRf9AgAAAJU"]
[Wed Jan 28 05:17:59.946604 2026] [proxy_fcgi:error] [pid 17425:tid 17464] [client 45.154.138.44:20651] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:18:00.930987 2026] [:error] [pid 17425:tid 17478] [client 45.154.138.44:20651] [client 45.154.138.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/about.php"] [unique_id "aXkriKrcODKH1Dl7aZAknAAAAFA"]
[Wed Jan 28 05:18:02.345614 2026] [proxy_fcgi:error] [pid 2454:tid 2469] [client 45.154.138.11:34649] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:18:02.809745 2026] [:error] [pid 2454:tid 2464] [client 45.154.138.11:34649] [client 45.154.138.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/codemirror/about.php"] [unique_id "aXkripvv4I21Ywd7NNbpIgAAAYY"]
[Wed Jan 28 05:18:09.077647 2026] [proxy_fcgi:error] [pid 17425:tid 17480] [client 45.154.138.9:51729] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:18:09.539761 2026] [:error] [pid 17425:tid 17476] [client 45.154.138.9:51729] [client 45.154.138.9] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.154.138.9, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-content/languages/themes/wp-login.php"] [unique_id "aXkrkarcODKH1Dl7aZAk7AAAAE4"]
[Wed Jan 28 05:18:10.930376 2026] [:error] [pid 17425:tid 17480] [client 45.154.138.9:51729] [client 45.154.138.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/block-supports/index.php"] [unique_id "aXkrkqrcODKH1Dl7aZAlBQAAAFI"]
[Wed Jan 28 05:18:11.898483 2026] [:error] [pid 64842:tid 64859] [client 45.154.138.36:24831] [client 45.154.138.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aXkrk1uAAQZ5AN_SnDb5HAAAAU8"]
[Wed Jan 28 05:18:14.262965 2026] [proxy_fcgi:error] [pid 64842:tid 64853] [client 45.154.138.39:39595] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:18:15.702613 2026] [proxy_fcgi:error] [pid 64842:tid 64863] [client 45.154.138.39:39595] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:18:16.663053 2026] [proxy_fcgi:error] [pid 64842:tid 64846] [client 45.154.138.39:39595] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:18:17.156630 2026] [proxy_fcgi:error] [pid 64842:tid 64845] [client 45.154.138.39:39595] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:18:18.093417 2026] [:error] [pid 64842:tid 64852] [client 45.154.138.39:39595] [client 45.154.138.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/block-patterns/about.php"] [unique_id "aXkrmluAAQZ5AN_SnDb5hQAAAUg"]
[Wed Jan 28 05:18:19.982791 2026] [:error] [pid 17425:tid 17466] [client 45.154.138.14:32391] [client 45.154.138.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aXkrm6rcODKH1Dl7aZAlZgAAAEQ"]
[Wed Jan 28 05:18:20.917886 2026] [:error] [pid 17535:tid 17540] [client 45.154.138.37:62063] [client 45.154.138.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/widgets/about.php"] [unique_id "aXkrnK3QiSMgVscnN5IX5wAAAMI"]
[Wed Jan 28 05:18:21.838359 2026] [:error] [pid 17425:tid 17463] [client 45.154.138.36:32933] [client 45.154.138.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/Content/index.php"] [unique_id "aXkrnarcODKH1Dl7aZAldAAAAEE"]
[Wed Jan 28 05:18:22.760210 2026] [:error] [pid 64842:tid 64848] [client 45.154.138.48:52013] [client 45.154.138.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aXkrnluAAQZ5AN_SnDb5twAAAUQ"]
[Wed Jan 28 05:18:25.574622 2026] [proxy_fcgi:error] [pid 17424:tid 17442] [client 45.154.138.50:61535] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:18:26.041962 2026] [:error] [pid 17424:tid 17433] [client 45.154.138.50:61535] [client 45.154.138.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/ID3/autoload_classmap.php"] [unique_id "aXkromRvtDRvGDe-pItINAAAAAA"]
[Wed Jan 28 05:18:27.443635 2026] [proxy_fcgi:error] [pid 17535:tid 17538] [client 45.154.138.35:62089] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:18:27.920275 2026] [proxy_fcgi:error] [pid 17535:tid 17542] [client 45.154.138.35:62089] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:18:28.387090 2026] [:error] [pid 17535:tid 17543] [client 45.154.138.35:62089] [client 45.154.138.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "aXkrpK3QiSMgVscnN5IYQAAAAMU"]
[Wed Jan 28 05:18:29.312604 2026] [proxy_fcgi:error] [pid 17425:tid 17480] [client 45.154.138.25:38499] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:18:29.783612 2026] [proxy_fcgi:error] [pid 17425:tid 17479] [client 45.154.138.25:38499] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:18:30.249683 2026] [:error] [pid 17425:tid 17480] [client 45.154.138.25:38499] [client 45.154.138.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aXkrpqrcODKH1Dl7aZAl0QAAAFI"]
[Wed Jan 28 05:18:31.251614 2026] [proxy_fcgi:error] [pid 17535:tid 17545] [client 45.154.138.47:32895] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:18:31.710441 2026] [:error] [pid 17535:tid 17543] [client 45.154.138.47:32895] [client 45.154.138.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/IXR/autoload_classmap.php"] [unique_id "aXkrp63QiSMgVscnN5IYbgAAAMU"]
[Wed Jan 28 05:18:34.041728 2026] [:error] [pid 17535:tid 17562] [client 45.154.138.23:51897] [client 45.154.138.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aXkrqq3QiSMgVscnN5IYkwAAANg"]
[Wed Jan 28 05:18:34.964905 2026] [:error] [pid 64842:tid 64866] [client 45.154.138.45:57207] [client 45.154.138.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/sitemaps/providers/zmFM.php"] [unique_id "aXkrqluAAQZ5AN_SnDb6PgAAAVY"]
[Wed Jan 28 05:18:36.377718 2026] [:error] [pid 17424:tid 17451] [client 45.154.138.37:31635] [client 45.154.138.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aXkrrGRvtDRvGDe-pItIzwAAABI"]
[Wed Jan 28 05:18:37.319997 2026] [proxy_fcgi:error] [pid 2454:tid 2469] [client 45.154.138.38:59425] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:18:38.280634 2026] [proxy_fcgi:error] [pid 2454:tid 2461] [client 45.154.138.38:59425] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:18:38.745496 2026] [:error] [pid 2454:tid 2471] [client 45.154.138.38:59425] [client 45.154.138.38] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.154.138.38, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/cgi-bin/wp-login.php"] [unique_id "aXkrrpvv4I21Ywd7NNbrMAAAAY0"]
[Wed Jan 28 05:18:39.681798 2026] [:error] [pid 2454:tid 2469] [client 45.154.138.38:59425] [client 45.154.138.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/sodium_compat/wp-login.php"] [unique_id "aXkrr5vv4I21Ywd7NNbrSgAAAYs"]
[Wed Jan 28 05:18:40.607779 2026] [:error] [pid 17426:tid 17498] [client 45.154.138.6:27593] [client 45.154.138.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "aXkrsE8zvf_03BnziRf_PgAAAIk"]
[Wed Jan 28 05:18:41.533605 2026] [proxy_fcgi:error] [pid 58254:tid 58277] [client 45.154.138.34:65369] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:18:42.029627 2026] [proxy_fcgi:error] [pid 58254:tid 58266] [client 45.154.138.34:65369] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:18:43.918827 2026] [proxy_fcgi:error] [pid 58254:tid 58268] [client 45.154.138.34:65369] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:18:45.356449 2026] [:error] [pid 58254:tid 58271] [client 45.154.138.34:65369] [client 45.154.138.34] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.154.138.34, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/wp-login.php"] [unique_id "aXkrtfF8nSyBg9wOsa8T4QAAAQ8"]
[Wed Jan 28 05:18:45.824178 2026] [:error] [pid 58254:tid 58278] [client 45.154.138.34:65369] [client 45.154.138.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aXkrtfF8nSyBg9wOsa8T5wAAARY"]
[Wed Jan 28 05:18:46.810931 2026] [:error] [pid 64842:tid 64855] [client 45.154.138.25:36489] [client 45.154.138.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Text/network.php"] [unique_id "aXkrtluAAQZ5AN_SnDb63gAAAUs"]
[Wed Jan 28 05:18:47.736055 2026] [:error] [pid 2454:tid 2474] [client 45.154.138.31:46661] [client 45.154.138.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/index.php"] [unique_id "aXkrt5vv4I21Ywd7NNbr1wAAAZA"]
[Wed Jan 28 05:18:50.091661 2026] [proxy_fcgi:error] [pid 17426:tid 17494] [client 45.154.138.37:53535] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:18:50.560123 2026] [:error] [pid 17426:tid 17498] [client 45.154.138.37:53535] [client 45.154.138.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/php-compat/autoload_classmap.php"] [unique_id "aXkruk8zvf_03BnziRf_sgAAAIk"]
[Wed Jan 28 05:18:51.973848 2026] [proxy_fcgi:error] [pid 2454:tid 2479] [client 45.154.138.11:62367] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:18:54.373599 2026] [proxy_fcgi:error] [pid 2454:tid 2463] [client 45.154.138.11:62367] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:18:55.808032 2026] [proxy_fcgi:error] [pid 2454:tid 2466] [client 45.154.138.11:62367] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:18:56.270638 2026] [:error] [pid 2454:tid 2478] [client 45.154.138.11:62367] [client 45.154.138.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aXkrwJvv4I21Ywd7NNbsrAAAAZQ"]
[Wed Jan 28 05:18:57.692601 2026] [proxy_fcgi:error] [pid 64842:tid 64868] [client 45.154.138.12:45409] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:18:58.620337 2026] [:error] [pid 64842:tid 64848] [client 45.154.138.12:45409] [client 45.154.138.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aXkrwluAAQZ5AN_SnDb7ZAAAAUQ"]
[Wed Jan 28 05:19:00.013199 2026] [proxy_fcgi:error] [pid 17426:tid 17502] [client 45.154.138.48:59207] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:19:01.496694 2026] [:error] [pid 17426:tid 17504] [client 45.154.138.48:59207] [client 45.154.138.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/IXR/about.php"] [unique_id "aXkrxU8zvf_03BnziRcADwAAAI8"]
[Wed Jan 28 05:19:02.903094 2026] [:error] [pid 64842:tid 64849] [client 45.154.138.23:59811] [client 45.154.138.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aXkrxluAAQZ5AN_SnDb7pQAAAUU"]
[Wed Jan 28 05:19:04.308939 2026] [:error] [pid 17424:tid 17453] [client 45.154.138.28:31713] [client 45.154.138.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aXkryGRvtDRvGDe-pItKIwAAABQ"]
[Wed Jan 28 05:19:05.697565 2026] [:error] [pid 64842:tid 64854] [client 45.154.138.37:37613] [client 45.154.138.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aXkryVuAAQZ5AN_SnDb7xAAAAUo"]
[Wed Jan 28 05:19:07.096703 2026] [:error] [pid 64842:tid 64852] [client 45.154.138.24:27833] [client 45.154.138.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aXkry1uAAQZ5AN_SnDb72AAAAUg"]
[Wed Jan 28 05:19:08.981700 2026] [:error] [pid 17424:tid 17454] [client 45.154.138.30:62781] [client 45.154.138.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aXkrzGRvtDRvGDe-pItKcwAAABU"]
[Wed Jan 28 05:19:10.390621 2026] [proxy_fcgi:error] [pid 2454:tid 2475] [client 45.154.138.8:33779] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:19:11.328380 2026] [:error] [pid 2454:tid 2479] [client 45.154.138.8:33779] [client 45.154.138.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aXkrz5vv4I21Ywd7NNbtogAAAZU"]
[Wed Jan 28 05:19:12.742770 2026] [proxy_fcgi:error] [pid 17535:tid 17538] [client 45.154.138.25:25265] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:19:13.250627 2026] [proxy_fcgi:error] [pid 17535:tid 17550] [client 45.154.138.25:25265] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:19:13.716828 2026] [:error] [pid 17535:tid 17561] [client 45.154.138.25:25265] [client 45.154.138.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aXkr0a3QiSMgVscnN5IalQAAANc"]
[Wed Jan 28 05:19:15.567661 2026] [:error] [pid 58254:tid 58262] [client 45.154.138.30:25469] [client 45.154.138.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "aXkr0_F8nSyBg9wOsa8VSwAAAQY"]
[Wed Jan 28 05:19:16.511655 2026] [proxy_fcgi:error] [pid 2454:tid 2460] [client 45.154.138.18:57513] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:19:17.450633 2026] [proxy_fcgi:error] [pid 2454:tid 2465] [client 45.154.138.18:57513] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:19:18.398662 2026] [proxy_fcgi:error] [pid 2454:tid 2465] [client 45.154.138.18:57513] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:19:18.861714 2026] [:error] [pid 2454:tid 2471] [client 45.154.138.18:57513] [client 45.154.138.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/autoload_classmap.php"] [unique_id "aXkr1pvv4I21Ywd7NNbuOAAAAY0"]
[Wed Jan 28 05:19:20.273679 2026] [proxy_fcgi:error] [pid 2454:tid 2468] [client 45.154.138.15:36015] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:19:21.737664 2026] [proxy_fcgi:error] [pid 2454:tid 2480] [client 45.154.138.15:36015] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:19:22.234949 2026] [proxy_fcgi:error] [pid 2454:tid 2477] [client 45.154.138.15:36015] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:19:23.649642 2026] [proxy_fcgi:error] [pid 2454:tid 2469] [client 45.154.138.15:36015] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:19:24.125055 2026] [proxy_fcgi:error] [pid 2454:tid 2471] [client 45.154.138.15:36015] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:19:25.998730 2026] [proxy_fcgi:error] [pid 2454:tid 2459] [client 45.154.138.15:36015] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:19:26.459909 2026] [:error] [pid 2454:tid 2460] [client 45.154.138.15:36015] [client 45.154.138.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Text/autoload_classmap.php"] [unique_id "aXkr3pvv4I21Ywd7NNbu1wAAAYI"]
[Wed Jan 28 05:19:27.386722 2026] [:error] [pid 17426:tid 17502] [client 45.154.138.23:55035] [client 45.154.138.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aXkr308zvf_03BnziRcBrwAAAI0"]
[Wed Jan 28 05:19:28.323613 2026] [proxy_fcgi:error] [pid 17424:tid 17450] [client 45.154.138.24:39547] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:19:28.811315 2026] [proxy_fcgi:error] [pid 17424:tid 17456] [client 45.154.138.24:39547] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:19:29.312624 2026] [proxy_fcgi:error] [pid 17424:tid 17449] [client 45.154.138.24:39547] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:19:29.802514 2026] [:error] [pid 17424:tid 17456] [client 45.154.138.24:39547] [client 45.154.138.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/html-api/index.php"] [unique_id "aXkr4WRvtDRvGDe-pItLWAAAABc"]
[Wed Jan 28 05:19:30.763758 2026] [:error] [pid 2454:tid 2481] [client 45.154.138.48:53233] [client 45.154.138.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aXkr4pvv4I21Ywd7NNbvHwAAAZc"]
[Wed Jan 28 05:19:31.803875 2026] [proxy_fcgi:error] [pid 2454:tid 2473] [client 45.154.138.23:65013] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:19:32.268604 2026] [:error] [pid 2454:tid 2472] [client 45.154.138.23:65013] [client 45.154.138.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/fonts/wp-login.php"] [unique_id "aXkr5Jvv4I21Ywd7NNbvNQAAAY4"]
[Wed Jan 28 05:19:33.206621 2026] [proxy_fcgi:error] [pid 17424:tid 17454] [client 45.154.138.5:28673] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:19:33.697633 2026] [proxy_fcgi:error] [pid 17424:tid 17451] [client 45.154.138.5:28673] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:19:34.189634 2026] [proxy_fcgi:error] [pid 17424:tid 17449] [client 45.154.138.5:28673] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:19:35.180628 2026] [proxy_fcgi:error] [pid 17424:tid 17451] [client 45.154.138.5:28673] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:19:35.658613 2026] [proxy_fcgi:error] [pid 17424:tid 17445] [client 45.154.138.5:28673] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:19:36.118246 2026] [:error] [pid 17424:tid 17442] [client 45.154.138.5:28673] [client 45.154.138.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aXkr6GRvtDRvGDe-pItLowAAAAk"]
[Wed Jan 28 05:19:37.524568 2026] [:error] [pid 64842:tid 64865] [client 45.154.138.25:22881] [client 45.154.138.25] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.154.138.25, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "aXkr6VuAAQZ5AN_SnDb9cQAAAVU"]
[Wed Jan 28 05:19:37.991565 2026] [proxy_fcgi:error] [pid 64842:tid 64852] [client 45.154.138.25:22881] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:19:38.450441 2026] [:error] [pid 64842:tid 64844] [client 45.154.138.25:22881] [client 45.154.138.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aXkr6luAAQZ5AN_SnDb9hgAAAUA"]
[Wed Jan 28 05:19:42.729561 2026] [:error] [pid 64842:tid 64853] [client 45.154.138.27:51269] [client 45.154.138.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Text/index.php"] [unique_id "aXkr7luAAQZ5AN_SnDb9wAAAAUk"]
[Wed Jan 28 05:19:44.125558 2026] [proxy_fcgi:error] [pid 64842:tid 64848] [client 45.154.138.11:39959] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:19:44.605659 2026] [proxy_fcgi:error] [pid 64842:tid 64865] [client 45.154.138.11:39959] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:19:45.069672 2026] [:error] [pid 64842:tid 64847] [client 45.154.138.11:39959] [client 45.154.138.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/dist/autoload_classmap.php"] [unique_id "aXkr8VuAAQZ5AN_SnDb92wAAAUM"]
[Wed Jan 28 05:19:46.013633 2026] [proxy_fcgi:error] [pid 17425:tid 17468] [client 45.154.138.32:31837] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:19:46.492505 2026] [:error] [pid 17425:tid 17467] [client 45.154.138.32:31837] [client 45.154.138.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/rk2.php"] [unique_id "aXkr8qrcODKH1Dl7aZAqAAAAAEU"]
[Wed Jan 28 05:19:47.947631 2026] [proxy_fcgi:error] [pid 58254:tid 58265] [client 45.154.138.20:42503] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:19:48.430619 2026] [proxy_fcgi:error] [pid 58254:tid 58263] [client 45.154.138.20:42503] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:19:48.903725 2026] [proxy_fcgi:error] [pid 58254:tid 58262] [client 45.154.138.20:42503] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:19:51.315665 2026] [proxy_fcgi:error] [pid 58254:tid 58270] [client 45.154.138.20:42503] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:19:51.799614 2026] [proxy_fcgi:error] [pid 58254:tid 58260] [client 45.154.138.20:42503] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:19:52.747416 2026] [:error] [pid 58254:tid 58263] [client 45.154.138.20:42503] [client 45.154.138.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/plugin.php"] [unique_id "aXkr-PF8nSyBg9wOsa8XcQAAAQc"]
[Wed Jan 28 05:19:53.707908 2026] [proxy_fcgi:error] [pid 17424:tid 17433] [client 45.154.138.13:51967] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:19:54.668684 2026] [proxy_fcgi:error] [pid 17424:tid 17451] [client 45.154.138.13:51967] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:19:55.167379 2026] [:error] [pid 17424:tid 17434] [client 45.154.138.13:51967] [client 45.154.138.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/tinymce/wp-tinymce.php"] [unique_id "aXkr-2RvtDRvGDe-pItMWgAAAAE"]
[Wed Jan 28 05:19:56.577649 2026] [proxy_fcgi:error] [pid 58254:tid 58262] [client 45.154.138.35:31415] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:19:57.045608 2026] [proxy_fcgi:error] [pid 58254:tid 58257] [client 45.154.138.35:31415] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:19:57.517483 2026] [:error] [pid 58254:tid 58274] [client 45.154.138.35:31415] [client 45.154.138.35] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.154.138.35, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aXkr_fF8nSyBg9wOsa8XtQAAARI"]
[Wed Jan 28 05:19:57.533668 2026] [proxy_fcgi:error] [pid 58254:tid 58274] [client 45.154.138.35:31415] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:19:58.954003 2026] [proxy_fcgi:error] [pid 58254:tid 58269] [client 45.154.138.35:31415] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:19:59.424620 2026] [proxy_fcgi:error] [pid 58254:tid 58275] [client 45.154.138.35:31415] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:20:00.371358 2026] [:error] [pid 58254:tid 58270] [client 45.154.138.35:31415] [client 45.154.138.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/mah.php"] [unique_id "aXksAPF8nSyBg9wOsa8X5wAAAQ4"]
[Wed Jan 28 05:20:01.414678 2026] [:error] [pid 58254:tid 58275] [client 45.154.138.2:57141] [client 45.154.138.2] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.154.138.2, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/colors/sunrise/wp-login.php"] [unique_id "aXksAfF8nSyBg9wOsa8X9gAAARM"]
[Wed Jan 28 05:20:01.886815 2026] [:error] [pid 58254:tid 58267] [client 45.154.138.2:57141] [client 45.154.138.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/customize/lmfi.php"] [unique_id "aXksAfF8nSyBg9wOsa8X_QAAAQs"]
[Wed Jan 28 05:20:08.258614 2026] [proxy_fcgi:error] [pid 17424:tid 17454] [client 45.154.138.1:34411] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:20:09.652023 2026] [:error] [pid 17424:tid 17455] [client 45.154.138.1:34411] [client 45.154.138.1] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "aXksCWRvtDRvGDe-pItM2gAAABY"]
[Wed Jan 28 05:20:10.582643 2026] [proxy_fcgi:error] [pid 17425:tid 17471] [client 45.154.138.26:33391] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:20:11.516992 2026] [:error] [pid 17425:tid 17474] [client 45.154.138.26:33391] [client 45.154.138.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aXksC6rcODKH1Dl7aZAq9wAAAEw"]
[Wed Jan 28 05:20:16.043493 2026] [:error] [pid 17426:tid 17488] [client 45.154.138.23:58339] [client 45.154.138.23] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.154.138.23, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/colors/light/wp-login.php"] [unique_id "aXksEE8zvf_03BnziRcEIwAAAIA"]
[Wed Jan 28 05:20:17.453824 2026] [proxy_fcgi:error] [pid 17426:tid 17495] [client 45.154.138.23:58339] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:20:17.933636 2026] [proxy_fcgi:error] [pid 17426:tid 17490] [client 45.154.138.23:58339] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:20:18.417232 2026] [proxy_fcgi:error] [pid 17426:tid 17488] [client 45.154.138.23:58339] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:20:19.363616 2026] [proxy_fcgi:error] [pid 17426:tid 17504] [client 45.154.138.23:58339] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:20:19.823681 2026] [:error] [pid 17426:tid 17493] [client 45.154.138.23:58339] [client 45.154.138.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/button/index.php"] [unique_id "aXksE08zvf_03BnziRcEXQAAAIQ"]
[Wed Jan 28 05:20:21.210862 2026] [:error] [pid 58254:tid 58263] [client 45.154.138.41:61435] [client 45.154.138.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/packed.php"] [unique_id "aXksFfF8nSyBg9wOsa8Y_wAAAQc"]
[Wed Jan 28 05:20:23.146624 2026] [proxy_fcgi:error] [pid 58254:tid 58265] [client 45.154.138.17:47849] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:20:23.655625 2026] [proxy_fcgi:error] [pid 58254:tid 58259] [client 45.154.138.17:47849] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:20:25.113616 2026] [proxy_fcgi:error] [pid 58254:tid 58274] [client 45.154.138.17:47849] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:20:25.586725 2026] [proxy_fcgi:error] [pid 58254:tid 58272] [client 45.154.138.17:47849] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:20:27.027167 2026] [:error] [pid 58254:tid 58257] [client 45.154.138.17:47849] [client 45.154.138.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/file.php"] [unique_id "aXksG_F8nSyBg9wOsa8ZNgAAAQE"]
[Wed Jan 28 05:20:28.541970 2026] [:error] [pid 17425:tid 17487] [client 45.154.138.42:54469] [client 45.154.138.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/chosen.php"] [unique_id "aXksHKrcODKH1Dl7aZAr6QAAAFg"]
[Wed Jan 28 05:20:29.974561 2026] [:error] [pid 17426:tid 17513] [client 45.154.138.11:50465] [client 45.154.138.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/Cache/about.php"] [unique_id "aXksHU8zvf_03BnziRcE1QAAAJg"]
[Wed Jan 28 05:20:30.904605 2026] [proxy_fcgi:error] [pid 17425:tid 17471] [client 45.154.138.23:47951] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:20:32.788618 2026] [:error] [pid 17425:tid 17471] [client 45.154.138.23:47951] [client 45.154.138.23] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.154.138.23, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-content/languages/wp-login.php"] [unique_id "aXksIKrcODKH1Dl7aZAsMAAAAEk"]
[Wed Jan 28 05:20:33.261771 2026] [:error] [pid 17425:tid 17476] [client 45.154.138.23:47951] [client 45.154.138.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aXksIarcODKH1Dl7aZAsNQAAAE4"]
[Wed Jan 28 05:20:35.653636 2026] [proxy_fcgi:error] [pid 17425:tid 17464] [client 45.154.138.31:53921] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:20:36.163634 2026] [proxy_fcgi:error] [pid 17425:tid 17487] [client 45.154.138.31:53921] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:20:37.108353 2026] [:error] [pid 17425:tid 17475] [client 45.154.138.31:53921] [client 45.154.138.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aXksJarcODKH1Dl7aZAsZwAAAE0"]
[Wed Jan 28 05:20:38.044039 2026] [:error] [pid 58254:tid 58272] [client 45.154.138.18:29041] [client 45.154.138.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Text/wp-login.php"] [unique_id "aXksJvF8nSyBg9wOsa8ZwAAAARA"]
[Wed Jan 28 05:20:38.987682 2026] [proxy_fcgi:error] [pid 58254:tid 58272] [client 45.154.138.19:48251] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:20:40.968632 2026] [proxy_fcgi:error] [pid 58254:tid 58270] [client 45.154.138.19:48251] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:20:42.383606 2026] [proxy_fcgi:error] [pid 58254:tid 58267] [client 45.154.138.19:48251] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:20:42.846429 2026] [:error] [pid 58254:tid 58272] [client 45.154.138.19:48251] [client 45.154.138.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/function.php"] [unique_id "aXksKvF8nSyBg9wOsa8aAAAAARA"]
[Wed Jan 28 05:20:43.776101 2026] [proxy_fcgi:error] [pid 17425:tid 17473] [client 45.154.138.42:56263] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:20:44.249084 2026] [proxy_fcgi:error] [pid 17425:tid 17462] [client 45.154.138.42:56263] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:20:47.380287 2026] [:error] [pid 17425:tid 17468] [client 45.154.138.42:56263] [client 45.154.138.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/votes.php"] [unique_id "aXksL6rcODKH1Dl7aZAs6QAAAEY"]
[Wed Jan 28 05:20:50.202825 2026] [proxy_fcgi:error] [pid 17426:tid 17497] [client 45.154.138.3:59329] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:20:51.141635 2026] [proxy_fcgi:error] [pid 17426:tid 17501] [client 45.154.138.3:59329] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:20:52.108104 2026] [:error] [pid 17426:tid 17500] [client 45.154.138.3:59329] [client 45.154.138.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/certificates/file.php"] [unique_id "aXksNE8zvf_03BnziRcF9gAAAIs"]
[Wed Jan 28 05:20:54.923353 2026] [:error] [pid 2454:tid 2459] [client 45.154.138.5:39291] [client 45.154.138.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/fonts/parx.php"] [unique_id "aXksNpvv4I21Ywd7NNb0YwAAAYE"]
[Wed Jan 28 05:20:57.309799 2026] [proxy_fcgi:error] [pid 17425:tid 17477] [client 45.154.138.47:28701] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:20:58.742999 2026] [proxy_fcgi:error] [pid 17425:tid 17485] [client 45.154.138.47:28701] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:20:59.212432 2026] [proxy_fcgi:error] [pid 17425:tid 17477] [client 45.154.138.47:28701] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:20:59.693597 2026] [proxy_fcgi:error] [pid 17425:tid 17486] [client 45.154.138.47:28701] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:21:00.157465 2026] [:error] [pid 17425:tid 17467] [client 45.154.138.47:28701] [client 45.154.138.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/dist/components/about.php"] [unique_id "aXksPKrcODKH1Dl7aZAtYgAAAEU"]
[Wed Jan 28 05:21:01.249633 2026] [proxy_fcgi:error] [pid 17535:tid 17552] [client 45.154.138.27:37573] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:21:01.722647 2026] [proxy_fcgi:error] [pid 17535:tid 17559] [client 45.154.138.27:37573] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:21:03.148639 2026] [proxy_fcgi:error] [pid 17535:tid 17554] [client 45.154.138.27:37573] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:21:03.617323 2026] [:error] [pid 17535:tid 17550] [client 45.154.138.27:37573] [client 45.154.138.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "aXksP63QiSMgVscnN5IgZQAAAMw"]
[Wed Jan 28 05:21:04.550673 2026] [proxy_fcgi:error] [pid 64842:tid 64866] [client 45.154.138.29:22483] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:21:05.043657 2026] [proxy_fcgi:error] [pid 64842:tid 64865] [client 45.154.138.29:22483] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:21:06.021589 2026] [proxy_fcgi:error] [pid 64842:tid 64854] [client 45.154.138.29:22483] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:21:07.003619 2026] [proxy_fcgi:error] [pid 64842:tid 64850] [client 45.154.138.29:22483] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:21:08.448094 2026] [:error] [pid 64842:tid 64861] [client 45.154.138.29:22483] [client 45.154.138.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/item.php"] [unique_id "aXksRFuAAQZ5AN_SnDYB5AAAAVE"]
[Wed Jan 28 05:21:12.266349 2026] [:error] [pid 17425:tid 17473] [client 45.154.138.6:61785] [client 45.154.138.6] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.154.138.6, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/.well-known/pki-validation/wp-login.php"] [unique_id "aXksSKrcODKH1Dl7aZAtwAAAAEs"]
[Wed Jan 28 05:21:12.731632 2026] [:error] [pid 17425:tid 17467] [client 45.154.138.6:61785] [client 45.154.138.6] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.154.138.6, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/classic-editor/wp-login.php"] [unique_id "aXksSKrcODKH1Dl7aZAtwwAAAEU"]
[Wed Jan 28 05:21:13.199118 2026] [:error] [pid 17425:tid 17481] [client 45.154.138.6:61785] [client 45.154.138.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/mani.php"] [unique_id "aXksSarcODKH1Dl7aZAtxgAAAFM"]
[Wed Jan 28 05:21:14.133612 2026] [proxy_fcgi:error] [pid 2454:tid 2460] [client 45.154.138.29:49439] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:21:15.562638 2026] [proxy_fcgi:error] [pid 2454:tid 2479] [client 45.154.138.29:49439] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:21:17.920466 2026] [:error] [pid 2454:tid 2466] [client 45.154.138.29:49439] [client 45.154.138.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/network.php"] [unique_id "aXksTZvv4I21Ywd7NNb15gAAAYg"]
[Wed Jan 28 05:21:18.860584 2026] [proxy_fcgi:error] [pid 58254:tid 58266] [client 45.154.138.46:46331] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:21:19.339635 2026] [proxy_fcgi:error] [pid 58254:tid 58259] [client 45.154.138.46:46331] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:21:19.811768 2026] [:error] [pid 58254:tid 58263] [client 45.154.138.46:46331] [client 45.154.138.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "aXksT_F8nSyBg9wOsa8cDwAAAQc"]
[Wed Jan 28 05:21:22.667621 2026] [proxy_fcgi:error] [pid 17425:tid 17478] [client 45.154.138.8:39935] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:21:23.596828 2026] [:error] [pid 17425:tid 17477] [client 45.154.138.8:39935] [client 45.154.138.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/colors/about.php"] [unique_id "aXksU6rcODKH1Dl7aZAuFgAAAE8"]
[Wed Jan 28 05:21:25.008613 2026] [proxy_fcgi:error] [pid 2454:tid 2473] [client 45.154.138.2:47007] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:21:25.937440 2026] [:error] [pid 2454:tid 2474] [client 45.154.138.2:47007] [client 45.154.138.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "aXksVZvv4I21Ywd7NNb2XgAAAZA"]
[Wed Jan 28 05:21:26.858474 2026] [:error] [pid 17425:tid 17486] [client 45.154.138.4:31537] [client 45.154.138.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/block-supports/about.php"] [unique_id "aXksVqrcODKH1Dl7aZAuOAAAAFc"]
[Wed Jan 28 05:21:28.260631 2026] [proxy_fcgi:error] [pid 64842:tid 64866] [client 45.154.138.13:55557] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:21:29.671457 2026] [:error] [pid 64842:tid 64853] [client 45.154.138.13:55557] [client 45.154.138.13] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.154.138.13, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-content/wp-login.php"] [unique_id "aXksWVuAAQZ5AN_SnDYC6AAAAUk"]
[Wed Jan 28 05:21:31.568748 2026] [:error] [pid 64842:tid 64861] [client 45.154.138.13:55557] [client 45.154.138.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/PHPMailer/file.php"] [unique_id "aXksW1uAAQZ5AN_SnDYDCgAAAVE"]
[Wed Jan 28 05:21:32.533724 2026] [proxy_fcgi:error] [pid 17426:tid 17505] [client 45.154.138.1:38813] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:21:33.007422 2026] [:error] [pid 17426:tid 17497] [client 45.154.138.1:38813] [client 45.154.138.1] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Requests/xBrain.php"] [unique_id "aXksXU8zvf_03BnziRcH4QAAAIg"]
[Wed Jan 28 05:21:33.925796 2026] [:error] [pid 17426:tid 17495] [client 45.154.138.17:30475] [client 45.154.138.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "aXksXU8zvf_03BnziRcH9gAAAIY"]
[Wed Jan 28 05:21:35.309528 2026] [:error] [pid 17535:tid 17539] [client 45.154.138.11:35065] [client 45.154.138.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aXksX63QiSMgVscnN5Ih9wAAAME"]
[Wed Jan 28 05:21:38.613628 2026] [proxy_fcgi:error] [pid 17425:tid 17478] [client 45.154.138.7:22767] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:21:39.549401 2026] [:error] [pid 17425:tid 17470] [client 45.154.138.7:22767] [client 45.154.138.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/dist/widgets/about.php"] [unique_id "aXksY6rcODKH1Dl7aZAu1wAAAEg"]
[Wed Jan 28 05:21:40.969671 2026] [proxy_fcgi:error] [pid 17426:tid 17500] [client 45.154.138.45:50747] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:21:46.233722 2026] [proxy_fcgi:error] [pid 17426:tid 17492] [client 45.154.138.45:50747] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:21:48.098784 2026] [proxy_fcgi:error] [pid 17426:tid 17494] [client 45.154.138.45:50747] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:21:48.566749 2026] [proxy_fcgi:error] [pid 17426:tid 17492] [client 45.154.138.45:50747] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:21:49.039603 2026] [proxy_fcgi:error] [pid 17426:tid 17513] [client 45.154.138.45:50747] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:21:49.569609 2026] [proxy_fcgi:error] [pid 17426:tid 17504] [client 45.154.138.45:50747] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:21:50.590666 2026] [proxy_fcgi:error] [pid 17426:tid 17497] [client 45.154.138.45:50747] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:21:51.986846 2026] [:error] [pid 17426:tid 17490] [client 45.154.138.45:50747] [client 45.154.138.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/radio.php"] [unique_id "aXksb08zvf_03BnziRcJEAAAAIE"]
[Wed Jan 28 05:21:53.383756 2026] [proxy_fcgi:error] [pid 17426:tid 17493] [client 45.154.138.47:50843] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:21:53.864630 2026] [proxy_fcgi:error] [pid 17426:tid 17498] [client 45.154.138.47:50843] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:21:54.345992 2026] [proxy_fcgi:error] [pid 17426:tid 17513] [client 45.154.138.47:50843] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:21:54.828941 2026] [proxy_fcgi:error] [pid 17426:tid 17490] [client 45.154.138.47:50843] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:21:55.772274 2026] [proxy_fcgi:error] [pid 17426:tid 17501] [client 45.154.138.47:50843] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:21:56.259658 2026] [proxy_fcgi:error] [pid 17426:tid 17498] [client 45.154.138.47:50843] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:21:57.207685 2026] [:error] [pid 17426:tid 17493] [client 45.154.138.47:50843] [client 45.154.138.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/sodium_compat/src/Core/Curve25519/Ge/wp_blog.php"] [unique_id "aXksdU8zvf_03BnziRcJUwAAAIQ"]
[Wed Jan 28 05:22:00.492713 2026] [:error] [pid 2454:tid 2466] [client 45.154.138.2:60623] [client 45.154.138.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "aXkseJvv4I21Ywd7NNb4EwAAAYg"]
[Wed Jan 28 05:22:01.974134 2026] [:error] [pid 17425:tid 17476] [client 45.154.138.14:22743] [client 45.154.138.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/fonts/index.php"] [unique_id "aXksearcODKH1Dl7aZAv7gAAAE4"]
[Wed Jan 28 05:22:02.913605 2026] [proxy_fcgi:error] [pid 58254:tid 58262] [client 45.154.138.34:57931] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:22:03.406620 2026] [proxy_fcgi:error] [pid 58254:tid 58268] [client 45.154.138.34:57931] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:22:03.875606 2026] [proxy_fcgi:error] [pid 58254:tid 58279] [client 45.154.138.34:57931] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:22:04.813743 2026] [proxy_fcgi:error] [pid 58254:tid 58278] [client 45.154.138.34:57931] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:22:05.315636 2026] [proxy_fcgi:error] [pid 58254:tid 58279] [client 45.154.138.34:57931] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:22:05.788894 2026] [proxy_fcgi:error] [pid 58254:tid 58274] [client 45.154.138.34:57931] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:22:06.262499 2026] [:error] [pid 58254:tid 58267] [client 45.154.138.34:57931] [client 45.154.138.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/tinymce/plugins/compat3x/css/index.php"] [unique_id "aXksfvF8nSyBg9wOsa8eowAAAQs"]
[Wed Jan 28 05:22:07.181204 2026] [:error] [pid 17426:tid 17492] [client 45.154.138.46:51257] [client 45.154.138.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Requests/Text/index.php"] [unique_id "aXksf08zvf_03BnziRcJzQAAAIM"]
[Wed Jan 28 05:22:09.028518 2026] [:error] [pid 64842:tid 64846] [client 45.154.138.39:62745] [client 45.154.138.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/random_compat/about.php"] [unique_id "aXksgVuAAQZ5AN_SnDYElgAAAUI"]
[Wed Jan 28 05:22:10.427093 2026] [proxy_fcgi:error] [pid 2454:tid 2467] [client 45.154.138.35:59167] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:22:10.917762 2026] [proxy_fcgi:error] [pid 2454:tid 2459] [client 45.154.138.35:59167] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:22:11.415032 2026] [proxy_fcgi:error] [pid 2454:tid 2461] [client 45.154.138.35:59167] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:22:11.886610 2026] [proxy_fcgi:error] [pid 2454:tid 2459] [client 45.154.138.35:59167] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:22:12.368745 2026] [proxy_fcgi:error] [pid 2454:tid 2463] [client 45.154.138.35:59167] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:22:12.842607 2026] [proxy_fcgi:error] [pid 2454:tid 2477] [client 45.154.138.35:59167] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:22:13.310057 2026] [proxy_fcgi:error] [pid 2454:tid 2467] [client 45.154.138.35:59167] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:22:13.789024 2026] [proxy_fcgi:error] [pid 2454:tid 2465] [client 45.154.138.35:59167] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:22:14.259652 2026] [proxy_fcgi:error] [pid 2454:tid 2463] [client 45.154.138.35:59167] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:22:14.793684 2026] [proxy_fcgi:error] [pid 2454:tid 2480] [client 45.154.138.35:59167] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:22:15.266957 2026] [proxy_fcgi:error] [pid 2454:tid 2481] [client 45.154.138.35:59167] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:22:15.743625 2026] [proxy_fcgi:error] [pid 2454:tid 2474] [client 45.154.138.35:59167] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:22:16.227624 2026] [proxy_fcgi:error] [pid 2454:tid 2465] [client 45.154.138.35:59167] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:22:16.722615 2026] [proxy_fcgi:error] [pid 2454:tid 2477] [client 45.154.138.35:59167] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:22:17.199117 2026] [proxy_fcgi:error] [pid 2454:tid 2476] [client 45.154.138.35:59167] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:22:17.678603 2026] [proxy_fcgi:error] [pid 2454:tid 2474] [client 45.154.138.35:59167] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:22:18.149600 2026] [proxy_fcgi:error] [pid 2454:tid 2469] [client 45.154.138.35:59167] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:22:18.636641 2026] [proxy_fcgi:error] [pid 2454:tid 2463] [client 45.154.138.35:59167] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:22:19.110616 2026] [proxy_fcgi:error] [pid 2454:tid 2477] [client 45.154.138.35:59167] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:22:19.591615 2026] [proxy_fcgi:error] [pid 2454:tid 2458] [client 45.154.138.35:59167] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:22:20.064623 2026] [proxy_fcgi:error] [pid 2454:tid 2476] [client 45.154.138.35:59167] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:22:20.545636 2026] [proxy_fcgi:error] [pid 2454:tid 2466] [client 45.154.138.35:59167] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:22:21.058621 2026] [proxy_fcgi:error] [pid 2454:tid 2463] [client 45.154.138.35:59167] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:22:21.523643 2026] [proxy_fcgi:error] [pid 2454:tid 2462] [client 45.154.138.35:59167] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:22:21.992652 2026] [proxy_fcgi:error] [pid 2454:tid 2475] [client 45.154.138.35:59167] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:22:22.470620 2026] [proxy_fcgi:error] [pid 2454:tid 2481] [client 45.154.138.35:59167] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:22:22.947992 2026] [proxy_fcgi:error] [pid 2454:tid 2463] [client 45.154.138.35:59167] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:22:23.455682 2026] [proxy_fcgi:error] [pid 2454:tid 2465] [client 45.154.138.35:59167] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:22:23.947604 2026] [proxy_fcgi:error] [pid 2454:tid 2460] [client 45.154.138.35:59167] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:22:24.406239 2026] [:error] [pid 2454:tid 2463] [client 45.154.138.35:59167] [client 45.154.138.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/include.php"] [unique_id "aXkskJvv4I21Ywd7NNb5awAAAYU"]
[Wed Jan 28 05:22:25.339062 2026] [proxy_fcgi:error] [pid 58254:tid 58272] [client 45.154.138.24:25995] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:22:25.821788 2026] [proxy_fcgi:error] [pid 58254:tid 58266] [client 45.154.138.24:25995] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:22:26.311639 2026] [proxy_fcgi:error] [pid 58254:tid 58261] [client 45.154.138.24:25995] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:22:26.816156 2026] [proxy_fcgi:error] [pid 58254:tid 58277] [client 45.154.138.24:25995] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:22:27.284617 2026] [proxy_fcgi:error] [pid 58254:tid 58268] [client 45.154.138.24:25995] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:22:27.761631 2026] [proxy_fcgi:error] [pid 58254:tid 58276] [client 45.154.138.24:25995] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:22:28.235500 2026] [proxy_fcgi:error] [pid 58254:tid 58258] [client 45.154.138.24:25995] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:22:28.746665 2026] [proxy_fcgi:error] [pid 58254:tid 58276] [client 45.154.138.24:25995] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:22:29.681601 2026] [proxy_fcgi:error] [pid 58254:tid 58266] [client 45.154.138.24:25995] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:22:30.147359 2026] [:error] [pid 58254:tid 58272] [client 45.154.138.24:25995] [client 45.154.138.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/fonts/css.php"] [unique_id "aXkslvF8nSyBg9wOsa8fmwAAARA"]
[Wed Jan 28 05:22:32.642963 2026] [proxy_fcgi:error] [pid 17535:tid 17546] [client 45.154.138.21:60501] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:22:34.123617 2026] [proxy_fcgi:error] [pid 17535:tid 17550] [client 45.154.138.21:60501] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:22:37.447968 2026] [:error] [pid 17535:tid 17554] [client 45.154.138.21:60501] [client 45.154.138.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/wso112233.php"] [unique_id "aXksna3QiSMgVscnN5IkugAAANA"]
[Wed Jan 28 05:22:38.380601 2026] [:error] [pid 17425:tid 17463] [client 45.154.138.50:51457] [client 45.154.138.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/shell20211028.php"] [unique_id "aXksnqrcODKH1Dl7aZAyLAAAAEE"]
[Wed Jan 28 05:22:40.230445 2026] [:error] [pid 58254:tid 58273] [client 45.154.138.5:62231] [client 45.154.138.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/dropdown.php"] [unique_id "aXksoPF8nSyBg9wOsa8gIQAAARE"]
[Wed Jan 28 05:22:41.611412 2026] [:error] [pid 17424:tid 17454] [client 45.154.138.9:27423] [client 45.154.138.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/repeater.php"] [unique_id "aXksoWRvtDRvGDe-pItUGwAAABU"]
[Wed Jan 28 05:22:43.946679 2026] [proxy_fcgi:error] [pid 17426:tid 17497] [client 45.154.138.44:41895] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:22:44.422622 2026] [proxy_fcgi:error] [pid 17426:tid 17508] [client 45.154.138.44:41895] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:22:45.360620 2026] [proxy_fcgi:error] [pid 17426:tid 17496] [client 45.154.138.44:41895] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:22:49.080120 2026] [:error] [pid 17426:tid 17508] [client 45.154.138.44:41895] [client 45.154.138.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/test.php"] [unique_id "aXksqU8zvf_03BnziRcMcAAAAJM"]
[Wed Jan 28 05:22:50.029819 2026] [:error] [pid 17426:tid 17490] [client 45.154.138.23:43069] [client 45.154.138.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/sitemaps/providers/ultra.php"] [unique_id "aXksqk8zvf_03BnziRcMggAAAIE"]
[Wed Jan 28 05:22:51.434049 2026] [:error] [pid 17426:tid 17498] [client 45.154.138.22:57481] [client 45.154.138.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/options.php"] [unique_id "aXksq08zvf_03BnziRcMnAAAAIk"]
[Wed Jan 28 05:22:52.362858 2026] [proxy_fcgi:error] [pid 2454:tid 2460] [client 45.154.138.20:56109] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:22:53.287404 2026] [:error] [pid 2454:tid 2474] [client 45.154.138.20:56109] [client 45.154.138.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/gzdecode.php"] [unique_id "aXksrZvv4I21Ywd7NNb7MwAAAZA"]
[Wed Jan 28 05:22:54.209802 2026] [:error] [pid 58254:tid 58267] [client 45.154.138.15:28299] [client 45.154.138.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/wp-includes/atomlib.php"] [unique_id "aXksrvF8nSyBg9wOsa8g8wAAAQs"]
[Wed Jan 28 05:23:11.080235 2026] [autoindex:error] [pid 64842:tid 64844] [client 45.154.138.1:35629] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 28 05:24:00.649235 2026] [:error] [pid 64842:tid 64860] [client 45.154.138.1:35629] [client 45.154.138.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/Uwogh-Segs/"] [unique_id "aXks8FuAAQZ5AN_SnDYLWgAAAVA"]
[Wed Jan 28 05:24:04.458641 2026] [:error] [pid 17424:tid 17449] [client 45.154.138.26:42521] [client 45.154.138.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/zaen/includes/"] [unique_id "aXks9GRvtDRvGDe-pItXoQAAABA"]
[Wed Jan 28 05:24:14.963733 2026] [autoindex:error] [pid 58254:tid 58262] [client 45.154.138.101:47083] AH01276: Cannot serve directory /home/dwelects/public_html/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 28 05:24:31.379857 2026] [:error] [pid 58254:tid 58262] [client 45.154.138.101:47083] [client 45.154.138.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/digital-download/"] [unique_id "aXktD_F8nSyBg9wOsa8mCgAAAQY"]
[Wed Jan 28 05:26:19.761565 2026] [:error] [pid 17425:tid 17468] [client 45.154.138.10:41229] [client 45.154.138.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/themes/finley/"] [unique_id "aXkte6rcODKH1Dl7aZA9HgAAAEY"]
[Wed Jan 28 23:15:50.838693 2026] [:error] [pid 24482:tid 24501] [client 213.209.159.151:45682] [client 213.209.159.151] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/"] [unique_id "aXooJqLaUZr_xWekSHPH7wAAAc8"]
[Thu Jan 29 01:31:21.710828 2026] [proxy_fcgi:error] [pid 32302:tid 32309] [client 20.48.32.42:4909] AH01071: Got error 'Primary script unknown'
[Thu Jan 29 01:31:21.863109 2026] [proxy_fcgi:error] [pid 32302:tid 32319] [client 20.48.32.42:4909] AH01071: Got error 'Primary script unknown'
[Thu Jan 29 01:31:22.015108 2026] [proxy_fcgi:error] [pid 32302:tid 32310] [client 20.48.32.42:4909] AH01071: Got error 'Primary script unknown'
[Thu Jan 29 01:31:22.169020 2026] [proxy_fcgi:error] [pid 32302:tid 32311] [client 20.48.32.42:4909] AH01071: Got error 'Primary script unknown'
[Thu Jan 29 01:31:22.776419 2026] [proxy_fcgi:error] [pid 32302:tid 32325] [client 20.48.32.42:4909] AH01071: Got error 'Primary script unknown'
[Thu Jan 29 01:31:22.929287 2026] [proxy_fcgi:error] [pid 32302:tid 32327] [client 20.48.32.42:4909] AH01071: Got error 'Primary script unknown'
[Thu Jan 29 01:31:23.085786 2026] [proxy_fcgi:error] [pid 32302:tid 32316] [client 20.48.32.42:4909] AH01071: Got error 'Primary script unknown'
[Thu Jan 29 01:31:23.238440 2026] [proxy_fcgi:error] [pid 32302:tid 32306] [client 20.48.32.42:4909] AH01071: Got error 'Primary script unknown'
[Thu Jan 29 01:31:23.407681 2026] [proxy_fcgi:error] [pid 32302:tid 32323] [client 20.48.32.42:4909] AH01071: Got error 'Primary script unknown'
[Thu Jan 29 01:31:23.566969 2026] [proxy_fcgi:error] [pid 32302:tid 32322] [client 20.48.32.42:4909] AH01071: Got error 'Primary script unknown'
[Thu Jan 29 01:31:23.807003 2026] [:error] [pid 32302:tid 32312] [client 20.48.32.42:4909] [client 20.48.32.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/222.php"] [unique_id "aXpH686l7zUXFnfUB7UduwAAAQg"]
[Thu Jan 29 01:31:27.089832 2026] [:error] [pid 32451:tid 32454] [client 20.48.32.42:14861] [client 20.48.32.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/222.php"] [unique_id "aXpH7xnhmSN6e0P4d6s9HAAAAUE"]
[Thu Jan 29 01:32:03.103669 2026] [:error] [pid 32451:tid 32473] [client 20.48.32.42:9200] [client 20.48.32.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file.php"] [unique_id "aXpIExnhmSN6e0P4d6s9UwAAAVQ"]
[Thu Jan 29 01:33:36.547189 2026] [proxy_fcgi:error] [pid 32895:tid 32897] [client 20.48.32.42:14605] AH01071: Got error 'Primary script unknown'
[Thu Jan 29 01:33:36.675344 2026] [proxy_fcgi:error] [pid 32895:tid 32907] [client 20.48.32.42:14605] AH01071: Got error 'Primary script unknown'
[Thu Jan 29 01:33:36.792065 2026] [proxy_fcgi:error] [pid 32895:tid 32910] [client 20.48.32.42:14605] AH01071: Got error 'Primary script unknown'
[Thu Jan 29 01:33:36.923145 2026] [proxy_fcgi:error] [pid 32895:tid 32899] [client 20.48.32.42:14605] AH01071: Got error 'Primary script unknown'
[Thu Jan 29 01:33:37.105880 2026] [proxy_fcgi:error] [pid 32895:tid 32914] [client 20.48.32.42:14605] AH01071: Got error 'Primary script unknown'
[Thu Jan 29 01:33:37.231351 2026] [proxy_fcgi:error] [pid 32895:tid 32918] [client 20.48.32.42:14605] AH01071: Got error 'Primary script unknown'
[Thu Jan 29 01:33:37.351971 2026] [:error] [pid 32895:tid 32900] [client 20.48.32.42:14605] [client 20.48.32.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aXpIcXQ85pgihG9SXurGlgAAAgM"]
[Thu Jan 29 03:33:40.385055 2026] [:error] [pid 15950:tid 16026] [client 47.90.227.150:37734] [client 47.90.227.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/"] [unique_id "aXpklIJOXwUqBC55abQrewAAAIc"]
[Thu Jan 29 03:33:41.031070 2026] [:error] [pid 15948:tid 15981] [client 47.90.227.150:52486] [client 47.90.227.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/"] [unique_id "aXpklcs8-GxRVq8LLTWdzQAAABE"]
[Thu Jan 29 07:40:53.066133 2026] [proxy_fcgi:error] [pid 20579:tid 20652] [client 20.189.200.73:65427] AH01071: Got error 'Primary script unknown'
[Thu Jan 29 09:09:29.034810 2026] [proxy_fcgi:error] [pid 20486:tid 20491] [client 20.219.59.84:24467] AH01071: Got error 'Primary script unknown'
[Thu Jan 29 09:09:29.177447 2026] [proxy_fcgi:error] [pid 20486:tid 20500] [client 20.219.59.84:24467] AH01071: Got error 'Primary script unknown'
[Thu Jan 29 09:09:29.333730 2026] [proxy_fcgi:error] [pid 20486:tid 20492] [client 20.219.59.84:24467] AH01071: Got error 'Primary script unknown'
[Thu Jan 29 09:09:29.474630 2026] [proxy_fcgi:error] [pid 20486:tid 20489] [client 20.219.59.84:24467] AH01071: Got error 'Primary script unknown'
[Thu Jan 29 09:09:29.783433 2026] [proxy_fcgi:error] [pid 20486:tid 20512] [client 20.219.59.84:24467] AH01071: Got error 'Primary script unknown'
[Thu Jan 29 09:09:29.980462 2026] [proxy_fcgi:error] [pid 20486:tid 20495] [client 20.219.59.84:24467] AH01071: Got error 'Primary script unknown'
[Thu Jan 29 09:09:30.121316 2026] [proxy_fcgi:error] [pid 20486:tid 20510] [client 20.219.59.84:24467] AH01071: Got error 'Primary script unknown'
[Thu Jan 29 09:09:30.276614 2026] [proxy_fcgi:error] [pid 20486:tid 20509] [client 20.219.59.84:24467] AH01071: Got error 'Primary script unknown'
[Thu Jan 29 09:09:30.419406 2026] [proxy_fcgi:error] [pid 20486:tid 20501] [client 20.219.59.84:24467] AH01071: Got error 'Primary script unknown'
[Thu Jan 29 09:09:30.567075 2026] [proxy_fcgi:error] [pid 20486:tid 20511] [client 20.219.59.84:24467] AH01071: Got error 'Primary script unknown'
[Thu Jan 29 09:09:30.709181 2026] [:error] [pid 20486:tid 20502] [client 20.219.59.84:24467] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/w2025.php"] [unique_id "aXqzSngqSZb6GBx5nnMu6gAAAQ0"]
[Thu Jan 29 09:09:33.541920 2026] [:error] [pid 20580:tid 20671] [client 20.219.59.84:33313] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/w2025.php"] [unique_id "aXqzTZCZ5HHdXPmeL595dQAAAoM"]
[Thu Jan 29 09:09:44.038718 2026] [:error] [pid 20486:tid 20501] [client 20.219.59.84:3772] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/w2025.php"] [unique_id "aXqzWHgqSZb6GBx5nnMvEwAAAQw"]
[Thu Jan 29 09:09:47.179622 2026] [:error] [pid 20486:tid 20506] [client 20.219.59.84:10954] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/app.php"] [unique_id "aXqzW3gqSZb6GBx5nnMvIAAAARE"]
[Thu Jan 29 09:09:50.630605 2026] [:error] [pid 20486:tid 20511] [client 20.219.59.84:29952] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/app.php"] [unique_id "aXqzXngqSZb6GBx5nnMvKgAAARY"]
[Thu Jan 29 09:09:52.399029 2026] [:error] [pid 19071:tid 19149] [client 20.219.59.84:10973] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/app.php"] [unique_id "aXqzYJfa8Ix5wWmtmJzXqgAAAJA"]
[Thu Jan 29 09:10:14.141926 2026] [:error] [pid 20580:tid 20685] [client 20.219.59.84:10965] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lib.php"] [unique_id "aXqzdpCZ5HHdXPmeL595kwAAApE"]
[Thu Jan 29 09:10:22.515178 2026] [:error] [pid 19069:tid 19089] [client 20.219.59.84:10968] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lib.php"] [unique_id "aXqzfvDHsRM4BJ9a4QuI_wAAAAs"]
[Thu Jan 29 09:10:25.899148 2026] [:error] [pid 20576:tid 20603] [client 20.219.59.84:3859] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/geaitasa.php"] [unique_id "aXqzgSrDZws_FlQGi9fzhwAAAdE"]
[Thu Jan 29 09:10:31.083024 2026] [proxy_fcgi:error] [pid 19071:tid 19140] [client 20.219.59.84:33339] AH01071: Got error 'Primary script unknown'
[Thu Jan 29 09:10:31.235247 2026] [proxy_fcgi:error] [pid 19071:tid 19154] [client 20.219.59.84:33339] AH01071: Got error 'Primary script unknown'
[Thu Jan 29 09:10:31.395927 2026] [proxy_fcgi:error] [pid 19071:tid 19146] [client 20.219.59.84:33339] AH01071: Got error 'Primary script unknown'
[Thu Jan 29 09:10:31.550379 2026] [proxy_fcgi:error] [pid 19071:tid 19138] [client 20.219.59.84:33339] AH01071: Got error 'Primary script unknown'
[Thu Jan 29 09:10:31.702940 2026] [proxy_fcgi:error] [pid 19071:tid 19145] [client 20.219.59.84:33339] AH01071: Got error 'Primary script unknown'
[Thu Jan 29 09:10:31.846624 2026] [proxy_fcgi:error] [pid 19071:tid 19148] [client 20.219.59.84:33339] AH01071: Got error 'Primary script unknown'
[Thu Jan 29 09:10:32.008937 2026] [proxy_fcgi:error] [pid 19071:tid 19134] [client 20.219.59.84:33339] AH01071: Got error 'Primary script unknown'
[Thu Jan 29 09:10:32.176178 2026] [proxy_fcgi:error] [pid 19071:tid 19150] [client 20.219.59.84:33339] AH01071: Got error 'Primary script unknown'
[Thu Jan 29 09:10:32.516654 2026] [proxy_fcgi:error] [pid 19071:tid 19141] [client 20.219.59.84:33339] AH01071: Got error 'Primary script unknown'
[Thu Jan 29 09:10:32.681677 2026] [proxy_fcgi:error] [pid 19071:tid 19147] [client 20.219.59.84:33339] AH01071: Got error 'Primary script unknown'
[Thu Jan 29 09:10:32.857801 2026] [proxy_fcgi:error] [pid 19071:tid 19154] [client 20.219.59.84:33339] AH01071: Got error 'Primary script unknown'
[Thu Jan 29 09:10:33.020483 2026] [:error] [pid 19071:tid 19135] [client 20.219.59.84:33339] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws38.php"] [unique_id "aXqziZfa8Ix5wWmtmJzX5QAAAII"]
[Thu Jan 29 09:10:36.157100 2026] [:error] [pid 20486:tid 20512] [client 20.219.59.84:14158] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws38.php"] [unique_id "aXqzjHgqSZb6GBx5nnMvdAAAARc"]
[Thu Jan 29 09:10:38.301921 2026] [:error] [pid 19070:tid 19117] [client 20.219.59.84:14156] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws38.php"] [unique_id "aXqzjrou83lIon_aKgZIzQAAAEs"]
[Thu Jan 29 09:10:49.461661 2026] [:error] [pid 20519:tid 20572] [client 20.219.59.84:14163] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aXqzmQo4s4fyROrkyRlkIwAAAZg"]
[Thu Jan 29 09:10:51.503628 2026] [:error] [pid 20486:tid 20502] [client 20.219.59.84:26769] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aXqzm3gqSZb6GBx5nnMvjgAAAQ0"]
[Thu Jan 29 09:10:55.978800 2026] [:error] [pid 20486:tid 20489] [client 20.219.59.84:33330] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aXqzn3gqSZb6GBx5nnMvlAAAAQA"]
[Thu Jan 29 09:11:07.350456 2026] [:error] [pid 19071:tid 19137] [client 20.219.59.84:3875] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/uploaxa1.php"] [unique_id "aXqzq5fa8Ix5wWmtmJzYAwAAAIQ"]
[Thu Jan 29 09:11:11.037612 2026] [:error] [pid 19177:tid 19197] [client 20.219.59.84:3854] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/uploaxa1.php"] [unique_id "aXqzr3ipGz0PT8TrQv4UhAAAANI"]
[Thu Jan 29 09:11:34.829714 2026] [proxy_fcgi:error] [pid 20519:tid 20555] [client 20.219.59.84:33336] AH01071: Got error 'Primary script unknown'
[Thu Jan 29 09:11:35.221658 2026] [proxy_fcgi:error] [pid 20519:tid 20558] [client 20.219.59.84:33336] AH01071: Got error 'Primary script unknown'
[Thu Jan 29 09:11:35.378605 2026] [proxy_fcgi:error] [pid 20519:tid 20564] [client 20.219.59.84:33336] AH01071: Got error 'Primary script unknown'
[Thu Jan 29 09:11:35.544016 2026] [proxy_fcgi:error] [pid 20519:tid 20550] [client 20.219.59.84:33336] AH01071: Got error 'Primary script unknown'
[Thu Jan 29 09:11:35.687509 2026] [proxy_fcgi:error] [pid 20519:tid 20556] [client 20.219.59.84:33336] AH01071: Got error 'Primary script unknown'
[Thu Jan 29 09:11:35.852003 2026] [proxy_fcgi:error] [pid 20519:tid 20563] [client 20.219.59.84:33336] AH01071: Got error 'Primary script unknown'
[Thu Jan 29 09:11:36.008277 2026] [proxy_fcgi:error] [pid 20519:tid 20557] [client 20.219.59.84:33336] AH01071: Got error 'Primary script unknown'
[Thu Jan 29 09:11:37.533625 2026] [proxy_fcgi:error] [pid 20519:tid 20549] [client 20.219.59.84:33336] AH01071: Got error 'Primary script unknown'
[Thu Jan 29 21:55:00.405154 2026] [:error] [pid 19069:tid 19081] [client 144.172.112.114:37494] [client 144.172.112.114] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dwelectservices.com.au"] [uri "/.git/config"] [unique_id "aXtmtPDHsRM4BJ9a4Qt6ngAAAAM"]
[Fri Jan 30 08:42:57.878671 2026] [proxy_fcgi:error] [pid 46912:tid 46926] [client 20.89.97.111:8585] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 08:42:58.010767 2026] [proxy_fcgi:error] [pid 46912:tid 46945] [client 20.89.97.111:8585] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 08:42:58.176767 2026] [proxy_fcgi:error] [pid 46912:tid 46946] [client 20.89.97.111:8585] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 08:42:58.310213 2026] [proxy_fcgi:error] [pid 46912:tid 46939] [client 20.89.97.111:8585] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 08:42:58.429097 2026] [proxy_fcgi:error] [pid 46912:tid 46934] [client 20.89.97.111:8585] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 08:42:58.546599 2026] [proxy_fcgi:error] [pid 46912:tid 46944] [client 20.89.97.111:8585] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 08:42:58.673298 2026] [proxy_fcgi:error] [pid 46912:tid 46927] [client 20.89.97.111:8585] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 08:42:58.791029 2026] [proxy_fcgi:error] [pid 46912:tid 46937] [client 20.89.97.111:8585] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 08:42:58.910329 2026] [proxy_fcgi:error] [pid 46912:tid 46928] [client 20.89.97.111:8585] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 08:42:59.028061 2026] [proxy_fcgi:error] [pid 46912:tid 46938] [client 20.89.97.111:8585] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 08:42:59.183787 2026] [:error] [pid 46912:tid 46940] [client 20.89.97.111:8585] [client 20.89.97.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/w2025.php"] [unique_id "aXv-kz6yiVW7A9NwFFkzaAAAABA"]
[Fri Jan 30 08:43:00.242627 2026] [:error] [pid 24681:tid 24685] [client 20.89.97.111:8645] [client 20.89.97.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/w2025.php"] [unique_id "aXv-lIE368IXQpahn0Lq8QAAAQI"]
[Fri Jan 30 08:43:01.328074 2026] [:error] [pid 38980:tid 39001] [client 20.89.97.111:8649] [client 20.89.97.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/w2025.php"] [unique_id "aXv-lbYByxUZEaKXdHoIEAAAAg4"]
[Fri Jan 30 08:43:02.572591 2026] [:error] [pid 47021:tid 47039] [client 20.89.97.111:8594] [client 20.89.97.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/w2025.php"] [unique_id "aXv-ltap1k13UdZUNSSGYgAAANA"]
[Fri Jan 30 08:43:04.091495 2026] [:error] [pid 24711:tid 24721] [client 20.89.97.111:8695] [client 20.89.97.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/app.php"] [unique_id "aXv-mK5Gwh4var6T23JzKQAAAUc"]
[Fri Jan 30 08:43:04.955625 2026] [:error] [pid 38980:tid 38987] [client 20.89.97.111:8643] [client 20.89.97.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/app.php"] [unique_id "aXv-mLYByxUZEaKXdHoIFAAAAgA"]
[Fri Jan 30 08:43:05.754187 2026] [:error] [pid 24681:tid 24702] [client 20.89.97.111:8578] [client 20.89.97.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/app.php"] [unique_id "aXv-mYE368IXQpahn0Lq-AAAARM"]
[Fri Jan 30 08:43:06.339753 2026] [:error] [pid 24712:tid 24759] [client 20.89.97.111:8669] [client 20.89.97.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/app.php"] [unique_id "aXv-moRLQrFiQF3h9-uA8QAAAZE"]
[Fri Jan 30 08:43:06.724345 2026] [:error] [pid 24711:tid 24735] [client 20.89.97.111:8604] [client 20.89.97.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lib.php"] [unique_id "aXv-mq5Gwh4var6T23JzKgAAAVU"]
[Fri Jan 30 08:43:07.228936 2026] [:error] [pid 47021:tid 47034] [client 20.89.97.111:8676] [client 20.89.97.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lib.php"] [unique_id "aXv-m9ap1k13UdZUNSSGZwAAAMs"]
[Fri Jan 30 08:43:08.044215 2026] [:error] [pid 38686:tid 38695] [client 20.89.97.111:8619] [client 20.89.97.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lib.php"] [unique_id "aXv-nAoE8BAjgw1_sAXNmQAAAcU"]
[Fri Jan 30 08:43:08.542798 2026] [:error] [pid 24712:tid 24743] [client 20.89.97.111:8589] [client 20.89.97.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lib.php"] [unique_id "aXv-nIRLQrFiQF3h9-uA9AAAAYI"]
[Fri Jan 30 08:43:09.205718 2026] [:error] [pid 46912:tid 46942] [client 20.89.97.111:3051] [client 20.89.97.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/geaitasa.php"] [unique_id "aXv-nT6yiVW7A9NwFFkzbgAAABI"]
[Fri Jan 30 08:43:09.827645 2026] [:error] [pid 47021:tid 47045] [client 20.89.97.111:8642] [client 20.89.97.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/geaitasa.php"] [unique_id "aXv-ndap1k13UdZUNSSGbAAAANY"]
[Fri Jan 30 08:43:10.335123 2026] [:error] [pid 47021:tid 47039] [client 20.89.97.111:8612] [client 20.89.97.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/geaitasa.php"] [unique_id "aXv-ntap1k13UdZUNSSGcQAAANA"]
[Fri Jan 30 08:43:11.270884 2026] [:error] [pid 24712:tid 24755] [client 20.89.97.111:8597] [client 20.89.97.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/geaitasa.php"] [unique_id "aXv-n4RLQrFiQF3h9-uBHAAAAY4"]
[Fri Jan 30 08:43:11.949056 2026] [:error] [pid 38686:tid 38695] [client 20.89.97.111:8588] [client 20.89.97.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class-cc.php"] [unique_id "aXv-nwoE8BAjgw1_sAXNnwAAAcU"]
[Fri Jan 30 08:43:12.700261 2026] [:error] [pid 46914:tid 46990] [client 20.89.97.111:3010] [client 20.89.97.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class-cc.php"] [unique_id "aXv-oFgSfJ4kZxNKlb_hPAAAAIw"]
[Fri Jan 30 08:43:13.773095 2026] [:error] [pid 46912:tid 46928] [client 20.89.97.111:8605] [client 20.89.97.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class-cc.php"] [unique_id "aXv-oT6yiVW7A9NwFFkzcwAAAAQ"]
[Fri Jan 30 08:43:14.618060 2026] [:error] [pid 46912:tid 46943] [client 20.89.97.111:8662] [client 20.89.97.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class-cc.php"] [unique_id "aXv-oj6yiVW7A9NwFFkzdQAAABM"]
[Fri Jan 30 08:43:15.399011 2026] [:error] [pid 46914:tid 46995] [client 20.89.97.111:8656] [client 20.89.97.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/reze.php"] [unique_id "aXv-o1gSfJ4kZxNKlb_hSAAAAJE"]
[Fri Jan 30 08:43:16.238269 2026] [:error] [pid 46914:tid 47001] [client 20.89.97.111:8606] [client 20.89.97.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/reze.php"] [unique_id "aXv-pFgSfJ4kZxNKlb_hTgAAAJc"]
[Fri Jan 30 08:43:17.443288 2026] [:error] [pid 46914:tid 46984] [client 20.89.97.111:8703] [client 20.89.97.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/reze.php"] [unique_id "aXv-pVgSfJ4kZxNKlb_hUQAAAIY"]
[Fri Jan 30 08:43:17.769583 2026] [:error] [pid 47021:tid 47024] [client 20.89.97.111:8641] [client 20.89.97.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/reze.php"] [unique_id "aXv-pdap1k13UdZUNSSGiwAAAME"]
[Fri Jan 30 08:43:18.302141 2026] [:error] [pid 38980:tid 38990] [client 20.89.97.111:8582] [client 20.89.97.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/11092null.php"] [unique_id "aXv-prYByxUZEaKXdHoIIwAAAgM"]
[Fri Jan 30 08:43:19.057771 2026] [:error] [pid 46913:tid 46964] [client 20.89.97.111:8602] [client 20.89.97.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/11092null.php"] [unique_id "aXv-pzMWmKL8hOfC3uQ_bwAAAE0"]
[Fri Jan 30 08:43:19.471628 2026] [:error] [pid 24712:tid 24751] [client 20.89.97.111:8579] [client 20.89.97.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/11092null.php"] [unique_id "aXv-p4RLQrFiQF3h9-uBIAAAAYo"]
[Fri Jan 30 08:43:19.788839 2026] [:error] [pid 46914:tid 47000] [client 20.89.97.111:3047] [client 20.89.97.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/11092null.php"] [unique_id "aXv-p1gSfJ4kZxNKlb_hVgAAAJY"]
[Fri Jan 30 08:43:20.583022 2026] [:error] [pid 38686:tid 38694] [client 20.89.97.111:8697] [client 20.89.97.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ioxi-o2.php"] [unique_id "aXv-qAoE8BAjgw1_sAXNtwAAAcQ"]
[Fri Jan 30 08:43:21.850983 2026] [:error] [pid 47021:tid 47027] [client 20.89.97.111:8668] [client 20.89.97.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ioxi-o2.php"] [unique_id "aXv-qdap1k13UdZUNSSGjgAAAMQ"]
[Fri Jan 30 08:43:22.363985 2026] [:error] [pid 24711:tid 24736] [client 20.89.97.111:8650] [client 20.89.97.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ioxi-o2.php"] [unique_id "aXv-qq5Gwh4var6T23JzPAAAAVY"]
[Fri Jan 30 08:43:22.832403 2026] [:error] [pid 47021:tid 47024] [client 20.89.97.111:3045] [client 20.89.97.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ioxi-o2.php"] [unique_id "aXv-qtap1k13UdZUNSSGlAAAAME"]
[Fri Jan 30 08:43:23.661326 2026] [:error] [pid 38980:tid 38993] [client 20.89.97.111:8659] [client 20.89.97.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/166.php"] [unique_id "aXv-q7YByxUZEaKXdHoIKwAAAgY"]
[Fri Jan 30 08:43:24.127943 2026] [:error] [pid 24711:tid 24721] [client 20.89.97.111:8691] [client 20.89.97.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/166.php"] [unique_id "aXv-rK5Gwh4var6T23JzPQAAAUc"]
[Fri Jan 30 08:43:25.680821 2026] [:error] [pid 46914:tid 46987] [client 20.89.97.111:8701] [client 20.89.97.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/166.php"] [unique_id "aXv-rVgSfJ4kZxNKlb_hXAAAAIk"]
[Fri Jan 30 08:43:26.163178 2026] [:error] [pid 46914:tid 46988] [client 20.89.97.111:3056] [client 20.89.97.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/166.php"] [unique_id "aXv-rlgSfJ4kZxNKlb_hXwAAAIo"]
[Fri Jan 30 08:43:26.713532 2026] [:error] [pid 47021:tid 47027] [client 20.89.97.111:8661] [client 20.89.97.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/by.php"] [unique_id "aXv-rtap1k13UdZUNSSGlwAAAMQ"]
[Fri Jan 30 08:43:27.257422 2026] [:error] [pid 47021:tid 47038] [client 20.89.97.111:8634] [client 20.89.97.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/by.php"] [unique_id "aXv-r9ap1k13UdZUNSSGmQAAAM8"]
[Fri Jan 30 08:43:28.521633 2026] [:error] [pid 38980:tid 39011] [client 20.89.97.111:8651] [client 20.89.97.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/by.php"] [unique_id "aXv-sLYByxUZEaKXdHoILQAAAhg"]
[Fri Jan 30 08:43:28.915484 2026] [:error] [pid 47021:tid 47044] [client 20.89.97.111:8679] [client 20.89.97.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/by.php"] [unique_id "aXv-sNap1k13UdZUNSSGmgAAANU"]
[Fri Jan 30 08:43:29.514417 2026] [:error] [pid 46913:tid 46951] [client 20.89.97.111:8688] [client 20.89.97.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zz8.php"] [unique_id "aXv-sTMWmKL8hOfC3uQ_dwAAAEA"]
[Fri Jan 30 08:43:30.269023 2026] [:error] [pid 38686:tid 38703] [client 20.89.97.111:8696] [client 20.89.97.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zz8.php"] [unique_id "aXv-sgoE8BAjgw1_sAXNxwAAAc0"]
[Fri Jan 30 08:43:30.928320 2026] [:error] [pid 46913:tid 46958] [client 20.89.97.111:8692] [client 20.89.97.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zz8.php"] [unique_id "aXv-sjMWmKL8hOfC3uQ_eQAAAEc"]
[Fri Jan 30 08:43:31.294224 2026] [:error] [pid 24712:tid 24758] [client 20.89.97.111:8596] [client 20.89.97.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zz8.php"] [unique_id "aXv-s4RLQrFiQF3h9-uBMgAAAZA"]
[Fri Jan 30 08:43:31.686901 2026] [:error] [pid 38686:tid 38700] [client 20.89.97.111:8603] [client 20.89.97.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/s1.php"] [unique_id "aXv-swoE8BAjgw1_sAXNywAAAco"]
[Fri Jan 30 08:43:32.533676 2026] [:error] [pid 38980:tid 38989] [client 20.89.97.111:3011] [client 20.89.97.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/s1.php"] [unique_id "aXv-tLYByxUZEaKXdHoIMQAAAgI"]
[Fri Jan 30 08:43:33.433500 2026] [:error] [pid 24711:tid 24722] [client 20.89.97.111:3008] [client 20.89.97.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/s1.php"] [unique_id "aXv-ta5Gwh4var6T23JzRAAAAUg"]
[Fri Jan 30 08:43:33.858474 2026] [:error] [pid 47021:tid 47047] [client 20.89.97.111:8671] [client 20.89.97.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/s1.php"] [unique_id "aXv-tdap1k13UdZUNSSGnQAAANg"]
[Fri Jan 30 08:43:34.358231 2026] [:error] [pid 38686:tid 38708] [client 20.89.97.111:8595] [client 20.89.97.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ah21.php"] [unique_id "aXv-tgoE8BAjgw1_sAXN0QAAAdI"]
[Fri Jan 30 08:43:34.713524 2026] [:error] [pid 24681:tid 24685] [client 20.89.97.111:8660] [client 20.89.97.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ah21.php"] [unique_id "aXv-toE368IXQpahn0LrHAAAAQI"]
[Fri Jan 30 08:43:35.299039 2026] [:error] [pid 24711:tid 24716] [client 20.89.97.111:8610] [client 20.89.97.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ah21.php"] [unique_id "aXv-t65Gwh4var6T23JzSQAAAUI"]
[Fri Jan 30 08:43:35.741175 2026] [:error] [pid 47021:tid 47034] [client 20.89.97.111:8682] [client 20.89.97.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ah21.php"] [unique_id "aXv-t9ap1k13UdZUNSSGoAAAAMs"]
[Fri Jan 30 08:43:36.199464 2026] [:error] [pid 38686:tid 38706] [client 20.89.97.111:8615] [client 20.89.97.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ah22.php"] [unique_id "aXv-uAoE8BAjgw1_sAXN0wAAAdA"]
[Fri Jan 30 08:43:36.781959 2026] [:error] [pid 24712:tid 24765] [client 20.89.97.111:8647] [client 20.89.97.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ah22.php"] [unique_id "aXv-uIRLQrFiQF3h9-uBPgAAAZc"]
[Fri Jan 30 08:43:37.519537 2026] [:error] [pid 46913:tid 46972] [client 20.89.97.111:8611] [client 20.89.97.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ah22.php"] [unique_id "aXv-uTMWmKL8hOfC3uQ_gAAAAFU"]
[Fri Jan 30 08:43:38.049978 2026] [:error] [pid 24681:tid 24704] [client 20.89.97.111:8693] [client 20.89.97.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ah22.php"] [unique_id "aXv-uoE368IXQpahn0LrJQAAARU"]
[Fri Jan 30 08:43:38.783499 2026] [:error] [pid 46914:tid 46986] [client 20.89.97.111:8678] [client 20.89.97.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws38.php"] [unique_id "aXv-ulgSfJ4kZxNKlb_hbwAAAIg"]
[Fri Jan 30 08:43:40.266417 2026] [:error] [pid 46912:tid 46928] [client 20.89.97.111:8600] [client 20.89.97.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws38.php"] [unique_id "aXv-vD6yiVW7A9NwFFkzjwAAAAQ"]
[Fri Jan 30 08:43:41.604026 2026] [:error] [pid 24681:tid 24687] [client 20.89.97.111:8680] [client 20.89.97.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws38.php"] [unique_id "aXv-vYE368IXQpahn0LrJwAAAQQ"]
[Fri Jan 30 08:43:42.378251 2026] [:error] [pid 24681:tid 24689] [client 20.89.97.111:3009] [client 20.89.97.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws38.php"] [unique_id "aXv-voE368IXQpahn0LrKgAAAQY"]
[Fri Jan 30 08:43:43.124137 2026] [:error] [pid 46913:tid 46959] [client 20.89.97.111:8665] [client 20.89.97.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aXv-vzMWmKL8hOfC3uQ_hQAAAEg"]
[Fri Jan 30 08:43:44.196886 2026] [:error] [pid 47021:tid 47042] [client 20.89.97.111:8666] [client 20.89.97.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aXv-wNap1k13UdZUNSSGpAAAANM"]
[Fri Jan 30 08:43:44.842671 2026] [:error] [pid 46914:tid 47001] [client 20.89.97.111:8639] [client 20.89.97.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aXv-wFgSfJ4kZxNKlb_hdgAAAJc"]
[Fri Jan 30 08:43:45.321361 2026] [:error] [pid 47021:tid 47041] [client 20.89.97.111:8666] [client 20.89.97.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aXv-wdap1k13UdZUNSSGpgAAANI"]
[Fri Jan 30 08:43:46.171121 2026] [:error] [pid 24681:tid 24701] [client 20.89.97.111:3055] [client 20.89.97.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/uploaxa1.php"] [unique_id "aXv-woE368IXQpahn0LrLgAAARI"]
[Fri Jan 30 08:43:46.987229 2026] [:error] [pid 24681:tid 24685] [client 20.89.97.111:8686] [client 20.89.97.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/uploaxa1.php"] [unique_id "aXv-woE368IXQpahn0LrMQAAAQI"]
[Fri Jan 30 08:43:47.478706 2026] [:error] [pid 24711:tid 24738] [client 20.89.97.111:8625] [client 20.89.97.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/uploaxa1.php"] [unique_id "aXv-w65Gwh4var6T23JzVAAAAVg"]
[Fri Jan 30 08:43:48.066087 2026] [:error] [pid 46912:tid 46933] [client 20.89.97.111:8679] [client 20.89.97.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/uploaxa1.php"] [unique_id "aXv-xD6yiVW7A9NwFFkzkgAAAAk"]
[Fri Jan 30 08:43:48.510131 2026] [:error] [pid 47021:tid 47043] [client 20.89.97.111:8581] [client 20.89.97.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-su.php"] [unique_id "aXv-xNap1k13UdZUNSSGqgAAANQ"]
[Fri Jan 30 08:43:48.882638 2026] [:error] [pid 47021:tid 47039] [client 20.89.97.111:8577] [client 20.89.97.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-su.php"] [unique_id "aXv-xNap1k13UdZUNSSGrQAAANA"]
[Fri Jan 30 08:43:49.339038 2026] [:error] [pid 38686:tid 38708] [client 20.89.97.111:8592] [client 20.89.97.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-su.php"] [unique_id "aXv-xQoE8BAjgw1_sAXN2wAAAdI"]
[Fri Jan 30 08:43:49.628448 2026] [:error] [pid 46914:tid 46979] [client 20.89.97.111:8654] [client 20.89.97.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-su.php"] [unique_id "aXv-xVgSfJ4kZxNKlb_hfAAAAIE"]
[Fri Jan 30 08:43:49.903643 2026] [:error] [pid 46912:tid 46944] [client 20.89.97.111:8677] [client 20.89.97.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rzzaq.php"] [unique_id "aXv-xT6yiVW7A9NwFFkzlAAAABQ"]
[Fri Jan 30 08:43:50.231038 2026] [:error] [pid 46914:tid 46986] [client 20.89.97.111:8590] [client 20.89.97.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rzzaq.php"] [unique_id "aXv-xlgSfJ4kZxNKlb_hfQAAAIg"]
[Fri Jan 30 08:43:50.751920 2026] [:error] [pid 46912:tid 46927] [client 20.89.97.111:8655] [client 20.89.97.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rzzaq.php"] [unique_id "aXv-xj6yiVW7A9NwFFkzlgAAAAM"]
[Fri Jan 30 08:43:51.191644 2026] [:error] [pid 38980:tid 39010] [client 20.89.97.111:8685] [client 20.89.97.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rzzaq.php"] [unique_id "aXv-x7YByxUZEaKXdHoIPgAAAhc"]
[Fri Jan 30 08:43:51.677407 2026] [:error] [pid 38686:tid 38700] [client 20.89.97.111:2995] [client 20.89.97.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/abtpn.php"] [unique_id "aXv-xwoE8BAjgw1_sAXN3wAAAco"]
[Fri Jan 30 08:43:52.059789 2026] [:error] [pid 47021:tid 47040] [client 20.89.97.111:8584] [client 20.89.97.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/abtpn.php"] [unique_id "aXv-yNap1k13UdZUNSSGswAAANE"]
[Fri Jan 30 08:43:52.656070 2026] [:error] [pid 38686:tid 38703] [client 20.89.97.111:8623] [client 20.89.97.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/abtpn.php"] [unique_id "aXv-yAoE8BAjgw1_sAXN4wAAAc0"]
[Fri Jan 30 08:43:53.139703 2026] [:error] [pid 38980:tid 38998] [client 20.89.97.111:8630] [client 20.89.97.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/abtpn.php"] [unique_id "aXv-ybYByxUZEaKXdHoIQAAAAgs"]
[Fri Jan 30 08:43:53.825047 2026] [:error] [pid 38686:tid 38694] [client 20.89.97.111:8646] [client 20.89.97.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/my1.php"] [unique_id "aXv-yQoE8BAjgw1_sAXN5wAAAcQ"]
[Fri Jan 30 08:43:54.988388 2026] [:error] [pid 24681:tid 24695] [client 20.89.97.111:8613] [client 20.89.97.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/my1.php"] [unique_id "aXv-yoE368IXQpahn0LrNAAAAQw"]
[Fri Jan 30 08:43:55.532919 2026] [:error] [pid 24681:tid 24686] [client 20.89.97.111:8635] [client 20.89.97.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/my1.php"] [unique_id "aXv-y4E368IXQpahn0LrNgAAAQM"]
[Fri Jan 30 08:43:56.204841 2026] [:error] [pid 24712:tid 24763] [client 20.89.97.111:3027] [client 20.89.97.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/my1.php"] [unique_id "aXv-zIRLQrFiQF3h9-uBRwAAAZU"]
[Fri Jan 30 08:43:56.905764 2026] [:error] [pid 47021:tid 47026] [client 20.89.97.111:8614] [client 20.89.97.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/taktak.php"] [unique_id "aXv-zNap1k13UdZUNSSGzAAAAMM"]
[Fri Jan 30 08:43:57.247209 2026] [:error] [pid 24681:tid 24691] [client 20.89.97.111:8593] [client 20.89.97.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/taktak.php"] [unique_id "aXv-zYE368IXQpahn0LrOQAAAQg"]
[Fri Jan 30 08:43:57.912766 2026] [:error] [pid 24711:tid 24722] [client 20.89.97.111:8637] [client 20.89.97.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/taktak.php"] [unique_id "aXv-za5Gwh4var6T23JzWAAAAUg"]
[Fri Jan 30 08:43:58.578675 2026] [:error] [pid 24681:tid 24685] [client 20.89.97.111:8583] [client 20.89.97.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/taktak.php"] [unique_id "aXv-zoE368IXQpahn0LrPQAAAQI"]
[Fri Jan 30 08:43:59.948108 2026] [proxy_fcgi:error] [pid 38686:tid 38691] [client 20.89.97.111:8624] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 08:44:00.073822 2026] [proxy_fcgi:error] [pid 38686:tid 38692] [client 20.89.97.111:8624] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 08:44:00.326035 2026] [proxy_fcgi:error] [pid 38686:tid 38714] [client 20.89.97.111:8624] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:29:21.333719 2026] [proxy_fcgi:error] [pid 46914:tid 46991] [client 20.100.196.146:41128] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:29:21.766462 2026] [proxy_fcgi:error] [pid 46914:tid 46981] [client 20.100.196.146:41128] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:29:22.185225 2026] [proxy_fcgi:error] [pid 46914:tid 46999] [client 20.100.196.146:41128] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:29:22.468150 2026] [proxy_fcgi:error] [pid 46914:tid 46997] [client 20.100.196.146:41128] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:29:22.749174 2026] [:error] [pid 46914:tid 46993] [client 20.100.196.146:41128] [client 20.100.196.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/baixy.php"] [unique_id "aXzAQlgSfJ4kZxNKlb_yugAAAI8"]
[Fri Jan 30 22:29:24.775471 2026] [:error] [pid 38980:tid 38998] [client 20.100.196.146:30536] [client 20.100.196.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/baixy.php"] [unique_id "aXzARLYByxUZEaKXdHrFBQAAAgs"]
[Fri Jan 30 22:29:36.563208 2026] [:error] [pid 24712:tid 24764] [client 20.100.196.146:39550] [client 20.100.196.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/baixy.php"] [unique_id "aXzAUIRLQrFiQF3h9-tvugAAAZY"]
[Fri Jan 30 22:29:46.882239 2026] [:error] [pid 38980:tid 39006] [client 20.100.196.146:26384] [client 20.100.196.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ioxi.php"] [unique_id "aXzAWrYByxUZEaKXdHrFIAAAAhM"]
[Fri Jan 30 22:29:47.669754 2026] [:error] [pid 38980:tid 39000] [client 20.100.196.146:26027] [client 20.100.196.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ioxi.php"] [unique_id "aXzAW7YByxUZEaKXdHrFIwAAAg0"]
[Fri Jan 30 22:29:49.760514 2026] [:error] [pid 38980:tid 39010] [client 20.100.196.146:31184] [client 20.100.196.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ioxi.php"] [unique_id "aXzAXbYByxUZEaKXdHrFJgAAAhc"]
[Fri Jan 30 22:29:52.473493 2026] [:error] [pid 24711:tid 24729] [client 20.100.196.146:40761] [client 20.100.196.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ioxi.php"] [unique_id "aXzAYK5Gwh4var6T23LKdQAAAU8"]
[Fri Jan 30 22:29:55.454431 2026] [:error] [pid 24711:tid 24718] [client 20.100.196.146:28555] [client 20.100.196.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aboutc.php"] [unique_id "aXzAY65Gwh4var6T23LKeQAAAUQ"]
[Fri Jan 30 22:29:56.561497 2026] [:error] [pid 46913:tid 46967] [client 20.100.196.146:23285] [client 20.100.196.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aboutc.php"] [unique_id "aXzAZDMWmKL8hOfC3uTrgQAAAFA"]
[Fri Jan 30 22:29:58.019378 2026] [:error] [pid 46913:tid 46969] [client 20.100.196.146:31176] [client 20.100.196.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aboutc.php"] [unique_id "aXzAZjMWmKL8hOfC3uTrhAAAAFI"]
[Fri Jan 30 22:30:03.358375 2026] [:error] [pid 24711:tid 24723] [client 20.100.196.146:26393] [client 20.100.196.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aboutc.php"] [unique_id "aXzAa65Gwh4var6T23LKjgAAAUk"]
[Fri Jan 30 22:30:08.480500 2026] [:error] [pid 38686:tid 38695] [client 20.100.196.146:26370] [client 20.100.196.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/8xyz.php"] [unique_id "aXzAcAoE8BAjgw1_sAWLAgAAAcU"]
[Fri Jan 30 22:30:10.292159 2026] [:error] [pid 38686:tid 38700] [client 20.100.196.146:22291] [client 20.100.196.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/8xyz.php"] [unique_id "aXzAcgoE8BAjgw1_sAWLDAAAAco"]
[Fri Jan 30 22:30:11.869452 2026] [:error] [pid 46912:tid 46930] [client 20.100.196.146:39139] [client 20.100.196.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/8xyz.php"] [unique_id "aXzAcz6yiVW7A9NwFFkLugAAAAY"]
[Fri Jan 30 22:30:14.117566 2026] [:error] [pid 46912:tid 46937] [client 20.100.196.146:35904] [client 20.100.196.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/8xyz.php"] [unique_id "aXzAdj6yiVW7A9NwFFkL4QAAAA0"]
[Fri Jan 30 22:30:51.240095 2026] [:error] [pid 46912:tid 46941] [client 20.100.196.146:23291] [client 20.100.196.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/doko.php"] [unique_id "aXzAmz6yiVW7A9NwFFkMfwAAABE"]
[Fri Jan 30 22:30:54.964647 2026] [:error] [pid 46913:tid 46963] [client 20.100.196.146:32904] [client 20.100.196.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/doko.php"] [unique_id "aXzAnjMWmKL8hOfC3uTrmgAAAEw"]
[Fri Jan 30 22:30:57.738734 2026] [:error] [pid 47663:tid 47668] [client 20.100.196.146:2697] [client 20.100.196.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/doko.php"] [unique_id "aXzAoUHGTrgIKCqEYbW19wAAAkM"]
[Fri Jan 30 22:31:01.742053 2026] [:error] [pid 24711:tid 24724] [client 20.100.196.146:28166] [client 20.100.196.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sst.php"] [unique_id "aXzApa5Gwh4var6T23LLHAAAAUo"]
[Fri Jan 30 22:31:07.244574 2026] [:error] [pid 24681:tid 24684] [client 20.100.196.146:18983] [client 20.100.196.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sst.php"] [unique_id "aXzAq4E368IXQpahn0KgNgAAAQE"]
[Fri Jan 30 22:31:12.606129 2026] [:error] [pid 46912:tid 46948] [client 20.100.196.146:26082] [client 20.100.196.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sst.php"] [unique_id "aXzAsD6yiVW7A9NwFFkMvgAAABg"]
[Fri Jan 30 22:31:44.805900 2026] [proxy_fcgi:error] [pid 47021:tid 47046] [client 20.100.196.146:21185] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:31:45.079947 2026] [proxy_fcgi:error] [pid 47021:tid 47023] [client 20.100.196.146:21185] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:31:45.356461 2026] [proxy_fcgi:error] [pid 47021:tid 47030] [client 20.100.196.146:21185] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:31:45.715819 2026] [proxy_fcgi:error] [pid 47021:tid 47038] [client 20.100.196.146:21185] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:31:45.982488 2026] [proxy_fcgi:error] [pid 47021:tid 47033] [client 20.100.196.146:21185] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:31:46.246661 2026] [proxy_fcgi:error] [pid 47021:tid 47031] [client 20.100.196.146:21185] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:31:46.512955 2026] [proxy_fcgi:error] [pid 47021:tid 47037] [client 20.100.196.146:21185] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:31:46.840007 2026] [proxy_fcgi:error] [pid 47021:tid 47039] [client 20.100.196.146:21185] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:31:47.241109 2026] [proxy_fcgi:error] [pid 47021:tid 47040] [client 20.100.196.146:21185] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:31:47.505601 2026] [proxy_fcgi:error] [pid 47021:tid 47024] [client 20.100.196.146:21185] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:31:47.771113 2026] [proxy_fcgi:error] [pid 47021:tid 47027] [client 20.100.196.146:21185] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:31:48.054375 2026] [:error] [pid 47021:tid 47026] [client 20.100.196.146:21185] [client 20.100.196.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ty.php"] [unique_id "aXzA1Nap1k13UdZUNSRtQQAAAMM"]
[Fri Jan 30 22:32:06.225188 2026] [:error] [pid 38980:tid 38995] [client 20.100.196.146:39983] [client 20.100.196.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/RIP.php"] [unique_id "aXzA5rYByxUZEaKXdHrFnAAAAgg"]
[Fri Jan 30 22:32:08.497664 2026] [:error] [pid 47663:tid 47683] [client 20.100.196.146:21126] [client 20.100.196.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/RIP.php"] [unique_id "aXzA6EHGTrgIKCqEYbW2FgAAAlI"]
[Fri Jan 30 22:32:35.510139 2026] [:error] [pid 24712:tid 24750] [client 20.100.196.146:23636] [client 20.100.196.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/w1.php"] [unique_id "aXzBA4RLQrFiQF3h9-twegAAAYk"]
[Fri Jan 30 22:32:37.952623 2026] [:error] [pid 24681:tid 24683] [client 20.100.196.146:33484] [client 20.100.196.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/w1.php"] [unique_id "aXzBBYE368IXQpahn0KgcQAAAQA"]
[Fri Jan 30 22:32:42.151764 2026] [:error] [pid 24712:tid 24759] [client 20.100.196.146:21177] [client 20.100.196.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/w1.php"] [unique_id "aXzBCoRLQrFiQF3h9-twfwAAAZE"]
[Fri Jan 30 22:32:47.162244 2026] [proxy_fcgi:error] [pid 46913:tid 46972] [client 20.100.196.146:30396] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:32:47.434283 2026] [proxy_fcgi:error] [pid 46913:tid 46956] [client 20.100.196.146:30396] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:32:47.708173 2026] [proxy_fcgi:error] [pid 46913:tid 46955] [client 20.100.196.146:30396] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:32:47.972388 2026] [proxy_fcgi:error] [pid 46913:tid 46968] [client 20.100.196.146:30396] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:46:31.619074 2026] [proxy_fcgi:error] [pid 24711:tid 24734] [client 20.100.196.146:31014] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 01:56:58.650607 2026] [proxy_fcgi:error] [pid 10720:tid 10738] [client 20.240.47.47:9945] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 06:38:45.990071 2026] [proxy_fcgi:error] [pid 39244:tid 39316] [client 20.100.196.146:40869] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 08:59:49.234779 2026] [proxy_fcgi:error] [pid 39243:tid 39300] [client 74.248.24.238:31407] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 11:34:37.975568 2026] [proxy_fcgi:error] [pid 52520:tid 52543] [client 3.127.203.41:42032] AH01071: Got error 'Primary script unknown'
[Sun Feb 01 03:05:17.022925 2026] [proxy_fcgi:error] [pid 44532:tid 44556] [client 20.189.202.189:4107] AH01071: Got error 'Primary script unknown'
[Sun Feb 01 03:05:17.167008 2026] [proxy_fcgi:error] [pid 44532:tid 44559] [client 20.189.202.189:4107] AH01071: Got error 'Primary script unknown'
[Sun Feb 01 03:05:17.746243 2026] [proxy_fcgi:error] [pid 44532:tid 44557] [client 20.189.202.189:4107] AH01071: Got error 'Primary script unknown'
[Sun Feb 01 03:05:17.881236 2026] [proxy_fcgi:error] [pid 44532:tid 44558] [client 20.189.202.189:4107] AH01071: Got error 'Primary script unknown'
[Sun Feb 01 03:05:18.004186 2026] [proxy_fcgi:error] [pid 44532:tid 44550] [client 20.189.202.189:4107] AH01071: Got error 'Primary script unknown'
[Sun Feb 01 03:05:18.126858 2026] [proxy_fcgi:error] [pid 44532:tid 44545] [client 20.189.202.189:4107] AH01071: Got error 'Primary script unknown'
[Sun Feb 01 03:05:19.555838 2026] [proxy_fcgi:error] [pid 44532:tid 44537] [client 20.189.202.189:4107] AH01071: Got error 'Primary script unknown'
[Sun Feb 01 03:05:19.695294 2026] [proxy_fcgi:error] [pid 44532:tid 44541] [client 20.189.202.189:4107] AH01071: Got error 'Primary script unknown'
[Sun Feb 01 03:05:19.820494 2026] [proxy_fcgi:error] [pid 44532:tid 44560] [client 20.189.202.189:4107] AH01071: Got error 'Primary script unknown'
[Sun Feb 01 03:05:20.360885 2026] [proxy_fcgi:error] [pid 44532:tid 44543] [client 20.189.202.189:4107] AH01071: Got error 'Primary script unknown'
[Sun Feb 01 03:05:20.485181 2026] [:error] [pid 44532:tid 44538] [client 20.189.202.189:4107] [client 20.189.202.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/222.php"] [unique_id "aX5ScMH-68uYbAtfrZ3FqgAAAUI"]
[Sun Feb 01 03:05:22.652393 2026] [:error] [pid 39339:tid 39360] [client 20.189.202.189:7963] [client 20.189.202.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/222.php"] [unique_id "aX5ScsWi-IjigR3oHY7RmwAAANM"]
[Sun Feb 01 03:05:23.170673 2026] [:error] [pid 44533:tid 44583] [client 20.189.202.189:14322] [client 20.189.202.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/222.php"] [unique_id "aX5Sc4Njc98kHMNVmnuIJAAAAdQ"]
[Sun Feb 01 03:05:24.880866 2026] [:error] [pid 44533:tid 44576] [client 20.189.202.189:7110] [client 20.189.202.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/222.php"] [unique_id "aX5SdINjc98kHMNVmnuIJQAAAc0"]
[Sun Feb 01 03:05:25.253748 2026] [:error] [pid 39339:tid 39357] [client 20.189.202.189:4150] [client 20.189.202.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/about.php"] [unique_id "aX5SdcWi-IjigR3oHY7RoQAAANA"]
[Sun Feb 01 03:05:26.460188 2026] [:error] [pid 59523:tid 59549] [client 20.189.202.189:4278] [client 20.189.202.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/about.php"] [unique_id "aX5SdpEkxOIGmVhqUWK5HgAAAxY"]
[Sun Feb 01 03:05:27.995995 2026] [:error] [pid 31465:tid 31496] [client 20.189.202.189:14318] [client 20.189.202.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/about.php"] [unique_id "aX5SdzkaGp475ez0mlx4AwAAAkI"]
[Sun Feb 01 03:05:30.457591 2026] [:error] [pid 44532:tid 44542] [client 20.189.202.189:14311] [client 20.189.202.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/about.php"] [unique_id "aX5SesH-68uYbAtfrZ3FrAAAAUY"]
[Sun Feb 01 03:05:31.780747 2026] [:error] [pid 18773:tid 18784] [client 20.189.202.189:14325] [client 20.189.202.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/amax.php"] [unique_id "aX5Se9Hy21j24IPrB1UigQAAAYk"]
[Sun Feb 01 03:05:36.991725 2026] [:error] [pid 31430:tid 31437] [client 20.189.202.189:19718] [client 20.189.202.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/amax.php"] [unique_id "aX5SgMcb14YPxXg_g5GFmwAAAEM"]
[Sun Feb 01 03:05:39.298357 2026] [:error] [pid 39339:tid 39350] [client 20.189.202.189:6805] [client 20.189.202.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/amax.php"] [unique_id "aX5Sg8Wi-IjigR3oHY7RrQAAAMk"]
[Sun Feb 01 03:05:42.953350 2026] [:error] [pid 39242:tid 39263] [client 20.189.202.189:19771] [client 20.189.202.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/amax.php"] [unique_id "aX5ShtOgXnkKGGSSCIOByAAAAAk"]
[Sun Feb 01 03:05:44.257661 2026] [:error] [pid 39242:tid 39273] [client 20.189.202.189:6791] [client 20.189.202.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/image.php"] [unique_id "aX5SiNOgXnkKGGSSCIOBywAAABM"]
[Sun Feb 01 03:05:49.193906 2026] [:error] [pid 39339:tid 39349] [client 20.189.202.189:6142] [client 20.189.202.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/image.php"] [unique_id "aX5SjcWi-IjigR3oHY7RtQAAAMg"]
[Sun Feb 01 03:05:54.569610 2026] [:error] [pid 44533:tid 44587] [client 20.189.202.189:7556] [client 20.189.202.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/image.php"] [unique_id "aX5SkoNjc98kHMNVmnuINwAAAdg"]
[Sun Feb 01 03:06:02.668635 2026] [:error] [pid 59582:tid 59635] [client 20.189.202.189:4172] [client 20.189.202.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/990.php"] [unique_id "aX5Smo5dwpvvp1Lc6f2vXwAAA9Y"]
[Sun Feb 01 03:06:04.726568 2026] [:error] [pid 39242:tid 39272] [client 20.189.202.189:6110] [client 20.189.202.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/990.php"] [unique_id "aX5SnNOgXnkKGGSSCIOB2AAAABI"]
[Sun Feb 01 03:06:07.347092 2026] [:error] [pid 31465:tid 31502] [client 20.189.202.189:6087] [client 20.189.202.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/990.php"] [unique_id "aX5SnzkaGp475ez0mlx4KgAAAkg"]
[Sun Feb 01 03:06:09.795824 2026] [:error] [pid 31430:tid 31457] [client 20.189.202.189:6119] [client 20.189.202.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/990.php"] [unique_id "aX5Soccb14YPxXg_g5GFsAAAAFc"]
[Sun Feb 01 03:06:12.082857 2026] [:error] [pid 18803:tid 18827] [client 20.189.202.189:1866] [client 20.189.202.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bypass.php"] [unique_id "aX5SpC2kTcRk9EBIxOHbTwAAAhU"]
[Sun Feb 01 03:06:20.984037 2026] [proxy_fcgi:error] [pid 18773:tid 18781] [client 20.189.202.189:1109] AH01071: Got error 'Primary script unknown'
[Sun Feb 01 03:06:21.371422 2026] [proxy_fcgi:error] [pid 18773:tid 18798] [client 20.189.202.189:1109] AH01071: Got error 'Primary script unknown'
[Sun Feb 01 03:06:21.506303 2026] [proxy_fcgi:error] [pid 18773:tid 18796] [client 20.189.202.189:1109] AH01071: Got error 'Primary script unknown'
[Sun Feb 01 03:06:21.749079 2026] [proxy_fcgi:error] [pid 18773:tid 18776] [client 20.189.202.189:1109] AH01071: Got error 'Primary script unknown'
[Sun Feb 01 03:06:21.888835 2026] [proxy_fcgi:error] [pid 18773:tid 18795] [client 20.189.202.189:1109] AH01071: Got error 'Primary script unknown'
[Sun Feb 01 03:06:22.033118 2026] [proxy_fcgi:error] [pid 18773:tid 18788] [client 20.189.202.189:1109] AH01071: Got error 'Primary script unknown'
[Sun Feb 01 03:06:22.275513 2026] [proxy_fcgi:error] [pid 18773:tid 18783] [client 20.189.202.189:1109] AH01071: Got error 'Primary script unknown'
[Sun Feb 01 03:06:22.401414 2026] [proxy_fcgi:error] [pid 18773:tid 18775] [client 20.189.202.189:1109] AH01071: Got error 'Primary script unknown'
[Sun Feb 01 03:06:22.527862 2026] [proxy_fcgi:error] [pid 18773:tid 18782] [client 20.189.202.189:1109] AH01071: Got error 'Primary script unknown'
[Sun Feb 01 03:06:22.657443 2026] [proxy_fcgi:error] [pid 18773:tid 18787] [client 20.189.202.189:1109] AH01071: Got error 'Primary script unknown'
[Sun Feb 01 03:06:22.778246 2026] [:error] [pid 18773:tid 18777] [client 20.189.202.189:1109] [client 20.189.202.189] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aX5SrtHy21j24IPrB1UisAAAAYI"]
[Sun Feb 01 03:06:40.522472 2026] [:error] [pid 18803:tid 18826] [client 20.189.202.189:6596] [client 20.189.202.189] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dwelectservices.com.au"] [uri "/fm.php"] [unique_id "aX5SwC2kTcRk9EBIxOHbZAAAAhQ"]
[Sun Feb 01 03:06:41.883099 2026] [proxy_fcgi:error] [pid 44532:tid 44551] [client 20.189.202.189:8212] AH01071: Got error 'Primary script unknown'
[Sun Feb 01 03:06:42.003756 2026] [:error] [pid 44532:tid 44543] [client 20.189.202.189:8212] [client 20.189.202.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/buy.php"] [unique_id "aX5SwsH-68uYbAtfrZ3F4AAAAUc"]
[Sun Feb 01 03:06:47.122496 2026] [:error] [pid 39339:tid 39348] [client 20.189.202.189:7740] [client 20.189.202.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/buy.php"] [unique_id "aX5Sx8Wi-IjigR3oHY7R7gAAAMc"]
[Sun Feb 01 03:06:50.026841 2026] [:error] [pid 31465:tid 31515] [client 20.189.202.189:8231] [client 20.189.202.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/buy.php"] [unique_id "aX5SyjkaGp475ez0mlx4WgAAAlU"]
[Sun Feb 01 03:07:13.279278 2026] [:error] [pid 59582:tid 59625] [client 20.189.202.189:7363] [client 20.189.202.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/pro.php"] [unique_id "aX5S4Y5dwpvvp1Lc6f2vlAAAA84"]
[Sun Feb 01 03:07:14.859852 2026] [:error] [pid 18803:tid 18814] [client 20.189.202.189:1351] [client 20.189.202.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/pro.php"] [unique_id "aX5S4i2kTcRk9EBIxOHbdQAAAgg"]
[Sun Feb 01 03:07:16.166610 2026] [:error] [pid 44533:tid 44578] [client 20.189.202.189:7406] [client 20.189.202.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/pro.php"] [unique_id "aX5S5INjc98kHMNVmnuIaQAAAc8"]
[Sun Feb 01 03:07:17.850715 2026] [:error] [pid 39242:tid 39272] [client 20.189.202.189:1385] [client 20.189.202.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/pro.php"] [unique_id "aX5S5dOgXnkKGGSSCIOB-wAAABI"]
[Sun Feb 01 03:07:23.188578 2026] [:error] [pid 31465:tid 31495] [client 20.189.202.189:7699] [client 20.189.202.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/error.php"] [unique_id "aX5S6zkaGp475ez0mlx4dgAAAkE"]
[Sun Feb 01 03:07:26.939359 2026] [:error] [pid 39242:tid 39278] [client 20.189.202.189:6278] [client 20.189.202.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/error.php"] [unique_id "aX5S7tOgXnkKGGSSCIOCBAAAABg"]
[Sun Feb 01 03:07:29.172009 2026] [:error] [pid 44532:tid 44548] [client 20.189.202.189:7379] [client 20.189.202.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/error.php"] [unique_id "aX5S8cH-68uYbAtfrZ3GBQAAAUw"]
[Sun Feb 01 03:07:30.007530 2026] [:error] [pid 44532:tid 44545] [client 20.189.202.189:6274] [client 20.189.202.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/error.php"] [unique_id "aX5S8sH-68uYbAtfrZ3GBwAAAUk"]
[Sun Feb 01 03:07:33.243744 2026] [:error] [pid 18803:tid 18807] [client 20.189.202.189:6293] [client 20.189.202.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aX5S9S2kTcRk9EBIxOHbhAAAAgE"]
[Sun Feb 01 03:07:37.393380 2026] [:error] [pid 59523:tid 59542] [client 20.189.202.189:7382] [client 20.189.202.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aX5S-ZEkxOIGmVhqUWK5dwAAAw8"]
[Sun Feb 01 03:07:39.553393 2026] [:error] [pid 39339:tid 39355] [client 20.189.202.189:18361] [client 20.189.202.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aX5S-8Wi-IjigR3oHY7SDwAAAM4"]
[Sun Feb 01 03:07:46.134222 2026] [proxy_fcgi:error] [pid 31465:tid 31496] [client 20.189.202.189:7069] AH01071: Got error 'Primary script unknown'
[Sun Feb 01 03:07:46.542418 2026] [proxy_fcgi:error] [pid 31465:tid 31508] [client 20.189.202.189:7069] AH01071: Got error 'Primary script unknown'
[Sun Feb 01 03:07:46.720655 2026] [proxy_fcgi:error] [pid 31465:tid 31499] [client 20.189.202.189:7069] AH01071: Got error 'Primary script unknown'
[Sun Feb 01 03:07:46.953818 2026] [proxy_fcgi:error] [pid 31465:tid 31497] [client 20.189.202.189:7069] AH01071: Got error 'Primary script unknown'
[Sun Feb 01 03:07:47.232156 2026] [proxy_fcgi:error] [pid 31465:tid 31517] [client 20.189.202.189:7069] AH01071: Got error 'Primary script unknown'
[Sun Feb 01 03:07:47.356283 2026] [proxy_fcgi:error] [pid 31465:tid 31495] [client 20.189.202.189:7069] AH01071: Got error 'Primary script unknown'
[Sun Feb 01 03:07:47.480108 2026] [proxy_fcgi:error] [pid 31465:tid 31494] [client 20.189.202.189:7069] AH01071: Got error 'Primary script unknown'
[Sun Feb 01 03:07:47.677630 2026] [proxy_fcgi:error] [pid 31465:tid 31500] [client 20.189.202.189:7069] AH01071: Got error 'Primary script unknown'
[Sun Feb 01 03:07:47.808222 2026] [proxy_fcgi:error] [pid 31465:tid 31512] [client 20.189.202.189:7069] AH01071: Got error 'Primary script unknown'
[Sun Feb 01 03:07:47.933143 2026] [proxy_fcgi:error] [pid 31465:tid 31502] [client 20.189.202.189:7069] AH01071: Got error 'Primary script unknown'
[Sun Feb 01 03:07:48.056534 2026] [proxy_fcgi:error] [pid 31465:tid 31505] [client 20.189.202.189:7069] AH01071: Got error 'Primary script unknown'
[Sun Feb 01 23:38:47.946670 2026] [:error] [pid 29578:tid 29586] [client 20.78.128.42:15697] [client 20.78.128.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aX9zh0wa4IUBrS8Q04HS3gAAAYQ"]
[Sun Feb 01 23:38:48.257196 2026] [:error] [pid 10509:tid 10578] [client 20.78.128.42:15733] [client 20.78.128.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aX9ziFMNpJBihOJgwVsqSAAAAIc"]
[Sun Feb 01 23:38:48.522955 2026] [:error] [pid 10616:tid 10627] [client 20.78.128.42:15620] [client 20.78.128.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aX9ziGd8pZdmVx6pUp4UQQAAAMc"]
[Sun Feb 01 23:38:49.222381 2026] [:error] [pid 41454:tid 41465] [client 20.78.128.42:15672] [client 20.78.128.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aX9ziYSGhfKfZM9FAk3FuAAAAck"]
[Mon Feb 02 04:50:28.431169 2026] [:error] [pid 63032:tid 63081] [client 45.92.229.235:56727] [client 45.92.229.235] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.92.229.235, incrementing ddos counter"] [hostname "dwelectservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aX-8lHyEQ1PkpebvdRgQFQAAABI"]
[Mon Feb 02 04:50:28.443886 2026] [proxy_fcgi:error] [pid 63032:tid 63081] [client 45.92.229.235:56727] AH01071: Got error 'Primary script unknown'
[Mon Feb 02 04:50:30.528610 2026] [:error] [pid 63032:tid 63084] [client 45.92.229.235:56727] [client 45.92.229.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "aX-8lnyEQ1PkpebvdRgQHgAAABU"]
[Mon Feb 02 17:55:13.100636 2026] [:error] [pid 57080:tid 57090] [client 35.203.160.253:63788] [client 35.203.160.253] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.203.160.253, incrementing ddos counter"] [hostname "dwelectservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aYB0gY9Utn0ZlfnF10ND3AAAAsM"]
[Mon Feb 02 17:55:13.110215 2026] [proxy_fcgi:error] [pid 57080:tid 57090] [client 35.203.160.253:63788] AH01071: Got error 'Primary script unknown'
[Mon Feb 02 17:55:15.679120 2026] [:error] [pid 57080:tid 57103] [client 35.203.160.253:63788] [client 35.203.160.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "aYB0g49Utn0ZlfnF10ND4wAAAtA"]
[Mon Feb 02 17:55:16.173561 2026] [:error] [pid 56989:tid 56996] [client 35.203.160.253:58408] [client 35.203.160.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2018/wp-includes/wlwmanifest.xml"] [unique_id "aYB0hEp44HnChN-GZljqdAAAAgU"]
[Mon Feb 02 17:55:16.598968 2026] [:error] [pid 63032:tid 63081] [client 35.203.160.253:62496] [client 35.203.160.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "aYB0hHyEQ1PkpebvdRjGswAAABI"]
[Mon Feb 02 17:55:16.996678 2026] [:error] [pid 56989:tid 56995] [client 35.203.160.253:54797] [client 35.203.160.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "aYB0hEp44HnChN-GZljqdwAAAgQ"]
[Mon Feb 02 17:55:17.436852 2026] [:error] [pid 46008:tid 46034] [client 35.203.160.253:65518] [client 35.203.160.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aYB0hSRa52iYn7SlSMmITAAAAVc"]
[Mon Feb 02 17:55:17.829361 2026] [:error] [pid 46008:tid 46032] [client 35.203.160.253:60555] [client 35.203.160.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aYB0hSRa52iYn7SlSMmITgAAAVU"]
[Mon Feb 02 17:55:18.194433 2026] [:error] [pid 33612:tid 33615] [client 35.203.160.253:65117] [client 35.203.160.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aYB0hstFn80qQEmo5QrpnwAAAQE"]
[Mon Feb 02 17:55:18.603367 2026] [:error] [pid 63153:tid 63172] [client 35.203.160.253:60416] [client 35.203.160.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aYB0hnC9GXHnmLkdgdlaoAAAAMs"]
[Mon Feb 02 17:55:19.108582 2026] [:error] [pid 57080:tid 57109] [client 35.203.160.253:54962] [client 35.203.160.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aYB0h49Utn0ZlfnF10ND5gAAAtY"]
[Mon Feb 02 17:55:19.540855 2026] [:error] [pid 56989:tid 56994] [client 35.203.160.253:60592] [client 35.203.160.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aYB0h0p44HnChN-GZljqfAAAAgM"]
[Mon Feb 02 17:55:20.120033 2026] [:error] [pid 63034:tid 63137] [client 35.203.160.253:54083] [client 35.203.160.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aYB0iOKXlgw75_wfbHrBDQAAAJM"]
[Mon Feb 02 20:15:14.424389 2026] [proxy_fcgi:error] [pid 63034:tid 63135] [client 20.205.120.250:25560] AH01071: Got error 'Primary script unknown'
[Mon Feb 02 20:15:14.557225 2026] [proxy_fcgi:error] [pid 63034:tid 63138] [client 20.205.120.250:25560] AH01071: Got error 'Primary script unknown'
[Mon Feb 02 20:15:14.678640 2026] [proxy_fcgi:error] [pid 63034:tid 63136] [client 20.205.120.250:25560] AH01071: Got error 'Primary script unknown'
[Mon Feb 02 20:15:14.809541 2026] [proxy_fcgi:error] [pid 63034:tid 63122] [client 20.205.120.250:25560] AH01071: Got error 'Primary script unknown'
[Mon Feb 02 20:15:14.957804 2026] [proxy_fcgi:error] [pid 63034:tid 63126] [client 20.205.120.250:25560] AH01071: Got error 'Primary script unknown'
[Mon Feb 02 20:15:15.098025 2026] [proxy_fcgi:error] [pid 63034:tid 63129] [client 20.205.120.250:25560] AH01071: Got error 'Primary script unknown'
[Mon Feb 02 20:15:15.225226 2026] [proxy_fcgi:error] [pid 63034:tid 63120] [client 20.205.120.250:25560] AH01071: Got error 'Primary script unknown'
[Mon Feb 02 20:15:15.346443 2026] [proxy_fcgi:error] [pid 63034:tid 63134] [client 20.205.120.250:25560] AH01071: Got error 'Primary script unknown'
[Mon Feb 02 20:15:15.490236 2026] [proxy_fcgi:error] [pid 63034:tid 63118] [client 20.205.120.250:25560] AH01071: Got error 'Primary script unknown'
[Mon Feb 02 20:15:15.635802 2026] [proxy_fcgi:error] [pid 63034:tid 63130] [client 20.205.120.250:25560] AH01071: Got error 'Primary script unknown'
[Mon Feb 02 20:15:15.754694 2026] [:error] [pid 63034:tid 63131] [client 20.205.120.250:25560] [client 20.205.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bk.php"] [unique_id "aYCVU-KXlgw75_wfbHra0AAAAI0"]
[Mon Feb 02 20:15:24.309722 2026] [:error] [pid 46008:tid 46028] [client 20.205.120.250:26436] [client 20.205.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bk.php"] [unique_id "aYCVXCRa52iYn7SlSMmh2QAAAVE"]
[Mon Feb 02 20:15:26.018324 2026] [:error] [pid 63153:tid 63185] [client 20.205.120.250:27419] [client 20.205.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bk.php"] [unique_id "aYCVXnC9GXHnmLkdgdmFfQAAANg"]
[Mon Feb 02 20:15:45.021266 2026] [:error] [pid 63153:tid 63184] [client 20.205.120.250:25015] [client 20.205.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class-t.api.php"] [unique_id "aYCVcXC9GXHnmLkdgdmFlAAAANc"]
[Mon Feb 02 20:15:59.787062 2026] [:error] [pid 56989:tid 57010] [client 20.205.120.250:24740] [client 20.205.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws53.php"] [unique_id "aYCVf0p44HnChN-GZlgMcwAAAhM"]
[Mon Feb 02 20:16:01.761105 2026] [:error] [pid 46008:tid 46011] [client 20.205.120.250:26020] [client 20.205.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws53.php"] [unique_id "aYCVgSRa52iYn7SlSMmh6wAAAUE"]
[Mon Feb 02 20:16:04.209141 2026] [:error] [pid 63153:tid 63183] [client 20.205.120.250:7532] [client 20.205.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws53.php"] [unique_id "aYCVhHC9GXHnmLkdgdmFqgAAANY"]
[Mon Feb 02 20:16:08.420712 2026] [:error] [pid 57022:tid 57066] [client 20.205.120.250:32138] [client 20.205.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/revealability.php"] [unique_id "aYCViBnEgLMzfcurxflKRQAAAo4"]
[Mon Feb 02 20:16:09.619445 2026] [:error] [pid 57081:tid 57130] [client 20.205.120.250:7536] [client 20.205.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/revealability.php"] [unique_id "aYCViWvouJ2Jkm6HfBg5sQAAAw8"]
[Mon Feb 02 20:16:11.576799 2026] [:error] [pid 63153:tid 63163] [client 20.205.120.250:28932] [client 20.205.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/revealability.php"] [unique_id "aYCVi3C9GXHnmLkdgdmFsQAAAMI"]
[Mon Feb 02 20:16:45.363007 2026] [proxy_fcgi:error] [pid 57080:tid 57104] [client 20.205.120.250:21778] AH01071: Got error 'Primary script unknown'
[Mon Feb 02 20:16:45.499677 2026] [proxy_fcgi:error] [pid 57080:tid 57100] [client 20.205.120.250:21778] AH01071: Got error 'Primary script unknown'
[Mon Feb 02 20:16:45.632015 2026] [proxy_fcgi:error] [pid 57080:tid 57106] [client 20.205.120.250:21778] AH01071: Got error 'Primary script unknown'
[Mon Feb 02 20:16:45.753289 2026] [proxy_fcgi:error] [pid 57080:tid 57105] [client 20.205.120.250:21778] AH01071: Got error 'Primary script unknown'
[Mon Feb 02 20:16:46.067100 2026] [proxy_fcgi:error] [pid 57080:tid 57103] [client 20.205.120.250:21778] AH01071: Got error 'Primary script unknown'
[Mon Feb 02 22:21:19.395267 2026] [:error] [pid 63032:tid 63063] [client 34.31.175.90:54794] [client 34.31.175.90] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.31.175.90, incrementing ddos counter"] [hostname "dwelectservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aYCy33yEQ1PkpebvdRj79wAAAAA"]
[Mon Feb 02 22:21:19.403401 2026] [proxy_fcgi:error] [pid 63032:tid 63063] [client 34.31.175.90:54794] AH01071: Got error 'Primary script unknown'
[Mon Feb 02 22:21:20.960998 2026] [:error] [pid 63032:tid 63078] [client 34.31.175.90:54794] [client 34.31.175.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "aYCy4HyEQ1PkpebvdRj8BQAAAA8"]
[Mon Feb 02 22:21:21.536423 2026] [:error] [pid 33612:tid 33632] [client 34.31.175.90:52393] [client 34.31.175.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2018/wp-includes/wlwmanifest.xml"] [unique_id "aYCy4ctFn80qQEmo5QoV-AAAARI"]
[Mon Feb 02 22:21:22.044371 2026] [:error] [pid 57022:tid 57069] [client 34.31.175.90:52525] [client 34.31.175.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "aYCy4hnEgLMzfcurxfleHgAAApE"]
[Mon Feb 02 22:21:22.885179 2026] [:error] [pid 63032:tid 63079] [client 34.31.175.90:60233] [client 34.31.175.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "aYCy4nyEQ1PkpebvdRj8DgAAABA"]
[Mon Feb 02 22:21:23.540035 2026] [:error] [pid 46008:tid 46030] [client 34.31.175.90:63589] [client 34.31.175.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aYCy4yRa52iYn7SlSMm4XwAAAVM"]
[Mon Feb 02 22:21:24.422497 2026] [:error] [pid 57081:tid 57138] [client 34.31.175.90:55342] [client 34.31.175.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aYCy5GvouJ2Jkm6HfBhSAwAAAxc"]
[Mon Feb 02 22:21:25.535438 2026] [:error] [pid 56989:tid 56996] [client 34.31.175.90:62850] [client 34.31.175.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aYCy5Up44HnChN-GZlgqBAAAAgU"]
[Mon Feb 02 22:21:26.288434 2026] [:error] [pid 63032:tid 63074] [client 34.31.175.90:62293] [client 34.31.175.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aYCy5nyEQ1PkpebvdRj8FwAAAAs"]
[Mon Feb 02 22:21:26.870265 2026] [:error] [pid 57081:tid 57119] [client 34.31.175.90:63379] [client 34.31.175.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aYCy5mvouJ2Jkm6HfBhSBwAAAwQ"]
[Mon Feb 02 22:21:27.675014 2026] [:error] [pid 56989:tid 56992] [client 34.31.175.90:61414] [client 34.31.175.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aYCy50p44HnChN-GZlgqBwAAAgE"]
[Mon Feb 02 22:21:28.583344 2026] [:error] [pid 57022:tid 57072] [client 34.31.175.90:62481] [client 34.31.175.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aYCy6BnEgLMzfcurxfleJgAAApQ"]
[Mon Feb 02 23:00:29.828418 2026] [:error] [pid 56989:tid 57007] [client 185.61.221.95:11521] [client 185.61.221.95] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.61.221.95, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-login.php"] [unique_id "aYC8DUp44HnChN-GZlg0FAAAAhA"]
[Mon Feb 02 23:00:29.838964 2026] [proxy_fcgi:error] [pid 56989:tid 57007] [client 185.61.221.95:11521] AH01071: Got error 'Primary script unknown'
[Tue Feb 03 21:57:36.224752 2026] [proxy_fcgi:error] [pid 43028:tid 43032] [client 20.41.103.99:11688] AH01071: Got error 'Primary script unknown'
[Wed Feb 04 00:51:50.252400 2026] [proxy_fcgi:error] [pid 28720:tid 28723] [client 20.92.81.163:22989] AH01071: Got error 'Primary script unknown'
[Wed Feb 04 00:51:50.690522 2026] [proxy_fcgi:error] [pid 28720:tid 28740] [client 20.92.81.163:22989] AH01071: Got error 'Primary script unknown'
[Wed Feb 04 00:51:50.801010 2026] [proxy_fcgi:error] [pid 28720:tid 28726] [client 20.92.81.163:22989] AH01071: Got error 'Primary script unknown'
[Wed Feb 04 00:51:50.827081 2026] [proxy_fcgi:error] [pid 28720:tid 28729] [client 20.92.81.163:22989] AH01071: Got error 'Primary script unknown'
[Wed Feb 04 00:51:50.847148 2026] [proxy_fcgi:error] [pid 28720:tid 28737] [client 20.92.81.163:22989] AH01071: Got error 'Primary script unknown'
[Wed Feb 04 00:51:50.879614 2026] [proxy_fcgi:error] [pid 28720:tid 28744] [client 20.92.81.163:22989] AH01071: Got error 'Primary script unknown'
[Wed Feb 04 00:51:51.065887 2026] [proxy_fcgi:error] [pid 28720:tid 28743] [client 20.92.81.163:22989] AH01071: Got error 'Primary script unknown'
[Wed Feb 04 00:51:51.105720 2026] [proxy_fcgi:error] [pid 28720:tid 28739] [client 20.92.81.163:22989] AH01071: Got error 'Primary script unknown'
[Wed Feb 04 00:51:51.137875 2026] [:error] [pid 28720:tid 28728] [client 20.92.81.163:22989] [client 20.92.81.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xv.php"] [unique_id "aYInp2mRXm2bmr_sYiYOkAAAAQY"]
[Wed Feb 04 00:51:52.516108 2026] [:error] [pid 42920:tid 42945] [client 20.92.81.163:58224] [client 20.92.81.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xv.php"] [unique_id "aYInqCix3YKltG4EU0nBDwAAABA"]
[Wed Feb 04 00:51:56.902336 2026] [:error] [pid 42922:tid 43003] [client 20.92.81.163:32545] [client 20.92.81.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xv.php"] [unique_id "aYInrGazX4WPS_dQRkjZ5AAAAJI"]
[Wed Feb 04 00:51:59.559582 2026] [:error] [pid 42922:tid 42997] [client 20.92.81.163:18417] [client 20.92.81.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xv.php"] [unique_id "aYInr2azX4WPS_dQRkjZ5gAAAIw"]
[Wed Feb 04 00:52:10.181263 2026] [:error] [pid 42920:tid 42946] [client 20.92.81.163:46345] [client 20.92.81.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x56.php"] [unique_id "aYInuiix3YKltG4EU0nBHAAAABE"]
[Wed Feb 04 00:52:10.453491 2026] [:error] [pid 42920:tid 42937] [client 20.92.81.163:50328] [client 20.92.81.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x56.php"] [unique_id "aYInuiix3YKltG4EU0nBHgAAAAg"]
[Wed Feb 04 00:52:11.485859 2026] [:error] [pid 28720:tid 28725] [client 20.92.81.163:50310] [client 20.92.81.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x56.php"] [unique_id "aYInu2mRXm2bmr_sYiYOowAAAQM"]
[Wed Feb 04 00:52:11.786598 2026] [:error] [pid 5148:tid 5169] [client 20.92.81.163:48324] [client 20.92.81.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x56.php"] [unique_id "aYInu783HCHLtUIbS7ItRQAAAVI"]
[Wed Feb 04 00:52:15.017270 2026] [:error] [pid 42922:tid 42997] [client 20.92.81.163:31852] [client 20.92.81.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/htaccess.php"] [unique_id "aYInv2azX4WPS_dQRkjZ8AAAAIw"]
[Wed Feb 04 00:52:15.929861 2026] [:error] [pid 42922:tid 43008] [client 20.92.81.163:55724] [client 20.92.81.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/htaccess.php"] [unique_id "aYInv2azX4WPS_dQRkjZ8QAAAJc"]
[Wed Feb 04 00:52:24.663803 2026] [:error] [pid 28720:tid 28738] [client 20.92.81.163:44481] [client 20.92.81.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/htaccess.php"] [unique_id "aYInyGmRXm2bmr_sYiYOqwAAARA"]
[Wed Feb 04 00:52:26.225267 2026] [:error] [pid 5148:tid 5161] [client 20.92.81.163:48360] [client 20.92.81.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/htaccess.php"] [unique_id "aYInyr83HCHLtUIbS7ItUQAAAUo"]
[Wed Feb 04 00:52:28.197594 2026] [:error] [pid 28720:tid 28734] [client 20.92.81.163:2326] [client 20.92.81.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/readme.php"] [unique_id "aYInzGmRXm2bmr_sYiYOrwAAAQw"]
[Wed Feb 04 00:52:29.366634 2026] [:error] [pid 42922:tid 42996] [client 20.92.81.163:24910] [client 20.92.81.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/readme.php"] [unique_id "aYInzWazX4WPS_dQRkjZ-wAAAIs"]
[Wed Feb 04 00:52:30.248817 2026] [:error] [pid 28720:tid 28723] [client 20.92.81.163:18397] [client 20.92.81.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/readme.php"] [unique_id "aYInzmmRXm2bmr_sYiYOsAAAAQE"]
[Wed Feb 04 00:52:35.308949 2026] [:error] [pid 42920:tid 42953] [client 20.92.81.163:58180] [client 20.92.81.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/readme.php"] [unique_id "aYIn0yix3YKltG4EU0nBIgAAABg"]
[Wed Feb 04 00:52:36.447876 2026] [:error] [pid 5148:tid 5168] [client 20.92.81.163:48326] [client 20.92.81.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x50.php"] [unique_id "aYIn1L83HCHLtUIbS7ItWgAAAVE"]
[Wed Feb 04 00:52:39.315885 2026] [:error] [pid 42921:tid 42977] [client 20.92.81.163:55741] [client 20.92.81.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x50.php"] [unique_id "aYIn14blShffGl-01oe3gwAAAFM"]
[Wed Feb 04 00:52:40.373735 2026] [:error] [pid 43028:tid 43039] [client 20.92.81.163:32478] [client 20.92.81.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x50.php"] [unique_id "aYIn2FnHWnJD4cJC5DsKEgAAAMk"]
[Wed Feb 04 00:52:54.827712 2026] [proxy_fcgi:error] [pid 5229:tid 5238] [client 20.92.81.163:23304] AH01071: Got error 'Primary script unknown'
[Wed Feb 04 00:52:54.860347 2026] [proxy_fcgi:error] [pid 5229:tid 5249] [client 20.92.81.163:23304] AH01071: Got error 'Primary script unknown'
[Wed Feb 04 00:52:54.880936 2026] [proxy_fcgi:error] [pid 5229:tid 5246] [client 20.92.81.163:23304] AH01071: Got error 'Primary script unknown'
[Wed Feb 04 00:52:54.899199 2026] [proxy_fcgi:error] [pid 5229:tid 5231] [client 20.92.81.163:23304] AH01071: Got error 'Primary script unknown'
[Wed Feb 04 00:52:54.927313 2026] [proxy_fcgi:error] [pid 5229:tid 5234] [client 20.92.81.163:23304] AH01071: Got error 'Primary script unknown'
[Wed Feb 04 00:52:54.957606 2026] [proxy_fcgi:error] [pid 5229:tid 5250] [client 20.92.81.163:23304] AH01071: Got error 'Primary script unknown'
[Wed Feb 04 00:52:54.998455 2026] [proxy_fcgi:error] [pid 5229:tid 5232] [client 20.92.81.163:23304] AH01071: Got error 'Primary script unknown'
[Wed Feb 04 00:52:55.032597 2026] [proxy_fcgi:error] [pid 5229:tid 5243] [client 20.92.81.163:23304] AH01071: Got error 'Primary script unknown'
[Wed Feb 04 00:52:55.154134 2026] [proxy_fcgi:error] [pid 5229:tid 5244] [client 20.92.81.163:23304] AH01071: Got error 'Primary script unknown'
[Wed Feb 04 00:52:55.289153 2026] [proxy_fcgi:error] [pid 5229:tid 5239] [client 20.92.81.163:23304] AH01071: Got error 'Primary script unknown'
[Wed Feb 04 00:52:55.307664 2026] [proxy_fcgi:error] [pid 5229:tid 5237] [client 20.92.81.163:23304] AH01071: Got error 'Primary script unknown'
[Wed Feb 04 00:52:55.342632 2026] [:error] [pid 5229:tid 5236] [client 20.92.81.163:23304] [client 20.92.81.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aYIn50KmEgmJub93yUpOAQAAAYU"]
[Wed Feb 04 00:52:56.373319 2026] [:error] [pid 28720:tid 28743] [client 20.92.81.163:2841] [client 20.92.81.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aYIn6GmRXm2bmr_sYiYO0wAAARU"]
[Wed Feb 04 00:52:58.157157 2026] [:error] [pid 43028:tid 43048] [client 20.92.81.163:31289] [client 20.92.81.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aYIn6lnHWnJD4cJC5DsKJQAAANI"]
[Wed Feb 04 00:52:58.457123 2026] [:error] [pid 28720:tid 28745] [client 20.92.81.163:43754] [client 20.92.81.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aYIn6mmRXm2bmr_sYiYO1AAAARc"]
[Wed Feb 04 00:53:00.190255 2026] [:error] [pid 42920:tid 42933] [client 20.92.81.163:32481] [client 20.92.81.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aYIn7Cix3YKltG4EU0nBMQAAAAQ"]
[Wed Feb 04 00:53:03.898612 2026] [:error] [pid 43028:tid 43052] [client 20.92.81.163:2837] [client 20.92.81.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aYIn71nHWnJD4cJC5DsKMAAAANY"]
[Wed Feb 04 00:53:04.906050 2026] [:error] [pid 5229:tid 5237] [client 20.92.81.163:43720] [client 20.92.81.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aYIn8EKmEgmJub93yUpODQAAAYY"]
[Wed Feb 04 00:53:11.675718 2026] [:error] [pid 5229:tid 5232] [client 20.92.81.163:32540] [client 20.92.81.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aYIn90KmEgmJub93yUpOFAAAAYE"]
[Wed Feb 04 00:53:16.619509 2026] [:error] [pid 42921:tid 42958] [client 20.92.81.163:48354] [client 20.92.81.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/click.php"] [unique_id "aYIn_IblShffGl-01oe3oAAAAEA"]
[Wed Feb 04 00:53:19.021527 2026] [:error] [pid 43028:tid 43042] [client 20.92.81.163:2236] [client 20.92.81.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/click.php"] [unique_id "aYIn_1nHWnJD4cJC5DsKTQAAAMw"]
[Wed Feb 04 00:53:28.445369 2026] [:error] [pid 28720:tid 28725] [client 20.92.81.163:58190] [client 20.92.81.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/install.php"] [unique_id "aYIoCGmRXm2bmr_sYiYO-AAAAQM"]
[Wed Feb 04 00:53:32.131466 2026] [:error] [pid 5229:tid 5242] [client 20.92.81.163:58214] [client 20.92.81.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/install.php"] [unique_id "aYIoDEKmEgmJub93yUpONgAAAYs"]
[Wed Feb 04 00:53:34.460607 2026] [:error] [pid 42921:tid 42962] [client 20.92.81.163:55697] [client 20.92.81.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/install.php"] [unique_id "aYIoDoblShffGl-01oe3rAAAAEQ"]
[Wed Feb 04 00:53:54.005449 2026] [:error] [pid 42920:tid 42952] [client 20.92.81.163:48339] [client 20.92.81.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lv.php"] [unique_id "aYIoIiix3YKltG4EU0nBaAAAABc"]
[Wed Feb 04 00:53:55.216862 2026] [proxy_fcgi:error] [pid 43028:tid 43044] [client 20.92.81.163:57180] AH01071: Got error 'Primary script unknown'
[Wed Feb 04 00:53:55.258985 2026] [proxy_fcgi:error] [pid 43028:tid 43045] [client 20.92.81.163:57180] AH01071: Got error 'Primary script unknown'
[Wed Feb 04 00:53:55.278948 2026] [proxy_fcgi:error] [pid 43028:tid 43037] [client 20.92.81.163:57180] AH01071: Got error 'Primary script unknown'
[Wed Feb 04 00:53:55.301017 2026] [proxy_fcgi:error] [pid 43028:tid 43054] [client 20.92.81.163:57180] AH01071: Got error 'Primary script unknown'
[Wed Feb 04 00:53:55.317220 2026] [:error] [pid 43028:tid 43043] [client 20.92.81.163:57180] [client 20.92.81.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aYIoI1nHWnJD4cJC5DsKgAAAAM0"]
[Wed Feb 04 00:53:57.595760 2026] [proxy_fcgi:error] [pid 42920:tid 42949] [client 20.92.81.163:2833] AH01071: Got error 'Primary script unknown'
[Wed Feb 04 00:53:57.632976 2026] [proxy_fcgi:error] [pid 42920:tid 42930] [client 20.92.81.163:2833] AH01071: Got error 'Primary script unknown'
[Wed Feb 04 00:53:57.656293 2026] [proxy_fcgi:error] [pid 42920:tid 42934] [client 20.92.81.163:2833] AH01071: Got error 'Primary script unknown'
[Wed Feb 04 00:53:57.679141 2026] [proxy_fcgi:error] [pid 42920:tid 42935] [client 20.92.81.163:2833] AH01071: Got error 'Primary script unknown'
[Wed Feb 04 00:53:57.701840 2026] [proxy_fcgi:error] [pid 42920:tid 42938] [client 20.92.81.163:2833] AH01071: Got error 'Primary script unknown'
[Wed Feb 04 00:53:57.725727 2026] [proxy_fcgi:error] [pid 42920:tid 42931] [client 20.92.81.163:2833] AH01071: Got error 'Primary script unknown'
[Wed Feb 04 00:53:58.052341 2026] [:error] [pid 42920:tid 42952] [client 20.92.81.163:2833] [client 20.92.81.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin.php"] [unique_id "aYIoJiix3YKltG4EU0nBcwAAABc"]
[Wed Feb 04 00:53:58.557941 2026] [:error] [pid 5229:tid 5245] [client 20.92.81.163:56857] [client 20.92.81.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin.php"] [unique_id "aYIoJkKmEgmJub93yUpOXAAAAY4"]
[Wed Feb 04 00:53:58.851475 2026] [:error] [pid 5229:tid 5234] [client 20.92.81.163:55729] [client 20.92.81.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin.php"] [unique_id "aYIoJkKmEgmJub93yUpOXQAAAYM"]
[Wed Feb 04 00:53:59.207940 2026] [:error] [pid 42922:tid 43004] [client 20.92.81.163:21533] [client 20.92.81.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin.php"] [unique_id "aYIoJ2azX4WPS_dQRkjaXAAAAJM"]
[Wed Feb 04 00:54:01.030071 2026] [:error] [pid 42922:tid 42994] [client 20.92.81.163:21511] [client 20.92.81.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aYIoKWazX4WPS_dQRkjaXQAAAIk"]
[Wed Feb 04 00:54:02.789652 2026] [:error] [pid 5148:tid 5160] [client 20.92.81.163:27920] [client 20.92.81.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aYIoKr83HCHLtUIbS7ItrgAAAUk"]
[Wed Feb 04 00:54:05.107354 2026] [:error] [pid 42921:tid 42978] [client 20.92.81.163:20224] [client 20.92.81.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aYIoLYblShffGl-01oe3ywAAAFQ"]
[Wed Feb 04 00:54:06.335583 2026] [:error] [pid 42922:tid 43009] [client 20.92.81.163:56858] [client 20.92.81.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aYIoLmazX4WPS_dQRkjaZQAAAJg"]
[Wed Feb 04 00:54:09.086785 2026] [:error] [pid 5148:tid 5163] [client 20.92.81.163:25501] [client 20.92.81.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aYIoMb83HCHLtUIbS7ItuAAAAUw"]
[Wed Feb 04 00:54:09.947792 2026] [:error] [pid 5148:tid 5168] [client 20.92.81.163:62413] [client 20.92.81.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aYIoMb83HCHLtUIbS7ItugAAAVE"]
[Wed Feb 04 00:54:10.584915 2026] [:error] [pid 5229:tid 5240] [client 20.92.81.163:21536] [client 20.92.81.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aYIoMkKmEgmJub93yUpObQAAAYk"]
[Wed Feb 04 00:54:26.399626 2026] [:error] [pid 5229:tid 5232] [client 20.92.81.163:2865] [client 20.92.81.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/abcd.php"] [unique_id "aYIoQkKmEgmJub93yUpOfgAAAYE"]
[Wed Feb 04 00:54:27.912091 2026] [:error] [pid 5148:tid 5152] [client 20.92.81.163:20912] [client 20.92.81.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/abcd.php"] [unique_id "aYIoQ783HCHLtUIbS7It1gAAAUE"]
[Wed Feb 04 00:54:31.990627 2026] [:error] [pid 5229:tid 5254] [client 20.92.81.163:62400] [client 20.92.81.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/abcd.php"] [unique_id "aYIoR0KmEgmJub93yUpOiQAAAZc"]
[Wed Feb 04 00:54:35.083754 2026] [:error] [pid 42922:tid 42999] [client 20.92.81.163:20283] [client 20.92.81.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/abcd.php"] [unique_id "aYIoS2azX4WPS_dQRkjahwAAAI4"]
[Wed Feb 04 00:54:36.264640 2026] [:error] [pid 5229:tid 5246] [client 20.92.81.163:32514] [client 20.92.81.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/autoload_classmap.php"] [unique_id "aYIoTEKmEgmJub93yUpOjwAAAY8"]
[Wed Feb 04 00:54:41.261308 2026] [:error] [pid 5229:tid 5238] [client 20.92.81.163:56277] [client 20.92.81.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/autoload_classmap.php"] [unique_id "aYIoUUKmEgmJub93yUpOlgAAAYc"]
[Wed Feb 04 00:54:43.295067 2026] [:error] [pid 42922:tid 42993] [client 20.92.81.163:62463] [client 20.92.81.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/autoload_classmap.php"] [unique_id "aYIoU2azX4WPS_dQRkjalQAAAIg"]
[Wed Feb 04 00:54:43.535892 2026] [:error] [pid 42922:tid 43006] [client 20.92.81.163:56278] [client 20.92.81.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/autoload_classmap.php"] [unique_id "aYIoU2azX4WPS_dQRkjalgAAAJU"]
[Wed Feb 04 00:54:46.191231 2026] [:error] [pid 43028:tid 43031] [client 20.92.81.163:63911] [client 20.92.81.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/inputs.php"] [unique_id "aYIoVlnHWnJD4cJC5DsK1wAAAME"]
[Wed Feb 04 00:54:48.396064 2026] [:error] [pid 42922:tid 43002] [client 20.92.81.163:2858] [client 20.92.81.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/inputs.php"] [unique_id "aYIoWGazX4WPS_dQRkjaogAAAJE"]
[Wed Feb 04 00:54:51.863496 2026] [:error] [pid 28720:tid 28731] [client 20.92.81.163:62452] [client 20.92.81.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/inputs.php"] [unique_id "aYIoW2mRXm2bmr_sYiYPUwAAAQk"]
[Wed Feb 04 00:55:02.362451 2026] [proxy_fcgi:error] [pid 42921:tid 42980] [client 20.92.81.163:28641] AH01071: Got error 'Primary script unknown'
[Wed Feb 04 00:55:02.401289 2026] [proxy_fcgi:error] [pid 42921:tid 42971] [client 20.92.81.163:28641] AH01071: Got error 'Primary script unknown'
[Wed Feb 04 00:55:02.838538 2026] [proxy_fcgi:error] [pid 42921:tid 42959] [client 20.92.81.163:28641] AH01071: Got error 'Primary script unknown'
[Wed Feb 04 00:55:02.856683 2026] [proxy_fcgi:error] [pid 42921:tid 42970] [client 20.92.81.163:28641] AH01071: Got error 'Primary script unknown'
[Wed Feb 04 00:55:02.897600 2026] [proxy_fcgi:error] [pid 42921:tid 42978] [client 20.92.81.163:28641] AH01071: Got error 'Primary script unknown'
[Wed Feb 04 00:55:02.920220 2026] [proxy_fcgi:error] [pid 42921:tid 42973] [client 20.92.81.163:28641] AH01071: Got error 'Primary script unknown'
[Wed Feb 04 00:55:02.937072 2026] [:error] [pid 42921:tid 42975] [client 20.92.81.163:28641] [client 20.92.81.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aYIoZoblShffGl-01oe4BQAAAFE"]
[Wed Feb 04 00:55:03.633161 2026] [:error] [pid 43028:tid 43037] [client 20.92.81.163:2886] [client 20.92.81.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aYIoZ1nHWnJD4cJC5DsK9gAAAMc"]
[Wed Feb 04 00:55:07.481680 2026] [:error] [pid 42920:tid 42939] [client 20.92.81.163:51590] [client 20.92.81.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aYIoayix3YKltG4EU0nBrwAAAAo"]
[Wed Feb 04 00:55:08.528948 2026] [:error] [pid 5148:tid 5156] [client 20.92.81.163:2404] [client 20.92.81.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aYIobL83HCHLtUIbS7IuAwAAAUU"]
[Wed Feb 04 00:55:16.492684 2026] [:error] [pid 5148:tid 5163] [client 20.92.81.163:51608] [client 20.92.81.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sx.php"] [unique_id "aYIodL83HCHLtUIbS7IuCwAAAUw"]
[Wed Feb 04 00:55:17.829386 2026] [:error] [pid 5229:tid 5254] [client 20.92.81.163:53457] [client 20.92.81.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sx.php"] [unique_id "aYIodUKmEgmJub93yUpOsQAAAZc"]
[Wed Feb 04 00:55:19.107847 2026] [:error] [pid 28720:tid 28742] [client 20.92.81.163:31170] [client 20.92.81.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sx.php"] [unique_id "aYIod2mRXm2bmr_sYiYPbgAAARQ"]
[Wed Feb 04 00:55:20.916198 2026] [:error] [pid 5148:tid 5152] [client 20.92.81.163:21579] [client 20.92.81.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sx.php"] [unique_id "aYIoeL83HCHLtUIbS7IuFQAAAUE"]
[Wed Feb 04 00:55:27.064778 2026] [:error] [pid 42920:tid 42943] [client 20.92.81.163:28321] [client 20.92.81.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aYIofyix3YKltG4EU0nBvwAAAA4"]
[Wed Feb 04 00:55:27.952685 2026] [:error] [pid 43028:tid 43053] [client 20.92.81.163:11763] [client 20.92.81.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aYIof1nHWnJD4cJC5DsLEgAAANc"]
[Wed Feb 04 00:55:31.203758 2026] [:error] [pid 42921:tid 42977] [client 20.92.81.163:11727] [client 20.92.81.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aYIog4blShffGl-01oe4FgAAAFM"]
[Wed Feb 04 00:55:32.483001 2026] [:error] [pid 43028:tid 43042] [client 20.92.81.163:59612] [client 20.92.81.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aYIohFnHWnJD4cJC5DsLHQAAAMw"]
[Wed Feb 04 00:55:34.318124 2026] [:error] [pid 28720:tid 28742] [client 20.92.81.163:43799] [client 20.92.81.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/alfa.php"] [unique_id "aYIohmmRXm2bmr_sYiYPeQAAARQ"]
[Wed Feb 04 00:55:36.084741 2026] [:error] [pid 42921:tid 42967] [client 20.92.81.163:30809] [client 20.92.81.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/alfa.php"] [unique_id "aYIoiIblShffGl-01oe4GwAAAEk"]
[Wed Feb 04 00:55:43.127324 2026] [:error] [pid 43028:tid 43048] [client 20.92.81.163:29893] [client 20.92.81.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/alfa.php"] [unique_id "aYIoj1nHWnJD4cJC5DsLLQAAANI"]
[Wed Feb 04 00:56:00.383291 2026] [:error] [pid 43028:tid 43040] [client 20.92.81.163:2510] [client 20.92.81.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/1.php"] [unique_id "aYIooFnHWnJD4cJC5DsLTAAAAMo"]
[Wed Feb 04 00:56:05.255033 2026] [proxy_fcgi:error] [pid 5148:tid 5157] [client 20.92.81.163:2514] AH01071: Got error 'Primary script unknown'
[Wed Feb 04 00:56:05.277254 2026] [proxy_fcgi:error] [pid 5148:tid 5162] [client 20.92.81.163:2514] AH01071: Got error 'Primary script unknown'
[Wed Feb 04 00:56:05.297071 2026] [proxy_fcgi:error] [pid 5148:tid 5165] [client 20.92.81.163:2514] AH01071: Got error 'Primary script unknown'
[Wed Feb 04 00:56:05.609860 2026] [proxy_fcgi:error] [pid 5148:tid 5161] [client 20.92.81.163:2514] AH01071: Got error 'Primary script unknown'
[Wed Feb 04 00:56:05.637641 2026] [:error] [pid 5148:tid 5151] [client 20.92.81.163:2514] [client 20.92.81.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aYIopb83HCHLtUIbS7IuagAAAUA"]
[Wed Feb 04 00:56:08.012516 2026] [proxy_fcgi:error] [pid 5229:tid 5239] [client 20.92.81.163:56559] AH01071: Got error 'Primary script unknown'
[Wed Feb 04 00:56:08.028745 2026] [:error] [pid 5229:tid 5247] [client 20.92.81.163:56559] [client 20.92.81.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "aYIoqEKmEgmJub93yUpO8AAAAZA"]
[Wed Feb 04 00:56:09.288384 2026] [:error] [pid 43028:tid 43030] [client 20.92.81.163:24891] [client 20.92.81.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aYIoqVnHWnJD4cJC5DsLZAAAAMA"]
[Wed Feb 04 00:56:40.451241 2026] [:error] [pid 42922:tid 43009] [client 20.92.81.163:12074] [client 20.92.81.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aYIoyGazX4WPS_dQRkja9gAAAJg"]
[Wed Feb 04 00:56:41.289914 2026] [:error] [pid 42921:tid 42966] [client 20.92.81.163:19024] [client 20.92.81.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aYIoyYblShffGl-01oe4XAAAAEg"]
[Wed Feb 04 00:56:42.450468 2026] [:error] [pid 43028:tid 43049] [client 20.92.81.163:34946] [client 20.92.81.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aYIoylnHWnJD4cJC5DsLmQAAANM"]
[Wed Feb 04 00:56:43.374568 2026] [:error] [pid 42920:tid 42930] [client 20.92.81.163:34978] [client 20.92.81.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aYIoyyix3YKltG4EU0nB_wAAAAE"]
[Wed Feb 04 00:56:45.467697 2026] [:error] [pid 28720:tid 28724] [client 20.92.81.163:30600] [client 20.92.81.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aYIozWmRXm2bmr_sYiYPzAAAAQI"]
[Wed Feb 04 00:56:48.744480 2026] [:error] [pid 42921:tid 42960] [client 20.92.81.163:62514] [client 20.92.81.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ww1.php"] [unique_id "aYIo0IblShffGl-01oe4XQAAAEI"]
[Wed Feb 04 00:56:49.744475 2026] [:error] [pid 42922:tid 43005] [client 20.92.81.163:12049] [client 20.92.81.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ww1.php"] [unique_id "aYIo0WazX4WPS_dQRkjbCwAAAJQ"]
[Wed Feb 04 00:56:53.835528 2026] [:error] [pid 5148:tid 5160] [client 20.92.81.163:34983] [client 20.92.81.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ww1.php"] [unique_id "aYIo1b83HCHLtUIbS7IukQAAAUk"]
[Wed Feb 04 00:56:55.342738 2026] [:error] [pid 42922:tid 42988] [client 20.92.81.163:62521] [client 20.92.81.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ww1.php"] [unique_id "aYIo12azX4WPS_dQRkjbEQAAAIM"]
[Wed Feb 04 00:56:56.347519 2026] [:error] [pid 5148:tid 5157] [client 20.92.81.163:34988] [client 20.92.81.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/about/function.php"] [unique_id "aYIo2L83HCHLtUIbS7IumAAAAUY"]
[Wed Feb 04 00:56:59.801835 2026] [:error] [pid 42922:tid 42997] [client 20.92.81.163:16485] [client 20.92.81.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/about/function.php"] [unique_id "aYIo22azX4WPS_dQRkjbFQAAAIw"]
[Wed Feb 04 00:57:02.548792 2026] [:error] [pid 43028:tid 43050] [client 20.92.81.163:62510] [client 20.92.81.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/about/function.php"] [unique_id "aYIo3lnHWnJD4cJC5DsLsAAAANQ"]
[Wed Feb 04 00:57:05.115248 2026] [:error] [pid 42921:tid 42979] [client 20.92.81.163:61021] [client 20.92.81.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/about/function.php"] [unique_id "aYIo4YblShffGl-01oe4dgAAAFU"]
[Wed Feb 04 00:57:14.876625 2026] [proxy_fcgi:error] [pid 42921:tid 42963] [client 20.92.81.163:34990] AH01071: Got error 'Primary script unknown'
[Wed Feb 04 00:57:14.917713 2026] [proxy_fcgi:error] [pid 42921:tid 42968] [client 20.92.81.163:34990] AH01071: Got error 'Primary script unknown'
[Wed Feb 04 00:57:15.155835 2026] [:error] [pid 42921:tid 42964] [client 20.92.81.163:34990] [client 20.92.81.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aYIo64blShffGl-01oe4iwAAAEY"]
[Wed Feb 04 00:57:18.186023 2026] [:error] [pid 42920:tid 42940] [client 20.92.81.163:29997] [client 20.92.81.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aYIo7iix3YKltG4EU0nCKQAAAAs"]
[Wed Feb 04 00:57:25.311924 2026] [:error] [pid 42920:tid 42951] [client 20.92.81.163:2803] [client 20.92.81.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aYIo9Six3YKltG4EU0nCLAAAABY"]
[Wed Feb 04 00:57:28.507008 2026] [:error] [pid 5229:tid 5248] [client 20.92.81.163:61060] [client 20.92.81.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aYIo-EKmEgmJub93yUpPPwAAAZE"]
[Wed Feb 04 00:57:30.614173 2026] [:error] [pid 42920:tid 42945] [client 20.92.81.163:52811] [client 20.92.81.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aYIo-iix3YKltG4EU0nCNwAAABA"]
[Wed Feb 04 00:57:46.154473 2026] [:error] [pid 5229:tid 5250] [client 20.92.81.163:2121] [client 20.92.81.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aYIpCkKmEgmJub93yUpPTgAAAZM"]
[Wed Feb 04 00:57:46.876773 2026] [:error] [pid 28720:tid 28736] [client 20.92.81.163:61379] [client 20.92.81.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/log.php"] [unique_id "aYIpCmmRXm2bmr_sYiYQFwAAAQ4"]
[Wed Feb 04 00:57:47.830145 2026] [:error] [pid 5229:tid 5244] [client 20.92.81.163:61110] [client 20.92.81.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/log.php"] [unique_id "aYIpC0KmEgmJub93yUpPVQAAAY0"]
[Wed Feb 04 00:57:48.333837 2026] [:error] [pid 5229:tid 5247] [client 20.92.81.163:2800] [client 20.92.81.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/log.php"] [unique_id "aYIpDEKmEgmJub93yUpPVwAAAZA"]
[Wed Feb 04 00:57:55.564597 2026] [:error] [pid 5229:tid 5242] [client 20.92.81.163:61095] [client 20.92.81.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/log.php"] [unique_id "aYIpE0KmEgmJub93yUpPZgAAAYs"]
[Wed Feb 04 00:57:59.306614 2026] [:error] [pid 43028:tid 43033] [client 20.92.81.163:61071] [client 20.92.81.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class.php"] [unique_id "aYIpF1nHWnJD4cJC5DsMAwAAAMM"]
[Wed Feb 04 00:58:00.571464 2026] [:error] [pid 42921:tid 42975] [client 20.92.81.163:2153] [client 20.92.81.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class.php"] [unique_id "aYIpGIblShffGl-01oe45AAAAFE"]
[Wed Feb 04 00:58:04.507227 2026] [:error] [pid 43028:tid 43036] [client 20.92.81.163:59870] [client 20.92.81.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class.php"] [unique_id "aYIpHFnHWnJD4cJC5DsMFQAAAMY"]
[Wed Feb 04 00:58:08.052326 2026] [:error] [pid 5148:tid 5151] [client 20.92.81.163:54652] [client 20.92.81.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class.php"] [unique_id "aYIpIL83HCHLtUIbS7Iu9wAAAUA"]
[Wed Feb 04 00:58:18.189830 2026] [proxy_fcgi:error] [pid 42922:tid 42989] [client 20.92.81.163:20348] AH01071: Got error 'Primary script unknown'
[Wed Feb 04 00:58:18.209427 2026] [:error] [pid 42922:tid 43006] [client 20.92.81.163:20348] [client 20.92.81.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aYIpKmazX4WPS_dQRkjbbAAAAJU"]
[Wed Feb 04 00:58:27.779626 2026] [:error] [pid 43028:tid 43049] [client 20.92.81.163:55700] [client 20.92.81.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/block-patterns/index.php"] [unique_id "aYIpM1nHWnJD4cJC5DsMJQAAANM"]
[Wed Feb 04 00:58:28.381864 2026] [proxy_fcgi:error] [pid 5229:tid 5247] [client 20.92.81.163:57406] AH01071: Got error 'Primary script unknown'
[Wed Feb 04 00:58:28.399624 2026] [proxy_fcgi:error] [pid 5229:tid 5248] [client 20.92.81.163:57406] AH01071: Got error 'Primary script unknown'
[Wed Feb 04 00:58:28.419452 2026] [proxy_fcgi:error] [pid 5229:tid 5245] [client 20.92.81.163:57406] AH01071: Got error 'Primary script unknown'
[Wed Feb 04 00:58:28.438775 2026] [proxy_fcgi:error] [pid 5229:tid 5239] [client 20.92.81.163:57406] AH01071: Got error 'Primary script unknown'
[Wed Feb 04 00:58:28.460856 2026] [proxy_fcgi:error] [pid 5229:tid 5240] [client 20.92.81.163:57406] AH01071: Got error 'Primary script unknown'
[Wed Feb 04 00:58:28.481262 2026] [proxy_fcgi:error] [pid 5229:tid 5251] [client 20.92.81.163:57406] AH01071: Got error 'Primary script unknown'
[Wed Feb 04 00:58:28.499904 2026] [proxy_fcgi:error] [pid 5229:tid 5242] [client 20.92.81.163:57406] AH01071: Got error 'Primary script unknown'
[Wed Feb 04 00:58:28.533256 2026] [proxy_fcgi:error] [pid 5229:tid 5249] [client 20.92.81.163:57406] AH01071: Got error 'Primary script unknown'
[Wed Feb 04 00:58:28.551990 2026] [proxy_fcgi:error] [pid 5229:tid 5235] [client 20.92.81.163:57406] AH01071: Got error 'Primary script unknown'
[Wed Feb 04 00:58:28.589220 2026] [proxy_fcgi:error] [pid 5229:tid 5231] [client 20.92.81.163:57406] AH01071: Got error 'Primary script unknown'
[Wed Feb 04 00:58:28.629742 2026] [:error] [pid 5229:tid 5255] [client 20.92.81.163:57406] [client 20.92.81.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x.php"] [unique_id "aYIpNEKmEgmJub93yUpPrwAAAZg"]
[Wed Feb 04 00:58:31.049321 2026] [:error] [pid 42922:tid 42989] [client 20.92.81.163:55710] [client 20.92.81.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x.php"] [unique_id "aYIpN2azX4WPS_dQRkjbhAAAAIQ"]
[Wed Feb 04 00:58:31.989937 2026] [:error] [pid 28720:tid 28744] [client 20.92.81.163:2458] [client 20.92.81.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x.php"] [unique_id "aYIpN2mRXm2bmr_sYiYQXQAAARY"]
[Wed Feb 04 00:58:40.549015 2026] [:error] [pid 28720:tid 28723] [client 20.92.81.163:55728] [client 20.92.81.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x.php"] [unique_id "aYIpQGmRXm2bmr_sYiYQawAAAQE"]
[Wed Feb 04 00:58:41.691079 2026] [:error] [pid 28720:tid 28729] [client 20.92.81.163:23331] [client 20.92.81.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xx.php"] [unique_id "aYIpQWmRXm2bmr_sYiYQbgAAAQc"]
[Wed Feb 04 00:59:03.928071 2026] [:error] [pid 42921:tid 42964] [client 20.92.81.163:27277] [client 20.92.81.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gifclass4.php"] [unique_id "aYIpV4blShffGl-01oe5IQAAAEY"]
[Wed Feb 04 00:59:05.339897 2026] [:error] [pid 42921:tid 42963] [client 20.92.81.163:20330] [client 20.92.81.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gifclass4.php"] [unique_id "aYIpWYblShffGl-01oe5JAAAAEU"]
[Wed Feb 04 00:59:07.483655 2026] [:error] [pid 28720:tid 28744] [client 20.92.81.163:57411] [client 20.92.81.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gifclass4.php"] [unique_id "aYIpW2mRXm2bmr_sYiYQgAAAARY"]
[Wed Feb 04 00:59:10.069429 2026] [:error] [pid 28720:tid 28729] [client 20.92.81.163:2155] [client 20.92.81.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gifclass4.php"] [unique_id "aYIpXmmRXm2bmr_sYiYQgwAAAQc"]
[Wed Feb 04 00:59:12.515148 2026] [:error] [pid 43028:tid 43052] [client 20.92.81.163:33594] [client 20.92.81.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2clas.php"] [unique_id "aYIpYFnHWnJD4cJC5DsMXQAAANY"]
[Wed Feb 04 00:59:27.568409 2026] [:error] [pid 5229:tid 5252] [client 20.92.81.163:58646] [client 20.92.81.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ave.php"] [unique_id "aYIpb0KmEgmJub93yUpQFwAAAZU"]
[Wed Feb 04 00:59:29.946608 2026] [proxy_fcgi:error] [pid 5148:tid 5164] [client 20.92.81.163:56059] AH01071: Got error 'Primary script unknown'
[Wed Feb 04 00:59:29.975042 2026] [proxy_fcgi:error] [pid 5148:tid 5167] [client 20.92.81.163:56059] AH01071: Got error 'Primary script unknown'
[Wed Feb 04 00:59:30.007025 2026] [proxy_fcgi:error] [pid 5148:tid 5163] [client 20.92.81.163:56059] AH01071: Got error 'Primary script unknown'
[Wed Feb 04 00:59:30.027149 2026] [proxy_fcgi:error] [pid 5148:tid 5168] [client 20.92.81.163:56059] AH01071: Got error 'Primary script unknown'
[Wed Feb 04 00:59:30.047356 2026] [proxy_fcgi:error] [pid 5148:tid 5155] [client 20.92.81.163:56059] AH01071: Got error 'Primary script unknown'
[Wed Feb 04 00:59:30.134073 2026] [proxy_fcgi:error] [pid 5148:tid 5166] [client 20.92.81.163:56059] AH01071: Got error 'Primary script unknown'
[Wed Feb 04 00:59:30.154107 2026] [proxy_fcgi:error] [pid 5148:tid 5156] [client 20.92.81.163:56059] AH01071: Got error 'Primary script unknown'
[Wed Feb 04 00:59:30.200145 2026] [proxy_fcgi:error] [pid 5148:tid 5175] [client 20.92.81.163:56059] AH01071: Got error 'Primary script unknown'
[Wed Feb 04 00:59:30.399977 2026] [proxy_fcgi:error] [pid 5148:tid 5152] [client 20.92.81.163:56059] AH01071: Got error 'Primary script unknown'
[Wed Feb 04 00:59:30.423253 2026] [proxy_fcgi:error] [pid 5148:tid 5158] [client 20.92.81.163:56059] AH01071: Got error 'Primary script unknown'
[Wed Feb 04 00:59:30.438922 2026] [:error] [pid 5148:tid 5153] [client 20.92.81.163:56059] [client 20.92.81.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class9.php"] [unique_id "aYIpcr83HCHLtUIbS7IvWgAAAUI"]
[Wed Feb 04 00:59:33.096452 2026] [:error] [pid 28720:tid 28724] [client 20.92.81.163:2159] [client 20.92.81.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class9.php"] [unique_id "aYIpdWmRXm2bmr_sYiYQtAAAAQI"]
[Wed Feb 04 00:59:35.594520 2026] [:error] [pid 43028:tid 43049] [client 20.92.81.163:57424] [client 20.92.81.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class9.php"] [unique_id "aYIpd1nHWnJD4cJC5DsMjwAAANM"]
[Wed Feb 04 01:00:22.271608 2026] [:error] [pid 42921:tid 42964] [client 20.92.81.163:27366] [client 20.92.81.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ccou.php"] [unique_id "aYIppoblShffGl-01oe5dwAAAEY"]
[Wed Feb 04 01:00:25.825086 2026] [:error] [pid 42922:tid 42986] [client 20.92.81.163:47767] [client 20.92.81.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ccou.php"] [unique_id "aYIpqWazX4WPS_dQRkjb7AAAAIE"]
[Wed Feb 04 01:00:27.787603 2026] [:error] [pid 5148:tid 5172] [client 20.92.81.163:45663] [client 20.92.81.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ccou.php"] [unique_id "aYIpq783HCHLtUIbS7IvkQAAAVU"]
[Wed Feb 04 01:00:28.494634 2026] [:error] [pid 5148:tid 5167] [client 20.92.81.163:49699] [client 20.92.81.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ccou.php"] [unique_id "aYIprL83HCHLtUIbS7IvlAAAAVA"]
[Wed Feb 04 01:00:29.335997 2026] [:error] [pid 5229:tid 5253] [client 20.92.81.163:62416] [client 20.92.81.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ton.php"] [unique_id "aYIprUKmEgmJub93yUpQeQAAAZY"]
[Wed Feb 04 01:00:31.219374 2026] [proxy_fcgi:error] [pid 42922:tid 42994] [client 20.92.81.163:45654] AH01071: Got error 'Primary script unknown'
[Wed Feb 04 01:00:31.270944 2026] [proxy_fcgi:error] [pid 42922:tid 42995] [client 20.92.81.163:45654] AH01071: Got error 'Primary script unknown'
[Wed Feb 04 01:00:31.337057 2026] [proxy_fcgi:error] [pid 42922:tid 42990] [client 20.92.81.163:45654] AH01071: Got error 'Primary script unknown'
[Wed Feb 04 01:00:31.366751 2026] [proxy_fcgi:error] [pid 42922:tid 43000] [client 20.92.81.163:45654] AH01071: Got error 'Primary script unknown'
[Wed Feb 04 01:00:31.449315 2026] [proxy_fcgi:error] [pid 42922:tid 43007] [client 20.92.81.163:45654] AH01071: Got error 'Primary script unknown'
[Wed Feb 04 01:00:31.470092 2026] [proxy_fcgi:error] [pid 42922:tid 42997] [client 20.92.81.163:45654] AH01071: Got error 'Primary script unknown'
[Wed Feb 04 01:00:31.516199 2026] [proxy_fcgi:error] [pid 42922:tid 43009] [client 20.92.81.163:45654] AH01071: Got error 'Primary script unknown'
[Wed Feb 04 01:00:31.538397 2026] [proxy_fcgi:error] [pid 42922:tid 42988] [client 20.92.81.163:45654] AH01071: Got error 'Primary script unknown'
[Wed Feb 04 01:00:31.559348 2026] [proxy_fcgi:error] [pid 42922:tid 43002] [client 20.92.81.163:45654] AH01071: Got error 'Primary script unknown'
[Wed Feb 04 01:00:31.597772 2026] [proxy_fcgi:error] [pid 42922:tid 42987] [client 20.92.81.163:45654] AH01071: Got error 'Primary script unknown'
[Wed Feb 04 01:00:31.655619 2026] [proxy_fcgi:error] [pid 42922:tid 42989] [client 20.92.81.163:45654] AH01071: Got error 'Primary script unknown'
[Wed Feb 04 01:00:31.707619 2026] [:error] [pid 42922:tid 43005] [client 20.92.81.163:45654] [client 20.92.81.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wtz.php"] [unique_id "aYIpr2azX4WPS_dQRkjcAQAAAJQ"]
[Wed Feb 04 01:00:42.315756 2026] [:error] [pid 5229:tid 5251] [client 20.92.81.163:8336] [client 20.92.81.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wtz.php"] [unique_id "aYIpukKmEgmJub93yUpQiQAAAZQ"]
[Wed Feb 04 01:00:48.302503 2026] [:error] [pid 43028:tid 43041] [client 20.92.81.163:35445] [client 20.92.81.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/galex.php"] [unique_id "aYIpwFnHWnJD4cJC5DsNPQAAAMs"]
[Wed Feb 04 01:00:49.487205 2026] [:error] [pid 5229:tid 5232] [client 20.92.81.163:44583] [client 20.92.81.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/galex.php"] [unique_id "aYIpwUKmEgmJub93yUpQkQAAAYE"]
[Wed Feb 04 01:00:50.975610 2026] [:error] [pid 5229:tid 5240] [client 20.92.81.163:26870] [client 20.92.81.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/galex.php"] [unique_id "aYIpwkKmEgmJub93yUpQlQAAAYk"]
[Wed Feb 04 01:00:53.697790 2026] [:error] [pid 5229:tid 5247] [client 20.92.81.163:2538] [client 20.92.81.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/galex.php"] [unique_id "aYIpxUKmEgmJub93yUpQmQAAAZA"]
[Wed Feb 04 01:00:56.334776 2026] [:error] [pid 28720:tid 28732] [client 20.92.81.163:59951] [client 20.92.81.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xb.php"] [unique_id "aYIpyGmRXm2bmr_sYiYRPQAAAQo"]
[Wed Feb 04 01:00:57.835403 2026] [:error] [pid 43028:tid 43053] [client 20.92.81.163:2514] [client 20.92.81.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xb.php"] [unique_id "aYIpyVnHWnJD4cJC5DsNWAAAANc"]
[Wed Feb 04 01:01:12.296387 2026] [:error] [pid 28720:tid 28740] [client 20.92.81.163:59963] [client 20.92.81.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ova.php"] [unique_id "aYIp2GmRXm2bmr_sYiYRUQAAARI"]
[Wed Feb 04 01:01:13.989201 2026] [:error] [pid 42921:tid 42981] [client 20.92.81.163:44564] [client 20.92.81.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ova.php"] [unique_id "aYIp2YblShffGl-01oe5ywAAAFc"]
[Wed Feb 04 01:01:15.238701 2026] [:error] [pid 42922:tid 42990] [client 20.92.81.163:58571] [client 20.92.81.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ova.php"] [unique_id "aYIp22azX4WPS_dQRkjcNQAAAIU"]
[Wed Feb 04 01:01:15.993128 2026] [:error] [pid 5148:tid 5156] [client 20.92.81.163:35406] [client 20.92.81.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ova.php"] [unique_id "aYIp2783HCHLtUIbS7Iv1QAAAUU"]
[Wed Feb 04 01:01:38.162904 2026] [proxy_fcgi:error] [pid 42920:tid 42930] [client 20.92.81.163:65421] AH01071: Got error 'Primary script unknown'
[Wed Feb 04 09:55:51.198504 2026] [:error] [pid 47405:tid 47447] [client 37.27.119.185:55386] [client 37.27.119.185] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dwelectservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dwelectservices.com.au"] [uri "/"] [unique_id "aYKnJ6TmhSrwHQTn6I69UwAAAMc"], referer: https://www.reddit.com/r/movies
[Wed Feb 04 09:55:51.879962 2026] [:error] [pid 47405:tid 47450] [client 37.27.119.185:55854] [client 37.27.119.185] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dwelectservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dwelectservices.com.au"] [uri "/"] [unique_id "aYKnJ6TmhSrwHQTn6I69VQAAAMo"], referer: https://www.reddit.com/r/food
[Thu Feb 05 02:56:06.024656 2026] [:error] [pid 63684:tid 63690] [client 217.77.10.74:57290] [client 217.77.10.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/"] [unique_id "aYOWRtsfhS3nNwjjsUPnWQAAAIE"]
[Thu Feb 05 06:02:47.807610 2026] [:error] [pid 12187:tid 12206] [client 216.24.219.132:37681] [client 216.24.219.132] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.219.132, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-login.php"] [unique_id "aYPCB4nHiwpamEOSyaPzswAAAAo"]
[Thu Feb 05 06:02:47.818985 2026] [proxy_fcgi:error] [pid 12187:tid 12206] [client 216.24.219.132:37681] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 01:59:57.830072 2026] [proxy_fcgi:error] [pid 11123:tid 11200] [client 20.220.62.160:65328] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 01:59:58.039316 2026] [proxy_fcgi:error] [pid 11123:tid 11201] [client 20.220.62.160:65328] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 01:59:58.259474 2026] [proxy_fcgi:error] [pid 11123:tid 11197] [client 20.220.62.160:65328] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 01:59:58.468342 2026] [proxy_fcgi:error] [pid 11123:tid 11202] [client 20.220.62.160:65328] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 01:59:58.680097 2026] [proxy_fcgi:error] [pid 11123:tid 11190] [client 20.220.62.160:65328] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 01:59:58.891806 2026] [proxy_fcgi:error] [pid 11123:tid 11192] [client 20.220.62.160:65328] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 01:59:59.100232 2026] [proxy_fcgi:error] [pid 11123:tid 11203] [client 20.220.62.160:65328] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 01:59:59.311394 2026] [proxy_fcgi:error] [pid 11123:tid 11186] [client 20.220.62.160:65328] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 01:59:59.523299 2026] [proxy_fcgi:error] [pid 11123:tid 11187] [client 20.220.62.160:65328] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 01:59:59.734285 2026] [proxy_fcgi:error] [pid 11123:tid 11208] [client 20.220.62.160:65328] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 01:59:59.939575 2026] [:error] [pid 11123:tid 11184] [client 20.220.62.160:65328] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/st.php"] [unique_id "aYTan6Jk7pHfPArl4eW2JwAAAQA"]
[Fri Feb 06 02:00:00.360021 2026] [:error] [pid 39858:tid 39863] [client 20.220.62.160:65309] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/st.php"] [unique_id "aYTaoPNde7AItnr98t3xIAAAAUE"]
[Fri Feb 06 02:00:00.773130 2026] [:error] [pid 11121:tid 11143] [client 20.220.62.160:65286] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/st.php"] [unique_id "aYTaoBEsbmrTJ-7kOtb0PQAAABA"]
[Fri Feb 06 02:00:01.229054 2026] [:error] [pid 39858:tid 39873] [client 20.220.62.160:65295] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/st.php"] [unique_id "aYTaofNde7AItnr98t3xJAAAAUs"]
[Fri Feb 06 02:00:01.648598 2026] [:error] [pid 39858:tid 39880] [client 20.220.62.160:65402] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/"] [unique_id "aYTaofNde7AItnr98t3xJQAAAVI"]
[Fri Feb 06 02:00:02.064805 2026] [:error] [pid 64116:tid 64129] [client 20.220.62.160:65306] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/"] [unique_id "aYTaorq-pUXYJUX2oz8PowAAAMY"]
[Fri Feb 06 02:00:02.476536 2026] [:error] [pid 64116:tid 64123] [client 20.220.62.160:62173] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/"] [unique_id "aYTaorq-pUXYJUX2oz8PpAAAAMA"]
[Fri Feb 06 02:00:02.890521 2026] [:error] [pid 39858:tid 39883] [client 20.220.62.160:65289] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/"] [unique_id "aYTaovNde7AItnr98t3xJwAAAVU"]
[Fri Feb 06 02:00:03.307276 2026] [:error] [pid 39858:tid 39878] [client 20.220.62.160:62146] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/oxse.php"] [unique_id "aYTao_Nde7AItnr98t3xKQAAAVA"]
[Fri Feb 06 02:00:03.737740 2026] [:error] [pid 39858:tid 39884] [client 20.220.62.160:62161] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/oxse.php"] [unique_id "aYTao_Nde7AItnr98t3xKgAAAVY"]
[Fri Feb 06 02:00:04.158724 2026] [:error] [pid 11459:tid 11527] [client 20.220.62.160:65327] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/oxse.php"] [unique_id "aYTapJn3t_QGiBnEMgMagQAAAFA"]
[Fri Feb 06 02:00:04.593987 2026] [:error] [pid 11123:tid 11186] [client 20.220.62.160:62164] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/oxse.php"] [unique_id "aYTapKJk7pHfPArl4eW2LwAAAQI"]
[Fri Feb 06 02:00:05.019291 2026] [:error] [pid 11459:tid 11533] [client 20.220.62.160:65374] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dropdown.php"] [unique_id "aYTapZn3t_QGiBnEMgMahgAAAFY"]
[Fri Feb 06 02:00:05.430848 2026] [:error] [pid 64116:tid 64147] [client 20.220.62.160:62205] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dropdown.php"] [unique_id "aYTapbq-pUXYJUX2oz8PrQAAANg"]
[Fri Feb 06 02:00:05.863524 2026] [:error] [pid 11123:tid 11199] [client 20.220.62.160:62165] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dropdown.php"] [unique_id "aYTapaJk7pHfPArl4eW2MgAAAQ8"]
[Fri Feb 06 02:00:06.286643 2026] [:error] [pid 11122:tid 11180] [client 20.220.62.160:65384] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dropdown.php"] [unique_id "aYTapj0RBzI4cnzjYXK6rgAAAJc"]
[Fri Feb 06 02:00:06.736371 2026] [:error] [pid 64116:tid 64129] [client 20.220.62.160:65283] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/AxAo.php"] [unique_id "aYTaprq-pUXYJUX2oz8PsQAAAMY"]
[Fri Feb 06 02:00:07.153463 2026] [:error] [pid 64116:tid 64139] [client 20.220.62.160:62179] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/AxAo.php"] [unique_id "aYTap7q-pUXYJUX2oz8PswAAANA"]
[Fri Feb 06 02:00:07.564492 2026] [:error] [pid 11121:tid 11130] [client 20.220.62.160:65325] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/AxAo.php"] [unique_id "aYTapxEsbmrTJ-7kOtb0PwAAAAQ"]
[Fri Feb 06 02:00:07.997389 2026] [:error] [pid 39858:tid 39885] [client 20.220.62.160:62121] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/AxAo.php"] [unique_id "aYTap_Nde7AItnr98t3xLgAAAVc"]
[Fri Feb 06 02:00:08.410640 2026] [:error] [pid 64116:tid 64133] [client 20.220.62.160:65297] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/assacc.php"] [unique_id "aYTaqLq-pUXYJUX2oz8PtgAAAMo"]
[Fri Feb 06 02:00:08.836415 2026] [:error] [pid 11123:tid 11198] [client 20.220.62.160:65398] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/assacc.php"] [unique_id "aYTaqKJk7pHfPArl4eW2OQAAAQ4"]
[Fri Feb 06 02:00:09.265566 2026] [:error] [pid 11122:tid 11168] [client 20.220.62.160:65310] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/assacc.php"] [unique_id "aYTaqT0RBzI4cnzjYXK6tAAAAIs"]
[Fri Feb 06 02:00:09.685805 2026] [:error] [pid 11121:tid 11147] [client 20.220.62.160:62134] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/assacc.php"] [unique_id "aYTaqREsbmrTJ-7kOtb0QwAAABQ"]
[Fri Feb 06 02:00:10.106753 2026] [:error] [pid 64116:tid 64126] [client 20.220.62.160:65284] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/men.php"] [unique_id "aYTaqrq-pUXYJUX2oz8PtwAAAMM"]
[Fri Feb 06 02:00:10.520194 2026] [:error] [pid 64116:tid 64144] [client 20.220.62.160:65324] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/men.php"] [unique_id "aYTaqrq-pUXYJUX2oz8PuAAAANU"]
[Fri Feb 06 02:00:10.974639 2026] [:error] [pid 11121:tid 11132] [client 20.220.62.160:62177] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/men.php"] [unique_id "aYTaqhEsbmrTJ-7kOtb0RQAAAAY"]
[Fri Feb 06 02:00:11.388614 2026] [:error] [pid 11122:tid 11180] [client 20.220.62.160:62166] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/men.php"] [unique_id "aYTaqz0RBzI4cnzjYXK6vAAAAJc"]
[Fri Feb 06 02:00:11.820756 2026] [:error] [pid 11121:tid 11145] [client 20.220.62.160:65313] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/test2.php"] [unique_id "aYTaqxEsbmrTJ-7kOtb0SQAAABI"]
[Fri Feb 06 02:00:12.230545 2026] [:error] [pid 39858:tid 39869] [client 20.220.62.160:65339] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/test2.php"] [unique_id "aYTarPNde7AItnr98t3xMwAAAUc"]
[Fri Feb 06 02:00:12.659554 2026] [:error] [pid 11121:tid 11126] [client 20.220.62.160:65303] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/test2.php"] [unique_id "aYTarBEsbmrTJ-7kOtb0TAAAAAA"]
[Fri Feb 06 02:00:13.074096 2026] [:error] [pid 64116:tid 64144] [client 20.220.62.160:65373] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/test2.php"] [unique_id "aYTarbq-pUXYJUX2oz8PxAAAANU"]
[Fri Feb 06 02:00:13.485311 2026] [:error] [pid 11459:tid 11511] [client 20.220.62.160:65337] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/v4.php"] [unique_id "aYTarZn3t_QGiBnEMgMaiwAAAEE"]
[Fri Feb 06 02:00:13.961038 2026] [:error] [pid 64116:tid 64139] [client 20.220.62.160:62156] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/v4.php"] [unique_id "aYTarbq-pUXYJUX2oz8PxQAAANA"]
[Fri Feb 06 02:00:14.377356 2026] [:error] [pid 39858:tid 39866] [client 20.220.62.160:65301] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/v4.php"] [unique_id "aYTarvNde7AItnr98t3xNgAAAUQ"]
[Fri Feb 06 02:00:14.813513 2026] [:error] [pid 39858:tid 39864] [client 20.220.62.160:65388] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/v4.php"] [unique_id "aYTarvNde7AItnr98t3xOAAAAUI"]
[Fri Feb 06 02:00:15.242886 2026] [:error] [pid 11121:tid 11146] [client 20.220.62.160:65342] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wo.php"] [unique_id "aYTarxEsbmrTJ-7kOtb0UQAAABM"]
[Fri Feb 06 02:00:15.659564 2026] [:error] [pid 64116:tid 64142] [client 20.220.62.160:65320] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wo.php"] [unique_id "aYTar7q-pUXYJUX2oz8PywAAANM"]
[Fri Feb 06 02:00:16.192675 2026] [:error] [pid 11123:tid 11205] [client 20.220.62.160:62163] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wo.php"] [unique_id "aYTasKJk7pHfPArl4eW2SQAAARU"]
[Fri Feb 06 02:00:16.614301 2026] [:error] [pid 39858:tid 39867] [client 20.220.62.160:62183] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wo.php"] [unique_id "aYTasPNde7AItnr98t3xPAAAAUU"]
[Fri Feb 06 02:00:17.072166 2026] [:error] [pid 11121:tid 11140] [client 20.220.62.160:65393] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/whm-cp.php"] [unique_id "aYTasREsbmrTJ-7kOtb0VQAAAA4"]
[Fri Feb 06 02:00:17.485345 2026] [:error] [pid 11121:tid 11130] [client 20.220.62.160:65318] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/whm-cp.php"] [unique_id "aYTasREsbmrTJ-7kOtb0WAAAAAQ"]
[Fri Feb 06 02:00:17.921379 2026] [:error] [pid 39858:tid 39878] [client 20.220.62.160:65341] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/whm-cp.php"] [unique_id "aYTasfNde7AItnr98t3xPgAAAVA"]
[Fri Feb 06 02:00:18.334506 2026] [:error] [pid 39858:tid 39869] [client 20.220.62.160:62184] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/whm-cp.php"] [unique_id "aYTasvNde7AItnr98t3xQAAAAUc"]
[Fri Feb 06 02:00:18.753491 2026] [:error] [pid 11123:tid 11196] [client 20.220.62.160:65407] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/pu.php"] [unique_id "aYTasqJk7pHfPArl4eW2UQAAAQw"]
[Fri Feb 06 02:00:19.182700 2026] [:error] [pid 64116:tid 64147] [client 20.220.62.160:62158] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/pu.php"] [unique_id "aYTas7q-pUXYJUX2oz8PzwAAANg"]
[Fri Feb 06 02:00:19.602308 2026] [:error] [pid 39858:tid 39863] [client 20.220.62.160:65346] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/pu.php"] [unique_id "aYTas_Nde7AItnr98t3xQgAAAUE"]
[Fri Feb 06 02:00:20.079025 2026] [:error] [pid 64116:tid 64128] [client 20.220.62.160:65347] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/pu.php"] [unique_id "aYTatLq-pUXYJUX2oz8P1QAAAMU"]
[Fri Feb 06 02:00:20.494171 2026] [:error] [pid 11121:tid 11146] [client 20.220.62.160:62160] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/resp.php"] [unique_id "aYTatBEsbmrTJ-7kOtb0WwAAABM"]
[Fri Feb 06 02:00:20.917480 2026] [:error] [pid 11459:tid 11514] [client 20.220.62.160:65308] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/resp.php"] [unique_id "aYTatJn3t_QGiBnEMgMakQAAAEQ"]
[Fri Feb 06 02:00:21.380318 2026] [:error] [pid 11459:tid 11528] [client 20.220.62.160:65355] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/resp.php"] [unique_id "aYTatZn3t_QGiBnEMgMakgAAAFE"]
[Fri Feb 06 02:00:21.793029 2026] [:error] [pid 11459:tid 11522] [client 20.220.62.160:65329] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/resp.php"] [unique_id "aYTatZn3t_QGiBnEMgMakwAAAEs"]
[Fri Feb 06 02:00:22.229442 2026] [:error] [pid 64116:tid 64125] [client 20.220.62.160:65319] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/za2.php"] [unique_id "aYTatrq-pUXYJUX2oz8P2gAAAMI"]
[Fri Feb 06 02:00:22.647358 2026] [:error] [pid 39858:tid 39881] [client 20.220.62.160:65370] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/za2.php"] [unique_id "aYTatvNde7AItnr98t3xSAAAAVM"]
[Fri Feb 06 02:00:23.091028 2026] [:error] [pid 11123:tid 11194] [client 20.220.62.160:65290] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/za2.php"] [unique_id "aYTat6Jk7pHfPArl4eW2VwAAAQo"]
[Fri Feb 06 02:00:23.507492 2026] [:error] [pid 11123:tid 11204] [client 20.220.62.160:62182] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/za2.php"] [unique_id "aYTat6Jk7pHfPArl4eW2WQAAARQ"]
[Fri Feb 06 02:00:23.919011 2026] [:error] [pid 11123:tid 11185] [client 20.220.62.160:62198] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/z.php"] [unique_id "aYTat6Jk7pHfPArl4eW2WgAAAQE"]
[Fri Feb 06 02:00:24.371218 2026] [:error] [pid 64116:tid 64127] [client 20.220.62.160:65394] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/z.php"] [unique_id "aYTauLq-pUXYJUX2oz8P4gAAAMQ"]
[Fri Feb 06 02:00:24.794389 2026] [:error] [pid 11122:tid 11158] [client 20.220.62.160:65291] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/z.php"] [unique_id "aYTauD0RBzI4cnzjYXK6wwAAAII"]
[Fri Feb 06 02:00:25.215277 2026] [:error] [pid 11123:tid 11189] [client 20.220.62.160:61393] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/z.php"] [unique_id "aYTauaJk7pHfPArl4eW2XgAAAQU"]
[Fri Feb 06 02:00:25.636821 2026] [:error] [pid 11459:tid 11535] [client 20.220.62.160:65282] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gmanz.php"] [unique_id "aYTauZn3t_QGiBnEMgManAAAAFg"]
[Fri Feb 06 02:00:26.052977 2026] [:error] [pid 11459:tid 11528] [client 20.220.62.160:62148] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gmanz.php"] [unique_id "aYTaupn3t_QGiBnEMgManwAAAFE"]
[Fri Feb 06 02:00:26.464016 2026] [:error] [pid 39858:tid 39870] [client 20.220.62.160:62171] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gmanz.php"] [unique_id "aYTauvNde7AItnr98t3xSQAAAUg"]
[Fri Feb 06 02:00:26.881963 2026] [:error] [pid 11121:tid 11128] [client 20.220.62.160:62200] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gmanz.php"] [unique_id "aYTauhEsbmrTJ-7kOtb0XgAAAAI"]
[Fri Feb 06 02:00:27.296904 2026] [:error] [pid 64116:tid 64133] [client 20.220.62.160:65307] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zzz.php"] [unique_id "aYTau7q-pUXYJUX2oz8P6wAAAMo"]
[Fri Feb 06 02:00:27.712083 2026] [:error] [pid 11123:tid 11202] [client 20.220.62.160:61389] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zzz.php"] [unique_id "aYTau6Jk7pHfPArl4eW2ZAAAARI"]
[Fri Feb 06 02:00:28.151206 2026] [:error] [pid 64116:tid 64139] [client 20.220.62.160:62150] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zzz.php"] [unique_id "aYTavLq-pUXYJUX2oz8P7AAAANA"]
[Fri Feb 06 02:00:28.563482 2026] [:error] [pid 11123:tid 11208] [client 20.220.62.160:65335] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zzz.php"] [unique_id "aYTavKJk7pHfPArl4eW2ZQAAARg"]
[Fri Feb 06 02:00:28.991678 2026] [:error] [pid 64116:tid 64145] [client 20.220.62.160:61418] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/codehu.php"] [unique_id "aYTavLq-pUXYJUX2oz8P7gAAANY"]
[Fri Feb 06 02:00:29.410959 2026] [:error] [pid 11459:tid 11519] [client 20.220.62.160:65287] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/codehu.php"] [unique_id "aYTavZn3t_QGiBnEMgMapgAAAEg"]
[Fri Feb 06 02:00:29.825602 2026] [:error] [pid 11123:tid 11192] [client 20.220.62.160:65376] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/codehu.php"] [unique_id "aYTavaJk7pHfPArl4eW2ZwAAAQg"]
[Fri Feb 06 02:00:30.286660 2026] [:error] [pid 39858:tid 39872] [client 20.220.62.160:65387] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/codehu.php"] [unique_id "aYTavvNde7AItnr98t3xTwAAAUo"]
[Fri Feb 06 02:00:30.699477 2026] [:error] [pid 11459:tid 11517] [client 20.220.62.160:62192] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/resp.php"] [unique_id "aYTavpn3t_QGiBnEMgMaqgAAAEY"]
[Fri Feb 06 02:00:31.151965 2026] [:error] [pid 11123:tid 11200] [client 20.220.62.160:65312] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/resp.php"] [unique_id "aYTav6Jk7pHfPArl4eW2agAAARA"]
[Fri Feb 06 02:00:31.565754 2026] [:error] [pid 11122:tid 11180] [client 20.220.62.160:62168] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/resp.php"] [unique_id "aYTavz0RBzI4cnzjYXK60QAAAJc"]
[Fri Feb 06 02:00:32.073161 2026] [:error] [pid 11123:tid 11194] [client 20.220.62.160:62201] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/resp.php"] [unique_id "aYTawKJk7pHfPArl4eW2bwAAAQo"]
[Fri Feb 06 02:00:32.494086 2026] [:error] [pid 11122:tid 11158] [client 20.220.62.160:62147] [client 20.220.62.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/codemirror/about.php"] [unique_id "aYTawD0RBzI4cnzjYXK60gAAAII"]
[Fri Feb 06 02:00:32.930242 2026] [:error] [pid 39858:tid 39877] [client 20.220.62.160:65280] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Requests/library/"] [unique_id "aYTawPNde7AItnr98t3xVwAAAU8"]
[Fri Feb 06 02:00:33.380577 2026] [:error] [pid 11459:tid 11532] [client 20.220.62.160:65386] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Requests/library/"] [unique_id "aYTawZn3t_QGiBnEMgMarAAAAFU"]
[Fri Feb 06 02:00:33.792914 2026] [:error] [pid 64116:tid 64125] [client 20.220.62.160:62194] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Requests/library/"] [unique_id "aYTawbq-pUXYJUX2oz8P8gAAAMI"]
[Fri Feb 06 02:00:34.204672 2026] [:error] [pid 64116:tid 64147] [client 20.220.62.160:62160] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Requests/library/"] [unique_id "aYTawrq-pUXYJUX2oz8P8wAAANg"]
[Fri Feb 06 02:00:34.631242 2026] [:error] [pid 64116:tid 64146] [client 20.220.62.160:62089] [client 20.220.62.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Requests/library/shlo.php"] [unique_id "aYTawrq-pUXYJUX2oz8P9AAAANc"]
[Fri Feb 06 02:00:35.060972 2026] [:error] [pid 11121:tid 11129] [client 20.220.62.160:65316] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jga.php"] [unique_id "aYTawxEsbmrTJ-7kOtb0awAAAAM"]
[Fri Feb 06 02:00:35.478036 2026] [:error] [pid 11123:tid 11193] [client 20.220.62.160:65375] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jga.php"] [unique_id "aYTaw6Jk7pHfPArl4eW2dAAAAQk"]
[Fri Feb 06 02:00:35.894131 2026] [:error] [pid 64116:tid 64124] [client 20.220.62.160:61419] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jga.php"] [unique_id "aYTaw7q-pUXYJUX2oz8P-QAAAME"]
[Fri Feb 06 02:00:36.355608 2026] [:error] [pid 11459:tid 11524] [client 20.220.62.160:65378] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jga.php"] [unique_id "aYTaxJn3t_QGiBnEMgMasQAAAE0"]
[Fri Feb 06 02:00:36.772786 2026] [:error] [pid 39858:tid 39872] [client 20.220.62.160:62100] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/an.php"] [unique_id "aYTaxPNde7AItnr98t3xWwAAAUo"]
[Fri Feb 06 02:00:37.206356 2026] [:error] [pid 39858:tid 39876] [client 20.220.62.160:65366] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/an.php"] [unique_id "aYTaxfNde7AItnr98t3xXgAAAU4"]
[Fri Feb 06 02:00:37.620326 2026] [:error] [pid 11122:tid 11176] [client 20.220.62.160:65294] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/an.php"] [unique_id "aYTaxT0RBzI4cnzjYXK61QAAAJM"]
[Fri Feb 06 02:00:38.041931 2026] [:error] [pid 11459:tid 11517] [client 20.220.62.160:65296] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/an.php"] [unique_id "aYTaxpn3t_QGiBnEMgMatQAAAEY"]
[Fri Feb 06 02:00:38.456348 2026] [:error] [pid 39858:tid 39862] [client 20.220.62.160:62153] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bs5.php"] [unique_id "aYTaxvNde7AItnr98t3xYwAAAUA"]
[Fri Feb 06 02:00:38.870238 2026] [:error] [pid 11122:tid 11156] [client 20.220.62.160:62108] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bs5.php"] [unique_id "aYTaxj0RBzI4cnzjYXK61wAAAIA"]
[Fri Feb 06 02:00:39.283633 2026] [:error] [pid 64116:tid 64126] [client 20.220.62.160:61404] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bs5.php"] [unique_id "aYTax7q-pUXYJUX2oz8P_QAAAMM"]
[Fri Feb 06 02:00:39.706117 2026] [:error] [pid 11459:tid 11523] [client 20.220.62.160:61329] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bs5.php"] [unique_id "aYTax5n3t_QGiBnEMgMatwAAAEw"]
[Fri Feb 06 02:00:40.217780 2026] [:error] [pid 39858:tid 39866] [client 20.220.62.160:65367] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ednse.php"] [unique_id "aYTayPNde7AItnr98t3xZAAAAUQ"]
[Fri Feb 06 02:00:40.637470 2026] [:error] [pid 39858:tid 39882] [client 20.220.62.160:65352] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ednse.php"] [unique_id "aYTayPNde7AItnr98t3xZwAAAVQ"]
[Fri Feb 06 02:00:41.056528 2026] [:error] [pid 11121:tid 11151] [client 20.220.62.160:62090] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ednse.php"] [unique_id "aYTayREsbmrTJ-7kOtb0bQAAABg"]
[Fri Feb 06 02:00:41.473303 2026] [:error] [pid 11121:tid 11145] [client 20.220.62.160:65365] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ednse.php"] [unique_id "aYTayREsbmrTJ-7kOtb0bwAAABI"]
[Fri Feb 06 02:00:41.885996 2026] [:error] [pid 64116:tid 64128] [client 20.220.62.160:65333] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fs.php"] [unique_id "aYTaybq-pUXYJUX2oz8QAwAAAMU"]
[Fri Feb 06 02:00:42.295724 2026] [:error] [pid 11123:tid 11184] [client 20.220.62.160:62202] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fs.php"] [unique_id "aYTayqJk7pHfPArl4eW2eQAAAQA"]
[Fri Feb 06 02:00:42.707883 2026] [:error] [pid 64116:tid 64134] [client 20.220.62.160:65332] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fs.php"] [unique_id "aYTayrq-pUXYJUX2oz8QBQAAAMs"]
[Fri Feb 06 02:00:43.118746 2026] [:error] [pid 11459:tid 11526] [client 20.220.62.160:65400] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fs.php"] [unique_id "aYTay5n3t_QGiBnEMgMaugAAAE8"]
[Fri Feb 06 02:00:43.530352 2026] [:error] [pid 11459:tid 11534] [client 20.220.62.160:65293] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/niett.php"] [unique_id "aYTay5n3t_QGiBnEMgMavAAAAFc"]
[Fri Feb 06 02:00:43.945312 2026] [:error] [pid 11122:tid 11166] [client 20.220.62.160:62187] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/niett.php"] [unique_id "aYTayz0RBzI4cnzjYXK62wAAAIk"]
[Fri Feb 06 02:00:44.362300 2026] [:error] [pid 64116:tid 64130] [client 20.220.62.160:65292] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/niett.php"] [unique_id "aYTazLq-pUXYJUX2oz8QCQAAAMc"]
[Fri Feb 06 02:00:44.774905 2026] [:error] [pid 64116:tid 64137] [client 20.220.62.160:62092] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/niett.php"] [unique_id "aYTazLq-pUXYJUX2oz8QDAAAAM4"]
[Fri Feb 06 02:00:45.201039 2026] [:error] [pid 11121:tid 11137] [client 20.220.62.160:62154] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/puibr.php"] [unique_id "aYTazREsbmrTJ-7kOtb0dgAAAAs"]
[Fri Feb 06 02:00:45.617450 2026] [:error] [pid 64116:tid 64139] [client 20.220.62.160:62145] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/puibr.php"] [unique_id "aYTazbq-pUXYJUX2oz8QEwAAANA"]
[Fri Feb 06 02:00:46.031884 2026] [:error] [pid 11459:tid 11512] [client 20.220.62.160:65399] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/puibr.php"] [unique_id "aYTazpn3t_QGiBnEMgMawQAAAEI"]
[Fri Feb 06 02:00:46.461243 2026] [:error] [pid 11121:tid 11139] [client 20.220.62.160:62174] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/puibr.php"] [unique_id "aYTazhEsbmrTJ-7kOtb0dwAAAA0"]
[Fri Feb 06 02:00:46.940758 2026] [:error] [pid 11459:tid 11527] [client 20.220.62.160:65392] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/past1.php"] [unique_id "aYTazpn3t_QGiBnEMgMaxAAAAFA"]
[Fri Feb 06 02:00:47.371048 2026] [:error] [pid 39858:tid 39868] [client 20.220.62.160:65371] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/past1.php"] [unique_id "aYTaz_Nde7AItnr98t3xdwAAAUY"]
[Fri Feb 06 02:00:47.884727 2026] [:error] [pid 11459:tid 11511] [client 20.220.62.160:65382] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/past1.php"] [unique_id "aYTaz5n3t_QGiBnEMgMaxwAAAEE"]
[Fri Feb 06 02:00:48.318612 2026] [:error] [pid 64116:tid 64124] [client 20.220.62.160:65356] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/past1.php"] [unique_id "aYTa0Lq-pUXYJUX2oz8QGQAAAME"]
[Fri Feb 06 02:00:48.735331 2026] [:error] [pid 11459:tid 11526] [client 20.220.62.160:65362] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/smp.php"] [unique_id "aYTa0Jn3t_QGiBnEMgMayQAAAE8"]
[Fri Feb 06 02:00:49.149984 2026] [:error] [pid 11122:tid 11174] [client 20.220.62.160:65300] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/smp.php"] [unique_id "aYTa0T0RBzI4cnzjYXK63wAAAJE"]
[Fri Feb 06 02:00:49.568288 2026] [:error] [pid 11122:tid 11181] [client 20.220.62.160:65404] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/smp.php"] [unique_id "aYTa0T0RBzI4cnzjYXK64QAAAJg"]
[Fri Feb 06 02:00:49.993155 2026] [:error] [pid 39858:tid 39872] [client 20.220.62.160:65369] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/smp.php"] [unique_id "aYTa0fNde7AItnr98t3xeQAAAUo"]
[Fri Feb 06 02:42:54.142596 2026] [proxy_fcgi:error] [pid 64116:tid 64139] [client 20.48.104.72:64118] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 04:05:16.659618 2026] [proxy_fcgi:error] [pid 1663:tid 1682] [client 20.94.87.22:1689] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 08:43:14.185860 2026] [proxy_fcgi:error] [pid 1664:tid 1705] [client 20.193.224.3:5973] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 16:09:52.433496 2026] [:error] [pid 3380:tid 3393] [client 44.251.105.50:33650] [client 44.251.105.50] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.git/config"] [unique_id "aYWh0BFAlUvBGSBK2jcd4AAAAAk"]
[Fri Feb 06 16:09:53.156631 2026] [:error] [pid 3380:tid 3389] [client 44.251.105.50:33660] [client 44.251.105.50] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.git/HEAD"] [unique_id "aYWh0RFAlUvBGSBK2jcd5QAAAAU"]
[Fri Feb 06 16:09:53.878899 2026] [:error] [pid 3382:tid 3448] [client 44.251.105.50:33676] [client 44.251.105.50] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.git/credentials"] [unique_id "aYWh0cIgU1HR0rhYrE_0swAAAIg"]
[Fri Feb 06 16:09:54.603261 2026] [:error] [pid 3513:tid 3529] [client 44.251.105.50:33680] [client 44.251.105.50] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.git/config.bak"] [unique_id "aYWh0jSw3-HAlzpqSxyMHgAAAU4"]
[Fri Feb 06 16:09:55.327624 2026] [:error] [pid 3380:tid 3399] [client 44.251.105.50:33696] [client 44.251.105.50] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.git/config.old"] [unique_id "aYWh0xFAlUvBGSBK2jcd8wAAAA8"]
[Fri Feb 06 16:10:03.318732 2026] [:error] [pid 3380:tid 3398] [client 44.251.105.50:47970] [client 44.251.105.50] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.production"] [unique_id "aYWh2xFAlUvBGSBK2jceEgAAAA4"]
[Fri Feb 06 16:10:04.042103 2026] [:error] [pid 3477:tid 3497] [client 44.251.105.50:47984] [client 44.251.105.50] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.development"] [unique_id "aYWh3LL0Hdh40C7HYgUdkQAAANI"]
[Fri Feb 06 16:10:04.766276 2026] [:error] [pid 3380:tid 3387] [client 44.251.105.50:47986] [client 44.251.105.50] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.staging"] [unique_id "aYWh3BFAlUvBGSBK2jceGAAAAAM"]
[Fri Feb 06 16:10:05.496062 2026] [:error] [pid 3477:tid 3487] [client 44.251.105.50:48002] [client 44.251.105.50] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.local"] [unique_id "aYWh3bL0Hdh40C7HYgUdlwAAAMg"]
[Fri Feb 06 16:10:06.220726 2026] [:error] [pid 3477:tid 3480] [client 44.251.105.50:48016] [client 44.251.105.50] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.test"] [unique_id "aYWh3rL0Hdh40C7HYgUdmgAAAME"]
[Fri Feb 06 16:10:06.944422 2026] [:error] [pid 3380:tid 3387] [client 44.251.105.50:48028] [client 44.251.105.50] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.backup"] [unique_id "aYWh3hFAlUvBGSBK2jceHwAAAAM"]
[Fri Feb 06 16:10:07.667302 2026] [:error] [pid 3513:tid 3536] [client 44.251.105.50:48038] [client 44.251.105.50] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.old"] [unique_id "aYWh3zSw3-HAlzpqSxyMQwAAAVU"]
[Fri Feb 06 16:10:08.389919 2026] [:error] [pid 3381:tid 3419] [client 44.251.105.50:48046] [client 44.251.105.50] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.bak"] [unique_id "aYWh4C81zqRg96ZREggWYAAAAEY"]
[Fri Feb 06 16:10:09.112272 2026] [:error] [pid 3513:tid 3536] [client 44.251.105.50:48054] [client 44.251.105.50] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.dist"] [unique_id "aYWh4TSw3-HAlzpqSxyMWwAAAVU"]
[Fri Feb 06 16:10:09.832254 2026] [:error] [pid 3382:tid 3453] [client 44.251.105.50:48058] [client 44.251.105.50] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env"] [unique_id "aYWh4cIgU1HR0rhYrE_0zgAAAI0"]
[Fri Feb 06 16:10:10.554152 2026] [:error] [pid 3381:tid 3421] [client 44.251.105.50:40190] [client 44.251.105.50] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.php"] [unique_id "aYWh4i81zqRg96ZREggWdgAAAEg"]
[Fri Feb 06 16:10:11.277954 2026] [:error] [pid 3513:tid 3526] [client 44.251.105.50:40206] [client 44.251.105.50] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.example"] [unique_id "aYWh4zSw3-HAlzpqSxyMbgAAAUs"]
[Fri Feb 06 16:10:11.998285 2026] [:error] [pid 3477:tid 3497] [client 44.251.105.50:40218] [client 44.251.105.50] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.sample"] [unique_id "aYWh47L0Hdh40C7HYgUdtgAAANI"]
[Fri Feb 06 16:10:12.720234 2026] [:error] [pid 3382:tid 3462] [client 44.251.105.50:40228] [client 44.251.105.50] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.dev"] [unique_id "aYWh5MIgU1HR0rhYrE_00gAAAJY"]
[Fri Feb 06 16:10:13.443114 2026] [:error] [pid 3382:tid 3443] [client 44.251.105.50:40230] [client 44.251.105.50] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.prod"] [unique_id "aYWh5cIgU1HR0rhYrE_01AAAAIM"]
[Fri Feb 06 16:10:14.164362 2026] [:error] [pid 3382:tid 3455] [client 44.251.105.50:40242] [client 44.251.105.50] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.stage"] [unique_id "aYWh5sIgU1HR0rhYrE_01gAAAI8"]
[Fri Feb 06 16:10:14.886249 2026] [:error] [pid 3382:tid 3460] [client 44.251.105.50:40246] [client 44.251.105.50] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.live"] [unique_id "aYWh5sIgU1HR0rhYrE_02wAAAJQ"]
[Fri Feb 06 16:10:16.335337 2026] [:error] [pid 3380:tid 3387] [client 44.251.105.50:40270] [client 44.251.105.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bitbucket_keys.json"] [unique_id "aYWh6BFAlUvBGSBK2jceNQAAAAM"]
[Fri Feb 06 16:10:17.058164 2026] [:error] [pid 3382:tid 3464] [client 44.251.105.50:40276] [client 44.251.105.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.bitbucket_keys"] [unique_id "aYWh6cIgU1HR0rhYrE_1AwAAAJg"]
[Fri Feb 06 16:10:17.781388 2026] [:error] [pid 3477:tid 3501] [client 44.251.105.50:40288] [client 44.251.105.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/phpinfo.php"] [unique_id "aYWh6bL0Hdh40C7HYgUd3gAAANY"]
[Fri Feb 06 16:10:18.504399 2026] [:error] [pid 3477:tid 3489] [client 44.251.105.50:40296] [client 44.251.105.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/info.php"] [unique_id "aYWh6rL0Hdh40C7HYgUd4gAAAMo"]
[Fri Feb 06 16:10:19.235653 2026] [:error] [pid 3380:tid 3396] [client 44.251.105.50:40306] [client 44.251.105.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/test.php"] [unique_id "aYWh6xFAlUvBGSBK2jceZwAAAAw"]
[Fri Feb 06 16:10:19.959036 2026] [:error] [pid 3382:tid 3457] [client 44.251.105.50:40316] [client 44.251.105.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/php.php"] [unique_id "aYWh68IgU1HR0rhYrE_1NwAAAJE"]
[Fri Feb 06 16:10:20.682644 2026] [:error] [pid 3380:tid 3406] [client 44.251.105.50:44876] [client 44.251.105.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/phpinfo.php.bak"] [unique_id "aYWh7BFAlUvBGSBK2jcebgAAABY"]
[Fri Feb 06 16:10:21.403782 2026] [:error] [pid 3381:tid 3414] [client 44.251.105.50:44888] [client 44.251.105.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin/phpinfo.php"] [unique_id "aYWh7S81zqRg96ZREggWlAAAAEE"]
[Fri Feb 06 16:10:22.125155 2026] [:error] [pid 3477:tid 3480] [client 44.251.105.50:44892] [client 44.251.105.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin/info.php"] [unique_id "aYWh7rL0Hdh40C7HYgUd7AAAAME"]
[Fri Feb 06 16:10:22.845532 2026] [:error] [pid 3513:tid 3531] [client 44.251.105.50:44900] [client 44.251.105.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/public/phpinfo.php"] [unique_id "aYWh7jSw3-HAlzpqSxyM1AAAAVA"]
[Fri Feb 06 16:10:23.566685 2026] [:error] [pid 3382:tid 3445] [client 44.251.105.50:44906] [client 44.251.105.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/server.php"] [unique_id "aYWh78IgU1HR0rhYrE_1PgAAAIU"]
[Fri Feb 06 16:10:24.289314 2026] [:error] [pid 3380:tid 3408] [client 44.251.105.50:44922] [client 44.251.105.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/debug.php"] [unique_id "aYWh8BFAlUvBGSBK2jcedwAAABg"]
[Fri Feb 06 16:10:25.013048 2026] [:error] [pid 3382:tid 3463] [client 44.251.105.50:44924] [client 44.251.105.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/php_info.php"] [unique_id "aYWh8cIgU1HR0rhYrE_1QgAAAJc"]
[Fri Feb 06 16:10:25.736515 2026] [:error] [pid 3382:tid 3460] [client 44.251.105.50:44928] [client 44.251.105.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/testphp.php"] [unique_id "aYWh8cIgU1HR0rhYrE_1RwAAAJQ"]
[Fri Feb 06 16:10:26.456885 2026] [:error] [pid 3477:tid 3482] [client 44.251.105.50:44936] [client 44.251.105.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/probe.php"] [unique_id "aYWh8rL0Hdh40C7HYgUd9QAAAMM"]
[Fri Feb 06 16:10:27.176715 2026] [:error] [pid 3380:tid 3387] [client 44.251.105.50:44950] [client 44.251.105.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/check.php"] [unique_id "aYWh8xFAlUvBGSBK2jcefAAAAAM"]
[Fri Feb 06 16:10:27.899597 2026] [:error] [pid 3380:tid 3385] [client 44.251.105.50:44962] [client 44.251.105.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/api/phpinfo.php"] [unique_id "aYWh8xFAlUvBGSBK2jcegQAAAAE"]
[Fri Feb 06 16:10:28.620892 2026] [:error] [pid 3380:tid 3388] [client 44.251.105.50:44970] [client 44.251.105.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/api/info.php"] [unique_id "aYWh9BFAlUvBGSBK2jcehQAAAAQ"]
[Fri Feb 06 16:10:29.341800 2026] [:error] [pid 3477:tid 3498] [client 44.251.105.50:44978] [client 44.251.105.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/phpinfo"] [unique_id "aYWh9bL0Hdh40C7HYgUd_AAAANM"]
[Fri Feb 06 16:10:30.065889 2026] [:error] [pid 3380:tid 3399] [client 44.251.105.50:44990] [client 44.251.105.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/info"] [unique_id "aYWh9hFAlUvBGSBK2jcejQAAAA8"]
[Fri Feb 06 16:10:30.789172 2026] [:error] [pid 3381:tid 3427] [client 44.251.105.50:37164] [client 44.251.105.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/test"] [unique_id "aYWh9i81zqRg96ZREggWpgAAAE4"]
[Fri Feb 06 16:10:31.509970 2026] [:error] [pid 3513:tid 3534] [client 44.251.105.50:37176] [client 44.251.105.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/php"] [unique_id "aYWh9zSw3-HAlzpqSxyM7AAAAVM"]
[Fri Feb 06 16:10:32.229596 2026] [:error] [pid 3382:tid 3462] [client 44.251.105.50:37192] [client 44.251.105.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/phpinfo.bak"] [unique_id "aYWh-MIgU1HR0rhYrE_1UQAAAJY"]
[Fri Feb 06 16:10:32.949928 2026] [:error] [pid 3380:tid 3388] [client 44.251.105.50:37206] [client 44.251.105.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin/phpinfo"] [unique_id "aYWh-BFAlUvBGSBK2jcekgAAAAQ"]
[Fri Feb 06 16:10:33.672647 2026] [:error] [pid 3513:tid 3524] [client 44.251.105.50:37208] [client 44.251.105.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin/info"] [unique_id "aYWh-TSw3-HAlzpqSxyM8QAAAUk"]
[Fri Feb 06 16:10:34.395569 2026] [:error] [pid 3382:tid 3451] [client 44.251.105.50:37216] [client 44.251.105.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/public/phpinfo"] [unique_id "aYWh-sIgU1HR0rhYrE_1WAAAAIs"]
[Fri Feb 06 16:10:35.115771 2026] [:error] [pid 3513:tid 3520] [client 44.251.105.50:37220] [client 44.251.105.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/server"] [unique_id "aYWh-zSw3-HAlzpqSxyM-gAAAUU"]
[Fri Feb 06 16:10:35.838408 2026] [:error] [pid 3381:tid 3429] [client 44.251.105.50:37234] [client 44.251.105.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/debug"] [unique_id "aYWh-y81zqRg96ZREggWsQAAAFA"]
[Fri Feb 06 16:10:36.560584 2026] [:error] [pid 3381:tid 3422] [client 44.251.105.50:37240] [client 44.251.105.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/php_info"] [unique_id "aYWh_C81zqRg96ZREggWtQAAAEk"]
[Fri Feb 06 16:10:37.282747 2026] [:error] [pid 3380:tid 3387] [client 44.251.105.50:37246] [client 44.251.105.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/testphp"] [unique_id "aYWh_RFAlUvBGSBK2jceugAAAAM"]
[Fri Feb 06 16:10:38.005126 2026] [:error] [pid 3380:tid 3397] [client 44.251.105.50:37248] [client 44.251.105.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/probe"] [unique_id "aYWh_hFAlUvBGSBK2jcewgAAAA0"]
[Fri Feb 06 16:10:38.726946 2026] [:error] [pid 3380:tid 3395] [client 44.251.105.50:37264] [client 44.251.105.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/check"] [unique_id "aYWh_hFAlUvBGSBK2jcexgAAAAs"]
[Fri Feb 06 16:10:39.448226 2026] [:error] [pid 3380:tid 3394] [client 44.251.105.50:37272] [client 44.251.105.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/api/phpinfo"] [unique_id "aYWh_xFAlUvBGSBK2jcezQAAAAo"]
[Fri Feb 06 16:10:40.169334 2026] [:error] [pid 3380:tid 3403] [client 44.251.105.50:37412] [client 44.251.105.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/api/info"] [unique_id "aYWiABFAlUvBGSBK2jce0wAAABM"]
[Fri Feb 06 16:10:40.890624 2026] [:error] [pid 3513:tid 3526] [client 44.251.105.50:37422] [client 44.251.105.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/phpinfo.php.old"] [unique_id "aYWiADSw3-HAlzpqSxyNJgAAAUs"]
[Fri Feb 06 16:10:41.612106 2026] [:error] [pid 3381:tid 3427] [client 44.251.105.50:37432] [client 44.251.105.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/_profiler/phpinfo"] [unique_id "aYWiAS81zqRg96ZREggWugAAAE4"]
[Fri Feb 06 16:10:42.337696 2026] [:error] [pid 3477:tid 3494] [client 44.251.105.50:37446] [client 44.251.105.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cpanel/phpinfo.php"] [unique_id "aYWiArL0Hdh40C7HYgUeMgAAAM8"]
[Fri Feb 06 16:10:43.061792 2026] [:error] [pid 3381:tid 3420] [client 44.251.105.50:37454] [client 44.251.105.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/www/phpinfo.php"] [unique_id "aYWiAy81zqRg96ZREggWvwAAAEc"]
[Fri Feb 06 16:10:43.787632 2026] [:error] [pid 3380:tid 3384] [client 44.251.105.50:37456] [client 44.251.105.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/web/phpinfo.php"] [unique_id "aYWiAxFAlUvBGSBK2jce5AAAAAA"]
[Fri Feb 06 16:10:44.509506 2026] [:error] [pid 3380:tid 3404] [client 44.251.105.50:37462] [client 44.251.105.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/server/phpinfo.php"] [unique_id "aYWiBBFAlUvBGSBK2jce6AAAABQ"]
[Fri Feb 06 16:10:45.231623 2026] [:error] [pid 3381:tid 3417] [client 44.251.105.50:37476] [client 44.251.105.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/info2.php"] [unique_id "aYWiBS81zqRg96ZREggWxgAAAEQ"]
[Fri Feb 06 16:10:45.954541 2026] [:error] [pid 3380:tid 3396] [client 44.251.105.50:37478] [client 44.251.105.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/info1.php"] [unique_id "aYWiBRFAlUvBGSBK2jce7AAAAAw"]
[Fri Feb 06 16:10:46.675866 2026] [:error] [pid 3381:tid 3424] [client 44.251.105.50:37486] [client 44.251.105.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/info3.php"] [unique_id "aYWiBi81zqRg96ZREggWygAAAEs"]
[Fri Feb 06 16:10:47.405204 2026] [:error] [pid 3477:tid 3491] [client 44.251.105.50:37496] [client 44.251.105.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/php-info.php"] [unique_id "aYWiB7L0Hdh40C7HYgUeSAAAAMw"]
[Fri Feb 06 16:10:48.128871 2026] [:error] [pid 3382:tid 3444] [client 44.251.105.50:37512] [client 44.251.105.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/phptest.php"] [unique_id "aYWiCMIgU1HR0rhYrE_1dQAAAIQ"]
[Fri Feb 06 16:10:48.852316 2026] [:error] [pid 3382:tid 3442] [client 44.251.105.50:37524] [client 44.251.105.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/phpversion.php"] [unique_id "aYWiCMIgU1HR0rhYrE_1eQAAAII"]
[Fri Feb 06 16:10:49.575247 2026] [:error] [pid 3382:tid 3453] [client 44.251.105.50:37528] [client 44.251.105.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/php_version.php"] [unique_id "aYWiCcIgU1HR0rhYrE_1fAAAAI0"]
[Fri Feb 06 16:10:50.299607 2026] [:error] [pid 3382:tid 3461] [client 44.251.105.50:50376] [client 44.251.105.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/serverinfo.php"] [unique_id "aYWiCsIgU1HR0rhYrE_1fgAAAJU"]
[Fri Feb 06 16:10:51.020188 2026] [:error] [pid 3382:tid 3443] [client 44.251.105.50:50384] [client 44.251.105.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/_debug"] [unique_id "aYWiC8IgU1HR0rhYrE_1gQAAAIM"]
[Fri Feb 06 16:10:51.743566 2026] [:error] [pid 3513:tid 3517] [client 44.251.105.50:50398] [client 44.251.105.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/pi.php"] [unique_id "aYWiCzSw3-HAlzpqSxyNQwAAAUI"]
[Fri Feb 06 16:10:52.466708 2026] [:error] [pid 3477:tid 3497] [client 44.251.105.50:50408] [client 44.251.105.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/i.php"] [unique_id "aYWiDLL0Hdh40C7HYgUeUwAAANI"]
[Fri Feb 06 16:10:53.187769 2026] [:error] [pid 3513:tid 3519] [client 44.251.105.50:50416] [client 44.251.105.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/p.php"] [unique_id "aYWiDTSw3-HAlzpqSxyNSAAAAUQ"]
[Fri Feb 06 16:10:53.909810 2026] [:error] [pid 3477:tid 3497] [client 44.251.105.50:50426] [client 44.251.105.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/t.php"] [unique_id "aYWiDbL0Hdh40C7HYgUeagAAANI"]
[Fri Feb 06 16:10:54.631905 2026] [:error] [pid 3380:tid 3388] [client 44.251.105.50:50432] [client 44.251.105.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/3.php"] [unique_id "aYWiDhFAlUvBGSBK2jcfDAAAAAQ"]
[Fri Feb 06 16:10:55.352302 2026] [:error] [pid 3382:tid 3458] [client 44.251.105.50:50436] [client 44.251.105.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2.php"] [unique_id "aYWiD8IgU1HR0rhYrE_1lgAAAJI"]
[Fri Feb 06 16:10:56.074480 2026] [:error] [pid 3513:tid 3515] [client 44.251.105.50:50450] [client 44.251.105.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/1.php"] [unique_id "aYWiEDSw3-HAlzpqSxyNTQAAAUA"]
[Fri Feb 06 16:10:56.795001 2026] [:error] [pid 3382:tid 3447] [client 44.251.105.50:50458] [client 44.251.105.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/diagnostic.php"] [unique_id "aYWiEMIgU1HR0rhYrE_1mgAAAIc"]
[Fri Feb 06 16:10:57.516715 2026] [:error] [pid 3381:tid 3430] [client 44.251.105.50:50462] [client 44.251.105.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/phpinfo.txt"] [unique_id "aYWiES81zqRg96ZREggW3gAAAFE"]
[Fri Feb 06 16:10:58.237764 2026] [:error] [pid 3477:tid 3482] [client 44.251.105.50:50470] [client 44.251.105.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/info.txt"] [unique_id "aYWiErL0Hdh40C7HYgUehwAAAMM"]
[Fri Feb 06 16:10:58.958528 2026] [:error] [pid 3477:tid 3479] [client 44.251.105.50:50480] [client 44.251.105.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/phpinfo.html"] [unique_id "aYWiErL0Hdh40C7HYgUejQAAAMA"]
[Fri Feb 06 16:10:59.682349 2026] [:error] [pid 3380:tid 3406] [client 44.251.105.50:50482] [client 44.251.105.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/info.html"] [unique_id "aYWiExFAlUvBGSBK2jcfJQAAABY"]
[Fri Feb 06 16:11:00.404844 2026] [:error] [pid 3513:tid 3536] [client 44.251.105.50:34046] [client 44.251.105.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/phpinfo.php~"] [unique_id "aYWiFDSw3-HAlzpqSxyNWwAAAVU"]
[Fri Feb 06 16:11:01.126493 2026] [:error] [pid 3380:tid 3386] [client 44.251.105.50:34048] [client 44.251.105.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/phpinfo.php.save"] [unique_id "aYWiFRFAlUvBGSBK2jcfLAAAAAI"]
[Fri Feb 06 16:11:01.847636 2026] [:error] [pid 3382:tid 3463] [client 44.251.105.50:34062] [client 44.251.105.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/info.php"] [unique_id "aYWiFcIgU1HR0rhYrE_1owAAAJc"]
[Fri Feb 06 16:11:02.570463 2026] [:error] [pid 3380:tid 3385] [client 44.251.105.50:34076] [client 44.251.105.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/phpinfo.php"] [unique_id "aYWiFhFAlUvBGSBK2jcfMQAAAAE"]
[Fri Feb 06 16:11:03.291840 2026] [:error] [pid 3380:tid 3397] [client 44.251.105.50:34090] [client 44.251.105.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cgi-bin/phpinfo.php"] [unique_id "aYWiFxFAlUvBGSBK2jcfOAAAAA0"]
[Fri Feb 06 16:11:04.011348 2026] [:error] [pid 3477:tid 3487] [client 44.251.105.50:34102] [client 44.251.105.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/v1/phpinfo.php"] [unique_id "aYWiGLL0Hdh40C7HYgUelAAAAMg"]
[Fri Feb 06 16:11:04.731723 2026] [:error] [pid 3381:tid 3435] [client 44.251.105.50:34116] [client 44.251.105.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/v2/phpinfo.php"] [unique_id "aYWiGC81zqRg96ZREggW_AAAAFY"]
[Fri Feb 06 16:11:05.454634 2026] [:error] [pid 3382:tid 3455] [client 44.251.105.50:34132] [client 44.251.105.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.gitlab-ci.yml"] [unique_id "aYWiGcIgU1HR0rhYrE_1qwAAAI8"]
[Fri Feb 06 16:11:06.177945 2026] [:error] [pid 3380:tid 3405] [client 44.251.105.50:34146] [client 44.251.105.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.gitlab/config"] [unique_id "aYWiGhFAlUvBGSBK2jcfRQAAABU"]
[Fri Feb 06 16:11:06.899135 2026] [:error] [pid 3381:tid 3420] [client 44.251.105.50:34158] [client 44.251.105.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gitlab/config"] [unique_id "aYWiGi81zqRg96ZREggXAgAAAEc"]
[Fri Feb 06 16:11:07.623474 2026] [:error] [pid 3380:tid 3397] [client 44.251.105.50:34164] [client 44.251.105.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/config/gitlab.json"] [unique_id "aYWiGxFAlUvBGSBK2jcfSwAAAA0"]
[Fri Feb 06 16:11:08.345564 2026] [:error] [pid 3513:tid 3525] [client 44.251.105.50:34178] [client 44.251.105.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.config/git/config"] [unique_id "aYWiHDSw3-HAlzpqSxyNdQAAAUo"]
[Fri Feb 06 16:11:09.070165 2026] [:error] [pid 3381:tid 3423] [client 44.251.105.50:34188] [client 44.251.105.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.config/git/credentials"] [unique_id "aYWiHS81zqRg96ZREggXBwAAAEo"]
[Fri Feb 06 20:44:25.974678 2026] [:error] [pid 36928:tid 36940] [client 34.238.252.216:45292] [client 34.238.252.216] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||dwelectservices.com.au|F|4"] [data "Web Downloader"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "dwelectservices.com.au"] [uri "/"] [unique_id "aYXiKZs7fyU8D36r-OptZgAAAcg"]
[Fri Feb 06 20:51:31.307749 2026] [proxy_fcgi:error] [pid 46432:tid 46440] [client 20.203.201.174:4967] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 20:51:31.576405 2026] [proxy_fcgi:error] [pid 46432:tid 46442] [client 20.203.201.174:4967] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 20:51:31.815155 2026] [proxy_fcgi:error] [pid 46432:tid 46451] [client 20.203.201.174:4967] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 20:51:32.192951 2026] [proxy_fcgi:error] [pid 46432:tid 46438] [client 20.203.201.174:4967] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 20:51:32.454402 2026] [proxy_fcgi:error] [pid 46432:tid 46445] [client 20.203.201.174:4967] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 20:51:32.857781 2026] [proxy_fcgi:error] [pid 46432:tid 46456] [client 20.203.201.174:4967] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 20:51:34.012430 2026] [proxy_fcgi:error] [pid 46432:tid 46436] [client 20.203.201.174:4967] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 20:51:34.251812 2026] [proxy_fcgi:error] [pid 46432:tid 46457] [client 20.203.201.174:4967] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 20:51:34.490448 2026] [proxy_fcgi:error] [pid 46432:tid 46447] [client 20.203.201.174:4967] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 20:51:34.760106 2026] [proxy_fcgi:error] [pid 46432:tid 46434] [client 20.203.201.174:4967] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 20:51:34.997820 2026] [:error] [pid 46432:tid 46446] [client 20.203.201.174:4967] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/444.php"] [unique_id "aYXj1gbwJwu_od0kZjMmWgAAAkw"]
[Fri Feb 06 20:51:35.679809 2026] [:error] [pid 3382:tid 3461] [client 20.203.201.174:25103] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/444.php"] [unique_id "aYXj18IgU1HR0rhYrE9P6gAAAJU"]
[Fri Feb 06 20:51:36.416252 2026] [:error] [pid 3380:tid 3386] [client 20.203.201.174:36503] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/444.php"] [unique_id "aYXj2BFAlUvBGSBK2jdkPQAAAAI"]
[Fri Feb 06 20:51:37.511437 2026] [:error] [pid 3477:tid 3497] [client 20.203.201.174:5035] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/444.php"] [unique_id "aYXj2bL0Hdh40C7HYgVvDwAAANI"]
[Fri Feb 06 20:51:38.119992 2026] [:error] [pid 36857:tid 36873] [client 20.203.201.174:4823] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file9.php"] [unique_id "aYXj2pVQwfj7Kp4Dd0HvTAAAAY4"]
[Fri Feb 06 20:51:40.571624 2026] [:error] [pid 15821:tid 15848] [client 20.203.201.174:4968] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file9.php"] [unique_id "aYXj3HARQa67J4c772kKQAAAARc"]
[Fri Feb 06 20:51:41.827362 2026] [:error] [pid 15821:tid 15827] [client 20.203.201.174:27656] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file9.php"] [unique_id "aYXj3XARQa67J4c772kKQQAAAQI"]
[Fri Feb 06 20:51:43.031148 2026] [:error] [pid 3477:tid 3485] [client 20.203.201.174:39175] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file9.php"] [unique_id "aYXj37L0Hdh40C7HYgVvFgAAAMY"]
[Fri Feb 06 20:51:45.032647 2026] [:error] [pid 3513:tid 3534] [client 20.203.201.174:39205] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/filesss.php"] [unique_id "aYXj4TSw3-HAlzpqSxzQZwAAAVM"]
[Fri Feb 06 20:51:47.111612 2026] [:error] [pid 3380:tid 3391] [client 20.203.201.174:29998] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/filesss.php"] [unique_id "aYXj4xFAlUvBGSBK2jdkSQAAAAc"]
[Fri Feb 06 20:51:48.661465 2026] [:error] [pid 3382:tid 3443] [client 20.203.201.174:30473] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/filesss.php"] [unique_id "aYXj5MIgU1HR0rhYrE9P_AAAAIM"]
[Fri Feb 06 20:51:49.867733 2026] [:error] [pid 3513:tid 3515] [client 20.203.201.174:36521] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/filesss.php"] [unique_id "aYXj5TSw3-HAlzpqSxzQagAAAUA"]
[Fri Feb 06 20:51:50.800687 2026] [:error] [pid 3513:tid 3522] [client 20.203.201.174:29999] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file88.php"] [unique_id "aYXj5jSw3-HAlzpqSxzQbAAAAUc"]
[Fri Feb 06 20:51:52.414821 2026] [:error] [pid 36928:tid 36939] [client 20.203.201.174:4847] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file88.php"] [unique_id "aYXj6Js7fyU8D36r-OpukgAAAcc"]
[Fri Feb 06 20:51:53.931052 2026] [:error] [pid 36928:tid 36950] [client 20.203.201.174:46103] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file88.php"] [unique_id "aYXj6Zs7fyU8D36r-OpulAAAAdI"]
[Fri Feb 06 20:51:54.859837 2026] [:error] [pid 3380:tid 3397] [client 20.203.201.174:35516] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file88.php"] [unique_id "aYXj6hFAlUvBGSBK2jdkUwAAAA0"]
[Fri Feb 06 20:51:55.575874 2026] [:error] [pid 15821:tid 15838] [client 20.203.201.174:39264] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gifclass4.php"] [unique_id "aYXj63ARQa67J4c772kKTgAAAQ0"]
[Fri Feb 06 20:51:56.365478 2026] [:error] [pid 3382:tid 3460] [client 20.203.201.174:29991] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gifclass4.php"] [unique_id "aYXj7MIgU1HR0rhYrE9QCQAAAJQ"]
[Fri Feb 06 20:51:57.328708 2026] [:error] [pid 46432:tid 46442] [client 20.203.201.174:38016] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gifclass4.php"] [unique_id "aYXj7QbwJwu_od0kZjMmaQAAAkg"]
[Fri Feb 06 20:51:57.969206 2026] [:error] [pid 3382:tid 3464] [client 20.203.201.174:26875] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gifclass4.php"] [unique_id "aYXj7cIgU1HR0rhYrE9QDAAAAJg"]
[Fri Feb 06 20:51:58.538375 2026] [:error] [pid 46432:tid 46450] [client 20.203.201.174:39242] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class-wp.php"] [unique_id "aYXj7gbwJwu_od0kZjMmawAAAlA"]
[Fri Feb 06 20:51:59.197518 2026] [:error] [pid 37019:tid 37040] [client 20.203.201.174:39252] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class-wp.php"] [unique_id "aYXj7wkAjqd3bcgYBrtjkQAAAhM"]
[Fri Feb 06 20:52:00.438186 2026] [:error] [pid 37019:tid 37041] [client 20.203.201.174:36903] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class-wp.php"] [unique_id "aYXj8AkAjqd3bcgYBrtjkwAAAhQ"]
[Fri Feb 06 20:52:01.499157 2026] [:error] [pid 3381:tid 3435] [client 20.203.201.174:29973] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class-wp.php"] [unique_id "aYXj8S81zqRg96ZREgho3QAAAFY"]
[Fri Feb 06 20:52:02.899976 2026] [:error] [pid 3380:tid 3408] [client 20.203.201.174:26842] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/555.php"] [unique_id "aYXj8hFAlUvBGSBK2jdkXwAAABg"]
[Fri Feb 06 20:52:03.754512 2026] [:error] [pid 3382:tid 3461] [client 20.203.201.174:26831] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/555.php"] [unique_id "aYXj88IgU1HR0rhYrE9QGAAAAJU"]
[Fri Feb 06 20:52:04.325053 2026] [:error] [pid 36928:tid 36954] [client 20.203.201.174:41193] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/555.php"] [unique_id "aYXj9Js7fyU8D36r-OpumgAAAdY"]
[Fri Feb 06 20:52:05.196252 2026] [:error] [pid 3381:tid 3430] [client 20.203.201.174:38880] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/555.php"] [unique_id "aYXj9S81zqRg96ZREgho4gAAAFE"]
[Fri Feb 06 20:52:05.782699 2026] [:error] [pid 36928:tid 36956] [client 20.203.201.174:38858] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/333.php"] [unique_id "aYXj9Zs7fyU8D36r-OpunAAAAdg"]
[Fri Feb 06 20:52:06.877698 2026] [:error] [pid 15821:tid 15825] [client 20.203.201.174:36964] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/333.php"] [unique_id "aYXj9nARQa67J4c772kKWgAAAQA"]
[Fri Feb 06 20:52:07.522755 2026] [:error] [pid 46432:tid 46444] [client 20.203.201.174:34326] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/333.php"] [unique_id "aYXj9wbwJwu_od0kZjMmbgAAAko"]
[Fri Feb 06 20:52:08.157338 2026] [:error] [pid 3477:tid 3490] [client 20.203.201.174:39626] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/333.php"] [unique_id "aYXj-LL0Hdh40C7HYgVvLQAAAMs"]
[Fri Feb 06 20:52:08.642436 2026] [:error] [pid 3513:tid 3536] [client 20.203.201.174:26872] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class19.php"] [unique_id "aYXj-DSw3-HAlzpqSxzQeAAAAVU"]
[Fri Feb 06 20:52:09.218285 2026] [:error] [pid 36928:tid 36936] [client 20.203.201.174:36966] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class19.php"] [unique_id "aYXj-Zs7fyU8D36r-OpunQAAAcQ"]
[Fri Feb 06 20:52:10.233044 2026] [:error] [pid 36857:tid 36866] [client 20.203.201.174:36886] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class19.php"] [unique_id "aYXj-pVQwfj7Kp4Dd0HvVwAAAYc"]
[Fri Feb 06 20:52:11.675383 2026] [:error] [pid 3477:tid 3497] [client 20.203.201.174:29249] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class19.php"] [unique_id "aYXj-7L0Hdh40C7HYgVvMQAAANI"]
[Fri Feb 06 20:52:12.379515 2026] [:error] [pid 3477:tid 3499] [client 20.203.201.174:39634] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2clas.php"] [unique_id "aYXj_LL0Hdh40C7HYgVvMgAAANQ"]
[Fri Feb 06 20:52:13.251502 2026] [:error] [pid 15821:tid 15842] [client 20.203.201.174:38070] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2clas.php"] [unique_id "aYXj_XARQa67J4c772kKZAAAARE"]
[Fri Feb 06 20:52:15.024984 2026] [:error] [pid 3381:tid 3419] [client 20.203.201.174:29515] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2clas.php"] [unique_id "aYXj_y81zqRg96ZREgho7AAAAEY"]
[Fri Feb 06 20:52:15.788862 2026] [:error] [pid 3382:tid 3445] [client 20.203.201.174:36893] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2clas.php"] [unique_id "aYXj_8IgU1HR0rhYrE9QLAAAAIU"]
[Fri Feb 06 20:52:16.787402 2026] [:error] [pid 3382:tid 3443] [client 20.203.201.174:46676] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bless5.php"] [unique_id "aYXkAMIgU1HR0rhYrE9QMQAAAIM"]
[Fri Feb 06 20:52:17.737003 2026] [:error] [pid 46432:tid 46446] [client 20.203.201.174:46663] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bless5.php"] [unique_id "aYXkAQbwJwu_od0kZjMmfAAAAkw"]
[Fri Feb 06 20:52:18.338984 2026] [:error] [pid 3513:tid 3530] [client 20.203.201.174:29276] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bless5.php"] [unique_id "aYXkAjSw3-HAlzpqSxzQfgAAAU8"]
[Fri Feb 06 20:52:18.926946 2026] [:error] [pid 3513:tid 3516] [client 20.203.201.174:31279] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bless5.php"] [unique_id "aYXkAjSw3-HAlzpqSxzQfwAAAUE"]
[Fri Feb 06 20:52:19.601711 2026] [:error] [pid 3381:tid 3423] [client 20.203.201.174:31291] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file15.php"] [unique_id "aYXkAy81zqRg96ZREgho7QAAAEo"]
[Fri Feb 06 20:52:20.190543 2026] [:error] [pid 3513:tid 3518] [client 20.203.201.174:46691] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file15.php"] [unique_id "aYXkBDSw3-HAlzpqSxzQggAAAUM"]
[Fri Feb 06 20:52:21.236561 2026] [:error] [pid 3381:tid 3413] [client 20.203.201.174:39274] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file15.php"] [unique_id "aYXkBS81zqRg96ZREgho8gAAAEA"]
[Fri Feb 06 20:52:23.103038 2026] [:error] [pid 3477:tid 3492] [client 20.203.201.174:29260] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file15.php"] [unique_id "aYXkB7L0Hdh40C7HYgVvOAAAAM0"]
[Fri Feb 06 20:52:23.998187 2026] [:error] [pid 3380:tid 3406] [client 20.203.201.174:29274] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hk.php"] [unique_id "aYXkBxFAlUvBGSBK2jdkcwAAABY"]
[Fri Feb 06 20:52:24.680834 2026] [:error] [pid 37019:tid 37025] [client 20.203.201.174:29285] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hk.php"] [unique_id "aYXkCAkAjqd3bcgYBrtjpAAAAgQ"]
[Fri Feb 06 20:52:25.542924 2026] [:error] [pid 3477:tid 3490] [client 20.203.201.174:36870] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hk.php"] [unique_id "aYXkCbL0Hdh40C7HYgVvOgAAAMs"]
[Fri Feb 06 20:52:26.149981 2026] [:error] [pid 3381:tid 3428] [client 20.203.201.174:34313] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hk.php"] [unique_id "aYXkCi81zqRg96ZREgho9wAAAE8"]
[Fri Feb 06 20:52:26.671237 2026] [:error] [pid 3381:tid 3419] [client 20.203.201.174:28799] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/alpa.php"] [unique_id "aYXkCi81zqRg96ZREgho-QAAAEY"]
[Fri Feb 06 20:52:27.188833 2026] [:error] [pid 36857:tid 36866] [client 20.203.201.174:28778] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/alpa.php"] [unique_id "aYXkC5VQwfj7Kp4Dd0HvYAAAAYc"]
[Fri Feb 06 20:52:27.735269 2026] [:error] [pid 3381:tid 3436] [client 20.203.201.174:38033] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/alpa.php"] [unique_id "aYXkCy81zqRg96ZREgho_QAAAFc"]
[Fri Feb 06 20:52:29.155271 2026] [:error] [pid 3381:tid 3417] [client 20.203.201.174:4121] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/alpa.php"] [unique_id "aYXkDS81zqRg96ZREgho_wAAAEQ"]
[Fri Feb 06 20:52:29.991412 2026] [:error] [pid 3477:tid 3494] [client 20.203.201.174:4334] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file21.php"] [unique_id "aYXkDbL0Hdh40C7HYgVvPgAAAM8"]
[Fri Feb 06 20:52:30.802940 2026] [:error] [pid 15821:tid 15844] [client 20.203.201.174:43099] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file21.php"] [unique_id "aYXkDnARQa67J4c772kKawAAARM"]
[Fri Feb 06 20:52:31.391277 2026] [:error] [pid 3380:tid 3398] [client 20.203.201.174:46176] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file21.php"] [unique_id "aYXkDxFAlUvBGSBK2jdkeQAAAA4"]
[Fri Feb 06 20:52:31.964579 2026] [:error] [pid 3477:tid 3503] [client 20.203.201.174:4290] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file21.php"] [unique_id "aYXkD7L0Hdh40C7HYgVvQQAAANg"]
[Fri Feb 06 20:52:32.559304 2026] [:error] [pid 3382:tid 3457] [client 20.203.201.174:39245] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ssss.php"] [unique_id "aYXkEMIgU1HR0rhYrE9QPgAAAJE"]
[Fri Feb 06 20:52:33.422516 2026] [:error] [pid 3382:tid 3453] [client 20.203.201.174:31272] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ssss.php"] [unique_id "aYXkEcIgU1HR0rhYrE9QQQAAAI0"]
[Fri Feb 06 20:52:33.937542 2026] [:error] [pid 37019:tid 37036] [client 20.203.201.174:38079] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ssss.php"] [unique_id "aYXkEQkAjqd3bcgYBrtjqgAAAg8"]
[Fri Feb 06 20:52:34.585479 2026] [proxy_fcgi:error] [pid 3477:tid 3491] [client 20.203.201.174:4498] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 20:52:34.824291 2026] [proxy_fcgi:error] [pid 3477:tid 3481] [client 20.203.201.174:4498] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 20:52:35.064946 2026] [proxy_fcgi:error] [pid 3477:tid 3494] [client 20.203.201.174:4498] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 20:52:35.303308 2026] [proxy_fcgi:error] [pid 3477:tid 3499] [client 20.203.201.174:4498] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 20:52:35.721619 2026] [proxy_fcgi:error] [pid 3477:tid 3489] [client 20.203.201.174:4498] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 20:52:36.272426 2026] [proxy_fcgi:error] [pid 3477:tid 3496] [client 20.203.201.174:4498] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 20:52:36.516441 2026] [proxy_fcgi:error] [pid 3477:tid 3500] [client 20.203.201.174:4498] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 20:52:36.769822 2026] [proxy_fcgi:error] [pid 3477:tid 3480] [client 20.203.201.174:4498] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 20:52:37.009384 2026] [proxy_fcgi:error] [pid 3477:tid 3483] [client 20.203.201.174:4498] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 20:52:37.248874 2026] [proxy_fcgi:error] [pid 3477:tid 3501] [client 20.203.201.174:4498] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 20:52:37.501053 2026] [proxy_fcgi:error] [pid 3477:tid 3492] [client 20.203.201.174:4498] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 20:52:37.739403 2026] [:error] [pid 3477:tid 3490] [client 20.203.201.174:4498] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/plss3.php"] [unique_id "aYXkFbL0Hdh40C7HYgVvWAAAAMs"]
[Fri Feb 06 20:52:38.724774 2026] [:error] [pid 3382:tid 3462] [client 20.203.201.174:29269] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/plss3.php"] [unique_id "aYXkFsIgU1HR0rhYrE9QUwAAAJY"]
[Fri Feb 06 20:52:39.287362 2026] [:error] [pid 3381:tid 3422] [client 20.203.201.174:4511] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/plss3.php"] [unique_id "aYXkFy81zqRg96ZREghpBAAAAEk"]
[Fri Feb 06 20:52:39.769128 2026] [:error] [pid 3381:tid 3436] [client 20.203.201.174:26872] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/plss3.php"] [unique_id "aYXkFy81zqRg96ZREghpCAAAAFc"]
[Fri Feb 06 20:52:40.615801 2026] [:error] [pid 3381:tid 3431] [client 20.203.201.174:42071] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/he.php"] [unique_id "aYXkGC81zqRg96ZREghpDAAAAFI"]
[Fri Feb 06 20:52:41.261950 2026] [:error] [pid 3380:tid 3401] [client 20.203.201.174:36869] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/he.php"] [unique_id "aYXkGRFAlUvBGSBK2jdkfQAAABE"]
[Fri Feb 06 20:52:41.768714 2026] [:error] [pid 3513:tid 3525] [client 20.203.201.174:36912] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/he.php"] [unique_id "aYXkGTSw3-HAlzpqSxzQlgAAAUo"]
[Fri Feb 06 20:52:42.532135 2026] [:error] [pid 3380:tid 3396] [client 20.203.201.174:42048] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/he.php"] [unique_id "aYXkGhFAlUvBGSBK2jdkfgAAAAw"]
[Fri Feb 06 20:52:43.095568 2026] [:error] [pid 46432:tid 46447] [client 20.203.201.174:38049] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/thxt.php"] [unique_id "aYXkGwbwJwu_od0kZjMmoAAAAk0"]
[Fri Feb 06 20:52:44.323469 2026] [:error] [pid 3380:tid 3405] [client 20.203.201.174:39261] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/thxt.php"] [unique_id "aYXkHBFAlUvBGSBK2jdkgAAAABU"]
[Fri Feb 06 20:52:45.511439 2026] [:error] [pid 3382:tid 3464] [client 20.203.201.174:38029] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/thxt.php"] [unique_id "aYXkHcIgU1HR0rhYrE9QWAAAAJg"]
[Fri Feb 06 20:52:46.773976 2026] [:error] [pid 3381:tid 3413] [client 20.203.201.174:29239] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/thxt.php"] [unique_id "aYXkHi81zqRg96ZREghpEwAAAEA"]
[Fri Feb 06 20:52:47.730844 2026] [:error] [pid 3382:tid 3452] [client 20.203.201.174:39259] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wfile.php"] [unique_id "aYXkH8IgU1HR0rhYrE9QXQAAAIw"]
[Fri Feb 06 20:52:48.998470 2026] [:error] [pid 3382:tid 3441] [client 20.203.201.174:29255] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wfile.php"] [unique_id "aYXkIMIgU1HR0rhYrE9QYgAAAIE"]
[Fri Feb 06 20:52:49.651884 2026] [:error] [pid 3477:tid 3498] [client 20.203.201.174:4757] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wfile.php"] [unique_id "aYXkIbL0Hdh40C7HYgVvYQAAANM"]
[Fri Feb 06 20:52:51.221815 2026] [:error] [pid 36857:tid 36878] [client 20.203.201.174:31252] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wfile.php"] [unique_id "aYXkI5VQwfj7Kp4Dd0HvcAAAAZM"]
[Fri Feb 06 20:52:51.715073 2026] [:error] [pid 3382:tid 3456] [client 20.203.201.174:27955] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class20.php"] [unique_id "aYXkI8IgU1HR0rhYrE9QZgAAAJA"]
[Fri Feb 06 20:52:52.296405 2026] [:error] [pid 3380:tid 3408] [client 20.203.201.174:29193] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class20.php"] [unique_id "aYXkJBFAlUvBGSBK2jdkhwAAABg"]
[Fri Feb 06 20:52:52.791430 2026] [:error] [pid 3477:tid 3492] [client 20.203.201.174:47670] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class20.php"] [unique_id "aYXkJLL0Hdh40C7HYgVvbgAAAM0"]
[Fri Feb 06 20:52:53.452989 2026] [:error] [pid 3477:tid 3482] [client 20.203.201.174:36327] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class20.php"] [unique_id "aYXkJbL0Hdh40C7HYgVvcAAAAMM"]
[Fri Feb 06 20:52:54.296832 2026] [:error] [pid 3382:tid 3451] [client 20.203.201.174:43125] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/build.php"] [unique_id "aYXkJsIgU1HR0rhYrE9QagAAAIs"]
[Fri Feb 06 20:52:55.045488 2026] [:error] [pid 3381:tid 3415] [client 20.203.201.174:45641] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/build.php"] [unique_id "aYXkJy81zqRg96ZREghpGwAAAEI"]
[Fri Feb 06 20:52:55.815049 2026] [:error] [pid 15821:tid 15830] [client 20.203.201.174:44662] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/build.php"] [unique_id "aYXkJ3ARQa67J4c772kKeQAAAQU"]
[Fri Feb 06 20:52:56.596212 2026] [:error] [pid 15821:tid 15838] [client 20.203.201.174:35108] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/build.php"] [unique_id "aYXkKHARQa67J4c772kKewAAAQ0"]
[Fri Feb 06 20:52:57.153837 2026] [:error] [pid 46432:tid 46458] [client 20.203.201.174:4774] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/1.php"] [unique_id "aYXkKQbwJwu_od0kZjMmvQAAAlg"]
[Fri Feb 06 20:52:58.006876 2026] [:error] [pid 37019:tid 37027] [client 20.203.201.174:4749] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/1.php"] [unique_id "aYXkKgkAjqd3bcgYBrtjtgAAAgY"]
[Fri Feb 06 20:52:58.552715 2026] [:error] [pid 37019:tid 37032] [client 20.203.201.174:25254] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/1.php"] [unique_id "aYXkKgkAjqd3bcgYBrtjuQAAAgs"]
[Fri Feb 06 20:52:59.133219 2026] [:error] [pid 37019:tid 37024] [client 20.203.201.174:36337] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/1.php"] [unique_id "aYXkKwkAjqd3bcgYBrtjuwAAAgM"]
[Fri Feb 06 20:52:59.966410 2026] [:error] [pid 3477:tid 3492] [client 20.203.201.174:28983] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/usep.php"] [unique_id "aYXkK7L0Hdh40C7HYgVvdgAAAM0"]
[Fri Feb 06 20:53:00.573804 2026] [:error] [pid 36928:tid 36942] [client 20.203.201.174:25267] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/usep.php"] [unique_id "aYXkLJs7fyU8D36r-OpusQAAAco"]
[Fri Feb 06 20:53:01.516783 2026] [:error] [pid 3382:tid 3464] [client 20.203.201.174:28445] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/usep.php"] [unique_id "aYXkLcIgU1HR0rhYrE9QbwAAAJg"]
[Fri Feb 06 20:53:03.440414 2026] [:error] [pid 3380:tid 3401] [client 20.203.201.174:35115] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/usep.php"] [unique_id "aYXkLxFAlUvBGSBK2jdkkQAAABE"]
[Fri Feb 06 20:53:06.745151 2026] [:error] [pid 36928:tid 36934] [client 20.203.201.174:35076] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wa.php"] [unique_id "aYXkMps7fyU8D36r-OpuugAAAcI"]
[Fri Feb 06 20:53:07.872760 2026] [:error] [pid 3380:tid 3405] [client 20.203.201.174:29276] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wa.php"] [unique_id "aYXkMxFAlUvBGSBK2jdklQAAABU"]
[Fri Feb 06 20:53:09.032921 2026] [:error] [pid 3513:tid 3521] [client 20.203.201.174:36292] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wa.php"] [unique_id "aYXkNTSw3-HAlzpqSxzQqAAAAUY"]
[Fri Feb 06 20:53:09.621672 2026] [:error] [pid 3382:tid 3453] [client 20.203.201.174:31652] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wa.php"] [unique_id "aYXkNcIgU1HR0rhYrE9QeQAAAI0"]
[Fri Feb 06 20:53:10.338828 2026] [:error] [pid 3382:tid 3446] [client 20.203.201.174:45614] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wb.php"] [unique_id "aYXkNsIgU1HR0rhYrE9QewAAAIY"]
[Fri Feb 06 20:53:11.052513 2026] [:error] [pid 3477:tid 3489] [client 20.203.201.174:47741] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wb.php"] [unique_id "aYXkN7L0Hdh40C7HYgVvfQAAAMo"]
[Fri Feb 06 20:53:11.892593 2026] [:error] [pid 37019:tid 37040] [client 20.203.201.174:44571] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wb.php"] [unique_id "aYXkNwkAjqd3bcgYBrtjyAAAAhM"]
[Fri Feb 06 20:53:12.644929 2026] [:error] [pid 3382:tid 3461] [client 20.203.201.174:25311] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wb.php"] [unique_id "aYXkOMIgU1HR0rhYrE9QgQAAAJU"]
[Fri Feb 06 20:53:13.335297 2026] [:error] [pid 15821:tid 15845] [client 20.203.201.174:47709] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file1.php"] [unique_id "aYXkOXARQa67J4c772kKggAAARQ"]
[Fri Feb 06 20:53:14.116403 2026] [:error] [pid 3477:tid 3480] [client 20.203.201.174:47699] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file1.php"] [unique_id "aYXkOrL0Hdh40C7HYgVvggAAAME"]
[Fri Feb 06 20:53:14.855697 2026] [:error] [pid 46432:tid 46445] [client 20.203.201.174:25310] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file1.php"] [unique_id "aYXkOgbwJwu_od0kZjMm1AAAAks"]
[Fri Feb 06 20:53:16.280970 2026] [:error] [pid 36857:tid 36879] [client 20.203.201.174:30282] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file1.php"] [unique_id "aYXkPJVQwfj7Kp4Dd0HvfwAAAZQ"]
[Fri Feb 06 20:53:16.823776 2026] [:error] [pid 15821:tid 15835] [client 20.203.201.174:42599] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2.php"] [unique_id "aYXkPHARQa67J4c772kKhwAAAQo"]
[Fri Feb 06 20:53:17.441434 2026] [:error] [pid 36857:tid 36859] [client 20.203.201.174:45583] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2.php"] [unique_id "aYXkPZVQwfj7Kp4Dd0HvggAAAYA"]
[Fri Feb 06 20:53:18.278776 2026] [:error] [pid 3382:tid 3460] [client 20.203.201.174:45569] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2.php"] [unique_id "aYXkPsIgU1HR0rhYrE9QhQAAAJQ"]
[Fri Feb 06 20:53:19.113536 2026] [:error] [pid 3382:tid 3454] [client 20.203.201.174:44595] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2.php"] [unique_id "aYXkP8IgU1HR0rhYrE9QiAAAAI4"]
[Fri Feb 06 20:53:19.702369 2026] [:error] [pid 3477:tid 3500] [client 20.203.201.174:45111] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a2.php"] [unique_id "aYXkP7L0Hdh40C7HYgVvigAAANU"]
[Fri Feb 06 20:53:20.509475 2026] [:error] [pid 3382:tid 3443] [client 20.203.201.174:25274] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a2.php"] [unique_id "aYXkQMIgU1HR0rhYrE9QigAAAIM"]
[Fri Feb 06 20:53:22.077746 2026] [:error] [pid 3477:tid 3492] [client 20.203.201.174:27065] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a2.php"] [unique_id "aYXkQrL0Hdh40C7HYgVvjAAAAM0"]
[Fri Feb 06 20:53:22.727016 2026] [:error] [pid 3380:tid 3389] [client 20.203.201.174:40338] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a2.php"] [unique_id "aYXkQhFAlUvBGSBK2jdkmwAAAAU"]
[Fri Feb 06 20:53:23.632907 2026] [:error] [pid 15821:tid 15830] [client 20.203.201.174:44550] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a.php"] [unique_id "aYXkQ3ARQa67J4c772kKjQAAAQU"]
[Fri Feb 06 20:53:24.404382 2026] [:error] [pid 36857:tid 36873] [client 20.203.201.174:40343] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a.php"] [unique_id "aYXkRJVQwfj7Kp4Dd0HvhwAAAY4"]
[Fri Feb 06 20:53:24.963027 2026] [:error] [pid 46432:tid 46451] [client 20.203.201.174:27035] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a.php"] [unique_id "aYXkRAbwJwu_od0kZjMm4QAAAlE"]
[Fri Feb 06 20:53:26.234139 2026] [:error] [pid 3381:tid 3424] [client 20.203.201.174:27015] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a.php"] [unique_id "aYXkRi81zqRg96ZREghpQQAAAEs"]
[Fri Feb 06 20:53:27.928401 2026] [:error] [pid 3477:tid 3487] [client 20.203.201.174:44593] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gmo.php"] [unique_id "aYXkR7L0Hdh40C7HYgVvkwAAAMg"]
[Fri Feb 06 20:53:29.975177 2026] [:error] [pid 3382:tid 3458] [client 20.203.201.174:27289] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gmo.php"] [unique_id "aYXkScIgU1HR0rhYrE9QjgAAAJI"]
[Fri Feb 06 20:53:30.833940 2026] [:error] [pid 3513:tid 3532] [client 20.203.201.174:40375] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gmo.php"] [unique_id "aYXkSjSw3-HAlzpqSxzQxQAAAVE"]
[Fri Feb 06 20:53:32.210898 2026] [:error] [pid 36857:tid 36871] [client 20.203.201.174:25265] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gmo.php"] [unique_id "aYXkTJVQwfj7Kp4Dd0HvlgAAAYw"]
[Fri Feb 06 20:53:32.856178 2026] [:error] [pid 3381:tid 3417] [client 20.203.201.174:27034] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/info.php"] [unique_id "aYXkTC81zqRg96ZREghpTQAAAEQ"]
[Fri Feb 06 20:53:33.459488 2026] [:error] [pid 36857:tid 36873] [client 20.203.201.174:27319] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/info.php"] [unique_id "aYXkTZVQwfj7Kp4Dd0HvmQAAAY4"]
[Fri Feb 06 20:53:34.198808 2026] [:error] [pid 3380:tid 3403] [client 20.203.201.174:25316] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/info.php"] [unique_id "aYXkThFAlUvBGSBK2jdkogAAABM"]
[Fri Feb 06 20:53:34.829135 2026] [:error] [pid 36928:tid 36946] [client 20.203.201.174:27306] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/info.php"] [unique_id "aYXkTps7fyU8D36r-Opu6QAAAc4"]
[Fri Feb 06 20:53:36.160853 2026] [:error] [pid 36928:tid 36951] [client 20.203.201.174:30226] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file2.php"] [unique_id "aYXkUJs7fyU8D36r-Opu7AAAAdM"]
[Fri Feb 06 20:53:36.949875 2026] [:error] [pid 3380:tid 3393] [client 20.203.201.174:26757] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file2.php"] [unique_id "aYXkUBFAlUvBGSBK2jdkpwAAAAk"]
[Fri Feb 06 20:53:37.568254 2026] [proxy_fcgi:error] [pid 3380:tid 3408] [client 20.203.201.174:29039] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 20:53:37.816743 2026] [proxy_fcgi:error] [pid 3380:tid 3395] [client 20.203.201.174:29039] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 20:53:38.054653 2026] [proxy_fcgi:error] [pid 3380:tid 3386] [client 20.203.201.174:29039] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 20:53:38.294027 2026] [proxy_fcgi:error] [pid 3380:tid 3401] [client 20.203.201.174:29039] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 20:53:38.536307 2026] [proxy_fcgi:error] [pid 3380:tid 3396] [client 20.203.201.174:29039] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 20:53:38.880072 2026] [proxy_fcgi:error] [pid 3380:tid 3384] [client 20.203.201.174:29039] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 20:53:39.123288 2026] [proxy_fcgi:error] [pid 3380:tid 3385] [client 20.203.201.174:29039] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 20:53:39.791407 2026] [proxy_fcgi:error] [pid 3380:tid 3407] [client 20.203.201.174:29039] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 20:53:40.069805 2026] [proxy_fcgi:error] [pid 3380:tid 3404] [client 20.203.201.174:29039] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 20:53:40.314614 2026] [proxy_fcgi:error] [pid 3380:tid 3403] [client 20.203.201.174:29039] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 20:53:40.554393 2026] [proxy_fcgi:error] [pid 3380:tid 3397] [client 20.203.201.174:29039] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 20:53:40.808076 2026] [:error] [pid 3380:tid 3391] [client 20.203.201.174:29039] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/geck.php"] [unique_id "aYXkVBFAlUvBGSBK2jdkuQAAAAc"]
[Fri Feb 06 20:53:45.049246 2026] [:error] [pid 36857:tid 36863] [client 20.203.201.174:47737] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/geck.php"] [unique_id "aYXkWZVQwfj7Kp4Dd0HvoQAAAYQ"]
[Fri Feb 06 20:53:45.859373 2026] [:error] [pid 3477:tid 3488] [client 20.203.201.174:45111] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/geck.php"] [unique_id "aYXkWbL0Hdh40C7HYgVvogAAAMk"]
[Fri Feb 06 20:53:46.501789 2026] [:error] [pid 3477:tid 3482] [client 20.203.201.174:27022] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/geck.php"] [unique_id "aYXkWrL0Hdh40C7HYgVvpQAAAMM"]
[Fri Feb 06 20:53:47.257204 2026] [:error] [pid 15821:tid 15848] [client 20.203.201.174:44617] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gm.php"] [unique_id "aYXkW3ARQa67J4c772kKpwAAARc"]
[Fri Feb 06 20:53:48.037310 2026] [:error] [pid 36857:tid 36871] [client 20.203.201.174:47624] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gm.php"] [unique_id "aYXkXJVQwfj7Kp4Dd0HvogAAAYw"]
[Fri Feb 06 20:53:48.893589 2026] [:error] [pid 3477:tid 3483] [client 20.203.201.174:47648] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gm.php"] [unique_id "aYXkXLL0Hdh40C7HYgVvqwAAAMQ"]
[Fri Feb 06 20:53:50.071966 2026] [:error] [pid 46432:tid 46454] [client 20.203.201.174:27032] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gm.php"] [unique_id "aYXkXgbwJwu_od0kZjMm9AAAAlQ"]
[Fri Feb 06 20:53:51.965078 2026] [:error] [pid 15821:tid 15830] [client 20.203.201.174:28946] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/makeasmtp.php"] [unique_id "aYXkX3ARQa67J4c772kKqQAAAQU"]
[Fri Feb 06 20:53:53.288436 2026] [:error] [pid 3382:tid 3464] [client 20.203.201.174:47654] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/makeasmtp.php"] [unique_id "aYXkYcIgU1HR0rhYrE9QsAAAAJg"]
[Fri Feb 06 20:53:54.021718 2026] [:error] [pid 3477:tid 3489] [client 20.203.201.174:47672] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/makeasmtp.php"] [unique_id "aYXkYrL0Hdh40C7HYgVvsQAAAMo"]
[Fri Feb 06 20:53:54.719564 2026] [:error] [pid 3513:tid 3529] [client 20.203.201.174:31634] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/makeasmtp.php"] [unique_id "aYXkYjSw3-HAlzpqSxzQ1wAAAU4"]
[Fri Feb 06 20:53:55.892387 2026] [:error] [pid 37019:tid 37028] [client 20.203.201.174:31666] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cccc.php"] [unique_id "aYXkYwkAjqd3bcgYBrtj5gAAAgc"]
[Fri Feb 06 20:53:56.993079 2026] [:error] [pid 37019:tid 37036] [client 20.203.201.174:29255] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cccc.php"] [unique_id "aYXkZAkAjqd3bcgYBrtj5wAAAg8"]
[Fri Feb 06 20:53:57.653481 2026] [:error] [pid 3477:tid 3486] [client 20.203.201.174:31654] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cccc.php"] [unique_id "aYXkZbL0Hdh40C7HYgVvtQAAAMc"]
[Fri Feb 06 20:53:58.312284 2026] [:error] [pid 3513:tid 3532] [client 20.203.201.174:4926] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cccc.php"] [unique_id "aYXkZjSw3-HAlzpqSxzQ2AAAAVE"]
[Fri Feb 06 20:53:58.878104 2026] [:error] [pid 36857:tid 36879] [client 20.203.201.174:4743] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file4.php"] [unique_id "aYXkZpVQwfj7Kp4Dd0HvqgAAAZQ"]
[Fri Feb 06 20:53:59.398130 2026] [:error] [pid 3513:tid 3516] [client 20.203.201.174:43075] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file4.php"] [unique_id "aYXkZzSw3-HAlzpqSxzQ2gAAAUE"]
[Fri Feb 06 20:54:00.477934 2026] [:error] [pid 3382:tid 3450] [client 20.203.201.174:47666] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file4.php"] [unique_id "aYXkaMIgU1HR0rhYrE9QtgAAAIo"]
[Fri Feb 06 20:54:01.584482 2026] [:error] [pid 3382:tid 3464] [client 20.203.201.174:31628] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file4.php"] [unique_id "aYXkacIgU1HR0rhYrE9QtwAAAJg"]
[Fri Feb 06 20:54:02.119330 2026] [:error] [pid 3380:tid 3394] [client 20.203.201.174:4455] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/520.php"] [unique_id "aYXkahFAlUvBGSBK2jdkygAAAAo"]
[Fri Feb 06 20:54:02.133469 2026] [:error] [pid 3382:tid 3450] [client 20.203.201.174:47666] [client 20.203.201.174] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "40.77.167.74_3d3ac58d8463837308f32ae367c2da2fbbbe11de"): Internal error (specific information not available) [hostname "dwelectservices.com.au"] [uri "/file4.php"] [unique_id "aYXkaMIgU1HR0rhYrE9QtgAAAIo"]
[Fri Feb 06 20:54:02.852729 2026] [:error] [pid 46432:tid 46437] [client 20.203.201.174:30551] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/520.php"] [unique_id "aYXkagbwJwu_od0kZjMnEAAAAkM"]
[Fri Feb 06 20:54:03.612944 2026] [:error] [pid 46432:tid 46449] [client 20.203.201.174:30553] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/520.php"] [unique_id "aYXkawbwJwu_od0kZjMnEgAAAk8"]
[Fri Feb 06 20:54:04.463183 2026] [:error] [pid 3477:tid 3503] [client 20.203.201.174:43121] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/520.php"] [unique_id "aYXkbLL0Hdh40C7HYgVvugAAANg"]
[Fri Feb 06 20:54:05.353076 2026] [:error] [pid 3477:tid 3480] [client 20.203.201.174:44670] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/CLA.php"] [unique_id "aYXkbbL0Hdh40C7HYgVvvAAAAME"]
[Fri Feb 06 20:54:06.205682 2026] [:error] [pid 3382:tid 3440] [client 20.203.201.174:27946] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/CLA.php"] [unique_id "aYXkbsIgU1HR0rhYrE9QxQAAAIA"]
[Fri Feb 06 20:54:06.724613 2026] [:error] [pid 3381:tid 3430] [client 20.203.201.174:35073] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/CLA.php"] [unique_id "aYXkbi81zqRg96ZREghpeQAAAFE"]
[Fri Feb 06 20:54:07.414595 2026] [:error] [pid 3381:tid 3420] [client 20.203.201.174:35111] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/CLA.php"] [unique_id "aYXkby81zqRg96ZREghpegAAAEc"]
[Fri Feb 06 20:54:07.953916 2026] [:error] [pid 15821:tid 15846] [client 20.203.201.174:38878] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file18.php"] [unique_id "aYXkb3ARQa67J4c772kKtgAAARU"]
[Fri Feb 06 20:54:08.745606 2026] [:error] [pid 36928:tid 36936] [client 20.203.201.174:29291] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file18.php"] [unique_id "aYXkcJs7fyU8D36r-Opu_AAAAcQ"]
[Fri Feb 06 20:54:09.878768 2026] [:error] [pid 36928:tid 36939] [client 20.203.201.174:39236] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file18.php"] [unique_id "aYXkcZs7fyU8D36r-Opu_gAAAcc"]
[Fri Feb 06 20:54:10.872038 2026] [:error] [pid 3513:tid 3529] [client 20.203.201.174:27035] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file18.php"] [unique_id "aYXkcjSw3-HAlzpqSxzQ3wAAAU4"]
[Fri Feb 06 20:54:11.450270 2026] [:error] [pid 3382:tid 3461] [client 20.203.201.174:4547] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ffile.php"] [unique_id "aYXkc8IgU1HR0rhYrE9QzAAAAJU"]
[Fri Feb 06 20:54:12.214447 2026] [:error] [pid 36928:tid 36947] [client 20.203.201.174:38881] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ffile.php"] [unique_id "aYXkdJs7fyU8D36r-Opu_wAAAc8"]
[Fri Feb 06 20:54:13.148632 2026] [:error] [pid 37019:tid 37021] [client 20.203.201.174:29234] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ffile.php"] [unique_id "aYXkdQkAjqd3bcgYBrtj7AAAAgA"]
[Fri Feb 06 20:54:13.924041 2026] [:error] [pid 3382:tid 3452] [client 20.203.201.174:36962] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ffile.php"] [unique_id "aYXkdcIgU1HR0rhYrE9Q1AAAAIw"]
[Fri Feb 06 20:54:14.619459 2026] [:error] [pid 46432:tid 46457] [client 20.203.201.174:36982] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file7.php"] [unique_id "aYXkdgbwJwu_od0kZjMnGAAAAlc"]
[Fri Feb 06 20:54:15.219119 2026] [:error] [pid 36928:tid 36950] [client 20.203.201.174:29193] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file7.php"] [unique_id "aYXkd5s7fyU8D36r-OpvAQAAAdI"]
[Fri Feb 06 20:54:15.984463 2026] [:error] [pid 36857:tid 36878] [client 20.203.201.174:36888] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file7.php"] [unique_id "aYXkd5VQwfj7Kp4Dd0HvtAAAAZM"]
[Fri Feb 06 20:54:16.834058 2026] [:error] [pid 3513:tid 3515] [client 20.203.201.174:39281] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file7.php"] [unique_id "aYXkeDSw3-HAlzpqSxzQ4gAAAUA"]
[Fri Feb 06 20:54:18.328960 2026] [:error] [pid 3477:tid 3497] [client 20.203.201.174:42093] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file.php"] [unique_id "aYXkerL0Hdh40C7HYgVv0gAAANI"]
[Fri Feb 06 20:54:19.405258 2026] [:error] [pid 37019:tid 37034] [client 20.203.201.174:29292] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file.php"] [unique_id "aYXkewkAjqd3bcgYBrtj7wAAAg0"]
[Fri Feb 06 20:54:20.037744 2026] [:error] [pid 46432:tid 46449] [client 20.203.201.174:39248] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file.php"] [unique_id "aYXkfAbwJwu_od0kZjMnHgAAAk8"]
[Fri Feb 06 20:54:20.925370 2026] [:error] [pid 3477:tid 3480] [client 20.203.201.174:36979] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file.php"] [unique_id "aYXkfLL0Hdh40C7HYgVv0wAAAME"]
[Fri Feb 06 20:54:21.518712 2026] [:error] [pid 37019:tid 37040] [client 20.203.201.174:36921] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/we.php"] [unique_id "aYXkfQkAjqd3bcgYBrtj8QAAAhM"]
[Fri Feb 06 20:54:22.257805 2026] [:error] [pid 37019:tid 37039] [client 20.203.201.174:43065] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/we.php"] [unique_id "aYXkfgkAjqd3bcgYBrtj8gAAAhI"]
[Fri Feb 06 20:54:23.170277 2026] [:error] [pid 36857:tid 36871] [client 20.203.201.174:36868] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/we.php"] [unique_id "aYXkf5VQwfj7Kp4Dd0HvtwAAAYw"]
[Fri Feb 06 20:54:23.653406 2026] [:error] [pid 3381:tid 3421] [client 20.203.201.174:38871] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/we.php"] [unique_id "aYXkfy81zqRg96ZREghpigAAAEg"]
[Fri Feb 06 20:54:24.359219 2026] [:error] [pid 37019:tid 37041] [client 20.203.201.174:38877] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gfile.php"] [unique_id "aYXkgAkAjqd3bcgYBrtj9QAAAhQ"]
[Fri Feb 06 20:54:25.384636 2026] [:error] [pid 37019:tid 37022] [client 20.203.201.174:29537] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gfile.php"] [unique_id "aYXkgQkAjqd3bcgYBrtj9wAAAgE"]
[Fri Feb 06 20:54:26.783795 2026] [:error] [pid 3380:tid 3408] [client 20.203.201.174:43045] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gfile.php"] [unique_id "aYXkghFAlUvBGSBK2jdk2AAAABg"]
[Fri Feb 06 20:54:28.400773 2026] [:error] [pid 36928:tid 36950] [client 20.203.201.174:41197] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gfile.php"] [unique_id "aYXkhJs7fyU8D36r-OpvDgAAAdI"]
[Fri Feb 06 20:54:29.816464 2026] [:error] [pid 3477:tid 3502] [client 20.203.201.174:34307] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jlex3.php"] [unique_id "aYXkhbL0Hdh40C7HYgVv1QAAANc"]
[Fri Feb 06 20:54:31.053321 2026] [:error] [pid 3380:tid 3406] [client 20.203.201.174:33651] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jlex3.php"] [unique_id "aYXkhxFAlUvBGSBK2jdk4wAAABY"]
[Fri Feb 06 20:54:31.853647 2026] [:error] [pid 3380:tid 3399] [client 20.203.201.174:41211] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jlex3.php"] [unique_id "aYXkhxFAlUvBGSBK2jdk5AAAAA8"]
[Fri Feb 06 20:54:33.156626 2026] [:error] [pid 3381:tid 3431] [client 20.203.201.174:38021] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jlex3.php"] [unique_id "aYXkiS81zqRg96ZREghpjwAAAFI"]
[Fri Feb 06 20:54:33.694782 2026] [:error] [pid 3477:tid 3486] [client 20.203.201.174:33617] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/des.php"] [unique_id "aYXkibL0Hdh40C7HYgVv1wAAAMc"]
[Fri Feb 06 20:54:34.432277 2026] [:error] [pid 3381:tid 3434] [client 20.203.201.174:38877] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/des.php"] [unique_id "aYXkii81zqRg96ZREghpkQAAAFU"]
[Fri Feb 06 20:54:35.367783 2026] [:error] [pid 36928:tid 36935] [client 20.203.201.174:39629] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/des.php"] [unique_id "aYXki5s7fyU8D36r-OpvEgAAAcM"]
[Fri Feb 06 20:54:36.407381 2026] [:error] [pid 3381:tid 3419] [client 20.203.201.174:39664] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/des.php"] [unique_id "aYXkjC81zqRg96ZREghpkwAAAEY"]
[Fri Feb 06 20:54:37.078005 2026] [:error] [pid 36857:tid 36860] [client 20.203.201.174:41214] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aaa.php"] [unique_id "aYXkjZVQwfj7Kp4Dd0HvvAAAAYE"]
[Fri Feb 06 20:54:37.707306 2026] [:error] [pid 3477:tid 3479] [client 20.203.201.174:40047] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aaa.php"] [unique_id "aYXkjbL0Hdh40C7HYgVv3AAAAMA"]
[Fri Feb 06 20:54:39.088997 2026] [:error] [pid 46432:tid 46443] [client 20.203.201.174:33604] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aaa.php"] [unique_id "aYXkjwbwJwu_od0kZjMnMgAAAkk"]
[Fri Feb 06 20:54:39.909731 2026] [:error] [pid 3513:tid 3535] [client 20.203.201.174:29507] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aaa.php"] [unique_id "aYXkjzSw3-HAlzpqSxzQ8gAAAVQ"]
[Fri Feb 06 20:54:40.425888 2026] [proxy_fcgi:error] [pid 3382:tid 3464] [client 20.203.201.174:27383] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 20:54:40.672691 2026] [proxy_fcgi:error] [pid 3382:tid 3454] [client 20.203.201.174:27383] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 20:54:40.912106 2026] [proxy_fcgi:error] [pid 3382:tid 3447] [client 20.203.201.174:27383] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 20:54:41.186801 2026] [proxy_fcgi:error] [pid 3382:tid 3441] [client 20.203.201.174:27383] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 20:54:41.442663 2026] [proxy_fcgi:error] [pid 3382:tid 3452] [client 20.203.201.174:27383] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 20:54:41.780835 2026] [proxy_fcgi:error] [pid 3382:tid 3462] [client 20.203.201.174:27383] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 20:54:42.158318 2026] [proxy_fcgi:error] [pid 3382:tid 3444] [client 20.203.201.174:27383] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 20:54:42.396231 2026] [proxy_fcgi:error] [pid 3382:tid 3450] [client 20.203.201.174:27383] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 20:54:42.747814 2026] [proxy_fcgi:error] [pid 3382:tid 3453] [client 20.203.201.174:27383] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 20:54:43.014598 2026] [proxy_fcgi:error] [pid 3382:tid 3457] [client 20.203.201.174:27383] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 20:54:43.257256 2026] [proxy_fcgi:error] [pid 3382:tid 3448] [client 20.203.201.174:27383] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 20:54:43.495498 2026] [:error] [pid 3382:tid 3460] [client 20.203.201.174:27383] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aYXkk8IgU1HR0rhYrE9RBQAAAJQ"]
[Fri Feb 06 20:54:44.515935 2026] [:error] [pid 3382:tid 3463] [client 20.203.201.174:28000] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aYXklMIgU1HR0rhYrE9RCQAAAJc"]
[Fri Feb 06 20:54:45.199503 2026] [:error] [pid 46432:tid 46444] [client 20.203.201.174:27386] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aYXklQbwJwu_od0kZjMnNwAAAko"]
[Fri Feb 06 20:54:45.772423 2026] [:error] [pid 46432:tid 46458] [client 20.203.201.174:33622] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aYXklQbwJwu_od0kZjMnPAAAAlg"]
[Fri Feb 06 20:54:46.518343 2026] [:error] [pid 3477:tid 3485] [client 20.203.201.174:34429] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aYXklrL0Hdh40C7HYgVv6gAAAMY"]
[Fri Feb 06 20:54:47.224604 2026] [:error] [pid 3380:tid 3401] [client 20.203.201.174:40026] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aYXklxFAlUvBGSBK2jdk6gAAABE"]
[Fri Feb 06 20:54:48.042641 2026] [:error] [pid 3382:tid 3458] [client 20.203.201.174:41511] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aYXkmMIgU1HR0rhYrE9REwAAAJI"]
[Fri Feb 06 20:54:48.600530 2026] [:error] [pid 46432:tid 46453] [client 20.203.201.174:40804] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aYXkmAbwJwu_od0kZjMnPQAAAlM"]
[Fri Feb 06 20:54:49.111241 2026] [:error] [pid 46432:tid 46445] [client 20.203.201.174:34390] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/image.php"] [unique_id "aYXkmQbwJwu_od0kZjMnPwAAAks"]
[Fri Feb 06 20:54:49.693910 2026] [:error] [pid 46432:tid 46440] [client 20.203.201.174:33251] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/image.php"] [unique_id "aYXkmQbwJwu_od0kZjMnQQAAAkY"]
[Fri Feb 06 20:54:51.549527 2026] [:error] [pid 3513:tid 3518] [client 20.203.201.174:41472] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/image.php"] [unique_id "aYXkmzSw3-HAlzpqSxzRAgAAAUM"]
[Fri Feb 06 20:54:52.240624 2026] [:error] [pid 36857:tid 36873] [client 20.203.201.174:43522] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/image.php"] [unique_id "aYXknJVQwfj7Kp4Dd0HvxAAAAY4"]
[Fri Feb 06 20:54:52.838361 2026] [:error] [pid 3477:tid 3491] [client 20.203.201.174:40397] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aYXknLL0Hdh40C7HYgVwAwAAAMw"]
[Fri Feb 06 20:54:53.428353 2026] [:error] [pid 37019:tid 37027] [client 20.203.201.174:40415] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aYXknQkAjqd3bcgYBrtkBQAAAgY"]
[Fri Feb 06 20:54:54.068353 2026] [:error] [pid 3513:tid 3529] [client 20.203.201.174:52184] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aYXknjSw3-HAlzpqSxzRCAAAAU4"]
[Fri Feb 06 20:54:54.552045 2026] [:error] [pid 36857:tid 36882] [client 20.203.201.174:41486] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aYXknpVQwfj7Kp4Dd0HvyQAAAZc"]
[Fri Feb 06 20:54:55.600435 2026] [:error] [pid 3381:tid 3421] [client 20.203.201.174:33576] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mail.php"] [unique_id "aYXkny81zqRg96ZREghpnAAAAEg"]
[Fri Feb 06 20:54:56.277585 2026] [:error] [pid 3477:tid 3502] [client 20.203.201.174:52169] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mail.php"] [unique_id "aYXkoLL0Hdh40C7HYgVwFAAAANc"]
[Fri Feb 06 20:54:56.997150 2026] [:error] [pid 46432:tid 46458] [client 20.203.201.174:40412] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mail.php"] [unique_id "aYXkoAbwJwu_od0kZjMnSAAAAlg"]
[Fri Feb 06 20:54:57.941587 2026] [:error] [pid 46432:tid 46456] [client 20.203.201.174:45569] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mail.php"] [unique_id "aYXkoQbwJwu_od0kZjMnSwAAAlY"]
[Fri Feb 06 20:54:58.502122 2026] [:error] [pid 15821:tid 15845] [client 20.203.201.174:52172] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sx.php"] [unique_id "aYXkonARQa67J4c772kK6AAAARQ"]
[Fri Feb 06 20:54:59.174265 2026] [:error] [pid 3381:tid 3437] [client 20.203.201.174:33241] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sx.php"] [unique_id "aYXkoy81zqRg96ZREghpoAAAAFg"]
[Fri Feb 06 20:54:59.681960 2026] [:error] [pid 36857:tid 36869] [client 20.203.201.174:34424] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sx.php"] [unique_id "aYXko5VQwfj7Kp4Dd0HvzAAAAYo"]
[Fri Feb 06 20:55:00.244981 2026] [:error] [pid 3381:tid 3423] [client 20.203.201.174:36254] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sx.php"] [unique_id "aYXkpC81zqRg96ZREghppAAAAEo"]
[Fri Feb 06 20:55:00.864003 2026] [:error] [pid 37019:tid 37030] [client 20.203.201.174:52189] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/max.php"] [unique_id "aYXkpAkAjqd3bcgYBrtkFQAAAgk"]
[Fri Feb 06 20:55:01.986105 2026] [:error] [pid 15821:tid 15837] [client 20.203.201.174:34389] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/max.php"] [unique_id "aYXkpXARQa67J4c772kK6wAAAQw"]
[Fri Feb 06 20:55:02.835340 2026] [:error] [pid 3380:tid 3384] [client 20.203.201.174:4228] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/max.php"] [unique_id "aYXkphFAlUvBGSBK2jdk9QAAAAA"]
[Fri Feb 06 20:55:03.509359 2026] [:error] [pid 36857:tid 36871] [client 20.203.201.174:41547] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/max.php"] [unique_id "aYXkp5VQwfj7Kp4Dd0HvzgAAAYw"]
[Fri Feb 06 20:55:04.395173 2026] [:error] [pid 3513:tid 3533] [client 20.203.201.174:4229] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/size.php"] [unique_id "aYXkqDSw3-HAlzpqSxzREgAAAVI"]
[Fri Feb 06 20:55:05.024653 2026] [:error] [pid 37019:tid 37033] [client 20.203.201.174:33540] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/size.php"] [unique_id "aYXkqQkAjqd3bcgYBrtkHQAAAgw"]
[Fri Feb 06 20:55:05.686046 2026] [:error] [pid 36857:tid 36861] [client 20.203.201.174:49165] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/size.php"] [unique_id "aYXkqZVQwfj7Kp4Dd0Hv0AAAAYI"]
[Fri Feb 06 20:55:06.401531 2026] [:error] [pid 3477:tid 3496] [client 20.203.201.174:33580] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/size.php"] [unique_id "aYXkqrL0Hdh40C7HYgVwGgAAANE"]
[Fri Feb 06 20:55:08.274857 2026] [:error] [pid 3382:tid 3458] [client 20.203.201.174:41537] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mpxct.php"] [unique_id "aYXkrMIgU1HR0rhYrE9RHQAAAJI"]
[Fri Feb 06 20:55:09.532072 2026] [:error] [pid 3513:tid 3531] [client 20.203.201.174:43529] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mpxct.php"] [unique_id "aYXkrTSw3-HAlzpqSxzRGQAAAVA"]
[Fri Feb 06 20:55:10.569043 2026] [:error] [pid 3381:tid 3430] [client 20.203.201.174:34392] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mpxct.php"] [unique_id "aYXkri81zqRg96ZREghppwAAAFE"]
[Fri Feb 06 20:55:11.523611 2026] [:error] [pid 3381:tid 3433] [client 20.203.201.174:36251] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mpxct.php"] [unique_id "aYXkry81zqRg96ZREghpqQAAAFQ"]
[Fri Feb 06 21:36:07.101298 2026] [:error] [pid 3381:tid 3429] [client 138.197.177.114:63398] [client 138.197.177.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 138.197.177.114, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-login.php"] [unique_id "aYXuRy81zqRg96ZREghyRQAAAFA"]
[Fri Feb 06 21:36:07.111471 2026] [proxy_fcgi:error] [pid 3381:tid 3429] [client 138.197.177.114:63398] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 21:54:40.092187 2026] [:error] [pid 15821:tid 15832] [client 146.70.250.132:56808] [client 146.70.250.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/"] [unique_id "aYXyoHARQa67J4c772kVtQAAAQc"]
[Sat Feb 07 01:10:24.507351 2026] [proxy_fcgi:error] [pid 35309:tid 35467] [client 20.151.206.105:13236] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 01:10:24.934520 2026] [proxy_fcgi:error] [pid 35309:tid 35474] [client 20.151.206.105:13236] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 01:10:25.153326 2026] [proxy_fcgi:error] [pid 35309:tid 35473] [client 20.151.206.105:13236] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 01:10:25.364187 2026] [proxy_fcgi:error] [pid 35309:tid 35459] [client 20.151.206.105:13236] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 01:10:25.599104 2026] [proxy_fcgi:error] [pid 35309:tid 35465] [client 20.151.206.105:13236] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 01:10:25.820285 2026] [proxy_fcgi:error] [pid 35309:tid 35461] [client 20.151.206.105:13236] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 01:10:26.030077 2026] [proxy_fcgi:error] [pid 35309:tid 35476] [client 20.151.206.105:13236] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 01:10:26.451415 2026] [proxy_fcgi:error] [pid 35309:tid 35480] [client 20.151.206.105:13236] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 01:10:26.658050 2026] [:error] [pid 35309:tid 35470] [client 20.151.206.105:13236] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tx1.php"] [unique_id "aYYggojeM9w-4dKewm_HJgAAAM8"]
[Sat Feb 07 01:10:27.069508 2026] [:error] [pid 55616:tid 55622] [client 20.151.206.105:13243] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tx1.php"] [unique_id "aYYgg-zxeKHfFD-B2b3cUQAAAEM"]
[Sat Feb 07 01:10:27.478197 2026] [:error] [pid 35308:tid 35432] [client 20.151.206.105:13213] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tx1.php"] [unique_id "aYYggwUnbRgf4hlvwiyZ7gAAAIU"]
[Sat Feb 07 01:10:27.893723 2026] [:error] [pid 35309:tid 35462] [client 20.151.206.105:13222] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tx1.php"] [unique_id "aYYgg4jeM9w-4dKewm_HJwAAAMc"]
[Sat Feb 07 01:10:28.304679 2026] [:error] [pid 35309:tid 35475] [client 20.151.206.105:13187] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xv.php"] [unique_id "aYYghIjeM9w-4dKewm_HKAAAANQ"]
[Sat Feb 07 01:10:28.724857 2026] [:error] [pid 55701:tid 55771] [client 20.151.206.105:13231] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xv.php"] [unique_id "aYYghMDNf5Dni-14pBDMnAAAAU8"]
[Sat Feb 07 01:10:29.144754 2026] [:error] [pid 55701:tid 55769] [client 20.151.206.105:13242] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xv.php"] [unique_id "aYYghcDNf5Dni-14pBDMnwAAAU0"]
[Sat Feb 07 01:10:29.555041 2026] [:error] [pid 55701:tid 55758] [client 20.151.206.105:12936] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xv.php"] [unique_id "aYYghcDNf5Dni-14pBDMoQAAAUM"]
[Sat Feb 07 01:10:29.974750 2026] [:error] [pid 35537:tid 35561] [client 20.151.206.105:13197] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x56.php"] [unique_id "aYYghc1jKVeByUo420DdeQAAARY"]
[Sat Feb 07 01:10:30.386745 2026] [:error] [pid 55616:tid 55627] [client 20.151.206.105:13198] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x56.php"] [unique_id "aYYghuzxeKHfFD-B2b3cUwAAAEg"]
[Sat Feb 07 01:10:30.799257 2026] [:error] [pid 55701:tid 55766] [client 20.151.206.105:13196] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x56.php"] [unique_id "aYYghsDNf5Dni-14pBDMpQAAAUo"]
[Sat Feb 07 01:10:31.222299 2026] [:error] [pid 55616:tid 55625] [client 20.151.206.105:12950] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x56.php"] [unique_id "aYYgh-zxeKHfFD-B2b3cVQAAAEY"]
[Sat Feb 07 01:10:31.642692 2026] [:error] [pid 55701:tid 55770] [client 20.151.206.105:12937] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/htaccess.php"] [unique_id "aYYgh8DNf5Dni-14pBDMpwAAAU4"]
[Sat Feb 07 01:10:32.054972 2026] [:error] [pid 55701:tid 55765] [client 20.151.206.105:13247] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/htaccess.php"] [unique_id "aYYgiMDNf5Dni-14pBDMqQAAAUk"]
[Sat Feb 07 01:10:32.466198 2026] [:error] [pid 35309:tid 35471] [client 20.151.206.105:13194] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/htaccess.php"] [unique_id "aYYgiIjeM9w-4dKewm_HKwAAANA"]
[Sat Feb 07 01:10:32.919434 2026] [:error] [pid 55701:tid 55760] [client 20.151.206.105:13223] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/htaccess.php"] [unique_id "aYYgiMDNf5Dni-14pBDMrQAAAUU"]
[Sat Feb 07 01:10:33.334882 2026] [:error] [pid 55701:tid 55779] [client 20.151.206.105:12969] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/readme.php"] [unique_id "aYYgicDNf5Dni-14pBDMsAAAAVc"]
[Sat Feb 07 01:10:33.747302 2026] [:error] [pid 55616:tid 55643] [client 20.151.206.105:13193] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/readme.php"] [unique_id "aYYgiezxeKHfFD-B2b3cXAAAAFg"]
[Sat Feb 07 01:10:34.169890 2026] [:error] [pid 35537:tid 35549] [client 20.151.206.105:12948] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/readme.php"] [unique_id "aYYgis1jKVeByUo420DdfAAAAQo"]
[Sat Feb 07 01:10:34.580792 2026] [:error] [pid 55701:tid 55780] [client 20.151.206.105:13188] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/readme.php"] [unique_id "aYYgisDNf5Dni-14pBDMtQAAAVg"]
[Sat Feb 07 01:10:34.993824 2026] [:error] [pid 55701:tid 55777] [client 20.151.206.105:13199] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x50.php"] [unique_id "aYYgisDNf5Dni-14pBDMtwAAAVU"]
[Sat Feb 07 01:10:35.409320 2026] [:error] [pid 55701:tid 55771] [client 20.151.206.105:12956] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x50.php"] [unique_id "aYYgi8DNf5Dni-14pBDMugAAAU8"]
[Sat Feb 07 01:10:35.821658 2026] [:error] [pid 55701:tid 55779] [client 20.151.206.105:12991] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x50.php"] [unique_id "aYYgi8DNf5Dni-14pBDMuwAAAVc"]
[Sat Feb 07 01:10:36.233395 2026] [:error] [pid 35307:tid 35381] [client 20.151.206.105:12942] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x50.php"] [unique_id "aYYgjOsb9VwRNUckGgvIIAAAAA8"]
[Sat Feb 07 01:10:36.653176 2026] [:error] [pid 35307:tid 35379] [client 20.151.206.105:13237] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fv.php"] [unique_id "aYYgjOsb9VwRNUckGgvIIgAAAA0"]
[Sat Feb 07 01:10:37.064065 2026] [:error] [pid 35308:tid 35439] [client 20.151.206.105:12935] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fv.php"] [unique_id "aYYgjQUnbRgf4hlvwiyZ8gAAAIw"]
[Sat Feb 07 01:10:37.482659 2026] [:error] [pid 55616:tid 55626] [client 20.151.206.105:13246] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fv.php"] [unique_id "aYYgjezxeKHfFD-B2b3cYwAAAEc"]
[Sat Feb 07 01:10:37.892796 2026] [:error] [pid 35308:tid 35435] [client 20.151.206.105:12953] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fv.php"] [unique_id "aYYgjQUnbRgf4hlvwiyZ9AAAAIg"]
[Sat Feb 07 01:10:38.310062 2026] [:error] [pid 35309:tid 35466] [client 20.151.206.105:13072] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file.php"] [unique_id "aYYgjojeM9w-4dKewm_HMQAAAMs"]
[Sat Feb 07 01:10:38.765784 2026] [:error] [pid 55616:tid 55638] [client 20.151.206.105:13079] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file.php"] [unique_id "aYYgjuzxeKHfFD-B2b3cZAAAAFM"]
[Sat Feb 07 01:10:39.196429 2026] [:error] [pid 55701:tid 55755] [client 20.151.206.105:13239] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file.php"] [unique_id "aYYgj8DNf5Dni-14pBDMwQAAAUA"]
[Sat Feb 07 01:10:39.616024 2026] [:error] [pid 55701:tid 55778] [client 20.151.206.105:13226] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file.php"] [unique_id "aYYgj8DNf5Dni-14pBDMwwAAAVY"]
[Sat Feb 07 01:10:40.032888 2026] [:error] [pid 55701:tid 55764] [client 20.151.206.105:12930] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lsd.php"] [unique_id "aYYgkMDNf5Dni-14pBDMxAAAAUg"]
[Sat Feb 07 01:10:40.466525 2026] [:error] [pid 35308:tid 35442] [client 20.151.206.105:13245] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lsd.php"] [unique_id "aYYgkAUnbRgf4hlvwiyZ9QAAAI8"]
[Sat Feb 07 01:10:40.887772 2026] [:error] [pid 55701:tid 55775] [client 20.151.206.105:12932] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lsd.php"] [unique_id "aYYgkMDNf5Dni-14pBDMyQAAAVM"]
[Sat Feb 07 01:10:41.472929 2026] [:error] [pid 35308:tid 35428] [client 20.151.206.105:12951] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lsd.php"] [unique_id "aYYgkQUnbRgf4hlvwiyZ9gAAAIE"]
[Sat Feb 07 01:10:41.902692 2026] [:error] [pid 55701:tid 55759] [client 20.151.206.105:12928] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/as.php"] [unique_id "aYYgkcDNf5Dni-14pBDMzQAAAUQ"]
[Sat Feb 07 01:10:42.320987 2026] [:error] [pid 35537:tid 35552] [client 20.151.206.105:12972] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/as.php"] [unique_id "aYYgks1jKVeByUo420DdgQAAAQ0"]
[Sat Feb 07 01:10:42.737890 2026] [:error] [pid 35307:tid 35378] [client 20.151.206.105:13219] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/as.php"] [unique_id "aYYgkusb9VwRNUckGgvIKQAAAAw"]
[Sat Feb 07 01:10:43.154513 2026] [:error] [pid 35309:tid 35475] [client 20.151.206.105:12573] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/as.php"] [unique_id "aYYgk4jeM9w-4dKewm_HNAAAANQ"]
[Sat Feb 07 01:10:43.570283 2026] [:error] [pid 35307:tid 35373] [client 20.151.206.105:13201] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wsd.php"] [unique_id "aYYgk-sb9VwRNUckGgvIKgAAAAg"]
[Sat Feb 07 01:10:43.984689 2026] [:error] [pid 55701:tid 55779] [client 20.151.206.105:13235] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wsd.php"] [unique_id "aYYgk8DNf5Dni-14pBDM0QAAAVc"]
[Sat Feb 07 01:10:44.396952 2026] [:error] [pid 35307:tid 35374] [client 20.151.206.105:12943] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wsd.php"] [unique_id "aYYglOsb9VwRNUckGgvILAAAAAk"]
[Sat Feb 07 01:10:44.835482 2026] [:error] [pid 55616:tid 55623] [client 20.151.206.105:13238] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wsd.php"] [unique_id "aYYglOzxeKHfFD-B2b3cagAAAEQ"]
[Sat Feb 07 01:10:45.260209 2026] [:error] [pid 35537:tid 35540] [client 20.151.206.105:12945] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gtc.php"] [unique_id "aYYglc1jKVeByUo420DdhQAAAQE"]
[Sat Feb 07 01:10:45.681119 2026] [:error] [pid 35308:tid 35429] [client 20.151.206.105:13234] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gtc.php"] [unique_id "aYYglQUnbRgf4hlvwiyZ-wAAAII"]
[Sat Feb 07 01:10:46.097709 2026] [:error] [pid 55701:tid 55769] [client 20.151.206.105:12974] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gtc.php"] [unique_id "aYYglsDNf5Dni-14pBDM3gAAAU0"]
[Sat Feb 07 01:10:46.512669 2026] [:error] [pid 55701:tid 55779] [client 20.151.206.105:13224] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gtc.php"] [unique_id "aYYglsDNf5Dni-14pBDM5gAAAVc"]
[Sat Feb 07 01:10:46.923103 2026] [:error] [pid 35309:tid 35471] [client 20.151.206.105:12952] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/atx.php"] [unique_id "aYYglojeM9w-4dKewm_HOQAAANA"]
[Sat Feb 07 01:10:47.337065 2026] [:error] [pid 55616:tid 55640] [client 20.151.206.105:12978] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/atx.php"] [unique_id "aYYgl-zxeKHfFD-B2b3cdgAAAFU"]
[Sat Feb 07 01:10:47.749208 2026] [:error] [pid 35537:tid 35553] [client 20.151.206.105:13189] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/atx.php"] [unique_id "aYYgl81jKVeByUo420DdjgAAAQ4"]
[Sat Feb 07 01:10:48.196414 2026] [:error] [pid 35308:tid 35447] [client 20.151.206.105:12973] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/atx.php"] [unique_id "aYYgmAUnbRgf4hlvwiyZ_AAAAJQ"]
[Sat Feb 07 01:10:48.613655 2026] [:error] [pid 55616:tid 55624] [client 20.151.206.105:13204] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/z60.php"] [unique_id "aYYgmOzxeKHfFD-B2b3ceAAAAEU"]
[Sat Feb 07 01:10:49.026663 2026] [:error] [pid 35308:tid 35432] [client 20.151.206.105:13212] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/z60.php"] [unique_id "aYYgmQUnbRgf4hlvwiyZ_QAAAIU"]
[Sat Feb 07 01:10:49.441588 2026] [:error] [pid 55616:tid 55629] [client 20.151.206.105:13202] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/z60.php"] [unique_id "aYYgmezxeKHfFD-B2b3ceQAAAEo"]
[Sat Feb 07 01:10:49.858697 2026] [:error] [pid 35309:tid 35477] [client 20.151.206.105:12990] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/z60.php"] [unique_id "aYYgmYjeM9w-4dKewm_HPQAAANY"]
[Sat Feb 07 01:10:50.288198 2026] [:error] [pid 55701:tid 55771] [client 20.151.206.105:13203] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/403.php"] [unique_id "aYYgmsDNf5Dni-14pBDM9AAAAU8"]
[Sat Feb 07 01:10:50.715161 2026] [:error] [pid 35537:tid 35542] [client 20.151.206.105:13107] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/403.php"] [unique_id "aYYgms1jKVeByUo420DdjwAAAQM"]
[Sat Feb 07 01:10:51.125640 2026] [:error] [pid 55616:tid 55642] [client 20.151.206.105:13244] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/403.php"] [unique_id "aYYgm-zxeKHfFD-B2b3cewAAAFc"]
[Sat Feb 07 01:10:51.537218 2026] [:error] [pid 55701:tid 55758] [client 20.151.206.105:12960] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/403.php"] [unique_id "aYYgm8DNf5Dni-14pBDM9wAAAUM"]
[Sat Feb 07 01:10:52.011393 2026] [:error] [pid 55701:tid 55777] [client 20.151.206.105:12968] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/m.php"] [unique_id "aYYgnMDNf5Dni-14pBDNAgAAAVU"]
[Sat Feb 07 01:10:52.429043 2026] [:error] [pid 55701:tid 55771] [client 20.151.206.105:13071] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/m.php"] [unique_id "aYYgnMDNf5Dni-14pBDNBgAAAU8"]
[Sat Feb 07 01:10:52.851803 2026] [:error] [pid 35309:tid 35480] [client 20.151.206.105:12944] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/m.php"] [unique_id "aYYgnIjeM9w-4dKewm_HQgAAANg"]
[Sat Feb 07 01:10:53.263912 2026] [:error] [pid 55701:tid 55759] [client 20.151.206.105:13069] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/m.php"] [unique_id "aYYgncDNf5Dni-14pBDNCQAAAUQ"]
[Sat Feb 07 01:10:53.675318 2026] [:error] [pid 55616:tid 55640] [client 20.151.206.105:13190] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/themes.php"] [unique_id "aYYgnezxeKHfFD-B2b3cigAAAFU"]
[Sat Feb 07 01:10:54.102359 2026] [:error] [pid 55701:tid 55767] [client 20.151.206.105:12933] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/themes.php"] [unique_id "aYYgnsDNf5Dni-14pBDNCwAAAUs"]
[Sat Feb 07 01:10:54.538459 2026] [:error] [pid 55701:tid 55780] [client 20.151.206.105:13218] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/themes.php"] [unique_id "aYYgnsDNf5Dni-14pBDNDQAAAVg"]
[Sat Feb 07 01:10:54.951951 2026] [:error] [pid 35308:tid 35445] [client 20.151.206.105:13118] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/themes.php"] [unique_id "aYYgngUnbRgf4hlvwiyaCQAAAJI"]
[Sat Feb 07 01:10:55.375072 2026] [:error] [pid 55701:tid 55770] [client 20.151.206.105:12979] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aYYgn8DNf5Dni-14pBDNEgAAAU4"]
[Sat Feb 07 01:10:55.786970 2026] [:error] [pid 35309:tid 35473] [client 20.151.206.105:12970] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aYYgn4jeM9w-4dKewm_HTwAAANI"]
[Sat Feb 07 01:10:56.206343 2026] [:error] [pid 55701:tid 55757] [client 20.151.206.105:13076] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aYYgoMDNf5Dni-14pBDNFAAAAUI"]
[Sat Feb 07 01:10:56.623147 2026] [:error] [pid 55701:tid 55765] [client 20.151.206.105:12967] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aYYgoMDNf5Dni-14pBDNFgAAAUk"]
[Sat Feb 07 01:10:57.049475 2026] [:error] [pid 55701:tid 55764] [client 20.151.206.105:12938] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aYYgocDNf5Dni-14pBDNGQAAAUg"]
[Sat Feb 07 01:10:57.459878 2026] [:error] [pid 55701:tid 55756] [client 20.151.206.105:13215] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aYYgocDNf5Dni-14pBDNHwAAAUE"]
[Sat Feb 07 01:10:57.875750 2026] [:error] [pid 35308:tid 35436] [client 20.151.206.105:13232] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aYYgoQUnbRgf4hlvwiyaEgAAAIk"]
[Sat Feb 07 01:10:58.295778 2026] [:error] [pid 35308:tid 35441] [client 20.151.206.105:12962] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aYYgogUnbRgf4hlvwiyaFgAAAI4"]
[Sat Feb 07 01:10:58.707340 2026] [:error] [pid 55616:tid 55622] [client 20.151.206.105:13240] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/click.php"] [unique_id "aYYgouzxeKHfFD-B2b3crAAAAEM"]
[Sat Feb 07 01:10:59.120260 2026] [:error] [pid 35308:tid 35439] [client 20.151.206.105:13060] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/click.php"] [unique_id "aYYgowUnbRgf4hlvwiyaGAAAAIw"]
[Sat Feb 07 01:10:59.536462 2026] [:error] [pid 35537:tid 35562] [client 20.151.206.105:13216] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/click.php"] [unique_id "aYYgo81jKVeByUo420DdlAAAARc"]
[Sat Feb 07 01:10:59.949066 2026] [:error] [pid 35309:tid 35468] [client 20.151.206.105:13211] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/click.php"] [unique_id "aYYgo4jeM9w-4dKewm_HVQAAAM0"]
[Sat Feb 07 01:11:00.360722 2026] [:error] [pid 35307:tid 35390] [client 20.151.206.105:13191] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/install.php"] [unique_id "aYYgpOsb9VwRNUckGgvIQgAAABg"]
[Sat Feb 07 01:11:00.773092 2026] [:error] [pid 35307:tid 35379] [client 20.151.206.105:12984] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/install.php"] [unique_id "aYYgpOsb9VwRNUckGgvIRAAAAA0"]
[Sat Feb 07 01:11:01.193333 2026] [:error] [pid 55701:tid 55760] [client 20.151.206.105:12929] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/install.php"] [unique_id "aYYgpcDNf5Dni-14pBDNJQAAAUU"]
[Sat Feb 07 01:11:01.632464 2026] [:error] [pid 55701:tid 55776] [client 20.151.206.105:13208] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/install.php"] [unique_id "aYYgpcDNf5Dni-14pBDNKAAAAVQ"]
[Sat Feb 07 01:11:02.043020 2026] [:error] [pid 35309:tid 35473] [client 20.151.206.105:13227] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lv.php"] [unique_id "aYYgpojeM9w-4dKewm_HYQAAANI"]
[Sat Feb 07 01:11:02.465085 2026] [:error] [pid 35308:tid 35434] [client 20.151.206.105:13220] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lv.php"] [unique_id "aYYgpgUnbRgf4hlvwiyaGQAAAIc"]
[Sat Feb 07 01:11:02.876711 2026] [:error] [pid 35309:tid 35476] [client 20.151.206.105:13229] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lv.php"] [unique_id "aYYgpojeM9w-4dKewm_HZgAAANU"]
[Sat Feb 07 01:11:03.288502 2026] [:error] [pid 55616:tid 55629] [client 20.151.206.105:12982] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lv.php"] [unique_id "aYYgp-zxeKHfFD-B2b3crwAAAEo"]
[Sat Feb 07 01:11:03.738087 2026] [:error] [pid 55616:tid 55643] [client 20.151.206.105:12946] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/simple.php"] [unique_id "aYYgp-zxeKHfFD-B2b3csAAAAFg"]
[Sat Feb 07 01:11:04.153305 2026] [:error] [pid 35537:tid 35546] [client 20.151.206.105:13065] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/simple.php"] [unique_id "aYYgqM1jKVeByUo420DdlwAAAQc"]
[Sat Feb 07 01:11:04.573772 2026] [:error] [pid 35308:tid 35451] [client 20.151.206.105:13080] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/simple.php"] [unique_id "aYYgqAUnbRgf4hlvwiyaGgAAAJg"]
[Sat Feb 07 01:11:04.993741 2026] [:error] [pid 35308:tid 35443] [client 20.151.206.105:12975] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/simple.php"] [unique_id "aYYgqAUnbRgf4hlvwiyaHgAAAJA"]
[Sat Feb 07 01:11:05.405389 2026] [:error] [pid 55616:tid 55639] [client 20.151.206.105:13195] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/css.php"] [unique_id "aYYgqezxeKHfFD-B2b3ctAAAAFQ"]
[Sat Feb 07 01:11:05.819736 2026] [:error] [pid 35308:tid 35436] [client 20.151.206.105:13077] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/css.php"] [unique_id "aYYgqQUnbRgf4hlvwiyaHwAAAIk"]
[Sat Feb 07 01:11:06.234300 2026] [:error] [pid 55701:tid 55778] [client 20.151.206.105:12958] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/css.php"] [unique_id "aYYgqsDNf5Dni-14pBDNMAAAAVY"]
[Sat Feb 07 01:11:06.733756 2026] [:error] [pid 55701:tid 55765] [client 20.151.206.105:13058] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/css.php"] [unique_id "aYYgqsDNf5Dni-14pBDNMgAAAUk"]
[Sat Feb 07 01:11:07.172324 2026] [:error] [pid 55701:tid 55779] [client 20.151.206.105:13228] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cong.php"] [unique_id "aYYgq8DNf5Dni-14pBDNNQAAAVc"]
[Sat Feb 07 01:11:07.583439 2026] [:error] [pid 35308:tid 35438] [client 20.151.206.105:13064] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cong.php"] [unique_id "aYYgqwUnbRgf4hlvwiyaIQAAAIs"]
[Sat Feb 07 01:11:08.088256 2026] [:error] [pid 55616:tid 55626] [client 20.151.206.105:13091] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cong.php"] [unique_id "aYYgrOzxeKHfFD-B2b3cuQAAAEc"]
[Sat Feb 07 01:11:08.503513 2026] [:error] [pid 35537:tid 35555] [client 20.151.206.105:12548] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cong.php"] [unique_id "aYYgrM1jKVeByUo420DdmgAAARA"]
[Sat Feb 07 01:11:08.967371 2026] [:error] [pid 35308:tid 35450] [client 20.151.206.105:13070] [client 20.151.206.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aYYgrAUnbRgf4hlvwiyaIwAAAJc"]
[Sat Feb 07 01:11:09.402427 2026] [:error] [pid 35307:tid 35378] [client 20.151.206.105:13206] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cong.php"] [unique_id "aYYgresb9VwRNUckGgvISQAAAAw"]
[Sat Feb 07 01:11:09.828642 2026] [:error] [pid 35308:tid 35434] [client 20.151.206.105:13093] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cong.php"] [unique_id "aYYgrQUnbRgf4hlvwiyaJAAAAIc"]
[Sat Feb 07 01:11:10.244774 2026] [:error] [pid 55701:tid 55757] [client 20.151.206.105:13068] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cong.php"] [unique_id "aYYgrsDNf5Dni-14pBDNQgAAAUI"]
[Sat Feb 07 01:11:10.681857 2026] [:error] [pid 55701:tid 55769] [client 20.151.206.105:12985] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/w.php"] [unique_id "aYYgrsDNf5Dni-14pBDNRQAAAU0"]
[Sat Feb 07 01:11:11.100158 2026] [:error] [pid 55616:tid 55631] [client 20.151.206.105:12934] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/w.php"] [unique_id "aYYgr-zxeKHfFD-B2b3cuwAAAEw"]
[Sat Feb 07 01:11:11.516319 2026] [:error] [pid 55701:tid 55767] [client 20.151.206.105:13111] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/w.php"] [unique_id "aYYgr8DNf5Dni-14pBDNRwAAAUs"]
[Sat Feb 07 01:11:11.926502 2026] [:error] [pid 35309:tid 35475] [client 20.151.206.105:13061] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/w.php"] [unique_id "aYYgr4jeM9w-4dKewm_HawAAANQ"]
[Sat Feb 07 01:11:12.338396 2026] [:error] [pid 55701:tid 55778] [client 20.151.206.105:12941] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/404.php"] [unique_id "aYYgsMDNf5Dni-14pBDNSAAAAVY"]
[Sat Feb 07 01:11:12.773928 2026] [:error] [pid 55616:tid 55621] [client 20.151.206.105:13185] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/404.php"] [unique_id "aYYgsOzxeKHfFD-B2b3cvAAAAEI"]
[Sat Feb 07 01:11:13.194022 2026] [:error] [pid 35309:tid 35470] [client 20.151.206.105:13106] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/404.php"] [unique_id "aYYgsYjeM9w-4dKewm_HbQAAAM8"]
[Sat Feb 07 01:11:13.627276 2026] [:error] [pid 35537:tid 35558] [client 20.151.206.105:12931] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/404.php"] [unique_id "aYYgsc1jKVeByUo420DdpgAAARM"]
[Sat Feb 07 01:11:14.048279 2026] [:error] [pid 35537:tid 35541] [client 20.151.206.105:12964] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/0x.php"] [unique_id "aYYgss1jKVeByUo420DdqAAAAQI"]
[Sat Feb 07 01:11:14.461428 2026] [:error] [pid 35308:tid 35433] [client 20.151.206.105:13192] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/0x.php"] [unique_id "aYYgsgUnbRgf4hlvwiyaKgAAAIY"]
[Sat Feb 07 01:11:14.877195 2026] [:error] [pid 35309:tid 35474] [client 20.151.206.105:12947] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/0x.php"] [unique_id "aYYgsojeM9w-4dKewm_HbwAAANM"]
[Sat Feb 07 01:11:15.289338 2026] [:error] [pid 35309:tid 35459] [client 20.151.206.105:12574] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/0x.php"] [unique_id "aYYgs4jeM9w-4dKewm_HcAAAAMQ"]
[Sat Feb 07 01:11:15.707403 2026] [:error] [pid 35309:tid 35476] [client 20.151.206.105:12552] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/css.php"] [unique_id "aYYgs4jeM9w-4dKewm_HcwAAANU"]
[Sat Feb 07 01:11:16.173140 2026] [:error] [pid 35309:tid 35466] [client 20.151.206.105:13100] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/css.php"] [unique_id "aYYgtIjeM9w-4dKewm_HdAAAAMs"]
[Sat Feb 07 01:11:16.595467 2026] [:error] [pid 35308:tid 35439] [client 20.151.206.105:12981] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/css.php"] [unique_id "aYYgtAUnbRgf4hlvwiyaMAAAAIw"]
[Sat Feb 07 01:11:17.006054 2026] [:error] [pid 35307:tid 35380] [client 20.151.206.105:13088] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/css.php"] [unique_id "aYYgtesb9VwRNUckGgvIUwAAAA4"]
[Sat Feb 07 01:11:17.416451 2026] [:error] [pid 35537:tid 35547] [client 20.151.206.105:12961] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/222.php"] [unique_id "aYYgtc1jKVeByUo420DdrQAAAQg"]
[Sat Feb 07 01:11:17.827824 2026] [:error] [pid 35309:tid 35457] [client 20.151.206.105:13119] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/222.php"] [unique_id "aYYgtYjeM9w-4dKewm_HeQAAAMI"]
[Sat Feb 07 01:11:18.243837 2026] [:error] [pid 35537:tid 35556] [client 20.151.206.105:12955] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/222.php"] [unique_id "aYYgts1jKVeByUo420DdrwAAARE"]
[Sat Feb 07 01:11:18.656573 2026] [:error] [pid 35537:tid 35543] [client 20.151.206.105:13210] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/222.php"] [unique_id "aYYgts1jKVeByUo420DdsAAAAQQ"]
[Sat Feb 07 01:11:19.070588 2026] [:error] [pid 35307:tid 35382] [client 20.151.206.105:12976] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/index.php"] [unique_id "aYYgt-sb9VwRNUckGgvIVgAAABA"]
[Sat Feb 07 01:11:19.516719 2026] [:error] [pid 55616:tid 55632] [client 20.151.206.105:13081] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/index.php"] [unique_id "aYYgt-zxeKHfFD-B2b3cwQAAAE0"]
[Sat Feb 07 01:11:19.929903 2026] [:error] [pid 35537:tid 35539] [client 20.151.206.105:13233] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/index.php"] [unique_id "aYYgt81jKVeByUo420DdsgAAAQA"]
[Sat Feb 07 01:11:20.439153 2026] [:error] [pid 35309:tid 35459] [client 20.151.206.105:12598] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/index.php"] [unique_id "aYYguIjeM9w-4dKewm_HgQAAAMQ"]
[Sat Feb 07 01:11:20.856694 2026] [:error] [pid 35309:tid 35477] [client 20.151.206.105:12954] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin.php"] [unique_id "aYYguIjeM9w-4dKewm_HggAAANY"]
[Sat Feb 07 01:11:21.297047 2026] [:error] [pid 35308:tid 35436] [client 20.151.206.105:13205] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin.php"] [unique_id "aYYguQUnbRgf4hlvwiyaNwAAAIk"]
[Sat Feb 07 01:11:21.713438 2026] [:error] [pid 55701:tid 55757] [client 20.151.206.105:12971] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin.php"] [unique_id "aYYgucDNf5Dni-14pBDNXwAAAUI"]
[Sat Feb 07 01:11:22.129242 2026] [:error] [pid 35307:tid 35368] [client 20.151.206.105:13186] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin.php"] [unique_id "aYYguusb9VwRNUckGgvIWgAAAAM"]
[Sat Feb 07 01:11:22.541489 2026] [:error] [pid 35308:tid 35432] [client 20.151.206.105:13114] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aYYgugUnbRgf4hlvwiyaOgAAAIU"]
[Sat Feb 07 01:11:22.951479 2026] [:error] [pid 35308:tid 35450] [client 20.151.206.105:12575] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aYYgugUnbRgf4hlvwiyaOwAAAJc"]
[Sat Feb 07 01:11:23.363957 2026] [:error] [pid 55616:tid 55626] [client 20.151.206.105:13205] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aYYgu-zxeKHfFD-B2b3cyAAAAEc"]
[Sat Feb 07 01:11:23.775010 2026] [:error] [pid 35309:tid 35457] [client 20.151.206.105:13087] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aYYgu4jeM9w-4dKewm_HhgAAAMI"]
[Sat Feb 07 01:11:24.226128 2026] [:error] [pid 35307:tid 35379] [client 20.151.206.105:12983] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aYYgvOsb9VwRNUckGgvIXQAAAA0"]
[Sat Feb 07 01:11:24.672862 2026] [:error] [pid 35308:tid 35429] [client 20.151.206.105:12977] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aYYgvAUnbRgf4hlvwiyaPwAAAII"]
[Sat Feb 07 01:11:25.090047 2026] [:error] [pid 55701:tid 55760] [client 20.151.206.105:12559] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aYYgvcDNf5Dni-14pBDNbQAAAUU"]
[Sat Feb 07 01:11:25.525253 2026] [:error] [pid 55701:tid 55766] [client 20.151.206.105:13184] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aYYgvcDNf5Dni-14pBDNbwAAAUo"]
[Sat Feb 07 01:11:25.938656 2026] [:error] [pid 35307:tid 35372] [client 20.151.206.105:13217] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/abcd.php"] [unique_id "aYYgvesb9VwRNUckGgvIXwAAAAc"]
[Sat Feb 07 01:11:26.388321 2026] [proxy_fcgi:error] [pid 55616:tid 55638] [client 20.151.206.105:13102] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 01:11:26.597656 2026] [proxy_fcgi:error] [pid 55616:tid 55630] [client 20.151.206.105:13102] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 01:11:26.814612 2026] [proxy_fcgi:error] [pid 55616:tid 55636] [client 20.151.206.105:13102] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 01:11:27.026294 2026] [proxy_fcgi:error] [pid 55616:tid 55631] [client 20.151.206.105:13102] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 01:11:28.556794 2026] [proxy_fcgi:error] [pid 55616:tid 55628] [client 20.151.206.105:13102] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 01:11:29.601789 2026] [proxy_fcgi:error] [pid 55616:tid 55632] [client 20.151.206.105:13102] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 01:11:29.810780 2026] [proxy_fcgi:error] [pid 55616:tid 55642] [client 20.151.206.105:13102] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 01:11:30.015707 2026] [:error] [pid 55616:tid 55639] [client 20.151.206.105:13102] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aYYgwuzxeKHfFD-B2b3c2AAAAFQ"]
[Sat Feb 07 01:11:30.436102 2026] [:error] [pid 55701:tid 55770] [client 20.151.206.105:12555] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aYYgwsDNf5Dni-14pBDNfgAAAU4"]
[Sat Feb 07 01:11:31.043983 2026] [:error] [pid 35309:tid 35474] [client 20.151.206.105:13056] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aYYgw4jeM9w-4dKewm_HiwAAANM"]
[Sat Feb 07 01:11:31.471616 2026] [:error] [pid 55701:tid 55779] [client 20.151.206.105:13105] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aYYgw8DNf5Dni-14pBDNgAAAAVc"]
[Sat Feb 07 01:11:31.961217 2026] [:error] [pid 55701:tid 55774] [client 20.151.206.105:12605] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/404.php"] [unique_id "aYYgw8DNf5Dni-14pBDNgQAAAVI"]
[Sat Feb 07 01:11:32.380174 2026] [:error] [pid 55701:tid 55768] [client 20.151.206.105:13096] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/404.php"] [unique_id "aYYgxMDNf5Dni-14pBDNgwAAAUw"]
[Sat Feb 07 01:11:32.813954 2026] [:error] [pid 35308:tid 35443] [client 20.151.206.105:12959] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/404.php"] [unique_id "aYYgxAUnbRgf4hlvwiyaQwAAAJA"]
[Sat Feb 07 01:11:33.224467 2026] [:error] [pid 35307:tid 35377] [client 20.151.206.105:13116] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/404.php"] [unique_id "aYYgxesb9VwRNUckGgvIZgAAAAs"]
[Sat Feb 07 01:11:33.634638 2026] [:error] [pid 35537:tid 35560] [client 20.151.206.105:13241] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mail.php"] [unique_id "aYYgxc1jKVeByUo420DdwQAAARU"]
[Sat Feb 07 01:11:34.071831 2026] [:error] [pid 55701:tid 55765] [client 20.151.206.105:12585] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mail.php"] [unique_id "aYYgxsDNf5Dni-14pBDNiAAAAUk"]
[Sat Feb 07 01:11:34.486564 2026] [:error] [pid 55701:tid 55759] [client 20.151.206.105:13090] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mail.php"] [unique_id "aYYgxsDNf5Dni-14pBDNiQAAAUQ"]
[Sat Feb 07 01:11:34.899169 2026] [:error] [pid 55701:tid 55777] [client 20.151.206.105:12545] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mail.php"] [unique_id "aYYgxsDNf5Dni-14pBDNigAAAVU"]
[Sat Feb 07 01:11:35.319188 2026] [:error] [pid 55616:tid 55631] [client 20.151.206.105:13207] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aYYgx-zxeKHfFD-B2b3c3gAAAEw"]
[Sat Feb 07 01:11:35.784523 2026] [:error] [pid 35537:tid 35540] [client 20.151.206.105:13082] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aYYgx81jKVeByUo420DdwwAAAQE"]
[Sat Feb 07 01:11:36.302711 2026] [:error] [pid 35537:tid 35559] [client 20.151.206.105:13214] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aYYgyM1jKVeByUo420DdxAAAARQ"]
[Sat Feb 07 01:11:36.724947 2026] [:error] [pid 35309:tid 35471] [client 20.151.206.105:13200] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aYYgyIjeM9w-4dKewm_HkAAAANA"]
[Sat Feb 07 01:11:37.158693 2026] [:error] [pid 35308:tid 35449] [client 20.151.206.105:12553] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sx.php"] [unique_id "aYYgyQUnbRgf4hlvwiyaSQAAAJY"]
[Sat Feb 07 01:11:37.595914 2026] [:error] [pid 35537:tid 35545] [client 20.151.206.105:12749] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sx.php"] [unique_id "aYYgyc1jKVeByUo420DdxgAAAQY"]
[Sat Feb 07 01:11:38.012707 2026] [:error] [pid 35537:tid 35558] [client 20.151.206.105:13097] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sx.php"] [unique_id "aYYgys1jKVeByUo420DdyAAAARM"]
[Sat Feb 07 01:11:38.846039 2026] [:error] [pid 55701:tid 55756] [client 20.151.206.105:13230] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sx.php"] [unique_id "aYYgysDNf5Dni-14pBDNkAAAAUE"]
[Sat Feb 07 01:11:39.463719 2026] [:error] [pid 35308:tid 35437] [client 20.151.206.105:12600] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aYYgywUnbRgf4hlvwiyaSgAAAIo"]
[Sat Feb 07 01:11:39.896685 2026] [:error] [pid 35309:tid 35456] [client 20.151.206.105:13094] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aYYgy4jeM9w-4dKewm_HlQAAAME"]
[Sat Feb 07 01:11:40.369762 2026] [:error] [pid 35309:tid 35469] [client 20.151.206.105:12565] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aYYgzIjeM9w-4dKewm_HlwAAAM4"]
[Sat Feb 07 01:11:40.829696 2026] [:error] [pid 35309:tid 35472] [client 20.151.206.105:12949] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aYYgzIjeM9w-4dKewm_HmQAAANE"]
[Sat Feb 07 01:11:41.306238 2026] [:error] [pid 35308:tid 35450] [client 20.151.206.105:13095] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/alfa.php"] [unique_id "aYYgzQUnbRgf4hlvwiyaSwAAAJc"]
[Sat Feb 07 01:11:41.764148 2026] [:error] [pid 35308:tid 35429] [client 20.151.206.105:13225] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/alfa.php"] [unique_id "aYYgzQUnbRgf4hlvwiyaTQAAAII"]
[Sat Feb 07 01:11:42.188886 2026] [:error] [pid 55701:tid 55769] [client 20.151.206.105:12757] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/alfa.php"] [unique_id "aYYgzsDNf5Dni-14pBDNlAAAAU0"]
[Sat Feb 07 01:11:42.672518 2026] [:error] [pid 55616:tid 55619] [client 20.151.206.105:12546] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/alfa.php"] [unique_id "aYYgzuzxeKHfFD-B2b3c5wAAAEA"]
[Sat Feb 07 01:11:43.090059 2026] [:error] [pid 35308:tid 35430] [client 20.151.206.105:13057] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/1.php"] [unique_id "aYYgzwUnbRgf4hlvwiyaUgAAAIM"]
[Sat Feb 07 01:11:43.636561 2026] [:error] [pid 55701:tid 55772] [client 20.151.206.105:13103] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/1.php"] [unique_id "aYYgz8DNf5Dni-14pBDNlwAAAVA"]
[Sat Feb 07 01:11:44.077958 2026] [:error] [pid 55701:tid 55771] [client 20.151.206.105:12761] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/1.php"] [unique_id "aYYg0MDNf5Dni-14pBDNmQAAAU8"]
[Sat Feb 07 01:11:44.499147 2026] [:error] [pid 35308:tid 35448] [client 20.151.206.105:13063] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/1.php"] [unique_id "aYYg0AUnbRgf4hlvwiyaVQAAAJU"]
[Sat Feb 07 01:11:44.911392 2026] [:error] [pid 35309:tid 35459] [client 20.151.206.105:13074] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/byp.php"] [unique_id "aYYg0IjeM9w-4dKewm_HnQAAAMQ"]
[Sat Feb 07 01:11:45.328527 2026] [:error] [pid 35308:tid 35435] [client 20.151.206.105:13075] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/byp.php"] [unique_id "aYYg0QUnbRgf4hlvwiyaVwAAAIg"]
[Sat Feb 07 01:11:45.741149 2026] [:error] [pid 55616:tid 55622] [client 20.151.206.105:13059] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/byp.php"] [unique_id "aYYg0ezxeKHfFD-B2b3c6gAAAEM"]
[Sat Feb 07 01:11:46.168932 2026] [:error] [pid 55616:tid 55633] [client 20.151.206.105:12747] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/byp.php"] [unique_id "aYYg0uzxeKHfFD-B2b3c6wAAAE4"]
[Sat Feb 07 01:11:46.580730 2026] [:error] [pid 35537:tid 35545] [client 20.151.206.105:12940] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-trackback.php"] [unique_id "aYYg0s1jKVeByUo420Dd1QAAAQY"]
[Sat Feb 07 01:11:47.000688 2026] [:error] [pid 55701:tid 55759] [client 20.151.206.105:12583] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-trackback.php"] [unique_id "aYYg0sDNf5Dni-14pBDNnQAAAUQ"]
[Sat Feb 07 01:11:47.417326 2026] [:error] [pid 35537:tid 35549] [client 20.151.206.105:13067] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-trackback.php"] [unique_id "aYYg081jKVeByUo420Dd1wAAAQo"]
[Sat Feb 07 01:11:47.832461 2026] [:error] [pid 35537:tid 35542] [client 20.151.206.105:12554] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-trackback.php"] [unique_id "aYYg081jKVeByUo420Dd2AAAAQM"]
[Sat Feb 07 01:11:48.258741 2026] [:error] [pid 55616:tid 55627] [client 20.151.206.105:13113] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/index.php"] [unique_id "aYYg1OzxeKHfFD-B2b3c8AAAAEg"]
[Sat Feb 07 01:11:48.671799 2026] [:error] [pid 55616:tid 55620] [client 20.151.206.105:12989] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/index.php"] [unique_id "aYYg1OzxeKHfFD-B2b3c8gAAAEE"]
[Sat Feb 07 01:11:49.098741 2026] [:error] [pid 35309:tid 35476] [client 20.151.206.105:12551] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/index.php"] [unique_id "aYYg1YjeM9w-4dKewm_HoQAAANU"]
[Sat Feb 07 01:11:49.509173 2026] [:error] [pid 35309:tid 35479] [client 20.151.206.105:13062] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/index.php"] [unique_id "aYYg1YjeM9w-4dKewm_HogAAANc"]
[Sat Feb 07 01:11:49.930275 2026] [:error] [pid 35537:tid 35557] [client 20.151.206.105:12986] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aYYg1c1jKVeByUo420Dd2gAAARI"]
[Sat Feb 07 01:11:50.345799 2026] [:error] [pid 35309:tid 35460] [client 20.151.206.105:12939] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aYYg1ojeM9w-4dKewm_HpwAAAMU"]
[Sat Feb 07 01:11:50.767781 2026] [:error] [pid 55701:tid 55780] [client 20.151.206.105:13078] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aYYg1sDNf5Dni-14pBDNogAAAVg"]
[Sat Feb 07 01:11:51.207742 2026] [:error] [pid 55616:tid 55632] [client 20.151.206.105:12589] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aYYg1-zxeKHfFD-B2b3c9gAAAE0"]
[Sat Feb 07 01:11:51.849351 2026] [:error] [pid 55616:tid 55622] [client 20.151.206.105:12571] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/about.php"] [unique_id "aYYg1-zxeKHfFD-B2b3c-QAAAEM"]
[Sat Feb 07 01:11:52.341585 2026] [:error] [pid 35308:tid 35451] [client 20.151.206.105:12963] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/about.php"] [unique_id "aYYg2AUnbRgf4hlvwiyaXwAAAJg"]
[Sat Feb 07 01:11:53.352728 2026] [:error] [pid 55701:tid 55755] [client 20.151.206.105:12596] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/about.php"] [unique_id "aYYg2cDNf5Dni-14pBDNpwAAAUA"]
[Sat Feb 07 01:11:54.072707 2026] [:error] [pid 35308:tid 35443] [client 20.151.206.105:12678] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/about.php"] [unique_id "aYYg2gUnbRgf4hlvwiyaYgAAAJA"]
[Sat Feb 07 01:11:54.716333 2026] [:error] [pid 55701:tid 55760] [client 20.151.206.105:12753] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gmo.php"] [unique_id "aYYg2sDNf5Dni-14pBDNrAAAAUU"]
[Sat Feb 07 01:11:55.133732 2026] [:error] [pid 55701:tid 55758] [client 20.151.206.105:12558] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gmo.php"] [unique_id "aYYg28DNf5Dni-14pBDNrQAAAUM"]
[Sat Feb 07 01:11:55.547323 2026] [:error] [pid 55701:tid 55766] [client 20.151.206.105:13117] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gmo.php"] [unique_id "aYYg28DNf5Dni-14pBDNsQAAAUo"]
[Sat Feb 07 01:11:55.964788 2026] [:error] [pid 35307:tid 35372] [client 20.151.206.105:12599] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gmo.php"] [unique_id "aYYg2-sb9VwRNUckGgvIdgAAAAc"]
[Sat Feb 07 01:11:56.375037 2026] [:error] [pid 55616:tid 55631] [client 20.151.206.105:12755] [client 20.151.206.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aYYg3OzxeKHfFD-B2b3c_AAAAEw"]
[Sat Feb 07 01:11:56.836021 2026] [:error] [pid 55616:tid 55623] [client 20.151.206.105:12789] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/css/index.php"] [unique_id "aYYg3OzxeKHfFD-B2b3c_QAAAEQ"]
[Sat Feb 07 01:11:57.248120 2026] [:error] [pid 55701:tid 55768] [client 20.151.206.105:12568] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/css/index.php"] [unique_id "aYYg3cDNf5Dni-14pBDNuAAAAUw"]
[Sat Feb 07 01:11:57.663576 2026] [:error] [pid 55616:tid 55628] [client 20.151.206.105:12564] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/css/index.php"] [unique_id "aYYg3ezxeKHfFD-B2b3c_gAAAEk"]
[Sat Feb 07 01:11:58.079403 2026] [:error] [pid 35537:tid 35560] [client 20.151.206.105:12579] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/css/index.php"] [unique_id "aYYg3s1jKVeByUo420Dd4QAAARU"]
[Sat Feb 07 01:11:58.502739 2026] [:error] [pid 35308:tid 35444] [client 20.151.206.105:12965] [client 20.151.206.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "aYYg3gUnbRgf4hlvwiyaaQAAAJE"]
[Sat Feb 07 01:11:58.971474 2026] [:error] [pid 55616:tid 55620] [client 20.151.206.105:12572] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aYYg3uzxeKHfFD-B2b3dAAAAAEE"]
[Sat Feb 07 01:11:59.411480 2026] [:error] [pid 35537:tid 35561] [client 20.151.206.105:13083] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aYYg381jKVeByUo420Dd4gAAARY"]
[Sat Feb 07 01:11:59.840117 2026] [:error] [pid 35537:tid 35540] [client 20.151.206.105:12966] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aYYg381jKVeByUo420Dd5AAAAQE"]
[Sat Feb 07 01:12:00.267413 2026] [:error] [pid 35309:tid 35467] [client 20.151.206.105:12592] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aYYg4IjeM9w-4dKewm_HqwAAAMw"]
[Sat Feb 07 01:12:00.678781 2026] [:error] [pid 35307:tid 35378] [client 20.151.206.105:13066] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aYYg4Osb9VwRNUckGgvIegAAAAw"]
[Sat Feb 07 01:12:01.125285 2026] [:error] [pid 35307:tid 35389] [client 20.151.206.105:13085] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aYYg4esb9VwRNUckGgvIewAAABc"]
[Sat Feb 07 01:12:01.570698 2026] [:error] [pid 55701:tid 55778] [client 20.151.206.105:12988] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aYYg4cDNf5Dni-14pBDNvwAAAVY"]
[Sat Feb 07 01:12:01.982748 2026] [:error] [pid 55701:tid 55766] [client 20.151.206.105:13109] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aYYg4cDNf5Dni-14pBDNwQAAAUo"]
[Sat Feb 07 01:12:02.397384 2026] [:error] [pid 55701:tid 55773] [client 20.151.206.105:12756] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aYYg4sDNf5Dni-14pBDNxAAAAVE"]
[Sat Feb 07 01:12:02.819043 2026] [:error] [pid 55701:tid 55767] [client 20.151.206.105:12602] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aYYg4sDNf5Dni-14pBDNxwAAAUs"]
[Sat Feb 07 01:12:03.258209 2026] [:error] [pid 55701:tid 55772] [client 20.151.206.105:12557] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aYYg48DNf5Dni-14pBDNzQAAAVA"]
[Sat Feb 07 01:12:03.670133 2026] [:error] [pid 35308:tid 35448] [client 20.151.206.105:12767] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aYYg4wUnbRgf4hlvwiyabwAAAJU"]
[Sat Feb 07 01:12:04.094978 2026] [:error] [pid 55616:tid 55632] [client 20.151.206.105:12980] [client 20.151.206.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aYYg5OzxeKHfFD-B2b3dAwAAAE0"]
[Sat Feb 07 01:12:04.508883 2026] [:error] [pid 35537:tid 35545] [client 20.151.206.105:12547] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/index/function.php"] [unique_id "aYYg5M1jKVeByUo420Dd5wAAAQY"]
[Sat Feb 07 01:12:04.919339 2026] [:error] [pid 35537:tid 35542] [client 20.151.206.105:12743] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/index/function.php"] [unique_id "aYYg5M1jKVeByUo420Dd6QAAAQM"]
[Sat Feb 07 01:12:05.343753 2026] [:error] [pid 35537:tid 35557] [client 20.151.206.105:13209] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/index/function.php"] [unique_id "aYYg5c1jKVeByUo420Dd7AAAARI"]
[Sat Feb 07 01:12:05.771968 2026] [:error] [pid 55701:tid 55761] [client 20.151.206.105:12567] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aYYg5cDNf5Dni-14pBDN4wAAAUY"]
[Sat Feb 07 01:12:06.199531 2026] [:error] [pid 35537:tid 35544] [client 20.151.206.105:13108] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aYYg5s1jKVeByUo420Dd7wAAAQU"]
[Sat Feb 07 01:12:06.609116 2026] [:error] [pid 35537:tid 35551] [client 20.151.206.105:12563] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aYYg5s1jKVeByUo420Dd9QAAAQw"]
[Sat Feb 07 01:12:07.036319 2026] [:error] [pid 35307:tid 35383] [client 20.151.206.105:12782] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aYYg5-sb9VwRNUckGgvIfwAAABE"]
[Sat Feb 07 01:12:07.449786 2026] [:error] [pid 35307:tid 35376] [client 20.151.206.105:12760] [client 20.151.206.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aYYg5-sb9VwRNUckGgvIgAAAAAo"]
[Sat Feb 07 01:12:07.862388 2026] [:error] [pid 55616:tid 55637] [client 20.151.206.105:12738] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ww1.php"] [unique_id "aYYg5-zxeKHfFD-B2b3dEwAAAFI"]
[Sat Feb 07 01:12:08.273935 2026] [:error] [pid 35307:tid 35384] [client 20.151.206.105:13073] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ww1.php"] [unique_id "aYYg6Osb9VwRNUckGgvIggAAABI"]
[Sat Feb 07 01:12:08.691856 2026] [:error] [pid 55701:tid 55776] [client 20.151.206.105:12752] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ww1.php"] [unique_id "aYYg6MDNf5Dni-14pBDN8AAAAVQ"]
[Sat Feb 07 01:12:09.106516 2026] [:error] [pid 55616:tid 55625] [client 20.151.206.105:12586] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/about/function.php"] [unique_id "aYYg6ezxeKHfFD-B2b3dHgAAAEY"]
[Sat Feb 07 01:12:09.527103 2026] [:error] [pid 55616:tid 55638] [client 20.151.206.105:12604] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/about/function.php"] [unique_id "aYYg6ezxeKHfFD-B2b3dIAAAAFM"]
[Sat Feb 07 01:12:09.950440 2026] [:error] [pid 55701:tid 55758] [client 20.151.206.105:12769] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/about/function.php"] [unique_id "aYYg6cDNf5Dni-14pBDN-AAAAUM"]
[Sat Feb 07 01:12:10.374411 2026] [:error] [pid 55701:tid 55775] [client 20.151.206.105:12594] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/about/function.php"] [unique_id "aYYg6sDNf5Dni-14pBDN-gAAAVM"]
[Sat Feb 07 01:12:10.784248 2026] [:error] [pid 55616:tid 55627] [client 20.151.206.105:12987] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin/function.php"] [unique_id "aYYg6uzxeKHfFD-B2b3dJQAAAEg"]
[Sat Feb 07 01:12:11.202520 2026] [:error] [pid 35537:tid 35545] [client 20.151.206.105:12570] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin/function.php"] [unique_id "aYYg681jKVeByUo420DeDAAAAQY"]
[Sat Feb 07 01:12:11.613248 2026] [:error] [pid 55616:tid 55632] [client 20.151.206.105:12603] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin/function.php"] [unique_id "aYYg6-zxeKHfFD-B2b3dKAAAAE0"]
[Sat Feb 07 01:12:12.047124 2026] [:error] [pid 35537:tid 35547] [client 20.151.206.105:13110] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin/function.php"] [unique_id "aYYg7M1jKVeByUo420DeEAAAAQg"]
[Sat Feb 07 01:12:12.472297 2026] [:error] [pid 55701:tid 55772] [client 20.151.206.105:12691] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aYYg7MDNf5Dni-14pBDOCAAAAVA"]
[Sat Feb 07 01:12:12.886340 2026] [:error] [pid 35537:tid 35557] [client 20.151.206.105:12591] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aYYg7M1jKVeByUo420DeEgAAARI"]
[Sat Feb 07 01:12:13.298957 2026] [:error] [pid 55701:tid 55761] [client 20.151.206.105:12569] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aYYg7cDNf5Dni-14pBDOCgAAAUY"]
[Sat Feb 07 01:12:13.709241 2026] [:error] [pid 35307:tid 35382] [client 20.151.206.105:12777] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aYYg7esb9VwRNUckGgvIjAAAABA"]
[Sat Feb 07 01:12:14.121850 2026] [:error] [pid 35308:tid 35440] [client 20.151.206.105:12773] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aYYg7gUnbRgf4hlvwiyakgAAAI0"]
[Sat Feb 07 01:12:14.532012 2026] [:error] [pid 55616:tid 55631] [client 20.151.206.105:12560] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aYYg7uzxeKHfFD-B2b3dLQAAAEw"]
[Sat Feb 07 01:12:14.943785 2026] [:error] [pid 35307:tid 35374] [client 20.151.206.105:12799] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aYYg7usb9VwRNUckGgvIjQAAAAk"]
[Sat Feb 07 01:12:15.361047 2026] [:error] [pid 55616:tid 55627] [client 20.151.206.105:13101] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aYYg7-zxeKHfFD-B2b3dLwAAAEg"]
[Sat Feb 07 01:12:15.775441 2026] [:error] [pid 35308:tid 35433] [client 20.151.206.105:12748] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/security.php"] [unique_id "aYYg7wUnbRgf4hlvwiyalQAAAIY"]
[Sat Feb 07 01:12:16.202494 2026] [:error] [pid 35308:tid 35438] [client 20.151.206.105:12680] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/security.php"] [unique_id "aYYg8AUnbRgf4hlvwiyamAAAAIs"]
[Sat Feb 07 01:12:16.613437 2026] [:error] [pid 35307:tid 35384] [client 20.151.206.105:13089] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/security.php"] [unique_id "aYYg8Osb9VwRNUckGgvIkAAAABI"]
[Sat Feb 07 01:12:17.026479 2026] [:error] [pid 35307:tid 35368] [client 20.151.206.105:12765] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/security.php"] [unique_id "aYYg8esb9VwRNUckGgvIkQAAAAM"]
[Sat Feb 07 01:12:17.436647 2026] [:error] [pid 55616:tid 55620] [client 20.151.206.105:12607] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aYYg8ezxeKHfFD-B2b3dMAAAAEE"]
[Sat Feb 07 01:12:17.857202 2026] [:error] [pid 55616:tid 55637] [client 20.151.206.105:12971] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aYYg8ezxeKHfFD-B2b3dMQAAAFI"]
[Sat Feb 07 01:12:18.267620 2026] [:error] [pid 35307:tid 35377] [client 20.151.206.105:12544] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aYYg8usb9VwRNUckGgvIlAAAAAs"]
[Sat Feb 07 01:12:18.689796 2026] [:error] [pid 35309:tid 35461] [client 20.151.206.105:12688] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aYYg8ojeM9w-4dKewm_HvAAAAMY"]
[Sat Feb 07 01:12:19.101731 2026] [:error] [pid 55701:tid 55764] [client 20.151.206.105:12578] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aYYg88DNf5Dni-14pBDOJwAAAUg"]
[Sat Feb 07 01:12:19.514663 2026] [:error] [pid 35308:tid 35444] [client 20.151.206.105:12774] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aYYg8wUnbRgf4hlvwiyapgAAAJE"]
[Sat Feb 07 01:12:19.942473 2026] [:error] [pid 35309:tid 35468] [client 20.151.206.105:12601] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aYYg84jeM9w-4dKewm_HvwAAAM0"]
[Sat Feb 07 01:12:20.354169 2026] [:error] [pid 35309:tid 35466] [client 20.151.206.105:13099] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aYYg9IjeM9w-4dKewm_HwAAAAMs"]
[Sat Feb 07 01:12:20.769697 2026] [:error] [pid 35308:tid 35437] [client 20.151.206.105:13221] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aYYg9AUnbRgf4hlvwiyaqQAAAIo"]
[Sat Feb 07 01:12:21.184169 2026] [:error] [pid 55701:tid 55771] [client 20.151.206.105:12744] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aYYg9cDNf5Dni-14pBDOMgAAAU8"]
[Sat Feb 07 01:12:21.611503 2026] [:error] [pid 55616:tid 55625] [client 20.151.206.105:12561] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aYYg9ezxeKHfFD-B2b3dOgAAAEY"]
[Sat Feb 07 01:12:22.031865 2026] [:error] [pid 35537:tid 35548] [client 20.151.206.105:12581] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aYYg9s1jKVeByUo420DeGwAAAQk"]
[Sat Feb 07 01:12:22.446747 2026] [:error] [pid 35309:tid 35472] [client 20.151.206.105:13112] [client 20.151.206.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aYYg9ojeM9w-4dKewm_HxgAAANE"]
[Sat Feb 07 01:12:22.868979 2026] [:error] [pid 55701:tid 55759] [client 20.151.206.105:12702] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/radio.php"] [unique_id "aYYg9sDNf5Dni-14pBDONwAAAUQ"]
[Sat Feb 07 01:12:23.286034 2026] [:error] [pid 55616:tid 55636] [client 20.151.206.105:12742] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/radio.php"] [unique_id "aYYg9-zxeKHfFD-B2b3dPQAAAFE"]
[Sat Feb 07 01:12:23.714925 2026] [:error] [pid 35537:tid 35540] [client 20.151.206.105:12695] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/radio.php"] [unique_id "aYYg981jKVeByUo420DeHwAAAQE"]
[Sat Feb 07 01:12:24.128198 2026] [:error] [pid 35307:tid 35373] [client 20.151.206.105:12685] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aYYg-Osb9VwRNUckGgvIlwAAAAg"]
[Sat Feb 07 01:12:24.541888 2026] [:error] [pid 35308:tid 35445] [client 20.151.206.105:12582] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aYYg-AUnbRgf4hlvwiyarQAAAJI"]
[Sat Feb 07 01:12:24.982590 2026] [:error] [pid 35537:tid 35560] [client 20.151.206.105:12549] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aYYg-M1jKVeByUo420DeIQAAARU"]
[Sat Feb 07 01:12:25.393685 2026] [:error] [pid 35308:tid 35427] [client 20.151.206.105:13115] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aYYg-QUnbRgf4hlvwiyasAAAAIA"]
[Sat Feb 07 01:12:25.869889 2026] [:error] [pid 35307:tid 35390] [client 20.151.206.105:12566] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/admin.php"] [unique_id "aYYg-esb9VwRNUckGgvImwAAABg"]
[Sat Feb 07 01:12:26.285160 2026] [:error] [pid 35308:tid 35440] [client 20.151.206.105:12606] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/admin.php"] [unique_id "aYYg-gUnbRgf4hlvwiyasQAAAI0"]
[Sat Feb 07 01:12:26.708181 2026] [:error] [pid 35308:tid 35442] [client 20.151.206.105:12718] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/admin.php"] [unique_id "aYYg-gUnbRgf4hlvwiyasgAAAI8"]
[Sat Feb 07 01:12:27.122223 2026] [:error] [pid 55701:tid 55756] [client 20.151.206.105:12737] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/admin.php"] [unique_id "aYYg-8DNf5Dni-14pBDORgAAAUE"]
[Sat Feb 07 01:12:27.540713 2026] [:error] [pid 55701:tid 55767] [client 20.151.206.105:12750] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "aYYg-8DNf5Dni-14pBDOSAAAAUs"]
[Sat Feb 07 01:12:27.965377 2026] [:error] [pid 55701:tid 55780] [client 20.151.206.105:12771] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "aYYg-8DNf5Dni-14pBDOSQAAAVg"]
[Sat Feb 07 01:12:28.425328 2026] [:error] [pid 35307:tid 35372] [client 20.151.206.105:12588] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "aYYg_Osb9VwRNUckGgvIngAAAAc"]
[Sat Feb 07 01:12:28.835246 2026] [:error] [pid 35537:tid 35546] [client 20.151.206.105:12587] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "aYYg_M1jKVeByUo420DeJgAAAQc"]
[Sat Feb 07 01:12:29.900979 2026] [proxy_fcgi:error] [pid 35537:tid 35558] [client 20.151.206.105:12590] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 01:12:30.116042 2026] [proxy_fcgi:error] [pid 35537:tid 35543] [client 20.151.206.105:12590] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 01:12:30.322436 2026] [:error] [pid 35537:tid 35548] [client 20.151.206.105:12590] [client 20.151.206.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aYYg_s1jKVeByUo420DeMAAAAQk"]
[Sat Feb 07 01:12:30.745415 2026] [:error] [pid 35308:tid 35432] [client 20.151.206.105:12795] [client 20.151.206.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/block-patterns/index.php"] [unique_id "aYYg_gUnbRgf4hlvwiyauQAAAIU"]
[Sat Feb 07 01:12:31.163419 2026] [proxy_fcgi:error] [pid 35307:tid 35381] [client 20.151.206.105:12763] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 01:12:31.380865 2026] [proxy_fcgi:error] [pid 35307:tid 35378] [client 20.151.206.105:12763] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 01:12:31.592874 2026] [proxy_fcgi:error] [pid 35307:tid 35382] [client 20.151.206.105:12763] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 01:12:31.803273 2026] [proxy_fcgi:error] [pid 35307:tid 35366] [client 20.151.206.105:12763] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 01:12:32.012506 2026] [proxy_fcgi:error] [pid 35307:tid 35389] [client 20.151.206.105:12763] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 01:12:32.221962 2026] [proxy_fcgi:error] [pid 35307:tid 35365] [client 20.151.206.105:12763] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 01:12:32.432647 2026] [:error] [pid 35307:tid 35373] [client 20.151.206.105:12763] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/04.php"] [unique_id "aYYhAOsb9VwRNUckGgvIqAAAAAg"]
[Sat Feb 07 01:12:32.902515 2026] [:error] [pid 35309:tid 35460] [client 20.151.206.105:12425] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/04.php"] [unique_id "aYYhAIjeM9w-4dKewm_H0AAAAMU"]
[Sat Feb 07 01:12:33.438097 2026] [:error] [pid 35537:tid 35546] [client 20.151.206.105:12783] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/04.php"] [unique_id "aYYhAc1jKVeByUo420DeOgAAAQc"]
[Sat Feb 07 01:12:33.968409 2026] [:error] [pid 35309:tid 35480] [client 20.151.206.105:12796] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/04.php"] [unique_id "aYYhAYjeM9w-4dKewm_H1AAAANg"]
[Sat Feb 07 01:12:34.426300 2026] [:error] [pid 55616:tid 55635] [client 20.151.206.105:12754] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/333.php"] [unique_id "aYYhAuzxeKHfFD-B2b3dcAAAAFA"]
[Sat Feb 07 01:12:34.846071 2026] [:error] [pid 35308:tid 35449] [client 20.151.206.105:12727] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/333.php"] [unique_id "aYYhAgUnbRgf4hlvwiyavwAAAJY"]
[Sat Feb 07 01:12:35.353204 2026] [:error] [pid 55616:tid 55629] [client 20.151.206.105:12766] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/333.php"] [unique_id "aYYhA-zxeKHfFD-B2b3dcQAAAEo"]
[Sat Feb 07 01:12:35.776230 2026] [:error] [pid 35309:tid 35474] [client 20.151.206.105:12711] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/333.php"] [unique_id "aYYhA4jeM9w-4dKewm_H1gAAANM"]
[Sat Feb 07 01:12:36.186141 2026] [:error] [pid 35309:tid 35469] [client 20.151.206.105:13092] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/520.php"] [unique_id "aYYhBIjeM9w-4dKewm_H1wAAAM4"]
[Sat Feb 07 01:12:36.672201 2026] [:error] [pid 35308:tid 35428] [client 20.151.206.105:12745] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/520.php"] [unique_id "aYYhBAUnbRgf4hlvwiyaxAAAAIE"]
[Sat Feb 07 01:12:37.179704 2026] [:error] [pid 55701:tid 55761] [client 20.151.206.105:12446] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/520.php"] [unique_id "aYYhBcDNf5Dni-14pBDOWAAAAUY"]
[Sat Feb 07 01:12:37.616870 2026] [:error] [pid 55701:tid 55770] [client 20.151.206.105:12739] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/520.php"] [unique_id "aYYhBcDNf5Dni-14pBDOWgAAAU4"]
[Sat Feb 07 01:12:38.147842 2026] [:error] [pid 55701:tid 55768] [client 20.151.206.105:12758] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ar.php"] [unique_id "aYYhBsDNf5Dni-14pBDOWwAAAUw"]
[Sat Feb 07 01:12:38.675622 2026] [:error] [pid 35307:tid 35379] [client 20.151.206.105:12595] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ar.php"] [unique_id "aYYhBusb9VwRNUckGgvIrwAAAA0"]
[Sat Feb 07 01:12:39.248893 2026] [:error] [pid 35308:tid 35443] [client 20.151.206.105:12780] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ar.php"] [unique_id "aYYhBwUnbRgf4hlvwiya0QAAAJA"]
[Sat Feb 07 01:12:39.817725 2026] [:error] [pid 35308:tid 35428] [client 20.151.206.105:12580] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ar.php"] [unique_id "aYYhBwUnbRgf4hlvwiya1AAAAIE"]
[Sat Feb 07 01:12:40.269341 2026] [:error] [pid 35537:tid 35544] [client 20.151.206.105:12682] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x.php"] [unique_id "aYYhCM1jKVeByUo420DeQAAAAQU"]
[Sat Feb 07 01:12:40.756743 2026] [:error] [pid 55616:tid 55643] [client 20.151.206.105:12792] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x.php"] [unique_id "aYYhCOzxeKHfFD-B2b3degAAAFg"]
[Sat Feb 07 01:12:41.265630 2026] [:error] [pid 35537:tid 35551] [client 20.151.206.105:12593] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x.php"] [unique_id "aYYhCc1jKVeByUo420DeQgAAAQw"]
[Sat Feb 07 01:12:41.745302 2026] [:error] [pid 55701:tid 55762] [client 20.151.206.105:12597] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x.php"] [unique_id "aYYhCcDNf5Dni-14pBDOZwAAAUc"]
[Sat Feb 07 01:12:42.159160 2026] [:error] [pid 35309:tid 35467] [client 20.151.206.105:12778] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xx.php"] [unique_id "aYYhCojeM9w-4dKewm_H3AAAAMw"]
[Sat Feb 07 01:12:42.580928 2026] [:error] [pid 35307:tid 35381] [client 20.151.206.105:12697] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xx.php"] [unique_id "aYYhCusb9VwRNUckGgvIswAAAA8"]
[Sat Feb 07 01:12:43.039102 2026] [:error] [pid 55616:tid 55623] [client 20.151.206.105:12764] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xx.php"] [unique_id "aYYhC-zxeKHfFD-B2b3dfgAAAEQ"]
[Sat Feb 07 01:12:43.469021 2026] [:error] [pid 55616:tid 55634] [client 20.151.206.105:12740] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xx.php"] [unique_id "aYYhC-zxeKHfFD-B2b3dgAAAAE8"]
[Sat Feb 07 01:12:43.924130 2026] [:error] [pid 55701:tid 55774] [client 20.151.206.105:12681] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gifclass4.php"] [unique_id "aYYhC8DNf5Dni-14pBDOawAAAVI"]
[Sat Feb 07 01:12:44.369759 2026] [:error] [pid 35307:tid 35366] [client 20.151.206.105:12674] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gifclass4.php"] [unique_id "aYYhDOsb9VwRNUckGgvItQAAAAE"]
[Sat Feb 07 01:12:44.805495 2026] [:error] [pid 55701:tid 55776] [client 20.151.206.105:12562] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gifclass4.php"] [unique_id "aYYhDMDNf5Dni-14pBDObgAAAVQ"]
[Sat Feb 07 01:12:45.215107 2026] [:error] [pid 35309:tid 35480] [client 20.151.206.105:12797] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gifclass4.php"] [unique_id "aYYhDYjeM9w-4dKewm_H3wAAANg"]
[Sat Feb 07 01:12:45.641031 2026] [:error] [pid 35537:tid 35545] [client 20.151.206.105:12690] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2clas.php"] [unique_id "aYYhDc1jKVeByUo420DeRgAAAQY"]
[Sat Feb 07 01:12:46.077047 2026] [:error] [pid 55616:tid 55643] [client 20.151.206.105:12693] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2clas.php"] [unique_id "aYYhDuzxeKHfFD-B2b3dgwAAAFg"]
[Sat Feb 07 01:12:46.520105 2026] [:error] [pid 55701:tid 55758] [client 20.151.206.105:13098] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2clas.php"] [unique_id "aYYhDsDNf5Dni-14pBDOcwAAAUM"]
[Sat Feb 07 01:12:46.988971 2026] [:error] [pid 35308:tid 35429] [client 20.151.206.105:12550] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2clas.php"] [unique_id "aYYhDgUnbRgf4hlvwiya9QAAAII"]
[Sat Feb 07 01:12:47.403290 2026] [:error] [pid 35307:tid 35383] [client 20.151.206.105:12790] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ave.php"] [unique_id "aYYhD-sb9VwRNUckGgvIuAAAABE"]
[Sat Feb 07 01:12:47.864489 2026] [:error] [pid 55616:tid 55623] [client 20.151.206.105:12736] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ave.php"] [unique_id "aYYhD-zxeKHfFD-B2b3digAAAEQ"]
[Sat Feb 07 01:12:48.371607 2026] [:error] [pid 35308:tid 35441] [client 20.151.206.105:13133] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ave.php"] [unique_id "aYYhEAUnbRgf4hlvwiya-gAAAI4"]
[Sat Feb 07 01:12:48.838449 2026] [:error] [pid 55701:tid 55771] [client 20.151.206.105:12793] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ave.php"] [unique_id "aYYhEMDNf5Dni-14pBDOeQAAAU8"]
[Sat Feb 07 01:12:49.372332 2026] [:error] [pid 55701:tid 55779] [client 20.151.206.105:12687] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wrt.php"] [unique_id "aYYhEcDNf5Dni-14pBDOfAAAAVc"]
[Sat Feb 07 01:12:49.785369 2026] [:error] [pid 55701:tid 55762] [client 20.151.206.105:12762] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wrt.php"] [unique_id "aYYhEcDNf5Dni-14pBDOfgAAAUc"]
[Sat Feb 07 01:12:50.270374 2026] [:error] [pid 55701:tid 55766] [client 20.151.206.105:12725] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wrt.php"] [unique_id "aYYhEsDNf5Dni-14pBDOgQAAAUo"]
[Sat Feb 07 01:12:50.715488 2026] [:error] [pid 55701:tid 55760] [client 20.151.206.105:12720] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wrt.php"] [unique_id "aYYhEsDNf5Dni-14pBDOhAAAAUU"]
[Sat Feb 07 01:12:51.127275 2026] [:error] [pid 55701:tid 55772] [client 20.151.206.105:12781] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bibil.php"] [unique_id "aYYhE8DNf5Dni-14pBDOhwAAAVA"]
[Sat Feb 07 01:12:51.544307 2026] [:error] [pid 35307:tid 35381] [client 20.151.206.105:12421] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bibil.php"] [unique_id "aYYhE-sb9VwRNUckGgvIvwAAAA8"]
[Sat Feb 07 01:12:51.954124 2026] [:error] [pid 35309:tid 35479] [client 20.151.206.105:12772] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bibil.php"] [unique_id "aYYhE4jeM9w-4dKewm_H7AAAANc"]
[Sat Feb 07 01:12:52.365983 2026] [:error] [pid 35307:tid 35383] [client 20.151.206.105:12450] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bibil.php"] [unique_id "aYYhFOsb9VwRNUckGgvIxAAAABE"]
[Sat Feb 07 01:12:52.777883 2026] [:error] [pid 55616:tid 55622] [client 20.151.206.105:12427] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/radio.php"] [unique_id "aYYhFOzxeKHfFD-B2b3djQAAAEM"]
[Sat Feb 07 01:12:53.195280 2026] [:error] [pid 55701:tid 55764] [client 20.151.206.105:12698] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/radio.php"] [unique_id "aYYhFcDNf5Dni-14pBDOiwAAAUg"]
[Sat Feb 07 01:12:53.613288 2026] [:error] [pid 35307:tid 35376] [client 20.151.206.105:12432] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/radio.php"] [unique_id "aYYhFesb9VwRNUckGgvIyQAAAAo"]
[Sat Feb 07 01:12:54.030195 2026] [:error] [pid 35308:tid 35436] [client 20.151.206.105:12791] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/radio.php"] [unique_id "aYYhFgUnbRgf4hlvwiybEwAAAIk"]
[Sat Feb 07 01:12:54.442611 2026] [:error] [pid 55701:tid 55765] [client 20.151.206.105:12694] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/files.php"] [unique_id "aYYhFsDNf5Dni-14pBDOjwAAAUk"]
[Sat Feb 07 01:12:54.854343 2026] [:error] [pid 35537:tid 35554] [client 20.151.206.105:12556] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/files.php"] [unique_id "aYYhFs1jKVeByUo420DeVQAAAQ8"]
[Sat Feb 07 01:12:55.289729 2026] [:error] [pid 35307:tid 35367] [client 20.151.206.105:12459] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/files.php"] [unique_id "aYYhF-sb9VwRNUckGgvIzAAAAAI"]
[Sat Feb 07 01:12:55.706312 2026] [:error] [pid 35309:tid 35471] [client 20.151.206.105:12706] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/files.php"] [unique_id "aYYhF4jeM9w-4dKewm_H8AAAANA"]
[Sat Feb 07 01:12:56.117866 2026] [:error] [pid 55701:tid 55755] [client 20.151.206.105:12770] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file7.php"] [unique_id "aYYhGMDNf5Dni-14pBDOlQAAAUA"]
[Sat Feb 07 01:12:56.532996 2026] [:error] [pid 35309:tid 35466] [client 20.151.206.105:12683] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file7.php"] [unique_id "aYYhGIjeM9w-4dKewm_H8wAAAMs"]
[Sat Feb 07 01:12:56.965171 2026] [:error] [pid 55701:tid 55780] [client 20.151.206.105:12577] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file7.php"] [unique_id "aYYhGMDNf5Dni-14pBDOmgAAAVg"]
[Sat Feb 07 01:12:57.386056 2026] [:error] [pid 35307:tid 35368] [client 20.151.206.105:12785] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file7.php"] [unique_id "aYYhGesb9VwRNUckGgvIzwAAAAM"]
[Sat Feb 07 01:12:57.797111 2026] [:error] [pid 35307:tid 35387] [client 20.151.206.105:13084] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gifclass.php"] [unique_id "aYYhGesb9VwRNUckGgvI0QAAABU"]
[Sat Feb 07 01:12:58.207707 2026] [:error] [pid 35309:tid 35477] [client 20.151.206.105:12463] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gifclass.php"] [unique_id "aYYhGojeM9w-4dKewm_H9AAAANY"]
[Sat Feb 07 01:12:58.617276 2026] [:error] [pid 35309:tid 35474] [client 20.151.206.105:12677] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gifclass.php"] [unique_id "aYYhGojeM9w-4dKewm_H9QAAANM"]
[Sat Feb 07 01:12:59.060873 2026] [:error] [pid 55701:tid 55769] [client 20.151.206.105:12712] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gifclass.php"] [unique_id "aYYhG8DNf5Dni-14pBDOogAAAU0"]
[Sat Feb 07 01:12:59.472522 2026] [:error] [pid 55701:tid 55772] [client 20.151.206.105:12735] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aYYhG8DNf5Dni-14pBDOpgAAAVA"]
[Sat Feb 07 01:12:59.897744 2026] [:error] [pid 55701:tid 55760] [client 20.151.206.105:12745] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aYYhG8DNf5Dni-14pBDOpwAAAUU"]
[Sat Feb 07 01:13:00.323648 2026] [:error] [pid 35308:tid 35431] [client 20.151.206.105:12730] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aYYhHAUnbRgf4hlvwiybLgAAAIQ"]
[Sat Feb 07 01:13:00.754109 2026] [:error] [pid 35537:tid 35550] [client 20.151.206.105:12965] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aYYhHM1jKVeByUo420DeZgAAAQs"]
[Sat Feb 07 01:13:01.170286 2026] [:error] [pid 35309:tid 35473] [client 20.151.206.105:12746] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nox.php"] [unique_id "aYYhHYjeM9w-4dKewm_IAQAAANI"]
[Sat Feb 07 01:13:01.614638 2026] [:error] [pid 35307:tid 35388] [client 20.151.206.105:13104] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nox.php"] [unique_id "aYYhHesb9VwRNUckGgvI4AAAABY"]
[Sat Feb 07 01:13:02.027775 2026] [:error] [pid 35537:tid 35544] [client 20.151.206.105:12746] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nox.php"] [unique_id "aYYhHs1jKVeByUo420DeaQAAAQU"]
[Sat Feb 07 01:13:02.445124 2026] [:error] [pid 55701:tid 55777] [client 20.151.206.105:12734] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nox.php"] [unique_id "aYYhHsDNf5Dni-14pBDOuwAAAVU"]
[Sat Feb 07 01:13:02.868736 2026] [:error] [pid 55616:tid 55626] [client 20.151.206.105:12708] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file48.php"] [unique_id "aYYhHuzxeKHfFD-B2b3dnwAAAEc"]
[Sat Feb 07 01:13:03.280872 2026] [:error] [pid 35537:tid 35551] [client 20.151.206.105:12696] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file48.php"] [unique_id "aYYhH81jKVeByUo420DebAAAAQw"]
[Sat Feb 07 01:13:03.690937 2026] [:error] [pid 55616:tid 55637] [client 20.151.206.105:12732] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file48.php"] [unique_id "aYYhH-zxeKHfFD-B2b3doAAAAFI"]
[Sat Feb 07 01:13:04.101377 2026] [:error] [pid 35307:tid 35382] [client 20.151.206.105:12751] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file48.php"] [unique_id "aYYhIOsb9VwRNUckGgvI4wAAABA"]
[Sat Feb 07 01:13:04.526950 2026] [:error] [pid 35307:tid 35368] [client 20.151.206.105:12429] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/info.php"] [unique_id "aYYhIOsb9VwRNUckGgvI5AAAAAM"]
[Sat Feb 07 01:13:04.954386 2026] [:error] [pid 55701:tid 55778] [client 20.151.206.105:12704] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/info.php"] [unique_id "aYYhIMDNf5Dni-14pBDOwQAAAVY"]
[Sat Feb 07 01:13:05.375856 2026] [:error] [pid 35537:tid 35562] [client 20.151.206.105:12458] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/info.php"] [unique_id "aYYhIc1jKVeByUo420DebQAAARc"]
[Sat Feb 07 01:13:05.787172 2026] [:error] [pid 35309:tid 35474] [client 20.151.206.105:12798] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/info.php"] [unique_id "aYYhIYjeM9w-4dKewm_IFAAAANM"]
[Sat Feb 07 01:13:06.198815 2026] [:error] [pid 35309:tid 35477] [client 20.151.206.105:12672] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class9.php"] [unique_id "aYYhIojeM9w-4dKewm_IFwAAANY"]
[Sat Feb 07 01:13:06.611865 2026] [:error] [pid 55616:tid 55624] [client 20.151.206.105:12759] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class9.php"] [unique_id "aYYhIuzxeKHfFD-B2b3dpgAAAEU"]
[Sat Feb 07 01:13:07.038235 2026] [:error] [pid 35537:tid 35549] [client 20.151.206.105:12676] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class9.php"] [unique_id "aYYhI81jKVeByUo420DebgAAAQo"]
[Sat Feb 07 01:13:07.470061 2026] [:error] [pid 35537:tid 35552] [client 20.151.206.105:12584] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class9.php"] [unique_id "aYYhI81jKVeByUo420DebwAAAQ0"]
[Sat Feb 07 01:13:07.917473 2026] [:error] [pid 55616:tid 55622] [client 20.151.206.105:12453] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/la.php"] [unique_id "aYYhI-zxeKHfFD-B2b3dqwAAAEM"]
[Sat Feb 07 01:13:08.364256 2026] [:error] [pid 35307:tid 35376] [client 20.151.206.105:12741] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/la.php"] [unique_id "aYYhJOsb9VwRNUckGgvI6QAAAAo"]
[Sat Feb 07 01:13:08.822212 2026] [:error] [pid 35537:tid 35556] [client 20.151.206.105:12679] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/la.php"] [unique_id "aYYhJM1jKVeByUo420DedAAAARE"]
[Sat Feb 07 01:13:09.351679 2026] [:error] [pid 35308:tid 35428] [client 20.151.206.105:12726] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/la.php"] [unique_id "aYYhJQUnbRgf4hlvwiybSAAAAIE"]
[Sat Feb 07 01:13:09.767349 2026] [:error] [pid 35537:tid 35541] [client 20.151.206.105:12455] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bless11.php"] [unique_id "aYYhJc1jKVeByUo420DedwAAAQI"]
[Sat Feb 07 01:13:10.226806 2026] [:error] [pid 55701:tid 55772] [client 20.151.206.105:12716] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bless11.php"] [unique_id "aYYhJsDNf5Dni-14pBDO0AAAAVA"]
[Sat Feb 07 01:13:10.686056 2026] [:error] [pid 35309:tid 35475] [client 20.151.206.105:12721] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bless11.php"] [unique_id "aYYhJojeM9w-4dKewm_IIwAAANQ"]
[Sat Feb 07 01:13:11.143845 2026] [:error] [pid 35308:tid 35431] [client 20.151.206.105:12673] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bless11.php"] [unique_id "aYYhJwUnbRgf4hlvwiybTAAAAIQ"]
[Sat Feb 07 01:13:11.572648 2026] [:error] [pid 35309:tid 35455] [client 20.151.206.105:12703] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ccou.php"] [unique_id "aYYhJ4jeM9w-4dKewm_IJAAAAMA"]
[Sat Feb 07 01:13:12.043219 2026] [:error] [pid 35308:tid 35438] [client 20.151.206.105:12776] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ccou.php"] [unique_id "aYYhKAUnbRgf4hlvwiybTwAAAIs"]
[Sat Feb 07 01:13:12.476487 2026] [:error] [pid 55701:tid 55768] [client 20.151.206.105:12700] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ccou.php"] [unique_id "aYYhKMDNf5Dni-14pBDO0wAAAUw"]
[Sat Feb 07 01:13:12.981102 2026] [:error] [pid 55616:tid 55643] [client 20.151.206.105:12768] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ccou.php"] [unique_id "aYYhKOzxeKHfFD-B2b3duAAAAFg"]
[Sat Feb 07 01:13:13.400875 2026] [:error] [pid 35309:tid 35473] [client 20.151.206.105:12710] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ton.php"] [unique_id "aYYhKYjeM9w-4dKewm_IKAAAANI"]
[Sat Feb 07 01:13:13.822184 2026] [:error] [pid 55701:tid 55758] [client 20.151.206.105:12472] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ton.php"] [unique_id "aYYhKcDNf5Dni-14pBDO1gAAAUM"]
[Sat Feb 07 01:13:14.233253 2026] [:error] [pid 35307:tid 35377] [client 20.151.206.105:12431] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ton.php"] [unique_id "aYYhKusb9VwRNUckGgvI8QAAAAs"]
[Sat Feb 07 01:13:14.645331 2026] [:error] [pid 55701:tid 55762] [client 20.151.206.105:12686] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ton.php"] [unique_id "aYYhKsDNf5Dni-14pBDO2AAAAUc"]
[Sat Feb 07 01:13:15.059091 2026] [:error] [pid 35309:tid 35480] [client 20.151.206.105:12435] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/403.php"] [unique_id "aYYhK4jeM9w-4dKewm_ILAAAANg"]
[Sat Feb 07 01:13:15.469871 2026] [:error] [pid 35309:tid 35459] [client 20.151.206.105:12433] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/403.php"] [unique_id "aYYhK4jeM9w-4dKewm_ILQAAAMQ"]
[Sat Feb 07 01:13:15.891518 2026] [:error] [pid 55701:tid 55756] [client 20.151.206.105:12684] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/403.php"] [unique_id "aYYhK8DNf5Dni-14pBDO3AAAAUE"]
[Sat Feb 07 01:13:16.347869 2026] [:error] [pid 35308:tid 35451] [client 20.151.206.105:12422] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/403.php"] [unique_id "aYYhLAUnbRgf4hlvwiybWwAAAJg"]
[Sat Feb 07 01:13:16.780380 2026] [:error] [pid 35537:tid 35541] [client 20.151.206.105:13131] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file9.php"] [unique_id "aYYhLM1jKVeByUo420DejQAAAQI"]
[Sat Feb 07 01:13:17.215624 2026] [:error] [pid 35307:tid 35384] [client 20.151.206.105:12788] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file9.php"] [unique_id "aYYhLesb9VwRNUckGgvI9AAAABI"]
[Sat Feb 07 01:13:17.672566 2026] [:error] [pid 35308:tid 35441] [client 20.151.206.105:12729] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file9.php"] [unique_id "aYYhLQUnbRgf4hlvwiybXwAAAI4"]
[Sat Feb 07 01:13:18.110736 2026] [:error] [pid 35537:tid 35562] [client 20.151.206.105:12957] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file9.php"] [unique_id "aYYhLs1jKVeByUo420DekQAAARc"]
[Sat Feb 07 01:13:18.643042 2026] [:error] [pid 55616:tid 55625] [client 20.151.206.105:12444] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ac.php"] [unique_id "aYYhLuzxeKHfFD-B2b3dwQAAAEY"]
[Sat Feb 07 01:13:19.088417 2026] [:error] [pid 35308:tid 35442] [client 20.151.206.105:13086] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ac.php"] [unique_id "aYYhLwUnbRgf4hlvwiybYgAAAI8"]
[Sat Feb 07 01:13:19.561946 2026] [:error] [pid 35537:tid 35556] [client 20.151.206.105:12786] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ac.php"] [unique_id "aYYhL81jKVeByUo420DelAAAARE"]
[Sat Feb 07 01:13:19.985373 2026] [:error] [pid 35309:tid 35480] [client 20.151.206.105:12437] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ac.php"] [unique_id "aYYhL4jeM9w-4dKewm_INQAAANg"]
[Sat Feb 07 01:13:20.432352 2026] [:error] [pid 55701:tid 55758] [client 20.151.206.105:13148] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/new4.php"] [unique_id "aYYhMMDNf5Dni-14pBDO7QAAAUM"]
[Sat Feb 07 01:13:20.886401 2026] [:error] [pid 35308:tid 35428] [client 20.151.206.105:12434] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/new4.php"] [unique_id "aYYhMAUnbRgf4hlvwiybZgAAAIE"]
[Sat Feb 07 01:13:21.300373 2026] [:error] [pid 35309:tid 35472] [client 20.151.206.105:12717] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/new4.php"] [unique_id "aYYhMYjeM9w-4dKewm_INwAAANE"]
[Sat Feb 07 01:13:21.715995 2026] [:error] [pid 35537:tid 35550] [client 20.151.206.105:12438] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/new4.php"] [unique_id "aYYhMc1jKVeByUo420DemgAAAQs"]
[Sat Feb 07 01:13:22.142328 2026] [:error] [pid 35537:tid 35562] [client 20.151.206.105:12675] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/pop.php"] [unique_id "aYYhMs1jKVeByUo420DenAAAARc"]
[Sat Feb 07 01:13:22.567945 2026] [:error] [pid 35537:tid 35556] [client 20.151.206.105:12733] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/pop.php"] [unique_id "aYYhMs1jKVeByUo420DenwAAARE"]
[Sat Feb 07 01:13:23.005525 2026] [:error] [pid 35537:tid 35558] [client 20.151.206.105:12430] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/pop.php"] [unique_id "aYYhM81jKVeByUo420DeoAAAARM"]
[Sat Feb 07 01:13:23.441672 2026] [:error] [pid 35537:tid 35548] [client 20.151.206.105:13128] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/pop.php"] [unique_id "aYYhM81jKVeByUo420DeoQAAAQk"]
[Sat Feb 07 01:13:23.905486 2026] [:error] [pid 35309:tid 35470] [client 20.151.206.105:12775] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/az.php"] [unique_id "aYYhM4jeM9w-4dKewm_IPAAAAM8"]
[Sat Feb 07 01:13:24.371194 2026] [:error] [pid 35307:tid 35387] [client 20.151.206.105:12728] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/az.php"] [unique_id "aYYhNOsb9VwRNUckGgvJBgAAABU"]
[Sat Feb 07 01:13:25.038625 2026] [:error] [pid 55616:tid 55629] [client 20.151.206.105:13183] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/az.php"] [unique_id "aYYhNezxeKHfFD-B2b3dzQAAAEo"]
[Sat Feb 07 01:13:25.508946 2026] [:error] [pid 35537:tid 35560] [client 20.151.206.105:12689] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/az.php"] [unique_id "aYYhNc1jKVeByUo420DeowAAARU"]
[Sat Feb 07 01:13:25.919370 2026] [:error] [pid 35309:tid 35475] [client 20.151.206.105:13172] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xaz.php"] [unique_id "aYYhNYjeM9w-4dKewm_IQAAAANQ"]
[Sat Feb 07 01:13:26.355640 2026] [:error] [pid 35309:tid 35460] [client 20.151.206.105:12420] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xaz.php"] [unique_id "aYYhNojeM9w-4dKewm_IQQAAAMU"]
[Sat Feb 07 01:13:26.801940 2026] [:error] [pid 55616:tid 55626] [client 20.151.206.105:12794] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xaz.php"] [unique_id "aYYhNuzxeKHfFD-B2b3d0gAAAEc"]
[Sat Feb 07 01:13:27.213583 2026] [:error] [pid 55701:tid 55769] [client 20.151.206.105:12692] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xaz.php"] [unique_id "aYYhN8DNf5Dni-14pBDO-gAAAU0"]
[Sat Feb 07 01:13:27.637298 2026] [:error] [pid 55616:tid 55627] [client 20.151.206.105:12787] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/up4.php"] [unique_id "aYYhN-zxeKHfFD-B2b3d1gAAAEg"]
[Sat Feb 07 01:13:28.050346 2026] [:error] [pid 35309:tid 35459] [client 20.151.206.105:12473] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/up4.php"] [unique_id "aYYhOIjeM9w-4dKewm_IQgAAAMQ"]
[Sat Feb 07 01:13:28.462988 2026] [:error] [pid 55701:tid 55777] [client 20.151.206.105:12426] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/up4.php"] [unique_id "aYYhOMDNf5Dni-14pBDPBAAAAVU"]
[Sat Feb 07 01:13:28.909471 2026] [:error] [pid 35309:tid 35465] [client 20.151.206.105:12418] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/up4.php"] [unique_id "aYYhOIjeM9w-4dKewm_IQwAAAMo"]
[Sat Feb 07 01:13:29.333289 2026] [:error] [pid 35308:tid 35444] [client 20.151.206.105:12714] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/1aa.php"] [unique_id "aYYhOQUnbRgf4hlvwiybeQAAAJE"]
[Sat Feb 07 01:13:29.767527 2026] [:error] [pid 35307:tid 35378] [client 20.151.206.105:13124] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/1aa.php"] [unique_id "aYYhOesb9VwRNUckGgvJCwAAAAw"]
[Sat Feb 07 01:13:30.197994 2026] [:error] [pid 35307:tid 35382] [client 20.151.206.105:12707] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/1aa.php"] [unique_id "aYYhOusb9VwRNUckGgvJDAAAABA"]
[Sat Feb 07 01:13:30.645445 2026] [:error] [pid 55701:tid 55775] [client 20.151.206.105:12419] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/1aa.php"] [unique_id "aYYhOsDNf5Dni-14pBDPDwAAAVM"]
[Sat Feb 07 01:13:31.059511 2026] [:error] [pid 35309:tid 35466] [client 20.151.206.105:13132] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/elp.php"] [unique_id "aYYhO4jeM9w-4dKewm_IRQAAAMs"]
[Sat Feb 07 01:13:31.552622 2026] [:error] [pid 35537:tid 35548] [client 20.151.206.105:13125] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/elp.php"] [unique_id "aYYhO81jKVeByUo420DeqgAAAQk"]
[Sat Feb 07 01:13:31.967185 2026] [:error] [pid 55616:tid 55619] [client 20.151.206.105:13141] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/elp.php"] [unique_id "aYYhO-zxeKHfFD-B2b3d3wAAAEA"]
[Sat Feb 07 01:13:32.394564 2026] [proxy_fcgi:error] [pid 35307:tid 35383] [client 20.151.206.105:12722] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 01:13:32.603281 2026] [proxy_fcgi:error] [pid 35307:tid 35385] [client 20.151.206.105:12722] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 01:13:32.813166 2026] [proxy_fcgi:error] [pid 35307:tid 35389] [client 20.151.206.105:12722] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 01:13:33.027489 2026] [proxy_fcgi:error] [pid 35307:tid 35381] [client 20.151.206.105:12722] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 01:13:33.248162 2026] [proxy_fcgi:error] [pid 35307:tid 35369] [client 20.151.206.105:12722] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 01:13:33.457506 2026] [proxy_fcgi:error] [pid 35307:tid 35384] [client 20.151.206.105:12722] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 01:13:33.681964 2026] [proxy_fcgi:error] [pid 35307:tid 35386] [client 20.151.206.105:12722] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 04:31:16.832283 2026] [proxy_fcgi:error] [pid 50673:tid 50741] [client 87.106.209.183:54443] AH01071: Got error 'Primary script unknown', referer: www.google.com
[Sat Feb 07 04:31:18.359660 2026] [proxy_fcgi:error] [pid 50672:tid 50732] [client 87.106.209.183:64227] AH01071: Got error 'Primary script unknown', referer: www.google.com
[Sat Feb 07 04:31:31.013676 2026] [proxy_fcgi:error] [pid 50672:tid 50715] [client 87.106.209.183:54593] AH01071: Got error 'Primary script unknown', referer: www.google.com
[Sat Feb 07 04:31:32.259469 2026] [proxy_fcgi:error] [pid 50671:tid 50693] [client 87.106.209.183:62471] AH01071: Got error 'Primary script unknown', referer: www.google.com
[Sat Feb 07 12:48:01.559936 2026] [:error] [pid 50673:tid 50744] [client 165.22.74.150:52123] [client 165.22.74.150] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 165.22.74.150, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-login.php"] [unique_id "aYbEAWVwLsaZ7aKO2cl-CQAAAIk"]
[Sat Feb 07 12:48:01.571307 2026] [proxy_fcgi:error] [pid 50673:tid 50744] [client 165.22.74.150:52123] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 20:57:08.426879 2026] [proxy_fcgi:error] [pid 58058:tid 58080] [client 23.100.66.55:21041] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 20:57:08.640024 2026] [proxy_fcgi:error] [pid 58058:tid 58065] [client 23.100.66.55:21041] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 20:57:08.853154 2026] [proxy_fcgi:error] [pid 58058:tid 58079] [client 23.100.66.55:21041] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 20:57:09.071046 2026] [proxy_fcgi:error] [pid 58058:tid 58064] [client 23.100.66.55:21041] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 20:57:09.302501 2026] [proxy_fcgi:error] [pid 58058:tid 58082] [client 23.100.66.55:21041] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 20:57:09.531398 2026] [proxy_fcgi:error] [pid 58058:tid 58067] [client 23.100.66.55:21041] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 20:57:09.744122 2026] [proxy_fcgi:error] [pid 58058:tid 58068] [client 23.100.66.55:21041] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 20:57:09.966312 2026] [proxy_fcgi:error] [pid 58058:tid 58085] [client 23.100.66.55:21041] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 20:57:10.194477 2026] [proxy_fcgi:error] [pid 58058:tid 58078] [client 23.100.66.55:21041] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 20:57:10.406626 2026] [proxy_fcgi:error] [pid 58058:tid 58084] [client 23.100.66.55:21041] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 20:57:10.628534 2026] [:error] [pid 58058:tid 58074] [client 23.100.66.55:21041] [client 23.100.66.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/st.php"] [unique_id "aYc2prz-Qlvs65S4DP8gigAAAY0"]
[Sat Feb 07 20:57:12.346077 2026] [:error] [pid 50672:tid 50717] [client 23.100.66.55:21033] [client 23.100.66.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/st.php"] [unique_id "aYc2qA9o0jq1XS8Nv7NGjwAAAEk"]
[Sat Feb 07 20:57:16.404429 2026] [:error] [pid 43182:tid 43196] [client 23.100.66.55:21016] [client 23.100.66.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/st.php"] [unique_id "aYc2rPEC82JnxmrnFYnBeAAAAUw"]
[Sat Feb 07 20:57:19.120966 2026] [:error] [pid 55157:tid 55181] [client 23.100.66.55:21031] [client 23.100.66.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/st.php"] [unique_id "aYc2r336JdtTn2bTEozKuAAAARM"]
[Sat Feb 07 20:57:20.692489 2026] [:error] [pid 50673:tid 50759] [client 23.100.66.55:21035] [client 23.100.66.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/"] [unique_id "aYc2sGVwLsaZ7aKO2ckJWgAAAJg"]
[Sat Feb 07 20:57:32.526295 2026] [:error] [pid 55157:tid 55179] [client 23.100.66.55:21017] [client 23.100.66.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/"] [unique_id "aYc2vH36JdtTn2bTEozKxwAAARE"]
[Sat Feb 07 20:57:34.722931 2026] [:error] [pid 50671:tid 50682] [client 23.100.66.55:21032] [client 23.100.66.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/"] [unique_id "aYc2vrvqLohWBI_mqBOkJQAAAAI"]
[Sat Feb 07 20:57:35.923769 2026] [:error] [pid 50672:tid 50720] [client 23.100.66.55:21020] [client 23.100.66.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/oxse.php"] [unique_id "aYc2vw9o0jq1XS8Nv7NGnQAAAEw"]
[Sat Feb 07 20:57:39.377583 2026] [:error] [pid 30684:tid 30704] [client 23.100.66.55:20999] [client 23.100.66.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/oxse.php"] [unique_id "aYc2w7qwdxwowLt-_LwKBQAAAdE"]
[Sat Feb 07 20:57:44.754436 2026] [:error] [pid 55157:tid 55171] [client 23.100.66.55:20696] [client 23.100.66.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/oxse.php"] [unique_id "aYc2yH36JdtTn2bTEozKywAAAQk"]
[Sat Feb 07 20:57:46.149295 2026] [:error] [pid 43182:tid 43203] [client 23.100.66.55:20723] [client 23.100.66.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/oxse.php"] [unique_id "aYc2yvEC82JnxmrnFYnBkgAAAVM"]
[Sat Feb 07 20:57:51.896380 2026] [:error] [pid 43182:tid 43201] [client 23.100.66.55:20994] [client 23.100.66.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dropdown.php"] [unique_id "aYc2z_EC82JnxmrnFYnBoAAAAVE"]
[Sat Feb 07 20:57:57.844021 2026] [:error] [pid 58058:tid 58066] [client 23.100.66.55:20683] [client 23.100.66.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dropdown.php"] [unique_id "aYc21bz-Qlvs65S4DP8gvgAAAYU"]
[Sat Feb 07 20:57:59.655625 2026] [:error] [pid 50671:tid 50681] [client 23.100.66.55:21005] [client 23.100.66.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dropdown.php"] [unique_id "aYc217vqLohWBI_mqBOkMAAAAAE"]
[Sat Feb 07 20:58:16.646949 2026] [proxy_fcgi:error] [pid 50780:tid 50795] [client 23.100.66.55:20691] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 20:58:16.876344 2026] [proxy_fcgi:error] [pid 50780:tid 50802] [client 23.100.66.55:20691] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 20:58:17.104975 2026] [proxy_fcgi:error] [pid 50780:tid 50796] [client 23.100.66.55:20691] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 20:58:17.325329 2026] [proxy_fcgi:error] [pid 50780:tid 50786] [client 23.100.66.55:20691] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 20:58:17.551958 2026] [proxy_fcgi:error] [pid 50780:tid 50794] [client 23.100.66.55:20691] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 20:58:17.770692 2026] [proxy_fcgi:error] [pid 50780:tid 50801] [client 23.100.66.55:20691] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 20:58:18.011664 2026] [proxy_fcgi:error] [pid 50780:tid 50785] [client 23.100.66.55:20691] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 20:58:18.235858 2026] [proxy_fcgi:error] [pid 50780:tid 50787] [client 23.100.66.55:20691] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 20:58:18.441356 2026] [proxy_fcgi:error] [pid 50780:tid 50793] [client 23.100.66.55:20691] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 20:58:18.669119 2026] [proxy_fcgi:error] [pid 50780:tid 50789] [client 23.100.66.55:20691] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 20:58:18.879874 2026] [proxy_fcgi:error] [pid 50780:tid 50805] [client 23.100.66.55:20691] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 20:58:19.097323 2026] [:error] [pid 50780:tid 50791] [client 23.100.66.55:20691] [client 23.100.66.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gmanz.php"] [unique_id "aYc26-tUmIu2JHM2Cru5KwAAAMk"]
[Sat Feb 07 20:58:25.218732 2026] [:error] [pid 50672:tid 50721] [client 23.100.66.55:21022] [client 23.100.66.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gmanz.php"] [unique_id "aYc28Q9o0jq1XS8Nv7NGzAAAAE0"]
[Sat Feb 07 20:58:29.390675 2026] [:error] [pid 50671:tid 50692] [client 23.100.66.55:21047] [client 23.100.66.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gmanz.php"] [unique_id "aYc29bvqLohWBI_mqBOkPQAAAAw"]
[Sat Feb 07 20:58:33.917541 2026] [:error] [pid 50780:tid 50806] [client 23.100.66.55:21011] [client 23.100.66.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gmanz.php"] [unique_id "aYc2-etUmIu2JHM2Cru5MAAAANg"]
[Sat Feb 07 20:58:37.147845 2026] [:error] [pid 50672:tid 50724] [client 23.100.66.55:21027] [client 23.100.66.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zzz.php"] [unique_id "aYc2_Q9o0jq1XS8Nv7NG0AAAAFA"]
[Sat Feb 07 20:58:38.175183 2026] [:error] [pid 43182:tid 43191] [client 23.100.66.55:20709] [client 23.100.66.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zzz.php"] [unique_id "aYc2_vEC82JnxmrnFYnByQAAAUc"]
[Sat Feb 07 20:58:49.320207 2026] [:error] [pid 50673:tid 50737] [client 23.100.66.55:21013] [client 23.100.66.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zzz.php"] [unique_id "aYc3CWVwLsaZ7aKO2ckJ4AAAAII"]
[Sat Feb 07 20:58:54.844640 2026] [:error] [pid 50673:tid 50750] [client 23.100.66.55:21037] [client 23.100.66.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/codehu.php"] [unique_id "aYc3DmVwLsaZ7aKO2ckJ6QAAAI8"]
[Sat Feb 07 20:58:56.468290 2026] [:error] [pid 43182:tid 43197] [client 23.100.66.55:20674] [client 23.100.66.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/codehu.php"] [unique_id "aYc3EPEC82JnxmrnFYnB2gAAAU0"]
[Sat Feb 07 20:58:57.868732 2026] [:error] [pid 50671:tid 50704] [client 23.100.66.55:20689] [client 23.100.66.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/codehu.php"] [unique_id "aYc3EbvqLohWBI_mqBOkYAAAABg"]
[Sat Feb 07 20:59:08.610766 2026] [:error] [pid 50671:tid 50681] [client 23.100.66.55:20690] [client 23.100.66.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/resp.php"] [unique_id "aYc3HLvqLohWBI_mqBOkZgAAAAE"]
[Sat Feb 07 20:59:09.871310 2026] [:error] [pid 50673:tid 50756] [client 23.100.66.55:21045] [client 23.100.66.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/resp.php"] [unique_id "aYc3HWVwLsaZ7aKO2ckKCgAAAJU"]
[Sat Feb 07 20:59:12.762515 2026] [:error] [pid 43182:tid 43192] [client 23.100.66.55:20734] [client 23.100.66.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/resp.php"] [unique_id "aYc3IPEC82JnxmrnFYnCCwAAAUg"]
[Sat Feb 07 20:59:13.730362 2026] [:error] [pid 50780:tid 50787] [client 23.100.66.55:20685] [client 23.100.66.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/resp.php"] [unique_id "aYc3IetUmIu2JHM2Cru5WgAAAMU"]
[Sat Feb 07 20:59:15.967743 2026] [:error] [pid 58058:tid 58075] [client 23.100.66.55:20722] [client 23.100.66.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/codemirror/about.php"] [unique_id "aYc3I7z-Qlvs65S4DP8hNgAAAY4"]
[Sat Feb 07 20:59:18.774918 2026] [:error] [pid 50671:tid 50703] [client 23.100.66.55:21050] [client 23.100.66.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Requests/library/shlo.php"] [unique_id "aYc3JrvqLohWBI_mqBOkbQAAABc"]
[Sat Feb 07 20:59:19.480787 2026] [proxy_fcgi:error] [pid 50780:tid 50798] [client 23.100.66.55:21023] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 20:59:19.789946 2026] [proxy_fcgi:error] [pid 50780:tid 50791] [client 23.100.66.55:21023] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 20:59:20.000018 2026] [proxy_fcgi:error] [pid 50780:tid 50799] [client 23.100.66.55:21023] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 20:59:20.226820 2026] [proxy_fcgi:error] [pid 50780:tid 50782] [client 23.100.66.55:21023] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 20:59:20.461941 2026] [proxy_fcgi:error] [pid 50780:tid 50803] [client 23.100.66.55:21023] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 20:59:20.673063 2026] [proxy_fcgi:error] [pid 50780:tid 50806] [client 23.100.66.55:21023] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 20:59:20.884154 2026] [proxy_fcgi:error] [pid 50780:tid 50792] [client 23.100.66.55:21023] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 20:59:21.094120 2026] [proxy_fcgi:error] [pid 50780:tid 50802] [client 23.100.66.55:21023] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 20:59:21.306585 2026] [proxy_fcgi:error] [pid 50780:tid 50804] [client 23.100.66.55:21023] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:04:28.663642 2026] [proxy_fcgi:error] [pid 50673:tid 50738] [client 31.171.130.136:60455] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:04:29.170137 2026] [proxy_fcgi:error] [pid 50673:tid 50759] [client 31.171.130.136:60455] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:04:29.697806 2026] [proxy_fcgi:error] [pid 50673:tid 50758] [client 31.171.130.136:60455] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:04:30.187626 2026] [proxy_fcgi:error] [pid 50673:tid 50745] [client 31.171.130.136:60455] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:04:30.675630 2026] [proxy_fcgi:error] [pid 50673:tid 50748] [client 31.171.130.136:60455] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:04:33.066637 2026] [proxy_fcgi:error] [pid 50673:tid 50757] [client 31.171.130.136:60455] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:04:33.588103 2026] [proxy_fcgi:error] [pid 50673:tid 50754] [client 31.171.130.136:60455] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:04:34.064632 2026] [proxy_fcgi:error] [pid 50673:tid 50743] [client 31.171.130.136:60455] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:04:35.017597 2026] [proxy_fcgi:error] [pid 50673:tid 50741] [client 31.171.130.136:60455] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:04:35.961951 2026] [proxy_fcgi:error] [pid 50673:tid 50757] [client 31.171.130.136:60455] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:04:36.447100 2026] [proxy_fcgi:error] [pid 50673:tid 50744] [client 31.171.130.136:60455] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:04:36.934684 2026] [proxy_fcgi:error] [pid 50673:tid 50755] [client 31.171.130.136:60455] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:04:37.443615 2026] [proxy_fcgi:error] [pid 50673:tid 50743] [client 31.171.130.136:60455] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:04:37.978597 2026] [proxy_fcgi:error] [pid 50673:tid 50759] [client 31.171.130.136:60455] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:04:38.453622 2026] [proxy_fcgi:error] [pid 50673:tid 50744] [client 31.171.130.136:60455] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:04:38.923164 2026] [proxy_fcgi:error] [pid 50673:tid 50738] [client 31.171.130.136:60455] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:04:39.406118 2026] [proxy_fcgi:error] [pid 50673:tid 50740] [client 31.171.130.136:60455] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:04:41.681638 2026] [proxy_fcgi:error] [pid 50673:tid 50738] [client 31.171.130.136:60455] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:04:48.448577 2026] [:error] [pid 50673:tid 50747] [client 31.171.130.136:60455] [client 31.171.130.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aYdGgGVwLsaZ7aKO2ckkNwAAAIw"]
[Sat Feb 07 22:04:50.830486 2026] [:error] [pid 43182:tid 43184] [client 31.171.130.109:64093] [client 31.171.130.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aYdGgvEC82JnxmrnFYnkGgAAAUA"]
[Sat Feb 07 22:04:53.213608 2026] [proxy_fcgi:error] [pid 43182:tid 43185] [client 31.171.130.142:63685] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:04:54.693469 2026] [:error] [pid 43182:tid 43188] [client 31.171.130.142:63685] [client 31.171.130.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dwelectservices.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aYdGhvEC82JnxmrnFYnkRwAAAUQ"]
[Sat Feb 07 22:04:56.588615 2026] [proxy_fcgi:error] [pid 50672:tid 50727] [client 31.171.130.161:20233] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:04:57.066886 2026] [:error] [pid 50672:tid 50719] [client 31.171.130.161:20233] [client 31.171.130.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aYdGiQ9o0jq1XS8Nv7NbfwAAAEs"]
[Sat Feb 07 22:04:58.486642 2026] [proxy_fcgi:error] [pid 50780:tid 50784] [client 31.171.130.129:44881] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:05:01.047750 2026] [:error] [pid 50780:tid 50783] [client 31.171.130.129:44881] [client 31.171.130.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aYdGjetUmIu2JHM2CrvUWAAAAME"]
[Sat Feb 07 22:05:02.500690 2026] [:error] [pid 50671:tid 50697] [client 31.171.130.162:47499] [client 31.171.130.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aYdGjrvqLohWBI_mqBO5IAAAABE"]
[Sat Feb 07 22:05:03.514506 2026] [:error] [pid 50671:tid 50701] [client 31.171.130.111:38351] [client 31.171.130.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aYdGj7vqLohWBI_mqBO5JAAAABU"]
[Sat Feb 07 22:05:04.464625 2026] [:error] [pid 50672:tid 50724] [client 31.171.130.150:21933] [client 31.171.130.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aYdGkA9o0jq1XS8Nv7NbsQAAAFA"]
[Sat Feb 07 22:05:05.423377 2026] [:error] [pid 58058:tid 58064] [client 31.171.130.110:55903] [client 31.171.130.110] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aYdGkbz-Qlvs65S4DP84dwAAAYM"]
[Sat Feb 07 22:05:06.371464 2026] [:error] [pid 50780:tid 50802] [client 31.171.130.139:21165] [client 31.171.130.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aYdGkutUmIu2JHM2CrvUhgAAANQ"]
[Sat Feb 07 22:05:07.804305 2026] [:error] [pid 58058:tid 58081] [client 31.171.130.152:63717] [client 31.171.130.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aYdGk7z-Qlvs65S4DP84hgAAAZQ"]
[Sat Feb 07 22:05:08.781635 2026] [proxy_fcgi:error] [pid 50671:tid 50694] [client 31.171.130.121:27285] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:05:09.757652 2026] [:error] [pid 50671:tid 50690] [client 31.171.130.121:27285] [client 31.171.130.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dwelectservices.com.au"] [uri "/filemanager.php"] [unique_id "aYdGlbvqLohWBI_mqBO5RQAAAAo"]
[Sat Feb 07 22:05:11.655565 2026] [:error] [pid 55157:tid 55181] [client 31.171.130.133:63737] [client 31.171.130.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aYdGl336JdtTn2bTEozfjwAAARM"]
[Sat Feb 07 22:05:13.104373 2026] [:error] [pid 43182:tid 43204] [client 31.171.130.136:42287] [client 31.171.130.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aYdGmfEC82JnxmrnFYnkwQAAAVQ"]
[Sat Feb 07 22:05:14.099776 2026] [proxy_fcgi:error] [pid 43182:tid 43199] [client 31.171.130.129:57301] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:05:14.583263 2026] [:error] [pid 43182:tid 43189] [client 31.171.130.129:57301] [client 31.171.130.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aYdGmvEC82JnxmrnFYnkyQAAAUU"]
[Sat Feb 07 22:05:15.558294 2026] [proxy_fcgi:error] [pid 30684:tid 30703] [client 31.171.130.160:65525] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:05:17.011698 2026] [proxy_fcgi:error] [pid 30684:tid 30692] [client 31.171.130.160:65525] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:05:18.454501 2026] [:error] [pid 30684:tid 30698] [client 31.171.130.160:65525] [client 31.171.130.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aYdGnrqwdxwowLt-_LwlLQAAAcs"]
[Sat Feb 07 22:05:19.407691 2026] [proxy_fcgi:error] [pid 43182:tid 43188] [client 31.171.130.109:64267] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:05:19.920724 2026] [:error] [pid 43182:tid 43204] [client 31.171.130.109:64267] [client 31.171.130.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aYdGn_EC82JnxmrnFYnk9QAAAVQ"]
[Sat Feb 07 22:05:20.907518 2026] [proxy_fcgi:error] [pid 50780:tid 50793] [client 31.171.130.147:56903] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:05:21.861438 2026] [:error] [pid 50780:tid 50789] [client 31.171.130.147:56903] [client 31.171.130.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "aYdGoetUmIu2JHM2CrvU2wAAAMc"]
[Sat Feb 07 22:05:23.285713 2026] [:error] [pid 30684:tid 30701] [client 31.171.130.113:21609] [client 31.171.130.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aYdGo7qwdxwowLt-_LwlTAAAAc4"]
[Sat Feb 07 22:05:24.725892 2026] [proxy_fcgi:error] [pid 58058:tid 58074] [client 31.171.130.136:39397] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:05:25.223614 2026] [proxy_fcgi:error] [pid 58058:tid 58073] [client 31.171.130.136:39397] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:05:26.177529 2026] [:error] [pid 58058:tid 58062] [client 31.171.130.136:39397] [client 31.171.130.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aYdGprz-Qlvs65S4DP849AAAAYE"]
[Sat Feb 07 22:05:27.620438 2026] [:error] [pid 58058:tid 58070] [client 31.171.130.155:27189] [client 31.171.130.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aYdGp7z-Qlvs65S4DP85AAAAAYk"]
[Sat Feb 07 22:05:29.087560 2026] [:error] [pid 50673:tid 50758] [client 31.171.130.141:33335] [client 31.171.130.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aYdGqWVwLsaZ7aKO2cklZAAAAJc"]
[Sat Feb 07 22:05:30.054737 2026] [:error] [pid 50780:tid 50789] [client 31.171.130.154:39757] [client 31.171.130.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aYdGqutUmIu2JHM2CrvU-QAAAMc"]
[Sat Feb 07 22:05:30.995604 2026] [:error] [pid 50672:tid 50725] [client 31.171.130.140:28911] [client 31.171.130.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aYdGqg9o0jq1XS8Nv7NcEgAAAFE"]
[Sat Feb 07 22:05:32.912089 2026] [proxy_fcgi:error] [pid 50672:tid 50726] [client 31.171.130.165:57909] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:05:33.381659 2026] [:error] [pid 50672:tid 50721] [client 31.171.130.165:57909] [client 31.171.130.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "aYdGrQ9o0jq1XS8Nv7NcJAAAAE0"]
[Sat Feb 07 22:05:34.326922 2026] [:error] [pid 43182:tid 43195] [client 31.171.130.109:43951] [client 31.171.130.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "aYdGrvEC82JnxmrnFYnlZgAAAUs"]
[Sat Feb 07 22:05:38.844948 2026] [:error] [pid 55157:tid 55179] [client 31.171.130.121:38555] [client 31.171.130.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aYdGsn36JdtTn2bTEozgWQAAARE"]
[Sat Feb 07 22:05:40.775623 2026] [proxy_fcgi:error] [pid 50780:tid 50800] [client 31.171.130.119:29417] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:05:41.724615 2026] [proxy_fcgi:error] [pid 50780:tid 50803] [client 31.171.130.119:29417] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:05:43.644182 2026] [:error] [pid 50780:tid 50794] [client 31.171.130.119:29417] [client 31.171.130.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/admin.php"] [unique_id "aYdGt-tUmIu2JHM2CrvVUgAAAMw"]
[Sat Feb 07 22:05:46.100633 2026] [:error] [pid 50673:tid 50740] [client 31.171.130.134:56161] [client 31.171.130.134] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.134, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aYdGumVwLsaZ7aKO2ckmCQAAAIU"]
[Sat Feb 07 22:05:46.580635 2026] [proxy_fcgi:error] [pid 50673:tid 50744] [client 31.171.130.134:56161] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:05:49.106018 2026] [proxy_fcgi:error] [pid 50673:tid 50735] [client 31.171.130.134:56161] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:05:49.587654 2026] [proxy_fcgi:error] [pid 50673:tid 50740] [client 31.171.130.134:56161] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:05:52.039335 2026] [:error] [pid 50673:tid 50737] [client 31.171.130.134:56161] [client 31.171.130.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aYdGwGVwLsaZ7aKO2ckmTQAAAII"]
[Sat Feb 07 22:05:52.996643 2026] [proxy_fcgi:error] [pid 50780:tid 50787] [client 31.171.130.163:58881] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:05:53.507685 2026] [proxy_fcgi:error] [pid 50780:tid 50796] [client 31.171.130.163:58881] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:05:54.006893 2026] [:error] [pid 50780:tid 50785] [client 31.171.130.163:58881] [client 31.171.130.163] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.163, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aYdGwetUmIu2JHM2CrvVkwAAAMM"]
[Sat Feb 07 22:05:54.955766 2026] [:error] [pid 50780:tid 50794] [client 31.171.130.163:58881] [client 31.171.130.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/item.php"] [unique_id "aYdGwutUmIu2JHM2CrvVlgAAAMw"]
[Sat Feb 07 22:05:57.436647 2026] [proxy_fcgi:error] [pid 43182:tid 43208] [client 31.171.130.138:40915] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:05:57.925610 2026] [proxy_fcgi:error] [pid 43182:tid 43184] [client 31.171.130.138:40915] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:05:58.868622 2026] [proxy_fcgi:error] [pid 43182:tid 43196] [client 31.171.130.138:40915] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:05:59.848510 2026] [:error] [pid 43182:tid 43204] [client 31.171.130.138:40915] [client 31.171.130.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aYdGx_EC82JnxmrnFYnmSgAAAVQ"]
[Sat Feb 07 22:06:00.841606 2026] [proxy_fcgi:error] [pid 50672:tid 50724] [client 31.171.130.133:52095] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:06:02.316683 2026] [proxy_fcgi:error] [pid 50672:tid 50720] [client 31.171.130.133:52095] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:06:03.296639 2026] [proxy_fcgi:error] [pid 50672:tid 50718] [client 31.171.130.133:52095] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:06:04.319624 2026] [proxy_fcgi:error] [pid 50672:tid 50719] [client 31.171.130.133:52095] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:06:04.801385 2026] [:error] [pid 50672:tid 50709] [client 31.171.130.133:52095] [client 31.171.130.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aYdGzA9o0jq1XS8Nv7Nc4AAAAEE"]
[Sat Feb 07 22:06:05.775630 2026] [proxy_fcgi:error] [pid 50673:tid 50737] [client 31.171.130.129:28031] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:06:06.266808 2026] [proxy_fcgi:error] [pid 50673:tid 50748] [client 31.171.130.129:28031] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:06:06.733484 2026] [:error] [pid 50673:tid 50743] [client 31.171.130.129:28031] [client 31.171.130.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aYdGzmVwLsaZ7aKO2ckm0QAAAIg"]
[Sat Feb 07 22:06:08.152597 2026] [proxy_fcgi:error] [pid 50671:tid 50703] [client 31.171.130.141:41325] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:06:09.147417 2026] [:error] [pid 50671:tid 50704] [client 31.171.130.141:41325] [client 31.171.130.141] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.141, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "aYdG0bvqLohWBI_mqBO6yQAAABg"]
[Sat Feb 07 22:06:09.620277 2026] [:error] [pid 50671:tid 50681] [client 31.171.130.141:41325] [client 31.171.130.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aYdG0bvqLohWBI_mqBO6zAAAAAE"]
[Sat Feb 07 22:06:15.382635 2026] [proxy_fcgi:error] [pid 30684:tid 30696] [client 31.171.130.108:34565] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:06:18.289639 2026] [proxy_fcgi:error] [pid 30684:tid 30689] [client 31.171.130.108:34565] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:06:18.755844 2026] [:error] [pid 30684:tid 30705] [client 31.171.130.108:34565] [client 31.171.130.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aYdG2rqwdxwowLt-_Lwm4wAAAdI"]
[Sat Feb 07 22:06:19.706601 2026] [proxy_fcgi:error] [pid 50672:tid 50722] [client 31.171.130.110:34629] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:06:21.152964 2026] [:error] [pid 50672:tid 50723] [client 31.171.130.110:34629] [client 31.171.130.110] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.110, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aYdG3Q9o0jq1XS8Nv7NdQQAAAE8"]
[Sat Feb 07 22:06:21.645611 2026] [proxy_fcgi:error] [pid 50672:tid 50715] [client 31.171.130.110:34629] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:06:22.128649 2026] [proxy_fcgi:error] [pid 50672:tid 50732] [client 31.171.130.110:34629] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:06:22.605856 2026] [proxy_fcgi:error] [pid 50672:tid 50711] [client 31.171.130.110:34629] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:06:23.081112 2026] [:error] [pid 50672:tid 50723] [client 31.171.130.110:34629] [client 31.171.130.110] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aYdG3w9o0jq1XS8Nv7NdVAAAAE8"]
[Sat Feb 07 22:06:24.031053 2026] [proxy_fcgi:error] [pid 30684:tid 30708] [client 31.171.130.121:52205] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:06:24.502874 2026] [:error] [pid 30684:tid 30694] [client 31.171.130.121:52205] [client 31.171.130.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/infi.php"] [unique_id "aYdG4LqwdxwowLt-_LwnBQAAAcc"]
[Sat Feb 07 22:06:25.950622 2026] [proxy_fcgi:error] [pid 43182:tid 43206] [client 31.171.130.151:22965] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:06:26.428136 2026] [:error] [pid 43182:tid 43202] [client 31.171.130.151:22965] [client 31.171.130.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aYdG4vEC82JnxmrnFYnnQwAAAVI"]
[Sat Feb 07 22:07:45.028240 2026] [autoindex:error] [pid 30684:tid 30687] [client 31.171.130.164:51373] AH01276: Cannot serve directory /home/dwelects/public_html/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Feb 08 02:41:26.925598 2026] [proxy_fcgi:error] [pid 62641:tid 62666] [client 68.221.72.62:38209] AH01071: Got error 'Primary script unknown'
[Sun Feb 08 02:41:27.178522 2026] [proxy_fcgi:error] [pid 62641:tid 62655] [client 68.221.72.62:38209] AH01071: Got error 'Primary script unknown'
[Sun Feb 08 02:41:27.421018 2026] [proxy_fcgi:error] [pid 62641:tid 62645] [client 68.221.72.62:38209] AH01071: Got error 'Primary script unknown'
[Sun Feb 08 03:17:22.285208 2026] [:error] [pid 62340:tid 62390] [client 54.224.44.213:52029] [client 54.224.44.213] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.224.44.213, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-login.php"] [unique_id "aYePwgp6H49g9bqshiucYgAAAA8"]
[Sun Feb 08 03:17:22.285280 2026] [:error] [pid 62340:tid 62390] [client 54.224.44.213:52029] [client 54.224.44.213] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 54.224.44.213 on wp-login.php, counter = 31"] [hostname "dwelectservices.com.au"] [uri "/wp-login.php"] [unique_id "aYePwgp6H49g9bqshiucYgAAAA8"]
[Sun Feb 08 04:43:32.460502 2026] [proxy_fcgi:error] [pid 24421:tid 24431] [client 51.120.74.232:24912] AH01071: Got error 'Primary script unknown'
[Sun Feb 08 04:43:32.729477 2026] [proxy_fcgi:error] [pid 24421:tid 24454] [client 51.120.74.232:24912] AH01071: Got error 'Primary script unknown'
[Sun Feb 08 04:43:32.991430 2026] [proxy_fcgi:error] [pid 24421:tid 24444] [client 51.120.74.232:24912] AH01071: Got error 'Primary script unknown'
[Sun Feb 08 04:43:33.257533 2026] [proxy_fcgi:error] [pid 24421:tid 24449] [client 51.120.74.232:24912] AH01071: Got error 'Primary script unknown'
[Sun Feb 08 04:43:33.525188 2026] [proxy_fcgi:error] [pid 24421:tid 24433] [client 51.120.74.232:24912] AH01071: Got error 'Primary script unknown'
[Sun Feb 08 04:43:33.788352 2026] [proxy_fcgi:error] [pid 24421:tid 24446] [client 51.120.74.232:24912] AH01071: Got error 'Primary script unknown'
[Sun Feb 08 04:43:34.049874 2026] [proxy_fcgi:error] [pid 24421:tid 24447] [client 51.120.74.232:24912] AH01071: Got error 'Primary script unknown'
[Sun Feb 08 04:43:34.315220 2026] [proxy_fcgi:error] [pid 24421:tid 24452] [client 51.120.74.232:24912] AH01071: Got error 'Primary script unknown'
[Sun Feb 08 04:43:34.577885 2026] [proxy_fcgi:error] [pid 24421:tid 24441] [client 51.120.74.232:24912] AH01071: Got error 'Primary script unknown'
[Sun Feb 08 05:46:13.392238 2026] [:error] [pid 24421:tid 24435] [client 54.90.128.13:59894] [client 54.90.128.13] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.git/config"] [unique_id "aYeypap7cTzhX5M1IP8l4wAAAAQ"]
[Sun Feb 08 06:36:49.455751 2026] [proxy_fcgi:error] [pid 56906:tid 56919] [client 20.151.2.11:43990] AH01071: Got error 'Primary script unknown'
[Sun Feb 08 06:36:49.668813 2026] [proxy_fcgi:error] [pid 56906:tid 56926] [client 20.151.2.11:43990] AH01071: Got error 'Primary script unknown'
[Sun Feb 08 06:36:49.879453 2026] [proxy_fcgi:error] [pid 56906:tid 56924] [client 20.151.2.11:43990] AH01071: Got error 'Primary script unknown'
[Sun Feb 08 06:36:50.089910 2026] [proxy_fcgi:error] [pid 56906:tid 56930] [client 20.151.2.11:43990] AH01071: Got error 'Primary script unknown'
[Sun Feb 08 06:36:50.301231 2026] [proxy_fcgi:error] [pid 56906:tid 56920] [client 20.151.2.11:43990] AH01071: Got error 'Primary script unknown'
[Sun Feb 08 06:36:50.509323 2026] [proxy_fcgi:error] [pid 56906:tid 56914] [client 20.151.2.11:43990] AH01071: Got error 'Primary script unknown'
[Sun Feb 08 06:36:50.722013 2026] [proxy_fcgi:error] [pid 56906:tid 56912] [client 20.151.2.11:43990] AH01071: Got error 'Primary script unknown'
[Sun Feb 08 06:36:50.931796 2026] [proxy_fcgi:error] [pid 56906:tid 56918] [client 20.151.2.11:43990] AH01071: Got error 'Primary script unknown'
[Sun Feb 08 06:36:51.147626 2026] [proxy_fcgi:error] [pid 56906:tid 56915] [client 20.151.2.11:43990] AH01071: Got error 'Primary script unknown'
[Sun Feb 08 07:23:04.790570 2026] [proxy_fcgi:error] [pid 24423:tid 24509] [client 20.203.129.2:24250] AH01071: Got error 'Primary script unknown'
[Sun Feb 08 07:23:05.042934 2026] [proxy_fcgi:error] [pid 24423:tid 24503] [client 20.203.129.2:24250] AH01071: Got error 'Primary script unknown'
[Sun Feb 08 07:23:05.283357 2026] [proxy_fcgi:error] [pid 24423:tid 24499] [client 20.203.129.2:24250] AH01071: Got error 'Primary script unknown'
[Sun Feb 08 07:23:05.586083 2026] [proxy_fcgi:error] [pid 24423:tid 24491] [client 20.203.129.2:24250] AH01071: Got error 'Primary script unknown'
[Sun Feb 08 07:23:05.825752 2026] [proxy_fcgi:error] [pid 24423:tid 24485] [client 20.203.129.2:24250] AH01071: Got error 'Primary script unknown'
[Sun Feb 08 07:23:06.065563 2026] [proxy_fcgi:error] [pid 24423:tid 24502] [client 20.203.129.2:24250] AH01071: Got error 'Primary script unknown'
[Sun Feb 08 07:23:06.309266 2026] [proxy_fcgi:error] [pid 24423:tid 24506] [client 20.203.129.2:24250] AH01071: Got error 'Primary script unknown'
[Sun Feb 08 07:23:06.550002 2026] [proxy_fcgi:error] [pid 24423:tid 24504] [client 20.203.129.2:24250] AH01071: Got error 'Primary script unknown'
[Sun Feb 08 07:23:06.797454 2026] [proxy_fcgi:error] [pid 24423:tid 24496] [client 20.203.129.2:24250] AH01071: Got error 'Primary script unknown'
[Sun Feb 08 08:41:07.422622 2026] [proxy_fcgi:error] [pid 24422:tid 24468] [client 172.213.144.187:65286] AH01071: Got error 'Primary script unknown'
[Sun Feb 08 08:41:07.660585 2026] [proxy_fcgi:error] [pid 24422:tid 24471] [client 172.213.144.187:65286] AH01071: Got error 'Primary script unknown'
[Sun Feb 08 08:41:07.896672 2026] [proxy_fcgi:error] [pid 24422:tid 24478] [client 172.213.144.187:65286] AH01071: Got error 'Primary script unknown'
[Sun Feb 08 09:05:47.459719 2026] [proxy_fcgi:error] [pid 24423:tid 24492] [client 20.196.219.147:48729] AH01071: Got error 'Primary script unknown'
[Sun Feb 08 09:05:47.613249 2026] [proxy_fcgi:error] [pid 24423:tid 24502] [client 20.196.219.147:48729] AH01071: Got error 'Primary script unknown'
[Sun Feb 08 09:05:47.756323 2026] [proxy_fcgi:error] [pid 24423:tid 24500] [client 20.196.219.147:48729] AH01071: Got error 'Primary script unknown'
[Sun Feb 08 09:05:47.902046 2026] [proxy_fcgi:error] [pid 24423:tid 24501] [client 20.196.219.147:48729] AH01071: Got error 'Primary script unknown'
[Sun Feb 08 09:05:48.040316 2026] [proxy_fcgi:error] [pid 24423:tid 24495] [client 20.196.219.147:48729] AH01071: Got error 'Primary script unknown'
[Sun Feb 08 09:05:48.209415 2026] [proxy_fcgi:error] [pid 24423:tid 24499] [client 20.196.219.147:48729] AH01071: Got error 'Primary script unknown'
[Sun Feb 08 09:05:48.349952 2026] [proxy_fcgi:error] [pid 24423:tid 24503] [client 20.196.219.147:48729] AH01071: Got error 'Primary script unknown'
[Sun Feb 08 09:05:48.516015 2026] [proxy_fcgi:error] [pid 24423:tid 24491] [client 20.196.219.147:48729] AH01071: Got error 'Primary script unknown'
[Sun Feb 08 09:05:51.596873 2026] [proxy_fcgi:error] [pid 24423:tid 24488] [client 20.196.219.147:48729] AH01071: Got error 'Primary script unknown'
[Sun Feb 08 09:05:51.738862 2026] [proxy_fcgi:error] [pid 24423:tid 24498] [client 20.196.219.147:48729] AH01071: Got error 'Primary script unknown'
[Sun Feb 08 09:05:52.033819 2026] [:error] [pid 24423:tid 24486] [client 20.196.219.147:48729] [client 20.196.219.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cloud.php"] [unique_id "aYfhcE3f9n1Y0TpV5YbMzQAAAIE"]
[Sun Feb 08 09:05:55.139356 2026] [:error] [pid 24421:tid 24445] [client 20.196.219.147:3114] [client 20.196.219.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cloud.php"] [unique_id "aYfhc6p7cTzhX5M1IP96EQAAAA4"]
[Sun Feb 08 09:05:59.337645 2026] [:error] [pid 24423:tid 24496] [client 20.196.219.147:21146] [client 20.196.219.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cloud.php"] [unique_id "aYfhd03f9n1Y0TpV5YbM3AAAAIs"]
[Sun Feb 08 09:06:12.382729 2026] [:error] [pid 56906:tid 56918] [client 20.196.219.147:52613] [client 20.196.219.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file7.php"] [unique_id "aYfhhPxl3WX27-WXfDgOBQAAAQo"]
[Sun Feb 08 09:06:15.939018 2026] [:error] [pid 24530:tid 24556] [client 20.196.219.147:61548] [client 20.196.219.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file7.php"] [unique_id "aYfhh0azNRCs1GRWrh5B8QAAANg"]
[Sun Feb 08 09:06:19.431060 2026] [:error] [pid 24423:tid 24500] [client 20.196.219.147:42903] [client 20.196.219.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file7.php"] [unique_id "aYfhi03f9n1Y0TpV5YbNIwAAAI8"]
[Sun Feb 08 09:06:21.578931 2026] [:error] [pid 56906:tid 56912] [client 20.196.219.147:17050] [client 20.196.219.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file7.php"] [unique_id "aYfhjfxl3WX27-WXfDgOLQAAAQQ"]
[Sun Feb 08 09:06:27.242626 2026] [:error] [pid 24422:tid 24460] [client 20.196.219.147:61546] [client 20.196.219.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/makeasmtp.php"] [unique_id "aYfhkyNNjcLoSCLKhTfa-QAAAEI"]
[Sun Feb 08 09:06:30.281269 2026] [:error] [pid 56906:tid 56921] [client 20.196.219.147:61553] [client 20.196.219.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/makeasmtp.php"] [unique_id "aYfhlvxl3WX27-WXfDgOSwAAAQ0"]
[Sun Feb 08 09:06:34.394164 2026] [:error] [pid 56906:tid 56932] [client 20.196.219.147:3399] [client 20.196.219.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/makeasmtp.php"] [unique_id "aYfhmvxl3WX27-WXfDgOVQAAARg"]
[Sun Feb 08 09:06:38.628693 2026] [:error] [pid 24422:tid 24461] [client 20.196.219.147:42884] [client 20.196.219.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/plugin.php"] [unique_id "aYfhniNNjcLoSCLKhTfbCAAAAEM"]
[Sun Feb 08 09:06:44.968013 2026] [:error] [pid 24421:tid 24441] [client 20.196.219.147:61618] [client 20.196.219.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/plugin.php"] [unique_id "aYfhpKp7cTzhX5M1IP96iAAAAAo"]
[Sun Feb 08 09:06:47.605259 2026] [:error] [pid 56906:tid 56928] [client 20.196.219.147:61620] [client 20.196.219.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/plugin.php"] [unique_id "aYfhp_xl3WX27-WXfDgOaAAAARQ"]
[Sun Feb 08 09:06:50.341700 2026] [:error] [pid 24423:tid 24497] [client 20.196.219.147:22898] [client 20.196.219.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/plugin.php"] [unique_id "aYfhqk3f9n1Y0TpV5YbNpgAAAIw"]
[Sun Feb 08 09:06:53.457380 2026] [proxy_fcgi:error] [pid 24423:tid 24502] [client 20.196.219.147:40119] AH01071: Got error 'Primary script unknown'
[Sun Feb 08 09:06:53.604000 2026] [proxy_fcgi:error] [pid 24423:tid 24488] [client 20.196.219.147:40119] AH01071: Got error 'Primary script unknown'
[Sun Feb 08 09:06:53.758972 2026] [proxy_fcgi:error] [pid 24423:tid 24498] [client 20.196.219.147:40119] AH01071: Got error 'Primary script unknown'
[Sun Feb 08 09:06:53.897904 2026] [proxy_fcgi:error] [pid 24423:tid 24497] [client 20.196.219.147:40119] AH01071: Got error 'Primary script unknown'
[Sun Feb 08 09:06:54.099620 2026] [proxy_fcgi:error] [pid 24423:tid 24500] [client 20.196.219.147:40119] AH01071: Got error 'Primary script unknown'
[Sun Feb 08 09:06:54.241391 2026] [proxy_fcgi:error] [pid 24423:tid 24493] [client 20.196.219.147:40119] AH01071: Got error 'Primary script unknown'
[Sun Feb 08 09:06:54.381272 2026] [proxy_fcgi:error] [pid 24423:tid 24508] [client 20.196.219.147:40119] AH01071: Got error 'Primary script unknown'
[Sun Feb 08 09:06:54.631465 2026] [proxy_fcgi:error] [pid 24423:tid 24499] [client 20.196.219.147:40119] AH01071: Got error 'Primary script unknown'
[Sun Feb 08 09:06:54.870068 2026] [proxy_fcgi:error] [pid 24423:tid 24504] [client 20.196.219.147:40119] AH01071: Got error 'Primary script unknown'
[Sun Feb 08 09:06:55.021065 2026] [proxy_fcgi:error] [pid 24423:tid 24506] [client 20.196.219.147:40119] AH01071: Got error 'Primary script unknown'
[Sun Feb 08 09:06:55.173503 2026] [proxy_fcgi:error] [pid 24423:tid 24509] [client 20.196.219.147:40119] AH01071: Got error 'Primary script unknown'
[Sun Feb 08 09:06:55.309485 2026] [:error] [pid 24423:tid 24490] [client 20.196.219.147:40119] [client 20.196.219.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/log.php"] [unique_id "aYfhr03f9n1Y0TpV5YbNvgAAAIU"]
[Sun Feb 08 09:07:09.495826 2026] [:error] [pid 24421:tid 24441] [client 20.196.219.147:39769] [client 20.196.219.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/log.php"] [unique_id "aYfhvap7cTzhX5M1IP96vQAAAAo"]
[Sun Feb 08 09:07:11.383482 2026] [:error] [pid 24530:tid 24552] [client 20.196.219.147:14006] [client 20.196.219.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/log.php"] [unique_id "aYfhv0azNRCs1GRWrh5CdQAAANQ"]
[Sun Feb 08 09:07:42.224291 2026] [:error] [pid 56906:tid 56931] [client 20.196.219.147:42605] [client 20.196.219.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/system_log.php"] [unique_id "aYfh3vxl3WX27-WXfDgO4AAAARc"]
[Sun Feb 08 09:07:44.771564 2026] [:error] [pid 24422:tid 24475] [client 20.196.219.147:61597] [client 20.196.219.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/system_log.php"] [unique_id "aYfh4CNNjcLoSCLKhTfbWgAAAFE"]
[Sun Feb 08 09:07:49.259897 2026] [:error] [pid 24421:tid 24433] [client 20.196.219.147:35383] [client 20.196.219.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/system_log.php"] [unique_id "aYfh5ap7cTzhX5M1IP968gAAAAI"]
[Sun Feb 08 09:07:50.839437 2026] [:error] [pid 24530:tid 24551] [client 20.196.219.147:15603] [client 20.196.219.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dwelectservices.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aYfh5kazNRCs1GRWrh5CrwAAANM"]
[Sun Feb 08 09:07:56.732166 2026] [proxy_fcgi:error] [pid 24530:tid 24541] [client 20.196.219.147:27494] AH01071: Got error 'Primary script unknown'
[Sun Feb 08 09:07:56.877270 2026] [proxy_fcgi:error] [pid 24530:tid 24546] [client 20.196.219.147:27494] AH01071: Got error 'Primary script unknown'
[Sun Feb 08 09:07:57.019880 2026] [proxy_fcgi:error] [pid 24530:tid 24555] [client 20.196.219.147:27494] AH01071: Got error 'Primary script unknown'
[Sun Feb 08 09:07:57.168256 2026] [proxy_fcgi:error] [pid 24530:tid 24556] [client 20.196.219.147:27494] AH01071: Got error 'Primary script unknown'
[Sun Feb 08 09:07:57.531507 2026] [proxy_fcgi:error] [pid 24530:tid 24535] [client 20.196.219.147:27494] AH01071: Got error 'Primary script unknown'
[Sun Feb 08 09:07:57.670473 2026] [proxy_fcgi:error] [pid 24530:tid 24537] [client 20.196.219.147:27494] AH01071: Got error 'Primary script unknown'
[Sun Feb 08 09:07:58.027759 2026] [proxy_fcgi:error] [pid 24530:tid 24548] [client 20.196.219.147:27494] AH01071: Got error 'Primary script unknown'
[Sun Feb 08 09:07:58.190637 2026] [proxy_fcgi:error] [pid 24530:tid 24536] [client 20.196.219.147:27494] AH01071: Got error 'Primary script unknown'
[Sun Feb 08 09:07:58.350311 2026] [proxy_fcgi:error] [pid 24530:tid 24540] [client 20.196.219.147:27494] AH01071: Got error 'Primary script unknown'
[Sun Feb 08 09:07:58.572212 2026] [proxy_fcgi:error] [pid 24530:tid 24553] [client 20.196.219.147:27494] AH01071: Got error 'Primary script unknown'
[Sun Feb 08 09:07:58.711983 2026] [proxy_fcgi:error] [pid 24530:tid 24551] [client 20.196.219.147:27494] AH01071: Got error 'Primary script unknown'
[Sun Feb 08 09:07:58.851524 2026] [:error] [pid 24530:tid 24549] [client 20.196.219.147:27494] [client 20.196.219.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wsoyanz1.php"] [unique_id "aYfh7kazNRCs1GRWrh5C0AAAANE"]
[Sun Feb 08 09:08:43.955215 2026] [:error] [pid 24530:tid 24540] [client 20.196.219.147:3630] [client 20.196.219.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file8.php"] [unique_id "aYfiG0azNRCs1GRWrh5DDgAAAMg"]
[Sun Feb 08 09:08:48.619717 2026] [:error] [pid 56906:tid 56925] [client 20.196.219.147:29331] [client 20.196.219.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/system.php"] [unique_id "aYfiIPxl3WX27-WXfDgPbAAAARE"]
[Sun Feb 08 09:08:53.851820 2026] [:error] [pid 24421:tid 24442] [client 20.196.219.147:34847] [client 20.196.219.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/system.php"] [unique_id "aYfiJap7cTzhX5M1IP97WAAAAAs"]
[Sun Feb 08 09:08:58.390378 2026] [proxy_fcgi:error] [pid 56906:tid 56932] [client 20.196.219.147:42819] AH01071: Got error 'Primary script unknown'
[Sun Feb 08 09:08:58.547802 2026] [proxy_fcgi:error] [pid 56906:tid 56926] [client 20.196.219.147:42819] AH01071: Got error 'Primary script unknown'
[Sun Feb 08 09:08:58.687787 2026] [proxy_fcgi:error] [pid 56906:tid 56930] [client 20.196.219.147:42819] AH01071: Got error 'Primary script unknown'
[Sun Feb 08 09:08:58.828110 2026] [proxy_fcgi:error] [pid 56906:tid 56921] [client 20.196.219.147:42819] AH01071: Got error 'Primary script unknown'
[Sun Feb 08 09:08:58.967977 2026] [proxy_fcgi:error] [pid 56906:tid 56918] [client 20.196.219.147:42819] AH01071: Got error 'Primary script unknown'
[Sun Feb 08 09:08:59.106775 2026] [proxy_fcgi:error] [pid 56906:tid 56909] [client 20.196.219.147:42819] AH01071: Got error 'Primary script unknown'
[Sun Feb 08 09:08:59.245327 2026] [proxy_fcgi:error] [pid 56906:tid 56916] [client 20.196.219.147:42819] AH01071: Got error 'Primary script unknown'
[Sun Feb 08 09:08:59.385851 2026] [proxy_fcgi:error] [pid 56906:tid 56920] [client 20.196.219.147:42819] AH01071: Got error 'Primary script unknown'
[Sun Feb 08 09:08:59.936117 2026] [proxy_fcgi:error] [pid 56906:tid 56923] [client 20.196.219.147:42819] AH01071: Got error 'Primary script unknown'
[Sun Feb 08 09:09:00.101814 2026] [proxy_fcgi:error] [pid 56906:tid 56912] [client 20.196.219.147:42819] AH01071: Got error 'Primary script unknown'
[Sun Feb 08 09:09:00.237409 2026] [:error] [pid 56906:tid 56932] [client 20.196.219.147:42819] [client 20.196.219.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-configss.php"] [unique_id "aYfiLPxl3WX27-WXfDgPjAAAARg"]
[Sun Feb 08 09:09:01.268346 2026] [:error] [pid 56906:tid 56921] [client 20.196.219.147:40587] [client 20.196.219.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-configss.php"] [unique_id "aYfiLfxl3WX27-WXfDgPkwAAAQ0"]
[Sun Feb 08 09:09:03.561400 2026] [:error] [pid 24421:tid 24448] [client 20.196.219.147:3876] [client 20.196.219.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-configss.php"] [unique_id "aYfiL6p7cTzhX5M1IP97YAAAABE"]
[Sun Feb 08 09:09:04.899998 2026] [:error] [pid 24530:tid 24552] [client 20.196.219.147:52226] [client 20.196.219.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-configss.php"] [unique_id "aYfiMEazNRCs1GRWrh5DdgAAANQ"]
[Sun Feb 08 09:09:15.652719 2026] [:error] [pid 24422:tid 24472] [client 20.196.219.147:3594] [client 20.196.219.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Mhbgf.php"] [unique_id "aYfiOyNNjcLoSCLKhTfb4QAAAE4"]
[Sun Feb 08 09:09:16.515701 2026] [:error] [pid 24423:tid 24504] [client 20.196.219.147:61585] [client 20.196.219.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Mhbgf.php"] [unique_id "aYfiPE3f9n1Y0TpV5YbO1AAAAJM"]
[Sun Feb 08 09:09:26.256408 2026] [:error] [pid 24421:tid 24440] [client 20.196.219.147:15613] [client 20.196.219.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/w.php"] [unique_id "aYfiRqp7cTzhX5M1IP97mAAAAAk"]
[Sun Feb 08 09:09:30.681679 2026] [:error] [pid 24421:tid 24453] [client 20.196.219.147:63809] [client 20.196.219.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/w.php"] [unique_id "aYfiSqp7cTzhX5M1IP97owAAABY"]
[Sun Feb 08 09:09:34.338434 2026] [:error] [pid 24421:tid 24449] [client 20.196.219.147:30436] [client 20.196.219.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/w.php"] [unique_id "aYfiTqp7cTzhX5M1IP97rQAAABI"]
[Sun Feb 08 09:09:40.137266 2026] [:error] [pid 56906:tid 56921] [client 20.196.219.147:35347] [client 20.196.219.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin2.php"] [unique_id "aYfiVPxl3WX27-WXfDgQEAAAAQ0"]
[Sun Feb 08 09:09:42.901055 2026] [:error] [pid 56906:tid 56913] [client 20.196.219.147:36460] [client 20.196.219.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin2.php"] [unique_id "aYfiVvxl3WX27-WXfDgQGQAAAQU"]
[Sun Feb 08 09:09:44.054784 2026] [:error] [pid 24423:tid 24488] [client 20.196.219.147:12960] [client 20.196.219.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin2.php"] [unique_id "aYfiWE3f9n1Y0TpV5YbO8gAAAIM"]
[Sun Feb 08 09:09:48.168882 2026] [:error] [pid 24421:tid 24441] [client 20.196.219.147:27510] [client 20.196.219.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin2.php"] [unique_id "aYfiXKp7cTzhX5M1IP97vgAAAAo"]
[Sun Feb 08 09:09:49.481584 2026] [:error] [pid 24421:tid 24434] [client 20.196.219.147:27512] [client 20.196.219.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/about.php"] [unique_id "aYfiXap7cTzhX5M1IP97wAAAAAM"]
[Sun Feb 08 09:09:51.143523 2026] [:error] [pid 24421:tid 24443] [client 20.196.219.147:36456] [client 20.196.219.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/about.php"] [unique_id "aYfiX6p7cTzhX5M1IP97ygAAAAw"]
[Sun Feb 08 09:09:52.496653 2026] [:error] [pid 24530:tid 24537] [client 20.196.219.147:3984] [client 20.196.219.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/about.php"] [unique_id "aYfiYEazNRCs1GRWrh5DzgAAAMU"]
[Sun Feb 08 09:09:52.976027 2026] [:error] [pid 24421:tid 24448] [client 20.196.219.147:22888] [client 20.196.219.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/about.php"] [unique_id "aYfiYKp7cTzhX5M1IP970AAAABE"]
[Sun Feb 08 09:09:56.075856 2026] [:error] [pid 56906:tid 56928] [client 20.196.219.147:35346] [client 20.196.219.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/berlin.php"] [unique_id "aYfiZPxl3WX27-WXfDgQKwAAARQ"]
[Sun Feb 08 09:09:58.602506 2026] [:error] [pid 24422:tid 24469] [client 20.196.219.147:35339] [client 20.196.219.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/berlin.php"] [unique_id "aYfiZiNNjcLoSCLKhTfcNwAAAEs"]
[Sun Feb 08 09:10:02.507347 2026] [proxy_fcgi:error] [pid 24421:tid 24442] [client 20.196.219.147:12964] AH01071: Got error 'Primary script unknown'
[Sun Feb 08 09:10:03.072605 2026] [proxy_fcgi:error] [pid 24421:tid 24434] [client 20.196.219.147:12964] AH01071: Got error 'Primary script unknown'
[Sun Feb 08 09:10:03.230997 2026] [proxy_fcgi:error] [pid 24421:tid 24437] [client 20.196.219.147:12964] AH01071: Got error 'Primary script unknown'
[Sun Feb 08 09:10:03.520950 2026] [proxy_fcgi:error] [pid 24421:tid 24433] [client 20.196.219.147:12964] AH01071: Got error 'Primary script unknown'
[Sun Feb 08 09:10:03.659884 2026] [proxy_fcgi:error] [pid 24421:tid 24453] [client 20.196.219.147:12964] AH01071: Got error 'Primary script unknown'
[Sun Feb 08 09:10:03.959242 2026] [proxy_fcgi:error] [pid 24421:tid 24448] [client 20.196.219.147:12964] AH01071: Got error 'Primary script unknown'
[Sun Feb 08 09:10:04.115984 2026] [proxy_fcgi:error] [pid 24421:tid 24436] [client 20.196.219.147:12964] AH01071: Got error 'Primary script unknown'
[Sun Feb 08 09:10:04.520087 2026] [proxy_fcgi:error] [pid 24421:tid 24447] [client 20.196.219.147:12964] AH01071: Got error 'Primary script unknown'
[Sun Feb 08 09:10:04.676735 2026] [proxy_fcgi:error] [pid 24421:tid 24435] [client 20.196.219.147:12964] AH01071: Got error 'Primary script unknown'
[Sun Feb 08 09:10:04.822800 2026] [:error] [pid 24421:tid 24452] [client 20.196.219.147:12964] [client 20.196.219.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/autoload_classmap.php"] [unique_id "aYfibKp7cTzhX5M1IP978wAAABU"]
[Sun Feb 08 09:10:09.900925 2026] [:error] [pid 56906:tid 56915] [client 20.196.219.147:43701] [client 20.196.219.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/autoload_classmap.php"] [unique_id "aYficfxl3WX27-WXfDgQXAAAAQc"]
[Sun Feb 08 09:10:12.107872 2026] [:error] [pid 24421:tid 24446] [client 20.196.219.147:42398] [client 20.196.219.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/autoload_classmap.php"] [unique_id "aYfidKp7cTzhX5M1IP98AAAAAA8"]
[Sun Feb 08 09:10:13.460520 2026] [:error] [pid 24423:tid 24500] [client 20.196.219.147:3477] [client 20.196.219.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/autoload_classmap.php"] [unique_id "aYfidU3f9n1Y0TpV5YbPFwAAAI8"]
[Sun Feb 08 09:10:23.809545 2026] [:error] [pid 56906:tid 56914] [client 20.196.219.147:18134] [client 20.196.219.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/up.php"] [unique_id "aYfif_xl3WX27-WXfDgQlAAAAQY"]
[Sun Feb 08 09:10:24.406919 2026] [:error] [pid 56906:tid 56925] [client 20.196.219.147:42425] [client 20.196.219.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/up.php"] [unique_id "aYfigPxl3WX27-WXfDgQlgAAARE"]
[Sun Feb 08 09:10:25.723396 2026] [:error] [pid 56906:tid 56929] [client 20.196.219.147:42677] [client 20.196.219.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/up.php"] [unique_id "aYfigfxl3WX27-WXfDgQnwAAARU"]
[Sun Feb 08 09:10:43.634483 2026] [:error] [pid 24423:tid 24507] [client 20.196.219.147:31972] [client 20.196.219.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-files.php"] [unique_id "aYfik03f9n1Y0TpV5YbPQwAAAJY"]
[Sun Feb 08 09:10:45.540298 2026] [:error] [pid 24422:tid 24470] [client 20.196.219.147:21656] [client 20.196.219.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-files.php"] [unique_id "aYfilSNNjcLoSCLKhTfcgwAAAEw"]
[Sun Feb 08 09:10:49.022634 2026] [:error] [pid 24421:tid 24435] [client 20.196.219.147:30372] [client 20.196.219.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-files.php"] [unique_id "aYfimap7cTzhX5M1IP98UgAAAAQ"]
[Sun Feb 08 09:10:58.636883 2026] [:error] [pid 56906:tid 56921] [client 20.196.219.147:61641] [client 20.196.219.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-files.php"] [unique_id "aYfiovxl3WX27-WXfDgQ2gAAAQ0"]
[Sun Feb 08 09:11:09.619143 2026] [:error] [pid 24421:tid 24431] [client 20.196.219.147:21677] [client 20.196.219.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dwelectservices.com.au"] [uri "/filemanager.php"] [unique_id "aYfirap7cTzhX5M1IP98awAAAAA"]
[Sun Feb 08 09:11:19.187620 2026] [proxy_fcgi:error] [pid 24421:tid 24450] [client 20.196.219.147:30343] AH01071: Got error 'Primary script unknown'
[Sun Feb 08 12:28:29.363604 2026] [:error] [pid 24530:tid 24545] [client 159.223.11.97:53521] [client 159.223.11.97] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.223.11.97, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-login.php"] [unique_id "aYgQ7UazNRCs1GRWrh6JwAAAAM0"]
[Sun Feb 08 12:28:29.374220 2026] [proxy_fcgi:error] [pid 24530:tid 24545] [client 159.223.11.97:53521] AH01071: Got error 'Primary script unknown'
[Sun Feb 08 13:54:20.265902 2026] [:error] [pid 43900:tid 43913] [client 165.22.213.62:64122] [client 165.22.213.62] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 165.22.213.62, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-login.php"] [unique_id "aYglDOWrhnpm_Csk3klM1AAAAUo"]
[Sun Feb 08 13:54:20.275366 2026] [proxy_fcgi:error] [pid 43900:tid 43913] [client 165.22.213.62:64122] AH01071: Got error 'Primary script unknown'
[Sun Feb 08 22:16:43.193007 2026] [:error] [pid 6630:tid 6649] [client 34.11.226.48:55522] [client 34.11.226.48] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.git/config"] [unique_id "aYiay52jf0FBTEb_cWT5xgAAAhA"]
[Mon Feb 09 05:32:16.561624 2026] [:error] [pid 47939:tid 48027] [client 34.82.223.73:42996] [client 34.82.223.73] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.git/config"] [unique_id "aYkA4NkpZei8M7cJ2z09mAAAAJU"]
[Mon Feb 09 06:25:11.982611 2026] [:error] [pid 48044:tid 48065] [client 195.178.110.223:43380] [client 195.178.110.223] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.git/config"] [unique_id "aYkNR5vmvsMP5E03sZLhswAAANM"]
[Mon Feb 09 07:17:23.557628 2026] [:error] [pid 60619:tid 60653] [client 195.178.110.223:60868] [client 195.178.110.223] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dwelectservices.com.au"] [uri "/.git/config"] [unique_id "aYkZg3Epg0UoeR8kJ-1h4QAAAkk"]
[Mon Feb 09 22:22:19.763616 2026] [:error] [pid 60677:tid 60731] [client 34.171.102.41:60737] [client 34.171.102.41] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.171.102.41, incrementing ddos counter"] [hostname "dwelectservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aYntm1yBgzfmDf6GaesCtwAAAsw"]
[Mon Feb 09 22:22:19.773819 2026] [proxy_fcgi:error] [pid 60677:tid 60731] [client 34.171.102.41:60737] AH01071: Got error 'Primary script unknown'
[Mon Feb 09 22:22:22.481205 2026] [:error] [pid 60677:tid 60712] [client 34.171.102.41:60737] [client 34.171.102.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aYntnlyBgzfmDf6GaesCwwAAAsE"]
[Mon Feb 09 22:22:22.909173 2026] [:error] [pid 60619:tid 60661] [client 34.171.102.41:64229] [client 34.171.102.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aYntnnEpg0UoeR8kJ-1frAAAAkw"]
[Mon Feb 09 22:22:23.402819 2026] [:error] [pid 47938:tid 47983] [client 34.171.102.41:65248] [client 34.171.102.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aYntn7VCzWE6fQJEkNJPegAAAEQ"]
[Mon Feb 09 22:22:23.808879 2026] [:error] [pid 60677:tid 60737] [client 34.171.102.41:55695] [client 34.171.102.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aYntn1yBgzfmDf6GaesCxAAAAs0"]
[Mon Feb 09 22:22:24.227747 2026] [:error] [pid 60676:tid 60684] [client 34.171.102.41:52420] [client 34.171.102.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aYntoHhKcn7mJYMx5_C1xQAAAoA"]
[Mon Feb 09 22:22:24.696929 2026] [:error] [pid 60677:tid 60717] [client 34.171.102.41:50158] [client 34.171.102.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aYntoFyBgzfmDf6GaesCxgAAAsY"]
[Mon Feb 09 22:22:25.182812 2026] [:error] [pid 60677:tid 60762] [client 34.171.102.41:64987] [client 34.171.102.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aYntoVyBgzfmDf6GaesCyAAAAtQ"]
[Tue Feb 10 06:30:46.319149 2026] [:error] [pid 30054:tid 30066] [client 45.139.104.214:55822] [client 45.139.104.214] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dwelectservices.com.au"] [uri "/.env"] [unique_id "aYpgFmecgOOXCu-GgYU5lwAAAQo"]
[Tue Feb 10 08:36:03.288904 2026] [:error] [pid 47937:tid 47945] [client 136.144.43.29:64123] [client 136.144.43.29] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.144.43.29, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-login.php"] [unique_id "aYp9c8pqXpC2CvJ3fOPcuwAAAMY"]
[Tue Feb 10 08:36:03.300744 2026] [proxy_fcgi:error] [pid 47937:tid 47945] [client 136.144.43.29:64123] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 06:20:41.873719 2026] [:error] [pid 22569:tid 22595] [client 217.77.10.74:64947] [client 217.77.10.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/"] [unique_id "aYuvOcAhSI7iX9G3enhZ_gAAAZY"]
[Wed Feb 11 17:10:51.924653 2026] [proxy_fcgi:error] [pid 27966:tid 28036] [client 20.203.132.38:55548] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 17:10:52.183400 2026] [proxy_fcgi:error] [pid 27966:tid 28050] [client 20.203.132.38:55548] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 17:10:52.439073 2026] [proxy_fcgi:error] [pid 27966:tid 28043] [client 20.203.132.38:55548] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 17:10:52.899148 2026] [proxy_fcgi:error] [pid 27966:tid 28051] [client 20.203.132.38:55548] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 17:10:53.150637 2026] [proxy_fcgi:error] [pid 27966:tid 28054] [client 20.203.132.38:55548] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 17:10:53.392335 2026] [proxy_fcgi:error] [pid 27966:tid 28041] [client 20.203.132.38:55548] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 17:10:53.640909 2026] [proxy_fcgi:error] [pid 27966:tid 28030] [client 20.203.132.38:55548] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 17:10:53.889578 2026] [proxy_fcgi:error] [pid 27966:tid 28048] [client 20.203.132.38:55548] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 17:10:54.222622 2026] [proxy_fcgi:error] [pid 27966:tid 28049] [client 20.203.132.38:55548] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 17:10:54.641067 2026] [proxy_fcgi:error] [pid 27966:tid 28052] [client 20.203.132.38:55548] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 17:10:54.888074 2026] [:error] [pid 27966:tid 28034] [client 20.203.132.38:55548] [client 20.203.132.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/test.php"] [unique_id "aYxHnl8HJ9ydyf0SPu6DTwAAAIQ"]
[Wed Feb 11 17:10:57.313342 2026] [:error] [pid 27966:tid 28033] [client 20.203.132.38:34089] [client 20.203.132.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/test.php"] [unique_id "aYxHoV8HJ9ydyf0SPu6DUAAAAIM"]
[Wed Feb 11 17:10:59.210292 2026] [:error] [pid 22569:tid 22591] [client 20.203.132.38:27280] [client 20.203.132.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/test.php"] [unique_id "aYxHo8AhSI7iX9G3engGVgAAAZI"]
[Wed Feb 11 17:11:03.636322 2026] [:error] [pid 28073:tid 28080] [client 20.203.132.38:18795] [client 20.203.132.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/test.php"] [unique_id "aYxHp4eHYIlOlF-DsMyMZwAAAMU"]
[Wed Feb 11 17:11:15.359420 2026] [:error] [pid 27965:tid 28018] [client 20.203.132.38:38272] [client 20.203.132.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/default.php"] [unique_id "aYxHs9HLAUAIo8qpZyEr8gAAAE8"]
[Wed Feb 11 17:11:26.298283 2026] [:error] [pid 27964:tid 27996] [client 20.203.132.38:41293] [client 20.203.132.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ty.php"] [unique_id "aYxHvsp0XgWYHLcQtEijMwAAABU"]
[Wed Feb 11 17:11:35.484499 2026] [:error] [pid 27964:tid 27975] [client 20.203.132.38:44407] [client 20.203.132.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ty.php"] [unique_id "aYxHx8p0XgWYHLcQtEijPAAAAAA"]
[Wed Feb 11 17:11:39.034803 2026] [:error] [pid 22570:tid 22622] [client 20.203.132.38:38383] [client 20.203.132.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/m.php"] [unique_id "aYxHyyE5uSe043FXwQpEewAAAdY"]
[Wed Feb 11 17:11:47.231109 2026] [:error] [pid 22569:tid 22589] [client 20.203.132.38:34638] [client 20.203.132.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/m.php"] [unique_id "aYxH08AhSI7iX9G3engGowAAAZA"]
[Wed Feb 11 17:11:49.109117 2026] [:error] [pid 28073:tid 28089] [client 20.203.132.38:50777] [client 20.203.132.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/m.php"] [unique_id "aYxH1YeHYIlOlF-DsMyMtQAAAM4"]
[Wed Feb 11 17:11:51.005256 2026] [:error] [pid 22537:tid 22563] [client 20.203.132.38:51343] [client 20.203.132.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/m.php"] [unique_id "aYxH1yfg2TagwM3bvQPP_AAAAVg"]
[Wed Feb 11 17:11:57.105714 2026] [proxy_fcgi:error] [pid 27966:tid 28041] [client 20.203.132.38:37668] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 17:11:57.359985 2026] [proxy_fcgi:error] [pid 27966:tid 28052] [client 20.203.132.38:37668] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 17:11:57.600518 2026] [proxy_fcgi:error] [pid 27966:tid 28048] [client 20.203.132.38:37668] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 17:11:57.852501 2026] [proxy_fcgi:error] [pid 27966:tid 28035] [client 20.203.132.38:37668] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 17:11:58.502151 2026] [proxy_fcgi:error] [pid 27966:tid 28037] [client 20.203.132.38:37668] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 17:11:58.742802 2026] [proxy_fcgi:error] [pid 27966:tid 28039] [client 20.203.132.38:37668] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 17:11:58.983074 2026] [proxy_fcgi:error] [pid 27966:tid 28036] [client 20.203.132.38:37668] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 17:11:59.233229 2026] [proxy_fcgi:error] [pid 27966:tid 28030] [client 20.203.132.38:37668] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 17:11:59.492476 2026] [proxy_fcgi:error] [pid 27966:tid 28047] [client 20.203.132.38:37668] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 17:11:59.967517 2026] [proxy_fcgi:error] [pid 27966:tid 28031] [client 20.203.132.38:37668] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 17:12:00.214454 2026] [proxy_fcgi:error] [pid 27966:tid 28044] [client 20.203.132.38:37668] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 17:12:00.460779 2026] [:error] [pid 27966:tid 28038] [client 20.203.132.38:37668] [client 20.203.132.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/as.php"] [unique_id "aYxH4F8HJ9ydyf0SPu6D0wAAAIg"]
[Wed Feb 11 17:12:01.443144 2026] [:error] [pid 22537:tid 22540] [client 20.203.132.38:54520] [client 20.203.132.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/as.php"] [unique_id "aYxH4Sfg2TagwM3bvQPQCQAAAUE"]
[Wed Feb 11 17:12:03.286641 2026] [:error] [pid 22537:tid 22556] [client 20.203.132.38:44936] [client 20.203.132.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/as.php"] [unique_id "aYxH4yfg2TagwM3bvQPQDAAAAVE"]
[Wed Feb 11 17:12:04.245158 2026] [:error] [pid 27966:tid 28037] [client 20.203.132.38:26735] [client 20.203.132.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/as.php"] [unique_id "aYxH5F8HJ9ydyf0SPu6D1wAAAIc"]
[Wed Feb 11 17:12:05.257502 2026] [:error] [pid 22570:tid 22616] [client 20.203.132.38:54761] [client 20.203.132.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/network.php"] [unique_id "aYxH5SE5uSe043FXwQpEhwAAAdA"]
[Wed Feb 11 17:12:09.660339 2026] [:error] [pid 27966:tid 28052] [client 20.203.132.38:54721] [client 20.203.132.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/network.php"] [unique_id "aYxH6V8HJ9ydyf0SPu6D3wAAAJY"]
[Wed Feb 11 17:12:14.366727 2026] [:error] [pid 27966:tid 28051] [client 20.203.132.38:44983] [client 20.203.132.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/network.php"] [unique_id "aYxH7l8HJ9ydyf0SPu6D6wAAAJU"]
[Wed Feb 11 17:12:16.952779 2026] [:error] [pid 22537:tid 22542] [client 20.203.132.38:44979] [client 20.203.132.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/network.php"] [unique_id "aYxH8Cfg2TagwM3bvQPQGAAAAUM"]
[Wed Feb 11 17:12:23.010338 2026] [:error] [pid 27965:tid 28026] [client 20.203.132.38:24851] [client 20.203.132.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/chosen.php"] [unique_id "aYxH99HLAUAIo8qpZyEsKgAAAFc"]
[Wed Feb 11 17:12:31.324711 2026] [:error] [pid 22537:tid 22547] [client 20.203.132.38:27338] [client 20.203.132.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/chosen.php"] [unique_id "aYxH_yfg2TagwM3bvQPQJQAAAUg"]
[Wed Feb 11 17:12:33.813900 2026] [:error] [pid 27966:tid 28045] [client 20.203.132.38:28641] [client 20.203.132.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/byp.php"] [unique_id "aYxIAV8HJ9ydyf0SPu6D9AAAAI8"]
[Wed Feb 11 17:12:35.304625 2026] [:error] [pid 22537:tid 22553] [client 20.203.132.38:42144] [client 20.203.132.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/byp.php"] [unique_id "aYxIAyfg2TagwM3bvQPQJwAAAU4"]
[Wed Feb 11 17:13:48.762157 2026] [proxy_fcgi:error] [pid 22570:tid 22622] [client 20.203.132.38:4049] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 17:13:49.003002 2026] [proxy_fcgi:error] [pid 22570:tid 22603] [client 20.203.132.38:4049] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 17:13:49.244260 2026] [proxy_fcgi:error] [pid 22570:tid 22606] [client 20.203.132.38:4049] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 17:13:49.485417 2026] [proxy_fcgi:error] [pid 22570:tid 22600] [client 20.203.132.38:4049] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 17:13:49.725247 2026] [proxy_fcgi:error] [pid 22570:tid 22617] [client 20.203.132.38:4049] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 17:13:50.058036 2026] [proxy_fcgi:error] [pid 22570:tid 22614] [client 20.203.132.38:4049] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 17:13:50.305645 2026] [proxy_fcgi:error] [pid 22570:tid 22618] [client 20.203.132.38:4049] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 17:13:50.547913 2026] [proxy_fcgi:error] [pid 22570:tid 22608] [client 20.203.132.38:4049] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 17:13:50.800200 2026] [proxy_fcgi:error] [pid 22570:tid 22620] [client 20.203.132.38:4049] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 17:13:51.041665 2026] [proxy_fcgi:error] [pid 22570:tid 22610] [client 20.203.132.38:4049] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 17:13:51.283216 2026] [proxy_fcgi:error] [pid 22570:tid 22613] [client 20.203.132.38:4049] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 17:13:51.523528 2026] [:error] [pid 22570:tid 22612] [client 20.203.132.38:4049] [client 20.203.132.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/footer.php"] [unique_id "aYxITyE5uSe043FXwQpFAgAAAcw"]
[Wed Feb 11 17:13:52.789194 2026] [:error] [pid 28073:tid 28081] [client 20.203.132.38:56144] [client 20.203.132.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/footer.php"] [unique_id "aYxIUIeHYIlOlF-DsMyNSgAAAMY"]
[Wed Feb 11 17:13:54.273561 2026] [:error] [pid 27965:tid 28018] [client 20.203.132.38:56136] [client 20.203.132.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/footer.php"] [unique_id "aYxIUtHLAUAIo8qpZyEscwAAAE8"]
[Wed Feb 11 17:14:00.701890 2026] [:error] [pid 22570:tid 22601] [client 20.203.132.38:56872] [client 20.203.132.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/footer.php"] [unique_id "aYxIWCE5uSe043FXwQpFBgAAAcE"]
[Wed Feb 11 17:14:01.458079 2026] [:error] [pid 27965:tid 28007] [client 20.203.132.38:3414] [client 20.203.132.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/atomlib.php"] [unique_id "aYxIWdHLAUAIo8qpZyEsgAAAAEQ"]
[Wed Feb 11 17:14:03.011958 2026] [:error] [pid 27964:tid 27978] [client 20.203.132.38:56155] [client 20.203.132.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/atomlib.php"] [unique_id "aYxIW8p0XgWYHLcQtEikCQAAAAM"]
[Wed Feb 11 17:14:05.501428 2026] [:error] [pid 22569:tid 22592] [client 20.203.132.38:52730] [client 20.203.132.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/atomlib.php"] [unique_id "aYxIXcAhSI7iX9G3engG_gAAAZM"]
[Wed Feb 11 17:14:06.909205 2026] [:error] [pid 27964:tid 27989] [client 20.203.132.38:42717] [client 20.203.132.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/atomlib.php"] [unique_id "aYxIXsp0XgWYHLcQtEikDwAAAA4"]
[Wed Feb 11 17:14:07.999505 2026] [:error] [pid 17401:tid 17422] [client 20.203.132.38:44467] [client 20.203.132.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x.php"] [unique_id "aYxIXw0lHeayTY40t3496wAAARM"]
[Wed Feb 11 17:14:09.918398 2026] [:error] [pid 22569:tid 22588] [client 20.203.132.38:13502] [client 20.203.132.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x.php"] [unique_id "aYxIYcAhSI7iX9G3engHAQAAAY8"]
[Wed Feb 11 17:14:10.965504 2026] [:error] [pid 28073:tid 28098] [client 20.203.132.38:31105] [client 20.203.132.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x.php"] [unique_id "aYxIYoeHYIlOlF-DsMyNawAAANc"]
[Wed Feb 11 17:14:16.728869 2026] [:error] [pid 28073:tid 28082] [client 20.203.132.38:44468] [client 20.203.132.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x.php"] [unique_id "aYxIaIeHYIlOlF-DsMyNdwAAAMc"]
[Wed Feb 11 22:00:50.228012 2026] [proxy_fcgi:error] [pid 17401:tid 17421] [client 158.158.49.160:43990] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 22:00:50.471275 2026] [proxy_fcgi:error] [pid 17401:tid 17408] [client 158.158.49.160:43990] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 22:00:50.720349 2026] [proxy_fcgi:error] [pid 17401:tid 17426] [client 158.158.49.160:43990] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 22:00:50.970068 2026] [proxy_fcgi:error] [pid 17401:tid 17403] [client 158.158.49.160:43990] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 22:00:51.247324 2026] [proxy_fcgi:error] [pid 17401:tid 17427] [client 158.158.49.160:43990] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 22:00:51.490499 2026] [proxy_fcgi:error] [pid 17401:tid 17411] [client 158.158.49.160:43990] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 22:00:51.733289 2026] [proxy_fcgi:error] [pid 17401:tid 17406] [client 158.158.49.160:43990] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 22:00:51.976467 2026] [proxy_fcgi:error] [pid 17401:tid 17416] [client 158.158.49.160:43990] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 23:54:44.877973 2026] [:error] [pid 27964:tid 27999] [client 34.172.5.63:53513] [client 34.172.5.63] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.172.5.63, incrementing ddos counter"] [hostname "dwelectservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aYymRMp0XgWYHLcQtEgbvwAAABg"]
[Wed Feb 11 23:54:44.886381 2026] [proxy_fcgi:error] [pid 27964:tid 27999] [client 34.172.5.63:53513] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 08:59:33.120594 2026] [proxy_fcgi:error] [pid 50168:tid 50214] [client 172.213.210.252:44720] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 08:59:33.359903 2026] [proxy_fcgi:error] [pid 50168:tid 50207] [client 172.213.210.252:44720] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 08:59:33.600131 2026] [proxy_fcgi:error] [pid 50168:tid 50215] [client 172.213.210.252:44720] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 16:04:40.689382 2026] [proxy_fcgi:error] [pid 21431:tid 21455] [client 20.215.248.189:56499] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 16:04:42.010796 2026] [:error] [pid 21431:tid 21458] [client 20.215.248.189:56499] [client 20.215.248.189] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aY2JmpgxKQsNF5X8gtRqzAAAANY"]
[Thu Feb 12 16:04:46.332822 2026] [:error] [pid 39777:tid 39792] [client 20.215.248.189:57395] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aY2JnlzexR6hGUkt5pOz2gAAAE0"]
[Thu Feb 12 16:04:48.722992 2026] [:error] [pid 21433:tid 21478] [client 20.215.248.189:57896] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aY2JoNc_9AdG3uAKpzvOwwAAAYg"]
[Thu Feb 12 16:04:50.483942 2026] [:error] [pid 39777:tid 39783] [client 20.215.248.189:57865] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aY2JolzexR6hGUkt5pOz4QAAAEQ"]
[Thu Feb 12 16:04:52.780734 2026] [:error] [pid 39777:tid 39801] [client 20.215.248.189:57905] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aY2JpFzexR6hGUkt5pOz6AAAAFY"]
[Thu Feb 12 16:04:56.006798 2026] [:error] [pid 21527:tid 21546] [client 20.215.248.189:57403] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/log.php"] [unique_id "aY2JqCaer9JPUXlMLuGXGQAAABE"]
[Thu Feb 12 16:04:57.815041 2026] [:error] [pid 39777:tid 39782] [client 20.215.248.189:57792] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/log.php"] [unique_id "aY2JqVzexR6hGUkt5pOz8AAAAEM"]
[Thu Feb 12 16:04:59.304504 2026] [:error] [pid 21527:tid 21550] [client 20.215.248.189:57871] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/log.php"] [unique_id "aY2Jqyaer9JPUXlMLuGXMAAAABU"]
[Thu Feb 12 16:05:01.470530 2026] [:error] [pid 21431:tid 21442] [client 20.215.248.189:56465] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/log.php"] [unique_id "aY2JrZgxKQsNF5X8gtRq-AAAAMY"]
[Thu Feb 12 16:05:02.688743 2026] [:error] [pid 39777:tid 39790] [client 20.215.248.189:57362] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class.php"] [unique_id "aY2JrlzexR6hGUkt5pOz_wAAAEs"]
[Thu Feb 12 16:05:05.037503 2026] [:error] [pid 39777:tid 39789] [client 20.215.248.189:55962] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class.php"] [unique_id "aY2JsVzexR6hGUkt5pO0CQAAAEo"]
[Thu Feb 12 16:05:06.930271 2026] [:error] [pid 21527:tid 21548] [client 20.215.248.189:55879] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class.php"] [unique_id "aY2Jsiaer9JPUXlMLuGXPAAAABM"]
[Thu Feb 12 16:05:09.283304 2026] [:error] [pid 21431:tid 21441] [client 20.215.248.189:55884] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class.php"] [unique_id "aY2JtZgxKQsNF5X8gtRrCgAAAMU"]
[Thu Feb 12 16:05:10.888448 2026] [:error] [pid 39777:tid 39789] [client 20.215.248.189:56426] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bless5.php"] [unique_id "aY2JtlzexR6hGUkt5pO0EQAAAEo"]
[Thu Feb 12 16:05:11.735480 2026] [:error] [pid 21434:tid 21507] [client 20.215.248.189:55908] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bless5.php"] [unique_id "aY2JtwbL1v6OC5G-tE967QAAAco"]
[Thu Feb 12 16:05:12.692787 2026] [:error] [pid 39777:tid 39780] [client 20.215.248.189:56406] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bless5.php"] [unique_id "aY2JuFzexR6hGUkt5pO0HAAAAEE"]
[Thu Feb 12 16:05:13.905565 2026] [:error] [pid 39777:tid 39798] [client 20.215.248.189:56952] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bless5.php"] [unique_id "aY2JuVzexR6hGUkt5pO0IAAAAFM"]
[Thu Feb 12 16:05:15.187716 2026] [:error] [pid 39777:tid 39790] [client 20.215.248.189:58082] [client 20.215.248.189] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aY2Ju1zexR6hGUkt5pO0JwAAAEs"]
[Thu Feb 12 16:05:16.544041 2026] [:error] [pid 21434:tid 21518] [client 20.215.248.189:56946] [client 20.215.248.189] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/block-patterns/index.php"] [unique_id "aY2JvAbL1v6OC5G-tE96-wAAAdU"]
[Thu Feb 12 16:05:17.641383 2026] [:error] [pid 21431:tid 21452] [client 20.215.248.189:57853] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ioxi-o1.php"] [unique_id "aY2JvZgxKQsNF5X8gtRrFgAAANA"]
[Thu Feb 12 16:05:19.615745 2026] [:error] [pid 21527:tid 21531] [client 20.215.248.189:57838] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ioxi-o1.php"] [unique_id "aY2Jvyaer9JPUXlMLuGXUwAAAAI"]
[Thu Feb 12 16:05:21.608871 2026] [:error] [pid 39777:tid 39782] [client 20.215.248.189:56393] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ioxi-o1.php"] [unique_id "aY2JwVzexR6hGUkt5pO0NwAAAEM"]
[Thu Feb 12 16:05:23.880977 2026] [:error] [pid 21433:tid 21490] [client 20.215.248.189:58118] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/juuuu.php"] [unique_id "aY2Jw9c_9AdG3uAKpzvO-AAAAZQ"]
[Thu Feb 12 16:05:25.434676 2026] [:error] [pid 21527:tid 21538] [client 20.215.248.189:56920] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/juuuu.php"] [unique_id "aY2JxSaer9JPUXlMLuGXZAAAAAk"]
[Thu Feb 12 16:05:26.880221 2026] [:error] [pid 21434:tid 21512] [client 20.215.248.189:56403] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/juuuu.php"] [unique_id "aY2JxgbL1v6OC5G-tE97CwAAAc8"]
[Thu Feb 12 16:05:28.523859 2026] [:error] [pid 21433:tid 21492] [client 20.215.248.189:58155] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/juuuu.php"] [unique_id "aY2JyNc_9AdG3uAKpzvPBAAAAZY"]
[Thu Feb 12 16:05:29.969096 2026] [:error] [pid 39777:tid 39784] [client 20.215.248.189:57289] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ha.php"] [unique_id "aY2JyVzexR6hGUkt5pO0PwAAAEU"]
[Thu Feb 12 16:05:32.210305 2026] [:error] [pid 21527:tid 21534] [client 20.215.248.189:57348] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ha.php"] [unique_id "aY2JzCaer9JPUXlMLuGXdgAAAAU"]
[Thu Feb 12 16:05:33.899268 2026] [:error] [pid 21433:tid 21485] [client 20.215.248.189:57914] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ha.php"] [unique_id "aY2Jzdc_9AdG3uAKpzvPDwAAAY8"]
[Thu Feb 12 16:05:36.253174 2026] [:error] [pid 21431:tid 21460] [client 20.215.248.189:57397] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ha.php"] [unique_id "aY2J0JgxKQsNF5X8gtRrNwAAANg"]
[Thu Feb 12 16:05:38.613346 2026] [:error] [pid 39777:tid 39803] [client 20.215.248.189:57391] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/we2.php"] [unique_id "aY2J0lzexR6hGUkt5pO0UwAAAFg"]
[Thu Feb 12 16:05:40.625317 2026] [:error] [pid 39777:tid 39803] [client 20.215.248.189:57290] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/we2.php"] [unique_id "aY2J1FzexR6hGUkt5pO0YAAAAFg"]
[Thu Feb 12 16:05:47.180148 2026] [proxy_fcgi:error] [pid 39777:tid 39802] [client 20.215.248.189:57844] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 16:05:47.592389 2026] [proxy_fcgi:error] [pid 39777:tid 39792] [client 20.215.248.189:57844] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 16:05:47.863503 2026] [proxy_fcgi:error] [pid 39777:tid 39796] [client 20.215.248.189:57844] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 16:05:48.138310 2026] [proxy_fcgi:error] [pid 39777:tid 39784] [client 20.215.248.189:57844] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 16:05:48.397304 2026] [proxy_fcgi:error] [pid 39777:tid 39793] [client 20.215.248.189:57844] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 16:05:48.658149 2026] [proxy_fcgi:error] [pid 39777:tid 39799] [client 20.215.248.189:57844] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 16:05:48.918963 2026] [proxy_fcgi:error] [pid 39777:tid 39787] [client 20.215.248.189:57844] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 16:05:49.184391 2026] [proxy_fcgi:error] [pid 39777:tid 39790] [client 20.215.248.189:57844] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 16:05:49.465157 2026] [proxy_fcgi:error] [pid 39777:tid 39785] [client 20.215.248.189:57844] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 16:05:49.725102 2026] [proxy_fcgi:error] [pid 39777:tid 39803] [client 20.215.248.189:57844] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 16:05:51.299439 2026] [proxy_fcgi:error] [pid 39777:tid 39783] [client 20.215.248.189:57844] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 16:05:51.554242 2026] [:error] [pid 39777:tid 39795] [client 20.215.248.189:57844] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bibil.php"] [unique_id "aY2J31zexR6hGUkt5pO0jQAAAFA"]
[Thu Feb 12 16:05:56.380100 2026] [:error] [pid 21433:tid 21474] [client 20.215.248.189:58070] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bibil.php"] [unique_id "aY2J5Nc_9AdG3uAKpzvPNwAAAYQ"]
[Thu Feb 12 16:06:00.083378 2026] [:error] [pid 21431:tid 21443] [client 20.215.248.189:57376] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bibil.php"] [unique_id "aY2J6JgxKQsNF5X8gtRrZAAAAMc"]
[Thu Feb 12 16:06:16.705382 2026] [:error] [pid 21527:tid 21534] [client 20.215.248.189:58986] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/radio.php"] [unique_id "aY2J-Caer9JPUXlMLuGX0QAAAAU"]
[Thu Feb 12 16:06:19.216097 2026] [:error] [pid 21527:tid 21547] [client 20.215.248.189:59045] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/radio.php"] [unique_id "aY2J-yaer9JPUXlMLuGX1wAAABI"]
[Thu Feb 12 16:06:32.667631 2026] [:error] [pid 39777:tid 39786] [client 20.215.248.189:57827] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/files.php"] [unique_id "aY2KCFzexR6hGUkt5pO1EAAAAEc"]
[Thu Feb 12 16:06:35.485916 2026] [:error] [pid 39777:tid 39783] [client 20.215.248.189:57344] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/files.php"] [unique_id "aY2KC1zexR6hGUkt5pO1IwAAAEQ"]
[Thu Feb 12 16:06:38.063031 2026] [:error] [pid 21527:tid 21553] [client 20.215.248.189:57917] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/files.php"] [unique_id "aY2KDiaer9JPUXlMLuGX-QAAABg"]
[Thu Feb 12 16:06:42.316732 2026] [:error] [pid 39777:tid 39797] [client 20.215.248.189:54864] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/files.php"] [unique_id "aY2KElzexR6hGUkt5pO1RgAAAFI"]
[Thu Feb 12 16:06:44.902265 2026] [:error] [pid 21527:tid 21545] [client 20.215.248.189:58668] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file7.php"] [unique_id "aY2KFCaer9JPUXlMLuGYBwAAABA"]
[Thu Feb 12 16:06:48.003767 2026] [:error] [pid 21433:tid 21472] [client 20.215.248.189:57807] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file7.php"] [unique_id "aY2KGNc_9AdG3uAKpzvPrQAAAYI"]
[Thu Feb 12 16:06:51.748314 2026] [proxy_fcgi:error] [pid 21431:tid 21439] [client 20.215.248.189:58128] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 16:06:52.016433 2026] [proxy_fcgi:error] [pid 21431:tid 21441] [client 20.215.248.189:58128] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 16:06:52.579463 2026] [proxy_fcgi:error] [pid 21431:tid 21450] [client 20.215.248.189:58128] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 16:06:52.843741 2026] [proxy_fcgi:error] [pid 21431:tid 21451] [client 20.215.248.189:58128] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 16:06:53.115788 2026] [proxy_fcgi:error] [pid 21431:tid 21437] [client 20.215.248.189:58128] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 16:06:53.375221 2026] [proxy_fcgi:error] [pid 21431:tid 21456] [client 20.215.248.189:58128] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 16:06:53.634722 2026] [proxy_fcgi:error] [pid 21431:tid 21447] [client 20.215.248.189:58128] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 16:06:53.893621 2026] [proxy_fcgi:error] [pid 21431:tid 21448] [client 20.215.248.189:58128] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 16:06:54.153079 2026] [proxy_fcgi:error] [pid 21431:tid 21438] [client 20.215.248.189:58128] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 16:06:54.411931 2026] [proxy_fcgi:error] [pid 21431:tid 21454] [client 20.215.248.189:58128] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 16:06:54.668290 2026] [:error] [pid 21431:tid 21452] [client 20.215.248.189:58128] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/403.php"] [unique_id "aY2KHpgxKQsNF5X8gtRr3QAAANA"]
[Thu Feb 12 16:06:56.421195 2026] [:error] [pid 39777:tid 39783] [client 20.215.248.189:57860] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/403.php"] [unique_id "aY2KIFzexR6hGUkt5pO1aAAAAEQ"]
[Thu Feb 12 16:06:58.104443 2026] [:error] [pid 21527:tid 21546] [client 20.215.248.189:56997] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/403.php"] [unique_id "aY2KIiaer9JPUXlMLuGYLgAAABE"]
[Thu Feb 12 16:07:00.623813 2026] [:error] [pid 39777:tid 39781] [client 20.215.248.189:56948] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/403.php"] [unique_id "aY2KJFzexR6hGUkt5pO1dwAAAEI"]
[Thu Feb 12 16:07:02.315672 2026] [:error] [pid 39777:tid 39796] [client 20.215.248.189:58166] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file9.php"] [unique_id "aY2KJlzexR6hGUkt5pO1ggAAAFE"]
[Thu Feb 12 16:07:06.113012 2026] [:error] [pid 39777:tid 39787] [client 20.215.248.189:59578] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file9.php"] [unique_id "aY2KKlzexR6hGUkt5pO1mAAAAEg"]
[Thu Feb 12 16:07:08.718042 2026] [:error] [pid 21434:tid 21512] [client 20.215.248.189:58659] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file9.php"] [unique_id "aY2KLAbL1v6OC5G-tE974QAAAc8"]
[Thu Feb 12 16:07:11.774870 2026] [:error] [pid 21431:tid 21454] [client 20.215.248.189:58633] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file9.php"] [unique_id "aY2KL5gxKQsNF5X8gtRsBwAAANI"]
[Thu Feb 12 16:07:13.113620 2026] [:error] [pid 21431:tid 21441] [client 20.215.248.189:58141] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ac.php"] [unique_id "aY2KMZgxKQsNF5X8gtRsDAAAAMU"]
[Thu Feb 12 16:07:14.782779 2026] [:error] [pid 21431:tid 21460] [client 20.215.248.189:58172] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ac.php"] [unique_id "aY2KMpgxKQsNF5X8gtRsFAAAANg"]
[Thu Feb 12 16:07:16.608999 2026] [:error] [pid 21434:tid 21517] [client 20.215.248.189:59851] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ac.php"] [unique_id "aY2KNAbL1v6OC5G-tE978AAAAdQ"]
[Thu Feb 12 16:07:17.765403 2026] [:error] [pid 21433:tid 21490] [client 20.215.248.189:58607] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ac.php"] [unique_id "aY2KNdc_9AdG3uAKpzvP5gAAAZQ"]
[Thu Feb 12 16:07:19.633851 2026] [:error] [pid 21431:tid 21453] [client 20.215.248.189:58066] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/new4.php"] [unique_id "aY2KN5gxKQsNF5X8gtRsLQAAANE"]
[Thu Feb 12 16:07:20.916119 2026] [:error] [pid 21527:tid 21547] [client 20.215.248.189:59026] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/new4.php"] [unique_id "aY2KOCaer9JPUXlMLuGYeAAAABI"]
[Thu Feb 12 16:07:23.798616 2026] [:error] [pid 39777:tid 39799] [client 20.215.248.189:58652] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/new4.php"] [unique_id "aY2KO1zexR6hGUkt5pO1zQAAAFQ"]
[Thu Feb 12 16:07:26.201376 2026] [:error] [pid 21433:tid 21482] [client 20.215.248.189:59538] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/new4.php"] [unique_id "aY2KPtc_9AdG3uAKpzvP9wAAAYw"]
[Thu Feb 12 16:07:28.463294 2026] [:error] [pid 21431:tid 21448] [client 20.215.248.189:58666] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/pop.php"] [unique_id "aY2KQJgxKQsNF5X8gtRsPwAAAMw"]
[Thu Feb 12 16:07:30.668768 2026] [:error] [pid 21527:tid 21530] [client 20.215.248.189:59036] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/pop.php"] [unique_id "aY2KQiaer9JPUXlMLuGYlwAAAAE"]
[Thu Feb 12 16:07:32.484578 2026] [:error] [pid 21434:tid 21509] [client 20.215.248.189:59029] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/pop.php"] [unique_id "aY2KRAbL1v6OC5G-tE98FgAAAcw"]
[Thu Feb 12 16:07:33.484486 2026] [:error] [pid 21431:tid 21459] [client 20.215.248.189:58657] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/pop.php"] [unique_id "aY2KRZgxKQsNF5X8gtRsTgAAANc"]
[Thu Feb 12 16:07:35.719828 2026] [:error] [pid 21431:tid 21438] [client 20.215.248.189:58683] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/az.php"] [unique_id "aY2KR5gxKQsNF5X8gtRsVQAAAMI"]
[Thu Feb 12 16:07:37.183444 2026] [:error] [pid 21431:tid 21459] [client 20.215.248.189:59006] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/az.php"] [unique_id "aY2KSZgxKQsNF5X8gtRsXAAAANc"]
[Thu Feb 12 16:07:38.402880 2026] [:error] [pid 21431:tid 21440] [client 20.215.248.189:59047] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/az.php"] [unique_id "aY2KSpgxKQsNF5X8gtRsYQAAAMQ"]
[Thu Feb 12 16:07:40.947696 2026] [:error] [pid 21433:tid 21476] [client 20.215.248.189:59540] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/az.php"] [unique_id "aY2KTNc_9AdG3uAKpzvQFwAAAYY"]
[Thu Feb 12 16:07:43.081833 2026] [:error] [pid 21527:tid 21552] [client 20.215.248.189:59528] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xaz.php"] [unique_id "aY2KTyaer9JPUXlMLuGYrwAAABc"]
[Thu Feb 12 16:07:44.644749 2026] [:error] [pid 21527:tid 21529] [client 20.215.248.189:59050] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xaz.php"] [unique_id "aY2KUCaer9JPUXlMLuGYsgAAAAA"]
[Thu Feb 12 16:07:46.138859 2026] [:error] [pid 39777:tid 39783] [client 20.215.248.189:59573] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xaz.php"] [unique_id "aY2KUlzexR6hGUkt5pO2AAAAAEQ"]
[Thu Feb 12 16:07:48.162124 2026] [:error] [pid 39777:tid 39801] [client 20.215.248.189:59926] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xaz.php"] [unique_id "aY2KVFzexR6hGUkt5pO2CgAAAFY"]
[Thu Feb 12 16:07:49.973865 2026] [:error] [pid 21431:tid 21460] [client 20.215.248.189:60398] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/up4.php"] [unique_id "aY2KVZgxKQsNF5X8gtRsfAAAANg"]
[Thu Feb 12 16:07:52.642622 2026] [:error] [pid 21527:tid 21538] [client 20.215.248.189:60375] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/up4.php"] [unique_id "aY2KWCaer9JPUXlMLuGYwAAAAAk"]
[Thu Feb 12 16:07:54.285655 2026] [proxy_fcgi:error] [pid 21434:tid 21508] [client 20.215.248.189:58989] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 16:07:54.546176 2026] [proxy_fcgi:error] [pid 21434:tid 21512] [client 20.215.248.189:58989] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 16:07:54.812849 2026] [proxy_fcgi:error] [pid 21434:tid 21520] [client 20.215.248.189:58989] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 16:07:55.072794 2026] [proxy_fcgi:error] [pid 21434:tid 21517] [client 20.215.248.189:58989] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 16:07:55.338217 2026] [proxy_fcgi:error] [pid 21434:tid 21510] [client 20.215.248.189:58989] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 16:07:55.604944 2026] [proxy_fcgi:error] [pid 21434:tid 21518] [client 20.215.248.189:58989] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 16:07:55.878503 2026] [proxy_fcgi:error] [pid 21434:tid 21499] [client 20.215.248.189:58989] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 16:07:56.172347 2026] [proxy_fcgi:error] [pid 21434:tid 21511] [client 20.215.248.189:58989] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 16:07:56.446802 2026] [proxy_fcgi:error] [pid 21434:tid 21504] [client 20.215.248.189:58989] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 20:10:48.373803 2026] [:error] [pid 63418:tid 63497] [client 136.109.15.59:54747] [client 136.109.15.59] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.109.15.59, incrementing ddos counter"] [hostname "dwelectservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aY3DSNzjh-bbJnStPZLYfgAAAJU"]
[Thu Feb 12 20:10:48.384448 2026] [proxy_fcgi:error] [pid 63418:tid 63497] [client 136.109.15.59:54747] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 20:10:50.172031 2026] [:error] [pid 63418:tid 63492] [client 136.109.15.59:54747] [client 136.109.15.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "aY3DStzjh-bbJnStPZLYiQAAAJA"]
[Thu Feb 12 20:10:50.542499 2026] [:error] [pid 63417:tid 63452] [client 136.109.15.59:49546] [client 136.109.15.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "aY3DSv8gSb97qRMtXCLdmwAAAEM"]
[Thu Feb 12 20:10:50.904595 2026] [:error] [pid 63417:tid 63460] [client 136.109.15.59:65240] [client 136.109.15.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aY3DSv8gSb97qRMtXCLdnQAAAEs"]
[Thu Feb 12 20:10:51.314991 2026] [:error] [pid 63511:tid 63536] [client 136.109.15.59:55922] [client 136.109.15.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aY3DS6QCQbD5BgeyIk0OrAAAABc"]
[Thu Feb 12 20:10:51.710388 2026] [:error] [pid 63418:tid 63483] [client 136.109.15.59:62738] [client 136.109.15.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aY3DS9zjh-bbJnStPZLYjQAAAIc"]
[Thu Feb 12 20:10:52.070603 2026] [:error] [pid 63416:tid 63445] [client 136.109.15.59:51231] [client 136.109.15.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aY3DTL2wmecPaCHcM2-7OwAAAZg"]
[Thu Feb 12 20:10:52.431220 2026] [:error] [pid 63417:tid 63449] [client 136.109.15.59:61957] [client 136.109.15.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aY3DTP8gSb97qRMtXCLdnwAAAEA"]
[Thu Feb 12 20:10:52.781767 2026] [:error] [pid 63418:tid 63496] [client 136.109.15.59:50136] [client 136.109.15.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aY3DTNzjh-bbJnStPZLYjwAAAJQ"]
[Thu Feb 12 20:32:40.501269 2026] [proxy_fcgi:error] [pid 63416:tid 63425] [client 20.203.142.107:31811] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 20:32:40.753109 2026] [proxy_fcgi:error] [pid 63416:tid 63437] [client 20.203.142.107:31811] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 20:32:41.245848 2026] [proxy_fcgi:error] [pid 63416:tid 63428] [client 20.203.142.107:31811] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 20:32:41.487634 2026] [proxy_fcgi:error] [pid 63416:tid 63433] [client 20.203.142.107:31811] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 20:32:41.730928 2026] [proxy_fcgi:error] [pid 63416:tid 63423] [client 20.203.142.107:31811] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 20:32:41.971703 2026] [proxy_fcgi:error] [pid 63416:tid 63422] [client 20.203.142.107:31811] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 20:32:42.335453 2026] [proxy_fcgi:error] [pid 63416:tid 63444] [client 20.203.142.107:31811] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 20:32:42.958905 2026] [proxy_fcgi:error] [pid 63416:tid 63421] [client 20.203.142.107:31811] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 20:32:43.195863 2026] [:error] [pid 63416:tid 63430] [client 20.203.142.107:31811] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tx1.php"] [unique_id "aY3Ia72wmecPaCHcM2_D-gAAAYk"]
[Thu Feb 12 20:32:44.400226 2026] [:error] [pid 63511:tid 63532] [client 20.203.142.107:38138] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tx1.php"] [unique_id "aY3IbKQCQbD5BgeyIk0aHwAAABM"]
[Thu Feb 12 20:32:45.717829 2026] [:error] [pid 63418:tid 63499] [client 20.203.142.107:52959] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tx1.php"] [unique_id "aY3Ibdzjh-bbJnStPZLitgAAAJc"]
[Thu Feb 12 20:32:46.937235 2026] [:error] [pid 63417:tid 63457] [client 20.203.142.107:58087] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tx1.php"] [unique_id "aY3Ibv8gSb97qRMtXCLm8gAAAEg"]
[Thu Feb 12 20:32:48.063296 2026] [:error] [pid 63417:tid 63467] [client 20.203.142.107:4901] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xv.php"] [unique_id "aY3IcP8gSb97qRMtXCLm9gAAAFI"]
[Thu Feb 12 20:32:49.558719 2026] [:error] [pid 63416:tid 63444] [client 20.203.142.107:31824] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xv.php"] [unique_id "aY3Icb2wmecPaCHcM2_EBQAAAZc"]
[Thu Feb 12 20:32:51.751960 2026] [:error] [pid 63418:tid 63490] [client 20.203.142.107:46564] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xv.php"] [unique_id "aY3Ic9zjh-bbJnStPZLiugAAAI4"]
[Thu Feb 12 20:32:54.186861 2026] [:error] [pid 63511:tid 63537] [client 20.203.142.107:4335] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xv.php"] [unique_id "aY3IdqQCQbD5BgeyIk0aMAAAABg"]
[Thu Feb 12 20:32:55.908000 2026] [:error] [pid 65064:tid 65079] [client 20.203.142.107:30279] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x56.php"] [unique_id "aY3IdxOvRgscTcqsMBnxLAAAAMw"]
[Thu Feb 12 20:32:57.047391 2026] [:error] [pid 65064:tid 65089] [client 20.203.142.107:54494] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x56.php"] [unique_id "aY3IeROvRgscTcqsMBnxLgAAANY"]
[Thu Feb 12 20:32:58.627924 2026] [:error] [pid 65064:tid 65076] [client 20.203.142.107:52970] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x56.php"] [unique_id "aY3IehOvRgscTcqsMBnxMAAAAMk"]
[Thu Feb 12 20:32:59.348307 2026] [:error] [pid 63417:tid 63464] [client 20.203.142.107:30311] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x56.php"] [unique_id "aY3Ie_8gSb97qRMtXCLnFAAAAE8"]
[Thu Feb 12 20:33:00.507387 2026] [:error] [pid 65064:tid 65089] [client 20.203.142.107:36039] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/htaccess.php"] [unique_id "aY3IfBOvRgscTcqsMBnxNAAAANY"]
[Thu Feb 12 20:33:01.990828 2026] [:error] [pid 63416:tid 63444] [client 20.203.142.107:46556] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/htaccess.php"] [unique_id "aY3Ifb2wmecPaCHcM2_EDQAAAZc"]
[Thu Feb 12 20:33:03.470215 2026] [:error] [pid 65064:tid 65084] [client 20.203.142.107:32662] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/htaccess.php"] [unique_id "aY3IfxOvRgscTcqsMBnxRwAAANE"]
[Thu Feb 12 20:33:04.955578 2026] [:error] [pid 65064:tid 65079] [client 20.203.142.107:54496] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/htaccess.php"] [unique_id "aY3IgBOvRgscTcqsMBnxTwAAAMw"]
[Thu Feb 12 20:33:05.854346 2026] [:error] [pid 63417:tid 63465] [client 20.203.142.107:4872] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/readme.php"] [unique_id "aY3Igf8gSb97qRMtXCLnIQAAAFA"]
[Thu Feb 12 20:33:06.880603 2026] [:error] [pid 63417:tid 63472] [client 20.203.142.107:32663] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/readme.php"] [unique_id "aY3Igv8gSb97qRMtXCLnKgAAAFc"]
[Thu Feb 12 20:33:07.802457 2026] [:error] [pid 63417:tid 63463] [client 20.203.142.107:32664] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/readme.php"] [unique_id "aY3Ig_8gSb97qRMtXCLnLgAAAE4"]
[Thu Feb 12 20:33:09.007322 2026] [:error] [pid 63418:tid 63482] [client 20.203.142.107:46557] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/readme.php"] [unique_id "aY3Ihdzjh-bbJnStPZLiwQAAAIY"]
[Thu Feb 12 20:33:09.973040 2026] [:error] [pid 63418:tid 63490] [client 20.203.142.107:55273] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x50.php"] [unique_id "aY3Ihdzjh-bbJnStPZLixgAAAI4"]
[Thu Feb 12 20:33:11.492121 2026] [:error] [pid 65064:tid 65088] [client 20.203.142.107:4309] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x50.php"] [unique_id "aY3IhxOvRgscTcqsMBnxYAAAANU"]
[Thu Feb 12 20:33:12.891131 2026] [:error] [pid 63418:tid 63483] [client 20.203.142.107:4899] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x50.php"] [unique_id "aY3IiNzjh-bbJnStPZLiygAAAIc"]
[Thu Feb 12 20:33:14.824160 2026] [:error] [pid 65064:tid 65082] [client 20.203.142.107:46577] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x50.php"] [unique_id "aY3IihOvRgscTcqsMBnxbQAAAM8"]
[Thu Feb 12 20:33:15.917047 2026] [:error] [pid 63417:tid 63459] [client 20.203.142.107:42646] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fv.php"] [unique_id "aY3Ii_8gSb97qRMtXCLnOQAAAEo"]
[Thu Feb 12 20:33:16.673636 2026] [:error] [pid 65064:tid 65090] [client 20.203.142.107:42625] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fv.php"] [unique_id "aY3IjBOvRgscTcqsMBnxdgAAANc"]
[Thu Feb 12 20:33:18.474807 2026] [:error] [pid 63417:tid 63462] [client 20.203.142.107:46541] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fv.php"] [unique_id "aY3Ijv8gSb97qRMtXCLnOwAAAE0"]
[Thu Feb 12 20:33:19.623197 2026] [:error] [pid 65064:tid 65085] [client 20.203.142.107:46571] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fv.php"] [unique_id "aY3IjxOvRgscTcqsMBnxgwAAANI"]
[Thu Feb 12 20:33:20.668086 2026] [:error] [pid 63417:tid 63465] [client 20.203.142.107:4893] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file.php"] [unique_id "aY3IkP8gSb97qRMtXCLnPQAAAFA"]
[Thu Feb 12 20:33:21.688068 2026] [:error] [pid 63511:tid 63516] [client 20.203.142.107:46571] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file.php"] [unique_id "aY3IkaQCQbD5BgeyIk0aWQAAAAM"]
[Thu Feb 12 20:33:24.087676 2026] [:error] [pid 63416:tid 63439] [client 20.203.142.107:31852] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file.php"] [unique_id "aY3IlL2wmecPaCHcM2_EJgAAAZI"]
[Thu Feb 12 20:33:28.121588 2026] [:error] [pid 63418:tid 63499] [client 20.203.142.107:42666] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file.php"] [unique_id "aY3ImNzjh-bbJnStPZLi4QAAAJc"]
[Thu Feb 12 20:33:30.997255 2026] [:error] [pid 63511:tid 63523] [client 20.203.142.107:4895] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lsd.php"] [unique_id "aY3ImqQCQbD5BgeyIk0aZwAAAAo"]
[Thu Feb 12 20:33:32.998201 2026] [:error] [pid 65064:tid 65072] [client 20.203.142.107:52954] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lsd.php"] [unique_id "aY3InBOvRgscTcqsMBnxsQAAAMU"]
[Thu Feb 12 20:33:33.852453 2026] [:error] [pid 65064:tid 65071] [client 20.203.142.107:30326] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lsd.php"] [unique_id "aY3InROvRgscTcqsMBnxsgAAAMQ"]
[Thu Feb 12 20:33:36.413231 2026] [:error] [pid 63416:tid 63426] [client 20.203.142.107:4915] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lsd.php"] [unique_id "aY3IoL2wmecPaCHcM2_ELQAAAYU"]
[Thu Feb 12 20:33:37.845968 2026] [:error] [pid 63511:tid 63513] [client 20.203.142.107:31862] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/as.php"] [unique_id "aY3IoaQCQbD5BgeyIk0adwAAAAA"]
[Thu Feb 12 20:33:39.280843 2026] [:error] [pid 63511:tid 63530] [client 20.203.142.107:30317] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/as.php"] [unique_id "aY3Io6QCQbD5BgeyIk0afgAAABE"]
[Thu Feb 12 20:33:40.947050 2026] [:error] [pid 63416:tid 63439] [client 20.203.142.107:32671] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/as.php"] [unique_id "aY3IpL2wmecPaCHcM2_EMwAAAZI"]
[Thu Feb 12 20:33:41.829269 2026] [:error] [pid 65064:tid 65091] [client 20.203.142.107:33762] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/as.php"] [unique_id "aY3IpROvRgscTcqsMBnxxwAAANg"]
[Thu Feb 12 20:33:43.194322 2026] [proxy_fcgi:error] [pid 65064:tid 65076] [client 20.203.142.107:31812] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 20:33:43.593623 2026] [proxy_fcgi:error] [pid 65064:tid 65082] [client 20.203.142.107:31812] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 20:33:43.897860 2026] [proxy_fcgi:error] [pid 65064:tid 65072] [client 20.203.142.107:31812] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 20:33:44.159839 2026] [proxy_fcgi:error] [pid 65064:tid 65091] [client 20.203.142.107:31812] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 20:33:44.419483 2026] [proxy_fcgi:error] [pid 65064:tid 65090] [client 20.203.142.107:31812] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 20:33:45.185427 2026] [proxy_fcgi:error] [pid 65064:tid 65069] [client 20.203.142.107:31812] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 20:33:45.424901 2026] [proxy_fcgi:error] [pid 65064:tid 65079] [client 20.203.142.107:31812] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 20:33:46.151748 2026] [proxy_fcgi:error] [pid 65064:tid 65080] [client 20.203.142.107:31812] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 20:33:46.404746 2026] [proxy_fcgi:error] [pid 65064:tid 65069] [client 20.203.142.107:31812] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 20:33:46.917963 2026] [:error] [pid 65064:tid 65087] [client 20.203.142.107:31812] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lv.php"] [unique_id "aY3IqhOvRgscTcqsMBnx9QAAANQ"]
[Thu Feb 12 20:33:50.933159 2026] [:error] [pid 63416:tid 63423] [client 20.203.142.107:54491] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lv.php"] [unique_id "aY3Irr2wmecPaCHcM2_EQQAAAYI"]
[Thu Feb 12 20:33:52.619476 2026] [:error] [pid 65064:tid 65069] [client 20.203.142.107:36043] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lv.php"] [unique_id "aY3IsBOvRgscTcqsMBnyCAAAAMI"]
[Thu Feb 12 20:33:53.572373 2026] [:error] [pid 65064:tid 65076] [client 20.203.142.107:53630] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lv.php"] [unique_id "aY3IsROvRgscTcqsMBnyDgAAAMk"]
[Thu Feb 12 20:33:54.329147 2026] [:error] [pid 63416:tid 63422] [client 20.203.142.107:38139] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/simple.php"] [unique_id "aY3Isr2wmecPaCHcM2_ERgAAAYE"]
[Thu Feb 12 20:33:55.940450 2026] [:error] [pid 63416:tid 63438] [client 20.203.142.107:57346] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/simple.php"] [unique_id "aY3Is72wmecPaCHcM2_ESQAAAZE"]
[Thu Feb 12 20:33:57.265339 2026] [:error] [pid 63417:tid 63465] [client 20.203.142.107:38743] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/simple.php"] [unique_id "aY3Itf8gSb97qRMtXCLnawAAAFA"]
[Thu Feb 12 20:33:58.338759 2026] [:error] [pid 65064:tid 65088] [client 20.203.142.107:51531] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/simple.php"] [unique_id "aY3IthOvRgscTcqsMBnyHgAAANU"]
[Thu Feb 12 20:33:59.706434 2026] [:error] [pid 65064:tid 65083] [client 20.203.142.107:38754] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/css.php"] [unique_id "aY3ItxOvRgscTcqsMBnyJgAAANA"]
[Thu Feb 12 20:34:01.158514 2026] [:error] [pid 63416:tid 63429] [client 20.203.142.107:34525] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/css.php"] [unique_id "aY3Iub2wmecPaCHcM2_ETQAAAYg"]
[Thu Feb 12 20:34:02.221415 2026] [:error] [pid 63417:tid 63455] [client 20.203.142.107:45457] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/css.php"] [unique_id "aY3Iuv8gSb97qRMtXCLncwAAAEY"]
[Thu Feb 12 20:34:03.537033 2026] [:error] [pid 63511:tid 63521] [client 20.203.142.107:57766] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/css.php"] [unique_id "aY3Iu6QCQbD5BgeyIk0aoQAAAAg"]
[Thu Feb 12 20:34:04.962427 2026] [:error] [pid 63416:tid 63430] [client 20.203.142.107:38044] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cong.php"] [unique_id "aY3IvL2wmecPaCHcM2_EUAAAAYk"]
[Thu Feb 12 20:34:07.944831 2026] [:error] [pid 63416:tid 63438] [client 20.203.142.107:43740] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cong.php"] [unique_id "aY3Iv72wmecPaCHcM2_EVQAAAZE"]
[Thu Feb 12 20:34:08.946552 2026] [:error] [pid 63418:tid 63489] [client 20.203.142.107:36653] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cong.php"] [unique_id "aY3IwNzjh-bbJnStPZLjGgAAAI0"]
[Thu Feb 12 20:34:10.751111 2026] [:error] [pid 63417:tid 63466] [client 20.203.142.107:36644] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cong.php"] [unique_id "aY3Iwv8gSb97qRMtXCLnfAAAAFE"]
[Thu Feb 12 20:34:19.050735 2026] [:error] [pid 63417:tid 63462] [client 20.203.142.107:4796] [client 20.203.142.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aY3Iy_8gSb97qRMtXCLnkQAAAE0"]
[Thu Feb 12 20:34:24.942849 2026] [:error] [pid 63417:tid 63468] [client 20.203.142.107:4587] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cong.php"] [unique_id "aY3I0P8gSb97qRMtXCLnnwAAAFM"]
[Thu Feb 12 20:34:28.099815 2026] [:error] [pid 63418:tid 63480] [client 20.203.142.107:30911] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cong.php"] [unique_id "aY3I1Nzjh-bbJnStPZLjPwAAAIQ"]
[Thu Feb 12 20:34:29.340225 2026] [:error] [pid 63417:tid 63454] [client 20.203.142.107:54611] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cong.php"] [unique_id "aY3I1f8gSb97qRMtXCLnqQAAAEU"]
[Thu Feb 12 20:34:31.951110 2026] [:error] [pid 63416:tid 63437] [client 20.203.142.107:4275] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cong.php"] [unique_id "aY3I172wmecPaCHcM2_EkgAAAZA"]
[Thu Feb 12 20:34:32.969780 2026] [:error] [pid 65064:tid 65073] [client 20.203.142.107:41817] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/w.php"] [unique_id "aY3I2BOvRgscTcqsMBnyhgAAAMY"]
[Thu Feb 12 20:34:34.810933 2026] [:error] [pid 65064:tid 65085] [client 20.203.142.107:40965] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/w.php"] [unique_id "aY3I2hOvRgscTcqsMBnyigAAANI"]
[Thu Feb 12 20:34:36.204435 2026] [:error] [pid 65064:tid 65078] [client 20.203.142.107:4374] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/w.php"] [unique_id "aY3I3BOvRgscTcqsMBnyiwAAAMs"]
[Thu Feb 12 20:34:37.294840 2026] [:error] [pid 63418:tid 63480] [client 20.203.142.107:4257] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/w.php"] [unique_id "aY3I3dzjh-bbJnStPZLjSwAAAIQ"]
[Thu Feb 12 20:34:38.416941 2026] [:error] [pid 63511:tid 63525] [client 20.203.142.107:33095] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/404.php"] [unique_id "aY3I3qQCQbD5BgeyIk0a9wAAAAw"]
[Thu Feb 12 20:34:39.324631 2026] [:error] [pid 63511:tid 63518] [client 20.203.142.107:39253] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/404.php"] [unique_id "aY3I36QCQbD5BgeyIk0a_QAAAAU"]
[Thu Feb 12 20:34:40.221825 2026] [:error] [pid 63417:tid 63456] [client 20.203.142.107:41795] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/404.php"] [unique_id "aY3I4P8gSb97qRMtXCLnyAAAAEc"]
[Thu Feb 12 20:34:41.484218 2026] [:error] [pid 65064:tid 65071] [client 20.203.142.107:35032] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/404.php"] [unique_id "aY3I4ROvRgscTcqsMBnykgAAAMQ"]
[Thu Feb 12 20:34:42.246891 2026] [:error] [pid 65064:tid 65078] [client 20.203.142.107:4384] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aY3I4hOvRgscTcqsMBnylQAAAMs"]
[Thu Feb 12 20:34:43.849352 2026] [:error] [pid 63511:tid 63516] [client 20.203.142.107:44190] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aY3I46QCQbD5BgeyIk0bIQAAAAM"]
[Thu Feb 12 20:34:44.506011 2026] [:error] [pid 63416:tid 63429] [client 20.203.142.107:37648] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aY3I5L2wmecPaCHcM2_EqAAAAYg"]
[Thu Feb 12 20:34:45.195376 2026] [:error] [pid 63418:tid 63483] [client 20.203.142.107:37635] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aY3I5dzjh-bbJnStPZLjWwAAAIc"]
[Thu Feb 12 20:34:47.047393 2026] [proxy_fcgi:error] [pid 63416:tid 63431] [client 20.203.142.107:35036] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 20:34:47.399540 2026] [proxy_fcgi:error] [pid 63416:tid 63437] [client 20.203.142.107:35036] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 20:34:47.686425 2026] [proxy_fcgi:error] [pid 63416:tid 63422] [client 20.203.142.107:35036] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 20:34:48.232633 2026] [proxy_fcgi:error] [pid 63416:tid 63445] [client 20.203.142.107:35036] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 20:34:50.001742 2026] [proxy_fcgi:error] [pid 63416:tid 63429] [client 20.203.142.107:35036] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 20:34:50.267895 2026] [proxy_fcgi:error] [pid 63416:tid 63443] [client 20.203.142.107:35036] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 20:34:50.512584 2026] [proxy_fcgi:error] [pid 63416:tid 63423] [client 20.203.142.107:35036] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 20:34:50.752616 2026] [proxy_fcgi:error] [pid 63416:tid 63442] [client 20.203.142.107:35036] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 20:34:51.098085 2026] [proxy_fcgi:error] [pid 63416:tid 63433] [client 20.203.142.107:35036] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 20:34:51.654396 2026] [:error] [pid 63416:tid 63421] [client 20.203.142.107:35036] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/alfa.php"] [unique_id "aY3I672wmecPaCHcM2_EwAAAAYA"]
[Thu Feb 12 20:34:52.766337 2026] [:error] [pid 63417:tid 63468] [client 20.203.142.107:47512] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/alfa.php"] [unique_id "aY3I7P8gSb97qRMtXCLn0gAAAFM"]
[Thu Feb 12 20:34:53.684404 2026] [:error] [pid 63418:tid 63499] [client 20.203.142.107:4212] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/alfa.php"] [unique_id "aY3I7dzjh-bbJnStPZLjaQAAAJc"]
[Thu Feb 12 20:34:54.382896 2026] [:error] [pid 65064:tid 65080] [client 20.203.142.107:39237] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/alfa.php"] [unique_id "aY3I7hOvRgscTcqsMBnyogAAAM0"]
[Thu Feb 12 20:34:55.182410 2026] [:error] [pid 63416:tid 63438] [client 20.203.142.107:35621] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aY3I772wmecPaCHcM2_ExgAAAZE"]
[Thu Feb 12 20:34:55.947381 2026] [:error] [pid 65064:tid 65083] [client 20.203.142.107:44212] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aY3I7xOvRgscTcqsMBnypwAAANA"]
[Thu Feb 12 20:34:56.607708 2026] [:error] [pid 63511:tid 63514] [client 20.203.142.107:43711] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aY3I8KQCQbD5BgeyIk0bQQAAAAE"]
[Thu Feb 12 20:34:57.197992 2026] [:error] [pid 65064:tid 65087] [client 20.203.142.107:30897] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aY3I8ROvRgscTcqsMBnyrAAAANQ"]
[Thu Feb 12 20:34:57.789523 2026] [:error] [pid 63416:tid 63434] [client 20.203.142.107:35634] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aY3I8b2wmecPaCHcM2_EzgAAAY0"]
[Thu Feb 12 20:34:58.415825 2026] [:error] [pid 63416:tid 63423] [client 20.203.142.107:54005] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aY3I8r2wmecPaCHcM2_E0AAAAYI"]
[Thu Feb 12 20:34:59.312064 2026] [:error] [pid 63511:tid 63529] [client 20.203.142.107:53970] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aY3I86QCQbD5BgeyIk0bRgAAABA"]
[Thu Feb 12 20:35:00.271970 2026] [:error] [pid 65064:tid 65086] [client 20.203.142.107:33212] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aY3I9BOvRgscTcqsMBnytwAAANM"]
[Thu Feb 12 20:35:01.080664 2026] [:error] [pid 63417:tid 63471] [client 20.203.142.107:31905] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aY3I9f8gSb97qRMtXCLn4QAAAFY"]
[Thu Feb 12 20:35:02.424915 2026] [:error] [pid 63418:tid 63486] [client 20.203.142.107:54117] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aY3I9tzjh-bbJnStPZLjgAAAAIo"]
[Thu Feb 12 20:35:03.264147 2026] [:error] [pid 63418:tid 63477] [client 20.203.142.107:31891] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aY3I99zjh-bbJnStPZLjgQAAAIE"]
[Thu Feb 12 20:35:04.022128 2026] [:error] [pid 63416:tid 63439] [client 20.203.142.107:52059] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aY3I-L2wmecPaCHcM2_E3wAAAZI"]
[Thu Feb 12 20:35:06.953068 2026] [:error] [pid 63417:tid 63465] [client 20.203.142.107:53971] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aY3I-v8gSb97qRMtXCLn8AAAAFA"]
[Thu Feb 12 20:35:08.871828 2026] [:error] [pid 63418:tid 63498] [client 20.203.142.107:29206] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aY3I_Nzjh-bbJnStPZLjlAAAAJY"]
[Thu Feb 12 20:35:11.133245 2026] [:error] [pid 65064:tid 65074] [client 20.203.142.107:53843] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aY3I_xOvRgscTcqsMBnyxQAAAMc"]
[Thu Feb 12 20:35:12.729039 2026] [:error] [pid 65064:tid 65082] [client 20.203.142.107:47002] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aY3JABOvRgscTcqsMBnyxgAAAM8"]
[Thu Feb 12 20:35:13.590712 2026] [:error] [pid 63418:tid 63481] [client 20.203.142.107:44165] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/manager.php"] [unique_id "aY3JAdzjh-bbJnStPZLjmQAAAIU"]
[Thu Feb 12 20:35:14.962265 2026] [:error] [pid 63417:tid 63462] [client 20.203.142.107:43195] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/manager.php"] [unique_id "aY3JAv8gSb97qRMtXCLn_wAAAE0"]
[Thu Feb 12 20:35:16.016329 2026] [:error] [pid 65064:tid 65083] [client 20.203.142.107:44168] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/manager.php"] [unique_id "aY3JBBOvRgscTcqsMBnyygAAANA"]
[Thu Feb 12 20:35:16.656060 2026] [:error] [pid 63417:tid 63465] [client 20.203.142.107:53860] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/manager.php"] [unique_id "aY3JBP8gSb97qRMtXCLoAAAAAFA"]
[Thu Feb 12 20:35:17.494009 2026] [:error] [pid 65064:tid 65077] [client 20.203.142.107:53848] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/item.php"] [unique_id "aY3JBROvRgscTcqsMBnyzgAAAMo"]
[Thu Feb 12 20:35:18.687699 2026] [:error] [pid 63417:tid 63454] [client 20.203.142.107:50265] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/item.php"] [unique_id "aY3JBv8gSb97qRMtXCLoAQAAAEU"]
[Thu Feb 12 20:35:19.693626 2026] [:error] [pid 63416:tid 63436] [client 20.203.142.107:32266] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/item.php"] [unique_id "aY3JB72wmecPaCHcM2_E8AAAAY8"]
[Thu Feb 12 20:35:21.218727 2026] [:error] [pid 63417:tid 63459] [client 20.203.142.107:32317] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/item.php"] [unique_id "aY3JCf8gSb97qRMtXCLoBAAAAEo"]
[Thu Feb 12 20:35:23.883626 2026] [:error] [pid 63417:tid 63460] [client 20.203.142.107:35586] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aY3JC_8gSb97qRMtXCLoCwAAAEs"]
[Thu Feb 12 20:35:25.949035 2026] [:error] [pid 63418:tid 63490] [client 20.203.142.107:31928] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aY3JDdzjh-bbJnStPZLjowAAAI4"]
[Thu Feb 12 20:35:28.007465 2026] [:error] [pid 65064:tid 65070] [client 20.203.142.107:35568] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aY3JEBOvRgscTcqsMBny7wAAAMM"]
[Thu Feb 12 20:35:29.026162 2026] [:error] [pid 63416:tid 63426] [client 20.203.142.107:45971] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aY3JEb2wmecPaCHcM2_E_AAAAYU"]
[Thu Feb 12 20:35:31.342070 2026] [:error] [pid 65064:tid 65084] [client 20.203.142.107:55115] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/404.php"] [unique_id "aY3JExOvRgscTcqsMBnzAAAAANE"]
[Thu Feb 12 20:35:33.239210 2026] [:error] [pid 63417:tid 63449] [client 20.203.142.107:45978] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/404.php"] [unique_id "aY3JFf8gSb97qRMtXCLoFgAAAEA"]
[Thu Feb 12 20:35:34.217229 2026] [:error] [pid 63511:tid 63515] [client 20.203.142.107:35576] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/404.php"] [unique_id "aY3JFqQCQbD5BgeyIk0bhAAAAAI"]
[Thu Feb 12 20:35:35.113517 2026] [:error] [pid 63417:tid 63471] [client 20.203.142.107:33132] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/404.php"] [unique_id "aY3JF_8gSb97qRMtXCLoGgAAAFY"]
[Thu Feb 12 20:35:35.989459 2026] [:error] [pid 63416:tid 63425] [client 20.203.142.107:5020] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mail.php"] [unique_id "aY3JF72wmecPaCHcM2_FAAAAAYQ"]
[Thu Feb 12 20:35:36.959737 2026] [:error] [pid 63417:tid 63459] [client 20.203.142.107:52052] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mail.php"] [unique_id "aY3JGP8gSb97qRMtXCLoHwAAAEo"]
[Thu Feb 12 20:35:38.384416 2026] [:error] [pid 63417:tid 63451] [client 20.203.142.107:41592] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mail.php"] [unique_id "aY3JGv8gSb97qRMtXCLoJAAAAEI"]
[Thu Feb 12 20:35:39.291410 2026] [:error] [pid 63416:tid 63436] [client 20.203.142.107:28483] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mail.php"] [unique_id "aY3JG72wmecPaCHcM2_FBgAAAY8"]
[Thu Feb 12 20:35:40.441084 2026] [:error] [pid 63417:tid 63459] [client 20.203.142.107:39213] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aY3JHP8gSb97qRMtXCLoKAAAAEo"]
[Thu Feb 12 20:35:41.638191 2026] [:error] [pid 63511:tid 63528] [client 20.203.142.107:29136] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aY3JHaQCQbD5BgeyIk0blAAAAA8"]
[Thu Feb 12 20:35:42.660063 2026] [:error] [pid 65064:tid 65089] [client 20.203.142.107:41543] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aY3JHhOvRgscTcqsMBnzEgAAANY"]
[Thu Feb 12 20:35:43.881743 2026] [:error] [pid 63416:tid 63430] [client 20.203.142.107:45968] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aY3JH72wmecPaCHcM2_FCwAAAYk"]
[Thu Feb 12 20:35:45.221445 2026] [:error] [pid 65064:tid 65086] [client 20.203.142.107:41561] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sx.php"] [unique_id "aY3JIROvRgscTcqsMBnzHwAAANM"]
[Thu Feb 12 20:35:46.874676 2026] [:error] [pid 63418:tid 63497] [client 20.203.142.107:57772] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sx.php"] [unique_id "aY3JItzjh-bbJnStPZLjwQAAAJU"]
[Thu Feb 12 20:35:47.606407 2026] [:error] [pid 63418:tid 63485] [client 20.203.142.107:47953] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sx.php"] [unique_id "aY3JI9zjh-bbJnStPZLjwwAAAIk"]
[Thu Feb 12 20:35:48.286497 2026] [:error] [pid 63416:tid 63439] [client 20.203.142.107:41566] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sx.php"] [unique_id "aY3JJL2wmecPaCHcM2_FFAAAAZI"]
[Thu Feb 12 20:35:49.041919 2026] [:error] [pid 63416:tid 63426] [client 20.203.142.107:41538] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aY3JJb2wmecPaCHcM2_FFwAAAYU"]
[Thu Feb 12 20:35:49.743697 2026] [:error] [pid 63511:tid 63513] [client 20.203.142.107:50877] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aY3JJaQCQbD5BgeyIk0bnwAAAAA"]
[Thu Feb 12 20:35:50.275085 2026] [:error] [pid 63511:tid 63532] [client 20.203.142.107:50862] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aY3JJqQCQbD5BgeyIk0boAAAABM"]
[Thu Feb 12 20:35:51.596815 2026] [proxy_fcgi:error] [pid 63416:tid 63429] [client 20.203.142.107:41599] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 20:35:51.838111 2026] [proxy_fcgi:error] [pid 63416:tid 63438] [client 20.203.142.107:41599] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 20:35:52.088993 2026] [proxy_fcgi:error] [pid 63416:tid 63432] [client 20.203.142.107:41599] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 20:35:52.346645 2026] [proxy_fcgi:error] [pid 63416:tid 63444] [client 20.203.142.107:41599] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 20:35:53.343764 2026] [proxy_fcgi:error] [pid 63416:tid 63421] [client 20.203.142.107:41599] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 20:35:53.616591 2026] [:error] [pid 63416:tid 63437] [client 20.203.142.107:41599] [client 20.203.142.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aY3JKb2wmecPaCHcM2_FIgAAAZA"]
[Thu Feb 12 20:35:54.566565 2026] [proxy_fcgi:error] [pid 63416:tid 63445] [client 20.203.142.107:33102] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 20:35:54.803325 2026] [:error] [pid 63416:tid 63443] [client 20.203.142.107:33102] [client 20.203.142.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "aY3JKr2wmecPaCHcM2_FJAAAAZY"]
[Thu Feb 12 20:35:55.678513 2026] [:error] [pid 65064:tid 65091] [client 20.203.142.107:57737] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aY3JKxOvRgscTcqsMBnzOQAAANg"]
[Thu Feb 12 20:35:56.821992 2026] [:error] [pid 63416:tid 63422] [client 20.203.142.107:57860] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aY3JLL2wmecPaCHcM2_FKQAAAYE"]
[Thu Feb 12 20:35:57.443280 2026] [:error] [pid 63417:tid 63463] [client 20.203.142.107:47999] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aY3JLf8gSb97qRMtXCLoNAAAAE4"]
[Thu Feb 12 20:35:58.725009 2026] [:error] [pid 65064:tid 65076] [client 20.203.142.107:50847] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aY3JLhOvRgscTcqsMBnzRAAAAMk"]
[Thu Feb 12 20:35:59.588388 2026] [:error] [pid 65064:tid 65089] [client 20.203.142.107:57784] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aY3JLxOvRgscTcqsMBnzSQAAANY"]
[Thu Feb 12 20:36:00.327095 2026] [:error] [pid 65064:tid 65083] [client 20.203.142.107:50855] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aY3JMBOvRgscTcqsMBnzTQAAANA"]
[Thu Feb 12 20:36:01.385706 2026] [:error] [pid 65064:tid 65089] [client 20.203.142.107:32252] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aY3JMROvRgscTcqsMBnzUgAAANY"]
[Thu Feb 12 20:36:02.084707 2026] [:error] [pid 65064:tid 65076] [client 20.203.142.107:57869] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aY3JMhOvRgscTcqsMBnzUwAAAMk"]
[Thu Feb 12 20:36:02.875173 2026] [:error] [pid 63418:tid 63488] [client 20.203.142.107:32217] [client 20.203.142.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aY3JMtzjh-bbJnStPZLj1AAAAIw"]
[Thu Feb 12 20:36:03.527370 2026] [:error] [pid 63418:tid 63486] [client 20.203.142.107:51707] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/index/function.php"] [unique_id "aY3JM9zjh-bbJnStPZLj1QAAAIo"]
[Thu Feb 12 20:36:04.138824 2026] [:error] [pid 63416:tid 63441] [client 20.203.142.107:54570] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/index/function.php"] [unique_id "aY3JNL2wmecPaCHcM2_FMQAAAZQ"]
[Thu Feb 12 20:36:05.098435 2026] [:error] [pid 65064:tid 65089] [client 20.203.142.107:29130] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/index/function.php"] [unique_id "aY3JNROvRgscTcqsMBnzVwAAANY"]
[Thu Feb 12 20:36:06.211957 2026] [:error] [pid 63511:tid 63524] [client 20.203.142.107:57918] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/index/function.php"] [unique_id "aY3JNqQCQbD5BgeyIk0bsgAAAAs"]
[Thu Feb 12 20:36:07.023657 2026] [:error] [pid 63417:tid 63472] [client 20.203.142.107:54546] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aY3JN_8gSb97qRMtXCLoOwAAAFc"]
[Thu Feb 12 20:36:07.608868 2026] [:error] [pid 63416:tid 63439] [client 20.203.142.107:57773] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aY3JN72wmecPaCHcM2_FMwAAAZI"]
[Thu Feb 12 20:36:08.262542 2026] [:error] [pid 65064:tid 65084] [client 20.203.142.107:44277] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aY3JOBOvRgscTcqsMBnzXwAAANE"]
[Thu Feb 12 20:36:09.421302 2026] [:error] [pid 65064:tid 65072] [client 20.203.142.107:54591] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aY3JOROvRgscTcqsMBnzYAAAAMU"]
[Thu Feb 12 20:36:10.392421 2026] [:error] [pid 65064:tid 65078] [client 20.203.142.107:57743] [client 20.203.142.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aY3JOhOvRgscTcqsMBnzYwAAAMs"]
[Thu Feb 12 20:36:11.164517 2026] [:error] [pid 65064:tid 65090] [client 20.203.142.107:4717] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ww1.php"] [unique_id "aY3JOxOvRgscTcqsMBnzZwAAANc"]
[Thu Feb 12 20:36:11.943334 2026] [:error] [pid 65064:tid 65071] [client 20.203.142.107:57894] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ww1.php"] [unique_id "aY3JOxOvRgscTcqsMBnzawAAAMQ"]
[Thu Feb 12 20:36:12.813795 2026] [:error] [pid 63416:tid 63429] [client 20.203.142.107:35082] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ww1.php"] [unique_id "aY3JPL2wmecPaCHcM2_FOQAAAYg"]
[Thu Feb 12 20:36:13.360811 2026] [:error] [pid 63418:tid 63486] [client 20.203.142.107:32232] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/about/function.php"] [unique_id "aY3JPdzjh-bbJnStPZLj3wAAAIo"]
[Thu Feb 12 20:36:13.874868 2026] [:error] [pid 65064:tid 65087] [client 20.203.142.107:4459] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/about/function.php"] [unique_id "aY3JPROvRgscTcqsMBnzcwAAANQ"]
[Thu Feb 12 20:36:14.567537 2026] [:error] [pid 63418:tid 63476] [client 20.203.142.107:33119] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/about/function.php"] [unique_id "aY3JPtzjh-bbJnStPZLj4AAAAIA"]
[Thu Feb 12 20:36:15.254207 2026] [:error] [pid 63511:tid 63537] [client 20.203.142.107:4703] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/about/function.php"] [unique_id "aY3JP6QCQbD5BgeyIk0buAAAABg"]
[Thu Feb 12 20:36:15.849260 2026] [:error] [pid 63511:tid 63518] [client 20.203.142.107:37313] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin/function.php"] [unique_id "aY3JP6QCQbD5BgeyIk0buwAAAAU"]
[Thu Feb 12 20:36:16.724541 2026] [:error] [pid 63416:tid 63431] [client 20.203.142.107:51658] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin/function.php"] [unique_id "aY3JQL2wmecPaCHcM2_FPAAAAYo"]
[Thu Feb 12 20:36:17.700176 2026] [:error] [pid 65064:tid 65078] [client 20.203.142.107:54536] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin/function.php"] [unique_id "aY3JQROvRgscTcqsMBnzewAAAMs"]
[Thu Feb 12 20:36:18.613700 2026] [:error] [pid 65064:tid 65084] [client 20.203.142.107:35104] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin/function.php"] [unique_id "aY3JQhOvRgscTcqsMBnzfQAAANE"]
[Thu Feb 12 20:36:19.461225 2026] [:error] [pid 65064:tid 65073] [client 20.203.142.107:32098] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aY3JQxOvRgscTcqsMBnzggAAAMY"]
[Thu Feb 12 20:36:20.910838 2026] [:error] [pid 63418:tid 63479] [client 20.203.142.107:35103] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aY3JRNzjh-bbJnStPZLj5wAAAIM"]
[Thu Feb 12 20:36:22.249688 2026] [:error] [pid 63416:tid 63445] [client 20.203.142.107:32113] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aY3JRr2wmecPaCHcM2_FQQAAAZg"]
[Thu Feb 12 20:36:23.018859 2026] [:error] [pid 65064:tid 65086] [client 20.203.142.107:32108] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aY3JRxOvRgscTcqsMBnzlgAAANM"]
[Thu Feb 12 20:36:23.945092 2026] [:error] [pid 65064:tid 65091] [client 20.203.142.107:37330] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aY3JRxOvRgscTcqsMBnzmQAAANg"]
[Thu Feb 12 20:36:25.249525 2026] [:error] [pid 65064:tid 65080] [client 20.203.142.107:47965] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aY3JSROvRgscTcqsMBnzoAAAAM0"]
[Thu Feb 12 20:36:26.303513 2026] [:error] [pid 65064:tid 65091] [client 20.203.142.107:32108] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aY3JShOvRgscTcqsMBnzpQAAANg"]
[Thu Feb 12 20:36:27.394874 2026] [:error] [pid 65064:tid 65079] [client 20.203.142.107:4711] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aY3JSxOvRgscTcqsMBnzrAAAAMw"]
[Thu Feb 12 20:36:28.083471 2026] [:error] [pid 65064:tid 65073] [client 20.203.142.107:32078] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/security.php"] [unique_id "aY3JTBOvRgscTcqsMBnzrQAAAMY"]
[Thu Feb 12 20:36:29.806189 2026] [:error] [pid 65064:tid 65070] [client 20.203.142.107:35080] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/security.php"] [unique_id "aY3JTROvRgscTcqsMBnzsgAAAMM"]
[Thu Feb 12 20:36:37.254944 2026] [:error] [pid 63418:tid 63485] [client 20.203.142.107:4424] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/security.php"] [unique_id "aY3JVdzjh-bbJnStPZLj9QAAAIk"]
[Thu Feb 12 20:36:37.960175 2026] [:error] [pid 63418:tid 63486] [client 20.203.142.107:32077] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/security.php"] [unique_id "aY3JVdzjh-bbJnStPZLj-QAAAIo"]
[Thu Feb 12 20:36:39.117312 2026] [:error] [pid 65064:tid 65089] [client 20.203.142.107:4777] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aY3JVxOvRgscTcqsMBnzwAAAANY"]
[Thu Feb 12 20:36:39.695747 2026] [:error] [pid 63511:tid 63520] [client 20.203.142.107:4682] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aY3JV6QCQbD5BgeyIk0byAAAAAc"]
[Thu Feb 12 20:36:40.645166 2026] [:error] [pid 63417:tid 63468] [client 20.203.142.107:32074] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aY3JWP8gSb97qRMtXCLoTwAAAFM"]
[Thu Feb 12 20:36:41.267168 2026] [:error] [pid 63416:tid 63445] [client 20.203.142.107:45449] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aY3JWb2wmecPaCHcM2_FYQAAAZg"]
[Thu Feb 12 20:36:42.417979 2026] [:error] [pid 63417:tid 63471] [client 20.203.142.107:54554] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aY3JWv8gSb97qRMtXCLoVgAAAFY"]
[Thu Feb 12 20:36:43.466469 2026] [:error] [pid 65064:tid 65077] [client 20.203.142.107:50557] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aY3JWxOvRgscTcqsMBnzxAAAAMo"]
[Thu Feb 12 20:36:44.098510 2026] [:error] [pid 63416:tid 63426] [client 20.203.142.107:44259] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aY3JXL2wmecPaCHcM2_FZwAAAYU"]
[Thu Feb 12 20:36:44.720717 2026] [:error] [pid 63417:tid 63456] [client 20.203.142.107:35115] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aY3JXP8gSb97qRMtXCLoWQAAAEc"]
[Thu Feb 12 20:36:45.377653 2026] [:error] [pid 63417:tid 63451] [client 20.203.142.107:33141] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aY3JXf8gSb97qRMtXCLoXAAAAEI"]
[Thu Feb 12 20:36:46.048062 2026] [:error] [pid 63416:tid 63436] [client 20.203.142.107:4460] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aY3JXr2wmecPaCHcM2_FbAAAAY8"]
[Thu Feb 12 20:36:46.584505 2026] [:error] [pid 63511:tid 63514] [client 20.203.142.107:32127] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aY3JXqQCQbD5BgeyIk0bzQAAAAE"]
[Thu Feb 12 20:36:47.255382 2026] [:error] [pid 63416:tid 63445] [client 20.203.142.107:4951] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aY3JX72wmecPaCHcM2_FbgAAAZg"]
[Thu Feb 12 20:36:47.865581 2026] [:error] [pid 63416:tid 63434] [client 20.203.142.107:4747] [client 20.203.142.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aY3JX72wmecPaCHcM2_FcAAAAY0"]
[Thu Feb 12 20:36:48.464751 2026] [:error] [pid 63417:tid 63455] [client 20.203.142.107:41068] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/radio.php"] [unique_id "aY3JYP8gSb97qRMtXCLoXQAAAEY"]
[Thu Feb 12 20:36:49.062327 2026] [:error] [pid 63417:tid 63452] [client 20.203.142.107:4157] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/radio.php"] [unique_id "aY3JYf8gSb97qRMtXCLoXgAAAEM"]
[Thu Feb 12 20:36:49.626352 2026] [:error] [pid 63417:tid 63471] [client 20.203.142.107:4617] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/radio.php"] [unique_id "aY3JYf8gSb97qRMtXCLoYAAAAFY"]
[Thu Feb 12 20:36:50.169603 2026] [:error] [pid 65064:tid 65078] [client 20.203.142.107:41041] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/radio.php"] [unique_id "aY3JYhOvRgscTcqsMBnz1AAAAMs"]
[Thu Feb 12 20:36:50.743375 2026] [:error] [pid 65064:tid 65088] [client 20.203.142.107:41035] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aY3JYhOvRgscTcqsMBnz1QAAANU"]
[Thu Feb 12 20:36:51.387495 2026] [:error] [pid 65064:tid 65073] [client 20.203.142.107:55370] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aY3JYxOvRgscTcqsMBnz1gAAAMY"]
[Thu Feb 12 20:36:52.927064 2026] [:error] [pid 63418:tid 63481] [client 20.203.142.107:4957] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aY3JZNzjh-bbJnStPZLkAQAAAIU"]
[Thu Feb 12 20:36:54.080371 2026] [:error] [pid 63511:tid 63515] [client 20.203.142.107:45465] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aY3JZqQCQbD5BgeyIk0b3AAAAAI"]
[Thu Feb 12 20:36:54.906621 2026] [:error] [pid 63511:tid 63520] [client 20.203.142.107:45454] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/admin.php"] [unique_id "aY3JZqQCQbD5BgeyIk0b3QAAAAc"]
[Thu Feb 12 20:36:59.669734 2026] [proxy_fcgi:error] [pid 63417:tid 63453] [client 20.203.142.107:58113] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 20:36:59.925866 2026] [proxy_fcgi:error] [pid 63417:tid 63456] [client 20.203.142.107:58113] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 20:37:00.162650 2026] [:error] [pid 63417:tid 63465] [client 20.203.142.107:58113] [client 20.203.142.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aY3JbP8gSb97qRMtXCLocQAAAFA"]
[Thu Feb 12 20:37:02.873132 2026] [:error] [pid 63511:tid 63533] [client 20.203.142.107:43734] [client 20.203.142.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/block-patterns/index.php"] [unique_id "aY3JbqQCQbD5BgeyIk0b6AAAABQ"]
[Thu Feb 12 20:37:03.921615 2026] [proxy_fcgi:error] [pid 65064:tid 65082] [client 20.203.142.107:41043] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 20:37:04.290497 2026] [proxy_fcgi:error] [pid 65064:tid 65073] [client 20.203.142.107:41043] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 20:37:04.857312 2026] [proxy_fcgi:error] [pid 65064:tid 65077] [client 20.203.142.107:41043] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 20:37:05.192500 2026] [proxy_fcgi:error] [pid 65064:tid 65071] [client 20.203.142.107:41043] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 20:37:05.433858 2026] [:error] [pid 65064:tid 65082] [client 20.203.142.107:41043] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ha.php"] [unique_id "aY3JcROvRgscTcqsMBnz-QAAAM8"]
[Thu Feb 12 20:37:06.223584 2026] [:error] [pid 63416:tid 63435] [client 20.203.142.107:41310] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ha.php"] [unique_id "aY3Jcr2wmecPaCHcM2_FgwAAAY4"]
[Thu Feb 12 20:37:07.157053 2026] [:error] [pid 63511:tid 63514] [client 20.203.142.107:55454] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ha.php"] [unique_id "aY3Jc6QCQbD5BgeyIk0b8AAAAAE"]
[Thu Feb 12 20:37:08.508112 2026] [:error] [pid 63416:tid 63433] [client 20.203.142.107:36119] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ha.php"] [unique_id "aY3JdL2wmecPaCHcM2_FiQAAAYw"]
[Thu Feb 12 20:37:09.355072 2026] [:error] [pid 63416:tid 63422] [client 20.203.142.107:36106] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gg.php"] [unique_id "aY3Jdb2wmecPaCHcM2_FjQAAAYE"]
[Thu Feb 12 20:37:10.067010 2026] [:error] [pid 63511:tid 63536] [client 20.203.142.107:41343] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gg.php"] [unique_id "aY3JdqQCQbD5BgeyIk0b9AAAABc"]
[Thu Feb 12 20:37:10.854390 2026] [:error] [pid 65064:tid 65078] [client 20.203.142.107:55444] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gg.php"] [unique_id "aY3JdhOvRgscTcqsMBn0BAAAAMs"]
[Thu Feb 12 20:37:11.369099 2026] [:error] [pid 65064:tid 65087] [client 20.203.142.107:55474] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gg.php"] [unique_id "aY3JdxOvRgscTcqsMBn0BwAAANQ"]
[Thu Feb 12 20:37:12.306242 2026] [:error] [pid 63511:tid 63519] [client 20.203.142.107:4640] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/we2.php"] [unique_id "aY3JeKQCQbD5BgeyIk0b9QAAAAY"]
[Thu Feb 12 20:37:13.342569 2026] [:error] [pid 63511:tid 63515] [client 20.203.142.107:57389] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/we2.php"] [unique_id "aY3JeaQCQbD5BgeyIk0b9wAAAAI"]
[Thu Feb 12 20:37:14.748690 2026] [:error] [pid 63418:tid 63498] [client 20.203.142.107:41280] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/we2.php"] [unique_id "aY3Jetzjh-bbJnStPZLkHQAAAJY"]
[Thu Feb 12 20:37:15.474104 2026] [:error] [pid 65064:tid 65085] [client 20.203.142.107:30801] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/we2.php"] [unique_id "aY3JexOvRgscTcqsMBn0DgAAANI"]
[Thu Feb 12 20:37:16.262801 2026] [:error] [pid 63417:tid 63462] [client 20.203.142.107:41235] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/04.php"] [unique_id "aY3JfP8gSb97qRMtXCLoggAAAE0"]
[Thu Feb 12 20:37:16.892156 2026] [:error] [pid 63511:tid 63518] [client 20.203.142.107:41341] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/04.php"] [unique_id "aY3JfKQCQbD5BgeyIk0b_AAAAAU"]
[Thu Feb 12 20:37:17.607804 2026] [:error] [pid 65064:tid 65081] [client 20.203.142.107:55443] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/04.php"] [unique_id "aY3JfROvRgscTcqsMBn0EAAAAM4"]
[Thu Feb 12 20:37:18.269564 2026] [:error] [pid 63418:tid 63497] [client 20.203.142.107:32141] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/04.php"] [unique_id "aY3Jftzjh-bbJnStPZLkJgAAAJU"]
[Thu Feb 12 20:37:18.801827 2026] [:error] [pid 63416:tid 63425] [client 20.203.142.107:36158] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/333.php"] [unique_id "aY3Jfr2wmecPaCHcM2_FlQAAAYQ"]
[Thu Feb 12 20:37:20.043815 2026] [:error] [pid 63418:tid 63496] [client 20.203.142.107:30813] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/333.php"] [unique_id "aY3JgNzjh-bbJnStPZLkLAAAAJQ"]
[Thu Feb 12 20:37:20.897500 2026] [:error] [pid 65064:tid 65085] [client 20.203.142.107:32174] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/333.php"] [unique_id "aY3JgBOvRgscTcqsMBn0FgAAANI"]
[Thu Feb 12 20:37:21.417471 2026] [:error] [pid 63417:tid 63451] [client 20.203.142.107:33842] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/333.php"] [unique_id "aY3Jgf8gSb97qRMtXCLoiAAAAEI"]
[Thu Feb 12 20:37:21.953358 2026] [:error] [pid 63511:tid 63520] [client 20.203.142.107:55446] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/520.php"] [unique_id "aY3JgaQCQbD5BgeyIk0cAAAAAAc"]
[Thu Feb 12 20:37:22.547915 2026] [:error] [pid 65064:tid 65087] [client 20.203.142.107:49821] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/520.php"] [unique_id "aY3JghOvRgscTcqsMBn0GgAAANQ"]
[Thu Feb 12 20:37:23.197441 2026] [:error] [pid 63418:tid 63476] [client 20.203.142.107:40624] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/520.php"] [unique_id "aY3Jg9zjh-bbJnStPZLkNwAAAIA"]
[Thu Feb 12 20:37:24.041902 2026] [:error] [pid 63416:tid 63438] [client 20.203.142.107:41236] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/520.php"] [unique_id "aY3JhL2wmecPaCHcM2_FmgAAAZE"]
[Thu Feb 12 20:37:25.115487 2026] [:error] [pid 63511:tid 63532] [client 20.203.142.107:49034] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ar.php"] [unique_id "aY3JhaQCQbD5BgeyIk0cBAAAABM"]
[Thu Feb 12 20:37:25.797208 2026] [:error] [pid 63418:tid 63484] [client 20.203.142.107:49087] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ar.php"] [unique_id "aY3Jhdzjh-bbJnStPZLkOgAAAIg"]
[Thu Feb 12 20:37:26.335318 2026] [:error] [pid 63511:tid 63529] [client 20.203.142.107:49084] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ar.php"] [unique_id "aY3JhqQCQbD5BgeyIk0cCgAAABA"]
[Thu Feb 12 20:37:27.179408 2026] [:error] [pid 63511:tid 63525] [client 20.203.142.107:40605] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ar.php"] [unique_id "aY3Jh6QCQbD5BgeyIk0cDQAAAAw"]
[Thu Feb 12 20:37:27.774820 2026] [:error] [pid 63511:tid 63520] [client 20.203.142.107:40622] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x.php"] [unique_id "aY3Jh6QCQbD5BgeyIk0cDwAAAAc"]
[Thu Feb 12 20:37:28.598070 2026] [:error] [pid 63416:tid 63439] [client 20.203.142.107:57924] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x.php"] [unique_id "aY3JiL2wmecPaCHcM2_FoAAAAZI"]
[Thu Feb 12 20:37:29.839290 2026] [:error] [pid 63511:tid 63516] [client 20.203.142.107:53479] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x.php"] [unique_id "aY3JiaQCQbD5BgeyIk0cFgAAAAM"]
[Thu Feb 12 20:37:30.803746 2026] [:error] [pid 63511:tid 63524] [client 20.203.142.107:57949] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x.php"] [unique_id "aY3JiqQCQbD5BgeyIk0cFwAAAAs"]
[Thu Feb 12 20:37:31.711513 2026] [:error] [pid 63418:tid 63494] [client 20.203.142.107:36923] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xx.php"] [unique_id "aY3Ji9zjh-bbJnStPZLkPgAAAJI"]
[Thu Feb 12 20:37:32.251240 2026] [:error] [pid 63511:tid 63520] [client 20.203.142.107:29793] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xx.php"] [unique_id "aY3JjKQCQbD5BgeyIk0cGQAAAAc"]
[Thu Feb 12 20:37:33.244860 2026] [:error] [pid 63511:tid 63534] [client 20.203.142.107:49048] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xx.php"] [unique_id "aY3JjaQCQbD5BgeyIk0cGwAAABU"]
[Thu Feb 12 20:37:34.001619 2026] [:error] [pid 63417:tid 63453] [client 20.203.142.107:45060] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xx.php"] [unique_id "aY3Jjv8gSb97qRMtXCLolQAAAEQ"]
[Thu Feb 12 20:37:34.514045 2026] [:error] [pid 63418:tid 63490] [client 20.203.142.107:36889] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gifclass4.php"] [unique_id "aY3Jjtzjh-bbJnStPZLkQgAAAI4"]
[Thu Feb 12 20:37:35.248507 2026] [:error] [pid 63416:tid 63422] [client 20.203.142.107:36916] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gifclass4.php"] [unique_id "aY3Jj72wmecPaCHcM2_FqQAAAYE"]
[Thu Feb 12 20:37:35.938322 2026] [:error] [pid 63416:tid 63437] [client 20.203.142.107:29808] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gifclass4.php"] [unique_id "aY3Jj72wmecPaCHcM2_FrQAAAZA"]
[Thu Feb 12 20:37:36.575160 2026] [:error] [pid 63416:tid 63421] [client 20.203.142.107:5094] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gifclass4.php"] [unique_id "aY3JkL2wmecPaCHcM2_FsAAAAYA"]
[Thu Feb 12 20:37:37.113930 2026] [:error] [pid 63418:tid 63482] [client 20.203.142.107:5104] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2clas.php"] [unique_id "aY3Jkdzjh-bbJnStPZLkRgAAAIY"]
[Thu Feb 12 20:37:37.944299 2026] [:error] [pid 65064:tid 65069] [client 20.203.142.107:29799] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2clas.php"] [unique_id "aY3JkROvRgscTcqsMBn0LAAAAMI"]
[Thu Feb 12 20:37:38.796830 2026] [:error] [pid 63416:tid 63434] [client 20.203.142.107:53643] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2clas.php"] [unique_id "aY3Jkr2wmecPaCHcM2_FtQAAAY0"]
[Thu Feb 12 20:37:39.586810 2026] [:error] [pid 63511:tid 63532] [client 20.203.142.107:53420] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2clas.php"] [unique_id "aY3Jk6QCQbD5BgeyIk0cLQAAABM"]
[Thu Feb 12 20:37:40.412526 2026] [:error] [pid 63417:tid 63467] [client 20.203.142.107:5095] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ave.php"] [unique_id "aY3JlP8gSb97qRMtXCLoowAAAFI"]
[Thu Feb 12 20:37:41.003116 2026] [:error] [pid 63418:tid 63495] [client 20.203.142.107:49086] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ave.php"] [unique_id "aY3Jldzjh-bbJnStPZLkSgAAAJM"]
[Thu Feb 12 20:37:41.600423 2026] [:error] [pid 63418:tid 63488] [client 20.203.142.107:53658] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ave.php"] [unique_id "aY3Jldzjh-bbJnStPZLkTQAAAIw"]
[Thu Feb 12 20:37:42.265729 2026] [:error] [pid 65064:tid 65074] [client 20.203.142.107:53692] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ave.php"] [unique_id "aY3JlhOvRgscTcqsMBn0NwAAAMc"]
[Thu Feb 12 20:37:43.000922 2026] [:error] [pid 65064:tid 65077] [client 20.203.142.107:5064] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wrt.php"] [unique_id "aY3JlxOvRgscTcqsMBn0PQAAAMo"]
[Thu Feb 12 20:37:43.908757 2026] [:error] [pid 63416:tid 63425] [client 20.203.142.107:53462] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wrt.php"] [unique_id "aY3Jl72wmecPaCHcM2_FvgAAAYQ"]
[Thu Feb 12 20:37:44.667213 2026] [:error] [pid 63418:tid 63484] [client 20.203.142.107:53504] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wrt.php"] [unique_id "aY3JmNzjh-bbJnStPZLkUgAAAIg"]
[Thu Feb 12 20:37:45.221768 2026] [:error] [pid 65064:tid 65072] [client 20.203.142.107:53651] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wrt.php"] [unique_id "aY3JmROvRgscTcqsMBn0QgAAAMU"]
[Thu Feb 12 20:37:45.761345 2026] [:error] [pid 63418:tid 63482] [client 20.203.142.107:44781] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bibil.php"] [unique_id "aY3Jmdzjh-bbJnStPZLkUwAAAIY"]
[Thu Feb 12 20:37:46.415243 2026] [:error] [pid 63418:tid 63499] [client 20.203.142.107:53431] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bibil.php"] [unique_id "aY3Jmtzjh-bbJnStPZLkVQAAAJc"]
[Thu Feb 12 20:37:47.374599 2026] [:error] [pid 63418:tid 63496] [client 20.203.142.107:38080] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bibil.php"] [unique_id "aY3Jm9zjh-bbJnStPZLkXQAAAJQ"]
[Thu Feb 12 20:37:48.104856 2026] [:error] [pid 63418:tid 63498] [client 20.203.142.107:49006] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bibil.php"] [unique_id "aY3JnNzjh-bbJnStPZLkYAAAAJY"]
[Thu Feb 12 20:37:48.644145 2026] [:error] [pid 63511:tid 63527] [client 20.203.142.107:29765] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/radio.php"] [unique_id "aY3JnKQCQbD5BgeyIk0cNgAAAA4"]
[Thu Feb 12 20:37:49.154243 2026] [:error] [pid 65064:tid 65088] [client 20.203.142.107:53676] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/radio.php"] [unique_id "aY3JnROvRgscTcqsMBn0TQAAANU"]
[Thu Feb 12 20:37:49.746302 2026] [:error] [pid 65064:tid 65089] [client 20.203.142.107:44775] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/radio.php"] [unique_id "aY3JnROvRgscTcqsMBn0UAAAANY"]
[Thu Feb 12 20:37:50.363032 2026] [:error] [pid 65064:tid 65076] [client 20.203.142.107:35621] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/radio.php"] [unique_id "aY3JnhOvRgscTcqsMBn0VgAAAMk"]
[Thu Feb 12 20:37:51.486482 2026] [:error] [pid 63416:tid 63443] [client 20.203.142.107:30798] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/files.php"] [unique_id "aY3Jn72wmecPaCHcM2_FyQAAAZY"]
[Thu Feb 12 20:37:52.282884 2026] [:error] [pid 63417:tid 63462] [client 20.203.142.107:53435] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/files.php"] [unique_id "aY3JoP8gSb97qRMtXCLorgAAAE0"]
[Thu Feb 12 20:37:52.832855 2026] [:error] [pid 63417:tid 63459] [client 20.203.142.107:48063] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/files.php"] [unique_id "aY3JoP8gSb97qRMtXCLorwAAAEo"]
[Thu Feb 12 20:37:53.460218 2026] [:error] [pid 63416:tid 63441] [client 20.203.142.107:55242] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/files.php"] [unique_id "aY3Job2wmecPaCHcM2_F0AAAAZQ"]
[Thu Feb 12 20:37:54.351329 2026] [:error] [pid 63417:tid 63455] [client 20.203.142.107:38099] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file7.php"] [unique_id "aY3Jov8gSb97qRMtXCLosAAAAEY"]
[Thu Feb 12 20:37:55.142251 2026] [:error] [pid 63511:tid 63519] [client 20.203.142.107:48972] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file7.php"] [unique_id "aY3Jo6QCQbD5BgeyIk0cQQAAAAY"]
[Thu Feb 12 20:37:55.721301 2026] [:error] [pid 63416:tid 63421] [client 20.203.142.107:33772] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file7.php"] [unique_id "aY3Jo72wmecPaCHcM2_F1wAAAYA"]
[Thu Feb 12 20:37:56.385420 2026] [:error] [pid 65064:tid 65081] [client 20.203.142.107:4312] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file7.php"] [unique_id "aY3JpBOvRgscTcqsMBn0XQAAAM4"]
[Thu Feb 12 20:37:56.940464 2026] [:error] [pid 63417:tid 63471] [client 20.203.142.107:31343] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gifclass.php"] [unique_id "aY3JpP8gSb97qRMtXCLotwAAAFY"]
[Thu Feb 12 20:37:57.830214 2026] [:error] [pid 65064:tid 65077] [client 20.203.142.107:30289] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gifclass.php"] [unique_id "aY3JpROvRgscTcqsMBn0YQAAAMo"]
[Thu Feb 12 20:37:58.999927 2026] [:error] [pid 65064:tid 65082] [client 20.203.142.107:33775] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gifclass.php"] [unique_id "aY3JphOvRgscTcqsMBn0aAAAAM8"]
[Thu Feb 12 20:37:59.573087 2026] [:error] [pid 63417:tid 63469] [client 20.203.142.107:4291] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gifclass.php"] [unique_id "aY3Jp_8gSb97qRMtXCLouQAAAFQ"]
[Thu Feb 12 20:38:00.206770 2026] [:error] [pid 65064:tid 65073] [client 20.203.142.107:4305] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aY3JqBOvRgscTcqsMBn0bAAAAMY"]
[Thu Feb 12 20:38:00.702739 2026] [:error] [pid 63418:tid 63488] [client 20.203.142.107:31299] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aY3JqNzjh-bbJnStPZLkawAAAIw"]
[Thu Feb 12 20:38:01.415523 2026] [:error] [pid 63511:tid 63517] [client 20.203.142.107:58107] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aY3JqaQCQbD5BgeyIk0cRwAAAAQ"]
[Thu Feb 12 20:38:02.173604 2026] [:error] [pid 63416:tid 63438] [client 20.203.142.107:51539] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aY3Jqr2wmecPaCHcM2_F5AAAAZE"]
[Thu Feb 12 20:38:02.654223 2026] [:error] [pid 63511:tid 63535] [client 20.203.142.107:52991] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nox.php"] [unique_id "aY3JqqQCQbD5BgeyIk0cTAAAABY"]
[Thu Feb 12 20:38:03.206531 2026] [:error] [pid 65064:tid 65068] [client 20.203.142.107:32659] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nox.php"] [unique_id "aY3JqxOvRgscTcqsMBn0cQAAAME"]
[Thu Feb 12 20:38:03.709529 2026] [:error] [pid 63418:tid 63476] [client 20.203.142.107:51582] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nox.php"] [unique_id "aY3Jq9zjh-bbJnStPZLkegAAAIA"]
[Thu Feb 12 20:38:04.511539 2026] [:error] [pid 63418:tid 63499] [client 20.203.142.107:51546] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nox.php"] [unique_id "aY3JrNzjh-bbJnStPZLkgQAAAJc"]
[Thu Feb 12 20:38:05.295074 2026] [proxy_fcgi:error] [pid 65064:tid 65075] [client 20.203.142.107:52962] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 20:38:05.536533 2026] [proxy_fcgi:error] [pid 65064:tid 65079] [client 20.203.142.107:52962] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 20:38:05.805202 2026] [proxy_fcgi:error] [pid 65064:tid 65086] [client 20.203.142.107:52962] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 20:38:06.052426 2026] [proxy_fcgi:error] [pid 65064:tid 65071] [client 20.203.142.107:52962] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 20:38:06.294189 2026] [proxy_fcgi:error] [pid 65064:tid 65088] [client 20.203.142.107:52962] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 20:38:06.556432 2026] [proxy_fcgi:error] [pid 65064:tid 65077] [client 20.203.142.107:52962] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 20:38:06.795799 2026] [proxy_fcgi:error] [pid 65064:tid 65070] [client 20.203.142.107:52962] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 20:38:07.036240 2026] [proxy_fcgi:error] [pid 65064:tid 65074] [client 20.203.142.107:52962] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 20:38:07.277118 2026] [proxy_fcgi:error] [pid 65064:tid 65086] [client 20.203.142.107:52962] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 20:38:07.546021 2026] [proxy_fcgi:error] [pid 65064:tid 65067] [client 20.203.142.107:52962] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 20:38:07.787708 2026] [proxy_fcgi:error] [pid 65064:tid 65087] [client 20.203.142.107:52962] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 20:38:08.024646 2026] [:error] [pid 65064:tid 65073] [client 20.203.142.107:52962] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/pop.php"] [unique_id "aY3JsBOvRgscTcqsMBn0jgAAAMY"]
[Thu Feb 12 20:38:08.597124 2026] [:error] [pid 63416:tid 63439] [client 20.203.142.107:36986] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/pop.php"] [unique_id "aY3JsL2wmecPaCHcM2_F8gAAAZI"]
[Thu Feb 12 20:38:09.134427 2026] [:error] [pid 63511:tid 63521] [client 20.203.142.107:32650] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/pop.php"] [unique_id "aY3JsaQCQbD5BgeyIk0cYAAAAAg"]
[Thu Feb 12 20:38:09.854037 2026] [:error] [pid 65064:tid 65068] [client 20.203.142.107:48524] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/pop.php"] [unique_id "aY3JsROvRgscTcqsMBn0mAAAAME"]
[Thu Feb 12 20:38:10.328623 2026] [:error] [pid 63417:tid 63456] [client 20.203.142.107:42652] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/az.php"] [unique_id "aY3Jsv8gSb97qRMtXCLo5wAAAEc"]
[Thu Feb 12 20:38:11.007116 2026] [:error] [pid 65064:tid 65089] [client 20.203.142.107:50315] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/az.php"] [unique_id "aY3JsxOvRgscTcqsMBn0ogAAANY"]
[Thu Feb 12 20:38:11.577472 2026] [:error] [pid 63511:tid 63523] [client 20.203.142.107:36623] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/az.php"] [unique_id "aY3Js6QCQbD5BgeyIk0caQAAAAo"]
[Thu Feb 12 20:38:12.306406 2026] [:error] [pid 63511:tid 63521] [client 20.203.142.107:34542] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/az.php"] [unique_id "aY3JtKQCQbD5BgeyIk0cawAAAAg"]
[Thu Feb 12 20:38:12.912256 2026] [:error] [pid 63511:tid 63528] [client 20.203.142.107:54211] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xaz.php"] [unique_id "aY3JtKQCQbD5BgeyIk0cbgAAAA8"]
[Thu Feb 12 20:38:13.406638 2026] [:error] [pid 63417:tid 63452] [client 20.203.142.107:34553] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xaz.php"] [unique_id "aY3Jtf8gSb97qRMtXCLo7QAAAEM"]
[Thu Feb 12 20:38:14.189169 2026] [:error] [pid 63511:tid 63529] [client 20.203.142.107:36942] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xaz.php"] [unique_id "aY3JtqQCQbD5BgeyIk0cdwAAABA"]
[Thu Feb 12 20:38:14.817183 2026] [:error] [pid 63418:tid 63490] [client 20.203.142.107:50600] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xaz.php"] [unique_id "aY3Jttzjh-bbJnStPZLksAAAAI4"]
[Thu Feb 12 20:38:15.584939 2026] [:error] [pid 65064:tid 65071] [client 20.203.142.107:50575] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/up4.php"] [unique_id "aY3JtxOvRgscTcqsMBn0wgAAAMQ"]
[Thu Feb 12 20:38:16.313329 2026] [:error] [pid 65064:tid 65078] [client 20.203.142.107:45167] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/up4.php"] [unique_id "aY3JuBOvRgscTcqsMBn0xQAAAMs"]
[Thu Feb 12 20:38:16.868240 2026] [:error] [pid 65064:tid 65088] [client 20.203.142.107:48545] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/up4.php"] [unique_id "aY3JuBOvRgscTcqsMBn0ywAAANU"]
[Thu Feb 12 20:38:17.389764 2026] [:error] [pid 65064:tid 65086] [client 20.203.142.107:45139] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/up4.php"] [unique_id "aY3JuROvRgscTcqsMBn0zAAAANM"]
[Thu Feb 12 20:38:17.903515 2026] [:error] [pid 65064:tid 65082] [client 20.203.142.107:54049] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/1aa.php"] [unique_id "aY3JuROvRgscTcqsMBn0zwAAAM8"]
[Thu Feb 12 20:38:18.663169 2026] [:error] [pid 63511:tid 63519] [client 20.203.142.107:52906] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/1aa.php"] [unique_id "aY3JuqQCQbD5BgeyIk0chwAAAAY"]
[Thu Feb 12 20:38:19.191484 2026] [:error] [pid 65064:tid 65085] [client 20.203.142.107:52290] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/1aa.php"] [unique_id "aY3JuxOvRgscTcqsMBn02AAAANI"]
[Thu Feb 12 20:38:19.730539 2026] [:error] [pid 63416:tid 63425] [client 20.203.142.107:52313] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/1aa.php"] [unique_id "aY3Ju72wmecPaCHcM2_GDwAAAYQ"]
[Thu Feb 12 20:38:20.422370 2026] [:error] [pid 63511:tid 63536] [client 20.203.142.107:52828] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/elp.php"] [unique_id "aY3JvKQCQbD5BgeyIk0cjAAAABc"]
[Thu Feb 12 20:38:21.336737 2026] [:error] [pid 65064:tid 65084] [client 20.203.142.107:45151] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/elp.php"] [unique_id "aY3JvROvRgscTcqsMBn05AAAANE"]
[Thu Feb 12 20:38:21.898725 2026] [:error] [pid 63418:tid 63482] [client 20.203.142.107:41152] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/elp.php"] [unique_id "aY3Jvdzjh-bbJnStPZLktgAAAIY"]
[Thu Feb 12 20:38:22.564578 2026] [:error] [pid 65064:tid 65090] [client 20.203.142.107:41534] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/elp.php"] [unique_id "aY3JvhOvRgscTcqsMBn07AAAANc"]
[Thu Feb 12 20:38:23.333211 2026] [:error] [pid 63418:tid 63492] [client 20.203.142.107:54688] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wtz.php"] [unique_id "aY3Jv9zjh-bbJnStPZLkuAAAAJA"]
[Thu Feb 12 20:38:24.008746 2026] [:error] [pid 63416:tid 63438] [client 20.203.142.107:41184] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wtz.php"] [unique_id "aY3JwL2wmecPaCHcM2_GGAAAAZE"]
[Thu Feb 12 20:38:24.629792 2026] [:error] [pid 65064:tid 65075] [client 20.203.142.107:52600] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wtz.php"] [unique_id "aY3JwBOvRgscTcqsMBn07gAAAMg"]
[Thu Feb 12 20:38:25.480446 2026] [:error] [pid 63511:tid 63521] [client 20.203.142.107:52308] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wtz.php"] [unique_id "aY3JwaQCQbD5BgeyIk0clgAAAAg"]
[Thu Feb 12 20:38:26.214018 2026] [:error] [pid 63511:tid 63513] [client 20.203.142.107:52307] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/galex.php"] [unique_id "aY3JwqQCQbD5BgeyIk0cmQAAAAA"]
[Thu Feb 12 20:38:26.874143 2026] [:error] [pid 63418:tid 63489] [client 20.203.142.107:52326] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/galex.php"] [unique_id "aY3Jwtzjh-bbJnStPZLkvgAAAI0"]
[Thu Feb 12 20:38:27.492921 2026] [:error] [pid 63511:tid 63526] [client 20.203.142.107:54709] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/galex.php"] [unique_id "aY3Jw6QCQbD5BgeyIk0cnQAAAA0"]
[Thu Feb 12 20:38:28.328170 2026] [:error] [pid 63417:tid 63452] [client 20.203.142.107:54683] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/galex.php"] [unique_id "aY3JxP8gSb97qRMtXCLo9QAAAEM"]
[Thu Feb 12 20:38:28.939642 2026] [:error] [pid 65064:tid 65069] [client 20.203.142.107:54073] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xb.php"] [unique_id "aY3JxBOvRgscTcqsMBn0-AAAAMI"]
[Thu Feb 12 20:38:29.562312 2026] [:error] [pid 63511:tid 63521] [client 20.203.142.107:44682] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xb.php"] [unique_id "aY3JxaQCQbD5BgeyIk0cogAAAAg"]
[Thu Feb 12 20:38:30.591194 2026] [:error] [pid 65064:tid 65072] [client 20.203.142.107:52592] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xb.php"] [unique_id "aY3JxhOvRgscTcqsMBn0_gAAAMU"]
[Thu Feb 12 20:38:31.621560 2026] [:error] [pid 63417:tid 63451] [client 20.203.142.107:57308] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xb.php"] [unique_id "aY3Jx_8gSb97qRMtXCLo9wAAAEI"]
[Thu Feb 12 20:38:32.213802 2026] [:error] [pid 63416:tid 63440] [client 20.203.142.107:32580] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ova.php"] [unique_id "aY3JyL2wmecPaCHcM2_GIgAAAZM"]
[Thu Feb 12 20:38:33.039171 2026] [:error] [pid 63416:tid 63444] [client 20.203.142.107:52249] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ova.php"] [unique_id "aY3Jyb2wmecPaCHcM2_GIwAAAZc"]
[Thu Feb 12 20:38:33.705915 2026] [:error] [pid 63418:tid 63478] [client 20.203.142.107:43085] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ova.php"] [unique_id "aY3Jydzjh-bbJnStPZLkyQAAAII"]
[Thu Feb 12 20:38:34.215978 2026] [:error] [pid 63417:tid 63467] [client 20.203.142.107:4605] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ova.php"] [unique_id "aY3Jyv8gSb97qRMtXCLo_gAAAFI"]
[Thu Feb 12 20:38:34.870613 2026] [:error] [pid 63511:tid 63523] [client 20.203.142.107:52251] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vx.php"] [unique_id "aY3JyqQCQbD5BgeyIk0crAAAAAo"]
[Thu Feb 12 20:38:35.408787 2026] [:error] [pid 63511:tid 63534] [client 20.203.142.107:57312] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vx.php"] [unique_id "aY3Jy6QCQbD5BgeyIk0crgAAABU"]
[Thu Feb 12 20:38:35.930736 2026] [:error] [pid 63416:tid 63433] [client 20.203.142.107:54706] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vx.php"] [unique_id "aY3Jy72wmecPaCHcM2_GKAAAAYw"]
[Thu Feb 12 20:38:36.503129 2026] [:error] [pid 63417:tid 63452] [client 20.203.142.107:54334] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vx.php"] [unique_id "aY3JzP8gSb97qRMtXCLpAwAAAEM"]
[Thu Feb 12 20:38:37.066732 2026] [:error] [pid 63416:tid 63443] [client 20.203.142.107:32621] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rh.php"] [unique_id "aY3Jzb2wmecPaCHcM2_GLAAAAZY"]
[Thu Feb 12 20:38:39.107522 2026] [:error] [pid 63417:tid 63457] [client 20.203.142.107:52270] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rh.php"] [unique_id "aY3Jz_8gSb97qRMtXCLpDgAAAEg"]
[Thu Feb 12 20:38:39.826262 2026] [:error] [pid 63416:tid 63430] [client 20.203.142.107:54667] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rh.php"] [unique_id "aY3Jz72wmecPaCHcM2_GLwAAAYk"]
[Thu Feb 12 20:38:40.326492 2026] [:error] [pid 63511:tid 63534] [client 20.203.142.107:54620] [client 20.203.142.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rh.php"] [unique_id "aY3J0KQCQbD5BgeyIk0ctgAAABU"]
[Thu Feb 12 22:41:06.090016 2026] [proxy_fcgi:error] [pid 46603:tid 46626] [client 72.146.1.154:13596] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 22:41:06.326998 2026] [proxy_fcgi:error] [pid 46603:tid 46613] [client 72.146.1.154:13596] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 22:41:06.577449 2026] [proxy_fcgi:error] [pid 46603:tid 46619] [client 72.146.1.154:13596] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 22:41:06.814376 2026] [proxy_fcgi:error] [pid 46603:tid 46617] [client 72.146.1.154:13596] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 22:41:07.100708 2026] [proxy_fcgi:error] [pid 46603:tid 46611] [client 72.146.1.154:13596] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 22:41:07.338719 2026] [proxy_fcgi:error] [pid 46603:tid 46616] [client 72.146.1.154:13596] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 22:41:07.575475 2026] [proxy_fcgi:error] [pid 46603:tid 46610] [client 72.146.1.154:13596] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 22:41:07.823089 2026] [proxy_fcgi:error] [pid 46603:tid 46624] [client 72.146.1.154:13596] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 22:41:08.066999 2026] [proxy_fcgi:error] [pid 46603:tid 46629] [client 72.146.1.154:13596] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 22:41:08.303805 2026] [proxy_fcgi:error] [pid 46603:tid 46625] [client 72.146.1.154:13596] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 22:41:08.550763 2026] [:error] [pid 46603:tid 46607] [client 72.146.1.154:13596] [client 72.146.1.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-k3w6g9s4h2.php"] [unique_id "aY3mhPEi6O39v05JNJeWOAAAAQI"]
[Thu Feb 12 22:41:13.505160 2026] [:error] [pid 63417:tid 63453] [client 72.146.1.154:22262] [client 72.146.1.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-k3w6g9s4h2.php"] [unique_id "aY3mif8gSb97qRMtXCIIxQAAAEQ"]
[Thu Feb 12 22:41:16.070202 2026] [:error] [pid 46718:tid 46745] [client 72.146.1.154:19932] [client 72.146.1.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-k3w6g9s4h2.php"] [unique_id "aY3mjEdfX45LelQwruRAzgAAAdg"]
[Thu Feb 12 22:41:21.235058 2026] [:error] [pid 46675:tid 46698] [client 72.146.1.154:22250] [client 72.146.1.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-k3w6g9s4h2.php"] [unique_id "aY3mkTuaQILPonWFiQmI8gAAAVQ"]
[Thu Feb 12 22:41:30.319511 2026] [:error] [pid 63511:tid 63518] [client 72.146.1.154:22219] [client 72.146.1.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/007xx.php"] [unique_id "aY3mmqQCQbD5BgeyIk072wAAAAU"]
[Thu Feb 12 22:41:32.060662 2026] [:error] [pid 65064:tid 65083] [client 72.146.1.154:20711] [client 72.146.1.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/007xx.php"] [unique_id "aY3mnBOvRgscTcqsMBkadgAAANA"]
[Thu Feb 12 22:41:44.305020 2026] [:error] [pid 63511:tid 63534] [client 72.146.1.154:3578] [client 72.146.1.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/l3gi0n.php"] [unique_id "aY3mqKQCQbD5BgeyIk075gAAABU"]
[Thu Feb 12 22:41:46.687733 2026] [:error] [pid 46718:tid 46736] [client 72.146.1.154:46595] [client 72.146.1.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/l3gi0n.php"] [unique_id "aY3mqkdfX45LelQwruRBAwAAAc8"]
[Thu Feb 12 22:41:47.652325 2026] [:error] [pid 46603:tid 46612] [client 72.146.1.154:3583] [client 72.146.1.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/l3gi0n.php"] [unique_id "aY3mq_Ei6O39v05JNJeWWQAAAQc"]
[Thu Feb 12 22:41:52.334457 2026] [:error] [pid 63511:tid 63521] [client 72.146.1.154:13155] [client 72.146.1.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/l3gi0n.php"] [unique_id "aY3msKQCQbD5BgeyIk079AAAAAg"]
[Thu Feb 12 22:41:53.254985 2026] [:error] [pid 46718:tid 46730] [client 72.146.1.154:16171] [client 72.146.1.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sldnjqlm.php"] [unique_id "aY3msUdfX45LelQwruRBGwAAAck"]
[Thu Feb 12 22:41:54.594886 2026] [:error] [pid 63417:tid 63459] [client 72.146.1.154:24090] [client 72.146.1.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sldnjqlm.php"] [unique_id "aY3msv8gSb97qRMtXCII4AAAAEo"]
[Thu Feb 12 22:42:21.929190 2026] [:error] [pid 46603:tid 46610] [client 72.146.1.154:32524] [client 72.146.1.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/s3.php"] [unique_id "aY3mzfEi6O39v05JNJeWkgAAAQU"]
[Thu Feb 12 22:42:52.224084 2026] [:error] [pid 46675:tid 46685] [client 72.146.1.154:15730] [client 72.146.1.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/co.php"] [unique_id "aY3m7DuaQILPonWFiQmJUAAAAUc"]
[Thu Feb 12 22:43:43.919929 2026] [proxy_fcgi:error] [pid 63417:tid 63456] [client 72.146.1.154:3330] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 22:43:44.158812 2026] [proxy_fcgi:error] [pid 63417:tid 63473] [client 72.146.1.154:3330] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 22:43:44.406153 2026] [proxy_fcgi:error] [pid 63417:tid 63455] [client 72.146.1.154:3330] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 22:43:44.655879 2026] [proxy_fcgi:error] [pid 63417:tid 63450] [client 72.146.1.154:3330] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 22:43:44.893654 2026] [proxy_fcgi:error] [pid 63417:tid 63460] [client 72.146.1.154:3330] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 22:43:45.131167 2026] [proxy_fcgi:error] [pid 63417:tid 63465] [client 72.146.1.154:3330] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 22:43:45.369225 2026] [proxy_fcgi:error] [pid 63417:tid 63453] [client 72.146.1.154:3330] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 22:43:45.620635 2026] [proxy_fcgi:error] [pid 63417:tid 63459] [client 72.146.1.154:3330] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 22:43:45.859353 2026] [proxy_fcgi:error] [pid 63417:tid 63469] [client 72.146.1.154:3330] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 22:43:46.107038 2026] [proxy_fcgi:error] [pid 63417:tid 63457] [client 72.146.1.154:3330] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 22:43:46.548055 2026] [proxy_fcgi:error] [pid 63417:tid 63471] [client 72.146.1.154:3330] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 22:43:46.801793 2026] [:error] [pid 63417:tid 63454] [client 72.146.1.154:3330] [client 72.146.1.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Okxob.php"] [unique_id "aY3nIv8gSb97qRMtXCIJXAAAAEU"]
[Thu Feb 12 22:43:48.803638 2026] [:error] [pid 46675:tid 46691] [client 72.146.1.154:16462] [client 72.146.1.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Okxob.php"] [unique_id "aY3nJDuaQILPonWFiQmJhQAAAU0"]
[Thu Feb 12 22:43:52.765812 2026] [:error] [pid 63417:tid 63472] [client 72.146.1.154:16240] [client 72.146.1.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Okxob.php"] [unique_id "aY3nKP8gSb97qRMtXCIJYQAAAFc"]
[Thu Feb 12 22:45:34.645520 2026] [proxy_fcgi:error] [pid 46675:tid 46685] [client 72.146.1.154:12408] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 22:45:34.909013 2026] [proxy_fcgi:error] [pid 46675:tid 46702] [client 72.146.1.154:12408] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 22:45:35.267711 2026] [proxy_fcgi:error] [pid 46675:tid 46689] [client 72.146.1.154:12408] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 22:45:35.504192 2026] [proxy_fcgi:error] [pid 46675:tid 46683] [client 72.146.1.154:12408] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 23:56:15.789414 2026] [proxy_fcgi:error] [pid 46675:tid 46694] [client 20.166.49.198:29993] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 01:19:50.940918 2026] [proxy_fcgi:error] [pid 37511:tid 37589] [client 51.120.70.159:52262] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 01:51:29.584883 2026] [:error] [pid 37512:tid 37609] [client 34.134.118.132:49859] [client 34.134.118.132] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.134.118.132, incrementing ddos counter"] [hostname "dwelectservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aY4TIdDe69znS-f6vSZRuwAAAAE"]
[Fri Feb 13 01:51:29.594264 2026] [proxy_fcgi:error] [pid 37512:tid 37609] [client 34.134.118.132:49859] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 01:51:32.060846 2026] [:error] [pid 37512:tid 37613] [client 34.134.118.132:49859] [client 34.134.118.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aY4TJNDe69znS-f6vSZRygAAAAU"]
[Fri Feb 13 01:51:32.492564 2026] [:error] [pid 37856:tid 37861] [client 34.134.118.132:57459] [client 34.134.118.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aY4TJJUcWP4qWM7hWskQjgAAAMI"]
[Fri Feb 13 01:51:32.915673 2026] [:error] [pid 37510:tid 37527] [client 34.134.118.132:65045] [client 34.134.118.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aY4TJMUrqDPNSf1wYBWfFAAAAYs"]
[Fri Feb 13 01:51:33.349645 2026] [:error] [pid 37856:tid 37871] [client 34.134.118.132:64657] [client 34.134.118.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aY4TJZUcWP4qWM7hWskQkgAAAMw"]
[Fri Feb 13 01:51:33.787096 2026] [:error] [pid 37856:tid 37872] [client 34.134.118.132:58768] [client 34.134.118.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aY4TJZUcWP4qWM7hWskQkwAAAM0"]
[Fri Feb 13 01:51:34.244317 2026] [:error] [pid 37511:tid 37599] [client 34.134.118.132:51018] [client 34.134.118.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aY4TJu8EBJ86uZdxpA2FUgAAAFI"]
[Fri Feb 13 01:51:34.712612 2026] [:error] [pid 37512:tid 37629] [client 34.134.118.132:62323] [client 34.134.118.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aY4TJtDe69znS-f6vSZRzAAAABI"]
[Fri Feb 13 04:57:39.456137 2026] [proxy_fcgi:error] [pid 49335:tid 49343] [client 20.199.186.0:28180] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 06:26:31.420146 2026] [proxy_fcgi:error] [pid 49335:tid 49343] [client 51.120.70.159:15403] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 09:30:28.885567 2026] [proxy_fcgi:error] [pid 49224:tid 49282] [client 158.158.100.90:24132] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 09:30:29.287746 2026] [proxy_fcgi:error] [pid 49224:tid 49284] [client 158.158.100.90:24132] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 09:30:29.531440 2026] [proxy_fcgi:error] [pid 49224:tid 49278] [client 158.158.100.90:24132] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 09:30:29.777709 2026] [proxy_fcgi:error] [pid 49224:tid 49273] [client 158.158.100.90:24132] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 09:30:30.036193 2026] [proxy_fcgi:error] [pid 49224:tid 49285] [client 158.158.100.90:24132] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 09:30:30.299484 2026] [proxy_fcgi:error] [pid 49224:tid 49279] [client 158.158.100.90:24132] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 09:30:30.564985 2026] [proxy_fcgi:error] [pid 49224:tid 49270] [client 158.158.100.90:24132] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 09:30:30.809303 2026] [proxy_fcgi:error] [pid 49224:tid 49287] [client 158.158.100.90:24132] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 09:30:31.055693 2026] [proxy_fcgi:error] [pid 49224:tid 49272] [client 158.158.100.90:24132] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 09:30:31.305337 2026] [proxy_fcgi:error] [pid 49224:tid 49289] [client 158.158.100.90:24132] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 09:30:31.559152 2026] [:error] [pid 49224:tid 49276] [client 158.158.100.90:24132] [client 158.158.100.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/css.php"] [unique_id "aY5-t9iAvPoWmw5YhwkMDQAAAEk"]
[Fri Feb 13 09:33:48.003907 2026] [:error] [pid 49224:tid 49276] [client 158.158.100.90:21260] [client 158.158.100.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x.php"] [unique_id "aY5_fNiAvPoWmw5YhwkNlQAAAEk"]
[Fri Feb 13 09:35:09.462517 2026] [:error] [pid 49223:tid 49247] [client 158.158.100.90:23074] [client 158.158.100.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/0.php"] [unique_id "aY5_zR8A_fZBamNLnfWYvwAAAA8"]
[Fri Feb 13 09:35:12.681294 2026] [:error] [pid 49335:tid 49353] [client 158.158.100.90:24913] [client 158.158.100.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/0.php"] [unique_id "aY5_0Kp--SFY2nwOiqnHtwAAANA"]
[Fri Feb 13 09:35:14.971715 2026] [:error] [pid 49335:tid 49360] [client 158.158.100.90:21757] [client 158.158.100.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/0.php"] [unique_id "aY5_0qp--SFY2nwOiqnHvgAAANc"]
[Fri Feb 13 09:35:17.194823 2026] [:error] [pid 49223:tid 49243] [client 158.158.100.90:24420] [client 158.158.100.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/0.php"] [unique_id "aY5_1R8A_fZBamNLnfWY0gAAAAs"]
[Fri Feb 13 09:35:18.973379 2026] [:error] [pid 49224:tid 49278] [client 158.158.100.90:23889] [client 158.158.100.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a.php"] [unique_id "aY5_1tiAvPoWmw5YhwkOpQAAAEs"]
[Fri Feb 13 09:35:20.216520 2026] [:error] [pid 51243:tid 51260] [client 158.158.100.90:23896] [client 158.158.100.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a.php"] [unique_id "aY5_2Mim7ZTAHzi7xZsxIQAAAQ8"]
[Fri Feb 13 09:35:22.358200 2026] [:error] [pid 49223:tid 49236] [client 158.158.100.90:19579] [client 158.158.100.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a.php"] [unique_id "aY5_2h8A_fZBamNLnfWY5QAAAAQ"]
[Fri Feb 13 09:35:25.119121 2026] [:error] [pid 49335:tid 49359] [client 158.158.100.90:21069] [client 158.158.100.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a.php"] [unique_id "aY5_3ap--SFY2nwOiqnH0gAAANY"]
[Fri Feb 13 09:35:28.822874 2026] [:error] [pid 49335:tid 49354] [client 158.158.100.90:21700] [client 158.158.100.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/new.php"] [unique_id "aY5_4Kp--SFY2nwOiqnH3wAAANE"]
[Fri Feb 13 09:35:32.061187 2026] [:error] [pid 49223:tid 49239] [client 158.158.100.90:20312] [client 158.158.100.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/new.php"] [unique_id "aY5_5B8A_fZBamNLnfWY9AAAAAc"]
[Fri Feb 13 09:35:35.219993 2026] [:error] [pid 49224:tid 49289] [client 158.158.100.90:24426] [client 158.158.100.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/new.php"] [unique_id "aY5_59iAvPoWmw5YhwkOxQAAAFY"]
[Fri Feb 13 09:35:38.064795 2026] [:error] [pid 49224:tid 49273] [client 158.158.100.90:59272] [client 158.158.100.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/new.php"] [unique_id "aY5_6tiAvPoWmw5YhwkO0wAAAEY"]
[Fri Feb 13 09:35:40.978592 2026] [:error] [pid 49225:tid 49304] [client 158.158.100.90:18780] [client 158.158.100.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ynz.PhP7"] [unique_id "aY5_7DwH8-zGxtAd3jtRogAAAIo"]
[Fri Feb 13 09:35:43.161750 2026] [:error] [pid 49225:tid 49311] [client 158.158.100.90:27921] [client 158.158.100.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ynz.PhP7"] [unique_id "aY5_7zwH8-zGxtAd3jtRpgAAAJE"]
[Fri Feb 13 09:35:45.807139 2026] [:error] [pid 51243:tid 51252] [client 158.158.100.90:25329] [client 158.158.100.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ynz.PhP7"] [unique_id "aY5_8cim7ZTAHzi7xZsxTwAAAQc"]
[Fri Feb 13 09:35:47.722868 2026] [:error] [pid 49224:tid 49270] [client 158.158.100.90:25383] [client 158.158.100.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ynz.PhP7"] [unique_id "aY5_89iAvPoWmw5YhwkO-AAAAEM"]
[Fri Feb 13 09:35:56.098517 2026] [:error] [pid 49335:tid 49354] [client 158.158.100.90:19093] [client 158.158.100.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/alfa.php"] [unique_id "aY5__Kp--SFY2nwOiqnIKAAAANE"]
[Fri Feb 13 09:36:09.545403 2026] [proxy_fcgi:error] [pid 49223:tid 49241] [client 158.158.100.90:24480] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 09:36:09.789914 2026] [proxy_fcgi:error] [pid 49223:tid 49243] [client 158.158.100.90:24480] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 09:36:10.050626 2026] [proxy_fcgi:error] [pid 49223:tid 49233] [client 158.158.100.90:24480] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 09:36:10.322393 2026] [proxy_fcgi:error] [pid 49223:tid 49245] [client 158.158.100.90:24480] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 09:36:10.565110 2026] [proxy_fcgi:error] [pid 49223:tid 49253] [client 158.158.100.90:24480] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 09:36:10.808131 2026] [proxy_fcgi:error] [pid 49223:tid 49246] [client 158.158.100.90:24480] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 09:36:11.063400 2026] [proxy_fcgi:error] [pid 49223:tid 49254] [client 158.158.100.90:24480] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 09:36:11.338007 2026] [proxy_fcgi:error] [pid 49223:tid 49244] [client 158.158.100.90:24480] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 09:36:11.581471 2026] [proxy_fcgi:error] [pid 49223:tid 49249] [client 158.158.100.90:24480] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 10:04:21.624896 2026] [proxy_fcgi:error] [pid 51243:tid 51266] [client 68.221.137.8:32989] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 10:04:21.888370 2026] [proxy_fcgi:error] [pid 51243:tid 51246] [client 68.221.137.8:32989] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 10:04:22.132057 2026] [proxy_fcgi:error] [pid 51243:tid 51265] [client 68.221.137.8:32989] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 10:04:22.492568 2026] [proxy_fcgi:error] [pid 51243:tid 51250] [client 68.221.137.8:32989] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 10:04:22.737963 2026] [proxy_fcgi:error] [pid 51243:tid 51258] [client 68.221.137.8:32989] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 10:04:22.981715 2026] [proxy_fcgi:error] [pid 51243:tid 51254] [client 68.221.137.8:32989] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 10:04:23.226521 2026] [proxy_fcgi:error] [pid 51243:tid 51247] [client 68.221.137.8:32989] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 10:04:23.471028 2026] [proxy_fcgi:error] [pid 51243:tid 51269] [client 68.221.137.8:32989] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 10:04:23.713479 2026] [proxy_fcgi:error] [pid 51243:tid 51245] [client 68.221.137.8:32989] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 10:04:23.955480 2026] [proxy_fcgi:error] [pid 51243:tid 51256] [client 68.221.137.8:32989] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 10:04:24.213311 2026] [:error] [pid 51243:tid 51249] [client 68.221.137.8:32989] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ole.php"] [unique_id "aY6GqMim7ZTAHzi7xZs_TAAAAQQ"]
[Fri Feb 13 10:04:25.607387 2026] [:error] [pid 49335:tid 49340] [client 68.221.137.8:10007] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ole.php"] [unique_id "aY6Gqap--SFY2nwOiqnWoQAAAMM"]
[Fri Feb 13 10:04:28.579409 2026] [:error] [pid 49224:tid 49273] [client 68.221.137.8:10828] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ole.php"] [unique_id "aY6GrNiAvPoWmw5YhwkgYAAAAEY"]
[Fri Feb 13 10:04:29.723230 2026] [:error] [pid 49225:tid 49314] [client 68.221.137.8:13440] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ole.php"] [unique_id "aY6GrTwH8-zGxtAd3jtlVAAAAJQ"]
[Fri Feb 13 10:04:31.561365 2026] [:error] [pid 49225:tid 49310] [client 68.221.137.8:34745] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/x_3.php"] [unique_id "aY6GrzwH8-zGxtAd3jtlWgAAAJA"]
[Fri Feb 13 10:04:32.535476 2026] [:error] [pid 51243:tid 51249] [client 68.221.137.8:31436] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/x_3.php"] [unique_id "aY6GsMim7ZTAHzi7xZs_UwAAAQQ"]
[Fri Feb 13 10:04:33.398473 2026] [:error] [pid 49223:tid 49240] [client 68.221.137.8:36048] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/x_3.php"] [unique_id "aY6GsR8A_fZBamNLnfWnlwAAAAg"]
[Fri Feb 13 10:04:35.547898 2026] [:error] [pid 49224:tid 49273] [client 68.221.137.8:10267] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/x_3.php"] [unique_id "aY6Gs9iAvPoWmw5YhwkgaQAAAEY"]
[Fri Feb 13 10:04:37.390406 2026] [:error] [pid 49223:tid 49233] [client 68.221.137.8:13486] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bolt.php"] [unique_id "aY6GtR8A_fZBamNLnfWnnQAAAAE"]
[Fri Feb 13 10:04:38.439594 2026] [:error] [pid 46821:tid 46846] [client 68.221.137.8:28807] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bolt.php"] [unique_id "aY6Gto6G1N5YSq0J0gdxFAAAAVc"]
[Fri Feb 13 10:04:40.021244 2026] [:error] [pid 49225:tid 49312] [client 68.221.137.8:10879] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bolt.php"] [unique_id "aY6GuDwH8-zGxtAd3jtlYwAAAJI"]
[Fri Feb 13 10:04:41.490129 2026] [:error] [pid 49224:tid 49274] [client 68.221.137.8:13490] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bolt.php"] [unique_id "aY6GudiAvPoWmw5YhwkgbgAAAEc"]
[Fri Feb 13 10:04:43.290176 2026] [:error] [pid 49335:tid 49338] [client 68.221.137.8:7106] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/adminfuns.php"] [unique_id "aY6Gu6p--SFY2nwOiqnWsgAAAME"]
[Fri Feb 13 10:05:00.471289 2026] [:error] [pid 49224:tid 49283] [client 68.221.137.8:27655] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/mar.php"] [unique_id "aY6GzNiAvPoWmw5YhwkgrQAAAFA"]
[Fri Feb 13 10:05:07.071115 2026] [:error] [pid 51243:tid 51255] [client 68.221.137.8:6266] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/mar.php"] [unique_id "aY6G08im7ZTAHzi7xZs_lQAAAQo"]
[Fri Feb 13 10:05:10.086148 2026] [:error] [pid 46821:tid 46839] [client 68.221.137.8:12215] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/mar.php"] [unique_id "aY6G1o6G1N5YSq0J0gdxUQAAAVA"]
[Fri Feb 13 10:05:10.969263 2026] [:error] [pid 49223:tid 49244] [client 68.221.137.8:6215] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/mar.php"] [unique_id "aY6G1h8A_fZBamNLnfWn5QAAAAw"]
[Fri Feb 13 10:05:12.069643 2026] [:error] [pid 49224:tid 49291] [client 68.221.137.8:19008] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ellv3.php"] [unique_id "aY6G2NiAvPoWmw5Yhwkg0gAAAFg"]
[Fri Feb 13 10:05:13.661858 2026] [:error] [pid 49224:tid 49284] [client 68.221.137.8:26734] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ellv3.php"] [unique_id "aY6G2diAvPoWmw5Yhwkg1wAAAFE"]
[Fri Feb 13 10:05:18.951569 2026] [:error] [pid 46821:tid 46833] [client 68.221.137.8:19737] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ellv3.php"] [unique_id "aY6G3o6G1N5YSq0J0gdxdwAAAUo"]
[Fri Feb 13 10:05:19.840316 2026] [:error] [pid 46821:tid 46826] [client 68.221.137.8:11274] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ellv3.php"] [unique_id "aY6G346G1N5YSq0J0gdxeAAAAUM"]
[Fri Feb 13 10:05:20.515279 2026] [:error] [pid 49223:tid 49250] [client 68.221.137.8:11301] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ak.php"] [unique_id "aY6G4B8A_fZBamNLnfWn_AAAABI"]
[Fri Feb 13 10:05:21.364568 2026] [:error] [pid 49224:tid 49277] [client 68.221.137.8:13805] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ak.php"] [unique_id "aY6G4diAvPoWmw5Yhwkg7AAAAEo"]
[Fri Feb 13 10:05:24.634464 2026] [proxy_fcgi:error] [pid 46821:tid 46846] [client 68.221.137.8:15839] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 10:05:24.880902 2026] [proxy_fcgi:error] [pid 46821:tid 46835] [client 68.221.137.8:15839] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 10:05:25.190807 2026] [proxy_fcgi:error] [pid 46821:tid 46829] [client 68.221.137.8:15839] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 10:05:25.464575 2026] [proxy_fcgi:error] [pid 46821:tid 46825] [client 68.221.137.8:15839] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 10:05:25.710486 2026] [proxy_fcgi:error] [pid 46821:tid 46841] [client 68.221.137.8:15839] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 10:05:25.958986 2026] [proxy_fcgi:error] [pid 46821:tid 46824] [client 68.221.137.8:15839] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 10:05:26.423627 2026] [proxy_fcgi:error] [pid 46821:tid 46839] [client 68.221.137.8:15839] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 10:05:26.669776 2026] [proxy_fcgi:error] [pid 46821:tid 46840] [client 68.221.137.8:15839] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 10:05:26.913441 2026] [proxy_fcgi:error] [pid 46821:tid 46838] [client 68.221.137.8:15839] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 10:05:27.157277 2026] [proxy_fcgi:error] [pid 46821:tid 46834] [client 68.221.137.8:15839] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 10:05:27.401222 2026] [proxy_fcgi:error] [pid 46821:tid 46842] [client 68.221.137.8:15839] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 10:05:27.642892 2026] [:error] [pid 46821:tid 46837] [client 68.221.137.8:15839] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wqqs.php"] [unique_id "aY6G546G1N5YSq0J0gdxkQAAAU4"]
[Fri Feb 13 10:05:28.856284 2026] [:error] [pid 49224:tid 49286] [client 68.221.137.8:11375] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wqqs.php"] [unique_id "aY6G6NiAvPoWmw5Yhwkg-gAAAFM"]
[Fri Feb 13 10:05:30.624654 2026] [:error] [pid 49224:tid 49281] [client 68.221.137.8:28235] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wqqs.php"] [unique_id "aY6G6tiAvPoWmw5Yhwkg_gAAAE4"]
[Fri Feb 13 10:05:33.232962 2026] [:error] [pid 49335:tid 49346] [client 68.221.137.8:18216] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wqqs.php"] [unique_id "aY6G7ap--SFY2nwOiqnXOgAAAMk"]
[Fri Feb 13 10:05:33.966942 2026] [:error] [pid 49335:tid 49351] [client 68.221.137.8:19734] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp_wlx.php"] [unique_id "aY6G7ap--SFY2nwOiqnXOwAAAM4"]
[Fri Feb 13 10:05:36.302957 2026] [:error] [pid 49224:tid 49282] [client 68.221.137.8:14826] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp_wlx.php"] [unique_id "aY6G8NiAvPoWmw5YhwkhCgAAAE8"]
[Fri Feb 13 10:05:39.219261 2026] [:error] [pid 49335:tid 49357] [client 68.221.137.8:26696] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp_wlx.php"] [unique_id "aY6G86p--SFY2nwOiqnXRgAAANQ"]
[Fri Feb 13 10:05:40.714308 2026] [:error] [pid 51243:tid 51268] [client 68.221.137.8:14824] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp_wlx.php"] [unique_id "aY6G9Mim7ZTAHzi7xZs_2QAAARc"]
[Fri Feb 13 10:05:45.685946 2026] [:error] [pid 49224:tid 49277] [client 68.221.137.8:11278] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/100.kb.php"] [unique_id "aY6G-diAvPoWmw5YhwkhJQAAAEo"]
[Fri Feb 13 10:05:47.185315 2026] [:error] [pid 49225:tid 49295] [client 68.221.137.8:26713] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/100.kb.php"] [unique_id "aY6G-zwH8-zGxtAd3jtl4gAAAIE"]
[Fri Feb 13 10:05:48.654880 2026] [:error] [pid 51243:tid 51252] [client 68.221.137.8:17454] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/100.kb.php"] [unique_id "aY6G_Mim7ZTAHzi7xZs_5QAAAQc"]
[Fri Feb 13 10:05:50.286628 2026] [:error] [pid 46821:tid 46833] [client 68.221.137.8:17460] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/100.kb.php"] [unique_id "aY6G_o6G1N5YSq0J0gdxrwAAAUo"]
[Fri Feb 13 10:05:51.173999 2026] [:error] [pid 49224:tid 49275] [client 68.221.137.8:17481] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/vx.php"] [unique_id "aY6G_9iAvPoWmw5YhwkhMQAAAEg"]
[Fri Feb 13 10:05:53.043053 2026] [:error] [pid 46821:tid 46847] [client 68.221.137.8:18194] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/vx.php"] [unique_id "aY6HAY6G1N5YSq0J0gdxuQAAAVg"]
[Fri Feb 13 10:05:54.701634 2026] [:error] [pid 49224:tid 49276] [client 68.221.137.8:25172] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/vx.php"] [unique_id "aY6HAtiAvPoWmw5YhwkhQwAAAEk"]
[Fri Feb 13 10:05:55.415336 2026] [:error] [pid 49335:tid 49338] [client 68.221.137.8:11320] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/vx.php"] [unique_id "aY6HA6p--SFY2nwOiqnXWAAAAME"]
[Fri Feb 13 10:05:56.974243 2026] [:error] [pid 49225:tid 49297] [client 68.221.137.8:11280] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/eetu.php"] [unique_id "aY6HBDwH8-zGxtAd3jtl6AAAAIM"]
[Fri Feb 13 10:05:59.257890 2026] [:error] [pid 51243:tid 51266] [client 68.221.137.8:15840] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/eetu.php"] [unique_id "aY6HB8im7ZTAHzi7xZs_8QAAARU"]
[Fri Feb 13 10:06:01.783608 2026] [:error] [pid 49225:tid 49295] [client 68.221.137.8:15333] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/eetu.php"] [unique_id "aY6HCTwH8-zGxtAd3jtl9wAAAIE"]
[Fri Feb 13 10:06:02.432185 2026] [:error] [pid 51243:tid 51268] [client 68.221.137.8:18195] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/eetu.php"] [unique_id "aY6HCsim7ZTAHzi7xZs_-wAAARc"]
[Fri Feb 13 10:06:03.821395 2026] [:error] [pid 46821:tid 46844] [client 68.221.137.8:9225] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/lang/en.php"] [unique_id "aY6HC46G1N5YSq0J0gdx0gAAAVU"]
[Fri Feb 13 10:06:05.033422 2026] [:error] [pid 49224:tid 49275] [client 68.221.137.8:34130] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/lang/en.php"] [unique_id "aY6HDdiAvPoWmw5YhwkhWwAAAEg"]
[Fri Feb 13 10:06:05.745369 2026] [:error] [pid 49224:tid 49277] [client 68.221.137.8:13985] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/lang/en.php"] [unique_id "aY6HDdiAvPoWmw5YhwkhXgAAAEo"]
[Fri Feb 13 10:06:07.532513 2026] [:error] [pid 49223:tid 49237] [client 68.221.137.8:15318] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/lang/en.php"] [unique_id "aY6HDx8A_fZBamNLnfWoMgAAAAU"]
[Fri Feb 13 10:06:08.912129 2026] [:error] [pid 49223:tid 49254] [client 68.221.137.8:25177] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/01.php"] [unique_id "aY6HEB8A_fZBamNLnfWoNAAAABY"]
[Fri Feb 13 10:06:10.092034 2026] [:error] [pid 49224:tid 49271] [client 68.221.137.8:6972] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/01.php"] [unique_id "aY6HEtiAvPoWmw5YhwkhZQAAAEQ"]
[Fri Feb 13 10:06:11.056670 2026] [:error] [pid 51243:tid 51264] [client 68.221.137.8:18553] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/01.php"] [unique_id "aY6HE8im7ZTAHzi7xZtABAAAARM"]
[Fri Feb 13 10:06:11.788788 2026] [:error] [pid 49225:tid 49312] [client 68.221.137.8:15306] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/01.php"] [unique_id "aY6HEzwH8-zGxtAd3jtmBAAAAJI"]
[Fri Feb 13 10:06:13.232292 2026] [:error] [pid 49224:tid 49275] [client 68.221.137.8:15785] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/sh.php"] [unique_id "aY6HFdiAvPoWmw5YhwkhcAAAAEg"]
[Fri Feb 13 10:06:17.231609 2026] [:error] [pid 49224:tid 49285] [client 68.221.137.8:15345] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/sh.php"] [unique_id "aY6HGdiAvPoWmw5YhwkhdgAAAFI"]
[Fri Feb 13 10:06:18.080861 2026] [:error] [pid 46821:tid 46840] [client 68.221.137.8:15754] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/sh.php"] [unique_id "aY6HGo6G1N5YSq0J0gdx4QAAAVE"]
[Fri Feb 13 10:06:19.678089 2026] [:error] [pid 46821:tid 46839] [client 68.221.137.8:18247] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/sh.php"] [unique_id "aY6HG46G1N5YSq0J0gdx5gAAAVA"]
[Fri Feb 13 10:06:21.063492 2026] [:error] [pid 49335:tid 49346] [client 68.221.137.8:15339] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/class.1.php"] [unique_id "aY6HHap--SFY2nwOiqnXcgAAAMk"]
[Fri Feb 13 10:06:21.976490 2026] [:error] [pid 49223:tid 49237] [client 68.221.137.8:7032] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/class.1.php"] [unique_id "aY6HHR8A_fZBamNLnfWoRAAAAAU"]
[Fri Feb 13 10:06:25.417486 2026] [:error] [pid 49225:tid 49310] [client 68.221.137.8:25161] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/class.1.php"] [unique_id "aY6HITwH8-zGxtAd3jtmGAAAAJA"]
[Fri Feb 13 10:06:26.345694 2026] [:error] [pid 49225:tid 49299] [client 68.221.137.8:18536] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/class.1.php"] [unique_id "aY6HIjwH8-zGxtAd3jtmHAAAAIU"]
[Fri Feb 13 10:06:27.824520 2026] [proxy_fcgi:error] [pid 46821:tid 46826] [client 68.221.137.8:10366] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 10:06:28.371746 2026] [proxy_fcgi:error] [pid 46821:tid 46844] [client 68.221.137.8:10366] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 10:06:28.615318 2026] [proxy_fcgi:error] [pid 46821:tid 46831] [client 68.221.137.8:10366] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 10:06:28.857321 2026] [proxy_fcgi:error] [pid 46821:tid 46824] [client 68.221.137.8:10366] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 10:06:29.100209 2026] [proxy_fcgi:error] [pid 46821:tid 46833] [client 68.221.137.8:10366] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 10:06:29.342947 2026] [proxy_fcgi:error] [pid 46821:tid 46841] [client 68.221.137.8:10366] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 10:06:29.592738 2026] [proxy_fcgi:error] [pid 46821:tid 46846] [client 68.221.137.8:10366] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 10:06:29.835156 2026] [proxy_fcgi:error] [pid 46821:tid 46845] [client 68.221.137.8:10366] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 10:06:30.078054 2026] [proxy_fcgi:error] [pid 46821:tid 46830] [client 68.221.137.8:10366] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 10:06:30.534092 2026] [proxy_fcgi:error] [pid 46821:tid 46823] [client 68.221.137.8:10366] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 10:06:30.774508 2026] [:error] [pid 46821:tid 46840] [client 68.221.137.8:10366] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/new.php"] [unique_id "aY6HJo6G1N5YSq0J0gdyBgAAAVE"]
[Fri Feb 13 10:06:31.680441 2026] [:error] [pid 46821:tid 46828] [client 68.221.137.8:13969] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/new.php"] [unique_id "aY6HJ46G1N5YSq0J0gdyCgAAAUU"]
[Fri Feb 13 10:06:33.157231 2026] [:error] [pid 49335:tid 49346] [client 68.221.137.8:6922] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/new.php"] [unique_id "aY6HKap--SFY2nwOiqnXfAAAAMk"]
[Fri Feb 13 10:06:34.147221 2026] [:error] [pid 49224:tid 49273] [client 68.221.137.8:18261] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/new.php"] [unique_id "aY6HKtiAvPoWmw5YhwkhkAAAAEY"]
[Fri Feb 13 10:06:34.963705 2026] [:error] [pid 49223:tid 49246] [client 68.221.137.8:18510] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ver.php"] [unique_id "aY6HKh8A_fZBamNLnfWoWAAAAA4"]
[Fri Feb 13 10:06:37.213152 2026] [:error] [pid 49223:tid 49251] [client 68.221.137.8:9216] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ver.php"] [unique_id "aY6HLR8A_fZBamNLnfWoWgAAABM"]
[Fri Feb 13 10:06:38.138247 2026] [:error] [pid 51243:tid 51263] [client 68.221.137.8:15789] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ver.php"] [unique_id "aY6HLsim7ZTAHzi7xZtAHwAAARI"]
[Fri Feb 13 10:06:39.329697 2026] [:error] [pid 49224:tid 49287] [client 68.221.137.8:16268] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ver.php"] [unique_id "aY6HL9iAvPoWmw5YhwkhnAAAAFQ"]
[Fri Feb 13 10:06:41.076861 2026] [:error] [pid 49223:tid 49246] [client 68.221.137.8:35986] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/as.php"] [unique_id "aY6HMR8A_fZBamNLnfWoXgAAAA4"]
[Fri Feb 13 10:06:42.553152 2026] [:error] [pid 49225:tid 49297] [client 68.221.137.8:15782] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/as.php"] [unique_id "aY6HMjwH8-zGxtAd3jtmOwAAAIM"]
[Fri Feb 13 10:06:44.275707 2026] [:error] [pid 49225:tid 49294] [client 68.221.137.8:16299] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/as.php"] [unique_id "aY6HNDwH8-zGxtAd3jtmPwAAAIA"]
[Fri Feb 13 10:06:45.554690 2026] [:error] [pid 49223:tid 49250] [client 68.221.137.8:27240] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/as.php"] [unique_id "aY6HNR8A_fZBamNLnfWoZwAAABI"]
[Fri Feb 13 10:06:48.274675 2026] [:error] [pid 49224:tid 49285] [client 68.221.137.8:36019] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/index_w.php"] [unique_id "aY6HONiAvPoWmw5YhwkhqwAAAFI"]
[Fri Feb 13 10:06:53.559090 2026] [:error] [pid 51243:tid 51246] [client 68.221.137.8:11061] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/index_w.php"] [unique_id "aY6HPcim7ZTAHzi7xZtALAAAAQE"]
[Fri Feb 13 10:06:54.825891 2026] [:error] [pid 51243:tid 51257] [client 68.221.137.8:30114] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/index_w.php"] [unique_id "aY6HPsim7ZTAHzi7xZtAMAAAAQw"]
[Fri Feb 13 10:06:56.062313 2026] [:error] [pid 49225:tid 49316] [client 68.221.137.8:22572] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/index_w.php"] [unique_id "aY6HQDwH8-zGxtAd3jtmVwAAAJY"]
[Fri Feb 13 10:06:59.086836 2026] [:error] [pid 46821:tid 46827] [client 68.221.137.8:8401] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/c99.php"] [unique_id "aY6HQ46G1N5YSq0J0gdyLQAAAUQ"]
[Fri Feb 13 10:07:02.365414 2026] [:error] [pid 49223:tid 49240] [client 68.221.137.8:7046] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/c99.php"] [unique_id "aY6HRh8A_fZBamNLnfWofAAAAAg"]
[Fri Feb 13 10:07:16.410793 2026] [:error] [pid 46821:tid 46842] [client 68.221.137.8:12275] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/a.php"] [unique_id "aY6HVI6G1N5YSq0J0gdyTAAAAVM"]
[Fri Feb 13 10:07:19.076134 2026] [:error] [pid 49335:tid 49355] [client 68.221.137.8:22608] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/a.php"] [unique_id "aY6HV6p--SFY2nwOiqnXzQAAANI"]
[Fri Feb 13 10:07:25.607605 2026] [:error] [pid 49223:tid 49245] [client 68.221.137.8:13539] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/a.php"] [unique_id "aY6HXR8A_fZBamNLnfWopAAAAA0"]
[Fri Feb 13 10:07:28.715667 2026] [:error] [pid 49223:tid 49236] [client 68.221.137.8:35411] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/a.php"] [unique_id "aY6HYB8A_fZBamNLnfWoqwAAAAQ"]
[Fri Feb 13 10:07:30.027015 2026] [proxy_fcgi:error] [pid 49223:tid 49248] [client 68.221.137.8:35427] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 10:07:30.271482 2026] [proxy_fcgi:error] [pid 49223:tid 49255] [client 68.221.137.8:35427] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 10:07:30.515151 2026] [proxy_fcgi:error] [pid 49223:tid 49252] [client 68.221.137.8:35427] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 10:07:30.779410 2026] [proxy_fcgi:error] [pid 49223:tid 49232] [client 68.221.137.8:35427] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 10:07:31.024636 2026] [proxy_fcgi:error] [pid 49223:tid 49250] [client 68.221.137.8:35427] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 10:07:31.374950 2026] [proxy_fcgi:error] [pid 49223:tid 49240] [client 68.221.137.8:35427] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 10:07:31.632828 2026] [proxy_fcgi:error] [pid 49223:tid 49244] [client 68.221.137.8:35427] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 10:07:32.124136 2026] [proxy_fcgi:error] [pid 49223:tid 49256] [client 68.221.137.8:35427] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 10:07:32.369052 2026] [proxy_fcgi:error] [pid 49223:tid 49248] [client 68.221.137.8:35427] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 10:07:32.630042 2026] [proxy_fcgi:error] [pid 49223:tid 49255] [client 68.221.137.8:35427] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 10:07:32.870000 2026] [:error] [pid 49223:tid 49253] [client 68.221.137.8:35427] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/1975.php"] [unique_id "aY6HZB8A_fZBamNLnfWovAAAABU"]
[Fri Feb 13 10:07:35.632302 2026] [:error] [pid 49223:tid 49240] [client 68.221.137.8:22598] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/1975.php"] [unique_id "aY6HZx8A_fZBamNLnfWowwAAAAg"]
[Fri Feb 13 10:07:36.444916 2026] [:error] [pid 51243:tid 51255] [client 68.221.137.8:16095] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/1975.php"] [unique_id "aY6HaMim7ZTAHzi7xZtAcgAAAQo"]
[Fri Feb 13 10:07:39.971209 2026] [:error] [pid 51243:tid 51267] [client 68.221.137.8:12062] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/1975.php"] [unique_id "aY6Ha8im7ZTAHzi7xZtAfAAAARY"]
[Fri Feb 13 10:07:41.330147 2026] [:error] [pid 49225:tid 49308] [client 68.221.137.8:14269] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/root.php"] [unique_id "aY6HbTwH8-zGxtAd3jtmkwAAAI4"]
[Fri Feb 13 10:07:42.987759 2026] [:error] [pid 49224:tid 49268] [client 68.221.137.8:6786] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/root.php"] [unique_id "aY6HbtiAvPoWmw5YhwkiAQAAAEE"]
[Fri Feb 13 10:07:44.837923 2026] [:error] [pid 49224:tid 49272] [client 68.221.137.8:16545] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/root.php"] [unique_id "aY6HcNiAvPoWmw5YhwkiCwAAAEU"]
[Fri Feb 13 10:07:45.998298 2026] [:error] [pid 49335:tid 49344] [client 68.221.137.8:10573] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/root.php"] [unique_id "aY6Hcap--SFY2nwOiqnX-gAAAMc"]
[Fri Feb 13 10:07:47.107448 2026] [:error] [pid 49224:tid 49270] [client 68.221.137.8:16850] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aY6Hc9iAvPoWmw5YhwkiFQAAAEM"]
[Fri Feb 13 10:07:48.738374 2026] [:error] [pid 46821:tid 46847] [client 68.221.137.8:11590] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aY6HdI6G1N5YSq0J0gdygAAAAVg"]
[Fri Feb 13 10:07:51.529319 2026] [:error] [pid 51243:tid 51257] [client 68.221.137.8:14239] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aY6Hd8im7ZTAHzi7xZtAkwAAAQw"]
[Fri Feb 13 10:07:52.657991 2026] [:error] [pid 51243:tid 51255] [client 68.221.137.8:14232] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aY6HeMim7ZTAHzi7xZtAmgAAAQo"]
[Fri Feb 13 10:07:55.180327 2026] [:error] [pid 49335:tid 49356] [client 68.221.137.8:27170] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/themes.php"] [unique_id "aY6He6p--SFY2nwOiqnYCwAAANM"]
[Fri Feb 13 10:07:59.563936 2026] [:error] [pid 49223:tid 49243] [client 68.221.137.8:6176] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/themes.php"] [unique_id "aY6Hfx8A_fZBamNLnfWo7wAAAAs"]
[Fri Feb 13 10:08:01.443375 2026] [:error] [pid 49224:tid 49287] [client 68.221.137.8:23291] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/themes.php"] [unique_id "aY6HgdiAvPoWmw5YhwkiNAAAAFQ"]
[Fri Feb 13 10:08:06.671255 2026] [:error] [pid 46821:tid 46847] [client 68.221.137.8:6188] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/themes.php"] [unique_id "aY6Hho6G1N5YSq0J0gdynQAAAVg"]
[Fri Feb 13 10:08:07.994355 2026] [:error] [pid 46821:tid 46838] [client 68.221.137.8:6512] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ct.php"] [unique_id "aY6Hh46G1N5YSq0J0gdypQAAAU8"]
[Fri Feb 13 10:08:10.081601 2026] [:error] [pid 49335:tid 49357] [client 68.221.137.8:14465] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ct.php"] [unique_id "aY6Hiqp--SFY2nwOiqnYIQAAANQ"]
[Fri Feb 13 10:08:11.025373 2026] [:error] [pid 49223:tid 49237] [client 68.221.137.8:6494] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ct.php"] [unique_id "aY6Hix8A_fZBamNLnfWpAQAAAAU"]
[Fri Feb 13 10:08:11.929795 2026] [:error] [pid 49224:tid 49291] [client 68.221.137.8:19430] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ct.php"] [unique_id "aY6Hi9iAvPoWmw5YhwkiTgAAAFg"]
[Fri Feb 13 10:08:13.168635 2026] [:error] [pid 46821:tid 46824] [client 68.221.137.8:15588] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/13.php"] [unique_id "aY6HjY6G1N5YSq0J0gdyqwAAAUE"]
[Fri Feb 13 10:08:15.955785 2026] [:error] [pid 51243:tid 51258] [client 68.221.137.8:14503] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/13.php"] [unique_id "aY6Hj8im7ZTAHzi7xZtAtgAAAQ0"]
[Fri Feb 13 10:08:17.222758 2026] [:error] [pid 51243:tid 51247] [client 68.221.137.8:6775] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/13.php"] [unique_id "aY6Hkcim7ZTAHzi7xZtAuQAAAQI"]
[Fri Feb 13 10:08:18.386681 2026] [:error] [pid 49224:tid 49268] [client 68.221.137.8:15087] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/13.php"] [unique_id "aY6HktiAvPoWmw5YhwkiWQAAAEE"]
[Fri Feb 13 10:08:19.080274 2026] [:error] [pid 49223:tid 49236] [client 68.221.137.8:25736] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ok.php"] [unique_id "aY6Hkx8A_fZBamNLnfWpEgAAAAQ"]
[Fri Feb 13 10:08:20.249993 2026] [:error] [pid 46821:tid 46836] [client 68.221.137.8:13015] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ok.php"] [unique_id "aY6HlI6G1N5YSq0J0gdytgAAAU0"]
[Fri Feb 13 10:08:21.297233 2026] [:error] [pid 49335:tid 49338] [client 68.221.137.8:10519] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ok.php"] [unique_id "aY6Hlap--SFY2nwOiqnYLgAAAME"]
[Fri Feb 13 10:08:22.635399 2026] [:error] [pid 49224:tid 49281] [client 68.221.137.8:19413] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ok.php"] [unique_id "aY6HltiAvPoWmw5YhwkiXgAAAE4"]
[Fri Feb 13 10:08:25.212617 2026] [:error] [pid 51243:tid 51264] [client 68.221.137.8:6724] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/a1.php"] [unique_id "aY6Hmcim7ZTAHzi7xZtAxwAAARM"]
[Fri Feb 13 10:08:26.164111 2026] [:error] [pid 49224:tid 49280] [client 68.221.137.8:19364] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/a1.php"] [unique_id "aY6HmtiAvPoWmw5YhwkibQAAAE0"]
[Fri Feb 13 10:08:29.107834 2026] [:error] [pid 49223:tid 49247] [client 68.221.137.8:10923] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/a1.php"] [unique_id "aY6HnR8A_fZBamNLnfWpJgAAAA8"]
[Fri Feb 13 10:08:30.772627 2026] [:error] [pid 46821:tid 46838] [client 68.221.137.8:12997] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/a1.php"] [unique_id "aY6Hno6G1N5YSq0J0gdywQAAAU8"]
[Fri Feb 13 10:08:32.140041 2026] [proxy_fcgi:error] [pid 49335:tid 49347] [client 68.221.137.8:10887] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 10:08:32.410225 2026] [proxy_fcgi:error] [pid 49335:tid 49338] [client 68.221.137.8:10887] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 10:08:32.653396 2026] [proxy_fcgi:error] [pid 49335:tid 49345] [client 68.221.137.8:10887] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 10:08:32.921867 2026] [proxy_fcgi:error] [pid 49335:tid 49341] [client 68.221.137.8:10887] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 10:08:33.246666 2026] [proxy_fcgi:error] [pid 49335:tid 49354] [client 68.221.137.8:10887] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 10:08:33.490402 2026] [proxy_fcgi:error] [pid 49335:tid 49337] [client 68.221.137.8:10887] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 10:08:33.739589 2026] [proxy_fcgi:error] [pid 49335:tid 49350] [client 68.221.137.8:10887] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 10:08:34.395937 2026] [proxy_fcgi:error] [pid 49335:tid 49352] [client 68.221.137.8:10887] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 10:08:36.267023 2026] [proxy_fcgi:error] [pid 49335:tid 49358] [client 68.221.137.8:10887] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 10:08:36.518366 2026] [:error] [pid 49335:tid 49343] [client 68.221.137.8:10887] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/aaa.php"] [unique_id "aY6HpKp--SFY2nwOiqnYYgAAAMY"]
[Fri Feb 13 10:08:40.767255 2026] [:error] [pid 49225:tid 49300] [client 68.221.137.8:15569] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/aaa.php"] [unique_id "aY6HqDwH8-zGxtAd3jtnBQAAAIY"]
[Fri Feb 13 10:08:42.394462 2026] [:error] [pid 51243:tid 51251] [client 68.221.137.8:10905] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/aaa.php"] [unique_id "aY6Hqsim7ZTAHzi7xZtA4QAAAQY"]
[Fri Feb 13 10:08:45.020819 2026] [:error] [pid 46821:tid 46834] [client 68.221.137.8:33005] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/aaa.php"] [unique_id "aY6HrY6G1N5YSq0J0gdy7wAAAUs"]
[Fri Feb 13 10:08:45.807793 2026] [:error] [pid 49223:tid 49245] [client 68.221.137.8:19331] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/shell.php"] [unique_id "aY6HrR8A_fZBamNLnfWpVwAAAA0"]
[Fri Feb 13 10:08:50.388137 2026] [:error] [pid 49225:tid 49305] [client 68.221.137.8:15567] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/shell.php"] [unique_id "aY6HsjwH8-zGxtAd3jtnGAAAAIs"]
[Fri Feb 13 10:08:51.201374 2026] [:error] [pid 49223:tid 49242] [client 68.221.137.8:6348] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/shell.php"] [unique_id "aY6Hsx8A_fZBamNLnfWpZgAAAAo"]
[Fri Feb 13 10:08:53.128455 2026] [:error] [pid 49335:tid 49340] [client 68.221.137.8:10929] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/shell.php"] [unique_id "aY6Htap--SFY2nwOiqnYiAAAAMM"]
[Fri Feb 13 10:08:54.824557 2026] [:error] [pid 49225:tid 49304] [client 68.221.137.8:15600] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/file.php"] [unique_id "aY6HtjwH8-zGxtAd3jtnHAAAAIo"]
[Fri Feb 13 10:08:59.084670 2026] [:error] [pid 49225:tid 49317] [client 68.221.137.8:16018] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/file.php"] [unique_id "aY6HuzwH8-zGxtAd3jtnLwAAAJc"]
[Fri Feb 13 10:09:01.202517 2026] [:error] [pid 49223:tid 49234] [client 68.221.137.8:30781] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/file.php"] [unique_id "aY6HvR8A_fZBamNLnfWpdgAAAAI"]
[Fri Feb 13 10:09:03.080352 2026] [:error] [pid 46821:tid 46840] [client 68.221.137.8:28850] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/file.php"] [unique_id "aY6Hv46G1N5YSq0J0gdzGQAAAVE"]
[Fri Feb 13 10:09:05.012239 2026] [:error] [pid 49224:tid 49277] [client 68.221.137.8:15523] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ract.php"] [unique_id "aY6HwdiAvPoWmw5Yhwki2AAAAEo"]
[Fri Feb 13 10:09:09.057924 2026] [:error] [pid 49223:tid 49236] [client 68.221.137.8:15495] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ract.php"] [unique_id "aY6HxR8A_fZBamNLnfWpfwAAAAQ"]
[Fri Feb 13 10:09:10.094760 2026] [:error] [pid 49224:tid 49287] [client 68.221.137.8:23903] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ract.php"] [unique_id "aY6HxtiAvPoWmw5Yhwki5wAAAFQ"]
[Fri Feb 13 10:09:12.075494 2026] [:error] [pid 51243:tid 51264] [client 68.221.137.8:23908] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ract.php"] [unique_id "aY6HyMim7ZTAHzi7xZtBIAAAARM"]
[Fri Feb 13 10:09:14.390369 2026] [:error] [pid 46821:tid 46830] [client 68.221.137.8:30728] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/city-ajax.php"] [unique_id "aY6Hyo6G1N5YSq0J0gdzMwAAAUc"]
[Fri Feb 13 10:09:23.374584 2026] [:error] [pid 49225:tid 49296] [client 68.221.137.8:11003] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/city-ajax.php"] [unique_id "aY6H0zwH8-zGxtAd3jtnXgAAAII"]
[Fri Feb 13 10:09:25.981889 2026] [:error] [pid 49224:tid 49267] [client 68.221.137.8:23923] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/city-ajax.php"] [unique_id "aY6H1diAvPoWmw5YhwkjCwAAAEA"]
[Fri Feb 13 10:09:27.041568 2026] [:error] [pid 49224:tid 49268] [client 68.221.137.8:6437] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/city-ajax.php"] [unique_id "aY6H19iAvPoWmw5YhwkjEAAAAEE"]
[Fri Feb 13 10:09:28.524245 2026] [:error] [pid 49224:tid 49279] [client 68.221.137.8:27707] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/fi.php"] [unique_id "aY6H2NiAvPoWmw5YhwkjFAAAAEw"]
[Fri Feb 13 10:09:29.593318 2026] [:error] [pid 49224:tid 49267] [client 68.221.137.8:6214] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/fi.php"] [unique_id "aY6H2diAvPoWmw5YhwkjGAAAAEA"]
[Fri Feb 13 10:09:31.633320 2026] [:error] [pid 49225:tid 49298] [client 68.221.137.8:31485] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/fi.php"] [unique_id "aY6H2zwH8-zGxtAd3jtnbAAAAIQ"]
[Fri Feb 13 10:09:35.224622 2026] [:error] [pid 49225:tid 49294] [client 68.221.137.8:36038] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/fi.php"] [unique_id "aY6H3zwH8-zGxtAd3jtncwAAAIA"]
[Fri Feb 13 10:09:36.627938 2026] [proxy_fcgi:error] [pid 49335:tid 49344] [client 68.221.137.8:27658] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 10:09:36.887256 2026] [proxy_fcgi:error] [pid 49335:tid 49337] [client 68.221.137.8:27658] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 10:09:37.137993 2026] [proxy_fcgi:error] [pid 49335:tid 49339] [client 68.221.137.8:27658] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 10:09:37.384335 2026] [proxy_fcgi:error] [pid 49335:tid 49359] [client 68.221.137.8:27658] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 10:09:38.399606 2026] [proxy_fcgi:error] [pid 49335:tid 49357] [client 68.221.137.8:27658] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 10:09:38.833849 2026] [proxy_fcgi:error] [pid 49335:tid 49351] [client 68.221.137.8:27658] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 10:09:39.076946 2026] [proxy_fcgi:error] [pid 49335:tid 49361] [client 68.221.137.8:27658] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 10:09:39.466196 2026] [proxy_fcgi:error] [pid 49335:tid 49340] [client 68.221.137.8:27658] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 10:09:39.713033 2026] [proxy_fcgi:error] [pid 49335:tid 49344] [client 68.221.137.8:27658] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 10:09:39.976976 2026] [proxy_fcgi:error] [pid 49335:tid 49337] [client 68.221.137.8:27658] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 10:09:40.217155 2026] [:error] [pid 49335:tid 49359] [client 68.221.137.8:27658] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/jindex.php"] [unique_id "aY6H5Kp--SFY2nwOiqnY9gAAANY"]
[Fri Feb 13 10:09:41.874640 2026] [:error] [pid 51243:tid 51269] [client 68.221.137.8:36059] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/jindex.php"] [unique_id "aY6H5cim7ZTAHzi7xZtBXAAAARg"]
[Fri Feb 13 10:09:47.530839 2026] [:error] [pid 49225:tid 49316] [client 68.221.137.8:31446] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/jindex.php"] [unique_id "aY6H6zwH8-zGxtAd3jtnoQAAAJY"]
[Fri Feb 13 10:09:49.888886 2026] [:error] [pid 49224:tid 49272] [client 68.221.137.8:6266] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/jindex.php"] [unique_id "aY6H7diAvPoWmw5YhwkjWAAAAEU"]
[Fri Feb 13 10:09:52.725741 2026] [:error] [pid 51243:tid 51252] [client 68.221.137.8:36093] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/geck.php"] [unique_id "aY6H8Mim7ZTAHzi7xZtBcQAAAQc"]
[Fri Feb 13 10:09:57.530073 2026] [:error] [pid 46821:tid 46824] [client 68.221.137.8:24501] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/geck.php"] [unique_id "aY6H9Y6G1N5YSq0J0gdzhgAAAUE"]
[Fri Feb 13 10:10:00.665822 2026] [:error] [pid 46821:tid 46823] [client 68.221.137.8:27677] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/geck.php"] [unique_id "aY6H-I6G1N5YSq0J0gdzjgAAAUA"]
[Fri Feb 13 10:10:01.893570 2026] [:error] [pid 49335:tid 49352] [client 68.221.137.8:24526] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/geck.php"] [unique_id "aY6H-ap--SFY2nwOiqnZHAAAAM8"]
[Fri Feb 13 10:10:02.562351 2026] [:error] [pid 49225:tid 49309] [client 68.221.137.8:6853] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xox.php"] [unique_id "aY6H-jwH8-zGxtAd3jtnvAAAAI8"]
[Fri Feb 13 10:10:09.710601 2026] [:error] [pid 49224:tid 49268] [client 68.221.137.8:10262] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xox.php"] [unique_id "aY6IAdiAvPoWmw5YhwkjfgAAAEE"]
[Fri Feb 13 10:10:10.479176 2026] [:error] [pid 49225:tid 49310] [client 68.221.137.8:6894] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xox.php"] [unique_id "aY6IAjwH8-zGxtAd3jtnzgAAAJA"]
[Fri Feb 13 10:10:17.913838 2026] [:error] [pid 49335:tid 49351] [client 68.221.137.8:19760] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wen.php"] [unique_id "aY6ICap--SFY2nwOiqnZKwAAAM4"]
[Fri Feb 13 10:10:21.441654 2026] [:error] [pid 49223:tid 49239] [client 68.221.137.8:11361] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wen.php"] [unique_id "aY6IDR8A_fZBamNLnfWp6AAAAAc"]
[Fri Feb 13 10:10:22.351767 2026] [:error] [pid 49223:tid 49248] [client 68.221.137.8:14784] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wen.php"] [unique_id "aY6IDh8A_fZBamNLnfWp7QAAABA"]
[Fri Feb 13 10:10:23.550620 2026] [:error] [pid 49223:tid 49252] [client 68.221.137.8:13456] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wen.php"] [unique_id "aY6IDx8A_fZBamNLnfWp8QAAABQ"]
[Fri Feb 13 10:10:25.601553 2026] [:error] [pid 51243:tid 51255] [client 68.221.137.8:12475] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/gel4y.php"] [unique_id "aY6IEcim7ZTAHzi7xZtBuAAAAQo"]
[Fri Feb 13 10:10:26.592011 2026] [:error] [pid 49223:tid 49239] [client 68.221.137.8:20301] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/gel4y.php"] [unique_id "aY6IEh8A_fZBamNLnfWp9AAAAAc"]
[Fri Feb 13 10:10:28.380085 2026] [:error] [pid 49223:tid 49248] [client 68.221.137.8:19040] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/gel4y.php"] [unique_id "aY6IFB8A_fZBamNLnfWp9QAAABA"]
[Fri Feb 13 10:10:34.558899 2026] [:error] [pid 49223:tid 49234] [client 68.221.137.8:17444] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/gel4y.php"] [unique_id "aY6IGh8A_fZBamNLnfWqEAAAAAI"]
[Fri Feb 13 10:10:35.470405 2026] [:error] [pid 46821:tid 46833] [client 68.221.137.8:20330] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/gif.php"] [unique_id "aY6IG46G1N5YSq0J0gdzywAAAUo"]
[Fri Feb 13 10:10:37.735276 2026] [:error] [pid 49335:tid 49342] [client 68.221.137.8:19020] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/gif.php"] [unique_id "aY6IHap--SFY2nwOiqnZUQAAAMU"]
[Fri Feb 13 10:10:39.160607 2026] [proxy_fcgi:error] [pid 49335:tid 49338] [client 68.221.137.8:19051] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 10:10:39.406825 2026] [proxy_fcgi:error] [pid 49335:tid 49356] [client 68.221.137.8:19051] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 10:10:39.670664 2026] [proxy_fcgi:error] [pid 49335:tid 49352] [client 68.221.137.8:19051] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 10:10:40.172346 2026] [proxy_fcgi:error] [pid 49335:tid 49360] [client 68.221.137.8:19051] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 10:10:40.416684 2026] [proxy_fcgi:error] [pid 49335:tid 49350] [client 68.221.137.8:19051] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 10:10:40.664365 2026] [proxy_fcgi:error] [pid 49335:tid 49337] [client 68.221.137.8:19051] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 10:10:41.128335 2026] [proxy_fcgi:error] [pid 49335:tid 49343] [client 68.221.137.8:19051] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 10:10:41.373185 2026] [proxy_fcgi:error] [pid 49335:tid 49340] [client 68.221.137.8:19051] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 10:10:41.640932 2026] [proxy_fcgi:error] [pid 49335:tid 49347] [client 68.221.137.8:19051] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 10:10:41.884042 2026] [proxy_fcgi:error] [pid 49335:tid 49338] [client 68.221.137.8:19051] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 10:10:42.123282 2026] [:error] [pid 49335:tid 49356] [client 68.221.137.8:19051] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bipas.php"] [unique_id "aY6IIqp--SFY2nwOiqnZZgAAANM"]
[Fri Feb 13 10:10:43.164472 2026] [:error] [pid 51243:tid 51256] [client 68.221.137.8:13760] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bipas.php"] [unique_id "aY6II8im7ZTAHzi7xZtB7gAAAQs"]
[Fri Feb 13 10:10:44.094768 2026] [:error] [pid 49335:tid 49360] [client 68.221.137.8:19061] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bipas.php"] [unique_id "aY6IJKp--SFY2nwOiqnZaAAAANc"]
[Fri Feb 13 10:10:45.038749 2026] [:error] [pid 49223:tid 49256] [client 68.221.137.8:15842] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bipas.php"] [unique_id "aY6IJR8A_fZBamNLnfWqHwAAABg"]
[Fri Feb 13 10:10:45.865566 2026] [:error] [pid 49224:tid 49291] [client 68.221.137.8:11302] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/plss3.php"] [unique_id "aY6IJdiAvPoWmw5YhwkjxwAAAFg"]
[Fri Feb 13 10:10:47.020486 2026] [:error] [pid 49223:tid 49237] [client 68.221.137.8:9023] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/plss3.php"] [unique_id "aY6IJx8A_fZBamNLnfWqIwAAAAU"]
[Fri Feb 13 10:10:49.078346 2026] [:error] [pid 46821:tid 46836] [client 68.221.137.8:34159] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/plss3.php"] [unique_id "aY6IKY6G1N5YSq0J0gdz9QAAAU0"]
[Fri Feb 13 10:10:50.158822 2026] [:error] [pid 46821:tid 46823] [client 68.221.137.8:8985] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/plss3.php"] [unique_id "aY6IKo6G1N5YSq0J0gdz9wAAAUA"]
[Fri Feb 13 10:10:52.663905 2026] [:error] [pid 49224:tid 49268] [client 68.221.137.8:10056] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/minimo.php"] [unique_id "aY6ILNiAvPoWmw5Yhwkj5gAAAEE"]
[Fri Feb 13 10:10:54.116726 2026] [:error] [pid 46821:tid 46847] [client 68.221.137.8:10067] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/minimo.php"] [unique_id "aY6ILo6G1N5YSq0J0gdz_wAAAVg"]
[Fri Feb 13 10:10:55.173585 2026] [:error] [pid 49225:tid 49310] [client 68.221.137.8:12520] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/minimo.php"] [unique_id "aY6ILzwH8-zGxtAd3jtoRAAAAJA"]
[Fri Feb 13 10:10:56.062271 2026] [:error] [pid 49225:tid 49298] [client 68.221.137.8:20237] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/minimo.php"] [unique_id "aY6IMDwH8-zGxtAd3jtoRgAAAIQ"]
[Fri Feb 13 10:10:57.933467 2026] [:error] [pid 46821:tid 46824] [client 68.221.137.8:9300] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/RxR.php"] [unique_id "aY6IMY6G1N5YSq0J0gd0CAAAAUE"]
[Fri Feb 13 10:11:00.061116 2026] [:error] [pid 46821:tid 46845] [client 68.221.137.8:11030] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/RxR.php"] [unique_id "aY6INI6G1N5YSq0J0gd0FAAAAVY"]
[Fri Feb 13 10:11:01.026149 2026] [:error] [pid 49224:tid 49267] [client 68.221.137.8:18741] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/RxR.php"] [unique_id "aY6INdiAvPoWmw5YhwkkAwAAAEA"]
[Fri Feb 13 10:11:02.969559 2026] [:error] [pid 49224:tid 49268] [client 68.221.137.8:27208] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/RxR.php"] [unique_id "aY6INtiAvPoWmw5YhwkkDQAAAEE"]
[Fri Feb 13 10:11:04.651720 2026] [:error] [pid 46821:tid 46847] [client 68.221.137.8:15798] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/admin/function.php"] [unique_id "aY6IOI6G1N5YSq0J0gd0MwAAAVg"]
[Fri Feb 13 10:11:05.953359 2026] [:error] [pid 49335:tid 49347] [client 68.221.137.8:20250] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/admin/function.php"] [unique_id "aY6IOap--SFY2nwOiqnZfgAAAMo"]
[Fri Feb 13 10:11:06.918860 2026] [:error] [pid 51243:tid 51257] [client 68.221.137.8:18287] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/admin/function.php"] [unique_id "aY6IOsim7ZTAHzi7xZtCDwAAAQw"]
[Fri Feb 13 10:11:09.437588 2026] [:error] [pid 49224:tid 49270] [client 68.221.137.8:18750] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/admin/function.php"] [unique_id "aY6IPdiAvPoWmw5YhwkkMwAAAEM"]
[Fri Feb 13 10:11:10.498650 2026] [:error] [pid 51243:tid 51265] [client 68.221.137.8:62819] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/gifclass4.php"] [unique_id "aY6IPsim7ZTAHzi7xZtCFQAAARQ"]
[Fri Feb 13 10:11:11.541811 2026] [:error] [pid 46821:tid 46832] [client 68.221.137.8:35973] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/gifclass4.php"] [unique_id "aY6IP46G1N5YSq0J0gd0QQAAAUk"]
[Fri Feb 13 10:11:12.386763 2026] [:error] [pid 49223:tid 49245] [client 68.221.137.8:6957] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/gifclass4.php"] [unique_id "aY6IQB8A_fZBamNLnfWqUQAAAA0"]
[Fri Feb 13 10:11:13.059317 2026] [:error] [pid 49223:tid 49239] [client 68.221.137.8:7005] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/gifclass4.php"] [unique_id "aY6IQR8A_fZBamNLnfWqUgAAAAc"]
[Fri Feb 13 10:11:13.717090 2026] [:error] [pid 49225:tid 49308] [client 68.221.137.8:62825] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/nw.php"] [unique_id "aY6IQTwH8-zGxtAd3jtodgAAAI4"]
[Fri Feb 13 10:11:15.420659 2026] [:error] [pid 49225:tid 49299] [client 68.221.137.8:15777] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/nw.php"] [unique_id "aY6IQzwH8-zGxtAd3jtofQAAAIU"]
[Fri Feb 13 10:11:17.418387 2026] [:error] [pid 49223:tid 49244] [client 68.221.137.8:6912] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/nw.php"] [unique_id "aY6IRR8A_fZBamNLnfWqaAAAAAw"]
[Fri Feb 13 10:11:18.288901 2026] [:error] [pid 46821:tid 46831] [client 68.221.137.8:35345] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/nw.php"] [unique_id "aY6IRo6G1N5YSq0J0gd0WAAAAUg"]
[Fri Feb 13 10:11:18.979977 2026] [:error] [pid 49223:tid 49245] [client 68.221.137.8:14303] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/it/name.php"] [unique_id "aY6IRh8A_fZBamNLnfWqbwAAAA0"]
[Fri Feb 13 10:11:19.677240 2026] [:error] [pid 49335:tid 49351] [client 68.221.137.8:8485] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/it/name.php"] [unique_id "aY6IR6p--SFY2nwOiqnZmwAAAM4"]
[Fri Feb 13 10:11:21.528141 2026] [:error] [pid 49335:tid 49348] [client 68.221.137.8:30122] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/it/name.php"] [unique_id "aY6ISap--SFY2nwOiqnZoAAAAMs"]
[Fri Feb 13 10:11:23.046197 2026] [:error] [pid 46821:tid 46839] [client 68.221.137.8:62801] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/it/name.php"] [unique_id "aY6IS46G1N5YSq0J0gd0ZAAAAVA"]
[Fri Feb 13 10:11:26.194259 2026] [:error] [pid 46821:tid 46847] [client 68.221.137.8:30144] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/FoxWSO.php"] [unique_id "aY6ITo6G1N5YSq0J0gd0bQAAAVg"]
[Fri Feb 13 10:11:30.899800 2026] [:error] [pid 49335:tid 49351] [client 68.221.137.8:12252] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/FoxWSO.php"] [unique_id "aY6IUqp--SFY2nwOiqnZsAAAAM4"]
[Fri Feb 13 10:11:32.482470 2026] [:error] [pid 49224:tid 49277] [client 68.221.137.8:22547] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/FoxWSO.php"] [unique_id "aY6IVNiAvPoWmw5YhwkkeAAAAEo"]
[Fri Feb 13 10:11:33.583390 2026] [:error] [pid 49223:tid 49249] [client 68.221.137.8:22563] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/FoxWSO.php"] [unique_id "aY6IVR8A_fZBamNLnfWqlwAAABE"]
[Fri Feb 13 10:11:34.507833 2026] [:error] [pid 49335:tid 49360] [client 68.221.137.8:12229] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/lol.php"] [unique_id "aY6IVqp--SFY2nwOiqnZuQAAANc"]
[Fri Feb 13 10:11:35.351816 2026] [:error] [pid 49223:tid 49256] [client 68.221.137.8:12269] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/lol.php"] [unique_id "aY6IVx8A_fZBamNLnfWqoQAAABg"]
[Fri Feb 13 10:11:36.419900 2026] [:error] [pid 49335:tid 49345] [client 68.221.137.8:12235] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/lol.php"] [unique_id "aY6IWKp--SFY2nwOiqnZuwAAAMg"]
[Fri Feb 13 10:11:37.488302 2026] [:error] [pid 49223:tid 49237] [client 68.221.137.8:30204] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/lol.php"] [unique_id "aY6IWR8A_fZBamNLnfWqqAAAAAU"]
[Fri Feb 13 10:11:38.678114 2026] [:error] [pid 49335:tid 49343] [client 68.221.137.8:22541] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/api.php"] [unique_id "aY6IWqp--SFY2nwOiqnZwAAAAMY"]
[Fri Feb 13 10:11:39.678657 2026] [:error] [pid 49223:tid 49256] [client 68.221.137.8:7079] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/api.php"] [unique_id "aY6IWx8A_fZBamNLnfWqsQAAABg"]
[Fri Feb 13 10:11:40.408096 2026] [:error] [pid 51243:tid 51245] [client 68.221.137.8:18504] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/api.php"] [unique_id "aY6IXMim7ZTAHzi7xZtCXwAAAQA"]
[Fri Feb 13 10:11:41.189805 2026] [proxy_fcgi:error] [pid 49335:tid 49347] [client 68.221.137.8:30163] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 10:11:41.449190 2026] [proxy_fcgi:error] [pid 49335:tid 49360] [client 68.221.137.8:30163] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 10:11:41.784047 2026] [proxy_fcgi:error] [pid 49335:tid 49355] [client 68.221.137.8:30163] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 10:11:42.025959 2026] [proxy_fcgi:error] [pid 49335:tid 49342] [client 68.221.137.8:30163] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 10:11:42.332783 2026] [proxy_fcgi:error] [pid 49335:tid 49357] [client 68.221.137.8:30163] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 10:11:42.884985 2026] [proxy_fcgi:error] [pid 49335:tid 49354] [client 68.221.137.8:30163] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 10:11:43.128044 2026] [proxy_fcgi:error] [pid 49335:tid 49352] [client 68.221.137.8:30163] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 10:11:43.389136 2026] [proxy_fcgi:error] [pid 49335:tid 49339] [client 68.221.137.8:30163] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 10:11:43.650205 2026] [proxy_fcgi:error] [pid 49335:tid 49346] [client 68.221.137.8:30163] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 10:11:43.893380 2026] [proxy_fcgi:error] [pid 49335:tid 49338] [client 68.221.137.8:30163] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 10:11:45.570408 2026] [:error] [pid 49335:tid 49359] [client 68.221.137.8:30163] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/fa.php"] [unique_id "aY6IYap--SFY2nwOiqnZ2wAAANY"]
[Fri Feb 13 10:11:46.824867 2026] [:error] [pid 49225:tid 49314] [client 68.221.137.8:13515] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/fa.php"] [unique_id "aY6IYjwH8-zGxtAd3jto2gAAAJQ"]
[Fri Feb 13 10:11:47.768257 2026] [:error] [pid 49225:tid 49307] [client 68.221.137.8:34057] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/fa.php"] [unique_id "aY6IYzwH8-zGxtAd3jto3AAAAI0"]
[Fri Feb 13 10:11:48.555004 2026] [:error] [pid 46821:tid 46841] [client 68.221.137.8:13218] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/fa.php"] [unique_id "aY6IZI6G1N5YSq0J0gd0pAAAAVI"]
[Fri Feb 13 10:11:49.445630 2026] [:error] [pid 49225:tid 49295] [client 68.221.137.8:35395] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/pi.php"] [unique_id "aY6IZTwH8-zGxtAd3jto4AAAAIE"]
[Fri Feb 13 10:11:50.187190 2026] [:error] [pid 49225:tid 49318] [client 68.221.137.8:22598] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/pi.php"] [unique_id "aY6IZjwH8-zGxtAd3jto5QAAAJg"]
[Fri Feb 13 10:11:51.331900 2026] [:error] [pid 46821:tid 46827] [client 68.221.137.8:17101] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/pi.php"] [unique_id "aY6IZ46G1N5YSq0J0gd0qQAAAUQ"]
[Fri Feb 13 10:11:52.270804 2026] [:error] [pid 49223:tid 49249] [client 68.221.137.8:16364] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/pi.php"] [unique_id "aY6IaB8A_fZBamNLnfWqwAAAABE"]
[Fri Feb 13 10:11:53.207115 2026] [:error] [pid 49224:tid 49290] [client 68.221.137.8:8205] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/flower.php"] [unique_id "aY6IadiAvPoWmw5YhwkkygAAAFc"]
[Fri Feb 13 10:11:55.246589 2026] [:error] [pid 46821:tid 46841] [client 68.221.137.8:9512] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/flower.php"] [unique_id "aY6Ia46G1N5YSq0J0gd0rAAAAVI"]
[Fri Feb 13 10:11:56.477967 2026] [:error] [pid 49224:tid 49273] [client 68.221.137.8:16327] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/flower.php"] [unique_id "aY6IbNiAvPoWmw5YhwkkzwAAAEY"]
[Fri Feb 13 10:11:58.023470 2026] [:error] [pid 49224:tid 49282] [client 68.221.137.8:12043] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/flower.php"] [unique_id "aY6IbtiAvPoWmw5Yhwkk1gAAAE8"]
[Fri Feb 13 10:11:59.552804 2026] [:error] [pid 49223:tid 49242] [client 68.221.137.8:12033] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/aa2.php"] [unique_id "aY6Ibx8A_fZBamNLnfWq1gAAAAo"]
[Fri Feb 13 10:12:15.229423 2026] [:error] [pid 49223:tid 49233] [client 68.221.137.8:23826] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/iwivi.php"] [unique_id "aY6Ifx8A_fZBamNLnfWq9gAAAAE"]
[Fri Feb 13 10:12:16.217614 2026] [:error] [pid 49223:tid 49251] [client 68.221.137.8:6638] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/iwivi.php"] [unique_id "aY6IgB8A_fZBamNLnfWq-gAAABM"]
[Fri Feb 13 10:12:22.004883 2026] [:error] [pid 46821:tid 46841] [client 68.221.137.8:14262] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/iwivi.php"] [unique_id "aY6Iho6G1N5YSq0J0gd05gAAAVI"]
[Fri Feb 13 10:12:24.018703 2026] [:error] [pid 49224:tid 49270] [client 68.221.137.8:6843] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/iwivi.php"] [unique_id "aY6IiNiAvPoWmw5YhwklJQAAAEM"]
[Fri Feb 13 10:12:26.806327 2026] [:error] [pid 49225:tid 49300] [client 68.221.137.8:23265] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-rdf.php"] [unique_id "aY6IijwH8-zGxtAd3jtpPAAAAIY"]
[Fri Feb 13 10:12:30.790638 2026] [:error] [pid 49224:tid 49275] [client 68.221.137.8:6650] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-rdf.php"] [unique_id "aY6IjtiAvPoWmw5YhwklRAAAAEg"]
[Fri Feb 13 10:12:32.977033 2026] [:error] [pid 46821:tid 46847] [client 68.221.137.8:6487] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-rdf.php"] [unique_id "aY6IkI6G1N5YSq0J0gd1DAAAAVg"]
[Fri Feb 13 10:12:34.683798 2026] [:error] [pid 51243:tid 51265] [client 68.221.137.8:9083] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-rdf.php"] [unique_id "aY6Iksim7ZTAHzi7xZtC3AAAARQ"]
[Fri Feb 13 10:12:35.781328 2026] [:error] [pid 49335:tid 49350] [client 68.221.137.8:16578] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/priv8.php"] [unique_id "aY6Ik6p--SFY2nwOiqnaOAAAAM0"]
[Fri Feb 13 10:12:37.244008 2026] [:error] [pid 49225:tid 49307] [client 68.221.137.8:31360] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/priv8.php"] [unique_id "aY6IlTwH8-zGxtAd3jtpWgAAAI0"]
[Fri Feb 13 10:12:39.011430 2026] [:error] [pid 49223:tid 49253] [client 68.221.137.8:23272] [client 68.221.137.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/priv8.php"] [unique_id "aY6Ilx8A_fZBamNLnfWrXgAAABU"]
[Fri Feb 13 10:12:46.005857 2026] [proxy_fcgi:error] [pid 49225:tid 49312] [client 68.221.137.8:16637] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 13:58:39.778661 2026] [:error] [pid 51243:tid 51250] [client 37.140.223.56:40063] [client 37.140.223.56] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.56, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-login.php"] [unique_id "aY69j8im7ZTAHzi7xZuJ8wAAAQU"]
[Fri Feb 13 13:58:39.806723 2026] [proxy_fcgi:error] [pid 51243:tid 51250] [client 37.140.223.56:40063] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 13:58:47.152834 2026] [:error] [pid 49223:tid 49254] [client 193.36.225.178:62069] [client 193.36.225.178] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.36.225.178, incrementing brute counter"] [hostname "www.dwelectservices.com.au"] [uri "/wp-login.php"] [unique_id "aY69lx8A_fZBamNLnfXxswAAABY"]
[Fri Feb 13 13:58:47.176617 2026] [proxy_fcgi:error] [pid 49223:tid 49254] [client 193.36.225.178:62069] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 15:00:22.028886 2026] [:error] [pid 49225:tid 49303] [client 167.160.190.163:54464] [client 167.160.190.163] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dwelectservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dwelectservices.com.au"] [uri "/"] [unique_id "aY7MBjwH8-zGxtAd3jvIHAAAAIk"], referer: https://www.google.com/
[Fri Feb 13 17:30:19.610288 2026] [:error] [pid 47575:tid 47590] [client 35.237.175.18:58977] [client 35.237.175.18] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.237.175.18, incrementing ddos counter"] [hostname "dwelectservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aY7vKwIPBuXb07mA_mSnPAAAAso"]
[Fri Feb 13 17:30:19.619525 2026] [proxy_fcgi:error] [pid 47575:tid 47590] [client 35.237.175.18:58977] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 17:30:22.340373 2026] [:error] [pid 47575:tid 47604] [client 35.237.175.18:58977] [client 35.237.175.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aY7vLgIPBuXb07mA_mSnSAAAAtc"]
[Fri Feb 13 17:30:22.768983 2026] [:error] [pid 47358:tid 47370] [client 35.237.175.18:53993] [client 35.237.175.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aY7vLsQFBuVVUQTESUz15AAAAoU"]
[Fri Feb 13 17:30:23.194403 2026] [:error] [pid 49225:tid 49304] [client 35.237.175.18:64132] [client 35.237.175.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aY7vLzwH8-zGxtAd3jvqWwAAAIo"]
[Fri Feb 13 17:30:23.678703 2026] [:error] [pid 18097:tid 18120] [client 35.237.175.18:64855] [client 35.237.175.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aY7vL3FzYiQ_BfaDDlYKYgAAAZU"]
[Fri Feb 13 17:30:24.147596 2026] [:error] [pid 47358:tid 47378] [client 35.237.175.18:57156] [client 35.237.175.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aY7vMMQFBuVVUQTESUz15gAAAow"]
[Fri Feb 13 17:30:24.635334 2026] [:error] [pid 49225:tid 49318] [client 35.237.175.18:58232] [client 35.237.175.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aY7vMDwH8-zGxtAd3jvqXgAAAJg"]
[Fri Feb 13 19:37:23.919467 2026] [proxy_fcgi:error] [pid 47358:tid 47375] [client 128.251.4.70:6743] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 19:37:24.174693 2026] [proxy_fcgi:error] [pid 47358:tid 47376] [client 128.251.4.70:6743] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 19:37:24.430933 2026] [proxy_fcgi:error] [pid 47358:tid 47388] [client 128.251.4.70:6743] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 19:37:24.684967 2026] [proxy_fcgi:error] [pid 47358:tid 47368] [client 128.251.4.70:6743] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 19:37:24.939797 2026] [proxy_fcgi:error] [pid 47358:tid 47363] [client 128.251.4.70:6743] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 19:37:25.193701 2026] [proxy_fcgi:error] [pid 47358:tid 47370] [client 128.251.4.70:6743] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 19:37:25.447943 2026] [proxy_fcgi:error] [pid 47358:tid 47389] [client 128.251.4.70:6743] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 19:37:25.702105 2026] [proxy_fcgi:error] [pid 47358:tid 47381] [client 128.251.4.70:6743] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 19:37:25.957079 2026] [proxy_fcgi:error] [pid 47358:tid 47378] [client 128.251.4.70:6743] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 19:37:26.211414 2026] [proxy_fcgi:error] [pid 47358:tid 47371] [client 128.251.4.70:6743] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 19:37:26.462094 2026] [:error] [pid 47358:tid 47386] [client 128.251.4.70:6743] [client 128.251.4.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kimono.php"] [unique_id "aY8M9sQFBuVVUQTESUwPZgAAApQ"]
[Fri Feb 13 19:37:26.964036 2026] [:error] [pid 46821:tid 46830] [client 128.251.4.70:7655] [client 128.251.4.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kimono.php"] [unique_id "aY8M9o6G1N5YSq0J0gcPTwAAAUc"]
[Fri Feb 13 19:37:27.463684 2026] [:error] [pid 49335:tid 49355] [client 128.251.4.70:10108] [client 128.251.4.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kimono.php"] [unique_id "aY8M96p--SFY2nwOiqll7gAAANI"]
[Fri Feb 13 19:37:27.962482 2026] [:error] [pid 47358:tid 47384] [client 128.251.4.70:9906] [client 128.251.4.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kimono.php"] [unique_id "aY8M98QFBuVVUQTESUwPZwAAApI"]
[Sat Feb 14 14:20:08.743927 2026] [:error] [pid 63325:tid 63341] [client 139.59.24.163:52892] [client 139.59.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/uploads/"] [unique_id "aZAUGAGMleU5keYIEc5ikwAAAIw"], referer: binance.com
[Sat Feb 14 14:20:14.034342 2026] [:error] [pid 63327:tid 63362] [client 139.59.24.163:54840] [client 139.59.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/images/"] [unique_id "aZAUHi9btvSz88ToHa-emwAAAYY"], referer: binance.com
[Sat Feb 14 14:20:18.856578 2026] [:error] [pid 28883:tid 28925] [client 139.59.24.163:56380] [client 139.59.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/files/"] [unique_id "aZAUImBZFo3PsPpATCytXQAAAo0"], referer: binance.com
[Sat Feb 14 14:43:32.025218 2026] [:error] [pid 63325:tid 63336] [client 139.59.24.163:63981] [client 139.59.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin/controller/extension/extension/"] [unique_id "aZAZlAGMleU5keYIEc5ndwAAAIc"], referer: binance.com
[Sat Feb 14 14:43:41.147989 2026] [:error] [pid 21195:tid 21249] [client 139.59.24.163:51045] [client 139.59.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/uploads/"] [unique_id "aZAZnd_2sARdLQ6dpsWdbAAAAFI"], referer: binance.com
[Sat Feb 14 14:43:52.584934 2026] [:error] [pid 63327:tid 63359] [client 139.59.24.163:55251] [client 139.59.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/images/"] [unique_id "aZAZqC9btvSz88ToHa-ivQAAAYM"], referer: binance.com
[Sat Feb 14 14:44:03.095126 2026] [:error] [pid 2503:tid 2528] [client 139.59.24.163:58672] [client 139.59.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/files/"] [unique_id "aZAZs7tdZ0Z5BhXymOBhJQAAANc"], referer: binance.com
[Sun Feb 15 09:18:23.536164 2026] [proxy_fcgi:error] [pid 31742:tid 31790] [client 52.169.119.118:9592] AH01071: Got error 'Primary script unknown'
[Sun Feb 15 09:18:23.789481 2026] [proxy_fcgi:error] [pid 31742:tid 31776] [client 52.169.119.118:9592] AH01071: Got error 'Primary script unknown'
[Sun Feb 15 09:18:24.042965 2026] [proxy_fcgi:error] [pid 31742:tid 31799] [client 52.169.119.118:9592] AH01071: Got error 'Primary script unknown'
[Sun Feb 15 09:18:24.296500 2026] [proxy_fcgi:error] [pid 31742:tid 31781] [client 52.169.119.118:9592] AH01071: Got error 'Primary script unknown'
[Sun Feb 15 09:18:24.550450 2026] [proxy_fcgi:error] [pid 31742:tid 31785] [client 52.169.119.118:9592] AH01071: Got error 'Primary script unknown'
[Sun Feb 15 09:18:24.805305 2026] [proxy_fcgi:error] [pid 31742:tid 31774] [client 52.169.119.118:9592] AH01071: Got error 'Primary script unknown'
[Sun Feb 15 09:18:25.058657 2026] [proxy_fcgi:error] [pid 31742:tid 31780] [client 52.169.119.118:9592] AH01071: Got error 'Primary script unknown'
[Sun Feb 15 09:18:25.314034 2026] [proxy_fcgi:error] [pid 31742:tid 31797] [client 52.169.119.118:9592] AH01071: Got error 'Primary script unknown'
[Sun Feb 15 09:18:25.566915 2026] [proxy_fcgi:error] [pid 31742:tid 31794] [client 52.169.119.118:9592] AH01071: Got error 'Primary script unknown'
[Sun Feb 15 09:18:25.822005 2026] [proxy_fcgi:error] [pid 31742:tid 31789] [client 52.169.119.118:9592] AH01071: Got error 'Primary script unknown'
[Sun Feb 15 09:18:26.078496 2026] [:error] [pid 31742:tid 31779] [client 52.169.119.118:9592] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kimono.php"] [unique_id "aZEe4rXL1bWwoeKJbC19wgAAA4Y"]
[Sun Feb 15 09:18:26.576368 2026] [:error] [pid 14577:tid 14580] [client 52.169.119.118:16842] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kimono.php"] [unique_id "aZEe4nTqrkuce6u39HubsQAAAQA"]
[Sun Feb 15 09:18:27.091744 2026] [:error] [pid 14577:tid 14601] [client 52.169.119.118:7132] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kimono.php"] [unique_id "aZEe43Tqrkuce6u39HubswAAARU"]
[Sun Feb 15 09:18:27.608127 2026] [:error] [pid 31743:tid 31803] [client 52.169.119.118:12759] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kimono.php"] [unique_id "aZEe44pmll8pmcvyJXnw6wAAA8M"]
[Sun Feb 15 12:20:42.060077 2026] [:error] [pid 42659:tid 42681] [client 66.249.79.76:48535] [client 66.249.79.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bet/Login%20%E0%B8%95%E0%B8%B2%E0%B8%A3%E0%B8%B2%E0%B8%87%E0%B8%84%E0%B8%B0%E0%B9%81%E0%B8%99%E0%B8%99%E0%B8%81%E0%B8%B1%E0%B8%A5%E0%B9%82%E0%B8%8A%E0%B9%88%20%E0%B9%80%E0%B8%8B%E0%B9%80%E0%B8%A3%E0%B8%B5%E0%B8%A2%E0%B8%9A%E0%B8%B5.html"] [unique_id "aZFJmuy3JGHOB-Rj_FY3DAAAAFQ"]
[Sun Feb 15 12:20:50.622225 2026] [:error] [pid 35497:tid 35538] [client 66.249.79.76:60813] [client 66.249.79.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xoso/Daftar%20%E0%B8%82%E0%B9%88%E0%B8%B2%E0%B8%A7%E0%B8%A7%E0%B8%87%E0%B8%81%E0%B8%B2%E0%B8%A3%E0%B8%9F%E0%B8%B8%E0%B8%95%E0%B8%9A%E0%B8%AD%E0%B8%A5.html"] [unique_id "aZFJosyqpfYzoxiskhswDAAAAMs"]
[Sun Feb 15 12:20:59.280266 2026] [:error] [pid 14577:tid 14601] [client 66.249.79.76:57355] [client 66.249.79.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/betting/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%84%E0%B9%88%E0%B8%B2%E0%B8%A2%E0%B9%83%E0%B8%AB%E0%B8%8D%E0%B9%88.html"] [unique_id "aZFJq3Tqrkuce6u39HvM1AAAARU"]
[Sun Feb 15 12:21:07.897399 2026] [:error] [pid 42754:tid 42828] [client 66.249.79.76:54514] [client 66.249.79.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gambling/%E0%B9%80%E0%B8%A7%E0%B8%A5%E0%B8%B2%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95pg%E0%B9%81%E0%B8%95%E0%B8%81.html"] [unique_id "aZFJs-iCZrZWT4BVy12U0AAAA84"]
[Sun Feb 15 12:21:25.108326 2026] [:error] [pid 31679:tid 31722] [client 66.249.79.76:40446] [client 66.249.79.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/news/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20%E0%B8%A7%E0%B8%AD%E0%B8%A5%E0%B9%80%E0%B8%A5%E0%B9%87%E0%B8%95%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%A1%E0%B8%B5%E0%B8%82%E0%B8%B1%E0%B9%89%E0%B8%99%E0%B8%95%E0%B9%88%E0%B9%8D%E0%B8%B2.html"] [unique_id "aZFJxRz9Q_0Eh7M-Xr1lmgAAAg0"]
[Sun Feb 15 12:23:38.501455 2026] [:error] [pid 42754:tid 42831] [client 66.249.79.76:35941] [client 66.249.79.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bonus/%E0%B8%AA%E0%B8%B9%E0%B8%95%E0%B8%A3%E0%B8%9B%E0%B8%B1%E0%B9%88%E0%B8%99%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.html"] [unique_id "aZFKSuiCZrZWT4BVy12VVgAAA9E"]
[Sun Feb 15 12:23:51.898386 2026] [:error] [pid 35557:tid 35578] [client 66.249.79.76:54750] [client 66.249.79.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/video/%E0%B9%80%E0%B8%81%E0%B8%A1%201688%20%E0%B8%84%E0%B8%B2%E0%B8%AA%E0%B8%B4%E0%B9%82%E0%B8%99%20%E0%B8%9F%E0%B8%A3%E0%B8%B5%20%E0%B8%AA%E0%B8%9B%E0%B8%B4%E0%B8%99.html"] [unique_id "aZFKV8I4REuGME4xEbP7zQAAAk8"]
[Sun Feb 15 12:23:58.165854 2026] [:error] [pid 42753:tid 42796] [client 66.249.79.76:42834] [client 66.249.79.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ios/thaisiambet%20com.html"] [unique_id "aZFKXghQMLzszrBLG6e5yQAAA4k"]
[Sun Feb 15 12:24:21.552656 2026] [:error] [pid 14577:tid 14603] [client 66.249.79.76:45187] [client 66.249.79.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dabong/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A789.html"] [unique_id "aZFKdXTqrkuce6u39HvN-gAAARc"]
[Sun Feb 15 12:26:26.372131 2026] [:error] [pid 14577:tid 14586] [client 66.249.79.76:51840] [client 66.249.79.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/app/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20pg%20%E0%B8%9D%E0%B8%B2%E0%B8%81%201%20%E0%B8%A3%E0%B8%B1%E0%B8%9A%20100%20%E0%B8%96%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%AD%E0%B8%B1%E0%B9%89%E0%B8%99.html"] [unique_id "aZFK8nTqrkuce6u39HvOowAAAQY"]
[Sun Feb 15 12:26:35.337917 2026] [:error] [pid 14577:tid 14582] [client 66.249.79.76:61194] [client 66.249.79.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gambling/how%20to%20log%20in%20w69%20thailand.html"] [unique_id "aZFK-3Tqrkuce6u39HvOpgAAAQI"]
[Sun Feb 15 12:26:39.904607 2026] [:error] [pid 42659:tid 42674] [client 66.249.79.76:47502] [client 66.249.79.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/deposit/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%81%E0%B8%A1%E0%B9%83%E0%B8%AB%E0%B8%A1%E0%B9%88%E0%B8%84%E0%B9%88%E0%B8%B2%E0%B8%A2pg.html"] [unique_id "aZFK_-y3JGHOB-Rj_FY4wwAAAE0"]
[Sun Feb 15 12:26:54.915589 2026] [:error] [pid 42752:tid 42781] [client 66.249.79.76:51820] [client 66.249.79.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dabong/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20pg%20totem%20wonders.html"] [unique_id "aZFLDsClY05C-Gq9l0ghsAAAAtY"]
[Sun Feb 15 12:26:59.311646 2026] [:error] [pid 35497:tid 35527] [client 66.249.79.76:38492] [client 66.249.79.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gambling/%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B8%9F%E0%B8%A3%E0%B8%B5%20%E0%B8%AA%E0%B8%A3%E0%B9%89%E0%B8%B2%E0%B8%87%20%E0%B8%A3%E0%B8%B2%E0%B8%A2%E0%B9%84%E0%B8%94%E0%B9%89.html"] [unique_id "aZFLE8yqpfYzoxiskhsxdAAAAMA"]
[Sun Feb 15 12:28:35.070624 2026] [:error] [pid 42659:tid 42672] [client 66.249.79.76:40484] [client 66.249.79.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/app/Login%20%E0%B8%AA%E0%B8%A1%E0%B8%B1%E0%B8%84%E0%B8%A3%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.html"] [unique_id "aZFLc-y3JGHOB-Rj_FY5nQAAAEs"]
[Sun Feb 15 12:28:48.499859 2026] [:error] [pid 35557:tid 35580] [client 66.249.79.76:46523] [client 66.249.79.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sitemap/Daftar%20%E0%B8%9C%E0%B8%A5%E0%B8%9A%E0%B8%9A%E0%B8%B2%E0%B8%AA.html"] [unique_id "aZFLgMI4REuGME4xEbP97gAAAlE"]
[Sun Feb 15 12:28:52.802939 2026] [:error] [pid 14577:tid 14595] [client 66.249.79.76:47569] [client 66.249.79.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cash/Login%20%E0%B8%95%E0%B8%B2%E0%B8%A3%E0%B8%B2%E0%B8%87%E0%B8%A3%E0%B8%B2%E0%B8%84%E0%B8%B2%E0%B8%9E%E0%B8%B9%E0%B8%A5%E0%B9%80%E0%B8%AA%E0%B8%A1%E0%B8%AD.html"] [unique_id "aZFLhHTqrkuce6u39HvPwQAAAQ8"]
[Sun Feb 15 12:29:05.723896 2026] [:error] [pid 42659:tid 42673] [client 66.249.79.76:48716] [client 66.249.79.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/betting/Login%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%AA%E0%B8%A1%E0%B8%B1%E0%B8%84%E0%B8%A3%E0%B8%9C%E0%B9%88%E0%B8%B2%E0%B8%99%E0%B8%A7%E0%B8%AD%E0%B9%80%E0%B8%A5%E0%B8%97.html"] [unique_id "aZFLkey3JGHOB-Rj_FY5zwAAAEw"]
[Sun Feb 15 12:29:27.233718 2026] [:error] [pid 42754:tid 42838] [client 66.249.79.76:41698] [client 66.249.79.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/app/%E0%B8%94%E0%B8%B9%E0%B8%9A%E0%B8%AD%E0%B8%A5%E0%B8%AA%E0%B8%94%2099%20%E0%B8%9F%E0%B8%A3%E0%B8%B5%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%A1%E0%B8%B5%E0%B9%82%E0%B8%86%E0%B8%A9%E0%B8%93%E0%B8%B2.html"] [unique_id "aZFLp-iCZrZWT4BVy12W8AAAA9g"]
[Sun Feb 15 12:31:36.389175 2026] [:error] [pid 42659:tid 42667] [client 66.249.79.76:35060] [client 66.249.79.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cash/Daftar%20%E0%B8%9C%E0%B8%A5%E0%B8%9A%E0%B8%AD%E0%B8%A5%E0%B8%AA%E0%B8%9422.html"] [unique_id "aZFMKOy3JGHOB-Rj_FY6dAAAAEY"]
[Sun Feb 15 12:31:50.764587 2026] [:error] [pid 35557:tid 35568] [client 66.249.79.76:60628] [client 66.249.79.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fishing/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.html"] [unique_id "aZFMNsI4REuGME4xEbP-gwAAAkU"]
[Sun Feb 15 12:31:53.558370 2026] [:error] [pid 42754:tid 42834] [client 66.249.79.76:49136] [client 66.249.79.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/video/777pg%20ph.html"] [unique_id "aZFMOeiCZrZWT4BVy12XaQAAA9Q"]
[Sun Feb 15 12:32:07.410241 2026] [:error] [pid 35557:tid 35575] [client 66.249.79.76:50186] [client 66.249.79.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bet/thaisiambet%20com.html"] [unique_id "aZFMR8I4REuGME4xEbP-kAAAAkw"]
[Sun Feb 15 12:32:16.566586 2026] [:error] [pid 35557:tid 35587] [client 66.249.79.76:44386] [client 66.249.79.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xoso/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%20%E0%B9%80%E0%B8%81%E0%B8%A1%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20pg.html"] [unique_id "aZFMUMI4REuGME4xEbP-nAAAAlg"]
[Sun Feb 15 12:45:27.640025 2026] [:error] [pid 14577:tid 14590] [client 66.249.79.76:49427] [client 66.249.79.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xoso/Daftar%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%957.html"] [unique_id "aZFPZ3Tqrkuce6u39HvVYAAAAQo"]
[Sun Feb 15 12:45:48.159254 2026] [:error] [pid 19652:tid 19673] [client 66.249.79.76:47621] [client 66.249.79.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ios/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%957.html"] [unique_id "aZFPfDHg2T9K5fiyOL-i6gAAABM"]
[Sun Feb 15 12:45:52.514625 2026] [:error] [pid 19652:tid 19678] [client 66.249.79.76:61266] [client 66.249.79.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cash/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B9%83%E0%B8%AB%E0%B8%8D%E0%B9%88%20%E0%B8%A3%E0%B8%A7%E0%B8%A1%E0%B8%97%E0%B8%B8%E0%B8%81%E0%B8%84%E0%B9%88%E0%B8%B2%E0%B8%A2.html"] [unique_id "aZFPgDHg2T9K5fiyOL-i8AAAABg"]
[Sun Feb 15 12:45:56.838800 2026] [:error] [pid 42753:tid 42809] [client 66.249.79.76:55831] [client 66.249.79.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/deposit/Daftar%20%E0%B8%AA%E0%B8%A1%E0%B8%B1%E0%B8%84%E0%B8%A3%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.html"] [unique_id "aZFPhAhQMLzszrBLG6e-qwAAA5Y"]
[Sun Feb 15 12:46:03.337265 2026] [:error] [pid 42752:tid 42769] [client 66.249.79.76:35827] [client 66.249.79.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/deposit/%E0%B8%82%E0%B9%88%E0%B8%B2%E0%B8%A7%E0%B8%A7%E0%B8%87%E0%B8%81%E0%B8%B2%E0%B8%A3%E0%B8%9F%E0%B8%B8%E0%B8%95%E0%B8%9A%E0%B8%AD%E0%B8%A5.html"] [unique_id "aZFPi8ClY05C-Gq9l0glbAAAAso"]
[Sun Feb 15 12:46:07.691844 2026] [:error] [pid 35497:tid 35531] [client 66.249.79.76:63690] [client 66.249.79.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dabong/Daftar%20%E0%B8%94%E0%B8%B9%E0%B8%9A%E0%B8%AD%E0%B8%A5%E0%B8%AA%E0%B8%94ufa.html"] [unique_id "aZFPj8yqpfYzoxiskhs2eAAAAMQ"]
[Sun Feb 15 12:46:19.653497 2026] [:error] [pid 31679:tid 31718] [client 66.249.79.76:51847] [client 66.249.79.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cash/Daftar%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95pg%20%E0%B9%80%E0%B8%A7%E0%B8%A5%E0%B8%B2%E0%B9%81%E0%B8%95%E0%B8%81.html"] [unique_id "aZFPmxz9Q_0Eh7M-Xr1qKwAAAgk"]
[Mon Feb 16 08:49:01.732986 2026] [:error] [pid 37004:tid 37008] [client 66.249.79.76:51474] [client 66.249.79.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cash/Daftar%20%E0%B9%80%E0%B8%81%E0%B8%A1%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%A1%E0%B8%B1%E0%B8%87%E0%B8%81%E0%B8%A3.html"] [unique_id "aZJpfVXWqA9gxE5oGmZp8QAAAQI"]
[Mon Feb 16 08:49:12.400255 2026] [:error] [pid 4348:tid 4401] [client 66.249.79.76:58098] [client 66.249.79.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sitemap/booking%20%E0%B8%84%E0%B8%B7%E0%B8%AD%E0%B8%AD%E0%B8%B0%E0%B9%84%E0%B8%A3%20%E0%B8%9D%E0%B8%B2%E0%B8%81%E0%B9%80%E0%B8%87%E0%B8%B4%E0%B8%99%E0%B8%A2%E0%B8%B1%E0%B8%87%E0%B9%84%E0%B8%87.html"] [unique_id "aZJpiHxbK-cCGKg9ayu-FwAAAEY"]
[Mon Feb 16 08:49:23.107876 2026] [:error] [pid 4455:tid 4470] [client 66.249.79.76:45160] [client 66.249.79.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/betting/Login%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B8%A5%E0%B8%B4%E0%B8%87.html"] [unique_id "aZJpkwNa-4dvQCL0ruq_XAAAAM0"]
[Mon Feb 16 08:49:43.694949 2026] [:error] [pid 4349:tid 4436] [client 66.249.79.76:48435] [client 66.249.79.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sitemap/Login%20%E0%B8%9A%E0%B9%89%E0%B8%B2%E0%B8%99%E0%B9%82%E0%B8%9E%E0%B8%A2%E0%B8%9A%E0%B8%AD%E0%B8%99.html"] [unique_id "aZJpp8rbZYafUL_3Qfw3BwAAAI4"]
[Mon Feb 16 08:53:35.560283 2026] [:error] [pid 37004:tid 37006] [client 66.249.79.76:59649] [client 66.249.79.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ios/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B8%9E%E0%B8%B5%E0%B8%88%E0%B8%B5.html"] [unique_id "aZJqj1XWqA9gxE5oGmZregAAAQA"]
[Mon Feb 16 08:53:56.141639 2026] [:error] [pid 4347:tid 4380] [client 66.249.79.76:38651] [client 66.249.79.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bet/Daftar%20%E0%B8%96%E0%B9%88%E0%B8%B2%E0%B8%A2%E0%B8%97%E0%B8%AD%E0%B8%94%E0%B8%AA%E0%B8%94%E0%B8%9A%E0%B8%AD%E0%B8%A5%E0%B8%AA%E0%B8%94.html"] [unique_id "aZJqpDFcjv6pEAnSEifaCgAAAAw"]
[Mon Feb 16 13:17:58.379180 2026] [:error] [pid 4349:tid 4437] [client 20.194.153.120:23616] [client 20.194.153.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aZKohsrbZYafUL_3QfyJWAAAAI8"]
[Mon Feb 16 13:17:58.644161 2026] [:error] [pid 4347:tid 4389] [client 20.194.153.120:24120] [client 20.194.153.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aZKohjFcjv6pEAnSEic3KQAAABU"]
[Mon Feb 16 13:17:58.741014 2026] [:error] [pid 4347:tid 4386] [client 20.194.153.120:23552] [client 20.194.153.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aZKohjFcjv6pEAnSEic3KwAAABI"]
[Mon Feb 16 13:17:59.113674 2026] [:error] [pid 4347:tid 4371] [client 20.194.153.120:24099] [client 20.194.153.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aZKohzFcjv6pEAnSEic3LQAAAAM"]
[Mon Feb 16 13:17:59.432074 2026] [:error] [pid 4455:tid 4457] [client 20.194.153.120:23058] [client 20.194.153.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aZKohwNa-4dvQCL0ruoWFQAAAMA"]
[Mon Feb 16 13:17:59.500118 2026] [:error] [pid 4348:tid 4395] [client 20.194.153.120:23674] [client 20.194.153.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aZKoh3xbK-cCGKg9aysiXAAAAEA"]
[Mon Feb 16 13:17:59.811080 2026] [:error] [pid 37004:tid 37028] [client 20.194.153.120:24089] [client 20.194.153.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aZKoh1XWqA9gxE5oGma-PQAAARY"]
[Mon Feb 16 13:17:59.816019 2026] [:error] [pid 37004:tid 37010] [client 20.194.153.120:23678] [client 20.194.153.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aZKoh1XWqA9gxE5oGma-PgAAAQQ"]
[Mon Feb 16 15:46:21.152012 2026] [:error] [pid 26648:tid 26677] [client 66.249.79.76:41008] [client 66.249.79.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%20sbobet%20%E0%B9%83%E0%B8%AB%E0%B8%A1%E0%B9%88%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aZLLTTT55fUixS3gmyjUOwAAAZg"]
[Mon Feb 16 15:46:27.674441 2026] [:error] [pid 4347:tid 4389] [client 66.249.79.76:39101] [client 66.249.79.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/pgneko.aspx"] [unique_id "aZLLUzFcjv6pEAnSEidieAAAABU"]
[Mon Feb 16 15:46:41.149237 2026] [:error] [pid 37004:tid 37027] [client 66.249.79.76:45536] [client 66.249.79.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95.aspx"] [unique_id "aZLLYVXWqA9gxE5oGmbmVAAAARU"]
[Mon Feb 16 15:46:47.664277 2026] [:error] [pid 26648:tid 26675] [client 66.249.79.76:65507] [client 66.249.79.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/%E0%B8%AD%E0%B8%B1%E0%B8%9E%E0%B8%97%E0%B8%B9%E0%B8%A2%E0%B8%B9%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aZLLZzT55fUixS3gmyjUaQAAAZY"]
[Mon Feb 16 15:49:31.908355 2026] [:error] [pid 4347:tid 4389] [client 66.249.79.76:45304] [client 66.249.79.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%20pg.aspx"] [unique_id "aZLMCzFcjv6pEAnSEidjnAAAABU"]
[Mon Feb 16 15:49:45.165411 2026] [:error] [pid 4347:tid 4371] [client 66.249.79.76:44670] [client 66.249.79.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%81%E0%B8%95%E0%B8%81%E0%B8%87%E0%B9%88%E0%B8%B2%E0%B8%A2.aspx"] [unique_id "aZLMGTFcjv6pEAnSEidjwQAAAAM"]
[Tue Feb 17 02:27:36.048779 2026] [proxy_fcgi:error] [pid 34932:tid 34944] [client 20.203.180.135:18666] AH01071: Got error 'Primary script unknown'
[Tue Feb 17 02:27:36.329946 2026] [proxy_fcgi:error] [pid 34932:tid 34941] [client 20.203.180.135:18666] AH01071: Got error 'Primary script unknown'
[Tue Feb 17 02:27:36.571219 2026] [proxy_fcgi:error] [pid 34932:tid 34950] [client 20.203.180.135:18666] AH01071: Got error 'Primary script unknown'
[Tue Feb 17 02:27:36.832153 2026] [proxy_fcgi:error] [pid 34932:tid 34963] [client 20.203.180.135:18666] AH01071: Got error 'Primary script unknown'
[Tue Feb 17 02:27:37.087257 2026] [proxy_fcgi:error] [pid 34932:tid 34961] [client 20.203.180.135:18666] AH01071: Got error 'Primary script unknown'
[Tue Feb 17 02:27:37.337790 2026] [proxy_fcgi:error] [pid 34932:tid 34952] [client 20.203.180.135:18666] AH01071: Got error 'Primary script unknown'
[Tue Feb 17 02:27:37.592012 2026] [proxy_fcgi:error] [pid 34932:tid 34948] [client 20.203.180.135:18666] AH01071: Got error 'Primary script unknown'
[Tue Feb 17 02:27:37.832226 2026] [proxy_fcgi:error] [pid 34932:tid 34945] [client 20.203.180.135:18666] AH01071: Got error 'Primary script unknown'
[Tue Feb 17 02:27:38.072356 2026] [proxy_fcgi:error] [pid 34932:tid 34940] [client 20.203.180.135:18666] AH01071: Got error 'Primary script unknown'
[Tue Feb 17 02:27:38.321884 2026] [proxy_fcgi:error] [pid 34932:tid 34955] [client 20.203.180.135:18666] AH01071: Got error 'Primary script unknown'
[Tue Feb 17 02:27:38.559044 2026] [:error] [pid 34932:tid 34962] [client 20.203.180.135:18666] [client 20.203.180.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/init.php"] [unique_id "aZNhmkKCWyYIg5P1IPfURgAAAhc"]
[Tue Feb 17 02:27:41.798287 2026] [:error] [pid 38888:tid 38893] [client 20.203.180.135:18931] [client 20.203.180.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/init.php"] [unique_id "aZNhnamDoBJWPvV4pcOqYAAAAUI"]
[Tue Feb 17 02:27:44.006126 2026] [:error] [pid 34933:tid 34987] [client 20.203.180.135:27080] [client 20.203.180.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/init.php"] [unique_id "aZNhoMubrqI4iEJPNFmStAAAAlU"]
[Tue Feb 17 02:27:45.172804 2026] [:error] [pid 34932:tid 34955] [client 20.203.180.135:5549] [client 20.203.180.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/init.php"] [unique_id "aZNhoUKCWyYIg5P1IPfUUAAAAhA"]
[Tue Feb 17 02:27:47.582946 2026] [:error] [pid 34904:tid 34906] [client 20.203.180.135:5454] [client 20.203.180.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/themes.php"] [unique_id "aZNhoxoDUNgfYrSP5-uATAAAAcA"]
[Tue Feb 17 02:28:06.554031 2026] [:error] [pid 26648:tid 26670] [client 20.203.180.135:15681] [client 20.203.180.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ff.php"] [unique_id "aZNhtjT55fUixS3gmyiK4QAAAZE"]
[Tue Feb 17 02:28:08.637492 2026] [:error] [pid 4347:tid 4389] [client 20.203.180.135:19619] [client 20.203.180.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ff.php"] [unique_id "aZNhuDFcjv6pEAnSEidAEAAAABU"]
[Tue Feb 17 02:28:12.426801 2026] [:error] [pid 38888:tid 38894] [client 20.203.180.135:17802] [client 20.203.180.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ff.php"] [unique_id "aZNhvKmDoBJWPvV4pcOqiQAAAUM"]
[Tue Feb 17 02:28:14.044535 2026] [:error] [pid 4348:tid 4413] [client 20.203.180.135:18082] [client 20.203.180.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ff.php"] [unique_id "aZNhvnxbK-cCGKg9aysNMQAAAFI"]
[Tue Feb 17 02:28:33.725625 2026] [:error] [pid 4348:tid 4412] [client 20.203.180.135:9737] [client 20.203.180.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bjfl.php"] [unique_id "aZNh0XxbK-cCGKg9aysNQwAAAFE"]
[Tue Feb 17 02:28:35.560850 2026] [:error] [pid 35004:tid 35016] [client 20.203.180.135:16975] [client 20.203.180.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bjfl.php"] [unique_id "aZNh02X1hIIv5l_K_OuZrgAAAoo"]
[Tue Feb 17 02:28:36.798044 2026] [:error] [pid 34904:tid 34914] [client 20.203.180.135:8994] [client 20.203.180.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bjfl.php"] [unique_id "aZNh1BoDUNgfYrSP5-uAaQAAAcg"]
[Tue Feb 17 02:28:39.562019 2026] [proxy_fcgi:error] [pid 4349:tid 4438] [client 20.203.180.135:9084] AH01071: Got error 'Primary script unknown'
[Tue Feb 17 02:28:39.801902 2026] [proxy_fcgi:error] [pid 4349:tid 4442] [client 20.203.180.135:9084] AH01071: Got error 'Primary script unknown'
[Tue Feb 17 02:28:40.305325 2026] [proxy_fcgi:error] [pid 4349:tid 4437] [client 20.203.180.135:9084] AH01071: Got error 'Primary script unknown'
[Tue Feb 17 02:28:40.638261 2026] [proxy_fcgi:error] [pid 4349:tid 4440] [client 20.203.180.135:9084] AH01071: Got error 'Primary script unknown'
[Tue Feb 17 02:28:40.882135 2026] [:error] [pid 4349:tid 4431] [client 20.203.180.135:9084] [client 20.203.180.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/about.php"] [unique_id "aZNh2MrbZYafUL_3QfxOoAAAAIk"]
[Tue Feb 17 02:28:42.748722 2026] [proxy_fcgi:error] [pid 4347:tid 4389] [client 20.203.180.135:22357] AH01071: Got error 'Primary script unknown'
[Tue Feb 17 07:57:35.877000 2026] [proxy_fcgi:error] [pid 58552:tid 58617] [client 40.112.95.11:9487] AH01071: Got error 'Primary script unknown'
[Tue Feb 17 07:57:36.131323 2026] [proxy_fcgi:error] [pid 58552:tid 58606] [client 40.112.95.11:9487] AH01071: Got error 'Primary script unknown'
[Tue Feb 17 07:57:36.517451 2026] [proxy_fcgi:error] [pid 58552:tid 58619] [client 40.112.95.11:9487] AH01071: Got error 'Primary script unknown'
[Tue Feb 17 07:57:36.771628 2026] [proxy_fcgi:error] [pid 58552:tid 58600] [client 40.112.95.11:9487] AH01071: Got error 'Primary script unknown'
[Tue Feb 17 07:57:37.030674 2026] [proxy_fcgi:error] [pid 58552:tid 58595] [client 40.112.95.11:9487] AH01071: Got error 'Primary script unknown'
[Tue Feb 17 07:57:37.285427 2026] [proxy_fcgi:error] [pid 58552:tid 58610] [client 40.112.95.11:9487] AH01071: Got error 'Primary script unknown'
[Tue Feb 17 07:57:37.546018 2026] [proxy_fcgi:error] [pid 58552:tid 58612] [client 40.112.95.11:9487] AH01071: Got error 'Primary script unknown'
[Tue Feb 17 07:57:38.075407 2026] [proxy_fcgi:error] [pid 58552:tid 58605] [client 40.112.95.11:9487] AH01071: Got error 'Primary script unknown'
[Tue Feb 17 07:57:38.341168 2026] [proxy_fcgi:error] [pid 58552:tid 58604] [client 40.112.95.11:9487] AH01071: Got error 'Primary script unknown'
[Tue Feb 17 07:57:38.591272 2026] [:error] [pid 58552:tid 58618] [client 40.112.95.11:9487] [client 40.112.95.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class.php"] [unique_id "aZOu8jBHVJP2Oz3yR5cWFAAAAFc"]
[Tue Feb 17 07:57:40.302210 2026] [:error] [pid 58558:tid 58626] [client 40.112.95.11:2949] [client 40.112.95.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class.php"] [unique_id "aZOu9CmIxlfUL2nViZznIwAAAIQ"]
[Tue Feb 17 07:57:41.685592 2026] [:error] [pid 32790:tid 32799] [client 40.112.95.11:6506] [client 40.112.95.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class.php"] [unique_id "aZOu9Xs3HJP9ozPHsN4fkgAAAQU"]
[Tue Feb 17 07:58:23.272790 2026] [:error] [pid 58659:tid 58683] [client 40.112.95.11:15875] [client 40.112.95.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nope.php"] [unique_id "aZOvH8DX32iTEO4jt28pEwAAANY"]
[Tue Feb 17 07:58:24.670048 2026] [:error] [pid 58659:tid 58664] [client 40.112.95.11:47548] [client 40.112.95.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nope.php"] [unique_id "aZOvIMDX32iTEO4jt28pGwAAAMM"]
[Tue Feb 17 07:58:26.121930 2026] [:error] [pid 32790:tid 32805] [client 40.112.95.11:15895] [client 40.112.95.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nope.php"] [unique_id "aZOvIns3HJP9ozPHsN4f6wAAAQs"]
[Tue Feb 17 07:58:46.109562 2026] [proxy_fcgi:error] [pid 58551:tid 58563] [client 40.112.95.11:26094] AH01071: Got error 'Primary script unknown'
[Tue Feb 17 07:58:46.394424 2026] [proxy_fcgi:error] [pid 58551:tid 58581] [client 40.112.95.11:26094] AH01071: Got error 'Primary script unknown'
[Tue Feb 17 07:58:46.674355 2026] [proxy_fcgi:error] [pid 58551:tid 58562] [client 40.112.95.11:26094] AH01071: Got error 'Primary script unknown'
[Tue Feb 17 07:58:46.958483 2026] [proxy_fcgi:error] [pid 58551:tid 58583] [client 40.112.95.11:26094] AH01071: Got error 'Primary script unknown'
[Tue Feb 17 07:58:47.276698 2026] [proxy_fcgi:error] [pid 58551:tid 58576] [client 40.112.95.11:26094] AH01071: Got error 'Primary script unknown'
[Tue Feb 17 07:58:47.550641 2026] [proxy_fcgi:error] [pid 58551:tid 58570] [client 40.112.95.11:26094] AH01071: Got error 'Primary script unknown'
[Tue Feb 17 07:58:47.815655 2026] [proxy_fcgi:error] [pid 58551:tid 58573] [client 40.112.95.11:26094] AH01071: Got error 'Primary script unknown'
[Tue Feb 17 07:58:48.083798 2026] [proxy_fcgi:error] [pid 58551:tid 58568] [client 40.112.95.11:26094] AH01071: Got error 'Primary script unknown'
[Tue Feb 17 07:58:48.359775 2026] [proxy_fcgi:error] [pid 58551:tid 58560] [client 40.112.95.11:26094] AH01071: Got error 'Primary script unknown'
[Tue Feb 17 07:58:48.627848 2026] [proxy_fcgi:error] [pid 58551:tid 58565] [client 40.112.95.11:26094] AH01071: Got error 'Primary script unknown'
[Tue Feb 17 07:58:48.946695 2026] [proxy_fcgi:error] [pid 58551:tid 58580] [client 40.112.95.11:26094] AH01071: Got error 'Primary script unknown'
[Tue Feb 17 07:58:49.224312 2026] [:error] [pid 58551:tid 58574] [client 40.112.95.11:26094] [client 40.112.95.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x50.php"] [unique_id "aZOvOa1t8eWr-MgFspqZtQAAAA4"]
[Tue Feb 17 07:59:30.191122 2026] [:error] [pid 58558:tid 58646] [client 40.112.95.11:43331] [client 40.112.95.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ee.php"] [unique_id "aZOvYimIxlfUL2nViZznwAAAAJg"]
[Tue Feb 17 07:59:31.940738 2026] [:error] [pid 58558:tid 58628] [client 40.112.95.11:10282] [client 40.112.95.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ee.php"] [unique_id "aZOvYymIxlfUL2nViZznxQAAAIY"]
[Tue Feb 17 07:59:34.291874 2026] [:error] [pid 58558:tid 58646] [client 40.112.95.11:15892] [client 40.112.95.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ee.php"] [unique_id "aZOvZimIxlfUL2nViZznywAAAJg"]
[Tue Feb 17 07:59:36.042260 2026] [:error] [pid 58558:tid 58622] [client 40.112.95.11:2150] [client 40.112.95.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ee.php"] [unique_id "aZOvaCmIxlfUL2nViZznzAAAAIA"]
[Tue Feb 17 07:59:39.569119 2026] [:error] [pid 58558:tid 58632] [client 40.112.95.11:10277] [client 40.112.95.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xz89.php"] [unique_id "aZOvaymIxlfUL2nViZzn0QAAAIo"]
[Tue Feb 17 07:59:42.004826 2026] [:error] [pid 58659:tid 58683] [client 40.112.95.11:12917] [client 40.112.95.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xz89.php"] [unique_id "aZOvbsDX32iTEO4jt28pxQAAANY"]
[Tue Feb 17 07:59:44.619349 2026] [:error] [pid 32790:tid 32812] [client 40.112.95.11:10263] [client 40.112.95.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xz89.php"] [unique_id "aZOvcHs3HJP9ozPHsN4giAAAARI"]
[Tue Feb 17 07:59:48.231739 2026] [proxy_fcgi:error] [pid 58558:tid 58636] [client 40.112.95.11:8606] AH01071: Got error 'Primary script unknown'
[Tue Feb 17 07:59:48.808930 2026] [proxy_fcgi:error] [pid 58558:tid 58639] [client 40.112.95.11:8606] AH01071: Got error 'Primary script unknown'
[Tue Feb 17 07:59:49.081091 2026] [proxy_fcgi:error] [pid 58558:tid 58643] [client 40.112.95.11:8606] AH01071: Got error 'Primary script unknown'
[Tue Feb 17 07:59:49.352155 2026] [proxy_fcgi:error] [pid 58558:tid 58622] [client 40.112.95.11:8606] AH01071: Got error 'Primary script unknown'
[Tue Feb 17 07:59:49.626683 2026] [proxy_fcgi:error] [pid 58558:tid 58645] [client 40.112.95.11:8606] AH01071: Got error 'Primary script unknown'
[Tue Feb 17 07:59:49.898978 2026] [proxy_fcgi:error] [pid 58558:tid 58630] [client 40.112.95.11:8606] AH01071: Got error 'Primary script unknown'
[Tue Feb 17 07:59:50.449910 2026] [proxy_fcgi:error] [pid 58558:tid 58642] [client 40.112.95.11:8606] AH01071: Got error 'Primary script unknown'
[Tue Feb 17 07:59:50.722192 2026] [proxy_fcgi:error] [pid 58558:tid 58646] [client 40.112.95.11:8606] AH01071: Got error 'Primary script unknown'
[Tue Feb 17 07:59:51.011466 2026] [proxy_fcgi:error] [pid 58558:tid 58632] [client 40.112.95.11:8606] AH01071: Got error 'Primary script unknown'
[Tue Feb 17 07:59:51.280125 2026] [:error] [pid 58558:tid 58634] [client 40.112.95.11:8606] [client 40.112.95.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aZOvdymIxlfUL2nViZzn7QAAAIw"]
[Tue Feb 17 07:59:56.597327 2026] [:error] [pid 58551:tid 58564] [client 40.112.95.11:8576] [client 40.112.95.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aZOvfK1t8eWr-MgFspqaEQAAAAQ"]
[Tue Feb 17 07:59:57.636400 2026] [:error] [pid 58659:tid 58681] [client 40.112.95.11:12859] [client 40.112.95.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aZOvfcDX32iTEO4jt28p5QAAANQ"]
[Tue Feb 17 08:00:03.687238 2026] [:error] [pid 58659:tid 58666] [client 40.112.95.11:5234] [client 40.112.95.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aZOvg8DX32iTEO4jt28p-QAAAMU"]
[Tue Feb 17 08:00:07.794129 2026] [:error] [pid 32790:tid 32809] [client 40.112.95.11:49320] [client 40.112.95.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bolt.php"] [unique_id "aZOvh3s3HJP9ozPHsN4g2QAAAQ8"]
[Tue Feb 17 08:00:09.710894 2026] [:error] [pid 58659:tid 58661] [client 40.112.95.11:5196] [client 40.112.95.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bolt.php"] [unique_id "aZOvicDX32iTEO4jt28qBQAAAMA"]
[Tue Feb 17 08:00:11.769872 2026] [:error] [pid 58551:tid 58568] [client 40.112.95.11:15919] [client 40.112.95.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bolt.php"] [unique_id "aZOvi61t8eWr-MgFspqaJQAAAAg"]
[Tue Feb 17 08:00:12.477227 2026] [:error] [pid 58551:tid 58564] [client 40.112.95.11:2131] [client 40.112.95.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bolt.php"] [unique_id "aZOvjK1t8eWr-MgFspqaKAAAAAQ"]
[Tue Feb 17 08:00:18.819503 2026] [:error] [pid 58659:tid 58681] [client 40.112.95.11:15920] [client 40.112.95.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dump.php"] [unique_id "aZOvksDX32iTEO4jt28qFQAAANQ"]
[Tue Feb 17 08:00:20.216238 2026] [:error] [pid 32790:tid 32802] [client 40.112.95.11:22906] [client 40.112.95.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dump.php"] [unique_id "aZOvlHs3HJP9ozPHsN4hFgAAAQg"]
[Tue Feb 17 08:00:23.515052 2026] [:error] [pid 58552:tid 58599] [client 40.112.95.11:17315] [client 40.112.95.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dump.php"] [unique_id "aZOvlzBHVJP2Oz3yR5cW_wAAAEQ"]
[Tue Feb 17 08:00:24.340979 2026] [:error] [pid 58659:tid 58683] [client 40.112.95.11:15880] [client 40.112.95.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dump.php"] [unique_id "aZOvmMDX32iTEO4jt28qGwAAANY"]
[Tue Feb 17 08:01:39.036365 2026] [proxy_fcgi:error] [pid 58659:tid 58680] [client 40.112.95.11:14930] AH01071: Got error 'Primary script unknown'
[Tue Feb 17 08:01:39.291264 2026] [proxy_fcgi:error] [pid 58659:tid 58678] [client 40.112.95.11:14930] AH01071: Got error 'Primary script unknown'
[Tue Feb 17 08:01:39.675915 2026] [proxy_fcgi:error] [pid 58659:tid 58662] [client 40.112.95.11:14930] AH01071: Got error 'Primary script unknown'
[Tue Feb 17 08:01:39.950703 2026] [proxy_fcgi:error] [pid 58659:tid 58670] [client 40.112.95.11:14930] AH01071: Got error 'Primary script unknown'
[Tue Feb 17 08:01:40.212670 2026] [proxy_fcgi:error] [pid 58659:tid 58675] [client 40.112.95.11:14930] AH01071: Got error 'Primary script unknown'
[Tue Feb 17 08:01:40.484384 2026] [proxy_fcgi:error] [pid 58659:tid 58672] [client 40.112.95.11:14930] AH01071: Got error 'Primary script unknown'
[Tue Feb 17 08:01:40.826622 2026] [proxy_fcgi:error] [pid 58659:tid 58669] [client 40.112.95.11:14930] AH01071: Got error 'Primary script unknown'
[Wed Feb 18 05:40:44.821409 2026] [proxy_fcgi:error] [pid 21847:tid 21858] [client 158.158.51.6:16268] AH01071: Got error 'Primary script unknown'
[Wed Feb 18 05:40:45.083103 2026] [proxy_fcgi:error] [pid 21847:tid 21859] [client 158.158.51.6:16268] AH01071: Got error 'Primary script unknown'
[Wed Feb 18 05:40:45.381192 2026] [proxy_fcgi:error] [pid 21847:tid 21861] [client 158.158.51.6:16268] AH01071: Got error 'Primary script unknown'
[Wed Feb 18 05:40:45.638997 2026] [proxy_fcgi:error] [pid 21847:tid 21875] [client 158.158.51.6:16268] AH01071: Got error 'Primary script unknown'
[Wed Feb 18 05:40:45.888833 2026] [proxy_fcgi:error] [pid 21847:tid 21874] [client 158.158.51.6:16268] AH01071: Got error 'Primary script unknown'
[Wed Feb 18 05:40:46.595004 2026] [:error] [pid 21847:tid 21869] [client 158.158.51.6:16268] [client 158.158.51.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aZTgXvy9A5wy4LuXmJ21NAAAAAs"]
[Wed Feb 18 05:40:49.737482 2026] [proxy_fcgi:error] [pid 21961:tid 21981] [client 158.158.51.6:19189] AH01071: Got error 'Primary script unknown'
[Wed Feb 18 05:40:49.980308 2026] [proxy_fcgi:error] [pid 21961:tid 21980] [client 158.158.51.6:19189] AH01071: Got error 'Primary script unknown'
[Wed Feb 18 05:40:50.223800 2026] [proxy_fcgi:error] [pid 21961:tid 21985] [client 158.158.51.6:19189] AH01071: Got error 'Primary script unknown'
[Wed Feb 18 05:40:50.467407 2026] [:error] [pid 21961:tid 21979] [client 158.158.51.6:19189] [client 158.158.51.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file8.php"] [unique_id "aZTgYsUBDt_-H0ms3gVWgwAAANA"]
[Wed Feb 18 05:40:52.073872 2026] [:error] [pid 57014:tid 57020] [client 158.158.51.6:23923] [client 158.158.51.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file8.php"] [unique_id "aZTgZBNZnhS5qKtVIMLz5gAAAQM"]
[Wed Feb 18 05:40:55.195444 2026] [:error] [pid 21848:tid 21912] [client 158.158.51.6:14609] [client 158.158.51.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/404.php"] [unique_id "aZTgZ_bG91VRkVidT5caUQAAAFc"]
[Wed Feb 18 05:40:56.180902 2026] [:error] [pid 21961:tid 21977] [client 158.158.51.6:16266] [client 158.158.51.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/404.php"] [unique_id "aZTgaMUBDt_-H0ms3gVWiwAAAM4"]
[Wed Feb 18 05:40:58.850007 2026] [:error] [pid 21849:tid 21918] [client 158.158.51.6:22753] [client 158.158.51.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/404.php"] [unique_id "aZTgarx9a1XrfTYnuzJxyAAAAII"]
[Wed Feb 18 05:41:04.624646 2026] [:error] [pid 21848:tid 21910] [client 158.158.51.6:22728] [client 158.158.51.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file6.php"] [unique_id "aZTgcPbG91VRkVidT5caWQAAAFU"]
[Wed Feb 18 05:41:07.642297 2026] [:error] [pid 21848:tid 21903] [client 158.158.51.6:16313] [client 158.158.51.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file6.php"] [unique_id "aZTgc_bG91VRkVidT5caXgAAAE4"]
[Wed Feb 18 05:41:19.436502 2026] [:error] [pid 21847:tid 21878] [client 158.158.51.6:17297] [client 158.158.51.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file2.php"] [unique_id "aZTgf_y9A5wy4LuXmJ21RQAAABQ"]
[Wed Feb 18 05:41:27.864169 2026] [:error] [pid 21848:tid 21898] [client 158.158.51.6:16281] [client 158.158.51.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file2.php"] [unique_id "aZTgh_bG91VRkVidT5cadgAAAEk"]
[Wed Feb 18 05:41:33.507155 2026] [:error] [pid 21849:tid 21918] [client 158.158.51.6:16250] [client 158.158.51.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file.php"] [unique_id "aZTgjbx9a1XrfTYnuzJx_gAAAII"]
[Wed Feb 18 06:38:22.733089 2026] [proxy_fcgi:error] [pid 21961:tid 21964] [client 74.234.59.64:10576] AH01071: Got error 'Primary script unknown'
[Wed Feb 18 06:38:23.009722 2026] [proxy_fcgi:error] [pid 21961:tid 21987] [client 74.234.59.64:10576] AH01071: Got error 'Primary script unknown'
[Wed Feb 18 06:38:23.284709 2026] [proxy_fcgi:error] [pid 21961:tid 21972] [client 74.234.59.64:10576] AH01071: Got error 'Primary script unknown'
[Wed Feb 18 06:38:23.560160 2026] [proxy_fcgi:error] [pid 21961:tid 21975] [client 74.234.59.64:10576] AH01071: Got error 'Primary script unknown'
[Wed Feb 18 06:38:23.836840 2026] [proxy_fcgi:error] [pid 21961:tid 21980] [client 74.234.59.64:10576] AH01071: Got error 'Primary script unknown'
[Wed Feb 18 06:38:24.132378 2026] [proxy_fcgi:error] [pid 21961:tid 21981] [client 74.234.59.64:10576] AH01071: Got error 'Primary script unknown'
[Wed Feb 18 06:38:24.409458 2026] [proxy_fcgi:error] [pid 21961:tid 21985] [client 74.234.59.64:10576] AH01071: Got error 'Primary script unknown'
[Wed Feb 18 06:38:24.960000 2026] [proxy_fcgi:error] [pid 21961:tid 21978] [client 74.234.59.64:10576] AH01071: Got error 'Primary script unknown'
[Wed Feb 18 06:38:25.233314 2026] [proxy_fcgi:error] [pid 21961:tid 21965] [client 74.234.59.64:10576] AH01071: Got error 'Primary script unknown'
[Wed Feb 18 06:38:25.505651 2026] [:error] [pid 21961:tid 21968] [client 74.234.59.64:10576] [client 74.234.59.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class.php"] [unique_id "aZTt4cUBDt_-H0ms3gVoDwAAAMU"]
[Wed Feb 18 06:38:26.037436 2026] [:error] [pid 21961:tid 21986] [client 74.234.59.64:9620] [client 74.234.59.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class.php"] [unique_id "aZTt4sUBDt_-H0ms3gVoEAAAANc"]
[Wed Feb 18 06:38:26.539370 2026] [:error] [pid 21849:tid 21923] [client 74.234.59.64:7061] [client 74.234.59.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class.php"] [unique_id "aZTt4rx9a1XrfTYnuzKCpQAAAIc"]
[Wed Feb 18 06:38:27.041952 2026] [:error] [pid 21961:tid 21987] [client 74.234.59.64:7367] [client 74.234.59.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class.php"] [unique_id "aZTt48UBDt_-H0ms3gVoEgAAANg"]
[Wed Feb 18 06:38:27.542612 2026] [:error] [pid 21847:tid 21859] [client 74.234.59.64:16727] [client 74.234.59.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nope.php"] [unique_id "aZTt4_y9A5wy4LuXmJ3IlQAAAAE"]
[Wed Feb 18 06:38:28.082679 2026] [:error] [pid 21847:tid 21861] [client 74.234.59.64:10509] [client 74.234.59.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nope.php"] [unique_id "aZTt5Py9A5wy4LuXmJ3ImQAAAAM"]
[Wed Feb 18 06:38:28.621956 2026] [:error] [pid 21847:tid 21860] [client 74.234.59.64:15376] [client 74.234.59.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nope.php"] [unique_id "aZTt5Py9A5wy4LuXmJ3ImgAAAAI"]
[Wed Feb 18 06:38:29.148895 2026] [:error] [pid 57014:tid 57019] [client 74.234.59.64:11950] [client 74.234.59.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nope.php"] [unique_id "aZTt5RNZnhS5qKtVIMIIcQAAAQI"]
[Wed Feb 18 06:38:29.655820 2026] [:error] [pid 21849:tid 21939] [client 74.234.59.64:7059] [client 74.234.59.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kwm4.php"] [unique_id "aZTt5bx9a1XrfTYnuzKCrQAAAJc"]
[Wed Feb 18 06:38:30.192622 2026] [:error] [pid 21848:tid 21903] [client 74.234.59.64:7793] [client 74.234.59.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kwm4.php"] [unique_id "aZTt5vbG91VRkVidT5ct6wAAAE4"]
[Wed Feb 18 06:38:30.739134 2026] [:error] [pid 21848:tid 21898] [client 74.234.59.64:5281] [client 74.234.59.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kwm4.php"] [unique_id "aZTt5vbG91VRkVidT5ct7gAAAEk"]
[Wed Feb 18 06:38:31.260867 2026] [:error] [pid 21848:tid 21904] [client 74.234.59.64:4257] [client 74.234.59.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kwm4.php"] [unique_id "aZTt5_bG91VRkVidT5ct7wAAAE8"]
[Wed Feb 18 06:38:31.795241 2026] [:error] [pid 57014:tid 57036] [client 74.234.59.64:1667] [client 74.234.59.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-aa.php"] [unique_id "aZTt5xNZnhS5qKtVIMIIdAAAARM"]
[Wed Feb 18 06:38:32.306836 2026] [:error] [pid 57014:tid 57041] [client 74.234.59.64:11959] [client 74.234.59.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-aa.php"] [unique_id "aZTt6BNZnhS5qKtVIMIIdQAAARg"]
[Wed Feb 18 06:38:32.830422 2026] [:error] [pid 21961:tid 21967] [client 74.234.59.64:12685] [client 74.234.59.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-aa.php"] [unique_id "aZTt6MUBDt_-H0ms3gVoFQAAAMQ"]
[Wed Feb 18 06:38:33.372291 2026] [:error] [pid 21961:tid 21978] [client 74.234.59.64:11937] [client 74.234.59.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-aa.php"] [unique_id "aZTt6cUBDt_-H0ms3gVoFwAAAM8"]
[Wed Feb 18 06:38:33.873905 2026] [:error] [pid 21848:tid 21907] [client 74.234.59.64:2045] [client 74.234.59.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/byp.php"] [unique_id "aZTt6fbG91VRkVidT5ct9AAAAFI"]
[Wed Feb 18 06:38:34.387526 2026] [:error] [pid 21848:tid 21912] [client 74.234.59.64:7382] [client 74.234.59.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/byp.php"] [unique_id "aZTt6vbG91VRkVidT5ct9QAAAFc"]
[Wed Feb 18 06:38:34.910750 2026] [:error] [pid 21847:tid 21876] [client 74.234.59.64:15356] [client 74.234.59.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/byp.php"] [unique_id "aZTt6vy9A5wy4LuXmJ3IpgAAABI"]
[Wed Feb 18 06:38:35.423094 2026] [:error] [pid 21847:tid 21869] [client 74.234.59.64:11914] [client 74.234.59.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/byp.php"] [unique_id "aZTt6_y9A5wy4LuXmJ3IqgAAAAs"]
[Wed Feb 18 06:38:35.951460 2026] [:error] [pid 21847:tid 21859] [client 74.234.59.64:7063] [client 74.234.59.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/0.php"] [unique_id "aZTt6_y9A5wy4LuXmJ3IqwAAAAE"]
[Wed Feb 18 06:38:36.455337 2026] [:error] [pid 21847:tid 21873] [client 74.234.59.64:14094] [client 74.234.59.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/0.php"] [unique_id "aZTt7Py9A5wy4LuXmJ3IrgAAAA8"]
[Wed Feb 18 06:38:36.990631 2026] [:error] [pid 5561:tid 5584] [client 74.234.59.64:15394] [client 74.234.59.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/0.php"] [unique_id "aZTt7EoQssCZYQ4NexbtVAAAAVQ"]
[Wed Feb 18 06:38:37.525812 2026] [:error] [pid 21847:tid 21879] [client 74.234.59.64:7683] [client 74.234.59.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/0.php"] [unique_id "aZTt7fy9A5wy4LuXmJ3IsQAAABU"]
[Wed Feb 18 06:38:38.037192 2026] [:error] [pid 21849:tid 21939] [client 74.234.59.64:5265] [client 74.234.59.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/F0x.php"] [unique_id "aZTt7rx9a1XrfTYnuzKCsgAAAJc"]
[Wed Feb 18 06:38:38.537282 2026] [:error] [pid 5561:tid 5568] [client 74.234.59.64:1993] [client 74.234.59.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/F0x.php"] [unique_id "aZTt7koQssCZYQ4NexbtVgAAAUQ"]
[Wed Feb 18 06:38:39.080615 2026] [:error] [pid 21848:tid 21889] [client 74.234.59.64:15314] [client 74.234.59.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/F0x.php"] [unique_id "aZTt7_bG91VRkVidT5ct-wAAAEA"]
[Wed Feb 18 06:38:39.611012 2026] [:error] [pid 21848:tid 21910] [client 74.234.59.64:8428] [client 74.234.59.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/F0x.php"] [unique_id "aZTt7_bG91VRkVidT5ct_QAAAFU"]
[Wed Feb 18 06:38:40.158729 2026] [:error] [pid 5561:tid 5585] [client 74.234.59.64:13478] [client 74.234.59.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-mail.php"] [unique_id "aZTt8EoQssCZYQ4NexbtWQAAAVU"]
[Wed Feb 18 06:38:40.707266 2026] [:error] [pid 21848:tid 21894] [client 74.234.59.64:7048] [client 74.234.59.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-mail.php"] [unique_id "aZTt8PbG91VRkVidT5ct_gAAAEU"]
[Wed Feb 18 06:38:41.225903 2026] [:error] [pid 21849:tid 21922] [client 74.234.59.64:7083] [client 74.234.59.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-mail.php"] [unique_id "aZTt8bx9a1XrfTYnuzKCuwAAAIY"]
[Wed Feb 18 06:38:41.750460 2026] [:error] [pid 21847:tid 21880] [client 74.234.59.64:7092] [client 74.234.59.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-mail.php"] [unique_id "aZTt8fy9A5wy4LuXmJ3IswAAABY"]
[Wed Feb 18 06:38:42.268590 2026] [:error] [pid 5561:tid 5575] [client 74.234.59.64:16887] [client 74.234.59.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fan.php"] [unique_id "aZTt8koQssCZYQ4NexbtXAAAAUs"]
[Wed Feb 18 06:38:42.786057 2026] [:error] [pid 57014:tid 57023] [client 74.234.59.64:16895] [client 74.234.59.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fan.php"] [unique_id "aZTt8hNZnhS5qKtVIMIIgwAAAQY"]
[Wed Feb 18 06:38:43.308610 2026] [:error] [pid 21961:tid 21985] [client 74.234.59.64:7686] [client 74.234.59.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fan.php"] [unique_id "aZTt88UBDt_-H0ms3gVoHAAAANY"]
[Wed Feb 18 06:38:43.828433 2026] [:error] [pid 21848:tid 21909] [client 74.234.59.64:14136] [client 74.234.59.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fan.php"] [unique_id "aZTt8_bG91VRkVidT5cuDAAAAFQ"]
[Wed Feb 18 06:38:44.341132 2026] [:error] [pid 21848:tid 21907] [client 74.234.59.64:7699] [client 74.234.59.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ztv.php"] [unique_id "aZTt9PbG91VRkVidT5cuDwAAAFI"]
[Wed Feb 18 06:38:44.841070 2026] [:error] [pid 5561:tid 5577] [client 74.234.59.64:6136] [client 74.234.59.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ztv.php"] [unique_id "aZTt9EoQssCZYQ4NexbtXQAAAU0"]
[Wed Feb 18 06:38:45.351475 2026] [:error] [pid 21848:tid 21903] [client 74.234.59.64:8386] [client 74.234.59.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ztv.php"] [unique_id "aZTt9fbG91VRkVidT5cuEwAAAE4"]
[Wed Feb 18 06:38:45.873490 2026] [:error] [pid 21961:tid 21966] [client 74.234.59.64:9489] [client 74.234.59.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ztv.php"] [unique_id "aZTt9cUBDt_-H0ms3gVoIwAAAMM"]
[Wed Feb 18 06:38:46.419229 2026] [:error] [pid 5561:tid 5586] [client 74.234.59.64:7718] [client 74.234.59.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bras.php"] [unique_id "aZTt9koQssCZYQ4NexbtYAAAAVY"]
[Wed Feb 18 06:38:46.929106 2026] [:error] [pid 57014:tid 57041] [client 74.234.59.64:16251] [client 74.234.59.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bras.php"] [unique_id "aZTt9hNZnhS5qKtVIMIIhQAAARg"]
[Wed Feb 18 06:38:47.476964 2026] [:error] [pid 57014:tid 57026] [client 74.234.59.64:15313] [client 74.234.59.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bras.php"] [unique_id "aZTt9xNZnhS5qKtVIMIIiAAAAQk"]
[Wed Feb 18 06:38:48.016057 2026] [:error] [pid 21847:tid 21881] [client 74.234.59.64:13485] [client 74.234.59.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bras.php"] [unique_id "aZTt-Py9A5wy4LuXmJ3IuAAAABc"]
[Wed Feb 18 06:38:48.521132 2026] [:error] [pid 5561:tid 5578] [client 74.234.59.64:8417] [client 74.234.59.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wziar.php"] [unique_id "aZTt-EoQssCZYQ4NexbtYwAAAU4"]
[Wed Feb 18 06:38:49.053734 2026] [:error] [pid 21848:tid 21893] [client 74.234.59.64:7342] [client 74.234.59.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wziar.php"] [unique_id "aZTt-fbG91VRkVidT5cuFgAAAEQ"]
[Wed Feb 18 06:38:49.581347 2026] [:error] [pid 21847:tid 21865] [client 74.234.59.64:2033] [client 74.234.59.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wziar.php"] [unique_id "aZTt-fy9A5wy4LuXmJ3IugAAAAc"]
[Wed Feb 18 06:38:50.100752 2026] [:error] [pid 21848:tid 21909] [client 74.234.59.64:15328] [client 74.234.59.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wziar.php"] [unique_id "aZTt-vbG91VRkVidT5cuFwAAAFQ"]
[Wed Feb 18 06:38:50.627924 2026] [:error] [pid 57014:tid 57029] [client 74.234.59.64:3007] [client 74.234.59.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wpup.php"] [unique_id "aZTt-hNZnhS5qKtVIMIIkQAAAQw"]
[Wed Feb 18 06:38:51.174572 2026] [:error] [pid 21847:tid 21875] [client 74.234.59.64:3688] [client 74.234.59.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wpup.php"] [unique_id "aZTt-_y9A5wy4LuXmJ3IvwAAABE"]
[Wed Feb 18 06:38:51.685418 2026] [:error] [pid 21847:tid 21859] [client 74.234.59.64:12641] [client 74.234.59.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wpup.php"] [unique_id "aZTt-_y9A5wy4LuXmJ3IwQAAAAE"]
[Wed Feb 18 06:38:52.193198 2026] [:error] [pid 57014:tid 57041] [client 74.234.59.64:8448] [client 74.234.59.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wpup.php"] [unique_id "aZTt_BNZnhS5qKtVIMIIlgAAARg"]
[Wed Feb 18 06:38:52.731795 2026] [:error] [pid 57014:tid 57019] [client 74.234.59.64:2945] [client 74.234.59.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x50.php"] [unique_id "aZTt_BNZnhS5qKtVIMIIlwAAAQI"]
[Wed Feb 18 06:38:53.242428 2026] [:error] [pid 57014:tid 57027] [client 74.234.59.64:7310] [client 74.234.59.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x50.php"] [unique_id "aZTt_RNZnhS5qKtVIMIImQAAAQo"]
[Wed Feb 18 06:38:53.742793 2026] [:error] [pid 21849:tid 21916] [client 74.234.59.64:15545] [client 74.234.59.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x50.php"] [unique_id "aZTt_bx9a1XrfTYnuzKCwQAAAIA"]
[Wed Feb 18 06:38:54.257516 2026] [:error] [pid 57014:tid 57041] [client 74.234.59.64:3765] [client 74.234.59.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x50.php"] [unique_id "aZTt_hNZnhS5qKtVIMIIoQAAARg"]
[Wed Feb 18 06:38:54.771939 2026] [:error] [pid 21847:tid 21878] [client 74.234.59.64:7700] [client 74.234.59.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ee.php"] [unique_id "aZTt_vy9A5wy4LuXmJ3IywAAABQ"]
[Wed Feb 18 06:38:55.293469 2026] [:error] [pid 21847:tid 21859] [client 74.234.59.64:15894] [client 74.234.59.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ee.php"] [unique_id "aZTt__y9A5wy4LuXmJ3IzQAAAAE"]
[Wed Feb 18 06:38:55.795392 2026] [:error] [pid 21849:tid 21939] [client 74.234.59.64:16668] [client 74.234.59.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ee.php"] [unique_id "aZTt_7x9a1XrfTYnuzKCwwAAAJc"]
[Wed Feb 18 06:38:56.319631 2026] [:error] [pid 21847:tid 21858] [client 74.234.59.64:12444] [client 74.234.59.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ee.php"] [unique_id "aZTuAPy9A5wy4LuXmJ3I0QAAAAA"]
[Wed Feb 18 06:38:56.856590 2026] [:error] [pid 21849:tid 21927] [client 74.234.59.64:17080] [client 74.234.59.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xz89.php"] [unique_id "aZTuALx9a1XrfTYnuzKCyAAAAIs"]
[Wed Feb 18 06:38:57.377702 2026] [:error] [pid 21849:tid 21924] [client 74.234.59.64:12648] [client 74.234.59.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xz89.php"] [unique_id "aZTuAbx9a1XrfTYnuzKCyQAAAIg"]
[Wed Feb 18 06:38:57.884840 2026] [:error] [pid 21847:tid 21878] [client 74.234.59.64:3718] [client 74.234.59.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xz89.php"] [unique_id "aZTuAfy9A5wy4LuXmJ3I3gAAABQ"]
[Wed Feb 18 06:38:58.409234 2026] [:error] [pid 21847:tid 21863] [client 74.234.59.64:8318] [client 74.234.59.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xz89.php"] [unique_id "aZTuAvy9A5wy4LuXmJ3I4AAAAAU"]
[Wed Feb 18 06:38:58.962771 2026] [:error] [pid 57014:tid 57025] [client 74.234.59.64:6205] [client 74.234.59.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws.php7"] [unique_id "aZTuAhNZnhS5qKtVIMIIpgAAAQg"]
[Wed Feb 18 06:38:59.496198 2026] [:error] [pid 21847:tid 21866] [client 74.234.59.64:8751] [client 74.234.59.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws.php7"] [unique_id "aZTuA_y9A5wy4LuXmJ3I5QAAAAg"]
[Wed Feb 18 06:39:00.005736 2026] [:error] [pid 21848:tid 21890] [client 74.234.59.64:16648] [client 74.234.59.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws.php7"] [unique_id "aZTuBPbG91VRkVidT5cuHAAAAEE"]
[Wed Feb 18 06:39:00.516686 2026] [:error] [pid 21848:tid 21895] [client 74.234.59.64:8763] [client 74.234.59.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws.php7"] [unique_id "aZTuBPbG91VRkVidT5cuIAAAAEY"]
[Wed Feb 18 06:39:01.040610 2026] [:error] [pid 21848:tid 21899] [client 74.234.59.64:8650] [client 74.234.59.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/updates.php"] [unique_id "aZTuBfbG91VRkVidT5cuIwAAAEo"]
[Wed Feb 18 06:39:01.573189 2026] [:error] [pid 5561:tid 5579] [client 74.234.59.64:16684] [client 74.234.59.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/updates.php"] [unique_id "aZTuBUoQssCZYQ4NexbtagAAAU8"]
[Wed Feb 18 06:39:02.104101 2026] [:error] [pid 5561:tid 5578] [client 74.234.59.64:8698] [client 74.234.59.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/updates.php"] [unique_id "aZTuBkoQssCZYQ4NexbtawAAAU4"]
[Wed Feb 18 06:39:02.628805 2026] [:error] [pid 21847:tid 21868] [client 74.234.59.64:10847] [client 74.234.59.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/updates.php"] [unique_id "aZTuBvy9A5wy4LuXmJ3I6AAAAAo"]
[Wed Feb 18 06:39:03.145165 2026] [:error] [pid 21961:tid 21984] [client 74.234.59.64:10860] [client 74.234.59.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vxnxvgfw.php"] [unique_id "aZTuB8UBDt_-H0ms3gVoKwAAANU"]
[Wed Feb 18 06:39:03.671930 2026] [:error] [pid 21847:tid 21860] [client 74.234.59.64:15898] [client 74.234.59.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vxnxvgfw.php"] [unique_id "aZTuB_y9A5wy4LuXmJ3I6gAAAAI"]
[Wed Feb 18 06:39:04.185737 2026] [:error] [pid 21848:tid 21901] [client 74.234.59.64:6164] [client 74.234.59.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vxnxvgfw.php"] [unique_id "aZTuCPbG91VRkVidT5cuKAAAAEw"]
[Wed Feb 18 06:39:04.702509 2026] [:error] [pid 21848:tid 21905] [client 74.234.59.64:10867] [client 74.234.59.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vxnxvgfw.php"] [unique_id "aZTuCPbG91VRkVidT5cuKwAAAFA"]
[Wed Feb 18 06:39:05.213417 2026] [:error] [pid 5561:tid 5564] [client 74.234.59.64:17085] [client 74.234.59.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mapi.php"] [unique_id "aZTuCUoQssCZYQ4NexbtdAAAAUA"]
[Wed Feb 18 06:39:05.716868 2026] [:error] [pid 21847:tid 21867] [client 74.234.59.64:1944] [client 74.234.59.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mapi.php"] [unique_id "aZTuCfy9A5wy4LuXmJ3I7wAAAAk"]
[Wed Feb 18 06:39:06.249184 2026] [:error] [pid 21847:tid 21861] [client 74.234.59.64:7254] [client 74.234.59.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mapi.php"] [unique_id "aZTuCvy9A5wy4LuXmJ3I8gAAAAM"]
[Wed Feb 18 06:39:06.785370 2026] [:error] [pid 21849:tid 21930] [client 74.234.59.64:11572] [client 74.234.59.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mapi.php"] [unique_id "aZTuCrx9a1XrfTYnuzKCzgAAAI4"]
[Wed Feb 18 06:39:07.308043 2026] [:error] [pid 21849:tid 21925] [client 74.234.59.64:11535] [client 74.234.59.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f2r4.php"] [unique_id "aZTuC7x9a1XrfTYnuzKCzwAAAIk"]
[Wed Feb 18 06:39:07.837313 2026] [:error] [pid 21849:tid 21940] [client 74.234.59.64:13244] [client 74.234.59.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f2r4.php"] [unique_id "aZTuC7x9a1XrfTYnuzKC0QAAAJg"]
[Wed Feb 18 06:39:08.344050 2026] [:error] [pid 21848:tid 21907] [client 74.234.59.64:14777] [client 74.234.59.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f2r4.php"] [unique_id "aZTuDPbG91VRkVidT5cuLQAAAFI"]
[Wed Feb 18 06:39:08.849245 2026] [:error] [pid 21847:tid 21872] [client 74.234.59.64:11744] [client 74.234.59.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f2r4.php"] [unique_id "aZTuDPy9A5wy4LuXmJ3I-QAAAA4"]
[Wed Feb 18 06:39:09.368971 2026] [:error] [pid 21961:tid 21981] [client 74.234.59.64:5051] [client 74.234.59.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/item.php"] [unique_id "aZTuDcUBDt_-H0ms3gVoNAAAANI"]
[Wed Feb 18 06:39:09.913252 2026] [:error] [pid 21847:tid 21871] [client 74.234.59.64:2226] [client 74.234.59.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/item.php"] [unique_id "aZTuDfy9A5wy4LuXmJ3I_QAAAA0"]
[Wed Feb 18 06:39:10.445087 2026] [:error] [pid 21849:tid 21938] [client 74.234.59.64:4884] [client 74.234.59.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/item.php"] [unique_id "aZTuDrx9a1XrfTYnuzKC1gAAAJY"]
[Wed Feb 18 06:39:10.953784 2026] [:error] [pid 21849:tid 21932] [client 74.234.59.64:16041] [client 74.234.59.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/item.php"] [unique_id "aZTuDrx9a1XrfTYnuzKC1wAAAJA"]
[Wed Feb 18 06:39:11.487228 2026] [:error] [pid 5561:tid 5574] [client 74.234.59.64:11543] [client 74.234.59.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/assets/v3.php"] [unique_id "aZTuD0oQssCZYQ4NexbtewAAAUo"]
[Wed Feb 18 06:39:12.039987 2026] [:error] [pid 21961:tid 21977] [client 74.234.59.64:4878] [client 74.234.59.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/assets/v3.php"] [unique_id "aZTuEMUBDt_-H0ms3gVoOQAAAM4"]
[Wed Feb 18 06:39:12.543657 2026] [:error] [pid 5561:tid 5573] [client 74.234.59.64:5011] [client 74.234.59.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/assets/v3.php"] [unique_id "aZTuEEoQssCZYQ4NexbtfQAAAUk"]
[Wed Feb 18 06:39:13.059126 2026] [:error] [pid 5561:tid 5577] [client 74.234.59.64:14408] [client 74.234.59.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/assets/v3.php"] [unique_id "aZTuEUoQssCZYQ4NexbtfwAAAU0"]
[Wed Feb 18 06:39:13.607274 2026] [:error] [pid 21961:tid 21987] [client 74.234.59.64:13885] [client 74.234.59.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xse25.php"] [unique_id "aZTuEcUBDt_-H0ms3gVoPgAAANg"]
[Wed Feb 18 06:39:14.145882 2026] [:error] [pid 57014:tid 57039] [client 74.234.59.64:15218] [client 74.234.59.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xse25.php"] [unique_id "aZTuEhNZnhS5qKtVIMIItAAAARY"]
[Wed Feb 18 06:39:14.691125 2026] [:error] [pid 5561:tid 5576] [client 74.234.59.64:15181] [client 74.234.59.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xse25.php"] [unique_id "aZTuEkoQssCZYQ4NexbtgQAAAUw"]
[Wed Feb 18 06:39:15.284829 2026] [:error] [pid 5561:tid 5588] [client 74.234.59.64:13153] [client 74.234.59.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xse25.php"] [unique_id "aZTuE0oQssCZYQ4NexbthAAAAVg"]
[Wed Feb 18 06:39:15.823560 2026] [:error] [pid 21847:tid 21880] [client 74.234.59.64:13173] [client 74.234.59.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sf9.php"] [unique_id "aZTuE_y9A5wy4LuXmJ3JBAAAABY"]
[Wed Feb 18 06:39:16.351653 2026] [:error] [pid 57014:tid 57035] [client 74.234.59.64:10674] [client 74.234.59.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sf9.php"] [unique_id "aZTuFBNZnhS5qKtVIMIIuAAAARI"]
[Wed Feb 18 06:39:16.907042 2026] [:error] [pid 57014:tid 57019] [client 74.234.59.64:10719] [client 74.234.59.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sf9.php"] [unique_id "aZTuFBNZnhS5qKtVIMIIuQAAAQI"]
[Wed Feb 18 06:39:17.481292 2026] [:error] [pid 57014:tid 57041] [client 74.234.59.64:13378] [client 74.234.59.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sf9.php"] [unique_id "aZTuFRNZnhS5qKtVIMIIuwAAARg"]
[Wed Feb 18 06:39:18.020588 2026] [:error] [pid 57014:tid 57030] [client 74.234.59.64:9704] [client 74.234.59.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/5b9ac.php"] [unique_id "aZTuFhNZnhS5qKtVIMIIvQAAAQ0"]
[Wed Feb 18 06:39:18.568596 2026] [:error] [pid 21848:tid 21903] [client 74.234.59.64:10090] [client 74.234.59.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/5b9ac.php"] [unique_id "aZTuFvbG91VRkVidT5cuMQAAAE4"]
[Wed Feb 18 06:39:19.095055 2026] [:error] [pid 57014:tid 57031] [client 74.234.59.64:15710] [client 74.234.59.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/5b9ac.php"] [unique_id "aZTuFxNZnhS5qKtVIMIIvgAAAQ4"]
[Wed Feb 18 06:39:19.604998 2026] [:error] [pid 21848:tid 21899] [client 74.234.59.64:13413] [client 74.234.59.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/5b9ac.php"] [unique_id "aZTuF_bG91VRkVidT5cuNwAAAEo"]
[Wed Feb 18 06:39:20.116496 2026] [:error] [pid 21849:tid 21938] [client 74.234.59.64:9712] [client 74.234.59.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aZTuGLx9a1XrfTYnuzKC4gAAAJY"]
[Wed Feb 18 06:39:20.627870 2026] [:error] [pid 21961:tid 21965] [client 74.234.59.64:16949] [client 74.234.59.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aZTuGMUBDt_-H0ms3gVoSgAAAMI"]
[Wed Feb 18 06:39:21.154993 2026] [:error] [pid 21961:tid 21984] [client 74.234.59.64:10077] [client 74.234.59.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aZTuGcUBDt_-H0ms3gVoTAAAANU"]
[Wed Feb 18 06:39:21.689528 2026] [:error] [pid 21849:tid 21925] [client 74.234.59.64:17245] [client 74.234.59.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aZTuGbx9a1XrfTYnuzKC6AAAAIk"]
[Wed Feb 18 06:39:22.193899 2026] [:error] [pid 21849:tid 21929] [client 74.234.59.64:17240] [client 74.234.59.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bolt.php"] [unique_id "aZTuGrx9a1XrfTYnuzKC6gAAAI0"]
[Wed Feb 18 06:39:22.720443 2026] [:error] [pid 5561:tid 5582] [client 74.234.59.64:16923] [client 74.234.59.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bolt.php"] [unique_id "aZTuGkoQssCZYQ4NexbtjQAAAVI"]
[Wed Feb 18 06:39:23.244776 2026] [:error] [pid 21847:tid 21863] [client 74.234.59.64:4136] [client 74.234.59.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bolt.php"] [unique_id "aZTuG_y9A5wy4LuXmJ3JEgAAAAU"]
[Wed Feb 18 06:39:23.773564 2026] [:error] [pid 21961:tid 21976] [client 74.234.59.64:1092] [client 74.234.59.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bolt.php"] [unique_id "aZTuG8UBDt_-H0ms3gVoTwAAAM0"]
[Wed Feb 18 06:39:24.283645 2026] [:error] [pid 21961:tid 21986] [client 74.234.59.64:4587] [client 74.234.59.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dump.php"] [unique_id "aZTuHMUBDt_-H0ms3gVoUAAAANc"]
[Wed Feb 18 06:39:24.826382 2026] [:error] [pid 57014:tid 57030] [client 74.234.59.64:12051] [client 74.234.59.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dump.php"] [unique_id "aZTuHBNZnhS5qKtVIMIIyAAAAQ0"]
[Wed Feb 18 06:39:25.361738 2026] [proxy_fcgi:error] [pid 21961:tid 21968] [client 74.234.59.64:10067] AH01071: Got error 'Primary script unknown'
[Wed Feb 18 06:39:25.629298 2026] [proxy_fcgi:error] [pid 21961:tid 21984] [client 74.234.59.64:10067] AH01071: Got error 'Primary script unknown'
[Wed Feb 18 06:39:25.895950 2026] [proxy_fcgi:error] [pid 21961:tid 21978] [client 74.234.59.64:10067] AH01071: Got error 'Primary script unknown'
[Wed Feb 18 06:39:26.162179 2026] [proxy_fcgi:error] [pid 21961:tid 21971] [client 74.234.59.64:10067] AH01071: Got error 'Primary script unknown'
[Wed Feb 18 06:39:26.427696 2026] [proxy_fcgi:error] [pid 21961:tid 21966] [client 74.234.59.64:10067] AH01071: Got error 'Primary script unknown'
[Wed Feb 18 06:39:26.692897 2026] [proxy_fcgi:error] [pid 21961:tid 21977] [client 74.234.59.64:10067] AH01071: Got error 'Primary script unknown'
[Wed Feb 18 06:39:26.959346 2026] [proxy_fcgi:error] [pid 21961:tid 21975] [client 74.234.59.64:10067] AH01071: Got error 'Primary script unknown'
[Wed Feb 18 06:39:28.530310 2026] [proxy_fcgi:error] [pid 21961:tid 21976] [client 74.234.59.64:10067] AH01071: Got error 'Primary script unknown'
[Wed Feb 18 06:39:28.796732 2026] [proxy_fcgi:error] [pid 21961:tid 21987] [client 74.234.59.64:10067] AH01071: Got error 'Primary script unknown'
[Wed Feb 18 08:50:25.117515 2026] [:error] [pid 57014:tid 57025] [client 45.67.97.54:65383] [client 45.67.97.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/"] [unique_id "aZUM0RNZnhS5qKtVIMI_fAAAAQg"]
[Wed Feb 18 19:27:40.290613 2026] [:error] [pid 21847:tid 21865] [client 104.28.153.3:37797] [client 104.28.153.3] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/style.php"] [unique_id "aZWiLPy9A5wy4LuXmJ0O1wAAAAc"]
[Thu Feb 19 16:47:10.257228 2026] [:error] [pid 5580:tid 5590] [client 107.189.30.143:16348] [client 107.189.30.143] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 107.189.30.143, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-login.php"] [unique_id "aZbODoV24kZpmf6nh3DXwwAAAcc"], referer: http://www.google.com.hk
[Thu Feb 19 16:47:10.267683 2026] [proxy_fcgi:error] [pid 5580:tid 5590] [client 107.189.30.143:16348] AH01071: Got error 'Primary script unknown', referer: http://www.google.com.hk
[Fri Feb 20 03:06:44.429351 2026] [:error] [pid 5580:tid 5603] [client 193.37.32.85:32457] [client 193.37.32.85] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/"] [unique_id "aZdfRIV24kZpmf6nh3BMaAAAAdM"]
[Fri Feb 20 03:06:44.789586 2026] [:error] [pid 5581:tid 5632] [client 193.37.32.55:49729] [client 193.37.32.55] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/"] [unique_id "aZdfRHIfW0xlXmrVd3oozwAAAhU"]
[Fri Feb 20 05:40:53.610992 2026] [proxy_fcgi:error] [pid 64510:tid 64523] [client 52.169.119.118:9370] AH01071: Got error 'Primary script unknown'
[Fri Feb 20 05:40:53.877009 2026] [proxy_fcgi:error] [pid 64510:tid 64527] [client 52.169.119.118:9370] AH01071: Got error 'Primary script unknown'
[Fri Feb 20 05:40:54.140057 2026] [proxy_fcgi:error] [pid 64510:tid 64522] [client 52.169.119.118:9370] AH01071: Got error 'Primary script unknown'
[Fri Feb 20 05:40:54.665559 2026] [proxy_fcgi:error] [pid 64510:tid 64525] [client 52.169.119.118:9370] AH01071: Got error 'Primary script unknown'
[Fri Feb 20 20:32:49.107023 2026] [:error] [pid 54461:tid 54500] [client 182.8.129.89:32222] [client 182.8.129.89] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/"] [unique_id "aZhUcS372fkN0w39NDPCMwAAAEg"]
[Sat Feb 21 07:15:51.783343 2026] [:error] [pid 22558:tid 22577] [client 20.210.88.198:6182] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aZjrJyrVaIb2gXsVbDpWNAAAARE"]
[Sat Feb 21 07:15:55.363449 2026] [:error] [pid 40758:tid 40825] [client 20.210.88.198:6812] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aZjrK0BAHxvBM3i9iKHCDQAAAIM"]
[Sat Feb 21 07:16:01.178674 2026] [:error] [pid 22558:tid 22576] [client 20.210.88.198:21155] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aZjrMSrVaIb2gXsVbDpWfAAAARA"]
[Sat Feb 21 07:16:02.862327 2026] [:error] [pid 40871:tid 40883] [client 20.210.88.198:6829] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aZjrMjqDikjdiOZeJyXhUQAAAMo"]
[Sun Feb 22 09:51:57.370311 2026] [proxy_fcgi:error] [pid 9587:tid 9610] [client 20.199.109.98:19349] AH01071: Got error 'Primary script unknown'
[Sun Feb 22 09:51:57.609782 2026] [proxy_fcgi:error] [pid 9587:tid 9600] [client 20.199.109.98:19349] AH01071: Got error 'Primary script unknown'
[Sun Feb 22 09:51:57.853745 2026] [proxy_fcgi:error] [pid 9587:tid 9613] [client 20.199.109.98:19349] AH01071: Got error 'Primary script unknown'
[Sun Feb 22 09:51:58.092976 2026] [proxy_fcgi:error] [pid 9587:tid 9607] [client 20.199.109.98:19349] AH01071: Got error 'Primary script unknown'
[Sun Feb 22 09:51:58.334070 2026] [proxy_fcgi:error] [pid 9587:tid 9611] [client 20.199.109.98:19349] AH01071: Got error 'Primary script unknown'
[Sun Feb 22 09:51:58.572778 2026] [proxy_fcgi:error] [pid 9587:tid 9603] [client 20.199.109.98:19349] AH01071: Got error 'Primary script unknown'
[Sun Feb 22 09:51:58.812142 2026] [proxy_fcgi:error] [pid 9587:tid 9604] [client 20.199.109.98:19349] AH01071: Got error 'Primary script unknown'
[Sun Feb 22 09:51:59.052213 2026] [proxy_fcgi:error] [pid 9587:tid 9597] [client 20.199.109.98:19349] AH01071: Got error 'Primary script unknown'
[Sun Feb 22 09:51:59.727785 2026] [proxy_fcgi:error] [pid 9587:tid 9618] [client 20.199.109.98:19349] AH01071: Got error 'Primary script unknown'
[Sun Feb 22 09:51:59.967642 2026] [proxy_fcgi:error] [pid 9587:tid 9617] [client 20.199.109.98:19349] AH01071: Got error 'Primary script unknown'
[Sun Feb 22 09:52:00.203746 2026] [:error] [pid 9587:tid 9615] [client 20.199.109.98:19349] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/0x.php"] [unique_id "aZphQOhqt7NXCp-NupFK2wAAABM"]
[Sun Feb 22 09:52:00.676158 2026] [:error] [pid 12501:tid 12517] [client 20.199.109.98:29539] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/0x.php"] [unique_id "aZphQJicztrbvinWGXMwVgAAAU4"]
[Sun Feb 22 09:52:01.148259 2026] [:error] [pid 12501:tid 12522] [client 20.199.109.98:33972] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/0x.php"] [unique_id "aZphQZicztrbvinWGXMwVwAAAVM"]
[Sun Feb 22 09:52:01.620992 2026] [:error] [pid 9587:tid 9620] [client 20.199.109.98:30007] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/0x.php"] [unique_id "aZphQehqt7NXCp-NupFK3QAAABg"]
[Sun Feb 22 09:52:02.105198 2026] [:error] [pid 9587:tid 9598] [client 20.199.109.98:16855] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/baixy.php"] [unique_id "aZphQuhqt7NXCp-NupFK3wAAAAI"]
[Sun Feb 22 09:52:02.577683 2026] [:error] [pid 12501:tid 12526] [client 20.199.109.98:41997] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/baixy.php"] [unique_id "aZphQpicztrbvinWGXMwXQAAAVc"]
[Sun Feb 22 09:52:03.049107 2026] [:error] [pid 9587:tid 9606] [client 20.199.109.98:27120] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/baixy.php"] [unique_id "aZphQ-hqt7NXCp-NupFK4QAAAAo"]
[Sun Feb 22 09:52:03.543116 2026] [:error] [pid 9695:tid 9699] [client 20.199.109.98:2624] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/baixy.php"] [unique_id "aZphQ1pPqolBNLmJ4eqrpQAAAMI"]
[Sun Feb 22 09:52:05.025953 2026] [:error] [pid 9587:tid 9613] [client 20.199.109.98:33947] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zu.php"] [unique_id "aZphRehqt7NXCp-NupFK5AAAABE"]
[Sun Feb 22 09:52:05.534546 2026] [:error] [pid 9588:tid 9641] [client 20.199.109.98:10023] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zu.php"] [unique_id "aZphRWjNBsxseiTcElnAjgAAAFE"]
[Sun Feb 22 09:52:06.006598 2026] [:error] [pid 9589:tid 9675] [client 20.199.109.98:20625] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zu.php"] [unique_id "aZphRtr-1mylR_FoXQWOgwAAAJg"]
[Sun Feb 22 09:52:06.479260 2026] [:error] [pid 9589:tid 9663] [client 20.199.109.98:29551] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zu.php"] [unique_id "aZphRtr-1mylR_FoXQWOhQAAAIw"]
[Sun Feb 22 09:52:07.038757 2026] [:error] [pid 9589:tid 9662] [client 20.199.109.98:20453] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kbfr.php"] [unique_id "aZphR9r-1mylR_FoXQWOhwAAAIs"]
[Sun Feb 22 09:52:07.509213 2026] [:error] [pid 9589:tid 9670] [client 20.199.109.98:12954] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f35.php"] [unique_id "aZphR9r-1mylR_FoXQWOiAAAAJM"]
[Sun Feb 22 09:52:07.981398 2026] [:error] [pid 9588:tid 9627] [client 20.199.109.98:12935] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f35.php"] [unique_id "aZphR2jNBsxseiTcElnAlQAAAEM"]
[Sun Feb 22 09:52:08.506434 2026] [:error] [pid 9589:tid 9666] [client 20.199.109.98:29978] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f35.php"] [unique_id "aZphSNr-1mylR_FoXQWOiwAAAI8"]
[Sun Feb 22 09:52:08.986190 2026] [:error] [pid 9695:tid 9698] [client 20.199.109.98:10020] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f35.php"] [unique_id "aZphSFpPqolBNLmJ4eqrpgAAAME"]
[Sun Feb 22 09:52:09.461751 2026] [:error] [pid 10537:tid 10551] [client 20.199.109.98:24665] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bootstrap.php"] [unique_id "aZphSbgCiSojLQQBckhf2gAAAQw"]
[Sun Feb 22 09:52:09.952600 2026] [:error] [pid 9589:tid 9656] [client 20.199.109.98:21656] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bootstrap.php"] [unique_id "aZphSdr-1mylR_FoXQWOjgAAAIU"]
[Sun Feb 22 09:52:10.464636 2026] [:error] [pid 9588:tid 9628] [client 20.199.109.98:27105] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bootstrap.php"] [unique_id "aZphSmjNBsxseiTcElnAmwAAAEQ"]
[Sun Feb 22 09:52:11.059546 2026] [:error] [pid 10537:tid 10562] [client 20.199.109.98:24699] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bootstrap.php"] [unique_id "aZphS7gCiSojLQQBckhf3wAAARc"]
[Sun Feb 22 09:52:11.536013 2026] [:error] [pid 9695:tid 9701] [client 20.199.109.98:29523] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/to.php"] [unique_id "aZphS1pPqolBNLmJ4eqrpwAAAMQ"]
[Sun Feb 22 09:52:12.051870 2026] [:error] [pid 10537:tid 10545] [client 20.199.109.98:21464] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/to.php"] [unique_id "aZphTLgCiSojLQQBckhf4wAAAQY"]
[Sun Feb 22 09:52:12.684675 2026] [:error] [pid 10537:tid 10549] [client 20.199.109.98:31222] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/to.php"] [unique_id "aZphTLgCiSojLQQBckhf5QAAAQo"]
[Sun Feb 22 09:52:13.318834 2026] [:error] [pid 10537:tid 10561] [client 20.199.109.98:18341] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/selesai.php"] [unique_id "aZphTbgCiSojLQQBckhf5gAAARY"]
[Sun Feb 22 09:52:13.797495 2026] [:error] [pid 10537:tid 10556] [client 20.199.109.98:21444] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/selesai.php"] [unique_id "aZphTbgCiSojLQQBckhf6AAAARE"]
[Sun Feb 22 09:52:14.327090 2026] [:error] [pid 12501:tid 12519] [client 20.199.109.98:28148] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/maraz.php"] [unique_id "aZphTpicztrbvinWGXMwcgAAAVA"]
[Sun Feb 22 09:52:14.921987 2026] [:error] [pid 9589:tid 9662] [client 20.199.109.98:20430] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/maraz.php"] [unique_id "aZphTtr-1mylR_FoXQWOkwAAAIs"]
[Sun Feb 22 09:52:15.423423 2026] [:error] [pid 10537:tid 10552] [client 20.199.109.98:31193] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/maraz.php"] [unique_id "aZphT7gCiSojLQQBckhf6wAAAQ0"]
[Sun Feb 22 09:52:15.938068 2026] [:error] [pid 10537:tid 10542] [client 20.199.109.98:18365] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/maraz.php"] [unique_id "aZphT7gCiSojLQQBckhf7AAAAQM"]
[Sun Feb 22 09:52:16.488260 2026] [:error] [pid 9588:tid 9635] [client 20.199.109.98:10518] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws66.php"] [unique_id "aZphUGjNBsxseiTcElnAoQAAAEs"]
[Sun Feb 22 09:52:17.410701 2026] [:error] [pid 12501:tid 12518] [client 20.199.109.98:10027] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bzjdlofz.php"] [unique_id "aZphUZicztrbvinWGXMwcwAAAU8"]
[Sun Feb 22 09:52:17.917414 2026] [:error] [pid 9588:tid 9632] [client 20.199.109.98:18306] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bzjdlofz.php"] [unique_id "aZphUWjNBsxseiTcElnApQAAAEg"]
[Sun Feb 22 09:52:18.420431 2026] [:error] [pid 9589:tid 9671] [client 20.199.109.98:27076] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sbhu.php"] [unique_id "aZphUtr-1mylR_FoXQWOoAAAAJQ"]
[Sun Feb 22 09:52:18.983828 2026] [:error] [pid 9589:tid 9662] [client 20.199.109.98:23383] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sbhu.php"] [unique_id "aZphUtr-1mylR_FoXQWOoQAAAIs"]
[Sun Feb 22 09:52:19.534620 2026] [:error] [pid 9589:tid 9664] [client 20.199.109.98:29536] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sbhu.php"] [unique_id "aZphU9r-1mylR_FoXQWOpAAAAI0"]
[Sun Feb 22 09:52:20.018056 2026] [:error] [pid 12501:tid 12503] [client 20.199.109.98:10047] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sbhu.php"] [unique_id "aZphVJicztrbvinWGXMwdAAAAUA"]
[Sun Feb 22 09:52:20.528796 2026] [:error] [pid 9588:tid 9645] [client 20.199.109.98:2991] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-blogs.php"] [unique_id "aZphVGjNBsxseiTcElnAqQAAAFU"]
[Sun Feb 22 09:52:21.007930 2026] [:error] [pid 12501:tid 12521] [client 20.199.109.98:14720] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-blogs.php"] [unique_id "aZphVZicztrbvinWGXMwdwAAAVI"]
[Sun Feb 22 09:52:21.483720 2026] [:error] [pid 9588:tid 9646] [client 20.199.109.98:21449] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-blogs.php"] [unique_id "aZphVWjNBsxseiTcElnArAAAAFY"]
[Sun Feb 22 09:52:21.961480 2026] [:error] [pid 10537:tid 10548] [client 20.199.109.98:21497] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-blogs.php"] [unique_id "aZphVbgCiSojLQQBckhf-AAAAQk"]
[Sun Feb 22 09:52:22.442524 2026] [:error] [pid 9588:tid 9637] [client 20.199.109.98:12966] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fetch.php"] [unique_id "aZphVmjNBsxseiTcElnArwAAAE0"]
[Sun Feb 22 09:52:22.913618 2026] [:error] [pid 9589:tid 9658] [client 20.199.109.98:21440] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fetch.php"] [unique_id "aZphVtr-1mylR_FoXQWOqAAAAIc"]
[Sun Feb 22 09:52:23.389451 2026] [:error] [pid 10537:tid 10550] [client 20.199.109.98:3000] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fetch.php"] [unique_id "aZphV7gCiSojLQQBckhf_QAAAQs"]
[Sun Feb 22 09:52:23.861465 2026] [:error] [pid 9587:tid 9605] [client 20.199.109.98:3062] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fetch.php"] [unique_id "aZphV-hqt7NXCp-NupFK-wAAAAk"]
[Sun Feb 22 09:52:24.341117 2026] [:error] [pid 9588:tid 9632] [client 20.199.109.98:20634] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bolt.php"] [unique_id "aZphWGjNBsxseiTcElnAsQAAAEg"]
[Sun Feb 22 09:52:24.821406 2026] [:error] [pid 9587:tid 9606] [client 20.199.109.98:12936] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bolt.php"] [unique_id "aZphWOhqt7NXCp-NupFK_wAAAAo"]
[Sun Feb 22 09:52:25.291700 2026] [:error] [pid 10537:tid 10539] [client 20.199.109.98:15488] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bolt.php"] [unique_id "aZphWbgCiSojLQQBckhgAwAAAQA"]
[Sun Feb 22 09:52:25.763566 2026] [:error] [pid 12501:tid 12510] [client 20.199.109.98:3050] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bolt.php"] [unique_id "aZphWZicztrbvinWGXMwggAAAUc"]
[Sun Feb 22 09:52:26.236460 2026] [:error] [pid 9587:tid 9613] [client 20.199.109.98:24328] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tfm.php"] [unique_id "aZphWuhqt7NXCp-NupFLAwAAABE"]
[Sun Feb 22 09:52:26.712181 2026] [:error] [pid 12501:tid 12507] [client 20.199.109.98:18064] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tfm.php"] [unique_id "aZphWpicztrbvinWGXMwhwAAAUQ"]
[Sun Feb 22 09:52:27.183227 2026] [:error] [pid 9695:tid 9703] [client 20.199.109.98:14724] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tfm.php"] [unique_id "aZphW1pPqolBNLmJ4eqrrwAAAMY"]
[Sun Feb 22 09:52:27.658521 2026] [:error] [pid 9587:tid 9611] [client 20.199.109.98:18340] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tfm.php"] [unique_id "aZphW-hqt7NXCp-NupFLBQAAAA8"]
[Sun Feb 22 09:52:28.130120 2026] [:error] [pid 12501:tid 12508] [client 20.199.109.98:14760] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ak.php"] [unique_id "aZphXJicztrbvinWGXMwjAAAAUU"]
[Sun Feb 22 09:52:28.602647 2026] [:error] [pid 9695:tid 9699] [client 20.199.109.98:24700] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ak.php"] [unique_id "aZphXFpPqolBNLmJ4eqruAAAAMI"]
[Sun Feb 22 09:52:29.074244 2026] [:error] [pid 9587:tid 9600] [client 20.199.109.98:20653] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ak.php"] [unique_id "aZphXehqt7NXCp-NupFLDQAAAAQ"]
[Sun Feb 22 09:52:29.546444 2026] [:error] [pid 12501:tid 12509] [client 20.199.109.98:15537] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ak.php"] [unique_id "aZphXZicztrbvinWGXMwkAAAAUY"]
[Sun Feb 22 09:52:30.020360 2026] [:error] [pid 9589:tid 9668] [client 20.199.109.98:28137] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-style.php"] [unique_id "aZphXtr-1mylR_FoXQWOtwAAAJE"]
[Sun Feb 22 09:52:30.500604 2026] [:error] [pid 9587:tid 9612] [client 20.199.109.98:3026] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-style.php"] [unique_id "aZphXuhqt7NXCp-NupFLDwAAABA"]
[Sun Feb 22 09:52:30.987027 2026] [:error] [pid 9587:tid 9601] [client 20.199.109.98:24350] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-style.php"] [unique_id "aZphXuhqt7NXCp-NupFLEAAAAAU"]
[Sun Feb 22 09:52:31.459605 2026] [:error] [pid 9589:tid 9660] [client 20.199.109.98:21180] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-style.php"] [unique_id "aZphX9r-1mylR_FoXQWOuQAAAIk"]
[Sun Feb 22 09:52:31.931943 2026] [:error] [pid 9587:tid 9603] [client 20.199.109.98:34194] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/error_log.php"] [unique_id "aZphX-hqt7NXCp-NupFLEwAAAAc"]
[Sun Feb 22 09:52:32.418574 2026] [:error] [pid 9695:tid 9709] [client 20.199.109.98:18660] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/error_log.php"] [unique_id "aZphYFpPqolBNLmJ4eqrwgAAAMw"]
[Sun Feb 22 09:52:32.897492 2026] [:error] [pid 9588:tid 9631] [client 20.199.109.98:27040] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/error_log.php"] [unique_id "aZphYGjNBsxseiTcElnAwwAAAEc"]
[Sun Feb 22 09:52:33.371497 2026] [:error] [pid 12501:tid 12517] [client 20.199.109.98:12955] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/error_log.php"] [unique_id "aZphYZicztrbvinWGXMwlwAAAU4"]
[Sun Feb 22 09:52:33.845618 2026] [:error] [pid 9589:tid 9671] [client 20.199.109.98:2988] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/0x0x.php"] [unique_id "aZphYdr-1mylR_FoXQWOvQAAAJQ"]
[Sun Feb 22 09:52:34.326239 2026] [:error] [pid 12501:tid 12504] [client 20.199.109.98:18361] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/0x0x.php"] [unique_id "aZphYpicztrbvinWGXMwmAAAAUE"]
[Sun Feb 22 09:52:34.800456 2026] [:error] [pid 9695:tid 9701] [client 20.199.109.98:3042] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/0x0x.php"] [unique_id "aZphYlpPqolBNLmJ4eqrxQAAAMQ"]
[Sun Feb 22 09:52:35.272238 2026] [:error] [pid 9587:tid 9602] [client 20.199.109.98:18333] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/0x0x.php"] [unique_id "aZphY-hqt7NXCp-NupFLGgAAAAY"]
[Sun Feb 22 09:52:35.743668 2026] [:error] [pid 9589:tid 9673] [client 20.199.109.98:19151] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/0byte.php"] [unique_id "aZphY9r-1mylR_FoXQWOwAAAAJY"]
[Sun Feb 22 09:52:36.218415 2026] [:error] [pid 9589:tid 9664] [client 20.199.109.98:3016] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/0byte.php"] [unique_id "aZphZNr-1mylR_FoXQWOwQAAAI0"]
[Sun Feb 22 09:52:36.690851 2026] [:error] [pid 12501:tid 12521] [client 20.199.109.98:15503] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/0byte.php"] [unique_id "aZphZJicztrbvinWGXMwnQAAAVI"]
[Sun Feb 22 09:52:37.160220 2026] [:error] [pid 9588:tid 9628] [client 20.199.109.98:15495] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/0byte.php"] [unique_id "aZphZWjNBsxseiTcElnAzwAAAEQ"]
[Sun Feb 22 09:52:37.633805 2026] [:error] [pid 9589:tid 9658] [client 20.199.109.98:12983] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a4.php"] [unique_id "aZphZdr-1mylR_FoXQWOxQAAAIc"]
[Sun Feb 22 09:52:38.126091 2026] [:error] [pid 9589:tid 9665] [client 20.199.109.98:3041] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a4.php"] [unique_id "aZphZtr-1mylR_FoXQWOxwAAAI4"]
[Sun Feb 22 09:52:38.603588 2026] [:error] [pid 9588:tid 9627] [client 20.199.109.98:8353] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a4.php"] [unique_id "aZphZmjNBsxseiTcElnA0QAAAEM"]
[Sun Feb 22 09:52:40.091114 2026] [:error] [pid 9587:tid 9607] [client 20.199.109.98:34003] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a4.php"] [unique_id "aZphaOhqt7NXCp-NupFLIwAAAAs"]
[Sun Feb 22 09:52:40.563089 2026] [:error] [pid 9588:tid 9643] [client 20.199.109.98:15528] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/logs1.php"] [unique_id "aZphaGjNBsxseiTcElnA3QAAAFM"]
[Sun Feb 22 09:52:41.034955 2026] [:error] [pid 9589:tid 9651] [client 20.199.109.98:34005] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/logs1.php"] [unique_id "aZphadr-1mylR_FoXQWOzAAAAIA"]
[Sun Feb 22 09:52:41.508731 2026] [:error] [pid 9589:tid 9667] [client 20.199.109.98:33996] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/logs1.php"] [unique_id "aZphadr-1mylR_FoXQWO1QAAAJA"]
[Sun Feb 22 09:52:41.980793 2026] [:error] [pid 10537:tid 10539] [client 20.199.109.98:8337] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/logs1.php"] [unique_id "aZphabgCiSojLQQBckhgHwAAAQA"]
[Sun Feb 22 09:52:42.451045 2026] [:error] [pid 9588:tid 9641] [client 20.199.109.98:2989] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/35.php"] [unique_id "aZphamjNBsxseiTcElnA5AAAAFE"]
[Sun Feb 22 09:52:42.931396 2026] [:error] [pid 9695:tid 9700] [client 20.199.109.98:8367] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/35.php"] [unique_id "aZphalpPqolBNLmJ4eqr1AAAAMM"]
[Sun Feb 22 09:52:43.408493 2026] [:error] [pid 9589:tid 9662] [client 20.199.109.98:19180] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/35.php"] [unique_id "aZpha9r-1mylR_FoXQWO3wAAAIs"]
[Sun Feb 22 09:52:44.932300 2026] [:error] [pid 9695:tid 9705] [client 20.199.109.98:27026] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/35.php"] [unique_id "aZphbFpPqolBNLmJ4eqr2AAAAMg"]
[Sun Feb 22 09:52:45.462230 2026] [:error] [pid 9588:tid 9636] [client 20.199.109.98:8383] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lanka.php"] [unique_id "aZphbWjNBsxseiTcElnA7AAAAEw"]
[Sun Feb 22 09:52:46.007323 2026] [:error] [pid 9589:tid 9670] [client 20.199.109.98:26259] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lanka.php"] [unique_id "aZphbtr-1mylR_FoXQWO8AAAAJM"]
[Sun Feb 22 09:52:46.518800 2026] [:error] [pid 12501:tid 12521] [client 20.199.109.98:12782] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lanka.php"] [unique_id "aZphbpicztrbvinWGXMw2QAAAVI"]
[Sun Feb 22 09:52:46.995962 2026] [:error] [pid 9695:tid 9708] [client 20.199.109.98:8509] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lanka.php"] [unique_id "aZphblpPqolBNLmJ4eqr3gAAAMs"]
[Sun Feb 22 09:52:47.467359 2026] [:error] [pid 9695:tid 9717] [client 20.199.109.98:26246] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/knmt.php"] [unique_id "aZphb1pPqolBNLmJ4eqr4wAAANQ"]
[Sun Feb 22 09:52:47.942388 2026] [:error] [pid 9589:tid 9654] [client 20.199.109.98:25273] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/knmt.php"] [unique_id "aZphb9r-1mylR_FoXQWO9AAAAIM"]
[Sun Feb 22 09:52:48.414911 2026] [:error] [pid 9589:tid 9672] [client 20.199.109.98:25814] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/knmt.php"] [unique_id "aZphcNr-1mylR_FoXQWO9QAAAJU"]
[Sun Feb 22 09:52:48.889452 2026] [:error] [pid 12501:tid 12511] [client 20.199.109.98:8486] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/knmt.php"] [unique_id "aZphcJicztrbvinWGXMw4AAAAUg"]
[Sun Feb 22 09:52:49.360801 2026] [:error] [pid 9589:tid 9661] [client 20.199.109.98:24981] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ioxi.php"] [unique_id "aZphcdr-1mylR_FoXQWO9gAAAIo"]
[Sun Feb 22 09:52:49.837727 2026] [:error] [pid 9695:tid 9702] [client 20.199.109.98:33410] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ioxi.php"] [unique_id "aZphcVpPqolBNLmJ4eqr5wAAAMU"]
[Sun Feb 22 09:52:50.309614 2026] [:error] [pid 9695:tid 9710] [client 20.199.109.98:25268] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ioxi.php"] [unique_id "aZphclpPqolBNLmJ4eqr6QAAAM0"]
[Sun Feb 22 09:52:50.784810 2026] [:error] [pid 9588:tid 9647] [client 20.199.109.98:25265] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ioxi.php"] [unique_id "aZphcmjNBsxseiTcElnA8wAAAFc"]
[Sun Feb 22 09:52:51.258307 2026] [:error] [pid 10537:tid 10561] [client 20.199.109.98:25330] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lkui.php"] [unique_id "aZphc7gCiSojLQQBckhgPQAAARY"]
[Sun Feb 22 09:52:51.730395 2026] [:error] [pid 9587:tid 9618] [client 20.199.109.98:25313] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lkui.php"] [unique_id "aZphc-hqt7NXCp-NupFLRgAAABY"]
[Sun Feb 22 09:52:52.209030 2026] [:error] [pid 9587:tid 9611] [client 20.199.109.98:44844] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lkui.php"] [unique_id "aZphdOhqt7NXCp-NupFLSAAAAA8"]
[Sun Feb 22 09:52:52.685444 2026] [:error] [pid 9588:tid 9641] [client 20.199.109.98:26296] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lkui.php"] [unique_id "aZphdGjNBsxseiTcElnA9wAAAFE"]
[Sun Feb 22 09:52:53.160263 2026] [:error] [pid 9695:tid 9715] [client 20.199.109.98:10761] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/grsiuk.php"] [unique_id "aZphdVpPqolBNLmJ4eqr7gAAANI"]
[Sun Feb 22 09:52:53.632233 2026] [:error] [pid 9587:tid 9604] [client 20.199.109.98:26528] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/grsiuk.php"] [unique_id "aZphdehqt7NXCp-NupFLSwAAAAg"]
[Sun Feb 22 09:52:54.115176 2026] [:error] [pid 9587:tid 9599] [client 20.199.109.98:10807] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/grsiuk.php"] [unique_id "aZphduhqt7NXCp-NupFLTQAAAAM"]
[Sun Feb 22 09:52:54.588374 2026] [:error] [pid 9587:tid 9620] [client 20.199.109.98:25011] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/grsiuk.php"] [unique_id "aZphduhqt7NXCp-NupFLTwAAABg"]
[Sun Feb 22 09:52:55.060791 2026] [:error] [pid 10537:tid 10549] [client 20.199.109.98:12793] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/colors/blue/about.php"] [unique_id "aZphd7gCiSojLQQBckhgQgAAAQo"]
[Sun Feb 22 09:52:55.532251 2026] [:error] [pid 9587:tid 9619] [client 20.199.109.98:34046] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/colors/blue/about.php"] [unique_id "aZphd-hqt7NXCp-NupFLUQAAABc"]
[Sun Feb 22 09:52:56.003670 2026] [:error] [pid 12501:tid 12517] [client 20.199.109.98:47504] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/colors/blue/about.php"] [unique_id "aZpheJicztrbvinWGXMw8AAAAU4"]
[Sun Feb 22 09:52:56.483682 2026] [:error] [pid 9587:tid 9617] [client 20.199.109.98:11086] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/colors/blue/about.php"] [unique_id "aZpheOhqt7NXCp-NupFLVgAAABU"]
[Sun Feb 22 09:52:56.954288 2026] [:error] [pid 12501:tid 12524] [client 20.199.109.98:13184] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Geforce.php"] [unique_id "aZpheJicztrbvinWGXMw8wAAAVU"]
[Sun Feb 22 09:52:57.427411 2026] [:error] [pid 9695:tid 9697] [client 20.199.109.98:2814] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Geforce.php"] [unique_id "aZpheVpPqolBNLmJ4eqr-QAAAMA"]
[Sun Feb 22 09:52:57.899617 2026] [:error] [pid 9587:tid 9618] [client 20.199.109.98:24964] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Geforce.php"] [unique_id "aZpheehqt7NXCp-NupFLWQAAABY"]
[Sun Feb 22 09:52:58.371322 2026] [:error] [pid 10537:tid 10561] [client 20.199.109.98:11074] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Geforce.php"] [unique_id "aZphergCiSojLQQBckhgSgAAARY"]
[Sun Feb 22 09:52:58.850791 2026] [:error] [pid 9588:tid 9643] [client 20.199.109.98:26242] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/easy.php"] [unique_id "aZphemjNBsxseiTcElnBAQAAAFM"]
[Sun Feb 22 09:52:59.332805 2026] [proxy_fcgi:error] [pid 12501:tid 12526] [client 20.199.109.98:33436] AH01071: Got error 'Primary script unknown'
[Sun Feb 22 09:52:59.573676 2026] [proxy_fcgi:error] [pid 12501:tid 12510] [client 20.199.109.98:33436] AH01071: Got error 'Primary script unknown'
[Sun Feb 22 09:52:59.813583 2026] [proxy_fcgi:error] [pid 12501:tid 12516] [client 20.199.109.98:33436] AH01071: Got error 'Primary script unknown'
[Sun Feb 22 09:53:00.053914 2026] [proxy_fcgi:error] [pid 12501:tid 12521] [client 20.199.109.98:33436] AH01071: Got error 'Primary script unknown'
[Sun Feb 22 09:53:00.294442 2026] [proxy_fcgi:error] [pid 12501:tid 12518] [client 20.199.109.98:33436] AH01071: Got error 'Primary script unknown'
[Sun Feb 22 09:53:00.537048 2026] [proxy_fcgi:error] [pid 12501:tid 12511] [client 20.199.109.98:33436] AH01071: Got error 'Primary script unknown'
[Sun Feb 22 09:53:00.777840 2026] [proxy_fcgi:error] [pid 12501:tid 12508] [client 20.199.109.98:33436] AH01071: Got error 'Primary script unknown'
[Sun Feb 22 09:53:01.018656 2026] [proxy_fcgi:error] [pid 12501:tid 12527] [client 20.199.109.98:33436] AH01071: Got error 'Primary script unknown'
[Sun Feb 22 09:53:01.260271 2026] [proxy_fcgi:error] [pid 12501:tid 12520] [client 20.199.109.98:33436] AH01071: Got error 'Primary script unknown'
[Sun Feb 22 09:53:01.502836 2026] [proxy_fcgi:error] [pid 12501:tid 12512] [client 20.199.109.98:33436] AH01071: Got error 'Primary script unknown'
[Sun Feb 22 09:53:01.742980 2026] [proxy_fcgi:error] [pid 12501:tid 12526] [client 20.199.109.98:33436] AH01071: Got error 'Primary script unknown'
[Sun Feb 22 09:53:01.979169 2026] [:error] [pid 12501:tid 12505] [client 20.199.109.98:33436] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ccu.php"] [unique_id "aZphfZicztrbvinWGXMxCgAAAUI"]
[Sun Feb 22 09:53:02.450929 2026] [:error] [pid 10537:tid 10547] [client 20.199.109.98:39147] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ccu.php"] [unique_id "aZphfrgCiSojLQQBckhgTgAAAQg"]
[Sun Feb 22 09:53:02.929982 2026] [:error] [pid 9589:tid 9667] [client 20.199.109.98:41374] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ccu.php"] [unique_id "aZphftr-1mylR_FoXQWPCwAAAJA"]
[Sun Feb 22 09:53:03.415367 2026] [:error] [pid 9589:tid 9673] [client 20.199.109.98:30059] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ccu.php"] [unique_id "aZphf9r-1mylR_FoXQWPDAAAAJY"]
[Sun Feb 22 09:53:03.887128 2026] [:error] [pid 12501:tid 12510] [client 20.199.109.98:16114] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/155.php"] [unique_id "aZphf5icztrbvinWGXMxDgAAAUc"]
[Sun Feb 22 09:53:04.357622 2026] [:error] [pid 9589:tid 9660] [client 20.199.109.98:14316] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/155.php"] [unique_id "aZphgNr-1mylR_FoXQWPDwAAAIk"]
[Sun Feb 22 09:53:04.828622 2026] [:error] [pid 12501:tid 12506] [client 20.199.109.98:43459] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/155.php"] [unique_id "aZphgJicztrbvinWGXMxEwAAAUM"]
[Sun Feb 22 09:53:05.302917 2026] [:error] [pid 12501:tid 12508] [client 20.199.109.98:29468] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/155.php"] [unique_id "aZphgZicztrbvinWGXMxFgAAAUU"]
[Sun Feb 22 09:53:05.773714 2026] [:error] [pid 10537:tid 10541] [client 20.199.109.98:14285] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xsox.php"] [unique_id "aZphgbgCiSojLQQBckhgVwAAAQI"]
[Sun Feb 22 09:53:06.243875 2026] [:error] [pid 9589:tid 9671] [client 20.199.109.98:33657] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xsox.php"] [unique_id "aZphgtr-1mylR_FoXQWPEgAAAJQ"]
[Sun Feb 22 09:53:06.715303 2026] [:error] [pid 12501:tid 12522] [client 20.199.109.98:47541] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xsox.php"] [unique_id "aZphgpicztrbvinWGXMxHwAAAVM"]
[Sun Feb 22 09:53:07.185900 2026] [:error] [pid 12501:tid 12521] [client 20.199.109.98:22513] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xsox.php"] [unique_id "aZphg5icztrbvinWGXMxIgAAAVI"]
[Sun Feb 22 09:53:07.658758 2026] [:error] [pid 12501:tid 12506] [client 20.199.109.98:13270] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wen.php"] [unique_id "aZphg5icztrbvinWGXMxJQAAAUM"]
[Sun Feb 22 09:53:08.138785 2026] [:error] [pid 9588:tid 9645] [client 20.199.109.98:14315] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wen.php"] [unique_id "aZphhGjNBsxseiTcElnBDgAAAFU"]
[Sun Feb 22 09:53:09.647078 2026] [:error] [pid 12501:tid 12513] [client 20.199.109.98:30078] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wen.php"] [unique_id "aZphhZicztrbvinWGXMxLgAAAUo"]
[Sun Feb 22 09:53:11.128264 2026] [:error] [pid 9589:tid 9668] [client 20.199.109.98:14279] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wen.php"] [unique_id "aZphh9r-1mylR_FoXQWPGgAAAJE"]
[Sun Feb 22 09:53:11.608726 2026] [:error] [pid 9589:tid 9673] [client 20.199.109.98:2122] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zoo.php"] [unique_id "aZphh9r-1mylR_FoXQWPHgAAAJY"]
[Sun Feb 22 09:53:12.086205 2026] [:error] [pid 12501:tid 12521] [client 20.199.109.98:25040] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zoo.php"] [unique_id "aZphiJicztrbvinWGXMxMwAAAVI"]
[Sun Feb 22 09:53:12.555543 2026] [:error] [pid 10537:tid 10553] [client 20.199.109.98:25073] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zoo.php"] [unique_id "aZphiLgCiSojLQQBckhgawAAAQ4"]
[Sun Feb 22 09:53:13.035539 2026] [:error] [pid 10537:tid 10548] [client 20.199.109.98:22862] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zoo.php"] [unique_id "aZphibgCiSojLQQBckhgcAAAAQk"]
[Sun Feb 22 09:53:13.511965 2026] [:error] [pid 12501:tid 12527] [client 20.199.109.98:10292] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zxekqlxb.php"] [unique_id "aZphiZicztrbvinWGXMxPAAAAVg"]
[Sun Feb 22 09:53:13.982963 2026] [:error] [pid 12501:tid 12526] [client 20.199.109.98:11080] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zxekqlxb.php"] [unique_id "aZphiZicztrbvinWGXMxQQAAAVc"]
[Sun Feb 22 09:53:14.466332 2026] [:error] [pid 10537:tid 10545] [client 20.199.109.98:16072] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zxekqlxb.php"] [unique_id "aZphirgCiSojLQQBckhgdwAAAQY"]
[Sun Feb 22 09:53:14.937015 2026] [:error] [pid 9587:tid 9605] [client 20.199.109.98:33604] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zxekqlxb.php"] [unique_id "aZphiuhqt7NXCp-NupFLagAAAAk"]
[Sun Feb 22 09:53:15.408070 2026] [:error] [pid 9589:tid 9655] [client 20.199.109.98:2166] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-scr1pts.php"] [unique_id "aZphi9r-1mylR_FoXQWPJwAAAIQ"]
[Sun Feb 22 09:53:15.896593 2026] [:error] [pid 9695:tid 9710] [client 20.199.109.98:33660] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-scr1pts.php"] [unique_id "aZphi1pPqolBNLmJ4eqsEwAAAM0"]
[Sun Feb 22 09:53:16.368293 2026] [:error] [pid 10537:tid 10563] [client 20.199.109.98:10105] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-scr1pts.php"] [unique_id "aZphjLgCiSojLQQBckhgfQAAARg"]
[Sun Feb 22 09:53:16.841305 2026] [:error] [pid 9588:tid 9641] [client 20.199.109.98:22514] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-scr1pts.php"] [unique_id "aZphjGjNBsxseiTcElnBEwAAAFE"]
[Sun Feb 22 09:53:17.383768 2026] [:error] [pid 9589:tid 9667] [client 20.199.109.98:2165] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/shlo.php"] [unique_id "aZphjdr-1mylR_FoXQWPKwAAAJA"]
[Sun Feb 22 09:53:17.872316 2026] [:error] [pid 10537:tid 10558] [client 20.199.109.98:14002] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/shlo.php"] [unique_id "aZphjbgCiSojLQQBckhggAAAARM"]
[Sun Feb 22 09:53:18.355712 2026] [:error] [pid 10537:tid 10560] [client 20.199.109.98:13253] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Jcrop.php"] [unique_id "aZphjrgCiSojLQQBckhgggAAARU"]
[Sun Feb 22 09:53:18.827117 2026] [:error] [pid 9589:tid 9673] [client 20.199.109.98:13289] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Jcrop.php"] [unique_id "aZphjtr-1mylR_FoXQWPLQAAAJY"]
[Sun Feb 22 09:53:19.298292 2026] [:error] [pid 10537:tid 10550] [client 20.199.109.98:10052] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Jcrop.php"] [unique_id "aZphj7gCiSojLQQBckhghQAAAQs"]
[Sun Feb 22 09:53:19.771657 2026] [:error] [pid 12501:tid 12514] [client 20.199.109.98:12694] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Jcrop.php"] [unique_id "aZphj5icztrbvinWGXMxUwAAAUs"]
[Sun Feb 22 09:53:21.249399 2026] [:error] [pid 10537:tid 10541] [client 20.199.109.98:10071] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-act.php"] [unique_id "aZphkbgCiSojLQQBckhgigAAAQI"]
[Sun Feb 22 09:53:21.723018 2026] [:error] [pid 10537:tid 10563] [client 20.199.109.98:2141] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-act.php"] [unique_id "aZphkbgCiSojLQQBckhgjQAAARg"]
[Sun Feb 22 09:53:22.197298 2026] [:error] [pid 9588:tid 9642] [client 20.199.109.98:61180] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-act.php"] [unique_id "aZphkmjNBsxseiTcElnBHgAAAFI"]
[Sun Feb 22 09:53:22.670322 2026] [:error] [pid 10537:tid 10549] [client 20.199.109.98:12678] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-act.php"] [unique_id "aZphkrgCiSojLQQBckhglQAAAQo"]
[Sun Feb 22 09:53:23.141467 2026] [:error] [pid 12501:tid 12521] [client 20.199.109.98:2161] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-link10.php"] [unique_id "aZphk5icztrbvinWGXMxVQAAAVI"]
[Sun Feb 22 09:53:24.659880 2026] [:error] [pid 9588:tid 9627] [client 20.199.109.98:2138] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-link10.php"] [unique_id "aZphlGjNBsxseiTcElnBJQAAAEM"]
[Sun Feb 22 09:53:26.173932 2026] [:error] [pid 9695:tid 9702] [client 20.199.109.98:35985] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-link10.php"] [unique_id "aZphllpPqolBNLmJ4eqsIAAAAMU"]
[Sun Feb 22 09:53:26.733576 2026] [:error] [pid 10537:tid 10557] [client 20.199.109.98:19601] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-link10.php"] [unique_id "aZphlrgCiSojLQQBckhgmwAAARI"]
[Sun Feb 22 09:53:27.203817 2026] [:error] [pid 12501:tid 12504] [client 20.199.109.98:22856] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ff1.php"] [unique_id "aZphl5icztrbvinWGXMxYQAAAUE"]
[Sun Feb 22 09:53:27.674890 2026] [:error] [pid 10537:tid 10539] [client 20.199.109.98:38674] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ff1.php"] [unique_id "aZphl7gCiSojLQQBckhgoAAAAQA"]
[Sun Feb 22 09:53:28.316227 2026] [:error] [pid 12501:tid 12517] [client 20.199.109.98:38683] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ff1.php"] [unique_id "aZphmJicztrbvinWGXMxZQAAAU4"]
[Sun Feb 22 09:53:28.814322 2026] [:error] [pid 9588:tid 9636] [client 20.199.109.98:13970] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ff1.php"] [unique_id "aZphmGjNBsxseiTcElnBLAAAAEw"]
[Sun Feb 22 09:53:29.286090 2026] [:error] [pid 9695:tid 9704] [client 20.199.109.98:23907] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lib.php"] [unique_id "aZphmVpPqolBNLmJ4eqsJwAAAMc"]
[Sun Feb 22 09:53:29.777273 2026] [:error] [pid 9588:tid 9639] [client 20.199.109.98:47532] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lib.php"] [unique_id "aZphmWjNBsxseiTcElnBLQAAAE8"]
[Sun Feb 22 09:53:30.258196 2026] [:error] [pid 9588:tid 9648] [client 20.199.109.98:23904] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lib.php"] [unique_id "aZphmmjNBsxseiTcElnBLgAAAFg"]
[Sun Feb 22 09:53:30.733694 2026] [:error] [pid 9695:tid 9717] [client 20.199.109.98:17547] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lib.php"] [unique_id "aZphmlpPqolBNLmJ4eqsLgAAANQ"]
[Sun Feb 22 09:53:31.206997 2026] [:error] [pid 9587:tid 9598] [client 20.199.109.98:10590] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Ov-Simple1.php"] [unique_id "aZphm-hqt7NXCp-NupFLlwAAAAI"]
[Sun Feb 22 09:53:31.679171 2026] [:error] [pid 9588:tid 9638] [client 20.199.109.98:35962] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Ov-Simple1.php"] [unique_id "aZphm2jNBsxseiTcElnBMAAAAE4"]
[Sun Feb 22 09:53:32.151733 2026] [:error] [pid 12501:tid 12526] [client 20.199.109.98:33530] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Ov-Simple1.php"] [unique_id "aZphnJicztrbvinWGXMxdAAAAVc"]
[Sun Feb 22 09:53:32.626260 2026] [:error] [pid 12501:tid 12505] [client 20.199.109.98:17040] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Ov-Simple1.php"] [unique_id "aZphnJicztrbvinWGXMxeAAAAUI"]
[Sun Feb 22 09:53:33.097429 2026] [:error] [pid 9589:tid 9668] [client 20.199.109.98:12689] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ccs.php"] [unique_id "aZphndr-1mylR_FoXQWPRgAAAJE"]
[Sun Feb 22 09:53:33.598425 2026] [:error] [pid 9587:tid 9618] [client 20.199.109.98:33517] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ccs.php"] [unique_id "aZphnehqt7NXCp-NupFLmwAAABY"]
[Sun Feb 22 09:53:34.081297 2026] [:error] [pid 12501:tid 12506] [client 20.199.109.98:26613] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ccs.php"] [unique_id "aZphnpicztrbvinWGXMxfAAAAUM"]
[Sun Feb 22 09:53:34.551431 2026] [:error] [pid 10537:tid 10561] [client 20.199.109.98:2739] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ccs.php"] [unique_id "aZphnrgCiSojLQQBckhgsAAAARY"]
[Sun Feb 22 09:53:35.022378 2026] [:error] [pid 9587:tid 9605] [client 20.199.109.98:17537] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mini.php"] [unique_id "aZphn-hqt7NXCp-NupFLngAAAAk"]
[Sun Feb 22 09:53:35.519475 2026] [:error] [pid 12501:tid 12522] [client 20.199.109.98:10587] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mini.php"] [unique_id "aZphn5icztrbvinWGXMxgAAAAVM"]
[Sun Feb 22 09:53:36.049335 2026] [:error] [pid 9695:tid 9707] [client 20.199.109.98:23359] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mini.php"] [unique_id "aZphoFpPqolBNLmJ4eqsPwAAAMo"]
[Sun Feb 22 09:53:36.645242 2026] [:error] [pid 12501:tid 12503] [client 20.199.109.98:57490] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mini.php"] [unique_id "aZphoJicztrbvinWGXMxggAAAUA"]
[Sun Feb 22 09:53:37.120039 2026] [:error] [pid 9587:tid 9608] [client 20.199.109.98:35974] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xr.php"] [unique_id "aZphoehqt7NXCp-NupFLpQAAAAw"]
[Sun Feb 22 09:53:37.591532 2026] [:error] [pid 12501:tid 12509] [client 20.199.109.98:17573] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xr.php"] [unique_id "aZphoZicztrbvinWGXMxhgAAAUY"]
[Sun Feb 22 09:53:38.096257 2026] [:error] [pid 9695:tid 9721] [client 20.199.109.98:2706] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xr.php"] [unique_id "aZpholpPqolBNLmJ4eqsSAAAANg"]
[Sun Feb 22 09:53:38.567830 2026] [:error] [pid 9695:tid 9713] [client 20.199.109.98:30827] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xr.php"] [unique_id "aZpholpPqolBNLmJ4eqsSgAAANA"]
[Sun Feb 22 09:53:39.043307 2026] [:error] [pid 9588:tid 9631] [client 20.199.109.98:10561] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rtx.php"] [unique_id "aZpho2jNBsxseiTcElnBPQAAAEc"]
[Sun Feb 22 09:53:39.518701 2026] [:error] [pid 9589:tid 9664] [client 20.199.109.98:30787] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rtx.php"] [unique_id "aZpho9r-1mylR_FoXQWPVwAAAI0"]
[Sun Feb 22 09:53:40.012756 2026] [:error] [pid 9589:tid 9671] [client 20.199.109.98:38662] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rtx.php"] [unique_id "aZphpNr-1mylR_FoXQWPWgAAAJQ"]
[Sun Feb 22 09:53:40.497608 2026] [:error] [pid 9587:tid 9618] [client 20.199.109.98:23340] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rtx.php"] [unique_id "aZphpOhqt7NXCp-NupFLrQAAABY"]
[Sun Feb 22 09:53:40.975613 2026] [:error] [pid 12501:tid 12507] [client 20.199.109.98:28448] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/666.php"] [unique_id "aZphpJicztrbvinWGXMxiwAAAUQ"]
[Sun Feb 22 09:53:41.503988 2026] [:error] [pid 12501:tid 12525] [client 20.199.109.98:28430] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/666.php"] [unique_id "aZphpZicztrbvinWGXMxjQAAAVY"]
[Sun Feb 22 09:53:42.040433 2026] [:error] [pid 9588:tid 9639] [client 20.199.109.98:28658] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/666.php"] [unique_id "aZphpmjNBsxseiTcElnBPwAAAE8"]
[Sun Feb 22 09:53:42.521545 2026] [:error] [pid 9695:tid 9718] [client 20.199.109.98:11052] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/666.php"] [unique_id "aZphplpPqolBNLmJ4eqsWAAAANU"]
[Sun Feb 22 09:53:43.052487 2026] [:error] [pid 9589:tid 9654] [client 20.199.109.98:31681] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/h2a2ck.php"] [unique_id "aZphp9r-1mylR_FoXQWPYQAAAIM"]
[Sun Feb 22 09:53:43.527388 2026] [:error] [pid 9588:tid 9638] [client 20.199.109.98:20371] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/h2a2ck.php"] [unique_id "aZphp2jNBsxseiTcElnBQgAAAE4"]
[Sun Feb 22 09:53:44.000569 2026] [:error] [pid 9589:tid 9661] [client 20.199.109.98:9751] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/h2a2ck.php"] [unique_id "aZphp9r-1mylR_FoXQWPZAAAAIo"]
[Sun Feb 22 09:53:44.485218 2026] [:error] [pid 9695:tid 9717] [client 20.199.109.98:38709] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/h2a2ck.php"] [unique_id "aZphqFpPqolBNLmJ4eqsXgAAANQ"]
[Sun Feb 22 09:53:44.956506 2026] [:error] [pid 9695:tid 9712] [client 20.199.109.98:57495] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cytyr.php"] [unique_id "aZphqFpPqolBNLmJ4eqsYQAAAM8"]
[Sun Feb 22 09:53:45.430970 2026] [:error] [pid 9695:tid 9697] [client 20.199.109.98:9023] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cytyr.php"] [unique_id "aZphqVpPqolBNLmJ4eqsYgAAAMA"]
[Sun Feb 22 09:53:45.904805 2026] [:error] [pid 9587:tid 9611] [client 20.199.109.98:12498] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cytyr.php"] [unique_id "aZphqehqt7NXCp-NupFLvAAAAA8"]
[Sun Feb 22 09:53:46.379891 2026] [:error] [pid 9695:tid 9711] [client 20.199.109.98:11017] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cytyr.php"] [unique_id "aZphqlpPqolBNLmJ4eqsZQAAAM4"]
[Sun Feb 22 09:53:46.852858 2026] [:error] [pid 9587:tid 9610] [client 20.199.109.98:12481] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/h02ugyh.php"] [unique_id "aZphquhqt7NXCp-NupFLwQAAAA4"]
[Sun Feb 22 09:53:47.325498 2026] [:error] [pid 12501:tid 12524] [client 20.199.109.98:28440] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/h02ugyh.php"] [unique_id "aZphq5icztrbvinWGXMxmAAAAVU"]
[Sun Feb 22 09:53:47.799694 2026] [:error] [pid 9588:tid 9632] [client 20.199.109.98:9247] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/h02ugyh.php"] [unique_id "aZphq2jNBsxseiTcElnBTAAAAEg"]
[Sun Feb 22 09:53:48.299920 2026] [:error] [pid 9588:tid 9624] [client 20.199.109.98:16314] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/h02ugyh.php"] [unique_id "aZphrGjNBsxseiTcElnBTwAAAEA"]
[Sun Feb 22 09:53:48.823685 2026] [:error] [pid 12501:tid 12523] [client 20.199.109.98:9756] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/66.php"] [unique_id "aZphrJicztrbvinWGXMxngAAAVQ"]
[Sun Feb 22 09:53:49.343185 2026] [:error] [pid 9589:tid 9655] [client 20.199.109.98:19909] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/66.php"] [unique_id "aZphrdr-1mylR_FoXQWPdQAAAIQ"]
[Sun Feb 22 09:53:49.871875 2026] [:error] [pid 12501:tid 12515] [client 20.199.109.98:28595] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/galer.php"] [unique_id "aZphrZicztrbvinWGXMxowAAAUw"]
[Sun Feb 22 09:53:50.351952 2026] [:error] [pid 9589:tid 9672] [client 20.199.109.98:40571] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/galer.php"] [unique_id "aZphrtr-1mylR_FoXQWPegAAAJU"]
[Sun Feb 22 09:53:50.957700 2026] [:error] [pid 12501:tid 12510] [client 20.199.109.98:28632] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/galer.php"] [unique_id "aZphrpicztrbvinWGXMxrQAAAUc"]
[Sun Feb 22 09:53:51.439667 2026] [:error] [pid 10537:tid 10563] [client 20.199.109.98:28532] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/galer.php"] [unique_id "aZphr7gCiSojLQQBckhgyQAAARg"]
[Sun Feb 22 09:53:51.930727 2026] [:error] [pid 9695:tid 9720] [client 20.199.109.98:8972] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fs.php"] [unique_id "aZphr1pPqolBNLmJ4eqscAAAANc"]
[Sun Feb 22 09:53:52.407344 2026] [:error] [pid 9587:tid 9603] [client 20.199.109.98:28427] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fs.php"] [unique_id "aZphsOhqt7NXCp-NupFLygAAAAc"]
[Sun Feb 22 09:53:52.879813 2026] [:error] [pid 9588:tid 9626] [client 20.199.109.98:28593] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fs.php"] [unique_id "aZphsGjNBsxseiTcElnBUgAAAEI"]
[Sun Feb 22 09:53:53.352639 2026] [:error] [pid 9588:tid 9638] [client 20.199.109.98:12212] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fs.php"] [unique_id "aZphsWjNBsxseiTcElnBVAAAAE4"]
[Sun Feb 22 09:53:53.831807 2026] [:error] [pid 12501:tid 12524] [client 20.199.109.98:9218] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/browse.php"] [unique_id "aZphsZicztrbvinWGXMxtgAAAVU"]
[Sun Feb 22 09:53:54.318523 2026] [:error] [pid 9587:tid 9620] [client 20.199.109.98:28554] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/browse.php"] [unique_id "aZphsuhqt7NXCp-NupFLzQAAABg"]
[Sun Feb 22 09:53:54.791508 2026] [:error] [pid 10537:tid 10543] [client 20.199.109.98:2350] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aaa.php"] [unique_id "aZphsrgCiSojLQQBckhg1QAAAQQ"]
[Sun Feb 22 09:53:55.292839 2026] [:error] [pid 9589:tid 9667] [client 20.199.109.98:12518] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/global.php"] [unique_id "aZphs9r-1mylR_FoXQWPhAAAAJA"]
[Sun Feb 22 09:53:55.775960 2026] [:error] [pid 9589:tid 9651] [client 20.199.109.98:28524] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/global.php"] [unique_id "aZphs9r-1mylR_FoXQWPiAAAAIA"]
[Sun Feb 22 09:53:56.328285 2026] [:error] [pid 9589:tid 9669] [client 20.199.109.98:28422] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/global.php"] [unique_id "aZphtNr-1mylR_FoXQWPjAAAAJI"]
[Sun Feb 22 09:53:56.803834 2026] [:error] [pid 9589:tid 9664] [client 20.199.109.98:27388] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/global.php"] [unique_id "aZphtNr-1mylR_FoXQWPjwAAAI0"]
[Sun Feb 22 09:53:57.303513 2026] [:error] [pid 9587:tid 9608] [client 20.199.109.98:12506] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/R57.php"] [unique_id "aZphtehqt7NXCp-NupFLzgAAAAw"]
[Sun Feb 22 09:53:57.784655 2026] [:error] [pid 9589:tid 9675] [client 20.199.109.98:23650] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/R57.php"] [unique_id "aZphtdr-1mylR_FoXQWPkgAAAJg"]
[Sun Feb 22 09:53:58.259911 2026] [:error] [pid 9588:tid 9647] [client 20.199.109.98:9003] [client 20.199.109.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/R57.php"] [unique_id "aZphtmjNBsxseiTcElnBWgAAAFc"]
[Tue Feb 24 00:37:00.462414 2026] [proxy_fcgi:error] [pid 29424:tid 29436] [client 20.110.248.150:1178] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 00:37:00.675226 2026] [proxy_fcgi:error] [pid 29424:tid 29427] [client 20.110.248.150:1178] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 00:37:00.889275 2026] [proxy_fcgi:error] [pid 29424:tid 29444] [client 20.110.248.150:1178] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 00:37:01.100972 2026] [proxy_fcgi:error] [pid 29424:tid 29449] [client 20.110.248.150:1178] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 00:37:01.524100 2026] [proxy_fcgi:error] [pid 29424:tid 29437] [client 20.110.248.150:1178] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 00:37:02.159866 2026] [proxy_fcgi:error] [pid 29424:tid 29428] [client 20.110.248.150:1178] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 00:37:02.372664 2026] [proxy_fcgi:error] [pid 29424:tid 29448] [client 20.110.248.150:1178] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 00:37:02.583505 2026] [:error] [pid 29424:tid 29433] [client 20.110.248.150:1178] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zu.php"] [unique_id "aZyCLvgElGDq6B8YX7BH9AAAAMc"]
[Tue Feb 24 00:37:03.016277 2026] [:error] [pid 29291:tid 29392] [client 20.110.248.150:14915] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zu.php"] [unique_id "aZyCLz2gdpbMAXIIRb1ctQAAAIU"]
[Tue Feb 24 00:37:03.457776 2026] [:error] [pid 29291:tid 29398] [client 20.110.248.150:4236] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zu.php"] [unique_id "aZyCLz2gdpbMAXIIRb1ctgAAAIs"]
[Tue Feb 24 00:37:03.923460 2026] [:error] [pid 29291:tid 29388] [client 20.110.248.150:11539] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zu.php"] [unique_id "aZyCLz2gdpbMAXIIRb1ctwAAAIE"]
[Tue Feb 24 00:37:04.355134 2026] [:error] [pid 29291:tid 29390] [client 20.110.248.150:4431] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/alpha.php"] [unique_id "aZyCMD2gdpbMAXIIRb1cugAAAIM"]
[Tue Feb 24 00:37:04.779488 2026] [:error] [pid 29290:tid 29357] [client 20.110.248.150:15755] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/alpha.php"] [unique_id "aZyCMCURJ6Xg7pEW8XYL6gAAAEE"]
[Tue Feb 24 00:37:05.213123 2026] [:error] [pid 29424:tid 29435] [client 20.110.248.150:13732] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/alpha.php"] [unique_id "aZyCMfgElGDq6B8YX7BH9gAAAMk"]
[Tue Feb 24 00:37:05.647161 2026] [:error] [pid 29424:tid 29447] [client 20.110.248.150:9065] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/alpha.php"] [unique_id "aZyCMfgElGDq6B8YX7BH-AAAANU"]
[Tue Feb 24 00:37:06.053325 2026] [:error] [pid 29424:tid 29438] [client 20.110.248.150:1304] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sty.php"] [unique_id "aZyCMvgElGDq6B8YX7BH-QAAAMw"]
[Tue Feb 24 00:37:06.474452 2026] [:error] [pid 29291:tid 29393] [client 20.110.248.150:13712] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sty.php"] [unique_id "aZyCMj2gdpbMAXIIRb1cvQAAAIY"]
[Tue Feb 24 00:37:06.905434 2026] [:error] [pid 29424:tid 29444] [client 20.110.248.150:12504] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sty.php"] [unique_id "aZyCMvgElGDq6B8YX7BH-wAAANI"]
[Tue Feb 24 00:37:07.351750 2026] [:error] [pid 29291:tid 29407] [client 20.110.248.150:16016] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sty.php"] [unique_id "aZyCMz2gdpbMAXIIRb1cvwAAAJM"]
[Tue Feb 24 00:37:07.830894 2026] [:error] [pid 29290:tid 29374] [client 20.110.248.150:1183] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/htaccess.php"] [unique_id "aZyCMyURJ6Xg7pEW8XYL7QAAAFA"]
[Tue Feb 24 00:37:08.250285 2026] [:error] [pid 29290:tid 29381] [client 20.110.248.150:1169] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/htaccess.php"] [unique_id "aZyCNCURJ6Xg7pEW8XYL7gAAAFc"]
[Tue Feb 24 00:37:08.676678 2026] [:error] [pid 29291:tid 29397] [client 20.110.248.150:14000] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/htaccess.php"] [unique_id "aZyCND2gdpbMAXIIRb1cxQAAAIo"]
[Tue Feb 24 00:37:09.111142 2026] [:error] [pid 29291:tid 29388] [client 20.110.248.150:3392] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/htaccess.php"] [unique_id "aZyCNT2gdpbMAXIIRb1cxwAAAIE"]
[Tue Feb 24 00:37:09.555326 2026] [:error] [pid 29289:tid 29294] [client 20.110.248.150:13877] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/uploads/update_with_pics.php"] [unique_id "aZyCNfSAX3I9FAhm7jm9QgAAAAE"]
[Tue Feb 24 00:37:09.973041 2026] [:error] [pid 29290:tid 29363] [client 20.110.248.150:3404] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/uploads/update_with_pics.php"] [unique_id "aZyCNSURJ6Xg7pEW8XYL8AAAAEY"]
[Tue Feb 24 00:37:10.398239 2026] [:error] [pid 29291:tid 29406] [client 20.110.248.150:1300] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/uploads/update_with_pics.php"] [unique_id "aZyCNj2gdpbMAXIIRb1cygAAAJI"]
[Tue Feb 24 00:37:10.861578 2026] [:error] [pid 29291:tid 29413] [client 20.110.248.150:1298] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/uploads/update_with_pics.php"] [unique_id "aZyCNj2gdpbMAXIIRb1czAAAAJg"]
[Tue Feb 24 00:37:11.295510 2026] [:error] [pid 29290:tid 29375] [client 20.110.248.150:12498] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/yes.php"] [unique_id "aZyCNyURJ6Xg7pEW8XYL8QAAAFE"]
[Tue Feb 24 00:37:11.724765 2026] [:error] [pid 29424:tid 29435] [client 20.110.248.150:15084] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/yes.php"] [unique_id "aZyCN_gElGDq6B8YX7BIAAAAAMk"]
[Tue Feb 24 00:37:12.156827 2026] [:error] [pid 29291:tid 29398] [client 20.110.248.150:11681] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/yes.php"] [unique_id "aZyCOD2gdpbMAXIIRb1c0wAAAIs"]
[Tue Feb 24 00:37:12.591574 2026] [:error] [pid 29424:tid 29429] [client 20.110.248.150:12502] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/yes.php"] [unique_id "aZyCOPgElGDq6B8YX7BIAgAAAMM"]
[Tue Feb 24 00:37:13.031371 2026] [:error] [pid 29291:tid 29405] [client 20.110.248.150:9488] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/opts.php"] [unique_id "aZyCOT2gdpbMAXIIRb1c1AAAAJE"]
[Tue Feb 24 00:37:13.489956 2026] [:error] [pid 29291:tid 29400] [client 20.110.248.150:11656] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/opts.php"] [unique_id "aZyCOT2gdpbMAXIIRb1c1QAAAI0"]
[Tue Feb 24 00:37:13.894847 2026] [:error] [pid 29424:tid 29449] [client 20.110.248.150:14944] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/opts.php"] [unique_id "aZyCOfgElGDq6B8YX7BIBgAAANc"]
[Tue Feb 24 00:37:14.321471 2026] [:error] [pid 29290:tid 29378] [client 20.110.248.150:15784] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/opts.php"] [unique_id "aZyCOiURJ6Xg7pEW8XYL8wAAAFQ"]
[Tue Feb 24 00:37:14.758597 2026] [:error] [pid 29291:tid 29407] [client 20.110.248.150:1313] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-act.php"] [unique_id "aZyCOj2gdpbMAXIIRb1c2gAAAJM"]
[Tue Feb 24 00:37:15.191146 2026] [:error] [pid 29424:tid 29448] [client 20.110.248.150:13717] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-act.php"] [unique_id "aZyCO_gElGDq6B8YX7BICgAAANY"]
[Tue Feb 24 00:37:15.625007 2026] [:error] [pid 29291:tid 29399] [client 20.110.248.150:14972] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-act.php"] [unique_id "aZyCOz2gdpbMAXIIRb1c2wAAAIw"]
[Tue Feb 24 00:37:16.037864 2026] [:error] [pid 29424:tid 29429] [client 20.110.248.150:11690] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-act.php"] [unique_id "aZyCPPgElGDq6B8YX7BIDQAAAMM"]
[Tue Feb 24 00:37:16.490736 2026] [:error] [pid 29424:tid 29447] [client 20.110.248.150:14965] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ze.php"] [unique_id "aZyCPPgElGDq6B8YX7BIDgAAANU"]
[Tue Feb 24 00:37:16.920127 2026] [:error] [pid 29289:tid 29309] [client 20.110.248.150:15936] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ze.php"] [unique_id "aZyCPPSAX3I9FAhm7jm9RQAAABA"]
[Tue Feb 24 00:37:17.357311 2026] [:error] [pid 29289:tid 29308] [client 20.110.248.150:14969] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ze.php"] [unique_id "aZyCPfSAX3I9FAhm7jm9RgAAAA8"]
[Tue Feb 24 00:37:17.785300 2026] [:error] [pid 29290:tid 29366] [client 20.110.248.150:16056] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ze.php"] [unique_id "aZyCPSURJ6Xg7pEW8XYL-AAAAEk"]
[Tue Feb 24 00:37:18.232500 2026] [:error] [pid 29291:tid 29412] [client 20.110.248.150:9533] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/seetox.php"] [unique_id "aZyCPj2gdpbMAXIIRb1c4QAAAJc"]
[Tue Feb 24 00:37:18.648177 2026] [:error] [pid 29291:tid 29390] [client 20.110.248.150:13836] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/seetox.php"] [unique_id "aZyCPj2gdpbMAXIIRb1c5AAAAIM"]
[Tue Feb 24 00:37:19.063119 2026] [:error] [pid 29291:tid 29393] [client 20.110.248.150:15093] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/seetox.php"] [unique_id "aZyCPz2gdpbMAXIIRb1c5gAAAIY"]
[Tue Feb 24 00:37:19.527303 2026] [:error] [pid 29289:tid 29296] [client 20.110.248.150:11550] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/seetox.php"] [unique_id "aZyCP_SAX3I9FAhm7jm9SQAAAAM"]
[Tue Feb 24 00:37:19.962255 2026] [:error] [pid 29291:tid 29410] [client 20.110.248.150:16265] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/"] [unique_id "aZyCPz2gdpbMAXIIRb1c6QAAAJY"]
[Tue Feb 24 00:37:20.410638 2026] [:error] [pid 29289:tid 29303] [client 20.110.248.150:16058] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/"] [unique_id "aZyCQPSAX3I9FAhm7jm9SwAAAAo"]
[Tue Feb 24 00:37:20.846491 2026] [:error] [pid 29424:tid 29436] [client 20.110.248.150:4227] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/"] [unique_id "aZyCQPgElGDq6B8YX7BIEQAAAMo"]
[Tue Feb 24 00:37:21.281814 2026] [:error] [pid 29291:tid 29398] [client 20.110.248.150:11746] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/"] [unique_id "aZyCQT2gdpbMAXIIRb1c6wAAAIs"]
[Tue Feb 24 00:37:21.706974 2026] [:error] [pid 29424:tid 29449] [client 20.110.248.150:15046] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/plugins.php"] [unique_id "aZyCQfgElGDq6B8YX7BIFAAAANc"]
[Tue Feb 24 00:37:22.135131 2026] [:error] [pid 29289:tid 29301] [client 20.110.248.150:14936] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/plugins.php"] [unique_id "aZyCQvSAX3I9FAhm7jm9TQAAAAg"]
[Tue Feb 24 00:37:22.579689 2026] [:error] [pid 29424:tid 29439] [client 20.110.248.150:13732] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/plugins.php"] [unique_id "aZyCQvgElGDq6B8YX7BIFwAAAM0"]
[Tue Feb 24 00:37:23.003722 2026] [:error] [pid 29289:tid 29314] [client 20.110.248.150:11652] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/plugins.php"] [unique_id "aZyCQ_SAX3I9FAhm7jm9TwAAABU"]
[Tue Feb 24 00:37:23.431800 2026] [:error] [pid 29289:tid 29300] [client 20.110.248.150:5189] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xoot.php"] [unique_id "aZyCQ_SAX3I9FAhm7jm9UgAAAAc"]
[Tue Feb 24 00:37:23.875008 2026] [:error] [pid 29289:tid 29308] [client 20.110.248.150:11727] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xoot.php"] [unique_id "aZyCQ_SAX3I9FAhm7jm9UwAAAA8"]
[Tue Feb 24 00:37:24.296809 2026] [:error] [pid 29424:tid 29443] [client 20.110.248.150:8720] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xoot.php"] [unique_id "aZyCRPgElGDq6B8YX7BIGwAAANE"]
[Tue Feb 24 00:37:24.728725 2026] [:error] [pid 29289:tid 29310] [client 20.110.248.150:13859] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xoot.php"] [unique_id "aZyCRPSAX3I9FAhm7jm9VAAAABE"]
[Tue Feb 24 00:37:25.147227 2026] [:error] [pid 29424:tid 29436] [client 20.110.248.150:3408] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/X57.php"] [unique_id "aZyCRfgElGDq6B8YX7BIIQAAAMo"]
[Tue Feb 24 00:37:25.578107 2026] [:error] [pid 29424:tid 29449] [client 20.110.248.150:16012] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/X57.php"] [unique_id "aZyCRfgElGDq6B8YX7BIIwAAANc"]
[Tue Feb 24 00:37:26.009917 2026] [:error] [pid 29289:tid 29298] [client 20.110.248.150:9531] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/X57.php"] [unique_id "aZyCRvSAX3I9FAhm7jm9VQAAAAU"]
[Tue Feb 24 00:37:26.432537 2026] [:error] [pid 29424:tid 29445] [client 20.110.248.150:8274] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/X57.php"] [unique_id "aZyCRvgElGDq6B8YX7BIJQAAANM"]
[Tue Feb 24 00:37:26.858158 2026] [:error] [pid 29424:tid 29430] [client 20.110.248.150:16258] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vx.php"] [unique_id "aZyCRvgElGDq6B8YX7BIJgAAAMQ"]
[Tue Feb 24 00:37:27.275728 2026] [:error] [pid 29424:tid 29443] [client 20.110.248.150:14518] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vx.php"] [unique_id "aZyCR_gElGDq6B8YX7BIKQAAANE"]
[Tue Feb 24 00:37:27.695500 2026] [:error] [pid 29424:tid 29431] [client 20.110.248.150:16281] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vx.php"] [unique_id "aZyCR_gElGDq6B8YX7BIKwAAAMU"]
[Tue Feb 24 00:37:28.138775 2026] [:error] [pid 29424:tid 29433] [client 20.110.248.150:2194] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vx.php"] [unique_id "aZyCSPgElGDq6B8YX7BILgAAAMc"]
[Tue Feb 24 00:37:28.580375 2026] [:error] [pid 29290:tid 29364] [client 20.110.248.150:1199] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file59.php"] [unique_id "aZyCSCURJ6Xg7pEW8XYL-gAAAEc"]
[Tue Feb 24 00:37:29.007920 2026] [:error] [pid 29290:tid 29380] [client 20.110.248.150:11723] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file59.php"] [unique_id "aZyCSSURJ6Xg7pEW8XYL-wAAAFY"]
[Tue Feb 24 00:37:29.438378 2026] [:error] [pid 29424:tid 29434] [client 20.110.248.150:11773] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file59.php"] [unique_id "aZyCSfgElGDq6B8YX7BIMAAAAMg"]
[Tue Feb 24 00:37:29.880925 2026] [:error] [pid 29424:tid 29449] [client 20.110.248.150:1309] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file59.php"] [unique_id "aZyCSfgElGDq6B8YX7BIMQAAANc"]
[Tue Feb 24 00:37:30.313727 2026] [:error] [pid 29289:tid 29307] [client 20.110.248.150:8256] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aZyCSvSAX3I9FAhm7jm9VwAAAA4"]
[Tue Feb 24 00:37:30.755055 2026] [:error] [pid 29424:tid 29431] [client 20.110.248.150:13873] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aZyCSvgElGDq6B8YX7BIOAAAAMU"]
[Tue Feb 24 00:37:31.178135 2026] [:error] [pid 29291:tid 29408] [client 20.110.248.150:2275] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aZyCSz2gdpbMAXIIRb1c8AAAAJQ"]
[Tue Feb 24 00:37:31.625269 2026] [:error] [pid 29424:tid 29438] [client 20.110.248.150:16057] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aZyCS_gElGDq6B8YX7BIPgAAAMw"]
[Tue Feb 24 00:37:32.035371 2026] [:error] [pid 29289:tid 29311] [client 20.110.248.150:14496] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xa.php"] [unique_id "aZyCTPSAX3I9FAhm7jm9WgAAABI"]
[Tue Feb 24 00:37:32.462223 2026] [:error] [pid 29424:tid 29437] [client 20.110.248.150:2263] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xa.php"] [unique_id "aZyCTPgElGDq6B8YX7BIQQAAAMs"]
[Tue Feb 24 00:37:32.880774 2026] [:error] [pid 29424:tid 29445] [client 20.110.248.150:14508] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xa.php"] [unique_id "aZyCTPgElGDq6B8YX7BIRAAAANM"]
[Tue Feb 24 00:37:33.304305 2026] [:error] [pid 29424:tid 29435] [client 20.110.248.150:1208] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xa.php"] [unique_id "aZyCTfgElGDq6B8YX7BISAAAAMk"]
[Tue Feb 24 00:37:33.726027 2026] [:error] [pid 29424:tid 29447] [client 20.110.248.150:3437] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/er.php"] [unique_id "aZyCTfgElGDq6B8YX7BISgAAANU"]
[Tue Feb 24 00:37:34.135442 2026] [:error] [pid 29289:tid 29296] [client 20.110.248.150:1166] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/er.php"] [unique_id "aZyCTvSAX3I9FAhm7jm9WwAAAAM"]
[Tue Feb 24 00:37:35.580025 2026] [:error] [pid 29291:tid 29387] [client 20.110.248.150:2186] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/er.php"] [unique_id "aZyCTz2gdpbMAXIIRb1c8wAAAIA"]
[Tue Feb 24 00:37:36.017465 2026] [:error] [pid 29290:tid 29367] [client 20.110.248.150:8311] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/er.php"] [unique_id "aZyCUCURJ6Xg7pEW8XYL_QAAAEo"]
[Tue Feb 24 00:37:36.457627 2026] [:error] [pid 29290:tid 29374] [client 20.110.248.150:6559] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fault.php"] [unique_id "aZyCUCURJ6Xg7pEW8XYL_gAAAFA"]
[Tue Feb 24 00:37:36.884667 2026] [:error] [pid 29424:tid 29449] [client 20.110.248.150:5203] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fault.php"] [unique_id "aZyCUPgElGDq6B8YX7BIUwAAANc"]
[Tue Feb 24 00:37:37.300772 2026] [:error] [pid 29291:tid 29410] [client 20.110.248.150:8706] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fault.php"] [unique_id "aZyCUT2gdpbMAXIIRb1c9AAAAJY"]
[Tue Feb 24 00:37:37.729817 2026] [:error] [pid 29424:tid 29428] [client 20.110.248.150:8296] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fault.php"] [unique_id "aZyCUfgElGDq6B8YX7BIVQAAAMI"]
[Tue Feb 24 00:37:38.162220 2026] [:error] [pid 29291:tid 29407] [client 20.110.248.150:2936] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/motu.php"] [unique_id "aZyCUj2gdpbMAXIIRb1c9gAAAJM"]
[Tue Feb 24 00:37:38.592976 2026] [:error] [pid 29289:tid 29300] [client 20.110.248.150:2180] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/motu.php"] [unique_id "aZyCUvSAX3I9FAhm7jm9YQAAAAc"]
[Tue Feb 24 00:37:39.054093 2026] [:error] [pid 29424:tid 29443] [client 20.110.248.150:8749] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/motu.php"] [unique_id "aZyCU_gElGDq6B8YX7BIWQAAANE"]
[Tue Feb 24 00:37:39.489956 2026] [:error] [pid 29424:tid 29440] [client 20.110.248.150:1318] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/motu.php"] [unique_id "aZyCU_gElGDq6B8YX7BIWwAAAM4"]
[Tue Feb 24 00:37:39.913211 2026] [:error] [pid 29424:tid 29447] [client 20.110.248.150:2210] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/66.php"] [unique_id "aZyCU_gElGDq6B8YX7BIXQAAANU"]
[Tue Feb 24 00:37:40.330427 2026] [:error] [pid 29424:tid 29428] [client 20.110.248.150:9972] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/66.php"] [unique_id "aZyCVPgElGDq6B8YX7BIXgAAAMI"]
[Tue Feb 24 00:37:40.750516 2026] [:error] [pid 29289:tid 29310] [client 20.110.248.150:11748] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/66.php"] [unique_id "aZyCVPSAX3I9FAhm7jm9ZAAAABE"]
[Tue Feb 24 00:37:41.197122 2026] [:error] [pid 29289:tid 29298] [client 20.110.248.150:1324] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/66.php"] [unique_id "aZyCVfSAX3I9FAhm7jm9ZQAAAAU"]
[Tue Feb 24 00:37:41.622471 2026] [:error] [pid 29289:tid 29316] [client 20.110.248.150:1992] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/leuk.php"] [unique_id "aZyCVfSAX3I9FAhm7jm9ZgAAABc"]
[Tue Feb 24 00:37:42.053963 2026] [:error] [pid 29424:tid 29439] [client 20.110.248.150:2280] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/leuk.php"] [unique_id "aZyCVvgElGDq6B8YX7BIaQAAAM0"]
[Tue Feb 24 00:37:42.464665 2026] [:error] [pid 29424:tid 29427] [client 20.110.248.150:6571] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/leuk.php"] [unique_id "aZyCVvgElGDq6B8YX7BIawAAAME"]
[Tue Feb 24 00:37:42.877274 2026] [:error] [pid 29424:tid 29437] [client 20.110.248.150:13866] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/leuk.php"] [unique_id "aZyCVvgElGDq6B8YX7BIbQAAAMs"]
[Tue Feb 24 00:37:43.323923 2026] [:error] [pid 29424:tid 29443] [client 20.110.248.150:10513] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xqq.php"] [unique_id "aZyCV_gElGDq6B8YX7BIbwAAANE"]
[Tue Feb 24 00:37:43.748840 2026] [:error] [pid 29424:tid 29447] [client 20.110.248.150:10541] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xqq.php"] [unique_id "aZyCV_gElGDq6B8YX7BIcgAAANU"]
[Tue Feb 24 00:37:44.170293 2026] [:error] [pid 29424:tid 29426] [client 20.110.248.150:11748] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xqq.php"] [unique_id "aZyCWPgElGDq6B8YX7BIcwAAAMA"]
[Tue Feb 24 00:37:44.607902 2026] [:error] [pid 29424:tid 29432] [client 20.110.248.150:13868] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xqq.php"] [unique_id "aZyCWPgElGDq6B8YX7BIdQAAAMY"]
[Tue Feb 24 00:37:45.028302 2026] [:error] [pid 29424:tid 29449] [client 20.110.248.150:14559] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kolda.php"] [unique_id "aZyCWfgElGDq6B8YX7BIdgAAANc"]
[Tue Feb 24 00:37:45.464513 2026] [:error] [pid 29424:tid 29448] [client 20.110.248.150:9922] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kolda.php"] [unique_id "aZyCWfgElGDq6B8YX7BIeAAAANY"]
[Tue Feb 24 00:37:45.914975 2026] [:error] [pid 29291:tid 29413] [client 20.110.248.150:11732] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kolda.php"] [unique_id "aZyCWT2gdpbMAXIIRb1dCAAAAJg"]
[Tue Feb 24 00:37:46.329908 2026] [:error] [pid 29424:tid 29440] [client 20.110.248.150:14583] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kolda.php"] [unique_id "aZyCWvgElGDq6B8YX7BIfgAAAM4"]
[Tue Feb 24 00:37:46.759894 2026] [:error] [pid 29290:tid 29382] [client 20.110.248.150:3399] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nw.php"] [unique_id "aZyCWiURJ6Xg7pEW8XYMAwAAAFg"]
[Tue Feb 24 00:37:47.185007 2026] [:error] [pid 29424:tid 29438] [client 20.110.248.150:10557] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nw.php"] [unique_id "aZyCW_gElGDq6B8YX7BIgAAAAMw"]
[Tue Feb 24 00:37:47.635905 2026] [:error] [pid 29290:tid 29358] [client 20.110.248.150:14353] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nw.php"] [unique_id "aZyCWyURJ6Xg7pEW8XYMBAAAAEI"]
[Tue Feb 24 00:37:48.060819 2026] [:error] [pid 29424:tid 29428] [client 20.110.248.150:2204] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nw.php"] [unique_id "aZyCXPgElGDq6B8YX7BIgwAAAMI"]
[Tue Feb 24 00:37:48.476301 2026] [:error] [pid 29290:tid 29357] [client 20.110.248.150:2044] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/666.php"] [unique_id "aZyCXCURJ6Xg7pEW8XYMCQAAAEE"]
[Tue Feb 24 00:37:48.900625 2026] [:error] [pid 29424:tid 29449] [client 20.110.248.150:10554] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/666.php"] [unique_id "aZyCXPgElGDq6B8YX7BIhAAAANc"]
[Tue Feb 24 00:37:49.341511 2026] [:error] [pid 29291:tid 29399] [client 20.110.248.150:2038] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/666.php"] [unique_id "aZyCXT2gdpbMAXIIRb1dDAAAAIw"]
[Tue Feb 24 00:37:49.771935 2026] [:error] [pid 29424:tid 29444] [client 20.110.248.150:1985] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/666.php"] [unique_id "aZyCXfgElGDq6B8YX7BIhwAAANI"]
[Tue Feb 24 00:37:50.203070 2026] [:error] [pid 29289:tid 29305] [client 20.110.248.150:11768] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kj.php"] [unique_id "aZyCXvSAX3I9FAhm7jm9bAAAAAw"]
[Tue Feb 24 00:37:50.611263 2026] [:error] [pid 29291:tid 29405] [client 20.110.248.150:11760] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kj.php"] [unique_id "aZyCXj2gdpbMAXIIRb1dDQAAAJE"]
[Tue Feb 24 00:37:51.050042 2026] [:error] [pid 29291:tid 29412] [client 20.110.248.150:9926] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kj.php"] [unique_id "aZyCXz2gdpbMAXIIRb1dDwAAAJc"]
[Tue Feb 24 00:37:51.470209 2026] [:error] [pid 29424:tid 29443] [client 20.110.248.150:8293] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kj.php"] [unique_id "aZyCX_gElGDq6B8YX7BIigAAANE"]
[Tue Feb 24 00:37:51.878642 2026] [:error] [pid 29291:tid 29400] [client 20.110.248.150:11680] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/un.php"] [unique_id "aZyCXz2gdpbMAXIIRb1dEAAAAI0"]
[Tue Feb 24 00:37:52.305886 2026] [:error] [pid 29290:tid 29356] [client 20.110.248.150:10547] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/un.php"] [unique_id "aZyCYCURJ6Xg7pEW8XYMEAAAAEA"]
[Tue Feb 24 00:37:52.746975 2026] [:error] [pid 29424:tid 29442] [client 20.110.248.150:14488] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/un.php"] [unique_id "aZyCYPgElGDq6B8YX7BIiwAAANA"]
[Tue Feb 24 00:37:53.200707 2026] [:error] [pid 29290:tid 29365] [client 20.110.248.150:2885] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/un.php"] [unique_id "aZyCYSURJ6Xg7pEW8XYMEgAAAEg"]
[Tue Feb 24 00:37:53.622334 2026] [:error] [pid 29291:tid 29404] [client 20.110.248.150:11769] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fs.php"] [unique_id "aZyCYT2gdpbMAXIIRb1dFAAAAJA"]
[Tue Feb 24 00:37:54.051070 2026] [:error] [pid 29291:tid 29387] [client 20.110.248.150:2758] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fs.php"] [unique_id "aZyCYj2gdpbMAXIIRb1dFQAAAIA"]
[Tue Feb 24 00:37:54.464510 2026] [:error] [pid 29424:tid 29450] [client 20.110.248.150:14379] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fs.php"] [unique_id "aZyCYvgElGDq6B8YX7BIjgAAANg"]
[Tue Feb 24 00:37:54.909911 2026] [:error] [pid 29424:tid 29428] [client 20.110.248.150:10129] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fs.php"] [unique_id "aZyCYvgElGDq6B8YX7BIkQAAAMI"]
[Tue Feb 24 00:37:55.355641 2026] [:error] [pid 29291:tid 29393] [client 20.110.248.150:14557] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ms.php"] [unique_id "aZyCYz2gdpbMAXIIRb1dFwAAAIY"]
[Tue Feb 24 00:37:55.808808 2026] [:error] [pid 29289:tid 29300] [client 20.110.248.150:12498] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ms.php"] [unique_id "aZyCY_SAX3I9FAhm7jm9cQAAAAc"]
[Tue Feb 24 00:37:56.224943 2026] [:error] [pid 29291:tid 29403] [client 20.110.248.150:12881] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ms.php"] [unique_id "aZyCZD2gdpbMAXIIRb1dGwAAAI8"]
[Tue Feb 24 00:37:56.667640 2026] [:error] [pid 29291:tid 29398] [client 20.110.248.150:11753] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ms.php"] [unique_id "aZyCZD2gdpbMAXIIRb1dHQAAAIs"]
[Tue Feb 24 00:37:57.111606 2026] [:error] [pid 29290:tid 29376] [client 20.110.248.150:11730] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/login5.php"] [unique_id "aZyCZSURJ6Xg7pEW8XYMFQAAAFI"]
[Tue Feb 24 00:37:57.544884 2026] [:error] [pid 29424:tid 29444] [client 20.110.248.150:12925] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/login5.php"] [unique_id "aZyCZfgElGDq6B8YX7BIkwAAANI"]
[Tue Feb 24 00:37:57.970010 2026] [:error] [pid 29290:tid 29369] [client 20.110.248.150:11720] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/login5.php"] [unique_id "aZyCZSURJ6Xg7pEW8XYMFwAAAEs"]
[Tue Feb 24 00:37:58.402172 2026] [:error] [pid 29290:tid 29374] [client 20.110.248.150:7021] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/login5.php"] [unique_id "aZyCZiURJ6Xg7pEW8XYMGAAAAFA"]
[Tue Feb 24 00:37:58.840374 2026] [:error] [pid 29290:tid 29379] [client 20.110.248.150:2768] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cu.php"] [unique_id "aZyCZiURJ6Xg7pEW8XYMGQAAAFU"]
[Tue Feb 24 00:37:59.273641 2026] [:error] [pid 29291:tid 29406] [client 20.110.248.150:6035] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cu.php"] [unique_id "aZyCZz2gdpbMAXIIRb1dIQAAAJI"]
[Tue Feb 24 00:37:59.690074 2026] [:error] [pid 29290:tid 29381] [client 20.110.248.150:12772] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cu.php"] [unique_id "aZyCZyURJ6Xg7pEW8XYMGwAAAFc"]
[Tue Feb 24 00:38:00.118325 2026] [:error] [pid 29424:tid 29431] [client 20.110.248.150:14349] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cu.php"] [unique_id "aZyCaPgElGDq6B8YX7BIlgAAAMU"]
[Tue Feb 24 00:38:00.540291 2026] [:error] [pid 29424:tid 29443] [client 20.110.248.150:2791] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lul.php"] [unique_id "aZyCaPgElGDq6B8YX7BIlwAAANE"]
[Tue Feb 24 00:38:00.943366 2026] [:error] [pid 29289:tid 29296] [client 20.110.248.150:3946] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lul.php"] [unique_id "aZyCaPSAX3I9FAhm7jm9dgAAAAM"]
[Tue Feb 24 00:38:01.368610 2026] [:error] [pid 29289:tid 29312] [client 20.110.248.150:6562] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lul.php"] [unique_id "aZyCafSAX3I9FAhm7jm9eAAAABM"]
[Tue Feb 24 00:38:01.782381 2026] [:error] [pid 29289:tid 29297] [client 20.110.248.150:3948] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lul.php"] [unique_id "aZyCafSAX3I9FAhm7jm9egAAAAQ"]
[Tue Feb 24 00:38:02.213746 2026] [proxy_fcgi:error] [pid 29424:tid 29441] [client 20.110.248.150:2909] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 00:38:02.424427 2026] [proxy_fcgi:error] [pid 29424:tid 29442] [client 20.110.248.150:2909] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 00:38:02.637038 2026] [proxy_fcgi:error] [pid 29424:tid 29438] [client 20.110.248.150:2909] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 00:38:02.846729 2026] [proxy_fcgi:error] [pid 29424:tid 29434] [client 20.110.248.150:2909] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 00:38:03.056376 2026] [proxy_fcgi:error] [pid 29424:tid 29446] [client 20.110.248.150:2909] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 00:38:03.266833 2026] [proxy_fcgi:error] [pid 29424:tid 29430] [client 20.110.248.150:2909] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 00:38:03.477858 2026] [proxy_fcgi:error] [pid 29424:tid 29428] [client 20.110.248.150:2909] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 00:38:03.687858 2026] [proxy_fcgi:error] [pid 29424:tid 29426] [client 20.110.248.150:2909] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 00:38:03.899006 2026] [proxy_fcgi:error] [pid 29424:tid 29427] [client 20.110.248.150:2909] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 00:38:04.109118 2026] [proxy_fcgi:error] [pid 29424:tid 29444] [client 20.110.248.150:2909] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 00:38:04.319073 2026] [proxy_fcgi:error] [pid 29424:tid 29429] [client 20.110.248.150:2909] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 00:38:04.525676 2026] [:error] [pid 29424:tid 29435] [client 20.110.248.150:2909] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ff1.php"] [unique_id "aZyCbPgElGDq6B8YX7BIqQAAAMk"]
[Tue Feb 24 00:38:04.938266 2026] [:error] [pid 29424:tid 29436] [client 20.110.248.150:10549] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ff1.php"] [unique_id "aZyCbPgElGDq6B8YX7BIrAAAAMo"]
[Tue Feb 24 00:38:05.359902 2026] [:error] [pid 29290:tid 29356] [client 20.110.248.150:6549] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ff1.php"] [unique_id "aZyCbSURJ6Xg7pEW8XYMHQAAAEA"]
[Tue Feb 24 00:38:05.813762 2026] [:error] [pid 29424:tid 29434] [client 20.110.248.150:12830] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ff1.php"] [unique_id "aZyCbfgElGDq6B8YX7BIsAAAAMg"]
[Tue Feb 24 00:38:06.239706 2026] [:error] [pid 29291:tid 29395] [client 20.110.248.150:3218] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/forbidals.php"] [unique_id "aZyCbj2gdpbMAXIIRb1dIwAAAIg"]
[Tue Feb 24 00:38:06.653832 2026] [:error] [pid 29291:tid 29393] [client 20.110.248.150:3955] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/forbidals.php"] [unique_id "aZyCbj2gdpbMAXIIRb1dJQAAAIY"]
[Tue Feb 24 00:38:07.088501 2026] [:error] [pid 29290:tid 29365] [client 20.110.248.150:7020] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/forbidals.php"] [unique_id "aZyCbyURJ6Xg7pEW8XYMHwAAAEg"]
[Tue Feb 24 00:38:07.518489 2026] [:error] [pid 29290:tid 29370] [client 20.110.248.150:10123] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/forbidals.php"] [unique_id "aZyCbyURJ6Xg7pEW8XYMIgAAAEw"]
[Tue Feb 24 00:38:07.920048 2026] [:error] [pid 29291:tid 29407] [client 20.110.248.150:1601] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/erty.php"] [unique_id "aZyCbz2gdpbMAXIIRb1dJwAAAJM"]
[Tue Feb 24 00:38:08.355645 2026] [:error] [pid 29291:tid 29398] [client 20.110.248.150:2807] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/erty.php"] [unique_id "aZyCcD2gdpbMAXIIRb1dKgAAAIs"]
[Tue Feb 24 00:38:08.796291 2026] [:error] [pid 29291:tid 29388] [client 20.110.248.150:3939] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/erty.php"] [unique_id "aZyCcD2gdpbMAXIIRb1dLAAAAIE"]
[Tue Feb 24 00:38:09.210951 2026] [:error] [pid 29290:tid 29380] [client 20.110.248.150:12895] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/erty.php"] [unique_id "aZyCcSURJ6Xg7pEW8XYMJAAAAFY"]
[Tue Feb 24 00:38:09.634125 2026] [:error] [pid 29424:tid 29450] [client 20.110.248.150:4884] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dev1s.php"] [unique_id "aZyCcfgElGDq6B8YX7BItAAAANg"]
[Tue Feb 24 00:38:10.065455 2026] [:error] [pid 29290:tid 29374] [client 20.110.248.150:12854] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dev1s.php"] [unique_id "aZyCciURJ6Xg7pEW8XYMJgAAAFA"]
[Tue Feb 24 00:38:10.502576 2026] [:error] [pid 29424:tid 29437] [client 20.110.248.150:4295] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dev1s.php"] [unique_id "aZyCcvgElGDq6B8YX7BItwAAAMs"]
[Tue Feb 24 00:38:10.934779 2026] [:error] [pid 29424:tid 29436] [client 20.110.248.150:3241] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dev1s.php"] [unique_id "aZyCcvgElGDq6B8YX7BIugAAAMo"]
[Tue Feb 24 00:38:11.364619 2026] [:error] [pid 29424:tid 29440] [client 20.110.248.150:7002] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ffd.php"] [unique_id "aZyCc_gElGDq6B8YX7BIvAAAAM4"]
[Tue Feb 24 00:38:11.802479 2026] [:error] [pid 29424:tid 29434] [client 20.110.248.150:1616] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ffd.php"] [unique_id "aZyCc_gElGDq6B8YX7BIvwAAAMg"]
[Tue Feb 24 00:38:12.226367 2026] [:error] [pid 29424:tid 29433] [client 20.110.248.150:2773] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ffd.php"] [unique_id "aZyCdPgElGDq6B8YX7BIwQAAAMc"]
[Tue Feb 24 00:38:12.651319 2026] [:error] [pid 29424:tid 29449] [client 20.110.248.150:3259] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ffd.php"] [unique_id "aZyCdPgElGDq6B8YX7BIwgAAANc"]
[Tue Feb 24 00:38:13.076977 2026] [:error] [pid 29424:tid 29437] [client 20.110.248.150:2798] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admiin.php"] [unique_id "aZyCdfgElGDq6B8YX7BIwwAAAMs"]
[Tue Feb 24 00:38:13.509741 2026] [:error] [pid 29290:tid 29373] [client 20.110.248.150:6018] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admiin.php"] [unique_id "aZyCdSURJ6Xg7pEW8XYMJwAAAE8"]
[Tue Feb 24 00:38:13.947550 2026] [:error] [pid 29290:tid 29362] [client 20.110.248.150:11147] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admiin.php"] [unique_id "aZyCdSURJ6Xg7pEW8XYMKQAAAEU"]
[Tue Feb 24 00:38:14.393337 2026] [:error] [pid 29290:tid 29378] [client 20.110.248.150:3937] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admiin.php"] [unique_id "aZyCdiURJ6Xg7pEW8XYMKwAAAFQ"]
[Tue Feb 24 00:38:14.822775 2026] [:error] [pid 29291:tid 29408] [client 20.110.248.150:1646] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ol.php"] [unique_id "aZyCdj2gdpbMAXIIRb1dLwAAAJQ"]
[Tue Feb 24 00:38:15.262752 2026] [:error] [pid 29290:tid 29365] [client 20.110.248.150:11156] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ol.php"] [unique_id "aZyCdyURJ6Xg7pEW8XYMLQAAAEg"]
[Tue Feb 24 00:38:15.688297 2026] [:error] [pid 29291:tid 29409] [client 20.110.248.150:12879] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ol.php"] [unique_id "aZyCdz2gdpbMAXIIRb1dMwAAAJU"]
[Tue Feb 24 00:38:16.149279 2026] [:error] [pid 29289:tid 29317] [client 20.110.248.150:4888] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ol.php"] [unique_id "aZyCePSAX3I9FAhm7jm9gAAAABg"]
[Tue Feb 24 00:38:16.619621 2026] [:error] [pid 29289:tid 29308] [client 20.110.248.150:3262] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Sanskrit.php"] [unique_id "aZyCePSAX3I9FAhm7jm9gQAAAA8"]
[Tue Feb 24 00:38:17.041142 2026] [:error] [pid 29290:tid 29364] [client 20.110.248.150:10145] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Sanskrit.php"] [unique_id "aZyCeSURJ6Xg7pEW8XYMLwAAAEc"]
[Tue Feb 24 00:38:17.465696 2026] [:error] [pid 29290:tid 29376] [client 20.110.248.150:6042] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Sanskrit.php"] [unique_id "aZyCeSURJ6Xg7pEW8XYMMAAAAFI"]
[Tue Feb 24 00:38:17.904929 2026] [:error] [pid 29424:tid 29436] [client 20.110.248.150:1625] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Sanskrit.php"] [unique_id "aZyCefgElGDq6B8YX7BIyAAAAMo"]
[Tue Feb 24 00:38:18.385090 2026] [:error] [pid 29424:tid 29443] [client 20.110.248.150:11915] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vxrl.php"] [unique_id "aZyCevgElGDq6B8YX7BIygAAANE"]
[Tue Feb 24 00:38:18.847233 2026] [:error] [pid 29289:tid 29312] [client 20.110.248.150:4310] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vxrl.php"] [unique_id "aZyCevSAX3I9FAhm7jm9hgAAABM"]
[Tue Feb 24 00:38:19.252521 2026] [:error] [pid 29290:tid 29370] [client 20.110.248.150:11910] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vxrl.php"] [unique_id "aZyCeyURJ6Xg7pEW8XYMMgAAAEw"]
[Tue Feb 24 00:38:19.688716 2026] [:error] [pid 29424:tid 29434] [client 20.110.248.150:4915] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vxrl.php"] [unique_id "aZyCe_gElGDq6B8YX7BIzAAAAMg"]
[Tue Feb 24 00:38:20.138056 2026] [:error] [pid 29424:tid 29438] [client 20.110.248.150:12319] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/re.php"] [unique_id "aZyCfPgElGDq6B8YX7BIzgAAAMw"]
[Tue Feb 24 00:38:20.597978 2026] [:error] [pid 29424:tid 29428] [client 20.110.248.150:11955] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/re.php"] [unique_id "aZyCfPgElGDq6B8YX7BI0gAAAMI"]
[Tue Feb 24 00:38:21.043458 2026] [:error] [pid 29291:tid 29391] [client 20.110.248.150:2197] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/re.php"] [unique_id "aZyCfT2gdpbMAXIIRb1dNgAAAIQ"]
[Tue Feb 24 00:38:21.472764 2026] [:error] [pid 29424:tid 29430] [client 20.110.248.150:12320] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/re.php"] [unique_id "aZyCffgElGDq6B8YX7BI1AAAAMQ"]
[Tue Feb 24 00:38:21.932838 2026] [:error] [pid 29424:tid 29434] [client 20.110.248.150:4864] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/num.php"] [unique_id "aZyCffgElGDq6B8YX7BI2QAAAMg"]
[Tue Feb 24 00:38:22.375476 2026] [:error] [pid 29424:tid 29442] [client 20.110.248.150:11986] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/num.php"] [unique_id "aZyCfvgElGDq6B8YX7BI3QAAANA"]
[Tue Feb 24 00:38:22.815034 2026] [:error] [pid 29290:tid 29366] [client 20.110.248.150:3230] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/num.php"] [unique_id "aZyCfiURJ6Xg7pEW8XYMNQAAAEk"]
[Tue Feb 24 00:38:23.237261 2026] [:error] [pid 29424:tid 29435] [client 20.110.248.150:7004] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/num.php"] [unique_id "aZyCf_gElGDq6B8YX7BI4AAAAMk"]
[Tue Feb 24 00:38:23.687280 2026] [:error] [pid 29289:tid 29307] [client 20.110.248.150:4313] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/makeasmtp.php"] [unique_id "aZyCf_SAX3I9FAhm7jm9iQAAAA4"]
[Tue Feb 24 00:38:24.142612 2026] [:error] [pid 29289:tid 29301] [client 20.110.248.150:2121] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/makeasmtp.php"] [unique_id "aZyCgPSAX3I9FAhm7jm9igAAAAg"]
[Tue Feb 24 00:38:24.570681 2026] [:error] [pid 29290:tid 29375] [client 20.110.248.150:2170] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/makeasmtp.php"] [unique_id "aZyCgCURJ6Xg7pEW8XYMOQAAAFE"]
[Tue Feb 24 00:38:24.987518 2026] [:error] [pid 29424:tid 29434] [client 20.110.248.150:2122] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/makeasmtp.php"] [unique_id "aZyCgPgElGDq6B8YX7BI4wAAAMg"]
[Tue Feb 24 00:38:25.424964 2026] [:error] [pid 29424:tid 29433] [client 20.110.248.150:1547] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vxrl.php"] [unique_id "aZyCgfgElGDq6B8YX7BI5QAAAMc"]
[Tue Feb 24 00:38:25.856785 2026] [:error] [pid 29289:tid 29300] [client 20.110.248.150:3769] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vxrl.php"] [unique_id "aZyCgfSAX3I9FAhm7jm9jQAAAAc"]
[Tue Feb 24 00:38:26.302243 2026] [:error] [pid 29290:tid 29362] [client 20.110.248.150:2144] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vxrl.php"] [unique_id "aZyCgiURJ6Xg7pEW8XYMPgAAAEU"]
[Tue Feb 24 00:38:26.717674 2026] [:error] [pid 29289:tid 29308] [client 20.110.248.150:12773] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vxrl.php"] [unique_id "aZyCgvSAX3I9FAhm7jm9kAAAAA8"]
[Tue Feb 24 00:38:27.131346 2026] [:error] [pid 29289:tid 29310] [client 20.110.248.150:5857] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/in.php"] [unique_id "aZyCg_SAX3I9FAhm7jm9kgAAABE"]
[Tue Feb 24 00:38:27.577446 2026] [:error] [pid 29424:tid 29444] [client 20.110.248.150:11190] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/in.php"] [unique_id "aZyCg_gElGDq6B8YX7BI6QAAANI"]
[Tue Feb 24 00:38:28.027482 2026] [:error] [pid 29290:tid 29380] [client 20.110.248.150:3217] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/in.php"] [unique_id "aZyChCURJ6Xg7pEW8XYMQQAAAFY"]
[Tue Feb 24 00:38:28.449055 2026] [:error] [pid 29424:tid 29439] [client 20.110.248.150:9669] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/in.php"] [unique_id "aZyChPgElGDq6B8YX7BI6wAAAM0"]
[Tue Feb 24 00:38:28.898483 2026] [:error] [pid 29424:tid 29447] [client 20.110.248.150:1600] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/style.php"] [unique_id "aZyChPgElGDq6B8YX7BI7AAAANU"]
[Tue Feb 24 00:38:29.364428 2026] [:error] [pid 29424:tid 29431] [client 20.110.248.150:5824] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/style.php"] [unique_id "aZyChfgElGDq6B8YX7BI7gAAAMU"]
[Tue Feb 24 00:38:29.813235 2026] [:error] [pid 29289:tid 29296] [client 20.110.248.150:15188] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/style.php"] [unique_id "aZyChfSAX3I9FAhm7jm9kwAAAAM"]
[Tue Feb 24 00:38:30.235681 2026] [:error] [pid 29289:tid 29299] [client 20.110.248.150:12326] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/style.php"] [unique_id "aZyChvSAX3I9FAhm7jm9lgAAAAY"]
[Tue Feb 24 00:38:30.690942 2026] [:error] [pid 29290:tid 29374] [client 20.110.248.150:3750] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/we.php"] [unique_id "aZyChiURJ6Xg7pEW8XYMRgAAAFA"]
[Tue Feb 24 00:38:31.104654 2026] [:error] [pid 29290:tid 29373] [client 20.110.248.150:11984] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/we.php"] [unique_id "aZyChyURJ6Xg7pEW8XYMRwAAAE8"]
[Tue Feb 24 00:38:31.527325 2026] [:error] [pid 29289:tid 29307] [client 20.110.248.150:2148] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/we.php"] [unique_id "aZyCh_SAX3I9FAhm7jm9mgAAAA4"]
[Tue Feb 24 00:38:31.942862 2026] [:error] [pid 29291:tid 29403] [client 20.110.248.150:2761] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/we.php"] [unique_id "aZyChz2gdpbMAXIIRb1dNwAAAI8"]
[Tue Feb 24 00:38:32.377900 2026] [:error] [pid 29291:tid 29399] [client 20.110.248.150:3739] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zwso.php"] [unique_id "aZyCiD2gdpbMAXIIRb1dOQAAAIw"]
[Tue Feb 24 00:38:32.804702 2026] [:error] [pid 29424:tid 29437] [client 20.110.248.150:1548] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zwso.php"] [unique_id "aZyCiPgElGDq6B8YX7BI8QAAAMs"]
[Tue Feb 24 00:38:33.283466 2026] [:error] [pid 29424:tid 29440] [client 20.110.248.150:10506] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zwso.php"] [unique_id "aZyCifgElGDq6B8YX7BI8wAAAM4"]
[Tue Feb 24 00:38:33.707190 2026] [:error] [pid 29289:tid 29314] [client 20.110.248.150:12628] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zwso.php"] [unique_id "aZyCifSAX3I9FAhm7jm9ngAAABU"]
[Tue Feb 24 00:38:34.158955 2026] [:error] [pid 29290:tid 29358] [client 20.110.248.150:4921] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/karak.php"] [unique_id "aZyCiiURJ6Xg7pEW8XYMTQAAAEI"]
[Tue Feb 24 00:38:34.604102 2026] [:error] [pid 29424:tid 29448] [client 20.110.248.150:8086] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/karak.php"] [unique_id "aZyCivgElGDq6B8YX7BI9AAAANY"]
[Tue Feb 24 00:38:35.038225 2026] [:error] [pid 29424:tid 29432] [client 20.110.248.150:15231] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/karak.php"] [unique_id "aZyCi_gElGDq6B8YX7BI9gAAAMY"]
[Tue Feb 24 00:38:35.480099 2026] [:error] [pid 29424:tid 29445] [client 20.110.248.150:14895] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/karak.php"] [unique_id "aZyCi_gElGDq6B8YX7BI9wAAANM"]
[Tue Feb 24 00:38:35.912581 2026] [:error] [pid 29290:tid 29380] [client 20.110.248.150:14903] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/prv8.php"] [unique_id "aZyCiyURJ6Xg7pEW8XYMUQAAAFY"]
[Tue Feb 24 00:38:36.340242 2026] [:error] [pid 29291:tid 29410] [client 20.110.248.150:4875] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/prv8.php"] [unique_id "aZyCjD2gdpbMAXIIRb1dPwAAAJY"]
[Tue Feb 24 00:38:36.785078 2026] [:error] [pid 29289:tid 29299] [client 20.110.248.150:15911] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/prv8.php"] [unique_id "aZyCjPSAX3I9FAhm7jm9pAAAAAY"]
[Tue Feb 24 00:38:37.225444 2026] [:error] [pid 29424:tid 29427] [client 20.110.248.150:14866] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/prv8.php"] [unique_id "aZyCjfgElGDq6B8YX7BI-gAAAME"]
[Tue Feb 24 00:38:37.658500 2026] [:error] [pid 29291:tid 29391] [client 20.110.248.150:2150] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/acces.php"] [unique_id "aZyCjT2gdpbMAXIIRb1dRAAAAIQ"]
[Tue Feb 24 00:38:38.083408 2026] [:error] [pid 29289:tid 29305] [client 20.110.248.150:12016] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/acces.php"] [unique_id "aZyCjvSAX3I9FAhm7jm9qgAAAAw"]
[Tue Feb 24 00:38:38.541028 2026] [:error] [pid 29291:tid 29398] [client 20.110.248.150:11970] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/acces.php"] [unique_id "aZyCjj2gdpbMAXIIRb1dRQAAAIs"]
[Tue Feb 24 00:38:38.961298 2026] [:error] [pid 29290:tid 29375] [client 20.110.248.150:11999] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/acces.php"] [unique_id "aZyCjiURJ6Xg7pEW8XYMWQAAAFE"]
[Tue Feb 24 00:38:39.389272 2026] [:error] [pid 29291:tid 29388] [client 20.110.248.150:2135] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a.php"] [unique_id "aZyCjz2gdpbMAXIIRb1dSQAAAIE"]
[Tue Feb 24 00:38:39.819660 2026] [:error] [pid 29289:tid 29302] [client 20.110.248.150:12656] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a.php"] [unique_id "aZyCj_SAX3I9FAhm7jm9rQAAAAk"]
[Tue Feb 24 00:38:40.244973 2026] [:error] [pid 29290:tid 29356] [client 20.110.248.150:12000] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a.php"] [unique_id "aZyCkCURJ6Xg7pEW8XYMXQAAAEA"]
[Tue Feb 24 00:38:40.679856 2026] [:error] [pid 29291:tid 29406] [client 20.110.248.150:14871] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a.php"] [unique_id "aZyCkD2gdpbMAXIIRb1dTAAAAJI"]
[Tue Feb 24 00:38:41.116938 2026] [:error] [pid 29291:tid 29408] [client 20.110.248.150:12002] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aZyCkT2gdpbMAXIIRb1dTgAAAJQ"]
[Tue Feb 24 00:38:41.532477 2026] [:error] [pid 29291:tid 29395] [client 20.110.248.150:14909] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aZyCkT2gdpbMAXIIRb1dUAAAAIg"]
[Tue Feb 24 00:38:41.964495 2026] [:error] [pid 29289:tid 29317] [client 20.110.248.150:15930] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aZyCkfSAX3I9FAhm7jm9sgAAABg"]
[Tue Feb 24 00:38:42.392507 2026] [:error] [pid 29291:tid 29402] [client 20.110.248.150:5851] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aZyCkj2gdpbMAXIIRb1dUgAAAI4"]
[Tue Feb 24 00:38:42.834815 2026] [:error] [pid 29424:tid 29428] [client 20.110.248.150:10640] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aw.php"] [unique_id "aZyCkvgElGDq6B8YX7BJGgAAAMI"]
[Tue Feb 24 00:38:43.266775 2026] [:error] [pid 29291:tid 29389] [client 20.110.248.150:1589] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aw.php"] [unique_id "aZyCkz2gdpbMAXIIRb1dZgAAAII"]
[Tue Feb 24 00:38:43.704103 2026] [:error] [pid 29424:tid 29431] [client 20.110.248.150:5606] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aw.php"] [unique_id "aZyCk_gElGDq6B8YX7BJJQAAAMU"]
[Tue Feb 24 00:38:44.132660 2026] [:error] [pid 29291:tid 29389] [client 20.110.248.150:4057] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aw.php"] [unique_id "aZyClD2gdpbMAXIIRb1ddgAAAII"]
[Tue Feb 24 00:38:44.570322 2026] [:error] [pid 29424:tid 29427] [client 20.110.248.150:5673] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dev.php"] [unique_id "aZyClPgElGDq6B8YX7BJJwAAAME"]
[Tue Feb 24 00:38:44.993102 2026] [:error] [pid 29289:tid 29306] [client 20.110.248.150:7114] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dev.php"] [unique_id "aZyClPSAX3I9FAhm7jm9twAAAA0"]
[Tue Feb 24 00:38:45.425749 2026] [:error] [pid 60063:tid 60073] [client 20.110.248.150:5587] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dev.php"] [unique_id "aZyClU_6t1uQomVVdUNA_AAAAQg"]
[Tue Feb 24 00:38:45.860337 2026] [:error] [pid 60063:tid 60079] [client 20.110.248.150:14861] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dev.php"] [unique_id "aZyClU_6t1uQomVVdUNBAgAAAQ4"]
[Tue Feb 24 00:38:46.343732 2026] [:error] [pid 60063:tid 60084] [client 20.110.248.150:3714] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lock360.php"] [unique_id "aZyClk_6t1uQomVVdUNBAwAAARM"]
[Tue Feb 24 00:38:46.801435 2026] [:error] [pid 60063:tid 60087] [client 20.110.248.150:9716] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lock360.php"] [unique_id "aZyClk_6t1uQomVVdUNBBwAAARY"]
[Tue Feb 24 00:38:47.233561 2026] [:error] [pid 60063:tid 60067] [client 20.110.248.150:9697] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lock360.php"] [unique_id "aZyCl0_6t1uQomVVdUNBCAAAAQI"]
[Tue Feb 24 00:38:47.701037 2026] [:error] [pid 60063:tid 60073] [client 20.110.248.150:8311] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lock360.php"] [unique_id "aZyCl0_6t1uQomVVdUNBDAAAAQg"]
[Tue Feb 24 00:38:48.145092 2026] [:error] [pid 60063:tid 60077] [client 20.110.248.150:11238] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/155.php"] [unique_id "aZyCmE_6t1uQomVVdUNBDgAAAQw"]
[Tue Feb 24 00:38:48.593761 2026] [:error] [pid 29424:tid 29448] [client 20.110.248.150:5873] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/155.php"] [unique_id "aZyCmPgElGDq6B8YX7BJLQAAANY"]
[Tue Feb 24 00:38:49.009897 2026] [:error] [pid 29291:tid 29393] [client 20.110.248.150:11201] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/155.php"] [unique_id "aZyCmT2gdpbMAXIIRb1dgAAAAIY"]
[Tue Feb 24 00:38:49.425138 2026] [:error] [pid 60063:tid 60083] [client 20.110.248.150:16378] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/155.php"] [unique_id "aZyCmU_6t1uQomVVdUNBDwAAARI"]
[Tue Feb 24 00:38:49.878760 2026] [:error] [pid 29424:tid 29437] [client 20.110.248.150:8242] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/goat.php"] [unique_id "aZyCmfgElGDq6B8YX7BJMAAAAMs"]
[Tue Feb 24 00:38:50.318623 2026] [:error] [pid 29424:tid 29427] [client 20.110.248.150:9671] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/goat.php"] [unique_id "aZyCmvgElGDq6B8YX7BJMgAAAME"]
[Tue Feb 24 00:38:50.745983 2026] [:error] [pid 29424:tid 29448] [client 20.110.248.150:5678] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/goat.php"] [unique_id "aZyCmvgElGDq6B8YX7BJNQAAANY"]
[Tue Feb 24 00:38:51.179668 2026] [:error] [pid 29291:tid 29399] [client 20.110.248.150:8255] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/goat.php"] [unique_id "aZyCmz2gdpbMAXIIRb1dhAAAAIw"]
[Tue Feb 24 00:38:51.611453 2026] [:error] [pid 29424:tid 29443] [client 20.110.248.150:5625] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tcp.php"] [unique_id "aZyCm_gElGDq6B8YX7BJOAAAANE"]
[Tue Feb 24 00:38:52.050077 2026] [:error] [pid 29424:tid 29447] [client 20.110.248.150:8104] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tcp.php"] [unique_id "aZyCnPgElGDq6B8YX7BJPQAAANU"]
[Tue Feb 24 00:38:52.474210 2026] [:error] [pid 60063:tid 60067] [client 20.110.248.150:8004] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tcp.php"] [unique_id "aZyCnE_6t1uQomVVdUNBEQAAAQI"]
[Tue Feb 24 00:38:52.894124 2026] [:error] [pid 29291:tid 29412] [client 20.110.248.150:14887] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tcp.php"] [unique_id "aZyCnD2gdpbMAXIIRb1dhgAAAJc"]
[Tue Feb 24 00:38:53.334515 2026] [:error] [pid 60063:tid 60072] [client 20.110.248.150:10674] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ext.php"] [unique_id "aZyCnU_6t1uQomVVdUNBFQAAAQc"]
[Tue Feb 24 00:38:53.777680 2026] [:error] [pid 60063:tid 60079] [client 20.110.248.150:14798] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ext.php"] [unique_id "aZyCnU_6t1uQomVVdUNBGQAAAQ4"]
[Tue Feb 24 00:38:54.249813 2026] [:error] [pid 29289:tid 29304] [client 20.110.248.150:5604] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ext.php"] [unique_id "aZyCnvSAX3I9FAhm7jm9uwAAAAs"]
[Tue Feb 24 00:38:54.684960 2026] [:error] [pid 29291:tid 29405] [client 20.110.248.150:8887] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ext.php"] [unique_id "aZyCnj2gdpbMAXIIRb1dhwAAAJE"]
[Tue Feb 24 00:38:55.140974 2026] [:error] [pid 60063:tid 60066] [client 20.110.248.150:16349] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/inputs.php"] [unique_id "aZyCn0_6t1uQomVVdUNBGwAAAQE"]
[Tue Feb 24 00:38:55.597254 2026] [:error] [pid 60063:tid 60084] [client 20.110.248.150:15543] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/inputs.php"] [unique_id "aZyCn0_6t1uQomVVdUNBHQAAARM"]
[Tue Feb 24 00:38:56.038783 2026] [:error] [pid 60063:tid 60089] [client 20.110.248.150:8835] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/inputs.php"] [unique_id "aZyCoE_6t1uQomVVdUNBIAAAARg"]
[Tue Feb 24 00:38:56.497713 2026] [:error] [pid 29424:tid 29444] [client 20.110.248.150:5834] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/inputs.php"] [unique_id "aZyCoPgElGDq6B8YX7BJSAAAANI"]
[Tue Feb 24 00:38:56.939404 2026] [:error] [pid 29424:tid 29445] [client 20.110.248.150:16359] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ioxi.php"] [unique_id "aZyCoPgElGDq6B8YX7BJSQAAANM"]
[Tue Feb 24 00:38:57.353964 2026] [:error] [pid 60063:tid 60079] [client 20.110.248.150:3335] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ioxi.php"] [unique_id "aZyCoU_6t1uQomVVdUNBIgAAAQ4"]
[Tue Feb 24 00:38:57.833895 2026] [:error] [pid 29290:tid 29364] [client 20.110.248.150:5682] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ioxi.php"] [unique_id "aZyCoSURJ6Xg7pEW8XYMhQAAAEc"]
[Tue Feb 24 00:38:58.257349 2026] [:error] [pid 29424:tid 29439] [client 20.110.248.150:7143] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ioxi.php"] [unique_id "aZyCovgElGDq6B8YX7BJTQAAAM0"]
[Tue Feb 24 00:38:58.739864 2026] [:error] [pid 29424:tid 29430] [client 20.110.248.150:16341] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fe5.php"] [unique_id "aZyCovgElGDq6B8YX7BJUQAAAMQ"]
[Tue Feb 24 00:38:59.232662 2026] [:error] [pid 29424:tid 29444] [client 20.110.248.150:16376] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fe5.php"] [unique_id "aZyCo_gElGDq6B8YX7BJUwAAANI"]
[Tue Feb 24 00:38:59.674020 2026] [:error] [pid 29289:tid 29315] [client 20.110.248.150:5868] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fe5.php"] [unique_id "aZyCo_SAX3I9FAhm7jm9vQAAABY"]
[Tue Feb 24 00:39:00.102813 2026] [:error] [pid 60063:tid 60071] [client 20.110.248.150:6096] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fe5.php"] [unique_id "aZyCpE_6t1uQomVVdUNBJgAAAQY"]
[Tue Feb 24 00:39:00.565533 2026] [:error] [pid 29289:tid 29308] [client 20.110.248.150:7136] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ov.php"] [unique_id "aZyCpPSAX3I9FAhm7jm9vgAAAA8"]
[Tue Feb 24 00:39:01.009944 2026] [:error] [pid 29290:tid 29375] [client 20.110.248.150:4075] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ov.php"] [unique_id "aZyCpSURJ6Xg7pEW8XYMiAAAAFE"]
[Tue Feb 24 00:39:01.454618 2026] [:error] [pid 60063:tid 60069] [client 20.110.248.150:3377] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ov.php"] [unique_id "aZyCpU_6t1uQomVVdUNBKgAAAQQ"]
[Tue Feb 24 00:39:01.901525 2026] [:error] [pid 60063:tid 60089] [client 20.110.248.150:3365] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ov.php"] [unique_id "aZyCpU_6t1uQomVVdUNBLAAAARg"]
[Tue Feb 24 00:39:02.347639 2026] [:error] [pid 60063:tid 60074] [client 20.110.248.150:7115] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aZyCpk_6t1uQomVVdUNBLwAAAQk"]
[Tue Feb 24 00:39:02.768434 2026] [:error] [pid 60063:tid 60070] [client 20.110.248.150:16356] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aZyCpk_6t1uQomVVdUNBMAAAAQU"]
[Tue Feb 24 00:39:03.180235 2026] [:error] [pid 60063:tid 60078] [client 20.110.248.150:6092] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aZyCp0_6t1uQomVVdUNBMQAAAQ0"]
[Tue Feb 24 00:39:03.594186 2026] [:error] [pid 29289:tid 29298] [client 20.110.248.150:11239] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aZyCp_SAX3I9FAhm7jm9wAAAAAU"]
[Tue Feb 24 00:39:05.023398 2026] [proxy_fcgi:error] [pid 29290:tid 29358] [client 20.110.248.150:15499] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 00:39:05.226926 2026] [proxy_fcgi:error] [pid 29290:tid 29356] [client 20.110.248.150:15499] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 00:39:05.430229 2026] [proxy_fcgi:error] [pid 29290:tid 29365] [client 20.110.248.150:15499] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 00:39:05.633356 2026] [proxy_fcgi:error] [pid 29290:tid 29369] [client 20.110.248.150:15499] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 00:39:05.836641 2026] [proxy_fcgi:error] [pid 29290:tid 29378] [client 20.110.248.150:15499] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 00:39:06.041849 2026] [proxy_fcgi:error] [pid 29290:tid 29359] [client 20.110.248.150:15499] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 00:39:06.245434 2026] [proxy_fcgi:error] [pid 29290:tid 29357] [client 20.110.248.150:15499] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 00:39:06.450668 2026] [proxy_fcgi:error] [pid 29290:tid 29372] [client 20.110.248.150:15499] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 00:39:06.653308 2026] [proxy_fcgi:error] [pid 29290:tid 29366] [client 20.110.248.150:15499] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 00:39:06.856347 2026] [proxy_fcgi:error] [pid 29290:tid 29375] [client 20.110.248.150:15499] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 00:39:07.059913 2026] [proxy_fcgi:error] [pid 29290:tid 29377] [client 20.110.248.150:15499] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 00:39:07.259987 2026] [:error] [pid 29290:tid 29374] [client 20.110.248.150:15499] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cbrfo.php"] [unique_id "aZyCqyURJ6Xg7pEW8XYMmgAAAFA"]
[Tue Feb 24 00:39:07.669646 2026] [:error] [pid 60063:tid 60073] [client 20.110.248.150:8102] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cbrfo.php"] [unique_id "aZyCq0_6t1uQomVVdUNBMwAAAQg"]
[Tue Feb 24 00:39:08.084716 2026] [:error] [pid 60063:tid 60081] [client 20.110.248.150:8065] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cbrfo.php"] [unique_id "aZyCrE_6t1uQomVVdUNBNQAAARA"]
[Tue Feb 24 00:39:08.507271 2026] [:error] [pid 29289:tid 29301] [client 20.110.248.150:12963] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cbrfo.php"] [unique_id "aZyCrPSAX3I9FAhm7jm9yAAAAAg"]
[Tue Feb 24 00:39:08.908719 2026] [:error] [pid 29289:tid 29293] [client 20.110.248.150:8861] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/inc.php"] [unique_id "aZyCrPSAX3I9FAhm7jm9yQAAAAA"]
[Tue Feb 24 00:39:09.318340 2026] [:error] [pid 29291:tid 29399] [client 20.110.248.150:16368] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/inc.php"] [unique_id "aZyCrT2gdpbMAXIIRb1djgAAAIw"]
[Tue Feb 24 00:39:09.782744 2026] [:error] [pid 29291:tid 29409] [client 20.110.248.150:3542] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/inc.php"] [unique_id "aZyCrT2gdpbMAXIIRb1dkAAAAJU"]
[Tue Feb 24 00:39:10.228468 2026] [:error] [pid 29291:tid 29405] [client 20.110.248.150:8101] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/inc.php"] [unique_id "aZyCrj2gdpbMAXIIRb1dkgAAAJE"]
[Tue Feb 24 00:39:10.693360 2026] [:error] [pid 29289:tid 29315] [client 20.110.248.150:14784] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gifclass.php"] [unique_id "aZyCrvSAX3I9FAhm7jm9zAAAABY"]
[Tue Feb 24 00:39:11.157774 2026] [:error] [pid 29289:tid 29308] [client 20.110.248.150:7138] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gifclass.php"] [unique_id "aZyCr_SAX3I9FAhm7jm9zgAAAA8"]
[Tue Feb 24 00:39:11.617880 2026] [:error] [pid 29291:tid 29396] [client 20.110.248.150:8236] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gifclass.php"] [unique_id "aZyCrz2gdpbMAXIIRb1dlgAAAIk"]
[Tue Feb 24 00:39:12.064849 2026] [:error] [pid 60063:tid 60069] [client 20.110.248.150:8859] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gifclass.php"] [unique_id "aZyCsE_6t1uQomVVdUNBOAAAAQQ"]
[Tue Feb 24 00:39:12.488546 2026] [:error] [pid 29289:tid 29299] [client 20.110.248.150:13665] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/miansha.php"] [unique_id "aZyCsPSAX3I9FAhm7jm90AAAAAY"]
[Tue Feb 24 00:39:12.896993 2026] [:error] [pid 29291:tid 29413] [client 20.110.248.150:4047] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/miansha.php"] [unique_id "aZyCsD2gdpbMAXIIRb1dmAAAAJg"]
[Tue Feb 24 00:39:13.347532 2026] [:error] [pid 29290:tid 29373] [client 20.110.248.150:5656] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/miansha.php"] [unique_id "aZyCsSURJ6Xg7pEW8XYMnAAAAE8"]
[Tue Feb 24 00:39:13.813016 2026] [:error] [pid 29291:tid 29397] [client 20.110.248.150:4053] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/miansha.php"] [unique_id "aZyCsT2gdpbMAXIIRb1dmgAAAIo"]
[Tue Feb 24 00:39:14.262156 2026] [:error] [pid 29424:tid 29449] [client 20.110.248.150:10662] [client 20.110.248.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dwelectservices.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aZyCsvgElGDq6B8YX7BJWgAAANc"]
[Tue Feb 24 00:39:14.713231 2026] [:error] [pid 29289:tid 29297] [client 20.110.248.150:3556] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin.php"] [unique_id "aZyCsvSAX3I9FAhm7jm91AAAAAQ"]
[Tue Feb 24 00:39:15.143354 2026] [:error] [pid 29424:tid 29438] [client 20.110.248.150:2108] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin.php"] [unique_id "aZyCs_gElGDq6B8YX7BJWwAAAMw"]
[Tue Feb 24 00:39:15.558690 2026] [:error] [pid 29424:tid 29446] [client 20.110.248.150:12991] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin.php"] [unique_id "aZyCs_gElGDq6B8YX7BJXQAAANQ"]
[Tue Feb 24 00:39:15.992270 2026] [:error] [pid 29289:tid 29309] [client 20.110.248.150:12976] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ok.php"] [unique_id "aZyCs_SAX3I9FAhm7jm91QAAABA"]
[Tue Feb 24 00:39:16.454473 2026] [:error] [pid 29424:tid 29444] [client 20.110.248.150:6108] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ok.php"] [unique_id "aZyCtPgElGDq6B8YX7BJXwAAANI"]
[Tue Feb 24 00:39:16.900476 2026] [:error] [pid 29289:tid 29305] [client 20.110.248.150:8243] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ok.php"] [unique_id "aZyCtPSAX3I9FAhm7jm91wAAAAw"]
[Tue Feb 24 00:39:17.367213 2026] [:error] [pid 60063:tid 60067] [client 20.110.248.150:2064] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ok.php"] [unique_id "aZyCtU_6t1uQomVVdUNBOwAAAQI"]
[Tue Feb 24 00:39:17.843002 2026] [:error] [pid 60063:tid 60078] [client 20.110.248.150:6091] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fi.php"] [unique_id "aZyCtU_6t1uQomVVdUNBPAAAAQ0"]
[Tue Feb 24 00:39:18.321954 2026] [:error] [pid 29291:tid 29387] [client 20.110.248.150:2065] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fi.php"] [unique_id "aZyCtj2gdpbMAXIIRb1doQAAAIA"]
[Tue Feb 24 00:39:18.780398 2026] [:error] [pid 29291:tid 29388] [client 20.110.248.150:15495] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fi.php"] [unique_id "aZyCtj2gdpbMAXIIRb1dowAAAIE"]
[Tue Feb 24 00:39:19.208464 2026] [:error] [pid 60063:tid 60071] [client 20.110.248.150:8869] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fi.php"] [unique_id "aZyCt0_6t1uQomVVdUNBRAAAAQY"]
[Tue Feb 24 00:39:19.689043 2026] [:error] [pid 60063:tid 60083] [client 20.110.248.150:15520] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/muzu.php"] [unique_id "aZyCt0_6t1uQomVVdUNBRQAAARI"]
[Tue Feb 24 00:39:20.153842 2026] [:error] [pid 29424:tid 29441] [client 20.110.248.150:16563] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/muzu.php"] [unique_id "aZyCuPgElGDq6B8YX7BJYgAAAM8"]
[Tue Feb 24 00:39:20.645308 2026] [:error] [pid 29291:tid 29395] [client 20.110.248.150:6399] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/muzu.php"] [unique_id "aZyCuD2gdpbMAXIIRb1dpgAAAIg"]
[Tue Feb 24 00:39:21.164877 2026] [:error] [pid 29290:tid 29367] [client 20.110.248.150:6101] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/muzu.php"] [unique_id "aZyCuSURJ6Xg7pEW8XYMoAAAAEo"]
[Tue Feb 24 00:39:21.605924 2026] [:error] [pid 29291:tid 29403] [client 20.110.248.150:9274] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/reze.php"] [unique_id "aZyCuT2gdpbMAXIIRb1dqgAAAI8"]
[Tue Feb 24 00:39:22.048946 2026] [:error] [pid 29290:tid 29365] [client 20.110.248.150:1687] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/reze.php"] [unique_id "aZyCuiURJ6Xg7pEW8XYMogAAAEg"]
[Tue Feb 24 00:39:22.477988 2026] [:error] [pid 29424:tid 29436] [client 20.110.248.150:15318] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/reze.php"] [unique_id "aZyCuvgElGDq6B8YX7BJZgAAAMo"]
[Tue Feb 24 00:39:22.933694 2026] [:error] [pid 29424:tid 29429] [client 20.110.248.150:6351] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/reze.php"] [unique_id "aZyCuvgElGDq6B8YX7BJaAAAAMM"]
[Tue Feb 24 00:39:23.389510 2026] [:error] [pid 29424:tid 29448] [client 20.110.248.150:6355] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/styll.php"] [unique_id "aZyCu_gElGDq6B8YX7BJaQAAANY"]
[Tue Feb 24 00:39:23.849700 2026] [:error] [pid 29424:tid 29426] [client 20.110.248.150:15722] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/styll.php"] [unique_id "aZyCu_gElGDq6B8YX7BJbAAAAMA"]
[Tue Feb 24 00:39:24.312198 2026] [:error] [pid 60063:tid 60067] [client 20.110.248.150:1858] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/styll.php"] [unique_id "aZyCvE_6t1uQomVVdUNBSwAAAQI"]
[Tue Feb 24 00:39:24.765159 2026] [:error] [pid 29289:tid 29303] [client 20.110.248.150:13674] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/styll.php"] [unique_id "aZyCvPSAX3I9FAhm7jm92wAAAAo"]
[Tue Feb 24 00:39:25.239815 2026] [:error] [pid 29291:tid 29394] [client 20.110.248.150:13479] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x7.php"] [unique_id "aZyCvT2gdpbMAXIIRb1drgAAAIc"]
[Tue Feb 24 00:39:25.658322 2026] [:error] [pid 60063:tid 60088] [client 20.110.248.150:12595] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x7.php"] [unique_id "aZyCvU_6t1uQomVVdUNBUAAAARc"]
[Tue Feb 24 00:39:26.080282 2026] [:error] [pid 60063:tid 60069] [client 20.110.248.150:15739] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x7.php"] [unique_id "aZyCvk_6t1uQomVVdUNBUwAAAQQ"]
[Tue Feb 24 00:39:26.562189 2026] [:error] [pid 29424:tid 29432] [client 20.110.248.150:13679] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x7.php"] [unique_id "aZyCvvgElGDq6B8YX7BJbwAAAMY"]
[Tue Feb 24 00:39:27.005578 2026] [:error] [pid 60063:tid 60084] [client 20.110.248.150:1923] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/thebe.php"] [unique_id "aZyCv0_6t1uQomVVdUNBWAAAARM"]
[Tue Feb 24 00:39:27.471912 2026] [:error] [pid 60063:tid 60082] [client 20.110.248.150:1678] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/thebe.php"] [unique_id "aZyCv0_6t1uQomVVdUNBXAAAARE"]
[Tue Feb 24 00:39:27.933172 2026] [:error] [pid 29424:tid 29439] [client 20.110.248.150:16530] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/thebe.php"] [unique_id "aZyCv_gElGDq6B8YX7BJcgAAAM0"]
[Tue Feb 24 00:39:28.389890 2026] [:error] [pid 29424:tid 29435] [client 20.110.248.150:12442] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/thebe.php"] [unique_id "aZyCwPgElGDq6B8YX7BJcwAAAMk"]
[Tue Feb 24 00:39:28.832523 2026] [:error] [pid 60063:tid 60074] [client 20.110.248.150:13695] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ddd.php"] [unique_id "aZyCwE_6t1uQomVVdUNBYQAAAQk"]
[Tue Feb 24 00:39:29.311836 2026] [:error] [pid 60063:tid 60065] [client 20.110.248.150:12439] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ddd.php"] [unique_id "aZyCwU_6t1uQomVVdUNBaQAAAQA"]
[Tue Feb 24 00:39:29.741771 2026] [:error] [pid 29291:tid 29413] [client 20.110.248.150:2842] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ddd.php"] [unique_id "aZyCwT2gdpbMAXIIRb1dtwAAAJg"]
[Tue Feb 24 00:39:30.226992 2026] [:error] [pid 29424:tid 29439] [client 20.110.248.150:13442] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ddd.php"] [unique_id "aZyCwvgElGDq6B8YX7BJhAAAAM0"]
[Tue Feb 24 00:39:30.715694 2026] [:error] [pid 29290:tid 29375] [client 20.110.248.150:6687] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bgymj.php"] [unique_id "aZyCwiURJ6Xg7pEW8XYMpgAAAFE"]
[Tue Feb 24 00:39:31.161260 2026] [:error] [pid 60063:tid 60079] [client 20.110.248.150:1684] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bgymj.php"] [unique_id "aZyCw0_6t1uQomVVdUNBfwAAAQ4"]
[Tue Feb 24 00:39:31.658063 2026] [:error] [pid 29424:tid 29430] [client 20.110.248.150:7894] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bgymj.php"] [unique_id "aZyCw_gElGDq6B8YX7BJlgAAAMQ"]
[Tue Feb 24 00:39:32.197725 2026] [:error] [pid 29424:tid 29448] [client 20.110.248.150:7903] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bgymj.php"] [unique_id "aZyCxPgElGDq6B8YX7BJmwAAANY"]
[Tue Feb 24 00:39:32.640567 2026] [:error] [pid 29424:tid 29441] [client 20.110.248.150:1927] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/twenty/twenty.php"] [unique_id "aZyCxPgElGDq6B8YX7BJnQAAAM8"]
[Tue Feb 24 00:39:33.140318 2026] [:error] [pid 29424:tid 29433] [client 20.110.248.150:1978] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/twenty/twenty.php"] [unique_id "aZyCxfgElGDq6B8YX7BJnwAAAMc"]
[Tue Feb 24 00:39:33.629851 2026] [:error] [pid 60063:tid 60070] [client 20.110.248.150:14833] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/twenty/twenty.php"] [unique_id "aZyCxU_6t1uQomVVdUNBiwAAAQU"]
[Tue Feb 24 00:39:34.092231 2026] [:error] [pid 60063:tid 60079] [client 20.110.248.150:12441] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/twenty/twenty.php"] [unique_id "aZyCxk_6t1uQomVVdUNBjQAAAQ4"]
[Tue Feb 24 00:39:34.539652 2026] [:error] [pid 60063:tid 60071] [client 20.110.248.150:12576] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ioxi.php"] [unique_id "aZyCxk_6t1uQomVVdUNBkAAAAQY"]
[Tue Feb 24 00:39:35.025318 2026] [:error] [pid 29424:tid 29440] [client 20.110.248.150:1861] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ioxi.php"] [unique_id "aZyCx_gElGDq6B8YX7BJowAAAM4"]
[Tue Feb 24 00:39:35.495012 2026] [:error] [pid 60063:tid 60080] [client 20.110.248.150:9316] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ioxi.php"] [unique_id "aZyCx0_6t1uQomVVdUNBlAAAAQ8"]
[Tue Feb 24 00:39:35.968443 2026] [:error] [pid 60063:tid 60081] [client 20.110.248.150:15743] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ioxi.php"] [unique_id "aZyCx0_6t1uQomVVdUNBlgAAARA"]
[Tue Feb 24 00:39:36.416183 2026] [:error] [pid 60063:tid 60069] [client 20.110.248.150:12559] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xpwer1.php"] [unique_id "aZyCyE_6t1uQomVVdUNBmAAAAQQ"]
[Tue Feb 24 00:39:36.895617 2026] [:error] [pid 29291:tid 29387] [client 20.110.248.150:11894] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xpwer1.php"] [unique_id "aZyCyD2gdpbMAXIIRb1d0AAAAIA"]
[Tue Feb 24 00:39:37.362441 2026] [:error] [pid 29289:tid 29315] [client 20.110.248.150:15706] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xpwer1.php"] [unique_id "aZyCyfSAX3I9FAhm7jm93wAAABY"]
[Tue Feb 24 00:39:37.824668 2026] [:error] [pid 29291:tid 29394] [client 20.110.248.150:12471] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xpwer1.php"] [unique_id "aZyCyT2gdpbMAXIIRb1d0QAAAIc"]
[Tue Feb 24 00:39:38.272446 2026] [:error] [pid 29424:tid 29435] [client 20.110.248.150:3525] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lala.php"] [unique_id "aZyCyvgElGDq6B8YX7BJpwAAAMk"]
[Tue Feb 24 00:39:38.773923 2026] [:error] [pid 29424:tid 29439] [client 20.110.248.150:7927] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lala.php"] [unique_id "aZyCyvgElGDq6B8YX7BJqQAAAM0"]
[Tue Feb 24 00:39:39.283260 2026] [:error] [pid 29290:tid 29361] [client 20.110.248.150:13497] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lala.php"] [unique_id "aZyCyyURJ6Xg7pEW8XYMrQAAAEQ"]
[Tue Feb 24 00:39:39.771953 2026] [:error] [pid 29290:tid 29378] [client 20.110.248.150:6491] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lala.php"] [unique_id "aZyCyyURJ6Xg7pEW8XYMrgAAAFQ"]
[Tue Feb 24 00:39:40.258181 2026] [:error] [pid 29291:tid 29405] [client 20.110.248.150:1972] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/about.php"] [unique_id "aZyCzD2gdpbMAXIIRb1d0wAAAJE"]
[Tue Feb 24 00:39:40.741867 2026] [:error] [pid 60063:tid 60078] [client 20.110.248.150:2638] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/about.php"] [unique_id "aZyCzE_6t1uQomVVdUNBnAAAAQ0"]
[Tue Feb 24 00:39:41.234321 2026] [:error] [pid 60063:tid 60082] [client 20.110.248.150:4393] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/about.php"] [unique_id "aZyCzU_6t1uQomVVdUNBoAAAARE"]
[Tue Feb 24 00:39:41.710673 2026] [:error] [pid 60063:tid 60089] [client 20.110.248.150:1895] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/about.php"] [unique_id "aZyCzU_6t1uQomVVdUNBogAAARg"]
[Tue Feb 24 00:39:42.214803 2026] [:error] [pid 60063:tid 60083] [client 20.110.248.150:12465] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/images/commentv.php"] [unique_id "aZyCzk_6t1uQomVVdUNBpAAAARI"]
[Tue Feb 24 00:39:42.676177 2026] [:error] [pid 60063:tid 60087] [client 20.110.248.150:1753] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/images/commentv.php"] [unique_id "aZyCzk_6t1uQomVVdUNBpQAAARY"]
[Tue Feb 24 00:39:43.111173 2026] [:error] [pid 29424:tid 29447] [client 20.110.248.150:15337] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/images/commentv.php"] [unique_id "aZyCz_gElGDq6B8YX7BJrQAAANU"]
[Tue Feb 24 00:39:43.592655 2026] [:error] [pid 60063:tid 60086] [client 20.110.248.150:6734] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/images/commentv.php"] [unique_id "aZyCz0_6t1uQomVVdUNBqQAAARU"]
[Tue Feb 24 00:39:44.010206 2026] [:error] [pid 60063:tid 60073] [client 20.110.248.150:1904] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aZyC0E_6t1uQomVVdUNBqwAAAQg"]
[Tue Feb 24 00:39:44.487642 2026] [:error] [pid 29424:tid 29446] [client 20.110.248.150:11616] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aZyC0PgElGDq6B8YX7BJrgAAANQ"]
[Tue Feb 24 00:39:44.983109 2026] [:error] [pid 29424:tid 29440] [client 20.110.248.150:12551] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aZyC0PgElGDq6B8YX7BJrwAAAM4"]
[Tue Feb 24 00:39:45.486478 2026] [:error] [pid 29290:tid 29369] [client 20.110.248.150:13921] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aZyC0SURJ6Xg7pEW8XYMrwAAAEs"]
[Tue Feb 24 00:39:45.971037 2026] [:error] [pid 29424:tid 29450] [client 20.110.248.150:11888] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aZyC0fgElGDq6B8YX7BJsQAAANg"]
[Tue Feb 24 00:39:46.411842 2026] [:error] [pid 29424:tid 29426] [client 20.110.248.150:11605] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aZyC0vgElGDq6B8YX7BJswAAAMA"]
[Tue Feb 24 00:39:46.885633 2026] [:error] [pid 29290:tid 29359] [client 20.110.248.150:2671] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aZyC0iURJ6Xg7pEW8XYMsgAAAEM"]
[Tue Feb 24 00:39:47.367517 2026] [:error] [pid 60063:tid 60083] [client 20.110.248.150:13474] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aZyC00_6t1uQomVVdUNBsgAAARI"]
[Tue Feb 24 00:39:47.870506 2026] [:error] [pid 29424:tid 29430] [client 20.110.248.150:1949] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aZyC0_gElGDq6B8YX7BJtQAAAMQ"]
[Tue Feb 24 00:39:48.307896 2026] [:error] [pid 29424:tid 29435] [client 20.110.248.150:3583] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aZyC1PgElGDq6B8YX7BJtwAAAMk"]
[Tue Feb 24 00:39:48.773123 2026] [:error] [pid 60063:tid 60086] [client 20.110.248.150:2673] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aZyC1E_6t1uQomVVdUNBtgAAARU"]
[Tue Feb 24 00:39:49.213833 2026] [:error] [pid 29424:tid 29439] [client 20.110.248.150:11854] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aZyC1fgElGDq6B8YX7BJuAAAAM0"]
[Tue Feb 24 00:39:49.692804 2026] [:error] [pid 29290:tid 29366] [client 20.110.248.150:2056] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/info.php"] [unique_id "aZyC1SURJ6Xg7pEW8XYMtAAAAEk"]
[Tue Feb 24 00:39:50.133512 2026] [:error] [pid 29424:tid 29436] [client 20.110.248.150:13459] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/info.php"] [unique_id "aZyC1vgElGDq6B8YX7BJugAAAMo"]
[Tue Feb 24 00:39:50.597192 2026] [:error] [pid 29424:tid 29438] [client 20.110.248.150:2666] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/info.php"] [unique_id "aZyC1vgElGDq6B8YX7BJvQAAAMw"]
[Tue Feb 24 00:39:51.110956 2026] [:error] [pid 29424:tid 29440] [client 20.110.248.150:6713] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/info.php"] [unique_id "aZyC1_gElGDq6B8YX7BJwAAAAM4"]
[Tue Feb 24 00:39:51.576322 2026] [:error] [pid 60063:tid 60080] [client 20.110.248.150:9281] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/about.php"] [unique_id "aZyC10_6t1uQomVVdUNBugAAAQ8"]
[Tue Feb 24 00:39:52.014069 2026] [:error] [pid 60063:tid 60069] [client 20.110.248.150:8775] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/about.php"] [unique_id "aZyC2E_6t1uQomVVdUNBvAAAAQQ"]
[Tue Feb 24 00:39:52.465402 2026] [:error] [pid 29289:tid 29316] [client 20.110.248.150:1967] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/about.php"] [unique_id "aZyC2PSAX3I9FAhm7jm94QAAABc"]
[Tue Feb 24 00:39:52.895615 2026] [:error] [pid 29424:tid 29449] [client 20.110.248.150:13949] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/about.php"] [unique_id "aZyC2PgElGDq6B8YX7BJxQAAANc"]
[Tue Feb 24 00:39:53.350153 2026] [:error] [pid 60063:tid 60065] [client 20.110.248.150:11609] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x/"] [unique_id "aZyC2U_6t1uQomVVdUNBwgAAAQA"]
[Tue Feb 24 00:39:53.828405 2026] [:error] [pid 60063:tid 60071] [client 20.110.248.150:2629] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x/"] [unique_id "aZyC2U_6t1uQomVVdUNBxQAAAQY"]
[Tue Feb 24 00:39:54.285609 2026] [:error] [pid 29291:tid 29410] [client 20.110.248.150:13693] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x/"] [unique_id "aZyC2j2gdpbMAXIIRb1d7AAAAJY"]
[Tue Feb 24 00:39:54.749752 2026] [:error] [pid 60063:tid 60066] [client 20.110.248.150:11353] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x/"] [unique_id "aZyC2k_6t1uQomVVdUNBxwAAAQE"]
[Tue Feb 24 00:39:55.228280 2026] [:error] [pid 60063:tid 60082] [client 20.110.248.150:6672] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/222.php"] [unique_id "aZyC20_6t1uQomVVdUNBygAAARE"]
[Tue Feb 24 00:39:55.697211 2026] [:error] [pid 60063:tid 60084] [client 20.110.248.150:1707] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/222.php"] [unique_id "aZyC20_6t1uQomVVdUNBzQAAARM"]
[Tue Feb 24 00:39:56.155875 2026] [:error] [pid 60063:tid 60068] [client 20.110.248.150:11627] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/222.php"] [unique_id "aZyC3E_6t1uQomVVdUNB0gAAAQM"]
[Tue Feb 24 00:39:56.690639 2026] [:error] [pid 60063:tid 60070] [client 20.110.248.150:1910] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/222.php"] [unique_id "aZyC3E_6t1uQomVVdUNB1QAAAQU"]
[Tue Feb 24 00:39:57.170480 2026] [:error] [pid 60063:tid 60082] [client 20.110.248.150:11853] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/adminfuns.php"] [unique_id "aZyC3U_6t1uQomVVdUNB1wAAARE"]
[Tue Feb 24 00:39:57.643166 2026] [:error] [pid 60063:tid 60084] [client 20.110.248.150:12453] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/adminfuns.php"] [unique_id "aZyC3U_6t1uQomVVdUNB3QAAARM"]
[Tue Feb 24 00:39:58.127386 2026] [:error] [pid 60063:tid 60078] [client 20.110.248.150:6738] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/adminfuns.php"] [unique_id "aZyC3k_6t1uQomVVdUNB3wAAAQ0"]
[Tue Feb 24 00:39:58.573860 2026] [:error] [pid 60063:tid 60071] [client 20.110.248.150:1970] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/adminfuns.php"] [unique_id "aZyC3k_6t1uQomVVdUNB4wAAAQY"]
[Tue Feb 24 00:39:59.052486 2026] [:error] [pid 29291:tid 29395] [client 20.110.248.150:4490] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/PHPMailer/"] [unique_id "aZyC3z2gdpbMAXIIRb1d7wAAAIg"]
[Tue Feb 24 00:39:59.506573 2026] [:error] [pid 60063:tid 60066] [client 20.110.248.150:6710] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/PHPMailer/"] [unique_id "aZyC30_6t1uQomVVdUNB6AAAAQE"]
[Tue Feb 24 00:39:59.952324 2026] [:error] [pid 29424:tid 29430] [client 20.110.248.150:2547] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/PHPMailer/"] [unique_id "aZyC3_gElGDq6B8YX7BJ0gAAAMQ"]
[Tue Feb 24 00:40:00.418676 2026] [:error] [pid 29424:tid 29437] [client 20.110.248.150:13189] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/PHPMailer/"] [unique_id "aZyC4PgElGDq6B8YX7BJ0wAAAMs"]
[Tue Feb 24 00:40:00.861230 2026] [:error] [pid 29290:tid 29362] [client 20.110.248.150:8788] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xx.php"] [unique_id "aZyC4CURJ6Xg7pEW8XYMtQAAAEU"]
[Tue Feb 24 00:40:01.327935 2026] [:error] [pid 29290:tid 29371] [client 20.110.248.150:1774] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xx.php"] [unique_id "aZyC4SURJ6Xg7pEW8XYMtgAAAE0"]
[Tue Feb 24 00:40:01.794838 2026] [:error] [pid 29424:tid 29445] [client 20.110.248.150:6708] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xx.php"] [unique_id "aZyC4fgElGDq6B8YX7BJ1wAAANM"]
[Tue Feb 24 00:40:02.298917 2026] [:error] [pid 29291:tid 29387] [client 20.110.248.150:4719] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xx.php"] [unique_id "aZyC4j2gdpbMAXIIRb1d8wAAAIA"]
[Tue Feb 24 00:40:02.754039 2026] [:error] [pid 29291:tid 29389] [client 20.110.248.150:13909] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aZyC4j2gdpbMAXIIRb1d9AAAAII"]
[Tue Feb 24 00:40:03.209158 2026] [:error] [pid 29291:tid 29394] [client 20.110.248.150:3589] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aZyC4z2gdpbMAXIIRb1d9QAAAIc"]
[Tue Feb 24 00:40:03.704259 2026] [:error] [pid 29291:tid 29405] [client 20.110.248.150:11599] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aZyC4z2gdpbMAXIIRb1d9wAAAJE"]
[Tue Feb 24 00:40:04.177280 2026] [:error] [pid 29291:tid 29400] [client 20.110.248.150:2626] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aZyC5D2gdpbMAXIIRb1d-AAAAI0"]
[Tue Feb 24 00:40:04.633595 2026] [:error] [pid 29291:tid 29407] [client 20.110.248.150:11619] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f5.php"] [unique_id "aZyC5D2gdpbMAXIIRb1d-QAAAJM"]
[Tue Feb 24 00:40:05.097544 2026] [:error] [pid 29291:tid 29412] [client 20.110.248.150:14079] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f5.php"] [unique_id "aZyC5T2gdpbMAXIIRb1d-gAAAJc"]
[Tue Feb 24 00:40:05.536086 2026] [:error] [pid 29291:tid 29392] [client 20.110.248.150:6671] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f5.php"] [unique_id "aZyC5T2gdpbMAXIIRb1d_AAAAIU"]
[Tue Feb 24 00:40:05.990265 2026] [:error] [pid 29291:tid 29390] [client 20.110.248.150:1108] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f5.php"] [unique_id "aZyC5T2gdpbMAXIIRb1d_QAAAIM"]
[Tue Feb 24 00:40:06.461146 2026] [:error] [pid 29424:tid 29436] [client 20.110.248.150:1730] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/flower.php"] [unique_id "aZyC5vgElGDq6B8YX7BJ4wAAAMo"]
[Tue Feb 24 00:40:06.931199 2026] [:error] [pid 29424:tid 29430] [client 20.110.248.150:5900] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/flower.php"] [unique_id "aZyC5vgElGDq6B8YX7BJ5AAAAMQ"]
[Tue Feb 24 00:40:07.378958 2026] [proxy_fcgi:error] [pid 29289:tid 29305] [client 20.110.248.150:14072] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 00:40:07.592601 2026] [proxy_fcgi:error] [pid 29289:tid 29301] [client 20.110.248.150:14072] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 00:40:07.804614 2026] [proxy_fcgi:error] [pid 29289:tid 29293] [client 20.110.248.150:14072] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 00:40:08.440611 2026] [proxy_fcgi:error] [pid 29289:tid 29311] [client 20.110.248.150:14072] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 00:40:08.649201 2026] [:error] [pid 29289:tid 29304] [client 20.110.248.150:14072] [client 20.110.248.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aZyC6PSAX3I9FAhm7jm97gAAAAs"]
[Tue Feb 24 00:40:09.114953 2026] [proxy_fcgi:error] [pid 60063:tid 60087] [client 20.110.248.150:11328] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 00:40:09.317087 2026] [proxy_fcgi:error] [pid 60063:tid 60074] [client 20.110.248.150:11328] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 00:40:09.531360 2026] [proxy_fcgi:error] [pid 60063:tid 60080] [client 20.110.248.150:11328] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 00:40:09.733624 2026] [proxy_fcgi:error] [pid 60063:tid 60078] [client 20.110.248.150:11328] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 00:40:09.938821 2026] [proxy_fcgi:error] [pid 60063:tid 60068] [client 20.110.248.150:11328] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 00:40:10.137748 2026] [:error] [pid 60063:tid 60065] [client 20.110.248.150:11328] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x.php"] [unique_id "aZyC6k_6t1uQomVVdUNB_AAAAQA"]
[Tue Feb 24 00:40:10.563837 2026] [:error] [pid 29424:tid 29426] [client 20.110.248.150:4516] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x.php"] [unique_id "aZyC6vgElGDq6B8YX7BJ6gAAAMA"]
[Tue Feb 24 00:40:11.024356 2026] [:error] [pid 60063:tid 60071] [client 20.110.248.150:5414] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x.php"] [unique_id "aZyC60_6t1uQomVVdUNB_gAAAQY"]
[Tue Feb 24 00:40:11.464170 2026] [:error] [pid 29291:tid 29399] [client 20.110.248.150:5406] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x.php"] [unique_id "aZyC6z2gdpbMAXIIRb1eAQAAAIw"]
[Tue Feb 24 00:40:11.890097 2026] [:error] [pid 60063:tid 60075] [client 20.110.248.150:5903] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xxxx.php"] [unique_id "aZyC60_6t1uQomVVdUNB_wAAAQo"]
[Tue Feb 24 00:40:12.339952 2026] [:error] [pid 60063:tid 60082] [client 20.110.248.150:14058] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xxxx.php"] [unique_id "aZyC7E_6t1uQomVVdUNCAgAAARE"]
[Tue Feb 24 00:40:12.797561 2026] [:error] [pid 29291:tid 29388] [client 20.110.248.150:4516] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xxxx.php"] [unique_id "aZyC7D2gdpbMAXIIRb1eAwAAAIE"]
[Tue Feb 24 00:40:13.283953 2026] [:error] [pid 29289:tid 29306] [client 20.110.248.150:3608] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xxxx.php"] [unique_id "aZyC7fSAX3I9FAhm7jm98AAAAA0"]
[Tue Feb 24 00:40:13.722488 2026] [:error] [pid 29290:tid 29361] [client 20.110.248.150:1142] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class.php"] [unique_id "aZyC7SURJ6Xg7pEW8XYMvQAAAEQ"]
[Tue Feb 24 00:40:14.173090 2026] [:error] [pid 29289:tid 29314] [client 20.110.248.150:7273] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class.php"] [unique_id "aZyC7vSAX3I9FAhm7jm98QAAABU"]
[Tue Feb 24 00:40:14.652689 2026] [:error] [pid 29424:tid 29432] [client 20.110.248.150:5941] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class.php"] [unique_id "aZyC7vgElGDq6B8YX7BJ7wAAAMY"]
[Tue Feb 24 00:40:15.124229 2026] [:error] [pid 29290:tid 29378] [client 20.110.248.150:6751] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class.php"] [unique_id "aZyC7yURJ6Xg7pEW8XYMvgAAAFQ"]
[Tue Feb 24 00:40:15.549910 2026] [:error] [pid 29290:tid 29369] [client 20.110.248.150:5895] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f35.php"] [unique_id "aZyC7yURJ6Xg7pEW8XYMvwAAAEs"]
[Tue Feb 24 00:40:16.004956 2026] [:error] [pid 60063:tid 60081] [client 20.110.248.150:4704] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f35.php"] [unique_id "aZyC8E_6t1uQomVVdUNCBAAAARA"]
[Tue Feb 24 00:40:16.458236 2026] [:error] [pid 60063:tid 60086] [client 20.110.248.150:1115] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f35.php"] [unique_id "aZyC8E_6t1uQomVVdUNCBQAAARU"]
[Tue Feb 24 00:40:16.919664 2026] [:error] [pid 29424:tid 29450] [client 20.110.248.150:13897] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f35.php"] [unique_id "aZyC8PgElGDq6B8YX7BJ8QAAANg"]
[Tue Feb 24 00:40:17.344789 2026] [:error] [pid 60063:tid 60087] [client 20.110.248.150:4688] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/about.php"] [unique_id "aZyC8U_6t1uQomVVdUNCBwAAARY"]
[Tue Feb 24 00:40:17.802799 2026] [:error] [pid 60063:tid 60080] [client 20.110.248.150:13908] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/about.php"] [unique_id "aZyC8U_6t1uQomVVdUNCCgAAAQ8"]
[Tue Feb 24 00:40:18.289630 2026] [:error] [pid 29290:tid 29359] [client 20.110.248.150:13227] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/about.php"] [unique_id "aZyC8iURJ6Xg7pEW8XYMwAAAAEM"]
[Tue Feb 24 00:40:18.761854 2026] [:error] [pid 60063:tid 60068] [client 20.110.248.150:5912] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/about.php"] [unique_id "aZyC8k_6t1uQomVVdUNCDAAAAQM"]
[Tue Feb 24 00:40:19.214336 2026] [:error] [pid 60063:tid 60084] [client 20.110.248.150:13732] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/update/f35.php"] [unique_id "aZyC80_6t1uQomVVdUNCDgAAARM"]
[Tue Feb 24 00:40:19.682285 2026] [:error] [pid 29290:tid 29375] [client 20.110.248.150:7103] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/update/f35.php"] [unique_id "aZyC8yURJ6Xg7pEW8XYMwgAAAFE"]
[Tue Feb 24 00:40:20.161491 2026] [:error] [pid 60063:tid 60079] [client 20.110.248.150:7049] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/update/f35.php"] [unique_id "aZyC9E_6t1uQomVVdUNCDwAAAQ4"]
[Tue Feb 24 00:40:20.588803 2026] [:error] [pid 60063:tid 60073] [client 20.110.248.150:15440] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/update/f35.php"] [unique_id "aZyC9E_6t1uQomVVdUNCEAAAAQg"]
[Tue Feb 24 00:40:21.058267 2026] [:error] [pid 29290:tid 29379] [client 20.110.248.150:3602] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aZyC9SURJ6Xg7pEW8XYMxwAAAFU"]
[Tue Feb 24 00:40:21.523174 2026] [:error] [pid 29290:tid 29376] [client 20.110.248.150:7097] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aZyC9SURJ6Xg7pEW8XYMyAAAAFI"]
[Tue Feb 24 00:40:21.984171 2026] [:error] [pid 29290:tid 29374] [client 20.110.248.150:14052] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aZyC9SURJ6Xg7pEW8XYMygAAAFA"]
[Tue Feb 24 00:40:22.425342 2026] [:error] [pid 29424:tid 29441] [client 20.110.248.150:7073] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aZyC9vgElGDq6B8YX7BJ9QAAAM8"]
[Tue Feb 24 00:40:22.878331 2026] [:error] [pid 29424:tid 29438] [client 20.110.248.150:2690] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class-t.api.php"] [unique_id "aZyC9vgElGDq6B8YX7BJ9gAAAMw"]
[Tue Feb 24 00:40:23.326601 2026] [:error] [pid 29424:tid 29446] [client 20.110.248.150:14070] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class-t.api.php"] [unique_id "aZyC9_gElGDq6B8YX7BJ-AAAANQ"]
[Tue Feb 24 00:40:23.787715 2026] [:error] [pid 29291:tid 29402] [client 20.110.248.150:4531] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class-t.api.php"] [unique_id "aZyC9z2gdpbMAXIIRb1eBAAAAI4"]
[Tue Feb 24 00:40:24.228623 2026] [:error] [pid 29424:tid 29449] [client 20.110.248.150:5926] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class-t.api.php"] [unique_id "aZyC-PgElGDq6B8YX7BJ-gAAANc"]
[Tue Feb 24 00:40:24.677560 2026] [:error] [pid 29291:tid 29400] [client 20.110.248.150:15435] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/blurbs18.php"] [unique_id "aZyC-D2gdpbMAXIIRb1eBwAAAI0"]
[Tue Feb 24 00:40:25.144436 2026] [:error] [pid 29424:tid 29439] [client 20.110.248.150:3605] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/blurbs18.php"] [unique_id "aZyC-fgElGDq6B8YX7BJ_AAAAM0"]
[Tue Feb 24 00:40:25.593809 2026] [:error] [pid 60063:tid 60082] [client 20.110.248.150:14059] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/blurbs18.php"] [unique_id "aZyC-U_6t1uQomVVdUNCEQAAARE"]
[Tue Feb 24 00:40:26.024483 2026] [:error] [pid 29424:tid 29432] [client 20.110.248.150:2545] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/blurbs18.php"] [unique_id "aZyC-vgElGDq6B8YX7BJ_gAAAMY"]
[Tue Feb 24 00:40:26.480562 2026] [:error] [pid 60063:tid 60081] [client 20.110.248.150:5416] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aZyC-k_6t1uQomVVdUNCFAAAARA"]
[Tue Feb 24 00:40:26.939644 2026] [:error] [pid 60063:tid 60087] [client 20.110.248.150:10570] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aZyC-k_6t1uQomVVdUNCFgAAARY"]
[Tue Feb 24 00:40:27.401970 2026] [:error] [pid 60063:tid 60074] [client 20.110.248.150:2739] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aZyC-0_6t1uQomVVdUNCGAAAAQk"]
[Tue Feb 24 00:40:27.855383 2026] [:error] [pid 60063:tid 60085] [client 20.110.248.150:15473] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aZyC-0_6t1uQomVVdUNCGwAAARQ"]
[Tue Feb 24 00:40:28.270607 2026] [:error] [pid 60063:tid 60079] [client 20.110.248.150:4486] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aZyC_E_6t1uQomVVdUNCHQAAAQ4"]
[Tue Feb 24 00:40:28.713105 2026] [:error] [pid 29424:tid 29450] [client 20.110.248.150:2975] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aZyC_PgElGDq6B8YX7BKAAAAANg"]
[Tue Feb 24 00:40:29.166744 2026] [:error] [pid 60063:tid 60081] [client 20.110.248.150:7471] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aZyC_U_6t1uQomVVdUNCIQAAARA"]
[Tue Feb 24 00:40:29.579633 2026] [:error] [pid 60063:tid 60069] [client 20.110.248.150:5294] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aZyC_U_6t1uQomVVdUNCJAAAAQQ"]
[Tue Feb 24 00:40:30.007157 2026] [:error] [pid 60063:tid 60089] [client 20.110.248.150:5295] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "aZyC_k_6t1uQomVVdUNCJgAAARg"]
[Tue Feb 24 00:40:30.477480 2026] [:error] [pid 60063:tid 60080] [client 20.110.248.150:7086] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "aZyC_k_6t1uQomVVdUNCKAAAAQ8"]
[Tue Feb 24 00:40:30.905384 2026] [:error] [pid 60063:tid 60077] [client 20.110.248.150:10360] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "aZyC_k_6t1uQomVVdUNCKgAAAQw"]
[Tue Feb 24 00:40:31.358046 2026] [:error] [pid 29289:tid 29314] [client 20.110.248.150:5422] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "aZyC__SAX3I9FAhm7jm9_gAAABU"]
[Tue Feb 24 00:40:31.799525 2026] [:error] [pid 29424:tid 29437] [client 20.110.248.150:2957] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/setup-config.php"] [unique_id "aZyC__gElGDq6B8YX7BKAwAAAMs"]
[Tue Feb 24 00:40:32.264227 2026] [:error] [pid 29290:tid 29359] [client 20.110.248.150:7045] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/setup-config.php"] [unique_id "aZyDACURJ6Xg7pEW8XYMzQAAAEM"]
[Tue Feb 24 00:40:32.702903 2026] [:error] [pid 29290:tid 29357] [client 20.110.248.150:14077] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/setup-config.php"] [unique_id "aZyDACURJ6Xg7pEW8XYMzgAAAEE"]
[Tue Feb 24 00:40:33.160618 2026] [:error] [pid 29424:tid 29445] [client 20.110.248.150:10344] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/setup-config.php"] [unique_id "aZyDAfgElGDq6B8YX7BKBwAAANM"]
[Tue Feb 24 00:40:33.602771 2026] [:error] [pid 29424:tid 29448] [client 20.110.248.150:5391] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aZyDAfgElGDq6B8YX7BKCAAAANY"]
[Tue Feb 24 00:40:34.063238 2026] [:error] [pid 29424:tid 29428] [client 20.110.248.150:5382] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aZyDAvgElGDq6B8YX7BKCQAAAMI"]
[Tue Feb 24 00:40:34.490645 2026] [:error] [pid 29424:tid 29440] [client 20.110.248.150:15426] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aZyDAvgElGDq6B8YX7BKDAAAAM4"]
[Tue Feb 24 00:40:34.944109 2026] [:error] [pid 29289:tid 29296] [client 20.110.248.150:3000] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aZyDAvSAX3I9FAhm7jm-AgAAAAM"]
[Tue Feb 24 00:40:35.374621 2026] [:error] [pid 29289:tid 29302] [client 20.110.248.150:2447] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/admin.php"] [unique_id "aZyDA_SAX3I9FAhm7jm-BAAAAAk"]
[Tue Feb 24 00:40:35.837870 2026] [:error] [pid 29289:tid 29304] [client 20.110.248.150:10317] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/admin.php"] [unique_id "aZyDA_SAX3I9FAhm7jm-BQAAAAs"]
[Tue Feb 24 00:40:36.266550 2026] [:error] [pid 29289:tid 29298] [client 20.110.248.150:5811] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/admin.php"] [unique_id "aZyDBPSAX3I9FAhm7jm-BgAAAAU"]
[Tue Feb 24 00:40:36.679102 2026] [:error] [pid 29291:tid 29390] [client 20.110.248.150:8669] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/admin.php"] [unique_id "aZyDBD2gdpbMAXIIRb1eCQAAAIM"]
[Tue Feb 24 00:40:37.113184 2026] [:error] [pid 29291:tid 29396] [client 20.110.248.150:7091] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bless11.php"] [unique_id "aZyDBT2gdpbMAXIIRb1eCgAAAIk"]
[Tue Feb 24 00:40:37.538184 2026] [:error] [pid 29289:tid 29316] [client 20.110.248.150:3163] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bless11.php"] [unique_id "aZyDBfSAX3I9FAhm7jm-CQAAABc"]
[Tue Feb 24 00:40:37.968941 2026] [:error] [pid 29290:tid 29382] [client 20.110.248.150:2445] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bless11.php"] [unique_id "aZyDBSURJ6Xg7pEW8XYM0gAAAFg"]
[Tue Feb 24 00:40:38.410172 2026] [:error] [pid 29289:tid 29295] [client 20.110.248.150:1090] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bless11.php"] [unique_id "aZyDBvSAX3I9FAhm7jm-CgAAAAI"]
[Tue Feb 24 00:40:38.829818 2026] [:error] [pid 29290:tid 29373] [client 20.110.248.150:2491] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/init.php"] [unique_id "aZyDBiURJ6Xg7pEW8XYM1AAAAE8"]
[Tue Feb 24 00:40:39.270595 2026] [:error] [pid 29424:tid 29441] [client 20.110.248.150:8952] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/init.php"] [unique_id "aZyDB_gElGDq6B8YX7BKEQAAAM8"]
[Tue Feb 24 00:40:39.713378 2026] [:error] [pid 29289:tid 29310] [client 20.110.248.150:7510] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/init.php"] [unique_id "aZyDB_SAX3I9FAhm7jm-DAAAABE"]
[Tue Feb 24 00:40:40.149093 2026] [:error] [pid 29289:tid 29306] [client 20.110.248.150:7511] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/init.php"] [unique_id "aZyDCPSAX3I9FAhm7jm-DQAAAA0"]
[Tue Feb 24 00:40:40.591712 2026] [:error] [pid 60063:tid 60069] [client 20.110.248.150:8913] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aZyDCE_6t1uQomVVdUNCLwAAAQQ"]
[Tue Feb 24 00:40:41.027333 2026] [:error] [pid 60063:tid 60071] [client 20.110.248.150:2717] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aZyDCU_6t1uQomVVdUNCMAAAAQY"]
[Tue Feb 24 00:40:41.506039 2026] [:error] [pid 29290:tid 29363] [client 20.110.248.150:7459] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aZyDCSURJ6Xg7pEW8XYM1wAAAEY"]
[Tue Feb 24 00:40:41.953242 2026] [:error] [pid 29290:tid 29380] [client 20.110.248.150:10605] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aZyDCSURJ6Xg7pEW8XYM2AAAAFY"]
[Tue Feb 24 00:40:42.395063 2026] [:error] [pid 29291:tid 29413] [client 20.110.248.150:2439] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/k.php"] [unique_id "aZyDCj2gdpbMAXIIRb1eDAAAAJg"]
[Tue Feb 24 00:40:42.835937 2026] [:error] [pid 29424:tid 29436] [client 20.110.248.150:5264] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/k.php"] [unique_id "aZyDCvgElGDq6B8YX7BKFQAAAMo"]
[Tue Feb 24 00:40:43.267921 2026] [:error] [pid 29424:tid 29428] [client 20.110.248.150:10597] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/k.php"] [unique_id "aZyDC_gElGDq6B8YX7BKFgAAAMI"]
[Tue Feb 24 00:40:43.698622 2026] [:error] [pid 29424:tid 29434] [client 20.110.248.150:2741] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/k.php"] [unique_id "aZyDC_gElGDq6B8YX7BKGQAAAMg"]
[Tue Feb 24 00:40:44.136367 2026] [:error] [pid 29424:tid 29432] [client 20.110.248.150:7458] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bless.php"] [unique_id "aZyDDPgElGDq6B8YX7BKHAAAAMY"]
[Tue Feb 24 00:40:44.579546 2026] [:error] [pid 29424:tid 29450] [client 20.110.248.150:7437] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bless.php"] [unique_id "aZyDDPgElGDq6B8YX7BKHQAAANg"]
[Tue Feb 24 00:40:44.990846 2026] [:error] [pid 29424:tid 29437] [client 20.110.248.150:7264] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bless.php"] [unique_id "aZyDDPgElGDq6B8YX7BKHwAAAMs"]
[Tue Feb 24 00:40:45.438197 2026] [:error] [pid 29290:tid 29357] [client 20.110.248.150:8924] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bless.php"] [unique_id "aZyDDSURJ6Xg7pEW8XYM2wAAAEE"]
[Tue Feb 24 00:40:45.864430 2026] [:error] [pid 29290:tid 29375] [client 20.110.248.150:2489] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/X7x.php"] [unique_id "aZyDDSURJ6Xg7pEW8XYM3QAAAFE"]
[Tue Feb 24 00:40:46.310533 2026] [:error] [pid 29424:tid 29427] [client 20.110.248.150:3146] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/X7x.php"] [unique_id "aZyDDvgElGDq6B8YX7BKIAAAAME"]
[Tue Feb 24 00:40:46.768025 2026] [:error] [pid 60063:tid 60065] [client 20.110.248.150:1829] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/X7x.php"] [unique_id "aZyDDk_6t1uQomVVdUNCMwAAAQA"]
[Tue Feb 24 00:40:47.192668 2026] [:error] [pid 60063:tid 60084] [client 20.110.248.150:10606] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/X7x.php"] [unique_id "aZyDD0_6t1uQomVVdUNCNAAAARM"]
[Tue Feb 24 00:40:47.628812 2026] [:error] [pid 29424:tid 29431] [client 20.110.248.150:5780] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/166.php"] [unique_id "aZyDD_gElGDq6B8YX7BKIgAAAMU"]
[Tue Feb 24 00:40:48.062071 2026] [:error] [pid 29290:tid 29371] [client 20.110.248.150:7475] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/166.php"] [unique_id "aZyDECURJ6Xg7pEW8XYM3wAAAE0"]
[Tue Feb 24 00:40:48.503630 2026] [:error] [pid 29424:tid 29436] [client 20.110.248.150:5255] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/166.php"] [unique_id "aZyDEPgElGDq6B8YX7BKJAAAAMo"]
[Tue Feb 24 00:40:48.947441 2026] [:error] [pid 29424:tid 29429] [client 20.110.248.150:10188] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/166.php"] [unique_id "aZyDEPgElGDq6B8YX7BKJQAAAMM"]
[Tue Feb 24 00:40:49.377997 2026] [:error] [pid 29424:tid 29448] [client 20.110.248.150:2749] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/plss3.php"] [unique_id "aZyDEfgElGDq6B8YX7BKJwAAANY"]
[Tue Feb 24 00:40:49.813333 2026] [:error] [pid 29424:tid 29435] [client 20.110.248.150:10704] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/plss3.php"] [unique_id "aZyDEfgElGDq6B8YX7BKKAAAAMk"]
[Tue Feb 24 00:40:50.246307 2026] [:error] [pid 29289:tid 29300] [client 20.110.248.150:2436] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/plss3.php"] [unique_id "aZyDEvSAX3I9FAhm7jm-FAAAAAc"]
[Tue Feb 24 00:40:50.686735 2026] [:error] [pid 60063:tid 60067] [client 20.110.248.150:4205] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/plss3.php"] [unique_id "aZyDEk_6t1uQomVVdUNCPgAAAQI"]
[Tue Feb 24 00:40:51.117741 2026] [:error] [pid 29424:tid 29447] [client 20.110.248.150:7504] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aZyDE_gElGDq6B8YX7BKKwAAANU"]
[Tue Feb 24 00:40:51.548615 2026] [:error] [pid 60063:tid 60079] [client 20.110.248.150:5604] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aZyDE0_6t1uQomVVdUNCQQAAAQ4"]
[Tue Feb 24 00:40:51.987171 2026] [:error] [pid 60063:tid 60070] [client 20.110.248.150:12551] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aZyDE0_6t1uQomVVdUNCQwAAAQU"]
[Tue Feb 24 00:40:52.422195 2026] [:error] [pid 29291:tid 29400] [client 20.110.248.150:10749] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aZyDFD2gdpbMAXIIRb1eEgAAAI0"]
[Tue Feb 24 00:40:52.876512 2026] [:error] [pid 29424:tid 29442] [client 20.110.248.150:7573] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admins.php"] [unique_id "aZyDFPgElGDq6B8YX7BKLQAAANA"]
[Tue Feb 24 00:40:53.318829 2026] [:error] [pid 29424:tid 29427] [client 20.110.248.150:7282] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admins.php"] [unique_id "aZyDFfgElGDq6B8YX7BKLwAAAME"]
[Tue Feb 24 00:40:53.745209 2026] [:error] [pid 29424:tid 29431] [client 20.110.248.150:1238] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admins.php"] [unique_id "aZyDFfgElGDq6B8YX7BKMQAAAMU"]
[Tue Feb 24 00:40:54.184547 2026] [:error] [pid 29424:tid 29429] [client 20.110.248.150:10707] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admins.php"] [unique_id "aZyDFvgElGDq6B8YX7BKMgAAAMM"]
[Tue Feb 24 00:40:54.624176 2026] [:error] [pid 29424:tid 29430] [client 20.110.248.150:10864] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp.php"] [unique_id "aZyDFvgElGDq6B8YX7BKNQAAAMQ"]
[Tue Feb 24 00:40:55.052834 2026] [:error] [pid 29424:tid 29440] [client 20.110.248.150:5263] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp.php"] [unique_id "aZyDF_gElGDq6B8YX7BKOAAAAM4"]
[Tue Feb 24 00:40:55.465114 2026] [:error] [pid 29424:tid 29434] [client 20.110.248.150:2572] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp.php"] [unique_id "aZyDF_gElGDq6B8YX7BKOQAAAMg"]
[Tue Feb 24 00:40:55.905475 2026] [:error] [pid 29424:tid 29450] [client 20.110.248.150:4189] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp.php"] [unique_id "aZyDF_gElGDq6B8YX7BKOwAAANg"]
[Tue Feb 24 00:40:56.339697 2026] [:error] [pid 29290:tid 29374] [client 20.110.248.150:7555] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/main.php"] [unique_id "aZyDGCURJ6Xg7pEW8XYM4gAAAFA"]
[Tue Feb 24 00:40:56.762965 2026] [:error] [pid 29290:tid 29358] [client 20.110.248.150:4187] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/main.php"] [unique_id "aZyDGCURJ6Xg7pEW8XYM5AAAAEI"]
[Tue Feb 24 00:40:57.200720 2026] [:error] [pid 29290:tid 29366] [client 20.110.248.150:6876] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/main.php"] [unique_id "aZyDGSURJ6Xg7pEW8XYM5gAAAEk"]
[Tue Feb 24 00:40:57.619271 2026] [:error] [pid 29290:tid 29380] [client 20.110.248.150:5814] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/main.php"] [unique_id "aZyDGSURJ6Xg7pEW8XYM6AAAAFY"]
[Tue Feb 24 00:40:58.041892 2026] [:error] [pid 29290:tid 29361] [client 20.110.248.150:14986] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a1.php"] [unique_id "aZyDGiURJ6Xg7pEW8XYM6gAAAEQ"]
[Tue Feb 24 00:40:58.466034 2026] [:error] [pid 29290:tid 29369] [client 20.110.248.150:10858] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a1.php"] [unique_id "aZyDGiURJ6Xg7pEW8XYM7AAAAEs"]
[Tue Feb 24 00:40:58.898841 2026] [:error] [pid 29291:tid 29394] [client 20.110.248.150:5270] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a1.php"] [unique_id "aZyDGj2gdpbMAXIIRb1eEwAAAIc"]
[Tue Feb 24 00:40:59.306983 2026] [:error] [pid 60063:tid 60066] [client 20.110.248.150:1234] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a1.php"] [unique_id "aZyDG0_6t1uQomVVdUNCSAAAAQE"]
[Tue Feb 24 00:40:59.740573 2026] [:error] [pid 29291:tid 29392] [client 20.110.248.150:9111] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lala.php"] [unique_id "aZyDGz2gdpbMAXIIRb1eFAAAAIU"]
[Tue Feb 24 00:41:00.162012 2026] [:error] [pid 29290:tid 29376] [client 20.110.248.150:4132] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lala.php"] [unique_id "aZyDHCURJ6Xg7pEW8XYM7wAAAFI"]
[Tue Feb 24 00:41:00.593028 2026] [:error] [pid 29291:tid 29412] [client 20.110.248.150:5773] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lala.php"] [unique_id "aZyDHD2gdpbMAXIIRb1eFwAAAJc"]
[Tue Feb 24 00:41:01.042216 2026] [:error] [pid 60063:tid 60078] [client 20.110.248.150:4165] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lala.php"] [unique_id "aZyDHU_6t1uQomVVdUNCSQAAAQ0"]
[Tue Feb 24 00:41:01.459013 2026] [:error] [pid 29424:tid 29429] [client 20.110.248.150:7532] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aaa.php"] [unique_id "aZyDHfgElGDq6B8YX7BKQAAAAMM"]
[Tue Feb 24 00:41:01.884839 2026] [:error] [pid 60063:tid 60068] [client 20.110.248.150:5766] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aaa.php"] [unique_id "aZyDHU_6t1uQomVVdUNCTQAAAQM"]
[Tue Feb 24 00:41:02.307188 2026] [:error] [pid 29424:tid 29439] [client 20.110.248.150:7497] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aaa.php"] [unique_id "aZyDHvgElGDq6B8YX7BKQgAAAM0"]
[Tue Feb 24 00:41:02.722929 2026] [:error] [pid 29291:tid 29391] [client 20.110.248.150:15039] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aaa.php"] [unique_id "aZyDHj2gdpbMAXIIRb1eGAAAAIQ"]
[Tue Feb 24 00:41:03.139183 2026] [:error] [pid 29290:tid 29366] [client 20.110.248.150:1845] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a2.php"] [unique_id "aZyDHyURJ6Xg7pEW8XYM8wAAAEk"]
[Tue Feb 24 00:41:03.558178 2026] [:error] [pid 29424:tid 29448] [client 20.110.248.150:15000] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a2.php"] [unique_id "aZyDH_gElGDq6B8YX7BKRAAAANY"]
[Tue Feb 24 00:41:03.977192 2026] [:error] [pid 29290:tid 29370] [client 20.110.248.150:13529] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a2.php"] [unique_id "aZyDHyURJ6Xg7pEW8XYM9QAAAEw"]
[Tue Feb 24 00:41:04.391788 2026] [:error] [pid 29424:tid 29440] [client 20.110.248.150:4170] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a2.php"] [unique_id "aZyDIPgElGDq6B8YX7BKRQAAAM4"]
[Tue Feb 24 00:41:04.812255 2026] [:error] [pid 29289:tid 29310] [client 20.110.248.150:7553] [client 20.110.248.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aZyDIPSAX3I9FAhm7jm-GgAAABE"]
[Tue Feb 24 00:41:06.254886 2026] [:error] [pid 29289:tid 29294] [client 20.110.248.150:4099] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jsond.php"] [unique_id "aZyDIvSAX3I9FAhm7jm-HAAAAAE"]
[Tue Feb 24 00:41:06.664971 2026] [:error] [pid 29289:tid 29305] [client 20.110.248.150:1219] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jsond.php"] [unique_id "aZyDIvSAX3I9FAhm7jm-HQAAAAw"]
[Tue Feb 24 00:41:07.083009 2026] [:error] [pid 29289:tid 29302] [client 20.110.248.150:10182] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jsond.php"] [unique_id "aZyDI_SAX3I9FAhm7jm-HwAAAAk"]
[Tue Feb 24 00:41:07.505140 2026] [:error] [pid 29289:tid 29304] [client 20.110.248.150:6963] [client 20.110.248.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jsond.php"] [unique_id "aZyDI_SAX3I9FAhm7jm-IgAAAAs"]
[Tue Feb 24 03:53:58.730786 2026] [proxy_fcgi:error] [pid 35620:tid 35715] [client 158.158.43.245:21966] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 03:53:59.206965 2026] [proxy_fcgi:error] [pid 35620:tid 35709] [client 158.158.43.245:21966] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 03:53:59.454093 2026] [proxy_fcgi:error] [pid 35620:tid 35707] [client 158.158.43.245:21966] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 03:53:59.995500 2026] [proxy_fcgi:error] [pid 35620:tid 35711] [client 158.158.43.245:21966] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 03:54:00.249600 2026] [proxy_fcgi:error] [pid 35620:tid 35708] [client 158.158.43.245:21966] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 03:54:00.657803 2026] [proxy_fcgi:error] [pid 35620:tid 35696] [client 158.158.43.245:21966] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 03:54:00.926573 2026] [proxy_fcgi:error] [pid 35620:tid 35693] [client 158.158.43.245:21966] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 03:54:01.170113 2026] [proxy_fcgi:error] [pid 35620:tid 35704] [client 158.158.43.245:21966] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 03:54:01.428449 2026] [proxy_fcgi:error] [pid 35620:tid 35712] [client 158.158.43.245:21966] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 03:54:01.675587 2026] [proxy_fcgi:error] [pid 35620:tid 35709] [client 158.158.43.245:21966] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 03:54:01.918616 2026] [:error] [pid 35620:tid 35698] [client 158.158.43.245:21966] [client 158.158.43.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/pp.php"] [unique_id "aZywWeUG0IdIPJfbDlyL8QAAAIY"]
[Tue Feb 24 03:54:04.364618 2026] [:error] [pid 35620:tid 35714] [client 158.158.43.245:23505] [client 158.158.43.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/pp.php"] [unique_id "aZywXOUG0IdIPJfbDlyL-wAAAJY"]
[Tue Feb 24 03:54:05.350461 2026] [:error] [pid 35620:tid 35694] [client 158.158.43.245:14368] [client 158.158.43.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/pp.php"] [unique_id "aZywXeUG0IdIPJfbDlyMAAAAAII"]
[Tue Feb 24 03:54:08.348830 2026] [:error] [pid 35730:tid 35733] [client 158.158.43.245:27498] [client 158.158.43.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/pp.php"] [unique_id "aZywYIMcji-bHft2OYBrFwAAAME"]
[Tue Feb 24 03:54:10.292995 2026] [:error] [pid 35610:tid 35660] [client 158.158.43.245:29596] [client 158.158.43.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rak.php"] [unique_id "aZywYivKq4UqUMA6RAlXqAAAABY"]
[Tue Feb 24 03:54:13.185993 2026] [:error] [pid 35619:tid 35665] [client 158.158.43.245:14364] [client 158.158.43.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rak.php"] [unique_id "aZywZYPpy3GNvEPipS6gCgAAAEA"]
[Tue Feb 24 03:54:23.863338 2026] [:error] [pid 35610:tid 35659] [client 158.158.43.245:28919] [client 158.158.43.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rak.php"] [unique_id "aZywbyvKq4UqUMA6RAlXrQAAABU"]
[Tue Feb 24 03:54:26.181764 2026] [:error] [pid 35620:tid 35712] [client 158.158.43.245:21362] [client 158.158.43.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rdfe.php"] [unique_id "aZywcuUG0IdIPJfbDlyMMwAAAJQ"]
[Tue Feb 24 03:54:27.133723 2026] [:error] [pid 35620:tid 35698] [client 158.158.43.245:38074] [client 158.158.43.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rdfe.php"] [unique_id "aZywc-UG0IdIPJfbDlyMNQAAAIY"]
[Tue Feb 24 03:54:27.877657 2026] [:error] [pid 35730:tid 35740] [client 158.158.43.245:31258] [client 158.158.43.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rdfe.php"] [unique_id "aZywc4Mcji-bHft2OYBrVwAAAMg"]
[Tue Feb 24 03:54:30.501057 2026] [:error] [pid 35619:tid 35685] [client 158.158.43.245:28635] [client 158.158.43.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rdfe.php"] [unique_id "aZywdoPpy3GNvEPipS6gKgAAAFQ"]
[Tue Feb 24 03:54:33.225013 2026] [:error] [pid 35620:tid 35692] [client 158.158.43.245:29207] [client 158.158.43.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sad.php"] [unique_id "aZyweeUG0IdIPJfbDlyMQQAAAIA"]
[Tue Feb 24 03:54:35.660881 2026] [:error] [pid 35620:tid 35696] [client 158.158.43.245:28868] [client 158.158.43.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sad.php"] [unique_id "aZywe-UG0IdIPJfbDlyMRwAAAIQ"]
[Tue Feb 24 03:54:39.077483 2026] [:error] [pid 35730:tid 35752] [client 158.158.43.245:28641] [client 158.158.43.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sad.php"] [unique_id "aZywf4Mcji-bHft2OYBrdgAAANQ"]
[Tue Feb 24 03:54:42.316181 2026] [:error] [pid 35619:tid 35688] [client 158.158.43.245:17767] [client 158.158.43.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sad.php"] [unique_id "aZywgoPpy3GNvEPipS6gOwAAAFc"]
[Tue Feb 24 03:54:45.276061 2026] [:error] [pid 35730:tid 35743] [client 158.158.43.245:23844] [client 158.158.43.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/shlo.php"] [unique_id "aZywhYMcji-bHft2OYBrggAAAMs"]
[Tue Feb 24 03:54:46.970000 2026] [:error] [pid 35730:tid 35739] [client 158.158.43.245:21637] [client 158.158.43.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/shlo.php"] [unique_id "aZywhoMcji-bHft2OYBrkQAAAMc"]
[Tue Feb 24 03:54:48.176062 2026] [:error] [pid 35619:tid 35678] [client 158.158.43.245:17738] [client 158.158.43.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/shlo.php"] [unique_id "aZywiIPpy3GNvEPipS6gRAAAAE0"]
[Tue Feb 24 03:54:48.991686 2026] [:error] [pid 35620:tid 35702] [client 158.158.43.245:28867] [client 158.158.43.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/shlo.php"] [unique_id "aZywiOUG0IdIPJfbDlyMYQAAAIo"]
[Tue Feb 24 03:54:50.466304 2026] [:error] [pid 35619:tid 35687] [client 158.158.43.245:14558] [client 158.158.43.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/yzkvrell.php"] [unique_id "aZywioPpy3GNvEPipS6gTAAAAFY"]
[Tue Feb 24 03:54:52.219690 2026] [:error] [pid 35619:tid 35678] [client 158.158.43.245:29226] [client 158.158.43.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/yzkvrell.php"] [unique_id "aZywjIPpy3GNvEPipS6gUwAAAE0"]
[Tue Feb 24 03:54:53.742251 2026] [:error] [pid 35730:tid 35735] [client 158.158.43.245:23822] [client 158.158.43.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/yzkvrell.php"] [unique_id "aZywjYMcji-bHft2OYBrqAAAAMM"]
[Tue Feb 24 03:54:55.295898 2026] [:error] [pid 35620:tid 35701] [client 158.158.43.245:29198] [client 158.158.43.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/yzkvrell.php"] [unique_id "aZywj-UG0IdIPJfbDlyMZAAAAIk"]
[Tue Feb 24 03:54:56.981359 2026] [:error] [pid 35730:tid 35733] [client 158.158.43.245:31836] [client 158.158.43.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wpxadmin.php"] [unique_id "aZywkIMcji-bHft2OYBrsQAAAME"]
[Tue Feb 24 03:54:58.674484 2026] [:error] [pid 35620:tid 35702] [client 158.158.43.245:17730] [client 158.158.43.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wpxadmin.php"] [unique_id "aZywkuUG0IdIPJfbDlyMbQAAAIo"]
[Tue Feb 24 03:55:00.029663 2026] [:error] [pid 35619:tid 35680] [client 158.158.43.245:23813] [client 158.158.43.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wpxadmin.php"] [unique_id "aZywlIPpy3GNvEPipS6gaAAAAE8"]
[Tue Feb 24 03:55:03.284265 2026] [proxy_fcgi:error] [pid 35610:tid 35660] [client 158.158.43.245:28893] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 03:55:03.529837 2026] [proxy_fcgi:error] [pid 35610:tid 35647] [client 158.158.43.245:28893] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 03:55:03.794578 2026] [proxy_fcgi:error] [pid 35610:tid 35652] [client 158.158.43.245:28893] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 03:55:04.038431 2026] [proxy_fcgi:error] [pid 35610:tid 35653] [client 158.158.43.245:28893] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 03:55:04.313704 2026] [proxy_fcgi:error] [pid 35610:tid 35659] [client 158.158.43.245:28893] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 03:55:04.559425 2026] [proxy_fcgi:error] [pid 35610:tid 35644] [client 158.158.43.245:28893] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 03:55:04.826002 2026] [proxy_fcgi:error] [pid 35610:tid 35661] [client 158.158.43.245:28893] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 03:55:05.069371 2026] [proxy_fcgi:error] [pid 35610:tid 35658] [client 158.158.43.245:28893] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 03:55:05.313589 2026] [proxy_fcgi:error] [pid 35610:tid 35643] [client 158.158.43.245:28893] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 03:55:05.557979 2026] [proxy_fcgi:error] [pid 35610:tid 35638] [client 158.158.43.245:28893] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 03:55:05.826499 2026] [proxy_fcgi:error] [pid 35610:tid 35645] [client 158.158.43.245:28893] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 03:55:06.069716 2026] [:error] [pid 35610:tid 35656] [client 158.158.43.245:28893] [client 158.158.43.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/v2.php"] [unique_id "aZywmivKq4UqUMA6RAlX7QAAABI"]
[Tue Feb 24 03:55:10.781426 2026] [:error] [pid 35730:tid 35752] [client 158.158.43.245:26486] [client 158.158.43.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/v2.php"] [unique_id "aZywnoMcji-bHft2OYBr3wAAANQ"]
[Tue Feb 24 03:55:21.416458 2026] [:error] [pid 35619:tid 35688] [client 158.158.43.245:30056] [client 158.158.43.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/v2.php"] [unique_id "aZywqYPpy3GNvEPipS6glQAAAFc"]
[Tue Feb 24 03:55:38.981583 2026] [:error] [pid 7426:tid 7443] [client 158.158.43.245:14588] [client 158.158.43.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aw.php"] [unique_id "aZywusIGFG0n2P45resbvAAAAAU"]
[Tue Feb 24 03:55:40.930527 2026] [:error] [pid 7520:tid 7530] [client 158.158.43.245:14531] [client 158.158.43.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aw.php"] [unique_id "aZywvOb_k3O9poYwAXrA1gAAAMM"]
[Tue Feb 24 03:55:42.637486 2026] [:error] [pid 7520:tid 7532] [client 158.158.43.245:31261] [client 158.158.43.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aw.php"] [unique_id "aZywvub_k3O9poYwAXrA2AAAAMU"]
[Tue Feb 24 03:55:46.258762 2026] [:error] [pid 7427:tid 7471] [client 158.158.43.245:29185] [client 158.158.43.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aw.php"] [unique_id "aZywwr0zRzoTNL1Z-6T9OAAAAEU"]
[Tue Feb 24 03:55:48.806892 2026] [:error] [pid 7428:tid 7500] [client 158.158.43.245:29187] [client 158.158.43.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xojryvch.php"] [unique_id "aZywxHEU0tUo-fMnLE-7JgAAAIc"]
[Tue Feb 24 03:55:55.154906 2026] [:error] [pid 7426:tid 7450] [client 158.158.43.245:14544] [client 158.158.43.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xojryvch.php"] [unique_id "aZywy8IGFG0n2P45rescIwAAAAw"]
[Tue Feb 24 03:55:59.035481 2026] [:error] [pid 7520:tid 7550] [client 158.158.43.245:38079] [client 158.158.43.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xojryvch.php"] [unique_id "aZywz-b_k3O9poYwAXrA8gAAANc"]
[Tue Feb 24 03:56:00.657185 2026] [:error] [pid 7520:tid 7532] [client 158.158.43.245:14567] [client 158.158.43.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xojryvch.php"] [unique_id "aZyw0Ob_k3O9poYwAXrA9QAAAMU"]
[Tue Feb 24 03:56:02.154618 2026] [:error] [pid 7520:tid 7543] [client 158.158.43.245:17749] [client 158.158.43.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/new4.php"] [unique_id "aZyw0ub_k3O9poYwAXrA-wAAANA"]
[Tue Feb 24 03:56:04.090907 2026] [:error] [pid 7428:tid 7513] [client 158.158.43.245:21644] [client 158.158.43.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/new4.php"] [unique_id "aZyw1HEU0tUo-fMnLE-7TgAAAJQ"]
[Tue Feb 24 03:56:06.448690 2026] [proxy_fcgi:error] [pid 7428:tid 7499] [client 158.158.43.245:30045] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 03:56:06.693517 2026] [proxy_fcgi:error] [pid 7428:tid 7503] [client 158.158.43.245:30045] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 03:56:06.937370 2026] [proxy_fcgi:error] [pid 7428:tid 7505] [client 158.158.43.245:30045] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 03:56:07.220219 2026] [proxy_fcgi:error] [pid 7428:tid 7500] [client 158.158.43.245:30045] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 03:56:07.941837 2026] [:error] [pid 7428:tid 7517] [client 158.158.43.245:30045] [client 158.158.43.245] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dwelectservices.com.au"] [uri "/fm.php"] [unique_id "aZyw13EU0tUo-fMnLE-7XQAAAJg"]
[Tue Feb 24 03:56:10.117642 2026] [proxy_fcgi:error] [pid 7427:tid 7468] [client 158.158.43.245:28665] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 03:56:10.368902 2026] [proxy_fcgi:error] [pid 7427:tid 7471] [client 158.158.43.245:28665] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 03:56:10.612541 2026] [proxy_fcgi:error] [pid 7427:tid 7475] [client 158.158.43.245:28665] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 03:56:10.855403 2026] [proxy_fcgi:error] [pid 7427:tid 7481] [client 158.158.43.245:28665] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 03:56:11.118819 2026] [proxy_fcgi:error] [pid 7427:tid 7476] [client 158.158.43.245:28665] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 03:56:11.380883 2026] [proxy_fcgi:error] [pid 7427:tid 7483] [client 158.158.43.245:28665] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 03:56:11.749983 2026] [proxy_fcgi:error] [pid 7427:tid 7484] [client 158.158.43.245:28665] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 03:56:12.362765 2026] [:error] [pid 7427:tid 7482] [client 158.158.43.245:28665] [client 158.158.43.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/trd.php"] [unique_id "aZyw3L0zRzoTNL1Z-6T9ZAAAAFA"]
[Tue Feb 24 03:56:13.954240 2026] [:error] [pid 7428:tid 7511] [client 158.158.43.245:30029] [client 158.158.43.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/trd.php"] [unique_id "aZyw3XEU0tUo-fMnLE-7awAAAJI"]
[Tue Feb 24 03:56:14.985987 2026] [:error] [pid 7520:tid 7537] [client 158.158.43.245:26451] [client 158.158.43.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/trd.php"] [unique_id "aZyw3ub_k3O9poYwAXrBFgAAAMo"]
[Tue Feb 24 03:56:16.224855 2026] [:error] [pid 7520:tid 7546] [client 158.158.43.245:21336] [client 158.158.43.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/trd.php"] [unique_id "aZyw4Ob_k3O9poYwAXrBIAAAANM"]
[Tue Feb 24 03:56:16.989531 2026] [:error] [pid 7428:tid 7499] [client 158.158.43.245:29242] [client 158.158.43.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/asd67.php"] [unique_id "aZyw4HEU0tUo-fMnLE-7cwAAAIY"]
[Tue Feb 24 03:56:19.647881 2026] [:error] [pid 7428:tid 7514] [client 158.158.43.245:17764] [client 158.158.43.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/asd67.php"] [unique_id "aZyw43EU0tUo-fMnLE-7fQAAAJU"]
[Tue Feb 24 03:56:21.325573 2026] [:error] [pid 7520:tid 7547] [client 158.158.43.245:38045] [client 158.158.43.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/asd67.php"] [unique_id "aZyw5eb_k3O9poYwAXrBJQAAANQ"]
[Tue Feb 24 03:56:22.919170 2026] [:error] [pid 7428:tid 7496] [client 158.158.43.245:17763] [client 158.158.43.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/asd67.php"] [unique_id "aZyw5nEU0tUo-fMnLE-7kAAAAIM"]
[Tue Feb 24 03:56:24.456398 2026] [:error] [pid 7427:tid 7480] [client 158.158.43.245:29211] [client 158.158.43.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mo.php"] [unique_id "aZyw6L0zRzoTNL1Z-6T9cwAAAE4"]
[Tue Feb 24 03:56:26.212976 2026] [:error] [pid 7426:tid 7451] [client 158.158.43.245:38057] [client 158.158.43.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mo.php"] [unique_id "aZyw6sIGFG0n2P45rescQQAAAA0"]
[Tue Feb 24 03:56:27.329248 2026] [:error] [pid 7428:tid 7500] [client 158.158.43.245:26495] [client 158.158.43.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mo.php"] [unique_id "aZyw63EU0tUo-fMnLE-7sgAAAIc"]
[Tue Feb 24 03:56:28.733240 2026] [:error] [pid 7427:tid 7489] [client 158.158.43.245:21320] [client 158.158.43.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mo.php"] [unique_id "aZyw7L0zRzoTNL1Z-6T9egAAAFc"]
[Tue Feb 24 03:56:29.602735 2026] [:error] [pid 7520:tid 7551] [client 158.158.43.245:14554] [client 158.158.43.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x.php"] [unique_id "aZyw7eb_k3O9poYwAXrBNgAAANg"]
[Tue Feb 24 03:56:30.989273 2026] [:error] [pid 7427:tid 7473] [client 158.158.43.245:17743] [client 158.158.43.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x.php"] [unique_id "aZyw7r0zRzoTNL1Z-6T9fQAAAEc"]
[Tue Feb 24 03:56:33.149787 2026] [:error] [pid 7520:tid 7542] [client 158.158.43.245:27469] [client 158.158.43.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x.php"] [unique_id "aZyw8eb_k3O9poYwAXrBRwAAAM8"]
[Tue Feb 24 03:56:34.879971 2026] [:error] [pid 7520:tid 7540] [client 158.158.43.245:28651] [client 158.158.43.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x.php"] [unique_id "aZyw8ub_k3O9poYwAXrBUgAAAM0"]
[Tue Feb 24 03:56:35.750316 2026] [:error] [pid 7520:tid 7547] [client 158.158.43.245:38075] [client 158.158.43.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nxx.php"] [unique_id "aZyw8-b_k3O9poYwAXrBVgAAANQ"]
[Tue Feb 24 03:56:37.379604 2026] [:error] [pid 7520:tid 7531] [client 158.158.43.245:28927] [client 158.158.43.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nxx.php"] [unique_id "aZyw9eb_k3O9poYwAXrBXAAAAMQ"]
[Tue Feb 24 03:56:39.016286 2026] [:error] [pid 7428:tid 7516] [client 158.158.43.245:28617] [client 158.158.43.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nxx.php"] [unique_id "aZyw93EU0tUo-fMnLE-70wAAAJc"]
[Tue Feb 24 03:56:40.979773 2026] [:error] [pid 7520:tid 7531] [client 158.158.43.245:38034] [client 158.158.43.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nxx.php"] [unique_id "aZyw-Ob_k3O9poYwAXrBZgAAAMQ"]
[Tue Feb 24 03:56:43.249881 2026] [:error] [pid 7520:tid 7538] [client 158.158.43.245:28650] [client 158.158.43.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/w3llstore.php"] [unique_id "aZyw--b_k3O9poYwAXrBbgAAAMs"]
[Tue Feb 24 03:56:48.135329 2026] [:error] [pid 7520:tid 7538] [client 158.158.43.245:27483] [client 158.158.43.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/w3llstore.php"] [unique_id "aZyxAOb_k3O9poYwAXrBegAAAMs"]
[Tue Feb 24 03:56:52.153336 2026] [:error] [pid 7427:tid 7471] [client 158.158.43.245:32849] [client 158.158.43.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/w3llstore.php"] [unique_id "aZyxBL0zRzoTNL1Z-6T9oAAAAEU"]
[Tue Feb 24 03:56:54.087680 2026] [:error] [pid 7428:tid 7510] [client 158.158.43.245:31405] [client 158.158.43.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/w3llstore.php"] [unique_id "aZyxBnEU0tUo-fMnLE-73gAAAJE"]
[Tue Feb 24 03:56:56.060636 2026] [:error] [pid 7520:tid 7533] [client 158.158.43.245:25378] [client 158.158.43.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/reyna.php"] [unique_id "aZyxCOb_k3O9poYwAXrBhAAAAMY"]
[Tue Feb 24 03:56:59.954527 2026] [:error] [pid 7426:tid 7450] [client 158.158.43.245:22132] [client 158.158.43.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/reyna.php"] [unique_id "aZyxC8IGFG0n2P45rescXwAAAAw"]
[Tue Feb 24 03:57:05.166601 2026] [:error] [pid 7520:tid 7527] [client 158.158.43.245:31076] [client 158.158.43.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/reyna.php"] [unique_id "aZyxEeb_k3O9poYwAXrBjAAAAMA"]
[Tue Feb 24 03:57:06.602134 2026] [:error] [pid 7520:tid 7540] [client 158.158.43.245:24620] [client 158.158.43.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/reyna.php"] [unique_id "aZyxEub_k3O9poYwAXrBkAAAAM0"]
[Tue Feb 24 03:57:08.281745 2026] [:error] [pid 7520:tid 7547] [client 158.158.43.245:29136] [client 158.158.43.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/yee.php"] [unique_id "aZyxFOb_k3O9poYwAXrBlwAAANQ"]
[Tue Feb 24 03:57:09.810946 2026] [:error] [pid 7520:tid 7533] [client 158.158.43.245:20684] [client 158.158.43.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/yee.php"] [unique_id "aZyxFeb_k3O9poYwAXrBmQAAAMY"]
[Tue Feb 24 03:57:11.129315 2026] [proxy_fcgi:error] [pid 7520:tid 7528] [client 158.158.43.245:32399] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 03:57:11.373340 2026] [proxy_fcgi:error] [pid 7520:tid 7549] [client 158.158.43.245:32399] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 03:57:11.634285 2026] [proxy_fcgi:error] [pid 7520:tid 7543] [client 158.158.43.245:32399] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 03:57:11.891480 2026] [proxy_fcgi:error] [pid 7520:tid 7551] [client 158.158.43.245:32399] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 06:24:43.455107 2026] [proxy_fcgi:error] [pid 37540:tid 37615] [client 20.14.131.24:44995] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 06:24:43.659334 2026] [proxy_fcgi:error] [pid 37540:tid 37622] [client 20.14.131.24:44995] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 06:24:44.089618 2026] [proxy_fcgi:error] [pid 37540:tid 37608] [client 20.14.131.24:44995] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 06:24:45.241954 2026] [:error] [pid 37540:tid 37617] [client 20.14.131.24:44995] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/class20.php"] [unique_id "aZzTrSahRAUBJS8hpJVqjQAAAI8"]
[Tue Feb 24 06:24:46.318091 2026] [:error] [pid 37644:tid 37656] [client 20.14.131.24:44947] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/class20.php"] [unique_id "aZzTrkLaEhVDwBRydH1YQAAAAMo"]
[Tue Feb 24 06:24:46.941620 2026] [:error] [pid 11672:tid 11682] [client 20.14.131.24:44934] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/class20.php"] [unique_id "aZzTrva0fhnmfPYq92ut7QAAAQg"]
[Tue Feb 24 06:24:47.495225 2026] [:error] [pid 37644:tid 37648] [client 20.14.131.24:45024] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/class20.php"] [unique_id "aZzTr0LaEhVDwBRydH1YQgAAAMI"]
[Tue Feb 24 06:24:48.108464 2026] [:error] [pid 37539:tid 37579] [client 20.14.131.24:45012] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/admin.php"] [unique_id "aZzTsHEnr46jUQep9z_TZAAAAEQ"]
[Tue Feb 24 06:24:48.815292 2026] [:error] [pid 37540:tid 37618] [client 20.14.131.24:44932] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/admin.php"] [unique_id "aZzTsCahRAUBJS8hpJVqjwAAAJA"]
[Tue Feb 24 06:24:49.637139 2026] [:error] [pid 37540:tid 37606] [client 20.14.131.24:44942] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/admin.php"] [unique_id "aZzTsSahRAUBJS8hpJVqlAAAAIQ"]
[Tue Feb 24 06:24:50.357207 2026] [:error] [pid 11672:tid 11684] [client 20.14.131.24:44944] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/admin.php"] [unique_id "aZzTsva0fhnmfPYq92ut8QAAAQo"]
[Tue Feb 24 06:24:51.202304 2026] [:error] [pid 37538:tid 37559] [client 20.14.131.24:44997] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/randkeyword.php"] [unique_id "aZzTsyynTiHZ9J0Y2nZpMQAAAAs"]
[Tue Feb 24 06:24:52.348858 2026] [:error] [pid 37538:tid 37552] [client 20.14.131.24:45049] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/randkeyword.php"] [unique_id "aZzTtCynTiHZ9J0Y2nZpMgAAAAQ"]
[Tue Feb 24 06:24:53.117486 2026] [:error] [pid 11672:tid 11676] [client 20.14.131.24:45007] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/randkeyword.php"] [unique_id "aZzTtfa0fhnmfPYq92ut9AAAAQI"]
[Tue Feb 24 06:24:53.788142 2026] [:error] [pid 11672:tid 11691] [client 20.14.131.24:45055] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/randkeyword.php"] [unique_id "aZzTtfa0fhnmfPYq92ut9wAAARE"]
[Tue Feb 24 06:24:54.671902 2026] [:error] [pid 37539:tid 37592] [client 20.14.131.24:45047] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/fwe.php"] [unique_id "aZzTtnEnr46jUQep9z_TaAAAAFE"]
[Tue Feb 24 06:24:55.448479 2026] [:error] [pid 37538:tid 37561] [client 20.14.131.24:45029] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/fwe.php"] [unique_id "aZzTtyynTiHZ9J0Y2nZpNQAAAA0"]
[Tue Feb 24 06:24:56.168423 2026] [:error] [pid 11672:tid 11694] [client 20.14.131.24:45031] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/fwe.php"] [unique_id "aZzTuPa0fhnmfPYq92ut-AAAARQ"]
[Tue Feb 24 06:24:56.832800 2026] [:error] [pid 11672:tid 11687] [client 20.14.131.24:45001] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/fwe.php"] [unique_id "aZzTuPa0fhnmfPYq92ut_QAAAQ0"]
[Tue Feb 24 06:24:57.404146 2026] [:error] [pid 11672:tid 11698] [client 20.14.131.24:44999] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/images/m.php"] [unique_id "aZzTufa0fhnmfPYq92ut_gAAARg"]
[Tue Feb 24 06:24:57.841136 2026] [:error] [pid 37644:tid 37658] [client 20.14.131.24:45011] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/images/m.php"] [unique_id "aZzTuULaEhVDwBRydH1YWAAAAMw"]
[Tue Feb 24 06:24:58.375984 2026] [:error] [pid 37644:tid 37654] [client 20.14.131.24:45028] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/images/m.php"] [unique_id "aZzTukLaEhVDwBRydH1YWgAAAMg"]
[Tue Feb 24 06:24:58.961829 2026] [:error] [pid 37644:tid 37657] [client 20.14.131.24:45051] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/images/m.php"] [unique_id "aZzTukLaEhVDwBRydH1YXQAAAMs"]
[Tue Feb 24 06:24:59.462956 2026] [:error] [pid 37644:tid 37667] [client 20.14.131.24:44982] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/g.php"] [unique_id "aZzTu0LaEhVDwBRydH1YYgAAANU"]
[Tue Feb 24 06:25:00.360442 2026] [:error] [pid 37644:tid 37662] [client 20.14.131.24:44940] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/g.php"] [unique_id "aZzTvELaEhVDwBRydH1YZgAAANA"]
[Tue Feb 24 06:25:00.921859 2026] [:error] [pid 37538:tid 37567] [client 20.14.131.24:44866] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/g.php"] [unique_id "aZzTvCynTiHZ9J0Y2nZpNwAAABM"]
[Tue Feb 24 06:25:01.586346 2026] [:error] [pid 37539:tid 37588] [client 20.14.131.24:44874] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/g.php"] [unique_id "aZzTvXEnr46jUQep9z_TagAAAE0"]
[Tue Feb 24 06:25:02.139182 2026] [:error] [pid 37644:tid 37651] [client 20.14.131.24:44938] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/tx1.php"] [unique_id "aZzTvkLaEhVDwBRydH1YcAAAAMU"]
[Tue Feb 24 06:25:02.612950 2026] [:error] [pid 37644:tid 37663] [client 20.14.131.24:45021] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/tx1.php"] [unique_id "aZzTvkLaEhVDwBRydH1YcwAAANE"]
[Tue Feb 24 06:25:03.077800 2026] [:error] [pid 37644:tid 37666] [client 20.14.131.24:45027] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/tx1.php"] [unique_id "aZzTv0LaEhVDwBRydH1YdgAAANQ"]
[Tue Feb 24 06:25:03.544784 2026] [:error] [pid 11672:tid 11696] [client 20.14.131.24:44946] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/tx1.php"] [unique_id "aZzTv_a0fhnmfPYq92uuAgAAARY"]
[Tue Feb 24 06:25:03.993485 2026] [:error] [pid 37538:tid 37558] [client 20.14.131.24:44941] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xv.php"] [unique_id "aZzTvyynTiHZ9J0Y2nZpOwAAAAo"]
[Tue Feb 24 06:25:04.686887 2026] [:error] [pid 37539:tid 37593] [client 20.14.131.24:44933] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xv.php"] [unique_id "aZzTwHEnr46jUQep9z_TawAAAFI"]
[Tue Feb 24 06:25:05.328647 2026] [:error] [pid 11672:tid 11674] [client 20.14.131.24:44948] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xv.php"] [unique_id "aZzTwfa0fhnmfPYq92uuBgAAAQA"]
[Tue Feb 24 06:25:05.803913 2026] [:error] [pid 37644:tid 37652] [client 20.14.131.24:45023] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xv.php"] [unique_id "aZzTwULaEhVDwBRydH1YegAAAMY"]
[Tue Feb 24 06:25:06.376525 2026] [:error] [pid 11672:tid 11697] [client 20.14.131.24:45048] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/x56.php"] [unique_id "aZzTwva0fhnmfPYq92uuCQAAARc"]
[Tue Feb 24 06:25:06.864204 2026] [:error] [pid 37644:tid 37649] [client 20.14.131.24:45036] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/x56.php"] [unique_id "aZzTwkLaEhVDwBRydH1YfAAAAMM"]
[Tue Feb 24 06:25:07.333637 2026] [:error] [pid 37644:tid 37664] [client 20.14.131.24:44951] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/x56.php"] [unique_id "aZzTw0LaEhVDwBRydH1YfQAAANI"]
[Tue Feb 24 06:25:07.760822 2026] [:error] [pid 37644:tid 37662] [client 20.14.131.24:44979] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/x56.php"] [unique_id "aZzTw0LaEhVDwBRydH1YfwAAANA"]
[Tue Feb 24 06:25:08.291493 2026] [:error] [pid 11672:tid 11686] [client 20.14.131.24:45033] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/htaccess.php"] [unique_id "aZzTxPa0fhnmfPYq92uuEAAAAQw"]
[Tue Feb 24 06:25:08.990278 2026] [:error] [pid 37540:tid 37607] [client 20.14.131.24:44994] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/htaccess.php"] [unique_id "aZzTxCahRAUBJS8hpJVqpwAAAIU"]
[Tue Feb 24 06:25:09.459999 2026] [:error] [pid 37644:tid 37661] [client 20.14.131.24:44937] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/htaccess.php"] [unique_id "aZzTxULaEhVDwBRydH1YhAAAAM8"]
[Tue Feb 24 06:25:09.958290 2026] [:error] [pid 37540:tid 37624] [client 20.14.131.24:45025] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/htaccess.php"] [unique_id "aZzTxSahRAUBJS8hpJVqqAAAAJY"]
[Tue Feb 24 06:25:10.596495 2026] [:error] [pid 37644:tid 37660] [client 20.14.131.24:44983] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/readme.php"] [unique_id "aZzTxkLaEhVDwBRydH1YiwAAAM4"]
[Tue Feb 24 06:25:11.277374 2026] [:error] [pid 37538:tid 37559] [client 20.14.131.24:44895] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/readme.php"] [unique_id "aZzTxyynTiHZ9J0Y2nZpQgAAAAs"]
[Tue Feb 24 06:25:11.818845 2026] [:error] [pid 37538:tid 37555] [client 20.14.131.24:44993] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/readme.php"] [unique_id "aZzTxyynTiHZ9J0Y2nZpQwAAAAc"]
[Tue Feb 24 06:25:12.376738 2026] [:error] [pid 37539:tid 37583] [client 20.14.131.24:44930] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/readme.php"] [unique_id "aZzTyHEnr46jUQep9z_TcQAAAEg"]
[Tue Feb 24 06:25:12.931828 2026] [:error] [pid 37644:tid 37667] [client 20.14.131.24:44952] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/x50.php"] [unique_id "aZzTyELaEhVDwBRydH1YlAAAANU"]
[Tue Feb 24 06:25:13.609609 2026] [:error] [pid 11672:tid 11689] [client 20.14.131.24:45014] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/x50.php"] [unique_id "aZzTyfa0fhnmfPYq92uuEwAAAQ8"]
[Tue Feb 24 06:25:14.271170 2026] [:error] [pid 37644:tid 37647] [client 20.14.131.24:45022] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/x50.php"] [unique_id "aZzTykLaEhVDwBRydH1YmwAAAME"]
[Tue Feb 24 06:25:14.885361 2026] [:error] [pid 37644:tid 37650] [client 20.14.131.24:45013] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/x50.php"] [unique_id "aZzTykLaEhVDwBRydH1YoAAAAMQ"]
[Tue Feb 24 06:25:15.360462 2026] [:error] [pid 37644:tid 37649] [client 20.14.131.24:45054] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/fv.php"] [unique_id "aZzTy0LaEhVDwBRydH1YogAAAMM"]
[Tue Feb 24 06:25:15.846622 2026] [:error] [pid 37644:tid 37648] [client 20.14.131.24:45010] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/fv.php"] [unique_id "aZzTy0LaEhVDwBRydH1YpQAAAMI"]
[Tue Feb 24 06:25:16.499093 2026] [:error] [pid 37644:tid 37658] [client 20.14.131.24:45006] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/fv.php"] [unique_id "aZzTzELaEhVDwBRydH1YqAAAAMw"]
[Tue Feb 24 06:25:17.005746 2026] [:error] [pid 37538:tid 37549] [client 20.14.131.24:45019] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/fv.php"] [unique_id "aZzTzSynTiHZ9J0Y2nZpRQAAAAE"]
[Tue Feb 24 06:25:17.566488 2026] [:error] [pid 37540:tid 37626] [client 20.14.131.24:45017] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/file.php"] [unique_id "aZzTzSahRAUBJS8hpJVqqwAAAJg"]
[Tue Feb 24 06:25:18.083499 2026] [:error] [pid 37644:tid 37660] [client 20.14.131.24:44953] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/file.php"] [unique_id "aZzTzkLaEhVDwBRydH1YrQAAAM4"]
[Tue Feb 24 06:25:18.571386 2026] [:error] [pid 37540:tid 37609] [client 20.14.131.24:44943] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/file.php"] [unique_id "aZzTziahRAUBJS8hpJVqrQAAAIc"]
[Tue Feb 24 06:25:19.109308 2026] [:error] [pid 37538:tid 37567] [client 20.14.131.24:44867] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/file.php"] [unique_id "aZzTzyynTiHZ9J0Y2nZpRgAAABM"]
[Tue Feb 24 06:25:19.634684 2026] [:error] [pid 11672:tid 11686] [client 20.14.131.24:45050] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/lsd.php"] [unique_id "aZzTz_a0fhnmfPYq92uuHAAAAQw"]
[Tue Feb 24 06:25:20.122569 2026] [:error] [pid 11672:tid 11692] [client 20.14.131.24:44931] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/lsd.php"] [unique_id "aZzT0Pa0fhnmfPYq92uuHgAAARI"]
[Tue Feb 24 06:25:20.628072 2026] [:error] [pid 11672:tid 11695] [client 20.14.131.24:44875] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/lsd.php"] [unique_id "aZzT0Pa0fhnmfPYq92uuIAAAARU"]
[Tue Feb 24 06:25:21.368228 2026] [:error] [pid 11672:tid 11677] [client 20.14.131.24:45030] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/lsd.php"] [unique_id "aZzT0fa0fhnmfPYq92uuIQAAAQM"]
[Tue Feb 24 06:25:22.014889 2026] [:error] [pid 37540:tid 37610] [client 20.14.131.24:45041] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/as.php"] [unique_id "aZzT0iahRAUBJS8hpJVquAAAAIg"]
[Tue Feb 24 06:25:22.490470 2026] [:error] [pid 11672:tid 11694] [client 20.14.131.24:44929] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/as.php"] [unique_id "aZzT0va0fhnmfPYq92uuJQAAARQ"]
[Tue Feb 24 06:25:23.010833 2026] [:error] [pid 11672:tid 11679] [client 20.14.131.24:44992] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/as.php"] [unique_id "aZzT0_a0fhnmfPYq92uuKAAAAQU"]
[Tue Feb 24 06:25:23.609307 2026] [:error] [pid 37539:tid 37576] [client 20.14.131.24:44954] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/as.php"] [unique_id "aZzT03Enr46jUQep9z_TfAAAAEE"]
[Tue Feb 24 06:25:24.118700 2026] [:error] [pid 37540:tid 37626] [client 20.14.131.24:44865] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wsd.php"] [unique_id "aZzT1CahRAUBJS8hpJVqugAAAJg"]
[Tue Feb 24 06:25:24.790248 2026] [:error] [pid 37539:tid 37598] [client 20.14.131.24:44877] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wsd.php"] [unique_id "aZzT1HEnr46jUQep9z_TfQAAAFc"]
[Tue Feb 24 06:25:25.228426 2026] [:error] [pid 37644:tid 37650] [client 20.14.131.24:45002] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wsd.php"] [unique_id "aZzT1ULaEhVDwBRydH1YsAAAAMQ"]
[Tue Feb 24 06:25:25.678259 2026] [:error] [pid 37644:tid 37659] [client 20.14.131.24:44968] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wsd.php"] [unique_id "aZzT1ULaEhVDwBRydH1YsQAAAM0"]
[Tue Feb 24 06:25:26.419174 2026] [:error] [pid 37644:tid 37660] [client 20.14.131.24:44975] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/gtc.php"] [unique_id "aZzT1kLaEhVDwBRydH1YtgAAAM4"]
[Tue Feb 24 06:25:26.969229 2026] [:error] [pid 11672:tid 11694] [client 20.14.131.24:44864] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/gtc.php"] [unique_id "aZzT1va0fhnmfPYq92uuLwAAARQ"]
[Tue Feb 24 06:25:27.501489 2026] [:error] [pid 11672:tid 11698] [client 20.14.131.24:44901] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/gtc.php"] [unique_id "aZzT1_a0fhnmfPYq92uuMgAAARg"]
[Tue Feb 24 06:25:28.105089 2026] [:error] [pid 11672:tid 11678] [client 20.14.131.24:44884] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/gtc.php"] [unique_id "aZzT2Pa0fhnmfPYq92uuMwAAAQQ"]
[Tue Feb 24 06:25:28.728830 2026] [:error] [pid 11672:tid 11676] [client 20.14.131.24:45005] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/atx.php"] [unique_id "aZzT2Pa0fhnmfPYq92uuNQAAAQI"]
[Tue Feb 24 06:25:29.330658 2026] [:error] [pid 37539:tid 37581] [client 20.14.131.24:45045] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/atx.php"] [unique_id "aZzT2XEnr46jUQep9z_TgQAAAEY"]
[Tue Feb 24 06:25:29.963449 2026] [:error] [pid 37540:tid 37605] [client 20.14.131.24:44961] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/atx.php"] [unique_id "aZzT2SahRAUBJS8hpJVqxgAAAIM"]
[Tue Feb 24 06:25:30.855026 2026] [:error] [pid 37644:tid 37658] [client 20.14.131.24:45015] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/atx.php"] [unique_id "aZzT2kLaEhVDwBRydH1YvgAAAMw"]
[Tue Feb 24 06:25:31.766426 2026] [:error] [pid 37644:tid 37651] [client 20.14.131.24:45046] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/z60.php"] [unique_id "aZzT20LaEhVDwBRydH1YxQAAAMU"]
[Tue Feb 24 06:25:32.655479 2026] [:error] [pid 37538:tid 37550] [client 20.14.131.24:45008] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/z60.php"] [unique_id "aZzT3CynTiHZ9J0Y2nZpTwAAAAI"]
[Tue Feb 24 06:25:33.609937 2026] [:error] [pid 11672:tid 11678] [client 20.14.131.24:45037] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/z60.php"] [unique_id "aZzT3fa0fhnmfPYq92uuQAAAAQQ"]
[Tue Feb 24 06:25:34.145995 2026] [:error] [pid 37540:tid 37603] [client 20.14.131.24:44990] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/z60.php"] [unique_id "aZzT3iahRAUBJS8hpJVqyAAAAIE"]
[Tue Feb 24 06:25:34.824384 2026] [:error] [pid 11672:tid 11683] [client 20.14.131.24:44945] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/403.php"] [unique_id "aZzT3va0fhnmfPYq92uuRAAAAQk"]
[Tue Feb 24 06:25:35.907545 2026] [:error] [pid 37540:tid 37623] [client 20.14.131.24:44949] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/403.php"] [unique_id "aZzT3yahRAUBJS8hpJVq0AAAAJU"]
[Tue Feb 24 06:25:36.648608 2026] [:error] [pid 37644:tid 37670] [client 20.14.131.24:44963] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/403.php"] [unique_id "aZzT4ELaEhVDwBRydH1YyQAAANg"]
[Tue Feb 24 06:25:37.696712 2026] [:error] [pid 11672:tid 11689] [client 20.14.131.24:44939] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/403.php"] [unique_id "aZzT4fa0fhnmfPYq92uuSgAAAQ8"]
[Tue Feb 24 06:25:38.255030 2026] [:error] [pid 37539:tid 37594] [client 20.14.131.24:45044] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/m.php"] [unique_id "aZzT4nEnr46jUQep9z_ThwAAAFM"]
[Tue Feb 24 06:25:38.738085 2026] [:error] [pid 37538:tid 37572] [client 20.14.131.24:44966] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/m.php"] [unique_id "aZzT4iynTiHZ9J0Y2nZpVwAAABg"]
[Tue Feb 24 06:25:39.191792 2026] [:error] [pid 37540:tid 37618] [client 20.14.131.24:45018] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/m.php"] [unique_id "aZzT4yahRAUBJS8hpJVq2QAAAJA"]
[Tue Feb 24 06:25:39.773191 2026] [:error] [pid 37539:tid 37579] [client 20.14.131.24:44871] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/m.php"] [unique_id "aZzT43Enr46jUQep9z_TigAAAEQ"]
[Tue Feb 24 06:25:40.231319 2026] [:error] [pid 37539:tid 37597] [client 20.14.131.24:45000] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/themes.php"] [unique_id "aZzT5HEnr46jUQep9z_TjAAAAFY"]
[Tue Feb 24 06:25:40.902715 2026] [:error] [pid 11672:tid 11675] [client 20.14.131.24:45009] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/themes.php"] [unique_id "aZzT5Pa0fhnmfPYq92uuWwAAAQE"]
[Tue Feb 24 06:25:41.394794 2026] [:error] [pid 37644:tid 37654] [client 20.14.131.24:45043] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/themes.php"] [unique_id "aZzT5ULaEhVDwBRydH1Y0wAAAMg"]
[Tue Feb 24 06:25:42.012445 2026] [:error] [pid 11672:tid 11680] [client 20.14.131.24:44972] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/themes.php"] [unique_id "aZzT5va0fhnmfPYq92uuXwAAAQY"]
[Tue Feb 24 06:25:42.657058 2026] [:error] [pid 37538:tid 37559] [client 20.14.131.24:45040] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aZzT5iynTiHZ9J0Y2nZpXgAAAAs"]
[Tue Feb 24 06:25:43.222977 2026] [:error] [pid 37539:tid 37599] [client 20.14.131.24:45032] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aZzT53Enr46jUQep9z_TlwAAAFg"]
[Tue Feb 24 06:25:43.819017 2026] [:error] [pid 37540:tid 37608] [client 20.14.131.24:44911] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aZzT5yahRAUBJS8hpJVq6wAAAIY"]
[Tue Feb 24 06:25:44.734985 2026] [proxy_fcgi:error] [pid 37540:tid 37609] [client 20.14.131.24:45016] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 06:25:44.946499 2026] [proxy_fcgi:error] [pid 37540:tid 37618] [client 20.14.131.24:45016] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 06:25:45.157909 2026] [proxy_fcgi:error] [pid 37540:tid 37615] [client 20.14.131.24:45016] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 06:25:45.361808 2026] [proxy_fcgi:error] [pid 37540:tid 37617] [client 20.14.131.24:45016] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 06:25:45.564807 2026] [:error] [pid 37540:tid 37608] [client 20.14.131.24:45016] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/css.php"] [unique_id "aZzT6SahRAUBJS8hpJVq-QAAAIY"]
[Tue Feb 24 06:25:46.140144 2026] [:error] [pid 37539:tid 37597] [client 20.14.131.24:45035] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/css.php"] [unique_id "aZzT6nEnr46jUQep9z_TmwAAAFY"]
[Tue Feb 24 06:25:46.802473 2026] [:error] [pid 11672:tid 11685] [client 20.14.131.24:44987] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/css.php"] [unique_id "aZzT6va0fhnmfPYq92uucwAAAQs"]
[Tue Feb 24 06:25:47.746682 2026] [:error] [pid 37540:tid 37612] [client 20.14.131.24:44976] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/css.php"] [unique_id "aZzT6yahRAUBJS8hpJVq_AAAAIo"]
[Tue Feb 24 06:25:48.304054 2026] [:error] [pid 37540:tid 37624] [client 20.14.131.24:44801] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/cong.php"] [unique_id "aZzT7CahRAUBJS8hpJVq_gAAAJY"]
[Tue Feb 24 06:25:48.898121 2026] [:error] [pid 37538:tid 37553] [client 20.14.131.24:44855] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/cong.php"] [unique_id "aZzT7CynTiHZ9J0Y2nZpZQAAAAU"]
[Tue Feb 24 06:25:49.869897 2026] [:error] [pid 11672:tid 11691] [client 20.14.131.24:44977] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/cong.php"] [unique_id "aZzT7fa0fhnmfPYq92uueQAAARE"]
[Tue Feb 24 06:25:50.478630 2026] [:error] [pid 11672:tid 11698] [client 20.14.131.24:44906] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/cong.php"] [unique_id "aZzT7va0fhnmfPYq92uufgAAARg"]
[Tue Feb 24 06:25:51.126121 2026] [:error] [pid 11672:tid 11692] [client 20.14.131.24:45039] [client 20.14.131.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aZzT7_a0fhnmfPYq92uugQAAARI"]
[Tue Feb 24 06:25:51.848304 2026] [:error] [pid 37539:tid 37581] [client 20.14.131.24:44989] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/cong.php"] [unique_id "aZzT73Enr46jUQep9z_ToQAAAEY"]
[Tue Feb 24 06:25:52.488916 2026] [:error] [pid 37538:tid 37560] [client 20.14.131.24:44928] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/cong.php"] [unique_id "aZzT8CynTiHZ9J0Y2nZpbAAAAAw"]
[Tue Feb 24 06:25:53.494623 2026] [:error] [pid 37540:tid 37611] [client 20.14.131.24:44978] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/cong.php"] [unique_id "aZzT8SahRAUBJS8hpJVrBQAAAIk"]
[Tue Feb 24 06:25:54.018258 2026] [:error] [pid 37539:tid 37583] [client 20.14.131.24:44996] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/w.php"] [unique_id "aZzT8nEnr46jUQep9z_TpQAAAEg"]
[Tue Feb 24 06:25:54.441403 2026] [:error] [pid 11672:tid 11688] [client 20.14.131.24:44968] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/w.php"] [unique_id "aZzT8va0fhnmfPYq92uuhgAAAQ4"]
[Tue Feb 24 06:25:55.005625 2026] [:error] [pid 37644:tid 37659] [client 20.14.131.24:45052] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/w.php"] [unique_id "aZzT80LaEhVDwBRydH1Y2AAAAM0"]
[Tue Feb 24 06:25:55.489871 2026] [:error] [pid 37644:tid 37649] [client 20.14.131.24:45053] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/w.php"] [unique_id "aZzT80LaEhVDwBRydH1Y2gAAAMM"]
[Tue Feb 24 06:25:55.983158 2026] [:error] [pid 37644:tid 37666] [client 20.14.131.24:44883] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/404.php"] [unique_id "aZzT80LaEhVDwBRydH1Y3gAAANQ"]
[Tue Feb 24 06:25:56.511809 2026] [:error] [pid 37540:tid 37625] [client 20.14.131.24:44902] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/404.php"] [unique_id "aZzT9CahRAUBJS8hpJVrEAAAAJc"]
[Tue Feb 24 06:25:56.957464 2026] [:error] [pid 37539:tid 37586] [client 20.14.131.24:44872] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/404.php"] [unique_id "aZzT9HEnr46jUQep9z_TrwAAAEs"]
[Tue Feb 24 06:25:57.575490 2026] [:error] [pid 11672:tid 11692] [client 20.14.131.24:44927] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/404.php"] [unique_id "aZzT9fa0fhnmfPYq92uuiQAAARI"]
[Tue Feb 24 06:25:58.230340 2026] [:error] [pid 11672:tid 11686] [client 20.14.131.24:44885] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aZzT9va0fhnmfPYq92uujAAAAQw"]
[Tue Feb 24 06:25:58.746612 2026] [:error] [pid 37644:tid 37664] [client 20.14.131.24:45004] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aZzT9kLaEhVDwBRydH1Y4gAAANI"]
[Tue Feb 24 06:25:59.296462 2026] [:error] [pid 37644:tid 37668] [client 20.14.131.24:44958] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aZzT90LaEhVDwBRydH1Y4wAAANY"]
[Tue Feb 24 06:26:00.228302 2026] [:error] [pid 37644:tid 37661] [client 20.14.131.24:44998] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aZzT-ELaEhVDwBRydH1Y5wAAAM8"]
[Tue Feb 24 06:26:00.880666 2026] [:error] [pid 37644:tid 37659] [client 20.14.131.24:44926] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/0x.php"] [unique_id "aZzT-ELaEhVDwBRydH1Y6AAAAM0"]
[Tue Feb 24 06:26:01.550623 2026] [:error] [pid 37539:tid 37581] [client 20.14.131.24:44816] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/0x.php"] [unique_id "aZzT-XEnr46jUQep9z_TugAAAEY"]
[Tue Feb 24 06:26:02.239041 2026] [:error] [pid 11672:tid 11695] [client 20.14.131.24:44907] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/0x.php"] [unique_id "aZzT-va0fhnmfPYq92uulQAAARU"]
[Tue Feb 24 06:26:02.704060 2026] [:error] [pid 37538:tid 37555] [client 20.14.131.24:45026] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/0x.php"] [unique_id "aZzT-iynTiHZ9J0Y2nZpdwAAAAc"]
[Tue Feb 24 06:26:03.212261 2026] [:error] [pid 11672:tid 11677] [client 20.14.131.24:44869] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/css.php"] [unique_id "aZzT-_a0fhnmfPYq92uumwAAAQM"]
[Tue Feb 24 06:26:03.720011 2026] [:error] [pid 11672:tid 11690] [client 20.14.131.24:44955] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/css.php"] [unique_id "aZzT-_a0fhnmfPYq92uunAAAARA"]
[Tue Feb 24 06:26:04.414576 2026] [:error] [pid 37644:tid 37648] [client 20.14.131.24:44980] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/css.php"] [unique_id "aZzT_ELaEhVDwBRydH1Y7gAAAMI"]
[Tue Feb 24 06:26:04.848962 2026] [:error] [pid 37538:tid 37567] [client 20.14.131.24:44870] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/css.php"] [unique_id "aZzT_CynTiHZ9J0Y2nZpewAAABM"]
[Tue Feb 24 06:26:05.539575 2026] [:error] [pid 11672:tid 11693] [client 20.14.131.24:44964] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/222.php"] [unique_id "aZzT_fa0fhnmfPYq92uuoAAAARM"]
[Tue Feb 24 06:26:06.145097 2026] [:error] [pid 11672:tid 11680] [client 20.14.131.24:45020] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/222.php"] [unique_id "aZzT_va0fhnmfPYq92uuogAAAQY"]
[Tue Feb 24 06:26:06.644839 2026] [:error] [pid 37644:tid 37656] [client 20.14.131.24:44891] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/222.php"] [unique_id "aZzT_kLaEhVDwBRydH1Y8QAAAMo"]
[Tue Feb 24 06:26:07.252984 2026] [:error] [pid 11672:tid 11686] [client 20.14.131.24:44959] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/222.php"] [unique_id "aZzT__a0fhnmfPYq92uupgAAAQw"]
[Tue Feb 24 06:26:07.904784 2026] [:error] [pid 11672:tid 11697] [client 20.14.131.24:45038] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/index.php"] [unique_id "aZzT__a0fhnmfPYq92uuqQAAARc"]
[Tue Feb 24 06:26:08.826409 2026] [:error] [pid 37644:tid 37669] [client 20.14.131.24:44746] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/index.php"] [unique_id "aZzUAELaEhVDwBRydH1Y9gAAANc"]
[Tue Feb 24 06:26:09.634836 2026] [:error] [pid 37539:tid 37582] [client 20.14.131.24:44965] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/index.php"] [unique_id "aZzUAXEnr46jUQep9z_TwgAAAEc"]
[Tue Feb 24 06:26:10.458152 2026] [:error] [pid 37644:tid 37666] [client 20.14.131.24:44878] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/index.php"] [unique_id "aZzUAkLaEhVDwBRydH1Y-gAAANQ"]
[Tue Feb 24 06:26:11.160058 2026] [:error] [pid 37540:tid 37606] [client 20.14.131.24:44813] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/admin.php"] [unique_id "aZzUAyahRAUBJS8hpJVrKgAAAIQ"]
[Tue Feb 24 06:26:11.879185 2026] [:error] [pid 37644:tid 37650] [client 20.14.131.24:44912] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/admin.php"] [unique_id "aZzUA0LaEhVDwBRydH1ZAQAAAMQ"]
[Tue Feb 24 06:26:12.816855 2026] [:error] [pid 11672:tid 11689] [client 20.14.131.24:44981] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/admin.php"] [unique_id "aZzUBPa0fhnmfPYq92uusgAAAQ8"]
[Tue Feb 24 06:26:13.459307 2026] [:error] [pid 11672:tid 11677] [client 20.14.131.24:44889] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/admin.php"] [unique_id "aZzUBfa0fhnmfPYq92uutQAAAQM"]
[Tue Feb 24 06:26:14.222327 2026] [:error] [pid 11672:tid 11691] [client 20.14.131.24:44868] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aZzUBva0fhnmfPYq92uuuQAAARE"]
[Tue Feb 24 06:26:14.727089 2026] [:error] [pid 37644:tid 37658] [client 20.14.131.24:44817] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aZzUBkLaEhVDwBRydH1ZBwAAAMw"]
[Tue Feb 24 06:26:15.402285 2026] [:error] [pid 37644:tid 37665] [client 20.14.131.24:44910] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aZzUB0LaEhVDwBRydH1ZCQAAANM"]
[Tue Feb 24 06:26:16.266496 2026] [:error] [pid 37539:tid 37579] [client 20.14.131.24:44936] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aZzUCHEnr46jUQep9z_TyQAAAEQ"]
[Tue Feb 24 06:26:16.908666 2026] [:error] [pid 37539:tid 37583] [client 20.14.131.24:44804] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aZzUCHEnr46jUQep9z_TywAAAEg"]
[Tue Feb 24 06:26:17.577854 2026] [:error] [pid 37644:tid 37652] [client 20.14.131.24:44908] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aZzUCULaEhVDwBRydH1ZDQAAAMY"]
[Tue Feb 24 06:26:18.508321 2026] [:error] [pid 37538:tid 37551] [client 20.14.131.24:44845] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aZzUCiynTiHZ9J0Y2nZpgAAAAAM"]
[Tue Feb 24 06:26:19.073550 2026] [:error] [pid 37644:tid 37657] [client 20.14.131.24:44803] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aZzUC0LaEhVDwBRydH1ZDwAAAMs"]
[Tue Feb 24 06:26:20.705966 2026] [:error] [pid 37540:tid 37615] [client 20.14.131.24:44899] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/abcd.php"] [unique_id "aZzUDCahRAUBJS8hpJVrLwAAAI0"]
[Tue Feb 24 06:26:21.239199 2026] [:error] [pid 37644:tid 37658] [client 20.14.131.24:44957] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/abcd.php"] [unique_id "aZzUDULaEhVDwBRydH1ZFAAAAMw"]
[Tue Feb 24 06:26:21.822560 2026] [:error] [pid 37644:tid 37655] [client 20.14.131.24:44873] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/abcd.php"] [unique_id "aZzUDULaEhVDwBRydH1ZFgAAAMk"]
[Tue Feb 24 06:26:22.848302 2026] [:error] [pid 37644:tid 37667] [client 20.14.131.24:44956] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/abcd.php"] [unique_id "aZzUDkLaEhVDwBRydH1ZGAAAANU"]
[Tue Feb 24 06:26:23.993075 2026] [:error] [pid 11672:tid 11680] [client 20.14.131.24:44840] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/autoload_classmap.php"] [unique_id "aZzUD_a0fhnmfPYq92uu4QAAAQY"]
[Tue Feb 24 06:26:24.707912 2026] [:error] [pid 37644:tid 37669] [client 20.14.131.24:44828] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/autoload_classmap.php"] [unique_id "aZzUEELaEhVDwBRydH1ZHQAAANc"]
[Tue Feb 24 06:26:25.483660 2026] [:error] [pid 37540:tid 37614] [client 20.14.131.24:44886] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/autoload_classmap.php"] [unique_id "aZzUESahRAUBJS8hpJVrNAAAAIw"]
[Tue Feb 24 06:26:26.292293 2026] [:error] [pid 11672:tid 11682] [client 20.14.131.24:44914] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/autoload_classmap.php"] [unique_id "aZzUEva0fhnmfPYq92uu6AAAAQg"]
[Tue Feb 24 06:26:27.830200 2026] [:error] [pid 37538:tid 37571] [client 20.14.131.24:44967] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/inputs.php"] [unique_id "aZzUEyynTiHZ9J0Y2nZphQAAABc"]
[Tue Feb 24 06:26:28.463691 2026] [:error] [pid 37540:tid 37606] [client 20.14.131.24:44962] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/inputs.php"] [unique_id "aZzUFCahRAUBJS8hpJVrOQAAAIQ"]
[Tue Feb 24 06:26:29.061836 2026] [:error] [pid 37644:tid 37651] [client 20.14.131.24:44835] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/inputs.php"] [unique_id "aZzUFULaEhVDwBRydH1ZJAAAAMU"]
[Tue Feb 24 06:26:29.878493 2026] [:error] [pid 37644:tid 37648] [client 20.14.131.24:44880] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/inputs.php"] [unique_id "aZzUFULaEhVDwBRydH1ZJQAAAMI"]
[Tue Feb 24 06:26:30.413970 2026] [:error] [pid 37540:tid 37605] [client 20.14.131.24:44905] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/about.php"] [unique_id "aZzUFiahRAUBJS8hpJVrQQAAAIM"]
[Tue Feb 24 06:26:31.306347 2026] [:error] [pid 37540:tid 37604] [client 20.14.131.24:44924] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/about.php"] [unique_id "aZzUFyahRAUBJS8hpJVrRAAAAII"]
[Tue Feb 24 06:26:32.075297 2026] [:error] [pid 11672:tid 11697] [client 20.14.131.24:44882] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/about.php"] [unique_id "aZzUGPa0fhnmfPYq92uu8wAAARc"]
[Tue Feb 24 06:26:32.808366 2026] [:error] [pid 37644:tid 37650] [client 20.14.131.24:44818] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/about.php"] [unique_id "aZzUGELaEhVDwBRydH1ZLAAAAMQ"]
[Tue Feb 24 06:26:33.317903 2026] [:error] [pid 37644:tid 37658] [client 20.14.131.24:44814] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/alfa.php"] [unique_id "aZzUGULaEhVDwBRydH1ZLgAAAMw"]
[Tue Feb 24 06:26:34.031638 2026] [:error] [pid 37644:tid 37651] [client 20.14.131.24:44860] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/alfa.php"] [unique_id "aZzUGkLaEhVDwBRydH1ZMwAAAMU"]
[Tue Feb 24 06:26:34.610476 2026] [:error] [pid 11672:tid 11686] [client 20.14.131.24:44888] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/alfa.php"] [unique_id "aZzUGva0fhnmfPYq92uu9AAAAQw"]
[Tue Feb 24 06:26:35.122046 2026] [:error] [pid 11672:tid 11696] [client 20.14.131.24:44918] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/alfa.php"] [unique_id "aZzUG_a0fhnmfPYq92uu9QAAARY"]
[Tue Feb 24 06:26:35.753876 2026] [:error] [pid 11672:tid 11681] [client 20.14.131.24:44824] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aZzUG_a0fhnmfPYq92uu-QAAAQc"]
[Tue Feb 24 06:26:36.181836 2026] [:error] [pid 11672:tid 11684] [client 20.14.131.24:44826] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aZzUHPa0fhnmfPYq92uu_AAAAQo"]
[Tue Feb 24 06:26:36.736872 2026] [:error] [pid 37644:tid 37656] [client 20.14.131.24:44974] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aZzUHELaEhVDwBRydH1ZOQAAAMo"]
[Tue Feb 24 06:26:37.333474 2026] [:error] [pid 37644:tid 37658] [client 20.14.131.24:44802] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aZzUHULaEhVDwBRydH1ZPQAAAMw"]
[Tue Feb 24 06:26:37.966205 2026] [:error] [pid 37644:tid 37666] [client 20.14.131.24:44985] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aZzUHULaEhVDwBRydH1ZQQAAANQ"]
[Tue Feb 24 06:26:38.512254 2026] [:error] [pid 11672:tid 11698] [client 20.14.131.24:44960] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aZzUHva0fhnmfPYq92uu_gAAARg"]
[Tue Feb 24 06:26:39.041863 2026] [:error] [pid 37644:tid 37656] [client 20.14.131.24:45034] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aZzUH0LaEhVDwBRydH1ZRwAAAMo"]
[Tue Feb 24 06:26:39.634679 2026] [:error] [pid 37539:tid 37591] [client 20.14.131.24:44896] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aZzUH3Enr46jUQep9z_T0gAAAFA"]
[Tue Feb 24 06:26:40.096730 2026] [:error] [pid 11672:tid 11686] [client 20.14.131.24:44984] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aZzUIPa0fhnmfPYq92uvAQAAAQw"]
[Tue Feb 24 06:26:40.546163 2026] [:error] [pid 37644:tid 37652] [client 20.14.131.24:44852] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aZzUIELaEhVDwBRydH1ZSwAAAMY"]
[Tue Feb 24 06:26:40.962054 2026] [:error] [pid 37540:tid 37624] [client 20.14.131.24:44807] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aZzUICahRAUBJS8hpJVrRgAAAJY"]
[Tue Feb 24 06:26:41.384996 2026] [:error] [pid 37644:tid 37655] [client 20.14.131.24:44950] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aZzUIULaEhVDwBRydH1ZTgAAAMk"]
[Tue Feb 24 06:26:41.981984 2026] [:error] [pid 11672:tid 11679] [client 20.14.131.24:44913] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aZzUIfa0fhnmfPYq92uvDQAAAQU"]
[Tue Feb 24 06:26:42.557295 2026] [:error] [pid 37540:tid 37609] [client 20.14.131.24:44857] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aZzUIiahRAUBJS8hpJVrRwAAAIc"]
[Tue Feb 24 06:26:43.094838 2026] [:error] [pid 37540:tid 37610] [client 20.14.131.24:44879] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aZzUIyahRAUBJS8hpJVrSAAAAIg"]
[Tue Feb 24 06:26:43.701529 2026] [:error] [pid 37539:tid 37578] [client 20.14.131.24:44935] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aZzUI3Enr46jUQep9z_T1gAAAEM"]
[Tue Feb 24 06:26:44.205632 2026] [:error] [pid 37539:tid 37583] [client 20.14.131.24:44811] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/manager.php"] [unique_id "aZzUJHEnr46jUQep9z_T1wAAAEg"]
[Tue Feb 24 06:26:44.772908 2026] [:error] [pid 37540:tid 37607] [client 20.14.131.24:44892] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/manager.php"] [unique_id "aZzUJCahRAUBJS8hpJVrTQAAAIU"]
[Tue Feb 24 06:26:45.242805 2026] [proxy_fcgi:error] [pid 37540:tid 37617] [client 20.14.131.24:44876] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 06:26:45.469594 2026] [proxy_fcgi:error] [pid 37540:tid 37626] [client 20.14.131.24:44876] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 06:26:45.914791 2026] [proxy_fcgi:error] [pid 37540:tid 37623] [client 20.14.131.24:44876] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 06:26:46.137276 2026] [proxy_fcgi:error] [pid 37540:tid 37622] [client 20.14.131.24:44876] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 06:26:46.618107 2026] [proxy_fcgi:error] [pid 37540:tid 37612] [client 20.14.131.24:44876] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 06:26:47.084022 2026] [proxy_fcgi:error] [pid 37540:tid 37606] [client 20.14.131.24:44876] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 06:26:47.355208 2026] [:error] [pid 37540:tid 37624] [client 20.14.131.24:44876] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/1.php"] [unique_id "aZzUJyahRAUBJS8hpJVrWwAAAJY"]
[Tue Feb 24 06:26:48.117836 2026] [:error] [pid 37539:tid 37588] [client 20.14.131.24:44844] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/1.php"] [unique_id "aZzUKHEnr46jUQep9z_T4AAAAE0"]
[Tue Feb 24 06:26:48.562271 2026] [:error] [pid 37538:tid 37550] [client 20.14.131.24:44923] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/1.php"] [unique_id "aZzUKCynTiHZ9J0Y2nZpjgAAAAI"]
[Tue Feb 24 06:26:49.009061 2026] [:error] [pid 37539:tid 37591] [client 20.14.131.24:44839] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/1.php"] [unique_id "aZzUKXEnr46jUQep9z_T4gAAAFA"]
[Tue Feb 24 06:26:49.479457 2026] [:error] [pid 37538:tid 37555] [client 20.14.131.24:44887] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/byp.php"] [unique_id "aZzUKSynTiHZ9J0Y2nZpkQAAAAc"]
[Tue Feb 24 06:26:50.135098 2026] [:error] [pid 37644:tid 37650] [client 20.14.131.24:44836] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/byp.php"] [unique_id "aZzUKkLaEhVDwBRydH1ZVQAAAMQ"]
[Tue Feb 24 06:26:50.940244 2026] [:error] [pid 37644:tid 37652] [client 20.14.131.24:44856] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/byp.php"] [unique_id "aZzUKkLaEhVDwBRydH1ZVwAAAMY"]
[Tue Feb 24 06:26:51.532099 2026] [:error] [pid 11672:tid 11687] [client 20.14.131.24:44920] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/byp.php"] [unique_id "aZzUK_a0fhnmfPYq92uvNgAAAQ0"]
[Tue Feb 24 06:26:52.353001 2026] [:error] [pid 37538:tid 37549] [client 20.14.131.24:44842] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-trackback.php"] [unique_id "aZzULCynTiHZ9J0Y2nZplgAAAAE"]
[Tue Feb 24 06:26:53.124329 2026] [:error] [pid 37644:tid 37666] [client 20.14.131.24:44881] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-trackback.php"] [unique_id "aZzULULaEhVDwBRydH1ZWwAAANQ"]
[Tue Feb 24 06:26:53.706315 2026] [:error] [pid 37644:tid 37664] [client 20.14.131.24:44916] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-trackback.php"] [unique_id "aZzULULaEhVDwBRydH1ZXQAAANI"]
[Tue Feb 24 06:26:54.256852 2026] [:error] [pid 37540:tid 37605] [client 20.14.131.24:44823] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-trackback.php"] [unique_id "aZzULiahRAUBJS8hpJVrZAAAAIM"]
[Tue Feb 24 06:26:54.689067 2026] [:error] [pid 37539:tid 37591] [client 20.14.131.24:44940] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/.well-known/index.php"] [unique_id "aZzULnEnr46jUQep9z_T-AAAAFA"]
[Tue Feb 24 06:26:55.281143 2026] [:error] [pid 37539:tid 37579] [client 20.14.131.24:44904] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/.well-known/index.php"] [unique_id "aZzUL3Enr46jUQep9z_T-wAAAEQ"]
[Tue Feb 24 06:26:55.752405 2026] [:error] [pid 37644:tid 37660] [client 20.14.131.24:44747] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/.well-known/index.php"] [unique_id "aZzUL0LaEhVDwBRydH1ZZAAAAM4"]
[Tue Feb 24 06:26:56.478361 2026] [:error] [pid 37540:tid 37614] [client 20.14.131.24:44973] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/.well-known/index.php"] [unique_id "aZzUMCahRAUBJS8hpJVrZQAAAIw"]
[Tue Feb 24 06:26:56.902301 2026] [:error] [pid 11672:tid 11675] [client 20.14.131.24:44833] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aZzUMPa0fhnmfPYq92uvUAAAAQE"]
[Tue Feb 24 06:26:57.357860 2026] [:error] [pid 11672:tid 11692] [client 20.14.131.24:44830] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aZzUMfa0fhnmfPYq92uvUwAAARI"]
[Tue Feb 24 06:26:57.976783 2026] [:error] [pid 37540:tid 37602] [client 20.14.131.24:44808] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aZzUMSahRAUBJS8hpJVraAAAAIA"]
[Tue Feb 24 06:26:58.564039 2026] [:error] [pid 37540:tid 37624] [client 20.14.131.24:44909] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aZzUMiahRAUBJS8hpJVragAAAJY"]
[Tue Feb 24 06:26:59.080060 2026] [:error] [pid 37644:tid 37668] [client 20.14.131.24:44846] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/about.php"] [unique_id "aZzUM0LaEhVDwBRydH1ZaAAAANY"]
[Tue Feb 24 06:26:59.676443 2026] [:error] [pid 37540:tid 37620] [client 20.14.131.24:44922] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/about.php"] [unique_id "aZzUMyahRAUBJS8hpJVrbwAAAJI"]
[Tue Feb 24 06:27:00.303507 2026] [:error] [pid 37644:tid 37655] [client 20.14.131.24:45003] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/about.php"] [unique_id "aZzUNELaEhVDwBRydH1ZagAAAMk"]
[Tue Feb 24 06:27:00.802424 2026] [:error] [pid 37644:tid 37648] [client 20.14.131.24:44825] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/about.php"] [unique_id "aZzUNELaEhVDwBRydH1ZbwAAAMI"]
[Tue Feb 24 06:27:01.326302 2026] [:error] [pid 37644:tid 37649] [client 20.14.131.24:44832] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/gmo.php"] [unique_id "aZzUNULaEhVDwBRydH1ZcAAAAMM"]
[Tue Feb 24 06:27:01.758060 2026] [:error] [pid 37540:tid 37614] [client 20.14.131.24:44890] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/gmo.php"] [unique_id "aZzUNSahRAUBJS8hpJVrcgAAAIw"]
[Tue Feb 24 06:27:02.278629 2026] [:error] [pid 11672:tid 11695] [client 20.14.131.24:44798] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/gmo.php"] [unique_id "aZzUNva0fhnmfPYq92uvVgAAARU"]
[Tue Feb 24 06:27:02.854834 2026] [:error] [pid 37539:tid 37589] [client 20.14.131.24:44917] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/gmo.php"] [unique_id "aZzUNnEnr46jUQep9z_UAgAAAE4"]
[Tue Feb 24 06:27:03.523349 2026] [:error] [pid 37644:tid 37655] [client 20.14.131.24:44800] [client 20.14.131.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aZzUN0LaEhVDwBRydH1ZdgAAAMk"]
[Tue Feb 24 06:27:04.057167 2026] [:error] [pid 37539:tid 37591] [client 20.14.131.24:44759] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/css/index.php"] [unique_id "aZzUOHEnr46jUQep9z_UBAAAAFA"]
[Tue Feb 24 06:27:04.666852 2026] [:error] [pid 37540:tid 37613] [client 20.14.131.24:44919] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/css/index.php"] [unique_id "aZzUOCahRAUBJS8hpJVrdQAAAIs"]
[Tue Feb 24 06:27:05.200757 2026] [:error] [pid 37539:tid 37579] [client 20.14.131.24:44750] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/css/index.php"] [unique_id "aZzUOXEnr46jUQep9z_UBgAAAEQ"]
[Tue Feb 24 06:27:05.721886 2026] [:error] [pid 37540:tid 37620] [client 20.14.131.24:44969] [client 20.14.131.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "aZzUOSahRAUBJS8hpJVrewAAAJI"]
[Tue Feb 24 06:27:06.287669 2026] [:error] [pid 37644:tid 37648] [client 20.14.131.24:44779] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aZzUOkLaEhVDwBRydH1ZeQAAAMI"]
[Tue Feb 24 06:27:06.888795 2026] [:error] [pid 11672:tid 11675] [client 20.14.131.24:44850] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aZzUOva0fhnmfPYq92uvWwAAAQE"]
[Tue Feb 24 06:27:07.363137 2026] [:error] [pid 37644:tid 37657] [client 20.14.131.24:44859] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aZzUO0LaEhVDwBRydH1ZfAAAAMs"]
[Tue Feb 24 06:27:08.210827 2026] [:error] [pid 37540:tid 37621] [client 20.14.131.24:44988] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aZzUPCahRAUBJS8hpJVrfQAAAJM"]
[Tue Feb 24 06:27:09.215658 2026] [:error] [pid 11672:tid 11681] [client 20.14.131.24:44831] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aZzUPfa0fhnmfPYq92uvXwAAAQc"]
[Tue Feb 24 06:27:09.719002 2026] [:error] [pid 37540:tid 37614] [client 20.14.131.24:44970] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aZzUPSahRAUBJS8hpJVrfwAAAIw"]
[Tue Feb 24 06:27:10.316064 2026] [:error] [pid 37540:tid 37602] [client 20.14.131.24:44847] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aZzUPiahRAUBJS8hpJVrgAAAAIA"]
[Tue Feb 24 06:27:10.787097 2026] [:error] [pid 37540:tid 37611] [client 20.14.131.24:44753] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aZzUPiahRAUBJS8hpJVrgwAAAIk"]
[Tue Feb 24 06:27:11.322096 2026] [:error] [pid 37540:tid 37625] [client 20.14.131.24:44861] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aZzUPyahRAUBJS8hpJVrhQAAAJc"]
[Tue Feb 24 06:27:11.947810 2026] [:error] [pid 37540:tid 37606] [client 20.14.131.24:44921] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aZzUPyahRAUBJS8hpJVrhwAAAIQ"]
[Tue Feb 24 06:27:12.763225 2026] [:error] [pid 11672:tid 11690] [client 20.14.131.24:44810] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aZzUQPa0fhnmfPYq92uvYwAAARA"]
[Tue Feb 24 06:27:13.542947 2026] [:error] [pid 11672:tid 11675] [client 20.14.131.24:44806] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aZzUQfa0fhnmfPYq92uvaAAAAQE"]
[Tue Feb 24 06:27:14.164060 2026] [:error] [pid 37644:tid 37667] [client 20.14.131.24:45042] [client 20.14.131.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aZzUQkLaEhVDwBRydH1ZhQAAANU"]
[Tue Feb 24 06:27:15.151826 2026] [:error] [pid 11672:tid 11697] [client 20.14.131.24:44843] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/index/function.php"] [unique_id "aZzUQ_a0fhnmfPYq92uvbQAAARc"]
[Tue Feb 24 06:27:15.594153 2026] [:error] [pid 11672:tid 11690] [client 20.14.131.24:44790] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/index/function.php"] [unique_id "aZzUQ_a0fhnmfPYq92uvcAAAARA"]
[Tue Feb 24 06:27:16.098495 2026] [:error] [pid 11672:tid 11677] [client 20.14.131.24:44854] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/index/function.php"] [unique_id "aZzURPa0fhnmfPYq92uvcwAAAQM"]
[Tue Feb 24 06:27:16.634079 2026] [:error] [pid 37644:tid 37656] [client 20.14.131.24:44841] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aZzURELaEhVDwBRydH1ZhwAAAMo"]
[Tue Feb 24 06:27:17.563218 2026] [:error] [pid 37539:tid 37595] [client 20.14.131.24:44971] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aZzURXEnr46jUQep9z_UDAAAAFQ"]
[Tue Feb 24 06:27:18.006673 2026] [:error] [pid 37644:tid 37652] [client 20.14.131.24:44774] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aZzURkLaEhVDwBRydH1ZiAAAAMY"]
[Tue Feb 24 06:27:18.479750 2026] [:error] [pid 11672:tid 11682] [client 20.14.131.24:44991] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aZzURva0fhnmfPYq92uvdwAAAQg"]
[Tue Feb 24 06:27:19.050146 2026] [:error] [pid 37644:tid 37651] [client 20.14.131.24:44819] [client 20.14.131.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aZzUR0LaEhVDwBRydH1ZiQAAAMU"]
[Tue Feb 24 06:27:19.685873 2026] [:error] [pid 11672:tid 11683] [client 20.14.131.24:44897] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ww1.php"] [unique_id "aZzUR_a0fhnmfPYq92uveAAAAQk"]
[Tue Feb 24 06:27:20.489171 2026] [:error] [pid 37539:tid 37576] [client 20.14.131.24:44745] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ww1.php"] [unique_id "aZzUSHEnr46jUQep9z_UDgAAAEE"]
[Tue Feb 24 06:27:20.983698 2026] [:error] [pid 11672:tid 11680] [client 20.14.131.24:44851] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ww1.php"] [unique_id "aZzUSPa0fhnmfPYq92uvfQAAAQY"]
[Tue Feb 24 06:27:21.507250 2026] [:error] [pid 37539:tid 37593] [client 20.14.131.24:44793] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ww1.php"] [unique_id "aZzUSXEnr46jUQep9z_UDwAAAFI"]
[Tue Feb 24 06:27:21.975287 2026] [:error] [pid 37539:tid 37588] [client 20.14.131.24:44863] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/about/function.php"] [unique_id "aZzUSXEnr46jUQep9z_UEQAAAE0"]
[Tue Feb 24 06:27:22.720518 2026] [:error] [pid 11672:tid 11691] [client 20.14.131.24:44754] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/about/function.php"] [unique_id "aZzUSva0fhnmfPYq92uvhAAAARE"]
[Tue Feb 24 06:27:23.190093 2026] [:error] [pid 37539:tid 37586] [client 20.14.131.24:44838] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/about/function.php"] [unique_id "aZzUS3Enr46jUQep9z_UEgAAAEs"]
[Tue Feb 24 06:27:23.626676 2026] [:error] [pid 11672:tid 11693] [client 20.14.131.24:44820] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/about/function.php"] [unique_id "aZzUS_a0fhnmfPYq92uvhgAAARM"]
[Tue Feb 24 06:27:24.306265 2026] [:error] [pid 37539:tid 37584] [client 20.14.131.24:44780] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/admin/function.php"] [unique_id "aZzUTHEnr46jUQep9z_UGQAAAEk"]
[Tue Feb 24 06:27:24.712595 2026] [:error] [pid 11672:tid 11689] [client 20.14.131.24:44757] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/admin/function.php"] [unique_id "aZzUTPa0fhnmfPYq92uviQAAAQ8"]
[Tue Feb 24 06:27:25.273134 2026] [:error] [pid 11672:tid 11687] [client 20.14.131.24:44837] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/admin/function.php"] [unique_id "aZzUTfa0fhnmfPYq92uvjgAAAQ0"]
[Tue Feb 24 06:27:25.804576 2026] [:error] [pid 37538:tid 37552] [client 20.14.131.24:44771] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/admin/function.php"] [unique_id "aZzUTSynTiHZ9J0Y2nZpqwAAAAQ"]
[Tue Feb 24 06:27:26.422860 2026] [:error] [pid 37539:tid 37595] [client 20.14.131.24:44761] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aZzUTnEnr46jUQep9z_UHgAAAFQ"]
[Tue Feb 24 06:27:27.047037 2026] [:error] [pid 11672:tid 11684] [client 20.14.131.24:44763] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aZzUT_a0fhnmfPYq92uvmgAAAQo"]
[Tue Feb 24 06:27:27.824288 2026] [:error] [pid 37644:tid 37650] [client 20.14.131.24:44827] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aZzUT0LaEhVDwBRydH1ZkAAAAMQ"]
[Tue Feb 24 06:27:28.499650 2026] [:error] [pid 37540:tid 37604] [client 20.14.131.24:44893] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aZzUUCahRAUBJS8hpJVrkQAAAII"]
[Tue Feb 24 06:27:29.011872 2026] [:error] [pid 37539:tid 37590] [client 20.14.131.24:44776] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aZzUUXEnr46jUQep9z_UIQAAAE8"]
[Tue Feb 24 06:27:29.701571 2026] [:error] [pid 37644:tid 37651] [client 20.14.131.24:44699] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aZzUUULaEhVDwBRydH1ZlwAAAMU"]
[Tue Feb 24 06:27:30.601896 2026] [:error] [pid 37540:tid 37617] [client 20.14.131.24:44815] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aZzUUiahRAUBJS8hpJVrlAAAAI8"]
[Tue Feb 24 06:27:31.276704 2026] [:error] [pid 37540:tid 37618] [client 20.14.131.24:44862] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aZzUUyahRAUBJS8hpJVrlgAAAJA"]
[Tue Feb 24 06:27:32.289705 2026] [:error] [pid 37540:tid 37610] [client 20.14.131.24:44822] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/security.php"] [unique_id "aZzUVCahRAUBJS8hpJVrmQAAAIg"]
[Tue Feb 24 06:27:32.727080 2026] [:error] [pid 11672:tid 11691] [client 20.14.131.24:44853] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/security.php"] [unique_id "aZzUVPa0fhnmfPYq92uvpgAAARE"]
[Tue Feb 24 06:27:33.554941 2026] [:error] [pid 37539:tid 37596] [client 20.14.131.24:44756] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/security.php"] [unique_id "aZzUVXEnr46jUQep9z_UIwAAAFU"]
[Tue Feb 24 06:27:34.444351 2026] [:error] [pid 37540:tid 37624] [client 20.14.131.24:44894] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/security.php"] [unique_id "aZzUViahRAUBJS8hpJVrnQAAAJY"]
[Tue Feb 24 06:27:35.101292 2026] [:error] [pid 37540:tid 37604] [client 20.14.131.24:44900] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aZzUVyahRAUBJS8hpJVrngAAAII"]
[Tue Feb 24 06:27:35.826555 2026] [:error] [pid 37540:tid 37609] [client 20.14.131.24:44767] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aZzUVyahRAUBJS8hpJVroAAAAIc"]
[Tue Feb 24 06:27:37.355360 2026] [:error] [pid 37644:tid 37651] [client 20.14.131.24:44735] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aZzUWULaEhVDwBRydH1ZrQAAAMU"]
[Tue Feb 24 06:27:37.937780 2026] [:error] [pid 37538:tid 37572] [client 20.14.131.24:44675] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aZzUWSynTiHZ9J0Y2nZpsQAAABg"]
[Tue Feb 24 06:27:38.954706 2026] [:error] [pid 37539:tid 37597] [client 20.14.131.24:44986] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aZzUWnEnr46jUQep9z_UKAAAAFY"]
[Tue Feb 24 06:27:39.550361 2026] [:error] [pid 11672:tid 11693] [client 20.14.131.24:44752] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aZzUW_a0fhnmfPYq92uvsAAAARM"]
[Tue Feb 24 06:27:40.435111 2026] [:error] [pid 37539:tid 37588] [client 20.14.131.24:44755] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aZzUXHEnr46jUQep9z_UMQAAAE0"]
[Tue Feb 24 06:27:40.915894 2026] [:error] [pid 37539:tid 37581] [client 20.14.131.24:44858] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aZzUXHEnr46jUQep9z_UNQAAAEY"]
[Tue Feb 24 06:27:41.438056 2026] [:error] [pid 11672:tid 11692] [client 20.14.131.24:44770] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aZzUXfa0fhnmfPYq92uvtAAAARI"]
[Tue Feb 24 06:27:42.319983 2026] [:error] [pid 37644:tid 37658] [client 20.14.131.24:44760] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aZzUXkLaEhVDwBRydH1ZsgAAAMw"]
[Tue Feb 24 06:27:43.030741 2026] [:error] [pid 11672:tid 11677] [client 20.14.131.24:44743] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aZzUX_a0fhnmfPYq92uvtwAAAQM"]
[Tue Feb 24 06:27:43.883796 2026] [:error] [pid 37538:tid 37559] [client 20.14.131.24:44765] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aZzUXyynTiHZ9J0Y2nZpuAAAAAs"]
[Tue Feb 24 06:27:44.692915 2026] [:error] [pid 37644:tid 37659] [client 20.14.131.24:44821] [client 20.14.131.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aZzUYELaEhVDwBRydH1ZtgAAAM0"]
[Tue Feb 24 06:27:45.442142 2026] [:error] [pid 37644:tid 37652] [client 20.14.131.24:44684] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/radio.php"] [unique_id "aZzUYULaEhVDwBRydH1ZuwAAAMY"]
[Tue Feb 24 06:27:46.289754 2026] [:error] [pid 11672:tid 11675] [client 20.14.131.24:44953] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/radio.php"] [unique_id "aZzUYva0fhnmfPYq92uvvAAAAQE"]
[Tue Feb 24 06:27:46.741188 2026] [:error] [pid 37644:tid 37662] [client 20.14.131.24:44848] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/radio.php"] [unique_id "aZzUYkLaEhVDwBRydH1ZvwAAANA"]
[Tue Feb 24 06:27:50.424061 2026] [proxy_fcgi:error] [pid 11672:tid 11676] [client 20.14.131.24:44681] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 06:27:50.634522 2026] [proxy_fcgi:error] [pid 11672:tid 11684] [client 20.14.131.24:44681] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 06:27:50.931315 2026] [:error] [pid 11672:tid 11696] [client 20.14.131.24:44681] [client 20.14.131.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aZzUZva0fhnmfPYq92uvzgAAARY"]
[Tue Feb 24 06:27:51.712329 2026] [:error] [pid 37539:tid 37596] [client 20.14.131.24:44777] [client 20.14.131.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/block-patterns/index.php"] [unique_id "aZzUZ3Enr46jUQep9z_UVAAAAFU"]
[Tue Feb 24 06:27:52.345112 2026] [proxy_fcgi:error] [pid 37644:tid 37668] [client 20.14.131.24:44672] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 06:27:52.683719 2026] [proxy_fcgi:error] [pid 37644:tid 37666] [client 20.14.131.24:44672] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 06:27:52.985218 2026] [:error] [pid 37644:tid 37660] [client 20.14.131.24:44672] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ioxi-o1.php"] [unique_id "aZzUaELaEhVDwBRydH1ZygAAAM4"]
[Tue Feb 24 06:27:53.548237 2026] [:error] [pid 11672:tid 11688] [client 20.14.131.24:44797] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ioxi-o1.php"] [unique_id "aZzUafa0fhnmfPYq92uv1QAAAQ4"]
[Tue Feb 24 06:27:54.154742 2026] [:error] [pid 37538:tid 37571] [client 20.14.131.24:44741] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ioxi-o1.php"] [unique_id "aZzUaiynTiHZ9J0Y2nZpvgAAABc"]
[Tue Feb 24 06:27:54.859689 2026] [:error] [pid 37540:tid 37625] [client 20.14.131.24:44796] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ioxi-o1.php"] [unique_id "aZzUaiahRAUBJS8hpJVrqgAAAJc"]
[Tue Feb 24 06:27:55.402263 2026] [:error] [pid 11672:tid 11686] [client 20.14.131.24:44609] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/juuuu.php"] [unique_id "aZzUa_a0fhnmfPYq92uv2QAAAQw"]
[Tue Feb 24 06:27:55.831464 2026] [:error] [pid 37644:tid 37658] [client 20.14.131.24:44792] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/juuuu.php"] [unique_id "aZzUa0LaEhVDwBRydH1ZzAAAAMw"]
[Tue Feb 24 06:27:56.325232 2026] [:error] [pid 37644:tid 37661] [client 20.14.131.24:44693] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/juuuu.php"] [unique_id "aZzUbELaEhVDwBRydH1ZzgAAAM8"]
[Tue Feb 24 06:27:56.829295 2026] [:error] [pid 37644:tid 37670] [client 20.14.131.24:44829] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/juuuu.php"] [unique_id "aZzUbELaEhVDwBRydH1ZzwAAANg"]
[Tue Feb 24 06:27:57.411965 2026] [:error] [pid 37644:tid 37652] [client 20.14.131.24:44724] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ha.php"] [unique_id "aZzUbULaEhVDwBRydH1Z0wAAAMY"]
[Tue Feb 24 06:27:58.006359 2026] [:error] [pid 11672:tid 11687] [client 20.14.131.24:44849] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ha.php"] [unique_id "aZzUbva0fhnmfPYq92uv2wAAAQ0"]
[Tue Feb 24 06:27:58.515711 2026] [:error] [pid 11672:tid 11694] [client 20.14.131.24:44781] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ha.php"] [unique_id "aZzUbva0fhnmfPYq92uv3gAAARQ"]
[Tue Feb 24 06:27:59.222320 2026] [:error] [pid 11672:tid 11696] [client 20.14.131.24:44768] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ha.php"] [unique_id "aZzUb_a0fhnmfPYq92uv5QAAARY"]
[Tue Feb 24 06:27:59.916280 2026] [:error] [pid 11672:tid 11674] [client 20.14.131.24:44903] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/gg.php"] [unique_id "aZzUb_a0fhnmfPYq92uv6QAAAQA"]
[Tue Feb 24 06:28:00.661005 2026] [:error] [pid 37538:tid 37559] [client 20.14.131.24:44713] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/gg.php"] [unique_id "aZzUcCynTiHZ9J0Y2nZpyQAAAAs"]
[Tue Feb 24 06:28:01.397952 2026] [:error] [pid 37538:tid 37568] [client 20.14.131.24:44809] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/gg.php"] [unique_id "aZzUcSynTiHZ9J0Y2nZpzgAAABQ"]
[Tue Feb 24 06:28:02.349032 2026] [:error] [pid 37538:tid 37570] [client 20.14.131.24:44764] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/gg.php"] [unique_id "aZzUciynTiHZ9J0Y2nZpzwAAABY"]
[Tue Feb 24 06:28:03.054044 2026] [:error] [pid 11672:tid 11683] [client 20.14.131.24:44915] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/we2.php"] [unique_id "aZzUc_a0fhnmfPYq92uv8QAAAQk"]
[Tue Feb 24 06:28:03.755481 2026] [:error] [pid 37540:tid 37613] [client 20.14.131.24:44737] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/we2.php"] [unique_id "aZzUcyahRAUBJS8hpJVrsAAAAIs"]
[Tue Feb 24 06:28:04.434819 2026] [:error] [pid 11672:tid 11696] [client 20.14.131.24:44925] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/we2.php"] [unique_id "aZzUdPa0fhnmfPYq92uv9gAAARY"]
[Tue Feb 24 06:28:04.993919 2026] [:error] [pid 11672:tid 11689] [client 20.14.131.24:44736] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/we2.php"] [unique_id "aZzUdPa0fhnmfPYq92uv9wAAAQ8"]
[Tue Feb 24 06:28:05.498600 2026] [:error] [pid 37644:tid 37646] [client 20.14.131.24:44674] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/04.php"] [unique_id "aZzUdULaEhVDwBRydH1Z3wAAAMA"]
[Tue Feb 24 06:28:06.024302 2026] [:error] [pid 37644:tid 37651] [client 20.14.131.24:44784] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/04.php"] [unique_id "aZzUdkLaEhVDwBRydH1Z4QAAAMU"]
[Tue Feb 24 06:28:06.481559 2026] [:error] [pid 37644:tid 37665] [client 20.14.131.24:44778] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/04.php"] [unique_id "aZzUdkLaEhVDwBRydH1Z4gAAANM"]
[Tue Feb 24 06:28:07.017085 2026] [:error] [pid 37644:tid 37654] [client 20.14.131.24:44701] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/04.php"] [unique_id "aZzUd0LaEhVDwBRydH1Z5gAAAMg"]
[Tue Feb 24 06:28:07.716617 2026] [:error] [pid 37644:tid 37650] [client 20.14.131.24:44708] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/333.php"] [unique_id "aZzUd0LaEhVDwBRydH1Z6QAAAMQ"]
[Tue Feb 24 06:28:08.186072 2026] [:error] [pid 11672:tid 11685] [client 20.14.131.24:44744] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/333.php"] [unique_id "aZzUePa0fhnmfPYq92uv_wAAAQs"]
[Tue Feb 24 06:28:08.620986 2026] [:error] [pid 11672:tid 11683] [client 20.14.131.24:44742] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/333.php"] [unique_id "aZzUePa0fhnmfPYq92uwAQAAAQk"]
[Tue Feb 24 06:28:09.396980 2026] [:error] [pid 37644:tid 37663] [client 20.14.131.24:44718] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/333.php"] [unique_id "aZzUeULaEhVDwBRydH1aKQAAANE"]
[Tue Feb 24 06:28:09.862237 2026] [:error] [pid 37644:tid 37659] [client 20.14.131.24:44706] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/520.php"] [unique_id "aZzUeULaEhVDwBRydH1aLQAAAM0"]
[Tue Feb 24 06:28:10.510715 2026] [:error] [pid 37538:tid 37561] [client 20.14.131.24:44834] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/520.php"] [unique_id "aZzUeiynTiHZ9J0Y2nZp8QAAAA0"]
[Tue Feb 24 06:28:11.003649 2026] [:error] [pid 11672:tid 11686] [client 20.14.131.24:44678] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/520.php"] [unique_id "aZzUe_a0fhnmfPYq92uwBgAAAQw"]
[Tue Feb 24 06:28:11.734309 2026] [:error] [pid 37539:tid 37586] [client 20.14.131.24:44786] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/520.php"] [unique_id "aZzUe3Enr46jUQep9z_UWwAAAEs"]
[Tue Feb 24 06:28:12.332524 2026] [:error] [pid 11672:tid 11687] [client 20.14.131.24:44785] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ar.php"] [unique_id "aZzUfPa0fhnmfPYq92uwBwAAAQ0"]
[Tue Feb 24 06:28:13.568759 2026] [:error] [pid 37540:tid 37625] [client 20.14.131.24:44783] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ar.php"] [unique_id "aZzUfSahRAUBJS8hpJVrtQAAAJc"]
[Tue Feb 24 06:28:14.278213 2026] [:error] [pid 37644:tid 37654] [client 20.14.131.24:44709] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ar.php"] [unique_id "aZzUfkLaEhVDwBRydH1aUgAAAMg"]
[Tue Feb 24 06:28:15.187627 2026] [:error] [pid 37644:tid 37669] [client 20.14.131.24:44673] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ar.php"] [unique_id "aZzUf0LaEhVDwBRydH1aVAAAANc"]
[Tue Feb 24 06:28:15.939884 2026] [:error] [pid 37644:tid 37659] [client 20.14.131.24:44682] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/x.php"] [unique_id "aZzUf0LaEhVDwBRydH1aVgAAAM0"]
[Tue Feb 24 06:28:16.578341 2026] [:error] [pid 37540:tid 37624] [client 20.14.131.24:44772] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/x.php"] [unique_id "aZzUgCahRAUBJS8hpJVrtwAAAJY"]
[Tue Feb 24 06:28:17.346604 2026] [:error] [pid 11672:tid 11691] [client 20.14.131.24:44799] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/x.php"] [unique_id "aZzUgfa0fhnmfPYq92uwDQAAARE"]
[Tue Feb 24 06:28:18.130160 2026] [:error] [pid 37644:tid 37649] [client 20.14.131.24:44738] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/x.php"] [unique_id "aZzUgkLaEhVDwBRydH1aWQAAAMM"]
[Tue Feb 24 06:28:18.689887 2026] [:error] [pid 11672:tid 11687] [client 20.14.131.24:44748] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xx.php"] [unique_id "aZzUgva0fhnmfPYq92uwEQAAAQ0"]
[Tue Feb 24 06:28:19.402513 2026] [:error] [pid 11672:tid 11697] [client 20.14.131.24:44702] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xx.php"] [unique_id "aZzUg_a0fhnmfPYq92uwEgAAARc"]
[Tue Feb 24 06:28:19.961818 2026] [:error] [pid 37644:tid 37659] [client 20.14.131.24:44614] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xx.php"] [unique_id "aZzUg0LaEhVDwBRydH1aYAAAAM0"]
[Tue Feb 24 06:28:20.583049 2026] [:error] [pid 11672:tid 11694] [client 20.14.131.24:44794] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xx.php"] [unique_id "aZzUhPa0fhnmfPYq92uwFAAAARQ"]
[Tue Feb 24 06:28:21.329707 2026] [:error] [pid 37538:tid 37556] [client 20.14.131.24:44710] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/gifclass4.php"] [unique_id "aZzUhSynTiHZ9J0Y2nZp_QAAAAg"]
[Tue Feb 24 06:28:22.077111 2026] [:error] [pid 11672:tid 11690] [client 20.14.131.24:44762] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/gifclass4.php"] [unique_id "aZzUhva0fhnmfPYq92uwGQAAARA"]
[Tue Feb 24 06:28:22.748789 2026] [:error] [pid 37540:tid 37622] [client 20.14.131.24:44734] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/gifclass4.php"] [unique_id "aZzUhiahRAUBJS8hpJVruQAAAJQ"]
[Tue Feb 24 06:28:23.278161 2026] [:error] [pid 37644:tid 37662] [client 20.14.131.24:44773] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/gifclass4.php"] [unique_id "aZzUh0LaEhVDwBRydH1aaQAAANA"]
[Tue Feb 24 06:28:24.010945 2026] [:error] [pid 11672:tid 11691] [client 20.14.131.24:44733] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/2clas.php"] [unique_id "aZzUiPa0fhnmfPYq92uwGwAAARE"]
[Tue Feb 24 06:28:24.460261 2026] [:error] [pid 11672:tid 11674] [client 20.14.131.24:44703] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/2clas.php"] [unique_id "aZzUiPa0fhnmfPYq92uwHQAAAQA"]
[Tue Feb 24 06:28:24.931990 2026] [:error] [pid 37540:tid 37614] [client 20.14.131.24:44749] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/2clas.php"] [unique_id "aZzUiCahRAUBJS8hpJVrvQAAAIw"]
[Tue Feb 24 06:28:25.613352 2026] [:error] [pid 37539:tid 37591] [client 20.14.131.24:44707] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/2clas.php"] [unique_id "aZzUiXEnr46jUQep9z_UYAAAAFA"]
[Tue Feb 24 06:28:26.510025 2026] [:error] [pid 37644:tid 37651] [client 20.14.131.24:44717] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ave.php"] [unique_id "aZzUikLaEhVDwBRydH1acAAAAMU"]
[Tue Feb 24 06:28:27.113274 2026] [:error] [pid 37644:tid 37654] [client 20.14.131.24:44650] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ave.php"] [unique_id "aZzUi0LaEhVDwBRydH1acwAAAMg"]
[Tue Feb 24 06:28:28.560992 2026] [:error] [pid 11672:tid 11692] [client 20.14.131.24:44637] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ave.php"] [unique_id "aZzUjPa0fhnmfPYq92uwIAAAARI"]
[Tue Feb 24 06:28:29.067838 2026] [:error] [pid 37540:tid 37607] [client 20.14.131.24:44782] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ave.php"] [unique_id "aZzUjSahRAUBJS8hpJVrwAAAAIU"]
[Tue Feb 24 06:28:29.691863 2026] [:error] [pid 37538:tid 37555] [client 20.14.131.24:44788] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wrt.php"] [unique_id "aZzUjSynTiHZ9J0Y2nZqAQAAAAc"]
[Tue Feb 24 06:28:30.142666 2026] [:error] [pid 11672:tid 11688] [client 20.14.131.24:44683] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wrt.php"] [unique_id "aZzUjva0fhnmfPYq92uwIQAAAQ4"]
[Tue Feb 24 06:28:30.617888 2026] [:error] [pid 11672:tid 11695] [client 20.14.131.24:44651] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wrt.php"] [unique_id "aZzUjva0fhnmfPYq92uwIgAAARU"]
[Tue Feb 24 06:28:31.251641 2026] [:error] [pid 37540:tid 37624] [client 20.14.131.24:44679] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wrt.php"] [unique_id "aZzUjyahRAUBJS8hpJVrxAAAAJY"]
[Tue Feb 24 06:28:31.803509 2026] [:error] [pid 11672:tid 11681] [client 20.14.131.24:44566] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bibil.php"] [unique_id "aZzUj_a0fhnmfPYq92uwJQAAAQc"]
[Tue Feb 24 06:28:32.330508 2026] [:error] [pid 11672:tid 11677] [client 20.14.131.24:44688] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bibil.php"] [unique_id "aZzUkPa0fhnmfPYq92uwKAAAAQM"]
[Tue Feb 24 06:28:33.181202 2026] [:error] [pid 37644:tid 37659] [client 20.14.131.24:44695] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bibil.php"] [unique_id "aZzUkULaEhVDwBRydH1adgAAAM0"]
[Tue Feb 24 06:28:33.675630 2026] [:error] [pid 37538:tid 37548] [client 20.14.131.24:44705] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bibil.php"] [unique_id "aZzUkSynTiHZ9J0Y2nZqBwAAAAA"]
[Tue Feb 24 06:28:34.178284 2026] [:error] [pid 37644:tid 37649] [client 20.14.131.24:44740] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/radio.php"] [unique_id "aZzUkkLaEhVDwBRydH1aegAAAMM"]
[Tue Feb 24 06:28:34.636459 2026] [:error] [pid 37644:tid 37669] [client 20.14.131.24:44557] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/radio.php"] [unique_id "aZzUkkLaEhVDwBRydH1aewAAANc"]
[Tue Feb 24 06:28:35.188208 2026] [:error] [pid 37644:tid 37665] [client 20.14.131.24:44689] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/radio.php"] [unique_id "aZzUk0LaEhVDwBRydH1afQAAANM"]
[Tue Feb 24 06:28:35.874417 2026] [:error] [pid 37644:tid 37666] [client 20.14.131.24:44704] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/radio.php"] [unique_id "aZzUk0LaEhVDwBRydH1agAAAANQ"]
[Tue Feb 24 06:28:36.549437 2026] [:error] [pid 37644:tid 37647] [client 20.14.131.24:44622] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/files.php"] [unique_id "aZzUlELaEhVDwBRydH1aggAAAME"]
[Tue Feb 24 06:28:37.399596 2026] [:error] [pid 37644:tid 37650] [client 20.14.131.24:44898] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/files.php"] [unique_id "aZzUlULaEhVDwBRydH1ahQAAAMQ"]
[Tue Feb 24 06:28:38.181757 2026] [:error] [pid 37644:tid 37649] [client 20.14.131.24:44805] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/files.php"] [unique_id "aZzUlkLaEhVDwBRydH1ahwAAAMM"]
[Tue Feb 24 06:28:38.892740 2026] [:error] [pid 37539:tid 37581] [client 20.14.131.24:44647] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/files.php"] [unique_id "aZzUlnEnr46jUQep9z_UbQAAAEY"]
[Tue Feb 24 06:28:39.654778 2026] [:error] [pid 37539:tid 37579] [client 20.14.131.24:44685] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/file7.php"] [unique_id "aZzUl3Enr46jUQep9z_UcwAAAEQ"]
[Tue Feb 24 06:28:40.792712 2026] [:error] [pid 37540:tid 37602] [client 20.14.131.24:44720] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/file7.php"] [unique_id "aZzUmCahRAUBJS8hpJVrywAAAIA"]
[Tue Feb 24 06:28:41.269869 2026] [:error] [pid 11672:tid 11680] [client 20.14.131.24:44758] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/file7.php"] [unique_id "aZzUmfa0fhnmfPYq92uwMQAAAQY"]
[Tue Feb 24 06:28:41.941007 2026] [:error] [pid 37539:tid 37599] [client 20.14.131.24:44628] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/file7.php"] [unique_id "aZzUmXEnr46jUQep9z_UeAAAAFg"]
[Tue Feb 24 06:28:42.539552 2026] [:error] [pid 37539:tid 37576] [client 20.14.131.24:44623] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/gifclass.php"] [unique_id "aZzUmnEnr46jUQep9z_UegAAAEE"]
[Tue Feb 24 06:28:42.960614 2026] [:error] [pid 37539:tid 37588] [client 20.14.131.24:44692] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/gifclass.php"] [unique_id "aZzUmnEnr46jUQep9z_UewAAAE0"]
[Tue Feb 24 06:28:43.375716 2026] [:error] [pid 37538:tid 37562] [client 20.14.131.24:44549] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/gifclass.php"] [unique_id "aZzUmyynTiHZ9J0Y2nZqCQAAAA4"]
[Tue Feb 24 06:28:43.927648 2026] [:error] [pid 37538:tid 37556] [client 20.14.131.24:44791] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/gifclass.php"] [unique_id "aZzUmyynTiHZ9J0Y2nZqCwAAAAg"]
[Tue Feb 24 06:28:44.551461 2026] [:error] [pid 37540:tid 37604] [client 20.14.131.24:44696] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aZzUnCahRAUBJS8hpJVrzwAAAII"]
[Tue Feb 24 06:28:45.220544 2026] [:error] [pid 11672:tid 11694] [client 20.14.131.24:44630] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aZzUnfa0fhnmfPYq92uwOAAAARQ"]
[Tue Feb 24 06:28:45.931848 2026] [:error] [pid 37539:tid 37591] [client 20.14.131.24:44617] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aZzUnXEnr46jUQep9z_UfwAAAFA"]
[Tue Feb 24 06:28:46.429503 2026] [:error] [pid 37644:tid 37660] [client 20.14.131.24:44715] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aZzUnkLaEhVDwBRydH1akAAAAM4"]
[Tue Feb 24 06:28:46.902225 2026] [:error] [pid 37539:tid 37590] [client 20.14.131.24:44613] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/nox.php"] [unique_id "aZzUnnEnr46jUQep9z_UgAAAAE8"]
[Tue Feb 24 06:28:47.617019 2026] [:error] [pid 37538:tid 37555] [client 20.14.131.24:44721] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/nox.php"] [unique_id "aZzUnyynTiHZ9J0Y2nZqDwAAAAc"]
[Tue Feb 24 06:28:48.572037 2026] [:error] [pid 37540:tid 37621] [client 20.14.131.24:44680] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/nox.php"] [unique_id "aZzUoCahRAUBJS8hpJVr1gAAAJM"]
[Tue Feb 24 06:28:49.268196 2026] [:error] [pid 37540:tid 37607] [client 20.14.131.24:44660] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/nox.php"] [unique_id "aZzUoSahRAUBJS8hpJVr2QAAAIU"]
[Tue Feb 24 06:28:49.815314 2026] [:error] [pid 37540:tid 37610] [client 20.14.131.24:44719] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/file48.php"] [unique_id "aZzUoSahRAUBJS8hpJVr2gAAAIg"]
[Tue Feb 24 06:28:50.481669 2026] [:error] [pid 11672:tid 11693] [client 20.14.131.24:44631] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/file48.php"] [unique_id "aZzUova0fhnmfPYq92uwPAAAARM"]
[Tue Feb 24 06:28:51.039517 2026] [:error] [pid 11672:tid 11679] [client 20.14.131.24:44700] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/file48.php"] [unique_id "aZzUo_a0fhnmfPYq92uwPwAAAQU"]
[Tue Feb 24 06:28:51.530801 2026] [:error] [pid 37540:tid 37617] [client 20.14.131.24:44686] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/file48.php"] [unique_id "aZzUoyahRAUBJS8hpJVr3wAAAI8"]
[Tue Feb 24 06:28:52.368920 2026] [proxy_fcgi:error] [pid 37540:tid 37626] [client 20.14.131.24:44712] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 06:28:52.650889 2026] [proxy_fcgi:error] [pid 37540:tid 37622] [client 20.14.131.24:44712] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 06:28:52.951236 2026] [proxy_fcgi:error] [pid 37540:tid 37615] [client 20.14.131.24:44712] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 06:28:53.156150 2026] [proxy_fcgi:error] [pid 37540:tid 37613] [client 20.14.131.24:44712] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 06:28:53.421372 2026] [proxy_fcgi:error] [pid 37540:tid 37620] [client 20.14.131.24:44712] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 06:28:53.632892 2026] [proxy_fcgi:error] [pid 37540:tid 37621] [client 20.14.131.24:44712] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 06:28:53.860274 2026] [proxy_fcgi:error] [pid 37540:tid 37610] [client 20.14.131.24:44712] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 06:28:54.176366 2026] [proxy_fcgi:error] [pid 37540:tid 37625] [client 20.14.131.24:44712] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 06:28:54.404467 2026] [proxy_fcgi:error] [pid 37540:tid 37606] [client 20.14.131.24:44712] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 06:28:54.607831 2026] [proxy_fcgi:error] [pid 37540:tid 37609] [client 20.14.131.24:44712] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 06:28:54.926844 2026] [proxy_fcgi:error] [pid 37540:tid 37623] [client 20.14.131.24:44712] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 06:28:55.135279 2026] [:error] [pid 37540:tid 37605] [client 20.14.131.24:44712] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/az.php"] [unique_id "aZzUpyahRAUBJS8hpJVr8QAAAIM"]
[Tue Feb 24 06:28:55.888145 2026] [:error] [pid 37540:tid 37603] [client 20.14.131.24:44731] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/az.php"] [unique_id "aZzUpyahRAUBJS8hpJVr8gAAAIE"]
[Tue Feb 24 06:28:56.587423 2026] [:error] [pid 37538:tid 37553] [client 20.14.131.24:44648] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/az.php"] [unique_id "aZzUqCynTiHZ9J0Y2nZqFwAAAAU"]
[Tue Feb 24 06:28:57.631611 2026] [:error] [pid 37539:tid 37585] [client 20.14.131.24:44947] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/az.php"] [unique_id "aZzUqXEnr46jUQep9z_UhgAAAEo"]
[Tue Feb 24 06:28:58.481288 2026] [:error] [pid 37539:tid 37576] [client 20.14.131.24:44649] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xaz.php"] [unique_id "aZzUqnEnr46jUQep9z_UiAAAAEE"]
[Tue Feb 24 06:28:59.129612 2026] [:error] [pid 37539:tid 37578] [client 20.14.131.24:44722] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xaz.php"] [unique_id "aZzUq3Enr46jUQep9z_UiQAAAEM"]
[Tue Feb 24 06:28:59.577456 2026] [:error] [pid 37538:tid 37559] [client 20.14.131.24:44739] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xaz.php"] [unique_id "aZzUqyynTiHZ9J0Y2nZqGQAAAAs"]
[Tue Feb 24 06:29:00.490896 2026] [:error] [pid 11672:tid 11696] [client 20.14.131.24:44615] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xaz.php"] [unique_id "aZzUrPa0fhnmfPYq92uwSwAAARY"]
[Tue Feb 24 06:29:01.020138 2026] [:error] [pid 37539:tid 37583] [client 20.14.131.24:44640] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/up4.php"] [unique_id "aZzUrXEnr46jUQep9z_UjgAAAEg"]
[Tue Feb 24 06:29:02.074560 2026] [:error] [pid 11672:tid 11691] [client 20.14.131.24:44694] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/up4.php"] [unique_id "aZzUrva0fhnmfPYq92uwTQAAARE"]
[Tue Feb 24 06:29:03.426313 2026] [:error] [pid 37539:tid 37585] [client 20.14.131.24:44665] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/up4.php"] [unique_id "aZzUr3Enr46jUQep9z_UkgAAAEo"]
[Tue Feb 24 06:29:04.073410 2026] [:error] [pid 37539:tid 37598] [client 20.14.131.24:44632] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/up4.php"] [unique_id "aZzUsHEnr46jUQep9z_UlAAAAFc"]
[Tue Feb 24 06:29:04.609435 2026] [:error] [pid 37539:tid 37599] [client 20.14.131.24:44634] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/1aa.php"] [unique_id "aZzUsHEnr46jUQep9z_UlgAAAFg"]
[Tue Feb 24 06:29:05.062835 2026] [:error] [pid 37538:tid 37556] [client 20.14.131.24:44546] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/1aa.php"] [unique_id "aZzUsSynTiHZ9J0Y2nZqIwAAAAg"]
[Tue Feb 24 06:29:05.639326 2026] [:error] [pid 37540:tid 37607] [client 20.14.131.24:44714] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/1aa.php"] [unique_id "aZzUsSahRAUBJS8hpJVr_AAAAIU"]
[Tue Feb 24 06:29:06.177570 2026] [:error] [pid 11672:tid 11697] [client 20.14.131.24:44554] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/1aa.php"] [unique_id "aZzUsva0fhnmfPYq92uwUAAAARc"]
[Tue Feb 24 06:29:06.911852 2026] [:error] [pid 37539:tid 37596] [client 20.14.131.24:44942] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/elp.php"] [unique_id "aZzUsnEnr46jUQep9z_UmQAAAFU"]
[Tue Feb 24 06:29:07.427045 2026] [:error] [pid 37539:tid 37590] [client 20.14.131.24:44556] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/elp.php"] [unique_id "aZzUs3Enr46jUQep9z_UmwAAAE8"]
[Tue Feb 24 06:29:08.063799 2026] [:error] [pid 11672:tid 11689] [client 20.14.131.24:44944] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/elp.php"] [unique_id "aZzUtPa0fhnmfPYq92uwUgAAAQ8"]
[Tue Feb 24 06:29:08.833073 2026] [:error] [pid 37540:tid 37623] [client 20.14.131.24:44585] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/elp.php"] [unique_id "aZzUtCahRAUBJS8hpJVr_wAAAJU"]
[Tue Feb 24 06:29:09.297028 2026] [:error] [pid 37538:tid 37564] [client 20.14.131.24:44775] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wtz.php"] [unique_id "aZzUtSynTiHZ9J0Y2nZqKgAAABA"]
[Tue Feb 24 06:29:10.074785 2026] [:error] [pid 37644:tid 37667] [client 20.14.131.24:44655] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wtz.php"] [unique_id "aZzUtkLaEhVDwBRydH1amAAAANU"]
[Tue Feb 24 06:29:11.097511 2026] [:error] [pid 37644:tid 37653] [client 20.14.131.24:45031] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wtz.php"] [unique_id "aZzUt0LaEhVDwBRydH1amwAAAMc"]
[Tue Feb 24 06:29:12.000085 2026] [:error] [pid 37644:tid 37656] [client 20.14.131.24:45055] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wtz.php"] [unique_id "aZzUt0LaEhVDwBRydH1angAAAMo"]
[Tue Feb 24 06:29:12.815894 2026] [:error] [pid 37644:tid 37662] [client 20.14.131.24:44932] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/galex.php"] [unique_id "aZzUuELaEhVDwBRydH1aowAAANA"]
[Tue Feb 24 06:29:13.802714 2026] [:error] [pid 37540:tid 37620] [client 20.14.131.24:45051] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/galex.php"] [unique_id "aZzUuSahRAUBJS8hpJVsBQAAAJI"]
[Tue Feb 24 06:29:14.464197 2026] [:error] [pid 37540:tid 37616] [client 20.14.131.24:44874] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/galex.php"] [unique_id "aZzUuiahRAUBJS8hpJVsCAAAAI4"]
[Tue Feb 24 06:29:15.383471 2026] [:error] [pid 37540:tid 37619] [client 20.14.131.24:45011] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/galex.php"] [unique_id "aZzUuyahRAUBJS8hpJVsCQAAAJE"]
[Tue Feb 24 06:29:16.045944 2026] [:error] [pid 11672:tid 11674] [client 20.14.131.24:44563] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xb.php"] [unique_id "aZzUvPa0fhnmfPYq92uwYQAAAQA"]
[Tue Feb 24 06:29:16.984529 2026] [:error] [pid 37539:tid 37586] [client 20.14.131.24:44697] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xb.php"] [unique_id "aZzUvHEnr46jUQep9z_UpQAAAEs"]
[Tue Feb 24 06:29:17.928507 2026] [:error] [pid 37539:tid 37588] [client 20.14.131.24:44641] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xb.php"] [unique_id "aZzUvXEnr46jUQep9z_UpwAAAE0"]
[Tue Feb 24 06:29:18.586666 2026] [:error] [pid 37644:tid 37646] [client 20.14.131.24:44995] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xb.php"] [unique_id "aZzUvkLaEhVDwBRydH1apgAAAMA"]
[Tue Feb 24 06:29:19.491143 2026] [:error] [pid 11672:tid 11681] [client 20.14.131.24:44769] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ova.php"] [unique_id "aZzUv_a0fhnmfPYq92uwZgAAAQc"]
[Tue Feb 24 06:29:20.297477 2026] [:error] [pid 11672:tid 11688] [client 20.14.131.24:44812] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ova.php"] [unique_id "aZzUwPa0fhnmfPYq92uwagAAAQ4"]
[Tue Feb 24 06:29:21.740339 2026] [:error] [pid 37540:tid 37618] [client 20.14.131.24:44652] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ova.php"] [unique_id "aZzUwSahRAUBJS8hpJVsEQAAAJA"]
[Tue Feb 24 06:29:22.777572 2026] [:error] [pid 37540:tid 37614] [client 20.14.131.24:45024] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ova.php"] [unique_id "aZzUwiahRAUBJS8hpJVsFwAAAIw"]
[Tue Feb 24 06:29:23.562758 2026] [:error] [pid 37540:tid 37625] [client 20.14.131.24:45001] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/vx.php"] [unique_id "aZzUwyahRAUBJS8hpJVsGwAAAJc"]
[Tue Feb 24 06:29:24.198608 2026] [:error] [pid 37644:tid 37651] [client 20.14.131.24:44621] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/vx.php"] [unique_id "aZzUxELaEhVDwBRydH1arQAAAMU"]
[Tue Feb 24 06:29:24.664569 2026] [:error] [pid 37644:tid 37660] [client 20.14.131.24:45012] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/vx.php"] [unique_id "aZzUxELaEhVDwBRydH1asgAAAM4"]
[Tue Feb 24 06:29:25.338153 2026] [:error] [pid 11672:tid 11685] [client 20.14.131.24:44668] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/vx.php"] [unique_id "aZzUxfa0fhnmfPYq92uwdQAAAQs"]
[Tue Feb 24 06:29:26.126317 2026] [:error] [pid 37540:tid 37614] [client 20.14.131.24:45023] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/rh.php"] [unique_id "aZzUxiahRAUBJS8hpJVsIgAAAIw"]
[Tue Feb 24 06:29:26.826351 2026] [:error] [pid 37539:tid 37584] [client 20.14.131.24:45049] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/rh.php"] [unique_id "aZzUxnEnr46jUQep9z_UrgAAAEk"]
[Tue Feb 24 06:29:27.910406 2026] [:error] [pid 37539:tid 37585] [client 20.14.131.24:45007] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/rh.php"] [unique_id "aZzUx3Enr46jUQep9z_UsAAAAEo"]
[Tue Feb 24 06:29:28.611311 2026] [:error] [pid 37644:tid 37660] [client 20.14.131.24:44619] [client 20.14.131.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/rh.php"] [unique_id "aZzUyELaEhVDwBRydH1auwAAAM4"]
[Tue Feb 24 10:40:19.705003 2026] [:error] [pid 37538:tid 37556] [client 94.247.172.129:56409] [client 94.247.172.129] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dwelectservices.com.au|F|4"] [data "close, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dwelectservices.com.au"] [uri "/"] [unique_id "aZ0PkyynTiHZ9J0Y2naKcgAAAAg"]
[Tue Feb 24 14:43:34.097284 2026] [:error] [pid 11672:tid 11693] [client 104.28.163.82:17265] [client 104.28.163.82] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/style.php"] [unique_id "aZ1Ilva0fhnmfPYq92tNxwAAARM"]
[Wed Feb 25 22:40:24.917934 2026] [proxy_fcgi:error] [pid 20659:tid 20716] [client 4.204.200.32:59279] AH01071: Got error 'Primary script unknown'
[Wed Feb 25 22:40:25.191013 2026] [proxy_fcgi:error] [pid 20659:tid 20698] [client 4.204.200.32:59279] AH01071: Got error 'Primary script unknown'
[Wed Feb 25 22:40:25.647298 2026] [proxy_fcgi:error] [pid 20659:tid 20710] [client 4.204.200.32:59279] AH01071: Got error 'Primary script unknown'
[Wed Feb 25 22:40:25.860305 2026] [proxy_fcgi:error] [pid 20659:tid 20700] [client 4.204.200.32:59279] AH01071: Got error 'Primary script unknown'
[Wed Feb 25 22:40:26.071494 2026] [proxy_fcgi:error] [pid 20659:tid 20712] [client 4.204.200.32:59279] AH01071: Got error 'Primary script unknown'
[Wed Feb 25 22:40:26.280819 2026] [proxy_fcgi:error] [pid 20659:tid 20715] [client 4.204.200.32:59279] AH01071: Got error 'Primary script unknown'
[Wed Feb 25 22:40:26.520550 2026] [proxy_fcgi:error] [pid 20659:tid 20697] [client 4.204.200.32:59279] AH01071: Got error 'Primary script unknown'
[Wed Feb 25 22:40:26.982724 2026] [proxy_fcgi:error] [pid 20659:tid 20717] [client 4.204.200.32:59279] AH01071: Got error 'Primary script unknown'
[Wed Feb 25 22:40:27.194167 2026] [proxy_fcgi:error] [pid 20659:tid 20709] [client 4.204.200.32:59279] AH01071: Got error 'Primary script unknown'
[Wed Feb 25 22:40:27.433831 2026] [proxy_fcgi:error] [pid 20659:tid 20718] [client 4.204.200.32:59279] AH01071: Got error 'Primary script unknown'
[Wed Feb 25 22:40:27.645105 2026] [:error] [pid 20659:tid 20699] [client 4.204.200.32:59279] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x123.php"] [unique_id "aZ8J2z_THK_HtK-Q44JNdgAAAEQ"]
[Wed Feb 25 22:40:30.322488 2026] [:error] [pid 20659:tid 20696] [client 4.204.200.32:59294] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x123.php"] [unique_id "aZ8J3j_THK_HtK-Q44JNdwAAAEE"]
[Wed Feb 25 22:40:30.921233 2026] [:error] [pid 60387:tid 60487] [client 4.204.200.32:59286] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x123.php"] [unique_id "aZ8J3oHL0QH7Sr13X0KpAgAAAo8"]
[Wed Feb 25 22:40:32.899031 2026] [:error] [pid 5556:tid 5591] [client 4.204.200.32:59280] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x123.php"] [unique_id "aZ8J4KOrYeaTyh7lGRWhmwAAAcQ"]
[Wed Feb 25 22:40:33.820967 2026] [:error] [pid 5556:tid 5590] [client 4.204.200.32:59269] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-act.php"] [unique_id "aZ8J4aOrYeaTyh7lGRWhnwAAAcM"]
[Wed Feb 25 22:40:34.928008 2026] [:error] [pid 5556:tid 5594] [client 4.204.200.32:30216] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-act.php"] [unique_id "aZ8J4qOrYeaTyh7lGRWhowAAAcc"]
[Wed Feb 25 22:40:36.311892 2026] [:error] [pid 5619:tid 5647] [client 4.204.200.32:30231] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-act.php"] [unique_id "aZ8J5JFUzdv-0L_F4fteagAAAgw"]
[Wed Feb 25 22:40:37.447276 2026] [:error] [pid 5619:tid 5640] [client 4.204.200.32:60058] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-act.php"] [unique_id "aZ8J5ZFUzdv-0L_F4fteawAAAgU"]
[Wed Feb 25 22:40:38.388034 2026] [:error] [pid 5556:tid 5600] [client 4.204.200.32:59310] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/moshou.php"] [unique_id "aZ8J5qOrYeaTyh7lGRWhpgAAAc0"]
[Wed Feb 25 22:40:39.755132 2026] [:error] [pid 20659:tid 20716] [client 4.204.200.32:52839] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/moshou.php"] [unique_id "aZ8J5z_THK_HtK-Q44JNfAAAAFU"]
[Wed Feb 25 22:40:41.376412 2026] [:error] [pid 60387:tid 60484] [client 4.204.200.32:59284] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/moshou.php"] [unique_id "aZ8J6YHL0QH7Sr13X0KpFwAAAow"]
[Wed Feb 25 22:40:45.626992 2026] [:error] [pid 60387:tid 60493] [client 4.204.200.32:59317] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/moshou.php"] [unique_id "aZ8J7YHL0QH7Sr13X0KpIAAAApU"]
[Wed Feb 25 22:40:47.884330 2026] [:error] [pid 60387:tid 60473] [client 4.204.200.32:30234] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/seetox.php"] [unique_id "aZ8J74HL0QH7Sr13X0KpJAAAAoE"]
[Wed Feb 25 22:40:49.234222 2026] [:error] [pid 20659:tid 20703] [client 4.204.200.32:52807] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/seetox.php"] [unique_id "aZ8J8T_THK_HtK-Q44JNhAAAAEg"]
[Wed Feb 25 22:40:51.405602 2026] [:error] [pid 60498:tid 60506] [client 4.204.200.32:60072] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/seetox.php"] [unique_id "aZ8J8yFCVhQ3ffus0uJGrwAAAsE"]
[Wed Feb 25 22:40:53.181314 2026] [:error] [pid 60387:tid 60480] [client 4.204.200.32:52852] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/seetox.php"] [unique_id "aZ8J9YHL0QH7Sr13X0KpLAAAAog"]
[Wed Feb 25 22:40:54.623025 2026] [:error] [pid 60387:tid 60481] [client 4.204.200.32:52817] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dom.php"] [unique_id "aZ8J9oHL0QH7Sr13X0KpNQAAAok"]
[Wed Feb 25 22:40:58.502648 2026] [:error] [pid 37809:tid 37816] [client 4.204.200.32:52848] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dom.php"] [unique_id "aZ8J-iIC419p2bqBCnCYGQAAAIU"]
[Wed Feb 25 22:40:59.913000 2026] [:error] [pid 5556:tid 5596] [client 4.204.200.32:30257] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dom.php"] [unique_id "aZ8J-6OrYeaTyh7lGRWh-AAAAck"]
[Wed Feb 25 22:41:01.375367 2026] [:error] [pid 5556:tid 5604] [client 4.204.200.32:30215] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dom.php"] [unique_id "aZ8J_aOrYeaTyh7lGRWiHwAAAdE"]
[Wed Feb 25 22:41:02.816356 2026] [:error] [pid 60500:tid 60581] [client 4.204.200.32:60051] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws60.php"] [unique_id "aZ8J_vY9avxuno9KAT9giwAAA0E"]
[Wed Feb 25 22:41:07.238874 2026] [:error] [pid 5556:tid 5611] [client 4.204.200.32:60050] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws60.php"] [unique_id "aZ8KA6OrYeaTyh7lGRWiNAAAAdg"]
[Wed Feb 25 22:41:10.838358 2026] [:error] [pid 5556:tid 5600] [client 4.204.200.32:30266] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws60.php"] [unique_id "aZ8KBqOrYeaTyh7lGRWiPwAAAc0"]
[Wed Feb 25 22:41:12.018474 2026] [:error] [pid 5556:tid 5605] [client 4.204.200.32:52832] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws60.php"] [unique_id "aZ8KCKOrYeaTyh7lGRWiRQAAAdI"]
[Wed Feb 25 22:41:14.534040 2026] [:error] [pid 60290:tid 60305] [client 4.204.200.32:59308] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/samiri.php"] [unique_id "aZ8KCjPwSUztcPyiofq3HwAAAQ0"]
[Wed Feb 25 22:41:19.390049 2026] [:error] [pid 60500:tid 60610] [client 4.204.200.32:60044] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/samiri.php"] [unique_id "aZ8KD_Y9avxuno9KAT9gmAAAA1c"]
[Wed Feb 25 22:41:20.365616 2026] [:error] [pid 60498:tid 60517] [client 4.204.200.32:52815] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/samiri.php"] [unique_id "aZ8KECFCVhQ3ffus0uJG2AAAAsw"]
[Wed Feb 25 22:41:22.018048 2026] [:error] [pid 5556:tid 5596] [client 4.204.200.32:59264] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/samiri.php"] [unique_id "aZ8KEqOrYeaTyh7lGRWiWAAAAck"]
[Wed Feb 25 22:41:23.842640 2026] [:error] [pid 60500:tid 60584] [client 4.204.200.32:30664] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/plugins.php"] [unique_id "aZ8KE_Y9avxuno9KAT9gnQAAA0M"]
[Wed Feb 25 22:41:25.294535 2026] [:error] [pid 5556:tid 5604] [client 4.204.200.32:30235] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/plugins.php"] [unique_id "aZ8KFaOrYeaTyh7lGRWiXwAAAdE"]
[Wed Feb 25 22:41:26.343517 2026] [:error] [pid 5556:tid 5609] [client 4.204.200.32:52827] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/plugins.php"] [unique_id "aZ8KFqOrYeaTyh7lGRWiYwAAAdY"]
[Wed Feb 25 22:41:27.190230 2026] [proxy_fcgi:error] [pid 5556:tid 5606] [client 4.204.200.32:60056] AH01071: Got error 'Primary script unknown'
[Wed Feb 25 22:41:27.487482 2026] [proxy_fcgi:error] [pid 5556:tid 5595] [client 4.204.200.32:60056] AH01071: Got error 'Primary script unknown'
[Wed Feb 25 22:41:27.699034 2026] [proxy_fcgi:error] [pid 5556:tid 5600] [client 4.204.200.32:60056] AH01071: Got error 'Primary script unknown'
[Wed Feb 25 22:41:27.907991 2026] [proxy_fcgi:error] [pid 5556:tid 5601] [client 4.204.200.32:60056] AH01071: Got error 'Primary script unknown'
[Wed Feb 25 22:41:28.183883 2026] [proxy_fcgi:error] [pid 5556:tid 5608] [client 4.204.200.32:60056] AH01071: Got error 'Primary script unknown'
[Wed Feb 25 22:41:28.950820 2026] [proxy_fcgi:error] [pid 5556:tid 5602] [client 4.204.200.32:60056] AH01071: Got error 'Primary script unknown'
[Wed Feb 25 22:41:29.160293 2026] [proxy_fcgi:error] [pid 5556:tid 5605] [client 4.204.200.32:60056] AH01071: Got error 'Primary script unknown'
[Wed Feb 25 22:41:29.527377 2026] [proxy_fcgi:error] [pid 5556:tid 5595] [client 4.204.200.32:60056] AH01071: Got error 'Primary script unknown'
[Wed Feb 25 22:41:29.736286 2026] [proxy_fcgi:error] [pid 5556:tid 5590] [client 4.204.200.32:60056] AH01071: Got error 'Primary script unknown'
[Wed Feb 25 22:41:29.945196 2026] [proxy_fcgi:error] [pid 5556:tid 5600] [client 4.204.200.32:60056] AH01071: Got error 'Primary script unknown'
[Wed Feb 25 22:41:30.151632 2026] [:error] [pid 5556:tid 5593] [client 4.204.200.32:60056] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/motu.php"] [unique_id "aZ8KGqOrYeaTyh7lGRWiegAAAcY"]
[Wed Feb 25 22:41:34.982446 2026] [:error] [pid 20659:tid 20716] [client 4.204.200.32:30662] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/motu.php"] [unique_id "aZ8KHj_THK_HtK-Q44JNwQAAAFU"]
[Wed Feb 25 22:41:35.944500 2026] [:error] [pid 5619:tid 5641] [client 4.204.200.32:61463] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/motu.php"] [unique_id "aZ8KH5FUzdv-0L_F4fteegAAAgY"]
[Wed Feb 25 22:41:38.754704 2026] [:error] [pid 5556:tid 5602] [client 4.204.200.32:55167] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/motu.php"] [unique_id "aZ8KIqOrYeaTyh7lGRWiiAAAAc8"]
[Wed Feb 25 22:41:42.395236 2026] [:error] [pid 60500:tid 60605] [client 4.204.200.32:55114] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/66.php"] [unique_id "aZ8KJvY9avxuno9KAT9gpwAAA1I"]
[Wed Feb 25 22:41:44.364987 2026] [:error] [pid 5619:tid 5652] [client 4.204.200.32:30639] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/66.php"] [unique_id "aZ8KKJFUzdv-0L_F4fteggAAAhE"]
[Wed Feb 25 22:41:48.520337 2026] [:error] [pid 20659:tid 20702] [client 4.204.200.32:52309] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/66.php"] [unique_id "aZ8KLD_THK_HtK-Q44JN0gAAAEc"]
[Wed Feb 25 22:41:50.382933 2026] [:error] [pid 5556:tid 5592] [client 4.204.200.32:52317] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/66.php"] [unique_id "aZ8KLqOrYeaTyh7lGRWipwAAAcU"]
[Wed Feb 25 22:41:51.558516 2026] [:error] [pid 20659:tid 20701] [client 4.204.200.32:30632] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/leuk.php"] [unique_id "aZ8KLz_THK_HtK-Q44JN2gAAAEY"]
[Wed Feb 25 22:41:52.529444 2026] [:error] [pid 20659:tid 20697] [client 4.204.200.32:52319] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/leuk.php"] [unique_id "aZ8KMD_THK_HtK-Q44JN3gAAAEI"]
[Wed Feb 25 22:41:56.489939 2026] [:error] [pid 5556:tid 5604] [client 4.204.200.32:30558] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/leuk.php"] [unique_id "aZ8KNKOrYeaTyh7lGRWirwAAAdE"]
[Wed Feb 25 22:41:58.139468 2026] [:error] [pid 5556:tid 5605] [client 4.204.200.32:62734] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/leuk.php"] [unique_id "aZ8KNqOrYeaTyh7lGRWitwAAAdI"]
[Wed Feb 25 22:41:59.336321 2026] [:error] [pid 60290:tid 60302] [client 4.204.200.32:29773] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xqq.php"] [unique_id "aZ8KNzPwSUztcPyiofq3IwAAAQo"]
[Wed Feb 25 22:42:02.813343 2026] [:error] [pid 5619:tid 5640] [client 4.204.200.32:55079] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xqq.php"] [unique_id "aZ8KOpFUzdv-0L_F4ftekQAAAgU"]
[Wed Feb 25 22:42:05.970192 2026] [:error] [pid 20659:tid 20698] [client 4.204.200.32:55086] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xqq.php"] [unique_id "aZ8KPT_THK_HtK-Q44JN7AAAAEM"]
[Wed Feb 25 22:42:07.672011 2026] [:error] [pid 20659:tid 20702] [client 4.204.200.32:30077] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xqq.php"] [unique_id "aZ8KPz_THK_HtK-Q44JN9QAAAEc"]
[Wed Feb 25 22:42:10.090846 2026] [:error] [pid 20659:tid 20715] [client 4.204.200.32:30020] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kolda.php"] [unique_id "aZ8KQj_THK_HtK-Q44JN_QAAAFQ"]
[Wed Feb 25 22:42:11.708624 2026] [:error] [pid 20659:tid 20718] [client 4.204.200.32:58779] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kolda.php"] [unique_id "aZ8KQz_THK_HtK-Q44JN_wAAAFc"]
[Wed Feb 25 22:42:14.336532 2026] [:error] [pid 60498:tid 60512] [client 4.204.200.32:58839] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kolda.php"] [unique_id "aZ8KRiFCVhQ3ffus0uJG8AAAAsc"]
[Wed Feb 25 22:42:16.685514 2026] [:error] [pid 5556:tid 5588] [client 4.204.200.32:52275] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kolda.php"] [unique_id "aZ8KSKOrYeaTyh7lGRWi0AAAAcE"]
[Wed Feb 25 22:42:17.770045 2026] [:error] [pid 5556:tid 5596] [client 4.204.200.32:52278] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nw.php"] [unique_id "aZ8KSaOrYeaTyh7lGRWi1QAAAck"]
[Wed Feb 25 22:42:23.504307 2026] [:error] [pid 60290:tid 60293] [client 4.204.200.32:58770] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nw.php"] [unique_id "aZ8KTzPwSUztcPyiofq3JAAAAQE"]
[Wed Feb 25 22:42:24.776416 2026] [:error] [pid 20659:tid 20696] [client 4.204.200.32:58819] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nw.php"] [unique_id "aZ8KUD_THK_HtK-Q44JOCQAAAEE"]
[Wed Feb 25 22:42:27.682374 2026] [:error] [pid 60290:tid 60314] [client 4.204.200.32:52250] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nw.php"] [unique_id "aZ8KUzPwSUztcPyiofq3JQAAARY"]
[Wed Feb 25 22:42:30.641042 2026] [proxy_fcgi:error] [pid 20659:tid 20716] [client 4.204.200.32:54115] AH01071: Got error 'Primary script unknown'
[Wed Feb 25 22:42:30.857453 2026] [proxy_fcgi:error] [pid 20659:tid 20717] [client 4.204.200.32:54115] AH01071: Got error 'Primary script unknown'
[Wed Feb 25 22:42:31.085616 2026] [proxy_fcgi:error] [pid 20659:tid 20713] [client 4.204.200.32:54115] AH01071: Got error 'Primary script unknown'
[Wed Feb 25 22:42:31.313050 2026] [proxy_fcgi:error] [pid 20659:tid 20709] [client 4.204.200.32:54115] AH01071: Got error 'Primary script unknown'
[Wed Feb 25 22:42:31.529585 2026] [proxy_fcgi:error] [pid 20659:tid 20701] [client 4.204.200.32:54115] AH01071: Got error 'Primary script unknown'
[Wed Feb 25 22:42:31.740039 2026] [proxy_fcgi:error] [pid 20659:tid 20712] [client 4.204.200.32:54115] AH01071: Got error 'Primary script unknown'
[Wed Feb 25 22:42:31.948712 2026] [proxy_fcgi:error] [pid 20659:tid 20705] [client 4.204.200.32:54115] AH01071: Got error 'Primary script unknown'
[Wed Feb 25 22:42:32.160581 2026] [proxy_fcgi:error] [pid 20659:tid 20698] [client 4.204.200.32:54115] AH01071: Got error 'Primary script unknown'
[Wed Feb 25 22:42:32.452371 2026] [proxy_fcgi:error] [pid 20659:tid 20695] [client 4.204.200.32:54115] AH01071: Got error 'Primary script unknown'
[Wed Feb 25 22:42:32.670405 2026] [proxy_fcgi:error] [pid 20659:tid 20697] [client 4.204.200.32:54115] AH01071: Got error 'Primary script unknown'
[Wed Feb 25 22:42:32.892795 2026] [proxy_fcgi:error] [pid 20659:tid 20696] [client 4.204.200.32:54115] AH01071: Got error 'Primary script unknown'
[Wed Feb 25 22:42:33.100126 2026] [:error] [pid 20659:tid 20706] [client 4.204.200.32:54115] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ms-edit.php"] [unique_id "aZ8KWT_THK_HtK-Q44JOGQAAAEs"]
[Wed Feb 25 22:42:33.837601 2026] [:error] [pid 20763:tid 20787] [client 4.204.200.32:59372] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ms-edit.php"] [unique_id "aZ8KWU0w_zc13OX-xiYreAAAANY"]
[Wed Feb 25 22:42:35.028247 2026] [:error] [pid 60498:tid 60528] [client 4.204.200.32:54087] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ms-edit.php"] [unique_id "aZ8KWyFCVhQ3ffus0uJHAgAAAtc"]
[Wed Feb 25 22:42:36.940572 2026] [:error] [pid 60500:tid 60611] [client 4.204.200.32:54134] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ms-edit.php"] [unique_id "aZ8KXPY9avxuno9KAT9gtgAAA1g"]
[Wed Feb 25 22:42:37.738465 2026] [:error] [pid 60387:tid 60493] [client 4.204.200.32:58874] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ya.php"] [unique_id "aZ8KXYHL0QH7Sr13X0KpZAAAApU"]
[Wed Feb 25 22:42:39.126289 2026] [:error] [pid 20659:tid 20704] [client 4.204.200.32:58866] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ya.php"] [unique_id "aZ8KXz_THK_HtK-Q44JOGgAAAEk"]
[Wed Feb 25 22:42:43.033232 2026] [:error] [pid 60500:tid 60585] [client 4.204.200.32:54106] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ya.php"] [unique_id "aZ8KY_Y9avxuno9KAT9gvwAAA0Q"]
[Wed Feb 25 22:42:43.971581 2026] [:error] [pid 60387:tid 60485] [client 4.204.200.32:58828] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ya.php"] [unique_id "aZ8KY4HL0QH7Sr13X0KpagAAAo0"]
[Wed Feb 25 22:42:45.376574 2026] [:error] [pid 60500:tid 60584] [client 4.204.200.32:59370] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/grsiuk.php"] [unique_id "aZ8KZfY9avxuno9KAT9gwwAAA0M"]
[Wed Feb 25 22:42:47.610667 2026] [:error] [pid 60387:tid 60489] [client 4.204.200.32:54100] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/grsiuk.php"] [unique_id "aZ8KZ4HL0QH7Sr13X0KpbgAAApE"]
[Wed Feb 25 22:42:48.829250 2026] [:error] [pid 60387:tid 60472] [client 4.204.200.32:52241] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/grsiuk.php"] [unique_id "aZ8KaIHL0QH7Sr13X0KpdAAAAoA"]
[Wed Feb 25 22:42:50.836140 2026] [:error] [pid 60387:tid 60489] [client 4.204.200.32:54128] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/grsiuk.php"] [unique_id "aZ8KaoHL0QH7Sr13X0KpewAAApE"]
[Wed Feb 25 22:42:52.281659 2026] [:error] [pid 20659:tid 20703] [client 4.204.200.32:54141] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-blog.php"] [unique_id "aZ8KbD_THK_HtK-Q44JOKAAAAEg"]
[Wed Feb 25 22:42:53.631029 2026] [:error] [pid 60500:tid 60596] [client 4.204.200.32:59342] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-blog.php"] [unique_id "aZ8KbfY9avxuno9KAT9gxQAAA0s"]
[Wed Feb 25 22:42:56.282174 2026] [:error] [pid 20763:tid 20778] [client 4.204.200.32:59360] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-blog.php"] [unique_id "aZ8KcE0w_zc13OX-xiYrfAAAAM0"]
[Wed Feb 25 22:42:58.701085 2026] [:error] [pid 20659:tid 20697] [client 4.204.200.32:59390] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-blog.php"] [unique_id "aZ8Kcj_THK_HtK-Q44JOLgAAAEI"]
[Wed Feb 25 22:43:01.292788 2026] [:error] [pid 20763:tid 20772] [client 4.204.200.32:54125] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-access.php"] [unique_id "aZ8KdU0w_zc13OX-xiYrgQAAAMc"]
[Wed Feb 25 22:43:04.351629 2026] [:error] [pid 60387:tid 60488] [client 4.204.200.32:52235] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-access.php"] [unique_id "aZ8KeIHL0QH7Sr13X0KpkwAAApA"]
[Wed Feb 25 22:43:07.875051 2026] [:error] [pid 20659:tid 20706] [client 4.204.200.32:58817] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-access.php"] [unique_id "aZ8Kez_THK_HtK-Q44JOLwAAAEs"]
[Wed Feb 25 22:43:08.610673 2026] [:error] [pid 20659:tid 20711] [client 4.204.200.32:60118] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-access.php"] [unique_id "aZ8KfD_THK_HtK-Q44JOMQAAAFA"]
[Wed Feb 25 22:43:11.505156 2026] [:error] [pid 20659:tid 20707] [client 4.204.200.32:59349] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a1vx.php"] [unique_id "aZ8Kfz_THK_HtK-Q44JONQAAAEw"]
[Wed Feb 25 22:43:13.077318 2026] [:error] [pid 20659:tid 20705] [client 4.204.200.32:58824] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a1vx.php"] [unique_id "aZ8KgT_THK_HtK-Q44JONwAAAEo"]
[Wed Feb 25 22:43:14.539333 2026] [:error] [pid 60387:tid 60476] [client 4.204.200.32:64052] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a1vx.php"] [unique_id "aZ8KgoHL0QH7Sr13X0KplwAAAoQ"]
[Wed Feb 25 22:43:17.084858 2026] [:error] [pid 5619:tid 5642] [client 4.204.200.32:59347] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a1vx.php"] [unique_id "aZ8KhZFUzdv-0L_F4ftetQAAAgc"]
[Wed Feb 25 22:43:19.318159 2026] [:error] [pid 20659:tid 20695] [client 4.204.200.32:59373] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sbhu.php"] [unique_id "aZ8Khz_THK_HtK-Q44JOOQAAAEA"]
[Wed Feb 25 22:43:20.925916 2026] [:error] [pid 60500:tid 60601] [client 4.204.200.32:58821] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sbhu.php"] [unique_id "aZ8KiPY9avxuno9KAT9gzwAAA04"]
[Wed Feb 25 22:43:22.690288 2026] [:error] [pid 60498:tid 60522] [client 4.204.200.32:54102] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sbhu.php"] [unique_id "aZ8KiiFCVhQ3ffus0uJHGAAAAtE"]
[Wed Feb 25 22:43:28.796942 2026] [:error] [pid 5619:tid 5645] [client 4.204.200.32:54099] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sbhu.php"] [unique_id "aZ8KkJFUzdv-0L_F4ftexQAAAgo"]
[Wed Feb 25 22:43:30.092521 2026] [:error] [pid 37809:tid 37816] [client 4.204.200.32:58865] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-the.php"] [unique_id "aZ8KkiIC419p2bqBCnCYLwAAAIU"]
[Wed Feb 25 22:43:32.679516 2026] [proxy_fcgi:error] [pid 5556:tid 5589] [client 4.204.200.32:59377] AH01071: Got error 'Primary script unknown'
[Wed Feb 25 22:43:33.050532 2026] [proxy_fcgi:error] [pid 5556:tid 5602] [client 4.204.200.32:59377] AH01071: Got error 'Primary script unknown'
[Wed Feb 25 22:43:33.276291 2026] [proxy_fcgi:error] [pid 5556:tid 5587] [client 4.204.200.32:59377] AH01071: Got error 'Primary script unknown'
[Wed Feb 25 22:43:33.632583 2026] [proxy_fcgi:error] [pid 5556:tid 5590] [client 4.204.200.32:59377] AH01071: Got error 'Primary script unknown'
[Wed Feb 25 22:43:33.856745 2026] [proxy_fcgi:error] [pid 5556:tid 5593] [client 4.204.200.32:59377] AH01071: Got error 'Primary script unknown'
[Wed Feb 25 22:43:34.116019 2026] [proxy_fcgi:error] [pid 5556:tid 5594] [client 4.204.200.32:59377] AH01071: Got error 'Primary script unknown'
[Wed Feb 25 22:43:34.325598 2026] [proxy_fcgi:error] [pid 5556:tid 5605] [client 4.204.200.32:59377] AH01071: Got error 'Primary script unknown'
[Wed Feb 25 22:43:34.540021 2026] [proxy_fcgi:error] [pid 5556:tid 5601] [client 4.204.200.32:59377] AH01071: Got error 'Primary script unknown'
[Wed Feb 25 22:43:34.757172 2026] [proxy_fcgi:error] [pid 5556:tid 5598] [client 4.204.200.32:59377] AH01071: Got error 'Primary script unknown'
[Wed Feb 25 22:56:28.113312 2026] [:error] [pid 5556:tid 5611] [client 195.178.110.28:33842] [client 195.178.110.28] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.git/config"] [unique_id "aZ8NnKOrYeaTyh7lGRWm2QAAAdg"]
[Thu Feb 26 04:44:48.794976 2026] [:error] [pid 9702:tid 9724] [client 20.151.114.166:51197] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aZ9fQJvL1wp7EOGdesw6cAAAANI"]
[Thu Feb 26 04:44:49.695301 2026] [:error] [pid 9702:tid 9717] [client 20.151.114.166:51189] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aZ9fQZvL1wp7EOGdesw6dwAAAMs"]
[Thu Feb 26 04:44:50.325066 2026] [:error] [pid 6071:tid 6085] [client 20.151.114.166:51075] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aZ9fQoQfAzdrpgft0745VgAAAQs"]
[Thu Feb 26 04:44:51.024622 2026] [:error] [pid 9589:tid 9668] [client 20.151.114.166:51076] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aZ9fQ6BuBxYiI1p-njSx9AAAAI8"]
[Thu Feb 26 05:26:55.678091 2026] [proxy_fcgi:error] [pid 9589:tid 9661] [client 20.220.211.253:2444] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 05:26:55.888545 2026] [proxy_fcgi:error] [pid 9589:tid 9666] [client 20.220.211.253:2444] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 08:03:29.623441 2026] [proxy_fcgi:error] [pid 3883:tid 3897] [client 20.220.211.253:20476] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 08:03:29.843125 2026] [proxy_fcgi:error] [pid 3883:tid 3903] [client 20.220.211.253:20476] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:07:40.658086 2026] [proxy_fcgi:error] [pid 20419:tid 20445] [client 2.58.56.91:52887] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:07:41.712306 2026] [:error] [pid 3883:tid 3900] [client 2.58.56.91:58349] [client 2.58.56.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/widgets/txets.php"] [unique_id "aaAbbeA33x90V6yYHagbNgAAAU4"]
[Thu Feb 26 18:07:42.227840 2026] [:error] [pid 3883:tid 3891] [client 2.58.56.91:49492] [client 2.58.56.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/rest-api/txets.php"] [unique_id "aaAbbuA33x90V6yYHagbPgAAAUU"]
[Thu Feb 26 18:07:42.737823 2026] [:error] [pid 20419:tid 20431] [client 2.58.56.91:55420] [client 2.58.56.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/post-template/txets.php"] [unique_id "aaAbbu3DVDvMfTYYUBUAAQAAAck"]
[Thu Feb 26 18:07:43.760861 2026] [:error] [pid 55122:tid 55139] [client 2.58.56.91:49162] [client 2.58.56.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/txets.php"] [unique_id "aaAbb4LiR0OfjFxvcN_4eAAAAM8"]
[Thu Feb 26 18:07:44.295931 2026] [proxy_fcgi:error] [pid 55122:tid 55127] [client 2.58.56.91:61889] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:07:44.806271 2026] [proxy_fcgi:error] [pid 25311:tid 25328] [client 2.58.56.91:52737] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:56:15.414456 2026] [proxy_fcgi:error] [pid 54990:tid 54995] [client 193.37.32.46:53335] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:56:15.583466 2026] [proxy_fcgi:error] [pid 54990:tid 55001] [client 193.37.32.46:53335] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:56:15.855443 2026] [proxy_fcgi:error] [pid 54990:tid 55008] [client 193.37.32.46:53335] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:56:16.014475 2026] [proxy_fcgi:error] [pid 54990:tid 55014] [client 193.37.32.46:53335] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:56:16.123037 2026] [proxy_fcgi:error] [pid 54990:tid 55004] [client 193.37.32.46:53335] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:56:16.257279 2026] [proxy_fcgi:error] [pid 54990:tid 55005] [client 193.37.32.46:53335] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:56:16.386334 2026] [proxy_fcgi:error] [pid 54990:tid 55007] [client 193.37.32.46:53335] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:56:16.525445 2026] [proxy_fcgi:error] [pid 54990:tid 55006] [client 193.37.32.46:53335] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:56:16.839344 2026] [proxy_fcgi:error] [pid 54990:tid 55012] [client 193.37.32.46:53335] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:56:17.147180 2026] [proxy_fcgi:error] [pid 54990:tid 55015] [client 193.37.32.46:53335] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:56:17.338442 2026] [proxy_fcgi:error] [pid 54990:tid 55008] [client 193.37.32.46:53335] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:56:17.551605 2026] [proxy_fcgi:error] [pid 54990:tid 55004] [client 193.37.32.46:53335] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:56:17.729435 2026] [proxy_fcgi:error] [pid 54990:tid 55005] [client 193.37.32.46:53335] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:56:17.877441 2026] [proxy_fcgi:error] [pid 54990:tid 55007] [client 193.37.32.46:53335] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:56:18.033441 2026] [proxy_fcgi:error] [pid 54990:tid 54993] [client 193.37.32.46:53335] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:56:18.149454 2026] [proxy_fcgi:error] [pid 54990:tid 55009] [client 193.37.32.46:53335] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:56:18.297472 2026] [proxy_fcgi:error] [pid 54990:tid 54998] [client 193.37.32.46:53335] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:56:18.454441 2026] [proxy_fcgi:error] [pid 54990:tid 55000] [client 193.37.32.46:53335] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:56:20.910303 2026] [:error] [pid 54990:tid 55007] [client 193.37.32.46:53335] [client 193.37.32.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aaAm1Htr2qmt_mBhH2wQrAAAAA4"]
[Thu Feb 26 18:56:21.634609 2026] [:error] [pid 55122:tid 55143] [client 193.37.32.10:49875] [client 193.37.32.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aaAm1YLiR0OfjFxvcN8P2wAAANM"]
[Thu Feb 26 18:56:22.373962 2026] [proxy_fcgi:error] [pid 54991:tid 55044] [client 193.37.32.38:32711] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:56:22.831630 2026] [:error] [pid 54991:tid 55023] [client 193.37.32.38:32711] [client 193.37.32.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dwelectservices.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aaAm1t4Zx-mJ8gbRB2jLxQAAAEM"]
[Thu Feb 26 18:56:23.947476 2026] [proxy_fcgi:error] [pid 54990:tid 55001] [client 193.37.32.37:53659] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:56:24.073244 2026] [:error] [pid 54990:tid 55013] [client 193.37.32.37:53659] [client 193.37.32.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aaAm2Htr2qmt_mBhH2wQxQAAABQ"]
[Thu Feb 26 18:56:24.575492 2026] [proxy_fcgi:error] [pid 55051:tid 55077] [client 193.37.32.43:55989] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:56:25.449104 2026] [:error] [pid 55051:tid 55071] [client 193.37.32.43:55989] [client 193.37.32.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aaAm2QmK1w2kZvh5eLFwAQAAAJE"]
[Thu Feb 26 18:56:25.974758 2026] [:error] [pid 20419:tid 20432] [client 193.37.32.130:27319] [client 193.37.32.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aaAm2e3DVDvMfTYYUBUlUQAAAco"]
[Thu Feb 26 18:56:26.387806 2026] [:error] [pid 3883:tid 3889] [client 193.37.32.44:52121] [client 193.37.32.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aaAm2uA33x90V6yYHaheDwAAAUM"]
[Thu Feb 26 18:56:26.758683 2026] [:error] [pid 3883:tid 3892] [client 193.37.32.13:55915] [client 193.37.32.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aaAm2uA33x90V6yYHaheEgAAAUY"]
[Thu Feb 26 18:56:27.050509 2026] [:error] [pid 55618:tid 55643] [client 193.37.32.50:29771] [client 193.37.32.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aaAm2x61Vrh12f_8oWTkfwAAARY"]
[Thu Feb 26 18:56:27.912194 2026] [:error] [pid 25311:tid 25324] [client 193.37.32.10:31067] [client 193.37.32.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aaAm29fdM__yZAgJFSuWagAAAYo"]
[Thu Feb 26 18:56:29.397704 2026] [:error] [pid 25311:tid 25332] [client 193.37.32.41:31083] [client 193.37.32.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aaAm3dfdM__yZAgJFSuWmwAAAZI"]
[Thu Feb 26 18:56:29.653454 2026] [proxy_fcgi:error] [pid 55051:tid 55058] [client 193.37.32.5:32743] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:56:30.155574 2026] [:error] [pid 55051:tid 55076] [client 193.37.32.5:32743] [client 193.37.32.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dwelectservices.com.au"] [uri "/filemanager.php"] [unique_id "aaAm3gmK1w2kZvh5eLFwPQAAAJY"]
[Thu Feb 26 18:56:31.078636 2026] [:error] [pid 25311:tid 25331] [client 193.37.32.8:54825] [client 193.37.32.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aaAm39fdM__yZAgJFSuW1wAAAZE"]
[Thu Feb 26 18:56:31.579240 2026] [:error] [pid 55618:tid 55644] [client 193.37.32.26:65263] [client 193.37.32.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aaAm3x61Vrh12f_8oWTkngAAARc"]
[Thu Feb 26 18:56:31.883554 2026] [proxy_fcgi:error] [pid 55051:tid 55056] [client 193.37.32.16:29279] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:56:32.029455 2026] [:error] [pid 55051:tid 55072] [client 193.37.32.16:29279] [client 193.37.32.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aaAm4AmK1w2kZvh5eLFwTwAAAJI"]
[Thu Feb 26 18:56:32.323495 2026] [proxy_fcgi:error] [pid 54991:tid 55029] [client 193.37.32.8:59057] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:56:36.618518 2026] [proxy_fcgi:error] [pid 54991:tid 55027] [client 193.37.32.8:59057] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:56:37.064011 2026] [:error] [pid 54991:tid 55040] [client 193.37.32.8:59057] [client 193.37.32.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aaAm5d4Zx-mJ8gbRB2jMBAAAAFQ"]
[Thu Feb 26 18:56:37.359462 2026] [proxy_fcgi:error] [pid 55122:tid 55141] [client 193.37.32.21:50855] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:56:37.511074 2026] [:error] [pid 55122:tid 55129] [client 193.37.32.21:50855] [client 193.37.32.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aaAm5YLiR0OfjFxvcN8QNwAAAMU"]
[Thu Feb 26 18:56:37.817464 2026] [proxy_fcgi:error] [pid 55122:tid 55144] [client 193.37.32.8:21109] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:56:38.156733 2026] [:error] [pid 55122:tid 55142] [client 193.37.32.8:21109] [client 193.37.32.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "aaAm5oLiR0OfjFxvcN8QRwAAANI"]
[Thu Feb 26 18:56:38.603405 2026] [:error] [pid 54991:tid 55025] [client 193.37.32.27:27737] [client 193.37.32.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aaAm5t4Zx-mJ8gbRB2jMBwAAAEU"]
[Thu Feb 26 18:56:41.831799 2026] [proxy_fcgi:error] [pid 55122:tid 55128] [client 193.37.32.25:49763] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:56:41.987542 2026] [proxy_fcgi:error] [pid 55122:tid 55132] [client 193.37.32.25:49763] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:56:42.388406 2026] [:error] [pid 55122:tid 55148] [client 193.37.32.25:49763] [client 193.37.32.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aaAm6oLiR0OfjFxvcN8QYwAAANg"]
[Thu Feb 26 18:56:42.837188 2026] [:error] [pid 55618:tid 55645] [client 193.37.32.11:53269] [client 193.37.32.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aaAm6h61Vrh12f_8oWTlLQAAARg"]
[Thu Feb 26 18:56:43.334799 2026] [:error] [pid 55051:tid 55075] [client 193.37.32.50:51115] [client 193.37.32.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aaAm6wmK1w2kZvh5eLFwrAAAAJU"]
[Thu Feb 26 18:56:43.634222 2026] [:error] [pid 3883:tid 3900] [client 193.37.32.129:22011] [client 193.37.32.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aaAm6-A33x90V6yYHahfMwAAAU4"]
[Thu Feb 26 18:56:43.909552 2026] [:error] [pid 3883:tid 3892] [client 193.37.32.13:62157] [client 193.37.32.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aaAm6-A33x90V6yYHahfPQAAAUY"]
[Thu Feb 26 18:56:44.829813 2026] [proxy_fcgi:error] [pid 54990:tid 55005] [client 193.37.32.9:26101] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:56:44.979068 2026] [:error] [pid 54990:tid 55000] [client 193.37.32.9:26101] [client 193.37.32.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "aaAm7Htr2qmt_mBhH2wRbgAAAAc"]
[Thu Feb 26 18:56:45.259324 2026] [:error] [pid 55122:tid 55130] [client 193.37.32.129:61169] [client 193.37.32.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "aaAm7YLiR0OfjFxvcN8QfwAAAMY"]
[Thu Feb 26 18:56:45.510851 2026] [:error] [pid 20419:tid 20429] [client 193.37.32.34:64345] [client 193.37.32.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aaAm7e3DVDvMfTYYUBUmEwAAAcc"]
[Thu Feb 26 18:56:48.979583 2026] [proxy_fcgi:error] [pid 54991:tid 55032] [client 193.37.32.20:50885] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:56:49.597636 2026] [proxy_fcgi:error] [pid 54991:tid 55044] [client 193.37.32.20:50885] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:56:50.210515 2026] [:error] [pid 54991:tid 55031] [client 193.37.32.20:50885] [client 193.37.32.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/admin.php"] [unique_id "aaAm8t4Zx-mJ8gbRB2jMVgAAAEs"]
[Thu Feb 26 18:56:51.252633 2026] [:error] [pid 25311:tid 25316] [client 193.37.32.28:54441] [client 193.37.32.28] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.32.28, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aaAm89fdM__yZAgJFSuX_AAAAYI"]
[Thu Feb 26 18:56:51.431564 2026] [proxy_fcgi:error] [pid 25311:tid 25322] [client 193.37.32.28:54441] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:56:52.146458 2026] [proxy_fcgi:error] [pid 25311:tid 25316] [client 193.37.32.28:54441] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:56:52.302904 2026] [proxy_fcgi:error] [pid 25311:tid 25334] [client 193.37.32.28:54441] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:56:53.123308 2026] [:error] [pid 25311:tid 25330] [client 193.37.32.28:54441] [client 193.37.32.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aaAm9dfdM__yZAgJFSuYFwAAAZA"]
[Thu Feb 26 18:56:53.508511 2026] [proxy_fcgi:error] [pid 20419:tid 20445] [client 193.37.32.33:41157] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:56:54.112459 2026] [proxy_fcgi:error] [pid 20419:tid 20433] [client 193.37.32.33:41157] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:56:54.242956 2026] [:error] [pid 20419:tid 20429] [client 193.37.32.33:41157] [client 193.37.32.33] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.32.33, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aaAm9u3DVDvMfTYYUBUmYAAAAcc"]
[Thu Feb 26 18:56:54.557609 2026] [:error] [pid 20419:tid 20427] [client 193.37.32.33:41157] [client 193.37.32.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/item.php"] [unique_id "aaAm9u3DVDvMfTYYUBUmZgAAAcU"]
[Thu Feb 26 18:56:55.908329 2026] [proxy_fcgi:error] [pid 54990:tid 55001] [client 193.37.32.49:46563] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:56:56.034860 2026] [proxy_fcgi:error] [pid 54990:tid 55013] [client 193.37.32.49:46563] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:56:56.325463 2026] [proxy_fcgi:error] [pid 54990:tid 54998] [client 193.37.32.49:46563] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:56:57.222952 2026] [:error] [pid 54990:tid 55008] [client 193.37.32.49:46563] [client 193.37.32.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aaAm-Xtr2qmt_mBhH2wRswAAAA8"]
[Thu Feb 26 18:56:58.551969 2026] [proxy_fcgi:error] [pid 3883:tid 3897] [client 193.37.32.45:55281] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:56:59.260449 2026] [proxy_fcgi:error] [pid 25311:tid 25317] [client 193.37.32.5:28743] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:56:59.571544 2026] [proxy_fcgi:error] [pid 25311:tid 25334] [client 193.37.32.5:28743] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:56:59.901695 2026] [proxy_fcgi:error] [pid 25311:tid 25334] [client 193.37.32.5:28743] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:57:00.047375 2026] [:error] [pid 25311:tid 25316] [client 193.37.32.5:28743] [client 193.37.32.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aaAm_NfdM__yZAgJFSuYuAAAAYI"]
[Thu Feb 26 18:57:00.735448 2026] [proxy_fcgi:error] [pid 3883:tid 3908] [client 193.37.32.25:44535] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:57:00.954180 2026] [proxy_fcgi:error] [pid 3883:tid 3910] [client 193.37.32.25:44535] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:57:01.143563 2026] [:error] [pid 3883:tid 3910] [client 193.37.32.25:44535] [client 193.37.32.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aaAm_eA33x90V6yYHahgxwAAAVg"]
[Thu Feb 26 18:57:01.621469 2026] [proxy_fcgi:error] [pid 3883:tid 3893] [client 193.37.32.35:29635] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:57:01.973073 2026] [:error] [pid 3883:tid 3893] [client 193.37.32.35:29635] [client 193.37.32.35] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.32.35, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "aaAm_eA33x90V6yYHahg6AAAAUc"]
[Thu Feb 26 18:57:02.193624 2026] [:error] [pid 3883:tid 3893] [client 193.37.32.35:29635] [client 193.37.32.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aaAm_uA33x90V6yYHahg7AAAAUc"]
[Thu Feb 26 18:57:05.685318 2026] [proxy_fcgi:error] [pid 55618:tid 55632] [client 193.37.32.10:49353] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:57:06.899281 2026] [proxy_fcgi:error] [pid 55618:tid 55630] [client 193.37.32.10:49353] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:57:07.091827 2026] [:error] [pid 55618:tid 55623] [client 193.37.32.10:49353] [client 193.37.32.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aaAnAx61Vrh12f_8oWTmZgAAAQI"]
[Thu Feb 26 18:57:07.408632 2026] [proxy_fcgi:error] [pid 20419:tid 20441] [client 193.37.32.20:57857] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:57:08.214911 2026] [:error] [pid 20419:tid 20435] [client 193.37.32.20:57857] [client 193.37.32.20] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.32.20, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aaAnBO3DVDvMfTYYUBUm4wAAAc0"]
[Thu Feb 26 18:57:08.375444 2026] [proxy_fcgi:error] [pid 20419:tid 20441] [client 193.37.32.20:57857] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:57:08.525713 2026] [proxy_fcgi:error] [pid 20419:tid 20433] [client 193.37.32.20:57857] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:57:08.653456 2026] [proxy_fcgi:error] [pid 20419:tid 20426] [client 193.37.32.20:57857] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:57:08.806486 2026] [:error] [pid 20419:tid 20440] [client 193.37.32.20:57857] [client 193.37.32.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aaAnBO3DVDvMfTYYUBUm8gAAAdI"]
[Thu Feb 26 18:57:09.176491 2026] [proxy_fcgi:error] [pid 55618:tid 55631] [client 193.37.32.35:42093] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:57:09.348235 2026] [:error] [pid 55618:tid 55622] [client 193.37.32.35:42093] [client 193.37.32.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/infi.php"] [unique_id "aaAnBR61Vrh12f_8oWTmcwAAAQE"]
[Thu Feb 26 18:57:09.862697 2026] [proxy_fcgi:error] [pid 54991:tid 55033] [client 193.37.32.46:29933] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:57:10.038265 2026] [:error] [pid 54991:tid 55020] [client 193.37.32.46:29933] [client 193.37.32.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aaAnBt4Zx-mJ8gbRB2jM0QAAAEA"]
[Thu Feb 26 18:57:10.355467 2026] [proxy_fcgi:error] [pid 20419:tid 20422] [client 193.37.32.38:61515] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:57:10.669476 2026] [proxy_fcgi:error] [pid 20419:tid 20437] [client 193.37.32.38:61515] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:57:11.087691 2026] [:error] [pid 20419:tid 20433] [client 193.37.32.38:61515] [client 193.37.32.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "aaAnB-3DVDvMfTYYUBUnAwAAAcs"]
[Thu Feb 26 18:57:11.812325 2026] [:error] [pid 55051:tid 55065] [client 193.37.32.23:61805] [client 193.37.32.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "aaAnBwmK1w2kZvh5eLFyLAAAAIs"]
[Thu Feb 26 18:57:12.154779 2026] [proxy_fcgi:error] [pid 25311:tid 25324] [client 193.37.32.22:62899] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:57:12.306493 2026] [proxy_fcgi:error] [pid 25311:tid 25316] [client 193.37.32.22:62899] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:57:13.251312 2026] [:error] [pid 25311:tid 25317] [client 193.37.32.22:62899] [client 193.37.32.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aaAnCdfdM__yZAgJFSuZ1gAAAYM"]
[Thu Feb 26 18:57:13.836025 2026] [:error] [pid 3883:tid 3907] [client 193.37.32.42:21237] [client 193.37.32.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "aaAnCeA33x90V6yYHahhjAAAAVU"]
[Thu Feb 26 18:57:14.669156 2026] [:error] [pid 3883:tid 3907] [client 193.37.32.30:30631] [client 193.37.32.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/edit.php"] [unique_id "aaAnCuA33x90V6yYHahhqgAAAVU"]
[Thu Feb 26 18:57:14.913443 2026] [proxy_fcgi:error] [pid 55051:tid 55063] [client 193.37.32.48:36645] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:57:15.532079 2026] [proxy_fcgi:error] [pid 55051:tid 55063] [client 193.37.32.48:36645] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:57:15.731592 2026] [:error] [pid 55051:tid 55065] [client 193.37.32.48:36645] [client 193.37.32.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "aaAnCwmK1w2kZvh5eLFyXQAAAIs"]
[Thu Feb 26 18:57:16.103446 2026] [proxy_fcgi:error] [pid 25311:tid 25316] [client 193.37.32.22:34573] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:57:16.469708 2026] [:error] [pid 25311:tid 25317] [client 193.37.32.22:34573] [client 193.37.32.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/click.php"] [unique_id "aaAnDNfdM__yZAgJFSuZ6wAAAYM"]
[Thu Feb 26 18:57:17.808255 2026] [:error] [pid 20419:tid 20433] [client 193.37.32.13:34457] [client 193.37.32.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "aaAnDe3DVDvMfTYYUBUnPQAAAcs"]
[Thu Feb 26 18:57:18.264880 2026] [proxy_fcgi:error] [pid 55618:tid 55633] [client 193.37.32.47:53655] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:57:18.742463 2026] [proxy_fcgi:error] [pid 55618:tid 55624] [client 193.37.32.47:53655] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:57:19.056635 2026] [proxy_fcgi:error] [pid 55618:tid 55633] [client 193.37.32.47:53655] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:57:19.199290 2026] [:error] [pid 55618:tid 55626] [client 193.37.32.47:53655] [client 193.37.32.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "aaAnDx61Vrh12f_8oWTmxgAAAQU"]
[Thu Feb 26 18:57:19.505950 2026] [:error] [pid 54990:tid 55004] [client 193.37.32.11:23299] [client 193.37.32.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/xl2023.php"] [unique_id "aaAnD3tr2qmt_mBhH2wSOwAAAAs"]
[Thu Feb 26 18:57:19.866552 2026] [:error] [pid 44444:tid 44453] [client 193.37.32.36:38975] [client 193.37.32.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/certificates/admin.php"] [unique_id "aaAnD22sMNmj-yekUk21jwAAAgM"]
[Thu Feb 26 18:57:20.162362 2026] [:error] [pid 44444:tid 44465] [client 193.37.32.33:62253] [client 193.37.32.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/media/dog.php"] [unique_id "aaAnEG2sMNmj-yekUk21lgAAAg8"]
[Thu Feb 26 18:57:21.517476 2026] [proxy_fcgi:error] [pid 55122:tid 55136] [client 193.37.32.13:50637] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:57:21.644938 2026] [:error] [pid 55122:tid 55139] [client 193.37.32.13:50637] [client 193.37.32.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "aaAnEYLiR0OfjFxvcN8RnwAAAM8"]
[Thu Feb 26 18:57:21.962116 2026] [:error] [pid 55618:tid 55622] [client 193.37.32.24:50927] [client 193.37.32.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aaAnER61Vrh12f_8oWTmzwAAAQE"]
[Thu Feb 26 18:57:22.247480 2026] [proxy_fcgi:error] [pid 25311:tid 25315] [client 193.37.32.33:39359] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:57:23.135357 2026] [:error] [pid 25311:tid 25314] [client 193.37.32.33:39359] [client 193.37.32.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aaAnE9fdM__yZAgJFSuaPQAAAYA"]
[Thu Feb 26 18:57:23.422141 2026] [:error] [pid 55051:tid 55077] [client 193.37.32.48:41495] [client 193.37.32.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aaAnEwmK1w2kZvh5eLFyvgAAAJc"]
[Thu Feb 26 18:57:23.696552 2026] [:error] [pid 25311:tid 25327] [client 193.37.32.51:50847] [client 193.37.32.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/pomo/admin.php"] [unique_id "aaAnE9fdM__yZAgJFSuaQgAAAY0"]
[Thu Feb 26 18:57:24.020225 2026] [:error] [pid 55051:tid 55073] [client 193.37.32.35:64439] [client 193.37.32.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/IXR/security.php"] [unique_id "aaAnFAmK1w2kZvh5eLFywgAAAJM"]
[Thu Feb 26 18:57:24.509270 2026] [:error] [pid 54991:tid 55041] [client 193.37.32.36:55877] [client 193.37.32.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aaAnFN4Zx-mJ8gbRB2jNDAAAAFU"]
[Thu Feb 26 18:57:25.113227 2026] [:error] [pid 20419:tid 20429] [client 193.37.32.15:65075] [client 193.37.32.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/fonts/about.php"] [unique_id "aaAnFe3DVDvMfTYYUBUnlQAAAcc"]
[Thu Feb 26 18:57:25.893477 2026] [proxy_fcgi:error] [pid 54990:tid 55014] [client 193.37.32.7:21067] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:57:26.311459 2026] [proxy_fcgi:error] [pid 54990:tid 55002] [client 193.37.32.7:21067] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:57:26.464060 2026] [:error] [pid 54990:tid 55008] [client 193.37.32.7:21067] [client 193.37.32.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "aaAnFntr2qmt_mBhH2wSjAAAAA8"]
[Thu Feb 26 18:57:27.306655 2026] [proxy_fcgi:error] [pid 55051:tid 55058] [client 193.37.32.46:43747] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:57:27.836630 2026] [proxy_fcgi:error] [pid 55051:tid 55067] [client 193.37.32.46:43747] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:57:28.873538 2026] [:error] [pid 55051:tid 55076] [client 193.37.32.46:43747] [client 193.37.32.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/file.php"] [unique_id "aaAnGAmK1w2kZvh5eLFy-QAAAJY"]
[Thu Feb 26 18:57:29.732829 2026] [:error] [pid 55122:tid 55140] [client 193.37.32.47:57949] [client 193.37.32.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "aaAnGYLiR0OfjFxvcN8R4AAAANA"]
[Thu Feb 26 18:57:29.974210 2026] [:error] [pid 54991:tid 55044] [client 193.37.32.47:51461] [client 193.37.32.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "aaAnGd4Zx-mJ8gbRB2jNOgAAAFg"]
[Thu Feb 26 18:57:31.314514 2026] [:error] [pid 54990:tid 54997] [client 193.37.32.49:55029] [client 193.37.32.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aaAnG3tr2qmt_mBhH2wS3wAAAAQ"]
[Thu Feb 26 18:57:32.034437 2026] [proxy_fcgi:error] [pid 55122:tid 55128] [client 193.37.32.23:48223] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:57:32.221466 2026] [proxy_fcgi:error] [pid 55122:tid 55136] [client 193.37.32.23:48223] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:57:32.370436 2026] [proxy_fcgi:error] [pid 55122:tid 55140] [client 193.37.32.23:48223] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:57:32.527444 2026] [proxy_fcgi:error] [pid 55122:tid 55148] [client 193.37.32.23:48223] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:57:33.371230 2026] [:error] [pid 55122:tid 55140] [client 193.37.32.23:48223] [client 193.37.32.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aaAnHYLiR0OfjFxvcN8SHwAAANA"]
[Thu Feb 26 18:57:34.646267 2026] [:error] [pid 55122:tid 55140] [client 193.37.32.19:43463] [client 193.37.32.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "aaAnHoLiR0OfjFxvcN8SOwAAANA"]
[Thu Feb 26 18:57:35.021818 2026] [:error] [pid 55051:tid 55058] [client 193.37.32.33:23735] [client 193.37.32.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "aaAnHwmK1w2kZvh5eLFzRgAAAIQ"]
[Thu Feb 26 18:57:35.360682 2026] [:error] [pid 55618:tid 55645] [client 193.37.32.41:60393] [client 193.37.32.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "aaAnHx61Vrh12f_8oWTnNQAAARg"]
[Thu Feb 26 18:57:36.854014 2026] [:error] [pid 44444:tid 44466] [client 193.37.32.51:46755] [client 193.37.32.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aaAnIG2sMNmj-yekUk22FgAAAhA"]
[Thu Feb 26 18:57:37.140039 2026] [:error] [pid 44444:tid 44459] [client 193.37.32.30:41869] [client 193.37.32.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aaAnIW2sMNmj-yekUk22GwAAAgk"]
[Thu Feb 26 18:57:37.678165 2026] [:error] [pid 44444:tid 44468] [client 193.37.32.13:58103] [client 193.37.32.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/media/index.php"] [unique_id "aaAnIW2sMNmj-yekUk22IwAAAhI"]
[Thu Feb 26 18:57:38.041465 2026] [:error] [pid 25311:tid 25332] [client 193.37.32.29:38371] [client 193.37.32.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "aaAnItfdM__yZAgJFSuaywAAAZI"]
[Thu Feb 26 18:57:38.399903 2026] [:error] [pid 44444:tid 44457] [client 193.37.32.130:64401] [client 193.37.32.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "aaAnIm2sMNmj-yekUk22MwAAAgc"]
[Thu Feb 26 18:57:39.759324 2026] [:error] [pid 20419:tid 20425] [client 193.37.32.33:51953] [client 193.37.32.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "aaAnI-3DVDvMfTYYUBUodgAAAcM"]
[Thu Feb 26 18:57:40.429481 2026] [:error] [pid 20419:tid 20422] [client 193.37.32.52:46455] [client 193.37.32.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/fonts/themes.php"] [unique_id "aaAnJO3DVDvMfTYYUBUofwAAAcA"]
[Thu Feb 26 18:57:41.445129 2026] [:error] [pid 20419:tid 20438] [client 193.37.32.25:63867] [client 193.37.32.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/certificates/index.php"] [unique_id "aaAnJe3DVDvMfTYYUBUoigAAAdA"]
[Thu Feb 26 18:57:42.800454 2026] [proxy_fcgi:error] [pid 3883:tid 3904] [client 193.37.32.50:60285] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:57:43.080294 2026] [:error] [pid 3883:tid 3907] [client 193.37.32.50:60285] [client 193.37.32.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "aaAnJ-A33x90V6yYHahi5AAAAVU"]
[Thu Feb 26 18:57:43.979101 2026] [:error] [pid 3883:tid 3891] [client 193.37.32.49:59655] [client 193.37.32.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "aaAnJ-A33x90V6yYHahi9wAAAUU"]
[Thu Feb 26 18:57:44.603483 2026] [proxy_fcgi:error] [pid 44444:tid 44473] [client 193.37.32.23:57503] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:57:44.741184 2026] [:error] [pid 44444:tid 44461] [client 193.37.32.23:57503] [client 193.37.32.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aaAnKG2sMNmj-yekUk22fgAAAgs"]
[Thu Feb 26 18:57:45.269461 2026] [proxy_fcgi:error] [pid 55618:tid 55635] [client 193.37.32.30:55463] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:57:45.496545 2026] [proxy_fcgi:error] [pid 55618:tid 55625] [client 193.37.32.30:55463] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:57:45.711725 2026] [proxy_fcgi:error] [pid 55618:tid 55621] [client 193.37.32.30:55463] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:57:46.751101 2026] [:error] [pid 55618:tid 55632] [client 193.37.32.30:55463] [client 193.37.32.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "aaAnKh61Vrh12f_8oWTn1QAAAQs"]
[Thu Feb 26 18:57:47.055500 2026] [proxy_fcgi:error] [pid 44444:tid 44455] [client 193.37.32.53:44881] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:57:47.224791 2026] [:error] [pid 44444:tid 44462] [client 193.37.32.53:44881] [client 193.37.32.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "aaAnK22sMNmj-yekUk22qAAAAgw"]
[Thu Feb 26 18:57:48.070317 2026] [proxy_fcgi:error] [pid 44444:tid 44462] [client 193.37.32.6:63581] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:57:48.238487 2026] [proxy_fcgi:error] [pid 44444:tid 44454] [client 193.37.32.6:63581] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:57:48.367483 2026] [proxy_fcgi:error] [pid 44444:tid 44467] [client 193.37.32.6:63581] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:57:49.241471 2026] [proxy_fcgi:error] [pid 44444:tid 44470] [client 193.37.32.6:63581] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:57:49.384454 2026] [proxy_fcgi:error] [pid 44444:tid 44472] [client 193.37.32.6:63581] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:57:49.774899 2026] [proxy_fcgi:error] [pid 44444:tid 44460] [client 193.37.32.6:63581] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:57:50.302185 2026] [proxy_fcgi:error] [pid 44444:tid 44470] [client 193.37.32.6:63581] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:57:50.474973 2026] [:error] [pid 44444:tid 44455] [client 193.37.32.6:63581] [client 193.37.32.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "aaAnLm2sMNmj-yekUk227QAAAgU"]
[Thu Feb 26 18:57:50.763783 2026] [:error] [pid 20419:tid 20425] [client 193.37.32.32:37107] [client 193.37.32.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aaAnLu3DVDvMfTYYUBUo1QAAAcM"]
[Thu Feb 26 18:57:51.009017 2026] [:error] [pid 55122:tid 55140] [client 193.37.32.48:39357] [client 193.37.32.48] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.32.48, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-login.php"] [unique_id "aaAnL4LiR0OfjFxvcN8SqgAAANA"]
[Thu Feb 26 18:57:51.014497 2026] [proxy_fcgi:error] [pid 55122:tid 55140] [client 193.37.32.48:39357] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:57:51.173450 2026] [proxy_fcgi:error] [pid 55122:tid 55130] [client 193.37.32.48:39357] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:57:53.061734 2026] [:error] [pid 55122:tid 55130] [client 193.37.32.48:39357] [client 193.37.32.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "aaAnMYLiR0OfjFxvcN8SxwAAAMY"]
[Thu Feb 26 18:57:53.542458 2026] [proxy_fcgi:error] [pid 55122:tid 55146] [client 193.37.32.26:37327] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:57:53.744768 2026] [:error] [pid 55122:tid 55142] [client 193.37.32.26:37327] [client 193.37.32.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aaAnMYLiR0OfjFxvcN8S0QAAANI"]
[Thu Feb 26 18:57:54.066985 2026] [:error] [pid 55618:tid 55622] [client 193.37.32.26:42715] [client 193.37.32.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aaAnMh61Vrh12f_8oWToOAAAAQE"]
[Thu Feb 26 18:57:55.543232 2026] [:error] [pid 54990:tid 55008] [client 193.37.32.46:39637] [client 193.37.32.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aaAnM3tr2qmt_mBhH2wTrwAAAA8"]
[Thu Feb 26 18:57:55.834559 2026] [:error] [pid 25311:tid 25334] [client 193.37.32.21:41909] [client 193.37.32.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dwelectservices.com.au"] [uri "/fm.php"] [unique_id "aaAnM9fdM__yZAgJFSub1QAAAZQ"]
[Thu Feb 26 18:57:56.597548 2026] [proxy_fcgi:error] [pid 54991:tid 55033] [client 193.37.32.4:40829] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:57:56.952118 2026] [:error] [pid 54991:tid 55042] [client 193.37.32.4:40829] [client 193.37.32.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "aaAnNN4Zx-mJ8gbRB2jN7AAAAFY"]
[Thu Feb 26 18:57:57.782478 2026] [proxy_fcgi:error] [pid 3883:tid 3900] [client 193.37.32.22:41965] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:58:04.009636 2026] [:error] [pid 3883:tid 3891] [client 193.37.32.22:41965] [client 193.37.32.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/function.php"] [unique_id "aaAnPOA33x90V6yYHahkCgAAAUU"]
[Thu Feb 26 18:58:04.331846 2026] [:error] [pid 20419:tid 20445] [client 193.37.32.51:27781] [client 193.37.32.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/plugins.php"] [unique_id "aaAnPO3DVDvMfTYYUBUpCAAAAdc"]
[Thu Feb 26 18:58:05.220833 2026] [proxy_fcgi:error] [pid 3883:tid 3910] [client 193.37.32.5:20197] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:58:05.368685 2026] [:error] [pid 3883:tid 3895] [client 193.37.32.5:20197] [client 193.37.32.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/chosen.php"] [unique_id "aaAnPeA33x90V6yYHahkKgAAAUk"]
[Thu Feb 26 18:58:05.681284 2026] [:error] [pid 44444:tid 44469] [client 193.37.32.13:42187] [client 193.37.32.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "aaAnPW2sMNmj-yekUk235wAAAhM"]
[Thu Feb 26 18:58:07.261452 2026] [proxy_fcgi:error] [pid 44444:tid 44458] [client 193.37.32.26:41715] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:58:07.421907 2026] [proxy_fcgi:error] [pid 44444:tid 44474] [client 193.37.32.26:41715] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:58:07.721791 2026] [proxy_fcgi:error] [pid 44444:tid 44470] [client 193.37.32.26:41715] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:58:08.066810 2026] [:error] [pid 44444:tid 44462] [client 193.37.32.26:41715] [client 193.37.32.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/atomlib.php"] [unique_id "aaAnQG2sMNmj-yekUk24LwAAAgw"]
[Thu Feb 26 18:58:08.385147 2026] [:error] [pid 3883:tid 3887] [client 193.37.32.6:64931] [client 193.37.32.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/rest-api/index.php"] [unique_id "aaAnQOA33x90V6yYHahkeAAAAUE"]
[Thu Feb 26 18:58:09.194494 2026] [proxy_fcgi:error] [pid 54990:tid 55011] [client 193.37.32.45:49851] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:58:09.318107 2026] [:error] [pid 54990:tid 54995] [client 193.37.32.45:49851] [client 193.37.32.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/index.php"] [unique_id "aaAnQXtr2qmt_mBhH2wUEAAAAAI"]
[Thu Feb 26 18:58:10.644570 2026] [:error] [pid 3883:tid 3900] [client 193.37.32.35:29321] [client 193.37.32.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aaAnQuA33x90V6yYHahkuwAAAU4"]
[Thu Feb 26 18:58:11.132880 2026] [:error] [pid 55122:tid 55125] [client 193.37.32.22:52121] [client 193.37.32.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aaAnQ4LiR0OfjFxvcN8THgAAAME"]
[Thu Feb 26 18:58:12.706639 2026] [proxy_fcgi:error] [pid 3883:tid 3907] [client 193.37.32.42:23103] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:58:12.834619 2026] [:error] [pid 3883:tid 3891] [client 193.37.32.42:23103] [client 193.37.32.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/Exception-wp.php"] [unique_id "aaAnROA33x90V6yYHahlHQAAAUU"]
[Thu Feb 26 18:58:13.381640 2026] [:error] [pid 44444:tid 44470] [client 193.37.32.37:60755] [client 193.37.32.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aaAnRW2sMNmj-yekUk24XwAAAhQ"]
[Thu Feb 26 18:58:13.864473 2026] [proxy_fcgi:error] [pid 3883:tid 3890] [client 193.37.32.26:23215] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:58:14.010129 2026] [proxy_fcgi:error] [pid 3883:tid 3890] [client 193.37.32.26:23215] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:58:14.273278 2026] [proxy_fcgi:error] [pid 3883:tid 3901] [client 193.37.32.26:23215] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:58:14.957681 2026] [:error] [pid 3883:tid 3893] [client 193.37.32.26:23215] [client 193.37.32.26] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.32.26, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/js/wp-login.php"] [unique_id "aaAnRuA33x90V6yYHahlaAAAAUc"]
[Thu Feb 26 18:58:15.314092 2026] [:error] [pid 3883:tid 3889] [client 193.37.32.26:23215] File does not exist: /home/dwelects/public_html/worm.PhP
[Thu Feb 26 18:58:15.462458 2026] [proxy_fcgi:error] [pid 3883:tid 3901] [client 193.37.32.26:23215] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:58:15.758932 2026] [proxy_fcgi:error] [pid 3883:tid 3891] [client 193.37.32.26:23215] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:58:16.391261 2026] [:error] [pid 3883:tid 3909] [client 193.37.32.26:23215] [client 193.37.32.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/bk/index.php"] [unique_id "aaAnSOA33x90V6yYHahldQAAAVc"]
[Thu Feb 26 18:58:16.896249 2026] [:error] [pid 25311:tid 25327] [client 193.37.32.26:21911] [client 193.37.32.26] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.32.26, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "aaAnSNfdM__yZAgJFSucRAAAAY0"]
[Thu Feb 26 18:58:17.336447 2026] [proxy_fcgi:error] [pid 25311:tid 25315] [client 193.37.32.26:21911] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:58:17.485476 2026] [proxy_fcgi:error] [pid 25311:tid 25338] [client 193.37.32.26:21911] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:58:17.760468 2026] [proxy_fcgi:error] [pid 25311:tid 25318] [client 193.37.32.26:21911] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:58:18.041466 2026] [proxy_fcgi:error] [pid 25311:tid 25336] [client 193.37.32.26:21911] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:58:18.626491 2026] [proxy_fcgi:error] [pid 25311:tid 25331] [client 193.37.32.26:21911] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:58:20.095449 2026] [proxy_fcgi:error] [pid 25311:tid 25316] [client 193.37.32.26:21911] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:58:20.239856 2026] [proxy_fcgi:error] [pid 25311:tid 25333] [client 193.37.32.26:21911] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:58:21.297528 2026] [proxy_fcgi:error] [pid 25311:tid 25324] [client 193.37.32.26:21911] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:58:21.595348 2026] [:error] [pid 25311:tid 25328] [client 193.37.32.26:21911] [client 193.37.32.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "aaAnTdfdM__yZAgJFSuckgAAAY4"]
[Thu Feb 26 18:58:22.197942 2026] [proxy_fcgi:error] [pid 20419:tid 20422] [client 193.37.32.41:34663] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:58:22.359272 2026] [:error] [pid 20419:tid 20432] [client 193.37.32.41:34663] [client 193.37.32.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aaAnTu3DVDvMfTYYUBUp3wAAAco"]
[Thu Feb 26 18:58:22.589428 2026] [proxy_fcgi:error] [pid 3883:tid 3886] [client 193.37.32.20:32835] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:58:22.718485 2026] [proxy_fcgi:error] [pid 3883:tid 3890] [client 193.37.32.20:32835] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:58:22.848952 2026] [:error] [pid 3883:tid 3893] [client 193.37.32.20:32835] [client 193.37.32.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/atomlib.php"] [unique_id "aaAnTuA33x90V6yYHahlvgAAAUc"]
[Thu Feb 26 18:58:23.538951 2026] [proxy_fcgi:error] [pid 54991:tid 55044] [client 193.37.32.16:39903] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:58:23.833469 2026] [proxy_fcgi:error] [pid 54991:tid 55035] [client 193.37.32.16:39903] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:58:24.155489 2026] [proxy_fcgi:error] [pid 54991:tid 55038] [client 193.37.32.16:39903] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:58:24.300664 2026] [proxy_fcgi:error] [pid 54991:tid 55033] [client 193.37.32.16:39903] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:58:24.606921 2026] [:error] [pid 54991:tid 55020] [client 193.37.32.16:39903] [client 193.37.32.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aaAnUN4Zx-mJ8gbRB2jOpAAAAEA"]
[Thu Feb 26 18:58:24.970494 2026] [proxy_fcgi:error] [pid 44444:tid 44464] [client 193.37.32.44:30281] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:58:25.361457 2026] [proxy_fcgi:error] [pid 44444:tid 44467] [client 193.37.32.44:30281] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:58:25.509342 2026] [:error] [pid 44444:tid 44474] [client 193.37.32.44:30281] [client 193.37.32.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aaAnUW2sMNmj-yekUk25HgAAAhg"]
[Thu Feb 26 18:58:25.968781 2026] [:error] [pid 25311:tid 25335] [client 193.37.32.11:27033] [client 193.37.32.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aaAnUdfdM__yZAgJFSucqQAAAZU"]
[Thu Feb 26 18:58:26.706666 2026] [proxy_fcgi:error] [pid 3883:tid 3895] [client 193.37.32.22:55953] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:58:27.413458 2026] [proxy_fcgi:error] [pid 3883:tid 3910] [client 193.37.32.22:55953] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:58:27.602618 2026] [proxy_fcgi:error] [pid 3883:tid 3895] [client 193.37.32.22:55953] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:58:27.850939 2026] [:error] [pid 3883:tid 3908] [client 193.37.32.22:55953] [client 193.37.32.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "aaAnU-A33x90V6yYHahmTwAAAVY"]
[Thu Feb 26 18:58:28.325658 2026] [:error] [pid 55122:tid 55138] [client 193.37.32.49:51413] [client 193.37.32.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "aaAnVILiR0OfjFxvcN8TsgAAAM4"]
[Thu Feb 26 18:58:29.448442 2026] [proxy_fcgi:error] [pid 3883:tid 3902] [client 193.37.32.17:22763] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:58:29.783692 2026] [:error] [pid 3883:tid 3893] [client 193.37.32.17:22763] [client 193.37.32.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/dist/default.php"] [unique_id "aaAnVeA33x90V6yYHahmkgAAAUc"]
[Thu Feb 26 18:58:30.269342 2026] [:error] [pid 55051:tid 55074] [client 193.37.32.46:58435] [client 193.37.32.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dwelectservices.com.au"] [uri "/tiny.php"] [unique_id "aaAnVgmK1w2kZvh5eLF1CQAAAJQ"]
[Thu Feb 26 18:58:31.120623 2026] [proxy_fcgi:error] [pid 25311:tid 25316] [client 193.37.32.20:38475] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:58:31.267452 2026] [proxy_fcgi:error] [pid 25311:tid 25321] [client 193.37.32.20:38475] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:58:31.436176 2026] [:error] [pid 25311:tid 25329] [client 193.37.32.20:38475] [client 193.37.32.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "aaAnV9fdM__yZAgJFSuc1wAAAY8"]
[Thu Feb 26 18:58:31.918444 2026] [proxy_fcgi:error] [pid 25311:tid 25336] [client 193.37.32.41:36033] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:58:32.051727 2026] [proxy_fcgi:error] [pid 25311:tid 25317] [client 193.37.32.41:36033] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:58:32.304525 2026] [proxy_fcgi:error] [pid 25311:tid 25333] [client 193.37.32.41:36033] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:58:33.022184 2026] [:error] [pid 25311:tid 25317] [client 193.37.32.41:36033] [client 193.37.32.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/Parse/about.php"] [unique_id "aaAnWdfdM__yZAgJFSuc8gAAAYM"]
[Thu Feb 26 18:58:33.635451 2026] [proxy_fcgi:error] [pid 54990:tid 54993] [client 193.37.32.130:26279] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:58:34.145176 2026] [:error] [pid 54990:tid 55011] [client 193.37.32.130:26279] [client 193.37.32.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "aaAnWntr2qmt_mBhH2wUugAAABI"]
[Thu Feb 26 18:58:34.608804 2026] [proxy_fcgi:error] [pid 25311:tid 25338] [client 193.37.32.53:38785] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:58:35.375104 2026] [proxy_fcgi:error] [pid 25311:tid 25323] [client 193.37.32.53:38785] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:58:35.534448 2026] [proxy_fcgi:error] [pid 25311:tid 25319] [client 193.37.32.53:38785] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:58:35.843995 2026] [:error] [pid 25311:tid 25327] [client 193.37.32.53:38785] [client 193.37.32.53] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.32.53, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/colors/ocean/wp-login.php"] [unique_id "aaAnW9fdM__yZAgJFSudIwAAAY0"]
[Thu Feb 26 18:58:36.373466 2026] [proxy_fcgi:error] [pid 25311:tid 25329] [client 193.37.32.53:38785] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:58:36.726214 2026] [:error] [pid 25311:tid 25337] [client 193.37.32.53:38785] [client 193.37.32.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/Cache/upfile.php"] [unique_id "aaAnXNfdM__yZAgJFSudLwAAAZc"]
[Thu Feb 26 18:58:37.104436 2026] [proxy_fcgi:error] [pid 20419:tid 20428] [client 193.37.32.31:59519] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:58:37.246280 2026] [:error] [pid 20419:tid 20432] [client 193.37.32.31:59519] [client 193.37.32.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "aaAnXe3DVDvMfTYYUBUqUAAAAco"]
[Thu Feb 26 18:58:37.539451 2026] [proxy_fcgi:error] [pid 55122:tid 55125] [client 193.37.32.32:61123] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:58:37.838437 2026] [proxy_fcgi:error] [pid 55122:tid 55142] [client 193.37.32.32:61123] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:58:38.180360 2026] [:error] [pid 55122:tid 55148] [client 193.37.32.32:61123] [client 193.37.32.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/widgets/class-wp-widget-search-function.php"] [unique_id "aaAnXoLiR0OfjFxvcN8ULQAAANg"]
[Thu Feb 26 18:58:38.697454 2026] [proxy_fcgi:error] [pid 3883:tid 3910] [client 193.37.32.21:46547] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:58:38.851439 2026] [proxy_fcgi:error] [pid 3883:tid 3902] [client 193.37.32.21:46547] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:58:39.166665 2026] [:error] [pid 3883:tid 3900] [client 193.37.32.21:46547] [client 193.37.32.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/Canonical.php"] [unique_id "aaAnX-A33x90V6yYHahnSQAAAU4"]
[Thu Feb 26 18:58:42.485524 2026] [:error] [pid 55618:tid 55629] [client 193.37.32.35:52065] [client 193.37.32.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "aaAnYh61Vrh12f_8oWTpSAAAAQg"]
[Thu Feb 26 18:58:42.795467 2026] [proxy_fcgi:error] [pid 54991:tid 55033] [client 193.37.32.40:50109] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:58:42.942451 2026] [proxy_fcgi:error] [pid 54991:tid 55031] [client 193.37.32.40:50109] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:58:43.256273 2026] [:error] [pid 54991:tid 55035] [client 193.37.32.40:50109] [client 193.37.32.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/class-feed-index.php"] [unique_id "aaAnY94Zx-mJ8gbRB2jPHQAAAE8"]
[Thu Feb 26 18:58:43.582485 2026] [proxy_fcgi:error] [pid 3883:tid 3891] [client 193.37.32.39:62307] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:58:43.973879 2026] [proxy_fcgi:error] [pid 3883:tid 3909] [client 193.37.32.39:62307] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:58:44.170914 2026] [:error] [pid 3883:tid 3892] [client 193.37.32.39:62307] [client 193.37.32.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php"] [unique_id "aaAnZOA33x90V6yYHahnfAAAAUY"]
[Thu Feb 26 18:58:45.040901 2026] [:error] [pid 3883:tid 3900] [client 193.37.32.34:56109] [client 193.37.32.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/db.php"] [unique_id "aaAnZOA33x90V6yYHahnkQAAAU4"]
[Thu Feb 26 18:58:45.343337 2026] [:error] [pid 55618:tid 55629] [client 193.37.32.19:54149] [client 193.37.32.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/class-wp-dependency-float.php"] [unique_id "aaAnZR61Vrh12f_8oWTpZgAAAQg"]
[Thu Feb 26 18:58:45.619105 2026] [:error] [pid 3883:tid 3905] [client 193.37.32.41:43835] [client 193.37.32.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "aaAnZeA33x90V6yYHahnrwAAAVM"]
[Thu Feb 26 18:58:45.922374 2026] [:error] [pid 3883:tid 3898] [client 193.37.32.32:50855] [client 193.37.32.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/PHPMailer/purna.php"] [unique_id "aaAnZeA33x90V6yYHahnuAAAAUw"]
[Thu Feb 26 18:58:46.145190 2026] [:error] [pid 55051:tid 55059] [client 193.37.32.50:38557] [client 193.37.32.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/interactivity-api/interactivity-api-class.php"] [unique_id "aaAnZgmK1w2kZvh5eLF2QAAAAIU"]
[Thu Feb 26 18:58:46.418521 2026] [:error] [pid 54991:tid 55027] [client 193.37.32.129:41781] [client 193.37.32.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/l10n/class-wp-widddget-pages.php"] [unique_id "aaAnZt4Zx-mJ8gbRB2jPOwAAAEc"]
[Thu Feb 26 18:58:47.105041 2026] [:error] [pid 20419:tid 20438] [client 193.37.32.30:51295] [client 193.37.32.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php"] [unique_id "aaAnZ-3DVDvMfTYYUBUqegAAAdA"]
[Thu Feb 26 18:58:47.436537 2026] [:error] [pid 3883:tid 3905] [client 193.37.32.33:21843] [client 193.37.32.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php"] [unique_id "aaAnZ-A33x90V6yYHahn0AAAAVM"]
[Thu Feb 26 18:58:47.735276 2026] [:error] [pid 3883:tid 3893] [client 193.37.32.43:32961] [client 193.37.32.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/ID3/module.audio-video.riff-set.php"] [unique_id "aaAnZ-A33x90V6yYHahn1gAAAUc"]
[Thu Feb 26 18:58:48.202989 2026] [:error] [pid 3883:tid 3892] [client 193.37.32.27:48349] [client 193.37.32.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/tinymce/utils/license.php"] [unique_id "aaAnaOA33x90V6yYHahn5QAAAUY"]
[Thu Feb 26 18:58:48.669483 2026] [:error] [pid 3883:tid 3890] [client 193.37.32.48:34893] [client 193.37.32.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/images/wp-aespa.php"] [unique_id "aaAnaOA33x90V6yYHahn9wAAAUQ"]
[Thu Feb 26 18:58:49.198134 2026] [:error] [pid 55051:tid 55059] [client 193.37.32.4:53621] [client 193.37.32.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Text/options.php"] [unique_id "aaAnaQmK1w2kZvh5eLF2SwAAAIU"]
[Thu Feb 26 18:58:49.492552 2026] [proxy_fcgi:error] [pid 20419:tid 20444] [client 193.37.32.53:35873] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:58:50.215759 2026] [:error] [pid 20419:tid 20440] [client 193.37.32.53:35873] [client 193.37.32.53] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.32.53, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "aaAnau3DVDvMfTYYUBUqkQAAAdI"]
[Thu Feb 26 18:58:51.390766 2026] [:error] [pid 20419:tid 20426] [client 193.37.32.53:35873] [client 193.37.32.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/feed-rsss.php"] [unique_id "aaAna-3DVDvMfTYYUBUqoQAAAcQ"]
[Thu Feb 26 18:58:51.825335 2026] [:error] [pid 55618:tid 55639] [client 193.37.32.14:37955] [client 193.37.32.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/IXR/goto.php"] [unique_id "aaAnax61Vrh12f_8oWTpqgAAARI"]
[Thu Feb 26 18:58:52.798807 2026] [proxy_fcgi:error] [pid 20419:tid 20432] [client 193.37.32.19:47815] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:58:53.015679 2026] [proxy_fcgi:error] [pid 20419:tid 20438] [client 193.37.32.19:47815] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:58:53.646448 2026] [proxy_fcgi:error] [pid 20419:tid 20429] [client 193.37.32.19:47815] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:58:53.801102 2026] [proxy_fcgi:error] [pid 20419:tid 20445] [client 193.37.32.19:47815] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:58:54.517457 2026] [proxy_fcgi:error] [pid 20419:tid 20423] [client 193.37.32.19:47815] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:58:54.689453 2026] [proxy_fcgi:error] [pid 20419:tid 20442] [client 193.37.32.19:47815] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:58:54.858462 2026] [proxy_fcgi:error] [pid 20419:tid 20437] [client 193.37.32.19:47815] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:58:58.068457 2026] [proxy_fcgi:error] [pid 20419:tid 20432] [client 193.37.32.19:47815] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:58:58.238431 2026] [:error] [pid 20419:tid 20438] [client 193.37.32.19:47815] [client 193.37.32.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aaAncu3DVDvMfTYYUBUq7QAAAdA"]
[Thu Feb 26 18:58:58.574433 2026] [:error] [pid 55618:tid 55636] [client 193.37.32.53:51963] [client 193.37.32.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/wp_class_datlib.php"] [unique_id "aaAnch61Vrh12f_8oWTp8QAAAQ8"]
[Thu Feb 26 18:58:58.867606 2026] [:error] [pid 3883:tid 3902] [client 193.37.32.10:50083] [client 193.37.32.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "aaAncuA33x90V6yYHahojAAAAVA"]
[Thu Feb 26 18:58:59.414477 2026] [proxy_fcgi:error] [pid 20419:tid 20423] [client 193.37.32.130:52681] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:58:59.610474 2026] [proxy_fcgi:error] [pid 20419:tid 20435] [client 193.37.32.130:52681] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:59:00.055969 2026] [proxy_fcgi:error] [pid 20419:tid 20432] [client 193.37.32.130:52681] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:59:00.898608 2026] [:error] [pid 20419:tid 20435] [client 193.37.32.130:52681] [client 193.37.32.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/Registry-private.php"] [unique_id "aaAndO3DVDvMfTYYUBUrEQAAAc0"]
[Thu Feb 26 18:59:01.354980 2026] [:error] [pid 54990:tid 55004] [client 193.37.32.24:22633] [client 193.37.32.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-meta.php"] [unique_id "aaAndXtr2qmt_mBhH2wVjgAAAAs"]
[Thu Feb 26 18:59:01.766151 2026] [:error] [pid 3883:tid 3895] [client 193.37.32.5:24183] [client 193.37.32.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/widgets/bypass.php"] [unique_id "aaAndeA33x90V6yYHahoqQAAAUk"]
[Thu Feb 26 18:59:03.282088 2026] [:error] [pid 20419:tid 20440] [client 193.37.32.22:39625] [client 193.37.32.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/style-engine/adminfus.php"] [unique_id "aaAnd-3DVDvMfTYYUBUrMAAAAdI"]
[Thu Feb 26 18:59:03.577689 2026] [proxy_fcgi:error] [pid 55051:tid 55063] [client 193.37.32.5:47601] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:59:03.697405 2026] [:error] [pid 55051:tid 55071] [client 193.37.32.5:47601] [client 193.37.32.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/group/wp-style.php"] [unique_id "aaAndwmK1w2kZvh5eLF2vgAAAJE"]
[Thu Feb 26 18:59:04.219635 2026] [:error] [pid 54991:tid 55044] [client 193.37.32.49:53923] [client 193.37.32.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/widgets/class-wp-wolf-widget.php"] [unique_id "aaAneN4Zx-mJ8gbRB2jP2QAAAFg"]
[Thu Feb 26 18:59:07.442286 2026] [:error] [pid 25311:tid 25331] [client 193.37.32.48:23383] [client 193.37.32.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Text/index.php"] [unique_id "aaAne9fdM__yZAgJFSueXwAAAZE"]
[Thu Feb 26 18:59:07.833478 2026] [proxy_fcgi:error] [pid 44444:tid 44457] [client 193.37.32.43:53853] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:59:08.688328 2026] [:error] [pid 44444:tid 44464] [client 193.37.32.43:53853] [client 193.37.32.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/about.php"] [unique_id "aaAnfG2sMNmj-yekUk261AAAAg4"]
[Thu Feb 26 18:59:09.341474 2026] [proxy_fcgi:error] [pid 55122:tid 55148] [client 193.37.32.11:31449] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:59:09.912462 2026] [proxy_fcgi:error] [pid 55122:tid 55126] [client 193.37.32.11:31449] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:59:10.056148 2026] [:error] [pid 55122:tid 55135] [client 193.37.32.11:31449] [client 193.37.32.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/wp-sup.php"] [unique_id "aaAnfoLiR0OfjFxvcN8VUAAAAMs"]
[Thu Feb 26 18:59:10.911148 2026] [:error] [pid 54991:tid 55042] [client 193.37.32.32:57357] [client 193.37.32.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/widgets/class-t.api.php"] [unique_id "aaAnft4Zx-mJ8gbRB2jQDQAAAFY"]
[Thu Feb 26 18:59:12.124831 2026] [:error] [pid 20419:tid 20436] [client 193.37.32.129:28385] [client 193.37.32.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/dist/require-dynamic-blocks.php"] [unique_id "aaAngO3DVDvMfTYYUBUrgQAAAc4"]
[Thu Feb 26 18:59:13.636487 2026] [:error] [pid 55618:tid 55625] [client 193.37.32.47:61459] [client 193.37.32.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/widgets/class-wp-widget-rss-database.php"] [unique_id "aaAngR61Vrh12f_8oWTqjQAAAQQ"]
[Thu Feb 26 18:59:14.182460 2026] [proxy_fcgi:error] [pid 44444:tid 44466] [client 193.37.32.17:27943] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:59:14.335108 2026] [:error] [pid 44444:tid 44454] [client 193.37.32.17:27943] [client 193.37.32.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/class-wp-customize-manager-client.php"] [unique_id "aaAngm2sMNmj-yekUk27HAAAAgQ"]
[Thu Feb 26 18:59:14.774787 2026] [:error] [pid 54991:tid 55041] [client 193.37.32.15:63389] [client 193.37.32.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-boolean.php"] [unique_id "aaAngt4Zx-mJ8gbRB2jQMAAAAFU"]
[Thu Feb 26 18:59:16.010181 2026] [:error] [pid 54990:tid 54997] [client 193.37.32.36:61243] [client 193.37.32.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/smilies/simi.php"] [unique_id "aaAnhHtr2qmt_mBhH2wWBQAAAAQ"]
[Thu Feb 26 18:59:16.381443 2026] [proxy_fcgi:error] [pid 44444:tid 44464] [client 193.37.32.19:27259] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:59:17.396457 2026] [proxy_fcgi:error] [pid 44444:tid 44457] [client 193.37.32.19:27259] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:59:17.544236 2026] [:error] [pid 44444:tid 44461] [client 193.37.32.19:27259] [client 193.37.32.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/style-engine-session.php"] [unique_id "aaAnhW2sMNmj-yekUk27PQAAAgs"]
[Thu Feb 26 18:59:18.774437 2026] [proxy_fcgi:error] [pid 54990:tid 54994] [client 193.37.32.48:49877] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:59:19.170260 2026] [:error] [pid 54990:tid 55003] [client 193.37.32.48:49877] [client 193.37.32.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aaAnh3tr2qmt_mBhH2wWIwAAAAo"]
[Thu Feb 26 18:59:19.949168 2026] [:error] [pid 55051:tid 55072] [client 193.37.32.44:23931] [client 193.37.32.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/file/wp-style.php"] [unique_id "aaAnhwmK1w2kZvh5eLF3ZgAAAJI"]
[Thu Feb 26 18:59:20.671068 2026] [:error] [pid 54990:tid 55000] [client 193.37.32.26:59085] [client 193.37.32.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/IXR/class-IXR-cilent.php"] [unique_id "aaAniHtr2qmt_mBhH2wWMAAAAAc"]
[Thu Feb 26 18:59:21.522899 2026] [:error] [pid 54991:tid 55040] [client 193.37.32.11:26207] [client 193.37.32.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/install.php"] [unique_id "aaAnid4Zx-mJ8gbRB2jQcwAAAFQ"]
[Thu Feb 26 18:59:21.806971 2026] [:error] [pid 20419:tid 20431] [client 193.37.32.51:49679] [client 193.37.32.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/PHPMailer/xleet.php"] [unique_id "aaAnie3DVDvMfTYYUBUr6AAAAck"]
[Thu Feb 26 18:59:22.809807 2026] [proxy_fcgi:error] [pid 20419:tid 20442] [client 193.37.32.41:34443] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:59:23.764296 2026] [:error] [pid 20419:tid 20440] [client 193.37.32.41:34443] [client 193.37.32.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/category-double.php"] [unique_id "aaAni-3DVDvMfTYYUBUr_QAAAdI"]
[Thu Feb 26 18:59:24.395174 2026] [:error] [pid 54990:tid 55012] [client 193.37.32.20:38885] [client 193.37.32.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/db.php"] [unique_id "aaAnjHtr2qmt_mBhH2wWUAAAABM"]
[Thu Feb 26 18:59:24.741951 2026] [:error] [pid 3883:tid 3899] [client 193.37.32.16:49953] [client 193.37.32.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/widgets/security.php"] [unique_id "aaAnjOA33x90V6yYHahqMwAAAU0"]
[Thu Feb 26 18:59:25.389022 2026] [proxy_fcgi:error] [pid 44444:tid 44460] [client 193.37.32.32:63539] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:59:25.579304 2026] [:error] [pid 44444:tid 44453] [client 193.37.32.32:63539] [client 193.37.32.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/class-wp-language-pack.php"] [unique_id "aaAnjW2sMNmj-yekUk27zgAAAgM"]
[Thu Feb 26 18:59:26.035246 2026] [:error] [pid 44444:tid 44465] [client 193.37.32.10:36257] [client 193.37.32.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/class-walker-comment-client.php"] [unique_id "aaAnjm2sMNmj-yekUk276gAAAg8"]
[Thu Feb 26 18:59:27.120082 2026] [:error] [pid 20419:tid 20430] [client 193.37.32.16:61903] [client 193.37.32.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/class-wp-network-query-stat.php"] [unique_id "aaAnj-3DVDvMfTYYUBUsGgAAAcg"]
[Thu Feb 26 18:59:27.540445 2026] [proxy_fcgi:error] [pid 55618:tid 55644] [client 193.37.32.18:38333] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:59:27.731537 2026] [:error] [pid 55618:tid 55645] [client 193.37.32.18:38333] [client 193.37.32.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/class-wp-session-tokens-https.php"] [unique_id "aaAnjx61Vrh12f_8oWTq5AAAARg"]
[Thu Feb 26 18:59:34.610293 2026] [:error] [pid 3883:tid 3889] [client 193.37.32.41:65163] [client 193.37.32.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/crystal/lrs_dage.php"] [unique_id "aaAnluA33x90V6yYHahrSQAAAUM"]
[Thu Feb 26 18:59:35.013368 2026] [:error] [pid 55618:tid 55625] [client 193.37.32.53:25935] [client 193.37.32.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/as.php"] [unique_id "aaAnlx61Vrh12f_8oWTrDAAAAQQ"]
[Thu Feb 26 18:59:35.453791 2026] [:error] [pid 55618:tid 55626] [client 193.37.32.35:41199] [client 193.37.32.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/certificates/wp-conflg.php"] [unique_id "aaAnlx61Vrh12f_8oWTrDgAAAQU"]
[Thu Feb 26 18:59:35.761689 2026] [:error] [pid 44444:tid 44464] [client 193.37.32.25:26689] [client 193.37.32.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/install.php"] [unique_id "aaAnl22sMNmj-yekUk28aQAAAg4"]
[Thu Feb 26 18:59:36.048005 2026] [:error] [pid 55122:tid 55145] [client 193.37.32.50:38379] [client 193.37.32.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/customize/db.php"] [unique_id "aaAnmILiR0OfjFxvcN8WhgAAANU"]
[Thu Feb 26 18:59:36.476476 2026] [proxy_fcgi:error] [pid 20419:tid 20422] [client 193.37.32.39:58463] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:59:38.010966 2026] [:error] [pid 20419:tid 20423] [client 193.37.32.39:58463] [client 193.37.32.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/thickbox/about.php"] [unique_id "aaAnmu3DVDvMfTYYUBUsUwAAAcE"]
[Thu Feb 26 18:59:40.240920 2026] [:error] [pid 44444:tid 44459] [client 193.37.32.42:24627] [client 193.37.32.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/rk2.php"] [unique_id "aaAnnG2sMNmj-yekUk28jwAAAgk"]
[Thu Feb 26 18:59:42.046459 2026] [proxy_fcgi:error] [pid 55051:tid 55066] [client 193.37.32.9:32761] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:59:42.177945 2026] [:error] [pid 55051:tid 55061] [client 193.37.32.9:32761] [client 193.37.32.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/certificates/past.php"] [unique_id "aaAnngmK1w2kZvh5eLF4DQAAAIc"]
[Thu Feb 26 18:59:42.590476 2026] [proxy_fcgi:error] [pid 44444:tid 44456] [client 193.37.32.41:59943] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:59:46.014417 2026] [:error] [pid 44444:tid 44468] [client 193.37.32.41:59943] [client 193.37.32.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/edit-tags.php"] [unique_id "aaAnom2sMNmj-yekUk29KgAAAhI"]
[Thu Feb 26 18:59:46.704096 2026] [proxy_fcgi:error] [pid 3883:tid 3889] [client 193.37.32.17:63869] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:59:48.210222 2026] [:error] [pid 3883:tid 3897] [client 193.37.32.17:63869] [client 193.37.32.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/dist/footer-default.php"] [unique_id "aaAnpOA33x90V6yYHahsFQAAAUs"]
[Thu Feb 26 18:59:48.636174 2026] [:error] [pid 55122:tid 55140] [client 193.37.32.8:32729] [client 193.37.32.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/widgets/class-wp-widget-meta-request.php"] [unique_id "aaAnpILiR0OfjFxvcN8XRwAAANA"]
[Thu Feb 26 18:59:49.178129 2026] [:error] [pid 55122:tid 55140] [client 193.37.32.7:21613] [client 193.37.32.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/dist/edit-widgets/bypass.php"] [unique_id "aaAnpYLiR0OfjFxvcN8XVQAAANA"]
[Thu Feb 26 18:59:50.238333 2026] [:error] [pid 54991:tid 55022] [client 193.37.32.38:47657] [client 193.37.32.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/l10n/wp-login.php"] [unique_id "aaAnpt4Zx-mJ8gbRB2jRMAAAAEI"]
[Thu Feb 26 18:59:53.062225 2026] [:error] [pid 44444:tid 44464] [client 193.37.32.48:37577] [client 193.37.32.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/widgets/wp-ss.php"] [unique_id "aaAnqW2sMNmj-yekUk29eAAAAg4"]
[Thu Feb 26 18:59:53.985422 2026] [:error] [pid 55618:tid 55631] [client 193.37.32.32:55953] [client 193.37.32.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/IXR/xsec1.php"] [unique_id "aaAnqR61Vrh12f_8oWTrnAAAAQo"]
[Thu Feb 26 18:59:55.899985 2026] [:error] [pid 3883:tid 3902] [client 193.37.32.39:64651] [client 193.37.32.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/crystal/sad.php"] [unique_id "aaAnq-A33x90V6yYHahsogAAAVA"]
[Thu Feb 26 18:59:57.254674 2026] [:error] [pid 25311:tid 25314] [client 193.37.32.20:59251] [client 193.37.32.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aaAnrdfdM__yZAgJFSugcwAAAYA"]
[Thu Feb 26 18:59:57.972860 2026] [:error] [pid 25311:tid 25325] [client 193.37.32.10:48455] [client 193.37.32.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/class-phpmailer-beta.php"] [unique_id "aaAnrdfdM__yZAgJFSugkgAAAYs"]
[Thu Feb 26 19:00:04.014287 2026] [:error] [pid 44444:tid 44457] [client 193.37.32.31:37237] [client 193.37.32.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/ms-file.php"] [unique_id "aaAntG2sMNmj-yekUk291QAAAgc"]
[Thu Feb 26 19:00:04.272740 2026] [:error] [pid 44444:tid 44451] [client 193.37.32.16:64149] [client 193.37.32.16] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.32.16, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aaAntG2sMNmj-yekUk295wAAAgE"]
[Thu Feb 26 19:00:04.295466 2026] [proxy_fcgi:error] [pid 44444:tid 44451] [client 193.37.32.16:64149] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 19:00:04.448446 2026] [:error] [pid 44444:tid 44450] [client 193.37.32.16:64149] [client 193.37.32.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/widgets/av.php"] [unique_id "aaAntG2sMNmj-yekUk296wAAAgA"]
[Thu Feb 26 19:00:05.078510 2026] [proxy_fcgi:error] [pid 20419:tid 20426] [client 193.37.32.12:65437] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 19:00:05.242459 2026] [:error] [pid 20419:tid 20431] [client 193.37.32.12:65437] [client 193.37.32.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aaAnte3DVDvMfTYYUBUtSAAAAck"]
[Thu Feb 26 19:00:05.542973 2026] [:error] [pid 55051:tid 55069] [client 193.37.32.8:41867] [client 193.37.32.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/network.php"] [unique_id "aaAntQmK1w2kZvh5eLF4vQAAAI8"]
[Thu Feb 26 19:00:05.855486 2026] [proxy_fcgi:error] [pid 44444:tid 44459] [client 193.37.32.23:48421] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 19:00:07.779201 2026] [:error] [pid 44444:tid 44460] [client 193.37.32.23:48421] [client 193.37.32.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/XML/content.php"] [unique_id "aaAnt22sMNmj-yekUk2-EQAAAgo"]
[Thu Feb 26 19:00:08.044468 2026] [:error] [pid 54991:tid 55027] [client 193.37.32.41:61665] [client 193.37.32.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/pomo/item.php"] [unique_id "aaAnuN4Zx-mJ8gbRB2jRyQAAAEc"]
[Thu Feb 26 19:00:08.662252 2026] [:error] [pid 3883:tid 3887] [client 193.37.32.16:28337] [client 193.37.32.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/pomo/plugins.php"] [unique_id "aaAnuOA33x90V6yYHahtRAAAAUE"]
[Thu Feb 26 19:00:09.372799 2026] [:error] [pid 3883:tid 3890] [client 193.37.32.6:58783] [client 193.37.32.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/install.php"] [unique_id "aaAnueA33x90V6yYHahtSwAAAUQ"]
[Thu Feb 26 19:00:10.688874 2026] [proxy_fcgi:error] [pid 44444:tid 44458] [client 193.37.32.26:61239] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 19:00:10.862130 2026] [:error] [pid 44444:tid 44464] [client 193.37.32.26:61239] [client 193.37.32.26] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.32.26, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/wp-login.php"] [unique_id "aaAnum2sMNmj-yekUk2-OQAAAg4"]
[Thu Feb 26 19:00:11.176170 2026] [:error] [pid 44444:tid 44473] [client 193.37.32.26:61239] [client 193.37.32.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/widgets/class-wp-nav-widgets.php"] [unique_id "aaAnu22sMNmj-yekUk2-QwAAAhc"]
[Thu Feb 26 19:00:13.332638 2026] [:error] [pid 55051:tid 55055] [client 193.37.32.16:22921] [client 193.37.32.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/sitemaps/providers/doc.php"] [unique_id "aaAnvQmK1w2kZvh5eLF5BAAAAIE"]
[Thu Feb 26 19:00:13.735650 2026] [proxy_fcgi:error] [pid 3883:tid 3902] [client 193.37.32.13:30631] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 19:00:13.865189 2026] [:error] [pid 3883:tid 3891] [client 193.37.32.13:30631] [client 193.37.32.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/rest-api/1.php"] [unique_id "aaAnveA33x90V6yYHahtkQAAAUU"]
[Thu Feb 26 19:00:14.208062 2026] [:error] [pid 3883:tid 3896] [client 193.37.32.38:59393] [client 193.37.32.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/fonts/class_api.php"] [unique_id "aaAnvuA33x90V6yYHahtoAAAAUo"]
[Thu Feb 26 19:00:14.497446 2026] [proxy_fcgi:error] [pid 55051:tid 55056] [client 193.37.32.34:61461] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 19:00:15.049614 2026] [:error] [pid 55051:tid 55060] [client 193.37.32.34:61461] [client 193.37.32.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/smilies/admin.php"] [unique_id "aaAnvwmK1w2kZvh5eLF5LwAAAIY"]
[Thu Feb 26 19:00:15.728038 2026] [:error] [pid 55051:tid 55078] [client 193.37.32.11:46205] [client 193.37.32.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/IXR/about.php"] [unique_id "aaAnvwmK1w2kZvh5eLF5QwAAAJg"]
[Thu Feb 26 19:00:16.026445 2026] [proxy_fcgi:error] [pid 25311:tid 25338] [client 193.37.32.44:43067] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 19:00:16.356460 2026] [proxy_fcgi:error] [pid 25311:tid 25326] [client 193.37.32.44:43067] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 19:00:17.075031 2026] [:error] [pid 25311:tid 25318] [client 193.37.32.44:43067] [client 193.37.32.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/class-wp-customize-manager-interpreter.php"] [unique_id "aaAnwdfdM__yZAgJFSuheAAAAYQ"]
[Thu Feb 26 19:00:17.485851 2026] [:error] [pid 3883:tid 3897] [client 193.37.32.48:51033] [client 193.37.32.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/bypass.php"] [unique_id "aaAnweA33x90V6yYHahuAwAAAUs"]
[Thu Feb 26 19:00:18.408190 2026] [:error] [pid 55122:tid 55129] [client 193.37.32.52:57931] [client 193.37.32.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/count.php"] [unique_id "aaAnwoLiR0OfjFxvcN8YkAAAAMU"]
[Thu Feb 26 19:00:18.723690 2026] [proxy_fcgi:error] [pid 55122:tid 55139] [client 193.37.32.27:64113] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 19:00:19.627164 2026] [:error] [pid 55122:tid 55131] [client 193.37.32.27:64113] [client 193.37.32.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "aaAnw4LiR0OfjFxvcN8YqAAAAMc"]
[Thu Feb 26 19:00:20.209241 2026] [:error] [pid 55051:tid 55077] [client 193.37.32.46:40595] [client 193.37.32.46] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/usr/local/apache/modsecurity-cwaf/rules/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder||dwelectservices.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "dwelectservices.com.au"] [uri "/images/stories/themes.php"] [unique_id "aaAnxAmK1w2kZvh5eLF5XgAAAJc"]
[Thu Feb 26 19:00:20.415456 2026] [:error] [pid 55051:tid 55065] [client 193.37.32.46:40595] [client 193.37.32.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/theme-compat/footer-embed-function.php"] [unique_id "aaAnxAmK1w2kZvh5eLF5YAAAAIs"]
[Thu Feb 26 19:00:21.162110 2026] [:error] [pid 25311:tid 25318] [client 193.37.32.46:23199] [client 193.37.32.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/l10n/class-wp-translation-file-mo-event.php"] [unique_id "aaAnxdfdM__yZAgJFSuhhgAAAYQ"]
[Thu Feb 26 19:00:21.564115 2026] [:error] [pid 44444:tid 44472] [client 193.37.32.32:45107] [client 193.37.32.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/vars-soap.php"] [unique_id "aaAnxW2sMNmj-yekUk2-0QAAAhY"]
[Thu Feb 26 19:00:22.205453 2026] [proxy_fcgi:error] [pid 55122:tid 55129] [client 193.37.32.37:24381] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 19:00:23.172221 2026] [:error] [pid 55122:tid 55138] [client 193.37.32.37:24381] [client 193.37.32.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/id3/wp-work.php"] [unique_id "aaAnx4LiR0OfjFxvcN8YywAAAM4"]
[Thu Feb 26 19:00:24.222707 2026] [:error] [pid 3883:tid 3901] [client 193.37.32.14:42575] [client 193.37.32.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/class-wp-taxonomy.editor.php"] [unique_id "aaAnyOA33x90V6yYHahuugAAAU8"]
[Thu Feb 26 19:00:24.687168 2026] [:error] [pid 44444:tid 44468] [client 193.37.32.8:51457] [client 193.37.32.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/wp-conflg.php"] [unique_id "aaAnyG2sMNmj-yekUk2-5QAAAhI"]
[Thu Feb 26 19:00:24.977443 2026] [proxy_fcgi:error] [pid 54990:tid 55003] [client 193.37.32.47:53099] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 19:00:25.873891 2026] [:error] [pid 54990:tid 55008] [client 193.37.32.47:53099] [client 193.37.32.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/interactivity-api/interactivity-api-xml.php"] [unique_id "aaAnyXtr2qmt_mBhH2wYcQAAAA8"]
[Thu Feb 26 19:00:26.457252 2026] [:error] [pid 55051:tid 55060] [client 193.37.32.49:20297] [client 193.37.32.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/colour.php"] [unique_id "aaAnygmK1w2kZvh5eLF5gwAAAIY"]
[Thu Feb 26 19:00:26.816484 2026] [proxy_fcgi:error] [pid 20419:tid 20444] [client 193.37.32.9:47627] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 19:00:26.974168 2026] [:error] [pid 20419:tid 20428] [client 193.37.32.9:47627] [client 193.37.32.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/customize/class-wp-customize-background-position-control-variable.php"] [unique_id "aaAnyu3DVDvMfTYYUBUuCgAAAcY"]
[Thu Feb 26 19:00:27.718700 2026] [:error] [pid 3883:tid 3892] [client 193.37.32.28:43685] [client 193.37.32.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/include.php"] [unique_id "aaAny-A33x90V6yYHahvAAAAAUY"]
[Thu Feb 26 19:00:28.511439 2026] [:error] [pid 25311:tid 25322] [client 193.37.32.5:22917] [client 193.37.32.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/imgareaselect/wp-login.php"] [unique_id "aaAnzNfdM__yZAgJFSuhuQAAAYg"]
[Thu Feb 26 19:00:30.154463 2026] [proxy_fcgi:error] [pid 55618:tid 55645] [client 193.37.32.129:33645] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 19:00:30.586680 2026] [:error] [pid 55618:tid 55640] [client 193.37.32.129:33645] [client 193.37.32.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/l10n/class-wp-translations-interface.php"] [unique_id "aaAnzh61Vrh12f_8oWTtLwAAARM"]
[Thu Feb 26 19:00:31.043988 2026] [:error] [pid 3883:tid 3906] [client 193.37.32.28:54763] [client 193.37.32.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/about5.php"] [unique_id "aaAnz-A33x90V6yYHahvIwAAAVQ"]
[Thu Feb 26 19:00:31.979184 2026] [:error] [pid 55051:tid 55058] [client 193.37.32.48:28977] [client 193.37.32.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/index/install.php"] [unique_id "aaAnzwmK1w2kZvh5eLF5wgAAAIQ"]
[Thu Feb 26 19:00:32.259488 2026] [:error] [pid 3883:tid 3892] [client 193.37.32.48:39281] [client 193.37.32.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/index/install.php"] [unique_id "aaAn0OA33x90V6yYHahvPgAAAUY"]
[Thu Feb 26 19:00:33.039196 2026] [:error] [pid 3883:tid 3905] [client 193.37.32.33:26985] [client 193.37.32.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/ID3/db.php"] [unique_id "aaAn0eA33x90V6yYHahvYgAAAVM"]
[Thu Feb 26 19:00:33.651239 2026] [:error] [pid 54990:tid 55001] [client 193.37.32.44:40071] [client 193.37.32.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/dist/bypass.php"] [unique_id "aaAn0Xtr2qmt_mBhH2wYtgAAAAg"]
[Thu Feb 26 19:00:34.469477 2026] [proxy_fcgi:error] [pid 54991:tid 55030] [client 193.37.32.28:41859] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 19:00:35.088019 2026] [:error] [pid 54991:tid 55043] [client 193.37.32.28:41859] [client 193.37.32.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/sitemaps/wp-conflg.php"] [unique_id "aaAn094Zx-mJ8gbRB2jSuQAAAFc"]
[Thu Feb 26 19:00:35.516970 2026] [:error] [pid 25311:tid 25321] [client 193.37.32.52:25355] [client 193.37.32.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.php"] [unique_id "aaAn09fdM__yZAgJFSuiLAAAAYc"]
[Thu Feb 26 19:00:40.954379 2026] [:error] [pid 25311:tid 25334] [client 193.37.32.53:57217] [client 193.37.32.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/login.php"] [unique_id "aaAn2NfdM__yZAgJFSuiXAAAAZQ"]
[Thu Feb 26 19:00:41.904734 2026] [proxy_fcgi:error] [pid 3883:tid 3892] [client 193.37.32.34:30603] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 19:00:43.676231 2026] [:error] [pid 3883:tid 3892] [client 193.37.32.34:30603] [client 193.37.32.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/sitemaps/chosen.php"] [unique_id "aaAn2-A33x90V6yYHahv3QAAAUY"]
[Thu Feb 26 19:00:44.003439 2026] [proxy_fcgi:error] [pid 55051:tid 55058] [client 193.37.32.38:28705] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 19:00:44.603232 2026] [:error] [pid 55051:tid 55069] [client 193.37.32.38:28705] [client 193.37.32.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/Cache/index.php"] [unique_id "aaAn3AmK1w2kZvh5eLF6EgAAAI8"]
[Thu Feb 26 19:00:44.946787 2026] [:error] [pid 3883:tid 3894] [client 193.37.32.50:31085] [client 193.37.32.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/dist/about.php"] [unique_id "aaAn3OA33x90V6yYHahv-gAAAUg"]
[Thu Feb 26 19:00:45.452011 2026] [:error] [pid 3883:tid 3892] [client 193.37.32.38:35541] [client 193.37.32.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aaAn3eA33x90V6yYHahwBwAAAUY"]
[Thu Feb 26 19:00:45.750559 2026] [:error] [pid 44444:tid 44463] [client 193.37.32.53:53681] [client 193.37.32.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/simi.php"] [unique_id "aaAn3W2sMNmj-yekUk2_xgAAAg0"]
[Thu Feb 26 19:00:46.432705 2026] [:error] [pid 3883:tid 3891] [client 193.37.32.27:31407] [client 193.37.32.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Requests/Text/index.php"] [unique_id "aaAn3uA33x90V6yYHahwGwAAAUU"]
[Thu Feb 26 19:00:48.106397 2026] [:error] [pid 55618:tid 55635] [client 193.37.32.25:39411] [client 193.37.32.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/sitemaps/abcd.php"] [unique_id "aaAn4B61Vrh12f_8oWTtqgAAAQ4"]
[Thu Feb 26 19:00:48.659588 2026] [:error] [pid 25311:tid 25321] [client 193.37.32.40:52889] [client 193.37.32.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/ID3/rk2.php"] [unique_id "aaAn4NfdM__yZAgJFSuilQAAAYc"]
[Thu Feb 26 19:00:48.987867 2026] [:error] [pid 25311:tid 25337] [client 193.37.32.14:30833] [client 193.37.32.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/widgets/class-wp-widget-search-interpreter.php"] [unique_id "aaAn4NfdM__yZAgJFSuinAAAAZc"]
[Thu Feb 26 19:00:50.836883 2026] [:error] [pid 3883:tid 3887] [client 193.37.32.38:48875] [client 193.37.32.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/block-template-utils-other.php"] [unique_id "aaAn4uA33x90V6yYHahwXwAAAUE"]
[Thu Feb 26 19:00:51.383864 2026] [proxy_fcgi:error] [pid 55051:tid 55071] [client 193.37.32.39:28581] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 19:00:51.570735 2026] [:error] [pid 55051:tid 55068] [client 193.37.32.39:28581] [client 193.37.32.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/sodium_compat/lib/widget-group.php"] [unique_id "aaAn4wmK1w2kZvh5eLF6LwAAAI4"]
[Thu Feb 26 19:00:52.270611 2026] [:error] [pid 20419:tid 20424] [client 193.37.32.41:44047] [client 193.37.32.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/jcrop/about.php"] [unique_id "aaAn5O3DVDvMfTYYUBUuqQAAAcI"]
[Thu Feb 26 19:00:52.829795 2026] [:error] [pid 55051:tid 55059] [client 193.37.32.24:27727] [client 193.37.32.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/customize/chosen.php"] [unique_id "aaAn5AmK1w2kZvh5eLF6RAAAAIU"]
[Thu Feb 26 19:00:53.777442 2026] [proxy_fcgi:error] [pid 44444:tid 44463] [client 193.37.32.23:27783] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 19:00:54.805196 2026] [:error] [pid 44444:tid 44451] [client 193.37.32.23:27783] [client 193.37.32.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/plugin.php"] [unique_id "aaAn5m2sMNmj-yekUk3ARgAAAgE"]
[Thu Feb 26 19:00:56.283937 2026] [:error] [pid 3883:tid 3894] [client 193.37.32.20:29001] [client 193.37.32.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/class-wp-scripts-query.php"] [unique_id "aaAn6OA33x90V6yYHahwkgAAAUg"]
[Thu Feb 26 19:00:56.762441 2026] [proxy_fcgi:error] [pid 25311:tid 25320] [client 193.37.32.5:26169] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 19:00:57.009645 2026] [:error] [pid 25311:tid 25314] [client 193.37.32.5:26169] [client 193.37.32.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/ID3/module.audio-license.php"] [unique_id "aaAn6dfdM__yZAgJFSujIAAAAYA"]
[Thu Feb 26 19:00:58.089315 2026] [:error] [pid 54991:tid 55041] [client 193.37.32.10:49617] [client 193.37.32.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/class-wp-error-module.php"] [unique_id "aaAn6t4Zx-mJ8gbRB2jTMwAAAFU"]
[Thu Feb 26 19:00:58.404471 2026] [proxy_fcgi:error] [pid 20419:tid 20436] [client 193.37.32.30:21151] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 19:00:58.829979 2026] [proxy_fcgi:error] [pid 20419:tid 20434] [client 193.37.32.30:21151] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 19:00:58.979821 2026] [:error] [pid 20419:tid 20428] [client 193.37.32.30:21151] [client 193.37.32.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/litespeed.php"] [unique_id "aaAn6u3DVDvMfTYYUBUu-wAAAcY"]
[Thu Feb 26 19:00:59.648140 2026] [:error] [pid 25311:tid 25320] [client 193.37.32.17:57967] [client 193.37.32.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/dist/alam.php"] [unique_id "aaAn69fdM__yZAgJFSujOgAAAYY"]
[Thu Feb 26 19:01:00.034457 2026] [proxy_fcgi:error] [pid 44444:tid 44473] [client 193.37.32.44:20197] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 19:01:00.196577 2026] [:error] [pid 44444:tid 44469] [client 193.37.32.44:20197] [client 193.37.32.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/block-bindings/imagess.php"] [unique_id "aaAn7G2sMNmj-yekUk3AeQAAAhM"]
[Thu Feb 26 19:01:00.861155 2026] [:error] [pid 55618:tid 55633] [client 193.37.32.42:57041] [client 193.37.32.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/default-filters-edit.php"] [unique_id "aaAn7B61Vrh12f_8oWTuFQAAAQw"]
[Thu Feb 26 19:01:01.331485 2026] [proxy_fcgi:error] [pid 25311:tid 25325] [client 193.37.32.12:43369] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 19:01:01.859293 2026] [proxy_fcgi:error] [pid 25311:tid 25330] [client 193.37.32.12:43369] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 19:01:02.019757 2026] [:error] [pid 25311:tid 25325] [client 193.37.32.12:43369] [client 193.37.32.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Requests/Auth/index.php"] [unique_id "aaAn7tfdM__yZAgJFSujWAAAAYs"]
[Thu Feb 26 19:01:03.209606 2026] [:error] [pid 44444:tid 44467] [client 193.37.32.14:23903] [client 193.37.32.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Text/Diff/Engine/theme.php"] [unique_id "aaAn722sMNmj-yekUk3AogAAAhE"]
[Thu Feb 26 19:01:03.594497 2026] [proxy_fcgi:error] [pid 44444:tid 44453] [client 193.37.32.22:59095] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 19:01:03.737503 2026] [:error] [pid 44444:tid 44474] [client 193.37.32.22:59095] [client 193.37.32.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/ID3/shell.php"] [unique_id "aaAn722sMNmj-yekUk3AvwAAAhg"]
[Thu Feb 26 19:01:04.064167 2026] [:error] [pid 44444:tid 44450] [client 193.37.32.50:30763] [client 193.37.32.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/customize/class-wp-customize-selective-refresh-library.php"] [unique_id "aaAn8G2sMNmj-yekUk3A0AAAAgA"]
[Thu Feb 26 19:01:04.339466 2026] [proxy_fcgi:error] [pid 3883:tid 3893] [client 193.37.32.44:61931] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 19:01:04.659199 2026] [:error] [pid 3883:tid 3890] [client 193.37.32.44:61931] [client 193.37.32.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Requests/library/wp-login.php"] [unique_id "aaAn8OA33x90V6yYHahw9QAAAUQ"]
[Thu Feb 26 19:01:04.970546 2026] [:error] [pid 44444:tid 44462] [client 193.37.32.19:49337] [client 193.37.32.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/interactivity-api/about.php"] [unique_id "aaAn8G2sMNmj-yekUk3A-QAAAgw"]
[Thu Feb 26 19:01:05.361441 2026] [proxy_fcgi:error] [pid 44444:tid 44456] [client 193.37.32.9:30151] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 19:01:06.224145 2026] [:error] [pid 44444:tid 44456] [client 193.37.32.9:30151] [client 193.37.32.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/wp-2019.php"] [unique_id "aaAn8m2sMNmj-yekUk3BNwAAAgY"]
[Thu Feb 26 19:01:07.496407 2026] [:error] [pid 55122:tid 55141] [client 193.37.32.40:41495] [client 193.37.32.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/info.php"] [unique_id "aaAn84LiR0OfjFxvcN8aBgAAANE"]
[Thu Feb 26 19:01:08.066056 2026] [:error] [pid 25311:tid 25329] [client 193.37.32.40:25139] [client 193.37.32.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/log.php"] [unique_id "aaAn9NfdM__yZAgJFSujlAAAAY8"]
[Thu Feb 26 19:01:09.477532 2026] [:error] [pid 55051:tid 55055] [client 193.37.32.15:62951] [client 193.37.32.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime-num.php"] [unique_id "aaAn9QmK1w2kZvh5eLF6vQAAAIE"]
[Thu Feb 26 19:01:10.824233 2026] [:error] [pid 44444:tid 44462] [client 193.37.32.129:32311] [client 193.37.32.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-entry.min-object.php"] [unique_id "aaAn9m2sMNmj-yekUk3BYwAAAgw"]
[Thu Feb 26 19:01:11.133434 2026] [:error] [pid 54991:tid 55025] [client 193.37.32.23:54177] [client 193.37.32.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/aw.php"] [unique_id "aaAn994Zx-mJ8gbRB2jTiAAAAEU"]
[Thu Feb 26 19:01:12.050779 2026] [:error] [pid 3883:tid 3894] [client 193.37.32.36:32985] [client 193.37.32.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/IXR/db.php"] [unique_id "aaAn-OA33x90V6yYHahxbgAAAUg"]
[Thu Feb 26 19:01:12.355185 2026] [:error] [pid 55122:tid 55137] [client 193.37.32.43:48279] [client 193.37.32.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/install.php"] [unique_id "aaAn-ILiR0OfjFxvcN8aWgAAAM0"]
[Thu Feb 26 19:01:12.867906 2026] [proxy_fcgi:error] [pid 25311:tid 25333] [client 193.37.32.27:36039] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 19:01:13.464665 2026] [:error] [pid 25311:tid 25328] [client 193.37.32.27:36039] [client 193.37.32.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/dist/install.php"] [unique_id "aaAn-dfdM__yZAgJFSujvQAAAY4"]
[Thu Feb 26 19:01:13.742208 2026] [:error] [pid 55122:tid 55142] [client 193.37.32.38:41585] [client 193.37.32.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/style-engine/dedi1.php"] [unique_id "aaAn-YLiR0OfjFxvcN8aeQAAANI"]
[Thu Feb 26 19:01:14.474163 2026] [:error] [pid 55051:tid 55062] [client 193.37.32.17:32071] [client 193.37.32.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/template-less.php"] [unique_id "aaAn-gmK1w2kZvh5eLF61gAAAIg"]
[Thu Feb 26 19:01:14.768340 2026] [:error] [pid 55051:tid 55065] [client 193.37.32.32:54473] [client 193.37.32.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/pomo/alfa-rex.php"] [unique_id "aaAn-gmK1w2kZvh5eLF62QAAAIs"]
[Thu Feb 26 19:01:17.903169 2026] [:error] [pid 55051:tid 55069] [client 193.37.32.47:44519] [client 193.37.32.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/min.php"] [unique_id "aaAn_QmK1w2kZvh5eLF67QAAAI8"]
[Thu Feb 26 19:01:18.830535 2026] [:error] [pid 54991:tid 55034] [client 193.37.32.37:45853] [client 193.37.32.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/wp-conflg.php"] [unique_id "aaAn_t4Zx-mJ8gbRB2jTqgAAAE4"]
[Thu Feb 26 19:01:19.375622 2026] [:error] [pid 25311:tid 25320] [client 193.37.32.20:39819] [client 193.37.32.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/file.php"] [unique_id "aaAn_9fdM__yZAgJFSuj7wAAAYY"]
[Thu Feb 26 19:01:19.802639 2026] [:error] [pid 55051:tid 55058] [client 193.37.32.130:60103] [client 193.37.32.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/block-patterns/about.php"] [unique_id "aaAn_wmK1w2kZvh5eLF6_QAAAIQ"]
[Thu Feb 26 19:01:20.240684 2026] [:error] [pid 3883:tid 3888] [client 193.37.32.21:52513] [client 193.37.32.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/load.php"] [unique_id "aaAoAOA33x90V6yYHahx5wAAAUI"]
[Thu Feb 26 19:01:20.575272 2026] [:error] [pid 3883:tid 3901] [client 193.37.32.28:20203] [client 193.37.32.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/ID3/chosen.php"] [unique_id "aaAoAOA33x90V6yYHahx-QAAAU8"]
[Thu Feb 26 19:01:21.396533 2026] [:error] [pid 55122:tid 55143] [client 193.37.32.20:50779] [client 193.37.32.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/class-wp-theme-float.php"] [unique_id "aaAoAYLiR0OfjFxvcN8a2AAAANM"]
[Thu Feb 26 19:01:22.550174 2026] [:error] [pid 25311:tid 25337] [client 193.37.32.38:37909] [client 193.37.32.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/widgets/wp-style.php"] [unique_id "aaAoAtfdM__yZAgJFSukFAAAAZc"]
[Thu Feb 26 19:01:22.867445 2026] [proxy_fcgi:error] [pid 55122:tid 55132] [client 193.37.32.53:35749] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 19:01:23.047998 2026] [:error] [pid 55122:tid 55130] [client 193.37.32.53:35749] [client 193.37.32.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/widgets/autoload_classmap.php"] [unique_id "aaAoA4LiR0OfjFxvcN8a4QAAAMY"]
[Thu Feb 26 19:01:26.881817 2026] [proxy_fcgi:error] [pid 44444:tid 44465] [client 193.37.32.4:61121] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 19:01:27.039196 2026] [:error] [pid 44444:tid 44456] [client 193.37.32.4:61121] [client 193.37.32.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/block-bindings/admin.php"] [unique_id "aaAoB22sMNmj-yekUk3CGwAAAgY"]
[Thu Feb 26 19:01:27.323025 2026] [:error] [pid 44444:tid 44469] [client 193.37.32.50:60563] [client 193.37.32.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/PHPMailer/autoload_classmap.php"] [unique_id "aaAoB22sMNmj-yekUk3CKAAAAhM"]
[Thu Feb 26 19:01:27.854231 2026] [:error] [pid 44444:tid 44470] [client 193.37.32.4:28549] [client 193.37.32.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/theme-compat/db.php"] [unique_id "aaAoB22sMNmj-yekUk3CRQAAAhQ"]
[Thu Feb 26 19:01:28.350486 2026] [proxy_fcgi:error] [pid 54991:tid 55041] [client 193.37.32.11:46679] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 19:01:28.501841 2026] [proxy_fcgi:error] [pid 54991:tid 55031] [client 193.37.32.11:46679] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 19:01:29.181889 2026] [proxy_fcgi:error] [pid 54991:tid 55021] [client 193.37.32.11:46679] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 19:01:30.168784 2026] [:error] [pid 54991:tid 55044] [client 193.37.32.11:46679] [client 193.37.32.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/system.php"] [unique_id "aaAoCt4Zx-mJ8gbRB2jUEwAAAFg"]
[Thu Feb 26 19:01:30.854069 2026] [:error] [pid 54991:tid 55027] [client 193.37.32.28:24551] [client 193.37.32.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/block-bindings/about.php"] [unique_id "aaAoCt4Zx-mJ8gbRB2jUJwAAAEc"]
[Thu Feb 26 19:01:31.917232 2026] [:error] [pid 44444:tid 44454] [client 193.37.32.37:25685] [client 193.37.32.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/customize/class-wp-customize-upload-control-cookie.php"] [unique_id "aaAoC22sMNmj-yekUk3C6gAAAgQ"]
[Thu Feb 26 19:01:33.220535 2026] [:error] [pid 3883:tid 3887] [client 193.37.32.31:29031] [client 193.37.32.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/ID3/simi.php"] [unique_id "aaAoDeA33x90V6yYHahyfAAAAUE"]
[Thu Feb 26 19:01:33.513285 2026] [:error] [pid 55051:tid 55072] [client 193.37.32.31:39675] [client 193.37.32.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/class-wp-taxonomy-sample.php"] [unique_id "aaAoDQmK1w2kZvh5eLF7UwAAAJI"]
[Thu Feb 26 19:01:36.168311 2026] [:error] [pid 54990:tid 54996] [client 193.37.32.29:20407] [client 193.37.32.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/block-bindings/"] [unique_id "aaAoEHtr2qmt_mBhH2wZmwAAAAM"]
[Thu Feb 26 19:01:44.717831 2026] [:error] [pid 3883:tid 3888] [client 193.37.32.16:26467] [client 193.37.32.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/ID3"] [unique_id "aaAoGOA33x90V6yYHahzMAAAAUI"]
[Thu Feb 26 19:02:03.031404 2026] [:error] [pid 55618:tid 55642] [client 193.37.32.24:54911] [client 193.37.32.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/alera/"] [unique_id "aaAoKx61Vrh12f_8oWTwJgAAARU"]
[Thu Feb 26 19:02:07.521794 2026] [autoindex:error] [pid 25311:tid 25335] [client 193.37.32.5:30723] AH01276: Cannot serve directory /home/dwelects/public_html/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Feb 26 19:06:28.605318 2026] [proxy_fcgi:error] [pid 44444:tid 44466] [client 20.48.148.227:3025] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 19:06:28.821447 2026] [proxy_fcgi:error] [pid 44444:tid 44463] [client 20.48.148.227:3025] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 19:06:29.031658 2026] [proxy_fcgi:error] [pid 44444:tid 44458] [client 20.48.148.227:3025] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 19:06:29.245440 2026] [proxy_fcgi:error] [pid 44444:tid 44464] [client 20.48.148.227:3025] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 19:06:29.457992 2026] [proxy_fcgi:error] [pid 44444:tid 44465] [client 20.48.148.227:3025] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 19:06:29.676476 2026] [proxy_fcgi:error] [pid 44444:tid 44453] [client 20.48.148.227:3025] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 19:06:29.897631 2026] [proxy_fcgi:error] [pid 44444:tid 44471] [client 20.48.148.227:3025] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 19:06:30.108033 2026] [proxy_fcgi:error] [pid 44444:tid 44454] [client 20.48.148.227:3025] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 19:06:30.322462 2026] [proxy_fcgi:error] [pid 44444:tid 44458] [client 20.48.148.227:3025] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 19:06:30.534710 2026] [proxy_fcgi:error] [pid 44444:tid 44472] [client 20.48.148.227:3025] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 19:06:30.739925 2026] [:error] [pid 44444:tid 44465] [client 20.48.148.227:3025] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x123.php"] [unique_id "aaApNm2sMNmj-yekUk3KxgAAAg8"]
[Thu Feb 26 19:06:31.162282 2026] [:error] [pid 44444:tid 44451] [client 20.48.148.227:2945] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x123.php"] [unique_id "aaApN22sMNmj-yekUk3KzgAAAgE"]
[Thu Feb 26 19:06:31.604156 2026] [:error] [pid 55618:tid 55623] [client 20.48.148.227:3057] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x123.php"] [unique_id "aaApNx61Vrh12f_8oWT0NgAAAQI"]
[Thu Feb 26 19:06:32.036527 2026] [:error] [pid 44444:tid 44471] [client 20.48.148.227:3018] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x123.php"] [unique_id "aaApOG2sMNmj-yekUk3K1QAAAhU"]
[Thu Feb 26 19:06:32.461901 2026] [:error] [pid 3883:tid 3898] [client 20.48.148.227:3023] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-act.php"] [unique_id "aaApOOA33x90V6yYHah_iQAAAUw"]
[Thu Feb 26 19:06:32.878116 2026] [:error] [pid 44444:tid 44465] [client 20.48.148.227:3022] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-act.php"] [unique_id "aaApOG2sMNmj-yekUk3K2wAAAg8"]
[Thu Feb 26 19:06:33.305058 2026] [:error] [pid 3883:tid 3894] [client 20.48.148.227:2956] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-act.php"] [unique_id "aaApOeA33x90V6yYHah_jwAAAUg"]
[Thu Feb 26 19:06:33.844588 2026] [:error] [pid 3883:tid 3895] [client 20.48.148.227:3044] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-act.php"] [unique_id "aaApOeA33x90V6yYHah_kwAAAUk"]
[Thu Feb 26 19:06:34.276673 2026] [:error] [pid 44444:tid 44472] [client 20.48.148.227:3059] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/moshou.php"] [unique_id "aaApOm2sMNmj-yekUk3K4gAAAhY"]
[Thu Feb 26 19:06:34.697719 2026] [:error] [pid 55051:tid 55067] [client 20.48.148.227:3014] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/moshou.php"] [unique_id "aaApOgmK1w2kZvh5eLGCiAAAAI0"]
[Thu Feb 26 19:06:35.135439 2026] [:error] [pid 44444:tid 44471] [client 20.48.148.227:3047] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/moshou.php"] [unique_id "aaApO22sMNmj-yekUk3K6gAAAhU"]
[Thu Feb 26 19:06:35.551639 2026] [:error] [pid 3883:tid 3908] [client 20.48.148.227:3046] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/moshou.php"] [unique_id "aaApO-A33x90V6yYHah_pQAAAVY"]
[Thu Feb 26 19:06:35.989034 2026] [:error] [pid 3883:tid 3899] [client 20.48.148.227:3042] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/seetox.php"] [unique_id "aaApO-A33x90V6yYHah_qgAAAU0"]
[Thu Feb 26 19:06:36.425964 2026] [:error] [pid 3883:tid 3891] [client 20.48.148.227:3071] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/seetox.php"] [unique_id "aaApPOA33x90V6yYHah_rAAAAUU"]
[Thu Feb 26 19:06:36.852942 2026] [:error] [pid 3883:tid 3893] [client 20.48.148.227:3055] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/seetox.php"] [unique_id "aaApPOA33x90V6yYHah_sAAAAUc"]
[Thu Feb 26 19:06:37.303143 2026] [:error] [pid 3883:tid 3909] [client 20.48.148.227:2952] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/seetox.php"] [unique_id "aaApPeA33x90V6yYHah_sgAAAVc"]
[Thu Feb 26 19:06:37.730226 2026] [:error] [pid 20419:tid 20439] [client 20.48.148.227:3054] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dom.php"] [unique_id "aaApPe3DVDvMfTYYUBU4NwAAAdE"]
[Thu Feb 26 19:06:38.188044 2026] [:error] [pid 3883:tid 3908] [client 20.48.148.227:3021] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dom.php"] [unique_id "aaApPuA33x90V6yYHah_ugAAAVY"]
[Thu Feb 26 19:06:38.627184 2026] [:error] [pid 55618:tid 55636] [client 20.48.148.227:3013] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dom.php"] [unique_id "aaApPh61Vrh12f_8oWT0SAAAAQ8"]
[Thu Feb 26 19:06:39.057265 2026] [:error] [pid 3883:tid 3897] [client 20.48.148.227:2967] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dom.php"] [unique_id "aaApP-A33x90V6yYHah_wwAAAUs"]
[Thu Feb 26 19:06:39.486988 2026] [:error] [pid 44444:tid 44474] [client 20.48.148.227:2896] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws60.php"] [unique_id "aaApP22sMNmj-yekUk3LBgAAAhg"]
[Thu Feb 26 19:06:39.934965 2026] [:error] [pid 44444:tid 44468] [client 20.48.148.227:3031] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws60.php"] [unique_id "aaApP22sMNmj-yekUk3LDAAAAhI"]
[Thu Feb 26 19:06:40.352732 2026] [:error] [pid 44444:tid 44450] [client 20.48.148.227:2946] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws60.php"] [unique_id "aaApQG2sMNmj-yekUk3LEQAAAgA"]
[Thu Feb 26 19:06:40.802233 2026] [:error] [pid 44444:tid 44461] [client 20.48.148.227:3065] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws60.php"] [unique_id "aaApQG2sMNmj-yekUk3LGAAAAgs"]
[Thu Feb 26 19:06:41.242730 2026] [:error] [pid 55618:tid 55641] [client 20.48.148.227:3028] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/samiri.php"] [unique_id "aaApQR61Vrh12f_8oWT0TwAAARQ"]
[Thu Feb 26 19:06:41.661295 2026] [:error] [pid 3883:tid 3907] [client 20.48.148.227:3033] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/samiri.php"] [unique_id "aaApQeA33x90V6yYHah_0wAAAVU"]
[Thu Feb 26 19:06:42.141366 2026] [:error] [pid 3883:tid 3904] [client 20.48.148.227:3045] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/samiri.php"] [unique_id "aaApQuA33x90V6yYHah_2AAAAVI"]
[Thu Feb 26 19:06:42.613292 2026] [:error] [pid 3883:tid 3900] [client 20.48.148.227:2948] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/samiri.php"] [unique_id "aaApQuA33x90V6yYHah_3QAAAU4"]
[Thu Feb 26 19:06:43.105098 2026] [:error] [pid 44444:tid 44466] [client 20.48.148.227:2968] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/plugins.php"] [unique_id "aaApQ22sMNmj-yekUk3LKQAAAhA"]
[Thu Feb 26 19:06:43.542350 2026] [:error] [pid 44444:tid 44471] [client 20.48.148.227:2950] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/plugins.php"] [unique_id "aaApQ22sMNmj-yekUk3LLAAAAhU"]
[Thu Feb 26 19:06:43.954661 2026] [:error] [pid 44444:tid 44455] [client 20.48.148.227:3069] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/plugins.php"] [unique_id "aaApQ22sMNmj-yekUk3LLwAAAgU"]
[Thu Feb 26 19:06:44.383814 2026] [:error] [pid 44444:tid 44474] [client 20.48.148.227:3068] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/plugins.php"] [unique_id "aaApRG2sMNmj-yekUk3LMQAAAhg"]
[Thu Feb 26 19:06:44.812197 2026] [:error] [pid 20419:tid 20436] [client 20.48.148.227:2951] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xoot.php"] [unique_id "aaApRO3DVDvMfTYYUBU4XgAAAc4"]
[Thu Feb 26 19:06:45.246441 2026] [:error] [pid 3883:tid 3908] [client 20.48.148.227:3051] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xoot.php"] [unique_id "aaApReA33x90V6yYHah_7gAAAVY"]
[Thu Feb 26 19:06:45.702876 2026] [:error] [pid 25311:tid 25323] [client 20.48.148.227:3058] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xoot.php"] [unique_id "aaApRdfdM__yZAgJFSusnAAAAYk"]
[Thu Feb 26 19:06:46.128532 2026] [:error] [pid 25311:tid 25327] [client 20.48.148.227:2959] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xoot.php"] [unique_id "aaApRtfdM__yZAgJFSusngAAAY0"]
[Thu Feb 26 19:06:46.575316 2026] [:error] [pid 55051:tid 55073] [client 20.48.148.227:3062] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/X57.php"] [unique_id "aaApRgmK1w2kZvh5eLGCswAAAJM"]
[Thu Feb 26 19:06:47.009033 2026] [:error] [pid 20419:tid 20438] [client 20.48.148.227:3008] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/X57.php"] [unique_id "aaApR-3DVDvMfTYYUBU4ZgAAAdA"]
[Thu Feb 26 19:06:47.448753 2026] [:error] [pid 55051:tid 55070] [client 20.48.148.227:3010] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/X57.php"] [unique_id "aaApRwmK1w2kZvh5eLGCugAAAJA"]
[Thu Feb 26 19:06:48.072410 2026] [:error] [pid 3883:tid 3888] [client 20.48.148.227:2957] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/X57.php"] [unique_id "aaApSOA33x90V6yYHah__gAAAUI"]
[Thu Feb 26 19:06:48.553745 2026] [:error] [pid 3883:tid 3889] [client 20.48.148.227:3063] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vx.php"] [unique_id "aaApSOA33x90V6yYHaiAAwAAAUM"]
[Thu Feb 26 19:06:49.087692 2026] [:error] [pid 3883:tid 3910] [client 20.48.148.227:3000] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vx.php"] [unique_id "aaApSeA33x90V6yYHaiACQAAAVg"]
[Thu Feb 26 19:06:49.557172 2026] [:error] [pid 3883:tid 3901] [client 20.48.148.227:3027] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vx.php"] [unique_id "aaApSeA33x90V6yYHaiADwAAAU8"]
[Thu Feb 26 19:06:50.208138 2026] [:error] [pid 3883:tid 3888] [client 20.48.148.227:3016] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vx.php"] [unique_id "aaApSuA33x90V6yYHaiAGQAAAUI"]
[Thu Feb 26 19:06:50.684015 2026] [:error] [pid 55051:tid 55071] [client 20.48.148.227:2958] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file59.php"] [unique_id "aaApSgmK1w2kZvh5eLGC0QAAAJE"]
[Thu Feb 26 19:06:51.460513 2026] [:error] [pid 20419:tid 20446] [client 20.48.148.227:2980] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file59.php"] [unique_id "aaApS-3DVDvMfTYYUBU4dQAAAdg"]
[Thu Feb 26 19:06:52.043342 2026] [:error] [pid 55618:tid 55623] [client 20.48.148.227:2910] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file59.php"] [unique_id "aaApTB61Vrh12f_8oWT0WwAAAQI"]
[Thu Feb 26 19:06:52.510896 2026] [:error] [pid 55051:tid 55073] [client 20.48.148.227:3029] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file59.php"] [unique_id "aaApTAmK1w2kZvh5eLGC3AAAAJM"]
[Thu Feb 26 19:06:53.092241 2026] [:error] [pid 3883:tid 3887] [client 20.48.148.227:2955] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaApTeA33x90V6yYHaiAMgAAAUE"]
[Thu Feb 26 19:06:53.687071 2026] [:error] [pid 3883:tid 3893] [client 20.48.148.227:2960] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaApTeA33x90V6yYHaiAOAAAAUc"]
[Thu Feb 26 19:06:54.835308 2026] [:error] [pid 3883:tid 3910] [client 20.48.148.227:2953] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaApTuA33x90V6yYHaiAQwAAAVg"]
[Thu Feb 26 19:06:55.639886 2026] [:error] [pid 3883:tid 3902] [client 20.48.148.227:2992] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaApT-A33x90V6yYHaiASgAAAVA"]
[Thu Feb 26 19:06:56.479432 2026] [:error] [pid 3883:tid 3892] [client 20.48.148.227:3037] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/shas.php"] [unique_id "aaApUOA33x90V6yYHaiAWAAAAUY"]
[Thu Feb 26 19:06:56.948037 2026] [:error] [pid 3883:tid 3904] [client 20.48.148.227:2979] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/shas.php"] [unique_id "aaApUOA33x90V6yYHaiAXwAAAVI"]
[Thu Feb 26 19:06:57.396102 2026] [:error] [pid 3883:tid 3890] [client 20.48.148.227:3061] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/shas.php"] [unique_id "aaApUeA33x90V6yYHaiAZQAAAUQ"]
[Thu Feb 26 19:06:57.980749 2026] [:error] [pid 3883:tid 3891] [client 20.48.148.227:2944] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/shas.php"] [unique_id "aaApUeA33x90V6yYHaiAdgAAAUU"]
[Thu Feb 26 19:06:58.422024 2026] [:error] [pid 54991:tid 55043] [client 20.48.148.227:3030] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xa.php"] [unique_id "aaApUt4Zx-mJ8gbRB2jXmgAAAFc"]
[Thu Feb 26 19:06:58.843973 2026] [:error] [pid 3883:tid 3896] [client 20.48.148.227:2911] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xa.php"] [unique_id "aaApUuA33x90V6yYHaiAjQAAAUo"]
[Thu Feb 26 19:06:59.259550 2026] [:error] [pid 55618:tid 55631] [client 20.48.148.227:2961] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xa.php"] [unique_id "aaApUx61Vrh12f_8oWT0ZgAAAQo"]
[Thu Feb 26 19:06:59.692901 2026] [:error] [pid 55618:tid 55630] [client 20.48.148.227:2880] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xa.php"] [unique_id "aaApUx61Vrh12f_8oWT0agAAAQk"]
[Thu Feb 26 19:07:00.133506 2026] [:error] [pid 20419:tid 20427] [client 20.48.148.227:2986] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xda.php"] [unique_id "aaApVO3DVDvMfTYYUBU4iQAAAcU"]
[Thu Feb 26 19:07:00.570159 2026] [:error] [pid 44444:tid 44460] [client 20.48.148.227:3026] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xda.php"] [unique_id "aaApVG2sMNmj-yekUk3LagAAAgo"]
[Thu Feb 26 19:07:01.032001 2026] [:error] [pid 55618:tid 55644] [client 20.48.148.227:2907] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xda.php"] [unique_id "aaApVR61Vrh12f_8oWT0cQAAARc"]
[Thu Feb 26 19:07:01.469719 2026] [:error] [pid 54990:tid 55017] [client 20.48.148.227:2976] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xda.php"] [unique_id "aaApVXtr2qmt_mBhH2wb2AAAABg"]
[Thu Feb 26 19:07:01.892649 2026] [:error] [pid 55618:tid 55635] [client 20.48.148.227:3001] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/er.php"] [unique_id "aaApVR61Vrh12f_8oWT0dQAAAQ4"]
[Thu Feb 26 19:07:02.316232 2026] [:error] [pid 44444:tid 44454] [client 20.48.148.227:2990] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/er.php"] [unique_id "aaApVm2sMNmj-yekUk3LfQAAAgQ"]
[Thu Feb 26 19:07:02.828150 2026] [:error] [pid 55051:tid 55073] [client 20.48.148.227:3012] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/er.php"] [unique_id "aaApVgmK1w2kZvh5eLGDBQAAAJM"]
[Thu Feb 26 19:07:03.288278 2026] [:error] [pid 20419:tid 20444] [client 20.48.148.227:3052] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/er.php"] [unique_id "aaApV-3DVDvMfTYYUBU4kwAAAdY"]
[Thu Feb 26 19:07:03.753706 2026] [:error] [pid 55051:tid 55060] [client 20.48.148.227:3039] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fault.php"] [unique_id "aaApVwmK1w2kZvh5eLGDCQAAAIY"]
[Thu Feb 26 19:07:04.179547 2026] [:error] [pid 20419:tid 20441] [client 20.48.148.227:2964] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fault.php"] [unique_id "aaApWO3DVDvMfTYYUBU4lAAAAdM"]
[Thu Feb 26 19:07:04.614438 2026] [:error] [pid 25311:tid 25336] [client 20.48.148.227:2971] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fault.php"] [unique_id "aaApWNfdM__yZAgJFSusswAAAZY"]
[Thu Feb 26 19:07:05.130036 2026] [:error] [pid 25311:tid 25315] [client 20.48.148.227:2888] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fault.php"] [unique_id "aaApWdfdM__yZAgJFSustQAAAYE"]
[Thu Feb 26 19:07:05.545341 2026] [:error] [pid 55122:tid 55130] [client 20.48.148.227:2997] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/motu.php"] [unique_id "aaApWYLiR0OfjFxvcN8eWQAAAMY"]
[Thu Feb 26 19:07:05.969655 2026] [:error] [pid 20419:tid 20440] [client 20.48.148.227:2962] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/motu.php"] [unique_id "aaApWe3DVDvMfTYYUBU4mAAAAdI"]
[Thu Feb 26 19:07:06.402029 2026] [:error] [pid 25311:tid 25337] [client 20.48.148.227:3003] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/motu.php"] [unique_id "aaApWtfdM__yZAgJFSustwAAAZc"]
[Thu Feb 26 19:07:06.907209 2026] [:error] [pid 55618:tid 55627] [client 20.48.148.227:2970] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/motu.php"] [unique_id "aaApWh61Vrh12f_8oWT0hwAAAQY"]
[Thu Feb 26 19:07:07.352080 2026] [:error] [pid 25311:tid 25330] [client 20.48.148.227:2925] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/66.php"] [unique_id "aaApW9fdM__yZAgJFSusuwAAAZA"]
[Thu Feb 26 19:07:07.806551 2026] [:error] [pid 55122:tid 55127] [client 20.48.148.227:2995] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/66.php"] [unique_id "aaApW4LiR0OfjFxvcN8eYgAAAMM"]
[Thu Feb 26 19:07:08.255020 2026] [:error] [pid 55051:tid 55069] [client 20.48.148.227:2924] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/66.php"] [unique_id "aaApXAmK1w2kZvh5eLGDEwAAAI8"]
[Thu Feb 26 19:07:08.717297 2026] [:error] [pid 3883:tid 3903] [client 20.48.148.227:2823] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/66.php"] [unique_id "aaApXOA33x90V6yYHaiAzgAAAVE"]
[Thu Feb 26 19:07:09.155865 2026] [:error] [pid 55122:tid 55146] [client 20.48.148.227:3026] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/leuk.php"] [unique_id "aaApXYLiR0OfjFxvcN8eZgAAANY"]
[Thu Feb 26 19:07:09.600524 2026] [:error] [pid 44444:tid 44467] [client 20.48.148.227:3050] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/leuk.php"] [unique_id "aaApXW2sMNmj-yekUk3LmwAAAhE"]
[Thu Feb 26 19:07:10.236781 2026] [:error] [pid 25311:tid 25331] [client 20.48.148.227:2889] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/leuk.php"] [unique_id "aaApXtfdM__yZAgJFSusxgAAAZE"]
[Thu Feb 26 19:07:10.726614 2026] [:error] [pid 25311:tid 25330] [client 20.48.148.227:3043] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/leuk.php"] [unique_id "aaApXtfdM__yZAgJFSuszgAAAZA"]
[Thu Feb 26 19:07:11.170292 2026] [:error] [pid 25311:tid 25321] [client 20.48.148.227:2978] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xqq.php"] [unique_id "aaApX9fdM__yZAgJFSus0QAAAYc"]
[Thu Feb 26 19:07:11.621555 2026] [:error] [pid 55618:tid 55633] [client 20.48.148.227:2969] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xqq.php"] [unique_id "aaApXx61Vrh12f_8oWT0kAAAAQw"]
[Thu Feb 26 19:07:12.047706 2026] [:error] [pid 25311:tid 25320] [client 20.48.148.227:2773] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xqq.php"] [unique_id "aaApYNfdM__yZAgJFSus2gAAAYY"]
[Thu Feb 26 19:07:12.466608 2026] [:error] [pid 25311:tid 25330] [client 20.48.148.227:3006] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xqq.php"] [unique_id "aaApYNfdM__yZAgJFSus3gAAAZA"]
[Thu Feb 26 19:07:12.938546 2026] [:error] [pid 25311:tid 25323] [client 20.48.148.227:2905] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kolda.php"] [unique_id "aaApYNfdM__yZAgJFSus3wAAAYk"]
[Thu Feb 26 19:07:13.384178 2026] [:error] [pid 25311:tid 25330] [client 20.48.148.227:3056] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kolda.php"] [unique_id "aaApYdfdM__yZAgJFSus6QAAAZA"]
[Thu Feb 26 19:07:13.816617 2026] [:error] [pid 54991:tid 55031] [client 20.48.148.227:2904] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kolda.php"] [unique_id "aaApYd4Zx-mJ8gbRB2jXsAAAAEs"]
[Thu Feb 26 19:07:14.243154 2026] [:error] [pid 44444:tid 44461] [client 20.48.148.227:2998] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kolda.php"] [unique_id "aaApYm2sMNmj-yekUk3LtAAAAgs"]
[Thu Feb 26 19:07:14.661291 2026] [:error] [pid 3883:tid 3889] [client 20.48.148.227:2886] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nw.php"] [unique_id "aaApYuA33x90V6yYHaiA9gAAAUM"]
[Thu Feb 26 19:07:15.092684 2026] [:error] [pid 3883:tid 3910] [client 20.48.148.227:2887] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nw.php"] [unique_id "aaApY-A33x90V6yYHaiA-QAAAVg"]
[Thu Feb 26 19:07:15.507419 2026] [:error] [pid 25311:tid 25329] [client 20.48.148.227:3067] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nw.php"] [unique_id "aaApY9fdM__yZAgJFSus9gAAAY8"]
[Thu Feb 26 19:07:15.925801 2026] [:error] [pid 25311:tid 25325] [client 20.48.148.227:3053] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nw.php"] [unique_id "aaApY9fdM__yZAgJFSus-AAAAYs"]
[Thu Feb 26 19:07:16.354646 2026] [:error] [pid 44444:tid 44472] [client 20.48.148.227:3015] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/god.php"] [unique_id "aaApZG2sMNmj-yekUk3LwwAAAhY"]
[Thu Feb 26 19:07:16.791441 2026] [:error] [pid 20419:tid 20439] [client 20.48.148.227:2963] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/god.php"] [unique_id "aaApZO3DVDvMfTYYUBU4owAAAdE"]
[Thu Feb 26 19:07:17.242609 2026] [:error] [pid 44444:tid 44469] [client 20.48.148.227:3053] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/god.php"] [unique_id "aaApZW2sMNmj-yekUk3LzQAAAhM"]
[Thu Feb 26 19:07:17.667192 2026] [:error] [pid 25311:tid 25316] [client 20.48.148.227:2999] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/god.php"] [unique_id "aaApZdfdM__yZAgJFSus_QAAAYI"]
[Thu Feb 26 19:07:18.102215 2026] [:error] [pid 20419:tid 20427] [client 20.48.148.227:2973] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/666.php"] [unique_id "aaApZu3DVDvMfTYYUBU4pQAAAcU"]
[Thu Feb 26 19:07:18.530518 2026] [:error] [pid 20419:tid 20446] [client 20.48.148.227:2987] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/666.php"] [unique_id "aaApZu3DVDvMfTYYUBU4pgAAAdg"]
[Thu Feb 26 19:07:18.956603 2026] [:error] [pid 20419:tid 20425] [client 20.48.148.227:2901] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/666.php"] [unique_id "aaApZu3DVDvMfTYYUBU4qQAAAcM"]
[Thu Feb 26 19:07:19.386922 2026] [:error] [pid 20419:tid 20434] [client 20.48.148.227:2954] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/666.php"] [unique_id "aaApZ-3DVDvMfTYYUBU4rQAAAcw"]
[Thu Feb 26 19:07:19.805219 2026] [:error] [pid 20419:tid 20432] [client 20.48.148.227:3036] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kj.php"] [unique_id "aaApZ-3DVDvMfTYYUBU4sgAAAco"]
[Thu Feb 26 19:07:20.272542 2026] [:error] [pid 55618:tid 55626] [client 20.48.148.227:2972] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kj.php"] [unique_id "aaApaB61Vrh12f_8oWT0mAAAAQU"]
[Thu Feb 26 19:07:20.694119 2026] [:error] [pid 20419:tid 20438] [client 20.48.148.227:2906] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kj.php"] [unique_id "aaApaO3DVDvMfTYYUBU4wAAAAdA"]
[Thu Feb 26 19:07:21.116840 2026] [:error] [pid 44444:tid 44467] [client 20.48.148.227:2947] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kj.php"] [unique_id "aaApaW2sMNmj-yekUk3L4AAAAhE"]
[Thu Feb 26 19:07:21.563788 2026] [:error] [pid 44444:tid 44474] [client 20.48.148.227:3064] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/un.php"] [unique_id "aaApaW2sMNmj-yekUk3L5gAAAhg"]
[Thu Feb 26 19:07:21.991537 2026] [:error] [pid 3883:tid 3902] [client 20.48.148.227:3002] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/un.php"] [unique_id "aaApaeA33x90V6yYHaiBGQAAAVA"]
[Thu Feb 26 19:07:22.477500 2026] [:error] [pid 3883:tid 3886] [client 20.48.148.227:2894] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/un.php"] [unique_id "aaApauA33x90V6yYHaiBHAAAAUA"]
[Thu Feb 26 19:07:22.917665 2026] [:error] [pid 55051:tid 55058] [client 20.48.148.227:2914] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/un.php"] [unique_id "aaApagmK1w2kZvh5eLGDLgAAAIQ"]
[Thu Feb 26 19:07:23.363704 2026] [:error] [pid 55051:tid 55070] [client 20.48.148.227:2983] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fs.php"] [unique_id "aaApawmK1w2kZvh5eLGDMAAAAJA"]
[Thu Feb 26 19:07:23.772077 2026] [:error] [pid 20419:tid 20426] [client 20.48.148.227:2994] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fs.php"] [unique_id "aaApa-3DVDvMfTYYUBU41QAAAcQ"]
[Thu Feb 26 19:07:24.190427 2026] [:error] [pid 3883:tid 3903] [client 20.48.148.227:2965] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fs.php"] [unique_id "aaApbOA33x90V6yYHaiBIAAAAVE"]
[Thu Feb 26 19:07:24.631359 2026] [:error] [pid 3883:tid 3889] [client 20.48.148.227:2923] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fs.php"] [unique_id "aaApbOA33x90V6yYHaiBJAAAAUM"]
[Thu Feb 26 19:07:25.051014 2026] [:error] [pid 3883:tid 3899] [client 20.48.148.227:3032] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ms.php"] [unique_id "aaApbeA33x90V6yYHaiBKgAAAU0"]
[Thu Feb 26 19:07:25.495454 2026] [:error] [pid 55051:tid 55062] [client 20.48.148.227:2932] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ms.php"] [unique_id "aaApbQmK1w2kZvh5eLGDOwAAAIg"]
[Thu Feb 26 19:07:25.923996 2026] [:error] [pid 25311:tid 25319] [client 20.48.148.227:2917] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ms.php"] [unique_id "aaApbdfdM__yZAgJFSutEwAAAYU"]
[Thu Feb 26 19:07:26.337808 2026] [:error] [pid 55051:tid 55073] [client 20.48.148.227:2900] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ms.php"] [unique_id "aaApbgmK1w2kZvh5eLGDPQAAAJM"]
[Thu Feb 26 19:07:26.759826 2026] [:error] [pid 20419:tid 20423] [client 20.48.148.227:2989] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/login8.php"] [unique_id "aaApbu3DVDvMfTYYUBU46QAAAcE"]
[Thu Feb 26 19:07:27.190402 2026] [:error] [pid 55051:tid 55077] [client 20.48.148.227:3005] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/login8.php"] [unique_id "aaApbwmK1w2kZvh5eLGDQQAAAJc"]
[Thu Feb 26 19:07:27.658495 2026] [:error] [pid 20419:tid 20434] [client 20.48.148.227:2891] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/login8.php"] [unique_id "aaApb-3DVDvMfTYYUBU47AAAAcw"]
[Thu Feb 26 19:07:28.099735 2026] [:error] [pid 3883:tid 3908] [client 20.48.148.227:3024] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/login8.php"] [unique_id "aaApcOA33x90V6yYHaiBTgAAAVY"]
[Thu Feb 26 19:07:28.518278 2026] [:error] [pid 55051:tid 55059] [client 20.48.148.227:2898] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nnyvn.php"] [unique_id "aaApcAmK1w2kZvh5eLGDTwAAAIU"]
[Thu Feb 26 19:07:28.965355 2026] [:error] [pid 44444:tid 44456] [client 20.48.148.227:3048] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nnyvn.php"] [unique_id "aaApcG2sMNmj-yekUk3MCwAAAgY"]
[Thu Feb 26 19:07:29.437247 2026] [:error] [pid 3883:tid 3887] [client 20.48.148.227:2930] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nnyvn.php"] [unique_id "aaApceA33x90V6yYHaiBfwAAAUE"]
[Thu Feb 26 19:07:29.928649 2026] [:error] [pid 3883:tid 3889] [client 20.48.148.227:2850] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nnyvn.php"] [unique_id "aaApceA33x90V6yYHaiBhQAAAUM"]
[Thu Feb 26 19:07:30.420952 2026] [proxy_fcgi:error] [pid 55051:tid 55058] [client 20.48.148.227:2915] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 19:07:31.962471 2026] [proxy_fcgi:error] [pid 55051:tid 55074] [client 20.48.148.227:2915] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 19:07:32.177368 2026] [proxy_fcgi:error] [pid 55051:tid 55060] [client 20.48.148.227:2915] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 19:07:32.394877 2026] [proxy_fcgi:error] [pid 55051:tid 55071] [client 20.48.148.227:2915] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 19:07:32.614849 2026] [proxy_fcgi:error] [pid 55051:tid 55063] [client 20.48.148.227:2915] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 19:07:32.832576 2026] [proxy_fcgi:error] [pid 55051:tid 55061] [client 20.48.148.227:2915] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 19:07:33.054447 2026] [proxy_fcgi:error] [pid 55051:tid 55070] [client 20.48.148.227:2915] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 19:07:33.270246 2026] [proxy_fcgi:error] [pid 55051:tid 55055] [client 20.48.148.227:2915] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 19:07:33.484531 2026] [proxy_fcgi:error] [pid 55051:tid 55069] [client 20.48.148.227:2915] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 19:07:33.703197 2026] [proxy_fcgi:error] [pid 55051:tid 55075] [client 20.48.148.227:2915] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 19:07:33.922713 2026] [proxy_fcgi:error] [pid 55051:tid 55059] [client 20.48.148.227:2915] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 19:07:34.135111 2026] [:error] [pid 55051:tid 55058] [client 20.48.148.227:2915] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/06.php"] [unique_id "aaApdgmK1w2kZvh5eLGDeQAAAIQ"]
[Thu Feb 26 19:07:34.577699 2026] [:error] [pid 55122:tid 55136] [client 20.48.148.227:3060] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/06.php"] [unique_id "aaApdoLiR0OfjFxvcN8efAAAAMw"]
[Thu Feb 26 19:07:35.023859 2026] [:error] [pid 20419:tid 20442] [client 20.48.148.227:2975] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/06.php"] [unique_id "aaApd-3DVDvMfTYYUBU5AAAAAdQ"]
[Thu Feb 26 19:07:35.480746 2026] [:error] [pid 25311:tid 25338] [client 20.48.148.227:3011] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/06.php"] [unique_id "aaApd9fdM__yZAgJFSutTAAAAZg"]
[Thu Feb 26 19:07:35.958545 2026] [:error] [pid 25311:tid 25320] [client 20.48.148.227:2996] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp5.php"] [unique_id "aaApd9fdM__yZAgJFSutTgAAAYY"]
[Thu Feb 26 19:07:36.395931 2026] [:error] [pid 25311:tid 25322] [client 20.48.148.227:2882] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp5.php"] [unique_id "aaApeNfdM__yZAgJFSutUAAAAYg"]
[Thu Feb 26 19:07:36.898976 2026] [:error] [pid 55051:tid 55072] [client 20.48.148.227:2931] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp5.php"] [unique_id "aaApeAmK1w2kZvh5eLGDfgAAAJI"]
[Thu Feb 26 19:07:37.377412 2026] [:error] [pid 3883:tid 3896] [client 20.48.148.227:2991] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp5.php"] [unique_id "aaApeeA33x90V6yYHaiBugAAAUo"]
[Thu Feb 26 19:07:37.838516 2026] [:error] [pid 55051:tid 55073] [client 20.48.148.227:3038] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fot.php"] [unique_id "aaApeQmK1w2kZvh5eLGDgAAAAJM"]
[Thu Feb 26 19:07:38.360241 2026] [:error] [pid 3883:tid 3909] [client 20.48.148.227:2909] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fot.php"] [unique_id "aaApeuA33x90V6yYHaiBwQAAAVc"]
[Thu Feb 26 19:07:38.794087 2026] [:error] [pid 3883:tid 3895] [client 20.48.148.227:2857] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fot.php"] [unique_id "aaApeuA33x90V6yYHaiBwwAAAUk"]
[Thu Feb 26 19:07:39.227303 2026] [:error] [pid 3883:tid 3890] [client 20.48.148.227:2935] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fot.php"] [unique_id "aaApe-A33x90V6yYHaiBxgAAAUQ"]
[Thu Feb 26 19:07:39.656078 2026] [:error] [pid 3883:tid 3893] [client 20.48.148.227:2893] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ff1.php"] [unique_id "aaApe-A33x90V6yYHaiBxwAAAUc"]
[Thu Feb 26 19:07:40.179960 2026] [:error] [pid 25311:tid 25337] [client 20.48.148.227:2993] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ff1.php"] [unique_id "aaApfNfdM__yZAgJFSutWwAAAZc"]
[Thu Feb 26 19:07:40.618476 2026] [:error] [pid 44444:tid 44463] [client 20.48.148.227:2899] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ff1.php"] [unique_id "aaApfG2sMNmj-yekUk3MbAAAAg0"]
[Thu Feb 26 19:07:41.094041 2026] [:error] [pid 3883:tid 3905] [client 20.48.148.227:2903] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ff1.php"] [unique_id "aaApfeA33x90V6yYHaiBzwAAAVM"]
[Thu Feb 26 19:07:41.525710 2026] [:error] [pid 3883:tid 3903] [client 20.48.148.227:2982] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/forbidals.php"] [unique_id "aaApfeA33x90V6yYHaiB0AAAAVE"]
[Thu Feb 26 19:07:41.961196 2026] [:error] [pid 3883:tid 3890] [client 20.48.148.227:2977] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/forbidals.php"] [unique_id "aaApfeA33x90V6yYHaiB1AAAAUQ"]
[Thu Feb 26 19:07:42.382929 2026] [:error] [pid 3883:tid 3896] [client 20.48.148.227:2934] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/forbidals.php"] [unique_id "aaApfuA33x90V6yYHaiB3AAAAUo"]
[Thu Feb 26 19:07:42.818263 2026] [:error] [pid 44444:tid 44462] [client 20.48.148.227:2826] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/forbidals.php"] [unique_id "aaApfm2sMNmj-yekUk3MhQAAAgw"]
[Thu Feb 26 19:07:43.238283 2026] [:error] [pid 44444:tid 44474] [client 20.48.148.227:2840] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/erty.php"] [unique_id "aaApf22sMNmj-yekUk3MiAAAAhg"]
[Thu Feb 26 19:07:43.651448 2026] [:error] [pid 55051:tid 55075] [client 20.48.148.227:2835] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/erty.php"] [unique_id "aaApfwmK1w2kZvh5eLGDiQAAAJU"]
[Thu Feb 26 19:07:44.094118 2026] [:error] [pid 25311:tid 25326] [client 20.48.148.227:2877] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/erty.php"] [unique_id "aaApgNfdM__yZAgJFSutZAAAAYw"]
[Thu Feb 26 19:07:44.530920 2026] [:error] [pid 25311:tid 25337] [client 20.48.148.227:2966] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/erty.php"] [unique_id "aaApgNfdM__yZAgJFSutZgAAAZc"]
[Thu Feb 26 19:07:44.959743 2026] [:error] [pid 44444:tid 44454] [client 20.48.148.227:2872] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dev1s.php"] [unique_id "aaApgG2sMNmj-yekUk3MnwAAAgQ"]
[Thu Feb 26 19:07:45.400859 2026] [:error] [pid 25311:tid 25330] [client 20.48.148.227:2821] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dev1s.php"] [unique_id "aaApgdfdM__yZAgJFSutaQAAAZA"]
[Thu Feb 26 19:07:45.887612 2026] [:error] [pid 44444:tid 44464] [client 20.48.148.227:2816] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dev1s.php"] [unique_id "aaApgW2sMNmj-yekUk3MrgAAAg4"]
[Thu Feb 26 19:07:46.331929 2026] [:error] [pid 3883:tid 3896] [client 20.48.148.227:2985] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dev1s.php"] [unique_id "aaApguA33x90V6yYHaiB6gAAAUo"]
[Thu Feb 26 19:07:46.786574 2026] [:error] [pid 20419:tid 20425] [client 20.48.148.227:2984] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ffd.php"] [unique_id "aaApgu3DVDvMfTYYUBU5IgAAAcM"]
[Thu Feb 26 19:07:47.213030 2026] [:error] [pid 44444:tid 44472] [client 20.48.148.227:2919] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ffd.php"] [unique_id "aaApg22sMNmj-yekUk3MwgAAAhY"]
[Thu Feb 26 19:07:47.639499 2026] [:error] [pid 25311:tid 25332] [client 20.48.148.227:2790] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ffd.php"] [unique_id "aaApg9fdM__yZAgJFSutcgAAAZI"]
[Thu Feb 26 19:07:48.055128 2026] [:error] [pid 25311:tid 25337] [client 20.48.148.227:2832] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ffd.php"] [unique_id "aaAphNfdM__yZAgJFSutcwAAAZc"]
[Thu Feb 26 22:01:24.201474 2026] [:error] [pid 44444:tid 44451] [client 157.245.196.99:58240] [client 157.245.196.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/profile-builder/readme.txt"] [unique_id "aaBSNG2sMNmj-yekUk09TgAAAgE"]
[Fri Feb 27 00:23:27.863849 2026] [:error] [pid 18831:tid 18928] [client 20.104.19.195:31629] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaBzf_5KHTHUIuWRG2aydQAAAE8"]
[Fri Feb 27 00:23:28.637303 2026] [:error] [pid 20059:tid 20123] [client 20.104.19.195:31740] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaBzgJZBS5wIa_NsqsjLawAAAdU"]
[Fri Feb 27 00:23:29.183548 2026] [:error] [pid 19020:tid 19035] [client 20.104.19.195:31713] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaBzgbN3kp7wL6QzPnX6SwAAAU0"]
[Fri Feb 27 00:23:29.845867 2026] [:error] [pid 18818:tid 18900] [client 20.104.19.195:31728] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaBzgRhPgqk2SeS_W82uSQAAABA"]
[Fri Feb 27 02:35:02.694891 2026] [proxy_fcgi:error] [pid 20059:tid 20111] [client 20.43.27.35:57429] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 02:35:03.070046 2026] [proxy_fcgi:error] [pid 20059:tid 20107] [client 20.43.27.35:57429] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 02:35:03.576059 2026] [proxy_fcgi:error] [pid 20059:tid 20125] [client 20.43.27.35:57429] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 02:35:03.794654 2026] [proxy_fcgi:error] [pid 20059:tid 20124] [client 20.43.27.35:57429] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 02:35:04.279256 2026] [proxy_fcgi:error] [pid 20059:tid 20120] [client 20.43.27.35:57429] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 02:35:04.551885 2026] [proxy_fcgi:error] [pid 20059:tid 20104] [client 20.43.27.35:57429] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 02:35:04.827200 2026] [proxy_fcgi:error] [pid 20059:tid 20122] [client 20.43.27.35:57429] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 02:35:05.282126 2026] [:error] [pid 20059:tid 20118] [client 20.43.27.35:57429] [client 20.43.27.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaCSWZZBS5wIa_Nsqsg9hgAAAdA"]
[Fri Feb 27 02:35:06.229924 2026] [:error] [pid 19020:tid 19027] [client 20.43.27.35:57464] [client 20.43.27.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaCSWrN3kp7wL6QzPnVE1wAAAUU"]
[Fri Feb 27 02:35:07.213690 2026] [:error] [pid 18831:tid 18934] [client 20.43.27.35:14301] [client 20.43.27.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaCSW_5KHTHUIuWRG2bbkAAAAFU"]
[Fri Feb 27 02:35:08.258208 2026] [:error] [pid 20059:tid 20110] [client 20.43.27.35:14028] [client 20.43.27.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaCSXJZBS5wIa_Nsqsg9jQAAAcg"]
[Fri Feb 27 03:05:50.659070 2026] [proxy_fcgi:error] [pid 19020:tid 19024] [client 4.205.37.160:10217] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 03:05:50.885370 2026] [proxy_fcgi:error] [pid 19020:tid 19044] [client 4.205.37.160:10217] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 03:32:45.184551 2026] [proxy_fcgi:error] [pid 20059:tid 20105] [client 20.220.165.49:18405] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:30:29.977687 2026] [proxy_fcgi:error] [pid 21329:tid 21395] [client 20.43.27.35:61794] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:30:30.201468 2026] [proxy_fcgi:error] [pid 21329:tid 21404] [client 20.43.27.35:61794] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:30:30.434450 2026] [proxy_fcgi:error] [pid 21329:tid 21400] [client 20.43.27.35:61794] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:30:30.676536 2026] [proxy_fcgi:error] [pid 21329:tid 21392] [client 20.43.27.35:61794] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:30:30.906477 2026] [proxy_fcgi:error] [pid 21329:tid 21395] [client 20.43.27.35:61794] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:30:31.132452 2026] [proxy_fcgi:error] [pid 21329:tid 21404] [client 20.43.27.35:61794] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:30:31.605473 2026] [proxy_fcgi:error] [pid 21329:tid 21401] [client 20.43.27.35:61794] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:30:31.880466 2026] [proxy_fcgi:error] [pid 21329:tid 21395] [client 20.43.27.35:61794] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:30:32.125592 2026] [proxy_fcgi:error] [pid 21329:tid 21391] [client 20.43.27.35:61794] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:30:32.348482 2026] [proxy_fcgi:error] [pid 21329:tid 21399] [client 20.43.27.35:61794] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:30:32.560178 2026] [:error] [pid 21329:tid 21404] [client 20.43.27.35:61794] [client 20.43.27.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/info.php"] [unique_id "aaCtaJvQWnde-MjcQ1FNfgAAAVU"]
[Fri Feb 27 04:30:33.438058 2026] [:error] [pid 5365:tid 5367] [client 20.43.27.35:14149] [client 20.43.27.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/info.php"] [unique_id "aaCtaZYAa8J3tYxdG3z9CQAAAQA"]
[Fri Feb 27 04:30:34.355011 2026] [:error] [pid 3973:tid 3995] [client 20.43.27.35:55394] [client 20.43.27.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/info.php"] [unique_id "aaCtaoJZsftwqmUaaLP0YgAAAAw"]
[Fri Feb 27 04:30:35.266924 2026] [:error] [pid 3973:tid 3998] [client 20.43.27.35:52511] [client 20.43.27.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/info.php"] [unique_id "aaCta4JZsftwqmUaaLP0cQAAAA8"]
[Fri Feb 27 04:55:30.476048 2026] [proxy_fcgi:error] [pid 42435:tid 42463] [client 4.205.37.160:46049] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:55:30.690334 2026] [proxy_fcgi:error] [pid 42435:tid 42443] [client 4.205.37.160:46049] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 06:10:19.378051 2026] [proxy_fcgi:error] [pid 42563:tid 42570] [client 4.205.37.160:18382] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 06:10:19.606927 2026] [proxy_fcgi:error] [pid 42563:tid 42580] [client 4.205.37.160:18382] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 06:53:40.347166 2026] [:error] [pid 42658:tid 42672] [client 20.43.27.35:63938] [client 20.43.27.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wk/index.php"] [unique_id "aaDO9IzcoYl3nRbu1jaPvQAAAgw"]
[Fri Feb 27 06:53:41.171849 2026] [:error] [pid 42658:tid 42675] [client 20.43.27.35:60480] [client 20.43.27.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wk/index.php"] [unique_id "aaDO9YzcoYl3nRbu1jaPxAAAAg8"]
[Fri Feb 27 06:53:42.000550 2026] [:error] [pid 42435:tid 42446] [client 20.43.27.35:60485] [client 20.43.27.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wk/index.php"] [unique_id "aaDO9R5hHLnaukp_y9-f2QAAAYY"]
[Fri Feb 27 06:53:42.838843 2026] [:error] [pid 42435:tid 42459] [client 20.43.27.35:60498] [client 20.43.27.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wk/index.php"] [unique_id "aaDO9h5hHLnaukp_y9-f2wAAAZM"]
[Fri Feb 27 08:48:26.671504 2026] [proxy_fcgi:error] [pid 54231:tid 54241] [client 20.43.27.35:13672] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 08:48:26.881267 2026] [proxy_fcgi:error] [pid 54231:tid 54245] [client 20.43.27.35:13672] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 08:48:27.091511 2026] [proxy_fcgi:error] [pid 54231:tid 54234] [client 20.43.27.35:13672] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 08:48:27.301966 2026] [proxy_fcgi:error] [pid 54231:tid 54258] [client 20.43.27.35:13672] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 08:48:27.513104 2026] [proxy_fcgi:error] [pid 54231:tid 54242] [client 20.43.27.35:13672] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 08:48:27.724446 2026] [proxy_fcgi:error] [pid 54231:tid 54243] [client 20.43.27.35:13672] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 08:48:28.153112 2026] [proxy_fcgi:error] [pid 54231:tid 54247] [client 20.43.27.35:13672] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 08:48:28.363993 2026] [proxy_fcgi:error] [pid 54231:tid 54246] [client 20.43.27.35:13672] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 08:48:28.575582 2026] [proxy_fcgi:error] [pid 54231:tid 54236] [client 20.43.27.35:13672] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 08:48:28.787521 2026] [proxy_fcgi:error] [pid 54231:tid 54237] [client 20.43.27.35:13672] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 08:48:28.993474 2026] [:error] [pid 54231:tid 54235] [client 20.43.27.35:13672] [client 20.43.27.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/info.php"] [unique_id "aaDp3OTvb5AeyJCdY7AgmQAAAEE"]
[Fri Feb 27 08:48:29.839601 2026] [:error] [pid 56075:tid 56100] [client 20.43.27.35:13641] [client 20.43.27.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/info.php"] [unique_id "aaDp3cKBhrfI6KNv9RgVkQAAABY"]
[Fri Feb 27 08:48:30.702907 2026] [:error] [pid 54103:tid 54189] [client 20.43.27.35:13632] [client 20.43.27.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/info.php"] [unique_id "aaDp3uvG4MPCmE0B2sDuWgAAANI"]
[Fri Feb 27 08:48:31.552146 2026] [:error] [pid 54231:tid 54238] [client 20.43.27.35:13671] [client 20.43.27.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/info.php"] [unique_id "aaDp3-Tvb5AeyJCdY7AgpAAAAEQ"]
[Fri Feb 27 08:58:38.634927 2026] [proxy_fcgi:error] [pid 56075:tid 56077] [client 4.205.37.160:15299] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 08:58:38.858535 2026] [proxy_fcgi:error] [pid 56075:tid 56096] [client 4.205.37.160:15299] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 15:49:46.288814 2026] [proxy_fcgi:error] [pid 62998:tid 63025] [client 4.204.192.31:17375] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 16:11:42.960689 2026] [:error] [pid 52073:tid 52093] [client 20.104.81.240:53795] [client 20.104.81.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wk/index.php"] [unique_id "aaFRvoa650YPyxXVeRZnDgAAAZE"]
[Fri Feb 27 16:11:44.159954 2026] [:error] [pid 52073:tid 52088] [client 20.104.81.240:55231] [client 20.104.81.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wk/index.php"] [unique_id "aaFRwIa650YPyxXVeRZnEQAAAYw"]
[Fri Feb 27 16:11:45.276521 2026] [:error] [pid 52073:tid 52094] [client 20.104.81.240:54118] [client 20.104.81.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wk/index.php"] [unique_id "aaFRwYa650YPyxXVeRZnFAAAAZI"]
[Fri Feb 27 16:11:46.336806 2026] [:error] [pid 52073:tid 52079] [client 20.104.81.240:6720] [client 20.104.81.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wk/index.php"] [unique_id "aaFRwoa650YPyxXVeRZnFgAAAYM"]
[Fri Feb 27 18:11:51.884143 2026] [proxy_fcgi:error] [pid 62998:tid 63002] [client 20.104.81.240:6592] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 18:11:52.095549 2026] [proxy_fcgi:error] [pid 62998:tid 63007] [client 20.104.81.240:6592] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 18:11:52.307864 2026] [proxy_fcgi:error] [pid 62998:tid 63020] [client 20.104.81.240:6592] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 18:11:52.547143 2026] [proxy_fcgi:error] [pid 62998:tid 63004] [client 20.104.81.240:6592] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 18:11:52.756402 2026] [proxy_fcgi:error] [pid 62998:tid 63023] [client 20.104.81.240:6592] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 18:11:52.964703 2026] [proxy_fcgi:error] [pid 62998:tid 63026] [client 20.104.81.240:6592] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 18:11:53.479316 2026] [proxy_fcgi:error] [pid 62998:tid 63011] [client 20.104.81.240:6592] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 18:11:53.749923 2026] [proxy_fcgi:error] [pid 62998:tid 63014] [client 20.104.81.240:6592] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 18:11:54.007208 2026] [proxy_fcgi:error] [pid 62998:tid 63010] [client 20.104.81.240:6592] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 18:11:54.247700 2026] [proxy_fcgi:error] [pid 62998:tid 63007] [client 20.104.81.240:6592] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 18:11:54.457112 2026] [:error] [pid 62998:tid 63017] [client 20.104.81.240:6592] [client 20.104.81.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/info.php"] [unique_id "aaFt6lQeueXZDUmoLokITwAAAQ8"]
[Fri Feb 27 18:11:55.464257 2026] [:error] [pid 54102:tid 54158] [client 20.104.81.240:57596] [client 20.104.81.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/info.php"] [unique_id "aaFt63i74D4fiYUm_GdTYAAAAI4"]
[Fri Feb 27 18:11:56.430263 2026] [:error] [pid 54101:tid 54125] [client 20.104.81.240:59704] [client 20.104.81.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/info.php"] [unique_id "aaFt7FY5qgRktcYTGFssKQAAAdE"]
[Fri Feb 27 18:11:57.549629 2026] [:error] [pid 54231:tid 54238] [client 20.104.81.240:61497] [client 20.104.81.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/info.php"] [unique_id "aaFt7eTvb5AeyJCdY7DhGgAAAEQ"]
[Fri Feb 27 19:18:23.310758 2026] [proxy_fcgi:error] [pid 52073:tid 52099] [client 20.220.144.87:11213] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 19:18:23.518990 2026] [proxy_fcgi:error] [pid 52073:tid 52083] [client 20.220.144.87:11213] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 19:18:23.727088 2026] [proxy_fcgi:error] [pid 52073:tid 52100] [client 20.220.144.87:11213] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 19:18:23.935377 2026] [proxy_fcgi:error] [pid 52073:tid 52076] [client 20.220.144.87:11213] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 19:18:24.166863 2026] [proxy_fcgi:error] [pid 52073:tid 52096] [client 20.220.144.87:11213] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 19:18:24.374669 2026] [proxy_fcgi:error] [pid 52073:tid 52097] [client 20.220.144.87:11213] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 19:18:24.583315 2026] [proxy_fcgi:error] [pid 52073:tid 52084] [client 20.220.144.87:11213] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 19:18:24.792063 2026] [proxy_fcgi:error] [pid 52073:tid 52099] [client 20.220.144.87:11213] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 19:18:24.999959 2026] [proxy_fcgi:error] [pid 52073:tid 52083] [client 20.220.144.87:11213] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 19:18:25.208285 2026] [proxy_fcgi:error] [pid 52073:tid 52087] [client 20.220.144.87:11213] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 19:18:25.412755 2026] [:error] [pid 52073:tid 52077] [client 20.220.144.87:11213] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/blackmini.php"] [unique_id "aaF9gYa650YPyxXVeRbwFwAAAYE"]
[Fri Feb 27 19:18:25.827109 2026] [:error] [pid 52073:tid 52081] [client 20.220.144.87:11235] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/blackmini.php"] [unique_id "aaF9gYa650YPyxXVeRbwGQAAAYU"]
[Fri Feb 27 19:18:26.239706 2026] [:error] [pid 54101:tid 54123] [client 20.220.144.87:11151] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/blackmini.php"] [unique_id "aaF9glY5qgRktcYTGFsyGgAAAc8"]
[Fri Feb 27 19:18:26.648770 2026] [:error] [pid 54103:tid 54192] [client 20.220.144.87:11223] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/blackmini.php"] [unique_id "aaF9guvG4MPCmE0B2sCMjQAAANU"]
[Fri Feb 27 19:18:27.060152 2026] [:error] [pid 54231:tid 54252] [client 20.220.144.87:11209] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gssdd.php"] [unique_id "aaF9g-Tvb5AeyJCdY7DwsgAAAFI"]
[Fri Feb 27 19:18:27.473878 2026] [:error] [pid 54101:tid 54121] [client 20.220.144.87:11253] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gssdd.php"] [unique_id "aaF9g1Y5qgRktcYTGFsyHgAAAc0"]
[Fri Feb 27 19:18:27.882524 2026] [:error] [pid 54102:tid 54162] [client 20.220.144.87:11233] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gssdd.php"] [unique_id "aaF9g3i74D4fiYUm_GdbxgAAAJI"]
[Fri Feb 27 19:18:28.298183 2026] [:error] [pid 62998:tid 63001] [client 20.220.144.87:11226] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gssdd.php"] [unique_id "aaF9hFQeueXZDUmoLokcQQAAAQA"]
[Fri Feb 27 19:18:28.710935 2026] [:error] [pid 62998:tid 63019] [client 20.220.144.87:11204] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/F19.php"] [unique_id "aaF9hFQeueXZDUmoLokcQgAAARE"]
[Fri Feb 27 19:18:29.130362 2026] [:error] [pid 62998:tid 63021] [client 20.220.144.87:11255] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/F19.php"] [unique_id "aaF9hVQeueXZDUmoLokcQwAAARM"]
[Fri Feb 27 19:18:29.547651 2026] [:error] [pid 62998:tid 63009] [client 20.220.144.87:11150] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/F19.php"] [unique_id "aaF9hVQeueXZDUmoLokcRQAAAQc"]
[Fri Feb 27 19:18:29.962769 2026] [:error] [pid 54231:tid 54240] [client 20.220.144.87:11246] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/F19.php"] [unique_id "aaF9heTvb5AeyJCdY7DwtQAAAEY"]
[Fri Feb 27 19:18:30.372867 2026] [:error] [pid 52073:tid 52098] [client 20.220.144.87:11263] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/F1.php"] [unique_id "aaF9hoa650YPyxXVeRbwIgAAAZY"]
[Fri Feb 27 19:18:30.785777 2026] [:error] [pid 54103:tid 54182] [client 20.220.144.87:11142] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/F1.php"] [unique_id "aaF9huvG4MPCmE0B2sCMjwAAAMs"]
[Fri Feb 27 19:18:42.428150 2026] [:error] [pid 49306:tid 49327] [client 20.220.144.87:11145] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bal.php"] [unique_id "aaF9kvnSUDZue59Px9vWygAAAVM"]
[Fri Feb 27 19:18:42.842792 2026] [:error] [pid 49306:tid 49313] [client 20.220.144.87:11257] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bal.php"] [unique_id "aaF9kvnSUDZue59Px9vWzgAAAUU"]
[Fri Feb 27 19:18:43.250644 2026] [:error] [pid 49306:tid 49318] [client 20.220.144.87:11249] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bal.php"] [unique_id "aaF9k_nSUDZue59Px9vW0AAAAUo"]
[Fri Feb 27 19:18:43.663660 2026] [:error] [pid 52073:tid 52082] [client 20.220.144.87:11221] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bal.php"] [unique_id "aaF9k4a650YPyxXVeRbwNQAAAYY"]
[Fri Feb 27 19:18:44.082132 2026] [:error] [pid 52073:tid 52080] [client 20.220.144.87:11203] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bengi.php"] [unique_id "aaF9lIa650YPyxXVeRbwNgAAAYQ"]
[Fri Feb 27 19:18:44.500300 2026] [:error] [pid 52073:tid 52091] [client 20.220.144.87:11161] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bengi.php"] [unique_id "aaF9lIa650YPyxXVeRbwOgAAAY8"]
[Fri Feb 27 19:18:44.912996 2026] [:error] [pid 54101:tid 54123] [client 20.220.144.87:11179] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lb.php"] [unique_id "aaF9lFY5qgRktcYTGFsyJgAAAc8"]
[Fri Feb 27 19:18:56.577288 2026] [:error] [pid 52073:tid 52080] [client 20.220.144.87:11202] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/samfa.php"] [unique_id "aaF9oIa650YPyxXVeRbwSQAAAYQ"]
[Fri Feb 27 19:18:56.989463 2026] [:error] [pid 52073:tid 52086] [client 20.220.144.87:11103] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/samfa.php"] [unique_id "aaF9oIa650YPyxXVeRbwSgAAAYo"]
[Fri Feb 27 19:18:57.398752 2026] [:error] [pid 56075:tid 56095] [client 20.220.144.87:11182] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/samfa.php"] [unique_id "aaF9ocKBhrfI6KNv9RhmlAAAABE"]
[Fri Feb 27 19:18:57.806898 2026] [:error] [pid 54231:tid 54236] [client 20.220.144.87:11103] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/samfa.php"] [unique_id "aaF9oeTvb5AeyJCdY7DwxwAAAEI"]
[Fri Feb 27 19:18:58.215946 2026] [:error] [pid 56075:tid 56090] [client 20.220.144.87:11140] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/boots.php"] [unique_id "aaF9osKBhrfI6KNv9RhmlgAAAAw"]
[Fri Feb 27 19:18:58.630305 2026] [:error] [pid 54102:tid 54150] [client 20.220.144.87:11148] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/boots.php"] [unique_id "aaF9oni74D4fiYUm_Gdb0gAAAIY"]
[Fri Feb 27 19:18:59.048868 2026] [:error] [pid 56075:tid 56087] [client 20.220.144.87:11244] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/boots.php"] [unique_id "aaF9o8KBhrfI6KNv9RhmmgAAAAo"]
[Fri Feb 27 19:18:59.460639 2026] [:error] [pid 49306:tid 49326] [client 20.220.144.87:11232] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/boots.php"] [unique_id "aaF9o_nSUDZue59Px9vW3gAAAVI"]
[Fri Feb 27 19:18:59.869677 2026] [:error] [pid 54102:tid 54146] [client 20.220.144.87:11225] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/logi.php"] [unique_id "aaF9o3i74D4fiYUm_Gdb1AAAAII"]
[Fri Feb 27 20:07:44.500163 2026] [proxy_fcgi:error] [pid 52073:tid 52086] [client 172.190.142.176:45779] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 20:07:44.726990 2026] [proxy_fcgi:error] [pid 52073:tid 52097] [client 172.190.142.176:45779] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 20:07:44.954278 2026] [proxy_fcgi:error] [pid 52073:tid 52099] [client 172.190.142.176:45779] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 20:07:45.178853 2026] [proxy_fcgi:error] [pid 52073:tid 52083] [client 172.190.142.176:45779] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 20:07:45.413206 2026] [proxy_fcgi:error] [pid 52073:tid 52098] [client 172.190.142.176:45779] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 20:07:45.638480 2026] [proxy_fcgi:error] [pid 52073:tid 52092] [client 172.190.142.176:45779] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 20:07:45.864885 2026] [proxy_fcgi:error] [pid 52073:tid 52076] [client 172.190.142.176:45779] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 20:07:46.096455 2026] [proxy_fcgi:error] [pid 52073:tid 52077] [client 172.190.142.176:45779] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 20:07:46.324963 2026] [proxy_fcgi:error] [pid 52073:tid 52089] [client 172.190.142.176:45779] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 20:07:46.549849 2026] [proxy_fcgi:error] [pid 52073:tid 52096] [client 172.190.142.176:45779] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 20:07:46.774808 2026] [:error] [pid 52073:tid 52100] [client 172.190.142.176:45779] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x123.php"] [unique_id "aaGJEoa650YPyxXVeRYZdgAAAZg"]
[Fri Feb 27 20:07:47.212640 2026] [:error] [pid 54103:tid 54170] [client 172.190.142.176:48241] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x123.php"] [unique_id "aaGJE-vG4MPCmE0B2sCWsAAAAMA"]
[Fri Feb 27 20:07:47.702453 2026] [:error] [pid 49306:tid 49315] [client 172.190.142.176:50515] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x123.php"] [unique_id "aaGJE_nSUDZue59Px9vyzwAAAUc"]
[Fri Feb 27 20:07:48.139385 2026] [:error] [pid 56075:tid 56088] [client 172.190.142.176:40432] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x123.php"] [unique_id "aaGJFMKBhrfI6KNv9RiEnwAAAAs"]
[Fri Feb 27 20:07:48.575274 2026] [:error] [pid 56075:tid 56090] [client 172.190.142.176:17467] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-act.php"] [unique_id "aaGJFMKBhrfI6KNv9RiEoQAAAAw"]
[Fri Feb 27 20:07:49.019688 2026] [:error] [pid 54231:tid 54243] [client 172.190.142.176:17448] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-act.php"] [unique_id "aaGJFeTvb5AeyJCdY7D9AgAAAEk"]
[Fri Feb 27 20:07:49.451953 2026] [:error] [pid 62998:tid 63011] [client 172.190.142.176:50548] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-act.php"] [unique_id "aaGJFVQeueXZDUmoLoksNAAAAQk"]
[Fri Feb 27 20:07:49.895318 2026] [:error] [pid 56075:tid 56077] [client 172.190.142.176:21812] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-act.php"] [unique_id "aaGJFcKBhrfI6KNv9RiEsAAAAAA"]
[Fri Feb 27 20:07:50.363716 2026] [:error] [pid 62998:tid 63026] [client 172.190.142.176:17046] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/moshou.php"] [unique_id "aaGJFlQeueXZDUmoLoksNQAAARg"]
[Fri Feb 27 20:07:50.815561 2026] [:error] [pid 62998:tid 63005] [client 172.190.142.176:43044] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/moshou.php"] [unique_id "aaGJFlQeueXZDUmoLoksNwAAAQM"]
[Fri Feb 27 20:07:51.268161 2026] [:error] [pid 56075:tid 56088] [client 172.190.142.176:49301] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/moshou.php"] [unique_id "aaGJF8KBhrfI6KNv9RiEtQAAAAs"]
[Fri Feb 27 20:07:51.701023 2026] [:error] [pid 56075:tid 56085] [client 172.190.142.176:51541] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/moshou.php"] [unique_id "aaGJF8KBhrfI6KNv9RiEuQAAAAg"]
[Fri Feb 27 20:07:52.140354 2026] [:error] [pid 56075:tid 56092] [client 172.190.142.176:21772] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/seetox.php"] [unique_id "aaGJGMKBhrfI6KNv9RiEuwAAAA4"]
[Fri Feb 27 20:07:52.594213 2026] [:error] [pid 56075:tid 56083] [client 172.190.142.176:43841] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/seetox.php"] [unique_id "aaGJGMKBhrfI6KNv9RiEvwAAAAY"]
[Fri Feb 27 20:07:53.017214 2026] [:error] [pid 56075:tid 56100] [client 172.190.142.176:21774] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/seetox.php"] [unique_id "aaGJGcKBhrfI6KNv9RiExQAAABY"]
[Fri Feb 27 20:07:53.520533 2026] [:error] [pid 54231:tid 54240] [client 172.190.142.176:17422] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/seetox.php"] [unique_id "aaGJGeTvb5AeyJCdY7D9DgAAAEY"]
[Fri Feb 27 20:07:53.963441 2026] [:error] [pid 49306:tid 49326] [client 172.190.142.176:27445] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dom.php"] [unique_id "aaGJGfnSUDZue59Px9vy2AAAAVI"]
[Fri Feb 27 20:07:54.401805 2026] [:error] [pid 49306:tid 49330] [client 172.190.142.176:21776] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dom.php"] [unique_id "aaGJGvnSUDZue59Px9vy2gAAAVY"]
[Fri Feb 27 20:07:54.848738 2026] [:error] [pid 49306:tid 49316] [client 172.190.142.176:47980] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dom.php"] [unique_id "aaGJGvnSUDZue59Px9vy3AAAAUg"]
[Fri Feb 27 20:07:55.301657 2026] [:error] [pid 56075:tid 56080] [client 172.190.142.176:17045] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dom.php"] [unique_id "aaGJG8KBhrfI6KNv9RiE0QAAAAM"]
[Fri Feb 27 20:07:55.725064 2026] [:error] [pid 56075:tid 56098] [client 172.190.142.176:51540] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws60.php"] [unique_id "aaGJG8KBhrfI6KNv9RiE1AAAABQ"]
[Fri Feb 27 20:07:56.160829 2026] [:error] [pid 56075:tid 56096] [client 172.190.142.176:21780] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws60.php"] [unique_id "aaGJHMKBhrfI6KNv9RiE2AAAABI"]
[Fri Feb 27 20:07:56.614954 2026] [:error] [pid 62998:tid 63021] [client 172.190.142.176:60057] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws60.php"] [unique_id "aaGJHFQeueXZDUmoLoksPAAAARM"]
[Fri Feb 27 20:07:57.057844 2026] [:error] [pid 54103:tid 54174] [client 172.190.142.176:47982] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws60.php"] [unique_id "aaGJHevG4MPCmE0B2sCWugAAAMM"]
[Fri Feb 27 20:07:57.504470 2026] [:error] [pid 54103:tid 54182] [client 172.190.142.176:47954] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/samiri.php"] [unique_id "aaGJHevG4MPCmE0B2sCWuwAAAMs"]
[Fri Feb 27 20:07:57.936263 2026] [:error] [pid 54101:tid 54109] [client 172.190.142.176:51061] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/samiri.php"] [unique_id "aaGJHVY5qgRktcYTGFs3-gAAAcE"]
[Fri Feb 27 20:07:58.380537 2026] [:error] [pid 56075:tid 56081] [client 172.190.142.176:43868] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/samiri.php"] [unique_id "aaGJHsKBhrfI6KNv9RiE9gAAAAQ"]
[Fri Feb 27 20:07:58.828592 2026] [:error] [pid 54231:tid 54257] [client 172.190.142.176:48733] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/samiri.php"] [unique_id "aaGJHuTvb5AeyJCdY7D9FAAAAFc"]
[Fri Feb 27 20:07:59.285965 2026] [:error] [pid 54103:tid 54193] [client 172.190.142.176:43876] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/plugins.php"] [unique_id "aaGJH-vG4MPCmE0B2sCWvgAAANY"]
[Fri Feb 27 20:07:59.710945 2026] [:error] [pid 49306:tid 49309] [client 172.190.142.176:48726] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/plugins.php"] [unique_id "aaGJH_nSUDZue59Px9vy5QAAAUE"]
[Fri Feb 27 20:08:00.137719 2026] [:error] [pid 54231:tid 54252] [client 172.190.142.176:54588] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/plugins.php"] [unique_id "aaGJIOTvb5AeyJCdY7D9FwAAAFI"]
[Fri Feb 27 20:08:00.587743 2026] [:error] [pid 56075:tid 56084] [client 172.190.142.176:17028] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/plugins.php"] [unique_id "aaGJIMKBhrfI6KNv9RiFBgAAAAc"]
[Fri Feb 27 20:08:01.042234 2026] [:error] [pid 52073:tid 52089] [client 172.190.142.176:60088] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xoot.php"] [unique_id "aaGJIYa650YPyxXVeRYZggAAAY0"]
[Fri Feb 27 20:08:01.487019 2026] [:error] [pid 52073:tid 52088] [client 172.190.142.176:60074] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xoot.php"] [unique_id "aaGJIYa650YPyxXVeRYZhgAAAYw"]
[Fri Feb 27 20:08:01.976906 2026] [:error] [pid 56075:tid 56080] [client 172.190.142.176:60090] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xoot.php"] [unique_id "aaGJIcKBhrfI6KNv9RiFDwAAAAM"]
[Fri Feb 27 20:08:02.476017 2026] [:error] [pid 56075:tid 56102] [client 172.190.142.176:27419] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xoot.php"] [unique_id "aaGJIsKBhrfI6KNv9RiFFAAAABg"]
[Fri Feb 27 20:08:02.917075 2026] [:error] [pid 56075:tid 56085] [client 172.190.142.176:51544] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/X57.php"] [unique_id "aaGJIsKBhrfI6KNv9RiFGgAAAAg"]
[Fri Feb 27 20:08:03.363706 2026] [:error] [pid 56075:tid 56095] [client 172.190.142.176:44551] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/X57.php"] [unique_id "aaGJI8KBhrfI6KNv9RiFIgAAABE"]
[Fri Feb 27 20:08:03.828336 2026] [:error] [pid 52073:tid 52086] [client 172.190.142.176:60077] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/X57.php"] [unique_id "aaGJI4a650YPyxXVeRYZiQAAAYo"]
[Fri Feb 27 20:08:04.261011 2026] [:error] [pid 56075:tid 56097] [client 172.190.142.176:27406] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/X57.php"] [unique_id "aaGJJMKBhrfI6KNv9RiFKQAAABM"]
[Fri Feb 27 20:08:04.704554 2026] [:error] [pid 56075:tid 56094] [client 172.190.142.176:17436] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vx.php"] [unique_id "aaGJJMKBhrfI6KNv9RiFLQAAABA"]
[Fri Feb 27 20:08:05.140991 2026] [:error] [pid 56075:tid 56078] [client 172.190.142.176:61927] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vx.php"] [unique_id "aaGJJcKBhrfI6KNv9RiFMAAAAAE"]
[Fri Feb 27 20:08:05.592890 2026] [:error] [pid 54102:tid 54164] [client 172.190.142.176:51545] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vx.php"] [unique_id "aaGJJXi74D4fiYUm_Gdj5gAAAJQ"]
[Fri Feb 27 20:08:06.042852 2026] [:error] [pid 62998:tid 63019] [client 172.190.142.176:27437] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vx.php"] [unique_id "aaGJJlQeueXZDUmoLoksQAAAARE"]
[Fri Feb 27 20:08:06.496832 2026] [:error] [pid 54102:tid 54144] [client 172.190.142.176:61892] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file59.php"] [unique_id "aaGJJni74D4fiYUm_Gdj6QAAAIA"]
[Fri Feb 27 20:08:06.946871 2026] [:error] [pid 54102:tid 54158] [client 172.190.142.176:47975] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file59.php"] [unique_id "aaGJJni74D4fiYUm_Gdj7gAAAI4"]
[Fri Feb 27 20:08:07.386308 2026] [:error] [pid 62998:tid 63008] [client 172.190.142.176:42891] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file59.php"] [unique_id "aaGJJ1QeueXZDUmoLoksQgAAAQY"]
[Fri Feb 27 20:08:07.827933 2026] [:error] [pid 54231:tid 54249] [client 172.190.142.176:47939] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file59.php"] [unique_id "aaGJJ-Tvb5AeyJCdY7D9HgAAAE8"]
[Fri Feb 27 20:08:08.272157 2026] [:error] [pid 52073:tid 52083] [client 172.190.142.176:47971] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaGJKIa650YPyxXVeRYZjgAAAYc"]
[Fri Feb 27 20:08:08.725293 2026] [:error] [pid 52073:tid 52093] [client 172.190.142.176:60048] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaGJKIa650YPyxXVeRYZkAAAAZE"]
[Fri Feb 27 20:08:09.165748 2026] [:error] [pid 62998:tid 63015] [client 172.190.142.176:61936] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaGJKVQeueXZDUmoLoksQwAAAQ0"]
[Fri Feb 27 20:08:09.595612 2026] [:error] [pid 62998:tid 63020] [client 172.190.142.176:43883] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaGJKVQeueXZDUmoLoksRAAAARI"]
[Fri Feb 27 20:08:10.040712 2026] [:error] [pid 52073:tid 52089] [client 172.190.142.176:43880] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/shas.php"] [unique_id "aaGJKoa650YPyxXVeRYZlwAAAY0"]
[Fri Feb 27 20:08:10.525943 2026] [:error] [pid 52073:tid 52079] [client 172.190.142.176:48709] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/shas.php"] [unique_id "aaGJKoa650YPyxXVeRYZmwAAAYM"]
[Fri Feb 27 20:08:10.966948 2026] [:error] [pid 52073:tid 52078] [client 172.190.142.176:54529] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/shas.php"] [unique_id "aaGJKoa650YPyxXVeRYZngAAAYI"]
[Fri Feb 27 20:08:11.402283 2026] [:error] [pid 54231:tid 54240] [client 172.190.142.176:60067] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/shas.php"] [unique_id "aaGJK-Tvb5AeyJCdY7D9IgAAAEY"]
[Fri Feb 27 20:08:11.831248 2026] [:error] [pid 49306:tid 49332] [client 172.190.142.176:21766] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xa.php"] [unique_id "aaGJK_nSUDZue59Px9vy7AAAAVg"]
[Fri Feb 27 20:08:12.267783 2026] [:error] [pid 54231:tid 54235] [client 172.190.142.176:60091] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xa.php"] [unique_id "aaGJLOTvb5AeyJCdY7D9JgAAAEE"]
[Fri Feb 27 20:08:12.700296 2026] [:error] [pid 62998:tid 63002] [client 172.190.142.176:35568] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xa.php"] [unique_id "aaGJLFQeueXZDUmoLoksRQAAAQE"]
[Fri Feb 27 20:08:13.144555 2026] [:error] [pid 52073:tid 52086] [client 172.190.142.176:42937] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xa.php"] [unique_id "aaGJLYa650YPyxXVeRYZoAAAAYo"]
[Fri Feb 27 20:08:13.582515 2026] [:error] [pid 49306:tid 49331] [client 172.190.142.176:44605] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xda.php"] [unique_id "aaGJLfnSUDZue59Px9vy7wAAAVc"]
[Fri Feb 27 20:08:14.033543 2026] [:error] [pid 56075:tid 56093] [client 172.190.142.176:17069] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xda.php"] [unique_id "aaGJLsKBhrfI6KNv9RiFOAAAAA8"]
[Fri Feb 27 20:08:14.519551 2026] [:error] [pid 52073:tid 52098] [client 172.190.142.176:43859] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xda.php"] [unique_id "aaGJLoa650YPyxXVeRYZpgAAAZY"]
[Fri Feb 27 20:08:14.963988 2026] [:error] [pid 52073:tid 52094] [client 172.190.142.176:54548] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xda.php"] [unique_id "aaGJLoa650YPyxXVeRYZqgAAAZI"]
[Fri Feb 27 20:08:15.409841 2026] [:error] [pid 52073:tid 52077] [client 172.190.142.176:35545] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/er.php"] [unique_id "aaGJL4a650YPyxXVeRYZrAAAAYE"]
[Fri Feb 27 20:08:15.867497 2026] [:error] [pid 52073:tid 52076] [client 172.190.142.176:44587] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/er.php"] [unique_id "aaGJL4a650YPyxXVeRYZsAAAAYA"]
[Fri Feb 27 20:08:16.329886 2026] [:error] [pid 52073:tid 52085] [client 172.190.142.176:35550] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/er.php"] [unique_id "aaGJMIa650YPyxXVeRYZsgAAAYk"]
[Fri Feb 27 20:08:16.773784 2026] [:error] [pid 56075:tid 56099] [client 172.190.142.176:51062] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/er.php"] [unique_id "aaGJMMKBhrfI6KNv9RiFPgAAABU"]
[Fri Feb 27 20:08:17.211375 2026] [:error] [pid 54101:tid 54114] [client 172.190.142.176:54551] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fault.php"] [unique_id "aaGJMVY5qgRktcYTGFs4AAAAAcY"]
[Fri Feb 27 20:08:17.652372 2026] [:error] [pid 49306:tid 49315] [client 172.190.142.176:51036] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fault.php"] [unique_id "aaGJMfnSUDZue59Px9vy8wAAAUc"]
[Fri Feb 27 20:08:18.107265 2026] [:error] [pid 54231:tid 54251] [client 172.190.142.176:60093] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fault.php"] [unique_id "aaGJMuTvb5AeyJCdY7D9MwAAAFE"]
[Fri Feb 27 20:08:18.586043 2026] [:error] [pid 62998:tid 63013] [client 172.190.142.176:28070] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fault.php"] [unique_id "aaGJMlQeueXZDUmoLoksTQAAAQs"]
[Fri Feb 27 20:08:19.036871 2026] [:error] [pid 56075:tid 56090] [client 172.190.142.176:35534] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/motu.php"] [unique_id "aaGJM8KBhrfI6KNv9RiFQQAAAAw"]
[Fri Feb 27 20:08:19.479636 2026] [:error] [pid 52073:tid 52095] [client 172.190.142.176:51071] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/motu.php"] [unique_id "aaGJM4a650YPyxXVeRYZuQAAAZM"]
[Fri Feb 27 20:08:19.921773 2026] [:error] [pid 54231:tid 54244] [client 172.190.142.176:54226] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/motu.php"] [unique_id "aaGJM-Tvb5AeyJCdY7D9OAAAAEo"]
[Fri Feb 27 20:08:20.364134 2026] [:error] [pid 62998:tid 63020] [client 172.190.142.176:51069] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/motu.php"] [unique_id "aaGJNFQeueXZDUmoLoksUgAAARI"]
[Fri Feb 27 20:08:20.806136 2026] [:error] [pid 54231:tid 54254] [client 172.190.142.176:9187] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/66.php"] [unique_id "aaGJNOTvb5AeyJCdY7D9OQAAAFQ"]
[Fri Feb 27 20:08:21.243947 2026] [:error] [pid 52073:tid 52090] [client 172.190.142.176:42914] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/66.php"] [unique_id "aaGJNYa650YPyxXVeRYZwAAAAY4"]
[Fri Feb 27 20:08:21.690636 2026] [:error] [pid 54103:tid 54180] [client 172.190.142.176:41507] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/66.php"] [unique_id "aaGJNevG4MPCmE0B2sCW1gAAAMk"]
[Fri Feb 27 20:08:22.134722 2026] [:error] [pid 54102:tid 54160] [client 172.190.142.176:54530] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/66.php"] [unique_id "aaGJNni74D4fiYUm_GdkJAAAAJA"]
[Fri Feb 27 20:08:22.583806 2026] [:error] [pid 54102:tid 54157] [client 172.190.142.176:51039] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/leuk.php"] [unique_id "aaGJNni74D4fiYUm_GdkJwAAAI0"]
[Fri Feb 27 20:08:23.017560 2026] [:error] [pid 54101:tid 54113] [client 172.190.142.176:54213] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/leuk.php"] [unique_id "aaGJN1Y5qgRktcYTGFs4BwAAAcU"]
[Fri Feb 27 20:08:23.447756 2026] [:error] [pid 54101:tid 54132] [client 172.190.142.176:56307] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/leuk.php"] [unique_id "aaGJN1Y5qgRktcYTGFs4CgAAAdg"]
[Fri Feb 27 20:08:23.882046 2026] [:error] [pid 54102:tid 54147] [client 172.190.142.176:28075] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/leuk.php"] [unique_id "aaGJN3i74D4fiYUm_GdkKQAAAIM"]
[Fri Feb 27 20:08:24.309438 2026] [:error] [pid 56075:tid 56092] [client 172.190.142.176:54248] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xqq.php"] [unique_id "aaGJOMKBhrfI6KNv9RiFRQAAAA4"]
[Fri Feb 27 20:08:24.750892 2026] [:error] [pid 56075:tid 56082] [client 172.190.142.176:63200] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xqq.php"] [unique_id "aaGJOMKBhrfI6KNv9RiFRwAAAAU"]
[Fri Feb 27 20:08:25.231017 2026] [:error] [pid 56075:tid 56100] [client 172.190.142.176:44607] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xqq.php"] [unique_id "aaGJOcKBhrfI6KNv9RiFSQAAABY"]
[Fri Feb 27 20:08:25.657557 2026] [:error] [pid 62998:tid 63018] [client 172.190.142.176:41740] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xqq.php"] [unique_id "aaGJOVQeueXZDUmoLoksWgAAARA"]
[Fri Feb 27 20:08:26.088266 2026] [:error] [pid 49306:tid 49326] [client 172.190.142.176:42886] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kolda.php"] [unique_id "aaGJOvnSUDZue59Px9vy-AAAAVI"]
[Fri Feb 27 20:08:26.518497 2026] [:error] [pid 62998:tid 63025] [client 172.190.142.176:9158] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kolda.php"] [unique_id "aaGJOlQeueXZDUmoLoksXAAAARc"]
[Fri Feb 27 20:08:26.966779 2026] [:error] [pid 54102:tid 54144] [client 172.190.142.176:28076] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kolda.php"] [unique_id "aaGJOni74D4fiYUm_GdkLQAAAIA"]
[Fri Feb 27 20:08:27.388609 2026] [:error] [pid 49306:tid 49332] [client 172.190.142.176:54217] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kolda.php"] [unique_id "aaGJO_nSUDZue59Px9vy_QAAAVg"]
[Fri Feb 27 20:08:27.821223 2026] [:error] [pid 49306:tid 49311] [client 172.190.142.176:41479] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nw.php"] [unique_id "aaGJO_nSUDZue59Px9vy_wAAAUM"]
[Fri Feb 27 20:08:28.302382 2026] [:error] [pid 49306:tid 49323] [client 172.190.142.176:41728] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nw.php"] [unique_id "aaGJPPnSUDZue59Px9vzAwAAAU8"]
[Fri Feb 27 20:08:28.738861 2026] [:error] [pid 49306:tid 49321] [client 172.190.142.176:54208] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nw.php"] [unique_id "aaGJPPnSUDZue59Px9vzBgAAAU0"]
[Fri Feb 27 20:08:29.173910 2026] [:error] [pid 49306:tid 49315] [client 172.190.142.176:42942] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nw.php"] [unique_id "aaGJPfnSUDZue59Px9vzCQAAAUc"]
[Fri Feb 27 20:08:29.606850 2026] [:error] [pid 62998:tid 63020] [client 172.190.142.176:48395] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/god.php"] [unique_id "aaGJPVQeueXZDUmoLoksZwAAARI"]
[Fri Feb 27 20:08:30.050690 2026] [:error] [pid 62998:tid 63024] [client 172.190.142.176:42901] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/god.php"] [unique_id "aaGJPlQeueXZDUmoLoksagAAARY"]
[Fri Feb 27 20:08:30.493240 2026] [:error] [pid 56075:tid 56093] [client 172.190.142.176:28082] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/god.php"] [unique_id "aaGJPsKBhrfI6KNv9RiFTgAAAA8"]
[Fri Feb 27 20:08:30.936520 2026] [:error] [pid 52073:tid 52099] [client 172.190.142.176:44576] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/god.php"] [unique_id "aaGJPoa650YPyxXVeRYZ8QAAAZc"]
[Fri Feb 27 20:08:31.366924 2026] [:error] [pid 56075:tid 56078] [client 172.190.142.176:56312] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/666.php"] [unique_id "aaGJP8KBhrfI6KNv9RiFUgAAAAE"]
[Fri Feb 27 20:08:31.802076 2026] [:error] [pid 56075:tid 56083] [client 172.190.142.176:28033] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/666.php"] [unique_id "aaGJP8KBhrfI6KNv9RiFVQAAAAY"]
[Fri Feb 27 20:08:32.257972 2026] [:error] [pid 49306:tid 49312] [client 172.190.142.176:48402] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/666.php"] [unique_id "aaGJQPnSUDZue59Px9vzDAAAAUQ"]
[Fri Feb 27 20:08:32.694208 2026] [:error] [pid 56075:tid 56095] [client 172.190.142.176:56306] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/666.php"] [unique_id "aaGJQMKBhrfI6KNv9RiFWQAAABE"]
[Fri Feb 27 20:08:33.115854 2026] [:error] [pid 49306:tid 49330] [client 172.190.142.176:54239] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kj.php"] [unique_id "aaGJQfnSUDZue59Px9vzDgAAAVY"]
[Fri Feb 27 20:08:33.561488 2026] [:error] [pid 49306:tid 49318] [client 172.190.142.176:35530] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kj.php"] [unique_id "aaGJQfnSUDZue59Px9vzDwAAAUo"]
[Fri Feb 27 20:08:33.990046 2026] [:error] [pid 49306:tid 49310] [client 172.190.142.176:35526] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kj.php"] [unique_id "aaGJQfnSUDZue59Px9vzEQAAAUI"]
[Fri Feb 27 20:08:34.431331 2026] [:error] [pid 56075:tid 56082] [client 172.190.142.176:51049] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kj.php"] [unique_id "aaGJQsKBhrfI6KNv9RiFXAAAAAU"]
[Fri Feb 27 20:08:34.872641 2026] [:error] [pid 49306:tid 49311] [client 172.190.142.176:48431] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/un.php"] [unique_id "aaGJQvnSUDZue59Px9vzFAAAAUM"]
[Fri Feb 27 20:08:35.312611 2026] [:error] [pid 52073:tid 52085] [client 172.190.142.176:54218] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/un.php"] [unique_id "aaGJQ4a650YPyxXVeRYaGAAAAYk"]
[Fri Feb 27 20:08:35.750428 2026] [:error] [pid 52073:tid 52078] [client 172.190.142.176:41772] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/un.php"] [unique_id "aaGJQ4a650YPyxXVeRYaHAAAAYI"]
[Fri Feb 27 20:08:36.180992 2026] [:error] [pid 56075:tid 56097] [client 172.190.142.176:42925] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/un.php"] [unique_id "aaGJRMKBhrfI6KNv9RiFXgAAABM"]
[Fri Feb 27 20:08:36.611998 2026] [:error] [pid 54103:tid 54188] [client 172.190.142.176:41502] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fs.php"] [unique_id "aaGJROvG4MPCmE0B2sCW3wAAANE"]
[Fri Feb 27 20:08:37.052557 2026] [:error] [pid 56075:tid 56079] [client 172.190.142.176:54232] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fs.php"] [unique_id "aaGJRcKBhrfI6KNv9RiFYgAAAAI"]
[Fri Feb 27 20:08:37.496249 2026] [:error] [pid 54101:tid 54111] [client 172.190.142.176:54225] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fs.php"] [unique_id "aaGJRVY5qgRktcYTGFs4EgAAAcM"]
[Fri Feb 27 20:08:37.944212 2026] [:error] [pid 56075:tid 56092] [client 172.190.142.176:41774] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fs.php"] [unique_id "aaGJRcKBhrfI6KNv9RiFbQAAAA4"]
[Fri Feb 27 20:08:38.390619 2026] [:error] [pid 56075:tid 56084] [client 172.190.142.176:41516] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ms.php"] [unique_id "aaGJRsKBhrfI6KNv9RiFdAAAAAc"]
[Fri Feb 27 20:08:38.823524 2026] [:error] [pid 49306:tid 49318] [client 172.190.142.176:60129] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ms.php"] [unique_id "aaGJRvnSUDZue59Px9vzIwAAAUo"]
[Fri Feb 27 20:08:39.255338 2026] [:error] [pid 49306:tid 49323] [client 172.190.142.176:28056] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ms.php"] [unique_id "aaGJR_nSUDZue59Px9vzJwAAAU8"]
[Fri Feb 27 20:08:39.698034 2026] [:error] [pid 49306:tid 49308] [client 172.190.142.176:54330] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ms.php"] [unique_id "aaGJR_nSUDZue59Px9vzKQAAAUA"]
[Fri Feb 27 20:08:40.131672 2026] [:error] [pid 62998:tid 63017] [client 172.190.142.176:60121] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/login8.php"] [unique_id "aaGJSFQeueXZDUmoLokscgAAAQ8"]
[Fri Feb 27 20:08:40.573221 2026] [:error] [pid 62998:tid 63006] [client 172.190.142.176:9160] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/login8.php"] [unique_id "aaGJSFQeueXZDUmoLokscwAAAQQ"]
[Fri Feb 27 20:08:41.009076 2026] [:error] [pid 56075:tid 56085] [client 172.190.142.176:63222] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/login8.php"] [unique_id "aaGJScKBhrfI6KNv9RiFjAAAAAg"]
[Fri Feb 27 20:08:41.456759 2026] [:error] [pid 54102:tid 54166] [client 172.190.142.176:56317] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/login8.php"] [unique_id "aaGJSXi74D4fiYUm_GdkOAAAAJY"]
[Fri Feb 27 20:08:41.899444 2026] [:error] [pid 52073:tid 52097] [client 172.190.142.176:28086] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nnyvn.php"] [unique_id "aaGJSYa650YPyxXVeRYaNgAAAZU"]
[Fri Feb 27 20:08:42.331859 2026] [:error] [pid 56075:tid 56081] [client 172.190.142.176:28072] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nnyvn.php"] [unique_id "aaGJSsKBhrfI6KNv9RiFlgAAAAQ"]
[Fri Feb 27 20:08:42.775019 2026] [:error] [pid 52073:tid 52094] [client 172.190.142.176:48409] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nnyvn.php"] [unique_id "aaGJSoa650YPyxXVeRYaOgAAAZI"]
[Fri Feb 27 20:08:43.217109 2026] [:error] [pid 56075:tid 56091] [client 172.190.142.176:61470] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nnyvn.php"] [unique_id "aaGJS8KBhrfI6KNv9RiFnQAAAA0"]
[Fri Feb 27 20:08:43.664051 2026] [:error] [pid 56075:tid 56080] [client 172.190.142.176:11987] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cu.php"] [unique_id "aaGJS8KBhrfI6KNv9RiFogAAAAM"]
[Fri Feb 27 20:08:44.094644 2026] [:error] [pid 52073:tid 52082] [client 172.190.142.176:56298] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cu.php"] [unique_id "aaGJTIa650YPyxXVeRYaRQAAAYY"]
[Fri Feb 27 20:08:44.523421 2026] [:error] [pid 56075:tid 56098] [client 172.190.142.176:41530] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cu.php"] [unique_id "aaGJTMKBhrfI6KNv9RiFpgAAABQ"]
[Fri Feb 27 20:08:44.961470 2026] [:error] [pid 56075:tid 56095] [client 172.190.142.176:41745] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cu.php"] [unique_id "aaGJTMKBhrfI6KNv9RiFqgAAABE"]
[Fri Feb 27 20:08:45.409023 2026] [:error] [pid 56075:tid 56080] [client 172.190.142.176:9197] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lul.php"] [unique_id "aaGJTcKBhrfI6KNv9RiFsAAAAAM"]
[Fri Feb 27 20:08:45.850778 2026] [:error] [pid 56075:tid 56097] [client 172.190.142.176:41533] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lul.php"] [unique_id "aaGJTcKBhrfI6KNv9RiFtQAAABM"]
[Fri Feb 27 20:08:46.318746 2026] [proxy_fcgi:error] [pid 56075:tid 56098] [client 172.190.142.176:61480] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 20:08:46.543879 2026] [proxy_fcgi:error] [pid 56075:tid 56092] [client 172.190.142.176:61480] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 20:08:46.771914 2026] [proxy_fcgi:error] [pid 56075:tid 56095] [client 172.190.142.176:61480] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 20:08:47.004156 2026] [proxy_fcgi:error] [pid 56075:tid 56080] [client 172.190.142.176:61480] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 20:08:47.228205 2026] [proxy_fcgi:error] [pid 56075:tid 56078] [client 172.190.142.176:61480] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 20:08:47.452473 2026] [proxy_fcgi:error] [pid 56075:tid 56086] [client 172.190.142.176:61480] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 20:08:47.676517 2026] [proxy_fcgi:error] [pid 56075:tid 56099] [client 172.190.142.176:61480] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 20:08:47.902676 2026] [proxy_fcgi:error] [pid 56075:tid 56098] [client 172.190.142.176:61480] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 20:08:48.126857 2026] [proxy_fcgi:error] [pid 56075:tid 56093] [client 172.190.142.176:61480] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 20:08:48.352127 2026] [proxy_fcgi:error] [pid 56075:tid 56079] [client 172.190.142.176:61480] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 20:08:49.059903 2026] [proxy_fcgi:error] [pid 56075:tid 56088] [client 172.190.142.176:61480] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 20:08:50.599945 2026] [:error] [pid 56075:tid 56090] [client 172.190.142.176:61480] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp5.php"] [unique_id "aaGJUsKBhrfI6KNv9RiF2gAAAAw"]
[Fri Feb 27 20:08:51.038009 2026] [:error] [pid 56075:tid 56077] [client 172.190.142.176:60132] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp5.php"] [unique_id "aaGJU8KBhrfI6KNv9RiF3gAAAAA"]
[Fri Feb 27 20:08:51.464856 2026] [:error] [pid 62998:tid 63007] [client 172.190.142.176:54272] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp5.php"] [unique_id "aaGJU1QeueXZDUmoLokseQAAAQU"]
[Fri Feb 27 20:08:51.894837 2026] [:error] [pid 52073:tid 52094] [client 172.190.142.176:61451] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp5.php"] [unique_id "aaGJU4a650YPyxXVeRYaYwAAAZI"]
[Fri Feb 27 20:08:52.339784 2026] [:error] [pid 52073:tid 52089] [client 172.190.142.176:41501] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fot.php"] [unique_id "aaGJVIa650YPyxXVeRYaZQAAAY0"]
[Fri Feb 27 20:08:52.777381 2026] [:error] [pid 54102:tid 54162] [client 172.190.142.176:60126] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fot.php"] [unique_id "aaGJVHi74D4fiYUm_GdkPAAAAJI"]
[Fri Feb 27 20:08:53.215847 2026] [:error] [pid 56075:tid 56083] [client 172.190.142.176:12005] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fot.php"] [unique_id "aaGJVcKBhrfI6KNv9RiF5QAAAAY"]
[Fri Feb 27 20:08:53.638215 2026] [:error] [pid 49306:tid 49331] [client 172.190.142.176:26198] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fot.php"] [unique_id "aaGJVfnSUDZue59Px9vzPAAAAVc"]
[Fri Feb 27 20:08:54.064090 2026] [:error] [pid 54231:tid 54252] [client 172.190.142.176:41534] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ff1.php"] [unique_id "aaGJVuTvb5AeyJCdY7D9VAAAAFI"]
[Fri Feb 27 20:08:54.556962 2026] [:error] [pid 56075:tid 56084] [client 172.190.142.176:54297] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ff1.php"] [unique_id "aaGJVsKBhrfI6KNv9RiF5wAAAAc"]
[Fri Feb 27 20:08:55.003521 2026] [:error] [pid 54101:tid 54124] [client 172.190.142.176:60153] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ff1.php"] [unique_id "aaGJV1Y5qgRktcYTGFs4FQAAAdA"]
[Fri Feb 27 20:08:55.453717 2026] [:error] [pid 56075:tid 56096] [client 172.190.142.176:61484] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ff1.php"] [unique_id "aaGJV8KBhrfI6KNv9RiF6QAAABI"]
[Fri Feb 27 20:08:55.904126 2026] [:error] [pid 54101:tid 54122] [client 172.190.142.176:26178] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/forbidals.php"] [unique_id "aaGJV1Y5qgRktcYTGFs4FgAAAc4"]
[Fri Feb 27 20:08:56.345270 2026] [:error] [pid 52073:tid 52076] [client 172.190.142.176:48408] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/forbidals.php"] [unique_id "aaGJWIa650YPyxXVeRYabAAAAYA"]
[Fri Feb 27 20:08:56.784817 2026] [:error] [pid 52073:tid 52085] [client 172.190.142.176:54286] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/forbidals.php"] [unique_id "aaGJWIa650YPyxXVeRYabQAAAYk"]
[Fri Feb 27 20:08:57.208448 2026] [:error] [pid 49306:tid 49312] [client 172.190.142.176:61471] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/forbidals.php"] [unique_id "aaGJWfnSUDZue59Px9vzQQAAAUQ"]
[Fri Feb 27 20:08:57.652743 2026] [:error] [pid 49306:tid 49326] [client 172.190.142.176:54296] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/erty.php"] [unique_id "aaGJWfnSUDZue59Px9vzQgAAAVI"]
[Fri Feb 27 20:08:58.102270 2026] [:error] [pid 62998:tid 63008] [client 172.190.142.176:54319] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/erty.php"] [unique_id "aaGJWlQeueXZDUmoLoksiAAAAQY"]
[Fri Feb 27 20:08:58.556817 2026] [:error] [pid 56075:tid 56077] [client 172.190.142.176:41757] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/erty.php"] [unique_id "aaGJWsKBhrfI6KNv9RiF8QAAAAA"]
[Fri Feb 27 20:08:59.006872 2026] [:error] [pid 62998:tid 63004] [client 172.190.142.176:48417] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/erty.php"] [unique_id "aaGJW1QeueXZDUmoLoksiwAAAQI"]
[Fri Feb 27 20:08:59.450677 2026] [:error] [pid 56075:tid 56080] [client 172.190.142.176:9200] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dev1s.php"] [unique_id "aaGJW8KBhrfI6KNv9RiF8gAAAAM"]
[Fri Feb 27 20:08:59.896172 2026] [:error] [pid 56075:tid 56094] [client 172.190.142.176:60148] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dev1s.php"] [unique_id "aaGJW8KBhrfI6KNv9RiF9QAAABA"]
[Fri Feb 27 20:09:00.342262 2026] [:error] [pid 56075:tid 56078] [client 172.190.142.176:54274] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dev1s.php"] [unique_id "aaGJXMKBhrfI6KNv9RiF9gAAAAE"]
[Fri Feb 27 20:09:00.787077 2026] [:error] [pid 56075:tid 56086] [client 172.190.142.176:60117] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dev1s.php"] [unique_id "aaGJXMKBhrfI6KNv9RiF-AAAAAk"]
[Fri Feb 27 20:09:01.234973 2026] [:error] [pid 56075:tid 56099] [client 172.190.142.176:12004] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ffd.php"] [unique_id "aaGJXcKBhrfI6KNv9RiF-wAAABU"]
[Fri Feb 27 20:09:01.680609 2026] [:error] [pid 56075:tid 56100] [client 172.190.142.176:57383] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ffd.php"] [unique_id "aaGJXcKBhrfI6KNv9RiGAAAAABY"]
[Fri Feb 27 20:09:02.121800 2026] [:error] [pid 54231:tid 54256] [client 172.190.142.176:48436] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ffd.php"] [unique_id "aaGJXuTvb5AeyJCdY7D9egAAAFY"]
[Fri Feb 27 20:09:02.576756 2026] [:error] [pid 56075:tid 56082] [client 172.190.142.176:61478] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ffd.php"] [unique_id "aaGJXsKBhrfI6KNv9RiGCAAAAAU"]
[Fri Feb 27 20:34:40.782946 2026] [:error] [pid 52073:tid 52082] [client 20.220.144.87:42975] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaGPYIa650YPyxXVeRYs1AAAAYY"]
[Fri Feb 27 20:34:41.380617 2026] [:error] [pid 52073:tid 52078] [client 20.220.144.87:42880] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaGPYYa650YPyxXVeRYs2wAAAYI"]
[Fri Feb 27 20:34:41.821809 2026] [:error] [pid 52073:tid 52077] [client 20.220.144.87:42955] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaGPYYa650YPyxXVeRYs4gAAAYE"]
[Fri Feb 27 20:34:42.299154 2026] [:error] [pid 56075:tid 56099] [client 20.220.144.87:42978] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaGPYsKBhrfI6KNv9RieugAAABU"]
[Fri Feb 27 21:32:31.453349 2026] [proxy_fcgi:error] [pid 54102:tid 54168] [client 45.131.195.248:47233] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 21:32:31.704469 2026] [proxy_fcgi:error] [pid 54102:tid 54147] [client 45.131.195.248:47233] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 21:32:31.945458 2026] [proxy_fcgi:error] [pid 54102:tid 54169] [client 45.131.195.248:47233] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 21:32:32.195513 2026] [proxy_fcgi:error] [pid 54102:tid 54159] [client 45.131.195.248:47233] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 21:32:32.496779 2026] [proxy_fcgi:error] [pid 54102:tid 54154] [client 45.131.195.248:47233] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 21:32:32.728394 2026] [proxy_fcgi:error] [pid 54102:tid 54166] [client 45.131.195.248:47233] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 21:32:32.962470 2026] [proxy_fcgi:error] [pid 54102:tid 54168] [client 45.131.195.248:47233] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 21:32:33.207463 2026] [proxy_fcgi:error] [pid 54102:tid 54147] [client 45.131.195.248:47233] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 21:32:50.921479 2026] [proxy_fcgi:error] [pid 54102:tid 54149] [client 45.131.195.248:47233] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 21:33:03.404619 2026] [:error] [pid 49306:tid 49318] [client 45.131.195.84:38799] [client 45.131.195.84] ModSecurity: collections_remove_stale: Failed to access DBM file "/tmp/ip": Resource deadlock avoided [hostname "dwelectservices.com.au"] [uri "/components/"] [unique_id "aaGdDvnSUDZue59Px9sm1wAAAUo"]
[Fri Feb 27 22:47:35.276503 2026] [proxy_fcgi:error] [pid 52073:tid 52090] [client 20.220.8.221:6633] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 22:47:35.494218 2026] [proxy_fcgi:error] [pid 52073:tid 52097] [client 20.220.8.221:6633] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 22:47:35.920279 2026] [:error] [pid 52073:tid 52085] [client 20.220.8.221:6633] [client 20.220.8.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aaGuh4a650YPyxXVeRa-qwAAAYk"]
[Fri Feb 27 22:47:36.757779 2026] [proxy_fcgi:error] [pid 54102:tid 54151] [client 20.220.8.221:6597] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 22:47:37.180005 2026] [proxy_fcgi:error] [pid 54102:tid 54156] [client 20.220.8.221:6597] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 22:47:37.619496 2026] [proxy_fcgi:error] [pid 54102:tid 54169] [client 20.220.8.221:6597] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 22:47:38.248329 2026] [:error] [pid 54102:tid 54150] [client 20.220.8.221:6597] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aaGuini74D4fiYUm_GeNTwAAAIY"]
[Fri Feb 27 22:47:39.109519 2026] [:error] [pid 56075:tid 56079] [client 20.220.8.221:6645] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aaGui8KBhrfI6KNv9RhIdwAAAAI"]
[Fri Feb 27 22:47:39.959602 2026] [:error] [pid 52073:tid 52099] [client 20.220.8.221:6470] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aaGui4a650YPyxXVeRa-sAAAAZc"]
[Fri Feb 27 22:47:40.797107 2026] [:error] [pid 49306:tid 49329] [client 20.220.8.221:6654] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aaGujPnSUDZue59Px9tgiwAAAVU"]
[Fri Feb 27 23:01:51.153868 2026] [proxy_fcgi:error] [pid 56075:tid 56078] [client 172.190.142.176:13008] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 23:01:51.381145 2026] [proxy_fcgi:error] [pid 56075:tid 56087] [client 172.190.142.176:13008] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 23:01:51.608876 2026] [proxy_fcgi:error] [pid 56075:tid 56097] [client 172.190.142.176:13008] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 23:01:51.837103 2026] [proxy_fcgi:error] [pid 56075:tid 56094] [client 172.190.142.176:13008] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 23:01:52.063269 2026] [proxy_fcgi:error] [pid 56075:tid 56090] [client 172.190.142.176:13008] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 23:01:54.946188 2026] [proxy_fcgi:error] [pid 56075:tid 56092] [client 172.190.142.176:13008] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 23:01:55.171245 2026] [:error] [pid 56075:tid 56099] [client 172.190.142.176:13008] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/vx.php"] [unique_id "aaGx48KBhrfI6KNv9RhVoAAAABU"]
[Fri Feb 27 23:01:55.660039 2026] [:error] [pid 56075:tid 56082] [client 172.190.142.176:4314] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/vx.php"] [unique_id "aaGx48KBhrfI6KNv9RhVpAAAAAU"]
[Fri Feb 27 23:01:56.119977 2026] [:error] [pid 56075:tid 56102] [client 172.190.142.176:36438] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/vx.php"] [unique_id "aaGx5MKBhrfI6KNv9RhVqQAAABg"]
[Fri Feb 27 23:01:56.566399 2026] [:error] [pid 56075:tid 56079] [client 172.190.142.176:34565] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/vx.php"] [unique_id "aaGx5MKBhrfI6KNv9RhVqgAAAAI"]
[Fri Feb 27 23:01:57.047499 2026] [:error] [pid 52073:tid 52092] [client 172.190.142.176:4779] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wqqs.php"] [unique_id "aaGx5Ya650YPyxXVeRbJIwAAAZA"]
[Fri Feb 27 23:01:57.495718 2026] [:error] [pid 56075:tid 56091] [client 172.190.142.176:29267] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wqqs.php"] [unique_id "aaGx5cKBhrfI6KNv9RhVsAAAAA0"]
[Fri Feb 27 23:01:57.938997 2026] [:error] [pid 54231:tid 54235] [client 172.190.142.176:49467] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wqqs.php"] [unique_id "aaGx5eTvb5AeyJCdY7BC9QAAAEE"]
[Fri Feb 27 23:01:58.379824 2026] [:error] [pid 54103:tid 54195] [client 172.190.142.176:34623] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wqqs.php"] [unique_id "aaGx5uvG4MPCmE0B2sDMWgAAANg"]
[Fri Feb 27 23:01:58.828082 2026] [:error] [pid 54102:tid 54156] [client 172.190.142.176:29306] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/sallu.php"] [unique_id "aaGx5ni74D4fiYUm_GeQyQAAAIw"]
[Fri Feb 27 23:01:59.285736 2026] [:error] [pid 62998:tid 63005] [client 172.190.142.176:49410] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/sallu.php"] [unique_id "aaGx51QeueXZDUmoLomEdAAAAQM"]
[Fri Feb 27 23:01:59.753400 2026] [:error] [pid 62998:tid 63020] [client 172.190.142.176:29281] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/sallu.php"] [unique_id "aaGx51QeueXZDUmoLomEdwAAARI"]
[Fri Feb 27 23:02:00.183381 2026] [:error] [pid 56075:tid 56079] [client 172.190.142.176:9323] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/sallu.php"] [unique_id "aaGx6MKBhrfI6KNv9RhVvAAAAAI"]
[Fri Feb 27 23:02:00.706463 2026] [:error] [pid 56075:tid 56084] [client 172.190.142.176:49462] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/zc-318.php"] [unique_id "aaGx6MKBhrfI6KNv9RhVwgAAAAc"]
[Fri Feb 27 23:02:01.141372 2026] [:error] [pid 49306:tid 49328] [client 172.190.142.176:4785] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/zc-318.php"] [unique_id "aaGx6fnSUDZue59Px9tn0wAAAVQ"]
[Fri Feb 27 23:02:01.606857 2026] [:error] [pid 54103:tid 54170] [client 172.190.142.176:34572] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/zc-318.php"] [unique_id "aaGx6evG4MPCmE0B2sDMXAAAAMA"]
[Fri Feb 27 23:02:02.024509 2026] [:error] [pid 54231:tid 54244] [client 172.190.142.176:49428] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/zc-318.php"] [unique_id "aaGx6uTvb5AeyJCdY7BC_gAAAEo"]
[Fri Feb 27 23:02:02.489330 2026] [:error] [pid 52073:tid 52087] [client 172.190.142.176:4795] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/sallu.php"] [unique_id "aaGx6oa650YPyxXVeRbJNgAAAYs"]
[Fri Feb 27 23:02:02.933783 2026] [:error] [pid 56075:tid 56101] [client 172.190.142.176:4758] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/sallu.php"] [unique_id "aaGx6sKBhrfI6KNv9RhVxQAAABc"]
[Fri Feb 27 23:02:03.406346 2026] [:error] [pid 52073:tid 52083] [client 172.190.142.176:49413] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/sallu.php"] [unique_id "aaGx64a650YPyxXVeRbJPAAAAYc"]
[Fri Feb 27 23:02:03.854841 2026] [:error] [pid 49306:tid 49332] [client 172.190.142.176:13006] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/sallu.php"] [unique_id "aaGx6_nSUDZue59Px9tn1wAAAVg"]
[Fri Feb 27 23:02:04.283229 2026] [:error] [pid 54103:tid 54188] [client 172.190.142.176:4332] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/dom.php"] [unique_id "aaGx7OvG4MPCmE0B2sDMXQAAANE"]
[Fri Feb 27 23:02:04.733902 2026] [:error] [pid 54103:tid 54190] [client 172.190.142.176:9336] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/dom.php"] [unique_id "aaGx7OvG4MPCmE0B2sDMXwAAANM"]
[Fri Feb 27 23:02:05.194903 2026] [:error] [pid 54231:tid 54235] [client 172.190.142.176:34591] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/dom.php"] [unique_id "aaGx7eTvb5AeyJCdY7BDAgAAAEE"]
[Fri Feb 27 23:02:05.647300 2026] [:error] [pid 54103:tid 54187] [client 172.190.142.176:36474] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/dom.php"] [unique_id "aaGx7evG4MPCmE0B2sDMYwAAANA"]
[Fri Feb 27 23:02:06.087455 2026] [:error] [pid 54231:tid 54253] [client 172.190.142.176:36439] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/rxzx.php"] [unique_id "aaGx7uTvb5AeyJCdY7BDAwAAAFM"]
[Fri Feb 27 23:02:06.522731 2026] [:error] [pid 56075:tid 56094] [client 172.190.142.176:4308] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/rxzx.php"] [unique_id "aaGx7sKBhrfI6KNv9RhVyQAAABA"]
[Fri Feb 27 23:02:06.954373 2026] [:error] [pid 56075:tid 56077] [client 172.190.142.176:49444] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/rxzx.php"] [unique_id "aaGx7sKBhrfI6KNv9RhVywAAAAA"]
[Fri Feb 27 23:02:07.398380 2026] [:error] [pid 56075:tid 56102] [client 172.190.142.176:29283] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/rxzx.php"] [unique_id "aaGx78KBhrfI6KNv9RhVzgAAABg"]
[Fri Feb 27 23:02:07.872713 2026] [:error] [pid 56075:tid 56080] [client 172.190.142.176:4308] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/Okxob.php"] [unique_id "aaGx78KBhrfI6KNv9RhV0gAAAAM"]
[Fri Feb 27 23:02:08.334049 2026] [:error] [pid 49306:tid 49326] [client 172.190.142.176:4772] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/Okxob.php"] [unique_id "aaGx8PnSUDZue59Px9tn3gAAAVI"]
[Fri Feb 27 23:02:08.790330 2026] [:error] [pid 56075:tid 56097] [client 172.190.142.176:29257] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/Okxob.php"] [unique_id "aaGx8MKBhrfI6KNv9RhV2QAAABM"]
[Fri Feb 27 23:02:09.285924 2026] [:error] [pid 49306:tid 49323] [client 172.190.142.176:4311] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/Okxob.php"] [unique_id "aaGx8fnSUDZue59Px9tn4AAAAU8"]
[Fri Feb 27 23:02:09.766061 2026] [:error] [pid 54231:tid 54258] [client 172.190.142.176:36419] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/moon3.php"] [unique_id "aaGx8eTvb5AeyJCdY7BDCQAAAFg"]
[Fri Feb 27 23:02:10.365316 2026] [:error] [pid 49306:tid 49328] [client 172.190.142.176:29297] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/moon3.php"] [unique_id "aaGx8vnSUDZue59Px9tn5gAAAVQ"]
[Fri Feb 27 23:02:10.904355 2026] [:error] [pid 54231:tid 54244] [client 172.190.142.176:13047] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/moon3.php"] [unique_id "aaGx8uTvb5AeyJCdY7BDEAAAAEo"]
[Fri Feb 27 23:02:11.439031 2026] [:error] [pid 54102:tid 54168] [client 172.190.142.176:36449] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/moon3.php"] [unique_id "aaGx83i74D4fiYUm_GeQ0QAAAJc"]
[Fri Feb 27 23:02:11.930605 2026] [:error] [pid 54103:tid 54194] [client 172.190.142.176:9295] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/thui.php"] [unique_id "aaGx8-vG4MPCmE0B2sDMZgAAANc"]
[Fri Feb 27 23:02:12.439199 2026] [:error] [pid 52073:tid 52091] [client 172.190.142.176:29299] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/thui.php"] [unique_id "aaGx9Ia650YPyxXVeRbJYwAAAY8"]
[Fri Feb 27 23:02:12.982544 2026] [:error] [pid 52073:tid 52098] [client 172.190.142.176:9339] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/thui.php"] [unique_id "aaGx9Ia650YPyxXVeRbJZwAAAZY"]
[Fri Feb 27 23:02:13.600756 2026] [:error] [pid 56075:tid 56085] [client 172.190.142.176:4765] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/thui.php"] [unique_id "aaGx9cKBhrfI6KNv9RhV3wAAAAg"]
[Fri Feb 27 23:02:14.165868 2026] [:error] [pid 56075:tid 56084] [client 172.190.142.176:36459] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ebahvhhh.php"] [unique_id "aaGx9sKBhrfI6KNv9RhV5gAAAAc"]
[Fri Feb 27 23:02:14.692139 2026] [:error] [pid 54103:tid 54186] [client 172.190.142.176:4794] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ebahvhhh.php"] [unique_id "aaGx9uvG4MPCmE0B2sDMaQAAAM8"]
[Fri Feb 27 23:02:15.214338 2026] [:error] [pid 52073:tid 52076] [client 172.190.142.176:34580] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ebahvhhh.php"] [unique_id "aaGx94a650YPyxXVeRbJbAAAAYA"]
[Fri Feb 27 23:02:15.675213 2026] [:error] [pid 49306:tid 49331] [client 172.190.142.176:36433] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ebahvhhh.php"] [unique_id "aaGx9_nSUDZue59Px9tn9AAAAVc"]
[Fri Feb 27 23:02:16.162758 2026] [:error] [pid 54231:tid 54252] [client 172.190.142.176:34587] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/snq.php"] [unique_id "aaGx-OTvb5AeyJCdY7BDFwAAAFI"]
[Fri Feb 27 23:02:16.709875 2026] [:error] [pid 49306:tid 49313] [client 172.190.142.176:49418] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/snq.php"] [unique_id "aaGx-PnSUDZue59Px9tn9QAAAUU"]
[Fri Feb 27 23:02:17.196643 2026] [:error] [pid 54103:tid 54184] [client 172.190.142.176:4778] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/snq.php"] [unique_id "aaGx-evG4MPCmE0B2sDMagAAAM0"]
[Fri Feb 27 23:02:17.697043 2026] [:error] [pid 52073:tid 52076] [client 172.190.142.176:34592] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/snq.php"] [unique_id "aaGx-Ya650YPyxXVeRbJfAAAAYA"]
[Fri Feb 27 23:02:18.208275 2026] [:error] [pid 54103:tid 54174] [client 172.190.142.176:4783] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/mcs.php"] [unique_id "aaGx-uvG4MPCmE0B2sDMawAAAMM"]
[Fri Feb 27 23:02:18.661528 2026] [:error] [pid 54101:tid 54116] [client 172.190.142.176:49460] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/mcs.php"] [unique_id "aaGx-lY5qgRktcYTGFtc5gAAAcg"]
[Fri Feb 27 23:02:19.137388 2026] [:error] [pid 52073:tid 52090] [client 172.190.142.176:36429] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/mcs.php"] [unique_id "aaGx-4a650YPyxXVeRbJfgAAAY4"]
[Fri Feb 27 23:02:19.575211 2026] [:error] [pid 52073:tid 52095] [client 172.190.142.176:4306] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/mcs.php"] [unique_id "aaGx-4a650YPyxXVeRbJgAAAAZM"]
[Fri Feb 27 23:02:20.044783 2026] [:error] [pid 52073:tid 52079] [client 172.190.142.176:14166] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ok.php"] [unique_id "aaGx_Ia650YPyxXVeRbJhwAAAYM"]
[Fri Feb 27 23:02:20.491318 2026] [:error] [pid 52073:tid 52081] [client 172.190.142.176:13031] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ok.php"] [unique_id "aaGx_Ia650YPyxXVeRbJjAAAAYU"]
[Fri Feb 27 23:02:20.982912 2026] [:error] [pid 54102:tid 54169] [client 172.190.142.176:4740] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ok.php"] [unique_id "aaGx_Hi74D4fiYUm_GeQ4AAAAJg"]
[Fri Feb 27 23:02:21.420192 2026] [:error] [pid 62998:tid 63010] [client 172.190.142.176:29304] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ok.php"] [unique_id "aaGx_VQeueXZDUmoLomEiQAAAQg"]
[Fri Feb 27 23:02:21.917516 2026] [:error] [pid 54103:tid 54192] [client 172.190.142.176:29300] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xleet"] [unique_id "aaGx_evG4MPCmE0B2sDMbQAAANU"]
[Fri Feb 27 23:02:22.421896 2026] [:error] [pid 54103:tid 54173] [client 172.190.142.176:29251] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xleet"] [unique_id "aaGx_uvG4MPCmE0B2sDMbgAAAMI"]
[Fri Feb 27 23:02:22.882877 2026] [:error] [pid 62998:tid 63014] [client 172.190.142.176:36432] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xleet"] [unique_id "aaGx_lQeueXZDUmoLomEjgAAAQw"]
[Fri Feb 27 23:02:23.364880 2026] [:error] [pid 54102:tid 54166] [client 172.190.142.176:62646] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xleet"] [unique_id "aaGx_3i74D4fiYUm_GeQ5AAAAJY"]
[Fri Feb 27 23:02:23.923819 2026] [:error] [pid 54231:tid 54240] [client 172.190.142.176:4893] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/66.php"] [unique_id "aaGx_-Tvb5AeyJCdY7BDJgAAAEY"]
[Fri Feb 27 23:02:24.387119 2026] [:error] [pid 62998:tid 63001] [client 172.190.142.176:34609] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/66.php"] [unique_id "aaGyAFQeueXZDUmoLomEjwAAAQA"]
[Fri Feb 27 23:02:24.835934 2026] [:error] [pid 54102:tid 54165] [client 172.190.142.176:4302] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/66.php"] [unique_id "aaGyAHi74D4fiYUm_GeQ6gAAAJU"]
[Fri Feb 27 23:02:25.326701 2026] [:error] [pid 54101:tid 54127] [client 172.190.142.176:4738] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/66.php"] [unique_id "aaGyAVY5qgRktcYTGFtc7wAAAdM"]
[Fri Feb 27 23:02:25.766500 2026] [:error] [pid 49306:tid 49309] [client 172.190.142.176:34571] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/public/wp-blog.php"] [unique_id "aaGyAfnSUDZue59Px9tn_wAAAUE"]
[Fri Feb 27 23:02:26.267967 2026] [:error] [pid 49306:tid 49314] [client 172.190.142.176:36437] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/public/wp-blog.php"] [unique_id "aaGyAvnSUDZue59Px9toAgAAAUY"]
[Fri Feb 27 23:02:26.836978 2026] [:error] [pid 62998:tid 63018] [client 172.190.142.176:13021] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/public/wp-blog.php"] [unique_id "aaGyAlQeueXZDUmoLomElgAAARA"]
[Fri Feb 27 23:02:27.312132 2026] [:error] [pid 54231:tid 54236] [client 172.190.142.176:4289] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/public/wp-blog.php"] [unique_id "aaGyA-Tvb5AeyJCdY7BDLwAAAEI"]
[Fri Feb 27 23:02:27.734309 2026] [:error] [pid 56075:tid 56078] [client 172.190.142.176:34577] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xa.php"] [unique_id "aaGyA8KBhrfI6KNv9RhV9wAAAAE"]
[Fri Feb 27 23:02:28.309362 2026] [:error] [pid 54101:tid 54110] [client 172.190.142.176:36467] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xa.php"] [unique_id "aaGyBFY5qgRktcYTGFtc8AAAAcI"]
[Fri Feb 27 23:02:28.834063 2026] [:error] [pid 62998:tid 63020] [client 172.190.142.176:12997] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xa.php"] [unique_id "aaGyBFQeueXZDUmoLomEmQAAARI"]
[Fri Feb 27 23:02:29.306678 2026] [:error] [pid 62998:tid 63026] [client 172.190.142.176:34589] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xa.php"] [unique_id "aaGyBVQeueXZDUmoLomEmgAAARg"]
[Fri Feb 27 23:02:29.755325 2026] [:error] [pid 62998:tid 63019] [client 172.190.142.176:9314] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/motu.php"] [unique_id "aaGyBVQeueXZDUmoLomEnwAAARE"]
[Fri Feb 27 23:02:30.195319 2026] [:error] [pid 62998:tid 63009] [client 172.190.142.176:62597] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/motu.php"] [unique_id "aaGyBlQeueXZDUmoLomEogAAAQc"]
[Fri Feb 27 23:02:30.626420 2026] [:error] [pid 56075:tid 56077] [client 172.190.142.176:29286] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/motu.php"] [unique_id "aaGyBsKBhrfI6KNv9RhV_QAAAAA"]
[Fri Feb 27 23:02:31.159648 2026] [:error] [pid 54231:tid 54243] [client 172.190.142.176:34568] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/motu.php"] [unique_id "aaGyB-Tvb5AeyJCdY7BDOgAAAEk"]
[Fri Feb 27 23:02:31.608167 2026] [:error] [pid 62998:tid 63011] [client 172.190.142.176:34597] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/tmpls.php"] [unique_id "aaGyB1QeueXZDUmoLomEqwAAAQk"]
[Fri Feb 27 23:02:32.031724 2026] [:error] [pid 54102:tid 54155] [client 172.190.142.176:36465] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/tmpls.php"] [unique_id "aaGyCHi74D4fiYUm_GeRBwAAAIs"]
[Fri Feb 27 23:02:32.603371 2026] [:error] [pid 62998:tid 63014] [client 172.190.142.176:9767] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/tmpls.php"] [unique_id "aaGyCFQeueXZDUmoLomEsgAAAQw"]
[Fri Feb 27 23:02:33.168833 2026] [:error] [pid 52073:tid 52077] [client 172.190.142.176:4340] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/tmpls.php"] [unique_id "aaGyCYa650YPyxXVeRbJkwAAAYE"]
[Fri Feb 27 23:02:33.657709 2026] [:error] [pid 62998:tid 63012] [client 172.190.142.176:4341] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bsg-management/php.php"] [unique_id "aaGyCVQeueXZDUmoLomEuQAAAQo"]
[Fri Feb 27 23:02:34.147878 2026] [:error] [pid 56075:tid 56085] [client 172.190.142.176:13043] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bsg-management/php.php"] [unique_id "aaGyCsKBhrfI6KNv9RhWAQAAAAg"]
[Fri Feb 27 23:02:34.654321 2026] [:error] [pid 54102:tid 54148] [client 172.190.142.176:49448] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bsg-management/php.php"] [unique_id "aaGyCni74D4fiYUm_GeRDQAAAIQ"]
[Fri Feb 27 23:02:35.100551 2026] [:error] [pid 52073:tid 52079] [client 172.190.142.176:4784] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bsg-management/php.php"] [unique_id "aaGyC4a650YPyxXVeRbJlQAAAYM"]
[Fri Feb 27 23:02:35.566017 2026] [:error] [pid 52073:tid 52088] [client 172.190.142.176:13044] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/pouhg.php"] [unique_id "aaGyC4a650YPyxXVeRbJlgAAAYw"]
[Fri Feb 27 23:02:36.053054 2026] [:error] [pid 52073:tid 52096] [client 172.190.142.176:4301] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/pouhg.php"] [unique_id "aaGyDIa650YPyxXVeRbJmQAAAZQ"]
[Fri Feb 27 23:02:36.546544 2026] [:error] [pid 52073:tid 52078] [client 172.190.142.176:4766] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/pouhg.php"] [unique_id "aaGyDIa650YPyxXVeRbJoQAAAYI"]
[Fri Feb 27 23:02:36.991812 2026] [:error] [pid 56075:tid 56090] [client 172.190.142.176:29290] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/pouhg.php"] [unique_id "aaGyDMKBhrfI6KNv9RhWDwAAAAw"]
[Fri Feb 27 23:02:37.466622 2026] [:error] [pid 52073:tid 52096] [client 172.190.142.176:36428] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws61.php"] [unique_id "aaGyDYa650YPyxXVeRbJqgAAAZQ"]
[Fri Feb 27 23:02:37.930826 2026] [:error] [pid 62998:tid 63017] [client 172.190.142.176:14204] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws61.php"] [unique_id "aaGyDVQeueXZDUmoLomEygAAAQ8"]
[Fri Feb 27 23:02:38.391617 2026] [:error] [pid 54231:tid 54240] [client 172.190.142.176:4756] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws61.php"] [unique_id "aaGyDuTvb5AeyJCdY7BDRwAAAEY"]
[Fri Feb 27 23:02:38.868611 2026] [:error] [pid 56075:tid 56084] [client 172.190.142.176:49411] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws61.php"] [unique_id "aaGyDsKBhrfI6KNv9RhWEQAAAAc"]
[Fri Feb 27 23:02:39.327208 2026] [:error] [pid 54231:tid 54245] [client 172.190.142.176:34562] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaGyD-Tvb5AeyJCdY7BDTAAAAEs"]
[Fri Feb 27 23:02:39.776207 2026] [:error] [pid 62998:tid 63022] [client 172.190.142.176:36422] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaGyD1QeueXZDUmoLomE1wAAARQ"]
[Fri Feb 27 23:02:40.219476 2026] [:error] [pid 56075:tid 56097] [client 172.190.142.176:4781] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaGyEMKBhrfI6KNv9RhWHAAAABM"]
[Fri Feb 27 23:02:40.703730 2026] [:error] [pid 56075:tid 56096] [client 172.190.142.176:36461] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaGyEMKBhrfI6KNv9RhWIgAAABI"]
[Fri Feb 27 23:02:41.212920 2026] [:error] [pid 52073:tid 52087] [client 172.190.142.176:29269] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/app"] [unique_id "aaGyEYa650YPyxXVeRbJswAAAYs"]
[Fri Feb 27 23:02:41.662926 2026] [:error] [pid 52073:tid 52089] [client 172.190.142.176:13005] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/app"] [unique_id "aaGyEYa650YPyxXVeRbJtgAAAY0"]
[Fri Feb 27 23:02:42.207733 2026] [:error] [pid 54103:tid 54180] [client 172.190.142.176:36450] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/app"] [unique_id "aaGyEuvG4MPCmE0B2sDMegAAAMk"]
[Fri Feb 27 23:02:42.731030 2026] [:error] [pid 56075:tid 56099] [client 172.190.142.176:34621] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/app"] [unique_id "aaGyEsKBhrfI6KNv9RhWKwAAABU"]
[Fri Feb 27 23:02:43.227993 2026] [:error] [pid 54102:tid 54156] [client 172.190.142.176:4347] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws59.php"] [unique_id "aaGyE3i74D4fiYUm_GeREwAAAIw"]
[Fri Feb 27 23:02:43.709671 2026] [:error] [pid 54102:tid 54162] [client 172.190.142.176:49458] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws59.php"] [unique_id "aaGyE3i74D4fiYUm_GeRFAAAAJI"]
[Fri Feb 27 23:02:44.192372 2026] [:error] [pid 56075:tid 56091] [client 172.190.142.176:36478] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws59.php"] [unique_id "aaGyFMKBhrfI6KNv9RhWMAAAAA0"]
[Fri Feb 27 23:02:44.650919 2026] [:error] [pid 49306:tid 49321] [client 172.190.142.176:13027] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws59.php"] [unique_id "aaGyFPnSUDZue59Px9toDAAAAU0"]
[Fri Feb 27 23:02:45.126812 2026] [:error] [pid 54231:tid 54238] [client 172.190.142.176:4929] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-blog.php"] [unique_id "aaGyFeTvb5AeyJCdY7BDUwAAAEQ"]
[Fri Feb 27 23:02:45.614463 2026] [:error] [pid 56075:tid 56097] [client 172.190.142.176:13007] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-blog.php"] [unique_id "aaGyFcKBhrfI6KNv9RhWMgAAABM"]
[Fri Feb 27 23:02:46.100561 2026] [:error] [pid 56075:tid 56090] [client 172.190.142.176:4318] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-blog.php"] [unique_id "aaGyFsKBhrfI6KNv9RhWNAAAAAw"]
[Fri Feb 27 23:02:46.563715 2026] [:error] [pid 56075:tid 56096] [client 172.190.142.176:36469] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-blog.php"] [unique_id "aaGyFsKBhrfI6KNv9RhWNgAAABI"]
[Fri Feb 27 23:02:47.162559 2026] [:error] [pid 56075:tid 56088] [client 172.190.142.176:36434] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/mamzi.php"] [unique_id "aaGyF8KBhrfI6KNv9RhWOAAAAAs"]
[Fri Feb 27 23:02:47.592162 2026] [:error] [pid 54102:tid 54153] [client 172.190.142.176:34618] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/mamzi.php"] [unique_id "aaGyF3i74D4fiYUm_GeRGAAAAIk"]
[Fri Feb 27 23:02:48.064948 2026] [:error] [pid 62998:tid 63026] [client 172.190.142.176:4294] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/mamzi.php"] [unique_id "aaGyGFQeueXZDUmoLomE3gAAARg"]
[Fri Feb 27 23:02:48.530957 2026] [:error] [pid 56075:tid 56086] [client 172.190.142.176:9289] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/mamzi.php"] [unique_id "aaGyGMKBhrfI6KNv9RhWOgAAAAk"]
[Fri Feb 27 23:02:48.977016 2026] [:error] [pid 54101:tid 54127] [client 172.190.142.176:49421] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/222.php"] [unique_id "aaGyGFY5qgRktcYTGFtdAgAAAdM"]
[Fri Feb 27 23:02:49.432753 2026] [:error] [pid 54231:tid 54254] [client 172.190.142.176:49465] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/222.php"] [unique_id "aaGyGeTvb5AeyJCdY7BDWAAAAFQ"]
[Fri Feb 27 23:02:49.923287 2026] [:error] [pid 54101:tid 54128] [client 172.190.142.176:46369] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/222.php"] [unique_id "aaGyGVY5qgRktcYTGFtdBAAAAdQ"]
[Fri Feb 27 23:02:50.354821 2026] [:error] [pid 54103:tid 54185] [client 172.190.142.176:34606] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/222.php"] [unique_id "aaGyGuvG4MPCmE0B2sDMlgAAAM4"]
[Fri Feb 27 23:02:50.784749 2026] [:error] [pid 56075:tid 56082] [client 172.190.142.176:13054] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ae.php"] [unique_id "aaGyGsKBhrfI6KNv9RhWQQAAAAU"]
[Fri Feb 27 23:02:51.214578 2026] [:error] [pid 56075:tid 56097] [client 172.190.142.176:62627] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ae.php"] [unique_id "aaGyG8KBhrfI6KNv9RhWQwAAABM"]
[Fri Feb 27 23:02:51.635317 2026] [:error] [pid 52073:tid 52085] [client 172.190.142.176:4321] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ae.php"] [unique_id "aaGyG4a650YPyxXVeRbJvQAAAYk"]
[Fri Feb 27 23:02:52.083220 2026] [:error] [pid 56075:tid 56079] [client 172.190.142.176:36425] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ae.php"] [unique_id "aaGyHMKBhrfI6KNv9RhWSgAAAAI"]
[Fri Feb 27 23:02:52.530504 2026] [:error] [pid 54231:tid 54252] [client 172.190.142.176:49469] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/06.php"] [unique_id "aaGyHOTvb5AeyJCdY7BDWQAAAFI"]
[Fri Feb 27 23:02:53.015026 2026] [proxy_fcgi:error] [pid 52073:tid 52087] [client 172.190.142.176:9287] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 23:02:53.241059 2026] [proxy_fcgi:error] [pid 52073:tid 52089] [client 172.190.142.176:9287] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 23:02:53.467229 2026] [proxy_fcgi:error] [pid 52073:tid 52079] [client 172.190.142.176:9287] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 23:02:53.691692 2026] [proxy_fcgi:error] [pid 52073:tid 52096] [client 172.190.142.176:9287] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 23:02:53.927920 2026] [proxy_fcgi:error] [pid 52073:tid 52092] [client 172.190.142.176:9287] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 23:02:54.152560 2026] [proxy_fcgi:error] [pid 52073:tid 52076] [client 172.190.142.176:9287] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 23:02:54.601699 2026] [proxy_fcgi:error] [pid 52073:tid 52091] [client 172.190.142.176:9287] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 23:02:56.096602 2026] [proxy_fcgi:error] [pid 52073:tid 52083] [client 172.190.142.176:9287] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 23:02:56.323287 2026] [proxy_fcgi:error] [pid 52073:tid 52099] [client 172.190.142.176:9287] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 23:02:56.545977 2026] [:error] [pid 52073:tid 52082] [client 172.190.142.176:9287] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/an7.php"] [unique_id "aaGyIIa650YPyxXVeRbJ1wAAAYY"]
[Fri Feb 27 23:02:57.024592 2026] [:error] [pid 52073:tid 52079] [client 172.190.142.176:62640] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/an7.php"] [unique_id "aaGyIYa650YPyxXVeRbJ2QAAAYM"]
[Fri Feb 27 23:02:57.485636 2026] [:error] [pid 52073:tid 52076] [client 172.190.142.176:4288] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/an7.php"] [unique_id "aaGyIYa650YPyxXVeRbJ3AAAAYA"]
[Fri Feb 27 23:02:57.941679 2026] [:error] [pid 52073:tid 52094] [client 172.190.142.176:13002] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/an7.php"] [unique_id "aaGyIYa650YPyxXVeRbJ4AAAAZI"]
[Fri Feb 27 23:02:58.414241 2026] [:error] [pid 56075:tid 56095] [client 172.190.142.176:4335] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ty.php"] [unique_id "aaGyIsKBhrfI6KNv9RhWawAAABE"]
[Fri Feb 27 23:02:58.887219 2026] [:error] [pid 56075:tid 56081] [client 172.190.142.176:4893] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ty.php"] [unique_id "aaGyIsKBhrfI6KNv9RhWcQAAAAQ"]
[Fri Feb 27 23:02:59.336739 2026] [:error] [pid 54101:tid 54113] [client 172.190.142.176:13025] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ty.php"] [unique_id "aaGyI1Y5qgRktcYTGFtdBQAAAcU"]
[Fri Feb 27 23:02:59.783549 2026] [:error] [pid 62998:tid 63006] [client 172.190.142.176:4780] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ty.php"] [unique_id "aaGyI1QeueXZDUmoLomE7QAAAQQ"]
[Fri Feb 27 23:03:00.231660 2026] [:error] [pid 52073:tid 52094] [client 172.190.142.176:4284] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/brc.php"] [unique_id "aaGyJIa650YPyxXVeRbJ8wAAAZI"]
[Fri Feb 27 23:03:00.682716 2026] [:error] [pid 54231:tid 54241] [client 172.190.142.176:4348] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/brc.php"] [unique_id "aaGyJOTvb5AeyJCdY7BDXwAAAEc"]
[Fri Feb 27 23:03:01.210515 2026] [:error] [pid 54101:tid 54123] [client 172.190.142.176:9335] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/brc.php"] [unique_id "aaGyJVY5qgRktcYTGFtdBgAAAc8"]
[Fri Feb 27 23:03:01.705139 2026] [:error] [pid 54231:tid 54238] [client 172.190.142.176:4342] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/brc.php"] [unique_id "aaGyJeTvb5AeyJCdY7BDYgAAAEQ"]
[Fri Feb 27 23:03:02.145329 2026] [:error] [pid 62998:tid 63018] [client 172.190.142.176:14195] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/koiy.php"] [unique_id "aaGyJlQeueXZDUmoLomE9gAAARA"]
[Fri Feb 27 23:03:02.601980 2026] [:error] [pid 62998:tid 63010] [client 172.190.142.176:4739] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/koiy.php"] [unique_id "aaGyJlQeueXZDUmoLomE-AAAAQg"]
[Fri Feb 27 23:03:03.079322 2026] [:error] [pid 62998:tid 63007] [client 172.190.142.176:13011] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/koiy.php"] [unique_id "aaGyJ1QeueXZDUmoLomE_AAAAQU"]
[Fri Feb 27 23:03:03.510628 2026] [:error] [pid 56075:tid 56086] [client 172.190.142.176:62624] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/koiy.php"] [unique_id "aaGyJ8KBhrfI6KNv9RhWgQAAAAk"]
[Fri Feb 27 23:03:04.006106 2026] [:error] [pid 56075:tid 56080] [client 172.190.142.176:36448] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/myfile.php"] [unique_id "aaGyKMKBhrfI6KNv9RhWgwAAAAM"]
[Fri Feb 27 23:03:04.500620 2026] [:error] [pid 56075:tid 56100] [client 172.190.142.176:29294] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/myfile.php"] [unique_id "aaGyKMKBhrfI6KNv9RhWhgAAABY"]
[Fri Feb 27 23:03:04.927825 2026] [:error] [pid 62998:tid 63023] [client 172.190.142.176:34616] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/myfile.php"] [unique_id "aaGyKFQeueXZDUmoLomFAQAAARU"]
[Fri Feb 27 23:03:05.389501 2026] [:error] [pid 56075:tid 56078] [client 172.190.142.176:13004] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/myfile.php"] [unique_id "aaGyKcKBhrfI6KNv9RhWiwAAAAE"]
[Fri Feb 27 23:03:05.857046 2026] [:error] [pid 52073:tid 52100] [client 172.190.142.176:12994] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/fr/ms.php"] [unique_id "aaGyKYa650YPyxXVeRbKAAAAAZg"]
[Fri Feb 27 23:03:06.354925 2026] [:error] [pid 56075:tid 56085] [client 172.190.142.176:49431] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/fr/ms.php"] [unique_id "aaGyKsKBhrfI6KNv9RhWjgAAAAg"]
[Fri Feb 27 23:03:06.809300 2026] [:error] [pid 54102:tid 54154] [client 172.190.142.176:34615] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/fr/ms.php"] [unique_id "aaGyKni74D4fiYUm_GeRIwAAAIo"]
[Fri Feb 27 23:03:07.289315 2026] [:error] [pid 52073:tid 52086] [client 172.190.142.176:29259] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/fr/ms.php"] [unique_id "aaGyK4a650YPyxXVeRbKBQAAAYo"]
[Fri Feb 27 23:03:07.712912 2026] [:error] [pid 54231:tid 54249] [client 172.190.142.176:4315] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/Ov-Simple1.php"] [unique_id "aaGyK-Tvb5AeyJCdY7BDcAAAAE8"]
[Fri Feb 27 23:03:08.293680 2026] [:error] [pid 52073:tid 52080] [client 172.190.142.176:13041] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/Ov-Simple1.php"] [unique_id "aaGyLIa650YPyxXVeRbKCAAAAYQ"]
[Fri Feb 27 23:03:08.765412 2026] [:error] [pid 56075:tid 56101] [client 172.190.142.176:49453] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/Ov-Simple1.php"] [unique_id "aaGyLMKBhrfI6KNv9RhWkwAAABc"]
[Fri Feb 27 23:03:09.221579 2026] [:error] [pid 54102:tid 54150] [client 172.190.142.176:13040] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/Ov-Simple1.php"] [unique_id "aaGyLXi74D4fiYUm_GeRLAAAAIY"]
[Fri Feb 27 23:03:09.674360 2026] [:error] [pid 62998:tid 63015] [client 172.190.142.176:4746] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/gool.php"] [unique_id "aaGyLVQeueXZDUmoLomFCAAAAQ0"]
[Fri Feb 27 23:03:10.127178 2026] [:error] [pid 56075:tid 56079] [client 172.190.142.176:4913] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/gool.php"] [unique_id "aaGyLsKBhrfI6KNv9RhWmQAAAAI"]
[Fri Feb 27 23:03:10.582560 2026] [:error] [pid 56075:tid 56099] [client 172.190.142.176:9297] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/gool.php"] [unique_id "aaGyLsKBhrfI6KNv9RhWngAAABU"]
[Fri Feb 27 23:03:11.063297 2026] [:error] [pid 56075:tid 56094] [client 172.190.142.176:9313] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/gool.php"] [unique_id "aaGyL8KBhrfI6KNv9RhWogAAABA"]
[Fri Feb 27 23:03:11.634587 2026] [:error] [pid 52073:tid 52086] [client 172.190.142.176:9288] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/a1vx.php"] [unique_id "aaGyL4a650YPyxXVeRbKGQAAAYo"]
[Fri Feb 27 23:03:12.077895 2026] [:error] [pid 49306:tid 49322] [client 172.190.142.176:29250] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/a1vx.php"] [unique_id "aaGyMPnSUDZue59Px9toLQAAAU4"]
[Fri Feb 27 23:03:12.565322 2026] [:error] [pid 54101:tid 54128] [client 172.190.142.176:36424] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/a1vx.php"] [unique_id "aaGyMFY5qgRktcYTGFtdFgAAAdQ"]
[Fri Feb 27 23:03:13.059962 2026] [:error] [pid 54102:tid 54162] [client 172.190.142.176:13013] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/a1vx.php"] [unique_id "aaGyMXi74D4fiYUm_GeRMwAAAJI"]
[Fri Feb 27 23:03:13.529024 2026] [:error] [pid 49306:tid 49327] [client 172.190.142.176:4299] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/mans.php"] [unique_id "aaGyMfnSUDZue59Px9toMAAAAVM"]
[Fri Feb 27 23:03:13.980236 2026] [:error] [pid 54102:tid 54157] [client 172.190.142.176:9745] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/mans.php"] [unique_id "aaGyMXi74D4fiYUm_GeROQAAAI0"]
[Fri Feb 27 23:03:14.428728 2026] [:error] [pid 54103:tid 54188] [client 172.190.142.176:34561] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/mans.php"] [unique_id "aaGyMuvG4MPCmE0B2sDMqQAAANE"]
[Fri Feb 27 23:03:14.859616 2026] [:error] [pid 54231:tid 54251] [client 172.190.142.176:62647] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/mans.php"] [unique_id "aaGyMuTvb5AeyJCdY7BDeAAAAFE"]
[Fri Feb 27 23:03:15.303119 2026] [:error] [pid 54101:tid 54113] [client 172.190.142.176:29268] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/rum.php"] [unique_id "aaGyM1Y5qgRktcYTGFtdFwAAAcU"]
[Fri Feb 27 23:03:15.747547 2026] [:error] [pid 56075:tid 56083] [client 172.190.142.176:4753] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/rum.php"] [unique_id "aaGyM8KBhrfI6KNv9RhWswAAAAY"]
[Fri Feb 27 23:03:16.219217 2026] [:error] [pid 54231:tid 54240] [client 172.190.142.176:4317] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/rum.php"] [unique_id "aaGyNOTvb5AeyJCdY7BDfQAAAEY"]
[Fri Feb 27 23:03:16.673575 2026] [:error] [pid 62998:tid 63020] [client 172.190.142.176:9322] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/rum.php"] [unique_id "aaGyNFQeueXZDUmoLomFCwAAARI"]
[Fri Feb 27 23:03:17.196472 2026] [:error] [pid 49306:tid 49311] [client 172.190.142.176:9327] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/sbhu.php"] [unique_id "aaGyNfnSUDZue59Px9toOgAAAUM"]
[Fri Feb 27 23:03:17.670907 2026] [:error] [pid 52073:tid 52097] [client 172.190.142.176:62636] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/sbhu.php"] [unique_id "aaGyNYa650YPyxXVeRbKOAAAAZU"]
[Fri Feb 27 23:03:18.107929 2026] [:error] [pid 52073:tid 52091] [client 172.190.142.176:4333] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/sbhu.php"] [unique_id "aaGyNoa650YPyxXVeRbKPAAAAY8"]
[Fri Feb 27 23:03:18.529405 2026] [:error] [pid 52073:tid 52094] [client 172.190.142.176:29310] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/sbhu.php"] [unique_id "aaGyNoa650YPyxXVeRbKQwAAAZI"]
[Fri Feb 27 23:03:18.969986 2026] [:error] [pid 52073:tid 52085] [client 172.190.142.176:4928] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wio.php"] [unique_id "aaGyNoa650YPyxXVeRbKSAAAAYk"]
[Fri Feb 27 23:03:19.433836 2026] [:error] [pid 62998:tid 63013] [client 172.190.142.176:29301] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wio.php"] [unique_id "aaGyN1QeueXZDUmoLomFDQAAAQs"]
[Fri Feb 27 23:03:19.890414 2026] [:error] [pid 49306:tid 49318] [client 172.190.142.176:9318] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wio.php"] [unique_id "aaGyN_nSUDZue59Px9toQQAAAUo"]
[Fri Feb 27 23:03:20.354109 2026] [:error] [pid 62998:tid 63014] [client 172.190.142.176:9333] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wio.php"] [unique_id "aaGyOFQeueXZDUmoLomFEwAAAQw"]
[Fri Feb 27 23:03:20.807018 2026] [:error] [pid 54231:tid 54234] [client 172.190.142.176:9303] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/clasa99.php"] [unique_id "aaGyOOTvb5AeyJCdY7BDiAAAAEA"]
[Fri Feb 27 23:03:21.248240 2026] [:error] [pid 54103:tid 54179] [client 172.190.142.176:36418] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/clasa99.php"] [unique_id "aaGyOevG4MPCmE0B2sDMtQAAAMg"]
[Fri Feb 27 23:03:21.707476 2026] [:error] [pid 56075:tid 56096] [client 172.190.142.176:4305] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/clasa99.php"] [unique_id "aaGyOcKBhrfI6KNv9RhWuAAAABI"]
[Fri Feb 27 23:03:22.150932 2026] [:error] [pid 56075:tid 56090] [client 172.190.142.176:9294] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/clasa99.php"] [unique_id "aaGyOsKBhrfI6KNv9RhWuwAAAAw"]
[Fri Feb 27 23:03:22.583726 2026] [:error] [pid 56075:tid 56079] [client 172.190.142.176:49446] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/alfa-rex.php7"] [unique_id "aaGyOsKBhrfI6KNv9RhWvwAAAAI"]
[Fri Feb 27 23:03:23.047540 2026] [:error] [pid 56075:tid 56082] [client 172.190.142.176:62652] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/alfa-rex.php7"] [unique_id "aaGyO8KBhrfI6KNv9RhWwgAAAAU"]
[Fri Feb 27 23:03:23.501552 2026] [:error] [pid 52073:tid 52091] [client 172.190.142.176:4768] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/alfa-rex.php7"] [unique_id "aaGyO4a650YPyxXVeRbKTgAAAY8"]
[Fri Feb 27 23:03:23.966225 2026] [:error] [pid 52073:tid 52094] [client 172.190.142.176:4751] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/alfa-rex.php7"] [unique_id "aaGyO4a650YPyxXVeRbKUwAAAZI"]
[Fri Feb 27 23:03:24.427210 2026] [:error] [pid 52073:tid 52088] [client 172.190.142.176:36427] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws62.php"] [unique_id "aaGyPIa650YPyxXVeRbKVQAAAYw"]
[Fri Feb 27 23:03:24.908924 2026] [:error] [pid 54103:tid 54189] [client 172.190.142.176:13028] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws62.php"] [unique_id "aaGyPOvG4MPCmE0B2sDMuAAAANI"]
[Fri Feb 27 23:03:25.362763 2026] [:error] [pid 54102:tid 54168] [client 172.190.142.176:4774] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws62.php"] [unique_id "aaGyPXi74D4fiYUm_GeRQQAAAJc"]
[Fri Feb 27 23:03:25.798185 2026] [:error] [pid 49306:tid 49326] [client 172.190.142.176:4303] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws62.php"] [unique_id "aaGyPfnSUDZue59Px9toRAAAAVI"]
[Fri Feb 27 23:03:26.247208 2026] [:error] [pid 54103:tid 54188] [client 172.190.142.176:4343] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/new4.php"] [unique_id "aaGyPuvG4MPCmE0B2sDMvgAAANE"]
[Fri Feb 27 23:03:26.692129 2026] [:error] [pid 54231:tid 54243] [client 172.190.142.176:34578] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/new4.php"] [unique_id "aaGyPuTvb5AeyJCdY7BDkAAAAEk"]
[Fri Feb 27 23:03:27.115006 2026] [:error] [pid 54231:tid 54257] [client 172.190.142.176:9291] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/new4.php"] [unique_id "aaGyP-Tvb5AeyJCdY7BDkwAAAFc"]
[Fri Feb 27 23:03:27.550757 2026] [:error] [pid 54231:tid 54235] [client 172.190.142.176:34608] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/new4.php"] [unique_id "aaGyP-Tvb5AeyJCdY7BDmQAAAEE"]
[Fri Feb 27 23:03:28.108095 2026] [:error] [pid 54101:tid 54125] [client 172.190.142.176:36462] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/666.php"] [unique_id "aaGyQFY5qgRktcYTGFtdIAAAAdE"]
[Fri Feb 27 23:03:28.574502 2026] [:error] [pid 54231:tid 54238] [client 172.190.142.176:29291] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/666.php"] [unique_id "aaGyQOTvb5AeyJCdY7BDnAAAAEQ"]
[Fri Feb 27 23:03:29.063956 2026] [:error] [pid 54102:tid 54160] [client 172.190.142.176:36452] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/666.php"] [unique_id "aaGyQXi74D4fiYUm_GeRRwAAAJA"]
[Fri Feb 27 23:03:29.502062 2026] [:error] [pid 54101:tid 54115] [client 172.190.142.176:4757] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/666.php"] [unique_id "aaGyQVY5qgRktcYTGFtdJQAAAcc"]
[Fri Feb 27 23:03:29.948289 2026] [:error] [pid 54101:tid 54127] [client 172.190.142.176:62630] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/co.php"] [unique_id "aaGyQVY5qgRktcYTGFtdKAAAAdM"]
[Fri Feb 27 23:03:30.376370 2026] [:error] [pid 52073:tid 52093] [client 172.190.142.176:13030] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/co.php"] [unique_id "aaGyQoa650YPyxXVeRbKWwAAAZE"]
[Fri Feb 27 23:03:30.832651 2026] [:error] [pid 52073:tid 52098] [client 172.190.142.176:13026] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/co.php"] [unique_id "aaGyQoa650YPyxXVeRbKYgAAAZY"]
[Fri Feb 27 23:03:31.318477 2026] [:error] [pid 56075:tid 56078] [client 172.190.142.176:14180] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/co.php"] [unique_id "aaGyQ8KBhrfI6KNv9RhW1AAAAAE"]
[Fri Feb 27 23:03:31.789277 2026] [:error] [pid 56075:tid 56099] [client 172.190.142.176:4325] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/cxc.php"] [unique_id "aaGyQ8KBhrfI6KNv9RhW2AAAABU"]
[Fri Feb 27 23:03:32.243723 2026] [:error] [pid 56075:tid 56094] [client 172.190.142.176:14188] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/cxc.php"] [unique_id "aaGyRMKBhrfI6KNv9RhW2wAAABA"]
[Fri Feb 27 23:03:32.701808 2026] [:error] [pid 52073:tid 52081] [client 172.190.142.176:4336] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/cxc.php"] [unique_id "aaGyRIa650YPyxXVeRbKbAAAAYU"]
[Fri Feb 27 23:03:33.147724 2026] [:error] [pid 56075:tid 56079] [client 172.190.142.176:13012] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/cxc.php"] [unique_id "aaGyRcKBhrfI6KNv9RhW6AAAAAI"]
[Fri Feb 27 23:03:33.655557 2026] [:error] [pid 54102:tid 54151] [client 172.190.142.176:49429] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/gjm.php"] [unique_id "aaGyRXi74D4fiYUm_GeRUgAAAIc"]
[Fri Feb 27 23:03:34.113073 2026] [:error] [pid 56075:tid 56101] [client 172.190.142.176:29311] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/gjm.php"] [unique_id "aaGyRsKBhrfI6KNv9RhW8QAAABc"]
[Fri Feb 27 23:03:34.557932 2026] [:error] [pid 54102:tid 54162] [client 172.190.142.176:4965] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/gjm.php"] [unique_id "aaGyRni74D4fiYUm_GeRVwAAAJI"]
[Fri Feb 27 23:03:35.027891 2026] [:error] [pid 52073:tid 52094] [client 172.190.142.176:4750] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/gjm.php"] [unique_id "aaGyR4a650YPyxXVeRbKdQAAAZI"]
[Fri Feb 27 23:03:35.446792 2026] [:error] [pid 49306:tid 49322] [client 172.190.142.176:34594] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ex.php"] [unique_id "aaGyR_nSUDZue59Px9toVQAAAU4"]
[Fri Feb 27 23:03:35.867339 2026] [:error] [pid 54102:tid 54163] [client 172.190.142.176:62649] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ex.php"] [unique_id "aaGyR3i74D4fiYUm_GeRWQAAAJM"]
[Fri Feb 27 23:03:36.328952 2026] [:error] [pid 56075:tid 56091] [client 172.190.142.176:14205] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ex.php"] [unique_id "aaGySMKBhrfI6KNv9RhXBAAAAA0"]
[Fri Feb 27 23:03:36.778957 2026] [:error] [pid 56075:tid 56093] [client 172.190.142.176:13022] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ex.php"] [unique_id "aaGySMKBhrfI6KNv9RhXEAAAAA8"]
[Fri Feb 27 23:03:37.205862 2026] [:error] [pid 52073:tid 52077] [client 172.190.142.176:4337] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/post.php"] [unique_id "aaGySYa650YPyxXVeRbKggAAAYE"]
[Fri Feb 27 23:03:37.661359 2026] [:error] [pid 62998:tid 63001] [client 172.190.142.176:13055] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/post.php"] [unique_id "aaGySVQeueXZDUmoLomFQQAAAQA"]
[Fri Feb 27 23:03:38.126711 2026] [:error] [pid 52073:tid 52096] [client 172.190.142.176:34611] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/post.php"] [unique_id "aaGySoa650YPyxXVeRbKiQAAAZQ"]
[Fri Feb 27 23:03:38.577841 2026] [:error] [pid 56075:tid 56086] [client 172.190.142.176:36442] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/post.php"] [unique_id "aaGySsKBhrfI6KNv9RhXGwAAAAk"]
[Fri Feb 27 23:03:38.998544 2026] [:error] [pid 54102:tid 54155] [client 172.190.142.176:4330] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wpo.php"] [unique_id "aaGySni74D4fiYUm_GeRXgAAAIs"]
[Fri Feb 27 23:03:39.430494 2026] [:error] [pid 56075:tid 56079] [client 172.190.142.176:4991] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wpo.php"] [unique_id "aaGyS8KBhrfI6KNv9RhXIAAAAAI"]
[Fri Feb 27 23:03:39.931818 2026] [:error] [pid 62998:tid 63005] [client 172.190.142.176:34574] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wpo.php"] [unique_id "aaGyS1QeueXZDUmoLomFRAAAAQM"]
[Fri Feb 27 23:03:40.390102 2026] [:error] [pid 62998:tid 63013] [client 172.190.142.176:49442] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wpo.php"] [unique_id "aaGyTFQeueXZDUmoLomFRQAAAQs"]
[Fri Feb 27 23:03:40.851906 2026] [:error] [pid 54101:tid 54118] [client 172.190.142.176:46367] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/jq.php"] [unique_id "aaGyTFY5qgRktcYTGFtdLQAAAco"]
[Fri Feb 27 23:03:41.274456 2026] [:error] [pid 49306:tid 49321] [client 172.190.142.176:9304] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/jq.php"] [unique_id "aaGyTfnSUDZue59Px9toZAAAAU0"]
[Fri Feb 27 23:03:41.721186 2026] [:error] [pid 49306:tid 49326] [client 172.190.142.176:34603] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/jq.php"] [unique_id "aaGyTfnSUDZue59Px9toaQAAAVI"]
[Fri Feb 27 23:03:42.145177 2026] [:error] [pid 54231:tid 54244] [client 172.190.142.176:9334] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/jq.php"] [unique_id "aaGyTuTvb5AeyJCdY7BDogAAAEo"]
[Fri Feb 27 23:03:42.574290 2026] [:error] [pid 49306:tid 49314] [client 172.190.142.176:62625] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/x7.php"] [unique_id "aaGyTvnSUDZue59Px9tocAAAAUY"]
[Fri Feb 27 23:03:43.028984 2026] [:error] [pid 54103:tid 54175] [client 172.190.142.176:49435] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/x7.php"] [unique_id "aaGyT-vG4MPCmE0B2sDM8QAAAMQ"]
[Fri Feb 27 23:03:43.472449 2026] [:error] [pid 52073:tid 52078] [client 172.190.142.176:4931] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/x7.php"] [unique_id "aaGyT4a650YPyxXVeRbKoQAAAYI"]
[Fri Feb 27 23:03:43.922966 2026] [:error] [pid 52073:tid 52081] [client 172.190.142.176:62626] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/x7.php"] [unique_id "aaGyT4a650YPyxXVeRbKpAAAAYU"]
[Fri Feb 27 23:03:44.354721 2026] [:error] [pid 52073:tid 52089] [client 172.190.142.176:9340] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bes.php"] [unique_id "aaGyUIa650YPyxXVeRbKqgAAAY0"]
[Fri Feb 27 23:03:44.790922 2026] [:error] [pid 54103:tid 54192] [client 172.190.142.176:34593] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bes.php"] [unique_id "aaGyUOvG4MPCmE0B2sDM9gAAANU"]
[Fri Feb 27 23:03:45.263715 2026] [:error] [pid 49306:tid 49309] [client 172.190.142.176:9747] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bes.php"] [unique_id "aaGyUfnSUDZue59Px9tofgAAAUE"]
[Fri Feb 27 23:03:45.717442 2026] [:error] [pid 49306:tid 49308] [client 172.190.142.176:49451] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bes.php"] [unique_id "aaGyUfnSUDZue59Px9tohQAAAUA"]
[Fri Feb 27 23:03:46.235146 2026] [:error] [pid 56075:tid 56083] [client 172.190.142.176:29279] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/sadd.php"] [unique_id "aaGyUsKBhrfI6KNv9RhXJgAAAAY"]
[Fri Feb 27 23:03:46.678138 2026] [:error] [pid 56075:tid 56093] [client 172.190.142.176:14186] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/sadd.php"] [unique_id "aaGyUsKBhrfI6KNv9RhXLAAAAA8"]
[Fri Feb 27 23:03:47.119687 2026] [:error] [pid 54231:tid 54235] [client 172.190.142.176:4327] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/sadd.php"] [unique_id "aaGyU-Tvb5AeyJCdY7BDqwAAAEE"]
[Fri Feb 27 23:03:47.567986 2026] [:error] [pid 62998:tid 63023] [client 172.190.142.176:46345] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/sadd.php"] [unique_id "aaGyU1QeueXZDUmoLomFUAAAARU"]
[Fri Feb 27 23:03:48.001444 2026] [:error] [pid 62998:tid 63001] [client 172.190.142.176:29274] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/vgtyu.php"] [unique_id "aaGyVFQeueXZDUmoLomFVwAAAQA"]
[Fri Feb 27 23:03:48.482432 2026] [:error] [pid 62998:tid 63019] [client 172.190.142.176:36466] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/vgtyu.php"] [unique_id "aaGyVFQeueXZDUmoLomFXAAAARE"]
[Fri Feb 27 23:03:48.957516 2026] [:error] [pid 56075:tid 56084] [client 172.190.142.176:29288] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/vgtyu.php"] [unique_id "aaGyVMKBhrfI6KNv9RhXNgAAAAc"]
[Fri Feb 27 23:03:49.441569 2026] [:error] [pid 56075:tid 56083] [client 172.190.142.176:4345] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/vgtyu.php"] [unique_id "aaGyVcKBhrfI6KNv9RhXOgAAAAY"]
[Fri Feb 27 23:03:49.888321 2026] [:error] [pid 52073:tid 52087] [client 172.190.142.176:13016] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/166.php"] [unique_id "aaGyVYa650YPyxXVeRbKuQAAAYs"]
[Fri Feb 27 23:03:50.366934 2026] [:error] [pid 54103:tid 54185] [client 172.190.142.176:9301] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/166.php"] [unique_id "aaGyVuvG4MPCmE0B2sDM-AAAAM4"]
[Fri Feb 27 23:03:50.816144 2026] [:error] [pid 56075:tid 56097] [client 172.190.142.176:4922] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/166.php"] [unique_id "aaGyVsKBhrfI6KNv9RhXQgAAABM"]
[Fri Feb 27 23:03:51.271636 2026] [:error] [pid 52073:tid 52083] [client 172.190.142.176:36417] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/166.php"] [unique_id "aaGyV4a650YPyxXVeRbKwgAAAYc"]
[Fri Feb 27 23:03:51.719701 2026] [:error] [pid 56075:tid 56087] [client 172.190.142.176:4799] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/fs.php"] [unique_id "aaGyV8KBhrfI6KNv9RhXRQAAAAo"]
[Fri Feb 27 23:03:52.167628 2026] [:error] [pid 56075:tid 56092] [client 172.190.142.176:4793] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/fs.php"] [unique_id "aaGyWMKBhrfI6KNv9RhXSgAAAA4"]
[Fri Feb 27 23:03:52.614378 2026] [:error] [pid 56075:tid 56096] [client 172.190.142.176:46381] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/fs.php"] [unique_id "aaGyWMKBhrfI6KNv9RhXTgAAABI"]
[Fri Feb 27 23:03:53.080370 2026] [:error] [pid 62998:tid 63014] [client 172.190.142.176:4741] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/fs.php"] [unique_id "aaGyWVQeueXZDUmoLomFaAAAAQw"]
[Fri Feb 27 23:03:53.566728 2026] [:error] [pid 52073:tid 52098] [client 172.190.142.176:9341] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/c4.php"] [unique_id "aaGyWYa650YPyxXVeRbKxgAAAZY"]
[Fri Feb 27 23:03:54.037003 2026] [:error] [pid 62998:tid 63005] [client 172.190.142.176:4745] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/c4.php"] [unique_id "aaGyWlQeueXZDUmoLomFbAAAAQM"]
[Fri Feb 27 23:03:54.474060 2026] [:error] [pid 49306:tid 49325] [client 172.190.142.176:36436] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/c4.php"] [unique_id "aaGyWvnSUDZue59Px9toogAAAVE"]
[Fri Feb 27 23:03:54.915840 2026] [:error] [pid 52073:tid 52085] [client 172.190.142.176:9328] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/c4.php"] [unique_id "aaGyWoa650YPyxXVeRbK0gAAAYk"]
[Fri Feb 27 23:03:55.349680 2026] [:error] [pid 52073:tid 52093] [client 172.190.142.176:4351] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/eauu.php"] [unique_id "aaGyW4a650YPyxXVeRbK1QAAAZE"]
[Fri Feb 27 23:03:55.782701 2026] [:error] [pid 56075:tid 56088] [client 172.190.142.176:9280] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/eauu.php"] [unique_id "aaGyW8KBhrfI6KNv9RhXWQAAAAs"]
[Fri Feb 27 23:03:56.259046 2026] [proxy_fcgi:error] [pid 62998:tid 63024] [client 172.190.142.176:9244] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 23:03:56.475456 2026] [proxy_fcgi:error] [pid 62998:tid 63011] [client 172.190.142.176:9244] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 23:03:56.690641 2026] [proxy_fcgi:error] [pid 62998:tid 63013] [client 172.190.142.176:9244] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 23:03:56.913762 2026] [proxy_fcgi:error] [pid 62998:tid 63020] [client 172.190.142.176:9244] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 23:03:57.129728 2026] [proxy_fcgi:error] [pid 62998:tid 63002] [client 172.190.142.176:9244] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 23:03:57.351971 2026] [proxy_fcgi:error] [pid 62998:tid 63016] [client 172.190.142.176:9244] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 23:03:57.572844 2026] [proxy_fcgi:error] [pid 62998:tid 63014] [client 172.190.142.176:9244] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 23:03:57.790585 2026] [proxy_fcgi:error] [pid 62998:tid 63018] [client 172.190.142.176:9244] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 23:03:58.012295 2026] [proxy_fcgi:error] [pid 62998:tid 63025] [client 172.190.142.176:9244] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 23:03:58.229542 2026] [proxy_fcgi:error] [pid 62998:tid 63019] [client 172.190.142.176:9244] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 23:03:58.457585 2026] [proxy_fcgi:error] [pid 62998:tid 63022] [client 172.190.142.176:9244] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 23:03:58.675726 2026] [:error] [pid 62998:tid 63024] [client 172.190.142.176:9244] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/hello.php"] [unique_id "aaGyXlQeueXZDUmoLomFiQAAARY"]
[Fri Feb 27 23:03:59.134227 2026] [:error] [pid 54102:tid 54159] [client 172.190.142.176:13023] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/hello.php"] [unique_id "aaGyX3i74D4fiYUm_GeRfgAAAI8"]
[Fri Feb 27 23:03:59.587729 2026] [:error] [pid 62998:tid 63008] [client 172.190.142.176:9338] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/hello.php"] [unique_id "aaGyX1QeueXZDUmoLomFiwAAAQY"]
[Fri Feb 27 23:04:00.013303 2026] [:error] [pid 52073:tid 52084] [client 172.190.142.176:62607] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/hello.php"] [unique_id "aaGyYIa650YPyxXVeRbK4AAAAYg"]
[Fri Feb 27 23:04:00.448864 2026] [:error] [pid 54103:tid 54191] [client 172.190.142.176:36441] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/05.php"] [unique_id "aaGyYOvG4MPCmE0B2sDM_wAAANQ"]
[Fri Feb 27 23:04:00.910467 2026] [:error] [pid 54103:tid 54177] [client 172.190.142.176:34563] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/05.php"] [unique_id "aaGyYOvG4MPCmE0B2sDNAQAAAMY"]
[Fri Feb 27 23:04:01.435447 2026] [:error] [pid 52073:tid 52091] [client 172.190.142.176:62608] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/zxin.php"] [unique_id "aaGyYYa650YPyxXVeRbK5AAAAY8"]
[Fri Feb 27 23:04:01.948628 2026] [:error] [pid 54103:tid 54172] [client 172.190.142.176:49422] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/zxin.php"] [unique_id "aaGyYevG4MPCmE0B2sDNCAAAAME"]
[Fri Feb 27 23:04:02.451058 2026] [:error] [pid 54101:tid 54124] [client 172.190.142.176:49436] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/zxin.php"] [unique_id "aaGyYlY5qgRktcYTGFtdPwAAAdA"]
[Fri Feb 27 23:04:02.904004 2026] [:error] [pid 52073:tid 52083] [client 172.190.142.176:4253] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/zxin.php"] [unique_id "aaGyYoa650YPyxXVeRbK6gAAAYc"]
[Fri Feb 27 23:04:03.358307 2026] [:error] [pid 54103:tid 54174] [client 172.190.142.176:29296] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/fff.php"] [unique_id "aaGyY-vG4MPCmE0B2sDNCgAAAMM"]
[Fri Feb 27 23:04:03.809357 2026] [:error] [pid 49306:tid 49309] [client 172.190.142.176:4924] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/fff.php"] [unique_id "aaGyY_nSUDZue59Px9totgAAAUE"]
[Fri Feb 27 23:04:04.314764 2026] [:error] [pid 62998:tid 63018] [client 172.190.142.176:13038] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/fff.php"] [unique_id "aaGyZFQeueXZDUmoLomFkwAAARA"]
[Fri Feb 27 23:04:04.775062 2026] [:error] [pid 49306:tid 49308] [client 172.190.142.176:62612] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/fff.php"] [unique_id "aaGyZPnSUDZue59Px9touwAAAUA"]
[Fri Feb 27 23:04:05.231316 2026] [:error] [pid 54101:tid 54111] [client 172.190.142.176:29298] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp5.php"] [unique_id "aaGyZVY5qgRktcYTGFtdRwAAAcM"]
[Fri Feb 27 23:04:05.678238 2026] [:error] [pid 52073:tid 52078] [client 172.190.142.176:49412] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp5.php"] [unique_id "aaGyZYa650YPyxXVeRbK8AAAAYI"]
[Fri Feb 27 23:04:06.115440 2026] [:error] [pid 56075:tid 56084] [client 172.190.142.176:4337] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp5.php"] [unique_id "aaGyZsKBhrfI6KNv9RhXcAAAAAc"]
[Fri Feb 27 23:04:06.531665 2026] [:error] [pid 56075:tid 56086] [client 172.190.142.176:4865] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp5.php"] [unique_id "aaGyZsKBhrfI6KNv9RhXdwAAAAk"]
[Fri Feb 27 23:04:06.963067 2026] [:error] [pid 62998:tid 63022] [client 172.190.142.176:29280] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-good.php"] [unique_id "aaGyZlQeueXZDUmoLomFlgAAARQ"]
[Fri Feb 27 23:04:07.376221 2026] [:error] [pid 54102:tid 54149] [client 172.190.142.176:9762] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-good.php"] [unique_id "aaGyZ3i74D4fiYUm_GeRiwAAAIU"]
[Fri Feb 27 23:04:07.809043 2026] [:error] [pid 49306:tid 49331] [client 172.190.142.176:14176] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-good.php"] [unique_id "aaGyZ_nSUDZue59Px9towgAAAVc"]
[Fri Feb 27 23:04:08.232210 2026] [:error] [pid 56075:tid 56101] [client 172.190.142.176:9306] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-good.php"] [unique_id "aaGyaMKBhrfI6KNv9RhXgwAAABc"]
[Fri Feb 27 23:04:08.695106 2026] [:error] [pid 49306:tid 49326] [client 172.190.142.176:34600] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/iko.php"] [unique_id "aaGyaPnSUDZue59Px9toxgAAAVI"]
[Fri Feb 27 23:04:09.147144 2026] [:error] [pid 56075:tid 56102] [client 172.190.142.176:4896] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/iko.php"] [unique_id "aaGyacKBhrfI6KNv9RhXigAAABg"]
[Fri Feb 27 23:04:09.589530 2026] [:error] [pid 52073:tid 52091] [client 172.190.142.176:62623] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/iko.php"] [unique_id "aaGyaYa650YPyxXVeRbK-QAAAY8"]
[Fri Feb 27 23:04:10.064105 2026] [:error] [pid 52073:tid 52096] [client 172.190.142.176:9300] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/iko.php"] [unique_id "aaGyaoa650YPyxXVeRbLAAAAAZQ"]
[Fri Feb 27 23:04:10.508405 2026] [:error] [pid 52073:tid 52081] [client 172.190.142.176:14163] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xmy.php"] [unique_id "aaGyaoa650YPyxXVeRbLCAAAAYU"]
[Fri Feb 27 23:04:10.976312 2026] [:error] [pid 54102:tid 54168] [client 172.190.142.176:58168] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xmy.php"] [unique_id "aaGyani74D4fiYUm_GeRjAAAAJc"]
[Fri Feb 27 23:04:11.507677 2026] [:error] [pid 56075:tid 56091] [client 172.190.142.176:58136] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xmy.php"] [unique_id "aaGya8KBhrfI6KNv9RhXkQAAAA0"]
[Fri Feb 27 23:04:11.972484 2026] [:error] [pid 54231:tid 54236] [client 172.190.142.176:37789] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xmy.php"] [unique_id "aaGya-Tvb5AeyJCdY7BDvwAAAEI"]
[Fri Feb 27 23:04:12.537162 2026] [:error] [pid 56075:tid 56084] [client 172.190.142.176:9324] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/fun.php"] [unique_id "aaGybMKBhrfI6KNv9RhXlAAAAAc"]
[Fri Feb 27 23:04:12.974615 2026] [:error] [pid 54102:tid 54152] [client 172.190.142.176:49449] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/fun.php"] [unique_id "aaGybHi74D4fiYUm_GeRkAAAAIg"]
[Fri Feb 27 23:04:13.515540 2026] [:error] [pid 49306:tid 49314] [client 172.190.142.176:36457] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/fun.php"] [unique_id "aaGybfnSUDZue59Px9tozwAAAUY"]
[Fri Feb 27 23:04:13.961613 2026] [:error] [pid 52073:tid 52079] [client 172.190.142.176:58157] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/fun.php"] [unique_id "aaGybYa650YPyxXVeRbLFQAAAYM"]
[Fri Feb 27 23:04:14.695929 2026] [:error] [pid 52073:tid 52076] [client 172.190.142.176:58171] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/end.php"] [unique_id "aaGyboa650YPyxXVeRbLGAAAAYA"]
[Fri Feb 27 23:04:15.183891 2026] [:error] [pid 52073:tid 52092] [client 172.190.142.176:4748] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/end.php"] [unique_id "aaGyb4a650YPyxXVeRbLHgAAAZA"]
[Fri Feb 27 23:04:15.667909 2026] [:error] [pid 52073:tid 52096] [client 172.190.142.176:4938] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/end.php"] [unique_id "aaGyb4a650YPyxXVeRbLJwAAAZQ"]
[Fri Feb 27 23:04:16.193544 2026] [:error] [pid 52073:tid 52089] [client 172.190.142.176:9299] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/end.php"] [unique_id "aaGycIa650YPyxXVeRbLLwAAAY0"]
[Fri Feb 27 23:04:16.719420 2026] [:error] [pid 56075:tid 56090] [client 172.190.142.176:29258] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ah25.php"] [unique_id "aaGycMKBhrfI6KNv9RhXsgAAAAw"]
[Fri Feb 27 23:04:17.227205 2026] [:error] [pid 52073:tid 52100] [client 172.190.142.176:58174] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ah25.php"] [unique_id "aaGycYa650YPyxXVeRbLNAAAAZg"]
[Fri Feb 27 23:04:17.975336 2026] [:error] [pid 56075:tid 56081] [client 172.190.142.176:4737] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ah25.php"] [unique_id "aaGyccKBhrfI6KNv9RhXuQAAAAQ"]
[Fri Feb 27 23:04:18.733801 2026] [:error] [pid 56075:tid 56085] [client 172.190.142.176:58152] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ah25.php"] [unique_id "aaGycsKBhrfI6KNv9RhXwwAAAAg"]
[Fri Feb 27 23:04:19.253684 2026] [:error] [pid 62998:tid 63006] [client 172.190.142.176:37821] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/scx.php7"] [unique_id "aaGyc1QeueXZDUmoLomFpwAAAQQ"]
[Fri Feb 27 23:04:19.873255 2026] [:error] [pid 62998:tid 63024] [client 172.190.142.176:58131] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/scx.php7"] [unique_id "aaGyc1QeueXZDUmoLomFqwAAARY"]
[Fri Feb 27 23:04:20.343482 2026] [:error] [pid 52073:tid 52092] [client 172.190.142.176:4288] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/scx.php7"] [unique_id "aaGydIa650YPyxXVeRbLPQAAAZA"]
[Fri Feb 27 23:04:20.951625 2026] [:error] [pid 56075:tid 56091] [client 172.190.142.176:62616] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/scx.php7"] [unique_id "aaGydMKBhrfI6KNv9RhXyAAAAA0"]
[Fri Feb 27 23:04:21.446102 2026] [:error] [pid 54103:tid 54192] [client 172.190.142.176:34610] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/error1.php"] [unique_id "aaGydevG4MPCmE0B2sDNHgAAANU"]
[Fri Feb 27 23:04:21.974195 2026] [:error] [pid 54102:tid 54148] [client 172.190.142.176:12995] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/error1.php"] [unique_id "aaGydXi74D4fiYUm_GeRmwAAAIQ"]
[Fri Feb 27 23:04:22.466223 2026] [:error] [pid 56075:tid 56079] [client 172.190.142.176:14153] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/error1.php"] [unique_id "aaGydsKBhrfI6KNv9RhXywAAAAI"]
[Fri Feb 27 23:04:23.022311 2026] [:error] [pid 56075:tid 56092] [client 172.190.142.176:49408] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/error1.php"] [unique_id "aaGyd8KBhrfI6KNv9RhXzwAAAA4"]
[Fri Feb 27 23:04:23.522825 2026] [:error] [pid 56075:tid 56093] [client 172.190.142.176:49433] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/thui.php"] [unique_id "aaGyd8KBhrfI6KNv9RhX1QAAAA8"]
[Fri Feb 27 23:04:24.195235 2026] [:error] [pid 52073:tid 52083] [client 172.190.142.176:13010] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/thui.php"] [unique_id "aaGyeIa650YPyxXVeRbLSgAAAYc"]
[Fri Feb 27 23:04:24.667530 2026] [:error] [pid 56075:tid 56092] [client 172.190.142.176:29285] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/thui.php"] [unique_id "aaGyeMKBhrfI6KNv9RhX3AAAAA4"]
[Fri Feb 27 23:04:25.238155 2026] [:error] [pid 54231:tid 54234] [client 172.190.142.176:9311] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/thui.php"] [unique_id "aaGyeeTvb5AeyJCdY7BD2QAAAEA"]
[Fri Feb 27 23:04:25.733576 2026] [:error] [pid 49306:tid 49331] [client 172.190.142.176:29255] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ff1.php"] [unique_id "aaGyefnSUDZue59Px9to2AAAAVc"]
[Fri Feb 27 23:04:26.216075 2026] [:error] [pid 62998:tid 63004] [client 172.190.142.176:49455] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ff1.php"] [unique_id "aaGyelQeueXZDUmoLomFswAAAQI"]
[Fri Feb 27 23:04:26.699518 2026] [:error] [pid 52073:tid 52093] [client 172.190.142.176:14160] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ff1.php"] [unique_id "aaGyeoa650YPyxXVeRbLVAAAAZE"]
[Fri Feb 27 23:04:27.263995 2026] [:error] [pid 56075:tid 56093] [client 172.190.142.176:9286] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ff1.php"] [unique_id "aaGye8KBhrfI6KNv9RhX6wAAAA8"]
[Fri Feb 27 23:04:27.834330 2026] [:error] [pid 54101:tid 54132] [client 172.190.142.176:9305] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/sc.php"] [unique_id "aaGye1Y5qgRktcYTGFtdVwAAAdg"]
[Fri Feb 27 23:04:28.437062 2026] [:error] [pid 54103:tid 54170] [client 172.190.142.176:37810] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/sc.php"] [unique_id "aaGyfOvG4MPCmE0B2sDNIAAAAMA"]
[Fri Feb 27 23:04:28.991584 2026] [:error] [pid 56075:tid 56086] [client 172.190.142.176:4762] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/sc.php"] [unique_id "aaGyfMKBhrfI6KNv9RhYAwAAAAk"]
[Fri Feb 27 23:04:29.589701 2026] [:error] [pid 52073:tid 52096] [client 172.190.142.176:46355] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/sc.php"] [unique_id "aaGyfYa650YPyxXVeRbLXQAAAZQ"]
[Fri Feb 27 23:04:30.135216 2026] [:error] [pid 54101:tid 54108] [client 172.190.142.176:9326] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-act.php"] [unique_id "aaGyflY5qgRktcYTGFtdXAAAAcA"]
[Fri Feb 27 23:04:30.594420 2026] [:error] [pid 54101:tid 54115] [client 172.190.142.176:37801] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-act.php"] [unique_id "aaGyflY5qgRktcYTGFtdXQAAAcc"]
[Fri Feb 27 23:04:31.277013 2026] [:error] [pid 54103:tid 54179] [client 172.190.142.176:37819] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-act.php"] [unique_id "aaGyf-vG4MPCmE0B2sDNJwAAAMg"]
[Fri Feb 27 23:04:32.003413 2026] [:error] [pid 54101:tid 54124] [client 172.190.142.176:4975] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-act.php"] [unique_id "aaGygFY5qgRktcYTGFtdYwAAAdA"]
[Fri Feb 27 23:04:32.561309 2026] [:error] [pid 62998:tid 63007] [client 172.190.142.176:37813] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-the.php"] [unique_id "aaGygFQeueXZDUmoLomFvwAAAQU"]
[Fri Feb 27 23:04:33.086968 2026] [:error] [pid 54101:tid 54126] [client 172.190.142.176:34619] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-the.php"] [unique_id "aaGygVY5qgRktcYTGFtdZQAAAdI"]
[Fri Feb 27 23:04:33.622300 2026] [:error] [pid 54103:tid 54193] [client 172.190.142.176:9315] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-the.php"] [unique_id "aaGygevG4MPCmE0B2sDNLAAAANY"]
[Fri Feb 27 23:04:34.861942 2026] [:error] [pid 49306:tid 49328] [client 172.190.142.176:36421] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-the.php"] [unique_id "aaGygvnSUDZue59Px9to8QAAAVQ"]
[Fri Feb 27 23:04:35.434041 2026] [:error] [pid 54102:tid 54161] [client 172.190.142.176:58166] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/rpk.php"] [unique_id "aaGyg3i74D4fiYUm_GeRqwAAAJE"]
[Fri Feb 27 23:04:36.402722 2026] [:error] [pid 56075:tid 56085] [client 172.190.142.176:4769] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/rpk.php"] [unique_id "aaGyhMKBhrfI6KNv9RhYHQAAAAg"]
[Fri Feb 27 23:04:37.146890 2026] [:error] [pid 54231:tid 54243] [client 172.190.142.176:13051] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/rpk.php"] [unique_id "aaGyheTvb5AeyJCdY7BD6AAAAEk"]
[Fri Feb 27 23:04:37.727835 2026] [:error] [pid 54103:tid 54174] [client 172.190.142.176:62606] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/rpk.php"] [unique_id "aaGyhevG4MPCmE0B2sDNOAAAAMM"]
[Fri Feb 27 23:04:38.414607 2026] [:error] [pid 52073:tid 52085] [client 172.190.142.176:62658] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ms.php"] [unique_id "aaGyhoa650YPyxXVeRbLdQAAAYk"]
[Fri Feb 27 23:04:38.984101 2026] [:error] [pid 62998:tid 63009] [client 172.190.142.176:52683] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ms.php"] [unique_id "aaGyhlQeueXZDUmoLomFyQAAAQc"]
[Fri Feb 27 23:04:39.628755 2026] [:error] [pid 52073:tid 52100] [client 172.190.142.176:36453] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ms.php"] [unique_id "aaGyh4a650YPyxXVeRbLeAAAAZg"]
[Fri Feb 27 23:04:40.218138 2026] [:error] [pid 52073:tid 52082] [client 172.190.142.176:52716] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ms.php"] [unique_id "aaGyiIa650YPyxXVeRbLegAAAYY"]
[Fri Feb 27 23:04:40.819512 2026] [:error] [pid 54102:tid 54149] [client 172.190.142.176:4747] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/155.php"] [unique_id "aaGyiHi74D4fiYUm_GeRtQAAAIU"]
[Fri Feb 27 23:04:41.374714 2026] [:error] [pid 54102:tid 54150] [client 172.190.142.176:4513] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/155.php"] [unique_id "aaGyiXi74D4fiYUm_GeRtgAAAIY"]
[Fri Feb 27 23:04:42.028317 2026] [:error] [pid 54101:tid 54124] [client 172.190.142.176:46361] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/155.php"] [unique_id "aaGyilY5qgRktcYTGFtdbwAAAdA"]
[Fri Feb 27 23:04:42.648237 2026] [:error] [pid 62998:tid 63011] [client 172.190.142.176:37779] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/155.php"] [unique_id "aaGyilQeueXZDUmoLomF0wAAAQk"]
[Fri Feb 27 23:04:43.226152 2026] [:error] [pid 62998:tid 63004] [client 172.190.142.176:4776] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/e.php"] [unique_id "aaGyi1QeueXZDUmoLomF2AAAAQI"]
[Fri Feb 27 23:04:43.701629 2026] [:error] [pid 54101:tid 54120] [client 172.190.142.176:37804] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/e.php"] [unique_id "aaGyi1Y5qgRktcYTGFtdcgAAAcw"]
[Fri Feb 27 23:04:44.325095 2026] [:error] [pid 52073:tid 52098] [client 172.190.142.176:62716] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/e.php"] [unique_id "aaGyjIa650YPyxXVeRbLhQAAAZY"]
[Fri Feb 27 23:04:44.797322 2026] [:error] [pid 54103:tid 54175] [client 172.190.142.176:58163] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/e.php"] [unique_id "aaGyjOvG4MPCmE0B2sDNRgAAAMQ"]
[Fri Feb 27 23:04:45.323831 2026] [:error] [pid 56075:tid 56079] [client 172.190.142.176:58142] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/forbidals.php"] [unique_id "aaGyjcKBhrfI6KNv9RhYKwAAAAI"]
[Fri Feb 27 23:04:45.828068 2026] [:error] [pid 52073:tid 52081] [client 172.190.142.176:62687] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/forbidals.php"] [unique_id "aaGyjYa650YPyxXVeRbLigAAAYU"]
[Fri Feb 27 23:04:46.349464 2026] [:error] [pid 56075:tid 56083] [client 172.190.142.176:4324] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/forbidals.php"] [unique_id "aaGyjsKBhrfI6KNv9RhYLQAAAAY"]
[Fri Feb 27 23:04:46.810066 2026] [:error] [pid 56075:tid 56097] [client 172.190.142.176:62670] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/forbidals.php"] [unique_id "aaGyjsKBhrfI6KNv9RhYMgAAABM"]
[Fri Feb 27 23:04:47.332200 2026] [:error] [pid 56075:tid 56087] [client 172.190.142.176:57175] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/X7x.php"] [unique_id "aaGyj8KBhrfI6KNv9RhYNgAAAAo"]
[Fri Feb 27 23:04:47.784819 2026] [:error] [pid 49306:tid 49330] [client 172.190.142.176:37784] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/X7x.php"] [unique_id "aaGyj_nSUDZue59Px9tpAAAAAVY"]
[Fri Feb 27 23:04:48.253982 2026] [:error] [pid 52073:tid 52082] [client 172.190.142.176:57194] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/X7x.php"] [unique_id "aaGykIa650YPyxXVeRbLjwAAAYY"]
[Fri Feb 27 23:04:48.849980 2026] [:error] [pid 54102:tid 54146] [client 172.190.142.176:37785] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/X7x.php"] [unique_id "aaGykHi74D4fiYUm_GeRxAAAAII"]
[Fri Feb 27 23:04:49.349047 2026] [:error] [pid 52073:tid 52088] [client 172.190.142.176:62357] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ccou.php"] [unique_id "aaGykYa650YPyxXVeRbLkQAAAYw"]
[Fri Feb 27 23:04:50.117431 2026] [:error] [pid 62998:tid 63017] [client 172.190.142.176:58122] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ccou.php"] [unique_id "aaGyklQeueXZDUmoLomF4QAAAQ8"]
[Fri Feb 27 23:04:50.612119 2026] [:error] [pid 56075:tid 56101] [client 172.190.142.176:10090] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ccou.php"] [unique_id "aaGyksKBhrfI6KNv9RhYQQAAABc"]
[Fri Feb 27 23:04:51.112397 2026] [:error] [pid 56075:tid 56095] [client 172.190.142.176:62362] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ccou.php"] [unique_id "aaGyk8KBhrfI6KNv9RhYRgAAABE"]
[Fri Feb 27 23:04:51.576802 2026] [:error] [pid 54103:tid 54174] [client 172.190.142.176:57161] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/get.php"] [unique_id "aaGyk-vG4MPCmE0B2sDNSwAAAMM"]
[Fri Feb 27 23:04:52.076518 2026] [:error] [pid 56075:tid 56098] [client 172.190.142.176:62370] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/get.php"] [unique_id "aaGylMKBhrfI6KNv9RhYUQAAABQ"]
[Fri Feb 27 23:04:52.600439 2026] [:error] [pid 52073:tid 52077] [client 172.190.142.176:4536] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/get.php"] [unique_id "aaGylIa650YPyxXVeRbLkwAAAYE"]
[Fri Feb 27 23:04:53.165425 2026] [:error] [pid 52073:tid 52092] [client 172.190.142.176:62363] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/get.php"] [unique_id "aaGylYa650YPyxXVeRbLlQAAAZA"]
[Fri Feb 27 23:04:53.660753 2026] [:error] [pid 54231:tid 54254] [client 172.190.142.176:62393] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/koiy.php"] [unique_id "aaGyleTvb5AeyJCdY7BEBwAAAFQ"]
[Fri Feb 27 23:04:54.386741 2026] [:error] [pid 56075:tid 56081] [client 172.190.142.176:4518] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/koiy.php"] [unique_id "aaGylsKBhrfI6KNv9RhYZQAAAAQ"]
[Fri Feb 27 23:04:54.972341 2026] [:error] [pid 52073:tid 52086] [client 172.190.142.176:9296] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/koiy.php"] [unique_id "aaGyloa650YPyxXVeRbLnQAAAYo"]
[Fri Feb 27 23:04:55.554061 2026] [:error] [pid 52073:tid 52079] [client 172.190.142.176:4177] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/koiy.php"] [unique_id "aaGyl4a650YPyxXVeRbLogAAAYM"]
[Fri Feb 27 23:04:56.014374 2026] [proxy_fcgi:error] [pid 54231:tid 54250] [client 172.190.142.176:10070] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 23:04:56.244884 2026] [proxy_fcgi:error] [pid 54231:tid 54234] [client 172.190.142.176:10070] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 23:04:56.472874 2026] [proxy_fcgi:error] [pid 54231:tid 54258] [client 172.190.142.176:10070] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 23:04:56.698141 2026] [proxy_fcgi:error] [pid 54231:tid 54243] [client 172.190.142.176:10070] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 23:04:56.915968 2026] [proxy_fcgi:error] [pid 54231:tid 54240] [client 172.190.142.176:10070] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 23:04:57.134471 2026] [proxy_fcgi:error] [pid 54231:tid 54246] [client 172.190.142.176:10070] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 23:04:57.351413 2026] [proxy_fcgi:error] [pid 54231:tid 54244] [client 172.190.142.176:10070] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 23:04:57.567462 2026] [proxy_fcgi:error] [pid 54231:tid 54257] [client 172.190.142.176:10070] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 23:04:57.796067 2026] [proxy_fcgi:error] [pid 54231:tid 54245] [client 172.190.142.176:10070] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 23:04:58.012969 2026] [proxy_fcgi:error] [pid 54231:tid 54238] [client 172.190.142.176:10070] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 23:04:58.230599 2026] [proxy_fcgi:error] [pid 54231:tid 54242] [client 172.190.142.176:10070] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 23:04:58.445142 2026] [:error] [pid 54231:tid 54253] [client 172.190.142.176:10070] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/sxdfrt.php"] [unique_id "aaGymuTvb5AeyJCdY7BEGwAAAFM"]
[Fri Feb 27 23:04:58.890619 2026] [:error] [pid 54231:tid 54255] [client 172.190.142.176:52722] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/sxdfrt.php"] [unique_id "aaGymuTvb5AeyJCdY7BEHwAAAFU"]
[Fri Feb 27 23:04:59.440905 2026] [:error] [pid 54103:tid 54173] [client 172.190.142.176:31167] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/sxdfrt.php"] [unique_id "aaGym-vG4MPCmE0B2sDNUwAAAMI"]
[Fri Feb 27 23:04:59.924565 2026] [:error] [pid 52073:tid 52094] [client 172.190.142.176:62355] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/sxdfrt.php"] [unique_id "aaGym4a650YPyxXVeRbLqQAAAZI"]
[Fri Feb 27 23:05:00.406484 2026] [:error] [pid 62998:tid 63010] [client 172.190.142.176:62705] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/tt.php"] [unique_id "aaGynFQeueXZDUmoLomF7QAAAQg"]
[Fri Feb 27 23:05:01.050605 2026] [:error] [pid 49306:tid 49318] [client 172.190.142.176:57155] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/tt.php"] [unique_id "aaGynfnSUDZue59Px9tpFQAAAUo"]
[Fri Feb 27 23:05:01.528180 2026] [:error] [pid 62998:tid 63006] [client 172.190.142.176:62351] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/tt.php"] [unique_id "aaGynVQeueXZDUmoLomF9QAAAQQ"]
[Fri Feb 27 23:05:02.120034 2026] [:error] [pid 56075:tid 56095] [client 172.190.142.176:4526] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/tt.php"] [unique_id "aaGynsKBhrfI6KNv9RhYkgAAABE"]
[Fri Feb 27 23:05:02.640855 2026] [:error] [pid 56075:tid 56098] [client 172.190.142.176:31150] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/kj.php"] [unique_id "aaGynsKBhrfI6KNv9RhYmAAAABQ"]
[Fri Feb 27 23:05:03.348326 2026] [:error] [pid 56075:tid 56097] [client 172.190.142.176:57195] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/kj.php"] [unique_id "aaGyn8KBhrfI6KNv9RhYogAAABM"]
[Fri Feb 27 23:05:04.151478 2026] [:error] [pid 56075:tid 56096] [client 172.190.142.176:36426] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/kj.php"] [unique_id "aaGyoMKBhrfI6KNv9RhYqgAAABI"]
[Fri Feb 27 23:05:04.611215 2026] [:error] [pid 56075:tid 56079] [client 172.190.142.176:57975] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/kj.php"] [unique_id "aaGyoMKBhrfI6KNv9RhYsQAAAAI"]
[Fri Feb 27 23:05:05.270095 2026] [:error] [pid 54231:tid 54238] [client 172.190.142.176:57180] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/f6.php"] [unique_id "aaGyoeTvb5AeyJCdY7BELAAAAEQ"]
[Fri Feb 27 23:05:05.787122 2026] [:error] [pid 62998:tid 63008] [client 172.190.142.176:62392] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/f6.php"] [unique_id "aaGyoVQeueXZDUmoLomF_QAAAQY"]
[Fri Feb 27 23:05:06.324851 2026] [:error] [pid 54103:tid 54185] [client 172.190.142.176:31121] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/f6.php"] [unique_id "aaGyouvG4MPCmE0B2sDNZQAAAM4"]
[Fri Feb 27 23:05:07.146045 2026] [:error] [pid 52073:tid 52076] [client 172.190.142.176:62695] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/f6.php"] [unique_id "aaGyo4a650YPyxXVeRbLtQAAAYA"]
[Fri Feb 27 23:05:08.044424 2026] [:error] [pid 49306:tid 49314] [client 172.190.142.176:4179] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ocxla.php"] [unique_id "aaGypPnSUDZue59Px9tpIwAAAUY"]
[Fri Feb 27 23:05:08.583425 2026] [:error] [pid 54103:tid 54192] [client 172.190.142.176:10098] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ocxla.php"] [unique_id "aaGypOvG4MPCmE0B2sDNcwAAANU"]
[Fri Feb 27 23:05:09.126028 2026] [:error] [pid 52073:tid 52092] [client 172.190.142.176:62685] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ocxla.php"] [unique_id "aaGypYa650YPyxXVeRbLvQAAAZA"]
[Fri Feb 27 23:05:09.612537 2026] [:error] [pid 56075:tid 56084] [client 172.190.142.176:57187] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ocxla.php"] [unique_id "aaGypcKBhrfI6KNv9RhY0AAAAAc"]
[Fri Feb 27 23:05:10.061703 2026] [:error] [pid 56075:tid 56082] [client 172.190.142.176:31111] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/god.php"] [unique_id "aaGypsKBhrfI6KNv9RhY1gAAAAU"]
[Fri Feb 27 23:05:10.671449 2026] [:error] [pid 62998:tid 63015] [client 172.190.142.176:57172] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/god.php"] [unique_id "aaGyplQeueXZDUmoLomGDQAAAQ0"]
[Fri Feb 27 23:05:11.187410 2026] [:error] [pid 52073:tid 52093] [client 172.190.142.176:4541] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/god.php"] [unique_id "aaGyp4a650YPyxXVeRbLwgAAAZE"]
[Fri Feb 27 23:05:11.717167 2026] [:error] [pid 52073:tid 52076] [client 172.190.142.176:4533] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/god.php"] [unique_id "aaGyp4a650YPyxXVeRbLyAAAAYA"]
[Fri Feb 27 23:05:12.190515 2026] [:error] [pid 49306:tid 49310] [client 172.190.142.176:10085] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/cu.php"] [unique_id "aaGyqPnSUDZue59Px9tpLAAAAUI"]
[Fri Feb 27 23:05:12.867135 2026] [:error] [pid 56075:tid 56079] [client 172.190.142.176:29250] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/cu.php"] [unique_id "aaGyqMKBhrfI6KNv9RhY6AAAAAI"]
[Fri Feb 27 23:05:13.510705 2026] [:error] [pid 52073:tid 52088] [client 172.190.142.176:4491] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/cu.php"] [unique_id "aaGyqYa650YPyxXVeRbLzQAAAYw"]
[Fri Feb 27 23:05:14.357428 2026] [:error] [pid 56075:tid 56083] [client 172.190.142.176:4535] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/cu.php"] [unique_id "aaGyqsKBhrfI6KNv9RhY-gAAAAY"]
[Fri Feb 27 23:05:14.811605 2026] [:error] [pid 56075:tid 56077] [client 172.190.142.176:31107] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/zz.php"] [unique_id "aaGyqsKBhrfI6KNv9RhZAwAAAAA"]
[Fri Feb 27 23:05:15.270775 2026] [:error] [pid 56075:tid 56086] [client 172.190.142.176:57198] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/zz.php"] [unique_id "aaGyq8KBhrfI6KNv9RhZDAAAAAk"]
[Fri Feb 27 23:05:15.806282 2026] [:error] [pid 62998:tid 63009] [client 172.190.142.176:19208] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/zz.php"] [unique_id "aaGyq1QeueXZDUmoLomGJAAAAQc"]
[Fri Feb 27 23:05:16.367410 2026] [:error] [pid 49306:tid 49311] [client 172.190.142.176:4222] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/zz.php"] [unique_id "aaGyrPnSUDZue59Px9tpMgAAAUM"]
[Fri Feb 27 23:05:16.904955 2026] [:error] [pid 54102:tid 54161] [client 172.190.142.176:57171] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xqq.php"] [unique_id "aaGyrHi74D4fiYUm_GeR0QAAAJE"]
[Fri Feb 27 23:05:17.398220 2026] [:error] [pid 54231:tid 54257] [client 172.190.142.176:37796] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xqq.php"] [unique_id "aaGyreTvb5AeyJCdY7BEOwAAAFc"]
[Fri Feb 27 23:05:17.849394 2026] [:error] [pid 62998:tid 63015] [client 172.190.142.176:19204] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xqq.php"] [unique_id "aaGyrVQeueXZDUmoLomGOAAAAQ0"]
[Fri Feb 27 23:05:18.325538 2026] [:error] [pid 54103:tid 54178] [client 172.190.142.176:19252] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xqq.php"] [unique_id "aaGyruvG4MPCmE0B2sDNeQAAAMc"]
[Fri Feb 27 23:05:18.808685 2026] [:error] [pid 54231:tid 54239] [client 172.190.142.176:57941] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/sdsa.php"] [unique_id "aaGyruTvb5AeyJCdY7BEQgAAAEU"]
[Fri Feb 27 23:05:19.289844 2026] [:error] [pid 54101:tid 54123] [client 172.190.142.176:57934] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/sdsa.php"] [unique_id "aaGyr1Y5qgRktcYTGFtddgAAAc8"]
[Fri Feb 27 23:05:19.749345 2026] [:error] [pid 56075:tid 56090] [client 172.190.142.176:31106] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/sdsa.php"] [unique_id "aaGyr8KBhrfI6KNv9RhZKwAAAAw"]
[Fri Feb 27 23:05:20.189107 2026] [:error] [pid 56075:tid 56082] [client 172.190.142.176:19222] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/sdsa.php"] [unique_id "aaGysMKBhrfI6KNv9RhZMAAAAAU"]
[Fri Feb 27 23:05:20.755999 2026] [:error] [pid 62998:tid 63015] [client 172.190.142.176:57972] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ms-edit.php"] [unique_id "aaGysFQeueXZDUmoLomGQQAAAQ0"]
[Fri Feb 27 23:05:21.218045 2026] [:error] [pid 54103:tid 54186] [client 172.190.142.176:62340] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ms-edit.php"] [unique_id "aaGysevG4MPCmE0B2sDNggAAAM8"]
[Fri Feb 27 23:05:21.753634 2026] [:error] [pid 54231:tid 54251] [client 172.190.142.176:57930] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ms-edit.php"] [unique_id "aaGyseTvb5AeyJCdY7BERwAAAFE"]
[Fri Feb 27 23:05:22.259364 2026] [:error] [pid 62998:tid 63025] [client 172.190.142.176:57177] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ms-edit.php"] [unique_id "aaGyslQeueXZDUmoLomGRgAAARc"]
[Fri Feb 27 23:05:22.853429 2026] [:error] [pid 56075:tid 56099] [client 172.190.142.176:62375] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-conflg.php"] [unique_id "aaGyssKBhrfI6KNv9RhZOgAAABU"]
[Fri Feb 27 23:05:23.370050 2026] [:error] [pid 56075:tid 56097] [client 172.190.142.176:31109] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-conflg.php"] [unique_id "aaGys8KBhrfI6KNv9RhZPwAAABM"]
[Fri Feb 27 23:05:23.855241 2026] [:error] [pid 54103:tid 54193] [client 172.190.142.176:4164] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-conflg.php"] [unique_id "aaGys-vG4MPCmE0B2sDNigAAANY"]
[Fri Feb 27 23:05:24.376975 2026] [:error] [pid 54101:tid 54132] [client 172.190.142.176:31160] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-conflg.php"] [unique_id "aaGytFY5qgRktcYTGFtddwAAAdg"]
[Fri Feb 27 23:05:24.888349 2026] [:error] [pid 62998:tid 63015] [client 172.190.142.176:13002] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/un.php"] [unique_id "aaGytFQeueXZDUmoLomGTwAAAQ0"]
[Fri Feb 27 23:05:25.604832 2026] [:error] [pid 49306:tid 49329] [client 172.190.142.176:57207] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/un.php"] [unique_id "aaGytfnSUDZue59Px9tpPgAAAVU"]
[Fri Feb 27 23:05:26.066794 2026] [:error] [pid 56075:tid 56102] [client 172.190.142.176:62364] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/un.php"] [unique_id "aaGytsKBhrfI6KNv9RhZRQAAABg"]
[Fri Feb 27 23:05:26.559006 2026] [:error] [pid 56075:tid 56092] [client 172.190.142.176:19226] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/un.php"] [unique_id "aaGytsKBhrfI6KNv9RhZSQAAAA4"]
[Fri Feb 27 23:05:27.142103 2026] [:error] [pid 54231:tid 54246] [client 172.190.142.176:10089] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/100.kb.php"] [unique_id "aaGyt-Tvb5AeyJCdY7BETQAAAEw"]
[Fri Feb 27 23:05:27.599446 2026] [:error] [pid 56075:tid 56078] [client 172.190.142.176:4810] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/100.kb.php"] [unique_id "aaGyt8KBhrfI6KNv9RhZUQAAAAE"]
[Fri Feb 27 23:05:28.214719 2026] [:error] [pid 56075:tid 56095] [client 172.190.142.176:4211] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/100.kb.php"] [unique_id "aaGyuMKBhrfI6KNv9RhZVgAAABE"]
[Fri Feb 27 23:05:28.793908 2026] [:error] [pid 62998:tid 63020] [client 172.190.142.176:57186] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/100.kb.php"] [unique_id "aaGyuFQeueXZDUmoLomGWwAAARI"]
[Fri Feb 27 23:05:29.024359 2026] [:error] [pid 54103:tid 54188] [client 172.190.142.176:31134] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/sid3.php"] [unique_id "aaGyuevG4MPCmE0B2sDNkwAAANE"]
[Fri Feb 27 23:05:29.548695 2026] [:error] [pid 54101:tid 54117] [client 172.190.142.176:19229] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/sid3.php"] [unique_id "aaGyuVY5qgRktcYTGFtdfAAAAck"]
[Fri Feb 27 23:05:30.065962 2026] [:error] [pid 49306:tid 49312] [client 172.190.142.176:62367] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/sid3.php"] [unique_id "aaGyuvnSUDZue59Px9tpRAAAAUQ"]
[Fri Feb 27 23:05:30.564573 2026] [:error] [pid 49306:tid 49313] [client 172.190.142.176:19209] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/sid3.php"] [unique_id "aaGyuvnSUDZue59Px9tpSAAAAUU"]
[Fri Feb 27 23:18:54.598547 2026] [:error] [pid 52073:tid 52078] [client 20.220.221.45:17852] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaG13oa650YPyxXVeRbSyQAAAYI"]
[Fri Feb 27 23:18:55.014684 2026] [:error] [pid 52073:tid 52097] [client 20.220.221.45:17813] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaG134a650YPyxXVeRbSzgAAAZU"]
[Fri Feb 27 23:18:55.431781 2026] [:error] [pid 52073:tid 52087] [client 20.220.221.45:17550] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaG134a650YPyxXVeRbS0gAAAYs"]
[Fri Feb 27 23:18:55.942991 2026] [:error] [pid 52073:tid 52079] [client 20.220.221.45:17549] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaG134a650YPyxXVeRbS2AAAAYM"]
[Fri Feb 27 23:53:33.665792 2026] [:error] [pid 54231:tid 54250] [client 146.190.160.27:54565] [client 146.190.160.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/"] [unique_id "aaG9_eTvb5AeyJCdY7BR2AAAAFA"]
[Fri Feb 27 23:53:34.238640 2026] [:error] [pid 56075:tid 56085] [client 146.190.160.27:55424] [client 146.190.160.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/"] [unique_id "aaG9_sKBhrfI6KNv9RiCygAAAAg"]
[Fri Feb 27 23:53:38.666807 2026] [:error] [pid 54102:tid 54150] [client 146.190.160.27:62618] [client 146.190.160.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "aaG-Ani74D4fiYUm_GearQAAAIY"]
[Sat Feb 28 00:17:44.823473 2026] [:error] [pid 52073:tid 52081] [client 4.204.192.31:34294] [client 4.204.192.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaHDqIa650YPyxXVeRYF3wAAAYU"]
[Sat Feb 28 00:17:45.239836 2026] [:error] [pid 54102:tid 54161] [client 4.204.192.31:34300] [client 4.204.192.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaHDqXi74D4fiYUm_GefGAAAAJE"]
[Sat Feb 28 00:17:45.651123 2026] [:error] [pid 62998:tid 63002] [client 4.204.192.31:33785] [client 4.204.192.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaHDqVQeueXZDUmoLomhBAAAAQE"]
[Sat Feb 28 00:17:46.066508 2026] [:error] [pid 52073:tid 52092] [client 4.204.192.31:33750] [client 4.204.192.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaHDqoa650YPyxXVeRYF5AAAAZA"]
[Sat Feb 28 00:37:23.162897 2026] [:error] [pid 38586:tid 38594] [client 20.151.128.128:19452] [client 20.151.128.128] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/cah.php"] [unique_id "aaHIQ7_i6nvKNhjFW7UbQgAAAQU"]
[Sat Feb 28 00:37:30.692960 2026] [:error] [pid 15240:tid 15254] [client 20.151.128.128:19394] [client 20.151.128.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cah.php"] [unique_id "aaHISi1iKL_41Rk9A9NXqAAAAAw"]
[Sat Feb 28 00:37:32.563735 2026] [:error] [pid 15240:tid 15260] [client 20.151.128.128:19328] [client 20.151.128.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cah.php"] [unique_id "aaHITC1iKL_41Rk9A9NXqgAAABI"]
[Sat Feb 28 00:37:37.541382 2026] [:error] [pid 15098:tid 15124] [client 20.151.128.128:19399] [client 20.151.128.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cah.php"] [unique_id "aaHIUckFqny8dQQbmTkX9QAAAJI"]
[Sat Feb 28 00:37:38.984235 2026] [:error] [pid 15240:tid 15264] [client 20.151.128.128:19430] [client 20.151.128.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/pwnd/acp.php"] [unique_id "aaHIUi1iKL_41Rk9A9NXtQAAABY"]
[Sat Feb 28 00:37:41.395542 2026] [:error] [pid 38620:tid 38639] [client 20.151.128.128:19339] [client 20.151.128.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/pwnd/acp.php"] [unique_id "aaHIVQP6I7SRqrhh7RrJuAAAAVE"]
[Sat Feb 28 00:37:44.249736 2026] [:error] [pid 38620:tid 38645] [client 20.151.128.128:19333] [client 20.151.128.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/pwnd/acp.php"] [unique_id "aaHIWAP6I7SRqrhh7RrJzAAAAVc"]
[Sat Feb 28 00:37:52.246902 2026] [:error] [pid 15240:tid 15266] [client 20.151.128.128:19438] [client 20.151.128.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/pwnd/acp.php"] [unique_id "aaHIYC1iKL_41Rk9A9NX7QAAABg"]
[Sat Feb 28 00:37:56.474868 2026] [:error] [pid 15098:tid 15122] [client 20.151.128.128:19344] [client 20.151.128.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/acp.php"] [unique_id "aaHIZMkFqny8dQQbmTkYAQAAAJA"]
[Sat Feb 28 00:37:58.300312 2026] [:error] [pid 38586:tid 38610] [client 20.151.128.128:19392] [client 20.151.128.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/acp.php"] [unique_id "aaHIZr_i6nvKNhjFW7UbnwAAARU"]
[Sat Feb 28 00:38:02.156447 2026] [:error] [pid 15100:tid 15175] [client 20.151.128.128:19418] [client 20.151.128.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/acp.php"] [unique_id "aaHIakOEbzcINan_ctKvHwAAAE8"]
[Sat Feb 28 00:38:03.799921 2026] [:error] [pid 38586:tid 38611] [client 20.151.128.128:19425] [client 20.151.128.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/acp.php"] [unique_id "aaHIa7_i6nvKNhjFW7UbswAAARY"]
[Sat Feb 28 00:38:05.721085 2026] [:error] [pid 15240:tid 15257] [client 20.151.128.128:19414] [client 20.151.128.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/muzu.php"] [unique_id "aaHIbS1iKL_41Rk9A9NYCQAAAA8"]
[Sat Feb 28 00:38:07.160448 2026] [:error] [pid 15099:tid 15146] [client 20.151.128.128:19421] [client 20.151.128.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/muzu.php"] [unique_id "aaHIb-nvP2vtPjYDq_gmwQAAAM0"]
[Sat Feb 28 00:38:08.143661 2026] [:error] [pid 38586:tid 38607] [client 20.151.128.128:19330] [client 20.151.128.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/muzu.php"] [unique_id "aaHIcL_i6nvKNhjFW7UbvAAAARI"]
[Sat Feb 28 00:38:11.285717 2026] [:error] [pid 38620:tid 38646] [client 20.151.128.128:19449] [client 20.151.128.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/muzu.php"] [unique_id "aaHIcwP6I7SRqrhh7RrKJwAAAVg"]
[Sat Feb 28 00:38:11.873398 2026] [:error] [pid 38620:tid 38644] [client 20.151.128.128:19401] [client 20.151.128.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/trx24.php"] [unique_id "aaHIcwP6I7SRqrhh7RrKKwAAAVY"]
[Sat Feb 28 00:38:14.199623 2026] [:error] [pid 38620:tid 38635] [client 20.151.128.128:19429] [client 20.151.128.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/trx24.php"] [unique_id "aaHIdgP6I7SRqrhh7RrKRAAAAU0"]
[Sat Feb 28 00:38:29.942913 2026] [proxy_fcgi:error] [pid 15240:tid 15264] [client 20.151.128.128:19435] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 00:38:30.170677 2026] [proxy_fcgi:error] [pid 15240:tid 15255] [client 20.151.128.128:19435] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 00:38:30.380981 2026] [proxy_fcgi:error] [pid 15240:tid 15265] [client 20.151.128.128:19435] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 00:38:30.591138 2026] [proxy_fcgi:error] [pid 15240:tid 15248] [client 20.151.128.128:19435] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 00:38:30.809707 2026] [proxy_fcgi:error] [pid 15240:tid 15242] [client 20.151.128.128:19435] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 00:38:31.019644 2026] [proxy_fcgi:error] [pid 15240:tid 15249] [client 20.151.128.128:19435] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 00:38:31.229340 2026] [proxy_fcgi:error] [pid 15240:tid 15261] [client 20.151.128.128:19435] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 00:38:31.450160 2026] [proxy_fcgi:error] [pid 15240:tid 15262] [client 20.151.128.128:19435] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 00:38:31.661436 2026] [proxy_fcgi:error] [pid 15240:tid 15252] [client 20.151.128.128:19435] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 00:38:31.880484 2026] [proxy_fcgi:error] [pid 15240:tid 15244] [client 20.151.128.128:19435] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 00:38:32.362749 2026] [:error] [pid 15240:tid 15253] [client 20.151.128.128:19435] [client 20.151.128.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/asf.php"] [unique_id "aaHIiC1iKL_41Rk9A9NYRgAAAAs"]
[Sat Feb 28 00:38:34.535202 2026] [:error] [pid 15098:tid 15120] [client 20.151.128.128:19426] [client 20.151.128.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/asf.php"] [unique_id "aaHIiskFqny8dQQbmTkYOgAAAI4"]
[Sat Feb 28 00:38:36.704900 2026] [:error] [pid 38586:tid 38589] [client 20.151.128.128:19336] [client 20.151.128.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/asf.php"] [unique_id "aaHIjL_i6nvKNhjFW7Ub6QAAAQA"]
[Sat Feb 28 00:38:38.415412 2026] [:error] [pid 15100:tid 15183] [client 20.151.128.128:19412] [client 20.151.128.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/asf.php"] [unique_id "aaHIjkOEbzcINan_ctKvSwAAAFc"]
[Sat Feb 28 00:38:41.024454 2026] [:error] [pid 38620:tid 38630] [client 20.151.128.128:19348] [client 20.151.128.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sa.php"] [unique_id "aaHIkQP6I7SRqrhh7RrK7gAAAUg"]
[Sat Feb 28 00:38:44.240709 2026] [:error] [pid 38620:tid 38635] [client 20.151.128.128:19450] [client 20.151.128.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sa.php"] [unique_id "aaHIlAP6I7SRqrhh7RrK-wAAAU0"]
[Sat Feb 28 00:38:45.791810 2026] [:error] [pid 15100:tid 15167] [client 20.151.128.128:19384] [client 20.151.128.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sa.php"] [unique_id "aaHIlUOEbzcINan_ctKvagAAAEc"]
[Sat Feb 28 00:38:46.886060 2026] [:error] [pid 38586:tid 38611] [client 20.151.128.128:19422] [client 20.151.128.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sa.php"] [unique_id "aaHIlr_i6nvKNhjFW7UcBAAAARY"]
[Sat Feb 28 03:56:00.354455 2026] [proxy_fcgi:error] [pid 39184:tid 39224] [client 20.151.113.230:64586] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 03:56:00.565743 2026] [proxy_fcgi:error] [pid 39184:tid 39221] [client 20.151.113.230:64586] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 03:56:00.985761 2026] [proxy_fcgi:error] [pid 39184:tid 39226] [client 20.151.113.230:64586] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 03:56:01.195855 2026] [proxy_fcgi:error] [pid 39184:tid 39227] [client 20.151.113.230:64586] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 03:56:01.406819 2026] [proxy_fcgi:error] [pid 39184:tid 39228] [client 20.151.113.230:64586] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 03:56:01.616321 2026] [proxy_fcgi:error] [pid 39184:tid 39229] [client 20.151.113.230:64586] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 03:56:01.832669 2026] [proxy_fcgi:error] [pid 39184:tid 39230] [client 20.151.113.230:64586] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 03:56:02.041369 2026] [proxy_fcgi:error] [pid 39184:tid 39231] [client 20.151.113.230:64586] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 03:56:02.250125 2026] [proxy_fcgi:error] [pid 39184:tid 39219] [client 20.151.113.230:64586] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 03:56:02.455031 2026] [:error] [pid 39184:tid 39232] [client 20.151.113.230:64586] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/8.php"] [unique_id "aaH20ltZF9Zd_U7easD5zAAAAE0"]
[Sat Feb 28 03:56:02.870598 2026] [:error] [pid 39183:tid 39204] [client 20.151.113.230:64576] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/8.php"] [unique_id "aaH20hCf4HvhVePw3LY3BwAAAAw"]
[Sat Feb 28 03:56:03.285934 2026] [:error] [pid 39183:tid 39192] [client 20.151.113.230:64622] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/8.php"] [unique_id "aaH20xCf4HvhVePw3LY3CAAAAAA"]
[Sat Feb 28 03:56:03.695417 2026] [:error] [pid 39183:tid 39209] [client 20.151.113.230:64536] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/8.php"] [unique_id "aaH20xCf4HvhVePw3LY3DQAAABE"]
[Sat Feb 28 03:56:04.105012 2026] [:error] [pid 39183:tid 39214] [client 20.151.113.230:64522] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/shop.php"] [unique_id "aaH21BCf4HvhVePw3LY3DwAAABY"]
[Sat Feb 28 03:56:04.515059 2026] [:error] [pid 39184:tid 39238] [client 20.151.113.230:64606] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/shop.php"] [unique_id "aaH21FtZF9Zd_U7easD50AAAAFM"]
[Sat Feb 28 03:56:04.924223 2026] [:error] [pid 39183:tid 39197] [client 20.151.113.230:64594] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/shop.php"] [unique_id "aaH21BCf4HvhVePw3LY3EgAAAAU"]
[Sat Feb 28 03:56:05.333698 2026] [:error] [pid 39292:tid 39305] [client 20.151.113.230:64629] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/shop.php"] [unique_id "aaH21aIAO5fN7BxyqcHPEgAAAMs"]
[Sat Feb 28 03:56:05.742029 2026] [:error] [pid 39185:tid 39254] [client 20.151.113.230:64577] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cxxuv.php"] [unique_id "aaH21RVE-FfM89u7BQb6tgAAAIg"]
[Sat Feb 28 03:56:06.182228 2026] [:error] [pid 39184:tid 39236] [client 20.151.113.230:64530] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cxxuv.php"] [unique_id "aaH21ltZF9Zd_U7easD51AAAAFE"]
[Sat Feb 28 03:56:06.597433 2026] [:error] [pid 39184:tid 39223] [client 20.151.113.230:64598] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cxxuv.php"] [unique_id "aaH21ltZF9Zd_U7easD51QAAAEQ"]
[Sat Feb 28 03:56:07.012168 2026] [:error] [pid 39184:tid 39221] [client 20.151.113.230:64591] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cxxuv.php"] [unique_id "aaH211tZF9Zd_U7easD51wAAAEI"]
[Sat Feb 28 03:56:07.429523 2026] [:error] [pid 39183:tid 39192] [client 20.151.113.230:63844] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/b.php"] [unique_id "aaH21xCf4HvhVePw3LY3GwAAAAA"]
[Sat Feb 28 03:56:07.845066 2026] [:error] [pid 39183:tid 39210] [client 20.151.113.230:64627] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/b.php"] [unique_id "aaH21xCf4HvhVePw3LY3HQAAABI"]
[Sat Feb 28 03:56:08.260323 2026] [:error] [pid 39183:tid 39211] [client 20.151.113.230:64515] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/b.php"] [unique_id "aaH22BCf4HvhVePw3LY3IAAAABM"]
[Sat Feb 28 03:56:08.669499 2026] [:error] [pid 39183:tid 39194] [client 20.151.113.230:64539] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/b.php"] [unique_id "aaH22BCf4HvhVePw3LY3JgAAAAI"]
[Sat Feb 28 03:56:09.083691 2026] [:error] [pid 39183:tid 39196] [client 20.151.113.230:64602] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gi.php"] [unique_id "aaH22RCf4HvhVePw3LY3KgAAAAQ"]
[Sat Feb 28 03:56:09.502009 2026] [:error] [pid 39184:tid 39233] [client 20.151.113.230:64547] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gi.php"] [unique_id "aaH22VtZF9Zd_U7easD54AAAAE4"]
[Sat Feb 28 03:56:09.918742 2026] [:error] [pid 39185:tid 39263] [client 20.151.113.230:64514] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gi.php"] [unique_id "aaH22RVE-FfM89u7BQb6vgAAAJE"]
[Sat Feb 28 03:56:10.334999 2026] [:error] [pid 39185:tid 39267] [client 20.151.113.230:64528] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gi.php"] [unique_id "aaH22hVE-FfM89u7BQb6wAAAAJU"]
[Sat Feb 28 04:06:51.029588 2026] [proxy_fcgi:error] [pid 39185:tid 39268] [client 20.220.8.221:6297] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 04:06:51.239174 2026] [proxy_fcgi:error] [pid 39185:tid 39251] [client 20.220.8.221:6297] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 04:06:51.882050 2026] [proxy_fcgi:error] [pid 39185:tid 39253] [client 20.220.8.221:6297] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 04:06:52.301164 2026] [proxy_fcgi:error] [pid 39185:tid 39269] [client 20.220.8.221:6297] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 04:06:52.714710 2026] [:error] [pid 39185:tid 39254] [client 20.220.8.221:6297] [client 20.220.8.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "aaH5XBVE-FfM89u7BQYDywAAAIg"]
[Sat Feb 28 04:06:54.214159 2026] [:error] [pid 39292:tid 39306] [client 20.220.8.221:6314] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/buy.php"] [unique_id "aaH5XqIAO5fN7BxyqcHb3wAAAMw"]
[Sat Feb 28 04:06:55.045662 2026] [:error] [pid 39292:tid 39298] [client 20.220.8.221:6295] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/buy.php"] [unique_id "aaH5X6IAO5fN7BxyqcHb6AAAAMQ"]
[Sat Feb 28 04:06:55.875626 2026] [:error] [pid 39292:tid 39304] [client 20.220.8.221:6291] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/buy.php"] [unique_id "aaH5X6IAO5fN7BxyqcHb8AAAAMo"]
[Sat Feb 28 04:06:56.698324 2026] [:error] [pid 39292:tid 39300] [client 20.220.8.221:6335] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/buy.php"] [unique_id "aaH5YKIAO5fN7BxyqcHb_QAAAMY"]
[Sat Feb 28 04:14:30.326583 2026] [proxy_fcgi:error] [pid 39184:tid 39233] [client 20.220.212.70:55071] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 04:14:30.559502 2026] [proxy_fcgi:error] [pid 39184:tid 39231] [client 20.220.212.70:55071] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 04:14:31.031367 2026] [proxy_fcgi:error] [pid 39184:tid 39228] [client 20.220.212.70:55071] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 04:14:31.244022 2026] [proxy_fcgi:error] [pid 39184:tid 39237] [client 20.220.212.70:55071] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 04:14:31.664019 2026] [proxy_fcgi:error] [pid 39184:tid 39236] [client 20.220.212.70:55071] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 04:14:31.881138 2026] [proxy_fcgi:error] [pid 39184:tid 39238] [client 20.220.212.70:55071] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 04:14:32.090328 2026] [proxy_fcgi:error] [pid 39184:tid 39223] [client 20.220.212.70:55071] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 04:14:32.513508 2026] [:error] [pid 39184:tid 39224] [client 20.220.212.70:55071] [client 20.220.212.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaH7KFtZF9Zd_U7easAGRAAAAEU"]
[Sat Feb 28 04:14:33.406833 2026] [:error] [pid 39184:tid 39227] [client 20.220.212.70:52787] [client 20.220.212.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaH7KVtZF9Zd_U7easAGSAAAAEg"]
[Sat Feb 28 04:14:34.256154 2026] [:error] [pid 39185:tid 39265] [client 20.220.212.70:5383] [client 20.220.212.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaH7KhVE-FfM89u7BQYKrwAAAJM"]
[Sat Feb 28 04:14:35.088818 2026] [:error] [pid 39184:tid 39233] [client 20.220.212.70:55101] [client 20.220.212.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaH7K1tZF9Zd_U7easAGTgAAAE4"]
[Sat Feb 28 04:14:58.184701 2026] [proxy_fcgi:error] [pid 39292:tid 39315] [client 4.204.192.31:17472] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 04:45:19.395151 2026] [:error] [pid 39292:tid 39309] [client 146.190.160.27:65374] [client 146.190.160.27] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 146.190.160.27, incrementing ddos counter"] [hostname "dwelectservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aaICX6IAO5fN7BxyqcEBBgAAAM8"]
[Sat Feb 28 04:45:19.405633 2026] [proxy_fcgi:error] [pid 39292:tid 39309] [client 146.190.160.27:65374] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 04:45:21.368483 2026] [:error] [pid 39292:tid 39310] [client 146.190.160.27:65374] [client 146.190.160.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aaICYaIAO5fN7BxyqcEBFwAAANA"]
[Sat Feb 28 04:45:21.697306 2026] [:error] [pid 39292:tid 39307] [client 146.190.160.27:58142] [client 146.190.160.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aaICYaIAO5fN7BxyqcEBGgAAAM0"]
[Sat Feb 28 04:45:22.025043 2026] [:error] [pid 39292:tid 39296] [client 146.190.160.27:59130] [client 146.190.160.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aaICYqIAO5fN7BxyqcEBHAAAAMI"]
[Sat Feb 28 04:45:22.351139 2026] [:error] [pid 39184:tid 39238] [client 146.190.160.27:60389] [client 146.190.160.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aaICYltZF9Zd_U7easAWggAAAFM"]
[Sat Feb 28 04:45:22.677767 2026] [:error] [pid 11791:tid 11803] [client 146.190.160.27:61429] [client 146.190.160.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aaICYmuX5e1Q32gqxH1pOgAAAQo"]
[Sat Feb 28 04:45:23.006586 2026] [:error] [pid 11791:tid 11793] [client 146.190.160.27:62543] [client 146.190.160.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aaICY2uX5e1Q32gqxH1pPAAAAQA"]
[Sat Feb 28 04:45:23.333697 2026] [:error] [pid 39184:tid 39222] [client 146.190.160.27:63846] [client 146.190.160.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aaICY1tZF9Zd_U7easAWiQAAAEM"]
[Sat Feb 28 06:08:34.969385 2026] [proxy_fcgi:error] [pid 22194:tid 22204] [client 20.220.212.70:5292] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 06:08:35.180026 2026] [proxy_fcgi:error] [pid 22194:tid 22197] [client 20.220.212.70:5292] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 06:08:35.389612 2026] [proxy_fcgi:error] [pid 22194:tid 22203] [client 20.220.212.70:5292] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 06:08:36.988998 2026] [proxy_fcgi:error] [pid 22194:tid 22220] [client 20.220.212.70:5292] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 06:08:37.201143 2026] [proxy_fcgi:error] [pid 22194:tid 22205] [client 20.220.212.70:5292] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 06:08:37.430198 2026] [proxy_fcgi:error] [pid 22194:tid 22201] [client 20.220.212.70:5292] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 06:08:37.848640 2026] [proxy_fcgi:error] [pid 22194:tid 22202] [client 20.220.212.70:5292] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 06:08:38.075215 2026] [proxy_fcgi:error] [pid 22194:tid 22198] [client 20.220.212.70:5292] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 06:08:38.284025 2026] [proxy_fcgi:error] [pid 22194:tid 22211] [client 20.220.212.70:5292] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 06:08:38.494446 2026] [proxy_fcgi:error] [pid 22194:tid 22203] [client 20.220.212.70:5292] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 06:08:38.701362 2026] [:error] [pid 22194:tid 22206] [client 20.220.212.70:5292] [client 20.220.212.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/info.php"] [unique_id "aaIV5n6mbajs3bzQGyvzbQAAAUo"]
[Sat Feb 28 06:08:39.534980 2026] [:error] [pid 22194:tid 22201] [client 20.220.212.70:55087] [client 20.220.212.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/info.php"] [unique_id "aaIV536mbajs3bzQGyvzcwAAAUU"]
[Sat Feb 28 06:08:40.378308 2026] [:error] [pid 39183:tid 39204] [client 20.220.212.70:5287] [client 20.220.212.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/info.php"] [unique_id "aaIV6BCf4HvhVePw3LZoqAAAAAw"]
[Sat Feb 28 06:08:41.215251 2026] [:error] [pid 39184:tid 39224] [client 20.220.212.70:5285] [client 20.220.212.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/info.php"] [unique_id "aaIV6VtZF9Zd_U7easAz7gAAAEU"]
[Sat Feb 28 06:21:50.656777 2026] [proxy_fcgi:error] [pid 39292:tid 39311] [client 4.204.192.31:2813] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 07:15:50.761794 2026] [proxy_fcgi:error] [pid 39292:tid 39310] [client 40.89.156.16:40813] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 07:15:51.000628 2026] [proxy_fcgi:error] [pid 39292:tid 39306] [client 40.89.156.16:40813] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 07:15:51.239686 2026] [proxy_fcgi:error] [pid 39292:tid 39312] [client 40.89.156.16:40813] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 07:15:51.482698 2026] [proxy_fcgi:error] [pid 39292:tid 39314] [client 40.89.156.16:40813] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 07:15:51.721494 2026] [proxy_fcgi:error] [pid 39292:tid 39302] [client 40.89.156.16:40813] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 07:15:52.298216 2026] [proxy_fcgi:error] [pid 39292:tid 39313] [client 40.89.156.16:40813] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 07:15:52.538913 2026] [proxy_fcgi:error] [pid 39292:tid 39305] [client 40.89.156.16:40813] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 07:15:52.788786 2026] [proxy_fcgi:error] [pid 39292:tid 39311] [client 40.89.156.16:40813] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 07:15:53.030069 2026] [proxy_fcgi:error] [pid 39292:tid 39317] [client 40.89.156.16:40813] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 07:15:53.273701 2026] [:error] [pid 39292:tid 39309] [client 40.89.156.16:40813] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dom.php"] [unique_id "aaIlqaIAO5fN7BxyqcGT0gAAAM8"]
[Sat Feb 28 07:15:55.735754 2026] [:error] [pid 11791:tid 11794] [client 40.89.156.16:52262] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dom.php"] [unique_id "aaIlq2uX5e1Q32gqxH2_jAAAAQE"]
[Sat Feb 28 07:15:58.322423 2026] [:error] [pid 39183:tid 39204] [client 40.89.156.16:40790] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dom.php"] [unique_id "aaIlrhCf4HvhVePw3LZ4awAAAAw"]
[Sat Feb 28 07:16:00.414072 2026] [:error] [pid 11791:tid 11811] [client 40.89.156.16:31471] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dom.php"] [unique_id "aaIlsGuX5e1Q32gqxH2_lQAAARI"]
[Sat Feb 28 07:16:01.563419 2026] [:error] [pid 11791:tid 11805] [client 40.89.156.16:38906] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Okxob.php"] [unique_id "aaIlsWuX5e1Q32gqxH2_mgAAAQw"]
[Sat Feb 28 07:16:03.037067 2026] [:error] [pid 11791:tid 11803] [client 40.89.156.16:28525] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Okxob.php"] [unique_id "aaIls2uX5e1Q32gqxH2_nwAAAQo"]
[Sat Feb 28 07:16:03.858226 2026] [:error] [pid 39292:tid 39317] [client 40.89.156.16:35681] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Okxob.php"] [unique_id "aaIls6IAO5fN7BxyqcGT5AAAANc"]
[Sat Feb 28 07:16:04.734947 2026] [:error] [pid 39292:tid 39314] [client 40.89.156.16:36188] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Okxob.php"] [unique_id "aaIltKIAO5fN7BxyqcGT7AAAANQ"]
[Sat Feb 28 07:16:06.515386 2026] [:error] [pid 39292:tid 39309] [client 40.89.156.16:40810] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/moon3.php"] [unique_id "aaIltqIAO5fN7BxyqcGT-gAAAM8"]
[Sat Feb 28 07:16:09.052545 2026] [:error] [pid 39185:tid 39249] [client 40.89.156.16:37115] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/moon3.php"] [unique_id "aaIluRVE-FfM89u7BQZddAAAAIM"]
[Sat Feb 28 07:16:11.801055 2026] [:error] [pid 39185:tid 39261] [client 40.89.156.16:52615] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/moon3.php"] [unique_id "aaIluxVE-FfM89u7BQZdegAAAI8"]
[Sat Feb 28 07:16:24.066098 2026] [:error] [pid 39185:tid 39255] [client 40.89.156.16:5889] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/thui.php"] [unique_id "aaIlyBVE-FfM89u7BQZdigAAAIk"]
[Sat Feb 28 07:16:25.441367 2026] [:error] [pid 39292:tid 39307] [client 40.89.156.16:39636] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/thui.php"] [unique_id "aaIlyaIAO5fN7BxyqcGULgAAAM0"]
[Sat Feb 28 07:16:26.716974 2026] [:error] [pid 11791:tid 11812] [client 40.89.156.16:37337] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/thui.php"] [unique_id "aaIlymuX5e1Q32gqxH2_yQAAARM"]
[Sat Feb 28 07:16:27.574334 2026] [:error] [pid 39183:tid 39204] [client 40.89.156.16:28490] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/thui.php"] [unique_id "aaIlyxCf4HvhVePw3LZ4kwAAAAw"]
[Sat Feb 28 07:16:28.270495 2026] [:error] [pid 39185:tid 39258] [client 40.89.156.16:41386] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ebahvhhh.php"] [unique_id "aaIlzBVE-FfM89u7BQZdjQAAAIw"]
[Sat Feb 28 07:16:29.499603 2026] [:error] [pid 39292:tid 39310] [client 40.89.156.16:28028] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ebahvhhh.php"] [unique_id "aaIlzaIAO5fN7BxyqcGUSQAAANA"]
[Sat Feb 28 07:16:30.433346 2026] [:error] [pid 39292:tid 39303] [client 40.89.156.16:5696] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ebahvhhh.php"] [unique_id "aaIlzqIAO5fN7BxyqcGUTgAAAMk"]
[Sat Feb 28 07:16:31.355082 2026] [:error] [pid 39292:tid 39314] [client 40.89.156.16:35211] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ebahvhhh.php"] [unique_id "aaIlz6IAO5fN7BxyqcGUWgAAANQ"]
[Sat Feb 28 07:16:32.199667 2026] [:error] [pid 39183:tid 39205] [client 40.89.156.16:30112] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/snq.php"] [unique_id "aaIl0BCf4HvhVePw3LZ4pQAAAA0"]
[Sat Feb 28 07:16:33.127906 2026] [:error] [pid 22194:tid 22209] [client 40.89.156.16:27984] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/snq.php"] [unique_id "aaIl0X6mbajs3bzQGysepAAAAU0"]
[Sat Feb 28 07:16:34.010185 2026] [:error] [pid 22194:tid 22217] [client 40.89.156.16:36581] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/snq.php"] [unique_id "aaIl0n6mbajs3bzQGyserQAAAVU"]
[Sat Feb 28 07:16:34.587658 2026] [:error] [pid 39292:tid 39308] [client 40.89.156.16:51687] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/snq.php"] [unique_id "aaIl0qIAO5fN7BxyqcGUaAAAAM4"]
[Sat Feb 28 07:16:36.214329 2026] [:error] [pid 22194:tid 22217] [client 40.89.156.16:30173] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mcs.php"] [unique_id "aaIl1H6mbajs3bzQGysevgAAAVU"]
[Sat Feb 28 07:16:36.863612 2026] [:error] [pid 39292:tid 39295] [client 40.89.156.16:5487] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mcs.php"] [unique_id "aaIl1KIAO5fN7BxyqcGUewAAAME"]
[Sat Feb 28 07:16:39.711592 2026] [:error] [pid 39292:tid 39295] [client 40.89.156.16:5851] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mcs.php"] [unique_id "aaIl16IAO5fN7BxyqcGUngAAAME"]
[Sat Feb 28 07:16:43.940189 2026] [:error] [pid 39184:tid 39224] [client 40.89.156.16:32356] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mcs.php"] [unique_id "aaIl21tZF9Zd_U7easBIQwAAAEU"]
[Sat Feb 28 07:16:46.768054 2026] [:error] [pid 11791:tid 11809] [client 40.89.156.16:40031] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ok.php"] [unique_id "aaIl3muX5e1Q32gqxH2_6wAAARA"]
[Sat Feb 28 07:16:47.616226 2026] [:error] [pid 11791:tid 11797] [client 40.89.156.16:34236] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ok.php"] [unique_id "aaIl32uX5e1Q32gqxH2_9AAAAQQ"]
[Sat Feb 28 07:16:49.836721 2026] [:error] [pid 39185:tid 39252] [client 40.89.156.16:28443] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ok.php"] [unique_id "aaIl4RVE-FfM89u7BQZdpgAAAIY"]
[Sat Feb 28 07:16:51.109342 2026] [:error] [pid 39184:tid 39223] [client 40.89.156.16:32309] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ok.php"] [unique_id "aaIl41tZF9Zd_U7easBIUQAAAEQ"]
[Sat Feb 28 07:16:53.916455 2026] [proxy_fcgi:error] [pid 11791:tid 11801] [client 40.89.156.16:32292] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 07:16:54.156975 2026] [proxy_fcgi:error] [pid 11791:tid 11794] [client 40.89.156.16:32292] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 07:16:54.653485 2026] [proxy_fcgi:error] [pid 11791:tid 11804] [client 40.89.156.16:32292] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 07:16:55.132249 2026] [proxy_fcgi:error] [pid 11791:tid 11796] [client 40.89.156.16:32292] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 07:16:55.371318 2026] [proxy_fcgi:error] [pid 11791:tid 11797] [client 40.89.156.16:32292] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 07:16:55.879884 2026] [proxy_fcgi:error] [pid 11791:tid 11814] [client 40.89.156.16:32292] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 07:16:56.284974 2026] [proxy_fcgi:error] [pid 11791:tid 11810] [client 40.89.156.16:32292] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 07:16:56.792582 2026] [proxy_fcgi:error] [pid 11791:tid 11817] [client 40.89.156.16:32292] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 07:16:57.042499 2026] [:error] [pid 11791:tid 11816] [client 40.89.156.16:32292] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws59.php"] [unique_id "aaIl6WuX5e1Q32gqxH3AIQAAARc"]
[Sat Feb 28 07:16:59.873452 2026] [:error] [pid 39185:tid 39254] [client 40.89.156.16:33145] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws59.php"] [unique_id "aaIl6xVE-FfM89u7BQZdwAAAAIg"]
[Sat Feb 28 07:17:01.780281 2026] [:error] [pid 39183:tid 39207] [client 40.89.156.16:32736] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws59.php"] [unique_id "aaIl7RCf4HvhVePw3LZ4vAAAAA8"]
[Sat Feb 28 07:17:02.700942 2026] [:error] [pid 39185:tid 39246] [client 40.89.156.16:51450] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws59.php"] [unique_id "aaIl7hVE-FfM89u7BQZdwgAAAIA"]
[Sat Feb 28 07:17:03.531985 2026] [:error] [pid 39292:tid 39307] [client 40.89.156.16:32705] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-blog.php"] [unique_id "aaIl76IAO5fN7BxyqcGU1gAAAM0"]
[Sat Feb 28 07:17:05.077650 2026] [:error] [pid 39185:tid 39262] [client 40.89.156.16:28424] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-blog.php"] [unique_id "aaIl8RVE-FfM89u7BQZdxwAAAJA"]
[Sat Feb 28 07:17:06.059134 2026] [:error] [pid 22194:tid 22217] [client 40.89.156.16:43298] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-blog.php"] [unique_id "aaIl8n6mbajs3bzQGysfMAAAAVU"]
[Sat Feb 28 07:17:07.303701 2026] [:error] [pid 11791:tid 11794] [client 40.89.156.16:37811] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-blog.php"] [unique_id "aaIl82uX5e1Q32gqxH3AOAAAAQE"]
[Sat Feb 28 07:17:08.031254 2026] [:error] [pid 22194:tid 22207] [client 40.89.156.16:34632] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mamzi.php"] [unique_id "aaIl9H6mbajs3bzQGysfPQAAAUs"]
[Sat Feb 28 07:17:08.802086 2026] [:error] [pid 39184:tid 39220] [client 40.89.156.16:29768] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mamzi.php"] [unique_id "aaIl9FtZF9Zd_U7easBIdgAAAEE"]
[Sat Feb 28 07:17:09.539745 2026] [:error] [pid 39185:tid 39253] [client 40.89.156.16:29764] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mamzi.php"] [unique_id "aaIl9RVE-FfM89u7BQZdygAAAIc"]
[Sat Feb 28 07:17:10.146719 2026] [:error] [pid 22194:tid 22197] [client 40.89.156.16:43265] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mamzi.php"] [unique_id "aaIl9n6mbajs3bzQGysfRQAAAUE"]
[Sat Feb 28 07:17:10.779903 2026] [:error] [pid 39292:tid 39308] [client 40.89.156.16:32103] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/222.php"] [unique_id "aaIl9qIAO5fN7BxyqcGU6QAAAM4"]
[Sat Feb 28 07:17:11.918490 2026] [:error] [pid 11791:tid 11817] [client 40.89.156.16:37780] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/222.php"] [unique_id "aaIl92uX5e1Q32gqxH3AQAAAARg"]
[Sat Feb 28 07:17:12.647973 2026] [:error] [pid 39292:tid 39314] [client 40.89.156.16:29529] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/222.php"] [unique_id "aaIl-KIAO5fN7BxyqcGU8AAAANQ"]
[Sat Feb 28 07:17:13.357349 2026] [:error] [pid 39183:tid 39207] [client 40.89.156.16:54195] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/222.php"] [unique_id "aaIl-RCf4HvhVePw3LZ4zQAAAA8"]
[Sat Feb 28 07:17:14.671534 2026] [:error] [pid 39292:tid 39303] [client 40.89.156.16:31750] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ae.php"] [unique_id "aaIl-qIAO5fN7BxyqcGU-AAAAMk"]
[Sat Feb 28 07:17:15.921676 2026] [:error] [pid 39292:tid 39318] [client 40.89.156.16:43307] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ae.php"] [unique_id "aaIl-6IAO5fN7BxyqcGVAAAAANg"]
[Sat Feb 28 07:17:16.701919 2026] [:error] [pid 22194:tid 22198] [client 40.89.156.16:54159] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ae.php"] [unique_id "aaIl_H6mbajs3bzQGysfXAAAAUI"]
[Sat Feb 28 07:17:19.098838 2026] [:error] [pid 39183:tid 39210] [client 40.89.156.16:34997] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ae.php"] [unique_id "aaIl_xCf4HvhVePw3LZ40gAAABI"]
[Sat Feb 28 07:17:20.550463 2026] [:error] [pid 39292:tid 39296] [client 40.89.156.16:33098] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/06.php"] [unique_id "aaImAKIAO5fN7BxyqcGVDQAAAMI"]
[Sat Feb 28 07:17:21.856040 2026] [:error] [pid 22194:tid 22201] [client 40.89.156.16:37764] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/06.php"] [unique_id "aaImAX6mbajs3bzQGysfgAAAAUU"]
[Sat Feb 28 07:17:23.008021 2026] [:error] [pid 22194:tid 22217] [client 40.89.156.16:33095] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/06.php"] [unique_id "aaImA36mbajs3bzQGysfiQAAAVU"]
[Sat Feb 28 07:17:24.269907 2026] [:error] [pid 11791:tid 11793] [client 40.89.156.16:37772] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/06.php"] [unique_id "aaImBGuX5e1Q32gqxH3ATAAAAQA"]
[Sat Feb 28 07:17:25.226268 2026] [:error] [pid 11791:tid 11817] [client 40.89.156.16:29771] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws60.php"] [unique_id "aaImBWuX5e1Q32gqxH3AUQAAARg"]
[Sat Feb 28 07:17:26.304667 2026] [:error] [pid 11791:tid 11815] [client 40.89.156.16:54255] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws60.php"] [unique_id "aaImBmuX5e1Q32gqxH3AWAAAARY"]
[Sat Feb 28 07:17:27.440076 2026] [:error] [pid 11791:tid 11798] [client 40.89.156.16:35002] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws60.php"] [unique_id "aaImB2uX5e1Q32gqxH3AawAAAQU"]
[Sat Feb 28 07:17:28.256016 2026] [:error] [pid 39185:tid 39270] [client 40.89.156.16:51406] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws60.php"] [unique_id "aaImCBVE-FfM89u7BQZd7wAAAJg"]
[Sat Feb 28 07:17:29.478692 2026] [:error] [pid 39292:tid 39297] [client 40.89.156.16:33101] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-freya.php"] [unique_id "aaImCaIAO5fN7BxyqcGVOAAAAMM"]
[Sat Feb 28 07:17:30.674810 2026] [:error] [pid 39292:tid 39297] [client 40.89.156.16:34666] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-freya.php"] [unique_id "aaImCqIAO5fN7BxyqcGVTAAAAMM"]
[Sat Feb 28 07:17:31.841871 2026] [:error] [pid 39185:tid 39258] [client 40.89.156.16:29781] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-freya.php"] [unique_id "aaImCxVE-FfM89u7BQZeEAAAAIw"]
[Sat Feb 28 07:17:32.621791 2026] [:error] [pid 22194:tid 22201] [client 40.89.156.16:32120] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-freya.php"] [unique_id "aaImDH6mbajs3bzQGysfoQAAAUU"]
[Sat Feb 28 07:17:33.469105 2026] [:error] [pid 39292:tid 39298] [client 40.89.156.16:44212] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bb.php"] [unique_id "aaImDaIAO5fN7BxyqcGVdAAAAMQ"]
[Sat Feb 28 07:17:34.688329 2026] [:error] [pid 39184:tid 39222] [client 40.89.156.16:32308] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bb.php"] [unique_id "aaImDltZF9Zd_U7easBIlAAAAEM"]
[Sat Feb 28 07:17:35.374126 2026] [:error] [pid 22194:tid 22212] [client 40.89.156.16:32262] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bb.php"] [unique_id "aaImD36mbajs3bzQGysfrQAAAVA"]
[Sat Feb 28 07:17:36.046781 2026] [:error] [pid 11791:tid 11809] [client 40.89.156.16:37812] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bb.php"] [unique_id "aaImEGuX5e1Q32gqxH3AigAAARA"]
[Sat Feb 28 07:17:37.518875 2026] [:error] [pid 39292:tid 39301] [client 40.89.156.16:31171] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dsd.php"] [unique_id "aaImEaIAO5fN7BxyqcGVfQAAAMc"]
[Sat Feb 28 07:17:38.222825 2026] [:error] [pid 39185:tid 39268] [client 40.89.156.16:35059] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dsd.php"] [unique_id "aaImEhVE-FfM89u7BQZeMQAAAJY"]
[Sat Feb 28 07:17:39.029551 2026] [:error] [pid 39185:tid 39253] [client 40.89.156.16:28428] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dsd.php"] [unique_id "aaImExVE-FfM89u7BQZeNQAAAIc"]
[Sat Feb 28 07:17:41.271571 2026] [:error] [pid 39184:tid 39241] [client 40.89.156.16:38543] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dsd.php"] [unique_id "aaImFVtZF9Zd_U7easBImQAAAFY"]
[Sat Feb 28 07:17:42.865656 2026] [:error] [pid 22194:tid 22202] [client 40.89.156.16:29028] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/guk.php"] [unique_id "aaImFn6mbajs3bzQGysfzQAAAUY"]
[Sat Feb 28 07:17:43.777886 2026] [:error] [pid 22194:tid 22210] [client 40.89.156.16:44197] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/guk.php"] [unique_id "aaImF36mbajs3bzQGysf0gAAAU4"]
[Sat Feb 28 07:17:44.399044 2026] [:error] [pid 22194:tid 22201] [client 40.89.156.16:5585] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/guk.php"] [unique_id "aaImGH6mbajs3bzQGysf2wAAAUU"]
[Sat Feb 28 07:17:45.549857 2026] [:error] [pid 11791:tid 11797] [client 40.89.156.16:49361] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/guk.php"] [unique_id "aaImGWuX5e1Q32gqxH3AqwAAAQQ"]
[Sat Feb 28 07:17:46.805922 2026] [:error] [pid 39292:tid 39309] [client 40.89.156.16:38583] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/public/vx.php"] [unique_id "aaImGqIAO5fN7BxyqcGVkQAAAM8"]
[Sat Feb 28 07:17:48.360057 2026] [:error] [pid 39183:tid 39200] [client 40.89.156.16:37506] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/public/vx.php"] [unique_id "aaImHBCf4HvhVePw3LZ4_wAAAAg"]
[Sat Feb 28 07:17:49.088310 2026] [:error] [pid 39292:tid 39303] [client 40.89.156.16:40027] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/public/vx.php"] [unique_id "aaImHaIAO5fN7BxyqcGVlQAAAMk"]
[Sat Feb 28 07:17:49.859524 2026] [:error] [pid 39292:tid 39295] [client 40.89.156.16:51912] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/public/vx.php"] [unique_id "aaImHaIAO5fN7BxyqcGVmwAAAME"]
[Sat Feb 28 07:17:50.540045 2026] [:error] [pid 39292:tid 39309] [client 40.89.156.16:38552] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ze.php"] [unique_id "aaImHqIAO5fN7BxyqcGVoAAAAM8"]
[Sat Feb 28 07:17:51.169492 2026] [:error] [pid 39183:tid 39194] [client 40.89.156.16:34222] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ze.php"] [unique_id "aaImHxCf4HvhVePw3LZ5AwAAAAI"]
[Sat Feb 28 07:17:51.937638 2026] [:error] [pid 11791:tid 11809] [client 40.89.156.16:34198] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ze.php"] [unique_id "aaImH2uX5e1Q32gqxH3AtwAAARA"]
[Sat Feb 28 07:17:52.884526 2026] [:error] [pid 39183:tid 39192] [client 40.89.156.16:31362] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ze.php"] [unique_id "aaImIBCf4HvhVePw3LZ5BwAAAAA"]
[Sat Feb 28 07:17:54.049291 2026] [:error] [pid 39183:tid 39196] [client 40.89.156.16:40002] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file52.php"] [unique_id "aaImIhCf4HvhVePw3LZ5CQAAAAQ"]
[Sat Feb 28 07:17:55.974555 2026] [:error] [pid 22194:tid 22216] [client 40.89.156.16:51936] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file52.php"] [unique_id "aaImI36mbajs3bzQGysgAAAAAVQ"]
[Sat Feb 28 07:17:57.075953 2026] [proxy_fcgi:error] [pid 39292:tid 39309] [client 40.89.156.16:40397] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 07:17:57.313901 2026] [proxy_fcgi:error] [pid 39292:tid 39318] [client 40.89.156.16:40397] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 07:17:57.567785 2026] [proxy_fcgi:error] [pid 39292:tid 39302] [client 40.89.156.16:40397] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 07:17:57.806566 2026] [proxy_fcgi:error] [pid 39292:tid 39317] [client 40.89.156.16:40397] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 07:17:58.051061 2026] [proxy_fcgi:error] [pid 39292:tid 39299] [client 40.89.156.16:40397] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 07:17:58.384947 2026] [proxy_fcgi:error] [pid 39292:tid 39305] [client 40.89.156.16:40397] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 07:17:58.637883 2026] [proxy_fcgi:error] [pid 39292:tid 39311] [client 40.89.156.16:40397] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 07:17:59.189507 2026] [proxy_fcgi:error] [pid 39292:tid 39301] [client 40.89.156.16:40397] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 07:17:59.428024 2026] [proxy_fcgi:error] [pid 39292:tid 39313] [client 40.89.156.16:40397] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 07:17:59.666204 2026] [proxy_fcgi:error] [pid 39292:tid 39300] [client 40.89.156.16:40397] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 07:18:00.068723 2026] [:error] [pid 39292:tid 39309] [client 40.89.156.16:40397] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mans.php"] [unique_id "aaImKKIAO5fN7BxyqcGVwAAAAM8"]
[Sat Feb 28 07:18:03.770135 2026] [:error] [pid 39185:tid 39259] [client 40.89.156.16:30205] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mans.php"] [unique_id "aaImKxVE-FfM89u7BQZeVwAAAI0"]
[Sat Feb 28 07:18:05.834636 2026] [:error] [pid 11791:tid 11816] [client 40.89.156.16:39209] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mans.php"] [unique_id "aaImLWuX5e1Q32gqxH3A0AAAARc"]
[Sat Feb 28 07:18:07.031798 2026] [:error] [pid 39292:tid 39310] [client 40.89.156.16:29487] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mans.php"] [unique_id "aaImL6IAO5fN7BxyqcGVzAAAANA"]
[Sat Feb 28 07:18:08.109834 2026] [:error] [pid 11791:tid 11806] [client 40.89.156.16:38809] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rum.php"] [unique_id "aaImMGuX5e1Q32gqxH3A1AAAAQ0"]
[Sat Feb 28 07:18:09.904309 2026] [:error] [pid 22194:tid 22218] [client 40.89.156.16:6045] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rum.php"] [unique_id "aaImMX6mbajs3bzQGysgOQAAAVY"]
[Sat Feb 28 07:18:11.374178 2026] [:error] [pid 11791:tid 11803] [client 40.89.156.16:5490] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rum.php"] [unique_id "aaImM2uX5e1Q32gqxH3A2wAAAQo"]
[Sat Feb 28 07:18:12.492332 2026] [:error] [pid 39292:tid 39308] [client 40.89.156.16:65077] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rum.php"] [unique_id "aaImNKIAO5fN7BxyqcGV1QAAAM4"]
[Sat Feb 28 07:18:13.352020 2026] [:error] [pid 22194:tid 22199] [client 40.89.156.16:5447] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sbhu.php"] [unique_id "aaImNX6mbajs3bzQGysgRwAAAUM"]
[Sat Feb 28 07:18:14.313201 2026] [:error] [pid 39184:tid 39233] [client 40.89.156.16:65032] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sbhu.php"] [unique_id "aaImNltZF9Zd_U7easBIxAAAAE4"]
[Sat Feb 28 07:18:15.511918 2026] [:error] [pid 22194:tid 22205] [client 40.89.156.16:48988] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sbhu.php"] [unique_id "aaImN36mbajs3bzQGysgUQAAAUk"]
[Sat Feb 28 07:18:16.169299 2026] [:error] [pid 39292:tid 39304] [client 40.89.156.16:48986] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sbhu.php"] [unique_id "aaImOKIAO5fN7BxyqcGV5AAAAMo"]
[Sat Feb 28 07:18:17.070605 2026] [:error] [pid 22194:tid 22218] [client 40.89.156.16:51709] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wio.php"] [unique_id "aaImOX6mbajs3bzQGysgWAAAAVY"]
[Sat Feb 28 07:18:17.914733 2026] [:error] [pid 11791:tid 11817] [client 40.89.156.16:30091] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wio.php"] [unique_id "aaImOWuX5e1Q32gqxH3A4wAAARg"]
[Sat Feb 28 07:18:18.842368 2026] [:error] [pid 39184:tid 39240] [client 40.89.156.16:37268] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wio.php"] [unique_id "aaImOltZF9Zd_U7easBIxQAAAFU"]
[Sat Feb 28 07:18:19.918523 2026] [:error] [pid 22194:tid 22199] [client 40.89.156.16:41357] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wio.php"] [unique_id "aaImO36mbajs3bzQGysgZgAAAUM"]
[Sat Feb 28 07:18:21.096108 2026] [:error] [pid 22194:tid 22215] [client 40.89.156.16:38860] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/clasa99.php"] [unique_id "aaImPX6mbajs3bzQGysgbgAAAVM"]
[Sat Feb 28 07:18:22.059219 2026] [:error] [pid 39292:tid 39306] [client 40.89.156.16:39644] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/clasa99.php"] [unique_id "aaImPqIAO5fN7BxyqcGV7wAAAMw"]
[Sat Feb 28 07:18:23.420499 2026] [:error] [pid 39184:tid 39236] [client 40.89.156.16:44521] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/clasa99.php"] [unique_id "aaImP1tZF9Zd_U7easBIyAAAAFE"]
[Sat Feb 28 07:18:25.123828 2026] [:error] [pid 22194:tid 22199] [client 40.89.156.16:49414] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/clasa99.php"] [unique_id "aaImQX6mbajs3bzQGysgdwAAAUM"]
[Sat Feb 28 07:18:27.949736 2026] [:error] [pid 39292:tid 39300] [client 40.89.156.16:33530] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/alfa-rex.php7"] [unique_id "aaImQ6IAO5fN7BxyqcGV_wAAAMY"]
[Sat Feb 28 07:18:30.379122 2026] [:error] [pid 39292:tid 39302] [client 40.89.156.16:29264] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/alfa-rex.php7"] [unique_id "aaImRqIAO5fN7BxyqcGWAAAAAMg"]
[Sat Feb 28 07:18:32.126948 2026] [:error] [pid 39184:tid 39222] [client 40.89.156.16:30338] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/alfa-rex.php7"] [unique_id "aaImSFtZF9Zd_U7easBI0AAAAEM"]
[Sat Feb 28 07:18:33.005441 2026] [:error] [pid 39184:tid 39243] [client 40.89.156.16:30336] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/alfa-rex.php7"] [unique_id "aaImSVtZF9Zd_U7easBI0wAAAFg"]
[Sat Feb 28 07:18:33.818057 2026] [:error] [pid 22194:tid 22200] [client 40.89.156.16:48695] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws62.php"] [unique_id "aaImSX6mbajs3bzQGysghQAAAUQ"]
[Sat Feb 28 07:18:36.018970 2026] [:error] [pid 11791:tid 11801] [client 40.89.156.16:40962] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws62.php"] [unique_id "aaImTGuX5e1Q32gqxH3A-AAAAQg"]
[Sat Feb 28 07:18:36.846142 2026] [:error] [pid 11791:tid 11803] [client 40.89.156.16:40998] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws62.php"] [unique_id "aaImTGuX5e1Q32gqxH3A-wAAAQo"]
[Sat Feb 28 07:18:37.489196 2026] [:error] [pid 11791:tid 11797] [client 40.89.156.16:52661] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws62.php"] [unique_id "aaImTWuX5e1Q32gqxH3A_QAAAQQ"]
[Sat Feb 28 07:18:38.552693 2026] [:error] [pid 39184:tid 39241] [client 40.89.156.16:27963] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/new4.php"] [unique_id "aaImTltZF9Zd_U7easBI4wAAAFY"]
[Sat Feb 28 07:18:39.775333 2026] [:error] [pid 39292:tid 39316] [client 40.89.156.16:5773] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/new4.php"] [unique_id "aaImT6IAO5fN7BxyqcGWBwAAANY"]
[Sat Feb 28 07:18:40.642456 2026] [:error] [pid 22194:tid 22216] [client 40.89.156.16:46312] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/new4.php"] [unique_id "aaImUH6mbajs3bzQGysgjAAAAVQ"]
[Sat Feb 28 07:18:42.112892 2026] [:error] [pid 39184:tid 39228] [client 40.89.156.16:51970] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/new4.php"] [unique_id "aaImUltZF9Zd_U7easBI6AAAAEk"]
[Sat Feb 28 07:18:43.227350 2026] [:error] [pid 39292:tid 39294] [client 40.89.156.16:52550] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/666.php"] [unique_id "aaImU6IAO5fN7BxyqcGWOAAAAMA"]
[Sat Feb 28 07:18:44.412757 2026] [:error] [pid 22194:tid 22220] [client 40.89.156.16:46281] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/666.php"] [unique_id "aaImVH6mbajs3bzQGysglwAAAVg"]
[Sat Feb 28 07:18:45.221694 2026] [:error] [pid 11791:tid 11806] [client 40.89.156.16:28192] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/666.php"] [unique_id "aaImVWuX5e1Q32gqxH3BCwAAAQ0"]
[Sat Feb 28 07:18:45.907054 2026] [:error] [pid 22194:tid 22216] [client 40.89.156.16:52631] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/666.php"] [unique_id "aaImVX6mbajs3bzQGysgmwAAAVQ"]
[Sat Feb 28 07:18:47.023329 2026] [:error] [pid 11791:tid 11801] [client 40.89.156.16:45529] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/co.php"] [unique_id "aaImV2uX5e1Q32gqxH3BDgAAAQg"]
[Sat Feb 28 07:18:48.970350 2026] [:error] [pid 39292:tid 39307] [client 40.89.156.16:48643] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/co.php"] [unique_id "aaImWKIAO5fN7BxyqcGWXgAAAM0"]
[Sat Feb 28 07:18:50.068382 2026] [:error] [pid 39292:tid 39304] [client 40.89.156.16:52768] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/co.php"] [unique_id "aaImWqIAO5fN7BxyqcGWZgAAAMo"]
[Sat Feb 28 07:18:52.048891 2026] [:error] [pid 39292:tid 39309] [client 40.89.156.16:30791] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/co.php"] [unique_id "aaImXKIAO5fN7BxyqcGWagAAAM8"]
[Sat Feb 28 07:18:53.299365 2026] [:error] [pid 11791:tid 11807] [client 40.89.156.16:40775] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cxc.php"] [unique_id "aaImXWuX5e1Q32gqxH3BEwAAAQ4"]
[Sat Feb 28 07:18:55.208316 2026] [:error] [pid 11791:tid 11812] [client 40.89.156.16:29257] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cxc.php"] [unique_id "aaImX2uX5e1Q32gqxH3BGgAAARM"]
[Sat Feb 28 07:18:56.129576 2026] [:error] [pid 22194:tid 22219] [client 40.89.156.16:31847] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cxc.php"] [unique_id "aaImYH6mbajs3bzQGysgrAAAAVc"]
[Sat Feb 28 07:18:57.555988 2026] [:error] [pid 39185:tid 39252] [client 40.89.156.16:28168] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cxc.php"] [unique_id "aaImYRVE-FfM89u7BQZexwAAAIY"]
[Sat Feb 28 07:18:58.459337 2026] [:error] [pid 39185:tid 39249] [client 40.89.156.16:27946] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gjm.php"] [unique_id "aaImYhVE-FfM89u7BQZezgAAAIM"]
[Sat Feb 28 07:18:59.370121 2026] [proxy_fcgi:error] [pid 22194:tid 22212] [client 40.89.156.16:27936] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 07:18:59.610882 2026] [proxy_fcgi:error] [pid 22194:tid 22209] [client 40.89.156.16:27936] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 07:18:59.849876 2026] [proxy_fcgi:error] [pid 22194:tid 22207] [client 40.89.156.16:27936] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 07:19:00.153659 2026] [proxy_fcgi:error] [pid 22194:tid 22218] [client 40.89.156.16:27936] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 07:19:00.436774 2026] [proxy_fcgi:error] [pid 22194:tid 22205] [client 40.89.156.16:27936] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 07:19:00.705250 2026] [proxy_fcgi:error] [pid 22194:tid 22210] [client 40.89.156.16:27936] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 07:19:00.970435 2026] [proxy_fcgi:error] [pid 22194:tid 22198] [client 40.89.156.16:27936] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 07:19:01.214800 2026] [proxy_fcgi:error] [pid 22194:tid 22197] [client 40.89.156.16:27936] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 07:19:01.471472 2026] [proxy_fcgi:error] [pid 22194:tid 22203] [client 40.89.156.16:27936] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 07:19:01.727209 2026] [proxy_fcgi:error] [pid 22194:tid 22200] [client 40.89.156.16:27936] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 07:19:02.027966 2026] [proxy_fcgi:error] [pid 22194:tid 22199] [client 40.89.156.16:27936] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 07:19:02.308323 2026] [:error] [pid 22194:tid 22196] [client 40.89.156.16:27936] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/c4.php"] [unique_id "aaImZn6mbajs3bzQGysgvAAAAUA"]
[Sat Feb 28 07:19:03.213892 2026] [:error] [pid 11791:tid 11814] [client 40.89.156.16:31817] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/c4.php"] [unique_id "aaImZ2uX5e1Q32gqxH3BLgAAARU"]
[Sat Feb 28 07:19:03.977141 2026] [:error] [pid 39184:tid 39230] [client 40.89.156.16:38637] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/c4.php"] [unique_id "aaImZ1tZF9Zd_U7easBJBgAAAEs"]
[Sat Feb 28 07:19:04.790756 2026] [:error] [pid 39183:tid 39211] [client 40.89.156.16:35294] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/c4.php"] [unique_id "aaImaBCf4HvhVePw3LZ5RQAAABM"]
[Sat Feb 28 07:19:05.655188 2026] [:error] [pid 39183:tid 39192] [client 40.89.156.16:43940] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/eauu.php"] [unique_id "aaImaRCf4HvhVePw3LZ5RgAAAAA"]
[Sat Feb 28 07:19:07.901159 2026] [:error] [pid 11791:tid 11806] [client 40.89.156.16:46330] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/eauu.php"] [unique_id "aaIma2uX5e1Q32gqxH3BMgAAAQ0"]
[Sat Feb 28 07:19:09.324812 2026] [:error] [pid 39184:tid 39227] [client 40.89.156.16:49465] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/eauu.php"] [unique_id "aaImbVtZF9Zd_U7easBJDwAAAEg"]
[Sat Feb 28 07:19:10.413872 2026] [:error] [pid 39185:tid 39250] [client 40.89.156.16:31439] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/eauu.php"] [unique_id "aaImbhVE-FfM89u7BQZe7wAAAIQ"]
[Sat Feb 28 07:19:11.455102 2026] [:error] [pid 39292:tid 39309] [client 40.89.156.16:35818] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fasx.php"] [unique_id "aaImb6IAO5fN7BxyqcGWpwAAAM8"]
[Sat Feb 28 07:19:12.125125 2026] [:error] [pid 39292:tid 39312] [client 40.89.156.16:28186] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fasx.php"] [unique_id "aaImcKIAO5fN7BxyqcGWsAAAANI"]
[Sat Feb 28 07:19:14.058103 2026] [:error] [pid 39292:tid 39308] [client 40.89.156.16:52023] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fasx.php"] [unique_id "aaImcqIAO5fN7BxyqcGWvgAAAM4"]
[Sat Feb 28 07:19:14.765158 2026] [:error] [pid 39292:tid 39312] [client 40.89.156.16:5800] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fasx.php"] [unique_id "aaImcqIAO5fN7BxyqcGW1gAAANI"]
[Sat Feb 28 07:19:15.823422 2026] [:error] [pid 39292:tid 39305] [client 40.89.156.16:44535] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/opts.php"] [unique_id "aaImc6IAO5fN7BxyqcGW6wAAAMs"]
[Sat Feb 28 07:19:16.792117 2026] [:error] [pid 22194:tid 22219] [client 40.89.156.16:52762] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/opts.php"] [unique_id "aaImdH6mbajs3bzQGysgzwAAAVc"]
[Sat Feb 28 07:19:17.543074 2026] [:error] [pid 39183:tid 39196] [client 40.89.156.16:44526] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/opts.php"] [unique_id "aaImdRCf4HvhVePw3LZ5TQAAAAQ"]
[Sat Feb 28 07:19:18.653480 2026] [:error] [pid 39292:tid 39311] [client 40.89.156.16:28170] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/opts.php"] [unique_id "aaImdqIAO5fN7BxyqcGW8gAAANE"]
[Sat Feb 28 07:19:19.743288 2026] [:error] [pid 11791:tid 11807] [client 40.89.156.16:33497] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nzv.php"] [unique_id "aaImd2uX5e1Q32gqxH3BWwAAAQ4"]
[Sat Feb 28 07:19:20.564907 2026] [:error] [pid 11791:tid 11794] [client 40.89.156.16:38593] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nzv.php"] [unique_id "aaImeGuX5e1Q32gqxH3BXQAAAQE"]
[Sat Feb 28 07:19:21.192478 2026] [:error] [pid 39292:tid 39314] [client 40.89.156.16:29268] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nzv.php"] [unique_id "aaImeaIAO5fN7BxyqcGXBQAAANQ"]
[Sat Feb 28 07:19:22.083494 2026] [:error] [pid 11791:tid 11812] [client 40.89.156.16:52764] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nzv.php"] [unique_id "aaImemuX5e1Q32gqxH3BYQAAARM"]
[Sat Feb 28 07:19:23.028479 2026] [:error] [pid 39185:tid 39255] [client 40.89.156.16:40997] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/grsiuk.php"] [unique_id "aaImexVE-FfM89u7BQZfDgAAAIk"]
[Sat Feb 28 07:19:23.934607 2026] [:error] [pid 39184:tid 39222] [client 40.89.156.16:32037] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/grsiuk.php"] [unique_id "aaIme1tZF9Zd_U7easBJJgAAAEM"]
[Sat Feb 28 07:19:25.002269 2026] [:error] [pid 39185:tid 39269] [client 40.89.156.16:45505] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/grsiuk.php"] [unique_id "aaImfRVE-FfM89u7BQZfFQAAAJc"]
[Sat Feb 28 07:19:25.970146 2026] [:error] [pid 39292:tid 39316] [client 40.89.156.16:42008] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/grsiuk.php"] [unique_id "aaImfaIAO5fN7BxyqcGXMwAAANY"]
[Sat Feb 28 07:19:30.923841 2026] [:error] [pid 39184:tid 39240] [client 40.89.156.16:42038] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/byp8.php"] [unique_id "aaImgltZF9Zd_U7easBJNQAAAFU"]
[Sat Feb 28 07:19:32.161227 2026] [:error] [pid 39183:tid 39207] [client 40.89.156.16:30427] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/byp8.php"] [unique_id "aaImhBCf4HvhVePw3LZ5ZAAAAA8"]
[Sat Feb 28 07:19:36.035852 2026] [:error] [pid 39292:tid 39317] [client 40.89.156.16:36035] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/byp8.php"] [unique_id "aaImiKIAO5fN7BxyqcGXYQAAANc"]
[Sat Feb 28 07:19:37.733964 2026] [:error] [pid 39292:tid 39294] [client 40.89.156.16:40324] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/byp8.php"] [unique_id "aaImiaIAO5fN7BxyqcGXawAAAMA"]
[Sat Feb 28 07:19:39.031403 2026] [:error] [pid 39292:tid 39300] [client 40.89.156.16:27948] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nhr.php"] [unique_id "aaImi6IAO5fN7BxyqcGXdAAAAMY"]
[Sat Feb 28 07:19:40.321143 2026] [:error] [pid 11791:tid 11797] [client 40.89.156.16:38641] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nhr.php"] [unique_id "aaImjGuX5e1Q32gqxH3BqAAAAQQ"]
[Sat Feb 28 07:19:42.224682 2026] [:error] [pid 11791:tid 11801] [client 40.89.156.16:27219] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nhr.php"] [unique_id "aaImjmuX5e1Q32gqxH3BqwAAAQg"]
[Sat Feb 28 07:19:43.191659 2026] [:error] [pid 39292:tid 39307] [client 40.89.156.16:43935] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nhr.php"] [unique_id "aaImj6IAO5fN7BxyqcGXgwAAAM0"]
[Sat Feb 28 07:19:48.935571 2026] [:error] [pid 22194:tid 22216] [client 40.89.156.16:27256] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-access.php"] [unique_id "aaImlH6mbajs3bzQGyshJgAAAVQ"]
[Sat Feb 28 07:19:49.826332 2026] [:error] [pid 39292:tid 39298] [client 40.89.156.16:46326] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-access.php"] [unique_id "aaImlaIAO5fN7BxyqcGXswAAAMQ"]
[Sat Feb 28 07:19:52.865756 2026] [:error] [pid 39184:tid 39230] [client 40.89.156.16:27402] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-access.php"] [unique_id "aaImmFtZF9Zd_U7easBJRAAAAEs"]
[Sat Feb 28 07:19:54.638630 2026] [:error] [pid 22194:tid 22210] [client 40.89.156.16:5202] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-access.php"] [unique_id "aaImmn6mbajs3bzQGyshRQAAAU4"]
[Sat Feb 28 07:19:56.512866 2026] [:error] [pid 22194:tid 22212] [client 40.89.156.16:65114] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws79.php"] [unique_id "aaImnH6mbajs3bzQGyshVAAAAVA"]
[Sat Feb 28 07:19:57.328336 2026] [:error] [pid 39183:tid 39203] [client 40.89.156.16:40381] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws79.php"] [unique_id "aaImnRCf4HvhVePw3LZ5hQAAAAs"]
[Sat Feb 28 07:19:58.024867 2026] [:error] [pid 39292:tid 39315] [client 40.89.156.16:5652] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws79.php"] [unique_id "aaImnqIAO5fN7BxyqcGXyQAAANU"]
[Sat Feb 28 07:19:58.659454 2026] [:error] [pid 22194:tid 22200] [client 40.89.156.16:38851] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws79.php"] [unique_id "aaImnn6mbajs3bzQGyshYQAAAUQ"]
[Sat Feb 28 07:19:59.498340 2026] [:error] [pid 39185:tid 39249] [client 40.89.156.16:5197] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/1061.php"] [unique_id "aaImnxVE-FfM89u7BQZfWQAAAIM"]
[Sat Feb 28 07:20:00.177377 2026] [:error] [pid 22194:tid 22201] [client 40.89.156.16:5689] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/1061.php"] [unique_id "aaImoH6mbajs3bzQGyshaAAAAUU"]
[Sat Feb 28 07:20:01.395542 2026] [:error] [pid 39183:tid 39194] [client 40.89.156.16:41627] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/1061.php"] [unique_id "aaImoRCf4HvhVePw3LZ5iAAAAAI"]
[Sat Feb 28 07:20:02.247205 2026] [proxy_fcgi:error] [pid 22194:tid 22210] [client 40.89.156.16:48242] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 07:20:02.487892 2026] [proxy_fcgi:error] [pid 22194:tid 22220] [client 40.89.156.16:48242] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 07:20:02.740644 2026] [proxy_fcgi:error] [pid 22194:tid 22213] [client 40.89.156.16:48242] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 07:20:02.979548 2026] [proxy_fcgi:error] [pid 22194:tid 22207] [client 40.89.156.16:48242] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 07:20:03.220841 2026] [proxy_fcgi:error] [pid 22194:tid 22199] [client 40.89.156.16:48242] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 07:20:03.463023 2026] [proxy_fcgi:error] [pid 22194:tid 22205] [client 40.89.156.16:48242] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 07:20:03.701252 2026] [proxy_fcgi:error] [pid 22194:tid 22216] [client 40.89.156.16:48242] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 07:20:04.366950 2026] [proxy_fcgi:error] [pid 22194:tid 22208] [client 40.89.156.16:48242] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 07:20:04.609871 2026] [proxy_fcgi:error] [pid 22194:tid 22209] [client 40.89.156.16:48242] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 07:20:04.848070 2026] [proxy_fcgi:error] [pid 22194:tid 22206] [client 40.89.156.16:48242] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 07:20:05.122444 2026] [proxy_fcgi:error] [pid 22194:tid 22211] [client 40.89.156.16:48242] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 07:20:05.357533 2026] [:error] [pid 22194:tid 22214] [client 40.89.156.16:48242] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/end.php"] [unique_id "aaImpX6mbajs3bzQGyshhgAAAVI"]
[Sat Feb 28 07:20:07.575684 2026] [:error] [pid 39185:tid 39251] [client 40.89.156.16:45625] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/end.php"] [unique_id "aaImpxVE-FfM89u7BQZfagAAAIU"]
[Sat Feb 28 07:20:08.503332 2026] [:error] [pid 39185:tid 39269] [client 40.89.156.16:26288] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/end.php"] [unique_id "aaImqBVE-FfM89u7BQZfcQAAAJc"]
[Sat Feb 28 07:20:09.660915 2026] [:error] [pid 39292:tid 39294] [client 40.89.156.16:45569] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/end.php"] [unique_id "aaImqaIAO5fN7BxyqcGX9gAAAMA"]
[Sat Feb 28 07:20:11.813813 2026] [:error] [pid 39292:tid 39318] [client 40.89.156.16:39267] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ah25.php"] [unique_id "aaImq6IAO5fN7BxyqcGYEwAAANg"]
[Sat Feb 28 07:20:12.540088 2026] [:error] [pid 39185:tid 39252] [client 40.89.156.16:65122] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ah25.php"] [unique_id "aaImrBVE-FfM89u7BQZfdgAAAIY"]
[Sat Feb 28 07:20:13.223448 2026] [:error] [pid 39185:tid 39251] [client 40.89.156.16:33891] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ah25.php"] [unique_id "aaImrRVE-FfM89u7BQZfewAAAIU"]
[Sat Feb 28 07:20:14.267858 2026] [:error] [pid 39292:tid 39310] [client 40.89.156.16:41448] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ah25.php"] [unique_id "aaImrqIAO5fN7BxyqcGYMAAAANA"]
[Sat Feb 28 07:20:15.453347 2026] [:error] [pid 39183:tid 39209] [client 40.89.156.16:45601] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/scx.php7"] [unique_id "aaImrxCf4HvhVePw3LZ5mwAAABE"]
[Sat Feb 28 07:20:17.097077 2026] [:error] [pid 39292:tid 39316] [client 40.89.156.16:26265] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/scx.php7"] [unique_id "aaImsaIAO5fN7BxyqcGYRwAAANY"]
[Sat Feb 28 07:20:18.418235 2026] [:error] [pid 22194:tid 22215] [client 40.89.156.16:41633] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/scx.php7"] [unique_id "aaImsn6mbajs3bzQGysh2wAAAVM"]
[Sat Feb 28 07:20:19.372647 2026] [:error] [pid 39185:tid 39262] [client 40.89.156.16:37019] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/scx.php7"] [unique_id "aaImsxVE-FfM89u7BQZfhAAAAJA"]
[Sat Feb 28 07:20:20.545892 2026] [:error] [pid 39184:tid 39229] [client 40.89.156.16:41458] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/error1.php"] [unique_id "aaImtFtZF9Zd_U7easBJYAAAAEo"]
[Sat Feb 28 07:20:21.891193 2026] [:error] [pid 22194:tid 22207] [client 40.89.156.16:30012] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/error1.php"] [unique_id "aaImtX6mbajs3bzQGysh5wAAAUs"]
[Sat Feb 28 07:20:22.631813 2026] [:error] [pid 39292:tid 39317] [client 40.89.156.16:36185] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/error1.php"] [unique_id "aaImtqIAO5fN7BxyqcGYiQAAANc"]
[Sat Feb 28 07:20:23.770587 2026] [:error] [pid 39292:tid 39309] [client 40.89.156.16:41456] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/error1.php"] [unique_id "aaImt6IAO5fN7BxyqcGYlgAAAM8"]
[Sat Feb 28 07:20:24.395114 2026] [:error] [pid 39184:tid 39237] [client 40.89.156.16:39565] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/thui.php"] [unique_id "aaImuFtZF9Zd_U7easBJZAAAAFI"]
[Sat Feb 28 07:20:25.119566 2026] [:error] [pid 39292:tid 39318] [client 40.89.156.16:28730] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/thui.php"] [unique_id "aaImuaIAO5fN7BxyqcGYqAAAANg"]
[Sat Feb 28 07:20:25.874513 2026] [:error] [pid 39292:tid 39317] [client 40.89.156.16:41636] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/thui.php"] [unique_id "aaImuaIAO5fN7BxyqcGYrQAAANc"]
[Sat Feb 28 07:20:26.743262 2026] [:error] [pid 22194:tid 22204] [client 40.89.156.16:33034] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/thui.php"] [unique_id "aaImun6mbajs3bzQGysiAAAAAUg"]
[Sat Feb 28 07:20:28.228221 2026] [:error] [pid 22194:tid 22196] [client 40.89.156.16:26241] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ff1.php"] [unique_id "aaImvH6mbajs3bzQGysiDQAAAUA"]
[Sat Feb 28 07:20:29.129956 2026] [:error] [pid 39183:tid 39203] [client 40.89.156.16:29991] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ff1.php"] [unique_id "aaImvRCf4HvhVePw3LZ5qwAAAAs"]
[Sat Feb 28 07:20:30.566954 2026] [:error] [pid 11791:tid 11808] [client 40.89.156.16:29205] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ff1.php"] [unique_id "aaImvmuX5e1Q32gqxH3B7wAAAQ8"]
[Sat Feb 28 07:20:31.397606 2026] [:error] [pid 39292:tid 39316] [client 40.89.156.16:29240] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ff1.php"] [unique_id "aaImv6IAO5fN7BxyqcGY3QAAANY"]
[Sat Feb 28 07:20:33.712702 2026] [:error] [pid 39292:tid 39297] [client 40.89.156.16:26266] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/sc.php"] [unique_id "aaImwaIAO5fN7BxyqcGY-AAAAMM"]
[Sat Feb 28 07:20:35.614270 2026] [:error] [pid 22194:tid 22201] [client 40.89.156.16:39585] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/sc.php"] [unique_id "aaImw36mbajs3bzQGysiKQAAAUU"]
[Sat Feb 28 07:20:37.183561 2026] [:error] [pid 39183:tid 39208] [client 40.89.156.16:36161] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/sc.php"] [unique_id "aaImxRCf4HvhVePw3LZ5sAAAABA"]
[Sat Feb 28 07:20:38.331816 2026] [:error] [pid 11791:tid 11804] [client 40.89.156.16:33873] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/sc.php"] [unique_id "aaImxmuX5e1Q32gqxH3CBAAAAQs"]
[Sat Feb 28 07:20:39.784525 2026] [:error] [pid 11791:tid 11813] [client 40.89.156.16:26242] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-act.php"] [unique_id "aaImx2uX5e1Q32gqxH3CDAAAARQ"]
[Sat Feb 28 07:20:41.050507 2026] [:error] [pid 39183:tid 39197] [client 40.89.156.16:29217] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-act.php"] [unique_id "aaImyRCf4HvhVePw3LZ5sgAAAAU"]
[Sat Feb 28 07:20:42.628750 2026] [:error] [pid 39183:tid 39212] [client 40.89.156.16:29208] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-act.php"] [unique_id "aaImyhCf4HvhVePw3LZ5swAAABQ"]
[Sat Feb 28 07:20:43.655151 2026] [:error] [pid 39184:tid 39221] [client 40.89.156.16:31150] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-act.php"] [unique_id "aaImy1tZF9Zd_U7easBJfAAAAEI"]
[Sat Feb 28 07:20:44.277966 2026] [:error] [pid 39184:tid 39232] [client 40.89.156.16:41622] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-the.php"] [unique_id "aaImzFtZF9Zd_U7easBJgwAAAE0"]
[Sat Feb 28 07:20:46.248112 2026] [:error] [pid 22194:tid 22217] [client 40.89.156.16:31118] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-the.php"] [unique_id "aaImzn6mbajs3bzQGysiggAAAVU"]
[Sat Feb 28 07:20:47.451566 2026] [:error] [pid 11791:tid 11817] [client 40.89.156.16:37097] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-the.php"] [unique_id "aaImz2uX5e1Q32gqxH3CJgAAARg"]
[Sat Feb 28 07:20:48.785598 2026] [:error] [pid 11791:tid 11801] [client 40.89.156.16:41409] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-the.php"] [unique_id "aaIm0GuX5e1Q32gqxH3CLQAAAQg"]
[Sat Feb 28 07:20:49.507929 2026] [:error] [pid 39292:tid 39318] [client 40.89.156.16:29964] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rpk.php"] [unique_id "aaIm0aIAO5fN7BxyqcGZTAAAANg"]
[Sat Feb 28 07:20:51.332247 2026] [:error] [pid 22194:tid 22199] [client 40.89.156.16:41460] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rpk.php"] [unique_id "aaIm036mbajs3bzQGysikgAAAUM"]
[Sat Feb 28 07:20:56.111234 2026] [:error] [pid 22194:tid 22217] [client 40.89.156.16:36992] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rpk.php"] [unique_id "aaIm2H6mbajs3bzQGysiqAAAAVU"]
[Sat Feb 28 07:20:57.506483 2026] [:error] [pid 11791:tid 11811] [client 40.89.156.16:31134] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rpk.php"] [unique_id "aaIm2WuX5e1Q32gqxH3CQwAAARI"]
[Sat Feb 28 07:20:58.501242 2026] [:error] [pid 39292:tid 39315] [client 40.89.156.16:37107] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ms.php"] [unique_id "aaIm2qIAO5fN7BxyqcGZvgAAANU"]
[Sat Feb 28 07:20:59.422650 2026] [:error] [pid 22194:tid 22207] [client 40.89.156.16:33876] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ms.php"] [unique_id "aaIm236mbajs3bzQGysivQAAAUs"]
[Sat Feb 28 07:21:00.287144 2026] [:error] [pid 11791:tid 11816] [client 40.89.156.16:37067] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ms.php"] [unique_id "aaIm3GuX5e1Q32gqxH3CSwAAARc"]
[Sat Feb 28 07:21:01.100438 2026] [:error] [pid 11791:tid 11793] [client 40.89.156.16:52882] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ms.php"] [unique_id "aaIm3WuX5e1Q32gqxH3CTAAAAQA"]
[Sat Feb 28 07:21:02.857124 2026] [:error] [pid 22194:tid 22218] [client 40.89.156.16:37009] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/155.php"] [unique_id "aaIm3n6mbajs3bzQGysi0QAAAVY"]
[Sat Feb 28 07:21:04.349935 2026] [:error] [pid 11791:tid 11811] [client 40.89.156.16:41428] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/155.php"] [unique_id "aaIm4GuX5e1Q32gqxH3CUgAAARI"]
[Sat Feb 28 07:21:07.717880 2026] [proxy_fcgi:error] [pid 39183:tid 39198] [client 40.89.156.16:33077] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 07:21:07.973157 2026] [proxy_fcgi:error] [pid 39183:tid 39199] [client 40.89.156.16:33077] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 07:21:08.225834 2026] [proxy_fcgi:error] [pid 39183:tid 39204] [client 40.89.156.16:33077] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 07:21:08.477115 2026] [proxy_fcgi:error] [pid 39183:tid 39209] [client 40.89.156.16:33077] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 07:21:08.724050 2026] [proxy_fcgi:error] [pid 39183:tid 39211] [client 40.89.156.16:33077] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 07:21:08.964490 2026] [proxy_fcgi:error] [pid 39183:tid 39194] [client 40.89.156.16:33077] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 07:21:09.443219 2026] [proxy_fcgi:error] [pid 39183:tid 39208] [client 40.89.156.16:33077] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 07:21:09.681788 2026] [proxy_fcgi:error] [pid 39183:tid 39216] [client 40.89.156.16:33077] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 07:21:09.920706 2026] [proxy_fcgi:error] [pid 39183:tid 39213] [client 40.89.156.16:33077] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 07:21:10.175570 2026] [proxy_fcgi:error] [pid 39183:tid 39197] [client 40.89.156.16:33077] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 07:21:10.415105 2026] [proxy_fcgi:error] [pid 39183:tid 39193] [client 40.89.156.16:33077] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 07:21:10.650158 2026] [:error] [pid 39183:tid 39195] [client 40.89.156.16:33077] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rtx.php"] [unique_id "aaIm5hCf4HvhVePw3LZ59AAAAAM"]
[Sat Feb 28 07:21:12.357357 2026] [:error] [pid 39292:tid 39302] [client 40.89.156.16:29218] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rtx.php"] [unique_id "aaIm6KIAO5fN7BxyqcGaIwAAAMg"]
[Sat Feb 28 07:21:15.175330 2026] [:error] [pid 39183:tid 39204] [client 40.89.156.16:51500] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rtx.php"] [unique_id "aaIm6xCf4HvhVePw3LZ5-wAAAAw"]
[Sat Feb 28 07:21:17.607644 2026] [:error] [pid 39292:tid 39296] [client 40.89.156.16:64761] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rtx.php"] [unique_id "aaIm7aIAO5fN7BxyqcGaOAAAAMI"]
[Sat Feb 28 07:21:18.496841 2026] [:error] [pid 22194:tid 22200] [client 40.89.156.16:51510] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xda.php"] [unique_id "aaIm7n6mbajs3bzQGysjFwAAAUQ"]
[Sat Feb 28 07:21:20.052382 2026] [:error] [pid 11791:tid 11816] [client 40.89.156.16:52918] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xda.php"] [unique_id "aaIm8GuX5e1Q32gqxH3CgwAAARc"]
[Sat Feb 28 07:21:24.800104 2026] [:error] [pid 39185:tid 39267] [client 40.89.156.16:51472] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xda.php"] [unique_id "aaIm9BVE-FfM89u7BQZfyQAAAJU"]
[Sat Feb 28 07:21:25.765749 2026] [:error] [pid 39185:tid 39249] [client 40.89.156.16:37079] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xda.php"] [unique_id "aaIm9RVE-FfM89u7BQZfzgAAAIM"]
[Sat Feb 28 07:21:26.960325 2026] [:error] [pid 39292:tid 39298] [client 40.89.156.16:36997] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/erty.php"] [unique_id "aaIm9qIAO5fN7BxyqcGaRwAAAMQ"]
[Sat Feb 28 07:21:30.039375 2026] [:error] [pid 39292:tid 39303] [client 40.89.156.16:51459] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/erty.php"] [unique_id "aaIm-qIAO5fN7BxyqcGaZQAAAMk"]
[Sat Feb 28 07:21:34.140655 2026] [:error] [pid 22194:tid 22216] [client 40.89.156.16:33800] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/erty.php"] [unique_id "aaIm_n6mbajs3bzQGysjXQAAAVQ"]
[Sat Feb 28 07:21:37.558396 2026] [:error] [pid 39185:tid 39259] [client 40.89.156.16:47906] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/erty.php"] [unique_id "aaInARVE-FfM89u7BQZf3wAAAI0"]
[Sat Feb 28 07:21:38.938731 2026] [:error] [pid 22194:tid 22217] [client 40.89.156.16:34611] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/0.php"] [unique_id "aaInAn6mbajs3bzQGysjjAAAAVU"]
[Sat Feb 28 07:21:40.159583 2026] [:error] [pid 39292:tid 39300] [client 40.89.156.16:51433] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/0.php"] [unique_id "aaInBKIAO5fN7BxyqcGauQAAAMY"]
[Sat Feb 28 07:21:42.254866 2026] [:error] [pid 39184:tid 39239] [client 40.89.156.16:47878] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/0.php"] [unique_id "aaInBltZF9Zd_U7easBJ1AAAAFQ"]
[Sat Feb 28 07:21:43.854967 2026] [:error] [pid 39185:tid 39266] [client 40.89.156.16:32081] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/0.php"] [unique_id "aaInBxVE-FfM89u7BQZf5QAAAJQ"]
[Sat Feb 28 07:21:44.809252 2026] [:error] [pid 11791:tid 11817] [client 40.89.156.16:43298] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/moon.php"] [unique_id "aaInCGuX5e1Q32gqxH3CygAAARg"]
[Sat Feb 28 07:21:48.044681 2026] [:error] [pid 39184:tid 39234] [client 40.89.156.16:29778] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/moon.php"] [unique_id "aaInDFtZF9Zd_U7easBJ1wAAAE8"]
[Sat Feb 28 07:21:49.294959 2026] [:error] [pid 39184:tid 39233] [client 40.89.156.16:28468] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/moon.php"] [unique_id "aaInDVtZF9Zd_U7easBJ2gAAAE4"]
[Sat Feb 28 07:21:50.150124 2026] [:error] [pid 39184:tid 39241] [client 40.89.156.16:37767] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/moon.php"] [unique_id "aaInDltZF9Zd_U7easBJ3wAAAFY"]
[Sat Feb 28 07:21:51.794777 2026] [:error] [pid 39292:tid 39314] [client 40.89.156.16:34676] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/8.php"] [unique_id "aaInD6IAO5fN7BxyqcGa8QAAANQ"]
[Sat Feb 28 07:21:53.346159 2026] [:error] [pid 11791:tid 11810] [client 40.89.156.16:34988] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/8.php"] [unique_id "aaInEWuX5e1Q32gqxH3C2QAAARE"]
[Sat Feb 28 07:21:55.657339 2026] [:error] [pid 39185:tid 39255] [client 40.89.156.16:32264] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/8.php"] [unique_id "aaInExVE-FfM89u7BQZgDwAAAIk"]
[Sat Feb 28 07:21:58.128476 2026] [:error] [pid 22194:tid 22209] [client 40.89.156.16:34220] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/8.php"] [unique_id "aaInFn6mbajs3bzQGysj-AAAAU0"]
[Sat Feb 28 07:21:58.907773 2026] [:error] [pid 39292:tid 39304] [client 40.89.156.16:41409] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gec.php"] [unique_id "aaInFqIAO5fN7BxyqcGbEwAAAMo"]
[Sat Feb 28 07:21:59.752215 2026] [:error] [pid 11791:tid 11797] [client 40.89.156.16:38534] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gec.php"] [unique_id "aaInF2uX5e1Q32gqxH3C6QAAAQQ"]
[Sat Feb 28 07:22:00.995988 2026] [:error] [pid 39292:tid 39302] [client 40.89.156.16:31389] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gec.php"] [unique_id "aaInGKIAO5fN7BxyqcGbIAAAAMg"]
[Sat Feb 28 07:22:02.160958 2026] [:error] [pid 39185:tid 39260] [client 40.89.156.16:62089] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gec.php"] [unique_id "aaInGhVE-FfM89u7BQZgJQAAAI4"]
[Sat Feb 28 07:22:03.551285 2026] [:error] [pid 22194:tid 22203] [client 40.89.156.16:56085] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sxdfrt.php"] [unique_id "aaInG36mbajs3bzQGyskBgAAAUc"]
[Sat Feb 28 07:22:05.201777 2026] [:error] [pid 39184:tid 39220] [client 40.89.156.16:5309] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sxdfrt.php"] [unique_id "aaInHVtZF9Zd_U7easBKAAAAAEE"]
[Sat Feb 28 07:22:06.356240 2026] [:error] [pid 39292:tid 39310] [client 40.89.156.16:32362] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sxdfrt.php"] [unique_id "aaInHqIAO5fN7BxyqcGbLQAAANA"]
[Sat Feb 28 07:22:07.914061 2026] [:error] [pid 11791:tid 11807] [client 40.89.156.16:5281] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sxdfrt.php"] [unique_id "aaInH2uX5e1Q32gqxH3DEQAAAQ4"]
[Sat Feb 28 07:22:09.365493 2026] [:error] [pid 11791:tid 11801] [client 40.89.156.16:40048] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tt.php"] [unique_id "aaInIWuX5e1Q32gqxH3DHQAAAQg"]
[Sat Feb 28 07:22:11.963709 2026] [proxy_fcgi:error] [pid 22194:tid 22220] [client 40.89.156.16:38292] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 07:22:13.418487 2026] [proxy_fcgi:error] [pid 22194:tid 22207] [client 40.89.156.16:38292] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 07:22:13.660800 2026] [proxy_fcgi:error] [pid 22194:tid 22199] [client 40.89.156.16:38292] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 07:22:13.900086 2026] [proxy_fcgi:error] [pid 22194:tid 22205] [client 40.89.156.16:38292] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 07:22:14.149531 2026] [proxy_fcgi:error] [pid 22194:tid 22211] [client 40.89.156.16:38292] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 07:22:14.390441 2026] [proxy_fcgi:error] [pid 22194:tid 22196] [client 40.89.156.16:38292] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 07:22:14.630858 2026] [proxy_fcgi:error] [pid 22194:tid 22198] [client 40.89.156.16:38292] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 07:22:14.869155 2026] [proxy_fcgi:error] [pid 22194:tid 22204] [client 40.89.156.16:38292] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 07:22:15.109400 2026] [proxy_fcgi:error] [pid 22194:tid 22217] [client 40.89.156.16:38292] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 07:22:15.348163 2026] [proxy_fcgi:error] [pid 22194:tid 22213] [client 40.89.156.16:38292] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 07:22:15.587448 2026] [proxy_fcgi:error] [pid 22194:tid 22214] [client 40.89.156.16:38292] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 07:22:15.835707 2026] [:error] [pid 22194:tid 22218] [client 40.89.156.16:38292] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/un.php"] [unique_id "aaInJ36mbajs3bzQGyskSAAAAVY"]
[Sat Feb 28 07:22:17.766747 2026] [:error] [pid 39292:tid 39318] [client 40.89.156.16:5869] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/un.php"] [unique_id "aaInKaIAO5fN7BxyqcGbZwAAANg"]
[Sat Feb 28 07:22:19.425341 2026] [:error] [pid 39185:tid 39248] [client 40.89.156.16:36330] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/un.php"] [unique_id "aaInKxVE-FfM89u7BQZgSQAAAII"]
[Sat Feb 28 07:22:20.589579 2026] [:error] [pid 39292:tid 39313] [client 40.89.156.16:48299] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/un.php"] [unique_id "aaInLKIAO5fN7BxyqcGbdQAAANM"]
[Sat Feb 28 07:22:21.903244 2026] [:error] [pid 39183:tid 39204] [client 40.89.156.16:5450] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/100.kb.php"] [unique_id "aaInLRCf4HvhVePw3LZ6cQAAAAw"]
[Sat Feb 28 07:22:22.999686 2026] [:error] [pid 39184:tid 39235] [client 40.89.156.16:37280] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/100.kb.php"] [unique_id "aaInLltZF9Zd_U7easBKNQAAAFA"]
[Sat Feb 28 07:22:24.143454 2026] [:error] [pid 39184:tid 39234] [client 40.89.156.16:36558] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/100.kb.php"] [unique_id "aaInMFtZF9Zd_U7easBKOQAAAE8"]
[Sat Feb 28 07:22:24.903839 2026] [:error] [pid 39292:tid 39318] [client 40.89.156.16:65192] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/100.kb.php"] [unique_id "aaInMKIAO5fN7BxyqcGblgAAANg"]
[Sat Feb 28 07:22:27.307735 2026] [:error] [pid 39292:tid 39295] [client 40.89.156.16:36555] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sid3.php"] [unique_id "aaInM6IAO5fN7BxyqcGbpgAAAME"]
[Sat Feb 28 07:22:30.678711 2026] [:error] [pid 22194:tid 22200] [client 40.89.156.16:36602] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sid3.php"] [unique_id "aaInNn6mbajs3bzQGyskiQAAAUQ"]
[Sat Feb 28 07:22:31.898904 2026] [:error] [pid 39292:tid 39296] [client 40.89.156.16:49011] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sid3.php"] [unique_id "aaInN6IAO5fN7BxyqcGbzgAAAMI"]
[Sat Feb 28 07:22:33.638768 2026] [:error] [pid 39292:tid 39306] [client 40.89.156.16:36545] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sid3.php"] [unique_id "aaInOaIAO5fN7BxyqcGb5AAAAMw"]
[Sat Feb 28 07:49:36.577964 2026] [:error] [pid 39292:tid 39297] [client 20.220.61.156:12238] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaItkKIAO5fN7BxyqcG5iwAAAMM"]
[Sat Feb 28 07:49:38.088227 2026] [:error] [pid 39184:tid 39223] [client 20.220.61.156:12278] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaItkltZF9Zd_U7easBT_wAAAEQ"]
[Sat Feb 28 07:49:40.105784 2026] [:error] [pid 22194:tid 22210] [client 20.220.61.156:12167] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaItlH6mbajs3bzQGys49gAAAU4"]
[Sat Feb 28 07:49:41.199491 2026] [:error] [pid 11791:tid 11814] [client 20.220.61.156:12285] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaItlWuX5e1Q32gqxH3TWgAAARU"]
[Sat Feb 28 09:03:41.852833 2026] [:error] [pid 11791:tid 11794] [client 45.153.34.31:47330] [client 45.153.34.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dwelectservices.com.au"] [uri "/.git/config"] [unique_id "aaI-7WuX5e1Q32gqxH1s4gAAAQE"]
[Sat Feb 28 09:05:14.677728 2026] [proxy_fcgi:error] [pid 11791:tid 11801] [client 4.204.192.31:31809] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 10:15:42.861122 2026] [:error] [pid 52460:tid 52467] [client 20.220.232.101:37972] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaJPzrLWOogAgHGh62SGcQAAAYQ"]
[Sat Feb 28 10:15:43.538499 2026] [:error] [pid 52460:tid 52476] [client 20.220.232.101:38072] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaJPz7LWOogAgHGh62SGeQAAAY0"]
[Sat Feb 28 10:15:44.299821 2026] [:error] [pid 39185:tid 39254] [client 20.220.232.101:38069] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaJP0BVE-FfM89u7BQYk_AAAAIg"]
[Sat Feb 28 10:15:45.362859 2026] [:error] [pid 11791:tid 11795] [client 20.220.232.101:38067] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaJP0WuX5e1Q32gqxH26MAAAAQI"]
[Sat Feb 28 12:35:47.050056 2026] [:error] [pid 39184:tid 39237] [client 204.76.203.25:43680] [client 204.76.203.25] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env"] [unique_id "aaJwo1tZF9Zd_U7easDUcAAAAFI"]
[Sat Feb 28 13:06:40.397043 2026] [proxy_fcgi:error] [pid 39185:tid 39257] [client 13.71.191.191:65364] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 13:06:40.610656 2026] [proxy_fcgi:error] [pid 39185:tid 39267] [client 13.71.191.191:65364] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 13:06:41.313597 2026] [:error] [pid 39185:tid 39253] [client 13.71.191.191:65364] [client 13.71.191.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/sitemaps/index.php"] [unique_id "aaJ34RVE-FfM89u7BQbDGwAAAIc"]
[Sat Feb 28 13:06:42.344778 2026] [proxy_fcgi:error] [pid 11791:tid 11812] [client 13.71.191.191:64788] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 13:06:42.559544 2026] [:error] [pid 11791:tid 11805] [client 13.71.191.191:64788] [client 13.71.191.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/theme-compat/termps.php"] [unique_id "aaJ34muX5e1Q32gqxH0aJQAAAQw"]
[Sat Feb 28 13:06:43.493142 2026] [:error] [pid 11791:tid 11816] [client 13.71.191.191:65358] [client 13.71.191.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/capabilities1.php"] [unique_id "aaJ342uX5e1Q32gqxH0aKwAAARc"]
[Sat Feb 28 13:06:43.948167 2026] [proxy_fcgi:error] [pid 39185:tid 39254] [client 13.71.191.191:63598] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 13:06:44.154439 2026] [:error] [pid 39185:tid 39253] [client 13.71.191.191:63598] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/file2.php"] [unique_id "aaJ35BVE-FfM89u7BQbDMgAAAIc"]
[Sat Feb 28 13:06:44.661306 2026] [:error] [pid 39183:tid 39192] [client 13.71.191.191:64809] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/file2.php"] [unique_id "aaJ35BCf4HvhVePw3LbpdgAAAAA"]
[Sat Feb 28 13:06:45.173640 2026] [:error] [pid 11791:tid 11812] [client 13.71.191.191:64147] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/file2.php"] [unique_id "aaJ35WuX5e1Q32gqxH0aMwAAARM"]
[Sat Feb 28 13:06:45.617000 2026] [:error] [pid 39292:tid 39311] [client 13.71.191.191:64200] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/file2.php"] [unique_id "aaJ35aIAO5fN7BxyqcHS3QAAANE"]
[Sat Feb 28 13:06:46.245233 2026] [:error] [pid 39185:tid 39268] [client 13.71.191.191:64781] [client 13.71.191.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/dist/preferences/admin-ajax.php"] [unique_id "aaJ35hVE-FfM89u7BQbDNwAAAJY"]
[Sat Feb 28 13:06:46.681250 2026] [:error] [pid 39185:tid 39256] [client 13.71.191.191:64130] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ddgg.php"] [unique_id "aaJ35hVE-FfM89u7BQbDOwAAAIo"]
[Sat Feb 28 13:06:47.171084 2026] [:error] [pid 11791:tid 11814] [client 13.71.191.191:64216] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ddgg.php"] [unique_id "aaJ352uX5e1Q32gqxH0aPgAAARU"]
[Sat Feb 28 13:06:47.634717 2026] [:error] [pid 39185:tid 39266] [client 13.71.191.191:64818] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ddgg.php"] [unique_id "aaJ35xVE-FfM89u7BQbDQwAAAJQ"]
[Sat Feb 28 13:06:48.385548 2026] [:error] [pid 22194:tid 22220] [client 13.71.191.191:64213] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/uploads/cache.cleaner.php"] [unique_id "aaJ36H6mbajs3bzQGytAfgAAAVg"]
[Sat Feb 28 13:06:48.978826 2026] [:error] [pid 39185:tid 39268] [client 13.71.191.191:64859] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/uploads/cache.cleaner.php"] [unique_id "aaJ36BVE-FfM89u7BQbDSAAAAJY"]
[Sat Feb 28 13:06:49.778508 2026] [:error] [pid 39292:tid 39317] [client 13.71.191.191:64884] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/uploads/cache.cleaner.php"] [unique_id "aaJ36aIAO5fN7BxyqcHS4wAAANc"]
[Sat Feb 28 13:06:50.432899 2026] [:error] [pid 39185:tid 39261] [client 13.71.191.191:64892] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/uploads/cache.cleaner.php"] [unique_id "aaJ36hVE-FfM89u7BQbDTgAAAI8"]
[Sat Feb 28 13:06:50.993505 2026] [:error] [pid 11791:tid 11803] [client 13.71.191.191:63578] [client 13.71.191.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/ourLB.php"] [unique_id "aaJ36muX5e1Q32gqxH0aTQAAAQo"]
[Sat Feb 28 13:06:51.464480 2026] [:error] [pid 22194:tid 22210] [client 13.71.191.191:63516] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.tmb2434353s/index.php"] [unique_id "aaJ3636mbajs3bzQGytAggAAAU4"]
[Sat Feb 28 13:06:52.049530 2026] [:error] [pid 11791:tid 11793] [client 13.71.191.191:64184] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.tmb2434353s/index.php"] [unique_id "aaJ37GuX5e1Q32gqxH0aUAAAAQA"]
[Sat Feb 28 13:06:52.744610 2026] [:error] [pid 39185:tid 39265] [client 13.71.191.191:64221] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.tmb2434353s/index.php"] [unique_id "aaJ37BVE-FfM89u7BQbDWAAAAJM"]
[Sat Feb 28 13:06:53.305926 2026] [:error] [pid 39185:tid 39255] [client 13.71.191.191:64145] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.tmb2434353s/index.php"] [unique_id "aaJ37RVE-FfM89u7BQbDZQAAAIk"]
[Sat Feb 28 13:06:53.958330 2026] [:error] [pid 39185:tid 39249] [client 13.71.191.191:65296] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/bolster-theme/include/lang_upload.php"] [unique_id "aaJ37RVE-FfM89u7BQbDbAAAAIM"]
[Sat Feb 28 13:06:54.567671 2026] [:error] [pid 52460:tid 52476] [client 13.71.191.191:65361] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/bolster-theme/include/lang_upload.php"] [unique_id "aaJ37rLWOogAgHGh62Qw3AAAAY0"]
[Sat Feb 28 13:06:55.176167 2026] [:error] [pid 52460:tid 52477] [client 13.71.191.191:64827] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/bolster-theme/include/lang_upload.php"] [unique_id "aaJ377LWOogAgHGh62Qw4QAAAY4"]
[Sat Feb 28 13:06:56.331344 2026] [:error] [pid 52460:tid 52474] [client 13.71.191.191:64188] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/bolster-theme/include/lang_upload.php"] [unique_id "aaJ38LLWOogAgHGh62Qw6QAAAYs"]
[Sat Feb 28 13:06:58.040364 2026] [:error] [pid 11791:tid 11803] [client 13.71.191.191:64794] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sundax.Php"] [unique_id "aaJ38muX5e1Q32gqxH0aXwAAAQo"]
[Sat Feb 28 13:06:58.573974 2026] [:error] [pid 11791:tid 11795] [client 13.71.191.191:64832] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sundax.Php"] [unique_id "aaJ38muX5e1Q32gqxH0aZQAAAQI"]
[Sat Feb 28 13:06:59.243930 2026] [:error] [pid 52460:tid 52471] [client 13.71.191.191:64162] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sundax.Php"] [unique_id "aaJ387LWOogAgHGh62Qw9gAAAYg"]
[Sat Feb 28 13:06:59.853477 2026] [:error] [pid 22194:tid 22202] [client 13.71.191.191:64136] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sundax.Php"] [unique_id "aaJ3836mbajs3bzQGytAigAAAUY"]
[Sat Feb 28 13:07:00.374559 2026] [:error] [pid 39292:tid 39312] [client 13.71.191.191:64220] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/images/pages.php"] [unique_id "aaJ39KIAO5fN7BxyqcHS5gAAANI"]
[Sat Feb 28 13:07:00.817970 2026] [:error] [pid 22194:tid 22218] [client 13.71.191.191:65345] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/images/pages.php"] [unique_id "aaJ39H6mbajs3bzQGytAkAAAAVY"]
[Sat Feb 28 13:07:01.315243 2026] [:error] [pid 11791:tid 11806] [client 13.71.191.191:64251] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/images/pages.php"] [unique_id "aaJ39WuX5e1Q32gqxH0adgAAAQ0"]
[Sat Feb 28 13:07:01.751938 2026] [:error] [pid 22194:tid 22210] [client 13.71.191.191:64847] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/images/pages.php"] [unique_id "aaJ39X6mbajs3bzQGytAlgAAAU4"]
[Sat Feb 28 13:07:02.204031 2026] [:error] [pid 39184:tid 39223] [client 13.71.191.191:64895] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/assets/contao/item.php"] [unique_id "aaJ39ltZF9Zd_U7easDa6QAAAEQ"]
[Sat Feb 28 13:07:02.772337 2026] [:error] [pid 39183:tid 39202] [client 13.71.191.191:64161] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/assets/contao/item.php"] [unique_id "aaJ39hCf4HvhVePw3LbpiAAAAAo"]
[Sat Feb 28 13:07:03.419161 2026] [:error] [pid 11791:tid 11800] [client 13.71.191.191:64225] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/assets/contao/item.php"] [unique_id "aaJ392uX5e1Q32gqxH0ahgAAAQc"]
[Sat Feb 28 13:07:03.848652 2026] [:error] [pid 52460:tid 52464] [client 13.71.191.191:63551] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/assets/contao/item.php"] [unique_id "aaJ397LWOogAgHGh62QxCgAAAYE"]
[Sat Feb 28 13:07:04.521971 2026] [:error] [pid 39184:tid 39224] [client 13.71.191.191:62931] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/assets/js/kcfinder/upload.php"] [unique_id "aaJ3-FtZF9Zd_U7easDa8AAAAEU"]
[Sat Feb 28 13:07:04.940628 2026] [:error] [pid 39292:tid 39307] [client 13.71.191.191:64891] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/assets/js/kcfinder/upload.php"] [unique_id "aaJ3-KIAO5fN7BxyqcHS9wAAAM0"]
[Sat Feb 28 13:07:05.373125 2026] [:error] [pid 39184:tid 39239] [client 13.71.191.191:64174] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/assets/js/kcfinder/upload.php"] [unique_id "aaJ3-VtZF9Zd_U7easDa8wAAAFQ"]
[Sat Feb 28 13:07:05.863841 2026] [:error] [pid 39185:tid 39265] [client 13.71.191.191:64852] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/assets/js/kcfinder/upload.php"] [unique_id "aaJ3-RVE-FfM89u7BQbDoQAAAJM"]
[Sat Feb 28 13:07:06.333765 2026] [:error] [pid 39292:tid 39303] [client 13.71.191.191:64881] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/qpglkpgm.php"] [unique_id "aaJ3-qIAO5fN7BxyqcHS_AAAAMk"]
[Sat Feb 28 13:07:06.778512 2026] [:error] [pid 52460:tid 52487] [client 13.71.191.191:63491] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/qpglkpgm.php"] [unique_id "aaJ3-rLWOogAgHGh62QxGQAAAZg"]
[Sat Feb 28 13:07:07.227735 2026] [:error] [pid 39292:tid 39309] [client 13.71.191.191:65387] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/qpglkpgm.php"] [unique_id "aaJ3-6IAO5fN7BxyqcHTAQAAAM8"]
[Sat Feb 28 13:07:08.171727 2026] [:error] [pid 52460:tid 52478] [client 13.71.191.191:64825] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/qpglkpgm.php"] [unique_id "aaJ3_LLWOogAgHGh62QxIgAAAY8"]
[Sat Feb 28 13:07:08.760156 2026] [:error] [pid 22194:tid 22212] [client 13.71.191.191:64815] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cms.php"] [unique_id "aaJ3_H6mbajs3bzQGytArgAAAVA"]
[Sat Feb 28 13:07:09.449509 2026] [:error] [pid 11791:tid 11804] [client 13.71.191.191:63506] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cms.php"] [unique_id "aaJ3_WuX5e1Q32gqxH0anQAAAQs"]
[Sat Feb 28 13:07:10.091300 2026] [:error] [pid 39185:tid 39248] [client 13.71.191.191:65367] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cms.php"] [unique_id "aaJ3_hVE-FfM89u7BQbDtQAAAII"]
[Sat Feb 28 13:07:10.570747 2026] [:error] [pid 39292:tid 39308] [client 13.71.191.191:64208] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cms.php"] [unique_id "aaJ3_qIAO5fN7BxyqcHTBgAAAM4"]
[Sat Feb 28 13:07:11.086705 2026] [:error] [pid 39184:tid 39230] [client 13.71.191.191:64821] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/maint/jp.php"] [unique_id "aaJ3_1tZF9Zd_U7easDa-QAAAEs"]
[Sat Feb 28 13:07:11.564242 2026] [:error] [pid 39184:tid 39242] [client 13.71.191.191:64806] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/maint/jp.php"] [unique_id "aaJ3_1tZF9Zd_U7easDa_AAAAFc"]
[Sat Feb 28 13:07:12.032597 2026] [:error] [pid 22194:tid 22217] [client 13.71.191.191:63502] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/maint/jp.php"] [unique_id "aaJ4AH6mbajs3bzQGytAtAAAAVU"]
[Sat Feb 28 13:07:12.459980 2026] [:error] [pid 39292:tid 39307] [client 13.71.191.191:64247] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/maint/jp.php"] [unique_id "aaJ4AKIAO5fN7BxyqcHTCwAAAM0"]
[Sat Feb 28 13:07:12.918631 2026] [:error] [pid 52460:tid 52486] [client 13.71.191.191:64876] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/css/colors/blue/rafosul.php"] [unique_id "aaJ4ALLWOogAgHGh62QxOQAAAZc"]
[Sat Feb 28 13:07:13.547749 2026] [:error] [pid 39292:tid 39312] [client 13.71.191.191:65280] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/css/colors/blue/rafosul.php"] [unique_id "aaJ4AaIAO5fN7BxyqcHTDQAAANI"]
[Sat Feb 28 13:07:13.990039 2026] [:error] [pid 11791:tid 11802] [client 13.71.191.191:64795] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/css/colors/blue/rafosul.php"] [unique_id "aaJ4AWuX5e1Q32gqxH0apQAAAQk"]
[Sat Feb 28 13:07:14.416162 2026] [:error] [pid 22194:tid 22218] [client 13.71.191.191:65379] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/css/colors/blue/rafosul.php"] [unique_id "aaJ4An6mbajs3bzQGytAuQAAAVY"]
[Sat Feb 28 13:07:14.915777 2026] [:error] [pid 22194:tid 22199] [client 13.71.191.191:64817] [client 13.71.191.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/dist/commands/webix.php"] [unique_id "aaJ4An6mbajs3bzQGytAvAAAAUM"]
[Sat Feb 28 13:07:15.435696 2026] [:error] [pid 11791:tid 11794] [client 13.71.191.191:64150] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/adminer.php/shell.php/text.php"] [unique_id "aaJ4A2uX5e1Q32gqxH0arwAAAQE"]
[Sat Feb 28 13:07:15.901086 2026] [:error] [pid 11791:tid 11806] [client 13.71.191.191:64159] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/adminer.php/shell.php/text.php"] [unique_id "aaJ4A2uX5e1Q32gqxH0atwAAAQ0"]
[Sat Feb 28 13:07:16.352049 2026] [:error] [pid 11791:tid 11793] [client 13.71.191.191:63497] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/adminer.php/shell.php/text.php"] [unique_id "aaJ4BGuX5e1Q32gqxH0augAAAQA"]
[Sat Feb 28 13:07:16.799539 2026] [:error] [pid 39292:tid 39309] [client 13.71.191.191:63565] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/adminer.php/shell.php/text.php"] [unique_id "aaJ4BKIAO5fN7BxyqcHTDwAAAM8"]
[Sat Feb 28 13:07:17.395507 2026] [:error] [pid 11791:tid 11816] [client 13.71.191.191:63544] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/WordPressCore/fm.php"] [unique_id "aaJ4BWuX5e1Q32gqxH0awQAAARc"]
[Sat Feb 28 13:07:17.998108 2026] [:error] [pid 39184:tid 39234] [client 13.71.191.191:64217] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/WordPressCore/fm.php"] [unique_id "aaJ4BVtZF9Zd_U7easDbAgAAAE8"]
[Sat Feb 28 13:07:18.507662 2026] [:error] [pid 39292:tid 39301] [client 13.71.191.191:62957] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/WordPressCore/fm.php"] [unique_id "aaJ4BqIAO5fN7BxyqcHTFAAAAMc"]
[Sat Feb 28 13:07:19.000083 2026] [:error] [pid 39292:tid 39295] [client 13.71.191.191:63592] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/WordPressCore/fm.php"] [unique_id "aaJ4BqIAO5fN7BxyqcHTFwAAAME"]
[Sat Feb 28 13:07:19.632407 2026] [:error] [pid 11791:tid 11795] [client 13.71.191.191:62934] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/gmxwbau/hzwttmff.php"] [unique_id "aaJ4B2uX5e1Q32gqxH0azAAAAQI"]
[Sat Feb 28 13:07:20.142640 2026] [:error] [pid 11791:tid 11811] [client 13.71.191.191:65285] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/gmxwbau/hzwttmff.php"] [unique_id "aaJ4CGuX5e1Q32gqxH0azgAAARI"]
[Sat Feb 28 13:07:20.724513 2026] [:error] [pid 22194:tid 22202] [client 13.71.191.191:63586] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/gmxwbau/hzwttmff.php"] [unique_id "aaJ4CH6mbajs3bzQGytAzQAAAUY"]
[Sat Feb 28 13:07:21.200211 2026] [:error] [pid 39292:tid 39303] [client 13.71.191.191:63561] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/gmxwbau/hzwttmff.php"] [unique_id "aaJ4CaIAO5fN7BxyqcHTIQAAAMk"]
[Sat Feb 28 13:07:21.658692 2026] [:error] [pid 52460:tid 52475] [client 13.71.191.191:65328] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/WSO-Enigma.php"] [unique_id "aaJ4CbLWOogAgHGh62QxWgAAAYw"]
[Sat Feb 28 13:07:22.160222 2026] [:error] [pid 11791:tid 11817] [client 13.71.191.191:63515] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/WSO-Enigma.php"] [unique_id "aaJ4CmuX5e1Q32gqxH0a0wAAARg"]
[Sat Feb 28 13:07:22.743380 2026] [:error] [pid 11791:tid 11812] [client 13.71.191.191:64783] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/WSO-Enigma.php"] [unique_id "aaJ4CmuX5e1Q32gqxH0a1gAAARM"]
[Sat Feb 28 13:07:23.427988 2026] [:error] [pid 52460:tid 52473] [client 13.71.191.191:64148] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/WSO-Enigma.php"] [unique_id "aaJ4C7LWOogAgHGh62QxbQAAAYo"]
[Sat Feb 28 13:07:23.925075 2026] [:error] [pid 11791:tid 11799] [client 13.71.191.191:64253] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/general/cache/plugins.php"] [unique_id "aaJ4C2uX5e1Q32gqxH0a3gAAAQY"]
[Sat Feb 28 13:07:24.346495 2026] [:error] [pid 39185:tid 39258] [client 13.71.191.191:64768] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/general/cache/plugins.php"] [unique_id "aaJ4DBVE-FfM89u7BQbD2AAAAIw"]
[Sat Feb 28 13:07:24.843785 2026] [:error] [pid 39185:tid 39257] [client 13.71.191.191:65305] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/general/cache/plugins.php"] [unique_id "aaJ4DBVE-FfM89u7BQbD3wAAAIs"]
[Sat Feb 28 13:07:25.430293 2026] [:error] [pid 39185:tid 39255] [client 13.71.191.191:64784] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/general/cache/plugins.php"] [unique_id "aaJ4DRVE-FfM89u7BQbD5QAAAIk"]
[Sat Feb 28 13:07:25.914798 2026] [:error] [pid 11791:tid 11798] [client 13.71.191.191:63540] [client 13.71.191.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/gif.php"] [unique_id "aaJ4DWuX5e1Q32gqxH0a5QAAAQU"]
[Sat Feb 28 13:07:26.359761 2026] [:error] [pid 52460:tid 52469] [client 13.71.191.191:63523] [client 13.71.191.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/block/moon.php"] [unique_id "aaJ4DrLWOogAgHGh62QxfAAAAYY"]
[Sat Feb 28 13:07:26.849163 2026] [:error] [pid 52460:tid 52476] [client 13.71.191.191:63591] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ALFA_DATA/alfacgiapi/themes.php"] [unique_id "aaJ4DrLWOogAgHGh62QxggAAAY0"]
[Sat Feb 28 13:07:27.543596 2026] [:error] [pid 52460:tid 52477] [client 13.71.191.191:63612] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ALFA_DATA/alfacgiapi/themes.php"] [unique_id "aaJ4D7LWOogAgHGh62QxiAAAAY4"]
[Sat Feb 28 13:07:28.036039 2026] [:error] [pid 39185:tid 39258] [client 13.71.191.191:64191] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ALFA_DATA/alfacgiapi/themes.php"] [unique_id "aaJ4EBVE-FfM89u7BQbD7wAAAIw"]
[Sat Feb 28 13:07:28.655488 2026] [:error] [pid 52460:tid 52467] [client 13.71.191.191:64196] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/ern/classwithtostring.php"] [unique_id "aaJ4ELLWOogAgHGh62QxjwAAAYQ"]
[Sat Feb 28 13:07:29.140736 2026] [:error] [pid 52460:tid 52476] [client 13.71.191.191:63530] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/ern/classwithtostring.php"] [unique_id "aaJ4EbLWOogAgHGh62QxlQAAAY0"]
[Sat Feb 28 13:07:29.635995 2026] [:error] [pid 11791:tid 11801] [client 13.71.191.191:63512] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/ern/classwithtostring.php"] [unique_id "aaJ4EWuX5e1Q32gqxH0a8gAAAQg"]
[Sat Feb 28 13:07:30.243860 2026] [:error] [pid 52460:tid 52481] [client 13.71.191.191:64797] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/ern/classwithtostring.php"] [unique_id "aaJ4ErLWOogAgHGh62QxngAAAZI"]
[Sat Feb 28 13:07:30.858345 2026] [:error] [pid 52460:tid 52474] [client 13.71.191.191:64887] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fnyeltio.php"] [unique_id "aaJ4ErLWOogAgHGh62QxowAAAYs"]
[Sat Feb 28 13:07:31.448906 2026] [:error] [pid 39184:tid 39239] [client 13.71.191.191:64154] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fnyeltio.php"] [unique_id "aaJ4E1tZF9Zd_U7easDbEwAAAFQ"]
[Sat Feb 28 13:07:32.148848 2026] [:error] [pid 39184:tid 39241] [client 13.71.191.191:64779] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fnyeltio.php"] [unique_id "aaJ4FFtZF9Zd_U7easDbFwAAAFY"]
[Sat Feb 28 13:07:32.577189 2026] [:error] [pid 22194:tid 22208] [client 13.71.191.191:65369] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fnyeltio.php"] [unique_id "aaJ4FH6mbajs3bzQGytA2QAAAUw"]
[Sat Feb 28 13:07:33.079520 2026] [:error] [pid 11791:tid 11815] [client 13.71.191.191:64845] [client 13.71.191.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Text/Diff/class.engine.php"] [unique_id "aaJ4FWuX5e1Q32gqxH0a_gAAARY"]
[Sat Feb 28 13:07:33.528666 2026] [:error] [pid 39185:tid 39267] [client 13.71.191.191:64805] [client 13.71.191.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/dist/format-library/admin.php"] [unique_id "aaJ4FRVE-FfM89u7BQbEDgAAAJU"]
[Sat Feb 28 13:07:34.045345 2026] [:error] [pid 39185:tid 39260] [client 13.71.191.191:63527] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/affiliate_manager.php"] [unique_id "aaJ4FhVE-FfM89u7BQbEFwAAAI4"]
[Sat Feb 28 13:07:34.502836 2026] [:error] [pid 11791:tid 11812] [client 13.71.191.191:64803] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/affiliate_manager.php"] [unique_id "aaJ4FmuX5e1Q32gqxH0bBAAAARM"]
[Sat Feb 28 13:07:34.946927 2026] [:error] [pid 22194:tid 22215] [client 13.71.191.191:64772] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/affiliate_manager.php"] [unique_id "aaJ4Fn6mbajs3bzQGytA3AAAAVM"]
[Sat Feb 28 13:07:35.369831 2026] [:error] [pid 39292:tid 39298] [client 13.71.191.191:65284] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/affiliate_manager.php"] [unique_id "aaJ4F6IAO5fN7BxyqcHTKAAAAMQ"]
[Sat Feb 28 13:07:35.824622 2026] [:error] [pid 11791:tid 11797] [client 13.71.191.191:63514] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ALFA_DATA/alfacgiapi/bk.php"] [unique_id "aaJ4F2uX5e1Q32gqxH0bEgAAAQQ"]
[Sat Feb 28 13:07:36.312019 2026] [:error] [pid 22194:tid 22201] [client 13.71.191.191:62949] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ALFA_DATA/alfacgiapi/bk.php"] [unique_id "aaJ4GH6mbajs3bzQGytA4AAAAUU"]
[Sat Feb 28 13:07:36.841053 2026] [:error] [pid 39183:tid 39205] [client 13.71.191.191:64843] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ALFA_DATA/alfacgiapi/bk.php"] [unique_id "aaJ4GBCf4HvhVePw3LbplwAAAA0"]
[Sat Feb 28 13:07:37.440817 2026] [:error] [pid 22194:tid 22196] [client 13.71.191.191:65357] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ALFA_DATA/alfacgiapi/bk.php"] [unique_id "aaJ4GX6mbajs3bzQGytA4wAAAUA"]
[Sat Feb 28 13:07:38.074289 2026] [:error] [pid 39185:tid 39270] [client 13.71.191.191:63573] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/duck.php/cpvcigyk.php/text.php"] [unique_id "aaJ4GhVE-FfM89u7BQbEHQAAAJg"]
[Sat Feb 28 13:07:38.858453 2026] [:error] [pid 39185:tid 39250] [client 13.71.191.191:63611] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/duck.php/cpvcigyk.php/text.php"] [unique_id "aaJ4GhVE-FfM89u7BQbEIgAAAIQ"]
[Sat Feb 28 13:07:39.568642 2026] [:error] [pid 39292:tid 39307] [client 13.71.191.191:63505] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/duck.php/cpvcigyk.php/text.php"] [unique_id "aaJ4G6IAO5fN7BxyqcHTMAAAAM0"]
[Sat Feb 28 13:07:40.671529 2026] [:error] [pid 11791:tid 11807] [client 13.71.191.191:65334] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/duck.php/cpvcigyk.php/text.php"] [unique_id "aaJ4HGuX5e1Q32gqxH0bKQAAAQ4"]
[Sat Feb 28 13:07:41.429596 2026] [:error] [pid 39185:tid 39249] [client 13.71.191.191:64774] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/contact.php/file1.php/text.php"] [unique_id "aaJ4HRVE-FfM89u7BQbENAAAAIM"]
[Sat Feb 28 13:07:42.170602 2026] [:error] [pid 11791:tid 11804] [client 13.71.191.191:64823] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/contact.php/file1.php/text.php"] [unique_id "aaJ4HmuX5e1Q32gqxH0bMAAAAQs"]
[Sat Feb 28 13:07:43.876075 2026] [proxy_fcgi:error] [pid 39185:tid 39248] [client 13.71.191.191:65333] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 13:07:44.566852 2026] [proxy_fcgi:error] [pid 39185:tid 39267] [client 13.71.191.191:65333] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 13:07:44.981212 2026] [:error] [pid 39185:tid 39269] [client 13.71.191.191:65333] [client 13.71.191.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/dist/editor/tinyfilemanager.php"] [unique_id "aaJ4IBVE-FfM89u7BQbEVwAAAJc"]
[Sat Feb 28 13:07:46.551717 2026] [:error] [pid 39185:tid 39257] [client 13.71.191.191:63608] [client 13.71.191.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/404.php"] [unique_id "aaJ4IhVE-FfM89u7BQbEXwAAAIs"]
[Sat Feb 28 13:07:52.694884 2026] [proxy_fcgi:error] [pid 39292:tid 39310] [client 13.71.191.191:65397] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 13:07:53.122770 2026] [proxy_fcgi:error] [pid 39292:tid 39298] [client 13.71.191.191:65397] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 13:07:53.647095 2026] [:error] [pid 39292:tid 39304] [client 13.71.191.191:65397] [client 13.71.191.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/class-simplepie.php"] [unique_id "aaJ4KaIAO5fN7BxyqcHTYAAAAMo"]
[Sat Feb 28 13:07:55.303220 2026] [:error] [pid 52460:tid 52482] [client 13.71.191.191:64178] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/wpsml-sys.php"] [unique_id "aaJ4K7LWOogAgHGh62Qx5wAAAZM"]
[Sat Feb 28 13:07:56.445543 2026] [:error] [pid 39185:tid 39254] [client 13.71.191.191:64834] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/wpsml-sys.php"] [unique_id "aaJ4LBVE-FfM89u7BQbEdgAAAIg"]
[Sat Feb 28 13:07:57.209215 2026] [:error] [pid 39183:tid 39202] [client 13.71.191.191:65360] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/wpsml-sys.php"] [unique_id "aaJ4LRCf4HvhVePw3LbpsgAAAAo"]
[Sat Feb 28 13:07:57.670035 2026] [:error] [pid 11791:tid 11795] [client 13.71.191.191:64202] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/wpsml-sys.php"] [unique_id "aaJ4LWuX5e1Q32gqxH0bZQAAAQI"]
[Sat Feb 28 13:07:58.128825 2026] [:error] [pid 11791:tid 11813] [client 13.71.191.191:64176] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/myflash/"] [unique_id "aaJ4LmuX5e1Q32gqxH0baAAAARQ"]
[Sat Feb 28 13:07:58.593321 2026] [:error] [pid 22194:tid 22207] [client 13.71.191.191:65380] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/myflash/"] [unique_id "aaJ4Ln6mbajs3bzQGytBAQAAAUs"]
[Sat Feb 28 13:07:59.125674 2026] [:error] [pid 39292:tid 39303] [client 13.71.191.191:64199] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/myflash/"] [unique_id "aaJ4L6IAO5fN7BxyqcHTaAAAAMk"]
[Sat Feb 28 13:07:59.773353 2026] [:error] [pid 22194:tid 22213] [client 13.71.191.191:65344] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/myflash/"] [unique_id "aaJ4L36mbajs3bzQGytBBAAAAVE"]
[Sat Feb 28 13:08:00.639188 2026] [:error] [pid 39185:tid 39266] [client 13.71.191.191:65400] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/rd.php"] [unique_id "aaJ4MBVE-FfM89u7BQbEkQAAAJQ"]
[Sat Feb 28 13:08:01.211295 2026] [:error] [pid 11791:tid 11801] [client 13.71.191.191:64170] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/rd.php"] [unique_id "aaJ4MWuX5e1Q32gqxH0bagAAAQg"]
[Sat Feb 28 13:08:02.035829 2026] [:error] [pid 39185:tid 39249] [client 13.71.191.191:64250] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/rd.php"] [unique_id "aaJ4MhVE-FfM89u7BQbEnAAAAIM"]
[Sat Feb 28 13:08:02.999956 2026] [:error] [pid 39185:tid 39268] [client 13.71.191.191:64811] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/rd.php"] [unique_id "aaJ4MhVE-FfM89u7BQbEqAAAAJY"]
[Sat Feb 28 13:08:04.341093 2026] [:error] [pid 39185:tid 39267] [client 13.71.191.191:64171] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/oload_classmap.php"] [unique_id "aaJ4NBVE-FfM89u7BQbEsQAAAJU"]
[Sat Feb 28 13:08:04.875859 2026] [:error] [pid 39185:tid 39249] [client 13.71.191.191:63489] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/oload_classmap.php"] [unique_id "aaJ4NBVE-FfM89u7BQbEtgAAAIM"]
[Sat Feb 28 13:08:06.068939 2026] [:error] [pid 39185:tid 39260] [client 13.71.191.191:64211] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/oload_classmap.php"] [unique_id "aaJ4NhVE-FfM89u7BQbExAAAAI4"]
[Sat Feb 28 13:08:06.681632 2026] [:error] [pid 39185:tid 39257] [client 13.71.191.191:65384] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/oload_classmap.php"] [unique_id "aaJ4NhVE-FfM89u7BQbEyQAAAIs"]
[Sat Feb 28 13:08:07.607004 2026] [:error] [pid 52460:tid 52482] [client 13.71.191.191:64193] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/images/spin.php"] [unique_id "aaJ4N7LWOogAgHGh62QyCAAAAZM"]
[Sat Feb 28 13:08:08.553648 2026] [:error] [pid 39183:tid 39216] [client 13.71.191.191:63584] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/images/spin.php"] [unique_id "aaJ4OBCf4HvhVePw3LbpugAAABg"]
[Sat Feb 28 13:08:10.182985 2026] [:error] [pid 39292:tid 39301] [client 13.71.191.191:65323] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/images/spin.php"] [unique_id "aaJ4OqIAO5fN7BxyqcHTcwAAAMc"]
[Sat Feb 28 13:08:11.295334 2026] [:error] [pid 39185:tid 39265] [client 13.71.191.191:64810] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/images/spin.php"] [unique_id "aaJ4OxVE-FfM89u7BQbE8QAAAJM"]
[Sat Feb 28 13:08:12.001150 2026] [:error] [pid 39185:tid 39263] [client 13.71.191.191:65348] [client 13.71.191.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/customize//parx.php"] [unique_id "aaJ4PBVE-FfM89u7BQbE-wAAAJE"]
[Sat Feb 28 13:08:13.206616 2026] [:error] [pid 39292:tid 39318] [client 13.71.191.191:64791] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/IXR/network.php"] [unique_id "aaJ4PaIAO5fN7BxyqcHTewAAANg"]
[Sat Feb 28 13:08:13.797172 2026] [:error] [pid 39185:tid 39258] [client 13.71.191.191:63583] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/IXR/network.php"] [unique_id "aaJ4PRVE-FfM89u7BQbFCAAAAIw"]
[Sat Feb 28 13:08:14.335786 2026] [:error] [pid 39292:tid 39306] [client 13.71.191.191:65326] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/IXR/network.php"] [unique_id "aaJ4PqIAO5fN7BxyqcHTfAAAAMw"]
[Sat Feb 28 13:08:14.930296 2026] [:error] [pid 52460:tid 52465] [client 13.71.191.191:64228] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/IXR/network.php"] [unique_id "aaJ4PrLWOogAgHGh62QyIAAAAYI"]
[Sat Feb 28 13:08:15.392410 2026] [:error] [pid 11791:tid 11808] [client 13.71.191.191:64804] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/fix/byp.php"] [unique_id "aaJ4P2uX5e1Q32gqxH0bfwAAAQ8"]
[Sat Feb 28 13:08:15.882137 2026] [:error] [pid 39292:tid 39298] [client 13.71.191.191:64888] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/fix/byp.php"] [unique_id "aaJ4P6IAO5fN7BxyqcHTgAAAAMQ"]
[Sat Feb 28 13:08:16.329520 2026] [:error] [pid 39185:tid 39254] [client 13.71.191.191:64894] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/fix/byp.php"] [unique_id "aaJ4QBVE-FfM89u7BQbFDQAAAIg"]
[Sat Feb 28 13:08:16.882305 2026] [:error] [pid 52460:tid 52482] [client 13.71.191.191:62956] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/fix/byp.php"] [unique_id "aaJ4QLLWOogAgHGh62QyKwAAAZM"]
[Sat Feb 28 13:08:17.567252 2026] [:error] [pid 39185:tid 39270] [client 13.71.191.191:62217] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/transaction_history.php"] [unique_id "aaJ4QRVE-FfM89u7BQbFEQAAAJg"]
[Sat Feb 28 13:08:18.031092 2026] [:error] [pid 39185:tid 39257] [client 13.71.191.191:64167] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/transaction_history.php"] [unique_id "aaJ4QhVE-FfM89u7BQbFEwAAAIs"]
[Sat Feb 28 13:08:18.572315 2026] [:error] [pid 11791:tid 11804] [client 13.71.191.191:64793] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/transaction_history.php"] [unique_id "aaJ4QmuX5e1Q32gqxH0bhQAAAQs"]
[Sat Feb 28 13:08:19.050746 2026] [:error] [pid 11791:tid 11811] [client 13.71.191.191:64862] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/transaction_history.php"] [unique_id "aaJ4Q2uX5e1Q32gqxH0bigAAARI"]
[Sat Feb 28 13:08:19.563433 2026] [:error] [pid 39185:tid 39250] [client 13.71.191.191:63615] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/assets/contao/css/service.php"] [unique_id "aaJ4QxVE-FfM89u7BQbFGwAAAIQ"]
[Sat Feb 28 13:08:20.170771 2026] [:error] [pid 52460:tid 52465] [client 13.71.191.191:63604] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/assets/contao/css/service.php"] [unique_id "aaJ4RLLWOogAgHGh62QyMQAAAYI"]
[Sat Feb 28 13:08:20.840298 2026] [:error] [pid 52460:tid 52484] [client 13.71.191.191:64771] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/assets/contao/css/service.php"] [unique_id "aaJ4RLLWOogAgHGh62QyNQAAAZU"]
[Sat Feb 28 13:08:21.356910 2026] [:error] [pid 52460:tid 52487] [client 13.71.191.191:65377] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/assets/contao/css/service.php"] [unique_id "aaJ4RbLWOogAgHGh62QyNwAAAZg"]
[Sat Feb 28 13:08:21.908432 2026] [:error] [pid 39183:tid 39206] [client 13.71.191.191:64829] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/colors/sunrise/"] [unique_id "aaJ4RRCf4HvhVePw3LbpygAAAA4"]
[Sat Feb 28 13:08:22.360046 2026] [:error] [pid 52460:tid 52467] [client 13.71.191.191:64219] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/colors/sunrise/"] [unique_id "aaJ4RrLWOogAgHGh62QyPAAAAYQ"]
[Sat Feb 28 13:08:22.864322 2026] [:error] [pid 39183:tid 39216] [client 13.71.191.191:64158] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/colors/sunrise/"] [unique_id "aaJ4RhCf4HvhVePw3LbpywAAABg"]
[Sat Feb 28 13:08:23.487678 2026] [:error] [pid 39185:tid 39262] [client 13.71.191.191:65366] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/colors/sunrise/"] [unique_id "aaJ4RxVE-FfM89u7BQbFIwAAAJA"]
[Sat Feb 28 13:08:24.053094 2026] [:error] [pid 39185:tid 39250] [client 13.71.191.191:64786] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dqbayyrz.php/text.php/shell.php"] [unique_id "aaJ4SBVE-FfM89u7BQbFKAAAAIQ"]
[Sat Feb 28 13:08:24.643256 2026] [:error] [pid 39184:tid 39241] [client 13.71.191.191:63503] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dqbayyrz.php/text.php/shell.php"] [unique_id "aaJ4SFtZF9Zd_U7easDbPQAAAFY"]
[Sat Feb 28 13:08:25.277021 2026] [:error] [pid 52460:tid 52477] [client 13.71.191.191:63599] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dqbayyrz.php/text.php/shell.php"] [unique_id "aaJ4SbLWOogAgHGh62QyQgAAAY4"]
[Sat Feb 28 13:08:26.280268 2026] [:error] [pid 22194:tid 22196] [client 13.71.191.191:62941] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dqbayyrz.php/text.php/shell.php"] [unique_id "aaJ4Sn6mbajs3bzQGytBGwAAAUA"]
[Sat Feb 28 13:08:27.118404 2026] [:error] [pid 39185:tid 39247] [client 13.71.191.191:63560] [client 13.71.191.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Text/input.php"] [unique_id "aaJ4SxVE-FfM89u7BQbFNgAAAIE"]
[Sat Feb 28 13:08:27.861824 2026] [:error] [pid 39185:tid 39260] [client 13.71.191.191:64819] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/uploads/uploads__.php"] [unique_id "aaJ4SxVE-FfM89u7BQbFOgAAAI4"]
[Sat Feb 28 13:08:28.892918 2026] [:error] [pid 39292:tid 39312] [client 13.71.191.191:65388] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/uploads/uploads__.php"] [unique_id "aaJ4TKIAO5fN7BxyqcHTjQAAANI"]
[Sat Feb 28 13:08:29.414208 2026] [:error] [pid 39185:tid 39264] [client 13.71.191.191:62902] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/uploads/uploads__.php"] [unique_id "aaJ4TRVE-FfM89u7BQbFQQAAAJI"]
[Sat Feb 28 13:08:29.998853 2026] [:error] [pid 52460:tid 52478] [client 13.71.191.191:64773] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/uploads/uploads__.php"] [unique_id "aaJ4TbLWOogAgHGh62QyWAAAAY8"]
[Sat Feb 28 13:08:30.516139 2026] [:error] [pid 39185:tid 39247] [client 13.71.191.191:64203] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/colors/light/vSqcqEF.php"] [unique_id "aaJ4ThVE-FfM89u7BQbFSAAAAIE"]
[Sat Feb 28 13:08:30.969183 2026] [:error] [pid 39185:tid 39260] [client 13.71.191.191:64851] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/colors/light/vSqcqEF.php"] [unique_id "aaJ4ThVE-FfM89u7BQbFTAAAAI4"]
[Sat Feb 28 13:08:31.386288 2026] [:error] [pid 39185:tid 39259] [client 13.71.191.191:64872] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/colors/light/vSqcqEF.php"] [unique_id "aaJ4TxVE-FfM89u7BQbFUAAAAI0"]
[Sat Feb 28 13:08:31.919256 2026] [:error] [pid 39184:tid 39229] [client 13.71.191.191:64885] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/colors/light/vSqcqEF.php"] [unique_id "aaJ4T1tZF9Zd_U7easDbPwAAAEo"]
[Sat Feb 28 13:08:32.372845 2026] [:error] [pid 39185:tid 39261] [client 13.71.191.191:65302] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/js/jcrop/Jcrop.php"] [unique_id "aaJ4UBVE-FfM89u7BQbFVwAAAI8"]
[Sat Feb 28 13:08:32.899712 2026] [:error] [pid 39185:tid 39258] [client 13.71.191.191:65313] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/js/jcrop/Jcrop.php"] [unique_id "aaJ4UBVE-FfM89u7BQbFWgAAAIw"]
[Sat Feb 28 13:08:33.376219 2026] [:error] [pid 39185:tid 39251] [client 13.71.191.191:65341] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/js/jcrop/Jcrop.php"] [unique_id "aaJ4URVE-FfM89u7BQbFXwAAAIU"]
[Sat Feb 28 13:08:34.149063 2026] [:error] [pid 39185:tid 39247] [client 13.71.191.191:65362] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/js/jcrop/Jcrop.php"] [unique_id "aaJ4UhVE-FfM89u7BQbFYgAAAIE"]
[Sat Feb 28 13:08:34.726787 2026] [:error] [pid 39185:tid 39267] [client 13.71.191.191:64244] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/images/service.php"] [unique_id "aaJ4UhVE-FfM89u7BQbFZgAAAJU"]
[Sat Feb 28 13:08:35.310745 2026] [:error] [pid 39185:tid 39250] [client 13.71.191.191:65406] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/images/service.php"] [unique_id "aaJ4UxVE-FfM89u7BQbFagAAAIQ"]
[Sat Feb 28 13:08:35.804098 2026] [:error] [pid 39292:tid 39298] [client 13.71.191.191:64160] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/images/service.php"] [unique_id "aaJ4U6IAO5fN7BxyqcHTlQAAAMQ"]
[Sat Feb 28 13:08:36.464080 2026] [:error] [pid 39185:tid 39268] [client 13.71.191.191:64813] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/images/service.php"] [unique_id "aaJ4VBVE-FfM89u7BQbFbwAAAJY"]
[Sat Feb 28 13:08:36.971054 2026] [:error] [pid 39292:tid 39295] [client 13.71.191.191:64254] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/js/cache.php"] [unique_id "aaJ4VKIAO5fN7BxyqcHTmAAAAME"]
[Sat Feb 28 13:08:37.494861 2026] [:error] [pid 39184:tid 39237] [client 13.71.191.191:65337] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/js/cache.php"] [unique_id "aaJ4VVtZF9Zd_U7easDbQAAAAFI"]
[Sat Feb 28 13:08:38.111707 2026] [:error] [pid 52460:tid 52477] [client 13.71.191.191:63494] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/js/cache.php"] [unique_id "aaJ4VrLWOogAgHGh62QyXwAAAY4"]
[Sat Feb 28 13:08:38.748147 2026] [:error] [pid 39292:tid 39301] [client 13.71.191.191:64146] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/js/cache.php"] [unique_id "aaJ4VqIAO5fN7BxyqcHTnQAAAMc"]
[Sat Feb 28 13:08:39.223072 2026] [:error] [pid 39292:tid 39317] [client 13.71.191.191:63593] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gaza.php"] [unique_id "aaJ4V6IAO5fN7BxyqcHToAAAANc"]
[Sat Feb 28 13:08:39.683306 2026] [:error] [pid 39185:tid 39267] [client 13.71.191.191:63576] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gaza.php"] [unique_id "aaJ4VxVE-FfM89u7BQbFeQAAAJU"]
[Sat Feb 28 13:08:40.132050 2026] [:error] [pid 39185:tid 39265] [client 13.71.191.191:64854] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gaza.php"] [unique_id "aaJ4WBVE-FfM89u7BQbFewAAAJM"]
[Sat Feb 28 13:08:40.680973 2026] [:error] [pid 52460:tid 52475] [client 13.71.191.191:64782] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gaza.php"] [unique_id "aaJ4WLLWOogAgHGh62QyYgAAAYw"]
[Sat Feb 28 13:08:41.161773 2026] [:error] [pid 11791:tid 11802] [client 13.71.191.191:64796] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/makeasmtp.php"] [unique_id "aaJ4WWuX5e1Q32gqxH0buQAAAQk"]
[Sat Feb 28 13:08:41.820687 2026] [:error] [pid 39183:tid 39205] [client 13.71.191.191:64777] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/makeasmtp.php"] [unique_id "aaJ4WRCf4HvhVePw3Lbp0gAAAA0"]
[Sat Feb 28 13:08:42.763798 2026] [:error] [pid 39185:tid 39268] [client 13.71.191.191:63548] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/makeasmtp.php"] [unique_id "aaJ4WhVE-FfM89u7BQbFjQAAAJY"]
[Sat Feb 28 13:08:43.632973 2026] [:error] [pid 39292:tid 39296] [client 13.71.191.191:64833] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/makeasmtp.php"] [unique_id "aaJ4W6IAO5fN7BxyqcHTqgAAAMI"]
[Sat Feb 28 13:08:44.479583 2026] [:error] [pid 39185:tid 39258] [client 13.71.191.191:64249] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/shell.php"] [unique_id "aaJ4XBVE-FfM89u7BQbFlAAAAIw"]
[Sat Feb 28 13:08:45.009123 2026] [:error] [pid 39185:tid 39269] [client 13.71.191.191:65352] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/shell.php"] [unique_id "aaJ4XRVE-FfM89u7BQbFmQAAAJc"]
[Sat Feb 28 13:08:45.530978 2026] [:error] [pid 52460:tid 52485] [client 13.71.191.191:65289] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/shell.php"] [unique_id "aaJ4XbLWOogAgHGh62QyaQAAAZY"]
[Sat Feb 28 13:08:46.022991 2026] [:error] [pid 39185:tid 39248] [client 13.71.191.191:65392] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/shell.php"] [unique_id "aaJ4XhVE-FfM89u7BQbFnQAAAII"]
[Sat Feb 28 13:08:46.486930 2026] [:error] [pid 39185:tid 39258] [client 13.71.191.191:64864] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mrbmppbo.php"] [unique_id "aaJ4XhVE-FfM89u7BQbFogAAAIw"]
[Sat Feb 28 13:08:47.464801 2026] [:error] [pid 52460:tid 52487] [client 13.71.191.191:65317] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mrbmppbo.php"] [unique_id "aaJ4X7LWOogAgHGh62QybgAAAZg"]
[Sat Feb 28 13:08:48.181387 2026] [:error] [pid 39185:tid 39258] [client 13.71.191.191:65332] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mrbmppbo.php"] [unique_id "aaJ4YBVE-FfM89u7BQbFswAAAIw"]
[Sat Feb 28 13:08:48.702794 2026] [:error] [pid 39185:tid 39250] [client 13.71.191.191:64816] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mrbmppbo.php"] [unique_id "aaJ4YBVE-FfM89u7BQbFuQAAAIQ"]
[Sat Feb 28 13:08:49.227318 2026] [:error] [pid 39185:tid 39265] [client 13.71.191.191:65303] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/uploads/mfw-activity-logger/csv-uploads/TitaniumEx.php"] [unique_id "aaJ4YRVE-FfM89u7BQbFwAAAAJM"]
[Sat Feb 28 13:08:50.275279 2026] [:error] [pid 11791:tid 11803] [client 13.71.191.191:63547] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/uploads/mfw-activity-logger/csv-uploads/TitaniumEx.php"] [unique_id "aaJ4YmuX5e1Q32gqxH0bxgAAAQo"]
[Sat Feb 28 13:08:50.986484 2026] [:error] [pid 11791:tid 11802] [client 13.71.191.191:65368] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/uploads/mfw-activity-logger/csv-uploads/TitaniumEx.php"] [unique_id "aaJ4YmuX5e1Q32gqxH0bxwAAAQk"]
[Sat Feb 28 13:08:51.663756 2026] [:error] [pid 39185:tid 39256] [client 13.71.191.191:63532] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/uploads/mfw-activity-logger/csv-uploads/TitaniumEx.php"] [unique_id "aaJ4YxVE-FfM89u7BQbFxgAAAIo"]
[Sat Feb 28 13:08:52.548540 2026] [:error] [pid 52460:tid 52487] [client 13.71.191.191:64172] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ok.php"] [unique_id "aaJ4ZLLWOogAgHGh62QygQAAAZg"]
[Sat Feb 28 13:08:53.229543 2026] [proxy_fcgi:error] [pid 39292:tid 39317] [client 13.71.191.191:64185] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 13:08:53.666815 2026] [proxy_fcgi:error] [pid 39292:tid 39297] [client 13.71.191.191:64185] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 13:08:53.998860 2026] [proxy_fcgi:error] [pid 39292:tid 39302] [client 13.71.191.191:64185] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 13:08:54.429162 2026] [proxy_fcgi:error] [pid 39292:tid 39318] [client 13.71.191.191:64185] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 13:08:54.678728 2026] [proxy_fcgi:error] [pid 39292:tid 39306] [client 13.71.191.191:64185] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 13:08:54.907496 2026] [proxy_fcgi:error] [pid 39292:tid 39300] [client 13.71.191.191:64185] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 13:08:55.123461 2026] [proxy_fcgi:error] [pid 39292:tid 39313] [client 13.71.191.191:64185] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 13:08:55.340442 2026] [proxy_fcgi:error] [pid 39292:tid 39310] [client 13.71.191.191:64185] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 13:44:26.631174 2026] [:error] [pid 11791:tid 11795] [client 20.63.83.113:29993] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaKAumuX5e1Q32gqxH0uxgAAAQI"]
[Sat Feb 28 13:44:27.050707 2026] [:error] [pid 22194:tid 22204] [client 20.63.83.113:9172] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaKAu36mbajs3bzQGytJcwAAAUg"]
[Sat Feb 28 13:44:27.460796 2026] [:error] [pid 22194:tid 22216] [client 20.63.83.113:29976] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaKAu36mbajs3bzQGytJdQAAAVQ"]
[Sat Feb 28 13:44:27.873777 2026] [:error] [pid 22194:tid 22210] [client 20.63.83.113:37337] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaKAu36mbajs3bzQGytJeAAAAU4"]
[Sat Feb 28 13:56:49.203001 2026] [:error] [pid 52460:tid 52473] [client 4.204.192.31:25653] [client 4.204.192.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/cah.php"] [unique_id "aaKDobLWOogAgHGh62RUqQAAAYo"]
[Sat Feb 28 13:56:49.870375 2026] [proxy_fcgi:error] [pid 39185:tid 39256] [client 4.204.192.31:25616] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 13:56:50.299361 2026] [proxy_fcgi:error] [pid 39185:tid 39259] [client 4.204.192.31:25616] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 13:56:50.509117 2026] [proxy_fcgi:error] [pid 39185:tid 39265] [client 4.204.192.31:25616] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 13:56:50.719160 2026] [proxy_fcgi:error] [pid 39185:tid 39266] [client 4.204.192.31:25616] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 13:56:50.938538 2026] [proxy_fcgi:error] [pid 39185:tid 39252] [client 4.204.192.31:25616] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 13:56:51.156023 2026] [proxy_fcgi:error] [pid 39185:tid 39258] [client 4.204.192.31:25616] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 13:56:51.364300 2026] [proxy_fcgi:error] [pid 39185:tid 39248] [client 4.204.192.31:25616] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 13:56:51.571978 2026] [proxy_fcgi:error] [pid 39185:tid 39251] [client 4.204.192.31:25616] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 13:56:51.789600 2026] [proxy_fcgi:error] [pid 39185:tid 39260] [client 4.204.192.31:25616] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 13:56:52.002666 2026] [:error] [pid 39185:tid 39246] [client 4.204.192.31:25616] [client 4.204.192.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/as1337.php"] [unique_id "aaKDpBVE-FfM89u7BQb3KQAAAIA"]
[Sat Feb 28 13:56:53.103835 2026] [:error] [pid 52460:tid 52468] [client 4.204.192.31:26211] [client 4.204.192.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/as1337.php"] [unique_id "aaKDpbLWOogAgHGh62RUsQAAAYU"]
[Sat Feb 28 13:56:54.501651 2026] [:error] [pid 39292:tid 39311] [client 4.204.192.31:26184] [client 4.204.192.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/as1337.php"] [unique_id "aaKDpqIAO5fN7BxyqcHjugAAANE"]
[Sat Feb 28 13:56:58.776948 2026] [:error] [pid 52460:tid 52472] [client 4.204.192.31:25620] [client 4.204.192.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/core.php"] [unique_id "aaKDqrLWOogAgHGh62RUwwAAAYk"]
[Sat Feb 28 13:56:59.927290 2026] [:error] [pid 52460:tid 52484] [client 4.204.192.31:26177] [client 4.204.192.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/core.php"] [unique_id "aaKDq7LWOogAgHGh62RUzwAAAZU"]
[Sat Feb 28 13:57:01.200160 2026] [:error] [pid 11791:tid 11807] [client 4.204.192.31:25637] [client 4.204.192.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/core.php"] [unique_id "aaKDrWuX5e1Q32gqxH02QwAAAQ4"]
[Sat Feb 28 13:57:02.497613 2026] [:error] [pid 11791:tid 11799] [client 4.204.192.31:26208] [client 4.204.192.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/core.php"] [unique_id "aaKDrmuX5e1Q32gqxH02RgAAAQY"]
[Sat Feb 28 13:57:03.386725 2026] [:error] [pid 52460:tid 52476] [client 4.204.192.31:25636] [client 4.204.192.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zeal.php"] [unique_id "aaKDr7LWOogAgHGh62RU5AAAAY0"]
[Sat Feb 28 13:57:04.604464 2026] [:error] [pid 39185:tid 39262] [client 4.204.192.31:25643] [client 4.204.192.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/asf.php"] [unique_id "aaKDsBVE-FfM89u7BQb3ZwAAAJA"]
[Sat Feb 28 13:57:06.687171 2026] [:error] [pid 11791:tid 11799] [client 4.204.192.31:26202] [client 4.204.192.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/asf.php"] [unique_id "aaKDsmuX5e1Q32gqxH02VAAAAQY"]
[Sat Feb 28 13:57:09.422364 2026] [:error] [pid 39185:tid 39270] [client 4.204.192.31:26197] [client 4.204.192.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sa.php"] [unique_id "aaKDtRVE-FfM89u7BQb3fgAAAJg"]
[Sat Feb 28 14:21:14.218717 2026] [:error] [pid 39185:tid 39255] [client 91.224.92.164:47415] [client 91.224.92.164] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env"] [unique_id "aaKJWhVE-FfM89u7BQYROQAAAIk"]
[Sat Feb 28 14:21:15.525216 2026] [:error] [pid 39292:tid 39300] [client 91.224.92.164:20743] [client 91.224.92.164] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env"] [unique_id "aaKJW6IAO5fN7BxyqcHr6AAAAMY"]
[Sat Feb 28 16:21:04.447907 2026] [:error] [pid 52460:tid 52472] [client 165.227.53.4:59089] [client 165.227.53.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/config/services.yml" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/src/Resources/config/services.yml"] [unique_id "aaKlcLLWOogAgHGh62Sm_gAAAYk"]
[Sat Feb 28 16:21:45.684256 2026] [:error] [pid 39183:tid 39212] [client 165.227.53.4:59749] [client 165.227.53.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/config/parameters.yml" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/config/parameters.yml"] [unique_id "aaKlmRCf4HvhVePw3LYbegAAABQ"]
[Sat Feb 28 16:21:50.506375 2026] [proxy_fcgi:error] [pid 11791:tid 11797] [client 165.227.53.4:60739] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 16:21:55.501411 2026] [:error] [pid 11791:tid 11801] [client 165.227.53.4:60739] [client 165.227.53.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/web/debug/default/view"] [unique_id "aaKlo2uX5e1Q32gqxH1yjAAAAQg"]
[Sat Feb 28 16:21:59.300585 2026] [:error] [pid 39183:tid 39206] [client 165.227.53.4:61379] [client 165.227.53.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/web/debug/default/view"] [unique_id "aaKlpxCf4HvhVePw3LYbsAAAAA4"]
[Sat Feb 28 16:50:51.352332 2026] [:error] [pid 39292:tid 39303] [client 20.151.11.236:41865] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaKsa6IAO5fN7BxyqcEdaAAAAMk"]
[Sat Feb 28 16:50:51.825534 2026] [:error] [pid 39183:tid 39200] [client 20.151.11.236:41872] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaKsaxCf4HvhVePw3LYm4QAAAAg"]
[Sat Feb 28 16:50:52.293658 2026] [:error] [pid 39183:tid 39192] [client 20.151.11.236:41939] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaKsbBCf4HvhVePw3LYm4wAAAAA"]
[Sat Feb 28 16:50:52.826173 2026] [:error] [pid 49763:tid 49790] [client 20.151.11.236:41973] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaKsbLTHSOG_yf2PpqH5ewAAAdg"]
[Sat Feb 28 16:55:39.298359 2026] [proxy_fcgi:error] [pid 11791:tid 11811] [client 20.151.113.230:27602] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 16:55:39.508482 2026] [proxy_fcgi:error] [pid 11791:tid 11795] [client 20.151.113.230:27602] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 16:55:39.719919 2026] [proxy_fcgi:error] [pid 11791:tid 11800] [client 20.151.113.230:27602] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 16:55:39.931103 2026] [proxy_fcgi:error] [pid 11791:tid 11793] [client 20.151.113.230:27602] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 16:55:40.140875 2026] [proxy_fcgi:error] [pid 11791:tid 11814] [client 20.151.113.230:27602] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 16:55:40.351646 2026] [proxy_fcgi:error] [pid 11791:tid 11817] [client 20.151.113.230:27602] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 16:55:40.561594 2026] [proxy_fcgi:error] [pid 11791:tid 11809] [client 20.151.113.230:27602] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 16:55:40.770179 2026] [proxy_fcgi:error] [pid 11791:tid 11806] [client 20.151.113.230:27602] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 16:55:40.978816 2026] [proxy_fcgi:error] [pid 11791:tid 11805] [client 20.151.113.230:27602] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 16:55:41.191688 2026] [proxy_fcgi:error] [pid 11791:tid 11797] [client 20.151.113.230:27602] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 16:55:41.396818 2026] [:error] [pid 11791:tid 11799] [client 20.151.113.230:27602] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/we.php"] [unique_id "aaKtjWuX5e1Q32gqxH16DgAAAQY"]
[Sat Feb 28 16:55:41.811366 2026] [:error] [pid 49763:tid 49782] [client 20.151.113.230:27600] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/we.php"] [unique_id "aaKtjbTHSOG_yf2PpqH8MAAAAdA"]
[Sat Feb 28 16:55:42.226639 2026] [:error] [pid 39184:tid 39237] [client 20.151.113.230:27637] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/we.php"] [unique_id "aaKtjltZF9Zd_U7easAvqAAAAFI"]
[Sat Feb 28 16:55:42.639286 2026] [:error] [pid 22194:tid 22208] [client 20.151.113.230:27641] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/we.php"] [unique_id "aaKtjn6mbajs3bzQGyt1ogAAAUw"]
[Sat Feb 28 16:55:43.059239 2026] [:error] [pid 49763:tid 49788] [client 20.151.113.230:27620] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jga.php"] [unique_id "aaKtj7THSOG_yf2PpqH8MgAAAdY"]
[Sat Feb 28 16:55:43.474487 2026] [:error] [pid 39183:tid 39200] [client 20.151.113.230:27540] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jga.php"] [unique_id "aaKtjxCf4HvhVePw3LYoYwAAAAg"]
[Sat Feb 28 16:55:43.885722 2026] [:error] [pid 49763:tid 49778] [client 20.151.113.230:27621] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jga.php"] [unique_id "aaKtj7THSOG_yf2PpqH8NQAAAcw"]
[Sat Feb 28 16:55:44.296798 2026] [:error] [pid 49763:tid 49783] [client 20.151.113.230:27525] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jga.php"] [unique_id "aaKtkLTHSOG_yf2PpqH8NgAAAdE"]
[Sat Feb 28 16:55:44.706794 2026] [:error] [pid 39183:tid 39201] [client 20.151.113.230:27598] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/000.php"] [unique_id "aaKtkBCf4HvhVePw3LYoZQAAAAk"]
[Sat Feb 28 16:55:45.125940 2026] [:error] [pid 39184:tid 39235] [client 20.151.113.230:27570] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/000.php"] [unique_id "aaKtkVtZF9Zd_U7easAvqwAAAFA"]
[Sat Feb 28 16:55:45.540785 2026] [:error] [pid 39183:tid 39192] [client 20.151.113.230:27539] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/000.php"] [unique_id "aaKtkRCf4HvhVePw3LYoZwAAAAA"]
[Sat Feb 28 16:55:45.949617 2026] [:error] [pid 39183:tid 39207] [client 20.151.113.230:27643] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/000.php"] [unique_id "aaKtkRCf4HvhVePw3LYoaQAAAA8"]
[Sat Feb 28 16:55:46.358756 2026] [:error] [pid 49763:tid 49767] [client 20.151.113.230:27537] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-mails.php"] [unique_id "aaKtkrTHSOG_yf2PpqH8OgAAAcE"]
[Sat Feb 28 16:55:46.774877 2026] [:error] [pid 49763:tid 49782] [client 20.151.113.230:27601] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-mails.php"] [unique_id "aaKtkrTHSOG_yf2PpqH8PQAAAdA"]
[Sat Feb 28 16:55:47.194469 2026] [:error] [pid 39183:tid 39204] [client 20.151.113.230:27592] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-mails.php"] [unique_id "aaKtkxCf4HvhVePw3LYobAAAAAw"]
[Sat Feb 28 16:55:47.606761 2026] [:error] [pid 52460:tid 52484] [client 20.151.113.230:27556] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-mails.php"] [unique_id "aaKtk7LWOogAgHGh62SuGwAAAZU"]
[Sat Feb 28 16:55:48.031119 2026] [:error] [pid 39292:tid 39298] [client 20.151.113.230:27630] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xex.php"] [unique_id "aaKtlKIAO5fN7BxyqcEeSwAAAMQ"]
[Sat Feb 28 16:55:48.440658 2026] [:error] [pid 39183:tid 39213] [client 20.151.113.230:27521] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xex.php"] [unique_id "aaKtlBCf4HvhVePw3LYobwAAABU"]
[Sat Feb 28 16:55:48.852234 2026] [:error] [pid 39183:tid 39208] [client 20.151.113.230:27590] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xex.php"] [unique_id "aaKtlBCf4HvhVePw3LYocAAAABA"]
[Sat Feb 28 16:55:49.274665 2026] [:error] [pid 39185:tid 39263] [client 20.151.113.230:27596] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xex.php"] [unique_id "aaKtlRVE-FfM89u7BQZpaAAAAJE"]
[Sat Feb 28 16:55:49.684530 2026] [:error] [pid 49763:tid 49766] [client 20.151.113.230:27520] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/n3.php"] [unique_id "aaKtlbTHSOG_yf2PpqH8QAAAAcA"]
[Sat Feb 28 16:55:50.110723 2026] [:error] [pid 49763:tid 49786] [client 20.151.113.230:27528] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/n3.php"] [unique_id "aaKtlrTHSOG_yf2PpqH8QgAAAdQ"]
[Sat Feb 28 16:55:50.527492 2026] [:error] [pid 39183:tid 39192] [client 20.151.113.230:27647] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/n3.php"] [unique_id "aaKtlhCf4HvhVePw3LYocwAAAAA"]
[Sat Feb 28 16:55:50.942730 2026] [:error] [pid 39183:tid 39193] [client 20.151.113.230:27534] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/n3.php"] [unique_id "aaKtlhCf4HvhVePw3LYodgAAAAE"]
[Sat Feb 28 16:55:51.360911 2026] [:error] [pid 39292:tid 39295] [client 20.151.113.230:27541] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/key.php"] [unique_id "aaKtl6IAO5fN7BxyqcEeTgAAAME"]
[Sat Feb 28 16:55:51.774659 2026] [:error] [pid 39292:tid 39297] [client 20.151.113.230:27625] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/key.php"] [unique_id "aaKtl6IAO5fN7BxyqcEeTwAAAMM"]
[Sat Feb 28 16:55:52.183856 2026] [:error] [pid 39292:tid 39308] [client 20.151.113.230:27586] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/key.php"] [unique_id "aaKtmKIAO5fN7BxyqcEeUQAAAM4"]
[Sat Feb 28 16:55:52.594131 2026] [:error] [pid 11791:tid 11796] [client 20.151.113.230:27636] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/key.php"] [unique_id "aaKtmGuX5e1Q32gqxH16EwAAAQM"]
[Sat Feb 28 16:55:53.009103 2026] [:error] [pid 49763:tid 49768] [client 20.151.113.230:27569] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/667.php"] [unique_id "aaKtmbTHSOG_yf2PpqH8RQAAAcI"]
[Sat Feb 28 16:55:53.434440 2026] [:error] [pid 49763:tid 49790] [client 20.151.113.230:27627] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ctfbe.php"] [unique_id "aaKtmbTHSOG_yf2PpqH8RgAAAdg"]
[Sat Feb 28 16:55:53.844172 2026] [:error] [pid 49763:tid 49769] [client 20.151.113.230:27633] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ctfbe.php"] [unique_id "aaKtmbTHSOG_yf2PpqH8RwAAAcM"]
[Sat Feb 28 16:55:54.259308 2026] [:error] [pid 49763:tid 49789] [client 20.151.113.230:27531] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ctfbe.php"] [unique_id "aaKtmrTHSOG_yf2PpqH8SQAAAdc"]
[Sat Feb 28 16:55:54.670602 2026] [:error] [pid 22194:tid 22207] [client 20.151.113.230:27619] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ctfbe.php"] [unique_id "aaKtmn6mbajs3bzQGyt1pgAAAUs"]
[Sat Feb 28 16:55:55.085282 2026] [:error] [pid 49763:tid 49770] [client 20.151.113.230:27608] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hkweu.php"] [unique_id "aaKtm7THSOG_yf2PpqH8SwAAAcQ"]
[Sat Feb 28 16:55:55.506788 2026] [:error] [pid 49763:tid 49784] [client 20.151.113.230:27524] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hkweu.php"] [unique_id "aaKtm7THSOG_yf2PpqH8TgAAAdI"]
[Sat Feb 28 16:55:55.929108 2026] [:error] [pid 49763:tid 49772] [client 20.151.113.230:27471] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hkweu.php"] [unique_id "aaKtm7THSOG_yf2PpqH8UAAAAcY"]
[Sat Feb 28 16:55:56.346120 2026] [:error] [pid 39292:tid 39318] [client 20.151.113.230:27622] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hkweu.php"] [unique_id "aaKtnKIAO5fN7BxyqcEeVAAAANg"]
[Sat Feb 28 16:55:56.758664 2026] [:error] [pid 39183:tid 39214] [client 20.151.113.230:27543] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/qdlte.php"] [unique_id "aaKtnBCf4HvhVePw3LYofQAAABY"]
[Sat Feb 28 16:55:57.167200 2026] [:error] [pid 39292:tid 39300] [client 20.151.113.230:27491] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/qdlte.php"] [unique_id "aaKtnaIAO5fN7BxyqcEeVgAAAMY"]
[Sat Feb 28 16:55:57.583634 2026] [:error] [pid 39292:tid 39307] [client 20.151.113.230:27545] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/qdlte.php"] [unique_id "aaKtnaIAO5fN7BxyqcEeVwAAAM0"]
[Sat Feb 28 16:55:58.006654 2026] [:error] [pid 49763:tid 49766] [client 20.151.113.230:27613] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/qdlte.php"] [unique_id "aaKtnrTHSOG_yf2PpqH8UgAAAcA"]
[Sat Feb 28 16:55:58.420438 2026] [:error] [pid 39292:tid 39310] [client 20.151.113.230:27599] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f7.php"] [unique_id "aaKtnqIAO5fN7BxyqcEeWgAAANA"]
[Sat Feb 28 16:55:58.831240 2026] [:error] [pid 39184:tid 39237] [client 20.151.113.230:27536] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f7.php"] [unique_id "aaKtnltZF9Zd_U7easAvtwAAAFI"]
[Sat Feb 28 16:55:59.245014 2026] [:error] [pid 39292:tid 39316] [client 20.151.113.230:27645] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f7.php"] [unique_id "aaKtn6IAO5fN7BxyqcEeXwAAANY"]
[Sat Feb 28 16:55:59.657789 2026] [:error] [pid 39185:tid 39257] [client 20.151.113.230:27598] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f7.php"] [unique_id "aaKtnxVE-FfM89u7BQZpbQAAAIs"]
[Sat Feb 28 16:56:00.073525 2026] [:error] [pid 22194:tid 22196] [client 20.151.113.230:27467] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/an7.php"] [unique_id "aaKtoH6mbajs3bzQGyt1pwAAAUA"]
[Sat Feb 28 16:56:00.486424 2026] [:error] [pid 39185:tid 39255] [client 20.151.113.230:27638] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/an7.php"] [unique_id "aaKtoBVE-FfM89u7BQZpbwAAAIk"]
[Sat Feb 28 16:56:00.900079 2026] [:error] [pid 39183:tid 39204] [client 20.151.113.230:27616] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/an7.php"] [unique_id "aaKtoBCf4HvhVePw3LYohQAAAAw"]
[Sat Feb 28 16:56:01.313668 2026] [:error] [pid 39185:tid 39259] [client 20.151.113.230:27626] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/an7.php"] [unique_id "aaKtoRVE-FfM89u7BQZpdAAAAI0"]
[Sat Feb 28 16:56:01.725898 2026] [:error] [pid 49763:tid 49776] [client 20.151.113.230:27549] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/byp7.php"] [unique_id "aaKtobTHSOG_yf2PpqH8VwAAAco"]
[Sat Feb 28 16:56:02.138471 2026] [:error] [pid 52460:tid 52469] [client 20.151.113.230:27615] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/byp7.php"] [unique_id "aaKtorLWOogAgHGh62SuKwAAAYY"]
[Sat Feb 28 16:56:02.553048 2026] [:error] [pid 52460:tid 52485] [client 20.151.113.230:27568] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/byp7.php"] [unique_id "aaKtorLWOogAgHGh62SuLQAAAZY"]
[Sat Feb 28 16:56:02.971674 2026] [:error] [pid 39184:tid 39227] [client 20.151.113.230:27587] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/byp7.php"] [unique_id "aaKtoltZF9Zd_U7easAvxwAAAEg"]
[Sat Feb 28 16:56:03.383746 2026] [:error] [pid 39183:tid 39213] [client 20.151.113.230:27618] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/C1.php"] [unique_id "aaKtoxCf4HvhVePw3LYoiAAAABU"]
[Sat Feb 28 16:56:03.812285 2026] [:error] [pid 39184:tid 39223] [client 20.151.113.230:27496] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/C1.php"] [unique_id "aaKto1tZF9Zd_U7easAvzwAAAEQ"]
[Sat Feb 28 16:56:04.227603 2026] [:error] [pid 39292:tid 39297] [client 20.151.113.230:27538] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/C1.php"] [unique_id "aaKtpKIAO5fN7BxyqcEeYwAAAMM"]
[Sat Feb 28 16:56:04.640608 2026] [:error] [pid 39184:tid 39238] [client 20.151.113.230:27546] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/C1.php"] [unique_id "aaKtpFtZF9Zd_U7easAv2AAAAFM"]
[Sat Feb 28 16:56:05.066723 2026] [:error] [pid 49763:tid 49781] [client 20.151.113.230:27489] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/clcdu.php"] [unique_id "aaKtpbTHSOG_yf2PpqH8XgAAAc8"]
[Sat Feb 28 16:56:05.482444 2026] [:error] [pid 39184:tid 39232] [client 20.151.113.230:27605] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/clcdu.php"] [unique_id "aaKtpVtZF9Zd_U7easAv3gAAAE0"]
[Sat Feb 28 16:56:05.893904 2026] [:error] [pid 39183:tid 39197] [client 20.151.113.230:27624] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/clcdu.php"] [unique_id "aaKtpRCf4HvhVePw3LYoiQAAAAU"]
[Sat Feb 28 16:56:06.306439 2026] [:error] [pid 39184:tid 39223] [client 20.151.113.230:27595] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/clcdu.php"] [unique_id "aaKtpltZF9Zd_U7easAv5QAAAEQ"]
[Sat Feb 28 16:56:06.721650 2026] [:error] [pid 39184:tid 39236] [client 20.151.113.230:27629] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ffbsq.php"] [unique_id "aaKtpltZF9Zd_U7easAv6QAAAFE"]
[Sat Feb 28 16:56:07.139290 2026] [:error] [pid 39183:tid 39206] [client 20.151.113.230:27476] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ffbsq.php"] [unique_id "aaKtpxCf4HvhVePw3LYojAAAAA4"]
[Sat Feb 28 16:56:07.553697 2026] [:error] [pid 39184:tid 39239] [client 20.151.113.230:27551] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ffbsq.php"] [unique_id "aaKtp1tZF9Zd_U7easAv8AAAAFQ"]
[Sat Feb 28 16:56:07.983080 2026] [:error] [pid 49763:tid 49785] [client 20.151.113.230:27614] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ffbsq.php"] [unique_id "aaKtp7THSOG_yf2PpqH8bAAAAdM"]
[Sat Feb 28 16:56:08.395950 2026] [:error] [pid 49763:tid 49790] [client 20.151.113.230:27593] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/resp.php"] [unique_id "aaKtqLTHSOG_yf2PpqH8cQAAAdg"]
[Sat Feb 28 16:56:08.811581 2026] [:error] [pid 49763:tid 49775] [client 20.151.113.230:27463] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/resp.php"] [unique_id "aaKtqLTHSOG_yf2PpqH8cwAAAck"]
[Sat Feb 28 16:56:09.222843 2026] [:error] [pid 39183:tid 39212] [client 20.151.113.230:27532] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/resp.php"] [unique_id "aaKtqRCf4HvhVePw3LYokgAAABQ"]
[Sat Feb 28 16:56:09.642496 2026] [:error] [pid 39185:tid 39268] [client 20.151.113.230:27522] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/resp.php"] [unique_id "aaKtqRVE-FfM89u7BQZpeAAAAJY"]
[Sat Feb 28 16:56:10.102773 2026] [:error] [pid 22194:tid 22203] [client 20.151.113.230:27532] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/8.php"] [unique_id "aaKtqn6mbajs3bzQGyt1qAAAAUc"]
[Sat Feb 28 16:56:10.580693 2026] [:error] [pid 22194:tid 22209] [client 20.151.113.230:27573] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/8.php"] [unique_id "aaKtqn6mbajs3bzQGyt1qgAAAU0"]
[Sat Feb 28 16:56:11.019665 2026] [:error] [pid 22194:tid 22217] [client 20.151.113.230:27571] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/8.php"] [unique_id "aaKtq36mbajs3bzQGyt1rgAAAVU"]
[Sat Feb 28 16:56:11.470069 2026] [:error] [pid 22194:tid 22214] [client 20.151.113.230:27562] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/8.php"] [unique_id "aaKtq36mbajs3bzQGyt1sAAAAVI"]
[Sat Feb 28 16:56:11.902618 2026] [:error] [pid 22194:tid 22199] [client 20.151.113.230:27547] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/abcd.php"] [unique_id "aaKtq36mbajs3bzQGyt1tQAAAUM"]
[Sat Feb 28 16:56:12.317994 2026] [:error] [pid 39292:tid 39314] [client 20.151.113.230:27591] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/abcd.php"] [unique_id "aaKtrKIAO5fN7BxyqcEeagAAANQ"]
[Sat Feb 28 16:56:12.728475 2026] [:error] [pid 49763:tid 49783] [client 20.151.113.230:27409] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/abcd.php"] [unique_id "aaKtrLTHSOG_yf2PpqH8eAAAAdE"]
[Sat Feb 28 16:56:13.145019 2026] [:error] [pid 11791:tid 11816] [client 20.151.113.230:27533] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/abcd.php"] [unique_id "aaKtrWuX5e1Q32gqxH16IQAAARc"]
[Sat Feb 28 16:56:13.565301 2026] [:error] [pid 39292:tid 39309] [client 20.151.113.230:27577] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kma.php"] [unique_id "aaKtraIAO5fN7BxyqcEecQAAAM8"]
[Sat Feb 28 16:56:13.982917 2026] [:error] [pid 39184:tid 39225] [client 20.151.113.230:27603] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kma.php"] [unique_id "aaKtrVtZF9Zd_U7easAwDgAAAEY"]
[Sat Feb 28 16:56:14.393698 2026] [:error] [pid 49763:tid 49768] [client 20.151.113.230:27542] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kma.php"] [unique_id "aaKtrrTHSOG_yf2PpqH8fAAAAcI"]
[Sat Feb 28 16:56:14.817369 2026] [:error] [pid 49763:tid 49782] [client 20.151.113.230:27610] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kma.php"] [unique_id "aaKtrrTHSOG_yf2PpqH8fwAAAdA"]
[Sat Feb 28 16:56:15.243790 2026] [:error] [pid 49763:tid 49776] [client 20.151.113.230:27642] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wpls.php"] [unique_id "aaKtr7THSOG_yf2PpqH8gwAAAco"]
[Sat Feb 28 16:56:15.700799 2026] [:error] [pid 49763:tid 49767] [client 20.151.113.230:27411] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wpls.php"] [unique_id "aaKtr7THSOG_yf2PpqH8hgAAAcE"]
[Sat Feb 28 16:56:16.132547 2026] [:error] [pid 49763:tid 49774] [client 20.151.113.230:27526] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wpls.php"] [unique_id "aaKtsLTHSOG_yf2PpqH8iAAAAcg"]
[Sat Feb 28 16:56:16.559962 2026] [:error] [pid 52460:tid 52481] [client 20.151.113.230:27584] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wpls.php"] [unique_id "aaKtsLLWOogAgHGh62SuOgAAAZI"]
[Sat Feb 28 16:56:17.013525 2026] [:error] [pid 39183:tid 39213] [client 20.151.113.230:27560] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ova-wso.php"] [unique_id "aaKtsRCf4HvhVePw3LYomQAAABU"]
[Sat Feb 28 16:56:17.488873 2026] [:error] [pid 11791:tid 11810] [client 20.151.113.230:27548] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ova-wso.php"] [unique_id "aaKtsWuX5e1Q32gqxH16IwAAARE"]
[Sat Feb 28 16:56:17.933744 2026] [:error] [pid 39183:tid 39206] [client 20.151.113.230:27462] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ova-wso.php"] [unique_id "aaKtsRCf4HvhVePw3LYooAAAAA4"]
[Sat Feb 28 16:56:18.347541 2026] [:error] [pid 39183:tid 39208] [client 20.151.113.230:27557] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ova-wso.php"] [unique_id "aaKtshCf4HvhVePw3LYopQAAABA"]
[Sat Feb 28 16:56:18.764920 2026] [:error] [pid 39184:tid 39219] [client 20.151.113.230:27632] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mjq.php"] [unique_id "aaKtsltZF9Zd_U7easAwJQAAAEA"]
[Sat Feb 28 16:56:19.203210 2026] [:error] [pid 49763:tid 49771] [client 20.151.113.230:27628] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mjq.php"] [unique_id "aaKts7THSOG_yf2PpqH8kwAAAcU"]
[Sat Feb 28 16:56:19.629168 2026] [:error] [pid 49763:tid 49783] [client 20.151.113.230:27646] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mjq.php"] [unique_id "aaKts7THSOG_yf2PpqH8lgAAAdE"]
[Sat Feb 28 16:56:20.046228 2026] [:error] [pid 39184:tid 39236] [client 20.151.113.230:27563] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mjq.php"] [unique_id "aaKttFtZF9Zd_U7easAwLgAAAFE"]
[Sat Feb 28 16:56:20.456373 2026] [:error] [pid 39184:tid 39238] [client 20.151.113.230:27635] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ol.php7"] [unique_id "aaKttFtZF9Zd_U7easAwMQAAAFM"]
[Sat Feb 28 16:56:20.865630 2026] [:error] [pid 39184:tid 39222] [client 20.151.113.230:27589] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ol.php7"] [unique_id "aaKttFtZF9Zd_U7easAwNQAAAEM"]
[Sat Feb 28 16:56:21.284321 2026] [:error] [pid 39183:tid 39201] [client 20.151.113.230:27475] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ol.php7"] [unique_id "aaKttRCf4HvhVePw3LYouAAAAAk"]
[Sat Feb 28 16:56:21.697992 2026] [:error] [pid 39184:tid 39241] [client 20.151.113.230:27582] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ol.php7"] [unique_id "aaKttVtZF9Zd_U7easAwOwAAAFY"]
[Sat Feb 28 16:56:22.106623 2026] [:error] [pid 39292:tid 39296] [client 20.151.113.230:27572] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sc.php"] [unique_id "aaKttqIAO5fN7BxyqcEeegAAAMI"]
[Sat Feb 28 16:56:22.541142 2026] [:error] [pid 39185:tid 39255] [client 20.151.113.230:27524] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sc.php"] [unique_id "aaKtthVE-FfM89u7BQZpgQAAAIk"]
[Sat Feb 28 16:56:22.981977 2026] [:error] [pid 39184:tid 39226] [client 20.151.113.230:27465] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sc.php"] [unique_id "aaKttltZF9Zd_U7easAwQgAAAEc"]
[Sat Feb 28 16:56:23.421784 2026] [:error] [pid 49763:tid 49788] [client 20.151.113.230:27527] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sc.php"] [unique_id "aaKtt7THSOG_yf2PpqH8mQAAAdY"]
[Sat Feb 28 16:56:23.835995 2026] [:error] [pid 39292:tid 39306] [client 20.151.113.230:27631] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sql.php7"] [unique_id "aaKtt6IAO5fN7BxyqcEefgAAAMw"]
[Sat Feb 28 16:56:24.251262 2026] [:error] [pid 22194:tid 22217] [client 20.151.113.230:27394] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sql.php7"] [unique_id "aaKtuH6mbajs3bzQGyt1vgAAAVU"]
[Sat Feb 28 16:56:24.688004 2026] [:error] [pid 49763:tid 49781] [client 20.151.113.230:27623] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sql.php7"] [unique_id "aaKtuLTHSOG_yf2PpqH8nAAAAc8"]
[Sat Feb 28 16:56:25.098433 2026] [:error] [pid 39292:tid 39305] [client 20.151.113.230:27544] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sql.php7"] [unique_id "aaKtuaIAO5fN7BxyqcEehAAAAMs"]
[Sat Feb 28 16:56:25.514139 2026] [:error] [pid 22194:tid 22219] [client 20.151.113.230:27486] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/55.php"] [unique_id "aaKtuX6mbajs3bzQGyt1xAAAAVc"]
[Sat Feb 28 16:56:25.934073 2026] [:error] [pid 22194:tid 22198] [client 20.151.113.230:27493] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/55.php"] [unique_id "aaKtuX6mbajs3bzQGyt1yQAAAUI"]
[Sat Feb 28 16:56:26.357485 2026] [:error] [pid 52460:tid 52480] [client 20.151.113.230:27552] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/55.php"] [unique_id "aaKturLWOogAgHGh62SuQwAAAZE"]
[Sat Feb 28 16:56:26.789471 2026] [:error] [pid 52460:tid 52483] [client 20.151.113.230:27553] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/55.php"] [unique_id "aaKturLWOogAgHGh62SuRgAAAZQ"]
[Sat Feb 28 16:56:27.199249 2026] [:error] [pid 49763:tid 49786] [client 20.151.113.230:27604] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zc.php"] [unique_id "aaKtu7THSOG_yf2PpqH8oAAAAdQ"]
[Sat Feb 28 16:56:27.616388 2026] [:error] [pid 49763:tid 49775] [client 20.151.113.230:27480] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zc.php"] [unique_id "aaKtu7THSOG_yf2PpqH8ogAAAck"]
[Sat Feb 28 16:56:28.045780 2026] [:error] [pid 49763:tid 49776] [client 20.151.113.230:27550] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zc.php"] [unique_id "aaKtvLTHSOG_yf2PpqH8pQAAAco"]
[Sat Feb 28 16:56:28.482076 2026] [:error] [pid 49763:tid 49772] [client 20.151.113.230:27469] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zc.php"] [unique_id "aaKtvLTHSOG_yf2PpqH8pwAAAcY"]
[Sat Feb 28 16:56:28.899262 2026] [:error] [pid 22194:tid 22217] [client 20.151.113.230:27640] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/re.php"] [unique_id "aaKtvH6mbajs3bzQGyt11QAAAVU"]
[Sat Feb 28 16:56:29.325833 2026] [:error] [pid 49763:tid 49774] [client 20.151.113.230:27530] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/re.php"] [unique_id "aaKtvbTHSOG_yf2PpqH8qgAAAcg"]
[Sat Feb 28 16:56:29.758976 2026] [:error] [pid 52460:tid 52468] [client 20.151.113.230:27477] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/re.php"] [unique_id "aaKtvbLWOogAgHGh62SuSwAAAYU"]
[Sat Feb 28 16:56:30.177444 2026] [:error] [pid 49763:tid 49770] [client 20.151.113.230:27501] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/re.php"] [unique_id "aaKtvrTHSOG_yf2PpqH8rwAAAcQ"]
[Sat Feb 28 17:00:04.637094 2026] [:error] [pid 11791:tid 11805] [client 45.153.34.31:55950] [client 45.153.34.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.git/config"] [unique_id "aaKulGuX5e1Q32gqxH16-gAAAQw"]
[Sat Feb 28 17:48:34.952202 2026] [proxy_fcgi:error] [pid 52460:tid 52486] [client 40.85.218.222:4304] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 17:48:35.166745 2026] [proxy_fcgi:error] [pid 52460:tid 52485] [client 40.85.218.222:4304] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 17:48:35.673941 2026] [proxy_fcgi:error] [pid 52460:tid 52465] [client 40.85.218.222:4304] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 17:48:35.905541 2026] [proxy_fcgi:error] [pid 52460:tid 52479] [client 40.85.218.222:4304] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 17:48:36.347451 2026] [proxy_fcgi:error] [pid 52460:tid 52472] [client 40.85.218.222:4304] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 17:48:36.566046 2026] [proxy_fcgi:error] [pid 52460:tid 52463] [client 40.85.218.222:4304] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 17:48:36.783751 2026] [proxy_fcgi:error] [pid 52460:tid 52464] [client 40.85.218.222:4304] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 17:48:37.208404 2026] [:error] [pid 52460:tid 52485] [client 40.85.218.222:4304] [client 40.85.218.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaK59bLWOogAgHGh62TDKgAAAZY"]
[Sat Feb 28 17:48:38.455465 2026] [:error] [pid 49763:tid 49766] [client 40.85.218.222:48148] [client 40.85.218.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaK59rTHSOG_yf2PpqEuQAAAAcA"]
[Sat Feb 28 17:48:39.967227 2026] [:error] [pid 39184:tid 39238] [client 40.85.218.222:45658] [client 40.85.218.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaK591tZF9Zd_U7easBQHQAAAFM"]
[Sat Feb 28 17:48:40.943702 2026] [:error] [pid 49763:tid 49775] [client 40.85.218.222:45681] [client 40.85.218.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaK5-LTHSOG_yf2PpqEuUAAAAck"]
[Sat Feb 28 18:41:16.061066 2026] [:error] [pid 52460:tid 52468] [client 20.223.198.174:7040] [client 20.223.198.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/cah.php"] [unique_id "aaLGTLLWOogAgHGh62QHxgAAAYU"]
[Sat Feb 28 18:41:18.082138 2026] [proxy_fcgi:error] [pid 22194:tid 22202] [client 20.223.198.174:11265] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 18:41:18.590239 2026] [proxy_fcgi:error] [pid 22194:tid 22217] [client 20.223.198.174:11265] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 18:41:18.843628 2026] [proxy_fcgi:error] [pid 22194:tid 22211] [client 20.223.198.174:11265] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 18:41:19.097496 2026] [proxy_fcgi:error] [pid 22194:tid 22216] [client 20.223.198.174:11265] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 18:41:19.352274 2026] [proxy_fcgi:error] [pid 22194:tid 22206] [client 20.223.198.174:11265] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 18:41:19.606744 2026] [proxy_fcgi:error] [pid 22194:tid 22199] [client 20.223.198.174:11265] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 18:41:19.861548 2026] [proxy_fcgi:error] [pid 22194:tid 22220] [client 20.223.198.174:11265] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 18:41:20.115949 2026] [proxy_fcgi:error] [pid 22194:tid 22214] [client 20.223.198.174:11265] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 18:41:20.370133 2026] [proxy_fcgi:error] [pid 22194:tid 22203] [client 20.223.198.174:11265] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 18:41:20.629807 2026] [:error] [pid 22194:tid 22201] [client 20.223.198.174:11265] [client 20.223.198.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/as1337.php"] [unique_id "aaLGUH6mbajs3bzQGyuGvQAAAUU"]
[Sat Feb 28 18:41:21.130127 2026] [:error] [pid 49763:tid 49790] [client 20.223.198.174:3062] [client 20.223.198.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/as1337.php"] [unique_id "aaLGUbTHSOG_yf2PpqFwogAAAdg"]
[Sat Feb 28 18:41:21.628764 2026] [:error] [pid 39183:tid 39200] [client 20.223.198.174:3929] [client 20.223.198.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/as1337.php"] [unique_id "aaLGURCf4HvhVePw3LaQmwAAAAg"]
[Sat Feb 28 18:41:22.126996 2026] [:error] [pid 39185:tid 39246] [client 20.223.198.174:1784] [client 20.223.198.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/as1337.php"] [unique_id "aaLGUhVE-FfM89u7BQZ_4gAAAIA"]
[Sat Feb 28 18:41:22.624083 2026] [:error] [pid 11791:tid 11807] [client 20.223.198.174:9125] [client 20.223.198.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Okxob.php"] [unique_id "aaLGUmuX5e1Q32gqxH2ZrQAAAQ4"]
[Sat Feb 28 18:41:23.121472 2026] [:error] [pid 22194:tid 22209] [client 20.223.198.174:11646] [client 20.223.198.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Okxob.php"] [unique_id "aaLGU36mbajs3bzQGyuGvgAAAU0"]
[Sat Feb 28 18:41:23.619868 2026] [:error] [pid 39183:tid 39200] [client 20.223.198.174:3960] [client 20.223.198.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Okxob.php"] [unique_id "aaLGUxCf4HvhVePw3LaQrQAAAAg"]
[Sat Feb 28 18:41:24.118026 2026] [:error] [pid 39184:tid 39234] [client 20.223.198.174:11586] [client 20.223.198.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wolf-shell.php"] [unique_id "aaLGVFtZF9Zd_U7easBsBgAAAE8"]
[Sat Feb 28 18:41:24.615057 2026] [:error] [pid 49763:tid 49781] [client 20.223.198.174:9122] [client 20.223.198.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wolf-shell.php"] [unique_id "aaLGVLTHSOG_yf2PpqFwvgAAAc8"]
[Sat Feb 28 18:41:25.116300 2026] [:error] [pid 52460:tid 52471] [client 20.223.198.174:10180] [client 20.223.198.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wolf-shell.php"] [unique_id "aaLGVbLWOogAgHGh62QH4gAAAYg"]
[Sat Feb 28 18:41:25.613989 2026] [:error] [pid 52460:tid 52485] [client 20.223.198.174:6624] [client 20.223.198.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wolf-shell.php"] [unique_id "aaLGVbLWOogAgHGh62QH6AAAAZY"]
[Sat Feb 28 18:41:26.112880 2026] [:error] [pid 52460:tid 52470] [client 20.223.198.174:9776] [client 20.223.198.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/core.php"] [unique_id "aaLGVrLWOogAgHGh62QH7AAAAYc"]
[Sat Feb 28 18:41:26.612096 2026] [:error] [pid 39184:tid 39227] [client 20.223.198.174:3113] [client 20.223.198.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/core.php"] [unique_id "aaLGVltZF9Zd_U7easBsDAAAAEg"]
[Sat Feb 28 18:41:27.110656 2026] [:error] [pid 49763:tid 49777] [client 20.223.198.174:9787] [client 20.223.198.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/core.php"] [unique_id "aaLGV7THSOG_yf2PpqFwzwAAAcs"]
[Sat Feb 28 18:41:27.615244 2026] [:error] [pid 11791:tid 11805] [client 20.223.198.174:12719] [client 20.223.198.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/core.php"] [unique_id "aaLGV2uX5e1Q32gqxH2ZtQAAAQw"]
[Sat Feb 28 18:41:28.113077 2026] [:error] [pid 49763:tid 49781] [client 20.223.198.174:15390] [client 20.223.198.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zeal.php"] [unique_id "aaLGWLTHSOG_yf2PpqFw2gAAAc8"]
[Sat Feb 28 18:41:28.611684 2026] [:error] [pid 49763:tid 49766] [client 20.223.198.174:6597] [client 20.223.198.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zeal.php"] [unique_id "aaLGWLTHSOG_yf2PpqFw5AAAAcA"]
[Sat Feb 28 18:41:29.111157 2026] [:error] [pid 39183:tid 39210] [client 20.223.198.174:9115] [client 20.223.198.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zeal.php"] [unique_id "aaLGWRCf4HvhVePw3LaQwAAAABI"]
[Sat Feb 28 18:41:29.617093 2026] [:error] [pid 49763:tid 49788] [client 20.223.198.174:3059] [client 20.223.198.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zeal.php"] [unique_id "aaLGWbTHSOG_yf2PpqFw8QAAAdY"]
[Sat Feb 28 18:41:30.115235 2026] [:error] [pid 49763:tid 49773] [client 20.223.198.174:7504] [client 20.223.198.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/asf.php"] [unique_id "aaLGWrTHSOG_yf2PpqFw-wAAAcc"]
[Sat Feb 28 18:41:30.613264 2026] [:error] [pid 49763:tid 49778] [client 20.223.198.174:15398] [client 20.223.198.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/asf.php"] [unique_id "aaLGWrTHSOG_yf2PpqFxBgAAAcw"]
[Sat Feb 28 18:41:31.111469 2026] [:error] [pid 39183:tid 39203] [client 20.223.198.174:8578] [client 20.223.198.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/asf.php"] [unique_id "aaLGWxCf4HvhVePw3LaQyAAAAAs"]
[Sat Feb 28 18:41:31.609219 2026] [:error] [pid 52460:tid 52477] [client 20.223.198.174:11632] [client 20.223.198.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/asf.php"] [unique_id "aaLGW7LWOogAgHGh62QH-QAAAY4"]
[Sat Feb 28 18:41:32.107181 2026] [:error] [pid 39185:tid 39261] [client 20.223.198.174:12695] [client 20.223.198.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sa.php"] [unique_id "aaLGXBVE-FfM89u7BQZ_6gAAAI8"]
[Sat Feb 28 18:41:32.609351 2026] [:error] [pid 39183:tid 39215] [client 20.223.198.174:3114] [client 20.223.198.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sa.php"] [unique_id "aaLGXBCf4HvhVePw3LaQ0wAAABc"]
[Sat Feb 28 19:41:01.836962 2026] [:error] [pid 52460:tid 52466] [client 35.184.89.2:50084] [client 35.184.89.2] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.184.89.2, incrementing ddos counter"] [hostname "dwelectservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aaLUTbLWOogAgHGh62Q62wAAAYM"]
[Sat Feb 28 19:41:01.847793 2026] [proxy_fcgi:error] [pid 52460:tid 52466] [client 35.184.89.2:50084] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 19:41:05.840882 2026] [:error] [pid 52460:tid 52476] [client 35.184.89.2:50084] [client 35.184.89.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aaLUUbLWOogAgHGh62Q66AAAAY0"]
[Sat Feb 28 19:41:06.279526 2026] [:error] [pid 52460:tid 52485] [client 35.184.89.2:59218] [client 35.184.89.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aaLUUrLWOogAgHGh62Q66gAAAZY"]
[Sat Feb 28 19:41:06.728829 2026] [:error] [pid 39183:tid 39208] [client 35.184.89.2:61098] [client 35.184.89.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aaLUUhCf4HvhVePw3LbayAAAABA"]
[Sat Feb 28 19:41:07.150519 2026] [:error] [pid 39184:tid 39223] [client 35.184.89.2:55707] [client 35.184.89.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aaLUU1tZF9Zd_U7easCNqgAAAEQ"]
[Sat Feb 28 19:41:07.561004 2026] [:error] [pid 49763:tid 49783] [client 35.184.89.2:61775] [client 35.184.89.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aaLUU7THSOG_yf2PpqHYqAAAAdE"]
[Sat Feb 28 19:41:07.974357 2026] [:error] [pid 11791:tid 11805] [client 35.184.89.2:50506] [client 35.184.89.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aaLUU2uX5e1Q32gqxH2q-gAAAQw"]
[Sat Feb 28 19:41:08.375923 2026] [:error] [pid 39292:tid 39300] [client 35.184.89.2:59930] [client 35.184.89.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aaLUVKIAO5fN7BxyqcFbagAAAMY"]
[Sat Feb 28 20:54:17.355755 2026] [proxy_fcgi:error] [pid 39185:tid 39268] [client 20.151.205.221:26844] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 20:54:17.568258 2026] [proxy_fcgi:error] [pid 39185:tid 39263] [client 20.151.205.221:26844] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 20:54:18.002446 2026] [:error] [pid 39185:tid 39250] [client 20.151.205.221:26844] [client 20.151.205.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aaLlehVE-FfM89u7BQadugAAAIQ"]
[Sat Feb 28 20:54:18.834457 2026] [:error] [pid 49763:tid 49771] [client 20.151.205.221:26880] [client 20.151.205.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/css/autoload_classmap.php"] [unique_id "aaLlerTHSOG_yf2PpqFI5wAAAcU"]
[Sat Feb 28 20:54:19.668671 2026] [:error] [pid 52460:tid 52473] [client 20.151.205.221:26839] [client 20.151.205.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/css/autoload_classmap.php"] [unique_id "aaLle7LWOogAgHGh62R2IAAAAYo"]
[Sat Feb 28 20:54:20.490813 2026] [:error] [pid 49763:tid 49783] [client 20.151.205.221:26868] [client 20.151.205.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/css/autoload_classmap.php"] [unique_id "aaLlfLTHSOG_yf2PpqFI7gAAAdE"]
[Sat Feb 28 21:04:37.935558 2026] [proxy_fcgi:error] [pid 49763:tid 49770] [client 185.82.72.104:57277] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:04:38.247963 2026] [proxy_fcgi:error] [pid 49763:tid 49783] [client 185.82.72.104:57277] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:04:38.571261 2026] [proxy_fcgi:error] [pid 49763:tid 49769] [client 185.82.72.104:57277] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:04:38.920347 2026] [proxy_fcgi:error] [pid 49763:tid 49778] [client 185.82.72.104:57277] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:04:39.262766 2026] [proxy_fcgi:error] [pid 49763:tid 49786] [client 185.82.72.104:57277] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:04:39.647053 2026] [proxy_fcgi:error] [pid 49763:tid 49769] [client 185.82.72.104:57277] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:04:39.954125 2026] [proxy_fcgi:error] [pid 49763:tid 49772] [client 185.82.72.104:57277] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:04:40.374275 2026] [proxy_fcgi:error] [pid 49763:tid 49777] [client 185.82.72.104:57277] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:04:41.007052 2026] [proxy_fcgi:error] [pid 49763:tid 49783] [client 185.82.72.104:57277] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:04:41.616177 2026] [proxy_fcgi:error] [pid 49763:tid 49790] [client 185.82.72.104:57277] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:04:42.232641 2026] [proxy_fcgi:error] [pid 49763:tid 49771] [client 185.82.72.104:57277] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:04:42.589171 2026] [proxy_fcgi:error] [pid 49763:tid 49774] [client 185.82.72.104:57277] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:04:42.937054 2026] [proxy_fcgi:error] [pid 49763:tid 49787] [client 185.82.72.104:57277] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:04:43.375822 2026] [proxy_fcgi:error] [pid 49763:tid 49772] [client 185.82.72.104:57277] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:04:43.768363 2026] [proxy_fcgi:error] [pid 49763:tid 49767] [client 185.82.72.104:57277] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:04:44.124174 2026] [proxy_fcgi:error] [pid 49763:tid 49770] [client 185.82.72.104:57277] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:04:44.539032 2026] [proxy_fcgi:error] [pid 49763:tid 49768] [client 185.82.72.104:57277] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:04:44.892981 2026] [proxy_fcgi:error] [pid 49763:tid 49783] [client 185.82.72.104:57277] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:04:49.437159 2026] [:error] [pid 49763:tid 49786] [client 185.82.72.104:57277] [client 185.82.72.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aaLn8bTHSOG_yf2PpqFWTQAAAdQ"]
[Sat Feb 28 21:04:51.102746 2026] [:error] [pid 39183:tid 39206] [client 185.82.72.107:38147] [client 185.82.72.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aaLn8xCf4HvhVePw3LY4GgAAAA4"]
[Sat Feb 28 21:04:52.773533 2026] [proxy_fcgi:error] [pid 49763:tid 49786] [client 45.86.200.224:25787] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:04:53.781305 2026] [:error] [pid 49763:tid 49779] [client 45.86.200.224:25787] [client 45.86.200.224] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dwelectservices.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aaLn9bTHSOG_yf2PpqFWgQAAAc0"]
[Sat Feb 28 21:04:55.056622 2026] [proxy_fcgi:error] [pid 52460:tid 52478] [client 45.86.200.225:52923] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:04:55.363238 2026] [:error] [pid 52460:tid 52477] [client 45.86.200.225:52923] [client 45.86.200.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aaLn97LWOogAgHGh62R8wQAAAY4"]
[Sat Feb 28 21:04:56.324755 2026] [proxy_fcgi:error] [pid 49763:tid 49785] [client 45.86.200.232:24007] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:04:57.937977 2026] [:error] [pid 49763:tid 49781] [client 45.86.200.232:24007] [client 45.86.200.232] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aaLn-bTHSOG_yf2PpqFWpgAAAc8"]
[Sat Feb 28 21:04:58.905786 2026] [:error] [pid 49763:tid 49776] [client 45.86.200.241:40989] [client 45.86.200.241] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aaLn-rTHSOG_yf2PpqFWrQAAAco"]
[Sat Feb 28 21:05:00.740565 2026] [:error] [pid 39292:tid 39310] [client 185.82.72.179:21485] [client 185.82.72.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aaLn_KIAO5fN7BxyqcF3AQAAANA"]
[Sat Feb 28 21:05:01.489307 2026] [:error] [pid 39184:tid 39220] [client 185.82.72.106:44007] [client 185.82.72.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aaLn_VtZF9Zd_U7easC7mwAAAEE"]
[Sat Feb 28 21:05:02.294794 2026] [:error] [pid 39184:tid 39228] [client 45.86.200.221:25027] [client 45.86.200.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aaLn_ltZF9Zd_U7easC7ngAAAEk"]
[Sat Feb 28 21:05:02.944946 2026] [:error] [pid 39184:tid 39229] [client 45.86.200.215:36075] [client 45.86.200.215] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aaLn_ltZF9Zd_U7easC7pgAAAEo"]
[Sat Feb 28 21:05:04.298359 2026] [:error] [pid 49763:tid 49766] [client 45.86.200.246:27913] [client 45.86.200.246] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aaLoALTHSOG_yf2PpqFWvwAAAcA"]
[Sat Feb 28 21:05:04.945977 2026] [proxy_fcgi:error] [pid 39183:tid 39193] [client 45.86.200.245:31187] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:05:05.864210 2026] [:error] [pid 39183:tid 39207] [client 45.86.200.245:31187] [client 45.86.200.245] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dwelectservices.com.au"] [uri "/filemanager.php"] [unique_id "aaLoARCf4HvhVePw3LY4PgAAAA8"]
[Sat Feb 28 21:05:07.139184 2026] [:error] [pid 39183:tid 39215] [client 45.86.200.250:43415] [client 45.86.200.250] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aaLoAxCf4HvhVePw3LY4SgAAABc"]
[Sat Feb 28 21:05:08.219842 2026] [:error] [pid 52460:tid 52478] [client 45.86.200.249:48361] [client 45.86.200.249] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aaLoBLLWOogAgHGh62R8zwAAAY8"]
[Sat Feb 28 21:05:08.858952 2026] [proxy_fcgi:error] [pid 39185:tid 39265] [client 185.82.72.107:44799] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:05:09.174676 2026] [:error] [pid 39185:tid 39264] [client 185.82.72.107:44799] [client 185.82.72.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aaLoBRVE-FfM89u7BQafNQAAAJI"]
[Sat Feb 28 21:05:09.918410 2026] [proxy_fcgi:error] [pid 52460:tid 52464] [client 185.82.72.9:47107] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:05:11.038447 2026] [proxy_fcgi:error] [pid 52460:tid 52463] [client 185.82.72.9:47107] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:05:12.181804 2026] [:error] [pid 52460:tid 52473] [client 185.82.72.9:47107] [client 185.82.72.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aaLoCLLWOogAgHGh62R87AAAAYo"]
[Sat Feb 28 21:05:12.818547 2026] [proxy_fcgi:error] [pid 39183:tid 39208] [client 45.86.200.226:20381] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:05:13.145038 2026] [:error] [pid 39183:tid 39194] [client 45.86.200.226:20381] [client 45.86.200.226] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aaLoCRCf4HvhVePw3LY4WwAAAAI"]
[Sat Feb 28 21:05:13.828458 2026] [proxy_fcgi:error] [pid 39183:tid 39212] [client 185.82.72.106:33293] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:05:14.860143 2026] [:error] [pid 39183:tid 39205] [client 185.82.72.106:33293] [client 185.82.72.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "aaLoChCf4HvhVePw3LY4ZQAAAA0"]
[Sat Feb 28 21:05:15.874503 2026] [:error] [pid 52460:tid 52483] [client 45.86.200.245:38861] [client 45.86.200.245] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aaLoC7LWOogAgHGh62R9AgAAAZQ"]
[Sat Feb 28 21:05:17.157695 2026] [proxy_fcgi:error] [pid 49763:tid 49769] [client 45.86.200.216:28437] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:05:17.524440 2026] [proxy_fcgi:error] [pid 49763:tid 49770] [client 45.86.200.216:28437] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:05:18.414230 2026] [:error] [pid 49763:tid 49788] [client 45.86.200.216:28437] [client 45.86.200.216] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aaLoDrTHSOG_yf2PpqFW3wAAAdY"]
[Sat Feb 28 21:05:19.583249 2026] [:error] [pid 39183:tid 39211] [client 185.82.72.106:41773] [client 185.82.72.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aaLoDxCf4HvhVePw3LY4cgAAABM"]
[Sat Feb 28 21:05:20.615004 2026] [:error] [pid 22194:tid 22215] [client 185.82.72.111:29849] [client 185.82.72.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aaLoEH6mbajs3bzQGyujCwAAAVM"]
[Sat Feb 28 21:05:21.372080 2026] [:error] [pid 39292:tid 39299] [client 45.86.200.231:31135] [client 45.86.200.231] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aaLoEaIAO5fN7BxyqcF3FQAAAMU"]
[Sat Feb 28 21:05:22.240932 2026] [:error] [pid 39183:tid 39208] [client 45.86.200.231:61127] [client 45.86.200.231] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aaLoEhCf4HvhVePw3LY4egAAABA"]
[Sat Feb 28 21:05:24.047322 2026] [proxy_fcgi:error] [pid 22194:tid 22210] [client 45.86.200.224:24363] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:05:24.380324 2026] [:error] [pid 22194:tid 22204] [client 45.86.200.224:24363] [client 45.86.200.224] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "aaLoFH6mbajs3bzQGyujFgAAAUg"]
[Sat Feb 28 21:05:25.054172 2026] [:error] [pid 39183:tid 39210] [client 185.82.72.104:56615] [client 185.82.72.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "aaLoFRCf4HvhVePw3LY4gwAAABI"]
[Sat Feb 28 21:05:25.703677 2026] [:error] [pid 39183:tid 39202] [client 185.82.72.107:40939] [client 185.82.72.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aaLoFRCf4HvhVePw3LY4jAAAAAo"]
[Sat Feb 28 21:05:27.240831 2026] [proxy_fcgi:error] [pid 39183:tid 39208] [client 45.86.200.225:51957] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:05:27.874789 2026] [proxy_fcgi:error] [pid 39183:tid 39211] [client 45.86.200.225:51957] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:05:29.471293 2026] [:error] [pid 39183:tid 39207] [client 45.86.200.225:51957] [client 45.86.200.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/admin.php"] [unique_id "aaLoGRCf4HvhVePw3LY4sQAAAA8"]
[Sat Feb 28 21:05:31.165505 2026] [:error] [pid 52460:tid 52467] [client 185.82.72.179:24583] [client 185.82.72.179] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.82.72.179, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aaLoG7LWOogAgHGh62R9GgAAAYQ"]
[Sat Feb 28 21:05:31.550960 2026] [proxy_fcgi:error] [pid 52460:tid 52484] [client 185.82.72.179:24583] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:05:33.154480 2026] [proxy_fcgi:error] [pid 52460:tid 52476] [client 185.82.72.179:24583] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:05:33.473516 2026] [proxy_fcgi:error] [pid 52460:tid 52487] [client 185.82.72.179:24583] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:05:35.053927 2026] [:error] [pid 52460:tid 52464] [client 185.82.72.179:24583] [client 185.82.72.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aaLoH7LWOogAgHGh62R9OgAAAYE"]
[Sat Feb 28 21:05:36.053626 2026] [proxy_fcgi:error] [pid 49763:tid 49769] [client 45.86.200.247:43457] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:05:36.359153 2026] [proxy_fcgi:error] [pid 49763:tid 49788] [client 45.86.200.247:43457] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:05:36.694316 2026] [:error] [pid 49763:tid 49779] [client 45.86.200.247:43457] [client 45.86.200.247] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.200.247, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aaLoILTHSOG_yf2PpqFXFgAAAc0"]
[Sat Feb 28 21:05:37.319192 2026] [:error] [pid 49763:tid 49780] [client 45.86.200.247:43457] [client 45.86.200.247] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/item.php"] [unique_id "aaLoIbTHSOG_yf2PpqFXHAAAAc4"]
[Sat Feb 28 21:05:38.923620 2026] [proxy_fcgi:error] [pid 52460:tid 52485] [client 45.86.200.224:38859] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:05:39.293576 2026] [proxy_fcgi:error] [pid 52460:tid 52470] [client 45.86.200.224:38859] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:05:39.935065 2026] [proxy_fcgi:error] [pid 52460:tid 52473] [client 45.86.200.224:38859] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:05:40.629092 2026] [:error] [pid 52460:tid 52465] [client 45.86.200.224:38859] [client 45.86.200.224] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aaLoJLLWOogAgHGh62R9SQAAAYI"]
[Sat Feb 28 21:05:41.344280 2026] [proxy_fcgi:error] [pid 49763:tid 49767] [client 45.86.200.222:49989] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:05:42.310678 2026] [proxy_fcgi:error] [pid 49763:tid 49784] [client 45.86.200.222:49989] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:05:43.064114 2026] [proxy_fcgi:error] [pid 49763:tid 49781] [client 45.86.200.222:49989] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:05:43.906919 2026] [proxy_fcgi:error] [pid 49763:tid 49774] [client 45.86.200.222:49989] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:05:44.227515 2026] [:error] [pid 49763:tid 49767] [client 45.86.200.222:49989] [client 45.86.200.222] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aaLoKLTHSOG_yf2PpqFXRQAAAcE"]
[Sat Feb 28 21:05:45.326894 2026] [proxy_fcgi:error] [pid 39183:tid 39192] [client 45.86.200.226:58813] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:05:45.763340 2026] [proxy_fcgi:error] [pid 39183:tid 39202] [client 45.86.200.226:58813] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:05:46.064140 2026] [:error] [pid 39183:tid 39215] [client 45.86.200.226:58813] [client 45.86.200.226] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aaLoKhCf4HvhVePw3LY42gAAABc"]
[Sat Feb 28 21:05:47.165040 2026] [proxy_fcgi:error] [pid 49763:tid 49788] [client 45.86.200.234:47651] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:05:47.897789 2026] [:error] [pid 49763:tid 49770] [client 45.86.200.234:47651] [client 45.86.200.234] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.200.234, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "aaLoK7THSOG_yf2PpqFXYwAAAcQ"]
[Sat Feb 28 21:05:48.222733 2026] [:error] [pid 49763:tid 49775] [client 45.86.200.234:47651] [client 45.86.200.234] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aaLoLLTHSOG_yf2PpqFXZwAAAck"]
[Sat Feb 28 21:05:52.476296 2026] [proxy_fcgi:error] [pid 39184:tid 39229] [client 45.86.200.244:44267] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:05:54.468974 2026] [proxy_fcgi:error] [pid 39184:tid 39227] [client 45.86.200.244:44267] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:05:54.809349 2026] [:error] [pid 39184:tid 39220] [client 45.86.200.244:44267] [client 45.86.200.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aaLoMltZF9Zd_U7easC7_wAAAEE"]
[Sat Feb 28 21:05:55.475902 2026] [proxy_fcgi:error] [pid 49763:tid 49769] [client 185.82.72.106:27287] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:05:58.177195 2026] [:error] [pid 49763:tid 49783] [client 185.82.72.106:27287] [client 185.82.72.106] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.82.72.106, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aaLoNrTHSOG_yf2PpqFXlQAAAdE"]
[Sat Feb 28 21:05:58.531628 2026] [proxy_fcgi:error] [pid 49763:tid 49789] [client 185.82.72.106:27287] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:05:58.869541 2026] [proxy_fcgi:error] [pid 49763:tid 49771] [client 185.82.72.106:27287] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:05:59.146482 2026] [proxy_fcgi:error] [pid 49763:tid 49784] [client 185.82.72.106:27287] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:05:59.530347 2026] [:error] [pid 49763:tid 49787] [client 185.82.72.106:27287] [client 185.82.72.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aaLoN7THSOG_yf2PpqFXnwAAAdU"]
[Sat Feb 28 21:06:00.393279 2026] [proxy_fcgi:error] [pid 52460:tid 52484] [client 185.82.72.182:22861] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:06:00.879036 2026] [:error] [pid 52460:tid 52472] [client 185.82.72.182:22861] [client 185.82.72.182] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/infi.php"] [unique_id "aaLoOLLWOogAgHGh62R9dAAAAYk"]
[Sat Feb 28 21:06:02.646421 2026] [proxy_fcgi:error] [pid 11791:tid 11814] [client 45.86.200.219:21327] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:06:02.939710 2026] [:error] [pid 11791:tid 11801] [client 45.86.200.219:21327] [client 45.86.200.219] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aaLoOmuX5e1Q32gqxH3CTgAAAQg"]
[Sat Feb 28 21:06:03.577830 2026] [proxy_fcgi:error] [pid 39185:tid 39260] [client 45.86.200.216:32347] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:06:04.278606 2026] [proxy_fcgi:error] [pid 39185:tid 39247] [client 45.86.200.216:32347] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:06:04.696215 2026] [:error] [pid 39185:tid 39249] [client 45.86.200.216:32347] [client 45.86.200.216] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "aaLoPBVE-FfM89u7BQafcQAAAIM"]
[Sat Feb 28 21:06:05.355973 2026] [:error] [pid 39292:tid 39309] [client 45.86.200.217:33705] [client 45.86.200.217] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "aaLoPaIAO5fN7BxyqcF3NgAAAM8"]
[Sat Feb 28 21:06:06.001837 2026] [proxy_fcgi:error] [pid 11791:tid 11795] [client 185.82.72.104:33997] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:06:06.559198 2026] [proxy_fcgi:error] [pid 11791:tid 11815] [client 185.82.72.104:33997] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:06:07.910499 2026] [:error] [pid 11791:tid 11809] [client 185.82.72.104:33997] [client 185.82.72.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aaLoP2uX5e1Q32gqxH3CXwAAARA"]
[Sat Feb 28 21:06:09.069146 2026] [:error] [pid 49763:tid 49784] [client 185.82.72.107:57661] [client 185.82.72.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "aaLoQbTHSOG_yf2PpqFXugAAAdI"]
[Sat Feb 28 21:06:10.765891 2026] [:error] [pid 49763:tid 49775] [client 45.86.200.227:54785] [client 45.86.200.227] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/edit.php"] [unique_id "aaLoQrTHSOG_yf2PpqFXxgAAAck"]
[Sat Feb 28 21:06:11.473890 2026] [proxy_fcgi:error] [pid 39292:tid 39307] [client 45.86.200.244:44411] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:06:12.190187 2026] [proxy_fcgi:error] [pid 39292:tid 39302] [client 45.86.200.244:44411] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:06:12.953590 2026] [:error] [pid 39292:tid 39299] [client 45.86.200.244:44411] [client 45.86.200.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "aaLoRKIAO5fN7BxyqcF3RgAAAMU"]
[Sat Feb 28 21:06:13.606489 2026] [proxy_fcgi:error] [pid 49763:tid 49786] [client 45.86.200.217:23067] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:06:14.418079 2026] [:error] [pid 49763:tid 49771] [client 45.86.200.217:23067] [client 45.86.200.217] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/click.php"] [unique_id "aaLoRrTHSOG_yf2PpqFX9QAAAcU"]
[Sat Feb 28 21:06:16.833725 2026] [:error] [pid 39292:tid 39305] [client 185.82.72.111:29407] [client 185.82.72.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "aaLoSKIAO5fN7BxyqcF3VwAAAMs"]
[Sat Feb 28 21:06:17.859061 2026] [proxy_fcgi:error] [pid 39185:tid 39251] [client 45.86.200.227:52499] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:06:18.841472 2026] [proxy_fcgi:error] [pid 39185:tid 39246] [client 45.86.200.227:52499] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:06:19.682771 2026] [proxy_fcgi:error] [pid 39185:tid 39257] [client 45.86.200.227:52499] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:06:20.392862 2026] [:error] [pid 39185:tid 39248] [client 45.86.200.227:52499] [client 45.86.200.227] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "aaLoTBVE-FfM89u7BQafhAAAAII"]
[Sat Feb 28 21:06:21.283212 2026] [:error] [pid 39183:tid 39193] [client 45.86.200.222:37789] [client 45.86.200.222] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/xl2023.php"] [unique_id "aaLoTRCf4HvhVePw3LY5OwAAAAE"]
[Sat Feb 28 21:06:22.048878 2026] [:error] [pid 39185:tid 39253] [client 45.86.200.217:51561] [client 45.86.200.217] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/certificates/admin.php"] [unique_id "aaLoThVE-FfM89u7BQafhgAAAIc"]
[Sat Feb 28 21:06:22.854630 2026] [:error] [pid 39292:tid 39298] [client 45.86.200.245:37073] [client 45.86.200.245] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/media/dog.php"] [unique_id "aaLoTqIAO5fN7BxyqcF3ZAAAAMQ"]
[Sat Feb 28 21:06:23.648282 2026] [proxy_fcgi:error] [pid 39184:tid 39225] [client 185.82.72.102:24425] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:06:23.973060 2026] [:error] [pid 39184:tid 39226] [client 185.82.72.102:24425] [client 185.82.72.102] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "aaLoT1tZF9Zd_U7easC8QwAAAEc"]
[Sat Feb 28 21:06:24.806088 2026] [:error] [pid 49763:tid 49788] [client 45.86.200.217:44715] [client 45.86.200.217] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aaLoULTHSOG_yf2PpqFYIAAAAdY"]
[Sat Feb 28 21:06:25.628660 2026] [proxy_fcgi:error] [pid 39292:tid 39304] [client 45.86.200.221:38349] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:06:26.315812 2026] [:error] [pid 39292:tid 39309] [client 45.86.200.221:38349] [client 45.86.200.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aaLoUqIAO5fN7BxyqcF3dgAAAM8"]
[Sat Feb 28 21:06:26.901331 2026] [:error] [pid 11791:tid 11799] [client 45.86.200.225:65525] [client 45.86.200.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aaLoUmuX5e1Q32gqxH3CegAAAQY"]
[Sat Feb 28 21:06:27.553628 2026] [:error] [pid 39184:tid 39234] [client 45.86.200.225:30265] [client 45.86.200.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/pomo/admin.php"] [unique_id "aaLoU1tZF9Zd_U7easC8RAAAAE8"]
[Sat Feb 28 21:06:28.215322 2026] [:error] [pid 49763:tid 49776] [client 45.86.200.215:41945] [client 45.86.200.215] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/IXR/security.php"] [unique_id "aaLoVLTHSOG_yf2PpqFYPQAAAco"]
[Sat Feb 28 21:06:29.288693 2026] [:error] [pid 49763:tid 49766] [client 45.86.200.245:56085] [client 45.86.200.245] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aaLoVbTHSOG_yf2PpqFYUAAAAcA"]
[Sat Feb 28 21:06:31.786679 2026] [:error] [pid 49763:tid 49774] [client 185.82.72.111:34117] [client 185.82.72.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/fonts/about.php"] [unique_id "aaLoV7THSOG_yf2PpqFYagAAAcg"]
[Sat Feb 28 21:06:32.446681 2026] [proxy_fcgi:error] [pid 39185:tid 39249] [client 185.82.72.111:43875] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:06:33.547724 2026] [proxy_fcgi:error] [pid 39185:tid 39264] [client 185.82.72.111:43875] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:06:33.924516 2026] [:error] [pid 39185:tid 39260] [client 185.82.72.111:43875] [client 185.82.72.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "aaLoWRVE-FfM89u7BQafoQAAAI4"]
[Sat Feb 28 21:06:35.196347 2026] [proxy_fcgi:error] [pid 22194:tid 22203] [client 45.86.200.228:25043] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:06:35.559053 2026] [proxy_fcgi:error] [pid 22194:tid 22212] [client 45.86.200.228:25043] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:06:37.331430 2026] [:error] [pid 22194:tid 22214] [client 45.86.200.228:25043] [client 45.86.200.228] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/file.php"] [unique_id "aaLoXX6mbajs3bzQGyujVAAAAVI"]
[Sat Feb 28 21:06:38.918995 2026] [:error] [pid 39292:tid 39306] [client 185.82.72.107:23543] [client 185.82.72.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "aaLoXqIAO5fN7BxyqcF3jAAAAMw"]
[Sat Feb 28 21:06:39.619159 2026] [:error] [pid 22194:tid 22205] [client 45.86.200.236:39697] [client 45.86.200.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "aaLoX36mbajs3bzQGyujWgAAAUk"]
[Sat Feb 28 21:06:41.756510 2026] [:error] [pid 49763:tid 49771] [client 45.86.200.238:20147] [client 45.86.200.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aaLoYbTHSOG_yf2PpqFY2wAAAcU"]
[Sat Feb 28 21:06:43.358704 2026] [proxy_fcgi:error] [pid 49763:tid 49787] [client 45.86.200.225:56543] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:06:43.708662 2026] [proxy_fcgi:error] [pid 49763:tid 49784] [client 45.86.200.225:56543] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:06:44.330127 2026] [proxy_fcgi:error] [pid 49763:tid 49783] [client 45.86.200.225:56543] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:06:44.652889 2026] [proxy_fcgi:error] [pid 49763:tid 49789] [client 45.86.200.225:56543] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:06:46.460088 2026] [:error] [pid 49763:tid 49779] [client 45.86.200.225:56543] [client 45.86.200.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aaLoZrTHSOG_yf2PpqFZBAAAAc0"]
[Sat Feb 28 21:06:47.501814 2026] [:error] [pid 11791:tid 11803] [client 185.82.72.206:28801] [client 185.82.72.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "aaLoZ2uX5e1Q32gqxH3CkgAAAQo"]
[Sat Feb 28 21:06:48.640596 2026] [:error] [pid 39183:tid 39207] [client 45.86.200.246:56231] [client 45.86.200.246] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "aaLoaBCf4HvhVePw3LY5mgAAAA8"]
[Sat Feb 28 21:06:49.498529 2026] [:error] [pid 39183:tid 39215] [client 45.86.200.250:50195] [client 45.86.200.250] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "aaLoaRCf4HvhVePw3LY5nQAAABc"]
[Sat Feb 28 21:06:50.194711 2026] [:error] [pid 52460:tid 52477] [client 45.86.200.222:61119] [client 45.86.200.222] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aaLoarLWOogAgHGh62R9_AAAAY4"]
[Sat Feb 28 21:06:50.829039 2026] [:error] [pid 39292:tid 39309] [client 185.82.72.111:54231] [client 185.82.72.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aaLoaqIAO5fN7BxyqcF3lAAAAM8"]
[Sat Feb 28 21:06:51.797797 2026] [:error] [pid 49763:tid 49771] [client 45.86.200.230:20297] [client 45.86.200.230] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/media/index.php"] [unique_id "aaLoa7THSOG_yf2PpqFZFwAAAcU"]
[Sat Feb 28 21:06:52.438631 2026] [:error] [pid 39183:tid 39211] [client 185.82.72.106:25687] [client 185.82.72.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "aaLobBCf4HvhVePw3LY5rAAAABM"]
[Sat Feb 28 21:06:53.161104 2026] [:error] [pid 49763:tid 49766] [client 45.86.200.246:26837] [client 45.86.200.246] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "aaLobbTHSOG_yf2PpqFZHQAAAcA"]
[Sat Feb 28 21:06:53.764043 2026] [:error] [pid 52460:tid 52466] [client 45.86.200.227:27767] [client 45.86.200.227] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "aaLobbLWOogAgHGh62R-EwAAAYM"]
[Sat Feb 28 21:06:55.315021 2026] [:error] [pid 39183:tid 39201] [client 45.86.200.233:25591] [client 45.86.200.233] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/fonts/themes.php"] [unique_id "aaLobxCf4HvhVePw3LY5vQAAAAk"]
[Sat Feb 28 21:06:56.223064 2026] [:error] [pid 49763:tid 49779] [client 45.86.200.249:51831] [client 45.86.200.249] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/certificates/index.php"] [unique_id "aaLocLTHSOG_yf2PpqFZLwAAAc0"]
[Sat Feb 28 21:06:56.833436 2026] [proxy_fcgi:error] [pid 11791:tid 11806] [client 45.86.200.249:39525] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:06:57.478585 2026] [:error] [pid 11791:tid 11812] [client 45.86.200.249:39525] [client 45.86.200.249] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "aaLocWuX5e1Q32gqxH3ClwAAARM"]
[Sat Feb 28 21:06:59.076541 2026] [:error] [pid 52460:tid 52477] [client 45.86.200.237:57643] [client 45.86.200.237] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "aaLoc7LWOogAgHGh62R-LAAAAY4"]
[Sat Feb 28 21:07:01.446927 2026] [proxy_fcgi:error] [pid 39183:tid 39213] [client 45.86.200.217:56119] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:07:01.783622 2026] [:error] [pid 39183:tid 39216] [client 45.86.200.217:56119] [client 45.86.200.217] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aaLodRCf4HvhVePw3LY54QAAABg"]
[Sat Feb 28 21:07:02.782825 2026] [proxy_fcgi:error] [pid 52460:tid 52469] [client 45.86.200.225:40745] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:07:03.109752 2026] [proxy_fcgi:error] [pid 52460:tid 52482] [client 45.86.200.225:40745] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:07:03.433972 2026] [proxy_fcgi:error] [pid 52460:tid 52466] [client 45.86.200.225:40745] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:07:03.765258 2026] [:error] [pid 52460:tid 52467] [client 45.86.200.225:40745] [client 45.86.200.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "aaLod7LWOogAgHGh62R-WQAAAYQ"]
[Sat Feb 28 21:07:04.444193 2026] [proxy_fcgi:error] [pid 49763:tid 49778] [client 45.86.200.227:49225] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:07:04.780382 2026] [:error] [pid 49763:tid 49777] [client 45.86.200.227:49225] [client 45.86.200.227] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "aaLoeLTHSOG_yf2PpqFZXQAAAcs"]
[Sat Feb 28 21:07:05.615753 2026] [:error] [pid 49763:tid 49772] [client 20.151.205.221:1286] [client 20.151.205.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wk/index.php"] [unique_id "aaLoebTHSOG_yf2PpqFZYQAAAcY"]
[Sat Feb 28 21:07:06.127265 2026] [proxy_fcgi:error] [pid 52460:tid 52466] [client 45.86.200.221:32481] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:07:06.447877 2026] [:error] [pid 49763:tid 49789] [client 20.151.205.221:1321] [client 20.151.205.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wk/index.php"] [unique_id "aaLoerTHSOG_yf2PpqFZaQAAAdc"]
[Sat Feb 28 21:07:06.573618 2026] [proxy_fcgi:error] [pid 52460:tid 52482] [client 45.86.200.221:32481] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:07:06.877682 2026] [proxy_fcgi:error] [pid 52460:tid 52465] [client 45.86.200.221:32481] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:07:07.274229 2026] [:error] [pid 49763:tid 49782] [client 20.151.205.221:1312] [client 20.151.205.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wk/index.php"] [unique_id "aaLoe7THSOG_yf2PpqFZbgAAAdA"]
[Sat Feb 28 21:07:08.107457 2026] [:error] [pid 52460:tid 52467] [client 20.151.205.221:1317] [client 20.151.205.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wk/index.php"] [unique_id "aaLofLLWOogAgHGh62R-fgAAAYQ"]
[Sat Feb 28 21:07:08.672158 2026] [proxy_fcgi:error] [pid 52460:tid 52484] [client 45.86.200.221:32481] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:07:09.009186 2026] [proxy_fcgi:error] [pid 52460:tid 52463] [client 45.86.200.221:32481] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:07:09.687912 2026] [proxy_fcgi:error] [pid 52460:tid 52477] [client 45.86.200.221:32481] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:07:11.643562 2026] [proxy_fcgi:error] [pid 52460:tid 52467] [client 45.86.200.221:32481] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:07:12.763383 2026] [:error] [pid 52460:tid 52486] [client 45.86.200.221:32481] [client 45.86.200.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "aaLogLLWOogAgHGh62R-kwAAAZc"]
[Sat Feb 28 21:07:13.336652 2026] [:error] [pid 49763:tid 49786] [client 185.82.72.107:34781] [client 185.82.72.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aaLogbTHSOG_yf2PpqFZhQAAAdQ"]
[Sat Feb 28 21:07:14.053258 2026] [:error] [pid 39184:tid 39219] [client 45.86.200.228:44423] [client 45.86.200.228] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.200.228, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-login.php"] [unique_id "aaLogltZF9Zd_U7easC8sQAAAEA"]
[Sat Feb 28 21:07:14.057593 2026] [proxy_fcgi:error] [pid 39184:tid 39219] [client 45.86.200.228:44423] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:07:14.502865 2026] [proxy_fcgi:error] [pid 39184:tid 39243] [client 45.86.200.228:44423] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:07:14.996945 2026] [:error] [pid 39184:tid 39235] [client 45.86.200.228:44423] [client 45.86.200.228] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "aaLogltZF9Zd_U7easC8tgAAAFA"]
[Sat Feb 28 21:07:16.349233 2026] [proxy_fcgi:error] [pid 49763:tid 49785] [client 185.82.72.10:47403] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:07:16.995293 2026] [:error] [pid 49763:tid 49767] [client 185.82.72.10:47403] [client 185.82.72.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aaLohLTHSOG_yf2PpqFZjQAAAcE"]
[Sat Feb 28 21:07:17.923333 2026] [:error] [pid 49763:tid 49781] [client 45.86.200.236:22397] [client 45.86.200.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aaLohbTHSOG_yf2PpqFZkwAAAc8"]
[Sat Feb 28 21:07:20.300146 2026] [:error] [pid 39184:tid 39239] [client 45.86.200.217:20325] [client 45.86.200.217] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aaLoiFtZF9Zd_U7easC8yQAAAFQ"]
[Sat Feb 28 21:07:21.087974 2026] [:error] [pid 49763:tid 49774] [client 45.86.200.220:20427] [client 45.86.200.220] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dwelectservices.com.au"] [uri "/fm.php"] [unique_id "aaLoibTHSOG_yf2PpqFZpwAAAcg"]
[Sat Feb 28 21:07:22.760793 2026] [proxy_fcgi:error] [pid 39184:tid 39224] [client 45.86.200.217:63647] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:07:23.402467 2026] [:error] [pid 39184:tid 39236] [client 45.86.200.217:63647] [client 45.86.200.217] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "aaLoi1tZF9Zd_U7easC84wAAAFE"]
[Sat Feb 28 21:07:27.583756 2026] [proxy_fcgi:error] [pid 39185:tid 39262] [client 45.86.200.226:64985] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:07:28.905055 2026] [:error] [pid 39185:tid 39255] [client 45.86.200.226:64985] [client 45.86.200.226] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/function.php"] [unique_id "aaLokBVE-FfM89u7BQaf8gAAAIk"]
[Sat Feb 28 21:07:29.662543 2026] [:error] [pid 49763:tid 49781] [client 45.86.200.228:21937] [client 45.86.200.228] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/plugins.php"] [unique_id "aaLokbTHSOG_yf2PpqFZ6wAAAc8"]
[Sat Feb 28 21:07:32.132877 2026] [proxy_fcgi:error] [pid 39292:tid 39310] [client 185.82.72.109:27949] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:07:32.484603 2026] [:error] [pid 39292:tid 39307] [client 185.82.72.109:27949] [client 185.82.72.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/chosen.php"] [unique_id "aaLolKIAO5fN7BxyqcF3vQAAAM0"]
[Sat Feb 28 21:07:33.214090 2026] [:error] [pid 49763:tid 49774] [client 45.86.200.214:31509] [client 45.86.200.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "aaLolbTHSOG_yf2PpqFaAgAAAcg"]
[Sat Feb 28 21:07:34.548504 2026] [proxy_fcgi:error] [pid 49763:tid 49782] [client 185.82.72.106:27499] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:07:34.940581 2026] [proxy_fcgi:error] [pid 49763:tid 49771] [client 185.82.72.106:27499] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:07:35.594078 2026] [proxy_fcgi:error] [pid 49763:tid 49773] [client 185.82.72.106:27499] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:07:36.955720 2026] [:error] [pid 49763:tid 49781] [client 185.82.72.106:27499] [client 185.82.72.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/atomlib.php"] [unique_id "aaLomLTHSOG_yf2PpqFaIgAAAc8"]
[Sat Feb 28 21:07:37.647055 2026] [:error] [pid 39185:tid 39249] [client 185.82.72.182:56625] [client 185.82.72.182] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/rest-api/index.php"] [unique_id "aaLomRVE-FfM89u7BQaf-gAAAIM"]
[Sat Feb 28 21:07:40.514150 2026] [proxy_fcgi:error] [pid 52460:tid 52481] [client 185.82.72.106:63169] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:07:40.993233 2026] [:error] [pid 52460:tid 52483] [client 185.82.72.106:63169] [client 185.82.72.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/index.php"] [unique_id "aaLonLLWOogAgHGh62R--AAAAZQ"]
[Sat Feb 28 21:07:41.748962 2026] [:error] [pid 52460:tid 52474] [client 45.86.200.250:55909] [client 45.86.200.250] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aaLonbLWOogAgHGh62R-_AAAAYs"]
[Sat Feb 28 21:07:42.392341 2026] [:error] [pid 39183:tid 39207] [client 45.86.200.239:52371] [client 45.86.200.239] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aaLonhCf4HvhVePw3LY6bgAAAA8"]
[Sat Feb 28 21:07:45.965035 2026] [proxy_fcgi:error] [pid 11791:tid 11800] [client 45.86.200.247:63419] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:07:46.294407 2026] [:error] [pid 11791:tid 11816] [client 45.86.200.247:63419] [client 45.86.200.247] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/Exception-wp.php"] [unique_id "aaLoomuX5e1Q32gqxH3C5AAAARc"]
[Sat Feb 28 21:07:47.239432 2026] [:error] [pid 39185:tid 39246] [client 45.86.200.227:45065] [client 45.86.200.227] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aaLooxVE-FfM89u7BQagAwAAAIA"]
[Sat Feb 28 21:07:47.865318 2026] [proxy_fcgi:error] [pid 39185:tid 39270] [client 45.86.200.214:58051] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:07:48.169276 2026] [proxy_fcgi:error] [pid 39185:tid 39254] [client 45.86.200.214:58051] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:07:48.805857 2026] [proxy_fcgi:error] [pid 39185:tid 39247] [client 45.86.200.214:58051] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:07:50.247617 2026] [:error] [pid 39185:tid 39265] [client 45.86.200.214:58051] [client 45.86.200.214] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.200.214, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/js/wp-login.php"] [unique_id "aaLophVE-FfM89u7BQagDAAAAJM"]
[Sat Feb 28 21:07:50.997036 2026] [:error] [pid 39185:tid 39263] [client 45.86.200.214:58051] File does not exist: /home/dwelects/public_html/worm.PhP
[Sat Feb 28 21:07:51.497955 2026] [proxy_fcgi:error] [pid 39185:tid 39252] [client 45.86.200.214:58051] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:07:51.803534 2026] [proxy_fcgi:error] [pid 39185:tid 39258] [client 45.86.200.214:58051] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:07:52.517597 2026] [:error] [pid 39185:tid 39259] [client 45.86.200.214:58051] [client 45.86.200.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/bk/index.php"] [unique_id "aaLoqBVE-FfM89u7BQagFQAAAI0"]
[Sat Feb 28 21:07:53.223975 2026] [:error] [pid 49763:tid 49784] [client 45.86.200.217:57211] [client 45.86.200.217] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.200.217, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "aaLoqbTHSOG_yf2PpqFaUQAAAdI"]
[Sat Feb 28 21:07:54.345229 2026] [proxy_fcgi:error] [pid 49763:tid 49782] [client 45.86.200.217:57211] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:07:54.680227 2026] [proxy_fcgi:error] [pid 49763:tid 49778] [client 45.86.200.217:57211] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:07:55.449158 2026] [proxy_fcgi:error] [pid 49763:tid 49785] [client 45.86.200.217:57211] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:07:56.930066 2026] [proxy_fcgi:error] [pid 49763:tid 49769] [client 45.86.200.217:57211] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:07:58.027475 2026] [proxy_fcgi:error] [pid 49763:tid 49778] [client 45.86.200.217:57211] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:08:01.369925 2026] [proxy_fcgi:error] [pid 49763:tid 49780] [client 45.86.200.217:57211] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:08:01.748968 2026] [proxy_fcgi:error] [pid 49763:tid 49771] [client 45.86.200.217:57211] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:08:03.744131 2026] [proxy_fcgi:error] [pid 49763:tid 49778] [client 45.86.200.217:57211] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:08:04.802280 2026] [:error] [pid 49763:tid 49779] [client 45.86.200.217:57211] [client 45.86.200.217] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "aaLotLTHSOG_yf2PpqFatAAAAc0"]
[Sat Feb 28 21:08:06.151793 2026] [proxy_fcgi:error] [pid 39183:tid 39205] [client 45.86.200.249:59197] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:08:06.492860 2026] [:error] [pid 39183:tid 39193] [client 45.86.200.249:59197] [client 45.86.200.249] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aaLothCf4HvhVePw3LY6tAAAAAE"]
[Sat Feb 28 21:08:07.237774 2026] [proxy_fcgi:error] [pid 49763:tid 49786] [client 45.86.200.217:60233] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:08:07.879115 2026] [proxy_fcgi:error] [pid 49763:tid 49777] [client 45.86.200.217:60233] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:08:08.562117 2026] [:error] [pid 49763:tid 49774] [client 45.86.200.217:60233] [client 45.86.200.217] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/atomlib.php"] [unique_id "aaLouLTHSOG_yf2PpqFayAAAAcg"]
[Sat Feb 28 21:08:10.697629 2026] [proxy_fcgi:error] [pid 49763:tid 49776] [client 45.86.200.236:34693] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:08:11.525721 2026] [proxy_fcgi:error] [pid 49763:tid 49768] [client 45.86.200.236:34693] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:08:12.217381 2026] [proxy_fcgi:error] [pid 49763:tid 49777] [client 45.86.200.236:34693] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:08:12.555497 2026] [proxy_fcgi:error] [pid 49763:tid 49779] [client 45.86.200.236:34693] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:08:13.638254 2026] [:error] [pid 49763:tid 49766] [client 45.86.200.236:34693] [client 45.86.200.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aaLovbTHSOG_yf2PpqFa5gAAAcA"]
[Sat Feb 28 21:08:14.300948 2026] [proxy_fcgi:error] [pid 39183:tid 39214] [client 45.86.200.213:46093] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:08:14.601145 2026] [proxy_fcgi:error] [pid 39183:tid 39198] [client 45.86.200.213:46093] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:08:14.958740 2026] [:error] [pid 39183:tid 39192] [client 45.86.200.213:46093] [client 45.86.200.213] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aaLovhCf4HvhVePw3LY67gAAAAA"]
[Sat Feb 28 21:08:16.248150 2026] [:error] [pid 39184:tid 39240] [client 45.86.200.227:41075] [client 45.86.200.227] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aaLowFtZF9Zd_U7easC9gAAAAFU"]
[Sat Feb 28 21:08:17.348267 2026] [proxy_fcgi:error] [pid 49763:tid 49768] [client 45.86.200.216:31609] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:08:18.350901 2026] [proxy_fcgi:error] [pid 49763:tid 49766] [client 45.86.200.216:31609] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:08:18.656754 2026] [proxy_fcgi:error] [pid 49763:tid 49781] [client 45.86.200.216:31609] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:08:18.989851 2026] [:error] [pid 49763:tid 49783] [client 45.86.200.216:31609] [client 45.86.200.216] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "aaLowrTHSOG_yf2PpqFbGAAAAdE"]
[Sat Feb 28 21:08:19.653930 2026] [:error] [pid 39183:tid 39214] [client 45.86.200.244:47781] [client 45.86.200.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "aaLowxCf4HvhVePw3LY6-AAAABY"]
[Sat Feb 28 21:08:23.416367 2026] [proxy_fcgi:error] [pid 39183:tid 39208] [client 185.82.72.206:47839] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:08:24.085791 2026] [:error] [pid 39183:tid 39211] [client 185.82.72.206:47839] [client 185.82.72.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/dist/default.php"] [unique_id "aaLoyBCf4HvhVePw3LY7GAAAABM"]
[Sat Feb 28 21:08:25.144083 2026] [:error] [pid 49763:tid 49768] [client 185.82.72.104:40773] [client 185.82.72.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dwelectservices.com.au"] [uri "/tiny.php"] [unique_id "aaLoybTHSOG_yf2PpqFbOQAAAcI"]
[Sat Feb 28 21:08:26.357716 2026] [proxy_fcgi:error] [pid 52460:tid 52477] [client 45.86.200.243:35443] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:08:26.712812 2026] [proxy_fcgi:error] [pid 52460:tid 52478] [client 45.86.200.243:35443] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:08:27.092200 2026] [:error] [pid 52460:tid 52464] [client 45.86.200.243:35443] [client 45.86.200.243] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "aaLoy7LWOogAgHGh62R_awAAAYE"]
[Sat Feb 28 21:08:28.386546 2026] [proxy_fcgi:error] [pid 49763:tid 49785] [client 45.86.200.242:27725] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:08:28.731099 2026] [proxy_fcgi:error] [pid 49763:tid 49776] [client 45.86.200.242:27725] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:08:29.878423 2026] [proxy_fcgi:error] [pid 49763:tid 49780] [client 45.86.200.242:27725] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:08:30.884068 2026] [:error] [pid 49763:tid 49771] [client 45.86.200.242:27725] [client 45.86.200.242] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/Parse/about.php"] [unique_id "aaLozrTHSOG_yf2PpqFbaAAAAcU"]
[Sat Feb 28 21:08:31.545624 2026] [proxy_fcgi:error] [pid 52460:tid 52487] [client 185.82.72.179:25609] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:08:33.711852 2026] [:error] [pid 52460:tid 52469] [client 185.82.72.179:25609] [client 185.82.72.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "aaLo0bLWOogAgHGh62R_gAAAAYY"]
[Sat Feb 28 21:08:34.800925 2026] [proxy_fcgi:error] [pid 39185:tid 39253] [client 45.86.200.251:60707] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:08:36.289367 2026] [proxy_fcgi:error] [pid 39185:tid 39265] [client 45.86.200.251:60707] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:08:36.633601 2026] [proxy_fcgi:error] [pid 39185:tid 39258] [client 45.86.200.251:60707] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:08:37.331816 2026] [:error] [pid 39185:tid 39267] [client 45.86.200.251:60707] [client 45.86.200.251] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.200.251, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/colors/ocean/wp-login.php"] [unique_id "aaLo1RVE-FfM89u7BQagTwAAAJU"]
[Sat Feb 28 21:08:38.320547 2026] [proxy_fcgi:error] [pid 39185:tid 39266] [client 45.86.200.251:60707] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:08:38.938277 2026] [:error] [pid 39185:tid 39262] [client 45.86.200.251:60707] [client 45.86.200.251] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/Cache/upfile.php"] [unique_id "aaLo1hVE-FfM89u7BQagVAAAAJA"]
[Sat Feb 28 21:08:39.584678 2026] [proxy_fcgi:error] [pid 52460:tid 52485] [client 185.82.72.111:61389] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:08:40.058031 2026] [:error] [pid 52460:tid 52470] [client 185.82.72.111:61389] [client 185.82.72.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "aaLo2LLWOogAgHGh62R_sQAAAYc"]
[Sat Feb 28 21:08:40.695736 2026] [proxy_fcgi:error] [pid 52460:tid 52485] [client 185.82.72.108:21871] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:08:41.619452 2026] [proxy_fcgi:error] [pid 52460:tid 52480] [client 185.82.72.108:21871] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:08:42.477526 2026] [:error] [pid 52460:tid 52469] [client 185.82.72.108:21871] [client 185.82.72.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/widgets/class-wp-widget-search-function.php"] [unique_id "aaLo2rLWOogAgHGh62R_zAAAAYY"]
[Sat Feb 28 21:08:43.661016 2026] [proxy_fcgi:error] [pid 49763:tid 49782] [client 45.86.200.213:23789] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:08:44.870572 2026] [proxy_fcgi:error] [pid 49763:tid 49787] [client 45.86.200.213:23789] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:08:45.939909 2026] [:error] [pid 49763:tid 49767] [client 45.86.200.213:23789] [client 45.86.200.213] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/Canonical.php"] [unique_id "aaLo3bTHSOG_yf2PpqFbjgAAAcE"]
[Sat Feb 28 21:08:46.880565 2026] [:error] [pid 39183:tid 39206] [client 45.86.200.218:23939] [client 45.86.200.218] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "aaLo3hCf4HvhVePw3LY7VgAAAA4"]
[Sat Feb 28 21:08:47.548619 2026] [proxy_fcgi:error] [pid 39183:tid 39201] [client 45.86.200.223:53247] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:08:47.919505 2026] [proxy_fcgi:error] [pid 39183:tid 39213] [client 45.86.200.223:53247] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:08:48.611530 2026] [:error] [pid 39183:tid 39206] [client 45.86.200.223:53247] [client 45.86.200.223] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/class-feed-index.php"] [unique_id "aaLo4BCf4HvhVePw3LY7ZwAAAA4"]
[Sat Feb 28 21:08:49.294445 2026] [proxy_fcgi:error] [pid 39185:tid 39267] [client 185.82.72.108:54131] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:08:49.984853 2026] [proxy_fcgi:error] [pid 39185:tid 39260] [client 185.82.72.108:54131] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:08:50.304982 2026] [:error] [pid 39185:tid 39266] [client 185.82.72.108:54131] [client 185.82.72.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php"] [unique_id "aaLo4hVE-FfM89u7BQagZAAAAJQ"]
[Sat Feb 28 21:08:51.347648 2026] [:error] [pid 49763:tid 49781] [client 185.82.72.9:44769] [client 185.82.72.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/db.php"] [unique_id "aaLo47THSOG_yf2PpqFbqwAAAc8"]
[Sat Feb 28 21:08:51.997942 2026] [:error] [pid 39183:tid 39203] [client 185.82.72.109:26869] [client 185.82.72.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/class-wp-dependency-float.php"] [unique_id "aaLo4xCf4HvhVePw3LY7dQAAAAs"]
[Sat Feb 28 21:08:52.668525 2026] [:error] [pid 39183:tid 39208] [client 185.82.72.108:47011] [client 185.82.72.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "aaLo5BCf4HvhVePw3LY7fAAAABA"]
[Sat Feb 28 21:08:53.277431 2026] [:error] [pid 49763:tid 49766] [client 45.86.200.227:24957] [client 45.86.200.227] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/PHPMailer/purna.php"] [unique_id "aaLo5bTHSOG_yf2PpqFbrwAAAcA"]
[Sat Feb 28 21:08:54.107847 2026] [:error] [pid 39183:tid 39206] [client 45.86.200.240:34297] [client 45.86.200.240] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/interactivity-api/interactivity-api-class.php"] [unique_id "aaLo5hCf4HvhVePw3LY7iAAAAA4"]
[Sat Feb 28 21:08:54.736741 2026] [:error] [pid 52460:tid 52463] [client 45.86.200.240:50977] [client 45.86.200.240] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/l10n/class-wp-widddget-pages.php"] [unique_id "aaLo5rLWOogAgHGh62R_3AAAAYA"]
[Sat Feb 28 21:08:56.123753 2026] [:error] [pid 52460:tid 52479] [client 45.86.200.224:52469] [client 45.86.200.224] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php"] [unique_id "aaLo6LLWOogAgHGh62R_5gAAAZA"]
[Sat Feb 28 21:08:56.764030 2026] [:error] [pid 52460:tid 52480] [client 45.86.200.247:28517] [client 45.86.200.247] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php"] [unique_id "aaLo6LLWOogAgHGh62R_6AAAAZE"]
[Sat Feb 28 21:08:57.405319 2026] [:error] [pid 39184:tid 39231] [client 45.86.200.237:21243] [client 45.86.200.237] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/ID3/module.audio-video.riff-set.php"] [unique_id "aaLo6VtZF9Zd_U7easC90QAAAEw"]
[Sat Feb 28 21:08:58.508556 2026] [:error] [pid 39185:tid 39248] [client 45.86.200.244:59279] [client 45.86.200.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/tinymce/utils/license.php"] [unique_id "aaLo6hVE-FfM89u7BQagcQAAAII"]
[Sat Feb 28 21:08:59.889175 2026] [:error] [pid 52460:tid 52463] [client 45.86.200.235:51593] [client 45.86.200.235] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Text/options.php"] [unique_id "aaLo67LWOogAgHGh62SAAAAAAYA"]
[Sat Feb 28 21:09:00.581743 2026] [proxy_fcgi:error] [pid 52460:tid 52479] [client 45.86.200.220:43105] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:09:01.903180 2026] [:error] [pid 52460:tid 52478] [client 45.86.200.220:43105] [client 45.86.200.220] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.200.220, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "aaLo7bLWOogAgHGh62SAFAAAAY8"]
[Sat Feb 28 21:09:03.992457 2026] [:error] [pid 52460:tid 52475] [client 45.86.200.220:43105] [client 45.86.200.220] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/feed-rsss.php"] [unique_id "aaLo77LWOogAgHGh62SAKwAAAYw"]
[Sat Feb 28 21:09:04.696599 2026] [:error] [pid 39183:tid 39212] [client 45.86.200.247:24823] [client 45.86.200.247] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/IXR/goto.php"] [unique_id "aaLo8BCf4HvhVePw3LY7rAAAABQ"]
[Sat Feb 28 21:09:06.525967 2026] [proxy_fcgi:error] [pid 49763:tid 49790] [client 45.86.200.244:43319] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:09:06.849118 2026] [proxy_fcgi:error] [pid 49763:tid 49768] [client 45.86.200.244:43319] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:09:08.192210 2026] [proxy_fcgi:error] [pid 49763:tid 49768] [client 45.86.200.244:43319] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:09:08.517830 2026] [proxy_fcgi:error] [pid 49763:tid 49773] [client 45.86.200.244:43319] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:09:10.407855 2026] [proxy_fcgi:error] [pid 49763:tid 49766] [client 45.86.200.244:43319] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:09:10.744742 2026] [proxy_fcgi:error] [pid 49763:tid 49789] [client 45.86.200.244:43319] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:09:11.240494 2026] [proxy_fcgi:error] [pid 49763:tid 49788] [client 45.86.200.244:43319] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:09:11.584591 2026] [proxy_fcgi:error] [pid 49763:tid 49789] [client 45.86.200.244:43319] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:09:11.919005 2026] [:error] [pid 49763:tid 49778] [client 45.86.200.244:43319] [client 45.86.200.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aaLo97THSOG_yf2PpqFcKwAAAcw"]
[Sat Feb 28 21:09:14.209690 2026] [:error] [pid 49763:tid 49772] [client 185.82.72.111:31633] [client 185.82.72.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/wp_class_datlib.php"] [unique_id "aaLo-rTHSOG_yf2PpqFcPgAAAcY"]
[Sat Feb 28 21:09:15.664586 2026] [:error] [pid 49763:tid 49789] [client 45.86.200.224:41393] [client 45.86.200.224] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "aaLo-7THSOG_yf2PpqFcRwAAAdc"]
[Sat Feb 28 21:09:16.876509 2026] [proxy_fcgi:error] [pid 22194:tid 22196] [client 45.86.200.247:49355] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:09:17.282809 2026] [proxy_fcgi:error] [pid 22194:tid 22217] [client 45.86.200.247:49355] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:09:18.627665 2026] [proxy_fcgi:error] [pid 22194:tid 22216] [client 45.86.200.247:49355] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:09:19.299173 2026] [:error] [pid 22194:tid 22205] [client 45.86.200.247:49355] [client 45.86.200.247] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/Registry-private.php"] [unique_id "aaLo_36mbajs3bzQGyuj2AAAAUk"]
[Sat Feb 28 21:09:19.933770 2026] [:error] [pid 39292:tid 39317] [client 45.86.200.250:30441] [client 45.86.200.250] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-meta.php"] [unique_id "aaLo_6IAO5fN7BxyqcF45gAAANc"]
[Sat Feb 28 21:09:20.566523 2026] [:error] [pid 49763:tid 49772] [client 185.82.72.206:32601] [client 185.82.72.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/widgets/bypass.php"] [unique_id "aaLpALTHSOG_yf2PpqFcYQAAAcY"]
[Sat Feb 28 21:09:22.721819 2026] [:error] [pid 49763:tid 49774] [client 45.86.200.248:61083] [client 45.86.200.248] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/style-engine/adminfus.php"] [unique_id "aaLpArTHSOG_yf2PpqFcewAAAcg"]
[Sat Feb 28 21:09:23.436828 2026] [proxy_fcgi:error] [pid 52460:tid 52476] [client 185.82.72.106:51047] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:09:23.768484 2026] [:error] [pid 52460:tid 52470] [client 185.82.72.106:51047] [client 185.82.72.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/group/wp-style.php"] [unique_id "aaLpA7LWOogAgHGh62SAVgAAAYc"]
[Sat Feb 28 21:09:25.520967 2026] [:error] [pid 39183:tid 39209] [client 185.82.72.9:28607] [client 185.82.72.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/widgets/class-wp-wolf-widget.php"] [unique_id "aaLpBRCf4HvhVePw3LY7_QAAABE"]
[Sat Feb 28 21:09:30.099405 2026] [:error] [pid 52460:tid 52470] [client 45.86.200.220:36859] [client 45.86.200.220] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Text/index.php"] [unique_id "aaLpCrLWOogAgHGh62SAewAAAYc"]
[Sat Feb 28 21:09:31.110985 2026] [proxy_fcgi:error] [pid 49763:tid 49780] [client 185.82.72.111:60197] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:09:31.741534 2026] [:error] [pid 49763:tid 49784] [client 185.82.72.111:60197] [client 185.82.72.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/about.php"] [unique_id "aaLpC7THSOG_yf2PpqFcoQAAAdI"]
[Sat Feb 28 21:09:33.008868 2026] [proxy_fcgi:error] [pid 49763:tid 49789] [client 45.86.200.220:61651] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:09:33.957303 2026] [proxy_fcgi:error] [pid 49763:tid 49771] [client 45.86.200.220:61651] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:09:34.320609 2026] [:error] [pid 49763:tid 49786] [client 45.86.200.220:61651] [client 45.86.200.220] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/wp-sup.php"] [unique_id "aaLpDrTHSOG_yf2PpqFctQAAAdQ"]
[Sat Feb 28 21:09:35.679164 2026] [:error] [pid 39184:tid 39229] [client 45.86.200.227:53163] [client 45.86.200.227] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/widgets/class-t.api.php"] [unique_id "aaLpD1tZF9Zd_U7easC-AgAAAEo"]
[Sat Feb 28 21:09:37.552737 2026] [:error] [pid 11791:tid 11805] [client 185.82.72.109:56823] [client 185.82.72.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/dist/require-dynamic-blocks.php"] [unique_id "aaLpEWuX5e1Q32gqxH3DXwAAAQw"]
[Sat Feb 28 21:09:40.195185 2026] [:error] [pid 39292:tid 39305] [client 45.86.200.237:59613] [client 45.86.200.237] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/widgets/class-wp-widget-rss-database.php"] [unique_id "aaLpFKIAO5fN7BxyqcF49gAAAMs"]
[Sat Feb 28 21:09:41.220058 2026] [proxy_fcgi:error] [pid 22194:tid 22200] [client 45.86.200.213:29377] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:09:41.527189 2026] [:error] [pid 22194:tid 22206] [client 45.86.200.213:29377] [client 45.86.200.213] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/class-wp-customize-manager-client.php"] [unique_id "aaLpFX6mbajs3bzQGyuj4gAAAUo"]
[Sat Feb 28 21:09:43.187949 2026] [:error] [pid 52460:tid 52475] [client 45.86.200.221:57487] [client 45.86.200.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-boolean.php"] [unique_id "aaLpF7LWOogAgHGh62SAgwAAAYw"]
[Sat Feb 28 21:09:46.477137 2026] [:error] [pid 52460:tid 52485] [client 45.86.200.238:33303] [client 45.86.200.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/smilies/simi.php"] [unique_id "aaLpGrLWOogAgHGh62SAigAAAZY"]
[Sat Feb 28 21:09:47.127790 2026] [proxy_fcgi:error] [pid 49763:tid 49769] [client 45.86.200.238:38155] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:09:48.539282 2026] [proxy_fcgi:error] [pid 49763:tid 49774] [client 45.86.200.238:38155] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:09:48.858466 2026] [:error] [pid 49763:tid 49778] [client 45.86.200.238:38155] [client 45.86.200.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/style-engine-session.php"] [unique_id "aaLpHLTHSOG_yf2PpqFdDAAAAcw"]
[Sat Feb 28 21:09:50.237295 2026] [proxy_fcgi:error] [pid 11791:tid 11817] [client 185.82.72.111:58431] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:09:51.010726 2026] [:error] [pid 11791:tid 11808] [client 185.82.72.111:58431] [client 185.82.72.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aaLpH2uX5e1Q32gqxH3DawAAAQ8"]
[Sat Feb 28 21:09:51.681241 2026] [:error] [pid 52460:tid 52470] [client 45.86.200.239:36035] [client 45.86.200.239] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/file/wp-style.php"] [unique_id "aaLpH7LWOogAgHGh62SAlAAAAYc"]
[Sat Feb 28 21:09:53.050231 2026] [:error] [pid 39184:tid 39232] [client 45.86.200.245:59523] [client 45.86.200.245] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/IXR/class-IXR-cilent.php"] [unique_id "aaLpIVtZF9Zd_U7easC-GQAAAE0"]
[Sat Feb 28 21:09:54.983780 2026] [:error] [pid 22194:tid 22217] [client 45.86.200.249:53497] [client 45.86.200.249] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/install.php"] [unique_id "aaLpIn6mbajs3bzQGyuj5wAAAVU"]
[Sat Feb 28 21:09:55.889273 2026] [:error] [pid 52460:tid 52483] [client 45.86.200.215:60831] [client 45.86.200.215] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/PHPMailer/xleet.php"] [unique_id "aaLpI7LWOogAgHGh62SAmwAAAZQ"]
[Sat Feb 28 21:09:58.115536 2026] [proxy_fcgi:error] [pid 52460:tid 52484] [client 45.86.200.222:47747] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:10:00.636597 2026] [:error] [pid 52460:tid 52480] [client 45.86.200.222:47747] [client 45.86.200.222] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/category-double.php"] [unique_id "aaLpKLLWOogAgHGh62SAqQAAAZE"]
[Sat Feb 28 21:10:02.415591 2026] [:error] [pid 52460:tid 52481] [client 185.82.72.107:25733] [client 185.82.72.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/db.php"] [unique_id "aaLpKrLWOogAgHGh62SArgAAAZI"]
[Sat Feb 28 21:10:03.069027 2026] [:error] [pid 49763:tid 49766] [client 185.82.72.179:60257] [client 185.82.72.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/widgets/security.php"] [unique_id "aaLpK7THSOG_yf2PpqFdNwAAAcA"]
[Sat Feb 28 21:10:04.070601 2026] [proxy_fcgi:error] [pid 49763:tid 49789] [client 185.82.72.102:32925] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:10:04.389836 2026] [:error] [pid 49763:tid 49785] [client 185.82.72.102:32925] [client 185.82.72.102] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/class-wp-language-pack.php"] [unique_id "aaLpLLTHSOG_yf2PpqFdQAAAAdM"]
[Sat Feb 28 21:10:05.390084 2026] [:error] [pid 22194:tid 22212] [client 45.86.200.219:34577] [client 45.86.200.219] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/class-walker-comment-client.php"] [unique_id "aaLpLX6mbajs3bzQGyuj7wAAAVA"]
[Sat Feb 28 21:10:08.224058 2026] [:error] [pid 49763:tid 49778] [client 45.86.200.246:34579] [client 45.86.200.246] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/class-wp-network-query-stat.php"] [unique_id "aaLpMLTHSOG_yf2PpqFdVAAAAcw"]
[Sat Feb 28 21:10:09.184242 2026] [proxy_fcgi:error] [pid 11791:tid 11805] [client 45.86.200.223:51139] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:10:09.462458 2026] [:error] [pid 11791:tid 11803] [client 45.86.200.223:51139] [client 45.86.200.223] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/class-wp-session-tokens-https.php"] [unique_id "aaLpMWuX5e1Q32gqxH3DfQAAAQo"]
[Sat Feb 28 21:10:10.809315 2026] [:error] [pid 11791:tid 11802] [client 185.82.72.179:43927] [client 185.82.72.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/crystal/lrs_dage.php"] [unique_id "aaLpMmuX5e1Q32gqxH3DgQAAAQk"]
[Sat Feb 28 21:10:12.154109 2026] [:error] [pid 39184:tid 39225] [client 45.86.200.237:43601] [client 45.86.200.237] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/as.php"] [unique_id "aaLpNFtZF9Zd_U7easC-UAAAAEY"]
[Sat Feb 28 21:10:13.191550 2026] [:error] [pid 49763:tid 49779] [client 185.82.72.109:56333] [client 185.82.72.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/certificates/wp-conflg.php"] [unique_id "aaLpNbTHSOG_yf2PpqFdawAAAc0"]
[Sat Feb 28 21:10:13.760492 2026] [:error] [pid 11791:tid 11807] [client 45.86.200.215:21707] [client 45.86.200.215] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/install.php"] [unique_id "aaLpNWuX5e1Q32gqxH3DhAAAAQ4"]
[Sat Feb 28 21:10:14.504900 2026] [:error] [pid 49763:tid 49785] [client 185.82.72.106:38783] [client 185.82.72.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/customize/db.php"] [unique_id "aaLpNrTHSOG_yf2PpqFddgAAAdM"]
[Sat Feb 28 21:10:15.111773 2026] [proxy_fcgi:error] [pid 39183:tid 39192] [client 45.86.200.250:39417] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:10:17.786751 2026] [:error] [pid 39183:tid 39200] [client 45.86.200.250:39417] [client 45.86.200.250] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/thickbox/about.php"] [unique_id "aaLpORCf4HvhVePw3LY8jQAAAAg"]
[Sat Feb 28 21:10:19.727585 2026] [:error] [pid 39183:tid 39201] [client 185.82.72.9:28465] [client 185.82.72.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/rk2.php"] [unique_id "aaLpOxCf4HvhVePw3LY8nQAAAAk"]
[Sat Feb 28 21:10:21.945259 2026] [proxy_fcgi:error] [pid 52460:tid 52472] [client 45.86.200.244:62289] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:10:22.582485 2026] [:error] [pid 52460:tid 52475] [client 45.86.200.244:62289] [client 45.86.200.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/certificates/past.php"] [unique_id "aaLpPrLWOogAgHGh62SA1gAAAYw"]
[Sat Feb 28 21:10:23.858486 2026] [proxy_fcgi:error] [pid 52460:tid 52469] [client 45.86.200.251:50411] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:10:24.685966 2026] [:error] [pid 52460:tid 52467] [client 45.86.200.251:50411] [client 45.86.200.251] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/edit-tags.php"] [unique_id "aaLpQLLWOogAgHGh62SA2gAAAYQ"]
[Sat Feb 28 21:10:25.377090 2026] [proxy_fcgi:error] [pid 49763:tid 49786] [client 45.86.200.229:44607] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:10:27.416742 2026] [:error] [pid 49763:tid 49780] [client 45.86.200.229:44607] [client 45.86.200.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/dist/footer-default.php"] [unique_id "aaLpQ7THSOG_yf2PpqFd4QAAAc4"]
[Sat Feb 28 21:10:28.417171 2026] [:error] [pid 49763:tid 49771] [client 45.86.200.227:50675] [client 45.86.200.227] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/widgets/class-wp-widget-meta-request.php"] [unique_id "aaLpRLTHSOG_yf2PpqFd7AAAAcU"]
[Sat Feb 28 21:10:29.478189 2026] [:error] [pid 39183:tid 39203] [client 45.86.200.251:60339] [client 45.86.200.251] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/dist/edit-widgets/bypass.php"] [unique_id "aaLpRRCf4HvhVePw3LY8xwAAAAs"]
[Sat Feb 28 21:10:31.025600 2026] [:error] [pid 49763:tid 49778] [client 45.86.200.250:59801] [client 45.86.200.250] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/l10n/wp-login.php"] [unique_id "aaLpR7THSOG_yf2PpqFd9gAAAcw"]
[Sat Feb 28 21:10:35.632832 2026] [:error] [pid 49763:tid 49774] [client 45.86.200.217:59831] [client 45.86.200.217] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/widgets/wp-ss.php"] [unique_id "aaLpS7THSOG_yf2PpqFeJgAAAcg"]
[Sat Feb 28 21:10:36.245880 2026] [:error] [pid 39183:tid 39196] [client 45.86.200.215:48409] [client 45.86.200.215] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/IXR/xsec1.php"] [unique_id "aaLpTBCf4HvhVePw3LY82wAAAAQ"]
[Sat Feb 28 21:10:38.071755 2026] [:error] [pid 49763:tid 49766] [client 45.86.200.213:43787] [client 45.86.200.213] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/crystal/sad.php"] [unique_id "aaLpTrTHSOG_yf2PpqFeMgAAAcA"]
[Sat Feb 28 21:10:38.796638 2026] [:error] [pid 52460:tid 52475] [client 45.86.200.248:33211] [client 45.86.200.248] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aaLpTrLWOogAgHGh62SA3gAAAYw"]
[Sat Feb 28 21:10:40.083189 2026] [:error] [pid 49763:tid 49782] [client 185.82.72.9:22671] [client 185.82.72.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/class-phpmailer-beta.php"] [unique_id "aaLpULTHSOG_yf2PpqFeOQAAAdA"]
[Sat Feb 28 21:10:40.779461 2026] [:error] [pid 39183:tid 39204] [client 45.86.200.216:25233] [client 45.86.200.216] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/ms-file.php"] [unique_id "aaLpUBCf4HvhVePw3LY85gAAAAw"]
[Sat Feb 28 21:10:41.466282 2026] [:error] [pid 49763:tid 49767] [client 45.86.200.228:55611] [client 45.86.200.228] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.200.228, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aaLpUbTHSOG_yf2PpqFePwAAAcE"]
[Sat Feb 28 21:10:41.470094 2026] [proxy_fcgi:error] [pid 49763:tid 49767] [client 45.86.200.228:55611] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:10:41.834283 2026] [:error] [pid 49763:tid 49781] [client 45.86.200.228:55611] [client 45.86.200.228] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/widgets/av.php"] [unique_id "aaLpUbTHSOG_yf2PpqFeQQAAAc8"]
[Sat Feb 28 21:10:43.218824 2026] [proxy_fcgi:error] [pid 49763:tid 49776] [client 45.86.200.214:43935] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:10:43.535451 2026] [:error] [pid 49763:tid 49770] [client 45.86.200.214:43935] [client 45.86.200.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aaLpU7THSOG_yf2PpqFeSwAAAcQ"]
[Sat Feb 28 21:10:45.310282 2026] [:error] [pid 49763:tid 49788] [client 45.86.200.227:38373] [client 45.86.200.227] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/network.php"] [unique_id "aaLpVbTHSOG_yf2PpqFeYQAAAdY"]
[Sat Feb 28 21:10:47.049870 2026] [proxy_fcgi:error] [pid 39183:tid 39193] [client 45.86.200.221:53581] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:10:49.920702 2026] [:error] [pid 39183:tid 39209] [client 45.86.200.221:53581] [client 45.86.200.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/XML/content.php"] [unique_id "aaLpWRCf4HvhVePw3LY9AgAAABE"]
[Sat Feb 28 21:10:50.580889 2026] [:error] [pid 39183:tid 39196] [client 45.86.200.247:53901] [client 45.86.200.247] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/pomo/item.php"] [unique_id "aaLpWhCf4HvhVePw3LY9BgAAAAQ"]
[Sat Feb 28 21:10:52.263994 2026] [:error] [pid 39183:tid 39203] [client 185.82.72.206:27827] [client 185.82.72.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/pomo/plugins.php"] [unique_id "aaLpXBCf4HvhVePw3LY9GAAAAAs"]
[Sat Feb 28 21:10:53.507719 2026] [:error] [pid 52460:tid 52481] [client 45.86.200.250:33321] [client 45.86.200.250] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/install.php"] [unique_id "aaLpXbLWOogAgHGh62SA6QAAAZI"]
[Sat Feb 28 21:10:54.731386 2026] [proxy_fcgi:error] [pid 49763:tid 49774] [client 45.86.200.246:58615] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:10:55.559344 2026] [:error] [pid 49763:tid 49777] [client 45.86.200.246:58615] [client 45.86.200.246] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.200.246, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/wp-login.php"] [unique_id "aaLpX7THSOG_yf2PpqFehgAAAcs"]
[Sat Feb 28 21:10:56.526060 2026] [:error] [pid 49763:tid 49774] [client 45.86.200.246:58615] [client 45.86.200.246] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/widgets/class-wp-nav-widgets.php"] [unique_id "aaLpYLTHSOG_yf2PpqFeigAAAcg"]
[Sat Feb 28 21:10:59.139623 2026] [:error] [pid 49763:tid 49767] [client 45.86.200.215:63035] [client 45.86.200.215] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/sitemaps/providers/doc.php"] [unique_id "aaLpY7THSOG_yf2PpqFelQAAAcE"]
[Sat Feb 28 21:10:59.898406 2026] [proxy_fcgi:error] [pid 39183:tid 39197] [client 45.86.200.229:59913] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:11:00.223131 2026] [:error] [pid 39183:tid 39203] [client 45.86.200.229:59913] [client 45.86.200.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/rest-api/1.php"] [unique_id "aaLpZBCf4HvhVePw3LY9KAAAAAs"]
[Sat Feb 28 21:11:01.135605 2026] [:error] [pid 52460:tid 52463] [client 45.86.200.221:51347] [client 45.86.200.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/fonts/class_api.php"] [unique_id "aaLpZbLWOogAgHGh62SA7wAAAYA"]
[Sat Feb 28 21:11:01.965737 2026] [proxy_fcgi:error] [pid 52460:tid 52474] [client 45.86.200.226:24279] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:11:02.917729 2026] [:error] [pid 52460:tid 52470] [client 45.86.200.226:24279] [client 45.86.200.226] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/smilies/admin.php"] [unique_id "aaLpZrLWOogAgHGh62SA9AAAAYc"]
[Sat Feb 28 21:11:04.376520 2026] [:error] [pid 39292:tid 39315] [client 185.82.72.106:59771] [client 185.82.72.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/IXR/about.php"] [unique_id "aaLpaKIAO5fN7BxyqcF5aQAAANU"]
[Sat Feb 28 21:11:05.281944 2026] [proxy_fcgi:error] [pid 11791:tid 11797] [client 45.86.200.248:60025] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:11:05.952488 2026] [proxy_fcgi:error] [pid 11791:tid 11817] [client 45.86.200.248:60025] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:11:06.644950 2026] [:error] [pid 11791:tid 11813] [client 45.86.200.248:60025] [client 45.86.200.248] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/class-wp-customize-manager-interpreter.php"] [unique_id "aaLpamuX5e1Q32gqxH3DtAAAARQ"]
[Sat Feb 28 21:11:07.301947 2026] [:error] [pid 49763:tid 49783] [client 185.82.72.111:58405] [client 185.82.72.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/bypass.php"] [unique_id "aaLpa7THSOG_yf2PpqFezQAAAdE"]
[Sat Feb 28 21:11:08.298286 2026] [:error] [pid 39292:tid 39314] [client 185.82.72.111:34139] [client 185.82.72.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/count.php"] [unique_id "aaLpbKIAO5fN7BxyqcF5awAAANQ"]
[Sat Feb 28 21:11:08.959883 2026] [proxy_fcgi:error] [pid 39183:tid 39201] [client 45.86.200.215:48437] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:11:11.499738 2026] [:error] [pid 39183:tid 39194] [client 45.86.200.215:48437] [client 45.86.200.215] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "aaLpbxCf4HvhVePw3LY9XgAAAAI"]
[Sat Feb 28 21:11:12.826853 2026] [:error] [pid 49763:tid 49769] [client 45.86.200.219:22021] [client 45.86.200.219] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/usr/local/apache/modsecurity-cwaf/rules/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder||dwelectservices.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "dwelectservices.com.au"] [uri "/images/stories/themes.php"] [unique_id "aaLpcLTHSOG_yf2PpqFe5QAAAcM"]
[Sat Feb 28 21:11:13.161789 2026] [:error] [pid 49763:tid 49771] [client 45.86.200.219:22021] [client 45.86.200.219] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/theme-compat/footer-embed-function.php"] [unique_id "aaLpcbTHSOG_yf2PpqFe5gAAAcU"]
[Sat Feb 28 21:11:14.740666 2026] [:error] [pid 49763:tid 49769] [client 45.86.200.217:32903] [client 45.86.200.217] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/l10n/class-wp-translation-file-mo-event.php"] [unique_id "aaLpcrTHSOG_yf2PpqFe8gAAAcM"]
[Sat Feb 28 21:11:15.399161 2026] [:error] [pid 39183:tid 39201] [client 45.86.200.230:52533] [client 45.86.200.230] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/vars-soap.php"] [unique_id "aaLpcxCf4HvhVePw3LY9bQAAAAk"]
[Sat Feb 28 21:11:16.762864 2026] [proxy_fcgi:error] [pid 39183:tid 39211] [client 45.86.200.225:41907] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:11:18.157229 2026] [:error] [pid 39183:tid 39200] [client 45.86.200.225:41907] [client 45.86.200.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/id3/wp-work.php"] [unique_id "aaLpdhCf4HvhVePw3LY9gwAAAAg"]
[Sat Feb 28 21:11:19.414667 2026] [:error] [pid 52460:tid 52484] [client 185.82.72.111:22451] [client 185.82.72.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/class-wp-taxonomy.editor.php"] [unique_id "aaLpd7LWOogAgHGh62SBDQAAAZU"]
[Sat Feb 28 21:11:20.442902 2026] [:error] [pid 39185:tid 39248] [client 45.86.200.219:61391] [client 45.86.200.219] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/wp-conflg.php"] [unique_id "aaLpeBVE-FfM89u7BQagswAAAII"]
[Sat Feb 28 21:11:21.124764 2026] [proxy_fcgi:error] [pid 22194:tid 22199] [client 45.86.200.233:42117] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:11:23.196120 2026] [:error] [pid 22194:tid 22209] [client 45.86.200.233:42117] [client 45.86.200.233] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/interactivity-api/interactivity-api-xml.php"] [unique_id "aaLpe36mbajs3bzQGyukCQAAAU0"]
[Sat Feb 28 21:11:24.181869 2026] [:error] [pid 39183:tid 39195] [client 45.86.200.236:49905] [client 45.86.200.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/colour.php"] [unique_id "aaLpfBCf4HvhVePw3LY9jQAAAAM"]
[Sat Feb 28 21:11:24.843626 2026] [proxy_fcgi:error] [pid 39183:tid 39193] [client 185.82.72.182:30847] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:11:25.168287 2026] [:error] [pid 39183:tid 39192] [client 185.82.72.182:30847] [client 185.82.72.182] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/customize/class-wp-customize-background-position-control-variable.php"] [unique_id "aaLpfRCf4HvhVePw3LY9lAAAAAA"]
[Sat Feb 28 21:11:25.796478 2026] [:error] [pid 39183:tid 39211] [client 185.82.72.9:60697] [client 185.82.72.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/include.php"] [unique_id "aaLpfRCf4HvhVePw3LY9mAAAABM"]
[Sat Feb 28 21:11:27.120710 2026] [:error] [pid 52460:tid 52477] [client 45.86.200.214:45371] [client 45.86.200.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/imgareaselect/wp-login.php"] [unique_id "aaLpf7LWOogAgHGh62SBOQAAAY4"]
[Sat Feb 28 21:11:28.727807 2026] [proxy_fcgi:error] [pid 52460:tid 52486] [client 45.86.200.245:60273] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:11:29.047444 2026] [:error] [pid 52460:tid 52477] [client 45.86.200.245:60273] [client 45.86.200.245] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/l10n/class-wp-translations-interface.php"] [unique_id "aaLpgbLWOogAgHGh62SBSgAAAY4"]
[Sat Feb 28 21:11:30.705136 2026] [:error] [pid 39292:tid 39304] [client 45.86.200.244:27143] [client 45.86.200.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/about5.php"] [unique_id "aaLpgqIAO5fN7BxyqcF5hgAAAMo"]
[Sat Feb 28 21:11:33.007271 2026] [:error] [pid 39183:tid 39198] [client 185.82.72.103:43493] [client 185.82.72.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/ID3/db.php"] [unique_id "aaLphRCf4HvhVePw3LY9swAAAAY"]
[Sat Feb 28 21:11:34.375843 2026] [:error] [pid 49763:tid 49766] [client 45.86.200.228:42651] [client 45.86.200.228] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/dist/bypass.php"] [unique_id "aaLphrTHSOG_yf2PpqFfJAAAAcA"]
[Sat Feb 28 21:11:35.043369 2026] [proxy_fcgi:error] [pid 39292:tid 39295] [client 45.86.200.245:33477] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:11:36.456856 2026] [:error] [pid 39292:tid 39301] [client 45.86.200.245:33477] [client 45.86.200.245] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/sitemaps/wp-conflg.php"] [unique_id "aaLpiKIAO5fN7BxyqcF5kQAAAMc"]
[Sat Feb 28 21:11:37.685772 2026] [:error] [pid 39183:tid 39199] [client 45.86.200.239:40479] [client 45.86.200.239] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.php"] [unique_id "aaLpiRCf4HvhVePw3LY9ygAAAAc"]
[Sat Feb 28 21:11:38.730247 2026] [:error] [pid 49763:tid 49782] [client 185.82.72.179:62173] [client 185.82.72.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/login.php"] [unique_id "aaLpirTHSOG_yf2PpqFfLgAAAdA"]
[Sat Feb 28 21:11:39.455871 2026] [proxy_fcgi:error] [pid 49763:tid 49766] [client 45.86.200.217:52601] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:11:40.162741 2026] [:error] [pid 49763:tid 49771] [client 45.86.200.217:52601] [client 45.86.200.217] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/sitemaps/chosen.php"] [unique_id "aaLpjLTHSOG_yf2PpqFfNgAAAcU"]
[Sat Feb 28 21:11:40.813794 2026] [proxy_fcgi:error] [pid 49763:tid 49774] [client 45.86.200.216:27505] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:11:42.020996 2026] [:error] [pid 49763:tid 49766] [client 45.86.200.216:27505] [client 45.86.200.216] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/Cache/index.php"] [unique_id "aaLpjrTHSOG_yf2PpqFfQwAAAcA"]
[Sat Feb 28 21:11:42.717993 2026] [:error] [pid 39183:tid 39204] [client 185.82.72.9:58593] [client 185.82.72.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/dist/about.php"] [unique_id "aaLpjhCf4HvhVePw3LY94QAAAAw"]
[Sat Feb 28 21:11:43.673344 2026] [:error] [pid 39183:tid 39197] [client 45.86.200.221:54711] [client 45.86.200.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aaLpjxCf4HvhVePw3LY96wAAAAU"]
[Sat Feb 28 21:11:46.108317 2026] [:error] [pid 39185:tid 39250] [client 185.82.72.104:48911] [client 185.82.72.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/simi.php"] [unique_id "aaLpkhVE-FfM89u7BQagwQAAAIQ"]
[Sat Feb 28 21:11:47.524895 2026] [:error] [pid 52460:tid 52473] [client 45.86.200.214:47755] [client 45.86.200.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Requests/Text/index.php"] [unique_id "aaLpk7LWOogAgHGh62SBZgAAAYo"]
[Sat Feb 28 21:11:48.590259 2026] [:error] [pid 52460:tid 52476] [client 45.86.200.239:60751] [client 45.86.200.239] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/sitemaps/abcd.php"] [unique_id "aaLplLLWOogAgHGh62SBbAAAAY0"]
[Sat Feb 28 21:11:49.255991 2026] [:error] [pid 39184:tid 39221] [client 45.86.200.213:64605] [client 45.86.200.213] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/ID3/rk2.php"] [unique_id "aaLplVtZF9Zd_U7easC-1QAAAEI"]
[Sat Feb 28 21:11:50.101186 2026] [:error] [pid 49763:tid 49784] [client 45.86.200.245:20307] [client 45.86.200.245] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/widgets/class-wp-widget-search-interpreter.php"] [unique_id "aaLplrTHSOG_yf2PpqFfZwAAAdI"]
[Sat Feb 28 21:11:51.932900 2026] [:error] [pid 39183:tid 39209] [client 45.86.200.233:51849] [client 45.86.200.233] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/block-template-utils-other.php"] [unique_id "aaLplxCf4HvhVePw3LY-CwAAABE"]
[Sat Feb 28 21:11:52.870204 2026] [proxy_fcgi:error] [pid 49763:tid 49777] [client 45.86.200.214:59235] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:11:53.214359 2026] [:error] [pid 49763:tid 49767] [client 45.86.200.214:59235] [client 45.86.200.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/sodium_compat/lib/widget-group.php"] [unique_id "aaLpmbTHSOG_yf2PpqFfjwAAAcE"]
[Sat Feb 28 21:11:54.316425 2026] [:error] [pid 52460:tid 52484] [client 185.82.72.182:27035] [client 185.82.72.182] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/jcrop/about.php"] [unique_id "aaLpmrLWOogAgHGh62SBdAAAAZU"]
[Sat Feb 28 21:11:55.282854 2026] [:error] [pid 39183:tid 39216] [client 45.86.200.238:57729] [client 45.86.200.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/customize/chosen.php"] [unique_id "aaLpmxCf4HvhVePw3LY-GQAAABg"]
[Sat Feb 28 21:11:56.635307 2026] [proxy_fcgi:error] [pid 49763:tid 49787] [client 45.86.200.242:36159] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:11:58.131974 2026] [:error] [pid 49763:tid 49781] [client 45.86.200.242:36159] [client 45.86.200.242] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/plugin.php"] [unique_id "aaLpnrTHSOG_yf2PpqFfswAAAc8"]
[Sat Feb 28 21:11:58.754516 2026] [:error] [pid 49763:tid 49773] [client 45.86.200.226:20459] [client 45.86.200.226] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/class-wp-scripts-query.php"] [unique_id "aaLpnrTHSOG_yf2PpqFfugAAAcc"]
[Sat Feb 28 21:11:59.680231 2026] [proxy_fcgi:error] [pid 52460:tid 52475] [client 45.86.200.248:56103] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:11:59.982109 2026] [:error] [pid 52460:tid 52465] [client 45.86.200.248:56103] [client 45.86.200.248] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/ID3/module.audio-license.php"] [unique_id "aaLpn7LWOogAgHGh62SBgAAAAYI"]
[Sat Feb 28 21:12:02.074355 2026] [:error] [pid 49763:tid 49771] [client 45.86.200.232:20287] [client 45.86.200.232] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/class-wp-error-module.php"] [unique_id "aaLporTHSOG_yf2PpqFf2wAAAcU"]
[Sat Feb 28 21:12:02.793130 2026] [proxy_fcgi:error] [pid 39292:tid 39318] [client 45.86.200.225:38145] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:12:03.140156 2026] [proxy_fcgi:error] [pid 39292:tid 39313] [client 45.86.200.225:38145] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:12:03.452469 2026] [:error] [pid 39292:tid 39295] [client 45.86.200.225:38145] [client 45.86.200.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/litespeed.php"] [unique_id "aaLpo6IAO5fN7BxyqcF5rAAAAME"]
[Sat Feb 28 21:12:05.514238 2026] [:error] [pid 39184:tid 39239] [client 185.82.72.109:39097] [client 185.82.72.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/dist/alam.php"] [unique_id "aaLppVtZF9Zd_U7easC-7gAAAFQ"]
[Sat Feb 28 21:12:06.216241 2026] [proxy_fcgi:error] [pid 52460:tid 52465] [client 45.86.200.249:36733] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:12:06.566128 2026] [:error] [pid 52460:tid 52479] [client 45.86.200.249:36733] [client 45.86.200.249] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/block-bindings/imagess.php"] [unique_id "aaLpprLWOogAgHGh62SBlAAAAZA"]
[Sat Feb 28 21:12:07.511714 2026] [:error] [pid 49763:tid 49787] [client 45.86.200.231:53397] [client 45.86.200.231] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/default-filters-edit.php"] [unique_id "aaLpp7THSOG_yf2PpqFf8gAAAdU"]
[Sat Feb 28 21:12:08.226985 2026] [proxy_fcgi:error] [pid 39185:tid 39256] [client 185.82.72.107:22097] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:12:09.418495 2026] [proxy_fcgi:error] [pid 39185:tid 39248] [client 185.82.72.107:22097] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:12:09.728239 2026] [:error] [pid 39185:tid 39249] [client 185.82.72.107:22097] [client 185.82.72.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Requests/Auth/index.php"] [unique_id "aaLpqRVE-FfM89u7BQag5gAAAIM"]
[Sat Feb 28 21:12:11.771053 2026] [:error] [pid 49763:tid 49776] [client 45.86.200.245:24985] [client 45.86.200.245] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Text/Diff/Engine/theme.php"] [unique_id "aaLpq7THSOG_yf2PpqFgDgAAAco"]
[Sat Feb 28 21:12:12.402470 2026] [proxy_fcgi:error] [pid 49763:tid 49778] [client 185.82.72.102:22555] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:12:12.729627 2026] [:error] [pid 49763:tid 49781] [client 185.82.72.102:22555] [client 185.82.72.102] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/ID3/shell.php"] [unique_id "aaLprLTHSOG_yf2PpqFgGAAAAc8"]
[Sat Feb 28 21:12:13.377244 2026] [:error] [pid 52460:tid 52469] [client 185.82.72.206:25241] [client 185.82.72.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/customize/class-wp-customize-selective-refresh-library.php"] [unique_id "aaLprbLWOogAgHGh62SBngAAAYY"]
[Sat Feb 28 21:12:14.023936 2026] [proxy_fcgi:error] [pid 39184:tid 39227] [client 45.86.200.227:28107] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:12:14.662386 2026] [:error] [pid 39184:tid 39235] [client 45.86.200.227:28107] [client 45.86.200.227] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Requests/library/wp-login.php"] [unique_id "aaLprltZF9Zd_U7easC_DQAAAFA"]
[Sat Feb 28 21:12:15.303554 2026] [:error] [pid 39183:tid 39207] [client 185.82.72.10:36357] [client 185.82.72.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/interactivity-api/about.php"] [unique_id "aaLprxCf4HvhVePw3LY-WwAAAA8"]
[Sat Feb 28 21:12:16.179197 2026] [proxy_fcgi:error] [pid 39183:tid 39214] [client 45.86.200.250:45895] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:12:18.281224 2026] [:error] [pid 39183:tid 39215] [client 45.86.200.250:45895] [client 45.86.200.250] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/wp-2019.php"] [unique_id "aaLpshCf4HvhVePw3LY-ggAAABc"]
[Sat Feb 28 21:12:18.904741 2026] [:error] [pid 39183:tid 39206] [client 45.86.200.241:20879] [client 45.86.200.241] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/info.php"] [unique_id "aaLpshCf4HvhVePw3LY-jAAAAA4"]
[Sat Feb 28 21:12:19.851831 2026] [:error] [pid 39183:tid 39207] [client 45.86.200.235:61175] [client 45.86.200.235] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/log.php"] [unique_id "aaLpsxCf4HvhVePw3LY-lQAAAA8"]
[Sat Feb 28 21:12:20.482763 2026] [:error] [pid 39184:tid 39234] [client 45.86.200.224:27061] [client 45.86.200.224] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime-num.php"] [unique_id "aaLptFtZF9Zd_U7easC_FgAAAE8"]
[Sat Feb 28 21:12:21.099787 2026] [:error] [pid 39184:tid 39236] [client 45.86.200.224:20977] [client 45.86.200.224] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-entry.min-object.php"] [unique_id "aaLptVtZF9Zd_U7easC_FwAAAFE"]
[Sat Feb 28 21:12:23.453433 2026] [:error] [pid 49763:tid 49787] [client 45.86.200.228:24429] [client 45.86.200.228] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/aw.php"] [unique_id "aaLpt7THSOG_yf2PpqFgXQAAAdU"]
[Sat Feb 28 21:12:26.819149 2026] [:error] [pid 39184:tid 39227] [client 45.86.200.221:59953] [client 45.86.200.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/IXR/db.php"] [unique_id "aaLpultZF9Zd_U7easC_LAAAAEg"]
[Sat Feb 28 21:12:28.608066 2026] [:error] [pid 39183:tid 39216] [client 45.86.200.247:37659] [client 45.86.200.247] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/install.php"] [unique_id "aaLpvBCf4HvhVePw3LY-rQAAABg"]
[Sat Feb 28 21:12:29.744906 2026] [proxy_fcgi:error] [pid 49763:tid 49772] [client 45.86.200.247:20505] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:12:30.107435 2026] [:error] [pid 49763:tid 49768] [client 45.86.200.247:20505] [client 45.86.200.247] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/dist/install.php"] [unique_id "aaLpvrTHSOG_yf2PpqFgeAAAAcI"]
[Sat Feb 28 21:12:30.810894 2026] [:error] [pid 49763:tid 49777] [client 45.86.200.217:36337] [client 45.86.200.217] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/style-engine/dedi1.php"] [unique_id "aaLpvrTHSOG_yf2PpqFggAAAAcs"]
[Sat Feb 28 21:12:32.153686 2026] [:error] [pid 39292:tid 39315] [client 45.86.200.223:48901] [client 45.86.200.223] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/template-less.php"] [unique_id "aaLpwKIAO5fN7BxyqcF53gAAANU"]
[Sat Feb 28 21:12:32.802573 2026] [:error] [pid 11791:tid 11801] [client 45.86.200.232:51695] [client 45.86.200.232] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/pomo/alfa-rex.php"] [unique_id "aaLpwGuX5e1Q32gqxH3D7gAAAQg"]
[Sat Feb 28 21:12:36.784789 2026] [:error] [pid 39183:tid 39201] [client 185.82.72.108:42125] [client 185.82.72.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/min.php"] [unique_id "aaLpxBCf4HvhVePw3LY-wwAAAAk"]
[Sat Feb 28 21:12:37.398358 2026] [:error] [pid 11791:tid 11812] [client 185.82.72.182:27517] [client 185.82.72.182] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/wp-conflg.php"] [unique_id "aaLpxWuX5e1Q32gqxH3D-AAAARM"]
[Sat Feb 28 21:12:39.355310 2026] [:error] [pid 39183:tid 39200] [client 45.86.200.230:39303] [client 45.86.200.230] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/file.php"] [unique_id "aaLpxxCf4HvhVePw3LY-0QAAAAg"]
[Sat Feb 28 21:12:40.831468 2026] [:error] [pid 49763:tid 49775] [client 45.86.200.222:60975] [client 45.86.200.222] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/block-patterns/about.php"] [unique_id "aaLpyLTHSOG_yf2PpqFglgAAAck"]
[Sat Feb 28 21:12:42.118138 2026] [:error] [pid 49763:tid 49778] [client 45.86.200.241:51855] [client 45.86.200.241] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/load.php"] [unique_id "aaLpyrTHSOG_yf2PpqFgnwAAAcw"]
[Sat Feb 28 21:12:42.967969 2026] [:error] [pid 49763:tid 49776] [client 45.86.200.222:25883] [client 45.86.200.222] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/ID3/chosen.php"] [unique_id "aaLpyrTHSOG_yf2PpqFgoAAAAco"]
[Sat Feb 28 21:12:43.589157 2026] [:error] [pid 52460:tid 52479] [client 185.82.72.106:64951] [client 185.82.72.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/class-wp-theme-float.php"] [unique_id "aaLpy7LWOogAgHGh62SCDAAAAZA"]
[Sat Feb 28 21:12:45.649466 2026] [:error] [pid 39185:tid 39262] [client 45.86.200.238:60299] [client 45.86.200.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/widgets/wp-style.php"] [unique_id "aaLpzRVE-FfM89u7BQahBgAAAJA"]
[Sat Feb 28 21:12:47.033315 2026] [proxy_fcgi:error] [pid 49763:tid 49785] [client 185.82.72.103:44241] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:12:47.374400 2026] [:error] [pid 49763:tid 49772] [client 185.82.72.103:44241] [client 185.82.72.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/widgets/autoload_classmap.php"] [unique_id "aaLpz7THSOG_yf2PpqFgsgAAAcY"]
[Sat Feb 28 21:12:48.929223 2026] [proxy_fcgi:error] [pid 49763:tid 49776] [client 45.86.200.247:49291] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:12:49.247739 2026] [:error] [pid 49763:tid 49767] [client 45.86.200.247:49291] [client 45.86.200.247] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/block-bindings/admin.php"] [unique_id "aaLp0bTHSOG_yf2PpqFgwgAAAcE"]
[Sat Feb 28 21:12:49.921018 2026] [:error] [pid 39292:tid 39300] [client 45.86.200.234:20069] [client 45.86.200.234] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/PHPMailer/autoload_classmap.php"] [unique_id "aaLp0aIAO5fN7BxyqcF5-gAAAMY"]
[Sat Feb 28 21:12:50.927803 2026] [:error] [pid 39183:tid 39212] [client 185.82.72.102:30243] [client 185.82.72.102] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/theme-compat/db.php"] [unique_id "aaLp0hCf4HvhVePw3LY-9gAAABQ"]
[Sat Feb 28 21:12:51.914485 2026] [proxy_fcgi:error] [pid 39183:tid 39213] [client 45.86.200.235:39261] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:12:52.221168 2026] [proxy_fcgi:error] [pid 39183:tid 39207] [client 45.86.200.235:39261] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:12:53.189636 2026] [proxy_fcgi:error] [pid 39183:tid 39195] [client 45.86.200.235:39261] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:12:54.471749 2026] [:error] [pid 39183:tid 39201] [client 45.86.200.235:39261] [client 45.86.200.235] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/system.php"] [unique_id "aaLp1hCf4HvhVePw3LY_DwAAAAk"]
[Sat Feb 28 21:12:55.406225 2026] [:error] [pid 39183:tid 39200] [client 45.86.200.239:64191] [client 45.86.200.239] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/block-bindings/about.php"] [unique_id "aaLp1xCf4HvhVePw3LY_GQAAAAg"]
[Sat Feb 28 21:12:56.665048 2026] [:error] [pid 39183:tid 39196] [client 45.86.200.240:29473] [client 45.86.200.240] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/customize/class-wp-customize-upload-control-cookie.php"] [unique_id "aaLp2BCf4HvhVePw3LY_IwAAAAQ"]
[Sat Feb 28 21:12:57.294349 2026] [:error] [pid 49763:tid 49768] [client 185.82.72.109:62631] [client 185.82.72.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/ID3/simi.php"] [unique_id "aaLp2bTHSOG_yf2PpqFgzwAAAcI"]
[Sat Feb 28 21:12:57.929068 2026] [:error] [pid 39183:tid 39212] [client 45.86.200.242:56855] [client 45.86.200.242] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/class-wp-taxonomy-sample.php"] [unique_id "aaLp2RCf4HvhVePw3LY_KQAAABQ"]
[Sat Feb 28 21:13:51.515540 2026] [autoindex:error] [pid 39184:tid 39222] [client 45.86.200.215:40189] AH01276: Cannot serve directory /home/dwelects/public_html/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 21:37:14.818814 2026] [:error] [pid 39184:tid 39236] [client 40.85.218.222:50571] [client 40.85.218.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-good.php"] [unique_id "aaLviltZF9Zd_U7easDMCwAAAFE"]
[Sat Feb 28 21:37:15.662110 2026] [:error] [pid 39184:tid 39225] [client 40.85.218.222:58314] [client 40.85.218.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-good.php"] [unique_id "aaLvi1tZF9Zd_U7easDMDAAAAEY"]
[Sat Feb 28 21:37:16.493433 2026] [:error] [pid 39183:tid 39206] [client 40.85.218.222:48208] [client 40.85.218.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-good.php"] [unique_id "aaLvjBCf4HvhVePw3LZaPwAAAA4"]
[Sat Feb 28 21:37:17.342203 2026] [:error] [pid 39292:tid 39296] [client 40.85.218.222:58306] [client 40.85.218.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-good.php"] [unique_id "aaLvjaIAO5fN7BxyqcGEpQAAAMI"]
[Sat Feb 28 21:51:21.043259 2026] [proxy_fcgi:error] [pid 52460:tid 52484] [client 20.220.8.64:50113] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:51:21.260117 2026] [proxy_fcgi:error] [pid 52460:tid 52468] [client 20.220.8.64:50113] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:51:21.487054 2026] [proxy_fcgi:error] [pid 52460:tid 52472] [client 20.220.8.64:50113] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:51:21.702580 2026] [proxy_fcgi:error] [pid 52460:tid 52482] [client 20.220.8.64:50113] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:51:21.915713 2026] [proxy_fcgi:error] [pid 52460:tid 52463] [client 20.220.8.64:50113] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:51:22.125045 2026] [proxy_fcgi:error] [pid 52460:tid 52477] [client 20.220.8.64:50113] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:51:22.336203 2026] [proxy_fcgi:error] [pid 52460:tid 52465] [client 20.220.8.64:50113] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:51:22.548461 2026] [proxy_fcgi:error] [pid 52460:tid 52471] [client 20.220.8.64:50113] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:51:22.775691 2026] [proxy_fcgi:error] [pid 52460:tid 52467] [client 20.220.8.64:50113] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:51:22.987136 2026] [proxy_fcgi:error] [pid 52460:tid 52481] [client 20.220.8.64:50113] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:51:23.227874 2026] [:error] [pid 52460:tid 52487] [client 20.220.8.64:50113] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp9.php"] [unique_id "aaLy27LWOogAgHGh62SgugAAAZg"]
[Sat Feb 28 21:51:23.677493 2026] [:error] [pid 49763:tid 49770] [client 20.220.8.64:50151] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp9.php"] [unique_id "aaLy27THSOG_yf2PpqGZsQAAAcQ"]
[Sat Feb 28 21:51:24.108461 2026] [:error] [pid 49763:tid 49790] [client 20.220.8.64:50148] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp9.php"] [unique_id "aaLy3LTHSOG_yf2PpqGZtQAAAdg"]
[Sat Feb 28 21:51:24.558677 2026] [:error] [pid 49763:tid 49773] [client 20.220.8.64:50125] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp9.php"] [unique_id "aaLy3LTHSOG_yf2PpqGZuwAAAcc"]
[Sat Feb 28 21:51:24.975218 2026] [:error] [pid 52460:tid 52483] [client 20.220.8.64:50137] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/path.php"] [unique_id "aaLy3LLWOogAgHGh62SguwAAAZQ"]
[Sat Feb 28 21:51:25.457456 2026] [:error] [pid 39183:tid 39205] [client 20.220.8.64:50169] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/path.php"] [unique_id "aaLy3RCf4HvhVePw3LZnvAAAAA0"]
[Sat Feb 28 21:51:25.876394 2026] [:error] [pid 52460:tid 52464] [client 20.220.8.64:50173] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/path.php"] [unique_id "aaLy3bLWOogAgHGh62SgvgAAAYE"]
[Sat Feb 28 21:51:26.307871 2026] [:error] [pid 49763:tid 49785] [client 20.220.8.64:50132] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/path.php"] [unique_id "aaLy3rTHSOG_yf2PpqGZvwAAAdM"]
[Sat Feb 28 21:51:26.760178 2026] [:error] [pid 39185:tid 39252] [client 20.220.8.64:50167] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wdf.php"] [unique_id "aaLy3hVE-FfM89u7BQap1gAAAIY"]
[Sat Feb 28 21:51:27.188584 2026] [:error] [pid 39292:tid 39307] [client 20.220.8.64:50154] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wdf.php"] [unique_id "aaLy36IAO5fN7BxyqcGJVAAAAM0"]
[Sat Feb 28 21:51:27.619303 2026] [:error] [pid 49763:tid 49776] [client 20.220.8.64:50128] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wdf.php"] [unique_id "aaLy37THSOG_yf2PpqGZxAAAAco"]
[Sat Feb 28 21:51:28.065039 2026] [:error] [pid 49763:tid 49789] [client 20.220.8.64:50168] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wdf.php"] [unique_id "aaLy4LTHSOG_yf2PpqGZyAAAAdc"]
[Sat Feb 28 21:51:28.503204 2026] [:error] [pid 39183:tid 39199] [client 20.220.8.64:50122] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fleen.php"] [unique_id "aaLy4BCf4HvhVePw3LZnwQAAAAc"]
[Sat Feb 28 21:51:28.935186 2026] [:error] [pid 39183:tid 39198] [client 20.220.8.64:50138] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fleen.php"] [unique_id "aaLy4BCf4HvhVePw3LZnxAAAAAY"]
[Sat Feb 28 21:51:29.453148 2026] [:error] [pid 11791:tid 11800] [client 20.220.8.64:50163] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fleen.php"] [unique_id "aaLy4WuX5e1Q32gqxH3PeQAAAQc"]
[Sat Feb 28 21:51:29.883851 2026] [:error] [pid 39184:tid 39219] [client 20.220.8.64:50112] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fleen.php"] [unique_id "aaLy4VtZF9Zd_U7easDVHwAAAEA"]
[Sat Feb 28 21:51:30.332453 2026] [:error] [pid 49763:tid 49785] [client 20.220.8.64:50139] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-tem.php"] [unique_id "aaLy4rTHSOG_yf2PpqGZ0QAAAdM"]
[Sat Feb 28 21:51:30.783453 2026] [:error] [pid 39183:tid 39202] [client 20.220.8.64:50106] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-tem.php"] [unique_id "aaLy4hCf4HvhVePw3LZnyQAAAAo"]
[Sat Feb 28 21:51:31.255060 2026] [:error] [pid 52460:tid 52482] [client 20.220.8.64:50071] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-tem.php"] [unique_id "aaLy47LWOogAgHGh62Sg1QAAAZM"]
[Sat Feb 28 21:51:31.675978 2026] [:error] [pid 52460:tid 52463] [client 20.220.8.64:50116] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-tem.php"] [unique_id "aaLy47LWOogAgHGh62Sg1wAAAYA"]
[Sat Feb 28 21:51:32.129345 2026] [:error] [pid 39183:tid 39196] [client 20.220.8.64:50130] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/av6m.php"] [unique_id "aaLy5BCf4HvhVePw3LZnzQAAAAQ"]
[Sat Feb 28 21:51:32.577759 2026] [:error] [pid 39183:tid 39216] [client 20.220.8.64:50172] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/av6m.php"] [unique_id "aaLy5BCf4HvhVePw3LZnzwAAABg"]
[Sat Feb 28 21:51:33.001502 2026] [:error] [pid 49763:tid 49774] [client 20.220.8.64:50160] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/av6m.php"] [unique_id "aaLy5bTHSOG_yf2PpqGZ2wAAAcg"]
[Sat Feb 28 21:51:33.448978 2026] [:error] [pid 22194:tid 22215] [client 20.220.8.64:50057] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/av6m.php"] [unique_id "aaLy5X6mbajs3bzQGyutkwAAAVM"]
[Sat Feb 28 21:51:33.890898 2026] [:error] [pid 39183:tid 39197] [client 20.220.8.64:50140] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/autogooey.php"] [unique_id "aaLy5RCf4HvhVePw3LZn1AAAAAU"]
[Sat Feb 28 21:51:34.346240 2026] [:error] [pid 39183:tid 39210] [client 20.220.8.64:50149] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/autogooey.php"] [unique_id "aaLy5hCf4HvhVePw3LZn2gAAABI"]
[Sat Feb 28 21:51:34.942580 2026] [:error] [pid 39183:tid 39212] [client 20.220.8.64:50087] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/autogooey.php"] [unique_id "aaLy5hCf4HvhVePw3LZn3wAAABQ"]
[Sat Feb 28 21:51:35.439405 2026] [:error] [pid 52460:tid 52481] [client 20.220.8.64:50174] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/autogooey.php"] [unique_id "aaLy57LWOogAgHGh62Sg2wAAAZI"]
[Sat Feb 28 21:51:35.859055 2026] [:error] [pid 49763:tid 49772] [client 20.220.8.64:50170] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/btx25.php"] [unique_id "aaLy57THSOG_yf2PpqGZ4wAAAcY"]
[Sat Feb 28 21:51:36.303751 2026] [:error] [pid 22194:tid 22202] [client 20.220.8.64:50058] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/btx25.php"] [unique_id "aaLy6H6mbajs3bzQGyutlAAAAUY"]
[Sat Feb 28 21:51:36.733767 2026] [:error] [pid 49763:tid 49784] [client 20.220.8.64:50061] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/btx25.php"] [unique_id "aaLy6LTHSOG_yf2PpqGZ5gAAAdI"]
[Sat Feb 28 21:51:37.157686 2026] [:error] [pid 49763:tid 49767] [client 20.220.8.64:50064] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/btx25.php"] [unique_id "aaLy6bTHSOG_yf2PpqGZ6QAAAcE"]
[Sat Feb 28 21:51:37.591876 2026] [:error] [pid 39184:tid 39236] [client 20.220.8.64:50081] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mga.php"] [unique_id "aaLy6VtZF9Zd_U7easDVLAAAAFE"]
[Sat Feb 28 21:51:38.033036 2026] [:error] [pid 39183:tid 39203] [client 20.220.8.64:49987] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mga.php"] [unique_id "aaLy6hCf4HvhVePw3LZn4wAAAAs"]
[Sat Feb 28 21:51:38.474779 2026] [:error] [pid 39183:tid 39211] [client 20.220.8.64:50065] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mga.php"] [unique_id "aaLy6hCf4HvhVePw3LZn5wAAABM"]
[Sat Feb 28 21:51:38.893253 2026] [:error] [pid 39183:tid 39205] [client 20.220.8.64:50165] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mga.php"] [unique_id "aaLy6hCf4HvhVePw3LZn6AAAAA0"]
[Sat Feb 28 21:51:39.345430 2026] [:error] [pid 39184:tid 39219] [client 20.220.8.64:50054] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/maxro.php"] [unique_id "aaLy61tZF9Zd_U7easDVMgAAAEA"]
[Sat Feb 28 21:51:39.759746 2026] [:error] [pid 39184:tid 39233] [client 20.220.8.64:50084] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/maxro.php"] [unique_id "aaLy61tZF9Zd_U7easDVNAAAAE4"]
[Sat Feb 28 21:51:40.179256 2026] [:error] [pid 52460:tid 52480] [client 20.220.8.64:50143] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/maxro.php"] [unique_id "aaLy7LLWOogAgHGh62Sg3gAAAZE"]
[Sat Feb 28 21:51:40.606792 2026] [:error] [pid 39183:tid 39207] [client 20.220.8.64:50171] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/maxro.php"] [unique_id "aaLy7BCf4HvhVePw3LZn9gAAAA8"]
[Sat Feb 28 21:51:41.026912 2026] [:error] [pid 11791:tid 11798] [client 20.220.8.64:50066] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/agg.php"] [unique_id "aaLy7WuX5e1Q32gqxH3PhwAAAQU"]
[Sat Feb 28 21:51:41.496029 2026] [:error] [pid 49763:tid 49781] [client 20.220.8.64:50161] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/agg.php"] [unique_id "aaLy7bTHSOG_yf2PpqGZ7wAAAc8"]
[Sat Feb 28 21:51:41.937579 2026] [:error] [pid 52460:tid 52463] [client 20.220.8.64:50083] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/agg.php"] [unique_id "aaLy7bLWOogAgHGh62Sg5AAAAYA"]
[Sat Feb 28 21:51:42.409192 2026] [:error] [pid 52460:tid 52467] [client 20.220.8.64:50091] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/agg.php"] [unique_id "aaLy7rLWOogAgHGh62Sg6QAAAYQ"]
[Sat Feb 28 21:51:42.862449 2026] [:error] [pid 39183:tid 39203] [client 20.220.8.64:50055] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/pass4.php"] [unique_id "aaLy7hCf4HvhVePw3LZoAgAAAAs"]
[Sat Feb 28 21:51:43.357742 2026] [:error] [pid 49763:tid 49789] [client 20.220.8.64:49995] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/pass4.php"] [unique_id "aaLy77THSOG_yf2PpqGZ9QAAAdc"]
[Sat Feb 28 21:51:43.805557 2026] [:error] [pid 49763:tid 49770] [client 20.220.8.64:50059] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/pass4.php"] [unique_id "aaLy77THSOG_yf2PpqGZ-wAAAcQ"]
[Sat Feb 28 21:51:44.245149 2026] [:error] [pid 52460:tid 52476] [client 20.220.8.64:50088] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/pass4.php"] [unique_id "aaLy8LLWOogAgHGh62Sg7QAAAY0"]
[Sat Feb 28 21:51:44.675496 2026] [:error] [pid 39292:tid 39318] [client 20.220.8.64:50173] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wsvvs.php"] [unique_id "aaLy8KIAO5fN7BxyqcGJXwAAANg"]
[Sat Feb 28 21:51:45.113103 2026] [:error] [pid 52460:tid 52464] [client 20.220.8.64:50175] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wsvvs.php"] [unique_id "aaLy8bLWOogAgHGh62Sg8wAAAYE"]
[Sat Feb 28 21:51:45.550523 2026] [:error] [pid 11791:tid 11810] [client 20.220.8.64:50049] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wsvvs.php"] [unique_id "aaLy8WuX5e1Q32gqxH3PigAAARE"]
[Sat Feb 28 21:51:45.986104 2026] [:error] [pid 39292:tid 39304] [client 20.220.8.64:50115] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wsvvs.php"] [unique_id "aaLy8aIAO5fN7BxyqcGJYwAAAMo"]
[Sat Feb 28 21:51:46.426693 2026] [:error] [pid 39292:tid 39300] [client 20.220.8.64:50012] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/G-In.php"] [unique_id "aaLy8qIAO5fN7BxyqcGJaAAAAMY"]
[Sat Feb 28 21:51:46.863329 2026] [:error] [pid 49763:tid 49767] [client 20.220.8.64:50104] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/G-In.php"] [unique_id "aaLy8rTHSOG_yf2PpqGaBAAAAcE"]
[Sat Feb 28 21:51:47.299182 2026] [:error] [pid 39183:tid 39197] [client 20.220.8.64:50027] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/G-In.php"] [unique_id "aaLy8xCf4HvhVePw3LZoEgAAAAU"]
[Sat Feb 28 21:51:47.723689 2026] [:error] [pid 22194:tid 22216] [client 20.220.8.64:50056] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/G-In.php"] [unique_id "aaLy836mbajs3bzQGyutmgAAAVQ"]
[Sat Feb 28 21:51:48.144238 2026] [:error] [pid 52460:tid 52471] [client 20.220.8.64:50074] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/edit.php"] [unique_id "aaLy9LLWOogAgHGh62Sg-QAAAYg"]
[Sat Feb 28 21:51:48.558224 2026] [:error] [pid 39185:tid 39248] [client 20.220.8.64:50060] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/edit.php"] [unique_id "aaLy9BVE-FfM89u7BQap2wAAAII"]
[Sat Feb 28 21:51:48.967456 2026] [:error] [pid 52460:tid 52485] [client 20.220.8.64:50095] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/edit.php"] [unique_id "aaLy9LLWOogAgHGh62ShAAAAAZY"]
[Sat Feb 28 21:51:49.391607 2026] [:error] [pid 49763:tid 49780] [client 20.220.8.64:50157] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/edit.php"] [unique_id "aaLy9bTHSOG_yf2PpqGaDQAAAc4"]
[Sat Feb 28 21:51:49.828037 2026] [:error] [pid 39183:tid 39207] [client 20.220.8.64:49966] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aaLy9RCf4HvhVePw3LZoFwAAAA8"]
[Sat Feb 28 21:51:50.250587 2026] [:error] [pid 49763:tid 49789] [client 20.220.8.64:50152] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aaLy9rTHSOG_yf2PpqGaEgAAAdc"]
[Sat Feb 28 21:51:50.667262 2026] [:error] [pid 49763:tid 49774] [client 20.220.8.64:50156] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aaLy9rTHSOG_yf2PpqGaFQAAAcg"]
[Sat Feb 28 21:51:51.080467 2026] [:error] [pid 22194:tid 22214] [client 20.220.8.64:50067] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aaLy936mbajs3bzQGyutnQAAAVI"]
[Sat Feb 28 21:51:51.495754 2026] [:error] [pid 49763:tid 49770] [client 20.220.8.64:50136] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "aaLy97THSOG_yf2PpqGaGQAAAcQ"]
[Sat Feb 28 21:51:51.923310 2026] [:error] [pid 49763:tid 49785] [client 20.220.8.64:50068] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "aaLy97THSOG_yf2PpqGaHAAAAdM"]
[Sat Feb 28 21:51:52.344538 2026] [:error] [pid 49763:tid 49782] [client 20.220.8.64:50120] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "aaLy-LTHSOG_yf2PpqGaHwAAAdA"]
[Sat Feb 28 21:51:52.771446 2026] [:error] [pid 49763:tid 49771] [client 20.220.8.64:50102] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "aaLy-LTHSOG_yf2PpqGaIQAAAcU"]
[Sat Feb 28 21:51:53.203507 2026] [:error] [pid 49763:tid 49784] [client 20.220.8.64:50155] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/66.php"] [unique_id "aaLy-bTHSOG_yf2PpqGaKAAAAdI"]
[Sat Feb 28 21:51:53.646707 2026] [:error] [pid 49763:tid 49781] [client 20.220.8.64:50129] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/66.php"] [unique_id "aaLy-bTHSOG_yf2PpqGaLgAAAc8"]
[Sat Feb 28 21:51:54.148481 2026] [:error] [pid 49763:tid 49782] [client 20.220.8.64:49992] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/66.php"] [unique_id "aaLy-rTHSOG_yf2PpqGaMwAAAdA"]
[Sat Feb 28 21:51:54.613245 2026] [:error] [pid 39185:tid 39256] [client 20.220.8.64:50145] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/66.php"] [unique_id "aaLy-hVE-FfM89u7BQap3gAAAIo"]
[Sat Feb 28 21:51:55.037938 2026] [:error] [pid 39183:tid 39196] [client 20.220.8.64:50070] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "aaLy-xCf4HvhVePw3LZoKgAAAAQ"]
[Sat Feb 28 21:51:55.532528 2026] [:error] [pid 39183:tid 39215] [client 20.220.8.64:50001] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "aaLy-xCf4HvhVePw3LZoMQAAABc"]
[Sat Feb 28 21:51:55.944288 2026] [:error] [pid 52460:tid 52479] [client 20.220.8.64:50063] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "aaLy-7LWOogAgHGh62ShFQAAAZA"]
[Sat Feb 28 21:51:56.362912 2026] [:error] [pid 52460:tid 52463] [client 20.220.8.64:50096] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "aaLy_LLWOogAgHGh62ShGgAAAYA"]
[Sat Feb 28 21:51:56.796155 2026] [:error] [pid 39183:tid 39208] [client 20.220.8.64:50006] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gifclass.php"] [unique_id "aaLy_BCf4HvhVePw3LZoOAAAABA"]
[Sat Feb 28 21:51:57.212635 2026] [:error] [pid 39183:tid 39213] [client 20.220.8.64:49984] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gifclass.php"] [unique_id "aaLy_RCf4HvhVePw3LZoOgAAABU"]
[Sat Feb 28 21:51:57.631695 2026] [:error] [pid 52460:tid 52474] [client 20.220.8.64:50142] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gifclass.php"] [unique_id "aaLy_bLWOogAgHGh62ShIQAAAYs"]
[Sat Feb 28 21:51:58.053977 2026] [:error] [pid 39184:tid 39235] [client 20.220.8.64:50153] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gifclass.php"] [unique_id "aaLy_ltZF9Zd_U7easDVPQAAAFA"]
[Sat Feb 28 21:51:58.472581 2026] [:error] [pid 39184:tid 39223] [client 20.220.8.64:50085] [client 20.220.8.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aaLy_ltZF9Zd_U7easDVPwAAAEQ"]
[Sat Feb 28 21:51:58.886185 2026] [:error] [pid 49763:tid 49778] [client 20.220.8.64:50159] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aaLy_rTHSOG_yf2PpqGaPQAAAcw"]
[Sat Feb 28 21:51:59.328419 2026] [:error] [pid 49763:tid 49767] [client 20.220.8.64:50086] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aaLy_7THSOG_yf2PpqGaQAAAAcE"]
[Sat Feb 28 21:51:59.760343 2026] [:error] [pid 52460:tid 52485] [client 20.220.8.64:50051] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aaLy_7LWOogAgHGh62ShJAAAAZY"]
[Sat Feb 28 21:52:00.212127 2026] [:error] [pid 11791:tid 11793] [client 20.220.8.64:50069] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aaLzAGuX5e1Q32gqxH3PpQAAAQA"]
[Sat Feb 28 21:52:00.638597 2026] [:error] [pid 39185:tid 39252] [client 20.220.8.64:50016] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aaLzABVE-FfM89u7BQap5wAAAIY"]
[Sat Feb 28 21:52:01.061151 2026] [:error] [pid 52460:tid 52475] [client 20.220.8.64:50098] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aaLzAbLWOogAgHGh62ShJwAAAYw"]
[Sat Feb 28 21:52:01.487448 2026] [:error] [pid 39183:tid 39195] [client 20.220.8.64:50048] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aaLzARCf4HvhVePw3LZoPAAAAAM"]
[Sat Feb 28 21:52:01.902410 2026] [:error] [pid 11791:tid 11794] [client 20.220.8.64:50019] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/assets/css/index.php"] [unique_id "aaLzAWuX5e1Q32gqxH3PrgAAAQE"]
[Sat Feb 28 21:52:02.338724 2026] [:error] [pid 11791:tid 11813] [client 20.220.8.64:50007] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/assets/css/index.php"] [unique_id "aaLzAmuX5e1Q32gqxH3PsgAAARQ"]
[Sat Feb 28 21:52:02.754937 2026] [:error] [pid 39185:tid 39259] [client 20.220.8.64:50114] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/assets/css/index.php"] [unique_id "aaLzAhVE-FfM89u7BQap6gAAAI0"]
[Sat Feb 28 21:52:03.172906 2026] [:error] [pid 39185:tid 39248] [client 20.220.8.64:50100] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/assets/css/index.php"] [unique_id "aaLzAxVE-FfM89u7BQap6wAAAII"]
[Sat Feb 28 21:52:03.591852 2026] [:error] [pid 11791:tid 11793] [client 20.220.8.64:50005] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sc.php"] [unique_id "aaLzA2uX5e1Q32gqxH3PvAAAAQA"]
[Sat Feb 28 21:52:04.003916 2026] [:error] [pid 11791:tid 11796] [client 20.220.8.64:50062] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sc.php"] [unique_id "aaLzBGuX5e1Q32gqxH3PwQAAAQM"]
[Sat Feb 28 21:52:04.423251 2026] [:error] [pid 39183:tid 39207] [client 20.220.8.64:50039] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sc.php"] [unique_id "aaLzBBCf4HvhVePw3LZoRAAAAA8"]
[Sat Feb 28 21:52:04.842854 2026] [:error] [pid 52460:tid 52479] [client 20.220.8.64:50166] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sc.php"] [unique_id "aaLzBLLWOogAgHGh62ShKAAAAZA"]
[Sat Feb 28 21:52:05.255022 2026] [:error] [pid 39184:tid 39227] [client 20.220.8.64:50121] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aaLzBVtZF9Zd_U7easDVQQAAAEg"]
[Sat Feb 28 21:52:05.676275 2026] [:error] [pid 39184:tid 39229] [client 20.220.8.64:49958] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aaLzBVtZF9Zd_U7easDVQwAAAEo"]
[Sat Feb 28 21:52:06.103149 2026] [:error] [pid 39184:tid 39225] [client 20.220.8.64:50075] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aaLzBltZF9Zd_U7easDVRQAAAEY"]
[Sat Feb 28 21:52:06.513742 2026] [:error] [pid 39184:tid 39237] [client 20.220.8.64:50073] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aaLzBltZF9Zd_U7easDVSAAAAFI"]
[Sat Feb 28 21:52:06.930714 2026] [:error] [pid 49763:tid 49768] [client 20.220.8.64:50078] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ol.php"] [unique_id "aaLzBrTHSOG_yf2PpqGaRgAAAcI"]
[Sat Feb 28 21:52:07.352831 2026] [:error] [pid 49763:tid 49784] [client 20.220.8.64:50053] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ol.php"] [unique_id "aaLzB7THSOG_yf2PpqGaSgAAAdI"]
[Sat Feb 28 21:52:07.782968 2026] [:error] [pid 39183:tid 39198] [client 20.220.8.64:50017] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ol.php"] [unique_id "aaLzBxCf4HvhVePw3LZoSQAAAAY"]
[Sat Feb 28 21:52:08.200502 2026] [:error] [pid 39183:tid 39215] [client 20.220.8.64:50147] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ol.php"] [unique_id "aaLzCBCf4HvhVePw3LZoSwAAABc"]
[Sat Feb 28 21:52:08.647550 2026] [:error] [pid 49763:tid 49776] [client 20.220.8.64:50131] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f6.php"] [unique_id "aaLzCLTHSOG_yf2PpqGaVwAAAco"]
[Sat Feb 28 21:52:09.088959 2026] [:error] [pid 39183:tid 39210] [client 20.220.8.64:50032] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f6.php"] [unique_id "aaLzCRCf4HvhVePw3LZoUAAAABI"]
[Sat Feb 28 21:52:09.510651 2026] [:error] [pid 39292:tid 39317] [client 20.220.8.64:50099] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f6.php"] [unique_id "aaLzCaIAO5fN7BxyqcGJgQAAANc"]
[Sat Feb 28 21:52:09.947048 2026] [:error] [pid 39292:tid 39310] [client 20.220.8.64:50040] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f6.php"] [unique_id "aaLzCaIAO5fN7BxyqcGJhgAAANA"]
[Sat Feb 28 21:52:10.382213 2026] [:error] [pid 52460:tid 52486] [client 20.220.8.64:49966] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/inputs.php"] [unique_id "aaLzCrLWOogAgHGh62ShKgAAAZc"]
[Sat Feb 28 21:52:10.840512 2026] [:error] [pid 39185:tid 39249] [client 20.220.8.64:50020] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/inputs.php"] [unique_id "aaLzChVE-FfM89u7BQap8gAAAIM"]
[Sat Feb 28 21:52:11.267492 2026] [:error] [pid 39292:tid 39302] [client 20.220.8.64:49999] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/inputs.php"] [unique_id "aaLzC6IAO5fN7BxyqcGJigAAAMg"]
[Sat Feb 28 21:52:11.740836 2026] [:error] [pid 49763:tid 49785] [client 20.220.8.64:50082] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/inputs.php"] [unique_id "aaLzC7THSOG_yf2PpqGaYwAAAdM"]
[Sat Feb 28 21:52:12.162204 2026] [:error] [pid 49763:tid 49782] [client 20.220.8.64:50164] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/style.php"] [unique_id "aaLzDLTHSOG_yf2PpqGaZgAAAdA"]
[Sat Feb 28 21:52:12.572955 2026] [:error] [pid 49763:tid 49771] [client 20.220.8.64:50052] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/style.php"] [unique_id "aaLzDLTHSOG_yf2PpqGaawAAAcU"]
[Sat Feb 28 21:52:12.982629 2026] [:error] [pid 49763:tid 49777] [client 20.220.8.64:50108] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/style.php"] [unique_id "aaLzDLTHSOG_yf2PpqGacQAAAcs"]
[Sat Feb 28 21:52:13.420106 2026] [:error] [pid 49763:tid 49785] [client 20.220.8.64:50119] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/style.php"] [unique_id "aaLzDbTHSOG_yf2PpqGadAAAAdM"]
[Sat Feb 28 21:52:13.852596 2026] [:error] [pid 39183:tid 39201] [client 20.220.8.64:50044] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bgymj.php"] [unique_id "aaLzDRCf4HvhVePw3LZoVwAAAAk"]
[Sat Feb 28 21:52:14.341252 2026] [:error] [pid 39183:tid 39195] [client 20.220.8.64:50133] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bgymj.php"] [unique_id "aaLzDhCf4HvhVePw3LZoWgAAAAM"]
[Sat Feb 28 21:52:14.762466 2026] [:error] [pid 39183:tid 39203] [client 20.220.8.64:50025] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bgymj.php"] [unique_id "aaLzDhCf4HvhVePw3LZoWwAAAAs"]
[Sat Feb 28 21:52:15.178992 2026] [:error] [pid 39185:tid 39246] [client 20.220.8.64:50109] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bgymj.php"] [unique_id "aaLzDxVE-FfM89u7BQap9AAAAIA"]
[Sat Feb 28 21:52:15.603227 2026] [:error] [pid 49763:tid 49771] [client 20.220.8.64:50094] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aa.php"] [unique_id "aaLzD7THSOG_yf2PpqGaegAAAcU"]
[Sat Feb 28 21:52:16.091550 2026] [:error] [pid 39292:tid 39315] [client 20.220.8.64:50110] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aa.php"] [unique_id "aaLzEKIAO5fN7BxyqcGJjQAAANU"]
[Sat Feb 28 21:52:16.544652 2026] [:error] [pid 39183:tid 39209] [client 20.220.8.64:50124] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aa.php"] [unique_id "aaLzEBCf4HvhVePw3LZoXgAAABE"]
[Sat Feb 28 21:52:16.979345 2026] [:error] [pid 52460:tid 52472] [client 20.220.8.64:50021] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aa.php"] [unique_id "aaLzELLWOogAgHGh62ShMQAAAYk"]
[Sat Feb 28 21:52:17.423066 2026] [:error] [pid 39185:tid 39262] [client 20.220.8.64:50123] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/1.php"] [unique_id "aaLzERVE-FfM89u7BQap-QAAAJA"]
[Sat Feb 28 21:52:17.856455 2026] [:error] [pid 52460:tid 52481] [client 20.220.8.64:49989] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/1.php"] [unique_id "aaLzEbLWOogAgHGh62ShMwAAAZI"]
[Sat Feb 28 21:52:18.289565 2026] [:error] [pid 49763:tid 49770] [client 20.220.8.64:50090] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/1.php"] [unique_id "aaLzErTHSOG_yf2PpqGafQAAAcQ"]
[Sat Feb 28 21:52:18.730875 2026] [:error] [pid 52460:tid 52476] [client 20.220.8.64:50042] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/1.php"] [unique_id "aaLzErLWOogAgHGh62ShNAAAAY0"]
[Sat Feb 28 21:52:19.168007 2026] [:error] [pid 52460:tid 52469] [client 20.220.8.64:50089] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sc.php"] [unique_id "aaLzE7LWOogAgHGh62ShNgAAAYY"]
[Sat Feb 28 21:52:19.615275 2026] [:error] [pid 49763:tid 49782] [client 20.220.8.64:50026] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sc.php"] [unique_id "aaLzE7THSOG_yf2PpqGahgAAAdA"]
[Sat Feb 28 21:52:20.100064 2026] [:error] [pid 39292:tid 39316] [client 20.220.8.64:50077] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sc.php"] [unique_id "aaLzFKIAO5fN7BxyqcGJlAAAANY"]
[Sat Feb 28 21:52:20.510842 2026] [:error] [pid 39292:tid 39312] [client 20.220.8.64:50080] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sc.php"] [unique_id "aaLzFKIAO5fN7BxyqcGJlwAAANI"]
[Sat Feb 28 21:52:20.938573 2026] [:error] [pid 39292:tid 39294] [client 20.220.8.64:50003] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/av.php"] [unique_id "aaLzFKIAO5fN7BxyqcGJmwAAAMA"]
[Sat Feb 28 21:52:21.355038 2026] [:error] [pid 49763:tid 49766] [client 20.220.8.64:50150] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/av.php"] [unique_id "aaLzFbTHSOG_yf2PpqGajAAAAcA"]
[Sat Feb 28 21:52:21.782815 2026] [:error] [pid 39292:tid 39314] [client 20.220.8.64:50024] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/av.php"] [unique_id "aaLzFaIAO5fN7BxyqcGJnQAAANQ"]
[Sat Feb 28 21:52:22.202202 2026] [proxy_fcgi:error] [pid 39185:tid 39247] [client 20.220.8.64:50031] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:52:22.409315 2026] [proxy_fcgi:error] [pid 39185:tid 39266] [client 20.220.8.64:50031] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:52:22.620990 2026] [proxy_fcgi:error] [pid 39185:tid 39249] [client 20.220.8.64:50031] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:52:22.837775 2026] [proxy_fcgi:error] [pid 39185:tid 39268] [client 20.220.8.64:50031] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:52:23.045937 2026] [proxy_fcgi:error] [pid 39185:tid 39265] [client 20.220.8.64:50031] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:52:23.257361 2026] [proxy_fcgi:error] [pid 39185:tid 39246] [client 20.220.8.64:50031] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:52:23.469263 2026] [proxy_fcgi:error] [pid 39185:tid 39261] [client 20.220.8.64:50031] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:52:23.680241 2026] [proxy_fcgi:error] [pid 39185:tid 39250] [client 20.220.8.64:50031] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:52:23.889404 2026] [proxy_fcgi:error] [pid 39185:tid 39269] [client 20.220.8.64:50031] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:52:24.307713 2026] [proxy_fcgi:error] [pid 39185:tid 39253] [client 20.220.8.64:50031] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:52:24.512617 2026] [:error] [pid 39185:tid 39263] [client 20.220.8.64:50031] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/06.php"] [unique_id "aaLzGBVE-FfM89u7BQaqDwAAAJE"]
[Sat Feb 28 21:52:24.926753 2026] [:error] [pid 39183:tid 39202] [client 20.220.8.64:49993] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/06.php"] [unique_id "aaLzGBCf4HvhVePw3LZodgAAAAo"]
[Sat Feb 28 21:52:25.342555 2026] [:error] [pid 39183:tid 39192] [client 20.220.8.64:50043] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/06.php"] [unique_id "aaLzGRCf4HvhVePw3LZofAAAAAA"]
[Sat Feb 28 21:52:25.758222 2026] [:error] [pid 39183:tid 39194] [client 20.220.8.64:50141] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/06.php"] [unique_id "aaLzGRCf4HvhVePw3LZogAAAAAI"]
[Sat Feb 28 21:52:26.180188 2026] [:error] [pid 39183:tid 39213] [client 20.220.8.64:50047] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/plss3.php"] [unique_id "aaLzGhCf4HvhVePw3LZohQAAABU"]
[Sat Feb 28 21:52:26.598518 2026] [:error] [pid 49763:tid 49779] [client 20.220.8.64:49988] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/plss3.php"] [unique_id "aaLzGrTHSOG_yf2PpqGamAAAAc0"]
[Sat Feb 28 21:52:27.011068 2026] [:error] [pid 49763:tid 49784] [client 20.220.8.64:50018] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/plss3.php"] [unique_id "aaLzG7THSOG_yf2PpqGangAAAdI"]
[Sat Feb 28 21:52:27.427719 2026] [:error] [pid 49763:tid 49780] [client 20.220.8.64:50023] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/plss3.php"] [unique_id "aaLzG7THSOG_yf2PpqGaoQAAAc4"]
[Sat Feb 28 21:52:27.841541 2026] [:error] [pid 22194:tid 22211] [client 20.220.8.64:49920] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aaa.php"] [unique_id "aaLzG36mbajs3bzQGyutrAAAAU8"]
[Sat Feb 28 21:52:28.266611 2026] [:error] [pid 39183:tid 39202] [client 20.220.8.64:50158] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aaa.php"] [unique_id "aaLzHBCf4HvhVePw3LZohwAAAAo"]
[Sat Feb 28 21:52:28.686112 2026] [:error] [pid 39185:tid 39255] [client 20.220.8.64:50144] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aaa.php"] [unique_id "aaLzHBVE-FfM89u7BQaqEAAAAIk"]
[Sat Feb 28 21:52:29.102470 2026] [:error] [pid 52460:tid 52476] [client 20.220.8.64:49946] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aaa.php"] [unique_id "aaLzHbLWOogAgHGh62ShQQAAAY0"]
[Sat Feb 28 21:52:29.520444 2026] [:error] [pid 52460:tid 52469] [client 20.220.8.64:50015] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aaLzHbLWOogAgHGh62ShRAAAAYY"]
[Sat Feb 28 21:52:29.937915 2026] [:error] [pid 39185:tid 39256] [client 20.220.8.64:50076] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aaLzHRVE-FfM89u7BQaqFAAAAIo"]
[Sat Feb 28 21:52:30.349768 2026] [:error] [pid 39292:tid 39295] [client 20.220.8.64:49949] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aaLzHqIAO5fN7BxyqcGJoAAAAME"]
[Sat Feb 28 21:52:30.777871 2026] [:error] [pid 39184:tid 39220] [client 20.220.8.64:50050] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aaLzHltZF9Zd_U7easDVWAAAAEE"]
[Sat Feb 28 21:52:31.193058 2026] [:error] [pid 39184:tid 39230] [client 20.220.8.64:49959] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aaLzH1tZF9Zd_U7easDVWQAAAEs"]
[Sat Feb 28 21:52:31.649210 2026] [:error] [pid 22194:tid 22199] [client 20.220.8.64:50013] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aaLzH36mbajs3bzQGyutswAAAUM"]
[Sat Feb 28 21:52:32.079716 2026] [:error] [pid 39185:tid 39266] [client 20.220.8.64:49933] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aaLzIBVE-FfM89u7BQaqGAAAAJQ"]
[Sat Feb 28 21:52:32.506738 2026] [:error] [pid 39183:tid 39203] [client 20.220.8.64:49968] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aaLzIBCf4HvhVePw3LZoiAAAAAs"]
[Sat Feb 28 21:52:32.979144 2026] [:error] [pid 39185:tid 39258] [client 20.220.8.64:49953] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aaLzIBVE-FfM89u7BQaqGQAAAIw"]
[Sat Feb 28 21:52:33.397143 2026] [:error] [pid 49763:tid 49785] [client 20.220.8.64:49932] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aaLzIbTHSOG_yf2PpqGaxAAAAdM"]
[Sat Feb 28 21:52:33.823873 2026] [:error] [pid 52460:tid 52466] [client 20.220.8.64:49937] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aaLzIbLWOogAgHGh62ShUwAAAYM"]
[Sat Feb 28 21:52:34.304525 2026] [:error] [pid 49763:tid 49789] [client 20.220.8.64:49939] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aaLzIrTHSOG_yf2PpqGayQAAAdc"]
[Sat Feb 28 21:52:34.764940 2026] [:error] [pid 49763:tid 49782] [client 20.220.8.64:49942] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x.php"] [unique_id "aaLzIrTHSOG_yf2PpqGaywAAAdA"]
[Sat Feb 28 21:52:35.192349 2026] [:error] [pid 52460:tid 52481] [client 20.220.8.64:50092] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x.php"] [unique_id "aaLzI7LWOogAgHGh62ShVgAAAZI"]
[Sat Feb 28 21:52:35.607826 2026] [:error] [pid 49763:tid 49776] [client 20.220.8.64:49994] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x.php"] [unique_id "aaLzI7THSOG_yf2PpqGa0AAAAco"]
[Sat Feb 28 21:52:36.037132 2026] [:error] [pid 39184:tid 39221] [client 20.220.8.64:49879] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x.php"] [unique_id "aaLzJFtZF9Zd_U7easDVZQAAAEI"]
[Sat Feb 28 21:52:36.455571 2026] [:error] [pid 49763:tid 49780] [client 20.220.8.64:49925] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ms.php"] [unique_id "aaLzJLTHSOG_yf2PpqGa1QAAAc4"]
[Sat Feb 28 21:52:36.905519 2026] [:error] [pid 39184:tid 39241] [client 20.220.8.64:50000] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ms.php"] [unique_id "aaLzJFtZF9Zd_U7easDVbgAAAFY"]
[Sat Feb 28 21:52:37.320388 2026] [:error] [pid 11791:tid 11807] [client 20.220.8.64:50093] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ms.php"] [unique_id "aaLzJWuX5e1Q32gqxH3P2wAAAQ4"]
[Sat Feb 28 21:52:37.737664 2026] [:error] [pid 52460:tid 52475] [client 20.220.8.64:50011] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ms.php"] [unique_id "aaLzJbLWOogAgHGh62ShWQAAAYw"]
[Sat Feb 28 21:52:38.173009 2026] [:error] [pid 52460:tid 52479] [client 20.220.8.64:50072] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/erinyani/"] [unique_id "aaLzJrLWOogAgHGh62ShXgAAAZA"]
[Sat Feb 28 21:52:38.592357 2026] [:error] [pid 52460:tid 52464] [client 20.220.8.64:50117] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/erinyani/"] [unique_id "aaLzJrLWOogAgHGh62ShYgAAAYE"]
[Sat Feb 28 21:52:39.002183 2026] [:error] [pid 49763:tid 49779] [client 20.220.8.64:50118] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/erinyani/"] [unique_id "aaLzJ7THSOG_yf2PpqGa3QAAAc0"]
[Sat Feb 28 21:52:39.449997 2026] [:error] [pid 49763:tid 49769] [client 20.220.8.64:49975] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/erinyani/"] [unique_id "aaLzJ7THSOG_yf2PpqGa3gAAAcM"]
[Sat Feb 28 21:52:39.866987 2026] [:error] [pid 49763:tid 49770] [client 20.220.8.64:50034] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wdf.php"] [unique_id "aaLzJ7THSOG_yf2PpqGa4AAAAcQ"]
[Sat Feb 28 21:52:40.289188 2026] [:error] [pid 39183:tid 39197] [client 20.220.8.64:50008] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wdf.php"] [unique_id "aaLzKBCf4HvhVePw3LZojwAAAAU"]
[Sat Feb 28 21:52:40.709595 2026] [:error] [pid 49763:tid 49781] [client 20.220.8.64:49947] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wdf.php"] [unique_id "aaLzKLTHSOG_yf2PpqGa4QAAAc8"]
[Sat Feb 28 21:52:41.123387 2026] [:error] [pid 49763:tid 49790] [client 20.220.8.64:49875] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wdf.php"] [unique_id "aaLzKbTHSOG_yf2PpqGa5QAAAdg"]
[Sat Feb 28 21:52:41.537185 2026] [:error] [pid 49763:tid 49782] [client 20.220.8.64:49986] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-update.php"] [unique_id "aaLzKbTHSOG_yf2PpqGa6QAAAdA"]
[Sat Feb 28 21:52:41.962327 2026] [:error] [pid 52460:tid 52486] [client 20.220.8.64:49871] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-update.php"] [unique_id "aaLzKbLWOogAgHGh62ShbwAAAZc"]
[Sat Feb 28 21:52:42.413650 2026] [:error] [pid 22194:tid 22219] [client 20.220.8.64:50009] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-update.php"] [unique_id "aaLzKn6mbajs3bzQGyutwwAAAVc"]
[Sat Feb 28 21:52:42.839254 2026] [:error] [pid 39185:tid 39249] [client 20.220.8.64:49970] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-update.php"] [unique_id "aaLzKhVE-FfM89u7BQaqGgAAAIM"]
[Sat Feb 28 21:52:43.250549 2026] [:error] [pid 39292:tid 39308] [client 20.220.8.64:50036] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sbhu.php"] [unique_id "aaLzK6IAO5fN7BxyqcGJsgAAAM4"]
[Sat Feb 28 21:52:43.675335 2026] [:error] [pid 39184:tid 39230] [client 20.220.8.64:49938] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sbhu.php"] [unique_id "aaLzK1tZF9Zd_U7easDVeQAAAEs"]
[Sat Feb 28 21:52:44.093401 2026] [:error] [pid 22194:tid 22201] [client 20.220.8.64:50146] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sbhu.php"] [unique_id "aaLzLH6mbajs3bzQGyutxQAAAUU"]
[Sat Feb 28 21:52:44.548863 2026] [:error] [pid 49763:tid 49783] [client 20.220.8.64:49945] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sbhu.php"] [unique_id "aaLzLLTHSOG_yf2PpqGa9AAAAdE"]
[Sat Feb 28 21:52:44.963475 2026] [:error] [pid 39292:tid 39312] [client 20.220.8.64:49865] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x/"] [unique_id "aaLzLKIAO5fN7BxyqcGJtAAAANI"]
[Sat Feb 28 21:52:45.382562 2026] [:error] [pid 39185:tid 39268] [client 20.220.8.64:49981] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x/"] [unique_id "aaLzLRVE-FfM89u7BQaqGwAAAJY"]
[Sat Feb 28 21:52:45.796258 2026] [:error] [pid 49763:tid 49769] [client 20.220.8.64:49990] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x/"] [unique_id "aaLzLbTHSOG_yf2PpqGa-wAAAcM"]
[Sat Feb 28 21:52:46.215286 2026] [:error] [pid 49763:tid 49779] [client 20.220.8.64:50046] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x/"] [unique_id "aaLzLrTHSOG_yf2PpqGa_wAAAc0"]
[Sat Feb 28 21:52:46.708185 2026] [:error] [pid 39292:tid 39318] [client 20.220.8.64:50079] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-blog.php"] [unique_id "aaLzLqIAO5fN7BxyqcGJtQAAANg"]
[Sat Feb 28 21:52:47.144805 2026] [:error] [pid 52460:tid 52480] [client 20.220.8.64:49856] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-blog.php"] [unique_id "aaLzL7LWOogAgHGh62ShoQAAAZE"]
[Sat Feb 28 21:52:47.588372 2026] [:error] [pid 52460:tid 52478] [client 20.220.8.64:49985] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-blog.php"] [unique_id "aaLzL7LWOogAgHGh62ShqAAAAY8"]
[Sat Feb 28 21:52:48.003770 2026] [:error] [pid 39292:tid 39302] [client 20.220.8.64:49972] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-blog.php"] [unique_id "aaLzMKIAO5fN7BxyqcGJuAAAAMg"]
[Sat Feb 28 21:52:48.419819 2026] [:error] [pid 39185:tid 39265] [client 20.220.8.64:50037] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/test1.php"] [unique_id "aaLzMBVE-FfM89u7BQaqHAAAAJM"]
[Sat Feb 28 21:52:48.837250 2026] [:error] [pid 52460:tid 52469] [client 20.220.8.64:50041] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/test1.php"] [unique_id "aaLzMLLWOogAgHGh62ShtwAAAYY"]
[Sat Feb 28 21:52:49.260840 2026] [:error] [pid 52460:tid 52468] [client 20.220.8.64:50107] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/test1.php"] [unique_id "aaLzMbLWOogAgHGh62ShvQAAAYU"]
[Sat Feb 28 21:52:49.686007 2026] [:error] [pid 49763:tid 49771] [client 20.220.8.64:49971] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/test1.php"] [unique_id "aaLzMbTHSOG_yf2PpqGbBwAAAcU"]
[Sat Feb 28 21:52:50.110087 2026] [:error] [pid 49763:tid 49779] [client 20.220.8.64:50030] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aaLzMrTHSOG_yf2PpqGbCwAAAc0"]
[Sat Feb 28 21:52:50.521980 2026] [:error] [pid 39183:tid 39204] [client 20.220.8.64:50111] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aaLzMhCf4HvhVePw3LZoogAAAAw"]
[Sat Feb 28 21:52:50.936878 2026] [:error] [pid 39183:tid 39195] [client 20.220.8.64:49951] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aaLzMhCf4HvhVePw3LZopQAAAAM"]
[Sat Feb 28 21:52:51.352084 2026] [:error] [pid 39183:tid 39205] [client 20.220.8.64:49928] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aaLzMxCf4HvhVePw3LZopgAAAA0"]
[Sat Feb 28 21:52:51.764262 2026] [:error] [pid 22194:tid 22202] [client 20.220.8.64:49961] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/166.php"] [unique_id "aaLzM36mbajs3bzQGyutxwAAAUY"]
[Sat Feb 28 21:52:52.185588 2026] [:error] [pid 39184:tid 39243] [client 20.220.8.64:49867] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/166.php"] [unique_id "aaLzNFtZF9Zd_U7easDViQAAAFg"]
[Sat Feb 28 21:52:52.600012 2026] [:error] [pid 39292:tid 39300] [client 20.220.8.64:50067] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/166.php"] [unique_id "aaLzNKIAO5fN7BxyqcGJvwAAAMY"]
[Sat Feb 28 21:52:53.018962 2026] [:error] [pid 52460:tid 52474] [client 20.220.8.64:49956] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/166.php"] [unique_id "aaLzNbLWOogAgHGh62Sh2QAAAYs"]
[Sat Feb 28 21:52:53.433079 2026] [:error] [pid 52460:tid 52476] [client 20.220.8.64:49889] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fleen.php"] [unique_id "aaLzNbLWOogAgHGh62Sh3gAAAY0"]
[Sat Feb 28 21:52:53.847501 2026] [:error] [pid 39292:tid 39298] [client 20.220.8.64:49962] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fleen.php"] [unique_id "aaLzNaIAO5fN7BxyqcGJwgAAAMQ"]
[Sat Feb 28 21:52:54.262944 2026] [:error] [pid 39292:tid 39317] [client 20.220.8.64:49936] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fleen.php"] [unique_id "aaLzNqIAO5fN7BxyqcGJwwAAANc"]
[Sat Feb 28 21:52:54.680785 2026] [:error] [pid 39184:tid 39220] [client 20.220.8.64:50016] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fleen.php"] [unique_id "aaLzNltZF9Zd_U7easDVjQAAAEE"]
[Sat Feb 28 21:52:55.102773 2026] [:error] [pid 49763:tid 49776] [client 20.220.8.64:49876] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "aaLzN7THSOG_yf2PpqGbGwAAAco"]
[Sat Feb 28 21:52:55.523948 2026] [:error] [pid 39183:tid 39197] [client 20.220.8.64:49923] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "aaLzNxCf4HvhVePw3LZoqgAAAAU"]
[Sat Feb 28 21:52:55.941883 2026] [:error] [pid 39183:tid 39210] [client 20.220.8.64:49874] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "aaLzNxCf4HvhVePw3LZorgAAABI"]
[Sat Feb 28 21:52:56.355949 2026] [:error] [pid 39183:tid 39204] [client 20.220.8.64:50004] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "aaLzOBCf4HvhVePw3LZosgAAAAw"]
[Sat Feb 28 21:52:56.774625 2026] [:error] [pid 22194:tid 22206] [client 20.220.8.64:50022] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ms-edit.php"] [unique_id "aaLzOH6mbajs3bzQGyutzgAAAUo"]
[Sat Feb 28 21:52:57.189743 2026] [:error] [pid 11791:tid 11800] [client 20.220.8.64:49991] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ms-edit.php"] [unique_id "aaLzOWuX5e1Q32gqxH3P6QAAAQc"]
[Sat Feb 28 21:52:57.608173 2026] [:error] [pid 39183:tid 39192] [client 20.220.8.64:49912] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ms-edit.php"] [unique_id "aaLzORCf4HvhVePw3LZouQAAAAA"]
[Sat Feb 28 21:52:58.019805 2026] [:error] [pid 39292:tid 39303] [client 20.220.8.64:49888] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ms-edit.php"] [unique_id "aaLzOqIAO5fN7BxyqcGJzgAAAMk"]
[Sat Feb 28 21:52:58.474365 2026] [:error] [pid 39184:tid 39227] [client 20.220.8.64:49909] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/adminfuns.php"] [unique_id "aaLzOltZF9Zd_U7easDVkgAAAEg"]
[Sat Feb 28 21:52:58.899344 2026] [:error] [pid 49763:tid 49790] [client 20.220.8.64:49887] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/adminfuns.php"] [unique_id "aaLzOrTHSOG_yf2PpqGbNgAAAdg"]
[Sat Feb 28 21:52:59.356696 2026] [:error] [pid 49763:tid 49772] [client 20.220.8.64:49948] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/adminfuns.php"] [unique_id "aaLzO7THSOG_yf2PpqGbOwAAAcY"]
[Sat Feb 28 21:52:59.866254 2026] [:error] [pid 49763:tid 49785] [client 20.220.8.64:49943] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/adminfuns.php"] [unique_id "aaLzO7THSOG_yf2PpqGbRAAAAdM"]
[Sat Feb 28 21:53:00.288858 2026] [:error] [pid 49763:tid 49778] [client 20.220.8.64:49940] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/goods.php"] [unique_id "aaLzPLTHSOG_yf2PpqGbSQAAAcw"]
[Sat Feb 28 21:53:00.713048 2026] [:error] [pid 49763:tid 49777] [client 20.220.8.64:50033] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/goods.php"] [unique_id "aaLzPLTHSOG_yf2PpqGbTgAAAcs"]
[Sat Feb 28 21:53:01.131266 2026] [:error] [pid 49763:tid 49790] [client 20.220.8.64:49998] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/goods.php"] [unique_id "aaLzPbTHSOG_yf2PpqGbWgAAAdg"]
[Sat Feb 28 21:53:01.578438 2026] [:error] [pid 49763:tid 49776] [client 20.220.8.64:49859] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/goods.php"] [unique_id "aaLzPbTHSOG_yf2PpqGbXwAAAco"]
[Sat Feb 28 21:53:01.989837 2026] [:error] [pid 49763:tid 49769] [client 20.220.8.64:50035] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ms-edit.php"] [unique_id "aaLzPbTHSOG_yf2PpqGbZgAAAcM"]
[Sat Feb 28 21:53:02.414911 2026] [:error] [pid 49763:tid 49772] [client 20.220.8.64:50101] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ms-edit.php"] [unique_id "aaLzPrTHSOG_yf2PpqGbbQAAAcY"]
[Sat Feb 28 21:53:02.830485 2026] [:error] [pid 39183:tid 39201] [client 20.220.8.64:49892] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ms-edit.php"] [unique_id "aaLzPhCf4HvhVePw3LZowAAAAAk"]
[Sat Feb 28 21:53:03.263346 2026] [:error] [pid 52460:tid 52482] [client 20.220.8.64:49965] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ms-edit.php"] [unique_id "aaLzP7LWOogAgHGh62Sh-QAAAZM"]
[Sat Feb 28 21:53:03.678926 2026] [:error] [pid 39183:tid 39192] [client 20.220.8.64:50103] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/222.php"] [unique_id "aaLzPxCf4HvhVePw3LZoxgAAAAA"]
[Sat Feb 28 21:53:04.096683 2026] [:error] [pid 11791:tid 11813] [client 20.220.8.64:49816] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/222.php"] [unique_id "aaLzQGuX5e1Q32gqxH3P6gAAARQ"]
[Sat Feb 28 21:53:04.526999 2026] [:error] [pid 39292:tid 39301] [client 20.220.8.64:49996] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/222.php"] [unique_id "aaLzQKIAO5fN7BxyqcGJ0wAAAMc"]
[Sat Feb 28 21:53:04.942692 2026] [:error] [pid 39184:tid 39223] [client 20.220.8.64:49957] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/222.php"] [unique_id "aaLzQFtZF9Zd_U7easDVnwAAAEQ"]
[Sat Feb 28 21:53:05.361053 2026] [:error] [pid 39184:tid 39238] [client 20.220.8.64:50097] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/plugins.php"] [unique_id "aaLzQVtZF9Zd_U7easDVoQAAAFM"]
[Sat Feb 28 21:53:05.780447 2026] [:error] [pid 52460:tid 52483] [client 20.220.8.64:49801] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/plugins.php"] [unique_id "aaLzQbLWOogAgHGh62Sh_wAAAZQ"]
[Sat Feb 28 21:53:06.196921 2026] [:error] [pid 39185:tid 39264] [client 20.220.8.64:49954] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/plugins.php"] [unique_id "aaLzQhVE-FfM89u7BQaqTQAAAJI"]
[Sat Feb 28 21:53:06.609210 2026] [:error] [pid 39292:tid 39300] [client 20.220.8.64:49864] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/plugins.php"] [unique_id "aaLzQqIAO5fN7BxyqcGJ1AAAAMY"]
[Sat Feb 28 21:53:07.023387 2026] [:error] [pid 49763:tid 49773] [client 20.220.8.64:50162] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aaLzQ7THSOG_yf2PpqGbhQAAAcc"]
[Sat Feb 28 21:53:07.441811 2026] [:error] [pid 49763:tid 49769] [client 20.220.8.64:49929] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aaLzQ7THSOG_yf2PpqGbjAAAAcM"]
[Sat Feb 28 21:53:07.859904 2026] [:error] [pid 49763:tid 49788] [client 20.220.8.64:49860] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aaLzQ7THSOG_yf2PpqGbkQAAAdY"]
[Sat Feb 28 21:53:08.270270 2026] [:error] [pid 49763:tid 49785] [client 20.220.8.64:49997] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aaLzRLTHSOG_yf2PpqGbmQAAAdM"]
[Sat Feb 28 21:53:08.679992 2026] [:error] [pid 49763:tid 49774] [client 20.220.8.64:49973] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/dist/"] [unique_id "aaLzRLTHSOG_yf2PpqGboAAAAcg"]
[Sat Feb 28 21:53:09.098731 2026] [:error] [pid 11791:tid 11814] [client 20.220.8.64:49833] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/dist/"] [unique_id "aaLzRWuX5e1Q32gqxH3P7wAAARU"]
[Sat Feb 28 21:53:09.517136 2026] [:error] [pid 39183:tid 39216] [client 20.220.8.64:49737] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/dist/"] [unique_id "aaLzRRCf4HvhVePw3LZozwAAABg"]
[Sat Feb 28 21:53:09.930910 2026] [:error] [pid 22194:tid 22219] [client 20.220.8.64:49952] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/dist/"] [unique_id "aaLzRX6mbajs3bzQGyut0wAAAVc"]
[Sat Feb 28 21:53:10.343620 2026] [:error] [pid 52460:tid 52471] [client 20.220.8.64:49795] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ff1.php"] [unique_id "aaLzRrLWOogAgHGh62SiCgAAAYg"]
[Sat Feb 28 21:53:10.755379 2026] [:error] [pid 11791:tid 11817] [client 20.220.8.64:49916] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ff1.php"] [unique_id "aaLzRmuX5e1Q32gqxH3P8QAAARg"]
[Sat Feb 28 21:53:11.168616 2026] [:error] [pid 39292:tid 39312] [client 20.220.8.64:49908] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ff1.php"] [unique_id "aaLzR6IAO5fN7BxyqcGJ2wAAANI"]
[Sat Feb 28 21:53:11.578163 2026] [:error] [pid 52460:tid 52468] [client 20.220.8.64:50045] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ff1.php"] [unique_id "aaLzR7LWOogAgHGh62SiDQAAAYU"]
[Sat Feb 28 21:53:11.991850 2026] [:error] [pid 39183:tid 39197] [client 20.220.8.64:50014] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fff.php"] [unique_id "aaLzRxCf4HvhVePw3LZo1gAAAAU"]
[Sat Feb 28 21:53:12.408950 2026] [:error] [pid 39183:tid 39200] [client 20.220.8.64:50002] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fff.php"] [unique_id "aaLzSBCf4HvhVePw3LZo2AAAAAg"]
[Sat Feb 28 21:53:12.826914 2026] [:error] [pid 39183:tid 39213] [client 20.220.8.64:49985] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fff.php"] [unique_id "aaLzSBCf4HvhVePw3LZo3AAAABU"]
[Sat Feb 28 21:53:13.242210 2026] [:error] [pid 49763:tid 49771] [client 20.220.8.64:49969] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fff.php"] [unique_id "aaLzSbTHSOG_yf2PpqGbzgAAAcU"]
[Sat Feb 28 21:53:13.670067 2026] [:error] [pid 49763:tid 49773] [client 20.220.8.64:49924] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/"] [unique_id "aaLzSbTHSOG_yf2PpqGb0wAAAcc"]
[Sat Feb 28 21:53:14.093967 2026] [:error] [pid 39183:tid 39213] [client 20.220.8.64:49862] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/"] [unique_id "aaLzShCf4HvhVePw3LZo6wAAABU"]
[Sat Feb 28 21:53:14.527739 2026] [:error] [pid 11791:tid 11794] [client 20.220.8.64:49930] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/"] [unique_id "aaLzSmuX5e1Q32gqxH3P9QAAAQE"]
[Sat Feb 28 21:53:14.946027 2026] [:error] [pid 39183:tid 39197] [client 20.220.8.64:49880] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/"] [unique_id "aaLzShCf4HvhVePw3LZo-AAAAAU"]
[Sat Feb 28 21:53:15.362929 2026] [:error] [pid 49763:tid 49784] [client 20.220.8.64:50134] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/goat.php"] [unique_id "aaLzS7THSOG_yf2PpqGb5gAAAdI"]
[Sat Feb 28 21:53:15.792283 2026] [:error] [pid 39184:tid 39241] [client 20.220.8.64:49974] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/goat.php"] [unique_id "aaLzS1tZF9Zd_U7easDVsAAAAFY"]
[Sat Feb 28 21:53:16.229043 2026] [:error] [pid 22194:tid 22217] [client 20.220.8.64:49898] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/goat.php"] [unique_id "aaLzTH6mbajs3bzQGyut2gAAAVU"]
[Sat Feb 28 21:53:16.656220 2026] [:error] [pid 49763:tid 49789] [client 20.220.8.64:49901] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/goat.php"] [unique_id "aaLzTLTHSOG_yf2PpqGb_AAAAdc"]
[Sat Feb 28 21:53:17.073046 2026] [:error] [pid 52460:tid 52476] [client 20.220.8.64:49963] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/155.php"] [unique_id "aaLzTbLWOogAgHGh62SiFgAAAY0"]
[Sat Feb 28 21:53:17.484355 2026] [:error] [pid 39184:tid 39232] [client 20.220.8.64:50135] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/155.php"] [unique_id "aaLzTVtZF9Zd_U7easDVtAAAAE0"]
[Sat Feb 28 21:53:17.896679 2026] [:error] [pid 11791:tid 11810] [client 20.220.8.64:49944] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/155.php"] [unique_id "aaLzTWuX5e1Q32gqxH3P-wAAARE"]
[Sat Feb 28 21:53:18.309239 2026] [:error] [pid 11791:tid 11813] [client 20.220.8.64:49881] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/155.php"] [unique_id "aaLzTmuX5e1Q32gqxH3P_QAAARQ"]
[Sat Feb 28 21:53:18.764847 2026] [:error] [pid 52460:tid 52473] [client 20.220.8.64:49931] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/we.php"] [unique_id "aaLzTrLWOogAgHGh62SiIgAAAYo"]
[Sat Feb 28 21:53:19.186477 2026] [:error] [pid 49763:tid 49789] [client 20.220.8.64:49914] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/we.php"] [unique_id "aaLzT7THSOG_yf2PpqGcCwAAAdc"]
[Sat Feb 28 21:53:19.615858 2026] [:error] [pid 39183:tid 39214] [client 20.220.8.64:50127] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/we.php"] [unique_id "aaLzTxCf4HvhVePw3LZpDgAAABY"]
[Sat Feb 28 21:53:20.027693 2026] [:error] [pid 52460:tid 52475] [client 20.220.8.64:49964] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/we.php"] [unique_id "aaLzULLWOogAgHGh62SiLAAAAYw"]
[Sat Feb 28 21:53:20.444989 2026] [:error] [pid 49763:tid 49787] [client 20.220.8.64:50029] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/alpha.php"] [unique_id "aaLzULTHSOG_yf2PpqGcEQAAAdU"]
[Sat Feb 28 21:53:20.862818 2026] [:error] [pid 49763:tid 49780] [client 20.220.8.64:49868] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/alpha.php"] [unique_id "aaLzULTHSOG_yf2PpqGcFQAAAc4"]
[Sat Feb 28 21:53:21.280000 2026] [:error] [pid 49763:tid 49785] [client 20.220.8.64:49978] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/alpha.php"] [unique_id "aaLzUbTHSOG_yf2PpqGcGgAAAdM"]
[Sat Feb 28 21:53:21.696009 2026] [:error] [pid 49763:tid 49778] [client 20.220.8.64:49872] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/alpha.php"] [unique_id "aaLzUbTHSOG_yf2PpqGcIQAAAcw"]
[Sat Feb 28 21:53:22.110063 2026] [:error] [pid 39183:tid 39202] [client 20.220.8.64:49934] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/makeasmtp.php"] [unique_id "aaLzUhCf4HvhVePw3LZpFAAAAAo"]
[Sat Feb 28 21:53:22.525437 2026] [:error] [pid 11791:tid 11796] [client 20.220.8.64:49903] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/makeasmtp.php"] [unique_id "aaLzUmuX5e1Q32gqxH3QAwAAAQM"]
[Sat Feb 28 21:53:22.944130 2026] [:error] [pid 49763:tid 49772] [client 20.220.8.64:49911] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/makeasmtp.php"] [unique_id "aaLzUrTHSOG_yf2PpqGcMAAAAcY"]
[Sat Feb 28 21:53:23.361703 2026] [:error] [pid 39183:tid 39211] [client 20.220.8.64:49882] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/makeasmtp.php"] [unique_id "aaLzUxCf4HvhVePw3LZpIQAAABM"]
[Sat Feb 28 21:53:23.779928 2026] [:error] [pid 11791:tid 11806] [client 20.220.8.64:49819] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-michan.php"] [unique_id "aaLzU2uX5e1Q32gqxH3QBQAAAQ0"]
[Sat Feb 28 21:53:24.203449 2026] [proxy_fcgi:error] [pid 39184:tid 39223] [client 20.220.8.64:49878] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:53:24.623212 2026] [proxy_fcgi:error] [pid 39184:tid 39236] [client 20.220.8.64:49878] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:53:25.044737 2026] [proxy_fcgi:error] [pid 39184:tid 39221] [client 20.220.8.64:49878] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:53:25.465832 2026] [proxy_fcgi:error] [pid 39184:tid 39240] [client 20.220.8.64:49878] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:53:25.881673 2026] [proxy_fcgi:error] [pid 39184:tid 39230] [client 20.220.8.64:49878] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:53:26.296302 2026] [proxy_fcgi:error] [pid 39184:tid 39241] [client 20.220.8.64:49878] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:53:26.502095 2026] [:error] [pid 39184:tid 39235] [client 20.220.8.64:49878] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/about.php"] [unique_id "aaLzVltZF9Zd_U7easDV3wAAAFA"]
[Sat Feb 28 21:53:26.916599 2026] [:error] [pid 11791:tid 11816] [client 20.220.8.64:50028] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/about.php"] [unique_id "aaLzVmuX5e1Q32gqxH3QDAAAARc"]
[Sat Feb 28 21:53:27.334609 2026] [:error] [pid 11791:tid 11810] [client 20.220.8.64:49979] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/about.php"] [unique_id "aaLzV2uX5e1Q32gqxH3QDQAAARE"]
[Sat Feb 28 21:53:27.749768 2026] [:error] [pid 49763:tid 49771] [client 20.220.8.64:49982] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/about.php"] [unique_id "aaLzV7THSOG_yf2PpqGcUQAAAcU"]
[Sat Feb 28 21:53:28.165862 2026] [:error] [pid 39183:tid 39214] [client 20.220.8.64:49927] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tymn.php"] [unique_id "aaLzWBCf4HvhVePw3LZpKwAAABY"]
[Sat Feb 28 21:53:28.576543 2026] [:error] [pid 39292:tid 39298] [client 20.220.8.64:49832] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tymn.php"] [unique_id "aaLzWKIAO5fN7BxyqcGJ6AAAAMQ"]
[Sat Feb 28 21:53:28.997207 2026] [:error] [pid 39185:tid 39255] [client 20.220.8.64:49950] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tymn.php"] [unique_id "aaLzWBVE-FfM89u7BQaqmQAAAIk"]
[Sat Feb 28 21:53:29.414565 2026] [:error] [pid 49763:tid 49779] [client 20.220.8.64:49915] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tymn.php"] [unique_id "aaLzWbTHSOG_yf2PpqGcWwAAAc0"]
[Sat Feb 28 21:53:29.829772 2026] [:error] [pid 39183:tid 39196] [client 20.220.8.64:49857] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bak.php"] [unique_id "aaLzWRCf4HvhVePw3LZpOQAAAAQ"]
[Sat Feb 28 21:53:30.249984 2026] [:error] [pid 49763:tid 49787] [client 20.220.8.64:50105] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bak.php"] [unique_id "aaLzWrTHSOG_yf2PpqGcZQAAAdU"]
[Sat Feb 28 21:53:30.665742 2026] [:error] [pid 49763:tid 49777] [client 20.220.8.64:49886] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bak.php"] [unique_id "aaLzWrTHSOG_yf2PpqGcawAAAcs"]
[Sat Feb 28 21:53:31.083220 2026] [:error] [pid 22194:tid 22198] [client 20.220.8.64:49926] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bak.php"] [unique_id "aaLzW36mbajs3bzQGyut3wAAAUI"]
[Sat Feb 28 21:53:31.506828 2026] [:error] [pid 39292:tid 39311] [client 20.220.8.64:49885] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aaLzW6IAO5fN7BxyqcGJ6gAAANE"]
[Sat Feb 28 21:53:31.925316 2026] [:error] [pid 39183:tid 39200] [client 20.220.8.64:49823] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aaLzWxCf4HvhVePw3LZpQAAAAAg"]
[Sat Feb 28 21:53:32.382267 2026] [:error] [pid 39183:tid 39213] [client 20.220.8.64:49941] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aaLzXBCf4HvhVePw3LZpSQAAABU"]
[Sat Feb 28 21:53:32.805756 2026] [:error] [pid 49763:tid 49767] [client 20.220.8.64:49873] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aaLzXLTHSOG_yf2PpqGceAAAAcE"]
[Sat Feb 28 21:53:33.233849 2026] [:error] [pid 52460:tid 52484] [client 20.220.8.64:49883] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fe5.php"] [unique_id "aaLzXbLWOogAgHGh62SiQwAAAZU"]
[Sat Feb 28 21:53:33.655620 2026] [:error] [pid 52460:tid 52463] [client 20.220.8.64:49983] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fe5.php"] [unique_id "aaLzXbLWOogAgHGh62SiRgAAAYA"]
[Sat Feb 28 21:53:34.082988 2026] [:error] [pid 52460:tid 52470] [client 20.220.8.64:49976] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fe5.php"] [unique_id "aaLzXrLWOogAgHGh62SiTAAAAYc"]
[Sat Feb 28 21:53:34.499307 2026] [:error] [pid 11791:tid 11814] [client 20.220.8.64:49805] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fe5.php"] [unique_id "aaLzXmuX5e1Q32gqxH3QMAAAARU"]
[Sat Feb 28 21:53:34.912081 2026] [:error] [pid 39184:tid 39237] [client 20.220.8.64:49818] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kj.php"] [unique_id "aaLzXltZF9Zd_U7easDWFwAAAFI"]
[Sat Feb 28 21:53:35.341103 2026] [:error] [pid 49763:tid 49783] [client 20.220.8.64:49896] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kj.php"] [unique_id "aaLzX7THSOG_yf2PpqGchwAAAdE"]
[Sat Feb 28 21:53:35.760348 2026] [:error] [pid 39184:tid 39232] [client 20.220.8.64:49830] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kj.php"] [unique_id "aaLzX1tZF9Zd_U7easDWIwAAAE0"]
[Sat Feb 28 21:53:36.174659 2026] [:error] [pid 22194:tid 22214] [client 20.220.8.64:49967] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kj.php"] [unique_id "aaLzYH6mbajs3bzQGyut4wAAAVI"]
[Sat Feb 28 21:53:36.586801 2026] [:error] [pid 39292:tid 39312] [client 20.220.8.64:49899] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aaLzYKIAO5fN7BxyqcGJ7gAAANI"]
[Sat Feb 28 21:53:37.008932 2026] [:error] [pid 39183:tid 39215] [client 20.220.8.64:49861] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aaLzYRCf4HvhVePw3LZpWgAAABc"]
[Sat Feb 28 21:53:37.427897 2026] [:error] [pid 49763:tid 49786] [client 20.220.8.64:49792] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aaLzYbTHSOG_yf2PpqGckAAAAdQ"]
[Sat Feb 28 21:53:37.917491 2026] [:error] [pid 49763:tid 49773] [client 20.220.8.64:49895] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aaLzYbTHSOG_yf2PpqGclgAAAcc"]
[Sat Feb 28 21:53:38.404451 2026] [:error] [pid 39183:tid 39214] [client 20.220.8.64:49838] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/av.php"] [unique_id "aaLzYhCf4HvhVePw3LZpXQAAABY"]
[Sat Feb 28 21:53:38.838288 2026] [:error] [pid 39184:tid 39239] [client 20.220.8.64:49893] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/av.php"] [unique_id "aaLzYltZF9Zd_U7easDWMAAAAFQ"]
[Sat Feb 28 21:53:39.269142 2026] [:error] [pid 49763:tid 49786] [client 20.220.8.64:49821] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/av.php"] [unique_id "aaLzY7THSOG_yf2PpqGcpgAAAdQ"]
[Sat Feb 28 21:53:39.747420 2026] [:error] [pid 39183:tid 39213] [client 20.220.8.64:49897] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/av.php"] [unique_id "aaLzYxCf4HvhVePw3LZpaQAAABU"]
[Sat Feb 28 21:53:40.157035 2026] [:error] [pid 39183:tid 39207] [client 20.220.8.64:49828] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/abcd.php"] [unique_id "aaLzZBCf4HvhVePw3LZpagAAAA8"]
[Sat Feb 28 21:53:40.580731 2026] [:error] [pid 11791:tid 11798] [client 20.220.8.64:49812] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/abcd.php"] [unique_id "aaLzZGuX5e1Q32gqxH3QOgAAAQU"]
[Sat Feb 28 21:53:40.997988 2026] [:error] [pid 49763:tid 49775] [client 20.220.8.64:49897] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/abcd.php"] [unique_id "aaLzZLTHSOG_yf2PpqGcswAAAck"]
[Sat Feb 28 21:53:41.426924 2026] [:error] [pid 49763:tid 49781] [client 20.220.8.64:49802] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/abcd.php"] [unique_id "aaLzZbTHSOG_yf2PpqGcuQAAAc8"]
[Sat Feb 28 21:53:41.847164 2026] [:error] [pid 39184:tid 39220] [client 20.220.8.64:50038] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/init.php"] [unique_id "aaLzZVtZF9Zd_U7easDWMwAAAEE"]
[Sat Feb 28 21:53:42.265866 2026] [:error] [pid 39292:tid 39294] [client 20.220.8.64:49849] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/init.php"] [unique_id "aaLzZqIAO5fN7BxyqcGJ9gAAAMA"]
[Sat Feb 28 21:53:42.686824 2026] [:error] [pid 39183:tid 39203] [client 20.220.8.64:49736] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/init.php"] [unique_id "aaLzZhCf4HvhVePw3LZpewAAAAs"]
[Sat Feb 28 21:53:43.113923 2026] [:error] [pid 39185:tid 39264] [client 20.220.8.64:49772] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/init.php"] [unique_id "aaLzZxVE-FfM89u7BQaqpwAAAJI"]
[Sat Feb 28 21:53:43.529108 2026] [:error] [pid 39183:tid 39211] [client 20.220.8.64:49793] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fi.php"] [unique_id "aaLzZxCf4HvhVePw3LZpggAAABM"]
[Sat Feb 28 21:53:43.964522 2026] [:error] [pid 49763:tid 49768] [client 20.220.8.64:49906] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fi.php"] [unique_id "aaLzZ7THSOG_yf2PpqGcxwAAAcI"]
[Sat Feb 28 21:53:44.387733 2026] [:error] [pid 49763:tid 49780] [client 20.220.8.64:49831] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fi.php"] [unique_id "aaLzaLTHSOG_yf2PpqGczAAAAc4"]
[Sat Feb 28 21:53:44.809574 2026] [:error] [pid 39183:tid 39206] [client 20.220.8.64:49755] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fi.php"] [unique_id "aaLzaBCf4HvhVePw3LZpigAAAA4"]
[Sat Feb 28 21:53:45.220055 2026] [:error] [pid 39183:tid 39197] [client 20.220.8.64:50010] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a1.php"] [unique_id "aaLzaRCf4HvhVePw3LZpkQAAAAU"]
[Sat Feb 28 21:53:45.639343 2026] [:error] [pid 49763:tid 49785] [client 20.220.8.64:49852] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a1.php"] [unique_id "aaLzabTHSOG_yf2PpqGc1AAAAdM"]
[Sat Feb 28 21:53:46.103944 2026] [:error] [pid 52460:tid 52478] [client 20.220.8.64:49810] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a1.php"] [unique_id "aaLzarLWOogAgHGh62SikAAAAY8"]
[Sat Feb 28 21:53:46.524402 2026] [:error] [pid 52460:tid 52474] [client 20.220.8.64:49902] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a1.php"] [unique_id "aaLzarLWOogAgHGh62SilQAAAYs"]
[Sat Feb 28 21:53:46.947977 2026] [:error] [pid 49763:tid 49774] [client 20.220.8.64:49844] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/update/f35.php"] [unique_id "aaLzarTHSOG_yf2PpqGc3AAAAcg"]
[Sat Feb 28 21:53:47.413037 2026] [:error] [pid 49763:tid 49779] [client 20.220.8.64:49894] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/update/f35.php"] [unique_id "aaLza7THSOG_yf2PpqGc5QAAAc0"]
[Sat Feb 28 21:53:47.826061 2026] [:error] [pid 39184:tid 39232] [client 20.220.8.64:49807] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/update/f35.php"] [unique_id "aaLza1tZF9Zd_U7easDWOAAAAE0"]
[Sat Feb 28 21:53:48.278778 2026] [:error] [pid 11791:tid 11813] [client 20.220.8.64:49919] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/update/f35.php"] [unique_id "aaLzbGuX5e1Q32gqxH3QPwAAARQ"]
[Sat Feb 28 21:53:48.760518 2026] [:error] [pid 39184:tid 39225] [client 20.220.8.64:49877] [client 20.220.8.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aaLzbFtZF9Zd_U7easDWOwAAAEY"]
[Sat Feb 28 21:53:49.203961 2026] [:error] [pid 49763:tid 49782] [client 20.220.8.64:49742] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f35.php"] [unique_id "aaLzbbTHSOG_yf2PpqGc9gAAAdA"]
[Sat Feb 28 21:53:49.632613 2026] [:error] [pid 11791:tid 11803] [client 20.220.8.64:49922] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f35.php"] [unique_id "aaLzbWuX5e1Q32gqxH3QRgAAAQo"]
[Sat Feb 28 21:53:50.095345 2026] [:error] [pid 39183:tid 39198] [client 20.220.8.64:49921] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f35.php"] [unique_id "aaLzbhCf4HvhVePw3LZprAAAAAY"]
[Sat Feb 28 21:53:50.548127 2026] [:error] [pid 39183:tid 39208] [client 20.220.8.64:49741] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f35.php"] [unique_id "aaLzbhCf4HvhVePw3LZprQAAABA"]
[Sat Feb 28 21:53:50.966847 2026] [:error] [pid 52460:tid 52471] [client 20.220.8.64:49840] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hi.php"] [unique_id "aaLzbrLWOogAgHGh62SisgAAAYg"]
[Sat Feb 28 21:53:51.390703 2026] [:error] [pid 22194:tid 22209] [client 20.220.8.64:49740] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hi.php"] [unique_id "aaLzb36mbajs3bzQGyut8wAAAU0"]
[Sat Feb 28 21:53:51.825673 2026] [:error] [pid 11791:tid 11809] [client 20.220.8.64:49858] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hi.php"] [unique_id "aaLzb2uX5e1Q32gqxH3QSgAAARA"]
[Sat Feb 28 21:53:52.276880 2026] [:error] [pid 52460:tid 52483] [client 20.220.8.64:49870] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hi.php"] [unique_id "aaLzcLLWOogAgHGh62SiuwAAAZQ"]
[Sat Feb 28 21:53:52.694447 2026] [:error] [pid 39183:tid 39203] [client 20.220.8.64:49760] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lala.php"] [unique_id "aaLzcBCf4HvhVePw3LZptAAAAAs"]
[Sat Feb 28 21:53:53.109242 2026] [:error] [pid 22194:tid 22198] [client 20.220.8.64:49748] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lala.php"] [unique_id "aaLzcX6mbajs3bzQGyut9gAAAUI"]
[Sat Feb 28 21:53:53.562623 2026] [:error] [pid 22194:tid 22206] [client 20.220.8.64:49803] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lala.php"] [unique_id "aaLzcX6mbajs3bzQGyut9wAAAUo"]
[Sat Feb 28 21:53:53.990803 2026] [:error] [pid 39292:tid 39317] [client 20.220.8.64:49955] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lala.php"] [unique_id "aaLzcaIAO5fN7BxyqcGKAgAAANc"]
[Sat Feb 28 21:53:54.504986 2026] [:error] [pid 39183:tid 39199] [client 20.220.8.64:49763] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lb.php"] [unique_id "aaLzchCf4HvhVePw3LZpvQAAAAc"]
[Sat Feb 28 21:53:54.917570 2026] [:error] [pid 49763:tid 49788] [client 20.220.8.64:49811] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lb.php"] [unique_id "aaLzcrTHSOG_yf2PpqGdIQAAAdY"]
[Sat Feb 28 21:53:55.351733 2026] [:error] [pid 49763:tid 49789] [client 20.220.8.64:49977] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lb.php"] [unique_id "aaLzc7THSOG_yf2PpqGdIwAAAdc"]
[Sat Feb 28 21:53:55.833738 2026] [:error] [pid 39292:tid 39314] [client 20.220.8.64:49689] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lb.php"] [unique_id "aaLzc6IAO5fN7BxyqcGKCwAAANQ"]
[Sat Feb 28 21:53:56.259176 2026] [:error] [pid 22194:tid 22214] [client 20.220.8.64:49904] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aaLzdH6mbajs3bzQGyut-gAAAVI"]
[Sat Feb 28 21:53:56.676689 2026] [:error] [pid 22194:tid 22200] [client 20.220.8.64:49846] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aaLzdH6mbajs3bzQGyut_gAAAUQ"]
[Sat Feb 28 21:53:57.092870 2026] [:error] [pid 52460:tid 52475] [client 20.220.8.64:49836] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aaLzdbLWOogAgHGh62Si0gAAAYw"]
[Sat Feb 28 21:53:57.512962 2026] [:error] [pid 52460:tid 52481] [client 20.220.8.64:49794] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aaLzdbLWOogAgHGh62Si2QAAAZI"]
[Sat Feb 28 21:53:57.931677 2026] [:error] [pid 39185:tid 39255] [client 20.220.8.64:49766] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/0.php"] [unique_id "aaLzdRVE-FfM89u7BQaqvwAAAIk"]
[Sat Feb 28 21:53:58.377815 2026] [:error] [pid 39292:tid 39316] [client 20.220.8.64:49980] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/0.php"] [unique_id "aaLzdqIAO5fN7BxyqcGKEwAAANY"]
[Sat Feb 28 21:53:58.817710 2026] [:error] [pid 49763:tid 49781] [client 20.220.8.64:49799] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/0.php"] [unique_id "aaLzdrTHSOG_yf2PpqGdMQAAAc8"]
[Sat Feb 28 21:53:59.255288 2026] [:error] [pid 39292:tid 39317] [client 20.220.8.64:49917] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/0.php"] [unique_id "aaLzd6IAO5fN7BxyqcGKFgAAANc"]
[Sat Feb 28 21:53:59.695269 2026] [:error] [pid 49763:tid 49772] [client 20.220.8.64:49863] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/core.php"] [unique_id "aaLzd7THSOG_yf2PpqGdOwAAAcY"]
[Sat Feb 28 21:54:00.141235 2026] [:error] [pid 39184:tid 39228] [client 20.220.8.64:49848] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/core.php"] [unique_id "aaLzeFtZF9Zd_U7easDWTgAAAEk"]
[Sat Feb 28 21:54:00.556253 2026] [:error] [pid 11791:tid 11814] [client 20.220.8.64:49738] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/core.php"] [unique_id "aaLzeGuX5e1Q32gqxH3QVgAAARU"]
[Sat Feb 28 21:54:00.966580 2026] [:error] [pid 49763:tid 49781] [client 20.220.8.64:49751] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/core.php"] [unique_id "aaLzeLTHSOG_yf2PpqGdRwAAAc8"]
[Sat Feb 28 21:54:01.424924 2026] [:error] [pid 49763:tid 49766] [client 20.220.8.64:49891] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/autogooey.php"] [unique_id "aaLzebTHSOG_yf2PpqGdSwAAAcA"]
[Sat Feb 28 21:54:01.840882 2026] [:error] [pid 49763:tid 49772] [client 20.220.8.64:49808] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/autogooey.php"] [unique_id "aaLzebTHSOG_yf2PpqGdTwAAAcY"]
[Sat Feb 28 21:54:02.271721 2026] [:error] [pid 52460:tid 52482] [client 20.220.8.64:50029] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/autogooey.php"] [unique_id "aaLzerLWOogAgHGh62Si4AAAAZM"]
[Sat Feb 28 21:54:02.686122 2026] [:error] [pid 39183:tid 39200] [client 20.220.8.64:49778] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/autogooey.php"] [unique_id "aaLzehCf4HvhVePw3LZpzwAAAAg"]
[Sat Feb 28 21:54:03.102748 2026] [:error] [pid 49763:tid 49780] [client 20.220.8.64:49729] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aaLze7THSOG_yf2PpqGdUgAAAc4"]
[Sat Feb 28 21:54:03.562509 2026] [:error] [pid 39292:tid 39309] [client 20.220.8.64:49780] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aaLze6IAO5fN7BxyqcGKHAAAAM8"]
[Sat Feb 28 21:54:03.981299 2026] [:error] [pid 52460:tid 52479] [client 20.220.8.64:49809] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aaLze7LWOogAgHGh62Si5gAAAZA"]
[Sat Feb 28 21:54:04.398542 2026] [:error] [pid 39185:tid 39259] [client 20.220.8.64:49771] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aaLzfBVE-FfM89u7BQaqwQAAAI0"]
[Sat Feb 28 21:54:04.817179 2026] [:error] [pid 49763:tid 49779] [client 20.220.8.64:49804] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/prv8.php"] [unique_id "aaLzfLTHSOG_yf2PpqGdWgAAAc0"]
[Sat Feb 28 21:54:05.231698 2026] [:error] [pid 39292:tid 39301] [client 20.220.8.64:49910] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/prv8.php"] [unique_id "aaLzfaIAO5fN7BxyqcGKIAAAAMc"]
[Sat Feb 28 21:54:05.642692 2026] [:error] [pid 39185:tid 39254] [client 20.220.8.64:49710] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/prv8.php"] [unique_id "aaLzfRVE-FfM89u7BQaqwwAAAIg"]
[Sat Feb 28 21:54:06.061759 2026] [:error] [pid 52460:tid 52471] [client 20.220.8.64:49814] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/prv8.php"] [unique_id "aaLzfrLWOogAgHGh62Si7QAAAYg"]
[Sat Feb 28 21:54:06.486336 2026] [:error] [pid 39185:tid 39247] [client 20.220.8.64:49752] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/k.php"] [unique_id "aaLzfhVE-FfM89u7BQaqxAAAAIE"]
[Sat Feb 28 21:54:06.920968 2026] [:error] [pid 52460:tid 52473] [client 20.220.8.64:49843] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/k.php"] [unique_id "aaLzfrLWOogAgHGh62Si9wAAAYo"]
[Sat Feb 28 21:54:07.347343 2026] [:error] [pid 39292:tid 39308] [client 20.220.8.64:49866] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/k.php"] [unique_id "aaLzf6IAO5fN7BxyqcGKJQAAAM4"]
[Sat Feb 28 21:54:07.776873 2026] [:error] [pid 39183:tid 39201] [client 20.220.8.64:49728] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/k.php"] [unique_id "aaLzfxCf4HvhVePw3LZp6AAAAAk"]
[Sat Feb 28 21:54:08.235366 2026] [:error] [pid 52460:tid 52479] [client 20.220.8.64:49685] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dev.php"] [unique_id "aaLzgLLWOogAgHGh62Si_AAAAZA"]
[Sat Feb 28 21:54:08.671307 2026] [:error] [pid 39292:tid 39299] [client 20.220.8.64:49664] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dev.php"] [unique_id "aaLzgKIAO5fN7BxyqcGKKwAAAMU"]
[Sat Feb 28 21:54:09.103224 2026] [:error] [pid 11791:tid 11800] [client 20.220.8.64:49837] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dev.php"] [unique_id "aaLzgWuX5e1Q32gqxH3QeAAAAQc"]
[Sat Feb 28 21:54:09.523598 2026] [:error] [pid 11791:tid 11794] [client 20.220.8.64:49839] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dev.php"] [unique_id "aaLzgWuX5e1Q32gqxH3QewAAAQE"]
[Sat Feb 28 21:54:09.969644 2026] [:error] [pid 52460:tid 52474] [client 20.220.8.64:49834] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x123x.php"] [unique_id "aaLzgbLWOogAgHGh62SjDgAAAYs"]
[Sat Feb 28 21:54:10.389061 2026] [:error] [pid 11791:tid 11815] [client 20.220.8.64:49746] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x123x.php"] [unique_id "aaLzgmuX5e1Q32gqxH3QgQAAARY"]
[Sat Feb 28 21:54:10.812202 2026] [:error] [pid 52460:tid 52473] [client 20.220.8.64:49935] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x123x.php"] [unique_id "aaLzgrLWOogAgHGh62SjGAAAAYo"]
[Sat Feb 28 21:54:11.314029 2026] [:error] [pid 49763:tid 49785] [client 20.220.8.64:49787] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x123x.php"] [unique_id "aaLzg7THSOG_yf2PpqGdZgAAAdM"]
[Sat Feb 28 21:54:11.763197 2026] [:error] [pid 39292:tid 39296] [client 20.220.8.64:49905] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bal.php"] [unique_id "aaLzg6IAO5fN7BxyqcGKLQAAAMI"]
[Sat Feb 28 21:54:12.219645 2026] [:error] [pid 49763:tid 49769] [client 20.220.8.64:49825] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bal.php"] [unique_id "aaLzhLTHSOG_yf2PpqGdagAAAcM"]
[Sat Feb 28 21:54:12.681787 2026] [:error] [pid 39292:tid 39302] [client 20.220.8.64:49768] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bal.php"] [unique_id "aaLzhKIAO5fN7BxyqcGKLwAAAMg"]
[Sat Feb 28 21:54:13.109620 2026] [:error] [pid 52460:tid 52464] [client 20.220.8.64:49822] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bal.php"] [unique_id "aaLzhbLWOogAgHGh62SjKgAAAYE"]
[Sat Feb 28 21:54:13.564120 2026] [:error] [pid 11791:tid 11809] [client 20.220.8.64:49800] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/in.php"] [unique_id "aaLzhWuX5e1Q32gqxH3QkQAAARA"]
[Sat Feb 28 21:54:14.036813 2026] [:error] [pid 52460:tid 52478] [client 20.220.8.64:49907] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/in.php"] [unique_id "aaLzhrLWOogAgHGh62SjMwAAAY8"]
[Sat Feb 28 21:54:14.650777 2026] [:error] [pid 39185:tid 39261] [client 20.220.8.64:49884] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/in.php"] [unique_id "aaLzhhVE-FfM89u7BQaqzwAAAI8"]
[Sat Feb 28 21:54:15.075599 2026] [:error] [pid 39185:tid 39253] [client 20.220.8.64:49782] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/in.php"] [unique_id "aaLzhxVE-FfM89u7BQaq0QAAAIc"]
[Sat Feb 28 21:54:15.537739 2026] [:error] [pid 39185:tid 39256] [client 20.220.8.64:49777] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gssdd.php"] [unique_id "aaLzhxVE-FfM89u7BQaq0wAAAIo"]
[Sat Feb 28 21:54:15.966254 2026] [:error] [pid 49763:tid 49769] [client 20.220.8.64:49869] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gssdd.php"] [unique_id "aaLzh7THSOG_yf2PpqGdjwAAAcM"]
[Sat Feb 28 21:54:16.415385 2026] [:error] [pid 49763:tid 49785] [client 20.220.8.64:50018] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gssdd.php"] [unique_id "aaLziLTHSOG_yf2PpqGdlgAAAdM"]
[Sat Feb 28 21:54:16.830100 2026] [:error] [pid 52460:tid 52473] [client 20.220.8.64:49749] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gssdd.php"] [unique_id "aaLziLLWOogAgHGh62SjUAAAAYo"]
[Sat Feb 28 21:54:17.289289 2026] [:error] [pid 49763:tid 49775] [client 20.220.8.64:49826] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/motu.php"] [unique_id "aaLzibTHSOG_yf2PpqGdowAAAck"]
[Sat Feb 28 21:54:17.707301 2026] [:error] [pid 49763:tid 49772] [client 20.220.8.64:49776] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/motu.php"] [unique_id "aaLzibTHSOG_yf2PpqGdqwAAAcY"]
[Sat Feb 28 21:54:18.138006 2026] [:error] [pid 39184:tid 39224] [client 20.220.8.64:49829] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/motu.php"] [unique_id "aaLziltZF9Zd_U7easDWYAAAAEU"]
[Sat Feb 28 21:54:18.571768 2026] [:error] [pid 39183:tid 39209] [client 20.220.8.64:49764] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/motu.php"] [unique_id "aaLzihCf4HvhVePw3LZp_gAAABE"]
[Sat Feb 28 21:54:19.012541 2026] [:error] [pid 39183:tid 39208] [client 20.220.8.64:49759] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bs1.php"] [unique_id "aaLzixCf4HvhVePw3LZqAgAAABA"]
[Sat Feb 28 21:54:19.433081 2026] [:error] [pid 39183:tid 39203] [client 20.220.8.64:49770] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bs1.php"] [unique_id "aaLzixCf4HvhVePw3LZqBwAAAAs"]
[Sat Feb 28 21:54:19.908329 2026] [:error] [pid 39184:tid 39232] [client 20.220.8.64:49775] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bs1.php"] [unique_id "aaLzi1tZF9Zd_U7easDWYQAAAE0"]
[Sat Feb 28 21:54:20.321753 2026] [:error] [pid 39185:tid 39247] [client 20.220.8.64:49853] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bs1.php"] [unique_id "aaLzjBVE-FfM89u7BQaq2AAAAIE"]
[Sat Feb 28 21:54:20.739817 2026] [:error] [pid 52460:tid 52487] [client 20.220.8.64:49815] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bengi.php"] [unique_id "aaLzjLLWOogAgHGh62SjcwAAAZg"]
[Sat Feb 28 21:54:21.177620 2026] [:error] [pid 39292:tid 39298] [client 20.220.8.64:49675] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bengi.php"] [unique_id "aaLzjaIAO5fN7BxyqcGKOAAAAMQ"]
[Sat Feb 28 21:54:21.600227 2026] [:error] [pid 49763:tid 49773] [client 20.220.8.64:50126] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bengi.php"] [unique_id "aaLzjbTHSOG_yf2PpqGdyAAAAcc"]
[Sat Feb 28 21:54:22.029990 2026] [:error] [pid 49763:tid 49778] [client 20.220.8.64:49735] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bengi.php"] [unique_id "aaLzjrTHSOG_yf2PpqGdzgAAAcw"]
[Sat Feb 28 21:54:22.455739 2026] [:error] [pid 52460:tid 52481] [client 20.220.8.64:49715] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/log.php"] [unique_id "aaLzjrLWOogAgHGh62SjeQAAAZI"]
[Sat Feb 28 21:54:22.872699 2026] [:error] [pid 49763:tid 49788] [client 20.220.8.64:49769] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/log.php"] [unique_id "aaLzjrTHSOG_yf2PpqGd1AAAAdY"]
[Sat Feb 28 21:54:23.293137 2026] [:error] [pid 39184:tid 39233] [client 20.220.8.64:49680] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/log.php"] [unique_id "aaLzj1tZF9Zd_U7easDWaAAAAE4"]
[Sat Feb 28 21:54:23.777578 2026] [:error] [pid 39185:tid 39260] [client 20.220.8.64:49790] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/log.php"] [unique_id "aaLzjxVE-FfM89u7BQaq2wAAAI4"]
[Sat Feb 28 21:54:24.203365 2026] [:error] [pid 39185:tid 39246] [client 20.220.8.64:49698] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/miansha.php"] [unique_id "aaLzkBVE-FfM89u7BQaq3AAAAIA"]
[Sat Feb 28 21:54:24.626033 2026] [:error] [pid 39183:tid 39192] [client 20.220.8.64:49817] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/miansha.php"] [unique_id "aaLzkBCf4HvhVePw3LZqFgAAAAA"]
[Sat Feb 28 21:54:25.035076 2026] [:error] [pid 11791:tid 11803] [client 20.220.8.64:49601] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/miansha.php"] [unique_id "aaLzkWuX5e1Q32gqxH3QmgAAAQo"]
[Sat Feb 28 21:54:25.454028 2026] [:error] [pid 49763:tid 49766] [client 20.220.8.64:49756] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/miansha.php"] [unique_id "aaLzkbTHSOG_yf2PpqGd6gAAAcA"]
[Sat Feb 28 21:54:25.865544 2026] [:error] [pid 49763:tid 49772] [client 20.220.8.64:49744] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/erty.php"] [unique_id "aaLzkbTHSOG_yf2PpqGd7QAAAcY"]
[Sat Feb 28 21:54:26.294383 2026] [proxy_fcgi:error] [pid 22194:tid 22212] [client 20.220.8.64:49781] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:54:26.712021 2026] [proxy_fcgi:error] [pid 22194:tid 22213] [client 20.220.8.64:49781] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:54:26.920081 2026] [proxy_fcgi:error] [pid 22194:tid 22215] [client 20.220.8.64:49781] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:54:27.131121 2026] [proxy_fcgi:error] [pid 22194:tid 22211] [client 20.220.8.64:49781] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:54:27.339559 2026] [proxy_fcgi:error] [pid 22194:tid 22203] [client 20.220.8.64:49781] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:54:27.548207 2026] [proxy_fcgi:error] [pid 22194:tid 22209] [client 20.220.8.64:49781] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:54:27.761333 2026] [proxy_fcgi:error] [pid 22194:tid 22198] [client 20.220.8.64:49781] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:54:27.969113 2026] [proxy_fcgi:error] [pid 22194:tid 22206] [client 20.220.8.64:49781] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:54:28.180334 2026] [proxy_fcgi:error] [pid 22194:tid 22197] [client 20.220.8.64:49781] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:54:28.389268 2026] [proxy_fcgi:error] [pid 22194:tid 22208] [client 20.220.8.64:49781] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:54:28.594230 2026] [:error] [pid 22194:tid 22210] [client 20.220.8.64:49781] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gettest.php"] [unique_id "aaLzlH6mbajs3bzQGyuuMgAAAU4"]
[Sat Feb 28 21:54:29.020502 2026] [:error] [pid 52460:tid 52463] [client 20.220.8.64:49841] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gettest.php"] [unique_id "aaLzlbLWOogAgHGh62SjjAAAAYA"]
[Sat Feb 28 21:54:29.447512 2026] [:error] [pid 39183:tid 39214] [client 20.220.8.64:49850] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gettest.php"] [unique_id "aaLzlRCf4HvhVePw3LZqHgAAABY"]
[Sat Feb 28 21:54:29.867600 2026] [:error] [pid 39183:tid 39205] [client 20.220.8.64:49709] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gettest.php"] [unique_id "aaLzlRCf4HvhVePw3LZqIgAAAA0"]
[Sat Feb 28 21:54:30.388087 2026] [:error] [pid 52460:tid 52478] [client 20.220.8.64:49743] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/acp.php"] [unique_id "aaLzlrLWOogAgHGh62SjkAAAAY8"]
[Sat Feb 28 21:54:30.911518 2026] [:error] [pid 22194:tid 22219] [client 20.220.8.64:49835] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/acp.php"] [unique_id "aaLzln6mbajs3bzQGyuuMwAAAVc"]
[Sat Feb 28 21:54:31.416313 2026] [:error] [pid 49763:tid 49781] [client 20.220.8.64:49541] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/acp.php"] [unique_id "aaLzl7THSOG_yf2PpqGd_gAAAc8"]
[Sat Feb 28 21:54:31.876326 2026] [:error] [pid 49763:tid 49789] [client 20.220.8.64:49890] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/acp.php"] [unique_id "aaLzl7THSOG_yf2PpqGeBQAAAdc"]
[Sat Feb 28 21:54:32.319217 2026] [:error] [pid 39185:tid 39270] [client 20.220.8.64:49854] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/database.php"] [unique_id "aaLzmBVE-FfM89u7BQaq7AAAAJg"]
[Sat Feb 28 21:54:32.756150 2026] [:error] [pid 39184:tid 39238] [client 20.220.8.64:49960] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/database.php"] [unique_id "aaLzmFtZF9Zd_U7easDWgwAAAFM"]
[Sat Feb 28 21:54:33.178332 2026] [:error] [pid 39184:tid 39240] [client 20.220.8.64:49701] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/database.php"] [unique_id "aaLzmVtZF9Zd_U7easDWigAAAFU"]
[Sat Feb 28 21:54:33.679000 2026] [:error] [pid 49763:tid 49782] [client 20.220.8.64:49677] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/database.php"] [unique_id "aaLzmbTHSOG_yf2PpqGeCwAAAdA"]
[Sat Feb 28 21:54:34.115806 2026] [:error] [pid 49763:tid 49783] [client 20.220.8.64:49702] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/swallowable.php"] [unique_id "aaLzmrTHSOG_yf2PpqGeDQAAAdE"]
[Sat Feb 28 21:54:34.553995 2026] [:error] [pid 39292:tid 39312] [client 20.220.8.64:49690] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/swallowable.php"] [unique_id "aaLzmqIAO5fN7BxyqcGKTwAAANI"]
[Sat Feb 28 21:54:35.093103 2026] [:error] [pid 52460:tid 52469] [client 20.220.8.64:49762] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/swallowable.php"] [unique_id "aaLzm7LWOogAgHGh62SjmQAAAYY"]
[Sat Feb 28 21:54:35.533757 2026] [:error] [pid 11791:tid 11793] [client 20.220.8.64:50057] [client 20.220.8.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/swallowable.php"] [unique_id "aaLzm2uX5e1Q32gqxH3QrQAAAQA"]
[Sat Feb 28 22:25:19.748142 2026] [proxy_fcgi:error] [pid 39185:tid 39270] [client 13.71.191.191:34777] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 22:25:19.958335 2026] [proxy_fcgi:error] [pid 39185:tid 39259] [client 13.71.191.191:34777] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 22:25:20.378403 2026] [proxy_fcgi:error] [pid 39185:tid 39269] [client 13.71.191.191:34777] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 22:25:20.588149 2026] [proxy_fcgi:error] [pid 39185:tid 39265] [client 13.71.191.191:34777] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 22:25:20.799688 2026] [proxy_fcgi:error] [pid 39185:tid 39246] [client 13.71.191.191:34777] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 22:25:21.009124 2026] [proxy_fcgi:error] [pid 39185:tid 39247] [client 13.71.191.191:34777] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 22:25:21.221963 2026] [proxy_fcgi:error] [pid 39185:tid 39256] [client 13.71.191.191:34777] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 22:25:21.430827 2026] [proxy_fcgi:error] [pid 39185:tid 39267] [client 13.71.191.191:34777] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 22:25:21.640493 2026] [proxy_fcgi:error] [pid 39185:tid 39251] [client 13.71.191.191:34777] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 22:25:21.846649 2026] [:error] [pid 39185:tid 39253] [client 13.71.191.191:34777] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/8.php"] [unique_id "aaL60RVE-FfM89u7BQaxVgAAAIc"]
[Sat Feb 28 22:25:22.257297 2026] [:error] [pid 49763:tid 49769] [client 13.71.191.191:34692] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/8.php"] [unique_id "aaL60rTHSOG_yf2PpqHLRgAAAcM"]
[Sat Feb 28 22:25:22.670120 2026] [:error] [pid 52460:tid 52485] [client 13.71.191.191:34697] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/8.php"] [unique_id "aaL60rLWOogAgHGh62S6EAAAAZY"]
[Sat Feb 28 22:25:23.083874 2026] [:error] [pid 39185:tid 39249] [client 13.71.191.191:34805] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/8.php"] [unique_id "aaL60xVE-FfM89u7BQaxWAAAAIM"]
[Sat Feb 28 22:25:23.498580 2026] [:error] [pid 39183:tid 39193] [client 13.71.191.191:34780] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/shop.php"] [unique_id "aaL60xCf4HvhVePw3LaJCgAAAAE"]
[Sat Feb 28 22:25:23.914663 2026] [:error] [pid 39292:tid 39309] [client 13.71.191.191:34799] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/shop.php"] [unique_id "aaL606IAO5fN7BxyqcGV0wAAAM8"]
[Sat Feb 28 22:25:24.329312 2026] [:error] [pid 39292:tid 39299] [client 13.71.191.191:34715] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/shop.php"] [unique_id "aaL61KIAO5fN7BxyqcGV1gAAAMU"]
[Sat Feb 28 22:25:24.739733 2026] [:error] [pid 49763:tid 49783] [client 13.71.191.191:34812] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/shop.php"] [unique_id "aaL61LTHSOG_yf2PpqHLVwAAAdE"]
[Sat Feb 28 22:25:25.155754 2026] [:error] [pid 39184:tid 39219] [client 13.71.191.191:34761] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/cxxuv.php"] [unique_id "aaL61VtZF9Zd_U7easDlYQAAAEA"]
[Sat Feb 28 22:25:25.569871 2026] [:error] [pid 22194:tid 22202] [client 13.71.191.191:34767] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/cxxuv.php"] [unique_id "aaL61X6mbajs3bzQGyuzjgAAAUY"]
[Sat Feb 28 22:25:25.985336 2026] [:error] [pid 52460:tid 52468] [client 13.71.191.191:34804] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/cxxuv.php"] [unique_id "aaL61bLWOogAgHGh62S6GgAAAYU"]
[Sat Feb 28 22:25:26.403146 2026] [:error] [pid 52460:tid 52470] [client 13.71.191.191:34693] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/cxxuv.php"] [unique_id "aaL61rLWOogAgHGh62S6IAAAAYc"]
[Sat Feb 28 22:25:26.813050 2026] [:error] [pid 39292:tid 39302] [client 13.71.191.191:34806] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/b.php"] [unique_id "aaL61qIAO5fN7BxyqcGV3wAAAMg"]
[Sat Feb 28 22:25:27.225929 2026] [:error] [pid 52460:tid 52479] [client 13.71.191.191:34701] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/b.php"] [unique_id "aaL617LWOogAgHGh62S6IwAAAZA"]
[Sat Feb 28 22:25:27.641763 2026] [:error] [pid 52460:tid 52482] [client 13.71.191.191:34702] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/b.php"] [unique_id "aaL617LWOogAgHGh62S6LAAAAZM"]
[Sat Feb 28 22:25:28.053512 2026] [:error] [pid 39183:tid 39192] [client 13.71.191.191:34752] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/b.php"] [unique_id "aaL62BCf4HvhVePw3LaJOwAAAAA"]
[Sat Feb 28 22:25:28.465581 2026] [:error] [pid 49763:tid 49769] [client 13.71.191.191:34725] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/gi.php"] [unique_id "aaL62LTHSOG_yf2PpqHLegAAAcM"]
[Sat Feb 28 22:25:28.876649 2026] [:error] [pid 22194:tid 22204] [client 13.71.191.191:34759] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/gi.php"] [unique_id "aaL62H6mbajs3bzQGyuzkAAAAUg"]
[Sat Feb 28 22:25:29.291056 2026] [:error] [pid 39292:tid 39315] [client 13.71.191.191:34739] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/gi.php"] [unique_id "aaL62aIAO5fN7BxyqcGV5QAAANU"]
[Sat Feb 28 22:25:29.710174 2026] [:error] [pid 49763:tid 49770] [client 13.71.191.191:34726] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/gi.php"] [unique_id "aaL62bTHSOG_yf2PpqHLgAAAAcQ"]
[Sat Feb 28 22:25:30.118797 2026] [:error] [pid 22194:tid 22206] [client 13.71.191.191:34754] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/e0v9e95c.php"] [unique_id "aaL62n6mbajs3bzQGyuzkgAAAUo"]
[Sat Feb 28 22:25:30.526294 2026] [:error] [pid 39183:tid 39192] [client 13.71.191.191:34815] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/e0v9e95c.php"] [unique_id "aaL62hCf4HvhVePw3LaJTAAAAAA"]
[Sat Feb 28 22:25:30.943206 2026] [:error] [pid 49763:tid 49789] [client 13.71.191.191:34719] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/e0v9e95c.php"] [unique_id "aaL62rTHSOG_yf2PpqHLiwAAAdc"]
[Sat Feb 28 22:25:31.353568 2026] [:error] [pid 49763:tid 49786] [client 13.71.191.191:34815] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/e0v9e95c.php"] [unique_id "aaL627THSOG_yf2PpqHLjwAAAdQ"]
[Sat Feb 28 22:25:31.763573 2026] [:error] [pid 49763:tid 49783] [client 13.71.191.191:34719] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/2gz1dxix.php"] [unique_id "aaL627THSOG_yf2PpqHLkwAAAdE"]
[Sat Feb 28 22:25:32.178250 2026] [:error] [pid 22194:tid 22211] [client 13.71.191.191:34781] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/2gz1dxix.php"] [unique_id "aaL63H6mbajs3bzQGyuzlAAAAU8"]
[Sat Feb 28 22:25:32.590693 2026] [:error] [pid 11791:tid 11798] [client 13.71.191.191:34798] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/2gz1dxix.php"] [unique_id "aaL63GuX5e1Q32gqxH3YRwAAAQU"]
[Sat Feb 28 22:25:33.005063 2026] [:error] [pid 49763:tid 49787] [client 13.71.191.191:34639] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/2gz1dxix.php"] [unique_id "aaL63bTHSOG_yf2PpqHLlwAAAdU"]
[Sat Feb 28 22:25:33.416571 2026] [:error] [pid 39183:tid 39196] [client 13.71.191.191:34705] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws75.php"] [unique_id "aaL63RCf4HvhVePw3LaJXAAAAAQ"]
[Sat Feb 28 22:25:33.846022 2026] [:error] [pid 39184:tid 39234] [client 13.71.191.191:34803] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws75.php"] [unique_id "aaL63VtZF9Zd_U7easDlbwAAAE8"]
[Sat Feb 28 22:25:34.261333 2026] [:error] [pid 39184:tid 39232] [client 13.71.191.191:34760] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws75.php"] [unique_id "aaL63ltZF9Zd_U7easDlcgAAAE0"]
[Sat Feb 28 22:25:34.669938 2026] [:error] [pid 52460:tid 52476] [client 13.71.191.191:34689] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws75.php"] [unique_id "aaL63rLWOogAgHGh62S6TAAAAY0"]
[Sat Feb 28 22:25:35.080648 2026] [:error] [pid 52460:tid 52465] [client 13.71.191.191:34809] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws49.php"] [unique_id "aaL637LWOogAgHGh62S6TwAAAYI"]
[Sat Feb 28 22:25:35.496258 2026] [:error] [pid 52460:tid 52468] [client 13.71.191.191:34631] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws49.php"] [unique_id "aaL637LWOogAgHGh62S6UwAAAYU"]
[Sat Feb 28 22:25:35.923776 2026] [:error] [pid 52460:tid 52485] [client 13.71.191.191:34814] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws49.php"] [unique_id "aaL637LWOogAgHGh62S6WAAAAZY"]
[Sat Feb 28 22:25:36.335453 2026] [:error] [pid 49763:tid 49769] [client 13.71.191.191:34695] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws49.php"] [unique_id "aaL64LTHSOG_yf2PpqHLpQAAAcM"]
[Sat Feb 28 22:25:36.747434 2026] [:error] [pid 39183:tid 39213] [client 13.71.191.191:34628] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bak.php"] [unique_id "aaL64BCf4HvhVePw3LaJZgAAABU"]
[Sat Feb 28 22:25:37.161303 2026] [:error] [pid 39183:tid 39198] [client 13.71.191.191:34775] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bak.php"] [unique_id "aaL64RCf4HvhVePw3LaJaQAAAAY"]
[Sat Feb 28 22:25:37.574942 2026] [:error] [pid 39183:tid 39209] [client 13.71.191.191:34768] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bak.php"] [unique_id "aaL64RCf4HvhVePw3LaJbQAAABE"]
[Sat Feb 28 22:25:37.994970 2026] [:error] [pid 49763:tid 49776] [client 13.71.191.191:34672] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bak.php"] [unique_id "aaL64bTHSOG_yf2PpqHLqgAAAco"]
[Sat Feb 28 22:25:38.403681 2026] [:error] [pid 49763:tid 49775] [client 13.71.191.191:34782] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/Y5MxLiVO9nK.php"] [unique_id "aaL64rTHSOG_yf2PpqHLrgAAAck"]
[Sat Feb 28 22:25:38.818049 2026] [:error] [pid 49763:tid 49771] [client 13.71.191.191:34699] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/Y5MxLiVO9nK.php"] [unique_id "aaL64rTHSOG_yf2PpqHLuQAAAcU"]
[Sat Feb 28 22:25:39.241530 2026] [:error] [pid 49763:tid 49780] [client 13.71.191.191:34688] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/Y5MxLiVO9nK.php"] [unique_id "aaL647THSOG_yf2PpqHLvgAAAc4"]
[Sat Feb 28 22:25:39.652988 2026] [:error] [pid 49763:tid 49780] [client 13.71.191.191:34762] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/Y5MxLiVO9nK.php"] [unique_id "aaL647THSOG_yf2PpqHLxQAAAc4"]
[Sat Feb 28 22:25:40.069707 2026] [:error] [pid 49763:tid 49781] [client 13.71.191.191:34770] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-f.php"] [unique_id "aaL65LTHSOG_yf2PpqHLzQAAAc8"]
[Sat Feb 28 22:25:40.482532 2026] [:error] [pid 49763:tid 49769] [client 13.71.191.191:34624] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-f.php"] [unique_id "aaL65LTHSOG_yf2PpqHL0QAAAcM"]
[Sat Feb 28 22:25:40.897027 2026] [:error] [pid 52460:tid 52464] [client 13.71.191.191:34696] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-f.php"] [unique_id "aaL65LLWOogAgHGh62S6aAAAAYE"]
[Sat Feb 28 22:25:41.311860 2026] [:error] [pid 11791:tid 11815] [client 13.71.191.191:34801] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-f.php"] [unique_id "aaL65WuX5e1Q32gqxH3YTQAAARY"]
[Sat Feb 28 22:25:41.722280 2026] [:error] [pid 39292:tid 39318] [client 13.71.191.191:34810] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/install.php"] [unique_id "aaL65aIAO5fN7BxyqcGV_AAAANg"]
[Sat Feb 28 22:25:42.134252 2026] [:error] [pid 52460:tid 52474] [client 13.71.191.191:34784] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/install.php"] [unique_id "aaL65rLWOogAgHGh62S6bQAAAYs"]
[Sat Feb 28 22:25:42.547908 2026] [:error] [pid 52460:tid 52476] [client 13.71.191.191:34737] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/install.php"] [unique_id "aaL65rLWOogAgHGh62S6cAAAAY0"]
[Sat Feb 28 22:25:42.964577 2026] [:error] [pid 11791:tid 11794] [client 13.71.191.191:34707] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/install.php"] [unique_id "aaL65muX5e1Q32gqxH3YWQAAAQE"]
[Sat Feb 28 22:25:43.384441 2026] [:error] [pid 52460:tid 52477] [client 13.71.191.191:34808] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/tx78.php"] [unique_id "aaL657LWOogAgHGh62S6cwAAAY4"]
[Sat Feb 28 22:25:43.798465 2026] [:error] [pid 39292:tid 39306] [client 13.71.191.191:34779] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/tx78.php"] [unique_id "aaL656IAO5fN7BxyqcGWEgAAAMw"]
[Sat Feb 28 22:25:44.209054 2026] [:error] [pid 52460:tid 52484] [client 13.71.191.191:34709] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/tx78.php"] [unique_id "aaL66LLWOogAgHGh62S6ewAAAZU"]
[Sat Feb 28 22:25:44.617547 2026] [:error] [pid 39183:tid 39209] [client 13.71.191.191:34724] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/tx78.php"] [unique_id "aaL66BCf4HvhVePw3LaJkAAAABE"]
[Sat Feb 28 22:25:45.037466 2026] [:error] [pid 39184:tid 39235] [client 13.71.191.191:34717] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp_bqLC0MQe.php"] [unique_id "aaL66VtZF9Zd_U7easDljgAAAFA"]
[Sat Feb 28 22:25:45.449089 2026] [:error] [pid 22194:tid 22196] [client 13.71.191.191:34772] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp_bqLC0MQe.php"] [unique_id "aaL66X6mbajs3bzQGyuznAAAAUA"]
[Sat Feb 28 22:25:45.862763 2026] [:error] [pid 49763:tid 49771] [client 13.71.191.191:34774] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp_bqLC0MQe.php"] [unique_id "aaL66bTHSOG_yf2PpqHL4AAAAcU"]
[Sat Feb 28 22:25:46.273675 2026] [:error] [pid 11791:tid 11804] [client 13.71.191.191:34785] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp_bqLC0MQe.php"] [unique_id "aaL66muX5e1Q32gqxH3YXwAAAQs"]
[Sat Feb 28 22:25:46.693786 2026] [:error] [pid 49763:tid 49767] [client 13.71.191.191:34753] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/0bb45ctt.php"] [unique_id "aaL66rTHSOG_yf2PpqHL5AAAAcE"]
[Sat Feb 28 22:25:47.106511 2026] [:error] [pid 39183:tid 39192] [client 13.71.191.191:34682] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/0bb45ctt.php"] [unique_id "aaL66xCf4HvhVePw3LaJmwAAAAA"]
[Sat Feb 28 22:25:47.520202 2026] [:error] [pid 39184:tid 39221] [client 13.71.191.191:34634] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/0bb45ctt.php"] [unique_id "aaL661tZF9Zd_U7easDllwAAAEI"]
[Sat Feb 28 22:25:47.930873 2026] [:error] [pid 39183:tid 39202] [client 13.71.191.191:34795] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/0bb45ctt.php"] [unique_id "aaL66xCf4HvhVePw3LaJogAAAAo"]
[Sat Feb 28 22:25:48.342598 2026] [:error] [pid 52460:tid 52482] [client 13.71.191.191:34636] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws80.php"] [unique_id "aaL67LLWOogAgHGh62S6ggAAAZM"]
[Sat Feb 28 22:25:48.761349 2026] [:error] [pid 49763:tid 49778] [client 13.71.191.191:34745] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws80.php"] [unique_id "aaL67LTHSOG_yf2PpqHL7gAAAcw"]
[Sat Feb 28 22:25:49.189805 2026] [:error] [pid 49763:tid 49787] [client 13.71.191.191:34796] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws80.php"] [unique_id "aaL67bTHSOG_yf2PpqHL8wAAAdU"]
[Sat Feb 28 22:25:49.609284 2026] [:error] [pid 39185:tid 39260] [client 13.71.191.191:34632] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws80.php"] [unique_id "aaL67RVE-FfM89u7BQaxagAAAI4"]
[Sat Feb 28 22:25:50.030349 2026] [:error] [pid 52460:tid 52469] [client 13.71.191.191:34721] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/tx79.php"] [unique_id "aaL67rLWOogAgHGh62S6hgAAAYY"]
[Sat Feb 28 22:25:50.448710 2026] [:error] [pid 52460:tid 52483] [client 13.71.191.191:34813] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/tx79.php"] [unique_id "aaL67rLWOogAgHGh62S6iAAAAZQ"]
[Sat Feb 28 22:25:50.865138 2026] [:error] [pid 52460:tid 52471] [client 13.71.191.191:34793] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/tx79.php"] [unique_id "aaL67rLWOogAgHGh62S6jQAAAYg"]
[Sat Feb 28 22:25:51.276363 2026] [:error] [pid 49763:tid 49773] [client 13.71.191.191:34755] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/tx79.php"] [unique_id "aaL677THSOG_yf2PpqHL-AAAAcc"]
[Sat Feb 28 22:25:51.687033 2026] [:error] [pid 49763:tid 49772] [client 13.71.191.191:34800] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/jp.php"] [unique_id "aaL677THSOG_yf2PpqHL-gAAAcY"]
[Sat Feb 28 22:25:52.096352 2026] [:error] [pid 52460:tid 52466] [client 13.71.191.191:34685] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/jp.php"] [unique_id "aaL68LLWOogAgHGh62S6lQAAAYM"]
[Sat Feb 28 22:25:52.508200 2026] [:error] [pid 52460:tid 52484] [client 13.71.191.191:34626] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/jp.php"] [unique_id "aaL68LLWOogAgHGh62S6mgAAAZU"]
[Sat Feb 28 22:25:52.922664 2026] [:error] [pid 39183:tid 39198] [client 13.71.191.191:34706] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/jp.php"] [unique_id "aaL68BCf4HvhVePw3LaJtAAAAAY"]
[Sat Feb 28 22:25:53.339528 2026] [:error] [pid 39183:tid 39215] [client 13.71.191.191:34735] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/sbhu.php"] [unique_id "aaL68RCf4HvhVePw3LaJuQAAABc"]
[Sat Feb 28 22:25:53.760246 2026] [:error] [pid 39183:tid 39197] [client 13.71.191.191:34791] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/sbhu.php"] [unique_id "aaL68RCf4HvhVePw3LaJvgAAAAU"]
[Sat Feb 28 22:25:54.170105 2026] [:error] [pid 22194:tid 22199] [client 13.71.191.191:34767] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/sbhu.php"] [unique_id "aaL68n6mbajs3bzQGyuznQAAAUM"]
[Sat Feb 28 22:25:54.583149 2026] [:error] [pid 39292:tid 39304] [client 13.71.191.191:34763] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/sbhu.php"] [unique_id "aaL68qIAO5fN7BxyqcGWLAAAAMo"]
[Sat Feb 28 22:25:54.996878 2026] [:error] [pid 22194:tid 22206] [client 13.71.191.191:34751] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/tt.php"] [unique_id "aaL68n6mbajs3bzQGyuzngAAAUo"]
[Sat Feb 28 22:25:55.416718 2026] [:error] [pid 52460:tid 52487] [client 13.71.191.191:34766] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/tt.php"] [unique_id "aaL687LWOogAgHGh62S6rQAAAZg"]
[Sat Feb 28 22:25:55.830922 2026] [:error] [pid 39183:tid 39192] [client 13.71.191.191:34700] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/tt.php"] [unique_id "aaL68xCf4HvhVePw3LaJyAAAAAA"]
[Sat Feb 28 22:25:56.242817 2026] [:error] [pid 39184:tid 39224] [client 13.71.191.191:34638] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/tt.php"] [unique_id "aaL69FtZF9Zd_U7easDlzwAAAEU"]
[Sat Feb 28 22:25:56.659476 2026] [:error] [pid 39292:tid 39297] [client 13.71.191.191:34733] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/62ix02bk.php"] [unique_id "aaL69KIAO5fN7BxyqcGWMgAAAMM"]
[Sat Feb 28 22:25:57.083659 2026] [:error] [pid 22194:tid 22198] [client 13.71.191.191:34720] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/62ix02bk.php"] [unique_id "aaL69X6mbajs3bzQGyuznwAAAUI"]
[Sat Feb 28 22:25:57.497503 2026] [:error] [pid 52460:tid 52463] [client 13.71.191.191:34716] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/62ix02bk.php"] [unique_id "aaL69bLWOogAgHGh62S6wAAAAYA"]
[Sat Feb 28 22:25:57.909648 2026] [:error] [pid 52460:tid 52481] [client 13.71.191.191:34658] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/62ix02bk.php"] [unique_id "aaL69bLWOogAgHGh62S6xAAAAZI"]
[Sat Feb 28 22:25:58.323619 2026] [:error] [pid 52460:tid 52474] [client 13.71.191.191:34731] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wdf.php"] [unique_id "aaL69rLWOogAgHGh62S6xgAAAYs"]
[Sat Feb 28 22:25:58.736190 2026] [:error] [pid 22194:tid 22217] [client 13.71.191.191:34747] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wdf.php"] [unique_id "aaL69n6mbajs3bzQGyuzpAAAAVU"]
[Sat Feb 28 22:25:59.146013 2026] [:error] [pid 49763:tid 49781] [client 13.71.191.191:34743] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wdf.php"] [unique_id "aaL697THSOG_yf2PpqHMBgAAAc8"]
[Sat Feb 28 22:25:59.559310 2026] [:error] [pid 22194:tid 22210] [client 13.71.191.191:34764] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wdf.php"] [unique_id "aaL6936mbajs3bzQGyuzpgAAAU4"]
[Sat Feb 28 22:25:59.976842 2026] [:error] [pid 49763:tid 49774] [client 13.71.191.191:34670] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/f6ijmjpa.php"] [unique_id "aaL697THSOG_yf2PpqHMDwAAAcg"]
[Sat Feb 28 22:26:00.396988 2026] [:error] [pid 52460:tid 52477] [client 13.71.191.191:34711] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/f6ijmjpa.php"] [unique_id "aaL6-LLWOogAgHGh62S6yQAAAY4"]
[Sat Feb 28 22:26:00.812368 2026] [:error] [pid 52460:tid 52476] [client 13.71.191.191:34790] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/f6ijmjpa.php"] [unique_id "aaL6-LLWOogAgHGh62S6ygAAAY0"]
[Sat Feb 28 22:26:01.222003 2026] [:error] [pid 52460:tid 52470] [client 13.71.191.191:34647] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/f6ijmjpa.php"] [unique_id "aaL6-bLWOogAgHGh62S6zwAAAYc"]
[Sat Feb 28 22:26:01.629959 2026] [:error] [pid 52460:tid 52485] [client 13.71.191.191:34654] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp_jVML8V37.php"] [unique_id "aaL6-bLWOogAgHGh62S60gAAAZY"]
[Sat Feb 28 22:26:02.039435 2026] [:error] [pid 11791:tid 11807] [client 13.71.191.191:34732] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp_jVML8V37.php"] [unique_id "aaL6-muX5e1Q32gqxH3YdAAAAQ4"]
[Sat Feb 28 22:26:02.453139 2026] [:error] [pid 52460:tid 52478] [client 13.71.191.191:34771] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp_jVML8V37.php"] [unique_id "aaL6-rLWOogAgHGh62S61gAAAY8"]
[Sat Feb 28 22:26:02.866950 2026] [:error] [pid 52460:tid 52469] [client 13.71.191.191:34640] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp_jVML8V37.php"] [unique_id "aaL6-rLWOogAgHGh62S63AAAAYY"]
[Sat Feb 28 22:26:03.275810 2026] [:error] [pid 11791:tid 11800] [client 13.71.191.191:34625] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/4wj632p1.php"] [unique_id "aaL6-2uX5e1Q32gqxH3YdwAAAQc"]
[Sat Feb 28 22:26:03.685865 2026] [:error] [pid 39292:tid 39299] [client 13.71.191.191:34567] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/4wj632p1.php"] [unique_id "aaL6-6IAO5fN7BxyqcGWNwAAAMU"]
[Sat Feb 28 22:26:04.097745 2026] [:error] [pid 39184:tid 39242] [client 13.71.191.191:34727] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/4wj632p1.php"] [unique_id "aaL6_FtZF9Zd_U7easDl4AAAAFc"]
[Sat Feb 28 22:26:04.508943 2026] [:error] [pid 22194:tid 22220] [client 13.71.191.191:34578] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/4wj632p1.php"] [unique_id "aaL6_H6mbajs3bzQGyuzpwAAAVg"]
[Sat Feb 28 22:26:04.917760 2026] [:error] [pid 22194:tid 22214] [client 13.71.191.191:34646] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws81.php"] [unique_id "aaL6_H6mbajs3bzQGyuzqQAAAVI"]
[Sat Feb 28 22:26:05.330435 2026] [:error] [pid 52460:tid 52486] [client 13.71.191.191:34669] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws81.php"] [unique_id "aaL6_bLWOogAgHGh62S64wAAAZc"]
[Sat Feb 28 22:26:05.742145 2026] [:error] [pid 22194:tid 22202] [client 13.71.191.191:34675] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws81.php"] [unique_id "aaL6_X6mbajs3bzQGyuzrAAAAUY"]
[Sat Feb 28 22:26:06.158764 2026] [:error] [pid 11791:tid 11804] [client 13.71.191.191:34802] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws81.php"] [unique_id "aaL6_muX5e1Q32gqxH3YewAAAQs"]
[Sat Feb 28 22:26:06.571036 2026] [:error] [pid 39292:tid 39294] [client 13.71.191.191:34756] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/e31hmf9b.php"] [unique_id "aaL6_qIAO5fN7BxyqcGWPQAAAMA"]
[Sat Feb 28 22:26:06.983263 2026] [:error] [pid 39183:tid 39215] [client 13.71.191.191:34773] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/e31hmf9b.php"] [unique_id "aaL6_hCf4HvhVePw3LaJ5gAAABc"]
[Sat Feb 28 22:26:07.392446 2026] [:error] [pid 39183:tid 39199] [client 13.71.191.191:34712] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/e31hmf9b.php"] [unique_id "aaL6_xCf4HvhVePw3LaJ6wAAAAc"]
[Sat Feb 28 22:26:07.802884 2026] [:error] [pid 11791:tid 11810] [client 13.71.191.191:34704] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/e31hmf9b.php"] [unique_id "aaL6_2uX5e1Q32gqxH3YfQAAARE"]
[Sat Feb 28 23:53:44.927953 2026] [:error] [pid 22194:tid 22209] [client 20.151.205.221:27516] [client 20.151.205.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-corn-sample.php"] [unique_id "aaMPiH6mbajs3bzQGyvETgAAAU0"]
[Sat Feb 28 23:53:45.765404 2026] [:error] [pid 49763:tid 49781] [client 20.151.205.221:63703] [client 20.151.205.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-corn-sample.php"] [unique_id "aaMPibTHSOG_yf2PpqEpAgAAAc8"]
[Sat Feb 28 23:53:46.601553 2026] [:error] [pid 49763:tid 49769] [client 20.151.205.221:63697] [client 20.151.205.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-corn-sample.php"] [unique_id "aaMPirTHSOG_yf2PpqEpBwAAAcM"]
[Sat Feb 28 23:53:47.443471 2026] [:error] [pid 49763:tid 49767] [client 20.151.205.221:61762] [client 20.151.205.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-corn-sample.php"] [unique_id "aaMPi7THSOG_yf2PpqEpCwAAAcE"]
[Sun Mar 01 00:57:20.328611 2026] [proxy_fcgi:error] [pid 11920:tid 11938] [client 20.151.205.221:1295] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 00:57:20.538876 2026] [proxy_fcgi:error] [pid 11920:tid 11947] [client 20.151.205.221:1295] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 00:57:20.749521 2026] [proxy_fcgi:error] [pid 11920:tid 11925] [client 20.151.205.221:1295] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 00:57:20.958645 2026] [proxy_fcgi:error] [pid 11920:tid 11937] [client 20.151.205.221:1295] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 00:57:21.173255 2026] [proxy_fcgi:error] [pid 11920:tid 11935] [client 20.151.205.221:1295] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 00:57:21.382475 2026] [proxy_fcgi:error] [pid 11920:tid 11937] [client 20.151.205.221:1295] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 00:57:21.802478 2026] [proxy_fcgi:error] [pid 11920:tid 11928] [client 20.151.205.221:1295] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 00:57:22.013640 2026] [proxy_fcgi:error] [pid 11920:tid 11941] [client 20.151.205.221:1295] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 00:57:22.224159 2026] [proxy_fcgi:error] [pid 11920:tid 11940] [client 20.151.205.221:1295] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 00:57:22.438247 2026] [proxy_fcgi:error] [pid 11920:tid 11928] [client 20.151.205.221:1295] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 00:57:22.644368 2026] [:error] [pid 11920:tid 11938] [client 20.151.205.221:1295] [client 20.151.205.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/info.php"] [unique_id "aaMecizLNJUKxvBorrB12wAAAY4"]
[Sun Mar 01 00:57:23.484537 2026] [:error] [pid 11920:tid 11940] [client 20.151.205.221:1188] [client 20.151.205.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/info.php"] [unique_id "aaMecyzLNJUKxvBorrB15gAAAZA"]
[Sun Mar 01 00:57:24.314779 2026] [:error] [pid 30798:tid 30905] [client 20.151.205.221:1287] [client 20.151.205.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/info.php"] [unique_id "aaMedMBkD73gO8wTonZM9QAAAIY"]
[Sun Mar 01 00:57:25.140712 2026] [:error] [pid 31190:tid 31209] [client 20.151.205.221:1215] [client 20.151.205.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/info.php"] [unique_id "aaMedRfvwGOholYpM1FfNgAAAMM"]
[Sun Mar 01 01:03:51.666745 2026] [proxy_fcgi:error] [pid 11920:tid 11946] [client 20.63.83.162:46048] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 01:03:51.870523 2026] [:error] [pid 11920:tid 11930] [client 20.63.83.162:46048] [client 20.63.83.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin.php"] [unique_id "aaMf9yzLNJUKxvBorrB-xwAAAYY"]
[Sun Mar 01 01:03:52.695673 2026] [:error] [pid 11920:tid 11924] [client 20.63.83.162:45702] [client 20.63.83.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin.php"] [unique_id "aaMf-CzLNJUKxvBorrB-1AAAAYA"]
[Sun Mar 01 01:03:53.536228 2026] [:error] [pid 30798:tid 30917] [client 20.63.83.162:46068] [client 20.63.83.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin.php"] [unique_id "aaMf-cBkD73gO8wTonZUvgAAAJI"]
[Sun Mar 01 01:03:54.368265 2026] [:error] [pid 7644:tid 7647] [client 20.63.83.162:45587] [client 20.63.83.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin.php"] [unique_id "aaMf-vqeDUGmVAHX7VCR8wAAAUE"]
[Sun Mar 01 01:27:05.121537 2026] [proxy_fcgi:error] [pid 11920:tid 11943] [client 20.220.144.87:65016] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 01:27:05.331106 2026] [proxy_fcgi:error] [pid 11920:tid 11928] [client 20.220.144.87:65016] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 01:27:05.746466 2026] [proxy_fcgi:error] [pid 11920:tid 11925] [client 20.220.144.87:65016] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 01:27:05.954783 2026] [proxy_fcgi:error] [pid 11920:tid 11924] [client 20.220.144.87:65016] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 01:27:06.162858 2026] [proxy_fcgi:error] [pid 11920:tid 11945] [client 20.220.144.87:65016] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 01:27:06.371989 2026] [proxy_fcgi:error] [pid 11920:tid 11942] [client 20.220.144.87:65016] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 01:27:06.579855 2026] [proxy_fcgi:error] [pid 11920:tid 11937] [client 20.220.144.87:65016] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 01:27:06.789163 2026] [proxy_fcgi:error] [pid 11920:tid 11946] [client 20.220.144.87:65016] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 01:27:06.997626 2026] [proxy_fcgi:error] [pid 11920:tid 11935] [client 20.220.144.87:65016] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 01:27:07.201958 2026] [:error] [pid 11920:tid 11932] [client 20.220.144.87:65016] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/8.php"] [unique_id "aaMlayzLNJUKxvBorrCiVQAAAYg"]
[Sun Mar 01 01:27:08.614752 2026] [:error] [pid 11920:tid 11939] [client 20.220.144.87:51295] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/8.php"] [unique_id "aaMlbCzLNJUKxvBorrCiXwAAAY8"]
[Sun Mar 01 01:27:10.036069 2026] [:error] [pid 11920:tid 11948] [client 20.220.144.87:55438] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/8.php"] [unique_id "aaMlbizLNJUKxvBorrCiawAAAZg"]
[Sun Mar 01 01:27:11.452729 2026] [:error] [pid 30798:tid 30905] [client 20.220.144.87:65018] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/8.php"] [unique_id "aaMlb8BkD73gO8wTonZrMgAAAIY"]
[Sun Mar 01 01:27:12.880445 2026] [:error] [pid 53600:tid 53625] [client 20.220.144.87:51241] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/shop.php"] [unique_id "aaMlcA2UMRAYWtDB23TaqQAAARY"]
[Sun Mar 01 01:27:14.289738 2026] [:error] [pid 31190:tid 31213] [client 20.220.144.87:54150] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/shop.php"] [unique_id "aaMlchfvwGOholYpM1F1GQAAAMc"]
[Sun Mar 01 01:27:15.714428 2026] [:error] [pid 11920:tid 11925] [client 20.220.144.87:64982] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/shop.php"] [unique_id "aaMlcyzLNJUKxvBorrCimAAAAYE"]
[Sun Mar 01 01:27:17.129295 2026] [:error] [pid 11920:tid 11945] [client 20.220.144.87:64969] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/shop.php"] [unique_id "aaMldSzLNJUKxvBorrCiqgAAAZU"]
[Sun Mar 01 01:27:18.534637 2026] [:error] [pid 30795:tid 30824] [client 20.220.144.87:54168] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cxxuv.php"] [unique_id "aaMldmuI44IL94Zgti--fAAAABA"]
[Sun Mar 01 01:27:19.956293 2026] [:error] [pid 31190:tid 31210] [client 20.220.144.87:55437] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cxxuv.php"] [unique_id "aaMldxfvwGOholYpM1F1JwAAAMQ"]
[Sun Mar 01 01:27:21.373665 2026] [:error] [pid 11920:tid 11924] [client 20.220.144.87:52978] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cxxuv.php"] [unique_id "aaMleSzLNJUKxvBorrCi0QAAAYA"]
[Sun Mar 01 01:27:22.790228 2026] [:error] [pid 31190:tid 31212] [client 20.220.144.87:56974] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cxxuv.php"] [unique_id "aaMlehfvwGOholYpM1F1LQAAAMY"]
[Sun Mar 01 01:27:24.194259 2026] [:error] [pid 11920:tid 11939] [client 20.220.144.87:61375] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/b.php"] [unique_id "aaMlfCzLNJUKxvBorrCi9QAAAY8"]
[Sun Mar 01 01:27:25.613294 2026] [:error] [pid 11920:tid 11939] [client 20.220.144.87:51278] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/b.php"] [unique_id "aaMlfSzLNJUKxvBorrCjBQAAAY8"]
[Sun Mar 01 01:27:27.032612 2026] [:error] [pid 11920:tid 11934] [client 20.220.144.87:55451] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/b.php"] [unique_id "aaMlfyzLNJUKxvBorrCjFwAAAYo"]
[Sun Mar 01 01:27:28.451030 2026] [:error] [pid 11920:tid 11932] [client 20.220.144.87:53169] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/b.php"] [unique_id "aaMlgCzLNJUKxvBorrCjJwAAAYg"]
[Sun Mar 01 01:27:29.870438 2026] [:error] [pid 30798:tid 30916] [client 20.220.144.87:52969] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gi.php"] [unique_id "aaMlgcBkD73gO8wTonZraAAAAJE"]
[Sun Mar 01 01:27:31.293238 2026] [:error] [pid 53600:tid 53613] [client 20.220.144.87:52991] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gi.php"] [unique_id "aaMlgw2UMRAYWtDB23TatAAAAQo"]
[Sun Mar 01 01:27:32.715967 2026] [:error] [pid 30798:tid 30917] [client 20.220.144.87:53188] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gi.php"] [unique_id "aaMlhMBkD73gO8wTonZrfgAAAJI"]
[Sun Mar 01 01:27:34.134847 2026] [:error] [pid 30795:tid 30813] [client 20.220.144.87:56969] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gi.php"] [unique_id "aaMlhmuI44IL94Zgti--jwAAAAU"]
[Sun Mar 01 01:27:35.557496 2026] [:error] [pid 30797:tid 30884] [client 20.220.144.87:61320] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/e0v9e95c.php"] [unique_id "aaMlh_QmcmSQL-3rvLAF7wAAAE0"]
[Sun Mar 01 01:27:36.979106 2026] [:error] [pid 7644:tid 7663] [client 20.220.144.87:53156] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/e0v9e95c.php"] [unique_id "aaMliPqeDUGmVAHX7VCaNQAAAVE"]
[Sun Mar 01 01:27:38.398130 2026] [:error] [pid 31190:tid 31228] [client 20.220.144.87:52940] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/e0v9e95c.php"] [unique_id "aaMlihfvwGOholYpM1F1QAAAANY"]
[Sun Mar 01 01:27:39.819795 2026] [:error] [pid 7644:tid 7661] [client 20.220.144.87:61339] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/e0v9e95c.php"] [unique_id "aaMli_qeDUGmVAHX7VCaOwAAAU8"]
[Sun Mar 01 01:27:41.244629 2026] [:error] [pid 31190:tid 31225] [client 20.220.144.87:52965] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2gz1dxix.php"] [unique_id "aaMljRfvwGOholYpM1F1SgAAANM"]
[Sun Mar 01 01:27:42.664828 2026] [:error] [pid 11920:tid 11936] [client 20.220.144.87:56263] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2gz1dxix.php"] [unique_id "aaMljizLNJUKxvBorrCjbgAAAYw"]
[Sun Mar 01 01:27:44.086208 2026] [:error] [pid 53600:tid 53607] [client 20.220.144.87:56996] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2gz1dxix.php"] [unique_id "aaMlkA2UMRAYWtDB23TazwAAAQQ"]
[Sun Mar 01 01:27:45.506441 2026] [:error] [pid 30798:tid 30907] [client 20.220.144.87:56313] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2gz1dxix.php"] [unique_id "aaMlkcBkD73gO8wTonZrpgAAAIg"]
[Sun Mar 01 01:27:46.914150 2026] [:error] [pid 11920:tid 11935] [client 20.220.144.87:56282] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws75.php"] [unique_id "aaMlkizLNJUKxvBorrCjmgAAAYs"]
[Sun Mar 01 01:27:48.336263 2026] [:error] [pid 30798:tid 30912] [client 20.220.144.87:53234] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws75.php"] [unique_id "aaMllMBkD73gO8wTonZrrAAAAI0"]
[Sun Mar 01 01:27:49.754676 2026] [:error] [pid 30798:tid 30914] [client 20.220.144.87:56999] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws75.php"] [unique_id "aaMllcBkD73gO8wTonZrsAAAAI8"]
[Sun Mar 01 01:27:51.174004 2026] [:error] [pid 11920:tid 11927] [client 20.220.144.87:13442] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws75.php"] [unique_id "aaMllyzLNJUKxvBorrCjzAAAAYM"]
[Sun Mar 01 01:27:52.594950 2026] [:error] [pid 11920:tid 11943] [client 20.220.144.87:13461] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws49.php"] [unique_id "aaMlmCzLNJUKxvBorrCj1wAAAZM"]
[Sun Mar 01 01:27:54.015225 2026] [:error] [pid 30797:tid 30893] [client 20.220.144.87:56973] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws49.php"] [unique_id "aaMlmvQmcmSQL-3rvLAF_QAAAFY"]
[Sun Mar 01 01:27:55.437914 2026] [:error] [pid 31190:tid 31211] [client 20.220.144.87:55426] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws49.php"] [unique_id "aaMlmxfvwGOholYpM1F1ZQAAAMU"]
[Sun Mar 01 01:27:56.857470 2026] [:error] [pid 30798:tid 30912] [client 20.220.144.87:13467] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws49.php"] [unique_id "aaMlnMBkD73gO8wTonZrvQAAAI0"]
[Sun Mar 01 01:27:58.277873 2026] [:error] [pid 11920:tid 11931] [client 20.220.144.87:57010] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bak.php"] [unique_id "aaMlnizLNJUKxvBorrCkDgAAAYc"]
[Sun Mar 01 01:27:59.687501 2026] [:error] [pid 30798:tid 30911] [client 20.220.144.87:53189] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bak.php"] [unique_id "aaMln8BkD73gO8wTonZryQAAAIw"]
[Sun Mar 01 01:28:01.101291 2026] [:error] [pid 30798:tid 30900] [client 20.220.144.87:53220] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bak.php"] [unique_id "aaMlocBkD73gO8wTonZr1AAAAIE"]
[Sun Mar 01 01:28:02.508782 2026] [:error] [pid 30798:tid 30908] [client 20.220.144.87:56288] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bak.php"] [unique_id "aaMlosBkD73gO8wTonZr4QAAAIk"]
[Sun Mar 01 01:28:03.927651 2026] [:error] [pid 11920:tid 11945] [client 20.220.144.87:13447] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Y5MxLiVO9nK.php"] [unique_id "aaMloyzLNJUKxvBorrCkPQAAAZU"]
[Sun Mar 01 01:28:05.347804 2026] [:error] [pid 30798:tid 30906] [client 20.220.144.87:56992] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Y5MxLiVO9nK.php"] [unique_id "aaMlpcBkD73gO8wTonZr-gAAAIc"]
[Sun Mar 01 01:28:06.776949 2026] [proxy_fcgi:error] [pid 30798:tid 30922] [client 20.220.144.87:56971] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 01:28:06.984937 2026] [proxy_fcgi:error] [pid 30798:tid 30910] [client 20.220.144.87:56971] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 01:28:07.191711 2026] [proxy_fcgi:error] [pid 30798:tid 30916] [client 20.220.144.87:56971] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 01:28:07.399622 2026] [proxy_fcgi:error] [pid 30798:tid 30921] [client 20.220.144.87:56971] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 01:28:07.608836 2026] [proxy_fcgi:error] [pid 30798:tid 30903] [client 20.220.144.87:56971] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 01:28:07.818970 2026] [proxy_fcgi:error] [pid 30798:tid 30905] [client 20.220.144.87:56971] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 01:28:08.028629 2026] [proxy_fcgi:error] [pid 30798:tid 30917] [client 20.220.144.87:56971] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 01:28:08.235321 2026] [proxy_fcgi:error] [pid 30798:tid 30910] [client 20.220.144.87:56971] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 01:28:08.443604 2026] [proxy_fcgi:error] [pid 30798:tid 30916] [client 20.220.144.87:56971] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 01:28:08.651245 2026] [proxy_fcgi:error] [pid 30798:tid 30899] [client 20.220.144.87:56971] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 01:28:08.858762 2026] [proxy_fcgi:error] [pid 30798:tid 30903] [client 20.220.144.87:56971] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 01:28:09.063009 2026] [:error] [pid 30798:tid 30912] [client 20.220.144.87:56971] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/62ix02bk.php"] [unique_id "aaMlqcBkD73gO8wTonZsFwAAAI0"]
[Sun Mar 01 01:28:10.588678 2026] [:error] [pid 30798:tid 30906] [client 20.220.144.87:13705] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/62ix02bk.php"] [unique_id "aaMlqsBkD73gO8wTonZsHAAAAIc"]
[Sun Mar 01 01:28:12.010118 2026] [:error] [pid 30798:tid 30903] [client 20.220.144.87:57776] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/62ix02bk.php"] [unique_id "aaMlrMBkD73gO8wTonZsIQAAAIQ"]
[Sun Mar 01 01:28:13.429229 2026] [:error] [pid 30798:tid 30909] [client 20.220.144.87:59341] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/62ix02bk.php"] [unique_id "aaMlrcBkD73gO8wTonZsKgAAAIo"]
[Sun Mar 01 01:28:14.845799 2026] [:error] [pid 31190:tid 31209] [client 20.220.144.87:13743] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wdf.php"] [unique_id "aaMlrhfvwGOholYpM1F1kQAAAMM"]
[Sun Mar 01 01:28:16.251305 2026] [:error] [pid 30798:tid 30918] [client 20.220.144.87:57742] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wdf.php"] [unique_id "aaMlsMBkD73gO8wTonZsMgAAAJM"]
[Sun Mar 01 01:28:17.667504 2026] [:error] [pid 30798:tid 30923] [client 20.220.144.87:57750] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wdf.php"] [unique_id "aaMlscBkD73gO8wTonZsPQAAAJc"]
[Sun Mar 01 01:28:19.089838 2026] [:error] [pid 30798:tid 30899] [client 20.220.144.87:13697] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wdf.php"] [unique_id "aaMls8BkD73gO8wTonZsRgAAAIA"]
[Sun Mar 01 01:28:20.512705 2026] [:error] [pid 30798:tid 30903] [client 20.220.144.87:57730] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f6ijmjpa.php"] [unique_id "aaMltMBkD73gO8wTonZsWwAAAIQ"]
[Sun Mar 01 01:28:21.928750 2026] [:error] [pid 31190:tid 31211] [client 20.220.144.87:57768] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f6ijmjpa.php"] [unique_id "aaMltRfvwGOholYpM1F1pAAAAMU"]
[Sun Mar 01 01:28:23.343117 2026] [:error] [pid 7644:tid 7646] [client 20.220.144.87:13494] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f6ijmjpa.php"] [unique_id "aaMlt_qeDUGmVAHX7VCaTwAAAUA"]
[Sun Mar 01 01:28:24.754489 2026] [:error] [pid 30798:tid 30917] [client 20.220.144.87:56309] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f6ijmjpa.php"] [unique_id "aaMluMBkD73gO8wTonZsiQAAAJI"]
[Sun Mar 01 01:28:26.175407 2026] [:error] [pid 30798:tid 30911] [client 20.220.144.87:57747] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp_jVML8V37.php"] [unique_id "aaMlusBkD73gO8wTonZsmgAAAIw"]
[Sun Mar 01 01:28:27.593780 2026] [:error] [pid 11920:tid 11947] [client 20.220.144.87:57771] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp_jVML8V37.php"] [unique_id "aaMluyzLNJUKxvBorrCkzQAAAZc"]
[Sun Mar 01 01:28:29.004459 2026] [:error] [pid 53600:tid 53611] [client 20.220.144.87:53396] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp_jVML8V37.php"] [unique_id "aaMlvQ2UMRAYWtDB23TbYAAAAQg"]
[Sun Mar 01 01:28:30.419132 2026] [:error] [pid 11920:tid 11940] [client 20.220.144.87:56980] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp_jVML8V37.php"] [unique_id "aaMlvizLNJUKxvBorrCk2wAAAZA"]
[Sun Mar 01 01:28:31.838721 2026] [:error] [pid 31190:tid 31229] [client 20.220.144.87:58347] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/4wj632p1.php"] [unique_id "aaMlvxfvwGOholYpM1F1sgAAANc"]
[Sun Mar 01 01:28:33.258930 2026] [:error] [pid 30795:tid 30811] [client 20.220.144.87:35396] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/4wj632p1.php"] [unique_id "aaMlwWuI44IL94Zgti--pAAAAAM"]
[Sun Mar 01 01:28:34.679793 2026] [:error] [pid 30797:tid 30885] [client 20.220.144.87:35449] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/4wj632p1.php"] [unique_id "aaMlwvQmcmSQL-3rvLAGHQAAAE4"]
[Sun Mar 01 01:28:36.098587 2026] [:error] [pid 7644:tid 7655] [client 20.220.144.87:56543] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/4wj632p1.php"] [unique_id "aaMlxPqeDUGmVAHX7VCaVgAAAUk"]
[Sun Mar 01 01:28:37.518503 2026] [:error] [pid 31190:tid 31212] [client 20.220.144.87:13707] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws81.php"] [unique_id "aaMlxRfvwGOholYpM1F1vAAAAMY"]
[Sun Mar 01 01:28:38.937352 2026] [:error] [pid 11920:tid 11940] [client 20.220.144.87:57757] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws81.php"] [unique_id "aaMlxizLNJUKxvBorrClEwAAAZA"]
[Sun Mar 01 01:28:40.354025 2026] [:error] [pid 53600:tid 53608] [client 20.220.144.87:13756] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws81.php"] [unique_id "aaMlyA2UMRAYWtDB23TbkAAAAQU"]
[Sun Mar 01 01:28:41.774445 2026] [:error] [pid 11920:tid 11943] [client 20.220.144.87:53435] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws81.php"] [unique_id "aaMlySzLNJUKxvBorrClKAAAAZM"]
[Sun Mar 01 01:28:43.194570 2026] [:error] [pid 53600:tid 53609] [client 20.220.144.87:59314] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/e31hmf9b.php"] [unique_id "aaMlyw2UMRAYWtDB23TbqgAAAQY"]
[Sun Mar 01 01:28:44.611923 2026] [:error] [pid 11920:tid 11937] [client 20.220.144.87:53948] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/e31hmf9b.php"] [unique_id "aaMlzCzLNJUKxvBorrClLgAAAY0"]
[Sun Mar 01 01:28:46.019954 2026] [:error] [pid 53600:tid 53616] [client 20.220.144.87:58317] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/e31hmf9b.php"] [unique_id "aaMlzg2UMRAYWtDB23TbxQAAAQ0"]
[Sun Mar 01 01:28:47.437592 2026] [:error] [pid 31190:tid 31227] [client 20.220.144.87:58348] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/e31hmf9b.php"] [unique_id "aaMlzxfvwGOholYpM1F10wAAANU"]
[Sun Mar 01 02:54:01.297308 2026] [proxy_fcgi:error] [pid 11920:tid 11931] [client 20.151.205.221:62981] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 02:54:01.507276 2026] [proxy_fcgi:error] [pid 11920:tid 11930] [client 20.151.205.221:62981] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 02:54:01.716973 2026] [proxy_fcgi:error] [pid 11920:tid 11938] [client 20.151.205.221:62981] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 02:54:01.943045 2026] [proxy_fcgi:error] [pid 11920:tid 11944] [client 20.151.205.221:62981] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 02:54:02.151752 2026] [proxy_fcgi:error] [pid 11920:tid 11936] [client 20.151.205.221:62981] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 02:54:02.359566 2026] [:error] [pid 11920:tid 11942] [client 20.151.205.221:62981] [client 20.151.205.221] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.151.205.221, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-content/uploads/wp-login.php"] [unique_id "aaM5yizLNJUKxvBorrAgkwAAAZI"]
[Sun Mar 01 02:54:02.572923 2026] [proxy_fcgi:error] [pid 11920:tid 11945] [client 20.151.205.221:62981] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 02:54:02.782134 2026] [proxy_fcgi:error] [pid 11920:tid 11930] [client 20.151.205.221:62981] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 02:54:02.998518 2026] [proxy_fcgi:error] [pid 11920:tid 11924] [client 20.151.205.221:62981] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 02:54:03.203988 2026] [:error] [pid 11920:tid 11926] [client 20.151.205.221:62981] [client 20.151.205.221] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.151.205.221, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-login.php"] [unique_id "aaM5yyzLNJUKxvBorrAgnwAAAYI"]
[Sun Mar 01 02:54:03.210695 2026] [proxy_fcgi:error] [pid 11920:tid 11926] [client 20.151.205.221:62981] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 02:54:03.420123 2026] [proxy_fcgi:error] [pid 11920:tid 11932] [client 20.151.205.221:62981] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 02:54:03.625463 2026] [:error] [pid 11920:tid 11939] [client 20.151.205.221:62981] [client 20.151.205.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aaM5yyzLNJUKxvBorrAgqQAAAY8"]
[Sun Mar 01 02:54:04.448515 2026] [:error] [pid 30797:tid 30894] [client 20.151.205.221:62977] [client 20.151.205.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aaM5zPQmcmSQL-3rvLAWUQAAAFc"]
[Sun Mar 01 02:54:05.275002 2026] [:error] [pid 11920:tid 11933] [client 20.151.205.221:62391] [client 20.151.205.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aaM5zSzLNJUKxvBorrAgswAAAYk"]
[Sun Mar 01 02:54:06.119107 2026] [:error] [pid 11920:tid 11946] [client 20.151.205.221:62347] [client 20.151.205.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aaM5zizLNJUKxvBorrAguQAAAZY"]
[Sun Mar 01 03:44:04.046770 2026] [:error] [pid 10508:tid 10532] [client 169.150.203.242:42054] [client 169.150.203.242] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 169.150.203.242, incrementing ddos counter"] [hostname "dwelectservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aaNFhPnZ4Ocsz9vZs1Ne2wAAANQ"]
[Sun Mar 01 03:44:04.057860 2026] [proxy_fcgi:error] [pid 10508:tid 10532] [client 169.150.203.242:42054] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 03:44:05.802582 2026] [:error] [pid 10508:tid 10512] [client 169.150.203.242:42054] [client 169.150.203.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aaNFhfnZ4Ocsz9vZs1Ne7gAAAMA"]
[Sun Mar 01 03:44:06.114529 2026] [:error] [pid 10508:tid 10529] [client 169.150.203.242:42058] [client 169.150.203.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aaNFhvnZ4Ocsz9vZs1Ne7wAAANE"]
[Sun Mar 01 03:44:06.422943 2026] [:error] [pid 10288:tid 10389] [client 169.150.203.242:42070] [client 169.150.203.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aaNFhhppLTIhFPGINgcFCgAAABc"]
[Sun Mar 01 03:44:06.731511 2026] [:error] [pid 10297:tid 10438] [client 169.150.203.242:9048] [client 169.150.203.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aaNFhn5a9rbvPss2V0MoggAAAJE"]
[Sun Mar 01 03:44:07.041212 2026] [:error] [pid 10297:tid 10426] [client 169.150.203.242:42082] [client 169.150.203.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aaNFh35a9rbvPss2V0MogwAAAIU"]
[Sun Mar 01 03:44:07.349714 2026] [:error] [pid 10297:tid 10434] [client 169.150.203.242:44199] [client 169.150.203.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aaNFh35a9rbvPss2V0MohAAAAI0"]
[Sun Mar 01 03:44:07.658975 2026] [:error] [pid 10288:tid 10370] [client 169.150.203.242:42104] [client 169.150.203.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aaNFhxppLTIhFPGINgcFDQAAAAQ"]
[Sun Mar 01 04:55:06.688214 2026] [:error] [pid 21159:tid 21229] [client 20.223.198.174:9327] [client 20.223.198.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/cah.php"] [unique_id "aaNWKuLi3ouy1NZIkgoUwAAAAIg"]
[Sun Mar 01 04:55:07.201632 2026] [proxy_fcgi:error] [pid 21263:tid 21278] [client 20.223.198.174:13097] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 04:55:07.708744 2026] [proxy_fcgi:error] [pid 21263:tid 21282] [client 20.223.198.174:13097] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 04:55:07.964415 2026] [proxy_fcgi:error] [pid 21263:tid 21277] [client 20.223.198.174:13097] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 04:55:08.217950 2026] [proxy_fcgi:error] [pid 21263:tid 21279] [client 20.223.198.174:13097] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 04:55:08.472680 2026] [proxy_fcgi:error] [pid 21263:tid 21290] [client 20.223.198.174:13097] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 04:55:08.728537 2026] [proxy_fcgi:error] [pid 21263:tid 21280] [client 20.223.198.174:13097] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 04:55:08.983707 2026] [proxy_fcgi:error] [pid 21263:tid 21273] [client 20.223.198.174:13097] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 04:55:09.236993 2026] [proxy_fcgi:error] [pid 21263:tid 21283] [client 20.223.198.174:13097] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 04:55:09.490618 2026] [proxy_fcgi:error] [pid 21263:tid 21268] [client 20.223.198.174:13097] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 04:55:09.740887 2026] [:error] [pid 21263:tid 21289] [client 20.223.198.174:13097] [client 20.223.198.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/as1337.php"] [unique_id "aaNWLdAxjzLvN1upBhnOrwAAANY"]
[Sun Mar 01 04:55:10.238909 2026] [:error] [pid 21159:tid 21231] [client 20.223.198.174:2450] [client 20.223.198.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/as1337.php"] [unique_id "aaNWLuLi3ouy1NZIkgoUyAAAAIo"]
[Sun Mar 01 04:55:10.736868 2026] [:error] [pid 21159:tid 21240] [client 20.223.198.174:5215] [client 20.223.198.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/as1337.php"] [unique_id "aaNWLuLi3ouy1NZIkgoUzgAAAJM"]
[Sun Mar 01 04:55:11.234585 2026] [:error] [pid 24576:tid 24587] [client 20.223.198.174:4068] [client 20.223.198.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/as1337.php"] [unique_id "aaNWL4vfb5CnctJh073c0wAAAQg"]
[Sun Mar 01 04:55:11.732712 2026] [:error] [pid 21159:tid 21228] [client 20.223.198.174:12339] [client 20.223.198.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wolf-shell.php"] [unique_id "aaNWL-Li3ouy1NZIkgoU0gAAAIc"]
[Sun Mar 01 04:55:12.232441 2026] [:error] [pid 21263:tid 21282] [client 20.223.198.174:11106] [client 20.223.198.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wolf-shell.php"] [unique_id "aaNWMNAxjzLvN1upBhnOwAAAAM8"]
[Sun Mar 01 04:55:12.730795 2026] [:error] [pid 21263:tid 21281] [client 20.223.198.174:14642] [client 20.223.198.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wolf-shell.php"] [unique_id "aaNWMNAxjzLvN1upBhnOxwAAAM4"]
[Sun Mar 01 04:55:13.227992 2026] [:error] [pid 21156:tid 21175] [client 20.223.198.174:9286] [client 20.223.198.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wolf-shell.php"] [unique_id "aaNWMasaG_9IkG8N2p3hFgAAAAk"]
[Sun Mar 01 04:55:13.726645 2026] [:error] [pid 24576:tid 24598] [client 20.223.198.174:12312] [client 20.223.198.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/core.php"] [unique_id "aaNWMYvfb5CnctJh073c3QAAARI"]
[Sun Mar 01 04:55:14.225886 2026] [:error] [pid 21158:tid 21203] [client 20.223.198.174:15208] [client 20.223.198.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/core.php"] [unique_id "aaNWMjriSIe3-pWnbPbWYQAAAEo"]
[Sun Mar 01 06:08:26.751497 2026] [:error] [pid 21156:tid 21186] [client 169.150.203.237:54006] [client 169.150.203.237] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 169.150.203.237, incrementing ddos counter"] [hostname "dwelectservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aaNnWqsaG_9IkG8N2p3zbQAAABQ"]
[Sun Mar 01 06:08:26.763410 2026] [proxy_fcgi:error] [pid 21156:tid 21186] [client 169.150.203.237:54006] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 06:08:28.729481 2026] [:error] [pid 21156:tid 21188] [client 169.150.203.237:54006] [client 169.150.203.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aaNnXKsaG_9IkG8N2p3zfgAAABY"]
[Sun Mar 01 06:08:29.041027 2026] [:error] [pid 24576:tid 24595] [client 169.150.203.237:54010] [client 169.150.203.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aaNnXYvfb5CnctJh070kIAAAAQ8"]
[Sun Mar 01 06:08:29.767120 2026] [:error] [pid 24576:tid 24586] [client 169.150.203.237:54022] [client 169.150.203.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aaNnXYvfb5CnctJh070kIwAAAQc"]
[Sun Mar 01 06:08:31.107890 2026] [:error] [pid 8688:tid 8693] [client 169.150.203.237:58362] [client 169.150.203.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aaNnXzHJ4Nn-RvulD0rAQgAAAUM"]
[Sun Mar 01 06:08:31.421129 2026] [:error] [pid 8688:tid 8714] [client 169.150.203.237:58368] [client 169.150.203.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aaNnXzHJ4Nn-RvulD0rARQAAAVg"]
[Sun Mar 01 06:08:31.733310 2026] [:error] [pid 8688:tid 8704] [client 169.150.203.237:58374] [client 169.150.203.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aaNnXzHJ4Nn-RvulD0rASAAAAU4"]
[Sun Mar 01 06:08:32.052305 2026] [:error] [pid 8688:tid 8697] [client 169.150.203.237:58378] [client 169.150.203.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aaNnYDHJ4Nn-RvulD0rASgAAAUc"]
[Sun Mar 01 06:14:19.813970 2026] [proxy_fcgi:error] [pid 24576:tid 24583] [client 161.178.132.46:57615] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 06:14:20.770905 2026] [proxy_fcgi:error] [pid 8688:tid 8706] [client 161.178.132.46:57940] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 06:14:22.663649 2026] [:error] [pid 21159:tid 21239] [client 161.178.132.46:58609] [client 161.178.132.46] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dwelectservices.com.au"] [uri "/.env"] [unique_id "aaNovuLi3ouy1NZIkgo3XgAAAJI"]
[Sun Mar 01 06:14:23.609645 2026] [:error] [pid 21159:tid 21234] [client 161.178.132.46:58921] [client 161.178.132.46] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.dwelectservices.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.dwelectservices.com.au"] [uri "/db.sql"] [unique_id "aaNov-Li3ouy1NZIkgo3YgAAAI0"]
[Sun Mar 01 06:14:24.557654 2026] [:error] [pid 24576:tid 24591] [client 161.178.132.46:59217] [client 161.178.132.46] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.dwelectservices.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.dwelectservices.com.au"] [uri "/dump.sql"] [unique_id "aaNowIvfb5CnctJh070oMAAAAQs"]
[Sun Mar 01 06:14:25.502811 2026] [:error] [pid 24576:tid 24591] [client 161.178.132.46:59508] [client 161.178.132.46] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.dwelectservices.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.dwelectservices.com.au"] [uri "/database.sql"] [unique_id "aaNowYvfb5CnctJh070oNwAAAQs"]
[Sun Mar 01 06:14:26.450036 2026] [:error] [pid 24576:tid 24583] [client 161.178.132.46:59831] [client 161.178.132.46] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.dwelectservices.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.dwelectservices.com.au"] [uri "/backup.sql"] [unique_id "aaNowovfb5CnctJh070oPgAAAQQ"]
[Sun Mar 01 06:14:27.396111 2026] [:error] [pid 21158:tid 21203] [client 161.178.132.46:60143] [client 161.178.132.46] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.dwelectservices.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.dwelectservices.com.au"] [uri "/config/db.sql"] [unique_id "aaNowzriSIe3-pWnbPbxSQAAAEo"]
[Sun Mar 01 06:14:28.342240 2026] [:error] [pid 8688:tid 8699] [client 161.178.132.46:60472] [client 161.178.132.46] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.dwelectservices.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.dwelectservices.com.au"] [uri "/sql/db.sql"] [unique_id "aaNoxDHJ4Nn-RvulD0rHaQAAAUk"]
[Sun Mar 01 06:14:29.288777 2026] [:error] [pid 21159:tid 21235] [client 161.178.132.46:60781] [client 161.178.132.46] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.dwelectservices.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.dwelectservices.com.au"] [uri "/data/dump.sql"] [unique_id "aaNoxeLi3ouy1NZIkgo3dgAAAI4"]
[Sun Mar 01 06:14:30.235123 2026] [:error] [pid 24576:tid 24583] [client 161.178.132.46:61136] [client 161.178.132.46] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.dwelectservices.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.dwelectservices.com.au"] [uri "/backups/database.sql"] [unique_id "aaNoxovfb5CnctJh070oSgAAAQQ"]
[Sun Mar 01 06:14:31.179529 2026] [:error] [pid 21263:tid 21271] [client 161.178.132.46:61487] [client 161.178.132.46] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.dwelectservices.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.dwelectservices.com.au"] [uri "/mysql.sql"] [unique_id "aaNox9AxjzLvN1upBhn-3QAAAMQ"]
[Sun Mar 01 06:14:32.126054 2026] [:error] [pid 21263:tid 21291] [client 161.178.132.46:61875] [client 161.178.132.46] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.dwelectservices.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.dwelectservices.com.au"] [uri "/db_backup.sql"] [unique_id "aaNoyNAxjzLvN1upBhn-3wAAANg"]
[Sun Mar 01 10:30:58.621547 2026] [:error] [pid 33976:tid 33990] [client 20.223.198.174:13808] [client 20.223.198.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/cah.php"] [unique_id "aaOk4gUyU3c4Xm_xpMS6bwAAAkw"]
[Sun Mar 01 10:30:59.131174 2026] [proxy_fcgi:error] [pid 34286:tid 34288] [client 20.223.198.174:7027] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 10:31:00.085542 2026] [proxy_fcgi:error] [pid 34286:tid 34288] [client 20.223.198.174:14160] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 10:31:00.868133 2026] [proxy_fcgi:error] [pid 8688:tid 8702] [client 20.223.198.174:13800] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 10:31:01.121765 2026] [proxy_fcgi:error] [pid 8688:tid 8702] [client 20.223.198.174:13800] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 10:31:01.376332 2026] [proxy_fcgi:error] [pid 8688:tid 8707] [client 20.223.198.174:13800] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 10:31:01.629369 2026] [proxy_fcgi:error] [pid 8688:tid 8702] [client 20.223.198.174:13800] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 10:31:01.882191 2026] [proxy_fcgi:error] [pid 8688:tid 8707] [client 20.223.198.174:13800] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 10:31:02.137007 2026] [proxy_fcgi:error] [pid 8688:tid 8702] [client 20.223.198.174:13800] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 10:31:02.390645 2026] [proxy_fcgi:error] [pid 8688:tid 8707] [client 20.223.198.174:13800] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 10:31:02.639976 2026] [:error] [pid 8688:tid 8702] [client 20.223.198.174:13800] [client 20.223.198.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/as1337.php"] [unique_id "aaOk5jHJ4Nn-RvulD0rX4wAAAUw"]
[Sun Mar 01 10:31:03.136838 2026] [:error] [pid 21263:tid 21288] [client 20.223.198.174:5674] [client 20.223.198.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/as1337.php"] [unique_id "aaOk59AxjzLvN1upBhkPdAAAANU"]
[Sun Mar 01 10:31:03.635697 2026] [:error] [pid 24576:tid 24585] [client 20.223.198.174:10518] [client 20.223.198.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/as1337.php"] [unique_id "aaOk54vfb5CnctJh07059gAAAQY"]
[Sun Mar 01 10:31:04.134109 2026] [:error] [pid 24576:tid 24601] [client 20.223.198.174:10559] [client 20.223.198.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/as1337.php"] [unique_id "aaOk6Ivfb5CnctJh0705-AAAARU"]
[Sun Mar 01 10:31:04.631020 2026] [:error] [pid 35654:tid 35680] [client 20.223.198.174:14201] [client 20.223.198.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Okxob.php"] [unique_id "aaOk6EIPeuEwCTirofJ7vwAAA9Y"]
[Sun Mar 01 10:31:05.128268 2026] [:error] [pid 35654:tid 35658] [client 20.223.198.174:13801] [client 20.223.198.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Okxob.php"] [unique_id "aaOk6UIPeuEwCTirofJ7wQAAA8A"]
[Sun Mar 01 10:31:05.627704 2026] [:error] [pid 24576:tid 24582] [client 20.223.198.174:7039] [client 20.223.198.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Okxob.php"] [unique_id "aaOk6Yvfb5CnctJh0705_wAAAQM"]
[Sun Mar 01 10:31:06.144516 2026] [:error] [pid 33976:tid 33990] [client 20.223.198.174:14658] [client 20.223.198.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Okxob.php"] [unique_id "aaOk6gUyU3c4Xm_xpMS6eQAAAkw"]
[Sun Mar 01 10:31:06.642823 2026] [:error] [pid 24576:tid 24585] [client 20.223.198.174:8909] [client 20.223.198.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wolf-shell.php"] [unique_id "aaOk6ovfb5CnctJh0706AQAAAQY"]
[Sun Mar 01 10:31:07.140554 2026] [:error] [pid 35350:tid 35365] [client 20.223.198.174:12475] [client 20.223.198.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wolf-shell.php"] [unique_id "aaOk64qZbPJ_JGYY1RTrkwAAA40"]
[Sun Mar 01 13:35:29.049480 2026] [proxy_fcgi:error] [pid 41967:tid 41983] [client 45.86.202.185:48157] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:35:29.663248 2026] [proxy_fcgi:error] [pid 41967:tid 41986] [client 45.86.202.185:48157] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:35:29.978989 2026] [proxy_fcgi:error] [pid 41967:tid 41990] [client 45.86.202.185:48157] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:35:30.315961 2026] [proxy_fcgi:error] [pid 41967:tid 41984] [client 45.86.202.185:48157] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:35:30.621969 2026] [proxy_fcgi:error] [pid 41967:tid 41987] [client 45.86.202.185:48157] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:35:31.058573 2026] [proxy_fcgi:error] [pid 41967:tid 41983] [client 45.86.202.185:48157] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:35:31.375224 2026] [proxy_fcgi:error] [pid 41967:tid 41980] [client 45.86.202.185:48157] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:35:31.686541 2026] [proxy_fcgi:error] [pid 41967:tid 41969] [client 45.86.202.185:48157] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:35:32.316795 2026] [proxy_fcgi:error] [pid 41967:tid 41975] [client 45.86.202.185:48157] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:35:32.936949 2026] [proxy_fcgi:error] [pid 41967:tid 41969] [client 45.86.202.185:48157] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:35:33.269714 2026] [proxy_fcgi:error] [pid 41967:tid 41987] [client 45.86.202.185:48157] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:35:33.572972 2026] [proxy_fcgi:error] [pid 41967:tid 41983] [client 45.86.202.185:48157] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:35:33.905865 2026] [proxy_fcgi:error] [pid 41967:tid 41975] [client 45.86.202.185:48157] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:35:34.586630 2026] [proxy_fcgi:error] [pid 41967:tid 41969] [client 45.86.202.185:48157] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:35:34.885749 2026] [proxy_fcgi:error] [pid 41967:tid 41987] [client 45.86.202.185:48157] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:35:35.508032 2026] [proxy_fcgi:error] [pid 41967:tid 41980] [client 45.86.202.185:48157] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:35:35.821915 2026] [proxy_fcgi:error] [pid 41967:tid 41975] [client 45.86.202.185:48157] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:35:36.151669 2026] [proxy_fcgi:error] [pid 41967:tid 41984] [client 45.86.202.185:48157] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:35:41.357541 2026] [:error] [pid 41967:tid 41982] [client 45.86.202.185:48157] [client 45.86.202.185] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aaPQLYO1bqY181I02eFwVAAAAI0"]
[Sun Mar 01 13:35:42.948509 2026] [:error] [pid 44644:tid 44668] [client 45.86.202.163:29117] [client 45.86.202.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aaPQLp3RJaXMcw3y9V86hAAAABU"]
[Sun Mar 01 13:35:44.957347 2026] [proxy_fcgi:error] [pid 38034:tid 38038] [client 45.86.202.158:34721] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:35:45.941265 2026] [:error] [pid 38034:tid 38055] [client 45.86.202.158:34721] [client 45.86.202.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dwelectservices.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aaPQMQxtfZjwlJok9K9F8AAAARE"]
[Sun Mar 01 13:35:47.225404 2026] [proxy_fcgi:error] [pid 42619:tid 42632] [client 45.86.202.183:54931] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:35:47.563997 2026] [:error] [pid 42619:tid 42626] [client 45.86.202.183:54931] [client 45.86.202.183] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aaPQMx_zUXcYaZE4AOdj1AAAAUU"]
[Sun Mar 01 13:35:48.499716 2026] [proxy_fcgi:error] [pid 38034:tid 38038] [client 45.86.202.160:56341] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:35:50.069240 2026] [:error] [pid 38034:tid 38049] [client 45.86.202.160:56341] [client 45.86.202.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aaPQNgxtfZjwlJok9K9GBQAAAQs"]
[Sun Mar 01 13:35:51.011365 2026] [:error] [pid 41967:tid 41986] [client 45.86.202.203:31181] [client 45.86.202.203] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aaPQN4O1bqY181I02eFwYAAAAJE"]
[Sun Mar 01 13:35:51.607471 2026] [:error] [pid 41342:tid 41359] [client 45.86.202.159:24625] [client 45.86.202.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aaPQN44iJ6RAS5CatDk8NwAAAg4"]
[Sun Mar 01 13:35:52.236582 2026] [:error] [pid 38034:tid 38055] [client 45.86.202.199:33031] [client 45.86.202.199] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aaPQOAxtfZjwlJok9K9GGgAAARE"]
[Sun Mar 01 13:35:52.872376 2026] [:error] [pid 38034:tid 38038] [client 45.86.202.167:42949] [client 45.86.202.167] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aaPQOAxtfZjwlJok9K9GKAAAAQI"]
[Sun Mar 01 13:35:53.542127 2026] [:error] [pid 42619:tid 42627] [client 45.86.202.201:59251] [client 45.86.202.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aaPQOR_zUXcYaZE4AOdj6gAAAUY"]
[Sun Mar 01 13:35:55.808311 2026] [:error] [pid 44644:tid 44662] [client 45.86.202.185:27927] [client 45.86.202.185] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aaPQO53RJaXMcw3y9V86wQAAAA8"]
[Sun Mar 01 13:35:56.891580 2026] [proxy_fcgi:error] [pid 38034:tid 38053] [client 45.86.202.201:27521] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:35:57.549507 2026] [:error] [pid 38034:tid 38055] [client 45.86.202.201:27521] [client 45.86.202.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dwelectservices.com.au"] [uri "/filemanager.php"] [unique_id "aaPQPQxtfZjwlJok9K9GWAAAARE"]
[Sun Mar 01 13:35:58.906529 2026] [:error] [pid 42619:tid 42632] [client 45.86.202.170:55675] [client 45.86.202.170] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aaPQPh_zUXcYaZE4AOdkAwAAAUs"]
[Sun Mar 01 13:35:59.911876 2026] [:error] [pid 42619:tid 42628] [client 45.86.202.157:39963] [client 45.86.202.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aaPQPx_zUXcYaZE4AOdkDAAAAUc"]
[Sun Mar 01 13:36:00.525293 2026] [proxy_fcgi:error] [pid 38034:tid 38054] [client 45.86.202.199:41239] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:36:00.857483 2026] [:error] [pid 38034:tid 38043] [client 45.86.202.199:41239] [client 45.86.202.199] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aaPQQAxtfZjwlJok9K9GZgAAAQU"]
[Sun Mar 01 13:36:01.519764 2026] [proxy_fcgi:error] [pid 38034:tid 38036] [client 45.86.202.163:52533] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:36:02.958543 2026] [proxy_fcgi:error] [pid 38034:tid 38054] [client 45.86.202.163:52533] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:36:04.088245 2026] [:error] [pid 38034:tid 38036] [client 45.86.202.163:52533] [client 45.86.202.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aaPQRAxtfZjwlJok9K9GeQAAAQA"]
[Sun Mar 01 13:36:04.659778 2026] [proxy_fcgi:error] [pid 38241:tid 38248] [client 45.86.202.172:27905] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:36:05.017114 2026] [:error] [pid 38241:tid 38259] [client 45.86.202.172:27905] [client 45.86.202.172] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aaPQRfKRPk6YnJBxw_zwOAAAAM8"]
[Sun Mar 01 13:36:05.746499 2026] [proxy_fcgi:error] [pid 38241:tid 38259] [client 45.86.202.163:24455] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:36:06.741096 2026] [:error] [pid 38241:tid 38248] [client 45.86.202.163:24455] [client 45.86.202.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "aaPQRvKRPk6YnJBxw_zwPQAAAMQ"]
[Sun Mar 01 13:36:08.110081 2026] [:error] [pid 44644:tid 44668] [client 45.86.202.161:24575] [client 45.86.202.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aaPQSJ3RJaXMcw3y9V86_wAAABU"]
[Sun Mar 01 13:36:09.016931 2026] [proxy_fcgi:error] [pid 38241:tid 38265] [client 45.86.202.177:38741] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:36:11.372008 2026] [proxy_fcgi:error] [pid 44644:tid 44662] [client 45.86.202.205:20537] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:36:11.983158 2026] [:error] [pid 44644:tid 44670] [client 45.86.202.205:20537] [client 45.86.202.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aaPQS53RJaXMcw3y9V87FgAAABc"]
[Sun Mar 01 13:36:12.994668 2026] [:error] [pid 41342:tid 41369] [client 45.86.202.162:46645] [client 45.86.202.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aaPQTI4iJ6RAS5CatDk8OwAAAhg"]
[Sun Mar 01 13:36:13.992575 2026] [:error] [pid 37032:tid 37050] [client 45.86.202.200:60313] [client 45.86.202.200] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aaPQTeu0U4o7eSImsVT3lQAAAZA"]
[Sun Mar 01 13:36:14.636408 2026] [:error] [pid 38034:tid 38036] [client 45.86.202.180:34577] [client 45.86.202.180] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aaPQTgxtfZjwlJok9K9GqgAAAQA"]
[Sun Mar 01 13:36:15.306838 2026] [:error] [pid 38034:tid 38037] [client 45.86.202.182:28189] [client 45.86.202.182] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aaPQTwxtfZjwlJok9K9GrgAAAQE"]
[Sun Mar 01 13:36:16.608083 2026] [proxy_fcgi:error] [pid 44644:tid 44670] [client 45.86.202.165:37039] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:36:16.889966 2026] [:error] [pid 44644:tid 44662] [client 45.86.202.165:37039] [client 45.86.202.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "aaPQUJ3RJaXMcw3y9V87JQAAAA8"]
[Sun Mar 01 13:36:17.544490 2026] [:error] [pid 44644:tid 44655] [client 45.86.202.164:57143] [client 45.86.202.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "aaPQUZ3RJaXMcw3y9V87JwAAAAg"]
[Sun Mar 01 13:36:18.169814 2026] [:error] [pid 41967:tid 41986] [client 45.86.202.204:48391] [client 45.86.202.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aaPQUoO1bqY181I02eFwbwAAAJE"]
[Sun Mar 01 13:36:19.481728 2026] [proxy_fcgi:error] [pid 38241:tid 38248] [client 45.86.202.199:36845] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:36:20.119687 2026] [proxy_fcgi:error] [pid 38241:tid 38268] [client 45.86.202.199:36845] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:36:21.352693 2026] [:error] [pid 38241:tid 38259] [client 45.86.202.199:36845] [client 45.86.202.199] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/admin.php"] [unique_id "aaPQVfKRPk6YnJBxw_zweAAAAM8"]
[Sun Mar 01 13:36:22.959734 2026] [:error] [pid 38241:tid 38265] [client 45.86.202.174:46811] [client 45.86.202.174] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.202.174, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aaPQVvKRPk6YnJBxw_zwgAAAANU"]
[Sun Mar 01 13:36:23.782771 2026] [proxy_fcgi:error] [pid 41967:tid 41987] [client 45.86.202.179:34477] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:36:25.508347 2026] [proxy_fcgi:error] [pid 41967:tid 41980] [client 45.86.202.179:34477] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:36:25.834944 2026] [proxy_fcgi:error] [pid 41967:tid 41975] [client 45.86.202.179:34477] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:36:27.581987 2026] [:error] [pid 41967:tid 41986] [client 45.86.202.179:34477] [client 45.86.202.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aaPQW4O1bqY181I02eFwgAAAAJE"]
[Sun Mar 01 13:36:28.207123 2026] [proxy_fcgi:error] [pid 44644:tid 44652] [client 45.86.202.173:46311] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:36:28.779123 2026] [proxy_fcgi:error] [pid 44644:tid 44652] [client 45.86.202.173:46311] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:36:29.068886 2026] [:error] [pid 44644:tid 44650] [client 45.86.202.173:46311] [client 45.86.202.173] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.202.173, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aaPQXZ3RJaXMcw3y9V87UwAAAAM"]
[Sun Mar 01 13:36:29.677693 2026] [:error] [pid 44644:tid 44650] [client 45.86.202.173:46311] [client 45.86.202.173] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/item.php"] [unique_id "aaPQXZ3RJaXMcw3y9V87WgAAAAM"]
[Sun Mar 01 13:36:31.798999 2026] [proxy_fcgi:error] [pid 42619:tid 42645] [client 45.86.202.176:38559] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:36:32.210651 2026] [proxy_fcgi:error] [pid 42619:tid 42642] [client 45.86.202.176:38559] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:36:32.852207 2026] [proxy_fcgi:error] [pid 42619:tid 42628] [client 45.86.202.176:38559] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:36:33.471320 2026] [:error] [pid 42619:tid 42625] [client 45.86.202.176:38559] [client 45.86.202.176] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aaPQYR_zUXcYaZE4AOdkNAAAAUQ"]
[Sun Mar 01 13:36:34.157973 2026] [proxy_fcgi:error] [pid 44644:tid 44667] [client 45.86.202.225:57743] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:36:35.284826 2026] [proxy_fcgi:error] [pid 44644:tid 44671] [client 45.86.202.225:57743] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:36:35.950921 2026] [proxy_fcgi:error] [pid 44644:tid 44670] [client 45.86.202.225:57743] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:36:36.589050 2026] [proxy_fcgi:error] [pid 44644:tid 44670] [client 45.86.202.225:57743] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:36:36.918014 2026] [:error] [pid 44644:tid 44667] [client 45.86.202.225:57743] [client 45.86.202.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aaPQZJ3RJaXMcw3y9V87rgAAABQ"]
[Sun Mar 01 13:36:38.058147 2026] [proxy_fcgi:error] [pid 38241:tid 38250] [client 45.86.202.225:60759] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:36:38.373009 2026] [proxy_fcgi:error] [pid 38241:tid 38265] [client 45.86.202.225:60759] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:36:38.656043 2026] [:error] [pid 38241:tid 38250] [client 45.86.202.225:60759] [client 45.86.202.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aaPQZvKRPk6YnJBxw_zwrwAAAMY"]
[Sun Mar 01 13:36:39.531720 2026] [proxy_fcgi:error] [pid 37032:tid 37058] [client 45.86.202.173:29875] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:36:40.146947 2026] [:error] [pid 37032:tid 37046] [client 45.86.202.173:29875] [client 45.86.202.173] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.202.173, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "aaPQaOu0U4o7eSImsVT3swAAAYw"]
[Sun Mar 01 13:36:40.530781 2026] [:error] [pid 37032:tid 37050] [client 45.86.202.173:29875] [client 45.86.202.173] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aaPQaOu0U4o7eSImsVT3tAAAAZA"]
[Sun Mar 01 13:36:44.825469 2026] [proxy_fcgi:error] [pid 44644:tid 44663] [client 45.86.202.176:38435] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:36:46.810543 2026] [proxy_fcgi:error] [pid 44644:tid 44666] [client 45.86.202.176:38435] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:36:48.438090 2026] [:error] [pid 44644:tid 44671] [client 45.86.202.176:38435] [client 45.86.202.176] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aaPQcJ3RJaXMcw3y9V879gAAABg"]
[Sun Mar 01 13:36:49.056239 2026] [proxy_fcgi:error] [pid 38241:tid 38268] [client 45.86.202.176:60747] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:36:50.047253 2026] [:error] [pid 38241:tid 38250] [client 45.86.202.176:60747] [client 45.86.202.176] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.202.176, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aaPQcvKRPk6YnJBxw_zw7wAAAMY"]
[Sun Mar 01 13:36:50.465538 2026] [proxy_fcgi:error] [pid 38241:tid 38268] [client 45.86.202.176:60747] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:36:50.769269 2026] [proxy_fcgi:error] [pid 38241:tid 38254] [client 45.86.202.176:60747] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:36:51.087500 2026] [proxy_fcgi:error] [pid 38241:tid 38255] [client 45.86.202.176:60747] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:36:51.414732 2026] [:error] [pid 38241:tid 38267] [client 45.86.202.176:60747] [client 45.86.202.176] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aaPQc_KRPk6YnJBxw_zw-wAAANc"]
[Sun Mar 01 13:36:52.025498 2026] [proxy_fcgi:error] [pid 37032:tid 37057] [client 45.86.202.167:44723] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:36:52.350841 2026] [:error] [pid 37032:tid 37038] [client 45.86.202.167:44723] [client 45.86.202.167] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/infi.php"] [unique_id "aaPQdOu0U4o7eSImsVT30QAAAYQ"]
[Sun Mar 01 13:36:53.186228 2026] [proxy_fcgi:error] [pid 38241:tid 38265] [client 45.86.202.190:20789] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:36:53.476576 2026] [:error] [pid 38241:tid 38250] [client 45.86.202.190:20789] [client 45.86.202.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aaPQdfKRPk6YnJBxw_zxCQAAAMY"]
[Sun Mar 01 13:36:54.058812 2026] [proxy_fcgi:error] [pid 37032:tid 37052] [client 45.86.202.189:46439] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:36:54.681509 2026] [proxy_fcgi:error] [pid 37032:tid 37053] [client 45.86.202.189:46439] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:36:55.271971 2026] [:error] [pid 37032:tid 37056] [client 45.86.202.189:46439] [client 45.86.202.189] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "aaPQd-u0U4o7eSImsVT35AAAAZY"]
[Sun Mar 01 13:36:55.889071 2026] [:error] [pid 44644:tid 44658] [client 45.86.202.191:52377] [client 45.86.202.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "aaPQd53RJaXMcw3y9V88FgAAAAs"]
[Sun Mar 01 13:36:56.520957 2026] [proxy_fcgi:error] [pid 38241:tid 38254] [client 45.86.202.187:45725] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:36:56.844654 2026] [proxy_fcgi:error] [pid 38241:tid 38268] [client 45.86.202.187:45725] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:36:58.106205 2026] [:error] [pid 38241:tid 38259] [client 45.86.202.187:45725] [client 45.86.202.187] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aaPQevKRPk6YnJBxw_zxIgAAAM8"]
[Sun Mar 01 13:36:59.043692 2026] [:error] [pid 38241:tid 38250] [client 45.86.202.166:31995] [client 45.86.202.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "aaPQe_KRPk6YnJBxw_zxLQAAAMY"]
[Sun Mar 01 13:37:00.551952 2026] [:error] [pid 44644:tid 44658] [client 45.86.202.202:35787] [client 45.86.202.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/edit.php"] [unique_id "aaPQfJ3RJaXMcw3y9V88QgAAAAs"]
[Sun Mar 01 13:37:01.183225 2026] [proxy_fcgi:error] [pid 41967:tid 41990] [client 45.86.202.187:53007] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:37:01.836290 2026] [proxy_fcgi:error] [pid 41967:tid 41984] [client 45.86.202.187:53007] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:37:03.299856 2026] [:error] [pid 41967:tid 41976] [client 45.86.202.187:53007] [client 45.86.202.187] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "aaPQf4O1bqY181I02eFwogAAAIc"]
[Sun Mar 01 13:37:04.002690 2026] [proxy_fcgi:error] [pid 44644:tid 44671] [client 45.86.202.178:62269] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:37:04.660208 2026] [:error] [pid 44644:tid 44663] [client 45.86.202.178:62269] [client 45.86.202.178] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/click.php"] [unique_id "aaPQgJ3RJaXMcw3y9V88VgAAABA"]
[Sun Mar 01 13:37:06.341072 2026] [:error] [pid 44644:tid 44668] [client 45.86.202.183:27311] [client 45.86.202.183] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "aaPQgp3RJaXMcw3y9V88YgAAABU"]
[Sun Mar 01 13:37:07.241406 2026] [proxy_fcgi:error] [pid 38034:tid 38054] [client 45.86.202.184:59901] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:37:08.124193 2026] [proxy_fcgi:error] [pid 38034:tid 38037] [client 45.86.202.184:59901] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:37:10.181629 2026] [proxy_fcgi:error] [pid 38034:tid 38049] [client 45.86.202.184:59901] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:37:10.499889 2026] [:error] [pid 38034:tid 38037] [client 45.86.202.184:59901] [client 45.86.202.184] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "aaPQhgxtfZjwlJok9K9HsQAAAQE"]
[Sun Mar 01 13:37:11.104160 2026] [:error] [pid 38034:tid 38054] [client 45.86.202.173:33613] [client 45.86.202.173] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/xl2023.php"] [unique_id "aaPQhwxtfZjwlJok9K9HswAAARA"]
[Sun Mar 01 13:37:11.707075 2026] [:error] [pid 44644:tid 44658] [client 45.86.202.196:61579] [client 45.86.202.196] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/certificates/admin.php"] [unique_id "aaPQh53RJaXMcw3y9V88hwAAAAs"]
[Sun Mar 01 13:37:12.289825 2026] [:error] [pid 38034:tid 38061] [client 45.86.202.198:51695] [client 45.86.202.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/media/dog.php"] [unique_id "aaPQiAxtfZjwlJok9K9HtgAAARc"]
[Sun Mar 01 13:37:12.878820 2026] [proxy_fcgi:error] [pid 38241:tid 38265] [client 45.86.202.159:29967] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:37:13.159604 2026] [:error] [pid 38241:tid 38259] [client 45.86.202.159:29967] [client 45.86.202.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "aaPQifKRPk6YnJBxw_zxggAAAM8"]
[Sun Mar 01 13:37:13.812066 2026] [:error] [pid 38241:tid 38250] [client 45.86.202.159:22683] [client 45.86.202.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aaPQifKRPk6YnJBxw_zxhAAAAMY"]
[Sun Mar 01 13:37:14.464752 2026] [proxy_fcgi:error] [pid 38034:tid 38043] [client 45.86.202.225:38301] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:37:15.053359 2026] [:error] [pid 38034:tid 38053] [client 45.86.202.225:38301] [client 45.86.202.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aaPQiwxtfZjwlJok9K9HwAAAAQ8"]
[Sun Mar 01 13:37:15.720079 2026] [:error] [pid 44644:tid 44663] [client 45.86.202.159:21453] [client 45.86.202.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aaPQi53RJaXMcw3y9V88ngAAABA"]
[Sun Mar 01 13:37:16.339927 2026] [:error] [pid 38241:tid 38255] [client 45.86.202.197:41069] [client 45.86.202.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/pomo/admin.php"] [unique_id "aaPQjPKRPk6YnJBxw_zxmwAAAMs"]
[Sun Mar 01 13:37:16.929339 2026] [:error] [pid 38034:tid 38043] [client 45.86.202.183:21657] [client 45.86.202.183] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/IXR/security.php"] [unique_id "aaPQjAxtfZjwlJok9K9HxAAAAQU"]
[Sun Mar 01 13:37:17.825000 2026] [:error] [pid 44644:tid 44660] [client 45.86.202.201:29475] [client 45.86.202.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aaPQjZ3RJaXMcw3y9V88sAAAAA0"]
[Sun Mar 01 13:37:18.970950 2026] [:error] [pid 44644:tid 44655] [client 45.86.202.196:44271] [client 45.86.202.196] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/fonts/about.php"] [unique_id "aaPQjp3RJaXMcw3y9V88wQAAAAg"]
[Sun Mar 01 13:37:19.654603 2026] [proxy_fcgi:error] [pid 38241:tid 38255] [client 45.86.202.159:57353] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:37:20.735426 2026] [proxy_fcgi:error] [pid 38241:tid 38248] [client 45.86.202.159:57353] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:37:21.059460 2026] [:error] [pid 38241:tid 38250] [client 45.86.202.159:57353] [client 45.86.202.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "aaPQkfKRPk6YnJBxw_zxwgAAAMY"]
[Sun Mar 01 13:37:21.968250 2026] [proxy_fcgi:error] [pid 37032:tid 37057] [client 45.86.202.177:63849] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:37:22.256282 2026] [proxy_fcgi:error] [pid 37032:tid 37048] [client 45.86.202.177:63849] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:37:23.808925 2026] [:error] [pid 37032:tid 37046] [client 45.86.202.177:63849] [client 45.86.202.177] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/file.php"] [unique_id "aaPQk-u0U4o7eSImsVT4FgAAAYw"]
[Sun Mar 01 13:37:25.305572 2026] [:error] [pid 38034:tid 38043] [client 45.86.202.187:40059] [client 45.86.202.187] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "aaPQlQxtfZjwlJok9K9H0QAAAQU"]
[Sun Mar 01 13:37:25.900841 2026] [:error] [pid 41780:tid 41795] [client 45.86.202.189:31943] [client 45.86.202.189] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "aaPQlcONkVoocLIqzy0AzwAAA8w"]
[Sun Mar 01 13:37:27.718900 2026] [:error] [pid 38034:tid 38053] [client 45.86.202.197:56331] [client 45.86.202.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aaPQlwxtfZjwlJok9K9H4wAAAQ8"]
[Sun Mar 01 13:37:28.968991 2026] [proxy_fcgi:error] [pid 38241:tid 38250] [client 45.86.202.197:29139] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:37:29.288078 2026] [proxy_fcgi:error] [pid 38241:tid 38259] [client 45.86.202.197:29139] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:37:29.566271 2026] [proxy_fcgi:error] [pid 38241:tid 38259] [client 45.86.202.197:29139] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:37:29.980617 2026] [proxy_fcgi:error] [pid 38241:tid 38265] [client 45.86.202.197:29139] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:37:31.570178 2026] [:error] [pid 38241:tid 38265] [client 45.86.202.197:29139] [client 45.86.202.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aaPQm_KRPk6YnJBxw_zyLQAAANU"]
[Sun Mar 01 13:37:32.251490 2026] [:error] [pid 44644:tid 44666] [client 45.86.202.196:28791] [client 45.86.202.196] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "aaPQnJ3RJaXMcw3y9V89CwAAABM"]
[Sun Mar 01 13:37:32.795504 2026] [:error] [pid 38241:tid 38265] [client 45.86.202.180:31791] [client 45.86.202.180] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "aaPQnPKRPk6YnJBxw_zyMwAAANU"]
[Sun Mar 01 13:37:33.439295 2026] [:error] [pid 41780:tid 41803] [client 45.86.202.224:48483] [client 45.86.202.224] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "aaPQncONkVoocLIqzy0A2gAAA9Q"]
[Sun Mar 01 13:37:34.029499 2026] [:error] [pid 38034:tid 38053] [client 45.86.202.164:45247] [client 45.86.202.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aaPQngxtfZjwlJok9K9H7wAAAQ8"]
[Sun Mar 01 13:37:34.666336 2026] [:error] [pid 38034:tid 38049] [client 45.86.202.185:27087] [client 45.86.202.185] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aaPQngxtfZjwlJok9K9H-wAAAQs"]
[Sun Mar 01 13:37:35.788566 2026] [:error] [pid 38034:tid 38061] [client 45.86.202.201:65161] [client 45.86.202.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/media/index.php"] [unique_id "aaPQnwxtfZjwlJok9K9IAwAAARc"]
[Sun Mar 01 13:37:36.406770 2026] [:error] [pid 38241:tid 38248] [client 45.86.202.164:60041] [client 45.86.202.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "aaPQoPKRPk6YnJBxw_zyTQAAAMQ"]
[Sun Mar 01 13:37:36.998906 2026] [:error] [pid 44644:tid 44667] [client 45.86.202.225:22241] [client 45.86.202.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "aaPQoJ3RJaXMcw3y9V89JwAAABQ"]
[Sun Mar 01 13:37:37.769320 2026] [:error] [pid 41780:tid 41784] [client 45.86.202.225:22919] [client 45.86.202.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "aaPQocONkVoocLIqzy0A2wAAA8E"]
[Sun Mar 01 13:37:39.030048 2026] [:error] [pid 38241:tid 38267] [client 45.86.202.181:65417] [client 45.86.202.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/fonts/themes.php"] [unique_id "aaPQo_KRPk6YnJBxw_zyXAAAANc"]
[Sun Mar 01 13:37:39.907126 2026] [:error] [pid 44644:tid 44651] [client 45.86.202.205:56355] [client 45.86.202.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/certificates/index.php"] [unique_id "aaPQo53RJaXMcw3y9V89OAAAAAQ"]
[Sun Mar 01 13:37:40.545539 2026] [proxy_fcgi:error] [pid 44644:tid 44666] [client 45.86.202.162:37463] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:37:42.456621 2026] [:error] [pid 44644:tid 44667] [client 45.86.202.162:37463] [client 45.86.202.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "aaPQpp3RJaXMcw3y9V89YwAAABQ"]
[Sun Mar 01 13:37:43.724713 2026] [:error] [pid 44644:tid 44662] [client 45.86.202.196:22187] [client 45.86.202.196] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "aaPQp53RJaXMcw3y9V89cAAAAA8"]
[Sun Mar 01 13:37:45.245340 2026] [proxy_fcgi:error] [pid 38241:tid 38248] [client 45.86.202.173:35603] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:37:45.535228 2026] [:error] [pid 38241:tid 38265] [client 45.86.202.173:35603] [client 45.86.202.173] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aaPQqfKRPk6YnJBxw_zylwAAANU"]
[Sun Mar 01 13:37:46.415484 2026] [proxy_fcgi:error] [pid 44644:tid 44663] [client 45.86.202.169:51949] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:37:46.792531 2026] [proxy_fcgi:error] [pid 44644:tid 44662] [client 45.86.202.169:51949] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:37:47.154065 2026] [proxy_fcgi:error] [pid 44644:tid 44671] [client 45.86.202.169:51949] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:37:47.452463 2026] [:error] [pid 44644:tid 44662] [client 45.86.202.169:51949] [client 45.86.202.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "aaPQq53RJaXMcw3y9V89oAAAAA8"]
[Sun Mar 01 13:37:48.329122 2026] [proxy_fcgi:error] [pid 44644:tid 44671] [client 45.86.202.165:38803] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:37:48.673629 2026] [:error] [pid 44644:tid 44669] [client 45.86.202.165:38803] [client 45.86.202.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "aaPQrJ3RJaXMcw3y9V89rwAAABY"]
[Sun Mar 01 13:37:50.469732 2026] [proxy_fcgi:error] [pid 38034:tid 38038] [client 45.86.202.161:30411] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:37:50.774100 2026] [proxy_fcgi:error] [pid 38034:tid 38043] [client 45.86.202.161:30411] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:37:51.416180 2026] [proxy_fcgi:error] [pid 38034:tid 38061] [client 45.86.202.161:30411] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:37:52.917201 2026] [proxy_fcgi:error] [pid 38034:tid 38061] [client 45.86.202.161:30411] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:37:53.231926 2026] [proxy_fcgi:error] [pid 38034:tid 38049] [client 45.86.202.161:30411] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:37:53.798080 2026] [proxy_fcgi:error] [pid 38034:tid 38049] [client 45.86.202.161:30411] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:37:54.699591 2026] [proxy_fcgi:error] [pid 38034:tid 38038] [client 45.86.202.161:30411] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:37:54.970670 2026] [:error] [pid 38034:tid 38043] [client 45.86.202.161:30411] [client 45.86.202.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "aaPQsgxtfZjwlJok9K9IUAAAAQU"]
[Sun Mar 01 13:37:55.583731 2026] [:error] [pid 37032:tid 37049] [client 45.86.202.199:31403] [client 45.86.202.199] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aaPQs-u0U4o7eSImsVT4OAAAAY8"]
[Sun Mar 01 13:37:56.152499 2026] [:error] [pid 38241:tid 38248] [client 45.86.202.177:23009] [client 45.86.202.177] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.202.177, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-login.php"] [unique_id "aaPQtPKRPk6YnJBxw_zy3QAAAMQ"]
[Sun Mar 01 13:37:56.157142 2026] [proxy_fcgi:error] [pid 38241:tid 38248] [client 45.86.202.177:23009] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:37:56.447869 2026] [proxy_fcgi:error] [pid 38241:tid 38257] [client 45.86.202.177:23009] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:37:56.732938 2026] [:error] [pid 38241:tid 38248] [client 45.86.202.177:23009] [client 45.86.202.177] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "aaPQtPKRPk6YnJBxw_zy5QAAAMQ"]
[Sun Mar 01 13:37:57.665224 2026] [proxy_fcgi:error] [pid 42619:tid 42635] [client 45.86.202.180:27065] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:37:57.953642 2026] [:error] [pid 42619:tid 42625] [client 45.86.202.180:27065] [client 45.86.202.180] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aaPQtR_zUXcYaZE4AOdkigAAAUQ"]
[Sun Mar 01 13:37:58.494894 2026] [:error] [pid 38241:tid 38250] [client 45.86.202.168:63361] [client 45.86.202.168] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aaPQtvKRPk6YnJBxw_zy7QAAAMY"]
[Sun Mar 01 13:38:00.422303 2026] [:error] [pid 38241:tid 38257] [client 45.86.202.194:27107] [client 45.86.202.194] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aaPQuPKRPk6YnJBxw_zy_QAAAM0"]
[Sun Mar 01 13:38:01.053375 2026] [:error] [pid 44644:tid 44671] [client 45.86.202.200:31463] [client 45.86.202.200] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dwelectservices.com.au"] [uri "/fm.php"] [unique_id "aaPQuZ3RJaXMcw3y9V8-DQAAABg"]
[Sun Mar 01 13:38:02.692113 2026] [proxy_fcgi:error] [pid 44644:tid 44662] [client 45.86.202.202:35493] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:38:03.361950 2026] [:error] [pid 44644:tid 44666] [client 45.86.202.202:35493] [client 45.86.202.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "aaPQu53RJaXMcw3y9V8-JQAAABM"]
[Sun Mar 01 13:38:04.635722 2026] [proxy_fcgi:error] [pid 38241:tid 38267] [client 45.86.202.202:58303] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:38:05.287583 2026] [:error] [pid 38241:tid 38264] [client 45.86.202.202:58303] [client 45.86.202.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/function.php"] [unique_id "aaPQvfKRPk6YnJBxw_zzHAAAANQ"]
[Sun Mar 01 13:38:06.941229 2026] [:error] [pid 38034:tid 38054] [client 45.86.202.158:23375] [client 45.86.202.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/plugins.php"] [unique_id "aaPQvgxtfZjwlJok9K9IgAAAARA"]
[Sun Mar 01 13:38:07.863228 2026] [proxy_fcgi:error] [pid 38241:tid 38264] [client 45.86.202.188:41447] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:38:08.168974 2026] [:error] [pid 38241:tid 38244] [client 45.86.202.188:41447] [client 45.86.202.188] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/chosen.php"] [unique_id "aaPQwPKRPk6YnJBxw_zzPAAAAMA"]
[Sun Mar 01 13:38:08.710967 2026] [:error] [pid 38034:tid 38038] [client 45.86.202.192:26433] [client 45.86.202.192] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "aaPQwAxtfZjwlJok9K9IiAAAAQI"]
[Sun Mar 01 13:38:10.158843 2026] [proxy_fcgi:error] [pid 42619:tid 42626] [client 45.86.202.156:32535] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:38:11.747035 2026] [proxy_fcgi:error] [pid 42619:tid 42628] [client 45.86.202.156:32535] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:38:12.404563 2026] [proxy_fcgi:error] [pid 42619:tid 42632] [client 45.86.202.156:32535] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:38:12.989636 2026] [:error] [pid 42619:tid 42635] [client 45.86.202.156:32535] [client 45.86.202.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/atomlib.php"] [unique_id "aaPQxB_zUXcYaZE4AOdkowAAAU4"]
[Sun Mar 01 13:38:13.530965 2026] [:error] [pid 38241:tid 38248] [client 45.86.202.170:40357] [client 45.86.202.170] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/rest-api/index.php"] [unique_id "aaPQxfKRPk6YnJBxw_zzYgAAAMQ"]
[Sun Mar 01 13:38:15.037102 2026] [proxy_fcgi:error] [pid 38241:tid 38248] [client 45.86.202.181:52795] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:38:15.351182 2026] [:error] [pid 38241:tid 38248] [client 45.86.202.181:52795] [client 45.86.202.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/index.php"] [unique_id "aaPQx_KRPk6YnJBxw_zzfgAAAMQ"]
[Sun Mar 01 13:38:17.586980 2026] [:error] [pid 37032:tid 37050] [client 45.86.202.176:32209] [client 45.86.202.176] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aaPQyeu0U4o7eSImsVT4ZQAAAZA"]
[Sun Mar 01 13:38:18.126200 2026] [:error] [pid 42619:tid 42642] [client 45.86.202.196:30329] [client 45.86.202.196] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aaPQyh_zUXcYaZE4AOdkpgAAAVU"]
[Sun Mar 01 13:38:19.954438 2026] [proxy_fcgi:error] [pid 41780:tid 41796] [client 45.86.202.179:33731] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:38:20.219484 2026] [:error] [pid 41780:tid 41795] [client 45.86.202.179:33731] [client 45.86.202.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/Exception-wp.php"] [unique_id "aaPQzMONkVoocLIqzy0A8QAAA8w"]
[Sun Mar 01 13:38:21.218758 2026] [:error] [pid 38241:tid 38257] [client 45.86.202.157:61753] [client 45.86.202.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aaPQzfKRPk6YnJBxw_zzqAAAAM0"]
[Sun Mar 01 13:38:21.771402 2026] [proxy_fcgi:error] [pid 44644:tid 44662] [client 45.86.202.188:35557] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:38:22.057163 2026] [proxy_fcgi:error] [pid 44644:tid 44669] [client 45.86.202.188:35557] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:38:22.641575 2026] [proxy_fcgi:error] [pid 44644:tid 44651] [client 45.86.202.188:35557] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:38:23.855694 2026] [:error] [pid 44644:tid 44666] [client 45.86.202.188:35557] [client 45.86.202.188] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.202.188, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/js/wp-login.php"] [unique_id "aaPQz53RJaXMcw3y9V8-nwAAABM"]
[Sun Mar 01 13:38:24.451164 2026] [:error] [pid 44644:tid 44660] [client 45.86.202.188:35557] File does not exist: /home/dwelects/public_html/worm.PhP
[Sun Mar 01 13:38:24.735640 2026] [proxy_fcgi:error] [pid 44644:tid 44666] [client 45.86.202.188:35557] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:38:25.011458 2026] [proxy_fcgi:error] [pid 44644:tid 44668] [client 45.86.202.188:35557] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:38:25.596653 2026] [:error] [pid 44644:tid 44668] [client 45.86.202.188:35557] [client 45.86.202.188] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/bk/index.php"] [unique_id "aaPQ0Z3RJaXMcw3y9V8-sQAAABU"]
[Sun Mar 01 13:38:26.148433 2026] [:error] [pid 44644:tid 44666] [client 45.86.202.186:25285] [client 45.86.202.186] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.202.186, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "aaPQ0p3RJaXMcw3y9V8-tAAAABM"]
[Sun Mar 01 13:38:27.055220 2026] [proxy_fcgi:error] [pid 44644:tid 44667] [client 45.86.202.186:25285] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:38:27.343530 2026] [proxy_fcgi:error] [pid 44644:tid 44666] [client 45.86.202.186:25285] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:38:27.942253 2026] [proxy_fcgi:error] [pid 44644:tid 44667] [client 45.86.202.186:25285] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:38:28.519351 2026] [proxy_fcgi:error] [pid 44644:tid 44669] [client 45.86.202.186:25285] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:38:29.775560 2026] [proxy_fcgi:error] [pid 44644:tid 44667] [client 45.86.202.186:25285] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:38:31.915467 2026] [proxy_fcgi:error] [pid 44644:tid 44666] [client 45.86.202.186:25285] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:38:32.208345 2026] [proxy_fcgi:error] [pid 44644:tid 44660] [client 45.86.202.186:25285] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:38:33.754371 2026] [proxy_fcgi:error] [pid 44644:tid 44651] [client 45.86.202.186:25285] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:38:34.314445 2026] [:error] [pid 44644:tid 44655] [client 45.86.202.186:25285] [client 45.86.202.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "aaPQ2p3RJaXMcw3y9V8_BQAAAAg"]
[Sun Mar 01 13:38:35.542010 2026] [proxy_fcgi:error] [pid 44644:tid 44667] [client 45.86.202.197:63865] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:38:36.143145 2026] [:error] [pid 44644:tid 44667] [client 45.86.202.197:63865] [client 45.86.202.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aaPQ3J3RJaXMcw3y9V8_EgAAABQ"]
[Sun Mar 01 13:38:36.997950 2026] [proxy_fcgi:error] [pid 38241:tid 38267] [client 45.86.202.156:54283] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:38:37.289193 2026] [proxy_fcgi:error] [pid 38241:tid 38268] [client 45.86.202.156:54283] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:38:37.559550 2026] [:error] [pid 38241:tid 38249] [client 45.86.202.156:54283] [client 45.86.202.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/atomlib.php"] [unique_id "aaPQ3fKRPk6YnJBxw_zz6wAAAMU"]
[Sun Mar 01 13:38:40.142236 2026] [proxy_fcgi:error] [pid 38241:tid 38250] [client 45.86.202.169:27541] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:38:40.853539 2026] [proxy_fcgi:error] [pid 38241:tid 38268] [client 45.86.202.169:27541] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:38:41.562809 2026] [proxy_fcgi:error] [pid 38241:tid 38257] [client 45.86.202.169:27541] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:38:41.862800 2026] [proxy_fcgi:error] [pid 38241:tid 38244] [client 45.86.202.169:27541] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:38:42.439916 2026] [:error] [pid 38241:tid 38257] [client 45.86.202.169:27541] [client 45.86.202.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aaPQ4vKRPk6YnJBxw_z0BAAAAM0"]
[Sun Mar 01 13:38:44.205881 2026] [proxy_fcgi:error] [pid 44644:tid 44662] [client 45.86.202.172:21023] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:38:45.240445 2026] [proxy_fcgi:error] [pid 44644:tid 44668] [client 45.86.202.200:44557] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:38:45.558469 2026] [:error] [pid 44644:tid 44668] [client 45.86.202.200:44557] [client 45.86.202.200] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aaPQ5Z3RJaXMcw3y9V8_WAAAABU"]
[Sun Mar 01 13:38:46.418161 2026] [:error] [pid 40750:tid 40765] [client 45.86.202.174:29043] [client 45.86.202.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aaPQ5gfBuk03yQKDyqvBnQAAAcw"]
[Sun Mar 01 13:38:47.306794 2026] [proxy_fcgi:error] [pid 42619:tid 42627] [client 45.86.202.184:59213] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:38:48.574434 2026] [proxy_fcgi:error] [pid 42619:tid 42627] [client 45.86.202.184:59213] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:38:48.883971 2026] [proxy_fcgi:error] [pid 42619:tid 42645] [client 45.86.202.184:59213] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:38:49.155734 2026] [:error] [pid 42619:tid 42642] [client 45.86.202.184:59213] [client 45.86.202.184] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "aaPQ6R_zUXcYaZE4AOdk_QAAAVU"]
[Sun Mar 01 13:38:49.883241 2026] [:error] [pid 38241:tid 38264] [client 45.86.202.184:20995] [client 45.86.202.184] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "aaPQ6fKRPk6YnJBxw_z0GAAAANQ"]
[Sun Mar 01 13:38:51.995442 2026] [proxy_fcgi:error] [pid 44644:tid 44671] [client 45.86.202.184:64817] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:38:52.557260 2026] [:error] [pid 44644:tid 44669] [client 45.86.202.184:64817] [client 45.86.202.184] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/dist/default.php"] [unique_id "aaPQ7J3RJaXMcw3y9V8_nwAAABY"]
[Sun Mar 01 13:38:53.466810 2026] [:error] [pid 44644:tid 44662] [client 45.86.202.191:20877] [client 45.86.202.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dwelectservices.com.au"] [uri "/tiny.php"] [unique_id "aaPQ7Z3RJaXMcw3y9V8_qgAAAA8"]
[Sun Mar 01 13:38:55.428354 2026] [proxy_fcgi:error] [pid 44644:tid 44660] [client 45.86.202.200:53075] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:38:55.720697 2026] [proxy_fcgi:error] [pid 44644:tid 44668] [client 45.86.202.200:53075] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:38:55.998750 2026] [:error] [pid 44644:tid 44668] [client 45.86.202.200:53075] [client 45.86.202.200] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "aaPQ753RJaXMcw3y9V8_wAAAABU"]
[Sun Mar 01 13:38:58.040103 2026] [proxy_fcgi:error] [pid 38241:tid 38251] [client 45.86.202.191:52613] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:38:58.325472 2026] [proxy_fcgi:error] [pid 38241:tid 38265] [client 45.86.202.191:52613] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:38:58.906643 2026] [proxy_fcgi:error] [pid 38241:tid 38251] [client 45.86.202.191:52613] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:38:59.762595 2026] [:error] [pid 38241:tid 38244] [client 45.86.202.191:52613] [client 45.86.202.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/Parse/about.php"] [unique_id "aaPQ8_KRPk6YnJBxw_z0QQAAAMA"]
[Sun Mar 01 13:39:00.333511 2026] [proxy_fcgi:error] [pid 38241:tid 38244] [client 45.86.202.176:33481] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:39:01.411932 2026] [:error] [pid 38241:tid 38264] [client 45.86.202.176:33481] [client 45.86.202.176] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "aaPQ9fKRPk6YnJBxw_z0TgAAANQ"]
[Sun Mar 01 13:39:03.047972 2026] [proxy_fcgi:error] [pid 44644:tid 44670] [client 45.86.202.162:26847] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:39:04.005561 2026] [proxy_fcgi:error] [pid 44644:tid 44658] [client 45.86.202.162:26847] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:39:04.331940 2026] [proxy_fcgi:error] [pid 44644:tid 44658] [client 45.86.202.162:26847] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:39:04.925434 2026] [:error] [pid 44644:tid 44660] [client 45.86.202.162:26847] [client 45.86.202.162] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.202.162, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/colors/ocean/wp-login.php"] [unique_id "aaPQ-J3RJaXMcw3y9V9AGgAAAA0"]
[Sun Mar 01 13:39:05.932797 2026] [proxy_fcgi:error] [pid 44644:tid 44663] [client 45.86.202.162:26847] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:39:06.575113 2026] [:error] [pid 44644:tid 44651] [client 45.86.202.162:26847] [client 45.86.202.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/Cache/upfile.php"] [unique_id "aaPQ-p3RJaXMcw3y9V9ALgAAAAQ"]
[Sun Mar 01 13:39:08.248850 2026] [proxy_fcgi:error] [pid 38241:tid 38246] [client 45.86.202.163:32541] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:39:08.535981 2026] [:error] [pid 38241:tid 38249] [client 45.86.202.163:32541] [client 45.86.202.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "aaPQ_PKRPk6YnJBxw_z0eAAAAMU"]
[Sun Mar 01 13:39:09.110843 2026] [proxy_fcgi:error] [pid 44644:tid 44655] [client 45.86.202.167:38301] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:39:09.742756 2026] [proxy_fcgi:error] [pid 44644:tid 44660] [client 45.86.202.167:38301] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:39:10.314767 2026] [:error] [pid 44644:tid 44671] [client 45.86.202.167:38301] [client 45.86.202.167] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/widgets/class-wp-widget-search-function.php"] [unique_id "aaPQ_p3RJaXMcw3y9V9AaAAAABg"]
[Sun Mar 01 13:39:11.193571 2026] [proxy_fcgi:error] [pid 37032:tid 37049] [client 45.86.202.193:48925] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:39:11.495948 2026] [proxy_fcgi:error] [pid 37032:tid 37053] [client 45.86.202.193:48925] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:39:12.077288 2026] [:error] [pid 37032:tid 37038] [client 45.86.202.193:48925] [client 45.86.202.193] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/Canonical.php"] [unique_id "aaPRAOu0U4o7eSImsVT5EwAAAYQ"]
[Sun Mar 01 13:39:12.924510 2026] [:error] [pid 44644:tid 44651] [client 45.86.202.202:63751] [client 45.86.202.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "aaPRAJ3RJaXMcw3y9V9AfgAAAAQ"]
[Sun Mar 01 13:39:13.540910 2026] [proxy_fcgi:error] [pid 44644:tid 44658] [client 45.86.202.158:38863] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:39:13.873521 2026] [proxy_fcgi:error] [pid 44644:tid 44658] [client 45.86.202.158:38863] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:39:14.439743 2026] [:error] [pid 44644:tid 44663] [client 45.86.202.158:38863] [client 45.86.202.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/class-feed-index.php"] [unique_id "aaPRAp3RJaXMcw3y9V9AjwAAABA"]
[Sun Mar 01 13:39:14.985034 2026] [proxy_fcgi:error] [pid 42619:tid 42622] [client 45.86.202.205:55629] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:39:15.653761 2026] [proxy_fcgi:error] [pid 42619:tid 42626] [client 45.86.202.205:55629] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:39:15.915999 2026] [:error] [pid 42619:tid 42622] [client 45.86.202.205:55629] [client 45.86.202.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php"] [unique_id "aaPRAx_zUXcYaZE4AOdlQAAAAUE"]
[Sun Mar 01 13:39:16.896670 2026] [:error] [pid 38241:tid 38246] [client 45.86.202.202:58767] [client 45.86.202.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/db.php"] [unique_id "aaPRBPKRPk6YnJBxw_z0rgAAAMI"]
[Sun Mar 01 13:39:17.453673 2026] [:error] [pid 38241:tid 38265] [client 45.86.202.173:54135] [client 45.86.202.173] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/class-wp-dependency-float.php"] [unique_id "aaPRBfKRPk6YnJBxw_z0swAAANU"]
[Sun Mar 01 13:39:17.987209 2026] [:error] [pid 38241:tid 38264] [client 45.86.202.184:36149] [client 45.86.202.184] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "aaPRBfKRPk6YnJBxw_z0vAAAANQ"]
[Sun Mar 01 13:39:18.621579 2026] [:error] [pid 38241:tid 38249] [client 45.86.202.192:37767] [client 45.86.202.192] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/PHPMailer/purna.php"] [unique_id "aaPRBvKRPk6YnJBxw_z0yAAAAMU"]
[Sun Mar 01 13:39:19.212039 2026] [:error] [pid 44644:tid 44669] [client 45.86.202.181:20235] [client 45.86.202.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/interactivity-api/interactivity-api-class.php"] [unique_id "aaPRB53RJaXMcw3y9V9ArgAAABY"]
[Sun Mar 01 13:39:19.775236 2026] [:error] [pid 44644:tid 44671] [client 45.86.202.175:57809] [client 45.86.202.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/l10n/class-wp-widddget-pages.php"] [unique_id "aaPRB53RJaXMcw3y9V9AtQAAABg"]
[Sun Mar 01 13:39:21.011948 2026] [:error] [pid 44644:tid 44668] [client 45.86.202.170:25659] [client 45.86.202.170] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php"] [unique_id "aaPRCZ3RJaXMcw3y9V9AwgAAABU"]
[Sun Mar 01 13:39:21.548516 2026] [:error] [pid 38241:tid 38264] [client 45.86.202.199:48265] [client 45.86.202.199] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php"] [unique_id "aaPRCfKRPk6YnJBxw_z02AAAANQ"]
[Sun Mar 01 13:39:22.135471 2026] [:error] [pid 44644:tid 44666] [client 45.86.202.166:46741] [client 45.86.202.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/ID3/module.audio-video.riff-set.php"] [unique_id "aaPRCp3RJaXMcw3y9V9AzQAAABM"]
[Sun Mar 01 13:39:23.121591 2026] [:error] [pid 44644:tid 44655] [client 45.86.202.184:60853] [client 45.86.202.184] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/tinymce/utils/license.php"] [unique_id "aaPRC53RJaXMcw3y9V9A0wAAAAg"]
[Sun Mar 01 13:39:24.430144 2026] [:error] [pid 41780:tid 41804] [client 45.86.202.168:38419] [client 45.86.202.168] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Text/options.php"] [unique_id "aaPRDMONkVoocLIqzy0BGgAAA9U"]
[Sun Mar 01 13:39:25.099585 2026] [proxy_fcgi:error] [pid 37032:tid 37038] [client 45.86.202.175:38113] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:39:26.273734 2026] [:error] [pid 37032:tid 37057] [client 45.86.202.175:38113] [client 45.86.202.175] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.202.175, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "aaPRDuu0U4o7eSImsVT5KwAAAZc"]
[Sun Mar 01 13:39:28.208617 2026] [:error] [pid 37032:tid 37058] [client 45.86.202.175:38113] [client 45.86.202.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/feed-rsss.php"] [unique_id "aaPREOu0U4o7eSImsVT5MwAAAZg"]
[Sun Mar 01 13:39:28.773229 2026] [:error] [pid 41967:tid 41975] [client 45.86.202.201:57661] [client 45.86.202.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/IXR/goto.php"] [unique_id "aaPREIO1bqY181I02eFxDAAAAIY"]
[Sun Mar 01 13:39:30.263586 2026] [proxy_fcgi:error] [pid 41967:tid 41969] [client 45.86.202.205:45035] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:39:30.535519 2026] [proxy_fcgi:error] [pid 41967:tid 41990] [client 45.86.202.205:45035] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:39:31.695603 2026] [proxy_fcgi:error] [pid 41967:tid 41976] [client 45.86.202.205:45035] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:39:31.981066 2026] [proxy_fcgi:error] [pid 41967:tid 41987] [client 45.86.202.205:45035] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:39:33.202984 2026] [proxy_fcgi:error] [pid 41967:tid 41984] [client 45.86.202.205:45035] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:39:33.497338 2026] [proxy_fcgi:error] [pid 41967:tid 41971] [client 45.86.202.205:45035] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:39:33.789190 2026] [proxy_fcgi:error] [pid 41967:tid 41976] [client 45.86.202.205:45035] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:39:34.194561 2026] [proxy_fcgi:error] [pid 41967:tid 41980] [client 45.86.202.205:45035] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:39:34.550098 2026] [:error] [pid 41967:tid 41987] [client 45.86.202.205:45035] [client 45.86.202.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aaPRFoO1bqY181I02eFxJwAAAJI"]
[Sun Mar 01 13:39:35.267493 2026] [:error] [pid 38241:tid 38264] [client 45.86.202.197:42087] [client 45.86.202.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/wp_class_datlib.php"] [unique_id "aaPRF_KRPk6YnJBxw_z0_wAAANQ"]
[Sun Mar 01 13:39:35.826288 2026] [:error] [pid 38241:tid 38244] [client 45.86.202.224:59147] [client 45.86.202.224] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "aaPRF_KRPk6YnJBxw_z1BQAAAMA"]
[Sun Mar 01 13:39:36.830257 2026] [proxy_fcgi:error] [pid 38241:tid 38265] [client 45.86.202.201:44553] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:39:37.169562 2026] [proxy_fcgi:error] [pid 38241:tid 38267] [client 45.86.202.201:44553] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:39:37.757841 2026] [proxy_fcgi:error] [pid 38241:tid 38267] [client 45.86.202.201:44553] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:39:38.346124 2026] [:error] [pid 38241:tid 38246] [client 45.86.202.201:44553] [client 45.86.202.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/Registry-private.php"] [unique_id "aaPRGvKRPk6YnJBxw_z1JQAAAMI"]
[Sun Mar 01 13:39:38.922873 2026] [:error] [pid 38241:tid 38264] [client 45.86.202.181:46915] [client 45.86.202.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-meta.php"] [unique_id "aaPRGvKRPk6YnJBxw_z1LAAAANQ"]
[Sun Mar 01 13:39:39.504268 2026] [:error] [pid 38241:tid 38264] [client 45.86.202.159:23721] [client 45.86.202.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/widgets/bypass.php"] [unique_id "aaPRG_KRPk6YnJBxw_z1MQAAANQ"]
[Sun Mar 01 13:39:42.777102 2026] [:error] [pid 38241:tid 38248] [client 45.86.202.164:47381] [client 45.86.202.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/style-engine/adminfus.php"] [unique_id "aaPRHvKRPk6YnJBxw_z1TgAAAMQ"]
[Sun Mar 01 13:39:43.364035 2026] [proxy_fcgi:error] [pid 38241:tid 38260] [client 45.86.202.170:42479] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:39:43.666688 2026] [:error] [pid 38241:tid 38265] [client 45.86.202.170:42479] [client 45.86.202.170] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/group/wp-style.php"] [unique_id "aaPRH_KRPk6YnJBxw_z1WAAAANU"]
[Sun Mar 01 13:39:44.854759 2026] [:error] [pid 38241:tid 38259] [client 45.86.202.161:54635] [client 45.86.202.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/widgets/class-wp-wolf-widget.php"] [unique_id "aaPRIPKRPk6YnJBxw_z1YAAAAM8"]
[Sun Mar 01 13:39:48.569805 2026] [:error] [pid 38241:tid 38247] [client 45.86.202.180:29827] [client 45.86.202.180] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Text/index.php"] [unique_id "aaPRJPKRPk6YnJBxw_z1jAAAAMM"]
[Sun Mar 01 13:39:49.172280 2026] [proxy_fcgi:error] [pid 41342:tid 41347] [client 45.86.202.179:44937] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:39:49.768019 2026] [:error] [pid 41342:tid 41348] [client 45.86.202.179:44937] [client 45.86.202.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/about.php"] [unique_id "aaPRJY4iJ6RAS5CatDk8hQAAAgM"]
[Sun Mar 01 13:39:51.321157 2026] [proxy_fcgi:error] [pid 38241:tid 38260] [client 45.86.202.189:58393] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:39:52.213245 2026] [proxy_fcgi:error] [pid 38241:tid 38268] [client 45.86.202.189:58393] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:39:52.507033 2026] [:error] [pid 38241:tid 38264] [client 45.86.202.189:58393] [client 45.86.202.189] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/wp-sup.php"] [unique_id "aaPRKPKRPk6YnJBxw_z12AAAANQ"]
[Sun Mar 01 13:39:54.195066 2026] [:error] [pid 38034:tid 38037] [client 45.86.202.197:46615] [client 45.86.202.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/widgets/class-t.api.php"] [unique_id "aaPRKgxtfZjwlJok9K9JxAAAAQE"]
[Sun Mar 01 13:39:57.332223 2026] [:error] [pid 44644:tid 44658] [client 45.86.202.157:45013] [client 45.86.202.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/dist/require-dynamic-blocks.php"] [unique_id "aaPRLZ3RJaXMcw3y9V9BywAAAAs"]
[Sun Mar 01 13:39:59.717561 2026] [:error] [pid 44644:tid 44670] [client 45.86.202.191:30393] [client 45.86.202.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/widgets/class-wp-widget-rss-database.php"] [unique_id "aaPRL53RJaXMcw3y9V9B-AAAABc"]
[Sun Mar 01 13:40:00.658408 2026] [proxy_fcgi:error] [pid 44644:tid 44668] [client 45.86.202.169:22337] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:40:01.016478 2026] [:error] [pid 44644:tid 44651] [client 45.86.202.169:22337] [client 45.86.202.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/class-wp-customize-manager-client.php"] [unique_id "aaPRMZ3RJaXMcw3y9V9CAQAAAAQ"]
[Sun Mar 01 13:40:01.662129 2026] [:error] [pid 42619:tid 42645] [client 45.86.202.192:31657] [client 45.86.202.192] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-boolean.php"] [unique_id "aaPRMR_zUXcYaZE4AOdlkAAAAVg"]
[Sun Mar 01 13:40:04.386778 2026] [:error] [pid 37032:tid 37038] [client 45.86.202.204:63699] [client 45.86.202.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/smilies/simi.php"] [unique_id "aaPRNOu0U4o7eSImsVT5qgAAAYQ"]
[Sun Mar 01 13:40:05.006714 2026] [proxy_fcgi:error] [pid 38241:tid 38259] [client 45.86.202.197:50243] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:40:06.279460 2026] [proxy_fcgi:error] [pid 38241:tid 38257] [client 45.86.202.197:50243] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:40:06.573662 2026] [:error] [pid 38241:tid 38250] [client 45.86.202.197:50243] [client 45.86.202.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/style-engine-session.php"] [unique_id "aaPRNvKRPk6YnJBxw_z2RwAAAMY"]
[Sun Mar 01 13:40:07.734121 2026] [proxy_fcgi:error] [pid 44644:tid 44658] [client 45.86.202.159:36485] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:40:08.339091 2026] [:error] [pid 44644:tid 44651] [client 45.86.202.159:36485] [client 45.86.202.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aaPROJ3RJaXMcw3y9V9CNQAAAAQ"]
[Sun Mar 01 13:40:08.923699 2026] [:error] [pid 38241:tid 38259] [client 45.86.202.158:50447] [client 45.86.202.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/file/wp-style.php"] [unique_id "aaPROPKRPk6YnJBxw_z2VAAAAM8"]
[Sun Mar 01 13:40:10.109371 2026] [:error] [pid 41967:tid 41987] [client 45.86.202.199:31189] [client 45.86.202.199] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/IXR/class-IXR-cilent.php"] [unique_id "aaPROoO1bqY181I02eFxRAAAAJI"]
[Sun Mar 01 13:40:11.637226 2026] [:error] [pid 42619:tid 42626] [client 45.86.202.176:28727] [client 45.86.202.176] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/install.php"] [unique_id "aaPROx_zUXcYaZE4AOdlqgAAAUU"]
[Sun Mar 01 13:40:12.228402 2026] [:error] [pid 44644:tid 44658] [client 45.86.202.175:61637] [client 45.86.202.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/PHPMailer/xleet.php"] [unique_id "aaPRPJ3RJaXMcw3y9V9CTgAAAAs"]
[Sun Mar 01 13:40:13.158938 2026] [proxy_fcgi:error] [pid 38241:tid 38247] [client 45.86.202.193:45493] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:40:14.696534 2026] [:error] [pid 38241:tid 38264] [client 45.86.202.193:45493] [client 45.86.202.193] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/category-double.php"] [unique_id "aaPRPvKRPk6YnJBxw_z2eQAAANQ"]
[Sun Mar 01 13:40:15.822380 2026] [:error] [pid 42619:tid 42626] [client 45.86.202.171:20105] [client 45.86.202.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/db.php"] [unique_id "aaPRPx_zUXcYaZE4AOdltAAAAUU"]
[Sun Mar 01 13:40:16.438583 2026] [:error] [pid 44644:tid 44666] [client 45.86.202.176:27587] [client 45.86.202.176] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/widgets/security.php"] [unique_id "aaPRQJ3RJaXMcw3y9V9CgQAAABM"]
[Sun Mar 01 13:40:17.261791 2026] [proxy_fcgi:error] [pid 44644:tid 44668] [client 45.86.202.159:36853] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:40:17.530822 2026] [:error] [pid 44644:tid 44666] [client 45.86.202.159:36853] [client 45.86.202.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/class-wp-language-pack.php"] [unique_id "aaPRQZ3RJaXMcw3y9V9CkQAAABM"]
[Sun Mar 01 13:40:18.429928 2026] [:error] [pid 37032:tid 37038] [client 45.86.202.225:56319] [client 45.86.202.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/class-walker-comment-client.php"] [unique_id "aaPRQuu0U4o7eSImsVT5ywAAAYQ"]
[Sun Mar 01 13:40:20.547912 2026] [:error] [pid 38241:tid 38247] [client 45.86.202.158:26059] [client 45.86.202.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/class-wp-network-query-stat.php"] [unique_id "aaPRRPKRPk6YnJBxw_z2pwAAAMM"]
[Sun Mar 01 13:40:21.429961 2026] [proxy_fcgi:error] [pid 38034:tid 38038] [client 45.86.202.181:50503] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:40:21.711844 2026] [:error] [pid 38034:tid 38049] [client 45.86.202.181:50503] [client 45.86.202.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/class-wp-session-tokens-https.php"] [unique_id "aaPRRQxtfZjwlJok9K9KbgAAAQs"]
[Sun Mar 01 13:40:22.916618 2026] [:error] [pid 44644:tid 44668] [client 45.86.202.166:60449] [client 45.86.202.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/crystal/lrs_dage.php"] [unique_id "aaPRRp3RJaXMcw3y9V9CugAAABU"]
[Sun Mar 01 13:40:23.823134 2026] [:error] [pid 38034:tid 38037] [client 45.86.202.192:36175] [client 45.86.202.192] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/as.php"] [unique_id "aaPRRwxtfZjwlJok9K9KgAAAAQE"]
[Sun Mar 01 13:40:24.775749 2026] [:error] [pid 38241:tid 38248] [client 45.86.202.202:51523] [client 45.86.202.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/certificates/wp-conflg.php"] [unique_id "aaPRSPKRPk6YnJBxw_z2xQAAAMQ"]
[Sun Mar 01 13:40:25.373209 2026] [:error] [pid 38241:tid 38259] [client 45.86.202.176:29537] [client 45.86.202.176] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/install.php"] [unique_id "aaPRSfKRPk6YnJBxw_z2ygAAAM8"]
[Sun Mar 01 13:40:26.022649 2026] [:error] [pid 38241:tid 38261] [client 45.86.202.203:34747] [client 45.86.202.203] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/customize/db.php"] [unique_id "aaPRSvKRPk6YnJBxw_z20AAAANE"]
[Sun Mar 01 13:40:26.586401 2026] [proxy_fcgi:error] [pid 44644:tid 44658] [client 45.86.202.189:43981] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:40:28.391576 2026] [:error] [pid 44644:tid 44651] [client 45.86.202.189:43981] [client 45.86.202.189] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/thickbox/about.php"] [unique_id "aaPRTJ3RJaXMcw3y9V9C2QAAAAQ"]
[Sun Mar 01 13:40:29.833988 2026] [:error] [pid 38034:tid 38053] [client 45.86.202.193:29641] [client 45.86.202.193] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/rk2.php"] [unique_id "aaPRTQxtfZjwlJok9K9KwgAAAQ8"]
[Sun Mar 01 13:40:31.070646 2026] [proxy_fcgi:error] [pid 40750:tid 40773] [client 45.86.202.166:36365] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:40:31.341017 2026] [:error] [pid 40750:tid 40765] [client 45.86.202.166:36365] [client 45.86.202.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/certificates/past.php"] [unique_id "aaPRTwfBuk03yQKDyqvBtwAAAcw"]
[Sun Mar 01 13:40:32.178409 2026] [proxy_fcgi:error] [pid 38241:tid 38246] [client 45.86.202.225:43439] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:40:32.732756 2026] [:error] [pid 38241:tid 38250] [client 45.86.202.225:43439] [client 45.86.202.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/edit-tags.php"] [unique_id "aaPRUPKRPk6YnJBxw_z27wAAAMY"]
[Sun Mar 01 13:40:33.319089 2026] [proxy_fcgi:error] [pid 38034:tid 38055] [client 45.86.202.158:22629] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:40:35.263239 2026] [:error] [pid 38034:tid 38055] [client 45.86.202.158:22629] [client 45.86.202.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/dist/footer-default.php"] [unique_id "aaPRUwxtfZjwlJok9K9K5QAAARE"]
[Sun Mar 01 13:40:36.226297 2026] [:error] [pid 38241:tid 38257] [client 45.86.202.205:53881] [client 45.86.202.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/widgets/class-wp-widget-meta-request.php"] [unique_id "aaPRVPKRPk6YnJBxw_z3AgAAAM0"]
[Sun Mar 01 13:40:37.505553 2026] [:error] [pid 38034:tid 38053] [client 45.86.202.187:54507] [client 45.86.202.187] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/dist/edit-widgets/bypass.php"] [unique_id "aaPRVQxtfZjwlJok9K9K8QAAAQ8"]
[Sun Mar 01 13:40:38.690444 2026] [:error] [pid 41342:tid 41353] [client 45.86.202.166:33807] [client 45.86.202.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/l10n/wp-login.php"] [unique_id "aaPRVo4iJ6RAS5CatDk8vgAAAgg"]
[Sun Mar 01 13:40:42.218170 2026] [:error] [pid 38034:tid 38044] [client 45.86.202.224:51617] [client 45.86.202.224] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/widgets/wp-ss.php"] [unique_id "aaPRWgxtfZjwlJok9K9LCQAAAQY"]
[Sun Mar 01 13:40:42.821457 2026] [:error] [pid 38034:tid 38060] [client 45.86.202.205:29337] [client 45.86.202.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/IXR/xsec1.php"] [unique_id "aaPRWgxtfZjwlJok9K9LDQAAARY"]
[Sun Mar 01 13:40:44.478505 2026] [:error] [pid 38241:tid 38260] [client 45.86.202.160:63613] [client 45.86.202.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/crystal/sad.php"] [unique_id "aaPRXPKRPk6YnJBxw_z3MAAAANA"]
[Sun Mar 01 13:40:45.160533 2026] [:error] [pid 44644:tid 44669] [client 45.86.202.176:43843] [client 45.86.202.176] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aaPRXZ3RJaXMcw3y9V9DDwAAABY"]
[Sun Mar 01 13:40:47.620992 2026] [:error] [pid 41967:tid 41983] [client 45.86.202.205:32945] [client 45.86.202.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/class-phpmailer-beta.php"] [unique_id "aaPRX4O1bqY181I02eFxqAAAAI4"]
[Sun Mar 01 13:40:48.172175 2026] [:error] [pid 42619:tid 42642] [client 45.86.202.160:36375] [client 45.86.202.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/ms-file.php"] [unique_id "aaPRYB_zUXcYaZE4AOdl2gAAAVU"]
[Sun Mar 01 13:40:48.846652 2026] [:error] [pid 44644:tid 44658] [client 45.86.202.201:63433] [client 45.86.202.201] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.202.201, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aaPRYJ3RJaXMcw3y9V9DHAAAAAs"]
[Sun Mar 01 13:40:48.850846 2026] [proxy_fcgi:error] [pid 44644:tid 44658] [client 45.86.202.201:63433] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:40:49.126628 2026] [:error] [pid 44644:tid 44660] [client 45.86.202.201:63433] [client 45.86.202.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/widgets/av.php"] [unique_id "aaPRYZ3RJaXMcw3y9V9DHgAAAA0"]
[Sun Mar 01 13:40:51.409290 2026] [proxy_fcgi:error] [pid 38034:tid 38061] [client 45.86.202.170:45791] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:40:51.684865 2026] [:error] [pid 38034:tid 38053] [client 45.86.202.170:45791] [client 45.86.202.170] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aaPRYwxtfZjwlJok9K9LLQAAAQ8"]
[Sun Mar 01 13:40:52.301805 2026] [:error] [pid 40750:tid 40756] [client 45.86.202.189:42861] [client 45.86.202.189] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/network.php"] [unique_id "aaPRZAfBuk03yQKDyqvBwAAAAcM"]
[Sun Mar 01 13:40:52.854016 2026] [proxy_fcgi:error] [pid 41780:tid 41796] [client 45.86.202.172:24153] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:40:54.896049 2026] [:error] [pid 41780:tid 41791] [client 45.86.202.172:24153] [client 45.86.202.172] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/XML/content.php"] [unique_id "aaPRZsONkVoocLIqzy0BWAAAA8g"]
[Sun Mar 01 13:40:55.475862 2026] [:error] [pid 38034:tid 38054] [client 45.86.202.185:23463] [client 45.86.202.185] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/pomo/item.php"] [unique_id "aaPRZwxtfZjwlJok9K9LRAAAARA"]
[Sun Mar 01 13:40:56.886431 2026] [:error] [pid 42619:tid 42638] [client 45.86.202.159:22551] [client 45.86.202.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/pomo/plugins.php"] [unique_id "aaPRaB_zUXcYaZE4AOdl4wAAAVE"]
[Sun Mar 01 13:40:58.452144 2026] [:error] [pid 44644:tid 44668] [client 45.86.202.163:60573] [client 45.86.202.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/install.php"] [unique_id "aaPRap3RJaXMcw3y9V9DSwAAABU"]
[Sun Mar 01 13:40:59.010932 2026] [proxy_fcgi:error] [pid 37032:tid 37046] [client 45.86.202.172:23227] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:40:59.285430 2026] [:error] [pid 37032:tid 37038] [client 45.86.202.172:23227] [client 45.86.202.172] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.202.172, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/wp-login.php"] [unique_id "aaPRa-u0U4o7eSImsVT6KgAAAYQ"]
[Sun Mar 01 13:40:59.878256 2026] [:error] [pid 37032:tid 37057] [client 45.86.202.172:23227] [client 45.86.202.172] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/widgets/class-wp-nav-widgets.php"] [unique_id "aaPRa-u0U4o7eSImsVT6LAAAAZc"]
[Sun Mar 01 13:41:02.120101 2026] [:error] [pid 41967:tid 41980] [client 45.86.202.196:52751] [client 45.86.202.196] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/sitemaps/providers/doc.php"] [unique_id "aaPRboO1bqY181I02eFx0wAAAIs"]
[Sun Mar 01 13:41:02.838409 2026] [proxy_fcgi:error] [pid 38241:tid 38246] [client 45.86.202.173:30093] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:41:03.177662 2026] [:error] [pid 38241:tid 38259] [client 45.86.202.173:30093] [client 45.86.202.173] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/rest-api/1.php"] [unique_id "aaPRb_KRPk6YnJBxw_z3iwAAAM8"]
[Sun Mar 01 13:41:03.772375 2026] [:error] [pid 42619:tid 42627] [client 45.86.202.203:49343] [client 45.86.202.203] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/fonts/class_api.php"] [unique_id "aaPRbx_zUXcYaZE4AOdl_QAAAUY"]
[Sun Mar 01 13:41:04.348479 2026] [proxy_fcgi:error] [pid 38241:tid 38261] [client 45.86.202.188:62733] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:41:05.280556 2026] [:error] [pid 38241:tid 38260] [client 45.86.202.188:62733] [client 45.86.202.188] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/smilies/admin.php"] [unique_id "aaPRcfKRPk6YnJBxw_z3mAAAANA"]
[Sun Mar 01 13:41:06.411800 2026] [:error] [pid 44644:tid 44668] [client 45.86.202.164:37967] [client 45.86.202.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/IXR/about.php"] [unique_id "aaPRcp3RJaXMcw3y9V9DegAAABU"]
[Sun Mar 01 13:41:07.004726 2026] [proxy_fcgi:error] [pid 38241:tid 38261] [client 45.86.202.177:33081] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:41:07.655155 2026] [proxy_fcgi:error] [pid 38241:tid 38261] [client 45.86.202.177:33081] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:41:08.288851 2026] [:error] [pid 38241:tid 38248] [client 45.86.202.177:33081] [client 45.86.202.177] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/class-wp-customize-manager-interpreter.php"] [unique_id "aaPRdPKRPk6YnJBxw_z3rgAAAMQ"]
[Sun Mar 01 13:41:08.846711 2026] [:error] [pid 42619:tid 42626] [client 45.86.202.191:33379] [client 45.86.202.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/bypass.php"] [unique_id "aaPRdB_zUXcYaZE4AOdmFAAAAUU"]
[Sun Mar 01 13:41:09.717748 2026] [:error] [pid 38034:tid 38044] [client 45.86.202.160:62509] [client 45.86.202.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/count.php"] [unique_id "aaPRdQxtfZjwlJok9K9LfQAAAQY"]
[Sun Mar 01 13:41:10.479201 2026] [proxy_fcgi:error] [pid 38241:tid 38247] [client 45.86.202.184:65043] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:41:12.224825 2026] [:error] [pid 38241:tid 38261] [client 45.86.202.184:65043] [client 45.86.202.184] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "aaPRePKRPk6YnJBxw_z33QAAANE"]
[Sun Mar 01 13:41:13.379303 2026] [:error] [pid 38241:tid 38264] [client 45.86.202.168:50915] [client 45.86.202.168] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/usr/local/apache/modsecurity-cwaf/rules/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder||dwelectservices.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "dwelectservices.com.au"] [uri "/images/stories/themes.php"] [unique_id "aaPRefKRPk6YnJBxw_z36gAAANQ"]
[Sun Mar 01 13:41:13.648684 2026] [:error] [pid 38241:tid 38261] [client 45.86.202.168:50915] [client 45.86.202.168] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/theme-compat/footer-embed-function.php"] [unique_id "aaPRefKRPk6YnJBxw_z37gAAANE"]
[Sun Mar 01 13:41:14.789684 2026] [:error] [pid 38034:tid 38037] [client 45.86.202.205:45575] [client 45.86.202.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/l10n/class-wp-translation-file-mo-event.php"] [unique_id "aaPRegxtfZjwlJok9K9LlQAAAQE"]
[Sun Mar 01 13:41:15.363192 2026] [:error] [pid 38034:tid 38037] [client 45.86.202.184:46355] [client 45.86.202.184] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/vars-soap.php"] [unique_id "aaPRewxtfZjwlJok9K9LnAAAAQE"]
[Sun Mar 01 13:41:17.258179 2026] [proxy_fcgi:error] [pid 44644:tid 44670] [client 45.86.202.175:38637] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:41:18.576854 2026] [:error] [pid 44644:tid 44670] [client 45.86.202.175:38637] [client 45.86.202.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/id3/wp-work.php"] [unique_id "aaPRfp3RJaXMcw3y9V9D0wAAABc"]
[Sun Mar 01 13:41:19.708275 2026] [:error] [pid 38241:tid 38248] [client 45.86.202.189:54687] [client 45.86.202.189] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/class-wp-taxonomy.editor.php"] [unique_id "aaPRf_KRPk6YnJBxw_z4EAAAAMQ"]
[Sun Mar 01 13:41:20.629526 2026] [:error] [pid 38034:tid 38055] [client 45.86.202.161:49263] [client 45.86.202.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/wp-conflg.php"] [unique_id "aaPRgAxtfZjwlJok9K9LuAAAARE"]
[Sun Mar 01 13:41:21.193876 2026] [proxy_fcgi:error] [pid 38034:tid 38044] [client 45.86.202.203:27913] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:41:22.632984 2026] [:error] [pid 38034:tid 38038] [client 45.86.202.203:27913] [client 45.86.202.203] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/interactivity-api/interactivity-api-xml.php"] [unique_id "aaPRggxtfZjwlJok9K9LzQAAAQI"]
[Sun Mar 01 13:41:23.482129 2026] [:error] [pid 38034:tid 38055] [client 45.86.202.191:53227] [client 45.86.202.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/colour.php"] [unique_id "aaPRgwxtfZjwlJok9K9L2QAAARE"]
[Sun Mar 01 13:41:24.077017 2026] [proxy_fcgi:error] [pid 38034:tid 38037] [client 45.86.202.182:43295] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:41:24.352537 2026] [:error] [pid 38034:tid 38043] [client 45.86.202.182:43295] [client 45.86.202.182] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/customize/class-wp-customize-background-position-control-variable.php"] [unique_id "aaPRhAxtfZjwlJok9K9L3wAAAQU"]
[Sun Mar 01 13:41:25.015292 2026] [:error] [pid 42619:tid 42625] [client 45.86.202.169:38947] [client 45.86.202.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/include.php"] [unique_id "aaPRhR_zUXcYaZE4AOdmKAAAAUQ"]
[Sun Mar 01 13:41:26.279055 2026] [:error] [pid 38241:tid 38248] [client 45.86.202.180:27901] [client 45.86.202.180] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/imgareaselect/wp-login.php"] [unique_id "aaPRhvKRPk6YnJBxw_z4JQAAAMQ"]
[Sun Mar 01 13:41:27.767011 2026] [proxy_fcgi:error] [pid 38034:tid 38054] [client 45.86.202.225:49827] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:41:28.080846 2026] [:error] [pid 38034:tid 38038] [client 45.86.202.225:49827] [client 45.86.202.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/l10n/class-wp-translations-interface.php"] [unique_id "aaPRiAxtfZjwlJok9K9MTAAAAQI"]
[Sun Mar 01 13:41:28.684606 2026] [:error] [pid 44644:tid 44666] [client 45.86.202.202:55527] [client 45.86.202.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/about5.php"] [unique_id "aaPRiJ3RJaXMcw3y9V9EAAAAABM"]
[Sun Mar 01 13:41:30.679285 2026] [:error] [pid 44644:tid 44666] [client 45.86.202.191:54915] [client 45.86.202.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/ID3/db.php"] [unique_id "aaPRip3RJaXMcw3y9V9EHQAAABM"]
[Sun Mar 01 13:41:31.783521 2026] [:error] [pid 44644:tid 44660] [client 45.86.202.157:58487] [client 45.86.202.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/dist/bypass.php"] [unique_id "aaPRi53RJaXMcw3y9V9EJAAAAA0"]
[Sun Mar 01 13:41:32.355805 2026] [proxy_fcgi:error] [pid 44644:tid 44666] [client 45.86.202.161:36611] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:41:33.315880 2026] [:error] [pid 44644:tid 44663] [client 45.86.202.161:36611] [client 45.86.202.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/sitemaps/wp-conflg.php"] [unique_id "aaPRjZ3RJaXMcw3y9V9EMgAAABA"]
[Sun Mar 01 13:41:33.855676 2026] [:error] [pid 41342:tid 41361] [client 45.86.202.174:30643] [client 45.86.202.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.php"] [unique_id "aaPRjY4iJ6RAS5CatDk87AAAAhA"]
[Sun Mar 01 13:41:34.734920 2026] [:error] [pid 38034:tid 38044] [client 45.86.202.194:47255] [client 45.86.202.194] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/login.php"] [unique_id "aaPRjgxtfZjwlJok9K9MgAAAAQY"]
[Sun Mar 01 13:41:35.278589 2026] [proxy_fcgi:error] [pid 38241:tid 38261] [client 45.86.202.157:28917] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:41:35.917994 2026] [:error] [pid 38241:tid 38267] [client 45.86.202.157:28917] [client 45.86.202.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/sitemaps/chosen.php"] [unique_id "aaPRj_KRPk6YnJBxw_z4UAAAANc"]
[Sun Mar 01 13:41:36.659928 2026] [proxy_fcgi:error] [pid 44644:tid 44668] [client 45.86.202.193:33963] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:41:37.316540 2026] [:error] [pid 44644:tid 44668] [client 45.86.202.193:33963] [client 45.86.202.193] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/Cache/index.php"] [unique_id "aaPRkZ3RJaXMcw3y9V9EQwAAABU"]
[Sun Mar 01 13:41:38.013957 2026] [:error] [pid 42619:tid 42638] [client 45.86.202.224:58655] [client 45.86.202.224] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/dist/about.php"] [unique_id "aaPRkh_zUXcYaZE4AOdmNQAAAVE"]
[Sun Mar 01 13:41:38.957274 2026] [:error] [pid 38034:tid 38038] [client 45.86.202.200:52343] [client 45.86.202.200] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aaPRkgxtfZjwlJok9K9MmQAAAQI"]
[Sun Mar 01 13:41:39.501351 2026] [:error] [pid 44644:tid 44668] [client 45.86.202.175:23515] [client 45.86.202.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/simi.php"] [unique_id "aaPRk53RJaXMcw3y9V9EUAAAABU"]
[Sun Mar 01 13:41:41.169845 2026] [:error] [pid 38034:tid 38053] [client 45.86.202.159:24071] [client 45.86.202.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Requests/Text/index.php"] [unique_id "aaPRlQxtfZjwlJok9K9MpQAAAQ8"]
[Sun Mar 01 13:41:42.051133 2026] [:error] [pid 44644:tid 44663] [client 45.86.202.171:23299] [client 45.86.202.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/sitemaps/abcd.php"] [unique_id "aaPRlp3RJaXMcw3y9V9EZgAAABA"]
[Sun Mar 01 13:41:42.611528 2026] [:error] [pid 42619:tid 42625] [client 45.86.202.198:44419] [client 45.86.202.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/ID3/rk2.php"] [unique_id "aaPRlh_zUXcYaZE4AOdmOwAAAUQ"]
[Sun Mar 01 13:41:43.204554 2026] [:error] [pid 38034:tid 38044] [client 45.86.202.173:40959] [client 45.86.202.173] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/widgets/class-wp-widget-search-interpreter.php"] [unique_id "aaPRlwxtfZjwlJok9K9MsQAAAQY"]
[Sun Mar 01 13:41:44.727995 2026] [:error] [pid 38241:tid 38264] [client 45.86.202.170:55101] [client 45.86.202.170] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/block-template-utils-other.php"] [unique_id "aaPRmPKRPk6YnJBxw_z4aAAAANQ"]
[Sun Mar 01 13:41:45.629961 2026] [proxy_fcgi:error] [pid 44644:tid 44663] [client 45.86.202.202:27699] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:41:45.896261 2026] [:error] [pid 44644:tid 44666] [client 45.86.202.202:27699] [client 45.86.202.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/sodium_compat/lib/widget-group.php"] [unique_id "aaPRmZ3RJaXMcw3y9V9EdgAAABM"]
[Sun Mar 01 13:41:46.778966 2026] [:error] [pid 38034:tid 38054] [client 45.86.202.174:51575] [client 45.86.202.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/jcrop/about.php"] [unique_id "aaPRmgxtfZjwlJok9K9MzQAAARA"]
[Sun Mar 01 13:41:47.609642 2026] [:error] [pid 37032:tid 37046] [client 45.86.202.156:41353] [client 45.86.202.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/customize/chosen.php"] [unique_id "aaPRm-u0U4o7eSImsVT6agAAAYw"]
[Sun Mar 01 13:41:49.349899 2026] [proxy_fcgi:error] [pid 38034:tid 38043] [client 45.86.202.169:46185] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:41:50.664889 2026] [:error] [pid 38034:tid 38061] [client 45.86.202.169:46185] [client 45.86.202.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/plugin.php"] [unique_id "aaPRngxtfZjwlJok9K9M6gAAARc"]
[Sun Mar 01 13:41:51.341596 2026] [:error] [pid 41967:tid 41983] [client 45.86.202.197:62387] [client 45.86.202.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/class-wp-scripts-query.php"] [unique_id "aaPRn4O1bqY181I02eFyAgAAAI4"]
[Sun Mar 01 13:41:54.092018 2026] [proxy_fcgi:error] [pid 38241:tid 38267] [client 45.86.202.172:48039] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:41:54.373960 2026] [:error] [pid 38241:tid 38261] [client 45.86.202.172:48039] [client 45.86.202.172] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/ID3/module.audio-license.php"] [unique_id "aaPRovKRPk6YnJBxw_z4fgAAANE"]
[Sun Mar 01 13:41:56.098883 2026] [:error] [pid 38034:tid 38055] [client 45.86.202.189:42261] [client 45.86.202.189] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/class-wp-error-module.php"] [unique_id "aaPRpAxtfZjwlJok9K9NHwAAARE"]
[Sun Mar 01 13:41:56.718540 2026] [proxy_fcgi:error] [pid 44644:tid 44658] [client 45.86.202.203:21763] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:41:57.004539 2026] [proxy_fcgi:error] [pid 44644:tid 44666] [client 45.86.202.203:21763] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:41:57.291763 2026] [:error] [pid 44644:tid 44658] [client 45.86.202.203:21763] [client 45.86.202.203] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/litespeed.php"] [unique_id "aaPRpZ3RJaXMcw3y9V9EigAAAAs"]
[Sun Mar 01 13:42:01.936469 2026] [:error] [pid 44644:tid 44670] [client 45.86.202.184:26981] [client 45.86.202.184] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/dist/alam.php"] [unique_id "aaPRqZ3RJaXMcw3y9V9ElAAAABc"]
[Sun Mar 01 13:42:02.590633 2026] [proxy_fcgi:error] [pid 42619:tid 42627] [client 45.86.202.180:53269] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:42:02.889018 2026] [:error] [pid 42619:tid 42639] [client 45.86.202.180:53269] [client 45.86.202.180] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/block-bindings/imagess.php"] [unique_id "aaPRqh_zUXcYaZE4AOdmSgAAAVI"]
[Sun Mar 01 13:42:06.398920 2026] [:error] [pid 37032:tid 37053] [client 45.86.202.204:25627] [client 45.86.202.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/default-filters-edit.php"] [unique_id "aaPRruu0U4o7eSImsVT6fgAAAZM"]
[Sun Mar 01 13:42:06.989745 2026] [proxy_fcgi:error] [pid 38034:tid 38053] [client 45.86.202.177:51255] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:42:07.823941 2026] [proxy_fcgi:error] [pid 38034:tid 38053] [client 45.86.202.177:51255] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:42:08.096971 2026] [:error] [pid 38034:tid 38043] [client 45.86.202.177:51255] [client 45.86.202.177] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Requests/Auth/index.php"] [unique_id "aaPRsAxtfZjwlJok9K9NbAAAAQU"]
[Sun Mar 01 13:42:09.818089 2026] [:error] [pid 41967:tid 41982] [client 45.86.202.196:53753] [client 45.86.202.196] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Text/Diff/Engine/theme.php"] [unique_id "aaPRsYO1bqY181I02eFyDAAAAI0"]
[Sun Mar 01 13:42:10.426010 2026] [proxy_fcgi:error] [pid 38034:tid 38054] [client 45.86.202.183:55567] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:42:10.703914 2026] [:error] [pid 38034:tid 38060] [client 45.86.202.183:55567] [client 45.86.202.183] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/ID3/shell.php"] [unique_id "aaPRsgxtfZjwlJok9K9NcgAAARY"]
[Sun Mar 01 13:42:11.312819 2026] [:error] [pid 38241:tid 38246] [client 45.86.202.173:47405] [client 45.86.202.173] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/customize/class-wp-customize-selective-refresh-library.php"] [unique_id "aaPRs_KRPk6YnJBxw_z4ngAAAMI"]
[Sun Mar 01 13:42:11.981283 2026] [proxy_fcgi:error] [pid 44644:tid 44663] [client 45.86.202.163:35807] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:42:12.574192 2026] [:error] [pid 44644:tid 44670] [client 45.86.202.163:35807] [client 45.86.202.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Requests/library/wp-login.php"] [unique_id "aaPRtJ3RJaXMcw3y9V9EwgAAABc"]
[Sun Mar 01 13:42:13.103435 2026] [:error] [pid 41967:tid 41983] [client 45.86.202.185:62425] [client 45.86.202.185] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/interactivity-api/about.php"] [unique_id "aaPRtYO1bqY181I02eFyEQAAAI4"]
[Sun Mar 01 13:42:13.783254 2026] [proxy_fcgi:error] [pid 37032:tid 37057] [client 45.86.202.200:29443] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:42:16.011886 2026] [:error] [pid 37032:tid 37057] [client 45.86.202.200:29443] [client 45.86.202.200] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/wp-2019.php"] [unique_id "aaPRuOu0U4o7eSImsVT6nwAAAZc"]
[Sun Mar 01 13:42:16.597520 2026] [:error] [pid 44644:tid 44660] [client 45.86.202.173:48595] [client 45.86.202.173] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/info.php"] [unique_id "aaPRuJ3RJaXMcw3y9V9E2gAAAA0"]
[Sun Mar 01 13:42:17.573471 2026] [:error] [pid 37032:tid 37050] [client 45.86.202.198:26075] [client 45.86.202.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/log.php"] [unique_id "aaPRueu0U4o7eSImsVT6owAAAZA"]
[Sun Mar 01 13:42:18.238420 2026] [:error] [pid 37032:tid 37048] [client 45.86.202.162:43773] [client 45.86.202.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime-num.php"] [unique_id "aaPRuuu0U4o7eSImsVT6qAAAAY4"]
[Sun Mar 01 13:42:18.842692 2026] [:error] [pid 38241:tid 38247] [client 45.86.202.166:25697] [client 45.86.202.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-entry.min-object.php"] [unique_id "aaPRuvKRPk6YnJBxw_z4tgAAAMM"]
[Sun Mar 01 13:42:19.369915 2026] [:error] [pid 37032:tid 37057] [client 45.86.202.168:32643] [client 45.86.202.168] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/aw.php"] [unique_id "aaPRu-u0U4o7eSImsVT6qgAAAZc"]
[Sun Mar 01 13:42:22.382022 2026] [:error] [pid 38034:tid 38055] [client 45.86.202.204:21571] [client 45.86.202.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/IXR/db.php"] [unique_id "aaPRvgxtfZjwlJok9K9NqQAAARE"]
[Sun Mar 01 13:42:22.969294 2026] [:error] [pid 38241:tid 38261] [client 45.86.202.178:53585] [client 45.86.202.178] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/install.php"] [unique_id "aaPRvvKRPk6YnJBxw_z4xwAAANE"]
[Sun Mar 01 13:42:23.963049 2026] [proxy_fcgi:error] [pid 38034:tid 38060] [client 45.86.202.182:24123] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:42:24.258184 2026] [:error] [pid 38034:tid 38060] [client 45.86.202.182:24123] [client 45.86.202.182] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/dist/install.php"] [unique_id "aaPRwAxtfZjwlJok9K9NtgAAARY"]
[Sun Mar 01 13:42:24.824256 2026] [:error] [pid 38034:tid 38038] [client 45.86.202.196:55115] [client 45.86.202.196] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/style-engine/dedi1.php"] [unique_id "aaPRwAxtfZjwlJok9K9NuQAAAQI"]
[Sun Mar 01 13:42:26.072404 2026] [:error] [pid 41967:tid 41983] [client 45.86.202.159:42873] [client 45.86.202.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/template-less.php"] [unique_id "aaPRwoO1bqY181I02eFyGQAAAI4"]
[Sun Mar 01 13:42:26.647234 2026] [:error] [pid 41780:tid 41792] [client 45.86.202.185:64307] [client 45.86.202.185] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/pomo/alfa-rex.php"] [unique_id "aaPRwsONkVoocLIqzy0BcgAAA8k"]
[Sun Mar 01 13:42:29.322417 2026] [:error] [pid 44644:tid 44668] [client 45.86.202.173:21051] [client 45.86.202.173] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/min.php"] [unique_id "aaPRxZ3RJaXMcw3y9V9FFAAAABU"]
[Sun Mar 01 13:42:29.965603 2026] [:error] [pid 44644:tid 44666] [client 45.86.202.162:31885] [client 45.86.202.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/wp-conflg.php"] [unique_id "aaPRxZ3RJaXMcw3y9V9FFwAAABM"]
[Sun Mar 01 13:42:31.259924 2026] [:error] [pid 41780:tid 41803] [client 45.86.202.158:64645] [client 45.86.202.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/file.php"] [unique_id "aaPRx8ONkVoocLIqzy0BdwAAA9Q"]
[Sun Mar 01 13:42:32.101585 2026] [:error] [pid 38034:tid 38061] [client 45.86.202.183:32205] [client 45.86.202.183] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/block-patterns/about.php"] [unique_id "aaPRyAxtfZjwlJok9K9N0wAAARc"]
[Sun Mar 01 13:42:33.028570 2026] [:error] [pid 44644:tid 44660] [client 45.86.202.176:52221] [client 45.86.202.176] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/load.php"] [unique_id "aaPRyZ3RJaXMcw3y9V9FIgAAAA0"]
[Sun Mar 01 13:42:33.548837 2026] [:error] [pid 38241:tid 38246] [client 45.86.202.197:35809] [client 45.86.202.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/ID3/chosen.php"] [unique_id "aaPRyfKRPk6YnJBxw_z5BwAAAMI"]
[Sun Mar 01 13:42:34.141777 2026] [:error] [pid 42619:tid 42626] [client 45.86.202.177:47865] [client 45.86.202.177] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/class-wp-theme-float.php"] [unique_id "aaPRyh_zUXcYaZE4AOdmcgAAAUU"]
[Sun Mar 01 13:42:35.558907 2026] [:error] [pid 42619:tid 42625] [client 45.86.202.197:56113] [client 45.86.202.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/widgets/wp-style.php"] [unique_id "aaPRyx_zUXcYaZE4AOdmegAAAUQ"]
[Sun Mar 01 13:42:36.130592 2026] [proxy_fcgi:error] [pid 37032:tid 37050] [client 45.86.202.190:53029] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:42:36.443336 2026] [:error] [pid 37032:tid 37057] [client 45.86.202.190:53029] [client 45.86.202.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/widgets/autoload_classmap.php"] [unique_id "aaPRzOu0U4o7eSImsVT6xgAAAZc"]
[Sun Mar 01 13:42:37.971506 2026] [proxy_fcgi:error] [pid 44644:tid 44666] [client 45.86.202.157:61131] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:42:38.310277 2026] [:error] [pid 44644:tid 44666] [client 45.86.202.157:61131] [client 45.86.202.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/block-bindings/admin.php"] [unique_id "aaPRzp3RJaXMcw3y9V9FQQAAABM"]
[Sun Mar 01 13:42:38.841018 2026] [:error] [pid 38034:tid 38044] [client 45.86.202.165:55005] [client 45.86.202.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/PHPMailer/autoload_classmap.php"] [unique_id "aaPRzgxtfZjwlJok9K9N9QAAAQY"]
[Sun Mar 01 13:42:39.783754 2026] [:error] [pid 38241:tid 38258] [client 45.86.202.192:34441] [client 45.86.202.192] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/theme-compat/db.php"] [unique_id "aaPRz_KRPk6YnJBxw_z5FwAAAM4"]
[Sun Mar 01 13:42:40.642023 2026] [proxy_fcgi:error] [pid 38034:tid 38055] [client 45.86.202.187:32323] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:42:40.950461 2026] [proxy_fcgi:error] [pid 38034:tid 38061] [client 45.86.202.187:32323] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:42:42.235190 2026] [proxy_fcgi:error] [pid 38034:tid 38055] [client 45.86.202.187:32323] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:42:44.327219 2026] [:error] [pid 38034:tid 38054] [client 45.86.202.187:32323] [client 45.86.202.187] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/system.php"] [unique_id "aaPR1AxtfZjwlJok9K9OFAAAARA"]
[Sun Mar 01 13:42:45.325784 2026] [:error] [pid 38241:tid 38245] [client 45.86.202.165:31667] [client 45.86.202.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/block-bindings/about.php"] [unique_id "aaPR1fKRPk6YnJBxw_z5MQAAAME"]
[Sun Mar 01 13:42:46.529949 2026] [:error] [pid 44644:tid 44658] [client 45.86.202.175:49611] [client 45.86.202.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/customize/class-wp-customize-upload-control-cookie.php"] [unique_id "aaPR1p3RJaXMcw3y9V9FcgAAAAs"]
[Sun Mar 01 13:42:47.116875 2026] [:error] [pid 38034:tid 38044] [client 45.86.202.165:26969] [client 45.86.202.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/ID3/simi.php"] [unique_id "aaPR1wxtfZjwlJok9K9OJQAAAQY"]
[Sun Mar 01 13:42:47.693473 2026] [:error] [pid 44644:tid 44651] [client 45.86.202.163:58613] [client 45.86.202.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/class-wp-taxonomy-sample.php"] [unique_id "aaPR153RJaXMcw3y9V9FeAAAAAQ"]
[Sun Mar 01 13:43:34.960144 2026] [autoindex:error] [pid 38034:tid 38037] [client 45.86.202.178:47723] AH01276: Cannot serve directory /home/dwelects/public_html/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 14:29:32.640079 2026] [:error] [pid 42619:tid 42635] [client 62.60.131.218:58875] [client 62.60.131.218] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/"] [unique_id "aaPczB_zUXcYaZE4AOd2ygAAAU4"]
[Sun Mar 01 18:00:26.102318 2026] [proxy_fcgi:error] [pid 44644:tid 44655] [client 20.220.232.101:10226] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 18:00:26.318832 2026] [proxy_fcgi:error] [pid 44644:tid 44663] [client 20.220.232.101:10226] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 18:00:26.737111 2026] [proxy_fcgi:error] [pid 44644:tid 44648] [client 20.220.232.101:10226] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 18:00:27.548910 2026] [:error] [pid 44644:tid 44654] [client 20.220.232.101:10226] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class20.php"] [unique_id "aaQOO53RJaXMcw3y9V_ImwAAAAc"]
[Sun Mar 01 18:00:28.041316 2026] [:error] [pid 40750:tid 40775] [client 20.220.232.101:10208] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class20.php"] [unique_id "aaQOPAfBuk03yQKDyqtS0QAAAdY"]
[Sun Mar 01 18:00:28.780914 2026] [:error] [pid 38241:tid 38250] [client 20.220.232.101:10205] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class20.php"] [unique_id "aaQOPPKRPk6YnJBxw_yrLQAAAMY"]
[Sun Mar 01 18:00:29.231924 2026] [:error] [pid 40750:tid 40763] [client 20.220.232.101:10179] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class20.php"] [unique_id "aaQOPQfBuk03yQKDyqtS1gAAAco"]
[Sun Mar 01 18:00:30.083559 2026] [:error] [pid 33822:tid 33833] [client 20.220.232.101:10217] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin.php"] [unique_id "aaQOPm6W3ygu1YVssubr5wAAAok"]
[Sun Mar 01 18:00:30.665923 2026] [:error] [pid 44644:tid 44669] [client 20.220.232.101:10203] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin.php"] [unique_id "aaQOPp3RJaXMcw3y9V_InAAAABY"]
[Sun Mar 01 18:00:31.434003 2026] [:error] [pid 40750:tid 40761] [client 20.220.232.101:10230] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin.php"] [unique_id "aaQOPwfBuk03yQKDyqtS2gAAAcg"]
[Sun Mar 01 18:00:32.001003 2026] [:error] [pid 37032:tid 37050] [client 20.220.232.101:10213] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin.php"] [unique_id "aaQOQOu0U4o7eSImsVRk3AAAAZA"]
[Sun Mar 01 18:00:32.678466 2026] [:error] [pid 33822:tid 33842] [client 20.220.232.101:10229] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/randkeyword.php"] [unique_id "aaQOQG6W3ygu1YVssubr7gAAApI"]
[Sun Mar 01 18:00:33.557022 2026] [:error] [pid 38241:tid 38257] [client 20.220.232.101:10125] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/randkeyword.php"] [unique_id "aaQOQfKRPk6YnJBxw_yrOgAAAM0"]
[Sun Mar 01 18:00:34.142675 2026] [:error] [pid 38241:tid 38261] [client 20.220.232.101:10239] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/randkeyword.php"] [unique_id "aaQOQvKRPk6YnJBxw_yrPQAAANE"]
[Sun Mar 01 18:00:34.624491 2026] [:error] [pid 7165:tid 7171] [client 20.220.232.101:10231] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/randkeyword.php"] [unique_id "aaQOQhRjCrA8qWBjgG-ZoQAAAkQ"]
[Sun Mar 01 18:00:35.106801 2026] [:error] [pid 7165:tid 7180] [client 20.220.232.101:10214] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fwe.php"] [unique_id "aaQOQxRjCrA8qWBjgG-ZpQAAAk0"]
[Sun Mar 01 18:00:35.960307 2026] [:error] [pid 7165:tid 7184] [client 20.220.232.101:10235] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fwe.php"] [unique_id "aaQOQxRjCrA8qWBjgG-ZqAAAAlE"]
[Sun Mar 01 18:00:36.588583 2026] [:error] [pid 40750:tid 40770] [client 20.220.232.101:10218] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fwe.php"] [unique_id "aaQORAfBuk03yQKDyqtS7AAAAdE"]
[Sun Mar 01 18:00:37.585316 2026] [:error] [pid 38034:tid 38052] [client 20.220.232.101:10216] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fwe.php"] [unique_id "aaQORQxtfZjwlJok9K_usgAAAQ4"]
[Sun Mar 01 18:00:38.055130 2026] [:error] [pid 7165:tid 7185] [client 20.220.232.101:10126] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/images/m.php"] [unique_id "aaQORhRjCrA8qWBjgG-ZsgAAAlI"]
[Sun Mar 01 18:00:38.550746 2026] [:error] [pid 44644:tid 44665] [client 20.220.232.101:10238] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/images/m.php"] [unique_id "aaQORp3RJaXMcw3y9V_IngAAABI"]
[Sun Mar 01 18:00:39.220154 2026] [:error] [pid 38241:tid 38252] [client 20.220.232.101:10112] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/images/m.php"] [unique_id "aaQOR_KRPk6YnJBxw_yrQwAAAMg"]
[Sun Mar 01 18:00:40.105486 2026] [:error] [pid 7133:tid 7153] [client 20.220.232.101:10163] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/images/m.php"] [unique_id "aaQOSPCtubh8pR64qB_5UwAAAFI"]
[Sun Mar 01 18:00:40.742372 2026] [:error] [pid 7133:tid 7142] [client 20.220.232.101:10146] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/g.php"] [unique_id "aaQOSPCtubh8pR64qB_5WQAAAEc"]
[Sun Mar 01 18:00:41.597224 2026] [:error] [pid 7133:tid 7143] [client 20.220.232.101:10128] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/g.php"] [unique_id "aaQOSfCtubh8pR64qB_5XwAAAEg"]
[Sun Mar 01 18:00:43.063616 2026] [:error] [pid 38241:tid 38246] [client 20.220.232.101:10122] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/g.php"] [unique_id "aaQOS_KRPk6YnJBxw_yrVwAAAMI"]
[Sun Mar 01 18:00:44.144149 2026] [:error] [pid 40750:tid 40761] [client 20.220.232.101:10177] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/g.php"] [unique_id "aaQOTAfBuk03yQKDyqtS_gAAAcg"]
[Sun Mar 01 18:00:44.956636 2026] [:error] [pid 7165:tid 7173] [client 20.220.232.101:10185] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tx1.php"] [unique_id "aaQOTBRjCrA8qWBjgG-ZtgAAAkY"]
[Sun Mar 01 18:00:46.348747 2026] [:error] [pid 40750:tid 40772] [client 20.220.232.101:10123] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tx1.php"] [unique_id "aaQOTgfBuk03yQKDyqtTBAAAAdM"]
[Sun Mar 01 18:00:47.987028 2026] [:error] [pid 40750:tid 40775] [client 20.220.232.101:10227] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tx1.php"] [unique_id "aaQOTwfBuk03yQKDyqtTDgAAAdY"]
[Sun Mar 01 18:00:50.112807 2026] [:error] [pid 33822:tid 33842] [client 20.220.232.101:10061] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tx1.php"] [unique_id "aaQOUm6W3ygu1YVssubr_QAAApI"]
[Sun Mar 01 18:00:51.506106 2026] [:error] [pid 40750:tid 40768] [client 20.220.232.101:10053] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xv.php"] [unique_id "aaQOUwfBuk03yQKDyqtTHQAAAc8"]
[Sun Mar 01 18:00:52.505758 2026] [:error] [pid 40750:tid 40760] [client 20.220.232.101:10187] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xv.php"] [unique_id "aaQOVAfBuk03yQKDyqtTIwAAAcc"]
[Sun Mar 01 18:00:53.841136 2026] [:error] [pid 33822:tid 33848] [client 20.220.232.101:10127] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xv.php"] [unique_id "aaQOVW6W3ygu1YVssubsBQAAApg"]
[Sun Mar 01 18:00:54.827663 2026] [:error] [pid 33822:tid 33837] [client 20.220.232.101:10211] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xv.php"] [unique_id "aaQOVm6W3ygu1YVssubsCgAAAo0"]
[Sun Mar 01 18:00:55.319471 2026] [:error] [pid 40750:tid 40763] [client 20.220.232.101:10233] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x56.php"] [unique_id "aaQOVwfBuk03yQKDyqtTMQAAAco"]
[Sun Mar 01 18:00:55.986190 2026] [:error] [pid 38241:tid 38252] [client 20.220.232.101:10220] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x56.php"] [unique_id "aaQOV_KRPk6YnJBxw_yrgAAAAMg"]
[Sun Mar 01 18:00:56.596755 2026] [:error] [pid 40750:tid 40772] [client 20.220.232.101:10132] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x56.php"] [unique_id "aaQOWAfBuk03yQKDyqtTNgAAAdM"]
[Sun Mar 01 18:00:57.127376 2026] [:error] [pid 38241:tid 38246] [client 20.220.232.101:10168] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x56.php"] [unique_id "aaQOWfKRPk6YnJBxw_yrhQAAAMI"]
[Sun Mar 01 18:00:57.789992 2026] [:error] [pid 40750:tid 40772] [client 20.220.232.101:10164] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/htaccess.php"] [unique_id "aaQOWQfBuk03yQKDyqtTQQAAAdM"]
[Sun Mar 01 18:00:58.554773 2026] [:error] [pid 40750:tid 40771] [client 20.220.232.101:10181] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/htaccess.php"] [unique_id "aaQOWgfBuk03yQKDyqtTSwAAAdI"]
[Sun Mar 01 18:00:58.969654 2026] [:error] [pid 33822:tid 33826] [client 20.220.232.101:10222] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/htaccess.php"] [unique_id "aaQOWm6W3ygu1YVssubsFgAAAoI"]
[Sun Mar 01 18:00:59.587369 2026] [:error] [pid 7133:tid 7156] [client 20.220.232.101:10120] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/htaccess.php"] [unique_id "aaQOW_Ctubh8pR64qB_5bwAAAFU"]
[Sun Mar 01 18:01:00.724845 2026] [:error] [pid 38241:tid 38266] [client 20.220.232.101:10140] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/readme.php"] [unique_id "aaQOXPKRPk6YnJBxw_yrkAAAANY"]
[Sun Mar 01 18:01:02.095983 2026] [:error] [pid 38241:tid 38244] [client 20.220.232.101:10198] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/readme.php"] [unique_id "aaQOXvKRPk6YnJBxw_yrkwAAAMA"]
[Sun Mar 01 18:01:02.633058 2026] [:error] [pid 38241:tid 38268] [client 20.220.232.101:10145] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/readme.php"] [unique_id "aaQOXvKRPk6YnJBxw_yrlAAAANg"]
[Sun Mar 01 18:01:03.404509 2026] [:error] [pid 40750:tid 40771] [client 20.220.232.101:10210] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/readme.php"] [unique_id "aaQOXwfBuk03yQKDyqtTZAAAAdI"]
[Sun Mar 01 18:01:04.862789 2026] [:error] [pid 40750:tid 40768] [client 20.220.232.101:10171] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x50.php"] [unique_id "aaQOYAfBuk03yQKDyqtTbwAAAc8"]
[Sun Mar 01 18:01:05.742192 2026] [:error] [pid 40750:tid 40760] [client 20.220.232.101:10178] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x50.php"] [unique_id "aaQOYQfBuk03yQKDyqtTeQAAAcc"]
[Sun Mar 01 18:01:07.264102 2026] [:error] [pid 7165:tid 7167] [client 20.220.232.101:10116] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x50.php"] [unique_id "aaQOYxRjCrA8qWBjgG-Z0QAAAkA"]
[Sun Mar 01 18:01:08.492515 2026] [:error] [pid 38241:tid 38247] [client 20.220.232.101:10134] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x50.php"] [unique_id "aaQOZPKRPk6YnJBxw_yrnQAAAMM"]
[Sun Mar 01 18:01:10.178979 2026] [:error] [pid 7165:tid 7169] [client 20.220.232.101:10056] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fv.php"] [unique_id "aaQOZhRjCrA8qWBjgG-Z2QAAAkI"]
[Sun Mar 01 18:01:10.856044 2026] [:error] [pid 7165:tid 7173] [client 20.220.232.101:10052] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fv.php"] [unique_id "aaQOZhRjCrA8qWBjgG-Z3wAAAkY"]
[Sun Mar 01 18:01:12.054515 2026] [:error] [pid 40750:tid 40768] [client 20.220.232.101:10193] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fv.php"] [unique_id "aaQOaAfBuk03yQKDyqtTsQAAAc8"]
[Sun Mar 01 18:01:13.462436 2026] [:error] [pid 38034:tid 38059] [client 20.220.232.101:10191] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fv.php"] [unique_id "aaQOaQxtfZjwlJok9K_uxQAAARU"]
[Sun Mar 01 18:01:14.909646 2026] [:error] [pid 40750:tid 40753] [client 20.220.232.101:10133] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file.php"] [unique_id "aaQOagfBuk03yQKDyqtT0AAAAcA"]
[Sun Mar 01 18:01:15.790606 2026] [:error] [pid 7133:tid 7150] [client 20.220.232.101:10150] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file.php"] [unique_id "aaQOa_Ctubh8pR64qB_5hwAAAE8"]
[Sun Mar 01 18:01:16.406519 2026] [:error] [pid 33822:tid 33840] [client 20.220.232.101:10219] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file.php"] [unique_id "aaQObG6W3ygu1YVssubsIQAAApA"]
[Sun Mar 01 18:01:17.758869 2026] [:error] [pid 7133:tid 7146] [client 20.220.232.101:10117] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file.php"] [unique_id "aaQObfCtubh8pR64qB_5kAAAAEs"]
[Sun Mar 01 18:01:19.602334 2026] [:error] [pid 38034:tid 38056] [client 20.220.232.101:10209] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lsd.php"] [unique_id "aaQObwxtfZjwlJok9K_uyQAAARI"]
[Sun Mar 01 18:01:20.837735 2026] [:error] [pid 33822:tid 33827] [client 20.220.232.101:10201] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lsd.php"] [unique_id "aaQOcG6W3ygu1YVssubsKAAAAoM"]
[Sun Mar 01 18:01:21.453272 2026] [:error] [pid 33822:tid 33835] [client 20.220.232.101:10199] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lsd.php"] [unique_id "aaQOcW6W3ygu1YVssubsLgAAAos"]
[Sun Mar 01 18:01:22.437590 2026] [:error] [pid 38241:tid 38252] [client 20.220.232.101:10139] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lsd.php"] [unique_id "aaQOcvKRPk6YnJBxw_yrvAAAAMg"]
[Sun Mar 01 18:01:23.256427 2026] [:error] [pid 41780:tid 41787] [client 20.220.232.101:10067] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/as.php"] [unique_id "aaQOc8ONkVoocLIqzy0diwAAA8Q"]
[Sun Mar 01 18:01:23.792597 2026] [:error] [pid 40750:tid 40768] [client 20.220.232.101:10189] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/as.php"] [unique_id "aaQOcwfBuk03yQKDyqtUCAAAAc8"]
[Sun Mar 01 18:01:24.572820 2026] [:error] [pid 7165:tid 7174] [client 20.220.232.101:10166] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/as.php"] [unique_id "aaQOdBRjCrA8qWBjgG-Z9wAAAkc"]
[Sun Mar 01 18:01:25.088381 2026] [:error] [pid 7165:tid 7188] [client 20.220.232.101:10072] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/as.php"] [unique_id "aaQOdRRjCrA8qWBjgG-Z_gAAAlU"]
[Sun Mar 01 18:01:25.955300 2026] [:error] [pid 40750:tid 40762] [client 20.220.232.101:10224] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wsd.php"] [unique_id "aaQOdQfBuk03yQKDyqtULgAAAck"]
[Sun Mar 01 18:01:26.576803 2026] [proxy_fcgi:error] [pid 40750:tid 40754] [client 20.220.232.101:10113] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 18:01:26.786171 2026] [proxy_fcgi:error] [pid 40750:tid 40773] [client 20.220.232.101:10113] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 18:01:27.411786 2026] [proxy_fcgi:error] [pid 40750:tid 40754] [client 20.220.232.101:10113] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 18:01:27.620399 2026] [proxy_fcgi:error] [pid 40750:tid 40777] [client 20.220.232.101:10113] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 18:01:27.844619 2026] [proxy_fcgi:error] [pid 40750:tid 40766] [client 20.220.232.101:10113] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 18:01:28.058526 2026] [proxy_fcgi:error] [pid 40750:tid 40768] [client 20.220.232.101:10113] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 18:01:28.281851 2026] [proxy_fcgi:error] [pid 40750:tid 40765] [client 20.220.232.101:10113] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 18:01:28.922867 2026] [proxy_fcgi:error] [pid 40750:tid 40762] [client 20.220.232.101:10113] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 18:01:29.132429 2026] [proxy_fcgi:error] [pid 40750:tid 40773] [client 20.220.232.101:10113] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 18:01:29.478523 2026] [:error] [pid 40750:tid 40760] [client 20.220.232.101:10113] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lv.php"] [unique_id "aaQOeQfBuk03yQKDyqtUZwAAAcc"]
[Sun Mar 01 18:01:30.188599 2026] [:error] [pid 7165:tid 7189] [client 20.220.232.101:10051] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lv.php"] [unique_id "aaQOehRjCrA8qWBjgG-aKAAAAlY"]
[Sun Mar 01 18:01:30.889573 2026] [:error] [pid 37032:tid 37054] [client 20.220.232.101:10196] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lv.php"] [unique_id "aaQOeuu0U4o7eSImsVRk8AAAAZQ"]
[Sun Mar 01 18:01:31.986501 2026] [:error] [pid 44644:tid 44668] [client 20.220.232.101:10069] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lv.php"] [unique_id "aaQOe53RJaXMcw3y9V_IswAAABU"]
[Sun Mar 01 18:01:32.870806 2026] [:error] [pid 7165:tid 7180] [client 20.220.232.101:10138] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/simple.php"] [unique_id "aaQOfBRjCrA8qWBjgG-aOQAAAk0"]
[Sun Mar 01 18:01:33.730204 2026] [:error] [pid 7165:tid 7187] [client 20.220.232.101:10236] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/simple.php"] [unique_id "aaQOfRRjCrA8qWBjgG-aRAAAAlQ"]
[Sun Mar 01 18:01:35.083942 2026] [:error] [pid 7165:tid 7173] [client 20.220.232.101:10129] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/simple.php"] [unique_id "aaQOfxRjCrA8qWBjgG-aVgAAAkY"]
[Sun Mar 01 18:01:35.531604 2026] [:error] [pid 38034:tid 38055] [client 20.220.232.101:10206] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/simple.php"] [unique_id "aaQOfwxtfZjwlJok9K_u3AAAARE"]
[Sun Mar 01 18:01:36.497691 2026] [:error] [pid 33822:tid 33824] [client 20.220.232.101:10221] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/css.php"] [unique_id "aaQOgG6W3ygu1YVssubsWwAAAoA"]
[Sun Mar 01 18:01:37.344323 2026] [:error] [pid 33822:tid 33828] [client 20.220.232.101:10228] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/css.php"] [unique_id "aaQOgW6W3ygu1YVssubsYgAAAoQ"]
[Sun Mar 01 18:01:39.386442 2026] [:error] [pid 7165:tid 7183] [client 20.220.232.101:10192] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/css.php"] [unique_id "aaQOgxRjCrA8qWBjgG-acQAAAlA"]
[Sun Mar 01 18:01:41.711209 2026] [:error] [pid 7133:tid 7157] [client 20.220.232.101:10141] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/css.php"] [unique_id "aaQOhfCtubh8pR64qB_5uQAAAFY"]
[Sun Mar 01 18:01:44.188602 2026] [:error] [pid 40750:tid 40774] [client 20.220.232.101:10058] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cong.php"] [unique_id "aaQOiAfBuk03yQKDyqtUlAAAAdU"]
[Sun Mar 01 18:01:44.615710 2026] [:error] [pid 40750:tid 40765] [client 20.220.232.101:10144] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cong.php"] [unique_id "aaQOiAfBuk03yQKDyqtUmAAAAcw"]
[Sun Mar 01 18:01:45.708192 2026] [:error] [pid 7165:tid 7180] [client 20.220.232.101:10149] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cong.php"] [unique_id "aaQOiRRjCrA8qWBjgG-apAAAAk0"]
[Sun Mar 01 18:01:46.276668 2026] [:error] [pid 7165:tid 7176] [client 20.220.232.101:10114] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cong.php"] [unique_id "aaQOihRjCrA8qWBjgG-arQAAAkk"]
[Sun Mar 01 18:01:47.333245 2026] [:error] [pid 7165:tid 7169] [client 20.220.232.101:10070] [client 20.220.232.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aaQOixRjCrA8qWBjgG-atQAAAkI"]
[Sun Mar 01 18:01:48.755588 2026] [:error] [pid 33822:tid 33843] [client 20.220.232.101:10197] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cong.php"] [unique_id "aaQOjG6W3ygu1YVssubsbgAAApM"]
[Sun Mar 01 18:01:49.815233 2026] [:error] [pid 40750:tid 40777] [client 20.220.232.101:10232] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cong.php"] [unique_id "aaQOjQfBuk03yQKDyqtUqQAAAdg"]
[Sun Mar 01 18:01:50.689607 2026] [:error] [pid 7133:tid 7146] [client 20.220.232.101:10118] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cong.php"] [unique_id "aaQOjvCtubh8pR64qB_5xwAAAEs"]
[Sun Mar 01 18:01:51.553536 2026] [:error] [pid 38241:tid 38255] [client 20.220.232.101:10137] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cong.php"] [unique_id "aaQOj_KRPk6YnJBxw_yr0gAAAMs"]
[Sun Mar 01 18:01:52.542246 2026] [:error] [pid 38241:tid 38251] [client 20.220.232.101:10156] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/w.php"] [unique_id "aaQOkPKRPk6YnJBxw_yr1AAAAMc"]
[Sun Mar 01 18:01:53.081055 2026] [:error] [pid 41780:tid 41795] [client 20.220.232.101:10202] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/w.php"] [unique_id "aaQOkcONkVoocLIqzy0dkAAAA8w"]
[Sun Mar 01 18:01:53.940019 2026] [:error] [pid 44644:tid 44663] [client 20.220.232.101:10237] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/w.php"] [unique_id "aaQOkZ3RJaXMcw3y9V_ItgAAABA"]
[Sun Mar 01 18:01:54.872980 2026] [:error] [pid 38034:tid 38040] [client 20.220.232.101:10173] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/w.php"] [unique_id "aaQOkgxtfZjwlJok9K_u4QAAAQQ"]
[Sun Mar 01 18:01:55.975464 2026] [:error] [pid 40750:tid 40776] [client 20.220.232.101:10194] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/404.php"] [unique_id "aaQOkwfBuk03yQKDyqtUvQAAAdc"]
[Sun Mar 01 18:01:56.759120 2026] [:error] [pid 40750:tid 40771] [client 20.220.232.101:10188] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/404.php"] [unique_id "aaQOlAfBuk03yQKDyqtUwwAAAdI"]
[Sun Mar 01 18:01:58.052524 2026] [:error] [pid 33822:tid 33845] [client 20.220.232.101:10212] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/404.php"] [unique_id "aaQOlm6W3ygu1YVssubslgAAApU"]
[Sun Mar 01 18:01:59.102414 2026] [:error] [pid 33822:tid 33838] [client 20.220.232.101:10143] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/404.php"] [unique_id "aaQOl26W3ygu1YVssubsnQAAAo4"]
[Sun Mar 01 18:02:01.043338 2026] [:error] [pid 37032:tid 37041] [client 20.220.232.101:10176] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aaQOmeu0U4o7eSImsVRk9wAAAYc"]
[Sun Mar 01 18:02:02.157894 2026] [:error] [pid 40750:tid 40757] [client 20.220.232.101:10130] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aaQOmgfBuk03yQKDyqtU3wAAAcQ"]
[Sun Mar 01 18:02:02.762734 2026] [:error] [pid 38241:tid 38247] [client 20.220.232.101:10153] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aaQOmvKRPk6YnJBxw_yr2QAAAMM"]
[Sun Mar 01 18:02:03.342676 2026] [:error] [pid 38241:tid 38252] [client 20.220.232.101:10215] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aaQOm_KRPk6YnJBxw_yr3QAAAMg"]
[Sun Mar 01 18:02:03.835357 2026] [:error] [pid 33822:tid 33845] [client 20.220.232.101:10184] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/0x.php"] [unique_id "aaQOm26W3ygu1YVssubsrQAAApU"]
[Sun Mar 01 18:02:04.462684 2026] [:error] [pid 38241:tid 38258] [client 20.220.232.101:10092] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/0x.php"] [unique_id "aaQOnPKRPk6YnJBxw_yr4gAAAM4"]
[Sun Mar 01 18:02:05.147332 2026] [:error] [pid 33822:tid 33836] [client 20.220.232.101:10172] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/0x.php"] [unique_id "aaQOnW6W3ygu1YVssubsrgAAAow"]
[Sun Mar 01 18:02:05.855495 2026] [:error] [pid 7165:tid 7167] [client 20.220.232.101:10064] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/0x.php"] [unique_id "aaQOnRRjCrA8qWBjgG-a3AAAAkA"]
[Sun Mar 01 18:02:06.564476 2026] [:error] [pid 7165:tid 7187] [client 20.220.232.101:10200] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/css.php"] [unique_id "aaQOnhRjCrA8qWBjgG-a4AAAAlQ"]
[Sun Mar 01 18:02:07.517472 2026] [:error] [pid 40750:tid 40764] [client 20.220.232.101:10074] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/css.php"] [unique_id "aaQOnwfBuk03yQKDyqtU5wAAAcs"]
[Sun Mar 01 18:02:08.439279 2026] [:error] [pid 40750:tid 40757] [client 20.220.232.101:10223] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/css.php"] [unique_id "aaQOoAfBuk03yQKDyqtU7AAAAcQ"]
[Sun Mar 01 18:02:10.128691 2026] [:error] [pid 40750:tid 40760] [client 20.220.232.101:10068] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/css.php"] [unique_id "aaQOogfBuk03yQKDyqtU8gAAAcc"]
[Sun Mar 01 18:02:11.017982 2026] [:error] [pid 7165:tid 7188] [client 20.220.232.101:10054] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/222.php"] [unique_id "aaQOoxRjCrA8qWBjgG-a5wAAAlU"]
[Sun Mar 01 18:02:12.098509 2026] [:error] [pid 41342:tid 41357] [client 20.220.232.101:10142] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/222.php"] [unique_id "aaQOpI4iJ6RAS5CatDlTxQAAAgw"]
[Sun Mar 01 18:02:12.665960 2026] [:error] [pid 41342:tid 41360] [client 20.220.232.101:10136] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/222.php"] [unique_id "aaQOpI4iJ6RAS5CatDlTyQAAAg8"]
[Sun Mar 01 18:02:13.182213 2026] [:error] [pid 38034:tid 38053] [client 20.220.232.101:10207] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/222.php"] [unique_id "aaQOpQxtfZjwlJok9K_u5QAAAQ8"]
[Sun Mar 01 18:02:13.787152 2026] [:error] [pid 37032:tid 37040] [client 20.220.232.101:10098] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/index.php"] [unique_id "aaQOpeu0U4o7eSImsVRk_gAAAYY"]
[Sun Mar 01 18:02:14.664692 2026] [:error] [pid 40750:tid 40766] [client 20.220.232.101:10225] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/index.php"] [unique_id "aaQOpgfBuk03yQKDyqtU-wAAAc0"]
[Sun Mar 01 18:02:16.082010 2026] [:error] [pid 38034:tid 38056] [client 20.220.232.101:10066] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/index.php"] [unique_id "aaQOqAxtfZjwlJok9K_u6AAAARI"]
[Sun Mar 01 18:02:19.290450 2026] [:error] [pid 7165:tid 7182] [client 20.220.232.101:9735] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/index.php"] [unique_id "aaQOqxRjCrA8qWBjgG-a9AAAAk8"]
[Sun Mar 01 18:02:21.866246 2026] [:error] [pid 33822:tid 33826] [client 20.220.232.101:10049] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin.php"] [unique_id "aaQOrW6W3ygu1YVssubs1gAAAoI"]
[Sun Mar 01 18:02:23.253458 2026] [:error] [pid 40750:tid 40770] [client 20.220.232.101:10081] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin.php"] [unique_id "aaQOrwfBuk03yQKDyqtVDAAAAdE"]
[Sun Mar 01 18:02:24.746769 2026] [:error] [pid 7165:tid 7186] [client 20.220.232.101:10119] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin.php"] [unique_id "aaQOsBRjCrA8qWBjgG-bBwAAAlM"]
[Sun Mar 01 18:02:27.030215 2026] [:error] [pid 7165:tid 7182] [client 20.220.232.101:10065] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin.php"] [unique_id "aaQOsxRjCrA8qWBjgG-bEgAAAk8"]
[Sun Mar 01 18:02:28.045504 2026] [:error] [pid 33822:tid 33828] [client 20.220.232.101:10082] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aaQOtG6W3ygu1YVssubs3QAAAoQ"]
[Sun Mar 01 18:02:28.820457 2026] [:error] [pid 7165:tid 7174] [client 20.220.232.101:10101] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aaQOtBRjCrA8qWBjgG-bFgAAAkc"]
[Sun Mar 01 18:02:29.688975 2026] [proxy_fcgi:error] [pid 7165:tid 7185] [client 20.220.232.101:10151] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 18:02:29.901805 2026] [proxy_fcgi:error] [pid 7165:tid 7168] [client 20.220.232.101:10151] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 18:02:30.117890 2026] [proxy_fcgi:error] [pid 7165:tid 7177] [client 20.220.232.101:10151] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 18:02:30.335535 2026] [proxy_fcgi:error] [pid 7165:tid 7170] [client 20.220.232.101:10151] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 18:02:30.560069 2026] [proxy_fcgi:error] [pid 7165:tid 7169] [client 20.220.232.101:10151] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 18:02:30.775161 2026] [proxy_fcgi:error] [pid 7165:tid 7175] [client 20.220.232.101:10151] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 18:02:32.296913 2026] [:error] [pid 7165:tid 7171] [client 20.220.232.101:10151] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/manager.php"] [unique_id "aaQOuBRjCrA8qWBjgG-bNAAAAkQ"]
[Sun Mar 01 18:02:32.954624 2026] [:error] [pid 7165:tid 7172] [client 20.220.232.101:10083] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/manager.php"] [unique_id "aaQOuBRjCrA8qWBjgG-bOAAAAkU"]
[Sun Mar 01 18:02:33.736033 2026] [:error] [pid 38034:tid 38050] [client 20.220.232.101:9768] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/manager.php"] [unique_id "aaQOuQxtfZjwlJok9K_u_QAAAQw"]
[Sun Mar 01 18:02:34.336140 2026] [:error] [pid 38241:tid 38267] [client 20.220.232.101:10063] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/manager.php"] [unique_id "aaQOuvKRPk6YnJBxw_yr-wAAANc"]
[Sun Mar 01 18:02:34.864463 2026] [:error] [pid 7165:tid 7178] [client 20.220.232.101:10057] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/item.php"] [unique_id "aaQOuhRjCrA8qWBjgG-bPgAAAks"]
[Sun Mar 01 18:02:35.366257 2026] [:error] [pid 38241:tid 38265] [client 20.220.232.101:10169] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/item.php"] [unique_id "aaQOu_KRPk6YnJBxw_yr_wAAANU"]
[Sun Mar 01 18:02:36.004141 2026] [:error] [pid 33822:tid 33827] [client 20.220.232.101:10094] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/item.php"] [unique_id "aaQOvG6W3ygu1YVssubs4wAAAoM"]
[Sun Mar 01 18:02:36.559621 2026] [:error] [pid 40750:tid 40760] [client 20.220.232.101:10158] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/item.php"] [unique_id "aaQOvAfBuk03yQKDyqtVFAAAAcc"]
[Sun Mar 01 18:02:37.433291 2026] [:error] [pid 40750:tid 40756] [client 20.220.232.101:10055] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aaQOvQfBuk03yQKDyqtVFwAAAcM"]
[Sun Mar 01 18:02:38.306954 2026] [:error] [pid 7165:tid 7180] [client 20.220.232.101:10162] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aaQOvhRjCrA8qWBjgG-bQQAAAk0"]
[Sun Mar 01 18:02:39.224408 2026] [:error] [pid 40750:tid 40774] [client 20.220.232.101:10155] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aaQOvwfBuk03yQKDyqtVIQAAAdU"]
[Sun Mar 01 18:02:40.396510 2026] [:error] [pid 38034:tid 38036] [client 20.220.232.101:9729] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aaQOwAxtfZjwlJok9K_vAQAAAQA"]
[Sun Mar 01 18:02:41.496845 2026] [:error] [pid 7133:tid 7156] [client 20.220.232.101:10131] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/404.php"] [unique_id "aaQOwfCtubh8pR64qB_6CwAAAFU"]
[Sun Mar 01 18:02:42.722605 2026] [:error] [pid 41342:tid 41361] [client 20.220.232.101:10059] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/404.php"] [unique_id "aaQOwo4iJ6RAS5CatDlT2AAAAhA"]
[Sun Mar 01 18:02:43.329544 2026] [:error] [pid 7133:tid 7159] [client 20.220.232.101:10084] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/404.php"] [unique_id "aaQOw_Ctubh8pR64qB_6EAAAAFg"]
[Sun Mar 01 18:02:44.999551 2026] [:error] [pid 7133:tid 7136] [client 20.220.232.101:10095] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/404.php"] [unique_id "aaQOxPCtubh8pR64qB_6GQAAAEE"]
[Sun Mar 01 18:02:45.935555 2026] [:error] [pid 40750:tid 40776] [client 20.220.232.101:10107] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mail.php"] [unique_id "aaQOxQfBuk03yQKDyqtVJwAAAdc"]
[Sun Mar 01 18:02:46.893324 2026] [:error] [pid 38241:tid 38247] [client 20.220.232.101:10234] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mail.php"] [unique_id "aaQOxvKRPk6YnJBxw_ysEwAAAMM"]
[Sun Mar 01 18:02:47.405012 2026] [:error] [pid 40750:tid 40765] [client 20.220.232.101:10224] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mail.php"] [unique_id "aaQOxwfBuk03yQKDyqtVLwAAAcw"]
[Sun Mar 01 18:02:48.083527 2026] [:error] [pid 40750:tid 40760] [client 20.220.232.101:10167] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mail.php"] [unique_id "aaQOyAfBuk03yQKDyqtVNQAAAcc"]
[Sun Mar 01 18:02:48.810109 2026] [:error] [pid 40750:tid 40768] [client 20.220.232.101:10050] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aaQOyAfBuk03yQKDyqtVOQAAAc8"]
[Sun Mar 01 18:02:49.460778 2026] [:error] [pid 38241:tid 38263] [client 20.220.232.101:10180] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aaQOyfKRPk6YnJBxw_ysFgAAANM"]
[Sun Mar 01 18:02:50.541508 2026] [:error] [pid 7165:tid 7169] [client 20.220.232.101:10087] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aaQOyhRjCrA8qWBjgG-bTAAAAkI"]
[Sun Mar 01 18:02:51.721922 2026] [:error] [pid 40750:tid 40774] [client 20.220.232.101:9746] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aaQOywfBuk03yQKDyqtVRQAAAdU"]
[Sun Mar 01 18:02:52.849110 2026] [:error] [pid 38241:tid 38253] [client 20.220.232.101:10183] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sx.php"] [unique_id "aaQOzPKRPk6YnJBxw_ysIQAAAMk"]
[Sun Mar 01 18:02:53.534033 2026] [:error] [pid 33822:tid 33839] [client 20.220.232.101:10066] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sx.php"] [unique_id "aaQOzW6W3ygu1YVssubtAQAAAo8"]
[Sun Mar 01 18:02:54.839250 2026] [:error] [pid 7165:tid 7171] [client 20.220.232.101:10086] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sx.php"] [unique_id "aaQOzhRjCrA8qWBjgG-bUgAAAkQ"]
[Sun Mar 01 18:02:56.525882 2026] [:error] [pid 7133:tid 7136] [client 20.220.232.101:10080] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sx.php"] [unique_id "aaQO0PCtubh8pR64qB_6IwAAAEE"]
[Sun Mar 01 18:02:57.493789 2026] [:error] [pid 41780:tid 41806] [client 20.220.232.101:10073] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aaQO0cONkVoocLIqzy0dowAAA9c"]
[Sun Mar 01 18:02:58.066874 2026] [:error] [pid 37032:tid 37053] [client 20.220.232.101:10148] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aaQO0uu0U4o7eSImsVRlGgAAAZM"]
[Sun Mar 01 18:02:58.970665 2026] [:error] [pid 38241:tid 38249] [client 20.220.232.101:10160] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aaQO0vKRPk6YnJBxw_ysLQAAAMU"]
[Sun Mar 01 18:02:59.471358 2026] [:error] [pid 7133:tid 7137] [client 20.220.232.101:10154] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aaQO0_Ctubh8pR64qB_6KQAAAEI"]
[Sun Mar 01 18:03:00.026846 2026] [:error] [pid 38241:tid 38246] [client 20.220.232.101:10100] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/alfa.php"] [unique_id "aaQO1PKRPk6YnJBxw_ysMwAAAMI"]
[Sun Mar 01 18:03:00.793565 2026] [:error] [pid 38241:tid 38263] [client 20.220.232.101:10186] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/alfa.php"] [unique_id "aaQO1PKRPk6YnJBxw_ysNgAAANM"]
[Sun Mar 01 18:03:01.806721 2026] [:error] [pid 38241:tid 38262] [client 20.220.232.101:9765] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/alfa.php"] [unique_id "aaQO1fKRPk6YnJBxw_ysOQAAANI"]
[Sun Mar 01 18:03:03.062028 2026] [:error] [pid 38241:tid 38255] [client 20.220.232.101:9770] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/alfa.php"] [unique_id "aaQO1_KRPk6YnJBxw_ysPQAAAMs"]
[Sun Mar 01 18:03:04.015296 2026] [:error] [pid 7165:tid 7183] [client 20.220.232.101:10152] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/1.php"] [unique_id "aaQO2BRjCrA8qWBjgG-bdgAAAlA"]
[Sun Mar 01 18:03:05.002775 2026] [:error] [pid 7165:tid 7183] [client 20.220.232.101:10157] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/1.php"] [unique_id "aaQO2RRjCrA8qWBjgG-bggAAAlA"]
[Sun Mar 01 18:03:05.857037 2026] [:error] [pid 7165:tid 7189] [client 20.220.232.101:9740] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/1.php"] [unique_id "aaQO2RRjCrA8qWBjgG-biQAAAlY"]
[Sun Mar 01 18:03:07.037983 2026] [:error] [pid 38034:tid 38055] [client 20.220.232.101:9771] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/1.php"] [unique_id "aaQO2wxtfZjwlJok9K_vFAAAARE"]
[Sun Mar 01 18:03:07.695029 2026] [:error] [pid 38034:tid 38054] [client 20.220.232.101:10048] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/byp.php"] [unique_id "aaQO2wxtfZjwlJok9K_vFQAAARA"]
[Sun Mar 01 18:03:08.324660 2026] [:error] [pid 7165:tid 7168] [client 20.220.232.101:9739] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/byp.php"] [unique_id "aaQO3BRjCrA8qWBjgG-bkgAAAkE"]
[Sun Mar 01 18:03:08.871023 2026] [:error] [pid 38034:tid 38036] [client 20.220.232.101:10089] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/byp.php"] [unique_id "aaQO3AxtfZjwlJok9K_vGQAAAQA"]
[Sun Mar 01 18:03:09.663942 2026] [:error] [pid 33822:tid 33824] [client 20.220.232.101:9778] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/byp.php"] [unique_id "aaQO3W6W3ygu1YVssubtEQAAAoA"]
[Sun Mar 01 18:03:10.535507 2026] [:error] [pid 40750:tid 40769] [client 20.220.232.101:10104] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-trackback.php"] [unique_id "aaQO3gfBuk03yQKDyqtVVQAAAdA"]
[Sun Mar 01 18:03:11.161257 2026] [:error] [pid 38241:tid 38262] [client 20.220.232.101:9759] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-trackback.php"] [unique_id "aaQO3_KRPk6YnJBxw_ysRAAAANI"]
[Sun Mar 01 18:03:11.778446 2026] [:error] [pid 38241:tid 38254] [client 20.220.232.101:10170] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-trackback.php"] [unique_id "aaQO3_KRPk6YnJBxw_ysSgAAAMo"]
[Sun Mar 01 18:03:12.323093 2026] [:error] [pid 38241:tid 38260] [client 20.220.232.101:9762] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-trackback.php"] [unique_id "aaQO4PKRPk6YnJBxw_ysTAAAANA"]
[Sun Mar 01 18:03:12.860667 2026] [:error] [pid 38241:tid 38261] [client 20.220.232.101:9741] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/index.php"] [unique_id "aaQO4PKRPk6YnJBxw_ysTgAAANE"]
[Sun Mar 01 18:03:13.454428 2026] [:error] [pid 7133:tid 7158] [client 20.220.232.101:10079] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/index.php"] [unique_id "aaQO4fCtubh8pR64qB_6OwAAAFc"]
[Sun Mar 01 18:03:14.226671 2026] [:error] [pid 38241:tid 38253] [client 20.220.232.101:10110] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/index.php"] [unique_id "aaQO4vKRPk6YnJBxw_ysVQAAAMk"]
[Sun Mar 01 18:03:15.087199 2026] [:error] [pid 7133:tid 7139] [client 20.220.232.101:9751] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/index.php"] [unique_id "aaQO4_Ctubh8pR64qB_6PwAAAEQ"]
[Sun Mar 01 18:03:16.580705 2026] [:error] [pid 40750:tid 40762] [client 20.220.232.101:9744] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aaQO5AfBuk03yQKDyqtVWwAAAck"]
[Sun Mar 01 18:03:17.790149 2026] [:error] [pid 7165:tid 7167] [client 20.220.232.101:9732] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aaQO5RRjCrA8qWBjgG-bpAAAAkA"]
[Sun Mar 01 18:03:18.613236 2026] [:error] [pid 40750:tid 40762] [client 20.220.232.101:9995] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aaQO5gfBuk03yQKDyqtVawAAAck"]
[Sun Mar 01 18:03:20.368795 2026] [:error] [pid 40750:tid 40768] [client 20.220.232.101:9743] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aaQO6AfBuk03yQKDyqtVdQAAAc8"]
[Sun Mar 01 18:03:21.868309 2026] [:error] [pid 7133:tid 7149] [client 20.220.232.101:10014] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/about.php"] [unique_id "aaQO6fCtubh8pR64qB_6RAAAAE4"]
[Sun Mar 01 18:03:23.297716 2026] [:error] [pid 38034:tid 38056] [client 20.220.232.101:10076] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/about.php"] [unique_id "aaQO6wxtfZjwlJok9K_vLAAAARI"]
[Sun Mar 01 18:03:23.844780 2026] [:error] [pid 40750:tid 40760] [client 20.220.232.101:10159] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/about.php"] [unique_id "aaQO6wfBuk03yQKDyqtVfgAAAcc"]
[Sun Mar 01 18:03:25.426491 2026] [:error] [pid 40750:tid 40767] [client 20.220.232.101:9760] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/about.php"] [unique_id "aaQO7QfBuk03yQKDyqtViQAAAc4"]
[Sun Mar 01 18:03:26.279251 2026] [:error] [pid 38034:tid 38051] [client 20.220.232.101:9754] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gmo.php"] [unique_id "aaQO7gxtfZjwlJok9K_vMgAAAQ0"]
[Sun Mar 01 18:03:26.869511 2026] [:error] [pid 38034:tid 38046] [client 20.220.232.101:9730] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gmo.php"] [unique_id "aaQO7gxtfZjwlJok9K_vNQAAAQg"]
[Sun Mar 01 18:03:27.673740 2026] [:error] [pid 37032:tid 37040] [client 20.220.232.101:10090] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gmo.php"] [unique_id "aaQO7-u0U4o7eSImsVRlIQAAAYY"]
[Sun Mar 01 18:03:29.075485 2026] [:error] [pid 7133:tid 7141] [client 20.220.232.101:10099] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gmo.php"] [unique_id "aaQO8fCtubh8pR64qB_6SwAAAEY"]
[Sun Mar 01 18:03:29.670847 2026] [:error] [pid 7133:tid 7153] [client 20.220.232.101:9996] [client 20.220.232.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aaQO8fCtubh8pR64qB_6TQAAAFI"]
[Sun Mar 01 18:03:30.616693 2026] [:error] [pid 7133:tid 7151] [client 20.220.232.101:9788] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/css/index.php"] [unique_id "aaQO8vCtubh8pR64qB_6TwAAAFA"]
[Sun Mar 01 18:03:32.759318 2026] [proxy_fcgi:error] [pid 40750:tid 40759] [client 20.220.232.101:10062] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 18:03:32.964474 2026] [:error] [pid 40750:tid 40775] [client 20.220.232.101:10062] [client 20.220.232.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "aaQO9AfBuk03yQKDyqtVzQAAAdY"]
[Sun Mar 01 18:03:35.048174 2026] [:error] [pid 33822:tid 33831] [client 20.220.232.101:9748] [client 20.220.232.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aaQO926W3ygu1YVssubtHAAAAoc"]
[Sun Mar 01 18:03:36.033507 2026] [:error] [pid 7133:tid 7138] [client 20.220.232.101:10093] [client 20.220.232.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aaQO-PCtubh8pR64qB_6WAAAAEM"]
[Sun Mar 01 18:03:37.284629 2026] [proxy_fcgi:error] [pid 40750:tid 40764] [client 20.220.232.101:10071] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 18:03:37.956681 2026] [proxy_fcgi:error] [pid 40750:tid 40755] [client 20.220.232.101:10071] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 18:03:38.409854 2026] [:error] [pid 40750:tid 40756] [client 20.220.232.101:10071] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/security.php"] [unique_id "aaQO-gfBuk03yQKDyqtV4QAAAcM"]
[Sun Mar 01 18:03:39.294963 2026] [:error] [pid 38241:tid 38262] [client 20.220.232.101:9988] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/security.php"] [unique_id "aaQO-_KRPk6YnJBxw_yseAAAANI"]
[Sun Mar 01 18:03:40.100125 2026] [:error] [pid 40750:tid 40776] [client 20.220.232.101:9752] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/security.php"] [unique_id "aaQO_AfBuk03yQKDyqtV5AAAAdc"]
[Sun Mar 01 18:03:41.136267 2026] [:error] [pid 38034:tid 38040] [client 20.220.232.101:10024] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/security.php"] [unique_id "aaQO_QxtfZjwlJok9K_vTgAAAQQ"]
[Sun Mar 01 18:03:41.845801 2026] [:error] [pid 40750:tid 40769] [client 20.220.232.101:10097] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aaQO_QfBuk03yQKDyqtV-wAAAdA"]
[Sun Mar 01 18:03:42.459573 2026] [:error] [pid 40750:tid 40777] [client 20.220.232.101:9782] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aaQO_gfBuk03yQKDyqtWBAAAAdg"]
[Sun Mar 01 18:03:43.060196 2026] [:error] [pid 40750:tid 40767] [client 20.220.232.101:9731] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aaQO_wfBuk03yQKDyqtWCgAAAc4"]
[Sun Mar 01 18:03:43.599339 2026] [:error] [pid 40750:tid 40761] [client 20.220.232.101:9772] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aaQO_wfBuk03yQKDyqtWDwAAAcg"]
[Sun Mar 01 18:03:44.250437 2026] [:error] [pid 40750:tid 40756] [client 20.220.232.101:10124] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aaQPAAfBuk03yQKDyqtWEwAAAcM"]
[Sun Mar 01 18:03:44.856522 2026] [:error] [pid 38034:tid 38054] [client 20.220.232.101:9791] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aaQPAAxtfZjwlJok9K_vUgAAARA"]
[Sun Mar 01 18:03:45.517697 2026] [:error] [pid 7133:tid 7144] [client 20.220.232.101:10102] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aaQPAfCtubh8pR64qB_6YQAAAEk"]
[Sun Mar 01 18:03:46.973286 2026] [:error] [pid 40750:tid 40774] [client 20.220.232.101:10115] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aaQPAgfBuk03yQKDyqtWHgAAAdU"]
[Sun Mar 01 18:03:47.580466 2026] [:error] [pid 7165:tid 7167] [client 20.220.232.101:10077] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aaQPAxRjCrA8qWBjgG-b6gAAAkA"]
[Sun Mar 01 18:03:48.443640 2026] [:error] [pid 37032:tid 37058] [client 20.220.232.101:9769] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aaQPBOu0U4o7eSImsVRlKgAAAZg"]
[Sun Mar 01 18:03:49.177055 2026] [:error] [pid 38241:tid 38267] [client 20.220.232.101:10147] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aaQPBfKRPk6YnJBxw_yslAAAANc"]
[Sun Mar 01 18:03:49.682899 2026] [:error] [pid 38241:tid 38249] [client 20.220.232.101:10060] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aaQPBfKRPk6YnJBxw_yslgAAAMU"]
[Sun Mar 01 18:03:50.409938 2026] [:error] [pid 7133:tid 7147] [client 20.220.232.101:10175] [client 20.220.232.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aaQPBvCtubh8pR64qB_6aAAAAEw"]
[Sun Mar 01 18:03:52.783745 2026] [:error] [pid 40750:tid 40763] [client 20.220.232.101:10121] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/radio.php"] [unique_id "aaQPCAfBuk03yQKDyqtWNAAAAco"]
[Sun Mar 01 18:03:54.005682 2026] [:error] [pid 33822:tid 33848] [client 20.220.232.101:10165] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/radio.php"] [unique_id "aaQPCm6W3ygu1YVssubtJgAAApg"]
[Sun Mar 01 18:03:54.597823 2026] [:error] [pid 7165:tid 7176] [client 20.220.232.101:9733] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/radio.php"] [unique_id "aaQPChRjCrA8qWBjgG-cBAAAAkk"]
[Sun Mar 01 18:03:55.017704 2026] [:error] [pid 7165:tid 7169] [client 20.220.232.101:10023] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aaQPCxRjCrA8qWBjgG-cBwAAAkI"]
[Sun Mar 01 18:03:55.651402 2026] [:error] [pid 7165:tid 7187] [client 20.220.232.101:10096] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aaQPCxRjCrA8qWBjgG-cCwAAAlQ"]
[Sun Mar 01 18:03:56.631624 2026] [:error] [pid 40750:tid 40772] [client 20.220.232.101:10135] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aaQPDAfBuk03yQKDyqtWQgAAAdM"]
[Sun Mar 01 18:03:57.772460 2026] [:error] [pid 33822:tid 33828] [client 20.220.232.101:9777] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aaQPDW6W3ygu1YVssubtLQAAAoQ"]
[Sun Mar 01 18:03:58.420441 2026] [:error] [pid 40750:tid 40755] [client 20.220.232.101:9775] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/admin.php"] [unique_id "aaQPDgfBuk03yQKDyqtWRgAAAcI"]
[Sun Mar 01 18:03:59.174776 2026] [:error] [pid 40750:tid 40758] [client 20.220.232.101:9749] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/admin.php"] [unique_id "aaQPDwfBuk03yQKDyqtWTgAAAcU"]
[Sun Mar 01 18:03:59.726960 2026] [:error] [pid 40750:tid 40761] [client 20.220.232.101:9783] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/admin.php"] [unique_id "aaQPDwfBuk03yQKDyqtWUQAAAcg"]
[Sun Mar 01 18:04:00.316852 2026] [:error] [pid 40750:tid 40764] [client 20.220.232.101:10022] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/admin.php"] [unique_id "aaQPEAfBuk03yQKDyqtWVAAAAcs"]
[Sun Mar 01 18:04:01.032179 2026] [:error] [pid 40750:tid 40753] [client 20.220.232.101:9756] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "aaQPEQfBuk03yQKDyqtWWwAAAcA"]
[Sun Mar 01 18:04:01.715048 2026] [:error] [pid 40750:tid 40772] [client 20.220.232.101:10106] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "aaQPEQfBuk03yQKDyqtWXQAAAdM"]
[Sun Mar 01 18:04:02.373943 2026] [:error] [pid 7165:tid 7191] [client 20.220.232.101:9745] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "aaQPEhRjCrA8qWBjgG-cHQAAAlg"]
[Sun Mar 01 18:04:02.930791 2026] [:error] [pid 38241:tid 38263] [client 20.220.232.101:9737] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "aaQPEvKRPk6YnJBxw_yspgAAANM"]
[Sun Mar 01 18:04:03.606716 2026] [:error] [pid 38241:tid 38255] [client 20.220.232.101:9943] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aaQPE_KRPk6YnJBxw_ysqAAAAMs"]
[Sun Mar 01 18:04:04.337214 2026] [:error] [pid 38241:tid 38260] [client 20.220.232.101:9780] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aaQPFPKRPk6YnJBxw_ysqgAAANA"]
[Sun Mar 01 18:04:05.014533 2026] [:error] [pid 38034:tid 38049] [client 20.220.232.101:10161] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aaQPFQxtfZjwlJok9K_vWQAAAQs"]
[Sun Mar 01 18:04:05.792500 2026] [:error] [pid 38034:tid 38058] [client 20.220.232.101:10091] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aaQPFQxtfZjwlJok9K_vWwAAARQ"]
[Sun Mar 01 18:04:06.532567 2026] [:error] [pid 7165:tid 7190] [client 20.220.232.101:9728] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aaQPFhRjCrA8qWBjgG-cIwAAAlc"]
[Sun Mar 01 18:04:07.117278 2026] [:error] [pid 33822:tid 33827] [client 20.220.232.101:10174] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aaQPF26W3ygu1YVssubtMgAAAoM"]
[Sun Mar 01 18:04:07.817779 2026] [:error] [pid 7165:tid 7180] [client 20.220.232.101:9767] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aaQPFxRjCrA8qWBjgG-cKAAAAk0"]
[Sun Mar 01 18:04:08.657327 2026] [:error] [pid 40750:tid 40757] [client 20.220.232.101:9761] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aaQPGAfBuk03yQKDyqtWcAAAAcQ"]
[Sun Mar 01 18:04:09.748241 2026] [:error] [pid 40750:tid 40768] [client 20.220.232.101:9753] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/log.php"] [unique_id "aaQPGQfBuk03yQKDyqtWdAAAAc8"]
[Sun Mar 01 18:04:10.933760 2026] [:error] [pid 40750:tid 40770] [client 20.220.232.101:9786] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/log.php"] [unique_id "aaQPGgfBuk03yQKDyqtWfAAAAdE"]
[Sun Mar 01 18:04:11.657617 2026] [:error] [pid 40750:tid 40757] [client 20.220.232.101:10195] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/log.php"] [unique_id "aaQPGwfBuk03yQKDyqtWgAAAAcQ"]
[Sun Mar 01 18:04:12.755586 2026] [:error] [pid 7165:tid 7182] [client 20.220.232.101:10088] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/log.php"] [unique_id "aaQPHBRjCrA8qWBjgG-cMgAAAk8"]
[Sun Mar 01 18:04:13.364172 2026] [:error] [pid 7165:tid 7178] [client 20.220.232.101:10108] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class.php"] [unique_id "aaQPHRRjCrA8qWBjgG-cOAAAAks"]
[Sun Mar 01 18:04:13.958464 2026] [:error] [pid 7165:tid 7174] [client 20.220.232.101:9986] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class.php"] [unique_id "aaQPHRRjCrA8qWBjgG-cOwAAAkc"]
[Sun Mar 01 18:04:14.800031 2026] [:error] [pid 40750:tid 40753] [client 20.220.232.101:9966] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class.php"] [unique_id "aaQPHgfBuk03yQKDyqtWhgAAAcA"]
[Sun Mar 01 18:04:15.600977 2026] [:error] [pid 40750:tid 40767] [client 20.220.232.101:10019] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class.php"] [unique_id "aaQPHwfBuk03yQKDyqtWiQAAAc4"]
[Sun Mar 01 18:04:16.341795 2026] [:error] [pid 38034:tid 38039] [client 20.220.232.101:10046] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bless5.php"] [unique_id "aaQPIAxtfZjwlJok9K_vXgAAAQM"]
[Sun Mar 01 18:04:16.945779 2026] [:error] [pid 7133:tid 7136] [client 20.220.232.101:10018] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bless5.php"] [unique_id "aaQPIPCtubh8pR64qB_6gwAAAEE"]
[Sun Mar 01 18:04:17.492949 2026] [:error] [pid 37032:tid 37039] [client 20.220.232.101:10020] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bless5.php"] [unique_id "aaQPIeu0U4o7eSImsVRlLQAAAYU"]
[Sun Mar 01 18:04:18.106008 2026] [:error] [pid 37032:tid 37038] [client 20.220.232.101:9997] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bless5.php"] [unique_id "aaQPIuu0U4o7eSImsVRlMAAAAYQ"]
[Sun Mar 01 18:04:19.843922 2026] [:error] [pid 7165:tid 7178] [client 20.220.232.101:10025] [client 20.220.232.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aaQPIxRjCrA8qWBjgG-cRQAAAks"]
[Sun Mar 01 18:04:21.731900 2026] [:error] [pid 37032:tid 37044] [client 20.220.232.101:9736] [client 20.220.232.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/block-patterns/index.php"] [unique_id "aaQPJeu0U4o7eSImsVRlOQAAAYo"]
[Sun Mar 01 18:04:24.804553 2026] [:error] [pid 7133:tid 7154] [client 20.220.232.101:9931] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lock360.php"] [unique_id "aaQPKPCtubh8pR64qB_6hwAAAFM"]
[Sun Mar 01 18:04:25.544972 2026] [:error] [pid 38034:tid 38050] [client 20.220.232.101:9999] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lock360.php"] [unique_id "aaQPKQxtfZjwlJok9K_vYAAAAQw"]
[Sun Mar 01 18:04:27.273528 2026] [:error] [pid 33822:tid 33833] [client 20.220.232.101:10000] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lock360.php"] [unique_id "aaQPK26W3ygu1YVssubtQAAAAok"]
[Sun Mar 01 18:04:30.739582 2026] [:error] [pid 37032:tid 37038] [client 20.220.232.101:9950] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lock360.php"] [unique_id "aaQPLuu0U4o7eSImsVRlPgAAAYQ"]
[Sun Mar 01 18:04:33.623746 2026] [:error] [pid 7165:tid 7176] [client 20.220.232.101:10111] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f35.php"] [unique_id "aaQPMRRjCrA8qWBjgG-ceAAAAkk"]
[Sun Mar 01 18:04:36.061268 2026] [:error] [pid 40750:tid 40757] [client 20.220.232.101:9985] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f35.php"] [unique_id "aaQPNAfBuk03yQKDyqtWngAAAcQ"]
[Sun Mar 01 18:04:38.117040 2026] [proxy_fcgi:error] [pid 37032:tid 37058] [client 20.220.232.101:9774] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 18:04:38.331543 2026] [proxy_fcgi:error] [pid 37032:tid 37055] [client 20.220.232.101:9774] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 18:04:38.559670 2026] [proxy_fcgi:error] [pid 37032:tid 37042] [client 20.220.232.101:9774] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 18:04:38.771812 2026] [proxy_fcgi:error] [pid 37032:tid 37038] [client 20.220.232.101:9774] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 18:04:38.985173 2026] [proxy_fcgi:error] [pid 37032:tid 37040] [client 20.220.232.101:9774] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 18:04:39.221184 2026] [proxy_fcgi:error] [pid 37032:tid 37051] [client 20.220.232.101:9774] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 18:04:39.575407 2026] [proxy_fcgi:error] [pid 37032:tid 37050] [client 20.220.232.101:9774] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 18:04:39.819918 2026] [proxy_fcgi:error] [pid 37032:tid 37037] [client 20.220.232.101:9774] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 18:04:40.039807 2026] [proxy_fcgi:error] [pid 37032:tid 37056] [client 20.220.232.101:9774] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 18:04:40.293303 2026] [proxy_fcgi:error] [pid 37032:tid 37049] [client 20.220.232.101:9774] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 18:04:40.506270 2026] [proxy_fcgi:error] [pid 37032:tid 37034] [client 20.220.232.101:9774] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 18:04:40.716560 2026] [:error] [pid 37032:tid 37054] [client 20.220.232.101:9774] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xx.php"] [unique_id "aaQPOOu0U4o7eSImsVRlWQAAAZQ"]
[Sun Mar 01 18:04:41.347232 2026] [:error] [pid 7165:tid 7167] [client 20.220.232.101:10039] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xx.php"] [unique_id "aaQPORRjCrA8qWBjgG-cswAAAkA"]
[Sun Mar 01 18:04:41.990531 2026] [:error] [pid 7165:tid 7178] [client 20.220.232.101:10109] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xx.php"] [unique_id "aaQPORRjCrA8qWBjgG-ctQAAAks"]
[Sun Mar 01 18:04:42.699921 2026] [:error] [pid 7165:tid 7170] [client 20.220.232.101:9750] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xx.php"] [unique_id "aaQPOhRjCrA8qWBjgG-cuQAAAkM"]
[Sun Mar 01 18:04:44.297814 2026] [:error] [pid 33822:tid 33845] [client 20.220.232.101:9930] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gifclass4.php"] [unique_id "aaQPPG6W3ygu1YVssubtTgAAApU"]
[Sun Mar 01 18:04:45.245652 2026] [:error] [pid 38241:tid 38261] [client 20.220.232.101:10229] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gifclass4.php"] [unique_id "aaQPPfKRPk6YnJBxw_ys2wAAANE"]
[Sun Mar 01 18:04:46.480209 2026] [:error] [pid 7165:tid 7180] [client 20.220.232.101:10235] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gifclass4.php"] [unique_id "aaQPPhRjCrA8qWBjgG-cygAAAk0"]
[Sun Mar 01 18:04:47.906523 2026] [:error] [pid 38241:tid 38263] [client 20.220.232.101:10190] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gifclass4.php"] [unique_id "aaQPP_KRPk6YnJBxw_ys3gAAANM"]
[Sun Mar 01 18:04:48.637315 2026] [:error] [pid 40750:tid 40775] [client 20.220.232.101:10238] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2clas.php"] [unique_id "aaQPQAfBuk03yQKDyqtWsgAAAdY"]
[Sun Mar 01 18:04:49.241163 2026] [:error] [pid 7165:tid 7187] [client 20.220.232.101:10204] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2clas.php"] [unique_id "aaQPQRRjCrA8qWBjgG-c0QAAAlQ"]
[Sun Mar 01 18:04:49.834677 2026] [:error] [pid 38241:tid 38250] [client 20.220.232.101:10216] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2clas.php"] [unique_id "aaQPQfKRPk6YnJBxw_ys5AAAAMY"]
[Sun Mar 01 18:04:50.594152 2026] [:error] [pid 7165:tid 7180] [client 20.220.232.101:10126] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2clas.php"] [unique_id "aaQPQhRjCrA8qWBjgG-c1AAAAk0"]
[Sun Mar 01 18:04:51.452440 2026] [:error] [pid 7165:tid 7173] [client 20.220.232.101:10182] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ave.php"] [unique_id "aaQPQxRjCrA8qWBjgG-c3AAAAkY"]
[Sun Mar 01 18:04:52.329813 2026] [:error] [pid 40750:tid 40768] [client 20.220.232.101:10203] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ave.php"] [unique_id "aaQPRAfBuk03yQKDyqtWtgAAAc8"]
[Sun Mar 01 18:04:53.694867 2026] [:error] [pid 38034:tid 38058] [client 20.220.232.101:9766] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ave.php"] [unique_id "aaQPRQxtfZjwlJok9K_vaQAAARQ"]
[Sun Mar 01 18:04:54.316989 2026] [:error] [pid 40750:tid 40775] [client 20.220.232.101:9747] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ave.php"] [unique_id "aaQPRgfBuk03yQKDyqtWvgAAAdY"]
[Sun Mar 01 18:04:55.044606 2026] [:error] [pid 40750:tid 40774] [client 20.220.232.101:10218] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wrt.php"] [unique_id "aaQPRwfBuk03yQKDyqtWwgAAAdU"]
[Sun Mar 01 18:04:55.591218 2026] [:error] [pid 41780:tid 41783] [client 20.220.232.101:10029] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wrt.php"] [unique_id "aaQPR8ONkVoocLIqzy0dvgAAA8A"]
[Sun Mar 01 18:04:56.462778 2026] [:error] [pid 40750:tid 40756] [client 20.220.232.101:9779] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wrt.php"] [unique_id "aaQPSAfBuk03yQKDyqtWyAAAAcM"]
[Sun Mar 01 18:04:57.035593 2026] [:error] [pid 7133:tid 7139] [client 20.220.232.101:10226] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wrt.php"] [unique_id "aaQPSfCtubh8pR64qB_6oQAAAEQ"]
[Sun Mar 01 18:04:57.623208 2026] [:error] [pid 40750:tid 40765] [client 20.220.232.101:10230] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bibil.php"] [unique_id "aaQPSQfBuk03yQKDyqtW0gAAAcw"]
[Sun Mar 01 18:04:58.374933 2026] [:error] [pid 7165:tid 7168] [client 20.220.232.101:10125] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bibil.php"] [unique_id "aaQPShRjCrA8qWBjgG-c5wAAAkE"]
[Sun Mar 01 18:04:59.225480 2026] [:error] [pid 40750:tid 40772] [client 20.220.232.101:10128] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bibil.php"] [unique_id "aaQPSwfBuk03yQKDyqtW3AAAAdM"]
[Sun Mar 01 18:04:59.895299 2026] [:error] [pid 7133:tid 7151] [client 20.220.232.101:10005] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bibil.php"] [unique_id "aaQPS_Ctubh8pR64qB_6sQAAAFA"]
[Sun Mar 01 18:05:00.963096 2026] [:error] [pid 7165:tid 7185] [client 20.220.232.101:9790] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/radio.php"] [unique_id "aaQPTBRjCrA8qWBjgG-c8AAAAlI"]
[Sun Mar 01 18:05:02.429661 2026] [:error] [pid 40750:tid 40776] [client 20.220.232.101:10036] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/radio.php"] [unique_id "aaQPTgfBuk03yQKDyqtXCgAAAdc"]
[Sun Mar 01 18:05:03.065833 2026] [:error] [pid 37032:tid 37046] [client 20.220.232.101:10163] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/radio.php"] [unique_id "aaQPT-u0U4o7eSImsVRlbAAAAYw"]
[Sun Mar 01 18:05:04.146006 2026] [:error] [pid 7165:tid 7172] [client 20.220.232.101:10085] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/radio.php"] [unique_id "aaQPUBRjCrA8qWBjgG-dFgAAAkU"]
[Sun Mar 01 18:05:05.030599 2026] [:error] [pid 7133:tid 7152] [client 20.220.232.101:9926] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/files.php"] [unique_id "aaQPUfCtubh8pR64qB_6uAAAAFE"]
[Sun Mar 01 18:05:05.742258 2026] [:error] [pid 7133:tid 7145] [client 20.220.232.101:10045] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/files.php"] [unique_id "aaQPUfCtubh8pR64qB_6uQAAAEo"]
[Sun Mar 01 18:05:06.337860 2026] [:error] [pid 40750:tid 40758] [client 20.220.232.101:10015] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/files.php"] [unique_id "aaQPUgfBuk03yQKDyqtXLQAAAcU"]
[Sun Mar 01 18:05:07.482229 2026] [:error] [pid 40750:tid 40755] [client 20.220.232.101:10053] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/files.php"] [unique_id "aaQPUwfBuk03yQKDyqtXNAAAAcI"]
[Sun Mar 01 18:05:08.534352 2026] [:error] [pid 7133:tid 7147] [client 20.220.232.101:10140] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file7.php"] [unique_id "aaQPVPCtubh8pR64qB_6vwAAAEw"]
[Sun Mar 01 18:05:09.235297 2026] [:error] [pid 44644:tid 44651] [client 20.220.232.101:9987] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file7.php"] [unique_id "aaQPVZ3RJaXMcw3y9V_I2AAAAAQ"]
[Sun Mar 01 18:05:10.099748 2026] [:error] [pid 40750:tid 40759] [client 20.220.232.101:10231] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file7.php"] [unique_id "aaQPVgfBuk03yQKDyqtXOgAAAcY"]
[Sun Mar 01 18:05:11.460045 2026] [:error] [pid 38241:tid 38261] [client 20.220.232.101:10233] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file7.php"] [unique_id "aaQPV_KRPk6YnJBxw_ytEAAAANE"]
[Sun Mar 01 18:05:12.305738 2026] [:error] [pid 40750:tid 40772] [client 20.220.232.101:10171] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gifclass.php"] [unique_id "aaQPWAfBuk03yQKDyqtXPwAAAdM"]
[Sun Mar 01 18:05:13.153224 2026] [:error] [pid 40750:tid 40758] [client 20.220.232.101:9991] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gifclass.php"] [unique_id "aaQPWQfBuk03yQKDyqtXQwAAAcU"]
[Sun Mar 01 18:05:14.516504 2026] [:error] [pid 7133:tid 7139] [client 20.220.232.101:9789] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gifclass.php"] [unique_id "aaQPWvCtubh8pR64qB_6xAAAAEQ"]
[Sun Mar 01 18:05:15.192697 2026] [:error] [pid 44644:tid 44664] [client 20.220.232.101:9784] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gifclass.php"] [unique_id "aaQPW53RJaXMcw3y9V_I3gAAABE"]
[Sun Mar 01 18:05:16.160277 2026] [:error] [pid 40750:tid 40773] [client 20.220.232.101:10132] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aaQPXAfBuk03yQKDyqtXVAAAAdQ"]
[Sun Mar 01 18:05:17.183739 2026] [:error] [pid 37032:tid 37053] [client 20.220.232.101:10116] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aaQPXeu0U4o7eSImsVRlcgAAAZM"]
[Sun Mar 01 18:05:18.713006 2026] [:error] [pid 40750:tid 40756] [client 20.220.232.101:10208] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aaQPXgfBuk03yQKDyqtXYwAAAcM"]
[Sun Mar 01 18:05:19.630359 2026] [:error] [pid 40750:tid 40759] [client 20.220.232.101:10112] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aaQPXwfBuk03yQKDyqtXaQAAAcY"]
[Sun Mar 01 18:05:20.815464 2026] [:error] [pid 7133:tid 7143] [client 20.220.232.101:10205] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nox.php"] [unique_id "aaQPYPCtubh8pR64qB_6yQAAAEg"]
[Sun Mar 01 18:05:21.706026 2026] [:error] [pid 7133:tid 7140] [client 20.220.232.101:10008] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nox.php"] [unique_id "aaQPYfCtubh8pR64qB_6zQAAAEU"]
[Sun Mar 01 18:05:22.503257 2026] [:error] [pid 41780:tid 41788] [client 20.220.232.101:10114] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nox.php"] [unique_id "aaQPYsONkVoocLIqzy0dywAAA8U"]
[Sun Mar 01 18:05:23.312147 2026] [:error] [pid 38241:tid 38254] [client 20.220.232.101:9933] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nox.php"] [unique_id "aaQPY_KRPk6YnJBxw_ytGQAAAMo"]
[Sun Mar 01 18:05:23.848841 2026] [:error] [pid 38241:tid 38260] [client 20.220.232.101:9734] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file48.php"] [unique_id "aaQPY_KRPk6YnJBxw_ytGwAAANA"]
[Sun Mar 01 18:05:24.476568 2026] [:error] [pid 7165:tid 7191] [client 20.220.232.101:10040] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file48.php"] [unique_id "aaQPZBRjCrA8qWBjgG-dNwAAAlg"]
[Sun Mar 01 18:05:25.511351 2026] [:error] [pid 7165:tid 7167] [client 20.220.232.101:10181] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file48.php"] [unique_id "aaQPZRRjCrA8qWBjgG-dOgAAAkA"]
[Sun Mar 01 18:05:26.502864 2026] [:error] [pid 41780:tid 41807] [client 20.220.232.101:9738] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file48.php"] [unique_id "aaQPZsONkVoocLIqzy0dzgAAA9g"]
[Sun Mar 01 18:05:27.893328 2026] [:error] [pid 38241:tid 38255] [client 20.220.232.101:10123] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/info.php"] [unique_id "aaQPZ_KRPk6YnJBxw_ytIAAAAMs"]
[Sun Mar 01 18:05:28.827694 2026] [:error] [pid 40750:tid 40763] [client 20.220.232.101:10117] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/info.php"] [unique_id "aaQPaAfBuk03yQKDyqtXgwAAAco"]
[Sun Mar 01 18:05:29.575834 2026] [:error] [pid 7133:tid 7148] [client 20.220.232.101:10214] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/info.php"] [unique_id "aaQPafCtubh8pR64qB_62wAAAE0"]
[Sun Mar 01 18:05:30.423905 2026] [:error] [pid 40750:tid 40771] [client 20.220.232.101:9989] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/info.php"] [unique_id "aaQPagfBuk03yQKDyqtXiAAAAdI"]
[Sun Mar 01 18:05:31.100898 2026] [:error] [pid 40750:tid 40772] [client 20.220.232.101:10052] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class9.php"] [unique_id "aaQPawfBuk03yQKDyqtXjAAAAdM"]
[Sun Mar 01 18:05:31.806092 2026] [:error] [pid 40750:tid 40763] [client 20.220.232.101:10179] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class9.php"] [unique_id "aaQPawfBuk03yQKDyqtXkAAAAco"]
[Sun Mar 01 18:05:32.591639 2026] [:error] [pid 33822:tid 33827] [client 20.220.232.101:10222] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class9.php"] [unique_id "aaQPbG6W3ygu1YVssubtZgAAAoM"]
[Sun Mar 01 18:05:33.135878 2026] [:error] [pid 7133:tid 7156] [client 20.220.232.101:9923] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class9.php"] [unique_id "aaQPbfCtubh8pR64qB_65gAAAFU"]
[Sun Mar 01 18:05:33.647248 2026] [:error] [pid 40750:tid 40757] [client 20.220.232.101:10239] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/la.php"] [unique_id "aaQPbQfBuk03yQKDyqtXlgAAAcQ"]
[Sun Mar 01 18:05:34.461019 2026] [:error] [pid 7165:tid 7182] [client 20.220.232.101:9785] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/la.php"] [unique_id "aaQPbhRjCrA8qWBjgG-dRAAAAk8"]
[Sun Mar 01 18:05:35.335450 2026] [:error] [pid 40750:tid 40758] [client 20.220.232.101:10139] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/la.php"] [unique_id "aaQPbwfBuk03yQKDyqtXmgAAAcU"]
[Sun Mar 01 18:05:36.018090 2026] [:error] [pid 40750:tid 40754] [client 20.220.232.101:10178] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/la.php"] [unique_id "aaQPcAfBuk03yQKDyqtXmwAAAcE"]
[Sun Mar 01 18:05:36.613978 2026] [:error] [pid 44644:tid 44661] [client 20.220.232.101:10103] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bless11.php"] [unique_id "aaQPcJ3RJaXMcw3y9V_I4gAAAA4"]
[Sun Mar 01 18:05:37.091511 2026] [:error] [pid 37032:tid 37055] [client 20.220.232.101:9964] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bless11.php"] [unique_id "aaQPceu0U4o7eSImsVRldAAAAZU"]
[Sun Mar 01 18:05:37.974443 2026] [:error] [pid 38241:tid 38251] [client 20.220.232.101:9755] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bless11.php"] [unique_id "aaQPcfKRPk6YnJBxw_ytMQAAAMc"]
[Sun Mar 01 18:05:38.897990 2026] [:error] [pid 41342:tid 41349] [client 20.220.232.101:10017] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bless11.php"] [unique_id "aaQPco4iJ6RAS5CatDlUAwAAAgQ"]
[Sun Mar 01 18:05:39.978607 2026] [:error] [pid 41780:tid 41806] [client 20.220.232.101:10164] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ccou.php"] [unique_id "aaQPc8ONkVoocLIqzy0d1AAAA9c"]
[Sun Mar 01 18:05:40.952039 2026] [proxy_fcgi:error] [pid 38034:tid 38048] [client 20.220.232.101:10051] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 18:05:41.161160 2026] [proxy_fcgi:error] [pid 38034:tid 38062] [client 20.220.232.101:10051] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 18:05:41.371743 2026] [proxy_fcgi:error] [pid 38034:tid 38039] [client 20.220.232.101:10051] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 18:05:42.234533 2026] [proxy_fcgi:error] [pid 38034:tid 38057] [client 20.220.232.101:10051] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 18:05:42.443432 2026] [proxy_fcgi:error] [pid 38034:tid 38055] [client 20.220.232.101:10051] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 18:05:42.683291 2026] [proxy_fcgi:error] [pid 38034:tid 38059] [client 20.220.232.101:10051] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 18:05:42.908832 2026] [proxy_fcgi:error] [pid 38034:tid 38062] [client 20.220.232.101:10051] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 18:05:43.117672 2026] [proxy_fcgi:error] [pid 38034:tid 38039] [client 20.220.232.101:10051] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 18:05:43.325799 2026] [proxy_fcgi:error] [pid 38034:tid 38044] [client 20.220.232.101:10051] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 18:05:45.782541 2026] [proxy_fcgi:error] [pid 38034:tid 38037] [client 20.220.232.101:10051] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 18:05:46.613242 2026] [proxy_fcgi:error] [pid 38034:tid 38051] [client 20.220.232.101:10051] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 18:05:46.818953 2026] [:error] [pid 38034:tid 38057] [client 20.220.232.101:10051] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/elp.php"] [unique_id "aaQPegxtfZjwlJok9K_voQAAARM"]
[Sun Mar 01 18:05:48.521200 2026] [:error] [pid 7165:tid 7171] [client 20.220.232.101:9993] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/elp.php"] [unique_id "aaQPfBRjCrA8qWBjgG-dZgAAAkQ"]
[Sun Mar 01 18:05:49.981698 2026] [:error] [pid 38241:tid 38252] [client 20.220.232.101:10129] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/elp.php"] [unique_id "aaQPffKRPk6YnJBxw_ytOgAAAMg"]
[Sun Mar 01 18:05:50.714599 2026] [:error] [pid 40750:tid 40763] [client 20.220.232.101:10012] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/elp.php"] [unique_id "aaQPfgfBuk03yQKDyqtXsQAAAco"]
[Sun Mar 01 18:05:51.338937 2026] [:error] [pid 40750:tid 40762] [client 20.220.232.101:9927] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wtz.php"] [unique_id "aaQPfwfBuk03yQKDyqtXtgAAAck"]
[Sun Mar 01 18:05:52.380593 2026] [:error] [pid 40750:tid 40772] [client 20.220.232.101:10067] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wtz.php"] [unique_id "aaQPgAfBuk03yQKDyqtXvQAAAdM"]
[Sun Mar 01 18:05:53.047409 2026] [:error] [pid 40750:tid 40759] [client 20.220.232.101:10199] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wtz.php"] [unique_id "aaQPgQfBuk03yQKDyqtXxQAAAcY"]
[Sun Mar 01 18:05:54.020845 2026] [:error] [pid 40750:tid 40755] [client 20.220.232.101:10221] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wtz.php"] [unique_id "aaQPggfBuk03yQKDyqtXxwAAAcI"]
[Sun Mar 01 18:05:54.648643 2026] [:error] [pid 40750:tid 40773] [client 20.220.232.101:10134] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/galex.php"] [unique_id "aaQPggfBuk03yQKDyqtXywAAAdQ"]
[Sun Mar 01 18:05:56.072092 2026] [:error] [pid 33822:tid 33824] [client 20.220.232.101:9953] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/galex.php"] [unique_id "aaQPhG6W3ygu1YVssubtdQAAAoA"]
[Sun Mar 01 18:05:57.576003 2026] [:error] [pid 37032:tid 37054] [client 20.220.232.101:10196] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/galex.php"] [unique_id "aaQPheu0U4o7eSImsVRlfAAAAZQ"]
[Sun Mar 01 18:05:58.186835 2026] [:error] [pid 7165:tid 7181] [client 20.220.232.101:9922] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/galex.php"] [unique_id "aaQPhhRjCrA8qWBjgG-dZwAAAk4"]
[Sun Mar 01 18:05:58.853935 2026] [:error] [pid 41780:tid 41796] [client 20.220.232.101:10044] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xb.php"] [unique_id "aaQPhsONkVoocLIqzy0d2AAAA80"]
[Sun Mar 01 18:05:59.553570 2026] [:error] [pid 7165:tid 7188] [client 20.220.232.101:10105] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xb.php"] [unique_id "aaQPhxRjCrA8qWBjgG-daAAAAlU"]
[Sun Mar 01 18:06:00.133596 2026] [:error] [pid 7165:tid 7186] [client 20.220.232.101:10192] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xb.php"] [unique_id "aaQPiBRjCrA8qWBjgG-daQAAAlM"]
[Sun Mar 01 18:06:01.543842 2026] [:error] [pid 33822:tid 33829] [client 20.220.232.101:10217] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xb.php"] [unique_id "aaQPiW6W3ygu1YVssubtfgAAAoU"]
[Sun Mar 01 18:06:03.852061 2026] [:error] [pid 40750:tid 40772] [client 20.220.232.101:10009] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ova.php"] [unique_id "aaQPiwfBuk03yQKDyqtX3gAAAdM"]
[Sun Mar 01 18:06:05.722671 2026] [:error] [pid 38241:tid 38258] [client 20.220.232.101:9940] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ova.php"] [unique_id "aaQPjfKRPk6YnJBxw_ytXwAAAM4"]
[Sun Mar 01 18:06:06.400426 2026] [:error] [pid 38241:tid 38247] [client 20.220.232.101:10145] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ova.php"] [unique_id "aaQPjvKRPk6YnJBxw_ytZQAAAMM"]
[Sun Mar 01 18:06:07.036908 2026] [:error] [pid 38241:tid 38258] [client 20.220.232.101:10211] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ova.php"] [unique_id "aaQPj_KRPk6YnJBxw_ytbAAAAM4"]
[Sun Mar 01 18:06:08.011921 2026] [:error] [pid 40750:tid 40775] [client 20.220.232.101:9757] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vx.php"] [unique_id "aaQPkAfBuk03yQKDyqtX4AAAAdY"]
[Sun Mar 01 18:06:09.293290 2026] [:error] [pid 7133:tid 7137] [client 20.220.232.101:9763] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vx.php"] [unique_id "aaQPkfCtubh8pR64qB_7AAAAAEI"]
[Sun Mar 01 18:06:10.064935 2026] [:error] [pid 33822:tid 33848] [client 20.220.232.101:10215] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vx.php"] [unique_id "aaQPkm6W3ygu1YVssubtoQAAApg"]
[Sun Mar 01 18:06:11.023910 2026] [:error] [pid 40750:tid 40771] [client 20.220.232.101:10228] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vx.php"] [unique_id "aaQPkwfBuk03yQKDyqtX7AAAAdI"]
[Sun Mar 01 18:06:12.103765 2026] [:error] [pid 38241:tid 38254] [client 20.220.232.101:10227] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rh.php"] [unique_id "aaQPlPKRPk6YnJBxw_ytdQAAAMo"]
[Sun Mar 01 18:06:13.173313 2026] [:error] [pid 38241:tid 38267] [client 20.220.232.101:10075] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rh.php"] [unique_id "aaQPlfKRPk6YnJBxw_ytfgAAANc"]
[Sun Mar 01 18:06:14.418762 2026] [:error] [pid 40750:tid 40753] [client 20.220.232.101:10041] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rh.php"] [unique_id "aaQPlgfBuk03yQKDyqtX9AAAAcA"]
[Sun Mar 01 18:06:16.200941 2026] [:error] [pid 7165:tid 7168] [client 20.220.232.101:10212] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rh.php"] [unique_id "aaQPmBRjCrA8qWBjgG-dmgAAAkE"]
[Sun Mar 01 19:00:05.148234 2026] [proxy_fcgi:error] [pid 40750:tid 40753] [client 20.63.80.2:23489] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 19:00:05.363149 2026] [proxy_fcgi:error] [pid 40750:tid 40775] [client 20.63.80.2:23489] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 19:00:05.776573 2026] [:error] [pid 40750:tid 40773] [client 20.63.80.2:23489] [client 20.63.80.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aaQcNQfBuk03yQKDyqubUAAAAdQ"]
[Sun Mar 01 19:00:06.619927 2026] [proxy_fcgi:error] [pid 33822:tid 33833] [client 20.63.80.2:23502] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 19:00:07.042107 2026] [proxy_fcgi:error] [pid 33822:tid 33845] [client 20.63.80.2:23502] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 19:00:07.473887 2026] [proxy_fcgi:error] [pid 33822:tid 33826] [client 20.63.80.2:23502] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 19:00:08.154286 2026] [:error] [pid 33822:tid 33830] [client 20.63.80.2:23502] [client 20.63.80.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aaQcOG6W3ygu1YVssub8oQAAAoY"]
[Sun Mar 01 19:00:09.001170 2026] [:error] [pid 44644:tid 44664] [client 20.63.80.2:23511] [client 20.63.80.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aaQcOJ3RJaXMcw3y9V_PkwAAABE"]
[Sun Mar 01 19:00:09.834532 2026] [:error] [pid 7165:tid 7178] [client 20.63.80.2:23432] [client 20.63.80.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aaQcORRjCrA8qWBjgG_OIgAAAks"]
[Sun Mar 01 19:00:10.669519 2026] [:error] [pid 33822:tid 33834] [client 20.63.80.2:23492] [client 20.63.80.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aaQcOm6W3ygu1YVssub8rQAAAoo"]
[Sun Mar 01 19:07:20.419678 2026] [:error] [pid 40750:tid 40775] [client 143.198.35.6:58927] [client 143.198.35.6] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env"] [unique_id "aaQd6AfBuk03yQKDyqulAQAAAdY"]
[Sun Mar 01 19:07:20.853082 2026] [:error] [pid 38241:tid 38252] [client 143.198.35.6:59100] [client 143.198.35.6] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.example"] [unique_id "aaQd6PKRPk6YnJBxw_zPSAAAAMg"]
[Sun Mar 01 19:07:21.281215 2026] [:error] [pid 40750:tid 40756] [client 143.198.35.6:59300] [client 143.198.35.6] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.bak"] [unique_id "aaQd6QfBuk03yQKDyqulCAAAAcM"]
[Sun Mar 01 19:07:21.713228 2026] [:error] [pid 40750:tid 40765] [client 143.198.35.6:59496] [client 143.198.35.6] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.php"] [unique_id "aaQd6QfBuk03yQKDyqulCwAAAcw"]
[Sun Mar 01 19:07:22.148960 2026] [:error] [pid 33822:tid 33830] [client 143.198.35.6:59715] [client 143.198.35.6] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.backup"] [unique_id "aaQd6m6W3ygu1YVssub-NQAAAoY"]
[Sun Mar 01 19:07:22.587287 2026] [:error] [pid 7133:tid 7137] [client 143.198.35.6:59889] [client 143.198.35.6] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.old"] [unique_id "aaQd6vCtubh8pR64qB8UHgAAAEI"]
[Sun Mar 01 19:07:23.005809 2026] [:error] [pid 38241:tid 38265] [client 143.198.35.6:60032] [client 143.198.35.6] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.save"] [unique_id "aaQd6_KRPk6YnJBxw_zPUAAAANU"]
[Sun Mar 01 19:07:23.429535 2026] [:error] [pid 38241:tid 38246] [client 143.198.35.6:60161] [client 143.198.35.6] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.local"] [unique_id "aaQd6_KRPk6YnJBxw_zPVQAAAMI"]
[Sun Mar 01 19:07:23.862893 2026] [:error] [pid 40750:tid 40760] [client 143.198.35.6:60274] [client 143.198.35.6] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.production"] [unique_id "aaQd6wfBuk03yQKDyqulEQAAAcc"]
[Sun Mar 01 19:07:24.297832 2026] [:error] [pid 40750:tid 40754] [client 143.198.35.6:60426] [client 143.198.35.6] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.development"] [unique_id "aaQd7AfBuk03yQKDyqulFAAAAcE"]
[Sun Mar 01 19:07:24.714985 2026] [:error] [pid 7165:tid 7167] [client 143.198.35.6:60531] [client 143.198.35.6] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.staging"] [unique_id "aaQd7BRjCrA8qWBjgG_T-AAAAkA"]
[Sun Mar 01 19:07:25.140267 2026] [:error] [pid 7165:tid 7189] [client 143.198.35.6:60626] [client 143.198.35.6] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.test"] [unique_id "aaQd7RRjCrA8qWBjgG_T_QAAAlY"]
[Sun Mar 01 19:07:25.556761 2026] [:error] [pid 40750:tid 40756] [client 143.198.35.6:60703] [client 143.198.35.6] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.docker"] [unique_id "aaQd7QfBuk03yQKDyqulGQAAAcM"]
[Sun Mar 01 19:07:25.971337 2026] [:error] [pid 7165:tid 7178] [client 143.198.35.6:60768] [client 143.198.35.6] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.docker.local"] [unique_id "aaQd7RRjCrA8qWBjgG_UBQAAAks"]
[Sun Mar 01 19:07:26.388406 2026] [:error] [pid 7165:tid 7185] [client 143.198.35.6:60826] [client 143.198.35.6] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/public/.env"] [unique_id "aaQd7hRjCrA8qWBjgG_UCQAAAlI"]
[Sun Mar 01 19:07:26.802937 2026] [:error] [pid 7133:tid 7140] [client 143.198.35.6:60873] [client 143.198.35.6] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/public_html/.env"] [unique_id "aaQd7vCtubh8pR64qB8UKAAAAEU"]
[Sun Mar 01 19:07:27.218052 2026] [:error] [pid 40750:tid 40763] [client 143.198.35.6:60924] [client 143.198.35.6] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/laravel/.env"] [unique_id "aaQd7wfBuk03yQKDyqulJgAAAco"]
[Sun Mar 01 19:07:27.637660 2026] [:error] [pid 40750:tid 40758] [client 143.198.35.6:60962] [client 143.198.35.6] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/app/.env"] [unique_id "aaQd7wfBuk03yQKDyqulLQAAAcU"]
[Sun Mar 01 19:07:28.215593 2026] [:error] [pid 40750:tid 40769] [client 143.198.35.6:61000] [client 143.198.35.6] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/api/.env"] [unique_id "aaQd8AfBuk03yQKDyqulNAAAAdA"]
[Sun Mar 01 19:07:29.026128 2026] [:error] [pid 7133:tid 7148] [client 143.198.35.6:61024] [client 143.198.35.6] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/admin/.env"] [unique_id "aaQd8fCtubh8pR64qB8ULwAAAE0"]
[Sun Mar 01 19:07:29.861640 2026] [:error] [pid 40750:tid 40763] [client 143.198.35.6:61057] [client 143.198.35.6] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/backend/.env"] [unique_id "aaQd8QfBuk03yQKDyqulQgAAAco"]
[Sun Mar 01 19:07:31.210005 2026] [:error] [pid 7165:tid 7180] [client 143.198.35.6:61101] [client 143.198.35.6] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/server/.env"] [unique_id "aaQd8xRjCrA8qWBjgG_UEAAAAk0"]
[Sun Mar 01 19:07:32.447963 2026] [:error] [pid 7165:tid 7174] [client 143.198.35.6:61150] [client 143.198.35.6] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/client/.env"] [unique_id "aaQd9BRjCrA8qWBjgG_UGQAAAkc"]
[Sun Mar 01 19:07:33.685334 2026] [:error] [pid 7133:tid 7137] [client 143.198.35.6:61198] [client 143.198.35.6] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/services/.env"] [unique_id "aaQd9fCtubh8pR64qB8UQgAAAEI"]
[Sun Mar 01 19:07:34.436048 2026] [:error] [pid 40750:tid 40762] [client 143.198.35.6:61235] [client 143.198.35.6] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/service/.env"] [unique_id "aaQd9gfBuk03yQKDyqulYQAAAck"]
[Sun Mar 01 19:07:35.197159 2026] [:error] [pid 7165:tid 7173] [client 143.198.35.6:61289] [client 143.198.35.6] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/dev/.env"] [unique_id "aaQd9xRjCrA8qWBjgG_UJAAAAkY"]
[Sun Mar 01 19:07:35.995023 2026] [:error] [pid 40750:tid 40772] [client 143.198.35.6:61317] [client 143.198.35.6] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/test/.env"] [unique_id "aaQd9wfBuk03yQKDyqulbwAAAdM"]
[Sun Mar 01 19:07:36.614317 2026] [:error] [pid 40750:tid 40776] [client 143.198.35.6:61357] [client 143.198.35.6] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/stage/.env"] [unique_id "aaQd-AfBuk03yQKDyquldgAAAdc"]
[Sun Mar 01 19:07:37.103068 2026] [:error] [pid 40750:tid 40773] [client 143.198.35.6:61436] [client 143.198.35.6] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/staging/.env"] [unique_id "aaQd-QfBuk03yQKDyqulfwAAAdQ"]
[Sun Mar 01 19:07:37.667263 2026] [:error] [pid 7165:tid 7185] [client 143.198.35.6:61495] [client 143.198.35.6] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/prod/.env"] [unique_id "aaQd-RRjCrA8qWBjgG_UMQAAAlI"]
[Sun Mar 01 19:07:40.359408 2026] [:error] [pid 40750:tid 40772] [client 143.198.35.6:61516] [client 143.198.35.6] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/production/.env"] [unique_id "aaQd_AfBuk03yQKDyqulnwAAAdM"]
[Sun Mar 01 19:07:40.853910 2026] [:error] [pid 38241:tid 38263] [client 143.198.35.6:61546] [client 143.198.35.6] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/beta/.env"] [unique_id "aaQd_PKRPk6YnJBxw_zPaQAAANM"]
[Sun Mar 01 19:07:41.461402 2026] [:error] [pid 7165:tid 7183] [client 143.198.35.6:61565] [client 143.198.35.6] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/demo/.env"] [unique_id "aaQd_RRjCrA8qWBjgG_UMwAAAlA"]
[Sun Mar 01 19:07:42.238783 2026] [:error] [pid 37032:tid 37043] [client 143.198.35.6:61667] [client 143.198.35.6] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/live/.env"] [unique_id "aaQd_uu0U4o7eSImsVRukwAAAYk"]
[Sun Mar 01 19:07:42.815703 2026] [:error] [pid 38241:tid 38254] [client 143.198.35.6:61693] [client 143.198.35.6] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/core/.env"] [unique_id "aaQd_vKRPk6YnJBxw_zPbgAAAMo"]
[Sun Mar 01 19:07:43.571206 2026] [:error] [pid 37032:tid 37054] [client 143.198.35.6:61722] [client 143.198.35.6] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/application/.env"] [unique_id "aaQd_-u0U4o7eSImsVRulwAAAZQ"]
[Sun Mar 01 19:07:44.325291 2026] [:error] [pid 37032:tid 37036] [client 143.198.35.6:61749] [client 143.198.35.6] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/html/.env"] [unique_id "aaQeAOu0U4o7eSImsVRunQAAAYI"]
[Sun Mar 01 19:07:44.760498 2026] [:error] [pid 7165:tid 7185] [client 143.198.35.6:61794] [client 143.198.35.6] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/www/.env"] [unique_id "aaQeABRjCrA8qWBjgG_UPgAAAlI"]
[Sun Mar 01 19:07:45.177961 2026] [:error] [pid 7165:tid 7189] [client 143.198.35.6:61877] [client 143.198.35.6] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/web/.env"] [unique_id "aaQeARRjCrA8qWBjgG_URQAAAlY"]
[Sun Mar 01 19:07:45.595216 2026] [:error] [pid 7165:tid 7171] [client 143.198.35.6:61949] [client 143.198.35.6] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/var/.env"] [unique_id "aaQeARRjCrA8qWBjgG_UYAAAAkQ"]
[Sun Mar 01 19:07:46.013102 2026] [:error] [pid 7133:tid 7145] [client 143.198.35.6:61995] [client 143.198.35.6] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/tmp/.env"] [unique_id "aaQeAvCtubh8pR64qB8UYgAAAEo"]
[Sun Mar 01 19:29:49.328097 2026] [proxy_fcgi:error] [pid 41780:tid 41797] [client 20.104.206.150:53185] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 19:29:49.540821 2026] [proxy_fcgi:error] [pid 41780:tid 41792] [client 20.104.206.150:53185] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 19:29:49.749593 2026] [proxy_fcgi:error] [pid 41780:tid 41791] [client 20.104.206.150:53185] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 19:29:49.966951 2026] [proxy_fcgi:error] [pid 41780:tid 41785] [client 20.104.206.150:53185] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 19:29:50.176557 2026] [proxy_fcgi:error] [pid 41780:tid 41793] [client 20.104.206.150:53185] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 19:29:50.388933 2026] [proxy_fcgi:error] [pid 41780:tid 41796] [client 20.104.206.150:53185] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 19:29:50.598631 2026] [proxy_fcgi:error] [pid 41780:tid 41800] [client 20.104.206.150:53185] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 19:29:50.809839 2026] [proxy_fcgi:error] [pid 41780:tid 41789] [client 20.104.206.150:53185] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 19:29:51.019820 2026] [proxy_fcgi:error] [pid 41780:tid 41798] [client 20.104.206.150:53185] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 19:29:51.231034 2026] [proxy_fcgi:error] [pid 41780:tid 41786] [client 20.104.206.150:53185] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 19:29:51.436723 2026] [:error] [pid 41780:tid 41803] [client 20.104.206.150:53185] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-configss.php"] [unique_id "aaQjL8ONkVoocLIqzy0kTgAAA9Q"]
[Sun Mar 01 19:29:51.857155 2026] [:error] [pid 7165:tid 7167] [client 20.104.206.150:63129] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-configss.php"] [unique_id "aaQjLxRjCrA8qWBjgG_qMQAAAkA"]
[Sun Mar 01 19:29:52.303923 2026] [:error] [pid 33822:tid 33842] [client 20.104.206.150:17298] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-configss.php"] [unique_id "aaQjMG6W3ygu1YVssuYDygAAApI"]
[Sun Mar 01 19:29:52.722254 2026] [:error] [pid 7165:tid 7173] [client 20.104.206.150:63112] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-configss.php"] [unique_id "aaQjMBRjCrA8qWBjgG_qNAAAAkY"]
[Sun Mar 01 19:29:53.185819 2026] [:error] [pid 38241:tid 38256] [client 20.104.206.150:53231] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/yanz.php"] [unique_id "aaQjMfKRPk6YnJBxw_zbhgAAAMw"]
[Sun Mar 01 19:29:53.613783 2026] [:error] [pid 38241:tid 38260] [client 20.104.206.150:65276] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/yanz.php"] [unique_id "aaQjMfKRPk6YnJBxw_zbhwAAANA"]
[Sun Mar 01 19:29:54.038732 2026] [:error] [pid 38241:tid 38259] [client 20.104.206.150:53194] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/yanz.php"] [unique_id "aaQjMvKRPk6YnJBxw_zbjAAAAM8"]
[Sun Mar 01 19:29:54.467902 2026] [:error] [pid 40750:tid 40763] [client 20.104.206.150:65234] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/yanz.php"] [unique_id "aaQjMgfBuk03yQKDyqvD0wAAAco"]
[Sun Mar 01 19:29:54.886812 2026] [:error] [pid 38241:tid 38249] [client 20.104.206.150:63135] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file.phpa"] [unique_id "aaQjMvKRPk6YnJBxw_zbjwAAAMU"]
[Sun Mar 01 19:29:55.403839 2026] [:error] [pid 7165:tid 7172] [client 20.104.206.150:51400] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file.phpa"] [unique_id "aaQjMxRjCrA8qWBjgG_qRgAAAkU"]
[Sun Mar 01 19:29:55.812273 2026] [:error] [pid 7165:tid 7168] [client 20.104.206.150:51453] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file.phpa"] [unique_id "aaQjMxRjCrA8qWBjgG_qSgAAAkE"]
[Sun Mar 01 19:29:56.224123 2026] [:error] [pid 38241:tid 38250] [client 20.104.206.150:53212] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file.phpa"] [unique_id "aaQjNPKRPk6YnJBxw_zbkAAAAMY"]
[Sun Mar 01 19:29:56.638687 2026] [:error] [pid 38241:tid 38246] [client 20.104.206.150:46471] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/defaults.php"] [unique_id "aaQjNPKRPk6YnJBxw_zblAAAAMI"]
[Sun Mar 01 19:29:57.056284 2026] [:error] [pid 38241:tid 38255] [client 20.104.206.150:65216] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/defaults.php"] [unique_id "aaQjNfKRPk6YnJBxw_zbmQAAAMs"]
[Sun Mar 01 19:29:57.476058 2026] [:error] [pid 38034:tid 38039] [client 20.104.206.150:17334] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/defaults.php"] [unique_id "aaQjNQxtfZjwlJok9K8CRwAAAQM"]
[Sun Mar 01 19:29:57.902167 2026] [:error] [pid 33822:tid 33825] [client 20.104.206.150:17281] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/defaults.php"] [unique_id "aaQjNW6W3ygu1YVssuYD1AAAAoE"]
[Sun Mar 01 19:29:58.354350 2026] [:error] [pid 38241:tid 38260] [client 20.104.206.150:65261] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/im.php"] [unique_id "aaQjNvKRPk6YnJBxw_zbqgAAANA"]
[Sun Mar 01 19:29:58.825425 2026] [:error] [pid 38034:tid 38056] [client 20.104.206.150:17301] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/im.php"] [unique_id "aaQjNgxtfZjwlJok9K8CSAAAARI"]
[Sun Mar 01 19:29:59.263349 2026] [:error] [pid 7133:tid 7136] [client 20.104.206.150:46469] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/im.php"] [unique_id "aaQjN_Ctubh8pR64qB8c2AAAAEE"]
[Sun Mar 01 19:29:59.722017 2026] [:error] [pid 41780:tid 41802] [client 20.104.206.150:46470] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/im.php"] [unique_id "aaQjN8ONkVoocLIqzy0kUQAAA9M"]
[Sun Mar 01 19:30:00.139803 2026] [:error] [pid 37032:tid 37055] [client 20.104.206.150:17325] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-comments-post.php"] [unique_id "aaQjOOu0U4o7eSImsVRxpQAAAZU"]
[Sun Mar 01 19:30:00.624260 2026] [:error] [pid 7165:tid 7169] [client 20.104.206.150:53222] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-comments-post.php"] [unique_id "aaQjOBRjCrA8qWBjgG_qcwAAAkI"]
[Sun Mar 01 19:30:01.045660 2026] [:error] [pid 41342:tid 41357] [client 20.104.206.150:51426] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-comments-post.php"] [unique_id "aaQjOY4iJ6RAS5CatDlYGQAAAgw"]
[Sun Mar 01 19:30:01.510581 2026] [:error] [pid 7165:tid 7181] [client 20.104.206.150:51417] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-comments-post.php"] [unique_id "aaQjORRjCrA8qWBjgG_qfQAAAk4"]
[Sun Mar 01 19:30:01.963507 2026] [:error] [pid 7165:tid 7184] [client 20.104.206.150:53211] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cache-compat.php"] [unique_id "aaQjORRjCrA8qWBjgG_qgQAAAlE"]
[Sun Mar 01 19:30:02.414629 2026] [:error] [pid 38241:tid 38264] [client 20.104.206.150:51433] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cache-compat.php"] [unique_id "aaQjOvKRPk6YnJBxw_zbsAAAANQ"]
[Sun Mar 01 19:30:02.871803 2026] [:error] [pid 7165:tid 7186] [client 20.104.206.150:17293] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cache-compat.php"] [unique_id "aaQjOhRjCrA8qWBjgG_qiAAAAlM"]
[Sun Mar 01 19:30:03.341592 2026] [:error] [pid 7165:tid 7170] [client 20.104.206.150:65255] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cache-compat.php"] [unique_id "aaQjOxRjCrA8qWBjgG_qiwAAAkM"]
[Sun Mar 01 19:30:03.840732 2026] [:error] [pid 40750:tid 40764] [client 20.104.206.150:17331] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fw.php"] [unique_id "aaQjOwfBuk03yQKDyqvD3gAAAcs"]
[Sun Mar 01 19:30:04.343817 2026] [:error] [pid 37032:tid 37036] [client 20.104.206.150:17312] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fw.php"] [unique_id "aaQjPOu0U4o7eSImsVRxrAAAAYI"]
[Sun Mar 01 19:30:05.001483 2026] [:error] [pid 7165:tid 7175] [client 20.104.206.150:53199] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fw.php"] [unique_id "aaQjPRRjCrA8qWBjgG_qmAAAAkg"]
[Sun Mar 01 19:30:05.452184 2026] [:error] [pid 33822:tid 33832] [client 20.104.206.150:51393] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fw.php"] [unique_id "aaQjPW6W3ygu1YVssuYD5QAAAog"]
[Sun Mar 01 19:30:05.875188 2026] [:error] [pid 33822:tid 33826] [client 20.104.206.150:53725] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/berlin.php"] [unique_id "aaQjPW6W3ygu1YVssuYD6AAAAoI"]
[Sun Mar 01 19:30:06.292759 2026] [:error] [pid 7165:tid 7169] [client 20.104.206.150:17283] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/berlin.php"] [unique_id "aaQjPhRjCrA8qWBjgG_qogAAAkI"]
[Sun Mar 01 19:30:06.776818 2026] [:error] [pid 33822:tid 33841] [client 20.104.206.150:51427] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/berlin.php"] [unique_id "aaQjPm6W3ygu1YVssuYD6wAAApE"]
[Sun Mar 01 19:30:07.237592 2026] [:error] [pid 33822:tid 33844] [client 20.104.206.150:63147] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/berlin.php"] [unique_id "aaQjP26W3ygu1YVssuYD7QAAApQ"]
[Sun Mar 01 19:30:07.749434 2026] [:error] [pid 33822:tid 33839] [client 20.104.206.150:17315] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/abe.php"] [unique_id "aaQjP26W3ygu1YVssuYD8QAAAo8"]
[Sun Mar 01 19:30:08.214194 2026] [:error] [pid 7133:tid 7146] [client 20.104.206.150:17309] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/abe.php"] [unique_id "aaQjQPCtubh8pR64qB8c4QAAAEs"]
[Sun Mar 01 19:30:08.735955 2026] [:error] [pid 7133:tid 7158] [client 20.104.206.150:51414] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/abe.php"] [unique_id "aaQjQPCtubh8pR64qB8c5AAAAFc"]
[Sun Mar 01 19:30:09.226777 2026] [:error] [pid 7165:tid 7183] [client 20.104.206.150:63120] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/abe.php"] [unique_id "aaQjQRRjCrA8qWBjgG_quAAAAlA"]
[Sun Mar 01 19:30:09.659018 2026] [:error] [pid 40750:tid 40764] [client 20.104.206.150:53207] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/otuz1.php"] [unique_id "aaQjQQfBuk03yQKDyqvD6wAAAcs"]
[Sun Mar 01 19:30:10.102109 2026] [:error] [pid 7165:tid 7185] [client 20.104.206.150:17307] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/otuz1.php"] [unique_id "aaQjQhRjCrA8qWBjgG_qyQAAAlI"]
[Sun Mar 01 19:30:10.537893 2026] [:error] [pid 7165:tid 7171] [client 20.104.206.150:46467] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/otuz1.php"] [unique_id "aaQjQhRjCrA8qWBjgG_q0AAAAkQ"]
[Sun Mar 01 19:30:10.970504 2026] [:error] [pid 7133:tid 7153] [client 20.104.206.150:51443] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/otuz1.php"] [unique_id "aaQjQvCtubh8pR64qB8c5wAAAFI"]
[Sun Mar 01 19:30:11.386398 2026] [:error] [pid 7165:tid 7177] [client 20.104.206.150:63131] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-files.php"] [unique_id "aaQjQxRjCrA8qWBjgG_q3AAAAko"]
[Sun Mar 01 19:30:11.804950 2026] [:error] [pid 33822:tid 33847] [client 20.104.206.150:46522] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-files.php"] [unique_id "aaQjQ26W3ygu1YVssuYD-gAAApc"]
[Sun Mar 01 19:30:12.226519 2026] [:error] [pid 40750:tid 40765] [client 20.104.206.150:65275] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-files.php"] [unique_id "aaQjRAfBuk03yQKDyqvD-AAAAcw"]
[Sun Mar 01 19:30:12.654482 2026] [:error] [pid 38241:tid 38264] [client 20.104.206.150:54487] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-files.php"] [unique_id "aaQjRPKRPk6YnJBxw_zbwQAAANQ"]
[Sun Mar 01 19:30:13.081479 2026] [:error] [pid 7165:tid 7172] [client 20.104.206.150:46493] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aj.php"] [unique_id "aaQjRRRjCrA8qWBjgG_q5gAAAkU"]
[Sun Mar 01 19:30:13.499986 2026] [:error] [pid 38034:tid 38043] [client 20.104.206.150:51413] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aj.php"] [unique_id "aaQjRQxtfZjwlJok9K8CTAAAAQU"]
[Sun Mar 01 19:30:13.935008 2026] [:error] [pid 40750:tid 40760] [client 20.104.206.150:63158] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aj.php"] [unique_id "aaQjRQfBuk03yQKDyqvEBQAAAcc"]
[Sun Mar 01 19:30:14.433216 2026] [:error] [pid 40750:tid 40763] [client 20.104.206.150:65252] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aj.php"] [unique_id "aaQjRgfBuk03yQKDyqvECgAAAco"]
[Sun Mar 01 19:30:14.859237 2026] [:error] [pid 40750:tid 40755] [client 20.104.206.150:46472] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/he.php"] [unique_id "aaQjRgfBuk03yQKDyqvEDwAAAcI"]
[Sun Mar 01 19:30:15.277314 2026] [:error] [pid 40750:tid 40753] [client 20.104.206.150:65279] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/he.php"] [unique_id "aaQjRwfBuk03yQKDyqvEFgAAAcA"]
[Sun Mar 01 19:30:15.704905 2026] [:error] [pid 40750:tid 40756] [client 20.104.206.150:53193] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/he.php"] [unique_id "aaQjRwfBuk03yQKDyqvEHAAAAcM"]
[Sun Mar 01 19:30:16.127375 2026] [:error] [pid 40750:tid 40770] [client 20.104.206.150:53238] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/he.php"] [unique_id "aaQjSAfBuk03yQKDyqvEIgAAAdE"]
[Sun Mar 01 19:30:16.540404 2026] [:error] [pid 40750:tid 40763] [client 20.104.206.150:65222] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cache.php"] [unique_id "aaQjSAfBuk03yQKDyqvEKQAAAco"]
[Sun Mar 01 19:30:16.955260 2026] [:error] [pid 40750:tid 40765] [client 20.104.206.150:17308] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cache.php"] [unique_id "aaQjSAfBuk03yQKDyqvELwAAAcw"]
[Sun Mar 01 19:30:17.400539 2026] [:error] [pid 7133:tid 7138] [client 20.104.206.150:17304] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cache.php"] [unique_id "aaQjSfCtubh8pR64qB8c7gAAAEM"]
[Sun Mar 01 19:30:17.841141 2026] [:error] [pid 40750:tid 40772] [client 20.104.206.150:51430] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cache.php"] [unique_id "aaQjSQfBuk03yQKDyqvEOgAAAdM"]
[Sun Mar 01 19:30:18.278889 2026] [:error] [pid 38241:tid 38262] [client 20.104.206.150:46526] [client 20.104.206.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dwelectservices.com.au"] [uri "/tiny.php"] [unique_id "aaQjSvKRPk6YnJBxw_zbxAAAANI"]
[Sun Mar 01 19:30:18.890091 2026] [:error] [pid 7165:tid 7183] [client 20.104.206.150:17310] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-load.php"] [unique_id "aaQjShRjCrA8qWBjgG_rAgAAAlA"]
[Sun Mar 01 19:30:19.369515 2026] [:error] [pid 7165:tid 7171] [client 20.104.206.150:53236] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-load.php"] [unique_id "aaQjSxRjCrA8qWBjgG_rBgAAAkQ"]
[Sun Mar 01 19:30:19.951874 2026] [:error] [pid 7165:tid 7170] [client 20.104.206.150:65217] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-load.php"] [unique_id "aaQjSxRjCrA8qWBjgG_rCAAAAkM"]
[Sun Mar 01 19:30:20.422925 2026] [:error] [pid 40750:tid 40771] [client 20.104.206.150:53232] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-load.php"] [unique_id "aaQjTAfBuk03yQKDyqvETQAAAdI"]
[Sun Mar 01 19:30:20.875718 2026] [:error] [pid 7165:tid 7179] [client 20.104.206.150:51407] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/blog.php"] [unique_id "aaQjTBRjCrA8qWBjgG_rDwAAAkw"]
[Sun Mar 01 19:30:21.314460 2026] [:error] [pid 38241:tid 38249] [client 20.104.206.150:56714] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/blog.php"] [unique_id "aaQjTfKRPk6YnJBxw_zbygAAAMU"]
[Sun Mar 01 19:30:21.778923 2026] [:error] [pid 40750:tid 40777] [client 20.104.206.150:17295] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/blog.php"] [unique_id "aaQjTQfBuk03yQKDyqvEWwAAAdg"]
[Sun Mar 01 19:30:22.467939 2026] [:error] [pid 7165:tid 7167] [client 20.104.206.150:17291] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/blog.php"] [unique_id "aaQjThRjCrA8qWBjgG_rGwAAAkA"]
[Sun Mar 01 19:30:23.127712 2026] [:error] [pid 7165:tid 7183] [client 20.104.206.150:17286] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/alfanew.php7"] [unique_id "aaQjTxRjCrA8qWBjgG_rIAAAAlA"]
[Sun Mar 01 19:30:23.935050 2026] [:error] [pid 7165:tid 7175] [client 20.104.206.150:56730] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/alfanew.php7"] [unique_id "aaQjTxRjCrA8qWBjgG_rOgAAAkg"]
[Sun Mar 01 19:30:24.518251 2026] [:error] [pid 38241:tid 38259] [client 20.104.206.150:63139] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/alfanew.php7"] [unique_id "aaQjUPKRPk6YnJBxw_zbywAAAM8"]
[Sun Mar 01 19:30:25.206214 2026] [:error] [pid 38241:tid 38265] [client 20.104.206.150:63106] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/alfanew.php7"] [unique_id "aaQjUfKRPk6YnJBxw_zb0AAAANU"]
[Sun Mar 01 19:30:26.127803 2026] [:error] [pid 7165:tid 7174] [client 20.104.206.150:63133] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lufix.php"] [unique_id "aaQjUhRjCrA8qWBjgG_rXQAAAkc"]
[Sun Mar 01 19:30:26.938097 2026] [:error] [pid 7165:tid 7184] [client 20.104.206.150:17305] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lufix.php"] [unique_id "aaQjUhRjCrA8qWBjgG_rZQAAAlE"]
[Sun Mar 01 19:30:27.763533 2026] [:error] [pid 44644:tid 44662] [client 20.104.206.150:65220] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lufix.php"] [unique_id "aaQjU53RJaXMcw3y9V_SXwAAAA8"]
[Sun Mar 01 19:30:28.602189 2026] [:error] [pid 33822:tid 33846] [client 20.104.206.150:63132] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lufix.php"] [unique_id "aaQjVG6W3ygu1YVssuYEAQAAApY"]
[Sun Mar 01 19:30:29.861505 2026] [:error] [pid 7133:tid 7144] [client 20.104.206.150:53204] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ajax-actions.php"] [unique_id "aaQjVfCtubh8pR64qB8c9gAAAEk"]
[Sun Mar 01 19:30:30.960128 2026] [:error] [pid 7165:tid 7178] [client 20.104.206.150:17289] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ajax-actions.php"] [unique_id "aaQjVhRjCrA8qWBjgG_regAAAks"]
[Sun Mar 01 19:30:31.792195 2026] [:error] [pid 40750:tid 40757] [client 20.104.206.150:63146] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ajax-actions.php"] [unique_id "aaQjVwfBuk03yQKDyqvEjgAAAcQ"]
[Sun Mar 01 19:30:32.707544 2026] [:error] [pid 40750:tid 40776] [client 20.104.206.150:53220] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ajax-actions.php"] [unique_id "aaQjWAfBuk03yQKDyqvElQAAAdc"]
[Sun Mar 01 19:30:33.282521 2026] [:error] [pid 40750:tid 40759] [client 20.104.206.150:43593] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/alfa-rex.php7"] [unique_id "aaQjWQfBuk03yQKDyqvEngAAAcY"]
[Sun Mar 01 19:30:33.859118 2026] [:error] [pid 7133:tid 7142] [client 20.104.206.150:65271] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/alfa-rex.php7"] [unique_id "aaQjWfCtubh8pR64qB8c_wAAAEc"]
[Sun Mar 01 19:30:34.773236 2026] [:error] [pid 40750:tid 40761] [client 20.104.206.150:51443] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/alfa-rex.php7"] [unique_id "aaQjWgfBuk03yQKDyqvEsAAAAcg"]
[Sun Mar 01 19:30:36.163254 2026] [:error] [pid 40750:tid 40772] [client 20.104.206.150:51408] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/alfa-rex.php7"] [unique_id "aaQjXAfBuk03yQKDyqvEwAAAAdM"]
[Sun Mar 01 19:30:36.717769 2026] [:error] [pid 40750:tid 40757] [client 20.104.206.150:63118] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cc.php"] [unique_id "aaQjXAfBuk03yQKDyqvExQAAAcQ"]
[Sun Mar 01 19:30:38.168093 2026] [:error] [pid 7165:tid 7171] [client 20.104.206.150:46497] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cc.php"] [unique_id "aaQjXhRjCrA8qWBjgG_rlgAAAkQ"]
[Sun Mar 01 19:30:38.869487 2026] [:error] [pid 40750:tid 40757] [client 20.104.206.150:62598] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cc.php"] [unique_id "aaQjXgfBuk03yQKDyqvE0QAAAcQ"]
[Sun Mar 01 19:30:39.961836 2026] [:error] [pid 7165:tid 7169] [client 20.104.206.150:46503] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cc.php"] [unique_id "aaQjXxRjCrA8qWBjgG_roQAAAkI"]
[Sun Mar 01 19:30:40.748316 2026] [:error] [pid 33822:tid 33834] [client 20.104.206.150:51409] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bypass.php"] [unique_id "aaQjYG6W3ygu1YVssuYEBwAAAoo"]
[Sun Mar 01 19:30:41.381474 2026] [:error] [pid 33822:tid 33824] [client 20.104.206.150:65232] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bypass.php"] [unique_id "aaQjYW6W3ygu1YVssuYECwAAAoA"]
[Sun Mar 01 19:30:42.388746 2026] [:error] [pid 38034:tid 38052] [client 20.104.206.150:53226] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bypass.php"] [unique_id "aaQjYgxtfZjwlJok9K8CWAAAAQ4"]
[Sun Mar 01 19:30:43.778700 2026] [:error] [pid 40750:tid 40773] [client 20.104.206.150:51402] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bypass.php"] [unique_id "aaQjYwfBuk03yQKDyqvE5wAAAdQ"]
[Sun Mar 01 19:30:45.090177 2026] [:error] [pid 7165:tid 7172] [client 20.104.206.150:65244] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/browse.php"] [unique_id "aaQjZRRjCrA8qWBjgG_rrQAAAkU"]
[Sun Mar 01 19:30:45.654113 2026] [:error] [pid 7165:tid 7177] [client 20.104.206.150:43640] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/browse.php"] [unique_id "aaQjZRRjCrA8qWBjgG_rtgAAAko"]
[Sun Mar 01 19:30:46.266263 2026] [:error] [pid 38241:tid 38265] [client 20.104.206.150:17317] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/browse.php"] [unique_id "aaQjZvKRPk6YnJBxw_zb7QAAANU"]
[Sun Mar 01 19:30:46.888118 2026] [:error] [pid 40750:tid 40759] [client 20.104.206.150:56746] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/browse.php"] [unique_id "aaQjZgfBuk03yQKDyqvE6gAAAcY"]
[Sun Mar 01 19:30:47.851171 2026] [:error] [pid 40750:tid 40764] [client 20.104.206.150:46498] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/license.php"] [unique_id "aaQjZwfBuk03yQKDyqvE8gAAAcs"]
[Sun Mar 01 19:30:48.587912 2026] [:error] [pid 40750:tid 40774] [client 20.104.206.150:53205] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/license.php"] [unique_id "aaQjaAfBuk03yQKDyqvE-AAAAdU"]
[Sun Mar 01 19:30:50.294499 2026] [:error] [pid 33822:tid 33832] [client 20.104.206.150:53186] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/license.php"] [unique_id "aaQjam6W3ygu1YVssuYEFgAAAog"]
[Sun Mar 01 19:30:51.246280 2026] [proxy_fcgi:error] [pid 44644:tid 44652] [client 20.104.206.150:46527] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 19:30:51.471828 2026] [proxy_fcgi:error] [pid 44644:tid 44647] [client 20.104.206.150:46527] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 19:30:51.681354 2026] [proxy_fcgi:error] [pid 44644:tid 44663] [client 20.104.206.150:46527] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 19:30:51.892293 2026] [proxy_fcgi:error] [pid 44644:tid 44658] [client 20.104.206.150:46527] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 19:30:52.103470 2026] [proxy_fcgi:error] [pid 44644:tid 44670] [client 20.104.206.150:46527] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 21:35:41.130190 2026] [:error] [pid 38241:tid 38253] [client 35.221.56.18:49364] [client 35.221.56.18] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.221.56.18, incrementing ddos counter"] [hostname "dwelectservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aaRArfKRPk6YnJBxw_wccQAAAMk"]
[Sun Mar 01 21:35:41.140302 2026] [proxy_fcgi:error] [pid 38241:tid 38253] [client 35.221.56.18:49364] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 21:35:43.592312 2026] [:error] [pid 38241:tid 38252] [client 35.221.56.18:49364] [client 35.221.56.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aaRAr_KRPk6YnJBxw_wchwAAAMg"]
[Sun Mar 01 21:35:44.073067 2026] [:error] [pid 7165:tid 7180] [client 35.221.56.18:64811] [client 35.221.56.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aaRAsBRjCrA8qWBjgG9MPQAAAk0"]
[Sun Mar 01 21:35:44.623455 2026] [:error] [pid 40750:tid 40774] [client 35.221.56.18:61025] [client 35.221.56.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aaRAsAfBuk03yQKDyqtLHwAAAdU"]
[Sun Mar 01 21:35:45.085781 2026] [:error] [pid 40750:tid 40756] [client 35.221.56.18:49916] [client 35.221.56.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aaRAsQfBuk03yQKDyqtLIQAAAcM"]
[Sun Mar 01 21:35:45.538486 2026] [:error] [pid 37032:tid 37055] [client 35.221.56.18:53157] [client 35.221.56.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aaRAseu0U4o7eSImsVSCTwAAAZU"]
[Sun Mar 01 21:35:45.993496 2026] [:error] [pid 7165:tid 7184] [client 35.221.56.18:58484] [client 35.221.56.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aaRAsRRjCrA8qWBjgG9MQwAAAlE"]
[Sun Mar 01 21:35:46.443359 2026] [:error] [pid 7165:tid 7172] [client 35.221.56.18:63542] [client 35.221.56.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aaRAshRjCrA8qWBjgG9MRQAAAkU"]
[Sun Mar 01 21:56:31.732597 2026] [:error] [pid 38241:tid 38244] [client 20.63.80.2:22545] [client 20.63.80.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-corn-sample.php"] [unique_id "aaRFj_KRPk6YnJBxw_wleAAAAMA"]
[Sun Mar 01 21:56:32.562694 2026] [:error] [pid 7165:tid 7170] [client 20.63.80.2:23115] [client 20.63.80.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-corn-sample.php"] [unique_id "aaRFkBRjCrA8qWBjgG9eSwAAAkM"]
[Sun Mar 01 21:56:33.412925 2026] [:error] [pid 40750:tid 40768] [client 20.63.80.2:23113] [client 20.63.80.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-corn-sample.php"] [unique_id "aaRFkQfBuk03yQKDyqtc3gAAAc8"]
[Sun Mar 01 21:56:34.248972 2026] [:error] [pid 40750:tid 40770] [client 20.63.80.2:23108] [client 20.63.80.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-corn-sample.php"] [unique_id "aaRFkgfBuk03yQKDyqtc5wAAAdE"]
[Sun Mar 01 22:01:25.343892 2026] [:error] [pid 38034:tid 38045] [client 20.63.80.2:13387] [client 20.63.80.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wk/index.php"] [unique_id "aaRGtQxtfZjwlJok9K8e5AAAAQc"]
[Sun Mar 01 22:01:26.166959 2026] [:error] [pid 7165:tid 7176] [client 20.63.80.2:13571] [client 20.63.80.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wk/index.php"] [unique_id "aaRGthRjCrA8qWBjgG9jTgAAAkk"]
[Sun Mar 01 22:01:27.003780 2026] [:error] [pid 7165:tid 7183] [client 20.63.80.2:13584] [client 20.63.80.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wk/index.php"] [unique_id "aaRGtxRjCrA8qWBjgG9jVgAAAlA"]
[Sun Mar 01 22:01:27.829472 2026] [:error] [pid 40750:tid 40771] [client 20.63.80.2:13619] [client 20.63.80.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wk/index.php"] [unique_id "aaRGtwfBuk03yQKDyqthIwAAAdI"]
[Sun Mar 01 23:00:13.097970 2026] [:error] [pid 40750:tid 40758] [client 52.138.3.9:19423] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/widgets.sys.php"] [unique_id "aaRUfQfBuk03yQKDyquKWAAAAcU"]
[Sun Mar 01 23:00:13.523126 2026] [:error] [pid 38241:tid 38257] [client 52.138.3.9:19334] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/widgets.sys.php"] [unique_id "aaRUffKRPk6YnJBxw_xDlAAAAM0"]
[Sun Mar 01 23:00:13.959597 2026] [:error] [pid 7133:tid 7155] [client 52.138.3.9:19419] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/widgets.sys.php"] [unique_id "aaRUffCtubh8pR64qB9q2gAAAFQ"]
[Sun Mar 01 23:00:14.424768 2026] [:error] [pid 7133:tid 7139] [client 52.138.3.9:19341] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/widgets.sys.php"] [unique_id "aaRUfvCtubh8pR64qB9q2wAAAEQ"]
[Sun Mar 01 23:00:14.840781 2026] [:error] [pid 7165:tid 7173] [client 52.138.3.9:19404] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/includes/hp2.php"] [unique_id "aaRUfhRjCrA8qWBjgG-cagAAAkY"]
[Sun Mar 01 23:00:15.279241 2026] [:error] [pid 7165:tid 7182] [client 52.138.3.9:19377] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/includes/hp2.php"] [unique_id "aaRUfxRjCrA8qWBjgG-cawAAAk8"]
[Sun Mar 01 23:00:15.780417 2026] [:error] [pid 7165:tid 7178] [client 52.138.3.9:19332] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/includes/hp2.php"] [unique_id "aaRUfxRjCrA8qWBjgG-ccQAAAks"]
[Sun Mar 01 23:00:16.198220 2026] [:error] [pid 7165:tid 7180] [client 52.138.3.9:19451] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/includes/hp2.php"] [unique_id "aaRUgBRjCrA8qWBjgG-ccgAAAk0"]
[Sun Mar 01 23:00:16.773606 2026] [:error] [pid 38034:tid 38050] [client 52.138.3.9:19401] [client 52.138.3.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/jga.php"] [unique_id "aaRUgAxtfZjwlJok9K8qDQAAAQw"]
[Sun Mar 01 23:00:17.315163 2026] [:error] [pid 38034:tid 38046] [client 52.138.3.9:19440] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/vc.php"] [unique_id "aaRUgQxtfZjwlJok9K8qDgAAAQg"]
[Sun Mar 01 23:00:17.792646 2026] [:error] [pid 40750:tid 40754] [client 52.138.3.9:19400] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/vc.php"] [unique_id "aaRUgQfBuk03yQKDyquKYwAAAcE"]
[Sun Mar 01 23:00:18.281797 2026] [:error] [pid 7133:tid 7146] [client 52.138.3.9:19351] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/vc.php"] [unique_id "aaRUgvCtubh8pR64qB9q5QAAAEs"]
[Sun Mar 01 23:00:18.704950 2026] [:error] [pid 40750:tid 40759] [client 52.138.3.9:19344] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/vc.php"] [unique_id "aaRUggfBuk03yQKDyquKZgAAAcY"]
[Sun Mar 01 23:00:19.121526 2026] [:error] [pid 40750:tid 40769] [client 52.138.3.9:19395] [client 52.138.3.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/widgets/widget-cache.php"] [unique_id "aaRUgwfBuk03yQKDyquKagAAAdA"]
[Sun Mar 01 23:00:19.531213 2026] [:error] [pid 40750:tid 40774] [client 52.138.3.9:19346] [client 52.138.3.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/class-wp-json-ajax.php"] [unique_id "aaRUgwfBuk03yQKDyquKbAAAAdU"]
[Sun Mar 01 23:00:19.944933 2026] [:error] [pid 38034:tid 38037] [client 52.138.3.9:19399] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/files/add_gasto.php"] [unique_id "aaRUgwxtfZjwlJok9K8qEQAAAQE"]
[Sun Mar 01 23:00:20.520714 2026] [:error] [pid 7165:tid 7174] [client 52.138.3.9:19421] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/files/add_gasto.php"] [unique_id "aaRUhBRjCrA8qWBjgG-chAAAAkc"]
[Sun Mar 01 23:00:20.946061 2026] [:error] [pid 7165:tid 7181] [client 52.138.3.9:19413] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/files/add_gasto.php"] [unique_id "aaRUhBRjCrA8qWBjgG-ciQAAAk4"]
[Sun Mar 01 23:00:21.357003 2026] [:error] [pid 7165:tid 7184] [client 52.138.3.9:19412] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/uploads/select_file.php"] [unique_id "aaRUhRRjCrA8qWBjgG-cjgAAAlE"]
[Sun Mar 01 23:00:21.788696 2026] [:error] [pid 7165:tid 7185] [client 52.138.3.9:19406] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/uploads/select_file.php"] [unique_id "aaRUhRRjCrA8qWBjgG-clQAAAlI"]
[Sun Mar 01 23:00:22.217896 2026] [:error] [pid 7133:tid 7139] [client 52.138.3.9:19333] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/uploads/select_file.php"] [unique_id "aaRUhvCtubh8pR64qB9q6AAAAEQ"]
[Sun Mar 01 23:00:22.696955 2026] [:error] [pid 40750:tid 40754] [client 52.138.3.9:19448] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/uploads/select_file.php"] [unique_id "aaRUhgfBuk03yQKDyquKcgAAAcE"]
[Sun Mar 01 23:00:23.150666 2026] [:error] [pid 38034:tid 38057] [client 52.138.3.9:19433] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/uploads/select_file2.php"] [unique_id "aaRUhwxtfZjwlJok9K8qFgAAARM"]
[Sun Mar 01 23:00:23.571009 2026] [:error] [pid 7165:tid 7183] [client 52.138.3.9:19339] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/uploads/select_file2.php"] [unique_id "aaRUhxRjCrA8qWBjgG-cngAAAlA"]
[Sun Mar 01 23:00:23.998118 2026] [:error] [pid 7165:tid 7174] [client 52.138.3.9:19408] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/uploads/select_file2.php"] [unique_id "aaRUhxRjCrA8qWBjgG-coQAAAkc"]
[Sun Mar 01 23:00:24.508270 2026] [:error] [pid 7165:tid 7190] [client 52.138.3.9:19441] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/uploads/select_file2.php"] [unique_id "aaRUiBRjCrA8qWBjgG-cpgAAAlc"]
[Sun Mar 01 23:00:24.940471 2026] [:error] [pid 7165:tid 7173] [client 52.138.3.9:19369] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/includes/detmash.php"] [unique_id "aaRUiBRjCrA8qWBjgG-cqgAAAkY"]
[Sun Mar 01 23:00:25.363587 2026] [:error] [pid 41342:tid 41368] [client 52.138.3.9:19331] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/includes/detmash.php"] [unique_id "aaRUiY4iJ6RAS5CatDllaQAAAhc"]
[Sun Mar 01 23:00:25.805944 2026] [:error] [pid 38034:tid 38058] [client 52.138.3.9:19449] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/includes/detmash.php"] [unique_id "aaRUiQxtfZjwlJok9K8qFwAAARQ"]
[Sun Mar 01 23:00:26.254563 2026] [:error] [pid 33822:tid 33827] [client 52.138.3.9:19348] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/includes/detmash.php"] [unique_id "aaRUim6W3ygu1YVssuY6IgAAAoM"]
[Sun Mar 01 23:00:26.676154 2026] [:error] [pid 33822:tid 33831] [client 52.138.3.9:19410] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/files/8.php"] [unique_id "aaRUim6W3ygu1YVssuY6IwAAAoc"]
[Sun Mar 01 23:00:27.098486 2026] [:error] [pid 38241:tid 38257] [client 52.138.3.9:19405] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/files/8.php"] [unique_id "aaRUi_KRPk6YnJBxw_xDuAAAAM0"]
[Sun Mar 01 23:00:27.541951 2026] [:error] [pid 38241:tid 38267] [client 52.138.3.9:19435] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/files/8.php"] [unique_id "aaRUi_KRPk6YnJBxw_xDuwAAANc"]
[Sun Mar 01 23:00:28.146044 2026] [:error] [pid 40750:tid 40768] [client 52.138.3.9:19337] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/files/8.php"] [unique_id "aaRUjAfBuk03yQKDyquKfwAAAc8"]
[Sun Mar 01 23:00:28.621105 2026] [:error] [pid 38241:tid 38262] [client 52.138.3.9:19454] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/files/sh.php"] [unique_id "aaRUjPKRPk6YnJBxw_xDwwAAANI"]
[Sun Mar 01 23:00:29.044362 2026] [:error] [pid 38241:tid 38265] [client 52.138.3.9:19349] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/files/sh.php"] [unique_id "aaRUjfKRPk6YnJBxw_xDywAAANU"]
[Sun Mar 01 23:00:29.555213 2026] [:error] [pid 40750:tid 40764] [client 52.138.3.9:19356] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/files/sh.php"] [unique_id "aaRUjQfBuk03yQKDyquKhgAAAcs"]
[Sun Mar 01 23:00:30.136984 2026] [:error] [pid 38034:tid 38050] [client 52.138.3.9:19393] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/files/sh.php"] [unique_id "aaRUjgxtfZjwlJok9K8qIgAAAQw"]
[Sun Mar 01 23:00:30.611299 2026] [:error] [pid 44644:tid 44667] [client 52.138.3.9:19411] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/files/start.php"] [unique_id "aaRUjp3RJaXMcw3y9V_nugAAABQ"]
[Sun Mar 01 23:00:31.061922 2026] [:error] [pid 33822:tid 33836] [client 52.138.3.9:19439] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/files/start.php"] [unique_id "aaRUj26W3ygu1YVssuY6JgAAAow"]
[Sun Mar 01 23:00:31.510204 2026] [:error] [pid 38034:tid 38053] [client 52.138.3.9:19335] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/files/start.php"] [unique_id "aaRUjwxtfZjwlJok9K8qJQAAAQ8"]
[Sun Mar 01 23:00:31.962197 2026] [:error] [pid 40750:tid 40777] [client 52.138.3.9:19447] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/files/start.php"] [unique_id "aaRUjwfBuk03yQKDyquKiwAAAdg"]
[Sun Mar 01 23:00:32.398031 2026] [:error] [pid 33822:tid 33838] [client 52.138.3.9:19376] [client 52.138.3.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Text/Diff/Renderer/incl.php"] [unique_id "aaRUkG6W3ygu1YVssuY6KQAAAo4"]
[Sun Mar 01 23:00:32.891479 2026] [:error] [pid 41342:tid 41362] [client 52.138.3.9:19379] [client 52.138.3.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/sitemaps/providers.php"] [unique_id "aaRUkI4iJ6RAS5CatDllmQAAAhE"]
[Sun Mar 01 23:00:33.397578 2026] [:error] [pid 44644:tid 44670] [client 52.138.3.9:19424] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/includes/403.php"] [unique_id "aaRUkZ3RJaXMcw3y9V_nvgAAABc"]
[Sun Mar 01 23:00:33.833047 2026] [:error] [pid 37032:tid 37050] [client 52.138.3.9:19446] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/includes/403.php"] [unique_id "aaRUkeu0U4o7eSImsVSPywAAAZA"]
[Sun Mar 01 23:00:34.252155 2026] [:error] [pid 7133:tid 7144] [client 52.138.3.9:19397] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/includes/403.php"] [unique_id "aaRUkvCtubh8pR64qB9rCAAAAEk"]
[Sun Mar 01 23:00:34.767405 2026] [:error] [pid 33822:tid 33826] [client 52.138.3.9:19301] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/includes/403.php"] [unique_id "aaRUkm6W3ygu1YVssuY6KgAAAoI"]
[Sun Mar 01 23:00:35.181620 2026] [:error] [pid 40750:tid 40775] [client 52.138.3.9:19450] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/images/image.php"] [unique_id "aaRUkwfBuk03yQKDyquKjwAAAdY"]
[Sun Mar 01 23:00:35.642680 2026] [:error] [pid 37032:tid 37056] [client 52.138.3.9:19285] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/images/image.php"] [unique_id "aaRUk-u0U4o7eSImsVSPzwAAAZY"]
[Sun Mar 01 23:00:36.243591 2026] [:error] [pid 38241:tid 38255] [client 52.138.3.9:19373] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/images/image.php"] [unique_id "aaRUlPKRPk6YnJBxw_xD2wAAAMs"]
[Sun Mar 01 23:00:36.673117 2026] [:error] [pid 33822:tid 33846] [client 52.138.3.9:19394] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/images/image.php"] [unique_id "aaRUlG6W3ygu1YVssuY6LQAAApY"]
[Sun Mar 01 23:00:37.162325 2026] [:error] [pid 33822:tid 33828] [client 52.138.3.9:19396] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/images/image2.php"] [unique_id "aaRUlW6W3ygu1YVssuY6LwAAAoQ"]
[Sun Mar 01 23:00:37.851863 2026] [:error] [pid 7165:tid 7168] [client 52.138.3.9:19429] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/images/image2.php"] [unique_id "aaRUlRRjCrA8qWBjgG-cuwAAAkE"]
[Sun Mar 01 23:00:38.302012 2026] [:error] [pid 7165:tid 7171] [client 52.138.3.9:19328] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/images/image2.php"] [unique_id "aaRUlhRjCrA8qWBjgG-cvgAAAkQ"]
[Sun Mar 01 23:00:38.872148 2026] [:error] [pid 38034:tid 38055] [client 52.138.3.9:19343] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/images/image2.php"] [unique_id "aaRUlgxtfZjwlJok9K8qLAAAARE"]
[Sun Mar 01 23:00:39.306571 2026] [:error] [pid 40750:tid 40766] [client 52.138.3.9:19282] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/colors/coffee/ws.php"] [unique_id "aaRUlwfBuk03yQKDyquKkwAAAc0"]
[Sun Mar 01 23:00:39.895339 2026] [:error] [pid 7165:tid 7188] [client 52.138.3.9:19436] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/colors/coffee/ws.php"] [unique_id "aaRUlxRjCrA8qWBjgG-c0gAAAlU"]
[Sun Mar 01 23:00:40.343336 2026] [:error] [pid 7165:tid 7178] [client 52.138.3.9:19361] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/colors/coffee/ws.php"] [unique_id "aaRUmBRjCrA8qWBjgG-c1wAAAks"]
[Sun Mar 01 23:00:40.760606 2026] [:error] [pid 38034:tid 38048] [client 52.138.3.9:19275] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/colors/coffee/ws.php"] [unique_id "aaRUmAxtfZjwlJok9K8qLwAAAQo"]
[Sun Mar 01 23:00:41.211913 2026] [:error] [pid 37032:tid 37041] [client 52.138.3.9:19340] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/uploads/mandals.php"] [unique_id "aaRUmeu0U4o7eSImsVSP1gAAAYc"]
[Sun Mar 01 23:00:41.678721 2026] [:error] [pid 40750:tid 40773] [client 52.138.3.9:19347] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/uploads/mandals.php"] [unique_id "aaRUmQfBuk03yQKDyquKlwAAAdQ"]
[Sun Mar 01 23:00:42.220523 2026] [:error] [pid 40750:tid 40753] [client 52.138.3.9:19390] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/uploads/mandals.php"] [unique_id "aaRUmgfBuk03yQKDyquKmQAAAcA"]
[Sun Mar 01 23:00:42.758593 2026] [:error] [pid 7133:tid 7135] [client 52.138.3.9:19455] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/uploads/mandals.php"] [unique_id "aaRUmvCtubh8pR64qB9rHgAAAEA"]
[Sun Mar 01 23:00:43.558495 2026] [:error] [pid 7133:tid 7141] [client 52.138.3.9:19338] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/ws27.php"] [unique_id "aaRUm_Ctubh8pR64qB9rIgAAAEY"]
[Sun Mar 01 23:00:44.015865 2026] [:error] [pid 38241:tid 38254] [client 52.138.3.9:19329] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/ws27.php"] [unique_id "aaRUnPKRPk6YnJBxw_xD7gAAAMo"]
[Sun Mar 01 23:00:44.625981 2026] [:error] [pid 40750:tid 40767] [client 52.138.3.9:19284] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/ws27.php"] [unique_id "aaRUnAfBuk03yQKDyquKnwAAAc4"]
[Sun Mar 01 23:00:45.098323 2026] [:error] [pid 7133:tid 7158] [client 52.138.3.9:19453] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/ws27.php"] [unique_id "aaRUnfCtubh8pR64qB9rKAAAAFc"]
[Sun Mar 01 23:00:45.526352 2026] [:error] [pid 38241:tid 38252] [client 52.138.3.9:19273] [client 52.138.3.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/class-wp-duotone.php"] [unique_id "aaRUnfKRPk6YnJBxw_xD8QAAAMg"]
[Sun Mar 01 23:00:45.948458 2026] [:error] [pid 7133:tid 7145] [client 52.138.3.9:19366] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/files/d.be.brow.php"] [unique_id "aaRUnfCtubh8pR64qB9rKwAAAEo"]
[Sun Mar 01 23:00:46.511858 2026] [:error] [pid 40750:tid 40766] [client 52.138.3.9:19452] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/files/d.be.brow.php"] [unique_id "aaRUngfBuk03yQKDyquKpgAAAc0"]
[Sun Mar 01 23:00:46.932975 2026] [:error] [pid 7165:tid 7179] [client 52.138.3.9:19432] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/files/d.be.brow.php"] [unique_id "aaRUnhRjCrA8qWBjgG-c8gAAAkw"]
[Sun Mar 01 23:00:47.348000 2026] [:error] [pid 40750:tid 40770] [client 52.138.3.9:19385] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/submitticket.php"] [unique_id "aaRUnwfBuk03yQKDyquKrAAAAdE"]
[Sun Mar 01 23:00:47.875407 2026] [:error] [pid 7165:tid 7180] [client 52.138.3.9:19368] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/submitticket.php"] [unique_id "aaRUnxRjCrA8qWBjgG-c-gAAAk0"]
[Sun Mar 01 23:00:48.427203 2026] [:error] [pid 38241:tid 38266] [client 52.138.3.9:19427] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/submitticket.php"] [unique_id "aaRUoPKRPk6YnJBxw_xD-wAAANY"]
[Sun Mar 01 23:00:48.971868 2026] [:error] [pid 40750:tid 40755] [client 52.138.3.9:19414] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/submitticket.php"] [unique_id "aaRUoAfBuk03yQKDyquKsAAAAcI"]
[Sun Mar 01 23:00:49.388825 2026] [:error] [pid 33822:tid 33830] [client 52.138.3.9:19274] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/files/add_evento.php"] [unique_id "aaRUoW6W3ygu1YVssuY6MgAAAoY"]
[Sun Mar 01 23:00:49.860974 2026] [:error] [pid 7165:tid 7176] [client 52.138.3.9:19442] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/files/add_evento.php"] [unique_id "aaRUoRRjCrA8qWBjgG-dAwAAAkk"]
[Sun Mar 01 23:00:50.307936 2026] [:error] [pid 7165:tid 7178] [client 52.138.3.9:19277] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/files/add_evento.php"] [unique_id "aaRUohRjCrA8qWBjgG-dCAAAAks"]
[Sun Mar 01 23:00:50.785093 2026] [:error] [pid 40750:tid 40773] [client 52.138.3.9:19276] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/files/add_evento.php"] [unique_id "aaRUogfBuk03yQKDyquKuQAAAdQ"]
[Sun Mar 01 23:00:51.202763 2026] [:error] [pid 7165:tid 7187] [client 52.138.3.9:19364] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/goods.php"] [unique_id "aaRUoxRjCrA8qWBjgG-dDQAAAlQ"]
[Sun Mar 01 23:00:51.620698 2026] [:error] [pid 7165:tid 7170] [client 52.138.3.9:19388] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/goods.php"] [unique_id "aaRUoxRjCrA8qWBjgG-dEwAAAkM"]
[Sun Mar 01 23:00:52.087018 2026] [:error] [pid 7165:tid 7189] [client 52.138.3.9:19371] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/goods.php"] [unique_id "aaRUpBRjCrA8qWBjgG-dGAAAAlY"]
[Sun Mar 01 23:00:52.577987 2026] [:error] [pid 7165:tid 7185] [client 52.138.3.9:19266] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/goods.php"] [unique_id "aaRUpBRjCrA8qWBjgG-dHAAAAlI"]
[Sun Mar 01 23:00:52.993534 2026] [:error] [pid 7165:tid 7175] [client 52.138.3.9:19302] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/js/goods.php"] [unique_id "aaRUpBRjCrA8qWBjgG-dIgAAAkg"]
[Sun Mar 01 23:00:53.426229 2026] [:error] [pid 7165:tid 7182] [client 52.138.3.9:19418] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/js/goods.php"] [unique_id "aaRUpRRjCrA8qWBjgG-dLAAAAk8"]
[Sun Mar 01 23:00:53.842357 2026] [:error] [pid 40750:tid 40761] [client 52.138.3.9:19200] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/js/goods.php"] [unique_id "aaRUpQfBuk03yQKDyquKvAAAAcg"]
[Sun Mar 01 23:00:54.268884 2026] [:error] [pid 40750:tid 40777] [client 52.138.3.9:19286] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/js/goods.php"] [unique_id "aaRUpgfBuk03yQKDyquKwAAAAdg"]
[Sun Mar 01 23:00:54.682804 2026] [:error] [pid 44644:tid 44665] [client 52.138.3.9:19428] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/js/searchforma.php"] [unique_id "aaRUpp3RJaXMcw3y9V_nxAAAABI"]
[Sun Mar 01 23:00:55.096955 2026] [:error] [pid 7165:tid 7179] [client 52.138.3.9:19425] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/js/searchforma.php"] [unique_id "aaRUpxRjCrA8qWBjgG-dOgAAAkw"]
[Sun Mar 01 23:00:55.518300 2026] [:error] [pid 7133:tid 7142] [client 52.138.3.9:19367] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/js/searchforma.php"] [unique_id "aaRUp_Ctubh8pR64qB9rPAAAAEc"]
[Sun Mar 01 23:00:55.998746 2026] [:error] [pid 37032:tid 37044] [client 52.138.3.9:19267] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/js/searchforma.php"] [unique_id "aaRUp-u0U4o7eSImsVSP3AAAAYo"]
[Sun Mar 01 23:00:56.417750 2026] [:error] [pid 7133:tid 7151] [client 52.138.3.9:19382] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/222.php"] [unique_id "aaRUqPCtubh8pR64qB9rQQAAAFA"]
[Sun Mar 01 23:00:56.841131 2026] [:error] [pid 33822:tid 33827] [client 52.138.3.9:19409] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/222.php"] [unique_id "aaRUqG6W3ygu1YVssuY6NAAAAoM"]
[Sun Mar 01 23:00:57.261438 2026] [:error] [pid 40750:tid 40767] [client 52.138.3.9:19355] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/222.php"] [unique_id "aaRUqQfBuk03yQKDyquKwwAAAc4"]
[Sun Mar 01 23:00:57.705262 2026] [:error] [pid 7165:tid 7190] [client 52.138.3.9:19270] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/222.php"] [unique_id "aaRUqRRjCrA8qWBjgG-dWwAAAlc"]
[Sun Mar 01 23:00:58.129019 2026] [:error] [pid 7165:tid 7175] [client 52.138.3.9:19289] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/files/xaw.php"] [unique_id "aaRUqhRjCrA8qWBjgG-dYwAAAkg"]
[Sun Mar 01 23:00:58.561332 2026] [:error] [pid 7165:tid 7176] [client 52.138.3.9:19296] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/files/xaw.php"] [unique_id "aaRUqhRjCrA8qWBjgG-dbgAAAkk"]
[Sun Mar 01 23:00:58.985815 2026] [:error] [pid 7165:tid 7173] [client 52.138.3.9:19279] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/files/xaw.php"] [unique_id "aaRUqhRjCrA8qWBjgG-ddwAAAkY"]
[Sun Mar 01 23:00:59.434137 2026] [:error] [pid 7165:tid 7182] [client 52.138.3.9:19415] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/files/xaw.php"] [unique_id "aaRUqxRjCrA8qWBjgG-dhAAAAk8"]
[Sun Mar 01 23:00:59.844769 2026] [:error] [pid 7133:tid 7155] [client 52.138.3.9:19365] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/js/ms-site.php"] [unique_id "aaRUq_Ctubh8pR64qB9rSQAAAFQ"]
[Sun Mar 01 23:01:00.260937 2026] [:error] [pid 37032:tid 37050] [client 52.138.3.9:19212] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/js/ms-site.php"] [unique_id "aaRUrOu0U4o7eSImsVSP3QAAAZA"]
[Sun Mar 01 23:01:00.711408 2026] [:error] [pid 7165:tid 7186] [client 52.138.3.9:19391] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/js/ms-site.php"] [unique_id "aaRUrBRjCrA8qWBjgG-dlwAAAlM"]
[Sun Mar 01 23:01:01.151797 2026] [:error] [pid 7165:tid 7182] [client 52.138.3.9:19292] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/js/ms-site.php"] [unique_id "aaRUrRRjCrA8qWBjgG-doQAAAk8"]
[Sun Mar 01 23:01:01.575452 2026] [:error] [pid 7165:tid 7184] [client 52.138.3.9:19350] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/11.php"] [unique_id "aaRUrRRjCrA8qWBjgG-dqwAAAlE"]
[Sun Mar 01 23:01:02.007306 2026] [:error] [pid 33822:tid 33843] [client 52.138.3.9:19392] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/11.php"] [unique_id "aaRUrm6W3ygu1YVssuY6NgAAApM"]
[Sun Mar 01 23:01:02.416563 2026] [:error] [pid 40750:tid 40766] [client 52.138.3.9:19417] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/11.php"] [unique_id "aaRUrgfBuk03yQKDyquKzQAAAc0"]
[Sun Mar 01 23:01:02.829647 2026] [:error] [pid 7165:tid 7177] [client 52.138.3.9:19233] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/11.php"] [unique_id "aaRUrhRjCrA8qWBjgG-duwAAAko"]
[Sun Mar 01 23:01:03.292918 2026] [:error] [pid 37032:tid 37043] [client 52.138.3.9:19375] [client 52.138.3.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/wp-settings2.php"] [unique_id "aaRUr-u0U4o7eSImsVSP3wAAAYk"]
[Sun Mar 01 23:01:03.711373 2026] [:error] [pid 40750:tid 40771] [client 52.138.3.9:19381] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin/index.php"] [unique_id "aaRUrwfBuk03yQKDyquK2QAAAdI"]
[Sun Mar 01 23:01:04.155124 2026] [:error] [pid 40750:tid 40761] [client 52.138.3.9:19378] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin/index.php"] [unique_id "aaRUsAfBuk03yQKDyquK3gAAAcg"]
[Sun Mar 01 23:01:04.592427 2026] [:error] [pid 40750:tid 40762] [client 52.138.3.9:19402] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin/index.php"] [unique_id "aaRUsAfBuk03yQKDyquK5AAAAck"]
[Sun Mar 01 23:01:05.021019 2026] [:error] [pid 40750:tid 40767] [client 52.138.3.9:19359] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/upgrade/alfa-rex.php"] [unique_id "aaRUsQfBuk03yQKDyquK6gAAAc4"]
[Sun Mar 01 23:01:05.456540 2026] [:error] [pid 40750:tid 40773] [client 52.138.3.9:19342] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/upgrade/alfa-rex.php"] [unique_id "aaRUsQfBuk03yQKDyquK7gAAAdQ"]
[Sun Mar 01 23:01:05.946007 2026] [:error] [pid 38034:tid 38049] [client 52.138.3.9:19372] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/upgrade/alfa-rex.php"] [unique_id "aaRUsQxtfZjwlJok9K8qNwAAAQs"]
[Sun Mar 01 23:01:06.358772 2026] [:error] [pid 38034:tid 38037] [client 52.138.3.9:19239] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/upgrade/alfa-rex.php"] [unique_id "aaRUsgxtfZjwlJok9K8qOgAAAQE"]
[Sun Mar 01 23:01:06.876797 2026] [:error] [pid 7165:tid 7172] [client 52.138.3.9:19250] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/includes/wp-login.php"] [unique_id "aaRUshRjCrA8qWBjgG-dywAAAkU"]
[Sun Mar 01 23:01:07.326658 2026] [:error] [pid 7165:tid 7190] [client 52.138.3.9:19219] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/includes/wp-login.php"] [unique_id "aaRUsxRjCrA8qWBjgG-dzgAAAlc"]
[Sun Mar 01 23:01:07.784888 2026] [:error] [pid 7165:tid 7175] [client 52.138.3.9:19360] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/includes/wp-login.php"] [unique_id "aaRUsxRjCrA8qWBjgG-d0QAAAkg"]
[Sun Mar 01 23:01:08.200083 2026] [:error] [pid 7165:tid 7183] [client 52.138.3.9:19299] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/includes/wp-login.php"] [unique_id "aaRUtBRjCrA8qWBjgG-d0wAAAlA"]
[Sun Mar 01 23:01:08.621445 2026] [:error] [pid 7165:tid 7188] [client 52.138.3.9:19311] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/uploads/2026/02/index.php"] [unique_id "aaRUtBRjCrA8qWBjgG-d1wAAAlU"]
[Sun Mar 01 23:01:09.041806 2026] [:error] [pid 38034:tid 38051] [client 52.138.3.9:19353] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/uploads/2026/02/index.php"] [unique_id "aaRUtQxtfZjwlJok9K8qPQAAAQ0"]
[Sun Mar 01 23:01:09.486015 2026] [:error] [pid 38241:tid 38249] [client 52.138.3.9:19230] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/uploads/2026/02/index.php"] [unique_id "aaRUtfKRPk6YnJBxw_xEBAAAAMU"]
[Sun Mar 01 23:01:09.949183 2026] [:error] [pid 38241:tid 38264] [client 52.138.3.9:19264] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/uploads/2026/02/index.php"] [unique_id "aaRUtfKRPk6YnJBxw_xEBQAAANQ"]
[Sun Mar 01 23:01:10.384740 2026] [:error] [pid 7165:tid 7171] [client 52.138.3.9:19287] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/colors/midnight/alfa-rex.php"] [unique_id "aaRUthRjCrA8qWBjgG-d2wAAAkQ"]
[Sun Mar 01 23:01:10.799034 2026] [:error] [pid 7165:tid 7190] [client 52.138.3.9:19271] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/colors/midnight/alfa-rex.php"] [unique_id "aaRUthRjCrA8qWBjgG-d3QAAAlc"]
[Sun Mar 01 23:01:11.210950 2026] [:error] [pid 7165:tid 7168] [client 52.138.3.9:19438] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/colors/midnight/alfa-rex.php"] [unique_id "aaRUtxRjCrA8qWBjgG-d3gAAAkE"]
[Sun Mar 01 23:01:11.624212 2026] [:error] [pid 7165:tid 7174] [client 52.138.3.9:19324] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/colors/midnight/alfa-rex.php"] [unique_id "aaRUtxRjCrA8qWBjgG-d6AAAAkc"]
[Sun Mar 01 23:01:13.115323 2026] [proxy_fcgi:error] [pid 38241:tid 38257] [client 52.138.3.9:19300] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 23:01:13.810746 2026] [:error] [pid 38241:tid 38262] [client 52.138.3.9:19300] [client 52.138.3.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/xx.php"] [unique_id "aaRUufKRPk6YnJBxw_xEHQAAANI"]
[Sun Mar 01 23:01:14.654187 2026] [:error] [pid 33822:tid 33827] [client 52.138.3.9:19321] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/includes/cores.php"] [unique_id "aaRUum6W3ygu1YVssuY6SQAAAoM"]
[Sun Mar 01 23:01:15.070133 2026] [:error] [pid 7133:tid 7141] [client 52.138.3.9:19407] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/includes/cores.php"] [unique_id "aaRUu_Ctubh8pR64qB9rWwAAAEY"]
[Sun Mar 01 23:01:15.494942 2026] [:error] [pid 41342:tid 41349] [client 52.138.3.9:19210] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/includes/cores.php"] [unique_id "aaRUu44iJ6RAS5CatDll-wAAAgQ"]
[Sun Mar 01 23:01:15.930244 2026] [:error] [pid 7165:tid 7183] [client 52.138.3.9:19336] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/includes/cores.php"] [unique_id "aaRUuxRjCrA8qWBjgG-eEwAAAlA"]
[Sun Mar 01 23:01:16.385841 2026] [:error] [pid 7165:tid 7182] [client 52.138.3.9:19354] [client 52.138.3.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/widgets/ws62.php"] [unique_id "aaRUvBRjCrA8qWBjgG-eFQAAAk8"]
[Sun Mar 01 23:01:16.806519 2026] [:error] [pid 7165:tid 7189] [client 52.138.3.9:19207] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/upgrade/worksec.php"] [unique_id "aaRUvBRjCrA8qWBjgG-eGQAAAlY"]
[Sun Mar 01 23:01:17.275801 2026] [:error] [pid 40750:tid 40776] [client 52.138.3.9:19303] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/upgrade/worksec.php"] [unique_id "aaRUvQfBuk03yQKDyquLAAAAAdc"]
[Sun Mar 01 23:01:17.699697 2026] [:error] [pid 40750:tid 40758] [client 52.138.3.9:19444] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/upgrade/worksec.php"] [unique_id "aaRUvQfBuk03yQKDyquLAQAAAcU"]
[Sun Mar 01 23:01:18.132925 2026] [:error] [pid 40750:tid 40766] [client 52.138.3.9:19306] [client 52.138.3.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/pomo/feeds.php"] [unique_id "aaRUvgfBuk03yQKDyquLBAAAAc0"]
[Sun Mar 01 23:01:18.546145 2026] [:error] [pid 7165:tid 7173] [client 52.138.3.9:19445] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/wp-good.php"] [unique_id "aaRUvhRjCrA8qWBjgG-eKAAAAkY"]
[Sun Mar 01 23:01:18.965833 2026] [:error] [pid 7165:tid 7177] [client 52.138.3.9:19304] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/wp-good.php"] [unique_id "aaRUvhRjCrA8qWBjgG-eLAAAAko"]
[Sun Mar 01 23:01:19.409840 2026] [:error] [pid 40750:tid 40763] [client 52.138.3.9:19215] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/wp-good.php"] [unique_id "aaRUvwfBuk03yQKDyquLBgAAAco"]
[Sun Mar 01 23:01:19.851999 2026] [:error] [pid 7165:tid 7180] [client 52.138.3.9:19352] [client 52.138.3.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/signup_pad_classic.php"] [unique_id "aaRUvxRjCrA8qWBjgG-eMwAAAk0"]
[Sun Mar 01 23:01:20.723487 2026] [:error] [pid 7165:tid 7182] [client 52.138.3.9:19317] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/includes/v2.php"] [unique_id "aaRUwBRjCrA8qWBjgG-ePQAAAk8"]
[Sun Mar 01 23:01:21.413443 2026] [:error] [pid 7165:tid 7179] [client 52.138.3.9:19221] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/includes/v2.php"] [unique_id "aaRUwRRjCrA8qWBjgG-eQQAAAkw"]
[Sun Mar 01 23:01:21.921291 2026] [:error] [pid 7165:tid 7167] [client 52.138.3.9:19203] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/includes/v2.php"] [unique_id "aaRUwRRjCrA8qWBjgG-eRgAAAkA"]
[Sun Mar 01 23:01:22.337761 2026] [:error] [pid 7165:tid 7172] [client 52.138.3.9:19226] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/includes/v2.php"] [unique_id "aaRUwhRjCrA8qWBjgG-eSgAAAkU"]
[Sun Mar 01 23:01:22.781112 2026] [:error] [pid 40750:tid 40774] [client 52.138.3.9:19313] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/includes/class-ge.php"] [unique_id "aaRUwgfBuk03yQKDyquLCgAAAdU"]
[Sun Mar 01 23:01:23.240195 2026] [:error] [pid 44644:tid 44653] [client 52.138.3.9:19430] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/includes/class-ge.php"] [unique_id "aaRUw53RJaXMcw3y9V_nywAAAAY"]
[Sun Mar 01 23:01:23.657692 2026] [:error] [pid 44644:tid 44667] [client 52.138.3.9:19403] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/includes/class-ge.php"] [unique_id "aaRUw53RJaXMcw3y9V_nzAAAABQ"]
[Sun Mar 01 23:01:24.080309 2026] [:error] [pid 44644:tid 44647] [client 52.138.3.9:19437] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/includes/class-ge.php"] [unique_id "aaRUxJ3RJaXMcw3y9V_nzgAAAAA"]
[Sun Mar 01 23:01:24.592121 2026] [:error] [pid 7165:tid 7170] [client 52.138.3.9:19294] [client 52.138.3.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/class-wp-https.php"] [unique_id "aaRUxBRjCrA8qWBjgG-eUgAAAkM"]
[Sun Mar 01 23:01:25.007850 2026] [:error] [pid 33822:tid 33837] [client 52.138.3.9:19345] [client 52.138.3.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/fonts/rawwp.php"] [unique_id "aaRUxW6W3ygu1YVssuY6VQAAAo0"]
[Sun Mar 01 23:01:25.420083 2026] [:error] [pid 7165:tid 7179] [client 52.138.3.9:19374] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/uploads/about.php"] [unique_id "aaRUxRRjCrA8qWBjgG-eWAAAAkw"]
[Sun Mar 01 23:01:26.496564 2026] [:error] [pid 40750:tid 40766] [client 52.138.3.9:19386] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/uploads/about.php"] [unique_id "aaRUxgfBuk03yQKDyquLDgAAAc0"]
[Sun Mar 01 23:01:26.965254 2026] [:error] [pid 38241:tid 38258] [client 52.138.3.9:19370] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/uploads/about.php"] [unique_id "aaRUxvKRPk6YnJBxw_xEIgAAAM4"]
[Sun Mar 01 23:01:27.374000 2026] [:error] [pid 40750:tid 40757] [client 52.138.3.9:19168] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/uploads/about.php"] [unique_id "aaRUxwfBuk03yQKDyquLEQAAAcQ"]
[Sun Mar 01 23:01:27.792177 2026] [:error] [pid 40750:tid 40762] [client 52.138.3.9:19310] [client 52.138.3.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/class-mail.php"] [unique_id "aaRUxwfBuk03yQKDyquLEwAAAck"]
[Sun Mar 01 23:01:28.222869 2026] [:error] [pid 40750:tid 40767] [client 52.138.3.9:19420] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/uhuybro.php"] [unique_id "aaRUyAfBuk03yQKDyquLFgAAAc4"]
[Sun Mar 01 23:01:28.681957 2026] [:error] [pid 7133:tid 7146] [client 52.138.3.9:19389] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/uhuybro.php"] [unique_id "aaRUyPCtubh8pR64qB9rZAAAAEs"]
[Sun Mar 01 23:01:29.109214 2026] [:error] [pid 38034:tid 38047] [client 52.138.3.9:19357] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/uhuybro.php"] [unique_id "aaRUyQxtfZjwlJok9K8qQwAAAQk"]
[Sun Mar 01 23:01:29.539677 2026] [:error] [pid 33822:tid 33844] [client 52.138.3.9:19387] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/footers.php"] [unique_id "aaRUyW6W3ygu1YVssuY6WwAAApQ"]
[Sun Mar 01 23:01:30.040691 2026] [:error] [pid 40750:tid 40761] [client 52.138.3.9:19220] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/footers.php"] [unique_id "aaRUygfBuk03yQKDyquLHwAAAcg"]
[Sun Mar 01 23:01:30.500742 2026] [:error] [pid 7133:tid 7145] [client 52.138.3.9:19443] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/footers.php"] [unique_id "aaRUyvCtubh8pR64qB9raAAAAEo"]
[Sun Mar 01 23:01:30.978086 2026] [:error] [pid 33822:tid 33842] [client 52.138.3.9:19216] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/footers.php"] [unique_id "aaRUym6W3ygu1YVssuY6XQAAApI"]
[Sun Mar 01 23:01:31.553616 2026] [:error] [pid 7133:tid 7153] [client 52.138.3.9:19362] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/icedknnv.php"] [unique_id "aaRUy_Ctubh8pR64qB9ragAAAFI"]
[Sun Mar 01 23:01:32.105504 2026] [:error] [pid 37032:tid 37045] [client 52.138.3.9:19281] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/icedknnv.php"] [unique_id "aaRUzOu0U4o7eSImsVSP6AAAAYs"]
[Sun Mar 01 23:01:32.544627 2026] [:error] [pid 38241:tid 38251] [client 52.138.3.9:19261] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/icedknnv.php"] [unique_id "aaRUzPKRPk6YnJBxw_xEKgAAAMc"]
[Sun Mar 01 23:01:32.975943 2026] [:error] [pid 33822:tid 33833] [client 52.138.3.9:19363] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/icedknnv.php"] [unique_id "aaRUzG6W3ygu1YVssuY6YAAAAok"]
[Sun Mar 01 23:01:33.393462 2026] [:error] [pid 37032:tid 37039] [client 52.138.3.9:19323] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/images/post_genprdt.php"] [unique_id "aaRUzeu0U4o7eSImsVSP6gAAAYU"]
[Sun Mar 01 23:01:33.911675 2026] [:error] [pid 37032:tid 37054] [client 52.138.3.9:19326] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/images/post_genprdt.php"] [unique_id "aaRUzeu0U4o7eSImsVSP7AAAAZQ"]
[Sun Mar 01 23:01:34.330473 2026] [:error] [pid 38241:tid 38252] [client 52.138.3.9:19330] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/images/post_genprdt.php"] [unique_id "aaRUzvKRPk6YnJBxw_xEMAAAAMg"]
[Sun Mar 01 23:01:34.748821 2026] [:error] [pid 37032:tid 37050] [client 52.138.3.9:19312] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/images/post_genprdt.php"] [unique_id "aaRUzuu0U4o7eSImsVSP7QAAAZA"]
[Sun Mar 01 23:01:35.181642 2026] [:error] [pid 7165:tid 7182] [client 52.138.3.9:19237] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/5.php"] [unique_id "aaRUzxRjCrA8qWBjgG-eZQAAAk8"]
[Sun Mar 01 23:01:35.620406 2026] [:error] [pid 41780:tid 41799] [client 52.138.3.9:19431] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/5.php"] [unique_id "aaRUz8ONkVoocLIqzy0z3AAAA9A"]
[Sun Mar 01 23:01:36.251263 2026] [:error] [pid 38034:tid 38059] [client 52.138.3.9:19152] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/5.php"] [unique_id "aaRU0AxtfZjwlJok9K8qUQAAARU"]
[Sun Mar 01 23:01:36.957821 2026] [:error] [pid 38034:tid 38045] [client 52.138.3.9:19416] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/5.php"] [unique_id "aaRU0AxtfZjwlJok9K8qWQAAAQc"]
[Sun Mar 01 23:01:37.620800 2026] [:error] [pid 7133:tid 7158] [client 52.138.3.9:19305] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/by.php"] [unique_id "aaRU0fCtubh8pR64qB9rdwAAAFc"]
[Sun Mar 01 23:01:38.481156 2026] [:error] [pid 7133:tid 7139] [client 52.138.3.9:19384] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/by.php"] [unique_id "aaRU0vCtubh8pR64qB9rewAAAEQ"]
[Sun Mar 01 23:01:39.140808 2026] [:error] [pid 40750:tid 40773] [client 52.138.3.9:19434] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/by.php"] [unique_id "aaRU0wfBuk03yQKDyquLOgAAAdQ"]
[Sun Mar 01 23:01:39.700834 2026] [:error] [pid 7165:tid 7180] [client 52.138.3.9:19201] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/by.php"] [unique_id "aaRU0xRjCrA8qWBjgG-eegAAAk0"]
[Sun Mar 01 23:01:40.300342 2026] [:error] [pid 7165:tid 7176] [client 52.138.3.9:19209] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/includes/user-ajax.php"] [unique_id "aaRU1BRjCrA8qWBjgG-efQAAAkk"]
[Sun Mar 01 23:01:40.865294 2026] [:error] [pid 7165:tid 7184] [client 52.138.3.9:19319] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/includes/user-ajax.php"] [unique_id "aaRU1BRjCrA8qWBjgG-egAAAAlE"]
[Sun Mar 01 23:01:41.296722 2026] [:error] [pid 7165:tid 7179] [client 52.138.3.9:19229] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/includes/user-ajax.php"] [unique_id "aaRU1RRjCrA8qWBjgG-egwAAAkw"]
[Sun Mar 01 23:01:41.721257 2026] [:error] [pid 7165:tid 7174] [client 52.138.3.9:19262] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/includes/user-ajax.php"] [unique_id "aaRU1RRjCrA8qWBjgG-eiAAAAkc"]
[Sun Mar 01 23:01:42.139324 2026] [:error] [pid 40750:tid 40766] [client 52.138.3.9:19151] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/images/chati.php"] [unique_id "aaRU1gfBuk03yQKDyquLQAAAAc0"]
[Sun Mar 01 23:01:42.681057 2026] [:error] [pid 40750:tid 40758] [client 52.138.3.9:19268] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/images/chati.php"] [unique_id "aaRU1gfBuk03yQKDyquLQQAAAcU"]
[Sun Mar 01 23:01:43.186574 2026] [:error] [pid 33822:tid 33836] [client 52.138.3.9:19325] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/images/chati.php"] [unique_id "aaRU126W3ygu1YVssuY6bQAAAow"]
[Sun Mar 01 23:01:43.961502 2026] [:error] [pid 38241:tid 38246] [client 52.138.3.9:19227] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/images/chati.php"] [unique_id "aaRU1_KRPk6YnJBxw_xEOQAAAMI"]
[Sun Mar 01 23:01:44.401087 2026] [:error] [pid 7165:tid 7191] [client 52.138.3.9:19247] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin.php"] [unique_id "aaRU2BRjCrA8qWBjgG-ejQAAAlg"]
[Sun Mar 01 23:01:45.017664 2026] [:error] [pid 37032:tid 37041] [client 52.138.3.9:19245] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin.php"] [unique_id "aaRU2eu0U4o7eSImsVSP9AAAAYc"]
[Sun Mar 01 23:01:45.474998 2026] [:error] [pid 7165:tid 7181] [client 52.138.3.9:19422] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin.php"] [unique_id "aaRU2RRjCrA8qWBjgG-ejwAAAk4"]
[Sun Mar 01 23:01:45.901296 2026] [:error] [pid 7165:tid 7187] [client 52.138.3.9:19101] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin.php"] [unique_id "aaRU2RRjCrA8qWBjgG-ekwAAAlQ"]
[Sun Mar 01 23:01:46.317952 2026] [:error] [pid 7165:tid 7188] [client 52.138.3.9:19380] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gtc.php"] [unique_id "aaRU2hRjCrA8qWBjgG-elgAAAlU"]
[Sun Mar 01 23:01:46.801935 2026] [:error] [pid 7165:tid 7191] [client 52.138.3.9:19166] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gtc.php"] [unique_id "aaRU2hRjCrA8qWBjgG-engAAAlg"]
[Sun Mar 01 23:01:47.484457 2026] [:error] [pid 7165:tid 7189] [client 52.138.3.9:19269] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gtc.php"] [unique_id "aaRU2xRjCrA8qWBjgG-eogAAAlY"]
[Sun Mar 01 23:01:47.910281 2026] [:error] [pid 40750:tid 40766] [client 52.138.3.9:19223] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gtc.php"] [unique_id "aaRU2wfBuk03yQKDyquLTQAAAc0"]
[Sun Mar 01 23:01:48.322605 2026] [:error] [pid 7165:tid 7179] [client 52.138.3.9:19213] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/info.php"] [unique_id "aaRU3BRjCrA8qWBjgG-eowAAAkw"]
[Sun Mar 01 23:01:48.783747 2026] [:error] [pid 33822:tid 33825] [client 52.138.3.9:19383] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/info.php"] [unique_id "aaRU3G6W3ygu1YVssuY6dgAAAoE"]
[Sun Mar 01 23:01:49.261033 2026] [:error] [pid 33822:tid 33835] [client 52.138.3.9:19242] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/info.php"] [unique_id "aaRU3W6W3ygu1YVssuY6eAAAAos"]
[Sun Mar 01 23:01:49.671710 2026] [:error] [pid 40750:tid 40753] [client 52.138.3.9:19327] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/info.php"] [unique_id "aaRU3QfBuk03yQKDyquLVgAAAcA"]
[Sun Mar 01 23:01:50.221097 2026] [:error] [pid 37032:tid 37042] [client 52.138.3.9:19315] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/inputs.php"] [unique_id "aaRU3uu0U4o7eSImsVSP9QAAAYg"]
[Sun Mar 01 23:01:50.683870 2026] [:error] [pid 7133:tid 7158] [client 52.138.3.9:19272] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/inputs.php"] [unique_id "aaRU3vCtubh8pR64qB9rgQAAAFc"]
[Sun Mar 01 23:01:51.117160 2026] [:error] [pid 7133:tid 7141] [client 52.138.3.9:19231] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/inputs.php"] [unique_id "aaRU3_Ctubh8pR64qB9rggAAAEY"]
[Sun Mar 01 23:01:51.549242 2026] [:error] [pid 40750:tid 40761] [client 52.138.3.9:19235] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/inputs.php"] [unique_id "aaRU3wfBuk03yQKDyquLXQAAAcg"]
[Sun Mar 01 23:01:51.968084 2026] [:error] [pid 7133:tid 7145] [client 52.138.3.9:19255] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/colors/coffee/index.php"] [unique_id "aaRU3_Ctubh8pR64qB9rgwAAAEo"]
[Sun Mar 01 23:01:52.385907 2026] [:error] [pid 40750:tid 40769] [client 52.138.3.9:19293] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/colors/coffee/index.php"] [unique_id "aaRU4AfBuk03yQKDyquLYAAAAdA"]
[Sun Mar 01 23:01:52.861728 2026] [:error] [pid 41780:tid 41789] [client 52.138.3.9:19225] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/colors/coffee/index.php"] [unique_id "aaRU4MONkVoocLIqzy0z4QAAA8Y"]
[Sun Mar 01 23:01:53.282953 2026] [:error] [pid 37032:tid 37035] [client 52.138.3.9:19208] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/colors/coffee/index.php"] [unique_id "aaRU4eu0U4o7eSImsVSP-AAAAYE"]
[Sun Mar 01 23:01:53.752511 2026] [:error] [pid 37032:tid 37045] [client 52.138.3.9:19160] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xmrlpc.php"] [unique_id "aaRU4eu0U4o7eSImsVSP-QAAAYs"]
[Sun Mar 01 23:01:54.390892 2026] [:error] [pid 38034:tid 38053] [client 52.138.3.9:19280] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xmrlpc.php"] [unique_id "aaRU4gxtfZjwlJok9K8qYgAAAQ8"]
[Sun Mar 01 23:01:54.838636 2026] [:error] [pid 40750:tid 40753] [client 52.138.3.9:19149] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xmrlpc.php"] [unique_id "aaRU4gfBuk03yQKDyquLZgAAAcA"]
[Sun Mar 01 23:01:55.255855 2026] [:error] [pid 38241:tid 38255] [client 52.138.3.9:19218] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xmrlpc.php"] [unique_id "aaRU4_KRPk6YnJBxw_xEQQAAAMs"]
[Sun Mar 01 23:01:55.775005 2026] [:error] [pid 40750:tid 40754] [client 52.138.3.9:19322] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/123.php"] [unique_id "aaRU4wfBuk03yQKDyquLbwAAAcE"]
[Sun Mar 01 23:01:56.187493 2026] [:error] [pid 40750:tid 40777] [client 52.138.3.9:19145] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/123.php"] [unique_id "aaRU5AfBuk03yQKDyquLdAAAAdg"]
[Sun Mar 01 23:01:56.652466 2026] [:error] [pid 40750:tid 40770] [client 52.138.3.9:19309] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/123.php"] [unique_id "aaRU5AfBuk03yQKDyquLdwAAAdE"]
[Sun Mar 01 23:01:57.081901 2026] [:error] [pid 40750:tid 40760] [client 52.138.3.9:19398] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/123.php"] [unique_id "aaRU5QfBuk03yQKDyquLeQAAAcc"]
[Sun Mar 01 23:01:57.544336 2026] [:error] [pid 40750:tid 40758] [client 52.138.3.9:19288] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/z60.php"] [unique_id "aaRU5QfBuk03yQKDyquLfAAAAcU"]
[Sun Mar 01 23:01:58.009850 2026] [:error] [pid 38241:tid 38267] [client 52.138.3.9:19307] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/z60.php"] [unique_id "aaRU5vKRPk6YnJBxw_xETQAAANc"]
[Sun Mar 01 23:01:58.438885 2026] [:error] [pid 37032:tid 37039] [client 52.138.3.9:19314] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/z60.php"] [unique_id "aaRU5uu0U4o7eSImsVSP-gAAAYU"]
[Sun Mar 01 23:01:58.854289 2026] [:error] [pid 7133:tid 7151] [client 52.138.3.9:19141] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/z60.php"] [unique_id "aaRU5vCtubh8pR64qB9rjQAAAFA"]
[Sun Mar 01 23:01:59.271734 2026] [:error] [pid 38034:tid 38058] [client 52.138.3.9:19297] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class.php"] [unique_id "aaRU5wxtfZjwlJok9K8qZwAAARQ"]
[Sun Mar 01 23:01:59.712593 2026] [:error] [pid 7133:tid 7158] [client 52.138.3.9:19259] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class.php"] [unique_id "aaRU5_Ctubh8pR64qB9rkgAAAFc"]
[Sun Mar 01 23:02:01.053789 2026] [:error] [pid 40750:tid 40753] [client 52.138.3.9:19198] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class.php"] [unique_id "aaRU6QfBuk03yQKDyquLiAAAAcA"]
[Sun Mar 01 23:02:01.481996 2026] [:error] [pid 40750:tid 40755] [client 52.138.3.9:19181] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class.php"] [unique_id "aaRU6QfBuk03yQKDyquLiQAAAcI"]
[Sun Mar 01 23:02:01.955061 2026] [:error] [pid 40750:tid 40761] [client 52.138.3.9:19204] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file.php"] [unique_id "aaRU6QfBuk03yQKDyquLjAAAAcg"]
[Sun Mar 01 23:02:02.379294 2026] [:error] [pid 40750:tid 40776] [client 52.138.3.9:19164] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file.php"] [unique_id "aaRU6gfBuk03yQKDyquLkAAAAdc"]
[Sun Mar 01 23:02:02.874933 2026] [:error] [pid 7165:tid 7188] [client 52.138.3.9:19278] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file.php"] [unique_id "aaRU6hRjCrA8qWBjgG-erQAAAlU"]
[Sun Mar 01 23:02:03.306666 2026] [:error] [pid 33822:tid 33843] [client 52.138.3.9:19290] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file.php"] [unique_id "aaRU626W3ygu1YVssuY6uwAAApM"]
[Sun Mar 01 23:02:03.791105 2026] [:error] [pid 7165:tid 7190] [client 52.138.3.9:19251] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/404.php"] [unique_id "aaRU6xRjCrA8qWBjgG-esAAAAlc"]
[Sun Mar 01 23:02:04.202579 2026] [:error] [pid 38241:tid 38258] [client 52.138.3.9:19211] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/404.php"] [unique_id "aaRU7PKRPk6YnJBxw_xEWgAAAM4"]
[Sun Mar 01 23:02:04.659685 2026] [:error] [pid 38241:tid 38244] [client 52.138.3.9:19074] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/404.php"] [unique_id "aaRU7PKRPk6YnJBxw_xEXAAAAMA"]
[Sun Mar 01 23:02:05.130162 2026] [:error] [pid 7165:tid 7181] [client 52.138.3.9:19150] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/404.php"] [unique_id "aaRU7RRjCrA8qWBjgG-etQAAAk4"]
[Sun Mar 01 23:02:05.559968 2026] [:error] [pid 38241:tid 38263] [client 52.138.3.9:19426] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/222.php"] [unique_id "aaRU7fKRPk6YnJBxw_xEYAAAANM"]
[Sun Mar 01 23:02:06.025933 2026] [:error] [pid 37032:tid 37043] [client 52.138.3.9:19143] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/222.php"] [unique_id "aaRU7uu0U4o7eSImsVSP_wAAAYk"]
[Sun Mar 01 23:02:06.484877 2026] [:error] [pid 7165:tid 7180] [client 52.138.3.9:19222] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/222.php"] [unique_id "aaRU7hRjCrA8qWBjgG-evQAAAk0"]
[Sun Mar 01 23:02:06.921710 2026] [:error] [pid 7165:tid 7182] [client 52.138.3.9:19252] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/222.php"] [unique_id "aaRU7hRjCrA8qWBjgG-ewwAAAk8"]
[Sun Mar 01 23:02:07.445025 2026] [:error] [pid 7165:tid 7190] [client 52.138.3.9:19155] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/abcd.php"] [unique_id "aaRU7xRjCrA8qWBjgG-exwAAAlc"]
[Sun Mar 01 23:02:07.942591 2026] [:error] [pid 40750:tid 40771] [client 52.138.3.9:19021] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/abcd.php"] [unique_id "aaRU7wfBuk03yQKDyquLmQAAAdI"]
[Sun Mar 01 23:02:08.354070 2026] [:error] [pid 38241:tid 38253] [client 52.138.3.9:19158] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/abcd.php"] [unique_id "aaRU8PKRPk6YnJBxw_xEZAAAAMk"]
[Sun Mar 01 23:02:08.846146 2026] [:error] [pid 38241:tid 38268] [client 52.138.3.9:19358] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/abcd.php"] [unique_id "aaRU8PKRPk6YnJBxw_xEZwAAANg"]
[Sun Mar 01 23:02:09.302407 2026] [:error] [pid 38241:tid 38258] [client 52.138.3.9:19295] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aaRU8fKRPk6YnJBxw_xEaQAAAM4"]
[Sun Mar 01 23:02:09.892625 2026] [:error] [pid 44644:tid 44661] [client 52.138.3.9:19257] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aaRU8Z3RJaXMcw3y9V_n2QAAAA4"]
[Sun Mar 01 23:02:10.466972 2026] [:error] [pid 44644:tid 44671] [client 52.138.3.9:19232] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aaRU8p3RJaXMcw3y9V_n2wAAABg"]
[Sun Mar 01 23:02:10.931580 2026] [:error] [pid 38241:tid 38267] [client 52.138.3.9:19090] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aaRU8vKRPk6YnJBxw_xEbwAAANc"]
[Sun Mar 01 23:02:11.374862 2026] [:error] [pid 7165:tid 7170] [client 52.138.3.9:19194] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aaRU8xRjCrA8qWBjgG-e1AAAAkM"]
[Sun Mar 01 23:02:11.866188 2026] [:error] [pid 41780:tid 41805] [client 52.138.3.9:19182] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aaRU88ONkVoocLIqzy0z5AAAA9Y"]
[Sun Mar 01 23:02:12.362064 2026] [:error] [pid 38241:tid 38250] [client 52.138.3.9:19241] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aaRU9PKRPk6YnJBxw_xEcQAAAMY"]
[Sun Mar 01 23:02:12.788485 2026] [:error] [pid 38241:tid 38253] [client 52.138.3.9:19170] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aaRU9PKRPk6YnJBxw_xEdQAAAMk"]
[Sun Mar 01 23:02:13.306993 2026] [:error] [pid 41780:tid 41786] [client 52.138.3.9:19214] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gg.php"] [unique_id "aaRU9cONkVoocLIqzy0z5QAAA8M"]
[Sun Mar 01 23:02:13.725970 2026] [:error] [pid 38241:tid 38246] [client 52.138.3.9:19205] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gg.php"] [unique_id "aaRU9fKRPk6YnJBxw_xEewAAAMI"]
[Sun Mar 01 23:02:14.177925 2026] [proxy_fcgi:error] [pid 7133:tid 7136] [client 52.138.3.9:19240] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 23:02:14.388979 2026] [proxy_fcgi:error] [pid 7133:tid 7139] [client 52.138.3.9:19240] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 23:02:14.599409 2026] [proxy_fcgi:error] [pid 7133:tid 7154] [client 52.138.3.9:19240] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 23:02:14.808268 2026] [proxy_fcgi:error] [pid 7133:tid 7143] [client 52.138.3.9:19240] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 23:02:15.016648 2026] [proxy_fcgi:error] [pid 7133:tid 7149] [client 52.138.3.9:19240] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 23:02:15.238569 2026] [proxy_fcgi:error] [pid 7133:tid 7155] [client 52.138.3.9:19240] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 23:02:15.445966 2026] [proxy_fcgi:error] [pid 7133:tid 7147] [client 52.138.3.9:19240] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 23:02:15.656913 2026] [proxy_fcgi:error] [pid 7133:tid 7151] [client 52.138.3.9:19240] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 23:02:15.865410 2026] [proxy_fcgi:error] [pid 7133:tid 7158] [client 52.138.3.9:19240] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 23:02:16.128841 2026] [proxy_fcgi:error] [pid 7133:tid 7141] [client 52.138.3.9:19240] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 23:02:16.361788 2026] [:error] [pid 7133:tid 7139] [client 52.138.3.9:19240] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/la.php"] [unique_id "aaRU-PCtubh8pR64qB9rtQAAAEQ"]
[Sun Mar 01 23:02:16.791377 2026] [:error] [pid 7165:tid 7183] [client 52.138.3.9:19283] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/la.php"] [unique_id "aaRU-BRjCrA8qWBjgG-e2gAAAlA"]
[Sun Mar 01 23:02:17.217587 2026] [:error] [pid 7165:tid 7186] [client 52.138.3.9:19224] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/la.php"] [unique_id "aaRU-RRjCrA8qWBjgG-e3AAAAlM"]
[Sun Mar 01 23:02:17.696988 2026] [:error] [pid 7133:tid 7135] [client 52.138.3.9:19171] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/la.php"] [unique_id "aaRU-fCtubh8pR64qB9rtwAAAEA"]
[Sun Mar 01 23:02:18.164599 2026] [:error] [pid 44644:tid 44668] [client 52.138.3.9:19309] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ccou.php"] [unique_id "aaRU-p3RJaXMcw3y9V_n3gAAABU"]
[Sun Mar 01 23:02:18.576675 2026] [:error] [pid 44644:tid 44658] [client 52.138.3.9:19298] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ccou.php"] [unique_id "aaRU-p3RJaXMcw3y9V_n4QAAAAs"]
[Sun Mar 01 23:02:19.062816 2026] [:error] [pid 33822:tid 33824] [client 52.138.3.9:19253] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ccou.php"] [unique_id "aaRU-26W3ygu1YVssuY60QAAAoA"]
[Sun Mar 01 23:02:19.492589 2026] [:error] [pid 40750:tid 40764] [client 52.138.3.9:19173] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ccou.php"] [unique_id "aaRU-wfBuk03yQKDyquLnQAAAcs"]
[Sun Mar 01 23:02:19.975587 2026] [:error] [pid 40750:tid 40772] [client 52.138.3.9:19154] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/readme.php"] [unique_id "aaRU-wfBuk03yQKDyquLnwAAAdM"]
[Sun Mar 01 23:02:20.463685 2026] [:error] [pid 7165:tid 7173] [client 52.138.3.9:19202] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/readme.php"] [unique_id "aaRU_BRjCrA8qWBjgG-e4gAAAkY"]
[Sun Mar 01 23:02:21.018773 2026] [:error] [pid 33822:tid 33843] [client 52.138.3.9:19316] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/readme.php"] [unique_id "aaRU_W6W3ygu1YVssuY60gAAApM"]
[Sun Mar 01 23:02:21.430611 2026] [:error] [pid 40750:tid 40756] [client 52.138.3.9:19147] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/readme.php"] [unique_id "aaRU_QfBuk03yQKDyquLowAAAcM"]
[Sun Mar 01 23:02:21.840956 2026] [:error] [pid 40750:tid 40755] [client 52.138.3.9:19097] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file7.php"] [unique_id "aaRU_QfBuk03yQKDyquLpwAAAcI"]
[Sun Mar 01 23:02:22.312191 2026] [:error] [pid 38034:tid 38050] [client 52.138.3.9:19148] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file7.php"] [unique_id "aaRU_gxtfZjwlJok9K8qcQAAAQw"]
[Sun Mar 01 23:02:22.732154 2026] [:error] [pid 38241:tid 38257] [client 52.138.3.9:19228] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file7.php"] [unique_id "aaRU_vKRPk6YnJBxw_xEjgAAAM0"]
[Sun Mar 01 23:02:23.143269 2026] [:error] [pid 38241:tid 38260] [client 52.138.3.9:19320] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file7.php"] [unique_id "aaRU__KRPk6YnJBxw_xEkAAAANA"]
[Sun Mar 01 23:02:23.554784 2026] [:error] [pid 40750:tid 40774] [client 52.138.3.9:19137] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x.php"] [unique_id "aaRU_wfBuk03yQKDyquLsgAAAdU"]
[Sun Mar 01 23:02:23.997728 2026] [:error] [pid 38241:tid 38259] [client 52.138.3.9:19075] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x.php"] [unique_id "aaRU__KRPk6YnJBxw_xEkwAAAM8"]
[Sun Mar 01 23:02:24.445742 2026] [:error] [pid 40750:tid 40763] [client 52.138.3.9:19113] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x.php"] [unique_id "aaRVAAfBuk03yQKDyquLtQAAAco"]
[Sun Mar 01 23:02:24.896595 2026] [:error] [pid 7165:tid 7190] [client 52.138.3.9:19308] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x.php"] [unique_id "aaRVABRjCrA8qWBjgG-e5QAAAlc"]
[Sun Mar 01 23:02:25.315714 2026] [:error] [pid 33822:tid 33828] [client 52.138.3.9:19140] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lv.php"] [unique_id "aaRVAW6W3ygu1YVssuY62gAAAoQ"]
[Sun Mar 01 23:02:25.733976 2026] [:error] [pid 7165:tid 7183] [client 52.138.3.9:19206] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lv.php"] [unique_id "aaRVARRjCrA8qWBjgG-e6gAAAlA"]
[Sun Mar 01 23:02:26.184886 2026] [:error] [pid 37032:tid 37051] [client 52.138.3.9:19078] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lv.php"] [unique_id "aaRVAuu0U4o7eSImsVSQAgAAAZE"]
[Sun Mar 01 23:02:26.600401 2026] [:error] [pid 33822:tid 33847] [client 52.138.3.9:19265] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lv.php"] [unique_id "aaRVAm6W3ygu1YVssuY63QAAApc"]
[Sun Mar 01 23:02:27.012146 2026] [:error] [pid 41342:tid 41368] [client 52.138.3.9:19188] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file48.php"] [unique_id "aaRVA44iJ6RAS5CatDlmGAAAAhc"]
[Sun Mar 01 23:02:27.447624 2026] [:error] [pid 40750:tid 40757] [client 52.138.3.9:19083] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file48.php"] [unique_id "aaRVAwfBuk03yQKDyquLxQAAAcQ"]
[Sun Mar 01 23:02:27.909567 2026] [:error] [pid 40750:tid 40758] [client 52.138.3.9:19177] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file48.php"] [unique_id "aaRVAwfBuk03yQKDyquLygAAAcU"]
[Sun Mar 01 23:02:28.334270 2026] [:error] [pid 38241:tid 38256] [client 52.138.3.9:19179] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file48.php"] [unique_id "aaRVBPKRPk6YnJBxw_xEmwAAAMw"]
[Sun Mar 01 23:02:28.776115 2026] [:error] [pid 38241:tid 38265] [client 52.138.3.9:19125] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/install.php"] [unique_id "aaRVBPKRPk6YnJBxw_xEnAAAANU"]
[Sun Mar 01 23:02:29.189103 2026] [:error] [pid 38241:tid 38261] [client 52.138.3.9:19112] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/install.php"] [unique_id "aaRVBfKRPk6YnJBxw_xEnQAAANE"]
[Sun Mar 01 23:02:29.606262 2026] [:error] [pid 38241:tid 38257] [client 52.138.3.9:19162] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/install.php"] [unique_id "aaRVBfKRPk6YnJBxw_xEngAAAM0"]
[Sun Mar 01 23:02:30.066842 2026] [:error] [pid 7165:tid 7187] [client 52.138.3.9:19260] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/install.php"] [unique_id "aaRVBhRjCrA8qWBjgG-e8AAAAlQ"]
[Sun Mar 01 23:02:30.482376 2026] [:error] [pid 7165:tid 7173] [client 52.138.3.9:19142] [client 52.138.3.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aaRVBhRjCrA8qWBjgG-e8gAAAkY"]
[Sun Mar 01 23:02:31.012190 2026] [:error] [pid 7165:tid 7185] [client 52.138.3.9:19199] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/click.php"] [unique_id "aaRVBxRjCrA8qWBjgG-e9AAAAlI"]
[Sun Mar 01 23:02:31.491903 2026] [:error] [pid 7165:tid 7171] [client 52.138.3.9:19019] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/click.php"] [unique_id "aaRVBxRjCrA8qWBjgG-e9gAAAkQ"]
[Sun Mar 01 23:02:31.909361 2026] [:error] [pid 40750:tid 40773] [client 52.138.3.9:19136] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/click.php"] [unique_id "aaRVBwfBuk03yQKDyquL1gAAAdQ"]
[Sun Mar 01 23:02:32.453658 2026] [:error] [pid 7165:tid 7179] [client 52.138.3.9:19144] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/click.php"] [unique_id "aaRVCBRjCrA8qWBjgG-e-AAAAkw"]
[Sun Mar 01 23:02:33.050580 2026] [:error] [pid 7165:tid 7175] [client 52.138.3.9:19186] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/info.php"] [unique_id "aaRVCRRjCrA8qWBjgG-e_wAAAkg"]
[Sun Mar 01 23:02:33.477593 2026] [:error] [pid 7133:tid 7141] [client 52.138.3.9:19192] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/info.php"] [unique_id "aaRVCfCtubh8pR64qB9rwgAAAEY"]
[Sun Mar 01 23:02:33.945747 2026] [:error] [pid 7133:tid 7139] [client 52.138.3.9:19146] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/info.php"] [unique_id "aaRVCfCtubh8pR64qB9rwwAAAEQ"]
[Sun Mar 01 23:02:34.364988 2026] [:error] [pid 7165:tid 7172] [client 52.138.3.9:19249] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/info.php"] [unique_id "aaRVChRjCrA8qWBjgG-fBgAAAkU"]
[Sun Mar 01 23:02:34.880580 2026] [:error] [pid 44644:tid 44666] [client 52.138.3.9:19169] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-trackback.php"] [unique_id "aaRVCp3RJaXMcw3y9V_n6AAAABM"]
[Sun Mar 01 23:02:35.302428 2026] [:error] [pid 7165:tid 7178] [client 52.138.3.9:19187] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-trackback.php"] [unique_id "aaRVCxRjCrA8qWBjgG-fCgAAAks"]
[Sun Mar 01 23:02:35.914021 2026] [:error] [pid 7165:tid 7179] [client 52.138.3.9:19085] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-trackback.php"] [unique_id "aaRVCxRjCrA8qWBjgG-fDAAAAkw"]
[Sun Mar 01 23:02:36.368752 2026] [:error] [pid 38241:tid 38261] [client 52.138.3.9:19196] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-trackback.php"] [unique_id "aaRVDPKRPk6YnJBxw_xErQAAANE"]
[Sun Mar 01 23:02:36.908122 2026] [:error] [pid 38241:tid 38259] [client 52.138.3.9:19116] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wsd.php"] [unique_id "aaRVDPKRPk6YnJBxw_xErwAAAM8"]
[Sun Mar 01 23:02:37.327789 2026] [:error] [pid 7133:tid 7159] [client 52.138.3.9:19399] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wsd.php"] [unique_id "aaRVDfCtubh8pR64qB9rxwAAAFg"]
[Sun Mar 01 23:02:37.754347 2026] [:error] [pid 41342:tid 41361] [client 52.138.3.9:19184] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wsd.php"] [unique_id "aaRVDY4iJ6RAS5CatDlmHwAAAhA"]
[Sun Mar 01 23:02:38.177029 2026] [:error] [pid 7133:tid 7146] [client 52.138.3.9:19138] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wsd.php"] [unique_id "aaRVDvCtubh8pR64qB9rygAAAEs"]
[Sun Mar 01 23:02:38.642626 2026] [:error] [pid 7165:tid 7168] [client 52.138.3.9:19318] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/0x.php"] [unique_id "aaRVDhRjCrA8qWBjgG-fFAAAAkE"]
[Sun Mar 01 23:02:39.111693 2026] [:error] [pid 7165:tid 7190] [client 52.138.3.9:19161] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/0x.php"] [unique_id "aaRVDxRjCrA8qWBjgG-fFgAAAlc"]
[Sun Mar 01 23:02:39.621697 2026] [:error] [pid 7165:tid 7178] [client 52.138.3.9:19189] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/0x.php"] [unique_id "aaRVDxRjCrA8qWBjgG-fHAAAAks"]
[Sun Mar 01 23:02:40.065414 2026] [:error] [pid 7133:tid 7156] [client 52.138.3.9:19079] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/0x.php"] [unique_id "aaRVEPCtubh8pR64qB9r0AAAAFU"]
[Sun Mar 01 23:02:40.635278 2026] [:error] [pid 7165:tid 7178] [client 52.138.3.9:19217] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lock360.php"] [unique_id "aaRVEBRjCrA8qWBjgG-fKAAAAks"]
[Sun Mar 01 23:02:41.232404 2026] [:error] [pid 7165:tid 7175] [client 52.138.3.9:19124] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lock360.php"] [unique_id "aaRVERRjCrA8qWBjgG-fLgAAAkg"]
[Sun Mar 01 23:02:41.674542 2026] [:error] [pid 40750:tid 40763] [client 52.138.3.9:19185] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lock360.php"] [unique_id "aaRVEQfBuk03yQKDyquL3wAAAco"]
[Sun Mar 01 23:02:42.091862 2026] [:error] [pid 7165:tid 7169] [client 52.138.3.9:19076] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lock360.php"] [unique_id "aaRVEhRjCrA8qWBjgG-fMwAAAkI"]
[Sun Mar 01 23:02:42.752857 2026] [:error] [pid 7165:tid 7188] [client 52.138.3.9:19165] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/04.php"] [unique_id "aaRVEhRjCrA8qWBjgG-fOQAAAlU"]
[Sun Mar 01 23:02:43.225216 2026] [:error] [pid 40750:tid 40777] [client 52.138.3.9:18973] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/04.php"] [unique_id "aaRVEwfBuk03yQKDyquL4QAAAdg"]
[Sun Mar 01 23:02:43.681835 2026] [:error] [pid 7165:tid 7190] [client 52.138.3.9:19119] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/04.php"] [unique_id "aaRVExRjCrA8qWBjgG-fRAAAAlc"]
[Sun Mar 01 23:02:44.228950 2026] [:error] [pid 40750:tid 40754] [client 52.138.3.9:19107] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/04.php"] [unique_id "aaRVFAfBuk03yQKDyquL4wAAAcE"]
[Sun Mar 01 23:02:44.959816 2026] [:error] [pid 7165:tid 7167] [client 52.138.3.9:19114] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file9.php"] [unique_id "aaRVFBRjCrA8qWBjgG-fTgAAAkA"]
[Sun Mar 01 23:02:45.401698 2026] [:error] [pid 7165:tid 7170] [client 52.138.3.9:19010] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file9.php"] [unique_id "aaRVFRRjCrA8qWBjgG-fUgAAAkM"]
[Sun Mar 01 23:02:45.814682 2026] [:error] [pid 40750:tid 40774] [client 52.138.3.9:19055] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file9.php"] [unique_id "aaRVFQfBuk03yQKDyquL6wAAAdU"]
[Sun Mar 01 23:02:46.614319 2026] [:error] [pid 40750:tid 40758] [client 52.138.3.9:19244] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file9.php"] [unique_id "aaRVFgfBuk03yQKDyquL8wAAAcU"]
[Sun Mar 01 23:02:47.032553 2026] [:error] [pid 38241:tid 38267] [client 52.138.3.9:19091] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/as.php"] [unique_id "aaRVF_KRPk6YnJBxw_xEvgAAANc"]
[Sun Mar 01 23:02:47.444893 2026] [:error] [pid 40750:tid 40773] [client 52.138.3.9:19080] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/as.php"] [unique_id "aaRVFwfBuk03yQKDyquL9wAAAdQ"]
[Sun Mar 01 23:02:47.860708 2026] [:error] [pid 7165:tid 7184] [client 52.138.3.9:19193] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/as.php"] [unique_id "aaRVFxRjCrA8qWBjgG-fZAAAAlE"]
[Sun Mar 01 23:02:48.414001 2026] [:error] [pid 38241:tid 38253] [client 52.138.3.9:19086] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/as.php"] [unique_id "aaRVGPKRPk6YnJBxw_xExQAAAMk"]
[Sun Mar 01 23:02:48.831008 2026] [:error] [pid 38241:tid 38258] [client 52.138.3.9:19175] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ac.php"] [unique_id "aaRVGPKRPk6YnJBxw_xExgAAAM4"]
[Sun Mar 01 23:02:49.258137 2026] [:error] [pid 38241:tid 38263] [client 52.138.3.9:19127] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ac.php"] [unique_id "aaRVGfKRPk6YnJBxw_xEyAAAANM"]
[Sun Mar 01 23:02:49.727690 2026] [:error] [pid 7165:tid 7191] [client 52.138.3.9:19263] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ac.php"] [unique_id "aaRVGRRjCrA8qWBjgG-faQAAAlg"]
[Sun Mar 01 23:02:50.272165 2026] [:error] [pid 7165:tid 7169] [client 52.138.3.9:19178] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ac.php"] [unique_id "aaRVGhRjCrA8qWBjgG-fbQAAAkI"]
[Sun Mar 01 23:02:50.731685 2026] [:error] [pid 37032:tid 37058] [client 52.138.3.9:19100] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/simple.php"] [unique_id "aaRVGuu0U4o7eSImsVSQAwAAAZg"]
[Sun Mar 01 23:02:51.200663 2026] [:error] [pid 44644:tid 44671] [client 52.138.3.9:19254] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/simple.php"] [unique_id "aaRVG53RJaXMcw3y9V_n7AAAABg"]
[Sun Mar 01 23:02:51.619667 2026] [:error] [pid 38034:tid 38051] [client 52.138.3.9:19180] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/simple.php"] [unique_id "aaRVGwxtfZjwlJok9K8qfQAAAQ0"]
[Sun Mar 01 23:02:52.042056 2026] [:error] [pid 7165:tid 7171] [client 52.138.3.9:19048] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/simple.php"] [unique_id "aaRVHBRjCrA8qWBjgG-fcQAAAkQ"]
[Sun Mar 01 23:02:52.456934 2026] [:error] [pid 7165:tid 7191] [client 52.138.3.9:19156] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rh.php"] [unique_id "aaRVHBRjCrA8qWBjgG-fcwAAAlg"]
[Sun Mar 01 23:02:52.887209 2026] [:error] [pid 38241:tid 38261] [client 52.138.3.9:19238] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rh.php"] [unique_id "aaRVHPKRPk6YnJBxw_xEzQAAANE"]
[Sun Mar 01 23:02:53.373820 2026] [:error] [pid 7165:tid 7169] [client 52.138.3.9:19037] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rh.php"] [unique_id "aaRVHRRjCrA8qWBjgG-feQAAAkI"]
[Sun Mar 01 23:02:53.920432 2026] [:error] [pid 33822:tid 33838] [client 52.138.3.9:19139] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rh.php"] [unique_id "aaRVHW6W3ygu1YVssuY68gAAAo4"]
[Sun Mar 01 23:02:54.398531 2026] [:error] [pid 7165:tid 7179] [client 52.138.3.9:19236] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/public/vx.php"] [unique_id "aaRVHhRjCrA8qWBjgG-ffQAAAkw"]
[Sun Mar 01 23:02:54.967795 2026] [:error] [pid 7165:tid 7183] [client 52.138.3.9:19291] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/public/vx.php"] [unique_id "aaRVHhRjCrA8qWBjgG-fgAAAAlA"]
[Sun Mar 01 23:02:55.448220 2026] [:error] [pid 40750:tid 40759] [client 52.138.3.9:19256] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/public/vx.php"] [unique_id "aaRVHwfBuk03yQKDyquMGAAAAcY"]
[Sun Mar 01 23:02:55.863287 2026] [:error] [pid 40750:tid 40777] [client 52.138.3.9:19243] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/public/vx.php"] [unique_id "aaRVHwfBuk03yQKDyquMGgAAAdg"]
[Sun Mar 01 23:02:56.330785 2026] [:error] [pid 38241:tid 38268] [client 52.138.3.9:19121] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/az.php"] [unique_id "aaRVIPKRPk6YnJBxw_xE1gAAANg"]
[Sun Mar 01 23:02:56.751399 2026] [:error] [pid 37032:tid 37046] [client 52.138.3.9:19190] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/az.php"] [unique_id "aaRVIOu0U4o7eSImsVSQCAAAAYw"]
[Sun Mar 01 23:02:57.242918 2026] [:error] [pid 44644:tid 44660] [client 52.138.3.9:19084] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/az.php"] [unique_id "aaRVIZ3RJaXMcw3y9V_n7gAAAA0"]
[Sun Mar 01 23:02:57.899585 2026] [:error] [pid 33822:tid 33837] [client 52.138.3.9:19108] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/az.php"] [unique_id "aaRVIW6W3ygu1YVssuY6-QAAAo0"]
[Sun Mar 01 23:02:58.369666 2026] [:error] [pid 33822:tid 33826] [client 52.138.3.9:19157] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ton.php"] [unique_id "aaRVIm6W3ygu1YVssuY6-gAAAoI"]
[Sun Mar 01 23:02:58.790230 2026] [:error] [pid 38034:tid 38057] [client 52.138.3.9:19117] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ton.php"] [unique_id "aaRVIgxtfZjwlJok9K8qgwAAARM"]
[Sun Mar 01 23:02:59.228037 2026] [:error] [pid 44644:tid 44658] [client 52.138.3.9:19109] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ton.php"] [unique_id "aaRVI53RJaXMcw3y9V_n8QAAAAs"]
[Sun Mar 01 23:02:59.716750 2026] [:error] [pid 40750:tid 40760] [client 52.138.3.9:19258] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ton.php"] [unique_id "aaRVIwfBuk03yQKDyquMIwAAAcc"]
[Sun Mar 01 23:03:00.136326 2026] [:error] [pid 38241:tid 38262] [client 52.138.3.9:19031] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/333.php"] [unique_id "aaRVJPKRPk6YnJBxw_xE3AAAANI"]
[Sun Mar 01 23:03:00.583936 2026] [:error] [pid 38241:tid 38261] [client 52.138.3.9:19259] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/333.php"] [unique_id "aaRVJPKRPk6YnJBxw_xE3gAAANE"]
[Sun Mar 01 23:03:01.098582 2026] [:error] [pid 7165:tid 7186] [client 52.138.3.9:19234] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/333.php"] [unique_id "aaRVJRRjCrA8qWBjgG-fgwAAAlM"]
[Sun Mar 01 23:03:01.519447 2026] [:error] [pid 38241:tid 38246] [client 52.138.3.9:19126] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/333.php"] [unique_id "aaRVJfKRPk6YnJBxw_xE4gAAAMI"]
[Sun Mar 01 23:03:01.930135 2026] [:error] [pid 38241:tid 38253] [client 52.138.3.9:19015] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zfile.php"] [unique_id "aaRVJfKRPk6YnJBxw_xE5AAAAMk"]
[Sun Mar 01 23:03:02.376442 2026] [:error] [pid 7165:tid 7173] [client 52.138.3.9:19103] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zfile.php"] [unique_id "aaRVJhRjCrA8qWBjgG-fhgAAAkY"]
[Sun Mar 01 23:03:02.803956 2026] [:error] [pid 7165:tid 7172] [client 52.138.3.9:19163] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zfile.php"] [unique_id "aaRVJhRjCrA8qWBjgG-fiAAAAkU"]
[Sun Mar 01 23:03:03.231909 2026] [:error] [pid 7165:tid 7179] [client 52.138.3.9:19096] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zfile.php"] [unique_id "aaRVJxRjCrA8qWBjgG-figAAAkw"]
[Sun Mar 01 23:03:03.691599 2026] [:error] [pid 33822:tid 33835] [client 52.138.3.9:19070] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/akcc.php"] [unique_id "aaRVJ26W3ygu1YVssuY6_gAAAos"]
[Sun Mar 01 23:03:04.149220 2026] [:error] [pid 37032:tid 37044] [client 52.138.3.9:19018] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/akcc.php"] [unique_id "aaRVKOu0U4o7eSImsVSQEAAAAYo"]
[Sun Mar 01 23:03:04.656057 2026] [:error] [pid 33822:tid 33833] [client 52.138.3.9:19122] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/akcc.php"] [unique_id "aaRVKG6W3ygu1YVssuY7AAAAAok"]
[Sun Mar 01 23:03:05.364795 2026] [:error] [pid 38241:tid 38264] [client 52.138.3.9:19389] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/akcc.php"] [unique_id "aaRVKfKRPk6YnJBxw_xE7gAAANQ"]
[Sun Mar 01 23:03:06.284505 2026] [:error] [pid 7165:tid 7189] [client 52.138.3.9:19103] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/321.php"] [unique_id "aaRVKhRjCrA8qWBjgG-fkgAAAlY"]
[Sun Mar 01 23:03:06.807967 2026] [:error] [pid 40750:tid 40760] [client 52.138.3.9:19092] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/321.php"] [unique_id "aaRVKgfBuk03yQKDyquMOQAAAcc"]
[Sun Mar 01 23:03:07.263254 2026] [:error] [pid 40750:tid 40769] [client 52.138.3.9:19191] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/321.php"] [unique_id "aaRVKwfBuk03yQKDyquMPgAAAdA"]
[Sun Mar 01 23:03:09.799930 2026] [:error] [pid 7165:tid 7187] [client 52.138.3.9:19174] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/321.php"] [unique_id "aaRVLRRjCrA8qWBjgG-fuAAAAlQ"]
[Sun Mar 01 23:03:10.605637 2026] [:error] [pid 40750:tid 40764] [client 52.138.3.9:19106] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/k.php"] [unique_id "aaRVLgfBuk03yQKDyquMTQAAAcs"]
[Sun Mar 01 23:03:11.062823 2026] [:error] [pid 44644:tid 44665] [client 52.138.3.9:19095] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/k.php"] [unique_id "aaRVL53RJaXMcw3y9V_n9wAAABI"]
[Sun Mar 01 23:03:11.547702 2026] [:error] [pid 33822:tid 33844] [client 52.138.3.9:19087] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/k.php"] [unique_id "aaRVL26W3ygu1YVssuY7BQAAApQ"]
[Sun Mar 01 23:03:11.981508 2026] [:error] [pid 7133:tid 7148] [client 52.138.3.9:19093] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/k.php"] [unique_id "aaRVL_Ctubh8pR64qB9r6QAAAE0"]
[Sun Mar 01 23:03:12.411238 2026] [:error] [pid 7133:tid 7155] [client 52.138.3.9:19306] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ant.php"] [unique_id "aaRVMPCtubh8pR64qB9r7QAAAFQ"]
[Sun Mar 01 23:03:12.932405 2026] [:error] [pid 7165:tid 7175] [client 52.138.3.9:19073] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ant.php"] [unique_id "aaRVMBRjCrA8qWBjgG-fyAAAAkg"]
[Sun Mar 01 23:03:13.376839 2026] [:error] [pid 40750:tid 40770] [client 52.138.3.9:19043] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ant.php"] [unique_id "aaRVMQfBuk03yQKDyquMXAAAAdE"]
[Sun Mar 01 23:03:13.796771 2026] [:error] [pid 40750:tid 40772] [client 52.138.3.9:19088] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ant.php"] [unique_id "aaRVMQfBuk03yQKDyquMYQAAAdM"]
[Sun Mar 01 23:03:14.226239 2026] [:error] [pid 7133:tid 7151] [client 52.138.3.9:19105] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/info.php"] [unique_id "aaRVMvCtubh8pR64qB9r8QAAAFA"]
[Sun Mar 01 23:03:14.700263 2026] [:error] [pid 33822:tid 33835] [client 52.138.3.9:19045] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/info.php"] [unique_id "aaRVMm6W3ygu1YVssuY7DQAAAos"]
[Sun Mar 01 23:03:15.142240 2026] [:error] [pid 33822:tid 33833] [client 52.138.3.9:19030] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/info.php"] [unique_id "aaRVM26W3ygu1YVssuY7EQAAAok"]
[Sun Mar 01 23:03:15.606425 2026] [:error] [pid 33822:tid 33839] [client 52.138.3.9:18953] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/info.php"] [unique_id "aaRVM26W3ygu1YVssuY7FAAAAo8"]
[Sun Mar 01 23:03:16.034344 2026] [proxy_fcgi:error] [pid 7165:tid 7170] [client 52.138.3.9:19027] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 23:03:16.242460 2026] [proxy_fcgi:error] [pid 7165:tid 7174] [client 52.138.3.9:19027] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 23:03:16.450701 2026] [proxy_fcgi:error] [pid 7165:tid 7178] [client 52.138.3.9:19027] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 23:03:16.658465 2026] [proxy_fcgi:error] [pid 7165:tid 7188] [client 52.138.3.9:19027] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 23:03:16.866649 2026] [proxy_fcgi:error] [pid 7165:tid 7182] [client 52.138.3.9:19027] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 23:03:17.074302 2026] [proxy_fcgi:error] [pid 7165:tid 7186] [client 52.138.3.9:19027] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 23:03:17.285983 2026] [proxy_fcgi:error] [pid 7165:tid 7173] [client 52.138.3.9:19027] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 23:03:17.494887 2026] [proxy_fcgi:error] [pid 7165:tid 7168] [client 52.138.3.9:19027] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 23:03:17.764140 2026] [proxy_fcgi:error] [pid 7165:tid 7167] [client 52.138.3.9:19027] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 23:03:17.972819 2026] [proxy_fcgi:error] [pid 7165:tid 7180] [client 52.138.3.9:19027] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 23:03:18.177544 2026] [:error] [pid 7165:tid 7174] [client 52.138.3.9:19027] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/about.php"] [unique_id "aaRVNhRjCrA8qWBjgG-f4AAAAkc"]
[Sun Mar 01 23:03:18.635227 2026] [:error] [pid 38241:tid 38245] [client 52.138.3.9:19395] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/about.php"] [unique_id "aaRVNvKRPk6YnJBxw_xFBgAAAME"]
[Sun Mar 01 23:03:19.151776 2026] [:error] [pid 7165:tid 7175] [client 52.138.3.9:19024] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/about.php"] [unique_id "aaRVNxRjCrA8qWBjgG-f5QAAAkg"]
[Sun Mar 01 23:03:19.711672 2026] [:error] [pid 38034:tid 38051] [client 52.138.3.9:19195] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/about.php"] [unique_id "aaRVNwxtfZjwlJok9K8qkAAAAQ0"]
[Sun Mar 01 23:03:20.188052 2026] [:error] [pid 7165:tid 7183] [client 52.138.3.9:19128] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/adminfuns.php"] [unique_id "aaRVOBRjCrA8qWBjgG-f6QAAAlA"]
[Sun Mar 01 23:03:20.722070 2026] [:error] [pid 7165:tid 7187] [client 52.138.3.9:19042] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/adminfuns.php"] [unique_id "aaRVOBRjCrA8qWBjgG-f7QAAAlQ"]
[Sun Mar 01 23:03:21.263385 2026] [:error] [pid 7165:tid 7167] [client 52.138.3.9:18961] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/adminfuns.php"] [unique_id "aaRVORRjCrA8qWBjgG-f7gAAAkA"]
[Sun Mar 01 23:03:21.678112 2026] [:error] [pid 38241:tid 38262] [client 52.138.3.9:19082] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/adminfuns.php"] [unique_id "aaRVOfKRPk6YnJBxw_xFEgAAANI"]
[Sun Mar 01 23:03:22.099473 2026] [:error] [pid 38241:tid 38267] [client 52.138.3.9:19133] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/b.php"] [unique_id "aaRVOvKRPk6YnJBxw_xFFAAAANc"]
[Sun Mar 01 23:03:22.589673 2026] [:error] [pid 33822:tid 33844] [client 52.138.3.9:19072] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/b.php"] [unique_id "aaRVOm6W3ygu1YVssuY7KwAAApQ"]
[Sun Mar 01 23:03:23.029885 2026] [:error] [pid 38241:tid 38250] [client 52.138.3.9:19033] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/b.php"] [unique_id "aaRVO_KRPk6YnJBxw_xFFwAAAMY"]
[Sun Mar 01 23:03:23.447770 2026] [:error] [pid 38241:tid 38245] [client 52.138.3.9:19016] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/b.php"] [unique_id "aaRVO_KRPk6YnJBxw_xFGQAAAME"]
[Sun Mar 01 23:03:23.865551 2026] [:error] [pid 40750:tid 40762] [client 52.138.3.9:19134] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/alfa-rex.php7"] [unique_id "aaRVOwfBuk03yQKDyquMmQAAAck"]
[Sun Mar 01 23:03:24.330366 2026] [:error] [pid 7165:tid 7177] [client 52.138.3.9:19046] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/alfa-rex.php7"] [unique_id "aaRVPBRjCrA8qWBjgG-f-gAAAko"]
[Sun Mar 01 23:03:24.746326 2026] [:error] [pid 40750:tid 40763] [client 52.138.3.9:19022] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/alfa-rex.php7"] [unique_id "aaRVPAfBuk03yQKDyquMoQAAAco"]
[Sun Mar 01 23:03:25.172117 2026] [:error] [pid 40750:tid 40775] [client 52.138.3.9:19011] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/alfa-rex.php7"] [unique_id "aaRVPQfBuk03yQKDyquMpgAAAdY"]
[Sun Mar 01 23:03:25.608960 2026] [:error] [pid 7165:tid 7178] [client 52.138.3.9:19029] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/atomlib.php"] [unique_id "aaRVPRRjCrA8qWBjgG-f_gAAAks"]
[Sun Mar 01 23:03:26.077165 2026] [:error] [pid 7165:tid 7181] [client 52.138.3.9:19124] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/atomlib.php"] [unique_id "aaRVPhRjCrA8qWBjgG-gBAAAAk4"]
[Sun Mar 01 23:03:26.494039 2026] [:error] [pid 7165:tid 7175] [client 52.138.3.9:19089] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/atomlib.php"] [unique_id "aaRVPhRjCrA8qWBjgG-gCAAAAkg"]
[Sun Mar 01 23:03:26.904686 2026] [:error] [pid 7165:tid 7187] [client 52.138.3.9:19248] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/atomlib.php"] [unique_id "aaRVPhRjCrA8qWBjgG-gCwAAAlQ"]
[Sun Mar 01 23:03:27.362596 2026] [:error] [pid 7165:tid 7174] [client 52.138.3.9:19039] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/520.php"] [unique_id "aaRVPxRjCrA8qWBjgG-gDwAAAkc"]
[Sun Mar 01 23:03:27.780853 2026] [:error] [pid 7133:tid 7149] [client 52.138.3.9:19069] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/520.php"] [unique_id "aaRVP_Ctubh8pR64qB9sCQAAAE4"]
[Sun Mar 01 23:03:28.351519 2026] [:error] [pid 38241:tid 38261] [client 52.138.3.9:19059] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/520.php"] [unique_id "aaRVQPKRPk6YnJBxw_xFHQAAANE"]
[Sun Mar 01 23:03:28.790795 2026] [:error] [pid 40750:tid 40760] [client 52.138.3.9:19038] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/520.php"] [unique_id "aaRVQAfBuk03yQKDyquMtAAAAcc"]
[Sun Mar 01 23:03:29.207155 2026] [:error] [pid 40750:tid 40759] [client 52.138.3.9:18974] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/security.php"] [unique_id "aaRVQQfBuk03yQKDyquMtwAAAcY"]
[Sun Mar 01 23:03:29.618667 2026] [:error] [pid 40750:tid 40762] [client 52.138.3.9:19183] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/security.php"] [unique_id "aaRVQQfBuk03yQKDyquMuwAAAck"]
[Sun Mar 01 23:03:30.034458 2026] [:error] [pid 40750:tid 40767] [client 52.138.3.9:19111] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/security.php"] [unique_id "aaRVQgfBuk03yQKDyquMwAAAAc4"]
[Sun Mar 01 23:03:30.464715 2026] [:error] [pid 40750:tid 40753] [client 52.138.3.9:19118] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/security.php"] [unique_id "aaRVQgfBuk03yQKDyquMwgAAAcA"]
[Sun Mar 01 23:03:30.986017 2026] [:error] [pid 40750:tid 40771] [client 52.138.3.9:19054] [client 52.138.3.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aaRVQgfBuk03yQKDyquMxQAAAdI"]
[Sun Mar 01 23:03:31.414081 2026] [:error] [pid 40750:tid 40762] [client 52.138.3.9:19028] [client 52.138.3.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aaRVQwfBuk03yQKDyquMygAAAck"]
[Sun Mar 01 23:03:31.827209 2026] [:error] [pid 7165:tid 7169] [client 52.138.3.9:19063] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/block-patterns/index.php"] [unique_id "aaRVQxRjCrA8qWBjgG-gFgAAAkI"]
[Sun Mar 01 23:03:32.259002 2026] [:error] [pid 38241:tid 38246] [client 52.138.3.9:19057] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/block-patterns/index.php"] [unique_id "aaRVRPKRPk6YnJBxw_xFIwAAAMI"]
[Sun Mar 01 23:03:32.680113 2026] [:error] [pid 33822:tid 33836] [client 52.138.3.9:19081] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/block-patterns/index.php"] [unique_id "aaRVRG6W3ygu1YVssuY7QwAAAow"]
[Mon Mar 02 00:56:39.960985 2026] [:error] [pid 53181:tid 53523] [client 20.63.80.2:22856] [client 20.63.80.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/server.php"] [unique_id "aaRvx4r_0T1SazTrJOAkDQAAAQg"]
[Mon Mar 02 00:56:41.223675 2026] [:error] [pid 26940:tid 26959] [client 20.63.80.2:22885] [client 20.63.80.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/server.php"] [unique_id "aaRvyRrUg-j5GLDtRFlxcQAAAE8"]
[Mon Mar 02 00:56:42.066228 2026] [:error] [pid 53585:tid 53608] [client 20.63.80.2:22860] [client 20.63.80.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/server.php"] [unique_id "aaRvynbCvYsvu6kKhM10hAAAABQ"]
[Mon Mar 02 00:56:42.887530 2026] [:error] [pid 53585:tid 53601] [client 20.63.80.2:22900] [client 20.63.80.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/server.php"] [unique_id "aaRvynbCvYsvu6kKhM10jQAAAA0"]
[Mon Mar 02 02:35:38.126103 2026] [proxy_fcgi:error] [pid 26940:tid 26950] [client 45.67.97.57:56515] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:35:38.581450 2026] [proxy_fcgi:error] [pid 26940:tid 26948] [client 45.67.97.57:56515] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:35:39.020647 2026] [proxy_fcgi:error] [pid 26940:tid 26968] [client 45.67.97.57:56515] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:35:39.456869 2026] [proxy_fcgi:error] [pid 26940:tid 26953] [client 45.67.97.57:56515] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:35:39.906927 2026] [proxy_fcgi:error] [pid 26940:tid 26959] [client 45.67.97.57:56515] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:35:40.350140 2026] [proxy_fcgi:error] [pid 26940:tid 26967] [client 45.67.97.57:56515] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:35:40.795162 2026] [proxy_fcgi:error] [pid 26940:tid 26968] [client 45.67.97.57:56515] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:35:41.250428 2026] [proxy_fcgi:error] [pid 26940:tid 26946] [client 45.67.97.57:56515] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:35:42.127052 2026] [proxy_fcgi:error] [pid 26940:tid 26944] [client 45.67.97.57:56515] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:35:42.999479 2026] [proxy_fcgi:error] [pid 26940:tid 26945] [client 45.67.97.57:56515] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:35:43.459409 2026] [proxy_fcgi:error] [pid 26940:tid 26951] [client 45.67.97.57:56515] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:35:43.903571 2026] [proxy_fcgi:error] [pid 26940:tid 26946] [client 45.67.97.57:56515] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:35:44.340912 2026] [proxy_fcgi:error] [pid 26940:tid 26949] [client 45.67.97.57:56515] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:35:44.776525 2026] [proxy_fcgi:error] [pid 26940:tid 26965] [client 45.67.97.57:56515] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:35:45.234265 2026] [proxy_fcgi:error] [pid 26940:tid 26960] [client 45.67.97.57:56515] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:35:45.672750 2026] [proxy_fcgi:error] [pid 26940:tid 26964] [client 45.67.97.57:56515] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:35:46.124709 2026] [proxy_fcgi:error] [pid 26940:tid 26962] [client 45.67.97.57:56515] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:35:46.570707 2026] [proxy_fcgi:error] [pid 26940:tid 26966] [client 45.67.97.57:56515] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:35:52.800252 2026] [:error] [pid 26940:tid 26963] [client 45.67.97.57:56515] [client 45.67.97.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aaSHCBrUg-j5GLDtRFn9tgAAAFM"]
[Mon Mar 02 02:35:58.770734 2026] [:error] [pid 26940:tid 26953] [client 45.67.97.55:32227] [client 45.67.97.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aaSHDhrUg-j5GLDtRFn9wwAAAEk"]
[Mon Mar 02 02:36:04.892260 2026] [proxy_fcgi:error] [pid 53181:tid 53531] [client 45.67.97.58:62633] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:36:08.256281 2026] [:error] [pid 53181:tid 53534] [client 45.67.97.58:62633] [client 45.67.97.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dwelectservices.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aaSHGIr_0T1SazTrJOBZVwAAARM"]
[Mon Mar 02 02:36:10.984136 2026] [proxy_fcgi:error] [pid 53585:tid 53589] [client 45.67.97.202:55587] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:36:11.415848 2026] [:error] [pid 53585:tid 53598] [client 45.67.97.202:55587] [client 45.67.97.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aaSHG3bCvYsvu6kKhM3WcgAAAAo"]
[Mon Mar 02 02:36:12.748307 2026] [proxy_fcgi:error] [pid 53585:tid 53610] [client 45.67.97.58:61635] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:36:15.000401 2026] [:error] [pid 53585:tid 53607] [client 45.67.97.58:61635] [client 45.67.97.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aaSHHnbCvYsvu6kKhM3WhAAAABM"]
[Mon Mar 02 02:36:16.403725 2026] [:error] [pid 53181:tid 53530] [client 45.67.97.57:55169] [client 45.67.97.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aaSHIIr_0T1SazTrJOBZcgAAAQ8"]
[Mon Mar 02 02:36:17.297281 2026] [:error] [pid 53180:tid 53457] [client 45.67.97.202:61569] [client 45.67.97.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aaSHITPPJpDOBvYnaa1u8gAAAY0"]
[Mon Mar 02 02:36:18.171839 2026] [:error] [pid 53182:tid 53555] [client 45.67.97.202:64737] [client 45.67.97.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aaSHIvv073cA6eM1YCT19gAAAMs"]
[Mon Mar 02 02:36:19.096136 2026] [:error] [pid 53181:tid 53531] [client 45.67.97.202:28249] [client 45.67.97.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aaSHI4r_0T1SazTrJOBZewAAARA"]
[Mon Mar 02 02:36:19.975579 2026] [:error] [pid 53180:tid 53463] [client 45.67.97.58:30829] [client 45.67.97.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aaSHIzPPJpDOBvYnaa1u_AAAAZM"]
[Mon Mar 02 02:36:21.306420 2026] [:error] [pid 53180:tid 53461] [client 45.67.97.202:24771] [client 45.67.97.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aaSHJTPPJpDOBvYnaa1vAQAAAZE"]
[Mon Mar 02 02:36:22.173864 2026] [proxy_fcgi:error] [pid 53180:tid 53457] [client 45.67.97.202:35223] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:36:23.714408 2026] [:error] [pid 53180:tid 53451] [client 45.67.97.202:35223] [client 45.67.97.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dwelectservices.com.au"] [uri "/filemanager.php"] [unique_id "aaSHJzPPJpDOBvYnaa1vCQAAAYc"]
[Mon Mar 02 02:36:25.493906 2026] [:error] [pid 53585:tid 53592] [client 45.67.97.58:35949] [client 45.67.97.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aaSHKXbCvYsvu6kKhM3WjgAAAAQ"]
[Mon Mar 02 02:36:26.817595 2026] [:error] [pid 53182:tid 53552] [client 45.67.97.55:28883] [client 45.67.97.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aaSHKvv073cA6eM1YCT2AAAAAMk"]
[Mon Mar 02 02:36:27.716757 2026] [proxy_fcgi:error] [pid 53182:tid 53563] [client 45.67.97.55:40759] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:36:28.164104 2026] [:error] [pid 53182:tid 53558] [client 45.67.97.55:40759] [client 45.67.97.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aaSHLPv073cA6eM1YCT2BAAAAM4"]
[Mon Mar 02 02:36:29.034478 2026] [proxy_fcgi:error] [pid 53585:tid 53597] [client 45.67.97.58:28029] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:36:30.385574 2026] [proxy_fcgi:error] [pid 53585:tid 53592] [client 45.67.97.58:28029] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:36:31.761445 2026] [:error] [pid 53585:tid 53604] [client 45.67.97.58:28029] [client 45.67.97.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aaSHL3bCvYsvu6kKhM3WnQAAABA"]
[Mon Mar 02 02:36:32.766900 2026] [proxy_fcgi:error] [pid 53182:tid 53552] [client 45.67.97.55:57129] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:36:33.297635 2026] [:error] [pid 53182:tid 53555] [client 45.67.97.55:57129] [client 45.67.97.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aaSHMfv073cA6eM1YCT2EAAAAMs"]
[Mon Mar 02 02:36:35.380611 2026] [proxy_fcgi:error] [pid 26940:tid 26954] [client 45.67.97.57:53041] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:36:36.854259 2026] [:error] [pid 26940:tid 26946] [client 45.67.97.57:53041] [client 45.67.97.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "aaSHNBrUg-j5GLDtRFn-YgAAAEI"]
[Mon Mar 02 02:36:38.294121 2026] [:error] [pid 26940:tid 26957] [client 45.67.97.202:62367] [client 45.67.97.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aaSHNhrUg-j5GLDtRFn-aAAAAE0"]
[Mon Mar 02 02:36:39.668248 2026] [proxy_fcgi:error] [pid 53182:tid 53564] [client 45.67.97.202:22845] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:36:40.134601 2026] [proxy_fcgi:error] [pid 53182:tid 53543] [client 45.67.97.202:22845] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:36:41.246146 2026] [:error] [pid 53182:tid 53568] [client 45.67.97.202:22845] [client 45.67.97.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aaSHOfv073cA6eM1YCT2KAAAANg"]
[Mon Mar 02 02:36:42.717927 2026] [:error] [pid 53182:tid 53560] [client 45.67.97.202:65035] [client 45.67.97.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aaSHOvv073cA6eM1YCT2MAAAANA"]
[Mon Mar 02 02:36:44.054783 2026] [:error] [pid 26940:tid 26962] [client 45.67.97.55:33629] [client 45.67.97.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aaSHPBrUg-j5GLDtRFn-gwAAAFI"]
[Mon Mar 02 02:36:44.930570 2026] [:error] [pid 53180:tid 53452] [client 45.67.97.57:36453] [client 45.67.97.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aaSHPDPPJpDOBvYnaa1vHgAAAYg"]
[Mon Mar 02 02:36:45.853256 2026] [:error] [pid 53181:tid 53530] [client 45.67.97.55:46039] [client 45.67.97.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aaSHPYr_0T1SazTrJOBZxwAAAQ8"]
[Mon Mar 02 02:36:48.056529 2026] [proxy_fcgi:error] [pid 53181:tid 53524] [client 45.67.97.55:52797] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:36:48.533431 2026] [:error] [pid 53181:tid 53534] [client 45.67.97.55:52797] [client 45.67.97.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "aaSHQIr_0T1SazTrJOBZzwAAARM"]
[Mon Mar 02 02:36:49.829909 2026] [:error] [pid 26940:tid 26965] [client 45.67.97.58:20965] [client 45.67.97.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "aaSHQRrUg-j5GLDtRFn-rQAAAFU"]
[Mon Mar 02 02:36:53.020678 2026] [:error] [pid 53180:tid 53467] [client 45.67.97.55:57203] [client 45.67.97.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aaSHRTPPJpDOBvYnaa1vIgAAAZc"]
[Mon Mar 02 02:36:54.800303 2026] [proxy_fcgi:error] [pid 26940:tid 26968] [client 45.67.97.202:35169] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:36:55.675823 2026] [proxy_fcgi:error] [pid 26940:tid 26954] [client 45.67.97.202:35169] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:36:57.459676 2026] [:error] [pid 26940:tid 26961] [client 45.67.97.202:35169] [client 45.67.97.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/admin.php"] [unique_id "aaSHSRrUg-j5GLDtRFn_DAAAAFE"]
[Mon Mar 02 02:36:59.692936 2026] [:error] [pid 53585:tid 53609] [client 45.67.97.58:51077] [client 45.67.97.58] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.67.97.58, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aaSHS3bCvYsvu6kKhM3W1gAAABU"]
[Mon Mar 02 02:37:00.136040 2026] [proxy_fcgi:error] [pid 53585:tid 53589] [client 45.67.97.58:51077] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:37:03.495824 2026] [proxy_fcgi:error] [pid 53585:tid 53590] [client 45.67.97.58:51077] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:37:03.952621 2026] [proxy_fcgi:error] [pid 53585:tid 53599] [client 45.67.97.58:51077] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:37:06.238516 2026] [:error] [pid 53585:tid 53600] [client 45.67.97.58:51077] [client 45.67.97.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aaSHUnbCvYsvu6kKhM3W4wAAAAw"]
[Mon Mar 02 02:37:07.134654 2026] [proxy_fcgi:error] [pid 53585:tid 53601] [client 45.67.97.202:21309] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:37:07.581203 2026] [proxy_fcgi:error] [pid 53585:tid 53597] [client 45.67.97.202:21309] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:37:08.052439 2026] [:error] [pid 53585:tid 53612] [client 45.67.97.202:21309] [client 45.67.97.202] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.67.97.202, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aaSHVHbCvYsvu6kKhM3W5wAAABg"]
[Mon Mar 02 02:37:08.944154 2026] [:error] [pid 53585:tid 53605] [client 45.67.97.202:21309] [client 45.67.97.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/item.php"] [unique_id "aaSHVHbCvYsvu6kKhM3W6wAAABE"]
[Mon Mar 02 02:37:12.181410 2026] [proxy_fcgi:error] [pid 53182:tid 53549] [client 45.67.97.58:22349] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:37:12.693645 2026] [proxy_fcgi:error] [pid 53182:tid 53561] [client 45.67.97.58:22349] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:37:13.592404 2026] [proxy_fcgi:error] [pid 53182:tid 53558] [client 45.67.97.58:22349] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:37:14.501855 2026] [:error] [pid 53182:tid 53550] [client 45.67.97.58:22349] [client 45.67.97.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aaSHWvv073cA6eM1YCT22QAAAMc"]
[Mon Mar 02 02:37:15.416110 2026] [proxy_fcgi:error] [pid 53585:tid 53607] [client 45.67.97.202:48787] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:37:16.822638 2026] [proxy_fcgi:error] [pid 53585:tid 53602] [client 45.67.97.202:48787] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:37:17.821577 2026] [proxy_fcgi:error] [pid 53585:tid 53607] [client 45.67.97.202:48787] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:37:18.760921 2026] [proxy_fcgi:error] [pid 53585:tid 53611] [client 45.67.97.202:48787] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:37:19.201845 2026] [:error] [pid 53585:tid 53602] [client 45.67.97.202:48787] [client 45.67.97.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aaSHX3bCvYsvu6kKhM3XIwAAAA4"]
[Mon Mar 02 02:37:20.086543 2026] [proxy_fcgi:error] [pid 26940:tid 26968] [client 45.67.97.202:63667] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:37:20.518259 2026] [proxy_fcgi:error] [pid 26940:tid 26954] [client 45.67.97.202:63667] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:37:20.947985 2026] [:error] [pid 26940:tid 26967] [client 45.67.97.202:63667] [client 45.67.97.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aaSHYBrUg-j5GLDtRFn_aQAAAFc"]
[Mon Mar 02 02:37:22.334585 2026] [proxy_fcgi:error] [pid 26940:tid 26945] [client 45.67.97.202:41519] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:37:23.272601 2026] [:error] [pid 26940:tid 26953] [client 45.67.97.202:41519] [client 45.67.97.202] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.67.97.202, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "aaSHYxrUg-j5GLDtRFn_fAAAAEk"]
[Mon Mar 02 02:37:23.727531 2026] [:error] [pid 26940:tid 26951] [client 45.67.97.202:41519] [client 45.67.97.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aaSHYxrUg-j5GLDtRFn_ggAAAEc"]
[Mon Mar 02 02:37:29.380106 2026] [proxy_fcgi:error] [pid 53182:tid 53548] [client 45.67.97.57:56061] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:37:32.146925 2026] [proxy_fcgi:error] [pid 53182:tid 53558] [client 45.67.97.57:56061] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:37:32.589215 2026] [:error] [pid 53182:tid 53547] [client 45.67.97.57:56061] [client 45.67.97.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aaSHbPv073cA6eM1YCT3CQAAAMQ"]
[Mon Mar 02 02:37:35.092100 2026] [proxy_fcgi:error] [pid 26940:tid 26953] [client 45.67.97.58:47579] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:37:41.070432 2026] [:error] [pid 26940:tid 26954] [client 45.67.97.58:47579] [client 45.67.97.58] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.67.97.58, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aaSHdRrUg-j5GLDtRFn_0AAAAEo"]
[Mon Mar 02 02:37:42.136271 2026] [proxy_fcgi:error] [pid 26940:tid 26961] [client 45.67.97.58:47579] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:37:44.036314 2026] [proxy_fcgi:error] [pid 26940:tid 26955] [client 45.67.97.58:47579] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:37:46.199777 2026] [proxy_fcgi:error] [pid 26940:tid 26958] [client 45.67.97.58:47579] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:37:53.860871 2026] [:error] [pid 26940:tid 26965] [client 45.67.97.58:29147] [client 45.67.97.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aaSHgRrUg-j5GLDtRFkAPwAAAFU"]
[Mon Mar 02 02:37:55.483654 2026] [proxy_fcgi:error] [pid 53180:tid 53446] [client 45.67.97.55:54669] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:37:56.937158 2026] [:error] [pid 53180:tid 53460] [client 45.67.97.55:54669] [client 45.67.97.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/infi.php"] [unique_id "aaSHhDPPJpDOBvYnaa1vjgAAAZA"]
[Mon Mar 02 02:37:59.408072 2026] [proxy_fcgi:error] [pid 26940:tid 26966] [client 45.67.97.57:51465] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:37:59.869402 2026] [:error] [pid 26940:tid 26947] [client 45.67.97.57:51465] [client 45.67.97.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aaSHhxrUg-j5GLDtRFkAYwAAAEM"]
[Mon Mar 02 02:38:01.990793 2026] [proxy_fcgi:error] [pid 53585:tid 53591] [client 45.67.97.58:41499] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:38:05.451425 2026] [proxy_fcgi:error] [pid 53585:tid 53600] [client 45.67.97.58:41499] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:38:06.619834 2026] [:error] [pid 53585:tid 53605] [client 45.67.97.58:41499] [client 45.67.97.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "aaSHjnbCvYsvu6kKhM3XlwAAABE"]
[Mon Mar 02 02:38:08.120206 2026] [:error] [pid 53182:tid 53566] [client 45.67.97.202:28767] [client 45.67.97.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "aaSHkPv073cA6eM1YCT3PQAAANY"]
[Mon Mar 02 02:38:09.168117 2026] [proxy_fcgi:error] [pid 53585:tid 53612] [client 45.67.97.202:52843] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:38:09.901292 2026] [proxy_fcgi:error] [pid 53585:tid 53595] [client 45.67.97.202:52843] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:38:12.032064 2026] [:error] [pid 53585:tid 53609] [client 45.67.97.202:52843] [client 45.67.97.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aaSHlHbCvYsvu6kKhM3XrgAAABU"]
[Mon Mar 02 02:38:13.710043 2026] [:error] [pid 26940:tid 26954] [client 45.67.97.55:25835] [client 45.67.97.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "aaSHlRrUg-j5GLDtRFkAeQAAAEo"]
[Mon Mar 02 02:38:20.156132 2026] [:error] [pid 53585:tid 53609] [client 45.67.97.57:65495] [client 45.67.97.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/edit.php"] [unique_id "aaSHnHbCvYsvu6kKhM3X3AAAABU"]
[Mon Mar 02 02:38:22.186839 2026] [proxy_fcgi:error] [pid 26940:tid 26958] [client 45.67.97.202:39545] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:38:23.091727 2026] [proxy_fcgi:error] [pid 26940:tid 26950] [client 45.67.97.202:39545] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:38:23.534769 2026] [:error] [pid 26940:tid 26946] [client 45.67.97.202:39545] [client 45.67.97.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "aaSHnxrUg-j5GLDtRFkAswAAAEI"]
[Mon Mar 02 02:38:24.435644 2026] [proxy_fcgi:error] [pid 26940:tid 26959] [client 45.67.97.55:46741] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:38:25.298807 2026] [:error] [pid 26940:tid 26961] [client 45.67.97.55:46741] [client 45.67.97.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/click.php"] [unique_id "aaSHoRrUg-j5GLDtRFkAxQAAAFE"]
[Mon Mar 02 02:38:27.547072 2026] [:error] [pid 53181:tid 53536] [client 45.67.97.55:54527] [client 45.67.97.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "aaSHo4r_0T1SazTrJOBagwAAARU"]
[Mon Mar 02 02:38:29.111323 2026] [proxy_fcgi:error] [pid 53182:tid 53557] [client 45.67.97.55:28029] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:38:32.005139 2026] [proxy_fcgi:error] [pid 53182:tid 53556] [client 45.67.97.55:28029] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:38:32.889703 2026] [proxy_fcgi:error] [pid 53182:tid 53567] [client 45.67.97.55:28029] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:38:33.326586 2026] [:error] [pid 53182:tid 53558] [client 45.67.97.55:28029] [client 45.67.97.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "aaSHqfv073cA6eM1YCT3eAAAAM4"]
[Mon Mar 02 02:38:34.224652 2026] [:error] [pid 53585:tid 53594] [client 45.67.97.202:21989] [client 45.67.97.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/xl2023.php"] [unique_id "aaSHqnbCvYsvu6kKhM3YEgAAAAY"]
[Mon Mar 02 02:38:36.161522 2026] [:error] [pid 53585:tid 53612] [client 45.67.97.58:51395] [client 45.67.97.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/certificates/admin.php"] [unique_id "aaSHrHbCvYsvu6kKhM3YGgAAABg"]
[Mon Mar 02 02:38:39.087735 2026] [:error] [pid 53181:tid 53534] [client 45.67.97.202:61751] [client 45.67.97.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/media/dog.php"] [unique_id "aaSHr4r_0T1SazTrJOBamQAAARM"]
[Mon Mar 02 02:38:41.011139 2026] [proxy_fcgi:error] [pid 53182:tid 53559] [client 45.67.97.57:60179] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:38:41.572717 2026] [:error] [pid 53182:tid 53549] [client 45.67.97.57:60179] [client 45.67.97.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "aaSHsfv073cA6eM1YCT3iwAAAMY"]
[Mon Mar 02 02:38:42.488560 2026] [:error] [pid 26940:tid 26963] [client 45.67.97.58:22333] [client 45.67.97.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aaSHshrUg-j5GLDtRFkBIgAAAFM"]
[Mon Mar 02 02:38:43.386278 2026] [proxy_fcgi:error] [pid 53181:tid 53521] [client 45.67.97.55:35935] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:38:44.329557 2026] [:error] [pid 53181:tid 53522] [client 45.67.97.55:35935] [client 45.67.97.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aaSHtIr_0T1SazTrJOBasQAAAQc"]
[Mon Mar 02 02:38:45.233455 2026] [:error] [pid 26940:tid 26952] [client 45.67.97.55:40997] [client 45.67.97.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aaSHtRrUg-j5GLDtRFkBLgAAAEg"]
[Mon Mar 02 02:38:47.232676 2026] [:error] [pid 26940:tid 26962] [client 45.67.97.58:32469] [client 45.67.97.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/pomo/admin.php"] [unique_id "aaSHtxrUg-j5GLDtRFkBOwAAAFI"]
[Mon Mar 02 02:38:48.997456 2026] [:error] [pid 53182:tid 53549] [client 45.67.97.55:45139] [client 45.67.97.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/IXR/security.php"] [unique_id "aaSHuPv073cA6eM1YCT3pAAAAMY"]
[Mon Mar 02 02:38:50.346707 2026] [:error] [pid 53180:tid 53457] [client 45.67.97.57:33005] [client 45.67.97.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aaSHujPPJpDOBvYnaa1vwAAAAY0"]
[Mon Mar 02 02:38:52.084255 2026] [:error] [pid 53182:tid 53567] [client 45.67.97.55:27837] [client 45.67.97.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/fonts/about.php"] [unique_id "aaSHvPv073cA6eM1YCT3uwAAANc"]
[Mon Mar 02 02:38:53.819857 2026] [proxy_fcgi:error] [pid 26940:tid 26962] [client 45.67.97.202:54239] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:38:57.091437 2026] [proxy_fcgi:error] [pid 26940:tid 26964] [client 45.67.97.202:54239] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:38:59.062048 2026] [:error] [pid 26940:tid 26947] [client 45.67.97.202:54239] [client 45.67.97.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "aaSHwxrUg-j5GLDtRFkBjQAAAEM"]
[Mon Mar 02 02:39:02.129175 2026] [proxy_fcgi:error] [pid 53180:tid 53455] [client 45.67.97.55:36905] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:39:02.578155 2026] [proxy_fcgi:error] [pid 53180:tid 53468] [client 45.67.97.55:36905] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:39:04.854067 2026] [:error] [pid 53180:tid 53453] [client 45.67.97.55:36905] [client 45.67.97.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/file.php"] [unique_id "aaSHyDPPJpDOBvYnaa1v5wAAAYk"]
[Mon Mar 02 02:39:07.064558 2026] [:error] [pid 53182:tid 53568] [client 45.67.97.58:48453] [client 45.67.97.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "aaSHy_v073cA6eM1YCT36QAAANg"]
[Mon Mar 02 02:39:07.986920 2026] [:error] [pid 53182:tid 53547] [client 45.67.97.55:40123] [client 45.67.97.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "aaSHy_v073cA6eM1YCT37AAAAMQ"]
[Mon Mar 02 02:39:10.812834 2026] [:error] [pid 53182:tid 53553] [client 45.67.97.55:21841] [client 45.67.97.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aaSHzvv073cA6eM1YCT3_wAAAMo"]
[Mon Mar 02 02:39:12.640048 2026] [proxy_fcgi:error] [pid 53182:tid 53547] [client 45.67.97.202:55807] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:39:13.090062 2026] [proxy_fcgi:error] [pid 53182:tid 53548] [client 45.67.97.202:55807] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:39:13.544542 2026] [proxy_fcgi:error] [pid 53182:tid 53567] [client 45.67.97.202:55807] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:39:13.999132 2026] [proxy_fcgi:error] [pid 53182:tid 53563] [client 45.67.97.202:55807] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:39:16.474143 2026] [:error] [pid 53182:tid 53550] [client 45.67.97.202:55807] [client 45.67.97.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aaSH1Pv073cA6eM1YCT4FgAAAMc"]
[Mon Mar 02 02:39:17.366669 2026] [:error] [pid 53585:tid 53596] [client 45.67.97.202:34715] [client 45.67.97.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "aaSH1XbCvYsvu6kKhM3YlwAAAAg"]
[Mon Mar 02 02:39:18.243417 2026] [:error] [pid 53182:tid 53543] [client 45.67.97.202:25445] [client 45.67.97.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "aaSH1vv073cA6eM1YCT4GAAAAMA"]
[Mon Mar 02 02:39:19.115566 2026] [:error] [pid 26940:tid 26966] [client 45.67.97.202:42143] [client 45.67.97.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "aaSH1xrUg-j5GLDtRFkB0QAAAFY"]
[Mon Mar 02 02:39:19.982914 2026] [:error] [pid 26940:tid 26947] [client 45.67.97.57:38533] [client 45.67.97.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aaSH1xrUg-j5GLDtRFkB2AAAAEM"]
[Mon Mar 02 02:39:20.866693 2026] [:error] [pid 26940:tid 26948] [client 45.67.97.58:24019] [client 45.67.97.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aaSH2BrUg-j5GLDtRFkB4AAAAEQ"]
[Mon Mar 02 02:39:22.232615 2026] [:error] [pid 53182:tid 53568] [client 45.67.97.55:33811] [client 45.67.97.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/media/index.php"] [unique_id "aaSH2vv073cA6eM1YCT4HQAAANg"]
[Mon Mar 02 02:39:23.107513 2026] [:error] [pid 53181:tid 53515] [client 45.67.97.57:46625] [client 45.67.97.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "aaSH24r_0T1SazTrJOBbBQAAAQE"]
[Mon Mar 02 02:39:25.247532 2026] [:error] [pid 53181:tid 53530] [client 45.67.97.55:35425] [client 45.67.97.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "aaSH3Yr_0T1SazTrJOBbCwAAAQ8"]
[Mon Mar 02 02:39:26.134435 2026] [:error] [pid 53182:tid 53544] [client 45.67.97.55:55227] [client 45.67.97.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "aaSH3vv073cA6eM1YCT4JgAAAME"]
[Mon Mar 02 02:39:31.856677 2026] [:error] [pid 53585:tid 53600] [client 45.67.97.55:33261] [client 45.67.97.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/fonts/themes.php"] [unique_id "aaSH43bCvYsvu6kKhM3YqwAAAAw"]
[Mon Mar 02 02:39:35.345659 2026] [:error] [pid 53585:tid 53595] [client 45.67.97.57:46043] [client 45.67.97.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/certificates/index.php"] [unique_id "aaSH53bCvYsvu6kKhM3YugAAAAc"]
[Mon Mar 02 02:39:36.995461 2026] [proxy_fcgi:error] [pid 26940:tid 26965] [client 45.67.97.202:52965] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:39:37.930945 2026] [:error] [pid 26940:tid 26963] [client 45.67.97.202:52965] [client 45.67.97.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "aaSH6RrUg-j5GLDtRFkCQQAAAFM"]
[Mon Mar 02 02:39:39.691496 2026] [:error] [pid 53182:tid 53549] [client 45.67.97.58:43431] [client 45.67.97.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "aaSH6_v073cA6eM1YCT4OQAAAMY"]
[Mon Mar 02 02:39:41.488227 2026] [proxy_fcgi:error] [pid 53180:tid 53454] [client 45.67.97.202:60589] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:39:41.942165 2026] [:error] [pid 53180:tid 53448] [client 45.67.97.202:60589] [client 45.67.97.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aaSH7TPPJpDOBvYnaa1wBgAAAYQ"]
[Mon Mar 02 02:39:43.278804 2026] [proxy_fcgi:error] [pid 53585:tid 53595] [client 45.67.97.57:47751] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:39:44.783943 2026] [proxy_fcgi:error] [pid 53585:tid 53612] [client 45.67.97.57:47751] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:39:45.242672 2026] [proxy_fcgi:error] [pid 53585:tid 53611] [client 45.67.97.57:47751] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:39:45.680165 2026] [:error] [pid 53585:tid 53596] [client 45.67.97.57:47751] [client 45.67.97.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "aaSH8XbCvYsvu6kKhM3Y4wAAAAg"]
[Mon Mar 02 02:39:47.923894 2026] [proxy_fcgi:error] [pid 26940:tid 26945] [client 45.67.97.55:45343] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:39:48.371693 2026] [:error] [pid 26940:tid 26946] [client 45.67.97.55:45343] [client 45.67.97.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "aaSH9BrUg-j5GLDtRFkCUwAAAEI"]
[Mon Mar 02 02:39:50.153095 2026] [proxy_fcgi:error] [pid 53585:tid 53600] [client 45.67.97.202:41481] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:39:50.622595 2026] [proxy_fcgi:error] [pid 53585:tid 53597] [client 45.67.97.202:41481] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:39:51.069089 2026] [proxy_fcgi:error] [pid 53585:tid 53593] [client 45.67.97.202:41481] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:39:53.392539 2026] [proxy_fcgi:error] [pid 53585:tid 53592] [client 45.67.97.202:41481] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:39:53.835148 2026] [proxy_fcgi:error] [pid 53585:tid 53600] [client 45.67.97.202:41481] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:39:54.737177 2026] [proxy_fcgi:error] [pid 53585:tid 53608] [client 45.67.97.202:41481] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:39:56.109497 2026] [proxy_fcgi:error] [pid 53585:tid 53598] [client 45.67.97.202:41481] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:39:56.564464 2026] [:error] [pid 53585:tid 53599] [client 45.67.97.202:41481] [client 45.67.97.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "aaSH_HbCvYsvu6kKhM3ZFQAAAAs"]
[Mon Mar 02 02:39:57.429188 2026] [:error] [pid 53585:tid 53607] [client 45.67.97.58:60791] [client 45.67.97.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aaSH_XbCvYsvu6kKhM3ZGAAAABM"]
[Mon Mar 02 02:39:58.309139 2026] [:error] [pid 26940:tid 26944] [client 45.67.97.55:38765] [client 45.67.97.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.67.97.55, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-login.php"] [unique_id "aaSH_hrUg-j5GLDtRFkCrQAAAEA"]
[Mon Mar 02 02:39:58.313536 2026] [proxy_fcgi:error] [pid 26940:tid 26944] [client 45.67.97.55:38765] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:39:58.761560 2026] [proxy_fcgi:error] [pid 26940:tid 26948] [client 45.67.97.55:38765] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:39:59.223944 2026] [:error] [pid 26940:tid 26953] [client 45.67.97.55:38765] [client 45.67.97.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "aaSH_xrUg-j5GLDtRFkCtgAAAEk"]
[Mon Mar 02 02:40:00.584056 2026] [proxy_fcgi:error] [pid 53181:tid 53529] [client 45.67.97.202:32943] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:40:01.058643 2026] [:error] [pid 53181:tid 53518] [client 45.67.97.202:32943] [client 45.67.97.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aaSIAYr_0T1SazTrJOBbXAAAAQQ"]
[Mon Mar 02 02:40:01.973846 2026] [:error] [pid 53182:tid 53560] [client 45.67.97.58:26609] [client 45.67.97.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aaSIAfv073cA6eM1YCT4bgAAANA"]
[Mon Mar 02 02:40:04.866062 2026] [:error] [pid 53585:tid 53588] [client 45.67.97.57:56067] [client 45.67.97.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aaSIBHbCvYsvu6kKhM3ZOgAAAAA"]
[Mon Mar 02 02:40:05.749504 2026] [:error] [pid 53182:tid 53558] [client 45.67.97.58:20101] [client 45.67.97.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dwelectservices.com.au"] [uri "/fm.php"] [unique_id "aaSIBfv073cA6eM1YCT4dwAAAM4"]
[Mon Mar 02 02:40:08.021781 2026] [proxy_fcgi:error] [pid 53182:tid 53551] [client 45.67.97.202:45415] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:40:08.903772 2026] [:error] [pid 53182:tid 53562] [client 45.67.97.202:45415] [client 45.67.97.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "aaSICPv073cA6eM1YCT4iAAAANI"]
[Mon Mar 02 02:40:10.686120 2026] [proxy_fcgi:error] [pid 53585:tid 53590] [client 45.67.97.202:44177] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:40:11.593178 2026] [:error] [pid 53585:tid 53597] [client 45.67.97.202:44177] [client 45.67.97.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/function.php"] [unique_id "aaSIC3bCvYsvu6kKhM3ZTQAAAAk"]
[Mon Mar 02 02:40:12.471862 2026] [:error] [pid 26940:tid 26958] [client 45.67.97.58:33175] [client 45.67.97.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/plugins.php"] [unique_id "aaSIDBrUg-j5GLDtRFkC4gAAAE4"]
[Mon Mar 02 02:40:13.894577 2026] [proxy_fcgi:error] [pid 26940:tid 26949] [client 45.67.97.202:45773] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:40:15.305280 2026] [:error] [pid 26940:tid 26957] [client 45.67.97.202:45773] [client 45.67.97.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/chosen.php"] [unique_id "aaSIDxrUg-j5GLDtRFkC8gAAAE0"]
[Mon Mar 02 02:40:16.197271 2026] [:error] [pid 53182:tid 53562] [client 45.67.97.202:38221] [client 45.67.97.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "aaSIEPv073cA6eM1YCT4lAAAANI"]
[Mon Mar 02 02:40:20.086527 2026] [proxy_fcgi:error] [pid 53182:tid 53553] [client 45.67.97.58:21823] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:40:20.528081 2026] [proxy_fcgi:error] [pid 53182:tid 53566] [client 45.67.97.58:21823] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:40:21.492940 2026] [proxy_fcgi:error] [pid 53182:tid 53563] [client 45.67.97.58:21823] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:40:22.448799 2026] [:error] [pid 53182:tid 53557] [client 45.67.97.58:21823] [client 45.67.97.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/atomlib.php"] [unique_id "aaSIFvv073cA6eM1YCT4pgAAAM0"]
[Mon Mar 02 02:40:23.320160 2026] [:error] [pid 53182:tid 53556] [client 45.67.97.58:60035] [client 45.67.97.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/rest-api/index.php"] [unique_id "aaSIF_v073cA6eM1YCT4pwAAAMw"]
[Mon Mar 02 02:40:25.505133 2026] [proxy_fcgi:error] [pid 53585:tid 53598] [client 45.67.97.202:42501] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:40:25.934300 2026] [:error] [pid 53585:tid 53591] [client 45.67.97.202:42501] [client 45.67.97.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/index.php"] [unique_id "aaSIGXbCvYsvu6kKhM3ZdgAAAAM"]
[Mon Mar 02 02:40:26.813532 2026] [:error] [pid 53181:tid 53526] [client 45.67.97.55:37415] [client 45.67.97.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aaSIGor_0T1SazTrJOBbdQAAAQs"]
[Mon Mar 02 02:40:27.688227 2026] [:error] [pid 53585:tid 53611] [client 45.67.97.55:32805] [client 45.67.97.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aaSIG3bCvYsvu6kKhM3ZfAAAABc"]
[Mon Mar 02 02:40:30.325718 2026] [proxy_fcgi:error] [pid 53585:tid 53596] [client 45.67.97.57:47525] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:40:30.756792 2026] [:error] [pid 53585:tid 53605] [client 45.67.97.57:47525] [client 45.67.97.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/Exception-wp.php"] [unique_id "aaSIHnbCvYsvu6kKhM3ZkAAAABE"]
[Mon Mar 02 02:40:32.102015 2026] [:error] [pid 53181:tid 53530] [client 45.67.97.202:59599] [client 45.67.97.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aaSIIIr_0T1SazTrJOBbhgAAAQ8"]
[Mon Mar 02 02:40:32.968309 2026] [proxy_fcgi:error] [pid 53182:tid 53558] [client 45.67.97.57:51599] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:40:33.414229 2026] [proxy_fcgi:error] [pid 53182:tid 53552] [client 45.67.97.57:51599] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:40:34.283950 2026] [proxy_fcgi:error] [pid 53182:tid 53568] [client 45.67.97.57:51599] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:40:36.125147 2026] [:error] [pid 53182:tid 53565] [client 45.67.97.57:51599] [client 45.67.97.57] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.67.97.57, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/js/wp-login.php"] [unique_id "aaSIJPv073cA6eM1YCT4wwAAANU"]
[Mon Mar 02 02:40:37.003311 2026] [:error] [pid 53182:tid 53556] [client 45.67.97.57:51599] File does not exist: /home/dwelects/public_html/worm.PhP
[Mon Mar 02 02:40:37.437548 2026] [proxy_fcgi:error] [pid 53182:tid 53564] [client 45.67.97.57:51599] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:40:37.870514 2026] [proxy_fcgi:error] [pid 53182:tid 53553] [client 45.67.97.57:51599] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:40:38.753533 2026] [:error] [pid 53182:tid 53545] [client 45.67.97.57:51599] [client 45.67.97.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/bk/index.php"] [unique_id "aaSIJvv073cA6eM1YCT40wAAAMI"]
[Mon Mar 02 02:40:39.657736 2026] [:error] [pid 53181:tid 53528] [client 45.67.97.57:32067] [client 45.67.97.57] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.67.97.57, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "aaSIJ4r_0T1SazTrJOBbuAAAAQ0"]
[Mon Mar 02 02:40:41.265079 2026] [proxy_fcgi:error] [pid 53181:tid 53527] [client 45.67.97.57:32067] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:40:41.706855 2026] [proxy_fcgi:error] [pid 53181:tid 53518] [client 45.67.97.57:32067] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:40:42.663583 2026] [proxy_fcgi:error] [pid 53181:tid 53522] [client 45.67.97.57:32067] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:40:43.608526 2026] [proxy_fcgi:error] [pid 53181:tid 53527] [client 45.67.97.57:32067] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:40:45.054634 2026] [proxy_fcgi:error] [pid 53181:tid 53526] [client 45.67.97.57:32067] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:40:48.247879 2026] [proxy_fcgi:error] [pid 53181:tid 53516] [client 45.67.97.57:32067] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:40:48.684910 2026] [proxy_fcgi:error] [pid 53181:tid 53519] [client 45.67.97.57:32067] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:40:51.026584 2026] [proxy_fcgi:error] [pid 53181:tid 53537] [client 45.67.97.57:32067] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:40:52.147517 2026] [:error] [pid 53181:tid 53519] [client 45.67.97.57:32067] [client 45.67.97.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "aaSINIr_0T1SazTrJOBcDgAAAQU"]
[Mon Mar 02 02:40:53.965091 2026] [proxy_fcgi:error] [pid 26940:tid 26947] [client 45.67.97.202:63811] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:40:54.425975 2026] [:error] [pid 26940:tid 26954] [client 45.67.97.202:63811] [client 45.67.97.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aaSINhrUg-j5GLDtRFkDhAAAAEo"]
[Mon Mar 02 02:40:55.296274 2026] [proxy_fcgi:error] [pid 53585:tid 53601] [client 45.67.97.58:33189] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:40:55.757565 2026] [proxy_fcgi:error] [pid 53585:tid 53609] [client 45.67.97.58:33189] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:40:56.200683 2026] [:error] [pid 53585:tid 53610] [client 45.67.97.58:33189] [client 45.67.97.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/atomlib.php"] [unique_id "aaSIOHbCvYsvu6kKhM3aIgAAABY"]
[Mon Mar 02 02:40:57.953907 2026] [proxy_fcgi:error] [pid 53181:tid 53532] [client 45.67.97.55:25793] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:40:58.832786 2026] [proxy_fcgi:error] [pid 53181:tid 53521] [client 45.67.97.55:25793] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:40:59.744057 2026] [proxy_fcgi:error] [pid 53181:tid 53535] [client 45.67.97.55:25793] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:41:00.182601 2026] [proxy_fcgi:error] [pid 53181:tid 53537] [client 45.67.97.55:25793] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:41:01.080512 2026] [:error] [pid 53181:tid 53530] [client 45.67.97.55:25793] [client 45.67.97.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aaSIPYr_0T1SazTrJOBcQgAAAQ8"]
[Mon Mar 02 02:41:01.955061 2026] [proxy_fcgi:error] [pid 26940:tid 26951] [client 45.67.97.55:57491] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:41:02.399285 2026] [proxy_fcgi:error] [pid 26940:tid 26956] [client 45.67.97.55:57491] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:41:02.833984 2026] [:error] [pid 26940:tid 26944] [client 45.67.97.55:57491] [client 45.67.97.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aaSIPhrUg-j5GLDtRFkDngAAAEA"]
[Mon Mar 02 02:41:04.140600 2026] [:error] [pid 53585:tid 53588] [client 45.67.97.202:35015] [client 45.67.97.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aaSIQHbCvYsvu6kKhM3aXgAAAAA"]
[Mon Mar 02 02:41:05.447924 2026] [proxy_fcgi:error] [pid 26940:tid 26962] [client 45.67.97.202:53633] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:41:06.759101 2026] [proxy_fcgi:error] [pid 26940:tid 26954] [client 45.67.97.202:53633] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:41:07.193436 2026] [proxy_fcgi:error] [pid 26940:tid 26957] [client 45.67.97.202:53633] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:41:07.799263 2026] [:error] [pid 26940:tid 26962] [client 45.67.97.202:53633] [client 45.67.97.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "aaSIQxrUg-j5GLDtRFkDvgAAAFI"]
[Mon Mar 02 02:41:08.679084 2026] [:error] [pid 53182:tid 53564] [client 45.67.97.57:49125] [client 45.67.97.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "aaSIRPv073cA6eM1YCT5JQAAANQ"]
[Mon Mar 02 02:41:11.771106 2026] [proxy_fcgi:error] [pid 26940:tid 26955] [client 45.67.97.202:34161] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:41:12.655762 2026] [:error] [pid 26940:tid 26961] [client 45.67.97.202:34161] [client 45.67.97.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/dist/default.php"] [unique_id "aaSISBrUg-j5GLDtRFkD3gAAAFE"]
[Mon Mar 02 02:41:13.972187 2026] [:error] [pid 53180:tid 53466] [client 45.67.97.57:28729] [client 45.67.97.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dwelectservices.com.au"] [uri "/tiny.php"] [unique_id "aaSISTPPJpDOBvYnaa1wawAAAZY"]
[Mon Mar 02 02:41:15.365098 2026] [proxy_fcgi:error] [pid 53180:tid 53450] [client 45.67.97.55:54119] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:41:15.806555 2026] [proxy_fcgi:error] [pid 53180:tid 53468] [client 45.67.97.55:54119] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:41:16.248808 2026] [:error] [pid 53180:tid 53467] [client 45.67.97.55:54119] [client 45.67.97.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "aaSITDPPJpDOBvYnaa1wcQAAAZc"]
[Mon Mar 02 02:41:17.571569 2026] [proxy_fcgi:error] [pid 26940:tid 26957] [client 45.67.97.202:63105] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:41:18.008524 2026] [proxy_fcgi:error] [pid 26940:tid 26959] [client 45.67.97.202:63105] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:41:18.911864 2026] [proxy_fcgi:error] [pid 26940:tid 26953] [client 45.67.97.202:63105] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:41:20.264873 2026] [:error] [pid 26940:tid 26956] [client 45.67.97.202:63105] [client 45.67.97.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/Parse/about.php"] [unique_id "aaSIUBrUg-j5GLDtRFkEKQAAAEw"]
[Mon Mar 02 02:41:21.156258 2026] [proxy_fcgi:error] [pid 53585:tid 53604] [client 45.67.97.55:45133] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:41:22.482634 2026] [:error] [pid 53585:tid 53595] [client 45.67.97.55:45133] [client 45.67.97.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "aaSIUnbCvYsvu6kKhM3ajwAAAAc"]
[Mon Mar 02 02:41:23.798188 2026] [proxy_fcgi:error] [pid 26940:tid 26952] [client 45.67.97.202:39967] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:41:25.101519 2026] [proxy_fcgi:error] [pid 26940:tid 26948] [client 45.67.97.202:39967] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:41:25.550018 2026] [proxy_fcgi:error] [pid 26940:tid 26965] [client 45.67.97.202:39967] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:41:26.413638 2026] [:error] [pid 26940:tid 26958] [client 45.67.97.202:39967] [client 45.67.97.202] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.67.97.202, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/colors/ocean/wp-login.php"] [unique_id "aaSIVhrUg-j5GLDtRFkEYAAAAE4"]
[Mon Mar 02 02:41:27.740001 2026] [proxy_fcgi:error] [pid 26940:tid 26968] [client 45.67.97.202:39967] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:41:28.616705 2026] [:error] [pid 26940:tid 26951] [client 45.67.97.202:39967] [client 45.67.97.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/Cache/upfile.php"] [unique_id "aaSIWBrUg-j5GLDtRFkEbwAAAEc"]
[Mon Mar 02 02:41:29.494326 2026] [proxy_fcgi:error] [pid 53182:tid 53552] [client 45.67.97.57:26877] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:41:29.927955 2026] [:error] [pid 53182:tid 53566] [client 45.67.97.57:26877] [client 45.67.97.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "aaSIWfv073cA6eM1YCT5YQAAANY"]
[Mon Mar 02 02:41:30.801661 2026] [proxy_fcgi:error] [pid 53585:tid 53605] [client 45.67.97.58:62965] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:41:31.694040 2026] [proxy_fcgi:error] [pid 53585:tid 53595] [client 45.67.97.58:62965] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:41:32.617719 2026] [:error] [pid 53585:tid 53604] [client 45.67.97.58:62965] [client 45.67.97.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/widgets/class-wp-widget-search-function.php"] [unique_id "aaSIXHbCvYsvu6kKhM3atgAAABA"]
[Mon Mar 02 02:41:33.976543 2026] [proxy_fcgi:error] [pid 26940:tid 26950] [client 45.67.97.55:47301] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:41:34.417231 2026] [proxy_fcgi:error] [pid 26940:tid 26949] [client 45.67.97.55:47301] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:41:35.414282 2026] [:error] [pid 26940:tid 26968] [client 45.67.97.55:47301] [client 45.67.97.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/Canonical.php"] [unique_id "aaSIXxrUg-j5GLDtRFkEhQAAAFg"]
[Mon Mar 02 02:41:36.751840 2026] [:error] [pid 53585:tid 53595] [client 45.67.97.55:26535] [client 45.67.97.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "aaSIYHbCvYsvu6kKhM3awQAAAAc"]
[Mon Mar 02 02:41:37.638601 2026] [proxy_fcgi:error] [pid 53585:tid 53609] [client 45.67.97.58:38675] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:41:38.094738 2026] [proxy_fcgi:error] [pid 53585:tid 53604] [client 45.67.97.58:38675] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:41:38.962531 2026] [:error] [pid 53585:tid 53591] [client 45.67.97.58:38675] [client 45.67.97.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/class-feed-index.php"] [unique_id "aaSIYnbCvYsvu6kKhM3aywAAAAM"]
[Mon Mar 02 02:41:39.824490 2026] [proxy_fcgi:error] [pid 53180:tid 53452] [client 45.67.97.57:42667] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:41:40.702540 2026] [proxy_fcgi:error] [pid 53180:tid 53463] [client 45.67.97.57:42667] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:41:41.154759 2026] [:error] [pid 53180:tid 53466] [client 45.67.97.57:42667] [client 45.67.97.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php"] [unique_id "aaSIZTPPJpDOBvYnaa1wpAAAAZY"]
[Mon Mar 02 02:41:42.518894 2026] [:error] [pid 26940:tid 26956] [client 45.67.97.58:23135] [client 45.67.97.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/db.php"] [unique_id "aaSIZhrUg-j5GLDtRFkElwAAAEw"]
[Mon Mar 02 02:41:43.393809 2026] [:error] [pid 53181:tid 53530] [client 45.67.97.58:32227] [client 45.67.97.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/class-wp-dependency-float.php"] [unique_id "aaSIZ4r_0T1SazTrJOBckAAAAQ8"]
[Mon Mar 02 02:41:44.279087 2026] [:error] [pid 53181:tid 53523] [client 45.67.97.58:52093] [client 45.67.97.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "aaSIaIr_0T1SazTrJOBclgAAAQg"]
[Mon Mar 02 02:41:45.136164 2026] [:error] [pid 53585:tid 53594] [client 45.67.97.55:26347] [client 45.67.97.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/PHPMailer/purna.php"] [unique_id "aaSIaXbCvYsvu6kKhM3a1wAAAAY"]
[Mon Mar 02 02:41:46.128717 2026] [:error] [pid 26940:tid 26948] [client 45.67.97.55:39141] [client 45.67.97.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/interactivity-api/interactivity-api-class.php"] [unique_id "aaSIahrUg-j5GLDtRFkEpwAAAEQ"]
[Mon Mar 02 02:41:47.003027 2026] [:error] [pid 53181:tid 53530] [client 45.67.97.202:54737] [client 45.67.97.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/l10n/class-wp-widddget-pages.php"] [unique_id "aaSIa4r_0T1SazTrJOBcnwAAAQ8"]
[Mon Mar 02 02:41:48.783864 2026] [:error] [pid 26940:tid 26962] [client 45.67.97.58:23583] [client 45.67.97.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php"] [unique_id "aaSIbBrUg-j5GLDtRFkEtAAAAFI"]
[Mon Mar 02 02:41:49.648555 2026] [:error] [pid 26940:tid 26963] [client 45.67.97.55:53107] [client 45.67.97.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php"] [unique_id "aaSIbRrUg-j5GLDtRFkEwQAAAFM"]
[Mon Mar 02 02:41:50.509735 2026] [:error] [pid 26940:tid 26949] [client 45.67.97.58:45289] [client 45.67.97.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/ID3/module.audio-video.riff-set.php"] [unique_id "aaSIbhrUg-j5GLDtRFkEygAAAEU"]
[Mon Mar 02 02:41:51.819583 2026] [:error] [pid 53180:tid 53467] [client 45.67.97.57:39859] [client 45.67.97.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/tinymce/utils/license.php"] [unique_id "aaSIbzPPJpDOBvYnaa1wtAAAAZc"]
[Mon Mar 02 02:41:53.641849 2026] [:error] [pid 53585:tid 53611] [client 45.67.97.57:35473] [client 45.67.97.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Text/options.php"] [unique_id "aaSIcXbCvYsvu6kKhM3a5wAAABc"]
[Mon Mar 02 02:41:54.524356 2026] [proxy_fcgi:error] [pid 53585:tid 53609] [client 45.67.97.57:46131] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:41:56.831149 2026] [:error] [pid 53585:tid 53600] [client 45.67.97.57:46131] [client 45.67.97.57] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.67.97.57, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "aaSIdHbCvYsvu6kKhM3a8gAAAAw"]
[Mon Mar 02 02:41:59.485312 2026] [:error] [pid 53585:tid 53603] [client 45.67.97.57:46131] [client 45.67.97.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/feed-rsss.php"] [unique_id "aaSId3bCvYsvu6kKhM3a_wAAAA8"]
[Mon Mar 02 02:42:00.349057 2026] [:error] [pid 53181:tid 53533] [client 45.67.97.55:21301] [client 45.67.97.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/IXR/goto.php"] [unique_id "aaSIeIr_0T1SazTrJOBctQAAARI"]
[Mon Mar 02 02:42:02.560404 2026] [proxy_fcgi:error] [pid 26940:tid 26960] [client 45.67.97.55:40463] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:42:03.009116 2026] [proxy_fcgi:error] [pid 26940:tid 26966] [client 45.67.97.55:40463] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:42:04.788160 2026] [proxy_fcgi:error] [pid 26940:tid 26959] [client 45.67.97.55:40463] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:42:05.250506 2026] [proxy_fcgi:error] [pid 26940:tid 26951] [client 45.67.97.55:40463] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:42:07.048778 2026] [proxy_fcgi:error] [pid 26940:tid 26959] [client 45.67.97.55:40463] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:42:07.491571 2026] [proxy_fcgi:error] [pid 26940:tid 26968] [client 45.67.97.55:40463] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:42:07.934079 2026] [proxy_fcgi:error] [pid 26940:tid 26948] [client 45.67.97.55:40463] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:42:08.365858 2026] [proxy_fcgi:error] [pid 26940:tid 26964] [client 45.67.97.55:40463] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:42:08.800411 2026] [:error] [pid 26940:tid 26962] [client 45.67.97.55:40463] [client 45.67.97.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aaSIgBrUg-j5GLDtRFkFPgAAAFI"]
[Mon Mar 02 02:42:09.683163 2026] [:error] [pid 26940:tid 26961] [client 45.67.97.202:45051] [client 45.67.97.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/wp_class_datlib.php"] [unique_id "aaSIgRrUg-j5GLDtRFkFRgAAAFE"]
[Mon Mar 02 02:42:10.605803 2026] [:error] [pid 26940:tid 26949] [client 45.67.97.58:24139] [client 45.67.97.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "aaSIghrUg-j5GLDtRFkFTgAAAEU"]
[Mon Mar 02 02:42:11.953018 2026] [proxy_fcgi:error] [pid 26940:tid 26947] [client 45.67.97.58:32063] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:42:12.452540 2026] [proxy_fcgi:error] [pid 26940:tid 26956] [client 45.67.97.58:32063] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:42:13.328705 2026] [proxy_fcgi:error] [pid 26940:tid 26957] [client 45.67.97.58:32063] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:42:14.301435 2026] [:error] [pid 26940:tid 26960] [client 45.67.97.58:32063] [client 45.67.97.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/Registry-private.php"] [unique_id "aaSIhhrUg-j5GLDtRFkFbwAAAFA"]
[Mon Mar 02 02:42:15.167171 2026] [:error] [pid 26940:tid 26954] [client 45.67.97.58:36071] [client 45.67.97.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-meta.php"] [unique_id "aaSIhxrUg-j5GLDtRFkFdQAAAEo"]
[Mon Mar 02 02:42:16.045264 2026] [:error] [pid 53585:tid 53600] [client 45.67.97.202:60841] [client 45.67.97.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/widgets/bypass.php"] [unique_id "aaSIiHbCvYsvu6kKhM3bKAAAAAw"]
[Mon Mar 02 02:42:18.688941 2026] [:error] [pid 26940:tid 26957] [client 45.67.97.58:40437] [client 45.67.97.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/style-engine/adminfus.php"] [unique_id "aaSIihrUg-j5GLDtRFkFigAAAE0"]
[Mon Mar 02 02:42:19.569991 2026] [proxy_fcgi:error] [pid 53585:tid 53588] [client 45.67.97.202:41399] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:42:20.009357 2026] [:error] [pid 53585:tid 53605] [client 45.67.97.202:41399] [client 45.67.97.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/group/wp-style.php"] [unique_id "aaSIjHbCvYsvu6kKhM3bQQAAABE"]
[Mon Mar 02 02:42:21.756732 2026] [:error] [pid 53585:tid 53596] [client 45.67.97.57:30173] [client 45.67.97.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/widgets/class-wp-wolf-widget.php"] [unique_id "aaSIjXbCvYsvu6kKhM3bSwAAAAg"]
[Mon Mar 02 02:42:27.885086 2026] [:error] [pid 53181:tid 53527] [client 45.67.97.58:42341] [client 45.67.97.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Text/index.php"] [unique_id "aaSIk4r_0T1SazTrJOBdPQAAAQw"]
[Mon Mar 02 02:42:28.754406 2026] [proxy_fcgi:error] [pid 53181:tid 53516] [client 45.67.97.57:33429] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:42:29.625018 2026] [:error] [pid 53181:tid 53525] [client 45.67.97.57:33429] [client 45.67.97.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/about.php"] [unique_id "aaSIlYr_0T1SazTrJOBdRAAAAQo"]
[Mon Mar 02 02:42:31.418042 2026] [proxy_fcgi:error] [pid 53182:tid 53567] [client 45.67.97.55:48365] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:42:32.791807 2026] [proxy_fcgi:error] [pid 53182:tid 53555] [client 45.67.97.55:48365] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:42:33.231934 2026] [:error] [pid 53182:tid 53562] [client 45.67.97.55:48365] [client 45.67.97.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/wp-sup.php"] [unique_id "aaSImfv073cA6eM1YCT6OQAAANI"]
[Mon Mar 02 02:42:34.977858 2026] [:error] [pid 26940:tid 26954] [client 45.67.97.58:61717] [client 45.67.97.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/widgets/class-t.api.php"] [unique_id "aaSImhrUg-j5GLDtRFkGFAAAAEo"]
[Mon Mar 02 02:42:37.593259 2026] [:error] [pid 53182:tid 53543] [client 45.67.97.57:35547] [client 45.67.97.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/dist/require-dynamic-blocks.php"] [unique_id "aaSInfv073cA6eM1YCT6UgAAAMA"]
[Mon Mar 02 02:42:40.655516 2026] [:error] [pid 53585:tid 53609] [client 45.67.97.58:47529] [client 45.67.97.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/widgets/class-wp-widget-rss-database.php"] [unique_id "aaSIoHbCvYsvu6kKhM3bkgAAABU"]
[Mon Mar 02 02:42:41.973775 2026] [proxy_fcgi:error] [pid 26940:tid 26951] [client 45.67.97.58:34711] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:42:42.415202 2026] [:error] [pid 26940:tid 26961] [client 45.67.97.58:34711] [client 45.67.97.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/class-wp-customize-manager-client.php"] [unique_id "aaSIohrUg-j5GLDtRFkGJwAAAFE"]
[Mon Mar 02 02:42:43.291701 2026] [:error] [pid 26940:tid 26967] [client 45.67.97.202:27865] [client 45.67.97.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-boolean.php"] [unique_id "aaSIoxrUg-j5GLDtRFkGLwAAAFc"]
[Mon Mar 02 02:42:46.362339 2026] [:error] [pid 53181:tid 53515] [client 45.67.97.202:29379] [client 45.67.97.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/smilies/simi.php"] [unique_id "aaSIpor_0T1SazTrJOBdXQAAAQE"]
[Mon Mar 02 02:42:47.240715 2026] [proxy_fcgi:error] [pid 26940:tid 26953] [client 45.67.97.58:57257] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 07:27:19.237972 2026] [proxy_fcgi:error] [pid 31257:tid 31286] [client 40.69.66.178:6944] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 07:27:19.499302 2026] [:error] [pid 31257:tid 31282] [client 40.69.66.178:6944] [client 40.69.66.178] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/cah.php"] [unique_id "aaTLV_-JFLfishX45N-REwAAARM"]
[Mon Mar 02 07:27:20.016081 2026] [proxy_fcgi:error] [pid 28908:tid 28928] [client 40.69.66.178:16330] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 07:27:20.523904 2026] [proxy_fcgi:error] [pid 28908:tid 28924] [client 40.69.66.178:16330] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 07:27:20.779013 2026] [proxy_fcgi:error] [pid 28908:tid 28928] [client 40.69.66.178:16330] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 07:27:21.032068 2026] [proxy_fcgi:error] [pid 28908:tid 28922] [client 40.69.66.178:16330] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 07:27:21.292450 2026] [proxy_fcgi:error] [pid 28908:tid 28921] [client 40.69.66.178:16330] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 07:27:21.545431 2026] [proxy_fcgi:error] [pid 28908:tid 28916] [client 40.69.66.178:16330] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 07:27:21.798544 2026] [proxy_fcgi:error] [pid 28908:tid 28934] [client 40.69.66.178:16330] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 07:27:22.051730 2026] [proxy_fcgi:error] [pid 28908:tid 28927] [client 40.69.66.178:16330] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 07:27:22.301513 2026] [:error] [pid 28908:tid 28928] [client 40.69.66.178:16330] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/as1337.php"] [unique_id "aaTLWoqJmC8ih_lQQnCCLAAAANI"]
[Mon Mar 02 07:27:22.834699 2026] [:error] [pid 28794:tid 28857] [client 40.69.66.178:5091] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/as1337.php"] [unique_id "aaTLWqVy2qpaelbUob06ZwAAAFU"]
[Mon Mar 02 07:27:23.379164 2026] [:error] [pid 28795:tid 28878] [client 40.69.66.178:1590] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/as1337.php"] [unique_id "aaTLW7ROd53wZBkdI_ddJAAAAI8"]
[Mon Mar 02 07:27:23.907778 2026] [:error] [pid 28795:tid 28886] [client 40.69.66.178:1845] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/as1337.php"] [unique_id "aaTLW7ROd53wZBkdI_ddKQAAAJc"]
[Mon Mar 02 07:27:24.416693 2026] [:error] [pid 28794:tid 28838] [client 40.69.66.178:8941] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/core.php"] [unique_id "aaTLXKVy2qpaelbUob06bAAAAEI"]
[Mon Mar 02 07:27:24.925189 2026] [:error] [pid 28908:tid 28927] [client 40.69.66.178:15516] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zeal.php"] [unique_id "aaTLXIqJmC8ih_lQQnCCMgAAANE"]
[Mon Mar 02 07:27:25.432074 2026] [:error] [pid 28908:tid 28911] [client 40.69.66.178:14232] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zeal.php"] [unique_id "aaTLXYqJmC8ih_lQQnCCOAAAAME"]
[Mon Mar 02 07:27:25.959304 2026] [:error] [pid 28908:tid 28934] [client 40.69.66.178:15543] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zeal.php"] [unique_id "aaTLXYqJmC8ih_lQQnCCPQAAANg"]
[Mon Mar 02 07:27:26.467869 2026] [:error] [pid 28795:tid 28864] [client 40.69.66.178:1860] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zeal.php"] [unique_id "aaTLXrROd53wZBkdI_ddMwAAAIE"]
[Mon Mar 02 07:27:26.988206 2026] [:error] [pid 28795:tid 28868] [client 40.69.66.178:8930] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/asf.php"] [unique_id "aaTLXrROd53wZBkdI_ddOgAAAIU"]
[Mon Mar 02 07:27:27.495221 2026] [:error] [pid 31257:tid 31272] [client 40.69.66.178:9205] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sa.php"] [unique_id "aaTLX_-JFLfishX45N-RIQAAAQk"]
[Mon Mar 02 10:01:15.037519 2026] [proxy_fcgi:error] [pid 28795:tid 28873] [client 20.63.83.113:46013] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 10:01:15.246285 2026] [proxy_fcgi:error] [pid 28795:tid 28874] [client 20.63.83.113:46013] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 10:01:15.467820 2026] [proxy_fcgi:error] [pid 28795:tid 28868] [client 20.63.83.113:46013] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 10:01:15.678440 2026] [proxy_fcgi:error] [pid 28795:tid 28877] [client 20.63.83.113:46013] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 10:01:15.893240 2026] [:error] [pid 28795:tid 28885] [client 20.63.83.113:46013] [client 20.63.83.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dwelectservices.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aaTva7ROd53wZBkdI_ef3QAAAJY"]
[Mon Mar 02 10:01:20.385653 2026] [proxy_fcgi:error] [pid 31257:tid 31272] [client 20.63.83.113:57328] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 10:01:20.615781 2026] [proxy_fcgi:error] [pid 31257:tid 31274] [client 20.63.83.113:57328] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 10:01:20.835805 2026] [proxy_fcgi:error] [pid 31257:tid 31285] [client 20.63.83.113:57328] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 10:01:21.048626 2026] [proxy_fcgi:error] [pid 31257:tid 31265] [client 20.63.83.113:57328] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 10:01:21.267933 2026] [proxy_fcgi:error] [pid 31257:tid 31271] [client 20.63.83.113:57328] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 10:01:21.495836 2026] [proxy_fcgi:error] [pid 31257:tid 31266] [client 20.63.83.113:57328] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 10:01:21.722935 2026] [:error] [pid 31257:tid 31286] [client 20.63.83.113:57328] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Xleet.php"] [unique_id "aaTvcf-JFLfishX45N8TtwAAARc"]
[Mon Mar 02 10:01:22.567383 2026] [:error] [pid 23872:tid 23887] [client 20.63.83.113:53692] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Xleet.php"] [unique_id "aaTvckzkQFuA2qBk8UOPggAAAYw"]
[Mon Mar 02 10:01:24.207420 2026] [:error] [pid 21575:tid 21579] [client 20.63.83.113:53599] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Xleet.php"] [unique_id "aaTvdCrocdArcJqFfImenwAAAUA"]
[Mon Mar 02 10:01:25.676562 2026] [:error] [pid 31257:tid 31268] [client 20.63.83.113:45992] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Xleet.php"] [unique_id "aaTvdf-JFLfishX45N8TzAAAAQU"]
[Mon Mar 02 10:01:27.469761 2026] [:error] [pid 23872:tid 23894] [client 20.63.83.113:8869] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fosil.php"] [unique_id "aaTvd0zkQFuA2qBk8UOPsAAAAZM"]
[Mon Mar 02 10:01:28.127154 2026] [:error] [pid 31257:tid 31285] [client 20.63.83.113:62763] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fosil.php"] [unique_id "aaTveP-JFLfishX45N8T1gAAARY"]
[Mon Mar 02 10:01:30.700265 2026] [:error] [pid 23872:tid 23884] [client 20.63.83.113:59640] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fosil.php"] [unique_id "aaTvekzkQFuA2qBk8UOPwwAAAYk"]
[Mon Mar 02 10:01:31.500797 2026] [:error] [pid 23872:tid 23887] [client 20.63.83.113:53636] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fosil.php"] [unique_id "aaTve0zkQFuA2qBk8UOPywAAAYw"]
[Mon Mar 02 10:01:32.740861 2026] [:error] [pid 28908:tid 28914] [client 20.63.83.113:53652] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/issue.php"] [unique_id "aaTvfIqJmC8ih_lQQnD1pgAAAMQ"]
[Mon Mar 02 10:01:33.384117 2026] [:error] [pid 21575:tid 21583] [client 20.63.83.113:52717] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/issue.php"] [unique_id "aaTvfSrocdArcJqFfImexgAAAUQ"]
[Mon Mar 02 10:01:34.078780 2026] [:error] [pid 31257:tid 31263] [client 20.63.83.113:57309] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/issue.php"] [unique_id "aaTvfv-JFLfishX45N8T4AAAAQA"]
[Mon Mar 02 10:01:35.459202 2026] [:error] [pid 28908:tid 28933] [client 20.63.83.113:55530] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/issue.php"] [unique_id "aaTvf4qJmC8ih_lQQnD1sgAAANc"]
[Mon Mar 02 10:01:36.227930 2026] [:error] [pid 23872:tid 23896] [client 20.63.83.113:52722] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/verify.php"] [unique_id "aaTvgEzkQFuA2qBk8UOP9gAAAZU"]
[Mon Mar 02 10:01:37.742786 2026] [:error] [pid 23872:tid 23890] [client 20.63.83.113:53635] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/verify.php"] [unique_id "aaTvgUzkQFuA2qBk8UOQAwAAAY8"]
[Mon Mar 02 10:01:39.730860 2026] [:error] [pid 31257:tid 31263] [client 20.63.83.113:46009] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/verify.php"] [unique_id "aaTvg_-JFLfishX45N8UAQAAAQA"]
[Mon Mar 02 10:01:44.776376 2026] [:error] [pid 28795:tid 28873] [client 20.63.83.113:55505] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/verify.php"] [unique_id "aaTviLROd53wZBkdI_egFwAAAIo"]
[Mon Mar 02 10:01:54.867437 2026] [:error] [pid 31257:tid 31280] [client 20.63.83.113:57293] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/29rc7ExgS6p.php"] [unique_id "aaTvkv-JFLfishX45N8UgQAAARE"]
[Mon Mar 02 10:01:57.291365 2026] [:error] [pid 21575:tid 21600] [client 20.63.83.113:55534] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/29rc7ExgS6p.php"] [unique_id "aaTvlSrocdArcJqFfImfJwAAAVU"]
[Mon Mar 02 10:02:11.123861 2026] [:error] [pid 28795:tid 28886] [client 20.63.83.113:8867] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/indeex.php"] [unique_id "aaTvo7ROd53wZBkdI_egTQAAAJc"]
[Mon Mar 02 10:02:14.600596 2026] [:error] [pid 23872:tid 23883] [client 20.63.83.113:8842] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/indeex.php"] [unique_id "aaTvpkzkQFuA2qBk8UOQhQAAAYg"]
[Mon Mar 02 10:02:36.592008 2026] [proxy_fcgi:error] [pid 28908:tid 28915] [client 20.63.83.113:60042] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 10:02:36.822846 2026] [proxy_fcgi:error] [pid 28908:tid 28912] [client 20.63.83.113:60042] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 10:02:37.048538 2026] [proxy_fcgi:error] [pid 28908:tid 28932] [client 20.63.83.113:60042] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 10:02:37.270494 2026] [proxy_fcgi:error] [pid 28908:tid 28923] [client 20.63.83.113:60042] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 10:02:37.488172 2026] [proxy_fcgi:error] [pid 28908:tid 28911] [client 20.63.83.113:60042] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 10:02:37.723809 2026] [proxy_fcgi:error] [pid 28908:tid 28934] [client 20.63.83.113:60042] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 10:02:37.941528 2026] [proxy_fcgi:error] [pid 28908:tid 28927] [client 20.63.83.113:60042] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 10:02:38.160103 2026] [proxy_fcgi:error] [pid 28908:tid 28914] [client 20.63.83.113:60042] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 10:02:38.384602 2026] [proxy_fcgi:error] [pid 28908:tid 28925] [client 20.63.83.113:60042] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 10:02:38.621187 2026] [proxy_fcgi:error] [pid 28908:tid 28933] [client 20.63.83.113:60042] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 10:02:38.838172 2026] [proxy_fcgi:error] [pid 28908:tid 28913] [client 20.63.83.113:60042] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 10:02:39.058516 2026] [:error] [pid 28908:tid 28916] [client 20.63.83.113:60042] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/alpha.php"] [unique_id "aaTvv4qJmC8ih_lQQnD2KQAAAMY"]
[Mon Mar 02 10:02:40.339215 2026] [:error] [pid 21575:tid 21581] [client 20.63.83.113:53684] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/alpha.php"] [unique_id "aaTvwCrocdArcJqFfImfkgAAAUI"]
[Mon Mar 02 19:16:32.132486 2026] [autoindex:error] [pid 28847:tid 28853] [client 85.203.21.73:62623] AH01276: Cannot serve directory /home/dwelects/public_html/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 22:11:51.158481 2026] [:error] [pid 28847:tid 28860] [client 20.151.217.152:50532] [client 20.151.217.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/cah.php"] [unique_id "aaWap59xbBq8VfeqVDZ6mwAAAMs"]
[Mon Mar 02 22:11:51.579462 2026] [proxy_fcgi:error] [pid 59602:tid 59665] [client 20.151.217.152:50505] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 22:11:52.000737 2026] [proxy_fcgi:error] [pid 59602:tid 59683] [client 20.151.217.152:50505] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 22:11:52.209246 2026] [proxy_fcgi:error] [pid 59602:tid 59671] [client 20.151.217.152:50505] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 22:11:52.420118 2026] [proxy_fcgi:error] [pid 59602:tid 59686] [client 20.151.217.152:50505] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 22:11:52.629404 2026] [proxy_fcgi:error] [pid 59602:tid 59681] [client 20.151.217.152:50505] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 22:11:52.839776 2026] [proxy_fcgi:error] [pid 59602:tid 59674] [client 20.151.217.152:50505] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 22:11:53.048566 2026] [proxy_fcgi:error] [pid 59602:tid 59675] [client 20.151.217.152:50505] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 22:11:53.258355 2026] [proxy_fcgi:error] [pid 59602:tid 59689] [client 20.151.217.152:50505] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 22:11:53.466174 2026] [proxy_fcgi:error] [pid 59602:tid 59676] [client 20.151.217.152:50505] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 22:11:53.670711 2026] [:error] [pid 59602:tid 59673] [client 20.151.217.152:50505] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/as1337.php"] [unique_id "aaWaqTMtSo_Fr0lHnSaDrAAAAIg"]
[Mon Mar 02 22:11:54.082548 2026] [:error] [pid 28847:tid 28849] [client 20.151.217.152:50445] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/asf.php"] [unique_id "aaWaqp9xbBq8VfeqVDZ6qAAAAMA"]
[Mon Mar 02 22:11:54.496238 2026] [:error] [pid 59602:tid 59685] [client 20.151.217.152:50527] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/asf.php"] [unique_id "aaWaqjMtSo_Fr0lHnSaDrQAAAJQ"]
[Mon Mar 02 22:11:54.910752 2026] [:error] [pid 28847:tid 28853] [client 20.151.217.152:50515] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/asf.php"] [unique_id "aaWaqp9xbBq8VfeqVDZ6sAAAAMQ"]
[Mon Mar 02 22:11:55.328220 2026] [:error] [pid 59602:tid 59672] [client 20.151.217.152:50519] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/asf.php"] [unique_id "aaWaqzMtSo_Fr0lHnSaDrgAAAIc"]
[Mon Mar 02 23:51:04.949049 2026] [:error] [pid 28847:tid 28854] [client 20.151.217.152:24331] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaWx6J9xbBq8VfeqVDbCJwAAAMU"]
[Mon Mar 02 23:51:05.377462 2026] [:error] [pid 59600:tid 59613] [client 20.151.217.152:24437] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaWx6YQ5lE4yocV9IBe4VQAAAAQ"]
[Mon Mar 02 23:51:05.802315 2026] [:error] [pid 59600:tid 59609] [client 20.151.217.152:24322] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaWx6YQ5lE4yocV9IBe4VwAAAAA"]
[Mon Mar 02 23:51:06.212922 2026] [:error] [pid 59600:tid 59616] [client 20.151.217.152:24417] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaWx6oQ5lE4yocV9IBe4XQAAAAc"]
[Tue Mar 03 00:24:55.957535 2026] [:error] [pid 60214:tid 60232] [client 4.204.216.236:26582] [client 4.204.216.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaW514muQ_v4S3RkLivPlwAAARA"]
[Tue Mar 03 00:24:56.477398 2026] [:error] [pid 18557:tid 18841] [client 4.204.216.236:26501] [client 4.204.216.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaW52NngZqR9Tp8JM0FJXgAAAFI"]
[Tue Mar 03 00:24:56.907404 2026] [:error] [pid 18960:tid 18970] [client 4.204.216.236:26623] [client 4.204.216.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaW52NCu09icM9oIHwC75QAAAMc"]
[Tue Mar 03 00:24:57.378247 2026] [:error] [pid 18960:tid 18972] [client 4.204.216.236:26575] [client 4.204.216.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaW52dCu09icM9oIHwC76AAAAMk"]
[Tue Mar 03 00:32:22.588038 2026] [:error] [pid 18558:tid 18870] [client 20.151.217.152:58342] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaW7lrO1kQHjTOLioCmsUgAAAJA"]
[Tue Mar 03 00:32:23.000713 2026] [:error] [pid 18960:tid 18975] [client 20.151.217.152:58340] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaW7ltCu09icM9oIHwDAywAAAMw"]
[Tue Mar 03 00:32:23.413204 2026] [:error] [pid 18556:tid 18771] [client 20.151.217.152:58243] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaW7l39AYyTTd2eEk9Ex1gAAABA"]
[Tue Mar 03 00:32:23.831470 2026] [:error] [pid 18960:tid 18964] [client 20.151.217.152:58364] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaW7l9Cu09icM9oIHwDA0gAAAME"]
[Tue Mar 03 02:25:44.730813 2026] [:error] [pid 18556:tid 18779] [client 20.151.217.152:39822] [client 20.151.217.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/cah.php"] [unique_id "aaXWKH9AYyTTd2eEk9FNugAAABc"]
[Tue Mar 03 02:25:45.155814 2026] [proxy_fcgi:error] [pid 18556:tid 18760] [client 20.151.217.152:39903] AH01071: Got error 'Primary script unknown'
[Tue Mar 03 02:25:45.597501 2026] [proxy_fcgi:error] [pid 18556:tid 18765] [client 20.151.217.152:39903] AH01071: Got error 'Primary script unknown'
[Tue Mar 03 02:25:45.810462 2026] [proxy_fcgi:error] [pid 18556:tid 18776] [client 20.151.217.152:39903] AH01071: Got error 'Primary script unknown'
[Tue Mar 03 02:25:46.020408 2026] [proxy_fcgi:error] [pid 18556:tid 18769] [client 20.151.217.152:39903] AH01071: Got error 'Primary script unknown'
[Tue Mar 03 02:25:46.243157 2026] [proxy_fcgi:error] [pid 18556:tid 18766] [client 20.151.217.152:39903] AH01071: Got error 'Primary script unknown'
[Tue Mar 03 02:25:46.453116 2026] [proxy_fcgi:error] [pid 18556:tid 18757] [client 20.151.217.152:39903] AH01071: Got error 'Primary script unknown'
[Tue Mar 03 02:25:46.663202 2026] [proxy_fcgi:error] [pid 18556:tid 18774] [client 20.151.217.152:39903] AH01071: Got error 'Primary script unknown'
[Tue Mar 03 02:25:46.873482 2026] [proxy_fcgi:error] [pid 18556:tid 18775] [client 20.151.217.152:39903] AH01071: Got error 'Primary script unknown'
[Tue Mar 03 02:25:47.081639 2026] [proxy_fcgi:error] [pid 18556:tid 18760] [client 20.151.217.152:39903] AH01071: Got error 'Primary script unknown'
[Tue Mar 03 02:25:47.288407 2026] [:error] [pid 18556:tid 18773] [client 20.151.217.152:39903] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/as1337.php"] [unique_id "aaXWK39AYyTTd2eEk9FNzQAAABE"]
[Tue Mar 03 02:25:47.701115 2026] [:error] [pid 18558:tid 18872] [client 20.151.217.152:39824] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Okxob.php"] [unique_id "aaXWK7O1kQHjTOLioCncmAAAAJI"]
[Tue Mar 03 02:25:48.114189 2026] [:error] [pid 60214:tid 60230] [client 20.151.217.152:39889] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Okxob.php"] [unique_id "aaXWLImuQ_v4S3RkLis0ZwAAAQ4"]
[Tue Mar 03 02:25:48.541260 2026] [:error] [pid 60214:tid 60240] [client 20.151.217.152:39908] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Okxob.php"] [unique_id "aaXWLImuQ_v4S3RkLis0aQAAARg"]
[Tue Mar 03 02:25:48.966416 2026] [:error] [pid 60214:tid 60238] [client 20.151.217.152:39818] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Okxob.php"] [unique_id "aaXWLImuQ_v4S3RkLis0bQAAARY"]
[Tue Mar 03 02:25:49.394275 2026] [:error] [pid 18558:tid 18863] [client 20.151.217.152:39880] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wolf-shell.php"] [unique_id "aaXWLbO1kQHjTOLioCncmwAAAIk"]
[Tue Mar 03 02:25:49.807547 2026] [:error] [pid 18558:tid 18856] [client 20.151.217.152:39812] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wolf-shell.php"] [unique_id "aaXWLbO1kQHjTOLioCncnAAAAII"]
[Tue Mar 03 02:25:50.218243 2026] [:error] [pid 18557:tid 18846] [client 20.151.217.152:39828] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wolf-shell.php"] [unique_id "aaXWLtngZqR9Tp8JM0FvrAAAAFc"]
[Tue Mar 03 02:25:50.629143 2026] [:error] [pid 18557:tid 18820] [client 20.151.217.152:39898] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wolf-shell.php"] [unique_id "aaXWLtngZqR9Tp8JM0FvrgAAAEE"]
[Tue Mar 03 02:25:51.042699 2026] [:error] [pid 18557:tid 18835] [client 20.151.217.152:39900] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/core.php"] [unique_id "aaXWL9ngZqR9Tp8JM0FvrwAAAEw"]
[Tue Mar 03 02:25:51.458264 2026] [:error] [pid 18558:tid 18864] [client 20.151.217.152:39897] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/core.php"] [unique_id "aaXWL7O1kQHjTOLioCncpAAAAIo"]
[Tue Mar 03 02:25:51.880893 2026] [:error] [pid 18557:tid 18829] [client 20.151.217.152:39928] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/core.php"] [unique_id "aaXWL9ngZqR9Tp8JM0FvsQAAAEc"]
[Tue Mar 03 02:25:52.293155 2026] [:error] [pid 18557:tid 18843] [client 20.151.217.152:39751] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/core.php"] [unique_id "aaXWMNngZqR9Tp8JM0FvsgAAAFQ"]
[Tue Mar 03 02:25:52.705346 2026] [:error] [pid 18557:tid 18830] [client 20.151.217.152:39935] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zeal.php"] [unique_id "aaXWMNngZqR9Tp8JM0FvtgAAAEg"]
[Tue Mar 03 02:25:53.126939 2026] [:error] [pid 60214:tid 60222] [client 20.151.217.152:39881] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zeal.php"] [unique_id "aaXWMYmuQ_v4S3RkLis0dwAAAQY"]
[Tue Mar 03 02:25:53.557133 2026] [:error] [pid 60214:tid 60233] [client 20.151.217.152:39931] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zeal.php"] [unique_id "aaXWMYmuQ_v4S3RkLis0eQAAARE"]
[Tue Mar 03 02:25:53.971903 2026] [:error] [pid 18960:tid 18986] [client 20.151.217.152:39929] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zeal.php"] [unique_id "aaXWMdCu09icM9oIHwAFRQAAANc"]
[Tue Mar 03 02:25:54.386249 2026] [:error] [pid 60214:tid 60231] [client 20.151.217.152:39809] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/asf.php"] [unique_id "aaXWMomuQ_v4S3RkLis0fAAAAQ8"]
[Tue Mar 03 21:49:45.344681 2026] [:error] [pid 36785:tid 36864] [client 20.151.116.226:59936] [client 20.151.116.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wk/index.php"] [unique_id "aabm-XhJejauENG9qTgCLwAAAI4"]
[Tue Mar 03 21:49:46.188883 2026] [:error] [pid 14042:tid 14064] [client 20.151.116.226:60013] [client 20.151.116.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wk/index.php"] [unique_id "aabm-meHGCmSEiIBcK591gAAAZQ"]
[Tue Mar 03 21:49:47.030437 2026] [:error] [pid 36783:tid 36801] [client 20.151.116.226:59986] [client 20.151.116.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wk/index.php"] [unique_id "aabm-z4tNYh5NtLaTXfKQAAAAAc"]
[Tue Mar 03 21:49:47.878953 2026] [:error] [pid 36783:tid 36811] [client 20.151.116.226:56137] [client 20.151.116.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wk/index.php"] [unique_id "aabm-z4tNYh5NtLaTXfKQgAAABE"]
[Tue Mar 03 22:11:33.466319 2026] [:error] [pid 14042:tid 14057] [client 178.16.53.90:59227] [client 178.16.53.90] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env"] [unique_id "aabsFWeHGCmSEiIBcK6BBQAAAY0"]
[Wed Mar 04 01:40:20.431226 2026] [proxy_fcgi:error] [pid 27359:tid 27363] [client 20.151.116.226:59950] AH01071: Got error 'Primary script unknown'
[Wed Mar 04 01:40:20.642571 2026] [proxy_fcgi:error] [pid 27359:tid 27378] [client 20.151.116.226:59950] AH01071: Got error 'Primary script unknown'
[Wed Mar 04 01:40:20.852930 2026] [proxy_fcgi:error] [pid 27359:tid 27366] [client 20.151.116.226:59950] AH01071: Got error 'Primary script unknown'
[Wed Mar 04 01:40:21.062784 2026] [proxy_fcgi:error] [pid 27359:tid 27364] [client 20.151.116.226:59950] AH01071: Got error 'Primary script unknown'
[Wed Mar 04 01:40:21.275714 2026] [proxy_fcgi:error] [pid 27359:tid 27385] [client 20.151.116.226:59950] AH01071: Got error 'Primary script unknown'
[Wed Mar 04 01:40:21.488089 2026] [proxy_fcgi:error] [pid 27359:tid 27381] [client 20.151.116.226:59950] AH01071: Got error 'Primary script unknown'
[Wed Mar 04 01:40:21.909247 2026] [proxy_fcgi:error] [pid 27359:tid 27368] [client 20.151.116.226:59950] AH01071: Got error 'Primary script unknown'
[Wed Mar 04 01:40:22.119760 2026] [proxy_fcgi:error] [pid 27359:tid 27361] [client 20.151.116.226:59950] AH01071: Got error 'Primary script unknown'
[Wed Mar 04 01:40:22.330088 2026] [proxy_fcgi:error] [pid 27359:tid 27379] [client 20.151.116.226:59950] AH01071: Got error 'Primary script unknown'
[Wed Mar 04 01:40:22.540744 2026] [proxy_fcgi:error] [pid 27359:tid 27364] [client 20.151.116.226:59950] AH01071: Got error 'Primary script unknown'
[Wed Mar 04 01:40:22.747739 2026] [:error] [pid 27359:tid 27385] [client 20.151.116.226:59950] [client 20.151.116.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/info.php"] [unique_id "aacdBl607jzBiSmoFjL-WQAAANg"]
[Wed Mar 04 01:40:23.602132 2026] [:error] [pid 27359:tid 27381] [client 20.151.116.226:2694] [client 20.151.116.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/info.php"] [unique_id "aacdB1607jzBiSmoFjL-XgAAANQ"]
[Wed Mar 04 01:40:24.458164 2026] [:error] [pid 27359:tid 27384] [client 20.151.116.226:59948] [client 20.151.116.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/info.php"] [unique_id "aacdCF607jzBiSmoFjL-ZgAAANc"]
[Wed Mar 04 01:40:25.305187 2026] [:error] [pid 27359:tid 27373] [client 20.151.116.226:2747] [client 20.151.116.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/info.php"] [unique_id "aacdCV607jzBiSmoFjL-agAAAMw"]
[Wed Mar 04 02:54:05.247950 2026] [proxy_fcgi:error] [pid 48405:tid 48569] [client 20.116.16.88:54998] AH01071: Got error 'Primary script unknown'
[Wed Mar 04 02:54:05.677234 2026] [proxy_fcgi:error] [pid 48405:tid 48582] [client 20.116.16.88:54998] AH01071: Got error 'Primary script unknown'
[Wed Mar 04 02:54:05.892510 2026] [proxy_fcgi:error] [pid 48405:tid 48591] [client 20.116.16.88:54998] AH01071: Got error 'Primary script unknown'
[Wed Mar 04 02:54:06.329929 2026] [proxy_fcgi:error] [pid 48405:tid 48585] [client 20.116.16.88:54998] AH01071: Got error 'Primary script unknown'
[Wed Mar 04 02:54:06.549404 2026] [proxy_fcgi:error] [pid 48405:tid 48590] [client 20.116.16.88:54998] AH01071: Got error 'Primary script unknown'
[Wed Mar 04 02:54:06.764511 2026] [proxy_fcgi:error] [pid 48405:tid 48586] [client 20.116.16.88:54998] AH01071: Got error 'Primary script unknown'
[Wed Mar 04 02:54:06.982524 2026] [proxy_fcgi:error] [pid 48405:tid 48587] [client 20.116.16.88:54998] AH01071: Got error 'Primary script unknown'
[Wed Mar 04 02:54:07.197921 2026] [proxy_fcgi:error] [pid 48405:tid 48570] [client 20.116.16.88:54998] AH01071: Got error 'Primary script unknown'
[Wed Mar 04 02:54:07.413580 2026] [:error] [pid 48405:tid 48593] [client 20.116.16.88:54998] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws80.php"] [unique_id "aacuTxBIGeGp5MBz7gKEmQAAABg"]
[Wed Mar 04 02:54:07.970074 2026] [:error] [pid 27359:tid 27375] [client 20.116.16.88:54914] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws80.php"] [unique_id "aacuT1607jzBiSmoFjI5HwAAAM4"]
[Wed Mar 04 02:54:08.410180 2026] [:error] [pid 48407:tid 48704] [client 20.116.16.88:55006] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws80.php"] [unique_id "aacuUD7Td6SiHn8fwfnxxAAAAI0"]
[Wed Mar 04 02:54:08.820132 2026] [:error] [pid 48807:tid 48814] [client 20.116.16.88:55017] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws80.php"] [unique_id "aacuUA9v35BN-51vqYarkQAAAQU"]
[Wed Mar 04 02:54:09.237280 2026] [:error] [pid 48405:tid 48589] [client 20.116.16.88:55035] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/t.php"] [unique_id "aacuURBIGeGp5MBz7gKEnAAAABQ"]
[Wed Mar 04 02:54:09.662141 2026] [:error] [pid 27359:tid 27366] [client 20.116.16.88:54940] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/t.php"] [unique_id "aacuUV607jzBiSmoFjI5JwAAAMU"]
[Wed Mar 04 02:54:10.075481 2026] [:error] [pid 27359:tid 27370] [client 20.116.16.88:54949] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/t.php"] [unique_id "aacuUl607jzBiSmoFjI5KwAAAMk"]
[Wed Mar 04 02:54:10.500356 2026] [:error] [pid 27359:tid 27361] [client 20.116.16.88:54962] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/t.php"] [unique_id "aacuUl607jzBiSmoFjI5LgAAAMA"]
[Wed Mar 04 02:54:10.924013 2026] [:error] [pid 48405:tid 48577] [client 20.116.16.88:55025] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bgymj.php"] [unique_id "aacuUhBIGeGp5MBz7gKEngAAAAg"]
[Wed Mar 04 02:54:11.337786 2026] [:error] [pid 48407:tid 48694] [client 20.116.16.88:54991] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bgymj.php"] [unique_id "aacuUz7Td6SiHn8fwfnxyAAAAIQ"]
[Wed Mar 04 02:54:11.753397 2026] [:error] [pid 48406:tid 48680] [client 20.116.16.88:54145] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bgymj.php"] [unique_id "aacuUzStn8zJHlZMxFgr4gAAAFI"]
[Wed Mar 04 02:54:12.171227 2026] [:error] [pid 48405:tid 48588] [client 20.116.16.88:55019] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bgymj.php"] [unique_id "aacuVBBIGeGp5MBz7gKEnwAAABM"]
[Wed Mar 04 02:54:12.594452 2026] [:error] [pid 48407:tid 48710] [client 20.116.16.88:54933] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ms.php"] [unique_id "aacuVD7Td6SiHn8fwfnxywAAAJM"]
[Wed Mar 04 02:54:13.007873 2026] [:error] [pid 48406:tid 48684] [client 20.116.16.88:54936] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ms.php"] [unique_id "aacuVTStn8zJHlZMxFgr6QAAAFY"]
[Wed Mar 04 02:54:13.431104 2026] [:error] [pid 48407:tid 48714] [client 20.116.16.88:55034] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ms.php"] [unique_id "aacuVT7Td6SiHn8fwfnxzgAAAJc"]
[Wed Mar 04 02:54:13.852756 2026] [:error] [pid 48406:tid 48663] [client 20.116.16.88:54988] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ms.php"] [unique_id "aacuVTStn8zJHlZMxFgr7AAAAEI"]
[Wed Mar 04 02:54:14.268385 2026] [:error] [pid 27359:tid 27376] [client 20.116.16.88:54912] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/install.php"] [unique_id "aacuVl607jzBiSmoFjI5NAAAAM8"]
[Wed Mar 04 02:54:14.679206 2026] [:error] [pid 48807:tid 48816] [client 20.116.16.88:54935] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/install.php"] [unique_id "aacuVg9v35BN-51vqYarkwAAAQc"]
[Wed Mar 04 02:54:15.093204 2026] [:error] [pid 48807:tid 48827] [client 20.116.16.88:55025] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/install.php"] [unique_id "aacuVw9v35BN-51vqYarlAAAARI"]
[Wed Mar 04 02:54:15.512739 2026] [:error] [pid 48807:tid 48821] [client 20.116.16.88:55014] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/install.php"] [unique_id "aacuVw9v35BN-51vqYarlwAAAQw"]
[Wed Mar 04 02:54:15.929230 2026] [:error] [pid 48807:tid 48824] [client 20.116.16.88:55033] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ms-edit.php"] [unique_id "aacuVw9v35BN-51vqYarnAAAAQ8"]
[Wed Mar 04 02:54:16.342475 2026] [:error] [pid 48406:tid 48664] [client 20.116.16.88:54922] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ms-edit.php"] [unique_id "aacuWDStn8zJHlZMxFgr8wAAAEM"]
[Wed Mar 04 02:54:16.754003 2026] [:error] [pid 27359:tid 27365] [client 20.116.16.88:54926] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ms-edit.php"] [unique_id "aacuWF607jzBiSmoFjI5OgAAAMQ"]
[Wed Mar 04 02:54:17.172635 2026] [:error] [pid 27359:tid 27375] [client 20.116.16.88:55013] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ms-edit.php"] [unique_id "aacuWV607jzBiSmoFjI5PQAAAM4"]
[Wed Mar 04 02:54:17.616110 2026] [:error] [pid 27359:tid 27374] [client 20.116.16.88:55002] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws49.php"] [unique_id "aacuWV607jzBiSmoFjI5QQAAAM0"]
[Wed Mar 04 02:54:18.048952 2026] [:error] [pid 27359:tid 27368] [client 20.116.16.88:54921] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws49.php"] [unique_id "aacuWl607jzBiSmoFjI5QwAAAMc"]
[Wed Mar 04 02:54:18.466839 2026] [:error] [pid 27359:tid 27380] [client 20.116.16.88:54931] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws49.php"] [unique_id "aacuWl607jzBiSmoFjI5RgAAANM"]
[Wed Mar 04 02:54:18.898014 2026] [:error] [pid 27359:tid 27369] [client 20.116.16.88:54226] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws49.php"] [unique_id "aacuWl607jzBiSmoFjI5SAAAAMg"]
[Wed Mar 04 02:54:19.324341 2026] [:error] [pid 48406:tid 48679] [client 20.116.16.88:55032] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aacuWzStn8zJHlZMxFgr-gAAAFE"]
[Wed Mar 04 02:54:19.741739 2026] [:error] [pid 48405:tid 48580] [client 20.116.16.88:55008] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aacuWxBIGeGp5MBz7gKEpwAAAAs"]
[Wed Mar 04 02:54:20.154209 2026] [:error] [pid 48406:tid 48664] [client 20.116.16.88:54987] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aacuXDStn8zJHlZMxFgr_gAAAEM"]
[Wed Mar 04 02:54:20.568755 2026] [:error] [pid 48405:tid 48574] [client 20.116.16.88:54934] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aacuXBBIGeGp5MBz7gKEqAAAAAU"]
[Wed Mar 04 02:54:20.998720 2026] [:error] [pid 48807:tid 48814] [client 20.116.16.88:54981] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hots.php"] [unique_id "aacuXA9v35BN-51vqYarnwAAAQU"]
[Wed Mar 04 02:54:21.420482 2026] [:error] [pid 27359:tid 27378] [client 20.116.16.88:55022] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hots.php"] [unique_id "aacuXV607jzBiSmoFjI5VQAAANE"]
[Wed Mar 04 02:54:21.838152 2026] [:error] [pid 48407:tid 48694] [client 20.116.16.88:54989] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hots.php"] [unique_id "aacuXT7Td6SiHn8fwfnx0QAAAIQ"]
[Wed Mar 04 02:54:22.253482 2026] [:error] [pid 48407:tid 48693] [client 20.116.16.88:55029] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hots.php"] [unique_id "aacuXj7Td6SiHn8fwfnx0gAAAIM"]
[Wed Mar 04 02:54:22.671658 2026] [:error] [pid 27359:tid 27379] [client 20.116.16.88:54218] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/666.php"] [unique_id "aacuXl607jzBiSmoFjI5WQAAANI"]
[Wed Mar 04 02:54:23.091745 2026] [:error] [pid 27359:tid 27361] [client 20.116.16.88:55031] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/666.php"] [unique_id "aacuX1607jzBiSmoFjI5WgAAAMA"]
[Wed Mar 04 02:54:23.510907 2026] [:error] [pid 27359:tid 27377] [client 20.116.16.88:55027] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/666.php"] [unique_id "aacuX1607jzBiSmoFjI5XgAAANA"]
[Wed Mar 04 02:54:24.007913 2026] [:error] [pid 27359:tid 27364] [client 20.116.16.88:54932] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/666.php"] [unique_id "aacuYF607jzBiSmoFjI5YwAAAMM"]
[Wed Mar 04 02:54:24.427983 2026] [:error] [pid 27359:tid 27372] [client 20.116.16.88:54915] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hplfuns.php"] [unique_id "aacuYF607jzBiSmoFjI5awAAAMs"]
[Wed Mar 04 02:54:24.844828 2026] [:error] [pid 48405:tid 48569] [client 20.116.16.88:55021] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hplfuns.php"] [unique_id "aacuYBBIGeGp5MBz7gKErAAAAAA"]
[Wed Mar 04 02:54:25.279508 2026] [:error] [pid 27359:tid 27362] [client 20.116.16.88:54230] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hplfuns.php"] [unique_id "aacuYV607jzBiSmoFjI5dQAAAME"]
[Wed Mar 04 02:54:25.698439 2026] [:error] [pid 48405:tid 48576] [client 20.116.16.88:54920] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hplfuns.php"] [unique_id "aacuYRBIGeGp5MBz7gKErwAAAAc"]
[Wed Mar 04 02:54:26.122462 2026] [:error] [pid 48407:tid 48712] [client 20.116.16.88:55037] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wen.php"] [unique_id "aacuYj7Td6SiHn8fwfnx1wAAAJU"]
[Wed Mar 04 02:54:26.533769 2026] [:error] [pid 48807:tid 48821] [client 20.116.16.88:55020] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wen.php"] [unique_id "aacuYg9v35BN-51vqYarogAAAQw"]
[Wed Mar 04 02:54:26.948059 2026] [:error] [pid 48407:tid 48715] [client 20.116.16.88:55009] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wen.php"] [unique_id "aacuYj7Td6SiHn8fwfnx2gAAAJg"]
[Wed Mar 04 02:54:27.366749 2026] [:error] [pid 48807:tid 48822] [client 20.116.16.88:54943] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wen.php"] [unique_id "aacuYw9v35BN-51vqYarpgAAAQ0"]
[Wed Mar 04 02:54:27.785685 2026] [:error] [pid 48407:tid 48690] [client 20.116.16.88:54953] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gifclass.php"] [unique_id "aacuYz7Td6SiHn8fwfnx3QAAAIE"]
[Wed Mar 04 02:54:28.204470 2026] [:error] [pid 48407:tid 48693] [client 20.116.16.88:54147] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gifclass.php"] [unique_id "aacuZD7Td6SiHn8fwfnx4AAAAIM"]
[Wed Mar 04 02:54:28.621924 2026] [:error] [pid 48407:tid 48692] [client 20.116.16.88:54946] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gifclass.php"] [unique_id "aacuZD7Td6SiHn8fwfnx4QAAAII"]
[Wed Mar 04 02:54:29.045754 2026] [:error] [pid 48406:tid 48660] [client 20.116.16.88:54972] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gifclass.php"] [unique_id "aacuZTStn8zJHlZMxFgsDwAAAEA"]
[Wed Mar 04 02:54:29.469271 2026] [:error] [pid 48406:tid 48672] [client 20.116.16.88:55026] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ccs.php"] [unique_id "aacuZTStn8zJHlZMxFgsEAAAAEo"]
[Wed Mar 04 02:54:29.904350 2026] [:error] [pid 48407:tid 48701] [client 20.116.16.88:55010] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ccs.php"] [unique_id "aacuZT7Td6SiHn8fwfnx5gAAAIs"]
[Wed Mar 04 02:54:30.323208 2026] [:error] [pid 48405:tid 48581] [client 20.116.16.88:54220] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ccs.php"] [unique_id "aacuZhBIGeGp5MBz7gKEtwAAAAw"]
[Wed Mar 04 02:54:30.740408 2026] [:error] [pid 48405:tid 48571] [client 20.116.16.88:54258] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ccs.php"] [unique_id "aacuZhBIGeGp5MBz7gKEuAAAAAI"]
[Wed Mar 04 02:54:31.160374 2026] [:error] [pid 27359:tid 27379] [client 20.116.16.88:54265] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a4.php"] [unique_id "aacuZ1607jzBiSmoFjI5eQAAANI"]
[Wed Mar 04 02:54:31.578228 2026] [:error] [pid 27359:tid 27377] [client 20.116.16.88:54923] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a4.php"] [unique_id "aacuZ1607jzBiSmoFjI5egAAANA"]
[Wed Mar 04 02:54:31.996583 2026] [:error] [pid 48807:tid 48823] [client 20.116.16.88:54927] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a4.php"] [unique_id "aacuZw9v35BN-51vqYarqwAAAQ4"]
[Wed Mar 04 02:54:32.415484 2026] [:error] [pid 27359:tid 27368] [client 20.116.16.88:54975] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a4.php"] [unique_id "aacuaF607jzBiSmoFjI5ewAAAMc"]
[Wed Mar 04 02:54:32.831485 2026] [:error] [pid 48405:tid 48593] [client 20.116.16.88:54270] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bnm.php"] [unique_id "aacuaBBIGeGp5MBz7gKEvwAAABg"]
[Wed Mar 04 02:54:33.250701 2026] [:error] [pid 27359:tid 27370] [client 20.116.16.88:55036] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bnm.php"] [unique_id "aacuaV607jzBiSmoFjI5gQAAAMk"]
[Wed Mar 04 02:54:33.663404 2026] [:error] [pid 48406:tid 48676] [client 20.116.16.88:54961] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bnm.php"] [unique_id "aacuaTStn8zJHlZMxFgsEwAAAE4"]
[Wed Mar 04 02:54:34.074982 2026] [:error] [pid 27359:tid 27377] [client 20.116.16.88:54978] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bnm.php"] [unique_id "aacual607jzBiSmoFjI5iAAAANA"]
[Wed Mar 04 02:54:34.493308 2026] [:error] [pid 48807:tid 48820] [client 20.116.16.88:54250] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sid3.php"] [unique_id "aacuag9v35BN-51vqYarrQAAAQs"]
[Wed Mar 04 02:54:34.913445 2026] [:error] [pid 27359:tid 27366] [client 20.116.16.88:54977] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sid3.php"] [unique_id "aacual607jzBiSmoFjI5jgAAAMU"]
[Wed Mar 04 02:54:35.334400 2026] [:error] [pid 27359:tid 27384] [client 20.116.16.88:55007] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sid3.php"] [unique_id "aacua1607jzBiSmoFjI5jwAAANc"]
[Wed Mar 04 02:54:35.757217 2026] [:error] [pid 27359:tid 27367] [client 20.116.16.88:55023] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sid3.php"] [unique_id "aacua1607jzBiSmoFjI5kgAAAMY"]
[Wed Mar 04 02:54:36.176473 2026] [:error] [pid 27359:tid 27376] [client 20.116.16.88:54937] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tool.php"] [unique_id "aacubF607jzBiSmoFjI5lAAAAM8"]
[Wed Mar 04 02:54:36.607809 2026] [:error] [pid 27359:tid 27383] [client 20.116.16.88:54217] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tool.php"] [unique_id "aacubF607jzBiSmoFjI5lgAAANY"]
[Wed Mar 04 02:54:37.052451 2026] [:error] [pid 27359:tid 27368] [client 20.116.16.88:54919] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tool.php"] [unique_id "aacubV607jzBiSmoFjI5mAAAAMc"]
[Wed Mar 04 02:54:37.466792 2026] [:error] [pid 27359:tid 27364] [client 20.116.16.88:54948] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tool.php"] [unique_id "aacubV607jzBiSmoFjI5mQAAAMM"]
[Wed Mar 04 02:54:37.880751 2026] [:error] [pid 48407:tid 48710] [client 20.116.16.88:55011] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/222.php"] [unique_id "aacubT7Td6SiHn8fwfnx6QAAAJM"]
[Wed Mar 04 02:54:38.294766 2026] [:error] [pid 27359:tid 27363] [client 20.116.16.88:54172] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/222.php"] [unique_id "aacubl607jzBiSmoFjI5nAAAAMI"]
[Wed Mar 04 02:54:38.707290 2026] [:error] [pid 48807:tid 48818] [client 20.116.16.88:55001] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/222.php"] [unique_id "aacubg9v35BN-51vqYartQAAAQk"]
[Wed Mar 04 02:54:39.127477 2026] [:error] [pid 27359:tid 27381] [client 20.116.16.88:54242] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/222.php"] [unique_id "aacub1607jzBiSmoFjI5ngAAANQ"]
[Wed Mar 04 02:54:39.544735 2026] [:error] [pid 27359:tid 27379] [client 20.116.16.88:54983] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws77.php"] [unique_id "aacub1607jzBiSmoFjI5nwAAANI"]
[Wed Mar 04 02:54:39.961957 2026] [:error] [pid 27359:tid 27372] [client 20.116.16.88:54925] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws77.php"] [unique_id "aacub1607jzBiSmoFjI5owAAAMs"]
[Wed Mar 04 02:54:40.388201 2026] [:error] [pid 48807:tid 48823] [client 20.116.16.88:54967] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws77.php"] [unique_id "aacucA9v35BN-51vqYarugAAAQ4"]
[Wed Mar 04 02:54:40.830445 2026] [:error] [pid 27359:tid 27365] [client 20.116.16.88:54252] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws77.php"] [unique_id "aacucF607jzBiSmoFjI5qAAAAMQ"]
[Wed Mar 04 02:54:41.249969 2026] [:error] [pid 48807:tid 48819] [client 20.116.16.88:54164] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/edit.php"] [unique_id "aacucQ9v35BN-51vqYarvQAAAQo"]
[Wed Mar 04 02:54:41.664133 2026] [:error] [pid 48807:tid 48812] [client 20.116.16.88:54992] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/edit.php"] [unique_id "aacucQ9v35BN-51vqYarwAAAAQM"]
[Wed Mar 04 02:54:42.080714 2026] [:error] [pid 48807:tid 48818] [client 20.116.16.88:54947] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/edit.php"] [unique_id "aacucg9v35BN-51vqYarxQAAAQk"]
[Wed Mar 04 02:54:42.500802 2026] [:error] [pid 48807:tid 48826] [client 20.116.16.88:54970] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/edit.php"] [unique_id "aacucg9v35BN-51vqYarxgAAARE"]
[Wed Mar 04 02:54:42.923551 2026] [:error] [pid 48807:tid 48823] [client 20.116.16.88:54966] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-the.php"] [unique_id "aacucg9v35BN-51vqYaryAAAAQ4"]
[Wed Mar 04 02:54:43.337672 2026] [:error] [pid 48807:tid 48824] [client 20.116.16.88:54964] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-the.php"] [unique_id "aacucw9v35BN-51vqYarzAAAAQ8"]
[Wed Mar 04 02:54:43.756497 2026] [:error] [pid 48407:tid 48705] [client 20.116.16.88:54929] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-the.php"] [unique_id "aacucz7Td6SiHn8fwfnx9gAAAI4"]
[Wed Mar 04 02:54:44.189319 2026] [:error] [pid 48407:tid 48699] [client 20.116.16.88:54960] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-the.php"] [unique_id "aacudD7Td6SiHn8fwfnx9wAAAIk"]
[Wed Mar 04 02:54:44.604591 2026] [:error] [pid 48405:tid 48577] [client 20.116.16.88:54232] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-blog.php"] [unique_id "aacudBBIGeGp5MBz7gKE0QAAAAg"]
[Wed Mar 04 02:54:45.014959 2026] [:error] [pid 48807:tid 48812] [client 20.116.16.88:54950] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-blog.php"] [unique_id "aacudQ9v35BN-51vqYar1wAAAQM"]
[Wed Mar 04 02:54:45.449251 2026] [:error] [pid 27359:tid 27362] [client 20.116.16.88:54979] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-blog.php"] [unique_id "aacudV607jzBiSmoFjI5rAAAAME"]
[Wed Mar 04 02:54:45.866281 2026] [:error] [pid 27359:tid 27369] [client 20.116.16.88:54209] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-blog.php"] [unique_id "aacudV607jzBiSmoFjI5rwAAAMg"]
[Wed Mar 04 02:54:46.295073 2026] [:error] [pid 48807:tid 48809] [client 20.116.16.88:54221] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-act.php"] [unique_id "aacudg9v35BN-51vqYar3AAAAQA"]
[Wed Mar 04 02:54:46.717663 2026] [:error] [pid 48807:tid 48825] [client 20.116.16.88:54994] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-act.php"] [unique_id "aacudg9v35BN-51vqYar3QAAARA"]
[Wed Mar 04 02:54:47.131185 2026] [:error] [pid 27359:tid 27376] [client 20.116.16.88:54999] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-act.php"] [unique_id "aacud1607jzBiSmoFjI5tgAAAM8"]
[Wed Mar 04 02:54:47.549049 2026] [:error] [pid 27359:tid 27368] [client 20.116.16.88:54980] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-act.php"] [unique_id "aacud1607jzBiSmoFjI5uAAAAMc"]
[Wed Mar 04 02:54:47.971744 2026] [:error] [pid 48407:tid 48695] [client 20.116.16.88:55030] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/1.php"] [unique_id "aacudz7Td6SiHn8fwfnx_gAAAIU"]
[Wed Mar 04 02:54:48.403780 2026] [:error] [pid 48407:tid 48690] [client 20.116.16.88:54954] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/1.php"] [unique_id "aacueD7Td6SiHn8fwfnx_wAAAIE"]
[Wed Mar 04 02:54:48.832249 2026] [:error] [pid 27359:tid 27369] [client 20.116.16.88:55004] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/1.php"] [unique_id "aacueF607jzBiSmoFjI5vAAAAMg"]
[Wed Mar 04 02:54:49.250247 2026] [:error] [pid 27359:tid 27365] [client 20.116.16.88:55003] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/1.php"] [unique_id "aacueV607jzBiSmoFjI5vgAAAMQ"]
[Wed Mar 04 02:54:49.660339 2026] [:error] [pid 27359:tid 27385] [client 20.116.16.88:55018] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tfm.php"] [unique_id "aacueV607jzBiSmoFjI5wwAAANg"]
[Wed Mar 04 02:54:50.072774 2026] [:error] [pid 48406:tid 48667] [client 20.116.16.88:54955] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tfm.php"] [unique_id "aacuejStn8zJHlZMxFgsKAAAAEU"]
[Wed Mar 04 02:54:50.493688 2026] [:error] [pid 48405:tid 48586] [client 20.116.16.88:54152] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tfm.php"] [unique_id "aacuehBIGeGp5MBz7gKE2AAAABE"]
[Wed Mar 04 02:54:50.935644 2026] [:error] [pid 48807:tid 48816] [client 20.116.16.88:55024] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tfm.php"] [unique_id "aacueg9v35BN-51vqYar5AAAAQc"]
[Wed Mar 04 02:54:51.372649 2026] [:error] [pid 48406:tid 48663] [client 20.116.16.88:54269] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file.php"] [unique_id "aacuezStn8zJHlZMxFgsLAAAAEI"]
[Wed Mar 04 02:54:51.794073 2026] [:error] [pid 48807:tid 48818] [client 20.116.16.88:54236] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file.php"] [unique_id "aacuew9v35BN-51vqYar6QAAAQk"]
[Wed Mar 04 02:54:52.211103 2026] [:error] [pid 48807:tid 48809] [client 20.116.16.88:54246] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file.php"] [unique_id "aacufA9v35BN-51vqYar6wAAAQA"]
[Wed Mar 04 02:54:52.637024 2026] [:error] [pid 48407:tid 48708] [client 20.116.16.88:54939] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file.php"] [unique_id "aacufD7Td6SiHn8fwfnyDgAAAJE"]
[Wed Mar 04 02:54:53.081730 2026] [:error] [pid 48407:tid 48713] [client 20.116.16.88:54928] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tfm.php"] [unique_id "aacufT7Td6SiHn8fwfnyEQAAAJY"]
[Wed Mar 04 02:54:53.514922 2026] [:error] [pid 48807:tid 48822] [client 20.116.16.88:54238] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tfm.php"] [unique_id "aacufQ9v35BN-51vqYar7wAAAQ0"]
[Wed Mar 04 02:54:53.957591 2026] [:error] [pid 48807:tid 48810] [client 20.116.16.88:54916] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tfm.php"] [unique_id "aacufQ9v35BN-51vqYar8wAAAQE"]
[Wed Mar 04 02:54:54.383078 2026] [:error] [pid 48807:tid 48829] [client 20.116.16.88:54186] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tfm.php"] [unique_id "aacufg9v35BN-51vqYar9wAAARQ"]
[Wed Mar 04 02:54:54.809010 2026] [:error] [pid 48405:tid 48589] [client 20.116.16.88:55000] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/abc.php"] [unique_id "aacufhBIGeGp5MBz7gKE3AAAABQ"]
[Wed Mar 04 02:54:55.227463 2026] [:error] [pid 48807:tid 48822] [client 20.116.16.88:54157] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/abc.php"] [unique_id "aacufw9v35BN-51vqYar_QAAAQ0"]
[Wed Mar 04 02:54:55.684689 2026] [:error] [pid 48807:tid 48812] [client 20.116.16.88:54241] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/abc.php"] [unique_id "aacufw9v35BN-51vqYar_gAAAQM"]
[Wed Mar 04 02:54:56.098022 2026] [:error] [pid 48807:tid 48818] [client 20.116.16.88:54957] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/abc.php"] [unique_id "aacugA9v35BN-51vqYasAgAAAQk"]
[Wed Mar 04 02:54:56.517127 2026] [:error] [pid 48807:tid 48825] [client 20.116.16.88:10201] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gettest.php"] [unique_id "aacugA9v35BN-51vqYasBAAAARA"]
[Wed Mar 04 02:54:56.943271 2026] [:error] [pid 48807:tid 48833] [client 20.116.16.88:54163] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gettest.php"] [unique_id "aacugA9v35BN-51vqYasBwAAARg"]
[Wed Mar 04 02:54:57.364344 2026] [:error] [pid 48407:tid 48706] [client 20.116.16.88:54222] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gettest.php"] [unique_id "aacugT7Td6SiHn8fwfnyFQAAAI8"]
[Wed Mar 04 02:54:57.788527 2026] [:error] [pid 27359:tid 27381] [client 20.116.16.88:54224] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gettest.php"] [unique_id "aacugV607jzBiSmoFjI50QAAANQ"]
[Wed Mar 04 02:54:58.220349 2026] [:error] [pid 27359:tid 27364] [client 20.116.16.88:54917] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/amp.php"] [unique_id "aacugl607jzBiSmoFjI51AAAAMM"]
[Wed Mar 04 02:54:58.643103 2026] [:error] [pid 27359:tid 27363] [client 20.116.16.88:54188] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/amp.php"] [unique_id "aacugl607jzBiSmoFjI52QAAAMI"]
[Wed Mar 04 02:54:59.063832 2026] [:error] [pid 48407:tid 48705] [client 20.116.16.88:54969] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/amp.php"] [unique_id "aacugz7Td6SiHn8fwfnyGAAAAI4"]
[Wed Mar 04 02:54:59.494819 2026] [:error] [pid 48807:tid 48817] [client 20.116.16.88:55028] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/amp.php"] [unique_id "aacugw9v35BN-51vqYasDQAAAQg"]
[Wed Mar 04 02:54:59.941463 2026] [:error] [pid 27359:tid 27379] [client 20.116.16.88:54253] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kj.php"] [unique_id "aacug1607jzBiSmoFjI54gAAANI"]
[Wed Mar 04 02:55:00.375231 2026] [:error] [pid 48407:tid 48703] [client 20.116.16.88:54212] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kj.php"] [unique_id "aacuhD7Td6SiHn8fwfnyIAAAAIw"]
[Wed Mar 04 02:55:00.788243 2026] [:error] [pid 27359:tid 27361] [client 20.116.16.88:54210] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kj.php"] [unique_id "aacuhF607jzBiSmoFjI55wAAAMA"]
[Wed Mar 04 02:55:01.213092 2026] [:error] [pid 27359:tid 27384] [client 20.116.16.88:10226] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kj.php"] [unique_id "aacuhV607jzBiSmoFjI57AAAANc"]
[Wed Mar 04 02:55:01.663777 2026] [:error] [pid 27359:tid 27374] [client 20.116.16.88:54945] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xxw.php"] [unique_id "aacuhV607jzBiSmoFjI58QAAAM0"]
[Wed Mar 04 02:55:02.089443 2026] [:error] [pid 48807:tid 48815] [client 20.116.16.88:54952] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xxw.php"] [unique_id "aacuhg9v35BN-51vqYasEAAAAQY"]
[Wed Mar 04 02:55:02.510673 2026] [:error] [pid 48807:tid 48827] [client 20.116.16.88:54264] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xxw.php"] [unique_id "aacuhg9v35BN-51vqYasFQAAARI"]
[Wed Mar 04 02:55:02.954058 2026] [:error] [pid 48406:tid 48681] [client 20.116.16.88:54249] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xxw.php"] [unique_id "aacuhjStn8zJHlZMxFgsOgAAAFM"]
[Wed Mar 04 02:55:03.371711 2026] [:error] [pid 48407:tid 48709] [client 20.116.16.88:54951] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/term.php"] [unique_id "aacuhz7Td6SiHn8fwfnyIwAAAJI"]
[Wed Mar 04 02:55:03.796609 2026] [:error] [pid 48406:tid 48682] [client 20.116.16.88:55012] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/term.php"] [unique_id "aacuhzStn8zJHlZMxFgsPwAAAFQ"]
[Wed Mar 04 02:55:04.213736 2026] [:error] [pid 48407:tid 48690] [client 20.116.16.88:55038] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/term.php"] [unique_id "aacuiD7Td6SiHn8fwfnyKAAAAIE"]
[Wed Mar 04 02:55:04.636276 2026] [:error] [pid 48406:tid 48679] [client 20.116.16.88:54956] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/term.php"] [unique_id "aacuiDStn8zJHlZMxFgsQQAAAFE"]
[Wed Mar 04 02:55:05.065686 2026] [:error] [pid 48407:tid 48704] [client 20.116.16.88:54233] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws60.php"] [unique_id "aacuiT7Td6SiHn8fwfnyKgAAAI0"]
[Wed Mar 04 02:55:05.493463 2026] [:error] [pid 48406:tid 48684] [client 20.116.16.88:54199] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws60.php"] [unique_id "aacuiTStn8zJHlZMxFgsRwAAAFY"]
[Wed Mar 04 02:55:05.917298 2026] [:error] [pid 48807:tid 48814] [client 20.116.16.88:54995] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws60.php"] [unique_id "aacuiQ9v35BN-51vqYasGgAAAQU"]
[Wed Mar 04 02:55:06.332053 2026] [:error] [pid 48406:tid 48660] [client 20.116.16.88:54973] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws60.php"] [unique_id "aacuijStn8zJHlZMxFgsSwAAAEA"]
[Wed Mar 04 02:55:06.791250 2026] [:error] [pid 48807:tid 48818] [client 20.116.16.88:54944] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gfd.php"] [unique_id "aacuig9v35BN-51vqYasIAAAAQk"]
[Wed Mar 04 02:55:07.217819 2026] [proxy_fcgi:error] [pid 48807:tid 48824] [client 20.116.16.88:54996] AH01071: Got error 'Primary script unknown'
[Wed Mar 04 02:55:07.426966 2026] [proxy_fcgi:error] [pid 48807:tid 48820] [client 20.116.16.88:54996] AH01071: Got error 'Primary script unknown'
[Wed Mar 04 02:55:07.640777 2026] [proxy_fcgi:error] [pid 48807:tid 48833] [client 20.116.16.88:54996] AH01071: Got error 'Primary script unknown'
[Wed Mar 04 02:55:07.856834 2026] [proxy_fcgi:error] [pid 48807:tid 48811] [client 20.116.16.88:54996] AH01071: Got error 'Primary script unknown'
[Wed Mar 04 02:55:08.073253 2026] [proxy_fcgi:error] [pid 48807:tid 48823] [client 20.116.16.88:54996] AH01071: Got error 'Primary script unknown'
[Wed Mar 04 02:55:08.283262 2026] [proxy_fcgi:error] [pid 48807:tid 48825] [client 20.116.16.88:54996] AH01071: Got error 'Primary script unknown'
[Wed Mar 04 02:55:08.700830 2026] [proxy_fcgi:error] [pid 48807:tid 48810] [client 20.116.16.88:54996] AH01071: Got error 'Primary script unknown'
[Wed Mar 04 02:55:09.139873 2026] [proxy_fcgi:error] [pid 48807:tid 48829] [client 20.116.16.88:54996] AH01071: Got error 'Primary script unknown'
[Wed Mar 04 02:55:09.349238 2026] [proxy_fcgi:error] [pid 48807:tid 48828] [client 20.116.16.88:54996] AH01071: Got error 'Primary script unknown'
[Wed Mar 04 02:55:10.768606 2026] [:error] [pid 48807:tid 48830] [client 20.116.16.88:54996] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/init.php"] [unique_id "aacujg9v35BN-51vqYasQwAAARU"]
[Wed Mar 04 02:55:11.181985 2026] [:error] [pid 48407:tid 48700] [client 20.116.16.88:54984] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/init.php"] [unique_id "aacujz7Td6SiHn8fwfnyMQAAAIo"]
[Wed Mar 04 02:55:11.599375 2026] [:error] [pid 48407:tid 48692] [client 20.116.16.88:54178] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/init.php"] [unique_id "aacujz7Td6SiHn8fwfnyMwAAAII"]
[Wed Mar 04 02:55:12.043945 2026] [:error] [pid 27359:tid 27371] [client 20.116.16.88:54982] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/init.php"] [unique_id "aacukF607jzBiSmoFjI6EAAAAMo"]
[Wed Mar 04 02:55:12.488481 2026] [:error] [pid 27359:tid 27372] [client 20.116.16.88:54167] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/public/ws49.php"] [unique_id "aacukF607jzBiSmoFjI6FgAAAMs"]
[Wed Mar 04 02:55:12.912306 2026] [:error] [pid 27359:tid 27384] [client 20.116.16.88:54990] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/public/ws49.php"] [unique_id "aacukF607jzBiSmoFjI6GwAAANc"]
[Wed Mar 04 02:55:13.336758 2026] [:error] [pid 27359:tid 27362] [client 20.116.16.88:54266] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/public/ws49.php"] [unique_id "aacukV607jzBiSmoFjI6HQAAAME"]
[Wed Mar 04 02:55:13.776576 2026] [:error] [pid 27359:tid 27372] [client 20.116.16.88:54965] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/public/ws49.php"] [unique_id "aacukV607jzBiSmoFjI6IgAAAMs"]
[Wed Mar 04 02:55:14.200882 2026] [:error] [pid 27359:tid 27370] [client 20.116.16.88:10210] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/66.php"] [unique_id "aacukl607jzBiSmoFjI6KAAAAMk"]
[Wed Mar 04 02:55:14.623611 2026] [:error] [pid 27359:tid 27366] [client 20.116.16.88:54247] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/66.php"] [unique_id "aacukl607jzBiSmoFjI6LgAAAMU"]
[Wed Mar 04 02:55:15.058310 2026] [:error] [pid 48807:tid 48810] [client 20.116.16.88:54223] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/66.php"] [unique_id "aacukw9v35BN-51vqYasRgAAAQE"]
[Wed Mar 04 02:55:15.497132 2026] [:error] [pid 48406:tid 48663] [client 20.116.16.88:54159] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/66.php"] [unique_id "aacukzStn8zJHlZMxFgsTQAAAEI"]
[Wed Mar 04 02:55:15.912988 2026] [:error] [pid 48406:tid 48668] [client 20.116.16.88:54913] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/index.php"] [unique_id "aacukzStn8zJHlZMxFgsUQAAAEY"]
[Wed Mar 04 02:55:16.327727 2026] [:error] [pid 27359:tid 27384] [client 20.116.16.88:54148] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/index.php"] [unique_id "aaculF607jzBiSmoFjI6OgAAANc"]
[Wed Mar 04 02:55:16.742570 2026] [:error] [pid 48407:tid 48693] [client 20.116.16.88:54149] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/index.php"] [unique_id "aaculD7Td6SiHn8fwfnyOgAAAIM"]
[Wed Mar 04 02:55:17.157066 2026] [:error] [pid 48405:tid 48569] [client 20.116.16.88:54268] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/index.php"] [unique_id "aaculRBIGeGp5MBz7gKE7AAAAAA"]
[Wed Mar 04 02:55:17.598516 2026] [:error] [pid 48405:tid 48586] [client 20.116.16.88:10184] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/b.php"] [unique_id "aaculRBIGeGp5MBz7gKE7gAAABE"]
[Wed Mar 04 02:55:18.018531 2026] [:error] [pid 27359:tid 27380] [client 20.116.16.88:10177] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/b.php"] [unique_id "aacull607jzBiSmoFjI6SAAAANM"]
[Wed Mar 04 02:55:18.445171 2026] [:error] [pid 48407:tid 48706] [client 20.116.16.88:54173] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/b.php"] [unique_id "aaculj7Td6SiHn8fwfnyPgAAAI8"]
[Wed Mar 04 02:55:18.873892 2026] [:error] [pid 27359:tid 27380] [client 20.116.16.88:54271] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/b.php"] [unique_id "aacull607jzBiSmoFjI6UwAAANM"]
[Wed Mar 04 02:55:19.299347 2026] [:error] [pid 48406:tid 48683] [client 20.116.16.88:54198] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp9.php"] [unique_id "aaculzStn8zJHlZMxFgsWQAAAFU"]
[Wed Mar 04 02:55:19.715898 2026] [:error] [pid 48407:tid 48697] [client 20.116.16.88:54916] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp9.php"] [unique_id "aaculz7Td6SiHn8fwfnyQAAAAIc"]
[Wed Mar 04 02:55:20.142080 2026] [:error] [pid 48407:tid 48710] [client 20.116.16.88:54997] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp9.php"] [unique_id "aacumD7Td6SiHn8fwfnyRgAAAJM"]
[Wed Mar 04 02:55:20.561897 2026] [:error] [pid 27359:tid 27367] [client 20.116.16.88:54924] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp9.php"] [unique_id "aacumF607jzBiSmoFjI6YAAAAMY"]
[Wed Mar 04 02:55:20.983493 2026] [:error] [pid 27359:tid 27384] [client 20.116.16.88:10194] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/grsiuk.php"] [unique_id "aacumF607jzBiSmoFjI6ZgAAANc"]
[Wed Mar 04 02:55:21.412507 2026] [:error] [pid 48406:tid 48680] [client 20.116.16.88:10191] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/grsiuk.php"] [unique_id "aacumTStn8zJHlZMxFgsXgAAAFI"]
[Wed Mar 04 02:55:21.823048 2026] [:error] [pid 48406:tid 48682] [client 20.116.16.88:54993] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/grsiuk.php"] [unique_id "aacumTStn8zJHlZMxFgsXwAAAFQ"]
[Wed Mar 04 02:55:22.242234 2026] [:error] [pid 27359:tid 27367] [client 20.116.16.88:54938] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/grsiuk.php"] [unique_id "aacuml607jzBiSmoFjI6dgAAAMY"]
[Wed Mar 04 02:55:22.665170 2026] [:error] [pid 27359:tid 27368] [client 20.116.16.88:54171] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/radio.php"] [unique_id "aacuml607jzBiSmoFjI6eQAAAMc"]
[Wed Mar 04 02:55:23.095289 2026] [:error] [pid 48807:tid 48820] [client 20.116.16.88:54155] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/radio.php"] [unique_id "aacumw9v35BN-51vqYasTgAAAQs"]
[Wed Mar 04 02:55:23.506919 2026] [:error] [pid 27359:tid 27377] [client 20.116.16.88:54184] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/radio.php"] [unique_id "aacum1607jzBiSmoFjI6fwAAANA"]
[Wed Mar 04 02:55:23.922521 2026] [:error] [pid 48807:tid 48832] [client 20.116.16.88:54175] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/radio.php"] [unique_id "aacumw9v35BN-51vqYasUgAAARc"]
[Wed Mar 04 02:55:24.335295 2026] [:error] [pid 27359:tid 27370] [client 20.116.16.88:54158] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/motu.php"] [unique_id "aacunF607jzBiSmoFjI6gQAAAMk"]
[Wed Mar 04 02:55:24.750360 2026] [:error] [pid 27359:tid 27368] [client 20.116.16.88:10128] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/motu.php"] [unique_id "aacunF607jzBiSmoFjI6gwAAAMc"]
[Wed Mar 04 02:55:25.165791 2026] [:error] [pid 27359:tid 27384] [client 20.116.16.88:54195] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/motu.php"] [unique_id "aacunV607jzBiSmoFjI6hAAAANc"]
[Wed Mar 04 02:55:25.592006 2026] [:error] [pid 48405:tid 48580] [client 20.116.16.88:54202] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/motu.php"] [unique_id "aacunRBIGeGp5MBz7gKE9gAAAAs"]
[Wed Mar 04 02:55:26.020374 2026] [:error] [pid 48406:tid 48685] [client 20.116.16.88:54150] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fs.php"] [unique_id "aacunjStn8zJHlZMxFgsYAAAAFc"]
[Wed Mar 04 02:55:26.439975 2026] [:error] [pid 48807:tid 48831] [client 20.116.16.88:54971] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fs.php"] [unique_id "aacung9v35BN-51vqYasXgAAARY"]
[Wed Mar 04 02:55:26.856367 2026] [:error] [pid 27359:tid 27366] [client 20.116.16.88:54227] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fs.php"] [unique_id "aacunl607jzBiSmoFjI6iwAAAMU"]
[Wed Mar 04 02:55:27.266440 2026] [:error] [pid 27359:tid 27371] [client 20.116.16.88:54191] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fs.php"] [unique_id "aacun1607jzBiSmoFjI6kAAAAMo"]
[Wed Mar 04 02:55:27.694337 2026] [:error] [pid 48807:tid 48814] [client 20.116.16.88:54176] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ajax.php"] [unique_id "aacunw9v35BN-51vqYasXwAAAQU"]
[Wed Mar 04 02:55:28.121722 2026] [:error] [pid 27359:tid 27383] [client 20.116.16.88:54170] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ajax.php"] [unique_id "aacuoF607jzBiSmoFjI6kQAAANY"]
[Wed Mar 04 02:55:28.546379 2026] [:error] [pid 48405:tid 48573] [client 20.116.16.88:54941] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ajax.php"] [unique_id "aacuoBBIGeGp5MBz7gKE-QAAAAQ"]
[Wed Mar 04 02:55:28.967962 2026] [:error] [pid 48406:tid 48677] [client 20.116.16.88:54968] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ajax.php"] [unique_id "aacuoDStn8zJHlZMxFgsYwAAAE8"]
[Wed Mar 04 02:55:29.387624 2026] [:error] [pid 48405:tid 48585] [client 20.116.16.88:10127] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tx78.php"] [unique_id "aacuoRBIGeGp5MBz7gKE-gAAABA"]
[Wed Mar 04 02:55:29.808805 2026] [:error] [pid 27359:tid 27384] [client 20.116.16.88:54208] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tx78.php"] [unique_id "aacuoV607jzBiSmoFjI6mQAAANc"]
[Wed Mar 04 02:55:30.230910 2026] [:error] [pid 48405:tid 48586] [client 20.116.16.88:54215] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tx78.php"] [unique_id "aacuohBIGeGp5MBz7gKE-wAAABE"]
[Wed Mar 04 02:55:30.649967 2026] [:error] [pid 27359:tid 27381] [client 20.116.16.88:54194] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tx78.php"] [unique_id "aacuol607jzBiSmoFjI6ngAAANQ"]
[Wed Mar 04 02:55:31.070604 2026] [:error] [pid 27359:tid 27384] [client 20.116.16.88:54267] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jp.php"] [unique_id "aacuo1607jzBiSmoFjI6oQAAANc"]
[Wed Mar 04 02:55:31.491001 2026] [:error] [pid 48807:tid 48820] [client 20.116.16.88:54146] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jp.php"] [unique_id "aacuow9v35BN-51vqYasZQAAAQs"]
[Wed Mar 04 02:55:31.913042 2026] [:error] [pid 27359:tid 27382] [client 20.116.16.88:54213] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jp.php"] [unique_id "aacuo1607jzBiSmoFjI6pQAAANU"]
[Wed Mar 04 02:55:32.325741 2026] [:error] [pid 27359:tid 27385] [client 20.116.16.88:54179] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jp.php"] [unique_id "aacupF607jzBiSmoFjI6qAAAANg"]
[Wed Mar 04 02:55:32.737073 2026] [:error] [pid 27359:tid 27375] [client 20.116.16.88:54963] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-blogs.php"] [unique_id "aacupF607jzBiSmoFjI6qgAAAM4"]
[Wed Mar 04 02:55:33.169102 2026] [:error] [pid 27359:tid 27369] [client 20.116.16.88:54219] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-blogs.php"] [unique_id "aacupV607jzBiSmoFjI6rAAAAMg"]
[Wed Mar 04 02:55:33.596975 2026] [:error] [pid 48807:tid 48823] [client 20.116.16.88:54166] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-blogs.php"] [unique_id "aacupQ9v35BN-51vqYasbAAAAQ4"]
[Wed Mar 04 02:55:34.011753 2026] [:error] [pid 48807:tid 48813] [client 20.116.16.88:54974] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-blogs.php"] [unique_id "aacupg9v35BN-51vqYasbgAAAQQ"]
[Wed Mar 04 02:55:34.430011 2026] [:error] [pid 27359:tid 27381] [client 20.116.16.88:10234] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/edit-tags.php"] [unique_id "aacupl607jzBiSmoFjI6sAAAANQ"]
[Wed Mar 04 02:55:34.849784 2026] [:error] [pid 48807:tid 48827] [client 20.116.16.88:10190] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/edit-tags.php"] [unique_id "aacupg9v35BN-51vqYascQAAARI"]
[Wed Mar 04 02:55:35.274811 2026] [:error] [pid 48807:tid 48819] [client 20.116.16.88:54204] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/edit-tags.php"] [unique_id "aacupw9v35BN-51vqYasdQAAAQo"]
[Wed Mar 04 02:55:35.689907 2026] [:error] [pid 48407:tid 48692] [client 20.116.16.88:10180] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/edit-tags.php"] [unique_id "aacupz7Td6SiHn8fwfnyUQAAAII"]
[Wed Mar 04 02:55:36.103982 2026] [:error] [pid 48807:tid 48812] [client 20.116.16.88:54161] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-png.php"] [unique_id "aacuqA9v35BN-51vqYaseAAAAQM"]
[Wed Mar 04 02:55:36.513256 2026] [:error] [pid 48407:tid 48700] [client 20.116.16.88:55039] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-png.php"] [unique_id "aacuqD7Td6SiHn8fwfnyUwAAAIo"]
[Wed Mar 04 02:55:36.925048 2026] [:error] [pid 48807:tid 48809] [client 20.116.16.88:54144] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-png.php"] [unique_id "aacuqA9v35BN-51vqYasewAAAQA"]
[Wed Mar 04 02:55:37.337000 2026] [:error] [pid 27359:tid 27384] [client 20.116.16.88:10198] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-png.php"] [unique_id "aacuqV607jzBiSmoFjI6swAAANc"]
[Wed Mar 04 02:55:37.758689 2026] [:error] [pid 48407:tid 48694] [client 20.116.16.88:54187] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wpc2.php"] [unique_id "aacuqT7Td6SiHn8fwfnyVQAAAIQ"]
[Wed Mar 04 02:55:38.184526 2026] [:error] [pid 27359:tid 27385] [client 20.116.16.88:54243] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wpc2.php"] [unique_id "aacuql607jzBiSmoFjI6uQAAANg"]
[Wed Mar 04 02:55:38.617657 2026] [:error] [pid 48407:tid 48715] [client 20.116.16.88:54244] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wpc2.php"] [unique_id "aacuqj7Td6SiHn8fwfnyVgAAAJg"]
[Wed Mar 04 02:55:39.035615 2026] [:error] [pid 48407:tid 48712] [client 20.116.16.88:10189] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wpc2.php"] [unique_id "aacuqz7Td6SiHn8fwfnyWQAAAJU"]
[Wed Mar 04 02:55:39.473188 2026] [:error] [pid 27359:tid 27382] [client 20.116.16.88:54225] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/intall.php"] [unique_id "aacuq1607jzBiSmoFjI6vQAAANU"]
[Wed Mar 04 02:55:39.900605 2026] [:error] [pid 27359:tid 27362] [client 20.116.16.88:54154] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/intall.php"] [unique_id "aacuq1607jzBiSmoFjI6wAAAAME"]
[Wed Mar 04 02:55:40.322200 2026] [:error] [pid 48807:tid 48813] [client 20.116.16.88:54260] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/intall.php"] [unique_id "aacurA9v35BN-51vqYasgQAAAQQ"]
[Wed Mar 04 02:55:40.751218 2026] [:error] [pid 27359:tid 27385] [client 20.116.16.88:54245] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/intall.php"] [unique_id "aacurF607jzBiSmoFjI6xAAAANg"]
[Wed Mar 04 02:55:41.166466 2026] [:error] [pid 48406:tid 48677] [client 20.116.16.88:54263] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cu.php"] [unique_id "aacurTStn8zJHlZMxFgsbgAAAE8"]
[Wed Mar 04 02:55:41.578347 2026] [:error] [pid 48807:tid 48827] [client 20.116.16.88:54231] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cu.php"] [unique_id "aacurQ9v35BN-51vqYashwAAARI"]
[Wed Mar 04 02:55:42.007313 2026] [:error] [pid 48406:tid 48660] [client 20.116.16.88:54201] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cu.php"] [unique_id "aacurjStn8zJHlZMxFgscQAAAEA"]
[Wed Mar 04 02:55:42.436065 2026] [:error] [pid 48406:tid 48668] [client 20.116.16.88:54189] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cu.php"] [unique_id "aacurjStn8zJHlZMxFgsdAAAAEY"]
[Wed Mar 04 02:55:42.853738 2026] [:error] [pid 48405:tid 48569] [client 20.116.16.88:54985] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/callback.php"] [unique_id "aacurhBIGeGp5MBz7gKFAwAAAAA"]
[Wed Mar 04 02:55:43.274705 2026] [:error] [pid 27359:tid 27373] [client 20.116.16.88:54185] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/callback.php"] [unique_id "aacur1607jzBiSmoFjI6zQAAAMw"]
[Wed Mar 04 02:55:43.717039 2026] [:error] [pid 27359:tid 27380] [client 20.116.16.88:10224] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/callback.php"] [unique_id "aacur1607jzBiSmoFjI60gAAANM"]
[Wed Mar 04 02:55:44.167430 2026] [:error] [pid 48405:tid 48578] [client 20.116.16.88:10138] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/callback.php"] [unique_id "aacusBBIGeGp5MBz7gKFBwAAAAk"]
[Wed Mar 04 02:55:44.624861 2026] [:error] [pid 27359:tid 27366] [client 20.116.16.88:54959] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/byypas.php"] [unique_id "aacusF607jzBiSmoFjI61QAAAMU"]
[Wed Mar 04 02:55:45.207860 2026] [:error] [pid 48807:tid 48821] [client 20.116.16.88:54197] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/byypas.php"] [unique_id "aacusQ9v35BN-51vqYasjwAAAQw"]
[Wed Mar 04 02:55:45.648454 2026] [:error] [pid 48807:tid 48812] [client 20.116.16.88:54193] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/byypas.php"] [unique_id "aacusQ9v35BN-51vqYaskQAAAQM"]
[Wed Mar 04 02:55:46.068982 2026] [:error] [pid 27359:tid 27375] [client 20.116.16.88:54251] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/byypas.php"] [unique_id "aacusl607jzBiSmoFjI62gAAAM4"]
[Wed Mar 04 02:55:46.536115 2026] [:error] [pid 48807:tid 48814] [client 20.116.16.88:54259] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/abrand.php"] [unique_id "aacusg9v35BN-51vqYaskgAAAQU"]
[Wed Mar 04 02:55:47.145846 2026] [:error] [pid 48406:tid 48670] [client 20.116.16.88:54255] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/abrand.php"] [unique_id "aacuszStn8zJHlZMxFgsdgAAAEg"]
[Wed Mar 04 02:55:47.588079 2026] [:error] [pid 27359:tid 27361] [client 20.116.16.88:54192] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/abrand.php"] [unique_id "aacus1607jzBiSmoFjI65AAAAMA"]
[Wed Mar 04 02:55:48.024254 2026] [:error] [pid 27359:tid 27375] [client 20.116.16.88:10212] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/abrand.php"] [unique_id "aacutF607jzBiSmoFjI65QAAAM4"]
[Wed Mar 04 02:55:48.494867 2026] [:error] [pid 48807:tid 48828] [client 20.116.16.88:54162] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/camara.php"] [unique_id "aacutA9v35BN-51vqYaslAAAARM"]
[Wed Mar 04 02:55:48.925175 2026] [:error] [pid 48807:tid 48832] [client 20.116.16.88:54203] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/camara.php"] [unique_id "aacutA9v35BN-51vqYaslgAAARc"]
[Wed Mar 04 02:55:49.369063 2026] [:error] [pid 48807:tid 48819] [client 20.116.16.88:54160] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/camara.php"] [unique_id "aacutQ9v35BN-51vqYaslwAAAQo"]
[Wed Mar 04 02:55:49.795737 2026] [:error] [pid 27359:tid 27373] [client 20.116.16.88:54206] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/camara.php"] [unique_id "aacutV607jzBiSmoFjI66wAAAMw"]
[Wed Mar 04 02:55:50.236044 2026] [:error] [pid 27359:tid 27381] [client 20.116.16.88:54168] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/assacc.php"] [unique_id "aacutl607jzBiSmoFjI67QAAANQ"]
[Wed Mar 04 02:55:50.659256 2026] [:error] [pid 27359:tid 27365] [client 20.116.16.88:10196] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/assacc.php"] [unique_id "aacutl607jzBiSmoFjI67wAAAMQ"]
[Wed Mar 04 02:55:51.091125 2026] [:error] [pid 27359:tid 27366] [client 20.116.16.88:10219] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/assacc.php"] [unique_id "aacut1607jzBiSmoFjI68QAAAMU"]
[Wed Mar 04 02:55:51.518661 2026] [:error] [pid 48407:tid 48706] [client 20.116.16.88:54239] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/assacc.php"] [unique_id "aacutz7Td6SiHn8fwfnyZwAAAI8"]
[Wed Mar 04 02:55:51.944405 2026] [:error] [pid 48807:tid 48820] [client 20.116.16.88:10205] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws83.php"] [unique_id "aacutw9v35BN-51vqYasmgAAAQs"]
[Wed Mar 04 02:55:52.396135 2026] [:error] [pid 48405:tid 48569] [client 20.116.16.88:10132] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws83.php"] [unique_id "aacuuBBIGeGp5MBz7gKFDwAAAAA"]
[Wed Mar 04 02:55:52.820179 2026] [:error] [pid 48807:tid 48824] [client 20.116.16.88:54205] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws83.php"] [unique_id "aacuuA9v35BN-51vqYasnAAAAQ8"]
[Wed Mar 04 02:55:53.238590 2026] [:error] [pid 48407:tid 48704] [client 20.116.16.88:10186] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws83.php"] [unique_id "aacuuT7Td6SiHn8fwfnyaQAAAI0"]
[Wed Mar 04 02:55:53.673171 2026] [:error] [pid 27359:tid 27376] [client 20.116.16.88:54261] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-good.php"] [unique_id "aacuuV607jzBiSmoFjI6-gAAAM8"]
[Wed Mar 04 02:55:54.100808 2026] [:error] [pid 27359:tid 27371] [client 20.116.16.88:54234] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-good.php"] [unique_id "aacuul607jzBiSmoFjI6_AAAAMo"]
[Wed Mar 04 02:55:54.540509 2026] [:error] [pid 48407:tid 48689] [client 20.116.16.88:10228] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-good.php"] [unique_id "aacuuj7Td6SiHn8fwfnyawAAAIA"]
[Wed Mar 04 02:55:54.963437 2026] [:error] [pid 27359:tid 27379] [client 20.116.16.88:54994] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-good.php"] [unique_id "aacuul607jzBiSmoFjI7AQAAANI"]
[Wed Mar 04 02:55:55.381149 2026] [:error] [pid 48407:tid 48693] [client 20.116.16.88:54986] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/%E3%81%AE.php"] [unique_id "aacuuz7Td6SiHn8fwfnybAAAAIM"]
[Wed Mar 04 02:55:55.823674 2026] [:error] [pid 27359:tid 27382] [client 20.116.16.88:10137] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/%E3%81%AE.php"] [unique_id "aacuu1607jzBiSmoFjI7BgAAANU"]
[Wed Mar 04 02:55:56.260486 2026] [:error] [pid 27359:tid 27372] [client 20.116.16.88:10147] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/%E3%81%AE.php"] [unique_id "aacuvF607jzBiSmoFjI7DAAAAMs"]
[Wed Mar 04 02:55:56.676307 2026] [:error] [pid 48405:tid 48593] [client 20.116.16.88:54153] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/%E3%81%AE.php"] [unique_id "aacuvBBIGeGp5MBz7gKFEgAAABg"]
[Wed Mar 04 02:55:57.104815 2026] [:error] [pid 48406:tid 48660] [client 20.116.16.88:54183] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xtsr.php"] [unique_id "aacuvTStn8zJHlZMxFgsggAAAEA"]
[Wed Mar 04 02:55:57.535136 2026] [:error] [pid 48407:tid 48710] [client 20.116.16.88:10200] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xtsr.php"] [unique_id "aacuvT7Td6SiHn8fwfnybgAAAJM"]
[Wed Mar 04 02:55:57.959465 2026] [:error] [pid 48407:tid 48703] [client 20.116.16.88:54207] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xtsr.php"] [unique_id "aacuvT7Td6SiHn8fwfnybwAAAIw"]
[Wed Mar 04 02:55:58.379994 2026] [:error] [pid 27359:tid 27380] [client 20.116.16.88:10123] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xtsr.php"] [unique_id "aacuvl607jzBiSmoFjI7GQAAANM"]
[Wed Mar 04 02:55:58.804825 2026] [:error] [pid 48407:tid 48696] [client 20.116.16.88:54235] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zz8.php"] [unique_id "aacuvj7Td6SiHn8fwfnycAAAAIY"]
[Wed Mar 04 02:55:59.222116 2026] [:error] [pid 27359:tid 27372] [client 20.116.16.88:54256] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zz8.php"] [unique_id "aacuv1607jzBiSmoFjI7HAAAAMs"]
[Wed Mar 04 02:55:59.727006 2026] [:error] [pid 48807:tid 48809] [client 20.116.16.88:10141] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zz8.php"] [unique_id "aacuvw9v35BN-51vqYaspQAAAQA"]
[Wed Mar 04 02:56:00.155584 2026] [:error] [pid 48406:tid 48678] [client 20.116.16.88:10203] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zz8.php"] [unique_id "aacuwDStn8zJHlZMxFgshwAAAFA"]
[Wed Mar 04 02:56:00.583300 2026] [:error] [pid 27359:tid 27384] [client 20.116.16.88:10080] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mh.php"] [unique_id "aacuwF607jzBiSmoFjI7HgAAANc"]
[Wed Mar 04 02:56:01.007117 2026] [:error] [pid 48406:tid 48672] [client 20.116.16.88:54237] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mh.php"] [unique_id "aacuwTStn8zJHlZMxFgsiAAAAEo"]
[Wed Mar 04 02:56:01.444992 2026] [:error] [pid 27359:tid 27371] [client 20.116.16.88:10129] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mh.php"] [unique_id "aacuwV607jzBiSmoFjI7IQAAAMo"]
[Wed Mar 04 02:56:01.873898 2026] [:error] [pid 48807:tid 48829] [client 20.116.16.88:10207] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mh.php"] [unique_id "aacuwQ9v35BN-51vqYasqgAAARQ"]
[Wed Mar 04 02:56:02.291810 2026] [:error] [pid 48406:tid 48682] [client 20.116.16.88:54196] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a5.php"] [unique_id "aacuwjStn8zJHlZMxFgsigAAAFQ"]
[Wed Mar 04 02:56:02.740271 2026] [:error] [pid 48407:tid 48714] [client 20.116.16.88:10204] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a5.php"] [unique_id "aacuwj7Td6SiHn8fwfnydQAAAJc"]
[Wed Mar 04 02:56:03.166291 2026] [:error] [pid 48407:tid 48713] [client 20.116.16.88:55009] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a5.php"] [unique_id "aacuwz7Td6SiHn8fwfnydgAAAJY"]
[Wed Mar 04 02:56:03.604139 2026] [:error] [pid 48407:tid 48697] [client 20.116.16.88:10118] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a5.php"] [unique_id "aacuwz7Td6SiHn8fwfnyeAAAAIc"]
[Wed Mar 04 02:56:04.039042 2026] [:error] [pid 48807:tid 48813] [client 20.116.16.88:10178] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ai.php"] [unique_id "aacuxA9v35BN-51vqYassAAAAQQ"]
[Wed Mar 04 02:56:04.474551 2026] [:error] [pid 48807:tid 48817] [client 20.116.16.88:10170] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ai.php"] [unique_id "aacuxA9v35BN-51vqYassgAAAQg"]
[Wed Mar 04 02:56:04.907250 2026] [:error] [pid 27359:tid 27382] [client 20.116.16.88:10225] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ai.php"] [unique_id "aacuxF607jzBiSmoFjI7KQAAANU"]
[Wed Mar 04 02:56:05.331398 2026] [:error] [pid 48405:tid 48591] [client 20.116.16.88:10120] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ai.php"] [unique_id "aacuxRBIGeGp5MBz7gKFHQAAABY"]
[Wed Mar 04 02:56:05.769475 2026] [:error] [pid 27359:tid 27365] [client 20.116.16.88:54151] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/amwxl.php"] [unique_id "aacuxV607jzBiSmoFjI7LAAAAMQ"]
[Wed Mar 04 02:56:06.192344 2026] [:error] [pid 27359:tid 27378] [client 20.116.16.88:54248] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/amwxl.php"] [unique_id "aacuxl607jzBiSmoFjI7LgAAANE"]
[Wed Mar 04 02:56:06.624174 2026] [:error] [pid 27359:tid 27380] [client 20.116.16.88:10197] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/amwxl.php"] [unique_id "aacuxl607jzBiSmoFjI7MwAAANM"]
[Wed Mar 04 02:56:07.037505 2026] [:error] [pid 27359:tid 27362] [client 20.116.16.88:54976] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/amwxl.php"] [unique_id "aacux1607jzBiSmoFjI7NgAAAME"]
[Wed Mar 04 02:56:07.499214 2026] [:error] [pid 27359:tid 27382] [client 20.116.16.88:54211] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/awdld.php"] [unique_id "aacux1607jzBiSmoFjI7OQAAANU"]
[Wed Mar 04 02:56:07.938499 2026] [:error] [pid 27359:tid 27377] [client 20.116.16.88:10143] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/awdld.php"] [unique_id "aacux1607jzBiSmoFjI7PQAAANA"]
[Wed Mar 04 02:56:08.359833 2026] [:error] [pid 27359:tid 27366] [client 20.116.16.88:10181] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/awdld.php"] [unique_id "aacuyF607jzBiSmoFjI7PgAAAMU"]
[Wed Mar 04 02:56:08.774925 2026] [:error] [pid 48807:tid 48833] [client 20.116.16.88:54169] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/awdld.php"] [unique_id "aacuyA9v35BN-51vqYastwAAARg"]
[Wed Mar 04 02:56:09.205572 2026] [proxy_fcgi:error] [pid 48807:tid 48819] [client 20.116.16.88:10113] AH01071: Got error 'Primary script unknown'
[Wed Mar 04 02:56:09.424217 2026] [proxy_fcgi:error] [pid 48807:tid 48812] [client 20.116.16.88:10113] AH01071: Got error 'Primary script unknown'
[Wed Mar 04 02:56:09.642087 2026] [proxy_fcgi:error] [pid 48807:tid 48818] [client 20.116.16.88:10113] AH01071: Got error 'Primary script unknown'
[Wed Mar 04 02:56:09.861911 2026] [proxy_fcgi:error] [pid 48807:tid 48822] [client 20.116.16.88:10113] AH01071: Got error 'Primary script unknown'
[Wed Mar 04 02:56:10.077855 2026] [proxy_fcgi:error] [pid 48807:tid 48832] [client 20.116.16.88:10113] AH01071: Got error 'Primary script unknown'
[Wed Mar 04 02:56:10.293248 2026] [proxy_fcgi:error] [pid 48807:tid 48826] [client 20.116.16.88:10113] AH01071: Got error 'Primary script unknown'
[Wed Mar 04 02:56:10.518052 2026] [proxy_fcgi:error] [pid 48807:tid 48827] [client 20.116.16.88:10113] AH01071: Got error 'Primary script unknown'
[Wed Mar 04 02:56:10.752871 2026] [proxy_fcgi:error] [pid 48807:tid 48830] [client 20.116.16.88:10113] AH01071: Got error 'Primary script unknown'
[Wed Mar 04 02:56:10.968222 2026] [proxy_fcgi:error] [pid 48807:tid 48824] [client 20.116.16.88:10113] AH01071: Got error 'Primary script unknown'
[Wed Mar 04 05:17:37.475824 2026] [proxy_fcgi:error] [pid 18554:tid 18595] [client 20.151.116.226:3051] AH01071: Got error 'Primary script unknown'
[Wed Mar 04 05:17:37.895622 2026] [proxy_fcgi:error] [pid 18554:tid 18593] [client 20.151.116.226:3051] AH01071: Got error 'Primary script unknown'
[Wed Mar 04 05:17:38.106532 2026] [proxy_fcgi:error] [pid 18554:tid 18613] [client 20.151.116.226:3051] AH01071: Got error 'Primary script unknown'
[Wed Mar 04 05:17:38.316883 2026] [proxy_fcgi:error] [pid 18554:tid 18616] [client 20.151.116.226:3051] AH01071: Got error 'Primary script unknown'
[Wed Mar 04 05:17:38.528929 2026] [proxy_fcgi:error] [pid 18554:tid 18605] [client 20.151.116.226:3051] AH01071: Got error 'Primary script unknown'
[Wed Mar 04 05:17:38.741743 2026] [proxy_fcgi:error] [pid 18554:tid 18612] [client 20.151.116.226:3051] AH01071: Got error 'Primary script unknown'
[Wed Mar 04 05:17:38.959823 2026] [proxy_fcgi:error] [pid 18554:tid 18611] [client 20.151.116.226:3051] AH01071: Got error 'Primary script unknown'
[Wed Mar 04 05:17:39.170715 2026] [proxy_fcgi:error] [pid 18554:tid 18595] [client 20.151.116.226:3051] AH01071: Got error 'Primary script unknown'
[Wed Mar 04 05:17:39.380764 2026] [proxy_fcgi:error] [pid 18554:tid 18592] [client 20.151.116.226:3051] AH01071: Got error 'Primary script unknown'
[Wed Mar 04 05:17:39.598862 2026] [proxy_fcgi:error] [pid 18554:tid 18593] [client 20.151.116.226:3051] AH01071: Got error 'Primary script unknown'
[Wed Mar 04 05:17:39.805355 2026] [:error] [pid 18554:tid 18609] [client 20.151.116.226:3051] [client 20.151.116.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/function.php"] [unique_id "aadP850fKmKeTIK7QS2MswAAAFE"]
[Wed Mar 04 05:17:40.642992 2026] [:error] [pid 54487:tid 54494] [client 20.151.116.226:52613] [client 20.151.116.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/function.php"] [unique_id "aadP9PN8030QMpFXddsRVwAAAQU"]
[Wed Mar 04 05:17:41.480865 2026] [:error] [pid 18553:tid 18585] [client 20.151.116.226:3031] [client 20.151.116.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/function.php"] [unique_id "aadP9Wbax1neh8d0AHaHhgAAABU"]
[Wed Mar 04 05:17:42.307766 2026] [:error] [pid 18555:tid 18634] [client 20.151.116.226:3025] [client 20.151.116.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/function.php"] [unique_id "aadP9jQeUDANiOsQ3GdqMAAAAI8"]
[Wed Mar 04 09:41:56.243163 2026] [:error] [pid 18555:tid 18628] [client 137.116.32.109:6088] [client 137.116.32.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaeN5DQeUDANiOsQ3GenKwAAAIk"]
[Wed Mar 04 09:41:56.661716 2026] [:error] [pid 18553:tid 18587] [client 137.116.32.109:6111] [client 137.116.32.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaeN5Gbax1neh8d0AHax3QAAABc"]
[Wed Mar 04 09:41:57.060794 2026] [:error] [pid 18553:tid 18568] [client 137.116.32.109:6121] [client 137.116.32.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaeN5Wbax1neh8d0AHax3gAAAAQ"]
[Wed Mar 04 09:41:57.461091 2026] [:error] [pid 18555:tid 18640] [client 137.116.32.109:6113] [client 137.116.32.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaeN5TQeUDANiOsQ3GenLQAAAJU"]
[Wed Mar 04 09:50:47.323002 2026] [:error] [pid 18554:tid 18614] [client 45.86.202.161:40919] [client 45.86.202.161] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/"] [unique_id "aaeP950fKmKeTIK7QS05qwAAAFY"]
[Wed Mar 04 11:49:02.085916 2026] [:error] [pid 45947:tid 46056] [client 152.233.20.86:35219] [client 152.233.20.86] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/"] [unique_id "aaerrkQXEtszYKy6savjeQAAAVg"]
[Wed Mar 04 12:32:39.926310 2026] [proxy_fcgi:error] [pid 18554:tid 18616] [client 13.82.150.179:10791] AH01071: Got error 'Primary script unknown'
[Wed Mar 04 12:32:40.183902 2026] [proxy_fcgi:error] [pid 18554:tid 18613] [client 13.82.150.179:10791] AH01071: Got error 'Primary script unknown'
[Wed Mar 04 12:32:40.441553 2026] [proxy_fcgi:error] [pid 18554:tid 18600] [client 13.82.150.179:10791] AH01071: Got error 'Primary script unknown'
[Wed Mar 04 12:32:40.699806 2026] [proxy_fcgi:error] [pid 18554:tid 18601] [client 13.82.150.179:10791] AH01071: Got error 'Primary script unknown'
[Wed Mar 04 12:32:40.958966 2026] [proxy_fcgi:error] [pid 18554:tid 18607] [client 13.82.150.179:10791] AH01071: Got error 'Primary script unknown'
[Wed Mar 04 12:32:41.216495 2026] [proxy_fcgi:error] [pid 18554:tid 18615] [client 13.82.150.179:10791] AH01071: Got error 'Primary script unknown'
[Wed Mar 04 12:32:41.473466 2026] [proxy_fcgi:error] [pid 18554:tid 18603] [client 13.82.150.179:10791] AH01071: Got error 'Primary script unknown'
[Wed Mar 04 12:32:41.732654 2026] [proxy_fcgi:error] [pid 18554:tid 18606] [client 13.82.150.179:10791] AH01071: Got error 'Primary script unknown'
[Wed Mar 04 12:32:41.992831 2026] [proxy_fcgi:error] [pid 18554:tid 18602] [client 13.82.150.179:10791] AH01071: Got error 'Primary script unknown'
[Wed Mar 04 12:32:42.521981 2026] [:error] [pid 18554:tid 18615] [client 13.82.150.179:10791] [client 13.82.150.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class20.php"] [unique_id "aae16p0fKmKeTIK7QS2tBwAAAFc"]
[Wed Mar 04 12:32:43.032407 2026] [:error] [pid 45947:tid 46049] [client 13.82.150.179:10776] [client 13.82.150.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class20.php"] [unique_id "aae160QXEtszYKy6sasBAQAAAVE"]
[Wed Mar 04 12:32:43.586037 2026] [:error] [pid 18554:tid 18609] [client 13.82.150.179:10807] [client 13.82.150.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class20.php"] [unique_id "aae1650fKmKeTIK7QS2tCwAAAFE"]
[Wed Mar 04 12:32:44.093479 2026] [:error] [pid 18554:tid 18593] [client 13.82.150.179:10772] [client 13.82.150.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class20.php"] [unique_id "aae17J0fKmKeTIK7QS2tDQAAAEE"]
[Wed Mar 04 12:32:44.648799 2026] [:error] [pid 18554:tid 18604] [client 13.82.150.179:10806] [client 13.82.150.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-theme.php"] [unique_id "aae17J0fKmKeTIK7QS2tEwAAAEw"]
[Wed Mar 04 12:32:45.128059 2026] [:error] [pid 18555:tid 18622] [client 13.82.150.179:10771] [client 13.82.150.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-theme.php"] [unique_id "aae17TQeUDANiOsQ3GfJqwAAAIM"]
[Wed Mar 04 12:32:45.594007 2026] [:error] [pid 18554:tid 18615] [client 13.82.150.179:10800] [client 13.82.150.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-theme.php"] [unique_id "aae17Z0fKmKeTIK7QS2tGAAAAFc"]
[Wed Mar 04 12:32:46.114257 2026] [:error] [pid 45947:tid 46055] [client 13.82.150.179:10695] [client 13.82.150.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-theme.php"] [unique_id "aae17kQXEtszYKy6sasBBwAAAVc"]
[Wed Mar 04 12:32:46.625067 2026] [:error] [pid 18554:tid 18608] [client 13.82.150.179:10805] [client 13.82.150.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cah.php"] [unique_id "aae17p0fKmKeTIK7QS2tHQAAAFA"]
[Wed Mar 04 12:32:47.133212 2026] [:error] [pid 18554:tid 18600] [client 13.82.150.179:10711] [client 13.82.150.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cah.php"] [unique_id "aae1750fKmKeTIK7QS2tHwAAAEg"]
[Wed Mar 04 12:32:47.641308 2026] [:error] [pid 45947:tid 46028] [client 13.82.150.179:10715] [client 13.82.150.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ee.php"] [unique_id "aae170QXEtszYKy6sasBDgAAAUA"]
[Wed Mar 04 12:32:48.167305 2026] [:error] [pid 18553:tid 18571] [client 13.82.150.179:10762] [client 13.82.150.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ee.php"] [unique_id "aae18Gbax1neh8d0AHbJzgAAAAc"]
[Wed Mar 04 12:32:48.678727 2026] [:error] [pid 18554:tid 18611] [client 13.82.150.179:10752] [client 13.82.150.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ee.php"] [unique_id "aae18J0fKmKeTIK7QS2tKgAAAFM"]
[Wed Mar 04 12:32:49.141030 2026] [:error] [pid 18554:tid 18594] [client 13.82.150.179:10705] [client 13.82.150.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ee.php"] [unique_id "aae18Z0fKmKeTIK7QS2tLAAAAEI"]
[Wed Mar 04 12:32:49.562966 2026] [:error] [pid 45947:tid 46040] [client 13.82.150.179:10692] [client 13.82.150.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/admin.php"] [unique_id "aae18UQXEtszYKy6sasBEAAAAUo"]
[Wed Mar 04 12:32:50.042455 2026] [:error] [pid 18554:tid 18603] [client 13.82.150.179:10694] [client 13.82.150.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/admin.php"] [unique_id "aae18p0fKmKeTIK7QS2tMgAAAEs"]
[Wed Mar 04 12:32:50.565084 2026] [:error] [pid 18554:tid 18597] [client 13.82.150.179:5062] [client 13.82.150.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/admin.php"] [unique_id "aae18p0fKmKeTIK7QS2tNQAAAEU"]
[Wed Mar 04 12:32:51.090184 2026] [:error] [pid 54487:tid 54513] [client 13.82.150.179:10689] [client 13.82.150.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/admin.php"] [unique_id "aae18_N8030QMpFXddtQFQAAARg"]
[Wed Mar 04 12:32:51.630744 2026] [:error] [pid 45947:tid 46049] [client 13.82.150.179:10768] [client 13.82.150.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-file.php"] [unique_id "aae180QXEtszYKy6sasBHAAAAVE"]
[Wed Mar 04 12:32:52.122222 2026] [:error] [pid 45947:tid 46043] [client 13.82.150.179:10716] [client 13.82.150.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-file.php"] [unique_id "aae19EQXEtszYKy6sasBHwAAAUs"]
[Wed Mar 04 12:32:52.582472 2026] [:error] [pid 54487:tid 54494] [client 13.82.150.179:10713] [client 13.82.150.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-file.php"] [unique_id "aae19PN8030QMpFXddtQGAAAAQU"]
[Wed Mar 04 12:32:53.098127 2026] [:error] [pid 54487:tid 54509] [client 13.82.150.179:10749] [client 13.82.150.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-file.php"] [unique_id "aae19fN8030QMpFXddtQGQAAARQ"]
[Wed Mar 04 13:01:33.070888 2026] [:error] [pid 45947:tid 46046] [client 43.228.157.73:51199] [client 43.228.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/"] [unique_id "aae8rUQXEtszYKy6sasUBQAAAU4"]
[Wed Mar 04 13:01:33.661566 2026] [:error] [pid 18555:tid 18630] [client 43.228.157.73:51338] [client 43.228.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/"] [unique_id "aae8rTQeUDANiOsQ3GfQIAAAAIs"]
[Wed Mar 04 13:01:34.285506 2026] [:error] [pid 54487:tid 54500] [client 43.228.157.73:51549] [client 43.228.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/"] [unique_id "aae8rvN8030QMpFXddtdkQAAAQs"]
[Wed Mar 04 13:01:34.874824 2026] [:error] [pid 18554:tid 18595] [client 43.228.157.73:51739] [client 43.228.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/"] [unique_id "aae8rp0fKmKeTIK7QS3LHwAAAEM"]
[Wed Mar 04 13:01:35.470004 2026] [:error] [pid 18555:tid 18623] [client 43.228.157.73:51968] [client 43.228.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/"] [unique_id "aae8rzQeUDANiOsQ3GfQhAAAAIQ"]
[Wed Mar 04 20:36:37.357058 2026] [:error] [pid 64829:tid 64852] [client 77.90.185.115:41344] [client 77.90.185.115] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.git/HEAD"] [unique_id "aagnVZ9ZED3FG9h7uijdfAAAABU"]
[Thu Mar 05 17:14:17.661482 2026] [:error] [pid 41459:tid 41483] [client 34.73.245.148:55662] [client 34.73.245.148] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.73.245.148, incrementing ddos counter"] [hostname "dwelectservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aalJaedFBZEnZ3pzxrXKLAAAAUk"]
[Thu Mar 05 17:14:17.671482 2026] [proxy_fcgi:error] [pid 41459:tid 41483] [client 34.73.245.148:55662] AH01071: Got error 'Primary script unknown'
[Thu Mar 05 17:14:20.114610 2026] [:error] [pid 41459:tid 41486] [client 34.73.245.148:55662] [client 34.73.245.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aalJbOdFBZEnZ3pzxrXKPgAAAUw"]
[Thu Mar 05 17:14:20.548852 2026] [:error] [pid 41459:tid 41496] [client 34.73.245.148:49590] [client 34.73.245.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aalJbOdFBZEnZ3pzxrXKQgAAAVY"]
[Thu Mar 05 17:14:21.035843 2026] [:error] [pid 41459:tid 41488] [client 34.73.245.148:54884] [client 34.73.245.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aalJbedFBZEnZ3pzxrXKRgAAAU4"]
[Thu Mar 05 17:14:21.477842 2026] [:error] [pid 62177:tid 62321] [client 34.73.245.148:56948] [client 34.73.245.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aalJbRWSQc2OzPrsnwWocgAAAIo"]
[Thu Mar 05 17:14:21.917708 2026] [:error] [pid 41459:tid 41497] [client 34.73.245.148:64070] [client 34.73.245.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aalJbedFBZEnZ3pzxrXKTQAAAVc"]
[Thu Mar 05 17:14:22.400199 2026] [:error] [pid 41459:tid 41484] [client 34.73.245.148:50391] [client 34.73.245.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aalJbudFBZEnZ3pzxrXKUgAAAUo"]
[Thu Mar 05 17:14:22.895677 2026] [:error] [pid 53350:tid 53375] [client 34.73.245.148:50138] [client 34.73.245.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aalJbqO0Baxc5WFYeP3SZwAAAQA"]
[Thu Mar 05 22:40:25.305504 2026] [:error] [pid 8151:tid 8232] [client 157.15.40.88:50148] [client 157.15.40.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/txets.php"] [unique_id "aamV2ZO3dLEidct1HvCoDwAAAYw"]
[Thu Mar 05 22:40:25.557932 2026] [:error] [pid 8151:tid 8241] [client 157.15.40.88:50190] [client 157.15.40.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-content/txets.php"] [unique_id "aamV2ZO3dLEidct1HvCoGwAAAZU"]
[Thu Mar 05 22:40:25.884208 2026] [:error] [pid 62173:tid 62273] [client 157.15.40.88:50256] [client 157.15.40.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/txets.php"] [unique_id "aamV2Wj_GWbFb-1ncGmAzwAAABM"]
[Thu Mar 05 22:40:26.151633 2026] [:error] [pid 8151:tid 8232] [client 157.15.40.88:50329] [client 157.15.40.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/txets.php"] [unique_id "aamV2pO3dLEidct1HvCoWAAAAYw"]
[Thu Mar 05 22:40:26.417358 2026] [:error] [pid 53350:tid 53388] [client 157.15.40.88:50405] [client 157.15.40.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/schallfuns.php"] [unique_id "aamV2qO0Baxc5WFYeP2FJQAAAQs"]
[Thu Mar 05 22:40:26.701943 2026] [:error] [pid 41459:tid 41483] [client 157.15.40.88:50490] [client 157.15.40.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/postnews.php"] [unique_id "aamV2udFBZEnZ3pzxrWD3QAAAUk"]
[Thu Mar 05 22:40:26.967898 2026] [:error] [pid 8151:tid 8221] [client 157.15.40.88:50564] [client 157.15.40.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-content/postnews.php"] [unique_id "aamV2pO3dLEidct1HvCorAAAAYI"]
[Thu Mar 05 22:40:27.224781 2026] [:error] [pid 41459:tid 41498] [client 157.15.40.88:50628] [client 157.15.40.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/postnews.php"] [unique_id "aamV2-dFBZEnZ3pzxrWEBAAAAVg"]
[Thu Mar 05 22:40:27.481569 2026] [:error] [pid 41459:tid 41476] [client 157.15.40.88:50709] [client 157.15.40.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/postnews.php"] [unique_id "aamV2-dFBZEnZ3pzxrWEMAAAAUI"]
[Fri Mar 06 00:42:52.631872 2026] [:error] [pid 27687:tid 27723] [client 103.77.107.222:53397] [client 103.77.107.222] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/sftp-config.json"] [unique_id "aamyjEI2IG23EwU7sL__lAAAAJY"]
[Fri Mar 06 00:42:52.866449 2026] [:error] [pid 48372:tid 48391] [client 103.77.107.222:53511] [client 103.77.107.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.vscode/sftp.json"] [unique_id "aamyjEWaQyQyfhXPRrYFIAAAAUQ"]
[Fri Mar 06 23:10:54.670421 2026] [:error] [pid 16140:tid 16165] [client 62.60.131.218:61991] [client 62.60.131.218] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/"] [unique_id "aarufpZVpEeGhAeSpv0dbQAAARc"]
[Sat Mar 07 14:37:31.971063 2026] [:error] [pid 52484:tid 52509] [client 34.24.47.138:49837] [client 34.24.47.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/media/system/js/core.js"] [unique_id "aavHq_E9AnX6zUICFeRcnAAAAQY"]
[Sat Mar 07 17:19:47.973233 2026] [proxy_fcgi:error] [pid 52484:tid 52509] [client 89.163.146.197:52006] AH01071: Got error 'Primary script unknown', referer: www.google.com
[Sat Mar 07 17:19:55.364235 2026] [proxy_fcgi:error] [pid 37998:tid 38066] [client 89.163.146.197:57988] AH01071: Got error 'Primary script unknown', referer: www.google.com
[Sat Mar 07 17:20:02.582631 2026] [:error] [pid 36899:tid 36924] [client 89.163.146.197:53094] [client 89.163.146.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/txets.php"] [unique_id "aavtwjIlMfwxLHrLy_88JQAAAYI"], referer: www.google.com
[Sun Mar 08 13:31:29.826957 2026] [:error] [pid 22788:tid 22866] [client 144.172.115.113:51939] [client 144.172.115.113] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dwelectservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dwelectservices.com.au"] [uri "/"] [unique_id "aa0JsUhwluk21OG9mSdl8gAAA4s"], referer: https://www.reddit.com/r/lifeprotips
[Sun Mar 08 13:31:31.974740 2026] [:error] [pid 22790:tid 22903] [client 144.172.115.113:52442] [client 144.172.115.113] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dwelectservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dwelectservices.com.au"] [uri "/"] [unique_id "aa0JsxXbGDWrzD_dTOdSjQAAA9U"], referer: https://www.instagram.com
[Sun Mar 08 13:31:34.930189 2026] [:error] [pid 22788:tid 22872] [client 144.172.115.113:52965] [client 144.172.115.113] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dwelectservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dwelectservices.com.au"] [uri "/"] [unique_id "aa0Jtkhwluk21OG9mSdl9wAAA5E"], referer: https://www.realtor.com
[Sun Mar 08 13:31:36.919478 2026] [:error] [pid 22669:tid 22769] [client 144.172.115.113:53488] [client 144.172.115.113] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dwelectservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dwelectservices.com.au"] [uri "/"] [unique_id "aa0JuGvqAhy8LIaua-pfEQAAAso"], referer: https://www.foxnews.com
[Sun Mar 08 18:19:17.496000 2026] [:error] [pid 22786:tid 22809] [client 136.111.34.168:54455] [client 136.111.34.168] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.111.34.168, incrementing ddos counter"] [hostname "dwelectservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aa1NJXPuJewMN2jPbdXr1wAAAwg"]
[Sun Mar 08 18:19:17.507687 2026] [proxy_fcgi:error] [pid 22786:tid 22809] [client 136.111.34.168:54455] AH01071: Got error 'Primary script unknown'
[Sun Mar 08 18:19:20.041552 2026] [:error] [pid 22786:tid 22821] [client 136.111.34.168:54455] [client 136.111.34.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aa1NKHPuJewMN2jPbdXr6wAAAxQ"]
[Sun Mar 08 18:19:20.574660 2026] [:error] [pid 22786:tid 22820] [client 136.111.34.168:50536] [client 136.111.34.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aa1NKHPuJewMN2jPbdXr7AAAAxM"]
[Sun Mar 08 18:19:21.138350 2026] [:error] [pid 22787:tid 22839] [client 136.111.34.168:56501] [client 136.111.34.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aa1NKUF9MGMhk9pT4z4HGQAAA0s"]
[Sun Mar 08 18:19:21.672336 2026] [:error] [pid 22790:tid 22904] [client 136.111.34.168:57883] [client 136.111.34.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aa1NKRXbGDWrzD_dTOffJgAAA9Y"]
[Sun Mar 08 18:19:22.459524 2026] [:error] [pid 22669:tid 22768] [client 136.111.34.168:56345] [client 136.111.34.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aa1NKmvqAhy8LIaua-p8dQAAAsk"]
[Sun Mar 08 18:19:22.862580 2026] [:error] [pid 22790:tid 22898] [client 136.111.34.168:60473] [client 136.111.34.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aa1NKhXbGDWrzD_dTOffKwAAA9A"]
[Sun Mar 08 18:19:23.470028 2026] [:error] [pid 22786:tid 22823] [client 136.111.34.168:57768] [client 136.111.34.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aa1NK3PuJewMN2jPbdXr9QAAAxY"]
[Tue Mar 10 03:52:44.864337 2026] [:error] [pid 18745:tid 18864] [client 104.28.214.113:13308] [client 104.28.214.113] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/style.php"] [unique_id "aa8lDM7YOLBVLcQpslha4gAAAII"]
[Tue Mar 10 03:52:45.283950 2026] [:error] [pid 18918:tid 18936] [client 104.28.214.113:13311] [client 104.28.214.113] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-content/style.php"] [unique_id "aa8lDb4BR9PuTKpsT9Y4cwAAAMo"]
[Tue Mar 10 03:52:45.721095 2026] [:error] [pid 18918:tid 18928] [client 104.28.214.113:12804] [client 104.28.214.113] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/style.php"] [unique_id "aa8lDb4BR9PuTKpsT9Y4dQAAAMI"]
[Tue Mar 10 05:23:21.703769 2026] [:error] [pid 7912:tid 8076] [client 62.60.131.218:58073] [client 62.60.131.218] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/"] [unique_id "aa86SSV7wJYuQ3GZEAVuYQAAAIw"]
[Tue Mar 10 05:40:48.581488 2026] [:error] [pid 7908:tid 8049] [client 62.60.131.218:62069] [client 62.60.131.218] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/"] [unique_id "aa8-YMY8gEjgYKb1A_jLGgAAAE4"]
2026/03/10 19:42:09 [error] 14458#14458: *74940 access forbidden by rule, client: 185.93.89.110, server: dwelectservices.com.au, request: "GET //.git/HEAD HTTP/1.1", host: "www.dwelectservices.com.au"
[Tue Mar 10 22:07:23.269940 2026] [:error] [pid 3965:tid 3977] [client 170.64.131.234:55984] [client 170.64.131.234] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env"] [unique_id "abAlm5N2nrVwtq9b0rbGBwAAAMo"]
2026/03/10 22:07:23 [error] 3846#3846: *182223 access forbidden by rule, client: 170.64.131.234, server: dwelectservices.com.au, request: "GET /.git/config HTTP/1.1", host: "dwelectservices.com.au"
[Tue Mar 10 22:15:24.564313 2026] [:error] [pid 3874:tid 3951] [client 54.157.182.213:35208] [client 54.157.182.213] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||dwelectservices.com.au|F|4"] [data "Microsoft URL"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "dwelectservices.com.au"] [uri "/"] [unique_id "abAnfOK9H96QUJV_mxY_MgAAAIw"]
[Wed Mar 11 07:48:35.449872 2026] [:error] [pid 11796:tid 11799] [client 209.87.169.112:40318] [client 209.87.169.112] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.4.122.14, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-login.php"] [unique_id "abCt0wEDXoQrlStpO9AhSgAAAYE"]
[Wed Mar 11 07:48:35.463997 2026] [proxy_fcgi:error] [pid 11796:tid 11799] [client 209.87.169.112:40318] AH01071: Got error 'Primary script unknown'
[Wed Mar 11 07:53:19.604460 2026] [proxy_fcgi:error] [pid 11751:tid 11775] [client 40.70.24.180:44482] AH01071: Got error 'Primary script unknown'
[Wed Mar 11 07:53:19.822224 2026] [proxy_fcgi:error] [pid 11751:tid 11766] [client 40.70.24.180:44486] AH01071: Got error 'Primary script unknown'
[Wed Mar 11 07:53:20.039158 2026] [proxy_fcgi:error] [pid 11751:tid 11757] [client 40.70.24.180:44488] AH01071: Got error 'Primary script unknown'
[Wed Mar 11 07:53:20.309831 2026] [proxy_fcgi:error] [pid 11796:tid 11821] [client 40.70.24.180:44494] AH01071: Got error 'Primary script unknown'
[Wed Mar 11 07:53:20.534112 2026] [proxy_fcgi:error] [pid 11572:tid 11576] [client 40.70.24.180:44496] AH01071: Got error 'Primary script unknown'
[Wed Mar 11 07:53:20.753042 2026] [proxy_fcgi:error] [pid 11751:tid 11756] [client 40.70.24.180:44498] AH01071: Got error 'Primary script unknown'
[Wed Mar 11 07:53:20.970600 2026] [proxy_fcgi:error] [pid 11751:tid 11759] [client 40.70.24.180:44500] AH01071: Got error 'Primary script unknown'
[Wed Mar 11 07:53:21.186867 2026] [proxy_fcgi:error] [pid 11751:tid 11768] [client 40.70.24.180:44502] AH01071: Got error 'Primary script unknown'
2026/03/11 07:53:21 [error] 3467#3467: *584593 upstream prematurely closed connection while reading response header from upstream, client: 40.70.24.180, server: dwelectservices.com.au, request: "GET /wp-content/themes/pridmag/js.php HTTP/1.1", upstream: "http://103.4.122.14:8181/wp-content/themes/pridmag/js.php", host: "dwelectservices.com.au"
[Wed Mar 11 07:53:21.844809 2026] [:error] [pid 11796:tid 11820] [client 40.70.24.180:44512] [client 40.70.24.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/pridmag/js.php"] [unique_id "abCu8QEDXoQrlStpO9AiXAAAAZY"]
2026/03/11 07:53:22 [error] 3467#3467: *584593 upstream prematurely closed connection while reading response header from upstream, client: 40.70.24.180, server: dwelectservices.com.au, request: "GET /wp-content/themes/pridmag/34.php HTTP/1.1", upstream: "http://103.4.122.14:8181/wp-content/themes/pridmag/34.php", host: "dwelectservices.com.au"
[Wed Mar 11 07:53:22.087486 2026] [:error] [pid 6222:tid 6244] [client 40.70.24.180:44516] [client 40.70.24.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/pridmag/34.php"] [unique_id "abCu8ns7MIv-0SYBFu27AgAAANQ"]
[Wed Mar 11 20:05:48.049213 2026] [proxy_fcgi:error] [pid 45143:tid 45161] [client 20.151.107.165:35248] AH01071: Got error 'Primary script unknown'
[Wed Mar 11 20:05:48.260357 2026] [proxy_fcgi:error] [pid 45143:tid 45145] [client 20.151.107.165:35254] AH01071: Got error 'Primary script unknown'
[Wed Mar 11 20:05:52.110040 2026] [proxy_fcgi:error] [pid 44800:tid 44806] [client 20.151.107.165:35316] AH01071: Got error 'Primary script unknown'
[Wed Mar 11 20:05:52.678320 2026] [proxy_fcgi:error] [pid 54045:tid 54055] [client 20.151.107.165:35328] AH01071: Got error 'Primary script unknown'
[Wed Mar 11 20:05:52.888399 2026] [proxy_fcgi:error] [pid 23512:tid 23523] [client 20.151.107.165:35330] AH01071: Got error 'Primary script unknown'
[Wed Mar 11 20:05:53.099708 2026] [proxy_fcgi:error] [pid 44882:tid 44898] [client 20.151.107.165:35334] AH01071: Got error 'Primary script unknown'
[Wed Mar 11 20:05:53.311627 2026] [proxy_fcgi:error] [pid 53955:tid 54020] [client 20.151.107.165:35338] AH01071: Got error 'Primary script unknown'
[Wed Mar 11 20:05:53.529773 2026] [proxy_fcgi:error] [pid 53955:tid 54031] [client 20.151.107.165:35342] AH01071: Got error 'Primary script unknown'
[Wed Mar 11 20:05:53.749691 2026] [proxy_fcgi:error] [pid 45143:tid 45147] [client 20.151.107.165:35344] AH01071: Got error 'Primary script unknown'
2026/03/11 20:05:53 [error] 53947#53947: *1057400 upstream prematurely closed connection while reading response header from upstream, client: 20.151.107.165, server: dwelectservices.com.au, request: "GET /t.php HTTP/1.1", upstream: "http://103.4.122.14:8181/t.php", host: "www.dwelectservices.com.au"
[Wed Mar 11 20:05:53.967349 2026] [:error] [pid 44995:tid 45007] [client 20.151.107.165:35352] [client 20.151.107.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/t.php"] [unique_id "abFaoToOSr9ks_axo6O_UQAAAko"]
2026/03/11 20:05:54 [error] 53947#53947: *1057400 upstream prematurely closed connection while reading response header from upstream, client: 20.151.107.165, server: dwelectservices.com.au, request: "GET /bgymj.php HTTP/1.1", upstream: "http://103.4.122.14:8181/bgymj.php", host: "www.dwelectservices.com.au"
[Wed Mar 11 20:05:54.176230 2026] [:error] [pid 44995:tid 45002] [client 20.151.107.165:35358] [client 20.151.107.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bgymj.php"] [unique_id "abFaojoOSr9ks_axo6O_UgAAAkU"]
[Wed Mar 11 20:05:54.383302 2026] [:error] [pid 44995:tid 45016] [client 20.151.107.165:35360] [client 20.151.107.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ms.php"] [unique_id "abFaojoOSr9ks_axo6O_UwAAAlM"]
2026/03/11 20:05:54 [error] 53947#53947: *1057400 upstream prematurely closed connection while reading response header from upstream, client: 20.151.107.165, server: dwelectservices.com.au, request: "GET /ms.php HTTP/1.1", upstream: "http://103.4.122.14:8181/ms.php", host: "www.dwelectservices.com.au"
2026/03/11 20:05:54 [error] 53947#53947: *1057400 upstream prematurely closed connection while reading response header from upstream, client: 20.151.107.165, server: dwelectservices.com.au, request: "GET /ms-edit.php HTTP/1.1", upstream: "http://103.4.122.14:8181/ms-edit.php", host: "www.dwelectservices.com.au"
[Wed Mar 11 20:05:54.592156 2026] [:error] [pid 54045:tid 54067] [client 20.151.107.165:35366] [client 20.151.107.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ms-edit.php"] [unique_id "abFaoiRcKzQ1f-N8TgTHpwAAANQ"]
2026/03/11 20:05:54 [error] 53947#53947: *1057400 upstream prematurely closed connection while reading response header from upstream, client: 20.151.107.165, server: dwelectservices.com.au, request: "GET /ws49.php HTTP/1.1", upstream: "http://103.4.122.14:8181/ws49.php", host: "www.dwelectservices.com.au"
[Wed Mar 11 20:05:54.873047 2026] [:error] [pid 44995:tid 45003] [client 20.151.107.165:35368] [client 20.151.107.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws49.php"] [unique_id "abFaojoOSr9ks_axo6O_VgAAAkY"]
[Wed Mar 11 20:05:55.101046 2026] [:error] [pid 44995:tid 45005] [client 20.151.107.165:35372] [client 20.151.107.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ioxi-o.php"] [unique_id "abFaozoOSr9ks_axo6O_VwAAAkg"]
2026/03/11 20:05:55 [error] 53947#53947: *1057400 upstream prematurely closed connection while reading response header from upstream, client: 20.151.107.165, server: dwelectservices.com.au, request: "GET /ioxi-o.php HTTP/1.1", upstream: "http://103.4.122.14:8181/ioxi-o.php", host: "www.dwelectservices.com.au"
2026/03/11 20:05:55 [error] 53947#53947: *1057400 upstream prematurely closed connection while reading response header from upstream, client: 20.151.107.165, server: dwelectservices.com.au, request: "GET /hots.php HTTP/1.1", upstream: "http://103.4.122.14:8181/hots.php", host: "www.dwelectservices.com.au"
[Wed Mar 11 20:05:55.318085 2026] [:error] [pid 44995:tid 45010] [client 20.151.107.165:35376] [client 20.151.107.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/hots.php"] [unique_id "abFaozoOSr9ks_axo6O_WQAAAk0"]
[Wed Mar 11 20:05:55.524038 2026] [:error] [pid 44995:tid 44997] [client 20.151.107.165:35382] [client 20.151.107.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/666.php"] [unique_id "abFaozoOSr9ks_axo6O_WwAAAkA"]
2026/03/11 20:05:55 [error] 53947#53947: *1057400 upstream prematurely closed connection while reading response header from upstream, client: 20.151.107.165, server: dwelectservices.com.au, request: "GET /666.php HTTP/1.1", upstream: "http://103.4.122.14:8181/666.php", host: "www.dwelectservices.com.au"
2026/03/11 20:05:55 [error] 53947#53947: *1057400 upstream prematurely closed connection while reading response header from upstream, client: 20.151.107.165, server: dwelectservices.com.au, request: "GET /hplfuns.php HTTP/1.1", upstream: "http://103.4.122.14:8181/hplfuns.php", host: "www.dwelectservices.com.au"
[Wed Mar 11 20:05:55.750174 2026] [:error] [pid 44995:tid 45020] [client 20.151.107.165:35390] [client 20.151.107.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/hplfuns.php"] [unique_id "abFaozoOSr9ks_axo6O_XAAAAlc"]
[Wed Mar 11 20:05:55.956147 2026] [:error] [pid 44995:tid 45011] [client 20.151.107.165:35392] [client 20.151.107.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wen.php"] [unique_id "abFaozoOSr9ks_axo6O_XQAAAk4"]
2026/03/11 20:05:55 [error] 53947#53947: *1057400 upstream prematurely closed connection while reading response header from upstream, client: 20.151.107.165, server: dwelectservices.com.au, request: "GET /wen.php HTTP/1.1", upstream: "http://103.4.122.14:8181/wen.php", host: "www.dwelectservices.com.au"
[Wed Mar 11 20:05:56.163721 2026] [:error] [pid 53955:tid 54021] [client 20.151.107.165:35400] [client 20.151.107.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/gifclass.php"] [unique_id "abFapNP1Uf6qBkbxZg_2AgAAAIM"]
2026/03/11 20:05:56 [error] 53947#53947: *1057400 upstream prematurely closed connection while reading response header from upstream, client: 20.151.107.165, server: dwelectservices.com.au, request: "GET /gifclass.php HTTP/1.1", upstream: "http://103.4.122.14:8181/gifclass.php", host: "www.dwelectservices.com.au"
2026/03/11 20:05:56 [error] 53947#53947: *1057400 upstream prematurely closed connection while reading response header from upstream, client: 20.151.107.165, server: dwelectservices.com.au, request: "GET /ccs.php HTTP/1.1", upstream: "http://103.4.122.14:8181/ccs.php", host: "www.dwelectservices.com.au"
[Wed Mar 11 20:05:56.369907 2026] [:error] [pid 44800:tid 44819] [client 20.151.107.165:35402] [client 20.151.107.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ccs.php"] [unique_id "abFapDN8ZerbIEHTO2qd5AAAAdE"]
[Wed Mar 11 20:05:56.589377 2026] [:error] [pid 44800:tid 44808] [client 20.151.107.165:35406] [client 20.151.107.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/a4.php"] [unique_id "abFapDN8ZerbIEHTO2qd5gAAAcY"]
2026/03/11 20:05:56 [error] 53947#53947: *1057400 upstream prematurely closed connection while reading response header from upstream, client: 20.151.107.165, server: dwelectservices.com.au, request: "GET /a4.php HTTP/1.1", upstream: "http://103.4.122.14:8181/a4.php", host: "www.dwelectservices.com.au"
2026/03/11 20:05:57 [error] 53947#53947: *1057400 upstream prematurely closed connection while reading response header from upstream, client: 20.151.107.165, server: dwelectservices.com.au, request: "GET /bnm.php HTTP/1.1", upstream: "http://103.4.122.14:8181/bnm.php", host: "www.dwelectservices.com.au"
[Wed Mar 11 20:05:57.025374 2026] [:error] [pid 53955:tid 54019] [client 20.151.107.165:35412] [client 20.151.107.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bnm.php"] [unique_id "abFapdP1Uf6qBkbxZg_2AwAAAIE"]
[Wed Mar 11 20:05:57.231854 2026] [:error] [pid 54045:tid 54048] [client 20.151.107.165:35420] [client 20.151.107.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/sid3.php"] [unique_id "abFapSRcKzQ1f-N8TgTHqwAAAME"]
2026/03/11 20:05:57 [error] 53947#53947: *1057400 upstream prematurely closed connection while reading response header from upstream, client: 20.151.107.165, server: dwelectservices.com.au, request: "GET /sid3.php HTTP/1.1", upstream: "http://103.4.122.14:8181/sid3.php", host: "www.dwelectservices.com.au"
[Wed Mar 11 20:05:57.470458 2026] [:error] [pid 44800:tid 44805] [client 20.151.107.165:35424] [client 20.151.107.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/tool.php"] [unique_id "abFapTN8ZerbIEHTO2qd5wAAAcM"]
2026/03/11 20:05:57 [error] 53947#53947: *1057400 upstream prematurely closed connection while reading response header from upstream, client: 20.151.107.165, server: dwelectservices.com.au, request: "GET /tool.php HTTP/1.1", upstream: "http://103.4.122.14:8181/tool.php", host: "www.dwelectservices.com.au"
2026/03/11 20:05:57 [error] 53947#53947: *1057400 upstream prematurely closed connection while reading response header from upstream, client: 20.151.107.165, server: dwelectservices.com.au, request: "GET /222.php HTTP/1.1", upstream: "http://103.4.122.14:8181/222.php", host: "www.dwelectservices.com.au"
[Wed Mar 11 20:05:57.692209 2026] [:error] [pid 54045:tid 54047] [client 20.151.107.165:35430] [client 20.151.107.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/222.php"] [unique_id "abFapSRcKzQ1f-N8TgTHrAAAAMA"]
2026/03/11 20:05:57 [error] 53947#53947: *1057400 upstream prematurely closed connection while reading response header from upstream, client: 20.151.107.165, server: dwelectservices.com.au, request: "GET /ws77.php HTTP/1.1", upstream: "http://103.4.122.14:8181/ws77.php", host: "www.dwelectservices.com.au"
[Wed Mar 11 20:05:57.898121 2026] [:error] [pid 44800:tid 44817] [client 20.151.107.165:35434] [client 20.151.107.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws77.php"] [unique_id "abFapTN8ZerbIEHTO2qd6AAAAc8"]
2026/03/11 20:05:58 [error] 53947#53947: *1057400 upstream prematurely closed connection while reading response header from upstream, client: 20.151.107.165, server: dwelectservices.com.au, request: "GET /edit.php HTTP/1.1", upstream: "http://103.4.122.14:8181/edit.php", host: "www.dwelectservices.com.au"
[Wed Mar 11 20:05:58.115107 2026] [:error] [pid 44995:tid 45012] [client 20.151.107.165:35438] [client 20.151.107.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/edit.php"] [unique_id "abFapjoOSr9ks_axo6O_YgAAAk8"]
2026/03/11 20:05:58 [error] 53947#53947: *1057400 upstream prematurely closed connection while reading response header from upstream, client: 20.151.107.165, server: dwelectservices.com.au, request: "GET /wp-the.php HTTP/1.1", upstream: "http://103.4.122.14:8181/wp-the.php", host: "www.dwelectservices.com.au"
[Wed Mar 11 20:05:58.321869 2026] [:error] [pid 44995:tid 45002] [client 20.151.107.165:35442] [client 20.151.107.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-the.php"] [unique_id "abFapjoOSr9ks_axo6O_YwAAAkU"]
[Wed Mar 11 20:05:58.696883 2026] [:error] [pid 54045:tid 54056] [client 20.151.107.165:35448] [client 20.151.107.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-blog.php"] [unique_id "abFapiRcKzQ1f-N8TgTHrQAAAMk"]
2026/03/11 20:05:58 [error] 53947#53947: *1057400 upstream prematurely closed connection while reading response header from upstream, client: 20.151.107.165, server: dwelectservices.com.au, request: "GET /wp-blog.php HTTP/1.1", upstream: "http://103.4.122.14:8181/wp-blog.php", host: "www.dwelectservices.com.au"
[Wed Mar 11 20:05:58.902735 2026] [:error] [pid 54045:tid 54062] [client 20.151.107.165:35452] [client 20.151.107.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-act.php"] [unique_id "abFapiRcKzQ1f-N8TgTHrgAAAM8"]
2026/03/11 20:05:58 [error] 53947#53947: *1057400 upstream prematurely closed connection while reading response header from upstream, client: 20.151.107.165, server: dwelectservices.com.au, request: "GET /wp-act.php HTTP/1.1", upstream: "http://103.4.122.14:8181/wp-act.php", host: "www.dwelectservices.com.au"
2026/03/11 20:05:59 [error] 53947#53947: *1057400 upstream prematurely closed connection while reading response header from upstream, client: 20.151.107.165, server: dwelectservices.com.au, request: "GET /1.php HTTP/1.1", upstream: "http://103.4.122.14:8181/1.php", host: "www.dwelectservices.com.au"
[Wed Mar 11 20:05:59.111107 2026] [:error] [pid 44995:tid 45017] [client 20.151.107.165:35454] [client 20.151.107.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/1.php"] [unique_id "abFapzoOSr9ks_axo6O_ZgAAAlQ"]
2026/03/11 20:05:59 [error] 53947#53947: *1057400 upstream prematurely closed connection while reading response header from upstream, client: 20.151.107.165, server: dwelectservices.com.au, request: "GET /tfm.php HTTP/1.1", upstream: "http://103.4.122.14:8181/tfm.php", host: "www.dwelectservices.com.au"
[Wed Mar 11 20:05:59.318528 2026] [:error] [pid 54045:tid 54070] [client 20.151.107.165:35460] [client 20.151.107.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/tfm.php"] [unique_id "abFapyRcKzQ1f-N8TgTHrwAAANc"]
2026/03/11 20:05:59 [error] 53947#53947: *1057400 upstream prematurely closed connection while reading response header from upstream, client: 20.151.107.165, server: dwelectservices.com.au, request: "GET /file.php HTTP/1.1", upstream: "http://103.4.122.14:8181/file.php", host: "www.dwelectservices.com.au"
[Wed Mar 11 20:05:59.592772 2026] [:error] [pid 44995:tid 45003] [client 20.151.107.165:35466] [client 20.151.107.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/file.php"] [unique_id "abFapzoOSr9ks_axo6O_ZwAAAkY"]
2026/03/11 20:05:59 [error] 53947#53947: *1057400 upstream prematurely closed connection while reading response header from upstream, client: 20.151.107.165, server: dwelectservices.com.au, request: "GET //tfm.php HTTP/1.1", upstream: "http://103.4.122.14:8181//tfm.php", host: "www.dwelectservices.com.au"
[Wed Mar 11 20:05:59.808086 2026] [:error] [pid 44995:tid 45005] [client 20.151.107.165:35472] [client 20.151.107.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/tfm.php"] [unique_id "abFapzoOSr9ks_axo6O_aAAAAkg"]
2026/03/11 20:06:00 [error] 53947#53947: *1057400 upstream prematurely closed connection while reading response header from upstream, client: 20.151.107.165, server: dwelectservices.com.au, request: "GET /abc.php HTTP/1.1", upstream: "http://103.4.122.14:8181/abc.php", host: "www.dwelectservices.com.au"
[Wed Mar 11 20:06:00.013978 2026] [:error] [pid 44995:tid 45010] [client 20.151.107.165:35474] [client 20.151.107.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/abc.php"] [unique_id "abFaqDoOSr9ks_axo6O_aQAAAk0"]
2026/03/11 20:06:00 [error] 53947#53947: *1057400 upstream prematurely closed connection while reading response header from upstream, client: 20.151.107.165, server: dwelectservices.com.au, request: "GET /gettest.php HTTP/1.1", upstream: "http://103.4.122.14:8181/gettest.php", host: "www.dwelectservices.com.au"
[Wed Mar 11 20:06:00.220276 2026] [:error] [pid 44800:tid 44803] [client 20.151.107.165:35480] [client 20.151.107.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/gettest.php"] [unique_id "abFaqDN8ZerbIEHTO2qd6wAAAcE"]
[Wed Mar 11 20:06:00.667455 2026] [:error] [pid 53955:tid 54042] [client 20.151.107.165:35488] [client 20.151.107.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/amp.php"] [unique_id "abFaqNP1Uf6qBkbxZg_2CQAAAJc"]
2026/03/11 20:06:00 [error] 53947#53947: *1057400 upstream prematurely closed connection while reading response header from upstream, client: 20.151.107.165, server: dwelectservices.com.au, request: "GET /amp.php HTTP/1.1", upstream: "http://103.4.122.14:8181/amp.php", host: "www.dwelectservices.com.au"
2026/03/11 20:06:01 [error] 53947#53947: *1057400 upstream prematurely closed connection while reading response header from upstream, client: 20.151.107.165, server: dwelectservices.com.au, request: "GET /kj.php HTTP/1.1", upstream: "http://103.4.122.14:8181/kj.php", host: "www.dwelectservices.com.au"
[Wed Mar 11 20:06:01.109427 2026] [:error] [pid 44995:tid 44997] [client 20.151.107.165:35490] [client 20.151.107.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/kj.php"] [unique_id "abFaqToOSr9ks_axo6O_awAAAkA"]
2026/03/11 20:06:01 [error] 53947#53947: *1057400 upstream prematurely closed connection while reading response header from upstream, client: 20.151.107.165, server: dwelectservices.com.au, request: "GET /xxw.php HTTP/1.1", upstream: "http://103.4.122.14:8181/xxw.php", host: "www.dwelectservices.com.au"
[Wed Mar 11 20:06:01.325925 2026] [:error] [pid 45143:tid 45164] [client 20.151.107.165:35498] [client 20.151.107.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xxw.php"] [unique_id "abFaqSEXSpYdWImkpzbq9wAAAZM"]
2026/03/11 20:06:01 [error] 53947#53947: *1057400 upstream prematurely closed connection while reading response header from upstream, client: 20.151.107.165, server: dwelectservices.com.au, request: "GET /term.php HTTP/1.1", upstream: "http://103.4.122.14:8181/term.php", host: "www.dwelectservices.com.au"
[Wed Mar 11 20:06:01.543349 2026] [:error] [pid 44995:tid 45021] [client 20.151.107.165:35504] [client 20.151.107.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/term.php"] [unique_id "abFaqToOSr9ks_axo6O_bwAAAlg"]
2026/03/11 20:06:01 [error] 53947#53947: *1057400 upstream prematurely closed connection while reading response header from upstream, client: 20.151.107.165, server: dwelectservices.com.au, request: "GET /ws60.php HTTP/1.1", upstream: "http://103.4.122.14:8181/ws60.php", host: "www.dwelectservices.com.au"
[Wed Mar 11 20:06:01.795979 2026] [:error] [pid 44995:tid 45001] [client 20.151.107.165:35508] [client 20.151.107.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws60.php"] [unique_id "abFaqToOSr9ks_axo6O_cAAAAkQ"]
2026/03/11 20:06:02 [error] 53947#53947: *1057400 upstream prematurely closed connection while reading response header from upstream, client: 20.151.107.165, server: dwelectservices.com.au, request: "GET /gfd.php HTTP/1.1", upstream: "http://103.4.122.14:8181/gfd.php", host: "www.dwelectservices.com.au"
[Wed Mar 11 20:06:02.022462 2026] [:error] [pid 44882:tid 44895] [client 20.151.107.165:35510] [client 20.151.107.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/gfd.php"] [unique_id "abFaqlC06UlbDFYZNg0EsAAAAgs"]
2026/03/11 20:06:02 [error] 53947#53947: *1057400 upstream prematurely closed connection while reading response header from upstream, client: 20.151.107.165, server: dwelectservices.com.au, request: "GET /admin-footer.php HTTP/1.1", upstream: "http://103.4.122.14:8181/admin-footer.php", host: "www.dwelectservices.com.au"
[Wed Mar 11 20:06:02.228751 2026] [:error] [pid 23482:tid 23487] [client 20.151.107.165:35514] [client 20.151.107.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/admin-footer.php"] [unique_id "abFaqsrYaTAnN_mLXynhyAAAAQI"]
2026/03/11 20:06:02 [error] 53947#53947: *1057400 upstream prematurely closed connection while reading response header from upstream, client: 20.151.107.165, server: dwelectservices.com.au, request: "GET /166.php HTTP/1.1", upstream: "http://103.4.122.14:8181/166.php", host: "www.dwelectservices.com.au"
[Wed Mar 11 20:06:02.457877 2026] [:error] [pid 44800:tid 44810] [client 20.151.107.165:35520] [client 20.151.107.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/166.php"] [unique_id "abFaqjN8ZerbIEHTO2qd7QAAAcg"]
[Wed Mar 11 20:06:02.671776 2026] [:error] [pid 44995:tid 45014] [client 20.151.107.165:35526] [client 20.151.107.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/jga.php"] [unique_id "abFaqjoOSr9ks_axo6O_cQAAAlE"]
2026/03/11 20:06:02 [error] 53947#53947: *1057400 upstream prematurely closed connection while reading response header from upstream, client: 20.151.107.165, server: dwelectservices.com.au, request: "GET /jga.php HTTP/1.1", upstream: "http://103.4.122.14:8181/jga.php", host: "www.dwelectservices.com.au"
[Wed Mar 11 20:06:02.885868 2026] [:error] [pid 44995:tid 45015] [client 20.151.107.165:35530] [client 20.151.107.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "abFaqjoOSr9ks_axo6O_cgAAAlI"]
2026/03/11 20:06:02 [error] 53947#53947: *1057400 upstream prematurely closed connection while reading response header from upstream, client: 20.151.107.165, server: dwelectservices.com.au, request: "GET /wp-p2r3q9c8k4.php HTTP/1.1", upstream: "http://103.4.122.14:8181/wp-p2r3q9c8k4.php", host: "www.dwelectservices.com.au"
2026/03/11 20:06:03 [error] 53947#53947: *1057400 upstream prematurely closed connection while reading response header from upstream, client: 20.151.107.165, server: dwelectservices.com.au, request: "GET /wp-admin/css/bolt.php HTTP/1.1", upstream: "http://103.4.122.14:8181/wp-admin/css/bolt.php", host: "www.dwelectservices.com.au"
[Wed Mar 11 20:06:03.092310 2026] [:error] [pid 53953:tid 53959] [client 20.151.107.165:35532] [client 20.151.107.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "abFaq3iDUTQy-Lyy4w2kCQAAAAI"]
2026/03/11 20:06:03 [error] 53947#53947: *1057400 upstream prematurely closed connection while reading response header from upstream, client: 20.151.107.165, server: dwelectservices.com.au, request: "GET /myfile.php HTTP/1.1", upstream: "http://103.4.122.14:8181/myfile.php", host: "www.dwelectservices.com.au"
[Wed Mar 11 20:06:03.312199 2026] [:error] [pid 54045:tid 54071] [client 20.151.107.165:35538] [client 20.151.107.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/myfile.php"] [unique_id "abFaqyRcKzQ1f-N8TgTHsQAAANg"]
[Wed Mar 11 20:06:03.518106 2026] [:error] [pid 54045:tid 54066] [client 20.151.107.165:35540] [client 20.151.107.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/sa.php7"] [unique_id "abFaqyRcKzQ1f-N8TgTHsgAAANM"]
2026/03/11 20:06:03 [error] 53947#53947: *1057400 upstream prematurely closed connection while reading response header from upstream, client: 20.151.107.165, server: dwelectservices.com.au, request: "GET /sa.php7 HTTP/1.1", upstream: "http://103.4.122.14:8181/sa.php7", host: "www.dwelectservices.com.au"
2026/03/11 20:06:03 [error] 53947#53947: *1057400 upstream prematurely closed connection while reading response header from upstream, client: 20.151.107.165, server: dwelectservices.com.au, request: "GET /ws75.php HTTP/1.1", upstream: "http://103.4.122.14:8181/ws75.php", host: "www.dwelectservices.com.au"
[Wed Mar 11 20:06:03.724648 2026] [:error] [pid 54045:tid 54063] [client 20.151.107.165:35544] [client 20.151.107.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws75.php"] [unique_id "abFaqyRcKzQ1f-N8TgTHswAAANA"]
[Wed Mar 11 20:06:04.183594 2026] [:error] [pid 44995:tid 45013] [client 20.151.107.165:35550] [client 20.151.107.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-access.php"] [unique_id "abFarDoOSr9ks_axo6O_dQAAAlA"]
2026/03/11 20:06:04 [error] 53947#53947: *1057400 upstream prematurely closed connection while reading response header from upstream, client: 20.151.107.165, server: dwelectservices.com.au, request: "GET /wp-access.php HTTP/1.1", upstream: "http://103.4.122.14:8181/wp-access.php", host: "www.dwelectservices.com.au"
2026/03/11 20:06:04 [error] 53947#53947: *1057400 upstream prematurely closed connection while reading response header from upstream, client: 20.151.107.165, server: dwelectservices.com.au, request: "GET /init.php HTTP/1.1", upstream: "http://103.4.122.14:8181/init.php", host: "www.dwelectservices.com.au"
[Wed Mar 11 20:06:04.389165 2026] [:error] [pid 44995:tid 45016] [client 20.151.107.165:35554] [client 20.151.107.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/init.php"] [unique_id "abFarDoOSr9ks_axo6O_dwAAAlM"]
2026/03/11 20:06:04 [error] 53947#53947: *1057400 upstream prematurely closed connection while reading response header from upstream, client: 20.151.107.165, server: dwelectservices.com.au, request: "GET /public/ws49.php HTTP/1.1", upstream: "http://103.4.122.14:8181/public/ws49.php", host: "www.dwelectservices.com.au"
[Wed Mar 11 20:06:04.601497 2026] [:error] [pid 44995:tid 45004] [client 20.151.107.165:35564] [client 20.151.107.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/public/ws49.php"] [unique_id "abFarDoOSr9ks_axo6O_eAAAAkc"]
2026/03/11 20:06:04 [error] 53947#53947: *1057400 upstream prematurely closed connection while reading response header from upstream, client: 20.151.107.165, server: dwelectservices.com.au, request: "GET /66.php HTTP/1.1", upstream: "http://103.4.122.14:8181/66.php", host: "www.dwelectservices.com.au"
[Wed Mar 11 20:06:04.816505 2026] [:error] [pid 45143:tid 45146] [client 20.151.107.165:35568] [client 20.151.107.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/66.php"] [unique_id "abFarCEXSpYdWImkpzbq-QAAAYE"]
2026/03/11 20:06:05 [error] 53947#53947: *1057400 upstream prematurely closed connection while reading response header from upstream, client: 20.151.107.165, server: dwelectservices.com.au, request: "GET /b.php HTTP/1.1", upstream: "http://103.4.122.14:8181/b.php", host: "www.dwelectservices.com.au"
[Wed Mar 11 20:06:05.026292 2026] [:error] [pid 54045:tid 54055] [client 20.151.107.165:35574] [client 20.151.107.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/b.php"] [unique_id "abFarSRcKzQ1f-N8TgTHtwAAAMg"]
2026/03/11 20:06:05 [error] 53947#53947: *1057400 upstream prematurely closed connection while reading response header from upstream, client: 20.151.107.165, server: dwelectservices.com.au, request: "GET /wp9.php HTTP/1.1", upstream: "http://103.4.122.14:8181/wp9.php", host: "www.dwelectservices.com.au"
[Wed Mar 11 20:06:05.255275 2026] [:error] [pid 44995:tid 45003] [client 20.151.107.165:35578] [client 20.151.107.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp9.php"] [unique_id "abFarToOSr9ks_axo6O_egAAAkY"]
2026/03/11 20:06:05 [error] 53947#53947: *1057400 upstream prematurely closed connection while reading response header from upstream, client: 20.151.107.165, server: dwelectservices.com.au, request: "GET /grsiuk.php HTTP/1.1", upstream: "http://103.4.122.14:8181/grsiuk.php", host: "www.dwelectservices.com.au"
[Wed Mar 11 20:06:05.462107 2026] [:error] [pid 54045:tid 54054] [client 20.151.107.165:35580] [client 20.151.107.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/grsiuk.php"] [unique_id "abFarSRcKzQ1f-N8TgTHuAAAAMc"]
2026/03/11 20:06:05 [error] 53947#53947: *1057400 upstream prematurely closed connection while reading response header from upstream, client: 20.151.107.165, server: dwelectservices.com.au, request: "GET /wp-content/radio.php HTTP/1.1", upstream: "http://103.4.122.14:8181/wp-content/radio.php", host: "www.dwelectservices.com.au"
[Wed Mar 11 20:06:05.678845 2026] [:error] [pid 44995:tid 45010] [client 20.151.107.165:35582] [client 20.151.107.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/radio.php"] [unique_id "abFarToOSr9ks_axo6O_ewAAAk0"]
2026/03/11 20:06:05 [error] 53947#53947: *1057400 upstream prematurely closed connection while reading response header from upstream, client: 20.151.107.165, server: dwelectservices.com.au, request: "GET /motu.php HTTP/1.1", upstream: "http://103.4.122.14:8181/motu.php", host: "www.dwelectservices.com.au"
[Wed Mar 11 20:06:05.899297 2026] [:error] [pid 44995:tid 45000] [client 20.151.107.165:35588] [client 20.151.107.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/motu.php"] [unique_id "abFarToOSr9ks_axo6O_fQAAAkM"]
[Wed Mar 11 20:06:06.368346 2026] [:error] [pid 44995:tid 45018] [client 20.151.107.165:35596] [client 20.151.107.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/fs.php"] [unique_id "abFarjoOSr9ks_axo6O_fwAAAlU"]
2026/03/11 20:06:06 [error] 53947#53947: *1057400 upstream prematurely closed connection while reading response header from upstream, client: 20.151.107.165, server: dwelectservices.com.au, request: "GET /fs.php HTTP/1.1", upstream: "http://103.4.122.14:8181/fs.php", host: "www.dwelectservices.com.au"
2026/03/11 20:06:06 [error] 53947#53947: *1057400 upstream prematurely closed connection while reading response header from upstream, client: 20.151.107.165, server: dwelectservices.com.au, request: "GET /ajax.php HTTP/1.1", upstream: "http://103.4.122.14:8181/ajax.php", host: "www.dwelectservices.com.au"
[Wed Mar 11 20:06:06.960509 2026] [:error] [pid 23482:tid 23500] [client 20.151.107.165:35606] [client 20.151.107.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ajax.php"] [unique_id "abFarsrYaTAnN_mLXynhzQAAAQ8"]
2026/03/11 20:06:07 [error] 53947#53947: *1057400 upstream prematurely closed connection while reading response header from upstream, client: 20.151.107.165, server: dwelectservices.com.au, request: "GET /tx78.php HTTP/1.1", upstream: "http://103.4.122.14:8181/tx78.php", host: "www.dwelectservices.com.au"
[Wed Mar 11 20:06:07.167392 2026] [:error] [pid 23482:tid 23491] [client 20.151.107.165:35608] [client 20.151.107.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/tx78.php"] [unique_id "abFar8rYaTAnN_mLXynhzgAAAQY"]
2026/03/11 20:06:07 [error] 53947#53947: *1057400 upstream prematurely closed connection while reading response header from upstream, client: 20.151.107.165, server: dwelectservices.com.au, request: "GET /jp.php HTTP/1.1", upstream: "http://103.4.122.14:8181/jp.php", host: "www.dwelectservices.com.au"
[Wed Mar 11 20:06:07.498360 2026] [:error] [pid 44995:tid 45001] [client 20.151.107.165:35616] [client 20.151.107.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/jp.php"] [unique_id "abFarzoOSr9ks_axo6O_gQAAAkQ"]
2026/03/11 20:06:07 [error] 53947#53947: *1057400 upstream prematurely closed connection while reading response header from upstream, client: 20.151.107.165, server: dwelectservices.com.au, request: "GET /wp-blogs.php HTTP/1.1", upstream: "http://103.4.122.14:8181/wp-blogs.php", host: "www.dwelectservices.com.au"
[Wed Mar 11 20:06:07.704878 2026] [:error] [pid 44995:tid 45006] [client 20.151.107.165:35620] [client 20.151.107.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-blogs.php"] [unique_id "abFarzoOSr9ks_axo6O_ggAAAkk"]
2026/03/11 20:06:07 [error] 53947#53947: *1057400 upstream prematurely closed connection while reading response header from upstream, client: 20.151.107.165, server: dwelectservices.com.au, request: "GET /edit-tags.php HTTP/1.1", upstream: "http://103.4.122.14:8181/edit-tags.php", host: "www.dwelectservices.com.au"
[Wed Mar 11 20:06:07.910575 2026] [:error] [pid 53955:tid 54028] [client 20.151.107.165:35628] [client 20.151.107.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/edit-tags.php"] [unique_id "abFar9P1Uf6qBkbxZg_2CgAAAIk"]
2026/03/11 20:06:08 [error] 53947#53947: *1057400 upstream prematurely closed connection while reading response header from upstream, client: 20.151.107.165, server: dwelectservices.com.au, request: "GET /wp-png.php HTTP/1.1", upstream: "http://103.4.122.14:8181/wp-png.php", host: "www.dwelectservices.com.au"
[Wed Mar 11 20:06:08.196639 2026] [:error] [pid 44995:tid 45007] [client 20.151.107.165:35630] [client 20.151.107.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-png.php"] [unique_id "abFasDoOSr9ks_axo6O_hgAAAko"]
2026/03/11 20:06:08 [error] 53947#53947: *1057400 upstream prematurely closed connection while reading response header from upstream, client: 20.151.107.165, server: dwelectservices.com.au, request: "GET /wpc2.php HTTP/1.1", upstream: "http://103.4.122.14:8181/wpc2.php", host: "www.dwelectservices.com.au"
[Wed Mar 11 20:06:08.403280 2026] [:error] [pid 54045:tid 54067] [client 20.151.107.165:35636] [client 20.151.107.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wpc2.php"] [unique_id "abFasCRcKzQ1f-N8TgTHugAAANQ"]
2026/03/11 20:06:08 [error] 53947#53947: *1057400 upstream prematurely closed connection while reading response header from upstream, client: 20.151.107.165, server: dwelectservices.com.au, request: "GET /intall.php HTTP/1.1", upstream: "http://103.4.122.14:8181/intall.php", host: "www.dwelectservices.com.au"
[Wed Mar 11 20:06:08.623905 2026] [:error] [pid 44995:tid 44999] [client 20.151.107.165:35640] [client 20.151.107.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/intall.php"] [unique_id "abFasDoOSr9ks_axo6O_hwAAAkI"]
2026/03/11 20:06:08 [error] 53947#53947: *1057400 upstream prematurely closed connection while reading response header from upstream, client: 20.151.107.165, server: dwelectservices.com.au, request: "GET /cu.php HTTP/1.1", upstream: "http://103.4.122.14:8181/cu.php", host: "www.dwelectservices.com.au"
[Wed Mar 11 20:06:08.839591 2026] [:error] [pid 54045:tid 54061] [client 20.151.107.165:35644] [client 20.151.107.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/cu.php"] [unique_id "abFasCRcKzQ1f-N8TgTHuwAAAM4"]
2026/03/11 20:06:09 [error] 53947#53947: *1057400 upstream prematurely closed connection while reading response header from upstream, client: 20.151.107.165, server: dwelectservices.com.au, request: "GET /callback.php HTTP/1.1", upstream: "http://103.4.122.14:8181/callback.php", host: "www.dwelectservices.com.au"
[Wed Mar 11 20:06:09.080916 2026] [:error] [pid 53954:tid 53988] [client 20.151.107.165:35648] [client 20.151.107.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/callback.php"] [unique_id "abFasbbD1J_Nhe6jce2RiAAAAEM"]
[Wed Mar 11 20:06:09.296444 2026] [:error] [pid 45143:tid 45156] [client 20.151.107.165:35652] [client 20.151.107.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/byypas.php"] [unique_id "abFasSEXSpYdWImkpzbrAgAAAYs"]
2026/03/11 20:06:09 [error] 53947#53947: *1057400 upstream prematurely closed connection while reading response header from upstream, client: 20.151.107.165, server: dwelectservices.com.au, request: "GET /byypas.php HTTP/1.1", upstream: "http://103.4.122.14:8181/byypas.php", host: "www.dwelectservices.com.au"
[Wed Mar 11 20:06:09.512393 2026] [:error] [pid 44800:tid 44816] [client 20.151.107.165:35654] [client 20.151.107.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/abrand.php"] [unique_id "abFasTN8ZerbIEHTO2qd8AAAAc4"]
2026/03/11 20:06:09 [error] 53947#53947: *1057400 upstream prematurely closed connection while reading response header from upstream, client: 20.151.107.165, server: dwelectservices.com.au, request: "GET /abrand.php HTTP/1.1", upstream: "http://103.4.122.14:8181/abrand.php", host: "www.dwelectservices.com.au"
2026/03/11 20:06:09 [error] 53947#53947: *1057400 upstream prematurely closed connection while reading response header from upstream, client: 20.151.107.165, server: dwelectservices.com.au, request: "GET /camara.php HTTP/1.1", upstream: "http://103.4.122.14:8181/camara.php", host: "www.dwelectservices.com.au"
[Wed Mar 11 20:06:09.728471 2026] [:error] [pid 53954:tid 54001] [client 20.151.107.165:35656] [client 20.151.107.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/camara.php"] [unique_id "abFasbbD1J_Nhe6jce2RiQAAAE8"]
2026/03/11 20:06:09 [error] 53947#53947: *1057400 upstream prematurely closed connection while reading response header from upstream, client: 20.151.107.165, server: dwelectservices.com.au, request: "GET /assacc.php HTTP/1.1", upstream: "http://103.4.122.14:8181/assacc.php", host: "www.dwelectservices.com.au"
[Wed Mar 11 20:06:09.946571 2026] [:error] [pid 45143:tid 45162] [client 20.151.107.165:35662] [client 20.151.107.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/assacc.php"] [unique_id "abFasSEXSpYdWImkpzbrAwAAAZE"]
2026/03/11 20:06:10 [error] 53947#53947: *1057400 upstream prematurely closed connection while reading response header from upstream, client: 20.151.107.165, server: dwelectservices.com.au, request: "GET /ws83.php HTTP/1.1", upstream: "http://103.4.122.14:8181/ws83.php", host: "www.dwelectservices.com.au"
[Wed Mar 11 20:06:10.168014 2026] [:error] [pid 54045:tid 54049] [client 20.151.107.165:35666] [client 20.151.107.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws83.php"] [unique_id "abFasiRcKzQ1f-N8TgTHvQAAAMI"]
2026/03/11 20:06:10 [error] 53947#53947: *1057400 upstream prematurely closed connection while reading response header from upstream, client: 20.151.107.165, server: dwelectservices.com.au, request: "GET /wp-good.php HTTP/1.1", upstream: "http://103.4.122.14:8181/wp-good.php", host: "www.dwelectservices.com.au"
[Wed Mar 11 20:06:10.375360 2026] [:error] [pid 54045:tid 54060] [client 20.151.107.165:35672] [client 20.151.107.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-good.php"] [unique_id "abFasiRcKzQ1f-N8TgTHvwAAAM0"]
2026/03/11 20:06:10 [error] 53947#53947: *1057400 upstream prematurely closed connection while reading response header from upstream, client: 20.151.107.165, server: dwelectservices.com.au, request: "GET /%E3%81%AE.php HTTP/1.1", upstream: "http://103.4.122.14:8181/%E3%81%AE.php", host: "www.dwelectservices.com.au"
[Wed Mar 11 20:06:10.581461 2026] [:error] [pid 54045:tid 54062] [client 20.151.107.165:35674] [client 20.151.107.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/%E3%81%AE.php"] [unique_id "abFasiRcKzQ1f-N8TgTHwAAAAM8"]
2026/03/11 20:06:10 [error] 53947#53947: *1057400 upstream prematurely closed connection while reading response header from upstream, client: 20.151.107.165, server: dwelectservices.com.au, request: "GET /xtsr.php HTTP/1.1", upstream: "http://103.4.122.14:8181/xtsr.php", host: "www.dwelectservices.com.au"
[Wed Mar 11 20:06:10.791560 2026] [:error] [pid 54045:tid 54070] [client 20.151.107.165:35678] [client 20.151.107.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xtsr.php"] [unique_id "abFasiRcKzQ1f-N8TgTHwQAAANc"]
2026/03/11 20:06:11 [error] 53947#53947: *1057400 upstream prematurely closed connection while reading response header from upstream, client: 20.151.107.165, server: dwelectservices.com.au, request: "GET /zz8.php HTTP/1.1", upstream: "http://103.4.122.14:8181/zz8.php", host: "www.dwelectservices.com.au"
[Wed Mar 11 20:06:11.012171 2026] [:error] [pid 54045:tid 54057] [client 20.151.107.165:35682] [client 20.151.107.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/zz8.php"] [unique_id "abFasyRcKzQ1f-N8TgTHwgAAAMo"]
2026/03/11 20:06:11 [error] 53947#53947: *1057400 upstream prematurely closed connection while reading response header from upstream, client: 20.151.107.165, server: dwelectservices.com.au, request: "GET /mh.php HTTP/1.1", upstream: "http://103.4.122.14:8181/mh.php", host: "www.dwelectservices.com.au"
[Wed Mar 11 20:06:11.218298 2026] [:error] [pid 45143:tid 45169] [client 20.151.107.165:35686] [client 20.151.107.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/mh.php"] [unique_id "abFasyEXSpYdWImkpzbrBAAAAZg"]
2026/03/11 20:06:11 [error] 53947#53947: *1057400 upstream prematurely closed connection while reading response header from upstream, client: 20.151.107.165, server: dwelectservices.com.au, request: "GET /a5.php HTTP/1.1", upstream: "http://103.4.122.14:8181/a5.php", host: "www.dwelectservices.com.au"
[Wed Mar 11 20:06:11.424337 2026] [:error] [pid 53955:tid 54043] [client 20.151.107.165:35688] [client 20.151.107.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/a5.php"] [unique_id "abFas9P1Uf6qBkbxZg_2DQAAAJg"]
2026/03/11 20:06:11 [error] 53947#53947: *1057400 upstream prematurely closed connection while reading response header from upstream, client: 20.151.107.165, server: dwelectservices.com.au, request: "GET /ai.php HTTP/1.1", upstream: "http://103.4.122.14:8181/ai.php", host: "www.dwelectservices.com.au"
[Wed Mar 11 20:06:11.630289 2026] [:error] [pid 53955:tid 54038] [client 20.151.107.165:35694] [client 20.151.107.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ai.php"] [unique_id "abFas9P1Uf6qBkbxZg_2DwAAAJM"]
2026/03/11 20:06:11 [error] 53947#53947: *1057400 upstream prematurely closed connection while reading response header from upstream, client: 20.151.107.165, server: dwelectservices.com.au, request: "GET /amwxl.php HTTP/1.1", upstream: "http://103.4.122.14:8181/amwxl.php", host: "www.dwelectservices.com.au"
[Wed Mar 11 20:06:11.845453 2026] [:error] [pid 23512:tid 23524] [client 20.151.107.165:35700] [client 20.151.107.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/amwxl.php"] [unique_id "abFas6euPtNfm7KRzWXXlgAAAUk"]
[Wed Mar 11 20:06:12.051556 2026] [:error] [pid 54045:tid 54063] [client 20.151.107.165:35704] [client 20.151.107.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/awdld.php"] [unique_id "abFatCRcKzQ1f-N8TgTHxQAAANA"]
2026/03/11 20:06:12 [error] 53947#53947: *1057400 upstream prematurely closed connection while reading response header from upstream, client: 20.151.107.165, server: dwelectservices.com.au, request: "GET /awdld.php HTTP/1.1", upstream: "http://103.4.122.14:8181/awdld.php", host: "www.dwelectservices.com.au"
[Wed Mar 11 20:06:12.272566 2026] [:error] [pid 45143:tid 45165] [client 20.151.107.165:35708] [client 20.151.107.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bkyac.php"] [unique_id "abFatCEXSpYdWImkpzbrBQAAAZQ"]
2026/03/11 20:06:12 [error] 53947#53947: *1057400 upstream prematurely closed connection while reading response header from upstream, client: 20.151.107.165, server: dwelectservices.com.au, request: "GET /bkyac.php HTTP/1.1", upstream: "http://103.4.122.14:8181/bkyac.php", host: "www.dwelectservices.com.au"
2026/03/11 20:06:12 [error] 53947#53947: *1057400 upstream prematurely closed connection while reading response header from upstream, client: 20.151.107.165, server: dwelectservices.com.au, request: "GET /krntz.php HTTP/1.1", upstream: "http://103.4.122.14:8181/krntz.php", host: "www.dwelectservices.com.au"
[Wed Mar 11 20:06:12.657964 2026] [:error] [pid 23482:tid 23505] [client 20.151.107.165:35712] [client 20.151.107.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/krntz.php"] [unique_id "abFatMrYaTAnN_mLXynh0AAAARQ"]
2026/03/11 20:06:12 [error] 53947#53947: *1057400 upstream prematurely closed connection while reading response header from upstream, client: 20.151.107.165, server: dwelectservices.com.au, request: "GET /vhwwnrnmqc.php HTTP/1.1", upstream: "http://103.4.122.14:8181/vhwwnrnmqc.php", host: "www.dwelectservices.com.au"
[Wed Mar 11 20:06:12.864953 2026] [:error] [pid 45143:tid 45164] [client 20.151.107.165:35716] [client 20.151.107.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/vhwwnrnmqc.php"] [unique_id "abFatCEXSpYdWImkpzbrBwAAAZM"]
2026/03/11 20:06:13 [error] 53947#53947: *1057400 upstream prematurely closed connection while reading response header from upstream, client: 20.151.107.165, server: dwelectservices.com.au, request: "GET /xenium4.php HTTP/1.1", upstream: "http://103.4.122.14:8181/xenium4.php", host: "www.dwelectservices.com.au"
[Wed Mar 11 20:06:13.089139 2026] [:error] [pid 23512:tid 23522] [client 20.151.107.165:35718] [client 20.151.107.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xenium4.php"] [unique_id "abFataeuPtNfm7KRzWXXlwAAAUc"]
2026/03/11 20:06:13 [error] 53947#53947: *1057400 upstream prematurely closed connection while reading response header from upstream, client: 20.151.107.165, server: dwelectservices.com.au, request: "GET /vaza.php HTTP/1.1", upstream: "http://103.4.122.14:8181/vaza.php", host: "www.dwelectservices.com.au"
[Wed Mar 11 20:06:13.317802 2026] [:error] [pid 44995:tid 45011] [client 20.151.107.165:35726] [client 20.151.107.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/vaza.php"] [unique_id "abFatToOSr9ks_axo6O_kAAAAk4"]
2026/03/11 20:06:13 [error] 53947#53947: *1057400 upstream prematurely closed connection while reading response header from upstream, client: 20.151.107.165, server: dwelectservices.com.au, request: "GET /8573.php HTTP/1.1", upstream: "http://103.4.122.14:8181/8573.php", host: "www.dwelectservices.com.au"
[Wed Mar 11 20:06:13.524271 2026] [:error] [pid 54045:tid 54059] [client 20.151.107.165:35728] [client 20.151.107.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/8573.php"] [unique_id "abFatSRcKzQ1f-N8TgTHxgAAAMw"]
2026/03/11 20:06:13 [error] 53947#53947: *1057400 upstream prematurely closed connection while reading response header from upstream, client: 20.151.107.165, server: dwelectservices.com.au, request: "GET /rip.php HTTP/1.1", upstream: "http://103.4.122.14:8181/rip.php", host: "www.dwelectservices.com.au"
[Wed Mar 11 20:06:13.731150 2026] [:error] [pid 54045:tid 54053] [client 20.151.107.165:35732] [client 20.151.107.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/rip.php"] [unique_id "abFatSRcKzQ1f-N8TgTHyAAAAMY"]
2026/03/11 20:06:13 [error] 53947#53947: *1057400 upstream prematurely closed connection while reading response header from upstream, client: 20.151.107.165, server: dwelectservices.com.au, request: "GET /drhunthq.php HTTP/1.1", upstream: "http://103.4.122.14:8181/drhunthq.php", host: "www.dwelectservices.com.au"
[Wed Mar 11 20:06:13.949466 2026] [:error] [pid 23512:tid 23525] [client 20.151.107.165:35738] [client 20.151.107.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/drhunthq.php"] [unique_id "abFataeuPtNfm7KRzWXXmQAAAUo"]
[Wed Mar 11 20:06:14.154954 2026] [:error] [pid 54045:tid 54052] [client 20.151.107.165:35740] [client 20.151.107.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/sbhu.php"] [unique_id "abFatiRcKzQ1f-N8TgTHyQAAAMU"]
2026/03/11 20:06:14 [error] 53947#53947: *1057400 upstream prematurely closed connection while reading response header from upstream, client: 20.151.107.165, server: dwelectservices.com.au, request: "GET /sbhu.php HTTP/1.1", upstream: "http://103.4.122.14:8181/sbhu.php", host: "www.dwelectservices.com.au"
2026/03/11 20:06:14 [error] 53947#53947: *1057400 upstream prematurely closed connection while reading response header from upstream, client: 20.151.107.165, server: dwelectservices.com.au, request: "GET /inege.php HTTP/1.1", upstream: "http://103.4.122.14:8181/inege.php", host: "www.dwelectservices.com.au"
[Wed Mar 11 20:06:14.682369 2026] [:error] [pid 23482:tid 23494] [client 20.151.107.165:35746] [client 20.151.107.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/inege.php"] [unique_id "abFatsrYaTAnN_mLXynh0QAAAQk"]
2026/03/11 20:06:14 [error] 53947#53947: *1057400 upstream prematurely closed connection while reading response header from upstream, client: 20.151.107.165, server: dwelectservices.com.au, request: "GET /ws84.php HTTP/1.1", upstream: "http://103.4.122.14:8181/ws84.php", host: "www.dwelectservices.com.au"
[Wed Mar 11 20:06:14.888322 2026] [:error] [pid 45143:tid 45159] [client 20.151.107.165:35750] [client 20.151.107.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws84.php"] [unique_id "abFatiEXSpYdWImkpzbrCAAAAY4"]
2026/03/11 20:06:15 [error] 53947#53947: *1057400 upstream prematurely closed connection while reading response header from upstream, client: 20.151.107.165, server: dwelectservices.com.au, request: "GET /c4.php HTTP/1.1", upstream: "http://103.4.122.14:8181/c4.php", host: "www.dwelectservices.com.au"
[Wed Mar 11 20:06:15.095098 2026] [:error] [pid 45143:tid 45146] [client 20.151.107.165:35754] [client 20.151.107.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/c4.php"] [unique_id "abFatyEXSpYdWImkpzbrCQAAAYE"]
2026/03/11 20:06:15 [error] 53947#53947: *1057400 upstream prematurely closed connection while reading response header from upstream, client: 20.151.107.165, server: dwelectservices.com.au, request: "GET /lclnqiii.php HTTP/1.1", upstream: "http://103.4.122.14:8181/lclnqiii.php", host: "www.dwelectservices.com.au"
[Wed Mar 11 20:06:15.317598 2026] [:error] [pid 44800:tid 44819] [client 20.151.107.165:35762] [client 20.151.107.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/lclnqiii.php"] [unique_id "abFatzN8ZerbIEHTO2qd9AAAAdE"]
[Wed Mar 11 20:06:15.540466 2026] [:error] [pid 23482:tid 23498] [client 20.151.107.165:35768] [client 20.151.107.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/goat.php"] [unique_id "abFat8rYaTAnN_mLXynh0wAAAQ0"]
2026/03/11 20:06:15 [error] 53947#53947: *1057400 upstream prematurely closed connection while reading response header from upstream, client: 20.151.107.165, server: dwelectservices.com.au, request: "GET /goat.php HTTP/1.1", upstream: "http://103.4.122.14:8181/goat.php", host: "www.dwelectservices.com.au"
[Wed Mar 11 20:06:15.767651 2026] [:error] [pid 54045:tid 54058] [client 20.151.107.165:35772] [client 20.151.107.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-tot.php"] [unique_id "abFatyRcKzQ1f-N8TgTHzQAAAMs"]
2026/03/11 20:06:15 [error] 53947#53947: *1057400 upstream prematurely closed connection while reading response header from upstream, client: 20.151.107.165, server: dwelectservices.com.au, request: "GET /wp-tot.php HTTP/1.1", upstream: "http://103.4.122.14:8181/wp-tot.php", host: "www.dwelectservices.com.au"
2026/03/11 20:06:16 [error] 53947#53947: *1057400 upstream prematurely closed connection while reading response header from upstream, client: 20.151.107.165, server: dwelectservices.com.au, request: "GET /wp-tap.php HTTP/1.1", upstream: "http://103.4.122.14:8181/wp-tap.php", host: "www.dwelectservices.com.au"
[Wed Mar 11 20:06:16.107328 2026] [:error] [pid 53955:tid 54036] [client 20.151.107.165:35776] [client 20.151.107.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-tap.php"] [unique_id "abFauNP1Uf6qBkbxZg_2EAAAAJE"]
2026/03/11 20:06:16 [error] 53947#53947: *1057400 upstream prematurely closed connection while reading response header from upstream, client: 20.151.107.165, server: dwelectservices.com.au, request: "GET /vrhiw.php HTTP/1.1", upstream: "http://103.4.122.14:8181/vrhiw.php", host: "www.dwelectservices.com.au"
[Wed Mar 11 20:06:16.409195 2026] [:error] [pid 54045:tid 54048] [client 20.151.107.165:35784] [client 20.151.107.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/vrhiw.php"] [unique_id "abFauCRcKzQ1f-N8TgTH0QAAAME"]
2026/03/11 20:06:16 [error] 53947#53947: *1057400 upstream prematurely closed connection while reading response header from upstream, client: 20.151.107.165, server: dwelectservices.com.au, request: "GET /qqjki.php HTTP/1.1", upstream: "http://103.4.122.14:8181/qqjki.php", host: "www.dwelectservices.com.au"
[Wed Mar 11 20:06:16.616177 2026] [:error] [pid 54045:tid 54056] [client 20.151.107.165:35790] [client 20.151.107.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/qqjki.php"] [unique_id "abFauCRcKzQ1f-N8TgTH1AAAAMk"]
2026/03/11 20:06:16 [error] 53947#53947: *1057400 upstream prematurely closed connection while reading response header from upstream, client: 20.151.107.165, server: dwelectservices.com.au, request: "GET /koiy.php HTTP/1.1", upstream: "http://103.4.122.14:8181/koiy.php", host: "www.dwelectservices.com.au"
[Wed Mar 11 20:06:16.881009 2026] [:error] [pid 54045:tid 54071] [client 20.151.107.165:35794] [client 20.151.107.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/koiy.php"] [unique_id "abFauCRcKzQ1f-N8TgTH1gAAANg"]
[Thu Mar 12 18:24:06.913538 2026] [:error] [pid 51455:tid 51478] [client 103.65.236.149:64761] [client 103.65.236.149] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/sftp-config.json"] [unique_id "abKURpE0YyNxdg6PL_AuuAAAABI"]
[Thu Mar 12 18:24:07.131897 2026] [:error] [pid 51457:tid 51534] [client 103.65.236.149:64772] [client 103.65.236.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.vscode/sftp.json"] [unique_id "abKURyjknw2FvT4H3DavSAAAAJQ"]
[Fri Mar 13 01:28:50.108606 2026] [proxy_fcgi:error] [pid 56003:tid 56024] [client 4.205.39.42:23694] AH01071: Got error 'Primary script unknown'
[Fri Mar 13 01:28:50.338712 2026] [proxy_fcgi:error] [pid 56003:tid 56020] [client 4.205.39.42:23694] AH01071: Got error 'Primary script unknown'
[Fri Mar 13 01:28:50.785485 2026] [proxy_fcgi:error] [pid 56003:tid 56016] [client 4.205.39.42:23694] AH01071: Got error 'Primary script unknown'
[Fri Mar 13 01:28:50.994551 2026] [proxy_fcgi:error] [pid 56003:tid 56011] [client 4.205.39.42:23694] AH01071: Got error 'Primary script unknown'
[Fri Mar 13 01:28:51.539713 2026] [proxy_fcgi:error] [pid 56003:tid 56009] [client 4.205.39.42:23694] AH01071: Got error 'Primary script unknown'
[Fri Mar 13 01:28:51.751839 2026] [proxy_fcgi:error] [pid 56003:tid 56012] [client 4.205.39.42:23694] AH01071: Got error 'Primary script unknown'
[Fri Mar 13 01:28:51.963749 2026] [proxy_fcgi:error] [pid 56003:tid 56028] [client 4.205.39.42:23694] AH01071: Got error 'Primary script unknown'
[Fri Mar 13 01:28:52.572381 2026] [:error] [pid 56003:tid 56018] [client 4.205.39.42:23694] [client 4.205.39.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/randkeyword.PhP7"] [unique_id "abL31BQtM0oeMdFWe6VmFQAAAM0"]
[Fri Mar 13 01:28:54.674782 2026] [:error] [pid 47894:tid 48006] [client 4.205.39.42:23693] [client 4.205.39.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/randkeyword.PhP7"] [unique_id "abL31piuFpRtVNR6uOJ9HgAAAQQ"]
[Fri Mar 13 01:28:56.166926 2026] [:error] [pid 48029:tid 48038] [client 4.205.39.42:24088] [client 4.205.39.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/randkeyword.PhP7"] [unique_id "abL32G7cFKMmtdGhPH_DmQAAAAc"]
[Fri Mar 13 01:29:02.584516 2026] [:error] [pid 47894:tid 48017] [client 4.205.39.42:23756] [client 4.205.39.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/randkeyword.PhP7"] [unique_id "abL33piuFpRtVNR6uOJ9IwAAAQ8"]
[Fri Mar 13 09:12:31.011866 2026] [:error] [pid 55077:tid 55081] [client 104.28.166.127:26954] [client 104.28.166.127] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/style.php"] [unique_id "abNkf99Ul5ym4M-PlQJBSgAAAUI"]
[Fri Mar 13 09:50:27.052805 2026] [:error] [pid 62036:tid 62059] [client 45.131.195.107:29675] [client 45.131.195.107] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.107, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-login.php"] [unique_id "abNtY7ce6g9kILuh_R5P4wAAANA"]
[Fri Mar 13 09:50:27.074990 2026] [proxy_fcgi:error] [pid 62036:tid 62059] [client 45.131.195.107:29675] AH01071: Got error 'Primary script unknown'
[Sat Mar 14 01:16:42.016384 2026] [proxy_fcgi:error] [pid 47891:tid 47988] [client 4.204.197.4:17404] AH01071: Got error 'Primary script unknown'
[Sat Mar 14 01:16:42.234568 2026] [proxy_fcgi:error] [pid 47891:tid 47989] [client 4.204.197.4:17404] AH01071: Got error 'Primary script unknown'
[Sat Mar 14 01:16:42.443859 2026] [proxy_fcgi:error] [pid 47891:tid 47990] [client 4.204.197.4:17404] AH01071: Got error 'Primary script unknown'
[Sat Mar 14 01:16:42.654882 2026] [proxy_fcgi:error] [pid 47891:tid 47973] [client 4.204.197.4:17404] AH01071: Got error 'Primary script unknown'
[Sat Mar 14 01:16:42.864427 2026] [proxy_fcgi:error] [pid 47891:tid 47975] [client 4.204.197.4:17404] AH01071: Got error 'Primary script unknown'
[Sat Mar 14 01:16:43.077405 2026] [proxy_fcgi:error] [pid 47891:tid 47980] [client 4.204.197.4:17404] AH01071: Got error 'Primary script unknown'
[Sat Mar 14 01:16:43.289143 2026] [proxy_fcgi:error] [pid 47891:tid 47968] [client 4.204.197.4:17404] AH01071: Got error 'Primary script unknown'
[Sat Mar 14 01:16:43.498983 2026] [proxy_fcgi:error] [pid 47891:tid 47983] [client 4.204.197.4:17404] AH01071: Got error 'Primary script unknown'
[Sat Mar 14 01:16:43.706622 2026] [proxy_fcgi:error] [pid 47891:tid 47977] [client 4.204.197.4:17404] AH01071: Got error 'Primary script unknown'
[Sat Mar 14 01:16:43.918473 2026] [proxy_fcgi:error] [pid 47891:tid 47974] [client 4.204.197.4:17404] AH01071: Got error 'Primary script unknown'
[Sat Mar 14 01:16:44.124128 2026] [:error] [pid 47891:tid 47979] [client 4.204.197.4:17404] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws.php"] [unique_id "abRGfPchNnuMqi7I_WHzxgAAAI0"]
[Sat Mar 14 01:16:44.544152 2026] [:error] [pid 47878:tid 47961] [client 4.204.197.4:17360] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws.php"] [unique_id "abRGfH8jymmmpr1jcBeo-gAAAFY"]
[Sat Mar 14 01:16:44.961325 2026] [:error] [pid 48070:tid 48089] [client 4.204.197.4:17286] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws.php"] [unique_id "abRGfEIvrhMS5BVHxNkWkQAAABE"]
[Sat Mar 14 01:16:45.373795 2026] [:error] [pid 48070:tid 48084] [client 4.204.197.4:17284] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws.php"] [unique_id "abRGfUIvrhMS5BVHxNkWlAAAAAw"]
[Sat Mar 14 01:16:45.785771 2026] [:error] [pid 48070:tid 48079] [client 4.204.197.4:17283] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/shell.php"] [unique_id "abRGfUIvrhMS5BVHxNkWlgAAAAc"]
[Sat Mar 14 01:16:46.208719 2026] [:error] [pid 48070:tid 48078] [client 4.204.197.4:17396] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/shell.php"] [unique_id "abRGfkIvrhMS5BVHxNkWmQAAAAY"]
[Sat Mar 14 01:16:46.621563 2026] [:error] [pid 47878:tid 47960] [client 4.204.197.4:17352] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/shell.php"] [unique_id "abRGfn8jymmmpr1jcBepAAAAAFU"]
[Sat Mar 14 01:16:47.032431 2026] [:error] [pid 48070:tid 48091] [client 4.204.197.4:17298] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/shell.php"] [unique_id "abRGf0IvrhMS5BVHxNkWoAAAABM"]
[Sat Mar 14 01:16:47.476405 2026] [:error] [pid 47891:tid 47975] [client 4.204.197.4:17326] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lock.php"] [unique_id "abRGf_chNnuMqi7I_WHzyQAAAIk"]
[Sat Mar 14 01:16:47.908531 2026] [:error] [pid 47891:tid 47971] [client 4.204.197.4:17359] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lock.php"] [unique_id "abRGf_chNnuMqi7I_WHzywAAAIU"]
[Sat Mar 14 01:16:48.337103 2026] [:error] [pid 47905:tid 48001] [client 4.204.197.4:17389] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lock.php"] [unique_id "abRGgBaYZayP4o4wpJceTQAAAUg"]
[Sat Mar 14 01:16:48.758440 2026] [:error] [pid 47878:tid 47951] [client 4.204.197.4:17299] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lock.php"] [unique_id "abRGgH8jymmmpr1jcBepBQAAAEw"]
[Sat Mar 14 01:16:49.176954 2026] [:error] [pid 47878:tid 47957] [client 4.204.197.4:17378] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/install.php"] [unique_id "abRGgX8jymmmpr1jcBepCAAAAFI"]
[Sat Mar 14 01:16:49.587027 2026] [:error] [pid 47878:tid 47962] [client 4.204.197.4:17350] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/install.php"] [unique_id "abRGgX8jymmmpr1jcBepCQAAAFc"]
[Sat Mar 14 01:16:50.007679 2026] [:error] [pid 47878:tid 47952] [client 4.204.197.4:17315] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/install.php"] [unique_id "abRGgn8jymmmpr1jcBepDAAAAE0"]
[Sat Mar 14 01:16:50.445974 2026] [:error] [pid 47905:tid 48014] [client 4.204.197.4:17344] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/install.php"] [unique_id "abRGghaYZayP4o4wpJceUAAAAVU"]
[Sat Mar 14 01:16:50.857782 2026] [:error] [pid 48070:tid 48076] [client 4.204.197.4:17387] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin.php"] [unique_id "abRGgkIvrhMS5BVHxNkWpwAAAAQ"]
[Sat Mar 14 01:16:51.266828 2026] [:error] [pid 48070:tid 48085] [client 4.204.197.4:17355] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin.php"] [unique_id "abRGg0IvrhMS5BVHxNkWqgAAAA0"]
[Sat Mar 14 01:16:51.676290 2026] [:error] [pid 48070:tid 48084] [client 4.204.197.4:17394] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin.php"] [unique_id "abRGg0IvrhMS5BVHxNkWqwAAAAw"]
[Sat Mar 14 01:16:52.086095 2026] [:error] [pid 48070:tid 48088] [client 4.204.197.4:17297] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin.php"] [unique_id "abRGhEIvrhMS5BVHxNkWrQAAABA"]
[Sat Mar 14 01:16:52.498914 2026] [:error] [pid 48070:tid 48083] [client 4.204.197.4:17226] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/inputs.php"] [unique_id "abRGhEIvrhMS5BVHxNkWsQAAAAs"]
[Sat Mar 14 01:16:52.916588 2026] [:error] [pid 47891:tid 47974] [client 4.204.197.4:17349] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/inputs.php"] [unique_id "abRGhPchNnuMqi7I_WHz0QAAAIg"]
[Sat Mar 14 01:16:53.334648 2026] [:error] [pid 48070:tid 48087] [client 4.204.197.4:17367] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/inputs.php"] [unique_id "abRGhUIvrhMS5BVHxNkWsgAAAA8"]
[Sat Mar 14 01:16:53.803069 2026] [:error] [pid 47878:tid 47946] [client 4.204.197.4:17356] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/inputs.php"] [unique_id "abRGhX8jymmmpr1jcBepGgAAAEc"]
[Sat Mar 14 01:16:54.215956 2026] [:error] [pid 47905:tid 48002] [client 4.204.197.4:17307] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/test.php"] [unique_id "abRGhhaYZayP4o4wpJceUwAAAUk"]
[Sat Mar 14 01:16:54.639360 2026] [:error] [pid 48070:tid 48095] [client 4.204.197.4:17381] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/test.php"] [unique_id "abRGhkIvrhMS5BVHxNkWswAAABc"]
[Sat Mar 14 01:16:55.058557 2026] [:error] [pid 48070:tid 48086] [client 4.204.197.4:17300] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/test.php"] [unique_id "abRGh0IvrhMS5BVHxNkWtAAAAA4"]
[Sat Mar 14 01:16:55.481670 2026] [:error] [pid 47891:tid 47990] [client 4.204.197.4:17366] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/test.php"] [unique_id "abRGh_chNnuMqi7I_WHz1QAAAJg"]
[Sat Mar 14 01:16:55.917987 2026] [:error] [pid 47891:tid 47989] [client 4.204.197.4:17293] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "abRGh_chNnuMqi7I_WHz1wAAAJc"]
[Sat Mar 14 01:16:56.328568 2026] [:error] [pid 48070:tid 48085] [client 4.204.197.4:17406] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "abRGiEIvrhMS5BVHxNkWtgAAAA0"]
[Sat Mar 14 01:16:56.742774 2026] [:error] [pid 48070:tid 48096] [client 4.204.197.4:17290] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "abRGiEIvrhMS5BVHxNkWuQAAABg"]
[Sat Mar 14 01:16:57.177315 2026] [:error] [pid 48070:tid 48088] [client 4.204.197.4:17358] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "abRGiUIvrhMS5BVHxNkWugAAABA"]
[Sat Mar 14 01:16:57.590530 2026] [:error] [pid 47905:tid 48017] [client 4.204.197.4:17303] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin.php"] [unique_id "abRGiRaYZayP4o4wpJceVQAAAVg"]
[Sat Mar 14 01:16:58.008496 2026] [:error] [pid 47905:tid 48015] [client 4.204.197.4:17281] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin.php"] [unique_id "abRGihaYZayP4o4wpJceVgAAAVY"]
[Sat Mar 14 01:16:58.423596 2026] [:error] [pid 47905:tid 48008] [client 4.204.197.4:17241] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin.php"] [unique_id "abRGihaYZayP4o4wpJceVwAAAU8"]
[Sat Mar 14 01:16:58.838694 2026] [:error] [pid 47891:tid 47968] [client 4.204.197.4:17400] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin.php"] [unique_id "abRGivchNnuMqi7I_WHz2wAAAII"]
[Sat Mar 14 01:16:59.255753 2026] [:error] [pid 47891:tid 47976] [client 4.204.197.4:17228] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/up.php"] [unique_id "abRGi_chNnuMqi7I_WHz3QAAAIo"]
[Sat Mar 14 01:16:59.668450 2026] [:error] [pid 47891:tid 47986] [client 4.204.197.4:17384] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/up.php"] [unique_id "abRGi_chNnuMqi7I_WHz3wAAAJQ"]
[Sat Mar 14 01:17:00.083549 2026] [:error] [pid 48070:tid 48083] [client 4.204.197.4:17361] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/up.php"] [unique_id "abRGjEIvrhMS5BVHxNkWvgAAAAs"]
[Sat Mar 14 01:17:00.497810 2026] [:error] [pid 48070:tid 48072] [client 4.204.197.4:17386] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/up.php"] [unique_id "abRGjEIvrhMS5BVHxNkWvwAAAAA"]
[Sat Mar 14 01:17:00.910317 2026] [:error] [pid 48070:tid 48078] [client 4.204.197.4:17296] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/1.php"] [unique_id "abRGjEIvrhMS5BVHxNkWwAAAAAY"]
[Sat Mar 14 01:17:01.321558 2026] [:error] [pid 47878:tid 47958] [client 4.204.197.4:17369] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/1.php"] [unique_id "abRGjX8jymmmpr1jcBepLgAAAFM"]
[Sat Mar 14 01:17:01.734658 2026] [:error] [pid 47905:tid 48016] [client 4.204.197.4:17328] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/1.php"] [unique_id "abRGjRaYZayP4o4wpJceWwAAAVc"]
[Sat Mar 14 01:17:02.162121 2026] [:error] [pid 47905:tid 48007] [client 4.204.197.4:17292] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/1.php"] [unique_id "abRGjhaYZayP4o4wpJceXAAAAU4"]
[Sat Mar 14 09:34:49.322807 2026] [proxy_fcgi:error] [pid 35801:tid 35820] [client 4.232.83.34:37360] AH01071: Got error 'Primary script unknown'
[Sat Mar 14 09:34:50.888378 2026] [proxy_fcgi:error] [pid 35801:tid 35804] [client 4.232.83.34:37360] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:49:59.402304 2026] [proxy_fcgi:error] [pid 38645:tid 38665] [client 212.30.33.79:37103] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:49:59.808304 2026] [proxy_fcgi:error] [pid 38645:tid 38649] [client 212.30.33.79:37103] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:50:00.229249 2026] [:error] [pid 38645:tid 38657] [client 212.30.33.79:37103] [client 212.30.33.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dwelectservices.com.au"] [uri "/tiny.php"] [unique_id "abYeWBFPHtsDUuVrWDa--QAAAMo"]
[Sun Mar 15 10:50:01.110295 2026] [proxy_fcgi:error] [pid 9995:tid 10016] [client 212.30.33.77:42453] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:50:01.517887 2026] [proxy_fcgi:error] [pid 9995:tid 10021] [client 212.30.33.77:42453] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:50:01.954369 2026] [proxy_fcgi:error] [pid 9995:tid 10000] [client 212.30.33.77:42453] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:50:02.364043 2026] [proxy_fcgi:error] [pid 9995:tid 10021] [client 212.30.33.77:42453] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:50:02.774292 2026] [proxy_fcgi:error] [pid 9995:tid 10016] [client 212.30.33.77:42453] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:50:03.184305 2026] [proxy_fcgi:error] [pid 9995:tid 10013] [client 212.30.33.77:42453] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:50:03.596510 2026] [proxy_fcgi:error] [pid 9995:tid 10001] [client 212.30.33.77:42453] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:50:04.020618 2026] [proxy_fcgi:error] [pid 9995:tid 10010] [client 212.30.33.77:42453] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:50:04.425279 2026] [proxy_fcgi:error] [pid 9995:tid 10000] [client 212.30.33.77:42453] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:50:04.834306 2026] [proxy_fcgi:error] [pid 9995:tid 10003] [client 212.30.33.77:42453] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:50:05.251990 2026] [proxy_fcgi:error] [pid 9995:tid 10016] [client 212.30.33.77:42453] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:50:05.660250 2026] [proxy_fcgi:error] [pid 9995:tid 10019] [client 212.30.33.77:42453] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:50:06.074470 2026] [proxy_fcgi:error] [pid 9995:tid 10010] [client 212.30.33.77:42453] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:50:06.498250 2026] [proxy_fcgi:error] [pid 9995:tid 10010] [client 212.30.33.77:42453] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:50:06.919310 2026] [proxy_fcgi:error] [pid 9995:tid 10020] [client 212.30.33.77:42453] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:50:07.340308 2026] [proxy_fcgi:error] [pid 9995:tid 9998] [client 212.30.33.77:42453] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:50:07.755288 2026] [proxy_fcgi:error] [pid 9995:tid 10004] [client 212.30.33.77:42453] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:50:08.173297 2026] [proxy_fcgi:error] [pid 9995:tid 9998] [client 212.30.33.77:42453] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:50:08.583510 2026] [:error] [pid 9995:tid 10013] [client 212.30.33.77:42453] File does not exist: /home/dwelects/public_html/warm.PhP
[Sun Mar 15 10:50:08.989457 2026] [proxy_fcgi:error] [pid 9995:tid 10014] [client 212.30.33.77:42453] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:50:09.397727 2026] [:error] [pid 9995:tid 9999] [client 212.30.33.77:42453] File does not exist: /home/dwelects/public_html/worm.PhP
[Sun Mar 15 10:50:09.819347 2026] [proxy_fcgi:error] [pid 9995:tid 10008] [client 212.30.33.77:42453] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:50:10.239719 2026] [proxy_fcgi:error] [pid 9995:tid 10011] [client 212.30.33.77:42453] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:50:10.691295 2026] [proxy_fcgi:error] [pid 9995:tid 10005] [client 212.30.33.77:42453] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:50:11.098294 2026] [proxy_fcgi:error] [pid 9995:tid 10013] [client 212.30.33.77:42453] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:50:11.521573 2026] [proxy_fcgi:error] [pid 9995:tid 10011] [client 212.30.33.77:42453] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:50:11.930309 2026] [proxy_fcgi:error] [pid 9995:tid 10013] [client 212.30.33.77:42453] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:50:12.338291 2026] [proxy_fcgi:error] [pid 9995:tid 10000] [client 212.30.33.77:42453] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:50:12.746295 2026] [proxy_fcgi:error] [pid 9995:tid 9999] [client 212.30.33.77:42453] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:50:13.174900 2026] [proxy_fcgi:error] [pid 9995:tid 10022] [client 212.30.33.77:42453] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:50:13.587303 2026] [proxy_fcgi:error] [pid 9995:tid 10000] [client 212.30.33.77:42453] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:50:14.009585 2026] [proxy_fcgi:error] [pid 9995:tid 10003] [client 212.30.33.77:42453] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:50:14.428282 2026] [proxy_fcgi:error] [pid 9995:tid 10012] [client 212.30.33.77:42453] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:50:14.832856 2026] [:error] [pid 9995:tid 10007] [client 212.30.33.77:42453] [client 212.30.33.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dwelectservices.com.au"] [uri "/tinyfilemanager.php"] [unique_id "abYeZga8xkcaSmgTbwhAZQAAAQk"]
[Sun Mar 15 10:50:15.680310 2026] [proxy_fcgi:error] [pid 42570:tid 42576] [client 212.30.33.79:45081] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:50:16.105285 2026] [proxy_fcgi:error] [pid 42570:tid 42591] [client 212.30.33.79:45081] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:50:16.540283 2026] [proxy_fcgi:error] [pid 42570:tid 42582] [client 212.30.33.79:45081] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:50:16.959313 2026] [proxy_fcgi:error] [pid 42570:tid 42580] [client 212.30.33.79:45081] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:50:17.388127 2026] [proxy_fcgi:error] [pid 42570:tid 42589] [client 212.30.33.79:45081] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:50:17.831368 2026] [proxy_fcgi:error] [pid 42570:tid 42586] [client 212.30.33.79:45081] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:50:18.245288 2026] [proxy_fcgi:error] [pid 42570:tid 42575] [client 212.30.33.79:45081] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:50:18.672069 2026] [proxy_fcgi:error] [pid 42570:tid 42593] [client 212.30.33.79:45081] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:50:19.091348 2026] [proxy_fcgi:error] [pid 42570:tid 42580] [client 212.30.33.79:45081] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:50:19.529290 2026] [proxy_fcgi:error] [pid 42570:tid 42597] [client 212.30.33.79:45081] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:50:19.944094 2026] [proxy_fcgi:error] [pid 42570:tid 42576] [client 212.30.33.79:45081] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:50:20.355395 2026] [proxy_fcgi:error] [pid 42570:tid 42584] [client 212.30.33.79:45081] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:50:20.762667 2026] [proxy_fcgi:error] [pid 42570:tid 42591] [client 212.30.33.79:45081] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:50:21.178286 2026] [proxy_fcgi:error] [pid 42570:tid 42589] [client 212.30.33.79:45081] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:50:21.584318 2026] [proxy_fcgi:error] [pid 42570:tid 42593] [client 212.30.33.79:45081] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:50:22.016294 2026] [proxy_fcgi:error] [pid 42570:tid 42590] [client 212.30.33.79:45081] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:50:22.429285 2026] [proxy_fcgi:error] [pid 42570:tid 42576] [client 212.30.33.79:45081] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:50:22.843302 2026] [proxy_fcgi:error] [pid 42570:tid 42594] [client 212.30.33.79:45081] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:50:23.257304 2026] [proxy_fcgi:error] [pid 42570:tid 42589] [client 212.30.33.79:45081] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:50:23.680007 2026] [proxy_fcgi:error] [pid 42570:tid 42586] [client 212.30.33.79:45081] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:50:24.108304 2026] [proxy_fcgi:error] [pid 42570:tid 42580] [client 212.30.33.79:45081] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:50:24.933284 2026] [proxy_fcgi:error] [pid 42570:tid 42596] [client 212.30.33.79:45081] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:50:25.357087 2026] [proxy_fcgi:error] [pid 42570:tid 42589] [client 212.30.33.79:45081] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:50:25.776326 2026] [proxy_fcgi:error] [pid 42570:tid 42588] [client 212.30.33.79:45081] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:50:26.186299 2026] [proxy_fcgi:error] [pid 42570:tid 42580] [client 212.30.33.79:45081] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:50:26.598286 2026] [proxy_fcgi:error] [pid 42570:tid 42588] [client 212.30.33.79:45081] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:50:27.019309 2026] [proxy_fcgi:error] [pid 42570:tid 42579] [client 212.30.33.79:45081] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:50:27.461302 2026] [proxy_fcgi:error] [pid 42570:tid 42597] [client 212.30.33.79:45081] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:50:28.283283 2026] [proxy_fcgi:error] [pid 42570:tid 42580] [client 212.30.33.79:45081] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:50:28.696368 2026] [proxy_fcgi:error] [pid 42570:tid 42587] [client 212.30.33.79:45081] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:50:29.108957 2026] [proxy_fcgi:error] [pid 42570:tid 42580] [client 212.30.33.79:45081] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:50:29.522345 2026] [proxy_fcgi:error] [pid 42570:tid 42580] [client 212.30.33.79:45081] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:50:29.935291 2026] [proxy_fcgi:error] [pid 42570:tid 42594] [client 212.30.33.79:45081] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:50:30.350301 2026] [proxy_fcgi:error] [pid 42570:tid 42583] [client 212.30.33.79:45081] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:50:30.762922 2026] [proxy_fcgi:error] [pid 42570:tid 42582] [client 212.30.33.79:45081] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:50:31.174281 2026] [proxy_fcgi:error] [pid 42570:tid 42585] [client 212.30.33.79:45081] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:50:31.585304 2026] [proxy_fcgi:error] [pid 42570:tid 42583] [client 212.30.33.79:45081] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:50:31.995313 2026] [proxy_fcgi:error] [pid 42570:tid 42590] [client 212.30.33.79:45081] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:50:32.406538 2026] [proxy_fcgi:error] [pid 42570:tid 42588] [client 212.30.33.79:45081] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:50:32.815937 2026] [:error] [pid 42570:tid 42588] [client 212.30.33.79:45081] [client 212.30.33.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dwelectservices.com.au"] [uri "/fm.php"] [unique_id "abYeeMIUXZJLmk_gYCOxvAAAAY8"]
[Sun Mar 15 10:50:33.633312 2026] [proxy_fcgi:error] [pid 50986:tid 51011] [client 212.30.33.100:24449] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:50:34.042398 2026] [proxy_fcgi:error] [pid 50986:tid 50997] [client 212.30.33.100:24449] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:50:34.455290 2026] [proxy_fcgi:error] [pid 50986:tid 50992] [client 212.30.33.100:24449] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:50:34.872290 2026] [proxy_fcgi:error] [pid 50986:tid 51012] [client 212.30.33.100:24449] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:50:35.293288 2026] [proxy_fcgi:error] [pid 50986:tid 50997] [client 212.30.33.100:24449] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:50:35.705287 2026] [proxy_fcgi:error] [pid 50986:tid 50998] [client 212.30.33.100:24449] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:50:36.130564 2026] [proxy_fcgi:error] [pid 50986:tid 51005] [client 212.30.33.100:24449] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:50:36.548288 2026] [proxy_fcgi:error] [pid 50986:tid 50997] [client 212.30.33.100:24449] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:50:37.383293 2026] [proxy_fcgi:error] [pid 50986:tid 50997] [client 212.30.33.100:24449] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:50:38.488308 2026] [proxy_fcgi:error] [pid 50986:tid 51005] [client 212.30.33.100:24449] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:50:38.907302 2026] [proxy_fcgi:error] [pid 50986:tid 51002] [client 212.30.33.100:24449] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:50:39.346339 2026] [proxy_fcgi:error] [pid 50986:tid 50992] [client 212.30.33.100:24449] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:50:39.763642 2026] [proxy_fcgi:error] [pid 50986:tid 51000] [client 212.30.33.100:24449] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:50:40.179131 2026] [proxy_fcgi:error] [pid 50986:tid 51011] [client 212.30.33.100:24449] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:50:40.591511 2026] [proxy_fcgi:error] [pid 50986:tid 51005] [client 212.30.33.100:24449] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:50:41.006887 2026] [proxy_fcgi:error] [pid 50986:tid 51012] [client 212.30.33.100:24449] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:50:41.432477 2026] [proxy_fcgi:error] [pid 50986:tid 50994] [client 212.30.33.100:24449] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:50:42.251316 2026] [:error] [pid 50986:tid 51002] [client 212.30.33.100:24449] [client 212.30.33.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "abYegiknK4c779bcQqH-WAAAAU0"]
[Sun Mar 15 10:50:43.065736 2026] [:error] [pid 38536:tid 38577] [client 212.30.33.85:30389] [client 212.30.33.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "abYeg_pTEqkVJ0rBEWvXWQAAABg"]
[Sun Mar 15 10:50:46.409042 2026] [:error] [pid 9995:tid 10017] [client 212.30.33.57:24585] [client 212.30.33.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "abYehga8xkcaSmgTbwhB3QAAARM"]
[Sun Mar 15 10:50:47.660028 2026] [:error] [pid 38541:tid 38637] [client 212.30.33.53:55539] [client 212.30.33.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/sitemaps/chosen.php"] [unique_id "abYeh3uOpex8jIO0jt5KeAAAAJg"]
[Sun Mar 15 10:50:49.285084 2026] [:error] [pid 50986:tid 51011] [client 212.30.33.70:35119] [client 212.30.33.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "abYeiSknK4c779bcQqH-rAAAAVY"]
[Sun Mar 15 10:50:52.624502 2026] [:error] [pid 42570:tid 42589] [client 212.30.33.57:51793] [client 212.30.33.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "abYejMIUXZJLmk_gYCOzsQAAAZA"]
[Sun Mar 15 10:50:54.248353 2026] [proxy_fcgi:error] [pid 38541:tid 38619] [client 212.30.33.60:21791] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:50:54.649140 2026] [:error] [pid 38541:tid 38615] [client 212.30.33.60:21791] [client 212.30.33.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/chosen.php"] [unique_id "abYejnuOpex8jIO0jt5K2AAAAII"]
[Sun Mar 15 10:50:55.886907 2026] [:error] [pid 50986:tid 51006] [client 212.30.33.225:37807] [client 212.30.33.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "abYejyknK4c779bcQqH-5AAAAVE"]
[Sun Mar 15 10:50:57.544193 2026] [:error] [pid 42570:tid 42577] [client 212.30.33.81:48563] [client 212.30.33.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "abYekcIUXZJLmk_gYCO0CgAAAYQ"]
[Sun Mar 15 10:50:59.187870 2026] [:error] [pid 38541:tid 38616] [client 212.30.33.52:57587] [client 212.30.33.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "abYek3uOpex8jIO0jt5LHQAAAIM"]
[Sun Mar 15 10:50:59.995081 2026] [:error] [pid 38540:tid 38609] [client 212.30.33.166:49223] [client 212.30.33.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/style-engine/dedi1.php"] [unique_id "abYek18bnHsJ1dE90bIzswAAAFc"]
[Sun Mar 15 10:51:01.226169 2026] [:error] [pid 38536:tid 38574] [client 212.30.33.54:34155] [client 212.30.33.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/block-bindings/about.php"] [unique_id "abYelfpTEqkVJ0rBEWvYQwAAABU"]
[Sun Mar 15 10:51:04.039546 2026] [:error] [pid 50986:tid 51013] [client 212.30.33.75:27643] [client 212.30.33.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "abYemCknK4c779bcQqH_OwAAAVg"]
[Sun Mar 15 10:51:04.845091 2026] [:error] [pid 9995:tid 10010] [client 212.30.33.85:62577] [client 212.30.33.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "abYemAa8xkcaSmgTbwhC3QAAAQw"]
[Sun Mar 15 10:51:05.650619 2026] [:error] [pid 38536:tid 38571] [client 212.30.33.74:20565] [client 212.30.33.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "abYemfpTEqkVJ0rBEWvYdgAAABI"]
[Sun Mar 15 10:51:07.313888 2026] [:error] [pid 38536:tid 38556] [client 212.30.33.75:29717] [client 212.30.33.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "abYem_pTEqkVJ0rBEWvYjAAAAAM"]
[Sun Mar 15 10:51:08.127741 2026] [:error] [pid 50986:tid 50997] [client 212.30.33.60:38195] [client 212.30.33.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "abYenCknK4c779bcQqH_XgAAAUg"]
[Sun Mar 15 10:51:08.952092 2026] [:error] [pid 38540:tid 38587] [client 212.30.33.70:51481] [client 212.30.33.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "abYenF8bnHsJ1dE90bI0NQAAAEE"]
[Sun Mar 15 10:51:09.762907 2026] [:error] [pid 50986:tid 51005] [client 212.30.33.83:61109] [client 212.30.33.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "abYenSknK4c779bcQqH_bwAAAVA"]
[Sun Mar 15 10:51:10.567403 2026] [:error] [pid 42570:tid 42597] [client 212.30.33.59:54855] [client 212.30.33.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "abYensIUXZJLmk_gYCO07QAAAZg"]
[Sun Mar 15 10:51:11.819163 2026] [:error] [pid 38536:tid 38570] [client 212.30.33.213:49691] [client 212.30.33.213] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "abYen_pTEqkVJ0rBEWvYwQAAABE"]
[Sun Mar 15 10:51:12.686443 2026] [:error] [pid 38536:tid 38570] [client 212.30.33.213:22053] [client 212.30.33.213] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "abYeoPpTEqkVJ0rBEWvYzAAAABE"]
[Sun Mar 15 10:51:13.489795 2026] [:error] [pid 42570:tid 42576] [client 212.30.33.89:59845] [client 212.30.33.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "abYeocIUXZJLmk_gYCO1LAAAAYM"]
[Sun Mar 15 10:51:14.727111 2026] [:error] [pid 38536:tid 38556] [client 212.30.33.82:57081] [client 212.30.33.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "abYeovpTEqkVJ0rBEWvY6AAAAAM"]
[Sun Mar 15 10:51:16.372638 2026] [:error] [pid 38536:tid 38556] [client 212.30.33.87:27977] [client 212.30.33.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "abYepPpTEqkVJ0rBEWvY-wAAAAM"]
[Sun Mar 15 10:51:17.202076 2026] [:error] [pid 38536:tid 38560] [client 212.30.33.62:48523] [client 212.30.33.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "abYepfpTEqkVJ0rBEWvZAwAAAAc"]
[Sun Mar 15 10:51:20.534556 2026] [:error] [pid 42570:tid 42589] [client 212.30.33.59:63799] [client 212.30.33.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "abYeqMIUXZJLmk_gYCO1qQAAAZA"]
[Sun Mar 15 10:51:23.827925 2026] [:error] [pid 38541:tid 38629] [client 212.30.33.179:63321] [client 212.30.33.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/colour.php"] [unique_id "abYeq3uOpex8jIO0jt5MqwAAAJA"]
[Sun Mar 15 10:51:24.667152 2026] [:error] [pid 38541:tid 38633] [client 212.30.33.85:63533] [client 212.30.33.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "abYerHuOpex8jIO0jt5MuAAAAJQ"]
[Sun Mar 15 10:51:25.473901 2026] [:error] [pid 50986:tid 51000] [client 212.30.33.166:36425] [client 212.30.33.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/widgets/class-wp-wolf-widget.php"] [unique_id "abYerSknK4c779bcQqEAJgAAAUs"]
[Sun Mar 15 10:51:26.314610 2026] [proxy_fcgi:error] [pid 38541:tid 38635] [client 212.30.33.73:26467] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:51:28.373176 2026] [:error] [pid 38541:tid 38628] [client 212.30.33.73:26467] [client 212.30.33.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/widgets/class-t.api.php"] [unique_id "abYesHuOpex8jIO0jt5NAAAAAI8"]
[Sun Mar 15 10:51:29.984836 2026] [:error] [pid 42570:tid 42590] [client 212.30.33.71:39013] [client 212.30.33.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "abYescIUXZJLmk_gYCO2TAAAAZE"]
[Sun Mar 15 10:51:31.601003 2026] [:error] [pid 9995:tid 10014] [client 212.30.33.88:35601] [client 212.30.33.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "abYeswa8xkcaSmgTbwhEUgAAARA"]
[Sun Mar 15 10:51:32.843571 2026] [:error] [pid 38645:tid 38652] [client 212.30.33.52:31811] [client 212.30.33.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/fonts/about.php"] [unique_id "abYetBFPHtsDUuVrWDbDPAAAAMU"]
[Sun Mar 15 10:51:33.652666 2026] [proxy_fcgi:error] [pid 50986:tid 51005] [client 212.30.33.190:53955] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:51:35.279520 2026] [:error] [pid 50986:tid 51004] [client 212.30.33.190:53955] [client 212.30.33.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "abYetyknK4c779bcQqEAvQAAAU8"]
[Sun Mar 15 10:51:36.075302 2026] [:error] [pid 38645:tid 38654] [client 212.30.33.84:27023] [client 212.30.33.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/IXR/security.php"] [unique_id "abYeuBFPHtsDUuVrWDbDWgAAAMc"]
[Sun Mar 15 10:51:37.700329 2026] [:error] [pid 38541:tid 38618] [client 212.30.33.213:47509] [client 212.30.33.213] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "abYeuXuOpex8jIO0jt5NegAAAIU"]
[Sun Mar 15 10:51:38.509436 2026] [:error] [pid 38536:tid 38560] [client 212.30.33.65:43015] [client 212.30.33.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "abYeuvpTEqkVJ0rBEWvZ_AAAAAc"]
[Sun Mar 15 10:51:40.578289 2026] [proxy_fcgi:error] [pid 38645:tid 38666] [client 212.30.33.89:59061] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:51:41.851449 2026] [proxy_fcgi:error] [pid 38645:tid 38660] [client 212.30.33.89:59061] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:51:42.255935 2026] [:error] [pid 38645:tid 38654] [client 212.30.33.89:59061] [client 212.30.33.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Requests/library/wp-login.php"] [unique_id "abYevhFPHtsDUuVrWDbDrQAAAMc"]
[Sun Mar 15 10:51:43.089004 2026] [:error] [pid 42570:tid 42574] [client 212.30.33.87:40637] [client 212.30.33.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "abYev8IUXZJLmk_gYCO27gAAAYE"]
[Sun Mar 15 10:51:44.710474 2026] [:error] [pid 38645:tid 38664] [client 212.30.33.91:47371] [client 212.30.33.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "abYewBFPHtsDUuVrWDbDzQAAANE"]
[Sun Mar 15 10:51:45.514780 2026] [:error] [pid 38536:tid 38558] [client 212.30.33.94:34887] [client 212.30.33.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/file.php"] [unique_id "abYewfpTEqkVJ0rBEWvaWgAAAAU"]
[Sun Mar 15 10:51:47.961527 2026] [:error] [pid 50986:tid 51012] [client 212.30.33.77:31233] [client 212.30.33.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/certificates/index.php"] [unique_id "abYewyknK4c779bcQqEBiAAAAVc"]
[Sun Mar 15 10:51:49.209438 2026] [:error] [pid 9995:tid 10001] [client 212.30.33.100:56243] [client 212.30.33.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "abYexQa8xkcaSmgTbwhFHgAAAQM"]
[Sun Mar 15 10:51:50.847400 2026] [:error] [pid 50986:tid 50994] [client 212.30.33.58:49113] [client 212.30.33.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/plugins.php"] [unique_id "abYexiknK4c779bcQqEB1wAAAUY"]
[Sun Mar 15 10:51:51.667632 2026] [:error] [pid 9995:tid 10009] [client 212.30.33.91:57767] [client 212.30.33.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "abYexwa8xkcaSmgTbwhFKwAAAQs"]
[Sun Mar 15 10:51:52.478954 2026] [:error] [pid 38645:tid 38655] [client 212.30.33.78:28835] [client 212.30.33.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "abYeyBFPHtsDUuVrWDbEQgAAAMg"]
[Sun Mar 15 10:51:53.325191 2026] [:error] [pid 38541:tid 38616] [client 212.30.33.52:41611] [client 212.30.33.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "abYeyXuOpex8jIO0jt5OFwAAAIM"]
[Sun Mar 15 10:51:55.057162 2026] [:error] [pid 38540:tid 38595] [client 212.30.33.71:23031] [client 212.30.33.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "abYey18bnHsJ1dE90bI2kgAAAEk"]
[Sun Mar 15 10:51:56.703219 2026] [proxy_fcgi:error] [pid 50986:tid 50997] [client 212.30.33.70:47723] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:51:58.758137 2026] [:error] [pid 50986:tid 51011] [client 212.30.33.70:47723] [client 212.30.33.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "abYeziknK4c779bcQqECKQAAAVY"]
[Sun Mar 15 10:52:01.703458 2026] [:error] [pid 9995:tid 10020] [client 212.30.33.52:47555] [client 212.30.33.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "abYe0Qa8xkcaSmgTbwhFiwAAARY"]
[Sun Mar 15 10:52:02.510901 2026] [:error] [pid 50986:tid 51004] [client 212.30.33.52:40043] [client 212.30.33.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/as.php"] [unique_id "abYe0iknK4c779bcQqECRwAAAU8"]
[Sun Mar 15 10:52:03.723999 2026] [:error] [pid 50986:tid 50994] [client 212.30.33.59:37799] [client 212.30.33.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "abYe0yknK4c779bcQqECYAAAAUY"]
[Sun Mar 15 10:52:05.793285 2026] [proxy_fcgi:error] [pid 38541:tid 38625] [client 212.30.33.164:29961] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:52:06.621478 2026] [:error] [pid 38541:tid 38618] [client 212.30.33.164:29961] [client 212.30.33.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/bk/index.php"] [unique_id "abYe1nuOpex8jIO0jt5OlgAAAIU"]
[Sun Mar 15 10:52:07.873315 2026] [:error] [pid 45801:tid 45822] [client 212.30.33.55:40133] [client 212.30.33.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "abYe14aKHL9CTKoVzTDD4QAAAdM"]
[Sun Mar 15 10:52:09.088020 2026] [:error] [pid 50986:tid 50988] [client 212.30.33.57:44057] [client 212.30.33.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "abYe2SknK4c779bcQqECkwAAAUA"]
[Sun Mar 15 10:52:10.299458 2026] [:error] [pid 38645:tid 38648] [client 212.30.33.55:27503] [client 212.30.33.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "abYe2hFPHtsDUuVrWDbFOQAAAME"]
[Sun Mar 15 10:52:11.941247 2026] [:error] [pid 38540:tid 38606] [client 212.30.33.76:31617] [client 212.30.33.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "abYe218bnHsJ1dE90bI3hAAAAFQ"]
[Sun Mar 15 10:52:12.742851 2026] [:error] [pid 38645:tid 38664] [client 212.30.33.89:53363] [client 212.30.33.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "abYe3BFPHtsDUuVrWDbFYQAAANE"]
[Sun Mar 15 10:52:15.219704 2026] [:error] [pid 9995:tid 10017] [client 212.30.33.54:42071] [client 212.30.33.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/media/index.php"] [unique_id "abYe3wa8xkcaSmgTbwhGIAAAARM"]
[Sun Mar 15 10:52:17.657092 2026] [:error] [pid 9995:tid 10005] [client 212.30.33.73:32691] [client 212.30.33.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/item.php"] [unique_id "abYe4Qa8xkcaSmgTbwhGQAAAAQc"]
[Sun Mar 15 10:52:18.479757 2026] [proxy_fcgi:error] [pid 38645:tid 38666] [client 212.30.33.57:22459] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:52:21.487307 2026] [proxy_fcgi:error] [pid 38541:tid 38624] [client 212.30.33.228:47845] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:52:22.713930 2026] [:error] [pid 38541:tid 38614] [client 212.30.33.228:47845] [client 212.30.33.228] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/rk2.php"] [unique_id "abYe5nuOpex8jIO0jt5PVQAAAIE"]
[Sun Mar 15 10:52:23.519153 2026] [:error] [pid 38645:tid 38669] [client 212.30.33.86:36909] [client 212.30.33.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/ln/wp-login.php"] [unique_id "abYe5xFPHtsDUuVrWDbFrAAAANY"]
[Sun Mar 15 10:52:24.727087 2026] [:error] [pid 42570:tid 42593] [client 212.30.33.60:34669] [client 212.30.33.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "abYe6MIUXZJLmk_gYCO4rwAAAZQ"]
[Sun Mar 15 10:52:25.535125 2026] [:error] [pid 9995:tid 10016] [client 212.30.33.228:46327] [client 212.30.33.228] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "abYe6Qa8xkcaSmgTbwhGrgAAARI"]
[Sun Mar 15 10:52:26.753186 2026] [:error] [pid 45801:tid 45809] [client 212.30.33.164:45881] [client 212.30.33.164] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.33.164, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/js/wp-login.php"] [unique_id "abYe6oaKHL9CTKoVzTDElAAAAcY"]
[Sun Mar 15 10:52:27.184286 2026] [proxy_fcgi:error] [pid 45801:tid 45824] [client 212.30.33.164:45881] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:52:29.656128 2026] [:error] [pid 45801:tid 45817] [client 212.30.33.164:45881] [client 212.30.33.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "abYe7YaKHL9CTKoVzTDEqgAAAc4"]
[Sun Mar 15 10:52:30.910286 2026] [proxy_fcgi:error] [pid 50986:tid 51000] [client 212.30.33.79:28167] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:52:31.310267 2026] [:error] [pid 50986:tid 50992] [client 212.30.33.79:28167] [client 212.30.33.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/include.php"] [unique_id "abYe7yknK4c779bcQqEDGQAAAUQ"]
[Sun Mar 15 10:52:33.001407 2026] [:error] [pid 45974:tid 45989] [client 212.30.33.99:52823] [client 212.30.33.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/husky.php"] [unique_id "abYe8RWn4R6u72SegehCXgAAAg0"]
[Sun Mar 15 10:52:33.808174 2026] [:error] [pid 38645:tid 38647] [client 212.30.33.63:28335] [client 212.30.33.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "abYe8RFPHtsDUuVrWDbGDgAAAMA"]
[Sun Mar 15 10:52:34.623626 2026] [:error] [pid 38645:tid 38671] [client 212.30.33.60:23193] [client 212.30.33.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "abYe8hFPHtsDUuVrWDbGFAAAANg"]
[Sun Mar 15 10:52:36.534087 2026] [proxy_fcgi:error] [pid 38541:tid 38614] [client 212.30.33.103:43691] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:52:38.174910 2026] [:error] [pid 38541:tid 38623] [client 212.30.33.103:43691] [client 212.30.33.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/imgareaselect/wp-login.php"] [unique_id "abYe9nuOpex8jIO0jt5P4gAAAIo"]
[Sun Mar 15 10:52:38.983063 2026] [:error] [pid 9995:tid 10011] [client 212.30.33.80:38819] [client 212.30.33.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/click.php"] [unique_id "abYe9ga8xkcaSmgTbwhHPAAAAQ0"]
[Sun Mar 15 10:52:40.195313 2026] [proxy_fcgi:error] [pid 50986:tid 51010] [client 212.30.33.87:48191] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:52:40.599395 2026] [:error] [pid 50986:tid 51003] [client 212.30.33.87:48191] [client 212.30.33.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/install.php"] [unique_id "abYe-CknK4c779bcQqEDeQAAAU4"]
[Sun Mar 15 10:52:42.228056 2026] [:error] [pid 38540:tid 38590] [client 212.30.33.65:22483] [client 212.30.33.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/certificates/admin.php"] [unique_id "abYe-l8bnHsJ1dE90bI4aQAAAEQ"]
[Sun Mar 15 10:52:43.444611 2026] [:error] [pid 42570:tid 42590] [client 212.30.33.78:56793] [client 212.30.33.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/block-bindings/admin.php"] [unique_id "abYe-8IUXZJLmk_gYCO5VQAAAZE"]
[Sun Mar 15 10:52:44.271350 2026] [proxy_fcgi:error] [pid 38536:tid 38559] [client 212.30.33.79:57957] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:52:44.679294 2026] [:error] [pid 38536:tid 38577] [client 212.30.33.79:57957] [client 212.30.33.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "abYe_PpTEqkVJ0rBEWvc_QAAABg"]
[Sun Mar 15 10:52:46.506284 2026] [proxy_fcgi:error] [pid 50986:tid 51003] [client 212.30.33.74:62297] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:52:46.912406 2026] [:error] [pid 50986:tid 51008] [client 212.30.33.74:62297] [client 212.30.33.74] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.33.74, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-login.php"] [unique_id "abYe_iknK4c779bcQqEDoAAAAVM"]
[Sun Mar 15 10:52:46.925298 2026] [proxy_fcgi:error] [pid 50986:tid 51008] [client 212.30.33.74:62297] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:52:47.327064 2026] [:error] [pid 50986:tid 51007] [client 212.30.33.74:62297] [client 212.30.33.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/index.php"] [unique_id "abYe_yknK4c779bcQqEDowAAAVI"]
[Sun Mar 15 10:52:48.952508 2026] [:error] [pid 50986:tid 51009] [client 212.30.33.80:55301] [client 212.30.33.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "abYfACknK4c779bcQqEDvgAAAVQ"]
[Sun Mar 15 10:52:50.586194 2026] [:error] [pid 38536:tid 38574] [client 212.30.33.58:37709] [client 212.30.33.58] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.33.58, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "abYfAvpTEqkVJ0rBEWvdOAAAABU"]
[Sun Mar 15 10:52:51.818761 2026] [:error] [pid 38536:tid 38559] [client 212.30.33.58:37709] [client 212.30.33.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "abYfA_pTEqkVJ0rBEWvdTQAAAAY"]
[Sun Mar 15 10:52:52.615160 2026] [:error] [pid 45801:tid 45808] [client 212.30.33.92:40555] [client 212.30.33.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/admin.php"] [unique_id "abYfBIaKHL9CTKoVzTDFkAAAAcU"]
[Sun Mar 15 10:52:53.422957 2026] [:error] [pid 50986:tid 50993] [client 212.30.33.52:61703] [client 212.30.33.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "abYfBSknK4c779bcQqED3AAAAUU"]
[Sun Mar 15 10:52:54.254087 2026] [:error] [pid 9995:tid 10010] [client 212.30.33.213:30779] [client 212.30.33.213] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.33.213, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "abYfBga8xkcaSmgTbwhHywAAAQw"]
[Sun Mar 15 10:52:55.919301 2026] [proxy_fcgi:error] [pid 9995:tid 10022] [client 212.30.33.213:30779] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:52:56.755301 2026] [proxy_fcgi:error] [pid 9995:tid 9999] [client 212.30.33.213:30779] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:52:57.167630 2026] [:error] [pid 9995:tid 10008] [client 212.30.33.213:30779] [client 212.30.33.213] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "abYfCQa8xkcaSmgTbwhH4wAAAQo"]
[Sun Mar 15 10:52:57.995291 2026] [proxy_fcgi:error] [pid 9995:tid 10021] [client 212.30.33.52:63513] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:52:58.809544 2026] [proxy_fcgi:error] [pid 9995:tid 10016] [client 212.30.33.52:63513] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:52:59.616638 2026] [:error] [pid 9995:tid 10012] [client 212.30.33.52:63513] [client 212.30.33.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "abYfCwa8xkcaSmgTbwhH9gAAAQ4"]
[Sun Mar 15 10:53:00.424578 2026] [proxy_fcgi:error] [pid 38541:tid 38636] [client 212.30.33.83:35427] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:53:01.252192 2026] [:error] [pid 38541:tid 38618] [client 212.30.33.83:35427] [client 212.30.33.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "abYfDXuOpex8jIO0jt5QngAAAIU"]
[Sun Mar 15 10:53:02.473290 2026] [proxy_fcgi:error] [pid 9995:tid 10015] [client 212.30.33.101:36937] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:53:02.891413 2026] [proxy_fcgi:error] [pid 9995:tid 10010] [client 212.30.33.101:36937] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:53:03.293763 2026] [:error] [pid 9995:tid 10000] [client 212.30.33.101:36937] [client 212.30.33.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "abYfDwa8xkcaSmgTbwhIDgAAAQI"]
[Sun Mar 15 10:53:04.109561 2026] [:error] [pid 45801:tid 45826] [client 212.30.33.51:32159] [client 212.30.33.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "abYfEIaKHL9CTKoVzTDF8QAAAdc"]
[Sun Mar 15 10:53:04.918155 2026] [:error] [pid 38645:tid 38653] [client 212.30.33.87:56979] [client 212.30.33.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "abYfEBFPHtsDUuVrWDbHEQAAAMY"]
[Sun Mar 15 10:53:06.161450 2026] [:error] [pid 50986:tid 51012] [client 212.30.33.94:46031] [client 212.30.33.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "abYfEiknK4c779bcQqEEVwAAAVc"]
[Sun Mar 15 10:53:06.978592 2026] [:error] [pid 38541:tid 38620] [client 212.30.33.61:28389] [client 212.30.33.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/edit.php"] [unique_id "abYfEnuOpex8jIO0jt5QxgAAAIc"]
[Sun Mar 15 10:53:09.903336 2026] [proxy_fcgi:error] [pid 45974:tid 45976] [client 212.30.33.68:36561] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:53:10.320606 2026] [:error] [pid 45974:tid 45982] [client 212.30.33.68:36561] [client 212.30.33.68] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.33.68, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "abYfFhWn4R6u72SegehDnQAAAgY"]
[Sun Mar 15 10:53:10.781155 2026] [proxy_fcgi:error] [pid 45974:tid 45995] [client 212.30.33.68:36561] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:53:11.191326 2026] [:error] [pid 45974:tid 45978] [client 212.30.33.68:36561] [client 212.30.33.68] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.33.68, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/wp-login.php"] [unique_id "abYfFxWn4R6u72SegehDowAAAgI"]
[Sun Mar 15 10:53:11.617633 2026] [:error] [pid 45974:tid 45984] [client 212.30.33.68:36561] [client 212.30.33.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "abYfFxWn4R6u72SegehDqgAAAgg"]
[Sun Mar 15 10:53:12.452610 2026] [proxy_fcgi:error] [pid 45974:tid 45983] [client 212.30.33.166:34733] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:53:12.862021 2026] [:error] [pid 45974:tid 45995] [client 212.30.33.166:34733] [client 212.30.33.166] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.33.166, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "abYfGBWn4R6u72SegehDwgAAAhM"]
[Sun Mar 15 10:53:12.869297 2026] [proxy_fcgi:error] [pid 45974:tid 45995] [client 212.30.33.166:34733] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:53:14.181296 2026] [proxy_fcgi:error] [pid 45974:tid 45993] [client 212.30.33.166:34733] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:53:14.599135 2026] [:error] [pid 45974:tid 45996] [client 212.30.33.166:34733] [client 212.30.33.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "abYfGhWn4R6u72SegehD3wAAAhQ"]
[Sun Mar 15 10:53:15.411344 2026] [:error] [pid 9995:tid 10010] [client 212.30.33.190:55151] [client 212.30.33.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/ID/wp-conflg.php"] [unique_id "abYfGwa8xkcaSmgTbwhIXQAAAQw"]
[Sun Mar 15 10:53:16.631416 2026] [:error] [pid 45974:tid 45997] [client 212.30.33.67:57869] [client 212.30.33.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/ID/wp-work.php"] [unique_id "abYfHBWn4R6u72SegehD8wAAAhU"]
[Sun Mar 15 10:53:17.865110 2026] [:error] [pid 45974:tid 45984] [client 212.30.33.51:20607] [client 212.30.33.51] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.33.51, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "abYfHRWn4R6u72SegehEAAAAAgg"]
[Sun Mar 15 10:53:19.105057 2026] [:error] [pid 45974:tid 45983] [client 212.30.33.51:20607] [client 212.30.33.51] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.33.51, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "abYfHxWn4R6u72SegehECgAAAgc"]
[Sun Mar 15 10:53:19.525294 2026] [proxy_fcgi:error] [pid 45974:tid 45993] [client 212.30.33.51:20607] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:53:20.356177 2026] [:error] [pid 45974:tid 45994] [client 212.30.33.51:20607] [client 212.30.33.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "abYfIBWn4R6u72SegehEEQAAAhI"]
[Sun Mar 15 10:53:21.156386 2026] [:error] [pid 9995:tid 10016] [client 212.30.33.103:60737] [client 212.30.33.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/about.php"] [unique_id "abYfIQa8xkcaSmgTbwhIkwAAARI"]
[Sun Mar 15 10:53:23.618303 2026] [proxy_fcgi:error] [pid 38645:tid 38659] [client 212.30.33.69:28181] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:53:24.441052 2026] [:error] [pid 38645:tid 38667] [client 212.30.33.69:28181] [client 212.30.33.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "abYfJBFPHtsDUuVrWDbHzQAAANQ"]
[Sun Mar 15 10:53:25.241074 2026] [:error] [pid 38540:tid 38610] [client 212.30.33.225:23245] [client 212.30.33.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "abYfJV8bnHsJ1dE90bI5uQAAAFg"]
[Sun Mar 15 10:53:26.474165 2026] [:error] [pid 45801:tid 45804] [client 212.30.33.74:42337] [client 212.30.33.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/xl.php"] [unique_id "abYfJoaKHL9CTKoVzTDGaAAAAcE"]
[Sun Mar 15 10:53:28.574041 2026] [:error] [pid 45801:tid 45810] [client 212.30.33.70:42457] [client 212.30.33.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "abYfKIaKHL9CTKoVzTDGjgAAAcc"]
[Sun Mar 15 10:53:29.816614 2026] [proxy_fcgi:error] [pid 42570:tid 42580] [client 212.30.33.69:40099] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:53:30.219381 2026] [:error] [pid 42570:tid 42576] [client 212.30.33.69:40099] [client 212.30.33.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "abYfKsIUXZJLmk_gYCO6xwAAAYM"]
[Sun Mar 15 10:53:31.047497 2026] [:error] [pid 9995:tid 10006] [client 212.30.33.60:54735] [client 212.30.33.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dwelectservices.com.au"] [uri "/filemanager.php"] [unique_id "abYfKwa8xkcaSmgTbwhItwAAAQg"]
[Sun Mar 15 10:53:32.703115 2026] [:error] [pid 38540:tid 38593] [client 212.30.33.94:20741] [client 212.30.33.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "abYfLF8bnHsJ1dE90bI56QAAAEc"]
[Sun Mar 15 10:53:33.520754 2026] [:error] [pid 38645:tid 38653] [client 212.30.33.179:35105] [client 212.30.33.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "abYfLRFPHtsDUuVrWDbICAAAAMY"]
[Sun Mar 15 10:53:34.800648 2026] [:error] [pid 38536:tid 38566] [client 212.30.33.65:55299] [client 212.30.33.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/feed-rsss.php"] [unique_id "abYfLvpTEqkVJ0rBEWverQAAAA0"]
[Sun Mar 15 10:53:36.052124 2026] [:error] [pid 45974:tid 45999] [client 212.30.33.229:27855] [client 212.30.33.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/atomlib.php"] [unique_id "abYfMBWn4R6u72SegehEmgAAAhc"]
[Sun Mar 15 10:53:37.680373 2026] [:error] [pid 38541:tid 38619] [client 212.30.33.60:24591] [client 212.30.33.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "abYfMXuOpex8jIO0jt5RngAAAIY"]
[Sun Mar 15 10:53:39.358524 2026] [:error] [pid 38645:tid 38653] [client 212.30.33.97:27465] [client 212.30.33.97] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.33.97, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "abYfMxFPHtsDUuVrWDbIPQAAAMY"]
[Sun Mar 15 10:53:40.828575 2026] [proxy_fcgi:error] [pid 38645:tid 38658] [client 212.30.33.97:27465] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:53:42.082114 2026] [:error] [pid 38645:tid 38659] [client 212.30.33.97:27465] [client 212.30.33.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Requests/Auth/index.php"] [unique_id "abYfNhFPHtsDUuVrWDbITwAAAMw"]
[Sun Mar 15 10:53:43.369283 2026] [proxy_fcgi:error] [pid 45974:tid 45998] [client 212.30.33.213:60899] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:53:43.804293 2026] [proxy_fcgi:error] [pid 45974:tid 45987] [client 212.30.33.213:60899] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:53:44.209185 2026] [proxy_fcgi:error] [pid 45974:tid 45983] [client 212.30.33.213:60899] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:53:44.620982 2026] [:error] [pid 45974:tid 45984] [client 212.30.33.213:60899] [client 212.30.33.213] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/widgets/class-wp-nav-widgets.php"] [unique_id "abYfOBWn4R6u72SegehE0QAAAgg"]
[Sun Mar 15 10:53:45.845383 2026] [:error] [pid 42570:tid 42594] [client 212.30.33.63:45247] [client 212.30.33.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/infi.php"] [unique_id "abYfOcIUXZJLmk_gYCO7TwAAAZU"]
[Sun Mar 15 10:53:46.656429 2026] [proxy_fcgi:error] [pid 45801:tid 45807] [client 212.30.33.99:44723] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:53:47.059568 2026] [proxy_fcgi:error] [pid 45801:tid 45806] [client 212.30.33.99:44723] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:53:47.467665 2026] [proxy_fcgi:error] [pid 45801:tid 45810] [client 212.30.33.99:44723] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:53:48.715137 2026] [:error] [pid 45801:tid 45821] [client 212.30.33.99:44723] [client 212.30.33.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "abYfPIaKHL9CTKoVzTDHEgAAAdI"]
[Sun Mar 15 10:53:50.641321 2026] [proxy_fcgi:error] [pid 42570:tid 42584] [client 212.30.33.164:36461] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:53:51.501609 2026] [proxy_fcgi:error] [pid 42570:tid 42595] [client 212.30.33.164:36461] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:53:51.923515 2026] [proxy_fcgi:error] [pid 42570:tid 42597] [client 212.30.33.164:36461] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:53:52.752143 2026] [:error] [pid 42570:tid 42590] [client 212.30.33.164:36461] [client 212.30.33.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/pomo/admin.php"] [unique_id "abYfQMIUXZJLmk_gYCO7pAAAAZE"]
[Sun Mar 15 10:53:53.567709 2026] [:error] [pid 38541:tid 38634] [client 212.30.33.62:47935] [client 212.30.33.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "abYfQXuOpex8jIO0jt5R-gAAAJU"]
[Sun Mar 15 10:53:54.384295 2026] [proxy_fcgi:error] [pid 38645:tid 38671] [client 212.30.33.73:42471] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:53:55.194917 2026] [:error] [pid 38645:tid 38664] [client 212.30.33.73:42471] [client 212.30.33.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "abYfQxFPHtsDUuVrWDbI_AAAANE"]
[Sun Mar 15 10:53:56.820288 2026] [proxy_fcgi:error] [pid 38645:tid 38662] [client 212.30.33.75:22495] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:53:58.068932 2026] [:error] [pid 38645:tid 38665] [client 212.30.33.75:22495] [client 212.30.33.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Text/options.php"] [unique_id "abYfRhFPHtsDUuVrWDbJDwAAANI"]
[Sun Mar 15 10:53:58.939582 2026] [:error] [pid 38645:tid 38668] [client 212.30.33.64:42021] [client 212.30.33.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "abYfRhFPHtsDUuVrWDbJGAAAANU"]
[Sun Mar 15 10:54:02.707519 2026] [:error] [pid 45801:tid 45804] [client 212.30.33.60:62381] [client 212.30.33.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/media/dog.php"] [unique_id "abYfSoaKHL9CTKoVzTDHiQAAAcE"]
[Sun Mar 15 10:54:03.519116 2026] [:error] [pid 42570:tid 42574] [client 212.30.33.229:20689] [client 212.30.33.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "abYfS8IUXZJLmk_gYCO74wAAAYE"]
[Sun Mar 15 10:54:04.322495 2026] [:error] [pid 38645:tid 38651] [client 212.30.33.98:33939] [client 212.30.33.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "abYfTBFPHtsDUuVrWDbJNQAAAMQ"]
[Sun Mar 15 10:54:06.000944 2026] [:error] [pid 45974:tid 45981] [client 212.30.33.57:40311] [client 212.30.33.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/rest-api/index.php"] [unique_id "abYfThWn4R6u72SegehFjwAAAgU"]
[Sun Mar 15 10:54:06.835283 2026] [proxy_fcgi:error] [pid 42570:tid 42590] [client 212.30.33.229:40883] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:54:07.239947 2026] [:error] [pid 42570:tid 42573] [client 212.30.33.229:40883] [client 212.30.33.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "abYfT8IUXZJLmk_gYCO8BgAAAYA"]
[Sun Mar 15 10:54:08.074479 2026] [:error] [pid 50986:tid 51008] [client 212.30.33.72:51353] [client 212.30.33.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/ID/about.php"] [unique_id "abYfUCknK4c779bcQqEGkQAAAVM"]
[Sun Mar 15 10:54:09.686287 2026] [:error] [pid 38541:tid 38620] [client 212.30.33.72:49669] [client 212.30.33.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "abYfUXuOpex8jIO0jt5SNwAAAIc"]
[Sun Mar 15 10:54:10.493952 2026] [:error] [pid 45801:tid 45810] [client 212.30.33.64:25451] [client 212.30.33.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/IXR/fix.php"] [unique_id "abYfUoaKHL9CTKoVzTDHugAAAcc"]
[Sun Mar 15 10:54:15.405285 2026] [proxy_fcgi:error] [pid 45974:tid 45990] [client 212.30.33.190:29773] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:54:16.618117 2026] [:error] [pid 45974:tid 45976] [client 212.30.33.190:29773] [client 212.30.33.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Text/index.php"] [unique_id "abYfWBWn4R6u72SegehGCQAAAgA"]
[Sun Mar 15 10:54:17.456315 2026] [proxy_fcgi:error] [pid 38645:tid 38652] [client 212.30.33.56:30781] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:54:19.151251 2026] [:error] [pid 38645:tid 38647] [client 212.30.33.56:30781] [client 212.30.33.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "abYfWxFPHtsDUuVrWDbJzQAAAMA"]
[Sun Mar 15 10:54:20.026117 2026] [:error] [pid 38540:tid 38594] [client 212.30.33.51:52727] [client 212.30.33.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "abYfXF8bnHsJ1dE90bI6wwAAAEg"]
[Sun Mar 15 10:54:20.872190 2026] [:error] [pid 50986:tid 51004] [client 212.30.33.95:61649] [client 212.30.33.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/atomlib.php"] [unique_id "abYfXCknK4c779bcQqEHEgAAAU8"]
[Sun Mar 15 10:54:21.682191 2026] [:error] [pid 50986:tid 50996] [client 212.30.33.98:58737] [client 212.30.33.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/sitemaps/abcd.php"] [unique_id "abYfXSknK4c779bcQqEHHAAAAUc"]
[Sun Mar 15 10:54:22.506552 2026] [:error] [pid 38645:tid 38651] [client 212.30.33.92:32507] [client 212.30.33.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/min.php"] [unique_id "abYfXhFPHtsDUuVrWDbJ8QAAAMQ"]
[Sun Mar 15 10:54:23.313388 2026] [:error] [pid 50986:tid 51002] [client 212.30.33.101:64105] [client 212.30.33.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/interactivity-api/interactivity-api-class.php"] [unique_id "abYfXyknK4c779bcQqEHPAAAAU0"]
[Sun Mar 15 10:54:24.119773 2026] [:error] [pid 42570:tid 42584] [client 212.30.33.99:23849] [client 212.30.33.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/smilies/simi.php"] [unique_id "abYfYMIUXZJLmk_gYCO8TAAAAYs"]
[Sun Mar 15 10:54:24.924252 2026] [:error] [pid 45801:tid 45815] [client 212.30.33.67:63567] [client 212.30.33.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/class-wp-language-pack.php"] [unique_id "abYfYIaKHL9CTKoVzTDIVQAAAcw"]
[Sun Mar 15 10:54:27.363768 2026] [:error] [pid 42570:tid 42594] [client 212.30.33.54:26467] [client 212.30.33.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "abYfY8IUXZJLmk_gYCO8YgAAAZU"]
[Sun Mar 15 10:54:28.600737 2026] [:error] [pid 50986:tid 51002] [client 212.30.33.103:36707] [client 212.30.33.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/IXR/goto.php"] [unique_id "abYfZCknK4c779bcQqEHiwAAAU0"]
[Sun Mar 15 10:54:31.691524 2026] [:error] [pid 38541:tid 38616] [client 212.30.33.82:40131] [client 212.30.33.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/thickbox/about.php"] [unique_id "abYfZ3uOpex8jIO0jt5SowAAAIM"]
[Sun Mar 15 10:54:33.950119 2026] [:error] [pid 45974:tid 45980] [client 212.30.33.58:40263] [client 212.30.33.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php"] [unique_id "abYfaRWn4R6u72SegehGuQAAAgQ"]
[Sun Mar 15 10:54:34.802337 2026] [:error] [pid 38645:tid 38667] [client 212.30.33.52:56553] [client 212.30.33.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/dist/about.php"] [unique_id "abYfahFPHtsDUuVrWDbKMgAAANQ"]
[Sun Mar 15 10:54:35.640444 2026] [:error] [pid 38536:tid 38563] [client 212.30.33.76:45433] [client 212.30.33.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/wp_class_datlib.php"] [unique_id "abYfa_pTEqkVJ0rBEWvftAAAAAo"]
[Sun Mar 15 10:54:36.443145 2026] [:error] [pid 38645:tid 38665] [client 212.30.33.81:61807] [client 212.30.33.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/style-engine-session.php"] [unique_id "abYfbBFPHtsDUuVrWDbKQAAAANI"]
[Sun Mar 15 10:54:37.658503 2026] [:error] [pid 38645:tid 38666] [client 212.30.33.92:62725] [client 212.30.33.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/Cache/upfile.php"] [unique_id "abYfbRFPHtsDUuVrWDbKUAAAANM"]
[Sun Mar 15 10:54:38.510325 2026] [proxy_fcgi:error] [pid 45801:tid 45814] [client 212.30.33.84:57841] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:54:40.656293 2026] [proxy_fcgi:error] [pid 45801:tid 45809] [client 212.30.33.84:57841] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:54:41.945001 2026] [:error] [pid 45801:tid 45811] [client 212.30.33.84:57841] [client 212.30.33.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/PHPMailer/purna.php"] [unique_id "abYfcYaKHL9CTKoVzTDIpQAAAcg"]
[Sun Mar 15 10:54:42.763291 2026] [proxy_fcgi:error] [pid 38536:tid 38573] [client 212.30.33.166:62629] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:54:43.176080 2026] [:error] [pid 38536:tid 38570] [client 212.30.33.166:62629] [client 212.30.33.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/fonts/themes.php"] [unique_id "abYfc_pTEqkVJ0rBEWvf4wAAABE"]
[Sun Mar 15 10:54:44.451325 2026] [proxy_fcgi:error] [pid 38541:tid 38613] [client 212.30.33.76:34623] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:54:45.261371 2026] [:error] [pid 38541:tid 38636] [client 212.30.33.76:34623] [client 212.30.33.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/install.php"] [unique_id "abYfdXuOpex8jIO0jt5SyQAAAJc"]
[Sun Mar 15 10:54:47.536083 2026] [:error] [pid 45801:tid 45827] [client 212.30.33.57:22375] [client 212.30.33.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "abYfd4aKHL9CTKoVzTDI2gAAAdg"]
[Sun Mar 15 10:54:49.177288 2026] [proxy_fcgi:error] [pid 50986:tid 51005] [client 212.30.33.93:55717] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:54:50.000331 2026] [:error] [pid 50986:tid 51010] [client 212.30.33.93:55717] [client 212.30.33.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/function.php"] [unique_id "abYfeSknK4c779bcQqEIWAAAAVU"]
[Sun Mar 15 10:54:51.618993 2026] [:error] [pid 9995:tid 10015] [client 212.30.33.60:42361] [client 212.30.33.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/customize/db.php"] [unique_id "abYfewa8xkcaSmgTbwhKfAAAARE"]
[Sun Mar 15 10:54:54.107631 2026] [proxy_fcgi:error] [pid 45974:tid 45996] [client 212.30.33.80:63981] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:54:54.511250 2026] [:error] [pid 45974:tid 45978] [client 212.30.33.80:63981] [client 212.30.33.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/block-patterns/about.php"] [unique_id "abYffhWn4R6u72SegehHnAAAAgI"]
[Sun Mar 15 10:54:55.342027 2026] [:error] [pid 45801:tid 45804] [client 212.30.33.63:60033] [client 212.30.33.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/PHPMailer/autoload_classmap.php"] [unique_id "abYff4aKHL9CTKoVzTDI-gAAAcE"]
[Sun Mar 15 10:54:56.561471 2026] [:error] [pid 50986:tid 50994] [client 212.30.33.76:63789] [client 212.30.33.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/smilies/admin.php"] [unique_id "abYfgCknK4c779bcQqEIvgAAAUY"]
[Sun Mar 15 10:54:57.374099 2026] [:error] [pid 38645:tid 38654] [client 212.30.33.64:36833] [client 212.30.33.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/Cache/index.php"] [unique_id "abYfgRFPHtsDUuVrWDbLLgAAAMc"]
[Sun Mar 15 10:54:58.210988 2026] [:error] [pid 38645:tid 38655] [client 212.30.33.90:48493] [client 212.30.33.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/db.php"] [unique_id "abYfghFPHtsDUuVrWDbLRAAAAMg"]
[Sun Mar 15 10:55:00.870879 2026] [:error] [pid 38645:tid 38655] [client 212.30.33.92:28869] [client 212.30.33.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/IXR/class-IXR-cilent.php"] [unique_id "abYfhBFPHtsDUuVrWDbLnQAAAMg"]
[Sun Mar 15 10:55:02.525026 2026] [:error] [pid 38645:tid 38655] [client 212.30.33.63:27893] [client 212.30.33.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/class-wp-smtp-bar.php"] [unique_id "abYfhhFPHtsDUuVrWDbL5QAAAMg"]
[Sun Mar 15 10:55:03.749474 2026] [:error] [pid 38541:tid 38616] [client 212.30.33.88:60367] [client 212.30.33.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "abYfh3uOpex8jIO0jt5S-gAAAIM"]
[Sun Mar 15 10:55:04.584750 2026] [proxy_fcgi:error] [pid 38645:tid 38669] [client 212.30.33.63:37621] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:55:04.994064 2026] [:error] [pid 38645:tid 38647] [client 212.30.33.63:37621] [client 212.30.33.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.min.php"] [unique_id "abYfiBFPHtsDUuVrWDbMPAAAAMA"]
[Sun Mar 15 10:55:07.617025 2026] [:error] [pid 42570:tid 42582] [client 212.30.33.103:23959] [client 212.30.33.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/interactivity-api/about.php"] [unique_id "abYfi8IUXZJLmk_gYCO9JQAAAYk"]
[Sun Mar 15 10:55:08.448251 2026] [:error] [pid 50986:tid 51000] [client 212.30.33.89:20645] [client 212.30.33.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/wp-conflg.php"] [unique_id "abYfjCknK4c779bcQqEJAgAAAUs"]
[Sun Mar 15 10:55:10.206935 2026] [:error] [pid 38645:tid 38671] [client 212.30.33.101:39891] [client 212.30.33.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "abYfjhFPHtsDUuVrWDbMhwAAANg"]
[Sun Mar 15 10:55:13.062509 2026] [:error] [pid 38540:tid 38587] [client 212.30.33.62:58361] [client 212.30.33.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/wp-sup.php"] [unique_id "abYfkV8bnHsJ1dE90bI70wAAAEE"]
[Sun Mar 15 10:55:14.944789 2026] [:error] [pid 45974:tid 45979] [client 212.30.33.88:61791] [client 212.30.33.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "abYfkhWn4R6u72SegehIYQAAAgM"]
[Sun Mar 15 10:55:16.191822 2026] [:error] [pid 45801:tid 45822] [client 212.30.33.190:28701] [client 212.30.33.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/edit-tags.php"] [unique_id "abYflIaKHL9CTKoVzTDJNQAAAdM"]
[Sun Mar 15 10:55:17.009063 2026] [:error] [pid 38541:tid 38616] [client 212.30.33.74:38053] [client 212.30.33.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/ID/shell.php"] [unique_id "abYflXuOpex8jIO0jt5TLAAAAIM"]
[Sun Mar 15 10:55:17.813364 2026] [:error] [pid 9995:tid 10007] [client 212.30.33.69:58187] [client 212.30.33.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/widgets/security.php"] [unique_id "abYflQa8xkcaSmgTbwhKtgAAAQk"]
[Sun Mar 15 10:55:18.648834 2026] [proxy_fcgi:error] [pid 50986:tid 50989] [client 212.30.33.53:21225] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:55:19.074859 2026] [:error] [pid 50986:tid 51010] [client 212.30.33.53:21225] [client 212.30.33.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/ID/db.php"] [unique_id "abYflyknK4c779bcQqEJZgAAAVU"]
[Sun Mar 15 10:55:19.892406 2026] [:error] [pid 50986:tid 50988] [client 212.30.33.97:51827] [client 212.30.33.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/simi.php"] [unique_id "abYflyknK4c779bcQqEJgQAAAUA"]
[Sun Mar 15 10:55:20.700192 2026] [:error] [pid 9995:tid 9999] [client 212.30.33.98:57583] [client 212.30.33.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/class-wp-theme-float.php"] [unique_id "abYfmAa8xkcaSmgTbwhKvgAAAQE"]
[Sun Mar 15 10:55:21.524117 2026] [proxy_fcgi:error] [pid 9995:tid 10013] [client 212.30.33.101:26531] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:55:21.926481 2026] [:error] [pid 9995:tid 10005] [client 212.30.33.101:26531] [client 212.30.33.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/widgets/wp-ss.php"] [unique_id "abYfmQa8xkcaSmgTbwhK1QAAAQc"]
[Sun Mar 15 10:55:22.739084 2026] [:error] [pid 45974:tid 45985] [client 212.30.33.97:44149] [client 212.30.33.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/file.php"] [unique_id "abYfmhWn4R6u72SegehIpgAAAgk"]
[Sun Mar 15 10:55:23.538800 2026] [:error] [pid 38645:tid 38650] [client 212.30.33.82:21779] [client 212.30.33.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/network.php"] [unique_id "abYfmxFPHtsDUuVrWDbNIQAAAMM"]
[Sun Mar 15 10:55:26.915042 2026] [:error] [pid 38645:tid 38656] [client 212.30.33.67:44531] [client 212.30.33.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/template-wploader.php"] [unique_id "abYfnhFPHtsDUuVrWDbNaAAAAMk"]
[Sun Mar 15 10:55:28.184894 2026] [:error] [pid 45801:tid 45826] [client 212.30.33.92:28241] [client 212.30.33.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/vars-soap.php"] [unique_id "abYfoIaKHL9CTKoVzTDJagAAAdc"]
[Sun Mar 15 10:55:30.229325 2026] [:error] [pid 45974:tid 45986] [client 212.30.33.166:44283] [client 212.30.33.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/template-less.php"] [unique_id "abYfohWn4R6u72SegehI5AAAAgo"]
[Sun Mar 15 10:55:32.864782 2026] [:error] [pid 42570:tid 42585] [client 212.30.33.74:55313] [client 212.30.33.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/info.php"] [unique_id "abYfpMIUXZJLmk_gYCO90QAAAYw"]
[Sun Mar 15 10:55:33.671157 2026] [:error] [pid 45801:tid 45809] [client 212.30.33.81:59815] [client 212.30.33.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/wp-conflg.php"] [unique_id "abYfpYaKHL9CTKoVzTDJmgAAAcY"]
[Sun Mar 15 10:55:34.894109 2026] [:error] [pid 45801:tid 45815] [client 212.30.33.68:30501] [client 212.30.33.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/widgets/av.php"] [unique_id "abYfpoaKHL9CTKoVzTDJpAAAAcw"]
[Sun Mar 15 10:55:36.097376 2026] [:error] [pid 38645:tid 38664] [client 212.30.33.59:52055] [client 212.30.33.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/PHPMailer/xleet.php"] [unique_id "abYfqBFPHtsDUuVrWDbNvAAAANE"]
[Sun Mar 15 10:55:36.910742 2026] [:error] [pid 45801:tid 45814] [client 212.30.33.63:25661] [client 212.30.33.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/bypass.php"] [unique_id "abYfqIaKHL9CTKoVzTDJuAAAAcs"]
[Sun Mar 15 10:55:38.926922 2026] [:error] [pid 42570:tid 42574] [client 212.30.33.54:35859] [client 212.30.33.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/Registry-private.php"] [unique_id "abYfqsIUXZJLmk_gYCO9_wAAAYE"]
[Sun Mar 15 10:55:39.749851 2026] [:error] [pid 38645:tid 38658] [client 212.30.33.99:24725] [client 212.30.33.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/class-wp-session-tokens-https.php"] [unique_id "abYfqxFPHtsDUuVrWDbOBQAAAMs"]
[Sun Mar 15 10:55:40.575097 2026] [proxy_fcgi:error] [pid 38540:tid 38592] [client 212.30.33.93:44375] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:55:41.386976 2026] [:error] [pid 38540:tid 38596] [client 212.30.33.93:44375] [client 212.30.33.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/sitemaps/wp-conflg.php"] [unique_id "abYfrV8bnHsJ1dE90bI7_AAAAEo"]
[Sun Mar 15 10:55:42.600596 2026] [:error] [pid 38540:tid 38604] [client 212.30.33.82:28889] [client 212.30.33.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/system.php"] [unique_id "abYfrl8bnHsJ1dE90bI8EQAAAFI"]
[Sun Mar 15 10:55:44.264968 2026] [:error] [pid 45974:tid 45998] [client 212.30.33.88:44805] [client 212.30.33.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/crystal/lrs_dage.php"] [unique_id "abYfsBWn4R6u72SegehJmAAAAhY"]
[Sun Mar 15 10:55:45.511525 2026] [:error] [pid 38645:tid 38660] [client 212.30.33.57:30601] [client 212.30.33.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/group/wp-style.php"] [unique_id "abYfsRFPHtsDUuVrWDbOJgAAAM0"]
[Sun Mar 15 10:55:46.326784 2026] [:error] [pid 42570:tid 42583] [client 212.30.33.83:57555] [client 212.30.33.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/ID/chosen.php"] [unique_id "abYfssIUXZJLmk_gYCO-JwAAAYo"]
[Sun Mar 15 10:55:48.384356 2026] [:error] [pid 45801:tid 45811] [client 212.30.33.74:37287] [client 212.30.33.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/IXR/xsec.php"] [unique_id "abYftIaKHL9CTKoVzTDJ7gAAAcg"]
[Sun Mar 15 10:55:49.283817 2026] [:error] [pid 38645:tid 38661] [client 212.30.33.81:59069] [client 212.30.33.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/class-feed-index.php"] [unique_id "abYftRFPHtsDUuVrWDbOVgAAAM4"]
[Sun Mar 15 10:55:50.094369 2026] [:error] [pid 45801:tid 45824] [client 212.30.33.63:43303] [client 212.30.33.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/category-double.php"] [unique_id "abYftoaKHL9CTKoVzTDJ_QAAAdU"]
[Sun Mar 15 10:55:50.905664 2026] [:error] [pid 38645:tid 38653] [client 212.30.33.91:30157] [client 212.30.33.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/dist/require-dynamic-blocks.php"] [unique_id "abYfthFPHtsDUuVrWDbOfgAAAMY"]
[Sun Mar 15 10:55:51.716205 2026] [proxy_fcgi:error] [pid 38645:tid 38668] [client 212.30.33.60:58255] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:55:52.536245 2026] [proxy_fcgi:error] [pid 38645:tid 38657] [client 212.30.33.60:58255] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:55:57.143311 2026] [proxy_fcgi:error] [pid 38645:tid 38664] [client 212.30.33.60:58255] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:55:57.542800 2026] [:error] [pid 38645:tid 38648] [client 212.30.33.60:58255] [client 212.30.33.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/jcrop/about.php"] [unique_id "abYfvRFPHtsDUuVrWDbPDwAAAME"]
[Sun Mar 15 10:55:58.755290 2026] [:error] [pid 45801:tid 45818] [client 212.30.33.84:49695] [client 212.30.33.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Text/Diff/Engine/theme.php"] [unique_id "abYfvoaKHL9CTKoVzTDKJwAAAc8"]
[Sun Mar 15 10:56:00.376022 2026] [:error] [pid 50986:tid 51013] [client 212.30.33.97:58557] [client 212.30.33.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/log.php"] [unique_id "abYfwCknK4c779bcQqEK3AAAAVg"]
[Sun Mar 15 10:56:01.175752 2026] [:error] [pid 38645:tid 38651] [client 212.30.33.90:44935] [client 212.30.33.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/ID/simi.php"] [unique_id "abYfwRFPHtsDUuVrWDbPPAAAAMQ"]
[Sun Mar 15 10:56:02.856296 2026] [proxy_fcgi:error] [pid 42570:tid 42585] [client 212.30.33.67:23169] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:56:03.260435 2026] [:error] [pid 42570:tid 42587] [client 212.30.33.67:23169] [client 212.30.33.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/customize/chosen.php"] [unique_id "abYfw8IUXZJLmk_gYCO-dAAAAY4"]
[Sun Mar 15 10:56:04.917549 2026] [:error] [pid 38645:tid 38670] [client 212.30.33.87:44565] [client 212.30.33.87] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.33.87, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/colors/ocean/wp-login.php"] [unique_id "abYfxBFPHtsDUuVrWDbPiQAAANc"]
[Sun Mar 15 10:56:05.753418 2026] [:error] [pid 38645:tid 38651] [client 212.30.33.87:44565] [client 212.30.33.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/pomo/plugins.php"] [unique_id "abYfxRFPHtsDUuVrWDbPjQAAAMQ"]
[Sun Mar 15 10:56:06.613340 2026] [:error] [pid 50986:tid 51010] [client 212.30.33.93:51031] [client 212.30.33.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/certificates/past.php"] [unique_id "abYfxiknK4c779bcQqELKwAAAVU"]
[Sun Mar 15 10:56:07.507419 2026] [:error] [pid 45801:tid 45808] [client 212.30.33.82:33523] [client 212.30.33.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/pomo/item.php"] [unique_id "abYfx4aKHL9CTKoVzTDKYQAAAcU"]
[Sun Mar 15 10:56:08.345859 2026] [proxy_fcgi:error] [pid 50986:tid 51011] [client 212.30.33.103:30921] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:56:08.773320 2026] [proxy_fcgi:error] [pid 50986:tid 50999] [client 212.30.33.103:30921] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:56:09.610786 2026] [proxy_fcgi:error] [pid 50986:tid 51004] [client 212.30.33.103:30921] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:56:10.031635 2026] [proxy_fcgi:error] [pid 50986:tid 51009] [client 212.30.33.103:30921] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:56:10.449481 2026] [:error] [pid 50986:tid 51005] [client 212.30.33.103:30921] [client 212.30.33.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/theme-compat/chosen.php"] [unique_id "abYfyiknK4c779bcQqELdQAAAVA"]
[Sun Mar 15 10:56:11.264714 2026] [proxy_fcgi:error] [pid 50986:tid 51009] [client 212.30.33.85:54471] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:56:11.664409 2026] [:error] [pid 50986:tid 51004] [client 212.30.33.85:54471] [client 212.30.33.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/button/index.php"] [unique_id "abYfyyknK4c779bcQqELmQAAAU8"]
[Sun Mar 15 10:56:15.468393 2026] [:error] [pid 38645:tid 38658] [client 212.30.33.64:45695] [client 212.30.33.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/customize/class-wp-customize-theme-control-cron.php"] [unique_id "abYfzxFPHtsDUuVrWDbP2AAAAMs"]
[Sun Mar 15 10:56:16.284730 2026] [proxy_fcgi:error] [pid 42570:tid 42592] [client 212.30.33.179:49755] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:56:16.690772 2026] [:error] [pid 42570:tid 42581] [client 212.30.33.179:49755] [client 212.30.33.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/db.php"] [unique_id "abYf0MIUXZJLmk_gYCO-lgAAAYg"]
[Sun Mar 15 10:56:18.304427 2026] [:error] [pid 50986:tid 51009] [client 212.30.33.73:29563] [client 212.30.33.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/class-wp-oembed-path.php"] [unique_id "abYf0iknK4c779bcQqEL_QAAAVQ"]
[Sun Mar 15 10:56:19.985273 2026] [:error] [pid 50986:tid 51007] [client 212.30.33.95:31949] [client 212.30.33.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/customize/11.php"] [unique_id "abYf0yknK4c779bcQqEMFAAAAVI"]
[Sun Mar 15 10:56:21.639378 2026] [:error] [pid 38645:tid 38659] [client 212.30.33.61:56211] [client 212.30.33.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/ID3/module.tag.apetag-float.php"] [unique_id "abYf1RFPHtsDUuVrWDbP_gAAAMw"]
[Sun Mar 15 10:56:24.138291 2026] [proxy_fcgi:error] [pid 38540:tid 38597] [client 212.30.33.52:64935] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:56:24.567578 2026] [proxy_fcgi:error] [pid 38540:tid 38590] [client 212.30.33.52:64935] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:56:24.976100 2026] [:error] [pid 38540:tid 38591] [client 212.30.33.52:64935] [client 212.30.33.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/ID3/autoload_classmap.php"] [unique_id "abYf2F8bnHsJ1dE90bI8wwAAAEU"]
[Sun Mar 15 10:56:25.802251 2026] [proxy_fcgi:error] [pid 45801:tid 45823] [client 212.30.33.68:49739] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:56:26.220313 2026] [proxy_fcgi:error] [pid 45801:tid 45810] [client 212.30.33.68:49739] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:56:26.635650 2026] [:error] [pid 45801:tid 45811] [client 212.30.33.68:49739] [client 212.30.33.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/class-wp-block-method.php"] [unique_id "abYf2oaKHL9CTKoVzTDK0QAAAcg"]
[Sun Mar 15 10:56:28.256469 2026] [:error] [pid 38541:tid 38635] [client 212.30.33.55:41385] [client 212.30.33.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/rest-api/search/class-wp-rest-search-handlers.php"] [unique_id "abYf3HuOpex8jIO0jt5UFwAAAJY"]
[Sun Mar 15 10:56:29.540764 2026] [:error] [pid 42570:tid 42591] [client 212.30.33.229:54287] [client 212.30.33.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/edit.php"] [unique_id "abYf3cIUXZJLmk_gYCO-1gAAAZI"]
[Sun Mar 15 10:56:33.017377 2026] [:error] [pid 38645:tid 38659] [client 212.30.33.59:43599] [client 212.30.33.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/widgets/zoomab.php"] [unique_id "abYf4RFPHtsDUuVrWDbQlQAAAMw"]
[Sun Mar 15 10:56:33.891601 2026] [proxy_fcgi:error] [pid 38645:tid 38663] [client 212.30.33.51:36331] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:56:35.154297 2026] [proxy_fcgi:error] [pid 38645:tid 38659] [client 212.30.33.51:36331] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:56:35.990076 2026] [:error] [pid 38645:tid 38650] [client 212.30.33.51:36331] [client 212.30.33.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/mrs.php"] [unique_id "abYf4xFPHtsDUuVrWDbQuAAAAMM"]
[Sun Mar 15 10:56:36.808432 2026] [:error] [pid 38541:tid 38614] [client 212.30.33.71:49929] [client 212.30.33.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/crystal/abc.php"] [unique_id "abYf5HuOpex8jIO0jt5UQQAAAIE"]
[Sun Mar 15 10:56:56.027670 2026] [autoindex:error] [pid 45974:tid 45987] [client 212.30.33.70:32115] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 15 10:57:08.351021 2026] [autoindex:error] [pid 45974:tid 45979] [client 212.30.33.70:32115] AH01276: Cannot serve directory /home/dwelects/public_html/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 15 16:13:18.780644 2026] [:error] [pid 45974:tid 45988] [client 104.234.53.49:44757] [client 104.234.53.49] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.234.53.49, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-login.php"] [unique_id "abZqHhWn4R6u72SegeiiDQAAAgw"]
[Sun Mar 15 16:13:18.794650 2026] [proxy_fcgi:error] [pid 45974:tid 45988] [client 104.234.53.49:44757] AH01071: Got error 'Primary script unknown'
[Mon Mar 16 07:02:26.663255 2026] [:error] [pid 62429:tid 62508] [client 203.188.168.25:36939] [client 203.188.168.25] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 203.188.168.25, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-login.php"] [unique_id "abc6glewIPukhLCowEHc8wAAAIw"]
[Mon Mar 16 07:02:26.685318 2026] [proxy_fcgi:error] [pid 62429:tid 62508] [client 203.188.168.25:36939] AH01071: Got error 'Primary script unknown'
[Mon Mar 16 08:16:19.025197 2026] [:error] [pid 52152:tid 52172] [client 103.65.237.124:57608] [client 103.65.237.124] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/sftp-config.json"] [unique_id "abdL08A6rS_GLRd0NKWPhwAAARE"]
[Mon Mar 16 11:05:10.437132 2026] [:error] [pid 62510:tid 62532] [client 173.239.236.149:47803] [client 173.239.236.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/"] [unique_id "abdzZiE33_T9aKpoDdjpQQAAARM"]
[Mon Mar 16 11:05:10.904741 2026] [:error] [pid 62025:tid 62060] [client 173.239.236.121:37021] [client 173.239.236.121] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 173.239.236.121, incrementing ddos counter"] [hostname "dwelectservices.com.au"] [uri "/xmlrpc.php"] [unique_id "abdzZuimBfLmKh7zLXMBwQAAAEE"]
[Mon Mar 16 11:05:10.934594 2026] [proxy_fcgi:error] [pid 62025:tid 62060] [client 173.239.236.121:37021] AH01071: Got error 'Primary script unknown'
[Mon Mar 16 11:05:12.053683 2026] [:error] [pid 62025:tid 62073] [client 173.239.236.121:37021] [client 173.239.236.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "abdzaOimBfLmKh7zLXMB7QAAAE4"]
[Mon Mar 16 20:53:49.311752 2026] [:error] [pid 35839:tid 35885] [client 172.71.148.87:12138] [client 172.71.148.87] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.git/config"] [unique_id "abf9Xaxyv6h8-aZrncsRKwAAAE8"]
[Mon Mar 16 20:53:49.318779 2026] [:error] [pid 35838:tid 35859] [client 172.71.148.87:12147] [client 172.71.148.87] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.git/HEAD"] [unique_id "abf9XRroTe-x3JLtmo63zwAAABE"]
[Mon Mar 16 20:53:49.347360 2026] [:error] [pid 35838:tid 35857] [client 172.71.148.87:12143] [client 172.71.148.87] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env"] [unique_id "abf9XRroTe-x3JLtmo630QAAAA8"]
[Tue Mar 17 07:56:12.355349 2026] [:error] [pid 46020:tid 46034] [client 185.223.152.139:46671] [client 185.223.152.139] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.139, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-login.php"] [unique_id "abiYnH-nCcd9BdzGdLdBTgAAAMw"]
[Tue Mar 17 07:56:12.381861 2026] [proxy_fcgi:error] [pid 46020:tid 46034] [client 185.223.152.139:46671] AH01071: Got error 'Primary script unknown'
[Tue Mar 17 15:12:06.490249 2026] [:error] [pid 45915:tid 45931] [client 83.229.84.238:60987] [client 83.229.84.238] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 83.229.84.238, incrementing ddos counter"] [hostname "dwelectservices.com.au"] [uri "/xmlrpc.php"] [unique_id "abj-xph7U84ydzcrcnfk8QAAAAI"]
[Tue Mar 17 15:12:06.501556 2026] [proxy_fcgi:error] [pid 45915:tid 45931] [client 83.229.84.238:60987] AH01071: Got error 'Primary script unknown'
[Tue Mar 17 15:12:10.287844 2026] [:error] [pid 45915:tid 45943] [client 83.229.84.238:60987] [client 83.229.84.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "abj-yph7U84ydzcrcnflDAAAAA4"]
[Tue Mar 17 15:12:10.791344 2026] [:error] [pid 15013:tid 15086] [client 83.229.84.238:62615] [client 83.229.84.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "abj-ylZc-p7DonmJmm0AlAAAAgk"]
[Tue Mar 17 15:12:11.393168 2026] [:error] [pid 15011:tid 15054] [client 83.229.84.238:62789] [client 83.229.84.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "abj-y8NtgHlAHiPlDyo01AAAAcU"]
[Tue Mar 17 15:12:11.965900 2026] [:error] [pid 14817:tid 14841] [client 83.229.84.238:62943] [client 83.229.84.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "abj-y-BWVgTpR3dKOgb6wAAAAU8"]
[Tue Mar 17 15:12:12.531480 2026] [:error] [pid 15162:tid 15175] [client 83.229.84.238:63095] [client 83.229.84.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "abj-zLkCW4399PnBfYTROgAAAkg"]
[Tue Mar 17 15:12:13.086098 2026] [:error] [pid 45916:tid 45962] [client 83.229.84.238:63278] [client 83.229.84.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "abj-zbiS53PnClk_C9AfaAAAAEA"]
[Wed Mar 18 01:30:33.959862 2026] [:error] [pid 40716:tid 41021] [client 20.39.61.185:17910] [client 20.39.61.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wk/index.php"] [unique_id "abmPuRR6i4ByUuhUBAR4-gAAAEA"]
[Wed Mar 18 01:30:35.510969 2026] [:error] [pid 63412:tid 63440] [client 20.39.61.185:17912] [client 20.39.61.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wk/index.php"] [unique_id "abmPuzKUzzFOGoXRLQ-7SgAAANg"]
[Wed Mar 18 05:45:33.390914 2026] [proxy_fcgi:error] [pid 45069:tid 45086] [client 20.116.1.191:20061] AH01071: Got error 'Primary script unknown'
[Wed Mar 18 05:45:33.947969 2026] [:error] [pid 45069:tid 45090] [client 20.116.1.191:20061] [client 20.116.1.191] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.116.1.191, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-content/uploads/wp-login.php"] [unique_id "abnLfTNzUMBULZVa94zeigAAANM"]
[Wed Mar 18 05:45:35.668246 2026] [proxy_fcgi:error] [pid 45069:tid 45089] [client 20.116.1.191:20061] AH01071: Got error 'Primary script unknown'
[Wed Mar 18 05:45:36.618137 2026] [proxy_fcgi:error] [pid 45069:tid 45094] [client 20.116.1.191:20061] AH01071: Got error 'Primary script unknown'
[Wed Mar 18 05:45:37.486439 2026] [proxy_fcgi:error] [pid 45069:tid 45075] [client 20.116.1.191:20061] AH01071: Got error 'Primary script unknown'
[Wed Mar 18 05:45:37.754004 2026] [:error] [pid 45069:tid 45074] [client 20.116.1.191:20061] [client 20.116.1.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "abnLgTNzUMBULZVa94zemgAAAMM"]
[Wed Mar 18 05:45:40.255422 2026] [:error] [pid 13676:tid 13681] [client 20.116.1.191:20065] [client 20.116.1.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "abnLhGxDEHR5lvAEVIjjVAAAAQM"]
[Wed Mar 18 05:45:41.971005 2026] [:error] [pid 44966:tid 45050] [client 20.116.1.191:20095] [client 20.116.1.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "abnLhbHml2_01Zq4-124RQAAAI0"]
[Wed Mar 18 05:45:44.865953 2026] [:error] [pid 44965:tid 45015] [client 20.116.1.191:19968] [client 20.116.1.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "abnLiKNZys-oG-hM22h7kAAAAEU"]
[Wed Mar 18 08:13:18.081671 2026] [:error] [pid 13716:tid 13731] [client 20.2.90.103:38720] [client 20.2.90.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env"] [unique_id "abnuHmWKzQVHkZkUHaRT0gAAAU0"]
[Wed Mar 18 19:22:05.234647 2026] [:error] [pid 42870:tid 42901] [client 37.140.223.16:61551] [client 37.140.223.16] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.16, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-login.php"] [unique_id "abqK3Z6axlAooiuYyUwfmwAAABA"]
[Wed Mar 18 19:22:05.244933 2026] [proxy_fcgi:error] [pid 42870:tid 42901] [client 37.140.223.16:61551] AH01071: Got error 'Primary script unknown'
[Wed Mar 18 20:02:13.530351 2026] [proxy_fcgi:error] [pid 20667:tid 20676] [client 20.220.57.95:34843] AH01071: Got error 'Primary script unknown'
[Wed Mar 18 20:02:13.743312 2026] [proxy_fcgi:error] [pid 20667:tid 20670] [client 20.220.57.95:34843] AH01071: Got error 'Primary script unknown'
[Wed Mar 18 20:02:14.177092 2026] [proxy_fcgi:error] [pid 20667:tid 20690] [client 20.220.57.95:34843] AH01071: Got error 'Primary script unknown'
[Wed Mar 18 20:02:14.496187 2026] [proxy_fcgi:error] [pid 20667:tid 20681] [client 20.220.57.95:34843] AH01071: Got error 'Primary script unknown'
[Wed Mar 18 20:02:14.938753 2026] [proxy_fcgi:error] [pid 20667:tid 20688] [client 20.220.57.95:34843] AH01071: Got error 'Primary script unknown'
[Wed Mar 18 20:02:15.148784 2026] [proxy_fcgi:error] [pid 20667:tid 20683] [client 20.220.57.95:34843] AH01071: Got error 'Primary script unknown'
[Wed Mar 18 20:02:15.360700 2026] [proxy_fcgi:error] [pid 20667:tid 20678] [client 20.220.57.95:34843] AH01071: Got error 'Primary script unknown'
[Wed Mar 18 20:02:15.919961 2026] [:error] [pid 20667:tid 20673] [client 20.220.57.95:34843] [client 20.220.57.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/randkeyword.PhP7"] [unique_id "abqUR5gyfQyvBhzza_18mQAAAYQ"]
[Wed Mar 18 20:02:18.480711 2026] [:error] [pid 42870:tid 42901] [client 20.220.57.95:34886] [client 20.220.57.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/randkeyword.PhP7"] [unique_id "abqUSp6axlAooiuYyUwo7QAAABA"]
[Wed Mar 18 20:02:22.471374 2026] [:error] [pid 42871:tid 42916] [client 20.220.57.95:34894] [client 20.220.57.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/randkeyword.PhP7"] [unique_id "abqUTmPUS0lM1M9nUaJc3wAAAII"]
[Wed Mar 18 20:02:23.762686 2026] [:error] [pid 42871:tid 42935] [client 20.220.57.95:34858] [client 20.220.57.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/randkeyword.PhP7"] [unique_id "abqUT2PUS0lM1M9nUaJc4QAAAJU"]
[Wed Mar 18 20:13:47.721154 2026] [proxy_fcgi:error] [pid 53755:tid 53781] [client 20.120.18.145:4425] AH01071: Got error 'Primary script unknown'
[Wed Mar 18 20:13:47.946526 2026] [proxy_fcgi:error] [pid 53755:tid 53780] [client 20.120.18.145:4425] AH01071: Got error 'Primary script unknown'
[Wed Mar 18 20:13:48.541005 2026] [proxy_fcgi:error] [pid 53755:tid 53778] [client 20.120.18.145:4425] AH01071: Got error 'Primary script unknown'
[Wed Mar 18 20:13:48.765930 2026] [proxy_fcgi:error] [pid 53755:tid 53776] [client 20.120.18.145:4425] AH01071: Got error 'Primary script unknown'
[Wed Mar 18 20:13:49.384879 2026] [proxy_fcgi:error] [pid 53755:tid 53770] [client 20.120.18.145:4425] AH01071: Got error 'Primary script unknown'
[Wed Mar 18 20:13:49.744789 2026] [proxy_fcgi:error] [pid 53755:tid 53763] [client 20.120.18.145:4425] AH01071: Got error 'Primary script unknown'
[Wed Mar 18 20:13:50.012941 2026] [proxy_fcgi:error] [pid 53755:tid 53774] [client 20.120.18.145:4425] AH01071: Got error 'Primary script unknown'
[Wed Mar 18 20:13:50.563546 2026] [:error] [pid 53755:tid 53779] [client 20.120.18.145:4425] [client 20.120.18.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/randkeyword.PhP7"] [unique_id "abqW_qqw5ZSRshmIhWksdwAAAVY"]
[Wed Mar 18 20:13:52.403934 2026] [:error] [pid 53755:tid 53758] [client 20.120.18.145:60097] [client 20.120.18.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/randkeyword.PhP7"] [unique_id "abqXAKqw5ZSRshmIhWksfAAAAUE"]
[Wed Mar 18 20:13:55.899414 2026] [:error] [pid 42871:tid 42928] [client 20.120.18.145:60145] [client 20.120.18.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/randkeyword.PhP7"] [unique_id "abqXA2PUS0lM1M9nUaJfvQAAAI4"]
[Wed Mar 18 20:13:57.572204 2026] [:error] [pid 31232:tid 31250] [client 20.120.18.145:60148] [client 20.120.18.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/randkeyword.PhP7"] [unique_id "abqXBWX6HV7dqh3BQD3rUgAAAE8"]
[Thu Mar 19 03:01:37.531254 2026] [proxy_fcgi:error] [pid 19431:tid 19486] [client 4.204.253.219:2741] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 03:01:37.961873 2026] [:error] [pid 19431:tid 19495] [client 4.204.253.219:2741] [client 4.204.253.219] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.204.253.219, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-content/uploads/wp-login.php"] [unique_id "abr2kTioVgnJ_ZdBjcuirAAAAEo"]
[Thu Mar 19 03:01:38.183298 2026] [proxy_fcgi:error] [pid 19431:tid 19497] [client 4.204.253.219:2741] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 03:01:39.148591 2026] [proxy_fcgi:error] [pid 19431:tid 19488] [client 4.204.253.219:2741] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 03:01:39.858153 2026] [proxy_fcgi:error] [pid 19431:tid 19492] [client 4.204.253.219:2741] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 03:01:40.135622 2026] [:error] [pid 19431:tid 19502] [client 4.204.253.219:2741] [client 4.204.253.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "abr2lDioVgnJ_ZdBjcuiugAAAFE"]
[Thu Mar 19 03:01:41.831321 2026] [:error] [pid 19431:tid 19504] [client 4.204.253.219:2814] [client 4.204.253.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "abr2lTioVgnJ_ZdBjcuivwAAAFM"]
[Thu Mar 19 03:01:43.849337 2026] [:error] [pid 41180:tid 41192] [client 4.204.253.219:2699] [client 4.204.253.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "abr2l7uSQ3z2YqXgnydHvQAAAMo"]
[Thu Mar 19 03:01:45.432471 2026] [:error] [pid 19208:tid 19347] [client 4.204.253.219:2781] [client 4.204.253.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "abr2md4kPqt9Qws3poFxLQAAAIQ"]
[Thu Mar 19 06:31:03.991489 2026] [:error] [pid 3278:tid 3292] [client 31.171.130.29:56697] [client 31.171.130.29] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.29, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-login.php"] [unique_id "absnpwC2T_lM6ZgvfcQ0nQAAAQs"]
[Thu Mar 19 06:31:04.013287 2026] [proxy_fcgi:error] [pid 3278:tid 3292] [client 31.171.130.29:56697] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 07:51:05.575868 2026] [:error] [pid 23882:tid 23905] [client 91.99.186.86:44216] [client 91.99.186.86] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/"] [unique_id "abs6abWnClbtbN12M78ObAAAAAM"]
[Thu Mar 19 09:45:14.007897 2026] [:error] [pid 32226:tid 32234] [client 128.140.55.176:45242] [client 128.140.55.176] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/"] [unique_id "abtVKrBb58lgPwqxC6q-IAAAAwY"]
[Thu Mar 19 12:54:12.218398 2026] [:error] [pid 25135:tid 25145] [client 154.16.49.101:6078] [client 154.16.49.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/"] [unique_id "abuBdKKtE0dzgMctjFXtQAAAA0g"]
[Thu Mar 19 12:54:12.716411 2026] [:error] [pid 31205:tid 31231] [client 154.16.49.101:6338] [client 154.16.49.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/ID3/license.txt"] [unique_id "abuBdFu5gZKGrGz5P1GnpAAAAU4"]
[Thu Mar 19 12:54:13.208981 2026] [:error] [pid 25135:tid 25148] [client 154.16.49.101:6521] [client 154.16.49.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/feed/"] [unique_id "abuBdaKtE0dzgMctjFXtXwAAA0s"]
[Thu Mar 19 20:07:26.745394 2026] [:error] [pid 1285:tid 1309] [client 45.131.195.19:32607] [client 45.131.195.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.19, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-login.php"] [unique_id "abvm_lE95r3zR75X1Hok0QAAAhY"]
[Thu Mar 19 20:07:26.755302 2026] [proxy_fcgi:error] [pid 1285:tid 1309] [client 45.131.195.19:32607] AH01071: Got error 'Primary script unknown'
[Fri Mar 20 01:14:29.810888 2026] [:error] [pid 46264:tid 46289] [client 209.97.171.56:52453] [client 209.97.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/"] [unique_id "abwu9Yp3TruHFmWOt5HWVQAAAAY"]
[Fri Mar 20 01:14:30.008586 2026] [:error] [pid 46264:tid 46285] [client 209.97.171.56:53081] [client 209.97.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/"] [unique_id "abwu9op3TruHFmWOt5HWdwAAAAI"]
[Fri Mar 20 01:14:30.315319 2026] [:error] [pid 46125:tid 46225] [client 209.97.171.56:59331] [client 209.97.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "abwu9mgN4lI6NHeckY5cKAAAAIg"]
[Fri Mar 20 01:14:32.026063 2026] [:error] [pid 46126:tid 46216] [client 209.97.171.56:62361] [client 209.97.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/"] [unique_id "abwu-KQ44YePbsZz3j7MagAAAQM"]
[Fri Mar 20 20:13:29.774705 2026] [:error] [pid 27302:tid 27305] [client 216.24.212.33:36281] [client 216.24.212.33] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.212.33, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-login.php"] [unique_id "ab056bDKiUve17xv6yF6GAAAAME"]
[Fri Mar 20 20:13:29.792534 2026] [proxy_fcgi:error] [pid 27302:tid 27305] [client 216.24.212.33:36281] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 11:05:28.226317 2026] [:error] [pid 51361:tid 51375] [client 185.198.240.83:65213] [client 185.198.240.83] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.198.240.83, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-login.php"] [unique_id "ab9ceBXYUsdvKC9YWpVrOgAAAAQ"]
[Sun Mar 22 11:05:28.236144 2026] [proxy_fcgi:error] [pid 51361:tid 51375] [client 185.198.240.83:65213] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 17:57:13.156080 2026] [proxy_fcgi:error] [pid 51362:tid 51424] [client 20.203.162.101:22343] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 17:57:13.464154 2026] [proxy_fcgi:error] [pid 51362:tid 51415] [client 20.203.162.101:22343] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 17:57:13.708382 2026] [proxy_fcgi:error] [pid 51362:tid 51406] [client 20.203.162.101:22343] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 17:57:13.947616 2026] [proxy_fcgi:error] [pid 51362:tid 51421] [client 20.203.162.101:22343] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 17:57:14.187505 2026] [proxy_fcgi:error] [pid 51362:tid 51400] [client 20.203.162.101:22343] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 17:57:14.472230 2026] [proxy_fcgi:error] [pid 51362:tid 51414] [client 20.203.162.101:22343] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 17:57:14.712661 2026] [proxy_fcgi:error] [pid 51362:tid 51416] [client 20.203.162.101:22343] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 17:57:14.994524 2026] [proxy_fcgi:error] [pid 51362:tid 51400] [client 20.203.162.101:22343] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 17:57:15.238671 2026] [proxy_fcgi:error] [pid 51362:tid 51424] [client 20.203.162.101:22343] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 17:57:15.480965 2026] [proxy_fcgi:error] [pid 51362:tid 51421] [client 20.203.162.101:22343] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 17:57:15.717647 2026] [:error] [pid 51362:tid 51412] [client 20.203.162.101:22343] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/inege.php"] [unique_id "ab-8-8OwPm3DXzTDjUd1kwAAAEs"]
[Sun Mar 22 17:57:16.239164 2026] [:error] [pid 30166:tid 30193] [client 20.203.162.101:29837] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/inege.php"] [unique_id "ab-8_Lm4_26jKMD0zy2yrgAAAVI"]
[Sun Mar 22 17:57:16.799950 2026] [:error] [pid 40039:tid 40055] [client 20.203.162.101:1499] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/inege.php"] [unique_id "ab-8_B3aDgUJfBYishmTvgAAAQ4"]
[Sun Mar 22 17:57:17.278339 2026] [:error] [pid 30166:tid 30188] [client 20.203.162.101:20960] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/inege.php"] [unique_id "ab-8_bm4_26jKMD0zy2ytwAAAU0"]
[Sun Mar 22 17:57:17.856738 2026] [:error] [pid 40039:tid 40049] [client 20.203.162.101:11207] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/19.php"] [unique_id "ab-8_R3aDgUJfBYishmTvwAAAQg"]
[Sun Mar 22 17:57:18.401496 2026] [:error] [pid 51363:tid 51436] [client 20.203.162.101:29925] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/19.php"] [unique_id "ab-8_lwa9x6OCTRkhl1nHAAAAIc"]
[Sun Mar 22 17:57:19.016735 2026] [:error] [pid 30166:tid 30177] [client 20.203.162.101:25308] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/19.php"] [unique_id "ab-8_7m4_26jKMD0zy2yyAAAAUY"]
[Sun Mar 22 17:57:19.716678 2026] [:error] [pid 51362:tid 51409] [client 20.203.162.101:15796] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/19.php"] [unique_id "ab-8_8OwPm3DXzTDjUd1xQAAAEg"]
[Sun Mar 22 17:57:20.318424 2026] [:error] [pid 51362:tid 51402] [client 20.203.162.101:20942] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fe5.php"] [unique_id "ab-9AMOwPm3DXzTDjUd1yAAAAEI"]
[Sun Mar 22 17:57:20.848885 2026] [:error] [pid 51361:tid 51384] [client 20.203.162.101:14120] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fe5.php"] [unique_id "ab-9ABXYUsdvKC9YWpXGqQAAAA0"]
[Sun Mar 22 17:57:21.355331 2026] [:error] [pid 30166:tid 30197] [client 20.203.162.101:1254] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fe5.php"] [unique_id "ab-9Abm4_26jKMD0zy2y0gAAAVQ"]
[Sun Mar 22 17:57:21.945976 2026] [:error] [pid 51362:tid 51409] [client 20.203.162.101:11242] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fe5.php"] [unique_id "ab-9AcOwPm3DXzTDjUd1zQAAAEg"]
[Sun Mar 22 17:57:22.473506 2026] [:error] [pid 40039:tid 40043] [client 20.203.162.101:29948] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file61.php"] [unique_id "ab-9Ah3aDgUJfBYishmTwgAAAQI"]
[Sun Mar 22 17:57:22.957435 2026] [:error] [pid 51468:tid 51498] [client 20.203.162.101:9508] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file61.php"] [unique_id "ab-9Ak2TppSvA8W5CBQpSQAAANY"]
[Sun Mar 22 17:57:23.457699 2026] [:error] [pid 51362:tid 51404] [client 20.203.162.101:16880] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file61.php"] [unique_id "ab-9A8OwPm3DXzTDjUd1zgAAAEM"]
[Sun Mar 22 17:57:23.971481 2026] [:error] [pid 40039:tid 40044] [client 20.203.162.101:14759] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file61.php"] [unique_id "ab-9Ax3aDgUJfBYishmTxQAAAQM"]
[Sun Mar 22 17:57:24.618067 2026] [:error] [pid 30166:tid 30191] [client 20.203.162.101:14731] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/uuu.php"] [unique_id "ab-9BLm4_26jKMD0zy2y2gAAAVA"]
[Sun Mar 22 17:57:25.210803 2026] [:error] [pid 30166:tid 30193] [client 20.203.162.101:7232] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/uuu.php"] [unique_id "ab-9Bbm4_26jKMD0zy2y3QAAAVI"]
[Sun Mar 22 17:57:25.695287 2026] [:error] [pid 51362:tid 51423] [client 20.203.162.101:14113] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/uuu.php"] [unique_id "ab-9BcOwPm3DXzTDjUd10gAAAFY"]
[Sun Mar 22 17:57:26.225902 2026] [:error] [pid 51468:tid 51483] [client 20.203.162.101:1489] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/uuu.php"] [unique_id "ab-9Bk2TppSvA8W5CBQpVwAAAMc"]
[Sun Mar 22 17:57:26.766484 2026] [:error] [pid 40039:tid 40065] [client 20.203.162.101:46347] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/settings.php"] [unique_id "ab-9Bh3aDgUJfBYishmTyQAAARg"]
[Sun Mar 22 17:57:27.277106 2026] [:error] [pid 51362:tid 51406] [client 20.203.162.101:13778] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/settings.php"] [unique_id "ab-9B8OwPm3DXzTDjUd11gAAAEU"]
[Sun Mar 22 17:57:27.821867 2026] [:error] [pid 51363:tid 51436] [client 20.203.162.101:45777] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/settings.php"] [unique_id "ab-9B1wa9x6OCTRkhl1nIgAAAIc"]
[Sun Mar 22 17:57:28.297362 2026] [:error] [pid 51468:tid 51488] [client 20.203.162.101:14722] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/settings.php"] [unique_id "ab-9CE2TppSvA8W5CBQpZAAAAMw"]
[Sun Mar 22 17:57:28.770309 2026] [:error] [pid 51362:tid 51412] [client 20.203.162.101:1517] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sf.php"] [unique_id "ab-9CMOwPm3DXzTDjUd12AAAAEs"]
[Sun Mar 22 17:57:29.362336 2026] [:error] [pid 51362:tid 51416] [client 20.203.162.101:1034] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sf.php"] [unique_id "ab-9CcOwPm3DXzTDjUd13AAAAE8"]
[Sun Mar 22 17:57:29.876118 2026] [:error] [pid 51362:tid 51418] [client 20.203.162.101:1523] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sf.php"] [unique_id "ab-9CcOwPm3DXzTDjUd14AAAAFE"]
[Sun Mar 22 17:57:30.441624 2026] [:error] [pid 51362:tid 51406] [client 20.203.162.101:14774] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sf.php"] [unique_id "ab-9CsOwPm3DXzTDjUd14wAAAEU"]
[Sun Mar 22 17:57:30.916805 2026] [:error] [pid 51363:tid 51450] [client 20.203.162.101:15173] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/eee.php"] [unique_id "ab-9Clwa9x6OCTRkhl1nKQAAAJQ"]
[Sun Mar 22 17:57:31.448740 2026] [:error] [pid 51361:tid 51376] [client 20.203.162.101:18611] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/eee.php"] [unique_id "ab-9CxXYUsdvKC9YWpXGswAAAAU"]
[Sun Mar 22 17:57:31.989675 2026] [:error] [pid 51362:tid 51422] [client 20.203.162.101:7264] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/eee.php"] [unique_id "ab-9C8OwPm3DXzTDjUd16QAAAFU"]
[Sun Mar 22 17:57:32.555583 2026] [:error] [pid 51468:tid 51480] [client 20.203.162.101:14415] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/eee.php"] [unique_id "ab-9DE2TppSvA8W5CBQpaAAAAMQ"]
[Sun Mar 22 17:57:33.062952 2026] [:error] [pid 51361:tid 51396] [client 20.203.162.101:11245] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/no1.php"] [unique_id "ab-9DRXYUsdvKC9YWpXGtAAAABc"]
[Sun Mar 22 17:57:33.593492 2026] [:error] [pid 51362:tid 51408] [client 20.203.162.101:10909] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/no1.php"] [unique_id "ab-9DcOwPm3DXzTDjUd18QAAAEc"]
[Sun Mar 22 17:57:34.070935 2026] [:error] [pid 30166:tid 30184] [client 20.203.162.101:46345] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/no1.php"] [unique_id "ab-9Drm4_26jKMD0zy2y5wAAAUk"]
[Sun Mar 22 17:57:34.551581 2026] [:error] [pid 51468:tid 51489] [client 20.203.162.101:1072] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/no1.php"] [unique_id "ab-9Dk2TppSvA8W5CBQpawAAAM0"]
[Sun Mar 22 17:57:35.077826 2026] [:error] [pid 51363:tid 51436] [client 20.203.162.101:1069] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/w2025.php"] [unique_id "ab-9D1wa9x6OCTRkhl1nMQAAAIc"]
[Sun Mar 22 17:57:35.564394 2026] [:error] [pid 51363:tid 51428] [client 20.203.162.101:7279] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/w2025.php"] [unique_id "ab-9D1wa9x6OCTRkhl1nMwAAAIA"]
[Sun Mar 22 17:57:36.144427 2026] [:error] [pid 51362:tid 51408] [client 20.203.162.101:7259] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/w2025.php"] [unique_id "ab-9EMOwPm3DXzTDjUd1-QAAAEc"]
[Sun Mar 22 17:57:36.644282 2026] [:error] [pid 51468:tid 51477] [client 20.203.162.101:7244] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/w2025.php"] [unique_id "ab-9EE2TppSvA8W5CBQpbAAAAME"]
[Sun Mar 22 17:57:37.146193 2026] [:error] [pid 51468:tid 51493] [client 20.203.162.101:27821] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/swallowable.php"] [unique_id "ab-9EU2TppSvA8W5CBQpbgAAANE"]
[Sun Mar 22 17:57:37.655739 2026] [:error] [pid 51363:tid 51444] [client 20.203.162.101:27783] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/swallowable.php"] [unique_id "ab-9EVwa9x6OCTRkhl1nOgAAAI8"]
[Sun Mar 22 17:57:38.166574 2026] [:error] [pid 51363:tid 51451] [client 20.203.162.101:16272] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/swallowable.php"] [unique_id "ab-9Elwa9x6OCTRkhl1nOwAAAJU"]
[Sun Mar 22 17:57:38.677415 2026] [:error] [pid 51362:tid 51422] [client 20.203.162.101:7248] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/swallowable.php"] [unique_id "ab-9EsOwPm3DXzTDjUd1_AAAAFU"]
[Sun Mar 22 17:57:39.272789 2026] [:error] [pid 51362:tid 51416] [client 20.203.162.101:15758] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fvvff.php"] [unique_id "ab-9E8OwPm3DXzTDjUd2AAAAAE8"]
[Sun Mar 22 17:57:39.748088 2026] [:error] [pid 51362:tid 51404] [client 20.203.162.101:1048] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fvvff.php"] [unique_id "ab-9E8OwPm3DXzTDjUd2AQAAAEM"]
[Sun Mar 22 17:57:40.299601 2026] [:error] [pid 40039:tid 40048] [client 20.203.162.101:46416] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fvvff.php"] [unique_id "ab-9FB3aDgUJfBYishmTzAAAAQc"]
[Sun Mar 22 17:57:40.838334 2026] [:error] [pid 51363:tid 51446] [client 20.203.162.101:46366] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fvvff.php"] [unique_id "ab-9FFwa9x6OCTRkhl1nRgAAAJA"]
[Sun Mar 22 17:57:41.324461 2026] [:error] [pid 51362:tid 51417] [client 20.203.162.101:1037] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a2.php"] [unique_id "ab-9FcOwPm3DXzTDjUd2BAAAAFA"]
[Sun Mar 22 17:57:41.832577 2026] [:error] [pid 51468:tid 51485] [client 20.203.162.101:8457] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a2.php"] [unique_id "ab-9FU2TppSvA8W5CBQpcwAAAMk"]
[Sun Mar 22 17:57:42.310104 2026] [:error] [pid 51361:tid 51378] [client 20.203.162.101:1087] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a2.php"] [unique_id "ab-9FhXYUsdvKC9YWpXGuwAAAAc"]
[Sun Mar 22 17:57:42.929398 2026] [:error] [pid 51363:tid 51430] [client 20.203.162.101:13673] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a2.php"] [unique_id "ab-9Flwa9x6OCTRkhl1nTAAAAII"]
[Sun Mar 22 17:57:43.429003 2026] [:error] [pid 51362:tid 51418] [client 20.203.162.101:43779] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sty.php"] [unique_id "ab-9F8OwPm3DXzTDjUd2CgAAAFE"]
[Sun Mar 22 17:57:44.016061 2026] [:error] [pid 51361:tid 51396] [client 20.203.162.101:46441] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sty.php"] [unique_id "ab-9GBXYUsdvKC9YWpXGwAAAABc"]
[Sun Mar 22 17:57:44.513153 2026] [:error] [pid 51361:tid 51391] [client 20.203.162.101:13677] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sty.php"] [unique_id "ab-9GBXYUsdvKC9YWpXGwQAAABM"]
[Sun Mar 22 17:57:44.992870 2026] [:error] [pid 40039:tid 40064] [client 20.203.162.101:10881] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sty.php"] [unique_id "ab-9GB3aDgUJfBYishmT0QAAARc"]
[Sun Mar 22 17:57:45.480894 2026] [:error] [pid 51362:tid 51406] [client 20.203.162.101:14430] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/path.php"] [unique_id "ab-9GcOwPm3DXzTDjUd2EAAAAEU"]
[Sun Mar 22 17:57:46.003575 2026] [:error] [pid 51362:tid 51401] [client 20.203.162.101:27784] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/path.php"] [unique_id "ab-9GsOwPm3DXzTDjUd2EQAAAEE"]
[Sun Mar 22 17:57:46.498811 2026] [:error] [pid 51361:tid 51393] [client 20.203.162.101:43791] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/path.php"] [unique_id "ab-9GhXYUsdvKC9YWpXGwgAAABU"]
[Sun Mar 22 17:57:47.057670 2026] [:error] [pid 30166:tid 30193] [client 20.203.162.101:16791] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/path.php"] [unique_id "ab-9G7m4_26jKMD0zy2y-wAAAVI"]
[Sun Mar 22 17:57:47.559377 2026] [:error] [pid 51468:tid 51497] [client 20.203.162.101:1869] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/txets.php"] [unique_id "ab-9G02TppSvA8W5CBQpeAAAANU"]
[Sun Mar 22 17:57:48.048707 2026] [:error] [pid 30166:tid 30176] [client 20.203.162.101:14433] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/txets.php"] [unique_id "ab-9HLm4_26jKMD0zy2zAQAAAUU"]
[Sun Mar 22 17:57:48.530919 2026] [:error] [pid 40039:tid 40051] [client 20.203.162.101:17079] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/txets.php"] [unique_id "ab-9HB3aDgUJfBYishmT1AAAAQo"]
[Sun Mar 22 17:57:49.015601 2026] [:error] [pid 30166:tid 30192] [client 20.203.162.101:43825] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/txets.php"] [unique_id "ab-9Hbm4_26jKMD0zy2zBQAAAVE"]
[Sun Mar 22 17:57:49.564180 2026] [:error] [pid 30166:tid 30196] [client 20.203.162.101:10908] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/edit.php"] [unique_id "ab-9Hbm4_26jKMD0zy2zCAAAAVM"]
[Sun Mar 22 17:57:50.057359 2026] [:error] [pid 30166:tid 30197] [client 20.203.162.101:48365] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/edit.php"] [unique_id "ab-9Hrm4_26jKMD0zy2zDAAAAVQ"]
[Sun Mar 22 17:57:50.547454 2026] [:error] [pid 30166:tid 30176] [client 20.203.162.101:25753] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/edit.php"] [unique_id "ab-9Hrm4_26jKMD0zy2zDwAAAUU"]
[Sun Mar 22 17:57:51.057276 2026] [:error] [pid 51361:tid 51373] [client 20.203.162.101:27809] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/edit.php"] [unique_id "ab-9HxXYUsdvKC9YWpXGxAAAAAI"]
[Sun Mar 22 17:57:51.600962 2026] [:error] [pid 30166:tid 30193] [client 20.203.162.101:16775] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ioxi-o.php"] [unique_id "ab-9H7m4_26jKMD0zy2zFQAAAVI"]
[Sun Mar 22 17:57:52.156626 2026] [:error] [pid 51468:tid 51499] [client 20.203.162.101:8353] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ioxi-o.php"] [unique_id "ab-9IE2TppSvA8W5CBQpggAAANc"]
[Sun Mar 22 17:57:52.682011 2026] [:error] [pid 51468:tid 51492] [client 20.203.162.101:16317] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ioxi-o.php"] [unique_id "ab-9IE2TppSvA8W5CBQphAAAANA"]
[Sun Mar 22 17:57:53.203037 2026] [:error] [pid 30166:tid 30171] [client 20.203.162.101:11933] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ioxi-o.php"] [unique_id "ab-9Ibm4_26jKMD0zy2zGgAAAUE"]
[Sun Mar 22 17:57:53.701940 2026] [:error] [pid 51361:tid 51392] [client 20.203.162.101:16538] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "ab-9IRXYUsdvKC9YWpXGyAAAABQ"]
[Sun Mar 22 17:57:54.175658 2026] [:error] [pid 30166:tid 30199] [client 20.203.162.101:27813] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "ab-9Irm4_26jKMD0zy2zHAAAAVY"]
[Sun Mar 22 17:57:54.719979 2026] [:error] [pid 40039:tid 40050] [client 20.203.162.101:16547] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "ab-9Ih3aDgUJfBYishmT2AAAAQk"]
[Sun Mar 22 17:57:55.267889 2026] [:error] [pid 40039:tid 40052] [client 20.203.162.101:17882] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "ab-9Ix3aDgUJfBYishmT2QAAAQs"]
[Sun Mar 22 17:57:55.846922 2026] [:error] [pid 30166:tid 30186] [client 20.203.162.101:1891] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/66.php"] [unique_id "ab-9I7m4_26jKMD0zy2zHwAAAUs"]
[Sun Mar 22 17:57:56.355370 2026] [:error] [pid 30166:tid 30182] [client 20.203.162.101:1864] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/66.php"] [unique_id "ab-9JLm4_26jKMD0zy2zIQAAAUc"]
[Sun Mar 22 17:57:56.951001 2026] [:error] [pid 40039:tid 40058] [client 20.203.162.101:13642] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/66.php"] [unique_id "ab-9JB3aDgUJfBYishmT2gAAARE"]
[Sun Mar 22 17:57:57.503921 2026] [:error] [pid 30166:tid 30198] [client 20.203.162.101:27793] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/66.php"] [unique_id "ab-9Jbm4_26jKMD0zy2zJQAAAVU"]
[Sun Mar 22 17:57:57.983385 2026] [:error] [pid 51362:tid 51417] [client 20.203.162.101:27349] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a5.php"] [unique_id "ab-9JcOwPm3DXzTDjUd2KQAAAFA"]
[Sun Mar 22 17:57:58.464749 2026] [:error] [pid 51362:tid 51421] [client 20.203.162.101:16573] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a5.php"] [unique_id "ab-9JsOwPm3DXzTDjUd2LAAAAFQ"]
[Sun Mar 22 17:57:58.944757 2026] [:error] [pid 51468:tid 51491] [client 20.203.162.101:8466] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a5.php"] [unique_id "ab-9Jk2TppSvA8W5CBQpjQAAAM8"]
[Sun Mar 22 17:57:59.450953 2026] [:error] [pid 51362:tid 51405] [client 20.203.162.101:7405] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a5.php"] [unique_id "ab-9J8OwPm3DXzTDjUd2NAAAAEQ"]
[Sun Mar 22 17:58:00.066432 2026] [:error] [pid 51361:tid 51383] [client 20.203.162.101:17046] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xmlrpc.php"] [unique_id "ab-9KBXYUsdvKC9YWpXGywAAAAw"]
[Sun Mar 22 17:58:00.638996 2026] [:error] [pid 51363:tid 51450] [client 20.203.162.101:8783] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xmlrpc.php"] [unique_id "ab-9KFwa9x6OCTRkhl1nTwAAAJQ"]
[Sun Mar 22 17:58:01.175993 2026] [:error] [pid 51468:tid 51485] [client 20.203.162.101:16770] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xmlrpc.php"] [unique_id "ab-9KU2TppSvA8W5CBQpmAAAAMk"]
[Sun Mar 22 17:58:01.690091 2026] [:error] [pid 51363:tid 51451] [client 20.203.162.101:8814] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xmlrpc.php"] [unique_id "ab-9KVwa9x6OCTRkhl1nUgAAAJU"]
[Sun Mar 22 17:58:02.244958 2026] [:error] [pid 30166:tid 30200] [client 20.203.162.101:27331] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ol.php"] [unique_id "ab-9Krm4_26jKMD0zy2zLgAAAVc"]
[Sun Mar 22 17:58:02.850252 2026] [:error] [pid 51363:tid 51443] [client 20.203.162.101:43801] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ol.php"] [unique_id "ab-9Klwa9x6OCTRkhl1nUwAAAI4"]
[Sun Mar 22 17:58:03.383368 2026] [:error] [pid 51361:tid 51382] [client 20.203.162.101:8817] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ol.php"] [unique_id "ab-9KxXYUsdvKC9YWpXGzgAAAAs"]
[Sun Mar 22 17:58:03.936989 2026] [:error] [pid 51363:tid 51449] [client 20.203.162.101:8480] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ol.php"] [unique_id "ab-9K1wa9x6OCTRkhl1nVQAAAJM"]
[Sun Mar 22 17:58:04.630250 2026] [:error] [pid 51361:tid 51372] [client 20.203.162.101:43810] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f6.php"] [unique_id "ab-9LBXYUsdvKC9YWpXGzwAAAAE"]
[Sun Mar 22 17:58:05.173307 2026] [:error] [pid 40039:tid 40054] [client 20.203.162.101:8819] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f6.php"] [unique_id "ab-9LR3aDgUJfBYishmT4AAAAQ0"]
[Sun Mar 22 17:58:05.755018 2026] [:error] [pid 51362:tid 51421] [client 20.203.162.101:16611] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f6.php"] [unique_id "ab-9LcOwPm3DXzTDjUd2OQAAAFQ"]
[Sun Mar 22 17:58:06.318931 2026] [:error] [pid 30166:tid 30193] [client 20.203.162.101:43832] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f6.php"] [unique_id "ab-9Lrm4_26jKMD0zy2zPAAAAVI"]
[Sun Mar 22 17:58:06.803532 2026] [:error] [pid 51362:tid 51425] [client 20.203.162.101:8493] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/inputs.php"] [unique_id "ab-9LsOwPm3DXzTDjUd2OgAAAFg"]
[Sun Mar 22 17:58:07.385113 2026] [:error] [pid 30166:tid 30174] [client 20.203.162.101:17050] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/inputs.php"] [unique_id "ab-9L7m4_26jKMD0zy2zQQAAAUM"]
[Sun Mar 22 17:58:07.902016 2026] [:error] [pid 30166:tid 30171] [client 20.203.162.101:7374] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/inputs.php"] [unique_id "ab-9L7m4_26jKMD0zy2zQwAAAUE"]
[Sun Mar 22 17:58:08.473022 2026] [:error] [pid 30166:tid 30176] [client 20.203.162.101:27832] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/inputs.php"] [unique_id "ab-9MLm4_26jKMD0zy2zRAAAAUU"]
[Sun Mar 22 17:58:09.037392 2026] [:error] [pid 40039:tid 40048] [client 20.203.162.101:17869] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/style.php"] [unique_id "ab-9MR3aDgUJfBYishmT4wAAAQc"]
[Sun Mar 22 17:58:09.518646 2026] [:error] [pid 51362:tid 51417] [client 20.203.162.101:43797] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/style.php"] [unique_id "ab-9McOwPm3DXzTDjUd2RgAAAFA"]
[Sun Mar 22 17:58:10.299737 2026] [:error] [pid 51362:tid 51416] [client 20.203.162.101:11916] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/style.php"] [unique_id "ab-9MsOwPm3DXzTDjUd2SgAAAE8"]
[Sun Mar 22 17:58:10.785293 2026] [:error] [pid 51362:tid 51415] [client 20.203.162.101:25750] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/style.php"] [unique_id "ab-9MsOwPm3DXzTDjUd2TAAAAE4"]
[Sun Mar 22 17:58:11.316058 2026] [:error] [pid 51362:tid 51411] [client 20.203.162.101:11674] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bgymj.php"] [unique_id "ab-9M8OwPm3DXzTDjUd2UgAAAEo"]
[Sun Mar 22 17:58:11.982745 2026] [:error] [pid 40039:tid 40045] [client 20.203.162.101:30339] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bgymj.php"] [unique_id "ab-9Mx3aDgUJfBYishmT5wAAAQQ"]
[Sun Mar 22 17:58:12.582692 2026] [:error] [pid 30166:tid 30177] [client 20.203.162.101:7366] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bgymj.php"] [unique_id "ab-9NLm4_26jKMD0zy2zTAAAAUY"]
[Sun Mar 22 17:58:13.086891 2026] [:error] [pid 51362:tid 51400] [client 20.203.162.101:7423] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bgymj.php"] [unique_id "ab-9NcOwPm3DXzTDjUd2WAAAAEA"]
[Sun Mar 22 17:58:13.674301 2026] [:error] [pid 30166:tid 30190] [client 20.203.162.101:48355] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aa.php"] [unique_id "ab-9Nbm4_26jKMD0zy2zUwAAAU8"]
[Sun Mar 22 17:58:14.270578 2026] [:error] [pid 51361:tid 51382] [client 20.203.162.101:11673] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aa.php"] [unique_id "ab-9NhXYUsdvKC9YWpXG1gAAAAs"]
[Sun Mar 22 17:58:14.888732 2026] [:error] [pid 30166:tid 30199] [client 20.203.162.101:1908] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aa.php"] [unique_id "ab-9Nrm4_26jKMD0zy2zVAAAAVY"]
[Sun Mar 22 17:58:15.509559 2026] [proxy_fcgi:error] [pid 51361:tid 51372] [client 20.203.162.101:48378] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 17:58:15.750400 2026] [proxy_fcgi:error] [pid 51361:tid 51387] [client 20.203.162.101:48378] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 17:58:15.991981 2026] [proxy_fcgi:error] [pid 51361:tid 51373] [client 20.203.162.101:48378] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 17:58:16.478537 2026] [proxy_fcgi:error] [pid 51361:tid 51381] [client 20.203.162.101:48378] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 17:58:16.721200 2026] [proxy_fcgi:error] [pid 51361:tid 51384] [client 20.203.162.101:48378] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 17:58:16.975272 2026] [proxy_fcgi:error] [pid 51361:tid 51396] [client 20.203.162.101:48378] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 17:58:17.268268 2026] [proxy_fcgi:error] [pid 51361:tid 51379] [client 20.203.162.101:48378] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 17:58:17.520087 2026] [proxy_fcgi:error] [pid 51361:tid 51377] [client 20.203.162.101:48378] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 17:58:17.809718 2026] [proxy_fcgi:error] [pid 51361:tid 51393] [client 20.203.162.101:48378] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 17:58:18.050492 2026] [proxy_fcgi:error] [pid 51361:tid 51395] [client 20.203.162.101:48378] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 17:58:18.292415 2026] [:error] [pid 51361:tid 51389] [client 20.203.162.101:48378] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "ab-9OhXYUsdvKC9YWpXG6QAAABE"]
[Sun Mar 22 17:58:18.913448 2026] [:error] [pid 51468:tid 51500] [client 20.203.162.101:48339] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "ab-9Ok2TppSvA8W5CBQpoQAAANg"]
[Sun Mar 22 17:58:19.460152 2026] [:error] [pid 30166:tid 30191] [client 20.203.162.101:26818] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "ab-9O7m4_26jKMD0zy2zXAAAAVA"]
[Sun Mar 22 17:58:19.959895 2026] [:error] [pid 30166:tid 30197] [client 20.203.162.101:1899] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "ab-9O7m4_26jKMD0zy2zXQAAAVQ"]
[Sun Mar 22 17:58:20.465406 2026] [:error] [pid 51362:tid 51408] [client 20.203.162.101:8505] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tinyfilemanager.php"] [unique_id "ab-9PMOwPm3DXzTDjUd2agAAAEc"]
[Sun Mar 22 17:58:21.149282 2026] [:error] [pid 51468:tid 51487] [client 20.203.162.101:25782] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tinyfilemanager.php"] [unique_id "ab-9PU2TppSvA8W5CBQppQAAAMs"]
[Sun Mar 22 17:58:21.770999 2026] [:error] [pid 51468:tid 51493] [client 20.203.162.101:16548] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tinyfilemanager.php"] [unique_id "ab-9PU2TppSvA8W5CBQppgAAANE"]
[Sun Mar 22 17:58:22.308149 2026] [:error] [pid 30166:tid 30182] [client 20.203.162.101:27334] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tinyfilemanager.php"] [unique_id "ab-9Prm4_26jKMD0zy2zYQAAAUc"]
[Sun Mar 22 17:58:22.865836 2026] [:error] [pid 51468:tid 51485] [client 20.203.162.101:11789] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ms.php"] [unique_id "ab-9Pk2TppSvA8W5CBQpqAAAAMk"]
[Sun Mar 22 17:58:23.392327 2026] [:error] [pid 51468:tid 51488] [client 20.203.162.101:25731] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ms.php"] [unique_id "ab-9P02TppSvA8W5CBQpqQAAAMw"]
[Sun Mar 22 17:58:23.881649 2026] [:error] [pid 51362:tid 51413] [client 20.203.162.101:8382] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ms.php"] [unique_id "ab-9P8OwPm3DXzTDjUd2egAAAEw"]
[Sun Mar 22 17:58:24.368378 2026] [:error] [pid 51362:tid 51412] [client 20.203.162.101:17905] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ms.php"] [unique_id "ab-9QMOwPm3DXzTDjUd2fgAAAEs"]
[Sun Mar 22 17:58:24.963324 2026] [:error] [pid 40039:tid 40063] [client 20.203.162.101:48364] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-update.php"] [unique_id "ab-9QB3aDgUJfBYishmT6wAAARY"]
[Sun Mar 22 17:58:25.528191 2026] [:error] [pid 40039:tid 40049] [client 20.203.162.101:9395] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-update.php"] [unique_id "ab-9QR3aDgUJfBYishmT7gAAAQg"]
[Sun Mar 22 17:58:26.067968 2026] [:error] [pid 30166:tid 30175] [client 20.203.162.101:48347] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-update.php"] [unique_id "ab-9Qrm4_26jKMD0zy2zaAAAAUQ"]
[Sun Mar 22 17:58:26.553789 2026] [:error] [pid 51468:tid 51483] [client 20.203.162.101:12453] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-update.php"] [unique_id "ab-9Qk2TppSvA8W5CBQprAAAAMc"]
[Sun Mar 22 17:58:27.067763 2026] [:error] [pid 51468:tid 51495] [client 20.203.162.101:9355] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sbhu.php"] [unique_id "ab-9Q02TppSvA8W5CBQprQAAANM"]
[Sun Mar 22 17:58:27.592982 2026] [:error] [pid 30166:tid 30189] [client 20.203.162.101:16773] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sbhu.php"] [unique_id "ab-9Q7m4_26jKMD0zy2zcQAAAU4"]
[Sun Mar 22 17:58:28.079363 2026] [:error] [pid 30166:tid 30177] [client 20.203.162.101:8768] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sbhu.php"] [unique_id "ab-9RLm4_26jKMD0zy2zdwAAAUY"]
[Sun Mar 22 17:58:28.667256 2026] [:error] [pid 51361:tid 51374] [client 20.203.162.101:8460] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sbhu.php"] [unique_id "ab-9RBXYUsdvKC9YWpXG6wAAAAM"]
[Sun Mar 22 17:58:29.276956 2026] [:error] [pid 51361:tid 51378] [client 20.203.162.101:8502] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-blog.php"] [unique_id "ab-9RRXYUsdvKC9YWpXG7AAAAAc"]
[Sun Mar 22 17:58:29.783587 2026] [:error] [pid 30166:tid 30176] [client 20.203.162.101:12439] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-blog.php"] [unique_id "ab-9Rbm4_26jKMD0zy2zgwAAAUU"]
[Sun Mar 22 17:58:30.298671 2026] [:error] [pid 51362:tid 51401] [client 20.203.162.101:16607] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-blog.php"] [unique_id "ab-9RsOwPm3DXzTDjUd2iwAAAEE"]
[Sun Mar 22 17:58:30.806686 2026] [:error] [pid 51362:tid 51418] [client 20.203.162.101:27377] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-blog.php"] [unique_id "ab-9RsOwPm3DXzTDjUd2jQAAAFE"]
[Sun Mar 22 17:58:31.306336 2026] [:error] [pid 40039:tid 40054] [client 20.203.162.101:25734] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/test1.php"] [unique_id "ab-9Rx3aDgUJfBYishmT-wAAAQ0"]
[Sun Mar 22 17:58:31.905653 2026] [:error] [pid 40039:tid 40048] [client 20.203.162.101:8357] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/test1.php"] [unique_id "ab-9Rx3aDgUJfBYishmT_QAAAQc"]
[Sun Mar 22 17:58:32.397671 2026] [:error] [pid 51362:tid 51413] [client 20.203.162.101:12463] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/test1.php"] [unique_id "ab-9SMOwPm3DXzTDjUd2kQAAAEw"]
[Sun Mar 22 17:58:32.986982 2026] [:error] [pid 51362:tid 51411] [client 20.203.162.101:11793] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/test1.php"] [unique_id "ab-9SMOwPm3DXzTDjUd2lQAAAEo"]
[Sun Mar 22 17:58:33.493100 2026] [:error] [pid 40039:tid 40041] [client 20.203.162.101:16824] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "ab-9SR3aDgUJfBYishmUAQAAAQA"]
[Sun Mar 22 17:58:33.995401 2026] [:error] [pid 30166:tid 30183] [client 20.203.162.101:11779] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "ab-9Sbm4_26jKMD0zy2ziAAAAUg"]
[Sun Mar 22 17:58:34.596535 2026] [:error] [pid 51468:tid 51495] [client 20.203.162.101:11820] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "ab-9Sk2TppSvA8W5CBQpuQAAANM"]
[Sun Mar 22 17:58:35.093991 2026] [:error] [pid 51362:tid 51419] [client 20.203.162.101:27344] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "ab-9S8OwPm3DXzTDjUd2nAAAAFI"]
[Sun Mar 22 17:58:35.640460 2026] [:error] [pid 51468:tid 51494] [client 20.203.162.101:16523] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/166.php"] [unique_id "ab-9S02TppSvA8W5CBQpvgAAANI"]
[Sun Mar 22 17:58:36.136275 2026] [:error] [pid 51362:tid 51425] [client 20.203.162.101:26876] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/166.php"] [unique_id "ab-9TMOwPm3DXzTDjUd2owAAAFg"]
[Sun Mar 22 17:58:36.638783 2026] [:error] [pid 51362:tid 51419] [client 20.203.162.101:30348] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/166.php"] [unique_id "ab-9TMOwPm3DXzTDjUd2pwAAAFI"]
[Sun Mar 22 17:58:37.127556 2026] [:error] [pid 30166:tid 30196] [client 20.203.162.101:8343] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/166.php"] [unique_id "ab-9Tbm4_26jKMD0zy2zkQAAAVM"]
[Sun Mar 22 17:58:37.691640 2026] [:error] [pid 40039:tid 40063] [client 20.203.162.101:27339] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "ab-9TR3aDgUJfBYishmUBQAAARY"]
[Sun Mar 22 17:58:38.234757 2026] [:error] [pid 40039:tid 40052] [client 20.203.162.101:7370] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "ab-9Th3aDgUJfBYishmUBwAAAQs"]
[Sun Mar 22 17:58:38.825162 2026] [:error] [pid 51361:tid 51385] [client 20.203.162.101:16619] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "ab-9ThXYUsdvKC9YWpXG9AAAAA4"]
[Sun Mar 22 17:58:39.301013 2026] [:error] [pid 51361:tid 51387] [client 20.203.162.101:12471] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "ab-9TxXYUsdvKC9YWpXG9gAAAA8"]
[Sun Mar 22 17:58:39.824686 2026] [:error] [pid 51362:tid 51407] [client 20.203.162.101:16637] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ms-edit.php"] [unique_id "ab-9T8OwPm3DXzTDjUd2qgAAAEY"]
[Sun Mar 22 17:58:40.528153 2026] [:error] [pid 51362:tid 51410] [client 20.203.162.101:17882] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ms-edit.php"] [unique_id "ab-9UMOwPm3DXzTDjUd2rgAAAEk"]
[Sun Mar 22 17:58:41.071415 2026] [:error] [pid 30166:tid 30174] [client 20.203.162.101:13667] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ms-edit.php"] [unique_id "ab-9Ubm4_26jKMD0zy2zmAAAAUM"]
[Sun Mar 22 17:58:41.729342 2026] [:error] [pid 51362:tid 51411] [client 20.203.162.101:11925] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ms-edit.php"] [unique_id "ab-9UcOwPm3DXzTDjUd2sAAAAEo"]
[Sun Mar 22 17:58:42.317083 2026] [:error] [pid 51468:tid 51481] [client 20.203.162.101:8331] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/adminfuns.php"] [unique_id "ab-9Uk2TppSvA8W5CBQpyQAAAMU"]
[Sun Mar 22 17:58:42.825313 2026] [:error] [pid 30166:tid 30193] [client 20.203.162.101:30337] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/adminfuns.php"] [unique_id "ab-9Urm4_26jKMD0zy2zmwAAAVI"]
[Sun Mar 22 17:58:43.340665 2026] [:error] [pid 30166:tid 30182] [client 20.203.162.101:9405] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/adminfuns.php"] [unique_id "ab-9U7m4_26jKMD0zy2zngAAAUc"]
[Sun Mar 22 17:58:43.814089 2026] [:error] [pid 30166:tid 30184] [client 20.203.162.101:48360] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/adminfuns.php"] [unique_id "ab-9U7m4_26jKMD0zy2zoQAAAUk"]
[Sun Mar 22 17:58:44.299508 2026] [:error] [pid 51362:tid 51412] [client 20.203.162.101:12448] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/goods.php"] [unique_id "ab-9VMOwPm3DXzTDjUd2swAAAEs"]
[Sun Mar 22 17:58:44.778394 2026] [:error] [pid 51362:tid 51418] [client 20.203.162.101:13634] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/goods.php"] [unique_id "ab-9VMOwPm3DXzTDjUd2tgAAAFE"]
[Sun Mar 22 17:58:45.357826 2026] [:error] [pid 51362:tid 51409] [client 20.203.162.101:13690] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/goods.php"] [unique_id "ab-9VcOwPm3DXzTDjUd2uAAAAEg"]
[Sun Mar 22 17:58:45.834075 2026] [:error] [pid 51361:tid 51391] [client 20.203.162.101:48374] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/goods.php"] [unique_id "ab-9VRXYUsdvKC9YWpXG_AAAABM"]
[Sun Mar 22 17:58:46.512005 2026] [:error] [pid 51361:tid 51395] [client 20.203.162.101:26869] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ms-edit.php"] [unique_id "ab-9VhXYUsdvKC9YWpXG_QAAABY"]
[Sun Mar 22 17:58:46.991648 2026] [:error] [pid 51361:tid 51396] [client 20.203.162.101:26825] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ms-edit.php"] [unique_id "ab-9VhXYUsdvKC9YWpXG_gAAABc"]
[Sun Mar 22 17:58:47.478643 2026] [:error] [pid 51362:tid 51417] [client 20.203.162.101:8354] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ms-edit.php"] [unique_id "ab-9V8OwPm3DXzTDjUd2xQAAAFA"]
[Sun Mar 22 17:58:48.053629 2026] [:error] [pid 51362:tid 51425] [client 20.203.162.101:12423] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ms-edit.php"] [unique_id "ab-9WMOwPm3DXzTDjUd2ywAAAFg"]
[Sun Mar 22 17:58:48.728950 2026] [:error] [pid 51468:tid 51486] [client 20.203.162.101:8486] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/222.php"] [unique_id "ab-9WE2TppSvA8W5CBQpzgAAAMo"]
[Sun Mar 22 17:58:49.319926 2026] [:error] [pid 51362:tid 51416] [client 20.203.162.101:8497] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/222.php"] [unique_id "ab-9WcOwPm3DXzTDjUd20gAAAE8"]
[Sun Mar 22 17:58:49.798978 2026] [:error] [pid 51362:tid 51402] [client 20.203.162.101:25756] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/222.php"] [unique_id "ab-9WcOwPm3DXzTDjUd21QAAAEI"]
[Sun Mar 22 17:58:50.308597 2026] [:error] [pid 51362:tid 51404] [client 20.203.162.101:48330] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/222.php"] [unique_id "ab-9WsOwPm3DXzTDjUd23AAAAEM"]
[Sun Mar 22 17:58:50.915281 2026] [:error] [pid 51362:tid 51424] [client 20.203.162.101:16540] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cgi-bin/index.php"] [unique_id "ab-9WsOwPm3DXzTDjUd24AAAAFc"]
[Sun Mar 22 17:58:51.407610 2026] [:error] [pid 51362:tid 51413] [client 20.203.162.101:26864] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cgi-bin/index.php"] [unique_id "ab-9W8OwPm3DXzTDjUd25AAAAEw"]
[Sun Mar 22 17:58:51.900791 2026] [:error] [pid 51362:tid 51415] [client 20.203.162.101:26843] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cgi-bin/index.php"] [unique_id "ab-9W8OwPm3DXzTDjUd25gAAAE4"]
[Sun Mar 22 17:58:52.372538 2026] [:error] [pid 51363:tid 51431] [client 20.203.162.101:16580] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cgi-bin/index.php"] [unique_id "ab-9XFwa9x6OCTRkhl1ndgAAAIM"]
[Sun Mar 22 17:58:52.927657 2026] [:error] [pid 51362:tid 51420] [client 20.203.162.101:11823] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ff1.php"] [unique_id "ab-9XMOwPm3DXzTDjUd27AAAAFM"]
[Sun Mar 22 17:58:53.478636 2026] [:error] [pid 51468:tid 51494] [client 20.203.162.101:30346] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ff1.php"] [unique_id "ab-9XU2TppSvA8W5CBQp1QAAANI"]
[Sun Mar 22 17:58:54.052620 2026] [:error] [pid 51468:tid 51482] [client 20.203.162.101:7414] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ff1.php"] [unique_id "ab-9Xk2TppSvA8W5CBQp2QAAAMY"]
[Sun Mar 22 17:58:54.535330 2026] [:error] [pid 51468:tid 51476] [client 20.203.162.101:48379] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ff1.php"] [unique_id "ab-9Xk2TppSvA8W5CBQp2gAAAMA"]
[Sun Mar 22 17:58:55.069550 2026] [:error] [pid 51468:tid 51486] [client 20.203.162.101:1736] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fff.php"] [unique_id "ab-9X02TppSvA8W5CBQp3AAAAMo"]
[Sun Mar 22 17:58:55.542653 2026] [:error] [pid 51468:tid 51477] [client 20.203.162.101:8828] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fff.php"] [unique_id "ab-9X02TppSvA8W5CBQp3gAAAME"]
[Sun Mar 22 17:58:56.027154 2026] [:error] [pid 51468:tid 51496] [client 20.203.162.101:16526] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fff.php"] [unique_id "ab-9YE2TppSvA8W5CBQp3wAAANQ"]
[Sun Mar 22 17:58:56.513002 2026] [:error] [pid 51362:tid 51401] [client 20.203.162.101:11904] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fff.php"] [unique_id "ab-9YMOwPm3DXzTDjUd27wAAAEE"]
[Sun Mar 22 17:58:57.052519 2026] [:error] [pid 30166:tid 30175] [client 20.203.162.101:30336] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/"] [unique_id "ab-9Ybm4_26jKMD0zy2zuQAAAUQ"]
[Sun Mar 22 17:58:57.528374 2026] [:error] [pid 51361:tid 51384] [client 20.203.162.101:1876] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/"] [unique_id "ab-9YRXYUsdvKC9YWpXHBAAAAA0"]
[Sun Mar 22 17:58:58.007692 2026] [:error] [pid 51363:tid 51437] [client 20.203.162.101:7376] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/"] [unique_id "ab-9Ylwa9x6OCTRkhl1nfAAAAIg"]
[Sun Mar 22 17:58:58.486070 2026] [:error] [pid 30166:tid 30199] [client 20.203.162.101:17897] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/"] [unique_id "ab-9Yrm4_26jKMD0zy2zvQAAAVY"]
[Sun Mar 22 17:58:58.967683 2026] [:error] [pid 51468:tid 51490] [client 20.203.162.101:1896] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/155.php"] [unique_id "ab-9Yk2TppSvA8W5CBQp7QAAAM4"]
[Sun Mar 22 17:58:59.457355 2026] [:error] [pid 51468:tid 51488] [client 20.203.162.101:25772] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/155.php"] [unique_id "ab-9Y02TppSvA8W5CBQp7wAAAMw"]
[Sun Mar 22 17:59:00.016856 2026] [:error] [pid 51363:tid 51443] [client 20.203.162.101:16561] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/155.php"] [unique_id "ab-9ZFwa9x6OCTRkhl1nggAAAI4"]
[Sun Mar 22 17:59:00.505218 2026] [:error] [pid 51468:tid 51479] [client 20.203.162.101:25740] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/155.php"] [unique_id "ab-9ZE2TppSvA8W5CBQp9AAAAMM"]
[Sun Mar 22 17:59:01.004024 2026] [:error] [pid 51468:tid 51480] [client 20.203.162.101:8803] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/we.php"] [unique_id "ab-9ZU2TppSvA8W5CBQp9gAAAMQ"]
[Sun Mar 22 17:59:01.494361 2026] [:error] [pid 51468:tid 51488] [client 20.203.162.101:27382] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/we.php"] [unique_id "ab-9ZU2TppSvA8W5CBQp-QAAAMw"]
[Sun Mar 22 17:59:01.975391 2026] [:error] [pid 51468:tid 51492] [client 20.203.162.101:17881] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/we.php"] [unique_id "ab-9ZU2TppSvA8W5CBQp_AAAANA"]
[Sun Mar 22 17:59:02.475472 2026] [:error] [pid 51362:tid 51422] [client 20.203.162.101:7379] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/we.php"] [unique_id "ab-9ZsOwPm3DXzTDjUd29wAAAFU"]
[Sun Mar 22 17:59:02.965387 2026] [:error] [pid 51468:tid 51498] [client 20.203.162.101:8351] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/alpha.php"] [unique_id "ab-9Zk2TppSvA8W5CBQqAQAAANY"]
[Sun Mar 22 17:59:03.445887 2026] [:error] [pid 51468:tid 51486] [client 20.203.162.101:7360] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/alpha.php"] [unique_id "ab-9Z02TppSvA8W5CBQqBQAAAMo"]
[Sun Mar 22 17:59:03.959160 2026] [:error] [pid 30166:tid 30182] [client 20.203.162.101:11941] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/alpha.php"] [unique_id "ab-9Z7m4_26jKMD0zy2zwwAAAUc"]
[Sun Mar 22 17:59:04.557874 2026] [:error] [pid 51362:tid 51422] [client 20.203.162.101:25759] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/alpha.php"] [unique_id "ab-9aMOwPm3DXzTDjUd2_gAAAFU"]
[Sun Mar 22 17:59:05.132164 2026] [:error] [pid 51362:tid 51425] [client 20.203.162.101:1887] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/makeasmtp.php"] [unique_id "ab-9acOwPm3DXzTDjUd3AQAAAFg"]
[Sun Mar 22 17:59:05.672433 2026] [:error] [pid 51362:tid 51420] [client 20.203.162.101:1790] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/makeasmtp.php"] [unique_id "ab-9acOwPm3DXzTDjUd3BgAAAFM"]
[Sun Mar 22 17:59:06.144919 2026] [:error] [pid 30166:tid 30177] [client 20.203.162.101:14359] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/makeasmtp.php"] [unique_id "ab-9arm4_26jKMD0zy2z0AAAAUY"]
[Sun Mar 22 17:59:06.620658 2026] [:error] [pid 51362:tid 51421] [client 20.203.162.101:27380] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/makeasmtp.php"] [unique_id "ab-9asOwPm3DXzTDjUd3CAAAAFQ"]
[Sun Mar 22 17:59:07.228136 2026] [:error] [pid 51362:tid 51410] [client 20.203.162.101:11960] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-michan.php"] [unique_id "ab-9a8OwPm3DXzTDjUd3DQAAAEk"]
[Sun Mar 22 17:59:07.862865 2026] [:error] [pid 51362:tid 51412] [client 20.203.162.101:1764] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-michan.php"] [unique_id "ab-9a8OwPm3DXzTDjUd3EAAAAEs"]
[Sun Mar 22 17:59:08.457017 2026] [:error] [pid 51361:tid 51377] [client 20.203.162.101:11817] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-michan.php"] [unique_id "ab-9bBXYUsdvKC9YWpXHBgAAAAY"]
[Sun Mar 22 17:59:08.992706 2026] [:error] [pid 51362:tid 51416] [client 20.203.162.101:8792] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-michan.php"] [unique_id "ab-9bMOwPm3DXzTDjUd3FwAAAE8"]
[Sun Mar 22 17:59:09.463692 2026] [:error] [pid 51362:tid 51402] [client 20.203.162.101:1785] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-the.php"] [unique_id "ab-9bcOwPm3DXzTDjUd3HAAAAEI"]
[Sun Mar 22 17:59:09.975303 2026] [:error] [pid 51362:tid 51419] [client 20.203.162.101:9380] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-the.php"] [unique_id "ab-9bcOwPm3DXzTDjUd3IQAAAFI"]
[Sun Mar 22 17:59:10.459441 2026] [:error] [pid 51362:tid 51413] [client 20.203.162.101:16821] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-the.php"] [unique_id "ab-9bsOwPm3DXzTDjUd3JgAAAEw"]
[Sun Mar 22 17:59:11.006689 2026] [:error] [pid 51362:tid 51425] [client 20.203.162.101:1771] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-the.php"] [unique_id "ab-9b8OwPm3DXzTDjUd3KgAAAFg"]
[Sun Mar 22 17:59:11.488579 2026] [:error] [pid 51362:tid 51405] [client 20.203.162.101:7365] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "ab-9b8OwPm3DXzTDjUd3LQAAAEQ"]
[Sun Mar 22 17:59:12.017156 2026] [:error] [pid 51362:tid 51421] [client 20.203.162.101:14364] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "ab-9cMOwPm3DXzTDjUd3MwAAAFQ"]
[Sun Mar 22 17:59:12.677230 2026] [:error] [pid 51362:tid 51423] [client 20.203.162.101:16817] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "ab-9cMOwPm3DXzTDjUd3OQAAAFY"]
[Sun Mar 22 17:59:13.180189 2026] [:error] [pid 51362:tid 51414] [client 20.203.162.101:14387] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "ab-9ccOwPm3DXzTDjUd3PAAAAE0"]
[Sun Mar 22 17:59:13.913010 2026] [:error] [pid 51363:tid 51446] [client 20.203.162.101:14358] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/BDKR28WP.php"] [unique_id "ab-9cVwa9x6OCTRkhl1njAAAAJA"]
[Sun Mar 22 17:59:14.418974 2026] [:error] [pid 51468:tid 51491] [client 20.203.162.101:9238] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/BDKR28WP.php"] [unique_id "ab-9ck2TppSvA8W5CBQqGgAAAM8"]
[Sun Mar 22 17:59:14.931524 2026] [:error] [pid 30166:tid 30171] [client 20.203.162.101:13378] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/BDKR28WP.php"] [unique_id "ab-9crm4_26jKMD0zy2z3gAAAUE"]
[Sun Mar 22 17:59:15.425559 2026] [:error] [pid 51362:tid 51423] [client 20.203.162.101:9359] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/BDKR28WP.php"] [unique_id "ab-9c8OwPm3DXzTDjUd3PwAAAFY"]
[Sun Mar 22 17:59:15.947904 2026] [:error] [pid 51362:tid 51420] [client 20.203.162.101:11909] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/l10n/"] [unique_id "ab-9c8OwPm3DXzTDjUd3QgAAAFM"]
[Sun Mar 22 17:59:16.544316 2026] [:error] [pid 51362:tid 51424] [client 20.203.162.101:15839] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/l10n/"] [unique_id "ab-9dMOwPm3DXzTDjUd3RwAAAFc"]
[Sun Mar 22 17:59:17.029165 2026] [:error] [pid 51362:tid 51420] [client 20.203.162.101:26263] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/l10n/"] [unique_id "ab-9dcOwPm3DXzTDjUd3TAAAAFM"]
[Sun Mar 22 17:59:17.660589 2026] [:error] [pid 51362:tid 51423] [client 20.203.162.101:15861] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/l10n/"] [unique_id "ab-9dcOwPm3DXzTDjUd3UgAAAFY"]
[Sun Mar 22 17:59:18.182606 2026] [proxy_fcgi:error] [pid 51362:tid 51411] [client 20.203.162.101:9386] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 17:59:18.424080 2026] [proxy_fcgi:error] [pid 51362:tid 51417] [client 20.203.162.101:9386] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 17:59:18.911295 2026] [proxy_fcgi:error] [pid 51362:tid 51415] [client 20.203.162.101:9386] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 17:59:19.151775 2026] [proxy_fcgi:error] [pid 51362:tid 51412] [client 20.203.162.101:9386] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 17:59:19.692985 2026] [proxy_fcgi:error] [pid 51362:tid 51407] [client 20.203.162.101:9386] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 17:59:19.946712 2026] [proxy_fcgi:error] [pid 51362:tid 51413] [client 20.203.162.101:9386] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 17:59:20.187570 2026] [proxy_fcgi:error] [pid 51362:tid 51420] [client 20.203.162.101:9386] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 17:59:20.427625 2026] [proxy_fcgi:error] [pid 51362:tid 51412] [client 20.203.162.101:9386] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 17:59:20.667690 2026] [proxy_fcgi:error] [pid 51362:tid 51408] [client 20.203.162.101:9386] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 17:59:20.911572 2026] [:error] [pid 51362:tid 51417] [client 20.203.162.101:9386] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/update/f35.php"] [unique_id "ab-9eMOwPm3DXzTDjUd3bAAAAFA"]
[Sun Mar 22 17:59:21.397620 2026] [:error] [pid 51362:tid 51405] [client 20.203.162.101:13106] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/update/f35.php"] [unique_id "ab-9ecOwPm3DXzTDjUd3bwAAAEQ"]
[Sun Mar 22 17:59:22.056112 2026] [:error] [pid 51362:tid 51410] [client 20.203.162.101:12442] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/update/f35.php"] [unique_id "ab-9esOwPm3DXzTDjUd3dQAAAEk"]
[Sun Mar 22 17:59:22.536893 2026] [:error] [pid 51468:tid 51480] [client 20.203.162.101:12611] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/update/f35.php"] [unique_id "ab-9ek2TppSvA8W5CBQqIwAAAMQ"]
[Sun Mar 22 17:59:23.078998 2026] [:error] [pid 51362:tid 51404] [client 20.203.162.101:12438] [client 20.203.162.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "ab-9e8OwPm3DXzTDjUd3ewAAAEM"]
[Sun Mar 22 17:59:23.645547 2026] [:error] [pid 30166:tid 30193] [client 20.203.162.101:13104] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f35.php"] [unique_id "ab-9e7m4_26jKMD0zy2z8gAAAVI"]
[Sun Mar 22 17:59:24.139891 2026] [:error] [pid 51362:tid 51419] [client 20.203.162.101:36894] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f35.php"] [unique_id "ab-9fMOwPm3DXzTDjUd3fQAAAFI"]
[Sun Mar 22 17:59:24.682888 2026] [:error] [pid 30166:tid 30191] [client 20.203.162.101:8196] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f35.php"] [unique_id "ab-9fLm4_26jKMD0zy2z-gAAAVA"]
[Sun Mar 22 17:59:25.339149 2026] [:error] [pid 51362:tid 51422] [client 20.203.162.101:25231] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "ab-9fcOwPm3DXzTDjUd3hAAAAFU"]
[Sun Mar 22 17:59:25.947622 2026] [:error] [pid 51362:tid 51407] [client 20.203.162.101:11646] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "ab-9fcOwPm3DXzTDjUd3iQAAAEY"]
[Sun Mar 22 17:59:26.443105 2026] [:error] [pid 51362:tid 51409] [client 20.203.162.101:21373] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "ab-9fsOwPm3DXzTDjUd3jQAAAEg"]
[Sun Mar 22 17:59:27.002674 2026] [:error] [pid 51363:tid 51437] [client 20.203.162.101:15810] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "ab-9f1wa9x6OCTRkhl1nkQAAAIg"]
[Sun Mar 22 17:59:27.677793 2026] [:error] [pid 51362:tid 51404] [client 20.203.162.101:25809] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "ab-9f8OwPm3DXzTDjUd3lQAAAEM"]
[Sun Mar 22 17:59:28.182692 2026] [:error] [pid 51362:tid 51416] [client 20.203.162.101:15103] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "ab-9gMOwPm3DXzTDjUd3mAAAAE8"]
[Sun Mar 22 17:59:28.792451 2026] [:error] [pid 51362:tid 51425] [client 20.203.162.101:15734] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "ab-9gMOwPm3DXzTDjUd3mgAAAFg"]
[Sun Mar 22 17:59:29.302005 2026] [:error] [pid 51362:tid 51408] [client 20.203.162.101:16356] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "ab-9gcOwPm3DXzTDjUd3nQAAAEc"]
[Sun Mar 22 17:59:29.833012 2026] [:error] [pid 30166:tid 30196] [client 20.203.162.101:43272] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/prv8.php"] [unique_id "ab-9gbm4_26jKMD0zy20BQAAAVM"]
[Sun Mar 22 17:59:30.329903 2026] [:error] [pid 30166:tid 30192] [client 20.203.162.101:21347] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/prv8.php"] [unique_id "ab-9grm4_26jKMD0zy20CAAAAVE"]
[Sun Mar 22 17:59:30.804025 2026] [:error] [pid 30166:tid 30183] [client 20.203.162.101:8316] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/prv8.php"] [unique_id "ab-9grm4_26jKMD0zy20CwAAAUg"]
[Sun Mar 22 17:59:31.336886 2026] [:error] [pid 51362:tid 51413] [client 20.203.162.101:43318] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/prv8.php"] [unique_id "ab-9g8OwPm3DXzTDjUd3pwAAAEw"]
[Sun Mar 22 17:59:31.844135 2026] [:error] [pid 51468:tid 51484] [client 20.203.162.101:9183] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/k.php"] [unique_id "ab-9g02TppSvA8W5CBQqKAAAAMg"]
[Sun Mar 22 17:59:32.331970 2026] [:error] [pid 51361:tid 51388] [client 20.203.162.101:16548] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/k.php"] [unique_id "ab-9hBXYUsdvKC9YWpXHDQAAABA"]
[Sun Mar 22 17:59:32.808430 2026] [:error] [pid 51362:tid 51423] [client 20.203.162.101:7867] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/k.php"] [unique_id "ab-9hMOwPm3DXzTDjUd3sAAAAFY"]
[Sun Mar 22 17:59:33.297493 2026] [:error] [pid 51468:tid 51495] [client 20.203.162.101:26800] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/k.php"] [unique_id "ab-9hU2TppSvA8W5CBQqKwAAANM"]
[Sun Mar 22 17:59:33.774183 2026] [:error] [pid 51362:tid 51413] [client 20.203.162.101:13997] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dev.php"] [unique_id "ab-9hcOwPm3DXzTDjUd3uAAAAEw"]
[Sun Mar 22 17:59:34.287410 2026] [:error] [pid 51362:tid 51412] [client 20.203.162.101:43843] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dev.php"] [unique_id "ab-9hsOwPm3DXzTDjUd3vQAAAEs"]
[Sun Mar 22 17:59:34.843729 2026] [:error] [pid 51362:tid 51419] [client 20.203.162.101:43315] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dev.php"] [unique_id "ab-9hsOwPm3DXzTDjUd3wgAAAFI"]
[Sun Mar 22 17:59:35.327696 2026] [:error] [pid 51361:tid 51384] [client 20.203.162.101:9598] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dev.php"] [unique_id "ab-9hxXYUsdvKC9YWpXHEAAAAA0"]
[Sun Mar 22 17:59:35.805643 2026] [:error] [pid 51362:tid 51405] [client 20.203.162.101:19797] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bal.php"] [unique_id "ab-9h8OwPm3DXzTDjUd3yQAAAEQ"]
[Sun Mar 22 17:59:36.317011 2026] [:error] [pid 51362:tid 51409] [client 20.203.162.101:22781] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bal.php"] [unique_id "ab-9iMOwPm3DXzTDjUd3zQAAAEg"]
[Sun Mar 22 17:59:36.858301 2026] [:error] [pid 40039:tid 40043] [client 20.203.162.101:9863] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bal.php"] [unique_id "ab-9iB3aDgUJfBYishmUKAAAAQI"]
[Sun Mar 22 17:59:37.346930 2026] [:error] [pid 51363:tid 51431] [client 20.203.162.101:13905] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bal.php"] [unique_id "ab-9iVwa9x6OCTRkhl1nlwAAAIM"]
[Sun Mar 22 17:59:37.897058 2026] [:error] [pid 30166:tid 30190] [client 20.203.162.101:45175] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/in.php"] [unique_id "ab-9ibm4_26jKMD0zy20DgAAAU8"]
[Sun Mar 22 17:59:38.382320 2026] [:error] [pid 51362:tid 51409] [client 20.203.162.101:9868] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/in.php"] [unique_id "ab-9isOwPm3DXzTDjUd30gAAAEg"]
[Sun Mar 22 17:59:38.911928 2026] [:error] [pid 51362:tid 51424] [client 20.203.162.101:19798] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/in.php"] [unique_id "ab-9isOwPm3DXzTDjUd31gAAAFc"]
[Sun Mar 22 17:59:39.405623 2026] [:error] [pid 51468:tid 51488] [client 20.203.162.101:7521] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/in.php"] [unique_id "ab-9i02TppSvA8W5CBQqLgAAAMw"]
[Sun Mar 22 17:59:40.013216 2026] [:error] [pid 51468:tid 51483] [client 20.203.162.101:36252] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gssdd.php"] [unique_id "ab-9jE2TppSvA8W5CBQqLwAAAMc"]
[Sun Mar 22 17:59:40.615507 2026] [:error] [pid 30166:tid 30174] [client 20.203.162.101:9554] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gssdd.php"] [unique_id "ab-9jLm4_26jKMD0zy20EwAAAUM"]
[Sun Mar 22 17:59:41.160582 2026] [:error] [pid 51362:tid 51412] [client 20.203.162.101:45129] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gssdd.php"] [unique_id "ab-9jcOwPm3DXzTDjUd34wAAAEs"]
[Sun Mar 22 17:59:41.633547 2026] [:error] [pid 30166:tid 30196] [client 20.203.162.101:15578] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gssdd.php"] [unique_id "ab-9jbm4_26jKMD0zy20GQAAAVM"]
[Sun Mar 22 17:59:42.146764 2026] [:error] [pid 51468:tid 51479] [client 20.203.162.101:1801] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/motu.php"] [unique_id "ab-9jk2TppSvA8W5CBQqMAAAAMM"]
[Sun Mar 22 17:59:42.640755 2026] [:error] [pid 40039:tid 40044] [client 20.203.162.101:13941] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/motu.php"] [unique_id "ab-9jh3aDgUJfBYishmULAAAAQM"]
[Sun Mar 22 17:59:43.276130 2026] [:error] [pid 40039:tid 40042] [client 20.203.162.101:30869] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/motu.php"] [unique_id "ab-9jx3aDgUJfBYishmUMAAAAQE"]
[Sun Mar 22 17:59:43.771849 2026] [:error] [pid 30166:tid 30192] [client 20.203.162.101:20579] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/motu.php"] [unique_id "ab-9j7m4_26jKMD0zy20IAAAAVE"]
[Sun Mar 22 17:59:44.253395 2026] [:error] [pid 30166:tid 30191] [client 20.203.162.101:36287] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bs1.php"] [unique_id "ab-9kLm4_26jKMD0zy20IwAAAVA"]
[Sun Mar 22 17:59:44.735139 2026] [:error] [pid 51361:tid 51378] [client 20.203.162.101:13946] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bs1.php"] [unique_id "ab-9kBXYUsdvKC9YWpXHGAAAAAc"]
[Sun Mar 22 17:59:45.280827 2026] [:error] [pid 51362:tid 51411] [client 20.203.162.101:36286] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bs1.php"] [unique_id "ab-9kcOwPm3DXzTDjUd35wAAAEo"]
[Sun Mar 22 17:59:45.913791 2026] [:error] [pid 51362:tid 51402] [client 20.203.162.101:13913] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bs1.php"] [unique_id "ab-9kcOwPm3DXzTDjUd37AAAAEI"]
[Sun Mar 22 17:59:46.514106 2026] [:error] [pid 51362:tid 51422] [client 20.203.162.101:20558] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bengi.php"] [unique_id "ab-9ksOwPm3DXzTDjUd38AAAAFU"]
[Sun Mar 22 17:59:47.114833 2026] [:error] [pid 51362:tid 51410] [client 20.203.162.101:14333] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bengi.php"] [unique_id "ab-9k8OwPm3DXzTDjUd39QAAAEk"]
[Sun Mar 22 17:59:47.613919 2026] [:error] [pid 51363:tid 51433] [client 20.203.162.101:10338] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bengi.php"] [unique_id "ab-9k1wa9x6OCTRkhl1nmwAAAIU"]
[Sun Mar 22 17:59:48.250431 2026] [:error] [pid 30166:tid 30183] [client 20.203.162.101:45143] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bengi.php"] [unique_id "ab-9lLm4_26jKMD0zy20NAAAAUg"]
[Sun Mar 22 17:59:48.826573 2026] [:error] [pid 51362:tid 51425] [client 20.203.162.101:45127] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "ab-9lMOwPm3DXzTDjUd3-QAAAFg"]
[Sun Mar 22 17:59:49.354421 2026] [:error] [pid 51363:tid 51437] [client 20.203.162.101:1707] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "ab-9lVwa9x6OCTRkhl1nnQAAAIg"]
[Sun Mar 22 17:59:49.838493 2026] [:error] [pid 51363:tid 51449] [client 20.203.162.101:1668] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "ab-9lVwa9x6OCTRkhl1nnwAAAJM"]
[Sun Mar 22 17:59:50.445629 2026] [:error] [pid 30166:tid 30192] [client 20.203.162.101:8109] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "ab-9lrm4_26jKMD0zy20OwAAAVE"]
[Sun Mar 22 17:59:50.982477 2026] [:error] [pid 30166:tid 30171] [client 20.203.162.101:10316] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/axx.php"] [unique_id "ab-9lrm4_26jKMD0zy20QgAAAUE"]
[Sun Mar 22 17:59:51.631095 2026] [:error] [pid 30166:tid 30192] [client 20.203.162.101:1681] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/axx.php"] [unique_id "ab-9l7m4_26jKMD0zy20SQAAAVE"]
[Sun Mar 22 17:59:52.141908 2026] [:error] [pid 51363:tid 51434] [client 20.203.162.101:9888] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/axx.php"] [unique_id "ab-9mFwa9x6OCTRkhl1nogAAAIY"]
[Sun Mar 22 17:59:52.613688 2026] [:error] [pid 51362:tid 51417] [client 20.203.162.101:8099] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/axx.php"] [unique_id "ab-9mMOwPm3DXzTDjUd4BQAAAFA"]
[Sun Mar 22 17:59:53.095064 2026] [:error] [pid 30166:tid 30197] [client 20.203.162.101:44507] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/alfashell.php"] [unique_id "ab-9mbm4_26jKMD0zy20SwAAAVQ"]
[Sun Mar 22 17:59:53.686625 2026] [:error] [pid 30166:tid 30198] [client 20.203.162.101:1813] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/alfashell.php"] [unique_id "ab-9mbm4_26jKMD0zy20TwAAAVU"]
[Sun Mar 22 17:59:54.199392 2026] [:error] [pid 51361:tid 51383] [client 20.203.162.101:22719] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/alfashell.php"] [unique_id "ab-9mhXYUsdvKC9YWpXHHwAAAAw"]
[Sun Mar 22 17:59:54.769375 2026] [:error] [pid 51468:tid 51489] [client 20.203.162.101:12896] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/alfashell.php"] [unique_id "ab-9mk2TppSvA8W5CBQqQwAAAM0"]
[Sun Mar 22 17:59:55.258540 2026] [:error] [pid 51468:tid 51483] [client 20.203.162.101:1842] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/re.php"] [unique_id "ab-9m02TppSvA8W5CBQqRwAAAMc"]
[Sun Mar 22 17:59:55.751139 2026] [:error] [pid 51468:tid 51482] [client 20.203.162.101:1347] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/re.php"] [unique_id "ab-9m02TppSvA8W5CBQqTAAAAMY"]
[Sun Mar 22 17:59:56.243970 2026] [:error] [pid 40039:tid 40042] [client 20.203.162.101:7346] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/re.php"] [unique_id "ab-9nB3aDgUJfBYishmUOgAAAQE"]
[Sun Mar 22 17:59:56.785981 2026] [:error] [pid 51362:tid 51402] [client 20.203.162.101:22694] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/re.php"] [unique_id "ab-9nMOwPm3DXzTDjUd4CAAAAEI"]
[Sun Mar 22 17:59:57.312552 2026] [:error] [pid 51362:tid 51408] [client 20.203.162.101:10333] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fm.php"] [unique_id "ab-9ncOwPm3DXzTDjUd4CgAAAEc"]
[Sun Mar 22 17:59:57.833296 2026] [:error] [pid 51361:tid 51379] [client 20.203.162.101:11733] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fm.php"] [unique_id "ab-9nRXYUsdvKC9YWpXHJAAAAAg"]
[Sun Mar 22 17:59:58.371230 2026] [:error] [pid 51363:tid 51433] [client 20.203.162.101:9677] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fm.php"] [unique_id "ab-9nlwa9x6OCTRkhl1npwAAAIU"]
[Sun Mar 22 17:59:58.907121 2026] [:error] [pid 30166:tid 30197] [client 20.203.162.101:1719] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fm.php"] [unique_id "ab-9nrm4_26jKMD0zy20WwAAAVQ"]
[Sun Mar 22 17:59:59.473471 2026] [:error] [pid 30166:tid 30196] [client 20.203.162.101:15562] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/flower.php"] [unique_id "ab-9n7m4_26jKMD0zy20XQAAAVM"]
[Sun Mar 22 18:00:00.066423 2026] [:error] [pid 30166:tid 30185] [client 20.203.162.101:44497] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/flower.php"] [unique_id "ab-9oLm4_26jKMD0zy20YwAAAUo"]
[Sun Mar 22 18:00:00.592687 2026] [:error] [pid 30166:tid 30190] [client 20.203.162.101:1724] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/flower.php"] [unique_id "ab-9oLm4_26jKMD0zy20ZQAAAU8"]
[Sun Mar 22 18:00:01.178390 2026] [:error] [pid 30166:tid 30201] [client 20.203.162.101:12884] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/flower.php"] [unique_id "ab-9obm4_26jKMD0zy20ZgAAAVg"]
[Sun Mar 22 18:00:01.748651 2026] [:error] [pid 51362:tid 51409] [client 20.203.162.101:10340] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gettest.php"] [unique_id "ab-9ocOwPm3DXzTDjUd4GAAAAEg"]
[Sun Mar 22 18:00:02.295575 2026] [:error] [pid 51362:tid 51405] [client 20.203.162.101:22678] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gettest.php"] [unique_id "ab-9osOwPm3DXzTDjUd4HAAAAEQ"]
[Sun Mar 22 18:00:02.805394 2026] [:error] [pid 51362:tid 51407] [client 20.203.162.101:12874] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gettest.php"] [unique_id "ab-9osOwPm3DXzTDjUd4IwAAAEY"]
[Sun Mar 22 18:00:03.447566 2026] [:error] [pid 51362:tid 51405] [client 20.203.162.101:1711] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gettest.php"] [unique_id "ab-9o8OwPm3DXzTDjUd4KAAAAEQ"]
[Sun Mar 22 18:00:03.989660 2026] [:error] [pid 51362:tid 51425] [client 20.203.162.101:7358] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/acp.php"] [unique_id "ab-9o8OwPm3DXzTDjUd4LAAAAFg"]
[Sun Mar 22 18:00:04.496621 2026] [:error] [pid 51362:tid 51409] [client 20.203.162.101:12906] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/acp.php"] [unique_id "ab-9pMOwPm3DXzTDjUd4LgAAAEg"]
[Sun Mar 22 18:00:04.968546 2026] [:error] [pid 30166:tid 30190] [client 20.203.162.101:12779] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/acp.php"] [unique_id "ab-9pLm4_26jKMD0zy20awAAAU8"]
[Sun Mar 22 18:00:05.461633 2026] [:error] [pid 51468:tid 51480] [client 20.203.162.101:22701] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/acp.php"] [unique_id "ab-9pU2TppSvA8W5CBQqUQAAAMQ"]
[Sun Mar 22 18:00:05.936070 2026] [:error] [pid 40039:tid 40043] [client 20.203.162.101:12988] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sdm.php"] [unique_id "ab-9pR3aDgUJfBYishmUPwAAAQI"]
[Sun Mar 22 18:00:06.463009 2026] [:error] [pid 51362:tid 51400] [client 20.203.162.101:12945] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sdm.php"] [unique_id "ab-9psOwPm3DXzTDjUd4MwAAAEA"]
[Sun Mar 22 18:00:06.996289 2026] [:error] [pid 51362:tid 51419] [client 20.203.162.101:8093] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sdm.php"] [unique_id "ab-9psOwPm3DXzTDjUd4NAAAAFI"]
[Sun Mar 22 18:00:07.480393 2026] [:error] [pid 51362:tid 51424] [client 20.203.162.101:1698] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sdm.php"] [unique_id "ab-9p8OwPm3DXzTDjUd4NgAAAFc"]
[Sun Mar 22 18:00:08.113222 2026] [:error] [pid 51362:tid 51410] [client 20.203.162.101:30849] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file52.php"] [unique_id "ab-9qMOwPm3DXzTDjUd4OQAAAEk"]
[Sun Mar 22 18:00:08.617354 2026] [:error] [pid 51362:tid 51419] [client 20.203.162.101:12876] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file52.php"] [unique_id "ab-9qMOwPm3DXzTDjUd4OwAAAFI"]
[Sun Mar 22 18:00:09.149521 2026] [:error] [pid 51362:tid 51407] [client 20.203.162.101:14293] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file52.php"] [unique_id "ab-9qcOwPm3DXzTDjUd4QAAAAEY"]
[Sun Mar 22 18:00:09.631727 2026] [:error] [pid 51468:tid 51481] [client 20.203.162.101:9705] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file52.php"] [unique_id "ab-9qU2TppSvA8W5CBQqWAAAAMU"]
[Sun Mar 22 18:00:10.159283 2026] [:error] [pid 51363:tid 51444] [client 20.203.162.101:11772] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file48.php"] [unique_id "ab-9qlwa9x6OCTRkhl1ntAAAAI8"]
[Sun Mar 22 18:00:10.629906 2026] [:error] [pid 51468:tid 51494] [client 20.203.162.101:15604] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file48.php"] [unique_id "ab-9qk2TppSvA8W5CBQqWwAAANI"]
[Sun Mar 22 18:00:11.115999 2026] [:error] [pid 51468:tid 51499] [client 20.203.162.101:1689] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file48.php"] [unique_id "ab-9q02TppSvA8W5CBQqXAAAANc"]
[Sun Mar 22 18:00:11.621108 2026] [:error] [pid 30166:tid 30188] [client 20.203.162.101:24053] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file48.php"] [unique_id "ab-9q7m4_26jKMD0zy20cAAAAU0"]
[Sun Mar 22 18:00:12.094530 2026] [:error] [pid 51362:tid 51425] [client 20.203.162.101:10348] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/s.php"] [unique_id "ab-9rMOwPm3DXzTDjUd4RQAAAFg"]
[Sun Mar 22 18:00:13.043777 2026] [:error] [pid 51363:tid 51430] [client 20.203.162.101:30860] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/s.php"] [unique_id "ab-9rVwa9x6OCTRkhl1nwgAAAII"]
[Sun Mar 22 18:00:13.597165 2026] [:error] [pid 40039:tid 40055] [client 20.203.162.101:22664] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/s.php"] [unique_id "ab-9rR3aDgUJfBYishmUQwAAAQ4"]
[Sun Mar 22 18:00:14.084296 2026] [:error] [pid 30166:tid 30175] [client 20.203.162.101:1705] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/s.php"] [unique_id "ab-9rrm4_26jKMD0zy20ggAAAUQ"]
[Sun Mar 22 18:00:14.685246 2026] [:error] [pid 30166:tid 30189] [client 20.203.162.101:15573] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/g.php"] [unique_id "ab-9rrm4_26jKMD0zy20hgAAAU4"]
[Sun Mar 22 18:00:15.259208 2026] [:error] [pid 30166:tid 30197] [client 20.203.162.101:11741] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/g.php"] [unique_id "ab-9r7m4_26jKMD0zy20iwAAAVQ"]
[Sun Mar 22 18:00:15.863741 2026] [:error] [pid 51361:tid 51382] [client 20.203.162.101:1716] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/g.php"] [unique_id "ab-9rxXYUsdvKC9YWpXHNAAAAAs"]
[Sun Mar 22 18:00:16.372585 2026] [:error] [pid 40039:tid 40047] [client 20.203.162.101:15012] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/g.php"] [unique_id "ab-9sB3aDgUJfBYishmUSAAAAQY"]
[Sun Mar 22 18:00:17.016744 2026] [:error] [pid 51468:tid 51497] [client 20.203.162.101:20545] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/"] [unique_id "ab-9sU2TppSvA8W5CBQqYwAAANU"]
[Sun Mar 22 18:00:17.545420 2026] [:error] [pid 40039:tid 40063] [client 20.203.162.101:30908] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/"] [unique_id "ab-9sR3aDgUJfBYishmUSQAAARY"]
[Sun Mar 22 18:00:18.034656 2026] [:error] [pid 51468:tid 51496] [client 20.203.162.101:24028] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/"] [unique_id "ab-9sk2TppSvA8W5CBQqbAAAANQ"]
[Sun Mar 22 18:00:18.554658 2026] [:error] [pid 51363:tid 51453] [client 20.203.162.101:14288] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/"] [unique_id "ab-9slwa9x6OCTRkhl1nxAAAAJc"]
[Sun Mar 22 18:00:19.106472 2026] [:error] [pid 30166:tid 30171] [client 20.203.162.101:9899] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/simple.php"] [unique_id "ab-9s7m4_26jKMD0zy20nAAAAUE"]
[Sun Mar 22 18:00:19.698756 2026] [:error] [pid 30166:tid 30192] [client 20.203.162.101:30889] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/simple.php"] [unique_id "ab-9s7m4_26jKMD0zy20ngAAAVE"]
[Sun Mar 22 18:00:20.267389 2026] [proxy_fcgi:error] [pid 30166:tid 30185] [client 20.203.162.101:9860] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 18:00:20.506569 2026] [proxy_fcgi:error] [pid 30166:tid 30175] [client 20.203.162.101:9860] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 18:00:20.747590 2026] [proxy_fcgi:error] [pid 30166:tid 30190] [client 20.203.162.101:9860] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 18:00:21.027444 2026] [proxy_fcgi:error] [pid 30166:tid 30186] [client 20.203.162.101:9860] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 18:00:21.267987 2026] [proxy_fcgi:error] [pid 30166:tid 30171] [client 20.203.162.101:9860] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 18:00:21.549607 2026] [proxy_fcgi:error] [pid 30166:tid 30191] [client 20.203.162.101:9860] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 18:00:21.790147 2026] [proxy_fcgi:error] [pid 30166:tid 30192] [client 20.203.162.101:9860] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 18:00:22.032812 2026] [proxy_fcgi:error] [pid 30166:tid 30182] [client 20.203.162.101:9860] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 18:00:22.357445 2026] [proxy_fcgi:error] [pid 30166:tid 30199] [client 20.203.162.101:9860] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 18:00:22.612054 2026] [proxy_fcgi:error] [pid 30166:tid 30186] [client 20.203.162.101:9860] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 18:00:22.853883 2026] [proxy_fcgi:error] [pid 30166:tid 30183] [client 20.203.162.101:9860] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 18:00:23.125498 2026] [:error] [pid 30166:tid 30171] [client 20.203.162.101:9860] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/thh.php"] [unique_id "ab-9t7m4_26jKMD0zy20sQAAAUE"]
[Sun Mar 22 18:00:23.689726 2026] [:error] [pid 51362:tid 51421] [client 20.203.162.101:43841] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/thh.php"] [unique_id "ab-9t8OwPm3DXzTDjUd4TgAAAFQ"]
[Sun Mar 22 18:00:24.223425 2026] [:error] [pid 51363:tid 51430] [client 20.203.162.101:13258] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/thh.php"] [unique_id "ab-9uFwa9x6OCTRkhl1nywAAAII"]
[Sun Mar 22 18:00:24.716524 2026] [:error] [pid 51362:tid 51423] [client 20.203.162.101:13304] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/thh.php"] [unique_id "ab-9uMOwPm3DXzTDjUd4UgAAAFY"]
[Sun Mar 22 18:00:25.207128 2026] [:error] [pid 30166:tid 30190] [client 20.203.162.101:1668] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/yellow.php"] [unique_id "ab-9ubm4_26jKMD0zy20twAAAU8"]
[Sun Mar 22 18:00:25.799025 2026] [:error] [pid 51468:tid 51485] [client 20.203.162.101:13987] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/yellow.php"] [unique_id "ab-9uU2TppSvA8W5CBQqfQAAAMk"]
[Sun Mar 22 18:00:26.352570 2026] [:error] [pid 51362:tid 51409] [client 20.203.162.101:13259] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/yellow.php"] [unique_id "ab-9usOwPm3DXzTDjUd4VgAAAEg"]
[Sun Mar 22 18:00:26.897484 2026] [:error] [pid 51363:tid 51428] [client 20.203.162.101:13965] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/yellow.php"] [unique_id "ab-9ulwa9x6OCTRkhl1nzAAAAIA"]
[Sun Mar 22 18:00:27.449498 2026] [:error] [pid 51362:tid 51425] [client 20.203.162.101:30897] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wfile.php"] [unique_id "ab-9u8OwPm3DXzTDjUd4WQAAAFg"]
[Sun Mar 22 18:00:28.082958 2026] [:error] [pid 30166:tid 30200] [client 20.203.162.101:10319] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wfile.php"] [unique_id "ab-9vLm4_26jKMD0zy20wQAAAVc"]
[Sun Mar 22 18:00:28.557840 2026] [:error] [pid 51362:tid 51418] [client 20.203.162.101:7550] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wfile.php"] [unique_id "ab-9vMOwPm3DXzTDjUd4WwAAAFE"]
[Sun Mar 22 18:00:29.350949 2026] [:error] [pid 51362:tid 51415] [client 20.203.162.101:14290] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wfile.php"] [unique_id "ab-9vcOwPm3DXzTDjUd4XwAAAE4"]
[Sun Mar 22 18:00:29.822746 2026] [:error] [pid 51362:tid 51419] [client 20.203.162.101:9211] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class20.php"] [unique_id "ab-9vcOwPm3DXzTDjUd4YAAAAFI"]
[Sun Mar 22 18:00:30.310402 2026] [:error] [pid 51362:tid 51409] [client 20.203.162.101:8277] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class20.php"] [unique_id "ab-9vsOwPm3DXzTDjUd4YQAAAEg"]
[Sun Mar 22 18:00:30.817400 2026] [:error] [pid 51362:tid 51425] [client 20.203.162.101:9905] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class20.php"] [unique_id "ab-9vsOwPm3DXzTDjUd4ZAAAAFg"]
[Sun Mar 22 18:00:31.350895 2026] [:error] [pid 51362:tid 51423] [client 20.203.162.101:36251] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class20.php"] [unique_id "ab-9v8OwPm3DXzTDjUd4awAAAFY"]
[Sun Mar 22 18:00:31.897964 2026] [:error] [pid 51362:tid 51424] [client 20.203.162.101:13928] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/build.php"] [unique_id "ab-9v8OwPm3DXzTDjUd4bwAAAFc"]
[Sun Mar 22 18:00:32.376166 2026] [:error] [pid 30166:tid 30192] [client 20.203.162.101:36884] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/build.php"] [unique_id "ab-9wLm4_26jKMD0zy20wwAAAVE"]
[Sun Mar 22 18:00:32.932318 2026] [:error] [pid 51362:tid 51405] [client 20.203.162.101:9209] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/build.php"] [unique_id "ab-9wMOwPm3DXzTDjUd4dAAAAEQ"]
[Sun Mar 22 18:00:33.408614 2026] [:error] [pid 51362:tid 51400] [client 20.203.162.101:9918] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/build.php"] [unique_id "ab-9wcOwPm3DXzTDjUd4egAAAEA"]
[Sun Mar 22 18:00:33.934055 2026] [:error] [pid 51362:tid 51405] [client 20.203.162.101:7501] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file1.php"] [unique_id "ab-9wcOwPm3DXzTDjUd4fgAAAEQ"]
[Sun Mar 22 18:00:34.416816 2026] [:error] [pid 51362:tid 51402] [client 20.203.162.101:7844] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file1.php"] [unique_id "ab-9wsOwPm3DXzTDjUd4gQAAAEI"]
[Sun Mar 22 18:00:35.048503 2026] [:error] [pid 51363:tid 51432] [client 20.203.162.101:9152] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file1.php"] [unique_id "ab-9w1wa9x6OCTRkhl1n2AAAAIQ"]
[Sun Mar 22 18:00:35.536316 2026] [:error] [pid 51362:tid 51420] [client 20.203.162.101:7518] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file1.php"] [unique_id "ab-9w8OwPm3DXzTDjUd4iQAAAFM"]
[Sun Mar 22 18:00:36.116928 2026] [:error] [pid 51362:tid 51406] [client 20.203.162.101:19789] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/520.php"] [unique_id "ab-9xMOwPm3DXzTDjUd4jAAAAEU"]
[Sun Mar 22 18:00:36.700158 2026] [:error] [pid 51362:tid 51418] [client 20.203.162.101:9536] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/520.php"] [unique_id "ab-9xMOwPm3DXzTDjUd4kgAAAFE"]
[Sun Mar 22 18:00:37.238638 2026] [:error] [pid 51362:tid 51400] [client 20.203.162.101:15053] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/520.php"] [unique_id "ab-9xcOwPm3DXzTDjUd4lQAAAEA"]
[Sun Mar 22 18:00:37.719789 2026] [:error] [pid 51468:tid 51488] [client 20.203.162.101:36926] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/520.php"] [unique_id "ab-9xU2TppSvA8W5CBQqrgAAAMw"]
[Sun Mar 22 18:00:38.343580 2026] [:error] [pid 51468:tid 51479] [client 20.203.162.101:15716] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file18.php"] [unique_id "ab-9xk2TppSvA8W5CBQqtQAAAMM"]
[Sun Mar 22 18:00:38.915865 2026] [:error] [pid 51361:tid 51384] [client 20.203.162.101:13426] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file18.php"] [unique_id "ab-9xhXYUsdvKC9YWpXHQgAAAA0"]
[Sun Mar 22 18:00:39.536856 2026] [:error] [pid 40039:tid 40042] [client 20.203.162.101:8253] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file18.php"] [unique_id "ab-9xx3aDgUJfBYishmUXQAAAQE"]
[Sun Mar 22 18:00:40.011946 2026] [:error] [pid 51468:tid 51488] [client 20.203.162.101:13398] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file18.php"] [unique_id "ab-9yE2TppSvA8W5CBQqvwAAAMw"]
[Sun Mar 22 18:00:40.535868 2026] [:error] [pid 30166:tid 30200] [client 20.203.162.101:20118] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ffile.php"] [unique_id "ab-9yLm4_26jKMD0zy20yAAAAVc"]
[Sun Mar 22 18:00:41.052487 2026] [:error] [pid 51468:tid 51484] [client 20.203.162.101:10875] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ffile.php"] [unique_id "ab-9yU2TppSvA8W5CBQqywAAAMg"]
[Sun Mar 22 18:00:41.533905 2026] [:error] [pid 51361:tid 51390] [client 20.203.162.101:26289] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ffile.php"] [unique_id "ab-9yRXYUsdvKC9YWpXHRQAAABI"]
[Sun Mar 22 18:00:42.058944 2026] [:error] [pid 40039:tid 40057] [client 20.203.162.101:12628] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ffile.php"] [unique_id "ab-9yh3aDgUJfBYishmUXgAAARA"]
[Sun Mar 22 18:00:42.696781 2026] [:error] [pid 51362:tid 51423] [client 20.203.162.101:1211] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vee.php"] [unique_id "ab-9ysOwPm3DXzTDjUd4oAAAAFY"]
[Sun Mar 22 18:00:43.187685 2026] [:error] [pid 30166:tid 30191] [client 20.203.162.101:12653] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vee.php"] [unique_id "ab-9y7m4_26jKMD0zy20zQAAAVA"]
[Sun Mar 22 18:00:43.673107 2026] [:error] [pid 51362:tid 51419] [client 20.203.162.101:26296] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vee.php"] [unique_id "ab-9y8OwPm3DXzTDjUd4pAAAAFI"]
[Sun Mar 22 18:00:44.224977 2026] [:error] [pid 30166:tid 30198] [client 20.203.162.101:26856] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vee.php"] [unique_id "ab-9zLm4_26jKMD0zy20zwAAAVU"]
[Sun Mar 22 18:00:44.744853 2026] [:error] [pid 30166:tid 30176] [client 20.203.162.101:27355] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/efile.php"] [unique_id "ab-9zLm4_26jKMD0zy200gAAAUU"]
[Sun Mar 22 18:00:45.231120 2026] [:error] [pid 40039:tid 40051] [client 20.203.162.101:1743] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/efile.php"] [unique_id "ab-9zR3aDgUJfBYishmUYgAAAQo"]
[Sun Mar 22 18:00:45.715998 2026] [:error] [pid 30166:tid 30182] [client 20.203.162.101:25749] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/efile.php"] [unique_id "ab-9zbm4_26jKMD0zy201AAAAUc"]
[Sun Mar 22 18:00:46.319116 2026] [:error] [pid 51362:tid 51422] [client 20.203.162.101:1754] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/efile.php"] [unique_id "ab-9zsOwPm3DXzTDjUd4rwAAAFU"]
[Sun Mar 22 18:00:46.868410 2026] [:error] [pid 51362:tid 51418] [client 20.203.162.101:17906] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/afile.php"] [unique_id "ab-9zsOwPm3DXzTDjUd4tAAAAFE"]
[Sun Mar 22 18:00:47.492974 2026] [:error] [pid 51362:tid 51410] [client 20.203.162.101:12439] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/afile.php"] [unique_id "ab-9z8OwPm3DXzTDjUd4twAAAEk"]
[Sun Mar 22 18:00:48.110593 2026] [:error] [pid 51361:tid 51388] [client 20.203.162.101:8383] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/afile.php"] [unique_id "ab-90BXYUsdvKC9YWpXHTgAAABA"]
[Sun Mar 22 18:00:48.736012 2026] [:error] [pid 51362:tid 51424] [client 20.203.162.101:25745] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/afile.php"] [unique_id "ab-90MOwPm3DXzTDjUd4vAAAAFc"]
[Sun Mar 22 18:00:49.300025 2026] [:error] [pid 51362:tid 51409] [client 20.203.162.101:30365] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lites.php"] [unique_id "ab-90cOwPm3DXzTDjUd4vwAAAEg"]
[Sun Mar 22 18:00:49.813490 2026] [:error] [pid 51361:tid 51392] [client 20.203.162.101:11959] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lites.php"] [unique_id "ab-90RXYUsdvKC9YWpXHUwAAABQ"]
[Sun Mar 22 18:00:50.297128 2026] [:error] [pid 30166:tid 30198] [client 20.203.162.101:10888] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lites.php"] [unique_id "ab-90rm4_26jKMD0zy202QAAAVU"]
[Sun Mar 22 18:00:50.793607 2026] [:error] [pid 30166:tid 30182] [client 20.203.162.101:11697] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lites.php"] [unique_id "ab-90rm4_26jKMD0zy203AAAAUc"]
[Sun Mar 22 18:00:51.346457 2026] [:error] [pid 40039:tid 40058] [client 20.203.162.101:15757] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/0x.php"] [unique_id "ab-90x3aDgUJfBYishmUZwAAARE"]
[Sun Mar 22 18:00:51.930465 2026] [:error] [pid 30166:tid 30173] [client 20.203.162.101:18569] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/0x.php"] [unique_id "ab-907m4_26jKMD0zy204QAAAUI"]
[Sun Mar 22 18:00:52.431927 2026] [:error] [pid 30166:tid 30171] [client 20.203.162.101:13812] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/0x.php"] [unique_id "ab-91Lm4_26jKMD0zy204wAAAUE"]
[Sun Mar 22 18:00:53.018353 2026] [:error] [pid 40039:tid 40050] [client 20.203.162.101:13786] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/0x.php"] [unique_id "ab-91R3aDgUJfBYishmUawAAAQk"]
[Sun Mar 22 18:00:53.561156 2026] [:error] [pid 40039:tid 40042] [client 20.203.162.101:15174] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bless3.php"] [unique_id "ab-91R3aDgUJfBYishmUbQAAAQE"]
[Sun Mar 22 18:00:54.144079 2026] [:error] [pid 51363:tid 51442] [client 20.203.162.101:14727] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bless3.php"] [unique_id "ab-91lwa9x6OCTRkhl1n7wAAAI0"]
[Sun Mar 22 18:00:54.669071 2026] [:error] [pid 51362:tid 51416] [client 20.203.162.101:14738] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bless3.php"] [unique_id "ab-91sOwPm3DXzTDjUd4zQAAAE8"]
[Sun Mar 22 18:00:55.317283 2026] [:error] [pid 51362:tid 51420] [client 20.203.162.101:22344] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bless3.php"] [unique_id "ab-918OwPm3DXzTDjUd40QAAAFM"]
[Sun Mar 22 18:00:55.820067 2026] [:error] [pid 51362:tid 51402] [client 20.203.162.101:22340] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/enclas.php"] [unique_id "ab-918OwPm3DXzTDjUd41QAAAEI"]
[Sun Mar 22 18:00:56.307086 2026] [:error] [pid 30166:tid 30193] [client 20.203.162.101:1488] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/enclas.php"] [unique_id "ab-92Lm4_26jKMD0zy206gAAAVI"]
[Sun Mar 22 18:00:56.811022 2026] [:error] [pid 40039:tid 40057] [client 20.203.162.101:11225] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/enclas.php"] [unique_id "ab-92B3aDgUJfBYishmUcAAAARA"]
[Sun Mar 22 18:00:57.380709 2026] [:error] [pid 30166:tid 30182] [client 20.203.162.101:12168] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/enclas.php"] [unique_id "ab-92bm4_26jKMD0zy207wAAAUc"]
[Sun Mar 22 18:00:57.992139 2026] [:error] [pid 51362:tid 51413] [client 20.203.162.101:22393] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/he.php"] [unique_id "ab-92cOwPm3DXzTDjUd42QAAAEw"]
[Sun Mar 22 18:00:58.620291 2026] [:error] [pid 30166:tid 30173] [client 20.203.162.101:8013] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/he.php"] [unique_id "ab-92rm4_26jKMD0zy209gAAAUI"]
[Sun Mar 22 18:00:59.178687 2026] [:error] [pid 51362:tid 51409] [client 20.203.162.101:7650] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/he.php"] [unique_id "ab-928OwPm3DXzTDjUd44AAAAEg"]
[Sun Mar 22 18:00:59.661517 2026] [:error] [pid 30166:tid 30187] [client 20.203.162.101:14715] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/he.php"] [unique_id "ab-927m4_26jKMD0zy20-AAAAUw"]
[Sun Mar 22 18:01:00.146058 2026] [:error] [pid 51468:tid 51482] [client 20.203.162.101:29878] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aves.php"] [unique_id "ab-93E2TppSvA8W5CBQq_QAAAMY"]
[Sun Mar 22 18:01:00.622430 2026] [:error] [pid 51362:tid 51423] [client 20.203.162.101:7648] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aves.php"] [unique_id "ab-93MOwPm3DXzTDjUd45gAAAFY"]
[Sun Mar 22 18:01:01.158027 2026] [:error] [pid 51363:tid 51428] [client 20.203.162.101:20976] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aves.php"] [unique_id "ab-93Vwa9x6OCTRkhl1oFQAAAIA"]
[Sun Mar 22 18:01:01.630724 2026] [:error] [pid 30166:tid 30174] [client 20.203.162.101:14079] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aves.php"] [unique_id "ab-93bm4_26jKMD0zy20-wAAAUM"]
[Sun Mar 22 18:01:02.154690 2026] [:error] [pid 51363:tid 51439] [client 20.203.162.101:12355] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vanta.php"] [unique_id "ab-93lwa9x6OCTRkhl1oHQAAAIo"]
[Sun Mar 22 18:01:02.625591 2026] [:error] [pid 51362:tid 51407] [client 20.203.162.101:13879] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vanta.php"] [unique_id "ab-93sOwPm3DXzTDjUd46gAAAEY"]
[Sun Mar 22 18:01:03.101291 2026] [:error] [pid 51362:tid 51400] [client 20.203.162.101:9981] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vanta.php"] [unique_id "ab-938OwPm3DXzTDjUd47wAAAEA"]
[Sun Mar 22 18:01:03.587384 2026] [:error] [pid 30166:tid 30199] [client 20.203.162.101:1968] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vanta.php"] [unique_id "ab-937m4_26jKMD0zy20_gAAAVY"]
[Sun Mar 22 18:01:04.069617 2026] [:error] [pid 30166:tid 30175] [client 20.203.162.101:9959] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cabs.php"] [unique_id "ab-94Lm4_26jKMD0zy21AgAAAUQ"]
[Sun Mar 22 18:01:04.671025 2026] [:error] [pid 51363:tid 51443] [client 20.203.162.101:9837] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cabs.php"] [unique_id "ab-94Fwa9x6OCTRkhl1oKgAAAI4"]
[Sun Mar 22 18:01:05.312623 2026] [:error] [pid 51468:tid 51499] [client 20.203.162.101:27278] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cabs.php"] [unique_id "ab-94U2TppSvA8W5CBQrAgAAANc"]
[Sun Mar 22 18:01:05.983959 2026] [:error] [pid 30166:tid 30176] [client 20.203.162.101:9742] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cabs.php"] [unique_id "ab-94bm4_26jKMD0zy21BgAAAUU"]
[Sun Mar 22 18:01:06.462691 2026] [:error] [pid 51468:tid 51486] [client 20.203.162.101:44439] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/filesss.php"] [unique_id "ab-94k2TppSvA8W5CBQrBAAAAMo"]
[Sun Mar 22 18:01:06.941644 2026] [:error] [pid 51362:tid 51421] [client 20.203.162.101:13859] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/filesss.php"] [unique_id "ab-94sOwPm3DXzTDjUd4_QAAAFQ"]
[Sun Mar 22 18:01:08.532277 2026] [:error] [pid 51468:tid 51483] [client 20.203.162.101:9731] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/filesss.php"] [unique_id "ab-95E2TppSvA8W5CBQrBgAAAMc"]
[Sun Mar 22 18:01:11.783081 2026] [:error] [pid 30166:tid 30190] [client 20.203.162.101:31885] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/filesss.php"] [unique_id "ab-957m4_26jKMD0zy21EQAAAU8"]
[Sun Mar 22 18:01:12.396540 2026] [:error] [pid 51362:tid 51415] [client 20.203.162.101:14832] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-aaa.php"] [unique_id "ab-96MOwPm3DXzTDjUd5EgAAAE4"]
[Sun Mar 22 18:01:12.966609 2026] [:error] [pid 30166:tid 30177] [client 20.203.162.101:35195] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-aaa.php"] [unique_id "ab-96Lm4_26jKMD0zy21FwAAAUY"]
[Sun Mar 22 18:01:13.521082 2026] [:error] [pid 51363:tid 51429] [client 20.203.162.101:16051] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-aaa.php"] [unique_id "ab-96Vwa9x6OCTRkhl1oSgAAAIE"]
[Sun Mar 22 18:01:14.022425 2026] [:error] [pid 51363:tid 51450] [client 20.203.162.101:12492] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-aaa.php"] [unique_id "ab-96lwa9x6OCTRkhl1oSwAAAJQ"]
[Sun Mar 22 18:01:14.499134 2026] [:error] [pid 40039:tid 40052] [client 20.203.162.101:21838] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/031.php"] [unique_id "ab-96h3aDgUJfBYishmUdwAAAQs"]
[Sun Mar 22 18:01:15.007948 2026] [:error] [pid 51362:tid 51414] [client 20.203.162.101:35778] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/031.php"] [unique_id "ab-968OwPm3DXzTDjUd5FAAAAE0"]
[Sun Mar 22 18:01:15.536776 2026] [:error] [pid 51363:tid 51452] [client 20.203.162.101:16272] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/031.php"] [unique_id "ab-961wa9x6OCTRkhl1oTwAAAJY"]
[Sun Mar 22 18:01:16.113857 2026] [:error] [pid 51362:tid 51417] [client 20.203.162.101:13566] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/031.php"] [unique_id "ab-97MOwPm3DXzTDjUd5FQAAAFA"]
[Sun Mar 22 18:01:16.621868 2026] [:error] [pid 40039:tid 40044] [client 20.203.162.101:1537] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/about3.php"] [unique_id "ab-97B3aDgUJfBYishmUeQAAAQM"]
[Sun Mar 22 18:01:17.162000 2026] [:error] [pid 40039:tid 40053] [client 20.203.162.101:14615] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/about3.php"] [unique_id "ab-97R3aDgUJfBYishmUfQAAAQw"]
[Sun Mar 22 18:01:17.636404 2026] [:error] [pid 51362:tid 51425] [client 20.203.162.101:11093] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/about3.php"] [unique_id "ab-97cOwPm3DXzTDjUd5GQAAAFg"]
[Sun Mar 22 18:01:18.110907 2026] [:error] [pid 51362:tid 51415] [client 20.203.162.101:45715] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/about3.php"] [unique_id "ab-97sOwPm3DXzTDjUd5HAAAAE4"]
[Sun Mar 22 18:01:18.673134 2026] [:error] [pid 51468:tid 51493] [client 20.203.162.101:8572] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file88.php"] [unique_id "ab-97k2TppSvA8W5CBQrDAAAANE"]
[Sun Mar 22 18:01:19.176099 2026] [:error] [pid 51468:tid 51500] [client 20.203.162.101:9122] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file88.php"] [unique_id "ab-9702TppSvA8W5CBQrEQAAANg"]
[Sun Mar 22 18:01:19.675036 2026] [:error] [pid 30166:tid 30184] [client 20.203.162.101:31924] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file88.php"] [unique_id "ab-977m4_26jKMD0zy21HwAAAUk"]
[Sun Mar 22 18:01:20.168711 2026] [:error] [pid 30166:tid 30198] [client 20.203.162.101:19798] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file88.php"] [unique_id "ab-98Lm4_26jKMD0zy21IgAAAVU"]
[Sun Mar 22 18:01:20.666732 2026] [:error] [pid 51468:tid 51495] [client 20.203.162.101:27861] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/CLA.php"] [unique_id "ab-98E2TppSvA8W5CBQrFgAAANM"]
[Sun Mar 22 18:01:21.143303 2026] [:error] [pid 30166:tid 30177] [client 20.203.162.101:13177] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/CLA.php"] [unique_id "ab-98bm4_26jKMD0zy21JgAAAUY"]
[Sun Mar 22 18:01:21.623126 2026] [:error] [pid 51362:tid 51423] [client 20.203.162.101:9120] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/CLA.php"] [unique_id "ab-98cOwPm3DXzTDjUd5IgAAAFY"]
[Sun Mar 22 18:01:22.123569 2026] [proxy_fcgi:error] [pid 30166:tid 30186] [client 20.203.162.101:15266] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 18:01:22.364452 2026] [proxy_fcgi:error] [pid 30166:tid 30173] [client 20.203.162.101:15266] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 18:01:22.604591 2026] [proxy_fcgi:error] [pid 30166:tid 30185] [client 20.203.162.101:15266] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 18:01:22.844990 2026] [proxy_fcgi:error] [pid 30166:tid 30192] [client 20.203.162.101:15266] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 18:01:23.084706 2026] [proxy_fcgi:error] [pid 30166:tid 30176] [client 20.203.162.101:15266] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 18:01:23.324351 2026] [proxy_fcgi:error] [pid 30166:tid 30190] [client 20.203.162.101:15266] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 18:01:23.565785 2026] [proxy_fcgi:error] [pid 30166:tid 30188] [client 20.203.162.101:15266] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 18:01:23.807424 2026] [proxy_fcgi:error] [pid 30166:tid 30170] [client 20.203.162.101:15266] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 18:01:24.057747 2026] [proxy_fcgi:error] [pid 30166:tid 30182] [client 20.203.162.101:15266] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 18:01:24.298366 2026] [proxy_fcgi:error] [pid 30166:tid 30177] [client 20.203.162.101:15266] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 18:01:24.774552 2026] [:error] [pid 30166:tid 30186] [client 20.203.162.101:15266] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/modules/mod_simplefileuploadv1.3/elements/filemanager.php"] [unique_id "ab-99Lm4_26jKMD0zy21OgAAAUs"]
[Sun Mar 22 18:01:25.282219 2026] [:error] [pid 51468:tid 51482] [client 20.203.162.101:12121] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/modules/mod_simplefileuploadv1.3/elements/filemanager.php"] [unique_id "ab-99U2TppSvA8W5CBQrJAAAAMY"]
[Sun Mar 22 18:01:25.851814 2026] [:error] [pid 51468:tid 51479] [client 20.203.162.101:12259] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/modules/mod_simplefileuploadv1.3/elements/filemanager.php"] [unique_id "ab-99U2TppSvA8W5CBQrKAAAAMM"]
[Sun Mar 22 18:01:26.389224 2026] [:error] [pid 30166:tid 30174] [client 20.203.162.101:14638] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/modules/mod_simplefileuploadv1.3/elements/filemanager.php"] [unique_id "ab-99rm4_26jKMD0zy21PgAAAUM"]
[Sun Mar 22 20:33:13.820309 2026] [proxy_fcgi:error] [pid 30166:tid 30171] [client 52.139.36.109:54770] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 20:33:14.028610 2026] [proxy_fcgi:error] [pid 30166:tid 30192] [client 52.139.36.109:54770] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 20:33:14.453683 2026] [proxy_fcgi:error] [pid 30166:tid 30177] [client 52.139.36.109:54770] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 20:33:14.663556 2026] [proxy_fcgi:error] [pid 30166:tid 30191] [client 52.139.36.109:54770] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 20:33:15.081516 2026] [proxy_fcgi:error] [pid 30166:tid 30186] [client 52.139.36.109:54770] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 20:33:15.290892 2026] [proxy_fcgi:error] [pid 30166:tid 30188] [client 52.139.36.109:54770] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 20:33:15.498930 2026] [proxy_fcgi:error] [pid 30166:tid 30196] [client 52.139.36.109:54770] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 20:33:15.926171 2026] [:error] [pid 30166:tid 30198] [client 52.139.36.109:54770] [client 52.139.36.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/randkeyword.PhP7"] [unique_id "ab_hi7m4_26jKMD0zy3yFQAAAVU"]
[Sun Mar 22 20:33:16.752231 2026] [:error] [pid 51468:tid 51476] [client 52.139.36.109:39987] [client 52.139.36.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/randkeyword.PhP7"] [unique_id "ab_hjE2TppSvA8W5CBRXkgAAAMA"]
[Sun Mar 22 20:33:17.580858 2026] [:error] [pid 40039:tid 40045] [client 52.139.36.109:56659] [client 52.139.36.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/randkeyword.PhP7"] [unique_id "ab_hjR3aDgUJfBYishm3yAAAAQQ"]
[Sun Mar 22 20:33:18.406361 2026] [:error] [pid 51468:tid 51499] [client 52.139.36.109:61158] [client 52.139.36.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/randkeyword.PhP7"] [unique_id "ab_hjk2TppSvA8W5CBRXmQAAANc"]
[Sun Mar 22 21:16:47.756964 2026] [:error] [pid 40039:tid 40065] [client 154.47.31.5:41302] [client 154.47.31.5] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 154.47.31.5, incrementing ddos counter"] [hostname "dwelectservices.com.au"] [uri "/xmlrpc.php"] [unique_id "ab_rvx3aDgUJfBYishnGWwAAARg"]
[Sun Mar 22 21:16:47.766964 2026] [proxy_fcgi:error] [pid 40039:tid 40065] [client 154.47.31.5:41302] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 21:16:51.371784 2026] [:error] [pid 40039:tid 40057] [client 154.47.31.5:41302] [client 154.47.31.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "ab_rwx3aDgUJfBYishnGawAAARA"]
[Sun Mar 22 21:16:51.709289 2026] [:error] [pid 51362:tid 51417] [client 154.47.31.5:50480] [client 154.47.31.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "ab_rw8OwPm3DXzTDjUfZCAAAAFA"]
[Sun Mar 22 21:16:52.045681 2026] [:error] [pid 51468:tid 51491] [client 154.47.31.5:50488] [client 154.47.31.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "ab_rxE2TppSvA8W5CBRmiQAAAM8"]
[Sun Mar 22 21:16:52.381560 2026] [:error] [pid 51468:tid 51500] [client 154.47.31.5:50490] [client 154.47.31.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "ab_rxE2TppSvA8W5CBRmjAAAANg"]
[Sun Mar 22 21:16:53.950038 2026] [:error] [pid 51468:tid 51487] [client 154.47.31.5:50496] [client 154.47.31.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "ab_rxU2TppSvA8W5CBRmkQAAAMs"]
[Sun Mar 22 21:16:54.284780 2026] [:error] [pid 51362:tid 51420] [client 154.47.31.5:50512] [client 154.47.31.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "ab_rxsOwPm3DXzTDjUfZCwAAAFM"]
[Sun Mar 22 21:16:54.620888 2026] [:error] [pid 30166:tid 30176] [client 154.47.31.5:50516] [client 154.47.31.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "ab_rxrm4_26jKMD0zy0VoQAAAUU"]
[Sun Mar 22 22:02:35.454074 2026] [proxy_fcgi:error] [pid 51468:tid 51477] [client 52.139.36.109:6049] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 22:02:35.664290 2026] [proxy_fcgi:error] [pid 51468:tid 51493] [client 52.139.36.109:6049] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 22:02:36.084788 2026] [proxy_fcgi:error] [pid 51468:tid 51494] [client 52.139.36.109:6049] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 22:02:36.294992 2026] [proxy_fcgi:error] [pid 51468:tid 51492] [client 52.139.36.109:6049] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 22:02:36.713576 2026] [proxy_fcgi:error] [pid 51468:tid 51495] [client 52.139.36.109:6049] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 22:02:36.923757 2026] [proxy_fcgi:error] [pid 51468:tid 51489] [client 52.139.36.109:6049] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 22:02:37.133744 2026] [proxy_fcgi:error] [pid 51468:tid 51479] [client 52.139.36.109:6049] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 22:02:38.904557 2026] [:error] [pid 51468:tid 51484] [client 52.139.36.109:6049] [client 52.139.36.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/randkeyword.PhP7"] [unique_id "ab_2fk2TppSvA8W5CBSI4gAAAMg"]
[Sun Mar 22 22:02:39.728044 2026] [:error] [pid 51468:tid 51496] [client 52.139.36.109:6060] [client 52.139.36.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/randkeyword.PhP7"] [unique_id "ab_2f02TppSvA8W5CBSI5wAAANQ"]
[Sun Mar 22 22:02:40.551232 2026] [:error] [pid 40039:tid 40056] [client 52.139.36.109:6032] [client 52.139.36.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/randkeyword.PhP7"] [unique_id "ab_2gB3aDgUJfBYishnRUwAAAQ8"]
[Sun Mar 22 22:02:41.380061 2026] [:error] [pid 51468:tid 51480] [client 52.139.36.109:58867] [client 52.139.36.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/randkeyword.PhP7"] [unique_id "ab_2gU2TppSvA8W5CBSI9QAAAMQ"]
[Mon Mar 23 01:22:14.524250 2026] [proxy_fcgi:error] [pid 20584:tid 20635] [client 20.121.25.154:3407] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 01:22:14.741106 2026] [proxy_fcgi:error] [pid 20584:tid 20638] [client 20.121.25.154:3407] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 01:22:15.177698 2026] [proxy_fcgi:error] [pid 20584:tid 20620] [client 20.121.25.154:3407] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 01:22:15.390056 2026] [proxy_fcgi:error] [pid 20584:tid 20618] [client 20.121.25.154:3407] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 01:22:15.621680 2026] [proxy_fcgi:error] [pid 20584:tid 20637] [client 20.121.25.154:3407] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 01:22:15.835103 2026] [proxy_fcgi:error] [pid 20584:tid 20634] [client 20.121.25.154:3407] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 01:22:16.056715 2026] [proxy_fcgi:error] [pid 20584:tid 20626] [client 20.121.25.154:3407] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 01:22:17.822729 2026] [proxy_fcgi:error] [pid 20584:tid 20640] [client 20.121.25.154:3407] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 01:22:18.030568 2026] [:error] [pid 20584:tid 20631] [client 20.121.25.154:3407] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/tx1.php"] [unique_id "acAlSiWzr-bD_t6AP_TGgAAAAE8"]
[Mon Mar 23 01:22:18.609672 2026] [:error] [pid 20574:tid 20596] [client 20.121.25.154:3270] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/tx1.php"] [unique_id "acAlStdMXEnEZrwyzJkCEAAAAAc"]
[Mon Mar 23 01:22:19.047966 2026] [:error] [pid 27776:tid 27853] [client 20.121.25.154:3432] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/tx1.php"] [unique_id "acAlS43Eaq7IZ5L-4XVDIAAAAQc"]
[Mon Mar 23 01:22:19.485810 2026] [:error] [pid 20856:tid 20937] [client 20.121.25.154:3398] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/tx1.php"] [unique_id "acAlS8xFtXFVNE-X2-KPvwAAANI"]
[Mon Mar 23 01:22:19.896720 2026] [:error] [pid 27776:tid 27859] [client 20.121.25.154:3418] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xv.php"] [unique_id "acAlS43Eaq7IZ5L-4XVDIQAAAQw"]
[Mon Mar 23 01:22:20.308165 2026] [:error] [pid 27776:tid 27854] [client 20.121.25.154:3393] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xv.php"] [unique_id "acAlTI3Eaq7IZ5L-4XVDIgAAAQg"]
[Mon Mar 23 01:22:20.731965 2026] [:error] [pid 27776:tid 27848] [client 20.121.25.154:3417] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xv.php"] [unique_id "acAlTI3Eaq7IZ5L-4XVDJAAAAQI"]
[Mon Mar 23 01:22:21.259461 2026] [:error] [pid 20584:tid 20627] [client 20.121.25.154:3435] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xv.php"] [unique_id "acAlTSWzr-bD_t6AP_TGgwAAAEs"]
[Mon Mar 23 01:22:21.771126 2026] [:error] [pid 27776:tid 27872] [client 20.121.25.154:3451] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/x56.php"] [unique_id "acAlTY3Eaq7IZ5L-4XVDJQAAARg"]
[Mon Mar 23 01:22:22.242937 2026] [:error] [pid 27776:tid 27860] [client 20.121.25.154:3433] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/x56.php"] [unique_id "acAlTo3Eaq7IZ5L-4XVDKAAAAQ0"]
[Mon Mar 23 01:22:22.694315 2026] [:error] [pid 27776:tid 27867] [client 20.121.25.154:3279] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/x56.php"] [unique_id "acAlTo3Eaq7IZ5L-4XVDKgAAARQ"]
[Mon Mar 23 01:22:23.138603 2026] [:error] [pid 27776:tid 27854] [client 20.121.25.154:3401] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/x56.php"] [unique_id "acAlT43Eaq7IZ5L-4XVDLgAAAQg"]
[Mon Mar 23 01:22:23.561121 2026] [:error] [pid 27776:tid 27850] [client 20.121.25.154:3276] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/htaccess.php"] [unique_id "acAlT43Eaq7IZ5L-4XVDMQAAAQQ"]
[Mon Mar 23 01:22:23.984992 2026] [:error] [pid 27776:tid 27857] [client 20.121.25.154:3392] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/htaccess.php"] [unique_id "acAlT43Eaq7IZ5L-4XVDNAAAAQo"]
[Mon Mar 23 01:22:24.434744 2026] [:error] [pid 27776:tid 27846] [client 20.121.25.154:3450] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/htaccess.php"] [unique_id "acAlUI3Eaq7IZ5L-4XVDNwAAAQA"]
[Mon Mar 23 01:22:24.871702 2026] [:error] [pid 20584:tid 20637] [client 20.121.25.154:3403] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/htaccess.php"] [unique_id "acAlUCWzr-bD_t6AP_TGiAAAAFU"]
[Mon Mar 23 01:22:25.299503 2026] [:error] [pid 27776:tid 27864] [client 20.121.25.154:3410] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/readme.php"] [unique_id "acAlUY3Eaq7IZ5L-4XVDOgAAARE"]
[Mon Mar 23 01:22:25.748531 2026] [:error] [pid 27776:tid 27850] [client 20.121.25.154:3280] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/readme.php"] [unique_id "acAlUY3Eaq7IZ5L-4XVDPQAAAQQ"]
[Mon Mar 23 01:22:26.227197 2026] [:error] [pid 27776:tid 27862] [client 20.121.25.154:3275] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/readme.php"] [unique_id "acAlUo3Eaq7IZ5L-4XVDPwAAAQ8"]
[Mon Mar 23 01:22:26.669899 2026] [:error] [pid 27776:tid 27851] [client 20.121.25.154:3416] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/readme.php"] [unique_id "acAlUo3Eaq7IZ5L-4XVDQQAAAQU"]
[Mon Mar 23 01:22:27.109105 2026] [:error] [pid 27776:tid 27868] [client 20.121.25.154:3271] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/x50.php"] [unique_id "acAlU43Eaq7IZ5L-4XVDQwAAARU"]
[Mon Mar 23 01:22:27.568494 2026] [:error] [pid 27776:tid 27846] [client 20.121.25.154:3412] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/x50.php"] [unique_id "acAlU43Eaq7IZ5L-4XVDRAAAAQA"]
[Mon Mar 23 01:22:28.004889 2026] [:error] [pid 20856:tid 20925] [client 20.121.25.154:3409] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/x50.php"] [unique_id "acAlVMxFtXFVNE-X2-KPxwAAAMY"]
[Mon Mar 23 01:22:28.434853 2026] [:error] [pid 20574:tid 20594] [client 20.121.25.154:3215] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/x50.php"] [unique_id "acAlVNdMXEnEZrwyzJkCFgAAAAU"]
[Mon Mar 23 01:22:29.042912 2026] [:error] [pid 20574:tid 20607] [client 20.121.25.154:3404] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/fv.php"] [unique_id "acAlVddMXEnEZrwyzJkCGAAAABI"]
[Mon Mar 23 01:22:29.522731 2026] [:error] [pid 20584:tid 20624] [client 20.121.25.154:3306] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/fv.php"] [unique_id "acAlVSWzr-bD_t6AP_TGiwAAAEg"]
[Mon Mar 23 01:22:30.179277 2026] [:error] [pid 20856:tid 20929] [client 20.121.25.154:3269] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/fv.php"] [unique_id "acAlVsxFtXFVNE-X2-KPygAAAMo"]
[Mon Mar 23 01:22:30.661918 2026] [:error] [pid 20584:tid 20631] [client 20.121.25.154:3296] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/fv.php"] [unique_id "acAlViWzr-bD_t6AP_TGjgAAAE8"]
[Mon Mar 23 01:22:31.137165 2026] [:error] [pid 27776:tid 27854] [client 20.121.25.154:3441] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/file.php"] [unique_id "acAlV43Eaq7IZ5L-4XVDSAAAAQg"]
[Mon Mar 23 01:22:31.561290 2026] [:error] [pid 27776:tid 27862] [client 20.121.25.154:3438] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/file.php"] [unique_id "acAlV43Eaq7IZ5L-4XVDTAAAAQ8"]
[Mon Mar 23 01:22:32.042957 2026] [:error] [pid 20587:tid 20661] [client 20.121.25.154:3402] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/file.php"] [unique_id "acAlWIByf8r3QAk4VXPo1wAAAJI"]
[Mon Mar 23 01:22:32.467425 2026] [:error] [pid 20856:tid 20938] [client 20.121.25.154:3455] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/file.php"] [unique_id "acAlWMxFtXFVNE-X2-KPzAAAANM"]
[Mon Mar 23 01:22:32.881382 2026] [:error] [pid 20587:tid 20643] [client 20.121.25.154:3274] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/lsd.php"] [unique_id "acAlWIByf8r3QAk4VXPo2QAAAIA"]
[Mon Mar 23 01:22:33.290633 2026] [:error] [pid 20856:tid 20943] [client 20.121.25.154:3301] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/lsd.php"] [unique_id "acAlWcxFtXFVNE-X2-KPzwAAANg"]
[Mon Mar 23 01:22:33.710371 2026] [:error] [pid 27776:tid 27848] [client 20.121.25.154:3394] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/lsd.php"] [unique_id "acAlWY3Eaq7IZ5L-4XVDTgAAAQI"]
[Mon Mar 23 01:22:34.208401 2026] [:error] [pid 20856:tid 20933] [client 20.121.25.154:3284] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/lsd.php"] [unique_id "acAlWsxFtXFVNE-X2-KP0AAAAM4"]
[Mon Mar 23 01:22:34.717761 2026] [:error] [pid 20856:tid 20941] [client 20.121.25.154:3219] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/as.php"] [unique_id "acAlWsxFtXFVNE-X2-KP0gAAANY"]
[Mon Mar 23 01:22:35.190491 2026] [:error] [pid 27776:tid 27852] [client 20.121.25.154:3421] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/as.php"] [unique_id "acAlW43Eaq7IZ5L-4XVDUAAAAQY"]
[Mon Mar 23 01:22:35.610827 2026] [:error] [pid 27776:tid 27867] [client 20.121.25.154:3423] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/as.php"] [unique_id "acAlW43Eaq7IZ5L-4XVDUgAAARQ"]
[Mon Mar 23 01:22:36.019811 2026] [:error] [pid 27776:tid 27847] [client 20.121.25.154:3449] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/as.php"] [unique_id "acAlXI3Eaq7IZ5L-4XVDUwAAAQE"]
[Mon Mar 23 01:22:36.437322 2026] [:error] [pid 20584:tid 20632] [client 20.121.25.154:3431] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wsd.php"] [unique_id "acAlXCWzr-bD_t6AP_TGjwAAAFA"]
[Mon Mar 23 01:22:36.847965 2026] [:error] [pid 20584:tid 20623] [client 20.121.25.154:3298] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wsd.php"] [unique_id "acAlXCWzr-bD_t6AP_TGkAAAAEc"]
[Mon Mar 23 01:22:37.272684 2026] [:error] [pid 20856:tid 20943] [client 20.121.25.154:3307] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wsd.php"] [unique_id "acAlXcxFtXFVNE-X2-KP3AAAANg"]
[Mon Mar 23 01:22:37.696584 2026] [:error] [pid 20856:tid 20940] [client 20.121.25.154:3308] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wsd.php"] [unique_id "acAlXcxFtXFVNE-X2-KP3gAAANU"]
[Mon Mar 23 01:22:38.156938 2026] [:error] [pid 20856:tid 20932] [client 20.121.25.154:3399] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/gtc.php"] [unique_id "acAlXsxFtXFVNE-X2-KP4AAAAM0"]
[Mon Mar 23 01:22:38.655394 2026] [:error] [pid 27776:tid 27865] [client 20.121.25.154:3218] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/gtc.php"] [unique_id "acAlXo3Eaq7IZ5L-4XVDWwAAARI"]
[Mon Mar 23 01:22:39.075315 2026] [:error] [pid 20584:tid 20635] [client 20.121.25.154:3322] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/gtc.php"] [unique_id "acAlXyWzr-bD_t6AP_TGkQAAAFM"]
[Mon Mar 23 01:22:39.498022 2026] [:error] [pid 27776:tid 27855] [client 20.121.25.154:3405] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/gtc.php"] [unique_id "acAlX43Eaq7IZ5L-4XVDXwAAAQk"]
[Mon Mar 23 01:22:40.067008 2026] [:error] [pid 20856:tid 20921] [client 20.121.25.154:3420] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/atx.php"] [unique_id "acAlYMxFtXFVNE-X2-KP5QAAAMI"]
[Mon Mar 23 01:22:40.662302 2026] [:error] [pid 27776:tid 27866] [client 20.121.25.154:3291] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/atx.php"] [unique_id "acAlYI3Eaq7IZ5L-4XVDYwAAARM"]
[Mon Mar 23 01:22:41.078636 2026] [:error] [pid 20856:tid 20937] [client 20.121.25.154:3448] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/atx.php"] [unique_id "acAlYcxFtXFVNE-X2-KP5gAAANI"]
[Mon Mar 23 01:22:41.560410 2026] [:error] [pid 20587:tid 20648] [client 20.121.25.154:3396] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/atx.php"] [unique_id "acAlYYByf8r3QAk4VXPo5gAAAIU"]
[Mon Mar 23 01:22:41.998885 2026] [:error] [pid 20856:tid 20931] [client 20.121.25.154:3444] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/z60.php"] [unique_id "acAlYcxFtXFVNE-X2-KP5wAAAMw"]
[Mon Mar 23 01:22:42.435498 2026] [:error] [pid 20587:tid 20660] [client 20.121.25.154:3278] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/z60.php"] [unique_id "acAlYoByf8r3QAk4VXPo6QAAAJE"]
[Mon Mar 23 01:22:42.851728 2026] [:error] [pid 20574:tid 20610] [client 20.121.25.154:3413] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/z60.php"] [unique_id "acAlYtdMXEnEZrwyzJkCIQAAABU"]
[Mon Mar 23 01:22:43.264291 2026] [:error] [pid 20574:tid 20594] [client 20.121.25.154:3290] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/z60.php"] [unique_id "acAlY9dMXEnEZrwyzJkCIgAAAAU"]
[Mon Mar 23 01:22:43.729126 2026] [:error] [pid 20574:tid 20609] [client 20.121.25.154:3422] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/403.php"] [unique_id "acAlY9dMXEnEZrwyzJkCIwAAABQ"]
[Mon Mar 23 01:22:44.182199 2026] [:error] [pid 20574:tid 20603] [client 20.121.25.154:3275] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/403.php"] [unique_id "acAlZNdMXEnEZrwyzJkCJAAAAA4"]
[Mon Mar 23 01:22:44.644548 2026] [:error] [pid 20856:tid 20938] [client 20.121.25.154:3419] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/403.php"] [unique_id "acAlZMxFtXFVNE-X2-KP8AAAANM"]
[Mon Mar 23 01:22:45.134582 2026] [:error] [pid 20856:tid 20920] [client 20.121.25.154:3265] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/403.php"] [unique_id "acAlZcxFtXFVNE-X2-KP8gAAAME"]
[Mon Mar 23 01:22:45.551755 2026] [:error] [pid 20584:tid 20628] [client 20.121.25.154:3289] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/m.php"] [unique_id "acAlZSWzr-bD_t6AP_TGkwAAAEw"]
[Mon Mar 23 01:22:46.022837 2026] [:error] [pid 27776:tid 27865] [client 20.121.25.154:3204] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/m.php"] [unique_id "acAlZo3Eaq7IZ5L-4XVDaAAAARI"]
[Mon Mar 23 01:22:46.654239 2026] [:error] [pid 27776:tid 27847] [client 20.121.25.154:3266] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/m.php"] [unique_id "acAlZo3Eaq7IZ5L-4XVDagAAAQE"]
[Mon Mar 23 01:22:47.099049 2026] [:error] [pid 27776:tid 27859] [client 20.121.25.154:3323] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/m.php"] [unique_id "acAlZ43Eaq7IZ5L-4XVDcAAAAQw"]
[Mon Mar 23 01:22:47.626950 2026] [:error] [pid 20856:tid 20934] [client 20.121.25.154:3292] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/themes.php"] [unique_id "acAlZ8xFtXFVNE-X2-KP9wAAAM8"]
[Mon Mar 23 01:22:48.059550 2026] [:error] [pid 27776:tid 27862] [client 20.121.25.154:3395] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/themes.php"] [unique_id "acAlaI3Eaq7IZ5L-4XVDdAAAAQ8"]
[Mon Mar 23 01:22:48.477130 2026] [:error] [pid 27776:tid 27870] [client 20.121.25.154:3294] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/themes.php"] [unique_id "acAlaI3Eaq7IZ5L-4XVDdwAAARY"]
[Mon Mar 23 01:22:48.924158 2026] [:error] [pid 27776:tid 27849] [client 20.121.25.154:3319] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/themes.php"] [unique_id "acAlaI3Eaq7IZ5L-4XVDegAAAQM"]
[Mon Mar 23 01:22:49.371853 2026] [:error] [pid 20856:tid 20936] [client 20.121.25.154:3272] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "acAlacxFtXFVNE-X2-KP-AAAANE"]
[Mon Mar 23 01:22:49.872600 2026] [:error] [pid 20587:tid 20664] [client 20.121.25.154:3452] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "acAlaYByf8r3QAk4VXPo8AAAAJU"]
[Mon Mar 23 01:22:50.289606 2026] [:error] [pid 20856:tid 20925] [client 20.121.25.154:4037] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "acAlasxFtXFVNE-X2-KP-QAAAMY"]
[Mon Mar 23 01:22:50.705264 2026] [:error] [pid 20587:tid 20666] [client 20.121.25.154:3320] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "acAlaoByf8r3QAk4VXPo8gAAAJc"]
[Mon Mar 23 01:22:51.163713 2026] [:error] [pid 20856:tid 20930] [client 20.121.25.154:3430] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "acAla8xFtXFVNE-X2-KP-wAAAMs"]
[Mon Mar 23 01:22:51.603710 2026] [:error] [pid 20856:tid 20939] [client 20.121.25.154:3443] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "acAla8xFtXFVNE-X2-KP_AAAANQ"]
[Mon Mar 23 01:22:52.027954 2026] [:error] [pid 20856:tid 20938] [client 20.121.25.154:3281] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "acAlbMxFtXFVNE-X2-KP_QAAANM"]
[Mon Mar 23 01:22:52.448065 2026] [:error] [pid 20856:tid 20923] [client 20.121.25.154:3428] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "acAlbMxFtXFVNE-X2-KP_gAAAMQ"]
[Mon Mar 23 01:22:52.861824 2026] [:error] [pid 20574:tid 20594] [client 20.121.25.154:3429] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/click.php"] [unique_id "acAlbNdMXEnEZrwyzJkCLwAAAAU"]
[Mon Mar 23 01:22:53.292092 2026] [:error] [pid 20587:tid 20652] [client 20.121.25.154:3297] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/click.php"] [unique_id "acAlbYByf8r3QAk4VXPo-wAAAIk"]
[Mon Mar 23 01:22:53.714585 2026] [:error] [pid 20587:tid 20667] [client 20.121.25.154:4047] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/click.php"] [unique_id "acAlbYByf8r3QAk4VXPo_QAAAJg"]
[Mon Mar 23 01:22:54.156605 2026] [:error] [pid 20574:tid 20609] [client 20.121.25.154:3321] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/click.php"] [unique_id "acAlbtdMXEnEZrwyzJkCMAAAABQ"]
[Mon Mar 23 01:22:54.677671 2026] [:error] [pid 20856:tid 20937] [client 20.121.25.154:3211] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/install.php"] [unique_id "acAlbsxFtXFVNE-X2-KQAgAAANI"]
[Mon Mar 23 01:22:55.124376 2026] [:error] [pid 20574:tid 20611] [client 20.121.25.154:3406] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/install.php"] [unique_id "acAlb9dMXEnEZrwyzJkCMgAAABY"]
[Mon Mar 23 01:22:55.585013 2026] [:error] [pid 20587:tid 20659] [client 20.121.25.154:3395] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/install.php"] [unique_id "acAlb4Byf8r3QAk4VXPpBAAAAJA"]
[Mon Mar 23 01:22:56.410964 2026] [:error] [pid 20587:tid 20660] [client 20.121.25.154:3424] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/install.php"] [unique_id "acAlcIByf8r3QAk4VXPpCAAAAJE"]
[Mon Mar 23 01:22:56.880938 2026] [:error] [pid 20856:tid 20933] [client 20.121.25.154:3311] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/lv.php"] [unique_id "acAlcMxFtXFVNE-X2-KQBgAAAM4"]
[Mon Mar 23 01:22:57.313149 2026] [:error] [pid 20574:tid 20598] [client 20.121.25.154:3244] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/lv.php"] [unique_id "acAlcddMXEnEZrwyzJkCNAAAAAk"]
[Mon Mar 23 01:22:57.809043 2026] [:error] [pid 27776:tid 27858] [client 20.121.25.154:3446] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/lv.php"] [unique_id "acAlcY3Eaq7IZ5L-4XVDgAAAAQs"]
[Mon Mar 23 01:22:58.261898 2026] [:error] [pid 20574:tid 20599] [client 20.121.25.154:3415] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/lv.php"] [unique_id "acAlctdMXEnEZrwyzJkCNQAAAAo"]
[Mon Mar 23 01:22:58.684311 2026] [:error] [pid 20856:tid 20930] [client 20.121.25.154:3256] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/simple.php"] [unique_id "acAlcsxFtXFVNE-X2-KQCwAAAMs"]
[Mon Mar 23 01:22:59.284101 2026] [:error] [pid 20856:tid 20920] [client 20.121.25.154:3312] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/simple.php"] [unique_id "acAlc8xFtXFVNE-X2-KQDQAAAME"]
[Mon Mar 23 01:22:59.704288 2026] [:error] [pid 27776:tid 27872] [client 20.121.25.154:3267] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/simple.php"] [unique_id "acAlc43Eaq7IZ5L-4XVDhAAAARg"]
[Mon Mar 23 01:23:00.138102 2026] [:error] [pid 27776:tid 27859] [client 20.121.25.154:3453] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/simple.php"] [unique_id "acAldI3Eaq7IZ5L-4XVDhQAAAQw"]
[Mon Mar 23 01:23:00.600846 2026] [:error] [pid 27776:tid 27850] [client 20.121.25.154:3439] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/css.php"] [unique_id "acAldI3Eaq7IZ5L-4XVDhwAAAQQ"]
[Mon Mar 23 01:23:01.206936 2026] [:error] [pid 27776:tid 27867] [client 20.121.25.154:3214] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/css.php"] [unique_id "acAldY3Eaq7IZ5L-4XVDiwAAARQ"]
[Mon Mar 23 01:23:01.654175 2026] [:error] [pid 20584:tid 20630] [client 20.121.25.154:3442] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/css.php"] [unique_id "acAldSWzr-bD_t6AP_TGlgAAAE4"]
[Mon Mar 23 01:23:02.156195 2026] [:error] [pid 20856:tid 20936] [client 20.121.25.154:3287] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/css.php"] [unique_id "acAldsxFtXFVNE-X2-KQFAAAANE"]
[Mon Mar 23 01:23:02.902430 2026] [:error] [pid 20856:tid 20925] [client 20.121.25.154:4043] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/cong.php"] [unique_id "acAldsxFtXFVNE-X2-KQFgAAAMY"]
[Mon Mar 23 01:23:04.146503 2026] [:error] [pid 20587:tid 20663] [client 20.121.25.154:3454] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/cong.php"] [unique_id "acAleIByf8r3QAk4VXPpDwAAAJQ"]
[Mon Mar 23 01:23:05.374335 2026] [:error] [pid 20587:tid 20661] [client 20.121.25.154:3316] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/cong.php"] [unique_id "acAleYByf8r3QAk4VXPpEQAAAJI"]
[Mon Mar 23 01:23:06.012852 2026] [:error] [pid 20587:tid 20648] [client 20.121.25.154:4072] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/cong.php"] [unique_id "acAleoByf8r3QAk4VXPpEgAAAIU"]
[Mon Mar 23 01:23:06.537407 2026] [:error] [pid 27776:tid 27860] [client 20.121.25.154:3208] [client 20.121.25.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "acAleo3Eaq7IZ5L-4XVDmgAAAQ0"]
[Mon Mar 23 01:23:06.965957 2026] [:error] [pid 20574:tid 20595] [client 20.121.25.154:3222] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/cong.php"] [unique_id "acAletdMXEnEZrwyzJkCOAAAAAY"]
[Mon Mar 23 01:23:07.589003 2026] [:error] [pid 27776:tid 27846] [client 20.121.25.154:3243] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/cong.php"] [unique_id "acAle43Eaq7IZ5L-4XVDnQAAAQA"]
[Mon Mar 23 01:23:08.033710 2026] [:error] [pid 20587:tid 20643] [client 20.121.25.154:3259] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/cong.php"] [unique_id "acAlfIByf8r3QAk4VXPpEwAAAIA"]
[Mon Mar 23 01:23:08.518864 2026] [:error] [pid 20587:tid 20660] [client 20.121.25.154:3400] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/cong.php"] [unique_id "acAlfIByf8r3QAk4VXPpFQAAAJE"]
[Mon Mar 23 01:23:08.965405 2026] [:error] [pid 20584:tid 20628] [client 20.121.25.154:3313] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/w.php"] [unique_id "acAlfCWzr-bD_t6AP_TGogAAAEw"]
[Mon Mar 23 01:23:09.428173 2026] [:error] [pid 20574:tid 20599] [client 20.121.25.154:3436] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/w.php"] [unique_id "acAlfddMXEnEZrwyzJkCQAAAAAo"]
[Mon Mar 23 01:23:09.866282 2026] [:error] [pid 20856:tid 20926] [client 20.121.25.154:3397] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/w.php"] [unique_id "acAlfcxFtXFVNE-X2-KQGQAAAMc"]
[Mon Mar 23 01:23:10.310810 2026] [:error] [pid 20856:tid 20922] [client 20.121.25.154:3261] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/w.php"] [unique_id "acAlfsxFtXFVNE-X2-KQGgAAAMM"]
[Mon Mar 23 01:23:10.759632 2026] [:error] [pid 20856:tid 20934] [client 20.121.25.154:3426] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/404.php"] [unique_id "acAlfsxFtXFVNE-X2-KQHAAAAM8"]
[Mon Mar 23 01:23:11.383721 2026] [:error] [pid 20584:tid 20619] [client 20.121.25.154:3268] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/404.php"] [unique_id "acAlfyWzr-bD_t6AP_TGowAAAEM"]
[Mon Mar 23 01:23:12.003185 2026] [:error] [pid 20584:tid 20625] [client 20.121.25.154:3305] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/404.php"] [unique_id "acAlgCWzr-bD_t6AP_TGpAAAAEk"]
[Mon Mar 23 01:23:12.495875 2026] [:error] [pid 20574:tid 20604] [client 20.121.25.154:4039] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/404.php"] [unique_id "acAlgNdMXEnEZrwyzJkCQgAAAA8"]
[Mon Mar 23 01:23:12.922251 2026] [:error] [pid 20584:tid 20622] [client 20.121.25.154:3227] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ioxi-o.php"] [unique_id "acAlgCWzr-bD_t6AP_TGqQAAAEY"]
[Mon Mar 23 01:23:13.440349 2026] [:error] [pid 20587:tid 20645] [client 20.121.25.154:3260] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ioxi-o.php"] [unique_id "acAlgYByf8r3QAk4VXPpHQAAAII"]
[Mon Mar 23 01:23:13.958105 2026] [:error] [pid 20584:tid 20636] [client 20.121.25.154:3314] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ioxi-o.php"] [unique_id "acAlgSWzr-bD_t6AP_TGrAAAAFQ"]
[Mon Mar 23 01:23:14.413297 2026] [:error] [pid 20574:tid 20605] [client 20.121.25.154:3324] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ioxi-o.php"] [unique_id "acAlgtdMXEnEZrwyzJkCRQAAABA"]
[Mon Mar 23 01:23:14.833234 2026] [:error] [pid 27776:tid 27851] [client 20.121.25.154:3440] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/0x.php"] [unique_id "acAlgo3Eaq7IZ5L-4XVDoAAAAQU"]
[Mon Mar 23 01:23:15.279095 2026] [:error] [pid 20856:tid 20925] [client 20.121.25.154:4057] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/0x.php"] [unique_id "acAlg8xFtXFVNE-X2-KQIAAAAMY"]
[Mon Mar 23 01:23:15.693872 2026] [:error] [pid 20587:tid 20664] [client 20.121.25.154:3242] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/0x.php"] [unique_id "acAlg4Byf8r3QAk4VXPpIAAAAJU"]
[Mon Mar 23 01:23:16.224705 2026] [:error] [pid 20856:tid 20919] [client 20.121.25.154:3434] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/0x.php"] [unique_id "acAlhMxFtXFVNE-X2-KQIgAAAMA"]
[Mon Mar 23 01:23:16.701908 2026] [:error] [pid 27776:tid 27865] [client 20.121.25.154:3302] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/css.php"] [unique_id "acAlhI3Eaq7IZ5L-4XVDpAAAARI"]
[Mon Mar 23 01:23:17.148088 2026] [proxy_fcgi:error] [pid 27776:tid 27862] [client 20.121.25.154:3427] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 01:23:17.357988 2026] [proxy_fcgi:error] [pid 27776:tid 27847] [client 20.121.25.154:3427] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 01:23:17.775686 2026] [proxy_fcgi:error] [pid 27776:tid 27861] [client 20.121.25.154:3427] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 01:23:18.206714 2026] [proxy_fcgi:error] [pid 27776:tid 27866] [client 20.121.25.154:3427] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 01:23:18.427218 2026] [proxy_fcgi:error] [pid 27776:tid 27854] [client 20.121.25.154:3427] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 01:23:18.639181 2026] [proxy_fcgi:error] [pid 27776:tid 27871] [client 20.121.25.154:3427] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 01:23:18.861721 2026] [proxy_fcgi:error] [pid 27776:tid 27868] [client 20.121.25.154:3427] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 01:23:19.070766 2026] [proxy_fcgi:error] [pid 27776:tid 27848] [client 20.121.25.154:3427] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 01:23:19.280761 2026] [proxy_fcgi:error] [pid 27776:tid 27858] [client 20.121.25.154:3427] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 01:23:19.662559 2026] [:error] [pid 27776:tid 27860] [client 20.121.25.154:3427] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "acAlh43Eaq7IZ5L-4XVDtwAAAQ0"]
[Mon Mar 23 01:23:20.198106 2026] [:error] [pid 20856:tid 20938] [client 20.121.25.154:3264] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "acAliMxFtXFVNE-X2-KQJwAAANM"]
[Mon Mar 23 01:23:20.617555 2026] [:error] [pid 20574:tid 20609] [client 20.121.25.154:3262] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "acAliNdMXEnEZrwyzJkCSgAAABQ"]
[Mon Mar 23 01:23:21.114432 2026] [:error] [pid 20587:tid 20662] [client 20.121.25.154:3201] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "acAliYByf8r3QAk4VXPpJQAAAJM"]
[Mon Mar 23 01:23:21.568212 2026] [:error] [pid 20574:tid 20602] [client 20.121.25.154:3437] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "acAliddMXEnEZrwyzJkCTAAAAA0"]
[Mon Mar 23 01:23:21.994960 2026] [:error] [pid 20587:tid 20650] [client 20.121.25.154:3288] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "acAliYByf8r3QAk4VXPpJwAAAIc"]
[Mon Mar 23 01:23:22.415345 2026] [:error] [pid 20587:tid 20665] [client 20.121.25.154:3310] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "acAlioByf8r3QAk4VXPpKAAAAJY"]
[Mon Mar 23 01:23:22.953707 2026] [:error] [pid 27776:tid 27870] [client 20.121.25.154:3233] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "acAlio3Eaq7IZ5L-4XVDuQAAARY"]
[Mon Mar 23 01:23:23.509439 2026] [:error] [pid 20574:tid 20604] [client 20.121.25.154:3303] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "acAli9dMXEnEZrwyzJkCUQAAAA8"]
[Mon Mar 23 01:23:24.059986 2026] [:error] [pid 27776:tid 27849] [client 20.121.25.154:3318] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "acAljI3Eaq7IZ5L-4XVDuwAAAQM"]
[Mon Mar 23 01:23:24.795842 2026] [:error] [pid 27776:tid 27846] [client 20.121.25.154:3238] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "acAljI3Eaq7IZ5L-4XVDvgAAAQA"]
[Mon Mar 23 01:23:25.292863 2026] [:error] [pid 20856:tid 20928] [client 20.121.25.154:3425] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "acAljcxFtXFVNE-X2-KQMAAAAMk"]
[Mon Mar 23 01:23:25.753766 2026] [:error] [pid 20856:tid 20929] [client 20.121.25.154:3231] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "acAljcxFtXFVNE-X2-KQMwAAAMo"]
[Mon Mar 23 01:23:26.567546 2026] [:error] [pid 20856:tid 20922] [client 20.121.25.154:3277] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "acAljsxFtXFVNE-X2-KQNQAAAMM"]
[Mon Mar 23 01:23:27.067686 2026] [:error] [pid 20587:tid 20652] [client 20.121.25.154:3220] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "acAlj4Byf8r3QAk4VXPpMAAAAIk"]
[Mon Mar 23 01:23:27.510842 2026] [:error] [pid 20587:tid 20658] [client 20.121.25.154:3234] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "acAlj4Byf8r3QAk4VXPpMgAAAI8"]
[Mon Mar 23 01:23:27.951755 2026] [:error] [pid 20856:tid 20927] [client 20.121.25.154:3200] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/manager.php"] [unique_id "acAlj8xFtXFVNE-X2-KQOQAAAMg"]
[Mon Mar 23 01:23:28.512749 2026] [:error] [pid 20856:tid 20923] [client 20.121.25.154:3295] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/manager.php"] [unique_id "acAlkMxFtXFVNE-X2-KQPAAAAMQ"]
[Mon Mar 23 01:23:28.948630 2026] [:error] [pid 20584:tid 20620] [client 20.121.25.154:3209] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/manager.php"] [unique_id "acAlkCWzr-bD_t6AP_TGsQAAAEQ"]
[Mon Mar 23 01:23:29.408401 2026] [:error] [pid 20587:tid 20666] [client 20.121.25.154:3263] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/manager.php"] [unique_id "acAlkYByf8r3QAk4VXPpNQAAAJc"]
[Mon Mar 23 01:23:29.840291 2026] [:error] [pid 20574:tid 20602] [client 20.121.25.154:3299] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/item.php"] [unique_id "acAlkddMXEnEZrwyzJkCWgAAAA0"]
[Mon Mar 23 01:23:30.287699 2026] [:error] [pid 20856:tid 20922] [client 20.121.25.154:3300] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/item.php"] [unique_id "acAlksxFtXFVNE-X2-KQQwAAAMM"]
[Mon Mar 23 01:23:30.801137 2026] [:error] [pid 20584:tid 20630] [client 20.121.25.154:3282] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/item.php"] [unique_id "acAlkiWzr-bD_t6AP_TGswAAAE4"]
[Mon Mar 23 01:23:31.247963 2026] [:error] [pid 20587:tid 20656] [client 20.121.25.154:3309] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/item.php"] [unique_id "acAlk4Byf8r3QAk4VXPpPQAAAI0"]
[Mon Mar 23 01:23:31.758646 2026] [:error] [pid 27776:tid 27867] [client 20.121.25.154:3226] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "acAlk43Eaq7IZ5L-4XVDxAAAARQ"]
[Mon Mar 23 01:23:32.221391 2026] [:error] [pid 20856:tid 20941] [client 20.121.25.154:3206] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "acAllMxFtXFVNE-X2-KQSQAAANY"]
[Mon Mar 23 01:23:32.631909 2026] [:error] [pid 20856:tid 20943] [client 20.121.25.154:3408] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "acAllMxFtXFVNE-X2-KQSwAAANg"]
[Mon Mar 23 01:23:33.069309 2026] [:error] [pid 20587:tid 20667] [client 20.121.25.154:3228] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "acAllYByf8r3QAk4VXPpQAAAAJg"]
[Mon Mar 23 01:23:33.488859 2026] [:error] [pid 20587:tid 20650] [client 20.121.25.154:4079] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/404.php"] [unique_id "acAllYByf8r3QAk4VXPpQgAAAIc"]
[Mon Mar 23 01:23:33.903544 2026] [:error] [pid 20574:tid 20593] [client 20.121.25.154:3210] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/404.php"] [unique_id "acAllddMXEnEZrwyzJkCXQAAAAQ"]
[Mon Mar 23 01:23:34.350868 2026] [:error] [pid 27776:tid 27872] [client 20.121.25.154:3236] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/404.php"] [unique_id "acAllo3Eaq7IZ5L-4XVDygAAARg"]
[Mon Mar 23 01:23:34.769674 2026] [:error] [pid 20856:tid 20930] [client 20.121.25.154:3255] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/404.php"] [unique_id "acAllsxFtXFVNE-X2-KQTgAAAMs"]
[Mon Mar 23 01:23:35.225614 2026] [:error] [pid 20584:tid 20634] [client 20.121.25.154:3414] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/mail.php"] [unique_id "acAllyWzr-bD_t6AP_TGuAAAAFI"]
[Mon Mar 23 01:23:35.738038 2026] [:error] [pid 20856:tid 20921] [client 20.121.25.154:3317] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/mail.php"] [unique_id "acAll8xFtXFVNE-X2-KQTwAAAMI"]
[Mon Mar 23 01:23:36.216612 2026] [:error] [pid 20856:tid 20938] [client 20.121.25.154:3304] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/mail.php"] [unique_id "acAlmMxFtXFVNE-X2-KQUgAAANM"]
[Mon Mar 23 01:23:36.652935 2026] [:error] [pid 20856:tid 20926] [client 20.121.25.154:3205] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/mail.php"] [unique_id "acAlmMxFtXFVNE-X2-KQVAAAAMc"]
[Mon Mar 23 01:23:37.171298 2026] [:error] [pid 27776:tid 27851] [client 20.121.25.154:4053] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "acAlmY3Eaq7IZ5L-4XVDzwAAAQU"]
[Mon Mar 23 01:23:37.594381 2026] [:error] [pid 20584:tid 20623] [client 20.121.25.154:4032] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "acAlmSWzr-bD_t6AP_TGvAAAAEc"]
[Mon Mar 23 01:23:38.026723 2026] [:error] [pid 27776:tid 27863] [client 20.121.25.154:4069] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "acAlmo3Eaq7IZ5L-4XVD0wAAARA"]
[Mon Mar 23 01:23:38.544014 2026] [:error] [pid 27776:tid 27872] [client 20.121.25.154:3327] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "acAlmo3Eaq7IZ5L-4XVD1QAAARg"]
[Mon Mar 23 01:23:39.041434 2026] [:error] [pid 20856:tid 20923] [client 20.121.25.154:4052] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/sx.php"] [unique_id "acAlm8xFtXFVNE-X2-KQVQAAAMQ"]
[Mon Mar 23 01:23:39.555759 2026] [:error] [pid 20856:tid 20932] [client 20.121.25.154:3221] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/sx.php"] [unique_id "acAlm8xFtXFVNE-X2-KQVwAAAM0"]
[Mon Mar 23 01:23:39.974402 2026] [:error] [pid 20587:tid 20664] [client 20.121.25.154:4034] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/sx.php"] [unique_id "acAlm4Byf8r3QAk4VXPpRwAAAJU"]
[Mon Mar 23 01:23:40.555905 2026] [:error] [pid 20856:tid 20939] [client 20.121.25.154:4038] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/sx.php"] [unique_id "acAlnMxFtXFVNE-X2-KQWQAAANQ"]
[Mon Mar 23 01:23:40.970666 2026] [:error] [pid 20584:tid 20630] [client 20.121.25.154:4045] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "acAlnCWzr-bD_t6AP_TGwgAAAE4"]
[Mon Mar 23 01:23:41.412188 2026] [:error] [pid 27776:tid 27852] [client 20.121.25.154:4046] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "acAlnY3Eaq7IZ5L-4XVD3gAAAQY"]
[Mon Mar 23 01:23:41.939168 2026] [:error] [pid 27776:tid 27857] [client 20.121.25.154:4040] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "acAlnY3Eaq7IZ5L-4XVD3wAAAQo"]
[Mon Mar 23 01:23:42.449824 2026] [:error] [pid 27776:tid 27870] [client 20.121.25.154:3203] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "acAlno3Eaq7IZ5L-4XVD4wAAARY"]
[Mon Mar 23 01:23:42.874800 2026] [:error] [pid 27776:tid 27867] [client 20.121.25.154:4090] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/alfa.php"] [unique_id "acAlno3Eaq7IZ5L-4XVD5AAAARQ"]
[Mon Mar 23 01:23:43.304721 2026] [:error] [pid 20856:tid 20936] [client 20.121.25.154:3212] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/alfa.php"] [unique_id "acAln8xFtXFVNE-X2-KQXwAAANE"]
[Mon Mar 23 01:23:43.806709 2026] [:error] [pid 20856:tid 20938] [client 20.121.25.154:3230] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/alfa.php"] [unique_id "acAln8xFtXFVNE-X2-KQYQAAANM"]
[Mon Mar 23 01:23:44.240777 2026] [:error] [pid 20856:tid 20924] [client 20.121.25.154:3217] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/alfa.php"] [unique_id "acAloMxFtXFVNE-X2-KQZQAAAMU"]
[Mon Mar 23 01:23:44.710308 2026] [:error] [pid 20856:tid 20930] [client 20.121.25.154:3207] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/1.php"] [unique_id "acAloMxFtXFVNE-X2-KQaAAAAMs"]
[Mon Mar 23 01:23:45.140097 2026] [:error] [pid 20584:tid 20640] [client 20.121.25.154:3213] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/1.php"] [unique_id "acAloSWzr-bD_t6AP_TGxgAAAFg"]
[Mon Mar 23 01:23:45.555900 2026] [:error] [pid 20584:tid 20617] [client 20.121.25.154:3293] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/1.php"] [unique_id "acAloSWzr-bD_t6AP_TGyAAAAEE"]
[Mon Mar 23 01:23:45.970189 2026] [:error] [pid 20587:tid 20654] [client 20.121.25.154:3241] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/1.php"] [unique_id "acAloYByf8r3QAk4VXPpTgAAAIs"]
[Mon Mar 23 01:23:46.429379 2026] [:error] [pid 20584:tid 20625] [client 20.121.25.154:3285] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/byp.php"] [unique_id "acAloiWzr-bD_t6AP_TGzgAAAEk"]
[Mon Mar 23 01:23:47.059166 2026] [:error] [pid 20587:tid 20647] [client 20.121.25.154:4095] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/byp.php"] [unique_id "acAlo4Byf8r3QAk4VXPpUAAAAIQ"]
[Mon Mar 23 01:23:47.518812 2026] [:error] [pid 27776:tid 27858] [client 20.121.25.154:4092] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/byp.php"] [unique_id "acAlo43Eaq7IZ5L-4XVD8gAAAQs"]
[Mon Mar 23 01:23:47.942083 2026] [:error] [pid 20584:tid 20616] [client 20.121.25.154:4094] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/byp.php"] [unique_id "acAloyWzr-bD_t6AP_TG0QAAAEA"]
[Mon Mar 23 01:23:48.483750 2026] [:error] [pid 27776:tid 27850] [client 20.121.25.154:3283] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-trackback.php"] [unique_id "acAlpI3Eaq7IZ5L-4XVD9gAAAQQ"]
[Mon Mar 23 01:23:48.987197 2026] [:error] [pid 20856:tid 20934] [client 20.121.25.154:4044] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-trackback.php"] [unique_id "acAlpMxFtXFVNE-X2-KQbQAAAM8"]
[Mon Mar 23 01:23:49.420647 2026] [:error] [pid 20574:tid 20590] [client 20.121.25.154:3974] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-trackback.php"] [unique_id "acAlpddMXEnEZrwyzJkCbAAAAAE"]
[Mon Mar 23 01:23:49.905038 2026] [:error] [pid 27776:tid 27866] [client 20.121.25.154:4087] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-trackback.php"] [unique_id "acAlpY3Eaq7IZ5L-4XVD_QAAARM"]
[Mon Mar 23 01:23:50.354329 2026] [:error] [pid 20856:tid 20941] [client 20.121.25.154:3257] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/.well-known/index.php"] [unique_id "acAlpsxFtXFVNE-X2-KQbwAAANY"]
[Mon Mar 23 01:23:50.864483 2026] [:error] [pid 27776:tid 27864] [client 20.121.25.154:4089] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/.well-known/index.php"] [unique_id "acAlpo3Eaq7IZ5L-4XVEAgAAARE"]
[Mon Mar 23 01:23:51.397652 2026] [:error] [pid 20574:tid 20609] [client 20.121.25.154:3237] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/.well-known/index.php"] [unique_id "acAlp9dMXEnEZrwyzJkCbwAAABQ"]
[Mon Mar 23 01:23:51.835959 2026] [:error] [pid 20856:tid 20939] [client 20.121.25.154:3976] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/.well-known/index.php"] [unique_id "acAlp8xFtXFVNE-X2-KQcQAAANQ"]
[Mon Mar 23 01:23:52.277352 2026] [:error] [pid 27776:tid 27862] [client 20.121.25.154:3254] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "acAlqI3Eaq7IZ5L-4XVEDQAAAQ8"]
[Mon Mar 23 01:23:52.744730 2026] [:error] [pid 27776:tid 27857] [client 20.121.25.154:4042] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "acAlqI3Eaq7IZ5L-4XVEEQAAAQo"]
[Mon Mar 23 01:23:53.209713 2026] [:error] [pid 20856:tid 20931] [client 20.121.25.154:3235] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "acAlqcxFtXFVNE-X2-KQdQAAAMw"]
[Mon Mar 23 01:23:53.642788 2026] [:error] [pid 27776:tid 27863] [client 20.121.25.154:4055] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "acAlqY3Eaq7IZ5L-4XVEFwAAARA"]
[Mon Mar 23 01:23:54.095850 2026] [:error] [pid 27776:tid 27871] [client 20.121.25.154:4088] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/about.php"] [unique_id "acAlqo3Eaq7IZ5L-4XVEHQAAARc"]
[Mon Mar 23 01:23:54.540602 2026] [:error] [pid 27776:tid 27852] [client 20.121.25.154:3252] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/about.php"] [unique_id "acAlqo3Eaq7IZ5L-4XVEIgAAAQY"]
[Mon Mar 23 01:23:54.986430 2026] [:error] [pid 27776:tid 27871] [client 20.121.25.154:3315] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/about.php"] [unique_id "acAlqo3Eaq7IZ5L-4XVEJAAAARc"]
[Mon Mar 23 01:23:55.497312 2026] [:error] [pid 20574:tid 20601] [client 20.121.25.154:3253] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/about.php"] [unique_id "acAlq9dMXEnEZrwyzJkCcQAAAAw"]
[Mon Mar 23 01:23:55.953665 2026] [:error] [pid 27776:tid 27859] [client 20.121.25.154:3248] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/gmo.php"] [unique_id "acAlq43Eaq7IZ5L-4XVEJgAAAQw"]
[Mon Mar 23 01:23:56.604910 2026] [:error] [pid 27776:tid 27860] [client 20.121.25.154:3445] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/gmo.php"] [unique_id "acAlrI3Eaq7IZ5L-4XVEJwAAAQ0"]
[Mon Mar 23 01:23:57.019189 2026] [:error] [pid 20587:tid 20653] [client 20.121.25.154:4065] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/gmo.php"] [unique_id "acAlrYByf8r3QAk4VXPpVAAAAIo"]
[Mon Mar 23 01:23:57.594656 2026] [:error] [pid 20856:tid 20920] [client 20.121.25.154:4048] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/gmo.php"] [unique_id "acAlrcxFtXFVNE-X2-KQeQAAAME"]
[Mon Mar 23 01:23:58.115498 2026] [:error] [pid 27776:tid 27848] [client 20.121.25.154:4028] [client 20.121.25.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "acAlro3Eaq7IZ5L-4XVELwAAAQI"]
[Mon Mar 23 01:23:58.557018 2026] [:error] [pid 20587:tid 20646] [client 20.121.25.154:4081] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/css/index.php"] [unique_id "acAlroByf8r3QAk4VXPpVQAAAIM"]
[Mon Mar 23 01:23:59.127014 2026] [:error] [pid 27776:tid 27854] [client 20.121.25.154:4054] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/css/index.php"] [unique_id "acAlr43Eaq7IZ5L-4XVEMgAAAQg"]
[Mon Mar 23 01:24:00.555131 2026] [:error] [pid 20587:tid 20666] [client 20.121.25.154:4073] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/css/index.php"] [unique_id "acAlsIByf8r3QAk4VXPpWAAAAJc"]
[Mon Mar 23 01:24:01.241049 2026] [:error] [pid 20574:tid 20596] [client 20.121.25.154:4067] [client 20.121.25.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "acAlsddMXEnEZrwyzJkCgQAAAAc"]
[Mon Mar 23 01:24:01.862959 2026] [:error] [pid 27776:tid 27857] [client 20.121.25.154:4015] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "acAlsY3Eaq7IZ5L-4XVENAAAAQo"]
[Mon Mar 23 01:24:02.363822 2026] [:error] [pid 27776:tid 27864] [client 20.121.25.154:3979] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "acAlso3Eaq7IZ5L-4XVENQAAARE"]
[Mon Mar 23 01:24:02.786431 2026] [:error] [pid 27776:tid 27862] [client 20.121.25.154:3984] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "acAlso3Eaq7IZ5L-4XVENwAAAQ8"]
[Mon Mar 23 01:24:03.305165 2026] [:error] [pid 27776:tid 27848] [client 20.121.25.154:3246] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "acAls43Eaq7IZ5L-4XVEOQAAAQI"]
[Mon Mar 23 01:24:03.729720 2026] [:error] [pid 27776:tid 27868] [client 20.121.25.154:3447] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/filemanager/dialog.php"] [unique_id "acAls43Eaq7IZ5L-4XVEOwAAARU"]
[Mon Mar 23 01:24:04.183134 2026] [:error] [pid 27776:tid 27851] [client 20.121.25.154:3247] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/filemanager/dialog.php"] [unique_id "acAltI3Eaq7IZ5L-4XVEPgAAAQU"]
[Mon Mar 23 01:24:04.617696 2026] [:error] [pid 20584:tid 20628] [client 20.121.25.154:3993] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/filemanager/dialog.php"] [unique_id "acAltCWzr-bD_t6AP_TG3AAAAEw"]
[Mon Mar 23 01:24:05.037785 2026] [:error] [pid 27776:tid 27864] [client 20.121.25.154:3251] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/filemanager/dialog.php"] [unique_id "acAltY3Eaq7IZ5L-4XVEQgAAARE"]
[Mon Mar 23 01:24:05.459006 2026] [:error] [pid 27776:tid 27872] [client 20.121.25.154:4070] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "acAltY3Eaq7IZ5L-4XVEQwAAARg"]
[Mon Mar 23 01:24:06.086310 2026] [:error] [pid 27776:tid 27848] [client 20.121.25.154:4076] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "acAlto3Eaq7IZ5L-4XVERQAAAQI"]
[Mon Mar 23 01:24:06.650644 2026] [:error] [pid 27776:tid 27859] [client 20.121.25.154:3411] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "acAlto3Eaq7IZ5L-4XVESAAAAQw"]
[Mon Mar 23 01:24:07.225176 2026] [:error] [pid 20856:tid 20919] [client 20.121.25.154:3987] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "acAlt8xFtXFVNE-X2-KQgwAAAMA"]
[Mon Mar 23 01:24:07.884536 2026] [:error] [pid 20856:tid 20940] [client 20.121.25.154:3273] [client 20.121.25.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "acAlt8xFtXFVNE-X2-KQhQAAANU"]
[Mon Mar 23 01:24:08.341063 2026] [:error] [pid 20587:tid 20660] [client 20.121.25.154:3239] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/index/function.php"] [unique_id "acAluIByf8r3QAk4VXPpXwAAAJE"]
[Mon Mar 23 01:24:08.764847 2026] [:error] [pid 20584:tid 20634] [client 20.121.25.154:3973] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/index/function.php"] [unique_id "acAluCWzr-bD_t6AP_TG3gAAAFI"]
[Mon Mar 23 01:24:09.180810 2026] [:error] [pid 20574:tid 20596] [client 20.121.25.154:3995] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/index/function.php"] [unique_id "acAluddMXEnEZrwyzJkCiwAAAAc"]
[Mon Mar 23 01:24:09.666185 2026] [:error] [pid 27776:tid 27848] [client 20.121.25.154:4075] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "acAluY3Eaq7IZ5L-4XVETgAAAQI"]
[Mon Mar 23 01:24:10.088205 2026] [:error] [pid 27776:tid 27860] [client 20.121.25.154:3223] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "acAluo3Eaq7IZ5L-4XVEUAAAAQ0"]
[Mon Mar 23 01:24:10.565632 2026] [:error] [pid 27776:tid 27857] [client 20.121.25.154:3232] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "acAluo3Eaq7IZ5L-4XVEVAAAAQo"]
[Mon Mar 23 01:24:11.000811 2026] [:error] [pid 27776:tid 27849] [client 20.121.25.154:3325] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "acAluo3Eaq7IZ5L-4XVEVwAAAQM"]
[Mon Mar 23 01:24:11.551473 2026] [:error] [pid 27776:tid 27853] [client 20.121.25.154:3990] [client 20.121.25.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "acAlu43Eaq7IZ5L-4XVEWgAAAQc"]
[Mon Mar 23 01:24:12.296885 2026] [:error] [pid 20587:tid 20663] [client 20.121.25.154:3450] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ww1.php"] [unique_id "acAlvIByf8r3QAk4VXPpZgAAAJQ"]
[Mon Mar 23 01:24:15.203772 2026] [:error] [pid 27776:tid 27857] [client 20.121.25.154:4006] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ww1.php"] [unique_id "acAlv43Eaq7IZ5L-4XVEYgAAAQo"]
[Mon Mar 23 01:24:48.349323 2026] [proxy_fcgi:error] [pid 27776:tid 27847] [client 20.121.25.154:4077] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 01:24:49.005366 2026] [proxy_fcgi:error] [pid 27776:tid 27848] [client 20.121.25.154:4077] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 01:24:49.982742 2026] [:error] [pid 27776:tid 27849] [client 20.121.25.154:4077] [client 20.121.25.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "acAl4Y3Eaq7IZ5L-4XVExQAAAQM"]
[Mon Mar 23 01:24:51.482754 2026] [:error] [pid 20856:tid 20926] [client 20.121.25.154:3326] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "acAl48xFtXFVNE-X2-KQtwAAAMc"]
[Mon Mar 23 01:24:52.278617 2026] [:error] [pid 27776:tid 27847] [client 20.121.25.154:3988] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "acAl5I3Eaq7IZ5L-4XVE0AAAAQE"]
[Mon Mar 23 01:24:52.889876 2026] [:error] [pid 20584:tid 20631] [client 20.121.25.154:4002] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "acAl5CWzr-bD_t6AP_TG7AAAAE8"]
[Mon Mar 23 01:24:54.510718 2026] [:error] [pid 20587:tid 20662] [client 20.121.25.154:4018] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "acAl5oByf8r3QAk4VXPpkgAAAJM"]
[Mon Mar 23 01:24:55.182139 2026] [:error] [pid 27776:tid 27852] [client 20.121.25.154:3202] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "acAl543Eaq7IZ5L-4XVE1AAAAQY"]
[Mon Mar 23 01:24:55.919357 2026] [:error] [pid 20856:tid 20928] [client 20.121.25.154:3985] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "acAl58xFtXFVNE-X2-KQvQAAAMk"]
[Mon Mar 23 01:24:56.357731 2026] [:error] [pid 20856:tid 20921] [client 20.121.25.154:4001] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "acAl6MxFtXFVNE-X2-KQvwAAAMI"]
[Mon Mar 23 01:24:56.828730 2026] [:error] [pid 27776:tid 27857] [client 20.121.25.154:3912] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "acAl6I3Eaq7IZ5L-4XVE2QAAAQo"]
[Mon Mar 23 01:24:57.375790 2026] [:error] [pid 20584:tid 20632] [client 20.121.25.154:4083] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "acAl6SWzr-bD_t6AP_TG8AAAAFA"]
[Mon Mar 23 01:24:57.814875 2026] [:error] [pid 20574:tid 20591] [client 20.121.25.154:4066] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "acAl6ddMXEnEZrwyzJkCtAAAAAI"]
[Mon Mar 23 01:24:58.329794 2026] [:error] [pid 20574:tid 20592] [client 20.121.25.154:3286] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "acAl6tdMXEnEZrwyzJkCtwAAAAM"]
[Mon Mar 23 01:24:58.776069 2026] [:error] [pid 27776:tid 27852] [client 20.121.25.154:4011] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "acAl6o3Eaq7IZ5L-4XVE3gAAAQY"]
[Mon Mar 23 01:24:59.436532 2026] [:error] [pid 27776:tid 27858] [client 20.121.25.154:3926] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/.well-known/log.php"] [unique_id "acAl643Eaq7IZ5L-4XVE4QAAAQs"]
[Mon Mar 23 01:25:00.029045 2026] [:error] [pid 27776:tid 27865] [client 20.121.25.154:4064] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/.well-known/log.php"] [unique_id "acAl7I3Eaq7IZ5L-4XVE4wAAARI"]
[Mon Mar 23 01:25:00.460115 2026] [:error] [pid 27776:tid 27849] [client 20.121.25.154:3240] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/.well-known/log.php"] [unique_id "acAl7I3Eaq7IZ5L-4XVE5AAAAQM"]
[Mon Mar 23 01:25:00.884525 2026] [:error] [pid 27776:tid 27863] [client 20.121.25.154:4056] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/.well-known/log.php"] [unique_id "acAl7I3Eaq7IZ5L-4XVE5gAAARA"]
[Mon Mar 23 01:25:01.448491 2026] [:error] [pid 20856:tid 20923] [client 20.121.25.154:3968] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/class.php"] [unique_id "acAl7cxFtXFVNE-X2-KQzQAAAMQ"]
[Mon Mar 23 01:25:01.889023 2026] [:error] [pid 27776:tid 27861] [client 20.121.25.154:4035] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/class.php"] [unique_id "acAl7Y3Eaq7IZ5L-4XVE6QAAAQ4"]
[Mon Mar 23 01:25:02.349268 2026] [:error] [pid 27776:tid 27859] [client 20.121.25.154:4041] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/class.php"] [unique_id "acAl7o3Eaq7IZ5L-4XVE7gAAAQw"]
[Mon Mar 23 01:25:02.909949 2026] [:error] [pid 27776:tid 27847] [client 20.121.25.154:3969] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/class.php"] [unique_id "acAl7o3Eaq7IZ5L-4XVE8QAAAQE"]
[Mon Mar 23 01:25:03.340913 2026] [:error] [pid 20587:tid 20665] [client 20.121.25.154:3991] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bless5.php"] [unique_id "acAl74Byf8r3QAk4VXPplwAAAJY"]
[Mon Mar 23 01:25:03.759436 2026] [:error] [pid 20574:tid 20606] [client 20.121.25.154:3992] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bless5.php"] [unique_id "acAl79dMXEnEZrwyzJkCwQAAABE"]
[Mon Mar 23 01:25:04.307312 2026] [:error] [pid 20574:tid 20590] [client 20.121.25.154:3981] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bless5.php"] [unique_id "acAl8NdMXEnEZrwyzJkCxAAAAAE"]
[Mon Mar 23 01:25:04.738272 2026] [:error] [pid 20574:tid 20609] [client 20.121.25.154:4093] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bless5.php"] [unique_id "acAl8NdMXEnEZrwyzJkCxwAAABQ"]
[Mon Mar 23 01:25:05.235191 2026] [:error] [pid 20856:tid 20926] [client 20.121.25.154:3972] [client 20.121.25.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "acAl8cxFtXFVNE-X2-KQ1QAAAMc"]
[Mon Mar 23 01:25:05.801498 2026] [:error] [pid 20584:tid 20639] [client 20.121.25.154:3948] [client 20.121.25.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/block-patterns/index.php"] [unique_id "acAl8SWzr-bD_t6AP_TG8wAAAFc"]
[Mon Mar 23 01:25:06.219836 2026] [:error] [pid 20584:tid 20628] [client 20.121.25.154:3977] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/lock360.php"] [unique_id "acAl8iWzr-bD_t6AP_TG9QAAAEw"]
[Mon Mar 23 01:25:06.746103 2026] [:error] [pid 27776:tid 27868] [client 20.121.25.154:4051] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/lock360.php"] [unique_id "acAl8o3Eaq7IZ5L-4XVFAAAAARU"]
[Mon Mar 23 01:25:07.187096 2026] [:error] [pid 27776:tid 27853] [client 20.121.25.154:4008] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/lock360.php"] [unique_id "acAl843Eaq7IZ5L-4XVFBQAAAQc"]
[Mon Mar 23 01:25:07.757491 2026] [:error] [pid 20856:tid 20925] [client 20.121.25.154:4021] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/lock360.php"] [unique_id "acAl88xFtXFVNE-X2-KQ1wAAAMY"]
[Mon Mar 23 01:25:08.269649 2026] [:error] [pid 27776:tid 27854] [client 20.121.25.154:3250] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/f35.php"] [unique_id "acAl9I3Eaq7IZ5L-4XVFBwAAAQg"]
[Mon Mar 23 01:25:08.730481 2026] [:error] [pid 27776:tid 27847] [client 20.121.25.154:3975] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/f35.php"] [unique_id "acAl9I3Eaq7IZ5L-4XVFCAAAAQE"]
[Mon Mar 23 01:25:09.217756 2026] [:error] [pid 27776:tid 27861] [client 20.121.25.154:3245] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/f35.php"] [unique_id "acAl9Y3Eaq7IZ5L-4XVFCgAAAQ4"]
[Mon Mar 23 01:25:09.749069 2026] [:error] [pid 20584:tid 20638] [client 20.121.25.154:4000] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/f35.php"] [unique_id "acAl9SWzr-bD_t6AP_TG-QAAAFY"]
[Mon Mar 23 01:25:10.224169 2026] [:error] [pid 27776:tid 27861] [client 20.121.25.154:4060] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ioxi-o1.php"] [unique_id "acAl9o3Eaq7IZ5L-4XVFFQAAAQ4"]
[Mon Mar 23 01:25:10.747465 2026] [:error] [pid 27776:tid 27858] [client 20.121.25.154:3904] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ioxi-o1.php"] [unique_id "acAl9o3Eaq7IZ5L-4XVFGwAAAQs"]
[Mon Mar 23 01:25:11.160171 2026] [:error] [pid 27776:tid 27868] [client 20.121.25.154:4084] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ioxi-o1.php"] [unique_id "acAl943Eaq7IZ5L-4XVFHAAAARU"]
[Mon Mar 23 01:25:11.737091 2026] [:error] [pid 20584:tid 20635] [client 20.121.25.154:4003] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ioxi-o1.php"] [unique_id "acAl9yWzr-bD_t6AP_THAQAAAFM"]
[Mon Mar 23 01:25:12.587448 2026] [:error] [pid 20587:tid 20659] [client 20.121.25.154:4082] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/juuuu.php"] [unique_id "acAl-IByf8r3QAk4VXPpmAAAAJA"]
[Mon Mar 23 01:25:13.050604 2026] [:error] [pid 27776:tid 27850] [client 20.121.25.154:3224] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/juuuu.php"] [unique_id "acAl-Y3Eaq7IZ5L-4XVFIAAAAQQ"]
[Mon Mar 23 01:25:13.574711 2026] [:error] [pid 20587:tid 20667] [client 20.121.25.154:4071] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/juuuu.php"] [unique_id "acAl-YByf8r3QAk4VXPpmwAAAJg"]
[Mon Mar 23 01:25:14.062775 2026] [:error] [pid 27776:tid 27867] [client 20.121.25.154:3216] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/juuuu.php"] [unique_id "acAl-o3Eaq7IZ5L-4XVFJAAAARQ"]
[Mon Mar 23 01:25:14.537125 2026] [:error] [pid 27776:tid 27866] [client 20.121.25.154:3922] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ha.php"] [unique_id "acAl-o3Eaq7IZ5L-4XVFJgAAARM"]
[Mon Mar 23 01:25:15.134833 2026] [:error] [pid 27776:tid 27851] [client 20.121.25.154:4050] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ha.php"] [unique_id "acAl-43Eaq7IZ5L-4XVFKgAAAQU"]
[Mon Mar 23 01:25:15.582991 2026] [:error] [pid 20587:tid 20653] [client 20.121.25.154:3999] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ha.php"] [unique_id "acAl-4Byf8r3QAk4VXPpnwAAAIo"]
[Mon Mar 23 01:25:16.031474 2026] [:error] [pid 20574:tid 20607] [client 20.121.25.154:4031] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ha.php"] [unique_id "acAl_NdMXEnEZrwyzJkCzwAAABI"]
[Mon Mar 23 01:25:16.495698 2026] [:error] [pid 20856:tid 20924] [client 20.121.25.154:3963] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/gg.php"] [unique_id "acAl_MxFtXFVNE-X2-KQ3wAAAMU"]
[Mon Mar 23 01:25:16.926858 2026] [:error] [pid 20574:tid 20594] [client 20.121.25.154:4036] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/gg.php"] [unique_id "acAl_NdMXEnEZrwyzJkC0gAAAAU"]
[Mon Mar 23 01:25:17.526161 2026] [:error] [pid 20584:tid 20624] [client 20.121.25.154:3229] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/gg.php"] [unique_id "acAl_SWzr-bD_t6AP_THBgAAAEg"]
[Mon Mar 23 01:25:18.073032 2026] [:error] [pid 20574:tid 20593] [client 20.121.25.154:3978] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/gg.php"] [unique_id "acAl_tdMXEnEZrwyzJkC2AAAAAQ"]
[Mon Mar 23 01:25:21.555657 2026] [:error] [pid 20587:tid 20666] [client 20.121.25.154:4091] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/we2.php"] [unique_id "acAmAYByf8r3QAk4VXPpqAAAAJc"]
[Mon Mar 23 01:25:22.968349 2026] [:error] [pid 27776:tid 27864] [client 20.121.25.154:3989] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/we2.php"] [unique_id "acAmAo3Eaq7IZ5L-4XVFOAAAARE"]
[Mon Mar 23 01:25:23.412344 2026] [:error] [pid 27776:tid 27859] [client 20.121.25.154:4068] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/we2.php"] [unique_id "acAmA43Eaq7IZ5L-4XVFOgAAAQw"]
[Mon Mar 23 01:25:23.881173 2026] [:error] [pid 20584:tid 20625] [client 20.121.25.154:3929] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/we2.php"] [unique_id "acAmAyWzr-bD_t6AP_THCwAAAEk"]
[Mon Mar 23 01:25:24.423923 2026] [:error] [pid 20584:tid 20630] [client 20.121.25.154:3996] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/04.php"] [unique_id "acAmBCWzr-bD_t6AP_THDAAAAE4"]
[Mon Mar 23 01:25:24.863797 2026] [:error] [pid 20584:tid 20621] [client 20.121.25.154:3249] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/04.php"] [unique_id "acAmBCWzr-bD_t6AP_THDgAAAEU"]
[Mon Mar 23 01:25:25.291442 2026] [:error] [pid 20584:tid 20628] [client 20.121.25.154:4049] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/04.php"] [unique_id "acAmBSWzr-bD_t6AP_THEQAAAEw"]
[Mon Mar 23 01:25:25.730590 2026] [:error] [pid 27776:tid 27851] [client 20.121.25.154:3960] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/04.php"] [unique_id "acAmBY3Eaq7IZ5L-4XVFPgAAAQU"]
[Mon Mar 23 01:25:26.149796 2026] [:error] [pid 27776:tid 27871] [client 20.121.25.154:3915] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/333.php"] [unique_id "acAmBo3Eaq7IZ5L-4XVFPwAAARc"]
[Mon Mar 23 01:25:26.636543 2026] [:error] [pid 27776:tid 27849] [client 20.121.25.154:4019] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/333.php"] [unique_id "acAmBo3Eaq7IZ5L-4XVFQQAAAQM"]
[Mon Mar 23 01:25:27.085204 2026] [:error] [pid 20584:tid 20631] [client 20.121.25.154:3939] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/333.php"] [unique_id "acAmByWzr-bD_t6AP_THFAAAAE8"]
[Mon Mar 23 01:25:27.565487 2026] [:error] [pid 27776:tid 27865] [client 20.121.25.154:3852] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/333.php"] [unique_id "acAmB43Eaq7IZ5L-4XVFRgAAARI"]
[Mon Mar 23 01:25:28.466189 2026] [:error] [pid 20574:tid 20608] [client 20.121.25.154:3983] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/520.php"] [unique_id "acAmCNdMXEnEZrwyzJkC7QAAABM"]
[Mon Mar 23 01:25:29.172200 2026] [:error] [pid 27776:tid 27854] [client 20.121.25.154:3225] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/520.php"] [unique_id "acAmCY3Eaq7IZ5L-4XVFSQAAAQg"]
[Mon Mar 23 01:25:29.967847 2026] [:error] [pid 27776:tid 27861] [client 20.121.25.154:4027] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/520.php"] [unique_id "acAmCY3Eaq7IZ5L-4XVFTQAAAQ4"]
[Mon Mar 23 01:25:30.587019 2026] [:error] [pid 20574:tid 20607] [client 20.121.25.154:4063] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/520.php"] [unique_id "acAmCtdMXEnEZrwyzJkC7gAAABI"]
[Mon Mar 23 01:25:31.053813 2026] [:error] [pid 27776:tid 27868] [client 20.121.25.154:3954] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ar.php"] [unique_id "acAmC43Eaq7IZ5L-4XVFUQAAARU"]
[Mon Mar 23 01:25:31.583528 2026] [:error] [pid 20584:tid 20632] [client 20.121.25.154:3970] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ar.php"] [unique_id "acAmCyWzr-bD_t6AP_THFwAAAFA"]
[Mon Mar 23 01:25:32.171483 2026] [:error] [pid 27776:tid 27860] [client 20.121.25.154:3940] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ar.php"] [unique_id "acAmDI3Eaq7IZ5L-4XVFUwAAAQ0"]
[Mon Mar 23 01:25:32.674699 2026] [:error] [pid 27776:tid 27862] [client 20.121.25.154:3918] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ar.php"] [unique_id "acAmDI3Eaq7IZ5L-4XVFVwAAAQ8"]
[Mon Mar 23 01:25:33.140711 2026] [:error] [pid 20584:tid 20635] [client 20.121.25.154:4026] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/x.php"] [unique_id "acAmDSWzr-bD_t6AP_THGAAAAFM"]
[Mon Mar 23 01:25:33.581345 2026] [:error] [pid 20584:tid 20630] [client 20.121.25.154:4020] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/x.php"] [unique_id "acAmDSWzr-bD_t6AP_THGQAAAE4"]
[Mon Mar 23 01:25:34.093972 2026] [:error] [pid 27776:tid 27871] [client 20.121.25.154:4010] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/x.php"] [unique_id "acAmDo3Eaq7IZ5L-4XVFWgAAARc"]
[Mon Mar 23 01:25:34.687613 2026] [:error] [pid 20856:tid 20926] [client 20.121.25.154:3905] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/x.php"] [unique_id "acAmDsxFtXFVNE-X2-KQ6wAAAMc"]
[Mon Mar 23 01:25:35.181091 2026] [:error] [pid 27776:tid 27852] [client 20.121.25.154:3258] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xx.php"] [unique_id "acAmD43Eaq7IZ5L-4XVFXAAAAQY"]
[Mon Mar 23 01:25:35.856747 2026] [:error] [pid 27776:tid 27864] [client 20.121.25.154:3966] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xx.php"] [unique_id "acAmD43Eaq7IZ5L-4XVFYAAAARE"]
[Mon Mar 23 01:25:36.286665 2026] [:error] [pid 27776:tid 27855] [client 20.121.25.154:4004] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xx.php"] [unique_id "acAmEI3Eaq7IZ5L-4XVFYgAAAQk"]
[Mon Mar 23 01:25:36.734841 2026] [:error] [pid 20856:tid 20936] [client 20.121.25.154:3971] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xx.php"] [unique_id "acAmEMxFtXFVNE-X2-KQ7QAAANE"]
[Mon Mar 23 01:25:37.206932 2026] [:error] [pid 27776:tid 27850] [client 20.121.25.154:3938] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/gifclass4.php"] [unique_id "acAmEY3Eaq7IZ5L-4XVFZgAAAQQ"]
[Mon Mar 23 01:25:37.676102 2026] [:error] [pid 20856:tid 20932] [client 20.121.25.154:3913] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/gifclass4.php"] [unique_id "acAmEcxFtXFVNE-X2-KQ7gAAAM0"]
[Mon Mar 23 01:25:38.094697 2026] [:error] [pid 20856:tid 20943] [client 20.121.25.154:3942] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/gifclass4.php"] [unique_id "acAmEsxFtXFVNE-X2-KQ8gAAANg"]
[Mon Mar 23 01:25:38.576897 2026] [:error] [pid 20574:tid 20596] [client 20.121.25.154:3842] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/gifclass4.php"] [unique_id "acAmEtdMXEnEZrwyzJkC9QAAAAc"]
[Mon Mar 23 01:25:38.992228 2026] [:error] [pid 20587:tid 20656] [client 20.121.25.154:4078] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/2clas.php"] [unique_id "acAmEoByf8r3QAk4VXPprwAAAI0"]
[Mon Mar 23 01:25:39.481917 2026] [:error] [pid 27776:tid 27865] [client 20.121.25.154:3945] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/2clas.php"] [unique_id "acAmE43Eaq7IZ5L-4XVFaAAAARI"]
[Mon Mar 23 01:25:39.913982 2026] [:error] [pid 27776:tid 27854] [client 20.121.25.154:4085] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/2clas.php"] [unique_id "acAmE43Eaq7IZ5L-4XVFbAAAAQg"]
[Mon Mar 23 01:25:40.342074 2026] [:error] [pid 20574:tid 20595] [client 20.121.25.154:3959] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/2clas.php"] [unique_id "acAmFNdMXEnEZrwyzJkC9wAAAAY"]
[Mon Mar 23 01:25:40.800504 2026] [:error] [pid 20856:tid 20929] [client 20.121.25.154:3935] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ave.php"] [unique_id "acAmFMxFtXFVNE-X2-KQ8wAAAMo"]
[Mon Mar 23 01:25:41.249069 2026] [:error] [pid 20856:tid 20930] [client 20.121.25.154:3906] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ave.php"] [unique_id "acAmFcxFtXFVNE-X2-KQ9QAAAMs"]
[Mon Mar 23 01:25:41.707437 2026] [:error] [pid 20584:tid 20616] [client 20.121.25.154:3982] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ave.php"] [unique_id "acAmFSWzr-bD_t6AP_THHgAAAEA"]
[Mon Mar 23 01:25:42.137159 2026] [:error] [pid 20574:tid 20590] [client 20.121.25.154:3916] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ave.php"] [unique_id "acAmFtdMXEnEZrwyzJkC-wAAAAE"]
[Mon Mar 23 01:25:42.634324 2026] [:error] [pid 20584:tid 20627] [client 20.121.25.154:3994] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wrt.php"] [unique_id "acAmFiWzr-bD_t6AP_THIAAAAEs"]
[Mon Mar 23 01:25:43.088320 2026] [:error] [pid 20584:tid 20623] [client 20.121.25.154:4074] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wrt.php"] [unique_id "acAmFyWzr-bD_t6AP_THIgAAAEc"]
[Mon Mar 23 01:25:43.603242 2026] [:error] [pid 27776:tid 27870] [client 20.121.25.154:3919] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wrt.php"] [unique_id "acAmF43Eaq7IZ5L-4XVFcgAAARY"]
[Mon Mar 23 01:25:44.034311 2026] [:error] [pid 20856:tid 20934] [client 20.121.25.154:3961] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wrt.php"] [unique_id "acAmGMxFtXFVNE-X2-KQ-gAAAM8"]
[Mon Mar 23 01:25:44.504857 2026] [:error] [pid 20587:tid 20664] [client 20.121.25.154:3881] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bibil.php"] [unique_id "acAmGIByf8r3QAk4VXPpsAAAAJU"]
[Mon Mar 23 01:25:44.947863 2026] [:error] [pid 27776:tid 27854] [client 20.121.25.154:3921] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bibil.php"] [unique_id "acAmGI3Eaq7IZ5L-4XVFeAAAAQg"]
[Mon Mar 23 01:25:45.459352 2026] [:error] [pid 20856:tid 20936] [client 20.121.25.154:4029] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bibil.php"] [unique_id "acAmGcxFtXFVNE-X2-KQ_QAAANE"]
[Mon Mar 23 01:25:45.954179 2026] [:error] [pid 27776:tid 27868] [client 20.121.25.154:3932] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bibil.php"] [unique_id "acAmGY3Eaq7IZ5L-4XVFfQAAARU"]
[Mon Mar 23 01:25:46.572806 2026] [:error] [pid 27776:tid 27864] [client 20.121.25.154:3841] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/radio.php"] [unique_id "acAmGo3Eaq7IZ5L-4XVFgAAAARE"]
[Mon Mar 23 01:25:47.041740 2026] [:error] [pid 27776:tid 27859] [client 20.121.25.154:3998] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/radio.php"] [unique_id "acAmG43Eaq7IZ5L-4XVFgwAAAQw"]
[Mon Mar 23 01:25:47.478400 2026] [:error] [pid 27776:tid 27850] [client 20.121.25.154:3957] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/radio.php"] [unique_id "acAmG43Eaq7IZ5L-4XVFhgAAAQQ"]
[Mon Mar 23 01:25:47.903556 2026] [:error] [pid 27776:tid 27857] [client 20.121.25.154:3927] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/radio.php"] [unique_id "acAmG43Eaq7IZ5L-4XVFiAAAAQo"]
[Mon Mar 23 01:25:48.344009 2026] [:error] [pid 20856:tid 20943] [client 20.121.25.154:3861] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/files.php"] [unique_id "acAmHMxFtXFVNE-X2-KRAQAAANg"]
[Mon Mar 23 01:25:48.779095 2026] [:error] [pid 20856:tid 20933] [client 20.121.25.154:3920] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/files.php"] [unique_id "acAmHMxFtXFVNE-X2-KRBQAAAM4"]
[Mon Mar 23 01:25:49.249893 2026] [:error] [pid 20584:tid 20626] [client 20.121.25.154:4058] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/files.php"] [unique_id "acAmHSWzr-bD_t6AP_THJAAAAEo"]
[Mon Mar 23 01:25:49.724116 2026] [:error] [pid 20584:tid 20635] [client 20.121.25.154:3943] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/files.php"] [unique_id "acAmHSWzr-bD_t6AP_THJQAAAFM"]
[Mon Mar 23 01:25:50.193945 2026] [:error] [pid 27776:tid 27862] [client 20.121.25.154:3310] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/file7.php"] [unique_id "acAmHo3Eaq7IZ5L-4XVFkAAAAQ8"]
[Mon Mar 23 01:25:50.646927 2026] [:error] [pid 27776:tid 27857] [client 20.121.25.154:3986] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/file7.php"] [unique_id "acAmHo3Eaq7IZ5L-4XVFkgAAAQo"]
[Mon Mar 23 01:25:51.097024 2026] [proxy_fcgi:error] [pid 27776:tid 27855] [client 20.121.25.154:3934] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 01:25:51.305951 2026] [proxy_fcgi:error] [pid 27776:tid 27851] [client 20.121.25.154:3934] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 01:25:51.744096 2026] [proxy_fcgi:error] [pid 27776:tid 27870] [client 20.121.25.154:3934] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 01:25:51.983040 2026] [proxy_fcgi:error] [pid 27776:tid 27847] [client 20.121.25.154:3934] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 01:25:52.193659 2026] [proxy_fcgi:error] [pid 27776:tid 27868] [client 20.121.25.154:3934] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 01:25:52.402835 2026] [proxy_fcgi:error] [pid 27776:tid 27857] [client 20.121.25.154:3934] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 01:25:52.639542 2026] [proxy_fcgi:error] [pid 27776:tid 27853] [client 20.121.25.154:3934] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 01:25:52.984342 2026] [proxy_fcgi:error] [pid 27776:tid 27866] [client 20.121.25.154:3934] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 01:25:53.193622 2026] [proxy_fcgi:error] [pid 27776:tid 27871] [client 20.121.25.154:3934] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 01:25:53.431770 2026] [proxy_fcgi:error] [pid 27776:tid 27858] [client 20.121.25.154:3934] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 01:25:53.647696 2026] [:error] [pid 27776:tid 27863] [client 20.121.25.154:3934] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/403.php"] [unique_id "acAmIY3Eaq7IZ5L-4XVFpAAAARA"]
[Mon Mar 23 01:25:54.197970 2026] [:error] [pid 20587:tid 20663] [client 20.121.25.154:3909] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/403.php"] [unique_id "acAmIoByf8r3QAk4VXPpuAAAAJQ"]
[Mon Mar 23 01:25:54.663565 2026] [:error] [pid 20856:tid 20942] [client 20.121.25.154:3928] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/403.php"] [unique_id "acAmIsxFtXFVNE-X2-KRDQAAANc"]
[Mon Mar 23 01:25:55.121510 2026] [:error] [pid 27776:tid 27865] [client 20.121.25.154:3914] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/403.php"] [unique_id "acAmI43Eaq7IZ5L-4XVFpQAAARI"]
[Mon Mar 23 01:25:55.551161 2026] [:error] [pid 20584:tid 20620] [client 20.121.25.154:4080] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/file9.php"] [unique_id "acAmIyWzr-bD_t6AP_THLgAAAEQ"]
[Mon Mar 23 01:25:56.195066 2026] [:error] [pid 27776:tid 27862] [client 20.121.25.154:4014] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/file9.php"] [unique_id "acAmJI3Eaq7IZ5L-4XVFqgAAAQ8"]
[Mon Mar 23 01:25:56.625990 2026] [:error] [pid 27776:tid 27850] [client 20.121.25.154:3949] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/file9.php"] [unique_id "acAmJI3Eaq7IZ5L-4XVFrAAAAQQ"]
[Mon Mar 23 01:25:57.147616 2026] [:error] [pid 20574:tid 20613] [client 20.121.25.154:3849] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/file9.php"] [unique_id "acAmJddMXEnEZrwyzJkC_gAAABg"]
[Mon Mar 23 01:25:57.603085 2026] [:error] [pid 20856:tid 20943] [client 20.121.25.154:4009] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ac.php"] [unique_id "acAmJcxFtXFVNE-X2-KREwAAANg"]
[Mon Mar 23 01:25:58.027172 2026] [:error] [pid 20574:tid 20594] [client 20.121.25.154:4033] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ac.php"] [unique_id "acAmJtdMXEnEZrwyzJkC_wAAAAU"]
[Mon Mar 23 01:25:58.441950 2026] [:error] [pid 27776:tid 27860] [client 20.121.25.154:4005] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ac.php"] [unique_id "acAmJo3Eaq7IZ5L-4XVFsQAAAQ0"]
[Mon Mar 23 01:25:59.013855 2026] [:error] [pid 20856:tid 20937] [client 20.121.25.154:3780] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ac.php"] [unique_id "acAmJ8xFtXFVNE-X2-KRGgAAANI"]
[Mon Mar 23 01:25:59.453947 2026] [:error] [pid 27776:tid 27852] [client 20.121.25.154:3882] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/new4.php"] [unique_id "acAmJ43Eaq7IZ5L-4XVFswAAAQY"]
[Mon Mar 23 01:25:59.989443 2026] [:error] [pid 20856:tid 20940] [client 20.121.25.154:3955] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/new4.php"] [unique_id "acAmJ8xFtXFVNE-X2-KRHgAAANU"]
[Mon Mar 23 01:26:00.496189 2026] [:error] [pid 27776:tid 27865] [client 20.121.25.154:3846] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/new4.php"] [unique_id "acAmKI3Eaq7IZ5L-4XVFugAAARI"]
[Mon Mar 23 01:26:01.056757 2026] [:error] [pid 20856:tid 20934] [client 20.121.25.154:3931] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/new4.php"] [unique_id "acAmKcxFtXFVNE-X2-KRIAAAAM8"]
[Mon Mar 23 01:26:01.576626 2026] [:error] [pid 27776:tid 27858] [client 20.121.25.154:3925] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/pop.php"] [unique_id "acAmKY3Eaq7IZ5L-4XVFvQAAAQs"]
[Mon Mar 23 01:26:02.083137 2026] [:error] [pid 20856:tid 20943] [client 20.121.25.154:3845] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/pop.php"] [unique_id "acAmKsxFtXFVNE-X2-KRJAAAANg"]
[Mon Mar 23 01:26:02.523524 2026] [:error] [pid 27776:tid 27852] [client 20.121.25.154:3967] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/pop.php"] [unique_id "acAmKo3Eaq7IZ5L-4XVFwAAAAQY"]
[Mon Mar 23 01:26:02.934929 2026] [:error] [pid 20574:tid 20604] [client 20.121.25.154:4022] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/pop.php"] [unique_id "acAmKtdMXEnEZrwyzJkDBQAAAA8"]
[Mon Mar 23 01:26:03.360331 2026] [:error] [pid 20856:tid 20929] [client 20.121.25.154:3944] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/az.php"] [unique_id "acAmK8xFtXFVNE-X2-KRKQAAAMo"]
[Mon Mar 23 01:26:03.776727 2026] [:error] [pid 27776:tid 27870] [client 20.121.25.154:3962] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/az.php"] [unique_id "acAmK43Eaq7IZ5L-4XVFxAAAARY"]
[Mon Mar 23 01:26:04.237423 2026] [:error] [pid 20856:tid 20942] [client 20.121.25.154:3924] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/az.php"] [unique_id "acAmLMxFtXFVNE-X2-KRLAAAANc"]
[Mon Mar 23 01:26:04.656722 2026] [:error] [pid 20574:tid 20589] [client 20.121.25.154:3953] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/az.php"] [unique_id "acAmLNdMXEnEZrwyzJkDCAAAAAA"]
[Mon Mar 23 01:26:05.117606 2026] [:error] [pid 20574:tid 20591] [client 20.121.25.154:3946] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xaz.php"] [unique_id "acAmLddMXEnEZrwyzJkDCwAAAAI"]
[Mon Mar 23 01:26:05.536642 2026] [:error] [pid 27776:tid 27853] [client 20.121.25.154:4012] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xaz.php"] [unique_id "acAmLY3Eaq7IZ5L-4XVFyAAAAQc"]
[Mon Mar 23 01:26:05.970218 2026] [:error] [pid 27776:tid 27866] [client 20.121.25.154:3923] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xaz.php"] [unique_id "acAmLY3Eaq7IZ5L-4XVFyQAAARM"]
[Mon Mar 23 01:26:06.505733 2026] [:error] [pid 27776:tid 27872] [client 20.121.25.154:3903] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xaz.php"] [unique_id "acAmLo3Eaq7IZ5L-4XVFzAAAARg"]
[Mon Mar 23 01:26:06.931090 2026] [:error] [pid 20856:tid 20926] [client 20.121.25.154:3937] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/up4.php"] [unique_id "acAmLsxFtXFVNE-X2-KRNgAAAMc"]
[Mon Mar 23 01:26:07.501441 2026] [:error] [pid 20856:tid 20935] [client 20.121.25.154:4086] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/up4.php"] [unique_id "acAmL8xFtXFVNE-X2-KROAAAANA"]
[Mon Mar 23 01:26:07.921973 2026] [:error] [pid 20584:tid 20640] [client 20.121.25.154:3781] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/up4.php"] [unique_id "acAmLyWzr-bD_t6AP_THNAAAAFg"]
[Mon Mar 23 01:26:08.425921 2026] [:error] [pid 20574:tid 20596] [client 20.121.25.154:3807] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/up4.php"] [unique_id "acAmMNdMXEnEZrwyzJkDDwAAAAc"]
[Mon Mar 23 01:26:08.919550 2026] [:error] [pid 20856:tid 20922] [client 20.121.25.154:3933] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/1aa.php"] [unique_id "acAmMMxFtXFVNE-X2-KRPgAAAMM"]
[Mon Mar 23 01:26:09.340080 2026] [:error] [pid 27776:tid 27855] [client 20.121.25.154:3885] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/1aa.php"] [unique_id "acAmMY3Eaq7IZ5L-4XVF0AAAAQk"]
[Mon Mar 23 01:26:09.789898 2026] [:error] [pid 20856:tid 20933] [client 20.121.25.154:3859] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/1aa.php"] [unique_id "acAmMcxFtXFVNE-X2-KRRQAAAM4"]
[Mon Mar 23 01:26:10.212331 2026] [:error] [pid 27776:tid 27857] [client 20.121.25.154:3958] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/1aa.php"] [unique_id "acAmMo3Eaq7IZ5L-4XVF1gAAAQo"]
[Mon Mar 23 01:26:10.751424 2026] [:error] [pid 27776:tid 27863] [client 20.121.25.154:3980] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/elp.php"] [unique_id "acAmMo3Eaq7IZ5L-4XVF2QAAARA"]
[Mon Mar 23 01:26:11.295761 2026] [:error] [pid 20856:tid 20923] [client 20.121.25.154:3964] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/elp.php"] [unique_id "acAmM8xFtXFVNE-X2-KRSgAAAMQ"]
[Mon Mar 23 01:26:11.828326 2026] [:error] [pid 20856:tid 20930] [client 20.121.25.154:3844] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/elp.php"] [unique_id "acAmM8xFtXFVNE-X2-KRTQAAAMs"]
[Mon Mar 23 01:26:12.270836 2026] [:error] [pid 27776:tid 27872] [client 20.121.25.154:3848] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/elp.php"] [unique_id "acAmNI3Eaq7IZ5L-4XVF2gAAARg"]
[Mon Mar 23 01:26:12.699485 2026] [:error] [pid 20574:tid 20606] [client 20.121.25.154:4017] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wtz.php"] [unique_id "acAmNNdMXEnEZrwyzJkDEgAAABE"]
[Mon Mar 23 01:26:13.342587 2026] [:error] [pid 20587:tid 20646] [client 20.121.25.154:3886] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wtz.php"] [unique_id "acAmNYByf8r3QAk4VXPpwwAAAIM"]
[Mon Mar 23 01:26:13.779696 2026] [:error] [pid 20856:tid 20929] [client 20.121.25.154:3880] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wtz.php"] [unique_id "acAmNcxFtXFVNE-X2-KRUwAAAMo"]
[Mon Mar 23 01:26:14.208029 2026] [:error] [pid 20574:tid 20608] [client 20.121.25.154:4023] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wtz.php"] [unique_id "acAmNtdMXEnEZrwyzJkDFwAAABM"]
[Mon Mar 23 01:26:14.658492 2026] [:error] [pid 27776:tid 27855] [client 20.121.25.154:4062] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/galex.php"] [unique_id "acAmNo3Eaq7IZ5L-4XVF3wAAAQk"]
[Mon Mar 23 01:26:15.269818 2026] [:error] [pid 20587:tid 20653] [client 20.121.25.154:3951] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/galex.php"] [unique_id "acAmN4Byf8r3QAk4VXPpxQAAAIo"]
[Mon Mar 23 01:26:15.770858 2026] [:error] [pid 20574:tid 20592] [client 20.121.25.154:3860] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/galex.php"] [unique_id "acAmN9dMXEnEZrwyzJkDGwAAAAM"]
[Mon Mar 23 01:26:16.302382 2026] [:error] [pid 20574:tid 20594] [client 20.121.25.154:4024] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/galex.php"] [unique_id "acAmONdMXEnEZrwyzJkDHgAAAAU"]
[Mon Mar 23 01:26:16.740985 2026] [:error] [pid 20856:tid 20923] [client 20.121.25.154:3876] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xb.php"] [unique_id "acAmOMxFtXFVNE-X2-KRVAAAAMQ"]
[Mon Mar 23 01:26:17.178741 2026] [:error] [pid 20574:tid 20604] [client 20.121.25.154:3873] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xb.php"] [unique_id "acAmOddMXEnEZrwyzJkDIQAAAA8"]
[Mon Mar 23 01:26:17.602111 2026] [:error] [pid 20584:tid 20634] [client 20.121.25.154:3917] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xb.php"] [unique_id "acAmOSWzr-bD_t6AP_THOAAAAFI"]
[Mon Mar 23 01:26:18.025734 2026] [:error] [pid 27776:tid 27866] [client 20.121.25.154:3862] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xb.php"] [unique_id "acAmOo3Eaq7IZ5L-4XVF5gAAARM"]
[Mon Mar 23 01:26:18.519172 2026] [:error] [pid 20856:tid 20922] [client 20.121.25.154:3902] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ova.php"] [unique_id "acAmOsxFtXFVNE-X2-KRWgAAAMM"]
[Mon Mar 23 01:26:18.945827 2026] [:error] [pid 27776:tid 27860] [client 20.121.25.154:4025] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ova.php"] [unique_id "acAmOo3Eaq7IZ5L-4XVF6QAAAQ0"]
[Mon Mar 23 01:26:19.460151 2026] [:error] [pid 20856:tid 20928] [client 20.121.25.154:3947] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ova.php"] [unique_id "acAmO8xFtXFVNE-X2-KRWwAAAMk"]
[Mon Mar 23 01:26:19.959229 2026] [:error] [pid 20856:tid 20931] [client 20.121.25.154:3856] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ova.php"] [unique_id "acAmO8xFtXFVNE-X2-KRXQAAAMw"]
[Mon Mar 23 01:26:20.481315 2026] [:error] [pid 20587:tid 20651] [client 20.121.25.154:3950] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/vx.php"] [unique_id "acAmPIByf8r3QAk4VXPpygAAAIg"]
[Mon Mar 23 01:26:21.037914 2026] [:error] [pid 20587:tid 20664] [client 20.121.25.154:3840] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/vx.php"] [unique_id "acAmPYByf8r3QAk4VXPpzQAAAJU"]
[Mon Mar 23 01:26:21.462093 2026] [:error] [pid 27776:tid 27848] [client 20.121.25.154:3910] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/vx.php"] [unique_id "acAmPY3Eaq7IZ5L-4XVF7wAAAQI"]
[Mon Mar 23 01:26:21.927293 2026] [:error] [pid 20584:tid 20625] [client 20.121.25.154:3847] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/vx.php"] [unique_id "acAmPSWzr-bD_t6AP_THOgAAAEk"]
[Mon Mar 23 01:26:22.362756 2026] [:error] [pid 20574:tid 20594] [client 20.121.25.154:3846] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/rh.php"] [unique_id "acAmPtdMXEnEZrwyzJkDKQAAAAU"]
[Mon Mar 23 01:26:22.781415 2026] [:error] [pid 20574:tid 20612] [client 20.121.25.154:3833] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/rh.php"] [unique_id "acAmPtdMXEnEZrwyzJkDKwAAABc"]
[Mon Mar 23 01:26:23.291198 2026] [:error] [pid 20856:tid 20925] [client 20.121.25.154:3855] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/rh.php"] [unique_id "acAmP8xFtXFVNE-X2-KRYwAAAMY"]
[Mon Mar 23 01:26:23.709850 2026] [:error] [pid 27776:tid 27863] [client 20.121.25.154:3785] [client 20.121.25.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/rh.php"] [unique_id "acAmP43Eaq7IZ5L-4XVF9AAAARA"]
[Mon Mar 23 04:30:36.339705 2026] [proxy_fcgi:error] [pid 57265:tid 57290] [client 20.163.240.53:33415] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 04:30:36.762159 2026] [:error] [pid 57265:tid 57278] [client 20.163.240.53:33415] [client 20.163.240.53] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.163.240.53, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-content/uploads/wp-login.php"] [unique_id "acBRbGNLjPJJkhuqCsiK9wAAAQs"]
[Mon Mar 23 04:30:36.985288 2026] [proxy_fcgi:error] [pid 57265:tid 57270] [client 20.163.240.53:33415] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 04:30:37.863021 2026] [proxy_fcgi:error] [pid 57265:tid 57271] [client 20.163.240.53:33415] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 04:30:38.518621 2026] [proxy_fcgi:error] [pid 57265:tid 57267] [client 20.163.240.53:33415] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 04:30:38.727134 2026] [:error] [pid 57265:tid 57274] [client 20.163.240.53:33415] [client 20.163.240.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "acBRbmNLjPJJkhuqCsiLAAAAAQc"]
[Mon Mar 23 04:30:39.557863 2026] [:error] [pid 57265:tid 57269] [client 20.163.240.53:33355] [client 20.163.240.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "acBRb2NLjPJJkhuqCsiLAQAAAQI"]
[Mon Mar 23 04:30:40.406441 2026] [:error] [pid 57265:tid 57281] [client 20.163.240.53:33428] [client 20.163.240.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "acBRcGNLjPJJkhuqCsiLAwAAAQ4"]
[Mon Mar 23 04:30:41.288069 2026] [:error] [pid 57265:tid 57285] [client 20.163.240.53:33398] [client 20.163.240.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "acBRcWNLjPJJkhuqCsiLBgAAARI"]
[Mon Mar 23 17:58:46.923534 2026] [proxy_fcgi:error] [pid 14573:tid 14578] [client 20.63.98.227:4220] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 17:58:47.339410 2026] [:error] [pid 14573:tid 14576] [client 20.63.98.227:4220] [client 20.63.98.227] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.63.98.227, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-content/uploads/wp-login.php"] [unique_id "acEO1--oSmHn3q4_J1G4dwAAAUE"]
[Mon Mar 23 17:58:47.552406 2026] [proxy_fcgi:error] [pid 14573:tid 14585] [client 20.63.98.227:4220] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 17:58:48.390422 2026] [proxy_fcgi:error] [pid 14573:tid 14583] [client 20.63.98.227:4220] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 17:58:49.033189 2026] [proxy_fcgi:error] [pid 14573:tid 14579] [client 20.63.98.227:4220] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 17:58:49.239376 2026] [:error] [pid 14573:tid 14597] [client 20.63.98.227:4220] [client 20.63.98.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "acEO2e-oSmHn3q4_J1G4gAAAAVY"]
[Mon Mar 23 17:58:50.065957 2026] [:error] [pid 57265:tid 57268] [client 20.63.98.227:4209] [client 20.63.98.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "acEO2mNLjPJJkhuqCsgp1wAAAQE"]
[Mon Mar 23 17:58:50.911422 2026] [:error] [pid 14573:tid 14586] [client 20.63.98.227:4228] [client 20.63.98.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "acEO2u-oSmHn3q4_J1G4ggAAAUs"]
[Mon Mar 23 17:58:51.741134 2026] [:error] [pid 23539:tid 23562] [client 20.63.98.227:4254] [client 20.63.98.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "acEO237Dh3qWGSpIAZUXvwAAAM4"]
[Mon Mar 23 18:59:16.395492 2026] [proxy_fcgi:error] [pid 57265:tid 57285] [client 20.85.212.10:53530] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 18:59:16.618176 2026] [proxy_fcgi:error] [pid 57265:tid 57274] [client 20.85.212.10:53530] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 18:59:17.052672 2026] [proxy_fcgi:error] [pid 57265:tid 57284] [client 20.85.212.10:53530] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 18:59:17.269311 2026] [proxy_fcgi:error] [pid 57265:tid 57269] [client 20.85.212.10:53530] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 18:59:17.705977 2026] [proxy_fcgi:error] [pid 57265:tid 57287] [client 20.85.212.10:53530] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 18:59:17.924450 2026] [proxy_fcgi:error] [pid 57265:tid 57289] [client 20.85.212.10:53530] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 18:59:18.140871 2026] [proxy_fcgi:error] [pid 57265:tid 57276] [client 20.85.212.10:53530] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 18:59:18.569413 2026] [:error] [pid 57265:tid 57275] [client 20.85.212.10:53530] [client 20.85.212.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/randkeyword.PhP7"] [unique_id "acEdBmNLjPJJkhuqCshTDwAAAQg"]
[Mon Mar 23 18:59:19.424769 2026] [:error] [pid 23439:tid 23458] [client 20.85.212.10:53554] [client 20.85.212.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/randkeyword.PhP7"] [unique_id "acEdB6Zv8XIzUKdgaMeVIgAAAAk"]
[Mon Mar 23 18:59:20.340570 2026] [:error] [pid 23440:tid 23488] [client 20.85.212.10:65301] [client 20.85.212.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/randkeyword.PhP7"] [unique_id "acEdCD49_8n8h_ttcUo4ugAAAEw"]
[Mon Mar 23 18:59:21.210246 2026] [:error] [pid 23441:tid 23525] [client 20.85.212.10:55812] [client 20.85.212.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/randkeyword.PhP7"] [unique_id "acEdCRq7S-oOqSXZEr7i-wAAAJY"]
[Mon Mar 23 21:17:58.029424 2026] [:error] [pid 38306:tid 38325] [client 40.85.246.124:41927] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "acE9hjkL8qwu-hHc6Bid_AAAARE"]
[Mon Mar 23 21:17:58.446011 2026] [:error] [pid 38178:tid 38244] [client 40.85.246.124:41868] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "acE9hg0axWfXsVvR9udBYQAAAII"]
[Mon Mar 23 21:17:58.858478 2026] [:error] [pid 38276:tid 38292] [client 40.85.246.124:41979] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "acE9hpoKGiI-a7oME3L26AAAAM0"]
[Mon Mar 23 21:17:59.271872 2026] [:error] [pid 38177:tid 38216] [client 40.85.246.124:41856] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "acE9h3sYW-_HCI66MunxlgAAAEE"]
[Mon Mar 23 23:14:07.419737 2026] [proxy_fcgi:error] [pid 38176:tid 38196] [client 158.158.96.39:64903] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 23:14:07.694033 2026] [proxy_fcgi:error] [pid 38176:tid 38202] [client 158.158.96.39:64903] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 23:14:07.939443 2026] [proxy_fcgi:error] [pid 38176:tid 38191] [client 158.158.96.39:64903] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 23:14:08.184541 2026] [proxy_fcgi:error] [pid 38176:tid 38193] [client 158.158.96.39:64903] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 23:14:08.448380 2026] [proxy_fcgi:error] [pid 38176:tid 38203] [client 158.158.96.39:64903] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 23:14:08.692179 2026] [proxy_fcgi:error] [pid 38176:tid 38197] [client 158.158.96.39:64903] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 23:14:08.934512 2026] [proxy_fcgi:error] [pid 38176:tid 38194] [client 158.158.96.39:64903] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 23:14:09.186914 2026] [proxy_fcgi:error] [pid 38176:tid 38210] [client 158.158.96.39:64903] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 23:14:09.446391 2026] [proxy_fcgi:error] [pid 38176:tid 38192] [client 158.158.96.39:64903] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 23:14:09.690512 2026] [proxy_fcgi:error] [pid 38176:tid 38187] [client 158.158.96.39:64903] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 23:14:09.929460 2026] [:error] [pid 38176:tid 38190] [client 158.158.96.39:64903] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fyiiz.php"] [unique_id "acFYwUtG4qlh1gvNjuJfBgAAAAM"]
[Mon Mar 23 23:14:10.408666 2026] [:error] [pid 38176:tid 38211] [client 158.158.96.39:64959] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fyiiz.php"] [unique_id "acFYwktG4qlh1gvNjuJfCAAAABg"]
[Mon Mar 23 23:14:10.924677 2026] [:error] [pid 38276:tid 38297] [client 158.158.96.39:64936] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fyiiz.php"] [unique_id "acFYwpoKGiI-a7oME3ITRAAAANI"]
[Mon Mar 23 23:14:11.409563 2026] [:error] [pid 38178:tid 38256] [client 158.158.96.39:64908] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fyiiz.php"] [unique_id "acFYww0axWfXsVvR9udXlwAAAI4"]
[Mon Mar 23 23:14:12.001931 2026] [:error] [pid 38276:tid 38292] [client 158.158.96.39:64293] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xwx1.php"] [unique_id "acFYxJoKGiI-a7oME3ITRwAAAM0"]
[Mon Mar 23 23:14:12.481873 2026] [:error] [pid 52341:tid 52354] [client 158.158.96.39:65022] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xwx1.php"] [unique_id "acFYxKPKTBDR2u47Gb0XSAAAAUs"]
[Mon Mar 23 23:14:13.018533 2026] [:error] [pid 38306:tid 38317] [client 158.158.96.39:64912] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xwx1.php"] [unique_id "acFYxTkL8qwu-hHc6BjMngAAAQk"]
[Mon Mar 23 23:14:13.534452 2026] [:error] [pid 52341:tid 52356] [client 158.158.96.39:64915] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xwx1.php"] [unique_id "acFYxaPKTBDR2u47Gb0XUwAAAU0"]
[Mon Mar 23 23:14:14.225093 2026] [:error] [pid 52341:tid 52366] [client 158.158.96.39:64940] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bywaf.php"] [unique_id "acFYxqPKTBDR2u47Gb0XWQAAAVc"]
[Mon Mar 23 23:14:14.711773 2026] [:error] [pid 38306:tid 38327] [client 158.158.96.39:65000] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bywaf.php"] [unique_id "acFYxjkL8qwu-hHc6BjMoAAAARM"]
[Mon Mar 23 23:14:15.475115 2026] [:error] [pid 38306:tid 38319] [client 158.158.96.39:64937] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bywaf.php"] [unique_id "acFYxzkL8qwu-hHc6BjMpAAAAQs"]
[Mon Mar 23 23:14:16.122332 2026] [:error] [pid 38306:tid 38315] [client 158.158.96.39:64964] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bywaf.php"] [unique_id "acFYyDkL8qwu-hHc6BjMqQAAAQc"]
[Mon Mar 23 23:14:16.651191 2026] [:error] [pid 38306:tid 38326] [client 158.158.96.39:65008] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/Jcrop.php"] [unique_id "acFYyDkL8qwu-hHc6BjMqwAAARI"]
[Mon Mar 23 23:14:17.249962 2026] [:error] [pid 38276:tid 38298] [client 158.158.96.39:64970] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/Jcrop.php"] [unique_id "acFYyZoKGiI-a7oME3ITSgAAANM"]
[Mon Mar 23 23:14:17.757552 2026] [:error] [pid 38306:tid 38321] [client 158.158.96.39:64966] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/Jcrop.php"] [unique_id "acFYyTkL8qwu-hHc6BjMsgAAAQ0"]
[Mon Mar 23 23:14:18.303460 2026] [:error] [pid 38178:tid 38257] [client 158.158.96.39:64998] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/Jcrop.php"] [unique_id "acFYyg0axWfXsVvR9udXpAAAAI8"]
[Mon Mar 23 23:14:18.786050 2026] [:error] [pid 38306:tid 38328] [client 158.158.96.39:64967] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ng.php"] [unique_id "acFYyjkL8qwu-hHc6BjMuQAAARQ"]
[Mon Mar 23 23:14:19.284920 2026] [:error] [pid 38176:tid 38206] [client 158.158.96.39:64992] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ng.php"] [unique_id "acFYy0tG4qlh1gvNjuJfEQAAABM"]
[Mon Mar 23 23:14:19.822739 2026] [:error] [pid 38276:tid 38297] [client 158.158.96.39:65023] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ng.php"] [unique_id "acFYy5oKGiI-a7oME3ITVQAAANI"]
[Mon Mar 23 23:14:20.367299 2026] [:error] [pid 38276:tid 38279] [client 158.158.96.39:65010] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ng.php"] [unique_id "acFYzJoKGiI-a7oME3ITWwAAAMA"]
[Mon Mar 23 23:14:20.868346 2026] [:error] [pid 38176:tid 38208] [client 158.158.96.39:64923] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/erty.php"] [unique_id "acFYzEtG4qlh1gvNjuJfEwAAABU"]
[Mon Mar 23 23:14:21.403757 2026] [:error] [pid 38178:tid 38253] [client 158.158.96.39:64938] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/erty.php"] [unique_id "acFYzQ0axWfXsVvR9udXvQAAAIs"]
[Mon Mar 23 23:14:21.953217 2026] [:error] [pid 38176:tid 38198] [client 158.158.96.39:64918] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/erty.php"] [unique_id "acFYzUtG4qlh1gvNjuJfFgAAAAs"]
[Mon Mar 23 23:14:22.437889 2026] [:error] [pid 38176:tid 38202] [client 158.158.96.39:64362] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/erty.php"] [unique_id "acFYzktG4qlh1gvNjuJfFwAAAA8"]
[Mon Mar 23 23:14:22.923039 2026] [:error] [pid 38306:tid 38330] [client 158.158.96.39:64995] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/0.php"] [unique_id "acFYzjkL8qwu-hHc6BjMwgAAARY"]
[Mon Mar 23 23:14:23.440726 2026] [:error] [pid 38176:tid 38210] [client 158.158.96.39:64339] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/0.php"] [unique_id "acFYz0tG4qlh1gvNjuJfGwAAABc"]
[Mon Mar 23 23:14:23.979408 2026] [:error] [pid 38276:tid 38297] [client 158.158.96.39:64971] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/0.php"] [unique_id "acFYz5oKGiI-a7oME3ITZgAAANI"]
[Mon Mar 23 23:14:24.486345 2026] [:error] [pid 38176:tid 38206] [client 158.158.96.39:64968] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/0.php"] [unique_id "acFY0EtG4qlh1gvNjuJfHQAAABM"]
[Mon Mar 23 23:14:24.976279 2026] [:error] [pid 38306:tid 38311] [client 158.158.96.39:64344] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wgift1.php"] [unique_id "acFY0DkL8qwu-hHc6BjMxAAAAQM"]
[Mon Mar 23 23:14:25.658825 2026] [:error] [pid 38276:tid 38281] [client 158.158.96.39:64897] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wgift1.php"] [unique_id "acFY0ZoKGiI-a7oME3ITZwAAAMI"]
[Mon Mar 23 23:14:26.175496 2026] [:error] [pid 52341:tid 52361] [client 158.158.96.39:65020] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wgift1.php"] [unique_id "acFY0qPKTBDR2u47Gb0XhAAAAVI"]
[Mon Mar 23 23:14:26.689949 2026] [:error] [pid 52341:tid 52344] [client 158.158.96.39:64962] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wgift1.php"] [unique_id "acFY0qPKTBDR2u47Gb0XiwAAAUE"]
[Mon Mar 23 23:14:27.236398 2026] [:error] [pid 38276:tid 38284] [client 158.158.96.39:64339] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rithin.php"] [unique_id "acFY05oKGiI-a7oME3ITaAAAAMU"]
[Mon Mar 23 23:14:27.732701 2026] [:error] [pid 38176:tid 38199] [client 158.158.96.39:64949] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rithin.php"] [unique_id "acFY00tG4qlh1gvNjuJfIgAAAAw"]
[Mon Mar 23 23:14:28.235329 2026] [:error] [pid 38177:tid 38234] [client 158.158.96.39:64957] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rithin.php"] [unique_id "acFY1HsYW-_HCI66MukFvwAAAFM"]
[Mon Mar 23 23:14:28.746119 2026] [:error] [pid 38306:tid 38316] [client 158.158.96.39:64922] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rithin.php"] [unique_id "acFY1DkL8qwu-hHc6BjMxgAAAQg"]
[Mon Mar 23 23:14:29.257841 2026] [:error] [pid 38276:tid 38301] [client 158.158.96.39:64982] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a5.php"] [unique_id "acFY1ZoKGiI-a7oME3ITbQAAANY"]
[Mon Mar 23 23:14:29.739178 2026] [:error] [pid 38306:tid 38322] [client 158.158.96.39:64331] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a5.php"] [unique_id "acFY1TkL8qwu-hHc6BjMyQAAAQ4"]
[Mon Mar 23 23:14:30.241687 2026] [:error] [pid 38176:tid 38193] [client 158.158.96.39:64321] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a5.php"] [unique_id "acFY1ktG4qlh1gvNjuJfJwAAAAY"]
[Mon Mar 23 23:14:30.725850 2026] [:error] [pid 38178:tid 38244] [client 158.158.96.39:64985] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a5.php"] [unique_id "acFY1g0axWfXsVvR9udXwQAAAII"]
[Mon Mar 23 23:14:31.220929 2026] [:error] [pid 38178:tid 38264] [client 158.158.96.39:64324] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class.php"] [unique_id "acFY1w0axWfXsVvR9udXwgAAAJY"]
[Mon Mar 23 23:14:31.713333 2026] [:error] [pid 38178:tid 38252] [client 158.158.96.39:64961] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class.php"] [unique_id "acFY1w0axWfXsVvR9udXxAAAAIo"]
[Mon Mar 23 23:14:32.209180 2026] [:error] [pid 38178:tid 38245] [client 158.158.96.39:64954] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class.php"] [unique_id "acFY2A0axWfXsVvR9udXxQAAAIM"]
[Mon Mar 23 23:14:32.737551 2026] [:error] [pid 38306:tid 38314] [client 158.158.96.39:64361] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class.php"] [unique_id "acFY2DkL8qwu-hHc6BjM0QAAAQY"]
[Mon Mar 23 23:14:33.334644 2026] [:error] [pid 38176:tid 38194] [client 158.158.96.39:64381] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zwq13.php"] [unique_id "acFY2UtG4qlh1gvNjuJfKgAAAAc"]
[Mon Mar 23 23:14:33.814459 2026] [:error] [pid 38178:tid 38257] [client 158.158.96.39:64934] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zwq13.php"] [unique_id "acFY2Q0axWfXsVvR9udXyQAAAI8"]
[Mon Mar 23 23:14:34.397751 2026] [:error] [pid 38176:tid 38187] [client 158.158.96.39:64921] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zwq13.php"] [unique_id "acFY2ktG4qlh1gvNjuJfLAAAAAA"]
[Mon Mar 23 23:14:34.994082 2026] [:error] [pid 38276:tid 38281] [client 158.158.96.39:64945] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zwq13.php"] [unique_id "acFY2poKGiI-a7oME3ITcQAAAMI"]
[Mon Mar 23 23:14:35.516585 2026] [:error] [pid 38306:tid 38318] [client 158.158.96.39:64928] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aapig.php"] [unique_id "acFY2zkL8qwu-hHc6BjM1wAAAQo"]
[Mon Mar 23 23:14:35.995539 2026] [:error] [pid 38306:tid 38327] [client 158.158.96.39:64920] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aapig.php"] [unique_id "acFY2zkL8qwu-hHc6BjM2gAAARM"]
[Mon Mar 23 23:14:36.493519 2026] [:error] [pid 38306:tid 38313] [client 158.158.96.39:65019] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aapig.php"] [unique_id "acFY3DkL8qwu-hHc6BjM3AAAAQU"]
[Mon Mar 23 23:14:36.986732 2026] [:error] [pid 38306:tid 38330] [client 158.158.96.39:64911] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aapig.php"] [unique_id "acFY3DkL8qwu-hHc6BjM3wAAARY"]
[Mon Mar 23 23:14:37.476175 2026] [:error] [pid 38306:tid 38311] [client 158.158.96.39:64943] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/webadmin.php"] [unique_id "acFY3TkL8qwu-hHc6BjM4AAAAQM"]
[Mon Mar 23 23:14:38.018746 2026] [:error] [pid 38276:tid 38298] [client 158.158.96.39:64322] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/webadmin.php"] [unique_id "acFY3poKGiI-a7oME3ITdQAAANM"]
[Mon Mar 23 23:14:38.511466 2026] [:error] [pid 38306:tid 38323] [client 158.158.96.39:64983] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/webadmin.php"] [unique_id "acFY3jkL8qwu-hHc6BjM4wAAAQ8"]
[Mon Mar 23 23:14:38.991601 2026] [:error] [pid 38276:tid 38289] [client 158.158.96.39:64269] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/webadmin.php"] [unique_id "acFY3poKGiI-a7oME3ITdwAAAMo"]
[Mon Mar 23 23:14:39.472885 2026] [:error] [pid 38306:tid 38309] [client 158.158.96.39:64298] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xc0252.php"] [unique_id "acFY3zkL8qwu-hHc6BjM5wAAAQE"]
[Mon Mar 23 23:14:39.954304 2026] [:error] [pid 38177:tid 38236] [client 158.158.96.39:65007] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xc0252.php"] [unique_id "acFY33sYW-_HCI66MukFxwAAAFU"]
[Mon Mar 23 23:14:40.436946 2026] [:error] [pid 38177:tid 38225] [client 158.158.96.39:64906] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xc0252.php"] [unique_id "acFY4HsYW-_HCI66MukFyAAAAEo"]
[Mon Mar 23 23:14:40.951132 2026] [:error] [pid 38176:tid 38197] [client 158.158.96.39:64989] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xc0252.php"] [unique_id "acFY4EtG4qlh1gvNjuJfMwAAAAo"]
[Mon Mar 23 23:14:41.489583 2026] [:error] [pid 38177:tid 38237] [client 158.158.96.39:64380] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws84.php"] [unique_id "acFY4XsYW-_HCI66MukFygAAAFY"]
[Mon Mar 23 23:14:42.024277 2026] [:error] [pid 38276:tid 38287] [client 158.158.96.39:64950] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws84.php"] [unique_id "acFY4poKGiI-a7oME3ITeAAAAMg"]
[Mon Mar 23 23:14:42.509843 2026] [:error] [pid 38306:tid 38315] [client 158.158.96.39:64979] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws84.php"] [unique_id "acFY4jkL8qwu-hHc6BjM6gAAAQc"]
[Mon Mar 23 23:14:43.020024 2026] [:error] [pid 38176:tid 38211] [client 158.158.96.39:64310] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws84.php"] [unique_id "acFY40tG4qlh1gvNjuJfOAAAABg"]
[Mon Mar 23 23:14:43.502921 2026] [:error] [pid 38177:tid 38219] [client 158.158.96.39:64941] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sc.php"] [unique_id "acFY43sYW-_HCI66MukFzwAAAEQ"]
[Mon Mar 23 23:14:43.986743 2026] [:error] [pid 38178:tid 38261] [client 158.158.96.39:65006] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sc.php"] [unique_id "acFY4w0axWfXsVvR9udXzwAAAJM"]
[Mon Mar 23 23:14:44.479863 2026] [:error] [pid 38306:tid 38316] [client 158.158.96.39:64931] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sc.php"] [unique_id "acFY5DkL8qwu-hHc6BjM7wAAAQg"]
[Mon Mar 23 23:14:44.990590 2026] [:error] [pid 38306:tid 38326] [client 158.158.96.39:64975] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sc.php"] [unique_id "acFY5DkL8qwu-hHc6BjM8QAAARI"]
[Mon Mar 23 23:14:45.469066 2026] [:error] [pid 38306:tid 38322] [client 158.158.96.39:64990] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mis.php"] [unique_id "acFY5TkL8qwu-hHc6BjM9QAAAQ4"]
[Mon Mar 23 23:14:45.983649 2026] [:error] [pid 38276:tid 38280] [client 158.158.96.39:64898] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mis.php"] [unique_id "acFY5ZoKGiI-a7oME3ITeQAAAME"]
[Mon Mar 23 23:14:46.473411 2026] [:error] [pid 38306:tid 38327] [client 158.158.96.39:64932] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mis.php"] [unique_id "acFY5jkL8qwu-hHc6BjM9wAAARM"]
[Mon Mar 23 23:14:46.957112 2026] [:error] [pid 38178:tid 38248] [client 158.158.96.39:64924] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mis.php"] [unique_id "acFY5g0axWfXsVvR9udX0wAAAIY"]
[Mon Mar 23 23:14:47.437607 2026] [:error] [pid 38176:tid 38205] [client 158.158.96.39:64947] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zogy1.php"] [unique_id "acFY50tG4qlh1gvNjuJfPQAAABI"]
[Mon Mar 23 23:14:47.925431 2026] [:error] [pid 38176:tid 38191] [client 158.158.96.39:65003] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zogy1.php"] [unique_id "acFY50tG4qlh1gvNjuJfPgAAAAQ"]
[Mon Mar 23 23:14:48.411114 2026] [:error] [pid 38176:tid 38203] [client 158.158.96.39:64375] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zogy1.php"] [unique_id "acFY6EtG4qlh1gvNjuJfQQAAABA"]
[Mon Mar 23 23:14:48.892466 2026] [:error] [pid 38178:tid 38265] [client 158.158.96.39:64329] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zogy1.php"] [unique_id "acFY6A0axWfXsVvR9udX2gAAAJc"]
[Mon Mar 23 23:14:49.393109 2026] [:error] [pid 38176:tid 38202] [client 158.158.96.39:64996] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xvs.php"] [unique_id "acFY6UtG4qlh1gvNjuJfRQAAAA8"]
[Mon Mar 23 23:14:49.870842 2026] [:error] [pid 38176:tid 38208] [client 158.158.96.39:64902] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xvs.php"] [unique_id "acFY6UtG4qlh1gvNjuJfRwAAABU"]
[Mon Mar 23 23:14:50.357934 2026] [:error] [pid 52341:tid 52352] [client 158.158.96.39:64973] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xvs.php"] [unique_id "acFY6qPKTBDR2u47Gb0XkgAAAUk"]
[Mon Mar 23 23:14:50.838323 2026] [:error] [pid 38176:tid 38199] [client 158.158.96.39:64373] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xvs.php"] [unique_id "acFY6ktG4qlh1gvNjuJfTAAAAAw"]
[Mon Mar 23 23:14:51.333062 2026] [:error] [pid 38177:tid 38227] [client 158.158.96.39:64925] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gettest.php"] [unique_id "acFY63sYW-_HCI66MukF1AAAAEw"]
[Mon Mar 23 23:14:51.823563 2026] [:error] [pid 52341:tid 52351] [client 158.158.96.39:63630] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gettest.php"] [unique_id "acFY66PKTBDR2u47Gb0XlQAAAUg"]
[Mon Mar 23 23:14:52.322520 2026] [:error] [pid 52341:tid 52346] [client 158.158.96.39:64914] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gettest.php"] [unique_id "acFY7KPKTBDR2u47Gb0XmQAAAUM"]
[Mon Mar 23 23:14:52.814663 2026] [:error] [pid 38306:tid 38319] [client 158.158.96.39:64942] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gettest.php"] [unique_id "acFY7DkL8qwu-hHc6BjNAQAAAQs"]
[Mon Mar 23 23:14:53.298252 2026] [:error] [pid 52341:tid 52359] [client 158.158.96.39:64904] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/az.php"] [unique_id "acFY7aPKTBDR2u47Gb0XnQAAAVA"]
[Mon Mar 23 23:14:53.787428 2026] [:error] [pid 52341:tid 52345] [client 158.158.96.39:65021] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/az.php"] [unique_id "acFY7aPKTBDR2u47Gb0XnwAAAUI"]
[Mon Mar 23 23:14:54.295307 2026] [:error] [pid 52341:tid 52367] [client 158.158.96.39:64991] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/az.php"] [unique_id "acFY7qPKTBDR2u47Gb0XowAAAVg"]
[Mon Mar 23 23:14:54.775176 2026] [:error] [pid 38176:tid 38202] [client 158.158.96.39:64320] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/az.php"] [unique_id "acFY7ktG4qlh1gvNjuJfUgAAAA8"]
[Mon Mar 23 23:14:55.264746 2026] [:error] [pid 38276:tid 38282] [client 158.158.96.39:64994] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/web.php"] [unique_id "acFY75oKGiI-a7oME3ITewAAAMM"]
[Mon Mar 23 23:14:55.770430 2026] [:error] [pid 52341:tid 52364] [client 158.158.96.39:65012] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/web.php"] [unique_id "acFY76PKTBDR2u47Gb0XwgAAAVU"]
[Mon Mar 23 23:14:56.259638 2026] [:error] [pid 38306:tid 38316] [client 158.158.96.39:64297] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/web.php"] [unique_id "acFY8DkL8qwu-hHc6BjNEAAAAQg"]
[Mon Mar 23 23:14:56.764042 2026] [:error] [pid 38306:tid 38321] [client 158.158.96.39:64382] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/web.php"] [unique_id "acFY8DkL8qwu-hHc6BjNEgAAAQ0"]
[Mon Mar 23 23:14:57.258848 2026] [:error] [pid 38306:tid 38328] [client 158.158.96.39:64960] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "acFY8TkL8qwu-hHc6BjNFQAAARQ"]
[Mon Mar 23 23:14:57.757609 2026] [:error] [pid 38306:tid 38318] [client 158.158.96.39:64952] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "acFY8TkL8qwu-hHc6BjNGQAAAQo"]
[Mon Mar 23 23:14:58.237724 2026] [:error] [pid 52341:tid 52344] [client 158.158.96.39:64353] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "acFY8qPKTBDR2u47Gb0X0gAAAUE"]
[Mon Mar 23 23:14:58.743250 2026] [:error] [pid 38177:tid 38217] [client 158.158.96.39:64333] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "acFY8nsYW-_HCI66MukF1wAAAEI"]
[Mon Mar 23 23:14:59.221685 2026] [:error] [pid 38306:tid 38316] [client 158.158.96.39:64364] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lp6.php"] [unique_id "acFY8zkL8qwu-hHc6BjNJAAAAQg"]
[Mon Mar 23 23:14:59.719434 2026] [:error] [pid 38306:tid 38328] [client 158.158.96.39:65014] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lp6.php"] [unique_id "acFY8zkL8qwu-hHc6BjNJQAAARQ"]
[Mon Mar 23 23:15:00.198649 2026] [:error] [pid 52341:tid 52343] [client 158.158.96.39:64956] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lp6.php"] [unique_id "acFY9KPKTBDR2u47Gb0X3AAAAUA"]
[Mon Mar 23 23:15:00.683991 2026] [:error] [pid 38306:tid 38332] [client 158.158.96.39:64955] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lp6.php"] [unique_id "acFY9DkL8qwu-hHc6BjNKwAAARg"]
[Mon Mar 23 23:15:01.165378 2026] [:error] [pid 38306:tid 38331] [client 158.158.96.39:65001] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/com.php"] [unique_id "acFY9TkL8qwu-hHc6BjNLgAAARc"]
[Mon Mar 23 23:15:01.655514 2026] [:error] [pid 38306:tid 38311] [client 158.158.96.39:64352] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/com.php"] [unique_id "acFY9TkL8qwu-hHc6BjNMQAAAQM"]
[Mon Mar 23 23:15:02.139483 2026] [:error] [pid 38276:tid 38291] [client 158.158.96.39:64999] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/com.php"] [unique_id "acFY9poKGiI-a7oME3ITgQAAAMw"]
[Mon Mar 23 23:15:02.618290 2026] [:error] [pid 38177:tid 38229] [client 158.158.96.39:64282] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/com.php"] [unique_id "acFY9nsYW-_HCI66MukF2gAAAE4"]
[Mon Mar 23 23:15:03.101751 2026] [:error] [pid 38276:tid 38280] [client 158.158.96.39:64367] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bolt.php"] [unique_id "acFY95oKGiI-a7oME3IThgAAAME"]
[Mon Mar 23 23:15:03.580859 2026] [:error] [pid 38178:tid 38244] [client 158.158.96.39:64349] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bolt.php"] [unique_id "acFY9w0axWfXsVvR9udX8AAAAII"]
[Mon Mar 23 23:15:04.076157 2026] [:error] [pid 38176:tid 38199] [client 158.158.96.39:64900] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bolt.php"] [unique_id "acFY-EtG4qlh1gvNjuJfWgAAAAw"]
[Mon Mar 23 23:15:04.555064 2026] [:error] [pid 38176:tid 38193] [client 158.158.96.39:64997] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bolt.php"] [unique_id "acFY-EtG4qlh1gvNjuJfWwAAAAY"]
[Mon Mar 23 23:15:05.105232 2026] [:error] [pid 38276:tid 38285] [client 158.158.96.39:64974] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wander.php"] [unique_id "acFY-ZoKGiI-a7oME3ITigAAAMY"]
[Mon Mar 23 23:15:05.606701 2026] [:error] [pid 52341:tid 52358] [client 158.158.96.39:64951] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wander.php"] [unique_id "acFY-aPKTBDR2u47Gb0X7wAAAU8"]
[Mon Mar 23 23:15:06.089098 2026] [:error] [pid 38176:tid 38194] [client 158.158.96.39:64336] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wander.php"] [unique_id "acFY-ktG4qlh1gvNjuJfYQAAAAc"]
[Mon Mar 23 23:15:06.568444 2026] [:error] [pid 38178:tid 38252] [client 158.158.96.39:64369] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wander.php"] [unique_id "acFY-g0axWfXsVvR9udX9AAAAIo"]
[Mon Mar 23 23:15:07.061094 2026] [:error] [pid 52341:tid 52361] [client 158.158.96.39:64363] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/t.php"] [unique_id "acFY-6PKTBDR2u47Gb0X8QAAAVI"]
[Mon Mar 23 23:15:07.552788 2026] [:error] [pid 52341:tid 52357] [client 158.158.96.39:65018] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/t.php"] [unique_id "acFY-6PKTBDR2u47Gb0X9AAAAU4"]
[Mon Mar 23 23:15:08.047648 2026] [:error] [pid 52341:tid 52362] [client 158.158.96.39:64935] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/t.php"] [unique_id "acFY_KPKTBDR2u47Gb0X9QAAAVM"]
[Mon Mar 23 23:15:08.547162 2026] [:error] [pid 38177:tid 38224] [client 158.158.96.39:64359] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/t.php"] [unique_id "acFY_HsYW-_HCI66MukF3QAAAEk"]
[Mon Mar 23 23:15:09.040289 2026] [proxy_fcgi:error] [pid 52341:tid 52360] [client 158.158.96.39:64901] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 23:15:09.528710 2026] [proxy_fcgi:error] [pid 52341:tid 52366] [client 158.158.96.39:64901] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 23:15:09.775748 2026] [proxy_fcgi:error] [pid 52341:tid 52347] [client 158.158.96.39:64901] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 23:15:10.018967 2026] [proxy_fcgi:error] [pid 52341:tid 52354] [client 158.158.96.39:64901] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 23:15:10.265988 2026] [proxy_fcgi:error] [pid 52341:tid 52363] [client 158.158.96.39:64901] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 23:15:10.791358 2026] [proxy_fcgi:error] [pid 52341:tid 52350] [client 158.158.96.39:64901] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 23:15:11.036162 2026] [proxy_fcgi:error] [pid 52341:tid 52360] [client 158.158.96.39:64901] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 23:15:11.279587 2026] [proxy_fcgi:error] [pid 52341:tid 52352] [client 158.158.96.39:64901] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 23:15:11.524521 2026] [proxy_fcgi:error] [pid 52341:tid 52358] [client 158.158.96.39:64901] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 23:15:11.766953 2026] [proxy_fcgi:error] [pid 52341:tid 52348] [client 158.158.96.39:64901] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 23:15:12.005759 2026] [:error] [pid 52341:tid 52366] [client 158.158.96.39:64901] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nc4.php"] [unique_id "acFZAKPKTBDR2u47Gb0YDgAAAVc"]
[Mon Mar 23 23:15:12.580505 2026] [:error] [pid 38276:tid 38295] [client 158.158.96.39:64334] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nc4.php"] [unique_id "acFZAJoKGiI-a7oME3ITkAAAANA"]
[Mon Mar 23 23:15:13.099185 2026] [:error] [pid 38276:tid 38280] [client 158.158.96.39:65004] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nc4.php"] [unique_id "acFZAZoKGiI-a7oME3ITkwAAAME"]
[Mon Mar 23 23:15:13.659361 2026] [:error] [pid 52341:tid 52344] [client 158.158.96.39:64919] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nc4.php"] [unique_id "acFZAaPKTBDR2u47Gb0YFAAAAUE"]
[Mon Mar 23 23:15:14.156130 2026] [:error] [pid 52341:tid 52363] [client 158.158.96.39:64913] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp9.php"] [unique_id "acFZAqPKTBDR2u47Gb0YGAAAAVQ"]
[Mon Mar 23 23:15:14.770621 2026] [:error] [pid 52341:tid 52348] [client 158.158.96.39:64948] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp9.php"] [unique_id "acFZAqPKTBDR2u47Gb0YHgAAAUU"]
[Mon Mar 23 23:15:15.305111 2026] [:error] [pid 52341:tid 52343] [client 158.158.96.39:63681] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp9.php"] [unique_id "acFZA6PKTBDR2u47Gb0YIwAAAUA"]
[Mon Mar 23 23:15:15.785698 2026] [:error] [pid 38177:tid 38236] [client 158.158.96.39:65002] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp9.php"] [unique_id "acFZA3sYW-_HCI66MukF4gAAAFU"]
[Mon Mar 23 23:15:16.266462 2026] [:error] [pid 52341:tid 52364] [client 158.158.96.39:65017] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/images/acxx.php"] [unique_id "acFZBKPKTBDR2u47Gb0YLwAAAVU"]
[Mon Mar 23 23:15:16.767454 2026] [:error] [pid 38306:tid 38309] [client 158.158.96.39:64290] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/images/acxx.php"] [unique_id "acFZBDkL8qwu-hHc6BjNQwAAAQE"]
[Mon Mar 23 23:15:17.299966 2026] [:error] [pid 38306:tid 38325] [client 158.158.96.39:64265] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/images/acxx.php"] [unique_id "acFZBTkL8qwu-hHc6BjNRwAAARE"]
[Mon Mar 23 23:15:17.807436 2026] [:error] [pid 52341:tid 52350] [client 158.158.96.39:65011] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/images/acxx.php"] [unique_id "acFZBaPKTBDR2u47Gb0YPwAAAUc"]
[Mon Mar 23 23:15:18.326923 2026] [:error] [pid 38177:tid 38229] [client 158.158.96.39:64939] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fs.php"] [unique_id "acFZBnsYW-_HCI66MukF5wAAAE4"]
[Mon Mar 23 23:15:18.836457 2026] [:error] [pid 38306:tid 38321] [client 158.158.96.39:64917] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fs.php"] [unique_id "acFZBjkL8qwu-hHc6BjNTwAAAQ0"]
[Mon Mar 23 23:15:19.342920 2026] [:error] [pid 38306:tid 38319] [client 158.158.96.39:64348] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fs.php"] [unique_id "acFZBzkL8qwu-hHc6BjNUAAAAQs"]
[Mon Mar 23 23:15:19.885836 2026] [:error] [pid 38306:tid 38332] [client 158.158.96.39:63688] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fs.php"] [unique_id "acFZBzkL8qwu-hHc6BjNUwAAARg"]
[Mon Mar 23 23:15:20.470640 2026] [:error] [pid 38306:tid 38322] [client 158.158.96.39:63691] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/byypas.php"] [unique_id "acFZCDkL8qwu-hHc6BjNWAAAAQ4"]
[Mon Mar 23 23:15:21.097832 2026] [:error] [pid 52341:tid 52356] [client 158.158.96.39:64342] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/byypas.php"] [unique_id "acFZCaPKTBDR2u47Gb0YTQAAAU0"]
[Mon Mar 23 23:15:21.599502 2026] [:error] [pid 52341:tid 52348] [client 158.158.96.39:64969] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/byypas.php"] [unique_id "acFZCaPKTBDR2u47Gb0YUAAAAUU"]
[Mon Mar 23 23:15:22.077474 2026] [:error] [pid 38177:tid 38224] [client 158.158.96.39:64350] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/byypas.php"] [unique_id "acFZCnsYW-_HCI66MukF6gAAAEk"]
[Mon Mar 23 23:15:22.555575 2026] [:error] [pid 38276:tid 38300] [client 158.158.96.39:64376] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/b.php"] [unique_id "acFZCpoKGiI-a7oME3ITngAAANU"]
[Mon Mar 23 23:15:23.085836 2026] [:error] [pid 52341:tid 52365] [client 158.158.96.39:64909] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/b.php"] [unique_id "acFZC6PKTBDR2u47Gb0YWAAAAVY"]
[Mon Mar 23 23:15:23.568576 2026] [:error] [pid 38306:tid 38329] [client 158.158.96.39:63633] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/b.php"] [unique_id "acFZCzkL8qwu-hHc6BjNYAAAARU"]
[Mon Mar 23 23:15:24.048639 2026] [:error] [pid 52341:tid 52347] [client 158.158.96.39:64276] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/b.php"] [unique_id "acFZDKPKTBDR2u47Gb0YXQAAAUQ"]
[Mon Mar 23 23:15:24.527415 2026] [:error] [pid 52341:tid 52361] [client 158.158.96.39:64299] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws49.php"] [unique_id "acFZDKPKTBDR2u47Gb0YYAAAAVI"]
[Mon Mar 23 23:15:25.008805 2026] [:error] [pid 38306:tid 38325] [client 158.158.96.39:64981] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws49.php"] [unique_id "acFZDTkL8qwu-hHc6BjNZgAAARE"]
[Mon Mar 23 23:15:25.504669 2026] [:error] [pid 38178:tid 38245] [client 158.158.96.39:64899] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws49.php"] [unique_id "acFZDQ0axWfXsVvR9udYCAAAAIM"]
[Mon Mar 23 23:15:26.051466 2026] [:error] [pid 52341:tid 52343] [client 158.158.96.39:64944] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws49.php"] [unique_id "acFZDqPKTBDR2u47Gb0YYgAAAUA"]
[Mon Mar 23 23:15:26.568792 2026] [:error] [pid 38176:tid 38196] [client 158.158.96.39:64357] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gfd.php"] [unique_id "acFZDktG4qlh1gvNjuJffAAAAAk"]
[Mon Mar 23 23:15:27.076195 2026] [:error] [pid 52341:tid 52364] [client 158.158.96.39:64972] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gfd.php"] [unique_id "acFZD6PKTBDR2u47Gb0YZwAAAVU"]
[Mon Mar 23 23:15:27.556820 2026] [:error] [pid 52341:tid 52354] [client 158.158.96.39:64295] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gfd.php"] [unique_id "acFZD6PKTBDR2u47Gb0YbgAAAUs"]
[Mon Mar 23 23:15:28.057350 2026] [:error] [pid 52341:tid 52362] [client 158.158.96.39:64910] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gfd.php"] [unique_id "acFZEKPKTBDR2u47Gb0YcQAAAVM"]
[Mon Mar 23 23:15:28.536759 2026] [:error] [pid 52341:tid 52345] [client 158.158.96.39:64930] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/callback.php"] [unique_id "acFZEKPKTBDR2u47Gb0YdwAAAUI"]
[Mon Mar 23 23:15:29.020173 2026] [:error] [pid 38176:tid 38210] [client 158.158.96.39:64926] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/callback.php"] [unique_id "acFZEUtG4qlh1gvNjuJffgAAABc"]
[Mon Mar 23 23:15:29.537801 2026] [:error] [pid 38178:tid 38250] [client 158.158.96.39:64323] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/callback.php"] [unique_id "acFZEQ0axWfXsVvR9udYDgAAAIg"]
[Mon Mar 23 23:15:30.077347 2026] [:error] [pid 38178:tid 38256] [client 158.158.96.39:64275] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/callback.php"] [unique_id "acFZEg0axWfXsVvR9udYEAAAAI4"]
[Mon Mar 23 23:15:30.564097 2026] [:error] [pid 38178:tid 38266] [client 158.158.96.39:64907] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-blogs.php"] [unique_id "acFZEg0axWfXsVvR9udYEgAAAJg"]
[Mon Mar 23 23:15:31.049186 2026] [:error] [pid 38306:tid 38325] [client 158.158.96.39:64360] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-blogs.php"] [unique_id "acFZEzkL8qwu-hHc6BjNcgAAARE"]
[Mon Mar 23 23:15:31.529578 2026] [:error] [pid 38306:tid 38322] [client 158.158.96.39:64280] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-blogs.php"] [unique_id "acFZEzkL8qwu-hHc6BjNdwAAAQ4"]
[Mon Mar 23 23:15:32.153488 2026] [:error] [pid 38176:tid 38198] [client 158.158.96.39:64268] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-blogs.php"] [unique_id "acFZFEtG4qlh1gvNjuJfiAAAAAs"]
[Mon Mar 23 23:15:32.689618 2026] [:error] [pid 38176:tid 38193] [client 158.158.96.39:64366] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws88.php"] [unique_id "acFZFEtG4qlh1gvNjuJfiwAAAAY"]
[Mon Mar 23 23:15:33.248545 2026] [:error] [pid 38306:tid 38311] [client 158.158.96.39:64274] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws88.php"] [unique_id "acFZFTkL8qwu-hHc6BjNeAAAAQM"]
[Mon Mar 23 23:15:33.739047 2026] [:error] [pid 38176:tid 38202] [client 158.158.96.39:64326] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws88.php"] [unique_id "acFZFUtG4qlh1gvNjuJfkQAAAA8"]
[Mon Mar 23 23:15:34.361511 2026] [:error] [pid 38306:tid 38323] [client 158.158.96.39:64341] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws88.php"] [unique_id "acFZFjkL8qwu-hHc6BjNewAAAQ8"]
[Mon Mar 23 23:15:34.876563 2026] [:error] [pid 38276:tid 38281] [client 158.158.96.39:65013] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws86.php"] [unique_id "acFZFpoKGiI-a7oME3ITqwAAAMI"]
[Mon Mar 23 23:15:35.391122 2026] [:error] [pid 38178:tid 38263] [client 158.158.96.39:64340] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws86.php"] [unique_id "acFZFw0axWfXsVvR9udYGgAAAJU"]
[Mon Mar 23 23:15:35.877780 2026] [:error] [pid 38176:tid 38199] [client 158.158.96.39:64302] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws86.php"] [unique_id "acFZF0tG4qlh1gvNjuJfmQAAAAw"]
[Mon Mar 23 23:15:36.364137 2026] [:error] [pid 38177:tid 38237] [client 158.158.96.39:64988] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws86.php"] [unique_id "acFZGHsYW-_HCI66MukF8AAAAFY"]
[Mon Mar 23 23:15:36.847550 2026] [:error] [pid 38306:tid 38327] [client 158.158.96.39:64986] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/h2.php"] [unique_id "acFZGDkL8qwu-hHc6BjNgQAAARM"]
[Mon Mar 23 23:15:37.328048 2026] [:error] [pid 38306:tid 38310] [client 158.158.96.39:64347] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/h2.php"] [unique_id "acFZGTkL8qwu-hHc6BjNhgAAAQI"]
[Mon Mar 23 23:15:37.814386 2026] [:error] [pid 38176:tid 38204] [client 158.158.96.39:64340] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/h2.php"] [unique_id "acFZGUtG4qlh1gvNjuJfpgAAABE"]
[Mon Mar 23 23:15:38.348693 2026] [:error] [pid 52341:tid 52358] [client 158.158.96.39:64905] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/h2.php"] [unique_id "acFZGqPKTBDR2u47Gb0YgAAAAU8"]
[Mon Mar 23 23:15:38.885150 2026] [:error] [pid 52341:tid 52357] [client 158.158.96.39:65016] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vanda.php"] [unique_id "acFZGqPKTBDR2u47Gb0YiAAAAU4"]
[Mon Mar 23 23:15:39.373685 2026] [:error] [pid 52341:tid 52364] [client 158.158.96.39:63740] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vanda.php"] [unique_id "acFZG6PKTBDR2u47Gb0YkgAAAVU"]
[Mon Mar 23 23:15:39.873589 2026] [:error] [pid 38178:tid 38250] [client 158.158.96.39:64365] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vanda.php"] [unique_id "acFZGw0axWfXsVvR9udYHQAAAIg"]
[Mon Mar 23 23:15:40.365852 2026] [:error] [pid 38178:tid 38258] [client 158.158.96.39:63702] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vanda.php"] [unique_id "acFZHA0axWfXsVvR9udYIAAAAJA"]
[Mon Mar 23 23:15:40.887511 2026] [:error] [pid 38306:tid 38309] [client 158.158.96.39:64303] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/domains.php"] [unique_id "acFZHDkL8qwu-hHc6BjNoQAAAQE"]
[Mon Mar 23 23:15:41.413157 2026] [:error] [pid 52341:tid 52352] [client 158.158.96.39:64289] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/domains.php"] [unique_id "acFZHaPKTBDR2u47Gb0YoAAAAUk"]
[Mon Mar 23 23:15:41.895620 2026] [:error] [pid 52341:tid 52367] [client 158.158.96.39:63638] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/domains.php"] [unique_id "acFZHaPKTBDR2u47Gb0YowAAAVg"]
[Mon Mar 23 23:15:42.393412 2026] [:error] [pid 38176:tid 38199] [client 158.158.96.39:64377] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/domains.php"] [unique_id "acFZHktG4qlh1gvNjuJfvgAAAAw"]
[Mon Mar 23 23:15:42.872687 2026] [:error] [pid 38178:tid 38257] [client 158.158.96.39:64346] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/asd.php"] [unique_id "acFZHg0axWfXsVvR9udYKgAAAI8"]
[Mon Mar 23 23:15:43.355998 2026] [:error] [pid 38176:tid 38200] [client 158.158.96.39:64965] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/asd.php"] [unique_id "acFZH0tG4qlh1gvNjuJfwwAAAA0"]
[Mon Mar 23 23:15:43.834976 2026] [:error] [pid 38306:tid 38319] [client 158.158.96.39:64343] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/asd.php"] [unique_id "acFZHzkL8qwu-hHc6BjNtQAAAQs"]
[Mon Mar 23 23:15:44.327063 2026] [:error] [pid 38276:tid 38302] [client 158.158.96.39:63133] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/asd.php"] [unique_id "acFZIJoKGiI-a7oME3ITuQAAANc"]
[Mon Mar 23 23:15:44.806114 2026] [:error] [pid 38306:tid 38325] [client 158.158.96.39:64976] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zc-104.php"] [unique_id "acFZIDkL8qwu-hHc6BjNuQAAARE"]
[Mon Mar 23 23:15:45.301548 2026] [:error] [pid 38276:tid 38301] [client 158.158.96.39:64345] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zc-104.php"] [unique_id "acFZIZoKGiI-a7oME3ITuwAAANY"]
[Mon Mar 23 23:15:45.781350 2026] [:error] [pid 38306:tid 38318] [client 158.158.96.39:64354] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zc-104.php"] [unique_id "acFZITkL8qwu-hHc6BjNvwAAAQo"]
[Mon Mar 23 23:15:46.267129 2026] [:error] [pid 38306:tid 38309] [client 158.158.96.39:64315] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zc-104.php"] [unique_id "acFZIjkL8qwu-hHc6BjNwwAAAQE"]
[Mon Mar 23 23:15:46.764789 2026] [:error] [pid 38306:tid 38317] [client 158.158.96.39:64358] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rzki.php"] [unique_id "acFZIjkL8qwu-hHc6BjNyQAAAQk"]
[Mon Mar 23 23:15:47.248301 2026] [:error] [pid 38306:tid 38318] [client 158.158.96.39:64953] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rzki.php"] [unique_id "acFZIzkL8qwu-hHc6BjNzgAAAQo"]
[Mon Mar 23 23:15:47.741559 2026] [:error] [pid 38178:tid 38253] [client 158.158.96.39:64929] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rzki.php"] [unique_id "acFZIw0axWfXsVvR9udYOwAAAIs"]
[Mon Mar 23 23:15:48.224305 2026] [:error] [pid 38178:tid 38254] [client 158.158.96.39:64946] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rzki.php"] [unique_id "acFZJA0axWfXsVvR9udYPAAAAIw"]
[Mon Mar 23 23:15:48.750638 2026] [:error] [pid 38178:tid 38260] [client 158.158.96.39:64933] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xsas.php"] [unique_id "acFZJA0axWfXsVvR9udYPgAAAJI"]
[Mon Mar 23 23:15:49.233673 2026] [:error] [pid 38178:tid 38246] [client 158.158.96.39:63727] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xsas.php"] [unique_id "acFZJQ0axWfXsVvR9udYQgAAAIQ"]
[Mon Mar 23 23:15:49.717135 2026] [:error] [pid 38276:tid 38285] [client 158.158.96.39:64927] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xsas.php"] [unique_id "acFZJZoKGiI-a7oME3ITxAAAAMY"]
[Mon Mar 23 23:15:50.205093 2026] [:error] [pid 38306:tid 38308] [client 158.158.96.39:64281] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xsas.php"] [unique_id "acFZJjkL8qwu-hHc6BjN1wAAAQA"]
[Mon Mar 23 23:15:50.706660 2026] [:error] [pid 38306:tid 38325] [client 158.158.96.39:64258] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/d12.php"] [unique_id "acFZJjkL8qwu-hHc6BjN2wAAARE"]
[Mon Mar 23 23:15:51.186808 2026] [:error] [pid 38176:tid 38204] [client 158.158.96.39:64338] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/d12.php"] [unique_id "acFZJ0tG4qlh1gvNjuJf1AAAABE"]
[Mon Mar 23 23:15:51.668383 2026] [:error] [pid 52341:tid 52358] [client 158.158.96.39:64896] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/d12.php"] [unique_id "acFZJ6PKTBDR2u47Gb0YrQAAAU8"]
[Mon Mar 23 23:15:52.163215 2026] [:error] [pid 38178:tid 38257] [client 158.158.96.39:64305] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/d12.php"] [unique_id "acFZKA0axWfXsVvR9udYSQAAAI8"]
[Mon Mar 23 23:15:52.651829 2026] [:error] [pid 38178:tid 38259] [client 158.158.96.39:64937] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/okxh.php"] [unique_id "acFZKA0axWfXsVvR9udYSwAAAJE"]
[Mon Mar 23 23:15:53.133176 2026] [:error] [pid 38178:tid 38253] [client 158.158.96.39:63707] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/okxh.php"] [unique_id "acFZKQ0axWfXsVvR9udYTQAAAIs"]
[Mon Mar 23 23:15:53.779939 2026] [:error] [pid 38306:tid 38318] [client 158.158.96.39:63716] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/okxh.php"] [unique_id "acFZKTkL8qwu-hHc6BjN3AAAAQo"]
[Mon Mar 23 23:15:54.283621 2026] [:error] [pid 38178:tid 38256] [client 158.158.96.39:63689] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/okxh.php"] [unique_id "acFZKg0axWfXsVvR9udYUgAAAI4"]
[Mon Mar 23 23:15:54.834782 2026] [:error] [pid 52341:tid 52366] [client 158.158.96.39:63636] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/55b76.php"] [unique_id "acFZKqPKTBDR2u47Gb0YrgAAAVc"]
[Mon Mar 23 23:15:55.324134 2026] [:error] [pid 38306:tid 38332] [client 158.158.96.39:64325] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/55b76.php"] [unique_id "acFZKzkL8qwu-hHc6BjN4QAAARg"]
[Mon Mar 23 23:15:55.952414 2026] [:error] [pid 38306:tid 38320] [client 158.158.96.39:64980] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/55b76.php"] [unique_id "acFZKzkL8qwu-hHc6BjN4gAAAQw"]
[Mon Mar 23 23:15:56.439419 2026] [:error] [pid 52341:tid 52351] [client 158.158.96.39:63655] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/55b76.php"] [unique_id "acFZLKPKTBDR2u47Gb0YtgAAAUg"]
[Mon Mar 23 23:15:57.163789 2026] [:error] [pid 52341:tid 52367] [client 158.158.96.39:64286] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tt.php"] [unique_id "acFZLaPKTBDR2u47Gb0YuwAAAVg"]
[Mon Mar 23 23:15:57.642763 2026] [:error] [pid 38176:tid 38205] [client 158.158.96.39:64259] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tt.php"] [unique_id "acFZLUtG4qlh1gvNjuJf3wAAABI"]
[Mon Mar 23 23:15:58.136826 2026] [:error] [pid 52341:tid 52355] [client 158.158.96.39:64337] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tt.php"] [unique_id "acFZLqPKTBDR2u47Gb0YwAAAAUw"]
[Mon Mar 23 23:15:58.679385 2026] [:error] [pid 38176:tid 38192] [client 158.158.96.39:64262] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tt.php"] [unique_id "acFZLktG4qlh1gvNjuJf4AAAAAU"]
[Mon Mar 23 23:15:59.276892 2026] [:error] [pid 38177:tid 38215] [client 158.158.96.39:63700] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/maul.php"] [unique_id "acFZL3sYW-_HCI66MukGCwAAAEA"]
[Mon Mar 23 23:15:59.920751 2026] [:error] [pid 38177:tid 38238] [client 158.158.96.39:63711] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/maul.php"] [unique_id "acFZL3sYW-_HCI66MukGDgAAAFc"]
[Mon Mar 23 23:16:00.489711 2026] [:error] [pid 38306:tid 38315] [client 158.158.96.39:64993] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/maul.php"] [unique_id "acFZMDkL8qwu-hHc6BjN5AAAAQc"]
[Mon Mar 23 23:16:01.283359 2026] [:error] [pid 52341:tid 52354] [client 158.158.96.39:64313] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/maul.php"] [unique_id "acFZMaPKTBDR2u47Gb0YygAAAUs"]
[Mon Mar 23 23:16:01.874196 2026] [:error] [pid 52341:tid 52350] [client 158.158.96.39:64330] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/5b9ac.php"] [unique_id "acFZMaPKTBDR2u47Gb0Y0QAAAUc"]
[Mon Mar 23 23:16:02.400579 2026] [:error] [pid 38276:tid 38297] [client 158.158.96.39:64311] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/5b9ac.php"] [unique_id "acFZMpoKGiI-a7oME3IT4gAAANI"]
[Mon Mar 23 23:16:02.969525 2026] [:error] [pid 38306:tid 38321] [client 158.158.96.39:63701] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/5b9ac.php"] [unique_id "acFZMjkL8qwu-hHc6BjN7AAAAQ0"]
[Mon Mar 23 23:16:03.504831 2026] [:error] [pid 38306:tid 38311] [client 158.158.96.39:64301] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/5b9ac.php"] [unique_id "acFZMzkL8qwu-hHc6BjN7gAAAQM"]
[Mon Mar 23 23:16:04.007728 2026] [:error] [pid 52341:tid 52349] [client 158.158.96.39:64294] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hehe.php"] [unique_id "acFZNKPKTBDR2u47Gb0Y4wAAAUY"]
[Mon Mar 23 23:16:04.557864 2026] [:error] [pid 38176:tid 38200] [client 158.158.96.39:64308] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hehe.php"] [unique_id "acFZNEtG4qlh1gvNjuJf5AAAAA0"]
[Mon Mar 23 23:16:05.058836 2026] [:error] [pid 52341:tid 52350] [client 158.158.96.39:65015] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hehe.php"] [unique_id "acFZNaPKTBDR2u47Gb0Y6AAAAUc"]
[Mon Mar 23 23:16:05.546793 2026] [:error] [pid 38306:tid 38328] [client 158.158.96.39:64356] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hehe.php"] [unique_id "acFZNTkL8qwu-hHc6BjN8gAAARQ"]
[Mon Mar 23 23:16:06.028245 2026] [:error] [pid 38176:tid 38205] [client 158.158.96.39:63631] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/varb.php"] [unique_id "acFZNktG4qlh1gvNjuJf7QAAABI"]
[Mon Mar 23 23:16:06.531068 2026] [:error] [pid 38176:tid 38192] [client 158.158.96.39:64314] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/varb.php"] [unique_id "acFZNktG4qlh1gvNjuJf8QAAAAU"]
[Mon Mar 23 23:16:07.017869 2026] [:error] [pid 38178:tid 38265] [client 158.158.96.39:64332] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/varb.php"] [unique_id "acFZNw0axWfXsVvR9udYYQAAAJc"]
[Mon Mar 23 23:16:07.505991 2026] [:error] [pid 38306:tid 38316] [client 158.158.96.39:63720] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/varb.php"] [unique_id "acFZNzkL8qwu-hHc6BjN9QAAAQg"]
[Mon Mar 23 23:16:08.010265 2026] [:error] [pid 38306:tid 38323] [client 158.158.96.39:63692] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lm15.php"] [unique_id "acFZODkL8qwu-hHc6BjN-gAAAQ8"]
[Mon Mar 23 23:16:08.519277 2026] [:error] [pid 38306:tid 38332] [client 158.158.96.39:63686] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lm15.php"] [unique_id "acFZODkL8qwu-hHc6BjN_gAAARg"]
[Mon Mar 23 23:16:09.011986 2026] [:error] [pid 52341:tid 52366] [client 158.158.96.39:64257] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lm15.php"] [unique_id "acFZOaPKTBDR2u47Gb0Y7AAAAVc"]
[Mon Mar 23 23:16:09.579036 2026] [:error] [pid 38306:tid 38320] [client 158.158.96.39:64316] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lm15.php"] [unique_id "acFZOTkL8qwu-hHc6BjOAgAAAQw"]
[Mon Mar 23 23:16:10.060139 2026] [:error] [pid 38276:tid 38283] [client 158.158.96.39:64270] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/clss.php"] [unique_id "acFZOpoKGiI-a7oME3IT5wAAAMQ"]
[Mon Mar 23 23:16:10.546181 2026] [:error] [pid 38306:tid 38328] [client 158.158.96.39:63697] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/clss.php"] [unique_id "acFZOjkL8qwu-hHc6BjOBQAAARQ"]
[Mon Mar 23 23:16:11.046370 2026] [proxy_fcgi:error] [pid 52341:tid 52350] [client 158.158.96.39:63698] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 23:16:11.311352 2026] [proxy_fcgi:error] [pid 52341:tid 52361] [client 158.158.96.39:63698] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 23:16:11.563219 2026] [proxy_fcgi:error] [pid 52341:tid 52345] [client 158.158.96.39:63698] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 23:16:11.806573 2026] [proxy_fcgi:error] [pid 52341:tid 52358] [client 158.158.96.39:63698] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 23:16:12.060534 2026] [proxy_fcgi:error] [pid 52341:tid 52355] [client 158.158.96.39:63698] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 23:16:12.305043 2026] [proxy_fcgi:error] [pid 52341:tid 52366] [client 158.158.96.39:63698] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 23:16:12.548121 2026] [proxy_fcgi:error] [pid 52341:tid 52356] [client 158.158.96.39:63698] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 23:16:12.793572 2026] [proxy_fcgi:error] [pid 52341:tid 52352] [client 158.158.96.39:63698] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 23:16:13.051712 2026] [proxy_fcgi:error] [pid 52341:tid 52349] [client 158.158.96.39:63698] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 23:16:13.297305 2026] [proxy_fcgi:error] [pid 52341:tid 52348] [client 158.158.96.39:63698] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 23:16:13.541342 2026] [proxy_fcgi:error] [pid 52341:tid 52360] [client 158.158.96.39:63698] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 23:16:13.782187 2026] [:error] [pid 52341:tid 52350] [client 158.158.96.39:63698] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wta.php"] [unique_id "acFZPaPKTBDR2u47Gb0ZBwAAAUc"]
[Mon Mar 23 23:16:14.450863 2026] [:error] [pid 38306:tid 38326] [client 158.158.96.39:64984] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wta.php"] [unique_id "acFZPjkL8qwu-hHc6BjOCgAAARI"]
[Mon Mar 23 23:16:14.950577 2026] [:error] [pid 38306:tid 38330] [client 158.158.96.39:64288] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wta.php"] [unique_id "acFZPjkL8qwu-hHc6BjODwAAARY"]
[Mon Mar 23 23:16:15.483316 2026] [:error] [pid 52341:tid 52367] [client 158.158.96.39:63626] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wta.php"] [unique_id "acFZP6PKTBDR2u47Gb0ZCgAAAVg"]
[Mon Mar 23 23:16:16.054911 2026] [:error] [pid 52341:tid 52358] [client 158.158.96.39:63685] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/privacy.php"] [unique_id "acFZQKPKTBDR2u47Gb0ZCwAAAU8"]
[Mon Mar 23 23:16:16.595791 2026] [:error] [pid 38176:tid 38197] [client 158.158.96.39:64978] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/privacy.php"] [unique_id "acFZQEtG4qlh1gvNjuJgBgAAAAo"]
[Mon Mar 23 23:16:17.181076 2026] [:error] [pid 38306:tid 38327] [client 158.158.96.39:63714] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/privacy.php"] [unique_id "acFZQTkL8qwu-hHc6BjOGAAAARM"]
[Mon Mar 23 23:16:17.729813 2026] [:error] [pid 38306:tid 38318] [client 158.158.96.39:63623] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/privacy.php"] [unique_id "acFZQTkL8qwu-hHc6BjOGQAAAQo"]
[Mon Mar 23 23:16:19.125291 2026] [:error] [pid 52341:tid 52360] [client 158.158.96.39:64263] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws77.php"] [unique_id "acFZQ6PKTBDR2u47Gb0ZEQAAAVE"]
[Mon Mar 23 23:16:19.661452 2026] [:error] [pid 52341:tid 52350] [client 158.158.96.39:63667] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws77.php"] [unique_id "acFZQ6PKTBDR2u47Gb0ZEwAAAUc"]
[Mon Mar 23 23:16:20.626537 2026] [:error] [pid 38177:tid 38234] [client 158.158.96.39:63643] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws77.php"] [unique_id "acFZRHsYW-_HCI66MukGEgAAAFM"]
[Mon Mar 23 23:16:21.189122 2026] [:error] [pid 52341:tid 52354] [client 158.158.96.39:64292] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws77.php"] [unique_id "acFZRaPKTBDR2u47Gb0ZGAAAAUs"]
[Mon Mar 23 23:16:21.723212 2026] [:error] [pid 52341:tid 52352] [client 158.158.96.39:65005] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cc13.php"] [unique_id "acFZRaPKTBDR2u47Gb0ZGQAAAUk"]
[Mon Mar 23 23:16:22.234776 2026] [:error] [pid 38306:tid 38332] [client 158.158.96.39:63107] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cc13.php"] [unique_id "acFZRjkL8qwu-hHc6BjOHQAAARg"]
[Mon Mar 23 23:16:22.718654 2026] [:error] [pid 38306:tid 38309] [client 158.158.96.39:63683] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cc13.php"] [unique_id "acFZRjkL8qwu-hHc6BjOHwAAAQE"]
[Mon Mar 23 23:16:23.294306 2026] [:error] [pid 38306:tid 38311] [client 158.158.96.39:63145] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cc13.php"] [unique_id "acFZRzkL8qwu-hHc6BjOIAAAAQM"]
[Mon Mar 23 23:16:23.918106 2026] [:error] [pid 38306:tid 38321] [client 158.158.96.39:64271] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xper1.php"] [unique_id "acFZRzkL8qwu-hHc6BjOIQAAAQ0"]
[Mon Mar 23 23:16:24.472193 2026] [:error] [pid 38306:tid 38317] [client 158.158.96.39:63632] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xper1.php"] [unique_id "acFZSDkL8qwu-hHc6BjOIwAAAQk"]
[Mon Mar 23 23:16:24.953149 2026] [:error] [pid 38306:tid 38316] [client 158.158.96.39:63656] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xper1.php"] [unique_id "acFZSDkL8qwu-hHc6BjOJQAAAQg"]
[Mon Mar 23 23:16:25.456817 2026] [:error] [pid 38176:tid 38195] [client 158.158.96.39:64272] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xper1.php"] [unique_id "acFZSUtG4qlh1gvNjuJgFwAAAAg"]
[Mon Mar 23 23:16:25.942135 2026] [:error] [pid 38176:tid 38189] [client 158.158.96.39:63723] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gelio1.php"] [unique_id "acFZSUtG4qlh1gvNjuJgGAAAAAI"]
[Mon Mar 23 23:16:26.421200 2026] [:error] [pid 52341:tid 52360] [client 158.158.96.39:63617] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gelio1.php"] [unique_id "acFZSqPKTBDR2u47Gb0ZHQAAAVE"]
[Mon Mar 23 23:16:26.909292 2026] [:error] [pid 38176:tid 38190] [client 158.158.96.39:63640] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gelio1.php"] [unique_id "acFZSktG4qlh1gvNjuJgGwAAAAM"]
[Mon Mar 23 23:16:27.446688 2026] [:error] [pid 38176:tid 38196] [client 158.158.96.39:63116] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gelio1.php"] [unique_id "acFZS0tG4qlh1gvNjuJgHwAAAAk"]
[Mon Mar 23 23:16:27.927831 2026] [:error] [pid 38177:tid 38224] [client 158.158.96.39:64261] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/save.php"] [unique_id "acFZS3sYW-_HCI66MukGFQAAAEk"]
[Mon Mar 23 23:16:28.415029 2026] [:error] [pid 38177:tid 38227] [client 158.158.96.39:64285] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/save.php"] [unique_id "acFZTHsYW-_HCI66MukGGAAAAEw"]
[Mon Mar 23 23:16:28.896563 2026] [:error] [pid 52341:tid 52353] [client 158.158.96.39:64379] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/save.php"] [unique_id "acFZTKPKTBDR2u47Gb0ZJAAAAUo"]
[Mon Mar 23 23:16:29.378772 2026] [:error] [pid 52341:tid 52363] [client 158.158.96.39:63682] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/save.php"] [unique_id "acFZTaPKTBDR2u47Gb0ZJQAAAVQ"]
[Mon Mar 23 23:16:29.876076 2026] [:error] [pid 52341:tid 52357] [client 158.158.96.39:63694] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lib.php"] [unique_id "acFZTaPKTBDR2u47Gb0ZKgAAAU4"]
[Mon Mar 23 23:16:30.360920 2026] [:error] [pid 52341:tid 52347] [client 158.158.96.39:63641] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lib.php"] [unique_id "acFZTqPKTBDR2u47Gb0ZLgAAAUQ"]
[Mon Mar 23 23:16:30.848482 2026] [:error] [pid 38276:tid 38298] [client 158.158.96.39:63743] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lib.php"] [unique_id "acFZTpoKGiI-a7oME3IT9wAAANM"]
[Mon Mar 23 23:16:31.330395 2026] [:error] [pid 52341:tid 52350] [client 158.158.96.39:64287] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lib.php"] [unique_id "acFZT6PKTBDR2u47Gb0ZMQAAAUc"]
[Mon Mar 23 23:16:31.810716 2026] [:error] [pid 38176:tid 38192] [client 158.158.96.39:64328] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/roter.php"] [unique_id "acFZT0tG4qlh1gvNjuJgKQAAAAU"]
[Mon Mar 23 23:16:32.298542 2026] [:error] [pid 38176:tid 38196] [client 158.158.96.39:64958] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/roter.php"] [unique_id "acFZUEtG4qlh1gvNjuJgLwAAAAk"]
[Mon Mar 23 23:16:32.796879 2026] [:error] [pid 52341:tid 52354] [client 158.158.96.39:64296] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/roter.php"] [unique_id "acFZUKPKTBDR2u47Gb0ZMwAAAUs"]
[Mon Mar 23 23:16:33.308494 2026] [:error] [pid 38176:tid 38207] [client 158.158.96.39:63650] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/roter.php"] [unique_id "acFZUUtG4qlh1gvNjuJgNAAAABQ"]
[Mon Mar 23 23:16:33.802187 2026] [:error] [pid 52341:tid 52345] [client 158.158.96.39:64300] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/shellerr.php"] [unique_id "acFZUaPKTBDR2u47Gb0ZNwAAAUI"]
[Mon Mar 23 23:16:34.339867 2026] [:error] [pid 52341:tid 52348] [client 158.158.96.39:63664] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/shellerr.php"] [unique_id "acFZUqPKTBDR2u47Gb0ZOgAAAUU"]
[Mon Mar 23 23:16:34.866613 2026] [:error] [pid 38306:tid 38315] [client 158.158.96.39:64317] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/shellerr.php"] [unique_id "acFZUjkL8qwu-hHc6BjONAAAAQc"]
[Mon Mar 23 23:16:35.417594 2026] [:error] [pid 38176:tid 38189] [client 158.158.96.39:63733] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/shellerr.php"] [unique_id "acFZU0tG4qlh1gvNjuJgOAAAAAI"]
[Mon Mar 23 23:16:35.907290 2026] [:error] [pid 38177:tid 38222] [client 158.158.96.39:63115] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aee.php"] [unique_id "acFZU3sYW-_HCI66MukGIQAAAEc"]
[Mon Mar 23 23:16:36.423181 2026] [:error] [pid 38306:tid 38316] [client 158.158.96.39:64264] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aee.php"] [unique_id "acFZVDkL8qwu-hHc6BjONQAAAQg"]
[Mon Mar 23 23:16:36.954577 2026] [:error] [pid 52341:tid 52365] [client 158.158.96.39:63672] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aee.php"] [unique_id "acFZVKPKTBDR2u47Gb0ZRQAAAVY"]
[Mon Mar 23 23:16:37.477473 2026] [:error] [pid 38306:tid 38313] [client 158.158.96.39:64355] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aee.php"] [unique_id "acFZVTkL8qwu-hHc6BjOOQAAAQU"]
[Mon Mar 23 23:16:37.991348 2026] [:error] [pid 52341:tid 52348] [client 158.158.96.39:63705] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sweg.php"] [unique_id "acFZVaPKTBDR2u47Gb0ZSQAAAUU"]
[Mon Mar 23 23:16:38.484418 2026] [:error] [pid 52341:tid 52364] [client 158.158.96.39:64327] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sweg.php"] [unique_id "acFZVqPKTBDR2u47Gb0ZTAAAAVU"]
[Mon Mar 23 23:16:38.966790 2026] [:error] [pid 38306:tid 38321] [client 158.158.96.39:63709] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sweg.php"] [unique_id "acFZVjkL8qwu-hHc6BjOPQAAAQ0"]
[Mon Mar 23 23:16:39.491758 2026] [:error] [pid 38276:tid 38290] [client 158.158.96.39:63715] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sweg.php"] [unique_id "acFZV5oKGiI-a7oME3IUCAAAAMs"]
[Mon Mar 23 23:16:39.970646 2026] [:error] [pid 52341:tid 52358] [client 158.158.96.39:65007] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/phina.php"] [unique_id "acFZV6PKTBDR2u47Gb0ZUgAAAU8"]
[Mon Mar 23 23:16:40.451567 2026] [:error] [pid 52341:tid 52348] [client 158.158.96.39:63616] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/phina.php"] [unique_id "acFZWKPKTBDR2u47Gb0ZVwAAAUU"]
[Mon Mar 23 23:16:40.929289 2026] [:error] [pid 38177:tid 38220] [client 158.158.96.39:64304] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/phina.php"] [unique_id "acFZWHsYW-_HCI66MukGKgAAAEU"]
[Mon Mar 23 23:16:41.409510 2026] [:error] [pid 38306:tid 38324] [client 158.158.96.39:63659] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/phina.php"] [unique_id "acFZWTkL8qwu-hHc6BjOPwAAARA"]
[Mon Mar 23 23:16:41.948505 2026] [:error] [pid 38176:tid 38195] [client 158.158.96.39:64372] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/an7.php"] [unique_id "acFZWUtG4qlh1gvNjuJgQgAAAAg"]
[Mon Mar 23 23:16:42.468620 2026] [:error] [pid 38178:tid 38259] [client 158.158.96.39:63149] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/an7.php"] [unique_id "acFZWg0axWfXsVvR9udYdAAAAJE"]
[Mon Mar 23 23:16:42.973111 2026] [:error] [pid 38177:tid 38232] [client 158.158.96.39:64312] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/an7.php"] [unique_id "acFZWnsYW-_HCI66MukGMAAAAFE"]
[Mon Mar 23 23:16:43.457271 2026] [:error] [pid 38176:tid 38188] [client 158.158.96.39:65021] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/an7.php"] [unique_id "acFZW0tG4qlh1gvNjuJgRgAAAAE"]
[Mon Mar 23 23:16:43.947290 2026] [:error] [pid 38177:tid 38224] [client 158.158.96.39:64916] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rovoj.php"] [unique_id "acFZW3sYW-_HCI66MukGNAAAAEk"]
[Mon Mar 23 23:16:44.445324 2026] [:error] [pid 38276:tid 38281] [client 158.158.96.39:63128] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rovoj.php"] [unique_id "acFZXJoKGiI-a7oME3IUCwAAAMI"]
[Mon Mar 23 23:16:44.985062 2026] [:error] [pid 38176:tid 38196] [client 158.158.96.39:64368] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rovoj.php"] [unique_id "acFZXEtG4qlh1gvNjuJgTQAAAAk"]
[Mon Mar 23 23:16:45.465564 2026] [:error] [pid 38276:tid 38279] [client 158.158.96.39:64351] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rovoj.php"] [unique_id "acFZXZoKGiI-a7oME3IUEAAAAMA"]
[Mon Mar 23 23:16:45.970839 2026] [:error] [pid 38276:tid 38295] [client 158.158.96.39:63104] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/awh.php"] [unique_id "acFZXZoKGiI-a7oME3IUEwAAANA"]
[Mon Mar 23 23:16:46.456112 2026] [:error] [pid 52341:tid 52364] [client 158.158.96.39:63620] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/awh.php"] [unique_id "acFZXqPKTBDR2u47Gb0ZZAAAAVU"]
[Mon Mar 23 23:16:46.980103 2026] [:error] [pid 38178:tid 38249] [client 158.158.96.39:64267] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/awh.php"] [unique_id "acFZXg0axWfXsVvR9udYdQAAAIc"]
[Mon Mar 23 23:16:47.464068 2026] [:error] [pid 38176:tid 38204] [client 158.158.96.39:63730] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/awh.php"] [unique_id "acFZX0tG4qlh1gvNjuJgUwAAABE"]
[Mon Mar 23 23:16:47.946165 2026] [:error] [pid 38306:tid 38312] [client 158.158.96.39:63067] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/phpmini.php"] [unique_id "acFZXzkL8qwu-hHc6BjORQAAAQQ"]
[Mon Mar 23 23:16:48.425648 2026] [:error] [pid 38306:tid 38310] [client 158.158.96.39:63129] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/phpmini.php"] [unique_id "acFZYDkL8qwu-hHc6BjORgAAAQI"]
[Mon Mar 23 23:16:48.908464 2026] [:error] [pid 38306:tid 38326] [client 158.158.96.39:64949] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/phpmini.php"] [unique_id "acFZYDkL8qwu-hHc6BjORwAAARI"]
[Mon Mar 23 23:16:49.388383 2026] [:error] [pid 38177:tid 38223] [client 158.158.96.39:63729] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/phpmini.php"] [unique_id "acFZYXsYW-_HCI66MukGPgAAAEg"]
[Mon Mar 23 23:16:49.886901 2026] [:error] [pid 38176:tid 38198] [client 158.158.96.39:63687] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/caiij.php"] [unique_id "acFZYUtG4qlh1gvNjuJgVQAAAAs"]
[Mon Mar 23 23:16:50.376344 2026] [:error] [pid 52341:tid 52367] [client 158.158.96.39:63737] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/caiij.php"] [unique_id "acFZYqPKTBDR2u47Gb0ZaQAAAVg"]
[Mon Mar 23 23:16:50.859439 2026] [:error] [pid 38306:tid 38321] [client 158.158.96.39:63706] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/caiij.php"] [unique_id "acFZYjkL8qwu-hHc6BjOTwAAAQ0"]
[Mon Mar 23 23:16:51.349230 2026] [:error] [pid 38178:tid 38260] [client 158.158.96.39:64256] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/caiij.php"] [unique_id "acFZYw0axWfXsVvR9udYeAAAAJI"]
[Mon Mar 23 23:16:51.830193 2026] [:error] [pid 38306:tid 38317] [client 158.158.96.39:63739] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xex.php"] [unique_id "acFZYzkL8qwu-hHc6BjOUgAAAQk"]
[Mon Mar 23 23:16:52.311711 2026] [:error] [pid 52341:tid 52347] [client 158.158.96.39:63118] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xex.php"] [unique_id "acFZZKPKTBDR2u47Gb0ZcgAAAUQ"]
[Mon Mar 23 23:16:52.793188 2026] [:error] [pid 38178:tid 38265] [client 158.158.96.39:64284] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xex.php"] [unique_id "acFZZA0axWfXsVvR9udYegAAAJc"]
[Mon Mar 23 23:16:53.313343 2026] [:error] [pid 52341:tid 52352] [client 158.158.96.39:63704] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xex.php"] [unique_id "acFZZaPKTBDR2u47Gb0ZdwAAAUk"]
[Mon Mar 23 23:16:53.794087 2026] [:error] [pid 52341:tid 52363] [client 158.158.96.39:63647] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gk.php"] [unique_id "acFZZaPKTBDR2u47Gb0ZeQAAAVQ"]
[Mon Mar 23 23:16:54.272449 2026] [:error] [pid 52341:tid 52351] [client 158.158.96.39:63662] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gk.php"] [unique_id "acFZZqPKTBDR2u47Gb0ZfAAAAUg"]
[Mon Mar 23 23:16:54.753478 2026] [:error] [pid 38176:tid 38192] [client 158.158.96.39:63742] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gk.php"] [unique_id "acFZZktG4qlh1gvNjuJgWwAAAAU"]
[Mon Mar 23 23:16:55.264729 2026] [:error] [pid 38306:tid 38322] [client 158.158.96.39:63739] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gk.php"] [unique_id "acFZZzkL8qwu-hHc6BjOWQAAAQ4"]
[Mon Mar 23 23:16:55.746783 2026] [:error] [pid 38276:tid 38284] [client 158.158.96.39:63718] [client 158.158.96.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/app.php"] [unique_id "acFZZ5oKGiI-a7oME3IUFgAAAMU"]
[Mon Mar 23 23:16:56.226640 2026] [:error] [pid 38306:tid 38332] [client 158.158.96.39:63713] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/max.php"] [unique_id "acFZaDkL8qwu-hHc6BjOWwAAARg"]
[Mon Mar 23 23:16:56.721284 2026] [:error] [pid 38306:tid 38311] [client 158.158.96.39:63059] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/max.php"] [unique_id "acFZaDkL8qwu-hHc6BjOXgAAAQM"]
[Mon Mar 23 23:16:57.229800 2026] [:error] [pid 38177:tid 38218] [client 158.158.96.39:63148] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/max.php"] [unique_id "acFZaXsYW-_HCI66MukGRgAAAEM"]
[Mon Mar 23 23:25:29.206681 2026] [proxy_fcgi:error] [pid 52341:tid 52363] [client 40.85.246.124:12135] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 23:25:29.417312 2026] [proxy_fcgi:error] [pid 52341:tid 52349] [client 40.85.246.124:12135] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 23:25:29.627301 2026] [proxy_fcgi:error] [pid 52341:tid 52367] [client 40.85.246.124:12135] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 23:25:29.842468 2026] [proxy_fcgi:error] [pid 52341:tid 52360] [client 40.85.246.124:12135] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 23:25:30.056351 2026] [proxy_fcgi:error] [pid 52341:tid 52362] [client 40.85.246.124:12135] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 23:25:30.267197 2026] [proxy_fcgi:error] [pid 52341:tid 52353] [client 40.85.246.124:12135] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 23:25:30.481078 2026] [proxy_fcgi:error] [pid 52341:tid 52346] [client 40.85.246.124:12135] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 23:25:30.689645 2026] [proxy_fcgi:error] [pid 52341:tid 52366] [client 40.85.246.124:12135] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 23:25:30.900579 2026] [proxy_fcgi:error] [pid 52341:tid 52364] [client 40.85.246.124:12135] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 23:25:31.111793 2026] [proxy_fcgi:error] [pid 52341:tid 52367] [client 40.85.246.124:12135] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 23:25:31.317662 2026] [:error] [pid 52341:tid 52356] [client 40.85.246.124:12135] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp9.php"] [unique_id "acFba6PKTBDR2u47Gb0fxwAAAU0"]
[Mon Mar 23 23:25:31.728493 2026] [:error] [pid 38306:tid 38317] [client 40.85.246.124:12032] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp9.php"] [unique_id "acFbazkL8qwu-hHc6BjSFwAAAQk"]
[Mon Mar 23 23:25:32.142484 2026] [:error] [pid 38306:tid 38331] [client 40.85.246.124:12127] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp9.php"] [unique_id "acFbbDkL8qwu-hHc6BjSGwAAARc"]
[Mon Mar 23 23:25:32.552981 2026] [:error] [pid 38176:tid 38192] [client 40.85.246.124:12034] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp9.php"] [unique_id "acFbbEtG4qlh1gvNjuJjNAAAAAU"]
[Mon Mar 23 23:25:32.967171 2026] [:error] [pid 52341:tid 52360] [client 40.85.246.124:12103] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/path.php"] [unique_id "acFbbKPKTBDR2u47Gb0fyAAAAVE"]
[Mon Mar 23 23:25:33.379094 2026] [:error] [pid 52341:tid 52343] [client 40.85.246.124:12081] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/path.php"] [unique_id "acFbbaPKTBDR2u47Gb0fyQAAAUA"]
[Mon Mar 23 23:25:33.790225 2026] [:error] [pid 38276:tid 38296] [client 40.85.246.124:12110] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/path.php"] [unique_id "acFbbZoKGiI-a7oME3IW0wAAANE"]
[Mon Mar 23 23:25:34.199292 2026] [:error] [pid 38276:tid 38282] [client 40.85.246.124:12123] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/path.php"] [unique_id "acFbbpoKGiI-a7oME3IW1QAAAMM"]
[Mon Mar 23 23:25:34.612332 2026] [:error] [pid 38306:tid 38330] [client 40.85.246.124:12131] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wdf.php"] [unique_id "acFbbjkL8qwu-hHc6BjSIAAAARY"]
[Mon Mar 23 23:25:35.023381 2026] [:error] [pid 38178:tid 38256] [client 40.85.246.124:12111] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wdf.php"] [unique_id "acFbbw0axWfXsVvR9udaywAAAI4"]
[Mon Mar 23 23:25:35.435142 2026] [:error] [pid 38178:tid 38246] [client 40.85.246.124:12054] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wdf.php"] [unique_id "acFbbw0axWfXsVvR9udazQAAAIQ"]
[Mon Mar 23 23:25:35.845658 2026] [:error] [pid 38176:tid 38196] [client 40.85.246.124:12047] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wdf.php"] [unique_id "acFbb0tG4qlh1gvNjuJjOQAAAAk"]
[Mon Mar 23 23:25:36.272209 2026] [:error] [pid 38176:tid 38203] [client 40.85.246.124:12150] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fleen.php"] [unique_id "acFbcEtG4qlh1gvNjuJjOwAAABA"]
[Mon Mar 23 23:25:36.683110 2026] [:error] [pid 38306:tid 38319] [client 40.85.246.124:12067] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fleen.php"] [unique_id "acFbcDkL8qwu-hHc6BjSIgAAAQs"]
[Mon Mar 23 23:25:37.107746 2026] [:error] [pid 38306:tid 38325] [client 40.85.246.124:12042] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fleen.php"] [unique_id "acFbcTkL8qwu-hHc6BjSJAAAARE"]
[Mon Mar 23 23:25:37.517148 2026] [:error] [pid 38306:tid 38326] [client 40.85.246.124:12097] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fleen.php"] [unique_id "acFbcTkL8qwu-hHc6BjSKAAAARI"]
[Mon Mar 23 23:25:37.935418 2026] [:error] [pid 38177:tid 38230] [client 40.85.246.124:12108] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-tem.php"] [unique_id "acFbcXsYW-_HCI66MukIEwAAAE8"]
[Mon Mar 23 23:25:38.344454 2026] [:error] [pid 38276:tid 38288] [client 40.85.246.124:12114] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-tem.php"] [unique_id "acFbcpoKGiI-a7oME3IW1gAAAMk"]
[Mon Mar 23 23:25:38.755439 2026] [:error] [pid 38276:tid 38292] [client 40.85.246.124:12132] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-tem.php"] [unique_id "acFbcpoKGiI-a7oME3IW2AAAAM0"]
[Mon Mar 23 23:25:39.220168 2026] [:error] [pid 38306:tid 38310] [client 40.85.246.124:12105] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-tem.php"] [unique_id "acFbczkL8qwu-hHc6BjSLQAAAQI"]
[Mon Mar 23 23:25:39.640520 2026] [:error] [pid 38276:tid 38283] [client 40.85.246.124:12128] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/av6m.php"] [unique_id "acFbc5oKGiI-a7oME3IW3AAAAMQ"]
[Mon Mar 23 23:25:40.053248 2026] [:error] [pid 52341:tid 52344] [client 40.85.246.124:12046] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/av6m.php"] [unique_id "acFbdKPKTBDR2u47Gb0fywAAAUE"]
[Mon Mar 23 23:25:40.462916 2026] [:error] [pid 52341:tid 52359] [client 40.85.246.124:12159] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/av6m.php"] [unique_id "acFbdKPKTBDR2u47Gb0fzQAAAVA"]
[Mon Mar 23 23:25:40.872929 2026] [:error] [pid 38178:tid 38261] [client 40.85.246.124:12039] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/av6m.php"] [unique_id "acFbdA0axWfXsVvR9uda0gAAAJM"]
[Mon Mar 23 23:25:41.299576 2026] [:error] [pid 38178:tid 38245] [client 40.85.246.124:12134] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/autogooey.php"] [unique_id "acFbdQ0axWfXsVvR9uda1AAAAIM"]
[Mon Mar 23 23:25:41.727751 2026] [:error] [pid 38178:tid 38264] [client 40.85.246.124:12154] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/autogooey.php"] [unique_id "acFbdQ0axWfXsVvR9uda1QAAAJY"]
[Mon Mar 23 23:25:42.188705 2026] [:error] [pid 38306:tid 38321] [client 40.85.246.124:12118] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/autogooey.php"] [unique_id "acFbdjkL8qwu-hHc6BjSLgAAAQ0"]
[Mon Mar 23 23:25:42.599689 2026] [:error] [pid 38306:tid 38318] [client 40.85.246.124:11992] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/autogooey.php"] [unique_id "acFbdjkL8qwu-hHc6BjSLwAAAQo"]
[Mon Mar 23 23:25:43.021780 2026] [:error] [pid 38178:tid 38243] [client 40.85.246.124:12143] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/btx25.php"] [unique_id "acFbdw0axWfXsVvR9uda1wAAAIE"]
[Mon Mar 23 23:25:43.463442 2026] [:error] [pid 38178:tid 38257] [client 40.85.246.124:12098] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/btx25.php"] [unique_id "acFbdw0axWfXsVvR9uda2QAAAI8"]
[Mon Mar 23 23:25:43.873428 2026] [:error] [pid 38276:tid 38284] [client 40.85.246.124:11974] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/btx25.php"] [unique_id "acFbd5oKGiI-a7oME3IW7AAAAMU"]
[Mon Mar 23 23:25:44.286333 2026] [:error] [pid 38178:tid 38256] [client 40.85.246.124:12121] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/btx25.php"] [unique_id "acFbeA0axWfXsVvR9uda2wAAAI4"]
[Mon Mar 23 23:25:44.696325 2026] [:error] [pid 38177:tid 38233] [client 40.85.246.124:12043] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mga.php"] [unique_id "acFbeHsYW-_HCI66MukIGgAAAFI"]
[Mon Mar 23 23:25:45.107085 2026] [:error] [pid 38177:tid 38215] [client 40.85.246.124:12139] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mga.php"] [unique_id "acFbeXsYW-_HCI66MukIHwAAAEA"]
[Mon Mar 23 23:25:45.538970 2026] [:error] [pid 38276:tid 38288] [client 40.85.246.124:12048] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mga.php"] [unique_id "acFbeZoKGiI-a7oME3IW7wAAAMk"]
[Mon Mar 23 23:25:45.953405 2026] [:error] [pid 38306:tid 38327] [client 40.85.246.124:12142] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mga.php"] [unique_id "acFbeTkL8qwu-hHc6BjSMgAAARM"]
[Mon Mar 23 23:25:46.365721 2026] [:error] [pid 38276:tid 38292] [client 40.85.246.124:12041] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/maxro.php"] [unique_id "acFbepoKGiI-a7oME3IW8gAAAM0"]
[Mon Mar 23 23:25:46.777533 2026] [:error] [pid 52341:tid 52365] [client 40.85.246.124:11973] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/maxro.php"] [unique_id "acFbeqPKTBDR2u47Gb0f1AAAAVY"]
[Mon Mar 23 23:25:47.189920 2026] [:error] [pid 52341:tid 52362] [client 40.85.246.124:12116] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/maxro.php"] [unique_id "acFbe6PKTBDR2u47Gb0f2AAAAVM"]
[Mon Mar 23 23:25:47.603946 2026] [:error] [pid 52341:tid 52355] [client 40.85.246.124:12104] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/maxro.php"] [unique_id "acFbe6PKTBDR2u47Gb0f2wAAAUw"]
[Mon Mar 23 23:25:48.015913 2026] [:error] [pid 52341:tid 52348] [client 40.85.246.124:12117] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/agg.php"] [unique_id "acFbfKPKTBDR2u47Gb0f3wAAAUU"]
[Mon Mar 23 23:25:48.451779 2026] [:error] [pid 38276:tid 38283] [client 40.85.246.124:12084] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/agg.php"] [unique_id "acFbfJoKGiI-a7oME3IW9QAAAMQ"]
[Mon Mar 23 23:25:48.868898 2026] [:error] [pid 38276:tid 38297] [client 40.85.246.124:12078] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/agg.php"] [unique_id "acFbfJoKGiI-a7oME3IW9wAAANI"]
[Mon Mar 23 23:25:49.281730 2026] [:error] [pid 38178:tid 38255] [client 40.85.246.124:12091] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/agg.php"] [unique_id "acFbfQ0axWfXsVvR9uda3wAAAI0"]
[Mon Mar 23 23:25:49.709790 2026] [:error] [pid 52341:tid 52365] [client 40.85.246.124:12124] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/pass4.php"] [unique_id "acFbfaPKTBDR2u47Gb0f4gAAAVY"]
[Mon Mar 23 23:25:50.121087 2026] [:error] [pid 52341:tid 52343] [client 40.85.246.124:12037] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/pass4.php"] [unique_id "acFbfqPKTBDR2u47Gb0f5AAAAUA"]
[Mon Mar 23 23:25:50.532696 2026] [:error] [pid 38176:tid 38190] [client 40.85.246.124:12146] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/pass4.php"] [unique_id "acFbfktG4qlh1gvNjuJjPQAAAAM"]
[Mon Mar 23 23:25:50.948670 2026] [:error] [pid 38176:tid 38200] [client 40.85.246.124:12113] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/pass4.php"] [unique_id "acFbfktG4qlh1gvNjuJjQAAAAA0"]
[Mon Mar 23 23:25:51.359313 2026] [:error] [pid 38178:tid 38254] [client 40.85.246.124:12109] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wsvvs.php"] [unique_id "acFbfw0axWfXsVvR9uda4AAAAIw"]
[Mon Mar 23 23:25:51.808999 2026] [:error] [pid 38177:tid 38217] [client 40.85.246.124:12052] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wsvvs.php"] [unique_id "acFbf3sYW-_HCI66MukIJQAAAEI"]
[Mon Mar 23 23:25:52.218219 2026] [:error] [pid 38306:tid 38330] [client 40.85.246.124:12152] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wsvvs.php"] [unique_id "acFbgDkL8qwu-hHc6BjSPQAAARY"]
[Mon Mar 23 23:25:52.627810 2026] [:error] [pid 52341:tid 52355] [client 40.85.246.124:12140] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wsvvs.php"] [unique_id "acFbgKPKTBDR2u47Gb0f5wAAAUw"]
[Mon Mar 23 23:25:53.038530 2026] [:error] [pid 52341:tid 52359] [client 40.85.246.124:12069] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/G-In.php"] [unique_id "acFbgaPKTBDR2u47Gb0f6gAAAVA"]
[Mon Mar 23 23:25:53.451986 2026] [:error] [pid 52341:tid 52354] [client 40.85.246.124:12155] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/G-In.php"] [unique_id "acFbgaPKTBDR2u47Gb0f6wAAAUs"]
[Mon Mar 23 23:25:53.863345 2026] [:error] [pid 38178:tid 38249] [client 40.85.246.124:12076] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/G-In.php"] [unique_id "acFbgQ0axWfXsVvR9uda4gAAAIc"]
[Mon Mar 23 23:25:54.304992 2026] [:error] [pid 38176:tid 38205] [client 40.85.246.124:12058] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/G-In.php"] [unique_id "acFbgktG4qlh1gvNjuJjQgAAABI"]
[Mon Mar 23 23:25:54.717115 2026] [:error] [pid 38176:tid 38210] [client 40.85.246.124:12101] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/edit.php"] [unique_id "acFbgktG4qlh1gvNjuJjRAAAABc"]
[Mon Mar 23 23:25:55.126852 2026] [:error] [pid 38178:tid 38247] [client 40.85.246.124:12044] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/edit.php"] [unique_id "acFbgw0axWfXsVvR9uda8AAAAIU"]
[Mon Mar 23 23:25:55.537076 2026] [:error] [pid 52341:tid 52349] [client 40.85.246.124:12036] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/edit.php"] [unique_id "acFbg6PKTBDR2u47Gb0f8AAAAUY"]
[Mon Mar 23 23:25:55.950793 2026] [:error] [pid 38178:tid 38261] [client 40.85.246.124:12090] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/edit.php"] [unique_id "acFbgw0axWfXsVvR9uda9wAAAJM"]
[Mon Mar 23 23:25:56.362649 2026] [:error] [pid 38306:tid 38317] [client 40.85.246.124:12137] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ioxi-o.php"] [unique_id "acFbhDkL8qwu-hHc6BjSZwAAAQk"]
[Mon Mar 23 23:25:56.779785 2026] [:error] [pid 38306:tid 38324] [client 40.85.246.124:12100] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ioxi-o.php"] [unique_id "acFbhDkL8qwu-hHc6BjSagAAARA"]
[Mon Mar 23 23:25:57.188814 2026] [:error] [pid 38306:tid 38331] [client 40.85.246.124:12017] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ioxi-o.php"] [unique_id "acFbhTkL8qwu-hHc6BjSbQAAARc"]
[Mon Mar 23 23:25:57.600359 2026] [:error] [pid 38178:tid 38247] [client 40.85.246.124:12051] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ioxi-o.php"] [unique_id "acFbhQ0axWfXsVvR9udbAQAAAIU"]
[Mon Mar 23 23:25:58.058729 2026] [:error] [pid 38306:tid 38316] [client 40.85.246.124:12092] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "acFbhjkL8qwu-hHc6BjSeQAAAQg"]
[Mon Mar 23 23:25:58.474113 2026] [:error] [pid 52341:tid 52355] [client 40.85.246.124:11971] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "acFbhqPKTBDR2u47Gb0f9wAAAUw"]
[Mon Mar 23 23:25:58.886106 2026] [:error] [pid 52341:tid 52351] [client 40.85.246.124:12033] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "acFbhqPKTBDR2u47Gb0f-QAAAUg"]
[Mon Mar 23 23:25:59.301054 2026] [:error] [pid 52341:tid 52366] [client 40.85.246.124:12094] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "acFbh6PKTBDR2u47Gb0f_AAAAVc"]
[Mon Mar 23 23:25:59.710331 2026] [:error] [pid 52341:tid 52346] [client 40.85.246.124:12063] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/66.php"] [unique_id "acFbh6PKTBDR2u47Gb0f_gAAAUM"]
[Mon Mar 23 23:26:00.123657 2026] [:error] [pid 38177:tid 38223] [client 40.85.246.124:12049] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/66.php"] [unique_id "acFbiHsYW-_HCI66MukIRgAAAEg"]
[Mon Mar 23 23:26:00.539584 2026] [:error] [pid 38276:tid 38281] [client 40.85.246.124:12125] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/66.php"] [unique_id "acFbiJoKGiI-a7oME3IW_QAAAMI"]
[Mon Mar 23 23:26:00.950544 2026] [:error] [pid 38177:tid 38230] [client 40.85.246.124:12151] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/66.php"] [unique_id "acFbiHsYW-_HCI66MukIRwAAAE8"]
[Mon Mar 23 23:26:01.366604 2026] [:error] [pid 38177:tid 38224] [client 40.85.246.124:12066] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "acFbiXsYW-_HCI66MukISAAAAEk"]
[Mon Mar 23 23:26:01.778298 2026] [:error] [pid 38176:tid 38192] [client 40.85.246.124:11904] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "acFbiUtG4qlh1gvNjuJjUwAAAAU"]
[Mon Mar 23 23:26:02.198777 2026] [:error] [pid 52341:tid 52356] [client 40.85.246.124:12133] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "acFbiqPKTBDR2u47Gb0gBwAAAU0"]
[Mon Mar 23 23:26:02.608804 2026] [:error] [pid 38306:tid 38318] [client 40.85.246.124:12024] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "acFbijkL8qwu-hHc6BjSggAAAQo"]
[Mon Mar 23 23:26:03.026488 2026] [:error] [pid 38177:tid 38236] [client 40.85.246.124:12045] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gifclass.php"] [unique_id "acFbi3sYW-_HCI66MukISQAAAFU"]
[Mon Mar 23 23:26:03.440184 2026] [:error] [pid 38306:tid 38321] [client 40.85.246.124:12126] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gifclass.php"] [unique_id "acFbizkL8qwu-hHc6BjShAAAAQ0"]
[Mon Mar 23 23:26:03.853707 2026] [:error] [pid 52341:tid 52362] [client 40.85.246.124:12087] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gifclass.php"] [unique_id "acFbi6PKTBDR2u47Gb0gDQAAAVM"]
[Mon Mar 23 23:26:04.269651 2026] [:error] [pid 38306:tid 38332] [client 40.85.246.124:11991] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gifclass.php"] [unique_id "acFbjDkL8qwu-hHc6BjSiAAAARg"]
[Mon Mar 23 23:26:04.682993 2026] [:error] [pid 52341:tid 52361] [client 40.85.246.124:12085] [client 40.85.246.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "acFbjKPKTBDR2u47Gb0gEQAAAVI"]
[Mon Mar 23 23:26:05.110613 2026] [:error] [pid 52341:tid 52346] [client 40.85.246.124:12141] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "acFbjaPKTBDR2u47Gb0gFAAAAUM"]
[Mon Mar 23 23:26:05.522472 2026] [:error] [pid 52341:tid 52350] [client 40.85.246.124:12062] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "acFbjaPKTBDR2u47Gb0gGAAAAUc"]
[Mon Mar 23 23:26:05.932566 2026] [:error] [pid 52341:tid 52362] [client 40.85.246.124:12053] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "acFbjaPKTBDR2u47Gb0gGQAAAVM"]
[Mon Mar 23 23:26:06.349160 2026] [:error] [pid 38276:tid 38285] [client 40.85.246.124:12035] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "acFbjpoKGiI-a7oME3IXAAAAAMY"]
[Mon Mar 23 23:26:06.762126 2026] [:error] [pid 38276:tid 38289] [client 40.85.246.124:12061] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "acFbjpoKGiI-a7oME3IXAgAAAMo"]
[Mon Mar 23 23:26:07.187644 2026] [:error] [pid 38306:tid 38308] [client 40.85.246.124:11998] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "acFbjzkL8qwu-hHc6BjSiQAAAQA"]
[Mon Mar 23 23:26:07.597623 2026] [:error] [pid 52341:tid 52355] [client 40.85.246.124:11993] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "acFbj6PKTBDR2u47Gb0gHwAAAUw"]
[Mon Mar 23 23:26:08.008272 2026] [:error] [pid 38177:tid 38225] [client 40.85.246.124:12011] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/assets/css/index.php"] [unique_id "acFbkHsYW-_HCI66MukISgAAAEo"]
[Mon Mar 23 23:26:08.440524 2026] [:error] [pid 38276:tid 38293] [client 40.85.246.124:11981] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/assets/css/index.php"] [unique_id "acFbkJoKGiI-a7oME3IXBwAAAM4"]
[Mon Mar 23 23:26:08.850151 2026] [:error] [pid 38176:tid 38206] [client 40.85.246.124:12020] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/assets/css/index.php"] [unique_id "acFbkEtG4qlh1gvNjuJjVgAAABM"]
[Mon Mar 23 23:26:09.261994 2026] [:error] [pid 52341:tid 52362] [client 40.85.246.124:12050] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/assets/css/index.php"] [unique_id "acFbkaPKTBDR2u47Gb0gJAAAAVM"]
[Tue Mar 24 01:03:44.706404 2026] [proxy_fcgi:error] [pid 56238:tid 56350] [client 74.248.130.207:11807] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:03:44.974704 2026] [proxy_fcgi:error] [pid 56238:tid 56353] [client 74.248.130.207:11807] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:03:45.257097 2026] [proxy_fcgi:error] [pid 56238:tid 56366] [client 74.248.130.207:11807] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:03:46.080782 2026] [proxy_fcgi:error] [pid 56238:tid 56364] [client 74.248.130.207:11807] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:03:48.304568 2026] [proxy_fcgi:error] [pid 56238:tid 56365] [client 74.248.130.207:11807] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:03:48.782166 2026] [proxy_fcgi:error] [pid 56238:tid 56363] [client 74.248.130.207:11807] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:03:49.054801 2026] [proxy_fcgi:error] [pid 56238:tid 56367] [client 74.248.130.207:11807] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:03:49.352436 2026] [proxy_fcgi:error] [pid 56238:tid 56349] [client 74.248.130.207:11807] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:03:49.797779 2026] [proxy_fcgi:error] [pid 56238:tid 56364] [client 74.248.130.207:11807] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:03:50.056366 2026] [proxy_fcgi:error] [pid 56238:tid 56371] [client 74.248.130.207:11807] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:03:50.393783 2026] [:error] [pid 56238:tid 56355] [client 74.248.130.207:11807] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tx81.php"] [unique_id "acFydlSqceFAZRgPDq6T2wAAAMc"]
[Tue Mar 24 01:04:02.400121 2026] [:error] [pid 56238:tid 56350] [client 74.248.130.207:11645] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tx81.php"] [unique_id "acFyglSqceFAZRgPDq6T-gAAAMI"]
[Tue Mar 24 01:04:04.264154 2026] [:error] [pid 56237:tid 56344] [client 74.248.130.207:11342] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tx81.php"] [unique_id "acFyhAymO0MnzQb90MMfnQAAAJc"]
[Tue Mar 24 01:04:05.428022 2026] [:error] [pid 56238:tid 56354] [client 74.248.130.207:12075] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tx81.php"] [unique_id "acFyhVSqceFAZRgPDq6UBAAAAMY"]
[Tue Mar 24 01:04:06.092116 2026] [:error] [pid 56435:tid 56499] [client 74.248.130.207:11799] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xr.php"] [unique_id "acFyhsrwr-l5A-s9ryBr9gAAAQA"]
[Tue Mar 24 01:04:06.781285 2026] [:error] [pid 56236:tid 56311] [client 74.248.130.207:12109] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xr.php"] [unique_id "acFyhnapFgYp0uZ8twAdEQAAAFI"]
[Tue Mar 24 01:04:08.068195 2026] [:error] [pid 56435:tid 56523] [client 74.248.130.207:11778] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xr.php"] [unique_id "acFyiMrwr-l5A-s9ryBr-QAAARY"]
[Tue Mar 24 01:04:08.845155 2026] [:error] [pid 56435:tid 56504] [client 74.248.130.207:12084] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xr.php"] [unique_id "acFyiMrwr-l5A-s9ryBr-gAAAQU"]
[Tue Mar 24 01:04:09.951526 2026] [:error] [pid 56237:tid 56326] [client 74.248.130.207:12069] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/p.php"] [unique_id "acFyiQymO0MnzQb90MMfpQAAAIU"]
[Tue Mar 24 01:04:10.866862 2026] [:error] [pid 56435:tid 56522] [client 74.248.130.207:11780] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/p.php"] [unique_id "acFyisrwr-l5A-s9ryBr_gAAARU"]
[Tue Mar 24 01:04:11.551071 2026] [:error] [pid 56236:tid 56311] [client 74.248.130.207:11363] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/p.php"] [unique_id "acFyi3apFgYp0uZ8twAdIAAAAFI"]
[Tue Mar 24 01:04:12.445334 2026] [:error] [pid 56238:tid 56355] [client 74.248.130.207:11526] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/p.php"] [unique_id "acFyjFSqceFAZRgPDq6UGwAAAMc"]
[Tue Mar 24 01:04:13.028163 2026] [:error] [pid 56237:tid 56330] [client 74.248.130.207:12099] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zrerbwfu.php"] [unique_id "acFyjQymO0MnzQb90MMfqgAAAIk"]
[Tue Mar 24 01:04:14.569854 2026] [:error] [pid 56237:tid 56332] [client 74.248.130.207:11277] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zrerbwfu.php"] [unique_id "acFyjgymO0MnzQb90MMfrgAAAIs"]
[Tue Mar 24 01:04:15.412720 2026] [:error] [pid 56238:tid 56357] [client 74.248.130.207:11635] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zrerbwfu.php"] [unique_id "acFyj1SqceFAZRgPDq6UJwAAAMk"]
[Tue Mar 24 01:04:16.472436 2026] [:error] [pid 56237:tid 56327] [client 74.248.130.207:12039] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zrerbwfu.php"] [unique_id "acFykAymO0MnzQb90MMftAAAAIY"]
[Tue Mar 24 01:04:17.964006 2026] [:error] [pid 56237:tid 56336] [client 74.248.130.207:12082] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/black.php"] [unique_id "acFykQymO0MnzQb90MMfugAAAI8"]
[Tue Mar 24 01:04:20.545582 2026] [:error] [pid 56435:tid 56524] [client 74.248.130.207:11819] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/black.php"] [unique_id "acFylMrwr-l5A-s9ryBsHQAAARc"]
[Tue Mar 24 01:04:21.204814 2026] [:error] [pid 56435:tid 56507] [client 74.248.130.207:11885] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/black.php"] [unique_id "acFylcrwr-l5A-s9ryBsHgAAAQc"]
[Tue Mar 24 01:04:22.727092 2026] [:error] [pid 56238:tid 56370] [client 74.248.130.207:11347] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/black.php"] [unique_id "acFyllSqceFAZRgPDq6UPAAAANY"]
[Tue Mar 24 01:04:23.998153 2026] [:error] [pid 56435:tid 56500] [client 74.248.130.207:11551] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nz.php"] [unique_id "acFyl8rwr-l5A-s9ryBsKAAAAQE"]
[Tue Mar 24 01:04:25.119787 2026] [:error] [pid 56435:tid 56514] [client 74.248.130.207:12297] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nz.php"] [unique_id "acFymcrwr-l5A-s9ryBsKwAAAQ0"]
[Tue Mar 24 01:04:26.131416 2026] [:error] [pid 56435:tid 56499] [client 74.248.130.207:11577] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nz.php"] [unique_id "acFymsrwr-l5A-s9ryBsMQAAAQA"]
[Tue Mar 24 01:04:27.418289 2026] [:error] [pid 56237:tid 56336] [client 74.248.130.207:11646] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nz.php"] [unique_id "acFymwymO0MnzQb90MMf3AAAAI8"]
[Tue Mar 24 01:04:28.601955 2026] [:error] [pid 56238:tid 56360] [client 74.248.130.207:11600] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vv.php"] [unique_id "acFynFSqceFAZRgPDq6UVQAAAMw"]
[Tue Mar 24 01:04:29.378603 2026] [:error] [pid 56236:tid 56297] [client 74.248.130.207:12319] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vv.php"] [unique_id "acFynXapFgYp0uZ8twAdLwAAAEQ"]
[Tue Mar 24 01:04:31.489692 2026] [:error] [pid 56435:tid 56515] [client 74.248.130.207:12374] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vv.php"] [unique_id "acFyn8rwr-l5A-s9ryBsQwAAAQ4"]
[Tue Mar 24 01:04:32.167505 2026] [:error] [pid 56435:tid 56499] [client 74.248.130.207:11790] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vv.php"] [unique_id "acFyoMrwr-l5A-s9ryBsSwAAAQA"]
[Tue Mar 24 01:04:33.561490 2026] [:error] [pid 56435:tid 56508] [client 74.248.130.207:11075] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fff.php"] [unique_id "acFyocrwr-l5A-s9ryBsUQAAAQg"]
[Tue Mar 24 01:04:36.338053 2026] [:error] [pid 56236:tid 56310] [client 74.248.130.207:12097] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fff.php"] [unique_id "acFypHapFgYp0uZ8twAdPQAAAFE"]
[Tue Mar 24 01:04:37.107955 2026] [:error] [pid 56435:tid 56520] [client 74.248.130.207:12104] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fff.php"] [unique_id "acFypcrwr-l5A-s9ryBsWQAAARM"]
[Tue Mar 24 01:04:38.188062 2026] [:error] [pid 56236:tid 56309] [client 74.248.130.207:11602] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fff.php"] [unique_id "acFypnapFgYp0uZ8twAdQgAAAFA"]
[Tue Mar 24 01:04:39.220092 2026] [:error] [pid 56238:tid 56370] [client 74.248.130.207:12139] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-scxy.php"] [unique_id "acFyp1SqceFAZRgPDq6UdgAAANY"]
[Tue Mar 24 01:04:39.954160 2026] [:error] [pid 56435:tid 56516] [client 74.248.130.207:12056] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-scxy.php"] [unique_id "acFyp8rwr-l5A-s9ryBsYAAAAQ8"]
[Tue Mar 24 01:04:41.063054 2026] [:error] [pid 56238:tid 56349] [client 74.248.130.207:11777] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-scxy.php"] [unique_id "acFyqVSqceFAZRgPDq6UgAAAAME"]
[Tue Mar 24 01:04:42.202675 2026] [:error] [pid 56238:tid 56352] [client 74.248.130.207:11623] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-scxy.php"] [unique_id "acFyqlSqceFAZRgPDq6UiAAAAMQ"]
[Tue Mar 24 01:04:42.973719 2026] [:error] [pid 56238:tid 56368] [client 74.248.130.207:11872] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ccou1.php"] [unique_id "acFyqlSqceFAZRgPDq6UjgAAANQ"]
[Tue Mar 24 01:04:43.754398 2026] [:error] [pid 56238:tid 56354] [client 74.248.130.207:12035] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ccou1.php"] [unique_id "acFyq1SqceFAZRgPDq6UkgAAAMY"]
[Tue Mar 24 01:04:44.589537 2026] [:error] [pid 56435:tid 56499] [client 74.248.130.207:11592] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ccou1.php"] [unique_id "acFyrMrwr-l5A-s9ryBsdwAAAQA"]
[Tue Mar 24 01:04:45.368475 2026] [:error] [pid 56435:tid 56513] [client 74.248.130.207:11785] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ccou1.php"] [unique_id "acFyrcrwr-l5A-s9ryBsfQAAAQw"]
[Tue Mar 24 01:04:47.691524 2026] [:error] [pid 56238:tid 56366] [client 74.248.130.207:11612] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-the1.php"] [unique_id "acFyr1SqceFAZRgPDq6UnAAAANI"]
[Tue Mar 24 01:04:48.501432 2026] [:error] [pid 56236:tid 56304] [client 74.248.130.207:12406] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-the1.php"] [unique_id "acFysHapFgYp0uZ8twAdTgAAAEs"]
[Tue Mar 24 01:04:49.651299 2026] [:error] [pid 56238:tid 56360] [client 74.248.130.207:11595] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-the1.php"] [unique_id "acFysVSqceFAZRgPDq6UwAAAAMw"]
[Tue Mar 24 01:04:50.487887 2026] [proxy_fcgi:error] [pid 56236:tid 56315] [client 74.248.130.207:11190] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:04:50.811454 2026] [proxy_fcgi:error] [pid 56236:tid 56296] [client 74.248.130.207:11190] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:04:51.068971 2026] [:error] [pid 56236:tid 56297] [client 74.248.130.207:11190] [client 74.248.130.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/cah.php"] [unique_id "acFys3apFgYp0uZ8twAdZAAAAEQ"]
[Tue Mar 24 01:04:52.148743 2026] [proxy_fcgi:error] [pid 56435:tid 56525] [client 74.248.130.207:12122] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:04:52.690750 2026] [proxy_fcgi:error] [pid 56435:tid 56524] [client 74.248.130.207:12122] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:04:53.032205 2026] [proxy_fcgi:error] [pid 56435:tid 56500] [client 74.248.130.207:12122] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:04:53.423253 2026] [proxy_fcgi:error] [pid 56435:tid 56509] [client 74.248.130.207:12122] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:04:53.737433 2026] [proxy_fcgi:error] [pid 56435:tid 56504] [client 74.248.130.207:12122] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:04:54.221207 2026] [proxy_fcgi:error] [pid 56435:tid 56521] [client 74.248.130.207:12122] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:04:54.556873 2026] [proxy_fcgi:error] [pid 56435:tid 56525] [client 74.248.130.207:12122] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:04:56.205349 2026] [proxy_fcgi:error] [pid 56435:tid 56508] [client 74.248.130.207:12122] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:04:56.462187 2026] [:error] [pid 56435:tid 56501] [client 74.248.130.207:12122] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/as1337.php"] [unique_id "acFyuMrwr-l5A-s9ryBs6QAAAQI"]
[Tue Mar 24 01:04:57.911130 2026] [:error] [pid 56238:tid 56370] [client 74.248.130.207:11829] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/as1337.php"] [unique_id "acFyuVSqceFAZRgPDq6U2wAAANY"]
[Tue Mar 24 01:04:59.269070 2026] [:error] [pid 56237:tid 56327] [client 74.248.130.207:11587] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/as1337.php"] [unique_id "acFyuwymO0MnzQb90MMgKwAAAIY"]
[Tue Mar 24 01:05:01.230669 2026] [:error] [pid 56237:tid 56330] [client 74.248.130.207:12391] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/as1337.php"] [unique_id "acFyvQymO0MnzQb90MMgNAAAAIk"]
[Tue Mar 24 01:05:02.294805 2026] [:error] [pid 56435:tid 56507] [client 74.248.130.207:12057] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wolf-shell.php"] [unique_id "acFyvsrwr-l5A-s9ryBs9wAAAQc"]
[Tue Mar 24 01:05:03.709807 2026] [:error] [pid 56435:tid 56500] [client 74.248.130.207:11899] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wolf-shell.php"] [unique_id "acFyv8rwr-l5A-s9ryBs_gAAAQE"]
[Tue Mar 24 01:05:04.930260 2026] [:error] [pid 56238:tid 56349] [client 74.248.130.207:12614] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wolf-shell.php"] [unique_id "acFywFSqceFAZRgPDq6U8QAAAME"]
[Tue Mar 24 01:05:06.894867 2026] [:error] [pid 56435:tid 56508] [client 74.248.130.207:12574] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wolf-shell.php"] [unique_id "acFywsrwr-l5A-s9ryBtDQAAAQg"]
[Tue Mar 24 01:05:08.185607 2026] [:error] [pid 56435:tid 56521] [client 74.248.130.207:12565] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/core.php"] [unique_id "acFyxMrwr-l5A-s9ryBtEAAAARQ"]
[Tue Mar 24 01:05:09.799269 2026] [:error] [pid 56435:tid 56513] [client 74.248.130.207:12288] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/core.php"] [unique_id "acFyxcrwr-l5A-s9ryBtFwAAAQw"]
[Tue Mar 24 01:05:11.034629 2026] [:error] [pid 56236:tid 56302] [client 74.248.130.207:11615] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/core.php"] [unique_id "acFyx3apFgYp0uZ8twAdjQAAAEk"]
[Tue Mar 24 01:05:13.288922 2026] [:error] [pid 56237:tid 56344] [client 74.248.130.207:12309] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/core.php"] [unique_id "acFyyQymO0MnzQb90MMgSQAAAJc"]
[Tue Mar 24 01:05:15.277104 2026] [:error] [pid 56237:tid 56321] [client 74.248.130.207:12399] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zeal.php"] [unique_id "acFyywymO0MnzQb90MMgTQAAAIA"]
[Tue Mar 24 01:05:16.213091 2026] [:error] [pid 56435:tid 56523] [client 74.248.130.207:12628] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zeal.php"] [unique_id "acFyzMrwr-l5A-s9ryBtOwAAARY"]
[Tue Mar 24 01:05:17.740726 2026] [:error] [pid 56238:tid 56365] [client 74.248.130.207:12407] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zeal.php"] [unique_id "acFyzVSqceFAZRgPDq6VAAAAANE"]
[Tue Mar 24 01:05:21.555308 2026] [:error] [pid 56236:tid 56301] [client 74.248.130.207:12608] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zeal.php"] [unique_id "acFy0XapFgYp0uZ8twAdqAAAAEg"]
[Tue Mar 24 01:05:22.259412 2026] [:error] [pid 56238:tid 56349] [client 74.248.130.207:12053] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/asf.php"] [unique_id "acFy0lSqceFAZRgPDq6VDQAAAME"]
[Tue Mar 24 01:05:23.712678 2026] [:error] [pid 56236:tid 56310] [client 74.248.130.207:12401] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/asf.php"] [unique_id "acFy03apFgYp0uZ8twAdqgAAAFE"]
[Tue Mar 24 01:05:26.014081 2026] [:error] [pid 56238:tid 56354] [client 74.248.130.207:12663] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/asf.php"] [unique_id "acFy1lSqceFAZRgPDq6VHAAAAMY"]
[Tue Mar 24 01:05:26.740133 2026] [:error] [pid 56238:tid 56350] [client 74.248.130.207:12816] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/asf.php"] [unique_id "acFy1lSqceFAZRgPDq6VIQAAAMI"]
[Tue Mar 24 01:05:29.238846 2026] [:error] [pid 56435:tid 56520] [client 74.248.130.207:12348] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sa.php"] [unique_id "acFy2crwr-l5A-s9ryBtTAAAARM"]
[Tue Mar 24 01:05:31.067751 2026] [:error] [pid 56237:tid 56329] [client 74.248.130.207:11266] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sa.php"] [unique_id "acFy2wymO0MnzQb90MMgVwAAAIg"]
[Tue Mar 24 01:05:32.882126 2026] [:error] [pid 56236:tid 56303] [client 74.248.130.207:12909] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sa.php"] [unique_id "acFy3HapFgYp0uZ8twAduwAAAEo"]
[Tue Mar 24 01:05:34.120610 2026] [:error] [pid 56236:tid 56298] [client 74.248.130.207:12414] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sa.php"] [unique_id "acFy3napFgYp0uZ8twAdvwAAAEU"]
[Tue Mar 24 01:05:36.529188 2026] [:error] [pid 56435:tid 56511] [client 74.248.130.207:12313] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/acfdr.php"] [unique_id "acFy4Mrwr-l5A-s9ryBtYQAAAQs"]
[Tue Mar 24 01:05:37.650206 2026] [:error] [pid 56238:tid 56361] [client 74.248.130.207:12838] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/acfdr.php"] [unique_id "acFy4VSqceFAZRgPDq6VPAAAAM0"]
[Tue Mar 24 01:05:39.259804 2026] [:error] [pid 56237:tid 56333] [client 74.248.130.207:12332] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/acfdr.php"] [unique_id "acFy4wymO0MnzQb90MMgYwAAAIw"]
[Tue Mar 24 01:05:40.207000 2026] [:error] [pid 56236:tid 56295] [client 74.248.130.207:12134] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/acfdr.php"] [unique_id "acFy5HapFgYp0uZ8twAdxAAAAEI"]
[Tue Mar 24 01:05:41.594395 2026] [:error] [pid 56435:tid 56500] [client 74.248.130.207:12385] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a4.php"] [unique_id "acFy5crwr-l5A-s9ryBtbAAAAQE"]
[Tue Mar 24 01:05:43.557833 2026] [:error] [pid 56435:tid 56504] [client 74.248.130.207:12867] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a4.php"] [unique_id "acFy58rwr-l5A-s9ryBtcgAAAQU"]
[Tue Mar 24 01:05:46.288540 2026] [:error] [pid 56237:tid 56333] [client 74.248.130.207:12058] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a4.php"] [unique_id "acFy6gymO0MnzQb90MMgbQAAAIw"]
[Tue Mar 24 01:05:47.849830 2026] [:error] [pid 56236:tid 56315] [client 74.248.130.207:11595] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a4.php"] [unique_id "acFy63apFgYp0uZ8twAdzgAAAFY"]
[Tue Mar 24 01:05:48.790725 2026] [:error] [pid 56435:tid 56519] [client 74.248.130.207:12413] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/index.php"] [unique_id "acFy7Mrwr-l5A-s9ryBteQAAARI"]
[Tue Mar 24 01:05:49.821213 2026] [:error] [pid 56238:tid 56363] [client 74.248.130.207:12591] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/index.php"] [unique_id "acFy7VSqceFAZRgPDq6VQgAAAM8"]
[Tue Mar 24 01:05:51.772545 2026] [:error] [pid 56238:tid 56370] [client 74.248.130.207:11530] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/index.php"] [unique_id "acFy71SqceFAZRgPDq6VRAAAANY"]
[Tue Mar 24 01:05:54.379432 2026] [:error] [pid 56237:tid 56338] [client 74.248.130.207:12081] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/index.php"] [unique_id "acFy8gymO0MnzQb90MMgegAAAJE"]
[Tue Mar 24 01:05:55.835729 2026] [:error] [pid 56236:tid 56310] [client 74.248.130.207:11579] [client 74.248.130.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/about.php"] [unique_id "acFy83apFgYp0uZ8twAd1AAAAFE"]
[Tue Mar 24 01:05:57.311710 2026] [proxy_fcgi:error] [pid 56238:tid 56371] [client 74.248.130.207:13067] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:05:57.650640 2026] [proxy_fcgi:error] [pid 56238:tid 56360] [client 74.248.130.207:13067] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:05:57.972883 2026] [proxy_fcgi:error] [pid 56238:tid 56372] [client 74.248.130.207:13067] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:06:09.107946 2026] [proxy_fcgi:error] [pid 56238:tid 56353] [client 74.248.130.207:13079] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:06:09.448755 2026] [proxy_fcgi:error] [pid 56238:tid 56349] [client 74.248.130.207:13079] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:06:09.877353 2026] [proxy_fcgi:error] [pid 56238:tid 56368] [client 74.248.130.207:13079] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:06:10.198324 2026] [proxy_fcgi:error] [pid 56238:tid 56354] [client 74.248.130.207:13079] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:06:10.529326 2026] [proxy_fcgi:error] [pid 56238:tid 56371] [client 74.248.130.207:13079] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:06:11.824069 2026] [proxy_fcgi:error] [pid 56238:tid 56352] [client 74.248.130.207:13079] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:06:12.163210 2026] [proxy_fcgi:error] [pid 56238:tid 56366] [client 74.248.130.207:13079] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:06:12.678370 2026] [proxy_fcgi:error] [pid 56238:tid 56369] [client 74.248.130.207:13079] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:06:12.933972 2026] [:error] [pid 56238:tid 56356] [client 74.248.130.207:13079] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x.php"] [unique_id "acFzBFSqceFAZRgPDq6VZQAAAMg"]
[Tue Mar 24 01:06:16.106550 2026] [:error] [pid 56435:tid 56499] [client 74.248.130.207:12343] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x.php"] [unique_id "acFzCMrwr-l5A-s9ryBtxAAAAQA"]
[Tue Mar 24 01:06:18.166449 2026] [:error] [pid 56237:tid 56327] [client 74.248.130.207:13093] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x.php"] [unique_id "acFzCgymO0MnzQb90MMglAAAAIY"]
[Tue Mar 24 01:06:19.124915 2026] [:error] [pid 56435:tid 56515] [client 74.248.130.207:12353] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x.php"] [unique_id "acFzC8rwr-l5A-s9ryBtzAAAAQ4"]
[Tue Mar 24 01:06:20.620727 2026] [:error] [pid 56237:tid 56338] [client 74.248.130.207:12808] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/k.php"] [unique_id "acFzDAymO0MnzQb90MMgoAAAAJE"]
[Tue Mar 24 01:06:22.830537 2026] [:error] [pid 56237:tid 56342] [client 74.248.130.207:13136] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/k.php"] [unique_id "acFzDgymO0MnzQb90MMgpwAAAJU"]
[Tue Mar 24 01:06:23.746001 2026] [:error] [pid 56435:tid 56515] [client 74.248.130.207:12851] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/k.php"] [unique_id "acFzD8rwr-l5A-s9ryBt1wAAAQ4"]
[Tue Mar 24 01:06:25.485906 2026] [:error] [pid 56238:tid 56353] [client 74.248.130.207:11848] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/k.php"] [unique_id "acFzEVSqceFAZRgPDq6VmgAAAMU"]
[Tue Mar 24 01:06:27.011110 2026] [:error] [pid 56236:tid 56296] [client 74.248.130.207:12576] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jga.php"] [unique_id "acFzE3apFgYp0uZ8twAd7wAAAEM"]
[Tue Mar 24 01:06:28.184848 2026] [:error] [pid 56435:tid 56508] [client 74.248.130.207:13312] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jga.php"] [unique_id "acFzFMrwr-l5A-s9ryBt5QAAAQg"]
[Tue Mar 24 01:06:30.645705 2026] [:error] [pid 56237:tid 56337] [client 74.248.130.207:12898] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jga.php"] [unique_id "acFzFgymO0MnzQb90MMgswAAAJA"]
[Tue Mar 24 01:06:32.895719 2026] [:error] [pid 56435:tid 56499] [client 74.248.130.207:13159] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jga.php"] [unique_id "acFzGMrwr-l5A-s9ryBt-AAAAQA"]
[Tue Mar 24 01:06:35.271943 2026] [:error] [pid 56236:tid 56300] [client 74.248.130.207:12810] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/past1.php"] [unique_id "acFzG3apFgYp0uZ8twAd9QAAAEc"]
[Tue Mar 24 01:06:36.709124 2026] [:error] [pid 56238:tid 56368] [client 74.248.130.207:12358] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/past1.php"] [unique_id "acFzHFSqceFAZRgPDq6VrAAAANQ"]
[Tue Mar 24 01:06:43.336360 2026] [:error] [pid 56238:tid 56364] [client 74.248.130.207:13117] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/past1.php"] [unique_id "acFzI1SqceFAZRgPDq6VvgAAANA"]
[Tue Mar 24 01:06:45.900163 2026] [:error] [pid 56435:tid 56516] [client 74.248.130.207:12903] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/past1.php"] [unique_id "acFzJcrwr-l5A-s9ryBuagAAAQ8"]
[Tue Mar 24 01:06:47.137472 2026] [:error] [pid 56238:tid 56363] [client 74.248.130.207:12651] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/8xyz.php"] [unique_id "acFzJ1SqceFAZRgPDq6V1QAAAM8"]
[Tue Mar 24 01:06:48.655437 2026] [:error] [pid 56236:tid 56315] [client 74.248.130.207:13326] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/8xyz.php"] [unique_id "acFzKHapFgYp0uZ8twAd-AAAAFY"]
[Tue Mar 24 01:06:51.872020 2026] [:error] [pid 56435:tid 56513] [client 74.248.130.207:12925] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/8xyz.php"] [unique_id "acFzK8rwr-l5A-s9ryBuhgAAAQw"]
[Tue Mar 24 01:06:53.670839 2026] [:error] [pid 56435:tid 56514] [client 74.248.130.207:12610] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/8xyz.php"] [unique_id "acFzLcrwr-l5A-s9ryBukQAAAQ0"]
[Tue Mar 24 01:06:55.016971 2026] [:error] [pid 56238:tid 56365] [client 74.248.130.207:12599] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ol.php"] [unique_id "acFzL1SqceFAZRgPDq6V6AAAANE"]
[Tue Mar 24 01:06:57.201809 2026] [:error] [pid 56236:tid 56311] [client 74.248.130.207:12626] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ol.php"] [unique_id "acFzMXapFgYp0uZ8twAeBgAAAFI"]
[Tue Mar 24 01:06:58.504014 2026] [:error] [pid 56238:tid 56371] [client 74.248.130.207:13158] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ol.php"] [unique_id "acFzMlSqceFAZRgPDq6V-AAAANc"]
[Tue Mar 24 01:07:00.555481 2026] [:error] [pid 56435:tid 56517] [client 74.248.130.207:12912] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ol.php"] [unique_id "acFzNMrwr-l5A-s9ryBuqAAAARA"]
[Tue Mar 24 01:07:02.065244 2026] [:error] [pid 56237:tid 56340] [client 74.248.130.207:13389] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bk.php"] [unique_id "acFzNgymO0MnzQb90MMg3QAAAJM"]
[Tue Mar 24 01:07:02.921076 2026] [:error] [pid 56435:tid 56503] [client 74.248.130.207:12823] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bk.php"] [unique_id "acFzNsrwr-l5A-s9ryBurgAAAQQ"]
[Tue Mar 24 01:07:03.925293 2026] [:error] [pid 56238:tid 56365] [client 74.248.130.207:13405] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bk.php"] [unique_id "acFzN1SqceFAZRgPDq6WAQAAANE"]
[Tue Mar 24 01:07:05.362461 2026] [:error] [pid 56435:tid 56525] [client 74.248.130.207:12805] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bk.php"] [unique_id "acFzOcrwr-l5A-s9ryBuugAAARg"]
[Tue Mar 24 01:07:06.153342 2026] [:error] [pid 56435:tid 56508] [client 74.248.130.207:13085] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vx.php"] [unique_id "acFzOsrwr-l5A-s9ryBuwwAAAQg"]
[Tue Mar 24 01:07:07.699205 2026] [:error] [pid 56435:tid 56523] [client 74.248.130.207:12926] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vx.php"] [unique_id "acFzO8rwr-l5A-s9ryBuzAAAARY"]
[Tue Mar 24 01:07:08.771064 2026] [:error] [pid 56435:tid 56505] [client 74.248.130.207:13120] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vx.php"] [unique_id "acFzPMrwr-l5A-s9ryBuzwAAAQY"]
[Tue Mar 24 01:07:10.332178 2026] [:error] [pid 56238:tid 56349] [client 74.248.130.207:13154] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vx.php"] [unique_id "acFzPlSqceFAZRgPDq6WDAAAAME"]
[Tue Mar 24 01:07:11.766793 2026] [:error] [pid 56238:tid 56368] [client 74.248.130.207:13695] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sx.php"] [unique_id "acFzP1SqceFAZRgPDq6WFgAAANQ"]
[Tue Mar 24 01:07:13.987668 2026] [proxy_fcgi:error] [pid 56238:tid 56364] [client 74.248.130.207:13347] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:07:14.340586 2026] [proxy_fcgi:error] [pid 56238:tid 56356] [client 74.248.130.207:13347] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:07:14.640148 2026] [proxy_fcgi:error] [pid 56238:tid 56348] [client 74.248.130.207:13347] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:07:16.166023 2026] [proxy_fcgi:error] [pid 56238:tid 56359] [client 74.248.130.207:13347] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:07:16.498697 2026] [proxy_fcgi:error] [pid 56238:tid 56351] [client 74.248.130.207:13347] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:07:16.844835 2026] [proxy_fcgi:error] [pid 56238:tid 56363] [client 74.248.130.207:13347] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:07:17.248896 2026] [proxy_fcgi:error] [pid 56238:tid 56360] [client 74.248.130.207:13347] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:07:17.554588 2026] [proxy_fcgi:error] [pid 56238:tid 56350] [client 74.248.130.207:13347] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:07:17.868384 2026] [proxy_fcgi:error] [pid 56238:tid 56365] [client 74.248.130.207:13347] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:07:18.140336 2026] [proxy_fcgi:error] [pid 56238:tid 56370] [client 74.248.130.207:13347] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:07:18.450345 2026] [proxy_fcgi:error] [pid 56238:tid 56355] [client 74.248.130.207:13347] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:07:18.709699 2026] [:error] [pid 56238:tid 56369] [client 74.248.130.207:13347] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dds.php"] [unique_id "acFzRlSqceFAZRgPDq6WOwAAANU"]
[Tue Mar 24 01:07:19.395459 2026] [:error] [pid 56435:tid 56514] [client 74.248.130.207:13624] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dds.php"] [unique_id "acFzR8rwr-l5A-s9ryBu_QAAAQ0"]
[Tue Mar 24 01:07:20.451463 2026] [:error] [pid 56238:tid 56367] [client 74.248.130.207:13680] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dds.php"] [unique_id "acFzSFSqceFAZRgPDq6WPwAAANM"]
[Tue Mar 24 01:07:22.184317 2026] [:error] [pid 56237:tid 56326] [client 74.248.130.207:13127] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dds.php"] [unique_id "acFzSgymO0MnzQb90MMg_wAAAIU"]
[Tue Mar 24 01:07:23.112596 2026] [:error] [pid 56238:tid 56364] [client 74.248.130.207:12824] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/term.php"] [unique_id "acFzS1SqceFAZRgPDq6WSwAAANA"]
[Tue Mar 24 01:07:23.740708 2026] [:error] [pid 56435:tid 56511] [client 74.248.130.207:12879] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/term.php"] [unique_id "acFzS8rwr-l5A-s9ryBvDQAAAQs"]
[Tue Mar 24 01:07:24.887462 2026] [:error] [pid 56236:tid 56315] [client 74.248.130.207:13116] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/term.php"] [unique_id "acFzTHapFgYp0uZ8twAeTgAAAFY"]
[Tue Mar 24 01:07:26.125332 2026] [:error] [pid 56435:tid 56508] [client 74.248.130.207:13692] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/term.php"] [unique_id "acFzTsrwr-l5A-s9ryBvGAAAAQg"]
[Tue Mar 24 01:07:27.180321 2026] [:error] [pid 56238:tid 56371] [client 74.248.130.207:13642] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bypltspd.php"] [unique_id "acFzT1SqceFAZRgPDq6WYQAAANc"]
[Tue Mar 24 01:07:28.869173 2026] [:error] [pid 56236:tid 56311] [client 74.248.130.207:13837] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bypltspd.php"] [unique_id "acFzUHapFgYp0uZ8twAeWgAAAFI"]
[Tue Mar 24 01:07:29.543034 2026] [:error] [pid 56236:tid 56315] [client 74.248.130.207:13392] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bypltspd.php"] [unique_id "acFzUXapFgYp0uZ8twAeYgAAAFY"]
[Tue Mar 24 01:07:31.363480 2026] [:error] [pid 56237:tid 56324] [client 74.248.130.207:13608] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bypltspd.php"] [unique_id "acFzUwymO0MnzQb90MMhBgAAAIM"]
[Tue Mar 24 01:07:33.494044 2026] [:error] [pid 56435:tid 56525] [client 74.248.130.207:13944] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/pu.php"] [unique_id "acFzVcrwr-l5A-s9ryBvNQAAARg"]
[Tue Mar 24 01:07:36.519172 2026] [:error] [pid 56435:tid 56507] [client 74.248.130.207:13434] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/pu.php"] [unique_id "acFzWMrwr-l5A-s9ryBvQgAAAQc"]
[Tue Mar 24 01:07:39.104085 2026] [:error] [pid 56238:tid 56360] [client 74.248.130.207:13404] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/pu.php"] [unique_id "acFzW1SqceFAZRgPDq6WaAAAAMw"]
[Tue Mar 24 01:07:40.863199 2026] [:error] [pid 56237:tid 56327] [client 74.248.130.207:13856] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/pu.php"] [unique_id "acFzXAymO0MnzQb90MMhGgAAAIY"]
[Tue Mar 24 01:07:42.708808 2026] [:error] [pid 56236:tid 56297] [client 74.248.130.207:13884] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/async-upload.php"] [unique_id "acFzXnapFgYp0uZ8twAeeAAAAEQ"]
[Tue Mar 24 01:07:43.565859 2026] [:error] [pid 56236:tid 56307] [client 74.248.130.207:12865] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/async-upload.php"] [unique_id "acFzX3apFgYp0uZ8twAeegAAAE4"]
[Tue Mar 24 01:07:44.639963 2026] [:error] [pid 56435:tid 56508] [client 74.248.130.207:13936] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/async-upload.php"] [unique_id "acFzYMrwr-l5A-s9ryBvYwAAAQg"]
[Tue Mar 24 01:07:46.820370 2026] [:error] [pid 56435:tid 56514] [client 74.248.130.207:13100] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/async-upload.php"] [unique_id "acFzYsrwr-l5A-s9ryBvaQAAAQ0"]
[Tue Mar 24 01:07:47.743504 2026] [:error] [pid 56237:tid 56324] [client 74.248.130.207:13430] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/51.php"] [unique_id "acFzYwymO0MnzQb90MMhPgAAAIM"]
[Tue Mar 24 01:07:49.572252 2026] [:error] [pid 56435:tid 56522] [client 74.248.130.207:13943] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/51.php"] [unique_id "acFzZcrwr-l5A-s9ryBvcAAAARU"]
[Tue Mar 24 01:07:50.521724 2026] [:error] [pid 56435:tid 56504] [client 74.248.130.207:13106] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/51.php"] [unique_id "acFzZsrwr-l5A-s9ryBvdwAAAQU"]
[Tue Mar 24 01:07:52.483581 2026] [:error] [pid 56237:tid 56327] [client 74.248.130.207:13126] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/51.php"] [unique_id "acFzaAymO0MnzQb90MMhWgAAAIY"]
[Tue Mar 24 01:07:54.828481 2026] [:error] [pid 56435:tid 56503] [client 74.248.130.207:13644] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/C1.php"] [unique_id "acFzasrwr-l5A-s9ryBvgwAAAQQ"]
[Tue Mar 24 01:07:57.444192 2026] [:error] [pid 56238:tid 56370] [client 74.248.130.207:13941] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/C1.php"] [unique_id "acFzbVSqceFAZRgPDq6WdgAAANY"]
[Tue Mar 24 01:07:59.484545 2026] [:error] [pid 56238:tid 56362] [client 74.248.130.207:14107] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/C1.php"] [unique_id "acFzb1SqceFAZRgPDq6WewAAAM4"]
[Tue Mar 24 01:08:01.620340 2026] [:error] [pid 56237:tid 56323] [client 74.248.130.207:13387] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/C1.php"] [unique_id "acFzcQymO0MnzQb90MMhfgAAAII"]
[Tue Mar 24 01:08:03.941293 2026] [:error] [pid 56238:tid 56353] [client 74.248.130.207:13862] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bfasb.php"] [unique_id "acFzc1SqceFAZRgPDq6WkQAAAMU"]
[Tue Mar 24 01:08:05.734072 2026] [:error] [pid 56237:tid 56327] [client 74.248.130.207:14199] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bfasb.php"] [unique_id "acFzdQymO0MnzQb90MMhgwAAAIY"]
[Tue Mar 24 01:08:06.519060 2026] [:error] [pid 56238:tid 56352] [client 74.248.130.207:13902] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bfasb.php"] [unique_id "acFzdlSqceFAZRgPDq6WnAAAAMQ"]
[Tue Mar 24 01:08:07.540757 2026] [:error] [pid 56435:tid 56501] [client 74.248.130.207:13623] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bfasb.php"] [unique_id "acFzd8rwr-l5A-s9ryBvyQAAAQI"]
[Tue Mar 24 01:08:52.495836 2026] [proxy_fcgi:error] [pid 56238:tid 56352] [client 74.248.130.207:14144] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:08:53.238683 2026] [proxy_fcgi:error] [pid 56238:tid 56368] [client 74.248.130.207:14144] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:08:53.512174 2026] [proxy_fcgi:error] [pid 56238:tid 56372] [client 74.248.130.207:14144] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:08:53.797734 2026] [proxy_fcgi:error] [pid 56238:tid 56366] [client 74.248.130.207:14144] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:08:54.082080 2026] [proxy_fcgi:error] [pid 56238:tid 56365] [client 74.248.130.207:14144] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:08:54.431464 2026] [proxy_fcgi:error] [pid 56238:tid 56355] [client 74.248.130.207:14144] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:08:54.904317 2026] [proxy_fcgi:error] [pid 56238:tid 56370] [client 74.248.130.207:14144] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:08:55.166203 2026] [proxy_fcgi:error] [pid 56238:tid 56350] [client 74.248.130.207:14144] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:08:55.572954 2026] [proxy_fcgi:error] [pid 56238:tid 56369] [client 74.248.130.207:14144] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:08:55.833459 2026] [proxy_fcgi:error] [pid 56238:tid 56354] [client 74.248.130.207:14144] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:08:56.094210 2026] [proxy_fcgi:error] [pid 56238:tid 56348] [client 74.248.130.207:14144] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:08:56.435431 2026] [:error] [pid 56238:tid 56353] [client 74.248.130.207:14144] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ff.php"] [unique_id "acFzqFSqceFAZRgPDq6W9AAAAMU"]
[Tue Mar 24 01:08:57.396305 2026] [:error] [pid 56238:tid 56356] [client 74.248.130.207:14204] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ff.php"] [unique_id "acFzqVSqceFAZRgPDq6W-QAAAMg"]
[Tue Mar 24 01:08:58.330310 2026] [:error] [pid 56435:tid 56525] [client 74.248.130.207:14338] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ff.php"] [unique_id "acFzqsrwr-l5A-s9ryBwjAAAARg"]
[Tue Mar 24 01:09:01.923208 2026] [:error] [pid 56237:tid 56335] [client 74.248.130.207:14388] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ff.php"] [unique_id "acFzrQymO0MnzQb90MMh6wAAAI4"]
[Tue Mar 24 01:09:04.613428 2026] [:error] [pid 56435:tid 56520] [client 74.248.130.207:14118] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sfcl.php"] [unique_id "acFzsMrwr-l5A-s9ryBwogAAARM"]
[Tue Mar 24 01:09:08.001561 2026] [:error] [pid 56238:tid 56348] [client 74.248.130.207:14158] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sfcl.php"] [unique_id "acFztFSqceFAZRgPDq6XFAAAAMA"]
[Tue Mar 24 01:09:09.311971 2026] [:error] [pid 56236:tid 56316] [client 74.248.130.207:14696] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sfcl.php"] [unique_id "acFztXapFgYp0uZ8twAfLgAAAFc"]
[Tue Mar 24 01:09:13.752598 2026] [:error] [pid 56238:tid 56348] [client 74.248.130.207:14176] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sfcl.php"] [unique_id "acFzuVSqceFAZRgPDq6XMQAAAMA"]
[Tue Mar 24 01:09:16.471527 2026] [:error] [pid 56435:tid 56520] [client 74.248.130.207:14671] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tar17.php"] [unique_id "acFzvMrwr-l5A-s9ryBw0QAAARM"]
[Tue Mar 24 01:09:18.748650 2026] [:error] [pid 56237:tid 56333] [client 74.248.130.207:14669] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tar17.php"] [unique_id "acFzvgymO0MnzQb90MMiDwAAAIw"]
[Tue Mar 24 01:09:20.265150 2026] [:error] [pid 56238:tid 56349] [client 74.248.130.207:14432] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tar17.php"] [unique_id "acFzwFSqceFAZRgPDq6XPQAAAME"]
[Tue Mar 24 01:09:21.709838 2026] [:error] [pid 56238:tid 56351] [client 74.248.130.207:14182] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tar17.php"] [unique_id "acFzwVSqceFAZRgPDq6XRAAAAMM"]
[Tue Mar 24 01:09:24.081460 2026] [:error] [pid 56236:tid 56293] [client 74.248.130.207:13867] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rum.php"] [unique_id "acFzxHapFgYp0uZ8twAfPwAAAEA"]
[Tue Mar 24 01:09:27.027904 2026] [:error] [pid 56237:tid 56321] [client 74.248.130.207:14674] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rum.php"] [unique_id "acFzxwymO0MnzQb90MMiJQAAAIA"]
[Tue Mar 24 01:09:30.302753 2026] [:error] [pid 56238:tid 56367] [client 74.248.130.207:14110] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rum.php"] [unique_id "acFzylSqceFAZRgPDq6XUwAAANM"]
[Tue Mar 24 01:09:30.925988 2026] [:error] [pid 56237:tid 56326] [client 74.248.130.207:14156] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rum.php"] [unique_id "acFzygymO0MnzQb90MMiMgAAAIU"]
[Tue Mar 24 01:09:33.656196 2026] [:error] [pid 56435:tid 56520] [client 74.248.130.207:14624] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/h2a2ck.php"] [unique_id "acFzzcrwr-l5A-s9ryBxCwAAARM"]
[Tue Mar 24 01:09:34.540401 2026] [:error] [pid 56238:tid 56364] [client 74.248.130.207:14099] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/h2a2ck.php"] [unique_id "acFzzlSqceFAZRgPDq6XXgAAANA"]
[Tue Mar 24 01:09:36.390823 2026] [:error] [pid 56435:tid 56500] [client 74.248.130.207:14660] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/h2a2ck.php"] [unique_id "acFz0Mrwr-l5A-s9ryBxEQAAAQE"]
[Tue Mar 24 01:09:37.723368 2026] [:error] [pid 56237:tid 56342] [client 74.248.130.207:14084] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/h2a2ck.php"] [unique_id "acFz0QymO0MnzQb90MMiQAAAAJU"]
[Tue Mar 24 01:09:39.714892 2026] [:error] [pid 56435:tid 56524] [client 74.248.130.207:14964] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/oowyi.php"] [unique_id "acFz08rwr-l5A-s9ryBxIgAAARc"]
[Tue Mar 24 01:09:44.675467 2026] [:error] [pid 56435:tid 56507] [client 74.248.130.207:14387] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/oowyi.php"] [unique_id "acFz2Mrwr-l5A-s9ryBxNwAAAQc"]
[Tue Mar 24 01:09:45.790482 2026] [:error] [pid 56238:tid 56371] [client 74.248.130.207:14350] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/oowyi.php"] [unique_id "acFz2VSqceFAZRgPDq6XfAAAANc"]
[Tue Mar 24 01:09:47.865046 2026] [:error] [pid 56238:tid 56368] [client 74.248.130.207:14196] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/oowyi.php"] [unique_id "acFz21SqceFAZRgPDq6XggAAANQ"]
[Tue Mar 24 01:09:48.635641 2026] [:error] [pid 56238:tid 56353] [client 74.248.130.207:14863] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-blog.php"] [unique_id "acFz3FSqceFAZRgPDq6XigAAAMU"]
[Tue Mar 24 01:09:52.702138 2026] [:error] [pid 56238:tid 56366] [client 74.248.130.207:14901] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-blog.php"] [unique_id "acFz4FSqceFAZRgPDq6XkQAAANI"]
[Tue Mar 24 01:09:57.440820 2026] [proxy_fcgi:error] [pid 56435:tid 56515] [client 74.248.130.207:14712] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:09:57.700010 2026] [proxy_fcgi:error] [pid 56435:tid 56524] [client 74.248.130.207:14712] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:09:58.036036 2026] [proxy_fcgi:error] [pid 56435:tid 56499] [client 74.248.130.207:14712] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:09:58.347325 2026] [proxy_fcgi:error] [pid 56435:tid 56525] [client 74.248.130.207:14712] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:09:58.612709 2026] [proxy_fcgi:error] [pid 56435:tid 56503] [client 74.248.130.207:14712] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:09:58.872006 2026] [proxy_fcgi:error] [pid 56435:tid 56523] [client 74.248.130.207:14712] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:09:59.182295 2026] [proxy_fcgi:error] [pid 56435:tid 56510] [client 74.248.130.207:14712] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:09:59.791782 2026] [proxy_fcgi:error] [pid 56435:tid 56508] [client 74.248.130.207:14712] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:10:00.127952 2026] [proxy_fcgi:error] [pid 56435:tid 56524] [client 74.248.130.207:14712] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:10:00.439326 2026] [proxy_fcgi:error] [pid 56435:tid 56502] [client 74.248.130.207:14712] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:10:00.888586 2026] [:error] [pid 56435:tid 56521] [client 74.248.130.207:14712] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/BMjXQkgwpeb.php"] [unique_id "acFz6Mrwr-l5A-s9ryBxjQAAARQ"]
[Tue Mar 24 01:10:02.481937 2026] [:error] [pid 56236:tid 56299] [client 74.248.130.207:14886] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/BMjXQkgwpeb.php"] [unique_id "acFz6napFgYp0uZ8twAfZwAAAEY"]
[Tue Mar 24 01:10:03.813867 2026] [:error] [pid 56238:tid 56351] [client 74.248.130.207:14616] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/BMjXQkgwpeb.php"] [unique_id "acFz61SqceFAZRgPDq6XqQAAAMM"]
[Tue Mar 24 01:10:05.408006 2026] [:error] [pid 56238:tid 56371] [client 74.248.130.207:14414] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/BMjXQkgwpeb.php"] [unique_id "acFz7VSqceFAZRgPDq6XrQAAANc"]
[Tue Mar 24 01:10:07.270097 2026] [:error] [pid 56435:tid 56499] [client 74.248.130.207:14912] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nope.php"] [unique_id "acFz78rwr-l5A-s9ryBxlgAAAQA"]
[Tue Mar 24 01:10:08.672707 2026] [:error] [pid 56236:tid 56314] [client 74.248.130.207:14601] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nope.php"] [unique_id "acFz8HapFgYp0uZ8twAfbwAAAFU"]
[Tue Mar 24 01:10:10.795603 2026] [:error] [pid 56238:tid 56354] [client 74.248.130.207:15212] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nope.php"] [unique_id "acFz8lSqceFAZRgPDq6XwgAAAMY"]
[Tue Mar 24 01:10:11.747214 2026] [:error] [pid 56236:tid 56296] [client 74.248.130.207:14420] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nope.php"] [unique_id "acFz83apFgYp0uZ8twAfcgAAAEM"]
[Tue Mar 24 01:10:13.297345 2026] [:error] [pid 56237:tid 56334] [client 74.248.130.207:15220] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kwm4.php"] [unique_id "acFz9QymO0MnzQb90MMibgAAAI0"]
[Tue Mar 24 01:10:15.490831 2026] [:error] [pid 56435:tid 56502] [client 74.248.130.207:14437] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kwm4.php"] [unique_id "acFz98rwr-l5A-s9ryBxqAAAAQM"]
[Tue Mar 24 01:10:23.780732 2026] [:error] [pid 56435:tid 56518] [client 74.248.130.207:14423] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kwm4.php"] [unique_id "acFz_8rwr-l5A-s9ryBxxgAAARE"]
[Tue Mar 24 01:10:24.532293 2026] [:error] [pid 56236:tid 56309] [client 74.248.130.207:14638] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kwm4.php"] [unique_id "acF0AHapFgYp0uZ8twAffgAAAFA"]
[Tue Mar 24 01:10:26.068655 2026] [:error] [pid 56236:tid 56298] [client 74.248.130.207:14683] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-aa.php"] [unique_id "acF0AnapFgYp0uZ8twAfggAAAEU"]
[Tue Mar 24 01:10:28.957513 2026] [:error] [pid 56237:tid 56324] [client 74.248.130.207:14377] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-aa.php"] [unique_id "acF0BAymO0MnzQb90MMihwAAAIM"]
[Tue Mar 24 01:10:31.502480 2026] [:error] [pid 56238:tid 56357] [client 74.248.130.207:15410] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-aa.php"] [unique_id "acF0B1SqceFAZRgPDq6X9gAAAMk"]
[Tue Mar 24 01:10:32.386484 2026] [:error] [pid 56238:tid 56355] [client 74.248.130.207:14971] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-aa.php"] [unique_id "acF0CFSqceFAZRgPDq6X_gAAAMc"]
[Tue Mar 24 01:10:33.809298 2026] [:error] [pid 56435:tid 56517] [client 74.248.130.207:15123] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/byp.php"] [unique_id "acF0Ccrwr-l5A-s9ryBx7QAAARA"]
[Tue Mar 24 01:10:34.962853 2026] [:error] [pid 56238:tid 56357] [client 74.248.130.207:14433] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/byp.php"] [unique_id "acF0ClSqceFAZRgPDq6YEQAAAMk"]
[Tue Mar 24 01:10:35.733724 2026] [:error] [pid 56237:tid 56321] [client 74.248.130.207:15414] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/byp.php"] [unique_id "acF0CwymO0MnzQb90MMimQAAAIA"]
[Tue Mar 24 01:10:36.637064 2026] [:error] [pid 56236:tid 56293] [client 74.248.130.207:15450] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/byp.php"] [unique_id "acF0DHapFgYp0uZ8twAfkQAAAEA"]
[Tue Mar 24 01:10:37.636796 2026] [:error] [pid 56435:tid 56517] [client 74.248.130.207:15427] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/0.php"] [unique_id "acF0Dcrwr-l5A-s9ryBx-QAAARA"]
[Tue Mar 24 01:10:38.907909 2026] [:error] [pid 56238:tid 56364] [client 74.248.130.207:15464] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/0.php"] [unique_id "acF0DlSqceFAZRgPDq6YHwAAANA"]
[Tue Mar 24 01:10:40.494732 2026] [:error] [pid 56435:tid 56525] [client 74.248.130.207:15169] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/0.php"] [unique_id "acF0EMrwr-l5A-s9ryByBwAAARg"]
[Tue Mar 24 01:10:41.237633 2026] [:error] [pid 56237:tid 56330] [client 74.248.130.207:15122] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/0.php"] [unique_id "acF0EQymO0MnzQb90MMiowAAAIk"]
[Tue Mar 24 01:10:42.642963 2026] [:error] [pid 56435:tid 56525] [client 74.248.130.207:14597] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/F0x.php"] [unique_id "acF0Esrwr-l5A-s9ryByFgAAARg"]
[Tue Mar 24 01:10:43.342030 2026] [:error] [pid 56435:tid 56513] [client 74.248.130.207:14667] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/F0x.php"] [unique_id "acF0E8rwr-l5A-s9ryByGAAAAQw"]
[Tue Mar 24 01:10:45.958737 2026] [:error] [pid 56238:tid 56356] [client 74.248.130.207:15144] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/F0x.php"] [unique_id "acF0FVSqceFAZRgPDq6YNAAAAMg"]
[Tue Mar 24 01:10:46.740819 2026] [:error] [pid 56236:tid 56293] [client 74.248.130.207:14103] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/F0x.php"] [unique_id "acF0FnapFgYp0uZ8twAfoQAAAEA"]
[Tue Mar 24 01:10:48.122327 2026] [:error] [pid 56237:tid 56344] [client 74.248.130.207:14682] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a/index.php"] [unique_id "acF0GAymO0MnzQb90MMirQAAAJc"]
[Tue Mar 24 01:10:48.793943 2026] [:error] [pid 56237:tid 56328] [client 74.248.130.207:14360] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a/index.php"] [unique_id "acF0GAymO0MnzQb90MMitQAAAIc"]
[Tue Mar 24 01:10:50.017698 2026] [:error] [pid 56238:tid 56361] [client 74.248.130.207:14711] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a/index.php"] [unique_id "acF0GlSqceFAZRgPDq6YSAAAAM0"]
[Tue Mar 24 01:10:51.053993 2026] [:error] [pid 56238:tid 56351] [client 74.248.130.207:15463] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a/index.php"] [unique_id "acF0G1SqceFAZRgPDq6YSgAAAMM"]
[Tue Mar 24 01:10:55.542370 2026] [:error] [pid 56435:tid 56513] [client 74.248.130.207:15126] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-mail.php"] [unique_id "acF0H8rwr-l5A-s9ryByLgAAAQw"]
[Tue Mar 24 01:11:18.036701 2026] [proxy_fcgi:error] [pid 56238:tid 56352] [client 74.248.130.207:14623] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:11:18.366496 2026] [proxy_fcgi:error] [pid 56238:tid 56356] [client 74.248.130.207:14623] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:11:18.628080 2026] [proxy_fcgi:error] [pid 56238:tid 56363] [client 74.248.130.207:14623] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:11:18.914605 2026] [proxy_fcgi:error] [pid 56238:tid 56372] [client 74.248.130.207:14623] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:11:19.670178 2026] [proxy_fcgi:error] [pid 56238:tid 56348] [client 74.248.130.207:14623] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:11:19.929519 2026] [proxy_fcgi:error] [pid 56238:tid 56359] [client 74.248.130.207:14623] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:11:20.539146 2026] [proxy_fcgi:error] [pid 56238:tid 56352] [client 74.248.130.207:14623] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:11:20.843341 2026] [proxy_fcgi:error] [pid 56238:tid 56351] [client 74.248.130.207:14623] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:11:21.515756 2026] [proxy_fcgi:error] [pid 56238:tid 56364] [client 74.248.130.207:14623] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:11:21.808069 2026] [:error] [pid 56238:tid 56356] [client 74.248.130.207:14623] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vxnxvgfw.php"] [unique_id "acF0OVSqceFAZRgPDq6YvgAAAMg"]
[Tue Mar 24 01:11:58.685215 2026] [:error] [pid 56238:tid 56364] [client 74.248.130.207:15682] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vxnxvgfw.php"] [unique_id "acF0XlSqceFAZRgPDq6Y7wAAANA"]
[Tue Mar 24 01:12:13.056638 2026] [:error] [pid 56236:tid 56294] [client 74.248.130.207:16255] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mapi.php"] [unique_id "acF0bXapFgYp0uZ8twAgAwAAAEE"]
[Tue Mar 24 01:12:13.893337 2026] [:error] [pid 56238:tid 56365] [client 74.248.130.207:16228] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mapi.php"] [unique_id "acF0bVSqceFAZRgPDq6ZAAAAANE"]
[Tue Mar 24 01:12:15.520263 2026] [:error] [pid 56238:tid 56362] [client 74.248.130.207:16254] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mapi.php"] [unique_id "acF0b1SqceFAZRgPDq6ZAgAAAM4"]
[Tue Mar 24 01:12:16.764697 2026] [:error] [pid 56237:tid 56331] [client 74.248.130.207:16247] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f2r4.php"] [unique_id "acF0cAymO0MnzQb90MMjUgAAAIo"]
[Tue Mar 24 01:12:21.911395 2026] [proxy_fcgi:error] [pid 56435:tid 56505] [client 74.248.130.207:15949] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:12:22.238696 2026] [proxy_fcgi:error] [pid 56435:tid 56508] [client 74.248.130.207:15949] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:12:22.953926 2026] [proxy_fcgi:error] [pid 56435:tid 56503] [client 74.248.130.207:15949] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:12:23.339998 2026] [proxy_fcgi:error] [pid 56435:tid 56517] [client 74.248.130.207:15949] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:12:23.702689 2026] [proxy_fcgi:error] [pid 56435:tid 56508] [client 74.248.130.207:15949] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:12:24.835502 2026] [proxy_fcgi:error] [pid 56435:tid 56502] [client 74.248.130.207:15949] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:12:25.176751 2026] [proxy_fcgi:error] [pid 56435:tid 56516] [client 74.248.130.207:15949] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:12:25.576788 2026] [proxy_fcgi:error] [pid 56435:tid 56513] [client 74.248.130.207:15949] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:12:25.933834 2026] [proxy_fcgi:error] [pid 56435:tid 56510] [client 74.248.130.207:15949] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:12:26.242201 2026] [:error] [pid 56435:tid 56518] [client 74.248.130.207:15949] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lock360.php"] [unique_id "acF0esrwr-l5A-s9ryBzxQAAARE"]
[Tue Mar 24 01:12:28.198818 2026] [:error] [pid 56435:tid 56504] [client 74.248.130.207:16178] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lock360.php"] [unique_id "acF0fMrwr-l5A-s9ryBzzAAAAQU"]
[Tue Mar 24 01:12:30.089306 2026] [:error] [pid 56237:tid 56336] [client 74.248.130.207:15198] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lock360.php"] [unique_id "acF0fgymO0MnzQb90MMjYgAAAI8"]
[Tue Mar 24 01:12:32.707936 2026] [:error] [pid 56237:tid 56333] [client 74.248.130.207:15396] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lock360.php"] [unique_id "acF0gAymO0MnzQb90MMjZAAAAIw"]
[Tue Mar 24 01:12:33.909548 2026] [:error] [pid 56435:tid 56522] [client 74.248.130.207:15976] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/np.php"] [unique_id "acF0gcrwr-l5A-s9ryBz4AAAARU"]
[Tue Mar 24 01:12:34.791304 2026] [:error] [pid 56236:tid 56303] [client 74.248.130.207:16181] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/np.php"] [unique_id "acF0gnapFgYp0uZ8twAgRQAAAEo"]
[Tue Mar 24 01:12:35.956536 2026] [:error] [pid 56236:tid 56297] [client 74.248.130.207:16168] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/np.php"] [unique_id "acF0g3apFgYp0uZ8twAgSwAAAEQ"]
[Tue Mar 24 01:12:39.829331 2026] [:error] [pid 56435:tid 56524] [client 74.248.130.207:15443] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/np.php"] [unique_id "acF0h8rwr-l5A-s9ryBz_gAAARc"]
[Tue Mar 24 01:12:40.711989 2026] [:error] [pid 56237:tid 56335] [client 74.248.130.207:16223] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tx1.php"] [unique_id "acF0iAymO0MnzQb90MMjbgAAAI4"]
[Tue Mar 24 01:12:42.217655 2026] [:error] [pid 56237:tid 56321] [client 74.248.130.207:15959] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tx1.php"] [unique_id "acF0igymO0MnzQb90MMjcwAAAIA"]
[Tue Mar 24 01:12:44.105775 2026] [:error] [pid 56236:tid 56296] [client 74.248.130.207:15137] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tx1.php"] [unique_id "acF0jHapFgYp0uZ8twAgaAAAAEM"]
[Tue Mar 24 01:12:44.897906 2026] [:error] [pid 56237:tid 56334] [client 74.248.130.207:15909] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tx1.php"] [unique_id "acF0jAymO0MnzQb90MMjdwAAAI0"]
[Tue Mar 24 01:12:46.251916 2026] [:error] [pid 56435:tid 56501] [client 74.248.130.207:15661] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bs.php"] [unique_id "acF0jsrwr-l5A-s9ryB0FAAAAQI"]
[Tue Mar 24 01:12:49.493501 2026] [:error] [pid 56236:tid 56298] [client 74.248.130.207:16384] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bs.php"] [unique_id "acF0kXapFgYp0uZ8twAgagAAAEU"]
[Tue Mar 24 01:12:50.674873 2026] [:error] [pid 56435:tid 56518] [client 74.248.130.207:16408] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bs.php"] [unique_id "acF0ksrwr-l5A-s9ryB0KAAAARE"]
[Tue Mar 24 01:12:54.664551 2026] [:error] [pid 56435:tid 56519] [client 74.248.130.207:15179] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bs.php"] [unique_id "acF0lsrwr-l5A-s9ryB0OwAAARI"]
[Tue Mar 24 01:12:56.173442 2026] [:error] [pid 56238:tid 56356] [client 74.248.130.207:15484] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/good.php"] [unique_id "acF0mFSqceFAZRgPDq6ZUAAAAMg"]
[Tue Mar 24 01:12:56.962438 2026] [:error] [pid 56435:tid 56517] [client 74.248.130.207:16245] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/good.php"] [unique_id "acF0mMrwr-l5A-s9ryB0QwAAARA"]
[Tue Mar 24 01:12:58.091849 2026] [:error] [pid 56236:tid 56309] [client 74.248.130.207:15375] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/good.php"] [unique_id "acF0mnapFgYp0uZ8twAggAAAAFA"]
[Tue Mar 24 01:12:59.963995 2026] [:error] [pid 56435:tid 56518] [client 74.248.130.207:15882] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/good.php"] [unique_id "acF0m8rwr-l5A-s9ryB0VQAAARE"]
[Tue Mar 24 01:13:01.132580 2026] [:error] [pid 56237:tid 56328] [client 74.248.130.207:15424] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/haxor.php"] [unique_id "acF0nQymO0MnzQb90MMjpQAAAIc"]
[Tue Mar 24 01:13:01.837140 2026] [:error] [pid 56237:tid 56338] [client 74.248.130.207:15947] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/haxor.php"] [unique_id "acF0nQymO0MnzQb90MMjpwAAAJE"]
[Tue Mar 24 01:13:02.954206 2026] [:error] [pid 56237:tid 56331] [client 74.248.130.207:16466] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/haxor.php"] [unique_id "acF0ngymO0MnzQb90MMjrAAAAIo"]
[Tue Mar 24 01:13:04.350035 2026] [:error] [pid 56238:tid 56354] [client 74.248.130.207:16187] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/haxor.php"] [unique_id "acF0oFSqceFAZRgPDq6ZbwAAAMY"]
[Tue Mar 24 01:13:05.914752 2026] [:error] [pid 56236:tid 56306] [client 74.248.130.207:14944] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/z.php"] [unique_id "acF0oXapFgYp0uZ8twAghgAAAE0"]
[Tue Mar 24 01:13:07.054174 2026] [:error] [pid 56236:tid 56307] [client 74.248.130.207:15628] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/z.php"] [unique_id "acF0o3apFgYp0uZ8twAgiQAAAE4"]
[Tue Mar 24 01:13:07.813704 2026] [:error] [pid 56236:tid 56310] [client 74.248.130.207:15664] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/z.php"] [unique_id "acF0o3apFgYp0uZ8twAgjgAAAFE"]
[Tue Mar 24 01:13:09.999652 2026] [:error] [pid 56237:tid 56329] [client 74.248.130.207:15977] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/z.php"] [unique_id "acF0pQymO0MnzQb90MMjtQAAAIg"]
[Tue Mar 24 01:13:12.622778 2026] [:error] [pid 56236:tid 56303] [client 74.248.130.207:15651] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gg.php"] [unique_id "acF0qHapFgYp0uZ8twAgmwAAAEo"]
[Tue Mar 24 01:13:13.300932 2026] [:error] [pid 56435:tid 56504] [client 74.248.130.207:16689] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gg.php"] [unique_id "acF0qcrwr-l5A-s9ryB0mQAAAQU"]
[Tue Mar 24 01:13:15.908064 2026] [:error] [pid 56238:tid 56349] [client 74.248.130.207:15698] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gg.php"] [unique_id "acF0q1SqceFAZRgPDq6ZpQAAAME"]
[Tue Mar 24 01:13:17.752124 2026] [:error] [pid 56238:tid 56363] [client 74.248.130.207:15432] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gg.php"] [unique_id "acF0rVSqceFAZRgPDq6ZrwAAAM8"]
[Tue Mar 24 01:13:19.015042 2026] [:error] [pid 56236:tid 56300] [client 74.248.130.207:16238] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/14.php"] [unique_id "acF0r3apFgYp0uZ8twAgqgAAAEc"]
[Tue Mar 24 01:13:20.849463 2026] [:error] [pid 56435:tid 56499] [client 74.248.130.207:15715] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/14.php"] [unique_id "acF0sMrwr-l5A-s9ryB0wAAAAQA"]
[Tue Mar 24 01:13:22.306427 2026] [:error] [pid 56435:tid 56517] [client 74.248.130.207:16757] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/14.php"] [unique_id "acF0ssrwr-l5A-s9ryB0yQAAARA"]
[Tue Mar 24 01:13:23.319422 2026] [:error] [pid 56435:tid 56525] [client 74.248.130.207:15360] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/14.php"] [unique_id "acF0s8rwr-l5A-s9ryB0zQAAARg"]
[Tue Mar 24 01:13:24.252293 2026] [:error] [pid 56238:tid 56372] [client 74.248.130.207:16144] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/6erg.php"] [unique_id "acF0tFSqceFAZRgPDq6ZzwAAANg"]
[Tue Mar 24 01:13:25.336847 2026] [proxy_fcgi:error] [pid 56237:tid 56323] [client 74.248.130.207:15441] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:13:25.691710 2026] [proxy_fcgi:error] [pid 56237:tid 56341] [client 74.248.130.207:15441] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:13:25.958149 2026] [proxy_fcgi:error] [pid 56237:tid 56326] [client 74.248.130.207:15441] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:13:26.327072 2026] [proxy_fcgi:error] [pid 56237:tid 56328] [client 74.248.130.207:15441] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:13:26.613271 2026] [proxy_fcgi:error] [pid 56237:tid 56344] [client 74.248.130.207:15441] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:13:26.894738 2026] [proxy_fcgi:error] [pid 56237:tid 56335] [client 74.248.130.207:15441] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:13:27.154229 2026] [proxy_fcgi:error] [pid 56237:tid 56340] [client 74.248.130.207:15441] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:13:27.415350 2026] [proxy_fcgi:error] [pid 56237:tid 56331] [client 74.248.130.207:15441] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:13:29.015892 2026] [proxy_fcgi:error] [pid 56237:tid 56330] [client 74.248.130.207:15441] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:13:29.330367 2026] [proxy_fcgi:error] [pid 56237:tid 56329] [client 74.248.130.207:15441] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:13:29.590600 2026] [proxy_fcgi:error] [pid 56237:tid 56321] [client 74.248.130.207:15441] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:13:29.984092 2026] [:error] [pid 56237:tid 56328] [client 74.248.130.207:15441] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ging.php"] [unique_id "acF0uQymO0MnzQb90MMj4QAAAIc"]
[Tue Mar 24 01:13:31.302725 2026] [:error] [pid 56435:tid 56507] [client 74.248.130.207:16464] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ging.php"] [unique_id "acF0u8rwr-l5A-s9ryB0-AAAAQc"]
[Tue Mar 24 01:13:32.863293 2026] [:error] [pid 56238:tid 56368] [client 74.248.130.207:15437] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ging.php"] [unique_id "acF0vFSqceFAZRgPDq6aEgAAANQ"]
[Tue Mar 24 01:13:33.943875 2026] [:error] [pid 56435:tid 56524] [client 74.248.130.207:16736] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ging.php"] [unique_id "acF0vcrwr-l5A-s9ryB1DQAAARc"]
[Tue Mar 24 01:13:34.997954 2026] [:error] [pid 56238:tid 56365] [client 74.248.130.207:16152] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/blurbs18.php"] [unique_id "acF0vlSqceFAZRgPDq6aIQAAANE"]
[Tue Mar 24 01:13:36.859705 2026] [:error] [pid 56238:tid 56351] [client 74.248.130.207:16644] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/blurbs18.php"] [unique_id "acF0wFSqceFAZRgPDq6aLgAAAMM"]
[Tue Mar 24 01:13:39.516266 2026] [:error] [pid 56238:tid 56355] [client 74.248.130.207:16510] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/blurbs18.php"] [unique_id "acF0w1SqceFAZRgPDq6aQgAAAMc"]
[Tue Mar 24 01:13:40.656379 2026] [:error] [pid 56238:tid 56368] [client 74.248.130.207:16194] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/blurbs18.php"] [unique_id "acF0xFSqceFAZRgPDq6aSwAAANQ"]
[Tue Mar 24 01:13:43.810825 2026] [:error] [pid 56237:tid 56335] [client 74.248.130.207:15946] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lte7.php"] [unique_id "acF0xwymO0MnzQb90MMkBAAAAI4"]
[Tue Mar 24 01:13:45.278053 2026] [:error] [pid 56435:tid 56510] [client 74.248.130.207:15876] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lte7.php"] [unique_id "acF0ycrwr-l5A-s9ryB1NgAAAQo"]
[Tue Mar 24 01:13:46.526521 2026] [:error] [pid 56435:tid 56522] [client 74.248.130.207:16220] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lte7.php"] [unique_id "acF0ysrwr-l5A-s9ryB1PAAAARU"]
[Tue Mar 24 01:13:47.581602 2026] [:error] [pid 56435:tid 56517] [client 74.248.130.207:16996] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lte7.php"] [unique_id "acF0y8rwr-l5A-s9ryB1QAAAARA"]
[Tue Mar 24 01:13:50.536987 2026] [:error] [pid 56238:tid 56353] [client 74.248.130.207:16960] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fgd.php"] [unique_id "acF0zlSqceFAZRgPDq6apgAAAMU"]
[Tue Mar 24 01:13:51.260854 2026] [:error] [pid 56238:tid 56364] [client 74.248.130.207:16984] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fgd.php"] [unique_id "acF0z1SqceFAZRgPDq6arQAAANA"]
[Tue Mar 24 01:13:52.333744 2026] [:error] [pid 56238:tid 56354] [client 74.248.130.207:15929] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fgd.php"] [unique_id "acF00FSqceFAZRgPDq6auwAAAMY"]
[Tue Mar 24 01:13:53.593473 2026] [:error] [pid 56236:tid 56307] [client 74.248.130.207:16961] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fgd.php"] [unique_id "acF00XapFgYp0uZ8twAgyQAAAE4"]
[Tue Mar 24 01:13:54.831177 2026] [:error] [pid 56236:tid 56299] [client 74.248.130.207:15921] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ce.php"] [unique_id "acF00napFgYp0uZ8twAgzgAAAEY"]
[Tue Mar 24 01:13:58.161667 2026] [:error] [pid 56238:tid 56357] [client 74.248.130.207:16758] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ce.php"] [unique_id "acF01lSqceFAZRgPDq6a8gAAAMk"]
[Tue Mar 24 01:13:58.990925 2026] [:error] [pid 56236:tid 56306] [client 74.248.130.207:15690] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ce.php"] [unique_id "acF01napFgYp0uZ8twAg0QAAAE0"]
[Tue Mar 24 01:14:00.819515 2026] [:error] [pid 56435:tid 56509] [client 74.248.130.207:15958] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ce.php"] [unique_id "acF02Mrwr-l5A-s9ryB1XwAAAQk"]
[Tue Mar 24 01:14:01.632415 2026] [:error] [pid 56237:tid 56342] [client 74.248.130.207:16947] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/shlo.php"] [unique_id "acF02QymO0MnzQb90MMkJwAAAJU"]
[Tue Mar 24 01:14:02.492415 2026] [:error] [pid 56435:tid 56509] [client 74.248.130.207:16709] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/shlo.php"] [unique_id "acF02srwr-l5A-s9ryB1agAAAQk"]
[Tue Mar 24 01:14:03.824427 2026] [:error] [pid 56237:tid 56328] [client 74.248.130.207:16987] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/shlo.php"] [unique_id "acF02wymO0MnzQb90MMkKwAAAIc"]
[Tue Mar 24 01:14:05.283974 2026] [:error] [pid 56237:tid 56336] [client 74.248.130.207:16227] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/shlo.php"] [unique_id "acF03QymO0MnzQb90MMkLwAAAI8"]
[Tue Mar 24 01:14:08.083383 2026] [:error] [pid 56236:tid 56305] [client 74.248.130.207:16724] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-loccs.php"] [unique_id "acF04HapFgYp0uZ8twAg2wAAAEw"]
[Tue Mar 24 01:14:09.271791 2026] [:error] [pid 56238:tid 56354] [client 74.248.130.207:16765] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-loccs.php"] [unique_id "acF04VSqceFAZRgPDq6bQgAAAMY"]
[Tue Mar 24 01:14:10.333363 2026] [:error] [pid 56237:tid 56342] [client 74.248.130.207:17211] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-loccs.php"] [unique_id "acF04gymO0MnzQb90MMkRAAAAJU"]
[Tue Mar 24 01:14:12.538884 2026] [:error] [pid 56238:tid 56353] [client 74.248.130.207:16491] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-loccs.php"] [unique_id "acF05FSqceFAZRgPDq6bVAAAAMU"]
[Tue Mar 24 01:15:23.492576 2026] [proxy_fcgi:error] [pid 56238:tid 56360] [client 74.248.130.207:16753] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:15:23.753823 2026] [proxy_fcgi:error] [pid 56238:tid 56371] [client 74.248.130.207:16753] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:15:24.078638 2026] [proxy_fcgi:error] [pid 56238:tid 56350] [client 74.248.130.207:16753] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:15:24.445555 2026] [proxy_fcgi:error] [pid 56238:tid 56362] [client 74.248.130.207:16753] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:15:25.450971 2026] [proxy_fcgi:error] [pid 56238:tid 56359] [client 74.248.130.207:16753] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:15:25.833443 2026] [proxy_fcgi:error] [pid 56238:tid 56370] [client 74.248.130.207:16753] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:15:26.279518 2026] [proxy_fcgi:error] [pid 56238:tid 56353] [client 74.248.130.207:16753] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:15:26.696052 2026] [:error] [pid 56238:tid 56361] [client 74.248.130.207:16753] File does not exist: /home/dwelects/public_html/baxa1.phP
[Tue Mar 24 01:15:27.435611 2026] [proxy_fcgi:error] [pid 56238:tid 56358] [client 74.248.130.207:16753] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:15:28.143130 2026] [proxy_fcgi:error] [pid 56238:tid 56350] [client 74.248.130.207:16753] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:15:28.539767 2026] [:error] [pid 56238:tid 56362] [client 74.248.130.207:16753] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xa.php"] [unique_id "acF1MFSqceFAZRgPDq6cKgAAAM4"]
[Tue Mar 24 01:15:29.380216 2026] [:error] [pid 56435:tid 56504] [client 74.248.130.207:16764] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xa.php"] [unique_id "acF1Mcrwr-l5A-s9ryB3EgAAAQU"]
[Tue Mar 24 01:15:30.394408 2026] [:error] [pid 56237:tid 56342] [client 74.248.130.207:17749] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xa.php"] [unique_id "acF1MgymO0MnzQb90MMlSgAAAJU"]
[Tue Mar 24 01:15:31.990658 2026] [:error] [pid 56435:tid 56510] [client 74.248.130.207:17165] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xa.php"] [unique_id "acF1M8rwr-l5A-s9ryB3IAAAAQo"]
[Tue Mar 24 01:15:34.265476 2026] [:error] [pid 56435:tid 56507] [client 74.248.130.207:16671] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/juuuu.php"] [unique_id "acF1Nsrwr-l5A-s9ryB3JgAAAQc"]
[Tue Mar 24 01:15:35.018654 2026] [:error] [pid 56435:tid 56511] [client 74.248.130.207:16935] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/juuuu.php"] [unique_id "acF1N8rwr-l5A-s9ryB3KwAAAQs"]
[Tue Mar 24 01:15:36.372036 2026] [:error] [pid 56236:tid 56307] [client 74.248.130.207:16904] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/juuuu.php"] [unique_id "acF1OHapFgYp0uZ8twAhowAAAE4"]
[Tue Mar 24 01:15:38.135518 2026] [:error] [pid 56236:tid 56310] [client 74.248.130.207:17682] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/juuuu.php"] [unique_id "acF1OnapFgYp0uZ8twAhqgAAAFE"]
[Tue Mar 24 01:15:39.000262 2026] [:error] [pid 56238:tid 56364] [client 74.248.130.207:17422] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fjpeb.php"] [unique_id "acF1OlSqceFAZRgPDq6cXgAAANA"]
[Tue Mar 24 01:15:40.090943 2026] [:error] [pid 56238:tid 56369] [client 74.248.130.207:17763] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fjpeb.php"] [unique_id "acF1PFSqceFAZRgPDq6cYgAAANU"]
[Tue Mar 24 01:15:40.933340 2026] [:error] [pid 56237:tid 56325] [client 74.248.130.207:17996] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fjpeb.php"] [unique_id "acF1PAymO0MnzQb90MMlcwAAAIQ"]
[Tue Mar 24 01:15:42.758506 2026] [:error] [pid 56236:tid 56304] [client 74.248.130.207:17962] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fjpeb.php"] [unique_id "acF1PnapFgYp0uZ8twAhwgAAAEs"]
[Tue Mar 24 01:15:45.030985 2026] [:error] [pid 56237:tid 56344] [client 74.248.130.207:17452] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fm1.php"] [unique_id "acF1QQymO0MnzQb90MMlhQAAAJc"]
[Tue Mar 24 01:15:47.793038 2026] [:error] [pid 56435:tid 56516] [client 74.248.130.207:17963] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fm1.php"] [unique_id "acF1Q8rwr-l5A-s9ryB3ZQAAAQ8"]
[Tue Mar 24 01:15:49.179463 2026] [:error] [pid 56435:tid 56502] [client 74.248.130.207:17934] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fm1.php"] [unique_id "acF1Rcrwr-l5A-s9ryB3dgAAAQM"]
[Tue Mar 24 01:15:50.057193 2026] [:error] [pid 56435:tid 56523] [client 74.248.130.207:17731] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fm1.php"] [unique_id "acF1Rsrwr-l5A-s9ryB3egAAARY"]
[Tue Mar 24 01:15:51.514996 2026] [:error] [pid 56435:tid 56515] [client 74.248.130.207:16991] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/veuntzdf.php"] [unique_id "acF1R8rwr-l5A-s9ryB3hQAAAQ4"]
[Tue Mar 24 01:15:55.063096 2026] [:error] [pid 56435:tid 56519] [client 74.248.130.207:17248] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/veuntzdf.php"] [unique_id "acF1S8rwr-l5A-s9ryB3ogAAARI"]
[Tue Mar 24 01:15:56.357093 2026] [:error] [pid 56435:tid 56524] [client 74.248.130.207:17498] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/veuntzdf.php"] [unique_id "acF1TMrwr-l5A-s9ryB3tQAAARc"]
[Tue Mar 24 01:15:57.674317 2026] [:error] [pid 56238:tid 56357] [client 74.248.130.207:17258] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/veuntzdf.php"] [unique_id "acF1TVSqceFAZRgPDq6cigAAAMk"]
[Tue Mar 24 01:15:59.229176 2026] [:error] [pid 56435:tid 56517] [client 74.248.130.207:17519] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/webdb.php"] [unique_id "acF1T8rwr-l5A-s9ryB3ywAAARA"]
[Tue Mar 24 01:15:59.959123 2026] [:error] [pid 56238:tid 56367] [client 74.248.130.207:17472] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/webdb.php"] [unique_id "acF1T1SqceFAZRgPDq6cmAAAANM"]
[Tue Mar 24 01:16:01.144297 2026] [:error] [pid 56238:tid 56350] [client 74.248.130.207:17183] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/webdb.php"] [unique_id "acF1UVSqceFAZRgPDq6cowAAAMI"]
[Tue Mar 24 01:16:02.185809 2026] [:error] [pid 56236:tid 56297] [client 74.248.130.207:17930] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/webdb.php"] [unique_id "acF1UnapFgYp0uZ8twAh6QAAAEQ"]
[Tue Mar 24 01:16:03.922846 2026] [:error] [pid 56238:tid 56361] [client 74.248.130.207:17673] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/post.php"] [unique_id "acF1U1SqceFAZRgPDq6cuwAAAM0"]
[Tue Mar 24 01:16:04.752061 2026] [:error] [pid 56435:tid 56511] [client 74.248.130.207:17010] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/post.php"] [unique_id "acF1VMrwr-l5A-s9ryB38wAAAQs"]
[Tue Mar 24 01:16:05.653826 2026] [:error] [pid 56238:tid 56354] [client 74.248.130.207:17261] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/post.php"] [unique_id "acF1VVSqceFAZRgPDq6cywAAAMY"]
[Tue Mar 24 01:16:07.054301 2026] [:error] [pid 56435:tid 56499] [client 74.248.130.207:17156] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/post.php"] [unique_id "acF1V8rwr-l5A-s9ryB3_QAAAQA"]
[Tue Mar 24 01:16:08.340892 2026] [:error] [pid 56238:tid 56350] [client 74.248.130.207:18277] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/upfile.php"] [unique_id "acF1WFSqceFAZRgPDq6c5QAAAMI"]
[Tue Mar 24 01:16:09.037705 2026] [:error] [pid 56238:tid 56353] [client 74.248.130.207:17463] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/upfile.php"] [unique_id "acF1WVSqceFAZRgPDq6c7QAAAMU"]
[Tue Mar 24 01:16:09.979559 2026] [:error] [pid 56238:tid 56356] [client 74.248.130.207:18039] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/upfile.php"] [unique_id "acF1WVSqceFAZRgPDq6c-AAAAMg"]
[Tue Mar 24 01:16:11.047987 2026] [:error] [pid 56236:tid 56295] [client 74.248.130.207:18203] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/upfile.php"] [unique_id "acF1W3apFgYp0uZ8twAiCgAAAEI"]
[Tue Mar 24 01:16:11.948210 2026] [:error] [pid 56238:tid 56354] [client 74.248.130.207:17416] [client 74.248.130.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "acF1W1SqceFAZRgPDq6dBAAAAMY"]
[Tue Mar 24 01:16:13.870188 2026] [:error] [pid 56238:tid 56354] [client 74.248.130.207:16910] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dropdown.php"] [unique_id "acF1XVSqceFAZRgPDq6dEAAAAMY"]
[Tue Mar 24 01:16:15.433518 2026] [:error] [pid 56237:tid 56331] [client 74.248.130.207:18264] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dropdown.php"] [unique_id "acF1XwymO0MnzQb90MMl4AAAAIo"]
[Tue Mar 24 01:16:16.925756 2026] [:error] [pid 56238:tid 56360] [client 74.248.130.207:17680] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dropdown.php"] [unique_id "acF1YFSqceFAZRgPDq6dLwAAAMw"]
[Tue Mar 24 01:16:19.469715 2026] [:error] [pid 56238:tid 56369] [client 74.248.130.207:18237] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dropdown.php"] [unique_id "acF1Y1SqceFAZRgPDq6dOwAAANU"]
[Tue Mar 24 01:16:21.242321 2026] [:error] [pid 56237:tid 56337] [client 74.248.130.207:18222] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/s1.php"] [unique_id "acF1ZQymO0MnzQb90MMl6AAAAJA"]
[Tue Mar 24 01:16:22.727178 2026] [:error] [pid 56238:tid 56360] [client 74.248.130.207:18290] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/s1.php"] [unique_id "acF1ZlSqceFAZRgPDq6dXgAAAMw"]
[Tue Mar 24 01:16:25.223634 2026] [:error] [pid 56435:tid 56507] [client 74.248.130.207:17249] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/s1.php"] [unique_id "acF1acrwr-l5A-s9ryB4HQAAAQc"]
[Tue Mar 24 01:16:29.344200 2026] [proxy_fcgi:error] [pid 56236:tid 56313] [client 74.248.130.207:17441] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:16:29.727576 2026] [proxy_fcgi:error] [pid 56236:tid 56305] [client 74.248.130.207:17441] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:16:30.023896 2026] [proxy_fcgi:error] [pid 56236:tid 56298] [client 74.248.130.207:17441] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:16:30.320754 2026] [proxy_fcgi:error] [pid 56236:tid 56307] [client 74.248.130.207:17441] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:16:30.633663 2026] [proxy_fcgi:error] [pid 56236:tid 56315] [client 74.248.130.207:17441] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:16:31.398816 2026] [proxy_fcgi:error] [pid 56236:tid 56293] [client 74.248.130.207:17441] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:16:31.770752 2026] [proxy_fcgi:error] [pid 56236:tid 56311] [client 74.248.130.207:17441] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:16:32.078039 2026] [proxy_fcgi:error] [pid 56236:tid 56310] [client 74.248.130.207:17441] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:16:32.418322 2026] [proxy_fcgi:error] [pid 56236:tid 56296] [client 74.248.130.207:17441] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:16:32.835574 2026] [proxy_fcgi:error] [pid 56236:tid 56312] [client 74.248.130.207:17441] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:16:33.423078 2026] [:error] [pid 56236:tid 56295] [client 74.248.130.207:17441] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/my1.php"] [unique_id "acF1cXapFgYp0uZ8twAiWQAAAEI"]
[Tue Mar 24 01:16:34.543290 2026] [:error] [pid 56238:tid 56351] [client 74.248.130.207:16899] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/my1.php"] [unique_id "acF1clSqceFAZRgPDq6drgAAAMM"]
[Tue Mar 24 01:16:36.230375 2026] [:error] [pid 56435:tid 56503] [client 74.248.130.207:17959] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/my1.php"] [unique_id "acF1dMrwr-l5A-s9ryB4SQAAAQQ"]
[Tue Mar 24 01:16:37.974494 2026] [:error] [pid 56236:tid 56314] [client 74.248.130.207:17760] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/my1.php"] [unique_id "acF1dXapFgYp0uZ8twAiYAAAAFU"]
[Tue Mar 24 01:16:41.012602 2026] [:error] [pid 56435:tid 56513] [client 74.248.130.207:18511] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/990.php"] [unique_id "acF1ecrwr-l5A-s9ryB4YQAAAQw"]
[Tue Mar 24 01:16:43.640273 2026] [:error] [pid 56236:tid 56296] [client 74.248.130.207:18510] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/990.php"] [unique_id "acF1e3apFgYp0uZ8twAiaQAAAEM"]
[Tue Mar 24 01:16:44.877605 2026] [:error] [pid 56237:tid 56339] [client 74.248.130.207:18498] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/990.php"] [unique_id "acF1fAymO0MnzQb90MMmJAAAAJI"]
[Tue Mar 24 01:16:48.609307 2026] [:error] [pid 56435:tid 56508] [client 74.248.130.207:17153] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/990.php"] [unique_id "acF1gMrwr-l5A-s9ryB4sgAAAQg"]
[Tue Mar 24 01:16:50.947772 2026] [:error] [pid 56435:tid 56515] [client 74.248.130.207:18543] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aaa.php"] [unique_id "acF1gsrwr-l5A-s9ryB40wAAAQ4"]
[Tue Mar 24 01:16:52.103535 2026] [:error] [pid 56435:tid 56516] [client 74.248.130.207:18042] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aaa.php"] [unique_id "acF1hMrwr-l5A-s9ryB44QAAAQ8"]
[Tue Mar 24 01:16:53.390876 2026] [:error] [pid 56435:tid 56511] [client 74.248.130.207:17933] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aaa.php"] [unique_id "acF1hcrwr-l5A-s9ryB48AAAAQs"]
[Tue Mar 24 01:16:57.172634 2026] [:error] [pid 56236:tid 56305] [client 74.248.130.207:18559] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aaa.php"] [unique_id "acF1iXapFgYp0uZ8twAifQAAAEw"]
[Tue Mar 24 01:16:58.762863 2026] [:error] [pid 56237:tid 56341] [client 74.248.130.207:17493] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/az.php"] [unique_id "acF1igymO0MnzQb90MMmSgAAAJQ"]
[Tue Mar 24 01:16:59.926900 2026] [:error] [pid 56435:tid 56525] [client 74.248.130.207:18553] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/az.php"] [unique_id "acF1i8rwr-l5A-s9ryB5CQAAARg"]
[Tue Mar 24 01:17:00.712448 2026] [:error] [pid 56237:tid 56322] [client 74.248.130.207:18451] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/az.php"] [unique_id "acF1jAymO0MnzQb90MMmWgAAAIE"]
[Tue Mar 24 01:17:02.073817 2026] [:error] [pid 56238:tid 56353] [client 74.248.130.207:18195] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/az.php"] [unique_id "acF1jlSqceFAZRgPDq6eNgAAAMU"]
[Tue Mar 24 01:17:04.185463 2026] [:error] [pid 56238:tid 56370] [client 74.248.130.207:17672] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sh.php"] [unique_id "acF1kFSqceFAZRgPDq6eQAAAANY"]
[Tue Mar 24 01:17:05.490986 2026] [:error] [pid 56435:tid 56518] [client 74.248.130.207:17715] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sh.php"] [unique_id "acF1kcrwr-l5A-s9ryB5HgAAARE"]
[Tue Mar 24 01:17:07.579674 2026] [:error] [pid 56435:tid 56505] [client 74.248.130.207:17926] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sh.php"] [unique_id "acF1k8rwr-l5A-s9ryB5KAAAAQY"]
[Tue Mar 24 01:17:08.779593 2026] [:error] [pid 56435:tid 56502] [client 74.248.130.207:17787] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sh.php"] [unique_id "acF1lMrwr-l5A-s9ryB5KwAAAQM"]
[Tue Mar 24 01:17:11.564989 2026] [:error] [pid 56435:tid 56502] [client 74.248.130.207:17675] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ot.php"] [unique_id "acF1l8rwr-l5A-s9ryB5OAAAAQM"]
[Tue Mar 24 01:17:12.667943 2026] [:error] [pid 56238:tid 56355] [client 74.248.130.207:17956] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ot.php"] [unique_id "acF1mFSqceFAZRgPDq6eVwAAAMc"]
[Tue Mar 24 01:17:14.006713 2026] [:error] [pid 56236:tid 56315] [client 74.248.130.207:17704] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ot.php"] [unique_id "acF1mnapFgYp0uZ8twAilwAAAFY"]
[Tue Mar 24 01:17:18.761448 2026] [:error] [pid 56238:tid 56352] [client 74.248.130.207:18259] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ot.php"] [unique_id "acF1nlSqceFAZRgPDq6ecwAAAMQ"]
[Tue Mar 24 01:17:19.785985 2026] [:error] [pid 56238:tid 56363] [client 74.248.130.207:17943] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/13ede.php"] [unique_id "acF1n1SqceFAZRgPDq6eeQAAAM8"]
[Tue Mar 24 01:17:20.654917 2026] [:error] [pid 56435:tid 56518] [client 74.248.130.207:18252] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/13ede.php"] [unique_id "acF1oMrwr-l5A-s9ryB5cgAAARE"]
[Tue Mar 24 01:17:23.353810 2026] [:error] [pid 56435:tid 56501] [client 74.248.130.207:18507] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/13ede.php"] [unique_id "acF1o8rwr-l5A-s9ryB5iQAAAQI"]
[Tue Mar 24 01:18:02.489456 2026] [proxy_fcgi:error] [pid 56238:tid 56364] [client 74.248.130.207:19035] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:18:02.822459 2026] [proxy_fcgi:error] [pid 56238:tid 56354] [client 74.248.130.207:19035] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:18:03.128386 2026] [proxy_fcgi:error] [pid 56238:tid 56360] [client 74.248.130.207:19035] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:18:03.386166 2026] [proxy_fcgi:error] [pid 56238:tid 56372] [client 74.248.130.207:19035] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:18:03.740939 2026] [proxy_fcgi:error] [pid 56238:tid 56353] [client 74.248.130.207:19035] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:18:04.066136 2026] [proxy_fcgi:error] [pid 56238:tid 56362] [client 74.248.130.207:19035] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:18:04.526024 2026] [proxy_fcgi:error] [pid 56238:tid 56364] [client 74.248.130.207:19035] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:18:05.300063 2026] [proxy_fcgi:error] [pid 56238:tid 56366] [client 74.248.130.207:19035] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:18:05.567002 2026] [proxy_fcgi:error] [pid 56238:tid 56365] [client 74.248.130.207:19035] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:18:05.949683 2026] [proxy_fcgi:error] [pid 56238:tid 56362] [client 74.248.130.207:19035] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:18:06.271767 2026] [proxy_fcgi:error] [pid 56238:tid 56358] [client 74.248.130.207:19035] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:18:06.738013 2026] [:error] [pid 56238:tid 56359] [client 74.248.130.207:19035] [client 74.248.130.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/pomo/alfa.php"] [unique_id "acF1zlSqceFAZRgPDq6fLQAAAMs"]
[Tue Mar 24 01:18:07.822058 2026] [:error] [pid 56237:tid 56340] [client 74.248.130.207:19207] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ywwqw.php"] [unique_id "acF1zwymO0MnzQb90MMnYAAAAJM"]
[Tue Mar 24 01:18:09.641371 2026] [:error] [pid 56237:tid 56325] [client 74.248.130.207:19274] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ywwqw.php"] [unique_id "acF10QymO0MnzQb90MMnZwAAAIQ"]
[Tue Mar 24 01:18:10.462378 2026] [:error] [pid 56237:tid 56328] [client 74.248.130.207:17990] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ywwqw.php"] [unique_id "acF10gymO0MnzQb90MMnbgAAAIc"]
[Tue Mar 24 01:18:11.572692 2026] [:error] [pid 56237:tid 56329] [client 74.248.130.207:18246] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ywwqw.php"] [unique_id "acF10wymO0MnzQb90MMncgAAAIg"]
[Tue Mar 24 01:18:12.968463 2026] [:error] [pid 56238:tid 56367] [client 74.248.130.207:18557] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/unfrnd.php"] [unique_id "acF11FSqceFAZRgPDq6fUAAAANM"]
[Tue Mar 24 01:18:14.685836 2026] [:error] [pid 56236:tid 56295] [client 74.248.130.207:19228] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/unfrnd.php"] [unique_id "acF11napFgYp0uZ8twAjIAAAAEI"]
[Tue Mar 24 01:18:15.667747 2026] [:error] [pid 56236:tid 56310] [client 74.248.130.207:17968] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/unfrnd.php"] [unique_id "acF113apFgYp0uZ8twAjJAAAAFE"]
[Tue Mar 24 01:18:17.956277 2026] [:error] [pid 56435:tid 56508] [client 74.248.130.207:17979] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/unfrnd.php"] [unique_id "acF12crwr-l5A-s9ryB6rAAAAQg"]
[Tue Mar 24 01:18:19.209861 2026] [:error] [pid 56435:tid 56501] [client 74.248.130.207:19291] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xxxx.php"] [unique_id "acF128rwr-l5A-s9ryB6twAAAQI"]
[Tue Mar 24 01:18:20.790925 2026] [:error] [pid 56435:tid 56523] [client 74.248.130.207:18802] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xxxx.php"] [unique_id "acF13Mrwr-l5A-s9ryB6wQAAARY"]
[Tue Mar 24 01:18:21.599605 2026] [:error] [pid 56435:tid 56501] [client 74.248.130.207:18504] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xxxx.php"] [unique_id "acF13crwr-l5A-s9ryB6xQAAAQI"]
[Tue Mar 24 01:18:23.823033 2026] [:error] [pid 56435:tid 56504] [client 74.248.130.207:19292] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xxxx.php"] [unique_id "acF138rwr-l5A-s9ryB60QAAAQU"]
[Tue Mar 24 01:18:25.519446 2026] [:error] [pid 56435:tid 56503] [client 74.248.130.207:18482] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zse.php"] [unique_id "acF14crwr-l5A-s9ryB63wAAAQQ"]
[Tue Mar 24 01:18:27.335946 2026] [:error] [pid 56236:tid 56316] [client 74.248.130.207:17940] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zse.php"] [unique_id "acF143apFgYp0uZ8twAjPAAAAFc"]
[Tue Mar 24 01:18:28.351209 2026] [:error] [pid 56237:tid 56336] [client 74.248.130.207:19318] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zse.php"] [unique_id "acF15AymO0MnzQb90MMngAAAAI8"]
[Tue Mar 24 01:18:30.141109 2026] [:error] [pid 56435:tid 56523] [client 74.248.130.207:16711] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zse.php"] [unique_id "acF15srwr-l5A-s9ryB69wAAARY"]
[Tue Mar 24 01:18:30.937397 2026] [:error] [pid 56435:tid 56501] [client 74.248.130.207:17276] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wsa.php"] [unique_id "acF15srwr-l5A-s9ryB7AgAAAQI"]
[Tue Mar 24 01:18:31.944989 2026] [:error] [pid 56435:tid 56511] [client 74.248.130.207:18513] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wsa.php"] [unique_id "acF158rwr-l5A-s9ryB7CAAAAQs"]
[Tue Mar 24 01:18:32.645168 2026] [:error] [pid 56435:tid 56517] [client 74.248.130.207:18297] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wsa.php"] [unique_id "acF16Mrwr-l5A-s9ryB7DQAAARA"]
[Tue Mar 24 01:18:34.032653 2026] [:error] [pid 56435:tid 56501] [client 74.248.130.207:18481] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wsa.php"] [unique_id "acF16srwr-l5A-s9ryB7FgAAAQI"]
[Tue Mar 24 01:18:35.936806 2026] [:error] [pid 56435:tid 56518] [client 74.248.130.207:18702] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/product.php"] [unique_id "acF168rwr-l5A-s9ryB7IQAAARE"]
[Tue Mar 24 01:18:37.451195 2026] [:error] [pid 56435:tid 56501] [client 74.248.130.207:19499] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/product.php"] [unique_id "acF17crwr-l5A-s9ryB7LQAAAQI"]
[Tue Mar 24 01:18:38.542972 2026] [:error] [pid 56236:tid 56302] [client 74.248.130.207:17769] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/product.php"] [unique_id "acF17napFgYp0uZ8twAjTQAAAEk"]
[Tue Mar 24 01:18:40.376376 2026] [:error] [pid 56435:tid 56522] [client 74.248.130.207:18448] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/product.php"] [unique_id "acF18Mrwr-l5A-s9ryB7QgAAARU"]
[Tue Mar 24 01:18:41.338867 2026] [:error] [pid 56435:tid 56499] [client 74.248.130.207:18244] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/z123.php"] [unique_id "acF18crwr-l5A-s9ryB7TQAAAQA"]
[Tue Mar 24 01:18:42.732309 2026] [:error] [pid 56435:tid 56511] [client 74.248.130.207:18962] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/z123.php"] [unique_id "acF18srwr-l5A-s9ryB7VwAAAQs"]
[Tue Mar 24 01:18:44.244884 2026] [:error] [pid 56435:tid 56508] [client 74.248.130.207:19061] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/z123.php"] [unique_id "acF19Mrwr-l5A-s9ryB7ZgAAAQg"]
[Tue Mar 24 01:18:47.431832 2026] [:error] [pid 56238:tid 56351] [client 74.248.130.207:18558] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/z123.php"] [unique_id "acF191SqceFAZRgPDq6fkwAAAMM"]
[Tue Mar 24 01:18:48.627515 2026] [:error] [pid 56237:tid 56338] [client 74.248.130.207:19244] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/clss.php"] [unique_id "acF1-AymO0MnzQb90MMnkgAAAJE"]
[Tue Mar 24 01:18:49.598739 2026] [:error] [pid 56237:tid 56339] [client 74.248.130.207:19045] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/clss.php"] [unique_id "acF1-QymO0MnzQb90MMnkwAAAJI"]
[Tue Mar 24 01:18:52.630801 2026] [:error] [pid 56435:tid 56505] [client 74.248.130.207:18744] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/clss.php"] [unique_id "acF1_Mrwr-l5A-s9ryB7nwAAAQY"]
[Tue Mar 24 01:18:53.824312 2026] [:error] [pid 56435:tid 56504] [client 74.248.130.207:19522] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/clss.php"] [unique_id "acF1_crwr-l5A-s9ryB7owAAAQU"]
[Tue Mar 24 01:18:55.230445 2026] [:error] [pid 56236:tid 56294] [client 74.248.130.207:19017] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/v3n0m.php"] [unique_id "acF1_3apFgYp0uZ8twAjZgAAAEE"]
[Tue Mar 24 01:18:57.310915 2026] [:error] [pid 56237:tid 56343] [client 74.248.130.207:19304] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/v3n0m.php"] [unique_id "acF2AQymO0MnzQb90MMnpQAAAJY"]
[Tue Mar 24 01:18:59.199071 2026] [:error] [pid 56237:tid 56344] [client 74.248.130.207:19236] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/v3n0m.php"] [unique_id "acF2AwymO0MnzQb90MMnrwAAAJc"]
[Tue Mar 24 01:19:00.247671 2026] [:error] [pid 56238:tid 56348] [client 74.248.130.207:18468] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/v3n0m.php"] [unique_id "acF2BFSqceFAZRgPDq6fvQAAAMA"]
[Tue Mar 24 01:19:01.329735 2026] [:error] [pid 56237:tid 56325] [client 74.248.130.207:19545] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hbyra.php"] [unique_id "acF2BQymO0MnzQb90MMnugAAAIQ"]
[Tue Mar 24 01:19:02.767594 2026] [:error] [pid 56238:tid 56366] [client 74.248.130.207:19572] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hbyra.php"] [unique_id "acF2BlSqceFAZRgPDq6fxQAAANI"]
[Tue Mar 24 01:19:05.333965 2026] [:error] [pid 56238:tid 56362] [client 74.248.130.207:19220] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hbyra.php"] [unique_id "acF2CVSqceFAZRgPDq6f0QAAAM4"]
[Tue Mar 24 01:19:06.281679 2026] [proxy_fcgi:error] [pid 56237:tid 56345] [client 74.248.130.207:18997] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:19:06.993995 2026] [proxy_fcgi:error] [pid 56237:tid 56339] [client 74.248.130.207:18997] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:19:07.327064 2026] [proxy_fcgi:error] [pid 56237:tid 56323] [client 74.248.130.207:18997] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:19:07.642514 2026] [proxy_fcgi:error] [pid 56237:tid 56336] [client 74.248.130.207:18997] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:19:09.223971 2026] [proxy_fcgi:error] [pid 56237:tid 56332] [client 74.248.130.207:18997] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:19:09.590521 2026] [proxy_fcgi:error] [pid 56237:tid 56324] [client 74.248.130.207:18997] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:19:10.194216 2026] [proxy_fcgi:error] [pid 56237:tid 56328] [client 74.248.130.207:18997] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:19:10.575874 2026] [proxy_fcgi:error] [pid 56237:tid 56341] [client 74.248.130.207:18997] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:19:10.899052 2026] [proxy_fcgi:error] [pid 56237:tid 56337] [client 74.248.130.207:18997] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:19:11.218110 2026] [:error] [pid 56237:tid 56330] [client 74.248.130.207:18997] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/asasx.php"] [unique_id "acF2DwymO0MnzQb90MMn1QAAAIk"]
[Tue Mar 24 01:19:13.156853 2026] [:error] [pid 56236:tid 56296] [client 74.248.130.207:19830] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/asasx.php"] [unique_id "acF2EXapFgYp0uZ8twAjlQAAAEM"]
[Tue Mar 24 01:19:14.789440 2026] [:error] [pid 56238:tid 56362] [client 74.248.130.207:18804] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/asasx.php"] [unique_id "acF2ElSqceFAZRgPDq6f7AAAAM4"]
[Tue Mar 24 01:19:17.356722 2026] [:error] [pid 56435:tid 56514] [client 74.248.130.207:19487] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/asasx.php"] [unique_id "acF2Fcrwr-l5A-s9ryB7-AAAAQ0"]
[Tue Mar 24 01:19:18.289307 2026] [:error] [pid 56238:tid 56367] [client 74.248.130.207:18485] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zwso.php"] [unique_id "acF2FlSqceFAZRgPDq6f9AAAANM"]
[Tue Mar 24 01:19:19.288632 2026] [:error] [pid 56435:tid 56517] [client 74.248.130.207:18190] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zwso.php"] [unique_id "acF2F8rwr-l5A-s9ryB8AwAAARA"]
[Tue Mar 24 01:19:20.148280 2026] [:error] [pid 56236:tid 56302] [client 74.248.130.207:19063] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zwso.php"] [unique_id "acF2GHapFgYp0uZ8twAjxAAAAEk"]
[Tue Mar 24 01:19:22.043022 2026] [:error] [pid 56236:tid 56293] [client 74.248.130.207:19221] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zwso.php"] [unique_id "acF2GnapFgYp0uZ8twAj0wAAAEA"]
[Tue Mar 24 01:19:25.666253 2026] [:error] [pid 56435:tid 56503] [client 74.248.130.207:19501] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tqloh.php"] [unique_id "acF2Hcrwr-l5A-s9ryB8KAAAAQQ"]
[Tue Mar 24 01:19:27.600488 2026] [:error] [pid 56435:tid 56514] [client 74.248.130.207:19310] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tqloh.php"] [unique_id "acF2H8rwr-l5A-s9ryB8NwAAAQ0"]
[Tue Mar 24 01:19:30.575697 2026] [:error] [pid 56238:tid 56363] [client 74.248.130.207:19506] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tqloh.php"] [unique_id "acF2IlSqceFAZRgPDq6gEAAAAM8"]
[Tue Mar 24 01:19:31.507378 2026] [:error] [pid 56435:tid 56518] [client 74.248.130.207:19031] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tqloh.php"] [unique_id "acF2I8rwr-l5A-s9ryB8XQAAARE"]
[Tue Mar 24 01:19:32.970215 2026] [:error] [pid 56435:tid 56509] [client 74.248.130.207:18500] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tt.php"] [unique_id "acF2JMrwr-l5A-s9ryB8ZQAAAQk"]
[Tue Mar 24 01:19:34.711201 2026] [:error] [pid 56435:tid 56501] [client 74.248.130.207:19526] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tt.php"] [unique_id "acF2Jsrwr-l5A-s9ryB8eAAAAQI"]
[Tue Mar 24 01:19:35.782660 2026] [:error] [pid 56435:tid 56513] [client 74.248.130.207:19836] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tt.php"] [unique_id "acF2J8rwr-l5A-s9ryB8fwAAAQw"]
[Tue Mar 24 01:19:36.837550 2026] [:error] [pid 56236:tid 56298] [client 74.248.130.207:18974] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tt.php"] [unique_id "acF2KHapFgYp0uZ8twAj_gAAAEU"]
[Tue Mar 24 01:19:39.085164 2026] [:error] [pid 56238:tid 56362] [client 74.248.130.207:19782] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xl9.php"] [unique_id "acF2K1SqceFAZRgPDq6gKgAAAM4"]
[Tue Mar 24 01:19:40.665031 2026] [:error] [pid 56237:tid 56328] [client 74.248.130.207:19718] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xl9.php"] [unique_id "acF2LAymO0MnzQb90MMn_QAAAIc"]
[Tue Mar 24 01:19:41.802805 2026] [:error] [pid 56435:tid 56520] [client 74.248.130.207:19746] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xl9.php"] [unique_id "acF2Lcrwr-l5A-s9ryB8qwAAARM"]
[Tue Mar 24 01:19:43.916307 2026] [:error] [pid 56236:tid 56317] [client 74.248.130.207:19059] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xl9.php"] [unique_id "acF2L3apFgYp0uZ8twAkDwAAAFg"]
[Tue Mar 24 01:19:44.473691 2026] [:error] [pid 56435:tid 56518] [client 74.248.130.207:20022] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/acwfihfh.php"] [unique_id "acF2MMrwr-l5A-s9ryB8swAAARE"]
[Tue Mar 24 01:19:46.343291 2026] [:error] [pid 56435:tid 56522] [client 74.248.130.207:18815] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/acwfihfh.php"] [unique_id "acF2Msrwr-l5A-s9ryB8wgAAARU"]
[Tue Mar 24 01:19:47.877043 2026] [:error] [pid 56238:tid 56359] [client 74.248.130.207:20090] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/acwfihfh.php"] [unique_id "acF2M1SqceFAZRgPDq6gTgAAAMs"]
[Tue Mar 24 01:19:49.141741 2026] [:error] [pid 56238:tid 56354] [client 74.248.130.207:19208] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/acwfihfh.php"] [unique_id "acF2NVSqceFAZRgPDq6gVwAAAMY"]
[Tue Mar 24 01:19:51.563343 2026] [:error] [pid 56435:tid 56520] [client 74.248.130.207:18187] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "acF2N8rwr-l5A-s9ryB82AAAARM"]
[Tue Mar 24 01:19:54.323961 2026] [:error] [pid 56435:tid 56510] [client 74.248.130.207:19224] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "acF2Osrwr-l5A-s9ryB88AAAAQo"]
[Tue Mar 24 01:19:55.237133 2026] [:error] [pid 56237:tid 56332] [client 74.248.130.207:20001] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "acF2OwymO0MnzQb90MMoIgAAAIs"]
[Tue Mar 24 01:19:56.158446 2026] [:error] [pid 56435:tid 56511] [client 74.248.130.207:18735] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "acF2PMrwr-l5A-s9ryB8_wAAAQs"]
[Tue Mar 24 01:19:58.716139 2026] [:error] [pid 56237:tid 56329] [client 74.248.130.207:18238] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-ana.php"] [unique_id "acF2PgymO0MnzQb90MMoMAAAAIg"]
[Tue Mar 24 01:19:59.968004 2026] [:error] [pid 56237:tid 56336] [client 74.248.130.207:19837] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-ana.php"] [unique_id "acF2PwymO0MnzQb90MMoNAAAAI8"]
[Tue Mar 24 01:20:04.968709 2026] [:error] [pid 56435:tid 56511] [client 74.248.130.207:19281] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-ana.php"] [unique_id "acF2RMrwr-l5A-s9ryB9HAAAAQs"]
[Tue Mar 24 01:20:32.022833 2026] [proxy_fcgi:error] [pid 56237:tid 56323] [client 74.248.130.207:19557] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:20:32.283647 2026] [proxy_fcgi:error] [pid 56237:tid 56344] [client 74.248.130.207:19557] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:20:32.583140 2026] [proxy_fcgi:error] [pid 56237:tid 56325] [client 74.248.130.207:19557] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:20:32.879641 2026] [proxy_fcgi:error] [pid 56237:tid 56329] [client 74.248.130.207:19557] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:20:33.194177 2026] [proxy_fcgi:error] [pid 56237:tid 56339] [client 74.248.130.207:19557] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:20:33.514683 2026] [proxy_fcgi:error] [pid 56237:tid 56324] [client 74.248.130.207:19557] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:20:33.861724 2026] [proxy_fcgi:error] [pid 56237:tid 56338] [client 74.248.130.207:19557] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:20:35.650736 2026] [proxy_fcgi:error] [pid 56237:tid 56345] [client 74.248.130.207:19557] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:20:35.976496 2026] [proxy_fcgi:error] [pid 56237:tid 56327] [client 74.248.130.207:19557] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:20:36.323549 2026] [proxy_fcgi:error] [pid 56237:tid 56337] [client 74.248.130.207:19557] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:20:36.582495 2026] [proxy_fcgi:error] [pid 56237:tid 56330] [client 74.248.130.207:19557] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:20:36.839618 2026] [:error] [pid 56237:tid 56333] [client 74.248.130.207:19557] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/end.php"] [unique_id "acF2ZAymO0MnzQb90MMoxwAAAIw"]
[Tue Mar 24 01:20:58.848931 2026] [:error] [pid 56237:tid 56337] [client 74.248.130.207:20083] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/alfa.php"] [unique_id "acF2egymO0MnzQb90MMo9AAAAJA"]
[Tue Mar 24 01:21:00.184893 2026] [:error] [pid 56238:tid 56351] [client 74.248.130.207:20046] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/alfa.php"] [unique_id "acF2fFSqceFAZRgPDq6hJQAAAMM"]
[Tue Mar 24 01:21:01.645064 2026] [:error] [pid 56237:tid 56332] [client 74.248.130.207:19497] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/alfa.php"] [unique_id "acF2fQymO0MnzQb90MMo9gAAAIs"]
[Tue Mar 24 01:21:02.564953 2026] [:error] [pid 56236:tid 56302] [client 74.248.130.207:20581] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/alfa.php"] [unique_id "acF2fnapFgYp0uZ8twAkvAAAAEk"]
[Tue Mar 24 01:21:04.940296 2026] [:error] [pid 56238:tid 56367] [client 74.248.130.207:20515] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/503.php"] [unique_id "acF2gFSqceFAZRgPDq6hMgAAANM"]
[Tue Mar 24 01:21:06.722856 2026] [:error] [pid 56238:tid 56351] [client 74.248.130.207:19325] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/503.php"] [unique_id "acF2glSqceFAZRgPDq6hNAAAAMM"]
[Tue Mar 24 01:21:08.265827 2026] [:error] [pid 56435:tid 56517] [client 74.248.130.207:19214] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/503.php"] [unique_id "acF2hMrwr-l5A-s9ryB-cQAAARA"]
[Tue Mar 24 01:21:09.935927 2026] [:error] [pid 56238:tid 56351] [client 74.248.130.207:20006] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/503.php"] [unique_id "acF2hVSqceFAZRgPDq6hQQAAAMM"]
[Tue Mar 24 01:21:11.961556 2026] [:error] [pid 56238:tid 56368] [client 74.248.130.207:20855] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/index.php"] [unique_id "acF2h1SqceFAZRgPDq6hRgAAANQ"]
[Tue Mar 24 01:21:13.339998 2026] [:error] [pid 56435:tid 56502] [client 74.248.130.207:19792] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/index.php"] [unique_id "acF2icrwr-l5A-s9ryB-gwAAAQM"]
[Tue Mar 24 01:21:14.354949 2026] [:error] [pid 56236:tid 56295] [client 74.248.130.207:20043] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/index.php"] [unique_id "acF2inapFgYp0uZ8twAk3wAAAEI"]
[Tue Mar 24 01:21:18.638449 2026] [:error] [pid 56236:tid 56301] [client 74.248.130.207:20538] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/index.php"] [unique_id "acF2jnapFgYp0uZ8twAk7AAAAEg"]
[Tue Mar 24 01:21:20.455838 2026] [:error] [pid 56435:tid 56511] [client 74.248.130.207:20244] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ay.php"] [unique_id "acF2kMrwr-l5A-s9ryB-lAAAAQs"]
[Tue Mar 24 01:21:21.482369 2026] [:error] [pid 56238:tid 56362] [client 74.248.130.207:20077] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ay.php"] [unique_id "acF2kVSqceFAZRgPDq6hWgAAAM4"]
[Tue Mar 24 01:21:22.719636 2026] [:error] [pid 56435:tid 56524] [client 74.248.130.207:20060] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ay.php"] [unique_id "acF2ksrwr-l5A-s9ryB-ogAAARc"]
[Tue Mar 24 01:21:23.871636 2026] [:error] [pid 56237:tid 56332] [client 74.248.130.207:20588] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ay.php"] [unique_id "acF2kwymO0MnzQb90MMpDgAAAIs"]
[Tue Mar 24 01:21:26.335286 2026] [:error] [pid 56237:tid 56342] [client 74.248.130.207:20349] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rendi59.php"] [unique_id "acF2lgymO0MnzQb90MMpHwAAAJU"]
[Tue Mar 24 01:21:27.788857 2026] [:error] [pid 56236:tid 56302] [client 74.248.130.207:20546] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rendi59.php"] [unique_id "acF2l3apFgYp0uZ8twAk8wAAAEk"]
[Tue Mar 24 01:21:31.247948 2026] [:error] [pid 56237:tid 56328] [client 74.248.130.207:20565] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rendi59.php"] [unique_id "acF2mwymO0MnzQb90MMpKQAAAIc"]
[Tue Mar 24 01:21:32.428144 2026] [:error] [pid 56435:tid 56511] [client 74.248.130.207:19519] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rendi59.php"] [unique_id "acF2nMrwr-l5A-s9ryB-wAAAAQs"]
[Tue Mar 24 01:21:34.574049 2026] [:error] [pid 56236:tid 56296] [client 74.248.130.207:20328] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ha.php"] [unique_id "acF2nnapFgYp0uZ8twAlBwAAAEM"]
[Tue Mar 24 01:21:37.042639 2026] [proxy_fcgi:error] [pid 56237:tid 56322] [client 74.248.130.207:19763] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:21:37.645046 2026] [:error] [pid 56237:tid 56336] [client 74.248.130.207:19763] [client 74.248.130.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/fonts/themes.php"] [unique_id "acF2oQymO0MnzQb90MMpOQAAAI8"]
[Tue Mar 24 01:21:41.580826 2026] [proxy_fcgi:error] [pid 56435:tid 56519] [client 74.248.130.207:19802] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:21:41.942765 2026] [proxy_fcgi:error] [pid 56435:tid 56517] [client 74.248.130.207:19802] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:21:42.403310 2026] [proxy_fcgi:error] [pid 56435:tid 56505] [client 74.248.130.207:19802] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:21:42.769633 2026] [proxy_fcgi:error] [pid 56435:tid 56502] [client 74.248.130.207:19802] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:21:43.147126 2026] [proxy_fcgi:error] [pid 56435:tid 56508] [client 74.248.130.207:19802] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:21:43.407313 2026] [proxy_fcgi:error] [pid 56435:tid 56516] [client 74.248.130.207:19802] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:21:44.027016 2026] [proxy_fcgi:error] [pid 56435:tid 56500] [client 74.248.130.207:19802] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:21:44.405936 2026] [proxy_fcgi:error] [pid 56435:tid 56524] [client 74.248.130.207:19802] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:21:44.700167 2026] [proxy_fcgi:error] [pid 56435:tid 56501] [client 74.248.130.207:19802] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:21:44.960110 2026] [:error] [pid 56435:tid 56510] [client 74.248.130.207:19802] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-mails.php"] [unique_id "acF2qMrwr-l5A-s9ryB-8AAAAQo"]
[Tue Mar 24 01:21:45.908143 2026] [:error] [pid 56236:tid 56313] [client 74.248.130.207:20273] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-mails.php"] [unique_id "acF2qXapFgYp0uZ8twAlKwAAAFQ"]
[Tue Mar 24 01:21:47.030825 2026] [:error] [pid 56238:tid 56362] [client 74.248.130.207:20830] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-mails.php"] [unique_id "acF2q1SqceFAZRgPDq6hngAAAM4"]
[Tue Mar 24 01:21:48.669126 2026] [:error] [pid 56237:tid 56338] [client 74.248.130.207:19716] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-mails.php"] [unique_id "acF2rAymO0MnzQb90MMpaAAAAJE"]
[Tue Mar 24 01:21:50.441281 2026] [:error] [pid 56237:tid 56339] [client 74.248.130.207:21070] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/1vbqo.php"] [unique_id "acF2rgymO0MnzQb90MMpdwAAAJI"]
[Tue Mar 24 01:21:52.658802 2026] [:error] [pid 56236:tid 56303] [client 74.248.130.207:19569] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/1vbqo.php"] [unique_id "acF2sHapFgYp0uZ8twAlOQAAAEo"]
[Tue Mar 24 01:21:53.796997 2026] [:error] [pid 56238:tid 56362] [client 74.248.130.207:19980] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/1vbqo.php"] [unique_id "acF2sVSqceFAZRgPDq6hrwAAAM4"]
[Tue Mar 24 01:21:55.428618 2026] [:error] [pid 56435:tid 56503] [client 74.248.130.207:18790] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/1vbqo.php"] [unique_id "acF2s8rwr-l5A-s9ryB_CAAAAQQ"]
[Tue Mar 24 01:21:58.099561 2026] [:error] [pid 56236:tid 56316] [client 74.248.130.207:21016] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/monso.php"] [unique_id "acF2tnapFgYp0uZ8twAlTQAAAFc"]
[Tue Mar 24 01:21:59.715436 2026] [:error] [pid 56238:tid 56351] [client 74.248.130.207:20847] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/monso.php"] [unique_id "acF2t1SqceFAZRgPDq6hyQAAAMM"]
[Tue Mar 24 01:22:01.447164 2026] [:error] [pid 56435:tid 56513] [client 74.248.130.207:21104] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/monso.php"] [unique_id "acF2ucrwr-l5A-s9ryB_JgAAAQw"]
[Tue Mar 24 01:22:02.364624 2026] [:error] [pid 56237:tid 56339] [client 74.248.130.207:20568] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/monso.php"] [unique_id "acF2ugymO0MnzQb90MMpswAAAJI"]
[Tue Mar 24 01:22:04.119178 2026] [:error] [pid 56238:tid 56363] [client 74.248.130.207:20801] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hq.php"] [unique_id "acF2vFSqceFAZRgPDq6h1AAAAM8"]
[Tue Mar 24 01:22:05.610729 2026] [:error] [pid 56236:tid 56312] [client 74.248.130.207:20815] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hq.php"] [unique_id "acF2vXapFgYp0uZ8twAlWgAAAFM"]
[Tue Mar 24 01:22:06.818122 2026] [:error] [pid 56238:tid 56353] [client 74.248.130.207:20236] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hq.php"] [unique_id "acF2vlSqceFAZRgPDq6h3wAAAMU"]
[Tue Mar 24 01:22:07.869570 2026] [:error] [pid 56237:tid 56343] [client 74.248.130.207:19741] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hq.php"] [unique_id "acF2vwymO0MnzQb90MMpzAAAAJY"]
[Tue Mar 24 01:22:08.958677 2026] [:error] [pid 56237:tid 56340] [client 74.248.130.207:20996] [client 74.248.130.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Requests/Text/admin.php"] [unique_id "acF2wAymO0MnzQb90MMp1gAAAJM"]
[Tue Mar 24 01:22:10.801889 2026] [:error] [pid 56435:tid 56508] [client 74.248.130.207:20555] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-eux6r.php"] [unique_id "acF2wsrwr-l5A-s9ryB_VgAAAQg"]
[Tue Mar 24 01:22:11.556307 2026] [:error] [pid 56435:tid 56510] [client 74.248.130.207:20576] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-eux6r.php"] [unique_id "acF2w8rwr-l5A-s9ryB_XQAAAQo"]
[Tue Mar 24 01:22:12.538708 2026] [:error] [pid 56237:tid 56345] [client 74.248.130.207:21334] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-eux6r.php"] [unique_id "acF2xAymO0MnzQb90MMp7wAAAJg"]
[Tue Mar 24 01:22:14.196028 2026] [:error] [pid 56238:tid 56367] [client 74.248.130.207:20053] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-eux6r.php"] [unique_id "acF2xlSqceFAZRgPDq6h9wAAANM"]
[Tue Mar 24 01:22:15.591297 2026] [:error] [pid 56237:tid 56337] [client 74.248.130.207:19749] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/pwyjwrfr.php"] [unique_id "acF2xwymO0MnzQb90MMp-gAAAJA"]
[Tue Mar 24 01:22:17.559986 2026] [:error] [pid 56238:tid 56356] [client 74.248.130.207:19794] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/pwyjwrfr.php"] [unique_id "acF2yVSqceFAZRgPDq6iAQAAAMg"]
[Tue Mar 24 01:22:19.256321 2026] [:error] [pid 56435:tid 56523] [client 74.248.130.207:19748] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/pwyjwrfr.php"] [unique_id "acF2y8rwr-l5A-s9ryB_ggAAARY"]
[Tue Mar 24 01:22:20.272200 2026] [:error] [pid 56435:tid 56502] [client 74.248.130.207:19828] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/pwyjwrfr.php"] [unique_id "acF2zMrwr-l5A-s9ryB_igAAAQM"]
[Tue Mar 24 01:22:21.653951 2026] [:error] [pid 56236:tid 56294] [client 74.248.130.207:20331] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/indexs.php"] [unique_id "acF2zXapFgYp0uZ8twAldQAAAEE"]
[Tue Mar 24 01:22:22.910902 2026] [:error] [pid 56435:tid 56521] [client 74.248.130.207:20275] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/indexs.php"] [unique_id "acF2zsrwr-l5A-s9ryB_pAAAARQ"]
[Tue Mar 24 01:22:25.368147 2026] [:error] [pid 56435:tid 56501] [client 74.248.130.207:21372] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/indexs.php"] [unique_id "acF20crwr-l5A-s9ryB_sgAAAQI"]
[Tue Mar 24 01:22:26.570890 2026] [:error] [pid 56238:tid 56359] [client 74.248.130.207:20837] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/indexs.php"] [unique_id "acF20lSqceFAZRgPDq6iFQAAAMs"]
[Tue Mar 24 01:22:27.606969 2026] [:error] [pid 56238:tid 56352] [client 74.248.130.207:20511] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fso.php"] [unique_id "acF201SqceFAZRgPDq6iFgAAAMQ"]
[Tue Mar 24 01:22:29.155720 2026] [:error] [pid 56435:tid 56508] [client 74.248.130.207:20577] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fso.php"] [unique_id "acF21crwr-l5A-s9ryB_xQAAAQg"]
[Tue Mar 24 01:22:30.392307 2026] [:error] [pid 56435:tid 56516] [client 74.248.130.207:21337] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fso.php"] [unique_id "acF21srwr-l5A-s9ryB_zAAAAQ8"]
[Tue Mar 24 01:22:32.277439 2026] [:error] [pid 56435:tid 56523] [client 74.248.130.207:19991] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fso.php"] [unique_id "acF22Mrwr-l5A-s9ryB_0wAAARY"]
[Tue Mar 24 01:22:33.413187 2026] [:error] [pid 56435:tid 56524] [client 74.248.130.207:21317] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/an.php"] [unique_id "acF22crwr-l5A-s9ryB_3AAAARc"]
[Tue Mar 24 01:22:34.807311 2026] [:error] [pid 56435:tid 56517] [client 74.248.130.207:20294] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/an.php"] [unique_id "acF22srwr-l5A-s9ryB_6QAAARA"]
[Tue Mar 24 01:22:35.809863 2026] [:error] [pid 56236:tid 56308] [client 74.248.130.207:20316] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/an.php"] [unique_id "acF223apFgYp0uZ8twAljQAAAE8"]
[Tue Mar 24 01:22:37.257685 2026] [:error] [pid 56435:tid 56507] [client 74.248.130.207:21258] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/an.php"] [unique_id "acF23crwr-l5A-s9ryB_9wAAAQc"]
[Tue Mar 24 01:22:39.727982 2026] [:error] [pid 56435:tid 56507] [client 74.248.130.207:20045] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/alf.php"] [unique_id "acF238rwr-l5A-s9ryCABAAAAQc"]
[Tue Mar 24 01:22:41.247999 2026] [:error] [pid 56237:tid 56333] [client 74.248.130.207:21068] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/alf.php"] [unique_id "acF24QymO0MnzQb90MMqMAAAAIw"]
[Tue Mar 24 01:22:43.727250 2026] [:error] [pid 56435:tid 56516] [client 74.248.130.207:21574] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/alf.php"] [unique_id "acF248rwr-l5A-s9ryCADQAAAQ8"]
[Tue Mar 24 01:22:45.072976 2026] [proxy_fcgi:error] [pid 56238:tid 56359] [client 74.248.130.207:21087] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:22:45.410315 2026] [proxy_fcgi:error] [pid 56238:tid 56351] [client 74.248.130.207:21087] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:22:45.670056 2026] [proxy_fcgi:error] [pid 56238:tid 56370] [client 74.248.130.207:21087] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:22:46.019055 2026] [proxy_fcgi:error] [pid 56238:tid 56361] [client 74.248.130.207:21087] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:22:46.410489 2026] [proxy_fcgi:error] [pid 56238:tid 56355] [client 74.248.130.207:21087] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:22:47.207999 2026] [proxy_fcgi:error] [pid 56238:tid 56356] [client 74.248.130.207:21087] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:22:48.311756 2026] [proxy_fcgi:error] [pid 56238:tid 56372] [client 74.248.130.207:21087] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:22:48.712000 2026] [proxy_fcgi:error] [pid 56238:tid 56361] [client 74.248.130.207:21087] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:22:48.986865 2026] [proxy_fcgi:error] [pid 56238:tid 56365] [client 74.248.130.207:21087] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:22:49.310213 2026] [:error] [pid 56238:tid 56359] [client 74.248.130.207:21087] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/delete3.php"] [unique_id "acF26VSqceFAZRgPDq6iWwAAAMs"]
[Tue Mar 24 01:22:50.500604 2026] [:error] [pid 56238:tid 56350] [client 74.248.130.207:20580] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/delete3.php"] [unique_id "acF26lSqceFAZRgPDq6iYgAAAMI"]
[Tue Mar 24 01:22:52.209777 2026] [:error] [pid 56237:tid 56336] [client 74.248.130.207:20746] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/delete3.php"] [unique_id "acF27AymO0MnzQb90MMqPQAAAI8"]
[Tue Mar 24 01:22:53.247288 2026] [:error] [pid 56238:tid 56355] [client 74.248.130.207:20249] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/delete3.php"] [unique_id "acF27VSqceFAZRgPDq6iZwAAAMc"]
[Tue Mar 24 01:22:54.038352 2026] [:error] [pid 56435:tid 56520] [client 74.248.130.207:20346] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jatest4.php"] [unique_id "acF27srwr-l5A-s9ryCANQAAARM"]
[Tue Mar 24 01:22:55.524827 2026] [:error] [pid 56238:tid 56367] [client 74.248.130.207:21375] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jatest4.php"] [unique_id "acF271SqceFAZRgPDq6icgAAANM"]
[Tue Mar 24 01:23:00.007302 2026] [:error] [pid 56238:tid 56364] [client 74.248.130.207:20086] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jatest4.php"] [unique_id "acF29FSqceFAZRgPDq6ifQAAANA"]
[Tue Mar 24 01:23:49.725892 2026] [proxy_fcgi:error] [pid 56237:tid 56345] [client 74.248.130.207:20601] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:23:50.285751 2026] [proxy_fcgi:error] [pid 56237:tid 56335] [client 74.248.130.207:20601] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:23:50.597038 2026] [proxy_fcgi:error] [pid 56237:tid 56323] [client 74.248.130.207:20601] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:23:50.862060 2026] [proxy_fcgi:error] [pid 56237:tid 56342] [client 74.248.130.207:20601] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:23:51.169596 2026] [proxy_fcgi:error] [pid 56237:tid 56337] [client 74.248.130.207:20601] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:23:51.552531 2026] [proxy_fcgi:error] [pid 56237:tid 56345] [client 74.248.130.207:20601] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:23:51.969306 2026] [proxy_fcgi:error] [pid 56237:tid 56332] [client 74.248.130.207:20601] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:23:52.229692 2026] [proxy_fcgi:error] [pid 56237:tid 56339] [client 74.248.130.207:20601] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:23:52.543555 2026] [proxy_fcgi:error] [pid 56237:tid 56331] [client 74.248.130.207:20601] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:23:52.872278 2026] [proxy_fcgi:error] [pid 56237:tid 56323] [client 74.248.130.207:20601] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:23:53.126858 2026] [:error] [pid 56237:tid 56341] [client 74.248.130.207:20601] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/1234.php"] [unique_id "acF3KQymO0MnzQb90MMq7gAAAJQ"]
[Tue Mar 24 01:23:53.964125 2026] [:error] [pid 56237:tid 56337] [client 74.248.130.207:21301] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/1234.php"] [unique_id "acF3KQymO0MnzQb90MMq8QAAAJA"]
[Tue Mar 24 01:23:55.436380 2026] [:error] [pid 56238:tid 56372] [client 74.248.130.207:21018] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/1234.php"] [unique_id "acF3K1SqceFAZRgPDq6jCwAAANg"]
[Tue Mar 24 01:23:56.635061 2026] [:error] [pid 56236:tid 56306] [client 74.248.130.207:20769] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/1234.php"] [unique_id "acF3LHapFgYp0uZ8twAmJQAAAE0"]
[Tue Mar 24 01:23:57.696837 2026] [:error] [pid 56435:tid 56525] [client 74.248.130.207:22125] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/woh.php"] [unique_id "acF3Lcrwr-l5A-s9ryCBXQAAARg"]
[Tue Mar 24 01:23:59.093304 2026] [:error] [pid 56435:tid 56523] [client 74.248.130.207:21624] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/woh.php"] [unique_id "acF3L8rwr-l5A-s9ryCBYwAAARY"]
[Tue Mar 24 01:23:59.871568 2026] [:error] [pid 56236:tid 56303] [client 74.248.130.207:20832] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/woh.php"] [unique_id "acF3L3apFgYp0uZ8twAmLwAAAEo"]
[Tue Mar 24 01:24:01.721088 2026] [:error] [pid 56435:tid 56510] [client 74.248.130.207:21270] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/woh.php"] [unique_id "acF3Mcrwr-l5A-s9ryCBdAAAAQo"]
[Tue Mar 24 01:24:03.012536 2026] [:error] [pid 56238:tid 56351] [client 74.248.130.207:20527] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/i.php"] [unique_id "acF3M1SqceFAZRgPDq6jGAAAAMM"]
[Tue Mar 24 01:24:04.789453 2026] [:error] [pid 56238:tid 56354] [client 74.248.130.207:22019] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/i.php"] [unique_id "acF3NFSqceFAZRgPDq6jHgAAAMY"]
[Tue Mar 24 01:24:06.883149 2026] [:error] [pid 56435:tid 56503] [client 74.248.130.207:20504] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/i.php"] [unique_id "acF3Nsrwr-l5A-s9ryCBiQAAAQQ"]
[Tue Mar 24 01:24:08.335192 2026] [:error] [pid 56435:tid 56508] [client 74.248.130.207:21082] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/i.php"] [unique_id "acF3OMrwr-l5A-s9ryCBjgAAAQg"]
[Tue Mar 24 01:24:09.448320 2026] [:error] [pid 56236:tid 56306] [client 74.248.130.207:20545] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mini.php"] [unique_id "acF3OXapFgYp0uZ8twAmQgAAAE0"]
[Tue Mar 24 01:24:10.651059 2026] [:error] [pid 56435:tid 56516] [client 74.248.130.207:20245] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mini.php"] [unique_id "acF3Osrwr-l5A-s9ryCBlAAAAQ8"]
[Tue Mar 24 01:24:12.140145 2026] [:error] [pid 56238:tid 56349] [client 74.248.130.207:21041] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mini.php"] [unique_id "acF3PFSqceFAZRgPDq6jPQAAAME"]
[Tue Mar 24 01:24:13.401136 2026] [:error] [pid 56237:tid 56328] [client 74.248.130.207:22027] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mini.php"] [unique_id "acF3PQymO0MnzQb90MMrBgAAAIc"]
[Tue Mar 24 01:24:15.551032 2026] [:error] [pid 56238:tid 56355] [client 74.248.130.207:21078] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/wso112233.php"] [unique_id "acF3P1SqceFAZRgPDq6jRgAAAMc"]
[Tue Mar 24 01:24:16.451811 2026] [:error] [pid 56435:tid 56519] [client 74.248.130.207:22133] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/wso112233.php"] [unique_id "acF3QMrwr-l5A-s9ryCBtwAAARI"]
[Tue Mar 24 01:24:17.651924 2026] [:error] [pid 56238:tid 56371] [client 74.248.130.207:21318] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/wso112233.php"] [unique_id "acF3QVSqceFAZRgPDq6jUQAAANc"]
[Tue Mar 24 01:24:18.650791 2026] [:error] [pid 56238:tid 56351] [client 74.248.130.207:22350] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/wso112233.php"] [unique_id "acF3QlSqceFAZRgPDq6jWgAAAMM"]
[Tue Mar 24 01:24:21.125724 2026] [:error] [pid 56237:tid 56321] [client 74.248.130.207:21251] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/akcc.php"] [unique_id "acF3RQymO0MnzQb90MMrDgAAAIA"]
[Tue Mar 24 01:24:22.052420 2026] [:error] [pid 56237:tid 56345] [client 74.248.130.207:21331] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/akcc.php"] [unique_id "acF3RgymO0MnzQb90MMrEwAAAJg"]
[Tue Mar 24 01:24:25.745961 2026] [:error] [pid 56237:tid 56328] [client 74.248.130.207:22377] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/akcc.php"] [unique_id "acF3SQymO0MnzQb90MMrFwAAAIc"]
[Tue Mar 24 01:24:28.299246 2026] [:error] [pid 56435:tid 56522] [client 74.248.130.207:22398] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/akcc.php"] [unique_id "acF3TMrwr-l5A-s9ryCB2AAAARU"]
[Tue Mar 24 01:24:30.351657 2026] [:error] [pid 56435:tid 56513] [client 74.248.130.207:21621] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bb.php"] [unique_id "acF3Tsrwr-l5A-s9ryCB2wAAAQw"]
[Tue Mar 24 01:24:32.487631 2026] [:error] [pid 56238:tid 56371] [client 74.248.130.207:21269] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bb.php"] [unique_id "acF3UFSqceFAZRgPDq6jiAAAANc"]
[Tue Mar 24 01:24:34.383419 2026] [:error] [pid 56435:tid 56522] [client 74.248.130.207:20839] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bb.php"] [unique_id "acF3Usrwr-l5A-s9ryCCAAAAARU"]
[Tue Mar 24 01:24:35.992005 2026] [:error] [pid 56237:tid 56341] [client 74.248.130.207:21568] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bb.php"] [unique_id "acF3UwymO0MnzQb90MMrLgAAAJQ"]
[Tue Mar 24 01:24:37.359711 2026] [:error] [pid 56435:tid 56510] [client 74.248.130.207:21513] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-title.php"] [unique_id "acF3Vcrwr-l5A-s9ryCCDAAAAQo"]
[Tue Mar 24 01:24:38.387247 2026] [:error] [pid 56238:tid 56363] [client 74.248.130.207:21338] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-title.php"] [unique_id "acF3VlSqceFAZRgPDq6jogAAAM8"]
[Tue Mar 24 01:24:39.962787 2026] [:error] [pid 56237:tid 56335] [client 74.248.130.207:21022] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-title.php"] [unique_id "acF3VwymO0MnzQb90MMrNAAAAI4"]
[Tue Mar 24 01:24:41.475956 2026] [:error] [pid 56435:tid 56521] [client 74.248.130.207:22113] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-title.php"] [unique_id "acF3Wcrwr-l5A-s9ryCCIgAAARQ"]
[Tue Mar 24 01:24:42.607333 2026] [:error] [pid 56236:tid 56296] [client 74.248.130.207:21069] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mga.php"] [unique_id "acF3WnapFgYp0uZ8twAmdgAAAEM"]
[Tue Mar 24 01:24:44.422297 2026] [:error] [pid 56236:tid 56305] [client 74.248.130.207:21555] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mga.php"] [unique_id "acF3XHapFgYp0uZ8twAmhwAAAEw"]
[Tue Mar 24 01:24:45.700175 2026] [:error] [pid 56238:tid 56367] [client 74.248.130.207:21088] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mga.php"] [unique_id "acF3XVSqceFAZRgPDq6jvwAAANM"]
[Tue Mar 24 01:24:47.307906 2026] [:error] [pid 56236:tid 56308] [client 74.248.130.207:22574] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mga.php"] [unique_id "acF3X3apFgYp0uZ8twAmnQAAAE8"]
[Tue Mar 24 01:24:48.380378 2026] [:error] [pid 56435:tid 56518] [client 74.248.130.207:21095] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/about.php"] [unique_id "acF3YMrwr-l5A-s9ryCCOgAAARE"]
[Tue Mar 24 01:24:49.367004 2026] [:error] [pid 56238:tid 56350] [client 74.248.130.207:22604] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/about.php"] [unique_id "acF3YVSqceFAZRgPDq6j2gAAAMI"]
[Tue Mar 24 01:24:50.248030 2026] [:error] [pid 56435:tid 56501] [client 74.248.130.207:22124] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/about.php"] [unique_id "acF3Ysrwr-l5A-s9ryCCRAAAAQI"]
[Tue Mar 24 01:24:52.064032 2026] [proxy_fcgi:error] [pid 56236:tid 56293] [client 74.248.130.207:21569] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:24:52.459410 2026] [proxy_fcgi:error] [pid 56236:tid 56296] [client 74.248.130.207:21569] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:24:53.162745 2026] [proxy_fcgi:error] [pid 56236:tid 56298] [client 74.248.130.207:21569] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:24:53.527012 2026] [proxy_fcgi:error] [pid 56236:tid 56295] [client 74.248.130.207:21569] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:24:53.786631 2026] [proxy_fcgi:error] [pid 56236:tid 56314] [client 74.248.130.207:21569] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:24:54.044985 2026] [proxy_fcgi:error] [pid 56236:tid 56311] [client 74.248.130.207:21569] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:24:54.429511 2026] [proxy_fcgi:error] [pid 56236:tid 56312] [client 74.248.130.207:21569] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:24:54.788640 2026] [proxy_fcgi:error] [pid 56236:tid 56305] [client 74.248.130.207:21569] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:24:55.191709 2026] [proxy_fcgi:error] [pid 56236:tid 56317] [client 74.248.130.207:21569] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:24:55.540903 2026] [proxy_fcgi:error] [pid 56236:tid 56315] [client 74.248.130.207:21569] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:24:56.101009 2026] [:error] [pid 56236:tid 56303] [client 74.248.130.207:21569] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/logo_img.php"] [unique_id "acF3aHapFgYp0uZ8twAm2QAAAEo"]
[Tue Mar 24 01:24:57.722159 2026] [:error] [pid 56435:tid 56504] [client 74.248.130.207:21887] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/logo_img.php"] [unique_id "acF3acrwr-l5A-s9ryCCggAAAQU"]
[Tue Mar 24 01:24:59.217749 2026] [:error] [pid 56435:tid 56510] [client 74.248.130.207:21039] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/logo_img.php"] [unique_id "acF3a8rwr-l5A-s9ryCCjwAAAQo"]
[Tue Mar 24 01:25:00.850308 2026] [:error] [pid 56237:tid 56321] [client 74.248.130.207:21034] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/logo_img.php"] [unique_id "acF3bAymO0MnzQb90MMrcwAAAIA"]
[Tue Mar 24 01:25:02.612923 2026] [:error] [pid 56435:tid 56501] [client 74.248.130.207:22375] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/spread.php"] [unique_id "acF3bsrwr-l5A-s9ryCCqQAAAQI"]
[Tue Mar 24 01:25:04.475108 2026] [:error] [pid 56238:tid 56361] [client 74.248.130.207:21119] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/spread.php"] [unique_id "acF3cFSqceFAZRgPDq6kGgAAAM0"]
[Tue Mar 24 01:25:06.720525 2026] [:error] [pid 56238:tid 56371] [client 74.248.130.207:21811] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/spread.php"] [unique_id "acF3clSqceFAZRgPDq6kLgAAANc"]
[Tue Mar 24 01:25:09.584155 2026] [:error] [pid 56236:tid 56316] [client 74.248.130.207:20818] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/spread.php"] [unique_id "acF3dXapFgYp0uZ8twAm7QAAAFc"]
[Tue Mar 24 01:25:11.046150 2026] [:error] [pid 56236:tid 56315] [client 74.248.130.207:22069] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/21x.php"] [unique_id "acF3d3apFgYp0uZ8twAm8wAAAFY"]
[Tue Mar 24 01:25:12.609133 2026] [:error] [pid 56435:tid 56525] [client 74.248.130.207:21057] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/21x.php"] [unique_id "acF3eMrwr-l5A-s9ryCC1AAAARg"]
[Tue Mar 24 01:25:14.511986 2026] [:error] [pid 56435:tid 56500] [client 74.248.130.207:21114] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/21x.php"] [unique_id "acF3esrwr-l5A-s9ryCC3AAAAQE"]
[Tue Mar 24 01:25:15.620558 2026] [:error] [pid 56435:tid 56520] [client 74.248.130.207:22622] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/21x.php"] [unique_id "acF3e8rwr-l5A-s9ryCC6AAAARM"]
[Tue Mar 24 01:25:16.904421 2026] [:error] [pid 56435:tid 56521] [client 74.248.130.207:21783] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/law.php"] [unique_id "acF3fMrwr-l5A-s9ryCC8gAAARQ"]
[Tue Mar 24 01:25:18.118662 2026] [:error] [pid 56237:tid 56339] [client 74.248.130.207:21522] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/law.php"] [unique_id "acF3fgymO0MnzQb90MMrnQAAAJI"]
[Tue Mar 24 01:25:19.901306 2026] [:error] [pid 56435:tid 56520] [client 74.248.130.207:22143] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/law.php"] [unique_id "acF3f8rwr-l5A-s9ryCDEQAAARM"]
[Tue Mar 24 01:25:21.098278 2026] [:error] [pid 56435:tid 56518] [client 74.248.130.207:21810] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/law.php"] [unique_id "acF3gcrwr-l5A-s9ryCDFQAAARE"]
[Tue Mar 24 01:25:22.102398 2026] [:error] [pid 56237:tid 56345] [client 74.248.130.207:21564] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/leaf.php"] [unique_id "acF3ggymO0MnzQb90MMrqQAAAJg"]
[Tue Mar 24 01:25:23.503496 2026] [:error] [pid 56237:tid 56324] [client 74.248.130.207:21804] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/leaf.php"] [unique_id "acF3gwymO0MnzQb90MMrsgAAAIM"]
[Tue Mar 24 01:25:24.320151 2026] [:error] [pid 56435:tid 56509] [client 74.248.130.207:21847] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/leaf.php"] [unique_id "acF3hMrwr-l5A-s9ryCDIAAAAQk"]
[Tue Mar 24 01:25:25.209074 2026] [:error] [pid 56435:tid 56504] [client 74.248.130.207:21841] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/leaf.php"] [unique_id "acF3hcrwr-l5A-s9ryCDJgAAAQU"]
[Tue Mar 24 01:25:26.308028 2026] [:error] [pid 56238:tid 56352] [client 74.248.130.207:22549] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gtc.php"] [unique_id "acF3hlSqceFAZRgPDq6kTwAAAMQ"]
[Tue Mar 24 01:25:27.675048 2026] [:error] [pid 56238:tid 56348] [client 74.248.130.207:22633] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gtc.php"] [unique_id "acF3h1SqceFAZRgPDq6kUwAAAMA"]
[Tue Mar 24 01:25:29.096477 2026] [:error] [pid 56236:tid 56303] [client 74.248.130.207:21314] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gtc.php"] [unique_id "acF3iXapFgYp0uZ8twAnAQAAAEo"]
[Tue Mar 24 01:25:30.528899 2026] [:error] [pid 56238:tid 56363] [client 74.248.130.207:22340] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gtc.php"] [unique_id "acF3ilSqceFAZRgPDq6kWAAAAM8"]
[Tue Mar 24 01:25:31.297010 2026] [:error] [pid 56238:tid 56362] [client 74.248.130.207:22551] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/st.php"] [unique_id "acF3i1SqceFAZRgPDq6kXQAAAM4"]
[Tue Mar 24 01:25:33.885014 2026] [:error] [pid 56238:tid 56369] [client 74.248.130.207:22817] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/st.php"] [unique_id "acF3jVSqceFAZRgPDq6kZgAAANU"]
[Tue Mar 24 01:25:35.461777 2026] [:error] [pid 56237:tid 56338] [client 74.248.130.207:22886] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/st.php"] [unique_id "acF3jwymO0MnzQb90MMruQAAAJE"]
[Tue Mar 24 01:25:37.179348 2026] [:error] [pid 56236:tid 56299] [client 74.248.130.207:22792] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/st.php"] [unique_id "acF3kXapFgYp0uZ8twAnDQAAAEY"]
[Tue Mar 24 01:25:38.567531 2026] [:error] [pid 56435:tid 56499] [client 74.248.130.207:21566] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/AxAo.php"] [unique_id "acF3ksrwr-l5A-s9ryCDTQAAAQA"]
[Tue Mar 24 01:25:39.398973 2026] [:error] [pid 56435:tid 56509] [client 74.248.130.207:22352] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/AxAo.php"] [unique_id "acF3k8rwr-l5A-s9ryCDUAAAAQk"]
[Tue Mar 24 01:25:40.889067 2026] [:error] [pid 56435:tid 56521] [client 74.248.130.207:21800] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/AxAo.php"] [unique_id "acF3lMrwr-l5A-s9ryCDVgAAARQ"]
[Tue Mar 24 01:25:42.044804 2026] [:error] [pid 56238:tid 56362] [client 74.248.130.207:21782] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/AxAo.php"] [unique_id "acF3llSqceFAZRgPDq6kegAAAM4"]
[Tue Mar 24 01:25:42.711144 2026] [:error] [pid 56435:tid 56508] [client 74.248.130.207:22085] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/0o0.php"] [unique_id "acF3lsrwr-l5A-s9ryCDXwAAAQg"]
[Tue Mar 24 01:25:43.906999 2026] [:error] [pid 56238:tid 56350] [client 74.248.130.207:21340] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/0o0.php"] [unique_id "acF3l1SqceFAZRgPDq6kfgAAAMI"]
[Tue Mar 24 01:25:44.670726 2026] [:error] [pid 56435:tid 56502] [client 74.248.130.207:22333] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/0o0.php"] [unique_id "acF3mMrwr-l5A-s9ryCDcAAAAQM"]
[Tue Mar 24 01:25:45.916951 2026] [:error] [pid 56435:tid 56525] [client 74.248.130.207:22571] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/0o0.php"] [unique_id "acF3mcrwr-l5A-s9ryCDfwAAARg"]
[Tue Mar 24 01:25:46.694606 2026] [:error] [pid 56435:tid 56515] [client 74.248.130.207:22338] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sck.php"] [unique_id "acF3msrwr-l5A-s9ryCDhwAAAQ4"]
[Tue Mar 24 01:25:47.410676 2026] [:error] [pid 56238:tid 56355] [client 74.248.130.207:21295] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sck.php"] [unique_id "acF3m1SqceFAZRgPDq6kggAAAMc"]
[Tue Mar 24 01:25:48.195561 2026] [:error] [pid 56237:tid 56338] [client 74.248.130.207:20568] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sck.php"] [unique_id "acF3nAymO0MnzQb90MMr2AAAAJE"]
[Tue Mar 24 01:25:49.470106 2026] [:error] [pid 56238:tid 56351] [client 74.248.130.207:21369] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sck.php"] [unique_id "acF3nVSqceFAZRgPDq6khwAAAMM"]
[Tue Mar 24 01:25:51.599312 2026] [:error] [pid 56238:tid 56356] [client 74.248.130.207:22579] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/efsd.php"] [unique_id "acF3n1SqceFAZRgPDq6klAAAAMg"]
[Tue Mar 24 01:25:52.958992 2026] [:error] [pid 56238:tid 56364] [client 74.248.130.207:21813] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/efsd.php"] [unique_id "acF3oFSqceFAZRgPDq6kmgAAANA"]
[Tue Mar 24 01:25:53.740449 2026] [:error] [pid 56238:tid 56350] [client 74.248.130.207:21846] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/efsd.php"] [unique_id "acF3oVSqceFAZRgPDq6koAAAAMI"]
[Tue Mar 24 01:25:54.501966 2026] [:error] [pid 56238:tid 56352] [client 74.248.130.207:22063] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/efsd.php"] [unique_id "acF3olSqceFAZRgPDq6kpQAAAMQ"]
[Tue Mar 24 01:25:55.167336 2026] [proxy_fcgi:error] [pid 56435:tid 56508] [client 74.248.130.207:22552] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:25:55.450613 2026] [proxy_fcgi:error] [pid 56435:tid 56519] [client 74.248.130.207:22552] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:25:55.749553 2026] [proxy_fcgi:error] [pid 56435:tid 56520] [client 74.248.130.207:22552] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:25:57.066334 2026] [proxy_fcgi:error] [pid 56435:tid 56509] [client 74.248.130.207:22552] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:25:57.407390 2026] [proxy_fcgi:error] [pid 56435:tid 56500] [client 74.248.130.207:22552] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:25:57.666266 2026] [proxy_fcgi:error] [pid 56435:tid 56513] [client 74.248.130.207:22552] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:25:57.977989 2026] [proxy_fcgi:error] [pid 56435:tid 56508] [client 74.248.130.207:22552] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:25:58.300479 2026] [proxy_fcgi:error] [pid 56435:tid 56519] [client 74.248.130.207:22552] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:25:58.565956 2026] [proxy_fcgi:error] [pid 56435:tid 56505] [client 74.248.130.207:22552] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:25:58.886854 2026] [proxy_fcgi:error] [pid 56435:tid 56511] [client 74.248.130.207:22552] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:25:59.202812 2026] [proxy_fcgi:error] [pid 56435:tid 56515] [client 74.248.130.207:22552] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:25:59.599552 2026] [:error] [pid 56435:tid 56503] [client 74.248.130.207:22552] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "acF3p8rwr-l5A-s9ryCDxQAAAQQ"]
[Tue Mar 24 01:26:00.262966 2026] [:error] [pid 56237:tid 56340] [client 74.248.130.207:22790] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "acF3qAymO0MnzQb90MMr4wAAAJM"]
[Tue Mar 24 01:26:01.314933 2026] [:error] [pid 56435:tid 56504] [client 74.248.130.207:22616] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "acF3qcrwr-l5A-s9ryCDywAAAQU"]
[Tue Mar 24 01:26:01.934913 2026] [:error] [pid 56238:tid 56368] [client 74.248.130.207:22075] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "acF3qVSqceFAZRgPDq6kvgAAANQ"]
[Tue Mar 24 01:26:03.780634 2026] [:error] [pid 56435:tid 56520] [client 74.248.130.207:22797] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/blurbs.php"] [unique_id "acF3q8rwr-l5A-s9ryCD0wAAARM"]
[Tue Mar 24 01:26:07.387649 2026] [:error] [pid 56238:tid 56364] [client 74.248.130.207:21816] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/blurbs.php"] [unique_id "acF3r1SqceFAZRgPDq6kygAAANA"]
[Tue Mar 24 01:26:07.944716 2026] [:error] [pid 56237:tid 56343] [client 74.248.130.207:21824] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/blurbs.php"] [unique_id "acF3rwymO0MnzQb90MMr8QAAAJY"]
[Tue Mar 24 01:26:08.683355 2026] [:error] [pid 56238:tid 56355] [client 74.248.130.207:22852] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/blurbs.php"] [unique_id "acF3sFSqceFAZRgPDq6kzQAAAMc"]
[Tue Mar 24 01:26:09.417048 2026] [:error] [pid 56237:tid 56340] [client 74.248.130.207:21543] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "acF3sQymO0MnzQb90MMr8wAAAJM"]
[Tue Mar 24 01:26:10.498100 2026] [:error] [pid 56238:tid 56359] [client 74.248.130.207:21322] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "acF3slSqceFAZRgPDq6k3QAAAMs"]
[Tue Mar 24 01:26:11.356190 2026] [:error] [pid 56237:tid 56331] [client 74.248.130.207:22095] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "acF3swymO0MnzQb90MMr-AAAAIo"]
[Tue Mar 24 01:26:12.078895 2026] [:error] [pid 56238:tid 56363] [client 74.248.130.207:22323] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "acF3tFSqceFAZRgPDq6k5gAAAM8"]
[Tue Mar 24 01:26:12.934359 2026] [:error] [pid 56236:tid 56299] [client 74.248.130.207:22835] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/18299.php"] [unique_id "acF3tHapFgYp0uZ8twAnJwAAAEY"]
[Tue Mar 24 01:26:13.606816 2026] [:error] [pid 56237:tid 56327] [client 74.248.130.207:20079] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/18299.php"] [unique_id "acF3tQymO0MnzQb90MMr_wAAAIY"]
[Tue Mar 24 01:26:14.485283 2026] [:error] [pid 56238:tid 56367] [client 74.248.130.207:22557] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/18299.php"] [unique_id "acF3tlSqceFAZRgPDq6k8AAAANM"]
[Tue Mar 24 01:26:15.136533 2026] [:error] [pid 56238:tid 56364] [client 74.248.130.207:21042] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/18299.php"] [unique_id "acF3t1SqceFAZRgPDq6k8wAAANA"]
[Tue Mar 24 01:26:15.863836 2026] [:error] [pid 56435:tid 56504] [client 74.248.130.207:21853] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file22.php"] [unique_id "acF3t8rwr-l5A-s9ryCD6gAAAQU"]
[Tue Mar 24 01:26:16.549577 2026] [:error] [pid 56236:tid 56309] [client 74.248.130.207:22298] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file22.php"] [unique_id "acF3uHapFgYp0uZ8twAnLQAAAFA"]
[Tue Mar 24 01:26:17.442807 2026] [:error] [pid 56237:tid 56331] [client 74.248.130.207:22355] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file22.php"] [unique_id "acF3uQymO0MnzQb90MMsCAAAAIo"]
[Tue Mar 24 01:26:18.066288 2026] [:error] [pid 56237:tid 56323] [client 74.248.130.207:21313] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file22.php"] [unique_id "acF3ugymO0MnzQb90MMsDQAAAII"]
[Tue Mar 24 01:26:18.770824 2026] [:error] [pid 56435:tid 56502] [client 74.248.130.207:22054] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "acF3usrwr-l5A-s9ryCD-gAAAQM"]
[Tue Mar 24 01:26:19.361292 2026] [:error] [pid 56237:tid 56337] [client 74.248.130.207:21769] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "acF3uwymO0MnzQb90MMsEAAAAJA"]
[Tue Mar 24 01:26:21.374599 2026] [:error] [pid 56435:tid 56516] [client 74.248.130.207:22813] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "acF3vcrwr-l5A-s9ryCEBgAAAQ8"]
[Tue Mar 24 01:26:22.182827 2026] [:error] [pid 56435:tid 56517] [client 74.248.130.207:21603] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "acF3vsrwr-l5A-s9ryCEDgAAARA"]
[Tue Mar 24 01:26:22.930840 2026] [:error] [pid 56238:tid 56357] [client 74.248.130.207:22390] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wso1122333.php"] [unique_id "acF3vlSqceFAZRgPDq6lEwAAAMk"]
[Tue Mar 24 01:26:23.713069 2026] [:error] [pid 56237:tid 56321] [client 74.248.130.207:22871] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wso1122333.php"] [unique_id "acF3vwymO0MnzQb90MMsFQAAAIA"]
[Tue Mar 24 01:26:24.621883 2026] [:error] [pid 56435:tid 56521] [client 74.248.130.207:22273] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wso1122333.php"] [unique_id "acF3wMrwr-l5A-s9ryCEEQAAARQ"]
[Tue Mar 24 01:26:25.352376 2026] [:error] [pid 56435:tid 56501] [client 74.248.130.207:21623] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wso1122333.php"] [unique_id "acF3wcrwr-l5A-s9ryCEGQAAAQI"]
[Tue Mar 24 01:26:26.079133 2026] [:error] [pid 56435:tid 56500] [client 74.248.130.207:22652] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gm.php"] [unique_id "acF3wsrwr-l5A-s9ryCEHgAAAQE"]
[Tue Mar 24 01:26:26.863369 2026] [:error] [pid 56435:tid 56523] [client 74.248.130.207:22830] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gm.php"] [unique_id "acF3wsrwr-l5A-s9ryCEJAAAARY"]
[Tue Mar 24 01:26:27.782759 2026] [:error] [pid 56238:tid 56364] [client 74.248.130.207:22536] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gm.php"] [unique_id "acF3w1SqceFAZRgPDq6lKQAAANA"]
[Tue Mar 24 01:26:28.564024 2026] [:error] [pid 56435:tid 56505] [client 74.248.130.207:22307] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gm.php"] [unique_id "acF3xMrwr-l5A-s9ryCEKwAAAQY"]
[Tue Mar 24 01:26:30.172625 2026] [:error] [pid 56238:tid 56356] [client 74.248.130.207:7408] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/don.php"] [unique_id "acF3xlSqceFAZRgPDq6lMwAAAMg"]
[Tue Mar 24 01:26:31.044787 2026] [:error] [pid 56237:tid 56327] [client 74.248.130.207:21835] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/don.php"] [unique_id "acF3xwymO0MnzQb90MMsGgAAAIY"]
[Tue Mar 24 01:26:31.705803 2026] [:error] [pid 56237:tid 56326] [client 74.248.130.207:22869] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/don.php"] [unique_id "acF3xwymO0MnzQb90MMsHgAAAIU"]
[Tue Mar 24 01:26:32.824939 2026] [:error] [pid 56435:tid 56505] [client 74.248.130.207:7422] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/don.php"] [unique_id "acF3yMrwr-l5A-s9ryCEOgAAAQY"]
[Tue Mar 24 01:26:33.535061 2026] [:error] [pid 56435:tid 56510] [client 74.248.130.207:22031] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/anz.php"] [unique_id "acF3ycrwr-l5A-s9ryCEPgAAAQo"]
[Tue Mar 24 01:26:34.334001 2026] [:error] [pid 56435:tid 56514] [client 74.248.130.207:22070] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/anz.php"] [unique_id "acF3ysrwr-l5A-s9ryCERAAAAQ0"]
[Tue Mar 24 01:26:34.966697 2026] [:error] [pid 56435:tid 56517] [client 74.248.130.207:7363] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/anz.php"] [unique_id "acF3ysrwr-l5A-s9ryCESwAAARA"]
[Tue Mar 24 01:26:35.580728 2026] [:error] [pid 56236:tid 56299] [client 74.248.130.207:7717] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/anz.php"] [unique_id "acF3y3apFgYp0uZ8twAnQQAAAEY"]
[Tue Mar 24 01:26:36.834171 2026] [:error] [pid 56435:tid 56509] [client 74.248.130.207:7365] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bge.php"] [unique_id "acF3zMrwr-l5A-s9ryCEWgAAAQk"]
[Tue Mar 24 01:26:37.590305 2026] [:error] [pid 56435:tid 56503] [client 74.248.130.207:22275] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bge.php"] [unique_id "acF3zcrwr-l5A-s9ryCEYQAAAQQ"]
[Tue Mar 24 01:26:38.329853 2026] [:error] [pid 56435:tid 56522] [client 74.248.130.207:1927] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bge.php"] [unique_id "acF3zsrwr-l5A-s9ryCEZQAAARU"]
[Tue Mar 24 01:26:39.127664 2026] [:error] [pid 56238:tid 56362] [client 74.248.130.207:22841] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bge.php"] [unique_id "acF3z1SqceFAZRgPDq6lSAAAAM4"]
[Tue Mar 24 01:26:39.890222 2026] [:error] [pid 56237:tid 56338] [client 74.248.130.207:22030] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fm.php"] [unique_id "acF3zwymO0MnzQb90MMsJgAAAJE"]
[Tue Mar 24 01:26:40.864137 2026] [:error] [pid 56238:tid 56370] [client 74.248.130.207:22789] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fm.php"] [unique_id "acF30FSqceFAZRgPDq6lUAAAANY"]
[Tue Mar 24 01:26:41.547564 2026] [:error] [pid 56435:tid 56525] [client 74.248.130.207:22644] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fm.php"] [unique_id "acF30crwr-l5A-s9ryCEcAAAARg"]
[Tue Mar 24 01:26:43.205997 2026] [:error] [pid 56435:tid 56508] [client 74.248.130.207:7415] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fm.php"] [unique_id "acF308rwr-l5A-s9ryCEeAAAAQg"]
[Tue Mar 24 01:26:43.787321 2026] [:error] [pid 56435:tid 56524] [client 74.248.130.207:22372] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/v2.php"] [unique_id "acF308rwr-l5A-s9ryCEewAAARc"]
[Tue Mar 24 01:26:44.649288 2026] [:error] [pid 56238:tid 56369] [client 74.248.130.207:22283] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/v2.php"] [unique_id "acF31FSqceFAZRgPDq6lUwAAANU"]
[Tue Mar 24 01:26:45.420315 2026] [:error] [pid 56435:tid 56500] [client 74.248.130.207:1307] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/v2.php"] [unique_id "acF31crwr-l5A-s9ryCEggAAAQE"]
[Tue Mar 24 01:26:46.370609 2026] [:error] [pid 56238:tid 56349] [client 74.248.130.207:1720] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/v2.php"] [unique_id "acF31lSqceFAZRgPDq6lWQAAAME"]
[Tue Mar 24 01:26:47.213683 2026] [:error] [pid 56237:tid 56323] [client 74.248.130.207:7369] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a5e0a.php"] [unique_id "acF31wymO0MnzQb90MMsNwAAAII"]
[Tue Mar 24 01:26:47.935089 2026] [:error] [pid 56435:tid 56523] [client 74.248.130.207:22348] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a5e0a.php"] [unique_id "acF318rwr-l5A-s9ryCEhwAAARY"]
[Tue Mar 24 01:26:48.630188 2026] [:error] [pid 56435:tid 56504] [client 74.248.130.207:7969] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a5e0a.php"] [unique_id "acF32Mrwr-l5A-s9ryCEiQAAAQU"]
[Tue Mar 24 01:26:50.790987 2026] [:error] [pid 56238:tid 56367] [client 74.248.130.207:1704] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a5e0a.php"] [unique_id "acF32lSqceFAZRgPDq6lXgAAANM"]
[Tue Mar 24 01:26:51.998276 2026] [:error] [pid 56237:tid 56342] [client 74.248.130.207:22820] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hly.php"] [unique_id "acF32wymO0MnzQb90MMsRwAAAJU"]
[Tue Mar 24 01:26:52.841949 2026] [:error] [pid 56435:tid 56525] [client 74.248.130.207:7700] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hly.php"] [unique_id "acF33Mrwr-l5A-s9ryCEoAAAARg"]
[Tue Mar 24 01:26:53.647116 2026] [:error] [pid 56435:tid 56521] [client 74.248.130.207:1913] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hly.php"] [unique_id "acF33crwr-l5A-s9ryCEowAAARQ"]
[Tue Mar 24 01:26:54.235953 2026] [:error] [pid 56237:tid 56332] [client 74.248.130.207:7725] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hly.php"] [unique_id "acF33gymO0MnzQb90MMsTQAAAIs"]
[Tue Mar 24 01:26:54.844214 2026] [:error] [pid 56238:tid 56360] [client 74.248.130.207:7981] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cyber.php"] [unique_id "acF33lSqceFAZRgPDq6lagAAAMw"]
[Tue Mar 24 01:26:55.473818 2026] [:error] [pid 56236:tid 56310] [client 74.248.130.207:22645] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cyber.php"] [unique_id "acF333apFgYp0uZ8twAnXQAAAFE"]
[Tue Mar 24 01:26:56.032735 2026] [:error] [pid 56435:tid 56500] [client 74.248.130.207:1313] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cyber.php"] [unique_id "acF34Mrwr-l5A-s9ryCEqgAAAQE"]
[Tue Mar 24 01:26:56.900167 2026] [:error] [pid 56238:tid 56358] [client 74.248.130.207:1229] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cyber.php"] [unique_id "acF34FSqceFAZRgPDq6lbwAAAMo"]
[Tue Mar 24 01:26:57.656011 2026] [:error] [pid 56237:tid 56336] [client 74.248.130.207:21528] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp1.php"] [unique_id "acF34QymO0MnzQb90MMsVQAAAI8"]
[Tue Mar 24 01:26:58.365388 2026] [:error] [pid 56435:tid 56516] [client 74.248.130.207:8587] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp1.php"] [unique_id "acF34srwr-l5A-s9ryCEugAAAQ8"]
[Tue Mar 24 01:27:00.107871 2026] [proxy_fcgi:error] [pid 56238:tid 56365] [client 74.248.130.207:22638] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:27:00.411703 2026] [proxy_fcgi:error] [pid 56238:tid 56367] [client 74.248.130.207:22638] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:27:00.743430 2026] [proxy_fcgi:error] [pid 56238:tid 56357] [client 74.248.130.207:22638] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:27:01.364350 2026] [proxy_fcgi:error] [pid 56238:tid 56356] [client 74.248.130.207:22638] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:27:01.654025 2026] [proxy_fcgi:error] [pid 56238:tid 56349] [client 74.248.130.207:22638] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:27:03.218920 2026] [proxy_fcgi:error] [pid 56238:tid 56368] [client 74.248.130.207:22638] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:27:03.522694 2026] [proxy_fcgi:error] [pid 56238:tid 56369] [client 74.248.130.207:22638] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:27:03.845126 2026] [proxy_fcgi:error] [pid 56238:tid 56355] [client 74.248.130.207:22638] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:27:04.161026 2026] [proxy_fcgi:error] [pid 56238:tid 56354] [client 74.248.130.207:22638] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:27:04.495950 2026] [proxy_fcgi:error] [pid 56238:tid 56352] [client 74.248.130.207:22638] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:27:04.850121 2026] [:error] [pid 56238:tid 56370] [client 74.248.130.207:22638] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/anon.php"] [unique_id "acF36FSqceFAZRgPDq6liQAAANY"]
[Tue Mar 24 01:27:05.762506 2026] [:error] [pid 56238:tid 56358] [client 74.248.130.207:7423] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/anon.php"] [unique_id "acF36VSqceFAZRgPDq6ljQAAAMo"]
[Tue Mar 24 01:27:06.738160 2026] [:error] [pid 56237:tid 56327] [client 74.248.130.207:7964] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/anon.php"] [unique_id "acF36gymO0MnzQb90MMsaAAAAIY"]
[Tue Mar 24 01:27:08.095135 2026] [:error] [pid 56238:tid 56355] [client 74.248.130.207:1634] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/anon.php"] [unique_id "acF37FSqceFAZRgPDq6lkwAAAMc"]
[Tue Mar 24 01:27:08.770108 2026] [:error] [pid 56237:tid 56332] [client 74.248.130.207:22863] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/v3.php"] [unique_id "acF37AymO0MnzQb90MMsbQAAAIs"]
[Tue Mar 24 01:27:09.542654 2026] [:error] [pid 56236:tid 56295] [client 74.248.130.207:1968] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/v3.php"] [unique_id "acF37XapFgYp0uZ8twAnbgAAAEI"]
[Tue Mar 24 01:27:10.131135 2026] [:error] [pid 56435:tid 56519] [client 74.248.130.207:1948] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/v3.php"] [unique_id "acF37srwr-l5A-s9ryCE7QAAARI"]
[Tue Mar 24 01:27:11.100867 2026] [:error] [pid 56435:tid 56505] [client 74.248.130.207:7684] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/v3.php"] [unique_id "acF378rwr-l5A-s9ryCE8AAAAQY"]
[Tue Mar 24 01:27:11.809697 2026] [:error] [pid 56238:tid 56368] [client 74.248.130.207:1876] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sid3.php"] [unique_id "acF371SqceFAZRgPDq6lngAAANQ"]
[Tue Mar 24 01:27:12.754501 2026] [:error] [pid 56238:tid 56361] [client 74.248.130.207:1950] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sid3.php"] [unique_id "acF38FSqceFAZRgPDq6lpAAAAM0"]
[Tue Mar 24 01:27:13.327097 2026] [:error] [pid 56238:tid 56350] [client 74.248.130.207:22123] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sid3.php"] [unique_id "acF38VSqceFAZRgPDq6lqAAAAMI"]
[Tue Mar 24 01:27:13.958056 2026] [:error] [pid 56237:tid 56341] [client 74.248.130.207:1870] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sid3.php"] [unique_id "acF38QymO0MnzQb90MMsfAAAAJQ"]
[Tue Mar 24 01:27:14.614766 2026] [:error] [pid 56238:tid 56368] [client 74.248.130.207:7947] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xenium4.php"] [unique_id "acF38lSqceFAZRgPDq6lrAAAANQ"]
[Tue Mar 24 01:27:15.546796 2026] [:error] [pid 56238:tid 56354] [client 74.248.130.207:1609] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xenium4.php"] [unique_id "acF381SqceFAZRgPDq6lrwAAAMY"]
[Tue Mar 24 01:27:16.312499 2026] [:error] [pid 56237:tid 56338] [client 74.248.130.207:2010] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xenium4.php"] [unique_id "acF39AymO0MnzQb90MMshwAAAJE"]
[Tue Mar 24 01:27:17.206090 2026] [:error] [pid 56236:tid 56298] [client 74.248.130.207:1896] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xenium4.php"] [unique_id "acF39XapFgYp0uZ8twAnbwAAAEU"]
[Tue Mar 24 01:27:17.772297 2026] [:error] [pid 56435:tid 56515] [client 74.248.130.207:1302] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/worm0.PhP7"] [unique_id "acF39crwr-l5A-s9ryCE-gAAAQ4"]
[Tue Mar 24 01:27:20.034992 2026] [:error] [pid 56236:tid 56294] [client 74.248.130.207:1206] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/worm0.PhP7"] [unique_id "acF3-HapFgYp0uZ8twAndQAAAEE"]
[Tue Mar 24 01:27:20.939421 2026] [:error] [pid 56238:tid 56365] [client 74.248.130.207:7885] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/worm0.PhP7"] [unique_id "acF3-FSqceFAZRgPDq6lvwAAANE"]
[Tue Mar 24 01:27:21.757249 2026] [:error] [pid 56238:tid 56350] [client 74.248.130.207:7332] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/worm0.PhP7"] [unique_id "acF3-VSqceFAZRgPDq6lxAAAAMI"]
[Tue Mar 24 01:27:23.129474 2026] [:error] [pid 56238:tid 56354] [client 74.248.130.207:1220] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wsd.php"] [unique_id "acF3-1SqceFAZRgPDq6lywAAAMY"]
[Tue Mar 24 01:27:24.040489 2026] [:error] [pid 56237:tid 56334] [client 74.248.130.207:1126] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wsd.php"] [unique_id "acF3_AymO0MnzQb90MMslwAAAI0"]
[Tue Mar 24 01:27:25.082620 2026] [:error] [pid 56238:tid 56355] [client 74.248.130.207:7907] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wsd.php"] [unique_id "acF3_VSqceFAZRgPDq6l2AAAAMc"]
[Tue Mar 24 01:27:26.070563 2026] [:error] [pid 56435:tid 56515] [client 74.248.130.207:1387] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wsd.php"] [unique_id "acF3_srwr-l5A-s9ryCFFwAAAQ4"]
[Tue Mar 24 01:27:26.713311 2026] [:error] [pid 56435:tid 56500] [client 74.248.130.207:7818] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hjkj.php"] [unique_id "acF3_srwr-l5A-s9ryCFGQAAAQE"]
[Tue Mar 24 01:27:27.472579 2026] [:error] [pid 56435:tid 56499] [client 74.248.130.207:7350] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hjkj.php"] [unique_id "acF3_8rwr-l5A-s9ryCFIAAAAQA"]
[Tue Mar 24 01:27:28.193227 2026] [:error] [pid 56435:tid 56519] [client 74.248.130.207:1436] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hjkj.php"] [unique_id "acF4AMrwr-l5A-s9ryCFJAAAARI"]
[Tue Mar 24 01:27:29.017725 2026] [:error] [pid 56238:tid 56352] [client 74.248.130.207:1383] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hjkj.php"] [unique_id "acF4AVSqceFAZRgPDq6l3wAAAMQ"]
[Tue Mar 24 01:27:29.712775 2026] [:error] [pid 56238:tid 56364] [client 74.248.130.207:1108] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-sid.php"] [unique_id "acF4AVSqceFAZRgPDq6l4QAAANA"]
[Tue Mar 24 01:27:30.633061 2026] [:error] [pid 56435:tid 56521] [client 74.248.130.207:1600] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-sid.php"] [unique_id "acF4Asrwr-l5A-s9ryCFMwAAARQ"]
[Tue Mar 24 01:27:31.317315 2026] [:error] [pid 56435:tid 56513] [client 74.248.130.207:8673] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-sid.php"] [unique_id "acF4A8rwr-l5A-s9ryCFNwAAAQw"]
[Tue Mar 24 01:27:32.062397 2026] [:error] [pid 56435:tid 56503] [client 74.248.130.207:7880] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-sid.php"] [unique_id "acF4BMrwr-l5A-s9ryCFPQAAAQQ"]
[Tue Mar 24 01:27:33.605079 2026] [:error] [pid 56435:tid 56508] [client 74.248.130.207:1357] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sx21_1.php"] [unique_id "acF4Bcrwr-l5A-s9ryCFRAAAAQg"]
[Tue Mar 24 01:27:34.261246 2026] [:error] [pid 56238:tid 56352] [client 74.248.130.207:1423] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sx21_1.php"] [unique_id "acF4BlSqceFAZRgPDq6l6gAAAMQ"]
[Tue Mar 24 01:27:34.870958 2026] [:error] [pid 56236:tid 56300] [client 74.248.130.207:1150] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sx21_1.php"] [unique_id "acF4BnapFgYp0uZ8twAnnAAAAEc"]
[Tue Mar 24 01:27:35.617366 2026] [:error] [pid 56238:tid 56372] [client 74.248.130.207:7237] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sx21_1.php"] [unique_id "acF4B1SqceFAZRgPDq6l8wAAANg"]
[Tue Mar 24 01:27:36.768528 2026] [:error] [pid 56435:tid 56518] [client 74.248.130.207:7498] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/baxa1.php"] [unique_id "acF4CMrwr-l5A-s9ryCFTQAAARE"]
[Tue Mar 24 01:27:39.288586 2026] [:error] [pid 56236:tid 56299] [client 74.248.130.207:1570] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/baxa1.php"] [unique_id "acF4C3apFgYp0uZ8twAnogAAAEY"]
[Tue Mar 24 01:27:40.028351 2026] [:error] [pid 56236:tid 56306] [client 74.248.130.207:1562] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/baxa1.php"] [unique_id "acF4DHapFgYp0uZ8twAnpQAAAE0"]
[Tue Mar 24 01:27:40.664331 2026] [:error] [pid 56236:tid 56295] [client 74.248.130.207:7271] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/baxa1.php"] [unique_id "acF4DHapFgYp0uZ8twAnqAAAAEI"]
[Tue Mar 24 01:27:41.253605 2026] [:error] [pid 56236:tid 56307] [client 74.248.130.207:7253] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/asus.php"] [unique_id "acF4DXapFgYp0uZ8twAnrAAAAE4"]
[Tue Mar 24 01:27:41.934052 2026] [:error] [pid 56236:tid 56309] [client 74.248.130.207:1412] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/asus.php"] [unique_id "acF4DXapFgYp0uZ8twAnrgAAAFA"]
[Tue Mar 24 01:27:42.736695 2026] [:error] [pid 56237:tid 56339] [client 74.248.130.207:1817] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/asus.php"] [unique_id "acF4DgymO0MnzQb90MMsrwAAAJI"]
[Tue Mar 24 01:27:43.369303 2026] [:error] [pid 56237:tid 56335] [client 74.248.130.207:8067] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/asus.php"] [unique_id "acF4DwymO0MnzQb90MMssAAAAI4"]
[Tue Mar 24 01:27:44.244604 2026] [:error] [pid 56237:tid 56332] [client 74.248.130.207:1123] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/b1a3k.php"] [unique_id "acF4EAymO0MnzQb90MMsswAAAIs"]
[Tue Mar 24 01:27:45.038101 2026] [:error] [pid 56237:tid 56344] [client 74.248.130.207:1563] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/b1a3k.php"] [unique_id "acF4EQymO0MnzQb90MMsuAAAAJc"]
[Tue Mar 24 01:27:46.018701 2026] [:error] [pid 56435:tid 56509] [client 74.248.130.207:1546] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/b1a3k.php"] [unique_id "acF4Esrwr-l5A-s9ryCFbQAAAQk"]
[Tue Mar 24 01:27:46.849121 2026] [:error] [pid 56237:tid 56323] [client 74.248.130.207:8311] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/b1a3k.php"] [unique_id "acF4EgymO0MnzQb90MMsxQAAAII"]
[Tue Mar 24 01:27:47.626014 2026] [:error] [pid 56435:tid 56511] [client 74.248.130.207:1585] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/uph.php"] [unique_id "acF4E8rwr-l5A-s9ryCFcAAAAQs"]
[Tue Mar 24 01:27:48.462009 2026] [:error] [pid 56435:tid 56516] [client 74.248.130.207:9791] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/uph.php"] [unique_id "acF4FMrwr-l5A-s9ryCFdAAAAQ8"]
[Tue Mar 24 01:27:49.185739 2026] [:error] [pid 56435:tid 56514] [client 74.248.130.207:7270] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/uph.php"] [unique_id "acF4Fcrwr-l5A-s9ryCFdwAAAQ0"]
[Tue Mar 24 01:27:50.032066 2026] [:error] [pid 56237:tid 56329] [client 74.248.130.207:8656] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/uph.php"] [unique_id "acF4FgymO0MnzQb90MMszQAAAIg"]
[Tue Mar 24 01:27:50.734077 2026] [:error] [pid 56435:tid 56522] [client 74.248.130.207:8640] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cp.php"] [unique_id "acF4Fsrwr-l5A-s9ryCFgQAAARU"]
[Tue Mar 24 01:27:51.411486 2026] [:error] [pid 56236:tid 56293] [client 74.248.130.207:21338] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cp.php"] [unique_id "acF4F3apFgYp0uZ8twAnwAAAAEA"]
[Tue Mar 24 01:27:52.097660 2026] [:error] [pid 56238:tid 56361] [client 74.248.130.207:1554] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cp.php"] [unique_id "acF4GFSqceFAZRgPDq6l_wAAAM0"]
[Tue Mar 24 01:29:47.459736 2026] [proxy_fcgi:error] [pid 31798:tid 31824] [client 74.248.130.207:23076] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:29:47.818684 2026] [:error] [pid 31798:tid 31815] [client 74.248.130.207:23076] [client 74.248.130.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/dist/preferences/wp-login.php"] [unique_id "acF4i3dtW_1bksndFbYsPgAAAA8"]
[Tue Mar 24 01:29:49.707271 2026] [proxy_fcgi:error] [pid 31798:tid 31822] [client 74.248.130.207:1561] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:29:50.047626 2026] [proxy_fcgi:error] [pid 31798:tid 31801] [client 74.248.130.207:1561] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:29:50.306799 2026] [proxy_fcgi:error] [pid 31798:tid 31823] [client 74.248.130.207:1561] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:29:50.761951 2026] [proxy_fcgi:error] [pid 31798:tid 31805] [client 74.248.130.207:1561] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:29:51.199831 2026] [:error] [pid 31798:tid 31819] [client 74.248.130.207:1561] [client 74.248.130.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "acF4j3dtW_1bksndFbYsUAAAABM"]
[Tue Mar 24 01:29:52.322553 2026] [proxy_fcgi:error] [pid 31798:tid 31804] [client 74.248.130.207:1665] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:29:52.659461 2026] [proxy_fcgi:error] [pid 31798:tid 31814] [client 74.248.130.207:1665] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:29:53.112433 2026] [proxy_fcgi:error] [pid 31798:tid 31816] [client 74.248.130.207:1665] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:29:53.508917 2026] [proxy_fcgi:error] [pid 31798:tid 31802] [client 74.248.130.207:1665] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:29:53.792528 2026] [proxy_fcgi:error] [pid 31798:tid 31818] [client 74.248.130.207:1665] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:29:54.116000 2026] [proxy_fcgi:error] [pid 31798:tid 31806] [client 74.248.130.207:1665] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:29:54.370467 2026] [:error] [pid 31798:tid 31809] [client 74.248.130.207:1665] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/404.php"] [unique_id "acF4kndtW_1bksndFbYsawAAAAk"]
[Tue Mar 24 01:29:55.512731 2026] [:error] [pid 31798:tid 31816] [client 74.248.130.207:1581] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/404.php"] [unique_id "acF4k3dtW_1bksndFbYscQAAABA"]
[Tue Mar 24 01:29:58.542844 2026] [:error] [pid 31798:tid 31823] [client 74.248.130.207:24599] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/404.php"] [unique_id "acF4lndtW_1bksndFbYslQAAABc"]
[Tue Mar 24 01:29:59.645633 2026] [:error] [pid 56236:tid 56315] [client 74.248.130.207:24059] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/404.php"] [unique_id "acF4l3apFgYp0uZ8twAocQAAAFY"]
[Tue Mar 24 01:30:01.150999 2026] [:error] [pid 56236:tid 56300] [client 74.248.130.207:24263] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "acF4mXapFgYp0uZ8twAocwAAAEc"]
[Tue Mar 24 01:30:03.039030 2026] [:error] [pid 56435:tid 56515] [client 74.248.130.207:1317] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "acF4m8rwr-l5A-s9ryCHJQAAAQ4"]
[Tue Mar 24 01:30:03.737857 2026] [:error] [pid 56237:tid 56330] [client 74.248.130.207:24353] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "acF4mwymO0MnzQb90MMtxgAAAIk"]
[Tue Mar 24 01:30:05.128551 2026] [:error] [pid 56435:tid 56513] [client 74.248.130.207:23075] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "acF4ncrwr-l5A-s9ryCHKQAAAQw"]
[Tue Mar 24 01:30:06.151546 2026] [:error] [pid 56435:tid 56523] [client 74.248.130.207:24367] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/s12.php"] [unique_id "acF4nsrwr-l5A-s9ryCHMAAAARY"]
[Tue Mar 24 01:30:06.997343 2026] [:error] [pid 56238:tid 56349] [client 74.248.130.207:23863] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/s12.php"] [unique_id "acF4nlSqceFAZRgPDq6nlAAAAME"]
[Tue Mar 24 01:30:07.824924 2026] [:error] [pid 56435:tid 56504] [client 74.248.130.207:7965] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/s12.php"] [unique_id "acF4n8rwr-l5A-s9ryCHPAAAAQU"]
[Tue Mar 24 01:30:08.931951 2026] [:error] [pid 31798:tid 31819] [client 74.248.130.207:24355] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/s12.php"] [unique_id "acF4oHdtW_1bksndFbYs1gAAABM"]
[Tue Mar 24 01:30:13.686390 2026] [:error] [pid 31798:tid 31805] [client 74.248.130.207:24029] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rxr.php"] [unique_id "acF4pXdtW_1bksndFbYs9wAAAAU"]
[Tue Mar 24 01:30:15.698931 2026] [:error] [pid 56435:tid 56501] [client 74.248.130.207:23093] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rxr.php"] [unique_id "acF4p8rwr-l5A-s9ryCHUwAAAQI"]
[Tue Mar 24 01:30:17.408278 2026] [:error] [pid 56237:tid 56335] [client 74.248.130.207:23068] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rxr.php"] [unique_id "acF4qQymO0MnzQb90MMt2wAAAI4"]
[Tue Mar 24 01:30:18.259574 2026] [:error] [pid 56237:tid 56327] [client 74.248.130.207:7375] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rxr.php"] [unique_id "acF4qgymO0MnzQb90MMt3AAAAIY"]
[Tue Mar 24 01:30:20.422384 2026] [:error] [pid 56237:tid 56321] [client 74.248.130.207:24004] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "acF4rAymO0MnzQb90MMt4QAAAIA"]
[Tue Mar 24 01:30:21.222895 2026] [:error] [pid 56237:tid 56330] [client 74.248.130.207:23815] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "acF4rQymO0MnzQb90MMt4gAAAIk"]
[Tue Mar 24 01:30:22.710804 2026] [:error] [pid 56238:tid 56367] [client 74.248.130.207:23053] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "acF4rlSqceFAZRgPDq6nrwAAANM"]
[Tue Mar 24 01:30:23.457564 2026] [:error] [pid 56237:tid 56338] [client 74.248.130.207:1954] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "acF4rwymO0MnzQb90MMt8AAAAJE"]
[Tue Mar 24 01:30:24.724115 2026] [:error] [pid 56435:tid 56507] [client 74.248.130.207:24118] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/8xg5Bv6XIUw.php"] [unique_id "acF4sMrwr-l5A-s9ryCHawAAAQc"]
[Tue Mar 24 01:30:25.718698 2026] [:error] [pid 31798:tid 31822] [client 74.248.130.207:1239] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/8xg5Bv6XIUw.php"] [unique_id "acF4sXdtW_1bksndFbYtCgAAABY"]
[Tue Mar 24 01:30:26.496794 2026] [:error] [pid 56236:tid 56302] [client 74.248.130.207:24370] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/8xg5Bv6XIUw.php"] [unique_id "acF4snapFgYp0uZ8twAopQAAAEk"]
[Tue Mar 24 01:30:27.682932 2026] [:error] [pid 31798:tid 31820] [client 74.248.130.207:24326] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/8xg5Bv6XIUw.php"] [unique_id "acF4s3dtW_1bksndFbYtEgAAABQ"]
[Tue Mar 24 01:30:28.671363 2026] [:error] [pid 56435:tid 56518] [client 74.248.130.207:7373] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2clas.php"] [unique_id "acF4tMrwr-l5A-s9ryCHdAAAARE"]
[Tue Mar 24 01:30:30.223599 2026] [:error] [pid 56238:tid 56348] [client 74.248.130.207:23867] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2clas.php"] [unique_id "acF4tlSqceFAZRgPDq6nuAAAAMA"]
[Tue Mar 24 01:30:31.136822 2026] [:error] [pid 56236:tid 56305] [client 74.248.130.207:7907] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2clas.php"] [unique_id "acF4t3apFgYp0uZ8twAopwAAAEw"]
[Tue Mar 24 01:30:32.291637 2026] [:error] [pid 56236:tid 56299] [client 74.248.130.207:7956] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2clas.php"] [unique_id "acF4uHapFgYp0uZ8twAoqwAAAEY"]
[Tue Mar 24 01:30:33.497835 2026] [:error] [pid 31798:tid 31820] [client 74.248.130.207:23139] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Codex.php"] [unique_id "acF4uXdtW_1bksndFbYtHQAAABQ"]
[Tue Mar 24 01:30:34.622640 2026] [:error] [pid 56238:tid 56366] [client 74.248.130.207:24094] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Codex.php"] [unique_id "acF4ulSqceFAZRgPDq6nxAAAANI"]
[Tue Mar 24 01:30:35.835801 2026] [:error] [pid 56435:tid 56503] [client 74.248.130.207:7407] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Codex.php"] [unique_id "acF4u8rwr-l5A-s9ryCHfAAAAQQ"]
[Tue Mar 24 01:30:36.505016 2026] [:error] [pid 56435:tid 56501] [client 74.248.130.207:1700] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Codex.php"] [unique_id "acF4vMrwr-l5A-s9ryCHgAAAAQI"]
[Tue Mar 24 01:30:37.567503 2026] [:error] [pid 56435:tid 56502] [client 74.248.130.207:7368] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/insoamv.php"] [unique_id "acF4vcrwr-l5A-s9ryCHhAAAAQM"]
[Tue Mar 24 01:30:38.762878 2026] [:error] [pid 56435:tid 56516] [client 74.248.130.207:24009] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/insoamv.php"] [unique_id "acF4vsrwr-l5A-s9ryCHiAAAAQ8"]
[Tue Mar 24 01:30:40.199109 2026] [:error] [pid 56435:tid 56499] [client 74.248.130.207:7385] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/insoamv.php"] [unique_id "acF4wMrwr-l5A-s9ryCHiwAAAQA"]
[Tue Mar 24 01:30:41.387175 2026] [:error] [pid 56236:tid 56305] [client 74.248.130.207:24516] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/insoamv.php"] [unique_id "acF4wXapFgYp0uZ8twAotAAAAEw"]
[Tue Mar 24 01:30:42.391796 2026] [:error] [pid 56236:tid 56297] [client 74.248.130.207:24868] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/HPum4ZEBJRC.php"] [unique_id "acF4wnapFgYp0uZ8twAovAAAAEQ"]
[Tue Mar 24 01:30:43.245833 2026] [:error] [pid 56435:tid 56524] [client 74.248.130.207:24869] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/HPum4ZEBJRC.php"] [unique_id "acF4w8rwr-l5A-s9ryCHkgAAARc"]
[Tue Mar 24 01:30:44.627334 2026] [:error] [pid 56237:tid 56342] [client 74.248.130.207:7977] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/HPum4ZEBJRC.php"] [unique_id "acF4xAymO0MnzQb90MMuBwAAAJU"]
[Tue Mar 24 01:30:45.953864 2026] [:error] [pid 56237:tid 56325] [client 74.248.130.207:24295] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/HPum4ZEBJRC.php"] [unique_id "acF4xQymO0MnzQb90MMuCgAAAIQ"]
[Tue Mar 24 01:30:46.850977 2026] [:error] [pid 56236:tid 56299] [client 74.248.130.207:1866] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/55b76.php"] [unique_id "acF4xnapFgYp0uZ8twAoxgAAAEY"]
[Tue Mar 24 01:30:48.252003 2026] [:error] [pid 56237:tid 56340] [client 74.248.130.207:1972] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/55b76.php"] [unique_id "acF4yAymO0MnzQb90MMuDwAAAJM"]
[Tue Mar 24 01:30:49.457110 2026] [:error] [pid 56435:tid 56503] [client 74.248.130.207:23831] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/55b76.php"] [unique_id "acF4ycrwr-l5A-s9ryCHogAAAQQ"]
[Tue Mar 24 01:30:50.184697 2026] [:error] [pid 56237:tid 56336] [client 74.248.130.207:1940] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/55b76.php"] [unique_id "acF4ygymO0MnzQb90MMuGQAAAI8"]
[Tue Mar 24 01:30:51.210551 2026] [:error] [pid 56237:tid 56339] [client 74.248.130.207:1868] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-home.php"] [unique_id "acF4ywymO0MnzQb90MMuIgAAAJI"]
[Tue Mar 24 01:30:51.878672 2026] [:error] [pid 56237:tid 56331] [client 74.248.130.207:7971] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-home.php"] [unique_id "acF4ywymO0MnzQb90MMuJwAAAIo"]
[Tue Mar 24 01:30:52.621271 2026] [:error] [pid 56236:tid 56295] [client 74.248.130.207:1963] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-home.php"] [unique_id "acF4zHapFgYp0uZ8twAoyQAAAEI"]
[Tue Mar 24 01:30:53.365329 2026] [:error] [pid 56238:tid 56363] [client 74.248.130.207:24558] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-home.php"] [unique_id "acF4zVSqceFAZRgPDq6n4QAAAM8"]
[Tue Mar 24 01:30:54.122593 2026] [proxy_fcgi:error] [pid 56238:tid 56372] [client 74.248.130.207:24539] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:30:54.456250 2026] [proxy_fcgi:error] [pid 56238:tid 56350] [client 74.248.130.207:24539] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:30:54.725625 2026] [proxy_fcgi:error] [pid 56238:tid 56354] [client 74.248.130.207:24539] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:30:55.043076 2026] [proxy_fcgi:error] [pid 56238:tid 56371] [client 74.248.130.207:24539] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:30:55.325601 2026] [proxy_fcgi:error] [pid 56238:tid 56357] [client 74.248.130.207:24539] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:30:55.676554 2026] [proxy_fcgi:error] [pid 56238:tid 56355] [client 74.248.130.207:24539] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:30:56.431152 2026] [proxy_fcgi:error] [pid 56238:tid 56352] [client 74.248.130.207:24539] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:30:56.732840 2026] [proxy_fcgi:error] [pid 56238:tid 56363] [client 74.248.130.207:24539] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:30:57.170250 2026] [proxy_fcgi:error] [pid 56238:tid 56359] [client 74.248.130.207:24539] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:30:57.506538 2026] [proxy_fcgi:error] [pid 56238:tid 56368] [client 74.248.130.207:24539] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:30:57.801491 2026] [:error] [pid 56238:tid 56362] [client 74.248.130.207:24539] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xinha.php"] [unique_id "acF40VSqceFAZRgPDq6n9gAAAM4"]
[Tue Mar 24 01:30:58.595181 2026] [:error] [pid 31798:tid 31818] [client 74.248.130.207:23077] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xinha.php"] [unique_id "acF40ndtW_1bksndFbYtNQAAABI"]
[Tue Mar 24 01:31:00.098180 2026] [:error] [pid 56435:tid 56508] [client 74.248.130.207:24339] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xinha.php"] [unique_id "acF41Mrwr-l5A-s9ryCHuQAAAQg"]
[Tue Mar 24 01:31:00.905954 2026] [:error] [pid 31798:tid 31817] [client 74.248.130.207:23851] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xinha.php"] [unique_id "acF41HdtW_1bksndFbYtRgAAABE"]
[Tue Mar 24 01:31:01.858816 2026] [:error] [pid 31798:tid 31810] [client 74.248.130.207:24589] [client 74.248.130.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "acF41XdtW_1bksndFbYtSwAAAAo"]
[Tue Mar 24 01:31:02.893952 2026] [:error] [pid 31798:tid 31817] [client 74.248.130.207:24016] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cc.php"] [unique_id "acF41ndtW_1bksndFbYtUwAAABE"]
[Tue Mar 24 01:31:03.649711 2026] [:error] [pid 31798:tid 31812] [client 74.248.130.207:1912] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cc.php"] [unique_id "acF413dtW_1bksndFbYtVwAAAAw"]
[Tue Mar 24 01:31:04.504483 2026] [:error] [pid 31798:tid 31817] [client 74.248.130.207:1949] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cc.php"] [unique_id "acF42HdtW_1bksndFbYtYAAAABE"]
[Tue Mar 24 01:31:05.437428 2026] [:error] [pid 56238:tid 56357] [client 74.248.130.207:1922] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cc.php"] [unique_id "acF42VSqceFAZRgPDq6n-gAAAMk"]
[Tue Mar 24 01:31:06.367986 2026] [:error] [pid 56236:tid 56295] [client 74.248.130.207:24100] [client 74.248.130.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "acF42napFgYp0uZ8twAo3QAAAEI"]
[Tue Mar 24 01:31:07.211031 2026] [:error] [pid 56238:tid 56359] [client 74.248.130.207:24888] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file17.php"] [unique_id "acF421SqceFAZRgPDq6oAgAAAMs"]
[Tue Mar 24 01:31:11.731672 2026] [:error] [pid 56238:tid 56350] [client 74.248.130.207:24078] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file17.php"] [unique_id "acF431SqceFAZRgPDq6oBwAAAMI"]
[Tue Mar 24 01:31:12.551587 2026] [:error] [pid 31798:tid 31807] [client 74.248.130.207:10946] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file17.php"] [unique_id "acF44HdtW_1bksndFbYtfAAAAAc"]
[Tue Mar 24 01:31:13.562043 2026] [:error] [pid 31798:tid 31802] [client 74.248.130.207:10956] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file17.php"] [unique_id "acF44XdtW_1bksndFbYtgAAAAAI"]
[Tue Mar 24 01:31:14.365508 2026] [:error] [pid 56435:tid 56520] [client 74.248.130.207:24620] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/brand.php"] [unique_id "acF44srwr-l5A-s9ryCHxAAAARM"]
[Tue Mar 24 01:31:15.084329 2026] [:error] [pid 56435:tid 56508] [client 74.248.130.207:23055] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/brand.php"] [unique_id "acF448rwr-l5A-s9ryCHxQAAAQg"]
[Tue Mar 24 01:31:16.095125 2026] [:error] [pid 31798:tid 31806] [client 74.248.130.207:10976] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/brand.php"] [unique_id "acF45HdtW_1bksndFbYtjgAAAAY"]
[Tue Mar 24 01:31:17.293096 2026] [:error] [pid 56435:tid 56513] [client 74.248.130.207:24546] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/brand.php"] [unique_id "acF45crwr-l5A-s9ryCHyQAAAQw"]
[Tue Mar 24 01:31:18.201000 2026] [:error] [pid 56238:tid 56355] [client 74.248.130.207:23845] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-trackback.php"] [unique_id "acF45lSqceFAZRgPDq6oEgAAAMc"]
[Tue Mar 24 01:31:18.907572 2026] [:error] [pid 56238:tid 56349] [client 74.248.130.207:24789] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-trackback.php"] [unique_id "acF45lSqceFAZRgPDq6oEwAAAME"]
[Tue Mar 24 01:31:19.636542 2026] [:error] [pid 56435:tid 56517] [client 74.248.130.207:24061] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-trackback.php"] [unique_id "acF458rwr-l5A-s9ryCH0QAAARA"]
[Tue Mar 24 01:31:20.584306 2026] [:error] [pid 31798:tid 31801] [client 74.248.130.207:24549] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-trackback.php"] [unique_id "acF46HdtW_1bksndFbYtrwAAAAE"]
[Tue Mar 24 01:31:21.686816 2026] [:error] [pid 56435:tid 56500] [client 74.248.130.207:23142] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/13k.php"] [unique_id "acF46crwr-l5A-s9ryCH3gAAAQE"]
[Tue Mar 24 01:31:22.570126 2026] [:error] [pid 56435:tid 56499] [client 74.248.130.207:24048] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/13k.php"] [unique_id "acF46srwr-l5A-s9ryCH4QAAAQA"]
[Tue Mar 24 01:31:23.615845 2026] [:error] [pid 31798:tid 31802] [client 74.248.130.207:23127] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/13k.php"] [unique_id "acF463dtW_1bksndFbYtvAAAAAI"]
[Tue Mar 24 01:31:24.449366 2026] [:error] [pid 31798:tid 31803] [client 74.248.130.207:24520] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/13k.php"] [unique_id "acF47HdtW_1bksndFbYtvgAAAAM"]
[Tue Mar 24 01:31:25.232292 2026] [:error] [pid 56237:tid 56331] [client 74.248.130.207:24574] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ww1.php"] [unique_id "acF47QymO0MnzQb90MMuTwAAAIo"]
[Tue Mar 24 01:31:25.879954 2026] [:error] [pid 56238:tid 56370] [client 74.248.130.207:24341] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ww1.php"] [unique_id "acF47VSqceFAZRgPDq6oGQAAANY"]
[Tue Mar 24 01:31:26.735225 2026] [:error] [pid 56236:tid 56302] [client 74.248.130.207:24625] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ww1.php"] [unique_id "acF47napFgYp0uZ8twAo8gAAAEk"]
[Tue Mar 24 01:31:30.620880 2026] [:error] [pid 56238:tid 56357] [client 74.248.130.207:24609] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ww1.php"] [unique_id "acF48lSqceFAZRgPDq6oJwAAAMk"]
[Tue Mar 24 01:31:31.507476 2026] [:error] [pid 31798:tid 31823] [client 74.248.130.207:8553] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/3i8som87avh59dosfymtvCakc.php"] [unique_id "acF483dtW_1bksndFbYtywAAABc"]
[Tue Mar 24 01:31:32.284331 2026] [:error] [pid 56237:tid 56345] [client 74.248.130.207:14435] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/3i8som87avh59dosfymtvCakc.php"] [unique_id "acF49AymO0MnzQb90MMuWwAAAJg"]
[Tue Mar 24 01:31:33.175108 2026] [:error] [pid 56238:tid 56363] [client 74.248.130.207:1754] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/3i8som87avh59dosfymtvCakc.php"] [unique_id "acF49VSqceFAZRgPDq6oLQAAAM8"]
[Tue Mar 24 01:31:34.211493 2026] [:error] [pid 56435:tid 56520] [client 74.248.130.207:24360] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/3i8som87avh59dosfymtvCakc.php"] [unique_id "acF49srwr-l5A-s9ryCH6AAAARM"]
[Tue Mar 24 01:31:34.855599 2026] [:error] [pid 56435:tid 56516] [client 74.248.130.207:24829] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/403.php"] [unique_id "acF49srwr-l5A-s9ryCH6wAAAQ8"]
[Tue Mar 24 01:31:35.766857 2026] [:error] [pid 56238:tid 56365] [client 74.248.130.207:24281] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/403.php"] [unique_id "acF491SqceFAZRgPDq6oOAAAANE"]
[Tue Mar 24 01:31:36.470305 2026] [:error] [pid 56435:tid 56505] [client 74.248.130.207:24037] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/403.php"] [unique_id "acF4-Mrwr-l5A-s9ryCH9AAAAQY"]
[Tue Mar 24 01:31:37.566943 2026] [:error] [pid 31798:tid 31823] [client 74.248.130.207:10078] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/403.php"] [unique_id "acF4-XdtW_1bksndFbYt1wAAABc"]
[Tue Mar 24 01:31:38.271224 2026] [:error] [pid 31798:tid 31812] [client 74.248.130.207:10122] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-22.php"] [unique_id "acF4-ndtW_1bksndFbYt3wAAAAw"]
[Tue Mar 24 01:31:38.904774 2026] [:error] [pid 31798:tid 31817] [client 74.248.130.207:8598] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-22.php"] [unique_id "acF4-ndtW_1bksndFbYt4wAAABE"]
[Tue Mar 24 01:31:40.371912 2026] [:error] [pid 31798:tid 31824] [client 74.248.130.207:24316] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-22.php"] [unique_id "acF4_HdtW_1bksndFbYt6gAAABg"]
[Tue Mar 24 01:31:42.556351 2026] [:error] [pid 31798:tid 31802] [client 74.248.130.207:8521] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-22.php"] [unique_id "acF4_ndtW_1bksndFbYt-QAAAAI"]
[Tue Mar 24 01:31:50.343556 2026] [:error] [pid 31798:tid 31804] [client 74.248.130.207:24606] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/first.php"] [unique_id "acF5BndtW_1bksndFbYuFwAAAAQ"]
[Tue Mar 24 01:31:51.280170 2026] [:error] [pid 31798:tid 31811] [client 74.248.130.207:8548] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/first.php"] [unique_id "acF5B3dtW_1bksndFbYuIAAAAAs"]
[Tue Mar 24 01:31:52.322249 2026] [:error] [pid 31798:tid 31815] [client 74.248.130.207:10964] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/first.php"] [unique_id "acF5CHdtW_1bksndFbYuKAAAAA8"]
[Tue Mar 24 01:31:53.860419 2026] [:error] [pid 56238:tid 56359] [client 74.248.130.207:14423] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/first.php"] [unique_id "acF5CVSqceFAZRgPDq6oUAAAAMs"]
[Tue Mar 24 01:31:55.925911 2026] [:error] [pid 56238:tid 56369] [client 74.248.130.207:24367] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ad.php"] [unique_id "acF5C1SqceFAZRgPDq6oVQAAANU"]
[Tue Mar 24 01:31:57.015763 2026] [proxy_fcgi:error] [pid 56238:tid 56365] [client 74.248.130.207:10119] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:31:57.386214 2026] [proxy_fcgi:error] [pid 56238:tid 56364] [client 74.248.130.207:10119] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:31:57.650645 2026] [proxy_fcgi:error] [pid 56238:tid 56366] [client 74.248.130.207:10119] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:31:57.945865 2026] [proxy_fcgi:error] [pid 56238:tid 56372] [client 74.248.130.207:10119] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:31:58.236963 2026] [proxy_fcgi:error] [pid 56238:tid 56353] [client 74.248.130.207:10119] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:31:58.510764 2026] [proxy_fcgi:error] [pid 56238:tid 56369] [client 74.248.130.207:10119] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:31:58.769367 2026] [proxy_fcgi:error] [pid 56238:tid 56356] [client 74.248.130.207:10119] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:31:59.028248 2026] [proxy_fcgi:error] [pid 56238:tid 56365] [client 74.248.130.207:10119] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:31:59.308476 2026] [proxy_fcgi:error] [pid 56238:tid 56370] [client 74.248.130.207:10119] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:31:59.583197 2026] [proxy_fcgi:error] [pid 56238:tid 56359] [client 74.248.130.207:10119] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:32:00.197850 2026] [:error] [pid 56238:tid 56354] [client 74.248.130.207:10119] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fc72f.php"] [unique_id "acF5EFSqceFAZRgPDq6oeAAAAMY"]
[Tue Mar 24 01:32:02.535552 2026] [:error] [pid 56238:tid 56368] [client 74.248.130.207:24890] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fc72f.php"] [unique_id "acF5ElSqceFAZRgPDq6ohQAAANQ"]
[Tue Mar 24 01:32:03.761412 2026] [:error] [pid 56238:tid 56368] [client 74.248.130.207:10052] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fc72f.php"] [unique_id "acF5E1SqceFAZRgPDq6okAAAANQ"]
[Tue Mar 24 01:32:05.555728 2026] [:error] [pid 56237:tid 56327] [client 74.248.130.207:9461] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fc72f.php"] [unique_id "acF5FQymO0MnzQb90MMuggAAAIY"]
[Tue Mar 24 01:32:06.486025 2026] [:error] [pid 56238:tid 56359] [client 74.248.130.207:14402] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/qhLaGswd9DS.php"] [unique_id "acF5FlSqceFAZRgPDq6ooQAAAMs"]
[Tue Mar 24 01:32:07.577394 2026] [:error] [pid 31798:tid 31806] [client 74.248.130.207:10983] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/qhLaGswd9DS.php"] [unique_id "acF5F3dtW_1bksndFbYuTgAAAAY"]
[Tue Mar 24 01:32:10.128829 2026] [:error] [pid 56236:tid 56296] [client 74.248.130.207:9436] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/qhLaGswd9DS.php"] [unique_id "acF5GnapFgYp0uZ8twApNgAAAEM"]
[Tue Mar 24 01:32:11.407188 2026] [:error] [pid 56236:tid 56307] [client 74.248.130.207:8920] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/qhLaGswd9DS.php"] [unique_id "acF5G3apFgYp0uZ8twApOQAAAE4"]
[Tue Mar 24 01:32:12.216123 2026] [:error] [pid 31798:tid 31816] [client 74.248.130.207:11077] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-ac.php"] [unique_id "acF5HHdtW_1bksndFbYucQAAABA"]
[Tue Mar 24 01:32:13.231853 2026] [:error] [pid 56236:tid 56295] [client 74.248.130.207:10540] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-ac.php"] [unique_id "acF5HXapFgYp0uZ8twApPAAAAEI"]
[Tue Mar 24 01:32:14.213103 2026] [:error] [pid 31798:tid 31819] [client 74.248.130.207:9653] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-ac.php"] [unique_id "acF5HndtW_1bksndFbYuewAAABM"]
[Tue Mar 24 01:32:14.882458 2026] [:error] [pid 56435:tid 56515] [client 74.248.130.207:10962] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-ac.php"] [unique_id "acF5Hsrwr-l5A-s9ryCIHAAAAQ4"]
[Tue Mar 24 01:32:16.120841 2026] [:error] [pid 56237:tid 56326] [client 74.248.130.207:10960] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kao.php"] [unique_id "acF5IAymO0MnzQb90MMunQAAAIU"]
[Tue Mar 24 01:32:17.663030 2026] [:error] [pid 56435:tid 56501] [client 74.248.130.207:12869] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kao.php"] [unique_id "acF5Icrwr-l5A-s9ryCIKgAAAQI"]
[Tue Mar 24 01:32:21.723379 2026] [:error] [pid 56435:tid 56505] [client 74.248.130.207:9470] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kao.php"] [unique_id "acF5Jcrwr-l5A-s9ryCISQAAAQY"]
[Tue Mar 24 01:32:23.421001 2026] [:error] [pid 31798:tid 31820] [client 74.248.130.207:11894] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kao.php"] [unique_id "acF5J3dtW_1bksndFbYulwAAABQ"]
[Tue Mar 24 01:32:24.106183 2026] [:error] [pid 31798:tid 31806] [client 74.248.130.207:10927] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/test1.php"] [unique_id "acF5KHdtW_1bksndFbYumgAAAAY"]
[Tue Mar 24 01:32:26.054128 2026] [:error] [pid 56435:tid 56505] [client 74.248.130.207:10433] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/test1.php"] [unique_id "acF5Ksrwr-l5A-s9ryCIVwAAAQY"]
[Tue Mar 24 01:32:28.014723 2026] [:error] [pid 56236:tid 56296] [client 74.248.130.207:10649] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/test1.php"] [unique_id "acF5LHapFgYp0uZ8twApRwAAAEM"]
[Tue Mar 24 01:32:29.107319 2026] [:error] [pid 31798:tid 31818] [client 74.248.130.207:11124] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/test1.php"] [unique_id "acF5LXdtW_1bksndFbYupAAAABI"]
[Tue Mar 24 01:32:30.746093 2026] [:error] [pid 31798:tid 31814] [client 74.248.130.207:8832] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zoo.php"] [unique_id "acF5LndtW_1bksndFbYurwAAAA4"]
[Tue Mar 24 01:32:31.742835 2026] [:error] [pid 56238:tid 56370] [client 74.248.130.207:10010] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zoo.php"] [unique_id "acF5L1SqceFAZRgPDq6otQAAANY"]
[Tue Mar 24 01:32:33.000903 2026] [:error] [pid 56238:tid 56353] [client 74.248.130.207:8886] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zoo.php"] [unique_id "acF5MVSqceFAZRgPDq6ovgAAAMU"]
[Tue Mar 24 01:32:37.248334 2026] [:error] [pid 31798:tid 31808] [client 74.248.130.207:9609] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zoo.php"] [unique_id "acF5NXdtW_1bksndFbYuvgAAAAg"]
[Tue Mar 24 01:32:41.817926 2026] [:error] [pid 31798:tid 31822] [client 74.248.130.207:8869] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tons.php"] [unique_id "acF5OXdtW_1bksndFbYuzQAAABY"]
[Tue Mar 24 01:32:43.925555 2026] [:error] [pid 31798:tid 31820] [client 74.248.130.207:8356] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tons.php"] [unique_id "acF5O3dtW_1bksndFbYu1wAAABQ"]
[Tue Mar 24 01:32:45.031009 2026] [:error] [pid 56435:tid 56517] [client 74.248.130.207:8947] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tons.php"] [unique_id "acF5Pcrwr-l5A-s9ryCIcgAAARA"]
[Tue Mar 24 01:32:46.218025 2026] [:error] [pid 56435:tid 56500] [client 74.248.130.207:9917] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tons.php"] [unique_id "acF5Psrwr-l5A-s9ryCIdwAAAQE"]
[Tue Mar 24 01:32:47.724612 2026] [:error] [pid 31798:tid 31800] [client 74.248.130.207:9192] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hplfuns.php"] [unique_id "acF5P3dtW_1bksndFbYu6AAAAAA"]
[Tue Mar 24 01:32:48.989397 2026] [:error] [pid 31798:tid 31810] [client 74.248.130.207:9140] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hplfuns.php"] [unique_id "acF5QHdtW_1bksndFbYu8QAAAAo"]
[Tue Mar 24 01:32:50.016113 2026] [:error] [pid 56237:tid 56329] [client 74.248.130.207:9134] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hplfuns.php"] [unique_id "acF5QgymO0MnzQb90MMuxgAAAIg"]
[Tue Mar 24 01:32:52.572609 2026] [:error] [pid 56238:tid 56352] [client 74.248.130.207:12877] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hplfuns.php"] [unique_id "acF5RFSqceFAZRgPDq6o1gAAAMQ"]
[Tue Mar 24 01:32:55.582656 2026] [:error] [pid 56435:tid 56504] [client 74.248.130.207:10982] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ww2.php"] [unique_id "acF5R8rwr-l5A-s9ryCIkQAAAQU"]
[Tue Mar 24 01:32:58.678165 2026] [:error] [pid 56236:tid 56316] [client 74.248.130.207:9670] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ww2.php"] [unique_id "acF5SnapFgYp0uZ8twApYAAAAFc"]
[Tue Mar 24 01:33:00.593481 2026] [proxy_fcgi:error] [pid 56238:tid 56361] [client 74.248.130.207:9089] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:33:01.060609 2026] [proxy_fcgi:error] [pid 56238:tid 56366] [client 74.248.130.207:9089] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:33:01.440962 2026] [proxy_fcgi:error] [pid 56238:tid 56370] [client 74.248.130.207:9089] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:33:01.921061 2026] [proxy_fcgi:error] [pid 56238:tid 56352] [client 74.248.130.207:9089] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:33:02.223387 2026] [proxy_fcgi:error] [pid 56238:tid 56364] [client 74.248.130.207:9089] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:33:02.494609 2026] [proxy_fcgi:error] [pid 56238:tid 56360] [client 74.248.130.207:9089] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:33:02.991197 2026] [proxy_fcgi:error] [pid 56238:tid 56348] [client 74.248.130.207:9089] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:33:03.308453 2026] [proxy_fcgi:error] [pid 56238:tid 56359] [client 74.248.130.207:9089] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:33:03.567405 2026] [proxy_fcgi:error] [pid 56238:tid 56363] [client 74.248.130.207:9089] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:33:03.985652 2026] [proxy_fcgi:error] [pid 56238:tid 56351] [client 74.248.130.207:9089] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:33:04.391285 2026] [proxy_fcgi:error] [pid 56238:tid 56356] [client 74.248.130.207:9089] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:33:04.679777 2026] [:error] [pid 56238:tid 56353] [client 74.248.130.207:9089] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vbbn.php"] [unique_id "acF5UFSqceFAZRgPDq6o7gAAAMU"]
[Tue Mar 24 01:33:05.979608 2026] [:error] [pid 56237:tid 56321] [client 74.248.130.207:9405] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vbbn.php"] [unique_id "acF5UQymO0MnzQb90MMu1gAAAIA"]
[Tue Mar 24 01:33:07.342030 2026] [:error] [pid 31798:tid 31805] [client 74.248.130.207:11003] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vbbn.php"] [unique_id "acF5U3dtW_1bksndFbYvHQAAAAU"]
[Tue Mar 24 01:33:09.087697 2026] [:error] [pid 56435:tid 56522] [client 74.248.130.207:25107] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vbbn.php"] [unique_id "acF5Vcrwr-l5A-s9ryCItwAAARU"]
[Tue Mar 24 01:33:10.967641 2026] [:error] [pid 56238:tid 56354] [client 74.248.130.207:9844] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sang.php"] [unique_id "acF5VlSqceFAZRgPDq6pAQAAAMY"]
[Tue Mar 24 01:33:12.974624 2026] [:error] [pid 56237:tid 56331] [client 74.248.130.207:10211] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sang.php"] [unique_id "acF5WAymO0MnzQb90MMu2QAAAIo"]
[Tue Mar 24 01:33:15.636835 2026] [:error] [pid 56236:tid 56314] [client 74.248.130.207:10999] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sang.php"] [unique_id "acF5W3apFgYp0uZ8twApmAAAAFU"]
[Tue Mar 24 01:33:19.360338 2026] [:error] [pid 56236:tid 56313] [client 74.248.130.207:8519] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sang.php"] [unique_id "acF5X3apFgYp0uZ8twApnQAAAFQ"]
[Tue Mar 24 01:33:21.266273 2026] [:error] [pid 31798:tid 31807] [client 74.248.130.207:10137] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wolv.php"] [unique_id "acF5YXdtW_1bksndFbYvOgAAAAc"]
[Tue Mar 24 01:33:22.668490 2026] [:error] [pid 56238:tid 56363] [client 74.248.130.207:8564] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wolv.php"] [unique_id "acF5YlSqceFAZRgPDq6pFAAAAM8"]
[Tue Mar 24 01:33:25.260093 2026] [:error] [pid 31798:tid 31818] [client 74.248.130.207:9400] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wolv.php"] [unique_id "acF5ZXdtW_1bksndFbYvQgAAABI"]
[Tue Mar 24 01:33:27.046801 2026] [:error] [pid 56238:tid 56369] [client 74.248.130.207:25677] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wolv.php"] [unique_id "acF5Z1SqceFAZRgPDq6pHgAAANU"]
[Tue Mar 24 01:33:28.015848 2026] [:error] [pid 56435:tid 56517] [client 74.248.130.207:10366] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lock.php"] [unique_id "acF5aMrwr-l5A-s9ryCI0AAAARA"]
[Tue Mar 24 01:33:29.934834 2026] [:error] [pid 31798:tid 31807] [client 74.248.130.207:26008] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lock.php"] [unique_id "acF5aXdtW_1bksndFbYvUwAAAAc"]
[Tue Mar 24 01:33:31.400526 2026] [:error] [pid 56237:tid 56324] [client 74.248.130.207:25949] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lock.php"] [unique_id "acF5awymO0MnzQb90MMu7AAAAIM"]
[Tue Mar 24 01:33:32.251142 2026] [:error] [pid 56237:tid 56342] [client 74.248.130.207:25930] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lock.php"] [unique_id "acF5bAymO0MnzQb90MMu7QAAAJU"]
[Tue Mar 24 01:33:34.998038 2026] [:error] [pid 31798:tid 31819] [client 74.248.130.207:25051] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/minik.php"] [unique_id "acF5bndtW_1bksndFbYvZAAAABM"]
[Tue Mar 24 01:33:36.195308 2026] [:error] [pid 31798:tid 31812] [client 74.248.130.207:25752] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/minik.php"] [unique_id "acF5cHdtW_1bksndFbYvbwAAAAw"]
[Tue Mar 24 01:33:38.264573 2026] [:error] [pid 56237:tid 56323] [client 74.248.130.207:9165] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/minik.php"] [unique_id "acF5cgymO0MnzQb90MMu9QAAAII"]
[Tue Mar 24 01:33:39.300525 2026] [:error] [pid 31798:tid 31823] [client 74.248.130.207:25761] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/minik.php"] [unique_id "acF5c3dtW_1bksndFbYvfgAAABc"]
[Tue Mar 24 01:33:40.181408 2026] [:error] [pid 56238:tid 56370] [client 74.248.130.207:9177] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cwsd.php"] [unique_id "acF5dFSqceFAZRgPDq6pKAAAANY"]
[Tue Mar 24 01:33:41.190270 2026] [:error] [pid 31798:tid 31815] [client 74.248.130.207:8772] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cwsd.php"] [unique_id "acF5dXdtW_1bksndFbYvhwAAAA8"]
[Tue Mar 24 01:33:42.885373 2026] [:error] [pid 31798:tid 31824] [client 74.248.130.207:9936] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cwsd.php"] [unique_id "acF5dndtW_1bksndFbYvkAAAABg"]
[Tue Mar 24 01:33:44.440575 2026] [:error] [pid 56435:tid 56511] [client 74.248.130.207:26023] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cwsd.php"] [unique_id "acF5eMrwr-l5A-s9ryCI5QAAAQs"]
[Tue Mar 24 01:33:46.144670 2026] [:error] [pid 56435:tid 56505] [client 74.248.130.207:8327] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wxdxn.php"] [unique_id "acF5esrwr-l5A-s9ryCI7wAAAQY"]
[Tue Mar 24 01:33:47.735392 2026] [:error] [pid 56238:tid 56354] [client 74.248.130.207:11006] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wxdxn.php"] [unique_id "acF5e1SqceFAZRgPDq6pMgAAAMY"]
[Tue Mar 24 01:33:48.847376 2026] [:error] [pid 56238:tid 56363] [client 74.248.130.207:8801] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wxdxn.php"] [unique_id "acF5fFSqceFAZRgPDq6pNAAAAM8"]
[Tue Mar 24 01:35:10.223969 2026] [proxy_fcgi:error] [pid 56237:tid 56340] [client 74.248.130.207:25061] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:35:10.528738 2026] [proxy_fcgi:error] [pid 56237:tid 56324] [client 74.248.130.207:25061] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:35:10.816927 2026] [proxy_fcgi:error] [pid 56237:tid 56342] [client 74.248.130.207:25061] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:35:11.083148 2026] [proxy_fcgi:error] [pid 56237:tid 56336] [client 74.248.130.207:25061] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:35:11.371038 2026] [proxy_fcgi:error] [pid 56237:tid 56330] [client 74.248.130.207:25061] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:35:12.026370 2026] [:error] [pid 56237:tid 56344] [client 74.248.130.207:25061] [client 74.248.130.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dwelectservices.com.au"] [uri "/fm.php"] [unique_id "acF50AymO0MnzQb90MMvXwAAAJc"]
[Tue Mar 24 01:35:12.652749 2026] [proxy_fcgi:error] [pid 56237:tid 56341] [client 74.248.130.207:8817] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:35:12.917656 2026] [proxy_fcgi:error] [pid 56237:tid 56345] [client 74.248.130.207:8817] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:35:13.251039 2026] [proxy_fcgi:error] [pid 56237:tid 56340] [client 74.248.130.207:8817] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:35:13.565015 2026] [proxy_fcgi:error] [pid 56237:tid 56325] [client 74.248.130.207:8817] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:35:13.858115 2026] [:error] [pid 56237:tid 56334] [client 74.248.130.207:8817] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/x.php"] [unique_id "acF50QymO0MnzQb90MMvaQAAAI0"]
[Tue Mar 24 01:35:14.477930 2026] [:error] [pid 56237:tid 56342] [client 74.248.130.207:26180] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/x.php"] [unique_id "acF50gymO0MnzQb90MMvagAAAJU"]
[Tue Mar 24 01:35:15.070897 2026] [:error] [pid 56238:tid 56370] [client 74.248.130.207:9836] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/x.php"] [unique_id "acF501SqceFAZRgPDq6ppAAAANY"]
[Tue Mar 24 01:35:16.228113 2026] [:error] [pid 56435:tid 56504] [client 74.248.130.207:25111] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/x.php"] [unique_id "acF51Mrwr-l5A-s9ryCJxQAAAQU"]
[Tue Mar 24 01:35:17.100795 2026] [:error] [pid 56435:tid 56521] [client 74.248.130.207:9798] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cc3.php"] [unique_id "acF51crwr-l5A-s9ryCJxgAAARQ"]
[Tue Mar 24 01:35:17.818179 2026] [:error] [pid 56435:tid 56502] [client 74.248.130.207:10333] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cc3.php"] [unique_id "acF51crwr-l5A-s9ryCJywAAAQM"]
[Tue Mar 24 01:35:18.639400 2026] [:error] [pid 31798:tid 31803] [client 74.248.130.207:25770] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cc3.php"] [unique_id "acF51ndtW_1bksndFbYwhAAAAAM"]
[Tue Mar 24 01:35:19.351247 2026] [:error] [pid 31798:tid 31817] [client 74.248.130.207:26690] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cc3.php"] [unique_id "acF513dtW_1bksndFbYwiQAAABE"]
[Tue Mar 24 01:35:19.970684 2026] [:error] [pid 31798:tid 31821] [client 74.248.130.207:25766] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hsx.php"] [unique_id "acF513dtW_1bksndFbYwjgAAABU"]
[Tue Mar 24 01:35:21.290055 2026] [:error] [pid 31798:tid 31800] [client 74.248.130.207:25790] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hsx.php"] [unique_id "acF52XdtW_1bksndFbYwlwAAAAA"]
[Tue Mar 24 01:35:22.057278 2026] [:error] [pid 31798:tid 31820] [client 74.248.130.207:26466] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hsx.php"] [unique_id "acF52ndtW_1bksndFbYwmgAAABQ"]
[Tue Mar 24 01:35:22.779088 2026] [:error] [pid 56435:tid 56518] [client 74.248.130.207:26790] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hsx.php"] [unique_id "acF52srwr-l5A-s9ryCJ2wAAARE"]
[Tue Mar 24 01:35:23.406288 2026] [:error] [pid 56435:tid 56503] [client 74.248.130.207:8820] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/modules/mod_simplefileuploadv1.3/elements/filemanager.php"] [unique_id "acF528rwr-l5A-s9ryCJ3QAAAQQ"]
[Tue Mar 24 01:35:23.994446 2026] [:error] [pid 31798:tid 31817] [client 74.248.130.207:26762] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/modules/mod_simplefileuploadv1.3/elements/filemanager.php"] [unique_id "acF523dtW_1bksndFbYwogAAABE"]
[Tue Mar 24 01:35:24.996635 2026] [:error] [pid 31798:tid 31819] [client 74.248.130.207:9850] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/modules/mod_simplefileuploadv1.3/elements/filemanager.php"] [unique_id "acF53HdtW_1bksndFbYwpQAAABM"]
[Tue Mar 24 01:35:25.841670 2026] [:error] [pid 31798:tid 31821] [client 74.248.130.207:9962] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/modules/mod_simplefileuploadv1.3/elements/filemanager.php"] [unique_id "acF53XdtW_1bksndFbYwqAAAABU"]
[Tue Mar 24 01:35:26.655604 2026] [:error] [pid 31798:tid 31817] [client 74.248.130.207:10319] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fs8.php"] [unique_id "acF53ndtW_1bksndFbYwrgAAABE"]
[Tue Mar 24 01:35:27.278503 2026] [:error] [pid 56435:tid 56509] [client 74.248.130.207:25993] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fs8.php"] [unique_id "acF538rwr-l5A-s9ryCJ4wAAAQk"]
[Tue Mar 24 01:35:28.164330 2026] [:error] [pid 56435:tid 56518] [client 74.248.130.207:26471] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fs8.php"] [unique_id "acF54Mrwr-l5A-s9ryCJ5wAAARE"]
[Tue Mar 24 01:35:28.813593 2026] [:error] [pid 31798:tid 31816] [client 74.248.130.207:26466] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fs8.php"] [unique_id "acF54HdtW_1bksndFbYwsgAAABA"]
[Tue Mar 24 01:35:29.880561 2026] [:error] [pid 56237:tid 56326] [client 74.248.130.207:9923] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/default.php"] [unique_id "acF54QymO0MnzQb90MMvbQAAAIU"]
[Tue Mar 24 01:35:30.509024 2026] [:error] [pid 56435:tid 56500] [client 74.248.130.207:25782] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/default.php"] [unique_id "acF54srwr-l5A-s9ryCJ8QAAAQE"]
[Tue Mar 24 01:35:31.627202 2026] [:error] [pid 56435:tid 56520] [client 74.248.130.207:25113] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/default.php"] [unique_id "acF548rwr-l5A-s9ryCJ-wAAARM"]
[Tue Mar 24 01:35:32.217830 2026] [:error] [pid 31798:tid 31818] [client 74.248.130.207:26452] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/default.php"] [unique_id "acF55HdtW_1bksndFbYwtgAAABI"]
[Tue Mar 24 01:35:32.903763 2026] [:error] [pid 31798:tid 31822] [client 74.248.130.207:25692] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mar.php"] [unique_id "acF55HdtW_1bksndFbYwuAAAABY"]
[Tue Mar 24 01:35:33.679046 2026] [:error] [pid 31798:tid 31823] [client 74.248.130.207:9965] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mar.php"] [unique_id "acF55XdtW_1bksndFbYwwwAAABc"]
[Tue Mar 24 01:35:34.692937 2026] [:error] [pid 31798:tid 31805] [client 74.248.130.207:26183] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mar.php"] [unique_id "acF55ndtW_1bksndFbYwyQAAAAU"]
[Tue Mar 24 01:35:35.452989 2026] [:error] [pid 56236:tid 56308] [client 74.248.130.207:9634] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mar.php"] [unique_id "acF553apFgYp0uZ8twAqAAAAAE8"]
[Tue Mar 24 01:35:36.256551 2026] [:error] [pid 56435:tid 56500] [client 74.248.130.207:9804] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/web.php"] [unique_id "acF56Mrwr-l5A-s9ryCJ_gAAAQE"]
[Tue Mar 24 01:35:36.894095 2026] [:error] [pid 31798:tid 31802] [client 74.248.130.207:26721] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/web.php"] [unique_id "acF56HdtW_1bksndFbYwzgAAAAI"]
[Tue Mar 24 01:35:37.503346 2026] [:error] [pid 56237:tid 56329] [client 74.248.130.207:26505] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/web.php"] [unique_id "acF56QymO0MnzQb90MMveAAAAIg"]
[Tue Mar 24 01:35:38.173520 2026] [:error] [pid 56237:tid 56334] [client 74.248.130.207:25941] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/web.php"] [unique_id "acF56gymO0MnzQb90MMvegAAAI0"]
[Tue Mar 24 01:35:40.282181 2026] [:error] [pid 56237:tid 56330] [client 74.248.130.207:8787] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ccou.php"] [unique_id "acF57AymO0MnzQb90MMvgAAAAIk"]
[Tue Mar 24 01:35:41.262950 2026] [:error] [pid 31798:tid 31816] [client 74.248.130.207:9947] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ccou.php"] [unique_id "acF57XdtW_1bksndFbYw1wAAABA"]
[Tue Mar 24 01:35:42.049252 2026] [:error] [pid 56435:tid 56501] [client 74.248.130.207:26182] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ccou.php"] [unique_id "acF57srwr-l5A-s9ryCKFwAAAQI"]
[Tue Mar 24 01:35:42.949510 2026] [:error] [pid 31798:tid 31812] [client 74.248.130.207:8775] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ccou.php"] [unique_id "acF57ndtW_1bksndFbYw4wAAAAw"]
[Tue Mar 24 01:35:43.783509 2026] [:error] [pid 56237:tid 56339] [client 74.248.130.207:25674] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "acF57wymO0MnzQb90MMvhAAAAJI"]
[Tue Mar 24 01:35:44.494143 2026] [:error] [pid 56238:tid 56372] [client 74.248.130.207:26518] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "acF58FSqceFAZRgPDq6pyAAAANg"]
[Tue Mar 24 01:35:45.276991 2026] [:error] [pid 31798:tid 31805] [client 74.248.130.207:25055] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "acF58XdtW_1bksndFbYw7QAAAAU"]
[Tue Mar 24 01:35:46.457281 2026] [:error] [pid 56237:tid 56334] [client 74.248.130.207:26462] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "acF58gymO0MnzQb90MMvhgAAAI0"]
[Tue Mar 24 01:35:47.352413 2026] [:error] [pid 56435:tid 56511] [client 74.248.130.207:26725] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rzki.php"] [unique_id "acF588rwr-l5A-s9ryCKJgAAAQs"]
[Tue Mar 24 01:35:48.660277 2026] [:error] [pid 31798:tid 31822] [client 74.248.130.207:26035] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rzki.php"] [unique_id "acF59HdtW_1bksndFbYw-gAAABY"]
[Tue Mar 24 01:35:49.611753 2026] [:error] [pid 56435:tid 56522] [client 74.248.130.207:26011] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rzki.php"] [unique_id "acF59crwr-l5A-s9ryCKLgAAARU"]
[Tue Mar 24 01:35:50.505875 2026] [:error] [pid 56435:tid 56503] [client 74.248.130.207:25671] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rzki.php"] [unique_id "acF59srwr-l5A-s9ryCKNAAAAQQ"]
[Tue Mar 24 01:35:51.406502 2026] [:error] [pid 31798:tid 31806] [client 74.248.130.207:26009] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/o.php"] [unique_id "acF593dtW_1bksndFbYxBwAAAAY"]
[Tue Mar 24 01:35:52.263082 2026] [:error] [pid 56435:tid 56516] [client 74.248.130.207:26017] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/o.php"] [unique_id "acF5-Mrwr-l5A-s9ryCKNwAAAQ8"]
[Tue Mar 24 01:35:53.162609 2026] [:error] [pid 31798:tid 31807] [client 74.248.130.207:17009] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/o.php"] [unique_id "acF5-XdtW_1bksndFbYxDQAAAAc"]
[Tue Mar 24 01:35:53.928503 2026] [:error] [pid 56238:tid 56355] [client 74.248.130.207:13112] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/o.php"] [unique_id "acF5-VSqceFAZRgPDq6p1AAAAMc"]
[Tue Mar 24 01:35:54.941082 2026] [:error] [pid 56236:tid 56308] [client 74.248.130.207:26523] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cfile.php"] [unique_id "acF5-napFgYp0uZ8twAqDwAAAE8"]
[Tue Mar 24 01:35:56.931145 2026] [:error] [pid 56435:tid 56499] [client 74.248.130.207:13089] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cfile.php"] [unique_id "acF5_Mrwr-l5A-s9ryCKQQAAAQA"]
[Tue Mar 24 01:35:58.046883 2026] [:error] [pid 31798:tid 31812] [client 74.248.130.207:9941] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cfile.php"] [unique_id "acF5_ndtW_1bksndFbYxGAAAAAw"]
[Tue Mar 24 01:35:59.079500 2026] [:error] [pid 56435:tid 56524] [client 74.248.130.207:26448] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cfile.php"] [unique_id "acF5_8rwr-l5A-s9ryCKUQAAARc"]
[Tue Mar 24 01:36:00.273063 2026] [:error] [pid 31798:tid 31822] [client 74.248.130.207:17208] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-cc.php"] [unique_id "acF6AHdtW_1bksndFbYxGgAAABY"]
[Tue Mar 24 01:36:00.965878 2026] [:error] [pid 56435:tid 56524] [client 74.248.130.207:25978] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-cc.php"] [unique_id "acF6AMrwr-l5A-s9ryCKYQAAARc"]
[Tue Mar 24 01:36:01.995210 2026] [:error] [pid 31798:tid 31817] [client 74.248.130.207:8769] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-cc.php"] [unique_id "acF6AXdtW_1bksndFbYxHwAAABE"]
[Tue Mar 24 01:36:02.899172 2026] [:error] [pid 31798:tid 31809] [client 74.248.130.207:26979] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-cc.php"] [unique_id "acF6AndtW_1bksndFbYxJQAAAAk"]
[Tue Mar 24 01:36:03.686972 2026] [:error] [pid 31798:tid 31805] [client 74.248.130.207:13070] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fox.php"] [unique_id "acF6A3dtW_1bksndFbYxKAAAAAU"]
[Tue Mar 24 01:36:04.953229 2026] [:error] [pid 31798:tid 31807] [client 74.248.130.207:25947] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fox.php"] [unique_id "acF6BHdtW_1bksndFbYxMgAAAAc"]
[Tue Mar 24 01:36:06.189957 2026] [:error] [pid 31798:tid 31824] [client 74.248.130.207:15680] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fox.php"] [unique_id "acF6BndtW_1bksndFbYxOgAAABg"]
[Tue Mar 24 01:36:07.452157 2026] [:error] [pid 56237:tid 56333] [client 74.248.130.207:26813] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fox.php"] [unique_id "acF6BwymO0MnzQb90MMvlAAAAIw"]
[Tue Mar 24 01:36:09.175380 2026] [:error] [pid 31798:tid 31812] [client 74.248.130.207:26438] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/pNRzcP6wtYy.php"] [unique_id "acF6CXdtW_1bksndFbYxPgAAAAw"]
[Tue Mar 24 01:36:10.299137 2026] [:error] [pid 31798:tid 31818] [client 74.248.130.207:26734] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/pNRzcP6wtYy.php"] [unique_id "acF6CndtW_1bksndFbYxQwAAABI"]
[Tue Mar 24 01:36:11.473962 2026] [:error] [pid 31798:tid 31810] [client 74.248.130.207:27002] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/pNRzcP6wtYy.php"] [unique_id "acF6C3dtW_1bksndFbYxSgAAAAo"]
[Tue Mar 24 01:36:13.768414 2026] [proxy_fcgi:error] [pid 56435:tid 56509] [client 74.248.130.207:13420] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:36:14.140009 2026] [proxy_fcgi:error] [pid 56435:tid 56513] [client 74.248.130.207:13420] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:36:15.027743 2026] [proxy_fcgi:error] [pid 56435:tid 56523] [client 74.248.130.207:13420] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:36:17.291186 2026] [proxy_fcgi:error] [pid 56435:tid 56499] [client 74.248.130.207:13420] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:36:17.589459 2026] [proxy_fcgi:error] [pid 56435:tid 56510] [client 74.248.130.207:13420] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:36:18.233703 2026] [proxy_fcgi:error] [pid 56435:tid 56514] [client 74.248.130.207:13420] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:36:18.512526 2026] [proxy_fcgi:error] [pid 56435:tid 56507] [client 74.248.130.207:13420] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:36:18.831355 2026] [proxy_fcgi:error] [pid 56435:tid 56517] [client 74.248.130.207:13420] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:36:19.137158 2026] [proxy_fcgi:error] [pid 56435:tid 56521] [client 74.248.130.207:13420] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:36:19.393524 2026] [:error] [pid 56435:tid 56499] [client 74.248.130.207:13420] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-xml.php"] [unique_id "acF6E8rwr-l5A-s9ryCKjQAAAQA"]
[Tue Mar 24 01:36:21.568817 2026] [:error] [pid 56238:tid 56361] [client 74.248.130.207:15698] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-xml.php"] [unique_id "acF6FVSqceFAZRgPDq6p_QAAAM0"]
[Tue Mar 24 01:36:23.073489 2026] [:error] [pid 31798:tid 31821] [client 74.248.130.207:12854] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-xml.php"] [unique_id "acF6F3dtW_1bksndFbYxcgAAABU"]
[Tue Mar 24 01:36:27.579939 2026] [:error] [pid 56238:tid 56359] [client 74.248.130.207:27043] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-xml.php"] [unique_id "acF6G1SqceFAZRgPDq6qAQAAAMs"]
[Tue Mar 24 01:36:28.384548 2026] [:error] [pid 31798:tid 31811] [client 74.248.130.207:27016] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/d4.php"] [unique_id "acF6HHdtW_1bksndFbYxgwAAAAs"]
[Tue Mar 24 01:36:29.952535 2026] [:error] [pid 31798:tid 31809] [client 74.248.130.207:12382] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/d4.php"] [unique_id "acF6HXdtW_1bksndFbYxhwAAAAk"]
[Tue Mar 24 01:36:31.085858 2026] [:error] [pid 31798:tid 31802] [client 74.248.130.207:10830] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/d4.php"] [unique_id "acF6H3dtW_1bksndFbYxiwAAAAI"]
[Tue Mar 24 01:36:34.515538 2026] [:error] [pid 31798:tid 31810] [client 74.248.130.207:27037] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/d4.php"] [unique_id "acF6IndtW_1bksndFbYxkgAAAAo"]
[Tue Mar 24 01:36:36.256370 2026] [:error] [pid 56435:tid 56514] [client 74.248.130.207:12586] [client 74.248.130.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "acF6JMrwr-l5A-s9ryCKxwAAAQ0"]
[Tue Mar 24 01:36:38.056215 2026] [:error] [pid 56236:tid 56302] [client 74.248.130.207:11780] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/just2.php"] [unique_id "acF6JnapFgYp0uZ8twAqVwAAAEk"]
[Tue Mar 24 01:36:40.685000 2026] [:error] [pid 56236:tid 56307] [client 74.248.130.207:10617] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/just2.php"] [unique_id "acF6KHapFgYp0uZ8twAqWwAAAE4"]
[Tue Mar 24 01:36:42.338198 2026] [:error] [pid 56238:tid 56353] [client 74.248.130.207:10867] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/just2.php"] [unique_id "acF6KlSqceFAZRgPDq6qIQAAAMU"]
[Tue Mar 24 01:36:43.306894 2026] [:error] [pid 56238:tid 56361] [client 74.248.130.207:27058] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/just2.php"] [unique_id "acF6K1SqceFAZRgPDq6qJAAAAM0"]
[Tue Mar 24 01:36:44.560940 2026] [:error] [pid 56236:tid 56310] [client 74.248.130.207:10776] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/slsqc.php"] [unique_id "acF6LHapFgYp0uZ8twAqXgAAAFE"]
[Tue Mar 24 01:36:45.896895 2026] [:error] [pid 56237:tid 56333] [client 74.248.130.207:12405] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/slsqc.php"] [unique_id "acF6LQymO0MnzQb90MMvzgAAAIw"]
[Tue Mar 24 01:36:47.769616 2026] [:error] [pid 31798:tid 31814] [client 74.248.130.207:11797] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/slsqc.php"] [unique_id "acF6L3dtW_1bksndFbYxrwAAAA4"]
[Tue Mar 24 01:36:49.069026 2026] [:error] [pid 56238:tid 56368] [client 74.248.130.207:9492] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/slsqc.php"] [unique_id "acF6MVSqceFAZRgPDq6qMgAAANQ"]
[Tue Mar 24 01:36:50.687027 2026] [:error] [pid 56238:tid 56353] [client 74.248.130.207:11381] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/spip.php"] [unique_id "acF6MlSqceFAZRgPDq6qOwAAAMU"]
[Tue Mar 24 01:36:52.055810 2026] [:error] [pid 31798:tid 31811] [client 74.248.130.207:9514] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/spip.php"] [unique_id "acF6NHdtW_1bksndFbYxtQAAAAs"]
[Tue Mar 24 01:36:54.283676 2026] [:error] [pid 56435:tid 56505] [client 74.248.130.207:10579] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/spip.php"] [unique_id "acF6Nsrwr-l5A-s9ryCK4gAAAQY"]
[Tue Mar 24 01:36:55.649546 2026] [:error] [pid 56236:tid 56312] [client 74.248.130.207:11068] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/spip.php"] [unique_id "acF6N3apFgYp0uZ8twAqawAAAFM"]
[Tue Mar 24 01:36:58.167912 2026] [:error] [pid 56236:tid 56310] [client 74.248.130.207:9551] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gel4y.php"] [unique_id "acF6OnapFgYp0uZ8twAqbgAAAFE"]
[Tue Mar 24 01:36:59.321996 2026] [:error] [pid 56237:tid 56330] [client 74.248.130.207:27015] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gel4y.php"] [unique_id "acF6OwymO0MnzQb90MMv3AAAAIk"]
[Tue Mar 24 01:37:00.396369 2026] [:error] [pid 56238:tid 56364] [client 74.248.130.207:10590] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gel4y.php"] [unique_id "acF6PFSqceFAZRgPDq6qSQAAANA"]
[Tue Mar 24 01:37:01.247989 2026] [:error] [pid 56435:tid 56500] [client 74.248.130.207:22392] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gel4y.php"] [unique_id "acF6Pcrwr-l5A-s9ryCK8AAAAQE"]
[Tue Mar 24 01:37:02.209686 2026] [:error] [pid 56435:tid 56513] [client 74.248.130.207:14706] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/heh.php"] [unique_id "acF6Psrwr-l5A-s9ryCK8gAAAQw"]
[Tue Mar 24 01:37:03.581457 2026] [:error] [pid 56435:tid 56503] [client 74.248.130.207:10609] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/heh.php"] [unique_id "acF6P8rwr-l5A-s9ryCK-AAAAQQ"]
[Tue Mar 24 01:37:04.499177 2026] [:error] [pid 56435:tid 56523] [client 74.248.130.207:14663] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/heh.php"] [unique_id "acF6QMrwr-l5A-s9ryCK_wAAARY"]
[Tue Mar 24 01:37:05.707169 2026] [:error] [pid 56238:tid 56358] [client 74.248.130.207:10611] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/heh.php"] [unique_id "acF6QVSqceFAZRgPDq6qVwAAAMo"]
[Tue Mar 24 01:37:06.633619 2026] [:error] [pid 31798:tid 31811] [client 74.248.130.207:12397] [client 74.248.130.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "acF6QndtW_1bksndFbYx2QAAAAs"]
[Tue Mar 24 01:37:07.820595 2026] [:error] [pid 31798:tid 31816] [client 74.248.130.207:27660] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-wlx.php"] [unique_id "acF6Q3dtW_1bksndFbYx2gAAABA"]
[Tue Mar 24 01:37:09.584723 2026] [:error] [pid 56238:tid 56370] [client 74.248.130.207:9494] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-wlx.php"] [unique_id "acF6RVSqceFAZRgPDq6qYwAAANY"]
[Tue Mar 24 01:37:12.955060 2026] [:error] [pid 56237:tid 56344] [client 74.248.130.207:14718] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-wlx.php"] [unique_id "acF6SAymO0MnzQb90MMv6QAAAJc"]
[Tue Mar 24 01:37:21.085503 2026] [proxy_fcgi:error] [pid 56435:tid 56500] [client 74.248.130.207:11611] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:38:39.758893 2026] [proxy_fcgi:error] [pid 31798:tid 31816] [client 74.248.130.207:13841] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:38:40.106917 2026] [proxy_fcgi:error] [pid 31798:tid 31818] [client 74.248.130.207:13841] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:38:40.366370 2026] [proxy_fcgi:error] [pid 31798:tid 31815] [client 74.248.130.207:13841] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:38:40.625161 2026] [proxy_fcgi:error] [pid 31798:tid 31802] [client 74.248.130.207:13841] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:38:40.989418 2026] [proxy_fcgi:error] [pid 31798:tid 31822] [client 74.248.130.207:13841] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:38:41.250352 2026] [proxy_fcgi:error] [pid 31798:tid 31807] [client 74.248.130.207:13841] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:38:41.521752 2026] [proxy_fcgi:error] [pid 31798:tid 31800] [client 74.248.130.207:13841] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:38:41.818569 2026] [proxy_fcgi:error] [pid 31798:tid 31823] [client 74.248.130.207:13841] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:38:42.449739 2026] [proxy_fcgi:error] [pid 31798:tid 31817] [client 74.248.130.207:13841] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:38:42.777440 2026] [proxy_fcgi:error] [pid 31798:tid 31821] [client 74.248.130.207:13841] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:38:43.081382 2026] [:error] [pid 31798:tid 31815] [client 74.248.130.207:13841] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x1n.php"] [unique_id "acF6o3dtW_1bksndFbYzNQAAAA8"]
[Tue Mar 24 01:38:44.450049 2026] [:error] [pid 56237:tid 56333] [client 74.248.130.207:16958] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x1n.php"] [unique_id "acF6pAymO0MnzQb90MMwWQAAAIw"]
[Tue Mar 24 01:38:45.941403 2026] [:error] [pid 56435:tid 56518] [client 74.248.130.207:16907] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x1n.php"] [unique_id "acF6pcrwr-l5A-s9ryCLuAAAARE"]
[Tue Mar 24 01:38:46.710875 2026] [:error] [pid 56238:tid 56370] [client 74.248.130.207:21782] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x1n.php"] [unique_id "acF6plSqceFAZRgPDq6rDgAAANY"]
[Tue Mar 24 01:38:50.176463 2026] [:error] [pid 56435:tid 56520] [client 74.248.130.207:13138] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lufi.php"] [unique_id "acF6qsrwr-l5A-s9ryCLxQAAARM"]
[Tue Mar 24 01:38:51.552664 2026] [:error] [pid 56238:tid 56352] [client 74.248.130.207:17676] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lufi.php"] [unique_id "acF6q1SqceFAZRgPDq6rEwAAAMQ"]
[Tue Mar 24 01:38:53.987684 2026] [:error] [pid 56435:tid 56521] [client 74.248.130.207:17690] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lufi.php"] [unique_id "acF6rcrwr-l5A-s9ryCL1QAAARQ"]
[Tue Mar 24 01:38:55.130475 2026] [:error] [pid 56435:tid 56518] [client 74.248.130.207:16763] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lufi.php"] [unique_id "acF6r8rwr-l5A-s9ryCL3AAAARE"]
[Tue Mar 24 01:38:56.867342 2026] [:error] [pid 31798:tid 31811] [client 74.248.130.207:17216] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/goat.php"] [unique_id "acF6sHdtW_1bksndFbYzTgAAAAs"]
[Tue Mar 24 01:38:57.679783 2026] [:error] [pid 56238:tid 56354] [client 74.248.130.207:17487] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/goat.php"] [unique_id "acF6sVSqceFAZRgPDq6rIgAAAMY"]
[Tue Mar 24 01:38:59.928916 2026] [:error] [pid 31798:tid 31809] [client 74.248.130.207:18454] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/goat.php"] [unique_id "acF6s3dtW_1bksndFbYzUQAAAAk"]
[Tue Mar 24 01:39:02.204697 2026] [:error] [pid 56238:tid 56370] [client 74.248.130.207:16680] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/goat.php"] [unique_id "acF6tlSqceFAZRgPDq6rKgAAANY"]
[Tue Mar 24 01:39:03.068289 2026] [:error] [pid 56237:tid 56330] [client 74.248.130.207:17457] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/d12.php"] [unique_id "acF6twymO0MnzQb90MMweAAAAIk"]
[Tue Mar 24 01:39:04.081731 2026] [:error] [pid 31798:tid 31822] [client 74.248.130.207:21802] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/d12.php"] [unique_id "acF6uHdtW_1bksndFbYzYwAAABY"]
[Tue Mar 24 01:39:05.211186 2026] [:error] [pid 56238:tid 56360] [client 74.248.130.207:20250] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/d12.php"] [unique_id "acF6uVSqceFAZRgPDq6rLQAAAMw"]
[Tue Mar 24 01:39:06.195014 2026] [:error] [pid 56236:tid 56310] [client 74.248.130.207:13157] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/d12.php"] [unique_id "acF6unapFgYp0uZ8twAq3AAAAFE"]
[Tue Mar 24 01:39:07.148708 2026] [:error] [pid 56238:tid 56365] [client 74.248.130.207:17968] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ebs.php"] [unique_id "acF6u1SqceFAZRgPDq6rNAAAANE"]
[Tue Mar 24 01:39:09.377715 2026] [:error] [pid 56238:tid 56365] [client 74.248.130.207:17668] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ebs.php"] [unique_id "acF6vVSqceFAZRgPDq6rPQAAANE"]
[Tue Mar 24 01:39:10.776346 2026] [:error] [pid 56237:tid 56336] [client 74.248.130.207:17992] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ebs.php"] [unique_id "acF6vgymO0MnzQb90MMwhAAAAI8"]
[Tue Mar 24 01:39:12.035083 2026] [:error] [pid 56238:tid 56370] [client 74.248.130.207:18017] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ebs.php"] [unique_id "acF6wFSqceFAZRgPDq6rQAAAANY"]
[Tue Mar 24 01:39:13.385482 2026] [:error] [pid 56237:tid 56339] [client 74.248.130.207:21764] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/21ew.php"] [unique_id "acF6wQymO0MnzQb90MMwigAAAJI"]
[Tue Mar 24 01:39:16.265171 2026] [:error] [pid 56435:tid 56499] [client 74.248.130.207:21512] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/21ew.php"] [unique_id "acF6xMrwr-l5A-s9ryCL7gAAAQA"]
[Tue Mar 24 01:39:17.547269 2026] [:error] [pid 31798:tid 31810] [client 74.248.130.207:18041] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/21ew.php"] [unique_id "acF6xXdtW_1bksndFbYzgAAAAAo"]
[Tue Mar 24 01:39:19.829203 2026] [:error] [pid 31798:tid 31811] [client 74.248.130.207:16429] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/21ew.php"] [unique_id "acF6x3dtW_1bksndFbYzgwAAAAs"]
[Tue Mar 24 01:39:21.596507 2026] [:error] [pid 56435:tid 56511] [client 74.248.130.207:19069] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/blnux.php"] [unique_id "acF6ycrwr-l5A-s9ryCMAwAAAQs"]
[Tue Mar 24 01:39:23.084562 2026] [:error] [pid 56236:tid 56312] [client 74.248.130.207:16504] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/blnux.php"] [unique_id "acF6y3apFgYp0uZ8twAq5gAAAFM"]
[Tue Mar 24 01:39:24.307774 2026] [:error] [pid 56435:tid 56508] [client 74.248.130.207:16389] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/blnux.php"] [unique_id "acF6zMrwr-l5A-s9ryCMCQAAAQg"]
[Tue Mar 24 01:39:25.711342 2026] [:error] [pid 56435:tid 56516] [client 74.248.130.207:15452] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/blnux.php"] [unique_id "acF6zcrwr-l5A-s9ryCMDgAAAQ8"]
[Tue Mar 24 01:39:27.028702 2026] [:error] [pid 56237:tid 56329] [client 74.248.130.207:17985] [client 74.248.130.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/certificates/plugins.php"] [unique_id "acF6zwymO0MnzQb90MMwlwAAAIg"]
[Tue Mar 24 01:39:28.561798 2026] [:error] [pid 56435:tid 56514] [client 74.248.130.207:13590] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x1na.php"] [unique_id "acF60Mrwr-l5A-s9ryCMDwAAAQ0"]
[Tue Mar 24 01:39:29.690353 2026] [:error] [pid 56238:tid 56353] [client 74.248.130.207:21822] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x1na.php"] [unique_id "acF60VSqceFAZRgPDq6rTwAAAMU"]
[Tue Mar 24 01:39:31.462716 2026] [:error] [pid 31798:tid 31801] [client 74.248.130.207:8967] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x1na.php"] [unique_id "acF603dtW_1bksndFbYznAAAAAE"]
[Tue Mar 24 01:39:32.615155 2026] [:error] [pid 56435:tid 56522] [client 74.248.130.207:21284] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x1na.php"] [unique_id "acF61Mrwr-l5A-s9ryCMFAAAARU"]
[Tue Mar 24 01:39:33.571059 2026] [:error] [pid 56238:tid 56354] [client 74.248.130.207:21543] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/simple.php"] [unique_id "acF61VSqceFAZRgPDq6rVgAAAMY"]
[Tue Mar 24 01:39:35.500862 2026] [:error] [pid 56435:tid 56505] [client 74.248.130.207:28116] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/simple.php"] [unique_id "acF618rwr-l5A-s9ryCMHAAAAQY"]
[Tue Mar 24 01:39:36.970556 2026] [:error] [pid 31798:tid 31804] [client 74.248.130.207:21548] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/simple.php"] [unique_id "acF62HdtW_1bksndFbYzpwAAAAQ"]
[Tue Mar 24 01:39:38.766017 2026] [:error] [pid 56435:tid 56510] [client 74.248.130.207:28131] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/simple.php"] [unique_id "acF62srwr-l5A-s9ryCMIAAAAQo"]
[Tue Mar 24 01:39:41.000310 2026] [:error] [pid 31798:tid 31801] [client 74.248.130.207:28117] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lite.php"] [unique_id "acF63HdtW_1bksndFbYztwAAAAE"]
[Tue Mar 24 01:39:42.493796 2026] [proxy_fcgi:error] [pid 56238:tid 56349] [client 74.248.130.207:21295] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:39:42.765319 2026] [proxy_fcgi:error] [pid 56238:tid 56351] [client 74.248.130.207:21295] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:39:43.026591 2026] [proxy_fcgi:error] [pid 56238:tid 56369] [client 74.248.130.207:21295] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:39:43.332965 2026] [proxy_fcgi:error] [pid 56238:tid 56355] [client 74.248.130.207:21295] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:39:43.672174 2026] [proxy_fcgi:error] [pid 56238:tid 56352] [client 74.248.130.207:21295] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:39:44.237734 2026] [proxy_fcgi:error] [pid 56238:tid 56361] [client 74.248.130.207:21295] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:39:44.573514 2026] [proxy_fcgi:error] [pid 56238:tid 56364] [client 74.248.130.207:21295] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:39:44.901996 2026] [proxy_fcgi:error] [pid 56238:tid 56365] [client 74.248.130.207:21295] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:39:45.231623 2026] [proxy_fcgi:error] [pid 56238:tid 56372] [client 74.248.130.207:21295] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:39:45.600259 2026] [proxy_fcgi:error] [pid 56238:tid 56366] [client 74.248.130.207:21295] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:39:45.911203 2026] [:error] [pid 56238:tid 56367] [client 74.248.130.207:21295] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/w.php"] [unique_id "acF64VSqceFAZRgPDq6rbwAAANM"]
[Tue Mar 24 01:39:46.586513 2026] [:error] [pid 56238:tid 56356] [client 74.248.130.207:28149] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/w.php"] [unique_id "acF64lSqceFAZRgPDq6rcgAAAMg"]
[Tue Mar 24 01:39:47.698144 2026] [:error] [pid 56236:tid 56309] [client 74.248.130.207:15451] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/w.php"] [unique_id "acF643apFgYp0uZ8twAq9AAAAFA"]
[Tue Mar 24 01:39:49.058303 2026] [:error] [pid 56435:tid 56510] [client 74.248.130.207:13616] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/w.php"] [unique_id "acF65crwr-l5A-s9ryCMOAAAAQo"]
[Tue Mar 24 01:39:50.190544 2026] [:error] [pid 31798:tid 31800] [client 74.248.130.207:21308] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xl2023.php"] [unique_id "acF65ndtW_1bksndFbYzwgAAAAA"]
[Tue Mar 24 01:39:51.962056 2026] [:error] [pid 56237:tid 56332] [client 74.248.130.207:7183] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xl2023.php"] [unique_id "acF65wymO0MnzQb90MMwsQAAAIs"]
[Tue Mar 24 01:39:53.779955 2026] [:error] [pid 56237:tid 56337] [client 74.248.130.207:28174] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xl2023.php"] [unique_id "acF66QymO0MnzQb90MMwtgAAAJA"]
[Tue Mar 24 01:39:57.407039 2026] [:error] [pid 31798:tid 31807] [client 74.248.130.207:7174] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xl2023.php"] [unique_id "acF67XdtW_1bksndFbYzzAAAAAc"]
[Tue Mar 24 01:40:02.715149 2026] [:error] [pid 56238:tid 56366] [client 74.248.130.207:21507] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wpupex.php"] [unique_id "acF68lSqceFAZRgPDq6rhQAAANI"]
[Tue Mar 24 01:40:04.308688 2026] [:error] [pid 31798:tid 31821] [client 74.248.130.207:28429] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wpupex.php"] [unique_id "acF69HdtW_1bksndFbYz5QAAABU"]
[Tue Mar 24 01:40:05.563012 2026] [:error] [pid 31798:tid 31816] [client 74.248.130.207:19221] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wpupex.php"] [unique_id "acF69XdtW_1bksndFbYz6wAAABA"]
[Tue Mar 24 01:40:06.855756 2026] [:error] [pid 56435:tid 56519] [client 74.248.130.207:15485] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wpupex.php"] [unique_id "acF69srwr-l5A-s9ryCMQgAAARI"]
[Tue Mar 24 01:40:11.097383 2026] [:error] [pid 31798:tid 31820] [client 74.248.130.207:28120] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mhpglaje.php"] [unique_id "acF6-3dtW_1bksndFbYz-QAAABQ"]
[Tue Mar 24 01:40:13.122303 2026] [:error] [pid 56236:tid 56309] [client 74.248.130.207:28613] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mhpglaje.php"] [unique_id "acF6_XapFgYp0uZ8twArCAAAAFA"]
[Tue Mar 24 01:40:14.699670 2026] [:error] [pid 56435:tid 56509] [client 74.248.130.207:28690] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mhpglaje.php"] [unique_id "acF6_srwr-l5A-s9ryCMUwAAAQk"]
[Tue Mar 24 01:40:16.789546 2026] [:error] [pid 56435:tid 56514] [client 74.248.130.207:28671] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mhpglaje.php"] [unique_id "acF7AMrwr-l5A-s9ryCMWwAAAQ0"]
[Tue Mar 24 01:40:17.986661 2026] [:error] [pid 56238:tid 56368] [client 74.248.130.207:28392] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bnn_.php"] [unique_id "acF7AVSqceFAZRgPDq6rlwAAANQ"]
[Tue Mar 24 01:40:20.752208 2026] [:error] [pid 56237:tid 56331] [client 74.248.130.207:21021] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bnn_.php"] [unique_id "acF7BAymO0MnzQb90MMwywAAAIo"]
[Tue Mar 24 01:40:22.305825 2026] [:error] [pid 56237:tid 56322] [client 74.248.130.207:28143] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bnn_.php"] [unique_id "acF7BgymO0MnzQb90MMwzgAAAIE"]
[Tue Mar 24 01:40:23.299103 2026] [:error] [pid 56236:tid 56313] [client 74.248.130.207:28147] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bnn_.php"] [unique_id "acF7B3apFgYp0uZ8twArDgAAAFQ"]
[Tue Mar 24 01:40:24.727901 2026] [:error] [pid 56237:tid 56344] [client 74.248.130.207:28371] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ch.php"] [unique_id "acF7CAymO0MnzQb90MMw1QAAAJc"]
[Tue Mar 24 01:40:26.858420 2026] [:error] [pid 56237:tid 56345] [client 74.248.130.207:1826] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ch.php"] [unique_id "acF7CgymO0MnzQb90MMw1wAAAJg"]
[Tue Mar 24 01:40:27.842296 2026] [:error] [pid 56236:tid 56298] [client 74.248.130.207:15468] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ch.php"] [unique_id "acF7C3apFgYp0uZ8twArFQAAAEU"]
[Tue Mar 24 01:40:29.773021 2026] [:error] [pid 31798:tid 31802] [client 74.248.130.207:28735] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ch.php"] [unique_id "acF7DXdtW_1bksndFbY0BgAAAAI"]
[Tue Mar 24 01:40:30.485866 2026] [:error] [pid 56237:tid 56337] [client 74.248.130.207:13617] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/133.php"] [unique_id "acF7DgymO0MnzQb90MMw3AAAAJA"]
[Tue Mar 24 01:40:31.420128 2026] [:error] [pid 56435:tid 56500] [client 74.248.130.207:19242] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/133.php"] [unique_id "acF7D8rwr-l5A-s9ryCMcgAAAQE"]
[Tue Mar 24 01:40:32.629835 2026] [:error] [pid 56435:tid 56522] [client 74.248.130.207:19503] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/133.php"] [unique_id "acF7EMrwr-l5A-s9ryCMegAAARU"]
[Tue Mar 24 01:40:34.869000 2026] [:error] [pid 31798:tid 31812] [client 74.248.130.207:24008] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/133.php"] [unique_id "acF7EndtW_1bksndFbY0EwAAAAw"]
[Tue Mar 24 01:40:36.413755 2026] [:error] [pid 56238:tid 56363] [client 74.248.130.207:11183] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin.php"] [unique_id "acF7FFSqceFAZRgPDq6rtgAAAM8"]
[Tue Mar 24 01:40:37.696920 2026] [:error] [pid 56238:tid 56366] [client 74.248.130.207:1644] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin.php"] [unique_id "acF7FVSqceFAZRgPDq6rvAAAANI"]
[Tue Mar 24 01:40:41.284726 2026] [:error] [pid 56435:tid 56511] [client 74.248.130.207:1619] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin.php"] [unique_id "acF7Gcrwr-l5A-s9ryCMgAAAAQs"]
[Tue Mar 24 01:40:43.814127 2026] [:error] [pid 56435:tid 56521] [client 74.248.130.207:1846] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin.php"] [unique_id "acF7G8rwr-l5A-s9ryCMhgAAARQ"]
[Tue Mar 24 01:41:17.587978 2026] [proxy_fcgi:error] [pid 56435:tid 56521] [client 74.248.130.207:7914] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:41:17.848151 2026] [proxy_fcgi:error] [pid 56435:tid 56513] [client 74.248.130.207:7914] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:41:19.465510 2026] [proxy_fcgi:error] [pid 56435:tid 56522] [client 74.248.130.207:7914] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:41:19.867533 2026] [proxy_fcgi:error] [pid 56435:tid 56505] [client 74.248.130.207:7914] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:41:20.141410 2026] [proxy_fcgi:error] [pid 56435:tid 56514] [client 74.248.130.207:7914] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:41:20.429398 2026] [proxy_fcgi:error] [pid 56435:tid 56503] [client 74.248.130.207:7914] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:41:20.689679 2026] [proxy_fcgi:error] [pid 56435:tid 56525] [client 74.248.130.207:7914] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:41:20.949451 2026] [proxy_fcgi:error] [pid 56435:tid 56509] [client 74.248.130.207:7914] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:41:21.225246 2026] [proxy_fcgi:error] [pid 56435:tid 56517] [client 74.248.130.207:7914] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:41:21.615615 2026] [proxy_fcgi:error] [pid 56435:tid 56520] [client 74.248.130.207:7914] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:41:21.876516 2026] [proxy_fcgi:error] [pid 56435:tid 56523] [client 74.248.130.207:7914] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:41:22.201569 2026] [:error] [pid 56435:tid 56524] [client 74.248.130.207:7914] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/56c53.php"] [unique_id "acF7Qsrwr-l5A-s9ryCM0gAAARc"]
[Tue Mar 24 01:41:23.750485 2026] [:error] [pid 56435:tid 56501] [client 74.248.130.207:1082] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/56c53.php"] [unique_id "acF7Q8rwr-l5A-s9ryCM1gAAAQI"]
[Tue Mar 24 01:41:24.990760 2026] [:error] [pid 56238:tid 56350] [client 74.248.130.207:22601] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/56c53.php"] [unique_id "acF7RFSqceFAZRgPDq6r7wAAAMI"]
[Tue Mar 24 01:41:25.996549 2026] [:error] [pid 56435:tid 56500] [client 74.248.130.207:8214] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/56c53.php"] [unique_id "acF7Rcrwr-l5A-s9ryCM5AAAAQE"]
[Tue Mar 24 01:41:26.974600 2026] [:error] [pid 56238:tid 56352] [client 74.248.130.207:22314] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tron.php"] [unique_id "acF7RlSqceFAZRgPDq6r8gAAAMQ"]
[Tue Mar 24 01:41:27.948073 2026] [:error] [pid 56237:tid 56345] [client 74.248.130.207:7617] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tron.php"] [unique_id "acF7RwymO0MnzQb90MMxEQAAAJg"]
[Tue Mar 24 01:41:29.113927 2026] [:error] [pid 56238:tid 56350] [client 74.248.130.207:1458] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tron.php"] [unique_id "acF7SVSqceFAZRgPDq6r-wAAAMI"]
[Tue Mar 24 01:41:31.172211 2026] [:error] [pid 56237:tid 56331] [client 74.248.130.207:7643] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tron.php"] [unique_id "acF7SwymO0MnzQb90MMxGgAAAIo"]
[Tue Mar 24 01:41:32.394406 2026] [:error] [pid 31798:tid 31824] [client 74.248.130.207:1472] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lts.php"] [unique_id "acF7THdtW_1bksndFbY0ZwAAABg"]
[Tue Mar 24 01:41:33.269742 2026] [:error] [pid 31798:tid 31809] [client 74.248.130.207:1500] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lts.php"] [unique_id "acF7TXdtW_1bksndFbY0awAAAAk"]
[Tue Mar 24 01:41:34.314304 2026] [:error] [pid 31798:tid 31810] [client 74.248.130.207:22628] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lts.php"] [unique_id "acF7TndtW_1bksndFbY0bgAAAAo"]
[Tue Mar 24 01:41:35.442822 2026] [:error] [pid 31798:tid 31811] [client 74.248.130.207:7248] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lts.php"] [unique_id "acF7T3dtW_1bksndFbY0dQAAAAs"]
[Tue Mar 24 01:41:36.798829 2026] [:error] [pid 31798:tid 31821] [client 74.248.130.207:22335] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ba/wpup.php"] [unique_id "acF7UHdtW_1bksndFbY0egAAABU"]
[Tue Mar 24 01:41:39.699198 2026] [:error] [pid 56435:tid 56500] [client 74.248.130.207:1517] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ba/wpup.php"] [unique_id "acF7U8rwr-l5A-s9ryCM8wAAAQE"]
[Tue Mar 24 01:41:42.133131 2026] [:error] [pid 56435:tid 56520] [client 74.248.130.207:21089] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ba/wpup.php"] [unique_id "acF7Vsrwr-l5A-s9ryCM-gAAARM"]
[Tue Mar 24 01:41:43.299094 2026] [:error] [pid 56238:tid 56370] [client 74.248.130.207:29412] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ba/wpup.php"] [unique_id "acF7V1SqceFAZRgPDq6sGwAAANY"]
[Tue Mar 24 01:41:44.359307 2026] [:error] [pid 56238:tid 56348] [client 74.248.130.207:7982] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ini.php"] [unique_id "acF7WFSqceFAZRgPDq6sHwAAAMA"]
[Tue Mar 24 01:41:45.387335 2026] [:error] [pid 56435:tid 56522] [client 74.248.130.207:24858] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ini.php"] [unique_id "acF7Wcrwr-l5A-s9ryCNBgAAARU"]
[Tue Mar 24 01:41:47.799361 2026] [:error] [pid 56237:tid 56345] [client 74.248.130.207:7649] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ini.php"] [unique_id "acF7WwymO0MnzQb90MMxLAAAAJg"]
[Tue Mar 24 01:41:49.403136 2026] [:error] [pid 56435:tid 56509] [client 74.248.130.207:1914] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ini.php"] [unique_id "acF7Xcrwr-l5A-s9ryCNFQAAAQk"]
[Tue Mar 24 01:41:50.595717 2026] [:error] [pid 56237:tid 56321] [client 74.248.130.207:29202] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ruzus.php"] [unique_id "acF7XgymO0MnzQb90MMxMwAAAIA"]
[Tue Mar 24 01:41:53.662163 2026] [:error] [pid 56238:tid 56356] [client 74.248.130.207:29241] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ruzus.php"] [unique_id "acF7YVSqceFAZRgPDq6sIgAAAMg"]
[Tue Mar 24 01:41:54.358503 2026] [:error] [pid 56237:tid 56339] [client 74.248.130.207:21570] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ruzus.php"] [unique_id "acF7YgymO0MnzQb90MMxQQAAAJI"]
[Tue Mar 24 01:41:55.561513 2026] [:error] [pid 56238:tid 56362] [client 74.248.130.207:7590] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ruzus.php"] [unique_id "acF7Y1SqceFAZRgPDq6sJQAAAM4"]
[Tue Mar 24 01:41:56.760902 2026] [:error] [pid 56238:tid 56349] [client 74.248.130.207:23146] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/13.php"] [unique_id "acF7ZFSqceFAZRgPDq6sJgAAAME"]
[Tue Mar 24 01:41:58.694020 2026] [:error] [pid 56238:tid 56348] [client 74.248.130.207:23106] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/13.php"] [unique_id "acF7ZlSqceFAZRgPDq6sJwAAAMA"]
[Tue Mar 24 01:41:59.878993 2026] [:error] [pid 31798:tid 31823] [client 74.248.130.207:1905] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/13.php"] [unique_id "acF7Z3dtW_1bksndFbY0lAAAABc"]
[Tue Mar 24 01:42:01.082612 2026] [:error] [pid 31798:tid 31806] [client 74.248.130.207:21083] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/13.php"] [unique_id "acF7aXdtW_1bksndFbY0pAAAAAY"]
[Tue Mar 24 01:42:02.486622 2026] [:error] [pid 56435:tid 56525] [client 74.248.130.207:7521] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xcre1.php"] [unique_id "acF7asrwr-l5A-s9ryCNKQAAARg"]
[Tue Mar 24 01:42:04.047843 2026] [:error] [pid 31798:tid 31813] [client 74.248.130.207:22560] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xcre1.php"] [unique_id "acF7bHdtW_1bksndFbY0rQAAAA0"]
[Tue Mar 24 01:42:05.222566 2026] [:error] [pid 56238:tid 56369] [client 74.248.130.207:23110] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xcre1.php"] [unique_id "acF7bVSqceFAZRgPDq6sMAAAANU"]
[Tue Mar 24 01:42:07.030783 2026] [:error] [pid 31798:tid 31800] [client 74.248.130.207:7517] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xcre1.php"] [unique_id "acF7b3dtW_1bksndFbY0twAAAAA"]
[Tue Mar 24 01:42:08.017241 2026] [:error] [pid 31798:tid 31809] [client 74.248.130.207:23828] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-login.php"] [unique_id "acF7cHdtW_1bksndFbY0vQAAAAk"]
[Tue Mar 24 01:42:09.273144 2026] [:error] [pid 56435:tid 56504] [client 74.248.130.207:21099] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-login.php"] [unique_id "acF7ccrwr-l5A-s9ryCNOAAAAQU"]
[Tue Mar 24 01:42:11.483880 2026] [:error] [pid 31798:tid 31804] [client 74.248.130.207:7366] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-login.php"] [unique_id "acF7c3dtW_1bksndFbY0xAAAAAQ"]
[Tue Mar 24 01:42:12.318286 2026] [:error] [pid 31798:tid 31817] [client 74.248.130.207:1237] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-login.php"] [unique_id "acF7dHdtW_1bksndFbY0ygAAABE"]
[Tue Mar 24 01:42:13.293134 2026] [:error] [pid 56238:tid 56370] [client 74.248.130.207:23838] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hello.php"] [unique_id "acF7dVSqceFAZRgPDq6sPgAAANY"]
[Tue Mar 24 01:42:14.080397 2026] [:error] [pid 56238:tid 56348] [client 74.248.130.207:29652] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hello.php"] [unique_id "acF7dlSqceFAZRgPDq6sQgAAAMA"]
[Tue Mar 24 01:42:15.395547 2026] [:error] [pid 56435:tid 56516] [client 74.248.130.207:29419] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hello.php"] [unique_id "acF7d8rwr-l5A-s9ryCNSQAAAQ8"]
[Tue Mar 24 01:42:16.097062 2026] [:error] [pid 56435:tid 56519] [client 74.248.130.207:7360] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hello.php"] [unique_id "acF7eMrwr-l5A-s9ryCNTAAAARI"]
[Tue Mar 24 01:42:17.124575 2026] [:error] [pid 31798:tid 31806] [client 74.248.130.207:21338] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zoz.php"] [unique_id "acF7eXdtW_1bksndFbY02gAAAAY"]
[Tue Mar 24 01:42:18.132641 2026] [:error] [pid 56238:tid 56348] [client 74.248.130.207:21108] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zoz.php"] [unique_id "acF7elSqceFAZRgPDq6sTQAAAMA"]
[Tue Mar 24 01:42:19.244973 2026] [:error] [pid 31798:tid 31812] [client 74.248.130.207:22528] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zoz.php"] [unique_id "acF7e3dtW_1bksndFbY05QAAAAw"]
[Tue Mar 24 01:42:20.456188 2026] [:error] [pid 31798:tid 31818] [client 74.248.130.207:29704] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zoz.php"] [unique_id "acF7fHdtW_1bksndFbY07gAAABI"]
[Tue Mar 24 01:42:21.955534 2026] [:error] [pid 56236:tid 56304] [client 74.248.130.207:21360] [client 74.248.130.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "acF7fXapFgYp0uZ8twAraAAAAEs"]
[Tue Mar 24 01:42:23.055713 2026] [proxy_fcgi:error] [pid 56238:tid 56369] [client 74.248.130.207:29402] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:42:23.378531 2026] [proxy_fcgi:error] [pid 56238:tid 56365] [client 74.248.130.207:29402] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:42:23.637460 2026] [proxy_fcgi:error] [pid 56238:tid 56352] [client 74.248.130.207:29402] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:42:23.986712 2026] [proxy_fcgi:error] [pid 56238:tid 56367] [client 74.248.130.207:29402] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:42:24.250295 2026] [proxy_fcgi:error] [pid 56238:tid 56355] [client 74.248.130.207:29402] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:42:24.600222 2026] [proxy_fcgi:error] [pid 56238:tid 56361] [client 74.248.130.207:29402] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:42:24.858747 2026] [proxy_fcgi:error] [pid 56238:tid 56370] [client 74.248.130.207:29402] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:42:25.555951 2026] [proxy_fcgi:error] [pid 56238:tid 56356] [client 74.248.130.207:29402] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:42:25.815838 2026] [proxy_fcgi:error] [pid 56238:tid 56353] [client 74.248.130.207:29402] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:42:26.097008 2026] [proxy_fcgi:error] [pid 56238:tid 56364] [client 74.248.130.207:29402] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:42:26.364306 2026] [:error] [pid 56238:tid 56359] [client 74.248.130.207:29402] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/okxh.php"] [unique_id "acF7glSqceFAZRgPDq6sXQAAAMs"]
[Tue Mar 24 01:42:27.253334 2026] [:error] [pid 56435:tid 56502] [client 74.248.130.207:29434] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/okxh.php"] [unique_id "acF7g8rwr-l5A-s9ryCNYgAAAQM"]
[Tue Mar 24 01:42:28.786421 2026] [:error] [pid 56435:tid 56501] [client 74.248.130.207:23104] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/okxh.php"] [unique_id "acF7hMrwr-l5A-s9ryCNZwAAAQI"]
[Tue Mar 24 01:42:30.148116 2026] [:error] [pid 56236:tid 56315] [client 74.248.130.207:1909] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/okxh.php"] [unique_id "acF7hnapFgYp0uZ8twArbwAAAFY"]
[Tue Mar 24 01:42:31.823007 2026] [:error] [pid 56236:tid 56317] [client 74.248.130.207:29669] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/9v6.php"] [unique_id "acF7h3apFgYp0uZ8twAreQAAAFg"]
[Tue Mar 24 01:42:35.278188 2026] [:error] [pid 31798:tid 31819] [client 74.248.130.207:22579] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/9v6.php"] [unique_id "acF7i3dtW_1bksndFbY1DwAAABM"]
[Tue Mar 24 01:42:36.380293 2026] [:error] [pid 56238:tid 56361] [client 74.248.130.207:23815] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/9v6.php"] [unique_id "acF7jFSqceFAZRgPDq6sZwAAAM0"]
[Tue Mar 24 01:42:38.118001 2026] [:error] [pid 31798:tid 31816] [client 74.248.130.207:7418] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/9v6.php"] [unique_id "acF7jndtW_1bksndFbY1GwAAABA"]
[Tue Mar 24 01:42:39.582005 2026] [:error] [pid 56237:tid 56335] [client 74.248.130.207:11204] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/elp.php"] [unique_id "acF7jwymO0MnzQb90MMxXQAAAI4"]
[Tue Mar 24 01:42:41.491752 2026] [:error] [pid 56238:tid 56350] [client 74.248.130.207:22554] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/elp.php"] [unique_id "acF7kVSqceFAZRgPDq6sbwAAAMI"]
[Tue Mar 24 01:42:43.516281 2026] [:error] [pid 56435:tid 56508] [client 74.248.130.207:29653] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/elp.php"] [unique_id "acF7k8rwr-l5A-s9ryCNdQAAAQg"]
[Tue Mar 24 01:42:44.710422 2026] [:error] [pid 31798:tid 31816] [client 74.248.130.207:1253] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/elp.php"] [unique_id "acF7lHdtW_1bksndFbY1NAAAABA"]
[Tue Mar 24 01:42:45.786621 2026] [:error] [pid 31798:tid 31812] [client 74.248.130.207:7343] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/waq.php"] [unique_id "acF7lXdtW_1bksndFbY1OgAAAAw"]
[Tue Mar 24 01:42:46.993794 2026] [:error] [pid 56435:tid 56507] [client 74.248.130.207:9749] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/waq.php"] [unique_id "acF7lsrwr-l5A-s9ryCNfQAAAQc"]
[Tue Mar 24 01:42:51.583728 2026] [:error] [pid 56238:tid 56352] [client 74.248.130.207:7385] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/waq.php"] [unique_id "acF7m1SqceFAZRgPDq6sewAAAMQ"]
[Tue Mar 24 01:42:53.727570 2026] [:error] [pid 56236:tid 56294] [client 74.248.130.207:7323] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/waq.php"] [unique_id "acF7nXapFgYp0uZ8twAriQAAAEE"]
[Tue Mar 24 01:42:55.715991 2026] [:error] [pid 56236:tid 56297] [client 74.248.130.207:29394] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/weblinks.php"] [unique_id "acF7n3apFgYp0uZ8twArjQAAAEQ"]
[Tue Mar 24 01:42:57.128413 2026] [:error] [pid 56238:tid 56359] [client 74.248.130.207:29980] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/weblinks.php"] [unique_id "acF7oVSqceFAZRgPDq6sfwAAAMs"]
[Tue Mar 24 01:42:58.672281 2026] [:error] [pid 56236:tid 56302] [client 74.248.130.207:21334] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/weblinks.php"] [unique_id "acF7onapFgYp0uZ8twArlAAAAEk"]
[Tue Mar 24 01:42:59.542188 2026] [:error] [pid 56238:tid 56366] [client 74.248.130.207:9736] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/weblinks.php"] [unique_id "acF7o1SqceFAZRgPDq6sgAAAANI"]
[Tue Mar 24 01:43:01.180509 2026] [:error] [pid 31798:tid 31824] [client 74.248.130.207:29501] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/h4xor.php"] [unique_id "acF7pXdtW_1bksndFbY1SQAAABg"]
[Tue Mar 24 01:43:02.179393 2026] [:error] [pid 56237:tid 56339] [client 74.248.130.207:7380] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/h4xor.php"] [unique_id "acF7pgymO0MnzQb90MMxegAAAJI"]
[Tue Mar 24 01:43:03.087079 2026] [:error] [pid 31798:tid 31802] [client 74.248.130.207:7690] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/h4xor.php"] [unique_id "acF7p3dtW_1bksndFbY1VAAAAAI"]
[Tue Mar 24 01:43:04.968468 2026] [:error] [pid 56236:tid 56315] [client 74.248.130.207:7693] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/h4xor.php"] [unique_id "acF7qHapFgYp0uZ8twArmwAAAFY"]
[Tue Mar 24 01:43:06.417838 2026] [:error] [pid 56435:tid 56510] [client 74.248.130.207:12045] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ww3.php"] [unique_id "acF7qsrwr-l5A-s9ryCNsQAAAQo"]
[Tue Mar 24 01:43:08.595552 2026] [:error] [pid 56238:tid 56352] [client 74.248.130.207:29736] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ww3.php"] [unique_id "acF7rFSqceFAZRgPDq6skwAAAMQ"]
[Tue Mar 24 01:43:09.629580 2026] [:error] [pid 31798:tid 31807] [client 74.248.130.207:7742] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ww3.php"] [unique_id "acF7rXdtW_1bksndFbY1WAAAAAc"]
[Tue Mar 24 01:43:10.656021 2026] [:error] [pid 56238:tid 56348] [client 74.248.130.207:21629] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ww3.php"] [unique_id "acF7rlSqceFAZRgPDq6smQAAAMA"]
[Tue Mar 24 01:43:12.638636 2026] [:error] [pid 56435:tid 56525] [client 74.248.130.207:29407] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "acF7sMrwr-l5A-s9ryCNywAAARg"]
[Tue Mar 24 01:43:15.401907 2026] [:error] [pid 31798:tid 31813] [client 74.248.130.207:29976] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "acF7s3dtW_1bksndFbY1bgAAAA0"]
[Tue Mar 24 01:43:16.154220 2026] [:error] [pid 56435:tid 56514] [client 74.248.130.207:29751] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "acF7tMrwr-l5A-s9ryCN1AAAAQ0"]
[Tue Mar 24 01:43:21.086565 2026] [:error] [pid 31798:tid 31803] [client 74.248.130.207:23107] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "acF7uXdtW_1bksndFbY1gwAAAAM"]
[Tue Mar 24 01:43:40.546397 2026] [proxy_fcgi:error] [pid 56435:tid 56513] [client 74.248.130.207:12049] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:43:40.808659 2026] [proxy_fcgi:error] [pid 56435:tid 56514] [client 74.248.130.207:12049] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:43:41.109850 2026] [proxy_fcgi:error] [pid 56435:tid 56499] [client 74.248.130.207:12049] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:43:41.462705 2026] [proxy_fcgi:error] [pid 56435:tid 56517] [client 74.248.130.207:12049] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:43:42.069144 2026] [proxy_fcgi:error] [pid 56435:tid 56524] [client 74.248.130.207:12049] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:43:42.366086 2026] [proxy_fcgi:error] [pid 56435:tid 56522] [client 74.248.130.207:12049] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:43:42.626591 2026] [proxy_fcgi:error] [pid 56435:tid 56507] [client 74.248.130.207:12049] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:43:42.939174 2026] [proxy_fcgi:error] [pid 56435:tid 56505] [client 74.248.130.207:12049] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:43:43.202061 2026] [proxy_fcgi:error] [pid 56435:tid 56513] [client 74.248.130.207:12049] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:43:44.234916 2026] [proxy_fcgi:error] [pid 56435:tid 56513] [client 74.248.130.207:12049] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:43:44.617895 2026] [proxy_fcgi:error] [pid 56435:tid 56509] [client 74.248.130.207:12049] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:43:45.126041 2026] [:error] [pid 56435:tid 56523] [client 74.248.130.207:12049] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "acF70crwr-l5A-s9ryCOBwAAARY"]
[Tue Mar 24 01:43:45.971491 2026] [:error] [pid 56237:tid 56332] [client 74.248.130.207:12053] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "acF70QymO0MnzQb90MMxwAAAAIs"]
[Tue Mar 24 01:43:47.168954 2026] [:error] [pid 31798:tid 31822] [client 74.248.130.207:1928] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "acF703dtW_1bksndFbY14AAAABY"]
[Tue Mar 24 01:43:48.341638 2026] [:error] [pid 56237:tid 56341] [client 74.248.130.207:1951] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "acF71AymO0MnzQb90MMxxQAAAJQ"]
[Tue Mar 24 01:43:49.742298 2026] [:error] [pid 31798:tid 31814] [client 74.248.130.207:29726] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zeu.php"] [unique_id "acF71XdtW_1bksndFbY15AAAAA4"]
[Tue Mar 24 01:43:51.023092 2026] [:error] [pid 56435:tid 56511] [client 74.248.130.207:30211] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zeu.php"] [unique_id "acF718rwr-l5A-s9ryCOEAAAAQs"]
[Tue Mar 24 01:43:52.070618 2026] [:error] [pid 56237:tid 56335] [client 74.248.130.207:24793] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zeu.php"] [unique_id "acF72AymO0MnzQb90MMxyAAAAI4"]
[Tue Mar 24 01:43:52.850756 2026] [:error] [pid 56435:tid 56517] [client 74.248.130.207:30270] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zeu.php"] [unique_id "acF72Mrwr-l5A-s9ryCOFgAAARA"]
[Tue Mar 24 01:43:53.980017 2026] [:error] [pid 56238:tid 56356] [client 74.248.130.207:1943] [client 74.248.130.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "acF72VSqceFAZRgPDq6srwAAAMg"]
[Tue Mar 24 01:43:56.113667 2026] [:error] [pid 56236:tid 56302] [client 74.248.130.207:29922] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/radio.php"] [unique_id "acF73HapFgYp0uZ8twAruAAAAEk"]
[Tue Mar 24 01:43:57.100776 2026] [:error] [pid 56435:tid 56515] [client 74.248.130.207:30407] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/radio.php"] [unique_id "acF73crwr-l5A-s9ryCOGwAAAQ4"]
[Tue Mar 24 01:43:58.316086 2026] [:error] [pid 56435:tid 56523] [client 74.248.130.207:1939] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/radio.php"] [unique_id "acF73srwr-l5A-s9ryCOIQAAARY"]
[Tue Mar 24 01:43:59.320108 2026] [:error] [pid 31798:tid 31802] [client 74.248.130.207:24823] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/radio.php"] [unique_id "acF733dtW_1bksndFbY18gAAAAI"]
[Tue Mar 24 01:44:00.899767 2026] [:error] [pid 31798:tid 31805] [client 74.248.130.207:10303] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/pu8.php"] [unique_id "acF74HdtW_1bksndFbY1-AAAAAU"]
[Tue Mar 24 01:44:01.788721 2026] [:error] [pid 56435:tid 56522] [client 74.248.130.207:12090] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/pu8.php"] [unique_id "acF74crwr-l5A-s9ryCOKgAAARU"]
[Tue Mar 24 01:44:03.313417 2026] [:error] [pid 31798:tid 31823] [client 74.248.130.207:29895] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/pu8.php"] [unique_id "acF743dtW_1bksndFbY1-wAAABc"]
[Tue Mar 24 01:44:04.699789 2026] [:error] [pid 31798:tid 31820] [client 74.248.130.207:12896] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/pu8.php"] [unique_id "acF75HdtW_1bksndFbY1_QAAABQ"]
[Tue Mar 24 01:44:05.898049 2026] [:error] [pid 56238:tid 56359] [client 74.248.130.207:1327] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/inghl.php"] [unique_id "acF75VSqceFAZRgPDq6swgAAAMs"]
[Tue Mar 24 01:44:08.551223 2026] [:error] [pid 31798:tid 31804] [client 74.248.130.207:30158] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/inghl.php"] [unique_id "acF76HdtW_1bksndFbY2AAAAAAQ"]
[Tue Mar 24 01:44:09.812627 2026] [:error] [pid 31798:tid 31811] [client 74.248.130.207:10896] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/inghl.php"] [unique_id "acF76XdtW_1bksndFbY2CAAAAAs"]
[Tue Mar 24 01:44:11.030642 2026] [:error] [pid 56237:tid 56344] [client 74.248.130.207:15207] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/inghl.php"] [unique_id "acF76wymO0MnzQb90MMx0wAAAJc"]
[Tue Mar 24 01:44:11.696753 2026] [:error] [pid 31798:tid 31822] [client 74.248.130.207:30515] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ssd.php"] [unique_id "acF763dtW_1bksndFbY2DQAAABY"]
[Tue Mar 24 01:44:13.081916 2026] [:error] [pid 31798:tid 31806] [client 74.248.130.207:29967] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ssd.php"] [unique_id "acF77XdtW_1bksndFbY2DwAAAAY"]
[Tue Mar 24 01:44:14.555072 2026] [:error] [pid 56237:tid 56329] [client 74.248.130.207:10269] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ssd.php"] [unique_id "acF77gymO0MnzQb90MMx2QAAAIg"]
[Tue Mar 24 01:44:16.056949 2026] [:error] [pid 31798:tid 31801] [client 74.248.130.207:10287] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ssd.php"] [unique_id "acF78HdtW_1bksndFbY2GgAAAAE"]
[Tue Mar 24 01:44:17.536571 2026] [:error] [pid 31798:tid 31819] [client 74.248.130.207:24610] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zc-729.php"] [unique_id "acF78XdtW_1bksndFbY2IAAAABM"]
[Tue Mar 24 01:44:18.638064 2026] [:error] [pid 56237:tid 56343] [client 74.248.130.207:1289] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zc-729.php"] [unique_id "acF78gymO0MnzQb90MMx3gAAAJY"]
[Tue Mar 24 01:44:19.957360 2026] [:error] [pid 31798:tid 31819] [client 74.248.130.207:29660] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zc-729.php"] [unique_id "acF783dtW_1bksndFbY2LAAAABM"]
[Tue Mar 24 01:44:20.807897 2026] [:error] [pid 31798:tid 31814] [client 74.248.130.207:30439] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zc-729.php"] [unique_id "acF79HdtW_1bksndFbY2MQAAAA4"]
[Tue Mar 24 01:44:24.360664 2026] [:error] [pid 56238:tid 56350] [client 74.248.130.207:30707] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/small.php"] [unique_id "acF7-FSqceFAZRgPDq6s1QAAAMI"]
[Tue Mar 24 01:44:25.956822 2026] [:error] [pid 56238:tid 56354] [client 74.248.130.207:30512] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/small.php"] [unique_id "acF7-VSqceFAZRgPDq6s2QAAAMY"]
[Tue Mar 24 01:44:28.613374 2026] [:error] [pid 56236:tid 56308] [client 74.248.130.207:17214] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/small.php"] [unique_id "acF7_HapFgYp0uZ8twArywAAAE8"]
[Tue Mar 24 01:44:30.154712 2026] [:error] [pid 56237:tid 56336] [client 74.248.130.207:12875] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/small.php"] [unique_id "acF7_gymO0MnzQb90MMx5wAAAI8"]
[Tue Mar 24 01:44:31.302039 2026] [:error] [pid 56435:tid 56515] [client 74.248.130.207:9139] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/png.php"] [unique_id "acF7_8rwr-l5A-s9ryCOZwAAAQ4"]
[Tue Mar 24 01:44:32.387802 2026] [:error] [pid 31798:tid 31815] [client 74.248.130.207:9564] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/png.php"] [unique_id "acF8AHdtW_1bksndFbY2UgAAAA8"]
[Tue Mar 24 01:44:33.135125 2026] [:error] [pid 56238:tid 56372] [client 74.248.130.207:9209] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/png.php"] [unique_id "acF8AVSqceFAZRgPDq6s6gAAANg"]
[Tue Mar 24 01:44:34.235983 2026] [:error] [pid 56238:tid 56361] [client 74.248.130.207:26994] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/png.php"] [unique_id "acF8AlSqceFAZRgPDq6s7gAAAM0"]
[Tue Mar 24 01:44:36.918108 2026] [:error] [pid 31798:tid 31813] [client 74.248.130.207:9170] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dapa.php"] [unique_id "acF8BHdtW_1bksndFbY2YgAAAA0"]
[Tue Mar 24 01:44:39.227745 2026] [:error] [pid 56237:tid 56343] [client 74.248.130.207:10253] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dapa.php"] [unique_id "acF8BwymO0MnzQb90MMx9AAAAJY"]
[Tue Mar 24 01:44:41.049751 2026] [:error] [pid 56236:tid 56295] [client 74.248.130.207:24637] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dapa.php"] [unique_id "acF8CXapFgYp0uZ8twAr2QAAAEI"]
[Tue Mar 24 01:44:42.842041 2026] [:error] [pid 31798:tid 31823] [client 74.248.130.207:9595] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dapa.php"] [unique_id "acF8CndtW_1bksndFbY2cQAAABc"]
[Tue Mar 24 01:44:43.566896 2026] [:error] [pid 56238:tid 56354] [client 74.248.130.207:16197] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/w1w.php"] [unique_id "acF8C1SqceFAZRgPDq6s_AAAAMY"]
[Tue Mar 24 01:44:44.434038 2026] [proxy_fcgi:error] [pid 31798:tid 31815] [client 74.248.130.207:10271] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:44:44.781525 2026] [proxy_fcgi:error] [pid 31798:tid 31801] [client 74.248.130.207:10271] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:44:45.106930 2026] [proxy_fcgi:error] [pid 31798:tid 31806] [client 74.248.130.207:10271] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:44:45.697014 2026] [proxy_fcgi:error] [pid 31798:tid 31820] [client 74.248.130.207:10271] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:44:46.385039 2026] [:error] [pid 31798:tid 31818] [client 74.248.130.207:10271] [client 74.248.130.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/block-patterns/index.php"] [unique_id "acF8DndtW_1bksndFbY2hQAAABI"]
[Tue Mar 24 01:44:47.263983 2026] [proxy_fcgi:error] [pid 56435:tid 56501] [client 74.248.130.207:18554] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:44:47.847219 2026] [proxy_fcgi:error] [pid 56435:tid 56513] [client 74.248.130.207:18554] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:44:48.166580 2026] [proxy_fcgi:error] [pid 56435:tid 56523] [client 74.248.130.207:18554] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:44:48.535061 2026] [proxy_fcgi:error] [pid 56435:tid 56505] [client 74.248.130.207:18554] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:44:48.846223 2026] [proxy_fcgi:error] [pid 56435:tid 56510] [client 74.248.130.207:18554] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:44:49.201562 2026] [proxy_fcgi:error] [pid 56435:tid 56525] [client 74.248.130.207:18554] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:44:49.525026 2026] [:error] [pid 56435:tid 56511] [client 74.248.130.207:18554] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws34.php"] [unique_id "acF8Ecrwr-l5A-s9ryCOigAAAQs"]
[Tue Mar 24 01:44:51.096536 2026] [:error] [pid 31798:tid 31822] [client 74.248.130.207:26948] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws34.php"] [unique_id "acF8E3dtW_1bksndFbY2lQAAABY"]
[Tue Mar 24 01:44:52.574182 2026] [:error] [pid 31798:tid 31811] [client 74.248.130.207:16242] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws34.php"] [unique_id "acF8FHdtW_1bksndFbY2mgAAAAs"]
[Tue Mar 24 01:44:53.587785 2026] [:error] [pid 56238:tid 56365] [client 74.248.130.207:12919] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws34.php"] [unique_id "acF8FVSqceFAZRgPDq6tDAAAANE"]
[Tue Mar 24 01:44:55.466953 2026] [:error] [pid 56435:tid 56519] [client 74.248.130.207:30440] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/rk2.php"] [unique_id "acF8F8rwr-l5A-s9ryCOlAAAARI"]
[Tue Mar 24 01:44:56.172315 2026] [:error] [pid 31798:tid 31806] [client 74.248.130.207:30704] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/rk2.php"] [unique_id "acF8GHdtW_1bksndFbY2pgAAAAY"]
[Tue Mar 24 01:44:57.601527 2026] [:error] [pid 56435:tid 56519] [client 74.248.130.207:30725] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/rk2.php"] [unique_id "acF8Gcrwr-l5A-s9ryCOngAAARI"]
[Tue Mar 24 01:44:59.189492 2026] [:error] [pid 31798:tid 31801] [client 74.248.130.207:9133] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/rk2.php"] [unique_id "acF8G3dtW_1bksndFbY2sgAAAAE"]
[Tue Mar 24 01:45:00.345913 2026] [:error] [pid 31798:tid 31804] [client 74.248.130.207:23069] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ans.php"] [unique_id "acF8HHdtW_1bksndFbY2uAAAAAQ"]
[Tue Mar 24 01:45:01.102724 2026] [:error] [pid 56238:tid 56368] [client 74.248.130.207:30777] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ans.php"] [unique_id "acF8HVSqceFAZRgPDq6tDgAAANQ"]
[Tue Mar 24 01:45:02.317426 2026] [:error] [pid 56237:tid 56326] [client 74.248.130.207:27882] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ans.php"] [unique_id "acF8HgymO0MnzQb90MMyBQAAAIU"]
[Tue Mar 24 01:45:03.540673 2026] [:error] [pid 56435:tid 56515] [client 74.248.130.207:18551] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ans.php"] [unique_id "acF8H8rwr-l5A-s9ryCOqQAAAQ4"]
[Tue Mar 24 01:45:04.997513 2026] [:error] [pid 31798:tid 31809] [client 74.248.130.207:26959] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ixj.php"] [unique_id "acF8IHdtW_1bksndFbY2zQAAAAk"]
[Tue Mar 24 01:45:06.637912 2026] [:error] [pid 56237:tid 56344] [client 74.248.130.207:26958] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ixj.php"] [unique_id "acF8IgymO0MnzQb90MMyCwAAAJc"]
[Tue Mar 24 01:45:08.518899 2026] [:error] [pid 31798:tid 31804] [client 74.248.130.207:19981] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ixj.php"] [unique_id "acF8JHdtW_1bksndFbY21AAAAAQ"]
[Tue Mar 24 01:45:09.381343 2026] [:error] [pid 56435:tid 56514] [client 74.248.130.207:16216] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ixj.php"] [unique_id "acF8Jcrwr-l5A-s9ryCOsQAAAQ0"]
[Tue Mar 24 01:45:10.040306 2026] [:error] [pid 56238:tid 56351] [client 74.248.130.207:13947] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/database.php"] [unique_id "acF8JlSqceFAZRgPDq6tFAAAAMM"]
[Tue Mar 24 01:45:11.155117 2026] [:error] [pid 31798:tid 31821] [client 74.248.130.207:23100] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/database.php"] [unique_id "acF8J3dtW_1bksndFbY22gAAABU"]
[Tue Mar 24 01:45:12.685741 2026] [:error] [pid 56238:tid 56350] [client 74.248.130.207:24552] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/database.php"] [unique_id "acF8KFSqceFAZRgPDq6tFwAAAMI"]
[Tue Mar 24 01:45:13.132531 2026] [:error] [pid 56238:tid 56351] [client 74.248.130.207:13947] [client 74.248.130.207] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "173.252.70.54_b1b8a850aec98eb3184fe6a227dee75dd09e304a"): Internal error (specific information not available) [hostname "dwelectservices.com.au"] [uri "/database.php"] [unique_id "acF8JlSqceFAZRgPDq6tFAAAAMM"]
[Tue Mar 24 01:45:13.996409 2026] [:error] [pid 56238:tid 56349] [client 74.248.130.207:26552] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/database.php"] [unique_id "acF8KVSqceFAZRgPDq6tGgAAAME"]
[Tue Mar 24 01:45:15.012729 2026] [:error] [pid 56435:tid 56511] [client 74.248.130.207:8142] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ds.php"] [unique_id "acF8K8rwr-l5A-s9ryCOuwAAAQs"]
[Tue Mar 24 01:45:16.155174 2026] [:error] [pid 56236:tid 56309] [client 74.248.130.207:10111] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ds.php"] [unique_id "acF8LHapFgYp0uZ8twAr7gAAAFA"]
[Tue Mar 24 01:45:18.108190 2026] [:error] [pid 56435:tid 56504] [client 74.248.130.207:27389] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ds.php"] [unique_id "acF8Lsrwr-l5A-s9ryCOwAAAAQU"]
[Tue Mar 24 01:45:19.295900 2026] [:error] [pid 56238:tid 56366] [client 74.248.130.207:30782] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ds.php"] [unique_id "acF8L1SqceFAZRgPDq6tJgAAANI"]
[Tue Mar 24 01:45:20.471150 2026] [:error] [pid 56435:tid 56522] [client 74.248.130.207:13919] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/abcd.php"] [unique_id "acF8MMrwr-l5A-s9ryCOwgAAARU"]
[Tue Mar 24 01:45:21.330199 2026] [:error] [pid 56435:tid 56501] [client 74.248.130.207:26519] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/abcd.php"] [unique_id "acF8Mcrwr-l5A-s9ryCOxQAAAQI"]
[Tue Mar 24 01:45:22.595098 2026] [:error] [pid 31798:tid 31814] [client 74.248.130.207:31096] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/abcd.php"] [unique_id "acF8MndtW_1bksndFbY26gAAAA4"]
[Tue Mar 24 01:45:24.424758 2026] [:error] [pid 56435:tid 56499] [client 74.248.130.207:27363] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/abcd.php"] [unique_id "acF8NMrwr-l5A-s9ryCOzAAAAQA"]
[Tue Mar 24 01:45:26.313071 2026] [:error] [pid 56237:tid 56326] [client 74.248.130.207:10985] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "acF8NgymO0MnzQb90MMyKQAAAIU"]
[Tue Mar 24 01:45:27.312319 2026] [:error] [pid 31798:tid 31810] [client 74.248.130.207:24524] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "acF8N3dtW_1bksndFbY29gAAAAo"]
[Tue Mar 24 01:45:28.641659 2026] [:error] [pid 56236:tid 56317] [client 74.248.130.207:10760] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "acF8OHapFgYp0uZ8twAr9wAAAFg"]
[Tue Mar 24 01:45:29.987983 2026] [:error] [pid 56237:tid 56345] [client 74.248.130.207:9696] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "acF8OQymO0MnzQb90MMyKwAAAJg"]
[Tue Mar 24 01:45:31.177017 2026] [:error] [pid 31798:tid 31820] [client 74.248.130.207:31072] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/man.php"] [unique_id "acF8O3dtW_1bksndFbY3AgAAABQ"]
[Tue Mar 24 01:45:31.923062 2026] [:error] [pid 56238:tid 56356] [client 74.248.130.207:17748] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/man.php"] [unique_id "acF8O1SqceFAZRgPDq6tNgAAAMg"]
[Tue Mar 24 01:45:33.864228 2026] [:error] [pid 56237:tid 56342] [client 74.248.130.207:27024] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/man.php"] [unique_id "acF8PQymO0MnzQb90MMyLQAAAJU"]
[Tue Mar 24 01:45:34.678565 2026] [:error] [pid 31798:tid 31812] [client 74.248.130.207:31132] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/man.php"] [unique_id "acF8PndtW_1bksndFbY3EgAAAAw"]
[Tue Mar 24 01:45:37.690641 2026] [:error] [pid 31798:tid 31807] [client 74.248.130.207:31045] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "acF8QXdtW_1bksndFbY3GAAAAAc"]
[Tue Mar 24 01:46:06.601777 2026] [proxy_fcgi:error] [pid 31798:tid 31817] [client 74.248.130.207:8067] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:46:06.929257 2026] [proxy_fcgi:error] [pid 31798:tid 31818] [client 74.248.130.207:8067] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:46:07.187838 2026] [proxy_fcgi:error] [pid 31798:tid 31811] [client 74.248.130.207:8067] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:46:07.924490 2026] [proxy_fcgi:error] [pid 31798:tid 31806] [client 74.248.130.207:8067] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:46:08.259172 2026] [proxy_fcgi:error] [pid 31798:tid 31804] [client 74.248.130.207:8067] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:46:08.518453 2026] [proxy_fcgi:error] [pid 31798:tid 31814] [client 74.248.130.207:8067] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:46:09.208197 2026] [proxy_fcgi:error] [pid 31798:tid 31822] [client 74.248.130.207:8067] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:46:09.510435 2026] [proxy_fcgi:error] [pid 31798:tid 31824] [client 74.248.130.207:8067] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:46:09.818359 2026] [:error] [pid 31798:tid 31820] [client 74.248.130.207:8067] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/CLA.php"] [unique_id "acF8YXdtW_1bksndFbY3pgAAABQ"]
[Tue Mar 24 01:46:10.899088 2026] [:error] [pid 56238:tid 56367] [client 74.248.130.207:17528] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/CLA.php"] [unique_id "acF8YlSqceFAZRgPDq6tlwAAANM"]
[Tue Mar 24 01:46:11.636826 2026] [:error] [pid 56236:tid 56313] [client 74.248.130.207:8111] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/CLA.php"] [unique_id "acF8Y3apFgYp0uZ8twAsCQAAAFQ"]
[Tue Mar 24 01:46:13.051680 2026] [:error] [pid 56435:tid 56516] [client 74.248.130.207:8348] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/CLA.php"] [unique_id "acF8Zcrwr-l5A-s9ryCPBQAAAQ8"]
[Tue Mar 24 01:46:14.362631 2026] [:error] [pid 31798:tid 31800] [client 74.248.130.207:14639] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/akp.php"] [unique_id "acF8ZndtW_1bksndFbY3uwAAAAA"]
[Tue Mar 24 01:46:15.808698 2026] [:error] [pid 31798:tid 31820] [client 74.248.130.207:9261] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/akp.php"] [unique_id "acF8Z3dtW_1bksndFbY3xwAAABQ"]
[Tue Mar 24 01:46:17.482495 2026] [:error] [pid 56238:tid 56356] [client 74.248.130.207:25783] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/akp.php"] [unique_id "acF8aVSqceFAZRgPDq6tqQAAAMg"]
[Tue Mar 24 01:46:18.232920 2026] [:error] [pid 56237:tid 56343] [client 74.248.130.207:8065] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/akp.php"] [unique_id "acF8agymO0MnzQb90MMyTQAAAJY"]
[Tue Mar 24 01:46:19.207688 2026] [:error] [pid 31798:tid 31822] [client 74.248.130.207:11572] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ALFA_DATA/index.php"] [unique_id "acF8a3dtW_1bksndFbY34wAAABY"]
[Tue Mar 24 01:46:20.218573 2026] [:error] [pid 31798:tid 31818] [client 74.248.130.207:12152] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ALFA_DATA/index.php"] [unique_id "acF8bHdtW_1bksndFbY36AAAABI"]
[Tue Mar 24 01:46:21.208351 2026] [:error] [pid 31798:tid 31802] [client 74.248.130.207:8334] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ALFA_DATA/index.php"] [unique_id "acF8bXdtW_1bksndFbY36wAAAAI"]
[Tue Mar 24 01:46:22.265288 2026] [:error] [pid 31798:tid 31806] [client 74.248.130.207:10190] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ALFA_DATA/index.php"] [unique_id "acF8bndtW_1bksndFbY37wAAAAY"]
[Tue Mar 24 01:46:23.515674 2026] [:error] [pid 31798:tid 31819] [client 74.248.130.207:11526] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/logins.php"] [unique_id "acF8b3dtW_1bksndFbY39AAAABM"]
[Tue Mar 24 01:46:24.877150 2026] [:error] [pid 31798:tid 31815] [client 74.248.130.207:9602] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/logins.php"] [unique_id "acF8cHdtW_1bksndFbY3_AAAAA8"]
[Tue Mar 24 01:46:26.544488 2026] [:error] [pid 56435:tid 56504] [client 74.248.130.207:10042] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/logins.php"] [unique_id "acF8csrwr-l5A-s9ryCPDQAAAQU"]
[Tue Mar 24 01:46:28.167862 2026] [:error] [pid 56435:tid 56513] [client 74.248.130.207:31752] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/logins.php"] [unique_id "acF8dMrwr-l5A-s9ryCPEgAAAQw"]
[Tue Mar 24 01:46:29.313127 2026] [:error] [pid 56238:tid 56371] [client 74.248.130.207:9990] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nansa.php"] [unique_id "acF8dVSqceFAZRgPDq6tsQAAANc"]
[Tue Mar 24 01:46:30.140695 2026] [:error] [pid 31798:tid 31808] [client 74.248.130.207:11810] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nansa.php"] [unique_id "acF8dndtW_1bksndFbY4CAAAAAg"]
[Tue Mar 24 01:46:31.301810 2026] [:error] [pid 56237:tid 56335] [client 74.248.130.207:10176] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nansa.php"] [unique_id "acF8dwymO0MnzQb90MMyVAAAAI4"]
[Tue Mar 24 01:46:32.483431 2026] [:error] [pid 56238:tid 56350] [client 74.248.130.207:25045] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nansa.php"] [unique_id "acF8eFSqceFAZRgPDq6tsgAAAMI"]
[Tue Mar 24 01:46:34.576850 2026] [:error] [pid 56237:tid 56336] [client 74.248.130.207:10194] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/taf.php"] [unique_id "acF8egymO0MnzQb90MMyVwAAAI8"]
[Tue Mar 24 01:46:36.244505 2026] [:error] [pid 31798:tid 31809] [client 74.248.130.207:19782] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/taf.php"] [unique_id "acF8fHdtW_1bksndFbY4EQAAAAk"]
[Tue Mar 24 01:46:37.274826 2026] [:error] [pid 56237:tid 56337] [client 74.248.130.207:10593] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/taf.php"] [unique_id "acF8fQymO0MnzQb90MMyXAAAAJA"]
[Tue Mar 24 01:46:38.332537 2026] [:error] [pid 56236:tid 56310] [client 74.248.130.207:18770] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/taf.php"] [unique_id "acF8fnapFgYp0uZ8twAsGQAAAFE"]
[Tue Mar 24 01:46:39.307409 2026] [:error] [pid 31798:tid 31808] [client 74.248.130.207:11580] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/css.php"] [unique_id "acF8f3dtW_1bksndFbY4EgAAAAg"]
[Tue Mar 24 01:46:40.777608 2026] [:error] [pid 31798:tid 31814] [client 74.248.130.207:31765] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/css.php"] [unique_id "acF8gHdtW_1bksndFbY4FQAAAA4"]
[Tue Mar 24 01:46:42.058942 2026] [:error] [pid 31798:tid 31803] [client 74.248.130.207:9245] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/css.php"] [unique_id "acF8gndtW_1bksndFbY4GwAAAAM"]
[Tue Mar 24 01:46:43.213902 2026] [:error] [pid 56435:tid 56523] [client 74.248.130.207:19837] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/css.php"] [unique_id "acF8g8rwr-l5A-s9ryCPHgAAARY"]
[Tue Mar 24 01:46:44.853189 2026] [:error] [pid 56435:tid 56516] [client 74.248.130.207:20090] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sfsfs.php"] [unique_id "acF8hMrwr-l5A-s9ryCPJgAAAQ8"]
[Tue Mar 24 01:46:47.799957 2026] [:error] [pid 56236:tid 56304] [client 74.248.130.207:25138] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sfsfs.php"] [unique_id "acF8h3apFgYp0uZ8twAsIQAAAEs"]
[Tue Mar 24 01:46:49.313981 2026] [:error] [pid 31798:tid 31821] [client 74.248.130.207:25070] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sfsfs.php"] [unique_id "acF8iXdtW_1bksndFbY4KAAAABU"]
[Tue Mar 24 01:46:50.196429 2026] [:error] [pid 56238:tid 56359] [client 74.248.130.207:14355] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sfsfs.php"] [unique_id "acF8ilSqceFAZRgPDq6tywAAAMs"]
[Tue Mar 24 01:46:51.256388 2026] [:error] [pid 56236:tid 56303] [client 74.248.130.207:25024] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "acF8i3apFgYp0uZ8twAsKQAAAEo"]
[Tue Mar 24 01:46:52.464182 2026] [:error] [pid 56237:tid 56334] [client 74.248.130.207:14889] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "acF8jAymO0MnzQb90MMyeQAAAI0"]
[Tue Mar 24 01:46:54.130959 2026] [:error] [pid 56237:tid 56335] [client 74.248.130.207:11055] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "acF8jgymO0MnzQb90MMyfwAAAI4"]
[Tue Mar 24 01:46:55.211436 2026] [:error] [pid 56237:tid 56345] [client 74.248.130.207:18757] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "acF8jwymO0MnzQb90MMyhgAAAJg"]
[Tue Mar 24 01:46:56.373948 2026] [:error] [pid 56237:tid 56325] [client 74.248.130.207:20071] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mans.php"] [unique_id "acF8kAymO0MnzQb90MMyigAAAIQ"]
[Tue Mar 24 01:46:58.872394 2026] [:error] [pid 56238:tid 56354] [client 74.248.130.207:14855] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mans.php"] [unique_id "acF8klSqceFAZRgPDq6t0gAAAMY"]
[Tue Mar 24 01:47:00.381526 2026] [:error] [pid 56237:tid 56336] [client 74.248.130.207:11624] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mans.php"] [unique_id "acF8lAymO0MnzQb90MMyjQAAAI8"]
[Tue Mar 24 01:47:02.990501 2026] [:error] [pid 31798:tid 31800] [client 74.248.130.207:27434] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mans.php"] [unique_id "acF8lndtW_1bksndFbY4PQAAAAA"]
[Tue Mar 24 01:47:03.750753 2026] [:error] [pid 56236:tid 56315] [client 74.248.130.207:17230] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/byy.php"] [unique_id "acF8l3apFgYp0uZ8twAsNgAAAFY"]
[Tue Mar 24 01:47:04.728769 2026] [:error] [pid 31798:tid 31814] [client 74.248.130.207:10168] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/byy.php"] [unique_id "acF8mHdtW_1bksndFbY4QgAAAA4"]
[Tue Mar 24 01:47:05.617437 2026] [:error] [pid 56236:tid 56304] [client 74.248.130.207:18780] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/byy.php"] [unique_id "acF8mXapFgYp0uZ8twAsOAAAAEs"]
[Tue Mar 24 01:47:07.108494 2026] [:error] [pid 56435:tid 56508] [client 74.248.130.207:11036] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/byy.php"] [unique_id "acF8m8rwr-l5A-s9ryCPQQAAAQg"]
[Tue Mar 24 01:47:07.802161 2026] [:error] [pid 56435:tid 56517] [client 74.248.130.207:20046] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/inwp.php"] [unique_id "acF8m8rwr-l5A-s9ryCPQgAAARA"]
[Tue Mar 24 01:47:08.992549 2026] [:error] [pid 56238:tid 56359] [client 74.248.130.207:15627] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/inwp.php"] [unique_id "acF8nFSqceFAZRgPDq6t4gAAAMs"]
[Tue Mar 24 01:47:11.468034 2026] [proxy_fcgi:error] [pid 56435:tid 56523] [client 74.248.130.207:20036] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:47:11.793761 2026] [proxy_fcgi:error] [pid 56435:tid 56519] [client 74.248.130.207:20036] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:47:12.181275 2026] [:error] [pid 56435:tid 56521] [client 74.248.130.207:20036] [client 74.248.130.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dwelectservices.com.au"] [uri "/tiny.php"] [unique_id "acF8oMrwr-l5A-s9ryCPTQAAARQ"]
[Tue Mar 24 01:47:13.961224 2026] [proxy_fcgi:error] [pid 56435:tid 56517] [client 74.248.130.207:8716] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:47:14.311441 2026] [proxy_fcgi:error] [pid 56435:tid 56503] [client 74.248.130.207:8716] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:47:14.628435 2026] [proxy_fcgi:error] [pid 56435:tid 56511] [client 74.248.130.207:8716] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:47:14.959089 2026] [proxy_fcgi:error] [pid 56435:tid 56504] [client 74.248.130.207:8716] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:47:15.387161 2026] [proxy_fcgi:error] [pid 56435:tid 56519] [client 74.248.130.207:8716] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:47:15.699707 2026] [proxy_fcgi:error] [pid 56435:tid 56521] [client 74.248.130.207:8716] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:47:16.017845 2026] [proxy_fcgi:error] [pid 56435:tid 56499] [client 74.248.130.207:8716] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:47:16.473378 2026] [proxy_fcgi:error] [pid 56435:tid 56503] [client 74.248.130.207:8716] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:47:17.205573 2026] [proxy_fcgi:error] [pid 56435:tid 56515] [client 74.248.130.207:8716] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:47:17.601024 2026] [:error] [pid 56435:tid 56502] [client 74.248.130.207:8716] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/re.php"] [unique_id "acF8pcrwr-l5A-s9ryCPZQAAAQM"]
[Tue Mar 24 01:47:18.883298 2026] [:error] [pid 56435:tid 56516] [client 74.248.130.207:16678] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/re.php"] [unique_id "acF8psrwr-l5A-s9ryCPaAAAAQ8"]
[Tue Mar 24 01:47:20.715305 2026] [:error] [pid 56237:tid 56341] [client 74.248.130.207:26490] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/re.php"] [unique_id "acF8qAymO0MnzQb90MMypgAAAJQ"]
[Tue Mar 24 01:47:22.598481 2026] [:error] [pid 56236:tid 56317] [client 74.248.130.207:19581] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/re.php"] [unique_id "acF8qnapFgYp0uZ8twAsSAAAAFg"]
[Tue Mar 24 01:47:23.440251 2026] [:error] [pid 56435:tid 56524] [client 74.248.130.207:22040] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wsu.php"] [unique_id "acF8q8rwr-l5A-s9ryCPdwAAARc"]
[Tue Mar 24 01:47:25.611075 2026] [:error] [pid 56238:tid 56361] [client 74.248.130.207:28643] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wsu.php"] [unique_id "acF8rVSqceFAZRgPDq6t_wAAAM0"]
[Tue Mar 24 01:47:26.578718 2026] [:error] [pid 56435:tid 56508] [client 74.248.130.207:24337] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wsu.php"] [unique_id "acF8rsrwr-l5A-s9ryCPggAAAQg"]
[Tue Mar 24 01:47:29.515203 2026] [:error] [pid 56236:tid 56296] [client 74.248.130.207:20578] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wsu.php"] [unique_id "acF8sXapFgYp0uZ8twAsSgAAAEM"]
[Tue Mar 24 01:47:31.079041 2026] [:error] [pid 56236:tid 56308] [client 74.248.130.207:15624] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mmm.php"] [unique_id "acF8s3apFgYp0uZ8twAsTAAAAE8"]
[Tue Mar 24 01:47:33.500971 2026] [:error] [pid 56236:tid 56314] [client 74.248.130.207:16691] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mmm.php"] [unique_id "acF8tXapFgYp0uZ8twAsTwAAAFU"]
[Tue Mar 24 01:47:35.574926 2026] [:error] [pid 56236:tid 56300] [client 74.248.130.207:10496] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mmm.php"] [unique_id "acF8t3apFgYp0uZ8twAsUwAAAEc"]
[Tue Mar 24 01:47:37.178047 2026] [:error] [pid 56238:tid 56363] [client 74.248.130.207:14719] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mmm.php"] [unique_id "acF8uVSqceFAZRgPDq6uDAAAAM8"]
[Tue Mar 24 01:47:38.659353 2026] [:error] [pid 31798:tid 31805] [client 74.248.130.207:22017] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/01.php"] [unique_id "acF8undtW_1bksndFbY4ZAAAAAU"]
[Tue Mar 24 01:47:40.228321 2026] [:error] [pid 31798:tid 31815] [client 74.248.130.207:16644] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/01.php"] [unique_id "acF8vHdtW_1bksndFbY4ZwAAAA8"]
[Tue Mar 24 01:47:41.818355 2026] [:error] [pid 56435:tid 56516] [client 74.248.130.207:18256] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/01.php"] [unique_id "acF8vcrwr-l5A-s9ryCPnAAAAQ8"]
[Tue Mar 24 01:47:43.374466 2026] [:error] [pid 56435:tid 56499] [client 74.248.130.207:18733] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/01.php"] [unique_id "acF8v8rwr-l5A-s9ryCPoAAAAQA"]
[Tue Mar 24 01:47:44.816662 2026] [:error] [pid 56238:tid 56372] [client 74.248.130.207:7182] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/3x.php"] [unique_id "acF8wFSqceFAZRgPDq6uHQAAANg"]
[Tue Mar 24 01:47:46.314054 2026] [:error] [pid 56238:tid 56354] [client 74.248.130.207:14095] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/3x.php"] [unique_id "acF8wlSqceFAZRgPDq6uIAAAAMY"]
[Tue Mar 24 01:47:47.269693 2026] [:error] [pid 56238:tid 56368] [client 74.248.130.207:12302] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/3x.php"] [unique_id "acF8w1SqceFAZRgPDq6uJQAAANQ"]
[Tue Mar 24 01:47:48.078377 2026] [:error] [pid 56238:tid 56358] [client 74.248.130.207:19321] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/3x.php"] [unique_id "acF8xFSqceFAZRgPDq6uKQAAAMo"]
[Tue Mar 24 01:47:49.279318 2026] [:error] [pid 31798:tid 31809] [client 74.248.130.207:14105] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aw.php"] [unique_id "acF8xXdtW_1bksndFbY4gAAAAAk"]
[Tue Mar 24 01:47:50.521151 2026] [:error] [pid 56238:tid 56357] [client 74.248.130.207:15167] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aw.php"] [unique_id "acF8xlSqceFAZRgPDq6uNgAAAMk"]
[Tue Mar 24 01:47:52.144461 2026] [:error] [pid 56435:tid 56507] [client 74.248.130.207:8441] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aw.php"] [unique_id "acF8yMrwr-l5A-s9ryCPpAAAAQc"]
[Tue Mar 24 01:47:53.326076 2026] [:error] [pid 56435:tid 56516] [client 74.248.130.207:10830] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aw.php"] [unique_id "acF8ycrwr-l5A-s9ryCPqQAAAQ8"]
[Tue Mar 24 01:47:54.384989 2026] [:error] [pid 56238:tid 56369] [client 74.248.130.207:15160] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xleet.php"] [unique_id "acF8ylSqceFAZRgPDq6uQgAAANU"]
[Tue Mar 24 01:47:55.660321 2026] [:error] [pid 56238:tid 56350] [client 74.248.130.207:12578] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xleet.php"] [unique_id "acF8y1SqceFAZRgPDq6uSAAAAMI"]
[Tue Mar 24 01:47:57.567455 2026] [:error] [pid 31798:tid 31823] [client 74.248.130.207:20842] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xleet.php"] [unique_id "acF8zXdtW_1bksndFbY4jgAAABc"]
[Tue Mar 24 01:47:59.514806 2026] [:error] [pid 56238:tid 56359] [client 74.248.130.207:11302] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xleet.php"] [unique_id "acF8z1SqceFAZRgPDq6uWAAAAMs"]
[Tue Mar 24 01:48:00.987194 2026] [:error] [pid 56435:tid 56507] [client 74.248.130.207:12347] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin/function.php"] [unique_id "acF80Mrwr-l5A-s9ryCPwgAAAQc"]
[Tue Mar 24 01:48:03.398283 2026] [:error] [pid 56435:tid 56499] [client 74.248.130.207:10318] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin/function.php"] [unique_id "acF808rwr-l5A-s9ryCPzAAAAQA"]
[Tue Mar 24 01:49:10.493985 2026] [proxy_fcgi:error] [pid 31798:tid 31820] [client 74.248.130.207:21586] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:49:10.753435 2026] [proxy_fcgi:error] [pid 31798:tid 31821] [client 74.248.130.207:21586] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:49:11.014388 2026] [proxy_fcgi:error] [pid 31798:tid 31808] [client 74.248.130.207:21586] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:49:11.274638 2026] [proxy_fcgi:error] [pid 31798:tid 31803] [client 74.248.130.207:21586] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:49:11.825910 2026] [proxy_fcgi:error] [pid 31798:tid 31814] [client 74.248.130.207:21586] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:49:12.112775 2026] [proxy_fcgi:error] [pid 31798:tid 31815] [client 74.248.130.207:21586] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:49:12.374351 2026] [proxy_fcgi:error] [pid 31798:tid 31801] [client 74.248.130.207:21586] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:49:12.782971 2026] [proxy_fcgi:error] [pid 31798:tid 31823] [client 74.248.130.207:21586] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:49:13.111902 2026] [proxy_fcgi:error] [pid 31798:tid 31804] [client 74.248.130.207:21586] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:49:13.498250 2026] [proxy_fcgi:error] [pid 31798:tid 31800] [client 74.248.130.207:21586] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:49:13.999654 2026] [:error] [pid 31798:tid 31809] [client 74.248.130.207:21586] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/87.php"] [unique_id "acF9GXdtW_1bksndFbY5-QAAAAk"]
[Tue Mar 24 01:49:14.815438 2026] [:error] [pid 56238:tid 56355] [client 74.248.130.207:28721] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/87.php"] [unique_id "acF9GlSqceFAZRgPDq6vEQAAAMc"]
[Tue Mar 24 01:49:15.530740 2026] [:error] [pid 56237:tid 56322] [client 74.248.130.207:10375] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/87.php"] [unique_id "acF9GwymO0MnzQb90MMzSwAAAIE"]
[Tue Mar 24 01:49:16.388578 2026] [:error] [pid 56435:tid 56503] [client 74.248.130.207:17410] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/87.php"] [unique_id "acF9HMrwr-l5A-s9ryCQvQAAAQQ"]
[Tue Mar 24 01:49:17.658917 2026] [:error] [pid 31798:tid 31805] [client 74.248.130.207:21784] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nox.php"] [unique_id "acF9HXdtW_1bksndFbY6AQAAAAU"]
[Tue Mar 24 01:49:18.832932 2026] [:error] [pid 56236:tid 56313] [client 74.248.130.207:15476] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nox.php"] [unique_id "acF9HnapFgYp0uZ8twAsxAAAAFQ"]
[Tue Mar 24 01:49:19.644108 2026] [:error] [pid 56237:tid 56344] [client 74.248.130.207:21763] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nox.php"] [unique_id "acF9HwymO0MnzQb90MMzVwAAAJc"]
[Tue Mar 24 01:49:21.493506 2026] [:error] [pid 31798:tid 31814] [client 74.248.130.207:28435] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nox.php"] [unique_id "acF9IXdtW_1bksndFbY6EwAAAA4"]
[Tue Mar 24 01:49:22.739837 2026] [:error] [pid 56238:tid 56355] [client 74.248.130.207:13629] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/155.php"] [unique_id "acF9IlSqceFAZRgPDq6vHgAAAMc"]
[Tue Mar 24 01:49:24.761053 2026] [:error] [pid 31798:tid 31810] [client 74.248.130.207:13825] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/155.php"] [unique_id "acF9JHdtW_1bksndFbY6GAAAAAo"]
[Tue Mar 24 01:49:26.814292 2026] [:error] [pid 56236:tid 56316] [client 74.248.130.207:18474] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/155.php"] [unique_id "acF9JnapFgYp0uZ8twAs5AAAAFc"]
[Tue Mar 24 01:49:28.171482 2026] [:error] [pid 56435:tid 56522] [client 74.248.130.207:28431] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/155.php"] [unique_id "acF9KMrwr-l5A-s9ryCQ1gAAARU"]
[Tue Mar 24 01:49:29.205458 2026] [:error] [pid 56435:tid 56520] [client 74.248.130.207:13599] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ova.php"] [unique_id "acF9Kcrwr-l5A-s9ryCQ2AAAARM"]
[Tue Mar 24 01:49:31.046848 2026] [:error] [pid 31798:tid 31808] [client 74.248.130.207:16911] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ova.php"] [unique_id "acF9K3dtW_1bksndFbY6RQAAAAg"]
[Tue Mar 24 01:49:32.296269 2026] [:error] [pid 56236:tid 56307] [client 74.248.130.207:1212] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ova.php"] [unique_id "acF9LHapFgYp0uZ8twAs7wAAAE4"]
[Tue Mar 24 01:49:33.882395 2026] [:error] [pid 56236:tid 56308] [client 74.248.130.207:21801] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ova.php"] [unique_id "acF9LXapFgYp0uZ8twAs9wAAAE8"]
[Tue Mar 24 01:49:35.947809 2026] [:error] [pid 56435:tid 56520] [client 74.248.130.207:28687] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bypass.php"] [unique_id "acF9L8rwr-l5A-s9ryCQ8gAAARM"]
[Tue Mar 24 01:49:37.016182 2026] [:error] [pid 56435:tid 56524] [client 74.248.130.207:9010] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bypass.php"] [unique_id "acF9Mcrwr-l5A-s9ryCQ-QAAARc"]
[Tue Mar 24 01:49:38.523437 2026] [:error] [pid 56435:tid 56514] [client 74.248.130.207:17959] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bypass.php"] [unique_id "acF9Msrwr-l5A-s9ryCQ_AAAAQ0"]
[Tue Mar 24 01:49:39.367632 2026] [:error] [pid 56435:tid 56522] [client 74.248.130.207:16929] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bypass.php"] [unique_id "acF9M8rwr-l5A-s9ryCQ_wAAARU"]
[Tue Mar 24 01:49:40.095519 2026] [:error] [pid 56237:tid 56336] [client 74.248.130.207:16730] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xvent2.php"] [unique_id "acF9NAymO0MnzQb90MMzdgAAAI8"]
[Tue Mar 24 01:49:40.763950 2026] [:error] [pid 56435:tid 56507] [client 74.248.130.207:1157] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xvent2.php"] [unique_id "acF9NMrwr-l5A-s9ryCRCAAAAQc"]
[Tue Mar 24 01:49:43.078221 2026] [:error] [pid 56237:tid 56340] [client 74.248.130.207:10462] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xvent2.php"] [unique_id "acF9NwymO0MnzQb90MMzfQAAAJM"]
[Tue Mar 24 01:49:46.913891 2026] [:error] [pid 31798:tid 31820] [client 74.248.130.207:10489] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xvent2.php"] [unique_id "acF9OndtW_1bksndFbY6hQAAABQ"]
[Tue Mar 24 01:49:47.952558 2026] [:error] [pid 56237:tid 56326] [client 74.248.130.207:16444] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/l.php"] [unique_id "acF9OwymO0MnzQb90MMzhwAAAIU"]
[Tue Mar 24 01:49:48.682779 2026] [:error] [pid 56237:tid 56332] [client 74.248.130.207:26298] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/l.php"] [unique_id "acF9PAymO0MnzQb90MMzjAAAAIs"]
[Tue Mar 24 01:49:49.801832 2026] [:error] [pid 56236:tid 56312] [client 74.248.130.207:28114] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/l.php"] [unique_id "acF9PXapFgYp0uZ8twAtFQAAAFM"]
[Tue Mar 24 01:49:50.766849 2026] [:error] [pid 56238:tid 56352] [client 74.248.130.207:1155] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/l.php"] [unique_id "acF9PlSqceFAZRgPDq6vdQAAAMQ"]
[Tue Mar 24 01:49:51.949386 2026] [:error] [pid 56236:tid 56314] [client 74.248.130.207:22304] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xsas.php"] [unique_id "acF9P3apFgYp0uZ8twAtHwAAAFU"]
[Tue Mar 24 01:49:53.614289 2026] [:error] [pid 31798:tid 31823] [client 74.248.130.207:10471] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xsas.php"] [unique_id "acF9QXdtW_1bksndFbY6kQAAABc"]
[Tue Mar 24 01:49:54.577264 2026] [:error] [pid 31798:tid 31813] [client 74.248.130.207:10493] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xsas.php"] [unique_id "acF9QndtW_1bksndFbY6mgAAAA0"]
[Tue Mar 24 01:49:55.902052 2026] [:error] [pid 56238:tid 56348] [client 74.248.130.207:28111] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xsas.php"] [unique_id "acF9Q1SqceFAZRgPDq6vgQAAAMA"]
[Tue Mar 24 01:49:57.533038 2026] [:error] [pid 56237:tid 56330] [client 74.248.130.207:1162] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f2f.php"] [unique_id "acF9RQymO0MnzQb90MMzkwAAAIk"]
[Tue Mar 24 01:50:00.158794 2026] [:error] [pid 56435:tid 56502] [client 74.248.130.207:9735] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f2f.php"] [unique_id "acF9SMrwr-l5A-s9ryCRJwAAAQM"]
[Tue Mar 24 01:50:01.241830 2026] [:error] [pid 31798:tid 31816] [client 74.248.130.207:26277] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f2f.php"] [unique_id "acF9SXdtW_1bksndFbY6rwAAABA"]
[Tue Mar 24 01:50:02.925218 2026] [:error] [pid 56237:tid 56322] [client 74.248.130.207:8649] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f2f.php"] [unique_id "acF9SgymO0MnzQb90MMzlgAAAIE"]
[Tue Mar 24 01:50:05.269412 2026] [:error] [pid 56238:tid 56352] [client 74.248.130.207:7702] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/oo.php"] [unique_id "acF9TVSqceFAZRgPDq6vmQAAAMQ"]
[Tue Mar 24 01:50:07.342731 2026] [:error] [pid 56238:tid 56355] [client 74.248.130.207:1770] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/oo.php"] [unique_id "acF9T1SqceFAZRgPDq6voQAAAMc"]
[Tue Mar 24 01:50:08.688382 2026] [:error] [pid 31798:tid 31808] [client 74.248.130.207:7700] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/oo.php"] [unique_id "acF9UHdtW_1bksndFbY6uwAAAAg"]
[Tue Mar 24 01:50:09.480724 2026] [:error] [pid 56238:tid 56350] [client 74.248.130.207:10190] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/oo.php"] [unique_id "acF9UVSqceFAZRgPDq6vogAAAMI"]
[Tue Mar 24 01:50:10.262621 2026] [:error] [pid 31798:tid 31807] [client 74.248.130.207:22615] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ww3.php"] [unique_id "acF9UndtW_1bksndFbY6wQAAAAc"]
[Tue Mar 24 01:50:11.162274 2026] [:error] [pid 56435:tid 56519] [client 74.248.130.207:26244] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ww3.php"] [unique_id "acF9U8rwr-l5A-s9ryCROAAAARI"]
[Tue Mar 24 01:50:12.936913 2026] [:error] [pid 56435:tid 56509] [client 74.248.130.207:16510] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ww3.php"] [unique_id "acF9VMrwr-l5A-s9ryCRQAAAAQk"]
[Tue Mar 24 01:50:14.650899 2026] [proxy_fcgi:error] [pid 56435:tid 56502] [client 74.248.130.207:22627] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:50:14.917172 2026] [proxy_fcgi:error] [pid 56435:tid 56522] [client 74.248.130.207:22627] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:50:15.213769 2026] [proxy_fcgi:error] [pid 56435:tid 56501] [client 74.248.130.207:22627] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:50:15.568169 2026] [proxy_fcgi:error] [pid 56435:tid 56523] [client 74.248.130.207:22627] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:50:16.015078 2026] [proxy_fcgi:error] [pid 56435:tid 56514] [client 74.248.130.207:22627] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:50:16.358102 2026] [proxy_fcgi:error] [pid 56435:tid 56516] [client 74.248.130.207:22627] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:50:16.738739 2026] [proxy_fcgi:error] [pid 56435:tid 56520] [client 74.248.130.207:22627] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:50:17.117062 2026] [proxy_fcgi:error] [pid 56435:tid 56507] [client 74.248.130.207:22627] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:50:17.377766 2026] [proxy_fcgi:error] [pid 56435:tid 56504] [client 74.248.130.207:22627] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:50:17.849227 2026] [proxy_fcgi:error] [pid 56435:tid 56510] [client 74.248.130.207:22627] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:50:18.347757 2026] [proxy_fcgi:error] [pid 56435:tid 56513] [client 74.248.130.207:22627] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:50:18.829492 2026] [:error] [pid 56435:tid 56525] [client 74.248.130.207:22627] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sk-park.php"] [unique_id "acF9Wsrwr-l5A-s9ryCRUAAAARg"]
[Tue Mar 24 01:50:20.716608 2026] [:error] [pid 56237:tid 56321] [client 74.248.130.207:28115] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sk-park.php"] [unique_id "acF9XAymO0MnzQb90MMzowAAAIA"]
[Tue Mar 24 01:50:23.161772 2026] [:error] [pid 56435:tid 56522] [client 74.248.130.207:1883] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sk-park.php"] [unique_id "acF9X8rwr-l5A-s9ryCRVgAAARU"]
[Tue Mar 24 01:50:25.184774 2026] [:error] [pid 56237:tid 56338] [client 74.248.130.207:22323] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sk-park.php"] [unique_id "acF9YQymO0MnzQb90MMzqAAAAJE"]
[Tue Mar 24 01:50:27.107835 2026] [:error] [pid 31798:tid 31815] [client 74.248.130.207:1253] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xopvne.php"] [unique_id "acF9Y3dtW_1bksndFbY7FwAAAA8"]
[Tue Mar 24 01:50:28.702393 2026] [:error] [pid 56237:tid 56337] [client 74.248.130.207:1250] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xopvne.php"] [unique_id "acF9ZAymO0MnzQb90MMzqwAAAJA"]
[Tue Mar 24 01:50:29.686778 2026] [:error] [pid 56238:tid 56369] [client 74.248.130.207:1129] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xopvne.php"] [unique_id "acF9ZVSqceFAZRgPDq6vsgAAANU"]
[Tue Mar 24 01:50:30.557909 2026] [:error] [pid 56238:tid 56360] [client 74.248.130.207:22871] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xopvne.php"] [unique_id "acF9ZlSqceFAZRgPDq6vtAAAAMw"]
[Tue Mar 24 01:50:31.870505 2026] [:error] [pid 31798:tid 31820] [client 74.248.130.207:11845] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ioxi-rex3.php"] [unique_id "acF9Z3dtW_1bksndFbY7IQAAABQ"]
[Tue Mar 24 01:50:33.208616 2026] [:error] [pid 56237:tid 56328] [client 74.248.130.207:1278] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ioxi-rex3.php"] [unique_id "acF9aQymO0MnzQb90MMzsgAAAIc"]
[Tue Mar 24 01:50:34.304864 2026] [:error] [pid 31798:tid 31821] [client 74.248.130.207:1727] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ioxi-rex3.php"] [unique_id "acF9andtW_1bksndFbY7LQAAABU"]
[Tue Mar 24 01:50:35.840755 2026] [:error] [pid 56435:tid 56519] [client 74.248.130.207:18044] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ioxi-rex3.php"] [unique_id "acF9a8rwr-l5A-s9ryCRbQAAARI"]
[Tue Mar 24 01:50:39.224437 2026] [:error] [pid 56237:tid 56329] [client 74.248.130.207:7977] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wo.php"] [unique_id "acF9bwymO0MnzQb90MMzuAAAAIg"]
[Tue Mar 24 01:50:40.675063 2026] [:error] [pid 56237:tid 56323] [client 74.248.130.207:1527] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wo.php"] [unique_id "acF9cAymO0MnzQb90MMzvAAAAII"]
[Tue Mar 24 01:50:43.264444 2026] [:error] [pid 56238:tid 56370] [client 74.248.130.207:2011] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wo.php"] [unique_id "acF9c1SqceFAZRgPDq6vygAAANY"]
[Tue Mar 24 01:50:44.483431 2026] [:error] [pid 56238:tid 56365] [client 74.248.130.207:29501] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wo.php"] [unique_id "acF9dFSqceFAZRgPDq6vzAAAANE"]
[Tue Mar 24 01:50:45.492331 2026] [:error] [pid 56236:tid 56296] [client 74.248.130.207:19254] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/motu.php"] [unique_id "acF9dXapFgYp0uZ8twAtVAAAAEM"]
[Tue Mar 24 01:50:46.430756 2026] [:error] [pid 31798:tid 31819] [client 74.248.130.207:11236] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/motu.php"] [unique_id "acF9dndtW_1bksndFbY7OgAAABM"]
[Tue Mar 24 01:50:47.412157 2026] [:error] [pid 31798:tid 31806] [client 74.248.130.207:7395] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/motu.php"] [unique_id "acF9d3dtW_1bksndFbY7QAAAAAY"]
[Tue Mar 24 01:50:48.803260 2026] [:error] [pid 31798:tid 31800] [client 74.248.130.207:11256] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/motu.php"] [unique_id "acF9eHdtW_1bksndFbY7RwAAAAA"]
[Tue Mar 24 01:50:50.393829 2026] [:error] [pid 56435:tid 56517] [client 74.248.130.207:7417] [client 74.248.130.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/theme-compat/chosen.php"] [unique_id "acF9esrwr-l5A-s9ryCRiQAAARA"]
[Tue Mar 24 01:50:52.122195 2026] [:error] [pid 56237:tid 56324] [client 74.248.130.207:1986] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/asa.php"] [unique_id "acF9fAymO0MnzQb90MMzvwAAAIM"]
[Tue Mar 24 01:50:52.992834 2026] [:error] [pid 56236:tid 56293] [client 74.248.130.207:1685] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/asa.php"] [unique_id "acF9fHapFgYp0uZ8twAtYgAAAEA"]
[Tue Mar 24 01:50:54.475334 2026] [:error] [pid 56236:tid 56312] [client 74.248.130.207:1437] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/asa.php"] [unique_id "acF9fnapFgYp0uZ8twAtZAAAAFM"]
[Tue Mar 24 01:50:55.720878 2026] [:error] [pid 56435:tid 56524] [client 74.248.130.207:23060] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/asa.php"] [unique_id "acF9f8rwr-l5A-s9ryCRkwAAARc"]
[Tue Mar 24 01:50:56.721036 2026] [:error] [pid 31798:tid 31809] [client 74.248.130.207:8600] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ghreshttryu.php"] [unique_id "acF9gHdtW_1bksndFbY7UQAAAAk"]
[Tue Mar 24 01:50:58.394665 2026] [:error] [pid 56238:tid 56371] [client 74.248.130.207:19241] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ghreshttryu.php"] [unique_id "acF9glSqceFAZRgPDq6v6QAAANc"]
[Tue Mar 24 01:50:59.062954 2026] [:error] [pid 56435:tid 56510] [client 74.248.130.207:11259] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ghreshttryu.php"] [unique_id "acF9g8rwr-l5A-s9ryCRnwAAAQo"]
[Tue Mar 24 01:51:00.548970 2026] [:error] [pid 31798:tid 31812] [client 74.248.130.207:7840] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ghreshttryu.php"] [unique_id "acF9hHdtW_1bksndFbY7XQAAAAw"]
[Tue Mar 24 01:51:02.397970 2026] [:error] [pid 56236:tid 56300] [client 74.248.130.207:1709] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xb.php"] [unique_id "acF9hnapFgYp0uZ8twAtaAAAAEc"]
[Tue Mar 24 01:51:03.307628 2026] [:error] [pid 31798:tid 31802] [client 74.248.130.207:19982] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xb.php"] [unique_id "acF9h3dtW_1bksndFbY7bwAAAAI"]
[Tue Mar 24 01:51:04.654072 2026] [:error] [pid 56237:tid 56342] [client 74.248.130.207:19206] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xb.php"] [unique_id "acF9iAymO0MnzQb90MMzygAAAJU"]
[Tue Mar 24 01:51:05.541531 2026] [:error] [pid 56237:tid 56326] [client 74.248.130.207:1552] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xb.php"] [unique_id "acF9iQymO0MnzQb90MMzzQAAAIU"]
[Tue Mar 24 01:51:06.714368 2026] [:error] [pid 31798:tid 31800] [client 74.248.130.207:1558] [client 74.248.130.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dwelectservices.com.au"] [uri "/filemanager.php"] [unique_id "acF9indtW_1bksndFbY7fwAAAAA"]
[Tue Mar 24 01:51:08.874721 2026] [:error] [pid 31798:tid 31813] [client 74.248.130.207:8245] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/adm.php"] [unique_id "acF9jHdtW_1bksndFbY7kgAAAA0"]
[Tue Mar 24 01:51:10.807020 2026] [:error] [pid 56236:tid 56317] [client 74.248.130.207:19974] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/adm.php"] [unique_id "acF9jnapFgYp0uZ8twAtcQAAAFg"]
[Tue Mar 24 01:51:11.995285 2026] [:error] [pid 56238:tid 56360] [client 74.248.130.207:29422] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/adm.php"] [unique_id "acF9j1SqceFAZRgPDq6wFAAAAMw"]
[Tue Mar 24 01:52:42.565082 2026] [proxy_fcgi:error] [pid 56238:tid 56358] [client 74.248.130.207:8809] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:52:42.824204 2026] [proxy_fcgi:error] [pid 56238:tid 56364] [client 74.248.130.207:8809] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:52:43.149556 2026] [proxy_fcgi:error] [pid 56238:tid 56353] [client 74.248.130.207:8809] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:52:43.409049 2026] [proxy_fcgi:error] [pid 56238:tid 56371] [client 74.248.130.207:8809] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:52:43.767858 2026] [proxy_fcgi:error] [pid 56238:tid 56362] [client 74.248.130.207:8809] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:52:44.054978 2026] [proxy_fcgi:error] [pid 56238:tid 56361] [client 74.248.130.207:8809] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:52:44.315743 2026] [proxy_fcgi:error] [pid 56238:tid 56354] [client 74.248.130.207:8809] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:52:44.660789 2026] [proxy_fcgi:error] [pid 56238:tid 56352] [client 74.248.130.207:8809] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:52:44.925830 2026] [proxy_fcgi:error] [pid 56238:tid 56355] [client 74.248.130.207:8809] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:52:45.445188 2026] [proxy_fcgi:error] [pid 56238:tid 56372] [client 74.248.130.207:8809] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:52:46.053340 2026] [proxy_fcgi:error] [pid 56238:tid 56370] [client 74.248.130.207:8809] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:52:46.439889 2026] [:error] [pid 56238:tid 56365] [client 74.248.130.207:8809] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/z60.php"] [unique_id "acF97lSqceFAZRgPDq6wZAAAANE"]
[Tue Mar 24 01:52:47.311573 2026] [:error] [pid 56435:tid 56513] [client 74.248.130.207:24776] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/z60.php"] [unique_id "acF978rwr-l5A-s9ryCStQAAAQw"]
[Tue Mar 24 01:52:49.253841 2026] [:error] [pid 31798:tid 31816] [client 74.248.130.207:13384] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/z60.php"] [unique_id "acF98XdtW_1bksndFbY8OQAAABA"]
[Tue Mar 24 01:52:50.640153 2026] [:error] [pid 56238:tid 56349] [client 74.248.130.207:9902] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/z60.php"] [unique_id "acF98lSqceFAZRgPDq6waAAAAME"]
[Tue Mar 24 01:52:55.221455 2026] [:error] [pid 31798:tid 31822] [client 74.248.130.207:13422] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lv.php"] [unique_id "acF993dtW_1bksndFbY8QQAAABY"]
[Tue Mar 24 01:52:57.562509 2026] [:error] [pid 31798:tid 31805] [client 74.248.130.207:8103] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lv.php"] [unique_id "acF9-XdtW_1bksndFbY8SgAAAAU"]
[Tue Mar 24 01:52:59.930989 2026] [:error] [pid 31798:tid 31800] [client 74.248.130.207:30688] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lv.php"] [unique_id "acF9-3dtW_1bksndFbY8UwAAAAA"]
[Tue Mar 24 01:53:01.726263 2026] [:error] [pid 56435:tid 56505] [client 74.248.130.207:14633] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lv.php"] [unique_id "acF9_crwr-l5A-s9ryCS1AAAAQY"]
[Tue Mar 24 01:53:02.922713 2026] [:error] [pid 31798:tid 31810] [client 74.248.130.207:21077] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bnnof6.php"] [unique_id "acF9_ndtW_1bksndFbY8ZAAAAAo"]
[Tue Mar 24 01:53:06.784984 2026] [:error] [pid 31798:tid 31812] [client 74.248.130.207:9223] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bnnof6.php"] [unique_id "acF-AndtW_1bksndFbY8dwAAAAw"]
[Tue Mar 24 01:53:08.446084 2026] [:error] [pid 31798:tid 31806] [client 74.248.130.207:17495] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bnnof6.php"] [unique_id "acF-BHdtW_1bksndFbY8gwAAAAY"]
[Tue Mar 24 01:53:09.754628 2026] [:error] [pid 31798:tid 31806] [client 74.248.130.207:32903] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bnnof6.php"] [unique_id "acF-BXdtW_1bksndFbY8jgAAAAY"]
[Tue Mar 24 01:53:10.754700 2026] [:error] [pid 31798:tid 31812] [client 74.248.130.207:10947] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dng.php"] [unique_id "acF-BndtW_1bksndFbY8lwAAAAw"]
[Tue Mar 24 01:53:11.807578 2026] [:error] [pid 56236:tid 56316] [client 74.248.130.207:17509] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dng.php"] [unique_id "acF-B3apFgYp0uZ8twAtwAAAAFc"]
[Tue Mar 24 01:53:12.935918 2026] [:error] [pid 56238:tid 56369] [client 74.248.130.207:9244] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dng.php"] [unique_id "acF-CFSqceFAZRgPDq6wegAAANU"]
[Tue Mar 24 01:53:14.294921 2026] [:error] [pid 56435:tid 56503] [client 74.248.130.207:12922] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dng.php"] [unique_id "acF-Csrwr-l5A-s9ryCS5AAAAQQ"]
[Tue Mar 24 01:53:17.087103 2026] [:error] [pid 31798:tid 31813] [client 74.248.130.207:15996] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/me.php"] [unique_id "acF-DXdtW_1bksndFbY8tAAAAA0"]
[Tue Mar 24 01:53:17.963209 2026] [:error] [pid 31798:tid 31823] [client 74.248.130.207:9238] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/me.php"] [unique_id "acF-DXdtW_1bksndFbY8vQAAABc"]
[Tue Mar 24 01:53:20.622819 2026] [:error] [pid 56238:tid 56365] [client 74.248.130.207:8342] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/me.php"] [unique_id "acF-EFSqceFAZRgPDq6wigAAANE"]
[Tue Mar 24 01:53:21.771885 2026] [:error] [pid 56435:tid 56522] [client 74.248.130.207:16648] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/me.php"] [unique_id "acF-Ecrwr-l5A-s9ryCS7gAAARU"]
[Tue Mar 24 01:53:22.498793 2026] [:error] [pid 31798:tid 31811] [client 74.248.130.207:14640] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xnitp.php"] [unique_id "acF-EndtW_1bksndFbY8xwAAAAs"]
[Tue Mar 24 01:53:23.759365 2026] [:error] [pid 31798:tid 31807] [client 74.248.130.207:17477] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xnitp.php"] [unique_id "acF-E3dtW_1bksndFbY8zgAAAAc"]
[Tue Mar 24 01:53:24.816838 2026] [:error] [pid 56238:tid 56358] [client 74.248.130.207:15658] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xnitp.php"] [unique_id "acF-FFSqceFAZRgPDq6wlAAAAMo"]
[Tue Mar 24 01:53:26.501990 2026] [:error] [pid 31798:tid 31818] [client 74.248.130.207:26721] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xnitp.php"] [unique_id "acF-FndtW_1bksndFbY82QAAABI"]
[Tue Mar 24 01:53:27.370223 2026] [:error] [pid 56237:tid 56331] [client 74.248.130.207:7888] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/shoyo.php"] [unique_id "acF-FwymO0MnzQb90MM0FgAAAIo"]
[Tue Mar 24 01:53:29.584905 2026] [:error] [pid 31798:tid 31808] [client 74.248.130.207:15927] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/shoyo.php"] [unique_id "acF-GXdtW_1bksndFbY84wAAAAg"]
[Tue Mar 24 01:53:30.534106 2026] [:error] [pid 56238:tid 56366] [client 74.248.130.207:7887] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/shoyo.php"] [unique_id "acF-GlSqceFAZRgPDq6wnQAAANI"]
[Tue Mar 24 01:53:32.246592 2026] [:error] [pid 56238:tid 56352] [client 74.248.130.207:25041] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/shoyo.php"] [unique_id "acF-HFSqceFAZRgPDq6wpgAAAMQ"]
[Tue Mar 24 01:53:33.387250 2026] [:error] [pid 56435:tid 56508] [client 74.248.130.207:17531] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/esp.php"] [unique_id "acF-Hcrwr-l5A-s9ryCTBQAAAQg"]
[Tue Mar 24 01:53:34.402684 2026] [:error] [pid 31798:tid 31811] [client 74.248.130.207:17520] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/esp.php"] [unique_id "acF-HndtW_1bksndFbY86QAAAAs"]
[Tue Mar 24 01:53:36.343316 2026] [:error] [pid 56435:tid 56499] [client 74.248.130.207:17745] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/esp.php"] [unique_id "acF-IMrwr-l5A-s9ryCTCgAAAQA"]
[Tue Mar 24 01:53:37.947741 2026] [:error] [pid 56237:tid 56345] [client 74.248.130.207:24622] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/esp.php"] [unique_id "acF-IQymO0MnzQb90MM0HwAAAJg"]
[Tue Mar 24 01:53:39.009608 2026] [:error] [pid 56238:tid 56361] [client 74.248.130.207:27013] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lm15.php"] [unique_id "acF-I1SqceFAZRgPDq6wrwAAAM0"]
[Tue Mar 24 01:53:40.132472 2026] [:error] [pid 56435:tid 56508] [client 74.248.130.207:14614] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lm15.php"] [unique_id "acF-JMrwr-l5A-s9ryCTHwAAAQg"]
[Tue Mar 24 01:53:41.213118 2026] [:error] [pid 56435:tid 56509] [client 74.248.130.207:24590] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lm15.php"] [unique_id "acF-Jcrwr-l5A-s9ryCTJQAAAQk"]
[Tue Mar 24 01:53:42.723025 2026] [:error] [pid 56435:tid 56508] [client 74.248.130.207:17765] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lm15.php"] [unique_id "acF-Jsrwr-l5A-s9ryCTNAAAAQg"]
[Tue Mar 24 01:53:43.903407 2026] [:error] [pid 56237:tid 56336] [client 74.248.130.207:30504] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/price.php"] [unique_id "acF-JwymO0MnzQb90MM0IwAAAI8"]
[Tue Mar 24 01:53:44.628563 2026] [:error] [pid 56236:tid 56305] [client 74.248.130.207:24593] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/price.php"] [unique_id "acF-KHapFgYp0uZ8twAtyAAAAEw"]
[Tue Mar 24 01:53:45.358402 2026] [:error] [pid 56238:tid 56348] [client 74.248.130.207:11080] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/price.php"] [unique_id "acF-KVSqceFAZRgPDq6wuQAAAMA"]
[Tue Mar 24 01:53:46.712331 2026] [proxy_fcgi:error] [pid 31798:tid 31821] [client 74.248.130.207:14968] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:53:47.101356 2026] [proxy_fcgi:error] [pid 31798:tid 31823] [client 74.248.130.207:14968] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:53:47.618831 2026] [proxy_fcgi:error] [pid 31798:tid 31824] [client 74.248.130.207:14968] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:53:47.897462 2026] [proxy_fcgi:error] [pid 31798:tid 31817] [client 74.248.130.207:14968] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:53:48.156116 2026] [proxy_fcgi:error] [pid 31798:tid 31815] [client 74.248.130.207:14968] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:53:48.732593 2026] [proxy_fcgi:error] [pid 31798:tid 31813] [client 74.248.130.207:14968] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:53:49.027348 2026] [proxy_fcgi:error] [pid 31798:tid 31812] [client 74.248.130.207:14968] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:53:49.295041 2026] [proxy_fcgi:error] [pid 31798:tid 31807] [client 74.248.130.207:14968] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:53:49.804957 2026] [proxy_fcgi:error] [pid 31798:tid 31811] [client 74.248.130.207:14968] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:53:50.202321 2026] [:error] [pid 31798:tid 31803] [client 74.248.130.207:14968] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lyda.php"] [unique_id "acF-LndtW_1bksndFbY9EAAAAAM"]
[Tue Mar 24 01:53:51.191050 2026] [:error] [pid 31798:tid 31813] [client 74.248.130.207:11112] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lyda.php"] [unique_id "acF-L3dtW_1bksndFbY9FgAAAA0"]
[Tue Mar 24 01:53:51.980583 2026] [:error] [pid 31798:tid 31824] [client 74.248.130.207:10571] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lyda.php"] [unique_id "acF-L3dtW_1bksndFbY9GwAAABg"]
[Tue Mar 24 01:53:53.289192 2026] [:error] [pid 56435:tid 56505] [client 74.248.130.207:30782] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lyda.php"] [unique_id "acF-Mcrwr-l5A-s9ryCTSQAAAQY"]
[Tue Mar 24 01:53:54.076329 2026] [:error] [pid 31798:tid 31803] [client 74.248.130.207:30190] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bo.php"] [unique_id "acF-MndtW_1bksndFbY9JQAAAAM"]
[Tue Mar 24 01:53:54.987222 2026] [:error] [pid 56238:tid 56368] [client 74.248.130.207:25037] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bo.php"] [unique_id "acF-MlSqceFAZRgPDq6wxgAAANQ"]
[Tue Mar 24 01:53:55.874177 2026] [:error] [pid 56435:tid 56518] [client 74.248.130.207:32911] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bo.php"] [unique_id "acF-M8rwr-l5A-s9ryCTVQAAARE"]
[Tue Mar 24 01:53:56.756308 2026] [:error] [pid 56435:tid 56519] [client 74.248.130.207:8947] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bo.php"] [unique_id "acF-NMrwr-l5A-s9ryCTXQAAARI"]
[Tue Mar 24 01:53:58.159763 2026] [:error] [pid 31798:tid 31811] [client 74.248.130.207:9216] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bibil.php"] [unique_id "acF-NndtW_1bksndFbY9VgAAAAs"]
[Tue Mar 24 01:53:59.399954 2026] [:error] [pid 56238:tid 56362] [client 74.248.130.207:28184] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bibil.php"] [unique_id "acF-N1SqceFAZRgPDq6wzQAAAM4"]
[Tue Mar 24 01:54:01.464334 2026] [:error] [pid 56237:tid 56336] [client 74.248.130.207:30732] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bibil.php"] [unique_id "acF-OQymO0MnzQb90MM0ZQAAAI8"]
[Tue Mar 24 01:54:04.265643 2026] [:error] [pid 31798:tid 31802] [client 74.248.130.207:25067] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bibil.php"] [unique_id "acF-PHdtW_1bksndFbY9oQAAAAI"]
[Tue Mar 24 01:54:05.173700 2026] [:error] [pid 56237:tid 56331] [client 74.248.130.207:15442] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ii5file.php"] [unique_id "acF-PQymO0MnzQb90MM0dgAAAIo"]
[Tue Mar 24 01:54:06.707866 2026] [:error] [pid 56236:tid 56299] [client 74.248.130.207:9236] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ii5file.php"] [unique_id "acF-PnapFgYp0uZ8twAt0wAAAEY"]
[Tue Mar 24 01:54:07.573827 2026] [:error] [pid 56435:tid 56524] [client 74.248.130.207:8931] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ii5file.php"] [unique_id "acF-P8rwr-l5A-s9ryCTkQAAARc"]
[Tue Mar 24 01:54:09.367849 2026] [:error] [pid 31798:tid 31811] [client 74.248.130.207:14630] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ii5file.php"] [unique_id "acF-QXdtW_1bksndFbY90QAAAAs"]
[Tue Mar 24 01:54:10.278823 2026] [:error] [pid 31798:tid 31810] [client 74.248.130.207:26443] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xlettt.php"] [unique_id "acF-QndtW_1bksndFbY92QAAAAo"]
[Tue Mar 24 01:54:11.846594 2026] [:error] [pid 56237:tid 56338] [client 74.248.130.207:11522] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xlettt.php"] [unique_id "acF-QwymO0MnzQb90MM0ewAAAJE"]
[Tue Mar 24 01:54:12.716546 2026] [:error] [pid 56237:tid 56325] [client 74.248.130.207:9498] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xlettt.php"] [unique_id "acF-RAymO0MnzQb90MM0fQAAAIQ"]
[Tue Mar 24 01:54:14.597707 2026] [:error] [pid 56238:tid 56360] [client 74.248.130.207:11130] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xlettt.php"] [unique_id "acF-RlSqceFAZRgPDq6w4gAAAMw"]
[Tue Mar 24 01:54:15.678161 2026] [:error] [pid 56435:tid 56519] [client 74.248.130.207:11559] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zc-104.php"] [unique_id "acF-R8rwr-l5A-s9ryCTrAAAARI"]
[Tue Mar 24 01:54:16.505307 2026] [:error] [pid 56237:tid 56345] [client 74.248.130.207:27026] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zc-104.php"] [unique_id "acF-SAymO0MnzQb90MM0gQAAAJg"]
[Tue Mar 24 01:54:17.804556 2026] [:error] [pid 56236:tid 56307] [client 74.248.130.207:28180] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zc-104.php"] [unique_id "acF-SXapFgYp0uZ8twAt3QAAAE4"]
[Tue Mar 24 01:54:19.093104 2026] [:error] [pid 56238:tid 56350] [client 74.248.130.207:9816] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zc-104.php"] [unique_id "acF-S1SqceFAZRgPDq6w5gAAAMI"]
[Tue Mar 24 01:54:20.615566 2026] [:error] [pid 56435:tid 56508] [client 74.248.130.207:20056] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xtt.php"] [unique_id "acF-TMrwr-l5A-s9ryCTvwAAAQg"]
[Tue Mar 24 01:54:21.791544 2026] [:error] [pid 56435:tid 56518] [client 74.248.130.207:31685] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xtt.php"] [unique_id "acF-Tcrwr-l5A-s9ryCTygAAARE"]
[Tue Mar 24 01:54:22.828155 2026] [:error] [pid 56237:tid 56344] [client 74.248.130.207:8439] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xtt.php"] [unique_id "acF-TgymO0MnzQb90MM0lgAAAJc"]
[Tue Mar 24 01:54:23.708407 2026] [:error] [pid 31798:tid 31821] [client 74.248.130.207:20061] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xtt.php"] [unique_id "acF-T3dtW_1bksndFbY9-gAAABU"]
[Tue Mar 24 01:54:24.532770 2026] [:error] [pid 56237:tid 56325] [client 74.248.130.207:18695] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zxl.php"] [unique_id "acF-UAymO0MnzQb90MM0mgAAAIQ"]
[Tue Mar 24 01:54:25.432041 2026] [:error] [pid 56237:tid 56340] [client 74.248.130.207:9848] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zxl.php"] [unique_id "acF-UQymO0MnzQb90MM0mwAAAJM"]
[Tue Mar 24 01:54:27.258094 2026] [:error] [pid 56237:tid 56336] [client 74.248.130.207:24280] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zxl.php"] [unique_id "acF-UwymO0MnzQb90MM0oAAAAI8"]
[Tue Mar 24 01:54:28.575106 2026] [:error] [pid 56237:tid 56335] [client 74.248.130.207:20274] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zxl.php"] [unique_id "acF-VAymO0MnzQb90MM0pgAAAI4"]
[Tue Mar 24 01:54:29.402822 2026] [:error] [pid 56435:tid 56503] [client 74.248.130.207:27400] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/krypton.php"] [unique_id "acF-Vcrwr-l5A-s9ryCT0gAAAQQ"]
[Tue Mar 24 01:54:31.019617 2026] [:error] [pid 56238:tid 56372] [client 74.248.130.207:20820] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/krypton.php"] [unique_id "acF-V1SqceFAZRgPDq6w_QAAANg"]
[Tue Mar 24 01:54:32.938799 2026] [:error] [pid 31798:tid 31812] [client 74.248.130.207:11387] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/krypton.php"] [unique_id "acF-WHdtW_1bksndFbY-DQAAAAw"]
[Tue Mar 24 01:54:33.902747 2026] [:error] [pid 31798:tid 31811] [client 74.248.130.207:8385] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/krypton.php"] [unique_id "acF-WXdtW_1bksndFbY-DwAAAAs"]
[Tue Mar 24 01:54:34.739392 2026] [:error] [pid 31798:tid 31806] [client 74.248.130.207:24333] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/orm.php"] [unique_id "acF-WndtW_1bksndFbY-EgAAAAY"]
[Tue Mar 24 01:54:35.938014 2026] [:error] [pid 31798:tid 31803] [client 74.248.130.207:20542] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/orm.php"] [unique_id "acF-W3dtW_1bksndFbY-FwAAAAM"]
[Tue Mar 24 01:54:37.334555 2026] [:error] [pid 56435:tid 56502] [client 74.248.130.207:19811] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/orm.php"] [unique_id "acF-Xcrwr-l5A-s9ryCT3AAAAQM"]
[Tue Mar 24 01:54:38.743454 2026] [:error] [pid 31798:tid 31819] [client 74.248.130.207:24258] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/orm.php"] [unique_id "acF-XndtW_1bksndFbY-IwAAABM"]
[Tue Mar 24 01:54:40.703645 2026] [:error] [pid 56236:tid 56317] [client 74.248.130.207:24291] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/NWqz649FIe7.php"] [unique_id "acF-YHapFgYp0uZ8twAt9AAAAFg"]
[Tue Mar 24 01:55:14.494005 2026] [proxy_fcgi:error] [pid 56238:tid 56363] [client 74.248.130.207:11386] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:55:14.753785 2026] [proxy_fcgi:error] [pid 56238:tid 56371] [client 74.248.130.207:11386] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:55:15.013715 2026] [proxy_fcgi:error] [pid 56238:tid 56357] [client 74.248.130.207:11386] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:55:15.275343 2026] [proxy_fcgi:error] [pid 56238:tid 56359] [client 74.248.130.207:11386] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:55:15.530314 2026] [:error] [pid 56238:tid 56369] [client 74.248.130.207:11386] [client 74.248.130.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/ID3/moon.php"] [unique_id "acF-g1SqceFAZRgPDq6xpAAAANU"]
[Tue Mar 24 01:55:17.586435 2026] [proxy_fcgi:error] [pid 56236:tid 56294] [client 74.248.130.207:9293] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:55:17.903312 2026] [proxy_fcgi:error] [pid 56236:tid 56297] [client 74.248.130.207:9293] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:55:18.186990 2026] [proxy_fcgi:error] [pid 56236:tid 56299] [client 74.248.130.207:9293] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:55:18.545480 2026] [proxy_fcgi:error] [pid 56236:tid 56309] [client 74.248.130.207:9293] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:55:18.804556 2026] [proxy_fcgi:error] [pid 56236:tid 56314] [client 74.248.130.207:9293] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:55:19.117430 2026] [proxy_fcgi:error] [pid 56236:tid 56301] [client 74.248.130.207:9293] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:55:19.375802 2026] [proxy_fcgi:error] [pid 56236:tid 56296] [client 74.248.130.207:9293] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:55:19.700968 2026] [:error] [pid 56236:tid 56304] [client 74.248.130.207:9293] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/65.php"] [unique_id "acF-h3apFgYp0uZ8twAuKAAAAEs"]
[Tue Mar 24 01:55:20.982797 2026] [:error] [pid 56237:tid 56336] [client 74.248.130.207:22079] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/65.php"] [unique_id "acF-iAymO0MnzQb90MM06AAAAI8"]
[Tue Mar 24 01:55:22.032457 2026] [:error] [pid 31798:tid 31814] [client 74.248.130.207:27640] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/65.php"] [unique_id "acF-indtW_1bksndFbY_AAAAAA4"]
[Tue Mar 24 01:55:25.382064 2026] [:error] [pid 56435:tid 56508] [client 74.248.130.207:11795] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/65.php"] [unique_id "acF-jcrwr-l5A-s9ryCUSwAAAQg"]
[Tue Mar 24 01:55:26.281691 2026] [:error] [pid 56435:tid 56514] [client 74.248.130.207:19277] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wpx.php"] [unique_id "acF-jsrwr-l5A-s9ryCUTwAAAQ0"]
[Tue Mar 24 01:55:28.260818 2026] [:error] [pid 31798:tid 31822] [client 74.248.130.207:9281] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wpx.php"] [unique_id "acF-kHdtW_1bksndFbY_GQAAABY"]
[Tue Mar 24 01:55:29.116906 2026] [:error] [pid 56435:tid 56509] [client 74.248.130.207:31787] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wpx.php"] [unique_id "acF-kcrwr-l5A-s9ryCUWAAAAQk"]
[Tue Mar 24 01:55:32.328651 2026] [:error] [pid 56435:tid 56522] [client 74.248.130.207:20581] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wpx.php"] [unique_id "acF-lMrwr-l5A-s9ryCUZwAAARU"]
[Tue Mar 24 01:55:33.984263 2026] [:error] [pid 31798:tid 31801] [client 74.248.130.207:12853] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sid-file.php"] [unique_id "acF-lXdtW_1bksndFbY_KgAAAAE"]
[Tue Mar 24 01:55:37.973339 2026] [:error] [pid 56238:tid 56357] [client 74.248.130.207:14180] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sid-file.php"] [unique_id "acF-mVSqceFAZRgPDq6xwQAAAMk"]
[Tue Mar 24 01:55:39.137979 2026] [:error] [pid 56236:tid 56316] [client 74.248.130.207:12862] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sid-file.php"] [unique_id "acF-m3apFgYp0uZ8twAuKgAAAFc"]
[Tue Mar 24 01:55:40.124594 2026] [:error] [pid 56237:tid 56335] [client 74.248.130.207:19279] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sid-file.php"] [unique_id "acF-nAymO0MnzQb90MM1AwAAAI4"]
[Tue Mar 24 01:55:41.456911 2026] [:error] [pid 56236:tid 56313] [client 74.248.130.207:19271] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/num.php"] [unique_id "acF-nXapFgYp0uZ8twAuLgAAAFQ"]
[Tue Mar 24 01:55:42.411480 2026] [:error] [pid 31798:tid 31818] [client 74.248.130.207:27931] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/num.php"] [unique_id "acF-nndtW_1bksndFbY_RQAAABI"]
[Tue Mar 24 01:55:43.666297 2026] [:error] [pid 31798:tid 31806] [client 74.248.130.207:11776] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/num.php"] [unique_id "acF-n3dtW_1bksndFbY_SwAAAAY"]
[Tue Mar 24 01:55:45.300610 2026] [:error] [pid 56237:tid 56321] [client 74.248.130.207:11794] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/num.php"] [unique_id "acF-oQymO0MnzQb90MM1CAAAAIA"]
[Tue Mar 24 01:55:46.382129 2026] [:error] [pid 56238:tid 56348] [client 74.248.130.207:20562] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2.php"] [unique_id "acF-olSqceFAZRgPDq6xzwAAAMA"]
[Tue Mar 24 01:55:49.995261 2026] [:error] [pid 31798:tid 31824] [client 74.248.130.207:13068] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2.php"] [unique_id "acF-pXdtW_1bksndFbY_WAAAABg"]
[Tue Mar 24 01:55:50.930608 2026] [:error] [pid 56435:tid 56514] [client 74.248.130.207:17447] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2.php"] [unique_id "acF-psrwr-l5A-s9ryCUdwAAAQ0"]
[Tue Mar 24 01:55:52.219838 2026] [:error] [pid 56435:tid 56504] [client 74.248.130.207:20571] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2.php"] [unique_id "acF-qMrwr-l5A-s9ryCUfQAAAQU"]
[Tue Mar 24 01:55:53.673895 2026] [:error] [pid 56237:tid 56340] [client 74.248.130.207:11378] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ant.php"] [unique_id "acF-qQymO0MnzQb90MM1EgAAAJM"]
[Tue Mar 24 01:55:54.733247 2026] [:error] [pid 56237:tid 56325] [client 74.248.130.207:14165] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ant.php"] [unique_id "acF-qgymO0MnzQb90MM1FgAAAIQ"]
[Tue Mar 24 01:55:55.722305 2026] [:error] [pid 56237:tid 56330] [client 74.248.130.207:22048] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ant.php"] [unique_id "acF-qwymO0MnzQb90MM1GQAAAIk"]
[Tue Mar 24 01:55:56.855745 2026] [:error] [pid 56435:tid 56511] [client 74.248.130.207:1641] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ant.php"] [unique_id "acF-rMrwr-l5A-s9ryCUhQAAAQs"]
[Tue Mar 24 01:55:58.439003 2026] [:error] [pid 56238:tid 56352] [client 74.248.130.207:31759] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sym.php"] [unique_id "acF-rlSqceFAZRgPDq6x5QAAAMQ"]
[Tue Mar 24 01:55:59.649676 2026] [:error] [pid 56237:tid 56324] [client 74.248.130.207:22027] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sym.php"] [unique_id "acF-rwymO0MnzQb90MM1LgAAAIM"]
[Tue Mar 24 01:56:00.693545 2026] [:error] [pid 56435:tid 56525] [client 74.248.130.207:28984] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sym.php"] [unique_id "acF-sMrwr-l5A-s9ryCUkwAAARg"]
[Tue Mar 24 01:56:01.722301 2026] [:error] [pid 56238:tid 56372] [client 74.248.130.207:13676] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sym.php"] [unique_id "acF-sVSqceFAZRgPDq6x7QAAANg"]
[Tue Mar 24 01:56:03.060458 2026] [:error] [pid 56237:tid 56337] [client 74.248.130.207:28963] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wzpbg.php"] [unique_id "acF-swymO0MnzQb90MM1OwAAAJA"]
[Tue Mar 24 01:56:05.825253 2026] [:error] [pid 56435:tid 56525] [client 74.248.130.207:13650] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wzpbg.php"] [unique_id "acF-tcrwr-l5A-s9ryCUngAAARg"]
[Tue Mar 24 01:56:07.857009 2026] [:error] [pid 56435:tid 56519] [client 74.248.130.207:7752] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wzpbg.php"] [unique_id "acF-t8rwr-l5A-s9ryCUpAAAARI"]
[Tue Mar 24 01:56:08.765615 2026] [:error] [pid 56238:tid 56369] [client 74.248.130.207:31797] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wzpbg.php"] [unique_id "acF-uFSqceFAZRgPDq6yCgAAANU"]
[Tue Mar 24 01:56:10.402929 2026] [:error] [pid 56238:tid 56361] [client 74.248.130.207:19321] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/atex1.php"] [unique_id "acF-ulSqceFAZRgPDq6yDwAAAM0"]
[Tue Mar 24 01:56:12.799859 2026] [:error] [pid 56238:tid 56367] [client 74.248.130.207:14154] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/atex1.php"] [unique_id "acF-vFSqceFAZRgPDq6yGQAAANM"]
[Tue Mar 24 01:56:14.278496 2026] [:error] [pid 56236:tid 56299] [client 74.248.130.207:20569] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/atex1.php"] [unique_id "acF-vnapFgYp0uZ8twAuPgAAAEY"]
[Tue Mar 24 01:56:15.243765 2026] [:error] [pid 56435:tid 56502] [client 74.248.130.207:1650] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/atex1.php"] [unique_id "acF-v8rwr-l5A-s9ryCUtAAAAQM"]
[Tue Mar 24 01:56:16.984057 2026] [:error] [pid 56236:tid 56298] [client 74.248.130.207:11811] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-64wscx6shd.php"] [unique_id "acF-wHapFgYp0uZ8twAuQAAAAEU"]
[Tue Mar 24 01:56:18.898896 2026] [:error] [pid 56237:tid 56328] [client 74.248.130.207:8342] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-64wscx6shd.php"] [unique_id "acF-wgymO0MnzQb90MM1WQAAAIc"]
[Tue Mar 24 01:56:20.014897 2026] [proxy_fcgi:error] [pid 31798:tid 31814] [client 74.248.130.207:12836] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:56:21.179232 2026] [proxy_fcgi:error] [pid 31798:tid 31820] [client 74.248.130.207:12836] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:56:21.463767 2026] [proxy_fcgi:error] [pid 31798:tid 31800] [client 74.248.130.207:12836] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:56:21.830292 2026] [:error] [pid 31798:tid 31818] [client 74.248.130.207:12836] [client 74.248.130.207] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/wp-config.php"] [unique_id "acF-xXdtW_1bksndFbY_pwAAABI"]
[Tue Mar 24 01:56:23.511397 2026] [proxy_fcgi:error] [pid 56237:tid 56333] [client 74.248.130.207:11825] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:56:24.171316 2026] [proxy_fcgi:error] [pid 56237:tid 56329] [client 74.248.130.207:11825] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:56:24.453566 2026] [proxy_fcgi:error] [pid 56237:tid 56331] [client 74.248.130.207:11825] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:56:24.771964 2026] [proxy_fcgi:error] [pid 56237:tid 56323] [client 74.248.130.207:11825] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:56:25.092557 2026] [proxy_fcgi:error] [pid 56237:tid 56337] [client 74.248.130.207:11825] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:56:25.357220 2026] [proxy_fcgi:error] [pid 56237:tid 56327] [client 74.248.130.207:11825] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:56:25.966795 2026] [proxy_fcgi:error] [pid 56237:tid 56328] [client 74.248.130.207:11825] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:56:26.355291 2026] [:error] [pid 56237:tid 56338] [client 74.248.130.207:11825] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nsexz.php"] [unique_id "acF-ygymO0MnzQb90MM1bgAAAJE"]
[Tue Mar 24 01:56:27.470483 2026] [:error] [pid 31798:tid 31821] [client 74.248.130.207:17450] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nsexz.php"] [unique_id "acF-y3dtW_1bksndFbY_xAAAABU"]
[Tue Mar 24 01:56:29.606610 2026] [:error] [pid 31798:tid 31817] [client 74.248.130.207:32886] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nsexz.php"] [unique_id "acF-zXdtW_1bksndFbY_ywAAABE"]
[Tue Mar 24 01:56:30.742021 2026] [:error] [pid 31798:tid 31812] [client 74.248.130.207:27604] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nsexz.php"] [unique_id "acF-zndtW_1bksndFbY_zwAAAAw"]
[Tue Mar 24 01:56:33.502554 2026] [:error] [pid 56435:tid 56517] [client 74.248.130.207:32834] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/shellv3.php"] [unique_id "acF-0crwr-l5A-s9ryCU7QAAARA"]
[Tue Mar 24 01:56:35.064208 2026] [:error] [pid 56435:tid 56523] [client 74.248.130.207:7789] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/shellv3.php"] [unique_id "acF-08rwr-l5A-s9ryCU8wAAARY"]
[Tue Mar 24 01:56:36.377726 2026] [:error] [pid 31798:tid 31824] [client 74.248.130.207:14185] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/shellv3.php"] [unique_id "acF-1HdtW_1bksndFbY_3gAAABg"]
[Tue Mar 24 01:56:37.839320 2026] [:error] [pid 56435:tid 56511] [client 74.248.130.207:13671] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/shellv3.php"] [unique_id "acF-1crwr-l5A-s9ryCVAgAAAQs"]
[Tue Mar 24 01:56:39.563390 2026] [:error] [pid 31798:tid 31819] [client 74.248.130.207:13672] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file48.php"] [unique_id "acF-13dtW_1bksndFbY_5QAAABM"]
[Tue Mar 24 01:56:40.614298 2026] [:error] [pid 56238:tid 56366] [client 74.248.130.207:19298] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file48.php"] [unique_id "acF-2FSqceFAZRgPDq6yOAAAANI"]
[Tue Mar 24 01:56:43.247039 2026] [:error] [pid 31798:tid 31824] [client 74.248.130.207:2045] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file48.php"] [unique_id "acF-23dtW_1bksndFbY_7QAAABg"]
[Tue Mar 24 01:56:44.284106 2026] [:error] [pid 56435:tid 56523] [client 74.248.130.207:29744] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file48.php"] [unique_id "acF-3Mrwr-l5A-s9ryCVGAAAARY"]
[Tue Mar 24 01:56:45.774521 2026] [:error] [pid 56237:tid 56343] [client 74.248.130.207:9944] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kure.php"] [unique_id "acF-3QymO0MnzQb90MM1hQAAAJY"]
[Tue Mar 24 01:56:47.031498 2026] [:error] [pid 56238:tid 56364] [client 74.248.130.207:1240] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kure.php"] [unique_id "acF-31SqceFAZRgPDq6yRgAAANA"]
[Tue Mar 24 01:56:47.912444 2026] [:error] [pid 56238:tid 56349] [client 74.248.130.207:21350] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kure.php"] [unique_id "acF-31SqceFAZRgPDq6ySgAAAME"]
[Tue Mar 24 01:56:49.299747 2026] [:error] [pid 31798:tid 31817] [client 74.248.130.207:7452] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kure.php"] [unique_id "acF-4XdtW_1bksndFbY_9gAAABE"]
[Tue Mar 24 01:56:50.194840 2026] [:error] [pid 31798:tid 31812] [client 74.248.130.207:26795] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xp.php"] [unique_id "acF-4ndtW_1bksndFbY_-QAAAAw"]
[Tue Mar 24 01:56:51.354789 2026] [:error] [pid 31798:tid 31804] [client 74.248.130.207:13363] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xp.php"] [unique_id "acF-43dtW_1bksndFbZAAQAAAAQ"]
[Tue Mar 24 01:56:52.544512 2026] [:error] [pid 56237:tid 56323] [client 74.248.130.207:1269] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xp.php"] [unique_id "acF-5AymO0MnzQb90MM1kwAAAII"]
[Tue Mar 24 01:56:53.720545 2026] [:error] [pid 56435:tid 56511] [client 74.248.130.207:16748] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xp.php"] [unique_id "acF-5crwr-l5A-s9ryCVKgAAAQs"]
[Tue Mar 24 01:56:54.907913 2026] [:error] [pid 31798:tid 31802] [client 74.248.130.207:24873] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ext.php"] [unique_id "acF-5ndtW_1bksndFbZADAAAAAI"]
[Tue Mar 24 01:56:55.612648 2026] [:error] [pid 56237:tid 56335] [client 74.248.130.207:16939] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ext.php"] [unique_id "acF-5wymO0MnzQb90MM1lQAAAI4"]
[Tue Mar 24 01:56:56.509941 2026] [:error] [pid 56236:tid 56297] [client 74.248.130.207:7407] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ext.php"] [unique_id "acF-6HapFgYp0uZ8twAudgAAAEQ"]
[Tue Mar 24 01:56:57.864729 2026] [:error] [pid 56236:tid 56303] [client 74.248.130.207:24887] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ext.php"] [unique_id "acF-6XapFgYp0uZ8twAufgAAAEo"]
[Tue Mar 24 01:56:58.934928 2026] [:error] [pid 56435:tid 56520] [client 74.248.130.207:13840] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/pn.php"] [unique_id "acF-6srwr-l5A-s9ryCVOgAAARM"]
[Tue Mar 24 01:57:00.283999 2026] [:error] [pid 31798:tid 31812] [client 74.248.130.207:13831] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/pn.php"] [unique_id "acF-7HdtW_1bksndFbZATAAAAAw"]
[Tue Mar 24 01:57:01.613103 2026] [:error] [pid 31798:tid 31817] [client 74.248.130.207:21762] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/pn.php"] [unique_id "acF-7XdtW_1bksndFbZAXwAAABE"]
[Tue Mar 24 01:57:02.223841 2026] [:error] [pid 31798:tid 31814] [client 74.248.130.207:11195] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/pn.php"] [unique_id "acF-7ndtW_1bksndFbZAYwAAAA4"]
[Tue Mar 24 01:57:03.526258 2026] [:error] [pid 31798:tid 31823] [client 74.248.130.207:14348] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/888.php"] [unique_id "acF-73dtW_1bksndFbZAagAAABc"]
[Tue Mar 24 01:57:04.538007 2026] [:error] [pid 56236:tid 56296] [client 74.248.130.207:16708] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/888.php"] [unique_id "acF-8HapFgYp0uZ8twAukAAAAEM"]
[Tue Mar 24 01:57:05.607389 2026] [:error] [pid 56435:tid 56521] [client 74.248.130.207:14094] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/888.php"] [unique_id "acF-8crwr-l5A-s9ryCVVwAAARQ"]
[Tue Mar 24 01:57:06.712571 2026] [:error] [pid 56435:tid 56515] [client 74.248.130.207:11857] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/888.php"] [unique_id "acF-8srwr-l5A-s9ryCVWwAAAQ4"]
[Tue Mar 24 01:57:09.053942 2026] [:error] [pid 56435:tid 56510] [client 74.248.130.207:1554] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-is.php"] [unique_id "acF-9crwr-l5A-s9ryCVYAAAAQo"]
[Tue Mar 24 01:57:10.470852 2026] [:error] [pid 31798:tid 31805] [client 74.248.130.207:15696] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-is.php"] [unique_id "acF-9ndtW_1bksndFbZAigAAAAU"]
[Tue Mar 24 01:57:11.891966 2026] [:error] [pid 56435:tid 56517] [client 74.248.130.207:8676] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-is.php"] [unique_id "acF-98rwr-l5A-s9ryCVaAAAARA"]
[Tue Mar 24 01:57:12.743322 2026] [:error] [pid 31798:tid 31813] [client 74.248.130.207:24881] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-is.php"] [unique_id "acF--HdtW_1bksndFbZAjgAAAA0"]
[Tue Mar 24 01:57:15.038281 2026] [:error] [pid 56236:tid 56312] [client 74.248.130.207:24892] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/not.php"] [unique_id "acF--3apFgYp0uZ8twAunQAAAFM"]
[Tue Mar 24 01:58:18.612559 2026] [proxy_fcgi:error] [pid 56435:tid 56521] [client 74.248.130.207:9281] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:58:19.093169 2026] [proxy_fcgi:error] [pid 56435:tid 56523] [client 74.248.130.207:9281] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:58:19.528391 2026] [proxy_fcgi:error] [pid 56435:tid 56510] [client 74.248.130.207:9281] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:58:19.810736 2026] [proxy_fcgi:error] [pid 56435:tid 56507] [client 74.248.130.207:9281] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:58:20.078179 2026] [proxy_fcgi:error] [pid 56435:tid 56514] [client 74.248.130.207:9281] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:58:20.339356 2026] [proxy_fcgi:error] [pid 56435:tid 56522] [client 74.248.130.207:9281] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:58:20.625678 2026] [proxy_fcgi:error] [pid 56435:tid 56500] [client 74.248.130.207:9281] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:58:21.333954 2026] [proxy_fcgi:error] [pid 56435:tid 56521] [client 74.248.130.207:9281] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:58:21.728602 2026] [proxy_fcgi:error] [pid 56435:tid 56518] [client 74.248.130.207:9281] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:58:22.242544 2026] [:error] [pid 56435:tid 56521] [client 74.248.130.207:9281] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/shx.php"] [unique_id "acF_Psrwr-l5A-s9ryCWSAAAARQ"]
[Tue Mar 24 01:58:23.156125 2026] [:error] [pid 56435:tid 56520] [client 74.248.130.207:15675] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/shx.php"] [unique_id "acF_P8rwr-l5A-s9ryCWSwAAARM"]
[Tue Mar 24 01:58:24.814535 2026] [:error] [pid 56237:tid 56322] [client 74.248.130.207:15634] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/shx.php"] [unique_id "acF_QAymO0MnzQb90MM2ZgAAAIE"]
[Tue Mar 24 01:58:26.487672 2026] [:error] [pid 56238:tid 56370] [client 74.248.130.207:29962] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/shx.php"] [unique_id "acF_QlSqceFAZRgPDq6zbQAAANY"]
[Tue Mar 24 01:58:28.045991 2026] [:error] [pid 31798:tid 31814] [client 74.248.130.207:24827] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/s121ws2s.php"] [unique_id "acF_RHdtW_1bksndFbZCEAAAAA4"]
[Tue Mar 24 01:58:28.709282 2026] [:error] [pid 56435:tid 56513] [client 74.248.130.207:1952] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/s121ws2s.php"] [unique_id "acF_RMrwr-l5A-s9ryCWXgAAAQw"]
[Tue Mar 24 01:58:29.847863 2026] [:error] [pid 56435:tid 56507] [client 74.248.130.207:18695] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/s121ws2s.php"] [unique_id "acF_Rcrwr-l5A-s9ryCWYQAAAQc"]
[Tue Mar 24 01:58:30.835542 2026] [:error] [pid 56238:tid 56349] [client 74.248.130.207:15643] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/s121ws2s.php"] [unique_id "acF_RlSqceFAZRgPDq6zgAAAAME"]
[Tue Mar 24 01:58:32.277934 2026] [:error] [pid 56237:tid 56327] [client 74.248.130.207:12395] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tempae.php"] [unique_id "acF_SAymO0MnzQb90MM2hgAAAIY"]
[Tue Mar 24 01:58:33.422330 2026] [:error] [pid 56435:tid 56520] [client 74.248.130.207:13395] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tempae.php"] [unique_id "acF_Scrwr-l5A-s9ryCWhQAAARM"]
[Tue Mar 24 01:58:34.194707 2026] [:error] [pid 56237:tid 56324] [client 74.248.130.207:10060] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tempae.php"] [unique_id "acF_SgymO0MnzQb90MM2jwAAAIM"]
[Tue Mar 24 01:58:35.554733 2026] [:error] [pid 56236:tid 56313] [client 74.248.130.207:23163] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tempae.php"] [unique_id "acF_S3apFgYp0uZ8twAvGAAAAFQ"]
[Tue Mar 24 01:58:37.267915 2026] [:error] [pid 56237:tid 56341] [client 74.248.130.207:12322] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/upload.php"] [unique_id "acF_TQymO0MnzQb90MM2lwAAAJQ"]
[Tue Mar 24 01:58:38.146027 2026] [:error] [pid 31798:tid 31807] [client 74.248.130.207:10068] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/upload.php"] [unique_id "acF_TndtW_1bksndFbZCGAAAAAc"]
[Tue Mar 24 01:58:39.297499 2026] [:error] [pid 56237:tid 56340] [client 74.248.130.207:13390] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/upload.php"] [unique_id "acF_TwymO0MnzQb90MM2mwAAAJM"]
[Tue Mar 24 01:58:40.644559 2026] [:error] [pid 56435:tid 56518] [client 74.248.130.207:12371] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/upload.php"] [unique_id "acF_UMrwr-l5A-s9ryCWpwAAARE"]
[Tue Mar 24 01:58:42.813114 2026] [:error] [pid 56236:tid 56296] [client 74.248.130.207:10898] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Zeiss.php"] [unique_id "acF_UnapFgYp0uZ8twAvKQAAAEM"]
[Tue Mar 24 01:58:44.100989 2026] [:error] [pid 56435:tid 56503] [client 74.248.130.207:1981] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Zeiss.php"] [unique_id "acF_VMrwr-l5A-s9ryCWtwAAAQQ"]
[Tue Mar 24 01:58:45.931437 2026] [:error] [pid 56435:tid 56501] [client 74.248.130.207:1976] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Zeiss.php"] [unique_id "acF_Vcrwr-l5A-s9ryCWxAAAAQI"]
[Tue Mar 24 01:58:47.199302 2026] [:error] [pid 56238:tid 56368] [client 74.248.130.207:9123] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Zeiss.php"] [unique_id "acF_V1SqceFAZRgPDq6zowAAANQ"]
[Tue Mar 24 01:58:48.113145 2026] [:error] [pid 56435:tid 56513] [client 74.248.130.207:30461] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-x.php"] [unique_id "acF_WMrwr-l5A-s9ryCWyAAAAQw"]
[Tue Mar 24 01:58:49.535177 2026] [:error] [pid 56435:tid 56517] [client 74.248.130.207:30265] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-x.php"] [unique_id "acF_Wcrwr-l5A-s9ryCW1gAAARA"]
[Tue Mar 24 01:58:53.707685 2026] [:error] [pid 56237:tid 56343] [client 74.248.130.207:10883] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-x.php"] [unique_id "acF_XQymO0MnzQb90MM2tQAAAJY"]
[Tue Mar 24 01:58:55.288660 2026] [:error] [pid 56435:tid 56510] [client 74.248.130.207:12359] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-x.php"] [unique_id "acF_X8rwr-l5A-s9ryCW4gAAAQo"]
[Tue Mar 24 01:58:56.345078 2026] [:error] [pid 56435:tid 56501] [client 74.248.130.207:18524] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mt/byp.php"] [unique_id "acF_YMrwr-l5A-s9ryCW6wAAAQI"]
[Tue Mar 24 01:58:57.297671 2026] [:error] [pid 56435:tid 56518] [client 74.248.130.207:29446] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mt/byp.php"] [unique_id "acF_Ycrwr-l5A-s9ryCW7wAAARE"]
[Tue Mar 24 01:58:59.098437 2026] [:error] [pid 56435:tid 56503] [client 74.248.130.207:7957] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mt/byp.php"] [unique_id "acF_Y8rwr-l5A-s9ryCW_AAAAQQ"]
[Tue Mar 24 01:59:00.728187 2026] [:error] [pid 56238:tid 56358] [client 74.248.130.207:8717] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mt/byp.php"] [unique_id "acF_ZFSqceFAZRgPDq6ztAAAAMo"]
[Tue Mar 24 01:59:01.946072 2026] [:error] [pid 56236:tid 56313] [client 74.248.130.207:12297] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sko.php"] [unique_id "acF_ZXapFgYp0uZ8twAvOwAAAFQ"]
[Tue Mar 24 01:59:03.078202 2026] [:error] [pid 56435:tid 56501] [client 74.248.130.207:18298] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sko.php"] [unique_id "acF_Z8rwr-l5A-s9ryCXBgAAAQI"]
[Tue Mar 24 01:59:04.055069 2026] [:error] [pid 31798:tid 31810] [client 74.248.130.207:27379] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sko.php"] [unique_id "acF_aHdtW_1bksndFbZCVQAAAAo"]
[Tue Mar 24 01:59:05.627810 2026] [:error] [pid 31798:tid 31802] [client 74.248.130.207:12894] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sko.php"] [unique_id "acF_aXdtW_1bksndFbZCWQAAAAI"]
[Tue Mar 24 01:59:07.837499 2026] [:error] [pid 56435:tid 56501] [client 74.248.130.207:18532] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ccea.php"] [unique_id "acF_a8rwr-l5A-s9ryCXDgAAAQI"]
[Tue Mar 24 01:59:08.591015 2026] [:error] [pid 56435:tid 56517] [client 74.248.130.207:7943] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ccea.php"] [unique_id "acF_bMrwr-l5A-s9ryCXFQAAARA"]
[Tue Mar 24 01:59:11.020308 2026] [:error] [pid 31798:tid 31806] [client 74.248.130.207:18273] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ccea.php"] [unique_id "acF_b3dtW_1bksndFbZCXgAAAAY"]
[Tue Mar 24 01:59:11.954632 2026] [:error] [pid 56435:tid 56521] [client 74.248.130.207:30444] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ccea.php"] [unique_id "acF_b8rwr-l5A-s9ryCXHwAAARQ"]
[Tue Mar 24 01:59:13.281553 2026] [:error] [pid 31798:tid 31814] [client 74.248.130.207:8743] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/pzfue.php"] [unique_id "acF_cXdtW_1bksndFbZCawAAAA4"]
[Tue Mar 24 01:59:15.271943 2026] [:error] [pid 31798:tid 31823] [client 74.248.130.207:18249] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/pzfue.php"] [unique_id "acF_c3dtW_1bksndFbZCdQAAABc"]
[Tue Mar 24 01:59:16.371628 2026] [:error] [pid 31798:tid 31802] [client 74.248.130.207:18523] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/pzfue.php"] [unique_id "acF_dHdtW_1bksndFbZCfgAAAAI"]
[Tue Mar 24 01:59:17.623597 2026] [:error] [pid 31798:tid 31822] [client 74.248.130.207:9168] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/pzfue.php"] [unique_id "acF_dXdtW_1bksndFbZChAAAABY"]
[Tue Mar 24 01:59:18.952788 2026] [:error] [pid 56435:tid 56500] [client 74.248.130.207:11596] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/0z.php"] [unique_id "acF_dsrwr-l5A-s9ryCXJQAAAQE"]
[Tue Mar 24 01:59:21.142370 2026] [proxy_fcgi:error] [pid 56236:tid 56314] [client 74.248.130.207:13611] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:59:21.458091 2026] [proxy_fcgi:error] [pid 56236:tid 56303] [client 74.248.130.207:13611] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:59:21.720536 2026] [proxy_fcgi:error] [pid 56236:tid 56305] [client 74.248.130.207:13611] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:59:22.013890 2026] [proxy_fcgi:error] [pid 56236:tid 56311] [client 74.248.130.207:13611] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:59:22.274802 2026] [proxy_fcgi:error] [pid 56236:tid 56306] [client 74.248.130.207:13611] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:59:22.623421 2026] [proxy_fcgi:error] [pid 56236:tid 56298] [client 74.248.130.207:13611] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:59:23.003017 2026] [proxy_fcgi:error] [pid 56236:tid 56297] [client 74.248.130.207:13611] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:59:23.337329 2026] [proxy_fcgi:error] [pid 56236:tid 56300] [client 74.248.130.207:13611] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:59:23.625096 2026] [proxy_fcgi:error] [pid 56236:tid 56302] [client 74.248.130.207:13611] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:59:23.986157 2026] [proxy_fcgi:error] [pid 56236:tid 56310] [client 74.248.130.207:13611] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:59:24.411116 2026] [proxy_fcgi:error] [pid 56236:tid 56295] [client 74.248.130.207:13611] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:59:24.717566 2026] [:error] [pid 56236:tid 56315] [client 74.248.130.207:13611] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/LvCBeZWaSgQ.php"] [unique_id "acF_fHapFgYp0uZ8twAvVAAAAFY"]
[Tue Mar 24 01:59:26.176420 2026] [:error] [pid 56237:tid 56334] [client 74.248.130.207:7495] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/LvCBeZWaSgQ.php"] [unique_id "acF_fgymO0MnzQb90MM22AAAAI0"]
[Tue Mar 24 01:59:27.125826 2026] [:error] [pid 31798:tid 31808] [client 74.248.130.207:7505] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/LvCBeZWaSgQ.php"] [unique_id "acF_f3dtW_1bksndFbZCngAAAAg"]
[Tue Mar 24 01:59:28.007026 2026] [:error] [pid 31798:tid 31800] [client 74.248.130.207:18254] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/LvCBeZWaSgQ.php"] [unique_id "acF_gHdtW_1bksndFbZCpgAAAAA"]
[Tue Mar 24 01:59:29.100315 2026] [:error] [pid 31798:tid 31820] [client 74.248.130.207:10722] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xml.php"] [unique_id "acF_gXdtW_1bksndFbZCqgAAABQ"]
[Tue Mar 24 01:59:30.466054 2026] [:error] [pid 31798:tid 31805] [client 74.248.130.207:7828] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xml.php"] [unique_id "acF_gndtW_1bksndFbZCrwAAAAU"]
[Tue Mar 24 01:59:31.258997 2026] [:error] [pid 56435:tid 56511] [client 74.248.130.207:8139] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xml.php"] [unique_id "acF_g8rwr-l5A-s9ryCXNQAAAQs"]
[Tue Mar 24 01:59:33.071977 2026] [:error] [pid 31798:tid 31823] [client 74.248.130.207:12057] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xml.php"] [unique_id "acF_hXdtW_1bksndFbZCvwAAABc"]
[Tue Mar 24 01:59:34.927821 2026] [:error] [pid 31798:tid 31817] [client 74.248.130.207:9035] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ca5.php"] [unique_id "acF_hndtW_1bksndFbZCxgAAABE"]
[Tue Mar 24 01:59:36.953304 2026] [:error] [pid 31798:tid 31810] [client 74.248.130.207:18242] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ca5.php"] [unique_id "acF_iHdtW_1bksndFbZCyAAAAAo"]
[Tue Mar 24 01:59:38.861202 2026] [:error] [pid 56237:tid 56342] [client 74.248.130.207:11048] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ca5.php"] [unique_id "acF_igymO0MnzQb90MM27AAAAJU"]
[Tue Mar 24 01:59:40.721510 2026] [:error] [pid 56238:tid 56363] [client 74.248.130.207:27345] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ca5.php"] [unique_id "acF_jFSqceFAZRgPDq6z-QAAAM8"]
[Tue Mar 24 01:59:41.708964 2026] [:error] [pid 56238:tid 56359] [client 74.248.130.207:7940] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gl.php"] [unique_id "acF_jVSqceFAZRgPDq6z_gAAAMs"]
[Tue Mar 24 01:59:42.927252 2026] [:error] [pid 56238:tid 56371] [client 74.248.130.207:12911] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gl.php"] [unique_id "acF_jlSqceFAZRgPDq60BAAAANc"]
[Tue Mar 24 01:59:45.109246 2026] [:error] [pid 56435:tid 56510] [client 74.248.130.207:18277] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gl.php"] [unique_id "acF_kcrwr-l5A-s9ryCXUQAAAQo"]
[Tue Mar 24 01:59:45.962011 2026] [:error] [pid 31798:tid 31801] [client 74.248.130.207:24526] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gl.php"] [unique_id "acF_kXdtW_1bksndFbZC1AAAAAE"]
[Tue Mar 24 01:59:49.737661 2026] [:error] [pid 56237:tid 56343] [client 74.248.130.207:10979] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "acF_lQymO0MnzQb90MM2_gAAAJY"]
[Tue Mar 24 01:59:51.252152 2026] [:error] [pid 56435:tid 56500] [client 74.248.130.207:8753] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "acF_l8rwr-l5A-s9ryCXaAAAAQE"]
[Tue Mar 24 01:59:52.370191 2026] [:error] [pid 56237:tid 56338] [client 74.248.130.207:10969] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "acF_mAymO0MnzQb90MM3BAAAAJE"]
[Tue Mar 24 01:59:53.457040 2026] [:error] [pid 31798:tid 31810] [client 74.248.130.207:27369] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "acF_mXdtW_1bksndFbZC1wAAAAo"]
[Tue Mar 24 01:59:54.263668 2026] [:error] [pid 31798:tid 31818] [client 74.248.130.207:12891] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/asd67.php"] [unique_id "acF_mndtW_1bksndFbZC3AAAABI"]
[Tue Mar 24 01:59:56.696371 2026] [:error] [pid 56238:tid 56358] [client 74.248.130.207:12289] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/asd67.php"] [unique_id "acF_nFSqceFAZRgPDq60FgAAAMo"]
[Tue Mar 24 01:59:58.845138 2026] [:error] [pid 56237:tid 56330] [client 74.248.130.207:13578] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/asd67.php"] [unique_id "acF_ngymO0MnzQb90MM3DgAAAIk"]
[Tue Mar 24 02:00:01.916823 2026] [:error] [pid 56237:tid 56326] [client 74.248.130.207:11058] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/asd67.php"] [unique_id "acF_oQymO0MnzQb90MM3FgAAAIU"]
[Tue Mar 24 02:00:02.710507 2026] [:error] [pid 31798:tid 31811] [client 74.248.130.207:10739] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin.php"] [unique_id "acF_ondtW_1bksndFbZC6wAAAAs"]
[Tue Mar 24 02:00:03.785643 2026] [:error] [pid 31798:tid 31802] [client 74.248.130.207:9109] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin.php"] [unique_id "acF_o3dtW_1bksndFbZC8AAAAAI"]
[Tue Mar 24 02:00:05.096343 2026] [:error] [pid 56435:tid 56520] [client 74.248.130.207:12866] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin.php"] [unique_id "acF_pcrwr-l5A-s9ryCXeQAAARM"]
[Tue Mar 24 02:00:07.339288 2026] [:error] [pid 56238:tid 56368] [client 74.248.130.207:11631] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin.php"] [unique_id "acF_p1SqceFAZRgPDq60JgAAANQ"]
[Tue Mar 24 02:00:08.436768 2026] [:error] [pid 56435:tid 56514] [client 74.248.130.207:7962] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/yyy.php"] [unique_id "acF_qMrwr-l5A-s9ryCXgAAAAQ0"]
[Tue Mar 24 02:00:10.037711 2026] [:error] [pid 56435:tid 56513] [client 74.248.130.207:7959] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/yyy.php"] [unique_id "acF_qsrwr-l5A-s9ryCXigAAAQw"]
[Tue Mar 24 02:00:10.941952 2026] [:error] [pid 56237:tid 56324] [client 74.248.130.207:8158] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/yyy.php"] [unique_id "acF_qgymO0MnzQb90MM3GAAAAIM"]
[Tue Mar 24 02:00:12.723225 2026] [:error] [pid 31798:tid 31807] [client 74.248.130.207:13583] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/yyy.php"] [unique_id "acF_rHdtW_1bksndFbZDBwAAAAc"]
[Tue Mar 24 02:00:16.062071 2026] [:error] [pid 31798:tid 31801] [client 74.248.130.207:7849] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/oc460l3x.php"] [unique_id "acF_sHdtW_1bksndFbZDEgAAAAE"]
[Tue Mar 24 02:00:21.331252 2026] [:error] [pid 56237:tid 56339] [client 74.248.130.207:30216] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/oc460l3x.php"] [unique_id "acF_tQymO0MnzQb90MM3IQAAAJI"]
[Tue Mar 24 02:01:52.720421 2026] [proxy_fcgi:error] [pid 31798:tid 31807] [client 74.248.130.207:12612] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 02:01:52.987376 2026] [proxy_fcgi:error] [pid 31798:tid 31822] [client 74.248.130.207:12612] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 02:01:53.260051 2026] [proxy_fcgi:error] [pid 31798:tid 31808] [client 74.248.130.207:12612] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 02:01:53.641379 2026] [proxy_fcgi:error] [pid 31798:tid 31812] [client 74.248.130.207:12612] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 02:01:53.910910 2026] [proxy_fcgi:error] [pid 31798:tid 31816] [client 74.248.130.207:12612] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 02:01:54.177311 2026] [proxy_fcgi:error] [pid 31798:tid 31815] [client 74.248.130.207:12612] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 02:01:54.436965 2026] [proxy_fcgi:error] [pid 31798:tid 31809] [client 74.248.130.207:12612] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 02:01:54.721984 2026] [proxy_fcgi:error] [pid 31798:tid 31818] [client 74.248.130.207:12612] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 02:01:54.995005 2026] [proxy_fcgi:error] [pid 31798:tid 31805] [client 74.248.130.207:12612] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 02:01:55.461597 2026] [proxy_fcgi:error] [pid 31798:tid 31811] [client 74.248.130.207:12612] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 02:01:55.830554 2026] [proxy_fcgi:error] [pid 31798:tid 31818] [client 74.248.130.207:12612] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 02:01:56.085345 2026] [:error] [pid 31798:tid 31806] [client 74.248.130.207:12612] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/natural.php"] [unique_id "acGAFHdtW_1bksndFbZEcQAAAAY"]
[Tue Mar 24 02:01:56.957631 2026] [:error] [pid 31798:tid 31811] [client 74.248.130.207:12554] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/natural.php"] [unique_id "acGAFHdtW_1bksndFbZEegAAAAs"]
[Tue Mar 24 02:01:57.920026 2026] [:error] [pid 31798:tid 31814] [client 74.248.130.207:25681] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/natural.php"] [unique_id "acGAFXdtW_1bksndFbZEhAAAAA4"]
[Tue Mar 24 02:01:59.573096 2026] [:error] [pid 31798:tid 31814] [client 74.248.130.207:12569] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/natural.php"] [unique_id "acGAF3dtW_1bksndFbZEkQAAAA4"]
[Tue Mar 24 02:02:00.723781 2026] [:error] [pid 56237:tid 56331] [client 74.248.130.207:18949] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/e.php"] [unique_id "acGAGAymO0MnzQb90MM3dAAAAIo"]
[Tue Mar 24 02:02:02.421184 2026] [:error] [pid 56237:tid 56329] [client 74.248.130.207:30763] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/e.php"] [unique_id "acGAGgymO0MnzQb90MM3dQAAAIg"]
[Tue Mar 24 02:02:04.297945 2026] [:error] [pid 56238:tid 56350] [client 74.248.130.207:27059] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/e.php"] [unique_id "acGAHFSqceFAZRgPDq60sgAAAMI"]
[Tue Mar 24 02:02:05.042655 2026] [:error] [pid 56238:tid 56359] [client 74.248.130.207:27051] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/e.php"] [unique_id "acGAHVSqceFAZRgPDq60tgAAAMs"]
[Tue Mar 24 02:02:06.420458 2026] [:error] [pid 56435:tid 56515] [client 74.248.130.207:1159] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ht.php"] [unique_id "acGAHsrwr-l5A-s9ryCYZgAAAQ4"]
[Tue Mar 24 02:02:09.886032 2026] [:error] [pid 56238:tid 56348] [client 74.248.130.207:26046] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ht.php"] [unique_id "acGAIVSqceFAZRgPDq60vQAAAMA"]
[Tue Mar 24 02:02:10.746208 2026] [:error] [pid 56237:tid 56330] [client 74.248.130.207:18957] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ht.php"] [unique_id "acGAIgymO0MnzQb90MM3eQAAAIk"]
[Tue Mar 24 02:02:12.162408 2026] [:error] [pid 31798:tid 31815] [client 74.248.130.207:16237] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ht.php"] [unique_id "acGAJHdtW_1bksndFbZEywAAAA8"]
[Tue Mar 24 02:02:13.545569 2026] [:error] [pid 31798:tid 31823] [client 74.248.130.207:12594] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/inputs.php"] [unique_id "acGAJXdtW_1bksndFbZEzQAAABc"]
[Tue Mar 24 02:02:15.886331 2026] [:error] [pid 31798:tid 31806] [client 74.248.130.207:26041] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/inputs.php"] [unique_id "acGAJ3dtW_1bksndFbZE1AAAAAY"]
[Tue Mar 24 02:02:17.405186 2026] [:error] [pid 56435:tid 56518] [client 74.248.130.207:12561] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/inputs.php"] [unique_id "acGAKcrwr-l5A-s9ryCYdgAAARE"]
[Tue Mar 24 02:02:18.575986 2026] [:error] [pid 31798:tid 31810] [client 74.248.130.207:26018] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/inputs.php"] [unique_id "acGAKndtW_1bksndFbZE2QAAAAo"]
[Tue Mar 24 02:02:19.839835 2026] [:error] [pid 31798:tid 31822] [client 74.248.130.207:29422] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jdlqi.php"] [unique_id "acGAK3dtW_1bksndFbZE4wAAABY"]
[Tue Mar 24 02:02:20.754309 2026] [:error] [pid 56435:tid 56509] [client 74.248.130.207:10445] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jdlqi.php"] [unique_id "acGALMrwr-l5A-s9ryCYgwAAAQk"]
[Tue Mar 24 02:02:22.835794 2026] [:error] [pid 31798:tid 31810] [client 74.248.130.207:1194] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jdlqi.php"] [unique_id "acGALndtW_1bksndFbZE5QAAAAo"]
[Tue Mar 24 02:02:24.558629 2026] [:error] [pid 31798:tid 31809] [client 74.248.130.207:18780] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jdlqi.php"] [unique_id "acGAMHdtW_1bksndFbZE7QAAAAk"]
[Tue Mar 24 02:02:26.229097 2026] [:error] [pid 31798:tid 31803] [client 74.248.130.207:14435] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/12.php"] [unique_id "acGAMndtW_1bksndFbZE8gAAAAM"]
[Tue Mar 24 02:02:27.535570 2026] [:error] [pid 31798:tid 31815] [client 74.248.130.207:14440] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/12.php"] [unique_id "acGAM3dtW_1bksndFbZE-gAAAA8"]
[Tue Mar 24 02:02:28.610639 2026] [:error] [pid 56238:tid 56363] [client 74.248.130.207:11089] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/12.php"] [unique_id "acGANFSqceFAZRgPDq61EAAAAM8"]
[Tue Mar 24 02:02:29.582151 2026] [:error] [pid 56435:tid 56507] [client 74.248.130.207:14417] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/12.php"] [unique_id "acGANcrwr-l5A-s9ryCYkAAAAQc"]
[Tue Mar 24 02:02:30.866321 2026] [:error] [pid 56435:tid 56504] [client 74.248.130.207:7226] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/0x55.php"] [unique_id "acGANsrwr-l5A-s9ryCYlAAAAQU"]
[Tue Mar 24 02:02:32.778096 2026] [:error] [pid 56238:tid 56359] [client 74.248.130.207:27038] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/0x55.php"] [unique_id "acGAOFSqceFAZRgPDq61FgAAAMs"]
[Tue Mar 24 02:02:34.295851 2026] [:error] [pid 56435:tid 56505] [client 74.248.130.207:1914] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/0x55.php"] [unique_id "acGAOsrwr-l5A-s9ryCYoAAAAQY"]
[Tue Mar 24 02:02:37.407093 2026] [:error] [pid 31798:tid 31809] [client 74.248.130.207:10469] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/0x55.php"] [unique_id "acGAPXdtW_1bksndFbZFDwAAAAk"]
[Tue Mar 24 02:02:39.331029 2026] [:error] [pid 56435:tid 56518] [client 74.248.130.207:14461] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f8.php"] [unique_id "acGAP8rwr-l5A-s9ryCYpwAAARE"]
[Tue Mar 24 02:02:40.944415 2026] [:error] [pid 56237:tid 56337] [client 74.248.130.207:27019] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f8.php"] [unique_id "acGAQAymO0MnzQb90MM3kAAAAJA"]
[Tue Mar 24 02:02:42.067334 2026] [:error] [pid 56435:tid 56520] [client 74.248.130.207:13122] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f8.php"] [unique_id "acGAQsrwr-l5A-s9ryCYtQAAARM"]
[Tue Mar 24 02:02:43.061106 2026] [:error] [pid 31798:tid 31820] [client 74.248.130.207:25674] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f8.php"] [unique_id "acGAQ3dtW_1bksndFbZFHAAAABQ"]
[Tue Mar 24 02:02:44.808919 2026] [:error] [pid 56238:tid 56365] [client 74.248.130.207:30194] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/X7T6.php"] [unique_id "acGARFSqceFAZRgPDq61HAAAANE"]
[Tue Mar 24 02:02:46.540206 2026] [:error] [pid 56435:tid 56519] [client 74.248.130.207:12593] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/X7T6.php"] [unique_id "acGARsrwr-l5A-s9ryCYwgAAARI"]
[Tue Mar 24 02:02:48.662903 2026] [:error] [pid 56237:tid 56322] [client 74.248.130.207:11298] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/X7T6.php"] [unique_id "acGASAymO0MnzQb90MM3lgAAAIE"]
[Tue Mar 24 02:02:49.824413 2026] [:error] [pid 31798:tid 31823] [client 74.248.130.207:27013] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/X7T6.php"] [unique_id "acGASXdtW_1bksndFbZFJgAAABc"]
[Tue Mar 24 02:02:52.703563 2026] [:error] [pid 31798:tid 31809] [client 74.248.130.207:29420] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/filemanager/dialog.php"] [unique_id "acGATHdtW_1bksndFbZFMAAAAAk"]
[Tue Mar 24 02:02:53.841534 2026] [:error] [pid 56236:tid 56316] [client 74.248.130.207:12154] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/filemanager/dialog.php"] [unique_id "acGATXapFgYp0uZ8twAvyAAAAFc"]
[Tue Mar 24 02:02:55.835550 2026] [proxy_fcgi:error] [pid 56435:tid 56523] [client 74.248.130.207:12595] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 02:02:56.401720 2026] [proxy_fcgi:error] [pid 56435:tid 56513] [client 74.248.130.207:12595] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 02:02:56.661286 2026] [proxy_fcgi:error] [pid 56435:tid 56521] [client 74.248.130.207:12595] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 02:02:56.989554 2026] [proxy_fcgi:error] [pid 56435:tid 56518] [client 74.248.130.207:12595] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 02:02:57.717006 2026] [proxy_fcgi:error] [pid 56435:tid 56515] [client 74.248.130.207:12595] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 02:02:58.095885 2026] [proxy_fcgi:error] [pid 56435:tid 56509] [client 74.248.130.207:12595] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 02:02:58.668362 2026] [proxy_fcgi:error] [pid 56435:tid 56525] [client 74.248.130.207:12595] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 02:02:58.982263 2026] [proxy_fcgi:error] [pid 56435:tid 56521] [client 74.248.130.207:12595] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 02:02:59.248670 2026] [proxy_fcgi:error] [pid 56435:tid 56518] [client 74.248.130.207:12595] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 02:02:59.573630 2026] [:error] [pid 56435:tid 56520] [client 74.248.130.207:12595] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/anti.php"] [unique_id "acGAU8rwr-l5A-s9ryCY5AAAARM"]
[Tue Mar 24 02:03:01.095081 2026] [:error] [pid 56238:tid 56358] [client 74.248.130.207:13137] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/anti.php"] [unique_id "acGAVVSqceFAZRgPDq61KQAAAMo"]
[Tue Mar 24 02:03:02.121816 2026] [:error] [pid 56435:tid 56522] [client 74.248.130.207:11128] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/anti.php"] [unique_id "acGAVsrwr-l5A-s9ryCY6gAAARU"]
[Tue Mar 24 02:03:03.925822 2026] [:error] [pid 56237:tid 56339] [client 74.248.130.207:14447] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/anti.php"] [unique_id "acGAVwymO0MnzQb90MM3oAAAAJI"]
[Tue Mar 24 02:03:05.060655 2026] [:error] [pid 56238:tid 56366] [client 74.248.130.207:9357] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/d996699999.php"] [unique_id "acGAWVSqceFAZRgPDq61LAAAANI"]
[Tue Mar 24 02:03:07.812175 2026] [:error] [pid 56435:tid 56518] [client 74.248.130.207:27014] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/d996699999.php"] [unique_id "acGAW8rwr-l5A-s9ryCY9QAAARE"]
[Tue Mar 24 02:03:09.308488 2026] [:error] [pid 31798:tid 31812] [client 74.248.130.207:12096] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/d996699999.php"] [unique_id "acGAXXdtW_1bksndFbZFUQAAAAw"]
[Tue Mar 24 02:03:10.532522 2026] [:error] [pid 31798:tid 31805] [client 74.248.130.207:10467] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/d996699999.php"] [unique_id "acGAXndtW_1bksndFbZFVAAAAAU"]
[Tue Mar 24 02:03:11.289210 2026] [:error] [pid 31798:tid 31814] [client 74.248.130.207:12552] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/inc.php"] [unique_id "acGAX3dtW_1bksndFbZFVgAAAA4"]
[Tue Mar 24 02:03:12.497959 2026] [:error] [pid 56238:tid 56371] [client 74.248.130.207:30172] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/inc.php"] [unique_id "acGAYFSqceFAZRgPDq61MAAAANc"]
[Tue Mar 24 02:03:14.591504 2026] [:error] [pid 56435:tid 56514] [client 74.248.130.207:12123] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/inc.php"] [unique_id "acGAYsrwr-l5A-s9ryCZAgAAAQ0"]
[Tue Mar 24 02:03:15.751546 2026] [:error] [pid 31798:tid 31805] [client 74.248.130.207:11086] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/inc.php"] [unique_id "acGAY3dtW_1bksndFbZFYQAAAAU"]
[Tue Mar 24 02:03:17.925072 2026] [:error] [pid 56236:tid 56309] [client 74.248.130.207:21510] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hehe.php"] [unique_id "acGAZXapFgYp0uZ8twAv0AAAAFA"]
[Tue Mar 24 02:03:20.116811 2026] [:error] [pid 31798:tid 31814] [client 74.248.130.207:7170] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hehe.php"] [unique_id "acGAaHdtW_1bksndFbZFawAAAA4"]
[Tue Mar 24 02:03:21.030051 2026] [:error] [pid 31798:tid 31813] [client 74.248.130.207:12559] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hehe.php"] [unique_id "acGAaXdtW_1bksndFbZFcAAAAA0"]
[Tue Mar 24 02:03:22.151481 2026] [:error] [pid 56238:tid 56371] [client 74.248.130.207:13176] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hehe.php"] [unique_id "acGAalSqceFAZRgPDq61OgAAANc"]
[Tue Mar 24 02:03:24.533723 2026] [:error] [pid 56238:tid 56357] [client 74.248.130.207:12089] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Rk41.php"] [unique_id "acGAbFSqceFAZRgPDq61QwAAAMk"]
[Tue Mar 24 02:03:25.634290 2026] [:error] [pid 56238:tid 56356] [client 74.248.130.207:12095] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Rk41.php"] [unique_id "acGAbVSqceFAZRgPDq61SQAAAMg"]
[Tue Mar 24 02:03:27.394517 2026] [:error] [pid 56236:tid 56294] [client 74.248.130.207:10722] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Rk41.php"] [unique_id "acGAb3apFgYp0uZ8twAv1QAAAEE"]
[Tue Mar 24 02:03:30.246087 2026] [:error] [pid 31798:tid 31821] [client 74.248.130.207:9375] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Rk41.php"] [unique_id "acGAcndtW_1bksndFbZFhAAAABU"]
[Tue Mar 24 02:03:31.583728 2026] [:error] [pid 56435:tid 56519] [client 74.248.130.207:13181] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lalala.php"] [unique_id "acGAc8rwr-l5A-s9ryCZIwAAARI"]
[Tue Mar 24 02:03:32.597018 2026] [:error] [pid 56236:tid 56298] [client 74.248.130.207:11096] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lalala.php"] [unique_id "acGAdHapFgYp0uZ8twAv2QAAAEU"]
[Tue Mar 24 02:03:37.018960 2026] [:error] [pid 56238:tid 56357] [client 74.248.130.207:12037] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lalala.php"] [unique_id "acGAeVSqceFAZRgPDq61VwAAAMk"]
[Tue Mar 24 02:03:39.461968 2026] [:error] [pid 56236:tid 56317] [client 74.248.130.207:17773] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lalala.php"] [unique_id "acGAe3apFgYp0uZ8twAv3wAAAFg"]
[Tue Mar 24 02:03:40.911057 2026] [:error] [pid 31798:tid 31803] [client 74.248.130.207:30153] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/SS72_gUreM.php"] [unique_id "acGAfHdtW_1bksndFbZFqwAAAAM"]
[Tue Mar 24 02:03:42.969685 2026] [:error] [pid 56435:tid 56514] [client 74.248.130.207:30148] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/SS72_gUreM.php"] [unique_id "acGAfsrwr-l5A-s9ryCZPwAAAQ0"]
[Tue Mar 24 02:03:43.948465 2026] [:error] [pid 56238:tid 56367] [client 74.248.130.207:26993] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/SS72_gUreM.php"] [unique_id "acGAf1SqceFAZRgPDq61WwAAANM"]
[Tue Mar 24 02:03:44.887094 2026] [:error] [pid 56236:tid 56301] [client 74.248.130.207:13151] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/SS72_gUreM.php"] [unique_id "acGAgHapFgYp0uZ8twAv4wAAAEg"]
[Tue Mar 24 02:03:46.334297 2026] [:error] [pid 56435:tid 56516] [client 74.248.130.207:9079] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ak.php/wp-admin/async-upload.php"] [unique_id "acGAgsrwr-l5A-s9ryCZRAAAAQ8"]
[Tue Mar 24 02:03:47.119919 2026] [:error] [pid 31798:tid 31820] [client 74.248.130.207:13156] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ak.php/wp-admin/async-upload.php"] [unique_id "acGAg3dtW_1bksndFbZFvAAAABQ"]
[Tue Mar 24 02:03:49.638320 2026] [:error] [pid 56236:tid 56308] [client 74.248.130.207:30182] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ak.php/wp-admin/async-upload.php"] [unique_id "acGAhXapFgYp0uZ8twAv5QAAAE8"]
[Tue Mar 24 02:03:55.379074 2026] [:error] [pid 56435:tid 56510] [client 74.248.130.207:24090] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ak.php/wp-admin/async-upload.php"] [unique_id "acGAi8rwr-l5A-s9ryCZVwAAAQo"]
[Tue Mar 24 02:04:02.219265 2026] [proxy_fcgi:error] [pid 31798:tid 31818] [client 74.248.130.207:21263] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 02:04:02.480144 2026] [proxy_fcgi:error] [pid 31798:tid 31801] [client 74.248.130.207:21263] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 02:04:02.793098 2026] [proxy_fcgi:error] [pid 31798:tid 31800] [client 74.248.130.207:21263] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 02:04:03.053490 2026] [proxy_fcgi:error] [pid 31798:tid 31813] [client 74.248.130.207:21263] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 02:04:03.313944 2026] [proxy_fcgi:error] [pid 31798:tid 31822] [client 74.248.130.207:21263] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 02:04:03.572934 2026] [proxy_fcgi:error] [pid 31798:tid 31810] [client 74.248.130.207:21263] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 02:04:03.833605 2026] [proxy_fcgi:error] [pid 31798:tid 31824] [client 74.248.130.207:21263] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 02:04:04.092409 2026] [proxy_fcgi:error] [pid 31798:tid 31817] [client 74.248.130.207:21263] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 02:04:04.385760 2026] [proxy_fcgi:error] [pid 31798:tid 31806] [client 74.248.130.207:21263] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 02:04:04.645543 2026] [proxy_fcgi:error] [pid 31798:tid 31808] [client 74.248.130.207:21263] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 02:04:04.905130 2026] [proxy_fcgi:error] [pid 31798:tid 31801] [client 74.248.130.207:21263] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 02:04:05.160289 2026] [:error] [pid 31798:tid 31800] [client 74.248.130.207:21263] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/24.php"] [unique_id "acGAlXdtW_1bksndFbZF6gAAAAA"]
[Tue Mar 24 02:04:58.799364 2026] [:error] [pid 56236:tid 56296] [client 74.248.130.207:24077] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/reujz.php"] [unique_id "acGAynapFgYp0uZ8twAwMwAAAEM"]
[Tue Mar 24 02:05:00.371757 2026] [:error] [pid 56238:tid 56371] [client 74.248.130.207:11287] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/reujz.php"] [unique_id "acGAzFSqceFAZRgPDq61xgAAANc"]
[Tue Mar 24 02:05:02.895046 2026] [:error] [pid 56238:tid 56353] [client 74.248.130.207:26982] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/reujz.php"] [unique_id "acGAzlSqceFAZRgPDq61zgAAAMU"]
[Tue Mar 24 02:05:04.720919 2026] [proxy_fcgi:error] [pid 56237:tid 56338] [client 74.248.130.207:11325] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 02:05:05.036821 2026] [proxy_fcgi:error] [pid 56237:tid 56324] [client 74.248.130.207:11325] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 02:05:05.387010 2026] [proxy_fcgi:error] [pid 56237:tid 56326] [client 74.248.130.207:11325] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 02:05:05.706098 2026] [proxy_fcgi:error] [pid 56237:tid 56336] [client 74.248.130.207:11325] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 02:05:06.107848 2026] [proxy_fcgi:error] [pid 56237:tid 56344] [client 74.248.130.207:11325] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 02:05:06.488677 2026] [proxy_fcgi:error] [pid 56237:tid 56340] [client 74.248.130.207:11325] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 02:05:07.503814 2026] [proxy_fcgi:error] [pid 56237:tid 56341] [client 74.248.130.207:11325] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 02:05:07.868605 2026] [proxy_fcgi:error] [pid 56237:tid 56335] [client 74.248.130.207:11325] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 02:05:09.075409 2026] [proxy_fcgi:error] [pid 56237:tid 56322] [client 74.248.130.207:11325] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 02:05:09.402926 2026] [proxy_fcgi:error] [pid 56237:tid 56339] [client 74.248.130.207:11325] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 02:05:09.790687 2026] [proxy_fcgi:error] [pid 56237:tid 56338] [client 74.248.130.207:11325] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 02:05:10.048555 2026] [:error] [pid 56237:tid 56324] [client 74.248.130.207:11325] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "acGA1gymO0MnzQb90MM4JwAAAIM"]
[Tue Mar 24 02:05:12.944655 2026] [:error] [pid 56237:tid 56341] [client 74.248.130.207:22297] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "acGA2AymO0MnzQb90MM4MwAAAJQ"]
[Tue Mar 24 02:05:13.943433 2026] [:error] [pid 56237:tid 56330] [client 74.248.130.207:7168] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "acGA2QymO0MnzQb90MM4OgAAAIk"]
[Tue Mar 24 02:05:15.412540 2026] [:error] [pid 31798:tid 31819] [client 74.248.130.207:10432] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "acGA23dtW_1bksndFbZG-AAAABM"]
[Tue Mar 24 02:05:16.951709 2026] [:error] [pid 31798:tid 31807] [client 74.248.130.207:24118] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/manager.php"] [unique_id "acGA3HdtW_1bksndFbZG-wAAAAc"]
[Tue Mar 24 02:05:18.222638 2026] [:error] [pid 31798:tid 31816] [client 74.248.130.207:11307] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/manager.php"] [unique_id "acGA3ndtW_1bksndFbZHBgAAABA"]
[Tue Mar 24 02:05:20.052434 2026] [:error] [pid 56238:tid 56353] [client 74.248.130.207:21511] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/manager.php"] [unique_id "acGA4FSqceFAZRgPDq62AAAAAMU"]
[Tue Mar 24 02:05:21.110325 2026] [:error] [pid 56238:tid 56365] [client 74.248.130.207:1876] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/manager.php"] [unique_id "acGA4VSqceFAZRgPDq62CQAAANE"]
[Tue Mar 24 02:05:22.753316 2026] [:error] [pid 56435:tid 56525] [client 74.248.130.207:26950] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "acGA4srwr-l5A-s9ryCZ8AAAARg"]
[Tue Mar 24 02:05:24.058109 2026] [:error] [pid 56237:tid 56345] [client 74.248.130.207:21536] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "acGA5AymO0MnzQb90MM4UQAAAJg"]
[Tue Mar 24 02:05:27.046597 2026] [:error] [pid 56435:tid 56504] [client 74.248.130.207:30158] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "acGA58rwr-l5A-s9ryCaAwAAAQU"]
[Tue Mar 24 02:05:28.356986 2026] [:error] [pid 56236:tid 56296] [client 74.248.130.207:30167] [client 74.248.130.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "acGA6HapFgYp0uZ8twAwZgAAAEM"]
[Tue Mar 24 07:22:12.304757 2026] [proxy_fcgi:error] [pid 3030:tid 3052] [client 20.234.11.56:1601] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 07:22:12.654900 2026] [proxy_fcgi:error] [pid 3030:tid 3050] [client 20.234.11.56:1601] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 07:22:12.995075 2026] [proxy_fcgi:error] [pid 3030:tid 3070] [client 20.234.11.56:1601] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 07:22:13.253581 2026] [proxy_fcgi:error] [pid 3030:tid 3054] [client 20.234.11.56:1601] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 07:22:13.552868 2026] [proxy_fcgi:error] [pid 3030:tid 3061] [client 20.234.11.56:1601] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 07:22:13.807219 2026] [proxy_fcgi:error] [pid 3030:tid 3057] [client 20.234.11.56:1601] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 07:22:14.261998 2026] [proxy_fcgi:error] [pid 3030:tid 3058] [client 20.234.11.56:1601] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 07:22:14.517042 2026] [proxy_fcgi:error] [pid 3030:tid 3055] [client 20.234.11.56:1601] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 07:22:14.836148 2026] [proxy_fcgi:error] [pid 3030:tid 3068] [client 20.234.11.56:1601] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 07:22:15.125711 2026] [proxy_fcgi:error] [pid 3030:tid 3069] [client 20.234.11.56:1601] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 07:22:15.419207 2026] [:error] [pid 3030:tid 3062] [client 20.234.11.56:1601] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/buc.php"] [unique_id "acHLJwyOuILyynfcqfkG0AAAAA0"]
[Tue Mar 24 07:22:16.357653 2026] [:error] [pid 3137:tid 3163] [client 20.234.11.56:1627] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/buc.php"] [unique_id "acHLKJdZesutm6dfYM8YAgAAANg"]
[Tue Mar 24 07:22:17.428337 2026] [:error] [pid 38767:tid 38790] [client 20.234.11.56:31578] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/buc.php"] [unique_id "acHLKfwkUqN4GJAI5oWeZAAAARQ"]
[Tue Mar 24 07:22:18.718505 2026] [:error] [pid 38767:tid 38781] [client 20.234.11.56:30260] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/buc.php"] [unique_id "acHLKvwkUqN4GJAI5oWeaAAAAQs"]
[Tue Mar 24 07:22:19.644672 2026] [:error] [pid 3032:tid 3128] [client 20.234.11.56:1210] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ww.php"] [unique_id "acHLKya_-JXXD03-JNzghwAAAJg"]
[Tue Mar 24 07:22:20.554112 2026] [:error] [pid 64198:tid 64203] [client 20.234.11.56:35333] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ww.php"] [unique_id "acHLLHVzJqf6OS_oSZ39XQAAAUM"]
[Tue Mar 24 07:22:21.389071 2026] [:error] [pid 3137:tid 3149] [client 20.234.11.56:39782] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ww.php"] [unique_id "acHLLZdZesutm6dfYM8YEwAAAMo"]
[Tue Mar 24 07:22:22.942838 2026] [:error] [pid 3030:tid 3060] [client 20.234.11.56:33518] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ww.php"] [unique_id "acHLLgyOuILyynfcqfkG2QAAAAs"]
[Tue Mar 24 07:22:23.575802 2026] [:error] [pid 3137:tid 3143] [client 20.234.11.56:52880] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/rithin.php"] [unique_id "acHLL5dZesutm6dfYM8YGAAAAMQ"]
[Tue Mar 24 07:22:24.527295 2026] [:error] [pid 3032:tid 3108] [client 20.234.11.56:32001] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/rithin.php"] [unique_id "acHLMCa_-JXXD03-JNzgiwAAAIU"]
[Tue Mar 24 07:22:26.899990 2026] [:error] [pid 3030:tid 3063] [client 20.234.11.56:1855] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/rithin.php"] [unique_id "acHLMgyOuILyynfcqfkG3wAAAA4"]
[Tue Mar 24 07:22:27.808923 2026] [:error] [pid 38767:tid 38792] [client 20.234.11.56:52866] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/rithin.php"] [unique_id "acHLM_wkUqN4GJAI5oWehQAAARY"]
[Tue Mar 24 07:22:29.365740 2026] [:error] [pid 3137:tid 3142] [client 20.234.11.56:1396] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/as.php"] [unique_id "acHLNZdZesutm6dfYM8YIAAAAMM"]
[Tue Mar 24 07:22:30.670141 2026] [:error] [pid 64198:tid 64209] [client 20.234.11.56:1845] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/as.php"] [unique_id "acHLNnVzJqf6OS_oSZ39YwAAAUk"]
[Tue Mar 24 07:22:32.948624 2026] [:error] [pid 3031:tid 3078] [client 20.234.11.56:32041] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/as.php"] [unique_id "acHLOKJBKytnG47nuibwzQAAAEI"]
[Tue Mar 24 07:22:34.045682 2026] [:error] [pid 38767:tid 38774] [client 20.234.11.56:1388] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/as.php"] [unique_id "acHLOvwkUqN4GJAI5oWejwAAAQQ"]
[Tue Mar 24 07:22:34.940033 2026] [:error] [pid 3032:tid 3120] [client 20.234.11.56:1162] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xfun.php"] [unique_id "acHLOia_-JXXD03-JNzglQAAAJE"]
[Tue Mar 24 07:22:35.659058 2026] [:error] [pid 38767:tid 38782] [client 20.234.11.56:50567] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xfun.php"] [unique_id "acHLO_wkUqN4GJAI5oWekwAAAQw"]
[Tue Mar 24 07:22:36.975783 2026] [:error] [pid 3137:tid 3160] [client 20.234.11.56:52239] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xfun.php"] [unique_id "acHLPJdZesutm6dfYM8YJAAAANU"]
[Tue Mar 24 07:22:37.812244 2026] [:error] [pid 38767:tid 38784] [client 20.234.11.56:50620] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xfun.php"] [unique_id "acHLPfwkUqN4GJAI5oWenAAAAQ4"]
[Tue Mar 24 07:22:38.482892 2026] [:error] [pid 3031:tid 3096] [client 20.234.11.56:54993] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws88.php"] [unique_id "acHLPqJBKytnG47nuibw2wAAAFQ"]
[Tue Mar 24 07:22:39.476342 2026] [:error] [pid 3030:tid 3071] [client 20.234.11.56:55011] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws88.php"] [unique_id "acHLPwyOuILyynfcqfkG7QAAABY"]
[Tue Mar 24 07:22:40.221591 2026] [:error] [pid 3032:tid 3120] [client 20.234.11.56:30834] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws88.php"] [unique_id "acHLQCa_-JXXD03-JNzgogAAAJE"]
[Tue Mar 24 07:22:41.566151 2026] [:error] [pid 3031:tid 3090] [client 20.234.11.56:50603] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws88.php"] [unique_id "acHLQaJBKytnG47nuibw3wAAAE4"]
[Tue Mar 24 07:22:42.512707 2026] [:error] [pid 64198:tid 64201] [client 20.234.11.56:30847] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws86.php"] [unique_id "acHLQnVzJqf6OS_oSZ39cwAAAUE"]
[Tue Mar 24 07:22:43.492186 2026] [:error] [pid 3030:tid 3053] [client 20.234.11.56:52260] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws86.php"] [unique_id "acHLQwyOuILyynfcqfkG8AAAAAQ"]
[Tue Mar 24 07:22:45.260900 2026] [:error] [pid 3032:tid 3116] [client 20.234.11.56:52261] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws86.php"] [unique_id "acHLRSa_-JXXD03-JNzgqAAAAI0"]
[Tue Mar 24 07:22:46.397888 2026] [:error] [pid 64198:tid 64210] [client 20.234.11.56:47388] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws86.php"] [unique_id "acHLRnVzJqf6OS_oSZ39hAAAAUo"]
[Tue Mar 24 07:22:47.445962 2026] [:error] [pid 3030:tid 3054] [client 20.234.11.56:25589] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws85.php"] [unique_id "acHLRwyOuILyynfcqfkG8wAAAAU"]
[Tue Mar 24 07:22:49.261513 2026] [:error] [pid 64198:tid 64211] [client 20.234.11.56:64472] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws85.php"] [unique_id "acHLSXVzJqf6OS_oSZ39kQAAAUs"]
[Tue Mar 24 07:22:50.973843 2026] [:error] [pid 3137:tid 3158] [client 20.234.11.56:37409] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws85.php"] [unique_id "acHLSpdZesutm6dfYM8YKQAAANM"]
[Tue Mar 24 07:22:53.440788 2026] [:error] [pid 64198:tid 64209] [client 20.234.11.56:53382] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws85.php"] [unique_id "acHLTXVzJqf6OS_oSZ39mgAAAUk"]
[Tue Mar 24 07:22:54.858310 2026] [:error] [pid 3030:tid 3073] [client 20.234.11.56:61566] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/Cap.php"] [unique_id "acHLTgyOuILyynfcqfkG-wAAABg"]
[Tue Mar 24 07:22:56.109185 2026] [:error] [pid 3032:tid 3105] [client 20.234.11.56:25565] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/Cap.php"] [unique_id "acHLUCa_-JXXD03-JNzgsAAAAII"]
[Tue Mar 24 07:22:58.149706 2026] [:error] [pid 3137:tid 3157] [client 20.234.11.56:54988] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/Cap.php"] [unique_id "acHLUpdZesutm6dfYM8YLwAAANI"]
[Tue Mar 24 07:22:59.018137 2026] [:error] [pid 3137:tid 3140] [client 20.234.11.56:47452] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/Cap.php"] [unique_id "acHLU5dZesutm6dfYM8YNwAAAME"]
[Tue Mar 24 07:23:00.242517 2026] [:error] [pid 3137:tid 3151] [client 20.234.11.56:61555] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/h2.php"] [unique_id "acHLVJdZesutm6dfYM8YQAAAAMw"]
[Tue Mar 24 07:23:01.533358 2026] [:error] [pid 3137:tid 3162] [client 20.234.11.56:25536] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/h2.php"] [unique_id "acHLVZdZesutm6dfYM8YRgAAANc"]
[Tue Mar 24 07:23:02.335821 2026] [:error] [pid 3137:tid 3142] [client 20.234.11.56:47460] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/h2.php"] [unique_id "acHLVpdZesutm6dfYM8YSwAAAMM"]
[Tue Mar 24 07:23:03.850754 2026] [:error] [pid 3032:tid 3121] [client 20.234.11.56:58885] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/h2.php"] [unique_id "acHLVya_-JXXD03-JNzgugAAAJI"]
[Tue Mar 24 07:23:04.701198 2026] [:error] [pid 3137:tid 3146] [client 20.234.11.56:47486] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/dass.php"] [unique_id "acHLWJdZesutm6dfYM8YVQAAAMc"]
[Tue Mar 24 07:23:05.518516 2026] [:error] [pid 3031:tid 3088] [client 20.234.11.56:56605] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/dass.php"] [unique_id "acHLWaJBKytnG47nuibw8QAAAEw"]
[Tue Mar 24 07:23:06.538047 2026] [:error] [pid 3137:tid 3158] [client 20.234.11.56:50565] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/dass.php"] [unique_id "acHLWpdZesutm6dfYM8YXwAAANM"]
[Tue Mar 24 07:23:07.586194 2026] [:error] [pid 3030:tid 3064] [client 20.234.11.56:57169] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/dass.php"] [unique_id "acHLWwyOuILyynfcqfkG_wAAAA8"]
[Tue Mar 24 07:23:08.810515 2026] [:error] [pid 3030:tid 3058] [client 20.234.11.56:61549] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/s.php"] [unique_id "acHLXAyOuILyynfcqfkHAwAAAAk"]
[Tue Mar 24 07:23:09.492383 2026] [:error] [pid 3030:tid 3068] [client 20.234.11.56:25590] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/s.php"] [unique_id "acHLXQyOuILyynfcqfkHBQAAABM"]
[Tue Mar 24 07:23:10.385662 2026] [:error] [pid 3031:tid 3099] [client 20.234.11.56:53423] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/s.php"] [unique_id "acHLXqJBKytnG47nuibw-AAAAFc"]
[Tue Mar 24 07:23:11.326079 2026] [:error] [pid 3137:tid 3150] [client 20.234.11.56:34672] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/s.php"] [unique_id "acHLX5dZesutm6dfYM8YaQAAAMs"]
[Tue Mar 24 07:23:12.284822 2026] [:error] [pid 64198:tid 64221] [client 20.234.11.56:47442] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/kj.php"] [unique_id "acHLYHVzJqf6OS_oSZ39xQAAAVU"]
[Tue Mar 24 07:23:12.978252 2026] [:error] [pid 64198:tid 64201] [client 20.234.11.56:58902] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/kj.php"] [unique_id "acHLYHVzJqf6OS_oSZ39xwAAAUE"]
[Tue Mar 24 07:23:13.659119 2026] [:error] [pid 64198:tid 64206] [client 20.234.11.56:54916] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/kj.php"] [unique_id "acHLYXVzJqf6OS_oSZ39yQAAAUY"]
[Tue Mar 24 07:23:14.888925 2026] [:error] [pid 64198:tid 64223] [client 20.234.11.56:56601] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/kj.php"] [unique_id "acHLYnVzJqf6OS_oSZ390gAAAVc"]
[Tue Mar 24 07:23:15.948640 2026] [proxy_fcgi:error] [pid 3137:tid 3142] [client 20.234.11.56:29805] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 07:23:16.205364 2026] [proxy_fcgi:error] [pid 3137:tid 3155] [client 20.234.11.56:29805] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 07:23:16.557837 2026] [proxy_fcgi:error] [pid 3137:tid 3149] [client 20.234.11.56:29805] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 07:23:16.822570 2026] [proxy_fcgi:error] [pid 3137:tid 3144] [client 20.234.11.56:29805] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 07:23:17.144863 2026] [proxy_fcgi:error] [pid 3137:tid 3159] [client 20.234.11.56:29805] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 07:23:17.467869 2026] [proxy_fcgi:error] [pid 3137:tid 3156] [client 20.234.11.56:29805] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 07:23:17.723191 2026] [proxy_fcgi:error] [pid 3137:tid 3141] [client 20.234.11.56:29805] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 07:23:18.233661 2026] [proxy_fcgi:error] [pid 3137:tid 3160] [client 20.234.11.56:29805] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 07:23:18.560505 2026] [proxy_fcgi:error] [pid 3137:tid 3161] [client 20.234.11.56:29805] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 07:23:18.830800 2026] [proxy_fcgi:error] [pid 3137:tid 3152] [client 20.234.11.56:29805] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 07:23:19.082869 2026] [:error] [pid 3137:tid 3146] [client 20.234.11.56:29805] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "acHLZ5dZesutm6dfYM8YfgAAAMc"]
[Tue Mar 24 07:23:19.848859 2026] [:error] [pid 64198:tid 64205] [client 20.234.11.56:47469] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "acHLZ3VzJqf6OS_oSZ395gAAAUU"]
[Tue Mar 24 07:23:21.188504 2026] [:error] [pid 3031:tid 3085] [client 20.234.11.56:47444] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "acHLaaJBKytnG47nuibxEwAAAEk"]
[Tue Mar 24 07:23:22.149773 2026] [:error] [pid 3032:tid 3118] [client 20.234.11.56:47407] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "acHLaia_-JXXD03-JNzg8AAAAI8"]
[Tue Mar 24 07:23:22.853088 2026] [:error] [pid 3137:tid 3152] [client 20.234.11.56:1768] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/public/ws49.php"] [unique_id "acHLapdZesutm6dfYM8YjAAAAM0"]
[Tue Mar 24 07:23:24.900166 2026] [:error] [pid 38767:tid 38788] [client 20.234.11.56:41740] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/public/ws49.php"] [unique_id "acHLbPwkUqN4GJAI5oWevgAAARI"]
[Tue Mar 24 07:23:25.762203 2026] [:error] [pid 3030:tid 3052] [client 20.234.11.56:59627] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/public/ws49.php"] [unique_id "acHLbQyOuILyynfcqfkHHgAAAAM"]
[Tue Mar 24 07:23:26.847980 2026] [:error] [pid 3031:tid 3083] [client 20.234.11.56:38064] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/public/ws49.php"] [unique_id "acHLbqJBKytnG47nuibxIAAAAEc"]
[Tue Mar 24 07:23:27.888709 2026] [:error] [pid 3032:tid 3115] [client 20.234.11.56:54929] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/gifclass.php"] [unique_id "acHLbya_-JXXD03-JNzhBAAAAIw"]
[Tue Mar 24 07:23:29.149250 2026] [:error] [pid 38767:tid 38789] [client 20.234.11.56:41736] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/gifclass.php"] [unique_id "acHLcfwkUqN4GJAI5oWexQAAARM"]
[Tue Mar 24 07:23:30.013080 2026] [:error] [pid 3031:tid 3077] [client 20.234.11.56:29815] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/gifclass.php"] [unique_id "acHLcqJBKytnG47nuibxJQAAAEE"]
[Tue Mar 24 07:23:31.015411 2026] [:error] [pid 3137:tid 3159] [client 20.234.11.56:63738] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/gifclass.php"] [unique_id "acHLc5dZesutm6dfYM8YlQAAANQ"]
[Tue Mar 24 07:23:31.916556 2026] [:error] [pid 3137:tid 3155] [client 20.234.11.56:34664] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/sa.php7"] [unique_id "acHLc5dZesutm6dfYM8YmQAAANA"]
[Tue Mar 24 07:23:32.746310 2026] [:error] [pid 3137:tid 3142] [client 20.234.11.56:47451] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/sa.php7"] [unique_id "acHLdJdZesutm6dfYM8YnAAAAMM"]
[Tue Mar 24 07:23:34.471988 2026] [:error] [pid 3032:tid 3107] [client 20.234.11.56:63742] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/sa.php7"] [unique_id "acHLdia_-JXXD03-JNzhCQAAAIQ"]
[Tue Mar 24 07:23:36.173648 2026] [:error] [pid 3032:tid 3127] [client 20.234.11.56:61132] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/sa.php7"] [unique_id "acHLeCa_-JXXD03-JNzhFAAAAJc"]
[Tue Mar 24 07:23:40.817937 2026] [:error] [pid 3031:tid 3096] [client 20.234.11.56:45213] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/jp.php"] [unique_id "acHLfKJBKytnG47nuibxMAAAAFQ"]
[Tue Mar 24 07:23:42.765846 2026] [:error] [pid 3137:tid 3145] [client 20.234.11.56:55369] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/jp.php"] [unique_id "acHLfpdZesutm6dfYM8YswAAAMY"]
[Tue Mar 24 07:23:45.535197 2026] [:error] [pid 3030:tid 3069] [client 20.234.11.56:29817] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/jp.php"] [unique_id "acHLgQyOuILyynfcqfkHLAAAABQ"]
[Tue Mar 24 07:23:48.150988 2026] [:error] [pid 38767:tid 38790] [client 20.234.11.56:25586] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/jp.php"] [unique_id "acHLhPwkUqN4GJAI5oWe4AAAARQ"]
[Tue Mar 24 07:23:48.834744 2026] [:error] [pid 3031:tid 3098] [client 20.234.11.56:42255] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-good.php"] [unique_id "acHLhKJBKytnG47nuibxNgAAAFY"]
[Tue Mar 24 07:23:49.835548 2026] [:error] [pid 3137:tid 3153] [client 20.234.11.56:56587] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-good.php"] [unique_id "acHLhZdZesutm6dfYM8YxgAAAM4"]
[Tue Mar 24 07:23:51.155856 2026] [:error] [pid 64198:tid 64220] [client 20.234.11.56:41817] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-good.php"] [unique_id "acHLh3VzJqf6OS_oSZ3-KAAAAVQ"]
[Tue Mar 24 07:23:52.881990 2026] [:error] [pid 38767:tid 38779] [client 20.234.11.56:34668] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-good.php"] [unique_id "acHLiPwkUqN4GJAI5oWe9gAAAQk"]
[Tue Mar 24 07:23:54.286601 2026] [:error] [pid 64198:tid 64213] [client 20.234.11.56:30830] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/a5.php"] [unique_id "acHLinVzJqf6OS_oSZ3-MAAAAU0"]
[Tue Mar 24 07:23:59.396494 2026] [:error] [pid 3137:tid 3159] [client 20.234.11.56:52875] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/a5.php"] [unique_id "acHLj5dZesutm6dfYM8Y4QAAANQ"]
[Tue Mar 24 07:24:00.130692 2026] [:error] [pid 64198:tid 64218] [client 20.234.11.56:30233] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/a5.php"] [unique_id "acHLkHVzJqf6OS_oSZ3-PgAAAVI"]
[Tue Mar 24 07:24:00.910805 2026] [:error] [pid 3137:tid 3153] [client 20.234.11.56:30268] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/a5.php"] [unique_id "acHLkJdZesutm6dfYM8Y4wAAAM4"]
[Tue Mar 24 07:24:01.527256 2026] [:error] [pid 3032:tid 3122] [client 20.234.11.56:51771] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/amp.php"] [unique_id "acHLkSa_-JXXD03-JNzhMQAAAJM"]
[Tue Mar 24 07:24:02.176385 2026] [:error] [pid 64198:tid 64212] [client 20.234.11.56:23002] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/amp.php"] [unique_id "acHLknVzJqf6OS_oSZ3-PwAAAUw"]
[Tue Mar 24 07:24:02.851628 2026] [:error] [pid 38767:tid 38786] [client 20.234.11.56:31612] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/amp.php"] [unique_id "acHLkvwkUqN4GJAI5oWfAQAAARA"]
[Tue Mar 24 07:24:03.775896 2026] [:error] [pid 64198:tid 64222] [client 20.234.11.56:1619] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/amp.php"] [unique_id "acHLk3VzJqf6OS_oSZ3-SAAAAVY"]
[Tue Mar 24 07:24:04.853170 2026] [:error] [pid 64198:tid 64218] [client 20.234.11.56:1650] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/init.php"] [unique_id "acHLlHVzJqf6OS_oSZ3-TAAAAVI"]
[Tue Mar 24 07:24:06.561035 2026] [:error] [pid 64198:tid 64219] [client 20.234.11.56:64385] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/init.php"] [unique_id "acHLlnVzJqf6OS_oSZ3-UAAAAVM"]
[Tue Mar 24 07:24:07.448956 2026] [:error] [pid 3137:tid 3159] [client 20.234.11.56:1614] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/init.php"] [unique_id "acHLl5dZesutm6dfYM8Y8wAAANQ"]
[Tue Mar 24 07:24:08.160438 2026] [:error] [pid 3137:tid 3147] [client 20.234.11.56:29756] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/init.php"] [unique_id "acHLmJdZesutm6dfYM8Y9QAAAMg"]
[Tue Mar 24 07:24:09.059904 2026] [:error] [pid 3137:tid 3156] [client 20.234.11.56:29713] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/gettest.php"] [unique_id "acHLmZdZesutm6dfYM8Y-QAAANE"]
[Tue Mar 24 07:24:09.703965 2026] [:error] [pid 3137:tid 3142] [client 20.234.11.56:29746] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/gettest.php"] [unique_id "acHLmZdZesutm6dfYM8Y_gAAAMM"]
[Tue Mar 24 07:24:10.530482 2026] [:error] [pid 3137:tid 3141] [client 20.234.11.56:46812] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/gettest.php"] [unique_id "acHLmpdZesutm6dfYM8ZAAAAAMI"]
[Tue Mar 24 07:24:11.807163 2026] [:error] [pid 3031:tid 3079] [client 20.234.11.56:23021] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/gettest.php"] [unique_id "acHLm6JBKytnG47nuibxQQAAAEM"]
[Tue Mar 24 07:24:12.466880 2026] [:error] [pid 3032:tid 3122] [client 20.234.11.56:29719] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/myfile.php"] [unique_id "acHLnCa_-JXXD03-JNzhOwAAAJM"]
[Tue Mar 24 07:24:13.342168 2026] [:error] [pid 3137:tid 3156] [client 20.234.11.56:37052] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/myfile.php"] [unique_id "acHLnZdZesutm6dfYM8ZAwAAANE"]
[Tue Mar 24 07:24:14.226061 2026] [:error] [pid 3032:tid 3115] [client 20.234.11.56:1622] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/myfile.php"] [unique_id "acHLnia_-JXXD03-JNzhQAAAAIw"]
[Tue Mar 24 07:24:15.063980 2026] [:error] [pid 64198:tid 64209] [client 20.234.11.56:48553] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/myfile.php"] [unique_id "acHLn3VzJqf6OS_oSZ3-XAAAAUk"]
[Tue Mar 24 07:24:15.985254 2026] [:error] [pid 3137:tid 3144] [client 20.234.11.56:22999] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/sid3.php"] [unique_id "acHLn5dZesutm6dfYM8ZCwAAAMU"]
[Tue Mar 24 07:24:16.563476 2026] [:error] [pid 3032:tid 3119] [client 20.234.11.56:22997] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/sid3.php"] [unique_id "acHLoCa_-JXXD03-JNzhQgAAAJA"]
[Tue Mar 24 07:24:17.358096 2026] [:error] [pid 3032:tid 3111] [client 20.234.11.56:22978] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/sid3.php"] [unique_id "acHLoSa_-JXXD03-JNzhQwAAAIg"]
[Tue Mar 24 07:24:18.220310 2026] [proxy_fcgi:error] [pid 3137:tid 3161] [client 20.234.11.56:60589] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 07:24:18.476957 2026] [proxy_fcgi:error] [pid 3137:tid 3144] [client 20.234.11.56:60589] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 07:24:18.730856 2026] [proxy_fcgi:error] [pid 3137:tid 3153] [client 20.234.11.56:60589] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 07:24:18.985743 2026] [proxy_fcgi:error] [pid 3137:tid 3157] [client 20.234.11.56:60589] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 07:24:19.308086 2026] [proxy_fcgi:error] [pid 3137:tid 3140] [client 20.234.11.56:60589] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 07:24:19.599559 2026] [proxy_fcgi:error] [pid 3137:tid 3150] [client 20.234.11.56:60589] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 07:24:20.108523 2026] [proxy_fcgi:error] [pid 3137:tid 3144] [client 20.234.11.56:60589] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 07:24:20.404075 2026] [proxy_fcgi:error] [pid 3137:tid 3147] [client 20.234.11.56:60589] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 07:24:20.891105 2026] [proxy_fcgi:error] [pid 3137:tid 3153] [client 20.234.11.56:60589] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 07:24:21.145911 2026] [proxy_fcgi:error] [pid 3137:tid 3151] [client 20.234.11.56:60589] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 07:24:21.395941 2026] [:error] [pid 3137:tid 3157] [client 20.234.11.56:60589] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/install.php"] [unique_id "acHLpZdZesutm6dfYM8ZKQAAANI"]
[Tue Mar 24 07:24:22.311433 2026] [:error] [pid 3137:tid 3145] [client 20.234.11.56:29332] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/install.php"] [unique_id "acHLppdZesutm6dfYM8ZKgAAAMY"]
[Tue Mar 24 07:24:23.122267 2026] [:error] [pid 3137:tid 3142] [client 20.234.11.56:22984] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/install.php"] [unique_id "acHLp5dZesutm6dfYM8ZLQAAAMM"]
[Tue Mar 24 07:24:23.885714 2026] [:error] [pid 3137:tid 3141] [client 20.234.11.56:46811] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/install.php"] [unique_id "acHLp5dZesutm6dfYM8ZLwAAAMI"]
[Tue Mar 24 07:24:24.710932 2026] [:error] [pid 3031:tid 3093] [client 20.234.11.56:64442] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/public/wp-blog.php"] [unique_id "acHLqKJBKytnG47nuibxRAAAAFE"]
[Tue Mar 24 07:24:25.866904 2026] [:error] [pid 64198:tid 64215] [client 20.234.11.56:22982] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/public/wp-blog.php"] [unique_id "acHLqXVzJqf6OS_oSZ3-bQAAAU8"]
[Tue Mar 24 07:24:27.023747 2026] [:error] [pid 3032:tid 3105] [client 20.234.11.56:34209] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/public/wp-blog.php"] [unique_id "acHLqya_-JXXD03-JNzhRgAAAII"]
[Tue Mar 24 07:24:28.403064 2026] [:error] [pid 3137:tid 3157] [client 20.234.11.56:58943] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/public/wp-blog.php"] [unique_id "acHLrJdZesutm6dfYM8ZNgAAANI"]
[Tue Mar 24 07:24:29.769679 2026] [:error] [pid 38767:tid 38790] [client 20.234.11.56:24586] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/nw.php"] [unique_id "acHLrfwkUqN4GJAI5oWfFgAAARQ"]
[Tue Mar 24 07:24:31.996408 2026] [:error] [pid 3137:tid 3153] [client 20.234.11.56:30225] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/nw.php"] [unique_id "acHLr5dZesutm6dfYM8ZQQAAAM4"]
[Tue Mar 24 07:24:34.780075 2026] [:error] [pid 38767:tid 38774] [client 20.234.11.56:22994] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/nw.php"] [unique_id "acHLsvwkUqN4GJAI5oWfHwAAAQQ"]
[Tue Mar 24 07:24:35.810522 2026] [:error] [pid 64198:tid 64218] [client 20.234.11.56:60039] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/nw.php"] [unique_id "acHLs3VzJqf6OS_oSZ3-gwAAAVI"]
[Tue Mar 24 07:24:37.142134 2026] [:error] [pid 3032:tid 3114] [client 20.234.11.56:30237] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/tool.php"] [unique_id "acHLtSa_-JXXD03-JNzhUQAAAIs"]
[Tue Mar 24 07:24:38.006485 2026] [:error] [pid 38767:tid 38780] [client 20.234.11.56:65387] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/tool.php"] [unique_id "acHLtvwkUqN4GJAI5oWfJgAAAQo"]
[Tue Mar 24 07:24:38.701297 2026] [:error] [pid 3030:tid 3068] [client 20.234.11.56:60101] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/tool.php"] [unique_id "acHLtgyOuILyynfcqfkHQQAAABM"]
[Tue Mar 24 07:24:39.470253 2026] [:error] [pid 3032:tid 3115] [client 20.234.11.56:22980] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/tool.php"] [unique_id "acHLtya_-JXXD03-JNzhVQAAAIw"]
[Tue Mar 24 07:24:40.297381 2026] [:error] [pid 3031:tid 3086] [client 20.234.11.56:30218] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/drhunthq.php"] [unique_id "acHLuKJBKytnG47nuibxTQAAAEo"]
[Tue Mar 24 07:24:41.113980 2026] [:error] [pid 38767:tid 38783] [client 20.234.11.56:1478] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/drhunthq.php"] [unique_id "acHLufwkUqN4GJAI5oWfKQAAAQ0"]
[Tue Mar 24 07:24:41.731484 2026] [:error] [pid 3030:tid 3061] [client 20.234.11.56:37011] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/drhunthq.php"] [unique_id "acHLuQyOuILyynfcqfkHRQAAAAw"]
[Tue Mar 24 07:24:42.453133 2026] [:error] [pid 38767:tid 38778] [client 20.234.11.56:23016] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/drhunthq.php"] [unique_id "acHLuvwkUqN4GJAI5oWfLwAAAQg"]
[Tue Mar 24 07:24:43.155885 2026] [:error] [pid 3137:tid 3160] [client 20.234.11.56:34181] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/tfm.php"] [unique_id "acHLu5dZesutm6dfYM8ZSgAAANU"]
[Tue Mar 24 07:24:44.259560 2026] [:error] [pid 64198:tid 64211] [client 20.234.11.56:60596] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/tfm.php"] [unique_id "acHLvHVzJqf6OS_oSZ3-igAAAUs"]
[Tue Mar 24 07:24:45.031849 2026] [:error] [pid 3030:tid 3060] [client 20.234.11.56:58894] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/tfm.php"] [unique_id "acHLvQyOuILyynfcqfkHSAAAAAs"]
[Tue Mar 24 07:24:46.058956 2026] [:error] [pid 3137:tid 3163] [client 20.234.11.56:60148] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/tfm.php"] [unique_id "acHLvpdZesutm6dfYM8ZTgAAANg"]
[Tue Mar 24 07:24:47.074284 2026] [:error] [pid 64198:tid 64217] [client 20.234.11.56:60135] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/a4.php"] [unique_id "acHLv3VzJqf6OS_oSZ3-kQAAAVE"]
[Tue Mar 24 07:24:48.539369 2026] [:error] [pid 64198:tid 64206] [client 20.234.11.56:1493] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/a4.php"] [unique_id "acHLwHVzJqf6OS_oSZ3-lgAAAUY"]
[Tue Mar 24 07:24:49.855612 2026] [:error] [pid 38767:tid 38784] [client 20.234.11.56:65404] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/a4.php"] [unique_id "acHLwfwkUqN4GJAI5oWfOQAAAQ4"]
[Tue Mar 24 07:24:51.009103 2026] [:error] [pid 64198:tid 64224] [client 20.234.11.56:60150] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/a4.php"] [unique_id "acHLw3VzJqf6OS_oSZ3-ngAAAVg"]
[Tue Mar 24 07:24:52.118552 2026] [:error] [pid 3032:tid 3113] [client 20.234.11.56:34204] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wen.php"] [unique_id "acHLxCa_-JXXD03-JNzhYgAAAIo"]
[Tue Mar 24 07:24:52.822165 2026] [:error] [pid 3031:tid 3078] [client 20.234.11.56:48541] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wen.php"] [unique_id "acHLxKJBKytnG47nuibxVgAAAEI"]
[Tue Mar 24 07:24:54.694191 2026] [:error] [pid 64198:tid 64200] [client 20.234.11.56:60582] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wen.php"] [unique_id "acHLxnVzJqf6OS_oSZ3-qQAAAUA"]
[Tue Mar 24 07:24:56.178799 2026] [:error] [pid 38767:tid 38781] [client 20.234.11.56:61919] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wen.php"] [unique_id "acHLyPwkUqN4GJAI5oWfSgAAAQs"]
[Tue Mar 24 07:24:57.634804 2026] [:error] [pid 3137:tid 3160] [client 20.234.11.56:23038] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ms.php"] [unique_id "acHLyZdZesutm6dfYM8ZYQAAANU"]
[Tue Mar 24 07:24:59.331316 2026] [:error] [pid 3032:tid 3122] [client 20.234.11.56:34202] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ms.php"] [unique_id "acHLyya_-JXXD03-JNzhbQAAAJM"]
[Tue Mar 24 07:25:00.398895 2026] [:error] [pid 3032:tid 3109] [client 20.234.11.56:1532] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ms.php"] [unique_id "acHLzCa_-JXXD03-JNzhcQAAAIY"]
[Tue Mar 24 07:25:01.405885 2026] [:error] [pid 3032:tid 3122] [client 20.234.11.56:29327] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ms.php"] [unique_id "acHLzSa_-JXXD03-JNzhdwAAAJM"]
[Tue Mar 24 07:25:03.650989 2026] [:error] [pid 64198:tid 64203] [client 20.234.11.56:37032] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/hplfuns.php"] [unique_id "acHLz3VzJqf6OS_oSZ3-swAAAUM"]
[Tue Mar 24 07:25:05.369325 2026] [:error] [pid 38767:tid 38775] [client 20.234.11.56:24611] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/hplfuns.php"] [unique_id "acHL0fwkUqN4GJAI5oWfVwAAAQU"]
[Tue Mar 24 07:25:09.808552 2026] [:error] [pid 3032:tid 3118] [client 20.234.11.56:29312] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/hplfuns.php"] [unique_id "acHL1Sa_-JXXD03-JNzheQAAAI8"]
[Tue Mar 24 07:25:13.138716 2026] [:error] [pid 3137:tid 3161] [client 20.234.11.56:46791] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/hplfuns.php"] [unique_id "acHL2ZdZesutm6dfYM8ZfgAAANY"]
[Tue Mar 24 07:25:17.815684 2026] [:error] [pid 64198:tid 64210] [client 20.234.11.56:22983] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/tfm.php"] [unique_id "acHL3XVzJqf6OS_oSZ3-3AAAAUo"]
[Tue Mar 24 07:25:19.502978 2026] [:error] [pid 3032:tid 3111] [client 20.234.11.56:60577] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/tfm.php"] [unique_id "acHL3ya_-JXXD03-JNzhewAAAIg"]
[Tue Mar 24 07:25:21.229191 2026] [proxy_fcgi:error] [pid 3032:tid 3110] [client 20.234.11.56:34224] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 07:25:21.541950 2026] [proxy_fcgi:error] [pid 3032:tid 3117] [client 20.234.11.56:34224] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 07:25:21.850153 2026] [proxy_fcgi:error] [pid 3032:tid 3116] [client 20.234.11.56:34224] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 07:25:22.405481 2026] [proxy_fcgi:error] [pid 3032:tid 3103] [client 20.234.11.56:34224] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 07:25:22.765025 2026] [proxy_fcgi:error] [pid 3032:tid 3104] [client 20.234.11.56:34224] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 07:25:23.041783 2026] [proxy_fcgi:error] [pid 3032:tid 3107] [client 20.234.11.56:34224] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 07:25:23.357893 2026] [proxy_fcgi:error] [pid 3032:tid 3115] [client 20.234.11.56:34224] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 07:25:23.636969 2026] [proxy_fcgi:error] [pid 3032:tid 3128] [client 20.234.11.56:34224] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 07:25:23.951453 2026] [proxy_fcgi:error] [pid 3032:tid 3113] [client 20.234.11.56:34224] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 07:25:24.427446 2026] [proxy_fcgi:error] [pid 3032:tid 3118] [client 20.234.11.56:34224] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 07:25:24.709522 2026] [:error] [pid 3032:tid 3109] [client 20.234.11.56:34224] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bnm.php"] [unique_id "acHL5Ca_-JXXD03-JNzhjgAAAIY"]
[Tue Mar 24 07:25:27.149849 2026] [:error] [pid 38767:tid 38793] [client 20.234.11.56:29365] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bnm.php"] [unique_id "acHL5_wkUqN4GJAI5oWfiQAAARc"]
[Tue Mar 24 07:25:31.776063 2026] [:error] [pid 64198:tid 64215] [client 20.234.11.56:58940] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bnm.php"] [unique_id "acHL63VzJqf6OS_oSZ3-9gAAAU8"]
[Tue Mar 24 07:25:33.210112 2026] [:error] [pid 38767:tid 38781] [client 20.234.11.56:60588] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bnm.php"] [unique_id "acHL7fwkUqN4GJAI5oWfnwAAAQs"]
[Tue Mar 24 07:25:36.066821 2026] [:error] [pid 64198:tid 64208] [client 20.234.11.56:29333] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/amax.php"] [unique_id "acHL8HVzJqf6OS_oSZ3--wAAAUg"]
[Tue Mar 24 07:25:36.951049 2026] [:error] [pid 3032:tid 3123] [client 20.234.11.56:60600] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/amax.php"] [unique_id "acHL8Ca_-JXXD03-JNzhmgAAAJQ"]
[Tue Mar 24 07:25:38.323082 2026] [:error] [pid 38767:tid 38785] [client 20.234.11.56:60130] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/amax.php"] [unique_id "acHL8vwkUqN4GJAI5oWfqQAAAQ8"]
[Tue Mar 24 07:25:39.148063 2026] [:error] [pid 64198:tid 64200] [client 20.234.11.56:30228] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/amax.php"] [unique_id "acHL83VzJqf6OS_oSZ3_AgAAAUA"]
[Tue Mar 24 07:25:39.912968 2026] [:error] [pid 64198:tid 64222] [client 20.234.11.56:53440] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/66.php"] [unique_id "acHL83VzJqf6OS_oSZ3_BwAAAVY"]
[Tue Mar 24 07:25:41.343286 2026] [:error] [pid 3137:tid 3145] [client 20.234.11.56:60093] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/66.php"] [unique_id "acHL9ZdZesutm6dfYM8ZvAAAAMY"]
[Tue Mar 24 07:25:42.767406 2026] [:error] [pid 3032:tid 3115] [client 20.234.11.56:58897] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/66.php"] [unique_id "acHL9ia_-JXXD03-JNzhowAAAIw"]
[Tue Mar 24 07:25:43.876749 2026] [:error] [pid 3137:tid 3154] [client 20.234.11.56:29331] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/66.php"] [unique_id "acHL95dZesutm6dfYM8ZyQAAAM8"]
[Tue Mar 24 07:25:44.680665 2026] [:error] [pid 64198:tid 64207] [client 20.234.11.56:60061] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/public/file.php"] [unique_id "acHL-HVzJqf6OS_oSZ3_CQAAAUc"]
[Tue Mar 24 07:25:47.306201 2026] [:error] [pid 38767:tid 38778] [client 20.234.11.56:60111] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/public/file.php"] [unique_id "acHL-_wkUqN4GJAI5oWftAAAAQg"]
[Tue Mar 24 07:25:48.460646 2026] [:error] [pid 3137:tid 3154] [client 20.234.11.56:51129] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/public/file.php"] [unique_id "acHL_JdZesutm6dfYM8Z1AAAAM8"]
[Tue Mar 24 07:25:49.709175 2026] [:error] [pid 3137:tid 3157] [client 20.234.11.56:65372] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/public/file.php"] [unique_id "acHL_ZdZesutm6dfYM8Z2gAAANI"]
[Tue Mar 24 07:25:50.868250 2026] [:error] [pid 3032:tid 3108] [client 20.234.11.56:37453] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/166.php"] [unique_id "acHL_ia_-JXXD03-JNzhpQAAAIU"]
[Tue Mar 24 07:25:52.157094 2026] [:error] [pid 38767:tid 38789] [client 20.234.11.56:44705] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/166.php"] [unique_id "acHMAPwkUqN4GJAI5oWfugAAARM"]
[Tue Mar 24 07:25:52.874212 2026] [:error] [pid 3031:tid 3087] [client 20.234.11.56:28113] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/166.php"] [unique_id "acHMAKJBKytnG47nuibxdgAAAEs"]
[Tue Mar 24 07:25:54.035933 2026] [:error] [pid 64198:tid 64219] [client 20.234.11.56:65345] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/166.php"] [unique_id "acHMAnVzJqf6OS_oSZ3_EAAAAVM"]
[Tue Mar 24 07:25:55.427543 2026] [:error] [pid 64198:tid 64218] [client 20.234.11.56:54458] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws77.php"] [unique_id "acHMA3VzJqf6OS_oSZ3_GAAAAVI"]
[Tue Mar 24 07:25:56.470879 2026] [:error] [pid 3137:tid 3149] [client 20.234.11.56:57871] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws77.php"] [unique_id "acHMBJdZesutm6dfYM8Z7AAAAMo"]
[Tue Mar 24 07:25:57.170488 2026] [:error] [pid 64198:tid 64223] [client 20.234.11.56:23643] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws77.php"] [unique_id "acHMBXVzJqf6OS_oSZ3_GwAAAVc"]
[Tue Mar 24 07:25:57.840880 2026] [:error] [pid 3032:tid 3105] [client 20.234.11.56:48588] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws77.php"] [unique_id "acHMBSa_-JXXD03-JNzhrQAAAII"]
[Tue Mar 24 07:25:58.468300 2026] [:error] [pid 38767:tid 38792] [client 20.234.11.56:57562] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/grsiuk.php"] [unique_id "acHMBvwkUqN4GJAI5oWfvgAAARY"]
[Tue Mar 24 07:25:59.234428 2026] [:error] [pid 64198:tid 64202] [client 20.234.11.56:28605] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/grsiuk.php"] [unique_id "acHMB3VzJqf6OS_oSZ3_HwAAAUI"]
[Tue Mar 24 07:26:00.293977 2026] [:error] [pid 3137:tid 3156] [client 20.234.11.56:52928] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/grsiuk.php"] [unique_id "acHMCJdZesutm6dfYM8Z8QAAANE"]
[Tue Mar 24 07:26:01.294580 2026] [:error] [pid 3137:tid 3159] [client 20.234.11.56:58515] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/grsiuk.php"] [unique_id "acHMCZdZesutm6dfYM8Z9QAAANQ"]
[Tue Mar 24 07:26:01.992637 2026] [:error] [pid 3137:tid 3157] [client 20.234.11.56:35035] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-act.php"] [unique_id "acHMCZdZesutm6dfYM8Z-QAAANI"]
[Tue Mar 24 07:26:02.970789 2026] [:error] [pid 38767:tid 38777] [client 20.234.11.56:26546] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-act.php"] [unique_id "acHMCvwkUqN4GJAI5oWfwQAAAQc"]
[Tue Mar 24 07:26:03.701510 2026] [:error] [pid 64198:tid 64218] [client 20.234.11.56:42846] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-act.php"] [unique_id "acHMC3VzJqf6OS_oSZ3_IwAAAVI"]
[Tue Mar 24 07:26:04.997058 2026] [:error] [pid 3032:tid 3128] [client 20.234.11.56:52963] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-act.php"] [unique_id "acHMDCa_-JXXD03-JNzhswAAAJg"]
[Tue Mar 24 07:26:06.459250 2026] [:error] [pid 64198:tid 64215] [client 20.234.11.56:56131] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/cu.php"] [unique_id "acHMDnVzJqf6OS_oSZ3_KAAAAU8"]
[Tue Mar 24 07:26:07.941742 2026] [:error] [pid 3032:tid 3108] [client 20.234.11.56:32127] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/cu.php"] [unique_id "acHMDya_-JXXD03-JNzhtQAAAIU"]
[Tue Mar 24 07:26:08.792153 2026] [:error] [pid 3030:tid 3069] [client 20.234.11.56:23603] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/cu.php"] [unique_id "acHMEAyOuILyynfcqfkHeQAAABQ"]
[Tue Mar 24 07:26:09.808605 2026] [:error] [pid 3032:tid 3106] [client 20.234.11.56:45815] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/cu.php"] [unique_id "acHMESa_-JXXD03-JNzhtwAAAIM"]
[Tue Mar 24 07:26:11.039858 2026] [:error] [pid 38767:tid 38771] [client 20.234.11.56:38878] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/8.php"] [unique_id "acHME_wkUqN4GJAI5oWfzgAAAQE"]
[Tue Mar 24 07:26:11.898624 2026] [:error] [pid 3030:tid 3052] [client 20.234.11.56:34020] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/8.php"] [unique_id "acHMEwyOuILyynfcqfkHfwAAAAM"]
[Tue Mar 24 07:26:20.085279 2026] [:error] [pid 3031:tid 3087] [client 20.234.11.56:65298] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/8.php"] [unique_id "acHMHKJBKytnG47nuibxgwAAAEs"]
[Tue Mar 24 07:26:27.514745 2026] [proxy_fcgi:error] [pid 3137:tid 3149] [client 20.234.11.56:37787] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 07:26:27.780778 2026] [proxy_fcgi:error] [pid 3137:tid 3159] [client 20.234.11.56:37787] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 07:26:29.164990 2026] [proxy_fcgi:error] [pid 3137:tid 3158] [client 20.234.11.56:37787] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 07:26:29.457464 2026] [proxy_fcgi:error] [pid 3137:tid 3149] [client 20.234.11.56:37787] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 07:26:29.752988 2026] [proxy_fcgi:error] [pid 3137:tid 3140] [client 20.234.11.56:37787] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 07:26:30.069327 2026] [proxy_fcgi:error] [pid 3137:tid 3143] [client 20.234.11.56:37787] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 07:26:30.395991 2026] [proxy_fcgi:error] [pid 3137:tid 3144] [client 20.234.11.56:37787] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 07:26:30.690565 2026] [proxy_fcgi:error] [pid 3137:tid 3161] [client 20.234.11.56:37787] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 07:26:30.956537 2026] [proxy_fcgi:error] [pid 3137:tid 3154] [client 20.234.11.56:37787] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 07:26:31.261049 2026] [proxy_fcgi:error] [pid 3137:tid 3163] [client 20.234.11.56:37787] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 07:26:31.581116 2026] [proxy_fcgi:error] [pid 3137:tid 3159] [client 20.234.11.56:37787] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 07:26:31.843124 2026] [:error] [pid 3137:tid 3158] [client 20.234.11.56:37787] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/tt.php"] [unique_id "acHMJ5dZesutm6dfYM8aMAAAANM"]
[Tue Mar 24 07:26:41.773584 2026] [:error] [pid 64198:tid 64207] [client 20.234.11.56:43883] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/tt.php"] [unique_id "acHMMXVzJqf6OS_oSZ3_VgAAAUc"]
[Tue Mar 24 07:26:44.903793 2026] [:error] [pid 3030:tid 3059] [client 20.234.11.56:64044] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/tt.php"] [unique_id "acHMNAyOuILyynfcqfkHogAAAAo"]
[Tue Mar 24 07:26:48.054036 2026] [:error] [pid 3030:tid 3064] [client 20.234.11.56:22433] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/maul.php"] [unique_id "acHMOAyOuILyynfcqfkHqAAAAA8"]
[Tue Mar 24 07:26:49.797019 2026] [:error] [pid 64198:tid 64209] [client 20.234.11.56:22435] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/maul.php"] [unique_id "acHMOXVzJqf6OS_oSZ3_agAAAUk"]
[Tue Mar 24 07:26:51.624826 2026] [:error] [pid 3137:tid 3155] [client 20.234.11.56:50133] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/maul.php"] [unique_id "acHMO5dZesutm6dfYM8aTgAAANA"]
[Tue Mar 24 07:26:53.622218 2026] [:error] [pid 64198:tid 64210] [client 20.234.11.56:43900] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/maul.php"] [unique_id "acHMPXVzJqf6OS_oSZ3_eAAAAUo"]
[Tue Mar 24 07:26:54.591556 2026] [:error] [pid 64198:tid 64201] [client 20.234.11.56:33031] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/5b9ac.php"] [unique_id "acHMPnVzJqf6OS_oSZ3_fgAAAUE"]
[Tue Mar 24 07:26:55.796861 2026] [:error] [pid 3137:tid 3139] [client 20.234.11.56:30739] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/5b9ac.php"] [unique_id "acHMP5dZesutm6dfYM8aWwAAAMA"]
[Tue Mar 24 07:26:56.484350 2026] [:error] [pid 3032:tid 3110] [client 20.234.11.56:41307] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/5b9ac.php"] [unique_id "acHMQCa_-JXXD03-JNzh9wAAAIc"]
[Tue Mar 24 07:26:59.391080 2026] [:error] [pid 3031:tid 3079] [client 20.234.11.56:39092] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/5b9ac.php"] [unique_id "acHMQ6JBKytnG47nuibxqQAAAEM"]
[Tue Mar 24 07:27:00.304090 2026] [:error] [pid 64198:tid 64213] [client 20.234.11.56:33080] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/hehe.php"] [unique_id "acHMRHVzJqf6OS_oSZ3_iQAAAU0"]
[Tue Mar 24 07:27:01.107627 2026] [:error] [pid 3137:tid 3141] [client 20.234.11.56:39160] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/hehe.php"] [unique_id "acHMRZdZesutm6dfYM8aZQAAAMI"]
[Tue Mar 24 07:27:01.940480 2026] [:error] [pid 3030:tid 3070] [client 20.234.11.56:1585] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/hehe.php"] [unique_id "acHMRQyOuILyynfcqfkHsAAAABU"]
[Tue Mar 24 07:27:02.611114 2026] [:error] [pid 3137:tid 3148] [client 20.234.11.56:58581] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/hehe.php"] [unique_id "acHMRpdZesutm6dfYM8abgAAAMk"]
[Tue Mar 24 07:27:04.815907 2026] [:error] [pid 3137:tid 3156] [client 20.234.11.56:60650] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "acHMSJdZesutm6dfYM8agAAAANE"]
[Tue Mar 24 07:27:05.552750 2026] [:error] [pid 3137:tid 3163] [client 20.234.11.56:58603] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "acHMSZdZesutm6dfYM8aiAAAANg"]
[Tue Mar 24 07:27:06.988307 2026] [:error] [pid 64198:tid 64208] [client 20.234.11.56:37859] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "acHMSnVzJqf6OS_oSZ3_jgAAAUg"]
[Tue Mar 24 07:27:07.990854 2026] [:error] [pid 3137:tid 3143] [client 20.234.11.56:58591] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "acHMS5dZesutm6dfYM8ajQAAAMQ"]
[Tue Mar 24 07:27:09.065557 2026] [:error] [pid 3030:tid 3069] [client 20.234.11.56:27031] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/varb.php"] [unique_id "acHMTQyOuILyynfcqfkHtQAAABQ"]
[Tue Mar 24 07:27:10.150804 2026] [:error] [pid 3137:tid 3148] [client 20.234.11.56:22463] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/varb.php"] [unique_id "acHMTpdZesutm6dfYM8ajwAAAMk"]
[Tue Mar 24 07:27:10.850022 2026] [:error] [pid 3137:tid 3156] [client 20.234.11.56:25480] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/varb.php"] [unique_id "acHMTpdZesutm6dfYM8akgAAANE"]
[Tue Mar 24 07:27:11.820283 2026] [:error] [pid 3031:tid 3081] [client 20.234.11.56:57489] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/varb.php"] [unique_id "acHMT6JBKytnG47nuibxtAAAAEU"]
[Tue Mar 24 07:27:13.659199 2026] [:error] [pid 3030:tid 3052] [client 20.234.11.56:48098] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/lm15.php"] [unique_id "acHMUQyOuILyynfcqfkHuQAAAAM"]
[Tue Mar 24 07:27:18.983144 2026] [:error] [pid 3032:tid 3121] [client 20.234.11.56:25035] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/lm15.php"] [unique_id "acHMVia_-JXXD03-JNziBwAAAJI"]
[Tue Mar 24 07:27:20.425299 2026] [:error] [pid 38767:tid 38785] [client 20.234.11.56:48127] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/lm15.php"] [unique_id "acHMWPwkUqN4GJAI5oWgBAAAAQ8"]
[Tue Mar 24 07:27:23.054664 2026] [:error] [pid 3137:tid 3162] [client 20.234.11.56:25487] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/lm15.php"] [unique_id "acHMW5dZesutm6dfYM8arwAAANc"]
[Tue Mar 24 07:27:24.635255 2026] [:error] [pid 3137:tid 3163] [client 20.234.11.56:33120] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/clss.php"] [unique_id "acHMXJdZesutm6dfYM8asgAAANg"]
[Tue Mar 24 07:27:25.535349 2026] [:error] [pid 64198:tid 64207] [client 20.234.11.56:58587] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/clss.php"] [unique_id "acHMXXVzJqf6OS_oSZ3_qwAAAUc"]
[Tue Mar 24 07:27:26.595800 2026] [:error] [pid 38767:tid 38780] [client 20.234.11.56:63312] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/clss.php"] [unique_id "acHMXvwkUqN4GJAI5oWgEgAAAQo"]
[Tue Mar 24 07:27:27.708304 2026] [:error] [pid 3032:tid 3106] [client 20.234.11.56:58607] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/clss.php"] [unique_id "acHMXya_-JXXD03-JNziGAAAAIM"]
[Tue Mar 24 07:27:29.133513 2026] [:error] [pid 3030:tid 3051] [client 20.234.11.56:42308] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/44.php"] [unique_id "acHMYQyOuILyynfcqfkHwgAAAAI"]
[Tue Mar 24 07:27:30.752354 2026] [:error] [pid 3031:tid 3098] [client 20.234.11.56:40228] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/44.php"] [unique_id "acHMYqJBKytnG47nuibxwQAAAFY"]
[Tue Mar 24 07:27:32.133854 2026] [proxy_fcgi:error] [pid 38767:tid 38789] [client 20.234.11.56:40254] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 07:27:32.389509 2026] [proxy_fcgi:error] [pid 38767:tid 38791] [client 20.234.11.56:40254] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 07:27:32.660099 2026] [proxy_fcgi:error] [pid 38767:tid 38787] [client 20.234.11.56:40254] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 07:27:32.933874 2026] [proxy_fcgi:error] [pid 38767:tid 38770] [client 20.234.11.56:40254] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 07:27:33.247853 2026] [proxy_fcgi:error] [pid 38767:tid 38782] [client 20.234.11.56:40254] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 07:27:33.503638 2026] [proxy_fcgi:error] [pid 38767:tid 38790] [client 20.234.11.56:40254] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 07:27:34.155986 2026] [proxy_fcgi:error] [pid 38767:tid 38783] [client 20.234.11.56:40254] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 07:27:34.544321 2026] [proxy_fcgi:error] [pid 38767:tid 38775] [client 20.234.11.56:40254] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 07:27:34.798026 2026] [proxy_fcgi:error] [pid 38767:tid 38784] [client 20.234.11.56:40254] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 07:27:35.052037 2026] [proxy_fcgi:error] [pid 38767:tid 38774] [client 20.234.11.56:40254] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 07:27:35.305617 2026] [proxy_fcgi:error] [pid 38767:tid 38777] [client 20.234.11.56:40254] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 07:27:35.602552 2026] [:error] [pid 38767:tid 38779] [client 20.234.11.56:40254] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-blog-header.php"] [unique_id "acHMZ_wkUqN4GJAI5oWgMwAAAQk"]
[Tue Mar 24 07:27:37.329619 2026] [:error] [pid 64198:tid 64203] [client 20.234.11.56:43352] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-blog-header.php"] [unique_id "acHMaXVzJqf6OS_oSZ0AOQAAAUM"]
[Tue Mar 24 07:27:38.525286 2026] [:error] [pid 3032:tid 3111] [client 20.234.11.56:36488] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-blog-header.php"] [unique_id "acHMaia_-JXXD03-JNziIgAAAIg"]
[Tue Mar 24 07:27:40.664611 2026] [:error] [pid 3137:tid 3157] [client 20.234.11.56:63349] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-blog-header.php"] [unique_id "acHMbJdZesutm6dfYM8a4gAAANI"]
[Tue Mar 24 07:27:42.328543 2026] [:error] [pid 3137:tid 3155] [client 20.234.11.56:64876] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bgymj.php"] [unique_id "acHMbpdZesutm6dfYM8a7gAAANA"]
[Tue Mar 24 07:27:43.255413 2026] [:error] [pid 3031:tid 3081] [client 20.234.11.56:40225] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bgymj.php"] [unique_id "acHMb6JBKytnG47nuibx1AAAAEU"]
[Tue Mar 24 07:27:44.018965 2026] [:error] [pid 3032:tid 3122] [client 20.234.11.56:36491] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bgymj.php"] [unique_id "acHMcCa_-JXXD03-JNziJgAAAJM"]
[Tue Mar 24 07:27:45.835107 2026] [:error] [pid 3137:tid 3142] [client 20.234.11.56:58994] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bgymj.php"] [unique_id "acHMcZdZesutm6dfYM8bAAAAAMM"]
[Tue Mar 24 07:27:48.182657 2026] [:error] [pid 64198:tid 64214] [client 20.234.11.56:34590] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/gfd.php"] [unique_id "acHMdHVzJqf6OS_oSZ0APQAAAU4"]
[Tue Mar 24 07:27:50.636829 2026] [:error] [pid 3031:tid 3085] [client 20.234.11.56:38223] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/gfd.php"] [unique_id "acHMdqJBKytnG47nuibx2AAAAEk"]
[Tue Mar 24 07:27:56.537526 2026] [:error] [pid 3137:tid 3153] [client 20.234.11.56:31509] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/gfd.php"] [unique_id "acHMfJdZesutm6dfYM8bHAAAAM4"]
[Tue Mar 24 07:27:57.366278 2026] [:error] [pid 64198:tid 64219] [client 20.234.11.56:31548] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/gfd.php"] [unique_id "acHMfXVzJqf6OS_oSZ0AQwAAAVM"]
[Tue Mar 24 07:27:58.081746 2026] [:error] [pid 3137:tid 3152] [client 20.234.11.56:31543] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/callback.php"] [unique_id "acHMfpdZesutm6dfYM8bIAAAAM0"]
[Tue Mar 24 07:27:58.916015 2026] [:error] [pid 3137:tid 3147] [client 20.234.11.56:43367] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/callback.php"] [unique_id "acHMfpdZesutm6dfYM8bJAAAAMg"]
[Tue Mar 24 07:27:59.900510 2026] [:error] [pid 3137:tid 3157] [client 20.234.11.56:24184] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/callback.php"] [unique_id "acHMf5dZesutm6dfYM8bJgAAANI"]
[Tue Mar 24 07:28:02.252675 2026] [:error] [pid 38767:tid 38776] [client 20.234.11.56:44244] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/callback.php"] [unique_id "acHMgvwkUqN4GJAI5oWgTwAAAQY"]
[Tue Mar 24 07:28:03.992149 2026] [:error] [pid 64198:tid 64206] [client 20.234.11.56:31547] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/file.php"] [unique_id "acHMg3VzJqf6OS_oSZ0ARgAAAUY"]
[Tue Mar 24 07:28:05.181433 2026] [:error] [pid 3030:tid 3062] [client 20.234.11.56:35998] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/file.php"] [unique_id "acHMhQyOuILyynfcqfkHzAAAAA0"]
[Tue Mar 24 07:28:06.484700 2026] [:error] [pid 64198:tid 64215] [client 20.234.11.56:44230] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/file.php"] [unique_id "acHMhnVzJqf6OS_oSZ0ATgAAAU8"]
[Tue Mar 24 07:28:07.656985 2026] [:error] [pid 64198:tid 64219] [client 20.234.11.56:56619] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/file.php"] [unique_id "acHMh3VzJqf6OS_oSZ0AUAAAAVM"]
[Tue Mar 24 07:28:09.065563 2026] [:error] [pid 3030:tid 3053] [client 20.234.11.56:31520] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bolt.php"] [unique_id "acHMiQyOuILyynfcqfkH0wAAAAQ"]
[Tue Mar 24 07:28:10.802992 2026] [:error] [pid 3031:tid 3084] [client 20.234.11.56:38227] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bolt.php"] [unique_id "acHMiqJBKytnG47nuibx5AAAAEg"]
[Tue Mar 24 07:28:13.268482 2026] [:error] [pid 3031:tid 3093] [client 20.234.11.56:64478] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bolt.php"] [unique_id "acHMjaJBKytnG47nuibx5wAAAFE"]
[Tue Mar 24 07:28:14.055968 2026] [:error] [pid 64198:tid 64207] [client 20.234.11.56:55417] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bolt.php"] [unique_id "acHMjnVzJqf6OS_oSZ0AXAAAAUc"]
[Tue Mar 24 07:28:15.052224 2026] [:error] [pid 38767:tid 38791] [client 20.234.11.56:31524] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-blogs.php"] [unique_id "acHMj_wkUqN4GJAI5oWgXAAAARU"]
[Tue Mar 24 07:28:15.823555 2026] [:error] [pid 64198:tid 64205] [client 20.234.11.56:24171] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-blogs.php"] [unique_id "acHMj3VzJqf6OS_oSZ0AXgAAAUU"]
[Tue Mar 24 07:28:17.176198 2026] [:error] [pid 3030:tid 3062] [client 20.234.11.56:28631] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-blogs.php"] [unique_id "acHMkQyOuILyynfcqfkH1wAAAA0"]
[Tue Mar 24 07:28:18.417166 2026] [:error] [pid 3032:tid 3121] [client 20.234.11.56:46774] [client 20.234.11.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-blogs.php"] [unique_id "acHMkia_-JXXD03-JNziRgAAAJI"]
[Tue Mar 24 09:02:44.275481 2026] [:error] [pid 3030:tid 3056] [client 185.223.152.138:43431] [client 185.223.152.138] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.138, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-login.php"] [unique_id "acHitAyOuILyynfcqfkW5gAAAAc"]
[Tue Mar 24 09:02:44.304328 2026] [proxy_fcgi:error] [pid 3030:tid 3056] [client 185.223.152.138:43431] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 02:51:43.090101 2026] [:error] [pid 57702:tid 57913] [client 52.90.9.219:54344] [client 52.90.9.219] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/"] [unique_id "acLdP6S8TU_xcQFvlnYjPwAAAAo"]
[Wed Mar 25 02:51:43.497810 2026] [:error] [pid 58154:tid 58175] [client 52.90.9.219:64311] [client 52.90.9.219] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/buttons.css"] [unique_id "acLdPw0pGUh6bwD3ouK7awAAANI"]
[Wed Mar 25 02:51:43.905545 2026] [:error] [pid 57711:tid 58051] [client 52.90.9.219:64137] [client 52.90.9.219] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/media/system/js/core.js"] [unique_id "acLdP6LdPFdeRRktTdNzOAAAAIE"]
[Wed Mar 25 05:34:31.929683 2026] [:error] [pid 755:tid 843] [client 148.72.173.218:52674] [client 148.72.173.218] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 148.72.173.218, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-login.php"] [unique_id "acMDZ6S6bdaeEwgCGwozsgAAAFQ"]
[Wed Mar 25 05:34:31.929778 2026] [:error] [pid 755:tid 843] [client 148.72.173.218:52674] [client 148.72.173.218] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 148.72.173.218 on wp-login.php, counter = 36"] [hostname "dwelectservices.com.au"] [uri "/wp-login.php"] [unique_id "acMDZ6S6bdaeEwgCGwozsgAAAFQ"]
[Wed Mar 25 07:38:43.501654 2026] [:error] [pid 26320:tid 26379] [client 45.94.31.15:53837] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "acMggzkUgS2mHAojGnl4qgAAAdc"]
[Wed Mar 25 07:38:43.502711 2026] [:error] [pid 754:tid 780] [client 45.94.31.15:53769] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/"] [unique_id "acMggzisL3asPbA3CtjOoQAAAA8"]
[Wed Mar 25 07:38:43.508494 2026] [:error] [pid 26320:tid 26370] [client 45.94.31.15:53716] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "acMggzkUgS2mHAojGnl4qwAAAc4"], referer: www.google.com
[Wed Mar 25 07:38:43.508974 2026] [:error] [pid 26321:tid 26351] [client 45.94.31.15:53772] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "acMgg_KO65qqGZCSPZqwmAAAAgo"], referer: www.google.com
[Wed Mar 25 07:38:43.515874 2026] [:error] [pid 754:tid 770] [client 45.94.31.15:53834] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-plain.php"] [unique_id "acMggzisL3asPbA3CtjOogAAAAU"], referer: www.google.com
[Wed Mar 25 07:38:44.000440 2026] [:error] [pid 26269:tid 26297] [client 45.94.31.15:52575] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "acMgg0n7e-ZQbaIs7qx_gQAAAZU"], referer: www.google.com
[Wed Mar 25 07:38:44.011143 2026] [:error] [pid 892:tid 905] [client 45.94.31.15:52631] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "acMghCT_G8WMU3T3yxpOpwAAAMc"], referer: www.google.com
[Wed Mar 25 07:38:44.011143 2026] [:error] [pid 892:tid 909] [client 45.94.31.15:52844] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-plain.php"] [unique_id "acMghCT_G8WMU3T3yxpOqAAAAMs"], referer: www.google.com
[Wed Mar 25 07:38:44.490811 2026] [:error] [pid 892:tid 920] [client 45.94.31.15:65034] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "acMghCT_G8WMU3T3yxpO1QAAANU"], referer: www.google.com
[Wed Mar 25 07:38:44.496172 2026] [:error] [pid 892:tid 911] [client 45.94.31.15:49161] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-plain.php"] [unique_id "acMghCT_G8WMU3T3yxpO1wAAAM0"], referer: www.google.com
[Wed Mar 25 07:38:44.501555 2026] [:error] [pid 47946:tid 47954] [client 45.94.31.15:49155] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "acMghDipQTqBMSeKYhcX1AAAAQY"], referer: www.google.com
[Wed Mar 25 07:38:44.986397 2026] [:error] [pid 26269:tid 26277] [client 45.94.31.15:62441] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "acMghEn7e-ZQbaIs7qx_qQAAAYE"], referer: www.google.com
[Wed Mar 25 07:38:44.989094 2026] [:error] [pid 26269:tid 26278] [client 45.94.31.15:62450] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-plain.php"] [unique_id "acMghEn7e-ZQbaIs7qx_qwAAAYI"], referer: www.google.com
[Wed Mar 25 07:38:45.001838 2026] [:error] [pid 755:tid 840] [client 45.94.31.15:62708] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "acMghaS6bdaeEwgCGwpMRAAAAFE"], referer: www.google.com
[Wed Mar 25 07:38:45.004549 2026] [:error] [pid 755:tid 841] [client 45.94.31.15:52409] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/"] [unique_id "acMghaS6bdaeEwgCGwpMQwAAAFI"]
[Wed Mar 25 07:38:45.011734 2026] [:error] [pid 756:tid 857] [client 45.94.31.15:52334] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "acMghTOaW6oylMIDBCTFqQAAAIU"]
[Wed Mar 25 07:38:45.496095 2026] [:error] [pid 892:tid 923] [client 45.94.31.15:57455] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "acMghST_G8WMU3T3yxpPFgAAANg"], referer: www.google.com
[Wed Mar 25 07:38:45.499474 2026] [:error] [pid 755:tid 821] [client 45.94.31.15:57770] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-plain.php"] [unique_id "acMghaS6bdaeEwgCGwpMfAAAAEY"], referer: www.google.com
[Wed Mar 25 07:38:45.511154 2026] [:error] [pid 26320:tid 26375] [client 45.94.31.15:58479] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "acMghTkUgS2mHAojGnl48AAAAdM"], referer: www.google.com
[Wed Mar 25 07:38:45.516507 2026] [:error] [pid 756:tid 853] [client 45.94.31.15:58880] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/"] [unique_id "acMghTOaW6oylMIDBCTFrQAAAIM"]
[Wed Mar 25 07:38:45.516931 2026] [:error] [pid 26321:tid 26352] [client 45.94.31.15:59050] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "acMghfKO65qqGZCSPZqxDAAAAgs"]
[Wed Mar 25 07:38:46.068221 2026] [:error] [pid 26320:tid 26367] [client 45.94.31.15:56805] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "acMghjkUgS2mHAojGnl5BwAAAcs"]
[Wed Mar 25 07:38:46.068981 2026] [:error] [pid 26320:tid 26367] [client 45.94.31.15:56674] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/"] [unique_id "acMghjkUgS2mHAojGnl5CAAAAcs"]
[Wed Mar 25 07:38:46.526949 2026] [:error] [pid 756:tid 873] [client 45.94.31.15:56077] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "acMghjOaW6oylMIDBCTF-gAAAJU"], referer: www.google.com
[Wed Mar 25 07:38:46.544528 2026] [:error] [pid 892:tid 896] [client 45.94.31.15:56645] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "acMghiT_G8WMU3T3yxpPWgAAAMI"], referer: www.google.com
[Wed Mar 25 07:38:46.557283 2026] [:error] [pid 892:tid 920] [client 45.94.31.15:54562] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/"] [unique_id "acMghiT_G8WMU3T3yxpPWwAAANU"]
[Wed Mar 25 07:38:46.564254 2026] [:error] [pid 756:tid 870] [client 45.94.31.15:54556] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "acMghjOaW6oylMIDBCTF-wAAAJI"]
[Wed Mar 25 07:38:47.529213 2026] [:error] [pid 47946:tid 47954] [client 45.94.31.15:50002] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "acMghzipQTqBMSeKYhcYNAAAAQY"], referer: www.google.com
[Wed Mar 25 07:38:47.531860 2026] [:error] [pid 756:tid 856] [client 45.94.31.15:50155] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "acMghzOaW6oylMIDBCTGGAAAAIQ"], referer: www.google.com
[Wed Mar 25 07:38:48.516519 2026] [:error] [pid 892:tid 895] [client 45.94.31.15:62733] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "acMgiCT_G8WMU3T3yxpPlQAAAME"], referer: www.google.com
[Wed Mar 25 07:38:48.549372 2026] [:error] [pid 755:tid 806] [client 45.94.31.15:62719] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "acMgiKS6bdaeEwgCGwpMvgAAAEE"], referer: www.google.com
[Wed Mar 25 07:38:49.499302 2026] [:error] [pid 26449:tid 26463] [client 45.94.31.15:54403] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "acMgidpZ2T15NDqzAjGdEwAAAko"], referer: www.google.com
[Wed Mar 25 07:38:49.551403 2026] [:error] [pid 47989:tid 48003] [client 45.94.31.15:54847] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "acMgiSWKdJMhIccROjmfEgAAAUw"], referer: www.google.com
[Wed Mar 25 07:38:50.498084 2026] [:error] [pid 26449:tid 26473] [client 45.94.31.15:50388] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "acMgitpZ2T15NDqzAjGdQgAAAlQ"], referer: www.google.com
[Wed Mar 25 07:38:50.533615 2026] [:error] [pid 26449:tid 26457] [client 45.94.31.15:51002] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "acMgitpZ2T15NDqzAjGdRAAAAkQ"], referer: www.google.com
[Wed Mar 25 12:29:29.903618 2026] [:error] [pid 47989:tid 47995] [client 185.194.178.68:23535] [client 185.194.178.68] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.194.178.68, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-login.php"] [unique_id "acNkqSWKdJMhIccROjkNSQAAAUQ"]
[Wed Mar 25 12:29:29.913642 2026] [proxy_fcgi:error] [pid 47989:tid 47995] [client 185.194.178.68:23535] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 19:18:31.386777 2026] [proxy_fcgi:error] [pid 47989:tid 48012] [client 20.220.197.73:36481] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 19:18:31.803511 2026] [:error] [pid 47989:tid 48000] [client 20.220.197.73:36481] [client 20.220.197.73] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.220.197.73, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-content/uploads/wp-login.php"] [unique_id "acPEhyWKdJMhIccROjnSdwAAAUk"]
[Wed Mar 25 19:18:32.020283 2026] [proxy_fcgi:error] [pid 47989:tid 48008] [client 20.220.197.73:36481] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 19:18:32.869006 2026] [proxy_fcgi:error] [pid 47989:tid 48011] [client 20.220.197.73:36481] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 19:18:33.501650 2026] [proxy_fcgi:error] [pid 47989:tid 48008] [client 20.220.197.73:36481] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 19:18:33.707826 2026] [:error] [pid 47989:tid 47999] [client 20.220.197.73:36481] [client 20.220.197.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "acPEiSWKdJMhIccROjnSiQAAAUg"]
[Wed Mar 25 19:18:34.541994 2026] [:error] [pid 26449:tid 26473] [client 20.220.197.73:36509] [client 20.220.197.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "acPEitpZ2T15NDqzAjF4cAAAAlQ"]
[Wed Mar 25 19:18:35.367085 2026] [:error] [pid 25875:tid 25896] [client 20.220.197.73:36483] [client 20.220.197.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "acPEixJ38QkS3NyfshzxggAAAo8"]
[Wed Mar 25 19:18:36.204592 2026] [:error] [pid 25875:tid 25894] [client 20.220.197.73:36499] [client 20.220.197.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "acPEjBJ38QkS3NyfshzxhgAAAo0"]
[Wed Mar 25 21:37:19.385623 2026] [proxy_fcgi:error] [pid 25875:tid 25900] [client 68.221.133.183:48352] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 21:37:19.630590 2026] [proxy_fcgi:error] [pid 25875:tid 25882] [client 68.221.133.183:48352] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 21:37:20.358976 2026] [proxy_fcgi:error] [pid 25875:tid 25904] [client 68.221.133.183:48352] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 21:37:20.604795 2026] [proxy_fcgi:error] [pid 25875:tid 25883] [client 68.221.133.183:48352] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 21:37:20.855351 2026] [proxy_fcgi:error] [pid 25875:tid 25891] [client 68.221.133.183:48352] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 21:37:21.098949 2026] [proxy_fcgi:error] [pid 25875:tid 25895] [client 68.221.133.183:48352] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 21:37:21.342689 2026] [proxy_fcgi:error] [pid 25875:tid 25897] [client 68.221.133.183:48352] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 21:37:23.111319 2026] [proxy_fcgi:error] [pid 25875:tid 25900] [client 68.221.133.183:48352] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 21:37:23.350943 2026] [:error] [pid 25875:tid 25895] [client 68.221.133.183:48352] [client 68.221.133.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/AAAA.php"] [unique_id "acPlExJ38QkS3NyfshwsmwAAAo4"]
[Wed Mar 25 21:37:23.885374 2026] [:error] [pid 26449:tid 26466] [client 68.221.133.183:18167] [client 68.221.133.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/AAAA.php"] [unique_id "acPlE9pZ2T15NDqzAjGLZQAAAk0"]
[Wed Mar 25 21:37:24.381246 2026] [:error] [pid 25875:tid 25887] [client 68.221.133.183:16167] [client 68.221.133.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/AAAA.php"] [unique_id "acPlFBJ38QkS3NyfshwsoAAAAoY"]
[Wed Mar 25 21:37:24.924174 2026] [:error] [pid 25967:tid 25987] [client 68.221.133.183:50661] [client 68.221.133.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gin.php"] [unique_id "acPlFPg8Qtq7ZM4mSFl1EQAAA08"]
[Wed Mar 25 21:37:25.402409 2026] [:error] [pid 25969:tid 26031] [client 68.221.133.183:7470] [client 68.221.133.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gin.php"] [unique_id "acPlFRd3aEUmOfdKja8UAwAAA8U"]
[Wed Mar 25 21:37:25.882506 2026] [:error] [pid 47989:tid 48011] [client 68.221.133.183:50639] [client 68.221.133.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gin.php"] [unique_id "acPlFSWKdJMhIccROjkCUQAAAVQ"]
[Wed Mar 25 21:37:26.371418 2026] [:error] [pid 47989:tid 47996] [client 68.221.133.183:54447] [client 68.221.133.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gin.php"] [unique_id "acPlFiWKdJMhIccROjkCVAAAAUU"]
[Wed Mar 25 21:37:26.855905 2026] [:error] [pid 25967:tid 25986] [client 68.221.133.183:44526] [client 68.221.133.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ta.php"] [unique_id "acPlFvg8Qtq7ZM4mSFl1FAAAA04"]
[Wed Mar 25 21:37:27.488346 2026] [:error] [pid 25967:tid 25985] [client 68.221.133.183:46437] [client 68.221.133.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ta.php"] [unique_id "acPlF_g8Qtq7ZM4mSFl1FQAAA00"]
[Wed Mar 25 21:37:28.104869 2026] [:error] [pid 25875:tid 25892] [client 68.221.133.183:22278] [client 68.221.133.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x0rg.php"] [unique_id "acPlGBJ38QkS3NyfshwsogAAAos"]
[Wed Mar 25 21:37:28.610031 2026] [:error] [pid 25875:tid 25881] [client 68.221.133.183:36499] [client 68.221.133.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x0rg.php"] [unique_id "acPlGBJ38QkS3NyfshwsowAAAoA"]
[Wed Mar 25 21:37:29.123444 2026] [:error] [pid 25967:tid 25991] [client 68.221.133.183:7731] [client 68.221.133.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x0rg.php"] [unique_id "acPlGfg8Qtq7ZM4mSFl1FwAAA1M"]
[Wed Mar 25 21:37:29.627319 2026] [:error] [pid 25967:tid 25993] [client 68.221.133.183:22813] [client 68.221.133.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x0rg.php"] [unique_id "acPlGfg8Qtq7ZM4mSFl1GAAAA1U"]
[Wed Mar 25 21:37:30.158953 2026] [:error] [pid 25875:tid 25888] [client 68.221.133.183:22853] [client 68.221.133.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dk.php"] [unique_id "acPlGhJ38QkS3NyfshwspQAAAoc"]
[Wed Mar 25 22:01:42.744642 2026] [proxy_fcgi:error] [pid 47989:tid 48010] [client 51.12.86.140:16107] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 22:01:44.441793 2026] [proxy_fcgi:error] [pid 47989:tid 48005] [client 51.12.86.140:16107] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 22:01:44.709465 2026] [proxy_fcgi:error] [pid 47989:tid 47991] [client 51.12.86.140:16107] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 22:01:45.722085 2026] [proxy_fcgi:error] [pid 47989:tid 48004] [client 51.12.86.140:16107] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 22:01:47.954004 2026] [proxy_fcgi:error] [pid 47989:tid 47993] [client 51.12.86.140:16107] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 22:01:48.231483 2026] [proxy_fcgi:error] [pid 47989:tid 48011] [client 51.12.86.140:16107] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 22:01:48.519880 2026] [proxy_fcgi:error] [pid 47989:tid 47997] [client 51.12.86.140:16107] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 22:01:49.419912 2026] [proxy_fcgi:error] [pid 47989:tid 48014] [client 51.12.86.140:16107] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 22:01:55.011582 2026] [proxy_fcgi:error] [pid 892:tid 923] [client 51.12.86.140:16014] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 22:01:55.295986 2026] [proxy_fcgi:error] [pid 892:tid 905] [client 51.12.86.140:16014] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 22:01:55.560808 2026] [:error] [pid 892:tid 917] [client 51.12.86.140:16014] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/edit.php"] [unique_id "acPq0yT_G8WMU3T3yxrhLAAAANI"]
[Wed Mar 25 22:01:56.093646 2026] [:error] [pid 25967:tid 25991] [client 51.12.86.140:16029] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/edit.php"] [unique_id "acPq1Pg8Qtq7ZM4mSFl6EQAAA1M"]
[Wed Mar 25 22:01:57.221215 2026] [:error] [pid 47946:tid 47957] [client 51.12.86.140:16018] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/edit.php"] [unique_id "acPq1TipQTqBMSeKYheL5wAAAQk"]
[Wed Mar 25 22:01:57.823294 2026] [:error] [pid 756:tid 867] [client 51.12.86.140:16064] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/edit.php"] [unique_id "acPq1TOaW6oylMIDBCQmsAAAAI8"]
[Wed Mar 25 22:01:58.353529 2026] [:error] [pid 25875:tid 25904] [client 51.12.86.140:16010] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-blogs.php"] [unique_id "acPq1hJ38QkS3Nyfshw17gAAApc"]
[Wed Mar 25 22:01:58.900713 2026] [:error] [pid 25969:tid 26041] [client 51.12.86.140:7132] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-blogs.php"] [unique_id "acPq1hd3aEUmOfdKja8VsQAAA88"]
[Wed Mar 25 22:01:59.432288 2026] [:error] [pid 47989:tid 47996] [client 51.12.86.140:16082] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-blogs.php"] [unique_id "acPq1yWKdJMhIccROjkGuwAAAUU"]
[Wed Mar 25 22:01:59.983469 2026] [:error] [pid 26321:tid 26355] [client 51.12.86.140:16118] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-blogs.php"] [unique_id "acPq1_KO65qqGZCSPZpgpgAAAg4"]
[Wed Mar 25 22:02:00.588410 2026] [:error] [pid 26321:tid 26342] [client 51.12.86.140:16117] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wen.php"] [unique_id "acPq2PKO65qqGZCSPZpgqAAAAgM"]
[Wed Mar 25 22:02:01.114620 2026] [:error] [pid 26449:tid 26469] [client 51.12.86.140:16020] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wen.php"] [unique_id "acPq2dpZ2T15NDqzAjGNswAAAlA"]
[Wed Mar 25 22:02:01.645855 2026] [:error] [pid 25967:tid 25996] [client 51.12.86.140:16078] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wen.php"] [unique_id "acPq2fg8Qtq7ZM4mSFl6GQAAA1g"]
[Wed Mar 25 22:02:05.227301 2026] [:error] [pid 47989:tid 48015] [client 51.12.86.140:16095] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wen.php"] [unique_id "acPq3SWKdJMhIccROjkGwQAAAVg"]
[Wed Mar 25 22:02:05.759134 2026] [:error] [pid 26321:tid 26360] [client 51.12.86.140:16110] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/init.php"] [unique_id "acPq3fKO65qqGZCSPZpgtgAAAhM"]
[Wed Mar 25 22:02:06.287055 2026] [:error] [pid 892:tid 920] [client 51.12.86.140:16004] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/init.php"] [unique_id "acPq3iT_G8WMU3T3yxrhLwAAANU"]
[Wed Mar 25 22:02:06.930618 2026] [:error] [pid 26321:tid 26359] [client 51.12.86.140:16106] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/init.php"] [unique_id "acPq3vKO65qqGZCSPZpgvQAAAhI"]
[Wed Mar 25 22:02:07.464608 2026] [:error] [pid 26449:tid 26462] [client 51.12.86.140:16003] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/init.php"] [unique_id "acPq39pZ2T15NDqzAjGNtwAAAkk"]
[Wed Mar 25 22:02:08.003340 2026] [:error] [pid 26269:tid 26291] [client 51.12.86.140:16030] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-blog.php"] [unique_id "acPq4En7e-ZQbaIs7qzEWAAAAY8"]
[Wed Mar 25 22:02:08.530726 2026] [:error] [pid 25969:tid 26045] [client 51.12.86.140:16087] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-blog.php"] [unique_id "acPq4Bd3aEUmOfdKja8VtgAAA9M"]
[Wed Mar 25 22:02:09.057597 2026] [:error] [pid 26269:tid 26295] [client 51.12.86.140:16074] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-blog.php"] [unique_id "acPq4Un7e-ZQbaIs7qzEWwAAAZM"]
[Wed Mar 25 22:02:09.695095 2026] [:error] [pid 25875:tid 25894] [client 51.12.86.140:16093] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-blog.php"] [unique_id "acPq4RJ38QkS3Nyfshw19AAAAo0"]
[Wed Mar 25 22:02:10.244158 2026] [:error] [pid 25875:tid 25885] [client 51.12.86.140:16021] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/uuu.php"] [unique_id "acPq4hJ38QkS3Nyfshw1-AAAAoQ"]
[Wed Mar 25 22:02:10.780028 2026] [:error] [pid 25875:tid 25903] [client 51.12.86.140:16091] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/uuu.php"] [unique_id "acPq4hJ38QkS3Nyfshw1_QAAApY"]
[Wed Mar 25 22:02:11.315358 2026] [:error] [pid 25967:tid 25990] [client 51.12.86.140:7108] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/uuu.php"] [unique_id "acPq4_g8Qtq7ZM4mSFl6KwAAA1I"]
[Wed Mar 25 22:02:18.964573 2026] [:error] [pid 25875:tid 25900] [client 51.12.86.140:16105] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/uuu.php"] [unique_id "acPq6hJ38QkS3Nyfshw2KAAAApM"]
[Wed Mar 25 22:02:19.498163 2026] [:error] [pid 756:tid 869] [client 51.12.86.140:16007] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a5.php"] [unique_id "acPq6zOaW6oylMIDBCQmsgAAAJE"]
[Wed Mar 25 22:02:20.034160 2026] [:error] [pid 25967:tid 25982] [client 51.12.86.140:16022] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a5.php"] [unique_id "acPq7Pg8Qtq7ZM4mSFl6PgAAA0o"]
[Wed Mar 25 22:02:20.616527 2026] [:error] [pid 25967:tid 25979] [client 51.12.86.140:16080] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a5.php"] [unique_id "acPq7Pg8Qtq7ZM4mSFl6QwAAA0c"]
[Wed Mar 25 22:02:23.177176 2026] [:error] [pid 25875:tid 25883] [client 51.12.86.140:16079] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a5.php"] [unique_id "acPq7xJ38QkS3Nyfshw2OAAAAoI"]
[Wed Mar 25 22:02:23.720129 2026] [:error] [pid 25875:tid 25893] [client 51.12.86.140:16065] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-good.php"] [unique_id "acPq7xJ38QkS3Nyfshw2OgAAAow"]
[Wed Mar 25 22:02:24.258613 2026] [:error] [pid 25969:tid 26036] [client 51.12.86.140:16006] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-good.php"] [unique_id "acPq8Bd3aEUmOfdKja8VugAAA8o"]
[Wed Mar 25 22:02:25.721941 2026] [:error] [pid 25875:tid 25895] [client 51.12.86.140:16009] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-good.php"] [unique_id "acPq8RJ38QkS3Nyfshw2QwAAAo4"]
[Wed Mar 25 22:02:26.273125 2026] [:error] [pid 25875:tid 25894] [client 51.12.86.140:16026] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-good.php"] [unique_id "acPq8hJ38QkS3Nyfshw2RwAAAo0"]
[Wed Mar 25 22:02:26.857617 2026] [:error] [pid 25875:tid 25891] [client 51.12.86.140:16090] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/motu.php"] [unique_id "acPq8hJ38QkS3Nyfshw2TAAAAoo"]
[Wed Mar 25 22:02:27.397627 2026] [:error] [pid 47989:tid 47993] [client 51.12.86.140:7148] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/motu.php"] [unique_id "acPq8yWKdJMhIccROjkGygAAAUI"]
[Wed Mar 25 22:02:30.965251 2026] [:error] [pid 47989:tid 48000] [client 51.12.86.140:16028] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/motu.php"] [unique_id "acPq9iWKdJMhIccROjkGzQAAAUk"]
[Wed Mar 25 22:02:32.510675 2026] [:error] [pid 25875:tid 25881] [client 51.12.86.140:16027] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/motu.php"] [unique_id "acPq-BJ38QkS3Nyfshw2WQAAAoA"]
[Wed Mar 25 22:02:33.038135 2026] [:error] [pid 25875:tid 25902] [client 51.12.86.140:16005] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mh.php"] [unique_id "acPq-RJ38QkS3Nyfshw2XwAAApU"]
[Wed Mar 25 22:02:33.607776 2026] [:error] [pid 25875:tid 25887] [client 51.12.86.140:16114] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mh.php"] [unique_id "acPq-RJ38QkS3Nyfshw2YwAAAoY"]
[Wed Mar 25 22:02:36.586804 2026] [:error] [pid 25967:tid 25976] [client 51.12.86.140:16002] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mh.php"] [unique_id "acPq_Pg8Qtq7ZM4mSFl6UAAAA0Q"]
[Wed Mar 25 22:02:37.169078 2026] [:error] [pid 26321:tid 26365] [client 51.12.86.140:7112] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mh.php"] [unique_id "acPq_fKO65qqGZCSPZpg1gAAAhg"]
[Wed Mar 25 22:02:37.708051 2026] [:error] [pid 47989:tid 48013] [client 51.12.86.140:16102] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "acPq_SWKdJMhIccROjkG0QAAAVY"]
[Wed Mar 25 22:02:39.320676 2026] [:error] [pid 47989:tid 48010] [client 51.12.86.140:16076] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "acPq_yWKdJMhIccROjkG0wAAAVM"]
[Wed Mar 25 22:02:39.890883 2026] [:error] [pid 25969:tid 26041] [client 51.12.86.140:16023] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "acPq_xd3aEUmOfdKja8VvwAAA88"]
[Wed Mar 25 22:02:40.423329 2026] [:error] [pid 25969:tid 26038] [client 51.12.86.140:16098] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "acPrABd3aEUmOfdKja8VwQAAA8w"]
[Wed Mar 25 22:02:40.949804 2026] [:error] [pid 25875:tid 25888] [client 51.12.86.140:16031] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file.php"] [unique_id "acPrABJ38QkS3Nyfshw2cAAAAoc"]
[Wed Mar 25 22:02:41.475716 2026] [:error] [pid 25875:tid 25893] [client 51.12.86.140:16024] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file.php"] [unique_id "acPrARJ38QkS3Nyfshw2dAAAAow"]
[Wed Mar 25 22:02:42.022750 2026] [:error] [pid 25875:tid 25887] [client 51.12.86.140:16073] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file.php"] [unique_id "acPrAhJ38QkS3Nyfshw2dwAAAoY"]
[Wed Mar 25 22:02:42.574723 2026] [:error] [pid 25875:tid 25898] [client 51.12.86.140:16000] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file.php"] [unique_id "acPrAhJ38QkS3Nyfshw2fAAAApE"]
[Wed Mar 25 22:02:43.130721 2026] [:error] [pid 25875:tid 25900] [client 51.12.86.140:16104] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/as.php"] [unique_id "acPrAxJ38QkS3Nyfshw2gAAAApM"]
[Wed Mar 25 22:02:50.716089 2026] [:error] [pid 25967:tid 25989] [client 51.12.86.140:16089] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/as.php"] [unique_id "acPrCvg8Qtq7ZM4mSFl6VAAAA1E"]
[Wed Mar 25 22:02:51.305802 2026] [:error] [pid 25875:tid 25886] [client 51.12.86.140:7146] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/as.php"] [unique_id "acPrCxJ38QkS3Nyfshw2mgAAAoU"]
[Wed Mar 25 22:02:52.918788 2026] [:error] [pid 25967:tid 25984] [client 51.12.86.140:16072] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/as.php"] [unique_id "acPrDPg8Qtq7ZM4mSFl6WgAAA0w"]
[Wed Mar 25 22:02:53.486925 2026] [:error] [pid 47946:tid 47960] [client 51.12.86.140:16116] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/1.php"] [unique_id "acPrDTipQTqBMSeKYheL8wAAAQw"]
[Wed Mar 25 22:02:54.017596 2026] [:error] [pid 26321:tid 26361] [client 51.12.86.140:16038] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/1.php"] [unique_id "acPrDvKO65qqGZCSPZpg2gAAAhQ"]
[Wed Mar 25 22:02:54.582864 2026] [:error] [pid 26321:tid 26351] [client 51.12.86.140:16013] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/1.php"] [unique_id "acPrDvKO65qqGZCSPZpg2wAAAgo"]
[Wed Mar 25 22:02:55.127082 2026] [proxy_fcgi:error] [pid 26321:tid 26356] [client 51.12.86.140:16047] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 22:02:55.394497 2026] [proxy_fcgi:error] [pid 26321:tid 26360] [client 51.12.86.140:16047] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 22:02:56.450681 2026] [proxy_fcgi:error] [pid 26321:tid 26348] [client 51.12.86.140:16047] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 22:02:56.727058 2026] [proxy_fcgi:error] [pid 26321:tid 26365] [client 51.12.86.140:16047] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 22:02:56.993651 2026] [proxy_fcgi:error] [pid 26321:tid 26341] [client 51.12.86.140:16047] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 22:02:57.260740 2026] [proxy_fcgi:error] [pid 26321:tid 26354] [client 51.12.86.140:16047] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 22:02:57.529595 2026] [proxy_fcgi:error] [pid 26321:tid 26362] [client 51.12.86.140:16047] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 22:02:57.808659 2026] [proxy_fcgi:error] [pid 26321:tid 26352] [client 51.12.86.140:16047] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 22:02:58.076416 2026] [proxy_fcgi:error] [pid 26321:tid 26357] [client 51.12.86.140:16047] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 22:02:58.351918 2026] [proxy_fcgi:error] [pid 26321:tid 26350] [client 51.12.86.140:16047] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 22:02:58.619495 2026] [proxy_fcgi:error] [pid 26321:tid 26355] [client 51.12.86.140:16047] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 22:02:58.882822 2026] [:error] [pid 26321:tid 26353] [client 51.12.86.140:16047] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ioxi-o.php"] [unique_id "acPrEvKO65qqGZCSPZpg7QAAAgw"]
[Wed Mar 25 22:02:59.419862 2026] [:error] [pid 25967:tid 25991] [client 51.12.86.140:16096] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ioxi-o.php"] [unique_id "acPrE_g8Qtq7ZM4mSFl6aQAAA1M"]
[Wed Mar 25 22:03:00.082144 2026] [:error] [pid 756:tid 865] [client 51.12.86.140:7114] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ioxi-o.php"] [unique_id "acPrFDOaW6oylMIDBCQmugAAAI0"]
[Wed Mar 25 22:03:00.613999 2026] [:error] [pid 25967:tid 25982] [client 51.12.86.140:16036] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ioxi-o.php"] [unique_id "acPrFPg8Qtq7ZM4mSFl6cQAAA0o"]
[Wed Mar 25 22:03:01.147083 2026] [:error] [pid 25967:tid 25974] [client 51.12.86.140:16040] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/t.php"] [unique_id "acPrFfg8Qtq7ZM4mSFl6dwAAA0I"]
[Wed Mar 25 22:03:01.685704 2026] [:error] [pid 25875:tid 25905] [client 51.12.86.140:16067] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/t.php"] [unique_id "acPrFRJ38QkS3Nyfshw2pwAAApg"]
[Wed Mar 25 22:03:02.224169 2026] [:error] [pid 25875:tid 25897] [client 51.12.86.140:7122] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/t.php"] [unique_id "acPrFhJ38QkS3Nyfshw2qQAAApA"]
[Wed Mar 25 22:03:04.901631 2026] [:error] [pid 25967:tid 25984] [client 51.12.86.140:7157] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/t.php"] [unique_id "acPrGPg8Qtq7ZM4mSFl6jAAAA0w"]
[Wed Mar 25 22:03:05.429800 2026] [:error] [pid 25875:tid 25890] [client 51.12.86.140:16115] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "acPrGRJ38QkS3Nyfshw2tgAAAok"]
[Wed Mar 25 22:03:06.012976 2026] [:error] [pid 25967:tid 25986] [client 51.12.86.140:16103] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "acPrGvg8Qtq7ZM4mSFl6kgAAA04"]
[Wed Mar 25 22:03:06.574206 2026] [:error] [pid 26321:tid 26363] [client 51.12.86.140:16075] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "acPrGvKO65qqGZCSPZpg7wAAAhY"]
[Wed Mar 25 22:03:07.102461 2026] [:error] [pid 756:tid 859] [client 51.12.86.140:16058] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "acPrGzOaW6oylMIDBCQmwAAAAIc"]
[Wed Mar 25 22:03:07.633443 2026] [:error] [pid 25969:tid 26044] [client 51.12.86.140:7106] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/166.php"] [unique_id "acPrGxd3aEUmOfdKja8VygAAA9I"]
[Wed Mar 25 22:03:08.162901 2026] [:error] [pid 25967:tid 25984] [client 51.12.86.140:16122] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/166.php"] [unique_id "acPrHPg8Qtq7ZM4mSFl6mwAAA0w"]
[Wed Mar 25 22:03:08.723966 2026] [:error] [pid 25967:tid 25976] [client 51.12.86.140:16019] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/166.php"] [unique_id "acPrHPg8Qtq7ZM4mSFl6oAAAA0Q"]
[Wed Mar 25 22:03:09.294454 2026] [:error] [pid 25967:tid 25977] [client 51.12.86.140:7151] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/166.php"] [unique_id "acPrHfg8Qtq7ZM4mSFl6pAAAA0U"]
[Wed Mar 25 22:03:10.920948 2026] [:error] [pid 25967:tid 25996] [client 51.12.86.140:7107] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gettest.php"] [unique_id "acPrHvg8Qtq7ZM4mSFl6qgAAA1g"]
[Wed Mar 25 22:03:11.448099 2026] [:error] [pid 25967:tid 25985] [client 51.12.86.140:7129] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gettest.php"] [unique_id "acPrH_g8Qtq7ZM4mSFl6rwAAA00"]
[Wed Mar 25 22:03:11.974703 2026] [:error] [pid 26321:tid 26358] [client 51.12.86.140:16068] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gettest.php"] [unique_id "acPrH_KO65qqGZCSPZpg9AAAAhE"]
[Wed Mar 25 22:03:12.499620 2026] [:error] [pid 26321:tid 26352] [client 51.12.86.140:7121] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gettest.php"] [unique_id "acPrIPKO65qqGZCSPZpg9wAAAgs"]
[Wed Mar 25 22:03:15.215341 2026] [:error] [pid 26321:tid 26356] [client 51.12.86.140:16120] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tool.php"] [unique_id "acPrI_KO65qqGZCSPZpg-wAAAg8"]
[Wed Mar 25 22:03:15.743722 2026] [:error] [pid 25875:tid 25902] [client 51.12.86.140:7133] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tool.php"] [unique_id "acPrIxJ38QkS3Nyfshw2xAAAApU"]
[Wed Mar 25 22:03:17.131594 2026] [:error] [pid 47989:tid 47996] [client 51.12.86.140:7115] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tool.php"] [unique_id "acPrJSWKdJMhIccROjkG5QAAAUU"]
[Wed Mar 25 22:03:17.658656 2026] [:error] [pid 892:tid 910] [client 51.12.86.140:16009] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tool.php"] [unique_id "acPrJST_G8WMU3T3yxrhQwAAAMw"]
[Wed Mar 25 22:03:18.190410 2026] [:error] [pid 47989:tid 48003] [client 51.12.86.140:16062] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-access.php"] [unique_id "acPrJiWKdJMhIccROjkG5wAAAUw"]
[Wed Mar 25 22:03:18.718220 2026] [:error] [pid 26321:tid 26364] [client 51.12.86.140:16070] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-access.php"] [unique_id "acPrJvKO65qqGZCSPZphAgAAAhc"]
[Wed Mar 25 22:03:19.245992 2026] [:error] [pid 26321:tid 26352] [client 51.12.86.140:7127] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-access.php"] [unique_id "acPrJ_KO65qqGZCSPZphBQAAAgs"]
[Wed Mar 25 22:03:19.787392 2026] [:error] [pid 47989:tid 48015] [client 51.12.86.140:16097] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-access.php"] [unique_id "acPrJyWKdJMhIccROjkG6wAAAVg"]
[Wed Mar 25 22:03:20.315923 2026] [:error] [pid 47989:tid 48011] [client 51.12.86.140:7156] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Cap.php"] [unique_id "acPrKCWKdJMhIccROjkG7AAAAVQ"]
[Wed Mar 25 22:03:20.845879 2026] [:error] [pid 25875:tid 25899] [client 51.12.86.140:16101] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Cap.php"] [unique_id "acPrKBJ38QkS3Nyfshw2yQAAApI"]
[Wed Mar 25 22:03:21.485456 2026] [:error] [pid 25875:tid 25892] [client 51.12.86.140:7131] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Cap.php"] [unique_id "acPrKRJ38QkS3Nyfshw2zgAAAos"]
[Wed Mar 25 22:03:22.051327 2026] [:error] [pid 47989:tid 48013] [client 51.12.86.140:7109] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Cap.php"] [unique_id "acPrKiWKdJMhIccROjkG7QAAAVY"]
[Wed Mar 25 22:03:22.619674 2026] [:error] [pid 25875:tid 25883] [client 51.12.86.140:16100] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/public/vx.php"] [unique_id "acPrKhJ38QkS3Nyfshw20gAAAoI"]
[Wed Mar 25 22:03:23.233600 2026] [:error] [pid 25967:tid 25973] [client 51.12.86.140:16016] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/public/vx.php"] [unique_id "acPrK_g8Qtq7ZM4mSFl6wwAAA0E"]
[Wed Mar 25 22:03:23.761701 2026] [:error] [pid 25875:tid 25881] [client 51.12.86.140:16126] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/public/vx.php"] [unique_id "acPrKxJ38QkS3Nyfshw21gAAAoA"]
[Wed Mar 25 22:03:24.327654 2026] [:error] [pid 25967:tid 25976] [client 51.12.86.140:16011] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/public/vx.php"] [unique_id "acPrLPg8Qtq7ZM4mSFl6xQAAA0Q"]
[Wed Mar 25 22:03:25.901348 2026] [:error] [pid 25967:tid 25985] [client 51.12.86.140:7070] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ms.php"] [unique_id "acPrLfg8Qtq7ZM4mSFl6zQAAA00"]
[Wed Mar 25 22:03:26.425957 2026] [:error] [pid 26321:tid 26343] [client 51.12.86.140:16060] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ms.php"] [unique_id "acPrLvKO65qqGZCSPZphCwAAAgQ"]
[Wed Mar 25 22:03:26.952004 2026] [:error] [pid 26449:tid 26467] [client 51.12.86.140:16092] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ms.php"] [unique_id "acPrLtpZ2T15NDqzAjGOIAAAAk4"]
[Wed Mar 25 22:03:28.581654 2026] [:error] [pid 26321:tid 26349] [client 51.12.86.140:16113] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ms.php"] [unique_id "acPrMPKO65qqGZCSPZphEAAAAgg"]
[Wed Mar 25 22:03:30.171331 2026] [:error] [pid 26449:tid 26456] [client 51.12.86.140:16015] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hplfuns.php"] [unique_id "acPrMtpZ2T15NDqzAjGOJgAAAkM"]
[Wed Mar 25 22:03:30.737796 2026] [:error] [pid 25875:tid 25904] [client 51.12.86.140:16048] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hplfuns.php"] [unique_id "acPrMhJ38QkS3Nyfshw22AAAApc"]
[Wed Mar 25 22:03:31.265919 2026] [:error] [pid 26269:tid 26296] [client 51.12.86.140:16111] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hplfuns.php"] [unique_id "acPrM0n7e-ZQbaIs7qzEbQAAAZQ"]
[Wed Mar 25 22:03:31.793377 2026] [:error] [pid 25967:tid 25974] [client 51.12.86.140:7116] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hplfuns.php"] [unique_id "acPrM_g8Qtq7ZM4mSFl61QAAA0I"]
[Wed Mar 25 22:03:32.320768 2026] [:error] [pid 892:tid 899] [client 51.12.86.140:16124] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/155.php"] [unique_id "acPrNCT_G8WMU3T3yxrhTQAAAMM"]
[Wed Mar 25 22:03:32.861801 2026] [:error] [pid 26269:tid 26291] [client 51.12.86.140:7059] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/155.php"] [unique_id "acPrNEn7e-ZQbaIs7qzEbgAAAY8"]
[Wed Mar 25 22:03:33.406837 2026] [:error] [pid 25969:tid 26028] [client 51.12.86.140:16043] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/155.php"] [unique_id "acPrNRd3aEUmOfdKja8V0AAAA8I"]
[Wed Mar 25 22:03:33.935346 2026] [:error] [pid 26321:tid 26357] [client 51.12.86.140:16044] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/155.php"] [unique_id "acPrNfKO65qqGZCSPZphFQAAAhA"]
[Wed Mar 25 22:03:34.567480 2026] [:error] [pid 756:tid 861] [client 51.12.86.140:16051] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/d12.php"] [unique_id "acPrNjOaW6oylMIDBCQmxgAAAIk"]
[Wed Mar 25 22:03:35.122216 2026] [:error] [pid 25967:tid 25994] [client 51.12.86.140:16119] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/d12.php"] [unique_id "acPrN_g8Qtq7ZM4mSFl63QAAA1Y"]
[Wed Mar 25 22:03:35.647719 2026] [:error] [pid 26269:tid 26294] [client 51.12.86.140:16059] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/d12.php"] [unique_id "acPrN0n7e-ZQbaIs7qzEcQAAAZI"]
[Wed Mar 25 22:03:49.492733 2026] [:error] [pid 25967:tid 25982] [client 51.12.86.140:16086] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tfm.php"] [unique_id "acPrRfg8Qtq7ZM4mSFl68AAAA0o"]
[Wed Mar 25 22:03:50.650932 2026] [:error] [pid 25969:tid 26032] [client 51.12.86.140:16081] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tfm.php"] [unique_id "acPrRhd3aEUmOfdKja8V1wAAA8Y"]
[Wed Mar 25 22:03:51.179052 2026] [:error] [pid 47989:tid 48007] [client 51.12.86.140:16077] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tfm.php"] [unique_id "acPrRyWKdJMhIccROjkG-AAAAVA"]
[Wed Mar 25 22:03:51.706171 2026] [:error] [pid 25967:tid 25991] [client 51.12.86.140:7147] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tfm.php"] [unique_id "acPrR_g8Qtq7ZM4mSFl6-gAAA1M"]
[Wed Mar 25 22:03:52.295394 2026] [:error] [pid 25967:tid 25979] [client 51.12.86.140:7072] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-act.php"] [unique_id "acPrSPg8Qtq7ZM4mSFl6-wAAA0c"]
[Wed Mar 25 22:03:52.830416 2026] [:error] [pid 25967:tid 25973] [client 51.12.86.140:7143] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-act.php"] [unique_id "acPrSPg8Qtq7ZM4mSFl6_QAAA0E"]
[Wed Mar 25 22:03:53.355418 2026] [:error] [pid 25875:tid 25881] [client 51.12.86.140:16108] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-act.php"] [unique_id "acPrSRJ38QkS3Nyfshw2_AAAAoA"]
[Wed Mar 25 22:03:53.918987 2026] [:error] [pid 26321:tid 26348] [client 51.12.86.140:16084] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-act.php"] [unique_id "acPrSfKO65qqGZCSPZphGwAAAgc"]
[Wed Mar 25 22:03:54.493842 2026] [:error] [pid 25875:tid 25901] [client 51.12.86.140:16045] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/amax.php"] [unique_id "acPrShJ38QkS3Nyfshw3AAAAApQ"]
[Wed Mar 25 22:03:55.105801 2026] [:error] [pid 25875:tid 25902] [client 51.12.86.140:7150] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/amax.php"] [unique_id "acPrSxJ38QkS3Nyfshw3BAAAApU"]
[Wed Mar 25 22:03:55.634019 2026] [:error] [pid 25967:tid 25991] [client 51.12.86.140:16035] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/amax.php"] [unique_id "acPrS_g8Qtq7ZM4mSFl7BwAAA1M"]
[Wed Mar 25 22:03:56.159692 2026] [:error] [pid 756:tid 874] [client 51.12.86.140:16069] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/amax.php"] [unique_id "acPrTDOaW6oylMIDBCQmzwAAAJY"]
[Wed Mar 25 22:03:56.693061 2026] [:error] [pid 25875:tid 25898] [client 51.12.86.140:16012] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws86.php"] [unique_id "acPrTBJ38QkS3Nyfshw3CQAAApE"]
[Wed Mar 25 22:03:57.219694 2026] [:error] [pid 25875:tid 25885] [client 51.12.86.140:7052] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws86.php"] [unique_id "acPrTRJ38QkS3Nyfshw3DQAAAoQ"]
[Wed Mar 25 22:03:57.746922 2026] [:error] [pid 26321:tid 26350] [client 51.12.86.140:7128] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws86.php"] [unique_id "acPrTfKO65qqGZCSPZphIQAAAgk"]
[Wed Mar 25 22:03:59.300154 2026] [proxy_fcgi:error] [pid 25967:tid 25978] [client 51.12.86.140:16039] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 22:04:00.403147 2026] [proxy_fcgi:error] [pid 25967:tid 25985] [client 51.12.86.140:16039] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 22:04:00.670175 2026] [proxy_fcgi:error] [pid 25967:tid 25974] [client 51.12.86.140:16039] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 22:04:02.364025 2026] [proxy_fcgi:error] [pid 25967:tid 25988] [client 51.12.86.140:16039] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 22:04:02.632529 2026] [proxy_fcgi:error] [pid 25967:tid 25989] [client 51.12.86.140:16039] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 22:04:02.898438 2026] [proxy_fcgi:error] [pid 25967:tid 25984] [client 51.12.86.140:16039] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 22:04:03.177743 2026] [proxy_fcgi:error] [pid 25967:tid 25980] [client 51.12.86.140:16039] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 22:04:03.743117 2026] [proxy_fcgi:error] [pid 25967:tid 25976] [client 51.12.86.140:16039] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 22:04:04.602249 2026] [proxy_fcgi:error] [pid 25967:tid 25990] [client 51.12.86.140:16039] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 22:04:14.510986 2026] [proxy_fcgi:error] [pid 25967:tid 25978] [client 51.12.86.140:16025] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 22:04:14.774681 2026] [:error] [pid 25967:tid 25989] [client 51.12.86.140:16025] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/torsa1.php"] [unique_id "acPrXvg8Qtq7ZM4mSFl7MwAAA1E"]
[Wed Mar 25 22:04:15.306680 2026] [:error] [pid 756:tid 861] [client 51.12.86.140:7120] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/torsa1.php"] [unique_id "acPrXzOaW6oylMIDBCQm1AAAAIk"]
[Wed Mar 25 22:04:15.835331 2026] [:error] [pid 25969:tid 26050] [client 51.12.86.140:7152] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/torsa1.php"] [unique_id "acPrXxd3aEUmOfdKja8V3AAAA9g"]
[Wed Mar 25 22:04:16.359753 2026] [:error] [pid 47989:tid 48002] [client 51.12.86.140:7158] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/torsa1.php"] [unique_id "acPrYCWKdJMhIccROjkHCgAAAUs"]
[Wed Mar 25 22:04:16.933309 2026] [:error] [pid 47989:tid 47994] [client 51.12.86.140:7104] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/abc.php"] [unique_id "acPrYCWKdJMhIccROjkHCwAAAUM"]
[Wed Mar 25 22:04:24.580123 2026] [:error] [pid 25875:tid 25882] [client 51.12.86.140:7164] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/abc.php"] [unique_id "acPraBJ38QkS3Nyfshw3NwAAAoE"]
[Wed Mar 25 22:04:25.792360 2026] [:error] [pid 25875:tid 25893] [client 51.12.86.140:7162] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/abc.php"] [unique_id "acPraRJ38QkS3Nyfshw3PgAAAow"]
[Wed Mar 25 22:04:26.318685 2026] [:error] [pid 47989:tid 48014] [client 51.12.86.140:7153] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/abc.php"] [unique_id "acPraiWKdJMhIccROjkHDwAAAVc"]
[Wed Mar 25 22:04:26.860379 2026] [:error] [pid 26321:tid 26344] [client 51.12.86.140:7154] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nw.php"] [unique_id "acPravKO65qqGZCSPZphNQAAAgU"]
[Wed Mar 25 22:04:27.385911 2026] [:error] [pid 26321:tid 26358] [client 51.12.86.140:16066] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nw.php"] [unique_id "acPra_KO65qqGZCSPZphOQAAAhE"]
[Wed Mar 25 22:04:27.918498 2026] [:error] [pid 26321:tid 26356] [client 51.12.86.140:7054] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nw.php"] [unique_id "acPra_KO65qqGZCSPZphPAAAAg8"]
[Wed Mar 25 22:04:30.645519 2026] [:error] [pid 25967:tid 25981] [client 51.12.86.140:7165] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nw.php"] [unique_id "acPrbvg8Qtq7ZM4mSFl7TwAAA0k"]
[Wed Mar 25 22:04:31.170736 2026] [:error] [pid 25967:tid 25983] [client 51.12.86.140:7159] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/44.php"] [unique_id "acPrb_g8Qtq7ZM4mSFl7UAAAA0s"]
[Wed Mar 25 22:04:31.768875 2026] [:error] [pid 756:tid 857] [client 51.12.86.140:7166] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/44.php"] [unique_id "acPrbzOaW6oylMIDBCQm2AAAAIU"]
[Wed Mar 25 22:04:32.318572 2026] [:error] [pid 47989:tid 48001] [client 51.12.86.140:7043] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/44.php"] [unique_id "acPrcCWKdJMhIccROjkHGAAAAUo"]
[Wed Mar 25 22:04:32.844891 2026] [:error] [pid 47946:tid 47961] [client 51.12.86.140:7138] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/44.php"] [unique_id "acPrcDipQTqBMSeKYheMAgAAAQ0"]
[Wed Mar 25 22:04:33.388343 2026] [:error] [pid 892:tid 907] [client 51.12.86.140:16033] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws49.php"] [unique_id "acPrcST_G8WMU3T3yxrhWwAAAMk"]
[Wed Mar 25 22:04:33.915105 2026] [:error] [pid 25967:tid 25986] [client 51.12.86.140:7051] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws49.php"] [unique_id "acPrcfg8Qtq7ZM4mSFl7UwAAA04"]
[Wed Mar 25 22:04:34.441439 2026] [:error] [pid 25967:tid 25989] [client 51.12.86.140:7042] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws49.php"] [unique_id "acPrcvg8Qtq7ZM4mSFl7VQAAA1E"]
[Wed Mar 25 22:04:34.966967 2026] [:error] [pid 25969:tid 26029] [client 51.12.86.140:16059] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws49.php"] [unique_id "acPrchd3aEUmOfdKja8V3wAAA8M"]
[Wed Mar 25 22:04:35.573300 2026] [:error] [pid 26321:tid 26350] [client 51.12.86.140:16057] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/amp.php"] [unique_id "acPrc_KO65qqGZCSPZphRgAAAgk"]
[Wed Mar 25 22:04:36.098071 2026] [:error] [pid 47989:tid 48008] [client 51.12.86.140:7047] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/amp.php"] [unique_id "acPrdCWKdJMhIccROjkHIgAAAVE"]
[Wed Mar 25 22:04:36.667261 2026] [:error] [pid 47946:tid 47966] [client 51.12.86.140:16071] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/amp.php"] [unique_id "acPrdDipQTqBMSeKYheMBQAAARI"]
[Wed Mar 25 22:04:37.195140 2026] [:error] [pid 25875:tid 25892] [client 51.12.86.140:7069] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/amp.php"] [unique_id "acPrdRJ38QkS3Nyfshw3SgAAAos"]
[Wed Mar 25 22:04:37.755831 2026] [:error] [pid 25875:tid 25901] [client 51.12.86.140:7141] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/install.php"] [unique_id "acPrdRJ38QkS3Nyfshw3TAAAApQ"]
[Wed Mar 25 22:04:38.283946 2026] [:error] [pid 25967:tid 25995] [client 51.12.86.140:16034] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/install.php"] [unique_id "acPrdvg8Qtq7ZM4mSFl7WwAAA1c"]
[Wed Mar 25 22:04:41.824333 2026] [:error] [pid 25875:tid 25900] [client 51.12.86.140:7135] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/install.php"] [unique_id "acPreRJ38QkS3Nyfshw3UQAAApM"]
[Wed Mar 25 22:04:42.356772 2026] [:error] [pid 756:tid 875] [client 51.12.86.140:16083] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/install.php"] [unique_id "acPrejOaW6oylMIDBCQm2gAAAJc"]
[Wed Mar 25 22:04:43.183758 2026] [:error] [pid 892:tid 911] [client 51.12.86.140:7118] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a4.php"] [unique_id "acPreyT_G8WMU3T3yxrhYAAAAM0"]
[Wed Mar 25 22:04:45.910614 2026] [:error] [pid 892:tid 918] [client 51.12.86.140:7074] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a4.php"] [unique_id "acPrfST_G8WMU3T3yxrhZQAAANM"]
[Wed Mar 25 22:04:47.931088 2026] [:error] [pid 25967:tid 25976] [client 51.12.86.140:16042] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a4.php"] [unique_id "acPrf_g8Qtq7ZM4mSFl7awAAA0Q"]
[Wed Mar 25 22:04:48.460872 2026] [:error] [pid 25969:tid 26044] [client 51.12.86.140:7090] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a4.php"] [unique_id "acPrgBd3aEUmOfdKja8V5AAAA9I"]
[Wed Mar 25 22:04:49.031087 2026] [:error] [pid 892:tid 923] [client 51.12.86.140:7123] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws81.php"] [unique_id "acPrgST_G8WMU3T3yxrhaAAAANg"]
[Wed Mar 25 22:04:49.581679 2026] [:error] [pid 25875:tid 25884] [client 51.12.86.140:16032] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws81.php"] [unique_id "acPrgRJ38QkS3Nyfshw3VgAAAoM"]
[Wed Mar 25 22:04:50.243567 2026] [:error] [pid 25875:tid 25882] [client 51.12.86.140:16046] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws81.php"] [unique_id "acPrghJ38QkS3Nyfshw3WQAAAoE"]
[Wed Mar 25 22:04:50.771745 2026] [:error] [pid 25967:tid 25980] [client 51.12.86.140:16055] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws81.php"] [unique_id "acPrgvg8Qtq7ZM4mSFl7bgAAA0g"]
[Wed Mar 25 22:04:51.355836 2026] [:error] [pid 47946:tid 47953] [client 51.12.86.140:16053] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sid3.php"] [unique_id "acPrgzipQTqBMSeKYheMBwAAAQU"]
[Wed Mar 25 22:04:52.058179 2026] [:error] [pid 26449:tid 26469] [client 51.12.86.140:7110] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sid3.php"] [unique_id "acPrhNpZ2T15NDqzAjGORAAAAlA"]
[Wed Mar 25 22:04:52.635290 2026] [:error] [pid 25875:tid 25885] [client 51.12.86.140:7094] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sid3.php"] [unique_id "acPrhBJ38QkS3Nyfshw3XgAAAoQ"]
[Wed Mar 25 22:04:53.171696 2026] [:error] [pid 25875:tid 25900] [client 51.12.86.140:16099] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sid3.php"] [unique_id "acPrhRJ38QkS3Nyfshw3XwAAApM"]
[Wed Mar 25 22:04:53.703376 2026] [:error] [pid 892:tid 914] [client 51.12.86.140:7113] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tx78.php"] [unique_id "acPrhST_G8WMU3T3yxrhbwAAANA"]
[Wed Mar 25 22:04:54.263316 2026] [:error] [pid 892:tid 899] [client 51.12.86.140:7134] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tx78.php"] [unique_id "acPrhiT_G8WMU3T3yxrhdAAAAMM"]
[Wed Mar 25 22:04:54.789844 2026] [:error] [pid 25967:tid 25987] [client 51.12.86.140:7100] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tx78.php"] [unique_id "acPrhvg8Qtq7ZM4mSFl7cwAAA08"]
[Wed Mar 25 22:04:56.461839 2026] [:error] [pid 25967:tid 25976] [client 51.12.86.140:7092] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tx78.php"] [unique_id "acPriPg8Qtq7ZM4mSFl7dwAAA0Q"]
[Wed Mar 25 22:04:56.989974 2026] [:error] [pid 756:tid 856] [client 51.12.86.140:7091] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp9.php"] [unique_id "acPriDOaW6oylMIDBCQm3gAAAIQ"]
[Wed Mar 25 22:04:57.527769 2026] [:error] [pid 25967:tid 25987] [client 51.12.86.140:6995] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp9.php"] [unique_id "acPrifg8Qtq7ZM4mSFl7gQAAA08"]
[Wed Mar 25 22:04:59.105702 2026] [:error] [pid 892:tid 922] [client 51.12.86.140:7058] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp9.php"] [unique_id "acPriyT_G8WMU3T3yxrheAAAANc"]
[Wed Mar 25 22:04:59.652949 2026] [:error] [pid 47946:tid 47970] [client 51.12.86.140:7167] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp9.php"] [unique_id "acPrizipQTqBMSeKYheMCwAAARY"]
[Wed Mar 25 22:05:00.191961 2026] [:error] [pid 892:tid 914] [client 51.12.86.140:7045] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cu.php"] [unique_id "acPrjCT_G8WMU3T3yxrhewAAANA"]
[Wed Mar 25 22:05:00.772870 2026] [:error] [pid 26321:tid 26354] [client 51.12.86.140:6986] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cu.php"] [unique_id "acPrjPKO65qqGZCSPZphUQAAAg0"]
[Wed Mar 25 22:05:01.396826 2026] [:error] [pid 26449:tid 26466] [client 51.12.86.140:16056] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cu.php"] [unique_id "acPrjdpZ2T15NDqzAjGOTQAAAk0"]
[Wed Mar 25 22:05:01.926814 2026] [:error] [pid 47946:tid 47954] [client 51.12.86.140:16041] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cu.php"] [unique_id "acPrjTipQTqBMSeKYheMDQAAAQY"]
[Wed Mar 25 22:05:02.498472 2026] [:error] [pid 25967:tid 25973] [client 51.12.86.140:7056] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/asd.php"] [unique_id "acPrjvg8Qtq7ZM4mSFl7kAAAA0E"]
[Wed Mar 25 22:05:03.075499 2026] [:error] [pid 25969:tid 26050] [client 51.12.86.140:7124] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/asd.php"] [unique_id "acPrjxd3aEUmOfdKja8V6QAAA9g"]
[Wed Mar 25 22:05:06.697401 2026] [:error] [pid 25875:tid 25900] [client 51.12.86.140:7165] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/asd.php"] [unique_id "acPrkhJ38QkS3Nyfshw3bgAAApM"]
[Wed Mar 25 22:05:07.222638 2026] [:error] [pid 25967:tid 25987] [client 51.12.86.140:16054] [client 51.12.86.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/asd.php"] [unique_id "acPrk_g8Qtq7ZM4mSFl7mQAAA08"]
[Wed Mar 25 22:05:14.786824 2026] [proxy_fcgi:error] [pid 25875:tid 25904] [client 51.12.86.140:7068] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 22:05:15.053471 2026] [proxy_fcgi:error] [pid 25875:tid 25888] [client 51.12.86.140:7068] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 04:45:54.086864 2026] [:error] [pid 19818:tid 19822] [client 178.128.146.79:50237] [client 178.128.146.79] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 178.128.146.79, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-login.php"] [unique_id "acRJgszaSnm3d1BeM5UpBQAAAMI"]
[Thu Mar 26 04:45:54.095823 2026] [proxy_fcgi:error] [pid 19818:tid 19822] [client 178.128.146.79:50237] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 07:12:51.461458 2026] [:error] [pid 19711:tid 19767] [client 192.3.207.218:56360] [client 192.3.207.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/artisan"] [unique_id "acRr82j3l1y81GYfluRJSgAAAFI"]
[Thu Mar 26 07:12:51.885612 2026] [:error] [pid 19818:tid 19826] [client 192.3.207.218:56775] [client 192.3.207.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/artisan"] [unique_id "acRr88zaSnm3d1BeM5WNUgAAAMY"]
[Thu Mar 26 07:12:53.090938 2026] [:error] [pid 19818:tid 19844] [client 192.3.207.218:57234] [client 192.3.207.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/artisan"] [unique_id "acRr9czaSnm3d1BeM5WNkwAAANg"]
[Thu Mar 26 07:12:53.564846 2026] [:error] [pid 19818:tid 19834] [client 192.3.207.218:57760] [client 192.3.207.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/artisan"] [unique_id "acRr9czaSnm3d1BeM5WNrQAAAM4"]
[Thu Mar 26 07:12:54.416767 2026] [:error] [pid 19710:tid 19736] [client 192.3.207.218:58151] [client 192.3.207.218] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env"] [unique_id "acRr9gVEWP8Ar68Njk6pGgAAAA4"]
[Thu Mar 26 07:12:54.842003 2026] [:error] [pid 19710:tid 19723] [client 192.3.207.218:58822] [client 192.3.207.218] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env"] [unique_id "acRr9gVEWP8Ar68Njk6pLwAAAAE"]
[Thu Mar 26 07:12:55.705770 2026] [:error] [pid 19818:tid 19842] [client 192.3.207.218:59198] [client 192.3.207.218] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dwelectservices.com.au"] [uri "/.env"] [unique_id "acRr98zaSnm3d1BeM5WN6gAAANY"]
[Thu Mar 26 07:12:56.125587 2026] [:error] [pid 31717:tid 31741] [client 192.3.207.218:60134] [client 192.3.207.218] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dwelectservices.com.au"] [uri "/.env"] [unique_id "acRr-L-SCF7YDISDX49wFgAAAZM"]
[Thu Mar 26 14:19:30.757830 2026] [proxy_fcgi:error] [pid 31780:tid 31827] [client 20.199.101.134:5100] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 14:19:31.022426 2026] [proxy_fcgi:error] [pid 31780:tid 31839] [client 20.199.101.134:5100] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 14:19:31.261852 2026] [proxy_fcgi:error] [pid 31780:tid 31836] [client 20.199.101.134:5100] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 14:19:31.544855 2026] [proxy_fcgi:error] [pid 31780:tid 31844] [client 20.199.101.134:5100] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 14:19:31.784038 2026] [proxy_fcgi:error] [pid 31780:tid 31843] [client 20.199.101.134:5100] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 14:19:32.032403 2026] [proxy_fcgi:error] [pid 31780:tid 31825] [client 20.199.101.134:5100] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 14:19:32.273008 2026] [proxy_fcgi:error] [pid 31780:tid 31827] [client 20.199.101.134:5100] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 14:19:32.512029 2026] [proxy_fcgi:error] [pid 31780:tid 31837] [client 20.199.101.134:5100] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 14:19:32.750818 2026] [proxy_fcgi:error] [pid 31780:tid 31820] [client 20.199.101.134:5100] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 14:19:33.008488 2026] [proxy_fcgi:error] [pid 31780:tid 31836] [client 20.199.101.134:5100] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 14:19:33.262311 2026] [:error] [pid 31780:tid 31834] [client 20.199.101.134:5100] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zcsu.php"] [unique_id "acTP9ZJDwZsy5O4ZXEhCkQAAAg0"]
[Thu Mar 26 14:19:33.755575 2026] [:error] [pid 31780:tid 31824] [client 20.199.101.134:5096] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zcsu.php"] [unique_id "acTP9ZJDwZsy5O4ZXEhCkgAAAgQ"]
[Thu Mar 26 14:19:34.297922 2026] [:error] [pid 31780:tid 31830] [client 20.199.101.134:5073] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zcsu.php"] [unique_id "acTP9pJDwZsy5O4ZXEhClwAAAgk"]
[Thu Mar 26 14:19:34.810168 2026] [:error] [pid 19712:tid 19778] [client 20.199.101.134:5111] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zcsu.php"] [unique_id "acTP9tWhKhRNqm23vFMCugAAAII"]
[Thu Mar 26 14:19:35.314648 2026] [:error] [pid 19818:tid 19828] [client 20.199.101.134:5095] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aa.php"] [unique_id "acTP98zaSnm3d1BeM5VxCgAAAMg"]
[Thu Mar 26 14:19:35.830073 2026] [:error] [pid 19818:tid 19833] [client 20.199.101.134:5083] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aa.php"] [unique_id "acTP98zaSnm3d1BeM5VxEAAAAM0"]
[Thu Mar 26 14:19:36.322802 2026] [:error] [pid 19711:tid 19760] [client 20.199.101.134:5003] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aa.php"] [unique_id "acTP-Gj3l1y81GYfluR0WwAAAEs"]
[Thu Mar 26 14:19:36.897508 2026] [:error] [pid 19818:tid 19820] [client 20.199.101.134:5058] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aa.php"] [unique_id "acTP-MzaSnm3d1BeM5VxGQAAAMA"]
[Thu Mar 26 14:19:37.390123 2026] [:error] [pid 19710:tid 19730] [client 20.199.101.134:5061] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-cxs.php"] [unique_id "acTP-QVEWP8Ar68Njk7b9wAAAAg"]
[Thu Mar 26 14:19:38.019343 2026] [:error] [pid 31780:tid 31832] [client 20.199.101.134:5103] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-cxs.php"] [unique_id "acTP-pJDwZsy5O4ZXEhCngAAAgs"]
[Thu Mar 26 14:19:38.566024 2026] [:error] [pid 31780:tid 31834] [client 20.199.101.134:5034] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-cxs.php"] [unique_id "acTP-pJDwZsy5O4ZXEhCowAAAg0"]
[Thu Mar 26 14:19:39.036440 2026] [:error] [pid 19710:tid 19744] [client 20.199.101.134:4997] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-cxs.php"] [unique_id "acTP-wVEWP8Ar68Njk7b_AAAABY"]
[Thu Mar 26 14:19:39.586053 2026] [:error] [pid 31778:tid 31804] [client 20.199.101.134:5107] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-scanner.php"] [unique_id "acTP-w3kybI2o-xasmC2XAAAAcs"]
[Thu Mar 26 14:19:40.104852 2026] [:error] [pid 31780:tid 31825] [client 20.199.101.134:5067] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-scanner.php"] [unique_id "acTP_JJDwZsy5O4ZXEhCqwAAAgU"]
[Thu Mar 26 14:19:40.573704 2026] [:error] [pid 31780:tid 31844] [client 20.199.101.134:4953] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-scanner.php"] [unique_id "acTP_JJDwZsy5O4ZXEhCrwAAAhc"]
[Thu Mar 26 14:19:41.043786 2026] [:error] [pid 31717:tid 31735] [client 20.199.101.134:5038] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-scanner.php"] [unique_id "acTP_b-SCF7YDISDX4-21wAAAY0"]
[Thu Mar 26 14:19:41.589375 2026] [:error] [pid 19818:tid 19828] [client 20.199.101.134:5086] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/saorix1.php"] [unique_id "acTP_czaSnm3d1BeM5VxJwAAAMg"]
[Thu Mar 26 14:19:42.093643 2026] [:error] [pid 19818:tid 19829] [client 20.199.101.134:5082] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/saorix1.php"] [unique_id "acTP_szaSnm3d1BeM5VxKwAAAMk"]
[Thu Mar 26 14:19:42.635614 2026] [:error] [pid 19818:tid 19836] [client 20.199.101.134:5002] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/saorix1.php"] [unique_id "acTP_szaSnm3d1BeM5VxNAAAANA"]
[Thu Mar 26 14:19:43.118565 2026] [:error] [pid 31670:tid 31672] [client 20.199.101.134:5031] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/saorix1.php"] [unique_id "acTP_zXVthXxCnWjOTQFbgAAAUA"]
[Thu Mar 26 14:19:43.594945 2026] [:error] [pid 19818:tid 19828] [client 20.199.101.134:5006] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/torsa1.php"] [unique_id "acTP_8zaSnm3d1BeM5VxOwAAAMg"]
[Thu Mar 26 14:19:44.137606 2026] [:error] [pid 19711:tid 19752] [client 20.199.101.134:5091] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/torsa1.php"] [unique_id "acTQAGj3l1y81GYfluR0XgAAAEM"]
[Thu Mar 26 14:19:44.658707 2026] [:error] [pid 19818:tid 19824] [client 20.199.101.134:4956] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/torsa1.php"] [unique_id "acTQAMzaSnm3d1BeM5VxPwAAAMQ"]
[Thu Mar 26 14:19:45.129316 2026] [:error] [pid 19818:tid 19832] [client 20.199.101.134:5062] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/torsa1.php"] [unique_id "acTQAczaSnm3d1BeM5VxQQAAAMw"]
[Thu Mar 26 14:19:45.643733 2026] [:error] [pid 31778:tid 31794] [client 20.199.101.134:4994] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/Jcrop.php"] [unique_id "acTQAQ3kybI2o-xasmC2XQAAAcE"]
[Thu Mar 26 14:19:46.187034 2026] [:error] [pid 31780:tid 31833] [client 20.199.101.134:5008] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/Jcrop.php"] [unique_id "acTQApJDwZsy5O4ZXEhCvAAAAgw"]
[Thu Mar 26 14:19:46.696895 2026] [:error] [pid 31670:tid 31690] [client 20.199.101.134:5029] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/Jcrop.php"] [unique_id "acTQAjXVthXxCnWjOTQFbwAAAVI"]
[Thu Mar 26 14:19:47.203399 2026] [:error] [pid 31778:tid 31816] [client 20.199.101.134:4999] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/Jcrop.php"] [unique_id "acTQAw3kybI2o-xasmC2XwAAAdc"]
[Thu Mar 26 14:19:47.679543 2026] [:error] [pid 19818:tid 19838] [client 20.199.101.134:5039] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nc4.php"] [unique_id "acTQA8zaSnm3d1BeM5VxTwAAANI"]
[Thu Mar 26 14:19:48.151411 2026] [:error] [pid 60829:tid 60832] [client 20.199.101.134:5109] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nc4.php"] [unique_id "acTQBPTdjHKeZokybaSGfQAAAQE"]
[Thu Mar 26 14:19:48.679770 2026] [:error] [pid 31670:tid 31676] [client 20.199.101.134:4993] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nc4.php"] [unique_id "acTQBDXVthXxCnWjOTQFeAAAAUQ"]
[Thu Mar 26 14:19:49.157558 2026] [:error] [pid 19818:tid 19839] [client 20.199.101.134:4949] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nc4.php"] [unique_id "acTQBczaSnm3d1BeM5VxUgAAANM"]
[Thu Mar 26 14:19:49.658416 2026] [:error] [pid 19818:tid 19826] [client 20.199.101.134:5090] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/v3.php"] [unique_id "acTQBczaSnm3d1BeM5VxVQAAAMY"]
[Thu Mar 26 14:19:50.163343 2026] [:error] [pid 31670:tid 31686] [client 20.199.101.134:5074] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/v3.php"] [unique_id "acTQBjXVthXxCnWjOTQFfwAAAU4"]
[Thu Mar 26 14:19:50.754413 2026] [:error] [pid 19818:tid 19822] [client 20.199.101.134:5064] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/v3.php"] [unique_id "acTQBszaSnm3d1BeM5VxWQAAAMI"]
[Thu Mar 26 14:19:51.325350 2026] [:error] [pid 31780:tid 31842] [client 20.199.101.134:5113] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/v3.php"] [unique_id "acTQB5JDwZsy5O4ZXEhCvQAAAhU"]
[Thu Mar 26 14:19:51.863675 2026] [:error] [pid 19818:tid 19829] [client 20.199.101.134:5005] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wtiiy.php"] [unique_id "acTQB8zaSnm3d1BeM5VxXgAAAMk"]
[Thu Mar 26 14:19:52.340513 2026] [:error] [pid 31780:tid 31825] [client 20.199.101.134:5105] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wtiiy.php"] [unique_id "acTQCJJDwZsy5O4ZXEhCvwAAAgU"]
[Thu Mar 26 14:19:52.856937 2026] [:error] [pid 31780:tid 31822] [client 20.199.101.134:4998] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wtiiy.php"] [unique_id "acTQCJJDwZsy5O4ZXEhCwQAAAgI"]
[Thu Mar 26 14:19:53.330052 2026] [:error] [pid 31780:tid 31836] [client 20.199.101.134:5047] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wtiiy.php"] [unique_id "acTQCZJDwZsy5O4ZXEhCxQAAAg8"]
[Thu Mar 26 14:19:53.801939 2026] [:error] [pid 31778:tid 31808] [client 20.199.101.134:5068] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xvs.php"] [unique_id "acTQCQ3kybI2o-xasmC2ZQAAAc8"]
[Thu Mar 26 14:19:54.288990 2026] [:error] [pid 19818:tid 19839] [client 20.199.101.134:5069] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xvs.php"] [unique_id "acTQCszaSnm3d1BeM5VxZAAAANM"]
[Thu Mar 26 14:19:54.857590 2026] [:error] [pid 31780:tid 31830] [client 20.199.101.134:5093] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xvs.php"] [unique_id "acTQCpJDwZsy5O4ZXEhCygAAAgk"]
[Thu Mar 26 14:19:55.399166 2026] [:error] [pid 31778:tid 31809] [client 20.199.101.134:5023] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xvs.php"] [unique_id "acTQCw3kybI2o-xasmC2aAAAAdA"]
[Thu Mar 26 14:19:55.934881 2026] [:error] [pid 31778:tid 31793] [client 20.199.101.134:5079] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sid3.php"] [unique_id "acTQCw3kybI2o-xasmC2awAAAcA"]
[Thu Mar 26 14:19:56.575684 2026] [:error] [pid 19710:tid 19746] [client 20.199.101.134:5025] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sid3.php"] [unique_id "acTQDAVEWP8Ar68Njk7cBwAAABg"]
[Thu Mar 26 14:19:57.159019 2026] [:error] [pid 31780:tid 31822] [client 20.199.101.134:5075] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sid3.php"] [unique_id "acTQDZJDwZsy5O4ZXEhCzQAAAgI"]
[Thu Mar 26 14:19:57.661542 2026] [:error] [pid 31780:tid 31841] [client 20.199.101.134:5017] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sid3.php"] [unique_id "acTQDZJDwZsy5O4ZXEhCzwAAAhQ"]
[Thu Mar 26 14:19:58.372464 2026] [:error] [pid 31780:tid 31834] [client 20.199.101.134:4960] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fs.php"] [unique_id "acTQDpJDwZsy5O4ZXEhC2AAAAg0"]
[Thu Mar 26 14:19:58.862429 2026] [:error] [pid 31780:tid 31839] [client 20.199.101.134:5063] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fs.php"] [unique_id "acTQDpJDwZsy5O4ZXEhC2gAAAhI"]
[Thu Mar 26 14:19:59.464213 2026] [:error] [pid 19710:tid 19745] [client 20.199.101.134:4996] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fs.php"] [unique_id "acTQDwVEWP8Ar68Njk7cCgAAABc"]
[Thu Mar 26 14:20:00.066889 2026] [:error] [pid 19712:tid 19790] [client 20.199.101.134:5089] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fs.php"] [unique_id "acTQENWhKhRNqm23vFMCwwAAAI4"]
[Thu Mar 26 14:20:00.546465 2026] [:error] [pid 31780:tid 31836] [client 20.199.101.134:5012] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws77.php"] [unique_id "acTQEJJDwZsy5O4ZXEhC3AAAAg8"]
[Thu Mar 26 14:20:01.039286 2026] [:error] [pid 19818:tid 19830] [client 20.199.101.134:4932] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws77.php"] [unique_id "acTQEczaSnm3d1BeM5VxZQAAAMo"]
[Thu Mar 26 14:20:01.528039 2026] [:error] [pid 19818:tid 19834] [client 20.199.101.134:5057] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws77.php"] [unique_id "acTQEczaSnm3d1BeM5VxZgAAAM4"]
[Thu Mar 26 14:20:02.070021 2026] [:error] [pid 31717:tid 31722] [client 20.199.101.134:5055] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws77.php"] [unique_id "acTQEr-SCF7YDISDX4-26AAAAYA"]
[Thu Mar 26 14:20:02.545396 2026] [:error] [pid 31717:tid 31738] [client 20.199.101.134:4935] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-blogs.php"] [unique_id "acTQEr-SCF7YDISDX4-26gAAAZA"]
[Thu Mar 26 14:20:03.015639 2026] [:error] [pid 60829:tid 60836] [client 20.199.101.134:4945] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-blogs.php"] [unique_id "acTQE_TdjHKeZokybaSGggAAAQU"]
[Thu Mar 26 14:20:03.609022 2026] [:error] [pid 19818:tid 19836] [client 20.199.101.134:5015] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-blogs.php"] [unique_id "acTQE8zaSnm3d1BeM5VxbAAAANA"]
[Thu Mar 26 14:20:04.160129 2026] [:error] [pid 19818:tid 19832] [client 20.199.101.134:5010] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-blogs.php"] [unique_id "acTQFMzaSnm3d1BeM5VxcgAAAMw"]
[Thu Mar 26 14:20:04.735056 2026] [:error] [pid 19818:tid 19841] [client 20.199.101.134:5094] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws84.php"] [unique_id "acTQFMzaSnm3d1BeM5VxdgAAANU"]
[Thu Mar 26 14:20:05.207487 2026] [:error] [pid 31717:tid 31726] [client 20.199.101.134:5028] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws84.php"] [unique_id "acTQFb-SCF7YDISDX4-27QAAAYQ"]
[Thu Mar 26 14:20:05.721771 2026] [:error] [pid 19710:tid 19739] [client 20.199.101.134:5001] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws84.php"] [unique_id "acTQFQVEWP8Ar68Njk7cDAAAABE"]
[Thu Mar 26 14:20:06.261420 2026] [:error] [pid 19818:tid 19838] [client 20.199.101.134:5104] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws84.php"] [unique_id "acTQFszaSnm3d1BeM5VxeQAAANI"]
[Thu Mar 26 14:20:06.823592 2026] [:error] [pid 19710:tid 19744] [client 20.199.101.134:5000] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/feokc.php"] [unique_id "acTQFgVEWP8Ar68Njk7cDgAAABY"]
[Thu Mar 26 14:20:07.402705 2026] [:error] [pid 19818:tid 19840] [client 20.199.101.134:5084] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/feokc.php"] [unique_id "acTQF8zaSnm3d1BeM5VxfwAAANQ"]
[Thu Mar 26 14:20:07.888681 2026] [:error] [pid 19818:tid 19834] [client 20.199.101.134:4971] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/feokc.php"] [unique_id "acTQF8zaSnm3d1BeM5VxgQAAAM4"]
[Thu Mar 26 14:20:08.437899 2026] [:error] [pid 60829:tid 60842] [client 20.199.101.134:5114] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/feokc.php"] [unique_id "acTQGPTdjHKeZokybaSGjgAAAQs"]
[Thu Mar 26 14:20:08.930011 2026] [:error] [pid 31780:tid 31842] [client 20.199.101.134:5108] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wgift1.php"] [unique_id "acTQGJJDwZsy5O4ZXEhC6gAAAhU"]
[Thu Mar 26 14:20:09.479452 2026] [:error] [pid 31717:tid 31724] [client 20.199.101.134:4950] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wgift1.php"] [unique_id "acTQGb-SCF7YDISDX4-27wAAAYI"]
[Thu Mar 26 14:20:09.954806 2026] [:error] [pid 60829:tid 60846] [client 20.199.101.134:5078] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wgift1.php"] [unique_id "acTQGfTdjHKeZokybaSGkAAAAQ8"]
[Thu Mar 26 14:20:10.470094 2026] [:error] [pid 31780:tid 31826] [client 20.199.101.134:5026] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wgift1.php"] [unique_id "acTQGpJDwZsy5O4ZXEhC7QAAAgY"]
[Thu Mar 26 14:20:10.965646 2026] [:error] [pid 31778:tid 31813] [client 20.199.101.134:5092] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "acTQGg3kybI2o-xasmC2cQAAAdQ"]
[Thu Mar 26 14:20:11.507860 2026] [:error] [pid 31780:tid 31834] [client 20.199.101.134:4943] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "acTQG5JDwZsy5O4ZXEhC8gAAAg0"]
[Thu Mar 26 14:20:11.980571 2026] [:error] [pid 19710:tid 19746] [client 20.199.101.134:5043] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "acTQGwVEWP8Ar68Njk7cEgAAABg"]
[Thu Mar 26 14:20:12.529833 2026] [:error] [pid 19818:tid 19827] [client 20.199.101.134:5065] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "acTQHMzaSnm3d1BeM5VxkgAAAMc"]
[Thu Mar 26 14:20:13.032776 2026] [:error] [pid 31717:tid 31741] [client 20.199.101.134:5081] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lp6.php"] [unique_id "acTQHb-SCF7YDISDX4-28wAAAZM"]
[Thu Mar 26 14:20:13.642380 2026] [:error] [pid 19712:tid 19788] [client 20.199.101.134:4928] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lp6.php"] [unique_id "acTQHdWhKhRNqm23vFMCxgAAAIw"]
[Thu Mar 26 14:20:14.152053 2026] [:error] [pid 31717:tid 31746] [client 20.199.101.134:5097] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lp6.php"] [unique_id "acTQHr-SCF7YDISDX4-29AAAAZg"]
[Thu Mar 26 14:20:14.663883 2026] [:error] [pid 31717:tid 31723] [client 20.199.101.134:5045] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lp6.php"] [unique_id "acTQHr-SCF7YDISDX4-29QAAAYE"]
[Thu Mar 26 14:20:15.158850 2026] [:error] [pid 19710:tid 19740] [client 20.199.101.134:5118] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/admin.php"] [unique_id "acTQHwVEWP8Ar68Njk7cFAAAABI"]
[Thu Mar 26 14:20:15.679847 2026] [:error] [pid 31670:tid 31678] [client 20.199.101.134:4929] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/admin.php"] [unique_id "acTQHzXVthXxCnWjOTQFjAAAAUY"]
[Thu Mar 26 14:20:16.193869 2026] [:error] [pid 31780:tid 31845] [client 20.199.101.134:5059] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/admin.php"] [unique_id "acTQIJJDwZsy5O4ZXEhC8wAAAhg"]
[Thu Mar 26 14:20:16.663596 2026] [:error] [pid 31780:tid 31841] [client 20.199.101.134:5046] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/admin.php"] [unique_id "acTQIJJDwZsy5O4ZXEhC9QAAAhQ"]
[Thu Mar 26 14:20:17.147302 2026] [:error] [pid 19712:tid 19779] [client 20.199.101.134:5042] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/24.php"] [unique_id "acTQIdWhKhRNqm23vFMCyQAAAIM"]
[Thu Mar 26 14:20:17.632145 2026] [:error] [pid 31778:tid 31814] [client 20.199.101.134:5019] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/24.php"] [unique_id "acTQIQ3kybI2o-xasmC2cwAAAdU"]
[Thu Mar 26 14:20:18.153521 2026] [:error] [pid 31717:tid 31730] [client 20.199.101.134:4937] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/24.php"] [unique_id "acTQIr-SCF7YDISDX4-29gAAAYg"]
[Thu Mar 26 14:20:18.678169 2026] [:error] [pid 31780:tid 31832] [client 20.199.101.134:5013] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/24.php"] [unique_id "acTQIpJDwZsy5O4ZXEhC-gAAAgs"]
[Thu Mar 26 14:20:19.175768 2026] [:error] [pid 19818:tid 19820] [client 20.199.101.134:5027] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/inege.php"] [unique_id "acTQI8zaSnm3d1BeM5VxngAAAMA"]
[Thu Mar 26 14:20:19.672821 2026] [:error] [pid 19818:tid 19836] [client 20.199.101.134:5014] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/inege.php"] [unique_id "acTQI8zaSnm3d1BeM5VxogAAANA"]
[Thu Mar 26 14:20:20.150945 2026] [:error] [pid 60829:tid 60838] [client 20.199.101.134:5056] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/inege.php"] [unique_id "acTQJPTdjHKeZokybaSGnQAAAQc"]
[Thu Mar 26 14:20:20.665292 2026] [:error] [pid 31780:tid 31827] [client 20.199.101.134:5030] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/inege.php"] [unique_id "acTQJJJDwZsy5O4ZXEhC_QAAAgc"]
[Thu Mar 26 14:20:21.209770 2026] [:error] [pid 60829:tid 60854] [client 20.199.101.134:5076] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lib.php"] [unique_id "acTQJfTdjHKeZokybaSGoQAAARc"]
[Thu Mar 26 14:20:21.686436 2026] [:error] [pid 31670:tid 31696] [client 20.199.101.134:5033] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lib.php"] [unique_id "acTQJTXVthXxCnWjOTQFkwAAAVg"]
[Thu Mar 26 14:20:22.222917 2026] [:error] [pid 31670:tid 31687] [client 20.199.101.134:4981] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lib.php"] [unique_id "acTQJjXVthXxCnWjOTQFlQAAAU8"]
[Thu Mar 26 14:20:22.698952 2026] [:error] [pid 31670:tid 31692] [client 20.199.101.134:5077] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lib.php"] [unique_id "acTQJjXVthXxCnWjOTQFmAAAAVQ"]
[Thu Mar 26 14:20:23.208298 2026] [:error] [pid 31670:tid 31694] [client 20.199.101.134:5032] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aifa.php"] [unique_id "acTQJzXVthXxCnWjOTQFmgAAAVY"]
[Thu Mar 26 14:20:23.762718 2026] [:error] [pid 19818:tid 19839] [client 20.199.101.134:5112] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aifa.php"] [unique_id "acTQJ8zaSnm3d1BeM5VxpgAAANM"]
[Thu Mar 26 14:20:24.302411 2026] [:error] [pid 31780:tid 31836] [client 20.199.101.134:5116] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aifa.php"] [unique_id "acTQKJJDwZsy5O4ZXEhDAgAAAg8"]
[Thu Mar 26 14:20:24.806847 2026] [:error] [pid 31780:tid 31829] [client 20.199.101.134:4961] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aifa.php"] [unique_id "acTQKJJDwZsy5O4ZXEhDAwAAAgg"]
[Thu Mar 26 14:20:25.358478 2026] [:error] [pid 31778:tid 31809] [client 20.199.101.134:5018] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/erty.php"] [unique_id "acTQKQ3kybI2o-xasmC2ewAAAdA"]
[Thu Mar 26 14:20:25.943209 2026] [:error] [pid 19818:tid 19841] [client 20.199.101.134:5035] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/erty.php"] [unique_id "acTQKczaSnm3d1BeM5VxpwAAANU"]
[Thu Mar 26 14:20:26.448594 2026] [:error] [pid 31780:tid 31827] [client 20.199.101.134:5052] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/erty.php"] [unique_id "acTQKpJDwZsy5O4ZXEhDBwAAAgc"]
[Thu Mar 26 14:20:26.957768 2026] [:error] [pid 31670:tid 31673] [client 20.199.101.134:5099] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/erty.php"] [unique_id "acTQKjXVthXxCnWjOTQFoQAAAUE"]
[Thu Mar 26 14:20:27.438689 2026] [:error] [pid 31670:tid 31684] [client 20.199.101.134:4979] [client 20.199.101.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/app.php"] [unique_id "acTQKzXVthXxCnWjOTQFogAAAUw"]
[Thu Mar 26 14:20:27.946259 2026] [:error] [pid 19710:tid 19735] [client 20.199.101.134:4975] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aee.php"] [unique_id "acTQKwVEWP8Ar68Njk7cGAAAAA0"]
[Thu Mar 26 14:20:28.421289 2026] [:error] [pid 19712:tid 19787] [client 20.199.101.134:5088] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aee.php"] [unique_id "acTQLNWhKhRNqm23vFMCygAAAIs"]
[Thu Mar 26 14:20:29.040324 2026] [:error] [pid 19710:tid 19744] [client 20.199.101.134:5102] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aee.php"] [unique_id "acTQLQVEWP8Ar68Njk7cGQAAABY"]
[Thu Mar 26 14:20:29.570146 2026] [:error] [pid 31717:tid 31729] [client 20.199.101.134:5041] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zogy1.php"] [unique_id "acTQLb-SCF7YDISDX4-2_QAAAYc"]
[Thu Mar 26 14:20:30.193555 2026] [:error] [pid 60829:tid 60845] [client 20.199.101.134:4973] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zogy1.php"] [unique_id "acTQLvTdjHKeZokybaSGqAAAAQ4"]
[Thu Mar 26 14:20:30.792249 2026] [:error] [pid 19710:tid 19734] [client 20.199.101.134:4963] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zogy1.php"] [unique_id "acTQLgVEWP8Ar68Njk7cHQAAAAw"]
[Thu Mar 26 14:20:31.265283 2026] [:error] [pid 31780:tid 31821] [client 20.199.101.134:4983] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zogy1.php"] [unique_id "acTQL5JDwZsy5O4ZXEhDCQAAAgE"]
[Thu Mar 26 14:20:31.853626 2026] [:error] [pid 31780:tid 31834] [client 20.199.101.134:4878] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/b.php"] [unique_id "acTQL5JDwZsy5O4ZXEhDCgAAAg0"]
[Thu Mar 26 14:20:32.530137 2026] [:error] [pid 31670:tid 31688] [client 20.199.101.134:5115] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/b.php"] [unique_id "acTQMDXVthXxCnWjOTQFpgAAAVA"]
[Thu Mar 26 14:20:33.051329 2026] [proxy_fcgi:error] [pid 31670:tid 31675] [client 20.199.101.134:4947] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 14:20:33.304292 2026] [proxy_fcgi:error] [pid 31670:tid 31674] [client 20.199.101.134:4947] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 14:20:33.544451 2026] [proxy_fcgi:error] [pid 31670:tid 31687] [client 20.199.101.134:4947] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 14:20:33.783588 2026] [proxy_fcgi:error] [pid 31670:tid 31690] [client 20.199.101.134:4947] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 14:20:34.034333 2026] [proxy_fcgi:error] [pid 31670:tid 31694] [client 20.199.101.134:4947] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 14:20:34.285175 2026] [proxy_fcgi:error] [pid 31670:tid 31678] [client 20.199.101.134:4947] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 14:20:34.532805 2026] [proxy_fcgi:error] [pid 31670:tid 31686] [client 20.199.101.134:4947] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 14:20:34.818327 2026] [proxy_fcgi:error] [pid 31670:tid 31685] [client 20.199.101.134:4947] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 14:20:35.058505 2026] [proxy_fcgi:error] [pid 31670:tid 31677] [client 20.199.101.134:4947] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 14:20:35.306140 2026] [proxy_fcgi:error] [pid 31670:tid 31695] [client 20.199.101.134:4947] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 14:20:35.546974 2026] [proxy_fcgi:error] [pid 31670:tid 31693] [client 20.199.101.134:4947] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 14:20:35.782613 2026] [:error] [pid 31670:tid 31680] [client 20.199.101.134:4947] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tool.php"] [unique_id "acTQMzXVthXxCnWjOTQFuAAAAUg"]
[Thu Mar 26 14:20:36.266276 2026] [:error] [pid 31717:tid 31740] [client 20.199.101.134:5054] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tool.php"] [unique_id "acTQNL-SCF7YDISDX4-3BAAAAZI"]
[Thu Mar 26 14:20:36.765889 2026] [:error] [pid 31780:tid 31823] [client 20.199.101.134:4964] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tool.php"] [unique_id "acTQNJJDwZsy5O4ZXEhDEAAAAgM"]
[Thu Mar 26 14:20:37.341843 2026] [:error] [pid 31778:tid 31803] [client 20.199.101.134:5101] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tool.php"] [unique_id "acTQNQ3kybI2o-xasmC2lQAAAco"]
[Thu Mar 26 14:20:37.994547 2026] [:error] [pid 31778:tid 31817] [client 20.199.101.134:5016] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wps.php"] [unique_id "acTQNQ3kybI2o-xasmC2lgAAAdg"]
[Thu Mar 26 14:20:39.729894 2026] [:error] [pid 19818:tid 19842] [client 20.199.101.134:4982] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wps.php"] [unique_id "acTQN8zaSnm3d1BeM5VxswAAANY"]
[Thu Mar 26 14:20:40.200942 2026] [:error] [pid 19818:tid 19837] [client 20.199.101.134:4957] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wps.php"] [unique_id "acTQOMzaSnm3d1BeM5VxtQAAANE"]
[Thu Mar 26 14:20:40.671150 2026] [:error] [pid 31717:tid 31727] [client 20.199.101.134:4992] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wps.php"] [unique_id "acTQOL-SCF7YDISDX4-3BwAAAYU"]
[Thu Mar 26 14:20:41.144013 2026] [:error] [pid 60829:tid 60855] [client 20.199.101.134:4889] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/web.php"] [unique_id "acTQOfTdjHKeZokybaSGrQAAARg"]
[Thu Mar 26 14:20:41.625387 2026] [:error] [pid 19818:tid 19830] [client 20.199.101.134:4976] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/web.php"] [unique_id "acTQOczaSnm3d1BeM5VxvQAAAMo"]
[Thu Mar 26 14:20:42.102679 2026] [:error] [pid 19710:tid 19728] [client 20.199.101.134:5040] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/web.php"] [unique_id "acTQOgVEWP8Ar68Njk7cHwAAAAY"]
[Thu Mar 26 14:20:43.446600 2026] [:error] [pid 31780:tid 31826] [client 20.199.101.134:4948] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/web.php"] [unique_id "acTQO5JDwZsy5O4ZXEhDFQAAAgY"]
[Thu Mar 26 14:20:43.959718 2026] [:error] [pid 31780:tid 31841] [client 20.199.101.134:4890] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp9.php"] [unique_id "acTQO5JDwZsy5O4ZXEhDFgAAAhQ"]
[Thu Mar 26 14:20:44.465440 2026] [:error] [pid 31780:tid 31836] [client 20.199.101.134:5007] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp9.php"] [unique_id "acTQPJJDwZsy5O4ZXEhDGAAAAg8"]
[Thu Mar 26 14:20:44.950069 2026] [:error] [pid 31778:tid 31817] [client 20.199.101.134:4933] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp9.php"] [unique_id "acTQPA3kybI2o-xasmC2oQAAAdg"]
[Thu Mar 26 14:20:45.472186 2026] [:error] [pid 19818:tid 19820] [client 20.199.101.134:5110] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp9.php"] [unique_id "acTQPczaSnm3d1BeM5VxwgAAAMA"]
[Thu Mar 26 14:20:46.039094 2026] [:error] [pid 31778:tid 31815] [client 20.199.101.134:4936] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/asd.php"] [unique_id "acTQPg3kybI2o-xasmC2pwAAAdY"]
[Thu Mar 26 14:20:46.537204 2026] [:error] [pid 31778:tid 31816] [client 20.199.101.134:4965] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/asd.php"] [unique_id "acTQPg3kybI2o-xasmC2qgAAAdc"]
[Thu Mar 26 14:20:47.045951 2026] [:error] [pid 31778:tid 31799] [client 20.199.101.134:4940] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/asd.php"] [unique_id "acTQPw3kybI2o-xasmC2rQAAAcY"]
[Thu Mar 26 14:20:47.561517 2026] [:error] [pid 31670:tid 31681] [client 20.199.101.134:4869] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/asd.php"] [unique_id "acTQPzXVthXxCnWjOTQFwAAAAUk"]
[Thu Mar 26 14:20:48.066062 2026] [:error] [pid 31778:tid 31805] [client 20.199.101.134:4939] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/awh.php"] [unique_id "acTQQA3kybI2o-xasmC2sgAAAcw"]
[Thu Mar 26 14:20:48.666002 2026] [:error] [pid 19818:tid 19844] [client 20.199.101.134:5106] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/awh.php"] [unique_id "acTQQMzaSnm3d1BeM5VxxgAAANg"]
[Thu Mar 26 14:20:49.197402 2026] [:error] [pid 19818:tid 19831] [client 20.199.101.134:5053] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/awh.php"] [unique_id "acTQQczaSnm3d1BeM5VxygAAAMs"]
[Thu Mar 26 14:20:49.674446 2026] [:error] [pid 19818:tid 19841] [client 20.199.101.134:5050] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/awh.php"] [unique_id "acTQQczaSnm3d1BeM5VxzQAAANU"]
[Thu Mar 26 14:20:50.177626 2026] [:error] [pid 31778:tid 31793] [client 20.199.101.134:4875] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gelio1.php"] [unique_id "acTQQg3kybI2o-xasmC2tAAAAcA"]
[Thu Mar 26 14:20:50.645312 2026] [:error] [pid 31778:tid 31813] [client 20.199.101.134:5011] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gelio1.php"] [unique_id "acTQQg3kybI2o-xasmC2tQAAAdQ"]
[Thu Mar 26 14:20:51.222977 2026] [:error] [pid 19710:tid 19735] [client 20.199.101.134:4990] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gelio1.php"] [unique_id "acTQQwVEWP8Ar68Njk7cIgAAAA0"]
[Thu Mar 26 14:20:51.696893 2026] [:error] [pid 19712:tid 19781] [client 20.199.101.134:5098] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gelio1.php"] [unique_id "acTQQ9WhKhRNqm23vFMCzwAAAIU"]
[Thu Mar 26 14:20:52.245445 2026] [:error] [pid 31670:tid 31678] [client 20.199.101.134:5022] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xper1.php"] [unique_id "acTQRDXVthXxCnWjOTQFxgAAAUY"]
[Thu Mar 26 14:20:52.779620 2026] [:error] [pid 19818:tid 19823] [client 20.199.101.134:4951] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xper1.php"] [unique_id "acTQRMzaSnm3d1BeM5Vx2AAAAMM"]
[Thu Mar 26 14:20:53.305390 2026] [:error] [pid 19818:tid 19821] [client 20.199.101.134:5024] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xper1.php"] [unique_id "acTQRczaSnm3d1BeM5Vx2gAAAME"]
[Thu Mar 26 14:20:53.824902 2026] [:error] [pid 31780:tid 31841] [client 20.199.101.134:4968] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xper1.php"] [unique_id "acTQRZJDwZsy5O4ZXEhDIQAAAhQ"]
[Thu Mar 26 14:20:54.300978 2026] [:error] [pid 31670:tid 31683] [client 20.199.101.134:4927] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bo.php"] [unique_id "acTQRjXVthXxCnWjOTQFyQAAAUs"]
[Thu Mar 26 14:20:54.807665 2026] [:error] [pid 19818:tid 19840] [client 20.199.101.134:4984] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bo.php"] [unique_id "acTQRszaSnm3d1BeM5Vx4QAAANQ"]
[Thu Mar 26 14:20:55.394174 2026] [:error] [pid 19711:tid 19769] [client 20.199.101.134:5009] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bo.php"] [unique_id "acTQR2j3l1y81GYfluR0bQAAAFQ"]
[Thu Mar 26 14:20:55.870372 2026] [:error] [pid 31780:tid 31844] [client 20.199.101.134:4974] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bo.php"] [unique_id "acTQR5JDwZsy5O4ZXEhDJwAAAhc"]
[Thu Mar 26 14:20:56.411905 2026] [:error] [pid 19710:tid 19722] [client 20.199.101.134:4944] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class.php"] [unique_id "acTQSAVEWP8Ar68Njk7cKQAAAAA"]
[Thu Mar 26 14:20:57.063114 2026] [:error] [pid 31670:tid 31688] [client 20.199.101.134:5085] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class.php"] [unique_id "acTQSTXVthXxCnWjOTQFzgAAAVA"]
[Thu Mar 26 14:20:57.571661 2026] [:error] [pid 19818:tid 19835] [client 20.199.101.134:5036] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class.php"] [unique_id "acTQSczaSnm3d1BeM5Vx6wAAAM8"]
[Thu Mar 26 14:20:58.096125 2026] [:error] [pid 19818:tid 19822] [client 20.199.101.134:4991] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class.php"] [unique_id "acTQSszaSnm3d1BeM5Vx7wAAAMI"]
[Thu Mar 26 14:20:58.685624 2026] [:error] [pid 31670:tid 31677] [client 20.199.101.134:4969] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/privacy.php"] [unique_id "acTQSjXVthXxCnWjOTQFzwAAAUU"]
[Thu Mar 26 14:20:59.217046 2026] [:error] [pid 31780:tid 31834] [client 20.199.101.134:5048] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/privacy.php"] [unique_id "acTQS5JDwZsy5O4ZXEhDKwAAAg0"]
[Thu Mar 26 14:21:00.196349 2026] [:error] [pid 31670:tid 31690] [client 20.199.101.134:4942] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/privacy.php"] [unique_id "acTQTDXVthXxCnWjOTQF0QAAAVI"]
[Thu Mar 26 14:21:00.718460 2026] [:error] [pid 31778:tid 31804] [client 20.199.101.134:4902] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/privacy.php"] [unique_id "acTQTA3kybI2o-xasmC2ugAAAcs"]
[Thu Mar 26 14:21:01.230615 2026] [:error] [pid 31780:tid 31827] [client 20.199.101.134:4895] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ng.php"] [unique_id "acTQTZJDwZsy5O4ZXEhDMgAAAgc"]
[Thu Mar 26 14:21:01.743089 2026] [:error] [pid 31670:tid 31695] [client 20.199.101.134:4881] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ng.php"] [unique_id "acTQTTXVthXxCnWjOTQF1QAAAVc"]
[Thu Mar 26 14:21:02.222096 2026] [:error] [pid 31778:tid 31817] [client 20.199.101.134:4962] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ng.php"] [unique_id "acTQTg3kybI2o-xasmC2vAAAAdg"]
[Thu Mar 26 14:21:02.715044 2026] [:error] [pid 19712:tid 19776] [client 20.199.101.134:4954] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ng.php"] [unique_id "acTQTtWhKhRNqm23vFMC0wAAAIA"]
[Thu Mar 26 14:21:03.198793 2026] [:error] [pid 19818:tid 19838] [client 20.199.101.134:4800] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gm.php"] [unique_id "acTQT8zaSnm3d1BeM5Vx_AAAANI"]
[Thu Mar 26 14:21:03.669210 2026] [:error] [pid 19711:tid 19772] [client 20.199.101.134:4872] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gm.php"] [unique_id "acTQT2j3l1y81GYfluR0cAAAAFc"]
[Thu Mar 26 14:21:04.163779 2026] [:error] [pid 31780:tid 31825] [client 20.199.101.134:4873] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gm.php"] [unique_id "acTQUJJDwZsy5O4ZXEhDNAAAAgU"]
[Thu Mar 26 14:21:04.693970 2026] [:error] [pid 31780:tid 31836] [client 20.199.101.134:4989] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gm.php"] [unique_id "acTQUJJDwZsy5O4ZXEhDNwAAAg8"]
[Thu Mar 26 14:21:05.194097 2026] [:error] [pid 31780:tid 31833] [client 20.199.101.134:5044] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/1.php"] [unique_id "acTQUZJDwZsy5O4ZXEhDPAAAAgw"]
[Thu Mar 26 14:21:05.714043 2026] [:error] [pid 31780:tid 31843] [client 20.199.101.134:5087] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/1.php"] [unique_id "acTQUZJDwZsy5O4ZXEhDPQAAAhY"]
[Thu Mar 26 14:21:06.267090 2026] [:error] [pid 31670:tid 31694] [client 20.199.101.134:4886] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/1.php"] [unique_id "acTQUjXVthXxCnWjOTQF3QAAAVY"]
[Thu Mar 26 14:21:06.747144 2026] [:error] [pid 31670:tid 31684] [client 20.199.101.134:4807] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/1.php"] [unique_id "acTQUjXVthXxCnWjOTQF3wAAAUw"]
[Thu Mar 26 14:21:07.253584 2026] [:error] [pid 60829:tid 60838] [client 20.199.101.134:4835] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x1.php"] [unique_id "acTQU_TdjHKeZokybaSGugAAAQc"]
[Thu Mar 26 14:21:07.983170 2026] [:error] [pid 60829:tid 60850] [client 20.199.101.134:5037] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x1.php"] [unique_id "acTQU_TdjHKeZokybaSGvwAAARM"]
[Thu Mar 26 14:21:08.476288 2026] [:error] [pid 31670:tid 31686] [client 20.199.101.134:4885] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x1.php"] [unique_id "acTQVDXVthXxCnWjOTQF4gAAAU4"]
[Thu Mar 26 14:21:08.990976 2026] [:error] [pid 31670:tid 31690] [client 20.199.101.134:4985] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x1.php"] [unique_id "acTQVDXVthXxCnWjOTQF5wAAAVI"]
[Thu Mar 26 14:21:09.526202 2026] [:error] [pid 19712:tid 19779] [client 20.199.101.134:4926] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/torsa1.php"] [unique_id "acTQVdWhKhRNqm23vFMC1AAAAIM"]
[Thu Mar 26 14:21:10.036749 2026] [:error] [pid 60829:tid 60841] [client 20.199.101.134:4987] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/torsa1.php"] [unique_id "acTQVvTdjHKeZokybaSGwwAAAQo"]
[Thu Mar 26 14:21:10.519742 2026] [:error] [pid 31670:tid 31680] [client 20.199.101.134:4934] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/torsa1.php"] [unique_id "acTQVjXVthXxCnWjOTQF7QAAAUg"]
[Thu Mar 26 14:21:11.027210 2026] [:error] [pid 19710:tid 19732] [client 20.199.101.134:4995] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/torsa1.php"] [unique_id "acTQVwVEWP8Ar68Njk7cMwAAAAo"]
[Thu Mar 26 14:21:11.533194 2026] [:error] [pid 19818:tid 19833] [client 20.199.101.134:5060] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/byypas.php"] [unique_id "acTQV8zaSnm3d1BeM5VyAQAAAM0"]
[Thu Mar 26 14:21:12.023512 2026] [:error] [pid 31778:tid 31811] [client 20.199.101.134:4980] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/byypas.php"] [unique_id "acTQWA3kybI2o-xasmC2xQAAAdI"]
[Thu Mar 26 14:21:12.624348 2026] [:error] [pid 31778:tid 31807] [client 20.199.101.134:4946] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/byypas.php"] [unique_id "acTQWA3kybI2o-xasmC2yQAAAc4"]
[Thu Mar 26 14:21:13.153792 2026] [:error] [pid 31778:tid 31803] [client 20.199.101.134:4959] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/byypas.php"] [unique_id "acTQWQ3kybI2o-xasmC2zAAAAco"]
[Thu Mar 26 14:21:13.689247 2026] [:error] [pid 60829:tid 60836] [client 20.199.101.134:4952] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/domains.php"] [unique_id "acTQWfTdjHKeZokybaSGygAAAQU"]
[Thu Mar 26 14:21:14.203772 2026] [:error] [pid 19818:tid 19821] [client 20.199.101.134:4941] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/domains.php"] [unique_id "acTQWszaSnm3d1BeM5VyCAAAAME"]
[Thu Mar 26 14:21:14.729748 2026] [:error] [pid 19818:tid 19839] [client 20.199.101.134:4918] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/domains.php"] [unique_id "acTQWszaSnm3d1BeM5VyCwAAANM"]
[Thu Mar 26 14:21:15.292702 2026] [:error] [pid 31670:tid 31672] [client 20.199.101.134:5051] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/domains.php"] [unique_id "acTQWzXVthXxCnWjOTQF9AAAAUA"]
[Thu Mar 26 14:21:15.835980 2026] [:error] [pid 19711:tid 19761] [client 20.199.101.134:4908] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/az.php"] [unique_id "acTQW2j3l1y81GYfluR0dgAAAEw"]
[Thu Mar 26 14:21:16.308796 2026] [:error] [pid 31778:tid 31805] [client 20.199.101.134:4907] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/az.php"] [unique_id "acTQXA3kybI2o-xasmC2zgAAAcw"]
[Thu Mar 26 14:21:16.791206 2026] [:error] [pid 19818:tid 19844] [client 20.199.101.134:5049] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/az.php"] [unique_id "acTQXMzaSnm3d1BeM5VyEAAAANg"]
[Thu Mar 26 14:21:17.443242 2026] [:error] [pid 31778:tid 31814] [client 20.199.101.134:4864] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/az.php"] [unique_id "acTQXQ3kybI2o-xasmC20QAAAdU"]
[Thu Mar 26 14:21:17.932374 2026] [:error] [pid 31778:tid 31798] [client 20.199.101.134:5004] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zwq13.php"] [unique_id "acTQXQ3kybI2o-xasmC20gAAAcU"]
[Thu Mar 26 14:21:18.406249 2026] [:error] [pid 31778:tid 31807] [client 20.199.101.134:4982] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zwq13.php"] [unique_id "acTQXg3kybI2o-xasmC20wAAAc4"]
[Thu Mar 26 14:21:18.988611 2026] [:error] [pid 19711:tid 19756] [client 20.199.101.134:4906] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zwq13.php"] [unique_id "acTQXmj3l1y81GYfluR0eQAAAEc"]
[Thu Mar 26 14:21:19.529530 2026] [:error] [pid 19818:tid 19831] [client 20.199.101.134:5020] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zwq13.php"] [unique_id "acTQX8zaSnm3d1BeM5VyFgAAAMs"]
[Thu Mar 26 14:21:20.007138 2026] [:error] [pid 19818:tid 19844] [client 20.199.101.134:4972] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "acTQYMzaSnm3d1BeM5VyGQAAANg"]
[Thu Mar 26 14:21:20.665864 2026] [:error] [pid 31778:tid 31816] [client 20.199.101.134:4978] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "acTQYA3kybI2o-xasmC21wAAAdc"]
[Thu Mar 26 14:21:21.178812 2026] [:error] [pid 19818:tid 19839] [client 20.199.101.134:4867] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "acTQYczaSnm3d1BeM5VyIAAAANM"]
[Thu Mar 26 14:21:21.649363 2026] [:error] [pid 19818:tid 19831] [client 20.199.101.134:4909] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "acTQYczaSnm3d1BeM5VyJAAAAMs"]
[Thu Mar 26 14:21:22.174267 2026] [:error] [pid 19818:tid 19823] [client 20.199.101.134:4802] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sc.php"] [unique_id "acTQYszaSnm3d1BeM5VyKAAAAMM"]
[Thu Mar 26 14:21:22.746028 2026] [:error] [pid 19818:tid 19828] [client 20.199.101.134:4887] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sc.php"] [unique_id "acTQYszaSnm3d1BeM5VyLQAAAMg"]
[Thu Mar 26 14:21:23.262920 2026] [:error] [pid 19818:tid 19824] [client 20.199.101.134:4865] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sc.php"] [unique_id "acTQY8zaSnm3d1BeM5VyMgAAAMQ"]
[Thu Mar 26 14:21:23.733289 2026] [:error] [pid 19818:tid 19843] [client 20.199.101.134:4880] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sc.php"] [unique_id "acTQY8zaSnm3d1BeM5VyOAAAANc"]
[Thu Mar 26 14:21:24.293750 2026] [:error] [pid 31780:tid 31825] [client 20.199.101.134:4988] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/images/acxx.php"] [unique_id "acTQZJJDwZsy5O4ZXEhDWAAAAgU"]
[Thu Mar 26 14:21:24.762969 2026] [:error] [pid 19711:tid 19767] [client 20.199.101.134:4921] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/images/acxx.php"] [unique_id "acTQZGj3l1y81GYfluR0fAAAAFI"]
[Thu Mar 26 14:21:25.304943 2026] [:error] [pid 31780:tid 31821] [client 20.199.101.134:4896] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/images/acxx.php"] [unique_id "acTQZZJDwZsy5O4ZXEhDWQAAAgE"]
[Thu Mar 26 14:21:25.801222 2026] [:error] [pid 19818:tid 19831] [client 20.199.101.134:4905] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/images/acxx.php"] [unique_id "acTQZczaSnm3d1BeM5VyPgAAAMs"]
[Thu Mar 26 14:21:26.318037 2026] [:error] [pid 19818:tid 19821] [client 20.199.101.134:4833] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fyiiz.php"] [unique_id "acTQZszaSnm3d1BeM5VyPwAAAME"]
[Thu Mar 26 14:21:26.942914 2026] [:error] [pid 19818:tid 19830] [client 20.199.101.134:4911] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fyiiz.php"] [unique_id "acTQZszaSnm3d1BeM5VyQQAAAMo"]
[Thu Mar 26 14:21:27.426046 2026] [:error] [pid 19818:tid 19827] [client 20.199.101.134:4967] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fyiiz.php"] [unique_id "acTQZ8zaSnm3d1BeM5VyRAAAAMc"]
[Thu Mar 26 14:21:27.900344 2026] [:error] [pid 19818:tid 19831] [client 20.199.101.134:4809] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fyiiz.php"] [unique_id "acTQZ8zaSnm3d1BeM5VySQAAAMs"]
[Thu Mar 26 14:21:28.378590 2026] [:error] [pid 60829:tid 60844] [client 20.199.101.134:4883] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/albin.php"] [unique_id "acTQaPTdjHKeZokybaSGzAAAAQ0"]
[Thu Mar 26 14:21:28.870550 2026] [:error] [pid 60829:tid 60846] [client 20.199.101.134:4899] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/albin.php"] [unique_id "acTQaPTdjHKeZokybaSGzQAAAQ8"]
[Thu Mar 26 14:21:29.383964 2026] [:error] [pid 60829:tid 60836] [client 20.199.101.134:5066] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/albin.php"] [unique_id "acTQafTdjHKeZokybaSGzwAAAQU"]
[Thu Mar 26 14:21:29.903546 2026] [:error] [pid 60829:tid 60847] [client 20.199.101.134:4922] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/albin.php"] [unique_id "acTQafTdjHKeZokybaSG0gAAARA"]
[Thu Mar 26 14:21:30.425622 2026] [:error] [pid 19818:tid 19827] [client 20.199.101.134:4966] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gk.php"] [unique_id "acTQaszaSnm3d1BeM5VySwAAAMc"]
[Thu Mar 26 14:21:30.900446 2026] [:error] [pid 19712:tid 19783] [client 20.199.101.134:4815] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gk.php"] [unique_id "acTQatWhKhRNqm23vFMC3AAAAIc"]
[Thu Mar 26 14:21:31.401350 2026] [:error] [pid 31670:tid 31689] [client 20.199.101.134:4808] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gk.php"] [unique_id "acTQazXVthXxCnWjOTQGBQAAAVE"]
[Thu Mar 26 14:21:31.920537 2026] [:error] [pid 19711:tid 19749] [client 20.199.101.134:4901] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gk.php"] [unique_id "acTQa2j3l1y81GYfluR0gwAAAEA"]
[Thu Mar 26 14:21:32.646318 2026] [:error] [pid 31780:tid 31822] [client 20.199.101.134:4823] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/shellerr.php"] [unique_id "acTQbJJDwZsy5O4ZXEhDXgAAAgI"]
[Thu Mar 26 14:21:33.126312 2026] [:error] [pid 31778:tid 31815] [client 20.199.101.134:4820] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/shellerr.php"] [unique_id "acTQbQ3kybI2o-xasmC24gAAAdY"]
[Thu Mar 26 14:21:33.692662 2026] [:error] [pid 31778:tid 31811] [client 20.199.101.134:4920] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/shellerr.php"] [unique_id "acTQbQ3kybI2o-xasmC25QAAAdI"]
[Thu Mar 26 14:21:34.216893 2026] [:error] [pid 60829:tid 60852] [client 20.199.101.134:4970] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/shellerr.php"] [unique_id "acTQbvTdjHKeZokybaSG1gAAARU"]
[Thu Mar 26 14:21:34.768537 2026] [:error] [pid 19711:tid 19769] [client 20.199.101.134:5021] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "acTQbmj3l1y81GYfluR0hQAAAFQ"]
[Thu Mar 26 14:21:35.629631 2026] [proxy_fcgi:error] [pid 60829:tid 60844] [client 20.199.101.134:4897] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 14:21:35.926423 2026] [proxy_fcgi:error] [pid 60829:tid 60836] [client 20.199.101.134:4897] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 14:21:36.196203 2026] [proxy_fcgi:error] [pid 60829:tid 60841] [client 20.199.101.134:4897] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 14:21:36.487748 2026] [proxy_fcgi:error] [pid 60829:tid 60847] [client 20.199.101.134:4897] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 14:21:36.796938 2026] [proxy_fcgi:error] [pid 60829:tid 60853] [client 20.199.101.134:4897] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 14:21:37.108638 2026] [proxy_fcgi:error] [pid 60829:tid 60842] [client 20.199.101.134:4897] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 14:21:37.382370 2026] [proxy_fcgi:error] [pid 60829:tid 60835] [client 20.199.101.134:4897] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 14:21:37.651695 2026] [proxy_fcgi:error] [pid 60829:tid 60838] [client 20.199.101.134:4897] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 14:21:37.921225 2026] [proxy_fcgi:error] [pid 60829:tid 60831] [client 20.199.101.134:4897] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 14:21:38.224616 2026] [proxy_fcgi:error] [pid 60829:tid 60855] [client 20.199.101.134:4897] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 14:21:38.490706 2026] [:error] [pid 60829:tid 60849] [client 20.199.101.134:4897] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lites.php"] [unique_id "acTQcvTdjHKeZokybaSG6AAAARI"]
[Thu Mar 26 14:21:39.117432 2026] [:error] [pid 19711:tid 19750] [client 20.199.101.134:4737] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lites.php"] [unique_id "acTQc2j3l1y81GYfluR0hgAAAEE"]
[Thu Mar 26 14:21:39.591468 2026] [:error] [pid 60829:tid 60854] [client 20.199.101.134:4813] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lites.php"] [unique_id "acTQc_TdjHKeZokybaSG6gAAARc"]
[Thu Mar 26 14:21:40.159974 2026] [:error] [pid 31780:tid 31840] [client 20.199.101.134:4846] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lites.php"] [unique_id "acTQdJJDwZsy5O4ZXEhDYgAAAhM"]
[Thu Mar 26 14:21:40.707129 2026] [:error] [pid 19818:tid 19830] [client 20.199.101.134:4900] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cord.php"] [unique_id "acTQdMzaSnm3d1BeM5VyXQAAAMo"]
[Thu Mar 26 14:21:41.178170 2026] [:error] [pid 19818:tid 19839] [client 20.199.101.134:4741] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cord.php"] [unique_id "acTQdczaSnm3d1BeM5VyYAAAANM"]
[Thu Mar 26 14:21:41.654291 2026] [:error] [pid 19818:tid 19823] [client 20.199.101.134:4750] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cord.php"] [unique_id "acTQdczaSnm3d1BeM5VyYgAAAMM"]
[Thu Mar 26 14:21:42.177090 2026] [:error] [pid 31780:tid 31825] [client 20.199.101.134:4874] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cord.php"] [unique_id "acTQdpJDwZsy5O4ZXEhDYwAAAgU"]
[Thu Mar 26 14:21:42.659673 2026] [:error] [pid 31780:tid 31832] [client 20.199.101.134:4739] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/shlo.php"] [unique_id "acTQdpJDwZsy5O4ZXEhDZAAAAgs"]
[Thu Mar 26 14:21:43.179888 2026] [:error] [pid 31670:tid 31688] [client 20.199.101.134:4904] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/shlo.php"] [unique_id "acTQdzXVthXxCnWjOTQGHAAAAVA"]
[Thu Mar 26 14:21:43.704994 2026] [:error] [pid 31670:tid 31684] [client 20.199.101.134:4938] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/shlo.php"] [unique_id "acTQdzXVthXxCnWjOTQGHQAAAUw"]
[Thu Mar 26 14:21:44.191842 2026] [:error] [pid 60829:tid 60838] [client 20.199.101.134:4840] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/shlo.php"] [unique_id "acTQePTdjHKeZokybaSG7wAAAQc"]
[Thu Mar 26 14:21:44.689683 2026] [:error] [pid 19712:tid 19799] [client 20.199.101.134:4871] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gg.php"] [unique_id "acTQeNWhKhRNqm23vFMC5QAAAJc"]
[Thu Mar 26 14:21:45.298883 2026] [:error] [pid 19818:tid 19825] [client 20.199.101.134:4816] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gg.php"] [unique_id "acTQeczaSnm3d1BeM5VyZAAAAMU"]
[Thu Mar 26 14:21:45.815564 2026] [:error] [pid 31778:tid 31802] [client 20.199.101.134:4986] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gg.php"] [unique_id "acTQeQ3kybI2o-xasmC29AAAAck"]
[Thu Mar 26 14:21:46.517458 2026] [:error] [pid 31778:tid 31811] [client 20.199.101.134:4838] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gg.php"] [unique_id "acTQeg3kybI2o-xasmC2-AAAAdI"]
[Thu Mar 26 14:21:47.047846 2026] [:error] [pid 31670:tid 31676] [client 20.199.101.134:4805] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/we2.php"] [unique_id "acTQezXVthXxCnWjOTQGJgAAAUQ"]
[Thu Mar 26 14:21:47.547171 2026] [:error] [pid 19711:tid 19773] [client 20.199.101.134:4826] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/we2.php"] [unique_id "acTQe2j3l1y81GYfluR0igAAAFg"]
[Thu Mar 26 14:21:48.058356 2026] [:error] [pid 31670:tid 31677] [client 20.199.101.134:5071] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/we2.php"] [unique_id "acTQfDXVthXxCnWjOTQGKgAAAUU"]
[Thu Mar 26 14:21:48.648468 2026] [:error] [pid 19711:tid 19757] [client 20.199.101.134:4915] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/we2.php"] [unique_id "acTQfGj3l1y81GYfluR0kAAAAEg"]
[Thu Mar 26 14:21:49.188518 2026] [:error] [pid 19712:tid 19785] [client 20.199.101.134:4917] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/juuuu.php"] [unique_id "acTQfdWhKhRNqm23vFMC5gAAAIk"]
[Thu Mar 26 14:21:49.666526 2026] [:error] [pid 31670:tid 31681] [client 20.199.101.134:4888] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/juuuu.php"] [unique_id "acTQfTXVthXxCnWjOTQGLQAAAUk"]
[Thu Mar 26 14:21:50.291860 2026] [:error] [pid 31717:tid 31743] [client 20.199.101.134:4912] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/juuuu.php"] [unique_id "acTQfr-SCF7YDISDX4-3LwAAAZU"]
[Thu Mar 26 14:21:50.877352 2026] [:error] [pid 31778:tid 31804] [client 20.199.101.134:4879] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/juuuu.php"] [unique_id "acTQfg3kybI2o-xasmC3BgAAAcs"]
[Thu Mar 26 14:21:51.428190 2026] [:error] [pid 19712:tid 19789] [client 20.199.101.134:4857] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nox.php"] [unique_id "acTQf9WhKhRNqm23vFMC6QAAAI0"]
[Thu Mar 26 14:21:51.944000 2026] [:error] [pid 31778:tid 31803] [client 20.199.101.134:4868] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nox.php"] [unique_id "acTQfw3kybI2o-xasmC3CQAAAco"]
[Thu Mar 26 14:21:52.788163 2026] [:error] [pid 31670:tid 31681] [client 20.199.101.134:4824] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nox.php"] [unique_id "acTQgDXVthXxCnWjOTQGNwAAAUk"]
[Thu Mar 26 14:21:53.335687 2026] [:error] [pid 31670:tid 31680] [client 20.199.101.134:4804] [client 20.199.101.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nox.php"] [unique_id "acTQgTXVthXxCnWjOTQGOgAAAUg"]
[Thu Mar 26 22:08:13.252357 2026] [:error] [pid 31778:tid 31805] [client 4.206.17.96:12692] [client 4.206.17.96] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.206.17.96 on wp-login.php, counter = 25"] [hostname "dwelectservices.com.au"] [uri "/1.php"] [unique_id "acU9zQ3kybI2o-xasmAkUAAAAcw"]
[Thu Mar 26 22:08:14.093475 2026] [:error] [pid 31778:tid 31795] [client 4.206.17.96:12951] [client 4.206.17.96] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.206.17.96 on wp-login.php, counter = 25"] [hostname "dwelectservices.com.au"] [uri "/wp-content/uploads/2024/"] [unique_id "acU9zg3kybI2o-xasmAkUwAAAcI"]
[Thu Mar 26 22:08:14.928080 2026] [:error] [pid 19710:tid 19746] [client 4.206.17.96:12979] [client 4.206.17.96] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.206.17.96, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-content/uploads/wp-login.php"] [unique_id "acU9zgVEWP8Ar68Njk4sZAAAABg"]
[Thu Mar 26 22:08:14.928176 2026] [:error] [pid 19710:tid 19746] [client 4.206.17.96:12979] [client 4.206.17.96] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.206.17.96 on wp-login.php, counter = 26"] [hostname "dwelectservices.com.au"] [uri "/wp-content/uploads/wp-login.php"] [unique_id "acU9zgVEWP8Ar68Njk4sZAAAABg"]
[Thu Mar 26 22:08:15.763320 2026] [:error] [pid 60829:tid 60843] [client 4.206.17.96:12952] [client 4.206.17.96] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.206.17.96 on wp-login.php, counter = 26"] [hostname "dwelectservices.com.au"] [uri "/wp-corn-sample.php"] [unique_id "acU9z_TdjHKeZokybaTbvAAAAQw"]
[Thu Mar 26 22:08:16.601325 2026] [:error] [pid 31780:tid 31829] [client 4.206.17.96:12949] [client 4.206.17.96] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.206.17.96 on wp-login.php, counter = 26"] [hostname "dwelectservices.com.au"] [uri "/wp-content/uploads/"] [unique_id "acU90JJDwZsy5O4ZXEjLGAAAAgg"]
[Thu Mar 26 22:08:18.954175 2026] [:error] [pid 19818:tid 19840] [client 4.206.17.96:12982] [client 4.206.17.96] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.206.17.96 on wp-login.php, counter = 26"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "acU90szaSnm3d1BeM5U8rwAAANQ"]
[Thu Mar 26 22:08:19.786443 2026] [:error] [pid 19711:tid 19756] [client 4.206.17.96:12688] [client 4.206.17.96] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.206.17.96 on wp-login.php, counter = 26"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/index.php"] [unique_id "acU902j3l1y81GYfluS4rAAAAEc"]
[Thu Mar 26 22:08:20.625371 2026] [:error] [pid 19712:tid 19799] [client 4.206.17.96:12965] [client 4.206.17.96] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.206.17.96 on wp-login.php, counter = 26"] [hostname "dwelectservices.com.au"] [uri "/server.php"] [unique_id "acU91NWhKhRNqm23vFNMbQAAAJc"]
[Thu Mar 26 22:08:21.450950 2026] [:error] [pid 31717:tid 31729] [client 4.206.17.96:12941] [client 4.206.17.96] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.206.17.96 on wp-login.php, counter = 26"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Requests/library/"] [unique_id "acU91b-SCF7YDISDX4_8vwAAAYc"]
[Thu Mar 26 22:08:22.288109 2026] [:error] [pid 31778:tid 31801] [client 4.206.17.96:12690] [client 4.206.17.96] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.206.17.96 on wp-login.php, counter = 26"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/js/"] [unique_id "acU91g3kybI2o-xasmAkWgAAAcg"]
[Thu Mar 26 22:08:23.114154 2026] [:error] [pid 60829:tid 60838] [client 4.206.17.96:12986] [client 4.206.17.96] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.206.17.96 on wp-login.php, counter = 26"] [hostname "dwelectservices.com.au"] [uri "/wso.php"] [unique_id "acU91_TdjHKeZokybaTbvwAAAQc"]
[Thu Mar 26 22:08:23.949036 2026] [:error] [pid 31670:tid 31680] [client 4.206.17.96:12674] [client 4.206.17.96] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.206.17.96 on wp-login.php, counter = 26"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "acU91zXVthXxCnWjOTTZ1wAAAUg"]
[Thu Mar 26 22:08:24.791997 2026] [:error] [pid 31717:tid 31742] [client 4.206.17.96:12675] [client 4.206.17.96] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.206.17.96 on wp-login.php, counter = 26"] [hostname "dwelectservices.com.au"] [uri "/wp-file.php"] [unique_id "acU92L-SCF7YDISDX4_8wQAAAZQ"]
[Thu Mar 26 22:08:25.624148 2026] [:error] [pid 19818:tid 19837] [client 4.206.17.96:12989] [client 4.206.17.96] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.206.17.96 on wp-login.php, counter = 26"] [hostname "dwelectservices.com.au"] [uri "/adminfuns.php"] [unique_id "acU92czaSnm3d1BeM5U8twAAANE"]
[Thu Mar 26 22:08:26.463318 2026] [:error] [pid 19710:tid 19742] [client 4.206.17.96:12691] [client 4.206.17.96] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.206.17.96 on wp-login.php, counter = 26"] [hostname "dwelectservices.com.au"] [uri "/wk/index.php"] [unique_id "acU92gVEWP8Ar68Njk4sdgAAABQ"]
[Thu Mar 26 22:08:27.326821 2026] [:error] [pid 31670:tid 31687] [client 4.206.17.96:12944] [client 4.206.17.96] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.206.17.96 on wp-login.php, counter = 26"] [hostname "dwelectservices.com.au"] [uri "/wp-admin.php"] [unique_id "acU92zXVthXxCnWjOTTZ3wAAAU8"]
[Thu Mar 26 22:08:28.256436 2026] [:error] [pid 19710:tid 19738] [client 4.206.17.96:12481] [client 4.206.17.96] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.206.17.96 on wp-login.php, counter = 26"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "acU93AVEWP8Ar68Njk4seQAAABA"]
[Thu Mar 26 22:08:29.092828 2026] [:error] [pid 31780:tid 31827] [client 4.206.17.96:12697] [client 4.206.17.96] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.206.17.96 on wp-login.php, counter = 26"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/block-bindings/"] [unique_id "acU93ZJDwZsy5O4ZXEjLIwAAAgc"]
[Thu Mar 26 22:08:29.916538 2026] [:error] [pid 31670:tid 31693] [client 4.206.17.96:12673] [client 4.206.17.96] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.206.17.96 on wp-login.php, counter = 26"] [hostname "dwelectservices.com.au"] [uri "/xmrlpc.php"] [unique_id "acU93TXVthXxCnWjOTTZ7AAAAVU"]
[Thu Mar 26 22:08:30.761016 2026] [:error] [pid 31670:tid 31686] [client 4.206.17.96:12680] [client 4.206.17.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "acU93jXVthXxCnWjOTTZ7wAAAU4"]
[Thu Mar 26 22:08:31.600317 2026] [:error] [pid 19711:tid 19750] [client 4.206.17.96:12987] [client 4.206.17.96] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.206.17.96 on wp-login.php, counter = 26"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/file.php"] [unique_id "acU932j3l1y81GYfluS4swAAAEE"]
[Thu Mar 26 22:08:32.425009 2026] [:error] [pid 19711:tid 19771] [client 4.206.17.96:12731] [client 4.206.17.96] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.206.17.96 on wp-login.php, counter = 26"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/rest-api/fields/"] [unique_id "acU94Gj3l1y81GYfluS4uAAAAFY"]
[Thu Mar 26 22:08:33.262438 2026] [:error] [pid 19710:tid 19740] [client 4.206.17.96:12689] [client 4.206.17.96] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.206.17.96 on wp-login.php, counter = 26"] [hostname "dwelectservices.com.au"] [uri "/atomlib.php"] [unique_id "acU94QVEWP8Ar68Njk4sgAAAABI"]
[Thu Mar 26 22:08:34.090765 2026] [:error] [pid 31780:tid 31829] [client 4.206.17.96:12930] [client 4.206.17.96] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.206.17.96 on wp-login.php, counter = 26"] [hostname "dwelectservices.com.au"] [uri "/css/index.php"] [unique_id "acU94pJDwZsy5O4ZXEjLKgAAAgg"]
[Thu Mar 26 22:08:34.924018 2026] [:error] [pid 19711:tid 19760] [client 4.206.17.96:12972] [client 4.206.17.96] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.206.17.96 on wp-login.php, counter = 26"] [hostname "dwelectservices.com.au"] [uri "/wp-content/et-cache/"] [unique_id "acU94mj3l1y81GYfluS4vQAAAEs"]
[Thu Mar 26 22:08:35.764612 2026] [:error] [pid 31778:tid 31796] [client 4.206.17.96:12984] [client 4.206.17.96] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.206.17.96 on wp-login.php, counter = 26"] [hostname "dwelectservices.com.au"] [uri "/about.php"] [unique_id "acU94w3kybI2o-xasmAkbQAAAcM"]
[Thu Mar 26 22:08:36.589813 2026] [:error] [pid 19710:tid 19745] [client 4.206.17.96:12963] [client 4.206.17.96] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.206.17.96 on wp-login.php, counter = 26"] [hostname "dwelectservices.com.au"] [uri "/wp-content/uploads/admin.php"] [unique_id "acU95AVEWP8Ar68Njk4siwAAABc"]
[Thu Mar 26 22:08:37.418065 2026] [:error] [pid 60829:tid 60838] [client 4.206.17.96:12959] [client 4.206.17.96] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.206.17.96 on wp-login.php, counter = 26"] [hostname "dwelectservices.com.au"] [uri "/wp-content/index.php"] [unique_id "acU95fTdjHKeZokybaTbyQAAAQc"]
[Thu Mar 26 22:08:38.267326 2026] [:error] [pid 19710:tid 19727] [client 4.206.17.96:12484] [client 4.206.17.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "acU95gVEWP8Ar68Njk4skQAAAAU"]
[Thu Mar 26 22:08:39.094745 2026] [:error] [pid 19711:tid 19758] [client 4.206.17.96:12679] [client 4.206.17.96] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.206.17.96 on wp-login.php, counter = 26"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/rest-api/"] [unique_id "acU952j3l1y81GYfluS4wwAAAEk"]
[Thu Mar 26 22:08:39.931136 2026] [:error] [pid 19711:tid 19752] [client 4.206.17.96:12970] [client 4.206.17.96] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.206.17.96 on wp-login.php, counter = 26"] [hostname "dwelectservices.com.au"] [uri "/admin.php"] [unique_id "acU952j3l1y81GYfluS4yQAAAEM"]
[Thu Mar 26 22:08:40.757142 2026] [:error] [pid 31780:tid 31838] [client 4.206.17.96:12932] [client 4.206.17.96] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.206.17.96 on wp-login.php, counter = 26"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/block/"] [unique_id "acU96JJDwZsy5O4ZXEjLMAAAAhE"]
[Thu Mar 26 22:08:41.583772 2026] [:error] [pid 31670:tid 31693] [client 4.206.17.96:12687] [client 4.206.17.96] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.206.17.96 on wp-login.php, counter = 26"] [hostname "dwelectservices.com.au"] [uri "/as.php"] [unique_id "acU96TXVthXxCnWjOTTaBgAAAVU"]
[Thu Mar 26 22:08:42.411071 2026] [:error] [pid 19712:tid 19791] [client 4.206.17.96:12938] [client 4.206.17.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "acU96tWhKhRNqm23vFNMeQAAAI8"]
[Thu Mar 26 22:08:43.248860 2026] [:error] [pid 19711:tid 19767] [client 4.206.17.96:12960] [client 4.206.17.96] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.206.17.96 on wp-login.php, counter = 26"] [hostname "dwelectservices.com.au"] [uri "/buy.php"] [unique_id "acU962j3l1y81GYfluS4zgAAAFI"]
[Thu Mar 26 22:08:44.132494 2026] [:error] [pid 19711:tid 19771] [client 4.206.17.96:12950] [client 4.206.17.96] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.206.17.96 on wp-login.php, counter = 26"] [hostname "dwelectservices.com.au"] [uri "/wp.php"] [unique_id "acU97Gj3l1y81GYfluS40gAAAFY"]
[Thu Mar 26 22:08:44.963523 2026] [:error] [pid 31670:tid 31679] [client 4.206.17.96:12726] [client 4.206.17.96] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.206.17.96 on wp-login.php, counter = 26"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/images/index.php"] [unique_id "acU97DXVthXxCnWjOTTaDwAAAUc"]
[Thu Mar 26 22:08:45.789842 2026] [:error] [pid 60829:tid 60849] [client 4.206.17.96:12728] [client 4.206.17.96] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.206.17.96 on wp-login.php, counter = 26"] [hostname "dwelectservices.com.au"] [uri "/about.PHP"] [unique_id "acU97fTdjHKeZokybaTb0wAAARI"]
[Thu Mar 26 22:08:46.638993 2026] [:error] [pid 19711:tid 19755] [client 4.206.17.96:12700] [client 4.206.17.96] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.206.17.96 on wp-login.php, counter = 26"] [hostname "dwelectservices.com.au"] [uri "/ioxi-o.php"] [unique_id "acU97mj3l1y81GYfluS41gAAAEY"]
[Thu Mar 26 22:08:47.490316 2026] [:error] [pid 19711:tid 19754] [client 4.206.17.96:12937] [client 4.206.17.96] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.206.17.96 on wp-login.php, counter = 26"] [hostname "dwelectservices.com.au"] [uri "/wp-content/uploads/index.php"] [unique_id "acU972j3l1y81GYfluS44AAAAEU"]
[Thu Mar 26 22:08:48.317398 2026] [:error] [pid 19711:tid 19759] [client 4.206.17.96:12961] [client 4.206.17.96] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.206.17.96 on wp-login.php, counter = 26"] [hostname "dwelectservices.com.au"] [uri "/wp-content/edit.php"] [unique_id "acU98Gj3l1y81GYfluS45AAAAEo"]
[Thu Mar 26 22:08:49.151530 2026] [:error] [pid 19818:tid 19830] [client 4.206.17.96:12934] [client 4.206.17.96] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.206.17.96 on wp-login.php, counter = 26"] [hostname "dwelectservices.com.au"] [uri "/sf.php"] [unique_id "acU98czaSnm3d1BeM5U8xQAAAMo"]
[Thu Mar 26 22:08:49.988532 2026] [:error] [pid 19712:tid 19792] [client 4.206.17.96:12943] [client 4.206.17.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/index.php"] [unique_id "acU98dWhKhRNqm23vFNMhQAAAJA"]
[Thu Mar 26 22:08:50.828361 2026] [:error] [pid 19712:tid 19798] [client 4.206.17.96:12672] [client 4.206.17.96] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.206.17.96 on wp-login.php, counter = 26"] [hostname "dwelectservices.com.au"] [uri "/file.php"] [unique_id "acU98tWhKhRNqm23vFNMiQAAAJY"]
[Thu Mar 26 22:08:51.657678 2026] [:error] [pid 19712:tid 19783] [client 4.206.17.96:12955] [client 4.206.17.96] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.206.17.96 on wp-login.php, counter = 26"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/colors/modern/"] [unique_id "acU989WhKhRNqm23vFNMiwAAAIc"]
[Thu Mar 26 22:08:52.489410 2026] [:error] [pid 31778:tid 31810] [client 4.206.17.96:12681] [client 4.206.17.96] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.206.17.96 on wp-login.php, counter = 26"] [hostname "dwelectservices.com.au"] [uri "/cgi-bin/"] [unique_id "acU99A3kybI2o-xasmAkeAAAAdE"]
[Thu Mar 26 22:08:53.319950 2026] [:error] [pid 19818:tid 19820] [client 4.206.17.96:12980] [client 4.206.17.96] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.206.17.96 on wp-login.php, counter = 26"] [hostname "dwelectservices.com.au"] [uri "/test1.php"] [unique_id "acU99czaSnm3d1BeM5U8yAAAAMA"]
[Thu Mar 26 22:08:54.142569 2026] [:error] [pid 19818:tid 19822] [client 4.206.17.96:12988] [client 4.206.17.96] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.206.17.96 on wp-login.php, counter = 26"] [hostname "dwelectservices.com.au"] [uri "/wp-cron.php"] [unique_id "acU99szaSnm3d1BeM5U8ygAAAMI"]
[Thu Mar 26 22:08:54.967837 2026] [:error] [pid 31780:tid 31822] [client 4.206.17.96:12983] [client 4.206.17.96] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.206.17.96 on wp-login.php, counter = 26"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/block-supports/"] [unique_id "acU99pJDwZsy5O4ZXEjLOgAAAgI"]
[Thu Mar 26 22:08:55.791702 2026] [:error] [pid 19818:tid 19834] [client 4.206.17.96:12487] [client 4.206.17.96] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.206.17.96 on wp-login.php, counter = 26"] [hostname "dwelectservices.com.au"] [uri "/404.php"] [unique_id "acU998zaSnm3d1BeM5U8zgAAAM4"]
[Thu Mar 26 22:08:56.641116 2026] [:error] [pid 19712:tid 19794] [client 4.206.17.96:12693] [client 4.206.17.96] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.206.17.96 on wp-login.php, counter = 26"] [hostname "dwelectservices.com.au"] [uri "/wp-content/1.php"] [unique_id "acU9-NWhKhRNqm23vFNMkQAAAJI"]
[Thu Mar 26 22:08:57.485511 2026] [:error] [pid 31778:tid 31813] [client 4.206.17.96:12677] [client 4.206.17.96] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.206.17.96 on wp-login.php, counter = 26"] [hostname "dwelectservices.com.au"] [uri "/images/index.php"] [unique_id "acU9-Q3kybI2o-xasmAkfQAAAdQ"]
[Fri Mar 27 01:34:45.999065 2026] [:error] [pid 62147:tid 62481] [client 185.169.4.152:53168] [client 185.169.4.152] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/sftp-config.json"] [unique_id "acVuNRPjxn06mcLazN5-8wAAABU"]
[Fri Mar 27 01:34:46.679738 2026] [:error] [pid 44058:tid 44071] [client 185.169.4.152:56967] [client 185.169.4.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.vscode/sftp.json"] [unique_id "acVuNuqp9u5CVRGdZPH9sgAAAIs"]
[Fri Mar 27 07:52:42.498009 2026] [:error] [pid 63897:tid 63911] [client 216.81.200.75:45406] [client 216.81.200.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.git/config"] [unique_id "acXGymVSkmYmLu7ycYgq0AAAAQw"]
[Fri Mar 27 12:51:06.941645 2026] [:error] [pid 27750:tid 27833] [client 94.247.172.129:55854] [client 94.247.172.129] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dwelectservices.com.au|F|4"] [data "close, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dwelectservices.com.au"] [uri "/"] [unique_id "acYMuoaSil5rd17ieLyVHwAAAI8"]
[Fri Mar 27 20:11:45.403984 2026] [proxy_fcgi:error] [pid 27743:tid 27787] [client 74.234.62.173:65140] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 20:11:45.658586 2026] [proxy_fcgi:error] [pid 27743:tid 27780] [client 74.234.62.173:65140] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 20:11:45.911988 2026] [proxy_fcgi:error] [pid 27743:tid 27772] [client 74.234.62.173:65140] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 20:11:46.166638 2026] [proxy_fcgi:error] [pid 27743:tid 27768] [client 74.234.62.173:65140] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 20:11:46.421503 2026] [proxy_fcgi:error] [pid 27743:tid 27777] [client 74.234.62.173:65140] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 20:11:46.676009 2026] [proxy_fcgi:error] [pid 27743:tid 27772] [client 74.234.62.173:65140] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 20:11:47.454480 2026] [proxy_fcgi:error] [pid 27743:tid 27767] [client 74.234.62.173:65140] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 20:11:47.710594 2026] [proxy_fcgi:error] [pid 27743:tid 27770] [client 74.234.62.173:65140] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 20:11:47.965164 2026] [proxy_fcgi:error] [pid 27743:tid 27768] [client 74.234.62.173:65140] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 20:11:48.261883 2026] [proxy_fcgi:error] [pid 27743:tid 27778] [client 74.234.62.173:65140] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 20:11:48.515362 2026] [:error] [pid 27743:tid 27766] [client 74.234.62.173:65140] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bootstrap.php"] [unique_id "acZ0BCA46UYYLqzw99DjEwAAAAI"]
[Fri Mar 27 20:11:49.535420 2026] [:error] [pid 4341:tid 4360] [client 74.234.62.173:65207] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bootstrap.php"] [unique_id "acZ0BeKJWrNB5dMlERGkcwAAAZE"]
[Fri Mar 27 20:11:50.323938 2026] [:error] [pid 4341:tid 4367] [client 74.234.62.173:65092] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bootstrap.php"] [unique_id "acZ0BuKJWrNB5dMlERGkdwAAAZg"]
[Fri Mar 27 20:11:51.366647 2026] [:error] [pid 4293:tid 4316] [client 74.234.62.173:65128] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bootstrap.php"] [unique_id "acZ0B5LjeJUC3OKtEx-EIwAAAVU"]
[Fri Mar 27 20:11:52.603544 2026] [:error] [pid 4293:tid 4317] [client 74.234.62.173:64265] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/asasx.php"] [unique_id "acZ0CJLjeJUC3OKtEx-EKAAAAVY"]
[Fri Mar 27 20:11:53.494597 2026] [:error] [pid 27750:tid 27834] [client 74.234.62.173:64656] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/asasx.php"] [unique_id "acZ0CYaSil5rd17ieLzxsAAAAJA"]
[Fri Mar 27 20:11:54.575794 2026] [:error] [pid 63897:tid 63904] [client 74.234.62.173:65106] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/asasx.php"] [unique_id "acZ0CmVSkmYmLu7ycYhO4gAAAQU"]
[Fri Mar 27 20:11:55.567622 2026] [:error] [pid 4293:tid 4306] [client 74.234.62.173:65171] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/asasx.php"] [unique_id "acZ0C5LjeJUC3OKtEx-EOQAAAUs"]
[Fri Mar 27 20:11:56.282342 2026] [:error] [pid 4293:tid 4316] [client 74.234.62.173:65116] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Sanskrit.php"] [unique_id "acZ0DJLjeJUC3OKtEx-EPAAAAVU"]
[Fri Mar 27 20:12:02.560673 2026] [:error] [pid 27749:tid 27814] [client 74.234.62.173:64628] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Sanskrit.php"] [unique_id "acZ0EsEqyoMni2Q6_X7x7AAAAFc"]
[Fri Mar 27 20:12:03.233151 2026] [:error] [pid 4341:tid 4352] [client 74.234.62.173:65100] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Sanskrit.php"] [unique_id "acZ0E-KJWrNB5dMlERGkkAAAAYk"]
[Fri Mar 27 20:12:04.131535 2026] [:error] [pid 4293:tid 4296] [client 74.234.62.173:56012] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Sanskrit.php"] [unique_id "acZ0FJLjeJUC3OKtEx-ERwAAAUE"]
[Fri Mar 27 20:12:05.143503 2026] [:error] [pid 4293:tid 4319] [client 74.234.62.173:64654] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/green.php"] [unique_id "acZ0FZLjeJUC3OKtEx-ETwAAAVg"]
[Fri Mar 27 20:12:05.868790 2026] [:error] [pid 27749:tid 27791] [client 74.234.62.173:65139] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/green.php"] [unique_id "acZ0FcEqyoMni2Q6_X7x8AAAAEA"]
[Fri Mar 27 20:12:06.858357 2026] [:error] [pid 27851:tid 27858] [client 74.234.62.173:64648] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/green.php"] [unique_id "acZ0FnR2ccxe3RMCLbrwDAAAAMA"]
[Fri Mar 27 20:12:07.490111 2026] [:error] [pid 27749:tid 27802] [client 74.234.62.173:64698] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/green.php"] [unique_id "acZ0F8EqyoMni2Q6_X7x8gAAAEs"]
[Fri Mar 27 20:12:08.157492 2026] [:error] [pid 27743:tid 27783] [client 74.234.62.173:65204] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws87.php"] [unique_id "acZ0GCA46UYYLqzw99DjIQAAABM"]
[Fri Mar 27 20:12:08.883026 2026] [:error] [pid 27749:tid 27797] [client 74.234.62.173:64579] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws87.php"] [unique_id "acZ0GMEqyoMni2Q6_X7x9QAAAEY"]
[Fri Mar 27 20:12:09.651303 2026] [:error] [pid 63897:tid 63911] [client 74.234.62.173:65496] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws87.php"] [unique_id "acZ0GWVSkmYmLu7ycYhPAwAAAQw"]
[Fri Mar 27 20:12:10.401636 2026] [:error] [pid 27750:tid 27819] [client 74.234.62.173:64257] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws87.php"] [unique_id "acZ0GoaSil5rd17ieLzxvgAAAIE"]
[Fri Mar 27 20:12:11.577135 2026] [:error] [pid 27743:tid 27777] [client 74.234.62.173:65481] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wxfyf.php"] [unique_id "acZ0GyA46UYYLqzw99DjMQAAAA0"]
[Fri Mar 27 20:12:12.320052 2026] [:error] [pid 27749:tid 27801] [client 74.234.62.173:56019] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wxfyf.php"] [unique_id "acZ0HMEqyoMni2Q6_X7x-gAAAEo"]
[Fri Mar 27 20:12:12.906099 2026] [:error] [pid 27743:tid 27785] [client 74.234.62.173:65127] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wxfyf.php"] [unique_id "acZ0HCA46UYYLqzw99DjMwAAABU"]
[Fri Mar 27 20:12:13.478908 2026] [:error] [pid 4293:tid 4319] [client 74.234.62.173:64588] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wxfyf.php"] [unique_id "acZ0HZLjeJUC3OKtEx-EWAAAAVg"]
[Fri Mar 27 20:12:14.091958 2026] [:error] [pid 4293:tid 4312] [client 74.234.62.173:64585] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/about.php"] [unique_id "acZ0HpLjeJUC3OKtEx-EWQAAAVE"]
[Fri Mar 27 20:12:14.733908 2026] [:error] [pid 27743:tid 27774] [client 74.234.62.173:65505] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/about.php"] [unique_id "acZ0HiA46UYYLqzw99DjPQAAAAo"]
[Fri Mar 27 20:12:15.411500 2026] [:error] [pid 4341:tid 4349] [client 74.234.62.173:65110] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/about.php"] [unique_id "acZ0H-KJWrNB5dMlERGksQAAAYY"]
[Fri Mar 27 20:12:16.095599 2026] [:error] [pid 27743:tid 27770] [client 74.234.62.173:65513] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/about.php"] [unique_id "acZ0ICA46UYYLqzw99DjQAAAAAY"]
[Fri Mar 27 20:12:16.731485 2026] [:error] [pid 27851:tid 27872] [client 74.234.62.173:64273] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gpt-sh.php"] [unique_id "acZ0IHR2ccxe3RMCLbrwFAAAAM4"]
[Fri Mar 27 20:12:17.467903 2026] [:error] [pid 4293:tid 4319] [client 74.234.62.173:64664] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gpt-sh.php"] [unique_id "acZ0IZLjeJUC3OKtEx-EZAAAAVg"]
[Fri Mar 27 20:12:18.593042 2026] [:error] [pid 4293:tid 4299] [client 74.234.62.173:64281] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gpt-sh.php"] [unique_id "acZ0IpLjeJUC3OKtEx-EcAAAAUQ"]
[Fri Mar 27 20:12:19.984014 2026] [:error] [pid 4293:tid 4309] [client 74.234.62.173:56048] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gpt-sh.php"] [unique_id "acZ0I5LjeJUC3OKtEx-EfQAAAU4"]
[Fri Mar 27 20:12:21.032135 2026] [:error] [pid 27750:tid 27831] [client 74.234.62.173:64689] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ne2026.php"] [unique_id "acZ0JYaSil5rd17ieLzxwgAAAI0"]
[Fri Mar 27 20:12:21.711121 2026] [:error] [pid 27743:tid 27764] [client 74.234.62.173:64604] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ne2026.php"] [unique_id "acZ0JSA46UYYLqzw99DjTAAAAAA"]
[Fri Mar 27 20:12:22.409282 2026] [:error] [pid 27743:tid 27779] [client 74.234.62.173:63469] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ne2026.php"] [unique_id "acZ0JiA46UYYLqzw99DjUAAAAA8"]
[Fri Mar 27 20:12:23.050552 2026] [:error] [pid 63897:tid 63921] [client 74.234.62.173:64629] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ne2026.php"] [unique_id "acZ0J2VSkmYmLu7ycYhPDwAAARY"]
[Fri Mar 27 20:12:23.927193 2026] [:error] [pid 4293:tid 4315] [client 74.234.62.173:64669] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2ksm17n.php"] [unique_id "acZ0J5LjeJUC3OKtEx-EjwAAAVQ"]
[Fri Mar 27 20:12:24.477010 2026] [:error] [pid 27743:tid 27766] [client 74.234.62.173:65176] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2ksm17n.php"] [unique_id "acZ0KCA46UYYLqzw99DjVgAAAAI"]
[Fri Mar 27 20:12:25.358561 2026] [:error] [pid 4293:tid 4311] [client 74.234.62.173:65194] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2ksm17n.php"] [unique_id "acZ0KZLjeJUC3OKtEx-ElQAAAVA"]
[Fri Mar 27 20:12:26.167498 2026] [:error] [pid 63897:tid 63901] [client 74.234.62.173:64256] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2ksm17n.php"] [unique_id "acZ0KmVSkmYmLu7ycYhPEwAAAQI"]
[Fri Mar 27 20:12:27.027044 2026] [:error] [pid 27743:tid 27767] [client 74.234.62.173:64258] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ccs.php"] [unique_id "acZ0KyA46UYYLqzw99DjZwAAAAM"]
[Fri Mar 27 20:12:29.368968 2026] [:error] [pid 4293:tid 4309] [client 74.234.62.173:65147] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ccs.php"] [unique_id "acZ0LZLjeJUC3OKtEx-EnwAAAU4"]
[Fri Mar 27 20:12:37.111314 2026] [:error] [pid 4293:tid 4303] [client 74.234.62.173:65091] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ccs.php"] [unique_id "acZ0NZLjeJUC3OKtEx-EtgAAAUg"]
[Fri Mar 27 20:12:46.815889 2026] [:error] [pid 63897:tid 63908] [client 74.234.62.173:56032] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws81.php"] [unique_id "acZ0PmVSkmYmLu7ycYhPIwAAAQk"]
[Fri Mar 27 20:12:53.749559 2026] [proxy_fcgi:error] [pid 4341:tid 4365] [client 74.234.62.173:64270] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 20:12:54.051422 2026] [proxy_fcgi:error] [pid 4341:tid 4346] [client 74.234.62.173:64270] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 20:12:54.354088 2026] [proxy_fcgi:error] [pid 4341:tid 4349] [client 74.234.62.173:64270] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 20:12:54.645898 2026] [proxy_fcgi:error] [pid 4341:tid 4351] [client 74.234.62.173:64270] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 20:12:55.082813 2026] [proxy_fcgi:error] [pid 4341:tid 4343] [client 74.234.62.173:64270] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 20:12:55.371792 2026] [proxy_fcgi:error] [pid 4341:tid 4347] [client 74.234.62.173:64270] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 20:12:55.696928 2026] [proxy_fcgi:error] [pid 4341:tid 4361] [client 74.234.62.173:64270] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 20:12:55.986349 2026] [proxy_fcgi:error] [pid 4341:tid 4364] [client 74.234.62.173:64270] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 20:12:56.305846 2026] [proxy_fcgi:error] [pid 4341:tid 4363] [client 74.234.62.173:64270] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 20:12:56.605407 2026] [proxy_fcgi:error] [pid 4341:tid 4345] [client 74.234.62.173:64270] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 20:12:56.900654 2026] [proxy_fcgi:error] [pid 4341:tid 4344] [client 74.234.62.173:64270] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 20:12:57.188146 2026] [:error] [pid 4341:tid 4351] [client 74.234.62.173:64270] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rithin.php"] [unique_id "acZ0SeKJWrNB5dMlERGk8wAAAYg"]
[Fri Mar 27 20:12:57.947220 2026] [:error] [pid 4293:tid 4314] [client 74.234.62.173:64300] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rithin.php"] [unique_id "acZ0SZLjeJUC3OKtEx-E_AAAAVM"]
[Fri Mar 27 20:12:59.655556 2026] [:error] [pid 27743:tid 27770] [client 74.234.62.173:64618] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rithin.php"] [unique_id "acZ0SyA46UYYLqzw99DjrgAAAAY"]
[Fri Mar 27 20:13:00.857320 2026] [:error] [pid 4293:tid 4298] [client 74.234.62.173:64602] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rithin.php"] [unique_id "acZ0TJLjeJUC3OKtEx-FBQAAAUM"]
[Fri Mar 27 20:13:01.479376 2026] [:error] [pid 27743:tid 27766] [client 74.234.62.173:64596] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/as.php"] [unique_id "acZ0TSA46UYYLqzw99DjrwAAAAI"]
[Fri Mar 27 20:13:02.168099 2026] [:error] [pid 4341:tid 4355] [client 74.234.62.173:64662] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/as.php"] [unique_id "acZ0TuKJWrNB5dMlERGk_AAAAYw"]
[Fri Mar 27 20:13:02.913321 2026] [:error] [pid 63897:tid 63908] [client 74.234.62.173:65180] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/as.php"] [unique_id "acZ0TmVSkmYmLu7ycYhPLAAAAQk"]
[Fri Mar 27 20:13:03.597483 2026] [:error] [pid 4293:tid 4308] [client 74.234.62.173:64303] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/as.php"] [unique_id "acZ0T5LjeJUC3OKtEx-FFAAAAU0"]
[Fri Mar 27 20:13:04.407846 2026] [:error] [pid 4293:tid 4315] [client 74.234.62.173:56021] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xfun.php"] [unique_id "acZ0UJLjeJUC3OKtEx-FGQAAAVQ"]
[Fri Mar 27 20:13:05.513807 2026] [:error] [pid 27743:tid 27768] [client 74.234.62.173:64248] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xfun.php"] [unique_id "acZ0USA46UYYLqzw99DjsgAAAAQ"]
[Fri Mar 27 20:13:06.133088 2026] [:error] [pid 63897:tid 63909] [client 74.234.62.173:56042] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xfun.php"] [unique_id "acZ0UmVSkmYmLu7ycYhPLQAAAQo"]
[Fri Mar 27 20:13:06.638481 2026] [:error] [pid 27743:tid 27781] [client 74.234.62.173:65148] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xfun.php"] [unique_id "acZ0UiA46UYYLqzw99DjuwAAABE"]
[Fri Mar 27 20:13:07.687918 2026] [:error] [pid 27750:tid 27834] [client 74.234.62.173:64645] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws88.php"] [unique_id "acZ0U4aSil5rd17ieLzx1gAAAJA"]
[Fri Mar 27 20:13:08.510343 2026] [:error] [pid 4293:tid 4295] [client 74.234.62.173:63817] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws88.php"] [unique_id "acZ0VJLjeJUC3OKtEx-FIAAAAUA"]
[Fri Mar 27 20:13:09.295745 2026] [:error] [pid 4293:tid 4298] [client 74.234.62.173:56043] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws88.php"] [unique_id "acZ0VZLjeJUC3OKtEx-FJwAAAUM"]
[Fri Mar 27 20:13:10.369285 2026] [:error] [pid 4293:tid 4318] [client 74.234.62.173:65134] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws88.php"] [unique_id "acZ0VpLjeJUC3OKtEx-FLQAAAVc"]
[Fri Mar 27 20:13:11.232021 2026] [:error] [pid 27851:tid 27871] [client 74.234.62.173:64290] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws86.php"] [unique_id "acZ0V3R2ccxe3RMCLbrwLgAAAM0"]
[Fri Mar 27 20:13:11.868508 2026] [:error] [pid 27743:tid 27778] [client 74.234.62.173:64206] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws86.php"] [unique_id "acZ0VyA46UYYLqzw99DjwQAAAA4"]
[Fri Mar 27 20:13:12.392307 2026] [:error] [pid 27851:tid 27880] [client 74.234.62.173:64277] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws86.php"] [unique_id "acZ0WHR2ccxe3RMCLbrwNQAAANY"]
[Fri Mar 27 20:13:12.950322 2026] [:error] [pid 27851:tid 27877] [client 74.234.62.173:64582] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws86.php"] [unique_id "acZ0WHR2ccxe3RMCLbrwOAAAANM"]
[Fri Mar 27 20:13:13.559394 2026] [:error] [pid 4293:tid 4304] [client 74.234.62.173:65506] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws85.php"] [unique_id "acZ0WZLjeJUC3OKtEx-FOAAAAUk"]
[Fri Mar 27 20:13:14.226451 2026] [:error] [pid 27750:tid 27833] [client 74.234.62.173:56063] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws85.php"] [unique_id "acZ0WoaSil5rd17ieLzx2AAAAI8"]
[Fri Mar 27 20:13:15.318824 2026] [:error] [pid 27750:tid 27840] [client 74.234.62.173:56034] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws85.php"] [unique_id "acZ0W4aSil5rd17ieLzx2QAAAJY"]
[Fri Mar 27 20:13:16.004717 2026] [:error] [pid 4341:tid 4366] [client 74.234.62.173:64285] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws85.php"] [unique_id "acZ0XOKJWrNB5dMlERGlCQAAAZc"]
[Fri Mar 27 20:13:16.707171 2026] [:error] [pid 27750:tid 27824] [client 74.234.62.173:63824] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Cap.php"] [unique_id "acZ0XIaSil5rd17ieLzx3gAAAIY"]
[Fri Mar 27 20:13:17.302977 2026] [:error] [pid 27743:tid 27787] [client 74.234.62.173:64269] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Cap.php"] [unique_id "acZ0XSA46UYYLqzw99DjxwAAABc"]
[Fri Mar 27 20:13:18.040929 2026] [:error] [pid 27743:tid 27776] [client 74.234.62.173:65183] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Cap.php"] [unique_id "acZ0XiA46UYYLqzw99DjyQAAAAw"]
[Fri Mar 27 20:13:18.701227 2026] [:error] [pid 27749:tid 27808] [client 74.234.62.173:64304] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Cap.php"] [unique_id "acZ0XsEqyoMni2Q6_X7yHwAAAFE"]
[Fri Mar 27 20:13:19.431866 2026] [:error] [pid 4341:tid 4354] [client 74.234.62.173:63848] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/h2.php"] [unique_id "acZ0X-KJWrNB5dMlERGlDAAAAYs"]
[Fri Mar 27 20:13:20.134167 2026] [:error] [pid 27750:tid 27829] [client 74.234.62.173:65179] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/h2.php"] [unique_id "acZ0YIaSil5rd17ieLzx4QAAAIs"]
[Fri Mar 27 20:13:20.909064 2026] [:error] [pid 4341:tid 4352] [client 74.234.62.173:64696] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/h2.php"] [unique_id "acZ0YOKJWrNB5dMlERGlEAAAAYk"]
[Fri Mar 27 20:13:21.472892 2026] [:error] [pid 27749:tid 27806] [client 74.234.62.173:64680] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/h2.php"] [unique_id "acZ0YcEqyoMni2Q6_X7yIwAAAE8"]
[Fri Mar 27 20:13:22.297652 2026] [:error] [pid 27749:tid 27794] [client 74.234.62.173:65130] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dass.php"] [unique_id "acZ0YsEqyoMni2Q6_X7yJQAAAEM"]
[Fri Mar 27 20:13:23.092629 2026] [:error] [pid 4293:tid 4301] [client 74.234.62.173:65191] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dass.php"] [unique_id "acZ0Y5LjeJUC3OKtEx-FTQAAAUY"]
[Fri Mar 27 20:13:24.938955 2026] [:error] [pid 27750:tid 27835] [client 74.234.62.173:56023] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dass.php"] [unique_id "acZ0ZIaSil5rd17ieLzx5wAAAJE"]
[Fri Mar 27 20:13:26.390101 2026] [:error] [pid 27743:tid 27766] [client 74.234.62.173:64280] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dass.php"] [unique_id "acZ0ZiA46UYYLqzw99Dj2wAAAAI"]
[Fri Mar 27 20:13:27.156812 2026] [:error] [pid 63897:tid 63910] [client 74.234.62.173:64580] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/s.php"] [unique_id "acZ0Z2VSkmYmLu7ycYhPNQAAAQs"]
[Fri Mar 27 20:13:27.721122 2026] [:error] [pid 27743:tid 27773] [client 74.234.62.173:63837] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/s.php"] [unique_id "acZ0ZyA46UYYLqzw99Dj3wAAAAk"]
[Fri Mar 27 20:13:28.540595 2026] [:error] [pid 4293:tid 4313] [client 74.234.62.173:65522] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/s.php"] [unique_id "acZ0aJLjeJUC3OKtEx-FVwAAAVI"]
[Fri Mar 27 20:13:29.387360 2026] [:error] [pid 4293:tid 4305] [client 74.234.62.173:65203] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/s.php"] [unique_id "acZ0aZLjeJUC3OKtEx-FXAAAAUo"]
[Fri Mar 27 20:13:29.996023 2026] [:error] [pid 4293:tid 4307] [client 74.234.62.173:65206] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kj.php"] [unique_id "acZ0aZLjeJUC3OKtEx-FYQAAAUw"]
[Fri Mar 27 20:13:30.528082 2026] [:error] [pid 4293:tid 4313] [client 74.234.62.173:65484] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kj.php"] [unique_id "acZ0apLjeJUC3OKtEx-FYwAAAVI"]
[Fri Mar 27 20:13:31.151328 2026] [:error] [pid 4293:tid 4314] [client 74.234.62.173:63431] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kj.php"] [unique_id "acZ0a5LjeJUC3OKtEx-FZwAAAVM"]
[Fri Mar 27 20:13:31.771296 2026] [:error] [pid 4293:tid 4311] [client 74.234.62.173:64686] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kj.php"] [unique_id "acZ0a5LjeJUC3OKtEx-FawAAAVA"]
[Fri Mar 27 20:13:32.511543 2026] [:error] [pid 63897:tid 63913] [client 74.234.62.173:65150] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws83.php"] [unique_id "acZ0bGVSkmYmLu7ycYhPOgAAAQ4"]
[Fri Mar 27 20:13:33.053592 2026] [:error] [pid 4293:tid 4305] [client 74.234.62.173:64661] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws83.php"] [unique_id "acZ0bZLjeJUC3OKtEx-FcgAAAUo"]
[Fri Mar 27 20:13:33.673734 2026] [:error] [pid 4293:tid 4297] [client 74.234.62.173:65157] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws83.php"] [unique_id "acZ0bZLjeJUC3OKtEx-FdQAAAUI"]
[Fri Mar 27 20:13:34.180599 2026] [:error] [pid 4341:tid 4349] [client 74.234.62.173:64685] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws83.php"] [unique_id "acZ0buKJWrNB5dMlERGlFQAAAYY"]
[Fri Mar 27 20:13:34.800152 2026] [:error] [pid 4293:tid 4298] [client 74.234.62.173:56001] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws75.php"] [unique_id "acZ0bpLjeJUC3OKtEx-FegAAAUM"]
[Fri Mar 27 20:13:35.403007 2026] [:error] [pid 63897:tid 63904] [client 74.234.62.173:64667] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws75.php"] [unique_id "acZ0b2VSkmYmLu7ycYhPPQAAAQU"]
[Fri Mar 27 20:13:36.066652 2026] [:error] [pid 63897:tid 63910] [client 74.234.62.173:64295] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws75.php"] [unique_id "acZ0cGVSkmYmLu7ycYhPPgAAAQs"]
[Fri Mar 27 20:13:36.783096 2026] [:error] [pid 27749:tid 27802] [client 74.234.62.173:64194] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws75.php"] [unique_id "acZ0cMEqyoMni2Q6_X7yLwAAAEs"]
[Fri Mar 27 20:13:37.467290 2026] [:error] [pid 27743:tid 27785] [client 74.234.62.173:65142] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ms-edit.php"] [unique_id "acZ0cSA46UYYLqzw99Dj7wAAABU"]
[Fri Mar 27 20:13:37.972892 2026] [:error] [pid 27743:tid 27778] [client 74.234.62.173:56013] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ms-edit.php"] [unique_id "acZ0cSA46UYYLqzw99Dj8AAAAA4"]
[Fri Mar 27 20:13:38.534938 2026] [:error] [pid 27743:tid 27764] [client 74.234.62.173:65133] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ms-edit.php"] [unique_id "acZ0ciA46UYYLqzw99Dj8QAAAAA"]
[Fri Mar 27 20:13:39.376307 2026] [:error] [pid 27750:tid 27825] [client 74.234.62.173:64272] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ms-edit.php"] [unique_id "acZ0c4aSil5rd17ieLzx8QAAAIc"]
[Fri Mar 27 20:13:39.923659 2026] [:error] [pid 4341:tid 4363] [client 74.234.62.173:64619] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/abc.php"] [unique_id "acZ0c-KJWrNB5dMlERGlFgAAAZQ"]
[Fri Mar 27 20:13:40.592163 2026] [:error] [pid 27743:tid 27774] [client 74.234.62.173:63873] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/abc.php"] [unique_id "acZ0dCA46UYYLqzw99Dj9AAAAAo"]
[Fri Mar 27 20:13:41.411887 2026] [:error] [pid 27743:tid 27770] [client 74.234.62.173:64282] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/abc.php"] [unique_id "acZ0dSA46UYYLqzw99Dj-QAAAAY"]
[Fri Mar 27 20:13:42.130153 2026] [:error] [pid 4293:tid 4310] [client 74.234.62.173:65213] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/abc.php"] [unique_id "acZ0dpLjeJUC3OKtEx-FjQAAAU8"]
[Fri Mar 27 20:13:42.933970 2026] [:error] [pid 27851:tid 27865] [client 74.234.62.173:63921] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/motu.php"] [unique_id "acZ0dnR2ccxe3RMCLbrwSwAAAMc"]
[Fri Mar 27 20:13:43.745699 2026] [:error] [pid 4341:tid 4350] [client 74.234.62.173:63521] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/motu.php"] [unique_id "acZ0d-KJWrNB5dMlERGlGwAAAYc"]
[Fri Mar 27 20:13:44.996051 2026] [:error] [pid 4293:tid 4307] [client 74.234.62.173:56037] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/motu.php"] [unique_id "acZ0eJLjeJUC3OKtEx-FkgAAAUw"]
[Fri Mar 27 20:13:46.708867 2026] [:error] [pid 63897:tid 63918] [client 74.234.62.173:65089] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/motu.php"] [unique_id "acZ0emVSkmYmLu7ycYhPQAAAARM"]
[Fri Mar 27 20:13:47.462332 2026] [:error] [pid 27749:tid 27809] [client 74.234.62.173:63543] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/inputs.php"] [unique_id "acZ0e8EqyoMni2Q6_X7yNAAAAFI"]
[Fri Mar 27 20:13:48.226753 2026] [:error] [pid 4293:tid 4310] [client 74.234.62.173:64622] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/inputs.php"] [unique_id "acZ0fJLjeJUC3OKtEx-FngAAAU8"]
[Fri Mar 27 20:13:49.137554 2026] [:error] [pid 4293:tid 4314] [client 74.234.62.173:65212] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/inputs.php"] [unique_id "acZ0fZLjeJUC3OKtEx-FowAAAVM"]
[Fri Mar 27 20:13:50.155534 2026] [:error] [pid 27851:tid 27876] [client 74.234.62.173:64592] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/inputs.php"] [unique_id "acZ0fnR2ccxe3RMCLbrwVAAAANI"]
[Fri Mar 27 20:13:51.486939 2026] [:error] [pid 27750:tid 27821] [client 74.234.62.173:63478] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp9.php"] [unique_id "acZ0f4aSil5rd17ieLzx9AAAAIM"]
[Fri Mar 27 20:13:52.818920 2026] [:error] [pid 27743:tid 27787] [client 74.234.62.173:64695] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp9.php"] [unique_id "acZ0gCA46UYYLqzw99DkBwAAABc"]
[Fri Mar 27 20:13:53.898084 2026] [:error] [pid 4341:tid 4347] [client 74.234.62.173:56051] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp9.php"] [unique_id "acZ0geKJWrNB5dMlERGlKAAAAYQ"]
[Fri Mar 27 20:13:54.654578 2026] [:error] [pid 4293:tid 4308] [client 74.234.62.173:65524] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp9.php"] [unique_id "acZ0gpLjeJUC3OKtEx-FsQAAAU0"]
[Fri Mar 27 20:13:55.491588 2026] [:error] [pid 27743:tid 27778] [client 74.234.62.173:64674] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/public/vx.php"] [unique_id "acZ0gyA46UYYLqzw99DkFwAAAA4"]
[Fri Mar 27 20:13:56.716416 2026] [proxy_fcgi:error] [pid 4293:tid 4297] [client 74.234.62.173:64279] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 20:13:56.988282 2026] [proxy_fcgi:error] [pid 4293:tid 4312] [client 74.234.62.173:64279] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 20:13:57.346383 2026] [proxy_fcgi:error] [pid 4293:tid 4302] [client 74.234.62.173:64279] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 20:13:57.630301 2026] [proxy_fcgi:error] [pid 4293:tid 4313] [client 74.234.62.173:64279] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 20:13:58.315944 2026] [proxy_fcgi:error] [pid 4293:tid 4299] [client 74.234.62.173:64279] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 20:13:58.892451 2026] [proxy_fcgi:error] [pid 4293:tid 4298] [client 74.234.62.173:64279] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 20:13:59.230100 2026] [proxy_fcgi:error] [pid 4293:tid 4316] [client 74.234.62.173:64279] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 20:13:59.500875 2026] [proxy_fcgi:error] [pid 4293:tid 4313] [client 74.234.62.173:64279] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 20:13:59.768715 2026] [:error] [pid 4293:tid 4299] [client 74.234.62.173:64279] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/amp.php"] [unique_id "acZ0h5LjeJUC3OKtEx-F1AAAAUQ"]
[Fri Mar 27 20:14:00.399569 2026] [:error] [pid 27743:tid 27769] [client 74.234.62.173:64296] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/amp.php"] [unique_id "acZ0iCA46UYYLqzw99DkHwAAAAU"]
[Fri Mar 27 20:14:00.996027 2026] [:error] [pid 27743:tid 27776] [client 74.234.62.173:64293] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/amp.php"] [unique_id "acZ0iCA46UYYLqzw99DkIAAAAAw"]
[Fri Mar 27 20:14:01.920072 2026] [:error] [pid 27750:tid 27832] [client 74.234.62.173:65120] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/amp.php"] [unique_id "acZ0iYaSil5rd17ieLzx-QAAAI4"]
[Fri Mar 27 20:14:02.867453 2026] [:error] [pid 4293:tid 4310] [client 74.234.62.173:65202] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/init.php"] [unique_id "acZ0ipLjeJUC3OKtEx-F3gAAAU8"]
[Fri Mar 27 20:14:03.888723 2026] [:error] [pid 63897:tid 63899] [client 74.234.62.173:64611] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/init.php"] [unique_id "acZ0i2VSkmYmLu7ycYhPUAAAAQA"]
[Fri Mar 27 20:14:04.629516 2026] [:error] [pid 27743:tid 27766] [client 74.234.62.173:65472] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/init.php"] [unique_id "acZ0jCA46UYYLqzw99DkKwAAAAI"]
[Fri Mar 27 20:14:05.188552 2026] [:error] [pid 63897:tid 63913] [client 74.234.62.173:63865] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/init.php"] [unique_id "acZ0jWVSkmYmLu7ycYhPUgAAAQ4"]
[Fri Mar 27 20:14:05.859305 2026] [:error] [pid 27743:tid 27768] [client 74.234.62.173:62632] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gettest.php"] [unique_id "acZ0jSA46UYYLqzw99DkMwAAAAQ"]
[Fri Mar 27 20:14:06.864781 2026] [:error] [pid 27743:tid 27766] [client 74.234.62.173:64699] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gettest.php"] [unique_id "acZ0jiA46UYYLqzw99DkOAAAAAI"]
[Fri Mar 27 20:14:07.511548 2026] [:error] [pid 27749:tid 27810] [client 74.234.62.173:65159] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gettest.php"] [unique_id "acZ0j8EqyoMni2Q6_X7yOwAAAFM"]
[Fri Mar 27 20:14:08.041215 2026] [:error] [pid 4341:tid 4351] [client 74.234.62.173:64690] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gettest.php"] [unique_id "acZ0kOKJWrNB5dMlERGlLwAAAYg"]
[Fri Mar 27 20:14:08.806984 2026] [:error] [pid 4293:tid 4303] [client 74.234.62.173:65175] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/myfile.php"] [unique_id "acZ0kJLjeJUC3OKtEx-F7QAAAUg"]
[Fri Mar 27 20:14:09.327044 2026] [:error] [pid 4293:tid 4309] [client 74.234.62.173:63425] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/myfile.php"] [unique_id "acZ0kZLjeJUC3OKtEx-F8gAAAU4"]
[Fri Mar 27 20:14:09.968004 2026] [:error] [pid 63897:tid 63904] [client 74.234.62.173:56053] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/myfile.php"] [unique_id "acZ0kWVSkmYmLu7ycYhPUwAAAQU"]
[Fri Mar 27 20:14:10.534691 2026] [:error] [pid 63897:tid 63912] [client 74.234.62.173:64684] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/myfile.php"] [unique_id "acZ0kmVSkmYmLu7ycYhPVAAAAQ0"]
[Fri Mar 27 20:14:11.405323 2026] [:error] [pid 4341:tid 4354] [client 74.234.62.173:65135] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sid3.php"] [unique_id "acZ0k-KJWrNB5dMlERGlMQAAAYs"]
[Fri Mar 27 20:14:12.153101 2026] [:error] [pid 4341:tid 4355] [client 74.234.62.173:56011] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sid3.php"] [unique_id "acZ0lOKJWrNB5dMlERGlMwAAAYw"]
[Fri Mar 27 20:14:12.749564 2026] [:error] [pid 4293:tid 4312] [client 74.234.62.173:64287] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sid3.php"] [unique_id "acZ0lJLjeJUC3OKtEx-F_AAAAVE"]
[Fri Mar 27 20:14:13.676559 2026] [:error] [pid 4293:tid 4311] [client 74.234.62.173:64652] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sid3.php"] [unique_id "acZ0lZLjeJUC3OKtEx-GBgAAAVA"]
[Fri Mar 27 20:14:14.370901 2026] [:error] [pid 27743:tid 27788] [client 74.234.62.173:63436] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/666.php"] [unique_id "acZ0liA46UYYLqzw99DkSAAAABg"]
[Fri Mar 27 20:14:15.082282 2026] [:error] [pid 4341:tid 4364] [client 74.234.62.173:65197] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/666.php"] [unique_id "acZ0l-KJWrNB5dMlERGlNwAAAZU"]
[Fri Mar 27 20:14:15.606777 2026] [:error] [pid 63897:tid 63915] [client 74.234.62.173:65124] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/666.php"] [unique_id "acZ0l2VSkmYmLu7ycYhPWQAAARA"]
[Fri Mar 27 20:14:16.126889 2026] [:error] [pid 4293:tid 4300] [client 74.234.62.173:56014] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/666.php"] [unique_id "acZ0mJLjeJUC3OKtEx-GEgAAAUU"]
[Fri Mar 27 20:14:16.682808 2026] [:error] [pid 63897:tid 63911] [client 74.234.62.173:63524] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xxw.php"] [unique_id "acZ0mGVSkmYmLu7ycYhPWwAAAQw"]
[Fri Mar 27 20:14:17.243260 2026] [:error] [pid 4293:tid 4300] [client 74.234.62.173:56049] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xxw.php"] [unique_id "acZ0mZLjeJUC3OKtEx-GGQAAAUU"]
[Fri Mar 27 20:14:17.780724 2026] [:error] [pid 4293:tid 4309] [client 74.234.62.173:56040] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xxw.php"] [unique_id "acZ0mZLjeJUC3OKtEx-GHQAAAU4"]
[Fri Mar 27 20:14:18.646213 2026] [:error] [pid 63897:tid 63923] [client 74.234.62.173:65137] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xxw.php"] [unique_id "acZ0mmVSkmYmLu7ycYhPXQAAARg"]
[Fri Mar 27 20:14:19.313267 2026] [:error] [pid 63897:tid 63902] [client 74.234.62.173:64653] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-png.php"] [unique_id "acZ0m2VSkmYmLu7ycYhPXgAAAQM"]
[Fri Mar 27 20:14:19.915928 2026] [:error] [pid 27851:tid 27858] [client 74.234.62.173:64278] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-png.php"] [unique_id "acZ0m3R2ccxe3RMCLbrwagAAAMA"]
[Fri Mar 27 20:14:20.476524 2026] [:error] [pid 4341:tid 4343] [client 74.234.62.173:65112] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-png.php"] [unique_id "acZ0nOKJWrNB5dMlERGlPQAAAYA"]
[Fri Mar 27 20:14:20.977148 2026] [:error] [pid 27743:tid 27778] [client 74.234.62.173:65189] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-png.php"] [unique_id "acZ0nCA46UYYLqzw99DkUQAAAA4"]
[Fri Mar 27 20:14:21.556104 2026] [:error] [pid 4293:tid 4306] [client 74.234.62.173:65098] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/222.php"] [unique_id "acZ0nZLjeJUC3OKtEx-GKQAAAUs"]
[Fri Mar 27 20:14:22.181446 2026] [:error] [pid 27750:tid 27833] [client 74.234.62.173:65152] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/222.php"] [unique_id "acZ0noaSil5rd17ieLzx_gAAAI8"]
[Fri Mar 27 20:14:22.727324 2026] [:error] [pid 4341:tid 4357] [client 74.234.62.173:65096] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/222.php"] [unique_id "acZ0nuKJWrNB5dMlERGlQQAAAY4"]
[Fri Mar 27 20:14:23.358673 2026] [:error] [pid 27749:tid 27806] [client 74.234.62.173:65476] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/222.php"] [unique_id "acZ0n8EqyoMni2Q6_X7yQQAAAE8"]
[Fri Mar 27 20:14:23.967127 2026] [:error] [pid 27743:tid 27779] [client 74.234.62.173:56059] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-blog.php"] [unique_id "acZ0nyA46UYYLqzw99DkVgAAAA8"]
[Fri Mar 27 20:14:24.475723 2026] [:error] [pid 63897:tid 63906] [client 74.234.62.173:64212] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-blog.php"] [unique_id "acZ0oGVSkmYmLu7ycYhPZwAAAQc"]
[Fri Mar 27 20:14:25.066552 2026] [:error] [pid 27750:tid 27824] [client 74.234.62.173:56024] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-blog.php"] [unique_id "acZ0oYaSil5rd17ieLzyAQAAAIY"]
[Fri Mar 27 20:14:25.636106 2026] [:error] [pid 27851:tid 27861] [client 74.234.62.173:65498] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-blog.php"] [unique_id "acZ0oXR2ccxe3RMCLbrwbQAAAMM"]
[Fri Mar 27 20:14:26.234401 2026] [:error] [pid 4293:tid 4317] [client 74.234.62.173:63880] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "acZ0opLjeJUC3OKtEx-GNgAAAVY"]
[Fri Mar 27 20:14:26.925152 2026] [:error] [pid 4341:tid 4346] [client 74.234.62.173:63845] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "acZ0ouKJWrNB5dMlERGlRAAAAYM"]
[Fri Mar 27 20:14:27.453387 2026] [:error] [pid 27851:tid 27881] [client 74.234.62.173:64679] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "acZ0o3R2ccxe3RMCLbrwbgAAANc"]
[Fri Mar 27 20:14:27.989112 2026] [:error] [pid 27750:tid 27835] [client 74.234.62.173:65155] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "acZ0o4aSil5rd17ieLzyAgAAAJE"]
[Fri Mar 27 20:14:28.550861 2026] [:error] [pid 27750:tid 27818] [client 74.234.62.173:65096] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lib.php"] [unique_id "acZ0pIaSil5rd17ieLzyAwAAAIA"]
[Fri Mar 27 20:14:29.097519 2026] [:error] [pid 63897:tid 63907] [client 74.234.62.173:65485] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lib.php"] [unique_id "acZ0pWVSkmYmLu7ycYhPbAAAAQg"]
[Fri Mar 27 20:14:29.602545 2026] [:error] [pid 4293:tid 4305] [client 74.234.62.173:63924] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lib.php"] [unique_id "acZ0pZLjeJUC3OKtEx-GPwAAAUo"]
[Fri Mar 27 20:14:30.259488 2026] [:error] [pid 27750:tid 27819] [client 74.234.62.173:63925] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lib.php"] [unique_id "acZ0poaSil5rd17ieLzyBwAAAIE"]
[Fri Mar 27 20:14:30.841277 2026] [:error] [pid 27749:tid 27799] [client 74.234.62.173:65131] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/edit.php"] [unique_id "acZ0psEqyoMni2Q6_X7yQwAAAEg"]
[Fri Mar 27 20:14:31.352250 2026] [:error] [pid 63897:tid 63901] [client 74.234.62.173:64634] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/edit.php"] [unique_id "acZ0p2VSkmYmLu7ycYhPdgAAAQI"]
[Fri Mar 27 20:14:31.864796 2026] [:error] [pid 27750:tid 27838] [client 74.234.62.173:64658] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/edit.php"] [unique_id "acZ0p4aSil5rd17ieLzyCQAAAJQ"]
[Fri Mar 27 20:14:32.488757 2026] [:error] [pid 27750:tid 27841] [client 74.234.62.173:64306] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/edit.php"] [unique_id "acZ0qIaSil5rd17ieLzyCwAAAJc"]
[Fri Mar 27 20:14:33.010852 2026] [:error] [pid 4341:tid 4357] [client 74.234.62.173:56039] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ioxi-o.php"] [unique_id "acZ0qeKJWrNB5dMlERGlSgAAAY4"]
[Fri Mar 27 20:14:33.636156 2026] [:error] [pid 27749:tid 27811] [client 74.234.62.173:64584] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ioxi-o.php"] [unique_id "acZ0qcEqyoMni2Q6_X7ySQAAAFQ"]
[Fri Mar 27 20:14:34.270181 2026] [:error] [pid 27750:tid 27833] [client 74.234.62.173:56062] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ioxi-o.php"] [unique_id "acZ0qoaSil5rd17ieLzyDgAAAI8"]
[Fri Mar 27 20:14:34.812478 2026] [:error] [pid 4341:tid 4366] [client 74.234.62.173:65210] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ioxi-o.php"] [unique_id "acZ0quKJWrNB5dMlERGlUAAAAZc"]
[Fri Mar 27 20:14:35.728412 2026] [:error] [pid 63897:tid 63906] [client 74.234.62.173:65499] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ajax.php"] [unique_id "acZ0q2VSkmYmLu7ycYhPgwAAAQc"]
[Fri Mar 27 20:14:36.480957 2026] [:error] [pid 63897:tid 63918] [client 74.234.62.173:65184] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ajax.php"] [unique_id "acZ0rGVSkmYmLu7ycYhPhQAAARM"]
[Fri Mar 27 20:14:37.268696 2026] [:error] [pid 27750:tid 27839] [client 74.234.62.173:56038] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ajax.php"] [unique_id "acZ0rYaSil5rd17ieLzyEQAAAJU"]
[Fri Mar 27 20:14:37.960066 2026] [:error] [pid 63897:tid 63913] [client 74.234.62.173:64631] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ajax.php"] [unique_id "acZ0rWVSkmYmLu7ycYhPjQAAAQ4"]
[Fri Mar 27 20:14:38.769016 2026] [:error] [pid 27750:tid 27830] [client 74.234.62.173:64678] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/install.php"] [unique_id "acZ0roaSil5rd17ieLzyEwAAAIw"]
[Fri Mar 27 20:14:39.698124 2026] [:error] [pid 27743:tid 27787] [client 74.234.62.173:63811] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/install.php"] [unique_id "acZ0ryA46UYYLqzw99DkZQAAABc"]
[Fri Mar 27 20:14:40.948591 2026] [:error] [pid 4341:tid 4353] [client 74.234.62.173:64292] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/install.php"] [unique_id "acZ0sOKJWrNB5dMlERGlUQAAAYo"]
[Fri Mar 27 20:14:42.100447 2026] [:error] [pid 4341:tid 4352] [client 74.234.62.173:65502] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/install.php"] [unique_id "acZ0suKJWrNB5dMlERGlVwAAAYk"]
[Fri Mar 27 20:14:43.405383 2026] [:error] [pid 4341:tid 4350] [client 74.234.62.173:64251] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/public/wp-blog.php"] [unique_id "acZ0s-KJWrNB5dMlERGlWgAAAYc"]
[Fri Mar 27 20:14:44.143588 2026] [:error] [pid 63897:tid 63911] [client 74.234.62.173:65205] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/public/wp-blog.php"] [unique_id "acZ0tGVSkmYmLu7ycYhPmwAAAQw"]
[Fri Mar 27 20:14:45.632342 2026] [:error] [pid 27750:tid 27838] [client 74.234.62.173:64672] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/public/wp-blog.php"] [unique_id "acZ0tYaSil5rd17ieLzyHQAAAJQ"]
[Fri Mar 27 20:14:46.407613 2026] [:error] [pid 27749:tid 27809] [client 74.234.62.173:64308] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/public/wp-blog.php"] [unique_id "acZ0tsEqyoMni2Q6_X7yXAAAAFI"]
[Fri Mar 27 20:14:47.075569 2026] [:error] [pid 63897:tid 63921] [client 74.234.62.173:64276] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nw.php"] [unique_id "acZ0t2VSkmYmLu7ycYhPqAAAARY"]
[Fri Mar 27 20:14:48.317065 2026] [:error] [pid 27750:tid 27834] [client 74.234.62.173:65497] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nw.php"] [unique_id "acZ0uIaSil5rd17ieLzyIAAAAJA"]
[Fri Mar 27 20:14:49.224834 2026] [:error] [pid 27749:tid 27796] [client 74.234.62.173:64615] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nw.php"] [unique_id "acZ0ucEqyoMni2Q6_X7yYwAAAEU"]
[Fri Mar 27 20:14:50.380332 2026] [:error] [pid 27851:tid 27873] [client 74.234.62.173:65104] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nw.php"] [unique_id "acZ0unR2ccxe3RMCLbrwmgAAAM8"]
[Fri Mar 27 20:14:51.473776 2026] [:error] [pid 27743:tid 27771] [client 74.234.62.173:64697] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tool.php"] [unique_id "acZ0uyA46UYYLqzw99DkbgAAAAc"]
[Fri Mar 27 20:14:52.387685 2026] [:error] [pid 27743:tid 27786] [client 74.234.62.173:64288] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tool.php"] [unique_id "acZ0vCA46UYYLqzw99DkcgAAABY"]
[Fri Mar 27 20:15:43.015791 2026] [proxy_fcgi:error] [pid 4293:tid 4300] [client 74.234.62.173:64600] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 20:15:43.303412 2026] [proxy_fcgi:error] [pid 4293:tid 4303] [client 74.234.62.173:64600] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 20:15:43.608383 2026] [proxy_fcgi:error] [pid 4293:tid 4313] [client 74.234.62.173:64600] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 20:15:43.903861 2026] [proxy_fcgi:error] [pid 4293:tid 4295] [client 74.234.62.173:64600] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 20:15:44.176203 2026] [proxy_fcgi:error] [pid 4293:tid 4310] [client 74.234.62.173:64600] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 20:15:44.482345 2026] [proxy_fcgi:error] [pid 4293:tid 4304] [client 74.234.62.173:64600] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 20:15:44.761811 2026] [proxy_fcgi:error] [pid 4293:tid 4319] [client 74.234.62.173:64600] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 20:15:45.032755 2026] [proxy_fcgi:error] [pid 4293:tid 4311] [client 74.234.62.173:64600] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 20:15:45.347506 2026] [proxy_fcgi:error] [pid 4293:tid 4300] [client 74.234.62.173:64600] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 20:15:45.890124 2026] [proxy_fcgi:error] [pid 4293:tid 4303] [client 74.234.62.173:64600] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 20:15:46.190098 2026] [:error] [pid 4293:tid 4313] [client 74.234.62.173:64600] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-the.php"] [unique_id "acZ08pLjeJUC3OKtEx-G6gAAAVI"]
[Fri Mar 27 20:15:47.051857 2026] [:error] [pid 4341:tid 4366] [client 74.234.62.173:65156] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-the.php"] [unique_id "acZ08-KJWrNB5dMlERGl0AAAAZc"]
[Fri Mar 27 20:15:48.509615 2026] [:error] [pid 63897:tid 63908] [client 74.234.62.173:65504] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-the.php"] [unique_id "acZ09GVSkmYmLu7ycYhQAQAAAQk"]
[Fri Mar 27 20:15:49.406058 2026] [:error] [pid 27743:tid 27769] [client 74.234.62.173:63934] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-the.php"] [unique_id "acZ09SA46UYYLqzw99Dk6gAAAAU"]
[Fri Mar 27 20:15:50.027026 2026] [:error] [pid 4293:tid 4312] [client 74.234.62.173:64691] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp5.php"] [unique_id "acZ09pLjeJUC3OKtEx-G8QAAAVE"]
[Fri Mar 27 20:15:50.662291 2026] [:error] [pid 27743:tid 27784] [client 74.234.62.173:64693] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp5.php"] [unique_id "acZ09iA46UYYLqzw99Dk6wAAABQ"]
[Fri Mar 27 20:15:51.329091 2026] [:error] [pid 27851:tid 27868] [client 74.234.62.173:64657] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp5.php"] [unique_id "acZ093R2ccxe3RMCLbrwzwAAAMo"]
[Fri Mar 27 20:15:51.998134 2026] [:error] [pid 27750:tid 27840] [client 74.234.62.173:64268] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp5.php"] [unique_id "acZ094aSil5rd17ieLzyPwAAAJY"]
[Fri Mar 27 20:15:53.029868 2026] [:error] [pid 27750:tid 27818] [client 74.234.62.173:65482] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-access.php"] [unique_id "acZ0-YaSil5rd17ieLzyQQAAAIA"]
[Fri Mar 27 20:15:53.757873 2026] [:error] [pid 27749:tid 27805] [client 74.234.62.173:63508] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-access.php"] [unique_id "acZ0-cEqyoMni2Q6_X7yhQAAAE4"]
[Fri Mar 27 20:15:54.590178 2026] [:error] [pid 27749:tid 27813] [client 74.234.62.173:64668] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-access.php"] [unique_id "acZ0-sEqyoMni2Q6_X7yhgAAAFY"]
[Fri Mar 27 20:15:55.205995 2026] [:error] [pid 27851:tid 27865] [client 74.234.62.173:65520] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-access.php"] [unique_id "acZ0-3R2ccxe3RMCLbrw0gAAAMc"]
[Fri Mar 27 20:15:55.880836 2026] [:error] [pid 27749:tid 27811] [client 74.234.62.173:65492] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hots.php"] [unique_id "acZ0-8EqyoMni2Q6_X7yigAAAFQ"]
[Fri Mar 27 20:15:56.921874 2026] [:error] [pid 63897:tid 63919] [client 74.234.62.173:65475] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hots.php"] [unique_id "acZ0_GVSkmYmLu7ycYhQFwAAARQ"]
[Fri Mar 27 20:15:58.213777 2026] [:error] [pid 4293:tid 4300] [client 74.234.62.173:64644] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hots.php"] [unique_id "acZ0_pLjeJUC3OKtEx-HBQAAAUU"]
[Fri Mar 27 20:15:59.021331 2026] [:error] [pid 27749:tid 27815] [client 74.234.62.173:64591] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hots.php"] [unique_id "acZ0_8EqyoMni2Q6_X7yjQAAAFg"]
[Fri Mar 27 20:15:59.616029 2026] [:error] [pid 4293:tid 4295] [client 74.234.62.173:65500] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin-footer.php"] [unique_id "acZ0_5LjeJUC3OKtEx-HBgAAAUA"]
[Fri Mar 27 20:16:00.310533 2026] [:error] [pid 4341:tid 4358] [client 74.234.62.173:63827] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin-footer.php"] [unique_id "acZ1AOKJWrNB5dMlERGl2gAAAY8"]
[Fri Mar 27 20:16:01.466942 2026] [:error] [pid 27743:tid 27769] [client 74.234.62.173:64266] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin-footer.php"] [unique_id "acZ1ASA46UYYLqzw99Dk7gAAAAU"]
[Fri Mar 27 20:16:02.048119 2026] [:error] [pid 4293:tid 4303] [client 74.234.62.173:56044] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin-footer.php"] [unique_id "acZ1ApLjeJUC3OKtEx-HFAAAAUg"]
[Fri Mar 27 20:16:02.821154 2026] [:error] [pid 4293:tid 4302] [client 74.234.62.173:65119] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws84.php"] [unique_id "acZ1ApLjeJUC3OKtEx-HFgAAAUc"]
[Fri Mar 27 20:16:03.674285 2026] [:error] [pid 4293:tid 4298] [client 74.234.62.173:64603] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws84.php"] [unique_id "acZ1A5LjeJUC3OKtEx-HGgAAAUM"]
[Fri Mar 27 20:16:04.371571 2026] [:error] [pid 4293:tid 4301] [client 74.234.62.173:65123] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws84.php"] [unique_id "acZ1BJLjeJUC3OKtEx-HHQAAAUY"]
[Fri Mar 27 20:16:05.109122 2026] [:error] [pid 4293:tid 4310] [client 74.234.62.173:56001] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws84.php"] [unique_id "acZ1BZLjeJUC3OKtEx-HJwAAAU8"]
[Fri Mar 27 20:16:05.692358 2026] [:error] [pid 27749:tid 27807] [client 74.234.62.173:65093] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bnm.php"] [unique_id "acZ1BcEqyoMni2Q6_X7ynQAAAFA"]
[Fri Mar 27 20:16:06.562034 2026] [:error] [pid 63897:tid 63908] [client 74.234.62.173:56022] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bnm.php"] [unique_id "acZ1BmVSkmYmLu7ycYhQSgAAAQk"]
[Fri Mar 27 20:16:07.234213 2026] [:error] [pid 4293:tid 4298] [client 74.234.62.173:63496] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bnm.php"] [unique_id "acZ1B5LjeJUC3OKtEx-HbQAAAUM"]
[Fri Mar 27 20:16:07.937602 2026] [:error] [pid 4341:tid 4366] [client 74.234.62.173:64318] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bnm.php"] [unique_id "acZ1B-KJWrNB5dMlERGl7gAAAZc"]
[Fri Mar 27 20:16:08.535504 2026] [:error] [pid 4293:tid 4296] [client 74.234.62.173:64613] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/amax.php"] [unique_id "acZ1CJLjeJUC3OKtEx-HbwAAAUE"]
[Fri Mar 27 20:16:09.089552 2026] [:error] [pid 4293:tid 4306] [client 74.234.62.173:63882] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/amax.php"] [unique_id "acZ1CZLjeJUC3OKtEx-HdAAAAUs"]
[Fri Mar 27 20:16:10.065612 2026] [:error] [pid 27743:tid 27774] [client 74.234.62.173:65174] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/amax.php"] [unique_id "acZ1CiA46UYYLqzw99Dk9QAAAAo"]
[Fri Mar 27 20:16:10.668014 2026] [:error] [pid 63897:tid 63912] [client 74.234.62.173:64207] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/amax.php"] [unique_id "acZ1CmVSkmYmLu7ycYhQUgAAAQ0"]
[Fri Mar 27 20:16:11.284586 2026] [:error] [pid 27743:tid 27787] [client 74.234.62.173:56055] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/66.php"] [unique_id "acZ1CyA46UYYLqzw99Dk9wAAABc"]
[Fri Mar 27 20:16:11.897691 2026] [:error] [pid 4293:tid 4310] [client 74.234.62.173:64607] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/66.php"] [unique_id "acZ1C5LjeJUC3OKtEx-HfwAAAU8"]
[Fri Mar 27 20:16:12.494737 2026] [:error] [pid 4341:tid 4363] [client 74.234.62.173:64659] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/66.php"] [unique_id "acZ1DOKJWrNB5dMlERGl8gAAAZQ"]
[Fri Mar 27 20:16:13.148088 2026] [:error] [pid 27743:tid 27784] [client 74.234.62.173:64205] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/66.php"] [unique_id "acZ1DSA46UYYLqzw99Dk-gAAABQ"]
[Fri Mar 27 20:16:13.760134 2026] [:error] [pid 27851:tid 27866] [client 74.234.62.173:65515] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/public/file.php"] [unique_id "acZ1DXR2ccxe3RMCLbrw7wAAAMg"]
[Fri Mar 27 20:16:14.360843 2026] [:error] [pid 27743:tid 27783] [client 74.234.62.173:64199] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/public/file.php"] [unique_id "acZ1DiA46UYYLqzw99Dk-wAAABM"]
[Fri Mar 27 20:16:15.118104 2026] [:error] [pid 27743:tid 27765] [client 74.234.62.173:65122] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/public/file.php"] [unique_id "acZ1DyA46UYYLqzw99Dk_AAAAAE"]
[Fri Mar 27 20:16:15.860881 2026] [:error] [pid 27743:tid 27779] [client 74.234.62.173:65491] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/public/file.php"] [unique_id "acZ1DyA46UYYLqzw99DlAAAAAA8"]
[Fri Mar 27 20:16:16.686479 2026] [:error] [pid 27851:tid 27875] [client 74.234.62.173:64608] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/166.php"] [unique_id "acZ1EHR2ccxe3RMCLbrw8wAAANE"]
[Fri Mar 27 20:16:17.798941 2026] [:error] [pid 27851:tid 27874] [client 74.234.62.173:64586] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/166.php"] [unique_id "acZ1EXR2ccxe3RMCLbrw-AAAANA"]
[Fri Mar 27 20:16:18.534125 2026] [:error] [pid 27743:tid 27768] [client 74.234.62.173:65132] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/166.php"] [unique_id "acZ1EiA46UYYLqzw99DlBgAAAAQ"]
[Fri Mar 27 20:16:19.129181 2026] [:error] [pid 4293:tid 4299] [client 74.234.62.173:64314] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/166.php"] [unique_id "acZ1E5LjeJUC3OKtEx-HjQAAAUQ"]
[Fri Mar 27 20:16:19.766202 2026] [:error] [pid 27851:tid 27869] [client 74.234.62.173:65518] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws77.php"] [unique_id "acZ1E3R2ccxe3RMCLbrw_AAAAMs"]
[Fri Mar 27 20:16:20.450773 2026] [:error] [pid 27743:tid 27786] [client 74.234.62.173:64599] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws77.php"] [unique_id "acZ1FCA46UYYLqzw99DlDAAAABY"]
[Fri Mar 27 20:16:21.096318 2026] [:error] [pid 27743:tid 27787] [client 74.234.62.173:63853] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws77.php"] [unique_id "acZ1FSA46UYYLqzw99DlEgAAABc"]
[Fri Mar 27 20:16:21.783335 2026] [:error] [pid 27743:tid 27774] [client 74.234.62.173:64666] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws77.php"] [unique_id "acZ1FSA46UYYLqzw99DlFQAAAAo"]
[Fri Mar 27 20:16:22.391576 2026] [:error] [pid 27743:tid 27768] [client 74.234.62.173:64583] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/grsiuk.php"] [unique_id "acZ1FiA46UYYLqzw99DlGwAAAAQ"]
[Fri Mar 27 20:16:22.905244 2026] [:error] [pid 27749:tid 27806] [client 74.234.62.173:64620] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/grsiuk.php"] [unique_id "acZ1FsEqyoMni2Q6_X7ypQAAAE8"]
[Fri Mar 27 20:16:23.671525 2026] [:error] [pid 27743:tid 27771] [client 74.234.62.173:64606] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/grsiuk.php"] [unique_id "acZ1FyA46UYYLqzw99DlHQAAAAc"]
[Fri Mar 27 20:16:24.268506 2026] [:error] [pid 4293:tid 4299] [client 74.234.62.173:65513] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/grsiuk.php"] [unique_id "acZ1GJLjeJUC3OKtEx-HlgAAAUQ"]
[Fri Mar 27 20:16:25.015658 2026] [:error] [pid 4293:tid 4311] [client 74.234.62.173:65519] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-act.php"] [unique_id "acZ1GZLjeJUC3OKtEx-HlwAAAVA"]
[Fri Mar 27 20:16:25.884211 2026] [:error] [pid 4293:tid 4308] [client 74.234.62.173:56009] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-act.php"] [unique_id "acZ1GZLjeJUC3OKtEx-HnwAAAU0"]
[Fri Mar 27 20:16:26.766299 2026] [:error] [pid 4293:tid 4305] [client 74.234.62.173:65496] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-act.php"] [unique_id "acZ1GpLjeJUC3OKtEx-HpQAAAUo"]
[Fri Mar 27 20:16:27.662193 2026] [:error] [pid 4293:tid 4308] [client 74.234.62.173:65102] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-act.php"] [unique_id "acZ1G5LjeJUC3OKtEx-HqQAAAU0"]
[Fri Mar 27 20:16:28.537694 2026] [:error] [pid 4293:tid 4310] [client 74.234.62.173:64219] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cu.php"] [unique_id "acZ1HJLjeJUC3OKtEx-HrgAAAU8"]
[Fri Mar 27 20:16:29.213947 2026] [:error] [pid 4293:tid 4319] [client 74.234.62.173:65166] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cu.php"] [unique_id "acZ1HZLjeJUC3OKtEx-HsQAAAVg"]
[Fri Mar 27 20:16:30.152290 2026] [:error] [pid 4293:tid 4310] [client 74.234.62.173:63005] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cu.php"] [unique_id "acZ1HpLjeJUC3OKtEx-HuQAAAU8"]
[Fri Mar 27 20:16:30.868380 2026] [:error] [pid 4293:tid 4303] [client 74.234.62.173:64261] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cu.php"] [unique_id "acZ1HpLjeJUC3OKtEx-HvAAAAUg"]
[Fri Mar 27 20:16:31.472528 2026] [:error] [pid 27750:tid 27835] [client 74.234.62.173:64589] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/8.php"] [unique_id "acZ1H4aSil5rd17ieLzyVgAAAJE"]
[Fri Mar 27 20:16:32.021001 2026] [:error] [pid 27750:tid 27834] [client 74.234.62.173:63547] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/8.php"] [unique_id "acZ1IIaSil5rd17ieLzyWAAAAJA"]
[Fri Mar 27 20:16:32.764062 2026] [:error] [pid 4341:tid 4365] [client 74.234.62.173:64275] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/8.php"] [unique_id "acZ1IOKJWrNB5dMlERGmAQAAAZY"]
[Fri Mar 27 20:16:33.611398 2026] [:error] [pid 4341:tid 4367] [client 74.234.62.173:65108] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/8.php"] [unique_id "acZ1IeKJWrNB5dMlERGmBAAAAZg"]
[Fri Mar 27 20:16:34.521774 2026] [:error] [pid 4341:tid 4358] [client 74.234.62.173:64636] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws60.php"] [unique_id "acZ1IuKJWrNB5dMlERGmCAAAAY8"]
[Fri Mar 27 20:16:36.339140 2026] [:error] [pid 27743:tid 27770] [client 74.234.62.173:64593] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws60.php"] [unique_id "acZ1JCA46UYYLqzw99DlKwAAAAY"]
[Fri Mar 27 20:16:38.403081 2026] [:error] [pid 4341:tid 4349] [client 74.234.62.173:64625] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws60.php"] [unique_id "acZ1JuKJWrNB5dMlERGmEgAAAYY"]
[Fri Mar 27 20:16:40.226381 2026] [:error] [pid 4293:tid 4303] [client 74.234.62.173:62966] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws60.php"] [unique_id "acZ1KJLjeJUC3OKtEx-HxwAAAUg"]
[Fri Mar 27 20:16:44.519899 2026] [:error] [pid 27743:tid 27775] [client 74.234.62.173:65138] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vanda.php"] [unique_id "acZ1LCA46UYYLqzw99DlOQAAAAs"]
[Fri Mar 27 20:16:46.122535 2026] [proxy_fcgi:error] [pid 4293:tid 4312] [client 74.234.62.173:64197] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 20:16:46.378872 2026] [proxy_fcgi:error] [pid 4293:tid 4302] [client 74.234.62.173:64197] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 20:16:46.674613 2026] [proxy_fcgi:error] [pid 4293:tid 4296] [client 74.234.62.173:64197] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 20:16:46.945634 2026] [proxy_fcgi:error] [pid 4293:tid 4310] [client 74.234.62.173:64197] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 20:16:47.202960 2026] [proxy_fcgi:error] [pid 4293:tid 4309] [client 74.234.62.173:64197] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 20:16:47.506958 2026] [proxy_fcgi:error] [pid 4293:tid 4299] [client 74.234.62.173:64197] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 20:16:47.850406 2026] [proxy_fcgi:error] [pid 4293:tid 4308] [client 74.234.62.173:64197] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 20:16:48.159807 2026] [proxy_fcgi:error] [pid 4293:tid 4306] [client 74.234.62.173:64197] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 20:16:48.424227 2026] [proxy_fcgi:error] [pid 4293:tid 4297] [client 74.234.62.173:64197] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 20:16:49.864519 2026] [proxy_fcgi:error] [pid 4293:tid 4308] [client 74.234.62.173:64197] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 20:16:50.251898 2026] [proxy_fcgi:error] [pid 4293:tid 4311] [client 74.234.62.173:64197] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 20:16:50.613702 2026] [:error] [pid 4293:tid 4295] [client 74.234.62.173:64197] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/maul.php"] [unique_id "acZ1MpLjeJUC3OKtEx-H9gAAAUA"]
[Fri Mar 27 20:16:51.516863 2026] [:error] [pid 4293:tid 4301] [client 74.234.62.173:64643] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/maul.php"] [unique_id "acZ1M5LjeJUC3OKtEx-H-wAAAUY"]
[Fri Mar 27 20:16:53.103913 2026] [:error] [pid 4293:tid 4296] [client 74.234.62.173:64209] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/maul.php"] [unique_id "acZ1NZLjeJUC3OKtEx-IAwAAAUE"]
[Fri Mar 27 20:16:54.122219 2026] [:error] [pid 63897:tid 63922] [client 74.234.62.173:65193] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/maul.php"] [unique_id "acZ1NmVSkmYmLu7ycYhQfQAAARc"]
[Fri Mar 27 20:16:54.731827 2026] [:error] [pid 4293:tid 4308] [client 74.234.62.173:63825] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/5b9ac.php"] [unique_id "acZ1NpLjeJUC3OKtEx-IBQAAAU0"]
[Fri Mar 27 20:16:55.361899 2026] [:error] [pid 4293:tid 4316] [client 74.234.62.173:65487] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/5b9ac.php"] [unique_id "acZ1N5LjeJUC3OKtEx-ICAAAAVU"]
[Fri Mar 27 20:16:56.007295 2026] [:error] [pid 27743:tid 27786] [client 74.234.62.173:63846] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/5b9ac.php"] [unique_id "acZ1OCA46UYYLqzw99DlRgAAABY"]
[Fri Mar 27 20:16:56.628940 2026] [:error] [pid 27749:tid 27795] [client 74.234.62.173:63456] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/5b9ac.php"] [unique_id "acZ1OMEqyoMni2Q6_X7ytgAAAEQ"]
[Fri Mar 27 20:16:57.402085 2026] [:error] [pid 4293:tid 4301] [client 74.234.62.173:64698] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hehe.php"] [unique_id "acZ1OZLjeJUC3OKtEx-ICwAAAUY"]
[Fri Mar 27 20:16:58.501792 2026] [:error] [pid 63897:tid 63920] [client 74.234.62.173:64258] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hehe.php"] [unique_id "acZ1OmVSkmYmLu7ycYhQgQAAARU"]
[Fri Mar 27 20:16:59.208282 2026] [:error] [pid 63897:tid 63904] [client 74.234.62.173:64317] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hehe.php"] [unique_id "acZ1O2VSkmYmLu7ycYhQggAAAQU"]
[Fri Mar 27 20:16:59.962818 2026] [:error] [pid 4293:tid 4306] [client 74.234.62.173:64628] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hehe.php"] [unique_id "acZ1O5LjeJUC3OKtEx-IGgAAAUs"]
[Fri Mar 27 20:17:00.651778 2026] [:error] [pid 4293:tid 4299] [client 74.234.62.173:64244] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "acZ1PJLjeJUC3OKtEx-IHQAAAUQ"]
[Fri Mar 27 20:17:02.027309 2026] [:error] [pid 4341:tid 4366] [client 74.234.62.173:65489] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "acZ1PuKJWrNB5dMlERGmHAAAAZc"]
[Fri Mar 27 20:17:02.883396 2026] [:error] [pid 27743:tid 27773] [client 74.234.62.173:65107] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "acZ1PiA46UYYLqzw99DlUgAAAAk"]
[Fri Mar 27 20:17:03.529512 2026] [:error] [pid 27743:tid 27776] [client 74.234.62.173:64297] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "acZ1PyA46UYYLqzw99DlVAAAAAw"]
[Fri Mar 27 20:17:04.162644 2026] [:error] [pid 27749:tid 27809] [client 74.234.62.173:65525] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/varb.php"] [unique_id "acZ1QMEqyoMni2Q6_X7yuwAAAFI"]
[Fri Mar 27 20:17:05.016576 2026] [:error] [pid 4293:tid 4296] [client 74.234.62.173:64214] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/varb.php"] [unique_id "acZ1QZLjeJUC3OKtEx-IKQAAAUE"]
[Fri Mar 27 20:17:06.034391 2026] [:error] [pid 4293:tid 4312] [client 74.234.62.173:64313] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/varb.php"] [unique_id "acZ1QpLjeJUC3OKtEx-IMAAAAVE"]
[Fri Mar 27 20:17:06.897767 2026] [:error] [pid 4293:tid 4297] [client 74.234.62.173:64299] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/varb.php"] [unique_id "acZ1QpLjeJUC3OKtEx-INAAAAUI"]
[Fri Mar 27 20:17:07.673009 2026] [:error] [pid 63897:tid 63922] [client 74.234.62.173:65128] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lm15.php"] [unique_id "acZ1Q2VSkmYmLu7ycYhQigAAARc"]
[Fri Mar 27 20:17:08.957025 2026] [:error] [pid 63897:tid 63910] [client 74.234.62.173:64249] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lm15.php"] [unique_id "acZ1RGVSkmYmLu7ycYhQkwAAAQs"]
[Fri Mar 27 20:17:09.824781 2026] [:error] [pid 27743:tid 27767] [client 74.234.62.173:65195] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lm15.php"] [unique_id "acZ1RSA46UYYLqzw99DlXQAAAAM"]
[Fri Mar 27 20:17:10.472785 2026] [:error] [pid 27743:tid 27769] [client 74.234.62.173:63439] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lm15.php"] [unique_id "acZ1RiA46UYYLqzw99DlYAAAAAU"]
[Fri Mar 27 20:17:11.107378 2026] [:error] [pid 4293:tid 4295] [client 74.234.62.173:65493] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/clss.php"] [unique_id "acZ1R5LjeJUC3OKtEx-IOAAAAUA"]
[Fri Mar 27 20:17:11.673018 2026] [:error] [pid 27750:tid 27827] [client 74.234.62.173:63487] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/clss.php"] [unique_id "acZ1R4aSil5rd17ieLzydQAAAIk"]
[Fri Mar 27 20:17:12.717030 2026] [:error] [pid 27750:tid 27820] [client 74.234.62.173:63823] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/clss.php"] [unique_id "acZ1SIaSil5rd17ieLzydgAAAII"]
[Fri Mar 27 20:17:14.576127 2026] [:error] [pid 4293:tid 4295] [client 74.234.62.173:65510] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/clss.php"] [unique_id "acZ1SpLjeJUC3OKtEx-IQAAAAUA"]
[Fri Mar 27 20:17:16.388600 2026] [:error] [pid 27750:tid 27842] [client 74.234.62.173:65091] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/44.php"] [unique_id "acZ1TIaSil5rd17ieLzyewAAAJg"]
[Fri Mar 27 20:17:17.052532 2026] [:error] [pid 4293:tid 4313] [client 74.234.62.173:65154] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/44.php"] [unique_id "acZ1TZLjeJUC3OKtEx-IUgAAAVI"]
[Fri Mar 27 20:17:19.190950 2026] [:error] [pid 4341:tid 4352] [client 74.234.62.173:64689] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/44.php"] [unique_id "acZ1T-KJWrNB5dMlERGmJwAAAYk"]
[Fri Mar 27 20:17:20.673432 2026] [:error] [pid 27750:tid 27825] [client 74.234.62.173:65523] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/44.php"] [unique_id "acZ1UIaSil5rd17ieLzyhAAAAIc"]
[Fri Mar 27 20:17:21.894950 2026] [:error] [pid 27743:tid 27766] [client 74.234.62.173:64271] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a5e0a.php"] [unique_id "acZ1USA46UYYLqzw99DlcwAAAAI"]
[Fri Mar 27 20:17:23.177936 2026] [:error] [pid 4293:tid 4304] [client 74.234.62.173:65163] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a5e0a.php"] [unique_id "acZ1U5LjeJUC3OKtEx-IXwAAAUk"]
[Fri Mar 27 20:17:23.913831 2026] [:error] [pid 4341:tid 4365] [client 74.234.62.173:65132] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a5e0a.php"] [unique_id "acZ1U-KJWrNB5dMlERGmMAAAAZY"]
[Fri Mar 27 20:17:24.470124 2026] [:error] [pid 27743:tid 27766] [client 74.234.62.173:64655] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a5e0a.php"] [unique_id "acZ1VCA46UYYLqzw99DlgQAAAAI"]
[Fri Mar 27 20:17:25.191333 2026] [:error] [pid 27743:tid 27777] [client 74.234.62.173:65200] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bo.php"] [unique_id "acZ1VSA46UYYLqzw99DlhwAAAA0"]
[Fri Mar 27 20:17:26.011612 2026] [:error] [pid 27749:tid 27798] [client 74.234.62.173:65474] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bo.php"] [unique_id "acZ1VsEqyoMni2Q6_X7ywgAAAEc"]
[Fri Mar 27 20:17:26.531713 2026] [:error] [pid 4341:tid 4366] [client 74.234.62.173:63458] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bo.php"] [unique_id "acZ1VuKJWrNB5dMlERGmNgAAAZc"]
[Fri Mar 27 20:17:27.110956 2026] [:error] [pid 4293:tid 4312] [client 74.234.62.173:65110] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bo.php"] [unique_id "acZ1V5LjeJUC3OKtEx-IcAAAAVE"]
[Fri Mar 27 20:17:28.029227 2026] [:error] [pid 4293:tid 4304] [client 74.234.62.173:63810] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/56c53.php"] [unique_id "acZ1WJLjeJUC3OKtEx-IdgAAAUk"]
[Fri Mar 27 20:17:28.725803 2026] [:error] [pid 27851:tid 27866] [client 74.234.62.173:63931] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/56c53.php"] [unique_id "acZ1WHR2ccxe3RMCLbrxKwAAAMg"]
[Fri Mar 27 20:17:29.449655 2026] [:error] [pid 4293:tid 4295] [client 74.234.62.173:64210] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/56c53.php"] [unique_id "acZ1WZLjeJUC3OKtEx-IgAAAAUA"]
[Fri Mar 27 20:17:30.140232 2026] [:error] [pid 27749:tid 27806] [client 74.234.62.173:64248] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/56c53.php"] [unique_id "acZ1WsEqyoMni2Q6_X7ywwAAAE8"]
[Fri Mar 27 20:17:30.772842 2026] [:error] [pid 27743:tid 27772] [client 74.234.62.173:64645] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tx78.php"] [unique_id "acZ1WiA46UYYLqzw99DllAAAAAg"]
[Fri Mar 27 20:17:31.515134 2026] [:error] [pid 27743:tid 27787] [client 74.234.62.173:64302] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tx78.php"] [unique_id "acZ1WyA46UYYLqzw99DlmwAAABc"]
[Fri Mar 27 20:17:32.117522 2026] [:error] [pid 27743:tid 27777] [client 74.234.62.173:64217] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tx78.php"] [unique_id "acZ1XCA46UYYLqzw99DlnwAAAA0"]
[Fri Mar 27 20:17:32.630448 2026] [:error] [pid 4341:tid 4353] [client 74.234.62.173:65101] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tx78.php"] [unique_id "acZ1XOKJWrNB5dMlERGmPQAAAYo"]
[Fri Mar 27 20:17:33.234437 2026] [:error] [pid 27851:tid 27874] [client 74.234.62.173:65103] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws80.php"] [unique_id "acZ1XXR2ccxe3RMCLbrxMQAAANA"]
[Fri Mar 27 20:17:33.788378 2026] [:error] [pid 27743:tid 27781] [client 74.234.62.173:64700] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws80.php"] [unique_id "acZ1XSA46UYYLqzw99DlpwAAABE"]
[Fri Mar 27 20:17:34.395371 2026] [:error] [pid 27743:tid 27768] [client 74.234.62.173:65488] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws80.php"] [unique_id "acZ1XiA46UYYLqzw99DlrQAAAAQ"]
[Fri Mar 27 20:17:35.131671 2026] [:error] [pid 27743:tid 27783] [client 74.234.62.173:64682] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws80.php"] [unique_id "acZ1XyA46UYYLqzw99DlsQAAABM"]
[Fri Mar 27 20:17:35.956168 2026] [:error] [pid 27750:tid 27840] [client 74.234.62.173:64588] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jga.php"] [unique_id "acZ1X4aSil5rd17ieLzyigAAAJY"]
[Fri Mar 27 20:17:36.661856 2026] [:error] [pid 27750:tid 27827] [client 74.234.62.173:64311] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jga.php"] [unique_id "acZ1YIaSil5rd17ieLzyjAAAAIk"]
[Fri Mar 27 20:17:37.378295 2026] [:error] [pid 63897:tid 63899] [client 74.234.62.173:64579] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jga.php"] [unique_id "acZ1YWVSkmYmLu7ycYhRDAAAAQA"]
[Fri Mar 27 20:17:37.981154 2026] [:error] [pid 27851:tid 27865] [client 74.234.62.173:62539] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jga.php"] [unique_id "acZ1YXR2ccxe3RMCLbrxOQAAAMc"]
[Fri Mar 27 20:17:38.549093 2026] [:error] [pid 4341:tid 4354] [client 74.234.62.173:65106] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fs.php"] [unique_id "acZ1YuKJWrNB5dMlERGmPwAAAYs"]
[Fri Mar 27 20:17:39.388144 2026] [:error] [pid 4341:tid 4351] [client 74.234.62.173:63506] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fs.php"] [unique_id "acZ1Y-KJWrNB5dMlERGmQQAAAYg"]
[Fri Mar 27 20:17:39.945089 2026] [:error] [pid 27750:tid 27835] [client 74.234.62.173:65148] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fs.php"] [unique_id "acZ1Y4aSil5rd17ieLzyngAAAJE"]
[Fri Mar 27 20:17:40.592152 2026] [:error] [pid 27851:tid 27876] [client 74.234.62.173:56048] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fs.php"] [unique_id "acZ1ZHR2ccxe3RMCLbrxPgAAANI"]
[Fri Mar 27 20:17:44.655392 2026] [:error] [pid 63897:tid 63921] [client 74.234.62.173:64265] [client 74.234.62.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/byypas.php"] [unique_id "acZ1aGVSkmYmLu7ycYhRGAAAARY"]
[Fri Mar 27 20:17:50.874218 2026] [proxy_fcgi:error] [pid 27743:tid 27766] [client 74.234.62.173:56035] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 20:17:51.145953 2026] [proxy_fcgi:error] [pid 27743:tid 27764] [client 74.234.62.173:56035] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 20:17:51.455534 2026] [proxy_fcgi:error] [pid 27743:tid 27773] [client 74.234.62.173:56035] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 20:17:51.727930 2026] [proxy_fcgi:error] [pid 27743:tid 27772] [client 74.234.62.173:56035] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 20:17:52.029567 2026] [proxy_fcgi:error] [pid 27743:tid 27774] [client 74.234.62.173:56035] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 20:17:52.299403 2026] [proxy_fcgi:error] [pid 27743:tid 27767] [client 74.234.62.173:56035] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 20:17:52.574111 2026] [proxy_fcgi:error] [pid 27743:tid 27780] [client 74.234.62.173:56035] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 20:17:52.869449 2026] [proxy_fcgi:error] [pid 27743:tid 27768] [client 74.234.62.173:56035] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 20:17:53.175667 2026] [proxy_fcgi:error] [pid 27743:tid 27785] [client 74.234.62.173:56035] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 20:17:53.445401 2026] [proxy_fcgi:error] [pid 27743:tid 27770] [client 74.234.62.173:56035] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 22:44:54.781980 2026] [:error] [pid 54663:tid 54667] [client 34.72.85.169:64346] [client 34.72.85.169] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.72.85.169, incrementing ddos counter"] [hostname "dwelectservices.com.au"] [uri "/xmlrpc.php"] [unique_id "acaX5hUtStIXFk9WHe3Z2gAAAcE"]
[Fri Mar 27 22:44:54.792380 2026] [proxy_fcgi:error] [pid 54663:tid 54667] [client 34.72.85.169:64346] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 22:44:57.972506 2026] [:error] [pid 54663:tid 54668] [client 34.72.85.169:64346] [client 34.72.85.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "acaX6RUtStIXFk9WHe3Z-AAAAcI"]
[Fri Mar 27 22:44:58.416466 2026] [:error] [pid 54663:tid 54675] [client 34.72.85.169:61724] [client 34.72.85.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "acaX6hUtStIXFk9WHe3Z_QAAAck"]
[Fri Mar 27 22:44:58.883574 2026] [:error] [pid 27750:tid 27832] [client 34.72.85.169:54733] [client 34.72.85.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "acaX6oaSil5rd17ieLwOBQAAAI4"]
[Fri Mar 27 22:44:59.358422 2026] [:error] [pid 54663:tid 54682] [client 34.72.85.169:51698] [client 34.72.85.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "acaX6xUtStIXFk9WHe3aBwAAAdA"]
[Fri Mar 27 22:44:59.812071 2026] [:error] [pid 54663:tid 54675] [client 34.72.85.169:60927] [client 34.72.85.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "acaX6xUtStIXFk9WHe3aEAAAAck"]
[Fri Mar 27 22:45:00.252791 2026] [:error] [pid 27851:tid 27876] [client 34.72.85.169:54890] [client 34.72.85.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "acaX7HR2ccxe3RMCLboSagAAANI"]
[Fri Mar 27 22:45:00.729678 2026] [:error] [pid 54663:tid 54685] [client 34.72.85.169:52810] [client 34.72.85.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "acaX7BUtStIXFk9WHe3aFwAAAdM"]
[Sat Mar 28 06:08:49.911173 2026] [proxy_fcgi:error] [pid 34631:tid 34677] [client 20.220.9.32:43985] AH01071: Got error 'Primary script unknown'
[Sat Mar 28 06:08:50.124076 2026] [proxy_fcgi:error] [pid 34631:tid 34660] [client 20.220.9.32:43985] AH01071: Got error 'Primary script unknown'
[Sat Mar 28 06:08:50.333793 2026] [proxy_fcgi:error] [pid 34631:tid 34667] [client 20.220.9.32:43985] AH01071: Got error 'Primary script unknown'
[Sat Mar 28 06:08:50.542656 2026] [proxy_fcgi:error] [pid 34631:tid 34680] [client 20.220.9.32:43985] AH01071: Got error 'Primary script unknown'
[Sat Mar 28 06:08:50.751348 2026] [proxy_fcgi:error] [pid 34631:tid 34670] [client 20.220.9.32:43985] AH01071: Got error 'Primary script unknown'
[Sat Mar 28 06:08:50.964641 2026] [proxy_fcgi:error] [pid 34631:tid 34681] [client 20.220.9.32:43985] AH01071: Got error 'Primary script unknown'
[Sat Mar 28 06:08:51.175671 2026] [proxy_fcgi:error] [pid 34631:tid 34662] [client 20.220.9.32:43985] AH01071: Got error 'Primary script unknown'
[Sat Mar 28 06:08:51.385992 2026] [proxy_fcgi:error] [pid 34631:tid 34661] [client 20.220.9.32:43985] AH01071: Got error 'Primary script unknown'
[Sat Mar 28 06:08:51.597316 2026] [proxy_fcgi:error] [pid 34631:tid 34664] [client 20.220.9.32:43985] AH01071: Got error 'Primary script unknown'
[Sat Mar 28 06:08:51.808615 2026] [proxy_fcgi:error] [pid 34631:tid 34682] [client 20.220.9.32:43985] AH01071: Got error 'Primary script unknown'
[Sat Mar 28 06:08:52.019717 2026] [:error] [pid 34631:tid 34669] [client 20.220.9.32:43985] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aa.php"] [unique_id "acb_9DtzjMMS6kojpeQWgQAAAck"]
[Sat Mar 28 06:08:52.439963 2026] [:error] [pid 43578:tid 43592] [client 20.220.9.32:43905] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aa.php"] [unique_id "acb_9HNG2YdGm41aN8LTVgAAAks"]
[Sat Mar 28 06:08:52.869433 2026] [:error] [pid 64859:tid 64899] [client 20.220.9.32:44020] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aa.php"] [unique_id "acb_9G3qEBHXq3rHdBmjgAAAABI"]
[Sat Mar 28 06:08:53.286727 2026] [:error] [pid 43578:tid 43600] [client 20.220.9.32:44030] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aa.php"] [unique_id "acb_9XNG2YdGm41aN8LTVwAAAlM"]
[Sat Mar 28 06:08:53.707342 2026] [:error] [pid 64859:tid 64885] [client 20.220.9.32:43989] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-cxs.php"] [unique_id "acb_9W3qEBHXq3rHdBmjgwAAAAQ"]
[Sat Mar 28 06:08:54.139820 2026] [:error] [pid 64859:tid 64898] [client 20.220.9.32:43984] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-cxs.php"] [unique_id "acb_9m3qEBHXq3rHdBmjhQAAABE"]
[Sat Mar 28 06:08:54.554929 2026] [:error] [pid 34631:tid 34683] [client 20.220.9.32:43982] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-cxs.php"] [unique_id "acb_9jtzjMMS6kojpeQWggAAAdc"]
[Sat Mar 28 06:08:54.972351 2026] [:error] [pid 64860:tid 64910] [client 20.220.9.32:43912] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-cxs.php"] [unique_id "acb_9hkU3N0pg_4aEL-vWgAAAEI"]
[Sat Mar 28 06:08:55.399747 2026] [:error] [pid 64966:tid 64993] [client 20.220.9.32:43940] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-scanner.php"] [unique_id "acb_99fSvF5AFfSuKxXvtgAAANQ"]
[Sat Mar 28 06:08:55.828354 2026] [:error] [pid 43578:tid 43583] [client 20.220.9.32:43976] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-scanner.php"] [unique_id "acb_93NG2YdGm41aN8LTWgAAAkI"]
[Sat Mar 28 06:08:56.269561 2026] [:error] [pid 34631:tid 34678] [client 20.220.9.32:43980] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-scanner.php"] [unique_id "acb_-DtzjMMS6kojpeQWhAAAAdI"]
[Sat Mar 28 06:08:56.696056 2026] [:error] [pid 43578:tid 43598] [client 20.220.9.32:44004] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-scanner.php"] [unique_id "acb_-HNG2YdGm41aN8LTXAAAAlE"]
[Sat Mar 28 06:08:57.115108 2026] [:error] [pid 43578:tid 43604] [client 20.220.9.32:43999] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/awh.php"] [unique_id "acb_-XNG2YdGm41aN8LTXQAAAlc"]
[Sat Mar 28 06:08:57.539780 2026] [:error] [pid 64860:tid 64929] [client 20.220.9.32:44028] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/awh.php"] [unique_id "acb_-RkU3N0pg_4aEL-vWwAAAFU"]
[Sat Mar 28 06:08:57.960519 2026] [:error] [pid 64861:tid 64948] [client 20.220.9.32:43906] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/awh.php"] [unique_id "acb_-exK22_lUN2kvnVFggAAAI0"]
[Sat Mar 28 06:08:58.376847 2026] [:error] [pid 64861:tid 64946] [client 20.220.9.32:43974] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/awh.php"] [unique_id "acb_-uxK22_lUN2kvnVFgwAAAIs"]
[Sat Mar 28 06:08:58.837755 2026] [:error] [pid 64861:tid 64944] [client 20.220.9.32:44025] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/24.php"] [unique_id "acb_-uxK22_lUN2kvnVFhQAAAIk"]
[Sat Mar 28 06:08:59.251833 2026] [:error] [pid 43547:tid 43564] [client 20.220.9.32:43996] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/24.php"] [unique_id "acb_-z4ZEfdetXP-9aCqIgAAAg8"]
[Sat Mar 28 06:08:59.690974 2026] [:error] [pid 34597:tid 34614] [client 20.220.9.32:43919] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/24.php"] [unique_id "acb_-4luI7-e5s1cafcNzwAAAU0"]
[Sat Mar 28 06:09:00.114150 2026] [:error] [pid 34597:tid 34610] [client 20.220.9.32:43921] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/24.php"] [unique_id "acb__IluI7-e5s1cafcN0QAAAUk"]
[Sat Mar 28 06:09:00.543531 2026] [:error] [pid 64859:tid 64893] [client 20.220.9.32:43924] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zz8.php"] [unique_id "acb__G3qEBHXq3rHdBmjiQAAAAw"]
[Sat Mar 28 06:09:00.962309 2026] [:error] [pid 64966:tid 64990] [client 20.220.9.32:43886] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zz8.php"] [unique_id "acb__NfSvF5AFfSuKxXvuQAAANE"]
[Sat Mar 28 06:09:01.375188 2026] [:error] [pid 64860:tid 64914] [client 20.220.9.32:43998] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zz8.php"] [unique_id "acb__RkU3N0pg_4aEL-vYgAAAEY"]
[Sat Mar 28 06:09:01.826526 2026] [:error] [pid 64859:tid 64882] [client 20.220.9.32:44017] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zz8.php"] [unique_id "acb__W3qEBHXq3rHdBmjigAAAAE"]
[Sat Mar 28 06:09:02.261312 2026] [:error] [pid 43578:tid 43586] [client 20.220.9.32:43915] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/feokc.php"] [unique_id "acb__nNG2YdGm41aN8LTYgAAAkU"]
[Sat Mar 28 06:09:02.701050 2026] [:error] [pid 64966:tid 64986] [client 20.220.9.32:43975] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/feokc.php"] [unique_id "acb__tfSvF5AFfSuKxXvugAAAM0"]
[Sat Mar 28 06:09:03.122829 2026] [:error] [pid 64966:tid 64977] [client 20.220.9.32:44016] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/feokc.php"] [unique_id "acb__9fSvF5AFfSuKxXvuwAAAMQ"]
[Sat Mar 28 06:09:03.550869 2026] [:error] [pid 43578:tid 43605] [client 20.220.9.32:44014] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/feokc.php"] [unique_id "acb__3NG2YdGm41aN8LTZAAAAlg"]
[Sat Mar 28 06:09:03.964995 2026] [:error] [pid 64860:tid 64924] [client 20.220.9.32:43917] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fetch.php"] [unique_id "acb__xkU3N0pg_4aEL-vaQAAAFA"]
[Sat Mar 28 06:09:04.391944 2026] [:error] [pid 43578:tid 43599] [client 20.220.9.32:43989] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fetch.php"] [unique_id "accAAHNG2YdGm41aN8LTZgAAAlI"]
[Sat Mar 28 06:09:04.843768 2026] [:error] [pid 34597:tid 34622] [client 20.220.9.32:43909] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fetch.php"] [unique_id "accAAIluI7-e5s1cafcN1QAAAVU"]
[Sat Mar 28 06:09:05.274060 2026] [:error] [pid 64860:tid 64911] [client 20.220.9.32:44029] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fetch.php"] [unique_id "accAARkU3N0pg_4aEL-vcAAAAEM"]
[Sat Mar 28 06:09:05.694501 2026] [:error] [pid 64861:tid 64947] [client 20.220.9.32:43931] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/phpmini.php"] [unique_id "accAAexK22_lUN2kvnVFlAAAAIw"]
[Sat Mar 28 06:09:06.137678 2026] [:error] [pid 43547:tid 43569] [client 20.220.9.32:43914] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/phpmini.php"] [unique_id "accAAj4ZEfdetXP-9aCqJAAAAhQ"]
[Sat Mar 28 06:09:06.553969 2026] [:error] [pid 64861:tid 64953] [client 20.220.9.32:43916] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/phpmini.php"] [unique_id "accAAuxK22_lUN2kvnVFlgAAAJI"]
[Sat Mar 28 06:09:06.977453 2026] [:error] [pid 64861:tid 64959] [client 20.220.9.32:43923] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/phpmini.php"] [unique_id "accAAuxK22_lUN2kvnVFmgAAAJg"]
[Sat Mar 28 06:09:07.393286 2026] [:error] [pid 64859:tid 64902] [client 20.220.9.32:44013] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/an7.php"] [unique_id "accAA23qEBHXq3rHdBmjlQAAABU"]
[Sat Mar 28 06:09:07.807346 2026] [:error] [pid 34597:tid 34607] [client 20.220.9.32:44008] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/an7.php"] [unique_id "accAA4luI7-e5s1cafcN2AAAAUY"]
[Sat Mar 28 06:09:08.243107 2026] [:error] [pid 43578:tid 43586] [client 20.220.9.32:43920] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/an7.php"] [unique_id "accABHNG2YdGm41aN8LTbQAAAkU"]
[Sat Mar 28 06:09:08.668446 2026] [:error] [pid 64966:tid 64973] [client 20.220.9.32:44023] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/an7.php"] [unique_id "accABNfSvF5AFfSuKxXvvwAAAMA"]
[Sat Mar 28 06:09:09.082570 2026] [:error] [pid 64861:tid 64952] [client 20.220.9.32:43848] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tbute.php"] [unique_id "accABexK22_lUN2kvnVFoQAAAJE"]
[Sat Mar 28 06:09:09.523119 2026] [:error] [pid 64860:tid 64913] [client 20.220.9.32:43994] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tbute.php"] [unique_id "accABRkU3N0pg_4aEL-veAAAAEU"]
[Sat Mar 28 06:09:09.936956 2026] [:error] [pid 64861:tid 64936] [client 20.220.9.32:43978] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tbute.php"] [unique_id "accABexK22_lUN2kvnVFpQAAAIE"]
[Sat Mar 28 06:09:10.355434 2026] [:error] [pid 64861:tid 64944] [client 20.220.9.32:44010] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tbute.php"] [unique_id "accABuxK22_lUN2kvnVFpwAAAIk"]
[Sat Mar 28 06:09:10.765907 2026] [:error] [pid 43579:tid 43613] [client 20.220.9.32:43977] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rovoj.php"] [unique_id "accABiRqN4JVI8gB7AmCBgAAAoU"]
[Sat Mar 28 06:09:11.188686 2026] [:error] [pid 64861:tid 64952] [client 20.220.9.32:43954] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rovoj.php"] [unique_id "accAB-xK22_lUN2kvnVFrAAAAJE"]
[Sat Mar 28 06:09:11.631993 2026] [:error] [pid 64860:tid 64926] [client 20.220.9.32:43867] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rovoj.php"] [unique_id "accABxkU3N0pg_4aEL-vfQAAAFI"]
[Sat Mar 28 06:09:12.098222 2026] [:error] [pid 64860:tid 64929] [client 20.220.9.32:43948] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rovoj.php"] [unique_id "accACBkU3N0pg_4aEL-vfgAAAFU"]
[Sat Mar 28 06:09:12.515817 2026] [:error] [pid 43547:tid 43563] [client 20.220.9.32:44012] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/r3grt7.php"] [unique_id "accACD4ZEfdetXP-9aCqJwAAAg4"]
[Sat Mar 28 06:09:12.931160 2026] [:error] [pid 34597:tid 34610] [client 20.220.9.32:43991] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/r3grt7.php"] [unique_id "accACIluI7-e5s1cafcN2wAAAUk"]
[Sat Mar 28 06:09:13.352730 2026] [:error] [pid 64860:tid 64918] [client 20.220.9.32:43981] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/r3grt7.php"] [unique_id "accACRkU3N0pg_4aEL-vgQAAAEo"]
[Sat Mar 28 06:09:13.770830 2026] [:error] [pid 64859:tid 64896] [client 20.220.9.32:44024] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/r3grt7.php"] [unique_id "accACW3qEBHXq3rHdBmjngAAAA8"]
[Sat Mar 28 06:09:14.197297 2026] [:error] [pid 43579:tid 43611] [client 20.220.9.32:43993] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/phina.php"] [unique_id "accACiRqN4JVI8gB7AmCDQAAAoM"]
[Sat Mar 28 06:09:14.631907 2026] [:error] [pid 43578:tid 43587] [client 20.220.9.32:44006] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/phina.php"] [unique_id "accACnNG2YdGm41aN8LTcwAAAkY"]
[Sat Mar 28 06:09:15.057796 2026] [:error] [pid 43547:tid 43562] [client 20.220.9.32:43968] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/phina.php"] [unique_id "accACz4ZEfdetXP-9aCqKgAAAg0"]
[Sat Mar 28 06:09:15.480092 2026] [:error] [pid 43579:tid 43622] [client 20.220.9.32:43851] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/phina.php"] [unique_id "accACyRqN4JVI8gB7AmCDwAAAo4"]
[Sat Mar 28 06:09:15.927706 2026] [:error] [pid 34597:tid 34621] [client 20.220.9.32:43922] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jga.php"] [unique_id "accAC4luI7-e5s1cafcN3wAAAVQ"]
[Sat Mar 28 06:09:16.346128 2026] [:error] [pid 64860:tid 64919] [client 20.220.9.32:43926] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jga.php"] [unique_id "accADBkU3N0pg_4aEL-vhAAAAEs"]
[Sat Mar 28 06:09:16.759220 2026] [:error] [pid 64860:tid 64925] [client 20.220.9.32:43908] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jga.php"] [unique_id "accADBkU3N0pg_4aEL-vhgAAAFE"]
[Sat Mar 28 06:09:17.185065 2026] [:error] [pid 64860:tid 64920] [client 20.220.9.32:43987] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jga.php"] [unique_id "accADRkU3N0pg_4aEL-vhwAAAEw"]
[Sat Mar 28 06:09:17.598746 2026] [:error] [pid 64860:tid 64917] [client 20.220.9.32:43969] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fs6.php"] [unique_id "accADRkU3N0pg_4aEL-viAAAAEk"]
[Sat Mar 28 06:09:18.010845 2026] [:error] [pid 43578:tid 43596] [client 20.220.9.32:44027] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fs6.php"] [unique_id "accADnNG2YdGm41aN8LTdgAAAk8"]
[Sat Mar 28 06:09:18.424341 2026] [:error] [pid 34597:tid 34620] [client 20.220.9.32:43935] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fs6.php"] [unique_id "accADoluI7-e5s1cafcN5AAAAVM"]
[Sat Mar 28 06:09:18.841044 2026] [:error] [pid 43578:tid 43599] [client 20.220.9.32:43992] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fs6.php"] [unique_id "accADnNG2YdGm41aN8LTeQAAAlI"]
[Sat Mar 28 06:09:19.256786 2026] [:error] [pid 64859:tid 64894] [client 20.220.9.32:44015] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fs7.php"] [unique_id "accAD23qEBHXq3rHdBmjpQAAAA0"]
[Sat Mar 28 06:09:19.670691 2026] [:error] [pid 64859:tid 64905] [client 20.220.9.32:43958] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fs7.php"] [unique_id "accAD23qEBHXq3rHdBmjpgAAABg"]
[Sat Mar 28 06:09:20.089402 2026] [:error] [pid 43579:tid 43612] [client 20.220.9.32:43855] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fs7.php"] [unique_id "accAECRqN4JVI8gB7AmCFgAAAoQ"]
[Sat Mar 28 06:09:20.500746 2026] [:error] [pid 43578:tid 43598] [client 20.220.9.32:44000] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fs7.php"] [unique_id "accAEHNG2YdGm41aN8LTfwAAAlE"]
[Sat Mar 28 06:09:20.919672 2026] [:error] [pid 64966:tid 64987] [client 20.220.9.32:43938] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kbfr.php"] [unique_id "accAENfSvF5AFfSuKxXvwgAAAM4"]
[Sat Mar 28 06:09:21.340314 2026] [:error] [pid 43579:tid 43615] [client 20.220.9.32:43847] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kbfr.php"] [unique_id "accAESRqN4JVI8gB7AmCHwAAAoc"]
[Sat Mar 28 06:09:21.754423 2026] [:error] [pid 34631:tid 34667] [client 20.220.9.32:44009] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kbfr.php"] [unique_id "accAETtzjMMS6kojpeQWjgAAAcc"]
[Sat Mar 28 06:09:22.175440 2026] [:error] [pid 64861:tid 64947] [client 20.220.9.32:43972] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kbfr.php"] [unique_id "accAEuxK22_lUN2kvnVFsAAAAIw"]
[Sat Mar 28 06:09:22.589515 2026] [:error] [pid 64860:tid 64909] [client 20.220.9.32:44021] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/595.php"] [unique_id "accAEhkU3N0pg_4aEL-vjAAAAEE"]
[Sat Mar 28 06:09:23.034748 2026] [:error] [pid 43547:tid 43568] [client 20.220.9.32:43932] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/595.php"] [unique_id "accAEz4ZEfdetXP-9aCqLQAAAhM"]
[Sat Mar 28 06:09:23.453751 2026] [:error] [pid 64859:tid 64904] [client 20.220.9.32:43853] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/595.php"] [unique_id "accAE23qEBHXq3rHdBmjqAAAABc"]
[Sat Mar 28 06:09:23.890597 2026] [:error] [pid 64966:tid 64991] [client 20.220.9.32:43966] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/595.php"] [unique_id "accAE9fSvF5AFfSuKxXvyAAAANI"]
[Sat Mar 28 06:09:24.368486 2026] [:error] [pid 34631:tid 34681] [client 20.220.9.32:44005] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x1.php"] [unique_id "accAFDtzjMMS6kojpeQWlQAAAdU"]
[Sat Mar 28 06:09:24.791305 2026] [:error] [pid 43579:tid 43625] [client 20.220.9.32:43947] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x1.php"] [unique_id "accAFCRqN4JVI8gB7AmCJgAAApE"]
[Sat Mar 28 06:09:25.208665 2026] [:error] [pid 64861:tid 64939] [client 20.220.9.32:43849] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x1.php"] [unique_id "accAFexK22_lUN2kvnVFsgAAAIQ"]
[Sat Mar 28 06:09:25.626914 2026] [:error] [pid 64861:tid 64953] [client 20.220.9.32:43860] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x1.php"] [unique_id "accAFexK22_lUN2kvnVFswAAAJI"]
[Sat Mar 28 06:09:26.048834 2026] [:error] [pid 34631:tid 34674] [client 20.220.9.32:43925] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gk.php"] [unique_id "accAFjtzjMMS6kojpeQWlwAAAc4"]
[Sat Mar 28 06:09:26.464625 2026] [:error] [pid 43578:tid 43590] [client 20.220.9.32:44022] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gk.php"] [unique_id "accAFnNG2YdGm41aN8LTgAAAAkk"]
[Sat Mar 28 06:09:26.883174 2026] [:error] [pid 43578:tid 43599] [client 20.220.9.32:43951] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gk.php"] [unique_id "accAFnNG2YdGm41aN8LTgQAAAlI"]
[Sat Mar 28 06:09:27.316025 2026] [:error] [pid 64860:tid 64916] [client 20.220.9.32:43988] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gk.php"] [unique_id "accAFxkU3N0pg_4aEL-vjwAAAEg"]
[Sat Mar 28 06:09:27.761005 2026] [:error] [pid 64861:tid 64948] [client 20.220.9.32:44018] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws85.php"] [unique_id "accAF-xK22_lUN2kvnVFtgAAAI0"]
[Sat Mar 28 06:09:28.211386 2026] [:error] [pid 64861:tid 64935] [client 20.220.9.32:43852] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws85.php"] [unique_id "accAGOxK22_lUN2kvnVFuAAAAIA"]
[Sat Mar 28 06:09:28.662165 2026] [:error] [pid 34631:tid 34684] [client 20.220.9.32:43956] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws85.php"] [unique_id "accAGDtzjMMS6kojpeQWnQAAAdg"]
[Sat Mar 28 06:09:29.103288 2026] [:error] [pid 43578:tid 43600] [client 20.220.9.32:43929] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws85.php"] [unique_id "accAGXNG2YdGm41aN8LThQAAAlM"]
[Sat Mar 28 06:09:29.524556 2026] [:error] [pid 43579:tid 43626] [client 20.220.9.32:44003] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws82.php"] [unique_id "accAGSRqN4JVI8gB7AmCKAAAApI"]
[Sat Mar 28 06:09:29.953685 2026] [:error] [pid 64966:tid 64977] [client 20.220.9.32:43843] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws82.php"] [unique_id "accAGdfSvF5AFfSuKxXv0gAAAMQ"]
[Sat Mar 28 06:09:30.368935 2026] [:error] [pid 43547:tid 43565] [client 20.220.9.32:43911] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws82.php"] [unique_id "accAGj4ZEfdetXP-9aCqNAAAAhA"]
[Sat Mar 28 06:09:30.793346 2026] [:error] [pid 43579:tid 43617] [client 20.220.9.32:44001] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws82.php"] [unique_id "accAGiRqN4JVI8gB7AmCKgAAAok"]
[Sat Mar 28 06:09:31.211104 2026] [:error] [pid 43579:tid 43622] [client 20.220.9.32:43961] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws81.php"] [unique_id "accAGyRqN4JVI8gB7AmCLQAAAo4"]
[Sat Mar 28 06:09:31.638017 2026] [:error] [pid 43547:tid 43570] [client 20.220.9.32:43842] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws81.php"] [unique_id "accAGz4ZEfdetXP-9aCqOgAAAhU"]
[Sat Mar 28 06:09:32.056664 2026] [:error] [pid 43578:tid 43582] [client 20.220.9.32:43930] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws81.php"] [unique_id "accAHHNG2YdGm41aN8LTiQAAAkE"]
[Sat Mar 28 06:09:32.471876 2026] [:error] [pid 64861:tid 64959] [client 20.220.9.32:43861] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws81.php"] [unique_id "accAHOxK22_lUN2kvnVFvwAAAJg"]
[Sat Mar 28 06:09:32.908193 2026] [:error] [pid 34631:tid 34679] [client 20.220.9.32:43913] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws79.php"] [unique_id "accAHDtzjMMS6kojpeQWrgAAAdM"]
[Sat Mar 28 06:09:33.325315 2026] [:error] [pid 43578:tid 43585] [client 20.220.9.32:43942] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws79.php"] [unique_id "accAHXNG2YdGm41aN8LTigAAAkQ"]
[Sat Mar 28 06:09:33.757662 2026] [:error] [pid 2877:tid 2891] [client 20.220.9.32:43879] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws79.php"] [unique_id "accAHbgM4xL1Xj409YTXJAAAAQw"]
[Sat Mar 28 06:09:34.177637 2026] [:error] [pid 64966:tid 64985] [client 20.220.9.32:43794] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws79.php"] [unique_id "accAHtfSvF5AFfSuKxXv1QAAAMw"]
[Sat Mar 28 06:09:34.591604 2026] [:error] [pid 34597:tid 34607] [client 20.220.9.32:44031] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws78.php"] [unique_id "accAHoluI7-e5s1cafcN7AAAAUY"]
[Sat Mar 28 06:09:35.012480 2026] [:error] [pid 34631:tid 34660] [client 20.220.9.32:43967] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws78.php"] [unique_id "accAHztzjMMS6kojpeQWswAAAcA"]
[Sat Mar 28 06:09:35.457859 2026] [:error] [pid 34631:tid 34679] [client 20.220.9.32:43928] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws78.php"] [unique_id "accAHztzjMMS6kojpeQWtgAAAdM"]
[Sat Mar 28 06:09:35.877516 2026] [:error] [pid 34631:tid 34672] [client 20.220.9.32:43946] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws78.php"] [unique_id "accAHztzjMMS6kojpeQWuQAAAcw"]
[Sat Mar 28 06:09:36.291095 2026] [:error] [pid 64966:tid 64975] [client 20.220.9.32:43943] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws50.php"] [unique_id "accAINfSvF5AFfSuKxXv1wAAAMI"]
[Sat Mar 28 06:09:36.711602 2026] [:error] [pid 2877:tid 2894] [client 20.220.9.32:43918] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws50.php"] [unique_id "accAILgM4xL1Xj409YTXJgAAAQ8"]
[Sat Mar 28 06:09:37.129453 2026] [:error] [pid 64966:tid 64981] [client 20.220.9.32:43840] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws50.php"] [unique_id "accAIdfSvF5AFfSuKxXv2QAAAMg"]
[Sat Mar 28 06:09:37.561038 2026] [:error] [pid 2877:tid 2895] [client 20.220.9.32:43990] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws50.php"] [unique_id "accAIbgM4xL1Xj409YTXJwAAARA"]
[Sat Mar 28 06:09:38.010068 2026] [:error] [pid 34631:tid 34680] [client 20.220.9.32:43952] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws44.php"] [unique_id "accAIjtzjMMS6kojpeQWxAAAAdQ"]
[Sat Mar 28 06:09:38.443752 2026] [:error] [pid 43579:tid 43608] [client 20.220.9.32:43910] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws44.php"] [unique_id "accAIiRqN4JVI8gB7AmCNgAAAoA"]
[Sat Mar 28 06:09:38.855815 2026] [:error] [pid 64859:tid 64905] [client 20.220.9.32:43904] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws44.php"] [unique_id "accAIm3qEBHXq3rHdBmjrwAAABg"]
[Sat Mar 28 06:09:39.343501 2026] [:error] [pid 43547:tid 43568] [client 20.220.9.32:43877] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws44.php"] [unique_id "accAIz4ZEfdetXP-9aCqRAAAAhM"]
[Sat Mar 28 06:09:39.756549 2026] [:error] [pid 34597:tid 34613] [client 20.220.9.32:43896] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws43.php"] [unique_id "accAI4luI7-e5s1cafcN7gAAAUw"]
[Sat Mar 28 06:09:40.178444 2026] [:error] [pid 34597:tid 34624] [client 20.220.9.32:44007] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws43.php"] [unique_id "accAJIluI7-e5s1cafcN7wAAAVc"]
[Sat Mar 28 06:09:40.606785 2026] [:error] [pid 43547:tid 43558] [client 20.220.9.32:43873] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws43.php"] [unique_id "accAJD4ZEfdetXP-9aCqRQAAAgk"]
[Sat Mar 28 06:09:41.043491 2026] [:error] [pid 2877:tid 2887] [client 20.220.9.32:43927] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws43.php"] [unique_id "accAJbgM4xL1Xj409YTXKgAAAQg"]
[Sat Mar 28 06:09:41.460209 2026] [:error] [pid 43579:tid 43615] [client 20.220.9.32:43845] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws42.php"] [unique_id "accAJSRqN4JVI8gB7AmCOwAAAoc"]
[Sat Mar 28 06:09:41.889988 2026] [:error] [pid 2877:tid 2902] [client 20.220.9.32:43963] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws42.php"] [unique_id "accAJbgM4xL1Xj409YTXKwAAARc"]
[Sat Mar 28 06:09:42.320089 2026] [:error] [pid 64860:tid 64918] [client 20.220.9.32:43889] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws42.php"] [unique_id "accAJhkU3N0pg_4aEL-vnAAAAEo"]
[Sat Mar 28 06:09:42.741332 2026] [:error] [pid 34631:tid 34664] [client 20.220.9.32:43857] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws42.php"] [unique_id "accAJjtzjMMS6kojpeQWywAAAcQ"]
[Sat Mar 28 06:09:43.172739 2026] [:error] [pid 34631:tid 34681] [client 20.220.9.32:43973] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws40.php"] [unique_id "accAJztzjMMS6kojpeQWzQAAAdU"]
[Sat Mar 28 06:09:43.596159 2026] [:error] [pid 64861:tid 64943] [client 20.220.9.32:43865] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws40.php"] [unique_id "accAJ-xK22_lUN2kvnVFxAAAAIg"]
[Sat Mar 28 06:09:44.023743 2026] [:error] [pid 34597:tid 34616] [client 20.220.9.32:43863] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws40.php"] [unique_id "accAKIluI7-e5s1cafcN8wAAAU8"]
[Sat Mar 28 06:09:44.451706 2026] [:error] [pid 34597:tid 34609] [client 20.220.9.32:43872] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws40.php"] [unique_id "accAKIluI7-e5s1cafcN-AAAAUg"]
[Sat Mar 28 06:09:44.867119 2026] [:error] [pid 34597:tid 34604] [client 20.220.9.32:43986] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws36.php"] [unique_id "accAKIluI7-e5s1cafcN-gAAAUM"]
[Sat Mar 28 06:09:45.313749 2026] [:error] [pid 43547:tid 43555] [client 20.220.9.32:43817] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws36.php"] [unique_id "accAKT4ZEfdetXP-9aCqRwAAAgY"]
[Sat Mar 28 06:09:45.736433 2026] [:error] [pid 43578:tid 43595] [client 20.220.9.32:43785] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws36.php"] [unique_id "accAKXNG2YdGm41aN8LTkwAAAk4"]
[Sat Mar 28 06:09:46.156640 2026] [:error] [pid 43547:tid 43560] [client 20.220.9.32:43907] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws36.php"] [unique_id "accAKj4ZEfdetXP-9aCqSgAAAgs"]
[Sat Mar 28 06:09:46.588511 2026] [:error] [pid 64861:tid 64947] [client 20.220.9.32:43875] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vwxbi.php"] [unique_id "accAKuxK22_lUN2kvnVFxgAAAIw"]
[Sat Mar 28 06:09:47.005860 2026] [:error] [pid 34631:tid 34679] [client 20.220.9.32:43810] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vwxbi.php"] [unique_id "accAKztzjMMS6kojpeQW0wAAAdM"]
[Sat Mar 28 06:09:47.438291 2026] [:error] [pid 64860:tid 64911] [client 20.220.9.32:43846] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vwxbi.php"] [unique_id "accAKxkU3N0pg_4aEL-voAAAAEM"]
[Sat Mar 28 06:09:47.867278 2026] [:error] [pid 43579:tid 43615] [client 20.220.9.32:43864] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vwxbi.php"] [unique_id "accAKyRqN4JVI8gB7AmCQgAAAoc"]
[Sat Mar 28 06:09:48.288811 2026] [:error] [pid 43578:tid 43599] [client 20.220.9.32:43945] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/shellerr.php"] [unique_id "accALHNG2YdGm41aN8LTlQAAAlI"]
[Sat Mar 28 06:09:48.715867 2026] [:error] [pid 43579:tid 43613] [client 20.220.9.32:43816] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/shellerr.php"] [unique_id "accALCRqN4JVI8gB7AmCRQAAAoU"]
[Sat Mar 28 06:09:49.158114 2026] [:error] [pid 43579:tid 43610] [client 20.220.9.32:43798] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/shellerr.php"] [unique_id "accALSRqN4JVI8gB7AmCRwAAAoI"]
[Sat Mar 28 06:09:49.599272 2026] [:error] [pid 43579:tid 43620] [client 20.220.9.32:43814] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/shellerr.php"] [unique_id "accALSRqN4JVI8gB7AmCSgAAAow"]
[Sat Mar 28 06:09:50.013852 2026] [:error] [pid 34597:tid 34605] [client 20.220.9.32:43782] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vaza.php"] [unique_id "accALoluI7-e5s1cafcOAQAAAUQ"]
[Sat Mar 28 06:09:50.449214 2026] [:error] [pid 43579:tid 43625] [client 20.220.9.32:43882] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vaza.php"] [unique_id "accALiRqN4JVI8gB7AmCTQAAApE"]
[Sat Mar 28 06:09:50.879775 2026] [:error] [pid 43578:tid 43593] [client 20.220.9.32:43899] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vaza.php"] [unique_id "accALnNG2YdGm41aN8LTmAAAAkw"]
[Sat Mar 28 06:09:51.306394 2026] [proxy_fcgi:error] [pid 34631:tid 34669] [client 20.220.9.32:43779] AH01071: Got error 'Primary script unknown'
[Sat Mar 28 06:09:51.517403 2026] [proxy_fcgi:error] [pid 34631:tid 34678] [client 20.220.9.32:43779] AH01071: Got error 'Primary script unknown'
[Sat Mar 28 06:09:51.729399 2026] [proxy_fcgi:error] [pid 34631:tid 34667] [client 20.220.9.32:43779] AH01071: Got error 'Primary script unknown'
[Sat Mar 28 06:09:51.945730 2026] [proxy_fcgi:error] [pid 34631:tid 34661] [client 20.220.9.32:43779] AH01071: Got error 'Primary script unknown'
[Sat Mar 28 06:09:52.156315 2026] [proxy_fcgi:error] [pid 34631:tid 34670] [client 20.220.9.32:43779] AH01071: Got error 'Primary script unknown'
[Sat Mar 28 06:09:52.369832 2026] [proxy_fcgi:error] [pid 34631:tid 34663] [client 20.220.9.32:43779] AH01071: Got error 'Primary script unknown'
[Sat Mar 28 06:09:52.580823 2026] [proxy_fcgi:error] [pid 34631:tid 34675] [client 20.220.9.32:43779] AH01071: Got error 'Primary script unknown'
[Sat Mar 28 06:09:52.791150 2026] [proxy_fcgi:error] [pid 34631:tid 34671] [client 20.220.9.32:43779] AH01071: Got error 'Primary script unknown'
[Sat Mar 28 06:09:53.002054 2026] [proxy_fcgi:error] [pid 34631:tid 34680] [client 20.220.9.32:43779] AH01071: Got error 'Primary script unknown'
[Sat Mar 28 06:09:53.232026 2026] [proxy_fcgi:error] [pid 34631:tid 34683] [client 20.220.9.32:43779] AH01071: Got error 'Primary script unknown'
[Sat Mar 28 06:09:53.445938 2026] [proxy_fcgi:error] [pid 34631:tid 34666] [client 20.220.9.32:43779] AH01071: Got error 'Primary script unknown'
[Sat Mar 28 06:09:53.653081 2026] [:error] [pid 34631:tid 34669] [client 20.220.9.32:43779] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/size.php"] [unique_id "accAMTtzjMMS6kojpeQW7AAAAck"]
[Sat Mar 28 06:09:54.090333 2026] [:error] [pid 64860:tid 64930] [client 20.220.9.32:43936] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/size.php"] [unique_id "accAMhkU3N0pg_4aEL-vpAAAAFY"]
[Sat Mar 28 06:09:54.524021 2026] [:error] [pid 34631:tid 34679] [client 20.220.9.32:43799] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/size.php"] [unique_id "accAMjtzjMMS6kojpeQW7gAAAdM"]
[Sat Mar 28 06:09:54.947386 2026] [:error] [pid 34631:tid 34661] [client 20.220.9.32:43820] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/size.php"] [unique_id "accAMjtzjMMS6kojpeQW8QAAAcE"]
[Sat Mar 28 06:09:55.380303 2026] [:error] [pid 34597:tid 34601] [client 20.220.9.32:43957] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/save.php"] [unique_id "accAM4luI7-e5s1cafcOCQAAAUA"]
[Sat Mar 28 06:09:55.943858 2026] [:error] [pid 43578:tid 43605] [client 20.220.9.32:43776] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/save.php"] [unique_id "accAM3NG2YdGm41aN8LToAAAAlg"]
[Sat Mar 28 06:09:56.387165 2026] [:error] [pid 64860:tid 64928] [client 20.220.9.32:43804] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/save.php"] [unique_id "accANBkU3N0pg_4aEL-vqAAAAFQ"]
[Sat Mar 28 06:09:56.826670 2026] [:error] [pid 64860:tid 64909] [client 20.220.9.32:43983] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/save.php"] [unique_id "accANBkU3N0pg_4aEL-vqgAAAEE"]
[Sat Mar 28 06:09:57.267656 2026] [:error] [pid 64860:tid 64927] [client 20.220.9.32:43856] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lib.php"] [unique_id "accANRkU3N0pg_4aEL-vrQAAAFM"]
[Sat Mar 28 06:09:57.712389 2026] [:error] [pid 64860:tid 64926] [client 20.220.9.32:43835] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lib.php"] [unique_id "accANRkU3N0pg_4aEL-vsgAAAFI"]
[Sat Mar 28 06:09:58.155787 2026] [:error] [pid 43579:tid 43628] [client 20.220.9.32:43744] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lib.php"] [unique_id "accANiRqN4JVI8gB7AmCUgAAApQ"]
[Sat Mar 28 06:09:58.588541 2026] [:error] [pid 34631:tid 34676] [client 20.220.9.32:43949] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lib.php"] [unique_id "accANjtzjMMS6kojpeQW9QAAAdA"]
[Sat Mar 28 06:09:59.015121 2026] [:error] [pid 64860:tid 64919] [client 20.220.9.32:43806] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/n1GiO.php"] [unique_id "accANxkU3N0pg_4aEL-vuAAAAEs"]
[Sat Mar 28 06:09:59.435435 2026] [:error] [pid 64860:tid 64909] [client 20.220.9.32:43883] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/n1GiO.php"] [unique_id "accANxkU3N0pg_4aEL-vuQAAAEE"]
[Sat Mar 28 06:09:59.862391 2026] [:error] [pid 43578:tid 43594] [client 20.220.9.32:43876] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/n1GiO.php"] [unique_id "accAN3NG2YdGm41aN8LTogAAAk0"]
[Sat Mar 28 06:10:00.284987 2026] [:error] [pid 64860:tid 64915] [client 20.220.9.32:43944] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/n1GiO.php"] [unique_id "accAOBkU3N0pg_4aEL-vvQAAAEc"]
[Sat Mar 28 06:10:00.722063 2026] [:error] [pid 64859:tid 64892] [client 20.220.9.32:43959] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/pLdK1.php"] [unique_id "accAOG3qEBHXq3rHdBmjuwAAAAs"]
[Sat Mar 28 06:10:01.160130 2026] [:error] [pid 43579:tid 43630] [client 20.220.9.32:43858] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/pLdK1.php"] [unique_id "accAOSRqN4JVI8gB7AmCWwAAApY"]
[Sat Mar 28 06:10:01.584573 2026] [:error] [pid 64860:tid 64926] [client 20.220.9.32:43890] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/pLdK1.php"] [unique_id "accAORkU3N0pg_4aEL-vvwAAAFI"]
[Sat Mar 28 06:10:02.002479 2026] [:error] [pid 43578:tid 43588] [client 20.220.9.32:43964] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/pLdK1.php"] [unique_id "accAOnNG2YdGm41aN8LTqAAAAkc"]
[Sat Mar 28 06:10:02.434781 2026] [:error] [pid 64860:tid 64917] [client 20.220.9.32:44019] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/llb1J.php"] [unique_id "accAOhkU3N0pg_4aEL-vwQAAAEk"]
[Sat Mar 28 06:10:02.855809 2026] [:error] [pid 2877:tid 2892] [client 20.220.9.32:43880] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/llb1J.php"] [unique_id "accAOrgM4xL1Xj409YTXLgAAAQ0"]
[Sat Mar 28 06:10:03.271228 2026] [:error] [pid 64860:tid 64910] [client 20.220.9.32:43811] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/llb1J.php"] [unique_id "accAOxkU3N0pg_4aEL-vxQAAAEI"]
[Sat Mar 28 06:10:03.704698 2026] [:error] [pid 64860:tid 64918] [client 20.220.9.32:43791] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/llb1J.php"] [unique_id "accAOxkU3N0pg_4aEL-vyAAAAEo"]
[Sat Mar 28 06:10:04.132279 2026] [:error] [pid 43579:tid 43629] [client 20.220.9.32:43800] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jeZDu.php"] [unique_id "accAPCRqN4JVI8gB7AmCYAAAApU"]
[Sat Mar 28 06:10:04.556996 2026] [:error] [pid 64860:tid 64924] [client 20.220.9.32:43874] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jeZDu.php"] [unique_id "accAPBkU3N0pg_4aEL-vzwAAAFA"]
[Sat Mar 28 06:10:04.987484 2026] [:error] [pid 43547:tid 43560] [client 20.220.9.32:43812] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jeZDu.php"] [unique_id "accAPD4ZEfdetXP-9aCqUAAAAgs"]
[Sat Mar 28 06:10:05.408031 2026] [:error] [pid 64860:tid 64931] [client 20.220.9.32:43716] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jeZDu.php"] [unique_id "accAPRkU3N0pg_4aEL-v0wAAAFc"]
[Sat Mar 28 06:10:05.843010 2026] [:error] [pid 64859:tid 64883] [client 20.220.9.32:44011] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gec.php"] [unique_id "accAPW3qEBHXq3rHdBmjvAAAAAI"]
[Sat Mar 28 06:10:06.264605 2026] [:error] [pid 64966:tid 64988] [client 20.220.9.32:43795] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gec.php"] [unique_id "accAPtfSvF5AFfSuKxXv5AAAAM8"]
[Sat Mar 28 06:10:06.678996 2026] [:error] [pid 64861:tid 64945] [client 20.220.9.32:43809] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gec.php"] [unique_id "accAPuxK22_lUN2kvnVFzAAAAIo"]
[Sat Mar 28 06:10:07.104285 2026] [:error] [pid 64966:tid 64995] [client 20.220.9.32:43777] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gec.php"] [unique_id "accAP9fSvF5AFfSuKxXv5QAAANY"]
[Sat Mar 28 06:10:07.542201 2026] [:error] [pid 64966:tid 64980] [client 20.220.9.32:43784] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bfuKK.php"] [unique_id "accAP9fSvF5AFfSuKxXv5gAAAMc"]
[Sat Mar 28 06:10:07.974558 2026] [:error] [pid 64860:tid 64916] [client 20.220.9.32:43844] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bfuKK.php"] [unique_id "accAPxkU3N0pg_4aEL-v2AAAAEg"]
[Sat Mar 28 06:10:08.395872 2026] [:error] [pid 43547:tid 43567] [client 20.220.9.32:43933] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bfuKK.php"] [unique_id "accAQD4ZEfdetXP-9aCqUwAAAhI"]
[Sat Mar 28 06:10:08.808413 2026] [:error] [pid 34597:tid 34604] [client 20.220.9.32:43844] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bfuKK.php"] [unique_id "accAQIluI7-e5s1cafcOEQAAAUM"]
[Sat Mar 28 06:10:09.229171 2026] [:error] [pid 64861:tid 64952] [client 20.220.9.32:43783] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/OpVq6.php"] [unique_id "accAQexK22_lUN2kvnVF0wAAAJE"]
[Sat Mar 28 06:10:09.676445 2026] [:error] [pid 34631:tid 34677] [client 20.220.9.32:43797] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/OpVq6.php"] [unique_id "accAQTtzjMMS6kojpeQW9wAAAdE"]
[Sat Mar 28 06:10:10.133357 2026] [:error] [pid 43578:tid 43602] [client 20.220.9.32:43859] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/OpVq6.php"] [unique_id "accAQnNG2YdGm41aN8LTswAAAlU"]
[Sat Mar 28 06:10:10.562928 2026] [:error] [pid 64859:tid 64882] [client 20.220.9.32:43937] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/OpVq6.php"] [unique_id "accAQm3qEBHXq3rHdBmjvwAAAAE"]
[Sat Mar 28 06:10:10.983329 2026] [:error] [pid 43547:tid 43572] [client 20.220.9.32:43903] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Q73BO.php"] [unique_id "accAQj4ZEfdetXP-9aCqVgAAAhc"]
[Sat Mar 28 06:10:11.410517 2026] [:error] [pid 34597:tid 34606] [client 20.220.9.32:43934] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Q73BO.php"] [unique_id "accAQ4luI7-e5s1cafcOFgAAAUU"]
[Sat Mar 28 06:10:11.829567 2026] [:error] [pid 34631:tid 34683] [client 20.220.9.32:43854] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Q73BO.php"] [unique_id "accAQztzjMMS6kojpeQW-gAAAdc"]
[Sat Mar 28 06:10:12.245846 2026] [:error] [pid 34631:tid 34669] [client 20.220.9.32:43870] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Q73BO.php"] [unique_id "accARDtzjMMS6kojpeQW_AAAAck"]
[Sat Mar 28 06:10:12.679538 2026] [:error] [pid 34631:tid 34667] [client 20.220.9.32:43960] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rmpoa.php"] [unique_id "accARDtzjMMS6kojpeQXAAAAAcc"]
[Sat Mar 28 06:10:13.096249 2026] [:error] [pid 34631:tid 34663] [client 20.220.9.32:43971] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rmpoa.php"] [unique_id "accARTtzjMMS6kojpeQXBAAAAcM"]
[Sat Mar 28 06:10:13.522724 2026] [:error] [pid 64966:tid 64978] [client 20.220.9.32:43732] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rmpoa.php"] [unique_id "accARdfSvF5AFfSuKxXv6QAAAMU"]
[Sat Mar 28 06:10:13.943656 2026] [:error] [pid 34597:tid 34613] [client 20.220.9.32:43866] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rmpoa.php"] [unique_id "accARYluI7-e5s1cafcOGwAAAUw"]
[Sat Mar 28 06:10:14.372484 2026] [:error] [pid 34597:tid 34625] [client 20.220.9.32:43838] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wgift1.php"] [unique_id "accARoluI7-e5s1cafcOHAAAAVg"]
[Sat Mar 28 06:10:14.790912 2026] [:error] [pid 34597:tid 34611] [client 20.220.9.32:43888] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wgift1.php"] [unique_id "accARoluI7-e5s1cafcOHQAAAUo"]
[Sat Mar 28 06:10:15.206319 2026] [:error] [pid 34597:tid 34604] [client 20.220.9.32:43965] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wgift1.php"] [unique_id "accAR4luI7-e5s1cafcOHwAAAUM"]
[Sat Mar 28 06:10:15.627143 2026] [:error] [pid 34597:tid 34609] [client 20.220.9.32:43807] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wgift1.php"] [unique_id "accAR4luI7-e5s1cafcOIwAAAUg"]
[Sat Mar 28 06:10:16.039424 2026] [:error] [pid 43578:tid 43590] [client 20.220.9.32:43955] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/torsa1.php"] [unique_id "accASHNG2YdGm41aN8LTuAAAAkk"]
[Sat Mar 28 06:10:16.468718 2026] [:error] [pid 64860:tid 64911] [client 20.220.9.32:43881] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/torsa1.php"] [unique_id "accASBkU3N0pg_4aEL-v4gAAAEM"]
[Sat Mar 28 06:10:16.888059 2026] [:error] [pid 34597:tid 34607] [client 20.220.9.32:43885] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/torsa1.php"] [unique_id "accASIluI7-e5s1cafcOKAAAAUY"]
[Sat Mar 28 06:10:17.320525 2026] [:error] [pid 34597:tid 34613] [client 20.220.9.32:43962] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/torsa1.php"] [unique_id "accASYluI7-e5s1cafcOKgAAAUw"]
[Sat Mar 28 06:10:17.737847 2026] [:error] [pid 64966:tid 64986] [client 20.220.9.32:43823] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xper1.php"] [unique_id "accASdfSvF5AFfSuKxXv7QAAAM0"]
[Sat Mar 28 06:10:18.161025 2026] [:error] [pid 64966:tid 64996] [client 20.220.9.32:43995] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xper1.php"] [unique_id "accAStfSvF5AFfSuKxXv8AAAANc"]
[Sat Mar 28 06:10:18.574914 2026] [:error] [pid 34631:tid 34669] [client 20.220.9.32:43761] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xper1.php"] [unique_id "accASjtzjMMS6kojpeQXCAAAAck"]
[Sat Mar 28 06:10:18.988421 2026] [:error] [pid 43578:tid 43599] [client 20.220.9.32:43790] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xper1.php"] [unique_id "accASnNG2YdGm41aN8LTvAAAAlI"]
[Sat Mar 28 06:10:19.413433 2026] [:error] [pid 34597:tid 34623] [client 20.220.9.32:43897] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gelio1.php"] [unique_id "accAS4luI7-e5s1cafcOLAAAAVY"]
[Sat Mar 28 06:10:19.829953 2026] [:error] [pid 43547:tid 43555] [client 20.220.9.32:43868] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gelio1.php"] [unique_id "accASz4ZEfdetXP-9aCqXgAAAgY"]
[Sat Mar 28 06:10:20.242681 2026] [:error] [pid 64860:tid 64916] [client 20.220.9.32:43718] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gelio1.php"] [unique_id "accATBkU3N0pg_4aEL-v6gAAAEg"]
[Sat Mar 28 06:10:20.655910 2026] [:error] [pid 34597:tid 34609] [client 20.220.9.32:43831] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gelio1.php"] [unique_id "accATIluI7-e5s1cafcOMAAAAUg"]
[Sat Mar 28 06:10:21.070030 2026] [:error] [pid 64861:tid 64936] [client 20.220.9.32:43743] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/v2.php"] [unique_id "accATexK22_lUN2kvnVF2QAAAIE"]
[Sat Mar 28 06:10:21.507202 2026] [:error] [pid 64861:tid 64937] [client 20.220.9.32:43850] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/v2.php"] [unique_id "accATexK22_lUN2kvnVF2wAAAII"]
[Sat Mar 28 06:10:21.923815 2026] [:error] [pid 34597:tid 34616] [client 20.220.9.32:43898] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/v2.php"] [unique_id "accATYluI7-e5s1cafcOMwAAAU8"]
[Sat Mar 28 06:10:22.343848 2026] [:error] [pid 34597:tid 34624] [client 20.220.9.32:43769] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/v2.php"] [unique_id "accAToluI7-e5s1cafcONAAAAVc"]
[Sat Mar 28 06:10:22.776470 2026] [:error] [pid 64860:tid 64909] [client 20.220.9.32:43830] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/v3.php"] [unique_id "accAThkU3N0pg_4aEL-v7QAAAEE"]
[Sat Mar 28 06:10:23.191134 2026] [:error] [pid 64861:tid 64957] [client 20.220.9.32:43763] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/v3.php"] [unique_id "accAT-xK22_lUN2kvnVF3QAAAJY"]
[Sat Mar 28 06:10:23.638798 2026] [:error] [pid 34631:tid 34683] [client 20.220.9.32:43941] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/v3.php"] [unique_id "accATztzjMMS6kojpeQXFQAAAdc"]
[Sat Mar 28 06:10:24.066771 2026] [:error] [pid 34631:tid 34681] [client 20.220.9.32:43832] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/v3.php"] [unique_id "accAUDtzjMMS6kojpeQXFgAAAdU"]
[Sat Mar 28 06:10:24.479169 2026] [:error] [pid 34631:tid 34667] [client 20.220.9.32:43893] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/v4.php"] [unique_id "accAUDtzjMMS6kojpeQXGgAAAcc"]
[Sat Mar 28 06:10:24.894181 2026] [:error] [pid 34631:tid 34674] [client 20.220.9.32:43939] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/v4.php"] [unique_id "accAUDtzjMMS6kojpeQXIgAAAc4"]
[Sat Mar 28 06:10:25.315190 2026] [:error] [pid 43579:tid 43609] [client 20.220.9.32:43678] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/v4.php"] [unique_id "accAUSRqN4JVI8gB7AmCaQAAAoE"]
[Sat Mar 28 06:10:25.728413 2026] [:error] [pid 64859:tid 64899] [client 20.220.9.32:43828] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/v4.php"] [unique_id "accAUW3qEBHXq3rHdBmjzQAAABI"]
[Sat Mar 28 06:10:26.141392 2026] [:error] [pid 34597:tid 34622] [client 20.220.9.32:43714] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ant.php"] [unique_id "accAUoluI7-e5s1cafcONgAAAVU"]
[Sat Mar 28 06:10:26.555573 2026] [:error] [pid 34597:tid 34614] [client 20.220.9.32:43953] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ant.php"] [unique_id "accAUoluI7-e5s1cafcONwAAAU0"]
[Sat Mar 28 06:10:26.996602 2026] [:error] [pid 34597:tid 34606] [client 20.220.9.32:43892] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ant.php"] [unique_id "accAUoluI7-e5s1cafcOOAAAAUU"]
[Sat Mar 28 06:10:27.441973 2026] [:error] [pid 34631:tid 34681] [client 20.220.9.32:43766] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ant.php"] [unique_id "accAUztzjMMS6kojpeQXMQAAAdU"]
[Sat Mar 28 06:10:27.961213 2026] [:error] [pid 34597:tid 34620] [client 20.220.9.32:43813] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/as.php"] [unique_id "accAU4luI7-e5s1cafcOPAAAAVM"]
[Sat Mar 28 06:10:28.394166 2026] [:error] [pid 64861:tid 64936] [client 20.220.9.32:43821] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/as.php"] [unique_id "accAVOxK22_lUN2kvnVF5AAAAIE"]
[Sat Mar 28 06:10:28.816247 2026] [:error] [pid 64861:tid 64954] [client 20.220.9.32:43736] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/as.php"] [unique_id "accAVOxK22_lUN2kvnVF6QAAAJM"]
[Sat Mar 28 06:10:29.251747 2026] [:error] [pid 34597:tid 34615] [client 20.220.9.32:43878] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/as.php"] [unique_id "accAVYluI7-e5s1cafcOPQAAAU4"]
[Sat Mar 28 06:10:29.740302 2026] [:error] [pid 64861:tid 64955] [client 20.220.9.32:43891] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cc13.php"] [unique_id "accAVexK22_lUN2kvnVF7gAAAJQ"]
[Sat Mar 28 06:10:30.172283 2026] [:error] [pid 64861:tid 64947] [client 20.220.9.32:43901] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cc13.php"] [unique_id "accAVuxK22_lUN2kvnVF8gAAAIw"]
[Sat Mar 28 06:10:30.623020 2026] [:error] [pid 64861:tid 64951] [client 20.220.9.32:43900] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cc13.php"] [unique_id "accAVuxK22_lUN2kvnVF9QAAAJA"]
[Sat Mar 28 06:10:31.083789 2026] [:error] [pid 64861:tid 64955] [client 20.220.9.32:43717] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cc13.php"] [unique_id "accAV-xK22_lUN2kvnVF-gAAAJQ"]
[Sat Mar 28 06:10:31.524661 2026] [:error] [pid 34631:tid 34675] [client 20.220.9.32:43871] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bnm.php"] [unique_id "accAVztzjMMS6kojpeQXMgAAAc8"]
[Sat Mar 28 06:10:31.934888 2026] [:error] [pid 34597:tid 34619] [client 20.220.9.32:43985] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bnm.php"] [unique_id "accAV4luI7-e5s1cafcOQAAAAVI"]
[Sat Mar 28 06:10:32.383550 2026] [:error] [pid 43579:tid 43632] [client 20.220.9.32:43884] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bnm.php"] [unique_id "accAWCRqN4JVI8gB7AmCbQAAApg"]
[Sat Mar 28 06:10:32.796830 2026] [:error] [pid 64859:tid 64896] [client 20.220.9.32:43731] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bnm.php"] [unique_id "accAWG3qEBHXq3rHdBmj0AAAAA8"]
[Sat Mar 28 06:10:33.232585 2026] [:error] [pid 34597:tid 34609] [client 20.220.9.32:43757] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ccs.php"] [unique_id "accAWYluI7-e5s1cafcORgAAAUg"]
[Sat Mar 28 06:10:33.652522 2026] [:error] [pid 34597:tid 34620] [client 20.220.9.32:43818] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ccs.php"] [unique_id "accAWYluI7-e5s1cafcOSAAAAVM"]
[Sat Mar 28 06:10:34.072881 2026] [:error] [pid 64966:tid 64974] [client 20.220.9.32:43746] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ccs.php"] [unique_id "accAWtfSvF5AFfSuKxXv-AAAAME"]
[Sat Mar 28 06:10:34.550049 2026] [:error] [pid 64859:tid 64883] [client 20.220.9.32:43836] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ccs.php"] [unique_id "accAWm3qEBHXq3rHdBmj0gAAAAI"]
[Sat Mar 28 06:10:35.016513 2026] [:error] [pid 43579:tid 43613] [client 20.220.9.32:43970] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ccu.php"] [unique_id "accAWyRqN4JVI8gB7AmCdgAAAoU"]
[Sat Mar 28 06:10:35.430971 2026] [:error] [pid 64859:tid 64882] [client 20.220.9.32:43778] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ccu.php"] [unique_id "accAW23qEBHXq3rHdBmj1gAAAAE"]
[Sat Mar 28 06:10:35.855309 2026] [:error] [pid 34631:tid 34673] [client 20.220.9.32:43895] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ccu.php"] [unique_id "accAWztzjMMS6kojpeQXNgAAAc0"]
[Sat Mar 28 06:10:36.332097 2026] [:error] [pid 64966:tid 64991] [client 20.220.9.32:43950] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ccu.php"] [unique_id "accAXNfSvF5AFfSuKxXv-QAAANI"]
[Sat Mar 28 06:10:36.777003 2026] [:error] [pid 64859:tid 64885] [client 20.220.9.32:43894] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/albin.php"] [unique_id "accAXG3qEBHXq3rHdBmj2QAAAAQ"]
[Sat Mar 28 06:10:37.252487 2026] [:error] [pid 43578:tid 43602] [client 20.220.9.32:43753] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/albin.php"] [unique_id "accAXXNG2YdGm41aN8LTwQAAAlU"]
[Sat Mar 28 06:10:37.723722 2026] [:error] [pid 64860:tid 64925] [client 20.220.9.32:43774] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/albin.php"] [unique_id "accAXRkU3N0pg_4aEL-v8AAAAFE"]
[Sat Mar 28 06:10:38.161353 2026] [:error] [pid 43579:tid 43627] [client 20.220.9.32:43796] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/albin.php"] [unique_id "accAXiRqN4JVI8gB7AmCgQAAApM"]
[Sat Mar 28 06:10:38.612688 2026] [:error] [pid 64859:tid 64888] [client 20.220.9.32:43738] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/north1.php"] [unique_id "accAXm3qEBHXq3rHdBmj3AAAAAc"]
[Sat Mar 28 06:10:39.114320 2026] [:error] [pid 64860:tid 64908] [client 20.220.9.32:43887] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/north1.php"] [unique_id "accAXxkU3N0pg_4aEL-v8gAAAEA"]
[Sat Mar 28 06:10:39.600368 2026] [:error] [pid 64860:tid 64919] [client 20.220.9.32:43787] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/north1.php"] [unique_id "accAXxkU3N0pg_4aEL-v9QAAAEs"]
[Sat Mar 28 06:10:40.040695 2026] [:error] [pid 34597:tid 34610] [client 20.220.9.32:43742] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/north1.php"] [unique_id "accAYIluI7-e5s1cafcOTQAAAUk"]
[Sat Mar 28 06:10:40.486645 2026] [:error] [pid 64860:tid 64910] [client 20.220.9.32:44026] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dragonshell.php"] [unique_id "accAYBkU3N0pg_4aEL-v_AAAAEI"]
[Sat Mar 28 06:10:40.917881 2026] [:error] [pid 34597:tid 34606] [client 20.220.9.32:43729] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dragonshell.php"] [unique_id "accAYIluI7-e5s1cafcOTwAAAUU"]
[Sat Mar 28 06:10:41.380903 2026] [:error] [pid 43547:tid 43563] [client 20.220.9.32:43726] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dragonshell.php"] [unique_id "accAYT4ZEfdetXP-9aCqbQAAAg4"]
[Sat Mar 28 06:10:41.813491 2026] [:error] [pid 43547:tid 43558] [client 20.220.9.32:43802] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dragonshell.php"] [unique_id "accAYT4ZEfdetXP-9aCqbgAAAgk"]
[Sat Mar 28 06:10:42.269817 2026] [:error] [pid 64860:tid 64919] [client 20.220.9.32:43815] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ggb.php"] [unique_id "accAYhkU3N0pg_4aEL-wAQAAAEs"]
[Sat Mar 28 06:10:42.775077 2026] [:error] [pid 43547:tid 43553] [client 20.220.9.32:43686] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ggb.php"] [unique_id "accAYj4ZEfdetXP-9aCqcAAAAgQ"]
[Sat Mar 28 06:10:43.231210 2026] [:error] [pid 64860:tid 64914] [client 20.220.9.32:43722] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ggb.php"] [unique_id "accAYxkU3N0pg_4aEL-wBgAAAEY"]
[Sat Mar 28 06:10:43.655689 2026] [:error] [pid 64860:tid 64909] [client 20.220.9.32:43713] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ggb.php"] [unique_id "accAYxkU3N0pg_4aEL-wCQAAAEE"]
[Sat Mar 28 06:10:44.081873 2026] [:error] [pid 34597:tid 34605] [client 20.220.9.32:43833] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/caiij.php"] [unique_id "accAZIluI7-e5s1cafcOVAAAAUQ"]
[Sat Mar 28 06:10:44.498213 2026] [:error] [pid 64966:tid 64980] [client 20.220.9.32:43688] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/caiij.php"] [unique_id "accAZNfSvF5AFfSuKxXv_AAAAMc"]
[Sat Mar 28 06:10:44.929296 2026] [:error] [pid 34597:tid 34625] [client 20.220.9.32:43801] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/caiij.php"] [unique_id "accAZIluI7-e5s1cafcOWAAAAVg"]
[Sat Mar 28 06:10:45.438925 2026] [:error] [pid 64860:tid 64932] [client 20.220.9.32:43997] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/caiij.php"] [unique_id "accAZRkU3N0pg_4aEL-wEgAAAFg"]
[Sat Mar 28 06:10:45.880435 2026] [:error] [pid 34597:tid 34611] [client 20.220.9.32:43734] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gel4y.php"] [unique_id "accAZYluI7-e5s1cafcOWgAAAUo"]
[Sat Mar 28 06:10:46.308589 2026] [:error] [pid 34631:tid 34683] [client 20.220.9.32:43611] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gel4y.php"] [unique_id "accAZjtzjMMS6kojpeQXOwAAAdc"]
[Sat Mar 28 06:10:46.757971 2026] [:error] [pid 64861:tid 64954] [client 20.220.9.32:43658] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gel4y.php"] [unique_id "accAZuxK22_lUN2kvnVGAgAAAJM"]
[Sat Mar 28 06:10:47.205900 2026] [:error] [pid 34597:tid 34612] [client 20.220.9.32:43762] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gel4y.php"] [unique_id "accAZ4luI7-e5s1cafcOXwAAAUs"]
[Sat Mar 28 06:10:47.646222 2026] [:error] [pid 64861:tid 64943] [client 20.220.9.32:43825] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/uxijj.php"] [unique_id "accAZ-xK22_lUN2kvnVGBQAAAIg"]
[Sat Mar 28 06:10:48.069879 2026] [:error] [pid 34631:tid 34668] [client 20.220.9.32:43657] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/uxijj.php"] [unique_id "accAaDtzjMMS6kojpeQXPQAAAcg"]
[Sat Mar 28 06:10:48.528418 2026] [:error] [pid 34631:tid 34681] [client 20.220.9.32:43719] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/uxijj.php"] [unique_id "accAaDtzjMMS6kojpeQXPgAAAdU"]
[Sat Mar 28 06:10:48.957781 2026] [:error] [pid 34597:tid 34625] [client 20.220.9.32:43789] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/uxijj.php"] [unique_id "accAaIluI7-e5s1cafcOYwAAAVg"]
[Sat Mar 28 06:10:49.395097 2026] [:error] [pid 64860:tid 64932] [client 20.220.9.32:43720] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rkiea.php"] [unique_id "accAaRkU3N0pg_4aEL-wGAAAAFg"]
[Sat Mar 28 06:10:49.854387 2026] [:error] [pid 64860:tid 64911] [client 20.220.9.32:43805] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rkiea.php"] [unique_id "accAaRkU3N0pg_4aEL-wHAAAAEM"]
[Sat Mar 28 06:10:50.352841 2026] [:error] [pid 64860:tid 64915] [client 20.220.9.32:43772] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rkiea.php"] [unique_id "accAahkU3N0pg_4aEL-wIAAAAEc"]
[Sat Mar 28 06:10:50.803876 2026] [:error] [pid 64861:tid 64945] [client 20.220.9.32:43724] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rkiea.php"] [unique_id "accAauxK22_lUN2kvnVGCAAAAIo"]
[Sat Mar 28 06:10:51.241060 2026] [:error] [pid 64861:tid 64948] [client 20.220.9.32:43773] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/resp.php"] [unique_id "accAa-xK22_lUN2kvnVGCgAAAI0"]
[Sat Mar 28 06:10:51.670125 2026] [:error] [pid 64861:tid 64949] [client 20.220.9.32:43786] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/resp.php"] [unique_id "accAa-xK22_lUN2kvnVGCwAAAI4"]
[Sat Mar 28 06:10:52.191189 2026] [:error] [pid 64860:tid 64921] [client 20.220.9.32:43759] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/resp.php"] [unique_id "accAbBkU3N0pg_4aEL-wJQAAAE0"]
[Sat Mar 28 06:10:52.630417 2026] [:error] [pid 64860:tid 64911] [client 20.220.9.32:43669] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/resp.php"] [unique_id "accAbBkU3N0pg_4aEL-wJwAAAEM"]
[Sat Mar 28 06:10:53.082218 2026] [proxy_fcgi:error] [pid 64860:tid 64927] [client 20.220.9.32:43735] AH01071: Got error 'Primary script unknown'
[Sat Mar 28 06:10:53.292496 2026] [proxy_fcgi:error] [pid 64860:tid 64915] [client 20.220.9.32:43735] AH01071: Got error 'Primary script unknown'
[Sat Mar 28 06:10:53.504147 2026] [proxy_fcgi:error] [pid 64860:tid 64922] [client 20.220.9.32:43735] AH01071: Got error 'Primary script unknown'
[Sat Mar 28 06:10:53.713682 2026] [proxy_fcgi:error] [pid 64860:tid 64925] [client 20.220.9.32:43735] AH01071: Got error 'Primary script unknown'
[Sat Mar 28 06:10:53.923556 2026] [proxy_fcgi:error] [pid 64860:tid 64917] [client 20.220.9.32:43735] AH01071: Got error 'Primary script unknown'
[Sat Mar 28 06:10:54.559194 2026] [proxy_fcgi:error] [pid 64860:tid 64930] [client 20.220.9.32:43735] AH01071: Got error 'Primary script unknown'
[Sat Mar 28 06:10:54.771718 2026] [proxy_fcgi:error] [pid 64860:tid 64921] [client 20.220.9.32:43735] AH01071: Got error 'Primary script unknown'
[Sat Mar 28 06:10:54.984165 2026] [proxy_fcgi:error] [pid 64860:tid 64918] [client 20.220.9.32:43735] AH01071: Got error 'Primary script unknown'
[Sat Mar 28 06:10:55.193701 2026] [proxy_fcgi:error] [pid 64860:tid 64914] [client 20.220.9.32:43735] AH01071: Got error 'Primary script unknown'
[Sat Mar 28 06:10:55.409185 2026] [:error] [pid 64860:tid 64919] [client 20.220.9.32:43735] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/saorix1.php"] [unique_id "accAbxkU3N0pg_4aEL-wNwAAAEs"]
[Sat Mar 28 06:10:55.836191 2026] [:error] [pid 64860:tid 64924] [client 20.220.9.32:43740] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/saorix1.php"] [unique_id "accAbxkU3N0pg_4aEL-wOAAAAFA"]
[Sat Mar 28 06:10:56.256310 2026] [:error] [pid 64861:tid 64952] [client 20.220.9.32:43869] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/saorix1.php"] [unique_id "accAcOxK22_lUN2kvnVGEwAAAJE"]
[Sat Mar 28 06:10:56.676278 2026] [:error] [pid 34631:tid 34665] [client 20.220.9.32:43754] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/saorix1.php"] [unique_id "accAcDtzjMMS6kojpeQXSAAAAcU"]
[Sat Mar 28 06:10:57.109644 2026] [:error] [pid 34631:tid 34669] [client 20.220.9.32:43862] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-class.php"] [unique_id "accAcTtzjMMS6kojpeQXSwAAAck"]
[Sat Mar 28 06:10:57.529877 2026] [:error] [pid 64860:tid 64915] [client 20.220.9.32:43760] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-class.php"] [unique_id "accAcRkU3N0pg_4aEL-wOgAAAEc"]
[Sat Mar 28 06:10:57.954725 2026] [:error] [pid 34631:tid 34676] [client 20.220.9.32:43775] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-class.php"] [unique_id "accAcTtzjMMS6kojpeQXTgAAAdA"]
[Sat Mar 28 06:10:58.373664 2026] [:error] [pid 34631:tid 34663] [client 20.220.9.32:43739] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-class.php"] [unique_id "accAcjtzjMMS6kojpeQXUAAAAcM"]
[Sat Mar 28 06:10:58.792250 2026] [:error] [pid 34597:tid 34611] [client 20.220.9.32:43781] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/uuu.php"] [unique_id "accAcoluI7-e5s1cafcOcAAAAUo"]
[Sat Mar 28 06:10:59.207124 2026] [:error] [pid 34631:tid 34682] [client 20.220.9.32:43902] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/uuu.php"] [unique_id "accAcztzjMMS6kojpeQXUwAAAdY"]
[Sat Mar 28 06:10:59.621125 2026] [:error] [pid 34631:tid 34680] [client 20.220.9.32:43695] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/uuu.php"] [unique_id "accAcztzjMMS6kojpeQXVQAAAdQ"]
[Sat Mar 28 06:11:00.042381 2026] [:error] [pid 34631:tid 34669] [client 20.220.9.32:43897] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/uuu.php"] [unique_id "accAdDtzjMMS6kojpeQXWAAAAck"]
[Sat Mar 28 06:11:00.461093 2026] [:error] [pid 64860:tid 64921] [client 20.220.9.32:43672] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-load.php"] [unique_id "accAdBkU3N0pg_4aEL-wQQAAAE0"]
[Sat Mar 28 06:11:00.877747 2026] [:error] [pid 34631:tid 34682] [client 20.220.9.32:43682] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-load.php"] [unique_id "accAdDtzjMMS6kojpeQXXAAAAdY"]
[Sat Mar 28 06:11:01.290134 2026] [:error] [pid 64860:tid 64914] [client 20.220.9.32:43770] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-load.php"] [unique_id "accAdRkU3N0pg_4aEL-wQgAAAEY"]
[Sat Mar 28 06:11:01.701052 2026] [:error] [pid 64860:tid 64927] [client 20.220.9.32:43648] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-load.php"] [unique_id "accAdRkU3N0pg_4aEL-wRAAAAFM"]
[Sat Mar 28 06:11:02.119098 2026] [:error] [pid 34631:tid 34662] [client 20.220.9.32:43659] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gpt-sh.php"] [unique_id "accAdjtzjMMS6kojpeQXXgAAAcI"]
[Sat Mar 28 06:11:02.529988 2026] [:error] [pid 64860:tid 64913] [client 20.220.9.32:43979] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gpt-sh.php"] [unique_id "accAdhkU3N0pg_4aEL-wSAAAAEU"]
[Sat Mar 28 06:11:02.955471 2026] [:error] [pid 34631:tid 34661] [client 20.220.9.32:43674] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gpt-sh.php"] [unique_id "accAdjtzjMMS6kojpeQXYQAAAcE"]
[Sat Mar 28 06:11:03.378526 2026] [:error] [pid 43579:tid 43610] [client 20.220.9.32:43597] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gpt-sh.php"] [unique_id "accAdyRqN4JVI8gB7AmCiQAAAoI"]
[Sat Mar 28 06:11:03.792542 2026] [:error] [pid 64859:tid 64884] [client 20.220.9.32:43613] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bywaf.php"] [unique_id "accAd23qEBHXq3rHdBmj3QAAAAM"]
[Sat Mar 28 06:11:04.208156 2026] [:error] [pid 43578:tid 43594] [client 20.220.9.32:43792] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bywaf.php"] [unique_id "accAeHNG2YdGm41aN8LTxwAAAk0"]
[Sat Mar 28 06:11:04.626345 2026] [:error] [pid 64861:tid 64938] [client 20.220.9.32:43837] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bywaf.php"] [unique_id "accAeOxK22_lUN2kvnVGGAAAAIM"]
[Sat Mar 28 06:11:05.036890 2026] [:error] [pid 2877:tid 2898] [client 20.220.9.32:43803] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bywaf.php"] [unique_id "accAebgM4xL1Xj409YTXNwAAARM"]
[Sat Mar 28 06:11:05.462691 2026] [:error] [pid 43578:tid 43603] [client 20.220.9.32:43824] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-true.php"] [unique_id "accAeXNG2YdGm41aN8LTygAAAlY"]
[Sat Mar 28 06:11:05.879193 2026] [:error] [pid 64861:tid 64949] [client 20.220.9.32:43705] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-true.php"] [unique_id "accAeexK22_lUN2kvnVGGQAAAI4"]
[Sat Mar 28 06:11:06.291857 2026] [:error] [pid 64861:tid 64939] [client 20.220.9.32:43715] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-true.php"] [unique_id "accAeuxK22_lUN2kvnVGHAAAAIQ"]
[Sat Mar 28 06:11:06.716309 2026] [:error] [pid 34597:tid 34606] [client 20.220.9.32:43752] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-true.php"] [unique_id "accAeoluI7-e5s1cafcOdAAAAUU"]
[Sat Mar 28 06:11:07.131496 2026] [:error] [pid 64861:tid 64954] [client 20.220.9.32:43681] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/byp8.php"] [unique_id "accAe-xK22_lUN2kvnVGIAAAAJM"]
[Sat Mar 28 06:11:07.563814 2026] [:error] [pid 64861:tid 64943] [client 20.220.9.32:44002] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/byp8.php"] [unique_id "accAe-xK22_lUN2kvnVGIgAAAIg"]
[Sat Mar 28 06:11:07.995593 2026] [:error] [pid 64861:tid 64950] [client 20.220.9.32:43756] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/byp8.php"] [unique_id "accAe-xK22_lUN2kvnVGJQAAAI8"]
[Sat Mar 28 06:11:08.422904 2026] [:error] [pid 43579:tid 43611] [client 20.220.9.32:43728] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/byp8.php"] [unique_id "accAfCRqN4JVI8gB7AmCiwAAAoM"]
[Sat Mar 28 06:11:08.835752 2026] [:error] [pid 64966:tid 64993] [client 20.220.9.32:43749] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tx88.php"] [unique_id "accAfNfSvF5AFfSuKxXv_gAAANQ"]
[Sat Mar 28 06:11:09.250368 2026] [:error] [pid 43578:tid 43604] [client 20.220.9.32:43737] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tx88.php"] [unique_id "accAfXNG2YdGm41aN8LTywAAAlc"]
[Sat Mar 28 06:11:09.671678 2026] [:error] [pid 43578:tid 43600] [client 20.220.9.32:43819] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tx88.php"] [unique_id "accAfXNG2YdGm41aN8LTzAAAAlM"]
[Sat Mar 28 06:11:10.084138 2026] [:error] [pid 64859:tid 64901] [client 20.220.9.32:43665] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tx88.php"] [unique_id "accAfm3qEBHXq3rHdBmj4AAAABQ"]
[Sat Mar 28 06:11:10.598338 2026] [:error] [pid 64861:tid 64940] [client 20.220.9.32:43675] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tx79.php"] [unique_id "accAfuxK22_lUN2kvnVGKwAAAIU"]
[Sat Mar 28 06:11:11.024261 2026] [:error] [pid 64861:tid 64937] [client 20.220.9.32:43788] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tx79.php"] [unique_id "accAf-xK22_lUN2kvnVGLAAAAII"]
[Sat Mar 28 06:11:11.466906 2026] [:error] [pid 64861:tid 64941] [client 20.220.9.32:43747] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tx79.php"] [unique_id "accAf-xK22_lUN2kvnVGLQAAAIY"]
[Sat Mar 28 06:11:11.887008 2026] [:error] [pid 43579:tid 43631] [client 20.220.9.32:43841] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tx79.php"] [unique_id "accAfyRqN4JVI8gB7AmCjQAAApc"]
[Sat Mar 28 06:11:12.298969 2026] [:error] [pid 43579:tid 43617] [client 20.220.9.32:43660] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/max.php"] [unique_id "accAgCRqN4JVI8gB7AmCjgAAAok"]
[Sat Mar 28 06:11:12.736545 2026] [:error] [pid 34631:tid 34664] [client 20.220.9.32:43808] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/max.php"] [unique_id "accAgDtzjMMS6kojpeQXbQAAAcQ"]
[Sat Mar 28 06:11:13.147512 2026] [:error] [pid 34631:tid 34668] [client 20.220.9.32:43650] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/max.php"] [unique_id "accAgTtzjMMS6kojpeQXbwAAAcg"]
[Sat Mar 28 06:11:13.561241 2026] [:error] [pid 64860:tid 64914] [client 20.220.9.32:43771] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/max.php"] [unique_id "accAgRkU3N0pg_4aEL-wVQAAAEY"]
[Sat Mar 28 06:11:13.975180 2026] [:error] [pid 64859:tid 64881] [client 20.220.9.32:43663] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/z60.php"] [unique_id "accAgW3qEBHXq3rHdBmj4wAAAAA"]
[Sat Mar 28 06:11:14.391329 2026] [:error] [pid 64966:tid 64975] [client 20.220.9.32:43721] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/z60.php"] [unique_id "accAgtfSvF5AFfSuKxXwAAAAAMI"]
[Sat Mar 28 06:11:14.809079 2026] [:error] [pid 64861:tid 64948] [client 20.220.9.32:43839] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/z60.php"] [unique_id "accAguxK22_lUN2kvnVGMQAAAI0"]
[Sat Mar 28 06:11:15.221453 2026] [:error] [pid 34631:tid 34680] [client 20.220.9.32:43803] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/z60.php"] [unique_id "accAgztzjMMS6kojpeQXcwAAAdQ"]
[Sat Mar 28 06:11:15.642496 2026] [:error] [pid 64860:tid 64928] [client 20.220.9.32:43727] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/utky.php"] [unique_id "accAgxkU3N0pg_4aEL-wWQAAAFQ"]
[Sat Mar 28 06:11:16.072594 2026] [:error] [pid 64966:tid 64976] [client 20.220.9.32:43680] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/utky.php"] [unique_id "accAhNfSvF5AFfSuKxXwAgAAAMM"]
[Sat Mar 28 06:11:16.485440 2026] [:error] [pid 64966:tid 64981] [client 20.220.9.32:43765] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/utky.php"] [unique_id "accAhNfSvF5AFfSuKxXwAwAAAMg"]
[Sat Mar 28 06:11:16.905429 2026] [:error] [pid 64859:tid 64887] [client 20.220.9.32:43684] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/utky.php"] [unique_id "accAhG3qEBHXq3rHdBmj5wAAAAY"]
[Sat Mar 28 06:11:17.319225 2026] [:error] [pid 64966:tid 64987] [client 20.220.9.32:43829] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/uang.php"] [unique_id "accAhdfSvF5AFfSuKxXwBAAAAM4"]
[Sat Mar 28 06:11:17.735848 2026] [:error] [pid 64859:tid 64898] [client 20.220.9.32:43587] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/uang.php"] [unique_id "accAhW3qEBHXq3rHdBmj6AAAABE"]
[Sat Mar 28 06:11:18.149774 2026] [:error] [pid 64966:tid 64989] [client 20.220.9.32:43827] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/uang.php"] [unique_id "accAhtfSvF5AFfSuKxXwBwAAANA"]
[Sat Mar 28 06:11:18.568345 2026] [:error] [pid 43579:tid 43623] [client 20.220.9.32:43677] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/uang.php"] [unique_id "accAhiRqN4JVI8gB7AmCkwAAAo8"]
[Sat Mar 28 06:11:18.992811 2026] [:error] [pid 64859:tid 64886] [client 20.220.9.32:43656] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp3.php"] [unique_id "accAhm3qEBHXq3rHdBmj6gAAAAU"]
[Sat Mar 28 06:11:19.409329 2026] [:error] [pid 43578:tid 43588] [client 20.220.9.32:43594] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp3.php"] [unique_id "accAh3NG2YdGm41aN8LT0QAAAkc"]
[Sat Mar 28 06:11:19.847407 2026] [:error] [pid 43547:tid 43556] [client 20.220.9.32:43827] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp3.php"] [unique_id "accAhz4ZEfdetXP-9aCqlAAAAgc"]
[Sat Mar 28 06:11:20.263813 2026] [:error] [pid 43578:tid 43589] [client 20.220.9.32:43698] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp3.php"] [unique_id "accAiHNG2YdGm41aN8LT0gAAAkg"]
[Sat Mar 28 06:11:20.680431 2026] [:error] [pid 43547:tid 43560] [client 20.220.9.32:43694] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp9.php"] [unique_id "accAiD4ZEfdetXP-9aCqlgAAAgs"]
[Sat Mar 28 06:11:21.102913 2026] [:error] [pid 43578:tid 43605] [client 20.220.9.32:43891] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp9.php"] [unique_id "accAiXNG2YdGm41aN8LT0wAAAlg"]
[Sat Mar 28 06:11:21.529121 2026] [:error] [pid 64859:tid 64897] [client 20.220.9.32:43712] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp9.php"] [unique_id "accAiW3qEBHXq3rHdBmj7gAAABA"]
[Sat Mar 28 06:11:21.940512 2026] [:error] [pid 64859:tid 64885] [client 20.220.9.32:43764] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp9.php"] [unique_id "accAiW3qEBHXq3rHdBmj7wAAAAQ"]
[Sat Mar 28 06:11:22.353083 2026] [:error] [pid 2877:tid 2893] [client 20.220.9.32:43596] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/absorption.php"] [unique_id "accAirgM4xL1Xj409YTXOQAAAQ4"]
[Sat Mar 28 06:11:22.764279 2026] [:error] [pid 64859:tid 64890] [client 20.220.9.32:43701] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/absorption.php"] [unique_id "accAim3qEBHXq3rHdBmj8AAAAAk"]
[Sat Mar 28 06:11:23.178608 2026] [:error] [pid 64859:tid 64891] [client 20.220.9.32:43793] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/absorption.php"] [unique_id "accAi23qEBHXq3rHdBmj8gAAAAo"]
[Sat Mar 28 06:11:23.608276 2026] [:error] [pid 64859:tid 64895] [client 20.220.9.32:43654] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/absorption.php"] [unique_id "accAi23qEBHXq3rHdBmj8wAAAA4"]
[Sat Mar 28 06:11:24.036911 2026] [:error] [pid 64859:tid 64900] [client 20.220.9.32:43647] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ticket.php"] [unique_id "accAjG3qEBHXq3rHdBmj9AAAABM"]
[Sat Mar 28 06:11:24.464014 2026] [:error] [pid 43547:tid 43561] [client 20.220.9.32:43655] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ticket.php"] [unique_id "accAjD4ZEfdetXP-9aCqmQAAAgw"]
[Sat Mar 28 06:11:24.890894 2026] [:error] [pid 43579:tid 43617] [client 20.220.9.32:43755] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ticket.php"] [unique_id "accAjCRqN4JVI8gB7AmCmQAAAok"]
[Sat Mar 28 06:11:25.306861 2026] [:error] [pid 43579:tid 43616] [client 20.220.9.32:43599] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ticket.php"] [unique_id "accAjSRqN4JVI8gB7AmCnQAAAog"]
[Sat Mar 28 06:11:25.723674 2026] [:error] [pid 64861:tid 64949] [client 20.220.9.32:43652] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wglum1.php"] [unique_id "accAjexK22_lUN2kvnVGMwAAAI4"]
[Sat Mar 28 06:11:26.141319 2026] [:error] [pid 64859:tid 64887] [client 20.220.9.32:43767] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wglum1.php"] [unique_id "accAjm3qEBHXq3rHdBmj9gAAAAY"]
[Sat Mar 28 06:11:26.568028 2026] [:error] [pid 2877:tid 2881] [client 20.220.9.32:43676] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wglum1.php"] [unique_id "accAjrgM4xL1Xj409YTXOgAAAQI"]
[Sat Mar 28 06:11:26.990641 2026] [:error] [pid 64861:tid 64945] [client 20.220.9.32:43822] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wglum1.php"] [unique_id "accAjuxK22_lUN2kvnVGNAAAAIo"]
[Sat Mar 28 06:11:27.430757 2026] [:error] [pid 43579:tid 43627] [client 20.220.9.32:43637] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xpwer1.php"] [unique_id "accAjyRqN4JVI8gB7AmCnwAAApM"]
[Sat Mar 28 06:11:27.847489 2026] [:error] [pid 64860:tid 64911] [client 20.220.9.32:43524] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xpwer1.php"] [unique_id "accAjxkU3N0pg_4aEL-wWgAAAEM"]
[Sat Mar 28 06:11:28.278898 2026] [:error] [pid 64966:tid 64993] [client 20.220.9.32:43646] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xpwer1.php"] [unique_id "accAkNfSvF5AFfSuKxXwDAAAANQ"]
[Sat Mar 28 06:11:28.707500 2026] [:error] [pid 64861:tid 64944] [client 20.220.9.32:43745] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xpwer1.php"] [unique_id "accAkOxK22_lUN2kvnVGOAAAAIk"]
[Sat Mar 28 06:11:29.121651 2026] [:error] [pid 34631:tid 34676] [client 20.220.9.32:43683] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/yuzuru1.php"] [unique_id "accAkTtzjMMS6kojpeQXewAAAdA"]
[Sat Mar 28 06:11:29.535438 2026] [:error] [pid 64966:tid 64992] [client 20.220.9.32:43706] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/yuzuru1.php"] [unique_id "accAkdfSvF5AFfSuKxXwDQAAANM"]
[Sat Mar 28 06:11:29.947758 2026] [:error] [pid 64859:tid 64888] [client 20.220.9.32:43590] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/yuzuru1.php"] [unique_id "accAkW3qEBHXq3rHdBmj9wAAAAc"]
[Sat Mar 28 06:11:30.363959 2026] [:error] [pid 64861:tid 64957] [client 20.220.9.32:43826] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/yuzuru1.php"] [unique_id "accAkuxK22_lUN2kvnVGPQAAAJY"]
[Sat Mar 28 06:11:30.779715 2026] [:error] [pid 34597:tid 34616] [client 20.220.9.32:43700] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wdone1.php"] [unique_id "accAkoluI7-e5s1cafcOfAAAAU8"]
[Sat Mar 28 06:11:31.193818 2026] [:error] [pid 64861:tid 64950] [client 20.220.9.32:43621] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wdone1.php"] [unique_id "accAk-xK22_lUN2kvnVGPwAAAI8"]
[Sat Mar 28 06:11:31.608487 2026] [:error] [pid 64859:tid 64903] [client 20.220.9.32:43585] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wdone1.php"] [unique_id "accAk23qEBHXq3rHdBmj-AAAABY"]
[Sat Mar 28 06:11:32.023375 2026] [:error] [pid 43578:tid 43593] [client 20.220.9.32:43601] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wdone1.php"] [unique_id "accAlHNG2YdGm41aN8LT1wAAAkw"]
[Sat Mar 28 06:11:32.435711 2026] [:error] [pid 34631:tid 34670] [client 20.220.9.32:43651] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xpass.php"] [unique_id "accAlDtzjMMS6kojpeQXgAAAAco"]
[Sat Mar 28 06:11:32.853105 2026] [:error] [pid 64861:tid 64938] [client 20.220.9.32:43609] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xpass.php"] [unique_id "accAlOxK22_lUN2kvnVGQwAAAIM"]
[Sat Mar 28 06:11:33.268291 2026] [:error] [pid 64861:tid 64945] [client 20.220.9.32:43588] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xpass.php"] [unique_id "accAlexK22_lUN2kvnVGRAAAAIo"]
[Sat Mar 28 06:11:33.682122 2026] [:error] [pid 34631:tid 34663] [client 20.220.9.32:43664] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xpass.php"] [unique_id "accAlTtzjMMS6kojpeQXggAAAcM"]
[Sat Mar 28 06:11:34.098582 2026] [:error] [pid 34631:tid 34674] [client 20.220.9.32:43725] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ad.php"] [unique_id "accAljtzjMMS6kojpeQXgwAAAc4"]
[Sat Mar 28 06:11:34.509043 2026] [:error] [pid 34597:tid 34611] [client 20.220.9.32:43699] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ad.php"] [unique_id "accAloluI7-e5s1cafcOfwAAAUo"]
[Sat Mar 28 06:11:34.931523 2026] [:error] [pid 34631:tid 34684] [client 20.220.9.32:43708] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ad.php"] [unique_id "accAljtzjMMS6kojpeQXhgAAAdg"]
[Sat Mar 28 06:11:35.356649 2026] [:error] [pid 64859:tid 64886] [client 20.220.9.32:43673] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ad.php"] [unique_id "accAl23qEBHXq3rHdBmj-gAAAAU"]
[Sat Mar 28 06:11:35.779051 2026] [:error] [pid 64859:tid 64896] [client 20.220.9.32:43696] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/h02ugyh.php"] [unique_id "accAl23qEBHXq3rHdBmj-wAAAA8"]
[Sat Mar 28 06:11:36.211392 2026] [:error] [pid 2877:tid 2891] [client 20.220.9.32:43670] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/h02ugyh.php"] [unique_id "accAmLgM4xL1Xj409YTXPAAAAQw"]
[Sat Mar 28 06:11:36.627986 2026] [:error] [pid 64859:tid 64882] [client 20.220.9.32:43692] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/h02ugyh.php"] [unique_id "accAmG3qEBHXq3rHdBmj_QAAAAE"]
[Sat Mar 28 06:11:37.043506 2026] [:error] [pid 64860:tid 64916] [client 20.220.9.32:43689] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/h02ugyh.php"] [unique_id "accAmRkU3N0pg_4aEL-wXgAAAEg"]
[Sat Mar 28 09:25:46.011842 2026] [:error] [pid 64860:tid 64932] [client 2.58.56.116:52932] [client 2.58.56.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/"] [unique_id "accuGhkU3N0pg_4aEL8UPgAAAFg"]
[Sat Mar 28 09:25:46.515343 2026] [:error] [pid 64860:tid 64913] [client 2.58.56.116:53218] [client 2.58.56.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/"] [unique_id "accuGhkU3N0pg_4aEL8UWAAAAEU"]
[Sat Mar 28 09:25:47.015175 2026] [:error] [pid 43547:tid 43553] [client 2.58.56.116:53435] [client 2.58.56.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/"] [unique_id "accuGz4ZEfdetXP-9aC85wAAAgQ"]
[Sat Mar 28 09:25:47.517935 2026] [:error] [pid 43579:tid 43619] [client 2.58.56.116:53826] [client 2.58.56.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/"] [unique_id "accuGyRqN4JVI8gB7AmlUAAAAos"]
[Sat Mar 28 09:25:48.018416 2026] [:error] [pid 43578:tid 43582] [client 2.58.56.116:54637] [client 2.58.56.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/"] [unique_id "accuHHNG2YdGm41aN8LxOAAAAkE"]
[Sun Mar 29 05:04:54.223132 2026] [proxy_fcgi:error] [pid 1524:tid 1536] [client 20.151.113.137:35367] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 05:04:54.467657 2026] [proxy_fcgi:error] [pid 1524:tid 1527] [client 20.151.113.137:35367] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 05:04:54.676402 2026] [proxy_fcgi:error] [pid 1524:tid 1555] [client 20.151.113.137:35367] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 05:04:54.996166 2026] [proxy_fcgi:error] [pid 1524:tid 1533] [client 20.151.113.137:35367] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 05:04:55.226419 2026] [proxy_fcgi:error] [pid 1524:tid 1548] [client 20.151.113.137:35367] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 05:04:55.437711 2026] [proxy_fcgi:error] [pid 1524:tid 1531] [client 20.151.113.137:35367] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 05:04:55.662458 2026] [proxy_fcgi:error] [pid 1524:tid 1542] [client 20.151.113.137:35367] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 05:04:55.871616 2026] [proxy_fcgi:error] [pid 1524:tid 1541] [client 20.151.113.137:35367] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 05:04:56.411364 2026] [proxy_fcgi:error] [pid 1524:tid 1537] [client 20.151.113.137:35367] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 05:04:56.625875 2026] [proxy_fcgi:error] [pid 1524:tid 1528] [client 20.151.113.137:35367] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 05:04:56.830701 2026] [:error] [pid 1524:tid 1538] [client 20.151.113.137:35367] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xsas.php"] [unique_id "achCeFoaWSl2asqQCh8OsgAAAQk"]
[Sun Mar 29 05:04:57.662879 2026] [:error] [pid 32255:tid 32297] [client 20.151.113.137:40617] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xsas.php"] [unique_id "achCeWnfn-AtRoMbquxFaAAAAEY"]
[Sun Mar 29 05:04:58.435849 2026] [:error] [pid 32255:tid 32302] [client 20.151.113.137:31908] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xsas.php"] [unique_id "achCemnfn-AtRoMbquxFagAAAEs"]
[Sun Mar 29 05:04:59.258833 2026] [:error] [pid 32255:tid 32298] [client 20.151.113.137:2051] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xsas.php"] [unique_id "achCe2nfn-AtRoMbquxFbgAAAEc"]
[Sun Mar 29 05:05:00.127537 2026] [:error] [pid 32359:tid 32383] [client 20.151.113.137:2081] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/a5.php"] [unique_id "achCfAMb8G3UzfQP3WjLCQAAANY"]
[Sun Mar 29 05:05:00.594452 2026] [:error] [pid 32254:tid 32281] [client 20.151.113.137:35331] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/a5.php"] [unique_id "achCfKug2IHuyGgCTn8M2QAAABE"]
[Sun Mar 29 05:05:01.048104 2026] [:error] [pid 1524:tid 1546] [client 20.151.113.137:29479] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/a5.php"] [unique_id "achCfVoaWSl2asqQCh8OswAAAQ8"]
[Sun Mar 29 05:05:01.525402 2026] [:error] [pid 1524:tid 1530] [client 20.151.113.137:40626] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/a5.php"] [unique_id "achCfVoaWSl2asqQCh8OtQAAAQI"]
[Sun Mar 29 05:05:01.959305 2026] [:error] [pid 32257:tid 32334] [client 20.151.113.137:34667] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-blog-header.php"] [unique_id "achCfSE3TArOFrUtgWonYQAAAJA"]
[Sun Mar 29 05:05:02.399444 2026] [:error] [pid 32359:tid 32381] [client 20.151.113.137:2091] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-blog-header.php"] [unique_id "achCfgMb8G3UzfQP3WjLDAAAANQ"]
[Sun Mar 29 05:05:02.875622 2026] [:error] [pid 32359:tid 32374] [client 20.151.113.137:32748] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-blog-header.php"] [unique_id "achCfgMb8G3UzfQP3WjLDwAAAM0"]
[Sun Mar 29 05:05:03.540553 2026] [:error] [pid 32257:tid 32318] [client 20.151.113.137:32708] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-blog-header.php"] [unique_id "achCfyE3TArOFrUtgWonZgAAAIA"]
[Sun Mar 29 05:05:04.069178 2026] [:error] [pid 32257:tid 32340] [client 20.151.113.137:2093] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/asasx.php"] [unique_id "achCgCE3TArOFrUtgWonagAAAJY"]
[Sun Mar 29 05:05:04.573958 2026] [:error] [pid 32255:tid 32308] [client 20.151.113.137:41960] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/asasx.php"] [unique_id "achCgGnfn-AtRoMbquxFdAAAAFE"]
[Sun Mar 29 05:05:05.027442 2026] [:error] [pid 32359:tid 32376] [client 20.151.113.137:32354] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/asasx.php"] [unique_id "achCgQMb8G3UzfQP3WjLEwAAAM8"]
[Sun Mar 29 05:05:05.442193 2026] [:error] [pid 1524:tid 1536] [client 20.151.113.137:35390] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/asasx.php"] [unique_id "achCgVoaWSl2asqQCh8OvQAAAQc"]
[Sun Mar 29 05:05:06.401566 2026] [:error] [pid 1524:tid 1533] [client 20.151.113.137:31100] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/file.php"] [unique_id "achCgloaWSl2asqQCh8OwAAAAQU"]
[Sun Mar 29 05:05:06.883022 2026] [:error] [pid 32359:tid 32361] [client 20.151.113.137:32331] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/file.php"] [unique_id "achCggMb8G3UzfQP3WjLFgAAAMA"]
[Sun Mar 29 05:05:07.422739 2026] [:error] [pid 1524:tid 1531] [client 20.151.113.137:32754] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/file.php"] [unique_id "achCg1oaWSl2asqQCh8OwgAAAQM"]
[Sun Mar 29 05:05:08.006938 2026] [:error] [pid 32257:tid 32319] [client 20.151.113.137:2086] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/file.php"] [unique_id "achChCE3TArOFrUtgWondQAAAIE"]
[Sun Mar 29 05:05:08.427487 2026] [:error] [pid 1524:tid 1535] [client 20.151.113.137:41952] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/public/vx.php"] [unique_id "achChFoaWSl2asqQCh8OyAAAAQY"]
[Sun Mar 29 05:05:08.933942 2026] [:error] [pid 32359:tid 32365] [client 20.151.113.137:40610] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/public/vx.php"] [unique_id "achChAMb8G3UzfQP3WjLGgAAAMQ"]
[Sun Mar 29 05:05:09.431949 2026] [:error] [pid 32359:tid 32367] [client 20.151.113.137:32720] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/public/vx.php"] [unique_id "achChQMb8G3UzfQP3WjLHgAAAMY"]
[Sun Mar 29 05:05:09.899845 2026] [:error] [pid 32257:tid 32328] [client 20.151.113.137:29442] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/public/vx.php"] [unique_id "achChSE3TArOFrUtgWoneAAAAIo"]
[Sun Mar 29 05:05:10.316110 2026] [:error] [pid 32255:tid 32301] [client 20.151.113.137:2068] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/sale.php"] [unique_id "achChmnfn-AtRoMbquxFdgAAAEo"]
[Sun Mar 29 05:05:10.839818 2026] [:error] [pid 32359:tid 32373] [client 20.151.113.137:32344] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/sale.php"] [unique_id "achChgMb8G3UzfQP3WjLJQAAAMw"]
[Sun Mar 29 05:05:11.268546 2026] [:error] [pid 32254:tid 32284] [client 20.151.113.137:32726] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/sale.php"] [unique_id "achCh6ug2IHuyGgCTn8M3gAAABQ"]
[Sun Mar 29 05:05:11.685328 2026] [:error] [pid 1524:tid 1552] [client 20.151.113.137:35334] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/sale.php"] [unique_id "achCh1oaWSl2asqQCh8OzQAAARQ"]
[Sun Mar 29 05:05:12.128309 2026] [:error] [pid 1524:tid 1547] [client 20.151.113.137:29469] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/kj.php"] [unique_id "achCiFoaWSl2asqQCh8O0AAAARA"]
[Sun Mar 29 05:05:12.671602 2026] [:error] [pid 32255:tid 32297] [client 20.151.113.137:29487] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/kj.php"] [unique_id "achCiGnfn-AtRoMbquxFegAAAEY"]
[Sun Mar 29 05:05:13.120540 2026] [:error] [pid 32359:tid 32372] [client 20.151.113.137:36307] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/kj.php"] [unique_id "achCiQMb8G3UzfQP3WjLLAAAAMs"]
[Sun Mar 29 05:05:13.535365 2026] [:error] [pid 32359:tid 32385] [client 20.151.113.137:32750] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/kj.php"] [unique_id "achCiQMb8G3UzfQP3WjLLwAAANg"]
[Sun Mar 29 05:05:13.972249 2026] [:error] [pid 32254:tid 32283] [client 20.151.113.137:2075] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/2ksm17n.php"] [unique_id "achCiaug2IHuyGgCTn8M4QAAABM"]
[Sun Mar 29 05:05:14.514752 2026] [:error] [pid 32254:tid 32270] [client 20.151.113.137:32326] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/2ksm17n.php"] [unique_id "achCiqug2IHuyGgCTn8M4wAAAAY"]
[Sun Mar 29 05:05:14.971991 2026] [:error] [pid 32255:tid 32314] [client 20.151.113.137:34654] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/2ksm17n.php"] [unique_id "achCimnfn-AtRoMbquxFfQAAAFc"]
[Sun Mar 29 05:05:15.397797 2026] [:error] [pid 32257:tid 32335] [client 20.151.113.137:31101] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/2ksm17n.php"] [unique_id "achCiyE3TArOFrUtgWonewAAAJE"]
[Sun Mar 29 05:05:15.999438 2026] [:error] [pid 32255:tid 32310] [client 20.151.113.137:41958] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/about.php"] [unique_id "achCi2nfn-AtRoMbquxFgQAAAFM"]
[Sun Mar 29 05:05:16.461806 2026] [:error] [pid 32257:tid 32341] [client 20.151.113.137:41930] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/about.php"] [unique_id "achCjCE3TArOFrUtgWonfgAAAJc"]
[Sun Mar 29 05:05:16.893995 2026] [:error] [pid 32255:tid 32300] [client 20.151.113.137:2059] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/about.php"] [unique_id "achCjGnfn-AtRoMbquxFhAAAAEk"]
[Sun Mar 29 05:05:17.312499 2026] [:error] [pid 32257:tid 32326] [client 20.151.113.137:2074] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/about.php"] [unique_id "achCjSE3TArOFrUtgWonggAAAIg"]
[Sun Mar 29 05:05:17.737988 2026] [:error] [pid 32257:tid 32336] [client 20.151.113.137:34676] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/hots.php"] [unique_id "achCjSE3TArOFrUtgWonhAAAAJI"]
[Sun Mar 29 05:05:18.174964 2026] [:error] [pid 32359:tid 32366] [client 20.151.113.137:32343] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/hots.php"] [unique_id "achCjgMb8G3UzfQP3WjLMwAAAMU"]
[Sun Mar 29 05:05:18.605477 2026] [:error] [pid 32257:tid 32328] [client 20.151.113.137:34656] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/hots.php"] [unique_id "achCjiE3TArOFrUtgWoniQAAAIo"]
[Sun Mar 29 05:05:19.088164 2026] [:error] [pid 32359:tid 32361] [client 20.151.113.137:31884] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/hots.php"] [unique_id "achCjwMb8G3UzfQP3WjLNAAAAMA"]
[Sun Mar 29 05:05:19.510790 2026] [:error] [pid 1524:tid 1528] [client 20.151.113.137:31896] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp5.php"] [unique_id "achCj1oaWSl2asqQCh8O3AAAAQE"]
[Sun Mar 29 05:05:19.956651 2026] [:error] [pid 1524:tid 1553] [client 20.151.113.137:32368] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp5.php"] [unique_id "achCj1oaWSl2asqQCh8O4AAAARU"]
[Sun Mar 29 05:05:20.380506 2026] [:error] [pid 32257:tid 32331] [client 20.151.113.137:40623] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp5.php"] [unique_id "achCkCE3TArOFrUtgWonjQAAAI0"]
[Sun Mar 29 05:05:20.967099 2026] [:error] [pid 32257:tid 32335] [client 20.151.113.137:2049] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp5.php"] [unique_id "achCkCE3TArOFrUtgWonjwAAAJE"]
[Sun Mar 29 05:05:21.404184 2026] [:error] [pid 32257:tid 32327] [client 20.151.113.137:32731] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ioxi-o.php"] [unique_id "achCkSE3TArOFrUtgWonkwAAAIk"]
[Sun Mar 29 05:05:21.847584 2026] [:error] [pid 32257:tid 32339] [client 20.151.113.137:31911] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ioxi-o.php"] [unique_id "achCkSE3TArOFrUtgWonlwAAAJU"]
[Sun Mar 29 05:05:22.273539 2026] [:error] [pid 32257:tid 32336] [client 20.151.113.137:35350] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ioxi-o.php"] [unique_id "achCkiE3TArOFrUtgWonmQAAAJI"]
[Sun Mar 29 05:05:22.707828 2026] [:error] [pid 32254:tid 32286] [client 20.151.113.137:54310] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ioxi-o.php"] [unique_id "achCkqug2IHuyGgCTn8M6AAAABY"]
[Sun Mar 29 05:05:23.154627 2026] [:error] [pid 32255:tid 32301] [client 20.151.113.137:41950] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/66.php"] [unique_id "achCk2nfn-AtRoMbquxFiQAAAEo"]
[Sun Mar 29 05:05:23.583917 2026] [:error] [pid 32257:tid 32321] [client 20.151.113.137:41969] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/66.php"] [unique_id "achCkyE3TArOFrUtgWonmwAAAIM"]
[Sun Mar 29 05:05:23.996276 2026] [:error] [pid 32257:tid 32337] [client 20.151.113.137:2073] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/66.php"] [unique_id "achCkyE3TArOFrUtgWonngAAAJM"]
[Sun Mar 29 05:05:24.459276 2026] [:error] [pid 32255:tid 32298] [client 20.151.113.137:32323] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/66.php"] [unique_id "achClGnfn-AtRoMbquxFjAAAAEc"]
[Sun Mar 29 05:05:24.956768 2026] [:error] [pid 32255:tid 32294] [client 20.151.113.137:47863] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "achClGnfn-AtRoMbquxFkAAAAEM"]
[Sun Mar 29 05:05:25.369453 2026] [:error] [pid 32255:tid 32307] [client 20.151.113.137:34624] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "achClWnfn-AtRoMbquxFkQAAAFA"]
[Sun Mar 29 05:05:25.804273 2026] [:error] [pid 32254:tid 32285] [client 20.151.113.137:40598] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "achClaug2IHuyGgCTn8M7QAAABU"]
[Sun Mar 29 05:05:26.253314 2026] [:error] [pid 32257:tid 32329] [client 20.151.113.137:31877] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "achCliE3TArOFrUtgWonowAAAIs"]
[Sun Mar 29 05:05:26.667866 2026] [:error] [pid 32255:tid 32309] [client 20.151.113.137:31912] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/amax.php"] [unique_id "achClmnfn-AtRoMbquxFlAAAAFI"]
[Sun Mar 29 05:05:27.083985 2026] [:error] [pid 1524:tid 1542] [client 20.151.113.137:40602] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/amax.php"] [unique_id "achCl1oaWSl2asqQCh8O7QAAAQs"]
[Sun Mar 29 05:05:27.541712 2026] [:error] [pid 32257:tid 32330] [client 20.151.113.137:34638] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/amax.php"] [unique_id "achClyE3TArOFrUtgWonpgAAAIw"]
[Sun Mar 29 05:05:27.955812 2026] [:error] [pid 1524:tid 1532] [client 20.151.113.137:31898] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/amax.php"] [unique_id "achCl1oaWSl2asqQCh8O8gAAAQQ"]
[Sun Mar 29 05:05:28.382428 2026] [:error] [pid 32257:tid 32342] [client 20.151.113.137:34647] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/dass.php"] [unique_id "achCmCE3TArOFrUtgWonqwAAAJg"]
[Sun Mar 29 05:05:28.810906 2026] [:error] [pid 1524:tid 1545] [client 20.151.113.137:32717] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/dass.php"] [unique_id "achCmFoaWSl2asqQCh8O9wAAAQ4"]
[Sun Mar 29 05:05:29.282336 2026] [:error] [pid 32255:tid 32311] [client 20.151.113.137:34659] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/dass.php"] [unique_id "achCmWnfn-AtRoMbquxFlwAAAFQ"]
[Sun Mar 29 05:05:29.697471 2026] [:error] [pid 1524:tid 1547] [client 20.151.113.137:40022] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/dass.php"] [unique_id "achCmVoaWSl2asqQCh8O-gAAARA"]
[Sun Mar 29 05:05:30.250289 2026] [:error] [pid 32359:tid 32370] [client 20.151.113.137:32362] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/fs.php"] [unique_id "achCmgMb8G3UzfQP3WjLOQAAAMk"]
[Sun Mar 29 05:05:30.718403 2026] [:error] [pid 32257:tid 32329] [client 20.151.113.137:40599] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/fs.php"] [unique_id "achCmiE3TArOFrUtgWonswAAAIs"]
[Sun Mar 29 05:05:31.143405 2026] [:error] [pid 32257:tid 32324] [client 20.151.113.137:2094] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/fs.php"] [unique_id "achCmyE3TArOFrUtgWontwAAAIY"]
[Sun Mar 29 05:05:31.636138 2026] [:error] [pid 32255:tid 32291] [client 20.151.113.137:40593] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/fs.php"] [unique_id "achCm2nfn-AtRoMbquxFmwAAAEA"]
[Sun Mar 29 05:05:32.082139 2026] [:error] [pid 32257:tid 32341] [client 20.151.113.137:31932] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws83.php"] [unique_id "achCnCE3TArOFrUtgWonuwAAAJc"]
[Sun Mar 29 05:05:32.520089 2026] [:error] [pid 32257:tid 32334] [client 20.151.113.137:2070] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws83.php"] [unique_id "achCnCE3TArOFrUtgWonvQAAAJA"]
[Sun Mar 29 05:05:32.940453 2026] [:error] [pid 32257:tid 32320] [client 20.151.113.137:31900] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws83.php"] [unique_id "achCnCE3TArOFrUtgWonwAAAAII"]
[Sun Mar 29 05:05:33.387358 2026] [:error] [pid 32257:tid 32340] [client 20.151.113.137:40607] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws83.php"] [unique_id "achCnSE3TArOFrUtgWonxQAAAJY"]
[Sun Mar 29 05:05:33.834087 2026] [:error] [pid 32255:tid 32292] [client 20.151.113.137:29453] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/56c53.php"] [unique_id "achCnWnfn-AtRoMbquxFnAAAAEE"]
[Sun Mar 29 05:05:34.414619 2026] [:error] [pid 32254:tid 32274] [client 20.151.113.137:31049] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/56c53.php"] [unique_id "achCnqug2IHuyGgCTn8M8QAAAAo"]
[Sun Mar 29 05:05:34.958818 2026] [:error] [pid 32255:tid 32296] [client 20.151.113.137:29863] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/56c53.php"] [unique_id "achCnmnfn-AtRoMbquxFnwAAAEU"]
[Sun Mar 29 05:05:35.381115 2026] [:error] [pid 1524:tid 1535] [client 20.151.113.137:31916] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/56c53.php"] [unique_id "achCn1oaWSl2asqQCh8PAQAAAQY"]
[Sun Mar 29 05:05:35.797657 2026] [:error] [pid 32254:tid 32264] [client 20.151.113.137:40591] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ms-edit.php"] [unique_id "achCn6ug2IHuyGgCTn8M8gAAAAA"]
[Sun Mar 29 05:05:36.361176 2026] [:error] [pid 32255:tid 32314] [client 20.151.113.137:2098] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ms-edit.php"] [unique_id "achCoGnfn-AtRoMbquxFoAAAAFc"]
[Sun Mar 29 05:05:36.908921 2026] [:error] [pid 32257:tid 32323] [client 20.151.113.137:2056] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ms-edit.php"] [unique_id "achCoCE3TArOFrUtgWonywAAAIU"]
[Sun Mar 29 05:05:37.336509 2026] [:error] [pid 32255:tid 32295] [client 20.151.113.137:32359] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ms-edit.php"] [unique_id "achCoWnfn-AtRoMbquxFpAAAAEQ"]
[Sun Mar 29 05:05:37.812807 2026] [:error] [pid 1524:tid 1532] [client 20.151.113.137:29452] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/grsiuk.php"] [unique_id "achCoVoaWSl2asqQCh8PBAAAAQQ"]
[Sun Mar 29 05:05:38.934803 2026] [:error] [pid 32254:tid 32278] [client 20.151.113.137:32325] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/grsiuk.php"] [unique_id "achCoqug2IHuyGgCTn8M9QAAAA4"]
[Sun Mar 29 05:06:08.459728 2026] [proxy_fcgi:error] [pid 32257:tid 32329] [client 20.151.113.137:40027] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 05:06:08.744273 2026] [proxy_fcgi:error] [pid 32257:tid 32320] [client 20.151.113.137:40027] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 05:06:09.091071 2026] [proxy_fcgi:error] [pid 32257:tid 32323] [client 20.151.113.137:40027] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 05:06:09.370793 2026] [proxy_fcgi:error] [pid 32257:tid 32330] [client 20.151.113.137:40027] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 05:06:09.610519 2026] [proxy_fcgi:error] [pid 32257:tid 32338] [client 20.151.113.137:40027] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 05:06:09.835878 2026] [proxy_fcgi:error] [pid 32257:tid 32328] [client 20.151.113.137:40027] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 05:06:10.080251 2026] [proxy_fcgi:error] [pid 32257:tid 32325] [client 20.151.113.137:40027] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 05:06:11.048060 2026] [proxy_fcgi:error] [pid 32257:tid 32329] [client 20.151.113.137:40027] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 05:06:11.259044 2026] [proxy_fcgi:error] [pid 32257:tid 32327] [client 20.151.113.137:40027] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 05:06:11.469950 2026] [proxy_fcgi:error] [pid 32257:tid 32340] [client 20.151.113.137:40027] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 05:06:11.696020 2026] [proxy_fcgi:error] [pid 32257:tid 32322] [client 20.151.113.137:40027] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 05:06:12.022272 2026] [:error] [pid 32257:tid 32326] [client 20.151.113.137:40027] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/hplfuns.php"] [unique_id "achCxCE3TArOFrUtgWooFQAAAIg"]
[Sun Mar 29 05:06:12.451733 2026] [:error] [pid 32359:tid 32379] [client 20.151.113.137:41945] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/hplfuns.php"] [unique_id "achCxAMb8G3UzfQP3WjLagAAANI"]
[Sun Mar 29 05:06:13.087856 2026] [:error] [pid 1524:tid 1544] [client 20.151.113.137:41977] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/hplfuns.php"] [unique_id "achCxVoaWSl2asqQCh8PQQAAAQ0"]
[Sun Mar 29 05:06:13.698816 2026] [:error] [pid 32257:tid 32321] [client 20.151.113.137:40625] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/hplfuns.php"] [unique_id "achCxSE3TArOFrUtgWooGAAAAIM"]
[Sun Mar 29 05:06:14.180479 2026] [:error] [pid 32359:tid 32378] [client 20.151.113.137:31085] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "achCxgMb8G3UzfQP3WjLbQAAANE"]
[Sun Mar 29 05:06:14.724653 2026] [:error] [pid 32257:tid 32341] [client 20.151.113.137:2104] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "achCxiE3TArOFrUtgWooGQAAAJc"]
[Sun Mar 29 05:06:15.341114 2026] [:error] [pid 32359:tid 32376] [client 20.151.113.137:2103] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "achCxwMb8G3UzfQP3WjLbwAAAM8"]
[Sun Mar 29 05:06:15.974493 2026] [:error] [pid 32257:tid 32329] [client 20.151.113.137:35373] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "achCxyE3TArOFrUtgWooGgAAAIs"]
[Sun Mar 29 05:06:16.520989 2026] [:error] [pid 32257:tid 32318] [client 20.151.113.137:29824] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/uuu.php"] [unique_id "achCyCE3TArOFrUtgWooHAAAAIA"]
[Sun Mar 29 05:06:17.015172 2026] [:error] [pid 1524:tid 1533] [client 20.151.113.137:41974] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/uuu.php"] [unique_id "achCyVoaWSl2asqQCh8PTQAAAQU"]
[Sun Mar 29 05:06:17.582608 2026] [:error] [pid 32359:tid 32364] [client 20.151.113.137:35375] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/uuu.php"] [unique_id "achCyQMb8G3UzfQP3WjLcwAAAMM"]
[Sun Mar 29 05:06:18.087195 2026] [:error] [pid 32359:tid 32383] [client 20.151.113.137:31880] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/uuu.php"] [unique_id "achCygMb8G3UzfQP3WjLdAAAANY"]
[Sun Mar 29 05:06:18.523801 2026] [:error] [pid 1524:tid 1547] [client 20.151.113.137:34675] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws81.php"] [unique_id "achCyloaWSl2asqQCh8PVAAAARA"]
[Sun Mar 29 05:06:19.073365 2026] [:error] [pid 1524:tid 1555] [client 20.151.113.137:40592] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws81.php"] [unique_id "achCy1oaWSl2asqQCh8PVQAAARc"]
[Sun Mar 29 05:06:19.739096 2026] [:error] [pid 1524:tid 1556] [client 20.151.113.137:2526] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws81.php"] [unique_id "achCy1oaWSl2asqQCh8PVwAAARg"]
[Sun Mar 29 05:06:20.193534 2026] [:error] [pid 1524:tid 1537] [client 20.151.113.137:2057] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws81.php"] [unique_id "achCzFoaWSl2asqQCh8PWAAAAQg"]
[Sun Mar 29 05:06:20.906939 2026] [:error] [pid 32359:tid 32379] [client 20.151.113.137:35338] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/public/ws49.php"] [unique_id "achCzAMb8G3UzfQP3WjLeQAAANI"]
[Sun Mar 29 05:06:21.550406 2026] [:error] [pid 1524:tid 1552] [client 20.151.113.137:29474] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/public/ws49.php"] [unique_id "achCzVoaWSl2asqQCh8PXAAAARQ"]
[Sun Mar 29 05:06:22.051468 2026] [:error] [pid 1524:tid 1547] [client 20.151.113.137:31054] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/public/ws49.php"] [unique_id "achCzloaWSl2asqQCh8PXQAAARA"]
[Sun Mar 29 05:06:22.795381 2026] [:error] [pid 1524:tid 1545] [client 20.151.113.137:32339] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/public/ws49.php"] [unique_id "achCzloaWSl2asqQCh8PXwAAAQ4"]
[Sun Mar 29 05:06:24.003319 2026] [:error] [pid 32255:tid 32297] [client 20.151.113.137:40581] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/gfd.php"] [unique_id "achC0Gnfn-AtRoMbquxFxgAAAEY"]
[Sun Mar 29 05:06:24.876635 2026] [:error] [pid 32359:tid 32376] [client 20.151.113.137:29441] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/gfd.php"] [unique_id "achC0AMb8G3UzfQP3WjLfAAAAM8"]
[Sun Mar 29 05:06:25.462539 2026] [:error] [pid 32359:tid 32372] [client 20.151.113.137:29482] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/gfd.php"] [unique_id "achC0QMb8G3UzfQP3WjLgAAAAMs"]
[Sun Mar 29 05:06:25.976544 2026] [:error] [pid 32359:tid 32361] [client 20.151.113.137:32760] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/gfd.php"] [unique_id "achC0QMb8G3UzfQP3WjLggAAAMA"]
[Sun Mar 29 05:06:26.498753 2026] [:error] [pid 32257:tid 32319] [client 20.151.113.137:29458] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/abrand.php"] [unique_id "achC0iE3TArOFrUtgWooMAAAAIE"]
[Sun Mar 29 05:06:27.066109 2026] [:error] [pid 32255:tid 32296] [client 20.151.113.137:32365] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/abrand.php"] [unique_id "achC02nfn-AtRoMbquxFywAAAEU"]
[Sun Mar 29 05:06:27.533035 2026] [:error] [pid 32255:tid 32303] [client 20.151.113.137:29455] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/abrand.php"] [unique_id "achC02nfn-AtRoMbquxFzQAAAEw"]
[Sun Mar 29 05:06:28.157975 2026] [:error] [pid 32255:tid 32309] [client 20.151.113.137:40047] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/abrand.php"] [unique_id "achC1Gnfn-AtRoMbquxF0AAAAFI"]
[Sun Mar 29 05:06:28.694440 2026] [:error] [pid 32257:tid 32340] [client 20.151.113.137:32733] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/amp.php"] [unique_id "achC1CE3TArOFrUtgWooNwAAAJY"]
[Sun Mar 29 05:06:29.229230 2026] [:error] [pid 32257:tid 32326] [client 20.151.113.137:31901] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/amp.php"] [unique_id "achC1SE3TArOFrUtgWooOAAAAIg"]
[Sun Mar 29 05:06:29.788169 2026] [:error] [pid 32255:tid 32305] [client 20.151.113.137:29444] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/amp.php"] [unique_id "achC1Wnfn-AtRoMbquxF1AAAAE4"]
[Sun Mar 29 05:06:30.734566 2026] [:error] [pid 32359:tid 32381] [client 20.151.113.137:40608] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/amp.php"] [unique_id "achC1gMb8G3UzfQP3WjLhQAAANQ"]
[Sun Mar 29 05:06:31.268332 2026] [:error] [pid 1524:tid 1533] [client 20.151.113.137:34641] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws75.php"] [unique_id "achC11oaWSl2asqQCh8PYwAAAQU"]
[Sun Mar 29 05:06:31.702508 2026] [:error] [pid 1524:tid 1546] [client 20.151.113.137:34679] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws75.php"] [unique_id "achC11oaWSl2asqQCh8PZwAAAQ8"]
[Sun Mar 29 05:06:32.121624 2026] [:error] [pid 32359:tid 32365] [client 20.151.113.137:31071] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws75.php"] [unique_id "achC2AMb8G3UzfQP3WjLiAAAAMQ"]
[Sun Mar 29 05:06:32.629913 2026] [:error] [pid 32359:tid 32373] [client 20.151.113.137:41948] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws75.php"] [unique_id "achC2AMb8G3UzfQP3WjLiQAAAMw"]
[Sun Mar 29 05:06:33.053648 2026] [:error] [pid 32254:tid 32277] [client 20.151.113.137:31882] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/install.php"] [unique_id "achC2aug2IHuyGgCTn8NLgAAAA0"]
[Sun Mar 29 05:06:33.471220 2026] [:error] [pid 32254:tid 32268] [client 20.151.113.137:32761] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/install.php"] [unique_id "achC2aug2IHuyGgCTn8NLwAAAAQ"]
[Sun Mar 29 05:06:33.925694 2026] [:error] [pid 32255:tid 32311] [client 20.151.113.137:34660] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/install.php"] [unique_id "achC2Wnfn-AtRoMbquxF2wAAAFQ"]
[Sun Mar 29 05:06:34.351033 2026] [:error] [pid 32254:tid 32281] [client 20.151.113.137:32749] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/install.php"] [unique_id "achC2qug2IHuyGgCTn8NMQAAABE"]
[Sun Mar 29 05:06:35.332768 2026] [:error] [pid 32255:tid 32305] [client 20.151.113.137:32352] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/maul.php"] [unique_id "achC22nfn-AtRoMbquxF3AAAAE4"]
[Sun Mar 29 05:06:35.851195 2026] [:error] [pid 32255:tid 32315] [client 20.151.113.137:35344] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/maul.php"] [unique_id "achC22nfn-AtRoMbquxF3QAAAFg"]
[Sun Mar 29 05:06:36.400819 2026] [:error] [pid 32257:tid 32318] [client 20.151.113.137:31918] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/maul.php"] [unique_id "achC3CE3TArOFrUtgWooQwAAAIA"]
[Sun Mar 29 05:06:37.015805 2026] [:error] [pid 32257:tid 32340] [client 20.151.113.137:34665] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/maul.php"] [unique_id "achC3SE3TArOFrUtgWooRgAAAJY"]
[Sun Mar 29 05:06:37.596738 2026] [:error] [pid 32359:tid 32382] [client 20.151.113.137:41978] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/lowpr.php"] [unique_id "achC3QMb8G3UzfQP3WjLkQAAANU"]
[Sun Mar 29 05:06:38.038258 2026] [:error] [pid 32359:tid 32374] [client 20.151.113.137:54272] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/lowpr.php"] [unique_id "achC3gMb8G3UzfQP3WjLlQAAAM0"]
[Sun Mar 29 05:06:38.508964 2026] [:error] [pid 32257:tid 32323] [client 20.151.113.137:52465] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/lowpr.php"] [unique_id "achC3iE3TArOFrUtgWooSQAAAIU"]
[Sun Mar 29 05:06:38.938338 2026] [:error] [pid 32257:tid 32335] [client 20.151.113.137:32370] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/lowpr.php"] [unique_id "achC3iE3TArOFrUtgWooSgAAAJE"]
[Sun Mar 29 05:06:39.378734 2026] [:error] [pid 32257:tid 32336] [client 20.151.113.137:29492] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/b.php"] [unique_id "achC3yE3TArOFrUtgWooTgAAAJI"]
[Sun Mar 29 05:06:39.949853 2026] [:error] [pid 32257:tid 32328] [client 20.151.113.137:31076] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/b.php"] [unique_id "achC3yE3TArOFrUtgWooUAAAAIo"]
[Sun Mar 29 05:06:40.505041 2026] [:error] [pid 32254:tid 32265] [client 20.151.113.137:32740] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/b.php"] [unique_id "achC4Kug2IHuyGgCTn8NNQAAAAE"]
[Sun Mar 29 05:06:41.112531 2026] [:error] [pid 32254:tid 32287] [client 20.151.113.137:47833] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/b.php"] [unique_id "achC4aug2IHuyGgCTn8NNwAAABc"]
[Sun Mar 29 05:06:41.527163 2026] [:error] [pid 32257:tid 32340] [client 20.151.113.137:31061] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/166.php"] [unique_id "achC4SE3TArOFrUtgWooVgAAAJY"]
[Sun Mar 29 05:06:41.971650 2026] [:error] [pid 32359:tid 32374] [client 20.151.113.137:40634] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/166.php"] [unique_id "achC4QMb8G3UzfQP3WjLnAAAAM0"]
[Sun Mar 29 05:06:42.450191 2026] [:error] [pid 32257:tid 32334] [client 20.151.113.137:32743] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/166.php"] [unique_id "achC4iE3TArOFrUtgWooWQAAAJA"]
[Sun Mar 29 05:06:42.888122 2026] [:error] [pid 32257:tid 32327] [client 20.151.113.137:2105] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/166.php"] [unique_id "achC4iE3TArOFrUtgWooWwAAAIk"]
[Sun Mar 29 05:06:43.404154 2026] [:error] [pid 32359:tid 32384] [client 20.151.113.137:29480] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/domains.php"] [unique_id "achC4wMb8G3UzfQP3WjLnwAAANc"]
[Sun Mar 29 05:06:44.007052 2026] [:error] [pid 32359:tid 32378] [client 20.151.113.137:29443] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/domains.php"] [unique_id "achC5AMb8G3UzfQP3WjLowAAANE"]
[Sun Mar 29 05:06:44.517710 2026] [:error] [pid 32257:tid 32342] [client 20.151.113.137:47847] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/domains.php"] [unique_id "achC5CE3TArOFrUtgWooXAAAAJg"]
[Sun Mar 29 05:06:45.208837 2026] [:error] [pid 1524:tid 1543] [client 20.151.113.137:29486] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/domains.php"] [unique_id "achC5VoaWSl2asqQCh8PdAAAAQw"]
[Sun Mar 29 05:06:45.660549 2026] [:error] [pid 1524:tid 1545] [client 20.151.113.137:29448] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws85.php"] [unique_id "achC5VoaWSl2asqQCh8PdwAAAQ4"]
[Sun Mar 29 05:06:46.493230 2026] [:error] [pid 32257:tid 32332] [client 20.151.113.137:41980] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws85.php"] [unique_id "achC5iE3TArOFrUtgWooZQAAAI4"]
[Sun Mar 29 05:06:47.186981 2026] [:error] [pid 32257:tid 32328] [client 20.151.113.137:2050] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws85.php"] [unique_id "achC5yE3TArOFrUtgWooaAAAAIo"]
[Sun Mar 29 05:06:47.752223 2026] [:error] [pid 32257:tid 32331] [client 20.151.113.137:54276] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws85.php"] [unique_id "achC5yE3TArOFrUtgWooawAAAI0"]
[Sun Mar 29 05:06:48.187285 2026] [:error] [pid 32359:tid 32385] [client 20.151.113.137:34645] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-act.php"] [unique_id "achC6AMb8G3UzfQP3WjLpwAAANg"]
[Sun Mar 29 05:06:48.776316 2026] [:error] [pid 32257:tid 32342] [client 20.151.113.137:41932] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-act.php"] [unique_id "achC6CE3TArOFrUtgWoobAAAAJg"]
[Sun Mar 29 05:06:49.357468 2026] [:error] [pid 32359:tid 32376] [client 20.151.113.137:2518] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-act.php"] [unique_id "achC6QMb8G3UzfQP3WjLqQAAAM8"]
[Sun Mar 29 05:06:49.865140 2026] [:error] [pid 32254:tid 32283] [client 20.151.113.137:2096] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-act.php"] [unique_id "achC6aug2IHuyGgCTn8NOQAAABM"]
[Sun Mar 29 05:06:50.587557 2026] [:error] [pid 32359:tid 32366] [client 20.151.113.137:34666] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/hehe.php"] [unique_id "achC6gMb8G3UzfQP3WjLrAAAAMU"]
[Sun Mar 29 05:06:51.305959 2026] [:error] [pid 1524:tid 1530] [client 20.151.113.137:40622] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/hehe.php"] [unique_id "achC61oaWSl2asqQCh8PgQAAAQI"]
[Sun Mar 29 05:06:52.043472 2026] [:error] [pid 1524:tid 1551] [client 20.151.113.137:41954] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/hehe.php"] [unique_id "achC7FoaWSl2asqQCh8PgwAAARM"]
[Sun Mar 29 05:06:53.387445 2026] [:error] [pid 32255:tid 32295] [client 20.151.113.137:40614] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/hehe.php"] [unique_id "achC7Wnfn-AtRoMbquxF7QAAAEQ"]
[Sun Mar 29 05:06:54.379398 2026] [:error] [pid 32254:tid 32273] [client 20.151.113.137:40632] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/tfm.php"] [unique_id "achC7qug2IHuyGgCTn8NQAAAAAk"]
[Sun Mar 29 05:06:55.270887 2026] [:error] [pid 32359:tid 32382] [client 20.151.113.137:31899] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/tfm.php"] [unique_id "achC7wMb8G3UzfQP3WjLswAAANU"]
[Sun Mar 29 05:06:55.847110 2026] [:error] [pid 32257:tid 32335] [client 20.151.113.137:41936] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/tfm.php"] [unique_id "achC7yE3TArOFrUtgWoofgAAAJE"]
[Sun Mar 29 05:06:56.320745 2026] [:error] [pid 32257:tid 32336] [client 20.151.113.137:35333] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/tfm.php"] [unique_id "achC8CE3TArOFrUtgWoogQAAAJI"]
[Sun Mar 29 05:06:56.928607 2026] [:error] [pid 32257:tid 32334] [client 20.151.113.137:29456] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ne2026.php"] [unique_id "achC8CE3TArOFrUtgWoohAAAAJA"]
[Sun Mar 29 05:06:57.799780 2026] [:error] [pid 32359:tid 32377] [client 20.151.113.137:2102] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ne2026.php"] [unique_id "achC8QMb8G3UzfQP3WjLvQAAANA"]
[Sun Mar 29 05:06:58.268020 2026] [:error] [pid 32254:tid 32269] [client 20.151.113.137:29828] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ne2026.php"] [unique_id "achC8qug2IHuyGgCTn8NRAAAAAU"]
[Sun Mar 29 05:06:58.775787 2026] [:error] [pid 32359:tid 32372] [client 20.151.113.137:31056] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ne2026.php"] [unique_id "achC8gMb8G3UzfQP3WjLvwAAAMs"]
[Sun Mar 29 05:06:59.435708 2026] [:error] [pid 32257:tid 32329] [client 20.151.113.137:40624] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws73.php"] [unique_id "achC8yE3TArOFrUtgWooiQAAAIs"]
[Sun Mar 29 05:06:59.853644 2026] [:error] [pid 32257:tid 32340] [client 20.151.113.137:32758] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws73.php"] [unique_id "achC8yE3TArOFrUtgWoojQAAAJY"]
[Sun Mar 29 05:07:00.425187 2026] [:error] [pid 32255:tid 32291] [client 20.151.113.137:35341] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws73.php"] [unique_id "achC9Gnfn-AtRoMbquxF7gAAAEA"]
[Sun Mar 29 05:07:01.108093 2026] [:error] [pid 32255:tid 32296] [client 20.151.113.137:35328] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws73.php"] [unique_id "achC9Wnfn-AtRoMbquxF8AAAAEU"]
[Sun Mar 29 05:07:01.617659 2026] [:error] [pid 32257:tid 32336] [client 20.151.113.137:47857] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws84.php"] [unique_id "achC9SE3TArOFrUtgWookAAAAJI"]
[Sun Mar 29 05:07:02.107818 2026] [:error] [pid 32359:tid 32380] [client 20.151.113.137:29845] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws84.php"] [unique_id "achC9gMb8G3UzfQP3WjLyQAAANM"]
[Sun Mar 29 05:07:02.566324 2026] [:error] [pid 32257:tid 32322] [client 20.151.113.137:40576] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws84.php"] [unique_id "achC9iE3TArOFrUtgWookwAAAIQ"]
[Sun Mar 29 05:07:03.008320 2026] [:error] [pid 32257:tid 32328] [client 20.151.113.137:40635] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws84.php"] [unique_id "achC9yE3TArOFrUtgWoolQAAAIo"]
[Sun Mar 29 05:07:03.506923 2026] [:error] [pid 32254:tid 32277] [client 20.151.113.137:52460] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/baixy.php"] [unique_id "achC96ug2IHuyGgCTn8NRwAAAA0"]
[Sun Mar 29 05:07:03.937582 2026] [:error] [pid 32254:tid 32268] [client 20.151.113.137:41982] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/baixy.php"] [unique_id "achC96ug2IHuyGgCTn8NSAAAAAQ"]
[Sun Mar 29 05:07:04.417772 2026] [:error] [pid 32257:tid 32321] [client 20.151.113.137:31875] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/baixy.php"] [unique_id "achC-CE3TArOFrUtgWoomAAAAIM"]
[Sun Mar 29 05:07:04.947048 2026] [:error] [pid 1524:tid 1537] [client 20.151.113.137:2087] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/baixy.php"] [unique_id "achC-FoaWSl2asqQCh8PlAAAAQg"]
[Sun Mar 29 05:07:05.621437 2026] [:error] [pid 32359:tid 32367] [client 20.151.113.137:32734] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-good.php"] [unique_id "achC-QMb8G3UzfQP3WjLzgAAAMY"]
[Sun Mar 29 05:07:06.065205 2026] [:error] [pid 1524:tid 1538] [client 20.151.113.137:41968] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-good.php"] [unique_id "achC-loaWSl2asqQCh8PnQAAAQk"]
[Sun Mar 29 05:07:06.672394 2026] [:error] [pid 32257:tid 32330] [client 20.151.113.137:31904] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-good.php"] [unique_id "achC-iE3TArOFrUtgWoonwAAAIw"]
[Sun Mar 29 05:07:07.194409 2026] [:error] [pid 32255:tid 32310] [client 20.151.113.137:2064] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-good.php"] [unique_id "achC-2nfn-AtRoMbquxF9wAAAFM"]
[Sun Mar 29 05:07:07.747314 2026] [:error] [pid 32359:tid 32382] [client 20.151.113.137:47867] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/a4.php"] [unique_id "achC-wMb8G3UzfQP3WjL2gAAANU"]
[Sun Mar 29 05:07:08.384404 2026] [:error] [pid 32254:tid 32274] [client 20.151.113.137:35371] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/a4.php"] [unique_id "achC_Kug2IHuyGgCTn8NWgAAAAo"]
[Sun Mar 29 05:07:08.821617 2026] [:error] [pid 1524:tid 1543] [client 20.151.113.137:31083] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/a4.php"] [unique_id "achC_FoaWSl2asqQCh8PtQAAAQw"]
[Sun Mar 29 05:07:09.343124 2026] [:error] [pid 1524:tid 1554] [client 20.151.113.137:40600] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/a4.php"] [unique_id "achC_VoaWSl2asqQCh8PvAAAARY"]
[Sun Mar 29 05:07:09.985904 2026] [:error] [pid 32257:tid 32333] [client 20.151.113.137:32744] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws77.php"] [unique_id "achC_SE3TArOFrUtgWoorgAAAI8"]
[Sun Mar 29 05:07:10.478847 2026] [:error] [pid 32257:tid 32328] [client 20.151.113.137:41921] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws77.php"] [unique_id "achC_iE3TArOFrUtgWootQAAAIo"]
[Sun Mar 29 05:07:10.947804 2026] [:error] [pid 32255:tid 32295] [client 20.151.113.137:31934] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws77.php"] [unique_id "achC_mnfn-AtRoMbquxF-gAAAEQ"]
[Sun Mar 29 05:07:11.458803 2026] [proxy_fcgi:error] [pid 32255:tid 32297] [client 20.151.113.137:40585] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 05:07:11.675960 2026] [proxy_fcgi:error] [pid 32255:tid 32291] [client 20.151.113.137:40585] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 05:07:11.920424 2026] [proxy_fcgi:error] [pid 32255:tid 32302] [client 20.151.113.137:40585] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 05:07:12.129172 2026] [proxy_fcgi:error] [pid 32255:tid 32296] [client 20.151.113.137:40585] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 05:07:12.337712 2026] [proxy_fcgi:error] [pid 32255:tid 32308] [client 20.151.113.137:40585] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 05:07:12.596634 2026] [proxy_fcgi:error] [pid 32255:tid 32306] [client 20.151.113.137:40585] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 05:07:12.853155 2026] [proxy_fcgi:error] [pid 32255:tid 32298] [client 20.151.113.137:40585] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 05:07:13.077165 2026] [proxy_fcgi:error] [pid 32255:tid 32300] [client 20.151.113.137:40585] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 05:07:13.286577 2026] [proxy_fcgi:error] [pid 32255:tid 32304] [client 20.151.113.137:40585] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 05:07:13.495741 2026] [proxy_fcgi:error] [pid 32255:tid 32311] [client 20.151.113.137:40585] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 05:07:13.722921 2026] [proxy_fcgi:error] [pid 32255:tid 32299] [client 20.151.113.137:40585] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 05:07:13.966402 2026] [:error] [pid 32255:tid 32305] [client 20.151.113.137:40585] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/public/file.php"] [unique_id "achDAWnfn-AtRoMbquxGDQAAAE4"]
[Sun Mar 29 05:07:14.480712 2026] [:error] [pid 32254:tid 32286] [client 20.151.113.137:2097] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/public/file.php"] [unique_id "achDAqug2IHuyGgCTn8NeQAAABY"]
[Sun Mar 29 05:07:14.891350 2026] [:error] [pid 32359:tid 32372] [client 20.151.113.137:31913] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/public/file.php"] [unique_id "achDAgMb8G3UzfQP3WjL-AAAAMs"]
[Sun Mar 29 05:07:15.441200 2026] [:error] [pid 32359:tid 32384] [client 20.151.113.137:34682] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/public/file.php"] [unique_id "achDAwMb8G3UzfQP3WjL-wAAANc"]
[Sun Mar 29 05:07:15.965769 2026] [:error] [pid 32257:tid 32328] [client 20.151.113.137:40033] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xxw.php"] [unique_id "achDAyE3TArOFrUtgWoovwAAAIo"]
[Sun Mar 29 05:07:16.639568 2026] [:error] [pid 32257:tid 32337] [client 20.151.113.137:40638] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xxw.php"] [unique_id "achDBCE3TArOFrUtgWooxQAAAJM"]
[Sun Mar 29 05:07:17.115991 2026] [:error] [pid 32254:tid 32273] [client 20.151.113.137:32716] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xxw.php"] [unique_id "achDBaug2IHuyGgCTn8NegAAAAk"]
[Sun Mar 29 05:07:17.537330 2026] [:error] [pid 1524:tid 1537] [client 20.151.113.137:2100] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xxw.php"] [unique_id "achDBVoaWSl2asqQCh8P1wAAAQg"]
[Sun Mar 29 05:07:18.079246 2026] [:error] [pid 32257:tid 32327] [client 20.151.113.137:52470] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wen.php"] [unique_id "achDBiE3TArOFrUtgWooxwAAAIk"]
[Sun Mar 29 05:07:18.572448 2026] [:error] [pid 32257:tid 32339] [client 20.151.113.137:40005] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wen.php"] [unique_id "achDBiE3TArOFrUtgWooywAAAJU"]
[Sun Mar 29 05:07:19.015595 2026] [:error] [pid 32257:tid 32328] [client 20.151.113.137:29454] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wen.php"] [unique_id "achDByE3TArOFrUtgWoo0AAAAIo"]
[Sun Mar 29 05:07:19.430459 2026] [:error] [pid 32257:tid 32327] [client 20.151.113.137:2063] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wen.php"] [unique_id "achDByE3TArOFrUtgWoo1QAAAIk"]
[Sun Mar 29 05:07:19.856670 2026] [:error] [pid 32359:tid 32379] [client 20.151.113.137:31903] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws87.php"] [unique_id "achDBwMb8G3UzfQP3WjL_gAAANI"]
[Sun Mar 29 05:07:20.398906 2026] [:error] [pid 32359:tid 32368] [client 20.151.113.137:34640] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws87.php"] [unique_id "achDCAMb8G3UzfQP3WjL_wAAAMc"]
[Sun Mar 29 05:07:20.909582 2026] [:error] [pid 32359:tid 32372] [client 20.151.113.137:31043] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws87.php"] [unique_id "achDCAMb8G3UzfQP3WjMAgAAAMs"]
[Sun Mar 29 05:07:21.387408 2026] [:error] [pid 32359:tid 32362] [client 20.151.113.137:34678] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws87.php"] [unique_id "achDCQMb8G3UzfQP3WjMAwAAAME"]
[Sun Mar 29 05:07:21.924765 2026] [:error] [pid 32359:tid 32376] [client 20.151.113.137:2547] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/lm15.php"] [unique_id "achDCQMb8G3UzfQP3WjMBwAAAM8"]
[Sun Mar 29 05:07:22.741934 2026] [:error] [pid 32359:tid 32373] [client 20.151.113.137:35365] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/lm15.php"] [unique_id "achDCgMb8G3UzfQP3WjMCwAAAMw"]
[Sun Mar 29 05:07:23.551356 2026] [:error] [pid 32254:tid 32272] [client 20.151.113.137:31055] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/lm15.php"] [unique_id "achDC6ug2IHuyGgCTn8NfgAAAAg"]
[Sun Mar 29 05:07:24.087631 2026] [:error] [pid 32359:tid 32381] [client 20.151.113.137:2067] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/lm15.php"] [unique_id "achDDAMb8G3UzfQP3WjMDgAAANQ"]
[Sun Mar 29 05:07:24.509554 2026] [:error] [pid 32255:tid 32304] [client 20.151.113.137:32349] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/green.php"] [unique_id "achDDGnfn-AtRoMbquxGFQAAAE0"]
[Sun Mar 29 05:07:24.933986 2026] [:error] [pid 1524:tid 1556] [client 20.151.113.137:31079] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/green.php"] [unique_id "achDDFoaWSl2asqQCh8P4QAAARg"]
[Sun Mar 29 05:07:25.676551 2026] [:error] [pid 32257:tid 32319] [client 20.151.113.137:31881] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/green.php"] [unique_id "achDDSE3TArOFrUtgWoo4QAAAIE"]
[Sun Mar 29 05:07:26.280242 2026] [:error] [pid 32257:tid 32323] [client 20.151.113.137:35370] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/green.php"] [unique_id "achDDiE3TArOFrUtgWoo5QAAAIU"]
[Sun Mar 29 05:07:26.707228 2026] [:error] [pid 1524:tid 1551] [client 20.151.113.137:32337] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/albin.php"] [unique_id "achDDloaWSl2asqQCh8P4wAAARM"]
[Sun Mar 29 05:07:27.266496 2026] [:error] [pid 32254:tid 32281] [client 20.151.113.137:34635] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/albin.php"] [unique_id "achDD6ug2IHuyGgCTn8NhAAAABE"]
[Sun Mar 29 05:07:27.747955 2026] [:error] [pid 32257:tid 32335] [client 20.151.113.137:35335] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/albin.php"] [unique_id "achDDyE3TArOFrUtgWoo7QAAAJE"]
[Sun Mar 29 05:07:28.579187 2026] [:error] [pid 32257:tid 32319] [client 20.151.113.137:40584] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/albin.php"] [unique_id "achDECE3TArOFrUtgWoo8gAAAIE"]
[Sun Mar 29 05:07:29.105563 2026] [:error] [pid 32255:tid 32293] [client 20.151.113.137:31060] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/inputs.php"] [unique_id "achDEWnfn-AtRoMbquxGGwAAAEI"]
[Sun Mar 29 05:07:29.612260 2026] [:error] [pid 32257:tid 32320] [client 20.151.113.137:31103] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/inputs.php"] [unique_id "achDESE3TArOFrUtgWoo8wAAAII"]
[Sun Mar 29 05:07:30.195193 2026] [:error] [pid 32254:tid 32286] [client 20.151.113.137:32376] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/inputs.php"] [unique_id "achDEqug2IHuyGgCTn8NhgAAABY"]
[Sun Mar 29 05:07:30.813053 2026] [:error] [pid 1524:tid 1541] [client 20.151.113.137:32363] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/inputs.php"] [unique_id "achDEloaWSl2asqQCh8P6QAAAQo"]
[Sun Mar 29 05:07:31.253749 2026] [:error] [pid 1524:tid 1533] [client 20.151.113.137:31077] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/inege.php"] [unique_id "achDE1oaWSl2asqQCh8P7AAAAQU"]
[Sun Mar 29 05:07:31.719648 2026] [:error] [pid 32257:tid 32332] [client 20.151.113.137:35361] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/inege.php"] [unique_id "achDEyE3TArOFrUtgWoo-QAAAI4"]
[Sun Mar 29 05:07:32.288981 2026] [:error] [pid 32255:tid 32308] [client 20.151.113.137:31052] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/inege.php"] [unique_id "achDFGnfn-AtRoMbquxGIgAAAFE"]
[Sun Mar 29 05:07:32.817709 2026] [:error] [pid 32257:tid 32338] [client 20.151.113.137:31053] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/inege.php"] [unique_id "achDFCE3TArOFrUtgWoo-gAAAJQ"]
[Sun Mar 29 05:07:33.245784 2026] [:error] [pid 1524:tid 1545] [client 20.151.113.137:32713] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/gettest.php"] [unique_id "achDFVoaWSl2asqQCh8P8AAAAQ4"]
[Sun Mar 29 05:07:33.757528 2026] [:error] [pid 32255:tid 32300] [client 20.151.113.137:40579] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/gettest.php"] [unique_id "achDFWnfn-AtRoMbquxGJgAAAEk"]
[Sun Mar 29 05:07:34.327397 2026] [:error] [pid 32254:tid 32285] [client 20.151.113.137:32350] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/gettest.php"] [unique_id "achDFqug2IHuyGgCTn8NiwAAABU"]
[Sun Mar 29 05:07:34.796301 2026] [:error] [pid 32257:tid 32342] [client 20.151.113.137:41929] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/gettest.php"] [unique_id "achDFiE3TArOFrUtgWoo_QAAAJg"]
[Sun Mar 29 05:07:35.241924 2026] [:error] [pid 32254:tid 32264] [client 20.151.113.137:41925] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ccs.php"] [unique_id "achDF6ug2IHuyGgCTn8NjQAAAAA"]
[Sun Mar 29 05:07:35.659622 2026] [:error] [pid 32359:tid 32363] [client 20.151.113.137:40604] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ccs.php"] [unique_id "achDFwMb8G3UzfQP3WjMGAAAAMI"]
[Sun Mar 29 05:07:36.199329 2026] [:error] [pid 32359:tid 32383] [client 20.151.113.137:32730] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ccs.php"] [unique_id "achDGAMb8G3UzfQP3WjMGgAAANY"]
[Sun Mar 29 05:07:36.745590 2026] [:error] [pid 32254:tid 32279] [client 20.151.113.137:52477] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ccs.php"] [unique_id "achDGKug2IHuyGgCTn8NkQAAAA8"]
[Sun Mar 29 05:07:37.157200 2026] [:error] [pid 32359:tid 32377] [client 20.151.113.137:32767] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/clss.php"] [unique_id "achDGQMb8G3UzfQP3WjMGwAAANA"]
[Sun Mar 29 05:07:37.643558 2026] [:error] [pid 32254:tid 32276] [client 20.151.113.137:25999] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/clss.php"] [unique_id "achDGaug2IHuyGgCTn8NlQAAAAw"]
[Sun Mar 29 05:07:38.095155 2026] [:error] [pid 1524:tid 1536] [client 20.151.113.137:29466] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/clss.php"] [unique_id "achDGloaWSl2asqQCh8P9AAAAQc"]
[Sun Mar 29 05:07:38.623540 2026] [:error] [pid 1524:tid 1554] [client 20.151.113.137:29473] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/clss.php"] [unique_id "achDGloaWSl2asqQCh8P9QAAARY"]
[Sun Mar 29 05:07:39.183883 2026] [:error] [pid 1524:tid 1541] [client 20.151.113.137:32706] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/radio.php"] [unique_id "achDG1oaWSl2asqQCh8P9gAAAQo"]
[Sun Mar 29 05:07:39.600547 2026] [:error] [pid 32255:tid 32294] [client 20.151.113.137:40628] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/radio.php"] [unique_id "achDG2nfn-AtRoMbquxGMQAAAEM"]
[Sun Mar 29 05:07:40.021662 2026] [:error] [pid 1524:tid 1535] [client 20.151.113.137:32346] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/radio.php"] [unique_id "achDHFoaWSl2asqQCh8P-gAAAQY"]
[Sun Mar 29 05:07:40.556497 2026] [:error] [pid 32257:tid 32319] [client 20.151.113.137:35384] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/radio.php"] [unique_id "achDHCE3TArOFrUtgWoo_wAAAIE"]
[Sun Mar 29 05:07:40.977768 2026] [:error] [pid 32257:tid 32340] [client 20.151.113.137:34677] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-blog.php"] [unique_id "achDHCE3TArOFrUtgWopAAAAAJY"]
[Sun Mar 29 05:07:41.521437 2026] [:error] [pid 32254:tid 32272] [client 20.151.113.137:32356] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-blog.php"] [unique_id "achDHaug2IHuyGgCTn8NmwAAAAg"]
[Sun Mar 29 05:07:42.290009 2026] [:error] [pid 32254:tid 32264] [client 20.151.113.137:34629] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-blog.php"] [unique_id "achDHqug2IHuyGgCTn8NnQAAAAA"]
[Sun Mar 29 05:07:42.962257 2026] [:error] [pid 32254:tid 32265] [client 20.151.113.137:52420] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-blog.php"] [unique_id "achDHqug2IHuyGgCTn8NoAAAAAE"]
[Sun Mar 29 05:07:43.404126 2026] [:error] [pid 32254:tid 32281] [client 20.151.113.137:31092] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/init.php"] [unique_id "achDH6ug2IHuyGgCTn8NowAAABE"]
[Sun Mar 29 05:07:43.898699 2026] [:error] [pid 1524:tid 1553] [client 20.151.113.137:40002] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/init.php"] [unique_id "achDH1oaWSl2asqQCh8P_AAAARU"]
[Sun Mar 29 05:07:44.726762 2026] [:error] [pid 32257:tid 32332] [client 20.151.113.137:31058] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/init.php"] [unique_id "achDICE3TArOFrUtgWopBQAAAI4"]
[Sun Mar 29 05:07:45.339372 2026] [:error] [pid 32257:tid 32327] [client 20.151.113.137:2556] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/init.php"] [unique_id "achDISE3TArOFrUtgWopCAAAAIk"]
[Sun Mar 29 05:07:45.840200 2026] [:error] [pid 32359:tid 32385] [client 20.151.113.137:47868] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wtiiy.php"] [unique_id "achDIQMb8G3UzfQP3WjMHwAAANg"]
[Sun Mar 29 05:07:46.306063 2026] [:error] [pid 32359:tid 32366] [client 20.151.113.137:32711] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wtiiy.php"] [unique_id "achDIgMb8G3UzfQP3WjMIwAAAMU"]
[Sun Mar 29 05:07:46.814224 2026] [:error] [pid 32359:tid 32382] [client 20.151.113.137:34636] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wtiiy.php"] [unique_id "achDIgMb8G3UzfQP3WjMJQAAANU"]
[Sun Mar 29 05:07:47.375818 2026] [:error] [pid 32359:tid 32384] [client 20.151.113.137:2048] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wtiiy.php"] [unique_id "achDIwMb8G3UzfQP3WjMKAAAANc"]
[Sun Mar 29 05:07:47.870989 2026] [:error] [pid 32257:tid 32334] [client 20.151.113.137:29843] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ajax.php"] [unique_id "achDIyE3TArOFrUtgWopCwAAAJA"]
[Sun Mar 29 05:07:48.286333 2026] [:error] [pid 32257:tid 32326] [client 20.151.113.137:35349] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ajax.php"] [unique_id "achDJCE3TArOFrUtgWopDQAAAIg"]
[Sun Mar 29 05:07:48.806532 2026] [:error] [pid 32255:tid 32291] [client 20.151.113.137:41976] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ajax.php"] [unique_id "achDJGnfn-AtRoMbquxGOwAAAEA"]
[Sun Mar 29 05:07:49.299893 2026] [:error] [pid 32257:tid 32336] [client 20.151.113.137:40596] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ajax.php"] [unique_id "achDJSE3TArOFrUtgWopDgAAAJI"]
[Sun Mar 29 05:07:49.919295 2026] [:error] [pid 1524:tid 1548] [client 20.151.113.137:52448] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/gptsh.php"] [unique_id "achDJVoaWSl2asqQCh8QBAAAARE"]
[Sun Mar 29 05:07:50.463461 2026] [:error] [pid 1524:tid 1554] [client 20.151.113.137:2088] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/gptsh.php"] [unique_id "achDJloaWSl2asqQCh8QBgAAARY"]
[Sun Mar 29 05:07:50.934752 2026] [:error] [pid 32254:tid 32278] [client 20.151.113.137:29488] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/gptsh.php"] [unique_id "achDJqug2IHuyGgCTn8NrAAAAA4"]
[Sun Mar 29 05:07:51.415009 2026] [:error] [pid 32254:tid 32281] [client 20.151.113.137:35379] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/gptsh.php"] [unique_id "achDJ6ug2IHuyGgCTn8NrQAAABE"]
[Sun Mar 29 05:07:51.956251 2026] [:error] [pid 1524:tid 1542] [client 20.151.113.137:32364] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "achDJ1oaWSl2asqQCh8QCwAAAQs"]
[Sun Mar 29 05:07:52.472488 2026] [:error] [pid 32359:tid 32372] [client 20.151.113.137:41966] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "achDKAMb8G3UzfQP3WjMLgAAAMs"]
[Sun Mar 29 05:07:53.926526 2026] [:error] [pid 1524:tid 1538] [client 20.151.113.137:31914] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "achDKVoaWSl2asqQCh8QDQAAAQk"]
[Sun Mar 29 05:07:54.407188 2026] [:error] [pid 32254:tid 32268] [client 20.151.113.137:2771] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "achDKqug2IHuyGgCTn8NsAAAAAQ"]
[Sun Mar 29 05:07:55.618393 2026] [:error] [pid 32254:tid 32286] [client 20.151.113.137:31096] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bgymj.php"] [unique_id "achDK6ug2IHuyGgCTn8NtQAAABY"]
[Sun Mar 29 05:07:56.189058 2026] [:error] [pid 32257:tid 32324] [client 20.151.113.137:29495] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bgymj.php"] [unique_id "achDLCE3TArOFrUtgWopFQAAAIY"]
[Sun Mar 29 05:07:56.599790 2026] [:error] [pid 32359:tid 32371] [client 20.151.113.137:31902] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bgymj.php"] [unique_id "achDLAMb8G3UzfQP3WjMOAAAAMo"]
[Sun Mar 29 05:07:57.775301 2026] [:error] [pid 32255:tid 32301] [client 20.151.113.137:32718] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bgymj.php"] [unique_id "achDLWnfn-AtRoMbquxGSAAAAEo"]
[Sun Mar 29 05:07:58.244272 2026] [:error] [pid 32255:tid 32297] [client 20.151.113.137:40601] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ah25.php"] [unique_id "achDLmnfn-AtRoMbquxGSQAAAEY"]
[Sun Mar 29 05:07:58.797094 2026] [:error] [pid 32257:tid 32319] [client 20.151.113.137:35383] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ah25.php"] [unique_id "achDLiE3TArOFrUtgWopGgAAAIE"]
[Sun Mar 29 05:07:59.502692 2026] [:error] [pid 32257:tid 32328] [client 20.151.113.137:29842] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ah25.php"] [unique_id "achDLyE3TArOFrUtgWopHgAAAIo"]
[Sun Mar 29 05:08:00.792123 2026] [:error] [pid 32257:tid 32327] [client 20.151.113.137:54299] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ah25.php"] [unique_id "achDMCE3TArOFrUtgWopIwAAAIk"]
[Sun Mar 29 05:08:01.273666 2026] [:error] [pid 32257:tid 32329] [client 20.151.113.137:34628] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws60.php"] [unique_id "achDMSE3TArOFrUtgWopJgAAAIs"]
[Sun Mar 29 05:08:01.870495 2026] [:error] [pid 32254:tid 32271] [client 20.151.113.137:40046] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws60.php"] [unique_id "achDMaug2IHuyGgCTn8NvgAAAAc"]
[Sun Mar 29 05:08:02.285324 2026] [:error] [pid 32254:tid 32287] [client 20.151.113.137:35343] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws60.php"] [unique_id "achDMqug2IHuyGgCTn8NwAAAABc"]
[Sun Mar 29 05:08:02.748409 2026] [:error] [pid 32257:tid 32339] [client 20.151.113.137:31883] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws60.php"] [unique_id "achDMiE3TArOFrUtgWopKQAAAJU"]
[Sun Mar 29 05:08:05.963899 2026] [:error] [pid 1524:tid 1528] [client 20.151.113.137:52469] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/motu.php"] [unique_id "achDNVoaWSl2asqQCh8QHAAAAQE"]
[Sun Mar 29 05:08:06.536002 2026] [:error] [pid 1524:tid 1555] [client 20.151.113.137:29496] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/motu.php"] [unique_id "achDNloaWSl2asqQCh8QIAAAARc"]
[Sun Mar 29 05:08:08.039007 2026] [:error] [pid 32254:tid 32269] [client 20.151.113.137:32334] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/motu.php"] [unique_id "achDOKug2IHuyGgCTn8NxQAAAAU"]
[Sun Mar 29 05:08:17.797735 2026] [proxy_fcgi:error] [pid 32359:tid 32369] [client 20.122.187.158:64506] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 05:08:18.001451 2026] [proxy_fcgi:error] [pid 32359:tid 32385] [client 20.122.187.158:64506] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 05:08:18.205284 2026] [proxy_fcgi:error] [pid 32359:tid 32362] [client 20.122.187.158:64506] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 05:08:18.409578 2026] [proxy_fcgi:error] [pid 32359:tid 32366] [client 20.122.187.158:64506] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 05:08:18.612818 2026] [proxy_fcgi:error] [pid 32359:tid 32382] [client 20.122.187.158:64506] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 05:08:18.816312 2026] [proxy_fcgi:error] [pid 32359:tid 32364] [client 20.122.187.158:64506] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 05:08:19.019773 2026] [proxy_fcgi:error] [pid 32359:tid 32377] [client 20.122.187.158:64506] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 05:08:19.225027 2026] [proxy_fcgi:error] [pid 32359:tid 32371] [client 20.122.187.158:64506] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 05:08:19.428789 2026] [proxy_fcgi:error] [pid 32359:tid 32379] [client 20.122.187.158:64506] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 05:08:19.682888 2026] [proxy_fcgi:error] [pid 32359:tid 32361] [client 20.122.187.158:64506] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 05:08:19.882923 2026] [:error] [pid 32359:tid 32372] [client 20.122.187.158:64506] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xsas.php"] [unique_id "achDQwMb8G3UzfQP3WjMZQAAAMs"]
[Sun Mar 29 05:08:20.359501 2026] [:error] [pid 32359:tid 32378] [client 20.122.187.158:63989] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xsas.php"] [unique_id "achDRAMb8G3UzfQP3WjMaAAAANE"]
[Sun Mar 29 05:08:20.829094 2026] [:error] [pid 32254:tid 32273] [client 20.122.187.158:63953] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xsas.php"] [unique_id "achDRKug2IHuyGgCTn8NzgAAAAk"]
[Sun Mar 29 05:08:21.296271 2026] [:error] [pid 32257:tid 32329] [client 20.122.187.158:63977] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xsas.php"] [unique_id "achDRSE3TArOFrUtgWopWAAAAIs"]
[Sun Mar 29 05:08:21.867446 2026] [:error] [pid 32257:tid 32325] [client 20.122.187.158:63992] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/a5.php"] [unique_id "achDRSE3TArOFrUtgWopWgAAAIc"]
[Sun Mar 29 05:08:22.288850 2026] [:error] [pid 32359:tid 32374] [client 20.122.187.158:64475] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/a5.php"] [unique_id "achDRgMb8G3UzfQP3WjMbgAAAM0"]
[Sun Mar 29 05:08:22.737093 2026] [:error] [pid 32257:tid 32324] [client 20.122.187.158:64442] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/a5.php"] [unique_id "achDRiE3TArOFrUtgWopXwAAAIY"]
[Sun Mar 29 05:08:23.168029 2026] [:error] [pid 32257:tid 32320] [client 20.122.187.158:63986] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/a5.php"] [unique_id "achDRyE3TArOFrUtgWopZAAAAII"]
[Sun Mar 29 05:08:23.588867 2026] [:error] [pid 32257:tid 32321] [client 20.122.187.158:63981] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-blog-header.php"] [unique_id "achDRyE3TArOFrUtgWopZgAAAIM"]
[Sun Mar 29 05:08:24.063372 2026] [:error] [pid 32257:tid 32334] [client 20.122.187.158:63296] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-blog-header.php"] [unique_id "achDSCE3TArOFrUtgWopbQAAAJA"]
[Sun Mar 29 05:08:24.522895 2026] [:error] [pid 32359:tid 32361] [client 20.122.187.158:63951] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-blog-header.php"] [unique_id "achDSAMb8G3UzfQP3WjMcAAAAMA"]
[Sun Mar 29 05:08:24.943933 2026] [:error] [pid 32359:tid 32370] [client 20.122.187.158:64446] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-blog-header.php"] [unique_id "achDSAMb8G3UzfQP3WjMcwAAAMk"]
[Sun Mar 29 05:08:25.411718 2026] [:error] [pid 32255:tid 32299] [client 20.122.187.158:64428] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/asasx.php"] [unique_id "achDSWnfn-AtRoMbquxGYAAAAEg"]
[Sun Mar 29 05:08:25.842948 2026] [:error] [pid 32254:tid 32265] [client 20.122.187.158:63943] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/asasx.php"] [unique_id "achDSaug2IHuyGgCTn8N1AAAAAE"]
[Sun Mar 29 05:08:26.253670 2026] [:error] [pid 32359:tid 32384] [client 20.122.187.158:64497] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/asasx.php"] [unique_id "achDSgMb8G3UzfQP3WjMeAAAANc"]
[Sun Mar 29 05:08:26.666432 2026] [:error] [pid 32257:tid 32336] [client 20.122.187.158:64437] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/asasx.php"] [unique_id "achDSiE3TArOFrUtgWopcgAAAJI"]
[Sun Mar 29 05:08:27.140586 2026] [:error] [pid 32257:tid 32326] [client 20.122.187.158:63983] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/file.php"] [unique_id "achDSyE3TArOFrUtgWopcwAAAIg"]
[Sun Mar 29 05:08:27.586624 2026] [:error] [pid 32257:tid 32323] [client 20.122.187.158:63985] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/file.php"] [unique_id "achDSyE3TArOFrUtgWopdwAAAIU"]
[Sun Mar 29 05:08:28.069668 2026] [:error] [pid 32257:tid 32329] [client 20.122.187.158:63995] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/file.php"] [unique_id "achDTCE3TArOFrUtgWopegAAAIs"]
[Sun Mar 29 05:08:28.513379 2026] [:error] [pid 32257:tid 32339] [client 20.122.187.158:63970] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/file.php"] [unique_id "achDTCE3TArOFrUtgWopewAAAJU"]
[Sun Mar 29 05:08:28.959031 2026] [:error] [pid 32257:tid 32331] [client 20.122.187.158:64459] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/public/vx.php"] [unique_id "achDTCE3TArOFrUtgWopfgAAAI0"]
[Sun Mar 29 05:08:29.401775 2026] [:error] [pid 32255:tid 32310] [client 20.122.187.158:63950] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/public/vx.php"] [unique_id "achDTWnfn-AtRoMbquxGYgAAAFM"]
[Sun Mar 29 05:08:29.815325 2026] [:error] [pid 32254:tid 32283] [client 20.122.187.158:64409] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/public/vx.php"] [unique_id "achDTaug2IHuyGgCTn8N1wAAABM"]
[Sun Mar 29 05:08:30.258752 2026] [:error] [pid 32359:tid 32366] [client 20.122.187.158:64434] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/public/vx.php"] [unique_id "achDTgMb8G3UzfQP3WjMggAAAMU"]
[Sun Mar 29 05:08:30.668431 2026] [:error] [pid 32257:tid 32331] [client 20.122.187.158:63972] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/sale.php"] [unique_id "achDTiE3TArOFrUtgWopjwAAAI0"]
[Sun Mar 29 05:08:31.163128 2026] [:error] [pid 32359:tid 32379] [client 20.122.187.158:63336] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/sale.php"] [unique_id "achDTwMb8G3UzfQP3WjMkAAAANI"]
[Sun Mar 29 05:08:31.726819 2026] [:error] [pid 32257:tid 32323] [client 20.122.187.158:64439] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/sale.php"] [unique_id "achDTyE3TArOFrUtgWoplwAAAIU"]
[Sun Mar 29 05:08:32.205334 2026] [:error] [pid 32257:tid 32325] [client 20.122.187.158:64415] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/sale.php"] [unique_id "achDUCE3TArOFrUtgWopmgAAAIc"]
[Sun Mar 29 05:08:32.689731 2026] [:error] [pid 32257:tid 32330] [client 20.122.187.158:63991] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/kj.php"] [unique_id "achDUCE3TArOFrUtgWopmwAAAIw"]
[Sun Mar 29 05:08:33.099987 2026] [:error] [pid 32257:tid 32333] [client 20.122.187.158:63990] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/kj.php"] [unique_id "achDUSE3TArOFrUtgWopoAAAAI8"]
[Sun Mar 29 05:08:33.532426 2026] [:error] [pid 32359:tid 32379] [client 20.122.187.158:64389] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/kj.php"] [unique_id "achDUQMb8G3UzfQP3WjMpQAAANI"]
[Sun Mar 29 05:08:33.967436 2026] [:error] [pid 1524:tid 1553] [client 20.122.187.158:63942] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/kj.php"] [unique_id "achDUVoaWSl2asqQCh8QMgAAARU"]
[Sun Mar 29 05:08:34.375281 2026] [:error] [pid 32255:tid 32294] [client 20.122.187.158:64412] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/2ksm17n.php"] [unique_id "achDUmnfn-AtRoMbquxGigAAAEM"]
[Sun Mar 29 05:08:34.780105 2026] [:error] [pid 32254:tid 32271] [client 20.122.187.158:63947] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/2ksm17n.php"] [unique_id "achDUqug2IHuyGgCTn8N3AAAAAc"]
[Sun Mar 29 05:08:35.290671 2026] [:error] [pid 32254:tid 32270] [client 20.122.187.158:63976] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/2ksm17n.php"] [unique_id "achDU6ug2IHuyGgCTn8N3QAAAAY"]
[Sun Mar 29 05:08:35.713628 2026] [:error] [pid 32254:tid 32269] [client 20.122.187.158:63873] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/2ksm17n.php"] [unique_id "achDU6ug2IHuyGgCTn8N4QAAAAU"]
[Sun Mar 29 05:08:36.164959 2026] [:error] [pid 32254:tid 32274] [client 20.122.187.158:63980] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/about.php"] [unique_id "achDVKug2IHuyGgCTn8N4wAAAAo"]
[Sun Mar 29 05:08:36.651882 2026] [:error] [pid 32257:tid 32318] [client 20.122.187.158:64449] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/about.php"] [unique_id "achDVCE3TArOFrUtgWopqwAAAIA"]
[Sun Mar 29 05:08:37.168279 2026] [:error] [pid 32255:tid 32300] [client 20.122.187.158:64393] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/about.php"] [unique_id "achDVWnfn-AtRoMbquxGjwAAAEk"]
[Sun Mar 29 05:08:37.841582 2026] [:error] [pid 32257:tid 32328] [client 20.122.187.158:64418] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/about.php"] [unique_id "achDVSE3TArOFrUtgWoprQAAAIo"]
[Sun Mar 29 05:08:38.278518 2026] [:error] [pid 32257:tid 32326] [client 20.122.187.158:64385] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/hots.php"] [unique_id "achDViE3TArOFrUtgWopsAAAAIg"]
[Sun Mar 29 05:08:38.686034 2026] [:error] [pid 32257:tid 32321] [client 20.122.187.158:63914] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/hots.php"] [unique_id "achDViE3TArOFrUtgWopsQAAAIM"]
[Sun Mar 29 05:08:39.218268 2026] [:error] [pid 32257:tid 32334] [client 20.122.187.158:64398] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/hots.php"] [unique_id "achDVyE3TArOFrUtgWopswAAAJA"]
[Sun Mar 29 05:08:39.647148 2026] [:error] [pid 1524:tid 1537] [client 20.122.187.158:63993] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/hots.php"] [unique_id "achDV1oaWSl2asqQCh8QNgAAAQg"]
[Sun Mar 29 05:08:40.063826 2026] [:error] [pid 1524:tid 1555] [client 20.122.187.158:64426] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp5.php"] [unique_id "achDWFoaWSl2asqQCh8QOAAAARc"]
[Sun Mar 29 05:08:40.465291 2026] [:error] [pid 32257:tid 32341] [client 20.122.187.158:64451] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp5.php"] [unique_id "achDWCE3TArOFrUtgWoptgAAAJc"]
[Sun Mar 29 05:08:40.885007 2026] [:error] [pid 32257:tid 32335] [client 20.122.187.158:63329] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp5.php"] [unique_id "achDWCE3TArOFrUtgWopuAAAAJE"]
[Sun Mar 29 05:08:41.390563 2026] [:error] [pid 32257:tid 32338] [client 20.122.187.158:63967] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp5.php"] [unique_id "achDWSE3TArOFrUtgWopvAAAAJQ"]
[Sun Mar 29 05:08:42.000504 2026] [:error] [pid 32359:tid 32374] [client 20.122.187.158:64422] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ioxi-o.php"] [unique_id "achDWQMb8G3UzfQP3WjMvgAAAM0"]
[Sun Mar 29 05:08:42.695548 2026] [:error] [pid 32359:tid 32363] [client 20.122.187.158:64444] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ioxi-o.php"] [unique_id "achDWgMb8G3UzfQP3WjMvwAAAMI"]
[Sun Mar 29 05:08:43.154734 2026] [:error] [pid 1524:tid 1536] [client 20.122.187.158:63881] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ioxi-o.php"] [unique_id "achDW1oaWSl2asqQCh8QPgAAAQc"]
[Sun Mar 29 05:08:43.724815 2026] [:error] [pid 32257:tid 32334] [client 20.122.187.158:63938] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ioxi-o.php"] [unique_id "achDWyE3TArOFrUtgWopvgAAAJA"]
[Sun Mar 29 05:08:44.168791 2026] [:error] [pid 32255:tid 32302] [client 20.122.187.158:64469] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/66.php"] [unique_id "achDXGnfn-AtRoMbquxGlgAAAEs"]
[Sun Mar 29 05:08:44.634121 2026] [:error] [pid 32254:tid 32276] [client 20.122.187.158:64440] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/66.php"] [unique_id "achDXKug2IHuyGgCTn8N6wAAAAw"]
[Sun Mar 29 05:08:44.929672 2026] [proxy_fcgi:error] [pid 1524:tid 1546] [client 20.151.113.137:31909] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 05:08:45.167564 2026] [:error] [pid 1524:tid 1537] [client 20.122.187.158:63330] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/66.php"] [unique_id "achDXVoaWSl2asqQCh8QRwAAAQg"]
[Sun Mar 29 05:08:45.174748 2026] [proxy_fcgi:error] [pid 1524:tid 1551] [client 20.151.113.137:31909] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 05:08:45.476497 2026] [proxy_fcgi:error] [pid 1524:tid 1555] [client 20.151.113.137:31909] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 05:08:45.610344 2026] [:error] [pid 1524:tid 1531] [client 20.122.187.158:63946] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/66.php"] [unique_id "achDXVoaWSl2asqQCh8QTAAAAQM"]
[Sun Mar 29 05:08:45.702706 2026] [proxy_fcgi:error] [pid 1524:tid 1541] [client 20.151.113.137:31909] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 05:08:45.929512 2026] [proxy_fcgi:error] [pid 1524:tid 1533] [client 20.151.113.137:31909] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 05:08:46.111941 2026] [:error] [pid 32254:tid 32272] [client 20.122.187.158:63899] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "achDXqug2IHuyGgCTn8N7AAAAAg"]
[Sun Mar 29 05:08:46.140674 2026] [proxy_fcgi:error] [pid 1524:tid 1543] [client 20.151.113.137:31909] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 05:08:46.365185 2026] [proxy_fcgi:error] [pid 1524:tid 1535] [client 20.151.113.137:31909] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 05:08:46.577425 2026] [proxy_fcgi:error] [pid 1524:tid 1552] [client 20.151.113.137:31909] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 05:08:46.613321 2026] [:error] [pid 32359:tid 32375] [client 20.122.187.158:63879] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "achDXgMb8G3UzfQP3WjMxQAAAM4"]
[Sun Mar 29 05:08:47.044925 2026] [:error] [pid 1524:tid 1537] [client 20.122.187.158:63937] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "achDX1oaWSl2asqQCh8QWgAAAQg"]
[Sun Mar 29 05:08:47.178596 2026] [proxy_fcgi:error] [pid 1524:tid 1551] [client 20.151.113.137:31909] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 05:08:47.388465 2026] [proxy_fcgi:error] [pid 1524:tid 1555] [client 20.151.113.137:31909] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 05:08:47.459534 2026] [:error] [pid 32257:tid 32335] [client 20.122.187.158:64484] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "achDXyE3TArOFrUtgWopwgAAAJE"]
[Sun Mar 29 05:08:47.661851 2026] [proxy_fcgi:error] [pid 1524:tid 1554] [client 20.151.113.137:31909] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 05:08:47.874439 2026] [:error] [pid 1524:tid 1533] [client 20.151.113.137:31909] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bjfl.php"] [unique_id "achDX1oaWSl2asqQCh8QYQAAAQU"]
[Sun Mar 29 05:08:47.899479 2026] [:error] [pid 32254:tid 32269] [client 20.122.187.158:63893] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/amax.php"] [unique_id "achDX6ug2IHuyGgCTn8N7QAAAAU"]
[Sun Mar 29 05:08:48.439333 2026] [:error] [pid 32257:tid 32328] [client 20.122.187.158:63997] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/amax.php"] [unique_id "achDYCE3TArOFrUtgWopxAAAAIo"]
[Sun Mar 29 05:08:48.642883 2026] [:error] [pid 32257:tid 32329] [client 20.151.113.137:41935] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bjfl.php"] [unique_id "achDYCE3TArOFrUtgWopxgAAAIs"]
[Sun Mar 29 05:08:48.842227 2026] [:error] [pid 32254:tid 32274] [client 20.122.187.158:63243] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/amax.php"] [unique_id "achDYKug2IHuyGgCTn8N7wAAAAo"]
[Sun Mar 29 05:08:49.199722 2026] [:error] [pid 32255:tid 32298] [client 20.151.113.137:29491] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bjfl.php"] [unique_id "achDYWnfn-AtRoMbquxGmgAAAEc"]
[Sun Mar 29 05:08:49.297978 2026] [:error] [pid 32255:tid 32305] [client 20.122.187.158:64460] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/amax.php"] [unique_id "achDYWnfn-AtRoMbquxGmwAAAE4"]
[Sun Mar 29 05:08:49.712844 2026] [:error] [pid 1524:tid 1556] [client 20.122.187.158:63314] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/dass.php"] [unique_id "achDYVoaWSl2asqQCh8QaAAAARg"]
[Sun Mar 29 05:08:49.785577 2026] [:error] [pid 1524:tid 1553] [client 20.151.113.137:29501] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bjfl.php"] [unique_id "achDYVoaWSl2asqQCh8QaQAAARU"]
[Sun Mar 29 05:08:50.132321 2026] [:error] [pid 1524:tid 1538] [client 20.122.187.158:64486] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/dass.php"] [unique_id "achDYloaWSl2asqQCh8QawAAAQk"]
[Sun Mar 29 05:08:50.535619 2026] [:error] [pid 1524:tid 1547] [client 20.122.187.158:64404] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/dass.php"] [unique_id "achDYloaWSl2asqQCh8QbQAAARA"]
[Sun Mar 29 05:08:51.070729 2026] [:error] [pid 32254:tid 32288] [client 20.122.187.158:64419] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/dass.php"] [unique_id "achDY6ug2IHuyGgCTn8N8wAAABg"]
[Sun Mar 29 05:08:51.352782 2026] [:error] [pid 32257:tid 32326] [client 20.151.113.137:31057] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/155.php"] [unique_id "achDYyE3TArOFrUtgWopyAAAAIg"]
[Sun Mar 29 05:08:51.567958 2026] [:error] [pid 1524:tid 1551] [client 20.122.187.158:63926] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/fs.php"] [unique_id "achDY1oaWSl2asqQCh8QbgAAARM"]
[Sun Mar 29 05:08:51.888889 2026] [:error] [pid 32359:tid 32363] [client 20.151.113.137:32377] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/155.php"] [unique_id "achDYwMb8G3UzfQP3WjMywAAAMI"]
[Sun Mar 29 05:08:51.986607 2026] [:error] [pid 32255:tid 32301] [client 20.122.187.158:63963] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/fs.php"] [unique_id "achDY2nfn-AtRoMbquxGngAAAEo"]
[Sun Mar 29 05:08:52.326918 2026] [:error] [pid 32255:tid 32307] [client 20.151.113.137:40616] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/155.php"] [unique_id "achDZGnfn-AtRoMbquxGnwAAAFA"]
[Sun Mar 29 05:08:52.492297 2026] [:error] [pid 32359:tid 32364] [client 20.122.187.158:63916] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/fs.php"] [unique_id "achDZAMb8G3UzfQP3WjMzAAAAMM"]
[Sun Mar 29 05:08:52.872870 2026] [:error] [pid 1524:tid 1545] [client 20.151.113.137:52479] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/155.php"] [unique_id "achDZFoaWSl2asqQCh8QcAAAAQ4"]
[Sun Mar 29 05:08:52.946628 2026] [:error] [pid 32257:tid 32325] [client 20.122.187.158:64499] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/fs.php"] [unique_id "achDZCE3TArOFrUtgWopygAAAIc"]
[Sun Mar 29 05:08:53.346276 2026] [:error] [pid 32255:tid 32308] [client 20.151.113.137:40582] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/rzki.php"] [unique_id "achDZWnfn-AtRoMbquxGoQAAAFE"]
[Sun Mar 29 05:08:53.362637 2026] [:error] [pid 1524:tid 1531] [client 20.122.187.158:64406] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws83.php"] [unique_id "achDZVoaWSl2asqQCh8QcQAAAQM"]
[Sun Mar 29 05:08:53.770075 2026] [:error] [pid 1524:tid 1530] [client 20.122.187.158:64489] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws83.php"] [unique_id "achDZVoaWSl2asqQCh8QcwAAAQI"]
[Sun Mar 29 05:08:53.784229 2026] [:error] [pid 32257:tid 32339] [client 20.151.113.137:2084] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/rzki.php"] [unique_id "achDZSE3TArOFrUtgWopzgAAAJU"]
[Sun Mar 29 05:08:54.183211 2026] [:error] [pid 1524:tid 1533] [client 20.122.187.158:64417] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws83.php"] [unique_id "achDZloaWSl2asqQCh8QdAAAAQU"]
[Sun Mar 29 05:08:54.282382 2026] [:error] [pid 1524:tid 1527] [client 20.151.113.137:2522] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/rzki.php"] [unique_id "achDZloaWSl2asqQCh8QdQAAAQA"]
[Sun Mar 29 05:08:54.590737 2026] [:error] [pid 32255:tid 32294] [client 20.122.187.158:63945] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws83.php"] [unique_id "achDZmnfn-AtRoMbquxGogAAAEM"]
[Sun Mar 29 05:08:54.764072 2026] [:error] [pid 32359:tid 32377] [client 20.151.113.137:32324] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/rzki.php"] [unique_id "achDZgMb8G3UzfQP3WjMzQAAANA"]
[Sun Mar 29 05:08:54.993318 2026] [:error] [pid 1524:tid 1549] [client 20.122.187.158:63321] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/56c53.php"] [unique_id "achDZloaWSl2asqQCh8QeQAAARI"]
[Sun Mar 29 05:08:55.264590 2026] [:error] [pid 1524:tid 1536] [client 20.151.113.137:2069] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/classwithtostring.php"] [unique_id "achDZ1oaWSl2asqQCh8QewAAAQc"]
[Sun Mar 29 05:08:55.401277 2026] [:error] [pid 32257:tid 32328] [client 20.122.187.158:64399] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/56c53.php"] [unique_id "achDZyE3TArOFrUtgWop0QAAAIo"]
[Sun Mar 29 05:08:55.813081 2026] [:error] [pid 1524:tid 1551] [client 20.122.187.158:63913] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/56c53.php"] [unique_id "achDZ1oaWSl2asqQCh8QfAAAARM"]
[Sun Mar 29 05:08:56.088701 2026] [:error] [pid 1524:tid 1545] [client 20.151.113.137:2501] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/classwithtostring.php"] [unique_id "achDaFoaWSl2asqQCh8QfQAAAQ4"]
[Sun Mar 29 05:08:56.229127 2026] [:error] [pid 32359:tid 32376] [client 20.122.187.158:64413] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/56c53.php"] [unique_id "achDaAMb8G3UzfQP3WjMzwAAAM8"]
[Sun Mar 29 05:08:56.627222 2026] [:error] [pid 32254:tid 32271] [client 20.151.113.137:31098] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/classwithtostring.php"] [unique_id "achDaKug2IHuyGgCTn8N9wAAAAc"]
[Sun Mar 29 05:08:56.667193 2026] [:error] [pid 32255:tid 32297] [client 20.122.187.158:64425] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ms-edit.php"] [unique_id "achDaGnfn-AtRoMbquxGowAAAEY"]
[Sun Mar 29 05:08:57.103972 2026] [:error] [pid 32255:tid 32302] [client 20.122.187.158:64477] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ms-edit.php"] [unique_id "achDaWnfn-AtRoMbquxGpAAAAEs"]
[Sun Mar 29 05:08:57.322249 2026] [:error] [pid 32254:tid 32270] [client 20.151.113.137:32746] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/classwithtostring.php"] [unique_id "achDaaug2IHuyGgCTn8N-AAAAAY"]
[Sun Mar 29 05:08:57.507411 2026] [:error] [pid 1524:tid 1530] [client 20.122.187.158:64496] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ms-edit.php"] [unique_id "achDaVoaWSl2asqQCh8QfwAAAQI"]
[Sun Mar 29 05:08:57.774800 2026] [:error] [pid 32257:tid 32320] [client 20.151.113.137:2541] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws49.php"] [unique_id "achDaSE3TArOFrUtgWop1AAAAII"]
[Sun Mar 29 05:08:57.949351 2026] [:error] [pid 32257:tid 32321] [client 20.122.187.158:64485] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ms-edit.php"] [unique_id "achDaSE3TArOFrUtgWop1gAAAIM"]
[Sun Mar 29 05:08:58.257776 2026] [:error] [pid 1524:tid 1527] [client 20.151.113.137:41957] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws49.php"] [unique_id "achDaloaWSl2asqQCh8QgwAAAQA"]
[Sun Mar 29 05:08:58.480707 2026] [:error] [pid 32255:tid 32313] [client 20.122.187.158:63994] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/grsiuk.php"] [unique_id "achDamnfn-AtRoMbquxGpQAAAFY"]
[Sun Mar 29 05:08:58.779226 2026] [:error] [pid 1524:tid 1548] [client 20.151.113.137:32383] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws49.php"] [unique_id "achDaloaWSl2asqQCh8QhQAAARE"]
[Sun Mar 29 05:08:58.976319 2026] [:error] [pid 32257:tid 32322] [client 20.122.187.158:63896] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/grsiuk.php"] [unique_id "achDaiE3TArOFrUtgWop2AAAAIQ"]
[Sun Mar 29 05:08:59.267956 2026] [:error] [pid 32255:tid 32304] [client 20.151.113.137:36301] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws49.php"] [unique_id "achDa2nfn-AtRoMbquxGpgAAAE0"]
[Sun Mar 29 05:08:59.398811 2026] [:error] [pid 32255:tid 32299] [client 20.122.187.158:63996] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/grsiuk.php"] [unique_id "achDa2nfn-AtRoMbquxGpwAAAEg"]
[Sun Mar 29 05:08:59.758495 2026] [:error] [pid 32255:tid 32298] [client 20.151.113.137:31093] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/tool.php"] [unique_id "achDa2nfn-AtRoMbquxGqQAAAEc"]
[Sun Mar 29 05:08:59.813438 2026] [:error] [pid 1524:tid 1537] [client 20.122.187.158:63978] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/grsiuk.php"] [unique_id "achDa1oaWSl2asqQCh8QiQAAAQg"]
[Sun Mar 29 05:09:00.225644 2026] [:error] [pid 32257:tid 32319] [client 20.122.187.158:63923] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/mh.php"] [unique_id "achDbCE3TArOFrUtgWop2wAAAIE"]
[Sun Mar 29 05:09:00.308863 2026] [:error] [pid 1524:tid 1555] [client 20.151.113.137:36332] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/tool.php"] [unique_id "achDbFoaWSl2asqQCh8QigAAARc"]
[Sun Mar 29 05:09:00.633550 2026] [:error] [pid 32257:tid 32327] [client 20.122.187.158:64463] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/mh.php"] [unique_id "achDbCE3TArOFrUtgWop3AAAAIk"]
[Sun Mar 29 05:09:00.904743 2026] [:error] [pid 1524:tid 1548] [client 20.151.113.137:31874] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/tool.php"] [unique_id "achDbFoaWSl2asqQCh8QjgAAARE"]
[Sun Mar 29 05:09:01.064447 2026] [:error] [pid 1524:tid 1532] [client 20.122.187.158:64427] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/mh.php"] [unique_id "achDbVoaWSl2asqQCh8QjwAAAQQ"]
[Sun Mar 29 05:09:01.471614 2026] [:error] [pid 32257:tid 32330] [client 20.122.187.158:64464] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/mh.php"] [unique_id "achDbSE3TArOFrUtgWop4AAAAIw"]
[Sun Mar 29 05:09:01.513001 2026] [:error] [pid 32257:tid 32323] [client 20.151.113.137:31095] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/tool.php"] [unique_id "achDbSE3TArOFrUtgWop4QAAAIU"]
[Sun Mar 29 05:09:01.878326 2026] [:error] [pid 32257:tid 32329] [client 20.122.187.158:64476] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bo.php"] [unique_id "achDbSE3TArOFrUtgWop4wAAAIs"]
[Sun Mar 29 05:09:02.281535 2026] [:error] [pid 32254:tid 32280] [client 20.122.187.158:64384] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bo.php"] [unique_id "achDbqug2IHuyGgCTn8N-gAAABA"]
[Sun Mar 29 05:09:02.468663 2026] [:error] [pid 32255:tid 32311] [client 20.151.113.137:34625] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ww.php"] [unique_id "achDbmnfn-AtRoMbquxGrAAAAFQ"]
[Sun Mar 29 05:09:02.722110 2026] [:error] [pid 32359:tid 32365] [client 20.122.187.158:64448] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bo.php"] [unique_id "achDbgMb8G3UzfQP3WjM1AAAAMQ"]
[Sun Mar 29 05:09:03.056443 2026] [:error] [pid 32257:tid 32332] [client 20.151.113.137:32745] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ww.php"] [unique_id "achDbyE3TArOFrUtgWop6AAAAI4"]
[Sun Mar 29 05:09:03.167140 2026] [:error] [pid 32257:tid 32338] [client 20.122.187.158:63952] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bo.php"] [unique_id "achDbyE3TArOFrUtgWop6QAAAJQ"]
[Sun Mar 29 05:09:03.542496 2026] [:error] [pid 1524:tid 1555] [client 20.151.113.137:40019] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ww.php"] [unique_id "achDb1oaWSl2asqQCh8QlwAAARc"]
[Sun Mar 29 05:09:03.616992 2026] [:error] [pid 32257:tid 32322] [client 20.122.187.158:63965] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/5b9ac.php"] [unique_id "achDbyE3TArOFrUtgWop6gAAAIQ"]
[Sun Mar 29 05:09:04.023866 2026] [:error] [pid 32257:tid 32340] [client 20.122.187.158:64471] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/5b9ac.php"] [unique_id "achDcCE3TArOFrUtgWop6wAAAJY"]
[Sun Mar 29 05:09:04.431121 2026] [:error] [pid 1524:tid 1528] [client 20.122.187.158:64495] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/5b9ac.php"] [unique_id "achDcFoaWSl2asqQCh8QmQAAAQE"]
[Sun Mar 29 05:09:04.893538 2026] [:error] [pid 32255:tid 32295] [client 20.122.187.158:62677] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/5b9ac.php"] [unique_id "achDcGnfn-AtRoMbquxGrgAAAEQ"]
[Sun Mar 29 05:09:04.978046 2026] [:error] [pid 1524:tid 1533] [client 20.151.113.137:32751] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ww.php"] [unique_id "achDcFoaWSl2asqQCh8QnAAAAQU"]
[Sun Mar 29 05:09:05.309760 2026] [:error] [pid 1524:tid 1542] [client 20.122.187.158:63944] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bolt.php"] [unique_id "achDcVoaWSl2asqQCh8QnQAAAQs"]
[Sun Mar 29 05:09:05.730629 2026] [:error] [pid 32257:tid 32324] [client 20.122.187.158:63901] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bolt.php"] [unique_id "achDcSE3TArOFrUtgWop8QAAAIY"]
[Sun Mar 29 05:09:05.748496 2026] [:error] [pid 32257:tid 32341] [client 20.151.113.137:2079] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/vanda.php"] [unique_id "achDcSE3TArOFrUtgWop8gAAAJc"]
[Sun Mar 29 05:09:06.178346 2026] [:error] [pid 32257:tid 32338] [client 20.122.187.158:64509] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bolt.php"] [unique_id "achDciE3TArOFrUtgWop8wAAAJQ"]
[Sun Mar 29 05:09:06.242065 2026] [:error] [pid 32257:tid 32335] [client 20.151.113.137:31049] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/vanda.php"] [unique_id "achDciE3TArOFrUtgWop9AAAAJE"]
[Sun Mar 29 05:09:06.673768 2026] [:error] [pid 32257:tid 32336] [client 20.122.187.158:63349] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bolt.php"] [unique_id "achDciE3TArOFrUtgWop-QAAAJI"]
[Sun Mar 29 05:09:06.759399 2026] [:error] [pid 32257:tid 32339] [client 20.151.113.137:32321] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/vanda.php"] [unique_id "achDciE3TArOFrUtgWop-wAAAJU"]
[Sun Mar 29 05:09:07.094585 2026] [:error] [pid 32257:tid 32321] [client 20.122.187.158:64492] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/nw.php"] [unique_id "achDcyE3TArOFrUtgWop_QAAAIM"]
[Sun Mar 29 05:09:07.213134 2026] [:error] [pid 32257:tid 32342] [client 20.151.113.137:29864] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/vanda.php"] [unique_id "achDcyE3TArOFrUtgWop_gAAAJg"]
[Sun Mar 29 05:09:07.510527 2026] [:error] [pid 32257:tid 32323] [client 20.122.187.158:63998] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/nw.php"] [unique_id "achDcyE3TArOFrUtgWop_wAAAIU"]
[Sun Mar 29 05:09:07.799035 2026] [:error] [pid 1524:tid 1532] [client 20.151.113.137:40590] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/nw.php"] [unique_id "achDc1oaWSl2asqQCh8QnwAAAQQ"]
[Sun Mar 29 05:09:07.959665 2026] [:error] [pid 32254:tid 32283] [client 20.122.187.158:64500] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/nw.php"] [unique_id "achDc6ug2IHuyGgCTn8OAQAAABM"]
[Sun Mar 29 05:09:08.350370 2026] [:error] [pid 32257:tid 32320] [client 20.151.113.137:31930] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/nw.php"] [unique_id "achDdCE3TArOFrUtgWoqAgAAAII"]
[Sun Mar 29 05:09:08.409949 2026] [:error] [pid 32257:tid 32318] [client 20.122.187.158:63891] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/nw.php"] [unique_id "achDdCE3TArOFrUtgWoqAwAAAIA"]
[Sun Mar 29 05:09:08.810905 2026] [:error] [pid 32257:tid 32331] [client 20.122.187.158:63954] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/rithin.php"] [unique_id "achDdCE3TArOFrUtgWoqBQAAAI0"]
[Sun Mar 29 05:09:08.988420 2026] [:error] [pid 32257:tid 32337] [client 20.151.113.137:2061] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/nw.php"] [unique_id "achDdCE3TArOFrUtgWoqBwAAAJM"]
[Sun Mar 29 05:09:09.226055 2026] [:error] [pid 32257:tid 32339] [client 20.122.187.158:64473] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/rithin.php"] [unique_id "achDdSE3TArOFrUtgWoqCAAAAJU"]
[Sun Mar 29 05:09:09.447855 2026] [:error] [pid 32257:tid 32333] [client 20.151.113.137:31080] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/nw.php"] [unique_id "achDdSE3TArOFrUtgWoqCgAAAI8"]
[Sun Mar 29 05:09:09.635261 2026] [:error] [pid 32257:tid 32327] [client 20.122.187.158:63242] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/rithin.php"] [unique_id "achDdSE3TArOFrUtgWoqDQAAAIk"]
[Sun Mar 29 05:09:10.125954 2026] [:error] [pid 32255:tid 32315] [client 20.122.187.158:63316] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/rithin.php"] [unique_id "achDdmnfn-AtRoMbquxGsAAAAFg"]
[Sun Mar 29 05:09:10.302501 2026] [:error] [pid 32257:tid 32341] [client 20.151.113.137:29475] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/cu.php"] [unique_id "achDdiE3TArOFrUtgWoqEQAAAJc"]
[Sun Mar 29 05:09:10.571834 2026] [:error] [pid 32257:tid 32340] [client 20.122.187.158:63987] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/tx78.php"] [unique_id "achDdiE3TArOFrUtgWoqEgAAAJY"]
[Sun Mar 29 05:09:10.982718 2026] [:error] [pid 1524:tid 1556] [client 20.122.187.158:64390] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/tx78.php"] [unique_id "achDdloaWSl2asqQCh8QoQAAARg"]
[Sun Mar 29 05:09:11.172321 2026] [:error] [pid 32359:tid 32373] [client 20.151.113.137:29876] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/cu.php"] [unique_id "achDdwMb8G3UzfQP3WjM2AAAAMw"]
[Sun Mar 29 05:09:11.420609 2026] [:error] [pid 32359:tid 32374] [client 20.122.187.158:63948] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/tx78.php"] [unique_id "achDdwMb8G3UzfQP3WjM2gAAAM0"]
[Sun Mar 29 05:09:11.906571 2026] [:error] [pid 1524:tid 1555] [client 20.122.187.158:64490] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/tx78.php"] [unique_id "achDd1oaWSl2asqQCh8QpAAAARc"]
[Sun Mar 29 05:09:12.357692 2026] [:error] [pid 32255:tid 32296] [client 20.122.187.158:63352] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/Sanskrit.php"] [unique_id "achDeGnfn-AtRoMbquxGsgAAAEU"]
[Sun Mar 29 05:09:12.529857 2026] [:error] [pid 1524:tid 1531] [client 20.151.113.137:52456] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/cu.php"] [unique_id "achDeFoaWSl2asqQCh8QpQAAAQM"]
[Sun Mar 29 05:09:12.794465 2026] [:error] [pid 32254:tid 32277] [client 20.122.187.158:64401] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/Sanskrit.php"] [unique_id "achDeKug2IHuyGgCTn8OBAAAAA0"]
[Sun Mar 29 05:09:13.227958 2026] [:error] [pid 32359:tid 32385] [client 20.122.187.158:63904] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/Sanskrit.php"] [unique_id "achDeQMb8G3UzfQP3WjM3AAAANg"]
[Sun Mar 29 05:09:13.690570 2026] [:error] [pid 1524:tid 1554] [client 20.122.187.158:64494] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/Sanskrit.php"] [unique_id "achDeVoaWSl2asqQCh8QqQAAARY"]
[Sun Mar 29 05:09:13.699822 2026] [:error] [pid 32359:tid 32371] [client 20.151.113.137:2502] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/cu.php"] [unique_id "achDeQMb8G3UzfQP3WjM3QAAAMo"]
[Sun Mar 29 05:09:14.209473 2026] [:error] [pid 1524:tid 1527] [client 20.122.187.158:64498] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/jga.php"] [unique_id "achDeloaWSl2asqQCh8QrAAAAQA"]
[Sun Mar 29 05:09:14.586889 2026] [:error] [pid 32359:tid 32383] [client 20.151.113.137:31051] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/t.php"] [unique_id "achDegMb8G3UzfQP3WjM3wAAANY"]
[Sun Mar 29 05:09:14.663171 2026] [:error] [pid 32254:tid 32270] [client 20.122.187.158:64403] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/jga.php"] [unique_id "achDequg2IHuyGgCTn8OBgAAAAY"]
[Sun Mar 29 05:09:15.076815 2026] [:error] [pid 1524:tid 1548] [client 20.122.187.158:63956] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/jga.php"] [unique_id "achDe1oaWSl2asqQCh8QrgAAARE"]
[Sun Mar 29 05:09:15.515056 2026] [:error] [pid 32254:tid 32287] [client 20.122.187.158:63964] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/jga.php"] [unique_id "achDe6ug2IHuyGgCTn8OBwAAABc"]
[Sun Mar 29 05:09:15.999797 2026] [:error] [pid 1524:tid 1556] [client 20.151.113.137:41961] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/t.php"] [unique_id "achDe1oaWSl2asqQCh8QsgAAARg"]
[Sun Mar 29 05:09:16.972573 2026] [:error] [pid 32254:tid 32266] [client 20.122.187.158:64429] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/torsa1.php"] [unique_id "achDfKug2IHuyGgCTn8OCgAAAAI"]
[Sun Mar 29 05:09:17.452962 2026] [:error] [pid 32257:tid 32324] [client 20.151.113.137:29477] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/t.php"] [unique_id "achDfSE3TArOFrUtgWoqFQAAAIY"]
[Sun Mar 29 05:09:17.537690 2026] [:error] [pid 32254:tid 32285] [client 20.122.187.158:64395] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/torsa1.php"] [unique_id "achDfaug2IHuyGgCTn8OCwAAABU"]
[Sun Mar 29 05:09:18.269446 2026] [:error] [pid 32254:tid 32269] [client 20.122.187.158:63317] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/torsa1.php"] [unique_id "achDfqug2IHuyGgCTn8ODAAAAAU"]
[Sun Mar 29 05:09:18.415580 2026] [:error] [pid 32257:tid 32336] [client 20.151.113.137:40626] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/t.php"] [unique_id "achDfiE3TArOFrUtgWoqHAAAAJI"]
[Sun Mar 29 05:09:18.760429 2026] [:error] [pid 32359:tid 32370] [client 20.122.187.158:63979] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/torsa1.php"] [unique_id "achDfgMb8G3UzfQP3WjM5AAAAMk"]
[Sun Mar 29 05:09:19.181678 2026] [proxy_fcgi:error] [pid 32254:tid 32288] [client 20.122.187.158:63301] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 05:09:19.236854 2026] [:error] [pid 32254:tid 32281] [client 20.151.113.137:34649] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ms.php"] [unique_id "achDf6ug2IHuyGgCTn8ODgAAABE"]
[Sun Mar 29 05:09:19.396446 2026] [proxy_fcgi:error] [pid 32254:tid 32265] [client 20.122.187.158:63301] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 05:09:19.599111 2026] [proxy_fcgi:error] [pid 32254:tid 32277] [client 20.122.187.158:63301] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 05:09:19.854429 2026] [proxy_fcgi:error] [pid 32254:tid 32270] [client 20.122.187.158:63301] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 05:09:20.059003 2026] [proxy_fcgi:error] [pid 32254:tid 32287] [client 20.122.187.158:63301] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 05:09:20.261756 2026] [:error] [pid 32359:tid 32363] [client 20.151.113.137:35372] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ms.php"] [unique_id "achDgAMb8G3UzfQP3WjM6QAAAMI"]
[Sun Mar 29 05:09:20.520683 2026] [proxy_fcgi:error] [pid 32254:tid 32272] [client 20.122.187.158:63301] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 05:09:20.734717 2026] [proxy_fcgi:error] [pid 32254:tid 32271] [client 20.122.187.158:63301] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 05:09:20.938098 2026] [proxy_fcgi:error] [pid 32254:tid 32280] [client 20.122.187.158:63301] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 05:09:20.976981 2026] [:error] [pid 1524:tid 1528] [client 20.151.113.137:41938] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ms.php"] [unique_id "achDgFoaWSl2asqQCh8QswAAAQE"]
[Sun Mar 29 05:09:21.147618 2026] [proxy_fcgi:error] [pid 32254:tid 32286] [client 20.122.187.158:63301] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 05:09:21.352408 2026] [proxy_fcgi:error] [pid 32254:tid 32274] [client 20.122.187.158:63301] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 05:09:21.551874 2026] [:error] [pid 32254:tid 32266] [client 20.122.187.158:63301] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/maul.php"] [unique_id "achDgaug2IHuyGgCTn8OHgAAAAI"]
[Sun Mar 29 05:09:21.923528 2026] [:error] [pid 1524:tid 1541] [client 20.151.113.137:35340] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ms.php"] [unique_id "achDgVoaWSl2asqQCh8QuAAAAQo"]
[Sun Mar 29 05:09:22.077107 2026] [:error] [pid 32257:tid 32324] [client 20.122.187.158:63960] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/maul.php"] [unique_id "achDgiE3TArOFrUtgWoqHwAAAIY"]
[Sun Mar 29 05:09:22.562339 2026] [:error] [pid 32257:tid 32330] [client 20.122.187.158:63312] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/maul.php"] [unique_id "achDgiE3TArOFrUtgWoqIAAAAIw"]
[Sun Mar 29 05:09:23.032776 2026] [:error] [pid 1524:tid 1552] [client 20.122.187.158:63306] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/maul.php"] [unique_id "achDg1oaWSl2asqQCh8QvAAAARQ"]
[Sun Mar 29 05:09:23.463429 2026] [:error] [pid 32254:tid 32281] [client 20.151.113.137:34639] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bnm.php"] [unique_id "achDg6ug2IHuyGgCTn8OIAAAABE"]
[Sun Mar 29 05:09:23.486139 2026] [:error] [pid 1524:tid 1549] [client 20.122.187.158:63902] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/lowpr.php"] [unique_id "achDg1oaWSl2asqQCh8QvQAAARI"]
[Sun Mar 29 05:09:23.902792 2026] [:error] [pid 1524:tid 1528] [client 20.122.187.158:63334] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/lowpr.php"] [unique_id "achDg1oaWSl2asqQCh8QvwAAAQE"]
[Sun Mar 29 05:09:24.089555 2026] [:error] [pid 32254:tid 32282] [client 20.151.113.137:34683] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bnm.php"] [unique_id "achDhKug2IHuyGgCTn8OIgAAABI"]
[Sun Mar 29 05:09:24.384323 2026] [:error] [pid 32257:tid 32323] [client 20.122.187.158:63324] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/lowpr.php"] [unique_id "achDhCE3TArOFrUtgWoqIQAAAIU"]
[Sun Mar 29 05:09:24.765305 2026] [:error] [pid 32254:tid 32279] [client 20.151.113.137:32331] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bnm.php"] [unique_id "achDhKug2IHuyGgCTn8OIwAAAA8"]
[Sun Mar 29 05:09:24.833492 2026] [:error] [pid 1524:tid 1530] [client 20.122.187.158:63982] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/lowpr.php"] [unique_id "achDhFoaWSl2asqQCh8QwgAAAQI"]
[Sun Mar 29 05:09:25.251062 2026] [:error] [pid 1524:tid 1527] [client 20.151.113.137:32762] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bnm.php"] [unique_id "achDhVoaWSl2asqQCh8QwwAAAQA"]
[Sun Mar 29 05:09:25.310879 2026] [:error] [pid 32255:tid 32291] [client 20.122.187.158:63971] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/b.php"] [unique_id "achDhWnfn-AtRoMbquxGwAAAAEA"]
[Sun Mar 29 05:09:25.730005 2026] [:error] [pid 32254:tid 32277] [client 20.151.113.137:40031] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/aa21.php"] [unique_id "achDhaug2IHuyGgCTn8OJAAAAA0"]
[Sun Mar 29 05:09:25.781563 2026] [:error] [pid 32255:tid 32305] [client 20.122.187.158:64488] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/b.php"] [unique_id "achDhWnfn-AtRoMbquxGwgAAAE4"]
[Sun Mar 29 05:09:26.206947 2026] [:error] [pid 1524:tid 1551] [client 20.122.187.158:64483] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/b.php"] [unique_id "achDhloaWSl2asqQCh8QyAAAARM"]
[Sun Mar 29 05:09:26.238943 2026] [:error] [pid 32255:tid 32292] [client 20.151.113.137:29868] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/aa21.php"] [unique_id "achDhmnfn-AtRoMbquxGxQAAAEE"]
[Sun Mar 29 05:09:26.622412 2026] [:error] [pid 1524:tid 1532] [client 20.122.187.158:63256] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/b.php"] [unique_id "achDhloaWSl2asqQCh8QygAAAQQ"]
[Sun Mar 29 05:09:26.997905 2026] [:error] [pid 32254:tid 32270] [client 20.151.113.137:47866] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/aa21.php"] [unique_id "achDhqug2IHuyGgCTn8OJwAAAAY"]
[Sun Mar 29 05:09:27.036909 2026] [:error] [pid 32254:tid 32287] [client 20.122.187.158:64468] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/166.php"] [unique_id "achDh6ug2IHuyGgCTn8OKAAAABc"]
[Sun Mar 29 05:09:27.480122 2026] [:error] [pid 32254:tid 32280] [client 20.122.187.158:64431] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/166.php"] [unique_id "achDh6ug2IHuyGgCTn8OKwAAABA"]
[Sun Mar 29 05:09:27.489879 2026] [:error] [pid 32254:tid 32286] [client 20.151.113.137:41970] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/aa21.php"] [unique_id "achDh6ug2IHuyGgCTn8OLAAAABY"]
[Sun Mar 29 05:09:27.902732 2026] [:error] [pid 32254:tid 32264] [client 20.122.187.158:63299] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/166.php"] [unique_id "achDh6ug2IHuyGgCTn8OLgAAAAA"]
[Sun Mar 29 05:09:28.120831 2026] [:error] [pid 32254:tid 32269] [client 20.151.113.137:34680] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/gifclass.php"] [unique_id "achDiKug2IHuyGgCTn8OMAAAAAU"]
[Sun Mar 29 05:09:28.585861 2026] [:error] [pid 32255:tid 32310] [client 20.151.113.137:52416] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/gifclass.php"] [unique_id "achDiGnfn-AtRoMbquxGyQAAAFM"]
[Sun Mar 29 05:09:28.893800 2026] [:error] [pid 1524:tid 1552] [client 20.122.187.158:64465] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/166.php"] [unique_id "achDiFoaWSl2asqQCh8QywAAARQ"]
[Sun Mar 29 05:09:29.119844 2026] [:error] [pid 1524:tid 1549] [client 20.151.113.137:32378] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/gifclass.php"] [unique_id "achDiVoaWSl2asqQCh8QzQAAARI"]
[Sun Mar 29 05:09:29.293745 2026] [:error] [pid 1524:tid 1538] [client 20.122.187.158:64487] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/domains.php"] [unique_id "achDiVoaWSl2asqQCh8QzgAAAQk"]
[Sun Mar 29 05:09:29.764970 2026] [:error] [pid 1524:tid 1536] [client 20.122.187.158:64435] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/domains.php"] [unique_id "achDiVoaWSl2asqQCh8Q0AAAAQc"]
[Sun Mar 29 05:09:29.796123 2026] [:error] [pid 1524:tid 1528] [client 20.151.113.137:29467] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/gifclass.php"] [unique_id "achDiVoaWSl2asqQCh8Q0QAAAQE"]
[Sun Mar 29 05:09:30.187760 2026] [:error] [pid 32254:tid 32283] [client 20.122.187.158:63877] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/domains.php"] [unique_id "achDiqug2IHuyGgCTn8ONQAAABM"]
[Sun Mar 29 05:09:30.214056 2026] [:error] [pid 32359:tid 32361] [client 20.151.113.137:32372] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws80.php"] [unique_id "achDigMb8G3UzfQP3WjM7QAAAMA"]
[Sun Mar 29 05:09:30.656061 2026] [:error] [pid 32257:tid 32341] [client 20.122.187.158:63875] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/domains.php"] [unique_id "achDiiE3TArOFrUtgWoqJQAAAJc"]
[Sun Mar 29 05:09:30.666502 2026] [:error] [pid 32257:tid 32329] [client 20.151.113.137:54303] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws80.php"] [unique_id "achDiiE3TArOFrUtgWoqJgAAAIs"]
[Sun Mar 29 05:09:31.096157 2026] [:error] [pid 32257:tid 32340] [client 20.122.187.158:63968] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws85.php"] [unique_id "achDiyE3TArOFrUtgWoqKAAAAJY"]
[Sun Mar 29 05:09:31.532281 2026] [:error] [pid 32254:tid 32270] [client 20.122.187.158:63894] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws85.php"] [unique_id "achDi6ug2IHuyGgCTn8ONgAAAAY"]
[Sun Mar 29 05:09:31.657167 2026] [:error] [pid 32359:tid 32365] [client 20.151.113.137:32712] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws80.php"] [unique_id "achDiwMb8G3UzfQP3WjM7gAAAMQ"]
[Sun Mar 29 05:09:31.991693 2026] [:error] [pid 32359:tid 32368] [client 20.122.187.158:63343] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws85.php"] [unique_id "achDiwMb8G3UzfQP3WjM8AAAAMc"]
[Sun Mar 29 05:09:32.258947 2026] [:error] [pid 32359:tid 32372] [client 20.151.113.137:2093] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws80.php"] [unique_id "achDjAMb8G3UzfQP3WjM8gAAAMs"]
[Sun Mar 29 05:09:32.495843 2026] [:error] [pid 32359:tid 32384] [client 20.122.187.158:63332] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws85.php"] [unique_id "achDjAMb8G3UzfQP3WjM8wAAANc"]
[Sun Mar 29 05:09:32.786519 2026] [:error] [pid 1524:tid 1530] [client 20.151.113.137:29854] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bootstrap.php"] [unique_id "achDjFoaWSl2asqQCh8Q1AAAAQI"]
[Sun Mar 29 05:09:32.925051 2026] [:error] [pid 1524:tid 1541] [client 20.122.187.158:63889] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-act.php"] [unique_id "achDjFoaWSl2asqQCh8Q1gAAAQo"]
[Sun Mar 29 05:09:33.356756 2026] [:error] [pid 32257:tid 32330] [client 20.151.113.137:31087] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bootstrap.php"] [unique_id "achDjSE3TArOFrUtgWoqLgAAAIw"]
[Sun Mar 29 05:09:33.363756 2026] [:error] [pid 32257:tid 32323] [client 20.122.187.158:64470] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-act.php"] [unique_id "achDjSE3TArOFrUtgWoqLwAAAIU"]
[Sun Mar 29 05:09:33.825674 2026] [:error] [pid 32359:tid 32378] [client 20.122.187.158:63895] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-act.php"] [unique_id "achDjQMb8G3UzfQP3WjM9AAAANE"]
[Sun Mar 29 05:09:33.963826 2026] [:error] [pid 1524:tid 1542] [client 20.151.113.137:31100] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bootstrap.php"] [unique_id "achDjVoaWSl2asqQCh8Q1wAAAQs"]
[Sun Mar 29 05:09:34.248433 2026] [:error] [pid 32254:tid 32282] [client 20.122.187.158:63333] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-act.php"] [unique_id "achDjqug2IHuyGgCTn8OPAAAABI"]
[Sun Mar 29 05:09:34.705064 2026] [:error] [pid 1524:tid 1555] [client 20.122.187.158:63930] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/hehe.php"] [unique_id "achDjloaWSl2asqQCh8Q2AAAARc"]
[Sun Mar 29 05:09:34.838102 2026] [:error] [pid 32359:tid 32363] [client 20.151.113.137:35359] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bootstrap.php"] [unique_id "achDjgMb8G3UzfQP3WjM9gAAAMI"]
[Sun Mar 29 05:09:35.209381 2026] [:error] [pid 32359:tid 32364] [client 20.122.187.158:63921] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/hehe.php"] [unique_id "achDjwMb8G3UzfQP3WjM9wAAAMM"]
[Sun Mar 29 05:09:35.349963 2026] [:error] [pid 32359:tid 32373] [client 20.151.113.137:32738] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/public/wp-blog.php"] [unique_id "achDjwMb8G3UzfQP3WjM-AAAAMw"]
[Sun Mar 29 05:09:35.966293 2026] [:error] [pid 1524:tid 1545] [client 20.151.113.137:31074] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/public/wp-blog.php"] [unique_id "achDj1oaWSl2asqQCh8Q2gAAAQ4"]
[Sun Mar 29 05:09:36.336159 2026] [:error] [pid 32255:tid 32298] [client 20.122.187.158:63310] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/hehe.php"] [unique_id "achDkGnfn-AtRoMbquxGzQAAAEc"]
[Sun Mar 29 05:09:36.692009 2026] [:error] [pid 32257:tid 32328] [client 20.151.113.137:31922] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/public/wp-blog.php"] [unique_id "achDkCE3TArOFrUtgWoqNgAAAIo"]
[Sun Mar 29 05:09:36.766186 2026] [:error] [pid 32255:tid 32313] [client 20.122.187.158:63298] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/hehe.php"] [unique_id "achDkGnfn-AtRoMbquxGzwAAAFY"]
[Sun Mar 29 05:09:37.181317 2026] [:error] [pid 32257:tid 32342] [client 20.122.187.158:63959] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/tfm.php"] [unique_id "achDkSE3TArOFrUtgWoqOAAAAJg"]
[Sun Mar 29 05:09:37.573409 2026] [:error] [pid 1524:tid 1537] [client 20.151.113.137:32338] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/public/wp-blog.php"] [unique_id "achDkVoaWSl2asqQCh8Q3AAAAQg"]
[Sun Mar 29 05:09:37.623884 2026] [:error] [pid 32254:tid 32273] [client 20.122.187.158:64443] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/tfm.php"] [unique_id "achDkaug2IHuyGgCTn8OPwAAAAk"]
[Sun Mar 29 05:09:38.030148 2026] [:error] [pid 32254:tid 32270] [client 20.122.187.158:63941] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/tfm.php"] [unique_id "achDkqug2IHuyGgCTn8OQAAAAAY"]
[Sun Mar 29 05:09:38.044381 2026] [:error] [pid 32255:tid 32312] [client 20.151.113.137:29479] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws88.php"] [unique_id "achDkmnfn-AtRoMbquxG0gAAAFU"]
[Sun Mar 29 05:09:38.478940 2026] [:error] [pid 32257:tid 32323] [client 20.122.187.158:63300] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/tfm.php"] [unique_id "achDkiE3TArOFrUtgWoqPQAAAIU"]
[Sun Mar 29 05:09:38.737035 2026] [:error] [pid 32257:tid 32334] [client 20.151.113.137:34653] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws88.php"] [unique_id "achDkiE3TArOFrUtgWoqPwAAAJA"]
[Sun Mar 29 05:09:39.016034 2026] [:error] [pid 32257:tid 32328] [client 20.122.187.158:63291] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ne2026.php"] [unique_id "achDkyE3TArOFrUtgWoqQgAAAIo"]
[Sun Mar 29 05:09:39.293479 2026] [:error] [pid 32257:tid 32342] [client 20.151.113.137:54282] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws88.php"] [unique_id "achDkyE3TArOFrUtgWoqRAAAAJg"]
[Sun Mar 29 05:09:39.417904 2026] [:error] [pid 1524:tid 1552] [client 20.122.187.158:63999] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ne2026.php"] [unique_id "achDk1oaWSl2asqQCh8Q3QAAARQ"]
[Sun Mar 29 05:09:39.822433 2026] [:error] [pid 32254:tid 32284] [client 20.122.187.158:64481] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ne2026.php"] [unique_id "achDk6ug2IHuyGgCTn8ORQAAABQ"]
[Sun Mar 29 05:09:39.852911 2026] [:error] [pid 32359:tid 32361] [client 20.151.113.137:54291] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws88.php"] [unique_id "achDkwMb8G3UzfQP3WjM_gAAAMA"]
[Sun Mar 29 05:09:40.240454 2026] [:error] [pid 32257:tid 32336] [client 20.122.187.158:64423] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ne2026.php"] [unique_id "achDlCE3TArOFrUtgWoqRQAAAJI"]
[Sun Mar 29 05:09:40.313386 2026] [:error] [pid 32255:tid 32303] [client 20.151.113.137:32739] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/csv.php"] [unique_id "achDlGnfn-AtRoMbquxG0wAAAEw"]
[Sun Mar 29 05:09:40.682451 2026] [:error] [pid 32257:tid 32335] [client 20.122.187.158:63918] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws73.php"] [unique_id "achDlCE3TArOFrUtgWoqSQAAAJE"]
[Sun Mar 29 05:09:40.799586 2026] [:error] [pid 32257:tid 32330] [client 20.151.113.137:29836] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/csv.php"] [unique_id "achDlCE3TArOFrUtgWoqSwAAAIw"]
[Sun Mar 29 05:09:41.096018 2026] [:error] [pid 1524:tid 1528] [client 20.122.187.158:64445] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws73.php"] [unique_id "achDlVoaWSl2asqQCh8Q4AAAAQE"]
[Sun Mar 29 05:09:41.314087 2026] [:error] [pid 32255:tid 32300] [client 20.151.113.137:40637] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/csv.php"] [unique_id "achDlWnfn-AtRoMbquxG1AAAAEk"]
[Sun Mar 29 05:09:41.514057 2026] [:error] [pid 1524:tid 1531] [client 20.122.187.158:64392] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws73.php"] [unique_id "achDlVoaWSl2asqQCh8Q4wAAAQM"]
[Sun Mar 29 05:09:41.831660 2026] [:error] [pid 32257:tid 32318] [client 20.151.113.137:2109] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/csv.php"] [unique_id "achDlSE3TArOFrUtgWoqTQAAAIA"]
[Sun Mar 29 05:09:41.913816 2026] [:error] [pid 32257:tid 32334] [client 20.122.187.158:63911] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws73.php"] [unique_id "achDlSE3TArOFrUtgWoqTwAAAJA"]
[Sun Mar 29 05:09:42.348710 2026] [:error] [pid 1524:tid 1554] [client 20.151.113.137:40628] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/varb.php"] [unique_id "achDlloaWSl2asqQCh8Q5QAAARY"]
[Sun Mar 29 05:09:42.409590 2026] [:error] [pid 1524:tid 1541] [client 20.122.187.158:63878] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws84.php"] [unique_id "achDlloaWSl2asqQCh8Q5gAAAQo"]
[Sun Mar 29 05:09:42.792143 2026] [:error] [pid 32257:tid 32319] [client 20.151.113.137:32723] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/varb.php"] [unique_id "achDliE3TArOFrUtgWoqUAAAAIE"]
[Sun Mar 29 05:09:42.882137 2026] [:error] [pid 32257:tid 32342] [client 20.122.187.158:64480] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws84.php"] [unique_id "achDliE3TArOFrUtgWoqUQAAAJg"]
[Sun Mar 29 05:09:43.294166 2026] [:error] [pid 32257:tid 32332] [client 20.122.187.158:64479] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws84.php"] [unique_id "achDlyE3TArOFrUtgWoqUgAAAI4"]
[Sun Mar 29 05:09:43.346909 2026] [:error] [pid 32257:tid 32335] [client 20.151.113.137:31905] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/varb.php"] [unique_id "achDlyE3TArOFrUtgWoqVAAAAJE"]
[Sun Mar 29 05:09:43.762701 2026] [:error] [pid 32257:tid 32337] [client 20.122.187.158:64420] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws84.php"] [unique_id "achDlyE3TArOFrUtgWoqVwAAAJM"]
[Sun Mar 29 05:09:44.012753 2026] [:error] [pid 32257:tid 32327] [client 20.151.113.137:40586] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/varb.php"] [unique_id "achDmCE3TArOFrUtgWoqWAAAAIk"]
[Sun Mar 29 05:09:44.288991 2026] [:error] [pid 32257:tid 32318] [client 20.122.187.158:63249] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/baixy.php"] [unique_id "achDmCE3TArOFrUtgWoqWgAAAIA"]
[Sun Mar 29 05:09:44.589881 2026] [:error] [pid 32257:tid 32338] [client 20.151.113.137:40597] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/8573.php"] [unique_id "achDmCE3TArOFrUtgWoqWwAAAJQ"]
[Sun Mar 29 05:09:44.736895 2026] [:error] [pid 32257:tid 32328] [client 20.122.187.158:63354] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/baixy.php"] [unique_id "achDmCE3TArOFrUtgWoqXwAAAIo"]
[Sun Mar 29 05:09:45.139929 2026] [:error] [pid 32257:tid 32337] [client 20.151.113.137:35378] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/8573.php"] [unique_id "achDmSE3TArOFrUtgWoqZQAAAJM"]
[Sun Mar 29 05:09:45.653931 2026] [:error] [pid 32257:tid 32328] [client 20.151.113.137:31069] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/8573.php"] [unique_id "achDmSE3TArOFrUtgWoqagAAAIo"]
[Sun Mar 29 05:09:46.043221 2026] [:error] [pid 32257:tid 32322] [client 20.122.187.158:63961] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/baixy.php"] [unique_id "achDmiE3TArOFrUtgWoqbAAAAIQ"]
[Sun Mar 29 05:09:46.171861 2026] [:error] [pid 32257:tid 32337] [client 20.151.113.137:54329] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/8573.php"] [unique_id "achDmiE3TArOFrUtgWoqbgAAAJM"]
[Sun Mar 29 05:09:46.452910 2026] [:error] [pid 32257:tid 32331] [client 20.122.187.158:63882] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/baixy.php"] [unique_id "achDmiE3TArOFrUtgWoqcAAAAI0"]
[Sun Mar 29 05:09:46.675471 2026] [:error] [pid 32257:tid 32339] [client 20.151.113.137:54324] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/abc.php"] [unique_id "achDmiE3TArOFrUtgWoqcgAAAJU"]
[Sun Mar 29 05:09:46.873340 2026] [:error] [pid 32257:tid 32323] [client 20.122.187.158:63246] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-good.php"] [unique_id "achDmiE3TArOFrUtgWoqdAAAAIU"]
[Sun Mar 29 05:09:47.184322 2026] [proxy_fcgi:error] [pid 32359:tid 32373] [client 20.151.113.137:31041] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 05:09:47.275099 2026] [:error] [pid 1524:tid 1532] [client 20.122.187.158:64455] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-good.php"] [unique_id "achDm1oaWSl2asqQCh8Q_QAAAQQ"]
[Sun Mar 29 05:09:47.434079 2026] [proxy_fcgi:error] [pid 32359:tid 32385] [client 20.151.113.137:31041] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 05:09:47.644993 2026] [proxy_fcgi:error] [pid 32359:tid 32371] [client 20.151.113.137:31041] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 05:09:47.703892 2026] [:error] [pid 32257:tid 32329] [client 20.122.187.158:63872] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-good.php"] [unique_id "achDmyE3TArOFrUtgWoqeAAAAIs"]
[Sun Mar 29 05:09:47.877947 2026] [proxy_fcgi:error] [pid 32359:tid 32380] [client 20.151.113.137:31041] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 05:09:48.101447 2026] [proxy_fcgi:error] [pid 32359:tid 32383] [client 20.151.113.137:31041] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 05:09:48.111626 2026] [:error] [pid 32257:tid 32327] [client 20.122.187.158:63888] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-good.php"] [unique_id "achDnCE3TArOFrUtgWoqewAAAIk"]
[Sun Mar 29 05:09:48.517333 2026] [:error] [pid 32257:tid 32328] [client 20.122.187.158:63294] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/a4.php"] [unique_id "achDnCE3TArOFrUtgWoqfQAAAIo"]
[Sun Mar 29 05:09:48.964214 2026] [:error] [pid 32257:tid 32340] [client 20.122.187.158:64397] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/a4.php"] [unique_id "achDnCE3TArOFrUtgWoqfwAAAJY"]
[Sun Mar 29 05:09:49.391794 2026] [:error] [pid 1524:tid 1543] [client 20.122.187.158:62689] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/a4.php"] [unique_id "achDnVoaWSl2asqQCh8RAgAAAQw"]
[Sun Mar 29 05:09:49.853192 2026] [:error] [pid 32254:tid 32265] [client 20.122.187.158:63284] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/a4.php"] [unique_id "achDnaug2IHuyGgCTn8OSgAAAAE"]
[Sun Mar 29 05:09:50.354165 2026] [:error] [pid 1524:tid 1532] [client 20.122.187.158:63903] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws77.php"] [unique_id "achDnloaWSl2asqQCh8RBgAAAQQ"]
[Sun Mar 29 05:09:50.757918 2026] [:error] [pid 1524:tid 1553] [client 20.122.187.158:64424] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws77.php"] [unique_id "achDnloaWSl2asqQCh8RCgAAARU"]
[Sun Mar 29 05:09:51.160106 2026] [:error] [pid 1524:tid 1531] [client 20.122.187.158:63285] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws77.php"] [unique_id "achDn1oaWSl2asqQCh8RCwAAAQM"]
[Sun Mar 29 05:09:51.663975 2026] [:error] [pid 1524:tid 1541] [client 20.122.187.158:63880] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws77.php"] [unique_id "achDn1oaWSl2asqQCh8RDQAAAQo"]
[Sun Mar 29 05:09:52.079289 2026] [:error] [pid 1524:tid 1531] [client 20.122.187.158:62699] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/vx.php"] [unique_id "achDoFoaWSl2asqQCh8REgAAAQM"]
[Sun Mar 29 05:09:52.504005 2026] [:error] [pid 1524:tid 1536] [client 20.122.187.158:64452] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/vx.php"] [unique_id "achDoFoaWSl2asqQCh8RGAAAAQc"]
[Sun Mar 29 05:09:52.969788 2026] [:error] [pid 1524:tid 1543] [client 20.122.187.158:64510] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/vx.php"] [unique_id "achDoFoaWSl2asqQCh8RGQAAAQw"]
[Sun Mar 29 05:09:53.654828 2026] [:error] [pid 32257:tid 32329] [client 20.122.187.158:62683] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/vx.php"] [unique_id "achDoSE3TArOFrUtgWoqiwAAAIs"]
[Sun Mar 29 05:09:54.077815 2026] [:error] [pid 32359:tid 32383] [client 20.122.187.158:63949] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/a5e0a.php"] [unique_id "achDogMb8G3UzfQP3WjNEAAAANY"]
[Sun Mar 29 05:09:54.540164 2026] [:error] [pid 32257:tid 32319] [client 20.122.187.158:62668] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/a5e0a.php"] [unique_id "achDoiE3TArOFrUtgWoqjwAAAIE"]
[Sun Mar 29 05:09:54.967700 2026] [:error] [pid 32257:tid 32342] [client 20.122.187.158:64491] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/a5e0a.php"] [unique_id "achDoiE3TArOFrUtgWoqkQAAAJg"]
[Sun Mar 29 05:09:55.423401 2026] [:error] [pid 32359:tid 32374] [client 20.122.187.158:63344] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/a5e0a.php"] [unique_id "achDowMb8G3UzfQP3WjNEwAAAM0"]
[Sun Mar 29 05:09:56.517112 2026] [:error] [pid 32359:tid 32372] [client 20.122.187.158:63973] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/term.php"] [unique_id "achDpAMb8G3UzfQP3WjNGAAAAMs"]
[Sun Mar 29 05:09:57.009879 2026] [:error] [pid 32254:tid 32270] [client 20.122.187.158:64501] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/term.php"] [unique_id "achDpaug2IHuyGgCTn8OTgAAAAY"]
[Sun Mar 29 05:09:57.471032 2026] [:error] [pid 32255:tid 32292] [client 20.122.187.158:63337] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/term.php"] [unique_id "achDpWnfn-AtRoMbquxG3QAAAEE"]
[Sun Mar 29 05:09:57.969833 2026] [:error] [pid 32255:tid 32305] [client 20.122.187.158:63266] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/term.php"] [unique_id "achDpWnfn-AtRoMbquxG3gAAAE4"]
[Sun Mar 29 05:09:58.470071 2026] [:error] [pid 32255:tid 32303] [client 20.122.187.158:63274] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/edit.php"] [unique_id "achDpmnfn-AtRoMbquxG4AAAAEw"]
[Sun Mar 29 05:09:58.912850 2026] [:error] [pid 32255:tid 32300] [client 20.122.187.158:64482] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/edit.php"] [unique_id "achDpmnfn-AtRoMbquxG4QAAAEk"]
[Sun Mar 29 05:09:59.390699 2026] [:error] [pid 32254:tid 32269] [client 20.122.187.158:63886] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/edit.php"] [unique_id "achDp6ug2IHuyGgCTn8OUwAAAAU"]
[Sun Mar 29 05:09:59.883230 2026] [:error] [pid 32255:tid 32295] [client 20.122.187.158:63257] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/edit.php"] [unique_id "achDp2nfn-AtRoMbquxG5AAAAEQ"]
[Sun Mar 29 05:10:00.322792 2026] [:error] [pid 32359:tid 32376] [client 20.122.187.158:63898] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/55b76.php"] [unique_id "achDqAMb8G3UzfQP3WjNGwAAAM8"]
[Sun Mar 29 05:10:00.783966 2026] [:error] [pid 32255:tid 32311] [client 20.122.187.158:63936] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/55b76.php"] [unique_id "achDqGnfn-AtRoMbquxG5QAAAFQ"]
[Sun Mar 29 05:10:01.344392 2026] [:error] [pid 1524:tid 1528] [client 20.122.187.158:64396] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/55b76.php"] [unique_id "achDqVoaWSl2asqQCh8RIgAAAQE"]
[Sun Mar 29 05:10:01.833346 2026] [:error] [pid 1524:tid 1556] [client 20.122.187.158:63302] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/55b76.php"] [unique_id "achDqVoaWSl2asqQCh8RJQAAARg"]
[Sun Mar 29 05:10:02.305098 2026] [:error] [pid 32359:tid 32366] [client 20.122.187.158:63260] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/asd.php"] [unique_id "achDqgMb8G3UzfQP3WjNHAAAAMU"]
[Sun Mar 29 05:10:02.810200 2026] [:error] [pid 1524:tid 1551] [client 20.122.187.158:63935] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/asd.php"] [unique_id "achDqloaWSl2asqQCh8RKAAAARM"]
[Sun Mar 29 05:10:03.301455 2026] [:error] [pid 32359:tid 32379] [client 20.122.187.158:63247] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/asd.php"] [unique_id "achDqwMb8G3UzfQP3WjNHgAAANI"]
[Sun Mar 29 05:10:04.378764 2026] [:error] [pid 32257:tid 32327] [client 20.122.187.158:63906] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/asd.php"] [unique_id "achDrCE3TArOFrUtgWoqmgAAAIk"]
[Sun Mar 29 05:10:04.916490 2026] [:error] [pid 32257:tid 32326] [client 20.122.187.158:64441] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp9.php"] [unique_id "achDrCE3TArOFrUtgWoqmwAAAIg"]
[Sun Mar 29 05:10:05.368736 2026] [:error] [pid 1524:tid 1546] [client 20.122.187.158:63331] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp9.php"] [unique_id "achDrVoaWSl2asqQCh8RLwAAAQ8"]
[Sun Mar 29 05:10:05.796595 2026] [:error] [pid 32254:tid 32265] [client 20.122.187.158:63908] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp9.php"] [unique_id "achDraug2IHuyGgCTn8OVQAAAAE"]
[Sun Mar 29 05:10:06.309539 2026] [:error] [pid 32359:tid 32363] [client 20.122.187.158:63289] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp9.php"] [unique_id "achDrgMb8G3UzfQP3WjNIgAAAMI"]
[Sun Mar 29 05:10:06.763764 2026] [:error] [pid 32257:tid 32329] [client 20.122.187.158:63966] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/8.php"] [unique_id "achDriE3TArOFrUtgWoqnwAAAIs"]
[Sun Mar 29 05:10:07.224910 2026] [:error] [pid 32257:tid 32331] [client 20.122.187.158:63252] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/8.php"] [unique_id "achDryE3TArOFrUtgWoqoAAAAI0"]
[Sun Mar 29 05:10:07.649182 2026] [:error] [pid 32257:tid 32339] [client 20.122.187.158:63976] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/8.php"] [unique_id "achDryE3TArOFrUtgWoqogAAAJU"]
[Sun Mar 29 05:10:08.150566 2026] [:error] [pid 32257:tid 32333] [client 20.122.187.158:63926] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/8.php"] [unique_id "achDsCE3TArOFrUtgWoqpQAAAI8"]
[Sun Mar 29 05:10:08.559789 2026] [:error] [pid 1524:tid 1541] [client 20.122.187.158:64391] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/byypas.php"] [unique_id "achDsFoaWSl2asqQCh8RNAAAAQo"]
[Sun Mar 29 05:10:09.022501 2026] [:error] [pid 32257:tid 32341] [client 20.122.187.158:64504] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/byypas.php"] [unique_id "achDsSE3TArOFrUtgWoqqAAAAJc"]
[Sun Mar 29 05:10:09.449906 2026] [:error] [pid 32359:tid 32383] [client 20.122.187.158:64430] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/byypas.php"] [unique_id "achDsQMb8G3UzfQP3WjNJAAAANY"]
[Sun Mar 29 05:10:09.902384 2026] [:error] [pid 32254:tid 32267] [client 20.122.187.158:63975] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/byypas.php"] [unique_id "achDsaug2IHuyGgCTn8OVwAAAAM"]
[Sun Mar 29 05:10:10.339618 2026] [:error] [pid 1524:tid 1548] [client 20.122.187.158:63353] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/drhunthq.php"] [unique_id "achDsloaWSl2asqQCh8RNwAAARE"]
[Sun Mar 29 05:10:10.827805 2026] [:error] [pid 32254:tid 32281] [client 20.122.187.158:63261] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/drhunthq.php"] [unique_id "achDsqug2IHuyGgCTn8OWAAAABE"]
[Sun Mar 29 05:10:11.384947 2026] [:error] [pid 32257:tid 32324] [client 20.122.187.158:63974] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/drhunthq.php"] [unique_id "achDsyE3TArOFrUtgWoqsAAAAIY"]
[Sun Mar 29 05:10:11.806124 2026] [:error] [pid 32257:tid 32340] [client 20.122.187.158:63295] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/drhunthq.php"] [unique_id "achDsyE3TArOFrUtgWoqsQAAAJY"]
[Sun Mar 29 05:10:12.366145 2026] [:error] [pid 32257:tid 32326] [client 20.122.187.158:63273] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/public/file.php"] [unique_id "achDtCE3TArOFrUtgWoqswAAAIg"]
[Sun Mar 29 05:10:12.907176 2026] [:error] [pid 32254:tid 32278] [client 20.122.187.158:63962] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/public/file.php"] [unique_id "achDtKug2IHuyGgCTn8OWQAAAA4"]
[Sun Mar 29 05:10:13.362472 2026] [:error] [pid 32359:tid 32384] [client 20.122.187.158:63280] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/public/file.php"] [unique_id "achDtQMb8G3UzfQP3WjNJQAAANc"]
[Sun Mar 29 05:10:13.806550 2026] [:error] [pid 32359:tid 32382] [client 20.122.187.158:63988] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/public/file.php"] [unique_id "achDtQMb8G3UzfQP3WjNJgAAANU"]
[Sun Mar 29 05:10:14.271951 2026] [:error] [pid 32359:tid 32378] [client 20.122.187.158:63340] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xxw.php"] [unique_id "achDtgMb8G3UzfQP3WjNKAAAANE"]
[Sun Mar 29 05:10:14.863592 2026] [:error] [pid 32359:tid 32371] [client 20.122.187.158:63924] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xxw.php"] [unique_id "achDtgMb8G3UzfQP3WjNKQAAAMo"]
[Sun Mar 29 05:10:15.528106 2026] [:error] [pid 32254:tid 32286] [client 20.122.187.158:62667] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xxw.php"] [unique_id "achDt6ug2IHuyGgCTn8OXQAAABY"]
[Sun Mar 29 05:10:16.453475 2026] [:error] [pid 1524:tid 1528] [client 20.122.187.158:63290] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xxw.php"] [unique_id "achDuFoaWSl2asqQCh8RRAAAAQE"]
[Sun Mar 29 05:10:17.039959 2026] [:error] [pid 32257:tid 32330] [client 20.122.187.158:62644] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wen.php"] [unique_id "achDuSE3TArOFrUtgWoqtgAAAIw"]
[Sun Mar 29 05:10:17.550892 2026] [:error] [pid 32359:tid 32379] [client 20.122.187.158:62670] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wen.php"] [unique_id "achDuQMb8G3UzfQP3WjNLAAAANI"]
[Sun Mar 29 05:10:18.169460 2026] [:error] [pid 32257:tid 32338] [client 20.122.187.158:63286] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wen.php"] [unique_id "achDuiE3TArOFrUtgWoquAAAAJQ"]
[Sun Mar 29 05:10:18.716516 2026] [:error] [pid 32359:tid 32377] [client 20.122.187.158:63248] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wen.php"] [unique_id "achDugMb8G3UzfQP3WjNLQAAANA"]
[Sun Mar 29 05:10:19.199104 2026] [:error] [pid 32257:tid 32329] [client 20.122.187.158:64508] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws87.php"] [unique_id "achDuyE3TArOFrUtgWoquwAAAIs"]
[Sun Mar 29 05:10:19.640993 2026] [:error] [pid 1524:tid 1527] [client 20.122.187.158:62658] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws87.php"] [unique_id "achDu1oaWSl2asqQCh8RRwAAAQA"]
[Sun Mar 29 05:10:20.168543 2026] [:error] [pid 32257:tid 32336] [client 20.122.187.158:64457] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws87.php"] [unique_id "achDvCE3TArOFrUtgWoqvwAAAJI"]
[Sun Mar 29 05:10:20.646047 2026] [:error] [pid 32257:tid 32332] [client 20.122.187.158:64474] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws87.php"] [unique_id "achDvCE3TArOFrUtgWoqwAAAAI4"]
[Sun Mar 29 05:10:21.117433 2026] [proxy_fcgi:error] [pid 32359:tid 32382] [client 20.122.187.158:64411] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 05:10:21.330164 2026] [proxy_fcgi:error] [pid 32359:tid 32369] [client 20.122.187.158:64411] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 05:10:21.534717 2026] [proxy_fcgi:error] [pid 32359:tid 32374] [client 20.122.187.158:64411] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 05:10:21.740952 2026] [proxy_fcgi:error] [pid 32359:tid 32376] [client 20.122.187.158:64411] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 05:10:21.946386 2026] [proxy_fcgi:error] [pid 32359:tid 32364] [client 20.122.187.158:64411] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 05:10:22.183195 2026] [proxy_fcgi:error] [pid 32359:tid 32381] [client 20.122.187.158:64411] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 05:10:22.392751 2026] [proxy_fcgi:error] [pid 32359:tid 32379] [client 20.122.187.158:64411] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 05:10:22.595048 2026] [proxy_fcgi:error] [pid 32359:tid 32361] [client 20.122.187.158:64411] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 05:10:23.040041 2026] [proxy_fcgi:error] [pid 32359:tid 32362] [client 20.122.187.158:64411] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 05:10:23.246329 2026] [proxy_fcgi:error] [pid 32359:tid 32363] [client 20.122.187.158:64411] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 05:10:23.446625 2026] [:error] [pid 32359:tid 32373] [client 20.122.187.158:64411] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wtiiy.php"] [unique_id "achDvwMb8G3UzfQP3WjNQQAAAMw"]
[Sun Mar 29 05:10:24.067465 2026] [:error] [pid 1524:tid 1553] [client 20.122.187.158:63933] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wtiiy.php"] [unique_id "achDwFoaWSl2asqQCh8RTAAAARU"]
[Sun Mar 29 05:10:24.536640 2026] [:error] [pid 32257:tid 32324] [client 20.122.187.158:62686] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wtiiy.php"] [unique_id "achDwCE3TArOFrUtgWoqywAAAIY"]
[Sun Mar 29 05:10:25.167794 2026] [:error] [pid 32359:tid 32372] [client 20.122.187.158:63356] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wtiiy.php"] [unique_id "achDwQMb8G3UzfQP3WjNQgAAAMs"]
[Sun Mar 29 05:10:25.652387 2026] [:error] [pid 32359:tid 32385] [client 20.122.187.158:62593] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ajax.php"] [unique_id "achDwQMb8G3UzfQP3WjNQwAAANg"]
[Sun Mar 29 05:10:26.108135 2026] [:error] [pid 32255:tid 32302] [client 20.122.187.158:63900] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ajax.php"] [unique_id "achDwmnfn-AtRoMbquxG7gAAAEs"]
[Sun Mar 29 05:10:26.532272 2026] [:error] [pid 32255:tid 32306] [client 20.122.187.158:63917] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ajax.php"] [unique_id "achDwmnfn-AtRoMbquxG7wAAAE8"]
[Sun Mar 29 05:10:27.113943 2026] [:error] [pid 1524:tid 1545] [client 20.122.187.158:64386] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ajax.php"] [unique_id "achDw1oaWSl2asqQCh8RVAAAAQ4"]
[Sun Mar 29 05:10:27.557506 2026] [:error] [pid 1524:tid 1551] [client 20.122.187.158:63350] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/gptsh.php"] [unique_id "achDw1oaWSl2asqQCh8RVwAAARM"]
[Sun Mar 29 05:10:28.009831 2026] [:error] [pid 32257:tid 32340] [client 20.122.187.158:62702] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/gptsh.php"] [unique_id "achDxCE3TArOFrUtgWoq0AAAAJY"]
[Sun Mar 29 05:10:28.452406 2026] [:error] [pid 1524:tid 1556] [client 20.122.187.158:63932] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/gptsh.php"] [unique_id "achDxFoaWSl2asqQCh8RWQAAARg"]
[Sun Mar 29 05:10:28.963582 2026] [:error] [pid 32254:tid 32285] [client 20.122.187.158:63907] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/gptsh.php"] [unique_id "achDxKug2IHuyGgCTn8OYgAAABU"]
[Sun Mar 29 05:10:29.453397 2026] [:error] [pid 1524:tid 1547] [client 20.122.187.158:62596] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "achDxVoaWSl2asqQCh8RWwAAARA"]
[Sun Mar 29 05:10:30.022986 2026] [:error] [pid 32257:tid 32320] [client 20.122.187.158:64438] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "achDxiE3TArOFrUtgWoq1AAAAII"]
[Sun Mar 29 05:10:30.479414 2026] [:error] [pid 32257:tid 32333] [client 20.122.187.158:62656] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "achDxiE3TArOFrUtgWoq1QAAAI8"]
[Sun Mar 29 05:10:30.885470 2026] [:error] [pid 32254:tid 32267] [client 20.122.187.158:63232] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "achDxqug2IHuyGgCTn8OZAAAAAM"]
[Sun Mar 29 05:10:31.358502 2026] [:error] [pid 32255:tid 32308] [client 20.122.187.158:64472] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bgymj.php"] [unique_id "achDx2nfn-AtRoMbquxG9gAAAFE"]
[Sun Mar 29 05:10:31.825958 2026] [:error] [pid 32255:tid 32298] [client 20.122.187.158:64447] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bgymj.php"] [unique_id "achDx2nfn-AtRoMbquxG-QAAAEc"]
[Sun Mar 29 05:10:32.232105 2026] [:error] [pid 32255:tid 32313] [client 20.122.187.158:63876] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bgymj.php"] [unique_id "achDyGnfn-AtRoMbquxG-gAAAFY"]
[Sun Mar 29 05:10:32.632509 2026] [:error] [pid 32254:tid 32270] [client 20.122.187.158:62685] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bgymj.php"] [unique_id "achDyKug2IHuyGgCTn8OaQAAAAY"]
[Sun Mar 29 05:10:33.040804 2026] [:error] [pid 32255:tid 32300] [client 20.122.187.158:63346] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ah25.php"] [unique_id "achDyWnfn-AtRoMbquxG_gAAAEk"]
[Sun Mar 29 05:10:33.472781 2026] [:error] [pid 32257:tid 32328] [client 20.122.187.158:62076] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ah25.php"] [unique_id "achDySE3TArOFrUtgWoq2gAAAIo"]
[Sun Mar 29 05:10:34.060549 2026] [:error] [pid 32359:tid 32379] [client 20.122.187.158:64414] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ah25.php"] [unique_id "achDygMb8G3UzfQP3WjNTAAAANI"]
[Sun Mar 29 05:10:34.706824 2026] [:error] [pid 32257:tid 32340] [client 20.122.187.158:63272] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ah25.php"] [unique_id "achDyiE3TArOFrUtgWoq3AAAAJY"]
[Sun Mar 29 05:10:35.195800 2026] [:error] [pid 32257:tid 32338] [client 20.122.187.158:63357] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws60.php"] [unique_id "achDyyE3TArOFrUtgWoq4AAAAJQ"]
[Sun Mar 29 05:10:35.683731 2026] [:error] [pid 1524:tid 1538] [client 20.122.187.158:63927] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws60.php"] [unique_id "achDy1oaWSl2asqQCh8RYQAAAQk"]
[Sun Mar 29 05:10:36.093278 2026] [:error] [pid 32255:tid 32309] [client 20.122.187.158:63955] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws60.php"] [unique_id "achDzGnfn-AtRoMbquxG_wAAAFI"]
[Sun Mar 29 05:10:36.559117 2026] [:error] [pid 32257:tid 32320] [client 20.122.187.158:63258] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws60.php"] [unique_id "achDzCE3TArOFrUtgWoq5AAAAII"]
[Sun Mar 29 05:10:37.123690 2026] [:error] [pid 1524:tid 1527] [client 20.122.187.158:64447] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/motu.php"] [unique_id "achDzVoaWSl2asqQCh8RYwAAAQA"]
[Sun Mar 29 05:10:37.628254 2026] [:error] [pid 32257:tid 32339] [client 20.122.187.158:63909] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/motu.php"] [unique_id "achDzSE3TArOFrUtgWoq5wAAAJU"]
[Sun Mar 29 05:10:38.158980 2026] [:error] [pid 32359:tid 32375] [client 20.122.187.158:63233] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/motu.php"] [unique_id "achDzgMb8G3UzfQP3WjNUQAAAM4"]
[Sun Mar 29 05:10:38.591293 2026] [:error] [pid 32359:tid 32373] [client 20.122.187.158:62635] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/motu.php"] [unique_id "achDzgMb8G3UzfQP3WjNUgAAAMw"]
[Sun Mar 29 05:10:39.015043 2026] [:error] [pid 32359:tid 32372] [client 20.122.187.158:64394] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/buc.php"] [unique_id "achDzwMb8G3UzfQP3WjNUwAAAMs"]
[Sun Mar 29 05:10:39.425161 2026] [:error] [pid 1524:tid 1533] [client 20.122.187.158:62605] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/buc.php"] [unique_id "achDz1oaWSl2asqQCh8RZgAAAQU"]
[Sun Mar 29 05:10:39.875914 2026] [:error] [pid 32257:tid 32318] [client 20.122.187.158:63235] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/buc.php"] [unique_id "achDzyE3TArOFrUtgWoq7QAAAIA"]
[Sun Mar 29 05:10:40.295286 2026] [:error] [pid 32257:tid 32320] [client 20.122.187.158:63328] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/buc.php"] [unique_id "achD0CE3TArOFrUtgWoq8QAAAII"]
[Sun Mar 29 05:10:40.710402 2026] [:error] [pid 1524:tid 1547] [client 20.122.187.158:63322] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/myfile.php"] [unique_id "achD0FoaWSl2asqQCh8RZwAAARA"]
[Sun Mar 29 05:10:41.422627 2026] [:error] [pid 32257:tid 32332] [client 20.122.187.158:63929] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/myfile.php"] [unique_id "achD0SE3TArOFrUtgWoq9gAAAI4"]
[Sun Mar 29 05:10:41.883925 2026] [:error] [pid 32257:tid 32323] [client 20.122.187.158:62622] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/myfile.php"] [unique_id "achD0SE3TArOFrUtgWoq-QAAAIU"]
[Sun Mar 29 05:10:42.290509 2026] [:error] [pid 32359:tid 32369] [client 20.122.187.158:64436] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/myfile.php"] [unique_id "achD0gMb8G3UzfQP3WjNVgAAAMg"]
[Sun Mar 29 05:10:42.697274 2026] [:error] [pid 32359:tid 32367] [client 20.122.187.158:62694] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-the.php"] [unique_id "achD0gMb8G3UzfQP3WjNVwAAAMY"]
[Sun Mar 29 05:10:43.110913 2026] [:error] [pid 32257:tid 32338] [client 20.122.187.158:62711] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-the.php"] [unique_id "achD0yE3TArOFrUtgWoq-wAAAJQ"]
[Sun Mar 29 05:10:43.563655 2026] [:error] [pid 32257:tid 32328] [client 20.122.187.158:62020] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-the.php"] [unique_id "achD0yE3TArOFrUtgWoq_QAAAIo"]
[Sun Mar 29 05:10:43.994869 2026] [:error] [pid 32257:tid 32329] [client 20.122.187.158:62659] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-the.php"] [unique_id "achD0yE3TArOFrUtgWorAAAAAIs"]
[Sun Mar 29 05:10:45.124788 2026] [:error] [pid 32359:tid 32364] [client 20.122.187.158:63244] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/okxh.php"] [unique_id "achD1QMb8G3UzfQP3WjNWwAAAMM"]
[Sun Mar 29 05:10:45.545336 2026] [:error] [pid 32257:tid 32337] [client 20.122.187.158:63335] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/okxh.php"] [unique_id "achD1SE3TArOFrUtgWorAwAAAJM"]
[Sun Mar 29 05:10:46.066538 2026] [:error] [pid 32257:tid 32322] [client 20.122.187.158:64450] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/okxh.php"] [unique_id "achD1iE3TArOFrUtgWorBwAAAIQ"]
[Sun Mar 29 05:10:46.522855 2026] [:error] [pid 32254:tid 32272] [client 20.122.187.158:62634] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/okxh.php"] [unique_id "achD1qug2IHuyGgCTn8OcwAAAAg"]
[Sun Mar 29 05:10:47.175742 2026] [:error] [pid 1524:tid 1555] [client 20.122.187.158:62056] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/lib.php"] [unique_id "achD11oaWSl2asqQCh8RbAAAARc"]
[Sun Mar 29 05:10:47.731027 2026] [:error] [pid 1524:tid 1532] [client 20.122.187.158:63292] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/lib.php"] [unique_id "achD11oaWSl2asqQCh8RbwAAAQQ"]
[Sun Mar 29 05:10:48.368779 2026] [:error] [pid 1524:tid 1549] [client 20.122.187.158:63887] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/lib.php"] [unique_id "achD2FoaWSl2asqQCh8RcgAAARI"]
[Sun Mar 29 05:10:48.847831 2026] [:error] [pid 1524:tid 1533] [client 20.122.187.158:62698] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/lib.php"] [unique_id "achD2FoaWSl2asqQCh8RdQAAAQU"]
[Sun Mar 29 05:10:49.344649 2026] [:error] [pid 32254:tid 32287] [client 20.122.187.158:62624] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/zc-104.php"] [unique_id "achD2aug2IHuyGgCTn8OdQAAABc"]
[Sun Mar 29 05:10:50.207606 2026] [:error] [pid 32359:tid 32363] [client 20.122.187.158:62680] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/zc-104.php"] [unique_id "achD2gMb8G3UzfQP3WjNXwAAAMI"]
[Sun Mar 29 05:10:50.987602 2026] [:error] [pid 32359:tid 32384] [client 20.122.187.158:62715] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/zc-104.php"] [unique_id "achD2gMb8G3UzfQP3WjNYgAAANc"]
[Sun Mar 29 05:10:51.592669 2026] [:error] [pid 32254:tid 32284] [client 20.122.187.158:63320] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/zc-104.php"] [unique_id "achD26ug2IHuyGgCTn8OdwAAABQ"]
[Sun Mar 29 05:10:52.158682 2026] [:error] [pid 32254:tid 32273] [client 20.122.187.158:63278] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws86.php"] [unique_id "achD3Kug2IHuyGgCTn8OeAAAAAk"]
[Sun Mar 29 05:10:52.642926 2026] [:error] [pid 32255:tid 32312] [client 20.122.187.158:62676] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws86.php"] [unique_id "achD3Gnfn-AtRoMbquxHCAAAAFU"]
[Sun Mar 29 05:10:53.288056 2026] [:error] [pid 32257:tid 32331] [client 20.122.187.158:63905] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws86.php"] [unique_id "achD3SE3TArOFrUtgWorGAAAAI0"]
[Sun Mar 29 05:10:53.698819 2026] [:error] [pid 32257:tid 32335] [client 20.122.187.158:63957] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws86.php"] [unique_id "achD3SE3TArOFrUtgWorGgAAAJE"]
[Sun Mar 29 05:10:54.224617 2026] [:error] [pid 32257:tid 32329] [client 20.122.187.158:63325] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-blogs.php"] [unique_id "achD3iE3TArOFrUtgWorHQAAAIs"]
[Sun Mar 29 05:10:54.742776 2026] [:error] [pid 32359:tid 32374] [client 20.122.187.158:63890] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-blogs.php"] [unique_id "achD3gMb8G3UzfQP3WjNaQAAAM0"]
[Sun Mar 29 05:10:55.167574 2026] [:error] [pid 1524:tid 1549] [client 20.122.187.158:62617] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-blogs.php"] [unique_id "achD31oaWSl2asqQCh8RfAAAARI"]
[Sun Mar 29 05:10:55.610121 2026] [:error] [pid 32257:tid 32323] [client 20.122.187.158:63874] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-blogs.php"] [unique_id "achD3yE3TArOFrUtgWorIwAAAIU"]
[Sun Mar 29 05:10:56.130913 2026] [:error] [pid 32257:tid 32341] [client 20.122.187.158:63919] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/as.php"] [unique_id "achD4CE3TArOFrUtgWorJAAAAJc"]
[Sun Mar 29 05:10:56.638656 2026] [:error] [pid 32254:tid 32282] [client 20.122.187.158:62675] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/as.php"] [unique_id "achD4Kug2IHuyGgCTn8OewAAABI"]
[Sun Mar 29 05:10:57.111432 2026] [:error] [pid 32257:tid 32329] [client 20.122.187.158:64408] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/as.php"] [unique_id "achD4SE3TArOFrUtgWorJwAAAIs"]
[Sun Mar 29 05:10:57.547256 2026] [:error] [pid 32254:tid 32283] [client 20.122.187.158:64464] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/as.php"] [unique_id "achD4aug2IHuyGgCTn8OfwAAABM"]
[Sun Mar 29 05:10:57.951306 2026] [:error] [pid 32359:tid 32366] [client 20.122.187.158:63288] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/Cap.php"] [unique_id "achD4QMb8G3UzfQP3WjNawAAAMU"]
[Sun Mar 29 05:10:58.399208 2026] [:error] [pid 32359:tid 32384] [client 20.122.187.158:63297] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/Cap.php"] [unique_id "achD4gMb8G3UzfQP3WjNbQAAANc"]
[Sun Mar 29 05:10:58.809649 2026] [:error] [pid 32257:tid 32318] [client 20.122.187.158:63926] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/Cap.php"] [unique_id "achD4iE3TArOFrUtgWorKAAAAIA"]
[Sun Mar 29 05:10:59.263098 2026] [:error] [pid 32257:tid 32338] [client 20.122.187.158:63928] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/Cap.php"] [unique_id "achD4yE3TArOFrUtgWorKwAAAJQ"]
[Sun Mar 29 05:10:59.672741 2026] [:error] [pid 1524:tid 1544] [client 20.122.187.158:63915] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xfun.php"] [unique_id "achD41oaWSl2asqQCh8RgwAAAQ0"]
[Sun Mar 29 05:11:00.167140 2026] [:error] [pid 1524:tid 1545] [client 20.122.187.158:63296] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xfun.php"] [unique_id "achD5FoaWSl2asqQCh8RhQAAAQ4"]
[Sun Mar 29 05:11:00.682881 2026] [:error] [pid 32257:tid 32324] [client 20.122.187.158:62597] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xfun.php"] [unique_id "achD5CE3TArOFrUtgWorLQAAAIY"]
[Sun Mar 29 05:11:01.154504 2026] [:error] [pid 32255:tid 32302] [client 20.122.187.158:63313] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xfun.php"] [unique_id "achD5Wnfn-AtRoMbquxHCQAAAEs"]
[Sun Mar 29 05:11:01.590302 2026] [:error] [pid 1524:tid 1553] [client 20.122.187.158:63969] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bjfl.php"] [unique_id "achD5VoaWSl2asqQCh8RiQAAARU"]
[Sun Mar 29 05:11:02.038891 2026] [:error] [pid 1524:tid 1549] [client 20.122.187.158:64402] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bjfl.php"] [unique_id "achD5loaWSl2asqQCh8RiwAAARI"]
[Sun Mar 29 05:11:02.444666 2026] [:error] [pid 32359:tid 32377] [client 20.122.187.158:63996] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bjfl.php"] [unique_id "achD5gMb8G3UzfQP3WjNcQAAANA"]
[Sun Mar 29 05:11:02.876703 2026] [:error] [pid 32254:tid 32274] [client 20.122.187.158:63245] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bjfl.php"] [unique_id "achD5qug2IHuyGgCTn8OhAAAAAo"]
[Sun Mar 29 05:11:03.398143 2026] [:error] [pid 1524:tid 1547] [client 20.122.187.158:61953] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/155.php"] [unique_id "achD51oaWSl2asqQCh8RjQAAARA"]
[Sun Mar 29 05:11:03.831679 2026] [:error] [pid 32255:tid 32291] [client 20.122.187.158:63348] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/155.php"] [unique_id "achD52nfn-AtRoMbquxHDwAAAEA"]
[Sun Mar 29 05:11:04.272066 2026] [:error] [pid 1524:tid 1548] [client 20.122.187.158:62693] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/155.php"] [unique_id "achD6FoaWSl2asqQCh8RkQAAARE"]
[Sun Mar 29 05:11:04.718359 2026] [:error] [pid 32255:tid 32297] [client 20.122.187.158:63281] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/155.php"] [unique_id "achD6Gnfn-AtRoMbquxHEgAAAEY"]
[Sun Mar 29 05:11:05.180336 2026] [:error] [pid 1524:tid 1545] [client 20.122.187.158:63355] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/rzki.php"] [unique_id "achD6VoaWSl2asqQCh8RlQAAAQ4"]
[Sun Mar 29 05:11:05.654750 2026] [:error] [pid 32255:tid 32305] [client 20.122.187.158:64502] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/rzki.php"] [unique_id "achD6Wnfn-AtRoMbquxHEwAAAE4"]
[Sun Mar 29 05:11:06.138891 2026] [:error] [pid 1524:tid 1543] [client 20.122.187.158:64454] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/rzki.php"] [unique_id "achD6loaWSl2asqQCh8RmQAAAQw"]
[Sun Mar 29 05:11:06.625565 2026] [:error] [pid 32359:tid 32370] [client 20.122.187.158:63283] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/rzki.php"] [unique_id "achD6gMb8G3UzfQP3WjNdQAAAMk"]
[Sun Mar 29 05:11:07.074733 2026] [:error] [pid 32359:tid 32366] [client 20.122.187.158:63309] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/classwithtostring.php"] [unique_id "achD6wMb8G3UzfQP3WjNegAAAMU"]
[Sun Mar 29 05:11:07.493816 2026] [:error] [pid 32255:tid 32312] [client 20.122.187.158:63339] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/classwithtostring.php"] [unique_id "achD62nfn-AtRoMbquxHFwAAAFU"]
[Sun Mar 29 05:11:07.952177 2026] [:error] [pid 32255:tid 32301] [client 20.122.187.158:64400] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/classwithtostring.php"] [unique_id "achD62nfn-AtRoMbquxHGAAAAEo"]
[Sun Mar 29 05:11:08.384619 2026] [:error] [pid 32255:tid 32304] [client 20.122.187.158:64466] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/classwithtostring.php"] [unique_id "achD7Gnfn-AtRoMbquxHGwAAAE0"]
[Sun Mar 29 05:11:08.861664 2026] [:error] [pid 32359:tid 32378] [client 20.122.187.158:62690] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws49.php"] [unique_id "achD7AMb8G3UzfQP3WjNfQAAANE"]
[Sun Mar 29 05:11:09.344823 2026] [:error] [pid 1524:tid 1527] [client 20.122.187.158:62620] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws49.php"] [unique_id "achD7VoaWSl2asqQCh8RoAAAAQA"]
[Sun Mar 29 05:11:09.749114 2026] [:error] [pid 32255:tid 32315] [client 20.122.187.158:64467] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws49.php"] [unique_id "achD7Wnfn-AtRoMbquxHHgAAAFg"]
[Sun Mar 29 05:11:10.166567 2026] [:error] [pid 32359:tid 32371] [client 20.122.187.158:62047] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws49.php"] [unique_id "achD7gMb8G3UzfQP3WjNgAAAAMo"]
[Sun Mar 29 05:11:10.573979 2026] [:error] [pid 1524:tid 1536] [client 20.122.187.158:62652] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/tool.php"] [unique_id "achD7loaWSl2asqQCh8RogAAAQc"]
[Sun Mar 29 05:11:11.010751 2026] [:error] [pid 1524:tid 1543] [client 20.122.187.158:62647] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/tool.php"] [unique_id "achD71oaWSl2asqQCh8RowAAAQw"]
[Sun Mar 29 05:11:11.442550 2026] [:error] [pid 32257:tid 32333] [client 20.122.187.158:63934] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/tool.php"] [unique_id "achD7yE3TArOFrUtgWorNAAAAI8"]
[Sun Mar 29 05:11:11.849628 2026] [:error] [pid 1524:tid 1553] [client 20.122.187.158:64453] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/tool.php"] [unique_id "achD71oaWSl2asqQCh8RpAAAARU"]
[Sun Mar 29 05:11:12.328727 2026] [:error] [pid 1524:tid 1547] [client 20.122.187.158:63263] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ww.php"] [unique_id "achD8FoaWSl2asqQCh8RqAAAARA"]
[Sun Mar 29 05:11:12.838065 2026] [:error] [pid 32359:tid 32382] [client 20.122.187.158:63264] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ww.php"] [unique_id "achD8AMb8G3UzfQP3WjNhAAAANU"]
[Sun Mar 29 05:11:13.356426 2026] [:error] [pid 32359:tid 32376] [client 20.122.187.158:62602] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ww.php"] [unique_id "achD8QMb8G3UzfQP3WjNiQAAAM8"]
[Sun Mar 29 05:11:13.828230 2026] [:error] [pid 32359:tid 32378] [client 20.122.187.158:63237] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ww.php"] [unique_id "achD8QMb8G3UzfQP3WjNiwAAANE"]
[Sun Mar 29 05:11:14.285125 2026] [:error] [pid 1524:tid 1536] [client 20.122.187.158:62672] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/vanda.php"] [unique_id "achD8loaWSl2asqQCh8RrwAAAQc"]
[Sun Mar 29 05:11:14.747287 2026] [:error] [pid 32254:tid 32276] [client 20.122.187.158:63304] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/vanda.php"] [unique_id "achD8qug2IHuyGgCTn8OhwAAAAw"]
[Sun Mar 29 05:11:15.177851 2026] [:error] [pid 32257:tid 32318] [client 20.122.187.158:63269] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/vanda.php"] [unique_id "achD8yE3TArOFrUtgWorNwAAAIA"]
[Sun Mar 29 05:11:15.595526 2026] [:error] [pid 32359:tid 32370] [client 20.122.187.158:62033] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/vanda.php"] [unique_id "achD8wMb8G3UzfQP3WjNjQAAAMk"]
[Sun Mar 29 05:11:16.103891 2026] [:error] [pid 32255:tid 32301] [client 20.122.187.158:63251] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/nw.php"] [unique_id "achD9Gnfn-AtRoMbquxHJAAAAEo"]
[Sun Mar 29 05:11:16.513755 2026] [:error] [pid 32255:tid 32311] [client 20.122.187.158:62051] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/nw.php"] [unique_id "achD9Gnfn-AtRoMbquxHJgAAAFQ"]
[Sun Mar 29 05:11:17.077412 2026] [:error] [pid 32359:tid 32368] [client 20.122.187.158:64505] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/nw.php"] [unique_id "achD9QMb8G3UzfQP3WjNjwAAAMc"]
[Sun Mar 29 05:11:17.495453 2026] [:error] [pid 32257:tid 32331] [client 20.122.187.158:63910] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/nw.php"] [unique_id "achD9SE3TArOFrUtgWorOwAAAI0"]
[Sun Mar 29 05:11:18.002350 2026] [:error] [pid 1524:tid 1533] [client 20.122.187.158:61992] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/cu.php"] [unique_id "achD9loaWSl2asqQCh8RtgAAAQU"]
[Sun Mar 29 05:11:18.498952 2026] [:error] [pid 32257:tid 32337] [client 20.122.187.158:63892] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/cu.php"] [unique_id "achD9iE3TArOFrUtgWorPgAAAJM"]
[Sun Mar 29 05:11:19.977354 2026] [:error] [pid 32359:tid 32383] [client 20.122.187.158:63912] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/cu.php"] [unique_id "achD9wMb8G3UzfQP3WjNlAAAANY"]
[Sun Mar 29 05:11:20.503966 2026] [:error] [pid 32359:tid 32381] [client 20.122.187.158:63347] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/cu.php"] [unique_id "achD-AMb8G3UzfQP3WjNlgAAANQ"]
[Sun Mar 29 05:11:20.967981 2026] [:error] [pid 32359:tid 32361] [client 20.122.187.158:62627] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/t.php"] [unique_id "achD-AMb8G3UzfQP3WjNmAAAAMA"]
[Sun Mar 29 05:11:21.378616 2026] [:error] [pid 32255:tid 32291] [client 20.122.187.158:62673] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/t.php"] [unique_id "achD-Wnfn-AtRoMbquxHKAAAAEA"]
[Sun Mar 29 05:11:21.921978 2026] [:error] [pid 32359:tid 32370] [client 20.122.187.158:62631] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/t.php"] [unique_id "achD-QMb8G3UzfQP3WjNmQAAAMk"]
[Sun Mar 29 05:11:22.335993 2026] [:error] [pid 32257:tid 32328] [client 20.122.187.158:61977] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/t.php"] [unique_id "achD-iE3TArOFrUtgWorQwAAAIo"]
[Sun Mar 29 05:11:22.779713 2026] [:error] [pid 1524:tid 1541] [client 20.122.187.158:62043] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ms.php"] [unique_id "achD-loaWSl2asqQCh8RuwAAAQo"]
[Sun Mar 29 05:11:23.466025 2026] [proxy_fcgi:error] [pid 32359:tid 32367] [client 20.122.187.158:63253] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 05:11:23.809441 2026] [proxy_fcgi:error] [pid 32359:tid 32380] [client 20.122.187.158:63253] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 05:11:24.041563 2026] [proxy_fcgi:error] [pid 32359:tid 32366] [client 20.122.187.158:63253] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 05:11:24.249468 2026] [proxy_fcgi:error] [pid 32359:tid 32368] [client 20.122.187.158:63253] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 05:11:24.456368 2026] [proxy_fcgi:error] [pid 32359:tid 32375] [client 20.122.187.158:63253] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 05:11:24.662610 2026] [proxy_fcgi:error] [pid 32359:tid 32373] [client 20.122.187.158:63253] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 05:11:25.129284 2026] [proxy_fcgi:error] [pid 32359:tid 32379] [client 20.122.187.158:63253] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 05:11:25.375353 2026] [proxy_fcgi:error] [pid 32359:tid 32382] [client 20.122.187.158:63253] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 05:11:25.578448 2026] [proxy_fcgi:error] [pid 32359:tid 32372] [client 20.122.187.158:63253] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 05:11:25.781687 2026] [proxy_fcgi:error] [pid 32359:tid 32383] [client 20.122.187.158:63253] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 05:11:26.013747 2026] [:error] [pid 32359:tid 32384] [client 20.122.187.158:63253] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/abc.php"] [unique_id "achD_gMb8G3UzfQP3WjNpgAAANc"]
[Sun Mar 29 05:11:26.500997 2026] [:error] [pid 32257:tid 32337] [client 20.122.187.158:64507] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/abc.php"] [unique_id "achD_iE3TArOFrUtgWorSgAAAJM"]
[Sun Mar 29 05:11:26.987153 2026] [:error] [pid 32255:tid 32294] [client 20.122.187.158:62709] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/abc.php"] [unique_id "achD_mnfn-AtRoMbquxHLwAAAEM"]
[Sun Mar 29 05:11:27.416847 2026] [:error] [pid 1524:tid 1528] [client 20.122.187.158:63305] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/abc.php"] [unique_id "achD_1oaWSl2asqQCh8RvQAAAQE"]
[Sun Mar 29 05:11:27.830622 2026] [:error] [pid 1524:tid 1553] [client 20.122.187.158:63925] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-png.php"] [unique_id "achD_1oaWSl2asqQCh8RvgAAARU"]
[Sun Mar 29 05:11:28.262733 2026] [:error] [pid 32257:tid 32333] [client 20.122.187.158:63307] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-png.php"] [unique_id "achEACE3TArOFrUtgWorTQAAAI8"]
[Sun Mar 29 05:11:28.998461 2026] [:error] [pid 32257:tid 32329] [client 20.122.187.158:63984] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-png.php"] [unique_id "achEACE3TArOFrUtgWorTwAAAIs"]
[Sun Mar 29 05:11:29.776519 2026] [:error] [pid 32257:tid 32328] [client 20.122.187.158:63259] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-png.php"] [unique_id "achEASE3TArOFrUtgWorUgAAAIo"]
[Sun Mar 29 05:11:30.241995 2026] [:error] [pid 32257:tid 32320] [client 20.122.187.158:62688] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/jp.php"] [unique_id "achEAiE3TArOFrUtgWorUwAAAII"]
[Sun Mar 29 05:11:30.710838 2026] [:error] [pid 32255:tid 32303] [client 20.122.187.158:63873] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/jp.php"] [unique_id "achEAmnfn-AtRoMbquxHPAAAAEw"]
[Sun Mar 29 05:11:31.210085 2026] [:error] [pid 32359:tid 32367] [client 20.122.187.158:63240] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/jp.php"] [unique_id "achEAwMb8G3UzfQP3WjNswAAAMY"]
[Sun Mar 29 05:11:31.614937 2026] [:error] [pid 32257:tid 32331] [client 20.122.187.158:62660] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/jp.php"] [unique_id "achEAyE3TArOFrUtgWorVQAAAI0"]
[Sun Mar 29 05:11:32.053104 2026] [:error] [pid 32257:tid 32324] [client 20.122.187.158:62714] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/tfm.php"] [unique_id "achEBCE3TArOFrUtgWorVgAAAIY"]
[Sun Mar 29 05:11:32.510220 2026] [:error] [pid 32257:tid 32337] [client 20.122.187.158:62060] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/tfm.php"] [unique_id "achEBCE3TArOFrUtgWorWAAAAJM"]
[Sun Mar 29 05:11:33.054885 2026] [:error] [pid 32257:tid 32341] [client 20.122.187.158:63267] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/tfm.php"] [unique_id "achEBSE3TArOFrUtgWorXwAAAJc"]
[Sun Mar 29 05:11:33.612535 2026] [:error] [pid 32255:tid 32296] [client 20.122.187.158:63262] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/tfm.php"] [unique_id "achEBWnfn-AtRoMbquxHPwAAAEU"]
[Sun Mar 29 05:11:34.046383 2026] [:error] [pid 32359:tid 32372] [client 20.122.187.158:62609] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/admin-footer.php"] [unique_id "achEBgMb8G3UzfQP3WjNtgAAAMs"]
[Sun Mar 29 05:11:34.536825 2026] [:error] [pid 1524:tid 1527] [client 20.122.187.158:64416] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/admin-footer.php"] [unique_id "achEBloaWSl2asqQCh8RxAAAAQA"]
[Sun Mar 29 05:11:35.035531 2026] [:error] [pid 32255:tid 32302] [client 20.122.187.158:61351] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/admin-footer.php"] [unique_id "achEB2nfn-AtRoMbquxHQAAAAEs"]
[Sun Mar 29 05:11:35.559378 2026] [:error] [pid 32255:tid 32301] [client 20.122.187.158:63265] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/admin-footer.php"] [unique_id "achEB2nfn-AtRoMbquxHQQAAAEo"]
[Sun Mar 29 08:21:02.249938 2026] [proxy_fcgi:error] [pid 23168:tid 23213] [client 20.151.113.137:38971] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 08:21:02.458351 2026] [proxy_fcgi:error] [pid 23168:tid 23219] [client 20.151.113.137:38971] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 08:21:02.676316 2026] [proxy_fcgi:error] [pid 23168:tid 23209] [client 20.151.113.137:38971] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 08:21:02.889534 2026] [proxy_fcgi:error] [pid 23168:tid 23207] [client 20.151.113.137:38971] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 08:21:03.110792 2026] [proxy_fcgi:error] [pid 23168:tid 23216] [client 20.151.113.137:38971] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 08:21:03.319295 2026] [proxy_fcgi:error] [pid 23168:tid 23206] [client 20.151.113.137:38971] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 08:21:03.529554 2026] [proxy_fcgi:error] [pid 23168:tid 23220] [client 20.151.113.137:38971] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 08:21:03.754745 2026] [proxy_fcgi:error] [pid 23168:tid 23201] [client 20.151.113.137:38971] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 08:21:03.964341 2026] [proxy_fcgi:error] [pid 23168:tid 23211] [client 20.151.113.137:38971] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 08:21:04.172276 2026] [proxy_fcgi:error] [pid 23168:tid 23198] [client 20.151.113.137:38971] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 08:21:04.380859 2026] [:error] [pid 23168:tid 23217] [client 20.151.113.137:38971] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xsas.php"] [unique_id "achwcGP8p0yRL8ot_28NGQAAAhQ"]
[Sun Mar 29 08:21:04.953553 2026] [:error] [pid 23250:tid 23259] [client 20.151.113.137:5333] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xsas.php"] [unique_id "achwcJxrpj-dQjy1cvpYzwAAAkc"]
[Sun Mar 29 08:21:05.392189 2026] [:error] [pid 23284:tid 23296] [client 20.151.113.137:64079] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xsas.php"] [unique_id "achwcYzBujdPHsq7wyRwGQAAAoo"]
[Sun Mar 29 08:21:05.850744 2026] [:error] [pid 23284:tid 23287] [client 20.151.113.137:65326] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xsas.php"] [unique_id "achwcYzBujdPHsq7wyRwHQAAAoE"]
[Sun Mar 29 08:21:06.342469 2026] [:error] [pid 23284:tid 23291] [client 20.151.113.137:5373] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/a5.php"] [unique_id "achwcozBujdPHsq7wyRwIQAAAoU"]
[Sun Mar 29 08:21:06.797901 2026] [:error] [pid 32255:tid 32297] [client 20.151.113.137:36559] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/a5.php"] [unique_id "achwcmnfn-AtRoMbquyGiAAAAEY"]
[Sun Mar 29 08:21:07.284983 2026] [:error] [pid 23167:tid 23189] [client 20.151.113.137:65336] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/a5.php"] [unique_id "achwcxIAHJCFaHff3_eI0AAAAdM"]
[Sun Mar 29 08:21:07.737449 2026] [:error] [pid 23167:tid 23170] [client 20.151.113.137:38930] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/a5.php"] [unique_id "achwcxIAHJCFaHff3_eI0gAAAcA"]
[Sun Mar 29 08:21:08.166516 2026] [:error] [pid 32257:tid 32340] [client 20.151.113.137:65292] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-blog-header.php"] [unique_id "achwdCE3TArOFrUtgWpeXgAAAJY"]
[Sun Mar 29 08:21:08.643893 2026] [:error] [pid 23168:tid 23205] [client 20.151.113.137:5346] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-blog-header.php"] [unique_id "achwdGP8p0yRL8ot_28NGgAAAgg"]
[Sun Mar 29 08:21:09.099745 2026] [:error] [pid 1524:tid 1551] [client 20.151.113.137:36526] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-blog-header.php"] [unique_id "achwdVoaWSl2asqQCh8zOAAAARM"]
[Sun Mar 29 08:21:09.581185 2026] [:error] [pid 23168:tid 23213] [client 20.151.113.137:64540] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-blog-header.php"] [unique_id "achwdWP8p0yRL8ot_28NHQAAAhA"]
[Sun Mar 29 08:21:10.085510 2026] [:error] [pid 23250:tid 23256] [client 20.151.113.137:36569] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/asasx.php"] [unique_id "achwdpxrpj-dQjy1cvpY1AAAAkQ"]
[Sun Mar 29 08:21:10.585554 2026] [:error] [pid 32255:tid 32313] [client 20.151.113.137:64088] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/asasx.php"] [unique_id "achwdmnfn-AtRoMbquyGiwAAAFY"]
[Sun Mar 29 08:21:11.042037 2026] [:error] [pid 23168:tid 23214] [client 20.151.113.137:5347] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/asasx.php"] [unique_id "achwd2P8p0yRL8ot_28NIAAAAhE"]
[Sun Mar 29 08:21:11.512761 2026] [:error] [pid 23168:tid 23208] [client 20.151.113.137:36579] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/asasx.php"] [unique_id "achwd2P8p0yRL8ot_28NIgAAAgs"]
[Sun Mar 29 08:21:11.951088 2026] [:error] [pid 32257:tid 32328] [client 20.151.113.137:5365] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/file.php"] [unique_id "achwdyE3TArOFrUtgWpeZAAAAIo"]
[Sun Mar 29 08:21:12.410321 2026] [:error] [pid 23250:tid 23258] [client 20.151.113.137:5318] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/file.php"] [unique_id "achweJxrpj-dQjy1cvpY2QAAAkY"]
[Sun Mar 29 08:21:12.886565 2026] [:error] [pid 23284:tid 23302] [client 20.151.113.137:36600] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/file.php"] [unique_id "achweIzBujdPHsq7wyRwLQAAApA"]
[Sun Mar 29 08:21:13.438167 2026] [:error] [pid 23284:tid 23298] [client 20.151.113.137:6126] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/file.php"] [unique_id "achweYzBujdPHsq7wyRwLgAAAow"]
[Sun Mar 29 08:21:13.875982 2026] [:error] [pid 23167:tid 23191] [client 20.151.113.137:64118] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/public/vx.php"] [unique_id "achweRIAHJCFaHff3_eI3wAAAdU"]
[Sun Mar 29 08:21:14.342082 2026] [:error] [pid 32257:tid 32330] [client 20.151.113.137:36487] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/public/vx.php"] [unique_id "achweiE3TArOFrUtgWpeZwAAAIw"]
[Sun Mar 29 08:21:14.811382 2026] [:error] [pid 23250:tid 23259] [client 20.151.113.137:64529] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/public/vx.php"] [unique_id "achwepxrpj-dQjy1cvpY3AAAAkc"]
[Sun Mar 29 08:21:15.255757 2026] [:error] [pid 23284:tid 23288] [client 20.151.113.137:5344] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/public/vx.php"] [unique_id "achwe4zBujdPHsq7wyRwMAAAAoI"]
[Sun Mar 29 08:21:15.715971 2026] [:error] [pid 23168:tid 23204] [client 20.151.113.137:64600] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/sale.php"] [unique_id "achwe2P8p0yRL8ot_28NJwAAAgc"]
[Sun Mar 29 08:21:16.160793 2026] [:error] [pid 23168:tid 23218] [client 20.151.113.137:36491] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/sale.php"] [unique_id "achwfGP8p0yRL8ot_28NKAAAAhU"]
[Sun Mar 29 08:21:16.645623 2026] [:error] [pid 23250:tid 23258] [client 20.151.113.137:65332] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/sale.php"] [unique_id "achwfJxrpj-dQjy1cvpY5wAAAkY"]
[Sun Mar 29 08:21:17.141814 2026] [:error] [pid 23250:tid 23259] [client 20.151.113.137:64527] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/sale.php"] [unique_id "achwfZxrpj-dQjy1cvpY6QAAAkc"]
[Sun Mar 29 08:21:17.614089 2026] [:error] [pid 23284:tid 23289] [client 20.151.113.137:64094] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/kj.php"] [unique_id "achwfYzBujdPHsq7wyRwMQAAAoM"]
[Sun Mar 29 08:21:18.117351 2026] [:error] [pid 23284:tid 23308] [client 20.151.113.137:36501] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/kj.php"] [unique_id "achwfozBujdPHsq7wyRwMwAAApY"]
[Sun Mar 29 08:21:18.595439 2026] [:error] [pid 23284:tid 23294] [client 20.151.113.137:36518] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/kj.php"] [unique_id "achwfozBujdPHsq7wyRwNAAAAog"]
[Sun Mar 29 08:21:19.060301 2026] [:error] [pid 23167:tid 23173] [client 20.151.113.137:6133] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/kj.php"] [unique_id "achwfxIAHJCFaHff3_eI4wAAAcM"]
[Sun Mar 29 08:21:19.572420 2026] [:error] [pid 23167:tid 23172] [client 20.151.113.137:38925] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/2ksm17n.php"] [unique_id "achwfxIAHJCFaHff3_eI5gAAAcI"]
[Sun Mar 29 08:21:20.013980 2026] [:error] [pid 23167:tid 23193] [client 20.151.113.137:64080] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/2ksm17n.php"] [unique_id "achwgBIAHJCFaHff3_eI6gAAAdc"]
[Sun Mar 29 08:21:20.447609 2026] [:error] [pid 32255:tid 32297] [client 20.151.113.137:64066] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/2ksm17n.php"] [unique_id "achwgGnfn-AtRoMbquyGlgAAAEY"]
[Sun Mar 29 08:21:20.877005 2026] [:error] [pid 23167:tid 23181] [client 20.151.113.137:36496] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/2ksm17n.php"] [unique_id "achwgBIAHJCFaHff3_eI8AAAAcs"]
[Sun Mar 29 08:21:21.353075 2026] [:error] [pid 23167:tid 23183] [client 20.151.113.137:6104] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/about.php"] [unique_id "achwgRIAHJCFaHff3_eI8QAAAc0"]
[Sun Mar 29 08:21:21.801837 2026] [:error] [pid 23167:tid 23178] [client 20.151.113.137:5313] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/about.php"] [unique_id "achwgRIAHJCFaHff3_eI9AAAAcg"]
[Sun Mar 29 08:21:22.406769 2026] [:error] [pid 23137:tid 23161] [client 20.151.113.137:36568] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/about.php"] [unique_id "achwghaWQa7LdZ_qGFaVwwAAAZY"]
[Sun Mar 29 08:21:22.933304 2026] [:error] [pid 23137:tid 23141] [client 20.151.113.137:6125] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/about.php"] [unique_id "achwghaWQa7LdZ_qGFaVxAAAAYI"]
[Sun Mar 29 08:21:23.379629 2026] [:error] [pid 23284:tid 23298] [client 20.151.113.137:36573] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/hots.php"] [unique_id "achwg4zBujdPHsq7wyRwPQAAAow"]
[Sun Mar 29 08:21:23.800997 2026] [:error] [pid 32255:tid 32302] [client 20.151.113.137:36499] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/hots.php"] [unique_id "achwg2nfn-AtRoMbquyGmgAAAEs"]
[Sun Mar 29 08:21:24.385117 2026] [:error] [pid 23137:tid 23152] [client 20.151.113.137:65311] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/hots.php"] [unique_id "achwhBaWQa7LdZ_qGFaV0AAAAY0"]
[Sun Mar 29 08:21:24.814277 2026] [:error] [pid 23284:tid 23288] [client 20.151.113.137:64532] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/hots.php"] [unique_id "achwhIzBujdPHsq7wyRwQAAAAoI"]
[Sun Mar 29 08:21:25.306180 2026] [:error] [pid 23167:tid 23181] [client 20.151.113.137:6080] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp5.php"] [unique_id "achwhRIAHJCFaHff3_eI_AAAAcs"]
[Sun Mar 29 08:21:25.726345 2026] [:error] [pid 23167:tid 23183] [client 20.151.113.137:36497] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp5.php"] [unique_id "achwhRIAHJCFaHff3_eI_QAAAc0"]
[Sun Mar 29 08:21:26.177812 2026] [:error] [pid 23167:tid 23193] [client 20.151.113.137:36530] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp5.php"] [unique_id "achwhhIAHJCFaHff3_eJCgAAAdc"]
[Sun Mar 29 08:21:26.709380 2026] [:error] [pid 23137:tid 23163] [client 20.151.113.137:64114] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp5.php"] [unique_id "achwhhaWQa7LdZ_qGFaV2wAAAZg"]
[Sun Mar 29 08:21:27.188724 2026] [:error] [pid 32257:tid 32328] [client 20.151.113.137:38912] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ioxi-o.php"] [unique_id "achwhyE3TArOFrUtgWpecQAAAIo"]
[Sun Mar 29 08:21:27.695610 2026] [:error] [pid 1524:tid 1541] [client 20.151.113.137:36575] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ioxi-o.php"] [unique_id "achwh1oaWSl2asqQCh8zOwAAAQo"]
[Sun Mar 29 08:21:28.153492 2026] [:error] [pid 1524:tid 1543] [client 20.151.113.137:36599] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ioxi-o.php"] [unique_id "achwiFoaWSl2asqQCh8zPQAAAQw"]
[Sun Mar 29 08:21:28.659081 2026] [:error] [pid 32255:tid 32303] [client 20.151.113.137:61665] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ioxi-o.php"] [unique_id "achwiGnfn-AtRoMbquyGrwAAAEw"]
[Sun Mar 29 08:21:29.115207 2026] [:error] [pid 23250:tid 23256] [client 20.151.113.137:65328] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/66.php"] [unique_id "achwiZxrpj-dQjy1cvpY8AAAAkQ"]
[Sun Mar 29 08:21:29.561455 2026] [:error] [pid 32255:tid 32306] [client 20.151.113.137:65340] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/66.php"] [unique_id "achwiWnfn-AtRoMbquyGtQAAAE8"]
[Sun Mar 29 08:21:30.018184 2026] [:error] [pid 32255:tid 32300] [client 20.151.113.137:64539] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/66.php"] [unique_id "achwimnfn-AtRoMbquyGugAAAEk"]
[Sun Mar 29 08:21:30.473329 2026] [:error] [pid 1524:tid 1545] [client 20.151.113.137:64127] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/66.php"] [unique_id "achwiloaWSl2asqQCh8zPgAAAQ4"]
[Sun Mar 29 08:21:30.984323 2026] [:error] [pid 32255:tid 32302] [client 20.151.113.137:65305] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "achwimnfn-AtRoMbquyGvQAAAEs"]
[Sun Mar 29 08:21:31.410918 2026] [:error] [pid 1524:tid 1554] [client 20.151.113.137:64560] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "achwi1oaWSl2asqQCh8zQAAAARY"]
[Sun Mar 29 08:21:31.832695 2026] [:error] [pid 32359:tid 32379] [client 20.151.113.137:36529] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "achwiwMb8G3UzfQP3WjmpQAAANI"]
[Sun Mar 29 08:21:32.262327 2026] [:error] [pid 23168:tid 23220] [client 20.151.113.137:36488] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "achwjGP8p0yRL8ot_28NLQAAAhc"]
[Sun Mar 29 08:21:32.719689 2026] [:error] [pid 23168:tid 23201] [client 20.151.113.137:6086] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/amax.php"] [unique_id "achwjGP8p0yRL8ot_28NLwAAAgQ"]
[Sun Mar 29 08:21:33.236213 2026] [:error] [pid 23250:tid 23262] [client 20.151.113.137:5372] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/amax.php"] [unique_id "achwjZxrpj-dQjy1cvpY8wAAAko"]
[Sun Mar 29 08:21:33.730793 2026] [:error] [pid 1524:tid 1537] [client 20.151.113.137:64519] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/amax.php"] [unique_id "achwjVoaWSl2asqQCh8zQwAAAQg"]
[Sun Mar 29 08:21:34.240098 2026] [:error] [pid 32255:tid 32298] [client 20.151.113.137:38916] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/amax.php"] [unique_id "achwjmnfn-AtRoMbquyGxAAAAEc"]
[Sun Mar 29 08:21:34.720658 2026] [:error] [pid 23250:tid 23254] [client 20.151.113.137:38927] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/dass.php"] [unique_id "achwjpxrpj-dQjy1cvpY9gAAAkI"]
[Sun Mar 29 08:21:35.177224 2026] [:error] [pid 23167:tid 23180] [client 20.151.113.137:38957] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/dass.php"] [unique_id "achwjxIAHJCFaHff3_eJJwAAAco"]
[Sun Mar 29 08:21:35.718064 2026] [:error] [pid 32255:tid 32304] [client 20.151.113.137:36547] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/dass.php"] [unique_id "achwj2nfn-AtRoMbquyGxQAAAE0"]
[Sun Mar 29 08:21:36.235724 2026] [:error] [pid 23284:tid 23299] [client 20.151.113.137:64551] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/dass.php"] [unique_id "achwkIzBujdPHsq7wyRwRAAAAo0"]
[Sun Mar 29 08:21:36.716132 2026] [:error] [pid 23284:tid 23297] [client 20.151.113.137:64559] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/fs.php"] [unique_id "achwkIzBujdPHsq7wyRwRQAAAos"]
[Sun Mar 29 08:21:37.151360 2026] [:error] [pid 23284:tid 23310] [client 20.151.113.137:5342] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/fs.php"] [unique_id "achwkYzBujdPHsq7wyRwSAAAApg"]
[Sun Mar 29 08:21:37.648075 2026] [:error] [pid 23284:tid 23296] [client 20.151.113.137:64086] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/fs.php"] [unique_id "achwkYzBujdPHsq7wyRwSwAAAoo"]
[Sun Mar 29 08:21:38.183801 2026] [:error] [pid 23137:tid 23153] [client 20.151.113.137:6136] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/fs.php"] [unique_id "achwkhaWQa7LdZ_qGFaV5AAAAY4"]
[Sun Mar 29 08:21:38.648850 2026] [:error] [pid 1524:tid 1544] [client 20.151.113.137:6141] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws83.php"] [unique_id "achwkloaWSl2asqQCh8zRQAAAQ0"]
[Sun Mar 29 08:21:39.091520 2026] [:error] [pid 32257:tid 32318] [client 20.151.113.137:5317] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws83.php"] [unique_id "achwkyE3TArOFrUtgWpefwAAAIA"]
[Sun Mar 29 08:21:39.578722 2026] [:error] [pid 23167:tid 23179] [client 20.151.113.137:36511] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws83.php"] [unique_id "achwkxIAHJCFaHff3_eJLAAAAck"]
[Sun Mar 29 08:21:40.051353 2026] [:error] [pid 32255:tid 32295] [client 20.151.113.137:6124] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws83.php"] [unique_id "achwlGnfn-AtRoMbquyGywAAAEQ"]
[Sun Mar 29 08:21:40.469785 2026] [:error] [pid 23250:tid 23276] [client 20.151.113.137:36556] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/56c53.php"] [unique_id "achwlJxrpj-dQjy1cvpY_gAAAlg"]
[Sun Mar 29 08:21:40.904878 2026] [:error] [pid 23167:tid 23186] [client 20.151.113.137:5348] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/56c53.php"] [unique_id "achwlBIAHJCFaHff3_eJLwAAAdA"]
[Sun Mar 29 08:21:41.346188 2026] [:error] [pid 23167:tid 23170] [client 20.151.113.137:65321] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/56c53.php"] [unique_id "achwlRIAHJCFaHff3_eJMgAAAcA"]
[Sun Mar 29 08:21:41.791380 2026] [:error] [pid 23284:tid 23299] [client 20.151.113.137:5352] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/56c53.php"] [unique_id "achwlYzBujdPHsq7wyRwVQAAAo0"]
[Sun Mar 29 08:21:42.249998 2026] [:error] [pid 23167:tid 23184] [client 20.151.113.137:5351] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ms-edit.php"] [unique_id "achwlhIAHJCFaHff3_eJNQAAAc4"]
[Sun Mar 29 08:21:42.718693 2026] [:error] [pid 32255:tid 32313] [client 20.151.113.137:64552] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ms-edit.php"] [unique_id "achwlmnfn-AtRoMbquyG1wAAAFY"]
[Sun Mar 29 08:21:43.200004 2026] [:error] [pid 23167:tid 23193] [client 20.151.113.137:64533] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ms-edit.php"] [unique_id "achwlxIAHJCFaHff3_eJNwAAAdc"]
[Sun Mar 29 08:21:43.722970 2026] [:error] [pid 23167:tid 23185] [client 20.151.113.137:36480] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ms-edit.php"] [unique_id "achwlxIAHJCFaHff3_eJPgAAAc8"]
[Sun Mar 29 08:21:44.143383 2026] [:error] [pid 32257:tid 32326] [client 20.151.113.137:36531] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/grsiuk.php"] [unique_id "achwmCE3TArOFrUtgWpegQAAAIg"]
[Sun Mar 29 08:21:44.667274 2026] [:error] [pid 23168:tid 23216] [client 20.151.113.137:6131] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/grsiuk.php"] [unique_id "achwmGP8p0yRL8ot_28NPQAAAhM"]
[Sun Mar 29 08:21:45.235109 2026] [:error] [pid 23284:tid 23309] [client 20.151.113.137:36594] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/grsiuk.php"] [unique_id "achwmYzBujdPHsq7wyRwWwAAApc"]
[Sun Mar 29 08:21:45.687548 2026] [:error] [pid 23284:tid 23308] [client 20.151.113.137:38963] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/grsiuk.php"] [unique_id "achwmYzBujdPHsq7wyRwXgAAApY"]
[Sun Mar 29 08:21:46.109803 2026] [:error] [pid 32255:tid 32297] [client 20.151.113.137:36508] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/mh.php"] [unique_id "achwmmnfn-AtRoMbquyG2QAAAEY"]
[Sun Mar 29 08:21:46.525143 2026] [:error] [pid 32255:tid 32305] [client 20.151.113.137:5359] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/mh.php"] [unique_id "achwmmnfn-AtRoMbquyG2wAAAE4"]
[Sun Mar 29 08:21:46.950966 2026] [:error] [pid 32255:tid 32296] [client 20.151.113.137:64000] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/mh.php"] [unique_id "achwmmnfn-AtRoMbquyG3AAAAEU"]
[Sun Mar 29 08:21:47.419563 2026] [:error] [pid 23137:tid 23150] [client 20.151.113.137:64562] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/mh.php"] [unique_id "achwmxaWQa7LdZ_qGFaV5gAAAYs"]
[Sun Mar 29 08:21:48.000299 2026] [:error] [pid 23284:tid 23300] [client 20.151.113.137:64570] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bo.php"] [unique_id "achwm4zBujdPHsq7wyRwZwAAAo4"]
[Sun Mar 29 08:21:48.525448 2026] [:error] [pid 23167:tid 23180] [client 20.151.113.137:36539] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bo.php"] [unique_id "achwnBIAHJCFaHff3_eJSAAAAco"]
[Sun Mar 29 08:21:49.007359 2026] [:error] [pid 32257:tid 32340] [client 20.151.113.137:6132] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bo.php"] [unique_id "achwnSE3TArOFrUtgWpehgAAAJY"]
[Sun Mar 29 08:21:49.508752 2026] [:error] [pid 32255:tid 32292] [client 20.151.113.137:5356] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bo.php"] [unique_id "achwnWnfn-AtRoMbquyG3wAAAEE"]
[Sun Mar 29 08:21:50.023977 2026] [:error] [pid 23168:tid 23221] [client 20.151.113.137:5330] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/5b9ac.php"] [unique_id "achwnmP8p0yRL8ot_28NQQAAAhg"]
[Sun Mar 29 08:21:50.486110 2026] [:error] [pid 32359:tid 32385] [client 20.151.113.137:64120] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/5b9ac.php"] [unique_id "achwngMb8G3UzfQP3WjmqgAAANg"]
[Sun Mar 29 08:21:50.936314 2026] [:error] [pid 23168:tid 23217] [client 20.151.113.137:65286] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/5b9ac.php"] [unique_id "achwnmP8p0yRL8ot_28NRAAAAhQ"]
[Sun Mar 29 08:21:51.386797 2026] [:error] [pid 32359:tid 32378] [client 20.151.113.137:65300] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/5b9ac.php"] [unique_id "achwnwMb8G3UzfQP3WjmrAAAANE"]
[Sun Mar 29 08:21:51.808671 2026] [:error] [pid 32359:tid 32377] [client 20.151.113.137:65293] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bolt.php"] [unique_id "achwnwMb8G3UzfQP3WjmrgAAANA"]
[Sun Mar 29 08:21:52.238100 2026] [:error] [pid 23250:tid 23259] [client 20.151.113.137:36586] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bolt.php"] [unique_id "achwoJxrpj-dQjy1cvpZBQAAAkc"]
[Sun Mar 29 08:21:52.695385 2026] [:error] [pid 23250:tid 23276] [client 20.151.113.137:6100] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bolt.php"] [unique_id "achwoJxrpj-dQjy1cvpZBwAAAlg"]
[Sun Mar 29 08:21:53.201512 2026] [:error] [pid 23250:tid 23264] [client 20.151.113.137:64528] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bolt.php"] [unique_id "achwoZxrpj-dQjy1cvpZCQAAAkw"]
[Sun Mar 29 08:21:53.699306 2026] [:error] [pid 23137:tid 23163] [client 20.151.113.137:63314] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/nw.php"] [unique_id "achwoRaWQa7LdZ_qGFaV6wAAAZg"]
[Sun Mar 29 08:21:54.161964 2026] [:error] [pid 1524:tid 1541] [client 20.151.113.137:65334] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/nw.php"] [unique_id "achwoloaWSl2asqQCh8zSgAAAQo"]
[Sun Mar 29 08:21:54.619329 2026] [:error] [pid 23284:tid 23307] [client 20.151.113.137:36520] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/nw.php"] [unique_id "achwoozBujdPHsq7wyRwbgAAApU"]
[Sun Mar 29 08:21:55.036089 2026] [:error] [pid 23137:tid 23159] [client 20.151.113.137:5354] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/nw.php"] [unique_id "achwoxaWQa7LdZ_qGFaV7wAAAZQ"]
[Sun Mar 29 08:21:55.526551 2026] [:error] [pid 32255:tid 32310] [client 20.151.113.137:38921] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/rithin.php"] [unique_id "achwo2nfn-AtRoMbquyG5AAAAFM"]
[Sun Mar 29 08:21:55.951324 2026] [:error] [pid 32255:tid 32303] [client 20.151.113.137:64012] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/rithin.php"] [unique_id "achwo2nfn-AtRoMbquyG5QAAAEw"]
[Sun Mar 29 08:21:56.466476 2026] [:error] [pid 32255:tid 32296] [client 20.151.113.137:6121] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/rithin.php"] [unique_id "achwpGnfn-AtRoMbquyG6QAAAEU"]
[Sun Mar 29 08:21:56.906076 2026] [:error] [pid 23168:tid 23205] [client 20.151.113.137:6116] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/rithin.php"] [unique_id "achwpGP8p0yRL8ot_28NRwAAAgg"]
[Sun Mar 29 08:21:57.388616 2026] [:error] [pid 32257:tid 32319] [client 20.151.113.137:38945] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/tx78.php"] [unique_id "achwpSE3TArOFrUtgWpejAAAAIE"]
[Sun Mar 29 08:21:57.861475 2026] [:error] [pid 23167:tid 23172] [client 20.151.113.137:64126] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/tx78.php"] [unique_id "achwpRIAHJCFaHff3_eJUAAAAcI"]
[Sun Mar 29 08:21:58.344934 2026] [:error] [pid 23284:tid 23298] [client 20.151.113.137:38913] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/tx78.php"] [unique_id "achwpozBujdPHsq7wyRwcgAAAow"]
[Sun Mar 29 08:21:58.789661 2026] [:error] [pid 32257:tid 32326] [client 20.151.113.137:62809] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/tx78.php"] [unique_id "achwpiE3TArOFrUtgWpejgAAAIg"]
[Sun Mar 29 08:21:59.216540 2026] [:error] [pid 32254:tid 32276] [client 20.151.113.137:36604] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/Sanskrit.php"] [unique_id "achwp6ug2IHuyGgCTn8hoQAAAAw"]
[Sun Mar 29 08:21:59.657360 2026] [:error] [pid 32257:tid 32322] [client 20.151.113.137:38943] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/Sanskrit.php"] [unique_id "achwpyE3TArOFrUtgWpekgAAAIQ"]
[Sun Mar 29 08:22:00.153301 2026] [:error] [pid 32257:tid 32337] [client 20.151.113.137:38918] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/Sanskrit.php"] [unique_id "achwqCE3TArOFrUtgWpelgAAAJM"]
[Sun Mar 29 08:22:00.644760 2026] [:error] [pid 23250:tid 23275] [client 20.151.113.137:65290] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/Sanskrit.php"] [unique_id "achwqJxrpj-dQjy1cvpZDQAAAlc"]
[Sun Mar 29 08:22:01.167938 2026] [:error] [pid 32255:tid 32298] [client 20.151.113.137:6085] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/jga.php"] [unique_id "achwqWnfn-AtRoMbquyG6wAAAEc"]
[Sun Mar 29 08:22:01.663746 2026] [:error] [pid 32255:tid 32312] [client 20.151.113.137:38951] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/jga.php"] [unique_id "achwqWnfn-AtRoMbquyG7gAAAFU"]
[Sun Mar 29 08:22:02.112677 2026] [:error] [pid 23250:tid 23262] [client 20.151.113.137:5355] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/jga.php"] [unique_id "achwqpxrpj-dQjy1cvpZDwAAAko"]
[Sun Mar 29 08:22:02.601351 2026] [:error] [pid 32255:tid 32310] [client 20.151.113.137:38960] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/jga.php"] [unique_id "achwqmnfn-AtRoMbquyG9QAAAFM"]
[Sun Mar 29 08:22:03.060884 2026] [:error] [pid 23137:tid 23152] [client 20.151.113.137:64569] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/torsa1.php"] [unique_id "achwqxaWQa7LdZ_qGFaV8AAAAY0"]
[Sun Mar 29 08:22:03.539806 2026] [:error] [pid 23137:tid 23156] [client 20.151.113.137:38942] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/torsa1.php"] [unique_id "achwqxaWQa7LdZ_qGFaV8wAAAZE"]
[Sun Mar 29 08:22:04.028161 2026] [proxy_fcgi:error] [pid 23137:tid 23141] [client 20.151.113.137:6098] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 08:22:04.253378 2026] [proxy_fcgi:error] [pid 23137:tid 23157] [client 20.151.113.137:6098] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 08:22:04.473677 2026] [proxy_fcgi:error] [pid 23137:tid 23154] [client 20.151.113.137:6098] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 08:22:04.690928 2026] [proxy_fcgi:error] [pid 23137:tid 23151] [client 20.151.113.137:6098] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 08:22:04.908589 2026] [proxy_fcgi:error] [pid 23137:tid 23140] [client 20.151.113.137:6098] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 08:22:05.133477 2026] [proxy_fcgi:error] [pid 23137:tid 23145] [client 20.151.113.137:6098] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 08:22:05.569092 2026] [proxy_fcgi:error] [pid 23137:tid 23155] [client 20.151.113.137:6098] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 08:22:05.780200 2026] [proxy_fcgi:error] [pid 23137:tid 23149] [client 20.151.113.137:6098] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 08:22:06.019650 2026] [proxy_fcgi:error] [pid 23137:tid 23162] [client 20.151.113.137:6098] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 08:22:06.231971 2026] [proxy_fcgi:error] [pid 23137:tid 23146] [client 20.151.113.137:6098] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 08:22:06.480245 2026] [:error] [pid 23137:tid 23143] [client 20.151.113.137:6098] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/install.php"] [unique_id "achwrhaWQa7LdZ_qGFaWAwAAAYQ"]
[Sun Mar 29 08:22:06.971990 2026] [:error] [pid 23284:tid 23291] [client 20.151.113.137:63341] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/install.php"] [unique_id "achwrozBujdPHsq7wyRwewAAAoU"]
[Sun Mar 29 08:22:07.461540 2026] [:error] [pid 23284:tid 23307] [client 20.151.113.137:64515] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/install.php"] [unique_id "achwr4zBujdPHsq7wyRwfAAAApU"]
[Sun Mar 29 08:22:07.909397 2026] [:error] [pid 23284:tid 23299] [client 20.151.113.137:64627] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/install.php"] [unique_id "achwr4zBujdPHsq7wyRwfgAAAo0"]
[Sun Mar 29 08:22:08.363058 2026] [:error] [pid 32359:tid 32380] [client 20.151.113.137:65298] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/maul.php"] [unique_id "achwsAMb8G3UzfQP3WjmtAAAANM"]
[Sun Mar 29 08:22:08.831189 2026] [:error] [pid 23167:tid 23180] [client 20.151.113.137:63340] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/maul.php"] [unique_id "achwsBIAHJCFaHff3_eJVAAAAco"]
[Sun Mar 29 08:22:09.389866 2026] [:error] [pid 32359:tid 32366] [client 20.151.113.137:64575] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/maul.php"] [unique_id "achwsQMb8G3UzfQP3WjmtQAAAMU"]
[Sun Mar 29 08:22:09.812336 2026] [:error] [pid 23284:tid 23288] [client 20.151.113.137:36564] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/maul.php"] [unique_id "achwsYzBujdPHsq7wyRwhQAAAoI"]
[Sun Mar 29 08:22:10.322866 2026] [:error] [pid 32257:tid 32323] [client 20.151.113.137:64122] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/lowpr.php"] [unique_id "achwsiE3TArOFrUtgWpeoAAAAIU"]
[Sun Mar 29 08:22:10.792887 2026] [:error] [pid 23250:tid 23257] [client 20.151.113.137:65297] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/lowpr.php"] [unique_id "achwspxrpj-dQjy1cvpZFgAAAkU"]
[Sun Mar 29 08:22:11.239609 2026] [:error] [pid 23250:tid 23274] [client 20.151.113.137:64103] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/lowpr.php"] [unique_id "achws5xrpj-dQjy1cvpZGQAAAlY"]
[Sun Mar 29 08:22:11.717136 2026] [:error] [pid 32255:tid 32307] [client 20.151.113.137:5322] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/lowpr.php"] [unique_id "achws2nfn-AtRoMbquyG-AAAAFA"]
[Sun Mar 29 08:22:12.178943 2026] [:error] [pid 32255:tid 32298] [client 20.151.113.137:36512] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/b.php"] [unique_id "achwtGnfn-AtRoMbquyG_AAAAEc"]
[Sun Mar 29 08:22:12.662759 2026] [:error] [pid 23284:tid 23304] [client 20.151.113.137:5315] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/b.php"] [unique_id "achwtIzBujdPHsq7wyRwjAAAApI"]
[Sun Mar 29 08:22:13.131034 2026] [:error] [pid 23167:tid 23178] [client 20.151.113.137:64067] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/b.php"] [unique_id "achwtRIAHJCFaHff3_eJVQAAAcg"]
[Sun Mar 29 08:22:13.593413 2026] [:error] [pid 23137:tid 23150] [client 20.151.113.137:36554] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/b.php"] [unique_id "achwtRaWQa7LdZ_qGFaWBwAAAYs"]
[Sun Mar 29 08:22:14.017530 2026] [:error] [pid 23284:tid 23298] [client 20.151.113.137:65339] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/166.php"] [unique_id "achwtozBujdPHsq7wyRwjgAAAow"]
[Sun Mar 29 08:22:14.450991 2026] [:error] [pid 23167:tid 23189] [client 20.151.113.137:65286] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/166.php"] [unique_id "achwthIAHJCFaHff3_eJWAAAAdM"]
[Sun Mar 29 08:22:14.864393 2026] [:error] [pid 23284:tid 23309] [client 20.151.113.137:63303] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/166.php"] [unique_id "achwtozBujdPHsq7wyRwkwAAApc"]
[Sun Mar 29 08:22:15.359453 2026] [:error] [pid 32257:tid 32326] [client 20.151.113.137:64028] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/166.php"] [unique_id "achwtyE3TArOFrUtgWpepgAAAIg"]
[Sun Mar 29 08:22:15.771828 2026] [:error] [pid 23137:tid 23162] [client 20.151.113.137:38948] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/domains.php"] [unique_id "achwtxaWQa7LdZ_qGFaWDQAAAZc"]
[Sun Mar 29 08:22:16.210714 2026] [:error] [pid 32257:tid 32327] [client 20.151.113.137:5328] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/domains.php"] [unique_id "achwuCE3TArOFrUtgWpepwAAAIk"]
[Sun Mar 29 08:22:16.752608 2026] [:error] [pid 32257:tid 32342] [client 20.151.113.137:65320] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/domains.php"] [unique_id "achwuCE3TArOFrUtgWpeqAAAAJg"]
[Sun Mar 29 08:22:17.205357 2026] [:error] [pid 23137:tid 23158] [client 20.151.113.137:64635] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/domains.php"] [unique_id "achwuRaWQa7LdZ_qGFaWEAAAAZM"]
[Sun Mar 29 08:22:17.659842 2026] [:error] [pid 23167:tid 23193] [client 20.151.113.137:36504] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws85.php"] [unique_id "achwuRIAHJCFaHff3_eJZAAAAdc"]
[Sun Mar 29 08:22:18.098696 2026] [:error] [pid 32255:tid 32314] [client 20.151.113.137:36582] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws85.php"] [unique_id "achwumnfn-AtRoMbquyHAQAAAFc"]
[Sun Mar 29 08:22:18.583895 2026] [:error] [pid 32255:tid 32307] [client 20.151.113.137:36578] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws85.php"] [unique_id "achwumnfn-AtRoMbquyHBgAAAFA"]
[Sun Mar 29 08:22:19.107726 2026] [:error] [pid 32255:tid 32294] [client 20.151.113.137:63319] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws85.php"] [unique_id "achwu2nfn-AtRoMbquyHCgAAAEM"]
[Sun Mar 29 08:22:19.546623 2026] [:error] [pid 23250:tid 23266] [client 20.151.113.137:38938] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-act.php"] [unique_id "achwu5xrpj-dQjy1cvpZIgAAAk4"]
[Sun Mar 29 08:22:20.022865 2026] [:error] [pid 23284:tid 23293] [client 20.151.113.137:38964] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-act.php"] [unique_id "achwvIzBujdPHsq7wyRwlAAAAoc"]
[Sun Mar 29 08:22:20.447529 2026] [:error] [pid 23284:tid 23294] [client 20.151.113.137:65289] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-act.php"] [unique_id "achwvIzBujdPHsq7wyRwlwAAAog"]
[Sun Mar 29 08:22:20.877881 2026] [:error] [pid 23284:tid 23304] [client 20.151.113.137:38922] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-act.php"] [unique_id "achwvIzBujdPHsq7wyRwmwAAApI"]
[Sun Mar 29 08:22:21.382857 2026] [:error] [pid 32359:tid 32368] [client 20.151.113.137:36486] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/hehe.php"] [unique_id "achwvQMb8G3UzfQP3WjmtgAAAMc"]
[Sun Mar 29 08:22:21.835281 2026] [:error] [pid 32359:tid 32375] [client 20.151.113.137:6092] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/hehe.php"] [unique_id "achwvQMb8G3UzfQP3WjmuQAAAM4"]
[Sun Mar 29 08:22:22.354483 2026] [:error] [pid 23284:tid 23292] [client 20.151.113.137:6143] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/hehe.php"] [unique_id "achwvozBujdPHsq7wyRwoAAAAoY"]
[Sun Mar 29 08:22:23.011311 2026] [:error] [pid 32257:tid 32323] [client 20.151.113.137:65317] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/hehe.php"] [unique_id "achwvyE3TArOFrUtgWpesQAAAIU"]
[Sun Mar 29 08:22:23.451954 2026] [:error] [pid 23137:tid 23145] [client 20.151.113.137:6123] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/tfm.php"] [unique_id "achwvxaWQa7LdZ_qGFaWFwAAAYY"]
[Sun Mar 29 08:22:23.879504 2026] [:error] [pid 23137:tid 23163] [client 20.151.113.137:36580] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/tfm.php"] [unique_id "achwvxaWQa7LdZ_qGFaWGAAAAZg"]
[Sun Mar 29 08:22:24.359584 2026] [:error] [pid 32257:tid 32319] [client 20.151.113.137:64117] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/tfm.php"] [unique_id "achwwCE3TArOFrUtgWpeswAAAIE"]
[Sun Mar 29 08:22:24.847610 2026] [:error] [pid 23137:tid 23159] [client 20.151.113.137:36571] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/tfm.php"] [unique_id "achwwBaWQa7LdZ_qGFaWHAAAAZQ"]
[Sun Mar 29 08:22:25.309952 2026] [:error] [pid 32254:tid 32275] [client 20.151.113.137:6128] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ne2026.php"] [unique_id "achwwaug2IHuyGgCTn8hrgAAAAs"]
[Sun Mar 29 08:22:25.766457 2026] [:error] [pid 1524:tid 1537] [client 20.151.113.137:5336] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ne2026.php"] [unique_id "achwwVoaWSl2asqQCh8zUQAAAQg"]
[Sun Mar 29 08:22:26.233648 2026] [:error] [pid 23167:tid 23189] [client 20.151.113.137:65299] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ne2026.php"] [unique_id "achwwhIAHJCFaHff3_eJegAAAdM"]
[Sun Mar 29 08:22:26.713938 2026] [:error] [pid 23167:tid 23186] [client 20.151.113.137:36593] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ne2026.php"] [unique_id "achwwhIAHJCFaHff3_eJfQAAAdA"]
[Sun Mar 29 08:22:27.186790 2026] [:error] [pid 23167:tid 23185] [client 20.151.113.137:64597] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws73.php"] [unique_id "achwwxIAHJCFaHff3_eJhAAAAc8"]
[Sun Mar 29 08:22:27.650740 2026] [:error] [pid 32257:tid 32342] [client 20.151.113.137:38950] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws73.php"] [unique_id "achwwyE3TArOFrUtgWpetwAAAJg"]
[Sun Mar 29 08:22:28.196172 2026] [:error] [pid 32257:tid 32320] [client 20.151.113.137:64537] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws73.php"] [unique_id "achwxCE3TArOFrUtgWpeuAAAAII"]
[Sun Mar 29 08:22:28.662602 2026] [:error] [pid 23168:tid 23214] [client 20.151.113.137:36552] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws73.php"] [unique_id "achwxGP8p0yRL8ot_28NWAAAAhE"]
[Sun Mar 29 08:22:29.123647 2026] [:error] [pid 23284:tid 23297] [client 20.151.113.137:38949] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws84.php"] [unique_id "achwxYzBujdPHsq7wyRwqwAAAos"]
[Sun Mar 29 08:22:29.633661 2026] [:error] [pid 32255:tid 32305] [client 20.151.113.137:65335] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws84.php"] [unique_id "achwxWnfn-AtRoMbquyHFAAAAE4"]
[Sun Mar 29 08:22:30.119644 2026] [:error] [pid 32254:tid 32286] [client 20.151.113.137:38948] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws84.php"] [unique_id "achwxqug2IHuyGgCTn8hsAAAABY"]
[Sun Mar 29 08:22:30.582926 2026] [:error] [pid 23284:tid 23309] [client 20.151.113.137:64123] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws84.php"] [unique_id "achwxozBujdPHsq7wyRwsAAAApc"]
[Sun Mar 29 08:22:31.047699 2026] [:error] [pid 32257:tid 32325] [client 20.151.113.137:64607] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/baixy.php"] [unique_id "achwxyE3TArOFrUtgWpevgAAAIc"]
[Sun Mar 29 08:22:31.527687 2026] [:error] [pid 23250:tid 23266] [client 20.151.113.137:64563] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/baixy.php"] [unique_id "achwx5xrpj-dQjy1cvpZKwAAAk4"]
[Sun Mar 29 08:22:31.998072 2026] [:error] [pid 23250:tid 23272] [client 20.151.113.137:65283] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/baixy.php"] [unique_id "achwx5xrpj-dQjy1cvpZLwAAAlQ"]
[Sun Mar 29 08:22:32.429965 2026] [:error] [pid 32359:tid 32373] [client 20.151.113.137:65315] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/baixy.php"] [unique_id "achwyAMb8G3UzfQP3WjmvgAAAMw"]
[Sun Mar 29 08:22:32.842001 2026] [:error] [pid 23168:tid 23201] [client 20.151.113.137:65291] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-good.php"] [unique_id "achwyGP8p0yRL8ot_28NXAAAAgQ"]
[Sun Mar 29 08:22:33.268146 2026] [:error] [pid 23284:tid 23291] [client 20.151.113.137:64106] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-good.php"] [unique_id "achwyYzBujdPHsq7wyRwtgAAAoU"]
[Sun Mar 29 08:22:33.756720 2026] [:error] [pid 32254:tid 32264] [client 20.151.113.137:6103] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-good.php"] [unique_id "achwyaug2IHuyGgCTn8hsgAAAAA"]
[Sun Mar 29 08:22:34.308087 2026] [:error] [pid 23284:tid 23298] [client 20.151.113.137:38956] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-good.php"] [unique_id "achwyozBujdPHsq7wyRwuQAAAow"]
[Sun Mar 29 08:22:34.730826 2026] [:error] [pid 32359:tid 32384] [client 20.151.113.137:36606] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/a4.php"] [unique_id "achwygMb8G3UzfQP3WjmwAAAANc"]
[Sun Mar 29 08:22:35.194377 2026] [:error] [pid 23137:tid 23153] [client 20.151.113.137:64026] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/a4.php"] [unique_id "achwyxaWQa7LdZ_qGFaWMwAAAY4"]
[Sun Mar 29 08:22:35.767460 2026] [:error] [pid 23137:tid 23154] [client 20.151.113.137:36535] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/a4.php"] [unique_id "achwyxaWQa7LdZ_qGFaWNAAAAY8"]
[Sun Mar 29 08:22:36.267134 2026] [:error] [pid 32257:tid 32329] [client 20.151.113.137:64553] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/a4.php"] [unique_id "achwzCE3TArOFrUtgWpezQAAAIs"]
[Sun Mar 29 08:22:36.744056 2026] [:error] [pid 23168:tid 23215] [client 20.151.113.137:6102] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws77.php"] [unique_id "achwzGP8p0yRL8ot_28NYwAAAhI"]
[Sun Mar 29 08:22:37.267165 2026] [:error] [pid 1524:tid 1552] [client 20.151.113.137:64606] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws77.php"] [unique_id "achwzVoaWSl2asqQCh8zVAAAARQ"]
[Sun Mar 29 08:22:37.766832 2026] [:error] [pid 23284:tid 23300] [client 20.151.113.137:62784] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws77.php"] [unique_id "achwzYzBujdPHsq7wyRwvAAAAo4"]
[Sun Mar 29 08:22:38.441013 2026] [:error] [pid 1524:tid 1548] [client 20.151.113.137:64592] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws77.php"] [unique_id "achwzloaWSl2asqQCh8zVgAAARE"]
[Sun Mar 29 08:22:38.901223 2026] [:error] [pid 23168:tid 23219] [client 20.151.113.137:38961] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/vx.php"] [unique_id "achwzmP8p0yRL8ot_28NZQAAAhY"]
[Sun Mar 29 08:22:39.341445 2026] [:error] [pid 32257:tid 32328] [client 20.151.113.137:64084] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/vx.php"] [unique_id "achwzyE3TArOFrUtgWpe1AAAAIo"]
[Sun Mar 29 08:22:39.859323 2026] [:error] [pid 32257:tid 32326] [client 20.151.113.137:38920] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/vx.php"] [unique_id "achwzyE3TArOFrUtgWpe1wAAAIg"]
[Sun Mar 29 08:22:40.312741 2026] [:error] [pid 32257:tid 32332] [client 20.151.113.137:65307] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/vx.php"] [unique_id "achw0CE3TArOFrUtgWpe2AAAAI4"]
[Sun Mar 29 08:22:40.763867 2026] [:error] [pid 32255:tid 32291] [client 20.151.113.137:64020] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/a5e0a.php"] [unique_id "achw0Gnfn-AtRoMbquyHHAAAAEA"]
[Sun Mar 29 08:22:41.295391 2026] [:error] [pid 32255:tid 32297] [client 20.151.113.137:36581] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/a5e0a.php"] [unique_id "achw0Wnfn-AtRoMbquyHHQAAAEY"]
[Sun Mar 29 08:22:41.748138 2026] [:error] [pid 23250:tid 23264] [client 20.151.113.137:36490] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/a5e0a.php"] [unique_id "achw0Zxrpj-dQjy1cvpZNAAAAkw"]
[Sun Mar 29 08:22:42.173127 2026] [:error] [pid 23250:tid 23269] [client 20.151.113.137:36563] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/a5e0a.php"] [unique_id "achw0pxrpj-dQjy1cvpZNQAAAlE"]
[Sun Mar 29 08:22:42.642672 2026] [:error] [pid 23167:tid 23190] [client 20.151.113.137:65296] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/term.php"] [unique_id "achw0hIAHJCFaHff3_eJigAAAdQ"]
[Sun Mar 29 08:22:43.079956 2026] [:error] [pid 32257:tid 32324] [client 20.151.113.137:6134] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/term.php"] [unique_id "achw0yE3TArOFrUtgWpe3AAAAIY"]
[Sun Mar 29 08:22:44.129816 2026] [:error] [pid 23284:tid 23305] [client 20.151.113.137:65327] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/term.php"] [unique_id "achw1IzBujdPHsq7wyRwzwAAApM"]
[Sun Mar 29 08:22:44.659167 2026] [:error] [pid 23284:tid 23288] [client 20.151.113.137:64104] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/term.php"] [unique_id "achw1IzBujdPHsq7wyRw0gAAAoI"]
[Sun Mar 29 08:22:45.378388 2026] [:error] [pid 23284:tid 23294] [client 20.151.113.137:64107] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/edit.php"] [unique_id "achw1YzBujdPHsq7wyRw1QAAAog"]
[Sun Mar 29 08:22:45.913150 2026] [:error] [pid 23284:tid 23286] [client 20.151.113.137:36602] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/edit.php"] [unique_id "achw1YzBujdPHsq7wyRw2QAAAoA"]
[Sun Mar 29 08:22:46.558141 2026] [:error] [pid 23284:tid 23298] [client 20.151.113.137:62796] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/edit.php"] [unique_id "achw1ozBujdPHsq7wyRw3AAAAow"]
[Sun Mar 29 08:22:47.086821 2026] [:error] [pid 32254:tid 32266] [client 20.151.113.137:62818] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/edit.php"] [unique_id "achw16ug2IHuyGgCTn8htwAAAAI"]
[Sun Mar 29 08:22:47.529363 2026] [:error] [pid 32254:tid 32267] [client 20.151.113.137:6094] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/55b76.php"] [unique_id "achw16ug2IHuyGgCTn8huQAAAAM"]
[Sun Mar 29 08:22:48.049977 2026] [:error] [pid 23168:tid 23217] [client 20.151.113.137:64040] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/55b76.php"] [unique_id "achw2GP8p0yRL8ot_28NbQAAAhQ"]
[Sun Mar 29 08:22:48.528945 2026] [:error] [pid 23167:tid 23194] [client 20.151.113.137:6113] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/55b76.php"] [unique_id "achw2BIAHJCFaHff3_eJkwAAAdg"]
[Sun Mar 29 08:22:49.005559 2026] [:error] [pid 23167:tid 23173] [client 20.151.113.137:64548] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/55b76.php"] [unique_id "achw2RIAHJCFaHff3_eJlgAAAcM"]
[Sun Mar 29 08:22:49.500130 2026] [:error] [pid 23167:tid 23181] [client 20.151.113.137:5338] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/asd.php"] [unique_id "achw2RIAHJCFaHff3_eJnAAAAcs"]
[Sun Mar 29 08:22:49.936938 2026] [:error] [pid 23167:tid 23188] [client 20.151.113.137:63310] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/asd.php"] [unique_id "achw2RIAHJCFaHff3_eJoAAAAdI"]
[Sun Mar 29 08:22:50.361503 2026] [:error] [pid 23167:tid 23189] [client 20.151.113.137:5364] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/asd.php"] [unique_id "achw2hIAHJCFaHff3_eJpQAAAdM"]
[Sun Mar 29 08:22:50.839311 2026] [:error] [pid 23167:tid 23184] [client 20.151.113.137:5350] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/asd.php"] [unique_id "achw2hIAHJCFaHff3_eJqgAAAc4"]
[Sun Mar 29 08:22:51.320060 2026] [:error] [pid 23167:tid 23170] [client 20.151.113.137:64112] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp9.php"] [unique_id "achw2xIAHJCFaHff3_eJrwAAAcA"]
[Sun Mar 29 08:22:51.825281 2026] [:error] [pid 23167:tid 23171] [client 20.151.113.137:64032] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp9.php"] [unique_id "achw2xIAHJCFaHff3_eJsgAAAcE"]
[Sun Mar 29 08:22:52.283201 2026] [:error] [pid 23284:tid 23304] [client 20.151.113.137:65287] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp9.php"] [unique_id "achw3IzBujdPHsq7wyRw5wAAApI"]
[Sun Mar 29 08:22:52.697829 2026] [:error] [pid 23167:tid 23194] [client 20.151.113.137:64522] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp9.php"] [unique_id "achw3BIAHJCFaHff3_eJtAAAAdg"]
[Sun Mar 29 08:22:53.157382 2026] [:error] [pid 23284:tid 23291] [client 20.151.113.137:5341] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/8.php"] [unique_id "achw3YzBujdPHsq7wyRw6gAAAoU"]
[Sun Mar 29 08:22:53.693847 2026] [:error] [pid 23167:tid 23174] [client 20.151.113.137:5367] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/8.php"] [unique_id "achw3RIAHJCFaHff3_eJuQAAAcQ"]
[Sun Mar 29 08:22:54.110768 2026] [:error] [pid 23167:tid 23179] [client 20.151.113.137:63325] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/8.php"] [unique_id "achw3hIAHJCFaHff3_eJvgAAAck"]
[Sun Mar 29 08:22:54.535339 2026] [:error] [pid 23250:tid 23259] [client 20.151.113.137:36490] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/8.php"] [unique_id "achw3pxrpj-dQjy1cvpZPQAAAkc"]
[Sun Mar 29 08:22:55.005358 2026] [:error] [pid 23250:tid 23270] [client 20.151.113.137:5325] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/byypas.php"] [unique_id "achw35xrpj-dQjy1cvpZQAAAAlI"]
[Sun Mar 29 08:22:55.480031 2026] [:error] [pid 23167:tid 23194] [client 20.151.113.137:64513] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/byypas.php"] [unique_id "achw3xIAHJCFaHff3_eJxAAAAdg"]
[Sun Mar 29 08:22:55.900482 2026] [:error] [pid 23167:tid 23173] [client 20.151.113.137:36586] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/byypas.php"] [unique_id "achw3xIAHJCFaHff3_eJxwAAAcM"]
[Sun Mar 29 08:22:56.404276 2026] [:error] [pid 32255:tid 32309] [client 20.151.113.137:6109] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/byypas.php"] [unique_id "achw4Gnfn-AtRoMbquyHIAAAAFI"]
[Sun Mar 29 08:22:56.819740 2026] [:error] [pid 23167:tid 23185] [client 20.151.113.137:64111] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/drhunthq.php"] [unique_id "achw4BIAHJCFaHff3_eJzgAAAc8"]
[Sun Mar 29 08:22:57.361682 2026] [:error] [pid 23167:tid 23193] [client 20.151.113.137:63308] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/drhunthq.php"] [unique_id "achw4RIAHJCFaHff3_eJ0gAAAdc"]
[Sun Mar 29 08:22:57.835500 2026] [:error] [pid 32257:tid 32332] [client 20.151.113.137:64064] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/drhunthq.php"] [unique_id "achw4SE3TArOFrUtgWpe6gAAAI4"]
[Sun Mar 29 08:22:58.321990 2026] [:error] [pid 23250:tid 23256] [client 20.151.113.137:64574] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/drhunthq.php"] [unique_id "achw4pxrpj-dQjy1cvpZRAAAAkQ"]
[Sun Mar 29 08:22:58.758412 2026] [:error] [pid 23167:tid 23194] [client 20.151.113.137:64070] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/public/file.php"] [unique_id "achw4hIAHJCFaHff3_eJ1QAAAdg"]
[Sun Mar 29 08:22:59.273407 2026] [:error] [pid 23250:tid 23263] [client 20.151.113.137:64547] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/public/file.php"] [unique_id "achw45xrpj-dQjy1cvpZRQAAAks"]
[Sun Mar 29 08:22:59.794950 2026] [:error] [pid 23250:tid 23265] [client 20.151.113.137:36524] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/public/file.php"] [unique_id "achw45xrpj-dQjy1cvpZRgAAAk0"]
[Sun Mar 29 08:23:00.298633 2026] [:error] [pid 23168:tid 23219] [client 20.151.113.137:63266] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/public/file.php"] [unique_id "achw5GP8p0yRL8ot_28NdAAAAhY"]
[Sun Mar 29 08:23:00.746405 2026] [:error] [pid 23167:tid 23181] [client 20.151.113.137:38941] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xxw.php"] [unique_id "achw5BIAHJCFaHff3_eJ1wAAAcs"]
[Sun Mar 29 08:23:01.240954 2026] [:error] [pid 32254:tid 32283] [client 20.151.113.137:64561] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xxw.php"] [unique_id "achw5aug2IHuyGgCTn8hxQAAABM"]
[Sun Mar 29 08:23:01.684882 2026] [:error] [pid 32255:tid 32312] [client 20.151.113.137:65338] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xxw.php"] [unique_id "achw5Wnfn-AtRoMbquyHJwAAAFU"]
[Sun Mar 29 08:23:02.123957 2026] [:error] [pid 32254:tid 32265] [client 20.151.113.137:38947] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xxw.php"] [unique_id "achw5qug2IHuyGgCTn8hxgAAAAE"]
[Sun Mar 29 08:23:02.560486 2026] [:error] [pid 23137:tid 23161] [client 20.151.113.137:61674] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wen.php"] [unique_id "achw5haWQa7LdZ_qGFaWPQAAAZY"]
[Sun Mar 29 08:23:02.986981 2026] [:error] [pid 32257:tid 32340] [client 20.151.113.137:36605] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wen.php"] [unique_id "achw5iE3TArOFrUtgWpe8AAAAJY"]
[Sun Mar 29 08:23:03.477720 2026] [:error] [pid 32254:tid 32281] [client 20.151.113.137:36548] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wen.php"] [unique_id "achw56ug2IHuyGgCTn8hzQAAABE"]
[Sun Mar 29 08:23:03.893800 2026] [:error] [pid 23250:tid 23266] [client 20.151.113.137:36481] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wen.php"] [unique_id "achw55xrpj-dQjy1cvpZTQAAAk4"]
[Sun Mar 29 08:23:04.366442 2026] [:error] [pid 23137:tid 23144] [client 20.151.113.137:36528] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws87.php"] [unique_id "achw6BaWQa7LdZ_qGFaWPwAAAYU"]
[Sun Mar 29 08:23:04.823692 2026] [:error] [pid 32255:tid 32314] [client 20.151.113.137:5324] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws87.php"] [unique_id "achw6Gnfn-AtRoMbquyHLwAAAFc"]
[Sun Mar 29 08:23:05.279145 2026] [:error] [pid 23167:tid 23190] [client 20.151.113.137:6087] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws87.php"] [unique_id "achw6RIAHJCFaHff3_eJ2gAAAdQ"]
[Sun Mar 29 08:23:05.737962 2026] [:error] [pid 23284:tid 23291] [client 20.151.113.137:63329] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws87.php"] [unique_id "achw6YzBujdPHsq7wyRw8wAAAoU"]
[Sun Mar 29 08:23:06.188048 2026] [proxy_fcgi:error] [pid 23284:tid 23309] [client 20.151.113.137:64578] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 08:23:06.429130 2026] [proxy_fcgi:error] [pid 23284:tid 23300] [client 20.151.113.137:64578] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 08:23:06.668652 2026] [proxy_fcgi:error] [pid 23284:tid 23310] [client 20.151.113.137:64578] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 08:23:06.877465 2026] [proxy_fcgi:error] [pid 23284:tid 23307] [client 20.151.113.137:64578] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 08:23:07.118833 2026] [proxy_fcgi:error] [pid 23284:tid 23295] [client 20.151.113.137:64578] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 08:23:07.348808 2026] [proxy_fcgi:error] [pid 23284:tid 23302] [client 20.151.113.137:64578] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 08:23:07.557145 2026] [proxy_fcgi:error] [pid 23284:tid 23305] [client 20.151.113.137:64578] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 08:23:09.152623 2026] [proxy_fcgi:error] [pid 23284:tid 23297] [client 20.151.113.137:64578] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 08:23:09.580414 2026] [proxy_fcgi:error] [pid 23284:tid 23292] [client 20.151.113.137:64578] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 08:23:09.825447 2026] [proxy_fcgi:error] [pid 23284:tid 23294] [client 20.151.113.137:64578] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 08:23:10.041370 2026] [:error] [pid 23284:tid 23306] [client 20.151.113.137:64578] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wtiiy.php"] [unique_id "achw7ozBujdPHsq7wyRxBgAAApQ"]
[Sun Mar 29 08:23:12.798782 2026] [:error] [pid 32255:tid 32315] [client 20.151.113.137:64568] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wtiiy.php"] [unique_id "achw8Gnfn-AtRoMbquyHQgAAAFg"]
[Sun Mar 29 08:23:13.642311 2026] [:error] [pid 23167:tid 23176] [client 20.151.113.137:64531] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wtiiy.php"] [unique_id "achw8RIAHJCFaHff3_eKsgAAAcY"]
[Sun Mar 29 08:23:14.218383 2026] [:error] [pid 23168:tid 23220] [client 20.151.113.137:36546] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wtiiy.php"] [unique_id "achw8mP8p0yRL8ot_28NdgAAAhc"]
[Sun Mar 29 08:23:14.680591 2026] [:error] [pid 23167:tid 23172] [client 20.151.113.137:5337] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ajax.php"] [unique_id "achw8hIAHJCFaHff3_eKuwAAAcI"]
[Sun Mar 29 08:23:15.175516 2026] [:error] [pid 32255:tid 32305] [client 20.151.113.137:6140] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ajax.php"] [unique_id "achw82nfn-AtRoMbquyHSwAAAE4"]
[Sun Mar 29 08:23:15.754220 2026] [:error] [pid 1524:tid 1546] [client 20.151.113.137:64099] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ajax.php"] [unique_id "achw81oaWSl2asqQCh8zXAAAAQ8"]
[Sun Mar 29 08:23:16.259657 2026] [:error] [pid 32255:tid 32294] [client 20.151.113.137:64617] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ajax.php"] [unique_id "achw9Gnfn-AtRoMbquyHWgAAAEM"]
[Sun Mar 29 08:23:16.686313 2026] [:error] [pid 23168:tid 23202] [client 20.151.113.137:61650] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/gptsh.php"] [unique_id "achw9GP8p0yRL8ot_28NfQAAAgU"]
[Sun Mar 29 08:23:17.123424 2026] [:error] [pid 23168:tid 23215] [client 20.151.113.137:6120] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/gptsh.php"] [unique_id "achw9WP8p0yRL8ot_28NgAAAAhI"]
[Sun Mar 29 08:23:17.584551 2026] [:error] [pid 32359:tid 32362] [client 20.151.113.137:5340] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/gptsh.php"] [unique_id "achw9QMb8G3UzfQP3WjmzAAAAME"]
[Sun Mar 29 08:23:18.015098 2026] [:error] [pid 23137:tid 23145] [client 20.151.113.137:6110] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/gptsh.php"] [unique_id "achw9haWQa7LdZ_qGFaWSgAAAYY"]
[Sun Mar 29 08:23:18.507321 2026] [:error] [pid 23250:tid 23257] [client 20.151.113.137:63339] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "achw9pxrpj-dQjy1cvpZVAAAAkU"]
[Sun Mar 29 08:23:19.001127 2026] [:error] [pid 23167:tid 23192] [client 20.151.113.137:38937] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "achw9xIAHJCFaHff3_eK0wAAAdY"]
[Sun Mar 29 08:23:19.433273 2026] [:error] [pid 23137:tid 23152] [client 20.151.113.137:62081] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "achw9xaWQa7LdZ_qGFaWVAAAAY0"]
[Sun Mar 29 08:23:19.881146 2026] [:error] [pid 23167:tid 23188] [client 20.151.113.137:6129] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "achw9xIAHJCFaHff3_eK3QAAAdI"]
[Sun Mar 29 08:23:20.414830 2026] [:error] [pid 23167:tid 23173] [client 20.151.113.137:63348] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bgymj.php"] [unique_id "achw-BIAHJCFaHff3_eK5QAAAcM"]
[Sun Mar 29 08:23:20.867611 2026] [:error] [pid 32257:tid 32333] [client 20.151.113.137:65302] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bgymj.php"] [unique_id "achw-CE3TArOFrUtgWpfCwAAAI8"]
[Sun Mar 29 08:23:21.414788 2026] [:error] [pid 23284:tid 23304] [client 20.151.113.137:38955] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bgymj.php"] [unique_id "achw-YzBujdPHsq7wyRxRgAAApI"]
[Sun Mar 29 08:23:21.890667 2026] [:error] [pid 32255:tid 32312] [client 20.151.113.137:55957] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bgymj.php"] [unique_id "achw-Wnfn-AtRoMbquyHbwAAAFU"]
[Sun Mar 29 08:23:22.407305 2026] [:error] [pid 23167:tid 23182] [client 20.151.113.137:64549] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ah25.php"] [unique_id "achw-hIAHJCFaHff3_eK6QAAAcw"]
[Sun Mar 29 08:23:22.830990 2026] [:error] [pid 23137:tid 23162] [client 20.151.113.137:36555] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ah25.php"] [unique_id "achw-haWQa7LdZ_qGFaWXQAAAZc"]
[Sun Mar 29 08:23:23.291660 2026] [:error] [pid 23250:tid 23266] [client 20.151.113.137:64055] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ah25.php"] [unique_id "achw-5xrpj-dQjy1cvpZWwAAAk4"]
[Sun Mar 29 08:23:23.812545 2026] [:error] [pid 23250:tid 23274] [client 20.151.113.137:5332] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ah25.php"] [unique_id "achw-5xrpj-dQjy1cvpZXQAAAlY"]
[Sun Mar 29 08:23:24.361356 2026] [:error] [pid 23167:tid 23171] [client 20.151.113.137:36553] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws60.php"] [unique_id "achw_BIAHJCFaHff3_eK8wAAAcE"]
[Sun Mar 29 08:23:24.840563 2026] [:error] [pid 32255:tid 32314] [client 20.151.113.137:65285] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws60.php"] [unique_id "achw_Gnfn-AtRoMbquyHdgAAAFc"]
[Sun Mar 29 08:23:25.430383 2026] [:error] [pid 23167:tid 23188] [client 20.151.113.137:65284] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws60.php"] [unique_id "achw_RIAHJCFaHff3_eK-wAAAdI"]
[Sun Mar 29 08:23:25.871926 2026] [:error] [pid 32257:tid 32322] [client 20.151.113.137:5321] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws60.php"] [unique_id "achw_SE3TArOFrUtgWpfHAAAAIQ"]
[Sun Mar 29 08:23:26.374065 2026] [:error] [pid 23167:tid 23183] [client 20.151.113.137:36505] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/motu.php"] [unique_id "achw_hIAHJCFaHff3_eLCAAAAc0"]
[Sun Mar 29 08:23:26.805108 2026] [:error] [pid 23167:tid 23176] [client 20.151.113.137:64558] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/motu.php"] [unique_id "achw_hIAHJCFaHff3_eLDgAAAcY"]
[Sun Mar 29 08:23:27.250272 2026] [:error] [pid 23167:tid 23171] [client 20.151.113.137:65280] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/motu.php"] [unique_id "achw_xIAHJCFaHff3_eLEwAAAcE"]
[Sun Mar 29 08:23:27.735268 2026] [:error] [pid 23167:tid 23182] [client 20.151.113.137:62835] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/motu.php"] [unique_id "achw_xIAHJCFaHff3_eLGAAAAcw"]
[Sun Mar 29 08:23:28.206619 2026] [:error] [pid 32255:tid 32312] [client 20.151.113.137:64077] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/buc.php"] [unique_id "achxAGnfn-AtRoMbquyHhQAAAFU"]
[Sun Mar 29 08:23:28.675419 2026] [:error] [pid 32255:tid 32299] [client 20.151.113.137:64612] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/buc.php"] [unique_id "achxAGnfn-AtRoMbquyHjwAAAEg"]
[Sun Mar 29 08:23:29.136060 2026] [:error] [pid 23284:tid 23300] [client 20.151.113.137:64085] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/buc.php"] [unique_id "achxAYzBujdPHsq7wyRxUQAAAo4"]
[Sun Mar 29 08:23:29.620988 2026] [:error] [pid 23284:tid 23291] [client 20.151.113.137:65329] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/buc.php"] [unique_id "achxAYzBujdPHsq7wyRxWwAAAoU"]
[Sun Mar 29 08:23:30.163886 2026] [:error] [pid 32255:tid 32298] [client 20.151.113.137:64091] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/myfile.php"] [unique_id "achxAmnfn-AtRoMbquyHmQAAAEc"]
[Sun Mar 29 08:23:30.644232 2026] [:error] [pid 1524:tid 1551] [client 20.151.113.137:65330] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/myfile.php"] [unique_id "achxAloaWSl2asqQCh8zhAAAARM"]
[Sun Mar 29 08:23:31.157384 2026] [:error] [pid 32255:tid 32294] [client 20.151.113.137:65312] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/myfile.php"] [unique_id "achxA2nfn-AtRoMbquyHqwAAAEM"]
[Sun Mar 29 08:23:31.581707 2026] [:error] [pid 23167:tid 23181] [client 20.151.113.137:64008] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/myfile.php"] [unique_id "achxAxIAHJCFaHff3_eLKwAAAcs"]
[Sun Mar 29 08:23:32.067759 2026] [:error] [pid 23137:tid 23158] [client 20.151.113.137:37204] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-the.php"] [unique_id "achxBBaWQa7LdZ_qGFaWeQAAAZM"]
[Sun Mar 29 08:23:32.528382 2026] [:error] [pid 23284:tid 23289] [client 20.151.113.137:65323] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-the.php"] [unique_id "achxBIzBujdPHsq7wyRxbgAAAoM"]
[Sun Mar 29 08:23:33.002464 2026] [:error] [pid 32255:tid 32295] [client 20.151.113.137:36522] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-the.php"] [unique_id "achxBWnfn-AtRoMbquyHwQAAAEQ"]
[Sun Mar 29 08:23:33.565740 2026] [:error] [pid 23250:tid 23275] [client 20.151.113.137:64525] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-the.php"] [unique_id "achxBZxrpj-dQjy1cvpZdwAAAlc"]
[Sun Mar 29 08:23:34.040294 2026] [:error] [pid 32255:tid 32295] [client 20.151.113.137:64557] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/okxh.php"] [unique_id "achxBmnfn-AtRoMbquyHyAAAAEQ"]
[Sun Mar 29 08:23:34.569437 2026] [:error] [pid 23167:tid 23190] [client 20.151.113.137:6081] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/okxh.php"] [unique_id "achxBhIAHJCFaHff3_eLQQAAAdQ"]
[Sun Mar 29 08:23:35.052356 2026] [:error] [pid 23284:tid 23291] [client 20.151.113.137:5371] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/okxh.php"] [unique_id "achxB4zBujdPHsq7wyRxeQAAAoU"]
[Sun Mar 29 08:23:35.543984 2026] [:error] [pid 23284:tid 23306] [client 20.151.113.137:64009] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/okxh.php"] [unique_id "achxB4zBujdPHsq7wyRxgAAAApQ"]
[Sun Mar 29 08:23:36.126518 2026] [:error] [pid 23167:tid 23184] [client 20.151.113.137:36527] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/lib.php"] [unique_id "achxCBIAHJCFaHff3_eLSQAAAc4"]
[Sun Mar 29 08:23:36.670244 2026] [:error] [pid 32255:tid 32309] [client 20.151.113.137:64582] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/lib.php"] [unique_id "achxCGnfn-AtRoMbquyH0QAAAFI"]
[Sun Mar 29 08:23:37.213136 2026] [:error] [pid 23168:tid 23203] [client 20.151.113.137:38944] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/lib.php"] [unique_id "achxCWP8p0yRL8ot_28NjwAAAgY"]
[Sun Mar 29 08:23:37.834123 2026] [:error] [pid 23168:tid 23218] [client 20.151.113.137:36540] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/lib.php"] [unique_id "achxCWP8p0yRL8ot_28NkQAAAhU"]
[Sun Mar 29 08:23:38.372770 2026] [:error] [pid 23168:tid 23197] [client 20.151.113.137:38933] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/zc-104.php"] [unique_id "achxCmP8p0yRL8ot_28NkwAAAgA"]
[Sun Mar 29 08:23:38.816327 2026] [:error] [pid 32255:tid 32305] [client 20.151.113.137:6137] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/zc-104.php"] [unique_id "achxCmnfn-AtRoMbquyH4gAAAE4"]
[Sun Mar 29 08:23:39.273680 2026] [:error] [pid 23168:tid 23213] [client 20.151.113.137:36517] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/zc-104.php"] [unique_id "achxC2P8p0yRL8ot_28NmQAAAhA"]
[Sun Mar 29 08:23:40.210803 2026] [:error] [pid 32359:tid 32380] [client 20.151.113.137:37230] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/zc-104.php"] [unique_id "achxDAMb8G3UzfQP3Wjm0gAAANM"]
[Sun Mar 29 08:23:41.030004 2026] [:error] [pid 32255:tid 32305] [client 20.151.113.137:37210] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws86.php"] [unique_id "achxDWnfn-AtRoMbquyH7QAAAE4"]
[Sun Mar 29 08:23:41.588834 2026] [:error] [pid 23137:tid 23154] [client 20.151.113.137:65319] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws86.php"] [unique_id "achxDRaWQa7LdZ_qGFaWiAAAAY8"]
[Sun Mar 29 08:23:42.136356 2026] [:error] [pid 32257:tid 32328] [client 20.151.113.137:64524] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws86.php"] [unique_id "achxDiE3TArOFrUtgWpfOAAAAIo"]
[Sun Mar 29 08:23:42.897447 2026] [:error] [pid 23167:tid 23183] [client 20.151.113.137:64065] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws86.php"] [unique_id "achxDhIAHJCFaHff3_eLWAAAAc0"]
[Sun Mar 29 08:23:43.468510 2026] [:error] [pid 23250:tid 23255] [client 20.151.113.137:63271] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-blogs.php"] [unique_id "achxD5xrpj-dQjy1cvpZjwAAAkM"]
[Sun Mar 29 08:23:44.255199 2026] [:error] [pid 23137:tid 23157] [client 20.151.113.137:36489] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-blogs.php"] [unique_id "achxEBaWQa7LdZ_qGFaWjgAAAZI"]
[Sun Mar 29 08:23:44.817641 2026] [:error] [pid 32255:tid 32294] [client 20.151.113.137:61678] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-blogs.php"] [unique_id "achxEGnfn-AtRoMbquyIBgAAAEM"]
[Sun Mar 29 08:23:45.348119 2026] [:error] [pid 23250:tid 23263] [client 20.151.113.137:61691] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-blogs.php"] [unique_id "achxEZxrpj-dQjy1cvpZlwAAAks"]
[Sun Mar 29 08:23:45.976873 2026] [:error] [pid 23167:tid 23187] [client 20.151.113.137:38926] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/as.php"] [unique_id "achxERIAHJCFaHff3_eLXQAAAdE"]
[Sun Mar 29 08:23:46.486965 2026] [:error] [pid 32257:tid 32329] [client 20.151.113.137:61635] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/as.php"] [unique_id "achxEiE3TArOFrUtgWpfOwAAAIs"]
[Sun Mar 29 08:23:47.027700 2026] [:error] [pid 23167:tid 23190] [client 20.151.113.137:38936] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/as.php"] [unique_id "achxExIAHJCFaHff3_eLXwAAAdQ"]
[Sun Mar 29 08:23:47.605908 2026] [:error] [pid 23284:tid 23297] [client 20.151.113.137:36574] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/as.php"] [unique_id "achxE4zBujdPHsq7wyRxvgAAAos"]
[Sun Mar 29 08:23:48.135775 2026] [:error] [pid 23284:tid 23307] [client 20.151.113.137:38934] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/Cap.php"] [unique_id "achxFIzBujdPHsq7wyRxwAAAApU"]
[Sun Mar 29 08:23:48.691515 2026] [:error] [pid 23284:tid 23288] [client 20.151.113.137:36562] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/Cap.php"] [unique_id "achxFIzBujdPHsq7wyRxxQAAAoI"]
[Sun Mar 29 08:23:49.745164 2026] [:error] [pid 23167:tid 23172] [client 20.151.113.137:36592] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/Cap.php"] [unique_id "achxFRIAHJCFaHff3_eLZgAAAcI"]
[Sun Mar 29 08:23:50.261518 2026] [:error] [pid 23137:tid 23162] [client 20.151.113.137:61684] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/Cap.php"] [unique_id "achxFhaWQa7LdZ_qGFaWkgAAAZc"]
[Sun Mar 29 08:23:50.889920 2026] [:error] [pid 23167:tid 23179] [client 20.151.113.137:6112] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xfun.php"] [unique_id "achxFhIAHJCFaHff3_eLawAAAck"]
[Sun Mar 29 08:23:51.401190 2026] [:error] [pid 23167:tid 23187] [client 20.151.113.137:63236] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xfun.php"] [unique_id "achxFxIAHJCFaHff3_eLbgAAAdE"]
[Sun Mar 29 08:23:51.883139 2026] [:error] [pid 23250:tid 23254] [client 20.151.113.137:6115] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xfun.php"] [unique_id "achxF5xrpj-dQjy1cvpZmwAAAkI"]
[Sun Mar 29 08:23:52.378420 2026] [:error] [pid 32257:tid 32340] [client 20.151.113.137:63349] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xfun.php"] [unique_id "achxGCE3TArOFrUtgWpfPgAAAJY"]
[Sun Mar 29 08:23:53.155846 2026] [:error] [pid 23137:tid 23148] [client 20.151.113.137:36596] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bjfl.php"] [unique_id "achxGRaWQa7LdZ_qGFaWlwAAAYk"]
[Sun Mar 29 08:23:53.683421 2026] [:error] [pid 32257:tid 32334] [client 20.151.113.137:64102] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bjfl.php"] [unique_id "achxGSE3TArOFrUtgWpfQgAAAJA"]
[Sun Mar 29 08:23:54.723879 2026] [:error] [pid 23167:tid 23172] [client 20.151.113.137:63312] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bjfl.php"] [unique_id "achxGhIAHJCFaHff3_eLhQAAAcI"]
[Sun Mar 29 08:23:55.337830 2026] [:error] [pid 23167:tid 23179] [client 20.151.113.137:61664] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bjfl.php"] [unique_id "achxGxIAHJCFaHff3_eLiAAAAck"]
[Sun Mar 29 08:23:55.800189 2026] [:error] [pid 32255:tid 32310] [client 20.151.113.137:65325] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/155.php"] [unique_id "achxG2nfn-AtRoMbquyIGwAAAFM"]
[Sun Mar 29 08:23:56.586892 2026] [:error] [pid 23167:tid 23185] [client 20.151.113.137:64541] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/155.php"] [unique_id "achxHBIAHJCFaHff3_eLkgAAAc8"]
[Sun Mar 29 08:23:57.132664 2026] [:error] [pid 32255:tid 32311] [client 20.151.113.137:64038] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/155.php"] [unique_id "achxHWnfn-AtRoMbquyIHwAAAFQ"]
[Sun Mar 29 08:23:57.666912 2026] [:error] [pid 1524:tid 1528] [client 20.151.113.137:38975] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/155.php"] [unique_id "achxHVoaWSl2asqQCh8zmAAAAQE"]
[Sun Mar 29 08:23:58.220528 2026] [:error] [pid 23284:tid 23288] [client 20.151.113.137:36567] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/rzki.php"] [unique_id "achxHozBujdPHsq7wyRx3QAAAoI"]
[Sun Mar 29 08:23:58.968881 2026] [:error] [pid 23250:tid 23262] [client 20.151.113.137:37243] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/rzki.php"] [unique_id "achxHpxrpj-dQjy1cvpZpQAAAko"]
[Sun Mar 29 08:23:59.417892 2026] [:error] [pid 23167:tid 23191] [client 20.151.113.137:37195] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/rzki.php"] [unique_id "achxHxIAHJCFaHff3_eLnwAAAdU"]
[Sun Mar 29 08:23:59.964188 2026] [:error] [pid 23284:tid 23303] [client 20.151.113.137:61637] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/rzki.php"] [unique_id "achxH4zBujdPHsq7wyRx4gAAApE"]
[Sun Mar 29 08:24:00.493084 2026] [:error] [pid 23284:tid 23292] [client 20.151.113.137:64565] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/classwithtostring.php"] [unique_id "achxIIzBujdPHsq7wyRx5wAAAoY"]
[Sun Mar 29 08:24:02.459302 2026] [:error] [pid 23284:tid 23299] [client 20.151.113.137:62133] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/classwithtostring.php"] [unique_id "achxIozBujdPHsq7wyRx6gAAAo0"]
[Sun Mar 29 08:24:03.112605 2026] [:error] [pid 23167:tid 23182] [client 20.151.113.137:64095] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/classwithtostring.php"] [unique_id "achxIxIAHJCFaHff3_eLsAAAAcw"]
[Sun Mar 29 08:24:03.733344 2026] [:error] [pid 23250:tid 23260] [client 20.151.113.137:64046] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/classwithtostring.php"] [unique_id "achxI5xrpj-dQjy1cvpZpgAAAkg"]
[Sun Mar 29 08:24:04.351836 2026] [:error] [pid 23167:tid 23192] [client 20.151.113.137:64579] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws49.php"] [unique_id "achxJBIAHJCFaHff3_eLuAAAAdY"]
[Sun Mar 29 08:24:04.830168 2026] [:error] [pid 23167:tid 23188] [client 20.151.113.137:38928] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws49.php"] [unique_id "achxJBIAHJCFaHff3_eLvgAAAdI"]
[Sun Mar 29 08:24:05.366060 2026] [:error] [pid 32257:tid 32320] [client 20.151.113.137:36495] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws49.php"] [unique_id "achxJSE3TArOFrUtgWpfVAAAAII"]
[Sun Mar 29 08:24:05.907735 2026] [:error] [pid 32257:tid 32341] [client 20.151.113.137:63342] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws49.php"] [unique_id "achxJSE3TArOFrUtgWpfVQAAAJc"]
[Sun Mar 29 08:24:06.745807 2026] [:error] [pid 32255:tid 32304] [client 20.151.113.137:64005] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/tool.php"] [unique_id "achxJmnfn-AtRoMbquyILwAAAE0"]
[Sun Mar 29 08:24:07.255571 2026] [:error] [pid 32257:tid 32339] [client 20.151.113.137:63292] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/tool.php"] [unique_id "achxJyE3TArOFrUtgWpfVwAAAJU"]
[Sun Mar 29 08:24:07.950806 2026] [:error] [pid 23250:tid 23252] [client 20.151.113.137:64021] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/tool.php"] [unique_id "achxJ5xrpj-dQjy1cvpZrAAAAkA"]
[Sun Mar 29 08:24:08.720816 2026] [:error] [pid 23167:tid 23186] [client 20.151.113.137:63248] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/tool.php"] [unique_id "achxKBIAHJCFaHff3_eL0QAAAdA"]
[Sun Mar 29 08:24:09.450249 2026] [proxy_fcgi:error] [pid 32255:tid 32306] [client 20.151.113.137:62086] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 08:24:09.663860 2026] [proxy_fcgi:error] [pid 32255:tid 32292] [client 20.151.113.137:62086] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 08:24:09.872461 2026] [proxy_fcgi:error] [pid 32255:tid 32310] [client 20.151.113.137:62086] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 08:24:10.083223 2026] [proxy_fcgi:error] [pid 32255:tid 32296] [client 20.151.113.137:62086] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 08:24:10.296677 2026] [proxy_fcgi:error] [pid 32255:tid 32308] [client 20.151.113.137:62086] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 08:24:10.506935 2026] [proxy_fcgi:error] [pid 32255:tid 32298] [client 20.151.113.137:62086] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 08:24:10.788731 2026] [proxy_fcgi:error] [pid 32255:tid 32309] [client 20.151.113.137:62086] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 08:24:11.094430 2026] [proxy_fcgi:error] [pid 32255:tid 32315] [client 20.151.113.137:62086] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 08:24:11.322370 2026] [proxy_fcgi:error] [pid 32255:tid 32311] [client 20.151.113.137:62086] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 08:24:11.567372 2026] [proxy_fcgi:error] [pid 32255:tid 32297] [client 20.151.113.137:62086] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 08:24:11.777319 2026] [proxy_fcgi:error] [pid 32255:tid 32295] [client 20.151.113.137:62086] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 08:24:11.989833 2026] [:error] [pid 32255:tid 32304] [client 20.151.113.137:62086] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/public/wp-blog.php"] [unique_id "achxK2nfn-AtRoMbquyISwAAAE0"]
[Sun Mar 29 08:24:12.829152 2026] [:error] [pid 23167:tid 23174] [client 20.151.113.137:36536] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/public/wp-blog.php"] [unique_id "achxLBIAHJCFaHff3_eL4wAAAcQ"]
[Sun Mar 29 08:24:13.640905 2026] [:error] [pid 32257:tid 32329] [client 20.151.113.137:64048] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/public/wp-blog.php"] [unique_id "achxLSE3TArOFrUtgWpfXQAAAIs"]
[Sun Mar 29 08:24:14.362545 2026] [:error] [pid 23168:tid 23218] [client 20.151.113.137:6115] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/public/wp-blog.php"] [unique_id "achxLmP8p0yRL8ot_28NugAAAhU"]
[Sun Mar 29 08:24:15.173091 2026] [:error] [pid 23167:tid 23187] [client 20.151.113.137:61682] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws88.php"] [unique_id "achxLxIAHJCFaHff3_eL7QAAAdE"]
[Sun Mar 29 08:24:15.949250 2026] [:error] [pid 23250:tid 23270] [client 20.151.113.137:64554] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws88.php"] [unique_id "achxL5xrpj-dQjy1cvpZtgAAAlI"]
[Sun Mar 29 08:24:16.800267 2026] [:error] [pid 23284:tid 23295] [client 20.151.113.137:64100] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws88.php"] [unique_id "achxMIzBujdPHsq7wyRx-gAAAok"]
[Sun Mar 29 08:24:17.273695 2026] [:error] [pid 23137:tid 23158] [client 20.151.113.137:38968] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws88.php"] [unique_id "achxMRaWQa7LdZ_qGFaWrAAAAZM"]
[Sun Mar 29 08:24:17.875889 2026] [:error] [pid 32257:tid 32321] [client 20.151.113.137:63308] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/csv.php"] [unique_id "achxMSE3TArOFrUtgWpfYgAAAIM"]
[Sun Mar 29 08:24:18.317374 2026] [:error] [pid 32257:tid 32324] [client 20.151.113.137:64566] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/csv.php"] [unique_id "achxMiE3TArOFrUtgWpfZAAAAIY"]
[Sun Mar 29 08:24:18.831676 2026] [:error] [pid 23167:tid 23186] [client 20.151.113.137:63305] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/csv.php"] [unique_id "achxMhIAHJCFaHff3_eL_gAAAdA"]
[Sun Mar 29 08:24:19.355271 2026] [:error] [pid 23167:tid 23183] [client 20.151.113.137:63353] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/csv.php"] [unique_id "achxMxIAHJCFaHff3_eMAQAAAc0"]
[Sun Mar 29 08:24:19.951331 2026] [:error] [pid 32257:tid 32331] [client 20.151.113.137:6088] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/varb.php"] [unique_id "achxMyE3TArOFrUtgWpfaQAAAI0"]
[Sun Mar 29 08:24:20.685175 2026] [:error] [pid 23167:tid 23194] [client 20.151.113.137:36545] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/varb.php"] [unique_id "achxNBIAHJCFaHff3_eMCgAAAdg"]
[Sun Mar 29 08:24:21.283259 2026] [:error] [pid 32255:tid 32291] [client 20.151.113.137:61643] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/varb.php"] [unique_id "achxNWnfn-AtRoMbquyIWQAAAEA"]
[Sun Mar 29 08:24:22.279652 2026] [:error] [pid 23167:tid 23182] [client 20.151.113.137:61666] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/varb.php"] [unique_id "achxNhIAHJCFaHff3_eMFgAAAcw"]
[Sun Mar 29 08:24:22.806871 2026] [:error] [pid 23167:tid 23178] [client 20.151.113.137:63326] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/8573.php"] [unique_id "achxNhIAHJCFaHff3_eMGwAAAcg"]
[Sun Mar 29 08:24:23.364340 2026] [:error] [pid 32255:tid 32296] [client 20.151.113.137:64083] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/8573.php"] [unique_id "achxN2nfn-AtRoMbquyIYwAAAEU"]
[Sun Mar 29 08:24:24.010841 2026] [:error] [pid 23284:tid 23293] [client 20.151.113.137:64603] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/8573.php"] [unique_id "achxOIzBujdPHsq7wyRyAQAAAoc"]
[Sun Mar 29 08:24:24.850578 2026] [:error] [pid 32255:tid 32315] [client 20.151.113.137:63307] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/8573.php"] [unique_id "achxOGnfn-AtRoMbquyIbQAAAFg"]
[Sun Mar 29 08:24:25.418397 2026] [:error] [pid 23167:tid 23192] [client 20.151.113.137:36601] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/abc.php"] [unique_id "achxORIAHJCFaHff3_eMHwAAAdY"]
[Sun Mar 29 08:24:26.196767 2026] [:error] [pid 23284:tid 23303] [client 20.151.113.137:62807] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/abc.php"] [unique_id "achxOozBujdPHsq7wyRyAgAAApE"]
[Sun Mar 29 08:24:26.651092 2026] [:error] [pid 23167:tid 23185] [client 20.151.113.137:38953] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/abc.php"] [unique_id "achxOhIAHJCFaHff3_eMJQAAAc8"]
[Sun Mar 29 08:24:27.206563 2026] [:error] [pid 23137:tid 23163] [client 20.151.113.137:36503] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/abc.php"] [unique_id "achxOxaWQa7LdZ_qGFaWrwAAAZg"]
[Sun Mar 29 08:24:27.702183 2026] [:error] [pid 23167:tid 23172] [client 20.151.113.137:62828] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-png.php"] [unique_id "achxOxIAHJCFaHff3_eMKQAAAcI"]
[Sun Mar 29 08:24:28.166545 2026] [:error] [pid 23284:tid 23305] [client 20.151.113.137:36482] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-png.php"] [unique_id "achxPIzBujdPHsq7wyRyCAAAApM"]
[Sun Mar 29 08:24:28.756605 2026] [:error] [pid 23250:tid 23258] [client 20.151.113.137:63288] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-png.php"] [unique_id "achxPJxrpj-dQjy1cvpZwwAAAkY"]
[Sun Mar 29 08:24:29.456364 2026] [:error] [pid 23284:tid 23289] [client 20.151.113.137:61641] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-png.php"] [unique_id "achxPYzBujdPHsq7wyRyEAAAAoM"]
[Sun Mar 29 08:24:30.761385 2026] [:error] [pid 32257:tid 32326] [client 20.151.113.137:38969] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/jp.php"] [unique_id "achxPiE3TArOFrUtgWpfcQAAAIg"]
[Sun Mar 29 08:24:31.401594 2026] [:error] [pid 32257:tid 32332] [client 20.151.113.137:63257] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/jp.php"] [unique_id "achxPyE3TArOFrUtgWpfdgAAAI4"]
[Sun Mar 29 08:24:32.099048 2026] [:error] [pid 23167:tid 23186] [client 20.151.113.137:37198] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/jp.php"] [unique_id "achxQBIAHJCFaHff3_eMLQAAAdA"]
[Sun Mar 29 08:24:32.606876 2026] [:error] [pid 23167:tid 23187] [client 20.151.113.137:5362] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/jp.php"] [unique_id "achxQBIAHJCFaHff3_eMMgAAAdE"]
[Sun Mar 29 08:24:33.484344 2026] [:error] [pid 23284:tid 23296] [client 20.151.113.137:36506] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/tfm.php"] [unique_id "achxQYzBujdPHsq7wyRyHAAAAoo"]
[Sun Mar 29 08:24:34.870699 2026] [:error] [pid 23167:tid 23192] [client 20.151.113.137:63336] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/tfm.php"] [unique_id "achxQhIAHJCFaHff3_eMPQAAAdY"]
[Sun Mar 29 08:24:36.308882 2026] [:error] [pid 23167:tid 23193] [client 20.151.113.137:36565] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/tfm.php"] [unique_id "achxRBIAHJCFaHff3_eMSwAAAdc"]
[Sun Mar 29 08:24:36.933704 2026] [:error] [pid 23250:tid 23273] [client 20.151.113.137:64573] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/tfm.php"] [unique_id "achxRJxrpj-dQjy1cvpZywAAAlU"]
[Sun Mar 29 08:24:37.764960 2026] [:error] [pid 23137:tid 23153] [client 20.151.113.137:64079] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/admin-footer.php"] [unique_id "achxRRaWQa7LdZ_qGFaWtAAAAY4"]
[Sun Mar 29 08:24:39.380735 2026] [:error] [pid 1524:tid 1538] [client 20.151.113.137:36519] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/admin-footer.php"] [unique_id "achxR1oaWSl2asqQCh8zuAAAAQk"]
[Sun Mar 29 08:24:40.007867 2026] [:error] [pid 23250:tid 23274] [client 20.151.113.137:61667] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/admin-footer.php"] [unique_id "achxSJxrpj-dQjy1cvpZ0gAAAlY"]
[Sun Mar 29 08:24:41.091654 2026] [:error] [pid 23168:tid 23219] [client 20.151.113.137:63355] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/admin-footer.php"] [unique_id "achxSWP8p0yRL8ot_28N0gAAAhY"]
[Sun Mar 29 17:19:12.718871 2026] [proxy_fcgi:error] [pid 32255:tid 32295] [client 20.168.65.162:1859] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 17:19:13.337281 2026] [proxy_fcgi:error] [pid 32255:tid 32291] [client 20.168.65.162:1859] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 17:19:13.506369 2026] [proxy_fcgi:error] [pid 32255:tid 32298] [client 20.168.65.162:1859] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 17:19:13.755691 2026] [proxy_fcgi:error] [pid 32255:tid 32313] [client 20.168.65.162:1859] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 17:19:13.949309 2026] [proxy_fcgi:error] [pid 32255:tid 32309] [client 20.168.65.162:1859] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 17:19:14.275726 2026] [proxy_fcgi:error] [pid 32255:tid 32302] [client 20.168.65.162:1859] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 17:19:14.436989 2026] [proxy_fcgi:error] [pid 32255:tid 32310] [client 20.168.65.162:1859] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 17:19:14.871182 2026] [proxy_fcgi:error] [pid 32255:tid 32299] [client 20.168.65.162:1859] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 17:19:15.030479 2026] [proxy_fcgi:error] [pid 32255:tid 32292] [client 20.168.65.162:1859] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 17:19:15.197065 2026] [proxy_fcgi:error] [pid 32255:tid 32312] [client 20.168.65.162:1859] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 17:19:15.357702 2026] [:error] [pid 32255:tid 32307] [client 20.168.65.162:1859] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/aa.php"] [unique_id "acjuk2nfn-AtRoMbquxsGwAAAFA"]
[Sun Mar 29 17:19:16.284151 2026] [:error] [pid 32255:tid 32301] [client 20.168.65.162:11584] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/aa.php"] [unique_id "acjulGnfn-AtRoMbquxsHAAAAEo"]
[Sun Mar 29 17:19:17.078594 2026] [:error] [pid 32255:tid 32310] [client 20.168.65.162:42656] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/aa.php"] [unique_id "acjulWnfn-AtRoMbquxsIwAAAFM"]
[Sun Mar 29 17:19:17.469644 2026] [:error] [pid 32255:tid 32312] [client 20.168.65.162:8445] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/aa.php"] [unique_id "acjulWnfn-AtRoMbquxsJQAAAFU"]
[Sun Mar 29 17:19:18.062221 2026] [:error] [pid 32255:tid 32301] [client 20.168.65.162:17049] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-cxs.php"] [unique_id "acjulmnfn-AtRoMbquxsJwAAAEo"]
[Sun Mar 29 17:19:18.389550 2026] [:error] [pid 23284:tid 23294] [client 20.168.65.162:18412] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-cxs.php"] [unique_id "acjulozBujdPHsq7wyQHMAAAAog"]
[Sun Mar 29 17:19:19.114159 2026] [:error] [pid 32255:tid 32310] [client 20.168.65.162:11638] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-cxs.php"] [unique_id "acjul2nfn-AtRoMbquxsLwAAAFM"]
[Sun Mar 29 17:19:19.435167 2026] [:error] [pid 32255:tid 32312] [client 20.168.65.162:39961] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "acjul2nfn-AtRoMbquxsMgAAAFU"]
[Sun Mar 29 17:19:19.752587 2026] [:error] [pid 23250:tid 23258] [client 20.168.65.162:42678] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "acjul5xrpj-dQjy1cvrPSwAAAkY"]
[Sun Mar 29 17:19:20.072829 2026] [:error] [pid 32254:tid 32284] [client 20.168.65.162:10444] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "acjumKug2IHuyGgCTn9EJAAAABQ"]
[Sun Mar 29 17:19:20.710432 2026] [:error] [pid 32254:tid 32285] [client 20.168.65.162:10439] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "acjumKug2IHuyGgCTn9EJQAAABU"]
[Sun Mar 29 17:19:20.942886 2026] [:error] [pid 32257:tid 32325] [client 20.168.65.162:12154] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-cxs.php"] [unique_id "acjumCE3TArOFrUtgWq2vAAAAIc"]
[Sun Mar 29 17:19:21.507591 2026] [:error] [pid 32254:tid 32274] [client 20.168.65.162:40042] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-scanner.php"] [unique_id "acjumaug2IHuyGgCTn9EJgAAAAo"]
[Sun Mar 29 17:19:22.025640 2026] [:error] [pid 32255:tid 32299] [client 20.168.65.162:12097] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-scanner.php"] [unique_id "acjummnfn-AtRoMbquxsPgAAAEg"]
[Sun Mar 29 17:19:22.471932 2026] [:error] [pid 23167:tid 23184] [client 20.168.65.162:10487] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-scanner.php"] [unique_id "acjumhIAHJCFaHff3_dtMQAAAc4"]
[Sun Mar 29 17:19:22.984292 2026] [:error] [pid 23167:tid 23187] [client 20.168.65.162:40014] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-scanner.php"] [unique_id "acjumhIAHJCFaHff3_dtNAAAAdE"]
[Sun Mar 29 17:19:23.356442 2026] [:error] [pid 23137:tid 23147] [client 20.168.65.162:18318] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/awh.php"] [unique_id "acjumxaWQa7LdZ_qGFbVZAAAAYg"]
[Sun Mar 29 17:19:23.950016 2026] [:error] [pid 23284:tid 23295] [client 20.168.65.162:39466] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/awh.php"] [unique_id "acjum4zBujdPHsq7wyQHMwAAAok"]
[Sun Mar 29 17:19:24.286457 2026] [:error] [pid 32255:tid 32312] [client 20.168.65.162:40012] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/awh.php"] [unique_id "acjunGnfn-AtRoMbquxsTAAAAFU"]
[Sun Mar 29 17:19:24.797156 2026] [:error] [pid 23284:tid 23288] [client 20.168.65.162:22051] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/awh.php"] [unique_id "acjunIzBujdPHsq7wyQHNgAAAoI"]
[Sun Mar 29 17:19:25.598005 2026] [:error] [pid 32255:tid 32297] [client 20.168.65.162:14656] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/24.php"] [unique_id "acjunWnfn-AtRoMbquxsVAAAAEY"]
[Sun Mar 29 17:19:25.984167 2026] [:error] [pid 23167:tid 23178] [client 20.168.65.162:18328] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/24.php"] [unique_id "acjunRIAHJCFaHff3_dtPAAAAcg"]
[Sun Mar 29 17:19:26.750124 2026] [:error] [pid 23167:tid 23180] [client 20.168.65.162:14698] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/24.php"] [unique_id "acjunhIAHJCFaHff3_dtQAAAAco"]
[Sun Mar 29 17:19:27.839215 2026] [:error] [pid 23167:tid 23192] [client 20.168.65.162:1148] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/24.php"] [unique_id "acjunxIAHJCFaHff3_dtSgAAAdY"]
[Sun Mar 29 17:19:29.173025 2026] [:error] [pid 32255:tid 32309] [client 20.168.65.162:31976] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/zz8.php"] [unique_id "acjuoWnfn-AtRoMbquxsZwAAAFI"]
[Sun Mar 29 17:19:30.530137 2026] [:error] [pid 32255:tid 32303] [client 20.168.65.162:39937] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/zz8.php"] [unique_id "acjuomnfn-AtRoMbquxsbgAAAEw"]
[Sun Mar 29 17:19:31.527447 2026] [:error] [pid 23168:tid 23206] [client 20.168.65.162:14670] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/zz8.php"] [unique_id "acjuo2P8p0yRL8ot_29UgQAAAgk"]
[Sun Mar 29 17:19:32.355201 2026] [:error] [pid 23167:tid 23194] [client 20.168.65.162:21551] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/zz8.php"] [unique_id "acjupBIAHJCFaHff3_dtVwAAAdg"]
[Sun Mar 29 17:19:32.833643 2026] [:error] [pid 23167:tid 23185] [client 20.168.65.162:21516] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/feokc.php"] [unique_id "acjupBIAHJCFaHff3_dtXQAAAc8"]
[Sun Mar 29 17:19:33.353293 2026] [:error] [pid 32257:tid 32326] [client 20.168.65.162:1116] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/feokc.php"] [unique_id "acjupSE3TArOFrUtgWq2zQAAAIg"]
[Sun Mar 29 17:19:34.087856 2026] [:error] [pid 23250:tid 23274] [client 20.168.65.162:21562] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/feokc.php"] [unique_id "acjuppxrpj-dQjy1cvrPVAAAAlY"]
[Sun Mar 29 17:19:34.790209 2026] [:error] [pid 23168:tid 23197] [client 20.168.65.162:39502] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/feokc.php"] [unique_id "acjupmP8p0yRL8ot_29UgwAAAgA"]
[Sun Mar 29 17:19:35.180553 2026] [:error] [pid 32359:tid 32382] [client 20.168.65.162:1105] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/fetch.php"] [unique_id "acjupwMb8G3UzfQP3WgQDAAAANU"]
[Sun Mar 29 17:19:35.719170 2026] [:error] [pid 23167:tid 23188] [client 20.168.65.162:1135] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/fetch.php"] [unique_id "acjupxIAHJCFaHff3_dtbAAAAdI"]
[Sun Mar 29 17:19:36.107637 2026] [:error] [pid 32257:tid 32328] [client 20.168.65.162:28217] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/fetch.php"] [unique_id "acjuqCE3TArOFrUtgWq20wAAAIo"]
[Sun Mar 29 17:19:36.918233 2026] [:error] [pid 23250:tid 23261] [client 20.168.65.162:31956] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/fetch.php"] [unique_id "acjuqJxrpj-dQjy1cvrPWAAAAkk"]
[Sun Mar 29 17:19:37.754236 2026] [:error] [pid 23284:tid 23286] [client 20.168.65.162:21559] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/phpmini.php"] [unique_id "acjuqYzBujdPHsq7wyQHTgAAAoA"]
[Sun Mar 29 17:19:38.247359 2026] [:error] [pid 1524:tid 1533] [client 20.168.65.162:39502] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/phpmini.php"] [unique_id "acjuqloaWSl2asqQCh9pyQAAAQU"]
[Sun Mar 29 17:19:38.854384 2026] [:error] [pid 32255:tid 32298] [client 20.168.65.162:28176] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/phpmini.php"] [unique_id "acjuqmnfn-AtRoMbquxsggAAAEc"]
[Sun Mar 29 17:19:39.495500 2026] [:error] [pid 23284:tid 23303] [client 20.168.65.162:42750] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/phpmini.php"] [unique_id "acjuq4zBujdPHsq7wyQHUQAAApE"]
[Sun Mar 29 17:19:41.436102 2026] [:error] [pid 32255:tid 32305] [client 20.168.65.162:33452] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/an7.php"] [unique_id "acjurWnfn-AtRoMbquxsiQAAAE4"]
[Sun Mar 29 17:19:42.200049 2026] [:error] [pid 32255:tid 32314] [client 20.168.65.162:1143] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/an7.php"] [unique_id "acjurmnfn-AtRoMbquxsiwAAAFc"]
[Sun Mar 29 17:19:42.568329 2026] [:error] [pid 23284:tid 23307] [client 20.168.65.162:40048] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/an7.php"] [unique_id "acjurozBujdPHsq7wyQHXgAAApU"]
[Sun Mar 29 17:19:43.446819 2026] [:error] [pid 32254:tid 32265] [client 20.168.65.162:39497] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/an7.php"] [unique_id "acjur6ug2IHuyGgCTn9EKwAAAAE"]
[Sun Mar 29 17:19:44.230644 2026] [:error] [pid 23168:tid 23210] [client 20.168.65.162:51147] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/tbute.php"] [unique_id "acjusGP8p0yRL8ot_29UhwAAAg0"]
[Sun Mar 29 17:19:44.841122 2026] [:error] [pid 32255:tid 32295] [client 20.168.65.162:14669] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/tbute.php"] [unique_id "acjusGnfn-AtRoMbquxslQAAAEQ"]
[Sun Mar 29 17:19:45.216744 2026] [:error] [pid 32257:tid 32338] [client 20.168.65.162:21544] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/tbute.php"] [unique_id "acjusSE3TArOFrUtgWq21AAAAJQ"]
[Sun Mar 29 17:19:45.749729 2026] [:error] [pid 23137:tid 23144] [client 20.168.65.162:39512] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/tbute.php"] [unique_id "acjusRaWQa7LdZ_qGFbVbQAAAYU"]
[Sun Mar 29 17:19:46.188312 2026] [:error] [pid 23137:tid 23156] [client 20.168.65.162:22070] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/rovoj.php"] [unique_id "acjushaWQa7LdZ_qGFbVcgAAAZE"]
[Sun Mar 29 17:19:46.699349 2026] [:error] [pid 23250:tid 23274] [client 20.168.65.162:28211] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/rovoj.php"] [unique_id "acjuspxrpj-dQjy1cvrPXQAAAlY"]
[Sun Mar 29 17:19:47.187113 2026] [:error] [pid 23250:tid 23253] [client 20.168.65.162:51113] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/rovoj.php"] [unique_id "acjus5xrpj-dQjy1cvrPXwAAAkE"]
[Sun Mar 29 17:19:48.121540 2026] [:error] [pid 1524:tid 1556] [client 20.168.65.162:33408] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/rovoj.php"] [unique_id "acjutFoaWSl2asqQCh9pywAAARg"]
[Sun Mar 29 17:19:48.802959 2026] [:error] [pid 32255:tid 32291] [client 20.168.65.162:22025] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/r3grt7.php"] [unique_id "acjutGnfn-AtRoMbquxspgAAAEA"]
[Sun Mar 29 17:19:49.261465 2026] [:error] [pid 23137:tid 23152] [client 20.168.65.162:33456] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/r3grt7.php"] [unique_id "acjutRaWQa7LdZ_qGFbVgwAAAY0"]
[Sun Mar 29 17:19:49.852169 2026] [:error] [pid 23168:tid 23200] [client 20.168.65.162:31984] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/r3grt7.php"] [unique_id "acjutWP8p0yRL8ot_29UiwAAAgM"]
[Sun Mar 29 17:19:50.423274 2026] [:error] [pid 32255:tid 32305] [client 20.168.65.162:28791] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/r3grt7.php"] [unique_id "acjutmnfn-AtRoMbquxsrAAAAE4"]
[Sun Mar 29 17:19:51.006885 2026] [:error] [pid 23284:tid 23294] [client 20.168.65.162:33457] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/phina.php"] [unique_id "acjut4zBujdPHsq7wyQHYgAAAog"]
[Sun Mar 29 17:19:51.841571 2026] [:error] [pid 32255:tid 32292] [client 20.168.65.162:51101] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/phina.php"] [unique_id "acjut2nfn-AtRoMbquxssgAAAEE"]
[Sun Mar 29 17:19:52.502193 2026] [:error] [pid 32254:tid 32276] [client 20.168.65.162:31981] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/phina.php"] [unique_id "acjuuKug2IHuyGgCTn9ELQAAAAw"]
[Sun Mar 29 17:19:53.012994 2026] [:error] [pid 1524:tid 1542] [client 20.168.65.162:14685] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/phina.php"] [unique_id "acjuuVoaWSl2asqQCh9p0AAAAQs"]
[Sun Mar 29 17:19:53.777796 2026] [:error] [pid 32255:tid 32297] [client 20.168.65.162:31945] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/jga.php"] [unique_id "acjuuWnfn-AtRoMbquxsvQAAAEY"]
[Sun Mar 29 17:19:54.628685 2026] [:error] [pid 23167:tid 23186] [client 20.168.65.162:51090] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/jga.php"] [unique_id "acjuuhIAHJCFaHff3_dtjwAAAdA"]
[Sun Mar 29 17:19:55.242922 2026] [:error] [pid 23167:tid 23179] [client 20.168.65.162:33456] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/jga.php"] [unique_id "acjuuxIAHJCFaHff3_dtkwAAAck"]
[Sun Mar 29 17:19:55.823147 2026] [:error] [pid 23167:tid 23189] [client 20.168.65.162:40036] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/jga.php"] [unique_id "acjuuxIAHJCFaHff3_dtmwAAAdM"]
[Sun Mar 29 17:19:56.345885 2026] [:error] [pid 23250:tid 23257] [client 20.168.65.162:31965] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/fs6.php"] [unique_id "acjuvJxrpj-dQjy1cvrPigAAAkU"]
[Sun Mar 29 17:19:56.794709 2026] [:error] [pid 23167:tid 23186] [client 20.168.65.162:32402] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/fs6.php"] [unique_id "acjuvBIAHJCFaHff3_dtngAAAdA"]
[Sun Mar 29 17:19:57.394295 2026] [:error] [pid 23168:tid 23199] [client 20.168.65.162:22030] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/fs6.php"] [unique_id "acjuvWP8p0yRL8ot_29UkwAAAgI"]
[Sun Mar 29 17:19:57.946721 2026] [:error] [pid 23250:tid 23254] [client 20.168.65.162:32390] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/fs6.php"] [unique_id "acjuvZxrpj-dQjy1cvrPkQAAAkI"]
[Sun Mar 29 17:19:58.864185 2026] [:error] [pid 23250:tid 23267] [client 20.168.65.162:32409] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/fs7.php"] [unique_id "acjuvpxrpj-dQjy1cvrPmQAAAk8"]
[Sun Mar 29 17:19:59.388378 2026] [:error] [pid 23167:tid 23178] [client 20.168.65.162:14674] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/fs7.php"] [unique_id "acjuvxIAHJCFaHff3_dtpQAAAcg"]
[Sun Mar 29 17:19:59.898742 2026] [:error] [pid 23167:tid 23186] [client 20.168.65.162:22078] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/fs7.php"] [unique_id "acjuvxIAHJCFaHff3_dtrQAAAdA"]
[Sun Mar 29 17:20:00.355320 2026] [:error] [pid 23284:tid 23306] [client 20.168.65.162:28174] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/fs7.php"] [unique_id "acjuwIzBujdPHsq7wyQHdQAAApQ"]
[Sun Mar 29 17:20:00.737505 2026] [:error] [pid 23168:tid 23203] [client 20.168.65.162:14710] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/kbfr.php"] [unique_id "acjuwGP8p0yRL8ot_29UlQAAAgY"]
[Sun Mar 29 17:20:01.092168 2026] [:error] [pid 23284:tid 23289] [client 20.168.65.162:21543] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/kbfr.php"] [unique_id "acjuwYzBujdPHsq7wyQHeQAAAoM"]
[Sun Mar 29 17:20:01.649162 2026] [:error] [pid 32255:tid 32310] [client 20.168.65.162:21512] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/kbfr.php"] [unique_id "acjuwWnfn-AtRoMbquxs2AAAAFM"]
[Sun Mar 29 17:20:02.163778 2026] [:error] [pid 23284:tid 23304] [client 20.168.65.162:28776] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/kbfr.php"] [unique_id "acjuwozBujdPHsq7wyQHfAAAApI"]
[Sun Mar 29 17:20:02.604529 2026] [:error] [pid 23168:tid 23200] [client 20.168.65.162:22034] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/595.php"] [unique_id "acjuwmP8p0yRL8ot_29UmgAAAgM"]
[Sun Mar 29 17:20:03.113858 2026] [:error] [pid 1524:tid 1537] [client 20.168.65.162:32422] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/595.php"] [unique_id "acjuw1oaWSl2asqQCh9p0QAAAQg"]
[Sun Mar 29 17:20:03.622199 2026] [:error] [pid 23284:tid 23306] [client 20.168.65.162:51086] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/595.php"] [unique_id "acjuw4zBujdPHsq7wyQHfwAAApQ"]
[Sun Mar 29 17:20:04.334277 2026] [:error] [pid 23284:tid 23290] [client 20.168.65.162:40009] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/595.php"] [unique_id "acjuxIzBujdPHsq7wyQHhAAAAoQ"]
[Sun Mar 29 17:20:04.919409 2026] [:error] [pid 32257:tid 32321] [client 20.168.65.162:51799] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/x1.php"] [unique_id "acjuxCE3TArOFrUtgWq24QAAAIM"]
[Sun Mar 29 17:20:05.510878 2026] [:error] [pid 32255:tid 32301] [client 20.168.65.162:1103] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/x1.php"] [unique_id "acjuxWnfn-AtRoMbquxs4gAAAEo"]
[Sun Mar 29 17:20:06.026273 2026] [:error] [pid 23284:tid 23296] [client 20.168.65.162:18369] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/x1.php"] [unique_id "acjuxozBujdPHsq7wyQHiwAAAoo"]
[Sun Mar 29 17:20:06.539188 2026] [:error] [pid 32255:tid 32302] [client 20.168.65.162:33433] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/x1.php"] [unique_id "acjuxmnfn-AtRoMbquxs6wAAAEs"]
[Sun Mar 29 17:20:07.424520 2026] [:error] [pid 32255:tid 32313] [client 20.168.65.162:51828] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/gk.php"] [unique_id "acjux2nfn-AtRoMbquxs8gAAAFY"]
[Sun Mar 29 17:20:07.836824 2026] [:error] [pid 32255:tid 32308] [client 20.168.65.162:1104] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/gk.php"] [unique_id "acjux2nfn-AtRoMbquxs-QAAAFE"]
[Sun Mar 29 17:20:08.197539 2026] [:error] [pid 32255:tid 32293] [client 20.168.65.162:14690] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/gk.php"] [unique_id "acjuyGnfn-AtRoMbquxs_QAAAEI"]
[Sun Mar 29 17:20:08.570556 2026] [:error] [pid 32255:tid 32303] [client 20.168.65.162:39504] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/gk.php"] [unique_id "acjuyGnfn-AtRoMbquxtAQAAAEw"]
[Sun Mar 29 17:20:08.987754 2026] [:error] [pid 23167:tid 23173] [client 20.168.65.162:31940] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws85.php"] [unique_id "acjuyBIAHJCFaHff3_dtxAAAAcM"]
[Sun Mar 29 17:20:09.450582 2026] [:error] [pid 23167:tid 23184] [client 20.168.65.162:40044] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws85.php"] [unique_id "acjuyRIAHJCFaHff3_dtxQAAAc4"]
[Sun Mar 29 17:20:09.936727 2026] [:error] [pid 23284:tid 23302] [client 20.168.65.162:14689] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws85.php"] [unique_id "acjuyYzBujdPHsq7wyQHlQAAApA"]
[Sun Mar 29 17:20:10.471507 2026] [:error] [pid 32255:tid 32315] [client 20.168.65.162:51168] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws85.php"] [unique_id "acjuymnfn-AtRoMbquxtCQAAAFg"]
[Sun Mar 29 17:20:12.523758 2026] [:error] [pid 23250:tid 23252] [client 20.168.65.162:40039] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws82.php"] [unique_id "acjuzJxrpj-dQjy1cvrPtwAAAkA"]
[Sun Mar 29 17:20:12.879078 2026] [:error] [pid 23250:tid 23270] [client 20.168.65.162:40019] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws82.php"] [unique_id "acjuzJxrpj-dQjy1cvrPuQAAAlI"]
[Sun Mar 29 17:20:13.478634 2026] [:error] [pid 23167:tid 23185] [client 20.168.65.162:40026] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws82.php"] [unique_id "acjuzRIAHJCFaHff3_dt1AAAAc8"]
[Sun Mar 29 17:20:13.795787 2026] [:error] [pid 32255:tid 32311] [client 20.168.65.162:32446] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws82.php"] [unique_id "acjuzWnfn-AtRoMbquxtIQAAAFQ"]
[Sun Mar 29 17:20:14.190460 2026] [:error] [pid 23284:tid 23294] [client 20.168.65.162:51757] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws81.php"] [unique_id "acjuzozBujdPHsq7wyQHmAAAAog"]
[Sun Mar 29 17:20:14.665137 2026] [:error] [pid 32255:tid 32313] [client 20.168.65.162:28781] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws81.php"] [unique_id "acjuzmnfn-AtRoMbquxtKAAAAFY"]
[Sun Mar 29 17:20:15.229532 2026] [proxy_fcgi:error] [pid 23284:tid 23287] [client 20.168.65.162:39518] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 17:20:15.440622 2026] [proxy_fcgi:error] [pid 23284:tid 23289] [client 20.168.65.162:39518] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 17:20:15.601450 2026] [proxy_fcgi:error] [pid 23284:tid 23297] [client 20.168.65.162:39518] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 17:20:15.761332 2026] [proxy_fcgi:error] [pid 23284:tid 23288] [client 20.168.65.162:39518] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 17:20:17.236784 2026] [proxy_fcgi:error] [pid 23284:tid 23291] [client 20.168.65.162:39518] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 17:20:17.418552 2026] [proxy_fcgi:error] [pid 23284:tid 23292] [client 20.168.65.162:39518] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 17:20:17.592549 2026] [proxy_fcgi:error] [pid 23284:tid 23287] [client 20.168.65.162:39518] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 17:20:17.773167 2026] [proxy_fcgi:error] [pid 23284:tid 23289] [client 20.168.65.162:39518] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 17:20:17.959488 2026] [proxy_fcgi:error] [pid 23284:tid 23302] [client 20.168.65.162:39518] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 17:20:18.118607 2026] [proxy_fcgi:error] [pid 23284:tid 23297] [client 20.168.65.162:39518] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 17:20:18.303114 2026] [proxy_fcgi:error] [pid 23284:tid 23301] [client 20.168.65.162:39518] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 17:20:18.459857 2026] [:error] [pid 23284:tid 23304] [client 20.168.65.162:39518] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/vaza.php"] [unique_id "acju0ozBujdPHsq7wyQHuwAAApI"]
[Sun Mar 29 17:20:18.805853 2026] [:error] [pid 1524:tid 1546] [client 20.168.65.162:39457] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/vaza.php"] [unique_id "acju0loaWSl2asqQCh9p1AAAAQ8"]
[Sun Mar 29 17:20:19.179399 2026] [:error] [pid 23284:tid 23305] [client 20.168.65.162:39492] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/vaza.php"] [unique_id "acju04zBujdPHsq7wyQHwgAAApM"]
[Sun Mar 29 17:20:19.643924 2026] [:error] [pid 32257:tid 32339] [client 20.168.65.162:32424] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/vaza.php"] [unique_id "acju0yE3TArOFrUtgWq27gAAAJU"]
[Sun Mar 29 17:20:20.024506 2026] [:error] [pid 32257:tid 32342] [client 20.168.65.162:51094] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/cvz.php"] [unique_id "acju1CE3TArOFrUtgWq28wAAAJg"]
[Sun Mar 29 17:20:20.394971 2026] [:error] [pid 23284:tid 23289] [client 20.168.65.162:31942] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/cvz.php"] [unique_id "acju1IzBujdPHsq7wyQHxwAAAoM"]
[Sun Mar 29 17:20:20.838455 2026] [:error] [pid 23284:tid 23299] [client 20.168.65.162:39514] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/cvz.php"] [unique_id "acju1IzBujdPHsq7wyQHyQAAAo0"]
[Sun Mar 29 17:20:21.235284 2026] [:error] [pid 23284:tid 23308] [client 20.168.65.162:12136] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/cvz.php"] [unique_id "acju1YzBujdPHsq7wyQHywAAApY"]
[Sun Mar 29 17:20:21.702519 2026] [:error] [pid 32255:tid 32296] [client 20.168.65.162:21545] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wtiiy.php"] [unique_id "acju1Wnfn-AtRoMbquxtKwAAAEU"]
[Sun Mar 29 17:20:22.090103 2026] [:error] [pid 23137:tid 23160] [client 20.168.65.162:51093] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wtiiy.php"] [unique_id "acju1haWQa7LdZ_qGFbVtgAAAZU"]
[Sun Mar 29 17:20:22.720026 2026] [:error] [pid 23167:tid 23184] [client 20.168.65.162:39513] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wtiiy.php"] [unique_id "acju1hIAHJCFaHff3_dt2wAAAc4"]
[Sun Mar 29 17:20:23.102982 2026] [:error] [pid 32255:tid 32301] [client 20.168.65.162:31995] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wtiiy.php"] [unique_id "acju12nfn-AtRoMbquxtLgAAAEo"]
[Sun Mar 29 17:20:23.433490 2026] [:error] [pid 23167:tid 23170] [client 20.168.65.162:1125] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/aee.php"] [unique_id "acju1xIAHJCFaHff3_dt4AAAAcA"]
[Sun Mar 29 17:20:23.784222 2026] [:error] [pid 32255:tid 32314] [client 20.168.65.162:51717] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/aee.php"] [unique_id "acju12nfn-AtRoMbquxtLwAAAFc"]
[Sun Mar 29 17:20:24.108150 2026] [:error] [pid 32257:tid 32342] [client 20.168.65.162:51778] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/aee.php"] [unique_id "acju2CE3TArOFrUtgWq3BQAAAJg"]
[Sun Mar 29 17:20:24.461556 2026] [:error] [pid 32255:tid 32315] [client 20.168.65.162:1113] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/aee.php"] [unique_id "acju2Gnfn-AtRoMbquxtMwAAAFg"]
[Sun Mar 29 17:20:24.825372 2026] [:error] [pid 1524:tid 1535] [client 20.168.65.162:38509] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/sweg.php"] [unique_id "acju2FoaWSl2asqQCh9p1wAAAQY"]
[Sun Mar 29 17:20:25.453486 2026] [:error] [pid 32255:tid 32304] [client 20.168.65.162:33430] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/sweg.php"] [unique_id "acju2Wnfn-AtRoMbquxtOQAAAE0"]
[Sun Mar 29 17:20:25.842276 2026] [:error] [pid 23168:tid 23200] [client 20.168.65.162:33411] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/sweg.php"] [unique_id "acju2WP8p0yRL8ot_29UrQAAAgM"]
[Sun Mar 29 17:20:26.191704 2026] [:error] [pid 32255:tid 32301] [client 20.168.65.162:51141] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/sweg.php"] [unique_id "acju2mnfn-AtRoMbquxtPAAAAEo"]
[Sun Mar 29 17:20:26.525888 2026] [:error] [pid 32255:tid 32307] [client 20.168.65.162:51742] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/sql.php"] [unique_id "acju2mnfn-AtRoMbquxtPQAAAFA"]
[Sun Mar 29 17:20:26.905921 2026] [:error] [pid 23167:tid 23187] [client 20.168.65.162:51180] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/sql.php"] [unique_id "acju2hIAHJCFaHff3_dt9AAAAdE"]
[Sun Mar 29 17:20:27.429747 2026] [:error] [pid 23167:tid 23188] [client 20.168.65.162:52448] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/sql.php"] [unique_id "acju2xIAHJCFaHff3_dt-AAAAdI"]
[Sun Mar 29 17:20:28.098408 2026] [:error] [pid 23168:tid 23197] [client 20.168.65.162:28207] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/sql.php"] [unique_id "acju3GP8p0yRL8ot_29UrwAAAgA"]
[Sun Mar 29 17:20:28.489310 2026] [:error] [pid 32255:tid 32292] [client 20.168.65.162:51779] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/sc.php"] [unique_id "acju3Gnfn-AtRoMbquxtPwAAAEE"]
[Sun Mar 29 17:20:28.980879 2026] [:error] [pid 32255:tid 32313] [client 20.168.65.162:32385] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/sc.php"] [unique_id "acju3Gnfn-AtRoMbquxtQAAAAFY"]
[Sun Mar 29 17:20:29.580737 2026] [:error] [pid 23167:tid 23185] [client 20.168.65.162:52420] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/sc.php"] [unique_id "acju3RIAHJCFaHff3_dt_wAAAc8"]
[Sun Mar 29 17:20:30.069001 2026] [:error] [pid 23167:tid 23188] [client 20.168.65.162:18327] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/sc.php"] [unique_id "acju3hIAHJCFaHff3_duAQAAAdI"]
[Sun Mar 29 17:20:30.409149 2026] [:error] [pid 23137:tid 23151] [client 20.168.65.162:28222] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/eee.php"] [unique_id "acju3haWQa7LdZ_qGFbVugAAAYw"]
[Sun Mar 29 17:20:30.980489 2026] [:error] [pid 32254:tid 32282] [client 20.168.65.162:17087] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/eee.php"] [unique_id "acju3qug2IHuyGgCTn9ENgAAABI"]
[Sun Mar 29 17:20:31.472216 2026] [:error] [pid 23167:tid 23192] [client 20.168.65.162:28171] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/eee.php"] [unique_id "acju3xIAHJCFaHff3_duBwAAAdY"]
[Sun Mar 29 17:20:31.951512 2026] [:error] [pid 23167:tid 23171] [client 20.168.65.162:52470] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/eee.php"] [unique_id "acju3xIAHJCFaHff3_duCQAAAcE"]
[Sun Mar 29 17:20:32.332030 2026] [:error] [pid 32255:tid 32311] [client 20.168.65.162:52353] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/gptsh.php"] [unique_id "acju4Gnfn-AtRoMbquxtQwAAAFQ"]
[Sun Mar 29 17:20:32.684937 2026] [:error] [pid 23167:tid 23178] [client 20.168.65.162:28212] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/gptsh.php"] [unique_id "acju4BIAHJCFaHff3_duCgAAAcg"]
[Sun Mar 29 17:20:33.026461 2026] [:error] [pid 23284:tid 23291] [client 20.168.65.162:52443] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/gptsh.php"] [unique_id "acju4YzBujdPHsq7wyQH3AAAAoU"]
[Sun Mar 29 17:20:33.444035 2026] [:error] [pid 32257:tid 32331] [client 20.168.65.162:51131] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/gptsh.php"] [unique_id "acju4SE3TArOFrUtgWq3JwAAAI0"]
[Sun Mar 29 17:20:33.994600 2026] [:error] [pid 23167:tid 23181] [client 20.168.65.162:1142] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xda.php"] [unique_id "acju4RIAHJCFaHff3_duEQAAAcs"]
[Sun Mar 29 17:20:34.358796 2026] [:error] [pid 23167:tid 23186] [client 20.168.65.162:42690] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xda.php"] [unique_id "acju4hIAHJCFaHff3_duEwAAAdA"]
[Sun Mar 29 17:20:34.756681 2026] [:error] [pid 23167:tid 23178] [client 20.168.65.162:32441] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xda.php"] [unique_id "acju4hIAHJCFaHff3_duFgAAAcg"]
[Sun Mar 29 17:20:35.076412 2026] [:error] [pid 23167:tid 23172] [client 20.168.65.162:33467] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xda.php"] [unique_id "acju4xIAHJCFaHff3_duGQAAAcI"]
[Sun Mar 29 17:20:35.553713 2026] [:error] [pid 32255:tid 32296] [client 20.168.65.162:33429] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/roter.php"] [unique_id "acju42nfn-AtRoMbquxtRgAAAEU"]
[Sun Mar 29 17:20:35.956702 2026] [:error] [pid 32255:tid 32303] [client 20.168.65.162:33437] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/roter.php"] [unique_id "acju42nfn-AtRoMbquxtRwAAAEw"]
[Sun Mar 29 17:20:36.283933 2026] [:error] [pid 32255:tid 32292] [client 20.168.65.162:51080] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/roter.php"] [unique_id "acju5Gnfn-AtRoMbquxtSgAAAEE"]
[Sun Mar 29 17:20:36.757617 2026] [:error] [pid 23167:tid 23182] [client 20.168.65.162:31948] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/roter.php"] [unique_id "acju5BIAHJCFaHff3_duHQAAAcw"]
[Sun Mar 29 17:20:37.200173 2026] [:error] [pid 23167:tid 23179] [client 20.168.65.162:22062] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/size.php"] [unique_id "acju5RIAHJCFaHff3_duIgAAAck"]
[Sun Mar 29 17:20:37.610903 2026] [:error] [pid 1524:tid 1552] [client 20.168.65.162:51146] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/size.php"] [unique_id "acju5VoaWSl2asqQCh9p3gAAARQ"]
[Sun Mar 29 17:20:37.988754 2026] [:error] [pid 32255:tid 32299] [client 20.168.65.162:52359] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/size.php"] [unique_id "acju5Wnfn-AtRoMbquxtUwAAAEg"]
[Sun Mar 29 17:20:38.331837 2026] [:error] [pid 32255:tid 32303] [client 20.168.65.162:51074] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/size.php"] [unique_id "acju5mnfn-AtRoMbquxtWgAAAEw"]
[Sun Mar 29 17:20:38.697899 2026] [:error] [pid 1524:tid 1541] [client 20.168.65.162:51098] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/save.php"] [unique_id "acju5loaWSl2asqQCh9p3wAAAQo"]
[Sun Mar 29 17:20:39.093269 2026] [:error] [pid 23284:tid 23310] [client 20.168.65.162:51078] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/save.php"] [unique_id "acju54zBujdPHsq7wyQH5AAAApg"]
[Sun Mar 29 17:20:39.418133 2026] [:error] [pid 23284:tid 23302] [client 20.168.65.162:32429] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/save.php"] [unique_id "acju54zBujdPHsq7wyQH5wAAApA"]
[Sun Mar 29 17:20:39.784821 2026] [:error] [pid 1524:tid 1554] [client 20.168.65.162:31969] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/save.php"] [unique_id "acju51oaWSl2asqQCh9p4gAAARY"]
[Sun Mar 29 17:20:40.100966 2026] [:error] [pid 32255:tid 32308] [client 20.168.65.162:21514] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/lib.php"] [unique_id "acju6Gnfn-AtRoMbquxtYAAAAFE"]
[Sun Mar 29 17:20:40.422787 2026] [:error] [pid 32255:tid 32299] [client 20.168.65.162:32421] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/lib.php"] [unique_id "acju6Gnfn-AtRoMbquxtYQAAAEg"]
[Sun Mar 29 17:20:40.983035 2026] [:error] [pid 23284:tid 23305] [client 20.168.65.162:28787] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/lib.php"] [unique_id "acju6IzBujdPHsq7wyQH6wAAApM"]
[Sun Mar 29 17:20:41.304049 2026] [:error] [pid 32255:tid 32302] [client 20.168.65.162:32387] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/lib.php"] [unique_id "acju6Wnfn-AtRoMbquxtaQAAAEs"]
[Sun Mar 29 17:20:41.678617 2026] [:error] [pid 32359:tid 32372] [client 20.168.65.162:51750] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/n1GiO.php"] [unique_id "acju6QMb8G3UzfQP3WgQTAAAAMs"]
[Sun Mar 29 17:20:42.000798 2026] [:error] [pid 1524:tid 1533] [client 20.168.65.162:21518] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/n1GiO.php"] [unique_id "acju6VoaWSl2asqQCh9p4wAAAQU"]
[Sun Mar 29 17:20:42.564311 2026] [:error] [pid 32359:tid 32362] [client 20.168.65.162:51730] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/n1GiO.php"] [unique_id "acju6gMb8G3UzfQP3WgQUAAAAME"]
[Sun Mar 29 17:20:43.054666 2026] [:error] [pid 23284:tid 23292] [client 20.168.65.162:52376] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/n1GiO.php"] [unique_id "acju64zBujdPHsq7wyQH7wAAAoY"]
[Sun Mar 29 17:20:43.456755 2026] [:error] [pid 23284:tid 23293] [client 20.168.65.162:31989] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/pLdK1.php"] [unique_id "acju64zBujdPHsq7wyQH8gAAAoc"]
[Sun Mar 29 17:20:43.861372 2026] [:error] [pid 23284:tid 23308] [client 20.168.65.162:51797] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/pLdK1.php"] [unique_id "acju64zBujdPHsq7wyQH9wAAApY"]
[Sun Mar 29 17:20:44.870719 2026] [:error] [pid 32257:tid 32340] [client 20.168.65.162:14666] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/pLdK1.php"] [unique_id "acju7CE3TArOFrUtgWq3LAAAAJY"]
[Sun Mar 29 17:20:45.264124 2026] [:error] [pid 32254:tid 32264] [client 20.168.65.162:28763] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/pLdK1.php"] [unique_id "acju7aug2IHuyGgCTn9EPAAAAAA"]
[Sun Mar 29 17:20:45.596251 2026] [:error] [pid 23168:tid 23210] [client 20.168.65.162:52419] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/llb1J.php"] [unique_id "acju7WP8p0yRL8ot_29UwQAAAg0"]
[Sun Mar 29 17:20:45.919152 2026] [:error] [pid 23137:tid 23143] [client 20.168.65.162:28737] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/llb1J.php"] [unique_id "acju7RaWQa7LdZ_qGFbVvgAAAYQ"]
[Sun Mar 29 17:20:46.266552 2026] [:error] [pid 32255:tid 32296] [client 20.168.65.162:18311] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/llb1J.php"] [unique_id "acju7mnfn-AtRoMbquxtdAAAAEU"]
[Sun Mar 29 17:20:46.609841 2026] [:error] [pid 32257:tid 32341] [client 20.168.65.162:14659] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/llb1J.php"] [unique_id "acju7iE3TArOFrUtgWq3NQAAAJc"]
[Sun Mar 29 17:20:46.999595 2026] [:error] [pid 23167:tid 23176] [client 20.168.65.162:32415] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/jeZDu.php"] [unique_id "acju7hIAHJCFaHff3_duJwAAAcY"]
[Sun Mar 29 17:20:47.342189 2026] [:error] [pid 23167:tid 23183] [client 20.168.65.162:32434] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/jeZDu.php"] [unique_id "acju7xIAHJCFaHff3_duKQAAAc0"]
[Sun Mar 29 17:20:47.667274 2026] [:error] [pid 23137:tid 23156] [client 20.168.65.162:21526] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/jeZDu.php"] [unique_id "acju7xaWQa7LdZ_qGFbVvwAAAZE"]
[Sun Mar 29 17:20:47.988685 2026] [:error] [pid 32255:tid 32313] [client 20.168.65.162:51159] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/jeZDu.php"] [unique_id "acju72nfn-AtRoMbquxtfQAAAFY"]
[Sun Mar 29 17:20:48.307060 2026] [:error] [pid 32255:tid 32308] [client 20.168.65.162:52430] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/gec.php"] [unique_id "acju8Gnfn-AtRoMbquxtfgAAAFE"]
[Sun Mar 29 17:20:48.624098 2026] [:error] [pid 23167:tid 23171] [client 20.168.65.162:40044] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/gec.php"] [unique_id "acju8BIAHJCFaHff3_duLAAAAcE"]
[Sun Mar 29 17:20:49.061132 2026] [:error] [pid 23137:tid 23148] [client 20.168.65.162:28200] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/gec.php"] [unique_id "acju8RaWQa7LdZ_qGFbVwAAAAYk"]
[Sun Mar 29 17:20:49.389590 2026] [:error] [pid 23168:tid 23204] [client 20.168.65.162:51181] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/gec.php"] [unique_id "acju8WP8p0yRL8ot_29UxAAAAgc"]
[Sun Mar 29 17:20:49.705076 2026] [:error] [pid 32255:tid 32304] [client 20.168.65.162:52362] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bfuKK.php"] [unique_id "acju8Wnfn-AtRoMbquxtgQAAAE0"]
[Sun Mar 29 17:20:50.025287 2026] [:error] [pid 23250:tid 23265] [client 20.168.65.162:51137] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bfuKK.php"] [unique_id "acju8pxrpj-dQjy1cvrPwQAAAk0"]
[Sun Mar 29 17:20:50.380134 2026] [:error] [pid 23284:tid 23304] [client 20.168.65.162:41124] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bfuKK.php"] [unique_id "acju8ozBujdPHsq7wyQICQAAApI"]
[Sun Mar 29 17:20:50.708520 2026] [:error] [pid 23250:tid 23268] [client 20.168.65.162:18323] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bfuKK.php"] [unique_id "acju8pxrpj-dQjy1cvrP1wAAAlA"]
[Sun Mar 29 17:20:51.029940 2026] [:error] [pid 32255:tid 32301] [client 20.168.65.162:43044] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/OpVq6.php"] [unique_id "acju82nfn-AtRoMbquxthQAAAEo"]
[Sun Mar 29 17:20:51.355992 2026] [:error] [pid 23168:tid 23201] [client 20.168.65.162:11569] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/OpVq6.php"] [unique_id "acju82P8p0yRL8ot_29UygAAAgQ"]
[Sun Mar 29 17:20:51.682071 2026] [:error] [pid 23167:tid 23193] [client 20.168.65.162:11523] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/OpVq6.php"] [unique_id "acju8xIAHJCFaHff3_duYQAAAdc"]
[Sun Mar 29 17:20:51.997644 2026] [:error] [pid 32255:tid 32307] [client 20.168.65.162:33958] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/OpVq6.php"] [unique_id "acju82nfn-AtRoMbquxtiQAAAFA"]
[Sun Mar 29 17:20:52.313574 2026] [:error] [pid 23284:tid 23300] [client 20.168.65.162:43066] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/Q73BO.php"] [unique_id "acju9IzBujdPHsq7wyQICwAAAo4"]
[Sun Mar 29 17:20:52.807555 2026] [:error] [pid 23284:tid 23294] [client 20.168.65.162:52400] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/Q73BO.php"] [unique_id "acju9IzBujdPHsq7wyQIDQAAAog"]
[Sun Mar 29 17:20:53.134747 2026] [:error] [pid 23167:tid 23171] [client 20.168.65.162:51159] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/Q73BO.php"] [unique_id "acju9RIAHJCFaHff3_dubgAAAcE"]
[Sun Mar 29 17:20:53.573616 2026] [:error] [pid 32255:tid 32304] [client 20.168.65.162:38919] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/Q73BO.php"] [unique_id "acju9Wnfn-AtRoMbquxtkQAAAE0"]
[Sun Mar 29 17:20:53.925186 2026] [:error] [pid 32255:tid 32295] [client 20.168.65.162:51184] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/rmpoa.php"] [unique_id "acju9Wnfn-AtRoMbquxtkwAAAEQ"]
[Sun Mar 29 17:20:54.281681 2026] [:error] [pid 23284:tid 23289] [client 20.168.65.162:51177] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/rmpoa.php"] [unique_id "acju9ozBujdPHsq7wyQIFwAAAoM"]
[Sun Mar 29 17:20:54.627963 2026] [:error] [pid 32255:tid 32305] [client 20.168.65.162:14686] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/rmpoa.php"] [unique_id "acju9mnfn-AtRoMbquxtmQAAAE4"]
[Sun Mar 29 17:20:55.006346 2026] [:error] [pid 32255:tid 32303] [client 20.168.65.162:14649] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/rmpoa.php"] [unique_id "acju92nfn-AtRoMbquxtnAAAAEw"]
[Sun Mar 29 17:20:55.558148 2026] [:error] [pid 23167:tid 23181] [client 20.168.65.162:32985] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wgift1.php"] [unique_id "acju9xIAHJCFaHff3_dudgAAAcs"]
[Sun Mar 29 17:20:55.898199 2026] [:error] [pid 23167:tid 23184] [client 20.168.65.162:52451] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wgift1.php"] [unique_id "acju9xIAHJCFaHff3_dueQAAAc4"]
[Sun Mar 29 17:20:56.238015 2026] [:error] [pid 23250:tid 23263] [client 20.168.65.162:43014] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wgift1.php"] [unique_id "acju-Jxrpj-dQjy1cvrP9wAAAks"]
[Sun Mar 29 17:20:56.818981 2026] [:error] [pid 23167:tid 23182] [client 20.168.65.162:33938] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wgift1.php"] [unique_id "acju-BIAHJCFaHff3_duhQAAAcw"]
[Sun Mar 29 17:20:57.332812 2026] [:error] [pid 32257:tid 32340] [client 20.168.65.162:38946] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/torsa1.php"] [unique_id "acju-SE3TArOFrUtgWq3RwAAAJY"]
[Sun Mar 29 17:20:58.289004 2026] [:error] [pid 23284:tid 23291] [client 20.168.65.162:32993] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/torsa1.php"] [unique_id "acju-ozBujdPHsq7wyQIIAAAAoU"]
[Sun Mar 29 17:20:59.835734 2026] [:error] [pid 32255:tid 32292] [client 20.168.65.162:43756] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/torsa1.php"] [unique_id "acju-2nfn-AtRoMbquxtpAAAAEE"]
[Sun Mar 29 17:21:02.054100 2026] [:error] [pid 32255:tid 32307] [client 20.168.65.162:31440] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/torsa1.php"] [unique_id "acju_mnfn-AtRoMbquxtqwAAAFA"]
[Sun Mar 29 17:21:02.618835 2026] [:error] [pid 23284:tid 23291] [client 20.168.65.162:34950] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xper1.php"] [unique_id "acju_ozBujdPHsq7wyQIMQAAAoU"]
[Sun Mar 29 17:21:03.311628 2026] [:error] [pid 23167:tid 23170] [client 20.168.65.162:2020] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xper1.php"] [unique_id "acju_xIAHJCFaHff3_dulQAAAcA"]
[Sun Mar 29 17:21:03.772223 2026] [:error] [pid 32257:tid 32342] [client 20.168.65.162:53002] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xper1.php"] [unique_id "acju_yE3TArOFrUtgWq3TQAAAJg"]
[Sun Mar 29 17:21:04.378432 2026] [:error] [pid 32257:tid 32336] [client 20.168.65.162:15189] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xper1.php"] [unique_id "acjvACE3TArOFrUtgWq3UAAAAJI"]
[Sun Mar 29 17:21:04.709912 2026] [:error] [pid 32255:tid 32295] [client 20.168.65.162:32945] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/gelio1.php"] [unique_id "acjvAGnfn-AtRoMbquxtswAAAEQ"]
[Sun Mar 29 17:21:05.251953 2026] [:error] [pid 23167:tid 23183] [client 20.168.65.162:31442] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/gelio1.php"] [unique_id "acjvARIAHJCFaHff3_dulgAAAc0"]
[Sun Mar 29 17:21:05.694771 2026] [:error] [pid 32257:tid 32333] [client 20.168.65.162:31446] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/gelio1.php"] [unique_id "acjvASE3TArOFrUtgWq3UwAAAI8"]
[Sun Mar 29 17:21:06.055534 2026] [:error] [pid 32257:tid 32322] [client 20.168.65.162:41123] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/gelio1.php"] [unique_id "acjvAiE3TArOFrUtgWq3VQAAAIQ"]
[Sun Mar 29 17:21:06.397132 2026] [:error] [pid 23167:tid 23176] [client 20.168.65.162:33971] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/v2.php"] [unique_id "acjvAhIAHJCFaHff3_dumwAAAcY"]
[Sun Mar 29 17:21:06.858717 2026] [:error] [pid 23250:tid 23268] [client 20.168.65.162:34436] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/v2.php"] [unique_id "acjvApxrpj-dQjy1cvrQAgAAAlA"]
[Sun Mar 29 17:21:07.291287 2026] [:error] [pid 23250:tid 23255] [client 20.168.65.162:53105] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/v2.php"] [unique_id "acjvA5xrpj-dQjy1cvrQAwAAAkM"]
[Sun Mar 29 17:21:08.067184 2026] [:error] [pid 1524:tid 1548] [client 20.168.65.162:14024] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/v2.php"] [unique_id "acjvBFoaWSl2asqQCh9p7QAAARE"]
[Sun Mar 29 17:21:08.567557 2026] [:error] [pid 23284:tid 23296] [client 20.168.65.162:10393] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/v3.php"] [unique_id "acjvBIzBujdPHsq7wyQIOwAAAoo"]
[Sun Mar 29 17:21:08.969028 2026] [:error] [pid 32359:tid 32363] [client 20.168.65.162:34041] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/v3.php"] [unique_id "acjvBAMb8G3UzfQP3WgQXwAAAMI"]
[Sun Mar 29 17:21:09.432065 2026] [:error] [pid 32255:tid 32311] [client 20.168.65.162:53061] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/v3.php"] [unique_id "acjvBWnfn-AtRoMbquxtvwAAAFQ"]
[Sun Mar 29 17:21:10.041102 2026] [:error] [pid 1524:tid 1547] [client 20.168.65.162:53076] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/v3.php"] [unique_id "acjvBloaWSl2asqQCh9p8gAAARA"]
[Sun Mar 29 17:21:10.370387 2026] [:error] [pid 1524:tid 1556] [client 20.168.65.162:2036] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/v4.php"] [unique_id "acjvBloaWSl2asqQCh9p9AAAARg"]
[Sun Mar 29 17:21:10.692051 2026] [:error] [pid 32254:tid 32269] [client 20.168.65.162:48379] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/v4.php"] [unique_id "acjvBqug2IHuyGgCTn9ESAAAAAU"]
[Sun Mar 29 17:21:11.147167 2026] [:error] [pid 23167:tid 23189] [client 20.168.65.162:31473] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/v4.php"] [unique_id "acjvBxIAHJCFaHff3_duqAAAAdM"]
[Sun Mar 29 17:21:11.479319 2026] [:error] [pid 32255:tid 32291] [client 20.168.65.162:48321] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/v4.php"] [unique_id "acjvB2nfn-AtRoMbquxtwwAAAEA"]
[Sun Mar 29 17:21:11.818835 2026] [:error] [pid 23168:tid 23199] [client 20.168.65.162:19348] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ant.php"] [unique_id "acjvB2P8p0yRL8ot_29U1wAAAgI"]
[Sun Mar 29 17:21:12.272792 2026] [:error] [pid 23168:tid 23219] [client 20.168.65.162:34034] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ant.php"] [unique_id "acjvCGP8p0yRL8ot_29U2wAAAhY"]
[Sun Mar 29 17:21:12.696812 2026] [:error] [pid 32255:tid 32299] [client 20.168.65.162:1989] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ant.php"] [unique_id "acjvCGnfn-AtRoMbquxtxQAAAEg"]
[Sun Mar 29 17:21:13.013035 2026] [:error] [pid 32255:tid 32303] [client 20.168.65.162:34996] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ant.php"] [unique_id "acjvCWnfn-AtRoMbquxtxgAAAEw"]
[Sun Mar 29 17:21:13.614830 2026] [:error] [pid 32255:tid 32305] [client 20.168.65.162:19390] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/as.php"] [unique_id "acjvCWnfn-AtRoMbquxtygAAAE4"]
[Sun Mar 29 17:21:14.432052 2026] [:error] [pid 23250:tid 23254] [client 20.168.65.162:19381] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/as.php"] [unique_id "acjvCpxrpj-dQjy1cvrQDAAAAkI"]
[Sun Mar 29 17:21:14.852043 2026] [:error] [pid 23168:tid 23204] [client 20.168.65.162:14046] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/as.php"] [unique_id "acjvCmP8p0yRL8ot_29U4gAAAgc"]
[Sun Mar 29 17:21:15.229091 2026] [:error] [pid 23137:tid 23146] [client 20.168.65.162:41638] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/as.php"] [unique_id "acjvCxaWQa7LdZ_qGFbVxQAAAYc"]
[Sun Mar 29 17:21:15.555871 2026] [:error] [pid 23168:tid 23208] [client 20.168.65.162:15199] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/cc13.php"] [unique_id "acjvC2P8p0yRL8ot_29U4wAAAgs"]
[Sun Mar 29 17:21:15.870299 2026] [:error] [pid 32255:tid 32294] [client 20.168.65.162:10421] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/cc13.php"] [unique_id "acjvC2nfn-AtRoMbquxt2AAAAEM"]
[Sun Mar 29 17:21:16.204678 2026] [:error] [pid 32257:tid 32326] [client 20.168.65.162:14012] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/cc13.php"] [unique_id "acjvDCE3TArOFrUtgWq3WQAAAIg"]
[Sun Mar 29 17:21:16.535617 2026] [:error] [pid 32255:tid 32292] [client 20.168.65.162:48325] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/cc13.php"] [unique_id "acjvDGnfn-AtRoMbquxt3gAAAEE"]
[Sun Mar 29 17:21:16.894600 2026] [:error] [pid 32255:tid 32304] [client 20.168.65.162:48365] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bnm.php"] [unique_id "acjvDGnfn-AtRoMbquxt4gAAAE0"]
[Sun Mar 29 17:21:17.254889 2026] [:error] [pid 32255:tid 32295] [client 20.168.65.162:2041] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bnm.php"] [unique_id "acjvDWnfn-AtRoMbquxt5QAAAEQ"]
[Sun Mar 29 17:21:17.635800 2026] [:error] [pid 32359:tid 32371] [client 20.168.65.162:2030] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bnm.php"] [unique_id "acjvDQMb8G3UzfQP3WgQZQAAAMo"]
[Sun Mar 29 17:21:17.996155 2026] [:error] [pid 23284:tid 23306] [client 20.168.65.162:37627] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bnm.php"] [unique_id "acjvDYzBujdPHsq7wyQIQgAAApQ"]
[Sun Mar 29 17:21:18.351660 2026] [proxy_fcgi:error] [pid 32255:tid 32315] [client 20.168.65.162:1954] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 17:21:18.514164 2026] [proxy_fcgi:error] [pid 32255:tid 32302] [client 20.168.65.162:1954] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 17:21:18.675638 2026] [proxy_fcgi:error] [pid 32255:tid 32301] [client 20.168.65.162:1954] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 17:21:18.841376 2026] [proxy_fcgi:error] [pid 32255:tid 32310] [client 20.168.65.162:1954] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 17:21:19.002070 2026] [proxy_fcgi:error] [pid 32255:tid 32295] [client 20.168.65.162:1954] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 17:21:19.162433 2026] [proxy_fcgi:error] [pid 32255:tid 32291] [client 20.168.65.162:1954] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 17:21:19.420280 2026] [proxy_fcgi:error] [pid 32255:tid 32305] [client 20.168.65.162:1954] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 17:21:20.722687 2026] [proxy_fcgi:error] [pid 32255:tid 32294] [client 20.168.65.162:1954] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 17:21:20.883179 2026] [proxy_fcgi:error] [pid 32255:tid 32310] [client 20.168.65.162:1954] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 17:21:21.044060 2026] [proxy_fcgi:error] [pid 32255:tid 32309] [client 20.168.65.162:1954] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 17:21:21.204928 2026] [proxy_fcgi:error] [pid 32255:tid 32304] [client 20.168.65.162:1954] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 17:21:21.361606 2026] [:error] [pid 32255:tid 32312] [client 20.168.65.162:1954] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/lanou.php"] [unique_id "acjvEWnfn-AtRoMbquxt_wAAAFU"]
[Sun Mar 29 17:21:21.697494 2026] [:error] [pid 23284:tid 23291] [client 20.168.65.162:37577] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/lanou.php"] [unique_id "acjvEYzBujdPHsq7wyQIRwAAAoU"]
[Sun Mar 29 17:21:22.061216 2026] [:error] [pid 23167:tid 23176] [client 20.168.65.162:34965] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/lanou.php"] [unique_id "acjvEhIAHJCFaHff3_dutQAAAcY"]
[Sun Mar 29 17:21:22.378560 2026] [:error] [pid 32257:tid 32338] [client 20.168.65.162:13981] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/lanou.php"] [unique_id "acjvEiE3TArOFrUtgWq3XAAAAJQ"]
[Sun Mar 29 17:21:22.714312 2026] [:error] [pid 23284:tid 23296] [client 20.168.65.162:34944] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/eursi.php"] [unique_id "acjvEozBujdPHsq7wyQISwAAAoo"]
[Sun Mar 29 17:21:23.167815 2026] [:error] [pid 23284:tid 23288] [client 20.168.65.162:13979] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/eursi.php"] [unique_id "acjvE4zBujdPHsq7wyQITgAAAoI"]
[Sun Mar 29 17:21:23.669553 2026] [:error] [pid 23167:tid 23180] [client 20.168.65.162:37607] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/eursi.php"] [unique_id "acjvExIAHJCFaHff3_duuwAAAco"]
[Sun Mar 29 17:21:24.056480 2026] [:error] [pid 23137:tid 23151] [client 20.168.65.162:1973] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/eursi.php"] [unique_id "acjvFBaWQa7LdZ_qGFbV0QAAAYw"]
[Sun Mar 29 17:21:24.390961 2026] [:error] [pid 23167:tid 23189] [client 20.168.65.162:32912] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/pas2.php"] [unique_id "acjvFBIAHJCFaHff3_duwQAAAdM"]
[Sun Mar 29 17:21:24.756992 2026] [:error] [pid 1524:tid 1555] [client 20.168.65.162:37011] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/pas2.php"] [unique_id "acjvFFoaWSl2asqQCh9p-gAAARc"]
[Sun Mar 29 17:21:25.078410 2026] [:error] [pid 1524:tid 1535] [client 20.168.65.162:37574] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/pas2.php"] [unique_id "acjvFVoaWSl2asqQCh9p_wAAAQY"]
[Sun Mar 29 17:21:25.402621 2026] [:error] [pid 32254:tid 32275] [client 20.168.65.162:31989] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/pas2.php"] [unique_id "acjvFaug2IHuyGgCTn9ETwAAAAs"]
[Sun Mar 29 17:21:26.012641 2026] [:error] [pid 23284:tid 23301] [client 20.168.65.162:48375] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/schal.php"] [unique_id "acjvFozBujdPHsq7wyQIUAAAAo8"]
[Sun Mar 29 17:21:26.634037 2026] [:error] [pid 23137:tid 23149] [client 20.168.65.162:47092] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/schal.php"] [unique_id "acjvFhaWQa7LdZ_qGFbV0wAAAYo"]
[Sun Mar 29 17:21:27.392297 2026] [:error] [pid 23137:tid 23143] [client 20.168.65.162:7487] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/schal.php"] [unique_id "acjvFxaWQa7LdZ_qGFbV1AAAAYQ"]
[Sun Mar 29 17:21:27.859918 2026] [:error] [pid 23137:tid 23150] [client 20.168.65.162:7487] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/schal.php"] [unique_id "acjvFxaWQa7LdZ_qGFbV2AAAAYs"]
[Sun Mar 29 17:21:28.482342 2026] [:error] [pid 23137:tid 23163] [client 20.168.65.162:37570] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xex.php"] [unique_id "acjvGBaWQa7LdZ_qGFbV3gAAAZg"]
[Sun Mar 29 17:21:28.862175 2026] [:error] [pid 23284:tid 23296] [client 20.168.65.162:36004] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xex.php"] [unique_id "acjvGIzBujdPHsq7wyQIWAAAAoo"]
[Sun Mar 29 17:21:29.335925 2026] [:error] [pid 32255:tid 32303] [client 20.168.65.162:41624] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xex.php"] [unique_id "acjvGWnfn-AtRoMbquxuDQAAAEw"]
[Sun Mar 29 17:21:29.784524 2026] [:error] [pid 23167:tid 23185] [client 20.168.65.162:53581] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xex.php"] [unique_id "acjvGRIAHJCFaHff3_duzgAAAc8"]
[Sun Mar 29 17:21:30.325072 2026] [:error] [pid 23167:tid 23194] [client 20.168.65.162:37590] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/maint/wta.php"] [unique_id "acjvGhIAHJCFaHff3_du0AAAAdg"]
[Sun Mar 29 17:21:30.658865 2026] [:error] [pid 23167:tid 23181] [client 20.168.65.162:7453] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/maint/wta.php"] [unique_id "acjvGhIAHJCFaHff3_du2AAAAcs"]
[Sun Mar 29 17:21:31.047394 2026] [:error] [pid 1524:tid 1541] [client 20.168.65.162:48329] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/maint/wta.php"] [unique_id "acjvG1oaWSl2asqQCh9qBAAAAQo"]
[Sun Mar 29 17:21:31.367863 2026] [:error] [pid 23284:tid 23288] [client 20.168.65.162:41662] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/maint/wta.php"] [unique_id "acjvG4zBujdPHsq7wyQIXQAAAoI"]
[Sun Mar 29 17:21:31.727560 2026] [:error] [pid 32257:tid 32324] [client 20.168.65.162:1631] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/maint/dtyh.php"] [unique_id "acjvGyE3TArOFrUtgWq3YQAAAIY"]
[Sun Mar 29 17:21:32.100841 2026] [:error] [pid 23137:tid 23158] [client 20.168.65.162:47050] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/maint/dtyh.php"] [unique_id "acjvHBaWQa7LdZ_qGFbV4QAAAZM"]
[Sun Mar 29 17:21:32.471833 2026] [:error] [pid 32254:tid 32265] [client 20.168.65.162:53601] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/maint/dtyh.php"] [unique_id "acjvHKug2IHuyGgCTn9EUgAAAAE"]
[Sun Mar 29 17:21:32.813793 2026] [:error] [pid 23167:tid 23173] [client 20.168.65.162:46439] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/maint/dtyh.php"] [unique_id "acjvHBIAHJCFaHff3_du3gAAAcM"]
[Sun Mar 29 17:21:33.255935 2026] [:error] [pid 23284:tid 23306] [client 20.168.65.162:36012] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/dtyh.php"] [unique_id "acjvHYzBujdPHsq7wyQIYQAAApQ"]
[Sun Mar 29 17:21:33.605540 2026] [:error] [pid 1524:tid 1531] [client 20.168.65.162:36000] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/dtyh.php"] [unique_id "acjvHVoaWSl2asqQCh9qDgAAAQM"]
[Sun Mar 29 17:21:33.985302 2026] [:error] [pid 23250:tid 23266] [client 20.168.65.162:1637] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/dtyh.php"] [unique_id "acjvHZxrpj-dQjy1cvrQEAAAAk4"]
[Sun Mar 29 17:21:34.678194 2026] [:error] [pid 23284:tid 23309] [client 20.168.65.162:1264] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/dtyh.php"] [unique_id "acjvHozBujdPHsq7wyQIYwAAApc"]
[Sun Mar 29 17:21:35.240717 2026] [:error] [pid 32257:tid 32341] [client 20.168.65.162:36595] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wta.php"] [unique_id "acjvHyE3TArOFrUtgWq3ZQAAAJc"]
[Sun Mar 29 17:21:35.774626 2026] [:error] [pid 23250:tid 23272] [client 20.168.65.162:1195] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wta.php"] [unique_id "acjvH5xrpj-dQjy1cvrQEgAAAlQ"]
[Sun Mar 29 17:21:36.124581 2026] [:error] [pid 23284:tid 23307] [client 20.168.65.162:38124] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wta.php"] [unique_id "acjvIIzBujdPHsq7wyQIaAAAApU"]
[Sun Mar 29 17:21:36.443464 2026] [:error] [pid 32255:tid 32311] [client 20.168.65.162:1676] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wta.php"] [unique_id "acjvIGnfn-AtRoMbquxuEAAAAFQ"]
[Sun Mar 29 17:21:36.840919 2026] [:error] [pid 32255:tid 32295] [client 20.168.65.162:36556] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws77.php"] [unique_id "acjvIGnfn-AtRoMbquxuEwAAAEQ"]
[Sun Mar 29 17:21:37.297854 2026] [:error] [pid 32255:tid 32313] [client 20.168.65.162:38141] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws77.php"] [unique_id "acjvIWnfn-AtRoMbquxuGAAAAFY"]
[Sun Mar 29 17:21:37.627965 2026] [:error] [pid 32255:tid 32303] [client 20.168.65.162:46456] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws77.php"] [unique_id "acjvIWnfn-AtRoMbquxuGgAAAEw"]
[Sun Mar 29 17:21:37.963808 2026] [:error] [pid 23137:tid 23159] [client 20.168.65.162:47672] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws77.php"] [unique_id "acjvIRaWQa7LdZ_qGFbV5QAAAZQ"]
[Sun Mar 29 17:21:38.278734 2026] [:error] [pid 1524:tid 1556] [client 20.168.65.162:53593] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws86.php"] [unique_id "acjvIloaWSl2asqQCh9qEgAAARg"]
[Sun Mar 29 17:21:38.638885 2026] [:error] [pid 23137:tid 23158] [client 20.168.65.162:36013] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws86.php"] [unique_id "acjvIhaWQa7LdZ_qGFbV6QAAAZM"]
[Sun Mar 29 17:21:39.177278 2026] [:error] [pid 23167:tid 23178] [client 20.168.65.162:1239] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws86.php"] [unique_id "acjvIxIAHJCFaHff3_du7QAAAcg"]
[Sun Mar 29 17:21:39.685116 2026] [:error] [pid 23167:tid 23184] [client 20.168.65.162:37504] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws86.php"] [unique_id "acjvIxIAHJCFaHff3_du7gAAAc4"]
[Sun Mar 29 17:21:40.048524 2026] [:error] [pid 23284:tid 23292] [client 20.168.65.162:22671] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/saorix1.php"] [unique_id "acjvJIzBujdPHsq7wyQIaQAAAoY"]
[Sun Mar 29 17:21:40.486507 2026] [:error] [pid 23284:tid 23295] [client 20.168.65.162:36008] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/saorix1.php"] [unique_id "acjvJIzBujdPHsq7wyQIbAAAAok"]
[Sun Mar 29 17:21:40.813353 2026] [:error] [pid 23284:tid 23290] [client 20.168.65.162:47653] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/saorix1.php"] [unique_id "acjvJIzBujdPHsq7wyQIbQAAAoQ"]
[Sun Mar 29 17:21:41.173191 2026] [:error] [pid 32254:tid 32272] [client 20.168.65.162:47017] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/saorix1.php"] [unique_id "acjvJaug2IHuyGgCTn9EVAAAAAg"]
[Sun Mar 29 17:21:41.503700 2026] [:error] [pid 32257:tid 32328] [client 20.168.65.162:1730] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-class.php"] [unique_id "acjvJSE3TArOFrUtgWq3bAAAAIo"]
[Sun Mar 29 17:21:41.849822 2026] [:error] [pid 23284:tid 23310] [client 20.168.65.162:47636] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-class.php"] [unique_id "acjvJYzBujdPHsq7wyQIcgAAApg"]
[Sun Mar 29 17:21:42.253176 2026] [:error] [pid 23137:tid 23148] [client 20.168.65.162:38100] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-class.php"] [unique_id "acjvJhaWQa7LdZ_qGFbV7gAAAYk"]
[Sun Mar 29 17:21:42.600445 2026] [:error] [pid 23250:tid 23261] [client 20.168.65.162:36607] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-class.php"] [unique_id "acjvJpxrpj-dQjy1cvrQIAAAAkk"]
[Sun Mar 29 17:21:43.008731 2026] [:error] [pid 23167:tid 23179] [client 20.168.65.162:1237] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/uuu.php"] [unique_id "acjvJxIAHJCFaHff3_du8gAAAck"]
[Sun Mar 29 17:21:43.598563 2026] [:error] [pid 23168:tid 23213] [client 20.168.65.162:1784] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/uuu.php"] [unique_id "acjvJ2P8p0yRL8ot_29U-wAAAhA"]
[Sun Mar 29 17:21:44.043755 2026] [:error] [pid 23168:tid 23198] [client 20.168.65.162:1531] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/uuu.php"] [unique_id "acjvKGP8p0yRL8ot_29U_wAAAgE"]
[Sun Mar 29 17:21:44.449544 2026] [:error] [pid 23168:tid 23214] [client 20.168.65.162:36578] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/uuu.php"] [unique_id "acjvKGP8p0yRL8ot_29VAgAAAhE"]
[Sun Mar 29 17:21:44.863562 2026] [:error] [pid 23167:tid 23182] [client 20.168.65.162:47666] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-load.php"] [unique_id "acjvKBIAHJCFaHff3_du9AAAAcw"]
[Sun Mar 29 17:21:45.227404 2026] [:error] [pid 23250:tid 23263] [client 20.168.65.162:22679] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-load.php"] [unique_id "acjvKZxrpj-dQjy1cvrQIwAAAks"]
[Sun Mar 29 17:21:45.909958 2026] [:error] [pid 32255:tid 32291] [client 20.168.65.162:46372] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-load.php"] [unique_id "acjvKWnfn-AtRoMbquxuJgAAAEA"]
[Sun Mar 29 17:21:46.383458 2026] [:error] [pid 23284:tid 23298] [client 20.168.65.162:46067] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-load.php"] [unique_id "acjvKozBujdPHsq7wyQIfwAAAow"]
[Sun Mar 29 17:21:46.715036 2026] [:error] [pid 32255:tid 32309] [client 20.168.65.162:21626] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/gpt-sh.php"] [unique_id "acjvKmnfn-AtRoMbquxuKgAAAFI"]
[Sun Mar 29 17:21:47.360376 2026] [:error] [pid 32257:tid 32326] [client 20.168.65.162:43084] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/gpt-sh.php"] [unique_id "acjvKyE3TArOFrUtgWq3cQAAAIg"]
[Sun Mar 29 17:21:47.691296 2026] [:error] [pid 1524:tid 1549] [client 20.168.65.162:1497] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/gpt-sh.php"] [unique_id "acjvK1oaWSl2asqQCh9qFQAAARI"]
[Sun Mar 29 17:21:48.055148 2026] [:error] [pid 23284:tid 23307] [client 20.168.65.162:20931] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/gpt-sh.php"] [unique_id "acjvLIzBujdPHsq7wyQIgQAAApU"]
[Sun Mar 29 17:21:48.393550 2026] [:error] [pid 23250:tid 23255] [client 20.168.65.162:46380] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bywaf.php"] [unique_id "acjvLJxrpj-dQjy1cvrQJQAAAkM"]
[Sun Mar 29 17:21:48.710712 2026] [:error] [pid 32255:tid 32293] [client 20.168.65.162:7376] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bywaf.php"] [unique_id "acjvLGnfn-AtRoMbquxuMgAAAEI"]
[Sun Mar 29 17:21:49.089898 2026] [:error] [pid 32254:tid 32284] [client 20.168.65.162:46039] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bywaf.php"] [unique_id "acjvLaug2IHuyGgCTn9EVQAAABQ"]
[Sun Mar 29 17:21:49.415130 2026] [:error] [pid 1524:tid 1543] [client 20.168.65.162:1493] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bywaf.php"] [unique_id "acjvLVoaWSl2asqQCh9qGAAAAQw"]
[Sun Mar 29 17:21:50.052630 2026] [:error] [pid 32359:tid 32361] [client 20.168.65.162:1437] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-true.php"] [unique_id "acjvLgMb8G3UzfQP3WgQdAAAAMA"]
[Sun Mar 29 17:21:50.376722 2026] [:error] [pid 32255:tid 32298] [client 20.168.65.162:21612] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-true.php"] [unique_id "acjvLmnfn-AtRoMbquxuNQAAAEc"]
[Sun Mar 29 17:21:50.758568 2026] [:error] [pid 23284:tid 23290] [client 20.168.65.162:52376] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-true.php"] [unique_id "acjvLozBujdPHsq7wyQIhQAAAoQ"]
[Sun Mar 29 17:21:51.133281 2026] [:error] [pid 23284:tid 23289] [client 20.168.65.162:41710] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-true.php"] [unique_id "acjvL4zBujdPHsq7wyQIhwAAAoM"]
[Sun Mar 29 17:21:51.460074 2026] [:error] [pid 23137:tid 23151] [client 20.168.65.162:7383] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/byp8.php"] [unique_id "acjvLxaWQa7LdZ_qGFbV9QAAAYw"]
[Sun Mar 29 17:21:51.784474 2026] [:error] [pid 32255:tid 32295] [client 20.168.65.162:19846] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/byp8.php"] [unique_id "acjvL2nfn-AtRoMbquxuOgAAAEQ"]
[Sun Mar 29 17:21:52.219380 2026] [:error] [pid 1524:tid 1532] [client 20.168.65.162:7375] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/byp8.php"] [unique_id "acjvMFoaWSl2asqQCh9qGwAAAQQ"]
[Sun Mar 29 17:21:52.858865 2026] [:error] [pid 1524:tid 1531] [client 20.168.65.162:7418] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/byp8.php"] [unique_id "acjvMFoaWSl2asqQCh9qHAAAAQM"]
[Sun Mar 29 17:21:53.247959 2026] [:error] [pid 23250:tid 23261] [client 20.168.65.162:16240] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/tx88.php"] [unique_id "acjvMZxrpj-dQjy1cvrQKgAAAkk"]
[Sun Mar 29 17:21:53.832760 2026] [:error] [pid 23250:tid 23272] [client 20.168.65.162:20873] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/tx88.php"] [unique_id "acjvMZxrpj-dQjy1cvrQLAAAAlQ"]
[Sun Mar 29 17:21:54.290356 2026] [:error] [pid 23284:tid 23293] [client 20.168.65.162:35015] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/tx88.php"] [unique_id "acjvMozBujdPHsq7wyQIjAAAAoc"]
[Sun Mar 29 17:21:55.375949 2026] [:error] [pid 32255:tid 32313] [client 20.168.65.162:20953] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/tx88.php"] [unique_id "acjvM2nfn-AtRoMbquxuPgAAAFY"]
[Sun Mar 29 17:21:55.889040 2026] [:error] [pid 23250:tid 23253] [client 20.168.65.162:11089] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/tx79.php"] [unique_id "acjvM5xrpj-dQjy1cvrQLgAAAkE"]
[Sun Mar 29 17:21:56.662870 2026] [:error] [pid 23250:tid 23260] [client 20.168.65.162:41717] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/tx79.php"] [unique_id "acjvNJxrpj-dQjy1cvrQMgAAAkg"]
[Sun Mar 29 17:21:57.173017 2026] [:error] [pid 23250:tid 23273] [client 20.168.65.162:38421] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/tx79.php"] [unique_id "acjvNZxrpj-dQjy1cvrQNgAAAlU"]
[Sun Mar 29 17:21:57.734749 2026] [:error] [pid 32255:tid 32291] [client 20.168.65.162:38416] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/tx79.php"] [unique_id "acjvNWnfn-AtRoMbquxuPwAAAEA"]
[Sun Mar 29 17:21:58.145953 2026] [:error] [pid 23167:tid 23170] [client 20.168.65.162:48258] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/max.php"] [unique_id "acjvNhIAHJCFaHff3_dvBQAAAcA"]
[Sun Mar 29 17:21:58.644785 2026] [:error] [pid 23167:tid 23191] [client 20.168.65.162:38410] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/max.php"] [unique_id "acjvNhIAHJCFaHff3_dvDQAAAdU"]
[Sun Mar 29 17:21:59.182565 2026] [:error] [pid 32255:tid 32295] [client 20.168.65.162:48256] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/max.php"] [unique_id "acjvN2nfn-AtRoMbquxuQwAAAEQ"]
[Sun Mar 29 17:21:59.537092 2026] [:error] [pid 23167:tid 23184] [client 20.168.65.162:16701] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/max.php"] [unique_id "acjvNxIAHJCFaHff3_dvGAAAAc4"]
[Sun Mar 29 17:21:59.878962 2026] [:error] [pid 32255:tid 32292] [client 20.168.65.162:38406] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/z60.php"] [unique_id "acjvN2nfn-AtRoMbquxuSQAAAEE"]
[Sun Mar 29 17:22:00.230225 2026] [:error] [pid 23168:tid 23214] [client 20.168.65.162:7370] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/z60.php"] [unique_id "acjvOGP8p0yRL8ot_29VCQAAAhE"]
[Sun Mar 29 17:22:00.553521 2026] [:error] [pid 32255:tid 32297] [client 20.168.65.162:16682] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/z60.php"] [unique_id "acjvOGnfn-AtRoMbquxuSwAAAEY"]
[Sun Mar 29 17:22:00.935173 2026] [:error] [pid 23137:tid 23150] [client 20.168.65.162:7507] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/z60.php"] [unique_id "acjvOBaWQa7LdZ_qGFbV-QAAAYs"]
[Sun Mar 29 17:22:01.316668 2026] [:error] [pid 23137:tid 23154] [client 20.168.65.162:23724] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/utky.php"] [unique_id "acjvORaWQa7LdZ_qGFbV-gAAAY8"]
[Sun Mar 29 17:22:01.635168 2026] [:error] [pid 32257:tid 32327] [client 20.168.65.162:19953] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/utky.php"] [unique_id "acjvOSE3TArOFrUtgWq3eQAAAIk"]
[Sun Mar 29 17:22:02.055994 2026] [:error] [pid 32257:tid 32326] [client 20.168.65.162:7390] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/utky.php"] [unique_id "acjvOiE3TArOFrUtgWq3ewAAAIg"]
[Sun Mar 29 17:22:02.374885 2026] [:error] [pid 32255:tid 32295] [client 20.168.65.162:48298] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/utky.php"] [unique_id "acjvOmnfn-AtRoMbquxuTwAAAEQ"]
[Sun Mar 29 17:22:02.731643 2026] [:error] [pid 32257:tid 32335] [client 20.168.65.162:44189] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/uang.php"] [unique_id "acjvOiE3TArOFrUtgWq3gAAAAJE"]
[Sun Mar 29 17:22:03.088365 2026] [:error] [pid 32257:tid 32332] [client 20.168.65.162:38418] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/uang.php"] [unique_id "acjvOyE3TArOFrUtgWq3gQAAAI4"]
[Sun Mar 29 17:22:03.440185 2026] [:error] [pid 32255:tid 32312] [client 20.168.65.162:16700] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/uang.php"] [unique_id "acjvO2nfn-AtRoMbquxuVAAAAFU"]
[Sun Mar 29 17:22:03.770499 2026] [:error] [pid 32257:tid 32329] [client 20.168.65.162:23169] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/uang.php"] [unique_id "acjvOyE3TArOFrUtgWq3hQAAAIs"]
[Sun Mar 29 17:22:04.212181 2026] [:error] [pid 23168:tid 23201] [client 20.168.65.162:38411] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp3.php"] [unique_id "acjvPGP8p0yRL8ot_29VDwAAAgQ"]
[Sun Mar 29 17:22:04.658046 2026] [:error] [pid 32257:tid 32325] [client 20.168.65.162:23195] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp3.php"] [unique_id "acjvPCE3TArOFrUtgWq3igAAAIc"]
[Sun Mar 29 17:22:05.000638 2026] [:error] [pid 32254:tid 32269] [client 20.168.65.162:7453] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp3.php"] [unique_id "acjvPKug2IHuyGgCTn9EXwAAAAU"]
[Sun Mar 29 17:22:05.447901 2026] [:error] [pid 23250:tid 23264] [client 20.168.65.162:34496] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp3.php"] [unique_id "acjvPZxrpj-dQjy1cvrQSgAAAkw"]
[Sun Mar 29 17:22:05.920008 2026] [:error] [pid 32255:tid 32304] [client 20.168.65.162:16205] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp9.php"] [unique_id "acjvPWnfn-AtRoMbquxuYgAAAE0"]
[Sun Mar 29 17:22:06.340352 2026] [:error] [pid 23168:tid 23216] [client 20.168.65.162:44162] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp9.php"] [unique_id "acjvPmP8p0yRL8ot_29VFAAAAhM"]
[Sun Mar 29 17:22:07.042106 2026] [:error] [pid 32257:tid 32327] [client 20.168.65.162:48314] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp9.php"] [unique_id "acjvPyE3TArOFrUtgWq3jAAAAIk"]
[Sun Mar 29 17:22:07.382591 2026] [:error] [pid 23284:tid 23297] [client 20.168.65.162:35570] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp9.php"] [unique_id "acjvP4zBujdPHsq7wyQImgAAAos"]
[Sun Mar 29 17:22:07.782699 2026] [:error] [pid 23137:tid 23153] [client 20.168.65.162:25815] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/maint/absorption.php"] [unique_id "acjvPxaWQa7LdZ_qGFbWAAAAAY4"]
[Sun Mar 29 17:22:08.134905 2026] [:error] [pid 23284:tid 23309] [client 20.168.65.162:25834] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/maint/absorption.php"] [unique_id "acjvQIzBujdPHsq7wyQInQAAApc"]
[Sun Mar 29 17:22:08.517461 2026] [:error] [pid 23284:tid 23293] [client 20.168.65.162:35523] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/maint/absorption.php"] [unique_id "acjvQIzBujdPHsq7wyQIoQAAAoc"]
[Sun Mar 29 17:22:08.883587 2026] [:error] [pid 23284:tid 23294] [client 20.168.65.162:38417] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/maint/absorption.php"] [unique_id "acjvQIzBujdPHsq7wyQIpAAAAog"]
[Sun Mar 29 17:22:09.410368 2026] [:error] [pid 32359:tid 32381] [client 20.168.65.162:25793] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ticket.php"] [unique_id "acjvQQMb8G3UzfQP3WgQgwAAANQ"]
[Sun Mar 29 17:22:09.770008 2026] [:error] [pid 23284:tid 23300] [client 20.168.65.162:35579] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ticket.php"] [unique_id "acjvQYzBujdPHsq7wyQIpgAAAo4"]
[Sun Mar 29 17:22:10.084246 2026] [:error] [pid 23284:tid 23308] [client 20.168.65.162:45996] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ticket.php"] [unique_id "acjvQozBujdPHsq7wyQIpwAAApY"]
[Sun Mar 29 17:22:10.776776 2026] [:error] [pid 32255:tid 32306] [client 20.168.65.162:27283] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ticket.php"] [unique_id "acjvQmnfn-AtRoMbquxubgAAAE8"]
[Sun Mar 29 17:22:11.365896 2026] [:error] [pid 32257:tid 32328] [client 20.168.65.162:36049] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wglum1.php"] [unique_id "acjvQyE3TArOFrUtgWq3kgAAAIo"]
[Sun Mar 29 17:22:12.614218 2026] [:error] [pid 32254:tid 32277] [client 20.168.65.162:23252] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wglum1.php"] [unique_id "acjvRKug2IHuyGgCTn9EZgAAAA0"]
[Sun Mar 29 17:22:13.525883 2026] [:error] [pid 32255:tid 32315] [client 20.168.65.162:35532] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wglum1.php"] [unique_id "acjvRWnfn-AtRoMbquxudwAAAFg"]
[Sun Mar 29 17:22:13.946170 2026] [:error] [pid 23284:tid 23299] [client 20.168.65.162:24205] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wglum1.php"] [unique_id "acjvRYzBujdPHsq7wyQIsAAAAo0"]
[Sun Mar 29 17:22:14.315990 2026] [:error] [pid 32255:tid 32306] [client 20.168.65.162:25745] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xpwer1.php"] [unique_id "acjvRmnfn-AtRoMbquxuewAAAE8"]
[Sun Mar 29 17:22:14.691888 2026] [:error] [pid 32255:tid 32301] [client 20.168.65.162:45969] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xpwer1.php"] [unique_id "acjvRmnfn-AtRoMbquxufgAAAEo"]
[Sun Mar 29 17:22:15.034806 2026] [:error] [pid 32257:tid 32322] [client 20.168.65.162:38413] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xpwer1.php"] [unique_id "acjvRyE3TArOFrUtgWq3oAAAAIQ"]
[Sun Mar 29 17:22:15.375785 2026] [:error] [pid 32255:tid 32303] [client 20.168.65.162:25794] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xpwer1.php"] [unique_id "acjvR2nfn-AtRoMbquxugwAAAEw"]
[Sun Mar 29 17:22:15.720989 2026] [:error] [pid 32255:tid 32308] [client 20.168.65.162:20293] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/yuzuru1.php"] [unique_id "acjvR2nfn-AtRoMbquxuhQAAAFE"]
[Sun Mar 29 17:22:16.100014 2026] [:error] [pid 32255:tid 32310] [client 20.168.65.162:44201] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/yuzuru1.php"] [unique_id "acjvSGnfn-AtRoMbquxuiQAAAFM"]
[Sun Mar 29 17:22:16.700977 2026] [:error] [pid 32255:tid 32294] [client 20.168.65.162:46014] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/yuzuru1.php"] [unique_id "acjvSGnfn-AtRoMbquxujwAAAEM"]
[Sun Mar 29 17:22:17.075673 2026] [:error] [pid 32255:tid 32297] [client 20.168.65.162:34521] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/yuzuru1.php"] [unique_id "acjvSWnfn-AtRoMbquxulAAAAEY"]
[Sun Mar 29 17:22:17.479176 2026] [:error] [pid 32255:tid 32302] [client 20.168.65.162:36051] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wdone1.php"] [unique_id "acjvSWnfn-AtRoMbquxumQAAAEs"]
[Sun Mar 29 17:22:17.819989 2026] [:error] [pid 32255:tid 32294] [client 20.168.65.162:24229] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wdone1.php"] [unique_id "acjvSWnfn-AtRoMbquxunQAAAEM"]
[Sun Mar 29 17:22:18.151002 2026] [:error] [pid 23250:tid 23260] [client 20.168.65.162:24219] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wdone1.php"] [unique_id "acjvSpxrpj-dQjy1cvrQWgAAAkg"]
[Sun Mar 29 17:22:18.609186 2026] [:error] [pid 23284:tid 23290] [client 20.168.65.162:35542] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wdone1.php"] [unique_id "acjvSozBujdPHsq7wyQItQAAAoQ"]
[Sun Mar 29 17:22:18.974712 2026] [:error] [pid 23250:tid 23268] [client 20.168.65.162:25836] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xpass.php"] [unique_id "acjvSpxrpj-dQjy1cvrQXAAAAlA"]
[Sun Mar 29 17:22:19.324063 2026] [:error] [pid 23250:tid 23258] [client 20.168.65.162:20328] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xpass.php"] [unique_id "acjvS5xrpj-dQjy1cvrQXgAAAkY"]
[Sun Mar 29 17:22:19.812064 2026] [:error] [pid 23167:tid 23175] [client 20.168.65.162:25848] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xpass.php"] [unique_id "acjvSxIAHJCFaHff3_dvNwAAAcU"]
[Sun Mar 29 17:22:20.228020 2026] [:error] [pid 32255:tid 32301] [client 20.168.65.162:28708] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xpass.php"] [unique_id "acjvTGnfn-AtRoMbquxupAAAAEo"]
[Sun Mar 29 17:22:20.581522 2026] [:error] [pid 32255:tid 32291] [client 20.168.65.162:34501] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ad.php"] [unique_id "acjvTGnfn-AtRoMbquxupgAAAEA"]
[Sun Mar 29 17:22:20.903567 2026] [:error] [pid 23137:tid 23147] [client 20.168.65.162:38405] [client 20.168.65.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ad.php"] [unique_id "acjvTBaWQa7LdZ_qGFbWCQAAAYg"]
[Sun Mar 29 17:22:21.228869 2026] [proxy_fcgi:error] [pid 23284:tid 23289] [client 20.168.65.162:36079] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 17:22:21.389128 2026] [proxy_fcgi:error] [pid 23284:tid 23288] [client 20.168.65.162:36079] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 21:00:33.957640 2026] [proxy_fcgi:error] [pid 23284:tid 23301] [client 20.151.111.128:11515] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 21:00:34.173879 2026] [proxy_fcgi:error] [pid 23284:tid 23305] [client 20.151.111.128:11515] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 21:00:34.595519 2026] [proxy_fcgi:error] [pid 23284:tid 23297] [client 20.151.111.128:11515] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 21:00:34.806359 2026] [proxy_fcgi:error] [pid 23284:tid 23288] [client 20.151.111.128:11515] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 21:00:35.227044 2026] [proxy_fcgi:error] [pid 23284:tid 23295] [client 20.151.111.128:11515] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 21:00:35.438923 2026] [proxy_fcgi:error] [pid 23284:tid 23291] [client 20.151.111.128:11515] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 21:00:35.649270 2026] [proxy_fcgi:error] [pid 23284:tid 23289] [client 20.151.111.128:11515] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 21:00:36.065633 2026] [:error] [pid 23284:tid 23298] [client 20.151.111.128:11515] [client 20.151.111.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/randkeyword.PhP7"] [unique_id "ackidIzBujdPHsq7wyR7vQAAAow"]
[Sun Mar 29 21:00:36.892246 2026] [:error] [pid 32255:tid 32302] [client 20.151.111.128:29528] [client 20.151.111.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/randkeyword.PhP7"] [unique_id "ackidGnfn-AtRoMbquzYGQAAAEs"]
[Sun Mar 29 21:00:37.714596 2026] [:error] [pid 23167:tid 23171] [client 20.151.111.128:21350] [client 20.151.111.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/randkeyword.PhP7"] [unique_id "ackidRIAHJCFaHff3_e0AQAAAcE"]
[Sun Mar 29 21:00:38.539494 2026] [:error] [pid 23284:tid 23307] [client 20.151.111.128:11393] [client 20.151.111.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/randkeyword.PhP7"] [unique_id "ackidozBujdPHsq7wyR7xgAAApU"]
[Sun Mar 29 21:31:47.861098 2026] [proxy_fcgi:error] [pid 8818:tid 8831] [client 52.180.158.245:5617] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 21:31:48.049825 2026] [proxy_fcgi:error] [pid 8818:tid 8836] [client 52.180.158.245:5617] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 21:31:48.240361 2026] [proxy_fcgi:error] [pid 8818:tid 8846] [client 52.180.158.245:5617] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 21:31:48.440058 2026] [proxy_fcgi:error] [pid 8818:tid 8835] [client 52.180.158.245:5617] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 21:31:48.629847 2026] [proxy_fcgi:error] [pid 8818:tid 8829] [client 52.180.158.245:5617] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 21:31:48.820961 2026] [proxy_fcgi:error] [pid 8818:tid 8837] [client 52.180.158.245:5617] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 21:31:49.010371 2026] [proxy_fcgi:error] [pid 8818:tid 8839] [client 52.180.158.245:5617] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 21:31:49.200218 2026] [proxy_fcgi:error] [pid 8818:tid 8845] [client 52.180.158.245:5617] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 21:31:49.390259 2026] [proxy_fcgi:error] [pid 8818:tid 8828] [client 52.180.158.245:5617] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 21:31:49.578557 2026] [proxy_fcgi:error] [pid 8818:tid 8844] [client 52.180.158.245:5617] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 21:31:49.763853 2026] [:error] [pid 8818:tid 8827] [client 52.180.158.245:5617] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/anz.php"] [unique_id "ackpxSCDvotZNSF0FBraxgAAAUU"]
[Sun Mar 29 21:31:56.144421 2026] [:error] [pid 23284:tid 23286] [client 52.180.158.245:37760] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/anz.php"] [unique_id "ackpzIzBujdPHsq7wySPNAAAAoA"]
[Sun Mar 29 21:31:57.290036 2026] [:error] [pid 23284:tid 23300] [client 52.180.158.245:63388] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/anz.php"] [unique_id "ackpzYzBujdPHsq7wySPPQAAAo4"]
[Sun Mar 29 21:32:02.154925 2026] [:error] [pid 32255:tid 32301] [client 52.180.158.245:35636] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/anz.php"] [unique_id "ackp0mnfn-AtRoMbquzjiQAAAEo"]
[Sun Mar 29 21:32:04.615865 2026] [:error] [pid 32255:tid 32296] [client 52.180.158.245:31314] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wen.php"] [unique_id "ackp1Gnfn-AtRoMbquzjkAAAAEU"]
[Sun Mar 29 21:32:08.760087 2026] [:error] [pid 32255:tid 32305] [client 52.180.158.245:5772] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wen.php"] [unique_id "ackp2Gnfn-AtRoMbquzjmQAAAE4"]
[Sun Mar 29 21:32:14.015522 2026] [:error] [pid 32257:tid 32320] [client 52.180.158.245:35603] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wen.php"] [unique_id "ackp3iE3TArOFrUtgWooGwAAAII"]
[Sun Mar 29 21:32:17.801199 2026] [:error] [pid 23284:tid 23310] [client 52.180.158.245:57681] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wen.php"] [unique_id "ackp4YzBujdPHsq7wySPYgAAApg"]
[Sun Mar 29 21:32:19.968602 2026] [:error] [pid 32359:tid 32370] [client 52.180.158.245:47950] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/file66.php"] [unique_id "ackp4wMb8G3UzfQP3WgrhAAAAMk"]
[Sun Mar 29 21:32:22.210482 2026] [:error] [pid 32257:tid 32326] [client 52.180.158.245:57670] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/file66.php"] [unique_id "ackp5iE3TArOFrUtgWooKQAAAIg"]
[Sun Mar 29 21:32:27.211457 2026] [:error] [pid 23284:tid 23310] [client 52.180.158.245:5908] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/file66.php"] [unique_id "ackp64zBujdPHsq7wySPbgAAApg"]
[Sun Mar 29 21:32:43.237191 2026] [:error] [pid 23284:tid 23287] [client 52.180.158.245:32748] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/kure.php"] [unique_id "ackp-4zBujdPHsq7wySPpwAAAoE"]
[Sun Mar 29 21:32:49.694196 2026] [proxy_fcgi:error] [pid 23284:tid 23289] [client 52.180.158.245:30971] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 21:32:49.883848 2026] [proxy_fcgi:error] [pid 23284:tid 23291] [client 52.180.158.245:30971] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 21:32:50.075513 2026] [proxy_fcgi:error] [pid 23284:tid 23302] [client 52.180.158.245:30971] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 21:32:50.286968 2026] [proxy_fcgi:error] [pid 23284:tid 23300] [client 52.180.158.245:30971] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 21:32:50.502354 2026] [proxy_fcgi:error] [pid 23284:tid 23303] [client 52.180.158.245:30971] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 21:32:50.711774 2026] [proxy_fcgi:error] [pid 23284:tid 23301] [client 52.180.158.245:30971] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 21:32:50.904165 2026] [proxy_fcgi:error] [pid 23284:tid 23310] [client 52.180.158.245:30971] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 21:32:51.094624 2026] [proxy_fcgi:error] [pid 23284:tid 23287] [client 52.180.158.245:30971] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 21:32:51.305748 2026] [proxy_fcgi:error] [pid 23284:tid 23292] [client 52.180.158.245:30971] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 21:32:51.502456 2026] [proxy_fcgi:error] [pid 23284:tid 23298] [client 52.180.158.245:30971] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 21:32:51.692632 2026] [proxy_fcgi:error] [pid 23284:tid 23293] [client 52.180.158.245:30971] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 21:32:51.903125 2026] [:error] [pid 23284:tid 23300] [client 52.180.158.245:30971] [client 52.180.158.245] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/Text/network.php"] [unique_id "ackqA4zBujdPHsq7wySPyAAAAo4"]
[Sun Mar 29 21:32:59.328150 2026] [:error] [pid 32257:tid 32338] [client 52.180.158.245:62207] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/upgrade-temp-backup/wp-login.php"] [unique_id "ackqCyE3TArOFrUtgWooewAAAJQ"]
[Sun Mar 29 21:33:05.806865 2026] [:error] [pid 23284:tid 23287] [client 52.180.158.245:41286] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/upgrade-temp-backup/wp-login.php"] [unique_id "ackqEYzBujdPHsq7wySP9gAAAoE"]
[Sun Mar 29 21:33:07.699962 2026] [:error] [pid 32257:tid 32334] [client 52.180.158.245:62127] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/js/fm.php"] [unique_id "ackqEyE3TArOFrUtgWookAAAAJA"]
[Sun Mar 29 21:33:11.300053 2026] [:error] [pid 23250:tid 23255] [client 52.180.158.245:39017] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/js/fm.php"] [unique_id "ackqF5xrpj-dQjy1cvoAZwAAAkM"]
[Sun Mar 29 21:33:27.196872 2026] [:error] [pid 32257:tid 32341] [client 52.180.158.245:39009] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/themes/astra/inc/ki1k.php"] [unique_id "ackqJyE3TArOFrUtgWoowgAAAJc"]
[Sun Mar 29 21:33:34.761664 2026] [:error] [pid 32254:tid 32285] [client 52.180.158.245:36812] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/themes/astra/inc/ki1k.php"] [unique_id "ackqLqug2IHuyGgCTn9aEQAAABU"]
[Sun Mar 29 21:33:37.387672 2026] [:error] [pid 32257:tid 32335] [client 52.180.158.245:43010] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/themes/astra/inc/ki1k.php"] [unique_id "ackqMSE3TArOFrUtgWoozAAAAJE"]
[Sun Mar 29 21:33:46.012313 2026] [:error] [pid 23168:tid 23205] [client 52.180.158.245:37846] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/WordPress/wp-admin/includes/zmFM.php"] [unique_id "ackqOmP8p0yRL8ot_2-VmAAAAgg"]
[Sun Mar 29 21:33:53.457083 2026] [proxy_fcgi:error] [pid 32257:tid 32341] [client 52.180.158.245:47481] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 21:33:53.646164 2026] [proxy_fcgi:error] [pid 32257:tid 32334] [client 52.180.158.245:47481] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 21:33:54.034626 2026] [:error] [pid 32257:tid 32327] [client 52.180.158.245:47481] [client 52.180.158.245] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.dwelectservices.com.au"] [uri "/fm.php"] [unique_id "ackqQiE3TArOFrUtgWoo8AAAAIk"]
[Sun Mar 29 21:33:57.453075 2026] [proxy_fcgi:error] [pid 32257:tid 32332] [client 52.180.158.245:34998] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 21:33:58.228088 2026] [proxy_fcgi:error] [pid 32257:tid 32338] [client 52.180.158.245:34998] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 21:33:58.417843 2026] [proxy_fcgi:error] [pid 32257:tid 32331] [client 52.180.158.245:34998] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 21:33:58.605049 2026] [:error] [pid 32257:tid 32335] [client 52.180.158.245:34998] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/assets/images/28c5400b0b.php"] [unique_id "ackqRiE3TArOFrUtgWopDwAAAJE"]
[Sun Mar 29 21:34:05.409798 2026] [:error] [pid 23137:tid 23158] [client 52.180.158.245:48927] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/assets/images/28c5400b0b.php"] [unique_id "ackqTRaWQa7LdZ_qGFb36wAAAZM"]
[Sun Mar 29 21:34:11.996869 2026] [:error] [pid 32257:tid 32327] [client 52.180.158.245:49456] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/assets/images/28c5400b0b.php"] [unique_id "ackqUyE3TArOFrUtgWopMAAAAIk"]
[Sun Mar 29 21:34:17.884390 2026] [:error] [pid 23168:tid 23205] [client 52.180.158.245:46756] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wordpress/wp-includes/wp-config-sample.php"] [unique_id "ackqWWP8p0yRL8ot_2-VtAAAAgg"]
[Sun Mar 29 21:34:27.277646 2026] [:error] [pid 23284:tid 23304] [client 52.180.158.245:56932] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wordpress/wp-includes/wp-config-sample.php"] [unique_id "ackqY4zBujdPHsq7wySQ1QAAApI"]
[Sun Mar 29 21:34:37.300735 2026] [:error] [pid 23137:tid 23144] [client 52.180.158.245:43344] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-mail.php/wp-includes/ID3/.info.php"] [unique_id "ackqbRaWQa7LdZ_qGFb39gAAAYU"]
[Sun Mar 29 21:34:44.479802 2026] [:error] [pid 32257:tid 32328] [client 52.180.158.245:56943] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-mail.php/wp-includes/ID3/.info.php"] [unique_id "ackqdCE3TArOFrUtgWopfAAAAIo"]
[Sun Mar 29 21:34:47.781322 2026] [:error] [pid 23168:tid 23198] [client 52.180.158.245:46727] [client 52.180.158.245] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "ackqd2P8p0yRL8ot_2-VzgAAAgE"]
[Sun Mar 29 21:34:51.017716 2026] [:error] [pid 23168:tid 23211] [client 52.180.158.245:48902] [client 52.180.158.245] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "ackqe2P8p0yRL8ot_2-V0AAAAg4"]
[Sun Mar 29 21:34:58.412821 2026] [:error] [pid 23284:tid 23297] [client 52.180.158.245:39430] [client 52.180.158.245] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "ackqgozBujdPHsq7wySRFwAAAos"]
[Sun Mar 29 21:35:01.331830 2026] [proxy_fcgi:error] [pid 8818:tid 8832] [client 52.180.158.245:47429] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 21:35:01.518852 2026] [:error] [pid 8818:tid 8829] [client 52.180.158.245:47429] [client 52.180.158.245] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 52.180.158.245, incrementing brute counter"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/css/colors/blue/wp-login.php"] [unique_id "ackqhSCDvotZNSF0FBrbVAAAAUc"]
[Sun Mar 29 21:35:03.066819 2026] [:error] [pid 8818:tid 8822] [client 52.180.158.245:47429] [client 52.180.158.245] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/Requests/Response/wp-login.php"] [unique_id "ackqhyCDvotZNSF0FBrbWAAAAUA"]
[Sun Mar 29 21:35:05.095707 2026] [:error] [pid 23284:tid 23307] [client 52.180.158.245:35001] [client 52.180.158.245] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/SimplePie/Cache/about.php"] [unique_id "ackqiYzBujdPHsq7wySRLQAAApU"]
[Sun Mar 29 21:35:05.529806 2026] [:error] [pid 23284:tid 23297] [client 52.180.158.245:63972] [client 52.180.158.245] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/sodium_compat/src/alfa-rex.php"] [unique_id "ackqiYzBujdPHsq7wySRMQAAAos"]
[Sun Mar 29 21:35:06.727354 2026] [:error] [pid 23284:tid 23304] [client 52.180.158.245:51515] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-mail.php/wp-includes/ID3/wp-mail.php"] [unique_id "ackqiozBujdPHsq7wySRPgAAApI"]
[Sun Mar 29 21:35:08.460950 2026] [:error] [pid 23167:tid 23194] [client 52.180.158.245:39480] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-mail.php/wp-includes/ID3/wp-mail.php"] [unique_id "ackqjBIAHJCFaHff3_e7lQAAAdg"]
[Sun Mar 29 21:35:09.570152 2026] [:error] [pid 23167:tid 23189] [client 52.180.158.245:37329] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-mail.php/wp-includes/ID3/wp-mail.php"] [unique_id "ackqjRIAHJCFaHff3_e7nAAAAdM"]
[Sun Mar 29 21:35:11.043268 2026] [:error] [pid 32257:tid 32339] [client 52.180.158.245:37343] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-mail.php/wp-includes/ID3/wp-mail.php"] [unique_id "ackqjyE3TArOFrUtgWoppQAAAJU"]
[Sun Mar 29 21:35:12.891767 2026] [:error] [pid 32359:tid 32369] [client 52.180.158.245:37313] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "ackqkAMb8G3UzfQP3Wgr6gAAAMg"]
[Sun Mar 29 21:35:14.512474 2026] [:error] [pid 32255:tid 32292] [client 52.180.158.245:22775] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "ackqkmnfn-AtRoMbquzlawAAAEE"]
[Sun Mar 29 21:35:18.152343 2026] [:error] [pid 23284:tid 23302] [client 52.180.158.245:22737] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "ackqlozBujdPHsq7wySRUgAAApA"]
[Sun Mar 29 21:35:21.242481 2026] [:error] [pid 32257:tid 32332] [client 52.180.158.245:47433] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "ackqmSE3TArOFrUtgWoprgAAAI4"]
[Sun Mar 29 21:35:23.311427 2026] [:error] [pid 32257:tid 32321] [client 52.180.158.245:51517] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/assets/images/wp-login.php"] [unique_id "ackqmyE3TArOFrUtgWoptgAAAIM"]
[Sun Mar 29 21:35:29.831871 2026] [:error] [pid 23168:tid 23198] [client 52.180.158.245:51480] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/assets/images/wp-login.php"] [unique_id "ackqoWP8p0yRL8ot_2-WIAAAAgE"]
[Sun Mar 29 21:35:31.386190 2026] [:error] [pid 23168:tid 23204] [client 52.180.158.245:36250] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/assets/images/wp-login.php"] [unique_id "ackqo2P8p0yRL8ot_2-WKAAAAgc"]
[Sun Mar 29 21:35:34.963869 2026] [:error] [pid 23137:tid 23163] [client 52.180.158.245:36265] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/assets/images/wp-login.php"] [unique_id "ackqphaWQa7LdZ_qGFb4MQAAAZg"]
[Sun Mar 29 21:35:42.345397 2026] [:error] [pid 32254:tid 32285] [client 52.180.158.245:22773] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/css/xp.php"] [unique_id "ackqrqug2IHuyGgCTn9aZQAAABU"]
[Sun Mar 29 21:35:43.492130 2026] [:error] [pid 23137:tid 23151] [client 52.180.158.245:39482] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/css/xp.php"] [unique_id "ackqrxaWQa7LdZ_qGFb4UAAAAYw"]
[Sun Mar 29 21:35:48.267834 2026] [:error] [pid 8818:tid 8844] [client 52.180.158.245:40174] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/css/xp.php"] [unique_id "ackqtCCDvotZNSF0FBrbnAAAAVY"]
[Sun Mar 29 21:35:54.689781 2026] [:error] [pid 23284:tid 23305] [client 52.180.158.245:51516] [client 52.180.158.245] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/assets/themes.php"] [unique_id "ackquozBujdPHsq7wySRpgAAApM"]
[Sun Mar 29 21:35:59.454768 2026] [:error] [pid 23167:tid 23190] [client 52.180.158.245:37353] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/plugins/dummyyummy/wp-signup.php"] [unique_id "ackqvxIAHJCFaHff3_e8BgAAAdQ"]
[Sun Mar 29 21:36:03.734001 2026] [:error] [pid 32255:tid 32304] [client 52.180.158.245:51513] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/plugins/dummyyummy/wp-signup.php"] [unique_id "ackqw2nfn-AtRoMbquzl_gAAAE0"]
[Sun Mar 29 21:36:07.294801 2026] [:error] [pid 23284:tid 23300] [client 52.180.158.245:38917] [client 52.180.158.245] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "ackqx4zBujdPHsq7wySR7AAAAo4"]
[Sun Mar 29 21:36:11.144862 2026] [:error] [pid 8818:tid 8843] [client 52.180.158.245:22770] [client 52.180.158.245] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/SimplePie/Content/Type/wp-login.php"] [unique_id "ackqyyCDvotZNSF0FBrbvAAAAVU"]
[Sun Mar 29 21:36:13.332717 2026] [:error] [pid 32257:tid 32318] [client 52.180.158.245:35005] [client 52.180.158.245] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 52.180.158.245, incrementing brute counter"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/languages/wp-login.php"] [unique_id "ackqzSE3TArOFrUtgWop9gAAAIA"]
[Sun Mar 29 21:36:13.530695 2026] [proxy_fcgi:error] [pid 32257:tid 32338] [client 52.180.158.245:35005] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 21:36:13.728304 2026] [:error] [pid 32257:tid 32330] [client 52.180.158.245:35005] [client 52.180.158.245] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/js/tinymce/skins/wordpress/images/about.php"] [unique_id "ackqzSE3TArOFrUtgWop_wAAAIw"]
[Sun Mar 29 21:36:21.005212 2026] [:error] [pid 32257:tid 32319] [client 52.180.158.245:39521] [client 52.180.158.245] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/SimplePie/Content/Type/index.php"] [unique_id "ackq1SE3TArOFrUtgWoqDgAAAIE"]
[Sun Mar 29 21:36:27.315850 2026] [:error] [pid 32255:tid 32295] [client 52.180.158.245:40138] [client 52.180.158.245] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "ackq22nfn-AtRoMbquzmHQAAAEQ"]
[Sun Mar 29 21:36:31.540612 2026] [proxy_fcgi:error] [pid 8818:tid 8823] [client 52.180.158.245:35689] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 21:36:31.746278 2026] [proxy_fcgi:error] [pid 8818:tid 8824] [client 52.180.158.245:35689] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 21:36:32.522182 2026] [:error] [pid 8818:tid 8834] [client 52.180.158.245:35689] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/install.php"] [unique_id "ackq4CCDvotZNSF0FBrb5wAAAUw"]
[Sun Mar 29 21:36:36.421219 2026] [:error] [pid 32257:tid 32325] [client 52.180.158.245:37359] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/install.php"] [unique_id "ackq5CE3TArOFrUtgWoqNgAAAIc"]
[Sun Mar 29 21:36:42.497837 2026] [:error] [pid 23284:tid 23287] [client 52.180.158.245:34944] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/install.php"] [unique_id "ackq6ozBujdPHsq7wySSWQAAAoE"]
[Sun Mar 29 21:36:46.456063 2026] [:error] [pid 23167:tid 23180] [client 52.180.158.245:39467] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/install.php"] [unique_id "ackq7hIAHJCFaHff3_e8VwAAAco"]
[Sun Mar 29 21:36:50.372647 2026] [:error] [pid 23167:tid 23176] [client 52.180.158.245:38923] [client 52.180.158.245] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/SimplePie/Content/Type/alfa-rex.php"] [unique_id "ackq8hIAHJCFaHff3_e8YgAAAcY"]
[Sun Mar 29 21:36:56.113668 2026] [:error] [pid 32359:tid 32373] [client 52.180.158.245:40145] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/uploads/link.php"] [unique_id "ackq-AMb8G3UzfQP3WgsLwAAAMw"]
[Sun Mar 29 21:37:01.108151 2026] [:error] [pid 32254:tid 32275] [client 52.180.158.245:34965] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/uploads/link.php"] [unique_id "ackq_aug2IHuyGgCTn9aogAAAAs"]
[Sun Mar 29 21:37:04.446481 2026] [:error] [pid 32257:tid 32323] [client 52.180.158.245:35656] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/uploads/link.php"] [unique_id "ackrACE3TArOFrUtgWoqiQAAAIU"]
[Sun Mar 29 21:37:05.845274 2026] [:error] [pid 23284:tid 23308] [client 52.180.158.245:40729] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/403.php"] [unique_id "ackrAYzBujdPHsq7wySSmwAAApY"]
[Sun Mar 29 21:37:07.843568 2026] [:error] [pid 23168:tid 23221] [client 52.180.158.245:22731] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/403.php"] [unique_id "ackrA2P8p0yRL8ot_2-WtgAAAhg"]
[Sun Mar 29 21:37:13.297424 2026] [:error] [pid 23284:tid 23301] [client 52.180.158.245:40155] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/403.php"] [unique_id "ackrCYzBujdPHsq7wySSwAAAAo8"]
[Sun Mar 29 21:37:15.988204 2026] [:error] [pid 8818:tid 8832] [client 52.180.158.245:63950] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/403.php"] [unique_id "ackrCyCDvotZNSF0FBrcFAAAAUo"]
[Sun Mar 29 21:37:21.600298 2026] [:error] [pid 32257:tid 32318] [client 52.180.158.245:35705] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/uploads/plugins.php"] [unique_id "ackrESE3TArOFrUtgWoquwAAAIA"]
[Sun Mar 29 21:37:28.449965 2026] [:error] [pid 23167:tid 23178] [client 52.180.158.245:47457] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/uploads/plugins.php"] [unique_id "ackrGBIAHJCFaHff3_e8lAAAAcg"]
[Sun Mar 29 21:37:34.883471 2026] [:error] [pid 23167:tid 23173] [client 52.180.158.245:39446] [client 52.180.158.245] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/rest-api/alfa-rex.php"] [unique_id "ackrHhIAHJCFaHff3_e8mAAAAcM"]
[Sun Mar 29 21:37:39.234474 2026] [proxy_fcgi:error] [pid 23168:tid 23210] [client 52.180.158.245:34966] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 21:37:39.425558 2026] [proxy_fcgi:error] [pid 23168:tid 23217] [client 52.180.158.245:34966] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 21:37:39.611336 2026] [:error] [pid 23168:tid 23202] [client 52.180.158.245:34966] [client 52.180.158.245] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/html-api/wp-login.php"] [unique_id "ackrI2P8p0yRL8ot_2-W5gAAAgU"]
[Sun Mar 29 21:37:47.045452 2026] [:error] [pid 23250:tid 23274] [client 52.180.158.245:58114] [client 52.180.158.245] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/images/crystal/about.php"] [unique_id "ackrK5xrpj-dQjy1cvoBigAAAlY"]
[Sun Mar 29 21:37:51.433914 2026] [:error] [pid 23284:tid 23293] [client 52.180.158.245:5314] [client 52.180.158.245] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "ackrL4zBujdPHsq7wySTWwAAAoc"]
[Sun Mar 29 21:37:53.863397 2026] [proxy_fcgi:error] [pid 8818:tid 8830] [client 52.180.158.245:5214] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 21:37:54.053386 2026] [proxy_fcgi:error] [pid 8818:tid 8838] [client 52.180.158.245:5214] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 21:37:54.242084 2026] [:error] [pid 8818:tid 8836] [client 52.180.158.245:5214] [client 52.180.158.245] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.dwelectservices.com.au"] [uri "/filemanager.php"] [unique_id "ackrMiCDvotZNSF0FBrcVQAAAU4"]
[Sun Mar 29 21:37:55.709581 2026] [:error] [pid 23168:tid 23201] [client 52.180.158.245:5142] [client 52.180.158.245] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/style-engine/wp-login.php"] [unique_id "ackrM2P8p0yRL8ot_2-XBAAAAgQ"]
[Sun Mar 29 21:54:13.725250 2026] [proxy_fcgi:error] [pid 23250:tid 23266] [client 20.111.59.164:22992] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 21:54:15.134762 2026] [:error] [pid 23250:tid 23254] [client 20.111.59.164:22992] [client 20.111.59.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "ackvB5xrpj-dQjy1cvoFGQAAAkI"]
[Sun Mar 29 21:54:16.022868 2026] [proxy_fcgi:error] [pid 23167:tid 23182] [client 20.111.59.164:10784] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 21:54:16.288835 2026] [proxy_fcgi:error] [pid 23167:tid 23178] [client 20.111.59.164:10784] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 21:54:16.601783 2026] [proxy_fcgi:error] [pid 23167:tid 23184] [client 20.111.59.164:10784] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 21:54:16.886277 2026] [proxy_fcgi:error] [pid 23167:tid 23179] [client 20.111.59.164:10784] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 21:54:17.128561 2026] [proxy_fcgi:error] [pid 23167:tid 23176] [client 20.111.59.164:10784] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 21:54:17.397482 2026] [:error] [pid 23167:tid 23188] [client 20.111.59.164:10784] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/031.php"] [unique_id "ackvCRIAHJCFaHff3_fA-AAAAdI"]
[Sun Mar 29 21:54:18.406463 2026] [:error] [pid 32254:tid 32264] [client 20.111.59.164:15192] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/031.php"] [unique_id "ackvCqug2IHuyGgCTn9cqQAAAAA"]
[Sun Mar 29 21:54:19.123660 2026] [:error] [pid 32257:tid 32324] [client 20.111.59.164:7888] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/031.php"] [unique_id "ackvCyE3TArOFrUtgWo0LAAAAIY"]
[Sun Mar 29 21:54:19.943821 2026] [:error] [pid 32257:tid 32325] [client 20.111.59.164:55678] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/031.php"] [unique_id "ackvCyE3TArOFrUtgWo0MwAAAIc"]
[Sun Mar 29 21:54:20.667165 2026] [:error] [pid 23167:tid 23186] [client 20.111.59.164:15168] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin.php"] [unique_id "ackvDBIAHJCFaHff3_fBAAAAAdA"]
[Sun Mar 29 21:54:21.289414 2026] [:error] [pid 23284:tid 23303] [client 20.111.59.164:9788] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin.php"] [unique_id "ackvDYzBujdPHsq7wySeQAAAApE"]
[Sun Mar 29 21:54:22.428834 2026] [:error] [pid 23284:tid 23288] [client 20.111.59.164:15112] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin.php"] [unique_id "ackvDozBujdPHsq7wySeRAAAAoI"]
[Sun Mar 29 21:54:23.523529 2026] [:error] [pid 23284:tid 23291] [client 20.111.59.164:40215] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin.php"] [unique_id "ackvD4zBujdPHsq7wySeSgAAAoU"]
[Sun Mar 29 21:54:24.627837 2026] [:error] [pid 8818:tid 8829] [client 20.111.59.164:13805] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin.php"] [unique_id "ackvECCDvotZNSF0FBrfegAAAUc"]
[Sun Mar 29 21:54:25.890734 2026] [:error] [pid 32257:tid 32336] [client 20.111.59.164:30467] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin.php"] [unique_id "ackvESE3TArOFrUtgWo0QwAAAJI"]
[Sun Mar 29 21:54:26.453966 2026] [:error] [pid 23284:tid 23307] [client 20.111.59.164:13783] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin.php"] [unique_id "ackvEozBujdPHsq7wySeWgAAApU"]
[Sun Mar 29 21:54:27.129194 2026] [:error] [pid 23284:tid 23306] [client 20.111.59.164:16006] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin.php"] [unique_id "ackvE4zBujdPHsq7wySeXAAAApQ"]
[Sun Mar 29 21:54:28.265347 2026] [:error] [pid 23284:tid 23297] [client 20.111.59.164:15134] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/about.php"] [unique_id "ackvFIzBujdPHsq7wySeZwAAAos"]
[Sun Mar 29 21:54:29.036624 2026] [:error] [pid 32257:tid 32331] [client 20.111.59.164:16034] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/about.php"] [unique_id "ackvFSE3TArOFrUtgWo0SwAAAI0"]
[Sun Mar 29 21:54:29.954089 2026] [:error] [pid 23284:tid 23304] [client 20.111.59.164:15206] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/about.php"] [unique_id "ackvFYzBujdPHsq7wySecQAAApI"]
[Sun Mar 29 21:54:30.658382 2026] [:error] [pid 32257:tid 32321] [client 20.111.59.164:1856] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/about.php"] [unique_id "ackvFiE3TArOFrUtgWo0UgAAAIM"]
[Sun Mar 29 21:54:31.539366 2026] [:error] [pid 23167:tid 23173] [client 20.111.59.164:20237] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/about.php"] [unique_id "ackvFxIAHJCFaHff3_fBCwAAAcM"]
[Sun Mar 29 21:54:32.599316 2026] [:error] [pid 23167:tid 23179] [client 20.111.59.164:15176] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/about.php"] [unique_id "ackvGBIAHJCFaHff3_fBDgAAAck"]
[Sun Mar 29 21:54:34.119438 2026] [:error] [pid 23284:tid 23297] [client 20.111.59.164:20264] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/about.php"] [unique_id "ackvGozBujdPHsq7wySegwAAAos"]
[Sun Mar 29 21:54:35.231117 2026] [:error] [pid 8818:tid 8823] [client 20.111.59.164:30541] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/about.php"] [unique_id "ackvGyCDvotZNSF0FBrfggAAAUE"]
[Sun Mar 29 21:54:36.796694 2026] [:error] [pid 32257:tid 32334] [client 20.111.59.164:16044] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hly.php"] [unique_id "ackvHCE3TArOFrUtgWo0ggAAAJA"]
[Sun Mar 29 21:54:37.436051 2026] [:error] [pid 8818:tid 8836] [client 20.111.59.164:37032] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hly.php"] [unique_id "ackvHSCDvotZNSF0FBrfhQAAAU4"]
[Sun Mar 29 21:54:38.531606 2026] [:error] [pid 32359:tid 32365] [client 20.111.59.164:16126] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hly.php"] [unique_id "ackvHgMb8G3UzfQP3WgvVwAAAMQ"]
[Sun Mar 29 21:54:39.289851 2026] [:error] [pid 32359:tid 32374] [client 20.111.59.164:15208] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hly.php"] [unique_id "ackvHwMb8G3UzfQP3WgvWgAAAM0"]
[Sun Mar 29 21:54:40.391786 2026] [:error] [pid 23284:tid 23290] [client 20.111.59.164:29659] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/about.php"] [unique_id "ackvIIzBujdPHsq7wySenQAAAoQ"]
[Sun Mar 29 21:54:41.302611 2026] [:error] [pid 23250:tid 23274] [client 20.111.59.164:37047] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/about.php"] [unique_id "ackvIZxrpj-dQjy1cvoFLQAAAlY"]
[Sun Mar 29 21:54:42.345302 2026] [:error] [pid 23284:tid 23309] [client 20.111.59.164:29668] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/about.php"] [unique_id "ackvIozBujdPHsq7wySepgAAApc"]
[Sun Mar 29 21:54:43.114157 2026] [:error] [pid 8818:tid 8840] [client 20.111.59.164:15216] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/about.php"] [unique_id "ackvIyCDvotZNSF0FBrfiwAAAVI"]
[Sun Mar 29 21:54:44.069043 2026] [:error] [pid 23167:tid 23171] [client 20.111.59.164:16024] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file7.php"] [unique_id "ackvJBIAHJCFaHff3_fBEwAAAcE"]
[Sun Mar 29 21:54:44.819868 2026] [:error] [pid 32254:tid 32283] [client 20.111.59.164:37019] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file7.php"] [unique_id "ackvJKug2IHuyGgCTn9crwAAABM"]
[Sun Mar 29 21:54:45.598460 2026] [:error] [pid 23284:tid 23298] [client 20.111.59.164:16103] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file7.php"] [unique_id "ackvJYzBujdPHsq7wySerAAAAow"]
[Sun Mar 29 21:54:46.929928 2026] [:error] [pid 23250:tid 23258] [client 20.111.59.164:10276] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file7.php"] [unique_id "ackvJpxrpj-dQjy1cvoFMgAAAkY"]
[Sun Mar 29 21:54:47.729714 2026] [:error] [pid 23284:tid 23293] [client 20.111.59.164:41054] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tajj.php"] [unique_id "ackvJ4zBujdPHsq7wySeugAAAoc"]
[Sun Mar 29 21:54:48.398496 2026] [:error] [pid 23284:tid 23301] [client 20.111.59.164:1446] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tajj.php"] [unique_id "ackvKIzBujdPHsq7wySevwAAAo8"]
[Sun Mar 29 21:54:49.426213 2026] [:error] [pid 23284:tid 23302] [client 20.111.59.164:10289] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tajj.php"] [unique_id "ackvKYzBujdPHsq7wySexQAAApA"]
[Sun Mar 29 21:54:50.169207 2026] [:error] [pid 23284:tid 23286] [client 20.111.59.164:20331] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tajj.php"] [unique_id "ackvKozBujdPHsq7wySeyQAAAoA"]
[Sun Mar 29 21:54:51.570603 2026] [:error] [pid 8818:tid 8825] [client 20.111.59.164:10264] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file30.php"] [unique_id "ackvKyCDvotZNSF0FBrflwAAAUM"]
[Sun Mar 29 21:54:52.459932 2026] [:error] [pid 32254:tid 32275] [client 20.111.59.164:37665] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file30.php"] [unique_id "ackvLKug2IHuyGgCTn9ctwAAAAs"]
[Sun Mar 29 21:54:53.854912 2026] [:error] [pid 8818:tid 8836] [client 20.111.59.164:17424] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file30.php"] [unique_id "ackvLSCDvotZNSF0FBrfngAAAU4"]
[Sun Mar 29 21:54:55.022593 2026] [:error] [pid 23250:tid 23258] [client 20.111.59.164:1424] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file30.php"] [unique_id "ackvL5xrpj-dQjy1cvoFQAAAAkY"]
[Sun Mar 29 21:54:56.151758 2026] [:error] [pid 23168:tid 23206] [client 20.111.59.164:10248] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wsd.php"] [unique_id "ackvMGP8p0yRL8ot_2-dIwAAAgk"]
[Sun Mar 29 21:54:56.776198 2026] [:error] [pid 23284:tid 23298] [client 20.111.59.164:16113] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wsd.php"] [unique_id "ackvMIzBujdPHsq7wySe0QAAAow"]
[Sun Mar 29 21:54:57.477197 2026] [:error] [pid 32257:tid 32320] [client 20.111.59.164:17455] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wsd.php"] [unique_id "ackvMSE3TArOFrUtgWo0vAAAAII"]
[Sun Mar 29 21:54:58.566742 2026] [:error] [pid 8818:tid 8841] [client 20.111.59.164:41905] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wsd.php"] [unique_id "ackvMiCDvotZNSF0FBrfuwAAAVM"]
[Sun Mar 29 21:54:59.647344 2026] [:error] [pid 23284:tid 23309] [client 20.111.59.164:34828] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ioxi-o.php"] [unique_id "ackvM4zBujdPHsq7wySe2QAAApc"]
[Sun Mar 29 21:55:00.598117 2026] [:error] [pid 23284:tid 23297] [client 20.111.59.164:1873] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ioxi-o.php"] [unique_id "ackvNIzBujdPHsq7wySe3AAAAos"]
[Sun Mar 29 21:55:01.320009 2026] [:error] [pid 23167:tid 23188] [client 20.111.59.164:16112] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ioxi-o.php"] [unique_id "ackvNRIAHJCFaHff3_fBKgAAAdI"]
[Sun Mar 29 21:55:02.167528 2026] [:error] [pid 32257:tid 32320] [client 20.111.59.164:1251] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ioxi-o.php"] [unique_id "ackvNiE3TArOFrUtgWo0yQAAAII"]
[Sun Mar 29 21:55:02.868718 2026] [:error] [pid 23250:tid 23255] [client 20.111.59.164:13326] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ioxi-2.php"] [unique_id "ackvNpxrpj-dQjy1cvoFTAAAAkM"]
[Sun Mar 29 21:55:03.476899 2026] [:error] [pid 23284:tid 23286] [client 20.111.59.164:24068] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ioxi-2.php"] [unique_id "ackvN4zBujdPHsq7wySe4gAAAoA"]
[Sun Mar 29 21:55:04.492568 2026] [:error] [pid 23284:tid 23308] [client 20.111.59.164:19705] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ioxi-2.php"] [unique_id "ackvOIzBujdPHsq7wySe5QAAApY"]
[Sun Mar 29 21:55:05.486397 2026] [:error] [pid 23284:tid 23292] [client 20.111.59.164:1433] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ioxi-2.php"] [unique_id "ackvOYzBujdPHsq7wySe6QAAAoY"]
[Sun Mar 29 21:55:06.177315 2026] [:error] [pid 23284:tid 23300] [client 20.111.59.164:24122] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "ackvOozBujdPHsq7wySe6wAAAo4"]
[Sun Mar 29 21:55:07.025903 2026] [:error] [pid 32257:tid 32318] [client 20.111.59.164:17431] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "ackvOyE3TArOFrUtgWo00QAAAIA"]
[Sun Mar 29 21:55:07.768620 2026] [:error] [pid 32257:tid 32319] [client 20.111.59.164:1421] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "ackvOyE3TArOFrUtgWo01QAAAIE"]
[Sun Mar 29 21:55:08.482452 2026] [:error] [pid 32257:tid 32323] [client 20.111.59.164:16711] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "ackvPCE3TArOFrUtgWo02wAAAIU"]
[Sun Mar 29 21:55:11.263403 2026] [:error] [pid 32257:tid 32337] [client 20.111.59.164:17421] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/css/index.php"] [unique_id "ackvPyE3TArOFrUtgWo04wAAAJM"]
[Sun Mar 29 21:55:11.907601 2026] [:error] [pid 32255:tid 32295] [client 20.111.59.164:11468] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/css/index.php"] [unique_id "ackvP2nfn-AtRoMbquzuLAAAAEQ"]
[Sun Mar 29 21:55:12.866101 2026] [:error] [pid 32255:tid 32291] [client 20.111.59.164:17470] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/css/index.php"] [unique_id "ackvQGnfn-AtRoMbquzuMAAAAEA"]
[Sun Mar 29 21:55:13.407600 2026] [:error] [pid 32255:tid 32307] [client 20.111.59.164:23082] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/css/index.php"] [unique_id "ackvQWnfn-AtRoMbquzuMQAAAFA"]
[Sun Mar 29 21:55:14.367587 2026] [:error] [pid 32257:tid 32328] [client 20.111.59.164:23088] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/goods.php"] [unique_id "ackvQiE3TArOFrUtgWo07gAAAIo"]
[Sun Mar 29 21:55:15.376964 2026] [:error] [pid 23250:tid 23253] [client 20.111.59.164:21814] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/goods.php"] [unique_id "ackvQ5xrpj-dQjy1cvoFTwAAAkE"]
[Sun Mar 29 21:55:16.095871 2026] [:error] [pid 8818:tid 8842] [client 20.111.59.164:19680] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/goods.php"] [unique_id "ackvRCCDvotZNSF0FBrf1AAAAVQ"]
[Sun Mar 29 21:55:17.325942 2026] [proxy_fcgi:error] [pid 23284:tid 23307] [client 20.111.59.164:41945] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 21:55:17.575544 2026] [proxy_fcgi:error] [pid 23284:tid 23289] [client 20.111.59.164:41945] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 21:55:17.814829 2026] [proxy_fcgi:error] [pid 23284:tid 23292] [client 20.111.59.164:41945] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 21:55:18.093045 2026] [proxy_fcgi:error] [pid 23284:tid 23293] [client 20.111.59.164:41945] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 21:55:18.337522 2026] [proxy_fcgi:error] [pid 23284:tid 23308] [client 20.111.59.164:41945] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 21:55:18.697895 2026] [proxy_fcgi:error] [pid 23284:tid 23303] [client 20.111.59.164:41945] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 21:55:18.933671 2026] [:error] [pid 23284:tid 23300] [client 20.111.59.164:41945] [client 20.111.59.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "ackvRozBujdPHsq7wySfGgAAAo4"]
[Sun Mar 29 21:55:19.630556 2026] [proxy_fcgi:error] [pid 23284:tid 23294] [client 20.111.59.164:1572] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 21:55:19.866298 2026] [:error] [pid 23284:tid 23308] [client 20.111.59.164:1572] [client 20.111.59.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/theme-compat/chosen.php"] [unique_id "ackvR4zBujdPHsq7wySfIQAAApY"]
[Sun Mar 29 21:55:21.572377 2026] [proxy_fcgi:error] [pid 23284:tid 23308] [client 20.111.59.164:13357] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 21:55:21.839143 2026] [:error] [pid 23284:tid 23289] [client 20.111.59.164:13357] [client 20.111.59.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dwelectservices.com.au"] [uri "/fm.php"] [unique_id "ackvSYzBujdPHsq7wySfLAAAAoM"]
[Sun Mar 29 21:55:22.854296 2026] [:error] [pid 23284:tid 23291] [client 20.111.59.164:34839] [client 20.111.59.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "ackvSozBujdPHsq7wySfMAAAAoU"]
[Sun Mar 29 21:55:24.315513 2026] [proxy_fcgi:error] [pid 23284:tid 23304] [client 20.111.59.164:34861] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 21:55:25.520255 2026] [proxy_fcgi:error] [pid 23284:tid 23290] [client 20.111.59.164:34861] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 21:55:25.770638 2026] [:error] [pid 23284:tid 23298] [client 20.111.59.164:34861] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-freya.php"] [unique_id "ackvTYzBujdPHsq7wySfOQAAAow"]
[Sun Mar 29 21:55:26.802883 2026] [:error] [pid 23284:tid 23304] [client 20.111.59.164:24299] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-freya.php"] [unique_id "ackvTozBujdPHsq7wySfQQAAApI"]
[Sun Mar 29 21:55:27.477102 2026] [:error] [pid 23284:tid 23293] [client 20.111.59.164:1235] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-freya.php"] [unique_id "ackvT4zBujdPHsq7wySfQgAAAoc"]
[Sun Mar 29 21:55:28.356421 2026] [:error] [pid 23250:tid 23253] [client 20.111.59.164:8950] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-freya.php"] [unique_id "ackvUJxrpj-dQjy1cvoFXQAAAkE"]
[Sun Mar 29 21:55:29.282173 2026] [:error] [pid 23168:tid 23202] [client 20.111.59.164:42381] [client 20.111.59.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Requests/Text/admin.php"] [unique_id "ackvUWP8p0yRL8ot_2-dRwAAAgU"]
[Sun Mar 29 21:55:30.179814 2026] [:error] [pid 23168:tid 23215] [client 20.111.59.164:29980] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class19.php"] [unique_id "ackvUmP8p0yRL8ot_2-dSQAAAhI"]
[Sun Mar 29 21:55:31.271206 2026] [:error] [pid 23250:tid 23254] [client 20.111.59.164:1771] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class19.php"] [unique_id "ackvU5xrpj-dQjy1cvoFZQAAAkI"]
[Sun Mar 29 21:55:32.671300 2026] [:error] [pid 32254:tid 32286] [client 20.111.59.164:41132] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class19.php"] [unique_id "ackvVKug2IHuyGgCTn9c1AAAABY"]
[Sun Mar 29 21:55:33.760478 2026] [:error] [pid 23168:tid 23201] [client 20.111.59.164:41105] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class19.php"] [unique_id "ackvVWP8p0yRL8ot_2-dTwAAAgQ"]
[Sun Mar 29 21:55:34.941029 2026] [:error] [pid 23168:tid 23207] [client 20.111.59.164:8938] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class20.php"] [unique_id "ackvVmP8p0yRL8ot_2-dUwAAAgo"]
[Sun Mar 29 21:55:36.320785 2026] [:error] [pid 23168:tid 23198] [client 20.111.59.164:41935] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class20.php"] [unique_id "ackvWGP8p0yRL8ot_2-dVgAAAgE"]
[Sun Mar 29 21:55:37.071270 2026] [:error] [pid 23137:tid 23140] [client 20.111.59.164:23882] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class20.php"] [unique_id "ackvWRaWQa7LdZ_qGFb7VgAAAYE"]
[Sun Mar 29 21:55:37.847197 2026] [:error] [pid 23284:tid 23306] [client 20.111.59.164:41962] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class20.php"] [unique_id "ackvWYzBujdPHsq7wySfUwAAApQ"]
[Sun Mar 29 21:55:38.486532 2026] [:error] [pid 23167:tid 23189] [client 20.111.59.164:23096] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/X7x.php"] [unique_id "ackvWhIAHJCFaHff3_fBRQAAAdM"]
[Sun Mar 29 21:55:39.773820 2026] [:error] [pid 32359:tid 32361] [client 20.111.59.164:42405] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/X7x.php"] [unique_id "ackvWwMb8G3UzfQP3WgvjAAAAMA"]
[Sun Mar 29 21:55:40.750761 2026] [:error] [pid 23167:tid 23184] [client 20.111.59.164:16742] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/X7x.php"] [unique_id "ackvXBIAHJCFaHff3_fBRgAAAc4"]
[Sun Mar 29 21:55:41.306320 2026] [:error] [pid 32254:tid 32283] [client 20.111.59.164:42305] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/X7x.php"] [unique_id "ackvXaug2IHuyGgCTn9c1wAAABM"]
[Sun Mar 29 21:55:42.308566 2026] [:error] [pid 23284:tid 23300] [client 20.111.59.164:30364] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ctex1.php"] [unique_id "ackvXozBujdPHsq7wySfZAAAAo4"]
[Sun Mar 29 21:55:43.865195 2026] [:error] [pid 23168:tid 23210] [client 20.111.59.164:1711] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ctex1.php"] [unique_id "ackvX2P8p0yRL8ot_2-dXwAAAg0"]
[Sun Mar 29 21:55:45.036475 2026] [:error] [pid 32255:tid 32298] [client 20.111.59.164:1668] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ctex1.php"] [unique_id "ackvYWnfn-AtRoMbquzuWgAAAEc"]
[Sun Mar 29 21:55:45.626447 2026] [:error] [pid 23168:tid 23212] [client 20.111.59.164:23093] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ctex1.php"] [unique_id "ackvYWP8p0yRL8ot_2-dYwAAAg8"]
[Sun Mar 29 21:55:46.385808 2026] [:error] [pid 32359:tid 32375] [client 20.111.59.164:15297] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/d12.php"] [unique_id "ackvYgMb8G3UzfQP3WgvlgAAAM4"]
[Sun Mar 29 21:55:47.352017 2026] [:error] [pid 23284:tid 23295] [client 20.111.59.164:33864] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/d12.php"] [unique_id "ackvY4zBujdPHsq7wySfgAAAAok"]
[Sun Mar 29 21:55:48.345625 2026] [:error] [pid 32359:tid 32379] [client 20.111.59.164:35927] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/d12.php"] [unique_id "ackvZAMb8G3UzfQP3WgvlwAAANI"]
[Sun Mar 29 21:55:48.903973 2026] [:error] [pid 23284:tid 23290] [client 20.111.59.164:1494] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/d12.php"] [unique_id "ackvZIzBujdPHsq7wySfhgAAAoQ"]
[Sun Mar 29 21:55:49.573506 2026] [:error] [pid 23168:tid 23208] [client 20.111.59.164:28466] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/menu.php"] [unique_id "ackvZWP8p0yRL8ot_2-daAAAAgs"]
[Sun Mar 29 21:55:50.231242 2026] [:error] [pid 23167:tid 23176] [client 20.111.59.164:1528] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/menu.php"] [unique_id "ackvZhIAHJCFaHff3_fBUAAAAcY"]
[Sun Mar 29 21:55:51.560293 2026] [:error] [pid 23284:tid 23294] [client 20.111.59.164:43361] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/menu.php"] [unique_id "ackvZ4zBujdPHsq7wySfkwAAAog"]
[Sun Mar 29 21:55:52.574525 2026] [:error] [pid 23284:tid 23307] [client 20.111.59.164:21503] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/menu.php"] [unique_id "ackvaIzBujdPHsq7wySflwAAApU"]
[Sun Mar 29 21:55:54.020897 2026] [:error] [pid 32257:tid 32324] [client 20.111.59.164:24713] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sf.php"] [unique_id "ackvaiE3TArOFrUtgWo1EQAAAIY"]
[Sun Mar 29 21:55:55.239084 2026] [:error] [pid 23284:tid 23292] [client 20.111.59.164:28470] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sf.php"] [unique_id "ackva4zBujdPHsq7wySfmQAAAoY"]
[Sun Mar 29 21:55:55.982992 2026] [:error] [pid 23168:tid 23202] [client 20.111.59.164:14011] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sf.php"] [unique_id "ackva2P8p0yRL8ot_2-ddAAAAgU"]
[Sun Mar 29 21:55:56.993885 2026] [:error] [pid 32254:tid 32278] [client 20.111.59.164:42421] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sf.php"] [unique_id "ackvbKug2IHuyGgCTn9c3AAAAA4"]
[Sun Mar 29 21:55:57.730176 2026] [:error] [pid 32257:tid 32328] [client 20.111.59.164:13978] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lock360.php"] [unique_id "ackvbSE3TArOFrUtgWo1JgAAAIo"]
[Sun Mar 29 21:55:59.507110 2026] [:error] [pid 23284:tid 23309] [client 20.111.59.164:24720] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lock360.php"] [unique_id "ackvb4zBujdPHsq7wySfqAAAApc"]
[Sun Mar 29 21:56:00.412382 2026] [:error] [pid 23284:tid 23302] [client 20.111.59.164:43284] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lock360.php"] [unique_id "ackvcIzBujdPHsq7wySfrwAAApA"]
[Sun Mar 29 21:56:01.125955 2026] [:error] [pid 23284:tid 23293] [client 20.111.59.164:24747] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lock360.php"] [unique_id "ackvcYzBujdPHsq7wySfswAAAoc"]
[Sun Mar 29 21:56:02.170970 2026] [:error] [pid 23168:tid 23219] [client 20.111.59.164:28438] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/thoms.php"] [unique_id "ackvcmP8p0yRL8ot_2-dewAAAhY"]
[Sun Mar 29 21:56:02.830614 2026] [:error] [pid 8818:tid 8832] [client 20.111.59.164:15340] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/thoms.php"] [unique_id "ackvciCDvotZNSF0FBrgHgAAAUo"]
[Sun Mar 29 21:56:03.707853 2026] [:error] [pid 23168:tid 23210] [client 20.111.59.164:1137] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/thoms.php"] [unique_id "ackvc2P8p0yRL8ot_2-dgAAAAg0"]
[Sun Mar 29 21:56:04.396178 2026] [:error] [pid 32255:tid 32312] [client 20.111.59.164:35919] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/thoms.php"] [unique_id "ackvdGnfn-AtRoMbquzuawAAAFU"]
[Sun Mar 29 21:56:05.152215 2026] [:error] [pid 32257:tid 32330] [client 20.111.59.164:43383] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/O-Simple.php"] [unique_id "ackvdSE3TArOFrUtgWo1NQAAAIw"]
[Sun Mar 29 21:56:05.768039 2026] [:error] [pid 23167:tid 23178] [client 20.111.59.164:24730] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/O-Simple.php"] [unique_id "ackvdRIAHJCFaHff3_fBXwAAAcg"]
[Sun Mar 29 21:56:06.670702 2026] [:error] [pid 8818:tid 8845] [client 20.111.59.164:23902] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/O-Simple.php"] [unique_id "ackvdiCDvotZNSF0FBrgIAAAAVc"]
[Sun Mar 29 21:56:08.050112 2026] [:error] [pid 23284:tid 23292] [client 20.111.59.164:42801] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/O-Simple.php"] [unique_id "ackveIzBujdPHsq7wySfyAAAAoY"]
[Sun Mar 29 21:56:09.469340 2026] [:error] [pid 23284:tid 23287] [client 20.111.59.164:33917] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class-.php"] [unique_id "ackveYzBujdPHsq7wySfywAAAoE"]
[Sun Mar 29 21:56:10.895353 2026] [:error] [pid 23250:tid 23252] [client 20.111.59.164:43349] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class-.php"] [unique_id "ackvepxrpj-dQjy1cvoFhQAAAkA"]
[Sun Mar 29 21:56:11.512942 2026] [:error] [pid 32257:tid 32318] [client 20.111.59.164:24301] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class-.php"] [unique_id "ackveyE3TArOFrUtgWo1OgAAAIA"]
[Sun Mar 29 21:56:12.077205 2026] [:error] [pid 32257:tid 32319] [client 20.111.59.164:35923] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class-.php"] [unique_id "ackvfCE3TArOFrUtgWo1PAAAAIE"]
[Sun Mar 29 21:56:12.696681 2026] [:error] [pid 23284:tid 23288] [client 20.111.59.164:1522] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/akcc.php"] [unique_id "ackvfIzBujdPHsq7wySf2AAAAoI"]
[Sun Mar 29 21:56:13.427034 2026] [:error] [pid 23284:tid 23308] [client 20.111.59.164:33912] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/akcc.php"] [unique_id "ackvfYzBujdPHsq7wySf3AAAApY"]
[Sun Mar 29 21:56:14.135059 2026] [:error] [pid 23284:tid 23303] [client 20.111.59.164:30376] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/akcc.php"] [unique_id "ackvfozBujdPHsq7wySf4QAAApE"]
[Sun Mar 29 21:56:14.636731 2026] [:error] [pid 8818:tid 8843] [client 20.111.59.164:43338] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/akcc.php"] [unique_id "ackvfiCDvotZNSF0FBrgJgAAAVU"]
[Sun Mar 29 21:56:15.812664 2026] [:error] [pid 32359:tid 32369] [client 20.111.59.164:24752] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ee.php"] [unique_id "ackvfwMb8G3UzfQP3WgvowAAAMg"]
[Sun Mar 29 21:56:16.499053 2026] [:error] [pid 32359:tid 32370] [client 20.111.59.164:1101] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ee.php"] [unique_id "ackvgAMb8G3UzfQP3WgvpQAAAMk"]
[Sun Mar 29 21:56:17.337552 2026] [:error] [pid 23284:tid 23289] [client 20.111.59.164:42385] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ee.php"] [unique_id "ackvgYzBujdPHsq7wySf9wAAAoM"]
[Sun Mar 29 21:56:18.069022 2026] [:error] [pid 23284:tid 23310] [client 20.111.59.164:1154] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ee.php"] [unique_id "ackvgozBujdPHsq7wySgBQAAApg"]
[Sun Mar 29 21:56:18.569881 2026] [:error] [pid 32254:tid 32279] [client 20.111.59.164:1519] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/epinyins.php"] [unique_id "ackvgqug2IHuyGgCTn9c6AAAAA8"]
[Sun Mar 29 21:56:19.166949 2026] [:error] [pid 23284:tid 23294] [client 20.111.59.164:1499] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/epinyins.php"] [unique_id "ackvg4zBujdPHsq7wySgFwAAAog"]
[Sun Mar 29 21:56:19.815699 2026] [:error] [pid 23284:tid 23286] [client 20.111.59.164:42937] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/epinyins.php"] [unique_id "ackvg4zBujdPHsq7wySgIgAAAoA"]
[Sun Mar 29 21:56:20.784366 2026] [:error] [pid 23284:tid 23291] [client 20.111.59.164:7651] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/epinyins.php"] [unique_id "ackvhIzBujdPHsq7wySgMQAAAoU"]
[Sun Mar 29 21:56:21.664912 2026] [:error] [pid 32255:tid 32299] [client 20.111.59.164:1394] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/i1.php"] [unique_id "ackvhWnfn-AtRoMbquzudAAAAEg"]
[Sun Mar 29 21:56:22.567844 2026] [:error] [pid 32255:tid 32302] [client 20.111.59.164:1394] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/i1.php"] [unique_id "ackvhmnfn-AtRoMbquzudgAAAEs"]
[Sun Mar 29 21:56:23.135665 2026] [:error] [pid 23167:tid 23184] [client 20.111.59.164:1708] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/i1.php"] [unique_id "ackvhxIAHJCFaHff3_fBbQAAAc4"]
[Sun Mar 29 21:56:23.991369 2026] [:error] [pid 23167:tid 23186] [client 20.111.59.164:43368] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/i1.php"] [unique_id "ackvhxIAHJCFaHff3_fBcgAAAdA"]
[Sun Mar 29 21:56:24.590743 2026] [:error] [pid 23250:tid 23268] [client 20.111.59.164:1361] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vv.php"] [unique_id "ackviJxrpj-dQjy1cvoFjQAAAlA"]
[Sun Mar 29 21:56:25.191291 2026] [proxy_fcgi:error] [pid 23250:tid 23266] [client 20.111.59.164:7647] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 21:56:25.430291 2026] [proxy_fcgi:error] [pid 23250:tid 23255] [client 20.111.59.164:7647] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 21:56:45.278684 2026] [proxy_fcgi:error] [pid 32255:tid 32304] [client 20.111.59.164:32382] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 21:56:46.069158 2026] [proxy_fcgi:error] [pid 32255:tid 32296] [client 20.111.59.164:32382] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 21:56:46.308771 2026] [proxy_fcgi:error] [pid 32255:tid 32310] [client 20.111.59.164:32382] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 21:56:46.623345 2026] [proxy_fcgi:error] [pid 32255:tid 32311] [client 20.111.59.164:32382] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 21:56:46.875381 2026] [proxy_fcgi:error] [pid 32255:tid 32313] [client 20.111.59.164:32382] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 21:56:47.235758 2026] [proxy_fcgi:error] [pid 32255:tid 32297] [client 20.111.59.164:32382] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 21:56:47.625714 2026] [proxy_fcgi:error] [pid 32255:tid 32314] [client 20.111.59.164:32382] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 21:56:47.921258 2026] [proxy_fcgi:error] [pid 32255:tid 32303] [client 20.111.59.164:32382] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 21:56:48.197793 2026] [proxy_fcgi:error] [pid 32255:tid 32308] [client 20.111.59.164:32382] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 21:56:48.552543 2026] [:error] [pid 32255:tid 32306] [client 20.111.59.164:32382] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/k.php"] [unique_id "ackvoGnfn-AtRoMbquzupQAAAE8"]
[Sun Mar 29 21:56:49.120061 2026] [:error] [pid 23137:tid 23155] [client 20.111.59.164:24319] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/k.php"] [unique_id "ackvoRaWQa7LdZ_qGFb7dAAAAZA"]
[Sun Mar 29 21:56:49.795632 2026] [:error] [pid 32255:tid 32304] [client 20.111.59.164:23932] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/k.php"] [unique_id "ackvoWnfn-AtRoMbquzuqAAAAE0"]
[Sun Mar 29 21:56:50.473927 2026] [:error] [pid 23167:tid 23188] [client 20.111.59.164:21441] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/k.php"] [unique_id "ackvohIAHJCFaHff3_fBjgAAAdI"]
[Sun Mar 29 21:56:51.127058 2026] [:error] [pid 32255:tid 32294] [client 20.111.59.164:1706] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/goat.php"] [unique_id "ackvo2nfn-AtRoMbquzurAAAAEM"]
[Sun Mar 29 21:56:52.345484 2026] [:error] [pid 32257:tid 32338] [client 20.111.59.164:41118] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/goat.php"] [unique_id "ackvpCE3TArOFrUtgWo1YgAAAJQ"]
[Sun Mar 29 21:56:53.383098 2026] [:error] [pid 32257:tid 32332] [client 20.111.59.164:35952] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/goat.php"] [unique_id "ackvpSE3TArOFrUtgWo1ZAAAAI4"]
[Sun Mar 29 21:56:53.953228 2026] [:error] [pid 23284:tid 23287] [client 20.111.59.164:24285] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/goat.php"] [unique_id "ackvpYzBujdPHsq7wySg1gAAAoE"]
[Sun Mar 29 21:56:54.966437 2026] [:error] [pid 32257:tid 32325] [client 20.111.59.164:24738] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x.php"] [unique_id "ackvpiE3TArOFrUtgWo1bgAAAIc"]
[Sun Mar 29 21:56:55.796825 2026] [:error] [pid 23284:tid 23310] [client 20.111.59.164:24292] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x.php"] [unique_id "ackvp4zBujdPHsq7wySg2QAAApg"]
[Sun Mar 29 21:56:56.945579 2026] [:error] [pid 32257:tid 32332] [client 20.111.59.164:1272] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x.php"] [unique_id "ackvqCE3TArOFrUtgWo1dAAAAI4"]
[Sun Mar 29 21:56:57.689054 2026] [:error] [pid 32255:tid 32311] [client 20.111.59.164:24710] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x.php"] [unique_id "ackvqWnfn-AtRoMbquzuswAAAFQ"]
[Sun Mar 29 21:56:58.565164 2026] [:error] [pid 32359:tid 32373] [client 20.111.59.164:24740] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sbhu.php"] [unique_id "ackvqgMb8G3UzfQP3WgvxAAAAMw"]
[Sun Mar 29 21:56:59.794311 2026] [:error] [pid 32257:tid 32339] [client 20.111.59.164:17598] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sbhu.php"] [unique_id "ackvqyE3TArOFrUtgWo1fQAAAJU"]
[Sun Mar 29 21:57:01.135327 2026] [:error] [pid 23284:tid 23306] [client 20.111.59.164:33899] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sbhu.php"] [unique_id "ackvrYzBujdPHsq7wySg4gAAApQ"]
[Sun Mar 29 21:57:01.722279 2026] [:error] [pid 8818:tid 8826] [client 20.111.59.164:19895] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sbhu.php"] [unique_id "ackvrSCDvotZNSF0FBrgOQAAAUQ"]
[Sun Mar 29 21:57:03.954393 2026] [:error] [pid 23167:tid 23172] [client 20.111.59.164:23095] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-update.php"] [unique_id "ackvrxIAHJCFaHff3_fBnwAAAcI"]
[Sun Mar 29 21:57:04.717515 2026] [:error] [pid 23284:tid 23301] [client 20.111.59.164:34875] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-update.php"] [unique_id "ackvsIzBujdPHsq7wySg8gAAAo8"]
[Sun Mar 29 21:57:05.605519 2026] [:error] [pid 23137:tid 23145] [client 20.111.59.164:35961] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-update.php"] [unique_id "ackvsRaWQa7LdZ_qGFb7egAAAYY"]
[Sun Mar 29 21:57:06.732905 2026] [:error] [pid 32257:tid 32327] [client 20.111.59.164:17423] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-update.php"] [unique_id "ackvsiE3TArOFrUtgWo1kgAAAIk"]
[Sun Mar 29 21:57:07.608223 2026] [:error] [pid 32255:tid 32293] [client 20.111.59.164:42426] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/alpha.php"] [unique_id "ackvs2nfn-AtRoMbquzu0AAAAEI"]
[Sun Mar 29 21:57:08.529864 2026] [:error] [pid 32255:tid 32291] [client 20.111.59.164:34842] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/alpha.php"] [unique_id "ackvtGnfn-AtRoMbquzu1wAAAEA"]
[Sun Mar 29 21:57:09.551337 2026] [:error] [pid 32255:tid 32310] [client 20.111.59.164:20289] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/alpha.php"] [unique_id "ackvtWnfn-AtRoMbquzu3gAAAFM"]
[Sun Mar 29 21:57:10.475287 2026] [:error] [pid 32254:tid 32282] [client 20.111.59.164:34836] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/alpha.php"] [unique_id "ackvtqug2IHuyGgCTn9c7gAAABI"]
[Sun Mar 29 21:57:11.565892 2026] [:error] [pid 23284:tid 23286] [client 20.111.59.164:1410] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/666.php"] [unique_id "ackvt4zBujdPHsq7wySg_QAAAoA"]
[Sun Mar 29 21:57:12.486741 2026] [:error] [pid 23284:tid 23301] [client 20.111.59.164:17439] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/666.php"] [unique_id "ackvuIzBujdPHsq7wyShBAAAAo8"]
[Sun Mar 29 21:57:13.256039 2026] [:error] [pid 23284:tid 23300] [client 20.111.59.164:13363] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/666.php"] [unique_id "ackvuYzBujdPHsq7wyShCgAAAo4"]
[Sun Mar 29 21:57:14.515292 2026] [:error] [pid 23137:tid 23157] [client 20.111.59.164:11491] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/666.php"] [unique_id "ackvuhaWQa7LdZ_qGFb7ewAAAZI"]
[Sun Mar 29 21:57:15.287204 2026] [:error] [pid 32257:tid 32321] [client 20.111.59.164:31297] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fff.php"] [unique_id "ackvuyE3TArOFrUtgWo1mgAAAIM"]
[Sun Mar 29 21:57:16.691829 2026] [:error] [pid 23284:tid 23289] [client 20.111.59.164:19667] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fff.php"] [unique_id "ackvvIzBujdPHsq7wyShGAAAAoM"]
[Sun Mar 29 21:57:17.828619 2026] [:error] [pid 32254:tid 32278] [client 20.111.59.164:1451] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fff.php"] [unique_id "ackvvaug2IHuyGgCTn9c8wAAAA4"]
[Sun Mar 29 21:57:18.498834 2026] [:error] [pid 23137:tid 23139] [client 20.111.59.164:21821] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fff.php"] [unique_id "ackvvhaWQa7LdZ_qGFb7fAAAAYA"]
[Sun Mar 29 21:57:19.380362 2026] [:error] [pid 32254:tid 32287] [client 20.111.59.164:21818] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aa.php"] [unique_id "ackvv6ug2IHuyGgCTn9c9QAAABc"]
[Sun Mar 29 21:57:20.438917 2026] [:error] [pid 32255:tid 32304] [client 20.111.59.164:34822] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aa.php"] [unique_id "ackvwGnfn-AtRoMbquzu4QAAAE0"]
[Sun Mar 29 21:57:21.293833 2026] [:error] [pid 32359:tid 32381] [client 20.111.59.164:31302] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aa.php"] [unique_id "ackvwQMb8G3UzfQP3WgvyAAAANQ"]
[Sun Mar 29 21:57:22.273007 2026] [:error] [pid 23168:tid 23208] [client 20.111.59.164:31338] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aa.php"] [unique_id "ackvwmP8p0yRL8ot_2-dpwAAAgs"]
[Sun Mar 29 21:57:23.688331 2026] [:error] [pid 23284:tid 23298] [client 20.111.59.164:11473] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xc.php"] [unique_id "ackvw4zBujdPHsq7wyShJAAAAow"]
[Sun Mar 29 21:57:24.412657 2026] [:error] [pid 32255:tid 32293] [client 20.111.59.164:30466] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xc.php"] [unique_id "ackvxGnfn-AtRoMbquzu5QAAAEI"]
[Sun Mar 29 21:57:25.350305 2026] [:error] [pid 32254:tid 32276] [client 20.111.59.164:24114] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xc.php"] [unique_id "ackvxaug2IHuyGgCTn9c-wAAAAw"]
[Sun Mar 29 21:57:26.069346 2026] [:error] [pid 23168:tid 23203] [client 20.111.59.164:20293] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xc.php"] [unique_id "ackvxmP8p0yRL8ot_2-drQAAAgY"]
[Sun Mar 29 21:57:26.953627 2026] [:error] [pid 23168:tid 23210] [client 20.111.59.164:31325] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ar.php"] [unique_id "ackvxmP8p0yRL8ot_2-drgAAAg0"]
[Sun Mar 29 21:57:27.718133 2026] [:error] [pid 32359:tid 32366] [client 20.111.59.164:11479] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ar.php"] [unique_id "ackvxwMb8G3UzfQP3WgvzQAAAMU"]
[Sun Mar 29 21:57:28.459354 2026] [:error] [pid 32255:tid 32314] [client 20.111.59.164:24075] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ar.php"] [unique_id "ackvyGnfn-AtRoMbquzu8AAAAFc"]
[Sun Mar 29 21:57:29.208569 2026] [:error] [pid 32255:tid 32294] [client 20.111.59.164:1914] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ar.php"] [unique_id "ackvyWnfn-AtRoMbquzu8gAAAEM"]
[Sun Mar 29 21:57:29.907430 2026] [:error] [pid 32255:tid 32298] [client 20.111.59.164:1891] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/yanz.php"] [unique_id "ackvyWnfn-AtRoMbquzu9QAAAEc"]
[Sun Mar 29 21:57:30.774870 2026] [:error] [pid 23250:tid 23274] [client 20.111.59.164:47684] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/yanz.php"] [unique_id "ackvypxrpj-dQjy1cvoFvQAAAlY"]
[Sun Mar 29 21:57:31.937627 2026] [:error] [pid 23137:tid 23151] [client 20.111.59.164:47720] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/yanz.php"] [unique_id "ackvyxaWQa7LdZ_qGFb7gQAAAYw"]
[Sun Mar 29 21:57:32.493490 2026] [:error] [pid 23284:tid 23302] [client 20.111.59.164:16046] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/yanz.php"] [unique_id "ackvzIzBujdPHsq7wyShLAAAApA"]
[Sun Mar 29 21:57:33.132405 2026] [:error] [pid 32254:tid 32288] [client 20.111.59.164:16065] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "ackvzaug2IHuyGgCTn9c_gAAABg"]
[Sun Mar 29 21:57:33.782168 2026] [:error] [pid 23284:tid 23295] [client 20.111.59.164:20224] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "ackvzYzBujdPHsq7wyShNAAAAok"]
[Sun Mar 29 21:57:34.569309 2026] [:error] [pid 32255:tid 32314] [client 20.111.59.164:30580] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "ackvzmnfn-AtRoMbquzvDAAAAFc"]
[Sun Mar 29 21:57:35.345766 2026] [:error] [pid 23284:tid 23302] [client 20.111.59.164:38072] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "ackvz4zBujdPHsq7wyShOQAAApA"]
[Sun Mar 29 21:57:36.275800 2026] [:error] [pid 32257:tid 32342] [client 20.111.59.164:20259] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/333.php"] [unique_id "ackv0CE3TArOFrUtgWo1rgAAAJg"]
[Sun Mar 29 21:57:37.130920 2026] [:error] [pid 32255:tid 32308] [client 20.111.59.164:38066] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/333.php"] [unique_id "ackv0Wnfn-AtRoMbquzvFAAAAFE"]
[Sun Mar 29 21:57:38.107616 2026] [:error] [pid 8818:tid 8840] [client 20.111.59.164:31319] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/333.php"] [unique_id "ackv0iCDvotZNSF0FBrgUwAAAVI"]
[Sun Mar 29 21:57:38.685820 2026] [:error] [pid 23284:tid 23303] [client 20.111.59.164:30491] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/333.php"] [unique_id "ackv0ozBujdPHsq7wyShUQAAApE"]
[Sun Mar 29 21:57:39.334220 2026] [:error] [pid 23168:tid 23212] [client 20.111.59.164:30498] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ut.php"] [unique_id "ackv02P8p0yRL8ot_2-duwAAAg8"]
[Sun Mar 29 21:57:40.029903 2026] [:error] [pid 23250:tid 23252] [client 20.111.59.164:30550] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ut.php"] [unique_id "ackv1Jxrpj-dQjy1cvoFxAAAAkA"]
[Sun Mar 29 21:57:40.942402 2026] [:error] [pid 23137:tid 23156] [client 20.111.59.164:15147] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ut.php"] [unique_id "ackv1BaWQa7LdZ_qGFb7hQAAAZE"]
[Sun Mar 29 21:57:41.523335 2026] [:error] [pid 23284:tid 23302] [client 20.111.59.164:30555] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ut.php"] [unique_id "ackv1YzBujdPHsq7wyShWgAAApA"]
[Sun Mar 29 21:57:43.174664 2026] [:error] [pid 32255:tid 32308] [client 20.111.59.164:37634] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wfile.php"] [unique_id "ackv12nfn-AtRoMbquzvIAAAAFE"]
[Sun Mar 29 21:57:43.964293 2026] [:error] [pid 32257:tid 32337] [client 20.111.59.164:15166] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wfile.php"] [unique_id "ackv1yE3TArOFrUtgWo1sgAAAJM"]
[Sun Mar 29 21:57:44.760117 2026] [:error] [pid 23137:tid 23139] [client 20.111.59.164:37643] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wfile.php"] [unique_id "ackv2BaWQa7LdZ_qGFb7iQAAAYA"]
[Sun Mar 29 21:57:45.418888 2026] [:error] [pid 32254:tid 32265] [client 20.111.59.164:38572] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wfile.php"] [unique_id "ackv2aug2IHuyGgCTn9dAgAAAAE"]
[Sun Mar 29 21:57:46.119546 2026] [:error] [pid 23137:tid 23154] [client 20.111.59.164:13790] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vee.php"] [unique_id "ackv2haWQa7LdZ_qGFb7jwAAAY8"]
[Sun Mar 29 21:57:47.795694 2026] [:error] [pid 23168:tid 23210] [client 20.111.59.164:13796] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vee.php"] [unique_id "ackv22P8p0yRL8ot_2-dzAAAAg0"]
[Sun Mar 29 21:57:48.560404 2026] [proxy_fcgi:error] [pid 23168:tid 23209] [client 20.111.59.164:37639] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 21:57:48.951374 2026] [proxy_fcgi:error] [pid 23168:tid 23218] [client 20.111.59.164:37639] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 21:57:49.228445 2026] [proxy_fcgi:error] [pid 23168:tid 23201] [client 20.111.59.164:37639] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 21:57:49.467108 2026] [proxy_fcgi:error] [pid 23168:tid 23206] [client 20.111.59.164:37639] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 21:57:49.834720 2026] [proxy_fcgi:error] [pid 23168:tid 23197] [client 20.111.59.164:37639] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 21:57:50.252622 2026] [proxy_fcgi:error] [pid 23168:tid 23203] [client 20.111.59.164:37639] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 21:57:50.608822 2026] [proxy_fcgi:error] [pid 23168:tid 23216] [client 20.111.59.164:37639] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 21:57:50.878093 2026] [proxy_fcgi:error] [pid 23168:tid 23208] [client 20.111.59.164:37639] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 21:57:51.146404 2026] [proxy_fcgi:error] [pid 23168:tid 23221] [client 20.111.59.164:37639] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 21:57:51.431128 2026] [proxy_fcgi:error] [pid 23168:tid 23207] [client 20.111.59.164:37639] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 21:57:51.991475 2026] [:error] [pid 23168:tid 23210] [client 20.111.59.164:37639] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/main.php"] [unique_id "ackv32P8p0yRL8ot_2-d3QAAAg0"]
[Sun Mar 29 21:57:52.831429 2026] [:error] [pid 32257:tid 32325] [client 20.111.59.164:40703] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/main.php"] [unique_id "ackv4CE3TArOFrUtgWo1yAAAAIc"]
[Sun Mar 29 21:57:53.618583 2026] [:error] [pid 32255:tid 32297] [client 20.111.59.164:30042] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/main.php"] [unique_id "ackv4Wnfn-AtRoMbquzvMQAAAEY"]
[Sun Mar 29 21:57:54.394584 2026] [:error] [pid 23284:tid 23303] [client 20.111.59.164:15170] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/main.php"] [unique_id "ackv4ozBujdPHsq7wyShaQAAApE"]
[Sun Mar 29 21:57:55.018574 2026] [:error] [pid 32255:tid 32291] [client 20.111.59.164:15197] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/plugins.php"] [unique_id "ackv42nfn-AtRoMbquzvMwAAAEA"]
[Sun Mar 29 21:57:56.602570 2026] [:error] [pid 32257:tid 32338] [client 20.111.59.164:15199] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/plugins.php"] [unique_id "ackv5CE3TArOFrUtgWo11gAAAJQ"]
[Sun Mar 29 21:57:57.491498 2026] [:error] [pid 32254:tid 32276] [client 20.111.59.164:35142] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/plugins.php"] [unique_id "ackv5aug2IHuyGgCTn9dBwAAAAw"]
[Sun Mar 29 21:57:58.646009 2026] [:error] [pid 32359:tid 32369] [client 20.111.59.164:24301] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/plugins.php"] [unique_id "ackv5gMb8G3UzfQP3Wgv1QAAAMg"]
[Sun Mar 29 21:57:59.306173 2026] [:error] [pid 32257:tid 32321] [client 20.111.59.164:9742] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/filename.php"] [unique_id "ackv5yE3TArOFrUtgWo15QAAAIM"]
[Sun Mar 29 21:58:01.315230 2026] [:error] [pid 23168:tid 23204] [client 20.111.59.164:17518] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/filename.php"] [unique_id "ackv6WP8p0yRL8ot_2-d3gAAAgc"]
[Sun Mar 29 21:58:02.525126 2026] [:error] [pid 23284:tid 23293] [client 20.111.59.164:23004] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/filename.php"] [unique_id "ackv6ozBujdPHsq7wyShawAAAoc"]
[Sun Mar 29 21:58:04.314053 2026] [:error] [pid 32257:tid 32337] [client 20.111.59.164:15129] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/filename.php"] [unique_id "ackv7CE3TArOFrUtgWo18wAAAJM"]
[Sun Mar 29 21:58:04.846975 2026] [:error] [pid 23168:tid 23210] [client 20.111.59.164:30045] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/adminer.php"] [unique_id "ackv7GP8p0yRL8ot_2-d5wAAAg0"]
[Sun Mar 29 21:58:05.663631 2026] [:error] [pid 32255:tid 32310] [client 20.111.59.164:37030] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/adminer.php"] [unique_id "ackv7Wnfn-AtRoMbquzvOgAAAFM"]
[Sun Mar 29 21:58:06.629676 2026] [:error] [pid 32255:tid 32312] [client 20.111.59.164:7872] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/adminer.php"] [unique_id "ackv7mnfn-AtRoMbquzvPQAAAFU"]
[Sun Mar 29 21:58:07.401928 2026] [:error] [pid 32255:tid 32298] [client 20.111.59.164:10800] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/adminer.php"] [unique_id "ackv72nfn-AtRoMbquzvRQAAAEc"]
[Sun Mar 29 21:58:08.477875 2026] [:error] [pid 32257:tid 32340] [client 20.111.59.164:15124] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "ackv8CE3TArOFrUtgWo1-AAAAJY"]
[Sun Mar 29 21:58:09.122354 2026] [:error] [pid 32255:tid 32313] [client 20.111.59.164:40647] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "ackv8Wnfn-AtRoMbquzvTAAAAFY"]
[Sun Mar 29 21:58:11.311604 2026] [:error] [pid 32254:tid 32265] [client 20.111.59.164:36899] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "ackv86ug2IHuyGgCTn9dDgAAAAE"]
[Sun Mar 29 21:58:12.037557 2026] [:error] [pid 8818:tid 8839] [client 20.111.59.164:55665] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "ackv9CCDvotZNSF0FBrgYgAAAVE"]
[Sun Mar 29 21:58:12.760872 2026] [:error] [pid 23168:tid 23204] [client 20.111.59.164:15117] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/adminfuns.php"] [unique_id "ackv9GP8p0yRL8ot_2-d8gAAAgc"]
[Sun Mar 29 21:58:13.377957 2026] [:error] [pid 23168:tid 23215] [client 20.111.59.164:30566] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/adminfuns.php"] [unique_id "ackv9WP8p0yRL8ot_2-d9QAAAhI"]
[Sun Mar 29 21:58:14.480190 2026] [:error] [pid 8818:tid 8829] [client 20.111.59.164:7907] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/adminfuns.php"] [unique_id "ackv9iCDvotZNSF0FBrgZQAAAUc"]
[Sun Mar 29 21:58:15.153004 2026] [:error] [pid 32257:tid 32339] [client 20.111.59.164:23039] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/adminfuns.php"] [unique_id "ackv9yE3TArOFrUtgWo1_QAAAJU"]
[Sun Mar 29 21:58:15.830283 2026] [:error] [pid 32255:tid 32299] [client 20.111.59.164:23025] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/adminfuns.php"] [unique_id "ackv92nfn-AtRoMbquzvUgAAAEg"]
[Sun Mar 29 21:58:16.578491 2026] [:error] [pid 32255:tid 32298] [client 20.111.59.164:38066] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/adminfuns.php"] [unique_id "ackv-Gnfn-AtRoMbquzvVAAAAEc"]
[Sun Mar 29 21:58:17.414205 2026] [:error] [pid 32257:tid 32323] [client 20.111.59.164:36992] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/adminfuns.php"] [unique_id "ackv-SE3TArOFrUtgWo2AgAAAIU"]
[Sun Mar 29 21:58:18.289619 2026] [:error] [pid 32254:tid 32273] [client 20.111.59.164:15199] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/adminfuns.php"] [unique_id "ackv-qug2IHuyGgCTn9dFQAAAAk"]
[Sun Mar 29 21:58:19.210444 2026] [:error] [pid 32257:tid 32320] [client 20.111.59.164:55621] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-gr.php"] [unique_id "ackv-yE3TArOFrUtgWo2BwAAAII"]
[Sun Mar 29 21:58:19.957737 2026] [:error] [pid 32255:tid 32292] [client 20.111.59.164:30065] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-gr.php"] [unique_id "ackv-2nfn-AtRoMbquzvXgAAAEE"]
[Sun Mar 29 21:58:20.616540 2026] [:error] [pid 23167:tid 23172] [client 20.111.59.164:7570] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-gr.php"] [unique_id "ackv_BIAHJCFaHff3_fBswAAAcI"]
[Sun Mar 29 21:58:21.263897 2026] [:error] [pid 32257:tid 32325] [client 20.111.59.164:30046] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-gr.php"] [unique_id "ackv_SE3TArOFrUtgWo2DAAAAIc"]
[Sun Mar 29 21:58:21.918754 2026] [:error] [pid 32257:tid 32335] [client 20.111.59.164:30583] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-mn.php"] [unique_id "ackv_SE3TArOFrUtgWo2EQAAAJE"]
[Sun Mar 29 21:58:22.538870 2026] [:error] [pid 32257:tid 32324] [client 20.111.59.164:45423] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-mn.php"] [unique_id "ackv_iE3TArOFrUtgWo2FAAAAIY"]
[Sun Mar 29 21:58:23.370928 2026] [:error] [pid 23250:tid 23256] [client 20.111.59.164:38579] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-mn.php"] [unique_id "ackv_5xrpj-dQjy1cvoF0QAAAkQ"]
[Sun Mar 29 21:58:23.977846 2026] [:error] [pid 23284:tid 23296] [client 20.111.59.164:45373] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-mn.php"] [unique_id "ackv_4zBujdPHsq7wyShfgAAAoo"]
[Sun Mar 29 21:58:24.709292 2026] [:error] [pid 8818:tid 8825] [client 20.111.59.164:7611] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-mt.php"] [unique_id "ackwACCDvotZNSF0FBrgbgAAAUM"]
[Sun Mar 29 21:58:25.406445 2026] [:error] [pid 23284:tid 23298] [client 20.111.59.164:35146] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-mt.php"] [unique_id "ackwAYzBujdPHsq7wyShiQAAAow"]
[Sun Mar 29 21:58:26.679053 2026] [:error] [pid 32257:tid 32328] [client 20.111.59.164:38546] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-mt.php"] [unique_id "ackwAiE3TArOFrUtgWo2IgAAAIo"]
[Sun Mar 29 21:58:27.242679 2026] [:error] [pid 32257:tid 32335] [client 20.111.59.164:56616] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-mt.php"] [unique_id "ackwAyE3TArOFrUtgWo2IwAAAJE"]
[Sun Mar 29 21:58:28.037107 2026] [:error] [pid 32257:tid 32329] [client 20.111.59.164:41587] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/shout.php"] [unique_id "ackwBCE3TArOFrUtgWo2JAAAAIs"]
[Sun Mar 29 21:58:28.669642 2026] [:error] [pid 32257:tid 32335] [client 20.111.59.164:33251] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/shout.php"] [unique_id "ackwBCE3TArOFrUtgWo2KgAAAJE"]
[Sun Mar 29 21:58:29.375593 2026] [:error] [pid 32254:tid 32279] [client 20.111.59.164:26472] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/shout.php"] [unique_id "ackwBaug2IHuyGgCTn9dGwAAAA8"]
[Sun Mar 29 21:58:30.179807 2026] [:error] [pid 32255:tid 32294] [client 20.111.59.164:39713] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/shout.php"] [unique_id "ackwBmnfn-AtRoMbquzvbAAAAEM"]
[Sun Mar 29 21:58:31.080016 2026] [:error] [pid 32255:tid 32303] [client 20.111.59.164:39000] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zews.php"] [unique_id "ackwB2nfn-AtRoMbquzvcAAAAEw"]
[Sun Mar 29 21:58:32.943964 2026] [:error] [pid 23284:tid 23304] [client 20.111.59.164:36385] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zews.php"] [unique_id "ackwCIzBujdPHsq7wyShmQAAApI"]
[Sun Mar 29 21:58:33.891128 2026] [:error] [pid 32257:tid 32328] [client 20.111.59.164:28779] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zews.php"] [unique_id "ackwCSE3TArOFrUtgWo2VwAAAIo"]
[Sun Mar 29 21:58:34.675462 2026] [:error] [pid 32255:tid 32313] [client 20.111.59.164:26132] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zews.php"] [unique_id "ackwCmnfn-AtRoMbquzveQAAAFY"]
[Sun Mar 29 21:58:35.389183 2026] [:error] [pid 23284:tid 23301] [client 20.111.59.164:31983] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zwso.php"] [unique_id "ackwC4zBujdPHsq7wyShpQAAAo8"]
[Sun Mar 29 21:58:36.034546 2026] [:error] [pid 32257:tid 32338] [client 20.111.59.164:56630] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zwso.php"] [unique_id "ackwDCE3TArOFrUtgWo2XAAAAJQ"]
[Sun Mar 29 21:58:36.873940 2026] [:error] [pid 23250:tid 23259] [client 20.111.59.164:33266] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zwso.php"] [unique_id "ackwDJxrpj-dQjy1cvoF3wAAAkc"]
[Sun Mar 29 21:58:38.145585 2026] [:error] [pid 23250:tid 23265] [client 20.111.59.164:21856] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zwso.php"] [unique_id "ackwDpxrpj-dQjy1cvoF4gAAAk0"]
[Sun Mar 29 21:58:38.981999 2026] [:error] [pid 23284:tid 23292] [client 20.111.59.164:39032] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lite.php"] [unique_id "ackwDozBujdPHsq7wyShswAAAoY"]
[Sun Mar 29 21:58:40.287004 2026] [:error] [pid 23284:tid 23289] [client 20.111.59.164:35533] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lite.php"] [unique_id "ackwEIzBujdPHsq7wyShvAAAAoM"]
[Sun Mar 29 21:58:41.087048 2026] [:error] [pid 32255:tid 32293] [client 20.111.59.164:21846] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lite.php"] [unique_id "ackwEWnfn-AtRoMbquzvfwAAAEI"]
[Sun Mar 29 21:58:41.954621 2026] [:error] [pid 23284:tid 23304] [client 20.111.59.164:35526] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lite.php"] [unique_id "ackwEYzBujdPHsq7wyShxQAAApI"]
[Sun Mar 29 21:58:42.613752 2026] [:error] [pid 23250:tid 23262] [client 20.111.59.164:28793] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/pp.php"] [unique_id "ackwEpxrpj-dQjy1cvoF5QAAAko"]
[Sun Mar 29 21:58:43.390167 2026] [:error] [pid 32254:tid 32267] [client 20.111.59.164:31995] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/pp.php"] [unique_id "ackwE6ug2IHuyGgCTn9dJAAAAAM"]
[Sun Mar 29 21:58:44.228301 2026] [:error] [pid 32255:tid 32308] [client 20.111.59.164:41561] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/pp.php"] [unique_id "ackwFGnfn-AtRoMbquzvhQAAAFE"]
[Sun Mar 29 21:59:24.157523 2026] [proxy_fcgi:error] [pid 32255:tid 32298] [client 20.111.59.164:15646] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 21:59:24.440538 2026] [proxy_fcgi:error] [pid 32255:tid 32304] [client 20.111.59.164:15646] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 21:59:24.679382 2026] [proxy_fcgi:error] [pid 32255:tid 32306] [client 20.111.59.164:15646] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 21:59:24.964959 2026] [proxy_fcgi:error] [pid 32255:tid 32293] [client 20.111.59.164:15646] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 21:59:25.929160 2026] [proxy_fcgi:error] [pid 32255:tid 32292] [client 20.111.59.164:15646] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 21:59:26.408909 2026] [proxy_fcgi:error] [pid 32255:tid 32310] [client 20.111.59.164:15646] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 21:59:26.646142 2026] [proxy_fcgi:error] [pid 32255:tid 32293] [client 20.111.59.164:15646] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 21:59:26.923801 2026] [proxy_fcgi:error] [pid 32255:tid 32301] [client 20.111.59.164:15646] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 21:59:27.164743 2026] [proxy_fcgi:error] [pid 32255:tid 32291] [client 20.111.59.164:15646] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 21:59:27.648311 2026] [:error] [pid 32255:tid 32313] [client 20.111.59.164:15646] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sx.php"] [unique_id "ackwP2nfn-AtRoMbquzv7QAAAFY"]
[Sun Mar 29 21:59:28.512339 2026] [:error] [pid 23284:tid 23301] [client 20.111.59.164:39801] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sx.php"] [unique_id "ackwQIzBujdPHsq7wySiUwAAAo8"]
[Sun Mar 29 21:59:29.225682 2026] [:error] [pid 23284:tid 23292] [client 20.111.59.164:1983] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sx.php"] [unique_id "ackwQYzBujdPHsq7wySiWAAAAoY"]
[Sun Mar 29 21:59:30.235552 2026] [:error] [pid 23284:tid 23287] [client 20.111.59.164:39745] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sx.php"] [unique_id "ackwQozBujdPHsq7wySiZAAAAoE"]
[Sun Mar 29 21:59:31.108380 2026] [:error] [pid 32255:tid 32297] [client 20.111.59.164:45144] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gelay.php"] [unique_id "ackwQ2nfn-AtRoMbquzv7wAAAEY"]
[Sun Mar 29 21:59:32.155438 2026] [:error] [pid 32255:tid 32298] [client 20.111.59.164:47808] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gelay.php"] [unique_id "ackwRGnfn-AtRoMbquzv9AAAAEc"]
[Sun Mar 29 21:59:33.305893 2026] [:error] [pid 32257:tid 32319] [client 20.111.59.164:53090] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gelay.php"] [unique_id "ackwRSE3TArOFrUtgWo2ugAAAIE"]
[Sun Mar 29 21:59:34.169077 2026] [:error] [pid 32257:tid 32329] [client 20.111.59.164:9818] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gelay.php"] [unique_id "ackwRiE3TArOFrUtgWo2vgAAAIs"]
[Sun Mar 29 21:59:35.418476 2026] [:error] [pid 23284:tid 23309] [client 20.111.59.164:33754] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-class.php"] [unique_id "ackwR4zBujdPHsq7wySihgAAApc"]
[Sun Mar 29 21:59:36.469382 2026] [:error] [pid 23284:tid 23301] [client 20.111.59.164:41905] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-class.php"] [unique_id "ackwSIzBujdPHsq7wySikwAAAo8"]
[Sun Mar 29 21:59:37.340827 2026] [:error] [pid 32255:tid 32308] [client 20.111.59.164:28891] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-class.php"] [unique_id "ackwSWnfn-AtRoMbquzv9wAAAFE"]
[Sun Mar 29 21:59:38.156696 2026] [:error] [pid 23284:tid 23294] [client 20.111.59.164:1969] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-class.php"] [unique_id "ackwSozBujdPHsq7wySimwAAAog"]
[Sun Mar 29 21:59:39.381841 2026] [:error] [pid 32257:tid 32340] [client 20.111.59.164:14030] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bs1.php"] [unique_id "ackwSyE3TArOFrUtgWo20wAAAJY"]
[Sun Mar 29 21:59:40.239164 2026] [:error] [pid 23284:tid 23289] [client 20.111.59.164:14043] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bs1.php"] [unique_id "ackwTIzBujdPHsq7wySiqAAAAoM"]
[Sun Mar 29 21:59:40.847957 2026] [:error] [pid 23168:tid 23221] [client 20.111.59.164:38520] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bs1.php"] [unique_id "ackwTGP8p0yRL8ot_2-eKQAAAhg"]
[Sun Mar 29 21:59:42.025418 2026] [:error] [pid 23284:tid 23297] [client 20.111.59.164:15660] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bs1.php"] [unique_id "ackwTozBujdPHsq7wySiugAAAos"]
[Sun Mar 29 21:59:43.354803 2026] [:error] [pid 23284:tid 23293] [client 20.111.59.164:15671] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-login.php"] [unique_id "ackwT4zBujdPHsq7wySivwAAAoc"]
[Sun Mar 29 21:59:44.652281 2026] [:error] [pid 23167:tid 23180] [client 20.111.59.164:10695] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-login.php"] [unique_id "ackwUBIAHJCFaHff3_fB7wAAAco"]
[Sun Mar 29 21:59:46.016172 2026] [:error] [pid 23167:tid 23175] [client 20.111.59.164:47840] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-login.php"] [unique_id "ackwUhIAHJCFaHff3_fB8QAAAcU"]
[Sun Mar 29 21:59:46.728665 2026] [:error] [pid 23168:tid 23218] [client 20.111.59.164:53085] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-login.php"] [unique_id "ackwUmP8p0yRL8ot_2-eLgAAAhU"]
[Sun Mar 29 21:59:47.501187 2026] [:error] [pid 23284:tid 23296] [client 20.111.59.164:47838] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wsvvs.php"] [unique_id "ackwU4zBujdPHsq7wySi2AAAAoo"]
[Sun Mar 29 21:59:48.794306 2026] [:error] [pid 23284:tid 23300] [client 20.111.59.164:41900] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wsvvs.php"] [unique_id "ackwVIzBujdPHsq7wySi6AAAAo4"]
[Sun Mar 29 21:59:49.894014 2026] [:error] [pid 23168:tid 23209] [client 20.111.59.164:40137] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wsvvs.php"] [unique_id "ackwVWP8p0yRL8ot_2-eMgAAAgw"]
[Sun Mar 29 21:59:50.817855 2026] [:error] [pid 23284:tid 23307] [client 20.111.59.164:53072] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wsvvs.php"] [unique_id "ackwVozBujdPHsq7wySjAAAAApU"]
[Sun Mar 29 21:59:52.307268 2026] [:error] [pid 23284:tid 23290] [client 20.111.59.164:38522] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vbbn.php"] [unique_id "ackwWIzBujdPHsq7wySjEgAAAoQ"]
[Sun Mar 29 21:59:53.243044 2026] [:error] [pid 23284:tid 23297] [client 20.111.59.164:38517] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vbbn.php"] [unique_id "ackwWYzBujdPHsq7wySjFwAAAos"]
[Sun Mar 29 21:59:54.248529 2026] [:error] [pid 23284:tid 23305] [client 20.111.59.164:37702] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vbbn.php"] [unique_id "ackwWozBujdPHsq7wySjIQAAApM"]
[Sun Mar 29 21:59:55.998369 2026] [:error] [pid 32255:tid 32311] [client 20.111.59.164:32446] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vbbn.php"] [unique_id "ackwW2nfn-AtRoMbquzwHgAAAFQ"]
[Sun Mar 29 21:59:56.948024 2026] [:error] [pid 32255:tid 32295] [client 20.111.59.164:39765] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/shoyo.php"] [unique_id "ackwXGnfn-AtRoMbquzwJwAAAEQ"]
[Sun Mar 29 21:59:58.308096 2026] [:error] [pid 23168:tid 23205] [client 20.111.59.164:28883] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/shoyo.php"] [unique_id "ackwXmP8p0yRL8ot_2-eNwAAAgg"]
[Sun Mar 29 21:59:59.874247 2026] [:error] [pid 8818:tid 8845] [client 20.111.59.164:32389] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/shoyo.php"] [unique_id "ackwXyCDvotZNSF0FBrglQAAAVc"]
[Sun Mar 29 22:00:00.684649 2026] [:error] [pid 23284:tid 23296] [client 20.111.59.164:30880] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/shoyo.php"] [unique_id "ackwYIzBujdPHsq7wySjPwAAAoo"]
[Sun Mar 29 22:00:02.183698 2026] [:error] [pid 23284:tid 23302] [client 20.111.59.164:28871] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/flower.php"] [unique_id "ackwYozBujdPHsq7wySjRwAAApA"]
[Sun Mar 29 22:00:03.071843 2026] [:error] [pid 23284:tid 23289] [client 20.111.59.164:25640] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/flower.php"] [unique_id "ackwY4zBujdPHsq7wySjTQAAAoM"]
[Sun Mar 29 22:00:04.002305 2026] [:error] [pid 23284:tid 23287] [client 20.111.59.164:56648] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/flower.php"] [unique_id "ackwZIzBujdPHsq7wySjVwAAAoE"]
[Sun Mar 29 22:00:04.955280 2026] [:error] [pid 23284:tid 23306] [client 20.111.59.164:27042] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/flower.php"] [unique_id "ackwZIzBujdPHsq7wySjXwAAApQ"]
[Sun Mar 29 22:00:05.574495 2026] [:error] [pid 32255:tid 32297] [client 20.111.59.164:13254] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/waq.php"] [unique_id "ackwZWnfn-AtRoMbquzwQgAAAEY"]
[Sun Mar 29 22:00:06.183307 2026] [:error] [pid 23284:tid 23309] [client 20.111.59.164:30894] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/waq.php"] [unique_id "ackwZozBujdPHsq7wySjaQAAApc"]
[Sun Mar 29 22:00:06.718853 2026] [:error] [pid 8818:tid 8844] [client 20.111.59.164:30883] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/waq.php"] [unique_id "ackwZiCDvotZNSF0FBrgmgAAAVY"]
[Sun Mar 29 22:00:07.403068 2026] [:error] [pid 23167:tid 23186] [client 20.111.59.164:27032] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/waq.php"] [unique_id "ackwZxIAHJCFaHff3_fB-gAAAdA"]
[Sun Mar 29 22:00:07.919715 2026] [:error] [pid 32359:tid 32363] [client 20.111.59.164:33318] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wakak.php"] [unique_id "ackwZwMb8G3UzfQP3WgwBwAAAMI"]
[Sun Mar 29 22:00:08.575068 2026] [:error] [pid 32255:tid 32300] [client 20.111.59.164:28885] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wakak.php"] [unique_id "ackwaGnfn-AtRoMbquzwSAAAAEk"]
[Sun Mar 29 22:00:09.334681 2026] [:error] [pid 23168:tid 23207] [client 20.111.59.164:56660] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wakak.php"] [unique_id "ackwaWP8p0yRL8ot_2-eQAAAAgo"]
[Sun Mar 29 22:00:10.215408 2026] [:error] [pid 32359:tid 32374] [client 20.111.59.164:56111] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wakak.php"] [unique_id "ackwagMb8G3UzfQP3WgwCgAAAM0"]
[Sun Mar 29 22:00:10.858312 2026] [:error] [pid 23168:tid 23209] [client 20.111.59.164:10751] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bipas.php"] [unique_id "ackwamP8p0yRL8ot_2-eRgAAAgw"]
[Sun Mar 29 22:00:11.425167 2026] [:error] [pid 32359:tid 32372] [client 20.111.59.164:33323] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bipas.php"] [unique_id "ackwawMb8G3UzfQP3WgwDAAAAMs"]
[Sun Mar 29 22:00:12.260541 2026] [:error] [pid 32257:tid 32333] [client 20.111.59.164:10717] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bipas.php"] [unique_id "ackwbCE3TArOFrUtgWo3AgAAAI8"]
[Sun Mar 29 22:00:12.981553 2026] [:error] [pid 32257:tid 32338] [client 20.111.59.164:47829] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bipas.php"] [unique_id "ackwbCE3TArOFrUtgWo3BgAAAJQ"]
[Sun Mar 29 22:00:13.585627 2026] [:error] [pid 8818:tid 8829] [client 20.111.59.164:41873] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/conte.php"] [unique_id "ackwbSCDvotZNSF0FBrgoQAAAUc"]
[Sun Mar 29 22:00:14.512502 2026] [:error] [pid 32255:tid 32313] [client 20.111.59.164:29983] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/conte.php"] [unique_id "ackwbmnfn-AtRoMbquzwTwAAAFY"]
[Sun Mar 29 22:00:15.054600 2026] [:error] [pid 32255:tid 32315] [client 20.111.59.164:35083] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/conte.php"] [unique_id "ackwb2nfn-AtRoMbquzwVAAAAFg"]
[Sun Mar 29 22:00:15.738248 2026] [:error] [pid 23284:tid 23301] [client 20.111.59.164:19619] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/conte.php"] [unique_id "ackwb4zBujdPHsq7wySjgQAAAo8"]
[Sun Mar 29 22:00:16.438696 2026] [:error] [pid 32257:tid 32327] [client 20.111.59.164:10723] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class3.php"] [unique_id "ackwcCE3TArOFrUtgWo3DQAAAIk"]
[Sun Mar 29 22:00:17.008249 2026] [:error] [pid 32257:tid 32339] [client 20.111.59.164:33293] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class3.php"] [unique_id "ackwcSE3TArOFrUtgWo3EAAAAJU"]
[Sun Mar 29 22:00:17.940646 2026] [:error] [pid 32257:tid 32321] [client 20.111.59.164:30854] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class3.php"] [unique_id "ackwcSE3TArOFrUtgWo3EwAAAIM"]
[Sun Mar 29 22:00:18.471133 2026] [:error] [pid 32255:tid 32306] [client 20.111.59.164:25627] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class3.php"] [unique_id "ackwcmnfn-AtRoMbquzwYQAAAE8"]
[Sun Mar 29 22:00:19.143593 2026] [:error] [pid 32257:tid 32320] [client 20.111.59.164:40596] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/blurbs18.php"] [unique_id "ackwcyE3TArOFrUtgWo3HgAAAII"]
[Sun Mar 29 22:00:19.743068 2026] [:error] [pid 32257:tid 32330] [client 20.111.59.164:37706] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/blurbs18.php"] [unique_id "ackwcyE3TArOFrUtgWo3IwAAAIw"]
[Sun Mar 29 22:00:20.466902 2026] [:error] [pid 23284:tid 23290] [client 20.111.59.164:25604] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/blurbs18.php"] [unique_id "ackwdIzBujdPHsq7wySjkgAAAoQ"]
[Sun Mar 29 22:00:21.135972 2026] [:error] [pid 23137:tid 23151] [client 20.111.59.164:22934] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/blurbs18.php"] [unique_id "ackwdRaWQa7LdZ_qGFb70AAAAYw"]
[Sun Mar 29 22:00:21.755090 2026] [:error] [pid 32257:tid 32324] [client 20.111.59.164:33303] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/claa.php"] [unique_id "ackwdSE3TArOFrUtgWo3OwAAAIY"]
[Sun Mar 29 22:00:22.365724 2026] [:error] [pid 32257:tid 32334] [client 20.111.59.164:13272] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/claa.php"] [unique_id "ackwdiE3TArOFrUtgWo3QAAAAJA"]
[Sun Mar 29 22:00:23.027979 2026] [:error] [pid 32257:tid 32331] [client 20.111.59.164:42781] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/claa.php"] [unique_id "ackwdyE3TArOFrUtgWo3RwAAAI0"]
[Sun Mar 29 22:00:23.585336 2026] [:error] [pid 32255:tid 32292] [client 20.111.59.164:40618] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/claa.php"] [unique_id "ackwd2nfn-AtRoMbquzwZgAAAEE"]
[Sun Mar 29 22:00:24.250326 2026] [:error] [pid 8818:tid 8836] [client 20.111.59.164:32409] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xb.php"] [unique_id "ackweCCDvotZNSF0FBrgpQAAAU4"]
[Sun Mar 29 22:00:25.016455 2026] [:error] [pid 8818:tid 8842] [client 20.111.59.164:37755] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xb.php"] [unique_id "ackweSCDvotZNSF0FBrgqQAAAVQ"]
[Sun Mar 29 22:00:25.858598 2026] [:error] [pid 23284:tid 23296] [client 20.111.59.164:10689] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xb.php"] [unique_id "ackweYzBujdPHsq7wySjqAAAAoo"]
[Sun Mar 29 22:00:26.454270 2026] [:error] [pid 23167:tid 23182] [client 20.111.59.164:37743] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xb.php"] [unique_id "ackwehIAHJCFaHff3_fCBwAAAcw"]
[Sun Mar 29 22:00:27.689924 2026] [proxy_fcgi:error] [pid 8818:tid 8843] [client 20.111.59.164:37707] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 22:00:27.946847 2026] [proxy_fcgi:error] [pid 8818:tid 8822] [client 20.111.59.164:37707] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 22:00:28.191911 2026] [proxy_fcgi:error] [pid 8818:tid 8844] [client 20.111.59.164:37707] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 22:00:28.444902 2026] [proxy_fcgi:error] [pid 8818:tid 8825] [client 20.111.59.164:37707] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 22:00:28.684356 2026] [proxy_fcgi:error] [pid 8818:tid 8841] [client 20.111.59.164:37707] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 22:00:28.923090 2026] [proxy_fcgi:error] [pid 8818:tid 8835] [client 20.111.59.164:37707] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 22:00:29.390919 2026] [proxy_fcgi:error] [pid 8818:tid 8840] [client 20.111.59.164:37707] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 22:00:29.684607 2026] [proxy_fcgi:error] [pid 8818:tid 8838] [client 20.111.59.164:37707] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 22:00:30.909420 2026] [proxy_fcgi:error] [pid 8818:tid 8834] [client 20.111.59.164:37707] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 22:00:31.284598 2026] [proxy_fcgi:error] [pid 8818:tid 8830] [client 20.111.59.164:37707] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 22:00:31.524380 2026] [proxy_fcgi:error] [pid 8818:tid 8846] [client 20.111.59.164:37707] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 22:00:32.022264 2026] [:error] [pid 8818:tid 8827] [client 20.111.59.164:37707] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class.php"] [unique_id "ackwgCCDvotZNSF0FBrgvAAAAUU"]
[Sun Mar 29 22:00:32.973751 2026] [:error] [pid 32255:tid 32293] [client 20.111.59.164:33337] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class.php"] [unique_id "ackwgGnfn-AtRoMbquzwdQAAAEI"]
[Sun Mar 29 22:00:33.859145 2026] [:error] [pid 32257:tid 32323] [client 20.111.59.164:10750] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class.php"] [unique_id "ackwgSE3TArOFrUtgWo3YQAAAIU"]
[Sun Mar 29 22:00:34.535333 2026] [:error] [pid 32257:tid 32333] [client 20.111.59.164:42358] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class.php"] [unique_id "ackwgiE3TArOFrUtgWo3ZwAAAI8"]
[Sun Mar 29 22:00:35.380620 2026] [:error] [pid 32257:tid 32328] [client 20.111.59.164:42341] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bibil.php"] [unique_id "ackwgyE3TArOFrUtgWo3agAAAIo"]
[Sun Mar 29 22:00:36.089806 2026] [:error] [pid 32257:tid 32340] [client 20.111.59.164:32386] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bibil.php"] [unique_id "ackwhCE3TArOFrUtgWo3cQAAAJY"]
[Sun Mar 29 22:00:36.945299 2026] [:error] [pid 32257:tid 32326] [client 20.111.59.164:25298] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bibil.php"] [unique_id "ackwhCE3TArOFrUtgWo3dwAAAIg"]
[Sun Mar 29 22:00:38.359280 2026] [:error] [pid 32255:tid 32310] [client 20.111.59.164:31546] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bibil.php"] [unique_id "ackwhmnfn-AtRoMbquzweQAAAFM"]
[Sun Mar 29 22:00:39.133149 2026] [:error] [pid 32255:tid 32294] [client 20.111.59.164:35101] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nox.php"] [unique_id "ackwh2nfn-AtRoMbquzwewAAAEM"]
[Sun Mar 29 22:00:39.773135 2026] [:error] [pid 32257:tid 32341] [client 20.111.59.164:16419] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nox.php"] [unique_id "ackwhyE3TArOFrUtgWo3hAAAAJc"]
[Sun Mar 29 22:00:40.393024 2026] [:error] [pid 23168:tid 23212] [client 20.111.59.164:35081] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nox.php"] [unique_id "ackwiGP8p0yRL8ot_2-eWgAAAg8"]
[Sun Mar 29 22:00:41.347705 2026] [:error] [pid 32359:tid 32364] [client 20.111.59.164:22966] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nox.php"] [unique_id "ackwiQMb8G3UzfQP3WgwFgAAAMM"]
[Sun Mar 29 22:00:42.004782 2026] [:error] [pid 32359:tid 32375] [client 20.111.59.164:1750] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/shlo.php"] [unique_id "ackwigMb8G3UzfQP3WgwGQAAAM4"]
[Sun Mar 29 22:00:42.657683 2026] [:error] [pid 32255:tid 32304] [client 20.111.59.164:34300] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/shlo.php"] [unique_id "ackwimnfn-AtRoMbquzwgQAAAE0"]
[Sun Mar 29 22:00:43.531374 2026] [:error] [pid 32257:tid 32326] [client 20.111.59.164:7863] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/shlo.php"] [unique_id "ackwiyE3TArOFrUtgWo3mQAAAIg"]
[Sun Mar 29 22:00:44.371207 2026] [:error] [pid 32255:tid 32305] [client 20.111.59.164:37733] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/shlo.php"] [unique_id "ackwjGnfn-AtRoMbquzwhAAAAE4"]
[Sun Mar 29 22:00:45.291970 2026] [:error] [pid 23284:tid 23297] [client 20.111.59.164:42306] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "ackwjYzBujdPHsq7wySj0QAAAos"]
[Sun Mar 29 22:00:45.971016 2026] [:error] [pid 32257:tid 32324] [client 20.111.59.164:22945] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "ackwjSE3TArOFrUtgWo3pgAAAIY"]
[Sun Mar 29 22:00:46.653836 2026] [:error] [pid 23168:tid 23218] [client 20.111.59.164:19608] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "ackwjmP8p0yRL8ot_2-eYgAAAhU"]
[Sun Mar 29 22:00:47.354804 2026] [:error] [pid 32359:tid 32364] [client 20.111.59.164:42809] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "ackwjwMb8G3UzfQP3WgwJAAAAMM"]
[Sun Mar 29 22:00:48.118868 2026] [:error] [pid 32254:tid 32268] [client 20.111.59.164:16391] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gptsh.php"] [unique_id "ackwkKug2IHuyGgCTn9dQgAAAAQ"]
[Sun Mar 29 22:00:48.791984 2026] [:error] [pid 23168:tid 23209] [client 20.111.59.164:19621] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gptsh.php"] [unique_id "ackwkGP8p0yRL8ot_2-eZgAAAgw"]
[Sun Mar 29 22:00:49.486001 2026] [:error] [pid 32254:tid 32270] [client 20.111.59.164:34258] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gptsh.php"] [unique_id "ackwkaug2IHuyGgCTn9dRAAAAAY"]
[Sun Mar 29 22:00:50.018650 2026] [:error] [pid 23137:tid 23152] [client 20.111.59.164:56699] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gptsh.php"] [unique_id "ackwkhaWQa7LdZ_qGFb74wAAAY0"]
[Sun Mar 29 22:00:50.639200 2026] [:error] [pid 23284:tid 23290] [client 20.111.59.164:28793] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/no18.php"] [unique_id "ackwkozBujdPHsq7wySj4QAAAoQ"]
[Sun Mar 29 22:00:51.280970 2026] [:error] [pid 23137:tid 23139] [client 20.111.59.164:25306] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/no18.php"] [unique_id "ackwkxaWQa7LdZ_qGFb75QAAAYA"]
[Sun Mar 29 22:00:52.401893 2026] [:error] [pid 23284:tid 23307] [client 20.111.59.164:19606] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/no18.php"] [unique_id "ackwlIzBujdPHsq7wySj4wAAApU"]
[Sun Mar 29 22:00:52.976384 2026] [:error] [pid 23168:tid 23217] [client 20.111.59.164:40413] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/no18.php"] [unique_id "ackwlGP8p0yRL8ot_2-edAAAAhQ"]
[Sun Mar 29 22:00:53.621267 2026] [:error] [pid 23168:tid 23208] [client 20.111.59.164:1069] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/torsa.php"] [unique_id "ackwlWP8p0yRL8ot_2-eegAAAgs"]
[Sun Mar 29 22:00:54.450652 2026] [:error] [pid 32257:tid 32320] [client 20.111.59.164:25287] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/torsa.php"] [unique_id "ackwliE3TArOFrUtgWo3wwAAAII"]
[Sun Mar 29 22:00:55.253010 2026] [:error] [pid 23168:tid 23218] [client 20.111.59.164:22974] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/torsa.php"] [unique_id "ackwl2P8p0yRL8ot_2-efgAAAhU"]
[Sun Mar 29 22:00:55.750157 2026] [:error] [pid 32257:tid 32331] [client 20.111.59.164:19613] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/torsa.php"] [unique_id "ackwlyE3TArOFrUtgWo3yAAAAI0"]
[Sun Mar 29 22:00:56.449774 2026] [:error] [pid 32255:tid 32294] [client 20.111.59.164:42783] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/north1.php"] [unique_id "ackwmGnfn-AtRoMbquzwqwAAAEM"]
[Sun Mar 29 22:00:57.168171 2026] [:error] [pid 32255:tid 32306] [client 20.111.59.164:16430] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/north1.php"] [unique_id "ackwmWnfn-AtRoMbquzwtgAAAE8"]
[Sun Mar 29 22:00:58.334298 2026] [:error] [pid 32257:tid 32341] [client 20.111.59.164:19605] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/north1.php"] [unique_id "ackwmiE3TArOFrUtgWo30QAAAJc"]
[Sun Mar 29 22:00:59.361152 2026] [:error] [pid 23284:tid 23301] [client 20.111.59.164:42800] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/north1.php"] [unique_id "ackwm4zBujdPHsq7wySkDgAAAo8"]
[Sun Mar 29 22:01:00.003904 2026] [:error] [pid 23284:tid 23310] [client 20.111.59.164:56841] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fine.php"] [unique_id "ackwnIzBujdPHsq7wySkFgAAApg"]
[Sun Mar 29 22:01:01.583785 2026] [:error] [pid 23284:tid 23306] [client 20.111.59.164:34260] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fine.php"] [unique_id "ackwnYzBujdPHsq7wySkIgAAApQ"]
[Sun Mar 29 22:01:02.723342 2026] [:error] [pid 23167:tid 23176] [client 20.111.59.164:34281] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fine.php"] [unique_id "ackwnhIAHJCFaHff3_fCIQAAAcY"]
[Sun Mar 29 22:01:03.540276 2026] [:error] [pid 23284:tid 23294] [client 20.111.59.164:34271] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fine.php"] [unique_id "ackwn4zBujdPHsq7wySkKQAAAog"]
[Sun Mar 29 22:01:04.610699 2026] [:error] [pid 32255:tid 32298] [client 20.111.59.164:1052] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zample.php"] [unique_id "ackwoGnfn-AtRoMbquzw1AAAAEc"]
[Sun Mar 29 22:01:05.342961 2026] [:error] [pid 32359:tid 32375] [client 20.111.59.164:30084] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zample.php"] [unique_id "ackwoQMb8G3UzfQP3WgwLgAAAM4"]
[Sun Mar 29 22:01:06.070975 2026] [:error] [pid 23284:tid 23308] [client 20.111.59.164:56834] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zample.php"] [unique_id "ackwoozBujdPHsq7wySkLwAAApY"]
[Sun Mar 29 22:01:06.765836 2026] [:error] [pid 32257:tid 32339] [client 20.111.59.164:15304] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zample.php"] [unique_id "ackwoiE3TArOFrUtgWo36QAAAJU"]
[Sun Mar 29 22:01:07.443933 2026] [:error] [pid 23284:tid 23305] [client 20.111.59.164:30138] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/read.php"] [unique_id "ackwo4zBujdPHsq7wySkNAAAApM"]
[Sun Mar 29 22:01:09.095430 2026] [:error] [pid 23284:tid 23295] [client 20.111.59.164:40404] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/read.php"] [unique_id "ackwpYzBujdPHsq7wySkOwAAAok"]
[Sun Mar 29 22:01:09.861836 2026] [:error] [pid 32255:tid 32305] [client 20.111.59.164:34651] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/read.php"] [unique_id "ackwpWnfn-AtRoMbquzw5QAAAE4"]
[Sun Mar 29 22:01:10.762278 2026] [:error] [pid 23137:tid 23161] [client 20.111.59.164:34301] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/read.php"] [unique_id "ackwphaWQa7LdZ_qGFb78QAAAZY"]
[Sun Mar 29 22:01:11.268834 2026] [:error] [pid 23167:tid 23170] [client 20.111.59.164:1740] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-kd4xalrg7m.php"] [unique_id "ackwpxIAHJCFaHff3_fCKAAAAcA"]
[Sun Mar 29 22:01:12.105869 2026] [:error] [pid 32257:tid 32332] [client 20.111.59.164:40430] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-kd4xalrg7m.php"] [unique_id "ackwqCE3TArOFrUtgWo39QAAAI4"]
[Sun Mar 29 22:01:12.791481 2026] [:error] [pid 23284:tid 23286] [client 20.111.59.164:15350] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-kd4xalrg7m.php"] [unique_id "ackwqIzBujdPHsq7wySkSgAAAoA"]
[Sun Mar 29 22:01:13.516409 2026] [:error] [pid 23284:tid 23304] [client 20.111.59.164:40418] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-kd4xalrg7m.php"] [unique_id "ackwqYzBujdPHsq7wySkTgAAApI"]
[Sun Mar 29 22:01:14.193677 2026] [:error] [pid 23284:tid 23292] [client 20.111.59.164:34663] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hplfuns.php"] [unique_id "ackwqozBujdPHsq7wySkUwAAAoY"]
[Sun Mar 29 22:01:15.137206 2026] [:error] [pid 32255:tid 32296] [client 20.111.59.164:43298] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hplfuns.php"] [unique_id "ackwq2nfn-AtRoMbquzw7wAAAEU"]
[Sun Mar 29 22:01:15.768069 2026] [:error] [pid 32255:tid 32299] [client 20.111.59.164:1784] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hplfuns.php"] [unique_id "ackwq2nfn-AtRoMbquzw8QAAAEg"]
[Sun Mar 29 22:01:16.359358 2026] [:error] [pid 32255:tid 32294] [client 20.111.59.164:25157] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hplfuns.php"] [unique_id "ackwrGnfn-AtRoMbquzw9wAAAEM"]
[Sun Mar 29 22:01:17.120428 2026] [:error] [pid 32257:tid 32322] [client 20.111.59.164:34356] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-mter.php"] [unique_id "ackwrSE3TArOFrUtgWo3_AAAAIQ"]
[Sun Mar 29 22:01:17.962086 2026] [:error] [pid 32359:tid 32374] [client 20.111.59.164:34288] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-mter.php"] [unique_id "ackwrQMb8G3UzfQP3WgwNgAAAM0"]
[Sun Mar 29 22:01:19.187510 2026] [:error] [pid 32257:tid 32338] [client 20.111.59.164:57037] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-mter.php"] [unique_id "ackwryE3TArOFrUtgWo4BAAAAJQ"]
[Sun Mar 29 22:01:19.816336 2026] [:error] [pid 23168:tid 23220] [client 20.111.59.164:37630] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-mter.php"] [unique_id "ackwr2P8p0yRL8ot_2-elQAAAhc"]
[Sun Mar 29 22:01:20.644226 2026] [:error] [pid 32254:tid 32282] [client 20.111.59.164:11952] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/inege.php"] [unique_id "ackwsKug2IHuyGgCTn9dUwAAABI"]
[Sun Mar 29 22:01:21.477117 2026] [:error] [pid 23137:tid 23148] [client 20.111.59.164:1756] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/inege.php"] [unique_id "ackwsRaWQa7LdZ_qGFb7-gAAAYk"]
[Sun Mar 29 22:01:22.352562 2026] [:error] [pid 8818:tid 8827] [client 20.111.59.164:23754] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/inege.php"] [unique_id "ackwsiCDvotZNSF0FBrg4gAAAUU"]
[Sun Mar 29 22:01:23.568820 2026] [:error] [pid 8818:tid 8832] [client 20.111.59.164:40385] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/inege.php"] [unique_id "ackwsyCDvotZNSF0FBrg5gAAAUo"]
[Sun Mar 29 22:01:28.281134 2026] [:error] [pid 32257:tid 32318] [client 20.111.59.164:30132] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fe5.php"] [unique_id "ackwuCE3TArOFrUtgWo4JwAAAIA"]
[Sun Mar 29 22:01:31.049836 2026] [proxy_fcgi:error] [pid 23284:tid 23309] [client 20.111.59.164:34257] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 22:01:31.288557 2026] [proxy_fcgi:error] [pid 23284:tid 23299] [client 20.111.59.164:34257] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 22:01:31.544682 2026] [proxy_fcgi:error] [pid 23284:tid 23306] [client 20.111.59.164:34257] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 22:01:31.856619 2026] [proxy_fcgi:error] [pid 23284:tid 23289] [client 20.111.59.164:34257] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 22:01:32.211282 2026] [proxy_fcgi:error] [pid 23284:tid 23307] [client 20.111.59.164:34257] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 22:01:32.483506 2026] [proxy_fcgi:error] [pid 23284:tid 23292] [client 20.111.59.164:34257] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 22:01:33.013252 2026] [proxy_fcgi:error] [pid 23284:tid 23306] [client 20.111.59.164:34257] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 22:01:34.301700 2026] [proxy_fcgi:error] [pid 23284:tid 23308] [client 20.111.59.164:34257] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 22:01:34.542122 2026] [proxy_fcgi:error] [pid 23284:tid 23289] [client 20.111.59.164:34257] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 22:01:34.781426 2026] [proxy_fcgi:error] [pid 23284:tid 23286] [client 20.111.59.164:34257] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 22:01:35.073926 2026] [:error] [pid 23284:tid 23310] [client 20.111.59.164:34257] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/av.php"] [unique_id "ackwv4zBujdPHsq7wySkmwAAApg"]
[Sun Mar 29 22:01:36.138394 2026] [:error] [pid 23284:tid 23286] [client 20.111.59.164:15961] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/av.php"] [unique_id "ackwwIzBujdPHsq7wySkpgAAAoA"]
[Sun Mar 29 22:01:37.024388 2026] [:error] [pid 23284:tid 23304] [client 20.111.59.164:1392] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/av.php"] [unique_id "ackwwYzBujdPHsq7wySkrgAAApI"]
[Sun Mar 29 22:01:37.644639 2026] [:error] [pid 23168:tid 23201] [client 20.111.59.164:19208] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/av.php"] [unique_id "ackwwWP8p0yRL8ot_2-eqQAAAgQ"]
[Sun Mar 29 22:01:38.649652 2026] [:error] [pid 32257:tid 32337] [client 20.111.59.164:15341] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "ackwwiE3TArOFrUtgWo4PAAAAJM"]
[Sun Mar 29 22:01:39.619068 2026] [:error] [pid 23168:tid 23198] [client 20.111.59.164:18330] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "ackww2P8p0yRL8ot_2-esAAAAgE"]
[Sun Mar 29 22:01:40.371787 2026] [:error] [pid 23167:tid 23181] [client 20.111.59.164:11933] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "ackwxBIAHJCFaHff3_fCOgAAAcs"]
[Sun Mar 29 22:01:41.043547 2026] [:error] [pid 23168:tid 23212] [client 20.111.59.164:15317] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "ackwxWP8p0yRL8ot_2-euQAAAg8"]
[Sun Mar 29 22:01:41.795142 2026] [:error] [pid 32257:tid 32326] [client 20.111.59.164:30373] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-act.php"] [unique_id "ackwxSE3TArOFrUtgWo4RwAAAIg"]
[Sun Mar 29 22:01:42.534417 2026] [:error] [pid 32359:tid 32370] [client 20.111.59.164:37620] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-act.php"] [unique_id "ackwxgMb8G3UzfQP3WgwRwAAAMk"]
[Sun Mar 29 22:01:43.091658 2026] [:error] [pid 32359:tid 32363] [client 20.111.59.164:18367] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-act.php"] [unique_id "ackwxwMb8G3UzfQP3WgwSQAAAMI"]
[Sun Mar 29 22:01:43.687703 2026] [:error] [pid 32257:tid 32330] [client 20.111.59.164:34659] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-act.php"] [unique_id "ackwxyE3TArOFrUtgWo4SwAAAIw"]
[Sun Mar 29 22:01:44.292033 2026] [:error] [pid 23137:tid 23161] [client 20.111.59.164:15986] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/classwithtostring.php"] [unique_id "ackwyBaWQa7LdZ_qGFb8CgAAAZY"]
[Sun Mar 29 22:01:44.852611 2026] [:error] [pid 23168:tid 23218] [client 20.111.59.164:57027] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/classwithtostring.php"] [unique_id "ackwyGP8p0yRL8ot_2-ewQAAAhU"]
[Sun Mar 29 22:01:45.602760 2026] [:error] [pid 32255:tid 32310] [client 20.111.59.164:21094] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/classwithtostring.php"] [unique_id "ackwyWnfn-AtRoMbquzxFgAAAFM"]
[Sun Mar 29 22:01:46.447271 2026] [:error] [pid 8818:tid 8844] [client 20.111.59.164:11913] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/classwithtostring.php"] [unique_id "ackwyiCDvotZNSF0FBrg9QAAAVY"]
[Sun Mar 29 22:01:47.377500 2026] [:error] [pid 32254:tid 32270] [client 20.111.59.164:30397] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "ackwy6ug2IHuyGgCTn9dXQAAAAY"]
[Sun Mar 29 22:01:48.098577 2026] [:error] [pid 23284:tid 23304] [client 20.111.59.164:30390] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "ackwzIzBujdPHsq7wySkyAAAApI"]
[Sun Mar 29 22:01:49.080959 2026] [:error] [pid 23284:tid 23296] [client 20.111.59.164:11931] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "ackwzYzBujdPHsq7wySkzgAAAoo"]
[Sun Mar 29 22:01:49.976420 2026] [:error] [pid 32255:tid 32299] [client 20.111.59.164:39874] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "ackwzWnfn-AtRoMbquzxGwAAAEg"]
[Sun Mar 29 22:01:50.718022 2026] [:error] [pid 32257:tid 32334] [client 20.111.59.164:18350] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-michan.php"] [unique_id "ackwziE3TArOFrUtgWo4UwAAAJA"]
[Sun Mar 29 22:01:52.191603 2026] [:error] [pid 23284:tid 23296] [client 20.111.59.164:11530] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-michan.php"] [unique_id "ackw0IzBujdPHsq7wySk2wAAAoo"]
[Sun Mar 29 22:01:53.560199 2026] [:error] [pid 32255:tid 32304] [client 20.111.59.164:15943] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-michan.php"] [unique_id "ackw0Wnfn-AtRoMbquzxIgAAAE0"]
[Sun Mar 29 22:01:54.309329 2026] [:error] [pid 23168:tid 23220] [client 20.111.59.164:30357] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-michan.php"] [unique_id "ackw0mP8p0yRL8ot_2-e4gAAAhc"]
[Sun Mar 29 22:01:55.896738 2026] [:error] [pid 32257:tid 32319] [client 20.111.59.164:36781] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "ackw0yE3TArOFrUtgWo4eAAAAIE"]
[Sun Mar 29 22:01:56.618585 2026] [:error] [pid 23168:tid 23218] [client 20.111.59.164:37209] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "ackw1GP8p0yRL8ot_2-e6gAAAhU"]
[Sun Mar 29 22:01:57.535764 2026] [:error] [pid 32257:tid 32325] [client 20.111.59.164:1319] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "ackw1SE3TArOFrUtgWo4iQAAAIc"]
[Sun Mar 29 22:01:58.822858 2026] [:error] [pid 23168:tid 23220] [client 20.111.59.164:11940] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "ackw1mP8p0yRL8ot_2-e7AAAAhc"]
[Sun Mar 29 22:01:59.976649 2026] [:error] [pid 32255:tid 32303] [client 20.111.59.164:47482] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kj.php"] [unique_id "ackw12nfn-AtRoMbquzxMgAAAEw"]
[Sun Mar 29 22:02:00.786686 2026] [:error] [pid 32255:tid 32291] [client 20.111.59.164:11961] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kj.php"] [unique_id "ackw2Gnfn-AtRoMbquzxOQAAAEA"]
[Sun Mar 29 22:02:01.639855 2026] [:error] [pid 32257:tid 32322] [client 20.111.59.164:36748] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kj.php"] [unique_id "ackw2SE3TArOFrUtgWo4rQAAAIQ"]
[Sun Mar 29 22:02:02.429841 2026] [:error] [pid 32255:tid 32303] [client 20.111.59.164:1116] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kj.php"] [unique_id "ackw2mnfn-AtRoMbquzxRQAAAEw"]
[Sun Mar 29 22:02:03.131170 2026] [:error] [pid 32255:tid 32298] [client 20.111.59.164:47479] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bal.php"] [unique_id "ackw22nfn-AtRoMbquzxSgAAAEc"]
[Sun Mar 29 22:02:04.119288 2026] [:error] [pid 23284:tid 23289] [client 20.111.59.164:15984] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bal.php"] [unique_id "ackw3IzBujdPHsq7wySlCwAAAoM"]
[Sun Mar 29 22:02:04.855029 2026] [:error] [pid 32257:tid 32327] [client 20.111.59.164:1143] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bal.php"] [unique_id "ackw3CE3TArOFrUtgWo4ugAAAIk"]
[Sun Mar 29 22:02:05.794403 2026] [:error] [pid 23167:tid 23172] [client 20.111.59.164:11563] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bal.php"] [unique_id "ackw3RIAHJCFaHff3_fCTAAAAcI"]
[Sun Mar 29 22:02:06.440656 2026] [:error] [pid 23167:tid 23183] [client 20.111.59.164:1145] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/motu.php"] [unique_id "ackw3hIAHJCFaHff3_fCTQAAAc0"]
[Sun Mar 29 22:02:07.056748 2026] [:error] [pid 8818:tid 8846] [client 20.111.59.164:36751] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/motu.php"] [unique_id "ackw3yCDvotZNSF0FBrg-wAAAVg"]
[Sun Mar 29 22:02:07.910171 2026] [:error] [pid 23284:tid 23306] [client 20.111.59.164:36479] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/motu.php"] [unique_id "ackw34zBujdPHsq7wySlEAAAApQ"]
[Sun Mar 29 22:02:09.065195 2026] [:error] [pid 23137:tid 23146] [client 20.111.59.164:41561] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/motu.php"] [unique_id "ackw4RaWQa7LdZ_qGFb8FwAAAYc"]
[Sun Mar 29 22:02:09.598339 2026] [:error] [pid 8818:tid 8838] [client 20.111.59.164:23449] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bengi.php"] [unique_id "ackw4SCDvotZNSF0FBrhBwAAAVA"]
[Sun Mar 29 22:02:10.364734 2026] [:error] [pid 23168:tid 23200] [client 20.111.59.164:1281] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bengi.php"] [unique_id "ackw4mP8p0yRL8ot_2-e9QAAAgM"]
[Sun Mar 29 22:02:11.368936 2026] [:error] [pid 23284:tid 23295] [client 20.111.59.164:57083] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bengi.php"] [unique_id "ackw44zBujdPHsq7wySlHwAAAok"]
[Sun Mar 29 22:02:12.255854 2026] [:error] [pid 23284:tid 23300] [client 20.111.59.164:26132] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bengi.php"] [unique_id "ackw5IzBujdPHsq7wySlKAAAAo4"]
[Sun Mar 29 22:02:13.027672 2026] [:error] [pid 23167:tid 23190] [client 20.111.59.164:30350] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ew.php"] [unique_id "ackw5RIAHJCFaHff3_fCVwAAAdQ"]
[Sun Mar 29 22:02:13.980463 2026] [:error] [pid 23168:tid 23205] [client 20.111.59.164:14139] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ew.php"] [unique_id "ackw5WP8p0yRL8ot_2-e-wAAAgg"]
[Sun Mar 29 22:02:14.811364 2026] [:error] [pid 23168:tid 23215] [client 20.111.59.164:23435] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ew.php"] [unique_id "ackw5mP8p0yRL8ot_2-fAQAAAhI"]
[Sun Mar 29 22:02:16.086952 2026] [:error] [pid 32255:tid 32300] [client 20.111.59.164:42918] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ew.php"] [unique_id "ackw6Gnfn-AtRoMbquzxcQAAAEk"]
[Sun Mar 29 22:02:17.013510 2026] [:error] [pid 32254:tid 32271] [client 20.111.59.164:12566] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fffff.php"] [unique_id "ackw6aug2IHuyGgCTn9dbgAAAAc"]
[Sun Mar 29 22:02:18.217090 2026] [:error] [pid 32257:tid 32336] [client 20.111.59.164:11547] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fffff.php"] [unique_id "ackw6iE3TArOFrUtgWo4xAAAAJI"]
[Sun Mar 29 22:02:19.121097 2026] [:error] [pid 23284:tid 23309] [client 20.111.59.164:17967] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fffff.php"] [unique_id "ackw64zBujdPHsq7wySlNQAAApc"]
[Sun Mar 29 22:02:19.835194 2026] [:error] [pid 23284:tid 23297] [client 20.111.59.164:1347] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fffff.php"] [unique_id "ackw64zBujdPHsq7wySlOwAAAos"]
[Sun Mar 29 22:02:20.398036 2026] [:error] [pid 32254:tid 32278] [client 20.111.59.164:32332] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x1da.php"] [unique_id "ackw7Kug2IHuyGgCTn9dcAAAAA4"]
[Sun Mar 29 22:02:21.152989 2026] [:error] [pid 23284:tid 23308] [client 20.111.59.164:47458] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x1da.php"] [unique_id "ackw7YzBujdPHsq7wySlPwAAApY"]
[Sun Mar 29 22:02:21.867484 2026] [:error] [pid 23284:tid 23294] [client 20.111.59.164:47431] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x1da.php"] [unique_id "ackw7YzBujdPHsq7wySlRgAAAog"]
[Sun Mar 29 22:02:23.009871 2026] [:error] [pid 23284:tid 23297] [client 20.111.59.164:57411] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x1da.php"] [unique_id "ackw74zBujdPHsq7wySlSgAAAos"]
[Sun Mar 29 22:02:23.878036 2026] [:error] [pid 23284:tid 23296] [client 20.111.59.164:47477] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cabs.php"] [unique_id "ackw74zBujdPHsq7wySlUQAAAoo"]
[Sun Mar 29 22:02:24.835887 2026] [:error] [pid 23284:tid 23293] [client 20.111.59.164:36449] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cabs.php"] [unique_id "ackw8IzBujdPHsq7wySlVwAAAoc"]
[Sun Mar 29 22:02:25.570083 2026] [:error] [pid 23284:tid 23300] [client 20.111.59.164:36417] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cabs.php"] [unique_id "ackw8YzBujdPHsq7wySlXQAAAo4"]
[Sun Mar 29 22:02:26.607843 2026] [:error] [pid 32255:tid 32301] [client 20.111.59.164:1297] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cabs.php"] [unique_id "ackw8mnfn-AtRoMbquzxigAAAEo"]
[Sun Mar 29 22:02:28.283825 2026] [:error] [pid 32257:tid 32325] [client 20.111.59.164:21797] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xwx1.php"] [unique_id "ackw9CE3TArOFrUtgWo4zAAAAIc"]
[Sun Mar 29 22:02:29.170377 2026] [:error] [pid 23284:tid 23299] [client 20.111.59.164:14117] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xwx1.php"] [unique_id "ackw9YzBujdPHsq7wySlZQAAAo0"]
[Sun Mar 29 22:02:30.187125 2026] [:error] [pid 23250:tid 23270] [client 20.111.59.164:12574] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xwx1.php"] [unique_id "ackw9pxrpj-dQjy1cvoGZAAAAlI"]
[Sun Mar 29 22:02:30.873262 2026] [:error] [pid 32254:tid 32266] [client 20.111.59.164:2025] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xwx1.php"] [unique_id "ackw9qug2IHuyGgCTn9dcwAAAAI"]
[Sun Mar 29 22:02:32.197731 2026] [:error] [pid 23284:tid 23307] [client 20.111.59.164:36438] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jp.php"] [unique_id "ackw-IzBujdPHsq7wySlaAAAApU"]
[Sun Mar 29 22:02:32.861063 2026] [:error] [pid 32257:tid 32319] [client 20.111.59.164:2017] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jp.php"] [unique_id "ackw-CE3TArOFrUtgWo40gAAAIE"]
[Sun Mar 29 22:02:33.612101 2026] [:error] [pid 32359:tid 32378] [client 20.111.59.164:21033] [client 20.111.59.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jp.php"] [unique_id "ackw-QMb8G3UzfQP3WgwbQAAANE"]
[Sun Mar 29 22:02:34.459454 2026] [proxy_fcgi:error] [pid 23167:tid 23180] [client 20.111.59.164:27886] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 22:02:35.125833 2026] [proxy_fcgi:error] [pid 23167:tid 23187] [client 20.111.59.164:27886] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 22:02:35.366875 2026] [proxy_fcgi:error] [pid 23167:tid 23192] [client 20.111.59.164:27886] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 22:02:35.648906 2026] [proxy_fcgi:error] [pid 23167:tid 23170] [client 20.111.59.164:27886] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 22:02:35.888906 2026] [proxy_fcgi:error] [pid 23167:tid 23181] [client 20.111.59.164:27886] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 22:15:25.019143 2026] [:error] [pid 23284:tid 23303] [client 34.135.165.137:58768] [client 34.135.165.137] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.135.165.137, incrementing ddos counter"] [hostname "dwelectservices.com.au"] [uri "/xmlrpc.php"] [unique_id "ackz_YzBujdPHsq7wySvagAAApE"]
[Sun Mar 29 22:15:25.029844 2026] [proxy_fcgi:error] [pid 23284:tid 23303] [client 34.135.165.137:58768] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 22:15:27.756484 2026] [:error] [pid 23284:tid 23303] [client 34.135.165.137:58768] [client 34.135.165.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "ackz_4zBujdPHsq7wySvhQAAApE"]
[Sun Mar 29 22:15:28.414709 2026] [:error] [pid 23168:tid 23201] [client 34.135.165.137:51319] [client 34.135.165.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "ack0AGP8p0yRL8ot_2-joQAAAgQ"]
[Sun Mar 29 22:15:29.237660 2026] [:error] [pid 8818:tid 8827] [client 34.135.165.137:51319] [client 34.135.165.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "ack0ASCDvotZNSF0FBrkFwAAAUU"]
[Sun Mar 29 22:15:29.876709 2026] [:error] [pid 23284:tid 23303] [client 34.135.165.137:60509] [client 34.135.165.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "ack0AYzBujdPHsq7wySvjwAAApE"]
[Sun Mar 29 22:15:30.593673 2026] [:error] [pid 23284:tid 23291] [client 34.135.165.137:51819] [client 34.135.165.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "ack0AozBujdPHsq7wySvmQAAAoU"]
[Sun Mar 29 22:15:31.501045 2026] [:error] [pid 32255:tid 32297] [client 34.135.165.137:53794] [client 34.135.165.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "ack0A2nfn-AtRoMbquz3kwAAAEY"]
[Sun Mar 29 22:15:32.081290 2026] [:error] [pid 32257:tid 32335] [client 34.135.165.137:54640] [client 34.135.165.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "ack0BCE3TArOFrUtgWo_4gAAAJE"]
[Mon Mar 30 00:10:20.087794 2026] [proxy_fcgi:error] [pid 32257:tid 32341] [client 20.151.111.128:18566] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 00:10:20.298721 2026] [proxy_fcgi:error] [pid 32257:tid 32327] [client 20.151.111.128:18566] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 00:10:20.509703 2026] [proxy_fcgi:error] [pid 32257:tid 32322] [client 20.151.111.128:18566] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 00:10:21.285660 2026] [proxy_fcgi:error] [pid 32257:tid 32320] [client 20.151.111.128:18566] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 00:10:21.496049 2026] [proxy_fcgi:error] [pid 32257:tid 32329] [client 20.151.111.128:18566] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 00:10:21.705778 2026] [proxy_fcgi:error] [pid 32257:tid 32324] [client 20.151.111.128:18566] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 00:10:22.124690 2026] [proxy_fcgi:error] [pid 32257:tid 32319] [client 20.151.111.128:18566] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 00:10:22.334548 2026] [proxy_fcgi:error] [pid 32257:tid 32327] [client 20.151.111.128:18566] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 00:10:22.543801 2026] [proxy_fcgi:error] [pid 32257:tid 32328] [client 20.151.111.128:18566] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 00:10:22.754185 2026] [proxy_fcgi:error] [pid 32257:tid 32326] [client 20.151.111.128:18566] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 00:10:22.960149 2026] [:error] [pid 32257:tid 32334] [client 20.151.111.128:18566] [client 20.151.111.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/info.php"] [unique_id "aclO7iE3TArOFrUtgWqGnwAAAJA"]
[Mon Mar 30 00:10:24.024654 2026] [:error] [pid 32257:tid 32325] [client 20.151.111.128:28532] [client 20.151.111.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/info.php"] [unique_id "aclO8CE3TArOFrUtgWqGpAAAAIc"]
[Mon Mar 30 00:10:24.855199 2026] [:error] [pid 32257:tid 32328] [client 20.151.111.128:28485] [client 20.151.111.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/info.php"] [unique_id "aclO8CE3TArOFrUtgWqGqAAAAIo"]
[Mon Mar 30 00:10:25.683080 2026] [:error] [pid 32257:tid 32321] [client 20.151.111.128:26473] [client 20.151.111.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/info.php"] [unique_id "aclO8SE3TArOFrUtgWqGugAAAIM"]
[Mon Mar 30 00:37:59.483637 2026] [proxy_fcgi:error] [pid 32257:tid 32338] [client 20.197.183.189:65218] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 00:37:59.801106 2026] [proxy_fcgi:error] [pid 32257:tid 32319] [client 20.197.183.189:65218] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 00:38:00.114642 2026] [proxy_fcgi:error] [pid 32257:tid 32339] [client 20.197.183.189:65218] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 00:38:00.424249 2026] [:error] [pid 32257:tid 32338] [client 20.197.183.189:65218] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-access.php"] [unique_id "aclVaCE3TArOFrUtgWqfmgAAAJQ"]
[Mon Mar 30 00:38:01.048404 2026] [:error] [pid 32255:tid 32301] [client 20.197.183.189:65190] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-access.php"] [unique_id "aclVaWnfn-AtRoMbquw8fgAAAEo"]
[Mon Mar 30 00:38:01.670031 2026] [:error] [pid 23284:tid 23292] [client 20.197.183.189:64587] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-access.php"] [unique_id "aclVaYzBujdPHsq7wyQhcwAAAoY"]
[Mon Mar 30 00:38:02.297814 2026] [:error] [pid 8818:tid 8827] [client 20.197.183.189:65274] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-access.php"] [unique_id "aclVaiCDvotZNSF0FBoGuAAAAUU"]
[Mon Mar 30 00:38:02.927965 2026] [:error] [pid 23137:tid 23140] [client 20.197.183.189:65230] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wxfyf.php"] [unique_id "aclVahaWQa7LdZ_qGFYXCwAAAYE"]
[Mon Mar 30 00:38:03.569115 2026] [:error] [pid 32257:tid 32329] [client 20.197.183.189:64578] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wxfyf.php"] [unique_id "aclVayE3TArOFrUtgWqfngAAAIs"]
[Mon Mar 30 00:38:04.193796 2026] [:error] [pid 32257:tid 32339] [client 20.197.183.189:65194] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wxfyf.php"] [unique_id "aclVbCE3TArOFrUtgWqfpQAAAJU"]
[Mon Mar 30 00:38:04.823610 2026] [:error] [pid 23284:tid 23308] [client 20.197.183.189:65213] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wxfyf.php"] [unique_id "aclVbIzBujdPHsq7wyQhgQAAApY"]
[Mon Mar 30 00:38:05.443446 2026] [:error] [pid 32255:tid 32300] [client 20.197.183.189:65208] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/callback.php"] [unique_id "aclVbWnfn-AtRoMbquw8iwAAAEk"]
[Mon Mar 30 00:38:06.074609 2026] [:error] [pid 32255:tid 32293] [client 20.197.183.189:65199] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/callback.php"] [unique_id "aclVbmnfn-AtRoMbquw8kQAAAEI"]
[Mon Mar 30 00:38:06.717023 2026] [:error] [pid 23137:tid 23142] [client 20.197.183.189:65165] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/callback.php"] [unique_id "aclVbhaWQa7LdZ_qGFYXDAAAAYM"]
[Mon Mar 30 00:38:07.340188 2026] [:error] [pid 23168:tid 23215] [client 20.197.183.189:65217] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/callback.php"] [unique_id "aclVb2P8p0yRL8ot_2_YogAAAhI"]
[Mon Mar 30 00:38:07.973971 2026] [:error] [pid 32257:tid 32335] [client 20.197.183.189:65161] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/h2.php"] [unique_id "aclVbyE3TArOFrUtgWqfvAAAAJE"]
[Mon Mar 30 00:38:08.628125 2026] [:error] [pid 32255:tid 32313] [client 20.197.183.189:65203] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/h2.php"] [unique_id "aclVcGnfn-AtRoMbquw8mAAAAFY"]
[Mon Mar 30 00:38:09.269592 2026] [:error] [pid 23284:tid 23308] [client 20.197.183.189:65245] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/h2.php"] [unique_id "aclVcYzBujdPHsq7wyQhigAAApY"]
[Mon Mar 30 00:38:09.920304 2026] [:error] [pid 32359:tid 32361] [client 20.197.183.189:65158] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/h2.php"] [unique_id "aclVcQMb8G3UzfQP3WhFAwAAAMA"]
[Mon Mar 30 00:38:10.581333 2026] [:error] [pid 23137:tid 23153] [client 20.197.183.189:64595] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/d12.php"] [unique_id "aclVchaWQa7LdZ_qGFYXEAAAAY4"]
[Mon Mar 30 00:38:11.248637 2026] [:error] [pid 23284:tid 23293] [client 20.197.183.189:65266] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/d12.php"] [unique_id "aclVc4zBujdPHsq7wyQhkwAAAoc"]
[Mon Mar 30 00:38:11.927405 2026] [:error] [pid 32257:tid 32339] [client 20.197.183.189:64608] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/d12.php"] [unique_id "aclVcyE3TArOFrUtgWqfywAAAJU"]
[Mon Mar 30 00:38:12.564284 2026] [:error] [pid 23250:tid 23274] [client 20.197.183.189:65174] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/d12.php"] [unique_id "aclVdJxrpj-dQjy1cvolzQAAAlY"]
[Mon Mar 30 00:38:13.228334 2026] [:error] [pid 23284:tid 23304] [client 20.197.183.189:65244] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/144.php"] [unique_id "aclVdYzBujdPHsq7wyQhmgAAApI"]
[Mon Mar 30 00:38:13.968073 2026] [:error] [pid 8818:tid 8832] [client 20.197.183.189:64518] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/144.php"] [unique_id "aclVdSCDvotZNSF0FBoGwwAAAUo"]
[Mon Mar 30 00:38:14.631720 2026] [:error] [pid 32257:tid 32319] [client 20.197.183.189:64590] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/144.php"] [unique_id "aclVdiE3TArOFrUtgWqf1AAAAIE"]
[Mon Mar 30 00:38:15.336655 2026] [:error] [pid 32255:tid 32315] [client 20.197.183.189:65193] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/144.php"] [unique_id "aclVd2nfn-AtRoMbquw8qwAAAFg"]
[Mon Mar 30 00:38:16.014930 2026] [:error] [pid 8818:tid 8825] [client 20.197.183.189:65276] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/s.php"] [unique_id "aclVeCCDvotZNSF0FBoGxQAAAUM"]
[Mon Mar 30 00:38:16.789193 2026] [:error] [pid 23167:tid 23172] [client 20.197.183.189:65228] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/s.php"] [unique_id "aclVeBIAHJCFaHff3_fvPgAAAcI"]
[Mon Mar 30 00:38:17.538204 2026] [:error] [pid 23137:tid 23160] [client 20.197.183.189:65268] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/s.php"] [unique_id "aclVeRaWQa7LdZ_qGFYXFAAAAZU"]
[Mon Mar 30 00:38:18.397010 2026] [:error] [pid 23250:tid 23254] [client 20.197.183.189:64594] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/s.php"] [unique_id "aclVepxrpj-dQjy1cvolzgAAAkI"]
[Mon Mar 30 00:38:19.107771 2026] [:error] [pid 32359:tid 32374] [client 20.197.183.189:64634] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xsas.php"] [unique_id "aclVewMb8G3UzfQP3WhFCAAAAM0"]
[Mon Mar 30 00:38:19.742034 2026] [:error] [pid 32257:tid 32327] [client 20.197.183.189:65178] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xsas.php"] [unique_id "aclVeyE3TArOFrUtgWqf7QAAAIk"]
[Mon Mar 30 00:38:20.383807 2026] [:error] [pid 32257:tid 32332] [client 20.197.183.189:64577] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xsas.php"] [unique_id "aclVfCE3TArOFrUtgWqf8gAAAI4"]
[Mon Mar 30 00:38:21.077791 2026] [:error] [pid 32257:tid 32339] [client 20.197.183.189:64582] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xsas.php"] [unique_id "aclVfSE3TArOFrUtgWqf_QAAAJU"]
[Mon Mar 30 00:38:21.735620 2026] [:error] [pid 32257:tid 32324] [client 20.197.183.189:65171] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a5.php"] [unique_id "aclVfSE3TArOFrUtgWqgBQAAAIY"]
[Mon Mar 30 00:38:22.392766 2026] [:error] [pid 32359:tid 32372] [client 20.197.183.189:65259] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a5.php"] [unique_id "aclVfgMb8G3UzfQP3WhFCgAAAMs"]
[Mon Mar 30 00:38:23.027447 2026] [:error] [pid 32255:tid 32291] [client 20.197.183.189:65240] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a5.php"] [unique_id "aclVf2nfn-AtRoMbquw8swAAAEA"]
[Mon Mar 30 00:38:23.668711 2026] [:error] [pid 23250:tid 23263] [client 20.197.183.189:65235] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a5.php"] [unique_id "aclVf5xrpj-dQjy1cvol0gAAAks"]
[Mon Mar 30 00:38:24.292539 2026] [:error] [pid 32257:tid 32339] [client 20.197.183.189:64609] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-blog-header.php"] [unique_id "aclVgCE3TArOFrUtgWqgFAAAAJU"]
[Mon Mar 30 00:38:24.912570 2026] [:error] [pid 32359:tid 32364] [client 20.197.183.189:65191] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-blog-header.php"] [unique_id "aclVgAMb8G3UzfQP3WhFDQAAAMM"]
[Mon Mar 30 00:38:25.534287 2026] [:error] [pid 32359:tid 32375] [client 20.197.183.189:65210] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-blog-header.php"] [unique_id "aclVgQMb8G3UzfQP3WhFDwAAAM4"]
[Mon Mar 30 00:38:26.153850 2026] [:error] [pid 32255:tid 32309] [client 20.197.183.189:65185] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-blog-header.php"] [unique_id "aclVgmnfn-AtRoMbquw8uQAAAFI"]
[Mon Mar 30 00:38:26.778676 2026] [:error] [pid 32257:tid 32336] [client 20.197.183.189:65173] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/asasx.php"] [unique_id "aclVgiE3TArOFrUtgWqgHAAAAJI"]
[Mon Mar 30 00:38:27.397221 2026] [:error] [pid 32359:tid 32376] [client 20.197.183.189:65207] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/asasx.php"] [unique_id "aclVgwMb8G3UzfQP3WhFEAAAAM8"]
[Mon Mar 30 00:38:28.014707 2026] [:error] [pid 32255:tid 32291] [client 20.197.183.189:65224] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/asasx.php"] [unique_id "aclVhGnfn-AtRoMbquw8xQAAAEA"]
[Mon Mar 30 00:38:28.639572 2026] [:error] [pid 23284:tid 23298] [client 20.197.183.189:64616] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/asasx.php"] [unique_id "aclVhIzBujdPHsq7wyQhygAAAow"]
[Mon Mar 30 00:38:29.261526 2026] [:error] [pid 23284:tid 23293] [client 20.197.183.189:64589] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file.php"] [unique_id "aclVhYzBujdPHsq7wyQhzwAAAoc"]
[Mon Mar 30 00:38:29.886066 2026] [:error] [pid 23284:tid 23289] [client 20.197.183.189:65251] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file.php"] [unique_id "aclVhYzBujdPHsq7wyQh2gAAAoM"]
[Mon Mar 30 00:38:30.510659 2026] [:error] [pid 23137:tid 23151] [client 20.197.183.189:64599] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file.php"] [unique_id "aclVhhaWQa7LdZ_qGFYXIwAAAYw"]
[Mon Mar 30 00:38:31.131569 2026] [:error] [pid 32257:tid 32342] [client 20.197.183.189:65215] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file.php"] [unique_id "aclVhyE3TArOFrUtgWqgIAAAAJg"]
[Mon Mar 30 00:38:31.754809 2026] [:error] [pid 32257:tid 32318] [client 20.197.183.189:65270] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/public/vx.php"] [unique_id "aclVhyE3TArOFrUtgWqgJAAAAIA"]
[Mon Mar 30 00:38:32.387810 2026] [:error] [pid 23137:tid 23144] [client 20.197.183.189:65262] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/public/vx.php"] [unique_id "aclViBaWQa7LdZ_qGFYXJQAAAYU"]
[Mon Mar 30 00:38:33.017267 2026] [:error] [pid 32257:tid 32337] [client 20.197.183.189:65202] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/public/vx.php"] [unique_id "aclViSE3TArOFrUtgWqgLgAAAJM"]
[Mon Mar 30 00:38:33.652408 2026] [:error] [pid 32257:tid 32322] [client 20.197.183.189:64628] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/public/vx.php"] [unique_id "aclViSE3TArOFrUtgWqgNwAAAIQ"]
[Mon Mar 30 00:38:34.282416 2026] [:error] [pid 23284:tid 23291] [client 20.197.183.189:63939] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sale.php"] [unique_id "aclViozBujdPHsq7wyQh5AAAAoU"]
[Mon Mar 30 00:38:34.907704 2026] [:error] [pid 23168:tid 23199] [client 20.197.183.189:65272] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sale.php"] [unique_id "aclVimP8p0yRL8ot_2_YwQAAAgI"]
[Mon Mar 30 00:38:35.531027 2026] [:error] [pid 32255:tid 32292] [client 20.197.183.189:64592] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sale.php"] [unique_id "aclVi2nfn-AtRoMbquw81wAAAEE"]
[Mon Mar 30 00:38:36.179484 2026] [:error] [pid 32257:tid 32327] [client 20.197.183.189:65155] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sale.php"] [unique_id "aclVjCE3TArOFrUtgWqgSwAAAIk"]
[Mon Mar 30 00:38:36.807754 2026] [:error] [pid 32257:tid 32341] [client 20.197.183.189:64579] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kj.php"] [unique_id "aclVjCE3TArOFrUtgWqgVQAAAJc"]
[Mon Mar 30 00:38:37.432647 2026] [:error] [pid 23284:tid 23286] [client 20.197.183.189:64520] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kj.php"] [unique_id "aclVjYzBujdPHsq7wyQh9gAAAoA"]
[Mon Mar 30 00:38:38.078374 2026] [:error] [pid 32257:tid 32340] [client 20.197.183.189:64576] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kj.php"] [unique_id "aclVjiE3TArOFrUtgWqgWwAAAJY"]
[Mon Mar 30 00:38:38.703818 2026] [:error] [pid 32255:tid 32297] [client 20.197.183.189:65160] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kj.php"] [unique_id "aclVjmnfn-AtRoMbquw84gAAAEY"]
[Mon Mar 30 00:38:39.342733 2026] [:error] [pid 23137:tid 23152] [client 20.197.183.189:65186] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2ksm17n.php"] [unique_id "aclVjxaWQa7LdZ_qGFYXKAAAAY0"]
[Mon Mar 30 00:38:39.961816 2026] [:error] [pid 23137:tid 23151] [client 20.197.183.189:64607] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2ksm17n.php"] [unique_id "aclVjxaWQa7LdZ_qGFYXKwAAAYw"]
[Mon Mar 30 00:38:40.590516 2026] [:error] [pid 23284:tid 23292] [client 20.197.183.189:65179] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2ksm17n.php"] [unique_id "aclVkIzBujdPHsq7wyQiCAAAAoY"]
[Mon Mar 30 00:38:41.210152 2026] [:error] [pid 32255:tid 32303] [client 20.197.183.189:65249] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2ksm17n.php"] [unique_id "aclVkWnfn-AtRoMbquw89wAAAEw"]
[Mon Mar 30 00:38:41.828629 2026] [:error] [pid 23137:tid 23163] [client 20.197.183.189:64522] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/about.php"] [unique_id "aclVkRaWQa7LdZ_qGFYXMQAAAZg"]
[Mon Mar 30 00:38:42.509496 2026] [:error] [pid 23284:tid 23308] [client 20.197.183.189:65168] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/about.php"] [unique_id "aclVkozBujdPHsq7wyQiEQAAApY"]
[Mon Mar 30 00:38:43.136026 2026] [:error] [pid 32255:tid 32301] [client 20.197.183.189:65198] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/about.php"] [unique_id "aclVk2nfn-AtRoMbquw9AwAAAEo"]
[Mon Mar 30 00:38:43.790822 2026] [:error] [pid 23168:tid 23210] [client 20.197.183.189:65175] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/about.php"] [unique_id "aclVk2P8p0yRL8ot_2_YygAAAg0"]
[Mon Mar 30 00:38:44.410592 2026] [:error] [pid 32255:tid 32305] [client 20.197.183.189:65154] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hots.php"] [unique_id "aclVlGnfn-AtRoMbquw9FgAAAE4"]
[Mon Mar 30 00:38:45.036914 2026] [:error] [pid 23250:tid 23271] [client 20.197.183.189:65273] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hots.php"] [unique_id "aclVlZxrpj-dQjy1cvol4gAAAlM"]
[Mon Mar 30 00:38:45.660677 2026] [:error] [pid 23250:tid 23268] [client 20.197.183.189:65242] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hots.php"] [unique_id "aclVlZxrpj-dQjy1cvol5QAAAlA"]
[Mon Mar 30 00:38:46.279214 2026] [:error] [pid 32257:tid 32331] [client 20.197.183.189:65275] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hots.php"] [unique_id "aclVliE3TArOFrUtgWqgbAAAAI0"]
[Mon Mar 30 00:38:46.897353 2026] [:error] [pid 23284:tid 23300] [client 20.197.183.189:65252] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp5.php"] [unique_id "aclVlozBujdPHsq7wyQiHwAAAo4"]
[Mon Mar 30 00:38:47.516526 2026] [:error] [pid 32257:tid 32341] [client 20.197.183.189:65152] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp5.php"] [unique_id "aclVlyE3TArOFrUtgWqgcgAAAJc"]
[Mon Mar 30 00:38:48.139499 2026] [:error] [pid 23167:tid 23177] [client 20.197.183.189:65247] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp5.php"] [unique_id "aclVmBIAHJCFaHff3_fvaAAAAcc"]
[Mon Mar 30 00:38:48.759163 2026] [:error] [pid 23284:tid 23307] [client 20.197.183.189:64586] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp5.php"] [unique_id "aclVmIzBujdPHsq7wyQiLQAAApU"]
[Mon Mar 30 00:38:49.392309 2026] [:error] [pid 32255:tid 32292] [client 20.197.183.189:65163] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aclVmWnfn-AtRoMbquw9IQAAAEE"]
[Mon Mar 30 00:38:50.010291 2026] [:error] [pid 23137:tid 23139] [client 20.197.183.189:64610] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aclVmhaWQa7LdZ_qGFYXNwAAAYA"]
[Mon Mar 30 00:38:50.628992 2026] [:error] [pid 32257:tid 32336] [client 20.197.183.189:65256] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aclVmiE3TArOFrUtgWqggQAAAJI"]
[Mon Mar 30 00:38:51.249363 2026] [:error] [pid 23167:tid 23171] [client 20.197.183.189:64624] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aclVmxIAHJCFaHff3_fvcgAAAcE"]
[Mon Mar 30 00:38:51.871030 2026] [:error] [pid 8818:tid 8838] [client 20.197.183.189:65153] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/66.php"] [unique_id "aclVmyCDvotZNSF0FBoG4wAAAVA"]
[Mon Mar 30 00:38:52.491289 2026] [:error] [pid 23168:tid 23201] [client 20.197.183.189:65159] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/66.php"] [unique_id "aclVnGP8p0yRL8ot_2_Y4AAAAgQ"]
[Mon Mar 30 00:38:53.120757 2026] [:error] [pid 23284:tid 23291] [client 20.197.183.189:64512] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/66.php"] [unique_id "aclVnYzBujdPHsq7wyQiNAAAAoU"]
[Mon Mar 30 00:38:53.748221 2026] [:error] [pid 23284:tid 23307] [client 20.197.183.189:64549] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/66.php"] [unique_id "aclVnYzBujdPHsq7wyQiOQAAApU"]
[Mon Mar 30 00:38:54.408154 2026] [:error] [pid 32257:tid 32333] [client 20.197.183.189:65220] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "aclVniE3TArOFrUtgWqgiwAAAI8"]
[Mon Mar 30 00:38:55.101444 2026] [:error] [pid 23167:tid 23177] [client 20.197.183.189:65221] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "aclVnxIAHJCFaHff3_fvegAAAcc"]
[Mon Mar 30 00:38:55.891468 2026] [:error] [pid 23284:tid 23291] [client 20.197.183.189:65205] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "aclVn4zBujdPHsq7wyQiQAAAAoU"]
[Mon Mar 30 00:38:56.860405 2026] [:error] [pid 23168:tid 23213] [client 20.197.183.189:65186] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "aclVoGP8p0yRL8ot_2_Y6gAAAhA"]
[Mon Mar 30 00:38:57.888325 2026] [:error] [pid 32255:tid 32299] [client 20.197.183.189:64542] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/amax.php"] [unique_id "aclVoWnfn-AtRoMbquw9LwAAAEg"]
[Mon Mar 30 00:38:58.557434 2026] [:error] [pid 23284:tid 23302] [client 20.197.183.189:65204] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/amax.php"] [unique_id "aclVoozBujdPHsq7wyQiUAAAApA"]
[Mon Mar 30 00:38:59.435337 2026] [:error] [pid 23137:tid 23149] [client 20.197.183.189:65164] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/amax.php"] [unique_id "aclVoxaWQa7LdZ_qGFYXQgAAAYo"]
[Mon Mar 30 00:39:00.214274 2026] [proxy_fcgi:error] [pid 23284:tid 23288] [client 20.197.183.189:65253] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 00:39:00.528953 2026] [proxy_fcgi:error] [pid 23284:tid 23293] [client 20.197.183.189:65253] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 00:39:00.847965 2026] [proxy_fcgi:error] [pid 23284:tid 23302] [client 20.197.183.189:65253] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 00:39:01.159724 2026] [proxy_fcgi:error] [pid 23284:tid 23301] [client 20.197.183.189:65253] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 00:39:01.481663 2026] [proxy_fcgi:error] [pid 23284:tid 23304] [client 20.197.183.189:65253] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 00:39:01.794047 2026] [proxy_fcgi:error] [pid 23284:tid 23307] [client 20.197.183.189:65253] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 00:39:02.107692 2026] [proxy_fcgi:error] [pid 23284:tid 23292] [client 20.197.183.189:65253] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 00:39:02.419715 2026] [proxy_fcgi:error] [pid 23284:tid 23310] [client 20.197.183.189:65253] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 00:39:02.743759 2026] [proxy_fcgi:error] [pid 23284:tid 23294] [client 20.197.183.189:65253] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 00:39:03.056401 2026] [proxy_fcgi:error] [pid 23284:tid 23295] [client 20.197.183.189:65253] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 00:39:03.368186 2026] [proxy_fcgi:error] [pid 23284:tid 23288] [client 20.197.183.189:65253] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 00:39:03.677569 2026] [:error] [pid 23284:tid 23293] [client 20.197.183.189:65253] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nw.php"] [unique_id "aclVp4zBujdPHsq7wyQiZgAAAoc"]
[Mon Mar 30 00:39:04.313553 2026] [:error] [pid 32257:tid 32321] [client 20.197.183.189:64617] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nw.php"] [unique_id "aclVqCE3TArOFrUtgWqgugAAAIM"]
[Mon Mar 30 00:39:04.941061 2026] [:error] [pid 32255:tid 32295] [client 20.197.183.189:65226] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nw.php"] [unique_id "aclVqGnfn-AtRoMbquw9PQAAAEQ"]
[Mon Mar 30 00:39:05.566616 2026] [:error] [pid 32257:tid 32341] [client 20.197.183.189:65195] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nw.php"] [unique_id "aclVqSE3TArOFrUtgWqgwwAAAJc"]
[Mon Mar 30 00:39:06.238332 2026] [:error] [pid 23168:tid 23198] [client 20.197.183.189:64583] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rithin.php"] [unique_id "aclVqmP8p0yRL8ot_2_ZAQAAAgE"]
[Mon Mar 30 00:39:06.871703 2026] [:error] [pid 23284:tid 23291] [client 20.197.183.189:65187] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rithin.php"] [unique_id "aclVqozBujdPHsq7wyQiagAAAoU"]
[Mon Mar 30 00:39:07.503157 2026] [:error] [pid 23284:tid 23307] [client 20.197.183.189:65258] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rithin.php"] [unique_id "aclVq4zBujdPHsq7wyQicAAAApU"]
[Mon Mar 30 00:39:08.138571 2026] [:error] [pid 23284:tid 23302] [client 20.197.183.189:63936] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rithin.php"] [unique_id "aclVrIzBujdPHsq7wyQidgAAApA"]
[Mon Mar 30 00:39:08.771416 2026] [:error] [pid 32359:tid 32364] [client 20.197.183.189:65225] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tx78.php"] [unique_id "aclVrAMb8G3UzfQP3WhFJgAAAMM"]
[Mon Mar 30 00:39:09.420475 2026] [:error] [pid 23137:tid 23149] [client 20.197.183.189:64514] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tx78.php"] [unique_id "aclVrRaWQa7LdZ_qGFYXUAAAAYo"]
[Mon Mar 30 00:39:10.057094 2026] [:error] [pid 32257:tid 32333] [client 20.197.183.189:65172] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tx78.php"] [unique_id "aclVriE3TArOFrUtgWqg1AAAAI8"]
[Mon Mar 30 00:39:10.682989 2026] [:error] [pid 32359:tid 32368] [client 20.197.183.189:64569] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tx78.php"] [unique_id "aclVrgMb8G3UzfQP3WhFKAAAAMc"]
[Mon Mar 30 00:39:11.336750 2026] [:error] [pid 23284:tid 23290] [client 20.197.183.189:65238] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Sanskrit.php"] [unique_id "aclVr4zBujdPHsq7wyQigwAAAoQ"]
[Mon Mar 30 00:39:11.978857 2026] [:error] [pid 23284:tid 23309] [client 20.197.183.189:65197] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Sanskrit.php"] [unique_id "aclVr4zBujdPHsq7wyQiiAAAApc"]
[Mon Mar 30 00:39:12.624157 2026] [:error] [pid 32255:tid 32315] [client 20.197.183.189:64529] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Sanskrit.php"] [unique_id "aclVsGnfn-AtRoMbquw9WgAAAFg"]
[Mon Mar 30 00:39:13.260129 2026] [:error] [pid 32254:tid 32269] [client 20.197.183.189:63937] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Sanskrit.php"] [unique_id "aclVsaug2IHuyGgCTn9uvwAAAAU"]
[Mon Mar 30 00:39:13.886315 2026] [:error] [pid 23250:tid 23259] [client 20.197.183.189:64525] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jga.php"] [unique_id "aclVsZxrpj-dQjy1cvomBAAAAkc"]
[Mon Mar 30 00:39:14.509486 2026] [:error] [pid 23137:tid 23148] [client 20.197.183.189:64591] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jga.php"] [unique_id "aclVshaWQa7LdZ_qGFYXWQAAAYk"]
[Mon Mar 30 00:39:15.144783 2026] [:error] [pid 23284:tid 23288] [client 20.197.183.189:65216] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jga.php"] [unique_id "aclVs4zBujdPHsq7wyQilwAAAoI"]
[Mon Mar 30 00:39:15.789210 2026] [:error] [pid 32257:tid 32332] [client 20.197.183.189:65169] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jga.php"] [unique_id "aclVsyE3TArOFrUtgWqg4AAAAI4"]
[Mon Mar 30 00:39:16.451793 2026] [:error] [pid 8818:tid 8841] [client 20.197.183.189:64538] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/torsa1.php"] [unique_id "aclVtCCDvotZNSF0FBoG9QAAAVM"]
[Mon Mar 30 00:39:17.074120 2026] [:error] [pid 32255:tid 32301] [client 20.197.183.189:65237] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/torsa1.php"] [unique_id "aclVtWnfn-AtRoMbquw9dwAAAEo"]
[Mon Mar 30 00:39:17.712999 2026] [:error] [pid 32255:tid 32306] [client 20.197.183.189:65255] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/torsa1.php"] [unique_id "aclVtWnfn-AtRoMbquw9fQAAAE8"]
[Mon Mar 30 00:39:18.346647 2026] [:error] [pid 23284:tid 23303] [client 20.197.183.189:65212] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/torsa1.php"] [unique_id "aclVtozBujdPHsq7wyQipgAAApE"]
[Mon Mar 30 00:39:18.970838 2026] [:error] [pid 23284:tid 23296] [client 20.197.183.189:65263] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/222.php"] [unique_id "aclVtozBujdPHsq7wyQiqwAAAoo"]
[Mon Mar 30 00:39:19.593655 2026] [:error] [pid 23284:tid 23301] [client 20.197.183.189:64598] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/222.php"] [unique_id "aclVt4zBujdPHsq7wyQirQAAAo8"]
[Mon Mar 30 00:39:20.248249 2026] [:error] [pid 23284:tid 23287] [client 20.197.183.189:63947] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/222.php"] [unique_id "aclVuIzBujdPHsq7wyQisAAAAoE"]
[Mon Mar 30 00:39:20.872353 2026] [:error] [pid 23284:tid 23307] [client 20.197.183.189:64553] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/222.php"] [unique_id "aclVuIzBujdPHsq7wyQitwAAApU"]
[Mon Mar 30 00:39:21.503624 2026] [:error] [pid 23284:tid 23309] [client 20.197.183.189:65162] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hplfuns.php"] [unique_id "aclVuYzBujdPHsq7wyQivwAAApc"]
[Mon Mar 30 00:39:22.134436 2026] [:error] [pid 23284:tid 23287] [client 20.197.183.189:64519] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hplfuns.php"] [unique_id "aclVuozBujdPHsq7wyQiwQAAAoE"]
[Mon Mar 30 00:39:22.755555 2026] [:error] [pid 23284:tid 23289] [client 20.197.183.189:63953] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hplfuns.php"] [unique_id "aclVuozBujdPHsq7wyQixAAAAoM"]
[Mon Mar 30 00:39:23.374181 2026] [:error] [pid 23168:tid 23217] [client 20.197.183.189:65211] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hplfuns.php"] [unique_id "aclVu2P8p0yRL8ot_2_ZEQAAAhQ"]
[Mon Mar 30 00:39:23.995075 2026] [:error] [pid 32257:tid 32323] [client 20.197.183.189:64631] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "aclVuyE3TArOFrUtgWqg6QAAAIU"]
[Mon Mar 30 00:39:24.620158 2026] [:error] [pid 23284:tid 23299] [client 20.197.183.189:64585] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "aclVvIzBujdPHsq7wyQiywAAAo0"]
[Mon Mar 30 00:39:25.242518 2026] [:error] [pid 23137:tid 23159] [client 20.197.183.189:65267] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "aclVvRaWQa7LdZ_qGFYXZQAAAZQ"]
[Mon Mar 30 00:39:25.860424 2026] [:error] [pid 23284:tid 23292] [client 20.197.183.189:65200] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "aclVvYzBujdPHsq7wyQi0gAAAoY"]
[Mon Mar 30 00:39:26.480766 2026] [:error] [pid 8818:tid 8834] [client 20.197.183.189:64534] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/uuu.php"] [unique_id "aclVviCDvotZNSF0FBoHGAAAAUw"]
[Mon Mar 30 00:39:27.098182 2026] [:error] [pid 32257:tid 32322] [client 20.197.183.189:63938] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/uuu.php"] [unique_id "aclVvyE3TArOFrUtgWqg8QAAAIQ"]
[Mon Mar 30 00:39:27.718508 2026] [:error] [pid 32254:tid 32285] [client 20.197.183.189:64611] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/uuu.php"] [unique_id "aclVv6ug2IHuyGgCTn9uxwAAABU"]
[Mon Mar 30 00:39:28.337747 2026] [:error] [pid 23137:tid 23142] [client 20.197.183.189:64521] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/uuu.php"] [unique_id "aclVwBaWQa7LdZ_qGFYXagAAAYM"]
[Mon Mar 30 00:39:28.958770 2026] [:error] [pid 23284:tid 23295] [client 20.197.183.189:65183] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws81.php"] [unique_id "aclVwIzBujdPHsq7wyQi4AAAAok"]
[Mon Mar 30 00:39:29.582165 2026] [:error] [pid 23137:tid 23161] [client 20.197.183.189:64532] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws81.php"] [unique_id "aclVwRaWQa7LdZ_qGFYXbgAAAZY"]
[Mon Mar 30 00:39:30.200934 2026] [:error] [pid 23284:tid 23296] [client 20.197.183.189:65182] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws81.php"] [unique_id "aclVwozBujdPHsq7wyQi5AAAAoo"]
[Mon Mar 30 00:39:30.842134 2026] [:error] [pid 23284:tid 23288] [client 20.197.183.189:65239] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws81.php"] [unique_id "aclVwozBujdPHsq7wyQi6AAAAoI"]
[Mon Mar 30 00:39:31.472035 2026] [:error] [pid 23137:tid 23157] [client 20.197.183.189:63940] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/public/ws49.php"] [unique_id "aclVwxaWQa7LdZ_qGFYXcwAAAZI"]
[Mon Mar 30 00:39:32.097425 2026] [:error] [pid 23137:tid 23154] [client 20.197.183.189:64580] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/public/ws49.php"] [unique_id "aclVxBaWQa7LdZ_qGFYXdQAAAY8"]
[Mon Mar 30 00:39:32.718555 2026] [:error] [pid 32255:tid 32304] [client 20.197.183.189:64604] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/public/ws49.php"] [unique_id "aclVxGnfn-AtRoMbquw9lQAAAE0"]
[Mon Mar 30 00:39:33.341636 2026] [:error] [pid 32255:tid 32308] [client 20.197.183.189:64546] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/public/ws49.php"] [unique_id "aclVxWnfn-AtRoMbquw9nAAAAFE"]
[Mon Mar 30 00:39:33.977611 2026] [:error] [pid 23284:tid 23302] [client 20.197.183.189:64566] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gfd.php"] [unique_id "aclVxYzBujdPHsq7wyQi-AAAApA"]
[Mon Mar 30 00:39:34.601221 2026] [:error] [pid 32254:tid 32273] [client 20.197.183.189:64537] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gfd.php"] [unique_id "aclVxqug2IHuyGgCTn9u0AAAAAk"]
[Mon Mar 30 00:39:35.222620 2026] [:error] [pid 32257:tid 32332] [client 20.197.183.189:65209] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gfd.php"] [unique_id "aclVxyE3TArOFrUtgWqg-QAAAI4"]
[Mon Mar 30 00:39:35.849500 2026] [:error] [pid 32254:tid 32275] [client 20.197.183.189:64560] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gfd.php"] [unique_id "aclVx6ug2IHuyGgCTn9u0gAAAAs"]
[Mon Mar 30 00:39:36.480129 2026] [:error] [pid 23137:tid 23156] [client 20.197.183.189:63962] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/abrand.php"] [unique_id "aclVyBaWQa7LdZ_qGFYXdwAAAZE"]
[Mon Mar 30 00:39:37.104618 2026] [:error] [pid 32254:tid 32282] [client 20.197.183.189:63966] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/abrand.php"] [unique_id "aclVyaug2IHuyGgCTn9u1QAAABI"]
[Mon Mar 30 00:39:37.739617 2026] [:error] [pid 23137:tid 23162] [client 20.197.183.189:64630] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/abrand.php"] [unique_id "aclVyRaWQa7LdZ_qGFYXewAAAZc"]
[Mon Mar 30 00:39:38.388360 2026] [:error] [pid 23167:tid 23172] [client 20.197.183.189:64527] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/abrand.php"] [unique_id "aclVyhIAHJCFaHff3_fvuAAAAcI"]
[Mon Mar 30 00:39:39.042151 2026] [:error] [pid 32254:tid 32281] [client 20.197.183.189:64556] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/amp.php"] [unique_id "aclVy6ug2IHuyGgCTn9u3AAAABE"]
[Mon Mar 30 00:39:39.668180 2026] [:error] [pid 23137:tid 23160] [client 20.197.183.189:65206] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/amp.php"] [unique_id "aclVyxaWQa7LdZ_qGFYXgQAAAZU"]
[Mon Mar 30 00:39:40.298515 2026] [:error] [pid 32254:tid 32268] [client 20.197.183.189:63994] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/amp.php"] [unique_id "aclVzKug2IHuyGgCTn9u3gAAAAQ"]
[Mon Mar 30 00:39:40.916564 2026] [:error] [pid 23284:tid 23287] [client 20.197.183.189:65188] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/amp.php"] [unique_id "aclVzIzBujdPHsq7wyQjDgAAAoE"]
[Mon Mar 30 00:39:41.550184 2026] [:error] [pid 23167:tid 23173] [client 20.197.183.189:64544] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws75.php"] [unique_id "aclVzRIAHJCFaHff3_fvvgAAAcM"]
[Mon Mar 30 00:39:42.172075 2026] [:error] [pid 32255:tid 32299] [client 20.197.183.189:64517] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws75.php"] [unique_id "aclVzmnfn-AtRoMbquw9swAAAEg"]
[Mon Mar 30 00:39:42.808925 2026] [:error] [pid 23167:tid 23175] [client 20.197.183.189:65241] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws75.php"] [unique_id "aclVzhIAHJCFaHff3_fvxgAAAcU"]
[Mon Mar 30 00:39:43.429080 2026] [:error] [pid 23167:tid 23184] [client 20.197.183.189:64613] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws75.php"] [unique_id "aclVzxIAHJCFaHff3_fvywAAAc4"]
[Mon Mar 30 00:39:44.056385 2026] [:error] [pid 23168:tid 23202] [client 20.197.183.189:65254] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/install.php"] [unique_id "aclV0GP8p0yRL8ot_2_ZKAAAAgU"]
[Mon Mar 30 00:39:44.693036 2026] [:error] [pid 23284:tid 23301] [client 20.197.183.189:63949] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/install.php"] [unique_id "aclV0IzBujdPHsq7wyQjHAAAAo8"]
[Mon Mar 30 00:39:45.326928 2026] [:error] [pid 23168:tid 23211] [client 20.197.183.189:64625] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/install.php"] [unique_id "aclV0WP8p0yRL8ot_2_ZLQAAAg4"]
[Mon Mar 30 00:39:45.949458 2026] [:error] [pid 23250:tid 23276] [client 20.197.183.189:65157] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/install.php"] [unique_id "aclV0Zxrpj-dQjy1cvomNgAAAlg"]
[Mon Mar 30 00:39:46.570303 2026] [:error] [pid 32255:tid 32306] [client 20.197.183.189:64533] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/maul.php"] [unique_id "aclV0mnfn-AtRoMbquw9uAAAAE8"]
[Mon Mar 30 00:39:47.196498 2026] [:error] [pid 32257:tid 32323] [client 20.197.183.189:64639] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/maul.php"] [unique_id "aclV0yE3TArOFrUtgWqhAwAAAIU"]
[Mon Mar 30 00:39:47.817994 2026] [:error] [pid 32255:tid 32312] [client 20.197.183.189:63874] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/maul.php"] [unique_id "aclV02nfn-AtRoMbquw9uwAAAFU"]
[Mon Mar 30 00:39:48.441072 2026] [:error] [pid 23168:tid 23201] [client 20.197.183.189:65156] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/maul.php"] [unique_id "aclV1GP8p0yRL8ot_2_ZPQAAAgQ"]
[Mon Mar 30 00:39:49.075906 2026] [:error] [pid 23168:tid 23200] [client 20.197.183.189:65227] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lowpr.php"] [unique_id "aclV1WP8p0yRL8ot_2_ZQQAAAgM"]
[Mon Mar 30 00:39:49.695991 2026] [:error] [pid 32257:tid 32324] [client 20.197.183.189:64575] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lowpr.php"] [unique_id "aclV1SE3TArOFrUtgWqhCAAAAIY"]
[Mon Mar 30 00:39:50.315024 2026] [:error] [pid 32257:tid 32318] [client 20.197.183.189:64597] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lowpr.php"] [unique_id "aclV1iE3TArOFrUtgWqhDgAAAIA"]
[Mon Mar 30 00:39:50.936749 2026] [:error] [pid 32257:tid 32342] [client 20.197.183.189:65214] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lowpr.php"] [unique_id "aclV1iE3TArOFrUtgWqhFgAAAJg"]
[Mon Mar 30 00:39:51.563685 2026] [:error] [pid 23168:tid 23203] [client 20.197.183.189:63933] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/b.php"] [unique_id "aclV12P8p0yRL8ot_2_ZRwAAAgY"]
[Mon Mar 30 00:39:52.184330 2026] [:error] [pid 23284:tid 23287] [client 20.197.183.189:63326] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/b.php"] [unique_id "aclV2IzBujdPHsq7wyQjLgAAAoE"]
[Mon Mar 30 00:39:52.807671 2026] [:error] [pid 32255:tid 32314] [client 20.197.183.189:63981] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/b.php"] [unique_id "aclV2Gnfn-AtRoMbquw9wQAAAFc"]
[Mon Mar 30 00:39:53.437660 2026] [:error] [pid 32255:tid 32303] [client 20.197.183.189:63950] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/b.php"] [unique_id "aclV2Wnfn-AtRoMbquw9xAAAAEw"]
[Mon Mar 30 00:39:54.058249 2026] [:error] [pid 32257:tid 32337] [client 20.197.183.189:64632] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/166.php"] [unique_id "aclV2iE3TArOFrUtgWqhMgAAAJM"]
[Mon Mar 30 00:39:54.680571 2026] [:error] [pid 23250:tid 23272] [client 20.197.183.189:63897] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/166.php"] [unique_id "aclV2pxrpj-dQjy1cvomPQAAAlQ"]
[Mon Mar 30 00:39:55.299053 2026] [:error] [pid 32255:tid 32296] [client 20.197.183.189:64572] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/166.php"] [unique_id "aclV22nfn-AtRoMbquw9xwAAAEU"]
[Mon Mar 30 00:39:55.927613 2026] [:error] [pid 32257:tid 32323] [client 20.197.183.189:65229] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/166.php"] [unique_id "aclV2yE3TArOFrUtgWqhQAAAAIU"]
[Mon Mar 30 00:39:56.554475 2026] [:error] [pid 32257:tid 32333] [client 20.197.183.189:64614] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/domains.php"] [unique_id "aclV3CE3TArOFrUtgWqhRgAAAI8"]
[Mon Mar 30 00:39:57.179479 2026] [:error] [pid 23284:tid 23306] [client 20.197.183.189:65181] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/domains.php"] [unique_id "aclV3YzBujdPHsq7wyQjNgAAApQ"]
[Mon Mar 30 00:39:57.801393 2026] [:error] [pid 23250:tid 23258] [client 20.197.183.189:63984] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/domains.php"] [unique_id "aclV3Zxrpj-dQjy1cvomQgAAAkY"]
[Mon Mar 30 00:39:58.447176 2026] [:error] [pid 32359:tid 32361] [client 20.197.183.189:63945] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/domains.php"] [unique_id "aclV3gMb8G3UzfQP3WhFcQAAAMA"]
[Mon Mar 30 00:39:59.076723 2026] [:error] [pid 23250:tid 23256] [client 20.197.183.189:65277] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws85.php"] [unique_id "aclV35xrpj-dQjy1cvomRwAAAkQ"]
[Mon Mar 30 00:39:59.705726 2026] [:error] [pid 23167:tid 23181] [client 20.197.183.189:65234] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws85.php"] [unique_id "aclV3xIAHJCFaHff3_fv3gAAAcs"]
[Mon Mar 30 00:40:00.336896 2026] [:error] [pid 23284:tid 23288] [client 20.197.183.189:65265] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws85.php"] [unique_id "aclV4IzBujdPHsq7wyQjQgAAAoI"]
[Mon Mar 30 00:40:00.963681 2026] [:error] [pid 23284:tid 23303] [client 20.197.183.189:64550] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws85.php"] [unique_id "aclV4IzBujdPHsq7wyQjRAAAApE"]
[Mon Mar 30 00:40:01.599836 2026] [:error] [pid 23284:tid 23292] [client 20.197.183.189:65246] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-act.php"] [unique_id "aclV4YzBujdPHsq7wyQjRgAAAoY"]
[Mon Mar 30 00:40:02.232490 2026] [:error] [pid 32255:tid 32307] [client 20.197.183.189:63925] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-act.php"] [unique_id "aclV4mnfn-AtRoMbquw91AAAAFA"]
[Mon Mar 30 00:40:02.855051 2026] [:error] [pid 32255:tid 32300] [client 20.197.183.189:63963] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-act.php"] [unique_id "aclV4mnfn-AtRoMbquw91wAAAEk"]
[Mon Mar 30 00:40:03.508538 2026] [proxy_fcgi:error] [pid 23168:tid 23200] [client 20.197.183.189:64573] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 00:40:03.820507 2026] [proxy_fcgi:error] [pid 23168:tid 23221] [client 20.197.183.189:64573] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 00:40:04.132950 2026] [proxy_fcgi:error] [pid 23168:tid 23220] [client 20.197.183.189:64573] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 00:40:04.448170 2026] [proxy_fcgi:error] [pid 23168:tid 23219] [client 20.197.183.189:64573] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 00:40:04.763149 2026] [proxy_fcgi:error] [pid 23168:tid 23203] [client 20.197.183.189:64573] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 00:40:05.075833 2026] [proxy_fcgi:error] [pid 23168:tid 23202] [client 20.197.183.189:64573] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 00:40:05.388952 2026] [proxy_fcgi:error] [pid 23168:tid 23209] [client 20.197.183.189:64573] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 00:40:06.740795 2026] [proxy_fcgi:error] [pid 23168:tid 23206] [client 20.197.183.189:64573] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 00:40:07.053408 2026] [proxy_fcgi:error] [pid 23168:tid 23216] [client 20.197.183.189:64573] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 00:40:07.367158 2026] [proxy_fcgi:error] [pid 23168:tid 23210] [client 20.197.183.189:64573] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 00:40:07.682108 2026] [proxy_fcgi:error] [pid 23168:tid 23198] [client 20.197.183.189:64573] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 00:40:07.991137 2026] [:error] [pid 23168:tid 23201] [client 20.197.183.189:64573] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a5e0a.php"] [unique_id "aclV52P8p0yRL8ot_2_ZXAAAAgQ"]
[Mon Mar 30 00:40:08.637545 2026] [:error] [pid 32257:tid 32318] [client 20.197.183.189:65219] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a5e0a.php"] [unique_id "aclV6CE3TArOFrUtgWqhawAAAIA"]
[Mon Mar 30 00:40:09.262770 2026] [:error] [pid 32257:tid 32319] [client 20.197.183.189:64638] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a5e0a.php"] [unique_id "aclV6SE3TArOFrUtgWqhbwAAAIE"]
[Mon Mar 30 00:40:09.895327 2026] [:error] [pid 32257:tid 32321] [client 20.197.183.189:65180] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a5e0a.php"] [unique_id "aclV6SE3TArOFrUtgWqhdwAAAIM"]
[Mon Mar 30 00:40:10.528775 2026] [:error] [pid 32257:tid 32340] [client 20.197.183.189:63960] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/term.php"] [unique_id "aclV6iE3TArOFrUtgWqhfQAAAJY"]
[Mon Mar 30 00:40:11.164362 2026] [:error] [pid 23284:tid 23290] [client 20.197.183.189:64557] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/term.php"] [unique_id "aclV64zBujdPHsq7wyQjUQAAAoQ"]
[Mon Mar 30 00:40:11.783514 2026] [:error] [pid 23284:tid 23298] [client 20.197.183.189:65189] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/term.php"] [unique_id "aclV64zBujdPHsq7wyQjVgAAAow"]
[Mon Mar 30 00:40:12.401618 2026] [:error] [pid 32255:tid 32291] [client 20.197.183.189:64540] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/term.php"] [unique_id "aclV7Gnfn-AtRoMbquw-AgAAAEA"]
[Mon Mar 30 00:40:13.051055 2026] [:error] [pid 23284:tid 23308] [client 20.197.183.189:65261] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/edit.php"] [unique_id "aclV7YzBujdPHsq7wyQjWgAAApY"]
[Mon Mar 30 00:40:13.683960 2026] [:error] [pid 23250:tid 23276] [client 20.197.183.189:65275] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/edit.php"] [unique_id "aclV7Zxrpj-dQjy1cvomTwAAAlg"]
[Mon Mar 30 00:40:14.326126 2026] [:error] [pid 23284:tid 23303] [client 20.197.183.189:64524] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/edit.php"] [unique_id "aclV7ozBujdPHsq7wyQjXQAAApE"]
[Mon Mar 30 00:40:14.946190 2026] [:error] [pid 32255:tid 32307] [client 20.197.183.189:63300] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/edit.php"] [unique_id "aclV7mnfn-AtRoMbquw-CQAAAFA"]
[Mon Mar 30 00:40:15.572729 2026] [:error] [pid 8818:tid 8835] [client 20.197.183.189:64636] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/55b76.php"] [unique_id "aclV7yCDvotZNSF0FBoHTAAAAU0"]
[Mon Mar 30 00:40:16.195221 2026] [:error] [pid 23250:tid 23271] [client 20.197.183.189:63942] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/55b76.php"] [unique_id "aclV8Jxrpj-dQjy1cvomUAAAAlM"]
[Mon Mar 30 00:40:16.818008 2026] [:error] [pid 23284:tid 23298] [client 20.197.183.189:63977] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/55b76.php"] [unique_id "aclV8IzBujdPHsq7wyQjZQAAAow"]
[Mon Mar 30 00:40:17.450409 2026] [:error] [pid 23284:tid 23303] [client 20.197.183.189:64568] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/55b76.php"] [unique_id "aclV8YzBujdPHsq7wyQjaAAAApE"]
[Mon Mar 30 00:40:18.068431 2026] [:error] [pid 32257:tid 32333] [client 20.197.183.189:65264] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/asd.php"] [unique_id "aclV8iE3TArOFrUtgWqhggAAAI8"]
[Mon Mar 30 00:40:18.693785 2026] [:error] [pid 32257:tid 32330] [client 20.197.183.189:63957] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/asd.php"] [unique_id "aclV8iE3TArOFrUtgWqhgwAAAIw"]
[Mon Mar 30 00:40:19.317337 2026] [:error] [pid 23284:tid 23299] [client 20.197.183.189:64593] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/asd.php"] [unique_id "aclV84zBujdPHsq7wyQjdwAAAo0"]
[Mon Mar 30 00:40:19.934038 2026] [:error] [pid 23137:tid 23163] [client 20.197.183.189:63303] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/asd.php"] [unique_id "aclV8xaWQa7LdZ_qGFYXkgAAAZg"]
[Mon Mar 30 00:40:20.556411 2026] [:error] [pid 23284:tid 23292] [client 20.197.183.189:64516] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp9.php"] [unique_id "aclV9IzBujdPHsq7wyQjegAAAoY"]
[Mon Mar 30 00:40:21.182211 2026] [:error] [pid 23167:tid 23188] [client 20.197.183.189:63980] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp9.php"] [unique_id "aclV9RIAHJCFaHff3_fv8AAAAdI"]
[Mon Mar 30 00:40:21.814290 2026] [:error] [pid 23250:tid 23272] [client 20.197.183.189:63992] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp9.php"] [unique_id "aclV9Zxrpj-dQjy1cvomUwAAAlQ"]
[Mon Mar 30 00:40:22.456445 2026] [:error] [pid 32255:tid 32299] [client 20.197.183.189:63896] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp9.php"] [unique_id "aclV9mnfn-AtRoMbquw-EAAAAEg"]
[Mon Mar 30 00:40:23.098663 2026] [:error] [pid 23284:tid 23308] [client 20.197.183.189:63872] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/8.php"] [unique_id "aclV94zBujdPHsq7wyQjgAAAApY"]
[Mon Mar 30 00:40:23.730287 2026] [:error] [pid 23284:tid 23297] [client 20.197.183.189:63330] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/8.php"] [unique_id "aclV94zBujdPHsq7wyQjggAAAos"]
[Mon Mar 30 00:40:24.358964 2026] [:error] [pid 23168:tid 23198] [client 20.197.183.189:63967] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/8.php"] [unique_id "aclV-GP8p0yRL8ot_2_ZaQAAAgE"]
[Mon Mar 30 00:40:24.993523 2026] [:error] [pid 23284:tid 23302] [client 20.197.183.189:65271] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/8.php"] [unique_id "aclV-IzBujdPHsq7wyQjhgAAApA"]
[Mon Mar 30 00:40:25.618356 2026] [:error] [pid 32257:tid 32338] [client 20.197.183.189:64515] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/byypas.php"] [unique_id "aclV-SE3TArOFrUtgWqhmQAAAJQ"]
[Mon Mar 30 00:40:26.244013 2026] [:error] [pid 23284:tid 23308] [client 20.197.183.189:64558] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/byypas.php"] [unique_id "aclV-ozBujdPHsq7wyQjjgAAApY"]
[Mon Mar 30 00:40:26.867135 2026] [:error] [pid 23137:tid 23156] [client 20.197.183.189:63974] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/byypas.php"] [unique_id "aclV-haWQa7LdZ_qGFYXlQAAAZE"]
[Mon Mar 30 00:40:27.489184 2026] [:error] [pid 23250:tid 23265] [client 20.197.183.189:63927] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/byypas.php"] [unique_id "aclV-5xrpj-dQjy1cvomVwAAAk0"]
[Mon Mar 30 00:40:28.114741 2026] [:error] [pid 32257:tid 32325] [client 20.197.183.189:64559] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/drhunthq.php"] [unique_id "aclV_CE3TArOFrUtgWqhqgAAAIc"]
[Mon Mar 30 00:40:28.741672 2026] [:error] [pid 23168:tid 23201] [client 20.197.183.189:64600] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/drhunthq.php"] [unique_id "aclV_GP8p0yRL8ot_2_ZdwAAAgQ"]
[Mon Mar 30 00:40:29.377047 2026] [:error] [pid 32255:tid 32312] [client 20.197.183.189:64536] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/drhunthq.php"] [unique_id "aclV_Wnfn-AtRoMbquw-FQAAAFU"]
[Mon Mar 30 00:40:30.011580 2026] [:error] [pid 23167:tid 23176] [client 20.197.183.189:64561] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/drhunthq.php"] [unique_id "aclV_hIAHJCFaHff3_fv9QAAAcY"]
[Mon Mar 30 00:40:30.626988 2026] [:error] [pid 23250:tid 23258] [client 20.197.183.189:64618] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/public/file.php"] [unique_id "aclV_pxrpj-dQjy1cvomWgAAAkY"]
[Mon Mar 30 00:40:31.252147 2026] [:error] [pid 23284:tid 23310] [client 20.197.183.189:64627] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/public/file.php"] [unique_id "aclV_4zBujdPHsq7wyQjngAAApg"]
[Mon Mar 30 00:40:31.871641 2026] [:error] [pid 32257:tid 32340] [client 20.197.183.189:64530] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/public/file.php"] [unique_id "aclV_yE3TArOFrUtgWqhwAAAAJY"]
[Mon Mar 30 00:40:32.488686 2026] [:error] [pid 32257:tid 32326] [client 20.197.183.189:65184] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/public/file.php"] [unique_id "aclWACE3TArOFrUtgWqhyAAAAIg"]
[Mon Mar 30 00:40:33.110405 2026] [:error] [pid 23284:tid 23300] [client 20.197.183.189:65231] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xxw.php"] [unique_id "aclWAYzBujdPHsq7wyQjowAAAo4"]
[Mon Mar 30 00:40:33.730624 2026] [:error] [pid 23250:tid 23259] [client 20.197.183.189:64621] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xxw.php"] [unique_id "aclWAZxrpj-dQjy1cvomXgAAAkc"]
[Mon Mar 30 00:40:34.360568 2026] [:error] [pid 32257:tid 32329] [client 20.197.183.189:64574] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xxw.php"] [unique_id "aclWAiE3TArOFrUtgWqh1AAAAIs"]
[Mon Mar 30 00:40:34.980594 2026] [:error] [pid 23284:tid 23304] [client 20.197.183.189:63905] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xxw.php"] [unique_id "aclWAozBujdPHsq7wyQjqAAAApI"]
[Mon Mar 30 00:40:35.599565 2026] [:error] [pid 23284:tid 23286] [client 20.197.183.189:64588] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wen.php"] [unique_id "aclWA4zBujdPHsq7wyQjsQAAAoA"]
[Mon Mar 30 00:40:36.222972 2026] [:error] [pid 32257:tid 32340] [client 20.197.183.189:64637] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wen.php"] [unique_id "aclWBCE3TArOFrUtgWqh2gAAAJY"]
[Mon Mar 30 00:40:36.843824 2026] [:error] [pid 32257:tid 32330] [client 20.197.183.189:63989] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wen.php"] [unique_id "aclWBCE3TArOFrUtgWqh3QAAAIw"]
[Mon Mar 30 00:40:37.460881 2026] [:error] [pid 32257:tid 32321] [client 20.197.183.189:63971] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wen.php"] [unique_id "aclWBSE3TArOFrUtgWqh5QAAAIM"]
[Mon Mar 30 00:40:38.087056 2026] [:error] [pid 32255:tid 32307] [client 20.197.183.189:65243] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws87.php"] [unique_id "aclWBmnfn-AtRoMbquw-HQAAAFA"]
[Mon Mar 30 00:40:38.706884 2026] [:error] [pid 32255:tid 32296] [client 20.197.183.189:63943] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws87.php"] [unique_id "aclWBmnfn-AtRoMbquw-IQAAAEU"]
[Mon Mar 30 00:40:39.324998 2026] [:error] [pid 23137:tid 23163] [client 20.197.183.189:65177] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws87.php"] [unique_id "aclWBxaWQa7LdZ_qGFYXugAAAZg"]
[Mon Mar 30 00:40:39.941622 2026] [:error] [pid 23168:tid 23210] [client 20.197.183.189:63313] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws87.php"] [unique_id "aclWB2P8p0yRL8ot_2_ZewAAAg0"]
[Mon Mar 30 00:40:40.560837 2026] [:error] [pid 32257:tid 32326] [client 20.197.183.189:63886] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lm15.php"] [unique_id "aclWCCE3TArOFrUtgWqh7gAAAIg"]
[Mon Mar 30 00:40:41.183559 2026] [:error] [pid 23137:tid 23158] [client 20.197.183.189:63920] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lm15.php"] [unique_id "aclWCRaWQa7LdZ_qGFYXvAAAAZM"]
[Mon Mar 30 00:40:41.801993 2026] [:error] [pid 32359:tid 32367] [client 20.197.183.189:64559] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lm15.php"] [unique_id "aclWCQMb8G3UzfQP3WhFkgAAAMY"]
[Mon Mar 30 00:40:42.423046 2026] [:error] [pid 23168:tid 23211] [client 20.197.183.189:63908] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lm15.php"] [unique_id "aclWCmP8p0yRL8ot_2_ZgQAAAg4"]
[Mon Mar 30 00:40:43.046531 2026] [:error] [pid 32257:tid 32326] [client 20.197.183.189:64528] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/green.php"] [unique_id "aclWCyE3TArOFrUtgWqh9QAAAIg"]
[Mon Mar 30 00:40:43.667829 2026] [:error] [pid 23167:tid 23190] [client 20.197.183.189:64602] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/green.php"] [unique_id "aclWCxIAHJCFaHff3_fv_wAAAdQ"]
[Mon Mar 30 00:40:44.313184 2026] [:error] [pid 23284:tid 23287] [client 20.197.183.189:64513] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/green.php"] [unique_id "aclWDIzBujdPHsq7wyQjxQAAAoE"]
[Mon Mar 30 00:40:44.943604 2026] [:error] [pid 23250:tid 23275] [client 20.197.183.189:64581] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/green.php"] [unique_id "aclWDJxrpj-dQjy1cvomZwAAAlc"]
[Mon Mar 30 00:40:45.568033 2026] [:error] [pid 23168:tid 23218] [client 20.197.183.189:63995] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/albin.php"] [unique_id "aclWDWP8p0yRL8ot_2_ZhgAAAhU"]
[Mon Mar 30 00:40:46.185312 2026] [:error] [pid 32254:tid 32283] [client 20.197.183.189:63951] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/albin.php"] [unique_id "aclWDqug2IHuyGgCTn9u-gAAABM"]
[Mon Mar 30 00:40:46.816633 2026] [:error] [pid 23168:tid 23214] [client 20.197.183.189:64547] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/albin.php"] [unique_id "aclWDmP8p0yRL8ot_2_ZhwAAAhE"]
[Mon Mar 30 00:40:47.437713 2026] [:error] [pid 32257:tid 32323] [client 20.197.183.189:63883] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/albin.php"] [unique_id "aclWDyE3TArOFrUtgWqh-wAAAIU"]
[Mon Mar 30 00:40:48.070537 2026] [:error] [pid 32257:tid 32320] [client 20.197.183.189:64552] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/inputs.php"] [unique_id "aclWECE3TArOFrUtgWqiAQAAAII"]
[Mon Mar 30 00:40:48.689859 2026] [:error] [pid 23284:tid 23304] [client 20.197.183.189:63894] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/inputs.php"] [unique_id "aclWEIzBujdPHsq7wyQjygAAApI"]
[Mon Mar 30 00:40:49.328529 2026] [:error] [pid 23167:tid 23170] [client 20.197.183.189:64603] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/inputs.php"] [unique_id "aclWERIAHJCFaHff3_fwFAAAAcA"]
[Mon Mar 30 00:40:49.951596 2026] [:error] [pid 23284:tid 23300] [client 20.197.183.189:64564] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/inputs.php"] [unique_id "aclWEYzBujdPHsq7wyQjzgAAAo4"]
[Mon Mar 30 00:40:50.570497 2026] [:error] [pid 23167:tid 23176] [client 20.197.183.189:65176] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/inege.php"] [unique_id "aclWEhIAHJCFaHff3_fwGgAAAcY"]
[Mon Mar 30 00:40:51.192022 2026] [:error] [pid 23168:tid 23204] [client 20.197.183.189:63944] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/inege.php"] [unique_id "aclWE2P8p0yRL8ot_2_ZkwAAAgc"]
[Mon Mar 30 00:40:51.816138 2026] [:error] [pid 23167:tid 23172] [client 20.197.183.189:63931] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/inege.php"] [unique_id "aclWExIAHJCFaHff3_fwHQAAAcI"]
[Mon Mar 30 00:40:52.442344 2026] [:error] [pid 32257:tid 32337] [client 20.197.183.189:64526] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/inege.php"] [unique_id "aclWFCE3TArOFrUtgWqiCQAAAJM"]
[Mon Mar 30 00:40:53.061740 2026] [:error] [pid 23168:tid 23209] [client 20.197.183.189:64554] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gettest.php"] [unique_id "aclWFWP8p0yRL8ot_2_ZlwAAAgw"]
[Mon Mar 30 00:40:53.685568 2026] [:error] [pid 23284:tid 23310] [client 20.197.183.189:65204] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gettest.php"] [unique_id "aclWFYzBujdPHsq7wyQj0wAAApg"]
[Mon Mar 30 00:40:54.310275 2026] [:error] [pid 23167:tid 23190] [client 20.197.183.189:64548] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gettest.php"] [unique_id "aclWFhIAHJCFaHff3_fwJQAAAdQ"]
[Mon Mar 30 00:40:54.944153 2026] [:error] [pid 23167:tid 23184] [client 20.197.183.189:63337] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gettest.php"] [unique_id "aclWFhIAHJCFaHff3_fwJwAAAc4"]
[Mon Mar 30 00:40:55.572610 2026] [:error] [pid 32359:tid 32361] [client 20.197.183.189:63305] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ccs.php"] [unique_id "aclWFwMb8G3UzfQP3WhFnAAAAMA"]
[Mon Mar 30 00:40:56.196864 2026] [:error] [pid 23284:tid 23303] [client 20.197.183.189:64601] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ccs.php"] [unique_id "aclWGIzBujdPHsq7wyQj5gAAApE"]
[Mon Mar 30 00:40:56.820417 2026] [:error] [pid 23167:tid 23192] [client 20.197.183.189:65201] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ccs.php"] [unique_id "aclWGBIAHJCFaHff3_fwKgAAAdY"]
[Mon Mar 30 00:40:57.452161 2026] [:error] [pid 32359:tid 32384] [client 20.197.183.189:65170] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ccs.php"] [unique_id "aclWGQMb8G3UzfQP3WhFngAAANc"]
[Mon Mar 30 00:40:58.074664 2026] [:error] [pid 32257:tid 32327] [client 20.197.183.189:64596] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/clss.php"] [unique_id "aclWGiE3TArOFrUtgWqiDQAAAIk"]
[Mon Mar 30 00:40:58.704023 2026] [:error] [pid 23250:tid 23267] [client 20.197.183.189:64531] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/clss.php"] [unique_id "aclWGpxrpj-dQjy1cvombAAAAk8"]
[Mon Mar 30 00:40:59.355548 2026] [:error] [pid 23167:tid 23170] [client 20.197.183.189:63267] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/clss.php"] [unique_id "aclWGxIAHJCFaHff3_fwPAAAAcA"]
[Mon Mar 30 00:40:59.996579 2026] [:error] [pid 23167:tid 23179] [client 20.197.183.189:63921] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/clss.php"] [unique_id "aclWGxIAHJCFaHff3_fwQgAAAck"]
[Mon Mar 30 00:41:00.636044 2026] [:error] [pid 23167:tid 23174] [client 20.197.183.189:63988] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/radio.php"] [unique_id "aclWHBIAHJCFaHff3_fwRQAAAcQ"]
[Mon Mar 30 00:41:01.262919 2026] [:error] [pid 32255:tid 32308] [client 20.197.183.189:64570] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/radio.php"] [unique_id "aclWHWnfn-AtRoMbquw-LwAAAFE"]
[Mon Mar 30 00:41:01.901663 2026] [:error] [pid 8818:tid 8839] [client 20.197.183.189:64551] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/radio.php"] [unique_id "aclWHSCDvotZNSF0FBoHZAAAAVE"]
[Mon Mar 30 00:41:02.521707 2026] [:error] [pid 32255:tid 32304] [client 20.197.183.189:63978] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/radio.php"] [unique_id "aclWHmnfn-AtRoMbquw-MwAAAE0"]
[Mon Mar 30 00:41:03.153175 2026] [:error] [pid 32257:tid 32336] [client 20.197.183.189:63916] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-blog.php"] [unique_id "aclWHyE3TArOFrUtgWqiFQAAAJI"]
[Mon Mar 30 00:41:03.798308 2026] [:error] [pid 32255:tid 32301] [client 20.197.183.189:63882] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-blog.php"] [unique_id "aclWH2nfn-AtRoMbquw-NgAAAEo"]
[Mon Mar 30 00:41:04.441629 2026] [:error] [pid 32255:tid 32310] [client 20.197.183.189:63891] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-blog.php"] [unique_id "aclWIGnfn-AtRoMbquw-OQAAAFM"]
[Mon Mar 30 00:41:05.083830 2026] [:error] [pid 32257:tid 32324] [client 20.197.183.189:63948] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-blog.php"] [unique_id "aclWISE3TArOFrUtgWqiGAAAAIY"]
[Mon Mar 30 00:41:05.747818 2026] [:error] [pid 23167:tid 23176] [client 20.197.183.189:63919] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/init.php"] [unique_id "aclWIRIAHJCFaHff3_fwUQAAAcY"]
[Mon Mar 30 00:41:06.388270 2026] [:error] [pid 32255:tid 32301] [client 20.197.183.189:63934] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/init.php"] [unique_id "aclWImnfn-AtRoMbquw-RQAAAEo"]
[Mon Mar 30 00:41:07.026729 2026] [proxy_fcgi:error] [pid 23167:tid 23187] [client 20.197.183.189:64623] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 00:41:07.339994 2026] [proxy_fcgi:error] [pid 23167:tid 23186] [client 20.197.183.189:64623] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 00:41:07.652366 2026] [proxy_fcgi:error] [pid 23167:tid 23170] [client 20.197.183.189:64623] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 00:41:07.962845 2026] [proxy_fcgi:error] [pid 23167:tid 23175] [client 20.197.183.189:64623] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 00:41:08.987211 2026] [proxy_fcgi:error] [pid 23167:tid 23185] [client 20.197.183.189:64623] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 00:41:09.302250 2026] [proxy_fcgi:error] [pid 23167:tid 23194] [client 20.197.183.189:64623] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 00:41:09.613902 2026] [proxy_fcgi:error] [pid 23167:tid 23181] [client 20.197.183.189:64623] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 00:41:09.926589 2026] [proxy_fcgi:error] [pid 23167:tid 23187] [client 20.197.183.189:64623] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 00:41:10.238905 2026] [proxy_fcgi:error] [pid 23167:tid 23171] [client 20.197.183.189:64623] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 00:41:10.552718 2026] [proxy_fcgi:error] [pid 23167:tid 23180] [client 20.197.183.189:64623] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 00:41:10.860797 2026] [:error] [pid 23167:tid 23170] [client 20.197.183.189:64623] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-the.php"] [unique_id "aclWJhIAHJCFaHff3_fwZQAAAcA"]
[Mon Mar 30 00:41:11.479719 2026] [:error] [pid 8818:tid 8829] [client 20.197.183.189:65196] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-the.php"] [unique_id "aclWJyCDvotZNSF0FBoHcQAAAUc"]
[Mon Mar 30 00:41:12.105122 2026] [:error] [pid 8818:tid 8839] [client 20.197.183.189:63964] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-the.php"] [unique_id "aclWKCCDvotZNSF0FBoHdQAAAVE"]
[Mon Mar 30 00:41:12.732681 2026] [:error] [pid 23168:tid 23203] [client 20.197.183.189:63900] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-the.php"] [unique_id "aclWKGP8p0yRL8ot_2_ZsgAAAgY"]
[Mon Mar 30 00:41:13.355606 2026] [:error] [pid 23167:tid 23188] [client 20.197.183.189:63911] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/okxh.php"] [unique_id "aclWKRIAHJCFaHff3_fwaAAAAdI"]
[Mon Mar 30 00:41:13.984600 2026] [:error] [pid 32255:tid 32306] [client 20.197.183.189:65278] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/okxh.php"] [unique_id "aclWKWnfn-AtRoMbquw-VgAAAE8"]
[Mon Mar 30 00:41:14.617561 2026] [:error] [pid 32257:tid 32342] [client 20.197.183.189:62694] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/okxh.php"] [unique_id "aclWKiE3TArOFrUtgWqiHQAAAJg"]
[Mon Mar 30 00:41:15.258950 2026] [:error] [pid 23167:tid 23178] [client 20.197.183.189:63996] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/okxh.php"] [unique_id "aclWKxIAHJCFaHff3_fwagAAAcg"]
[Mon Mar 30 00:41:15.889419 2026] [:error] [pid 23284:tid 23305] [client 20.197.183.189:63284] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lib.php"] [unique_id "aclWK4zBujdPHsq7wyQj9wAAApM"]
[Mon Mar 30 00:41:16.507425 2026] [:error] [pid 23168:tid 23218] [client 20.197.183.189:63955] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lib.php"] [unique_id "aclWLGP8p0yRL8ot_2_ZvwAAAhU"]
[Mon Mar 30 00:41:17.139187 2026] [:error] [pid 23168:tid 23202] [client 20.197.183.189:65166] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lib.php"] [unique_id "aclWLWP8p0yRL8ot_2_ZxwAAAgU"]
[Mon Mar 30 00:41:17.757098 2026] [:error] [pid 32255:tid 32295] [client 20.197.183.189:63954] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lib.php"] [unique_id "aclWLWnfn-AtRoMbquw-aAAAAEQ"]
[Mon Mar 30 00:41:18.380580 2026] [:error] [pid 23284:tid 23297] [client 20.197.183.189:64605] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zc-104.php"] [unique_id "aclWLozBujdPHsq7wyQj-gAAAos"]
[Mon Mar 30 00:41:19.004144 2026] [:error] [pid 23137:tid 23154] [client 20.197.183.189:64563] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zc-104.php"] [unique_id "aclWLxaWQa7LdZ_qGFYXzgAAAY8"]
[Mon Mar 30 00:41:19.639162 2026] [:error] [pid 23137:tid 23146] [client 20.197.183.189:64633] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zc-104.php"] [unique_id "aclWLxaWQa7LdZ_qGFYXzwAAAYc"]
[Mon Mar 30 00:41:20.264667 2026] [:error] [pid 23284:tid 23293] [client 20.197.183.189:64622] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zc-104.php"] [unique_id "aclWMIzBujdPHsq7wyQj_gAAAoc"]
[Mon Mar 30 00:41:20.892826 2026] [:error] [pid 23168:tid 23207] [client 20.197.183.189:63998] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws86.php"] [unique_id "aclWMGP8p0yRL8ot_2_Z5QAAAgo"]
[Mon Mar 30 00:41:21.508889 2026] [:error] [pid 23284:tid 23310] [client 20.197.183.189:63291] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws86.php"] [unique_id "aclWMYzBujdPHsq7wyQkBAAAApg"]
[Mon Mar 30 00:41:22.132183 2026] [:error] [pid 32254:tid 32267] [client 20.197.183.189:63332] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws86.php"] [unique_id "aclWMqug2IHuyGgCTn9vEAAAAAM"]
[Mon Mar 30 00:41:22.757899 2026] [:error] [pid 32359:tid 32377] [client 20.197.183.189:63875] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws86.php"] [unique_id "aclWMgMb8G3UzfQP3WhFxAAAANA"]
[Mon Mar 30 00:41:23.382870 2026] [:error] [pid 32257:tid 32333] [client 20.197.183.189:63342] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-blogs.php"] [unique_id "aclWMyE3TArOFrUtgWqiIQAAAI8"]
[Mon Mar 30 00:41:24.017070 2026] [:error] [pid 32255:tid 32300] [client 20.197.183.189:63885] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-blogs.php"] [unique_id "aclWNGnfn-AtRoMbquw-gQAAAEk"]
[Mon Mar 30 00:41:24.656380 2026] [:error] [pid 32257:tid 32321] [client 20.197.183.189:63328] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-blogs.php"] [unique_id "aclWNCE3TArOFrUtgWqiJQAAAIM"]
[Mon Mar 30 00:41:25.310028 2026] [:error] [pid 32257:tid 32319] [client 20.197.183.189:63961] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-blogs.php"] [unique_id "aclWNSE3TArOFrUtgWqiKgAAAIE"]
[Mon Mar 30 00:41:25.957162 2026] [:error] [pid 32257:tid 32326] [client 20.197.183.189:64635] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/as.php"] [unique_id "aclWNSE3TArOFrUtgWqiMgAAAIg"]
[Mon Mar 30 00:41:26.603681 2026] [:error] [pid 32257:tid 32328] [client 20.197.183.189:63965] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/as.php"] [unique_id "aclWNiE3TArOFrUtgWqiOQAAAIo"]
[Mon Mar 30 00:41:27.228280 2026] [:error] [pid 23284:tid 23288] [client 20.197.183.189:64567] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/as.php"] [unique_id "aclWN4zBujdPHsq7wyQkCgAAAoI"]
[Mon Mar 30 00:41:27.864402 2026] [:error] [pid 23284:tid 23309] [client 20.197.183.189:63315] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/as.php"] [unique_id "aclWN4zBujdPHsq7wyQkDwAAApc"]
[Mon Mar 30 00:41:28.491209 2026] [:error] [pid 32257:tid 32336] [client 20.197.183.189:63355] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Cap.php"] [unique_id "aclWOCE3TArOFrUtgWqiPQAAAJI"]
[Mon Mar 30 00:41:29.142488 2026] [:error] [pid 32257:tid 32320] [client 20.197.183.189:63903] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Cap.php"] [unique_id "aclWOSE3TArOFrUtgWqiQgAAAII"]
[Mon Mar 30 00:41:29.765725 2026] [:error] [pid 32255:tid 32291] [client 20.197.183.189:63904] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Cap.php"] [unique_id "aclWOWnfn-AtRoMbquw-hQAAAEA"]
[Mon Mar 30 00:41:30.393966 2026] [:error] [pid 23284:tid 23305] [client 20.197.183.189:63322] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Cap.php"] [unique_id "aclWOozBujdPHsq7wyQkFAAAApM"]
[Mon Mar 30 00:41:31.019435 2026] [:error] [pid 32254:tid 32275] [client 20.197.183.189:63240] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xfun.php"] [unique_id "aclWO6ug2IHuyGgCTn9vFgAAAAs"]
[Mon Mar 30 00:41:31.636786 2026] [:error] [pid 23284:tid 23306] [client 20.197.183.189:64539] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xfun.php"] [unique_id "aclWO4zBujdPHsq7wyQkGAAAApQ"]
[Mon Mar 30 00:41:32.269468 2026] [:error] [pid 32359:tid 32382] [client 20.197.183.189:64620] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xfun.php"] [unique_id "aclWPAMb8G3UzfQP3WhFygAAANU"]
[Mon Mar 30 00:41:32.894458 2026] [:error] [pid 32257:tid 32339] [client 20.197.183.189:63970] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xfun.php"] [unique_id "aclWPCE3TArOFrUtgWqiSgAAAJU"]
[Mon Mar 30 00:41:33.511454 2026] [:error] [pid 32257:tid 32333] [client 20.197.183.189:63312] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bjfl.php"] [unique_id "aclWPSE3TArOFrUtgWqiSwAAAI8"]
[Mon Mar 30 00:41:34.138992 2026] [:error] [pid 32257:tid 32337] [client 20.197.183.189:63873] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bjfl.php"] [unique_id "aclWPiE3TArOFrUtgWqiVAAAAJM"]
[Mon Mar 30 00:41:34.757285 2026] [:error] [pid 8818:tid 8845] [client 20.197.183.189:63304] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bjfl.php"] [unique_id "aclWPiCDvotZNSF0FBoHmAAAAVc"]
[Mon Mar 30 00:41:35.382052 2026] [:error] [pid 23284:tid 23287] [client 20.197.183.189:63930] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bjfl.php"] [unique_id "aclWP4zBujdPHsq7wyQkGgAAAoE"]
[Mon Mar 30 00:41:36.016208 2026] [:error] [pid 23284:tid 23301] [client 20.197.183.189:63247] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/155.php"] [unique_id "aclWQIzBujdPHsq7wyQkHAAAAo8"]
[Mon Mar 30 00:41:36.646044 2026] [:error] [pid 32255:tid 32300] [client 20.197.183.189:63311] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/155.php"] [unique_id "aclWQGnfn-AtRoMbquw-lAAAAEk"]
[Mon Mar 30 00:41:37.266305 2026] [:error] [pid 23167:tid 23194] [client 20.197.183.189:64523] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/155.php"] [unique_id "aclWQRIAHJCFaHff3_fwdgAAAdg"]
[Mon Mar 30 00:41:37.896987 2026] [:error] [pid 32257:tid 32330] [client 20.197.183.189:63915] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/155.php"] [unique_id "aclWQSE3TArOFrUtgWqiWQAAAIw"]
[Mon Mar 30 00:41:38.531946 2026] [:error] [pid 23284:tid 23310] [client 20.197.183.189:63952] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rzki.php"] [unique_id "aclWQozBujdPHsq7wyQkIgAAApg"]
[Mon Mar 30 00:41:39.162666 2026] [:error] [pid 23284:tid 23305] [client 20.197.183.189:63336] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rzki.php"] [unique_id "aclWQ4zBujdPHsq7wyQkJwAAApM"]
[Mon Mar 30 00:41:39.783587 2026] [:error] [pid 23284:tid 23306] [client 20.197.183.189:64584] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rzki.php"] [unique_id "aclWQ4zBujdPHsq7wyQkKgAAApQ"]
[Mon Mar 30 00:41:40.445451 2026] [:error] [pid 23168:tid 23202] [client 20.197.183.189:64606] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rzki.php"] [unique_id "aclWRGP8p0yRL8ot_2_aAwAAAgU"]
[Mon Mar 30 00:41:41.079734 2026] [:error] [pid 23284:tid 23294] [client 20.197.183.189:63993] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aclWRYzBujdPHsq7wyQkLQAAAog"]
[Mon Mar 30 00:41:41.717755 2026] [:error] [pid 23284:tid 23287] [client 20.197.183.189:63987] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aclWRYzBujdPHsq7wyQkNAAAAoE"]
[Mon Mar 30 00:41:42.352300 2026] [:error] [pid 32257:tid 32328] [client 20.197.183.189:63343] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aclWRiE3TArOFrUtgWqibgAAAIo"]
[Mon Mar 30 00:41:42.974883 2026] [:error] [pid 32257:tid 32342] [client 20.197.183.189:63324] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aclWRiE3TArOFrUtgWqicgAAAJg"]
[Mon Mar 30 00:41:43.618841 2026] [:error] [pid 32257:tid 32340] [client 20.197.183.189:64626] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws49.php"] [unique_id "aclWRyE3TArOFrUtgWqieAAAAJY"]
[Mon Mar 30 00:41:44.260741 2026] [:error] [pid 23168:tid 23205] [client 20.197.183.189:63346] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws49.php"] [unique_id "aclWSGP8p0yRL8ot_2_aCQAAAgg"]
[Mon Mar 30 00:41:44.879497 2026] [:error] [pid 32257:tid 32334] [client 20.197.183.189:63976] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws49.php"] [unique_id "aclWSCE3TArOFrUtgWqihwAAAJA"]
[Mon Mar 30 00:41:45.512758 2026] [:error] [pid 23168:tid 23220] [client 20.197.183.189:63991] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws49.php"] [unique_id "aclWSWP8p0yRL8ot_2_aCwAAAhc"]
[Mon Mar 30 00:41:46.139334 2026] [:error] [pid 32257:tid 32332] [client 20.197.183.189:63956] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tool.php"] [unique_id "aclWSiE3TArOFrUtgWqikwAAAI4"]
[Mon Mar 30 00:41:46.773292 2026] [:error] [pid 32257:tid 32318] [client 20.197.183.189:62612] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tool.php"] [unique_id "aclWSiE3TArOFrUtgWqimAAAAIA"]
[Mon Mar 30 00:41:47.432592 2026] [:error] [pid 23250:tid 23257] [client 20.197.183.189:63876] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tool.php"] [unique_id "aclWS5xrpj-dQjy1cvomggAAAkU"]
[Mon Mar 30 00:41:48.074887 2026] [:error] [pid 32255:tid 32300] [client 20.197.183.189:65279] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tool.php"] [unique_id "aclWTGnfn-AtRoMbquw-mgAAAEk"]
[Mon Mar 30 00:41:48.697898 2026] [:error] [pid 23284:tid 23293] [client 20.197.183.189:62657] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ww.php"] [unique_id "aclWTIzBujdPHsq7wyQkQAAAAoc"]
[Mon Mar 30 00:41:49.333770 2026] [:error] [pid 23284:tid 23296] [client 20.197.183.189:63257] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ww.php"] [unique_id "aclWTYzBujdPHsq7wyQkRAAAAoo"]
[Mon Mar 30 00:41:49.957678 2026] [:error] [pid 32257:tid 32318] [client 20.197.183.189:63880] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ww.php"] [unique_id "aclWTSE3TArOFrUtgWqiqgAAAIA"]
[Mon Mar 30 00:41:50.579592 2026] [:error] [pid 32257:tid 32333] [client 20.197.183.189:63997] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ww.php"] [unique_id "aclWTiE3TArOFrUtgWqisgAAAI8"]
[Mon Mar 30 00:41:51.203096 2026] [:error] [pid 23167:tid 23177] [client 20.197.183.189:65257] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vanda.php"] [unique_id "aclWTxIAHJCFaHff3_fwegAAAcc"]
[Mon Mar 30 00:41:51.827629 2026] [:error] [pid 32255:tid 32314] [client 20.197.183.189:63309] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vanda.php"] [unique_id "aclWT2nfn-AtRoMbquw-qwAAAFc"]
[Mon Mar 30 00:41:52.449983 2026] [:error] [pid 32257:tid 32341] [client 20.197.183.189:63347] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vanda.php"] [unique_id "aclWUCE3TArOFrUtgWqixwAAAJc"]
[Mon Mar 30 00:41:53.066970 2026] [:error] [pid 23284:tid 23309] [client 20.197.183.189:64571] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vanda.php"] [unique_id "aclWUYzBujdPHsq7wyQkSgAAApc"]
[Mon Mar 30 00:41:53.697943 2026] [:error] [pid 32255:tid 32305] [client 20.197.183.189:63906] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nw.php"] [unique_id "aclWUWnfn-AtRoMbquw-rwAAAE4"]
[Mon Mar 30 00:41:54.328401 2026] [:error] [pid 32255:tid 32298] [client 20.197.183.189:64516] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nw.php"] [unique_id "aclWUmnfn-AtRoMbquw-sAAAAEc"]
[Mon Mar 30 00:41:54.969933 2026] [:error] [pid 23284:tid 23286] [client 20.197.183.189:63238] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nw.php"] [unique_id "aclWUozBujdPHsq7wyQkUgAAAoA"]
[Mon Mar 30 00:41:55.599558 2026] [:error] [pid 32257:tid 32331] [client 20.197.183.189:65222] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nw.php"] [unique_id "aclWUyE3TArOFrUtgWqi5AAAAI0"]
[Mon Mar 30 00:41:56.231552 2026] [:error] [pid 32257:tid 32330] [client 20.197.183.189:62672] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cu.php"] [unique_id "aclWVCE3TArOFrUtgWqi8AAAAIw"]
[Mon Mar 30 00:41:56.857984 2026] [:error] [pid 32257:tid 32340] [client 20.197.183.189:65236] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cu.php"] [unique_id "aclWVCE3TArOFrUtgWqi9wAAAJY"]
[Mon Mar 30 00:41:57.495339 2026] [:error] [pid 32257:tid 32333] [client 20.197.183.189:62696] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cu.php"] [unique_id "aclWVSE3TArOFrUtgWqjAQAAAI8"]
[Mon Mar 30 00:41:58.126947 2026] [:error] [pid 32257:tid 32328] [client 20.197.183.189:63958] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cu.php"] [unique_id "aclWViE3TArOFrUtgWqjDAAAAIo"]
[Mon Mar 30 00:41:58.749358 2026] [:error] [pid 32359:tid 32371] [client 20.197.183.189:63888] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/t.php"] [unique_id "aclWVgMb8G3UzfQP3WhFzAAAAMo"]
[Mon Mar 30 00:41:59.381178 2026] [:error] [pid 32257:tid 32332] [client 20.197.183.189:63941] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/t.php"] [unique_id "aclWVyE3TArOFrUtgWqjFQAAAI4"]
[Mon Mar 30 00:42:00.025795 2026] [:error] [pid 32257:tid 32333] [client 20.197.183.189:63290] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/t.php"] [unique_id "aclWWCE3TArOFrUtgWqjGQAAAI8"]
[Mon Mar 30 00:42:00.651465 2026] [:error] [pid 23284:tid 23295] [client 20.197.183.189:63348] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ms.php"] [unique_id "aclWWIzBujdPHsq7wyQkWgAAAok"]
[Mon Mar 30 00:42:01.274852 2026] [:error] [pid 32254:tid 32271] [client 20.197.183.189:63251] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ms.php"] [unique_id "aclWWaug2IHuyGgCTn9vIQAAAAc"]
[Mon Mar 30 00:42:01.915717 2026] [:error] [pid 23168:tid 23217] [client 20.197.183.189:63893] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ms.php"] [unique_id "aclWWWP8p0yRL8ot_2_aGAAAAhQ"]
[Mon Mar 30 00:42:02.540505 2026] [:error] [pid 23168:tid 23209] [client 20.197.183.189:63879] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ms.php"] [unique_id "aclWWmP8p0yRL8ot_2_aHgAAAgw"]
[Mon Mar 30 00:42:03.165845 2026] [:error] [pid 32255:tid 32306] [client 20.197.183.189:63935] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bnm.php"] [unique_id "aclWW2nfn-AtRoMbquw-wQAAAE8"]
[Mon Mar 30 00:42:03.789970 2026] [:error] [pid 32255:tid 32301] [client 20.197.183.189:63907] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bnm.php"] [unique_id "aclWW2nfn-AtRoMbquw-xgAAAEo"]
[Mon Mar 30 00:42:04.435874 2026] [:error] [pid 32257:tid 32323] [client 20.197.183.189:63878] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bnm.php"] [unique_id "aclWXCE3TArOFrUtgWqjIgAAAIU"]
[Mon Mar 30 00:42:05.053741 2026] [:error] [pid 8818:tid 8832] [client 20.197.183.189:63912] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bnm.php"] [unique_id "aclWXSCDvotZNSF0FBoHowAAAUo"]
[Mon Mar 30 00:42:05.678310 2026] [:error] [pid 32255:tid 32310] [client 20.197.183.189:63982] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aa21.php"] [unique_id "aclWXWnfn-AtRoMbquw-zQAAAFM"]
[Mon Mar 30 00:42:06.297483 2026] [:error] [pid 23284:tid 23293] [client 20.197.183.189:63317] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aa21.php"] [unique_id "aclWXozBujdPHsq7wyQkaAAAAoc"]
[Mon Mar 30 00:42:06.924762 2026] [:error] [pid 23284:tid 23310] [client 20.197.183.189:63888] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aa21.php"] [unique_id "aclWXozBujdPHsq7wyQkbAAAApg"]
[Mon Mar 30 00:42:07.548389 2026] [:error] [pid 23284:tid 23292] [client 20.197.183.189:64565] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aa21.php"] [unique_id "aclWX4zBujdPHsq7wyQkcAAAAoY"]
[Mon Mar 30 00:42:08.165343 2026] [:error] [pid 23284:tid 23307] [client 20.197.183.189:64612] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gifclass.php"] [unique_id "aclWYIzBujdPHsq7wyQkcgAAApU"]
[Mon Mar 30 00:42:08.788815 2026] [:error] [pid 23284:tid 23286] [client 20.197.183.189:63926] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gifclass.php"] [unique_id "aclWYIzBujdPHsq7wyQkdQAAAoA"]
[Mon Mar 30 00:42:09.416997 2026] [:error] [pid 32257:tid 32336] [client 20.197.183.189:63310] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gifclass.php"] [unique_id "aclWYSE3TArOFrUtgWqjKgAAAJI"]
[Mon Mar 30 00:42:10.053740 2026] [proxy_fcgi:error] [pid 32255:tid 32305] [client 20.197.183.189:63946] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 00:42:10.366028 2026] [proxy_fcgi:error] [pid 32255:tid 32308] [client 20.197.183.189:63946] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 00:42:10.678838 2026] [proxy_fcgi:error] [pid 32255:tid 32295] [client 20.197.183.189:63946] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 00:42:11.308051 2026] [proxy_fcgi:error] [pid 32255:tid 32306] [client 20.197.183.189:63946] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 00:42:11.620270 2026] [proxy_fcgi:error] [pid 32255:tid 32305] [client 20.197.183.189:63946] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 00:42:11.933331 2026] [proxy_fcgi:error] [pid 32255:tid 32313] [client 20.197.183.189:63946] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 00:42:12.252302 2026] [proxy_fcgi:error] [pid 32255:tid 32308] [client 20.197.183.189:63946] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 00:42:12.563586 2026] [proxy_fcgi:error] [pid 32255:tid 32310] [client 20.197.183.189:63946] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 00:42:12.875704 2026] [proxy_fcgi:error] [pid 32255:tid 32309] [client 20.197.183.189:63946] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 00:42:13.187250 2026] [proxy_fcgi:error] [pid 32255:tid 32312] [client 20.197.183.189:63946] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 00:42:13.495763 2026] [:error] [pid 32255:tid 32291] [client 20.197.183.189:63946] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tfm.php"] [unique_id "aclWZWnfn-AtRoMbquw-8QAAAEA"]
[Mon Mar 30 00:42:14.133140 2026] [:error] [pid 32255:tid 32296] [client 20.197.183.189:65250] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tfm.php"] [unique_id "aclWZmnfn-AtRoMbquw-8wAAAEU"]
[Mon Mar 30 00:42:14.764556 2026] [:error] [pid 23137:tid 23145] [client 20.197.183.189:63909] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tfm.php"] [unique_id "aclWZhaWQa7LdZ_qGFYX7gAAAYY"]
[Mon Mar 30 00:42:15.389553 2026] [:error] [pid 32255:tid 32299] [client 20.197.183.189:63923] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tfm.php"] [unique_id "aclWZ2nfn-AtRoMbquw-9wAAAEg"]
[Mon Mar 30 00:42:16.022824 2026] [:error] [pid 23250:tid 23276] [client 20.197.183.189:63250] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin-footer.php"] [unique_id "aclWaJxrpj-dQjy1cvomkwAAAlg"]
[Mon Mar 30 00:42:16.652063 2026] [:error] [pid 23167:tid 23192] [client 20.197.183.189:65218] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin-footer.php"] [unique_id "aclWaBIAHJCFaHff3_fwxgAAAdY"]
[Mon Mar 30 00:42:17.277266 2026] [:error] [pid 23284:tid 23293] [client 20.197.183.189:64562] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin-footer.php"] [unique_id "aclWaYzBujdPHsq7wyQkhQAAAoc"]
[Mon Mar 30 00:42:17.907158 2026] [:error] [pid 23168:tid 23218] [client 20.197.183.189:62676] [client 20.197.183.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin-footer.php"] [unique_id "aclWaWP8p0yRL8ot_2_acwAAAhU"]
[Mon Mar 30 03:11:53.775552 2026] [proxy_fcgi:error] [pid 23168:tid 23219] [client 20.151.111.128:47663] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 03:11:54.192383 2026] [proxy_fcgi:error] [pid 23168:tid 23221] [client 20.151.111.128:47663] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 03:11:54.401666 2026] [proxy_fcgi:error] [pid 23168:tid 23211] [client 20.151.111.128:47663] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 03:11:54.610443 2026] [proxy_fcgi:error] [pid 23168:tid 23208] [client 20.151.111.128:47663] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 03:11:54.821875 2026] [proxy_fcgi:error] [pid 23168:tid 23217] [client 20.151.111.128:47663] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 03:11:55.031162 2026] [proxy_fcgi:error] [pid 23168:tid 23204] [client 20.151.111.128:47663] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 03:11:55.245328 2026] [proxy_fcgi:error] [pid 23168:tid 23216] [client 20.151.111.128:47663] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 03:11:55.454510 2026] [proxy_fcgi:error] [pid 23168:tid 23200] [client 20.151.111.128:47663] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 03:11:55.666738 2026] [proxy_fcgi:error] [pid 23168:tid 23210] [client 20.151.111.128:47663] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 03:11:55.875963 2026] [proxy_fcgi:error] [pid 23168:tid 23219] [client 20.151.111.128:47663] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 03:11:56.081567 2026] [:error] [pid 23168:tid 23220] [client 20.151.111.128:47663] [client 20.151.111.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/function.php"] [unique_id "acl5fGP8p0yRL8ot_28NEQAAAhc"]
[Mon Mar 30 03:11:56.915127 2026] [:error] [pid 23250:tid 23271] [client 20.151.111.128:13462] [client 20.151.111.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/function.php"] [unique_id "acl5fJxrpj-dQjy1cvpB0wAAAlM"]
[Mon Mar 30 03:11:57.752316 2026] [:error] [pid 23284:tid 23304] [client 20.151.111.128:1610] [client 20.151.111.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/function.php"] [unique_id "acl5fYzBujdPHsq7wyR1PwAAApI"]
[Mon Mar 30 03:11:58.574352 2026] [:error] [pid 32359:tid 32381] [client 20.151.111.128:1195] [client 20.151.111.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/function.php"] [unique_id "acl5fgMb8G3UzfQP3WhbywAAANQ"]
[Mon Mar 30 13:43:54.958723 2026] [:error] [pid 35343:tid 35353] [client 67.203.33.169:61740] [client 67.203.33.169] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/sftp-config.json"] [unique_id "acoNmqP5HurqmbvwN-K6vQAAAAg"]
[Mon Mar 30 22:50:35.719004 2026] [proxy_fcgi:error] [pid 63557:tid 63577] [client 20.91.215.64:34731] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 22:50:36.012274 2026] [proxy_fcgi:error] [pid 63557:tid 63582] [client 20.91.215.64:34731] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 22:50:36.280695 2026] [proxy_fcgi:error] [pid 63557:tid 63583] [client 20.91.215.64:34731] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 22:50:36.547732 2026] [proxy_fcgi:error] [pid 63557:tid 63569] [client 20.91.215.64:34731] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 22:50:36.819848 2026] [proxy_fcgi:error] [pid 63557:tid 63562] [client 20.91.215.64:34731] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 22:50:37.087144 2026] [proxy_fcgi:error] [pid 63557:tid 63575] [client 20.91.215.64:34731] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 22:50:37.393762 2026] [proxy_fcgi:error] [pid 63557:tid 63570] [client 20.91.215.64:34731] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 22:50:37.729944 2026] [proxy_fcgi:error] [pid 63557:tid 63574] [client 20.91.215.64:34731] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 22:50:37.996478 2026] [proxy_fcgi:error] [pid 63557:tid 63559] [client 20.91.215.64:34731] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 22:50:38.539691 2026] [:error] [pid 63557:tid 63560] [client 20.91.215.64:34731] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "acqNvq4QNVlzYgEvIjmnaAAAAQE"]
[Mon Mar 30 22:50:39.100700 2026] [:error] [pid 63557:tid 63583] [client 20.91.215.64:34143] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "acqNv64QNVlzYgEvIjmnbAAAARg"]
[Mon Mar 30 22:50:39.689576 2026] [:error] [pid 60835:tid 60860] [client 20.91.215.64:34139] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "acqNvwIOJ4Lc0iJVRzzpjgAAABc"]
[Mon Mar 30 22:50:40.243185 2026] [:error] [pid 60835:tid 60856] [client 20.91.215.64:34814] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "acqNwAIOJ4Lc0iJVRzzpjwAAABM"]
[Mon Mar 30 22:50:40.788389 2026] [:error] [pid 60747:tid 60816] [client 20.91.215.64:34807] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "acqNwAU3IY-cCpy_-zE7iQAAAM0"]
[Mon Mar 30 22:50:41.333330 2026] [:error] [pid 60747:tid 60820] [client 20.91.215.64:34163] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "acqNwQU3IY-cCpy_-zE7jgAAANE"]
[Mon Mar 30 22:50:41.934563 2026] [:error] [pid 60747:tid 60826] [client 20.91.215.64:34165] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "acqNwQU3IY-cCpy_-zE7lAAAANc"]
[Mon Mar 30 22:50:42.523797 2026] [:error] [pid 60747:tid 60813] [client 20.91.215.64:34709] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "acqNwgU3IY-cCpy_-zE7mAAAAMo"]
[Mon Mar 30 22:50:43.158264 2026] [:error] [pid 60747:tid 60807] [client 20.91.215.64:34053] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "acqNwwU3IY-cCpy_-zE7nQAAAMQ"]
[Mon Mar 30 22:50:43.808195 2026] [:error] [pid 60835:tid 60856] [client 20.91.215.64:34778] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "acqNwwIOJ4Lc0iJVRzzpmQAAABM"]
[Mon Mar 30 22:50:44.561003 2026] [:error] [pid 63557:tid 63567] [client 20.91.215.64:34711] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "acqNxK4QNVlzYgEvIjmnegAAAQg"]
[Mon Mar 30 22:50:45.966146 2026] [:error] [pid 63557:tid 63564] [client 20.91.215.64:34808] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "acqNxa4QNVlzYgEvIjmnfwAAAQU"]
[Mon Mar 30 22:50:46.681833 2026] [:error] [pid 60835:tid 60841] [client 20.91.215.64:34788] [client 20.91.215.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "acqNxgIOJ4Lc0iJVRzzppQAAAAQ"]
[Mon Mar 30 22:50:47.392384 2026] [:error] [pid 60835:tid 60842] [client 20.91.215.64:34725] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/plss3.php"] [unique_id "acqNxwIOJ4Lc0iJVRzzpqAAAAAU"]
[Mon Mar 30 22:50:48.176121 2026] [:error] [pid 60747:tid 60815] [client 20.91.215.64:34128] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/plss3.php"] [unique_id "acqNyAU3IY-cCpy_-zE7swAAAMw"]
[Mon Mar 30 22:50:48.823332 2026] [:error] [pid 60835:tid 60845] [client 20.91.215.64:34792] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/plss3.php"] [unique_id "acqNyAIOJ4Lc0iJVRzzprAAAAAg"]
[Mon Mar 30 22:50:49.358448 2026] [:error] [pid 60747:tid 60808] [client 20.91.215.64:34062] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/plss3.php"] [unique_id "acqNyQU3IY-cCpy_-zE7uwAAAMU"]
[Mon Mar 30 22:50:49.898303 2026] [:error] [pid 60747:tid 60821] [client 20.91.215.64:34770] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/7.php"] [unique_id "acqNyQU3IY-cCpy_-zE7wgAAANI"]
[Mon Mar 30 22:50:50.444881 2026] [:error] [pid 60835:tid 60844] [client 20.91.215.64:34155] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/7.php"] [unique_id "acqNygIOJ4Lc0iJVRzzprgAAAAc"]
[Mon Mar 30 22:50:51.023324 2026] [:error] [pid 60746:tid 60782] [client 20.91.215.64:34167] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/7.php"] [unique_id "acqNy54kQrgjDdAbQCojEgAAAIY"]
[Mon Mar 30 22:50:51.704598 2026] [:error] [pid 60835:tid 60854] [client 20.91.215.64:34794] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/7.php"] [unique_id "acqNywIOJ4Lc0iJVRzzpuwAAABE"]
[Mon Mar 30 22:50:52.234545 2026] [:error] [pid 60746:tid 60794] [client 20.91.215.64:34066] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/abcd.php"] [unique_id "acqNzJ4kQrgjDdAbQCojFwAAAJI"]
[Mon Mar 30 22:50:52.798113 2026] [:error] [pid 60835:tid 60858] [client 20.91.215.64:34774] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/abcd.php"] [unique_id "acqNzAIOJ4Lc0iJVRzzpxAAAABU"]
[Mon Mar 30 22:50:53.382799 2026] [:error] [pid 60745:tid 60769] [client 20.91.215.64:34765] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/abcd.php"] [unique_id "acqNzSQDBn75QnHaPb9GwAAAAFQ"]
[Mon Mar 30 22:50:53.908724 2026] [:error] [pid 60745:tid 60757] [client 20.91.215.64:34793] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/abcd.php"] [unique_id "acqNzSQDBn75QnHaPb9GxwAAAEg"]
[Mon Mar 30 22:50:54.445930 2026] [:error] [pid 63557:tid 63568] [client 20.91.215.64:34112] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/222.php"] [unique_id "acqNzq4QNVlzYgEvIjmnkAAAAQk"]
[Mon Mar 30 22:50:55.037203 2026] [:error] [pid 63557:tid 63564] [client 20.91.215.64:33419] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/222.php"] [unique_id "acqNz64QNVlzYgEvIjmnkwAAAQU"]
[Mon Mar 30 22:50:55.640423 2026] [:error] [pid 60746:tid 60777] [client 20.91.215.64:34169] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/222.php"] [unique_id "acqNz54kQrgjDdAbQCojKAAAAIE"]
[Mon Mar 30 22:50:56.293817 2026] [:error] [pid 60746:tid 60793] [client 20.91.215.64:34806] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/222.php"] [unique_id "acqN0J4kQrgjDdAbQCojKwAAAJE"]
[Mon Mar 30 22:50:56.876196 2026] [:error] [pid 60745:tid 60770] [client 20.91.215.64:34124] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file15.php"] [unique_id "acqN0CQDBn75QnHaPb9GzgAAAFU"]
[Mon Mar 30 22:50:57.405325 2026] [:error] [pid 60747:tid 60813] [client 20.91.215.64:34735] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file15.php"] [unique_id "acqN0QU3IY-cCpy_-zE73AAAAMo"]
[Mon Mar 30 22:50:57.970405 2026] [:error] [pid 60746:tid 60797] [client 20.91.215.64:34729] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file15.php"] [unique_id "acqN0Z4kQrgjDdAbQCojOQAAAJU"]
[Mon Mar 30 22:50:58.579977 2026] [:error] [pid 60746:tid 60784] [client 20.91.215.64:34810] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file15.php"] [unique_id "acqN0p4kQrgjDdAbQCojOwAAAIg"]
[Mon Mar 30 22:50:59.113077 2026] [:error] [pid 60746:tid 60785] [client 20.91.215.64:34755] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/031.php"] [unique_id "acqN054kQrgjDdAbQCojPQAAAIk"]
[Mon Mar 30 22:50:59.823700 2026] [:error] [pid 60747:tid 60819] [client 20.91.215.64:34785] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/031.php"] [unique_id "acqN0wU3IY-cCpy_-zE76gAAANA"]
[Mon Mar 30 22:51:00.409390 2026] [:error] [pid 60747:tid 60822] [client 20.91.215.64:34730] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/031.php"] [unique_id "acqN1AU3IY-cCpy_-zE77gAAANM"]
[Mon Mar 30 22:51:01.014898 2026] [:error] [pid 60747:tid 60804] [client 20.91.215.64:34705] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/031.php"] [unique_id "acqN1QU3IY-cCpy_-zE78QAAAME"]
[Mon Mar 30 22:51:01.602549 2026] [:error] [pid 60747:tid 60805] [client 20.91.215.64:35334] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin.php"] [unique_id "acqN1QU3IY-cCpy_-zE79AAAAMI"]
[Mon Mar 30 22:51:02.262431 2026] [:error] [pid 60835:tid 60840] [client 20.91.215.64:34752] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin.php"] [unique_id "acqN1gIOJ4Lc0iJVRzzp3AAAAAM"]
[Mon Mar 30 22:51:02.811086 2026] [:error] [pid 63557:tid 63570] [client 20.91.215.64:34809] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin.php"] [unique_id "acqN1q4QNVlzYgEvIjmnqQAAAQs"]
[Mon Mar 30 22:51:03.646779 2026] [:error] [pid 60747:tid 60814] [client 20.91.215.64:34790] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin.php"] [unique_id "acqN1wU3IY-cCpy_-zE7_wAAAMs"]
[Mon Mar 30 22:51:04.299231 2026] [:error] [pid 60745:tid 60773] [client 20.91.215.64:35374] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin.php"] [unique_id "acqN2CQDBn75QnHaPb9G5QAAAFg"]
[Mon Mar 30 22:51:04.915134 2026] [:error] [pid 60835:tid 60844] [client 20.91.215.64:35348] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin.php"] [unique_id "acqN2AIOJ4Lc0iJVRzzp4QAAAAc"]
[Mon Mar 30 22:51:05.491574 2026] [:error] [pid 63557:tid 63572] [client 20.91.215.64:34786] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin.php"] [unique_id "acqN2a4QNVlzYgEvIjmnsQAAAQ0"]
[Mon Mar 30 22:51:06.027204 2026] [:error] [pid 63557:tid 63570] [client 20.91.215.64:35391] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin.php"] [unique_id "acqN2q4QNVlzYgEvIjmntAAAAQs"]
[Mon Mar 30 22:51:06.577772 2026] [:error] [pid 63557:tid 63577] [client 20.91.215.64:34690] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/about.php"] [unique_id "acqN2q4QNVlzYgEvIjmnuwAAARI"]
[Mon Mar 30 22:51:07.108938 2026] [:error] [pid 60746:tid 60790] [client 20.91.215.64:34694] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/about.php"] [unique_id "acqN254kQrgjDdAbQCojTgAAAI4"]
[Mon Mar 30 22:51:07.838753 2026] [:error] [pid 60745:tid 60754] [client 20.91.215.64:35384] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/about.php"] [unique_id "acqN2yQDBn75QnHaPb9G7wAAAEU"]
[Mon Mar 30 22:51:08.409010 2026] [:error] [pid 60745:tid 60772] [client 20.91.215.64:35448] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/about.php"] [unique_id "acqN3CQDBn75QnHaPb9G8QAAAFc"]
[Mon Mar 30 22:51:09.038300 2026] [:error] [pid 60747:tid 60818] [client 20.91.215.64:35371] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/about.php"] [unique_id "acqN3QU3IY-cCpy_-zE8EgAAAM8"]
[Mon Mar 30 22:51:09.615552 2026] [:error] [pid 60747:tid 60812] [client 20.91.215.64:35442] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/about.php"] [unique_id "acqN3QU3IY-cCpy_-zE8FQAAAMk"]
[Mon Mar 30 22:51:10.319781 2026] [:error] [pid 60746:tid 60795] [client 20.91.215.64:34767] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/about.php"] [unique_id "acqN3p4kQrgjDdAbQCojVwAAAJM"]
[Mon Mar 30 22:51:10.888328 2026] [:error] [pid 60747:tid 60825] [client 20.91.215.64:34803] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/about.php"] [unique_id "acqN3gU3IY-cCpy_-zE8GQAAANY"]
[Mon Mar 30 22:51:11.435456 2026] [:error] [pid 60835:tid 60858] [client 20.91.215.64:34741] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hly.php"] [unique_id "acqN3wIOJ4Lc0iJVRzzp7AAAABU"]
[Mon Mar 30 22:51:12.026148 2026] [:error] [pid 60747:tid 60809] [client 20.91.215.64:35394] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hly.php"] [unique_id "acqN4AU3IY-cCpy_-zE8HwAAAMY"]
[Mon Mar 30 22:51:12.601206 2026] [:error] [pid 63557:tid 63569] [client 20.91.215.64:35392] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hly.php"] [unique_id "acqN4K4QNVlzYgEvIjmnzAAAAQo"]
[Mon Mar 30 22:51:13.153963 2026] [:error] [pid 60745:tid 60770] [client 20.91.215.64:34701] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hly.php"] [unique_id "acqN4SQDBn75QnHaPb9G_QAAAFU"]
[Mon Mar 30 22:51:13.702451 2026] [:error] [pid 60747:tid 60818] [client 20.91.215.64:35354] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/about.php"] [unique_id "acqN4QU3IY-cCpy_-zE8JQAAAM8"]
[Mon Mar 30 22:51:14.235271 2026] [:error] [pid 60745:tid 60755] [client 20.91.215.64:34811] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/about.php"] [unique_id "acqN4iQDBn75QnHaPb9G_wAAAEY"]
[Mon Mar 30 22:51:14.869193 2026] [:error] [pid 60835:tid 60839] [client 20.91.215.64:35402] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/about.php"] [unique_id "acqN4gIOJ4Lc0iJVRzzp8AAAAAI"]
[Mon Mar 30 22:51:15.461053 2026] [:error] [pid 60746:tid 60789] [client 20.91.215.64:34747] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/about.php"] [unique_id "acqN454kQrgjDdAbQCojagAAAI0"]
[Mon Mar 30 22:51:15.990845 2026] [:error] [pid 60745:tid 60752] [client 20.91.215.64:35382] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file7.php"] [unique_id "acqN4yQDBn75QnHaPb9HBQAAAEM"]
[Mon Mar 30 22:51:16.609359 2026] [:error] [pid 60747:tid 60816] [client 20.91.215.64:35340] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file7.php"] [unique_id "acqN5AU3IY-cCpy_-zE8OAAAAM0"]
[Mon Mar 30 22:51:17.174579 2026] [:error] [pid 63557:tid 63562] [client 20.91.215.64:35410] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file7.php"] [unique_id "acqN5a4QNVlzYgEvIjmn2gAAAQM"]
[Mon Mar 30 22:51:17.728178 2026] [:error] [pid 63557:tid 63577] [client 20.91.215.64:35405] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file7.php"] [unique_id "acqN5a4QNVlzYgEvIjmn4wAAARI"]
[Mon Mar 30 22:51:18.259245 2026] [:error] [pid 60835:tid 60853] [client 20.91.215.64:35381] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tajj.php"] [unique_id "acqN5gIOJ4Lc0iJVRzzp-gAAABA"]
[Mon Mar 30 22:51:18.969806 2026] [:error] [pid 60747:tid 60817] [client 20.91.215.64:34773] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tajj.php"] [unique_id "acqN5gU3IY-cCpy_-zE8TgAAAM4"]
[Mon Mar 30 22:51:19.498539 2026] [:error] [pid 63557:tid 63577] [client 20.91.215.64:35443] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tajj.php"] [unique_id "acqN564QNVlzYgEvIjmn8AAAARI"]
[Mon Mar 30 22:51:20.063859 2026] [:error] [pid 60746:tid 60788] [client 20.91.215.64:34780] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tajj.php"] [unique_id "acqN6J4kQrgjDdAbQCojjAAAAIw"]
[Mon Mar 30 22:51:20.593374 2026] [:error] [pid 60747:tid 60826] [client 20.91.215.64:34764] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/logain5.php"] [unique_id "acqN6AU3IY-cCpy_-zE8VQAAANc"]
[Mon Mar 30 22:51:21.137515 2026] [:error] [pid 63557:tid 63575] [client 20.91.215.64:35409] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/logain5.php"] [unique_id "acqN6a4QNVlzYgEvIjmn-wAAARA"]
[Mon Mar 30 22:51:21.675320 2026] [:error] [pid 63557:tid 63574] [client 20.91.215.64:35423] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/logain5.php"] [unique_id "acqN6a4QNVlzYgEvIjmoAAAAAQ8"]
[Mon Mar 30 22:51:22.247047 2026] [:error] [pid 63557:tid 63575] [client 20.91.215.64:35451] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/logain5.php"] [unique_id "acqN6q4QNVlzYgEvIjmoBAAAARA"]
[Mon Mar 30 22:51:22.815619 2026] [:error] [pid 60747:tid 60813] [client 20.91.215.64:34801] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wsd.php"] [unique_id "acqN6gU3IY-cCpy_-zE8YAAAAMo"]
[Mon Mar 30 22:51:23.350313 2026] [:error] [pid 63557:tid 63562] [client 20.91.215.64:35350] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wsd.php"] [unique_id "acqN664QNVlzYgEvIjmoCgAAAQM"]
[Mon Mar 30 22:51:23.895410 2026] [:error] [pid 60835:tid 60851] [client 20.91.215.64:34796] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wsd.php"] [unique_id "acqN6wIOJ4Lc0iJVRzzqAAAAAA4"]
[Mon Mar 30 22:51:24.423353 2026] [:error] [pid 63557:tid 63582] [client 20.91.215.64:35367] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wsd.php"] [unique_id "acqN7K4QNVlzYgEvIjmoFQAAARc"]
[Mon Mar 30 22:51:25.028162 2026] [:error] [pid 63557:tid 63567] [client 20.91.215.64:34691] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ioxi-o.php"] [unique_id "acqN7a4QNVlzYgEvIjmoGgAAAQg"]
[Mon Mar 30 22:51:25.568424 2026] [:error] [pid 63557:tid 63563] [client 20.91.215.64:34756] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ioxi-o.php"] [unique_id "acqN7a4QNVlzYgEvIjmoIQAAAQQ"]
[Mon Mar 30 22:51:26.144057 2026] [:error] [pid 63557:tid 63572] [client 20.91.215.64:35379] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ioxi-o.php"] [unique_id "acqN7q4QNVlzYgEvIjmoJQAAAQ0"]
[Mon Mar 30 22:51:26.688773 2026] [:error] [pid 63557:tid 63571] [client 20.91.215.64:34757] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ioxi-o.php"] [unique_id "acqN7q4QNVlzYgEvIjmoKgAAAQw"]
[Mon Mar 30 22:51:27.243617 2026] [:error] [pid 60747:tid 60825] [client 20.91.215.64:34171] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "acqN7wU3IY-cCpy_-zE8aQAAANY"]
[Mon Mar 30 22:51:27.822207 2026] [:error] [pid 60746:tid 60783] [client 20.91.215.64:34708] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "acqN754kQrgjDdAbQCojowAAAIc"]
[Mon Mar 30 22:51:28.409985 2026] [:error] [pid 60745:tid 60773] [client 20.91.215.64:35390] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "acqN8CQDBn75QnHaPb9HHgAAAFg"]
[Mon Mar 30 22:51:28.963208 2026] [:error] [pid 60747:tid 60826] [client 20.91.215.64:35432] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "acqN8AU3IY-cCpy_-zE8cQAAANc"]
[Mon Mar 30 22:51:29.509986 2026] [:error] [pid 63557:tid 63561] [client 20.91.215.64:34776] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/css/index.php"] [unique_id "acqN8a4QNVlzYgEvIjmoOQAAAQI"]
[Mon Mar 30 22:51:30.055379 2026] [:error] [pid 63557:tid 63565] [client 20.91.215.64:35362] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/css/index.php"] [unique_id "acqN8q4QNVlzYgEvIjmoPwAAAQY"]
[Mon Mar 30 22:51:30.651200 2026] [:error] [pid 60746:tid 60788] [client 20.91.215.64:33472] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/css/index.php"] [unique_id "acqN8p4kQrgjDdAbQCojrQAAAIw"]
[Mon Mar 30 22:51:31.476175 2026] [:error] [pid 60835:tid 60839] [client 20.91.215.64:34702] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/css/index.php"] [unique_id "acqN8wIOJ4Lc0iJVRzzqBgAAAAI"]
[Mon Mar 30 22:51:33.467300 2026] [:error] [pid 60746:tid 60790] [client 20.91.215.64:35415] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/goods.php"] [unique_id "acqN9Z4kQrgjDdAbQCojswAAAI4"]
[Mon Mar 30 22:51:34.022325 2026] [:error] [pid 60747:tid 60810] [client 20.91.215.64:36013] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/goods.php"] [unique_id "acqN9gU3IY-cCpy_-zE8egAAAMc"]
[Mon Mar 30 22:51:34.571993 2026] [:error] [pid 60746:tid 60780] [client 20.91.215.64:36001] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/goods.php"] [unique_id "acqN9p4kQrgjDdAbQCojtAAAAIQ"]
[Mon Mar 30 22:51:35.205932 2026] [:error] [pid 60745:tid 60762] [client 20.91.215.64:36064] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/goods.php"] [unique_id "acqN9yQDBn75QnHaPb9HLQAAAE0"]
[Mon Mar 30 22:51:35.735104 2026] [:error] [pid 60745:tid 60760] [client 20.91.215.64:35994] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/chosen.php"] [unique_id "acqN9yQDBn75QnHaPb9HMgAAAEs"]
[Mon Mar 30 22:51:36.297491 2026] [:error] [pid 60835:tid 60851] [client 20.91.215.64:36095] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/chosen.php"] [unique_id "acqN-AIOJ4Lc0iJVRzzqDQAAAA4"]
[Mon Mar 30 22:51:36.892302 2026] [:error] [pid 60745:tid 60771] [client 20.91.215.64:35355] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/chosen.php"] [unique_id "acqN-CQDBn75QnHaPb9HOAAAAFY"]
[Mon Mar 30 22:51:37.422054 2026] [:error] [pid 60746:tid 60776] [client 20.91.215.64:35995] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/chosen.php"] [unique_id "acqN-Z4kQrgjDdAbQCojuwAAAIA"]
[Mon Mar 30 22:51:38.035491 2026] [proxy_fcgi:error] [pid 60835:tid 60841] [client 20.91.215.64:35360] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 22:51:38.301183 2026] [proxy_fcgi:error] [pid 60835:tid 60844] [client 20.91.215.64:35360] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 22:51:38.567853 2026] [proxy_fcgi:error] [pid 60835:tid 60854] [client 20.91.215.64:35360] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 22:51:38.862798 2026] [proxy_fcgi:error] [pid 60835:tid 60861] [client 20.91.215.64:35360] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 22:51:39.126333 2026] [:error] [pid 60835:tid 60840] [client 20.91.215.64:35360] [client 20.91.215.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "acqN-wIOJ4Lc0iJVRzzqFwAAAAM"]
[Mon Mar 30 22:51:39.667018 2026] [proxy_fcgi:error] [pid 60747:tid 60823] [client 20.91.215.64:35335] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 22:51:39.957652 2026] [:error] [pid 60747:tid 60827] [client 20.91.215.64:35335] [client 20.91.215.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/theme-compat/chosen.php"] [unique_id "acqN-wU3IY-cCpy_-zE8jgAAANg"]
[Mon Mar 30 22:51:40.801753 2026] [proxy_fcgi:error] [pid 60745:tid 60751] [client 20.91.215.64:36069] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 22:51:41.064872 2026] [:error] [pid 60745:tid 60752] [client 20.91.215.64:36069] [client 20.91.215.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "acqN_SQDBn75QnHaPb9HQQAAAEM"]
[Mon Mar 30 22:51:41.606583 2026] [proxy_fcgi:error] [pid 60835:tid 60840] [client 20.91.215.64:36036] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 22:51:41.978761 2026] [proxy_fcgi:error] [pid 60835:tid 60843] [client 20.91.215.64:36036] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 22:51:42.272680 2026] [:error] [pid 60835:tid 60855] [client 20.91.215.64:36036] [client 20.91.215.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Requests/Text/admin.php"] [unique_id "acqN_gIOJ4Lc0iJVRzzqKgAAABI"]
[Mon Mar 30 22:51:42.863485 2026] [proxy_fcgi:error] [pid 60745:tid 60755] [client 20.91.215.64:36007] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 22:51:43.129657 2026] [proxy_fcgi:error] [pid 60745:tid 60753] [client 20.91.215.64:36007] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 22:51:43.413865 2026] [:error] [pid 60745:tid 60764] [client 20.91.215.64:36007] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/X7x.php"] [unique_id "acqN_yQDBn75QnHaPb9HRgAAAE8"]
[Mon Mar 30 22:51:43.945381 2026] [:error] [pid 60746:tid 60796] [client 20.91.215.64:36039] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/X7x.php"] [unique_id "acqN_54kQrgjDdAbQCojyAAAAJQ"]
[Mon Mar 30 22:51:44.472149 2026] [:error] [pid 60747:tid 60816] [client 20.91.215.64:36012] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/X7x.php"] [unique_id "acqOAAU3IY-cCpy_-zE8mQAAAM0"]
[Mon Mar 30 22:51:45.000887 2026] [:error] [pid 60747:tid 60818] [client 20.91.215.64:35342] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/X7x.php"] [unique_id "acqOAQU3IY-cCpy_-zE8mgAAAM8"]
[Mon Mar 30 22:51:45.545185 2026] [:error] [pid 60746:tid 60780] [client 20.91.215.64:36020] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ctex1.php"] [unique_id "acqOAZ4kQrgjDdAbQCojywAAAIQ"]
[Mon Mar 30 22:51:46.121107 2026] [:error] [pid 60747:tid 60825] [client 20.91.215.64:35420] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ctex1.php"] [unique_id "acqOAgU3IY-cCpy_-zE8nAAAANY"]
[Mon Mar 30 22:51:46.660769 2026] [:error] [pid 60747:tid 60808] [client 20.91.215.64:35441] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ctex1.php"] [unique_id "acqOAgU3IY-cCpy_-zE8nQAAAMU"]
[Mon Mar 30 22:51:47.186869 2026] [:error] [pid 60745:tid 60763] [client 20.91.215.64:36075] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ctex1.php"] [unique_id "acqOAyQDBn75QnHaPb9HVgAAAE4"]
[Mon Mar 30 22:51:47.731688 2026] [:error] [pid 60747:tid 60813] [client 20.91.215.64:35435] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/d12.php"] [unique_id "acqOAwU3IY-cCpy_-zE8owAAAMo"]
[Mon Mar 30 22:51:48.263985 2026] [:error] [pid 60747:tid 60816] [client 20.91.215.64:36083] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/d12.php"] [unique_id "acqOBAU3IY-cCpy_-zE8pgAAAM0"]
[Mon Mar 30 22:51:48.795808 2026] [:error] [pid 60745:tid 60771] [client 20.91.215.64:35344] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/d12.php"] [unique_id "acqOBCQDBn75QnHaPb9HXQAAAFY"]
[Mon Mar 30 22:51:49.329969 2026] [:error] [pid 63557:tid 63574] [client 20.91.215.64:34798] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/d12.php"] [unique_id "acqOBa4QNVlzYgEvIjmoewAAAQ8"]
[Mon Mar 30 22:51:49.860558 2026] [:error] [pid 63557:tid 63564] [client 20.91.215.64:35978] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/menu.php"] [unique_id "acqOBa4QNVlzYgEvIjmofQAAAQU"]
[Mon Mar 30 22:51:50.389500 2026] [:error] [pid 60745:tid 60753] [client 20.91.215.64:35349] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/menu.php"] [unique_id "acqOBiQDBn75QnHaPb9HXwAAAEQ"]
[Mon Mar 30 22:51:50.939606 2026] [:error] [pid 60745:tid 60754] [client 20.91.215.64:35989] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/menu.php"] [unique_id "acqOBiQDBn75QnHaPb9HYQAAAEU"]
[Mon Mar 30 22:51:51.471715 2026] [:error] [pid 60835:tid 60844] [client 20.91.215.64:35985] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/menu.php"] [unique_id "acqOBwIOJ4Lc0iJVRzzqOAAAAAc"]
[Mon Mar 30 22:51:52.045920 2026] [:error] [pid 60835:tid 60843] [client 20.91.215.64:34762] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sf.php"] [unique_id "acqOCAIOJ4Lc0iJVRzzqPAAAAAY"]
[Mon Mar 30 22:51:52.621612 2026] [:error] [pid 63557:tid 63575] [client 20.91.215.64:36080] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sf.php"] [unique_id "acqOCK4QNVlzYgEvIjmohwAAARA"]
[Mon Mar 30 22:51:53.160465 2026] [:error] [pid 63557:tid 63574] [client 20.91.215.64:36088] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sf.php"] [unique_id "acqOCa4QNVlzYgEvIjmoigAAAQ8"]
[Mon Mar 30 22:51:53.686464 2026] [:error] [pid 60835:tid 60856] [client 20.91.215.64:36059] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sf.php"] [unique_id "acqOCQIOJ4Lc0iJVRzzqQQAAABM"]
[Mon Mar 30 22:51:54.254137 2026] [:error] [pid 63557:tid 63580] [client 20.91.215.64:34114] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lock360.php"] [unique_id "acqOCq4QNVlzYgEvIjmokwAAARU"]
[Mon Mar 30 22:51:54.860766 2026] [:error] [pid 60835:tid 60838] [client 20.91.215.64:35999] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lock360.php"] [unique_id "acqOCgIOJ4Lc0iJVRzzqQwAAAAE"]
[Mon Mar 30 22:51:55.399567 2026] [:error] [pid 63557:tid 63574] [client 20.91.215.64:35429] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lock360.php"] [unique_id "acqOC64QNVlzYgEvIjmomAAAAQ8"]
[Mon Mar 30 22:51:56.013122 2026] [:error] [pid 63557:tid 63564] [client 20.91.215.64:36056] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lock360.php"] [unique_id "acqODK4QNVlzYgEvIjmonQAAAQU"]
[Mon Mar 30 22:51:56.643172 2026] [:error] [pid 60746:tid 60793] [client 20.91.215.64:35453] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/thoms.php"] [unique_id "acqODJ4kQrgjDdAbQCoj1QAAAJE"]
[Mon Mar 30 22:51:57.188411 2026] [:error] [pid 63557:tid 63561] [client 20.91.215.64:36015] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/thoms.php"] [unique_id "acqODa4QNVlzYgEvIjmoowAAAQI"]
[Mon Mar 30 22:51:57.751951 2026] [:error] [pid 60746:tid 60779] [client 20.91.215.64:35438] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/thoms.php"] [unique_id "acqODZ4kQrgjDdAbQCoj1wAAAIM"]
[Mon Mar 30 22:51:58.369135 2026] [:error] [pid 60745:tid 60751] [client 20.91.215.64:36043] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/thoms.php"] [unique_id "acqODiQDBn75QnHaPb9HbQAAAEI"]
[Mon Mar 30 22:51:58.960310 2026] [:error] [pid 60747:tid 60825] [client 20.91.215.64:35399] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/O00.php"] [unique_id "acqODgU3IY-cCpy_-zE8rgAAANY"]
[Mon Mar 30 22:51:59.554822 2026] [:error] [pid 60745:tid 60756] [client 20.91.215.64:35992] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/O00.php"] [unique_id "acqODyQDBn75QnHaPb9HbgAAAEc"]
[Mon Mar 30 22:52:00.182902 2026] [:error] [pid 60835:tid 60859] [client 20.91.215.64:34135] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/O00.php"] [unique_id "acqOEAIOJ4Lc0iJVRzzqTQAAABY"]
[Mon Mar 30 22:52:00.711811 2026] [:error] [pid 60745:tid 60750] [client 20.91.215.64:36022] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/O00.php"] [unique_id "acqOECQDBn75QnHaPb9HcAAAAEE"]
[Mon Mar 30 22:52:01.241508 2026] [:error] [pid 60746:tid 60797] [client 20.91.215.64:36055] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class-.php"] [unique_id "acqOEZ4kQrgjDdAbQCoj4QAAAJU"]
[Mon Mar 30 22:52:01.788373 2026] [:error] [pid 60835:tid 60840] [client 20.91.215.64:35411] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class-.php"] [unique_id "acqOEQIOJ4Lc0iJVRzzqUwAAAAM"]
[Mon Mar 30 22:52:02.560507 2026] [:error] [pid 60746:tid 60792] [client 20.91.215.64:35969] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class-.php"] [unique_id "acqOEp4kQrgjDdAbQCoj4wAAAJA"]
[Mon Mar 30 22:52:03.208548 2026] [:error] [pid 60835:tid 60845] [client 20.91.215.64:36074] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class-.php"] [unique_id "acqOEwIOJ4Lc0iJVRzzqWwAAAAg"]
[Mon Mar 30 22:52:03.855584 2026] [:error] [pid 60835:tid 60853] [client 20.91.215.64:36707] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/akcc.php"] [unique_id "acqOEwIOJ4Lc0iJVRzzqYQAAABA"]
[Mon Mar 30 22:52:04.388894 2026] [:error] [pid 60746:tid 60791] [client 20.91.215.64:36698] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/akcc.php"] [unique_id "acqOFJ4kQrgjDdAbQCoj6QAAAI8"]
[Mon Mar 30 22:52:04.919078 2026] [:error] [pid 60746:tid 60777] [client 20.91.215.64:36696] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/akcc.php"] [unique_id "acqOFJ4kQrgjDdAbQCoj6wAAAIE"]
[Mon Mar 30 22:52:05.448211 2026] [:error] [pid 60745:tid 60766] [client 20.91.215.64:36090] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/akcc.php"] [unique_id "acqOFSQDBn75QnHaPb9HeAAAAFE"]
[Mon Mar 30 22:52:05.996024 2026] [:error] [pid 60835:tid 60840] [client 20.91.215.64:36617] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ee.php"] [unique_id "acqOFQIOJ4Lc0iJVRzzqagAAAAM"]
[Mon Mar 30 22:52:06.577931 2026] [:error] [pid 60746:tid 60793] [client 20.91.215.64:36087] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ee.php"] [unique_id "acqOFp4kQrgjDdAbQCoj7wAAAJE"]
[Mon Mar 30 22:52:07.139834 2026] [:error] [pid 60746:tid 60782] [client 20.91.215.64:36666] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ee.php"] [unique_id "acqOF54kQrgjDdAbQCoj9AAAAIY"]
[Mon Mar 30 22:52:07.750801 2026] [:error] [pid 60747:tid 60822] [client 20.91.215.64:34710] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ee.php"] [unique_id "acqOFwU3IY-cCpy_-zE8sQAAANM"]
[Mon Mar 30 22:52:08.298776 2026] [:error] [pid 60747:tid 60815] [client 20.91.215.64:36670] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/epinyins.php"] [unique_id "acqOGAU3IY-cCpy_-zE8swAAAMw"]
[Mon Mar 30 22:52:08.894619 2026] [:error] [pid 60747:tid 60813] [client 20.91.215.64:36608] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/epinyins.php"] [unique_id "acqOGAU3IY-cCpy_-zE8tQAAAMo"]
[Mon Mar 30 22:52:09.462193 2026] [:error] [pid 60835:tid 60837] [client 20.91.215.64:36086] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/epinyins.php"] [unique_id "acqOGQIOJ4Lc0iJVRzzqbQAAAAA"]
[Mon Mar 30 22:52:10.042933 2026] [:error] [pid 60746:tid 60789] [client 20.91.215.64:36660] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/epinyins.php"] [unique_id "acqOGp4kQrgjDdAbQCoj-QAAAI0"]
[Mon Mar 30 22:52:10.609093 2026] [:error] [pid 60747:tid 60821] [client 20.91.215.64:36615] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/i1.php"] [unique_id "acqOGgU3IY-cCpy_-zE8uwAAANI"]
[Mon Mar 30 22:52:11.303452 2026] [:error] [pid 60746:tid 60778] [client 20.91.215.64:36612] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/i1.php"] [unique_id "acqOG54kQrgjDdAbQCoj_QAAAII"]
[Mon Mar 30 22:52:11.951922 2026] [:error] [pid 63557:tid 63569] [client 20.91.215.64:36675] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/i1.php"] [unique_id "acqOG64QNVlzYgEvIjmotgAAAQo"]
[Mon Mar 30 22:52:12.495048 2026] [:error] [pid 60747:tid 60815] [client 20.91.215.64:36709] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/i1.php"] [unique_id "acqOHAU3IY-cCpy_-zE8wwAAAMw"]
[Mon Mar 30 22:52:13.034515 2026] [:error] [pid 60747:tid 60818] [client 20.91.215.64:36076] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vv.php"] [unique_id "acqOHQU3IY-cCpy_-zE8xQAAAM8"]
[Mon Mar 30 22:52:13.620466 2026] [:error] [pid 60747:tid 60812] [client 20.91.215.64:35984] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vv.php"] [unique_id "acqOHQU3IY-cCpy_-zE8yAAAAMk"]
[Mon Mar 30 22:52:14.192344 2026] [:error] [pid 60747:tid 60826] [client 20.91.215.64:36695] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vv.php"] [unique_id "acqOHgU3IY-cCpy_-zE8ywAAANc"]
[Mon Mar 30 22:52:14.780881 2026] [:error] [pid 63557:tid 63563] [client 20.91.215.64:36623] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vv.php"] [unique_id "acqOHq4QNVlzYgEvIjmougAAAQQ"]
[Mon Mar 30 22:52:15.347404 2026] [:error] [pid 60747:tid 60827] [client 20.91.215.64:36685] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/oo.php"] [unique_id "acqOHwU3IY-cCpy_-zE8zAAAANg"]
[Mon Mar 30 22:52:15.873965 2026] [:error] [pid 63557:tid 63565] [client 20.91.215.64:36643] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/oo.php"] [unique_id "acqOH64QNVlzYgEvIjmowAAAAQY"]
[Mon Mar 30 22:52:16.400875 2026] [:error] [pid 60746:tid 60780] [client 20.91.215.64:36619] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/oo.php"] [unique_id "acqOIJ4kQrgjDdAbQCokBQAAAIQ"]
[Mon Mar 30 22:52:17.432078 2026] [:error] [pid 60746:tid 60783] [client 20.91.215.64:36693] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/oo.php"] [unique_id "acqOIZ4kQrgjDdAbQCokCQAAAIc"]
[Mon Mar 30 22:52:17.968561 2026] [:error] [pid 60745:tid 60757] [client 20.91.215.64:35387] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sk.php"] [unique_id "acqOISQDBn75QnHaPb9HkAAAAEg"]
[Mon Mar 30 22:52:18.518700 2026] [:error] [pid 60745:tid 60753] [client 20.91.215.64:36658] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sk.php"] [unique_id "acqOIiQDBn75QnHaPb9HkwAAAEQ"]
[Mon Mar 30 22:52:19.153562 2026] [:error] [pid 60745:tid 60762] [client 20.91.215.64:36622] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sk.php"] [unique_id "acqOIyQDBn75QnHaPb9HmAAAAE0"]
[Mon Mar 30 22:52:20.155903 2026] [:error] [pid 63557:tid 63582] [client 20.91.215.64:36040] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sk.php"] [unique_id "acqOJK4QNVlzYgEvIjmoxQAAARc"]
[Mon Mar 30 22:52:20.737445 2026] [:error] [pid 60835:tid 60850] [client 20.91.215.64:36062] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aaa.php"] [unique_id "acqOJAIOJ4Lc0iJVRzzqhgAAAA0"]
[Mon Mar 30 22:52:21.326180 2026] [:error] [pid 63557:tid 63572] [client 20.91.215.64:35980] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aaa.php"] [unique_id "acqOJa4QNVlzYgEvIjmoyAAAAQ0"]
[Mon Mar 30 22:52:22.024986 2026] [:error] [pid 63557:tid 63578] [client 20.91.215.64:36704] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aaa.php"] [unique_id "acqOJq4QNVlzYgEvIjmozQAAARM"]
[Mon Mar 30 22:52:22.589695 2026] [:error] [pid 63557:tid 63572] [client 20.91.215.64:36677] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aaa.php"] [unique_id "acqOJq4QNVlzYgEvIjmo1AAAAQ0"]
[Mon Mar 30 22:52:23.247140 2026] [:error] [pid 63557:tid 63574] [client 20.91.215.64:36070] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ms-edit.php"] [unique_id "acqOJ64QNVlzYgEvIjmo3gAAAQ8"]
[Mon Mar 30 22:52:23.815376 2026] [:error] [pid 63557:tid 63566] [client 20.91.215.64:35400] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ms-edit.php"] [unique_id "acqOJ64QNVlzYgEvIjmo5AAAAQc"]
[Mon Mar 30 22:52:24.368758 2026] [:error] [pid 63557:tid 63574] [client 20.91.215.64:36045] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ms-edit.php"] [unique_id "acqOKK4QNVlzYgEvIjmo6QAAAQ8"]
[Mon Mar 30 22:52:24.934761 2026] [:error] [pid 63557:tid 63583] [client 20.91.215.64:36683] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ms-edit.php"] [unique_id "acqOKK4QNVlzYgEvIjmo7wAAARg"]
[Mon Mar 30 22:52:25.905097 2026] [:error] [pid 60835:tid 60857] [client 20.91.215.64:35341] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-the.php"] [unique_id "acqOKQIOJ4Lc0iJVRzzqjAAAABQ"]
[Mon Mar 30 22:52:26.440097 2026] [:error] [pid 60835:tid 60844] [client 20.91.215.64:36072] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-the.php"] [unique_id "acqOKgIOJ4Lc0iJVRzzqkQAAAAc"]
[Mon Mar 30 22:52:29.839964 2026] [:error] [pid 60746:tid 60794] [client 20.91.215.64:36004] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-the.php"] [unique_id "acqOLZ4kQrgjDdAbQCokJgAAAJI"]
[Mon Mar 30 22:52:33.258158 2026] [:error] [pid 63557:tid 63575] [client 20.91.215.64:36667] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-the.php"] [unique_id "acqOMa4QNVlzYgEvIjmpEAAAARA"]
[Mon Mar 30 22:52:34.073223 2026] [:error] [pid 60835:tid 60858] [client 20.91.215.64:37371] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/BDKR28WP.php"] [unique_id "acqOMgIOJ4Lc0iJVRzzqmgAAABU"]
[Mon Mar 30 22:52:34.711418 2026] [:error] [pid 60746:tid 60793] [client 20.91.215.64:35332] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/BDKR28WP.php"] [unique_id "acqOMp4kQrgjDdAbQCokLQAAAJE"]
[Mon Mar 30 22:52:35.390359 2026] [:error] [pid 60835:tid 60859] [client 20.91.215.64:36631] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/BDKR28WP.php"] [unique_id "acqOMwIOJ4Lc0iJVRzzqnQAAABY"]
[Mon Mar 30 22:52:36.020958 2026] [:error] [pid 60747:tid 60805] [client 20.91.215.64:36717] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/BDKR28WP.php"] [unique_id "acqONAU3IY-cCpy_-zE86wAAAMI"]
[Mon Mar 30 22:52:36.561334 2026] [:error] [pid 63557:tid 63578] [client 20.91.215.64:37375] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-access.php"] [unique_id "acqONK4QNVlzYgEvIjmpFwAAARM"]
[Mon Mar 30 22:52:37.132387 2026] [:error] [pid 63557:tid 63583] [client 20.91.215.64:37322] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-access.php"] [unique_id "acqONa4QNVlzYgEvIjmpGgAAARg"]
[Mon Mar 30 22:52:37.752325 2026] [:error] [pid 60835:tid 60841] [client 20.91.215.64:36727] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-access.php"] [unique_id "acqONQIOJ4Lc0iJVRzzqowAAAAQ"]
[Mon Mar 30 22:52:38.441201 2026] [:error] [pid 60835:tid 60853] [client 20.91.215.64:37304] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-access.php"] [unique_id "acqONgIOJ4Lc0iJVRzzqpgAAABA"]
[Mon Mar 30 22:52:39.004276 2026] [:error] [pid 60835:tid 60855] [client 20.91.215.64:37277] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bgymj.php"] [unique_id "acqONwIOJ4Lc0iJVRzzqqQAAABI"]
[Mon Mar 30 22:52:39.535775 2026] [:error] [pid 60747:tid 60826] [client 20.91.215.64:36032] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bgymj.php"] [unique_id "acqONwU3IY-cCpy_-zE88wAAANc"]
[Mon Mar 30 22:52:40.066617 2026] [:error] [pid 60835:tid 60859] [client 20.91.215.64:36685] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bgymj.php"] [unique_id "acqOOAIOJ4Lc0iJVRzzqrAAAABY"]
[Mon Mar 30 22:52:40.708454 2026] [:error] [pid 63557:tid 63576] [client 20.91.215.64:36005] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bgymj.php"] [unique_id "acqOOK4QNVlzYgEvIjmpKAAAARE"]
[Mon Mar 30 22:52:41.234349 2026] [:error] [pid 63557:tid 63575] [client 20.91.215.64:36019] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/new.php"] [unique_id "acqOOa4QNVlzYgEvIjmpLQAAARA"]
[Mon Mar 30 22:52:41.768975 2026] [:error] [pid 60746:tid 60781] [client 20.91.215.64:37347] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/new.php"] [unique_id "acqOOZ4kQrgjDdAbQCokNgAAAIU"]
[Mon Mar 30 22:52:42.305127 2026] [:error] [pid 60835:tid 60855] [client 20.91.215.64:36731] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/new.php"] [unique_id "acqOOgIOJ4Lc0iJVRzzqsQAAABI"]
[Mon Mar 30 22:52:43.288213 2026] [proxy_fcgi:error] [pid 60747:tid 60803] [client 20.91.215.64:37281] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 22:52:43.556448 2026] [proxy_fcgi:error] [pid 60747:tid 60809] [client 20.91.215.64:37281] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 22:52:43.824938 2026] [proxy_fcgi:error] [pid 60747:tid 60804] [client 20.91.215.64:37281] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 22:52:44.092051 2026] [proxy_fcgi:error] [pid 60747:tid 60805] [client 20.91.215.64:37281] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 22:52:44.397283 2026] [proxy_fcgi:error] [pid 60747:tid 60824] [client 20.91.215.64:37281] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 22:52:44.702205 2026] [proxy_fcgi:error] [pid 60747:tid 60816] [client 20.91.215.64:37281] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 22:52:45.006844 2026] [proxy_fcgi:error] [pid 60747:tid 60811] [client 20.91.215.64:37281] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 22:52:45.273599 2026] [proxy_fcgi:error] [pid 60747:tid 60818] [client 20.91.215.64:37281] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 22:52:45.541327 2026] [proxy_fcgi:error] [pid 60747:tid 60820] [client 20.91.215.64:37281] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 22:52:45.951642 2026] [proxy_fcgi:error] [pid 60747:tid 60808] [client 20.91.215.64:37281] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 22:52:46.223801 2026] [proxy_fcgi:error] [pid 60747:tid 60817] [client 20.91.215.64:37281] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 22:52:46.498033 2026] [:error] [pid 60747:tid 60806] [client 20.91.215.64:37281] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aa.php"] [unique_id "acqOPgU3IY-cCpy_-zE9BgAAAMM"]
[Mon Mar 30 22:52:47.080836 2026] [:error] [pid 60747:tid 60812] [client 20.91.215.64:37348] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aa.php"] [unique_id "acqOPwU3IY-cCpy_-zE9CAAAAMk"]
[Mon Mar 30 22:52:47.638850 2026] [:error] [pid 63557:tid 63569] [client 20.91.215.64:37365] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aa.php"] [unique_id "acqOP64QNVlzYgEvIjmpSQAAAQo"]
[Mon Mar 30 22:52:48.327486 2026] [:error] [pid 63557:tid 63560] [client 20.91.215.64:37313] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aa.php"] [unique_id "acqOQK4QNVlzYgEvIjmpUAAAAQE"]
[Mon Mar 30 22:52:48.874761 2026] [:error] [pid 60835:tid 60858] [client 20.91.215.64:37297] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xc.php"] [unique_id "acqOQAIOJ4Lc0iJVRzzqwwAAABU"]
[Mon Mar 30 22:52:49.461152 2026] [:error] [pid 63557:tid 63569] [client 20.91.215.64:36682] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xc.php"] [unique_id "acqOQa4QNVlzYgEvIjmpVQAAAQo"]
[Mon Mar 30 22:52:50.040557 2026] [:error] [pid 63557:tid 63573] [client 20.91.215.64:36627] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xc.php"] [unique_id "acqOQq4QNVlzYgEvIjmpWQAAAQ4"]
[Mon Mar 30 22:52:50.637912 2026] [:error] [pid 60835:tid 60850] [client 20.91.215.64:35968] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xc.php"] [unique_id "acqOQgIOJ4Lc0iJVRzzqxwAAAA0"]
[Mon Mar 30 22:52:51.171401 2026] [:error] [pid 63557:tid 63577] [client 20.91.215.64:36664] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ar.php"] [unique_id "acqOQ64QNVlzYgEvIjmpXgAAARI"]
[Mon Mar 30 22:52:51.714482 2026] [:error] [pid 60746:tid 60780] [client 20.91.215.64:36653] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ar.php"] [unique_id "acqOQ54kQrgjDdAbQCokSgAAAIQ"]
[Mon Mar 30 22:52:52.340843 2026] [:error] [pid 60746:tid 60797] [client 20.91.215.64:35431] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ar.php"] [unique_id "acqORJ4kQrgjDdAbQCokSwAAAJU"]
[Mon Mar 30 22:52:52.906598 2026] [:error] [pid 60745:tid 60751] [client 20.91.215.64:37299] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ar.php"] [unique_id "acqORCQDBn75QnHaPb9HswAAAEI"]
[Mon Mar 30 22:52:53.459564 2026] [:error] [pid 60835:tid 60841] [client 20.91.215.64:36650] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/yanz.php"] [unique_id "acqORQIOJ4Lc0iJVRzzq0wAAAAQ"]
[Mon Mar 30 22:52:53.995317 2026] [:error] [pid 60745:tid 60750] [client 20.91.215.64:37278] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/yanz.php"] [unique_id "acqORSQDBn75QnHaPb9HtQAAAEE"]
[Mon Mar 30 22:52:54.525702 2026] [:error] [pid 60746:tid 60784] [client 20.91.215.64:36699] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/yanz.php"] [unique_id "acqORp4kQrgjDdAbQCokTQAAAIg"]
[Mon Mar 30 22:52:55.157813 2026] [:error] [pid 60745:tid 60756] [client 20.91.215.64:36645] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/yanz.php"] [unique_id "acqORyQDBn75QnHaPb9HuAAAAEc"]
[Mon Mar 30 22:52:55.700976 2026] [:error] [pid 60745:tid 60764] [client 20.91.215.64:36651] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "acqORyQDBn75QnHaPb9HuwAAAE8"]
[Mon Mar 30 22:52:56.243323 2026] [:error] [pid 60745:tid 60762] [client 20.91.215.64:37349] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "acqOSCQDBn75QnHaPb9HvQAAAE0"]
[Mon Mar 30 22:52:56.805907 2026] [:error] [pid 63557:tid 63583] [client 20.91.215.64:37346] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "acqOSK4QNVlzYgEvIjmpdwAAARg"]
[Mon Mar 30 22:52:57.352607 2026] [:error] [pid 63557:tid 63580] [client 20.91.215.64:33477] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "acqOSa4QNVlzYgEvIjmpegAAARU"]
[Mon Mar 30 22:52:57.902591 2026] [:error] [pid 63557:tid 63574] [client 20.91.215.64:37311] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/333.php"] [unique_id "acqOSa4QNVlzYgEvIjmpfwAAAQ8"]
[Mon Mar 30 22:52:58.557432 2026] [:error] [pid 63557:tid 63572] [client 20.91.215.64:36668] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/333.php"] [unique_id "acqOSq4QNVlzYgEvIjmpgwAAAQ0"]
[Mon Mar 30 22:52:59.081167 2026] [:error] [pid 63557:tid 63563] [client 20.91.215.64:36625] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/333.php"] [unique_id "acqOS64QNVlzYgEvIjmpigAAAQQ"]
[Mon Mar 30 22:52:59.642297 2026] [:error] [pid 60746:tid 60789] [client 20.91.215.64:36656] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/333.php"] [unique_id "acqOS54kQrgjDdAbQCokUgAAAI0"]
[Mon Mar 30 22:53:00.288737 2026] [:error] [pid 63557:tid 63565] [client 20.91.215.64:36063] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ut.php"] [unique_id "acqOTK4QNVlzYgEvIjmpkAAAAQY"]
[Mon Mar 30 22:53:00.894308 2026] [:error] [pid 60747:tid 60820] [client 20.91.215.64:36614] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ut.php"] [unique_id "acqOTAU3IY-cCpy_-zE9GgAAANE"]
[Mon Mar 30 22:53:01.460490 2026] [:error] [pid 60835:tid 60860] [client 20.91.215.64:37269] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ut.php"] [unique_id "acqOTQIOJ4Lc0iJVRzzq5wAAABc"]
[Mon Mar 30 22:53:01.990073 2026] [:error] [pid 60747:tid 60813] [client 20.91.215.64:37321] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ut.php"] [unique_id "acqOTQU3IY-cCpy_-zE9HwAAAMo"]
[Mon Mar 30 22:53:02.555153 2026] [:error] [pid 60835:tid 60858] [client 20.91.215.64:37271] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wfile.php"] [unique_id "acqOTgIOJ4Lc0iJVRzzq7AAAABU"]
[Mon Mar 30 22:53:03.114315 2026] [:error] [pid 60835:tid 60849] [client 20.91.215.64:36677] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wfile.php"] [unique_id "acqOTwIOJ4Lc0iJVRzzq8AAAAAw"]
[Mon Mar 30 22:53:03.673625 2026] [:error] [pid 60747:tid 60815] [client 20.91.215.64:37283] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wfile.php"] [unique_id "acqOTwU3IY-cCpy_-zE9IgAAAMw"]
[Mon Mar 30 22:53:04.201171 2026] [:error] [pid 60747:tid 60804] [client 20.91.215.64:34736] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wfile.php"] [unique_id "acqOUAU3IY-cCpy_-zE9JAAAAME"]
[Mon Mar 30 22:53:04.739586 2026] [:error] [pid 63557:tid 63582] [client 20.91.215.64:35434] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vee.php"] [unique_id "acqOUK4QNVlzYgEvIjmpnAAAARc"]
[Mon Mar 30 22:53:05.272905 2026] [:error] [pid 60746:tid 60792] [client 20.91.215.64:36671] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vee.php"] [unique_id "acqOUZ4kQrgjDdAbQCokWgAAAJA"]
[Mon Mar 30 22:53:05.994182 2026] [:error] [pid 60835:tid 60839] [client 20.91.215.64:37306] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vee.php"] [unique_id "acqOUQIOJ4Lc0iJVRzzq-QAAAAI"]
[Mon Mar 30 22:53:06.526105 2026] [:error] [pid 60746:tid 60776] [client 20.91.215.64:37360] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vee.php"] [unique_id "acqOUp4kQrgjDdAbQCokXwAAAIA"]
[Mon Mar 30 22:53:07.060867 2026] [:error] [pid 60745:tid 60759] [client 20.91.215.64:36676] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admir.php"] [unique_id "acqOUyQDBn75QnHaPb9HwwAAAEo"]
[Mon Mar 30 22:53:07.590766 2026] [:error] [pid 60746:tid 60779] [client 20.91.215.64:34083] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admir.php"] [unique_id "acqOU54kQrgjDdAbQCokYQAAAIM"]
[Mon Mar 30 22:53:08.119641 2026] [:error] [pid 60746:tid 60783] [client 20.91.215.64:37318] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admir.php"] [unique_id "acqOVJ4kQrgjDdAbQCokZAAAAIc"]
[Mon Mar 30 22:53:08.659998 2026] [:error] [pid 60746:tid 60785] [client 20.91.215.64:36620] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admir.php"] [unique_id "acqOVJ4kQrgjDdAbQCokZwAAAIk"]
[Mon Mar 30 22:53:09.209806 2026] [:error] [pid 60835:tid 60842] [client 20.91.215.64:37341] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zde.php"] [unique_id "acqOVQIOJ4Lc0iJVRzzrAQAAAAU"]
[Mon Mar 30 22:53:09.748230 2026] [:error] [pid 60835:tid 60858] [client 20.91.215.64:37276] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zde.php"] [unique_id "acqOVQIOJ4Lc0iJVRzzrBAAAABU"]
[Mon Mar 30 22:53:10.292465 2026] [:error] [pid 60747:tid 60822] [client 20.91.215.64:38096] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zde.php"] [unique_id "acqOVgU3IY-cCpy_-zE9LQAAANM"]
[Mon Mar 30 22:53:10.894315 2026] [:error] [pid 60835:tid 60855] [client 20.91.215.64:37364] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zde.php"] [unique_id "acqOVgIOJ4Lc0iJVRzzrCgAAABI"]
[Mon Mar 30 22:53:11.421686 2026] [:error] [pid 60747:tid 60825] [client 20.91.215.64:38088] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wpo.php"] [unique_id "acqOVwU3IY-cCpy_-zE9NAAAANY"]
[Mon Mar 30 22:53:11.994895 2026] [:error] [pid 60835:tid 60842] [client 20.91.215.64:37303] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wpo.php"] [unique_id "acqOVwIOJ4Lc0iJVRzzrDQAAAAU"]
[Mon Mar 30 22:53:12.566887 2026] [:error] [pid 60835:tid 60840] [client 20.91.215.64:38040] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wpo.php"] [unique_id "acqOWAIOJ4Lc0iJVRzzrEQAAAAM"]
[Mon Mar 30 22:53:13.113499 2026] [:error] [pid 63557:tid 63578] [client 20.91.215.64:37351] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wpo.php"] [unique_id "acqOWa4QNVlzYgEvIjmpowAAARM"]
[Mon Mar 30 22:53:13.651154 2026] [:error] [pid 60746:tid 60779] [client 20.91.215.64:37355] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aj.php"] [unique_id "acqOWZ4kQrgjDdAbQCokagAAAIM"]
[Mon Mar 30 22:53:14.178348 2026] [:error] [pid 63557:tid 63566] [client 20.91.215.64:36640] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aj.php"] [unique_id "acqOWq4QNVlzYgEvIjmppwAAAQc"]
[Mon Mar 30 22:53:14.707933 2026] [:error] [pid 63557:tid 63561] [client 20.91.215.64:37329] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aj.php"] [unique_id "acqOWq4QNVlzYgEvIjmpqgAAAQI"]
[Mon Mar 30 22:53:15.252023 2026] [:error] [pid 63557:tid 63563] [client 20.91.215.64:38124] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aj.php"] [unique_id "acqOW64QNVlzYgEvIjmprgAAAQQ"]
[Mon Mar 30 22:53:15.799300 2026] [:error] [pid 60747:tid 60805] [client 20.91.215.64:38087] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/opts.php"] [unique_id "acqOWwU3IY-cCpy_-zE9OwAAAMI"]
[Mon Mar 30 22:53:16.327401 2026] [:error] [pid 60745:tid 60758] [client 20.91.215.64:38112] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/opts.php"] [unique_id "acqOXCQDBn75QnHaPb9HyAAAAEk"]
[Mon Mar 30 22:53:16.860075 2026] [:error] [pid 60746:tid 60792] [client 20.91.215.64:38053] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/opts.php"] [unique_id "acqOXJ4kQrgjDdAbQCokcAAAAJA"]
[Mon Mar 30 22:53:17.404734 2026] [:error] [pid 60746:tid 60791] [client 20.91.215.64:38019] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/opts.php"] [unique_id "acqOXZ4kQrgjDdAbQCokdAAAAI8"]
[Mon Mar 30 22:53:17.969014 2026] [:error] [pid 60835:tid 60853] [client 20.91.215.64:37293] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/filer.php"] [unique_id "acqOXQIOJ4Lc0iJVRzzrHgAAABA"]
[Mon Mar 30 22:53:18.522026 2026] [:error] [pid 60747:tid 60814] [client 20.91.215.64:37363] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/filer.php"] [unique_id "acqOXgU3IY-cCpy_-zE9PwAAAMs"]
[Mon Mar 30 22:53:19.049579 2026] [:error] [pid 60746:tid 60776] [client 20.91.215.64:37358] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/filer.php"] [unique_id "acqOX54kQrgjDdAbQCokdwAAAIA"]
[Mon Mar 30 22:53:19.590141 2026] [:error] [pid 63557:tid 63580] [client 20.91.215.64:37249] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/filer.php"] [unique_id "acqOX64QNVlzYgEvIjmptgAAARU"]
[Mon Mar 30 22:53:20.124820 2026] [:error] [pid 63557:tid 63563] [client 20.91.215.64:35973] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lites.php"] [unique_id "acqOYK4QNVlzYgEvIjmpvAAAAQQ"]
[Mon Mar 30 22:53:20.656287 2026] [:error] [pid 63557:tid 63565] [client 20.91.215.64:36661] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lites.php"] [unique_id "acqOYK4QNVlzYgEvIjmpwwAAAQY"]
[Mon Mar 30 22:53:21.181647 2026] [:error] [pid 60835:tid 60850] [client 20.91.215.64:38119] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lites.php"] [unique_id "acqOYQIOJ4Lc0iJVRzzrJgAAAA0"]
[Mon Mar 30 22:53:21.713166 2026] [:error] [pid 63557:tid 63560] [client 20.91.215.64:37326] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lites.php"] [unique_id "acqOYa4QNVlzYgEvIjmpzAAAAQE"]
[Mon Mar 30 22:53:22.249265 2026] [:error] [pid 60835:tid 60857] [client 20.91.215.64:37309] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gorila.php"] [unique_id "acqOYgIOJ4Lc0iJVRzzrLAAAABQ"]
[Mon Mar 30 22:53:22.805280 2026] [:error] [pid 60835:tid 60849] [client 20.91.215.64:37335] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gorila.php"] [unique_id "acqOYgIOJ4Lc0iJVRzzrMAAAAAw"]
[Mon Mar 30 22:53:23.334749 2026] [:error] [pid 60746:tid 60785] [client 20.91.215.64:38060] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gorila.php"] [unique_id "acqOY54kQrgjDdAbQCokfAAAAIk"]
[Mon Mar 30 22:53:23.938423 2026] [:error] [pid 63557:tid 63561] [client 20.91.215.64:38120] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gorila.php"] [unique_id "acqOY64QNVlzYgEvIjmp0wAAAQI"]
[Mon Mar 30 22:53:24.463474 2026] [:error] [pid 60835:tid 60839] [client 20.91.215.64:37282] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "acqOZAIOJ4Lc0iJVRzzrNQAAAAI"]
[Mon Mar 30 22:53:25.016661 2026] [:error] [pid 60746:tid 60780] [client 20.91.215.64:38086] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "acqOZZ4kQrgjDdAbQCokfwAAAIQ"]
[Mon Mar 30 22:53:25.642559 2026] [:error] [pid 60746:tid 60788] [client 20.91.215.64:37374] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "acqOZZ4kQrgjDdAbQCokgQAAAIw"]
[Mon Mar 30 22:53:26.195387 2026] [:error] [pid 63557:tid 63583] [client 20.91.215.64:37251] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "acqOZq4QNVlzYgEvIjmp3QAAARg"]
[Mon Mar 30 22:53:26.730122 2026] [:error] [pid 60745:tid 60758] [client 20.91.215.64:37252] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/main.php"] [unique_id "acqOZiQDBn75QnHaPb9H1QAAAEk"]
[Mon Mar 30 22:53:27.287933 2026] [:error] [pid 60745:tid 60760] [client 20.91.215.64:37296] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/main.php"] [unique_id "acqOZyQDBn75QnHaPb9H1wAAAEs"]
[Mon Mar 30 22:53:27.956853 2026] [:error] [pid 60745:tid 60768] [client 20.91.215.64:36051] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/main.php"] [unique_id "acqOZyQDBn75QnHaPb9H3AAAAFM"]
[Mon Mar 30 22:53:28.646524 2026] [:error] [pid 63557:tid 63582] [client 20.91.215.64:37272] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/main.php"] [unique_id "acqOaK4QNVlzYgEvIjmp4gAAARc"]
[Mon Mar 30 22:53:29.272007 2026] [:error] [pid 60745:tid 60773] [client 20.91.215.64:38134] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/plugins.php"] [unique_id "acqOaSQDBn75QnHaPb9H4QAAAFg"]
[Mon Mar 30 22:53:29.808205 2026] [:error] [pid 60745:tid 60752] [client 20.91.215.64:37287] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/plugins.php"] [unique_id "acqOaSQDBn75QnHaPb9H4wAAAEM"]
[Mon Mar 30 22:53:30.351364 2026] [:error] [pid 63557:tid 63579] [client 20.91.215.64:36715] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/plugins.php"] [unique_id "acqOaq4QNVlzYgEvIjmp7AAAARQ"]
[Mon Mar 30 22:53:30.941995 2026] [:error] [pid 63557:tid 63582] [client 20.91.215.64:37270] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/plugins.php"] [unique_id "acqOaq4QNVlzYgEvIjmp7gAAARc"]
[Mon Mar 30 22:53:31.468276 2026] [:error] [pid 63557:tid 63570] [client 20.91.215.64:38034] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f.php"] [unique_id "acqOa64QNVlzYgEvIjmp8QAAAQs"]
[Mon Mar 30 22:53:32.002263 2026] [:error] [pid 60747:tid 60807] [client 20.91.215.64:37259] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f.php"] [unique_id "acqObAU3IY-cCpy_-zE9TAAAAMQ"]
[Mon Mar 30 22:53:32.533901 2026] [:error] [pid 63557:tid 63581] [client 20.91.215.64:37264] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f.php"] [unique_id "acqObK4QNVlzYgEvIjmp_gAAARY"]
[Mon Mar 30 22:53:33.130480 2026] [:error] [pid 60746:tid 60799] [client 20.91.215.64:38122] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f.php"] [unique_id "acqObZ4kQrgjDdAbQCokjgAAAJc"]
[Mon Mar 30 22:53:33.669499 2026] [:error] [pid 60746:tid 60779] [client 20.91.215.64:38084] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/adminer.php"] [unique_id "acqObZ4kQrgjDdAbQCokjwAAAIM"]
[Mon Mar 30 22:53:34.198645 2026] [:error] [pid 63557:tid 63578] [client 20.91.215.64:37294] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/adminer.php"] [unique_id "acqObq4QNVlzYgEvIjmqBAAAARM"]
[Mon Mar 30 22:53:34.742949 2026] [:error] [pid 60746:tid 60781] [client 20.91.215.64:37273] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/adminer.php"] [unique_id "acqObp4kQrgjDdAbQCokkgAAAIU"]
[Mon Mar 30 22:53:35.294713 2026] [:error] [pid 60835:tid 60857] [client 20.91.215.64:37300] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/adminer.php"] [unique_id "acqObwIOJ4Lc0iJVRzzrPwAAABQ"]
[Mon Mar 30 22:53:35.828708 2026] [:error] [pid 60745:tid 60751] [client 20.91.215.64:38049] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "acqObyQDBn75QnHaPb9H6AAAAEI"]
[Mon Mar 30 22:53:36.452379 2026] [:error] [pid 60746:tid 60796] [client 20.91.215.64:37334] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "acqOcJ4kQrgjDdAbQCoklwAAAJQ"]
[Mon Mar 30 22:53:36.995559 2026] [:error] [pid 60835:tid 60847] [client 20.91.215.64:37301] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "acqOcAIOJ4Lc0iJVRzzrQQAAAAo"]
[Mon Mar 30 22:53:37.555198 2026] [:error] [pid 60835:tid 60845] [client 20.91.215.64:35449] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "acqOcQIOJ4Lc0iJVRzzrQwAAAAg"]
[Mon Mar 30 22:53:38.090982 2026] [:error] [pid 63557:tid 63559] [client 20.91.215.64:38071] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/adminfuns.php"] [unique_id "acqOcq4QNVlzYgEvIjmqEQAAAQA"]
[Mon Mar 30 22:53:38.735437 2026] [:error] [pid 60746:tid 60776] [client 20.91.215.64:36633] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/adminfuns.php"] [unique_id "acqOcp4kQrgjDdAbQCokmgAAAIA"]
[Mon Mar 30 22:53:39.273211 2026] [:error] [pid 60746:tid 60799] [client 20.91.215.64:36665] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/adminfuns.php"] [unique_id "acqOc54kQrgjDdAbQCokmwAAAJc"]
[Mon Mar 30 22:53:39.889657 2026] [:error] [pid 63557:tid 63579] [client 20.91.215.64:38063] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/adminfuns.php"] [unique_id "acqOc64QNVlzYgEvIjmqFwAAARQ"]
[Mon Mar 30 22:53:40.419902 2026] [:error] [pid 60745:tid 60770] [client 20.91.215.64:38050] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/adminfuns.php"] [unique_id "acqOdCQDBn75QnHaPb9H8QAAAFU"]
[Mon Mar 30 22:53:40.969798 2026] [:error] [pid 60747:tid 60810] [client 20.91.215.64:38697] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/adminfuns.php"] [unique_id "acqOdAU3IY-cCpy_-zE9UAAAAMc"]
[Mon Mar 30 22:53:41.538071 2026] [:error] [pid 63557:tid 63572] [client 20.91.215.64:37300] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/adminfuns.php"] [unique_id "acqOda4QNVlzYgEvIjmqIAAAAQ0"]
[Mon Mar 30 22:53:42.115646 2026] [:error] [pid 60835:tid 60840] [client 20.91.215.64:38032] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/adminfuns.php"] [unique_id "acqOdgIOJ4Lc0iJVRzzrSQAAAAM"]
[Mon Mar 30 22:53:42.647841 2026] [:error] [pid 63557:tid 63566] [client 20.91.215.64:38677] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-gr.php"] [unique_id "acqOdq4QNVlzYgEvIjmqJgAAAQc"]
[Mon Mar 30 22:53:43.252480 2026] [:error] [pid 63557:tid 63564] [client 20.91.215.64:38039] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-gr.php"] [unique_id "acqOd64QNVlzYgEvIjmqKAAAAQU"]
[Mon Mar 30 22:53:43.840790 2026] [:error] [pid 63557:tid 63568] [client 20.91.215.64:38703] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-gr.php"] [unique_id "acqOd64QNVlzYgEvIjmqLQAAAQk"]
[Mon Mar 30 22:53:44.367796 2026] [:error] [pid 60835:tid 60845] [client 20.91.215.64:37327] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-gr.php"] [unique_id "acqOeAIOJ4Lc0iJVRzzrTgAAAAg"]
[Mon Mar 30 22:53:44.935700 2026] [:error] [pid 60835:tid 60846] [client 20.91.215.64:38693] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-aaa.php"] [unique_id "acqOeAIOJ4Lc0iJVRzzrUQAAAAk"]
[Mon Mar 30 22:53:45.484897 2026] [:error] [pid 60835:tid 60837] [client 20.91.215.64:38114] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-aaa.php"] [unique_id "acqOeQIOJ4Lc0iJVRzzrVAAAAAA"]
[Mon Mar 30 22:53:46.098646 2026] [proxy_fcgi:error] [pid 60835:tid 60859] [client 20.91.215.64:38706] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 22:53:46.364989 2026] [proxy_fcgi:error] [pid 60835:tid 60839] [client 20.91.215.64:38706] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 22:53:46.632794 2026] [proxy_fcgi:error] [pid 60835:tid 60850] [client 20.91.215.64:38706] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 22:53:46.921471 2026] [proxy_fcgi:error] [pid 60835:tid 60840] [client 20.91.215.64:38706] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 22:53:47.198878 2026] [proxy_fcgi:error] [pid 60835:tid 60857] [client 20.91.215.64:38706] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 22:53:47.465071 2026] [proxy_fcgi:error] [pid 60835:tid 60852] [client 20.91.215.64:38706] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 22:53:47.731790 2026] [proxy_fcgi:error] [pid 60835:tid 60846] [client 20.91.215.64:38706] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 22:53:47.998275 2026] [proxy_fcgi:error] [pid 60835:tid 60837] [client 20.91.215.64:38706] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 22:53:48.546012 2026] [proxy_fcgi:error] [pid 60835:tid 60860] [client 20.91.215.64:38706] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 22:53:48.856351 2026] [proxy_fcgi:error] [pid 60835:tid 60850] [client 20.91.215.64:38706] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 22:53:49.119207 2026] [:error] [pid 60835:tid 60857] [client 20.91.215.64:38706] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a.php"] [unique_id "acqOfQIOJ4Lc0iJVRzzrbAAAABQ"]
[Mon Mar 30 22:53:49.941687 2026] [:error] [pid 63557:tid 63568] [client 20.91.215.64:38079] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a.php"] [unique_id "acqOfa4QNVlzYgEvIjmqPAAAAQk"]
[Mon Mar 30 22:53:50.466855 2026] [:error] [pid 60745:tid 60754] [client 20.91.215.64:36648] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a.php"] [unique_id "acqOfiQDBn75QnHaPb9H_gAAAEU"]
[Mon Mar 30 22:53:50.992449 2026] [:error] [pid 60747:tid 60807] [client 20.91.215.64:38023] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a.php"] [unique_id "acqOfgU3IY-cCpy_-zE9XwAAAMQ"]
[Mon Mar 30 22:53:51.550170 2026] [:error] [pid 60747:tid 60813] [client 20.91.215.64:38108] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/06.php"] [unique_id "acqOfwU3IY-cCpy_-zE9YwAAAMo"]
[Mon Mar 30 22:53:52.076773 2026] [:error] [pid 60835:tid 60858] [client 20.91.215.64:38059] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/06.php"] [unique_id "acqOgAIOJ4Lc0iJVRzzrcQAAABU"]
[Mon Mar 30 22:53:52.648621 2026] [:error] [pid 60835:tid 60842] [client 20.91.215.64:38038] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/06.php"] [unique_id "acqOgAIOJ4Lc0iJVRzzrdAAAAAU"]
[Mon Mar 30 22:53:53.178245 2026] [:error] [pid 60835:tid 60851] [client 20.91.215.64:38777] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/06.php"] [unique_id "acqOgQIOJ4Lc0iJVRzzreAAAAA4"]
[Mon Mar 30 22:53:53.707945 2026] [:error] [pid 60745:tid 60766] [client 20.91.215.64:38682] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/languages/index.php"] [unique_id "acqOgSQDBn75QnHaPb9IAwAAAFE"]
[Mon Mar 30 22:53:54.307985 2026] [:error] [pid 60747:tid 60812] [client 20.91.215.64:36050] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/languages/index.php"] [unique_id "acqOggU3IY-cCpy_-zE9ZwAAAMk"]
[Mon Mar 30 22:53:54.835083 2026] [:error] [pid 60835:tid 60858] [client 20.91.215.64:38778] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/languages/index.php"] [unique_id "acqOggIOJ4Lc0iJVRzzrfQAAABU"]
[Mon Mar 30 22:53:55.359716 2026] [:error] [pid 63557:tid 63578] [client 20.91.215.64:38028] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/languages/index.php"] [unique_id "acqOg64QNVlzYgEvIjmqRgAAARM"]
[Mon Mar 30 22:53:55.913830 2026] [:error] [pid 60747:tid 60815] [client 20.91.215.64:38721] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sx.php"] [unique_id "acqOgwU3IY-cCpy_-zE9bAAAAMw"]
[Mon Mar 30 22:53:56.500989 2026] [:error] [pid 60746:tid 60797] [client 20.91.215.64:38675] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sx.php"] [unique_id "acqOhJ4kQrgjDdAbQCoksAAAAJU"]
[Mon Mar 30 22:53:57.035492 2026] [:error] [pid 63557:tid 63570] [client 20.91.215.64:38709] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sx.php"] [unique_id "acqOha4QNVlzYgEvIjmqSgAAAQs"]
[Mon Mar 30 22:53:57.560180 2026] [:error] [pid 60835:tid 60853] [client 20.91.215.64:38662] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sx.php"] [unique_id "acqOhQIOJ4Lc0iJVRzzrgwAAABA"]
[Mon Mar 30 22:53:58.102137 2026] [:error] [pid 60835:tid 60837] [client 20.91.215.64:38728] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gelay.php"] [unique_id "acqOhgIOJ4Lc0iJVRzzriAAAAAA"]
[Mon Mar 30 22:53:58.678583 2026] [:error] [pid 63557:tid 63573] [client 20.91.215.64:38771] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gelay.php"] [unique_id "acqOhq4QNVlzYgEvIjmqTAAAAQ4"]
[Mon Mar 30 22:53:59.258656 2026] [:error] [pid 63557:tid 63569] [client 20.91.215.64:38118] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gelay.php"] [unique_id "acqOh64QNVlzYgEvIjmqTgAAAQo"]
[Mon Mar 30 22:53:59.842099 2026] [:error] [pid 60747:tid 60820] [client 20.91.215.64:38708] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gelay.php"] [unique_id "acqOhwU3IY-cCpy_-zE9dQAAANE"]
[Mon Mar 30 22:54:00.370222 2026] [:error] [pid 60745:tid 60763] [client 20.91.215.64:38752] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-class.php"] [unique_id "acqOiCQDBn75QnHaPb9IDAAAAE4"]
[Mon Mar 30 22:54:00.912276 2026] [:error] [pid 60746:tid 60794] [client 20.91.215.64:38074] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-class.php"] [unique_id "acqOiJ4kQrgjDdAbQCokuAAAAJI"]
[Mon Mar 30 22:54:01.447138 2026] [:error] [pid 60746:tid 60779] [client 20.91.215.64:38094] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-class.php"] [unique_id "acqOiZ4kQrgjDdAbQCokuwAAAIM"]
[Mon Mar 30 22:54:02.086877 2026] [:error] [pid 60747:tid 60810] [client 20.91.215.64:37265] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-class.php"] [unique_id "acqOigU3IY-cCpy_-zE9fAAAAMc"]
[Mon Mar 30 22:54:02.631429 2026] [:error] [pid 63557:tid 63563] [client 20.91.215.64:38780] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bs1.php"] [unique_id "acqOiq4QNVlzYgEvIjmqUQAAAQQ"]
[Mon Mar 30 22:54:03.159051 2026] [:error] [pid 63557:tid 63570] [client 20.91.215.64:38738] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bs1.php"] [unique_id "acqOi64QNVlzYgEvIjmqVQAAAQs"]
[Mon Mar 30 22:54:03.692301 2026] [:error] [pid 60745:tid 60749] [client 20.91.215.64:38710] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bs1.php"] [unique_id "acqOiyQDBn75QnHaPb9IFAAAAEA"]
[Mon Mar 30 22:54:04.352015 2026] [:error] [pid 63557:tid 63572] [client 20.91.215.64:37345] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bs1.php"] [unique_id "acqOjK4QNVlzYgEvIjmqWAAAAQ0"]
[Mon Mar 30 22:54:04.931168 2026] [:error] [pid 60835:tid 60848] [client 20.91.215.64:38674] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-login.php"] [unique_id "acqOjAIOJ4Lc0iJVRzzrkgAAAAs"]
[Mon Mar 30 22:54:05.549085 2026] [:error] [pid 60745:tid 60767] [client 20.91.215.64:38072] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-login.php"] [unique_id "acqOjSQDBn75QnHaPb9IFwAAAFI"]
[Mon Mar 30 22:54:06.092364 2026] [:error] [pid 60745:tid 60768] [client 20.91.215.64:38139] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-login.php"] [unique_id "acqOjiQDBn75QnHaPb9IGQAAAFM"]
[Mon Mar 30 22:54:06.665588 2026] [:error] [pid 60835:tid 60843] [client 20.91.215.64:38696] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-login.php"] [unique_id "acqOjgIOJ4Lc0iJVRzzrmAAAAAY"]
[Mon Mar 30 22:54:07.194813 2026] [:error] [pid 60745:tid 60751] [client 20.91.215.64:38036] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wsvvs.php"] [unique_id "acqOjyQDBn75QnHaPb9IHAAAAEI"]
[Mon Mar 30 22:54:07.725901 2026] [:error] [pid 63557:tid 63562] [client 20.91.215.64:38773] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wsvvs.php"] [unique_id "acqOj64QNVlzYgEvIjmqXwAAAQM"]
[Mon Mar 30 22:54:08.255680 2026] [:error] [pid 60747:tid 60825] [client 20.91.215.64:38064] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wsvvs.php"] [unique_id "acqOkAU3IY-cCpy_-zE9igAAANY"]
[Mon Mar 30 22:54:08.855321 2026] [:error] [pid 60835:tid 60837] [client 20.91.215.64:38021] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wsvvs.php"] [unique_id "acqOkAIOJ4Lc0iJVRzzrnAAAAAA"]
[Mon Mar 30 22:54:09.385496 2026] [:error] [pid 63557:tid 63567] [client 20.91.215.64:35383] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vbbn.php"] [unique_id "acqOka4QNVlzYgEvIjmqYQAAAQg"]
[Mon Mar 30 22:54:09.914956 2026] [:error] [pid 63557:tid 63566] [client 20.91.215.64:36718] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vbbn.php"] [unique_id "acqOka4QNVlzYgEvIjmqZgAAAQc"]
[Mon Mar 30 22:54:10.443931 2026] [:error] [pid 60747:tid 60804] [client 20.91.215.64:36649] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vbbn.php"] [unique_id "acqOkgU3IY-cCpy_-zE9jwAAAME"]
[Mon Mar 30 22:54:11.031919 2026] [:error] [pid 60745:tid 60750] [client 20.91.215.64:38037] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vbbn.php"] [unique_id "acqOkyQDBn75QnHaPb9IIwAAAEE"]
[Mon Mar 30 22:54:11.578354 2026] [:error] [pid 60746:tid 60787] [client 20.91.215.64:38669] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/shoyo.php"] [unique_id "acqOk54kQrgjDdAbQCok1QAAAIs"]
[Mon Mar 30 22:54:12.250986 2026] [:error] [pid 63557:tid 63580] [client 20.91.215.64:38138] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/shoyo.php"] [unique_id "acqOlK4QNVlzYgEvIjmqcgAAARU"]
[Mon Mar 30 22:54:12.807772 2026] [:error] [pid 63557:tid 63563] [client 20.91.215.64:38770] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/shoyo.php"] [unique_id "acqOlK4QNVlzYgEvIjmqdAAAAQQ"]
[Mon Mar 30 22:54:13.334207 2026] [:error] [pid 60747:tid 60827] [client 20.91.215.64:39215] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/shoyo.php"] [unique_id "acqOlQU3IY-cCpy_-zE9kQAAANg"]
[Mon Mar 30 22:54:13.873019 2026] [:error] [pid 60747:tid 60811] [client 20.91.215.64:38751] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/flower.php"] [unique_id "acqOlQU3IY-cCpy_-zE9lQAAAMg"]
[Mon Mar 30 22:54:14.398670 2026] [:error] [pid 60746:tid 60788] [client 20.91.215.64:39286] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/flower.php"] [unique_id "acqOlp4kQrgjDdAbQCok2QAAAIw"]
[Mon Mar 30 22:54:14.945656 2026] [:error] [pid 60747:tid 60823] [client 20.91.215.64:38727] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/flower.php"] [unique_id "acqOlgU3IY-cCpy_-zE9nAAAANQ"]
[Mon Mar 30 22:54:15.471014 2026] [:error] [pid 60835:tid 60839] [client 20.91.215.64:39267] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/flower.php"] [unique_id "acqOlwIOJ4Lc0iJVRzzrqQAAAAI"]
[Mon Mar 30 22:54:15.994971 2026] [:error] [pid 63557:tid 63566] [client 20.91.215.64:38719] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/waq.php"] [unique_id "acqOl64QNVlzYgEvIjmqggAAAQc"]
[Mon Mar 30 22:54:16.574755 2026] [:error] [pid 60745:tid 60773] [client 20.91.215.64:39223] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/waq.php"] [unique_id "acqOmCQDBn75QnHaPb9IKgAAAFg"]
[Mon Mar 30 22:54:17.166114 2026] [:error] [pid 60745:tid 60749] [client 20.91.215.64:38116] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/waq.php"] [unique_id "acqOmSQDBn75QnHaPb9ILwAAAEA"]
[Mon Mar 30 22:54:17.843143 2026] [:error] [pid 60746:tid 60800] [client 20.91.215.64:38683] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/waq.php"] [unique_id "acqOmZ4kQrgjDdAbQCok4wAAAJg"]
[Mon Mar 30 22:54:18.402584 2026] [:error] [pid 60746:tid 60794] [client 20.91.215.64:38733] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wakak.php"] [unique_id "acqOmp4kQrgjDdAbQCok5AAAAJI"]
[Mon Mar 30 22:54:18.996277 2026] [:error] [pid 63557:tid 63563] [client 20.91.215.64:37372] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wakak.php"] [unique_id "acqOmq4QNVlzYgEvIjmqiwAAAQQ"]
[Mon Mar 30 22:54:19.707958 2026] [:error] [pid 63557:tid 63583] [client 20.91.215.64:38066] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wakak.php"] [unique_id "acqOm64QNVlzYgEvIjmqlAAAARg"]
[Mon Mar 30 22:54:20.320590 2026] [:error] [pid 63557:tid 63563] [client 20.91.215.64:39272] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wakak.php"] [unique_id "acqOnK4QNVlzYgEvIjmqlwAAAQQ"]
[Mon Mar 30 22:54:20.850285 2026] [:error] [pid 60747:tid 60806] [client 20.91.215.64:38732] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bipas.php"] [unique_id "acqOnAU3IY-cCpy_-zE9ogAAAMM"]
[Mon Mar 30 22:54:21.522360 2026] [:error] [pid 60835:tid 60860] [client 20.91.215.64:39244] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bipas.php"] [unique_id "acqOnQIOJ4Lc0iJVRzzrsQAAABc"]
[Mon Mar 30 22:54:22.049645 2026] [:error] [pid 60746:tid 60783] [client 20.91.215.64:36684] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bipas.php"] [unique_id "acqOnp4kQrgjDdAbQCok5gAAAIc"]
[Mon Mar 30 22:54:22.664885 2026] [:error] [pid 60747:tid 60809] [client 20.91.215.64:39225] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bipas.php"] [unique_id "acqOngU3IY-cCpy_-zE9twAAAMY"]
[Mon Mar 30 22:54:23.196593 2026] [:error] [pid 63557:tid 63566] [client 20.91.215.64:35982] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/conte.php"] [unique_id "acqOn64QNVlzYgEvIjmqoAAAAQc"]
[Mon Mar 30 22:54:23.766313 2026] [:error] [pid 63557:tid 63568] [client 20.91.215.64:38100] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/conte.php"] [unique_id "acqOn64QNVlzYgEvIjmqpQAAAQk"]
[Mon Mar 30 22:54:24.302527 2026] [:error] [pid 63557:tid 63573] [client 20.91.215.64:38082] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/conte.php"] [unique_id "acqOoK4QNVlzYgEvIjmqrAAAAQ4"]
[Mon Mar 30 22:54:24.867489 2026] [:error] [pid 60835:tid 60849] [client 20.91.215.64:38766] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/conte.php"] [unique_id "acqOoAIOJ4Lc0iJVRzzrxQAAAAw"]
[Mon Mar 30 22:54:25.474685 2026] [:error] [pid 60747:tid 60818] [client 20.91.215.64:38762] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class3.php"] [unique_id "acqOoQU3IY-cCpy_-zE9ywAAAM8"]
[Mon Mar 30 22:54:26.014141 2026] [:error] [pid 63557:tid 63565] [client 20.91.215.64:38758] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class3.php"] [unique_id "acqOoq4QNVlzYgEvIjmqtQAAAQY"]
[Mon Mar 30 22:54:26.562282 2026] [:error] [pid 63557:tid 63577] [client 20.91.215.64:39169] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class3.php"] [unique_id "acqOoq4QNVlzYgEvIjmquQAAARI"]
[Mon Mar 30 22:54:27.086344 2026] [:error] [pid 60747:tid 60815] [client 20.91.215.64:39243] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class3.php"] [unique_id "acqOowU3IY-cCpy_-zE9zgAAAMw"]
[Mon Mar 30 22:54:27.614400 2026] [:error] [pid 60747:tid 60808] [client 20.91.215.64:38672] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/blurbs18.php"] [unique_id "acqOowU3IY-cCpy_-zE9zwAAAMU"]
[Mon Mar 30 22:54:28.218171 2026] [:error] [pid 60747:tid 60822] [client 20.91.215.64:38083] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/blurbs18.php"] [unique_id "acqOpAU3IY-cCpy_-zE90wAAANM"]
[Mon Mar 30 22:54:28.752155 2026] [:error] [pid 60746:tid 60791] [client 20.91.215.64:38688] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/blurbs18.php"] [unique_id "acqOpJ4kQrgjDdAbQCok6QAAAI8"]
[Mon Mar 30 22:54:29.283475 2026] [:error] [pid 60835:tid 60845] [client 20.91.215.64:39295] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/blurbs18.php"] [unique_id "acqOpQIOJ4Lc0iJVRzzrygAAAAg"]
[Mon Mar 30 22:54:29.822332 2026] [:error] [pid 63557:tid 63583] [client 20.91.215.64:39259] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/claa.php"] [unique_id "acqOpa4QNVlzYgEvIjmqwAAAARg"]
[Mon Mar 30 22:54:30.367720 2026] [:error] [pid 60835:tid 60848] [client 20.91.215.64:39253] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/claa.php"] [unique_id "acqOpgIOJ4Lc0iJVRzzrzwAAAAs"]
[Mon Mar 30 22:54:30.905053 2026] [:error] [pid 60745:tid 60754] [client 20.91.215.64:38659] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/claa.php"] [unique_id "acqOpiQDBn75QnHaPb9IWgAAAEU"]
[Mon Mar 30 22:54:31.432058 2026] [:error] [pid 63557:tid 63576] [client 20.91.215.64:38691] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/claa.php"] [unique_id "acqOp64QNVlzYgEvIjmqxQAAARE"]
[Mon Mar 30 22:54:31.963330 2026] [:error] [pid 63557:tid 63577] [client 20.91.215.64:37338] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xb.php"] [unique_id "acqOp64QNVlzYgEvIjmqywAAARI"]
[Mon Mar 30 22:54:32.550577 2026] [:error] [pid 63557:tid 63565] [client 20.91.215.64:38107] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xb.php"] [unique_id "acqOqK4QNVlzYgEvIjmqzQAAAQY"]
[Mon Mar 30 22:54:33.081286 2026] [:error] [pid 60746:tid 60795] [client 20.91.215.64:39269] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xb.php"] [unique_id "acqOqZ4kQrgjDdAbQCok8gAAAJM"]
[Mon Mar 30 22:54:33.620010 2026] [:error] [pid 63557:tid 63568] [client 20.91.215.64:39186] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xb.php"] [unique_id "acqOqa4QNVlzYgEvIjmq1QAAAQk"]
[Mon Mar 30 22:54:34.215467 2026] [:error] [pid 60746:tid 60779] [client 20.91.215.64:39255] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vx.php"] [unique_id "acqOqp4kQrgjDdAbQCok9AAAAIM"]
[Mon Mar 30 22:54:34.756886 2026] [:error] [pid 60745:tid 60760] [client 20.91.215.64:38767] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vx.php"] [unique_id "acqOqiQDBn75QnHaPb9IZgAAAEs"]
[Mon Mar 30 22:54:35.367374 2026] [:error] [pid 60747:tid 60811] [client 20.91.215.64:39282] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vx.php"] [unique_id "acqOqwU3IY-cCpy_-zE96QAAAMg"]
[Mon Mar 30 22:54:35.947810 2026] [:error] [pid 60746:tid 60792] [client 20.91.215.64:39175] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vx.php"] [unique_id "acqOq54kQrgjDdAbQCok9gAAAJA"]
[Mon Mar 30 22:54:36.508439 2026] [:error] [pid 60746:tid 60783] [client 20.91.215.64:38744] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wa.php"] [unique_id "acqOrJ4kQrgjDdAbQCok_AAAAIc"]
[Mon Mar 30 22:54:37.062412 2026] [:error] [pid 63557:tid 63559] [client 20.91.215.64:38704] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wa.php"] [unique_id "acqOra4QNVlzYgEvIjmq5QAAAQA"]
[Mon Mar 30 22:54:37.595539 2026] [:error] [pid 60746:tid 60796] [client 20.91.215.64:39294] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wa.php"] [unique_id "acqOrZ4kQrgjDdAbQColBQAAAJQ"]
[Mon Mar 30 22:54:38.182322 2026] [:error] [pid 60746:tid 60777] [client 20.91.215.64:38772] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wa.php"] [unique_id "acqOrp4kQrgjDdAbQColBgAAAIE"]
[Mon Mar 30 22:54:38.871179 2026] [:error] [pid 60746:tid 60798] [client 20.91.215.64:39240] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ac.php"] [unique_id "acqOrp4kQrgjDdAbQColCAAAAJY"]
[Mon Mar 30 22:54:39.407953 2026] [:error] [pid 60745:tid 60764] [client 20.91.215.64:37323] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ac.php"] [unique_id "acqOryQDBn75QnHaPb9IcQAAAE8"]
[Mon Mar 30 22:54:39.943614 2026] [:error] [pid 60746:tid 60779] [client 20.91.215.64:38689] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ac.php"] [unique_id "acqOr54kQrgjDdAbQColCwAAAIM"]
[Mon Mar 30 22:54:40.492068 2026] [:error] [pid 63557:tid 63580] [client 20.91.215.64:38661] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ac.php"] [unique_id "acqOsK4QNVlzYgEvIjmq7gAAARU"]
[Mon Mar 30 22:54:41.061715 2026] [:error] [pid 60746:tid 60778] [client 20.91.215.64:38742] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/az.php"] [unique_id "acqOsZ4kQrgjDdAbQColDQAAAII"]
[Mon Mar 30 22:54:41.586101 2026] [:error] [pid 60747:tid 60819] [client 20.91.215.64:38737] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/az.php"] [unique_id "acqOsQU3IY-cCpy_-zE99AAAANA"]
[Mon Mar 30 22:54:42.113115 2026] [:error] [pid 63557:tid 63574] [client 20.91.215.64:39932] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/az.php"] [unique_id "acqOsq4QNVlzYgEvIjmq8wAAAQ8"]
[Mon Mar 30 22:54:42.639194 2026] [:error] [pid 60747:tid 60804] [client 20.91.215.64:39206] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/az.php"] [unique_id "acqOsgU3IY-cCpy_-zE9-AAAAME"]
[Mon Mar 30 22:54:43.201186 2026] [:error] [pid 60835:tid 60860] [client 20.91.215.64:39870] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/la.php"] [unique_id "acqOswIOJ4Lc0iJVRzzr5gAAABc"]
[Mon Mar 30 22:54:43.774420 2026] [:error] [pid 63557:tid 63582] [client 20.91.215.64:39839] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/la.php"] [unique_id "acqOs64QNVlzYgEvIjmq9wAAARc"]
[Mon Mar 30 22:54:44.330670 2026] [:error] [pid 63557:tid 63580] [client 20.91.215.64:39858] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/la.php"] [unique_id "acqOtK4QNVlzYgEvIjmq-wAAARU"]
[Mon Mar 30 22:54:44.872020 2026] [:error] [pid 60746:tid 60791] [client 20.91.215.64:39896] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/la.php"] [unique_id "acqOtJ4kQrgjDdAbQColGgAAAI8"]
[Mon Mar 30 22:54:45.445863 2026] [:error] [pid 60745:tid 60752] [client 20.91.215.64:39869] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gg.php"] [unique_id "acqOtSQDBn75QnHaPb9IdgAAAEM"]
[Mon Mar 30 22:54:45.971826 2026] [:error] [pid 60746:tid 60777] [client 20.91.215.64:38076] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gg.php"] [unique_id "acqOtZ4kQrgjDdAbQColHQAAAIE"]
[Mon Mar 30 22:54:46.499661 2026] [:error] [pid 63557:tid 63571] [client 20.91.215.64:39820] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gg.php"] [unique_id "acqOtq4QNVlzYgEvIjmq_wAAAQw"]
[Mon Mar 30 22:54:47.131568 2026] [:error] [pid 63557:tid 63569] [client 20.91.215.64:39900] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gg.php"] [unique_id "acqOt64QNVlzYgEvIjmrBQAAAQo"]
[Mon Mar 30 22:54:47.782313 2026] [:error] [pid 60747:tid 60821] [client 20.91.215.64:39891] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ha.php"] [unique_id "acqOtwU3IY-cCpy_-zE-AgAAANI"]
[Mon Mar 30 22:54:48.320754 2026] [proxy_fcgi:error] [pid 60835:tid 60849] [client 20.91.215.64:39895] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 22:54:48.586156 2026] [proxy_fcgi:error] [pid 60835:tid 60844] [client 20.91.215.64:39895] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 22:54:48.854906 2026] [proxy_fcgi:error] [pid 60835:tid 60839] [client 20.91.215.64:39895] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 22:54:49.120326 2026] [proxy_fcgi:error] [pid 60835:tid 60861] [client 20.91.215.64:39895] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 22:54:49.386114 2026] [proxy_fcgi:error] [pid 60835:tid 60846] [client 20.91.215.64:39895] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 22:54:49.651680 2026] [proxy_fcgi:error] [pid 60835:tid 60859] [client 20.91.215.64:39895] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 22:54:49.980488 2026] [proxy_fcgi:error] [pid 60835:tid 60837] [client 20.91.215.64:39895] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 22:54:50.247561 2026] [proxy_fcgi:error] [pid 60835:tid 60845] [client 20.91.215.64:39895] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 22:54:50.513835 2026] [proxy_fcgi:error] [pid 60835:tid 60850] [client 20.91.215.64:39895] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 22:54:51.102030 2026] [proxy_fcgi:error] [pid 60835:tid 60852] [client 20.91.215.64:39895] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 22:54:51.366461 2026] [:error] [pid 60835:tid 60838] [client 20.91.215.64:39895] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/no18.php"] [unique_id "acqOuwIOJ4Lc0iJVRzzsAgAAAAE"]
[Mon Mar 30 22:54:51.904153 2026] [:error] [pid 60835:tid 60854] [client 20.91.215.64:38750] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/no18.php"] [unique_id "acqOuwIOJ4Lc0iJVRzzsAwAAABE"]
[Mon Mar 30 22:54:52.439930 2026] [:error] [pid 60835:tid 60843] [client 20.91.215.64:39171] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/no18.php"] [unique_id "acqOvAIOJ4Lc0iJVRzzsBQAAAAY"]
[Mon Mar 30 22:54:52.970631 2026] [:error] [pid 60835:tid 60837] [client 20.91.215.64:39291] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/no18.php"] [unique_id "acqOvAIOJ4Lc0iJVRzzsCAAAAAA"]
[Mon Mar 30 22:54:53.518032 2026] [:error] [pid 63557:tid 63579] [client 20.91.215.64:39859] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/torsa.php"] [unique_id "acqOva4QNVlzYgEvIjmrFwAAARQ"]
[Mon Mar 30 22:54:54.144238 2026] [:error] [pid 60747:tid 60820] [client 20.91.215.64:39231] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/torsa.php"] [unique_id "acqOvgU3IY-cCpy_-zE-DwAAANE"]
[Mon Mar 30 22:54:54.722176 2026] [:error] [pid 60747:tid 60822] [client 20.91.215.64:39173] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/torsa.php"] [unique_id "acqOvgU3IY-cCpy_-zE-EgAAANM"]
[Mon Mar 30 22:54:55.304334 2026] [:error] [pid 60835:tid 60839] [client 20.91.215.64:39886] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/torsa.php"] [unique_id "acqOvwIOJ4Lc0iJVRzzsEQAAAAI"]
[Mon Mar 30 22:54:55.839954 2026] [:error] [pid 63557:tid 63565] [client 20.91.215.64:39209] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/north1.php"] [unique_id "acqOv64QNVlzYgEvIjmrGgAAAQY"]
[Mon Mar 30 22:54:56.364436 2026] [:error] [pid 60835:tid 60837] [client 20.91.215.64:39817] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/north1.php"] [unique_id "acqOwAIOJ4Lc0iJVRzzsFQAAAAA"]
[Mon Mar 30 22:54:56.912892 2026] [:error] [pid 63557:tid 63579] [client 20.91.215.64:35397] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/north1.php"] [unique_id "acqOwK4QNVlzYgEvIjmrIQAAARQ"]
[Mon Mar 30 22:54:57.460760 2026] [:error] [pid 63557:tid 63570] [client 20.91.215.64:39254] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/north1.php"] [unique_id "acqOwa4QNVlzYgEvIjmrJQAAAQs"]
[Mon Mar 30 22:54:58.016384 2026] [:error] [pid 63557:tid 63575] [client 20.91.215.64:39250] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fine.php"] [unique_id "acqOwq4QNVlzYgEvIjmrKAAAARA"]
[Mon Mar 30 22:54:58.542298 2026] [:error] [pid 63557:tid 63580] [client 20.91.215.64:39904] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fine.php"] [unique_id "acqOwq4QNVlzYgEvIjmrLAAAARU"]
[Mon Mar 30 22:54:59.126782 2026] [:error] [pid 63557:tid 63573] [client 20.91.215.64:39185] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fine.php"] [unique_id "acqOw64QNVlzYgEvIjmrMgAAAQ4"]
[Mon Mar 30 22:54:59.740386 2026] [:error] [pid 63557:tid 63563] [client 20.91.215.64:39843] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fine.php"] [unique_id "acqOw64QNVlzYgEvIjmrOgAAAQQ"]
[Mon Mar 30 22:55:00.268591 2026] [:error] [pid 63557:tid 63583] [client 20.91.215.64:39201] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zample.php"] [unique_id "acqOxK4QNVlzYgEvIjmrPwAAARg"]
[Mon Mar 30 22:55:00.827283 2026] [:error] [pid 60835:tid 60852] [client 20.91.215.64:39196] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zample.php"] [unique_id "acqOxAIOJ4Lc0iJVRzzsHQAAAA8"]
[Mon Mar 30 22:55:01.379775 2026] [:error] [pid 60746:tid 60797] [client 20.91.215.64:36055] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zample.php"] [unique_id "acqOxZ4kQrgjDdAbQColLgAAAJU"]
[Mon Mar 30 22:55:01.912979 2026] [:error] [pid 60835:tid 60857] [client 20.91.215.64:38776] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zample.php"] [unique_id "acqOxQIOJ4Lc0iJVRzzsIwAAABQ"]
[Mon Mar 30 22:55:02.445437 2026] [:error] [pid 60835:tid 60858] [client 20.91.215.64:38768] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/read.php"] [unique_id "acqOxgIOJ4Lc0iJVRzzsJQAAABU"]
[Mon Mar 30 22:55:02.976179 2026] [:error] [pid 63557:tid 63580] [client 20.91.215.64:39920] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/read.php"] [unique_id "acqOxq4QNVlzYgEvIjmrSQAAARU"]
[Mon Mar 30 22:55:03.640931 2026] [:error] [pid 63557:tid 63578] [client 20.91.215.64:38749] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/read.php"] [unique_id "acqOx64QNVlzYgEvIjmrTAAAARM"]
[Mon Mar 30 22:55:04.176551 2026] [:error] [pid 60835:tid 60840] [client 20.91.215.64:36057] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/read.php"] [unique_id "acqOyAIOJ4Lc0iJVRzzsLQAAAAM"]
[Mon Mar 30 22:55:04.724438 2026] [:error] [pid 60835:tid 60853] [client 20.91.215.64:36610] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-kd4xalrg7m.php"] [unique_id "acqOyAIOJ4Lc0iJVRzzsMAAAABA"]
[Mon Mar 30 22:55:05.266059 2026] [:error] [pid 60835:tid 60859] [client 20.91.215.64:39861] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-kd4xalrg7m.php"] [unique_id "acqOyQIOJ4Lc0iJVRzzsNAAAABY"]
[Mon Mar 30 22:55:05.792287 2026] [:error] [pid 60746:tid 60776] [client 20.91.215.64:39866] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-kd4xalrg7m.php"] [unique_id "acqOyZ4kQrgjDdAbQColNgAAAIA"]
[Mon Mar 30 22:55:06.319390 2026] [:error] [pid 60747:tid 60804] [client 20.91.215.64:39815] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-kd4xalrg7m.php"] [unique_id "acqOygU3IY-cCpy_-zE-GAAAAME"]
[Mon Mar 30 22:55:06.885530 2026] [:error] [pid 60835:tid 60853] [client 20.91.215.64:39905] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hplfuns.php"] [unique_id "acqOygIOJ4Lc0iJVRzzsOwAAABA"]
[Mon Mar 30 22:55:07.410761 2026] [:error] [pid 60747:tid 60814] [client 20.91.215.64:38725] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hplfuns.php"] [unique_id "acqOywU3IY-cCpy_-zE-HQAAAMs"]
[Mon Mar 30 22:55:07.936717 2026] [:error] [pid 60835:tid 60859] [client 20.91.215.64:39280] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hplfuns.php"] [unique_id "acqOywIOJ4Lc0iJVRzzsQAAAABY"]
[Mon Mar 30 22:55:08.462018 2026] [:error] [pid 63557:tid 63561] [client 20.91.215.64:39184] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hplfuns.php"] [unique_id "acqOzK4QNVlzYgEvIjmrUgAAAQI"]
[Mon Mar 30 22:55:08.989919 2026] [:error] [pid 60746:tid 60791] [client 20.91.215.64:35455] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-mter.php"] [unique_id "acqOzJ4kQrgjDdAbQColOgAAAI8"]
[Mon Mar 30 22:55:09.553252 2026] [:error] [pid 60747:tid 60811] [client 20.91.215.64:39892] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-mter.php"] [unique_id "acqOzQU3IY-cCpy_-zE-IwAAAMg"]
[Mon Mar 30 22:55:10.083529 2026] [:error] [pid 63557:tid 63560] [client 20.91.215.64:38723] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-mter.php"] [unique_id "acqOzq4QNVlzYgEvIjmrVgAAAQE"]
[Mon Mar 30 22:55:10.610472 2026] [:error] [pid 60747:tid 60815] [client 20.91.215.64:39857] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-mter.php"] [unique_id "acqOzgU3IY-cCpy_-zE-KAAAAMw"]
[Mon Mar 30 22:55:11.136976 2026] [:error] [pid 60835:tid 60858] [client 20.91.215.64:39862] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/inege.php"] [unique_id "acqOzwIOJ4Lc0iJVRzzsSAAAABU"]
[Mon Mar 30 22:55:11.763888 2026] [:error] [pid 60835:tid 60845] [client 20.91.215.64:39915] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/inege.php"] [unique_id "acqOzwIOJ4Lc0iJVRzzsTAAAAAg"]
[Mon Mar 30 22:55:12.289388 2026] [:error] [pid 63557:tid 63560] [client 20.91.215.64:39288] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/inege.php"] [unique_id "acqO0K4QNVlzYgEvIjmrYAAAAQE"]
[Mon Mar 30 22:55:12.819952 2026] [:error] [pid 60747:tid 60825] [client 20.91.215.64:39832] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/inege.php"] [unique_id "acqO0AU3IY-cCpy_-zE-LAAAANY"]
[Mon Mar 30 22:55:13.353169 2026] [:error] [pid 60747:tid 60809] [client 20.91.215.64:39842] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fe5.php"] [unique_id "acqO0QU3IY-cCpy_-zE-LQAAAMY"]
[Mon Mar 30 22:55:13.887453 2026] [:error] [pid 63557:tid 63567] [client 20.91.215.64:39284] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fe5.php"] [unique_id "acqO0a4QNVlzYgEvIjmrbQAAAQg"]
[Mon Mar 30 22:55:14.421956 2026] [:error] [pid 60747:tid 60814] [client 20.91.215.64:40583] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fe5.php"] [unique_id "acqO0gU3IY-cCpy_-zE-QwAAAMs"]
[Mon Mar 30 22:55:14.954542 2026] [:error] [pid 60745:tid 60761] [client 20.91.215.64:40690] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fe5.php"] [unique_id "acqO0iQDBn75QnHaPb9IiwAAAEw"]
[Mon Mar 30 22:55:15.502567 2026] [:error] [pid 63557:tid 63573] [client 20.91.215.64:39263] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/uuu.php"] [unique_id "acqO064QNVlzYgEvIjmreQAAAQ4"]
[Mon Mar 30 22:55:16.039602 2026] [:error] [pid 63557:tid 63581] [client 20.91.215.64:39170] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/uuu.php"] [unique_id "acqO1K4QNVlzYgEvIjmregAAARY"]
[Mon Mar 30 22:55:16.566704 2026] [:error] [pid 60835:tid 60859] [client 20.91.215.64:39177] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/uuu.php"] [unique_id "acqO1AIOJ4Lc0iJVRzzsVwAAABY"]
[Mon Mar 30 22:55:17.121717 2026] [:error] [pid 63557:tid 63570] [client 20.91.215.64:40698] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/uuu.php"] [unique_id "acqO1a4QNVlzYgEvIjmrgwAAAQs"]
[Mon Mar 30 22:55:17.647089 2026] [:error] [pid 60745:tid 60767] [client 20.91.215.64:40642] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/eee.php"] [unique_id "acqO1SQDBn75QnHaPb9IkAAAAFI"]
[Mon Mar 30 22:55:18.209277 2026] [:error] [pid 63557:tid 63581] [client 20.91.215.64:39816] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/eee.php"] [unique_id "acqO1q4QNVlzYgEvIjmriQAAARY"]
[Mon Mar 30 22:55:18.812343 2026] [:error] [pid 60745:tid 60764] [client 20.91.215.64:38090] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/eee.php"] [unique_id "acqO1iQDBn75QnHaPb9IlAAAAE8"]
[Mon Mar 30 22:55:19.362834 2026] [:error] [pid 60746:tid 60795] [client 20.91.215.64:40628] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/eee.php"] [unique_id "acqO154kQrgjDdAbQColXwAAAJM"]
[Mon Mar 30 22:55:19.889942 2026] [:error] [pid 60747:tid 60806] [client 20.91.215.64:39237] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/w2025.php"] [unique_id "acqO1wU3IY-cCpy_-zE-UwAAAMM"]
[Mon Mar 30 22:55:20.451193 2026] [:error] [pid 60747:tid 60816] [client 20.91.215.64:40657] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/w2025.php"] [unique_id "acqO2AU3IY-cCpy_-zE-VAAAAM0"]
[Mon Mar 30 22:55:20.984772 2026] [:error] [pid 63557:tid 63566] [client 20.91.215.64:39262] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/w2025.php"] [unique_id "acqO2K4QNVlzYgEvIjmrjgAAAQc"]
[Mon Mar 30 22:55:21.549552 2026] [:error] [pid 63557:tid 63565] [client 20.91.215.64:40680] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/w2025.php"] [unique_id "acqO2a4QNVlzYgEvIjmrkgAAAQY"]
[Mon Mar 30 22:55:22.078977 2026] [:error] [pid 60746:tid 60793] [client 20.91.215.64:39268] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/swallowable.php"] [unique_id "acqO2p4kQrgjDdAbQColZgAAAJE"]
[Mon Mar 30 22:55:22.617090 2026] [:error] [pid 63557:tid 63582] [client 20.91.215.64:40629] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/swallowable.php"] [unique_id "acqO2q4QNVlzYgEvIjmrlwAAARc"]
[Mon Mar 30 22:55:23.239039 2026] [:error] [pid 63557:tid 63562] [client 20.91.215.64:39877] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/swallowable.php"] [unique_id "acqO264QNVlzYgEvIjmrmQAAAQM"]
[Mon Mar 30 22:55:23.779513 2026] [:error] [pid 60747:tid 60817] [client 20.91.215.64:39837] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/swallowable.php"] [unique_id "acqO2wU3IY-cCpy_-zE-XQAAAM4"]
[Mon Mar 30 22:55:24.308181 2026] [:error] [pid 60746:tid 60776] [client 20.91.215.64:40663] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fvvff.php"] [unique_id "acqO3J4kQrgjDdAbQColaQAAAIA"]
[Mon Mar 30 22:55:24.849154 2026] [:error] [pid 60747:tid 60816] [client 20.91.215.64:36719] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fvvff.php"] [unique_id "acqO3AU3IY-cCpy_-zE-XwAAAM0"]
[Mon Mar 30 22:55:25.434900 2026] [:error] [pid 60745:tid 60751] [client 20.91.215.64:39899] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fvvff.php"] [unique_id "acqO3SQDBn75QnHaPb9ImgAAAEI"]
[Mon Mar 30 22:55:25.965747 2026] [:error] [pid 63557:tid 63580] [client 20.91.215.64:39823] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fvvff.php"] [unique_id "acqO3a4QNVlzYgEvIjmrogAAARU"]
[Mon Mar 30 22:55:26.495099 2026] [:error] [pid 60746:tid 60796] [client 20.91.215.64:39811] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "acqO3p4kQrgjDdAbQColbgAAAJQ"]
[Mon Mar 30 22:55:27.020309 2026] [:error] [pid 60746:tid 60777] [client 20.91.215.64:40630] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "acqO354kQrgjDdAbQColcwAAAIE"]
[Mon Mar 30 22:55:27.544475 2026] [:error] [pid 63557:tid 63572] [client 20.91.215.64:39909] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "acqO364QNVlzYgEvIjmrqwAAAQ0"]
[Mon Mar 30 22:55:28.097935 2026] [:error] [pid 60746:tid 60792] [client 20.91.215.64:39865] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "acqO4J4kQrgjDdAbQColeAAAAJA"]
[Mon Mar 30 22:55:28.636302 2026] [:error] [pid 60746:tid 60800] [client 20.91.215.64:39836] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/66.php"] [unique_id "acqO4J4kQrgjDdAbQColewAAAJg"]
[Mon Mar 30 22:55:29.200791 2026] [:error] [pid 60745:tid 60768] [client 20.91.215.64:40614] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/66.php"] [unique_id "acqO4SQDBn75QnHaPb9IpgAAAFM"]
[Mon Mar 30 22:55:29.729110 2026] [:error] [pid 60835:tid 60845] [client 20.91.215.64:40691] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/66.php"] [unique_id "acqO4QIOJ4Lc0iJVRzzsYAAAAAg"]
[Mon Mar 30 22:55:30.333661 2026] [:error] [pid 63557:tid 63562] [client 20.91.215.64:36642] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/66.php"] [unique_id "acqO4q4QNVlzYgEvIjmrtgAAAQM"]
[Mon Mar 30 22:55:30.866272 2026] [:error] [pid 63557:tid 63576] [client 20.91.215.64:40697] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a5.php"] [unique_id "acqO4q4QNVlzYgEvIjmruQAAARE"]
[Mon Mar 30 22:55:31.392733 2026] [:error] [pid 63557:tid 63565] [client 20.91.215.64:40689] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a5.php"] [unique_id "acqO464QNVlzYgEvIjmrvAAAAQY"]
[Mon Mar 30 22:55:31.959799 2026] [:error] [pid 63557:tid 63577] [client 20.91.215.64:40660] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a5.php"] [unique_id "acqO464QNVlzYgEvIjmrwAAAARI"]
[Mon Mar 30 22:55:32.522895 2026] [:error] [pid 63557:tid 63565] [client 20.91.215.64:40624] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a5.php"] [unique_id "acqO5K4QNVlzYgEvIjmryAAAAQY"]
[Mon Mar 30 22:55:33.057318 2026] [:error] [pid 60746:tid 60778] [client 20.91.215.64:38668] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ol.php"] [unique_id "acqO5Z4kQrgjDdAbQColggAAAII"]
[Mon Mar 30 22:55:33.608445 2026] [:error] [pid 60746:tid 60791] [client 20.91.215.64:39265] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ol.php"] [unique_id "acqO5Z4kQrgjDdAbQColhAAAAI8"]
[Mon Mar 30 22:55:34.141558 2026] [:error] [pid 60835:tid 60860] [client 20.91.215.64:39257] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ol.php"] [unique_id "acqO5gIOJ4Lc0iJVRzzsZAAAABc"]
[Mon Mar 30 22:55:34.680635 2026] [:error] [pid 63557:tid 63575] [client 20.91.215.64:39240] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ol.php"] [unique_id "acqO5q4QNVlzYgEvIjmr2AAAARA"]
[Mon Mar 30 22:55:35.235708 2026] [:error] [pid 60747:tid 60814] [client 20.91.215.64:40643] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f6.php"] [unique_id "acqO5wU3IY-cCpy_-zE-aQAAAMs"]
[Mon Mar 30 22:55:35.781069 2026] [:error] [pid 60835:tid 60852] [client 20.91.215.64:40634] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f6.php"] [unique_id "acqO5wIOJ4Lc0iJVRzzsZwAAAA8"]
[Mon Mar 30 22:55:36.316213 2026] [:error] [pid 63557:tid 63575] [client 20.91.215.64:39232] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f6.php"] [unique_id "acqO6K4QNVlzYgEvIjmr5AAAARA"]
[Mon Mar 30 22:55:36.850136 2026] [:error] [pid 60745:tid 60758] [client 20.91.215.64:40585] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f6.php"] [unique_id "acqO6CQDBn75QnHaPb9IswAAAEk"]
[Mon Mar 30 22:55:37.389288 2026] [:error] [pid 63557:tid 63579] [client 20.91.215.64:40608] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/av.php"] [unique_id "acqO6a4QNVlzYgEvIjmr6QAAARQ"]
[Mon Mar 30 22:55:37.944245 2026] [:error] [pid 60747:tid 60806] [client 20.91.215.64:40601] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/av.php"] [unique_id "acqO6QU3IY-cCpy_-zE-bAAAAMM"]
[Mon Mar 30 22:55:38.475213 2026] [:error] [pid 60746:tid 60776] [client 20.91.215.64:39819] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/av.php"] [unique_id "acqO6p4kQrgjDdAbQColjAAAAIA"]
[Mon Mar 30 22:55:39.027539 2026] [:error] [pid 63557:tid 63580] [client 20.91.215.64:39880] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/av.php"] [unique_id "acqO664QNVlzYgEvIjmr8QAAARU"]
[Mon Mar 30 22:55:39.588825 2026] [:error] [pid 60745:tid 60759] [client 20.91.215.64:40688] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "acqO6yQDBn75QnHaPb9IvQAAAEo"]
[Mon Mar 30 22:55:40.136538 2026] [:error] [pid 60746:tid 60795] [client 20.91.215.64:37317] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "acqO7J4kQrgjDdAbQColjQAAAJM"]
[Mon Mar 30 22:55:40.839252 2026] [:error] [pid 60835:tid 60841] [client 20.91.215.64:39818] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "acqO7AIOJ4Lc0iJVRzzsagAAAAQ"]
[Mon Mar 30 22:55:41.405639 2026] [:error] [pid 60835:tid 60854] [client 20.91.215.64:40632] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "acqO7QIOJ4Lc0iJVRzzsbAAAABE"]
[Mon Mar 30 22:55:42.024219 2026] [:error] [pid 60835:tid 60840] [client 20.91.215.64:40637] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-act.php"] [unique_id "acqO7gIOJ4Lc0iJVRzzsbwAAAAM"]
[Mon Mar 30 22:55:42.614169 2026] [:error] [pid 60746:tid 60799] [client 20.91.215.64:39923] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-act.php"] [unique_id "acqO7p4kQrgjDdAbQColkQAAAJc"]
[Mon Mar 30 22:55:43.153689 2026] [:error] [pid 63557:tid 63566] [client 20.91.215.64:39841] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-act.php"] [unique_id "acqO764QNVlzYgEvIjmr_gAAAQc"]
[Mon Mar 30 22:55:43.768166 2026] [:error] [pid 60835:tid 60844] [client 20.91.215.64:40602] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-act.php"] [unique_id "acqO7wIOJ4Lc0iJVRzzseQAAAAc"]
[Mon Mar 30 22:55:44.345065 2026] [:error] [pid 60835:tid 60856] [client 20.91.215.64:39928] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/classwithtostring.php"] [unique_id "acqO8AIOJ4Lc0iJVRzzsfAAAABM"]
[Mon Mar 30 22:55:44.881298 2026] [:error] [pid 60835:tid 60837] [client 20.91.215.64:40701] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/classwithtostring.php"] [unique_id "acqO8AIOJ4Lc0iJVRzzsfgAAAAA"]
[Mon Mar 30 22:55:45.422598 2026] [:error] [pid 63557:tid 63577] [client 20.91.215.64:39907] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/classwithtostring.php"] [unique_id "acqO8a4QNVlzYgEvIjmsBAAAARI"]
[Mon Mar 30 22:55:45.990765 2026] [:error] [pid 60745:tid 60762] [client 20.91.215.64:41266] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/classwithtostring.php"] [unique_id "acqO8SQDBn75QnHaPb9IxAAAAE0"]
[Mon Mar 30 22:55:46.523891 2026] [:error] [pid 60746:tid 60790] [client 20.91.215.64:40640] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "acqO8p4kQrgjDdAbQCollgAAAI4"]
[Mon Mar 30 22:55:47.069842 2026] [:error] [pid 60746:tid 60776] [client 20.91.215.64:35336] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "acqO854kQrgjDdAbQCollwAAAIA"]
[Mon Mar 30 22:55:47.646830 2026] [:error] [pid 63557:tid 63579] [client 20.91.215.64:41220] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "acqO864QNVlzYgEvIjmsDQAAARQ"]
[Mon Mar 30 22:55:48.178404 2026] [:error] [pid 60835:tid 60846] [client 20.91.215.64:40586] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "acqO9AIOJ4Lc0iJVRzzsgwAAAAk"]
[Mon Mar 30 22:55:48.825213 2026] [:error] [pid 63557:tid 63578] [client 20.91.215.64:38714] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-michan.php"] [unique_id "acqO9K4QNVlzYgEvIjmsFgAAARM"]
[Mon Mar 30 22:55:49.357989 2026] [:error] [pid 63557:tid 63580] [client 20.91.215.64:41284] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-michan.php"] [unique_id "acqO9a4QNVlzYgEvIjmsGQAAARU"]
[Mon Mar 30 22:55:49.886775 2026] [:error] [pid 63557:tid 63582] [client 20.91.215.64:37342] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-michan.php"] [unique_id "acqO9a4QNVlzYgEvIjmsGwAAARc"]
[Mon Mar 30 22:55:50.430322 2026] [:error] [pid 60835:tid 60861] [client 20.91.215.64:41336] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-michan.php"] [unique_id "acqO9gIOJ4Lc0iJVRzzshgAAABg"]
[Mon Mar 30 22:55:51.335656 2026] [proxy_fcgi:error] [pid 63557:tid 63564] [client 20.91.215.64:41299] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 22:55:51.601142 2026] [proxy_fcgi:error] [pid 63557:tid 63563] [client 20.91.215.64:41299] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 22:55:51.866323 2026] [proxy_fcgi:error] [pid 63557:tid 63565] [client 20.91.215.64:41299] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 22:55:52.132758 2026] [proxy_fcgi:error] [pid 63557:tid 63574] [client 20.91.215.64:41299] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 22:55:52.398439 2026] [proxy_fcgi:error] [pid 63557:tid 63572] [client 20.91.215.64:41299] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 22:55:52.669152 2026] [proxy_fcgi:error] [pid 63557:tid 63568] [client 20.91.215.64:41299] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 22:55:52.946604 2026] [proxy_fcgi:error] [pid 63557:tid 63580] [client 20.91.215.64:41299] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 22:55:53.242778 2026] [proxy_fcgi:error] [pid 63557:tid 63560] [client 20.91.215.64:41299] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 22:55:53.530832 2026] [proxy_fcgi:error] [pid 63557:tid 63579] [client 20.91.215.64:41299] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 22:55:53.817415 2026] [proxy_fcgi:error] [pid 63557:tid 63562] [client 20.91.215.64:41299] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 22:55:54.107678 2026] [:error] [pid 63557:tid 63561] [client 20.91.215.64:41299] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/"] [unique_id "acqO-q4QNVlzYgEvIjmsLgAAAQI"]
[Mon Mar 30 22:55:54.661523 2026] [:error] [pid 63557:tid 63569] [client 20.91.215.64:41285] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/"] [unique_id "acqO-q4QNVlzYgEvIjmsMAAAAQo"]
[Mon Mar 30 22:55:55.191836 2026] [:error] [pid 63557:tid 63579] [client 20.91.215.64:40576] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/"] [unique_id "acqO-64QNVlzYgEvIjmsNQAAARQ"]
[Mon Mar 30 22:55:55.734161 2026] [:error] [pid 60745:tid 60765] [client 20.91.215.64:39254] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/"] [unique_id "acqO-yQDBn75QnHaPb9IyQAAAFA"]
[Mon Mar 30 22:55:56.327215 2026] [:error] [pid 60835:tid 60850] [client 20.91.215.64:40676] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin.php/admin.php"] [unique_id "acqO_AIOJ4Lc0iJVRzzsmgAAAA0"]
[Mon Mar 30 22:55:56.859045 2026] [:error] [pid 63557:tid 63572] [client 20.91.215.64:39249] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin.php/admin.php"] [unique_id "acqO_K4QNVlzYgEvIjmsQAAAAQ0"]
[Mon Mar 30 22:55:57.415292 2026] [:error] [pid 60747:tid 60811] [client 20.91.215.64:41269] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin.php/admin.php"] [unique_id "acqO_QU3IY-cCpy_-zE-fgAAAMg"]
[Mon Mar 30 22:55:57.960409 2026] [:error] [pid 60835:tid 60845] [client 20.91.215.64:40668] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin.php/admin.php"] [unique_id "acqO_QIOJ4Lc0iJVRzzsnAAAAAg"]
[Mon Mar 30 22:55:58.494039 2026] [:error] [pid 60835:tid 60861] [client 20.91.215.64:40617] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/19.php"] [unique_id "acqO_gIOJ4Lc0iJVRzzsnQAAABg"]
[Mon Mar 30 22:55:59.020094 2026] [:error] [pid 63557:tid 63569] [client 20.91.215.64:41308] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/19.php"] [unique_id "acqO_64QNVlzYgEvIjmsRQAAAQo"]
[Mon Mar 30 22:55:59.603367 2026] [:error] [pid 60835:tid 60855] [client 20.91.215.64:39913] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/19.php"] [unique_id "acqO_wIOJ4Lc0iJVRzzsowAAABI"]
[Mon Mar 30 22:56:00.175032 2026] [:error] [pid 60747:tid 60825] [client 20.91.215.64:41321] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/19.php"] [unique_id "acqPAAU3IY-cCpy_-zE-hAAAANY"]
[Mon Mar 30 22:56:00.727230 2026] [:error] [pid 63557:tid 63583] [client 20.91.215.64:40700] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/100.php"] [unique_id "acqPAK4QNVlzYgEvIjmsSQAAARg"]
[Mon Mar 30 22:56:01.255621 2026] [:error] [pid 60835:tid 60856] [client 20.91.215.64:40665] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/100.php"] [unique_id "acqPAQIOJ4Lc0iJVRzzsqQAAABM"]
[Mon Mar 30 22:56:01.798717 2026] [:error] [pid 63557:tid 63569] [client 20.91.215.64:40578] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/100.php"] [unique_id "acqPAa4QNVlzYgEvIjmsTQAAAQo"]
[Mon Mar 30 22:56:02.353487 2026] [:error] [pid 60835:tid 60846] [client 20.91.215.64:39921] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/100.php"] [unique_id "acqPAgIOJ4Lc0iJVRzzsqwAAAAk"]
[Mon Mar 30 22:56:02.881638 2026] [:error] [pid 60747:tid 60806] [client 20.91.215.64:40577] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aa2.php"] [unique_id "acqPAgU3IY-cCpy_-zE-iAAAAMM"]
[Mon Mar 30 22:56:03.408680 2026] [:error] [pid 63557:tid 63566] [client 20.91.215.64:39901] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aa2.php"] [unique_id "acqPA64QNVlzYgEvIjmsVwAAAQc"]
[Mon Mar 30 22:56:03.933495 2026] [:error] [pid 63557:tid 63572] [client 20.91.215.64:41325] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aa2.php"] [unique_id "acqPA64QNVlzYgEvIjmsXgAAAQ0"]
[Mon Mar 30 22:56:04.479467 2026] [:error] [pid 60745:tid 60762] [client 20.91.215.64:40638] [client 20.91.215.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aa2.php"] [unique_id "acqPBCQDBn75QnHaPb9I1QAAAE0"]
[Tue Mar 31 01:33:28.836210 2026] [:error] [pid 36939:tid 36950] [client 209.87.169.170:62091] [client 209.87.169.170] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/buttons.css"] [unique_id "acqz6MRDKH225Jeq1jdCYgAAAAk"]
[Tue Mar 31 04:29:17.230539 2026] [proxy_fcgi:error] [pid 18334:tid 18424] [client 98.71.65.172:50092] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 04:29:17.486644 2026] [proxy_fcgi:error] [pid 18334:tid 18429] [client 98.71.65.172:50092] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 04:29:17.741600 2026] [proxy_fcgi:error] [pid 18334:tid 18406] [client 98.71.65.172:50092] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 04:29:17.995143 2026] [proxy_fcgi:error] [pid 18334:tid 18407] [client 98.71.65.172:50092] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 04:29:18.248912 2026] [proxy_fcgi:error] [pid 18334:tid 18410] [client 98.71.65.172:50092] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 04:29:18.503342 2026] [proxy_fcgi:error] [pid 18334:tid 18412] [client 98.71.65.172:50092] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 04:29:18.756188 2026] [proxy_fcgi:error] [pid 18334:tid 18419] [client 98.71.65.172:50092] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 04:29:19.016734 2026] [proxy_fcgi:error] [pid 18334:tid 18413] [client 98.71.65.172:50092] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 04:29:19.270483 2026] [proxy_fcgi:error] [pid 18334:tid 18421] [client 98.71.65.172:50092] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 04:29:19.525014 2026] [proxy_fcgi:error] [pid 18334:tid 18423] [client 98.71.65.172:50092] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 04:29:19.774745 2026] [:error] [pid 18334:tid 18427] [client 98.71.65.172:50092] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-asudo.php"] [unique_id "acrdH3qQrXLbk1cg3mgkRgAAAJU"]
[Tue Mar 31 04:29:20.300378 2026] [:error] [pid 18439:tid 18460] [client 98.71.65.172:6527] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-asudo.php"] [unique_id "acrdIC-R9nOaA8Xqs7igiAAAAMk"]
[Tue Mar 31 04:29:20.807289 2026] [:error] [pid 18439:tid 18472] [client 98.71.65.172:6433] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-asudo.php"] [unique_id "acrdIC-R9nOaA8Xqs7igjAAAANU"]
[Tue Mar 31 04:29:21.307918 2026] [:error] [pid 18332:tid 18365] [client 98.71.65.172:6529] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-asudo.php"] [unique_id "acrdIb4KXr1F9raS5GSHkwAAABE"]
[Tue Mar 31 04:29:21.806065 2026] [:error] [pid 18333:tid 18383] [client 98.71.65.172:40209] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-temp.php"] [unique_id "acrdIUSx2C5hLR0-8dLOSgAAAEQ"]
[Tue Mar 31 04:29:22.301273 2026] [:error] [pid 18439:tid 18471] [client 98.71.65.172:6415] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-temp.php"] [unique_id "acrdIi-R9nOaA8Xqs7igkgAAANQ"]
[Tue Mar 31 04:29:22.801958 2026] [:error] [pid 18333:tid 18385] [client 98.71.65.172:6457] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-temp.php"] [unique_id "acrdIkSx2C5hLR0-8dLOSwAAAEY"]
[Tue Mar 31 04:29:23.300109 2026] [:error] [pid 18333:tid 18398] [client 98.71.65.172:7145] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-temp.php"] [unique_id "acrdI0Sx2C5hLR0-8dLOTwAAAFM"]
[Tue Mar 31 04:29:23.832358 2026] [:error] [pid 18333:tid 18390] [client 98.71.65.172:6402] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-moonka.php"] [unique_id "acrdI0Sx2C5hLR0-8dLOUwAAAEs"]
[Tue Mar 31 04:29:24.337938 2026] [:error] [pid 18332:tid 18350] [client 98.71.65.172:50089] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-moonka.php"] [unique_id "acrdJL4KXr1F9raS5GSHlQAAAAI"]
[Tue Mar 31 04:29:24.832935 2026] [:error] [pid 18333:tid 18395] [client 98.71.65.172:40203] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-moonka.php"] [unique_id "acrdJESx2C5hLR0-8dLOWwAAAFA"]
[Tue Mar 31 04:29:25.330718 2026] [:error] [pid 18439:tid 18462] [client 98.71.65.172:56239] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-moonka.php"] [unique_id "acrdJS-R9nOaA8Xqs7igmQAAAMs"]
[Tue Mar 31 04:29:25.832901 2026] [:error] [pid 18334:tid 18425] [client 98.71.65.172:7107] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/CDX2.php"] [unique_id "acrdJXqQrXLbk1cg3mgkUAAAAJM"]
[Tue Mar 31 04:29:26.333043 2026] [:error] [pid 18334:tid 18429] [client 98.71.65.172:7124] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/CDX2.php"] [unique_id "acrdJnqQrXLbk1cg3mgkUgAAAJc"]
[Tue Mar 31 04:29:26.833425 2026] [:error] [pid 18439:tid 18459] [client 98.71.65.172:50066] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/CDX2.php"] [unique_id "acrdJi-R9nOaA8Xqs7igngAAAMg"]
[Tue Mar 31 04:29:27.329862 2026] [:error] [pid 18333:tid 18387] [client 98.71.65.172:6591] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/CDX2.php"] [unique_id "acrdJ0Sx2C5hLR0-8dLOiQAAAEg"]
[Tue Mar 31 04:29:27.843505 2026] [:error] [pid 18333:tid 18390] [client 98.71.65.172:52083] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/CDX1.php"] [unique_id "acrdJ0Sx2C5hLR0-8dLOlgAAAEs"]
[Tue Mar 31 04:29:28.343920 2026] [:error] [pid 18439:tid 18460] [client 98.71.65.172:6502] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/CDX1.php"] [unique_id "acrdKC-R9nOaA8Xqs7igpwAAAMk"]
[Tue Mar 31 04:29:28.858522 2026] [:error] [pid 18439:tid 18468] [client 98.71.65.172:50077] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/CDX1.php"] [unique_id "acrdKC-R9nOaA8Xqs7igqgAAANE"]
[Tue Mar 31 04:29:29.356755 2026] [:error] [pid 18334:tid 18414] [client 98.71.65.172:56243] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/CDX1.php"] [unique_id "acrdKXqQrXLbk1cg3mgkVwAAAIg"]
[Tue Mar 31 04:29:29.859594 2026] [:error] [pid 18334:tid 18425] [client 98.71.65.172:7123] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/000.php"] [unique_id "acrdKXqQrXLbk1cg3mgkWwAAAJM"]
[Tue Mar 31 04:29:30.361022 2026] [:error] [pid 18332:tid 18360] [client 98.71.65.172:40240] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/000.php"] [unique_id "acrdKr4KXr1F9raS5GSH8wAAAAw"]
[Tue Mar 31 04:29:30.884204 2026] [:error] [pid 18334:tid 18428] [client 98.71.65.172:56196] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/000.php"] [unique_id "acrdKnqQrXLbk1cg3mgkXgAAAJY"]
[Tue Mar 31 04:29:31.385648 2026] [:error] [pid 18333:tid 18395] [client 98.71.65.172:56234] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/000.php"] [unique_id "acrdK0Sx2C5hLR0-8dLOyAAAAFA"]
[Tue Mar 31 04:29:31.899728 2026] [:error] [pid 18333:tid 18393] [client 98.71.65.172:52035] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zlnckdxn.php"] [unique_id "acrdK0Sx2C5hLR0-8dLOzAAAAE4"]
[Tue Mar 31 04:29:32.396490 2026] [:error] [pid 18332:tid 18359] [client 98.71.65.172:6414] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zlnckdxn.php"] [unique_id "acrdLL4KXr1F9raS5GSIAQAAAAs"]
[Tue Mar 31 04:29:32.919437 2026] [:error] [pid 18334:tid 18430] [client 98.71.65.172:6494] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zlnckdxn.php"] [unique_id "acrdLHqQrXLbk1cg3mgkZQAAAJg"]
[Tue Mar 31 04:29:33.430109 2026] [:error] [pid 18439:tid 18464] [client 98.71.65.172:56217] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zlnckdxn.php"] [unique_id "acrdLS-R9nOaA8Xqs7igtgAAAM0"]
[Tue Mar 31 04:29:33.933544 2026] [:error] [pid 18333:tid 18402] [client 98.71.65.172:52043] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-thi.php"] [unique_id "acrdLUSx2C5hLR0-8dLOzQAAAFc"]
[Tue Mar 31 04:29:34.433182 2026] [:error] [pid 18333:tid 18384] [client 98.71.65.172:52060] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-thi.php"] [unique_id "acrdLkSx2C5hLR0-8dLOzwAAAEU"]
[Tue Mar 31 04:29:34.949588 2026] [:error] [pid 18333:tid 18395] [client 98.71.65.172:40204] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-thi.php"] [unique_id "acrdLkSx2C5hLR0-8dLO1gAAAFA"]
[Tue Mar 31 04:29:35.476815 2026] [:error] [pid 18439:tid 18458] [client 98.71.65.172:56225] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-thi.php"] [unique_id "acrdLy-R9nOaA8Xqs7igvgAAAMc"]
[Tue Mar 31 04:29:36.010765 2026] [:error] [pid 18334:tid 18423] [client 98.71.65.172:7134] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/press.php"] [unique_id "acrdMHqQrXLbk1cg3mgkfwAAAJE"]
[Tue Mar 31 04:29:36.510338 2026] [:error] [pid 18333:tid 18391] [client 98.71.65.172:6463] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/press.php"] [unique_id "acrdMESx2C5hLR0-8dLO7AAAAEw"]
[Tue Mar 31 04:29:37.007353 2026] [:error] [pid 18439:tid 18463] [client 98.71.65.172:40236] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/press.php"] [unique_id "acrdMS-R9nOaA8Xqs7igxgAAAMw"]
[Tue Mar 31 04:29:37.508791 2026] [:error] [pid 18334:tid 18411] [client 98.71.65.172:7125] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/press.php"] [unique_id "acrdMXqQrXLbk1cg3mgkoAAAAIU"]
[Tue Mar 31 04:29:38.005720 2026] [:error] [pid 18332:tid 18371] [client 98.71.65.172:6383] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aa.php"] [unique_id "acrdMr4KXr1F9raS5GSIBgAAABY"]
[Tue Mar 31 04:29:38.511617 2026] [:error] [pid 18333:tid 18380] [client 98.71.65.172:7122] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aa.php"] [unique_id "acrdMkSx2C5hLR0-8dLPAwAAAEE"]
[Tue Mar 31 04:29:39.054447 2026] [:error] [pid 18333:tid 18379] [client 98.71.65.172:6516] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aa.php"] [unique_id "acrdM0Sx2C5hLR0-8dLPCgAAAEA"]
[Tue Mar 31 04:29:39.549618 2026] [:error] [pid 18334:tid 18415] [client 98.71.65.172:7108] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aa.php"] [unique_id "acrdM3qQrXLbk1cg3mgkyAAAAIk"]
[Tue Mar 31 04:29:40.093829 2026] [:error] [pid 18334:tid 18424] [client 98.71.65.172:6370] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Geforce.php"] [unique_id "acrdNHqQrXLbk1cg3mgk0wAAAJI"]
[Tue Mar 31 04:29:40.623604 2026] [:error] [pid 18334:tid 18408] [client 98.71.65.172:6429] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Geforce.php"] [unique_id "acrdNHqQrXLbk1cg3mgk3QAAAII"]
[Tue Mar 31 04:29:41.128180 2026] [:error] [pid 18334:tid 18411] [client 98.71.65.172:6397] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Geforce.php"] [unique_id "acrdNXqQrXLbk1cg3mgk6gAAAIU"]
[Tue Mar 31 04:29:41.625535 2026] [:error] [pid 18333:tid 18393] [client 98.71.65.172:40241] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Geforce.php"] [unique_id "acrdNUSx2C5hLR0-8dLPIwAAAE4"]
[Tue Mar 31 04:29:42.131501 2026] [:error] [pid 18439:tid 18453] [client 98.71.65.172:40255] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jlex.php"] [unique_id "acrdNi-R9nOaA8Xqs7ig1gAAAMI"]
[Tue Mar 31 04:29:42.632608 2026] [:error] [pid 18439:tid 18473] [client 98.71.65.172:6343] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jlex.php"] [unique_id "acrdNi-R9nOaA8Xqs7ig1wAAANY"]
[Tue Mar 31 04:29:43.147205 2026] [:error] [pid 18439:tid 18462] [client 98.71.65.172:52054] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jlex.php"] [unique_id "acrdNy-R9nOaA8Xqs7ig2QAAAMs"]
[Tue Mar 31 04:29:43.652732 2026] [:error] [pid 18334:tid 18414] [client 98.71.65.172:7163] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jlex.php"] [unique_id "acrdN3qQrXLbk1cg3mglAQAAAIg"]
[Tue Mar 31 04:29:44.166789 2026] [:error] [pid 18332:tid 18365] [client 98.71.65.172:6535] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dichku.php"] [unique_id "acrdOL4KXr1F9raS5GSIEgAAABE"]
[Tue Mar 31 04:29:44.686786 2026] [:error] [pid 18332:tid 18368] [client 98.71.65.172:40206] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dichku.php"] [unique_id "acrdOL4KXr1F9raS5GSIFgAAABQ"]
[Tue Mar 31 04:29:45.192587 2026] [:error] [pid 18439:tid 18453] [client 98.71.65.172:40195] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dichku.php"] [unique_id "acrdOS-R9nOaA8Xqs7ig3QAAAMI"]
[Tue Mar 31 04:29:45.692931 2026] [:error] [pid 18439:tid 18473] [client 98.71.65.172:56242] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dichku.php"] [unique_id "acrdOS-R9nOaA8Xqs7ig3wAAANY"]
[Tue Mar 31 04:29:46.192788 2026] [:error] [pid 18439:tid 18457] [client 98.71.65.172:6522] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/t00l.php"] [unique_id "acrdOi-R9nOaA8Xqs7ig5gAAAMY"]
[Tue Mar 31 04:29:46.689217 2026] [:error] [pid 18439:tid 18473] [client 98.71.65.172:56248] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/t00l.php"] [unique_id "acrdOi-R9nOaA8Xqs7ig6wAAANY"]
[Tue Mar 31 04:29:47.217215 2026] [:error] [pid 18332:tid 18358] [client 98.71.65.172:40243] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/t00l.php"] [unique_id "acrdO74KXr1F9raS5GSIGAAAAAo"]
[Tue Mar 31 04:29:47.720543 2026] [:error] [pid 18332:tid 18366] [client 98.71.65.172:40214] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/t00l.php"] [unique_id "acrdO74KXr1F9raS5GSIGwAAABI"]
[Tue Mar 31 04:29:48.229360 2026] [:error] [pid 18439:tid 18457] [client 98.71.65.172:6405] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vvedr.php"] [unique_id "acrdPC-R9nOaA8Xqs7ig8gAAAMY"]
[Tue Mar 31 04:29:48.759042 2026] [:error] [pid 18439:tid 18467] [client 98.71.65.172:6507] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vvedr.php"] [unique_id "acrdPC-R9nOaA8Xqs7ig8wAAANA"]
[Tue Mar 31 04:29:49.267605 2026] [:error] [pid 18439:tid 18461] [client 98.71.65.172:6543] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vvedr.php"] [unique_id "acrdPS-R9nOaA8Xqs7ig-AAAAMo"]
[Tue Mar 31 04:29:49.762538 2026] [:error] [pid 18333:tid 18379] [client 98.71.65.172:6486] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vvedr.php"] [unique_id "acrdPUSx2C5hLR0-8dLPNgAAAEA"]
[Tue Mar 31 04:29:50.284023 2026] [:error] [pid 18334:tid 18417] [client 98.71.65.172:6453] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2.php"] [unique_id "acrdPnqQrXLbk1cg3mglJAAAAIs"]
[Tue Mar 31 04:29:50.785436 2026] [:error] [pid 18334:tid 18427] [client 98.71.65.172:6411] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2.php"] [unique_id "acrdPnqQrXLbk1cg3mglKQAAAJU"]
[Tue Mar 31 04:29:51.287876 2026] [:error] [pid 18439:tid 18474] [client 98.71.65.172:6532] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2.php"] [unique_id "acrdPy-R9nOaA8Xqs7ig_wAAANc"]
[Tue Mar 31 04:29:51.803693 2026] [:error] [pid 18334:tid 18430] [client 98.71.65.172:52032] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2.php"] [unique_id "acrdP3qQrXLbk1cg3mglNAAAAJg"]
[Tue Mar 31 04:29:52.308342 2026] [:error] [pid 18439:tid 18453] [client 98.71.65.172:52069] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gptsh.php"] [unique_id "acrdQC-R9nOaA8Xqs7ihAgAAAMI"]
[Tue Mar 31 04:29:52.806376 2026] [:error] [pid 18333:tid 18396] [client 98.71.65.172:6438] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gptsh.php"] [unique_id "acrdQESx2C5hLR0-8dLPOgAAAFE"]
[Tue Mar 31 04:29:53.309764 2026] [:error] [pid 18334:tid 18426] [client 98.71.65.172:6503] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gptsh.php"] [unique_id "acrdQXqQrXLbk1cg3mglQAAAAJQ"]
[Tue Mar 31 04:29:53.811420 2026] [:error] [pid 18439:tid 18460] [client 98.71.65.172:40220] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gptsh.php"] [unique_id "acrdQS-R9nOaA8Xqs7ihCQAAAMk"]
[Tue Mar 31 04:29:54.314675 2026] [:error] [pid 18439:tid 18473] [client 98.71.65.172:6533] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/albin.php"] [unique_id "acrdQi-R9nOaA8Xqs7ihDgAAANY"]
[Tue Mar 31 04:29:54.813619 2026] [:error] [pid 18333:tid 18387] [client 98.71.65.172:6513] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/albin.php"] [unique_id "acrdQkSx2C5hLR0-8dLPQAAAAEg"]
[Tue Mar 31 04:29:55.317569 2026] [:error] [pid 18332:tid 18373] [client 98.71.65.172:40215] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/albin.php"] [unique_id "acrdQ74KXr1F9raS5GSIJAAAABg"]
[Tue Mar 31 04:29:55.819942 2026] [:error] [pid 18334:tid 18415] [client 98.71.65.172:7143] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/albin.php"] [unique_id "acrdQ3qQrXLbk1cg3mglRQAAAIk"]
[Tue Mar 31 04:29:56.328129 2026] [:error] [pid 18334:tid 18429] [client 98.71.65.172:6385] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/htto.php"] [unique_id "acrdRHqQrXLbk1cg3mglSAAAAJc"]
[Tue Mar 31 04:29:56.827917 2026] [:error] [pid 18334:tid 18410] [client 98.71.65.172:6492] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/htto.php"] [unique_id "acrdRHqQrXLbk1cg3mglTAAAAIQ"]
[Tue Mar 31 04:29:57.327809 2026] [:error] [pid 18333:tid 18393] [client 98.71.65.172:6375] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/htto.php"] [unique_id "acrdRUSx2C5hLR0-8dLPRAAAAE4"]
[Tue Mar 31 04:29:57.830517 2026] [:error] [pid 18334:tid 18420] [client 98.71.65.172:52087] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/htto.php"] [unique_id "acrdRXqQrXLbk1cg3mglVAAAAI4"]
[Tue Mar 31 04:29:58.359455 2026] [:error] [pid 18333:tid 18392] [client 98.71.65.172:7136] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xhejulap.php"] [unique_id "acrdRkSx2C5hLR0-8dLPRwAAAE0"]
[Tue Mar 31 04:29:58.868411 2026] [:error] [pid 18439:tid 18452] [client 98.71.65.172:6501] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xhejulap.php"] [unique_id "acrdRi-R9nOaA8Xqs7ihGAAAAME"]
[Tue Mar 31 04:29:59.373803 2026] [:error] [pid 18333:tid 18401] [client 98.71.65.172:7138] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xhejulap.php"] [unique_id "acrdR0Sx2C5hLR0-8dLPSgAAAFY"]
[Tue Mar 31 04:29:59.884091 2026] [:error] [pid 18333:tid 18402] [client 98.71.65.172:7162] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xhejulap.php"] [unique_id "acrdR0Sx2C5hLR0-8dLPSwAAAFc"]
[Tue Mar 31 04:30:00.387933 2026] [:error] [pid 18439:tid 18458] [client 98.71.65.172:44355] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/66.php"] [unique_id "acrdSC-R9nOaA8Xqs7ihHQAAAMc"]
[Tue Mar 31 04:30:00.889616 2026] [:error] [pid 18333:tid 18382] [client 98.71.65.172:52067] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/66.php"] [unique_id "acrdSESx2C5hLR0-8dLPTgAAAEM"]
[Tue Mar 31 04:30:01.391906 2026] [:error] [pid 18332:tid 18360] [client 98.71.65.172:52039] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/66.php"] [unique_id "acrdSb4KXr1F9raS5GSILAAAAAw"]
[Tue Mar 31 04:30:01.894937 2026] [:error] [pid 18334:tid 18423] [client 98.71.65.172:6478] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/66.php"] [unique_id "acrdSXqQrXLbk1cg3mglWwAAAJE"]
[Tue Mar 31 04:30:02.395583 2026] [:error] [pid 18332:tid 18366] [client 98.71.65.172:50103] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/8pewqMTX.php"] [unique_id "acrdSr4KXr1F9raS5GSILwAAABI"]
[Tue Mar 31 04:30:02.905397 2026] [:error] [pid 18332:tid 18367] [client 98.71.65.172:56237] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/8pewqMTX.php"] [unique_id "acrdSr4KXr1F9raS5GSIMwAAABM"]
[Tue Mar 31 04:30:03.406483 2026] [:error] [pid 18332:tid 18357] [client 98.71.65.172:40229] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/8pewqMTX.php"] [unique_id "acrdS74KXr1F9raS5GSINwAAAAk"]
[Tue Mar 31 04:30:03.921561 2026] [:error] [pid 18333:tid 18395] [client 98.71.65.172:6466] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/8pewqMTX.php"] [unique_id "acrdS0Sx2C5hLR0-8dLPWAAAAFA"]
[Tue Mar 31 04:30:04.420494 2026] [:error] [pid 18333:tid 18379] [client 98.71.65.172:55586] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ddpxi.php"] [unique_id "acrdTESx2C5hLR0-8dLPXAAAAEA"]
[Tue Mar 31 04:30:04.922708 2026] [:error] [pid 18333:tid 18381] [client 98.71.65.172:40193] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ddpxi.php"] [unique_id "acrdTESx2C5hLR0-8dLPYAAAAEI"]
[Tue Mar 31 04:30:05.431478 2026] [:error] [pid 18439:tid 18453] [client 98.71.65.172:6514] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ddpxi.php"] [unique_id "acrdTS-R9nOaA8Xqs7ihLQAAAMI"]
[Tue Mar 31 04:30:05.942249 2026] [:error] [pid 18333:tid 18402] [client 98.71.65.172:6424] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ddpxi.php"] [unique_id "acrdTUSx2C5hLR0-8dLPZwAAAFc"]
[Tue Mar 31 04:30:06.440294 2026] [:error] [pid 18333:tid 18397] [client 98.71.65.172:6377] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cdkfu.php"] [unique_id "acrdTkSx2C5hLR0-8dLPbQAAAFI"]
[Tue Mar 31 04:30:06.943131 2026] [:error] [pid 18439:tid 18465] [client 98.71.65.172:6362] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cdkfu.php"] [unique_id "acrdTi-R9nOaA8Xqs7ihMQAAAM4"]
[Tue Mar 31 04:30:07.441618 2026] [:error] [pid 18334:tid 18419] [client 98.71.65.172:56218] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cdkfu.php"] [unique_id "acrdT3qQrXLbk1cg3mglZgAAAI0"]
[Tue Mar 31 04:30:07.953326 2026] [:error] [pid 18334:tid 18409] [client 98.71.65.172:56244] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cdkfu.php"] [unique_id "acrdT3qQrXLbk1cg3mglaAAAAIM"]
[Tue Mar 31 04:30:08.456090 2026] [:error] [pid 18332:tid 18368] [client 98.71.65.172:50052] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/IcC7p.php"] [unique_id "acrdUL4KXr1F9raS5GSIQwAAABQ"]
[Tue Mar 31 04:30:08.986568 2026] [:error] [pid 18439:tid 18470] [client 98.71.65.172:52094] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/IcC7p.php"] [unique_id "acrdUC-R9nOaA8Xqs7ihOQAAANM"]
[Tue Mar 31 04:30:09.487670 2026] [:error] [pid 18439:tid 18458] [client 98.71.65.172:56200] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/IcC7p.php"] [unique_id "acrdUS-R9nOaA8Xqs7ihOwAAAMc"]
[Tue Mar 31 04:30:09.986123 2026] [:error] [pid 18439:tid 18472] [client 98.71.65.172:40230] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/IcC7p.php"] [unique_id "acrdUS-R9nOaA8Xqs7ihQAAAANU"]
[Tue Mar 31 04:30:10.484007 2026] [:error] [pid 18439:tid 18474] [client 98.71.65.172:6935] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dropdown.php"] [unique_id "acrdUi-R9nOaA8Xqs7ihQwAAANc"]
[Tue Mar 31 04:30:11.015120 2026] [:error] [pid 18439:tid 18464] [client 98.71.65.172:6451] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dropdown.php"] [unique_id "acrdUy-R9nOaA8Xqs7ihRwAAAM0"]
[Tue Mar 31 04:30:11.514422 2026] [:error] [pid 18439:tid 18475] [client 98.71.65.172:40192] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dropdown.php"] [unique_id "acrdUy-R9nOaA8Xqs7ihSQAAANg"]
[Tue Mar 31 04:30:12.015568 2026] [:error] [pid 18334:tid 18430] [client 98.71.65.172:7139] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dropdown.php"] [unique_id "acrdVHqQrXLbk1cg3mglcQAAAJg"]
[Tue Mar 31 04:30:12.523208 2026] [:error] [pid 18439:tid 18474] [client 98.71.65.172:56205] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Jcrop.php"] [unique_id "acrdVC-R9nOaA8Xqs7ihTAAAANc"]
[Tue Mar 31 04:30:13.038886 2026] [:error] [pid 18334:tid 18420] [client 98.71.65.172:6416] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Jcrop.php"] [unique_id "acrdVXqQrXLbk1cg3mgleAAAAI4"]
[Tue Mar 31 04:30:13.540117 2026] [:error] [pid 18334:tid 18417] [client 98.71.65.172:6560] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Jcrop.php"] [unique_id "acrdVXqQrXLbk1cg3mglegAAAIs"]
[Tue Mar 31 04:30:14.038746 2026] [:error] [pid 18334:tid 18419] [client 98.71.65.172:58880] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Jcrop.php"] [unique_id "acrdVnqQrXLbk1cg3mglgAAAAI0"]
[Tue Mar 31 09:18:26.194287 2026] [proxy_fcgi:error] [pid 6548:tid 6570] [client 20.208.32.234:23316] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 10:43:17.615745 2026] [proxy_fcgi:error] [pid 6548:tid 6574] [client 158.158.51.236:23425] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 10:43:17.855071 2026] [:error] [pid 6548:tid 6555] [client 158.158.51.236:23425] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sid3.php"] [unique_id "acs0xbgIz9HgMl9YwE7NggAAAUU"]
[Tue Mar 31 10:43:18.656447 2026] [:error] [pid 6548:tid 6551] [client 158.158.51.236:46590] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sid3.php"] [unique_id "acs0xrgIz9HgMl9YwE7NigAAAUE"]
[Tue Mar 31 10:43:19.778280 2026] [:error] [pid 36982:tid 37001] [client 158.158.51.236:46582] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sid3.php"] [unique_id "acs0x_lMmeoQKN0r_GPdowAAANA"]
[Tue Mar 31 10:43:20.681253 2026] [:error] [pid 36982:tid 36998] [client 158.158.51.236:59476] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sid3.php"] [unique_id "acs0yPlMmeoQKN0r_GPdpwAAAM0"]
[Tue Mar 31 10:43:21.723791 2026] [:error] [pid 36890:tid 36906] [client 158.158.51.236:46589] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gpt-sh.php"] [unique_id "acs0yZ8FASPd_uH8z7d1fgAAAAs"]
[Tue Mar 31 10:43:22.398153 2026] [:error] [pid 36890:tid 36904] [client 158.158.51.236:45502] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gpt-sh.php"] [unique_id "acs0yp8FASPd_uH8z7d1gQAAAAk"]
[Tue Mar 31 10:43:23.316005 2026] [:error] [pid 41421:tid 41430] [client 158.158.51.236:37317] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gpt-sh.php"] [unique_id "acs0yxSaDjY9kKFtUQClsQAAAQY"]
[Tue Mar 31 10:43:24.111095 2026] [:error] [pid 6548:tid 6568] [client 158.158.51.236:59478] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gpt-sh.php"] [unique_id "acs0zLgIz9HgMl9YwE7NkgAAAVI"]
[Tue Mar 31 10:43:25.092160 2026] [:error] [pid 41421:tid 41436] [client 158.158.51.236:37339] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-access.php"] [unique_id "acs0zRSaDjY9kKFtUQCltwAAAQw"]
[Tue Mar 31 10:43:26.007726 2026] [:error] [pid 36891:tid 36937] [client 158.158.51.236:49355] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-access.php"] [unique_id "acs0zpJhiMaJUqoqfl5RAwAAAE0"]
[Tue Mar 31 10:43:26.932406 2026] [:error] [pid 41421:tid 41429] [client 158.158.51.236:49364] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-access.php"] [unique_id "acs0zhSaDjY9kKFtUQClvwAAAQU"]
[Tue Mar 31 10:43:27.587688 2026] [:error] [pid 36982:tid 37005] [client 158.158.51.236:49345] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-access.php"] [unique_id "acs0z_lMmeoQKN0r_GPdrwAAANQ"]
[Tue Mar 31 10:43:28.485974 2026] [:error] [pid 41421:tid 41445] [client 158.158.51.236:34424] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wxfyf.php"] [unique_id "acs00BSaDjY9kKFtUQClxgAAARU"]
[Tue Mar 31 10:43:29.473340 2026] [:error] [pid 41421:tid 41427] [client 158.158.51.236:52920] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wxfyf.php"] [unique_id "acs00RSaDjY9kKFtUQClzgAAAQM"]
[Tue Mar 31 10:43:30.677798 2026] [:error] [pid 36892:tid 36964] [client 158.158.51.236:45567] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wxfyf.php"] [unique_id "acs00kyj9S4G0ek3O4LyJwAAAI0"]
[Tue Mar 31 10:43:31.758255 2026] [:error] [pid 36982:tid 37008] [client 158.158.51.236:51217] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wxfyf.php"] [unique_id "acs00_lMmeoQKN0r_GPdtAAAANc"]
[Tue Mar 31 10:43:33.250074 2026] [:error] [pid 36982:tid 36988] [client 158.158.51.236:38447] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/callback.php"] [unique_id "acs01flMmeoQKN0r_GPdwAAAAMM"]
[Tue Mar 31 10:43:34.508106 2026] [:error] [pid 6548:tid 6573] [client 158.158.51.236:20027] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/callback.php"] [unique_id "acs01rgIz9HgMl9YwE7NmQAAAVc"]
[Tue Mar 31 10:43:37.074017 2026] [:error] [pid 36890:tid 36897] [client 158.158.51.236:40545] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/callback.php"] [unique_id "acs02Z8FASPd_uH8z7d1kQAAAAI"]
[Tue Mar 31 10:43:37.706419 2026] [:error] [pid 36982:tid 36985] [client 158.158.51.236:27114] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/callback.php"] [unique_id "acs02flMmeoQKN0r_GPdyAAAAMA"]
[Tue Mar 31 10:43:38.733476 2026] [:error] [pid 36891:tid 36932] [client 158.158.51.236:27130] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/h2.php"] [unique_id "acs02pJhiMaJUqoqfl5RDAAAAEg"]
[Tue Mar 31 10:43:39.684806 2026] [:error] [pid 36891:tid 36934] [client 158.158.51.236:24553] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/h2.php"] [unique_id "acs025JhiMaJUqoqfl5RDgAAAEo"]
[Tue Mar 31 10:43:40.991592 2026] [:error] [pid 36982:tid 36991] [client 158.158.51.236:36116] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/h2.php"] [unique_id "acs03PlMmeoQKN0r_GPd0AAAAMY"]
[Tue Mar 31 10:43:41.627797 2026] [:error] [pid 41421:tid 41441] [client 158.158.51.236:26589] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/h2.php"] [unique_id "acs03RSaDjY9kKFtUQCl2QAAARE"]
[Tue Mar 31 10:43:43.091121 2026] [:error] [pid 36982:tid 36994] [client 158.158.51.236:36145] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/d12.php"] [unique_id "acs03_lMmeoQKN0r_GPd2AAAAMk"]
[Tue Mar 31 10:43:43.854767 2026] [:error] [pid 41421:tid 41443] [client 158.158.51.236:25506] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/d12.php"] [unique_id "acs03xSaDjY9kKFtUQCl4QAAARM"]
[Tue Mar 31 10:43:44.648295 2026] [:error] [pid 36890:tid 36909] [client 158.158.51.236:36139] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/d12.php"] [unique_id "acs04J8FASPd_uH8z7d1lQAAAA4"]
[Tue Mar 31 10:43:45.178112 2026] [:error] [pid 36891:tid 36929] [client 158.158.51.236:26615] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/d12.php"] [unique_id "acs04ZJhiMaJUqoqfl5REgAAAEU"]
[Tue Mar 31 10:43:45.945928 2026] [:error] [pid 36982:tid 37003] [client 158.158.51.236:17408] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/144.php"] [unique_id "acs04flMmeoQKN0r_GPd4gAAANI"]
[Tue Mar 31 10:43:46.841525 2026] [:error] [pid 36982:tid 36994] [client 158.158.51.236:62812] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/144.php"] [unique_id "acs04vlMmeoQKN0r_GPd5QAAAMk"]
[Tue Mar 31 10:43:47.592299 2026] [:error] [pid 36891:tid 36926] [client 158.158.51.236:21417] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/144.php"] [unique_id "acs045JhiMaJUqoqfl5REwAAAEI"]
[Tue Mar 31 10:43:48.374890 2026] [:error] [pid 36890:tid 36895] [client 158.158.51.236:41212] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/144.php"] [unique_id "acs05J8FASPd_uH8z7d1mQAAAAA"]
[Tue Mar 31 10:43:49.049321 2026] [:error] [pid 36982:tid 36985] [client 158.158.51.236:21411] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/s.php"] [unique_id "acs05flMmeoQKN0r_GPd7AAAAMA"]
[Tue Mar 31 10:43:49.875058 2026] [:error] [pid 36982:tid 36992] [client 158.158.51.236:25555] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/s.php"] [unique_id "acs05flMmeoQKN0r_GPd8wAAAMc"]
[Tue Mar 31 10:43:50.523137 2026] [:error] [pid 36891:tid 36941] [client 158.158.51.236:21396] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/s.php"] [unique_id "acs05pJhiMaJUqoqfl5RFgAAAFE"]
[Tue Mar 31 10:43:51.433711 2026] [:error] [pid 36890:tid 36898] [client 158.158.51.236:27582] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/s.php"] [unique_id "acs0558FASPd_uH8z7d1nwAAAAM"]
[Tue Mar 31 10:43:52.174560 2026] [:error] [pid 36982:tid 37005] [client 158.158.51.236:25578] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xsas.php"] [unique_id "acs06PlMmeoQKN0r_GPd9gAAANQ"]
[Tue Mar 31 10:43:52.797218 2026] [:error] [pid 36982:tid 37001] [client 158.158.51.236:21433] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xsas.php"] [unique_id "acs06PlMmeoQKN0r_GPd-gAAANA"]
[Tue Mar 31 10:43:53.519752 2026] [:error] [pid 36982:tid 36990] [client 158.158.51.236:52969] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xsas.php"] [unique_id "acs06flMmeoQKN0r_GPd_QAAAMU"]
[Tue Mar 31 10:43:54.118376 2026] [:error] [pid 36890:tid 36897] [client 158.158.51.236:63286] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xsas.php"] [unique_id "acs06p8FASPd_uH8z7d1pAAAAAI"]
[Tue Mar 31 10:43:54.684504 2026] [:error] [pid 6548:tid 6561] [client 158.158.51.236:25531] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a5.php"] [unique_id "acs06rgIz9HgMl9YwE7NwgAAAUs"]
[Tue Mar 31 10:43:55.465037 2026] [:error] [pid 36892:tid 36972] [client 158.158.51.236:41201] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a5.php"] [unique_id "acs060yj9S4G0ek3O4LySAAAAJU"]
[Tue Mar 31 10:43:56.376445 2026] [:error] [pid 36982:tid 36988] [client 158.158.51.236:25563] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a5.php"] [unique_id "acs07PlMmeoQKN0r_GPeCgAAAMM"]
[Tue Mar 31 10:43:57.071294 2026] [:error] [pid 36982:tid 36994] [client 158.158.51.236:27522] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a5.php"] [unique_id "acs07flMmeoQKN0r_GPeDAAAAMk"]
[Tue Mar 31 10:43:57.864148 2026] [:error] [pid 41421:tid 41442] [client 158.158.51.236:62828] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-blog-header.php"] [unique_id "acs07RSaDjY9kKFtUQCl7gAAARI"]
[Tue Mar 31 10:43:58.641767 2026] [:error] [pid 6548:tid 6558] [client 158.158.51.236:3707] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-blog-header.php"] [unique_id "acs07rgIz9HgMl9YwE7NyAAAAUg"]
[Tue Mar 31 10:43:59.818933 2026] [:error] [pid 36890:tid 36919] [client 158.158.51.236:40519] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-blog-header.php"] [unique_id "acs0758FASPd_uH8z7d1tAAAABg"]
[Tue Mar 31 10:44:00.936090 2026] [:error] [pid 41421:tid 41435] [client 158.158.51.236:19470] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-blog-header.php"] [unique_id "acs08BSaDjY9kKFtUQCl9QAAAQs"]
[Tue Mar 31 10:44:01.697283 2026] [:error] [pid 36891:tid 36925] [client 158.158.51.236:40551] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/asasx.php"] [unique_id "acs08ZJhiMaJUqoqfl5RHQAAAEE"]
[Tue Mar 31 10:44:02.620531 2026] [:error] [pid 36892:tid 36967] [client 158.158.51.236:62803] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/asasx.php"] [unique_id "acs08kyj9S4G0ek3O4LyXAAAAJA"]
[Tue Mar 31 10:44:03.365170 2026] [:error] [pid 36890:tid 36909] [client 158.158.51.236:58822] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/asasx.php"] [unique_id "acs0858FASPd_uH8z7d1twAAAA4"]
[Tue Mar 31 10:44:04.261324 2026] [:error] [pid 36890:tid 36900] [client 158.158.51.236:36136] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/asasx.php"] [unique_id "acs09J8FASPd_uH8z7d1wAAAAAU"]
[Tue Mar 31 10:44:05.708391 2026] [:error] [pid 36891:tid 36931] [client 158.158.51.236:63277] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file.php"] [unique_id "acs09ZJhiMaJUqoqfl5RJwAAAEc"]
[Tue Mar 31 10:44:06.997377 2026] [:error] [pid 6548:tid 6567] [client 158.158.51.236:62793] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file.php"] [unique_id "acs09rgIz9HgMl9YwE7N3gAAAVE"]
[Tue Mar 31 10:44:07.903188 2026] [:error] [pid 36982:tid 37006] [client 158.158.51.236:36177] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file.php"] [unique_id "acs09_lMmeoQKN0r_GPeFgAAANU"]
[Tue Mar 31 10:44:09.846886 2026] [:error] [pid 41421:tid 41436] [client 158.158.51.236:52968] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file.php"] [unique_id "acs0-RSaDjY9kKFtUQCmBwAAAQw"]
[Tue Mar 31 10:44:11.318340 2026] [:error] [pid 36982:tid 36989] [client 158.158.51.236:63284] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/public/vx.php"] [unique_id "acs0-_lMmeoQKN0r_GPeGwAAAMQ"]
[Tue Mar 31 10:44:14.013654 2026] [:error] [pid 36890:tid 36919] [client 158.158.51.236:3650] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/public/vx.php"] [unique_id "acs0_p8FASPd_uH8z7d1ygAAABg"]
[Tue Mar 31 10:44:18.061305 2026] [proxy_fcgi:error] [pid 36892:tid 36965] [client 158.158.51.236:17463] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 10:44:18.327062 2026] [proxy_fcgi:error] [pid 36892:tid 36964] [client 158.158.51.236:17463] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 10:44:18.572219 2026] [proxy_fcgi:error] [pid 36892:tid 36959] [client 158.158.51.236:17463] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 10:44:18.902940 2026] [proxy_fcgi:error] [pid 36892:tid 36975] [client 158.158.51.236:17463] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 10:44:19.157530 2026] [proxy_fcgi:error] [pid 36892:tid 36955] [client 158.158.51.236:17463] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 10:44:19.403601 2026] [proxy_fcgi:error] [pid 36892:tid 36973] [client 158.158.51.236:17463] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 10:44:19.657268 2026] [proxy_fcgi:error] [pid 36892:tid 36972] [client 158.158.51.236:17463] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 10:44:19.906694 2026] [proxy_fcgi:error] [pid 36892:tid 36954] [client 158.158.51.236:17463] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 10:44:20.175067 2026] [proxy_fcgi:error] [pid 36892:tid 36961] [client 158.158.51.236:17463] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 10:44:20.418507 2026] [proxy_fcgi:error] [pid 36892:tid 36962] [client 158.158.51.236:17463] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 10:44:20.657196 2026] [:error] [pid 36892:tid 36951] [client 158.158.51.236:17463] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dass.php"] [unique_id "acs1BEyj9S4G0ek3O4LybwAAAIA"]
[Tue Mar 31 10:44:21.709613 2026] [:error] [pid 36982:tid 37001] [client 158.158.51.236:40538] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dass.php"] [unique_id "acs1BflMmeoQKN0r_GPeVAAAANA"]
[Tue Mar 31 10:44:23.254124 2026] [:error] [pid 36982:tid 36987] [client 158.158.51.236:3648] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dass.php"] [unique_id "acs1B_lMmeoQKN0r_GPeYAAAAMI"]
[Tue Mar 31 10:44:24.651396 2026] [:error] [pid 36982:tid 36996] [client 158.158.51.236:40527] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dass.php"] [unique_id "acs1CPlMmeoQKN0r_GPeaAAAAMs"]
[Tue Mar 31 10:44:26.190370 2026] [:error] [pid 36890:tid 36905] [client 158.158.51.236:27580] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fs.php"] [unique_id "acs1Cp8FASPd_uH8z7d13QAAAAo"]
[Tue Mar 31 10:44:27.779216 2026] [:error] [pid 36892:tid 36965] [client 158.158.51.236:25512] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fs.php"] [unique_id "acs1C0yj9S4G0ek3O4LygQAAAI4"]
[Tue Mar 31 10:44:29.425662 2026] [:error] [pid 36982:tid 37009] [client 158.158.51.236:40531] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fs.php"] [unique_id "acs1DflMmeoQKN0r_GPecgAAANg"]
[Tue Mar 31 10:44:31.203533 2026] [:error] [pid 36891:tid 36928] [client 158.158.51.236:19501] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fs.php"] [unique_id "acs1D5JhiMaJUqoqfl5RTAAAAEQ"]
[Tue Mar 31 10:44:32.649272 2026] [:error] [pid 36891:tid 36942] [client 158.158.51.236:48716] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws83.php"] [unique_id "acs1EJJhiMaJUqoqfl5RTwAAAFI"]
[Tue Mar 31 10:44:35.030669 2026] [:error] [pid 41421:tid 41445] [client 158.158.51.236:21395] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws83.php"] [unique_id "acs1ExSaDjY9kKFtUQCmTwAAARU"]
[Tue Mar 31 10:44:35.788026 2026] [:error] [pid 41421:tid 41432] [client 158.158.51.236:32097] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws83.php"] [unique_id "acs1ExSaDjY9kKFtUQCmUQAAAQg"]
[Tue Mar 31 10:44:36.687467 2026] [:error] [pid 36891:tid 36929] [client 158.158.51.236:48744] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws83.php"] [unique_id "acs1FJJhiMaJUqoqfl5RXgAAAEU"]
[Tue Mar 31 10:44:37.436752 2026] [:error] [pid 6548:tid 6571] [client 158.158.51.236:26610] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/56c53.php"] [unique_id "acs1FbgIz9HgMl9YwE7OWQAAAVU"]
[Tue Mar 31 10:44:38.167967 2026] [:error] [pid 36892:tid 36971] [client 158.158.51.236:46519] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/56c53.php"] [unique_id "acs1Fkyj9S4G0ek3O4LyjAAAAJQ"]
[Tue Mar 31 10:44:38.953902 2026] [:error] [pid 6548:tid 6562] [client 158.158.51.236:36127] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/56c53.php"] [unique_id "acs1FrgIz9HgMl9YwE7OYwAAAUw"]
[Tue Mar 31 10:44:40.554984 2026] [:error] [pid 6548:tid 6567] [client 158.158.51.236:18040] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/56c53.php"] [unique_id "acs1GLgIz9HgMl9YwE7ObwAAAVE"]
[Tue Mar 31 10:44:41.707080 2026] [:error] [pid 36982:tid 36994] [client 158.158.51.236:47568] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ms-edit.php"] [unique_id "acs1GflMmeoQKN0r_GPeiAAAAMk"]
[Tue Mar 31 10:44:42.407642 2026] [:error] [pid 36982:tid 36986] [client 158.158.51.236:34310] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ms-edit.php"] [unique_id "acs1GvlMmeoQKN0r_GPejAAAAME"]
[Tue Mar 31 10:44:43.257504 2026] [:error] [pid 36892:tid 36975] [client 158.158.51.236:52881] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ms-edit.php"] [unique_id "acs1G0yj9S4G0ek3O4LykgAAAJg"]
[Tue Mar 31 10:44:45.136790 2026] [:error] [pid 6548:tid 6567] [client 158.158.51.236:3506] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ms-edit.php"] [unique_id "acs1HbgIz9HgMl9YwE7OegAAAVE"]
[Tue Mar 31 10:44:45.991277 2026] [:error] [pid 41421:tid 41427] [client 158.158.51.236:3497] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/grsiuk.php"] [unique_id "acs1HRSaDjY9kKFtUQCmcQAAAQM"]
[Tue Mar 31 10:44:46.864508 2026] [:error] [pid 36982:tid 36992] [client 158.158.51.236:44943] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/grsiuk.php"] [unique_id "acs1HvlMmeoQKN0r_GPelgAAAMc"]
[Tue Mar 31 10:44:47.835566 2026] [:error] [pid 41421:tid 41429] [client 158.158.51.236:16240] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/grsiuk.php"] [unique_id "acs1HxSaDjY9kKFtUQCmdgAAAQU"]
[Tue Mar 31 10:44:48.686396 2026] [:error] [pid 41421:tid 41432] [client 158.158.51.236:44944] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/grsiuk.php"] [unique_id "acs1IBSaDjY9kKFtUQCmeQAAAQg"]
[Tue Mar 31 10:44:49.426579 2026] [:error] [pid 36982:tid 37005] [client 158.158.51.236:16486] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mh.php"] [unique_id "acs1IflMmeoQKN0r_GPemQAAANQ"]
[Tue Mar 31 10:44:50.714378 2026] [:error] [pid 41421:tid 41426] [client 158.158.51.236:3291] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mh.php"] [unique_id "acs1IhSaDjY9kKFtUQCmewAAAQI"]
[Tue Mar 31 10:44:51.452398 2026] [:error] [pid 41421:tid 41439] [client 158.158.51.236:51867] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mh.php"] [unique_id "acs1IxSaDjY9kKFtUQCmfAAAAQ8"]
[Tue Mar 31 10:44:52.140688 2026] [:error] [pid 36982:tid 37006] [client 158.158.51.236:59482] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mh.php"] [unique_id "acs1JPlMmeoQKN0r_GPepwAAANU"]
[Tue Mar 31 10:44:52.746880 2026] [:error] [pid 41421:tid 41425] [client 158.158.51.236:51879] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bo.php"] [unique_id "acs1JBSaDjY9kKFtUQCmfwAAAQE"]
[Tue Mar 31 10:44:53.364956 2026] [:error] [pid 6548:tid 6571] [client 158.158.51.236:51848] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bo.php"] [unique_id "acs1JbgIz9HgMl9YwE7OgQAAAVU"]
[Tue Mar 31 10:44:54.096904 2026] [:error] [pid 41421:tid 41433] [client 158.158.51.236:57111] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bo.php"] [unique_id "acs1JhSaDjY9kKFtUQCmhAAAAQk"]
[Tue Mar 31 10:44:54.705916 2026] [:error] [pid 36890:tid 36905] [client 158.158.51.236:45996] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bo.php"] [unique_id "acs1Jp8FASPd_uH8z7d2HAAAAAo"]
[Tue Mar 31 10:44:55.349225 2026] [:error] [pid 36891:tid 36936] [client 158.158.51.236:45978] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/5b9ac.php"] [unique_id "acs1J5JhiMaJUqoqfl5RjAAAAEw"]
[Tue Mar 31 10:44:56.059845 2026] [:error] [pid 36892:tid 36951] [client 158.158.51.236:42740] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/5b9ac.php"] [unique_id "acs1KEyj9S4G0ek3O4LyngAAAIA"]
[Tue Mar 31 10:44:56.639525 2026] [:error] [pid 36892:tid 36971] [client 158.158.51.236:3580] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/5b9ac.php"] [unique_id "acs1KEyj9S4G0ek3O4LyoQAAAJQ"]
[Tue Mar 31 10:44:57.290550 2026] [:error] [pid 36891:tid 36944] [client 158.158.51.236:51933] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/5b9ac.php"] [unique_id "acs1KZJhiMaJUqoqfl5RkAAAAFQ"]
[Tue Mar 31 10:44:57.890664 2026] [:error] [pid 36890:tid 36898] [client 158.158.51.236:3528] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bolt.php"] [unique_id "acs1KZ8FASPd_uH8z7d2KAAAAAM"]
[Tue Mar 31 10:44:58.615996 2026] [:error] [pid 6548:tid 6565] [client 158.158.51.236:40033] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bolt.php"] [unique_id "acs1KrgIz9HgMl9YwE7OjgAAAU8"]
[Tue Mar 31 10:44:59.373724 2026] [:error] [pid 36982:tid 36997] [client 158.158.51.236:48022] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bolt.php"] [unique_id "acs1K_lMmeoQKN0r_GPergAAAMw"]
[Tue Mar 31 10:45:00.157002 2026] [:error] [pid 6548:tid 6562] [client 158.158.51.236:40060] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bolt.php"] [unique_id "acs1LLgIz9HgMl9YwE7OlwAAAUw"]
[Tue Mar 31 10:45:01.087406 2026] [:error] [pid 36890:tid 36907] [client 158.158.51.236:28111] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nw.php"] [unique_id "acs1LZ8FASPd_uH8z7d2LAAAAAw"]
[Tue Mar 31 10:45:02.374997 2026] [:error] [pid 36982:tid 37001] [client 158.158.51.236:16405] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nw.php"] [unique_id "acs1LvlMmeoQKN0r_GPeugAAANA"]
[Tue Mar 31 10:45:03.113766 2026] [:error] [pid 36982:tid 37000] [client 158.158.51.236:3723] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nw.php"] [unique_id "acs1L_lMmeoQKN0r_GPewAAAAM8"]
[Tue Mar 31 10:45:03.986794 2026] [:error] [pid 36892:tid 36968] [client 158.158.51.236:33726] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nw.php"] [unique_id "acs1L0yj9S4G0ek3O4LyqgAAAJE"]
[Tue Mar 31 10:45:04.792908 2026] [:error] [pid 6548:tid 6567] [client 158.158.51.236:28046] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rithin.php"] [unique_id "acs1MLgIz9HgMl9YwE7OxAAAAVE"]
[Tue Mar 31 10:45:06.578545 2026] [:error] [pid 41421:tid 41442] [client 158.158.51.236:20897] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rithin.php"] [unique_id "acs1MhSaDjY9kKFtUQCmoAAAARI"]
[Tue Mar 31 10:45:08.021806 2026] [:error] [pid 36982:tid 37009] [client 158.158.51.236:3830] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rithin.php"] [unique_id "acs1NPlMmeoQKN0r_GPeywAAANg"]
[Tue Mar 31 10:45:08.917599 2026] [:error] [pid 6548:tid 6552] [client 158.158.51.236:47522] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rithin.php"] [unique_id "acs1NLgIz9HgMl9YwE7OygAAAUI"]
[Tue Mar 31 10:45:09.821176 2026] [:error] [pid 6548:tid 6572] [client 158.158.51.236:16904] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tx78.php"] [unique_id "acs1NbgIz9HgMl9YwE7O0wAAAVY"]
[Tue Mar 31 10:45:10.570756 2026] [:error] [pid 36982:tid 37002] [client 158.158.51.236:62907] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tx78.php"] [unique_id "acs1NvlMmeoQKN0r_GPe0QAAANE"]
[Tue Mar 31 10:45:11.842999 2026] [:error] [pid 36892:tid 36970] [client 158.158.51.236:21908] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tx78.php"] [unique_id "acs1N0yj9S4G0ek3O4LyswAAAJM"]
[Tue Mar 31 10:45:12.593701 2026] [:error] [pid 41421:tid 41441] [client 158.158.51.236:47492] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tx78.php"] [unique_id "acs1OBSaDjY9kKFtUQCmqgAAARE"]
[Tue Mar 31 10:45:13.417680 2026] [:error] [pid 41421:tid 41443] [client 158.158.51.236:53254] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Sanskrit.php"] [unique_id "acs1ORSaDjY9kKFtUQCmrQAAARM"]
[Tue Mar 31 10:45:14.211383 2026] [:error] [pid 36892:tid 36959] [client 158.158.51.236:57074] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Sanskrit.php"] [unique_id "acs1Okyj9S4G0ek3O4LyuwAAAIg"]
[Tue Mar 31 10:45:15.022113 2026] [:error] [pid 36890:tid 36902] [client 158.158.51.236:29671] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Sanskrit.php"] [unique_id "acs1O58FASPd_uH8z7d2OgAAAAc"]
[Tue Mar 31 10:45:15.712536 2026] [:error] [pid 36892:tid 36953] [client 158.158.51.236:28076] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Sanskrit.php"] [unique_id "acs1O0yj9S4G0ek3O4LyvgAAAII"]
[Tue Mar 31 10:45:16.464043 2026] [:error] [pid 36892:tid 36967] [client 158.158.51.236:20922] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jga.php"] [unique_id "acs1PEyj9S4G0ek3O4LywgAAAJA"]
[Tue Mar 31 10:45:17.273564 2026] [:error] [pid 36982:tid 37007] [client 158.158.51.236:24501] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jga.php"] [unique_id "acs1PflMmeoQKN0r_GPe2gAAANY"]
[Tue Mar 31 10:45:17.949701 2026] [:error] [pid 36982:tid 37006] [client 158.158.51.236:3915] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jga.php"] [unique_id "acs1PflMmeoQKN0r_GPe4AAAANU"]
[Tue Mar 31 10:45:18.551823 2026] [:error] [pid 36892:tid 36963] [client 158.158.51.236:19062] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jga.php"] [unique_id "acs1Pkyj9S4G0ek3O4LyxAAAAIw"]
[Tue Mar 31 10:45:19.342947 2026] [:error] [pid 41421:tid 41425] [client 158.158.51.236:33667] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/torsa1.php"] [unique_id "acs1PxSaDjY9kKFtUQCmuQAAAQE"]
[Tue Mar 31 10:45:20.066279 2026] [proxy_fcgi:error] [pid 36982:tid 36993] [client 158.158.51.236:56597] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 10:45:20.340727 2026] [proxy_fcgi:error] [pid 36982:tid 36995] [client 158.158.51.236:56597] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 10:45:20.588041 2026] [proxy_fcgi:error] [pid 36982:tid 36988] [client 158.158.51.236:56597] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 10:45:20.839621 2026] [proxy_fcgi:error] [pid 36982:tid 36992] [client 158.158.51.236:56597] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 10:45:21.081863 2026] [proxy_fcgi:error] [pid 36982:tid 36998] [client 158.158.51.236:56597] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 10:45:21.337270 2026] [proxy_fcgi:error] [pid 36982:tid 36999] [client 158.158.51.236:56597] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 10:45:21.829113 2026] [proxy_fcgi:error] [pid 36982:tid 37004] [client 158.158.51.236:56597] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 10:45:22.077965 2026] [proxy_fcgi:error] [pid 36982:tid 37009] [client 158.158.51.236:56597] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 10:45:23.856369 2026] [proxy_fcgi:error] [pid 36982:tid 36997] [client 158.158.51.236:56597] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 10:45:24.101414 2026] [proxy_fcgi:error] [pid 36982:tid 36987] [client 158.158.51.236:56597] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 10:45:24.411807 2026] [:error] [pid 36982:tid 36994] [client 158.158.51.236:56597] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/install.php"] [unique_id "acs1RPlMmeoQKN0r_GPe_QAAAMk"]
[Tue Mar 31 10:45:25.538066 2026] [:error] [pid 6548:tid 6553] [client 158.158.51.236:56595] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/install.php"] [unique_id "acs1RbgIz9HgMl9YwE7PMQAAAUM"]
[Tue Mar 31 10:45:27.313739 2026] [:error] [pid 36891:tid 36935] [client 158.158.51.236:21451] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/install.php"] [unique_id "acs1R5JhiMaJUqoqfl5RrQAAAEs"]
[Tue Mar 31 10:45:29.178274 2026] [:error] [pid 6548:tid 6572] [client 158.158.51.236:62479] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/install.php"] [unique_id "acs1SbgIz9HgMl9YwE7PSAAAAVY"]
[Tue Mar 31 10:45:30.296196 2026] [:error] [pid 6548:tid 6553] [client 158.158.51.236:33227] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/maul.php"] [unique_id "acs1SrgIz9HgMl9YwE7PUgAAAUM"]
[Tue Mar 31 10:45:31.946892 2026] [:error] [pid 36890:tid 36901] [client 158.158.51.236:39985] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/maul.php"] [unique_id "acs1S58FASPd_uH8z7d2WAAAAAY"]
[Tue Mar 31 10:45:34.375460 2026] [:error] [pid 41421:tid 41433] [client 158.158.51.236:3924] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/maul.php"] [unique_id "acs1ThSaDjY9kKFtUQCm1wAAAQk"]
[Tue Mar 31 10:45:35.209853 2026] [:error] [pid 36892:tid 36962] [client 158.158.51.236:34990] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/maul.php"] [unique_id "acs1T0yj9S4G0ek3O4Ly0wAAAIs"]
[Tue Mar 31 10:45:36.125110 2026] [:error] [pid 36892:tid 36969] [client 158.158.51.236:44503] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lowpr.php"] [unique_id "acs1UEyj9S4G0ek3O4Ly2QAAAJI"]
[Tue Mar 31 10:45:36.873346 2026] [:error] [pid 36890:tid 36902] [client 158.158.51.236:64985] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lowpr.php"] [unique_id "acs1UJ8FASPd_uH8z7d2YQAAAAc"]
[Tue Mar 31 10:45:37.688258 2026] [:error] [pid 36982:tid 36991] [client 158.158.51.236:41709] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lowpr.php"] [unique_id "acs1UflMmeoQKN0r_GPfDwAAAMY"]
[Tue Mar 31 10:45:38.487746 2026] [:error] [pid 36890:tid 36911] [client 158.158.51.236:39437] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lowpr.php"] [unique_id "acs1Up8FASPd_uH8z7d2YgAAABA"]
[Tue Mar 31 10:45:39.193882 2026] [:error] [pid 6548:tid 6558] [client 158.158.51.236:41712] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/b.php"] [unique_id "acs1U7gIz9HgMl9YwE7PYgAAAUg"]
[Tue Mar 31 10:45:40.077673 2026] [:error] [pid 36890:tid 36915] [client 158.158.51.236:34969] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/b.php"] [unique_id "acs1VJ8FASPd_uH8z7d2YwAAABQ"]
[Tue Mar 31 10:45:40.804567 2026] [:error] [pid 36982:tid 36997] [client 158.158.51.236:64975] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/b.php"] [unique_id "acs1VPlMmeoQKN0r_GPfEwAAAMw"]
[Tue Mar 31 10:45:41.389619 2026] [:error] [pid 36982:tid 36994] [client 158.158.51.236:58331] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/b.php"] [unique_id "acs1VflMmeoQKN0r_GPfFgAAAMk"]
[Tue Mar 31 10:45:42.193104 2026] [:error] [pid 36982:tid 37001] [client 158.158.51.236:58326] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/166.php"] [unique_id "acs1VvlMmeoQKN0r_GPfHQAAANA"]
[Tue Mar 31 10:45:42.995385 2026] [:error] [pid 36982:tid 36994] [client 158.158.51.236:42643] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/166.php"] [unique_id "acs1VvlMmeoQKN0r_GPfIgAAAMk"]
[Tue Mar 31 10:45:43.729646 2026] [:error] [pid 6548:tid 6568] [client 158.158.51.236:65471] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/166.php"] [unique_id "acs1V7gIz9HgMl9YwE7PagAAAVI"]
[Tue Mar 31 10:45:44.367674 2026] [:error] [pid 36892:tid 36961] [client 158.158.51.236:19526] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/166.php"] [unique_id "acs1WEyj9S4G0ek3O4Ly5wAAAIo"]
[Tue Mar 31 10:45:45.243615 2026] [:error] [pid 36982:tid 36985] [client 158.158.51.236:24998] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/domains.php"] [unique_id "acs1WflMmeoQKN0r_GPfLQAAAMA"]
[Tue Mar 31 10:45:46.509507 2026] [:error] [pid 36982:tid 37002] [client 158.158.51.236:21958] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/domains.php"] [unique_id "acs1WvlMmeoQKN0r_GPfNAAAANE"]
[Tue Mar 31 10:45:47.142038 2026] [:error] [pid 41421:tid 41440] [client 158.158.51.236:63824] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/domains.php"] [unique_id "acs1WxSaDjY9kKFtUQCm7AAAARA"]
[Tue Mar 31 10:45:47.722777 2026] [:error] [pid 6548:tid 6559] [client 158.158.51.236:24976] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/domains.php"] [unique_id "acs1W7gIz9HgMl9YwE7PdwAAAUk"]
[Tue Mar 31 10:45:48.347450 2026] [:error] [pid 36892:tid 36967] [client 158.158.51.236:55591] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws85.php"] [unique_id "acs1XEyj9S4G0ek3O4Ly7AAAAJA"]
[Tue Mar 31 10:45:49.399154 2026] [:error] [pid 6548:tid 6564] [client 158.158.51.236:35061] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws85.php"] [unique_id "acs1XbgIz9HgMl9YwE7PfAAAAU4"]
[Tue Mar 31 10:45:50.324607 2026] [:error] [pid 36891:tid 36943] [client 158.158.51.236:58028] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws85.php"] [unique_id "acs1XpJhiMaJUqoqfl5RwQAAAFM"]
[Tue Mar 31 10:45:51.172411 2026] [:error] [pid 6548:tid 6561] [client 158.158.51.236:58342] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws85.php"] [unique_id "acs1X7gIz9HgMl9YwE7PgwAAAUs"]
[Tue Mar 31 10:45:52.192276 2026] [:error] [pid 36891:tid 36931] [client 158.158.51.236:65430] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-act.php"] [unique_id "acs1YJJhiMaJUqoqfl5RxwAAAEc"]
[Tue Mar 31 10:45:52.936493 2026] [:error] [pid 36892:tid 36959] [client 158.158.51.236:63837] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-act.php"] [unique_id "acs1YEyj9S4G0ek3O4Ly8gAAAIg"]
[Tue Mar 31 10:45:53.938318 2026] [:error] [pid 6548:tid 6552] [client 158.158.51.236:20511] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-act.php"] [unique_id "acs1YbgIz9HgMl9YwE7PiwAAAUI"]
[Tue Mar 31 10:45:54.827533 2026] [:error] [pid 6548:tid 6573] [client 158.158.51.236:58017] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-act.php"] [unique_id "acs1YrgIz9HgMl9YwE7PjwAAAVc"]
[Tue Mar 31 10:45:55.680493 2026] [:error] [pid 36890:tid 36900] [client 158.158.51.236:25993] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hehe.php"] [unique_id "acs1Y58FASPd_uH8z7d2dwAAAAU"]
[Tue Mar 31 10:45:56.494340 2026] [:error] [pid 36890:tid 36900] [client 158.158.51.236:35026] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hehe.php"] [unique_id "acs1ZJ8FASPd_uH8z7d2ogAAAAU"]
[Tue Mar 31 10:45:57.461998 2026] [:error] [pid 36982:tid 36988] [client 158.158.51.236:20035] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hehe.php"] [unique_id "acs1ZflMmeoQKN0r_GPfQAAAAMM"]
[Tue Mar 31 10:45:58.377598 2026] [:error] [pid 36982:tid 37003] [client 158.158.51.236:54510] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hehe.php"] [unique_id "acs1ZvlMmeoQKN0r_GPfQgAAANI"]
[Tue Mar 31 10:45:59.100319 2026] [:error] [pid 6548:tid 6558] [client 158.158.51.236:20493] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tfm.php"] [unique_id "acs1Z7gIz9HgMl9YwE7PpAAAAUg"]
[Tue Mar 31 10:45:59.970761 2026] [:error] [pid 41421:tid 41431] [client 158.158.51.236:31386] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tfm.php"] [unique_id "acs1ZxSaDjY9kKFtUQCm_QAAAQc"]
[Tue Mar 31 10:46:00.576094 2026] [:error] [pid 36982:tid 36992] [client 158.158.51.236:63215] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tfm.php"] [unique_id "acs1aPlMmeoQKN0r_GPfSgAAAMc"]
[Tue Mar 31 10:46:01.330050 2026] [:error] [pid 36892:tid 36958] [client 158.158.51.236:20537] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tfm.php"] [unique_id "acs1aUyj9S4G0ek3O4LzAwAAAIc"]
[Tue Mar 31 10:46:02.181805 2026] [:error] [pid 6548:tid 6552] [client 158.158.51.236:23491] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ne2026.php"] [unique_id "acs1argIz9HgMl9YwE7PsgAAAUI"]
[Tue Mar 31 10:46:03.023776 2026] [:error] [pid 36982:tid 37005] [client 158.158.51.236:20041] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ne2026.php"] [unique_id "acs1a_lMmeoQKN0r_GPfUQAAANQ"]
[Tue Mar 31 10:46:03.603547 2026] [:error] [pid 36982:tid 36987] [client 158.158.51.236:43279] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ne2026.php"] [unique_id "acs1a_lMmeoQKN0r_GPfVAAAAMI"]
[Tue Mar 31 10:46:04.403966 2026] [:error] [pid 36982:tid 37001] [client 158.158.51.236:37942] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ne2026.php"] [unique_id "acs1bPlMmeoQKN0r_GPfWAAAANA"]
[Tue Mar 31 10:46:05.262306 2026] [:error] [pid 36982:tid 36994] [client 158.158.51.236:3187] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws73.php"] [unique_id "acs1bflMmeoQKN0r_GPfWgAAAMk"]
[Tue Mar 31 10:46:06.202459 2026] [:error] [pid 36892:tid 36964] [client 158.158.51.236:54520] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws73.php"] [unique_id "acs1bkyj9S4G0ek3O4LzBQAAAI0"]
[Tue Mar 31 10:46:06.997119 2026] [:error] [pid 41421:tid 41440] [client 158.158.51.236:43319] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws73.php"] [unique_id "acs1bhSaDjY9kKFtUQCnCAAAARA"]
[Tue Mar 31 10:46:07.869614 2026] [:error] [pid 36982:tid 36990] [client 158.158.51.236:26032] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws73.php"] [unique_id "acs1b_lMmeoQKN0r_GPfZQAAAMU"]
[Tue Mar 31 10:46:08.458678 2026] [:error] [pid 6548:tid 6556] [client 158.158.51.236:37936] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws84.php"] [unique_id "acs1cLgIz9HgMl9YwE7PvgAAAUY"]
[Tue Mar 31 10:46:09.181283 2026] [:error] [pid 36892:tid 36957] [client 158.158.51.236:37973] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws84.php"] [unique_id "acs1cUyj9S4G0ek3O4LzDQAAAIY"]
[Tue Mar 31 10:46:09.893114 2026] [:error] [pid 36892:tid 36974] [client 158.158.51.236:25992] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws84.php"] [unique_id "acs1cUyj9S4G0ek3O4LzDgAAAJc"]
[Tue Mar 31 10:46:10.596052 2026] [:error] [pid 41421:tid 41431] [client 158.158.51.236:29056] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws84.php"] [unique_id "acs1chSaDjY9kKFtUQCnDAAAAQc"]
[Tue Mar 31 10:46:11.306761 2026] [:error] [pid 36982:tid 37007] [client 158.158.51.236:43938] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/baixy.php"] [unique_id "acs1c_lMmeoQKN0r_GPfaAAAANY"]
[Tue Mar 31 10:46:12.232670 2026] [:error] [pid 36890:tid 36899] [client 158.158.51.236:48698] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/baixy.php"] [unique_id "acs1dJ8FASPd_uH8z7d2ygAAAAQ"]
[Tue Mar 31 10:46:12.795180 2026] [:error] [pid 36890:tid 36902] [client 158.158.51.236:29078] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/baixy.php"] [unique_id "acs1dJ8FASPd_uH8z7d2zgAAAAc"]
[Tue Mar 31 10:46:13.653123 2026] [:error] [pid 6548:tid 6565] [client 158.158.51.236:37963] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/baixy.php"] [unique_id "acs1dbgIz9HgMl9YwE7PyAAAAU8"]
[Tue Mar 31 10:46:14.259155 2026] [:error] [pid 6548:tid 6553] [client 158.158.51.236:33166] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-good.php"] [unique_id "acs1drgIz9HgMl9YwE7PzAAAAUM"]
[Tue Mar 31 10:46:14.968166 2026] [:error] [pid 36982:tid 36991] [client 158.158.51.236:54471] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-good.php"] [unique_id "acs1dvlMmeoQKN0r_GPfcAAAAMY"]
[Tue Mar 31 10:46:15.816473 2026] [:error] [pid 36892:tid 36963] [client 158.158.51.236:50763] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-good.php"] [unique_id "acs1d0yj9S4G0ek3O4LzFgAAAIw"]
[Tue Mar 31 10:46:17.049349 2026] [:error] [pid 36891:tid 36927] [client 158.158.51.236:4049] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-good.php"] [unique_id "acs1eZJhiMaJUqoqfl5R3wAAAEM"]
[Tue Mar 31 10:46:18.662192 2026] [:error] [pid 36892:tid 36961] [client 158.158.51.236:30185] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a4.php"] [unique_id "acs1ekyj9S4G0ek3O4LzGQAAAIo"]
[Tue Mar 31 10:46:20.076288 2026] [:error] [pid 36982:tid 36996] [client 158.158.51.236:60788] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a4.php"] [unique_id "acs1fPlMmeoQKN0r_GPfegAAAMs"]
[Tue Mar 31 10:46:21.741140 2026] [:error] [pid 6548:tid 6563] [client 158.158.51.236:61418] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a4.php"] [unique_id "acs1fbgIz9HgMl9YwE7P2AAAAU0"]
[Tue Mar 31 10:46:22.773123 2026] [:error] [pid 36892:tid 36969] [client 158.158.51.236:61420] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a4.php"] [unique_id "acs1fkyj9S4G0ek3O4LzHwAAAJI"]
[Tue Mar 31 10:46:23.920475 2026] [:error] [pid 36892:tid 36954] [client 158.158.51.236:37251] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws77.php"] [unique_id "acs1f0yj9S4G0ek3O4LzJgAAAIM"]
[Tue Mar 31 10:46:24.860934 2026] [proxy_fcgi:error] [pid 36892:tid 36964] [client 158.158.51.236:44443] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 10:46:25.104339 2026] [proxy_fcgi:error] [pid 36892:tid 36970] [client 158.158.51.236:44443] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 10:46:25.348024 2026] [proxy_fcgi:error] [pid 36892:tid 36972] [client 158.158.51.236:44443] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 10:46:25.597496 2026] [proxy_fcgi:error] [pid 36892:tid 36965] [client 158.158.51.236:44443] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 10:46:25.852858 2026] [proxy_fcgi:error] [pid 36892:tid 36951] [client 158.158.51.236:44443] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 10:46:30.387309 2026] [proxy_fcgi:error] [pid 36892:tid 36972] [client 158.158.51.236:44443] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 10:46:32.107975 2026] [proxy_fcgi:error] [pid 36892:tid 36957] [client 158.158.51.236:44443] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 10:46:32.365250 2026] [proxy_fcgi:error] [pid 36892:tid 36973] [client 158.158.51.236:44443] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 10:46:32.612016 2026] [proxy_fcgi:error] [pid 36892:tid 36967] [client 158.158.51.236:44443] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 10:46:32.857353 2026] [proxy_fcgi:error] [pid 36892:tid 36954] [client 158.158.51.236:44443] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 10:46:33.099703 2026] [:error] [pid 36892:tid 36963] [client 158.158.51.236:44443] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/drhunthq.php"] [unique_id "acs1iUyj9S4G0ek3O4LzYQAAAIw"]
[Tue Mar 31 10:46:34.010271 2026] [:error] [pid 36892:tid 36955] [client 158.158.51.236:61463] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/drhunthq.php"] [unique_id "acs1ikyj9S4G0ek3O4LzZQAAAIQ"]
[Tue Mar 31 10:46:34.910739 2026] [:error] [pid 6548:tid 6566] [client 158.158.51.236:61438] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/drhunthq.php"] [unique_id "acs1irgIz9HgMl9YwE7QdQAAAVA"]
[Tue Mar 31 10:46:36.120441 2026] [:error] [pid 41421:tid 41433] [client 158.158.51.236:61405] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/drhunthq.php"] [unique_id "acs1jBSaDjY9kKFtUQCnNQAAAQk"]
[Tue Mar 31 10:46:37.111342 2026] [:error] [pid 36890:tid 36902] [client 158.158.51.236:3337] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/public/file.php"] [unique_id "acs1jZ8FASPd_uH8z7d2_QAAAAc"]
[Tue Mar 31 10:46:38.108075 2026] [:error] [pid 41421:tid 41426] [client 158.158.51.236:60153] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/public/file.php"] [unique_id "acs1jhSaDjY9kKFtUQCnOQAAAQI"]
[Tue Mar 31 10:46:38.925560 2026] [:error] [pid 36890:tid 36914] [client 158.158.51.236:44447] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/public/file.php"] [unique_id "acs1jp8FASPd_uH8z7d3AgAAABM"]
[Tue Mar 31 10:46:39.764003 2026] [:error] [pid 6548:tid 6560] [client 158.158.51.236:55073] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/public/file.php"] [unique_id "acs1j7gIz9HgMl9YwE7QfwAAAUo"]
[Tue Mar 31 10:46:40.343274 2026] [:error] [pid 6548:tid 6571] [client 158.158.51.236:50009] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xxw.php"] [unique_id "acs1kLgIz9HgMl9YwE7QggAAAVU"]
[Tue Mar 31 10:46:41.028946 2026] [:error] [pid 6548:tid 6573] [client 158.158.51.236:45029] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xxw.php"] [unique_id "acs1kbgIz9HgMl9YwE7QgwAAAVc"]
[Tue Mar 31 10:46:41.849360 2026] [:error] [pid 36892:tid 36953] [client 158.158.51.236:45021] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xxw.php"] [unique_id "acs1kUyj9S4G0ek3O4LzcAAAAII"]
[Tue Mar 31 10:46:42.624649 2026] [:error] [pid 41421:tid 41435] [client 158.158.51.236:45055] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xxw.php"] [unique_id "acs1khSaDjY9kKFtUQCnRQAAAQs"]
[Tue Mar 31 10:46:43.535932 2026] [:error] [pid 36982:tid 37004] [client 158.158.51.236:61886] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wen.php"] [unique_id "acs1k_lMmeoQKN0r_GPfzwAAANM"]
[Tue Mar 31 10:46:44.444438 2026] [:error] [pid 41421:tid 41433] [client 158.158.51.236:28626] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wen.php"] [unique_id "acs1lBSaDjY9kKFtUQCnTwAAAQk"]
[Tue Mar 31 10:46:45.126084 2026] [:error] [pid 6548:tid 6560] [client 158.158.51.236:60107] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wen.php"] [unique_id "acs1lbgIz9HgMl9YwE7QiwAAAUo"]
[Tue Mar 31 10:46:45.962064 2026] [:error] [pid 36982:tid 36986] [client 158.158.51.236:57601] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wen.php"] [unique_id "acs1lflMmeoQKN0r_GPf4gAAAME"]
[Tue Mar 31 10:46:46.602996 2026] [:error] [pid 36982:tid 36994] [client 158.158.51.236:28609] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws87.php"] [unique_id "acs1lvlMmeoQKN0r_GPf5wAAAMk"]
[Tue Mar 31 10:46:47.354067 2026] [:error] [pid 6548:tid 6559] [client 158.158.51.236:25038] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws87.php"] [unique_id "acs1l7gIz9HgMl9YwE7QkQAAAUk"]
[Tue Mar 31 10:46:48.155322 2026] [:error] [pid 6548:tid 6566] [client 158.158.51.236:38974] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws87.php"] [unique_id "acs1mLgIz9HgMl9YwE7QmgAAAVA"]
[Tue Mar 31 10:46:48.919167 2026] [:error] [pid 36982:tid 37005] [client 158.158.51.236:3389] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws87.php"] [unique_id "acs1mPlMmeoQKN0r_GPf8AAAANQ"]
[Tue Mar 31 10:46:49.605564 2026] [:error] [pid 36982:tid 37003] [client 158.158.51.236:61426] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lm15.php"] [unique_id "acs1mflMmeoQKN0r_GPf9AAAANI"]
[Tue Mar 31 10:46:50.385442 2026] [:error] [pid 36982:tid 36994] [client 158.158.51.236:45031] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lm15.php"] [unique_id "acs1mvlMmeoQKN0r_GPf9wAAAMk"]
[Tue Mar 31 10:46:51.231010 2026] [:error] [pid 36891:tid 36933] [client 158.158.51.236:61467] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lm15.php"] [unique_id "acs1m5JhiMaJUqoqfl5SFQAAAEk"]
[Tue Mar 31 10:46:52.219259 2026] [:error] [pid 6548:tid 6573] [client 158.158.51.236:58936] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lm15.php"] [unique_id "acs1nLgIz9HgMl9YwE7QswAAAVc"]
[Tue Mar 31 10:46:53.033906 2026] [:error] [pid 36891:tid 36935] [client 158.158.51.236:60123] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/green.php"] [unique_id "acs1nZJhiMaJUqoqfl5SGgAAAEs"]
[Tue Mar 31 10:46:53.717685 2026] [:error] [pid 6548:tid 6556] [client 158.158.51.236:52533] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/green.php"] [unique_id "acs1nbgIz9HgMl9YwE7QuwAAAUY"]
[Tue Mar 31 10:46:54.524065 2026] [:error] [pid 6548:tid 6570] [client 158.158.51.236:30120] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/green.php"] [unique_id "acs1nrgIz9HgMl9YwE7QxQAAAVQ"]
[Tue Mar 31 10:46:55.354215 2026] [:error] [pid 6548:tid 6556] [client 158.158.51.236:25078] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/green.php"] [unique_id "acs1n7gIz9HgMl9YwE7QyQAAAUY"]
[Tue Mar 31 10:46:56.453307 2026] [:error] [pid 6548:tid 6562] [client 158.158.51.236:58937] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/albin.php"] [unique_id "acs1oLgIz9HgMl9YwE7Q0AAAAUw"]
[Tue Mar 31 10:46:57.157973 2026] [:error] [pid 36891:tid 36940] [client 158.158.51.236:44421] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/albin.php"] [unique_id "acs1oZJhiMaJUqoqfl5SIQAAAFA"]
[Tue Mar 31 10:46:58.176958 2026] [:error] [pid 36982:tid 36986] [client 158.158.51.236:39014] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/albin.php"] [unique_id "acs1ovlMmeoQKN0r_GPgAQAAAME"]
[Tue Mar 31 10:46:59.186177 2026] [:error] [pid 36982:tid 36999] [client 158.158.51.236:22465] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/albin.php"] [unique_id "acs1o_lMmeoQKN0r_GPgCAAAAM4"]
[Tue Mar 31 10:46:59.802812 2026] [:error] [pid 36982:tid 37006] [client 158.158.51.236:47492] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/inputs.php"] [unique_id "acs1o_lMmeoQKN0r_GPgCQAAANU"]
[Tue Mar 31 10:47:00.457878 2026] [:error] [pid 36892:tid 36966] [client 158.158.51.236:3210] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/inputs.php"] [unique_id "acs1pEyj9S4G0ek3O4LzgQAAAI8"]
[Tue Mar 31 10:47:01.259470 2026] [:error] [pid 6548:tid 6569] [client 158.158.51.236:22483] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/inputs.php"] [unique_id "acs1pbgIz9HgMl9YwE7Q3AAAAVM"]
[Tue Mar 31 10:47:02.004785 2026] [:error] [pid 36892:tid 36967] [client 158.158.51.236:52490] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/inputs.php"] [unique_id "acs1pkyj9S4G0ek3O4LzhAAAAJA"]
[Tue Mar 31 10:47:02.868607 2026] [:error] [pid 36982:tid 36989] [client 158.158.51.236:61441] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/inege.php"] [unique_id "acs1pvlMmeoQKN0r_GPgFgAAAMQ"]
[Tue Mar 31 10:47:03.950926 2026] [:error] [pid 6548:tid 6560] [client 158.158.51.236:57603] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/inege.php"] [unique_id "acs1p7gIz9HgMl9YwE7Q3QAAAUo"]
[Tue Mar 31 10:47:04.694480 2026] [:error] [pid 41421:tid 41436] [client 158.158.51.236:30128] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/inege.php"] [unique_id "acs1qBSaDjY9kKFtUQCnbwAAAQw"]
[Tue Mar 31 10:47:05.360285 2026] [:error] [pid 36982:tid 37003] [client 158.158.51.236:3233] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/inege.php"] [unique_id "acs1qflMmeoQKN0r_GPgKAAAANI"]
[Tue Mar 31 10:47:06.128790 2026] [:error] [pid 36982:tid 36989] [client 158.158.51.236:63918] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gettest.php"] [unique_id "acs1qvlMmeoQKN0r_GPgLwAAAMQ"]
[Tue Mar 31 10:47:06.993678 2026] [:error] [pid 36982:tid 36991] [client 158.158.51.236:22513] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gettest.php"] [unique_id "acs1qvlMmeoQKN0r_GPgNQAAAMY"]
[Tue Mar 31 10:47:07.706677 2026] [:error] [pid 36982:tid 36997] [client 158.158.51.236:22526] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gettest.php"] [unique_id "acs1q_lMmeoQKN0r_GPgOwAAAMw"]
[Tue Mar 31 10:47:09.090524 2026] [:error] [pid 6548:tid 6564] [client 158.158.51.236:22507] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gettest.php"] [unique_id "acs1rbgIz9HgMl9YwE7Q4QAAAU4"]
[Tue Mar 31 10:47:09.699444 2026] [:error] [pid 36891:tid 36938] [client 158.158.51.236:64438] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ccs.php"] [unique_id "acs1rZJhiMaJUqoqfl5SMAAAAE4"]
[Tue Mar 31 10:47:10.454690 2026] [:error] [pid 36892:tid 36963] [client 158.158.51.236:22474] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ccs.php"] [unique_id "acs1rkyj9S4G0ek3O4LzjwAAAIw"]
[Tue Mar 31 10:47:11.556529 2026] [:error] [pid 6548:tid 6552] [client 158.158.51.236:64401] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ccs.php"] [unique_id "acs1r7gIz9HgMl9YwE7Q6AAAAUI"]
[Tue Mar 31 10:47:12.297459 2026] [:error] [pid 36982:tid 37003] [client 158.158.51.236:38931] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ccs.php"] [unique_id "acs1sPlMmeoQKN0r_GPgTAAAANI"]
[Tue Mar 31 10:47:13.067051 2026] [:error] [pid 6548:tid 6554] [client 158.158.51.236:58921] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/clss.php"] [unique_id "acs1sbgIz9HgMl9YwE7Q6wAAAUQ"]
[Tue Mar 31 10:47:13.910188 2026] [:error] [pid 36892:tid 36970] [client 158.158.51.236:30116] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/clss.php"] [unique_id "acs1sUyj9S4G0ek3O4LzlwAAAJM"]
[Tue Mar 31 10:47:14.725378 2026] [:error] [pid 36892:tid 36957] [client 158.158.51.236:64419] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/clss.php"] [unique_id "acs1skyj9S4G0ek3O4LzmwAAAIY"]
[Tue Mar 31 10:47:15.808165 2026] [:error] [pid 36982:tid 37001] [client 158.158.51.236:38990] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/clss.php"] [unique_id "acs1s_lMmeoQKN0r_GPgTwAAANA"]
[Tue Mar 31 10:47:16.768361 2026] [:error] [pid 6548:tid 6572] [client 158.158.51.236:52497] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/radio.php"] [unique_id "acs1tLgIz9HgMl9YwE7Q8wAAAVY"]
[Tue Mar 31 10:47:17.728295 2026] [:error] [pid 36891:tid 36938] [client 158.158.51.236:51279] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/radio.php"] [unique_id "acs1tZJhiMaJUqoqfl5SQAAAAE4"]
[Tue Mar 31 10:47:18.714169 2026] [:error] [pid 41421:tid 41438] [client 158.158.51.236:30104] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/radio.php"] [unique_id "acs1thSaDjY9kKFtUQCnfwAAAQ4"]
[Tue Mar 31 10:47:19.598977 2026] [:error] [pid 36982:tid 37008] [client 158.158.51.236:38950] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/radio.php"] [unique_id "acs1t_lMmeoQKN0r_GPgVgAAANc"]
[Tue Mar 31 10:47:20.502977 2026] [:error] [pid 36982:tid 36985] [client 158.158.51.236:44992] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-blog.php"] [unique_id "acs1uPlMmeoQKN0r_GPgWwAAAMA"]
[Tue Mar 31 10:47:21.930231 2026] [:error] [pid 36982:tid 37008] [client 158.158.51.236:3202] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-blog.php"] [unique_id "acs1uflMmeoQKN0r_GPgYAAAANc"]
[Tue Mar 31 10:47:23.228340 2026] [:error] [pid 36982:tid 37006] [client 158.158.51.236:45051] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-blog.php"] [unique_id "acs1u_lMmeoQKN0r_GPgaAAAANU"]
[Tue Mar 31 10:47:24.341832 2026] [:error] [pid 36982:tid 37009] [client 158.158.51.236:30102] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-blog.php"] [unique_id "acs1vPlMmeoQKN0r_GPgbAAAANg"]
[Tue Mar 31 10:47:25.270172 2026] [:error] [pid 36982:tid 36985] [client 158.158.51.236:61502] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/init.php"] [unique_id "acs1vflMmeoQKN0r_GPgdQAAAMA"]
[Tue Mar 31 10:47:26.230923 2026] [:error] [pid 36982:tid 36991] [client 158.158.51.236:22486] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/init.php"] [unique_id "acs1vvlMmeoQKN0r_GPgewAAAMY"]
[Tue Mar 31 10:47:26.857731 2026] [:error] [pid 6548:tid 6567] [client 158.158.51.236:20602] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/init.php"] [unique_id "acs1vrgIz9HgMl9YwE7RFAAAAVE"]
[Tue Mar 31 10:47:27.716208 2026] [:error] [pid 36982:tid 36990] [client 158.158.51.236:18554] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/init.php"] [unique_id "acs1v_lMmeoQKN0r_GPgjgAAAMU"]
[Tue Mar 31 10:47:29.025859 2026] [:error] [pid 36890:tid 36914] [client 158.158.51.236:22511] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wtiiy.php"] [unique_id "acs1wZ8FASPd_uH8z7d3KwAAABM"]
[Tue Mar 31 10:47:30.154439 2026] [:error] [pid 41421:tid 41434] [client 158.158.51.236:38919] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wtiiy.php"] [unique_id "acs1whSaDjY9kKFtUQCniAAAAQo"]
[Tue Mar 31 10:47:30.999122 2026] [:error] [pid 36982:tid 36986] [client 158.158.51.236:3396] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wtiiy.php"] [unique_id "acs1wvlMmeoQKN0r_GPgngAAAME"]
[Tue Mar 31 10:47:32.144081 2026] [proxy_fcgi:error] [pid 36890:tid 36913] [client 158.158.51.236:35538] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 10:47:32.388450 2026] [proxy_fcgi:error] [pid 36890:tid 36905] [client 158.158.51.236:35538] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 10:47:32.651011 2026] [proxy_fcgi:error] [pid 36890:tid 36906] [client 158.158.51.236:35538] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 10:47:33.144773 2026] [proxy_fcgi:error] [pid 36890:tid 36911] [client 158.158.51.236:35538] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 10:47:33.392779 2026] [proxy_fcgi:error] [pid 36890:tid 36904] [client 158.158.51.236:35538] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 10:47:33.639823 2026] [proxy_fcgi:error] [pid 36890:tid 36914] [client 158.158.51.236:35538] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 10:47:33.901951 2026] [proxy_fcgi:error] [pid 36890:tid 36909] [client 158.158.51.236:35538] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 10:47:34.159459 2026] [proxy_fcgi:error] [pid 36890:tid 36902] [client 158.158.51.236:35538] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 10:47:34.403685 2026] [proxy_fcgi:error] [pid 36890:tid 36896] [client 158.158.51.236:35538] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 10:47:34.649328 2026] [proxy_fcgi:error] [pid 36890:tid 36907] [client 158.158.51.236:35538] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 10:47:34.890464 2026] [:error] [pid 36890:tid 36910] [client 158.158.51.236:35538] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/okxh.php"] [unique_id "acs1xp8FASPd_uH8z7d3QQAAAA8"]
[Tue Mar 31 10:47:36.279806 2026] [:error] [pid 36892:tid 36960] [client 158.158.51.236:22523] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/okxh.php"] [unique_id "acs1yEyj9S4G0ek3O4LztAAAAIk"]
[Tue Mar 31 10:47:37.324330 2026] [:error] [pid 36982:tid 37002] [client 158.158.51.236:52520] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/okxh.php"] [unique_id "acs1yflMmeoQKN0r_GPgsgAAANE"]
[Tue Mar 31 10:47:38.683219 2026] [:error] [pid 36982:tid 37007] [client 158.158.51.236:20603] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/okxh.php"] [unique_id "acs1yvlMmeoQKN0r_GPgvAAAANY"]
[Tue Mar 31 10:47:39.508861 2026] [:error] [pid 36982:tid 37009] [client 158.158.51.236:35523] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lib.php"] [unique_id "acs1y_lMmeoQKN0r_GPgwwAAANg"]
[Tue Mar 31 10:47:40.368083 2026] [:error] [pid 6548:tid 6558] [client 158.158.51.236:63888] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lib.php"] [unique_id "acs1zLgIz9HgMl9YwE7RMQAAAUg"]
[Tue Mar 31 10:47:41.376383 2026] [:error] [pid 41421:tid 41444] [client 158.158.51.236:22421] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lib.php"] [unique_id "acs1zRSaDjY9kKFtUQCnlQAAARQ"]
[Tue Mar 31 10:47:42.153580 2026] [:error] [pid 36890:tid 36906] [client 158.158.51.236:30121] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lib.php"] [unique_id "acs1zp8FASPd_uH8z7d3TgAAAAs"]
[Tue Mar 31 10:47:42.716429 2026] [:error] [pid 36891:tid 36925] [client 158.158.51.236:43329] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zc-104.php"] [unique_id "acs1zpJhiMaJUqoqfl5SVQAAAEE"]
[Tue Mar 31 10:47:43.594040 2026] [:error] [pid 36890:tid 36918] [client 158.158.51.236:30081] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zc-104.php"] [unique_id "acs1z58FASPd_uH8z7d3WgAAABc"]
[Tue Mar 31 10:47:44.291153 2026] [:error] [pid 41421:tid 41436] [client 158.158.51.236:64391] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zc-104.php"] [unique_id "acs10BSaDjY9kKFtUQCnlwAAAQw"]
[Tue Mar 31 10:47:44.937382 2026] [:error] [pid 36892:tid 36968] [client 158.158.51.236:51284] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zc-104.php"] [unique_id "acs10Eyj9S4G0ek3O4LzvQAAAJE"]
[Tue Mar 31 10:47:45.773976 2026] [:error] [pid 36982:tid 37000] [client 158.158.51.236:52525] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws86.php"] [unique_id "acs10flMmeoQKN0r_GPg9gAAAM8"]
[Tue Mar 31 10:47:46.345750 2026] [:error] [pid 41421:tid 41429] [client 158.158.51.236:63898] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws86.php"] [unique_id "acs10hSaDjY9kKFtUQCnnAAAAQU"]
[Tue Mar 31 10:47:47.386063 2026] [:error] [pid 36982:tid 36993] [client 158.158.51.236:30130] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws86.php"] [unique_id "acs10_lMmeoQKN0r_GPg_QAAAMg"]
[Tue Mar 31 10:47:48.375428 2026] [:error] [pid 36890:tid 36916] [client 158.158.51.236:22406] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws86.php"] [unique_id "acs11J8FASPd_uH8z7d3aQAAABU"]
[Tue Mar 31 10:47:49.307601 2026] [:error] [pid 36891:tid 36935] [client 158.158.51.236:35535] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-blogs.php"] [unique_id "acs11ZJhiMaJUqoqfl5SYgAAAEs"]
[Tue Mar 31 10:47:50.058879 2026] [:error] [pid 41421:tid 41424] [client 158.158.51.236:3406] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-blogs.php"] [unique_id "acs11hSaDjY9kKFtUQCnqAAAAQA"]
[Tue Mar 31 10:47:50.809373 2026] [:error] [pid 36982:tid 36998] [client 158.158.51.236:51278] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-blogs.php"] [unique_id "acs11vlMmeoQKN0r_GPhCgAAAM0"]
[Tue Mar 31 10:47:51.380948 2026] [:error] [pid 36982:tid 36989] [client 158.158.51.236:51327] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-blogs.php"] [unique_id "acs11_lMmeoQKN0r_GPhCwAAAMQ"]
[Tue Mar 31 10:47:52.172602 2026] [:error] [pid 41421:tid 41439] [client 158.158.51.236:22490] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/as.php"] [unique_id "acs12BSaDjY9kKFtUQCnrwAAAQ8"]
[Tue Mar 31 10:47:53.782058 2026] [:error] [pid 6548:tid 6551] [client 158.158.51.236:57654] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/as.php"] [unique_id "acs12bgIz9HgMl9YwE7RUwAAAUE"]
[Tue Mar 31 10:47:55.844862 2026] [:error] [pid 41421:tid 41430] [client 158.158.51.236:52492] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/as.php"] [unique_id "acs12xSaDjY9kKFtUQCnswAAAQY"]
[Tue Mar 31 10:47:58.147017 2026] [:error] [pid 36982:tid 36996] [client 158.158.51.236:3225] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/as.php"] [unique_id "acs13vlMmeoQKN0r_GPhJAAAAMs"]
[Tue Mar 31 10:47:59.114105 2026] [:error] [pid 41421:tid 41442] [client 158.158.51.236:3409] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Cap.php"] [unique_id "acs13xSaDjY9kKFtUQCnuAAAARI"]
[Tue Mar 31 10:47:59.970170 2026] [:error] [pid 36890:tid 36898] [client 158.158.51.236:20544] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Cap.php"] [unique_id "acs1358FASPd_uH8z7d3fgAAAAM"]
[Tue Mar 31 10:48:01.082814 2026] [:error] [pid 36982:tid 36988] [client 158.158.51.236:39013] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Cap.php"] [unique_id "acs14flMmeoQKN0r_GPhMwAAAMM"]
[Tue Mar 31 10:48:02.584957 2026] [:error] [pid 6548:tid 6550] [client 158.158.51.236:20583] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Cap.php"] [unique_id "acs14rgIz9HgMl9YwE7RdgAAAUA"]
[Tue Mar 31 10:48:03.709588 2026] [:error] [pid 36982:tid 37006] [client 158.158.51.236:22412] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xfun.php"] [unique_id "acs14_lMmeoQKN0r_GPhQwAAANU"]
[Tue Mar 31 10:48:04.437569 2026] [:error] [pid 6548:tid 6564] [client 158.158.51.236:3238] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xfun.php"] [unique_id "acs15LgIz9HgMl9YwE7RfwAAAU4"]
[Tue Mar 31 10:48:05.160098 2026] [:error] [pid 36890:tid 36900] [client 158.158.51.236:23429] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xfun.php"] [unique_id "acs15Z8FASPd_uH8z7d3mwAAAAU"]
[Tue Mar 31 10:48:06.082406 2026] [:error] [pid 36890:tid 36910] [client 158.158.51.236:63885] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xfun.php"] [unique_id "acs15p8FASPd_uH8z7d3owAAAA8"]
[Tue Mar 31 10:48:06.904725 2026] [:error] [pid 36982:tid 37001] [client 158.158.51.236:20558] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bjfl.php"] [unique_id "acs15vlMmeoQKN0r_GPhVgAAANA"]
[Tue Mar 31 10:48:08.031750 2026] [:error] [pid 36982:tid 37006] [client 158.158.51.236:51268] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bjfl.php"] [unique_id "acs16PlMmeoQKN0r_GPhYQAAANU"]
[Tue Mar 31 10:48:09.407985 2026] [:error] [pid 36982:tid 37004] [client 158.158.51.236:23477] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bjfl.php"] [unique_id "acs16flMmeoQKN0r_GPhbQAAANM"]
[Tue Mar 31 10:48:10.482248 2026] [:error] [pid 6548:tid 6561] [client 158.158.51.236:22451] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bjfl.php"] [unique_id "acs16rgIz9HgMl9YwE7RoAAAAUs"]
[Tue Mar 31 10:48:11.855803 2026] [:error] [pid 6548:tid 6553] [client 158.158.51.236:20561] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/155.php"] [unique_id "acs167gIz9HgMl9YwE7RqgAAAUM"]
[Tue Mar 31 10:48:12.575680 2026] [:error] [pid 36982:tid 37009] [client 158.158.51.236:18523] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/155.php"] [unique_id "acs17PlMmeoQKN0r_GPhgwAAANg"]
[Tue Mar 31 10:48:13.543134 2026] [:error] [pid 36982:tid 37009] [client 158.158.51.236:57630] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/155.php"] [unique_id "acs17flMmeoQKN0r_GPhigAAANg"]
[Tue Mar 31 10:48:14.369789 2026] [:error] [pid 41421:tid 41434] [client 158.158.51.236:22466] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/155.php"] [unique_id "acs17hSaDjY9kKFtUQCn6QAAAQo"]
[Tue Mar 31 10:48:15.085802 2026] [:error] [pid 36982:tid 37001] [client 158.158.51.236:22435] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rzki.php"] [unique_id "acs17_lMmeoQKN0r_GPhlwAAANA"]
[Tue Mar 31 10:48:16.342052 2026] [:error] [pid 36982:tid 37002] [client 158.158.51.236:23460] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rzki.php"] [unique_id "acs18PlMmeoQKN0r_GPhngAAANE"]
[Tue Mar 31 10:48:17.437537 2026] [:error] [pid 6548:tid 6570] [client 158.158.51.236:35572] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rzki.php"] [unique_id "acs18bgIz9HgMl9YwE7RtQAAAVQ"]
[Tue Mar 31 10:48:20.682697 2026] [:error] [pid 6548:tid 6560] [client 158.158.51.236:64439] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rzki.php"] [unique_id "acs19LgIz9HgMl9YwE7RvAAAAUo"]
[Tue Mar 31 10:48:21.624890 2026] [:error] [pid 36891:tid 36940] [client 158.158.51.236:27015] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/classwithtostring.php"] [unique_id "acs19ZJhiMaJUqoqfl5SkgAAAFA"]
[Tue Mar 31 10:48:22.304900 2026] [:error] [pid 6548:tid 6570] [client 158.158.51.236:18538] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/classwithtostring.php"] [unique_id "acs19rgIz9HgMl9YwE7RvgAAAVQ"]
[Tue Mar 31 10:48:23.625907 2026] [:error] [pid 36891:tid 36933] [client 158.158.51.236:52500] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/classwithtostring.php"] [unique_id "acs195JhiMaJUqoqfl5SlQAAAEk"]
[Tue Mar 31 10:48:24.357507 2026] [:error] [pid 36890:tid 36901] [client 158.158.51.236:64447] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/classwithtostring.php"] [unique_id "acs1-J8FASPd_uH8z7d4IwAAAAY"]
[Tue Mar 31 10:48:25.361811 2026] [:error] [pid 6548:tid 6569] [client 158.158.51.236:35561] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws49.php"] [unique_id "acs1-bgIz9HgMl9YwE7RxwAAAVM"]
[Tue Mar 31 10:48:26.281632 2026] [:error] [pid 36982:tid 37009] [client 158.158.51.236:35536] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws49.php"] [unique_id "acs1-vlMmeoQKN0r_GPhpwAAANg"]
[Tue Mar 31 10:48:26.949577 2026] [:error] [pid 41421:tid 41436] [client 158.158.51.236:18533] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws49.php"] [unique_id "acs1-hSaDjY9kKFtUQCn_AAAAQw"]
[Tue Mar 31 10:48:27.819295 2026] [:error] [pid 36982:tid 36987] [client 158.158.51.236:20580] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws49.php"] [unique_id "acs1-_lMmeoQKN0r_GPhqQAAAMI"]
[Tue Mar 31 10:48:28.684756 2026] [:error] [pid 6548:tid 6572] [client 158.158.51.236:27018] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tool.php"] [unique_id "acs1_LgIz9HgMl9YwE7RygAAAVY"]
[Tue Mar 31 10:48:29.751111 2026] [:error] [pid 36892:tid 36956] [client 158.158.51.236:20563] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tool.php"] [unique_id "acs1_Uyj9S4G0ek3O4Lz7AAAAIU"]
[Tue Mar 31 10:48:30.432469 2026] [:error] [pid 36892:tid 36970] [client 158.158.51.236:36185] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tool.php"] [unique_id "acs1_kyj9S4G0ek3O4Lz7gAAAJM"]
[Tue Mar 31 10:48:31.099380 2026] [:error] [pid 36892:tid 36954] [client 158.158.51.236:22454] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tool.php"] [unique_id "acs1_0yj9S4G0ek3O4Lz8gAAAIM"]
[Tue Mar 31 10:48:31.685819 2026] [:error] [pid 6548:tid 6560] [client 158.158.51.236:57627] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ww.php"] [unique_id "acs1_7gIz9HgMl9YwE7RywAAAUo"]
[Tue Mar 31 10:48:32.531497 2026] [:error] [pid 6548:tid 6573] [client 158.158.51.236:65488] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ww.php"] [unique_id "acs2ALgIz9HgMl9YwE7R0gAAAVc"]
[Tue Mar 31 10:48:33.177050 2026] [:error] [pid 36891:tid 36933] [client 158.158.51.236:17516] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ww.php"] [unique_id "acs2AZJhiMaJUqoqfl5SnwAAAEk"]
[Tue Mar 31 10:48:34.395016 2026] [proxy_fcgi:error] [pid 36982:tid 36992] [client 158.158.51.236:64441] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 10:48:35.963042 2026] [proxy_fcgi:error] [pid 36982:tid 36987] [client 158.158.51.236:64441] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 10:48:36.206000 2026] [proxy_fcgi:error] [pid 36982:tid 36998] [client 158.158.51.236:64441] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 10:48:36.494196 2026] [proxy_fcgi:error] [pid 36982:tid 36994] [client 158.158.51.236:64441] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 10:48:36.739837 2026] [proxy_fcgi:error] [pid 36982:tid 37001] [client 158.158.51.236:64441] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 10:48:36.993686 2026] [proxy_fcgi:error] [pid 36982:tid 37007] [client 158.158.51.236:64441] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 10:48:37.238135 2026] [proxy_fcgi:error] [pid 36982:tid 36990] [client 158.158.51.236:64441] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 10:48:37.492126 2026] [proxy_fcgi:error] [pid 36982:tid 36991] [client 158.158.51.236:64441] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 10:48:37.733770 2026] [proxy_fcgi:error] [pid 36982:tid 37000] [client 158.158.51.236:64441] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 10:48:37.987272 2026] [proxy_fcgi:error] [pid 36982:tid 37006] [client 158.158.51.236:64441] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 10:48:38.230576 2026] [proxy_fcgi:error] [pid 36982:tid 37003] [client 158.158.51.236:64441] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 10:48:38.469439 2026] [:error] [pid 36982:tid 36985] [client 158.158.51.236:64441] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/public/wp-blog.php"] [unique_id "acs2BvlMmeoQKN0r_GPhwgAAAMA"]
[Tue Mar 31 10:48:39.281778 2026] [:error] [pid 36890:tid 36916] [client 158.158.51.236:65490] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/public/wp-blog.php"] [unique_id "acs2B58FASPd_uH8z7d4NAAAABU"]
[Tue Mar 31 10:48:40.031073 2026] [:error] [pid 36982:tid 37009] [client 158.158.51.236:17484] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/public/wp-blog.php"] [unique_id "acs2CPlMmeoQKN0r_GPhxgAAANg"]
[Tue Mar 31 10:48:41.023363 2026] [:error] [pid 36982:tid 36992] [client 158.158.51.236:27561] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/public/wp-blog.php"] [unique_id "acs2CflMmeoQKN0r_GPhzAAAAMc"]
[Tue Mar 31 10:48:41.819927 2026] [:error] [pid 41421:tid 41435] [client 158.158.51.236:27629] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws88.php"] [unique_id "acs2CRSaDjY9kKFtUQCoFAAAAQs"]
[Tue Mar 31 10:48:42.519484 2026] [:error] [pid 36982:tid 36986] [client 158.158.51.236:17514] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws88.php"] [unique_id "acs2CvlMmeoQKN0r_GPh0AAAAME"]
[Tue Mar 31 10:48:43.328295 2026] [:error] [pid 36982:tid 36985] [client 158.158.51.236:63264] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws88.php"] [unique_id "acs2C_lMmeoQKN0r_GPh1gAAAMA"]
[Tue Mar 31 10:48:44.247068 2026] [:error] [pid 6548:tid 6572] [client 158.158.51.236:25592] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws88.php"] [unique_id "acs2DLgIz9HgMl9YwE7R3AAAAVY"]
[Tue Mar 31 10:48:45.368859 2026] [:error] [pid 36890:tid 36909] [client 158.158.51.236:19483] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/csv.php"] [unique_id "acs2DZ8FASPd_uH8z7d4NwAAAA4"]
[Tue Mar 31 10:48:46.796068 2026] [:error] [pid 41421:tid 41441] [client 158.158.51.236:19503] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/csv.php"] [unique_id "acs2DhSaDjY9kKFtUQCoKgAAARE"]
[Tue Mar 31 10:48:47.431203 2026] [:error] [pid 36892:tid 36964] [client 158.158.51.236:25547] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/csv.php"] [unique_id "acs2D0yj9S4G0ek3O4L0AwAAAI0"]
[Tue Mar 31 10:48:48.589347 2026] [:error] [pid 36891:tid 36933] [client 158.158.51.236:3692] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/csv.php"] [unique_id "acs2EJJhiMaJUqoqfl5SuQAAAEk"]
[Tue Mar 31 10:48:49.454499 2026] [:error] [pid 36890:tid 36912] [client 158.158.51.236:40555] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/varb.php"] [unique_id "acs2EZ8FASPd_uH8z7d4PAAAABE"]
[Tue Mar 31 10:48:50.141292 2026] [:error] [pid 36890:tid 36899] [client 158.158.51.236:22961] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/varb.php"] [unique_id "acs2Ep8FASPd_uH8z7d4PgAAAAQ"]
[Tue Mar 31 10:48:51.140912 2026] [:error] [pid 36891:tid 36931] [client 158.158.51.236:46053] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/varb.php"] [unique_id "acs2E5JhiMaJUqoqfl5SvwAAAEc"]
[Tue Mar 31 10:48:51.756108 2026] [:error] [pid 36982:tid 36990] [client 158.158.51.236:46030] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/varb.php"] [unique_id "acs2E_lMmeoQKN0r_GPh6wAAAMU"]
[Tue Mar 31 10:48:52.392378 2026] [:error] [pid 36891:tid 36937] [client 158.158.51.236:19979] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/8573.php"] [unique_id "acs2FJJhiMaJUqoqfl5SyAAAAE0"]
[Tue Mar 31 10:48:53.234942 2026] [:error] [pid 6548:tid 6573] [client 158.158.51.236:52908] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/8573.php"] [unique_id "acs2FbgIz9HgMl9YwE7R5wAAAVc"]
[Tue Mar 31 10:48:54.067095 2026] [:error] [pid 36891:tid 36941] [client 158.158.51.236:34391] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/8573.php"] [unique_id "acs2FpJhiMaJUqoqfl5SyQAAAFE"]
[Tue Mar 31 10:48:54.760334 2026] [:error] [pid 36982:tid 36990] [client 158.158.51.236:3488] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/8573.php"] [unique_id "acs2FvlMmeoQKN0r_GPh9AAAAMU"]
[Tue Mar 31 10:48:56.468061 2026] [:error] [pid 6548:tid 6559] [client 158.158.51.236:47599] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/abc.php"] [unique_id "acs2GLgIz9HgMl9YwE7R7wAAAUk"]
[Tue Mar 31 10:48:58.762927 2026] [:error] [pid 36891:tid 36935] [client 158.158.51.236:52870] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/abc.php"] [unique_id "acs2GpJhiMaJUqoqfl5SzgAAAEs"]
[Tue Mar 31 10:49:00.334619 2026] [:error] [pid 36982:tid 37000] [client 158.158.51.236:59498] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/abc.php"] [unique_id "acs2HPlMmeoQKN0r_GPiBQAAAM8"]
[Tue Mar 31 10:49:01.221694 2026] [:error] [pid 36891:tid 36924] [client 158.158.51.236:59517] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/abc.php"] [unique_id "acs2HZJhiMaJUqoqfl5S0QAAAEA"]
[Tue Mar 31 10:49:02.642208 2026] [:error] [pid 36892:tid 36975] [client 158.158.51.236:46553] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-png.php"] [unique_id "acs2Hkyj9S4G0ek3O4L0DwAAAJg"]
[Tue Mar 31 10:49:03.896913 2026] [:error] [pid 36891:tid 36948] [client 158.158.51.236:24571] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-png.php"] [unique_id "acs2H5JhiMaJUqoqfl5S2QAAAFg"]
[Tue Mar 31 10:49:05.048938 2026] [:error] [pid 36982:tid 37004] [client 158.158.51.236:51963] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-png.php"] [unique_id "acs2IflMmeoQKN0r_GPiDAAAANM"]
[Tue Mar 31 10:49:05.995799 2026] [:error] [pid 36982:tid 37009] [client 158.158.51.236:37332] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-png.php"] [unique_id "acs2IflMmeoQKN0r_GPiEQAAANg"]
[Tue Mar 31 10:49:06.762196 2026] [:error] [pid 36982:tid 36997] [client 158.158.51.236:60161] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jp.php"] [unique_id "acs2IvlMmeoQKN0r_GPiFgAAAMw"]
[Tue Mar 31 10:49:07.501808 2026] [:error] [pid 41421:tid 41429] [client 158.158.51.236:52577] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jp.php"] [unique_id "acs2IxSaDjY9kKFtUQCoTAAAAQU"]
[Tue Mar 31 10:49:08.274506 2026] [:error] [pid 41421:tid 41430] [client 158.158.51.236:51950] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jp.php"] [unique_id "acs2JBSaDjY9kKFtUQCoTgAAAQY"]
[Tue Mar 31 10:49:09.339942 2026] [:error] [pid 41421:tid 41443] [client 158.158.51.236:29582] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jp.php"] [unique_id "acs2JRSaDjY9kKFtUQCoVQAAARM"]
[Tue Mar 31 10:49:10.036866 2026] [:error] [pid 36890:tid 36907] [client 158.158.51.236:25526] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tfm.php"] [unique_id "acs2Jp8FASPd_uH8z7d4WgAAAAw"]
[Tue Mar 31 10:49:10.769873 2026] [:error] [pid 36890:tid 36895] [client 158.158.51.236:52581] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tfm.php"] [unique_id "acs2Jp8FASPd_uH8z7d4XwAAAAA"]
[Tue Mar 31 10:49:11.687392 2026] [:error] [pid 36982:tid 36995] [client 158.158.51.236:25504] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tfm.php"] [unique_id "acs2J_lMmeoQKN0r_GPiLwAAAMo"]
[Tue Mar 31 10:49:12.433186 2026] [:error] [pid 41421:tid 41437] [client 158.158.51.236:51873] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tfm.php"] [unique_id "acs2KBSaDjY9kKFtUQCoYQAAAQ0"]
[Tue Mar 31 10:49:13.275976 2026] [:error] [pid 36982:tid 37001] [client 158.158.51.236:29631] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin-footer.php"] [unique_id "acs2KflMmeoQKN0r_GPiNgAAANA"]
[Tue Mar 31 10:49:14.241661 2026] [:error] [pid 36890:tid 36900] [client 158.158.51.236:51924] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin-footer.php"] [unique_id "acs2Kp8FASPd_uH8z7d4ZgAAAAU"]
[Tue Mar 31 10:49:15.811335 2026] [:error] [pid 36891:tid 36924] [client 158.158.51.236:54989] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin-footer.php"] [unique_id "acs2K5JhiMaJUqoqfl5S2wAAAEA"]
[Tue Mar 31 10:49:18.343349 2026] [:error] [pid 36890:tid 36917] [client 158.158.51.236:51955] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin-footer.php"] [unique_id "acs2Lp8FASPd_uH8z7d4agAAABY"]
[Tue Mar 31 18:00:24.404888 2026] [proxy_fcgi:error] [pid 36982:tid 36998] [client 72.146.3.52:10329] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:00:24.640770 2026] [proxy_fcgi:error] [pid 36982:tid 37005] [client 72.146.3.52:10329] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:00:24.877384 2026] [proxy_fcgi:error] [pid 36982:tid 37008] [client 72.146.3.52:10329] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:00:26.594570 2026] [proxy_fcgi:error] [pid 36982:tid 37001] [client 72.146.3.52:10329] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:00:26.833128 2026] [proxy_fcgi:error] [pid 36982:tid 36997] [client 72.146.3.52:10329] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:00:27.069696 2026] [proxy_fcgi:error] [pid 36982:tid 36998] [client 72.146.3.52:10329] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:00:27.311130 2026] [proxy_fcgi:error] [pid 36982:tid 36990] [client 72.146.3.52:10329] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:00:27.550396 2026] [proxy_fcgi:error] [pid 36982:tid 36992] [client 72.146.3.52:10329] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:00:27.787204 2026] [proxy_fcgi:error] [pid 36982:tid 36987] [client 72.146.3.52:10329] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:00:28.026487 2026] [proxy_fcgi:error] [pid 36982:tid 36988] [client 72.146.3.52:10329] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:00:28.259347 2026] [:error] [pid 36982:tid 37009] [client 72.146.3.52:10329] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-true.php"] [unique_id "acubPPlMmeoQKN0r_GNceQAAANg"]
[Tue Mar 31 18:00:28.755750 2026] [:error] [pid 41421:tid 41436] [client 72.146.3.52:10358] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-true.php"] [unique_id "acubPBSaDjY9kKFtUQBnKgAAAQw"]
[Tue Mar 31 18:00:29.225589 2026] [:error] [pid 6548:tid 6556] [client 72.146.3.52:10264] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-true.php"] [unique_id "acubPbgIz9HgMl9YwE7lmgAAAUY"]
[Tue Mar 31 18:00:29.691470 2026] [:error] [pid 6548:tid 6554] [client 72.146.3.52:10334] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-true.php"] [unique_id "acubPbgIz9HgMl9YwE7lowAAAUQ"]
[Tue Mar 31 18:00:30.159904 2026] [:error] [pid 36892:tid 36959] [client 72.146.3.52:10335] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws42.php"] [unique_id "acubPkyj9S4G0ek3O4JuxAAAAIg"]
[Tue Mar 31 18:00:30.628723 2026] [:error] [pid 6548:tid 6565] [client 72.146.3.52:10341] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws42.php"] [unique_id "acubPrgIz9HgMl9YwE7lqAAAAU8"]
[Tue Mar 31 18:00:31.106701 2026] [:error] [pid 6548:tid 6557] [client 72.146.3.52:10244] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws42.php"] [unique_id "acubP7gIz9HgMl9YwE7lqwAAAUc"]
[Tue Mar 31 18:00:31.579408 2026] [:error] [pid 6548:tid 6571] [client 72.146.3.52:10308] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws42.php"] [unique_id "acubP7gIz9HgMl9YwE7lrQAAAVU"]
[Tue Mar 31 18:00:32.054753 2026] [:error] [pid 41421:tid 41436] [client 72.146.3.52:10304] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/66.php"] [unique_id "acubQBSaDjY9kKFtUQBnPQAAAQw"]
[Tue Mar 31 18:00:32.520779 2026] [:error] [pid 6548:tid 6571] [client 72.146.3.52:10178] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/66.php"] [unique_id "acubQLgIz9HgMl9YwE7ltAAAAVU"]
[Tue Mar 31 18:00:32.995229 2026] [:error] [pid 41421:tid 41443] [client 72.146.3.52:10345] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/66.php"] [unique_id "acubQBSaDjY9kKFtUQBnQwAAARM"]
[Tue Mar 31 18:00:33.461393 2026] [:error] [pid 6548:tid 6571] [client 72.146.3.52:10318] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/66.php"] [unique_id "acubQbgIz9HgMl9YwE7lwQAAAVU"]
[Tue Mar 31 18:00:33.930764 2026] [:error] [pid 6548:tid 6560] [client 72.146.3.52:10247] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wgift1.php"] [unique_id "acubQbgIz9HgMl9YwE7lxQAAAUo"]
[Tue Mar 31 18:00:34.396162 2026] [:error] [pid 36982:tid 36999] [client 72.146.3.52:10359] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wgift1.php"] [unique_id "acubQvlMmeoQKN0r_GNcjQAAAM4"]
[Tue Mar 31 18:00:34.861224 2026] [:error] [pid 36982:tid 37008] [client 72.146.3.52:10363] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wgift1.php"] [unique_id "acubQvlMmeoQKN0r_GNcjwAAANc"]
[Tue Mar 31 18:00:35.325814 2026] [:error] [pid 6548:tid 6550] [client 72.146.3.52:10249] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wgift1.php"] [unique_id "acubQ7gIz9HgMl9YwE7l0AAAAUA"]
[Tue Mar 31 18:00:35.789721 2026] [:error] [pid 6548:tid 6568] [client 72.146.3.52:10317] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aa.php"] [unique_id "acubQ7gIz9HgMl9YwE7l3AAAAVI"]
[Tue Mar 31 18:00:36.252992 2026] [:error] [pid 36892:tid 36957] [client 72.146.3.52:10353] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aa.php"] [unique_id "acubREyj9S4G0ek3O4JuxwAAAIY"]
[Tue Mar 31 18:00:36.718401 2026] [:error] [pid 6548:tid 6563] [client 72.146.3.52:10267] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aa.php"] [unique_id "acubRLgIz9HgMl9YwE7l9QAAAU0"]
[Tue Mar 31 18:00:37.185248 2026] [:error] [pid 41421:tid 41425] [client 72.146.3.52:10333] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aa.php"] [unique_id "acubRRSaDjY9kKFtUQBnRwAAAQE"]
[Tue Mar 31 18:00:37.654649 2026] [:error] [pid 36982:tid 37006] [client 72.146.3.52:10252] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/north1.php"] [unique_id "acubRflMmeoQKN0r_GNcpwAAANU"]
[Tue Mar 31 18:00:38.133153 2026] [:error] [pid 36982:tid 36987] [client 72.146.3.52:10364] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/north1.php"] [unique_id "acubRvlMmeoQKN0r_GNcqwAAAMI"]
[Tue Mar 31 18:00:38.609608 2026] [:error] [pid 41421:tid 41431] [client 72.146.3.52:10350] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/north1.php"] [unique_id "acubRhSaDjY9kKFtUQBnSQAAAQc"]
[Tue Mar 31 18:00:39.077515 2026] [:error] [pid 36890:tid 36896] [client 72.146.3.52:10280] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/north1.php"] [unique_id "acubR58FASPd_uH8z7cOawAAAAE"]
[Tue Mar 31 18:00:39.548398 2026] [:error] [pid 36890:tid 36895] [client 72.146.3.52:10256] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/eee.php"] [unique_id "acubR58FASPd_uH8z7cObAAAAAA"]
[Tue Mar 31 18:00:40.016251 2026] [:error] [pid 36982:tid 36994] [client 72.146.3.52:10356] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/eee.php"] [unique_id "acubSPlMmeoQKN0r_GNcrgAAAMk"]
[Tue Mar 31 18:00:40.485105 2026] [:error] [pid 36890:tid 36903] [client 72.146.3.52:10357] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/eee.php"] [unique_id "acubSJ8FASPd_uH8z7cOcQAAAAg"]
[Tue Mar 31 18:00:40.952613 2026] [:error] [pid 36982:tid 36985] [client 72.146.3.52:10352] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/eee.php"] [unique_id "acubSPlMmeoQKN0r_GNcsAAAAMA"]
[Tue Mar 31 18:00:41.424348 2026] [:error] [pid 36890:tid 36909] [client 72.146.3.52:10344] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ggb.php"] [unique_id "acubSZ8FASPd_uH8z7cOcwAAAA4"]
[Tue Mar 31 18:00:41.891542 2026] [:error] [pid 36982:tid 37001] [client 72.146.3.52:10288] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ggb.php"] [unique_id "acubSflMmeoQKN0r_GNcswAAANA"]
[Tue Mar 31 18:00:42.368802 2026] [:error] [pid 6548:tid 6570] [client 72.146.3.52:10283] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ggb.php"] [unique_id "acubSrgIz9HgMl9YwE7mEAAAAVQ"]
[Tue Mar 31 18:00:42.846131 2026] [:error] [pid 6548:tid 6558] [client 72.146.3.52:10355] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ggb.php"] [unique_id "acubSrgIz9HgMl9YwE7mFgAAAUg"]
[Tue Mar 31 18:00:43.320711 2026] [:error] [pid 6548:tid 6551] [client 72.146.3.52:10366] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/admin.php"] [unique_id "acubS7gIz9HgMl9YwE7mIAAAAUE"]
[Tue Mar 31 18:00:43.815571 2026] [:error] [pid 6548:tid 6557] [client 72.146.3.52:10311] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/admin.php"] [unique_id "acubS7gIz9HgMl9YwE7mJwAAAUc"]
[Tue Mar 31 18:00:44.442195 2026] [:error] [pid 6548:tid 6573] [client 72.146.3.52:10346] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/admin.php"] [unique_id "acubTLgIz9HgMl9YwE7mLwAAAVc"]
[Tue Mar 31 18:00:44.917915 2026] [:error] [pid 6548:tid 6572] [client 72.146.3.52:10365] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/admin.php"] [unique_id "acubTLgIz9HgMl9YwE7mNQAAAVY"]
[Tue Mar 31 18:00:45.386155 2026] [:error] [pid 6548:tid 6551] [client 72.146.3.52:10202] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws77.php"] [unique_id "acubTbgIz9HgMl9YwE7mPQAAAUE"]
[Tue Mar 31 18:00:45.858495 2026] [:error] [pid 36982:tid 37000] [client 72.146.3.52:10242] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws77.php"] [unique_id "acubTflMmeoQKN0r_GNcygAAAM8"]
[Tue Mar 31 18:00:46.328576 2026] [:error] [pid 36890:tid 36909] [client 72.146.3.52:10251] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws77.php"] [unique_id "acubTp8FASPd_uH8z7cOrAAAAA4"]
[Tue Mar 31 18:00:46.796281 2026] [:error] [pid 36891:tid 36941] [client 72.146.3.52:10246] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws77.php"] [unique_id "acubTpJhiMaJUqoqfl621wAAAFE"]
[Tue Mar 31 18:00:47.262065 2026] [:error] [pid 36982:tid 36995] [client 72.146.3.52:10240] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gpt-sh.php"] [unique_id "acubT_lMmeoQKN0r_GNc1AAAAMo"]
[Tue Mar 31 18:00:47.741739 2026] [:error] [pid 36982:tid 37006] [client 72.146.3.52:10348] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gpt-sh.php"] [unique_id "acubT_lMmeoQKN0r_GNc2AAAANU"]
[Tue Mar 31 18:00:48.207294 2026] [:error] [pid 36982:tid 37007] [client 72.146.3.52:10257] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gpt-sh.php"] [unique_id "acubUPlMmeoQKN0r_GNc2wAAANY"]
[Tue Mar 31 18:00:48.674480 2026] [:error] [pid 6548:tid 6566] [client 72.146.3.52:10343] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gpt-sh.php"] [unique_id "acubULgIz9HgMl9YwE7mXgAAAVA"]
[Tue Mar 31 18:00:49.139822 2026] [:error] [pid 6548:tid 6558] [client 72.146.3.52:10266] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f6.php"] [unique_id "acubUbgIz9HgMl9YwE7mYAAAAUg"]
[Tue Mar 31 18:00:49.605508 2026] [:error] [pid 6548:tid 6556] [client 72.146.3.52:10336] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f6.php"] [unique_id "acubUbgIz9HgMl9YwE7mZAAAAUY"]
[Tue Mar 31 18:00:50.094650 2026] [:error] [pid 6548:tid 6565] [client 72.146.3.52:10367] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f6.php"] [unique_id "acubUrgIz9HgMl9YwE7maAAAAU8"]
[Tue Mar 31 18:00:50.561908 2026] [:error] [pid 36892:tid 36973] [client 72.146.3.52:10243] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f6.php"] [unique_id "acubUkyj9S4G0ek3O4Ju0wAAAJY"]
[Tue Mar 31 18:00:51.028773 2026] [:error] [pid 6548:tid 6553] [client 72.146.3.52:10177] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws85.php"] [unique_id "acubU7gIz9HgMl9YwE7mbwAAAUM"]
[Tue Mar 31 18:00:51.494753 2026] [:error] [pid 36890:tid 36919] [client 72.146.3.52:10331] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws85.php"] [unique_id "acubU58FASPd_uH8z7cOwQAAABg"]
[Tue Mar 31 18:00:51.965722 2026] [:error] [pid 6548:tid 6558] [client 72.146.3.52:10289] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws85.php"] [unique_id "acubU7gIz9HgMl9YwE7mdAAAAUg"]
[Tue Mar 31 18:00:52.431413 2026] [:error] [pid 36982:tid 36995] [client 72.146.3.52:10314] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws85.php"] [unique_id "acubVPlMmeoQKN0r_GNc4QAAAMo"]
[Tue Mar 31 18:00:52.897850 2026] [:error] [pid 36982:tid 37001] [client 72.146.3.52:10322] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wander.php"] [unique_id "acubVPlMmeoQKN0r_GNc5AAAANA"]
[Tue Mar 31 18:00:53.372835 2026] [:error] [pid 36891:tid 36931] [client 72.146.3.52:10254] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wander.php"] [unique_id "acubVZJhiMaJUqoqfl622AAAAEc"]
[Tue Mar 31 18:00:53.839206 2026] [:error] [pid 36982:tid 37000] [client 72.146.3.52:10327] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wander.php"] [unique_id "acubVflMmeoQKN0r_GNc5wAAAM8"]
[Tue Mar 31 18:00:54.305194 2026] [:error] [pid 41421:tid 41424] [client 72.146.3.52:10259] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wander.php"] [unique_id "acubVhSaDjY9kKFtUQBnVgAAAQA"]
[Tue Mar 31 18:00:54.771453 2026] [:error] [pid 41421:tid 41444] [client 72.146.3.52:10258] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/h02ugyh.php"] [unique_id "acubVhSaDjY9kKFtUQBnWAAAARQ"]
[Tue Mar 31 18:00:55.241333 2026] [:error] [pid 41421:tid 41436] [client 72.146.3.52:10195] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/h02ugyh.php"] [unique_id "acubVxSaDjY9kKFtUQBnWgAAAQw"]
[Tue Mar 31 18:00:55.708423 2026] [:error] [pid 36890:tid 36915] [client 72.146.3.52:10325] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/h02ugyh.php"] [unique_id "acubV58FASPd_uH8z7cOxAAAABQ"]
[Tue Mar 31 18:00:56.175322 2026] [:error] [pid 41421:tid 41438] [client 72.146.3.52:10248] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/h02ugyh.php"] [unique_id "acubWBSaDjY9kKFtUQBnXQAAAQ4"]
[Tue Mar 31 18:00:56.641096 2026] [:error] [pid 6548:tid 6571] [client 72.146.3.52:10293] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ad.php"] [unique_id "acubWLgIz9HgMl9YwE7megAAAVU"]
[Tue Mar 31 18:00:57.106749 2026] [:error] [pid 6548:tid 6572] [client 72.146.3.52:10260] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ad.php"] [unique_id "acubWbgIz9HgMl9YwE7mfAAAAVY"]
[Tue Mar 31 18:00:57.571055 2026] [:error] [pid 36890:tid 36913] [client 72.146.3.52:10209] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ad.php"] [unique_id "acubWZ8FASPd_uH8z7cOxwAAABI"]
[Tue Mar 31 18:00:58.037713 2026] [:error] [pid 41421:tid 41446] [client 72.146.3.52:10338] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ad.php"] [unique_id "acubWhSaDjY9kKFtUQBnYgAAARY"]
[Tue Mar 31 18:00:58.502202 2026] [:error] [pid 41421:tid 41428] [client 72.146.3.52:10225] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/z60.php"] [unique_id "acubWhSaDjY9kKFtUQBnZAAAAQQ"]
[Tue Mar 31 18:00:58.967246 2026] [:error] [pid 6548:tid 6570] [client 72.146.3.52:10319] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/z60.php"] [unique_id "acubWrgIz9HgMl9YwE7mhAAAAVQ"]
[Tue Mar 31 18:00:59.433287 2026] [:error] [pid 6548:tid 6566] [client 72.146.3.52:10281] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/z60.php"] [unique_id "acubW7gIz9HgMl9YwE7miAAAAVA"]
[Tue Mar 31 18:00:59.901360 2026] [:error] [pid 41421:tid 41425] [client 72.146.3.52:10238] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/z60.php"] [unique_id "acubWxSaDjY9kKFtUQBnZgAAAQE"]
[Tue Mar 31 18:01:00.367979 2026] [:error] [pid 36890:tid 36914] [client 72.146.3.52:10221] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gptsh.php"] [unique_id "acubXJ8FASPd_uH8z7cOygAAABM"]
[Tue Mar 31 18:01:00.834988 2026] [:error] [pid 36890:tid 36907] [client 72.146.3.52:10275] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gptsh.php"] [unique_id "acubXJ8FASPd_uH8z7cOzgAAAAw"]
[Tue Mar 31 18:01:01.303987 2026] [:error] [pid 6548:tid 6560] [client 72.146.3.52:10300] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gptsh.php"] [unique_id "acubXbgIz9HgMl9YwE7mjAAAAUo"]
[Tue Mar 31 18:01:01.772634 2026] [:error] [pid 6548:tid 6565] [client 72.146.3.52:10188] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gptsh.php"] [unique_id "acubXbgIz9HgMl9YwE7mjgAAAU8"]
[Tue Mar 31 18:01:02.239414 2026] [:error] [pid 36982:tid 37000] [client 72.146.3.52:10185] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/wta.php"] [unique_id "acubXvlMmeoQKN0r_GNc7QAAAM8"]
[Tue Mar 31 18:01:02.710461 2026] [:error] [pid 36890:tid 36917] [client 72.146.3.52:10294] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/wta.php"] [unique_id "acubXp8FASPd_uH8z7cO0wAAABY"]
[Tue Mar 31 18:01:03.176524 2026] [:error] [pid 41421:tid 41434] [client 72.146.3.52:10281] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/wta.php"] [unique_id "acubXxSaDjY9kKFtUQBnaQAAAQo"]
[Tue Mar 31 18:01:03.648788 2026] [:error] [pid 41421:tid 41433] [client 72.146.3.52:10284] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/wta.php"] [unique_id "acubXxSaDjY9kKFtUQBnawAAAQk"]
[Tue Mar 31 18:01:04.115600 2026] [:error] [pid 36892:tid 36969] [client 72.146.3.52:10309] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sql.php"] [unique_id "acubYEyj9S4G0ek3O4Ju3wAAAJI"]
[Tue Mar 31 18:01:04.583446 2026] [:error] [pid 36890:tid 36896] [client 72.146.3.52:10193] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sql.php"] [unique_id "acubYJ8FASPd_uH8z7cO1gAAAAE"]
[Tue Mar 31 18:01:05.050347 2026] [:error] [pid 41421:tid 41441] [client 72.146.3.52:10268] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sql.php"] [unique_id "acubYRSaDjY9kKFtUQBncAAAARE"]
[Tue Mar 31 18:01:05.515420 2026] [:error] [pid 36892:tid 36966] [client 72.146.3.52:10274] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sql.php"] [unique_id "acubYUyj9S4G0ek3O4Ju4wAAAI8"]
[Tue Mar 31 18:01:05.982236 2026] [:error] [pid 36982:tid 36987] [client 72.146.3.52:10277] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rithin.php"] [unique_id "acubYflMmeoQKN0r_GNc8QAAAMI"]
[Tue Mar 31 18:01:06.448326 2026] [:error] [pid 36891:tid 36928] [client 72.146.3.52:10354] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rithin.php"] [unique_id "acubYpJhiMaJUqoqfl624gAAAEQ"]
[Tue Mar 31 18:01:06.921882 2026] [:error] [pid 36891:tid 36929] [client 72.146.3.52:10361] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rithin.php"] [unique_id "acubYpJhiMaJUqoqfl625QAAAEU"]
[Tue Mar 31 18:01:07.391740 2026] [:error] [pid 36891:tid 36939] [client 72.146.3.52:10272] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rithin.php"] [unique_id "acubY5JhiMaJUqoqfl625wAAAE8"]
[Tue Mar 31 18:01:07.858984 2026] [:error] [pid 6548:tid 6573] [client 72.146.3.52:10301] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-class.php"] [unique_id "acubY7gIz9HgMl9YwE7mmwAAAVc"]
[Tue Mar 31 18:01:08.324458 2026] [:error] [pid 6548:tid 6561] [client 72.146.3.52:10328] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-class.php"] [unique_id "acubZLgIz9HgMl9YwE7mnAAAAUs"]
[Tue Mar 31 18:01:08.791330 2026] [:error] [pid 36892:tid 36952] [client 72.146.3.52:10323] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-class.php"] [unique_id "acubZEyj9S4G0ek3O4Ju6QAAAIE"]
[Tue Mar 31 18:01:09.272344 2026] [:error] [pid 36890:tid 36919] [client 72.146.3.52:10276] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-class.php"] [unique_id "acubZZ8FASPd_uH8z7cO3AAAABg"]
[Tue Mar 31 18:01:09.740723 2026] [:error] [pid 6548:tid 6556] [client 72.146.3.52:10340] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xper1.php"] [unique_id "acubZbgIz9HgMl9YwE7mogAAAUY"]
[Tue Mar 31 18:01:10.211485 2026] [:error] [pid 6548:tid 6572] [client 72.146.3.52:10232] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xper1.php"] [unique_id "acubZrgIz9HgMl9YwE7mowAAAVY"]
[Tue Mar 31 18:01:10.678398 2026] [:error] [pid 36982:tid 36989] [client 72.146.3.52:10320] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xper1.php"] [unique_id "acubZvlMmeoQKN0r_GNc8wAAAMQ"]
[Tue Mar 31 18:01:11.144478 2026] [:error] [pid 36892:tid 36973] [client 72.146.3.52:10114] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xper1.php"] [unique_id "acubZ0yj9S4G0ek3O4Ju7AAAAJY"]
[Tue Mar 31 18:01:11.617910 2026] [:error] [pid 6548:tid 6573] [client 72.146.3.52:10180] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws78.php"] [unique_id "acubZ7gIz9HgMl9YwE7mqAAAAVc"]
[Tue Mar 31 18:01:12.085904 2026] [:error] [pid 41421:tid 41425] [client 72.146.3.52:10313] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws78.php"] [unique_id "acubaBSaDjY9kKFtUQBnegAAAQE"]
[Tue Mar 31 18:01:12.559497 2026] [:error] [pid 36982:tid 36985] [client 72.146.3.52:10362] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws78.php"] [unique_id "acubaPlMmeoQKN0r_GNc9QAAAMA"]
[Tue Mar 31 18:01:13.025450 2026] [:error] [pid 6548:tid 6574] [client 72.146.3.52:10307] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws78.php"] [unique_id "acubabgIz9HgMl9YwE7mrwAAAVg"]
[Tue Mar 31 18:01:13.498411 2026] [:error] [pid 41421:tid 41424] [client 72.146.3.52:10287] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/uang.php"] [unique_id "acubaRSaDjY9kKFtUQBnewAAAQA"]
[Tue Mar 31 18:01:13.963033 2026] [:error] [pid 36982:tid 36992] [client 72.146.3.52:10187] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/uang.php"] [unique_id "acubaflMmeoQKN0r_GNc-QAAAMc"]
[Tue Mar 31 18:01:14.428744 2026] [:error] [pid 36892:tid 36964] [client 72.146.3.52:10310] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/uang.php"] [unique_id "acubakyj9S4G0ek3O4Ju8QAAAI0"]
[Tue Mar 31 18:01:14.901632 2026] [:error] [pid 36891:tid 36941] [client 72.146.3.52:10265] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/uang.php"] [unique_id "acubapJhiMaJUqoqfl627AAAAFE"]
[Tue Mar 31 18:01:15.367689 2026] [:error] [pid 41421:tid 41426] [client 72.146.3.52:10196] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/save.php"] [unique_id "acubaxSaDjY9kKFtUQBnfAAAAQI"]
[Tue Mar 31 18:01:15.836590 2026] [:error] [pid 6548:tid 6567] [client 72.146.3.52:10142] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/save.php"] [unique_id "acuba7gIz9HgMl9YwE7mtQAAAVE"]
[Tue Mar 31 18:01:16.303214 2026] [:error] [pid 36890:tid 36898] [client 72.146.3.52:10273] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/save.php"] [unique_id "acubbJ8FASPd_uH8z7cO4AAAAAM"]
[Tue Mar 31 18:01:16.770880 2026] [:error] [pid 36890:tid 36903] [client 72.146.3.52:10182] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/save.php"] [unique_id "acubbJ8FASPd_uH8z7cO4gAAAAg"]
[Tue Mar 31 18:01:17.235780 2026] [:error] [pid 6548:tid 6561] [client 72.146.3.52:10198] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wtiiy.php"] [unique_id "acubbbgIz9HgMl9YwE7muAAAAUs"]
[Tue Mar 31 18:01:17.707623 2026] [:error] [pid 36891:tid 36942] [client 72.146.3.52:10306] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wtiiy.php"] [unique_id "acubbZJhiMaJUqoqfl628AAAAFI"]
[Tue Mar 31 18:01:18.174879 2026] [:error] [pid 36891:tid 36946] [client 72.146.3.52:10285] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wtiiy.php"] [unique_id "acubbpJhiMaJUqoqfl628wAAAFY"]
[Tue Mar 31 18:01:18.640942 2026] [:error] [pid 6548:tid 6566] [client 72.146.3.52:10176] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wtiiy.php"] [unique_id "acubbrgIz9HgMl9YwE7muQAAAVA"]
[Tue Mar 31 18:01:19.107653 2026] [:error] [pid 36890:tid 36919] [client 72.146.3.52:10131] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xs.php"] [unique_id "acubb58FASPd_uH8z7cO6QAAABg"]
[Tue Mar 31 18:01:19.574774 2026] [:error] [pid 6548:tid 6550] [client 72.146.3.52:10262] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xs.php"] [unique_id "acubb7gIz9HgMl9YwE7mvAAAAUA"]
[Tue Mar 31 18:01:20.045512 2026] [:error] [pid 36891:tid 36924] [client 72.146.3.52:10191] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xs.php"] [unique_id "acubcJJhiMaJUqoqfl62-AAAAEA"]
[Tue Mar 31 18:01:20.513685 2026] [:error] [pid 36890:tid 36911] [client 72.146.3.52:10136] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xs.php"] [unique_id "acubcJ8FASPd_uH8z7cO7AAAABA"]
[Tue Mar 31 18:01:20.984387 2026] [:error] [pid 6548:tid 6569] [client 72.146.3.52:10324] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bolt.php"] [unique_id "acubcLgIz9HgMl9YwE7mwAAAAVM"]
[Tue Mar 31 18:01:21.450314 2026] [:error] [pid 36982:tid 36999] [client 72.146.3.52:10321] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bolt.php"] [unique_id "acubcflMmeoQKN0r_GNdAAAAAM4"]
[Tue Mar 31 18:01:21.917156 2026] [:error] [pid 36982:tid 36989] [client 72.146.3.52:10312] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bolt.php"] [unique_id "acubcflMmeoQKN0r_GNdAQAAAMQ"]
[Tue Mar 31 18:01:22.383843 2026] [:error] [pid 36890:tid 36900] [client 72.146.3.52:10216] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bolt.php"] [unique_id "acubcp8FASPd_uH8z7cO7gAAAAU"]
[Tue Mar 31 18:01:22.861400 2026] [:error] [pid 36982:tid 37005] [client 72.146.3.52:10207] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gelio1.php"] [unique_id "acubcvlMmeoQKN0r_GNdBQAAANQ"]
[Tue Mar 31 18:01:23.335100 2026] [:error] [pid 36982:tid 37007] [client 72.146.3.52:10286] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gelio1.php"] [unique_id "acubc_lMmeoQKN0r_GNdBwAAANY"]
[Tue Mar 31 18:01:23.805169 2026] [:error] [pid 36982:tid 37002] [client 72.146.3.52:10349] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gelio1.php"] [unique_id "acubc_lMmeoQKN0r_GNdCQAAANE"]
[Tue Mar 31 18:01:24.275624 2026] [:error] [pid 41421:tid 41445] [client 72.146.3.52:10261] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gelio1.php"] [unique_id "acubdBSaDjY9kKFtUQBnhAAAARU"]
[Tue Mar 31 18:01:24.741752 2026] [:error] [pid 41421:tid 41430] [client 72.146.3.52:10253] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/as.php"] [unique_id "acubdBSaDjY9kKFtUQBnhQAAAQY"]
[Tue Mar 31 18:01:25.209571 2026] [:error] [pid 6548:tid 6553] [client 72.146.3.52:10206] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/as.php"] [unique_id "acubdbgIz9HgMl9YwE7mxQAAAUM"]
[Tue Mar 31 18:01:25.675708 2026] [:error] [pid 6548:tid 6562] [client 72.146.3.52:10296] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/as.php"] [unique_id "acubdbgIz9HgMl9YwE7mxgAAAUw"]
[Tue Mar 31 18:01:26.141462 2026] [:error] [pid 41421:tid 41448] [client 72.146.3.52:10270] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/as.php"] [unique_id "acubdhSaDjY9kKFtUQBnhwAAARg"]
[Tue Mar 31 18:01:26.610371 2026] [:error] [pid 36892:tid 36970] [client 72.146.3.52:10245] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/yuzuru1.php"] [unique_id "acubdkyj9S4G0ek3O4Ju_QAAAJM"]
[Tue Mar 31 18:01:27.078709 2026] [:error] [pid 36892:tid 36963] [client 72.146.3.52:10186] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/yuzuru1.php"] [unique_id "acubd0yj9S4G0ek3O4Ju_gAAAIw"]
[Tue Mar 31 18:01:27.550699 2026] [:error] [pid 36890:tid 36901] [client 72.146.3.52:10204] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/yuzuru1.php"] [unique_id "acubd58FASPd_uH8z7cO-QAAAAY"]
[Tue Mar 31 18:01:28.034748 2026] [proxy_fcgi:error] [pid 36891:tid 36924] [client 72.146.3.52:10192] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:01:28.416965 2026] [proxy_fcgi:error] [pid 36891:tid 36927] [client 72.146.3.52:10192] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:01:28.652448 2026] [proxy_fcgi:error] [pid 36891:tid 36926] [client 72.146.3.52:10192] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:01:28.889630 2026] [proxy_fcgi:error] [pid 36891:tid 36944] [client 72.146.3.52:10192] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:01:29.125701 2026] [proxy_fcgi:error] [pid 36891:tid 36941] [client 72.146.3.52:10192] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:01:29.362933 2026] [proxy_fcgi:error] [pid 36891:tid 36933] [client 72.146.3.52:10192] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:01:29.599190 2026] [proxy_fcgi:error] [pid 36891:tid 36936] [client 72.146.3.52:10192] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:01:29.834771 2026] [proxy_fcgi:error] [pid 36891:tid 36928] [client 72.146.3.52:10192] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:01:30.071822 2026] [proxy_fcgi:error] [pid 36891:tid 36934] [client 72.146.3.52:10192] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:01:30.307811 2026] [proxy_fcgi:error] [pid 36891:tid 36930] [client 72.146.3.52:10192] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:01:30.547818 2026] [proxy_fcgi:error] [pid 36891:tid 36943] [client 72.146.3.52:10192] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:01:30.780435 2026] [:error] [pid 36891:tid 36948] [client 72.146.3.52:10192] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp9.php"] [unique_id "acubepJhiMaJUqoqfl63EQAAAFg"]
[Tue Mar 31 18:01:31.246200 2026] [:error] [pid 36891:tid 36939] [client 72.146.3.52:10347] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp9.php"] [unique_id "acube5JhiMaJUqoqfl63EwAAAE8"]
[Tue Mar 31 18:01:31.712899 2026] [:error] [pid 36982:tid 36985] [client 72.146.3.52:10330] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp9.php"] [unique_id "acube_lMmeoQKN0r_GNdFgAAAMA"]
[Tue Mar 31 18:01:32.179729 2026] [:error] [pid 36982:tid 36995] [client 72.146.3.52:10360] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp9.php"] [unique_id "acubfPlMmeoQKN0r_GNdGAAAAMo"]
[Tue Mar 31 18:01:32.645336 2026] [:error] [pid 36890:tid 36919] [client 72.146.3.52:10316] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ant.php"] [unique_id "acubfJ8FASPd_uH8z7cPAgAAABg"]
[Tue Mar 31 18:01:33.112533 2026] [:error] [pid 36982:tid 36997] [client 72.146.3.52:10337] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ant.php"] [unique_id "acubfflMmeoQKN0r_GNdHQAAAMw"]
[Tue Mar 31 18:01:33.581462 2026] [:error] [pid 36892:tid 36966] [client 72.146.3.52:10218] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ant.php"] [unique_id "acubfUyj9S4G0ek3O4JvAwAAAI8"]
[Tue Mar 31 18:01:34.049574 2026] [:error] [pid 36982:tid 37003] [client 72.146.3.52:10199] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ant.php"] [unique_id "acubfvlMmeoQKN0r_GNdHgAAANI"]
[Tue Mar 31 18:01:34.519079 2026] [:error] [pid 36890:tid 36908] [client 72.146.3.52:10181] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws86.php"] [unique_id "acubfp8FASPd_uH8z7cPBwAAAA0"]
[Tue Mar 31 18:01:35.008351 2026] [:error] [pid 36982:tid 36990] [client 72.146.3.52:10351] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws86.php"] [unique_id "acubf_lMmeoQKN0r_GNdIgAAAMU"]
[Tue Mar 31 18:01:35.473167 2026] [:error] [pid 36890:tid 36909] [client 72.146.3.52:10145] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws86.php"] [unique_id "acubf58FASPd_uH8z7cPCQAAAA4"]
[Tue Mar 31 18:01:35.939288 2026] [:error] [pid 36892:tid 36974] [client 72.146.3.52:10255] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws86.php"] [unique_id "acubf0yj9S4G0ek3O4JvBwAAAJc"]
[Tue Mar 31 18:01:36.409115 2026] [:error] [pid 36892:tid 36959] [client 72.146.3.52:10295] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jga.php"] [unique_id "acubgEyj9S4G0ek3O4JvCAAAAIg"]
[Tue Mar 31 18:01:36.900145 2026] [:error] [pid 36890:tid 36897] [client 72.146.3.52:10241] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jga.php"] [unique_id "acubgJ8FASPd_uH8z7cPDAAAAAI"]
[Tue Mar 31 18:01:37.364461 2026] [:error] [pid 36890:tid 36902] [client 72.146.3.52:10220] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jga.php"] [unique_id "acubgZ8FASPd_uH8z7cPDQAAAAc"]
[Tue Mar 31 18:01:37.831717 2026] [:error] [pid 36890:tid 36900] [client 72.146.3.52:10278] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jga.php"] [unique_id "acubgZ8FASPd_uH8z7cPEAAAAAU"]
[Tue Mar 31 18:01:38.297042 2026] [:error] [pid 41421:tid 41435] [client 72.146.3.52:10326] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xda.php"] [unique_id "acubghSaDjY9kKFtUQBnkQAAAQs"]
[Tue Mar 31 18:01:38.761930 2026] [:error] [pid 36891:tid 36928] [client 72.146.3.52:10205] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xda.php"] [unique_id "acubgpJhiMaJUqoqfl63HAAAAEQ"]
[Tue Mar 31 18:01:39.227991 2026] [:error] [pid 41421:tid 41444] [client 72.146.3.52:10197] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xda.php"] [unique_id "acubgxSaDjY9kKFtUQBnkwAAARQ"]
[Tue Mar 31 18:01:39.692691 2026] [:error] [pid 36891:tid 36930] [client 72.146.3.52:10279] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xda.php"] [unique_id "acubg5JhiMaJUqoqfl63HwAAAEY"]
[Tue Mar 31 18:01:40.160996 2026] [:error] [pid 36890:tid 36915] [client 72.146.3.52:10155] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/classgoto24.php"] [unique_id "acubhJ8FASPd_uH8z7cPHQAAABQ"]
[Tue Mar 31 18:01:40.627435 2026] [:error] [pid 36890:tid 36900] [client 72.146.3.52:10139] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/classgoto24.php"] [unique_id "acubhJ8FASPd_uH8z7cPJAAAAAU"]
[Tue Mar 31 18:01:41.093123 2026] [:error] [pid 36890:tid 36904] [client 72.146.3.52:10360] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/classgoto24.php"] [unique_id "acubhZ8FASPd_uH8z7cPJQAAAAk"]
[Tue Mar 31 18:01:41.561913 2026] [:error] [pid 41421:tid 41441] [client 72.146.3.52:10250] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/classgoto24.php"] [unique_id "acubhRSaDjY9kKFtUQBnlwAAARE"]
[Tue Mar 31 18:01:42.027732 2026] [:error] [pid 6548:tid 6572] [client 72.146.3.52:10118] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws82.php"] [unique_id "acubhrgIz9HgMl9YwE7m0gAAAVY"]
[Tue Mar 31 18:01:42.502004 2026] [:error] [pid 6548:tid 6570] [client 72.146.3.52:10271] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws82.php"] [unique_id "acubhrgIz9HgMl9YwE7m1AAAAVQ"]
[Tue Mar 31 18:01:42.973986 2026] [:error] [pid 36891:tid 36948] [client 72.146.3.52:10184] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws82.php"] [unique_id "acubhpJhiMaJUqoqfl63IAAAAFg"]
[Tue Mar 31 18:01:43.444425 2026] [:error] [pid 6548:tid 6552] [client 72.146.3.52:10342] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws82.php"] [unique_id "acubh7gIz9HgMl9YwE7m1wAAAUI"]
[Tue Mar 31 18:01:43.910333 2026] [:error] [pid 36891:tid 36935] [client 72.146.3.52:10231] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws43.php"] [unique_id "acubh5JhiMaJUqoqfl63JAAAAEs"]
[Tue Mar 31 18:01:44.376676 2026] [:error] [pid 36890:tid 36895] [client 72.146.3.52:10208] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws43.php"] [unique_id "acubiJ8FASPd_uH8z7cPLgAAAAA"]
[Tue Mar 31 18:01:44.849529 2026] [:error] [pid 36982:tid 36992] [client 72.146.3.52:10217] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws43.php"] [unique_id "acubiPlMmeoQKN0r_GNdLQAAAMc"]
[Tue Mar 31 18:01:45.316131 2026] [:error] [pid 36982:tid 37006] [client 72.146.3.52:9800] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws43.php"] [unique_id "acubiflMmeoQKN0r_GNdLgAAANU"]
[Tue Mar 31 18:01:45.783840 2026] [:error] [pid 41421:tid 41445] [client 72.146.3.52:10226] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gec.php"] [unique_id "acubiRSaDjY9kKFtUQBnoQAAARU"]
[Tue Mar 31 18:01:46.251720 2026] [:error] [pid 36891:tid 36927] [client 72.146.3.52:10303] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gec.php"] [unique_id "acubipJhiMaJUqoqfl63KQAAAEM"]
[Tue Mar 31 18:01:46.717585 2026] [:error] [pid 41421:tid 41440] [client 72.146.3.52:10183] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gec.php"] [unique_id "acubihSaDjY9kKFtUQBnowAAARA"]
[Tue Mar 31 18:01:47.192784 2026] [:error] [pid 36982:tid 37002] [client 72.146.3.52:10169] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gec.php"] [unique_id "acubi_lMmeoQKN0r_GNdOgAAANE"]
[Tue Mar 31 18:01:47.658608 2026] [:error] [pid 36892:tid 36953] [client 72.146.3.52:10146] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/uuu.php"] [unique_id "acubi0yj9S4G0ek3O4JvFQAAAII"]
[Tue Mar 31 18:01:48.124655 2026] [:error] [pid 36892:tid 36967] [client 72.146.3.52:10269] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/uuu.php"] [unique_id "acubjEyj9S4G0ek3O4JvFgAAAJA"]
[Tue Mar 31 18:01:48.592518 2026] [:error] [pid 36891:tid 36944] [client 72.146.3.52:10151] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/uuu.php"] [unique_id "acubjJJhiMaJUqoqfl63KwAAAFQ"]
[Tue Mar 31 18:01:49.089042 2026] [:error] [pid 36982:tid 36989] [client 72.146.3.52:10190] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/uuu.php"] [unique_id "acubjflMmeoQKN0r_GNdPwAAAMQ"]
[Tue Mar 31 18:01:49.555403 2026] [:error] [pid 6548:tid 6565] [client 72.146.3.52:10128] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/1.php"] [unique_id "acubjbgIz9HgMl9YwE7m3gAAAU8"]
[Tue Mar 31 18:01:50.021844 2026] [:error] [pid 6548:tid 6558] [client 72.146.3.52:10119] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/1.php"] [unique_id "acubjrgIz9HgMl9YwE7m4AAAAUg"]
[Tue Mar 31 18:01:50.488297 2026] [:error] [pid 6548:tid 6552] [client 72.146.3.52:10126] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/1.php"] [unique_id "acubjrgIz9HgMl9YwE7m5AAAAUI"]
[Tue Mar 31 18:01:50.970886 2026] [:error] [pid 36982:tid 36996] [client 72.146.3.52:10153] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/1.php"] [unique_id "acubjvlMmeoQKN0r_GNdQQAAAMs"]
[Tue Mar 31 18:01:51.443827 2026] [:error] [pid 36982:tid 36999] [client 72.146.3.52:10156] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/size.php"] [unique_id "acubj_lMmeoQKN0r_GNdQwAAAM4"]
[Tue Mar 31 18:01:51.909042 2026] [:error] [pid 6548:tid 6555] [client 72.146.3.52:10212] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/size.php"] [unique_id "acubj7gIz9HgMl9YwE7m6AAAAUU"]
[Tue Mar 31 18:01:52.375770 2026] [:error] [pid 6548:tid 6566] [client 72.146.3.52:10137] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/size.php"] [unique_id "acubkLgIz9HgMl9YwE7m6wAAAVA"]
[Tue Mar 31 18:01:52.842359 2026] [:error] [pid 6548:tid 6574] [client 72.146.3.52:10332] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/size.php"] [unique_id "acubkLgIz9HgMl9YwE7m7wAAAVg"]
[Tue Mar 31 18:01:53.311098 2026] [:error] [pid 6548:tid 6561] [client 72.146.3.52:10239] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lib.php"] [unique_id "acubkbgIz9HgMl9YwE7m8wAAAUs"]
[Tue Mar 31 18:01:53.779614 2026] [:error] [pid 36982:tid 36993] [client 72.146.3.52:9815] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lib.php"] [unique_id "acubkflMmeoQKN0r_GNdRgAAAMg"]
[Tue Mar 31 18:01:54.261291 2026] [:error] [pid 6548:tid 6570] [client 72.146.3.52:10215] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lib.php"] [unique_id "acubkrgIz9HgMl9YwE7m-AAAAVQ"]
[Tue Mar 31 18:01:54.732624 2026] [:error] [pid 36890:tid 36909] [client 72.146.3.52:10189] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lib.php"] [unique_id "acubkp8FASPd_uH8z7cPNwAAAA4"]
[Tue Mar 31 18:01:55.202708 2026] [:error] [pid 36890:tid 36901] [client 72.146.3.52:10170] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-load.php"] [unique_id "acubk58FASPd_uH8z7cPOAAAAAY"]
[Tue Mar 31 18:01:55.668743 2026] [:error] [pid 36982:tid 36989] [client 72.146.3.52:10123] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-load.php"] [unique_id "acubk_lMmeoQKN0r_GNdSAAAAMQ"]
[Tue Mar 31 18:01:56.139934 2026] [:error] [pid 36982:tid 36994] [client 72.146.3.52:10117] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-load.php"] [unique_id "acublPlMmeoQKN0r_GNdSgAAAMk"]
[Tue Mar 31 18:01:56.603930 2026] [:error] [pid 36982:tid 36997] [client 72.146.3.52:10143] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-load.php"] [unique_id "acublPlMmeoQKN0r_GNdTgAAAMw"]
[Tue Mar 31 18:01:57.070486 2026] [:error] [pid 6548:tid 6573] [client 72.146.3.52:10134] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/torsa1.php"] [unique_id "acublbgIz9HgMl9YwE7m_gAAAVc"]
[Tue Mar 31 18:01:57.535726 2026] [:error] [pid 6548:tid 6570] [client 72.146.3.52:10202] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/torsa1.php"] [unique_id "acublbgIz9HgMl9YwE7nAAAAAVQ"]
[Tue Mar 31 18:01:58.005737 2026] [:error] [pid 36890:tid 36912] [client 72.146.3.52:10233] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/torsa1.php"] [unique_id "acublp8FASPd_uH8z7cPOwAAABE"]
[Tue Mar 31 18:01:58.473932 2026] [:error] [pid 6548:tid 6574] [client 72.146.3.52:10292] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/torsa1.php"] [unique_id "acublrgIz9HgMl9YwE7nBAAAAVg"]
[Tue Mar 31 18:01:58.938443 2026] [:error] [pid 41421:tid 41444] [client 72.146.3.52:10297] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/b.php"] [unique_id "acublhSaDjY9kKFtUQBntAAAARQ"]
[Tue Mar 31 18:01:59.403009 2026] [:error] [pid 41421:tid 41445] [client 72.146.3.52:10237] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/b.php"] [unique_id "acublxSaDjY9kKFtUQBntgAAARU"]
[Tue Mar 31 18:01:59.870978 2026] [:error] [pid 41421:tid 41433] [client 72.146.3.52:9810] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/b.php"] [unique_id "acublxSaDjY9kKFtUQBntwAAAQk"]
[Tue Mar 31 18:02:00.339218 2026] [:error] [pid 36890:tid 36895] [client 72.146.3.52:10165] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/b.php"] [unique_id "acubmJ8FASPd_uH8z7cPQQAAAAA"]
[Tue Mar 31 18:02:00.805887 2026] [:error] [pid 36892:tid 36973] [client 72.146.3.52:10302] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vaza.php"] [unique_id "acubmEyj9S4G0ek3O4JvIQAAAJY"]
[Tue Mar 31 18:02:01.271203 2026] [:error] [pid 36890:tid 36909] [client 72.146.3.52:10214] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vaza.php"] [unique_id "acubmZ8FASPd_uH8z7cPRwAAAA4"]
[Tue Mar 31 18:02:01.737281 2026] [:error] [pid 6548:tid 6560] [client 72.146.3.52:9801] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vaza.php"] [unique_id "acubmbgIz9HgMl9YwE7nCQAAAUo"]
[Tue Mar 31 18:02:02.203472 2026] [:error] [pid 36982:tid 36999] [client 72.146.3.52:10213] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vaza.php"] [unique_id "acubmvlMmeoQKN0r_GNdWAAAAM4"]
[Tue Mar 31 18:02:02.671979 2026] [:error] [pid 6548:tid 6567] [client 72.146.3.52:10203] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bnm.php"] [unique_id "acubmrgIz9HgMl9YwE7nCgAAAVE"]
[Tue Mar 31 18:02:03.156555 2026] [:error] [pid 41421:tid 41448] [client 72.146.3.52:9826] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bnm.php"] [unique_id "acubmxSaDjY9kKFtUQBnugAAARg"]
[Tue Mar 31 18:02:03.623246 2026] [:error] [pid 36890:tid 36906] [client 72.146.3.52:10133] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bnm.php"] [unique_id "acubm58FASPd_uH8z7cPTgAAAAs"]
[Tue Mar 31 18:02:04.095371 2026] [:error] [pid 36982:tid 37002] [client 72.146.3.52:10228] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bnm.php"] [unique_id "acubnPlMmeoQKN0r_GNdXQAAANE"]
[Tue Mar 31 18:02:04.562486 2026] [:error] [pid 6548:tid 6551] [client 72.146.3.52:10147] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "acubnLgIz9HgMl9YwE7nDgAAAUE"]
[Tue Mar 31 18:02:05.027078 2026] [:error] [pid 6548:tid 6552] [client 72.146.3.52:10172] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "acubnbgIz9HgMl9YwE7nEAAAAUI"]
[Tue Mar 31 18:02:05.490839 2026] [:error] [pid 36890:tid 36917] [client 72.146.3.52:10127] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "acubnZ8FASPd_uH8z7cPUQAAABY"]
[Tue Mar 31 18:02:05.956875 2026] [:error] [pid 36890:tid 36901] [client 72.146.3.52:10211] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "acubnZ8FASPd_uH8z7cPVAAAAAY"]
[Tue Mar 31 18:02:06.421278 2026] [:error] [pid 36890:tid 36916] [client 72.146.3.52:10157] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xc0252.php"] [unique_id "acubnp8FASPd_uH8z7cPVwAAABU"]
[Tue Mar 31 18:02:06.894653 2026] [:error] [pid 6548:tid 6565] [client 72.146.3.52:9832] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xc0252.php"] [unique_id "acubnrgIz9HgMl9YwE7nEwAAAU8"]
[Tue Mar 31 18:02:07.361419 2026] [:error] [pid 36891:tid 36930] [client 72.146.3.52:10122] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xc0252.php"] [unique_id "acubn5JhiMaJUqoqfl63OgAAAEY"]
[Tue Mar 31 18:02:07.827079 2026] [:error] [pid 36891:tid 36939] [client 72.146.3.52:9797] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xc0252.php"] [unique_id "acubn5JhiMaJUqoqfl63PAAAAE8"]
[Tue Mar 31 18:02:08.297661 2026] [:error] [pid 41421:tid 41434] [client 72.146.3.52:9822] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/saorix1.php"] [unique_id "acuboBSaDjY9kKFtUQBnvwAAAQo"]
[Tue Mar 31 18:02:08.764208 2026] [:error] [pid 41421:tid 41442] [client 72.146.3.52:10282] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/saorix1.php"] [unique_id "acuboBSaDjY9kKFtUQBnwAAAARI"]
[Tue Mar 31 18:02:09.238643 2026] [:error] [pid 36890:tid 36910] [client 72.146.3.52:9814] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/saorix1.php"] [unique_id "acuboZ8FASPd_uH8z7cPXgAAAA8"]
[Tue Mar 31 18:02:09.707377 2026] [:error] [pid 6548:tid 6562] [client 72.146.3.52:10291] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/saorix1.php"] [unique_id "acubobgIz9HgMl9YwE7nFgAAAUw"]
[Tue Mar 31 18:02:10.172714 2026] [:error] [pid 41421:tid 41447] [client 72.146.3.52:10115] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tx79.php"] [unique_id "acubohSaDjY9kKFtUQBnyAAAARc"]
[Tue Mar 31 18:02:10.640704 2026] [:error] [pid 36892:tid 36961] [client 72.146.3.52:10162] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tx79.php"] [unique_id "acubokyj9S4G0ek3O4JvLAAAAIo"]
[Tue Mar 31 18:02:11.106051 2026] [:error] [pid 41421:tid 41435] [client 72.146.3.52:10130] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tx79.php"] [unique_id "acuboxSaDjY9kKFtUQBnywAAAQs"]
[Tue Mar 31 18:02:11.574212 2026] [:error] [pid 41421:tid 41433] [client 72.146.3.52:9844] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tx79.php"] [unique_id "acuboxSaDjY9kKFtUQBnzgAAAQk"]
[Tue Mar 31 18:02:12.039614 2026] [:error] [pid 36892:tid 36955] [client 72.146.3.52:10315] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "acubpEyj9S4G0ek3O4JvLQAAAIQ"]
[Tue Mar 31 18:02:12.513723 2026] [:error] [pid 36890:tid 36905] [client 72.146.3.52:10210] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "acubpJ8FASPd_uH8z7cPYwAAAAo"]
[Tue Mar 31 18:02:12.984068 2026] [:error] [pid 36982:tid 36990] [client 72.146.3.52:10298] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "acubpPlMmeoQKN0r_GNdZgAAAMU"]
[Tue Mar 31 18:02:13.453294 2026] [:error] [pid 36892:tid 36953] [client 72.146.3.52:10161] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "acubpUyj9S4G0ek3O4JvMQAAAII"]
[Tue Mar 31 18:02:13.919428 2026] [:error] [pid 41421:tid 41427] [client 72.146.3.52:9825] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp3.php"] [unique_id "acubpRSaDjY9kKFtUQBn1QAAAQM"]
[Tue Mar 31 18:02:14.396545 2026] [:error] [pid 6548:tid 6561] [client 72.146.3.52:10050] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp3.php"] [unique_id "acubprgIz9HgMl9YwE7nJwAAAUs"]
[Tue Mar 31 18:02:14.867500 2026] [:error] [pid 36890:tid 36906] [client 72.146.3.52:10163] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp3.php"] [unique_id "acubpp8FASPd_uH8z7cPaQAAAAs"]
[Tue Mar 31 18:02:15.335126 2026] [:error] [pid 36982:tid 37001] [client 72.146.3.52:10179] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp3.php"] [unique_id "acubp_lMmeoQKN0r_GNdawAAANA"]
[Tue Mar 31 18:02:15.800477 2026] [:error] [pid 36890:tid 36899] [client 72.146.3.52:9796] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/v3.php"] [unique_id "acubp58FASPd_uH8z7cPbQAAAAQ"]
[Tue Mar 31 18:02:16.269214 2026] [:error] [pid 36982:tid 36986] [client 72.146.3.52:10124] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/v3.php"] [unique_id "acubqPlMmeoQKN0r_GNdbQAAAME"]
[Tue Mar 31 18:02:16.735499 2026] [:error] [pid 36891:tid 36927] [client 72.146.3.52:10064] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/v3.php"] [unique_id "acubqJJhiMaJUqoqfl63QgAAAEM"]
[Tue Mar 31 18:02:17.220278 2026] [:error] [pid 41421:tid 41441] [client 72.146.3.52:9808] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/v3.php"] [unique_id "acubqRSaDjY9kKFtUQBn3AAAARE"]
[Tue Mar 31 18:02:17.685467 2026] [:error] [pid 41421:tid 41438] [client 72.146.3.52:10229] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/v.php"] [unique_id "acubqRSaDjY9kKFtUQBn3QAAAQ4"]
[Tue Mar 31 18:02:18.157878 2026] [:error] [pid 36891:tid 36944] [client 72.146.3.52:10132] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/v.php"] [unique_id "acubqpJhiMaJUqoqfl63RgAAAFQ"]
[Tue Mar 31 18:02:18.627392 2026] [:error] [pid 36892:tid 36951] [client 72.146.3.52:9853] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/v.php"] [unique_id "acubqkyj9S4G0ek3O4JvOQAAAIA"]
[Tue Mar 31 18:02:19.093901 2026] [:error] [pid 41421:tid 41424] [client 72.146.3.52:9807] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/v.php"] [unique_id "acubqxSaDjY9kKFtUQBn3wAAAQA"]
[Tue Mar 31 18:02:19.559428 2026] [:error] [pid 41421:tid 41432] [client 72.146.3.52:9835] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/d2.php"] [unique_id "acubqxSaDjY9kKFtUQBn4gAAAQg"]
[Tue Mar 31 18:02:20.027205 2026] [:error] [pid 41421:tid 41436] [client 72.146.3.52:10113] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/d2.php"] [unique_id "acubrBSaDjY9kKFtUQBn5QAAAQw"]
[Tue Mar 31 18:02:20.498066 2026] [:error] [pid 41421:tid 41431] [client 72.146.3.52:10263] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/d2.php"] [unique_id "acubrBSaDjY9kKFtUQBn6AAAAQc"]
[Tue Mar 31 18:02:20.967943 2026] [:error] [pid 36892:tid 36959] [client 72.146.3.52:10200] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/d2.php"] [unique_id "acubrEyj9S4G0ek3O4JvPgAAAIg"]
[Tue Mar 31 18:02:21.435481 2026] [:error] [pid 41421:tid 41424] [client 72.146.3.52:10234] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xc.php"] [unique_id "acubrRSaDjY9kKFtUQBn7wAAAQA"]
[Tue Mar 31 18:02:21.903553 2026] [:error] [pid 36892:tid 36960] [client 72.146.3.52:10222] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xc.php"] [unique_id "acubrUyj9S4G0ek3O4JvQAAAAIk"]
[Tue Mar 31 18:02:22.375322 2026] [:error] [pid 36891:tid 36934] [client 72.146.3.52:10230] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xc.php"] [unique_id "acubrpJhiMaJUqoqfl63TQAAAEo"]
[Tue Mar 31 18:02:22.840263 2026] [:error] [pid 36892:tid 36957] [client 72.146.3.52:10299] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xc.php"] [unique_id "acubrkyj9S4G0ek3O4JvQQAAAIY"]
[Tue Mar 31 18:02:23.305884 2026] [:error] [pid 41421:tid 41445] [client 72.146.3.52:10224] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/g.php"] [unique_id "acubrxSaDjY9kKFtUQBn8wAAARU"]
[Tue Mar 31 18:02:23.780357 2026] [:error] [pid 41421:tid 41443] [client 72.146.3.52:10148] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/g.php"] [unique_id "acubrxSaDjY9kKFtUQBn9gAAARM"]
[Tue Mar 31 18:02:24.247390 2026] [:error] [pid 41421:tid 41440] [client 72.146.3.52:10149] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/g.php"] [unique_id "acubsBSaDjY9kKFtUQBn-wAAARA"]
[Tue Mar 31 18:02:24.713368 2026] [:error] [pid 6548:tid 6557] [client 72.146.3.52:10112] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/g.php"] [unique_id "acubsLgIz9HgMl9YwE7nSAAAAUc"]
[Tue Mar 31 18:02:25.193650 2026] [:error] [pid 41421:tid 41427] [client 72.146.3.52:10227] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gmo.php"] [unique_id "acubsRSaDjY9kKFtUQBn_QAAAQM"]
[Tue Mar 31 18:02:25.659478 2026] [:error] [pid 41421:tid 41430] [client 72.146.3.52:9812] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gmo.php"] [unique_id "acubsRSaDjY9kKFtUQBn_wAAAQY"]
[Tue Mar 31 18:02:26.124015 2026] [:error] [pid 41421:tid 41445] [client 72.146.3.52:9827] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gmo.php"] [unique_id "acubshSaDjY9kKFtUQBoAwAAARU"]
[Tue Mar 31 18:02:26.591891 2026] [:error] [pid 41421:tid 41424] [client 72.146.3.52:10129] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gmo.php"] [unique_id "acubshSaDjY9kKFtUQBoBwAAAQA"]
[Tue Mar 31 18:02:27.061832 2026] [:error] [pid 41421:tid 41430] [client 72.146.3.52:9811] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/11.php"] [unique_id "acubsxSaDjY9kKFtUQBoCgAAAQY"]
[Tue Mar 31 18:02:27.527852 2026] [:error] [pid 36982:tid 36990] [client 72.146.3.52:9821] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/11.php"] [unique_id "acubs_lMmeoQKN0r_GNddwAAAMU"]
[Tue Mar 31 18:02:27.993949 2026] [:error] [pid 36890:tid 36902] [client 72.146.3.52:9820] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/11.php"] [unique_id "acubs58FASPd_uH8z7cPdgAAAAc"]
[Tue Mar 31 18:02:28.459672 2026] [:error] [pid 36890:tid 36901] [client 72.146.3.52:10236] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/11.php"] [unique_id "acubtJ8FASPd_uH8z7cPeAAAAAY"]
[Tue Mar 31 18:02:28.925613 2026] [:error] [pid 41421:tid 41444] [client 72.146.3.52:10166] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/20.php"] [unique_id "acubtBSaDjY9kKFtUQBoFAAAARQ"]
[Tue Mar 31 18:02:29.396557 2026] [:error] [pid 36890:tid 36899] [client 72.146.3.52:10125] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/20.php"] [unique_id "acubtZ8FASPd_uH8z7cPewAAAAQ"]
[Tue Mar 31 18:02:29.862045 2026] [:error] [pid 36982:tid 37001] [client 72.146.3.52:10056] [client 72.146.3.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/20.php"] [unique_id "acubtflMmeoQKN0r_GNdfAAAANA"]
[Tue Mar 31 18:02:30.339668 2026] [proxy_fcgi:error] [pid 36982:tid 37003] [client 72.146.3.52:10290] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:02:30.575810 2026] [proxy_fcgi:error] [pid 36982:tid 37000] [client 72.146.3.52:10290] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:02:30.812272 2026] [proxy_fcgi:error] [pid 36982:tid 37006] [client 72.146.3.52:10290] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:02:31.048679 2026] [proxy_fcgi:error] [pid 36982:tid 37005] [client 72.146.3.52:10290] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:02:31.284275 2026] [proxy_fcgi:error] [pid 36982:tid 36992] [client 72.146.3.52:10290] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:02:31.520523 2026] [proxy_fcgi:error] [pid 36982:tid 36988] [client 72.146.3.52:10290] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 02:21:47.110860 2026] [:error] [pid 52593:tid 52682] [client 18.232.116.112:49548] [client 18.232.116.112] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 18.232.116.112, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-login.php"] [unique_id "acwQu-KOtxqtcDhRtD-agQAAAIg"]
[Wed Apr 01 02:21:47.120398 2026] [proxy_fcgi:error] [pid 52593:tid 52682] [client 18.232.116.112:49548] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 07:43:28.084689 2026] [proxy_fcgi:error] [pid 23714:tid 23758] [client 74.248.134.58:17887] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 07:43:28.345383 2026] [proxy_fcgi:error] [pid 23714:tid 23755] [client 74.248.134.58:17887] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 19:22:01.984084 2026] [proxy_fcgi:error] [pid 17856:tid 17859] [client 20.215.250.169:49289] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 19:22:02.243315 2026] [proxy_fcgi:error] [pid 17856:tid 17863] [client 20.215.250.169:49289] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 19:22:02.501655 2026] [proxy_fcgi:error] [pid 17856:tid 17860] [client 20.215.250.169:49289] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 19:22:02.785587 2026] [proxy_fcgi:error] [pid 17856:tid 17881] [client 20.215.250.169:49289] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 19:22:03.065555 2026] [proxy_fcgi:error] [pid 17856:tid 17877] [client 20.215.250.169:49289] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 19:22:03.334125 2026] [proxy_fcgi:error] [pid 17856:tid 17867] [client 20.215.250.169:49289] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 19:22:03.598904 2026] [proxy_fcgi:error] [pid 17856:tid 17871] [client 20.215.250.169:49289] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 19:22:03.859304 2026] [proxy_fcgi:error] [pid 17856:tid 17872] [client 20.215.250.169:49289] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 19:22:04.140328 2026] [proxy_fcgi:error] [pid 17856:tid 17862] [client 20.215.250.169:49289] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 19:22:04.406314 2026] [proxy_fcgi:error] [pid 17856:tid 17875] [client 20.215.250.169:49289] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 19:22:04.660963 2026] [:error] [pid 17856:tid 17879] [client 20.215.250.169:49289] [client 20.215.250.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/hnphq.php"] [unique_id "acz_3D7Idlm5j9frhqTuTgAAAFU"]
[Wed Apr 01 19:22:07.139213 2026] [:error] [pid 8909:tid 8963] [client 20.215.250.169:50532] [client 20.215.250.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/hnphq.php"] [unique_id "acz_3zvP_a0662gDl6BrGgAAANY"]
[Wed Apr 01 19:22:07.882001 2026] [:error] [pid 8909:tid 8942] [client 20.215.250.169:51599] [client 20.215.250.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/hnphq.php"] [unique_id "acz_3zvP_a0662gDl6BrHwAAAME"]
[Wed Apr 01 19:22:10.057525 2026] [:error] [pid 17856:tid 17869] [client 20.215.250.169:51533] [client 20.215.250.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/hnphq.php"] [unique_id "acz_4j7Idlm5j9frhqTuUAAAAEs"]
[Wed Apr 01 19:22:12.807514 2026] [:error] [pid 8909:tid 8958] [client 20.215.250.169:50603] [client 20.215.250.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/b4txckoieeyhynhsrpi9lCdefault.php"] [unique_id "acz_5DvP_a0662gDl6BrOgAAANE"]
[Wed Apr 01 19:22:13.474549 2026] [:error] [pid 8908:tid 8913] [client 20.215.250.169:49872] [client 20.215.250.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/b4txckoieeyhynhsrpi9lCdefault.php"] [unique_id "acz_5fkmxtJXGnLdvgBYVgAAAIA"]
[Wed Apr 01 19:22:14.034954 2026] [:error] [pid 62559:tid 62563] [client 20.215.250.169:49904] [client 20.215.250.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/b4txckoieeyhynhsrpi9lCdefault.php"] [unique_id "acz_5i7NKI8IaNKZFId4SQAAAUI"]
[Wed Apr 01 19:22:14.707523 2026] [:error] [pid 17856:tid 17862] [client 20.215.250.169:49229] [client 20.215.250.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/b4txckoieeyhynhsrpi9lCdefault.php"] [unique_id "acz_5j7Idlm5j9frhqTuXAAAAEQ"]
[Wed Apr 01 19:22:15.253954 2026] [:error] [pid 8909:tid 8946] [client 20.215.250.169:51520] [client 20.215.250.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/aligk.php"] [unique_id "acz_5zvP_a0662gDl6BrQgAAAMU"]
[Wed Apr 01 19:22:15.877780 2026] [:error] [pid 8909:tid 8959] [client 20.215.250.169:50535] [client 20.215.250.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/aligk.php"] [unique_id "acz_5zvP_a0662gDl6BrRwAAANI"]
[Wed Apr 01 19:22:17.018615 2026] [:error] [pid 8910:tid 8986] [client 20.215.250.169:51538] [client 20.215.250.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/aligk.php"] [unique_id "acz_6aJZINUcF3tYgExF7wAAARI"]
[Wed Apr 01 19:22:18.049470 2026] [:error] [pid 8995:tid 9007] [client 20.215.250.169:49290] [client 20.215.250.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/aligk.php"] [unique_id "acz_6uonaBjs3qxcReeozQAAAAk"]
[Wed Apr 01 19:22:18.869658 2026] [:error] [pid 62559:tid 62580] [client 20.215.250.169:50939] [client 20.215.250.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/jlex.php"] [unique_id "acz_6i7NKI8IaNKZFId4TgAAAVM"]
[Wed Apr 01 19:22:20.019388 2026] [:error] [pid 62559:tid 62579] [client 20.215.250.169:50589] [client 20.215.250.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/jlex.php"] [unique_id "acz_7C7NKI8IaNKZFId4UgAAAVI"]
[Wed Apr 01 19:22:21.230906 2026] [:error] [pid 17856:tid 17871] [client 20.215.250.169:49979] [client 20.215.250.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/jlex.php"] [unique_id "acz_7T7Idlm5j9frhqTubAAAAE0"]
[Wed Apr 01 19:22:22.254397 2026] [:error] [pid 8995:tid 9011] [client 20.215.250.169:49918] [client 20.215.250.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/jlex.php"] [unique_id "acz_7uonaBjs3qxcReeo1wAAAA0"]
[Wed Apr 01 19:22:23.595589 2026] [:error] [pid 8995:tid 9016] [client 20.215.250.169:50551] [client 20.215.250.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-class-20260318124352.php"] [unique_id "acz_7-onaBjs3qxcReeo2AAAABI"]
[Wed Apr 01 19:22:25.069068 2026] [:error] [pid 8995:tid 9021] [client 20.215.250.169:51569] [client 20.215.250.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-class-20260318124352.php"] [unique_id "acz_8eonaBjs3qxcReeo2wAAABc"]
[Wed Apr 01 19:22:25.900836 2026] [:error] [pid 8908:tid 8916] [client 20.215.250.169:51573] [client 20.215.250.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-class-20260318124352.php"] [unique_id "acz_8fkmxtJXGnLdvgBYYwAAAIM"]
[Wed Apr 01 19:22:26.756898 2026] [:error] [pid 17856:tid 17874] [client 20.215.250.169:51639] [client 20.215.250.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-class-20260318124352.php"] [unique_id "acz_8j7Idlm5j9frhqTuhwAAAFA"]
[Wed Apr 01 19:22:27.405384 2026] [:error] [pid 62559:tid 62580] [client 20.215.250.169:51567] [client 20.215.250.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/5xkfgawzejgwqh9hiaznCdefault.php"] [unique_id "acz_8y7NKI8IaNKZFId4WQAAAVM"]
[Wed Apr 01 19:22:28.313717 2026] [:error] [pid 8909:tid 8949] [client 20.215.250.169:50907] [client 20.215.250.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/5xkfgawzejgwqh9hiaznCdefault.php"] [unique_id "acz_9DvP_a0662gDl6BraAAAAMg"]
[Wed Apr 01 19:22:29.629084 2026] [:error] [pid 8910:tid 8972] [client 20.215.250.169:49952] [client 20.215.250.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/5xkfgawzejgwqh9hiaznCdefault.php"] [unique_id "acz_9aJZINUcF3tYgExF_AAAAQQ"]
[Wed Apr 01 19:22:30.722111 2026] [:error] [pid 62559:tid 62583] [client 20.215.250.169:51564] [client 20.215.250.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/5xkfgawzejgwqh9hiaznCdefault.php"] [unique_id "acz_9i7NKI8IaNKZFId4YwAAAVY"]
[Wed Apr 01 19:22:32.811947 2026] [:error] [pid 8908:tid 8934] [client 20.215.250.169:50886] [client 20.215.250.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/Okxob.php"] [unique_id "acz_-PkmxtJXGnLdvgBYaQAAAJU"]
[Wed Apr 01 19:22:35.986811 2026] [:error] [pid 8908:tid 8930] [client 20.215.250.169:50497] [client 20.215.250.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/Okxob.php"] [unique_id "acz_-_kmxtJXGnLdvgBYcwAAAJE"]
[Wed Apr 01 19:22:36.701037 2026] [:error] [pid 8910:tid 8987] [client 20.215.250.169:52220] [client 20.215.250.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/Okxob.php"] [unique_id "acz__KJZINUcF3tYgExGAQAAARM"]
[Wed Apr 01 19:22:37.517926 2026] [:error] [pid 17856:tid 17878] [client 20.215.250.169:52281] [client 20.215.250.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/Okxob.php"] [unique_id "acz__T7Idlm5j9frhqTumAAAAFQ"]
[Wed Apr 01 19:22:38.313002 2026] [:error] [pid 8910:tid 8973] [client 20.215.250.169:52277] [client 20.215.250.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/q7lhrgzoo7ijhnkcedq2Cdefault.php"] [unique_id "acz__qJZINUcF3tYgExGAgAAAQU"]
[Wed Apr 01 19:22:39.359498 2026] [:error] [pid 8910:tid 8985] [client 20.215.250.169:50962] [client 20.215.250.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/q7lhrgzoo7ijhnkcedq2Cdefault.php"] [unique_id "acz__6JZINUcF3tYgExGBQAAARE"]
[Wed Apr 01 19:22:39.986447 2026] [:error] [pid 17856:tid 17873] [client 20.215.250.169:52248] [client 20.215.250.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/q7lhrgzoo7ijhnkcedq2Cdefault.php"] [unique_id "acz__z7Idlm5j9frhqTuowAAAE8"]
[Wed Apr 01 19:22:41.351460 2026] [:error] [pid 8910:tid 8992] [client 20.215.250.169:50617] [client 20.215.250.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/q7lhrgzoo7ijhnkcedq2Cdefault.php"] [unique_id "ac0AAaJZINUcF3tYgExGEAAAARg"]
[Wed Apr 01 19:22:42.179313 2026] [:error] [pid 17856:tid 17870] [client 20.215.250.169:50592] [client 20.215.250.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/kthusnjbc8ab0jiryls2jinCdefault.php"] [unique_id "ac0AAj7Idlm5j9frhqTuqgAAAEw"]
[Wed Apr 01 19:22:42.771963 2026] [:error] [pid 8995:tid 9015] [client 20.215.250.169:50537] [client 20.215.250.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/kthusnjbc8ab0jiryls2jinCdefault.php"] [unique_id "ac0AAuonaBjs3qxcReeo8AAAABE"]
[Wed Apr 01 19:22:43.588104 2026] [:error] [pid 8909:tid 8962] [client 20.215.250.169:50566] [client 20.215.250.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/kthusnjbc8ab0jiryls2jinCdefault.php"] [unique_id "ac0AAzvP_a0662gDl6BrhQAAANU"]
[Wed Apr 01 19:22:44.125760 2026] [:error] [pid 8995:tid 9001] [client 20.215.250.169:50928] [client 20.215.250.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/kthusnjbc8ab0jiryls2jinCdefault.php"] [unique_id "ac0ABOonaBjs3qxcReeo8wAAAAM"]
[Wed Apr 01 19:22:44.714112 2026] [:error] [pid 8909:tid 8942] [client 20.215.250.169:52235] [client 20.215.250.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/only.php"] [unique_id "ac0ABDvP_a0662gDl6BrigAAAME"]
[Wed Apr 01 19:22:45.323326 2026] [:error] [pid 8995:tid 9018] [client 20.215.250.169:51626] [client 20.215.250.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/only.php"] [unique_id "ac0ABeonaBjs3qxcReeo9wAAABQ"]
[Wed Apr 01 19:22:46.063920 2026] [:error] [pid 8910:tid 8986] [client 20.215.250.169:50910] [client 20.215.250.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/only.php"] [unique_id "ac0ABqJZINUcF3tYgExGGgAAARI"]
[Wed Apr 01 19:22:46.647593 2026] [:error] [pid 8909:tid 8950] [client 20.215.250.169:50983] [client 20.215.250.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/only.php"] [unique_id "ac0ABjvP_a0662gDl6BrkgAAAMk"]
[Wed Apr 01 19:22:47.265613 2026] [:error] [pid 8909:tid 8949] [client 20.215.250.169:51633] [client 20.215.250.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/repurify.php"] [unique_id "ac0ABzvP_a0662gDl6BrlQAAAMg"]
[Wed Apr 01 19:22:47.801137 2026] [:error] [pid 8909:tid 8963] [client 20.215.250.169:50549] [client 20.215.250.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/repurify.php"] [unique_id "ac0ABzvP_a0662gDl6BrlwAAANY"]
[Wed Apr 01 19:22:48.339128 2026] [:error] [pid 8995:tid 9019] [client 20.215.250.169:51596] [client 20.215.250.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/repurify.php"] [unique_id "ac0ACOonaBjs3qxcReeo-wAAABU"]
[Wed Apr 01 19:22:48.933105 2026] [:error] [pid 62559:tid 62565] [client 20.215.250.169:50988] [client 20.215.250.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/repurify.php"] [unique_id "ac0ACC7NKI8IaNKZFId4bgAAAUQ"]
[Wed Apr 01 19:22:49.452914 2026] [:error] [pid 8995:tid 8998] [client 20.215.250.169:52166] [client 20.215.250.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/tdsaz.php"] [unique_id "ac0ACeonaBjs3qxcReepAwAAAAA"]
[Wed Apr 01 19:22:50.079315 2026] [:error] [pid 8908:tid 8927] [client 20.215.250.169:50881] [client 20.215.250.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/tdsaz.php"] [unique_id "ac0ACvkmxtJXGnLdvgBYhAAAAI4"]
[Wed Apr 01 19:22:50.630863 2026] [:error] [pid 8908:tid 8933] [client 20.215.250.169:50880] [client 20.215.250.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/tdsaz.php"] [unique_id "ac0ACvkmxtJXGnLdvgBYhgAAAJQ"]
[Wed Apr 01 19:22:51.183793 2026] [:error] [pid 8910:tid 8980] [client 20.215.250.169:50547] [client 20.215.250.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/tdsaz.php"] [unique_id "ac0AC6JZINUcF3tYgExGIgAAAQw"]
[Wed Apr 01 19:22:51.700442 2026] [:error] [pid 62559:tid 62570] [client 20.215.250.169:50884] [client 20.215.250.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xwx1.php"] [unique_id "ac0ACy7NKI8IaNKZFId4cwAAAUk"]
[Wed Apr 01 19:22:52.270957 2026] [:error] [pid 8995:tid 9021] [client 20.215.250.169:50605] [client 20.215.250.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xwx1.php"] [unique_id "ac0ADOonaBjs3qxcReepDQAAABc"]
[Wed Apr 01 19:22:52.782046 2026] [:error] [pid 62559:tid 62563] [client 20.215.250.169:50610] [client 20.215.250.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xwx1.php"] [unique_id "ac0ADC7NKI8IaNKZFId4dwAAAUI"]
[Wed Apr 01 19:22:53.332208 2026] [:error] [pid 62559:tid 62575] [client 20.215.250.169:51562] [client 20.215.250.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xwx1.php"] [unique_id "ac0ADS7NKI8IaNKZFId4egAAAU4"]
[Wed Apr 01 19:22:53.852373 2026] [:error] [pid 62559:tid 62583] [client 20.215.250.169:50513] [client 20.215.250.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/hfles.php"] [unique_id "ac0ADS7NKI8IaNKZFId4ewAAAVY"]
[Wed Apr 01 19:22:54.391048 2026] [:error] [pid 8909:tid 8945] [client 20.215.250.169:49921] [client 20.215.250.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/hfles.php"] [unique_id "ac0ADjvP_a0662gDl6BrowAAAMQ"]
[Wed Apr 01 19:22:54.927929 2026] [:error] [pid 8909:tid 8965] [client 20.215.250.169:47874] [client 20.215.250.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/hfles.php"] [unique_id "ac0ADjvP_a0662gDl6BrqAAAANg"]
[Wed Apr 01 19:22:55.462813 2026] [:error] [pid 17856:tid 17858] [client 20.215.250.169:50970] [client 20.215.250.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/hfles.php"] [unique_id "ac0ADz7Idlm5j9frhqTuwwAAAEA"]
[Wed Apr 01 19:22:55.976308 2026] [:error] [pid 8910:tid 8975] [client 20.215.250.169:49938] [client 20.215.250.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "ac0AD6JZINUcF3tYgExGJQAAAQc"]
[Wed Apr 01 19:22:56.553358 2026] [:error] [pid 8908:tid 8932] [client 20.215.250.169:51532] [client 20.215.250.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "ac0AEPkmxtJXGnLdvgBYkAAAAJM"]
[Wed Apr 01 19:22:57.086467 2026] [:error] [pid 8910:tid 8973] [client 20.215.250.169:53030] [client 20.215.250.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "ac0AEaJZINUcF3tYgExGKgAAAQU"]
[Wed Apr 01 19:22:57.596817 2026] [:error] [pid 8908:tid 8933] [client 20.215.250.169:52932] [client 20.215.250.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "ac0AEfkmxtJXGnLdvgBYlQAAAJQ"]
[Wed Apr 01 19:22:58.117607 2026] [:error] [pid 8908:tid 8915] [client 20.215.250.169:50990] [client 20.215.250.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/byrgo.php"] [unique_id "ac0AEvkmxtJXGnLdvgBYlwAAAII"]
[Wed Apr 01 19:22:58.798930 2026] [:error] [pid 8910:tid 8979] [client 20.215.250.169:47925] [client 20.215.250.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/byrgo.php"] [unique_id "ac0AEqJZINUcF3tYgExGLgAAAQs"]
[Wed Apr 01 19:22:59.326829 2026] [:error] [pid 8908:tid 8937] [client 20.215.250.169:52256] [client 20.215.250.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/byrgo.php"] [unique_id "ac0AE_kmxtJXGnLdvgBYmQAAAJg"]
[Wed Apr 01 19:22:59.843631 2026] [:error] [pid 8910:tid 8970] [client 20.215.250.169:50576] [client 20.215.250.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/byrgo.php"] [unique_id "ac0AE6JZINUcF3tYgExGMAAAAQI"]
[Wed Apr 01 19:23:00.364939 2026] [:error] [pid 8909:tid 8964] [client 20.215.250.169:52195] [client 20.215.250.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-class-20260318122951.php"] [unique_id "ac0AFDvP_a0662gDl6BruAAAANc"]
[Wed Apr 01 19:23:00.892128 2026] [:error] [pid 17856:tid 17865] [client 20.215.250.169:50964] [client 20.215.250.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-class-20260318122951.php"] [unique_id "ac0AFD7Idlm5j9frhqTuzQAAAEc"]
[Wed Apr 01 19:23:01.494544 2026] [:error] [pid 17856:tid 17858] [client 20.215.250.169:51551] [client 20.215.250.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-class-20260318122951.php"] [unique_id "ac0AFT7Idlm5j9frhqTu0wAAAEA"]
[Wed Apr 01 19:23:02.104599 2026] [:error] [pid 8995:tid 9016] [client 20.215.250.169:51628] [client 20.215.250.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-class-20260318122951.php"] [unique_id "ac0AFuonaBjs3qxcReepGwAAABI"]
[Wed Apr 01 19:23:02.739043 2026] [:error] [pid 8995:tid 8998] [client 20.215.250.169:51530] [client 20.215.250.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/lupo.php"] [unique_id "ac0AFuonaBjs3qxcReepHQAAAAA"]
[Wed Apr 01 19:23:03.315889 2026] [:error] [pid 17856:tid 17861] [client 20.215.250.169:51542] [client 20.215.250.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/lupo.php"] [unique_id "ac0AFz7Idlm5j9frhqTu1gAAAEM"]
[Wed Apr 01 19:23:03.965976 2026] [:error] [pid 62559:tid 62569] [client 20.215.250.169:51593] [client 20.215.250.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/lupo.php"] [unique_id "ac0AFy7NKI8IaNKZFId4gQAAAUg"]
[Wed Apr 01 19:23:04.674763 2026] [proxy_fcgi:error] [pid 8909:tid 8950] [client 20.215.250.169:51598] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 19:23:04.959946 2026] [proxy_fcgi:error] [pid 8909:tid 8964] [client 20.215.250.169:51598] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 19:23:05.219762 2026] [proxy_fcgi:error] [pid 8909:tid 8954] [client 20.215.250.169:51598] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 19:23:05.477346 2026] [proxy_fcgi:error] [pid 8909:tid 8958] [client 20.215.250.169:51598] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 19:23:05.766387 2026] [proxy_fcgi:error] [pid 8909:tid 8957] [client 20.215.250.169:51598] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 19:23:06.053291 2026] [proxy_fcgi:error] [pid 8909:tid 8945] [client 20.215.250.169:51598] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 19:23:06.330859 2026] [proxy_fcgi:error] [pid 8909:tid 8951] [client 20.215.250.169:51598] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 19:23:06.591414 2026] [proxy_fcgi:error] [pid 8909:tid 8962] [client 20.215.250.169:51598] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 19:23:06.850003 2026] [proxy_fcgi:error] [pid 8909:tid 8956] [client 20.215.250.169:51598] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 19:23:07.355569 2026] [proxy_fcgi:error] [pid 8909:tid 8958] [client 20.215.250.169:51598] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 19:23:07.638205 2026] [proxy_fcgi:error] [pid 8909:tid 8952] [client 20.215.250.169:51598] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 19:23:07.914333 2026] [:error] [pid 8909:tid 8960] [client 20.215.250.169:51598] [client 20.215.250.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xy.php"] [unique_id "ac0AGzvP_a0662gDl6Br6QAAANM"]
[Wed Apr 01 19:23:11.238191 2026] [:error] [pid 8909:tid 8945] [client 20.215.250.169:52269] [client 20.215.250.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xy.php"] [unique_id "ac0AHzvP_a0662gDl6Br_wAAAMQ"]
[Wed Apr 01 19:23:12.433978 2026] [:error] [pid 8909:tid 8959] [client 20.215.250.169:50902] [client 20.215.250.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xy.php"] [unique_id "ac0AIDvP_a0662gDl6BsBgAAANI"]
[Wed Apr 01 19:23:13.277037 2026] [:error] [pid 62559:tid 62582] [client 20.215.250.169:52177] [client 20.215.250.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xy.php"] [unique_id "ac0AIS7NKI8IaNKZFId4iQAAAVU"]
[Wed Apr 01 19:23:13.895516 2026] [:error] [pid 62559:tid 62574] [client 20.215.250.169:51570] [client 20.215.250.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/rogsa.php"] [unique_id "ac0AIS7NKI8IaNKZFId4igAAAU0"]
[Wed Apr 01 19:23:14.547116 2026] [:error] [pid 8908:tid 8937] [client 20.215.250.169:53017] [client 20.215.250.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/rogsa.php"] [unique_id "ac0AIvkmxtJXGnLdvgBYugAAAJg"]
[Wed Apr 01 19:23:15.066783 2026] [:error] [pid 17856:tid 17878] [client 20.215.250.169:52198] [client 20.215.250.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/rogsa.php"] [unique_id "ac0AIz7Idlm5j9frhqTu-wAAAFQ"]
[Wed Apr 01 19:23:15.627602 2026] [:error] [pid 8909:tid 8963] [client 20.215.250.169:51609] [client 20.215.250.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/rogsa.php"] [unique_id "ac0AIzvP_a0662gDl6BsDAAAANY"]
[Wed Apr 01 19:23:16.289623 2026] [:error] [pid 8909:tid 8961] [client 20.215.250.169:52251] [client 20.215.250.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/htzevfl4k9ey5hoaywdwiCdefault.php"] [unique_id "ac0AJDvP_a0662gDl6BsDwAAANQ"]
[Wed Apr 01 19:23:16.808906 2026] [:error] [pid 17856:tid 17860] [client 20.215.250.169:52160] [client 20.215.250.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/htzevfl4k9ey5hoaywdwiCdefault.php"] [unique_id "ac0AJD7Idlm5j9frhqTvBQAAAEI"]
[Wed Apr 01 19:23:17.412336 2026] [:error] [pid 8909:tid 8963] [client 20.215.250.169:52950] [client 20.215.250.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/htzevfl4k9ey5hoaywdwiCdefault.php"] [unique_id "ac0AJTvP_a0662gDl6BsFAAAANY"]
[Wed Apr 01 19:23:17.948304 2026] [:error] [pid 8909:tid 8943] [client 20.215.250.169:52982] [client 20.215.250.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/htzevfl4k9ey5hoaywdwiCdefault.php"] [unique_id "ac0AJTvP_a0662gDl6BsGwAAAMI"]
[Wed Apr 01 19:23:18.512033 2026] [:error] [pid 8909:tid 8942] [client 20.215.250.169:52938] [client 20.215.250.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/sadcut1.php"] [unique_id "ac0AJjvP_a0662gDl6BsJAAAAME"]
[Wed Apr 01 19:23:19.035780 2026] [:error] [pid 8909:tid 8948] [client 20.215.250.169:52280] [client 20.215.250.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/sadcut1.php"] [unique_id "ac0AJzvP_a0662gDl6BsJwAAAMc"]
[Wed Apr 01 19:23:19.587011 2026] [:error] [pid 17856:tid 17878] [client 20.215.250.169:51589] [client 20.215.250.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/sadcut1.php"] [unique_id "ac0AJz7Idlm5j9frhqTvCAAAAFQ"]
[Wed Apr 01 19:23:20.129299 2026] [:error] [pid 8909:tid 8956] [client 20.215.250.169:51558] [client 20.215.250.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/sadcut1.php"] [unique_id "ac0AKDvP_a0662gDl6BsKQAAAM8"]
[Wed Apr 01 19:23:20.671690 2026] [:error] [pid 17856:tid 17864] [client 20.215.250.169:52254] [client 20.215.250.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/nhj6t74aqmkde3hgpCdefault.php"] [unique_id "ac0AKD7Idlm5j9frhqTvDQAAAEY"]
[Wed Apr 01 19:23:21.221241 2026] [:error] [pid 62559:tid 62566] [client 20.215.250.169:52973] [client 20.215.250.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/nhj6t74aqmkde3hgpCdefault.php"] [unique_id "ac0AKS7NKI8IaNKZFId4lwAAAUU"]
[Wed Apr 01 19:23:21.744577 2026] [:error] [pid 8995:tid 9009] [client 20.215.250.169:50913] [client 20.215.250.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/nhj6t74aqmkde3hgpCdefault.php"] [unique_id "ac0AKeonaBjs3qxcReepLQAAAAs"]
[Wed Apr 01 19:23:22.286722 2026] [:error] [pid 8909:tid 8953] [client 20.215.250.169:51588] [client 20.215.250.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/nhj6t74aqmkde3hgpCdefault.php"] [unique_id "ac0AKjvP_a0662gDl6BsLQAAAMw"]
[Wed Apr 01 19:23:22.826261 2026] [:error] [pid 17856:tid 17862] [client 20.215.250.169:52928] [client 20.215.250.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wlld5fjtdpjmjhsds3qzmipfCdefault.php"] [unique_id "ac0AKj7Idlm5j9frhqTvEwAAAEQ"]
[Wed Apr 01 19:23:23.339467 2026] [:error] [pid 17856:tid 17866] [client 20.215.250.169:51575] [client 20.215.250.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wlld5fjtdpjmjhsds3qzmipfCdefault.php"] [unique_id "ac0AKz7Idlm5j9frhqTvFgAAAEg"]
[Wed Apr 01 19:23:23.863584 2026] [:error] [pid 17856:tid 17863] [client 20.215.250.169:50963] [client 20.215.250.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wlld5fjtdpjmjhsds3qzmipfCdefault.php"] [unique_id "ac0AKz7Idlm5j9frhqTvGQAAAEU"]
[Wed Apr 01 19:23:24.386432 2026] [:error] [pid 8908:tid 8924] [client 20.215.250.169:51546] [client 20.215.250.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wlld5fjtdpjmjhsds3qzmipfCdefault.php"] [unique_id "ac0ALPkmxtJXGnLdvgBYyQAAAIs"]
[Wed Apr 01 19:23:25.010868 2026] [:error] [pid 8908:tid 8929] [client 20.215.250.169:51625] [client 20.215.250.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "ac0ALfkmxtJXGnLdvgBYzgAAAJA"]
[Wed Apr 01 19:23:25.578582 2026] [:error] [pid 62559:tid 62572] [client 20.215.250.169:50889] [client 20.215.250.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "ac0ALS7NKI8IaNKZFId4owAAAUs"]
[Wed Apr 01 19:23:26.132562 2026] [:error] [pid 8995:tid 9014] [client 20.215.250.169:50953] [client 20.215.250.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "ac0ALuonaBjs3qxcReepNgAAABA"]
[Wed Apr 01 19:23:26.658497 2026] [:error] [pid 62559:tid 62574] [client 20.215.250.169:51545] [client 20.215.250.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "ac0ALi7NKI8IaNKZFId4qgAAAU0"]
[Wed Apr 01 19:23:27.214723 2026] [:error] [pid 62559:tid 62585] [client 20.215.250.169:50926] [client 20.215.250.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/a6.php"] [unique_id "ac0ALy7NKI8IaNKZFId4rAAAAVg"]
[Wed Apr 01 19:23:27.726341 2026] [:error] [pid 17856:tid 17875] [client 20.215.250.169:48605] [client 20.215.250.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/a6.php"] [unique_id "ac0ALz7Idlm5j9frhqTvIQAAAFE"]
[Wed Apr 01 19:23:28.269140 2026] [:error] [pid 17856:tid 17869] [client 20.215.250.169:51598] [client 20.215.250.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/a6.php"] [unique_id "ac0AMD7Idlm5j9frhqTvJgAAAEs"]
[Wed Apr 01 19:23:28.793844 2026] [:error] [pid 17856:tid 17881] [client 20.215.250.169:53673] [client 20.215.250.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/a6.php"] [unique_id "ac0AMD7Idlm5j9frhqTvKgAAAFc"]
[Wed Apr 01 19:23:29.332015 2026] [:error] [pid 17856:tid 17868] [client 20.215.250.169:51611] [client 20.215.250.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ac0AMT7Idlm5j9frhqTvLwAAAEo"]
[Wed Apr 01 19:23:29.944939 2026] [:error] [pid 17856:tid 17881] [client 20.215.250.169:53048] [client 20.215.250.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ac0AMT7Idlm5j9frhqTvNwAAAFc"]
[Wed Apr 01 19:23:31.209975 2026] [:error] [pid 17856:tid 17869] [client 20.215.250.169:51581] [client 20.215.250.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/hbvdoz7cy9k6xge9zhuvkvitCdefault.php"] [unique_id "ac0AMz7Idlm5j9frhqTvPgAAAEs"]
[Wed Apr 01 19:23:32.090052 2026] [:error] [pid 17856:tid 17877] [client 20.215.250.169:51613] [client 20.215.250.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wziar1.php"] [unique_id "ac0AND7Idlm5j9frhqTvRgAAAFM"]
[Wed Apr 01 19:23:32.649174 2026] [:error] [pid 17856:tid 17876] [client 20.215.250.169:53010] [client 20.215.250.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wziar1.php"] [unique_id "ac0AND7Idlm5j9frhqTvTQAAAFI"]
[Wed Apr 01 19:23:33.536940 2026] [:error] [pid 8910:tid 8979] [client 20.215.250.169:49307] [client 20.215.250.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/fsgdjkl.php"] [unique_id "ac0ANaJZINUcF3tYgExGUQAAAQs"]
[Wed Apr 01 19:23:34.717490 2026] [:error] [pid 17856:tid 17876] [client 20.215.250.169:53568] [client 20.215.250.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/fsgdjkl.php"] [unique_id "ac0ANj7Idlm5j9frhqTvVQAAAFI"]
[Wed Apr 01 19:23:36.275916 2026] [:error] [pid 8909:tid 8951] [client 20.215.250.169:52207] [client 20.215.250.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/fsgdjkl.php"] [unique_id "ac0AODvP_a0662gDl6BsRAAAAMo"]
[Wed Apr 01 19:23:38.345989 2026] [:error] [pid 8909:tid 8965] [client 20.215.250.169:50954] [client 20.215.250.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/fsgdjkl.php"] [unique_id "ac0AOjvP_a0662gDl6BsWwAAANg"]
[Wed Apr 01 19:23:41.181839 2026] [:error] [pid 8908:tid 8928] [client 20.215.250.169:53573] [client 20.215.250.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/exhds0ucw0ju9vjgasxqCdefault.php"] [unique_id "ac0APfkmxtJXGnLdvgBY8QAAAI8"]
[Wed Apr 01 19:23:42.534632 2026] [:error] [pid 8909:tid 8950] [client 20.215.250.169:53643] [client 20.215.250.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/exhds0ucw0ju9vjgasxqCdefault.php"] [unique_id "ac0APjvP_a0662gDl6BseQAAAMk"]
[Wed Apr 01 19:23:43.214934 2026] [:error] [pid 8909:tid 8958] [client 20.215.250.169:51616] [client 20.215.250.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/exhds0ucw0ju9vjgasxqCdefault.php"] [unique_id "ac0APzvP_a0662gDl6BsgAAAANE"]
[Wed Apr 01 19:23:43.741049 2026] [:error] [pid 8909:tid 8960] [client 20.215.250.169:51612] [client 20.215.250.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/exhds0ucw0ju9vjgasxqCdefault.php"] [unique_id "ac0APzvP_a0662gDl6BshQAAANM"]
[Wed Apr 01 19:23:44.395727 2026] [:error] [pid 8908:tid 8935] [client 20.215.250.169:51597] [client 20.215.250.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/CDX2.php"] [unique_id "ac0AQPkmxtJXGnLdvgBY-gAAAJY"]
[Wed Apr 01 19:23:45.041049 2026] [:error] [pid 8909:tid 8952] [client 20.215.250.169:52197] [client 20.215.250.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/CDX2.php"] [unique_id "ac0AQTvP_a0662gDl6BskAAAAMs"]
[Wed Apr 01 19:23:45.571001 2026] [:error] [pid 8909:tid 8956] [client 20.215.250.169:53639] [client 20.215.250.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/CDX2.php"] [unique_id "ac0AQTvP_a0662gDl6BskwAAAM8"]
[Wed Apr 01 19:23:46.112355 2026] [:error] [pid 8909:tid 8961] [client 20.215.250.169:53023] [client 20.215.250.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/CDX2.php"] [unique_id "ac0AQjvP_a0662gDl6BsmgAAANQ"]
[Wed Apr 01 19:23:46.642000 2026] [:error] [pid 62559:tid 62583] [client 20.215.250.169:53018] [client 20.215.250.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/a8.php"] [unique_id "ac0AQi7NKI8IaNKZFId42gAAAVY"]
[Wed Apr 01 19:23:47.227528 2026] [:error] [pid 17856:tid 17859] [client 20.215.250.169:53598] [client 20.215.250.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/a8.php"] [unique_id "ac0AQz7Idlm5j9frhqTvZwAAAEE"]
[Wed Apr 01 19:23:47.749442 2026] [:error] [pid 8908:tid 8915] [client 20.215.250.169:52945] [client 20.215.250.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/a8.php"] [unique_id "ac0AQ_kmxtJXGnLdvgBY_AAAAII"]
[Wed Apr 01 19:23:48.313860 2026] [:error] [pid 8909:tid 8964] [client 20.215.250.169:52255] [client 20.215.250.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/a8.php"] [unique_id "ac0ARDvP_a0662gDl6BsqwAAANc"]
[Wed Apr 01 19:23:48.856704 2026] [:error] [pid 17856:tid 17867] [client 20.215.250.169:50946] [client 20.215.250.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "ac0ARD7Idlm5j9frhqTvbQAAAEk"]
[Wed Apr 01 19:23:49.397809 2026] [:error] [pid 17856:tid 17879] [client 20.215.250.169:53680] [client 20.215.250.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "ac0ART7Idlm5j9frhqTvbwAAAFU"]
[Wed Apr 01 19:23:49.953526 2026] [:error] [pid 8995:tid 9003] [client 20.215.250.169:51559] [client 20.215.250.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "ac0AReonaBjs3qxcReepdAAAAAU"]
[Wed Apr 01 19:23:50.497468 2026] [:error] [pid 8909:tid 8951] [client 20.215.250.169:52208] [client 20.215.250.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "ac0ARjvP_a0662gDl6BsuQAAAMo"]
[Wed Apr 01 19:23:51.205626 2026] [:error] [pid 8995:tid 9002] [client 20.215.250.169:49929] [client 20.215.250.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ortasekerli1.php"] [unique_id "ac0AR-onaBjs3qxcReepdgAAAAQ"]
[Wed Apr 01 19:23:51.753412 2026] [:error] [pid 8908:tid 8933] [client 20.215.250.169:52929] [client 20.215.250.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ortasekerli1.php"] [unique_id "ac0AR_kmxtJXGnLdvgBZAwAAAJQ"]
[Wed Apr 01 19:23:53.081825 2026] [:error] [pid 62559:tid 62577] [client 20.215.250.169:52246] [client 20.215.250.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ortasekerli1.php"] [unique_id "ac0ASS7NKI8IaNKZFId44gAAAVA"]
[Wed Apr 01 19:23:54.311802 2026] [:error] [pid 17856:tid 17876] [client 20.215.250.169:52219] [client 20.215.250.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ortasekerli1.php"] [unique_id "ac0ASj7Idlm5j9frhqTvewAAAFI"]
[Wed Apr 01 19:23:55.447812 2026] [:error] [pid 8909:tid 8957] [client 20.215.250.169:52954] [client 20.215.250.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/a7.php"] [unique_id "ac0ASzvP_a0662gDl6BsygAAANA"]
[Wed Apr 01 19:23:56.061513 2026] [:error] [pid 8909:tid 8961] [client 20.215.250.169:52276] [client 20.215.250.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/a7.php"] [unique_id "ac0ATDvP_a0662gDl6Bs0gAAANQ"]
[Wed Apr 01 19:23:56.726409 2026] [:error] [pid 8909:tid 8949] [client 20.215.250.169:52185] [client 20.215.250.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/a7.php"] [unique_id "ac0ATDvP_a0662gDl6Bs3QAAAMg"]
[Wed Apr 01 19:23:57.762883 2026] [:error] [pid 8909:tid 8964] [client 20.215.250.169:52965] [client 20.215.250.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/a7.php"] [unique_id "ac0ATTvP_a0662gDl6Bs6QAAANc"]
[Wed Apr 01 19:23:59.025913 2026] [:error] [pid 8909:tid 8961] [client 20.215.250.169:51547] [client 20.215.250.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/index-20260330022921.php"] [unique_id "ac0ATzvP_a0662gDl6Bs9gAAANQ"]
[Wed Apr 01 19:24:01.207065 2026] [:error] [pid 62559:tid 62565] [client 20.215.250.169:54397] [client 20.215.250.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/index-20260330022921.php"] [unique_id "ac0AUS7NKI8IaNKZFId47wAAAUQ"]
[Wed Apr 01 19:24:19.490429 2026] [proxy_fcgi:error] [pid 8908:tid 8936] [client 20.215.250.169:4140] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 19:24:19.768588 2026] [proxy_fcgi:error] [pid 8908:tid 8925] [client 20.215.250.169:4140] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 19:24:20.027657 2026] [proxy_fcgi:error] [pid 8908:tid 8918] [client 20.215.250.169:4140] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 19:24:20.306323 2026] [proxy_fcgi:error] [pid 8908:tid 8920] [client 20.215.250.169:4140] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 19:24:20.593536 2026] [proxy_fcgi:error] [pid 8908:tid 8927] [client 20.215.250.169:4140] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 19:24:20.879564 2026] [proxy_fcgi:error] [pid 8908:tid 8930] [client 20.215.250.169:4140] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 22:25:21.757465 2026] [:error] [pid 62559:tid 62573] [client 172.161.64.10:4270] [client 172.161.64.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ac0q0S7NKI8IaNKZFIfCaAAAAUw"]
[Wed Apr 01 22:25:23.439809 2026] [:error] [pid 8909:tid 8943] [client 172.161.64.10:31375] [client 172.161.64.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ac0q0zvP_a0662gDl6D2XwAAAMI"]
[Wed Apr 01 22:25:24.749222 2026] [:error] [pid 8908:tid 8921] [client 172.161.64.10:27937] [client 172.161.64.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ac0q1PkmxtJXGnLdvgCviAAAAIg"]
[Wed Apr 01 22:25:25.935442 2026] [:error] [pid 8995:tid 9007] [client 172.161.64.10:27187] [client 172.161.64.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ac0q1eonaBjs3qxcRefg5wAAAAk"]
[Thu Apr 02 00:27:12.836278 2026] [proxy_fcgi:error] [pid 17856:tid 17872] [client 20.116.26.190:21479] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 00:27:13.672753 2026] [proxy_fcgi:error] [pid 17856:tid 17880] [client 20.116.26.190:21479] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 00:27:14.926297 2026] [:error] [pid 17856:tid 17858] [client 20.116.26.190:21479] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/w/app/tools/functions.php"] [unique_id "ac1HYj7Idlm5j9frhqSTrwAAAEA"]
[Thu Apr 02 00:27:15.371816 2026] [:error] [pid 8910:tid 8992] [client 20.116.26.190:21487] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/w/app/tools/functions.php"] [unique_id "ac1HY6JZINUcF3tYgEySDQAAARg"]
[Thu Apr 02 00:27:15.800733 2026] [:error] [pid 8909:tid 8956] [client 20.116.26.190:21376] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/w/app/tools/functions.php"] [unique_id "ac1HYzvP_a0662gDl6Az7QAAAM8"]
[Thu Apr 02 00:27:16.237558 2026] [:error] [pid 8995:tid 9008] [client 20.116.26.190:21490] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/w/app/tools/functions.php"] [unique_id "ac1HZOonaBjs3qxcRecIAwAAAAo"]
[Thu Apr 02 00:27:16.675136 2026] [:error] [pid 8909:tid 8944] [client 20.116.26.190:21450] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/w/app/database/basic.php"] [unique_id "ac1HZDvP_a0662gDl6Az9AAAAMM"]
[Thu Apr 02 00:27:17.124530 2026] [:error] [pid 62559:tid 62561] [client 20.116.26.190:21464] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/w/app/database/basic.php"] [unique_id "ac1HZS7NKI8IaNKZFIct-AAAAUA"]
[Thu Apr 02 00:27:17.547566 2026] [:error] [pid 8909:tid 8951] [client 20.116.26.190:21393] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/w/app/database/basic.php"] [unique_id "ac1HZTvP_a0662gDl6Az9wAAAMo"]
[Thu Apr 02 00:27:17.976265 2026] [:error] [pid 8909:tid 8964] [client 20.116.26.190:21480] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/w/app/database/basic.php"] [unique_id "ac1HZTvP_a0662gDl6Az_AAAANc"]
[Thu Apr 02 00:27:18.400936 2026] [:error] [pid 17856:tid 17865] [client 20.116.26.190:21463] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/w/template/views/.php"] [unique_id "ac1HZj7Idlm5j9frhqSTswAAAEc"]
[Thu Apr 02 00:27:18.830685 2026] [:error] [pid 8909:tid 8961] [client 20.116.26.190:21471] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/w/template/views/.php"] [unique_id "ac1HZjvP_a0662gDl6A0AgAAANQ"]
[Thu Apr 02 00:27:19.249078 2026] [:error] [pid 62559:tid 62568] [client 20.116.26.190:21476] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/w/template/views/.php"] [unique_id "ac1HZy7NKI8IaNKZFIct-wAAAUc"]
[Thu Apr 02 00:27:19.667037 2026] [:error] [pid 17856:tid 17871] [client 20.116.26.190:21474] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/w/template/views/.php"] [unique_id "ac1HZz7Idlm5j9frhqSTtwAAAE0"]
[Thu Apr 02 00:27:20.078204 2026] [:error] [pid 8909:tid 8941] [client 20.116.26.190:21400] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/admin-ajax.php"] [unique_id "ac1HaDvP_a0662gDl6A0BwAAAMA"]
[Thu Apr 02 00:27:20.498979 2026] [:error] [pid 8908:tid 8934] [client 20.116.26.190:21455] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/admin-ajax.php"] [unique_id "ac1HaPkmxtJXGnLdvgD-pQAAAJU"]
[Thu Apr 02 00:27:20.915548 2026] [:error] [pid 8995:tid 9013] [client 20.116.26.190:21503] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/admin-ajax.php"] [unique_id "ac1HaOonaBjs3qxcRecIBgAAAA8"]
[Thu Apr 02 00:27:21.340871 2026] [:error] [pid 8995:tid 9012] [client 20.116.26.190:21385] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/admin-ajax.php"] [unique_id "ac1HaeonaBjs3qxcRecIBwAAAA4"]
[Thu Apr 02 00:27:21.753762 2026] [:error] [pid 8908:tid 8927] [client 20.116.26.190:21317] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/themes.php"] [unique_id "ac1HafkmxtJXGnLdvgD-qwAAAI4"]
[Thu Apr 02 00:27:22.178744 2026] [:error] [pid 8910:tid 8979] [client 20.116.26.190:21446] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/themes.php"] [unique_id "ac1HaqJZINUcF3tYgEySEQAAAQs"]
[Thu Apr 02 00:27:22.595803 2026] [:error] [pid 8908:tid 8935] [client 20.116.26.190:21481] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/themes.php"] [unique_id "ac1HavkmxtJXGnLdvgD-rgAAAJY"]
[Thu Apr 02 00:27:23.013606 2026] [:error] [pid 8909:tid 8948] [client 20.116.26.190:21458] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/themes.php"] [unique_id "ac1HazvP_a0662gDl6A0FAAAAMc"]
[Thu Apr 02 00:27:23.447290 2026] [:error] [pid 8908:tid 8924] [client 20.116.26.190:21466] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/profile.php"] [unique_id "ac1Ha_kmxtJXGnLdvgD-rwAAAIs"]
[Thu Apr 02 00:27:23.858709 2026] [:error] [pid 8908:tid 8937] [client 20.116.26.190:21388] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/profile.php"] [unique_id "ac1Ha_kmxtJXGnLdvgD-sQAAAJg"]
[Thu Apr 02 00:27:24.278139 2026] [:error] [pid 62559:tid 62570] [client 20.116.26.190:21449] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/profile.php"] [unique_id "ac1HbC7NKI8IaNKZFIcuAwAAAUk"]
[Thu Apr 02 00:27:24.689996 2026] [:error] [pid 8908:tid 8934] [client 20.116.26.190:21502] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/profile.php"] [unique_id "ac1HbPkmxtJXGnLdvgD-tQAAAJU"]
[Thu Apr 02 00:27:25.106138 2026] [:error] [pid 8995:tid 9008] [client 20.116.26.190:21466] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wer.php"] [unique_id "ac1HbeonaBjs3qxcRecIDgAAAAo"]
[Thu Apr 02 00:27:25.526487 2026] [:error] [pid 8909:tid 8951] [client 20.116.26.190:21492] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wer.php"] [unique_id "ac1HbTvP_a0662gDl6A0GQAAAMo"]
[Thu Apr 02 00:27:25.941783 2026] [:error] [pid 62559:tid 62569] [client 20.116.26.190:21441] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wer.php"] [unique_id "ac1HbS7NKI8IaNKZFIcuCgAAAUg"]
[Thu Apr 02 00:27:26.378635 2026] [:error] [pid 8909:tid 8945] [client 20.116.26.190:21390] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wer.php"] [unique_id "ac1HbjvP_a0662gDl6A0GgAAAMQ"]
[Thu Apr 02 00:27:26.794296 2026] [:error] [pid 8908:tid 8915] [client 20.116.26.190:21488] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/crouter.php"] [unique_id "ac1HbvkmxtJXGnLdvgD-ugAAAII"]
[Thu Apr 02 00:27:27.209459 2026] [:error] [pid 8908:tid 8937] [client 20.116.26.190:21391] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/crouter.php"] [unique_id "ac1Hb_kmxtJXGnLdvgD-wAAAAJg"]
[Thu Apr 02 00:27:27.623181 2026] [:error] [pid 8908:tid 8921] [client 20.116.26.190:21377] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/crouter.php"] [unique_id "ac1Hb_kmxtJXGnLdvgD-xAAAAIg"]
[Thu Apr 02 00:27:28.032641 2026] [:error] [pid 62559:tid 62573] [client 20.116.26.190:21493] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/crouter.php"] [unique_id "ac1HcC7NKI8IaNKZFIcuDwAAAUw"]
[Thu Apr 02 00:27:28.483743 2026] [:error] [pid 8908:tid 8936] [client 20.116.26.190:21421] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/COPYRIGHT.php"] [unique_id "ac1HcPkmxtJXGnLdvgD-yAAAAJc"]
[Thu Apr 02 00:27:28.902997 2026] [:error] [pid 8909:tid 8958] [client 20.116.26.190:21417] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/COPYRIGHT.php"] [unique_id "ac1HcDvP_a0662gDl6A0IQAAANE"]
[Thu Apr 02 00:27:29.315420 2026] [:error] [pid 8995:tid 9015] [client 20.116.26.190:21392] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/COPYRIGHT.php"] [unique_id "ac1HceonaBjs3qxcRecIEAAAABE"]
[Thu Apr 02 00:27:29.731061 2026] [:error] [pid 62559:tid 62578] [client 20.116.26.190:21475] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/COPYRIGHT.php"] [unique_id "ac1HcS7NKI8IaNKZFIcuEwAAAVE"]
[Thu Apr 02 00:27:30.144612 2026] [:error] [pid 62559:tid 62569] [client 20.116.26.190:21495] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/assets/images/hehe.php"] [unique_id "ac1Hci7NKI8IaNKZFIcuGQAAAUg"]
[Thu Apr 02 00:27:30.562540 2026] [:error] [pid 62559:tid 62579] [client 20.116.26.190:21448] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/assets/images/hehe.php"] [unique_id "ac1Hci7NKI8IaNKZFIcuHQAAAVI"]
[Thu Apr 02 00:27:30.977817 2026] [:error] [pid 8910:tid 8974] [client 20.116.26.190:21486] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/assets/images/hehe.php"] [unique_id "ac1HcqJZINUcF3tYgEySFgAAAQY"]
[Thu Apr 02 00:27:31.401980 2026] [:error] [pid 8910:tid 8968] [client 20.116.26.190:21472] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/assets/images/hehe.php"] [unique_id "ac1Hc6JZINUcF3tYgEySGAAAAQA"]
[Thu Apr 02 00:27:31.835459 2026] [:error] [pid 8995:tid 9020] [client 20.116.26.190:21406] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-conter.php"] [unique_id "ac1Hc-onaBjs3qxcRecIFwAAABY"]
[Thu Apr 02 00:27:32.268342 2026] [:error] [pid 8910:tid 8981] [client 20.116.26.190:21461] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-conter.php"] [unique_id "ac1HdKJZINUcF3tYgEySHQAAAQ0"]
[Thu Apr 02 00:27:32.689334 2026] [:error] [pid 8909:tid 8943] [client 20.116.26.190:21460] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-conter.php"] [unique_id "ac1HdDvP_a0662gDl6A0KAAAAMI"]
[Thu Apr 02 00:27:33.112950 2026] [:error] [pid 8908:tid 8937] [client 20.116.26.190:21381] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-conter.php"] [unique_id "ac1HdfkmxtJXGnLdvgD-1AAAAJg"]
[Thu Apr 02 00:27:33.541000 2026] [:error] [pid 62559:tid 62580] [client 20.116.26.190:21326] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ua/index_old.php"] [unique_id "ac1HdS7NKI8IaNKZFIcuJwAAAVM"]
[Thu Apr 02 00:27:33.962356 2026] [:error] [pid 62559:tid 62568] [client 20.116.26.190:21436] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ua/index_old.php"] [unique_id "ac1HdS7NKI8IaNKZFIcuKgAAAUc"]
[Thu Apr 02 00:27:34.384828 2026] [:error] [pid 8908:tid 8918] [client 20.116.26.190:21389] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ua/index_old.php"] [unique_id "ac1HdvkmxtJXGnLdvgD-3QAAAIU"]
[Thu Apr 02 00:27:34.800034 2026] [:error] [pid 17856:tid 17862] [client 20.116.26.190:21382] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ua/index_old.php"] [unique_id "ac1Hdj7Idlm5j9frhqSTvwAAAEQ"]
[Thu Apr 02 00:27:35.236049 2026] [:error] [pid 17856:tid 17863] [client 20.116.26.190:21383] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/js/upgrade.php"] [unique_id "ac1Hdz7Idlm5j9frhqSTwQAAAEU"]
[Thu Apr 02 00:27:35.690808 2026] [:error] [pid 8908:tid 8916] [client 20.116.26.190:21454] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/js/upgrade.php"] [unique_id "ac1Hd_kmxtJXGnLdvgD-3wAAAIM"]
[Thu Apr 02 00:27:36.101655 2026] [:error] [pid 8908:tid 8935] [client 20.116.26.190:21408] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/js/upgrade.php"] [unique_id "ac1HePkmxtJXGnLdvgD-4AAAAJY"]
[Thu Apr 02 00:27:36.513313 2026] [:error] [pid 62559:tid 62568] [client 20.116.26.190:21412] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/js/upgrade.php"] [unique_id "ac1HeC7NKI8IaNKZFIcuNAAAAUc"]
[Thu Apr 02 00:27:36.933858 2026] [:error] [pid 62559:tid 62576] [client 20.116.26.190:21415] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-adminmaintmailer.php"] [unique_id "ac1HeC7NKI8IaNKZFIcuOAAAAU8"]
[Thu Apr 02 00:27:37.348514 2026] [:error] [pid 8908:tid 8934] [client 20.116.26.190:21453] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-adminmaintmailer.php"] [unique_id "ac1HefkmxtJXGnLdvgD-5AAAAJU"]
[Thu Apr 02 00:27:37.779224 2026] [:error] [pid 8910:tid 8968] [client 20.116.26.190:21478] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-adminmaintmailer.php"] [unique_id "ac1HeaJZINUcF3tYgEySKAAAAQA"]
[Thu Apr 02 00:27:38.198571 2026] [:error] [pid 62559:tid 62565] [client 20.116.26.190:21452] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-adminmaintmailer.php"] [unique_id "ac1Hei7NKI8IaNKZFIcuQQAAAUQ"]
[Thu Apr 02 00:27:38.636232 2026] [:error] [pid 8908:tid 8923] [client 20.116.26.190:21314] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/en/wp-login.php"] [unique_id "ac1HevkmxtJXGnLdvgD-5wAAAIo"]
[Thu Apr 02 00:27:39.050539 2026] [:error] [pid 8908:tid 8915] [client 20.116.26.190:21425] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/en/wp-login.php"] [unique_id "ac1He_kmxtJXGnLdvgD-6AAAAII"]
[Thu Apr 02 00:27:39.465832 2026] [:error] [pid 62559:tid 62577] [client 20.116.26.190:21469] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/en/wp-login.php"] [unique_id "ac1Hey7NKI8IaNKZFIcuRQAAAVA"]
[Thu Apr 02 00:27:39.888775 2026] [:error] [pid 8910:tid 8983] [client 20.116.26.190:21489] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/en/wp-login.php"] [unique_id "ac1He6JZINUcF3tYgEySKgAAAQ8"]
[Thu Apr 02 00:27:40.310552 2026] [:error] [pid 17856:tid 17876] [client 20.116.26.190:21315] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ru/adminer-4.2.4.php"] [unique_id "ac1HfD7Idlm5j9frhqSTygAAAFI"]
[Thu Apr 02 00:27:40.734093 2026] [:error] [pid 8908:tid 8913] [client 20.116.26.190:21416] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ru/adminer-4.2.4.php"] [unique_id "ac1HfPkmxtJXGnLdvgD-7QAAAIA"]
[Thu Apr 02 00:27:41.153907 2026] [:error] [pid 8909:tid 8952] [client 20.116.26.190:21351] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ru/adminer-4.2.4.php"] [unique_id "ac1HfTvP_a0662gDl6A0MgAAAMs"]
[Thu Apr 02 00:27:41.568132 2026] [:error] [pid 8908:tid 8931] [client 20.116.26.190:21378] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ru/adminer-4.2.4.php"] [unique_id "ac1HffkmxtJXGnLdvgD-8QAAAJI"]
[Thu Apr 02 00:27:41.982918 2026] [:error] [pid 8909:tid 8942] [client 20.116.26.190:21409] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/hvoxejcn.php"] [unique_id "ac1HfTvP_a0662gDl6A0NAAAAME"]
[Thu Apr 02 00:27:42.418424 2026] [:error] [pid 8910:tid 8968] [client 20.116.26.190:21426] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/hvoxejcn.php"] [unique_id "ac1HfqJZINUcF3tYgEySLwAAAQA"]
[Thu Apr 02 00:27:42.834839 2026] [:error] [pid 8908:tid 8930] [client 20.116.26.190:21500] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/hvoxejcn.php"] [unique_id "ac1HfvkmxtJXGnLdvgD-9wAAAJE"]
[Thu Apr 02 00:27:43.248607 2026] [:error] [pid 62559:tid 62584] [client 20.116.26.190:21422] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/hvoxejcn.php"] [unique_id "ac1Hfy7NKI8IaNKZFIcuSgAAAVc"]
[Thu Apr 02 00:27:43.660391 2026] [:error] [pid 8909:tid 8961] [client 20.116.26.190:21434] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/rasp.php"] [unique_id "ac1HfzvP_a0662gDl6A0OgAAANQ"]
[Thu Apr 02 00:27:44.075765 2026] [:error] [pid 8909:tid 8957] [client 20.116.26.190:21395] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/rasp.php"] [unique_id "ac1HgDvP_a0662gDl6A0QQAAANA"]
[Thu Apr 02 00:27:44.487507 2026] [:error] [pid 8908:tid 8913] [client 20.116.26.190:21407] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/rasp.php"] [unique_id "ac1HgPkmxtJXGnLdvgD-_AAAAIA"]
[Thu Apr 02 00:27:44.906007 2026] [:error] [pid 8908:tid 8922] [client 20.116.26.190:21498] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/rasp.php"] [unique_id "ac1HgPkmxtJXGnLdvgD-_wAAAIk"]
[Thu Apr 02 00:27:45.318971 2026] [:error] [pid 8909:tid 8965] [client 20.116.26.190:21438] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/sk-park.php"] [unique_id "ac1HgTvP_a0662gDl6A0RwAAANg"]
[Thu Apr 02 00:27:45.730083 2026] [:error] [pid 62559:tid 62567] [client 20.116.26.190:21462] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/sk-park.php"] [unique_id "ac1HgS7NKI8IaNKZFIcuTAAAAUY"]
[Thu Apr 02 00:27:46.142995 2026] [:error] [pid 8908:tid 8919] [client 20.116.26.190:21477] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/sk-park.php"] [unique_id "ac1HgvkmxtJXGnLdvgD_CQAAAIY"]
[Thu Apr 02 00:27:46.561060 2026] [:error] [pid 8995:tid 8999] [client 20.116.26.190:21332] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/sk-park.php"] [unique_id "ac1HguonaBjs3qxcRecIJQAAAAE"]
[Thu Apr 02 00:27:46.977526 2026] [:error] [pid 62559:tid 62576] [client 20.116.26.190:21396] [client 20.116.26.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/functions.php"] [unique_id "ac1Hgi7NKI8IaNKZFIcuUwAAAU8"]
[Thu Apr 02 00:27:47.389323 2026] [:error] [pid 17856:tid 17880] [client 20.116.26.190:21319] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-settings.php"] [unique_id "ac1Hgz7Idlm5j9frhqST2AAAAFY"]
[Thu Apr 02 00:27:47.801575 2026] [:error] [pid 8908:tid 8923] [client 20.116.26.190:21386] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-settings.php"] [unique_id "ac1Hg_kmxtJXGnLdvgD_DwAAAIo"]
[Thu Apr 02 00:27:48.215969 2026] [:error] [pid 8909:tid 8942] [client 20.116.26.190:21443] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-settings.php"] [unique_id "ac1HhDvP_a0662gDl6A0TQAAAME"]
[Thu Apr 02 00:27:48.628642 2026] [:error] [pid 8908:tid 8916] [client 20.116.26.190:21394] [client 20.116.26.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/pluggable.php"] [unique_id "ac1HhPkmxtJXGnLdvgD_FAAAAIM"]
[Thu Apr 02 00:27:49.107852 2026] [:error] [pid 8908:tid 8918] [client 20.116.26.190:21467] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/index.php"] [unique_id "ac1HhfkmxtJXGnLdvgD_GgAAAIU"]
[Thu Apr 02 00:27:49.542301 2026] [:error] [pid 8908:tid 8925] [client 20.116.26.190:21440] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/index.php"] [unique_id "ac1HhfkmxtJXGnLdvgD_HgAAAIw"]
[Thu Apr 02 00:27:49.987911 2026] [:error] [pid 62559:tid 62569] [client 20.116.26.190:21312] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/index.php"] [unique_id "ac1HhS7NKI8IaNKZFIcuXAAAAUg"]
[Thu Apr 02 00:27:50.424893 2026] [:error] [pid 8909:tid 8943] [client 20.116.26.190:21501] [client 20.116.26.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/fonts/13.php"] [unique_id "ac1HhjvP_a0662gDl6A0UgAAAMI"]
[Thu Apr 02 00:27:50.849949 2026] [:error] [pid 62559:tid 62573] [client 20.116.26.190:21497] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/uctshcum.php"] [unique_id "ac1Hhi7NKI8IaNKZFIcuYAAAAUw"]
[Thu Apr 02 00:27:51.287811 2026] [:error] [pid 62559:tid 62576] [client 20.116.26.190:21420] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/uctshcum.php"] [unique_id "ac1Hhy7NKI8IaNKZFIcuYgAAAU8"]
[Thu Apr 02 00:27:51.768706 2026] [:error] [pid 62559:tid 62561] [client 20.116.26.190:21375] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/uctshcum.php"] [unique_id "ac1Hhy7NKI8IaNKZFIcuZAAAAUA"]
[Thu Apr 02 00:27:52.209646 2026] [:error] [pid 62559:tid 62582] [client 20.116.26.190:21354] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/uctshcum.php"] [unique_id "ac1HiC7NKI8IaNKZFIcuaAAAAVU"]
[Thu Apr 02 00:27:52.626987 2026] [:error] [pid 8908:tid 8917] [client 20.116.26.190:21451] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/old/wp-admin/setup-config.php"] [unique_id "ac1HiPkmxtJXGnLdvgD_LgAAAIQ"]
[Thu Apr 02 00:27:53.072194 2026] [:error] [pid 8910:tid 8981] [client 20.116.26.190:21419] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/old/wp-admin/setup-config.php"] [unique_id "ac1HiaJZINUcF3tYgEySNwAAAQ0"]
[Thu Apr 02 00:27:53.491990 2026] [:error] [pid 17856:tid 17881] [client 20.116.26.190:21484] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/old/wp-admin/setup-config.php"] [unique_id "ac1HiT7Idlm5j9frhqST5gAAAFc"]
[Thu Apr 02 00:27:53.919591 2026] [:error] [pid 8908:tid 8933] [client 20.116.26.190:21379] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/old/wp-admin/setup-config.php"] [unique_id "ac1HifkmxtJXGnLdvgD_NQAAAJQ"]
[Thu Apr 02 00:27:54.336642 2026] [:error] [pid 8995:tid 9005] [client 20.116.26.190:21397] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/expect.php"] [unique_id "ac1HiuonaBjs3qxcRecIKgAAAAc"]
[Thu Apr 02 00:27:54.758578 2026] [:error] [pid 8908:tid 8920] [client 20.116.26.190:21413] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/expect.php"] [unique_id "ac1HivkmxtJXGnLdvgD_OQAAAIc"]
[Thu Apr 02 00:27:55.177650 2026] [:error] [pid 8908:tid 8913] [client 20.116.26.190:21322] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/expect.php"] [unique_id "ac1Hi_kmxtJXGnLdvgD_PAAAAIA"]
[Thu Apr 02 00:27:55.596115 2026] [:error] [pid 62559:tid 62563] [client 20.116.26.190:21316] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/expect.php"] [unique_id "ac1Hiy7NKI8IaNKZFIcueQAAAUI"]
[Thu Apr 02 00:27:56.012585 2026] [:error] [pid 8908:tid 8935] [client 20.116.26.190:21411] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/uploads/json.php"] [unique_id "ac1HjPkmxtJXGnLdvgD_QQAAAJY"]
[Thu Apr 02 00:27:56.427192 2026] [:error] [pid 62559:tid 62562] [client 20.116.26.190:21439] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/uploads/json.php"] [unique_id "ac1HjC7NKI8IaNKZFIcufAAAAUE"]
[Thu Apr 02 00:27:56.839375 2026] [:error] [pid 8908:tid 8931] [client 20.116.26.190:21327] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/uploads/json.php"] [unique_id "ac1HjPkmxtJXGnLdvgD_RAAAAJI"]
[Thu Apr 02 00:27:57.273907 2026] [:error] [pid 8908:tid 8927] [client 20.116.26.190:21321] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/uploads/json.php"] [unique_id "ac1HjfkmxtJXGnLdvgD_RwAAAI4"]
[Thu Apr 02 00:27:57.685481 2026] [:error] [pid 8909:tid 8948] [client 20.116.26.190:21431] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/admin/uploads/lv.php"] [unique_id "ac1HjTvP_a0662gDl6A0VQAAAMc"]
[Thu Apr 02 00:27:58.111877 2026] [:error] [pid 8909:tid 8958] [client 20.116.26.190:21436] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/admin/uploads/lv.php"] [unique_id "ac1HjjvP_a0662gDl6A0VgAAANE"]
[Thu Apr 02 00:27:58.534429 2026] [:error] [pid 8908:tid 8913] [client 20.116.26.190:21398] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/admin/uploads/lv.php"] [unique_id "ac1HjvkmxtJXGnLdvgD_TwAAAIA"]
[Thu Apr 02 00:27:58.950889 2026] [:error] [pid 8909:tid 8950] [client 20.116.26.190:21405] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/admin/uploads/lv.php"] [unique_id "ac1HjjvP_a0662gDl6A0XAAAAMk"]
[Thu Apr 02 00:27:59.367299 2026] [:error] [pid 17856:tid 17877] [client 20.116.26.190:21444] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/js/about.php"] [unique_id "ac1Hjz7Idlm5j9frhqST8wAAAFM"]
[Thu Apr 02 00:27:59.784930 2026] [:error] [pid 8910:tid 8983] [client 20.116.26.190:21402] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/js/about.php"] [unique_id "ac1Hj6JZINUcF3tYgEySOwAAAQ8"]
[Thu Apr 02 00:28:00.210251 2026] [:error] [pid 8909:tid 8952] [client 20.116.26.190:21496] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/js/about.php"] [unique_id "ac1HkDvP_a0662gDl6A0XgAAAMs"]
[Thu Apr 02 00:28:00.627129 2026] [:error] [pid 62559:tid 62572] [client 20.116.26.190:21331] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/js/about.php"] [unique_id "ac1HkC7NKI8IaNKZFIcuiwAAAUs"]
[Thu Apr 02 00:28:01.044984 2026] [:error] [pid 8908:tid 8937] [client 20.116.26.190:21324] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/admin/uploads/media.php"] [unique_id "ac1HkfkmxtJXGnLdvgD_VwAAAJg"]
[Thu Apr 02 00:28:01.463562 2026] [:error] [pid 17856:tid 17866] [client 20.116.26.190:21401] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/admin/uploads/media.php"] [unique_id "ac1HkT7Idlm5j9frhqST-wAAAEg"]
[Thu Apr 02 00:28:01.885645 2026] [:error] [pid 8909:tid 8941] [client 20.116.26.190:21404] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/admin/uploads/media.php"] [unique_id "ac1HkTvP_a0662gDl6A0aAAAAMA"]
[Thu Apr 02 00:28:02.318908 2026] [:error] [pid 8908:tid 8925] [client 20.116.26.190:21445] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/admin/uploads/media.php"] [unique_id "ac1HkvkmxtJXGnLdvgD_XQAAAIw"]
[Thu Apr 02 00:28:02.731993 2026] [:error] [pid 62559:tid 62572] [client 20.116.26.190:21399] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/images/index.php"] [unique_id "ac1Hki7NKI8IaNKZFIculAAAAUs"]
[Thu Apr 02 00:28:03.158165 2026] [:error] [pid 8909:tid 8945] [client 20.116.26.190:21337] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/images/index.php"] [unique_id "ac1HkzvP_a0662gDl6A0bAAAAMQ"]
[Thu Apr 02 00:28:03.570575 2026] [:error] [pid 8909:tid 8946] [client 20.116.26.190:21430] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/images/index.php"] [unique_id "ac1HkzvP_a0662gDl6A0bgAAAMU"]
[Thu Apr 02 00:28:03.981866 2026] [:error] [pid 62559:tid 62566] [client 20.116.26.190:21353] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/images/index.php"] [unique_id "ac1Hky7NKI8IaNKZFIcunAAAAUU"]
[Thu Apr 02 00:28:04.410676 2026] [:error] [pid 62559:tid 62567] [client 20.116.26.190:21335] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/css/colors/coffee/about.php"] [unique_id "ac1HlC7NKI8IaNKZFIcuogAAAUY"]
[Thu Apr 02 00:28:04.827443 2026] [:error] [pid 62559:tid 62583] [client 20.116.26.190:21387] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/css/colors/coffee/about.php"] [unique_id "ac1HlC7NKI8IaNKZFIcuqwAAAVY"]
[Thu Apr 02 00:28:05.275552 2026] [:error] [pid 8910:tid 8986] [client 20.116.26.190:21491] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/css/colors/coffee/about.php"] [unique_id "ac1HlaJZINUcF3tYgEySRAAAARI"]
[Thu Apr 02 00:28:05.702037 2026] [:error] [pid 8910:tid 8969] [client 20.116.26.190:21485] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/css/colors/coffee/about.php"] [unique_id "ac1HlaJZINUcF3tYgEySRgAAAQE"]
[Thu Apr 02 00:28:06.117597 2026] [:error] [pid 62559:tid 62568] [client 20.116.26.190:21365] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/browse.php"] [unique_id "ac1Hli7NKI8IaNKZFIcutQAAAUc"]
[Thu Apr 02 00:28:06.625877 2026] [:error] [pid 8995:tid 9005] [client 20.116.26.190:21341] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/browse.php"] [unique_id "ac1HluonaBjs3qxcRecIOQAAAAc"]
[Thu Apr 02 00:28:07.039565 2026] [:error] [pid 62559:tid 62585] [client 20.116.26.190:21329] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/browse.php"] [unique_id "ac1Hly7NKI8IaNKZFIcuwgAAAVg"]
[Thu Apr 02 00:28:07.456988 2026] [:error] [pid 62559:tid 62577] [client 20.116.26.190:21435] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/browse.php"] [unique_id "ac1Hly7NKI8IaNKZFIcuyAAAAVA"]
[Thu Apr 02 00:28:07.873013 2026] [:error] [pid 8995:tid 9002] [client 20.116.26.190:21356] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/index/lock.php"] [unique_id "ac1Hl-onaBjs3qxcRecIOwAAAAQ"]
[Thu Apr 02 00:28:08.287888 2026] [:error] [pid 62559:tid 62570] [client 20.116.26.190:21336] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/index/lock.php"] [unique_id "ac1HmC7NKI8IaNKZFIcu0QAAAUk"]
[Thu Apr 02 00:28:08.721772 2026] [:error] [pid 62559:tid 62567] [client 20.116.26.190:21367] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/index/lock.php"] [unique_id "ac1HmC7NKI8IaNKZFIcu1wAAAUY"]
[Thu Apr 02 00:28:09.164967 2026] [:error] [pid 62559:tid 62581] [client 20.116.26.190:21364] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/index/lock.php"] [unique_id "ac1HmS7NKI8IaNKZFIcu3AAAAVQ"]
[Thu Apr 02 00:28:09.583469 2026] [:error] [pid 8908:tid 8918] [client 20.116.26.190:21362] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/config.php"] [unique_id "ac1HmfkmxtJXGnLdvgD_YAAAAIU"]
[Thu Apr 02 00:28:09.995602 2026] [:error] [pid 8908:tid 8933] [client 20.116.26.190:21482] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/config.php"] [unique_id "ac1HmfkmxtJXGnLdvgD_YgAAAJQ"]
[Thu Apr 02 00:28:10.507658 2026] [:error] [pid 8908:tid 8922] [client 20.116.26.190:21313] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/config.php"] [unique_id "ac1HmvkmxtJXGnLdvgD_ZQAAAIk"]
[Thu Apr 02 00:28:10.928384 2026] [:error] [pid 8910:tid 8988] [client 20.116.26.190:21468] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/config.php"] [unique_id "ac1HmqJZINUcF3tYgEySTAAAARQ"]
[Thu Apr 02 00:28:11.342583 2026] [:error] [pid 8908:tid 8931] [client 20.116.26.190:21262] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/moon.php"] [unique_id "ac1Hm_kmxtJXGnLdvgD_awAAAJI"]
[Thu Apr 02 00:28:11.757046 2026] [:error] [pid 62559:tid 62579] [client 20.116.26.190:21348] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/moon.php"] [unique_id "ac1Hmy7NKI8IaNKZFIcu8AAAAVI"]
[Thu Apr 02 00:28:12.171479 2026] [:error] [pid 62559:tid 62580] [client 20.116.26.190:21374] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/moon.php"] [unique_id "ac1HnC7NKI8IaNKZFIcu8QAAAVM"]
[Thu Apr 02 00:28:12.609468 2026] [:error] [pid 8908:tid 8919] [client 20.116.26.190:21465] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/moon.php"] [unique_id "ac1HnPkmxtJXGnLdvgD_cAAAAIY"]
[Thu Apr 02 00:28:13.041006 2026] [:error] [pid 8908:tid 8922] [client 20.116.26.190:21369] [client 20.116.26.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "ac1HnfkmxtJXGnLdvgD_cwAAAIk"]
[Thu Apr 02 00:28:13.487856 2026] [:error] [pid 62559:tid 62585] [client 20.116.26.190:21299] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "ac1HnS7NKI8IaNKZFIcu-gAAAVg"]
[Thu Apr 02 00:28:13.896917 2026] [:error] [pid 8908:tid 8937] [client 20.116.26.190:21188] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "ac1HnfkmxtJXGnLdvgD_dwAAAJg"]
[Thu Apr 02 00:28:14.743587 2026] [proxy_fcgi:error] [pid 8908:tid 8926] [client 20.116.26.190:21410] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 00:28:14.950031 2026] [:error] [pid 8908:tid 8925] [client 20.116.26.190:21410] [client 20.116.26.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/Text/index.php"] [unique_id "ac1HnvkmxtJXGnLdvgD_fwAAAIw"]
[Thu Apr 02 00:28:15.369151 2026] [proxy_fcgi:error] [pid 17856:tid 17880] [client 20.116.26.190:21276] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 00:28:15.789393 2026] [proxy_fcgi:error] [pid 17856:tid 17878] [client 20.116.26.190:21276] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 00:28:15.998425 2026] [proxy_fcgi:error] [pid 17856:tid 17882] [client 20.116.26.190:21276] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 00:28:16.206758 2026] [proxy_fcgi:error] [pid 17856:tid 17860] [client 20.116.26.190:21276] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 00:28:16.415110 2026] [proxy_fcgi:error] [pid 17856:tid 17868] [client 20.116.26.190:21276] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 00:28:16.624399 2026] [proxy_fcgi:error] [pid 17856:tid 17859] [client 20.116.26.190:21276] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 00:28:17.039018 2026] [:error] [pid 17856:tid 17865] [client 20.116.26.190:21276] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/css/colors/blue/moon.php"] [unique_id "ac1HoT7Idlm5j9frhqSUFQAAAEc"]
[Thu Apr 02 00:28:17.462666 2026] [:error] [pid 62559:tid 62568] [client 20.116.26.190:21372] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/css/colors/blue/moon.php"] [unique_id "ac1HoS7NKI8IaNKZFIcvEAAAAUc"]
[Thu Apr 02 00:28:17.879479 2026] [:error] [pid 8909:tid 8944] [client 20.116.26.190:21423] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/css/colors/blue/moon.php"] [unique_id "ac1HoTvP_a0662gDl6A0gAAAAMM"]
[Thu Apr 02 00:28:18.294680 2026] [:error] [pid 8910:tid 8975] [client 20.116.26.190:21360] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/css/colors/blue/moon.php"] [unique_id "ac1HoqJZINUcF3tYgEySVQAAAQc"]
[Thu Apr 02 00:28:18.745438 2026] [:error] [pid 8910:tid 8982] [client 20.116.26.190:21428] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/includes/m.php"] [unique_id "ac1HoqJZINUcF3tYgEySVwAAAQ4"]
[Thu Apr 02 00:28:19.158804 2026] [:error] [pid 8908:tid 8932] [client 20.116.26.190:21334] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/includes/m.php"] [unique_id "ac1Ho_kmxtJXGnLdvgD_hwAAAJM"]
[Thu Apr 02 00:28:19.589659 2026] [:error] [pid 8908:tid 8918] [client 20.116.26.190:21272] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/includes/m.php"] [unique_id "ac1Ho_kmxtJXGnLdvgD_iQAAAIU"]
[Thu Apr 02 00:28:20.004008 2026] [:error] [pid 8995:tid 9005] [client 20.116.26.190:21248] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/includes/m.php"] [unique_id "ac1HpOonaBjs3qxcRecIRwAAAAc"]
[Thu Apr 02 00:28:20.425192 2026] [:error] [pid 8909:tid 8961] [client 20.116.26.190:21384] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/images/admin.php"] [unique_id "ac1HpDvP_a0662gDl6A0jAAAANQ"]
[Thu Apr 02 00:28:20.844827 2026] [:error] [pid 62559:tid 62572] [client 20.116.26.190:21286] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/images/admin.php"] [unique_id "ac1HpC7NKI8IaNKZFIcvGAAAAUs"]
[Thu Apr 02 00:28:21.264332 2026] [:error] [pid 17856:tid 17870] [client 20.116.26.190:21271] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/images/admin.php"] [unique_id "ac1HpT7Idlm5j9frhqSUGgAAAEw"]
[Thu Apr 02 00:28:21.686181 2026] [:error] [pid 8908:tid 8916] [client 20.116.26.190:21320] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/images/admin.php"] [unique_id "ac1HpfkmxtJXGnLdvgD_kgAAAIM"]
[Thu Apr 02 00:28:22.100113 2026] [:error] [pid 8908:tid 8932] [client 20.116.26.190:21424] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/user/admin.php"] [unique_id "ac1HpvkmxtJXGnLdvgD_mAAAAJM"]
[Thu Apr 02 00:28:22.514854 2026] [:error] [pid 62559:tid 62581] [client 20.116.26.190:21414] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/user/admin.php"] [unique_id "ac1Hpi7NKI8IaNKZFIcvIAAAAVQ"]
[Thu Apr 02 00:28:22.927962 2026] [:error] [pid 8995:tid 8998] [client 20.116.26.190:21359] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/user/admin.php"] [unique_id "ac1HpuonaBjs3qxcRecITQAAAAA"]
[Thu Apr 02 00:28:23.341167 2026] [:error] [pid 8995:tid 9014] [client 20.116.26.190:21328] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/user/admin.php"] [unique_id "ac1Hp-onaBjs3qxcRecITwAAABA"]
[Thu Apr 02 00:28:23.765463 2026] [:error] [pid 8908:tid 8913] [client 20.116.26.190:21373] [client 20.116.26.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/IXR/shell.php"] [unique_id "ac1Hp_kmxtJXGnLdvgD_oAAAAIA"]
[Thu Apr 02 00:28:24.191620 2026] [:error] [pid 8908:tid 8935] [client 20.116.26.190:21499] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-trackback.php"] [unique_id "ac1HqPkmxtJXGnLdvgD_pQAAAJY"]
[Thu Apr 02 00:28:24.614140 2026] [:error] [pid 8995:tid 9001] [client 20.116.26.190:21323] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-trackback.php"] [unique_id "ac1HqOonaBjs3qxcRecIVQAAAAM"]
[Thu Apr 02 00:28:25.033381 2026] [:error] [pid 8909:tid 8964] [client 20.116.26.190:21255] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-trackback.php"] [unique_id "ac1HqTvP_a0662gDl6A0kgAAANc"]
[Thu Apr 02 00:28:25.448732 2026] [:error] [pid 8910:tid 8979] [client 20.116.26.190:21433] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/admin/upload/themes-install.php"] [unique_id "ac1HqaJZINUcF3tYgEySYwAAAQs"]
[Thu Apr 02 00:28:25.946172 2026] [:error] [pid 8909:tid 8961] [client 20.116.26.190:21253] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/admin/upload/themes-install.php"] [unique_id "ac1HqTvP_a0662gDl6A0lAAAANQ"]
[Thu Apr 02 00:28:26.373162 2026] [:error] [pid 8995:tid 9022] [client 20.116.26.190:21278] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/admin/upload/themes-install.php"] [unique_id "ac1HquonaBjs3qxcRecIWgAAABg"]
[Thu Apr 02 00:28:26.788941 2026] [:error] [pid 17856:tid 17859] [client 20.116.26.190:21342] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/admin/upload/themes-install.php"] [unique_id "ac1Hqj7Idlm5j9frhqSUIQAAAEE"]
[Thu Apr 02 00:28:27.205364 2026] [:error] [pid 8995:tid 9014] [client 20.116.26.190:21259] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/0x.php"] [unique_id "ac1Hq-onaBjs3qxcRecIXQAAABA"]
[Thu Apr 02 00:28:27.632592 2026] [:error] [pid 8910:tid 8978] [client 20.116.26.190:21264] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/0x.php"] [unique_id "ac1Hq6JZINUcF3tYgEySbQAAAQo"]
[Thu Apr 02 00:28:28.050457 2026] [:error] [pid 62559:tid 62585] [client 20.116.26.190:21291] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/0x.php"] [unique_id "ac1HrC7NKI8IaNKZFIcvKQAAAVg"]
[Thu Apr 02 00:28:28.468058 2026] [:error] [pid 8908:tid 8919] [client 20.116.26.190:21219] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/0x.php"] [unique_id "ac1HrPkmxtJXGnLdvgD_sAAAAIY"]
[Thu Apr 02 00:28:28.901688 2026] [:error] [pid 8908:tid 8934] [client 20.116.26.190:21470] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/js/alfa-rex.php"] [unique_id "ac1HrPkmxtJXGnLdvgD_swAAAJU"]
[Thu Apr 02 00:28:29.331574 2026] [:error] [pid 8908:tid 8925] [client 20.116.26.190:21347] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/js/alfa-rex.php"] [unique_id "ac1HrfkmxtJXGnLdvgD_tgAAAIw"]
[Thu Apr 02 00:28:29.751982 2026] [:error] [pid 17856:tid 17869] [client 20.116.26.190:21432] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/js/alfa-rex.php"] [unique_id "ac1HrT7Idlm5j9frhqSUKgAAAEs"]
[Thu Apr 02 00:28:30.168162 2026] [:error] [pid 8910:tid 8990] [client 20.116.26.190:21283] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/js/alfa-rex.php"] [unique_id "ac1HrqJZINUcF3tYgEyScAAAARY"]
[Thu Apr 02 00:28:30.578726 2026] [:error] [pid 8908:tid 8927] [client 20.116.26.190:21297] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/include/mail.php"] [unique_id "ac1HrvkmxtJXGnLdvgD_wwAAAI4"]
[Thu Apr 02 00:28:31.014703 2026] [:error] [pid 8908:tid 8916] [client 20.116.26.190:21330] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/include/mail.php"] [unique_id "ac1Hr_kmxtJXGnLdvgD_yAAAAIM"]
[Thu Apr 02 00:28:31.427166 2026] [:error] [pid 8995:tid 9002] [client 20.116.26.190:21185] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/include/mail.php"] [unique_id "ac1Hr-onaBjs3qxcRecIYwAAAAQ"]
[Thu Apr 02 00:28:31.870025 2026] [:error] [pid 17856:tid 17858] [client 20.116.26.190:21225] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/include/mail.php"] [unique_id "ac1Hrz7Idlm5j9frhqSULgAAAEA"]
[Thu Apr 02 00:28:32.279999 2026] [:error] [pid 8908:tid 8932] [client 20.116.26.190:21349] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/.well-known/admin.php"] [unique_id "ac1HsPkmxtJXGnLdvgD_1wAAAJM"]
[Thu Apr 02 00:28:32.737192 2026] [:error] [pid 62559:tid 62585] [client 20.116.26.190:21325] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/.well-known/admin.php"] [unique_id "ac1HsC7NKI8IaNKZFIcvOAAAAVg"]
[Thu Apr 02 00:28:33.154438 2026] [:error] [pid 8910:tid 8980] [client 20.116.26.190:21308] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/.well-known/admin.php"] [unique_id "ac1HsaJZINUcF3tYgEySdAAAAQw"]
[Thu Apr 02 00:28:33.576741 2026] [:error] [pid 8910:tid 8978] [client 20.116.26.190:21249] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/.well-known/admin.php"] [unique_id "ac1HsaJZINUcF3tYgEySdgAAAQo"]
[Thu Apr 02 00:28:34.020359 2026] [:error] [pid 8995:tid 9011] [client 20.116.26.190:21343] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bs1.php"] [unique_id "ac1HsuonaBjs3qxcRecIaAAAAA0"]
[Thu Apr 02 00:28:34.434961 2026] [:error] [pid 62559:tid 62566] [client 20.116.26.190:21368] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bs1.php"] [unique_id "ac1Hsi7NKI8IaNKZFIcvQwAAAUU"]
[Thu Apr 02 00:28:34.850865 2026] [:error] [pid 62559:tid 62570] [client 20.116.26.190:21346] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bs1.php"] [unique_id "ac1Hsi7NKI8IaNKZFIcvRwAAAUk"]
[Thu Apr 02 00:28:35.270527 2026] [:error] [pid 62559:tid 62562] [client 20.116.26.190:21483] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bs1.php"] [unique_id "ac1Hsy7NKI8IaNKZFIcvTQAAAUE"]
[Thu Apr 02 00:28:35.694409 2026] [:error] [pid 8995:tid 9015] [client 20.116.26.190:21350] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/images/about.php"] [unique_id "ac1Hs-onaBjs3qxcRecIawAAABE"]
[Thu Apr 02 00:28:36.120015 2026] [:error] [pid 8908:tid 8930] [client 20.116.26.190:21250] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/images/about.php"] [unique_id "ac1HtPkmxtJXGnLdvgD_2wAAAJE"]
[Thu Apr 02 00:28:36.540077 2026] [:error] [pid 8995:tid 9004] [client 20.116.26.190:21213] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/images/about.php"] [unique_id "ac1HtOonaBjs3qxcRecIbgAAAAY"]
[Thu Apr 02 00:28:36.955585 2026] [:error] [pid 8908:tid 8924] [client 20.116.26.190:21301] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/images/about.php"] [unique_id "ac1HtPkmxtJXGnLdvgD_3QAAAIs"]
[Thu Apr 02 00:28:37.372444 2026] [:error] [pid 8995:tid 9010] [client 20.116.26.190:21357] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/log.php"] [unique_id "ac1HteonaBjs3qxcRecIdAAAAAw"]
[Thu Apr 02 00:28:37.783943 2026] [:error] [pid 62559:tid 62568] [client 20.116.26.190:21339] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/log.php"] [unique_id "ac1HtS7NKI8IaNKZFIcvVQAAAUc"]
[Thu Apr 02 00:28:38.199990 2026] [:error] [pid 17856:tid 17875] [client 20.116.26.190:21494] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/log.php"] [unique_id "ac1Htj7Idlm5j9frhqSUNwAAAFE"]
[Thu Apr 02 00:28:38.618918 2026] [:error] [pid 8909:tid 8957] [client 20.116.26.190:21273] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/log.php"] [unique_id "ac1HtjvP_a0662gDl6A0tAAAANA"]
[Thu Apr 02 00:28:39.031822 2026] [:error] [pid 62559:tid 62566] [client 20.116.26.190:21205] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/plugins/xmrlpc.php"] [unique_id "ac1Hty7NKI8IaNKZFIcvWgAAAUU"]
[Thu Apr 02 00:28:39.447259 2026] [:error] [pid 17856:tid 17880] [client 20.116.26.190:21251] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/plugins/xmrlpc.php"] [unique_id "ac1Htz7Idlm5j9frhqSURgAAAFY"]
[Thu Apr 02 00:28:39.861590 2026] [:error] [pid 8908:tid 8935] [client 20.116.26.190:21403] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/plugins/xmrlpc.php"] [unique_id "ac1Ht_kmxtJXGnLdvgD_3wAAAJY"]
[Thu Apr 02 00:28:40.286125 2026] [:error] [pid 8908:tid 8916] [client 20.116.26.190:21318] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/plugins/xmrlpc.php"] [unique_id "ac1HuPkmxtJXGnLdvgD_4AAAAIM"]
[Thu Apr 02 00:28:40.706915 2026] [:error] [pid 8995:tid 9009] [client 20.116.26.190:21266] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/uploads/test.php"] [unique_id "ac1HuOonaBjs3qxcRecIfAAAAAs"]
[Thu Apr 02 00:28:41.146357 2026] [:error] [pid 17856:tid 17872] [client 20.116.26.190:21305] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/uploads/test.php"] [unique_id "ac1HuT7Idlm5j9frhqSUSgAAAE4"]
[Thu Apr 02 00:28:41.560011 2026] [:error] [pid 8910:tid 8976] [client 20.116.26.190:21258] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/uploads/test.php"] [unique_id "ac1HuaJZINUcF3tYgEySlgAAAQg"]
[Thu Apr 02 00:28:41.984530 2026] [:error] [pid 17856:tid 17860] [client 20.116.26.190:21338] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/uploads/test.php"] [unique_id "ac1HuT7Idlm5j9frhqSUUQAAAEI"]
[Thu Apr 02 00:28:42.409393 2026] [:error] [pid 17856:tid 17876] [client 20.116.26.190:21254] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/upgrade.php"] [unique_id "ac1Huj7Idlm5j9frhqSUVQAAAFI"]
[Thu Apr 02 00:28:42.819878 2026] [:error] [pid 62559:tid 62565] [client 20.116.26.190:21345] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/upgrade.php"] [unique_id "ac1Hui7NKI8IaNKZFIcvZgAAAUQ"]
[Thu Apr 02 00:28:43.264996 2026] [:error] [pid 62559:tid 62571] [client 20.116.26.190:21370] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/upgrade.php"] [unique_id "ac1Huy7NKI8IaNKZFIcvaQAAAUo"]
[Thu Apr 02 00:28:43.676110 2026] [:error] [pid 62559:tid 62561] [client 20.116.26.190:21205] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/upgrade.php"] [unique_id "ac1Huy7NKI8IaNKZFIcvbgAAAUA"]
[Thu Apr 02 00:28:44.105687 2026] [:error] [pid 62559:tid 62561] [client 20.116.26.190:21344] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/max.php"] [unique_id "ac1HvC7NKI8IaNKZFIcveQAAAUA"]
[Thu Apr 02 00:28:44.577765 2026] [:error] [pid 62559:tid 62579] [client 20.116.26.190:21340] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/max.php"] [unique_id "ac1HvC7NKI8IaNKZFIcvggAAAVI"]
[Thu Apr 02 00:28:44.991112 2026] [:error] [pid 62559:tid 62581] [client 20.116.26.190:21265] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/max.php"] [unique_id "ac1HvC7NKI8IaNKZFIcviAAAAVQ"]
[Thu Apr 02 00:28:45.405911 2026] [:error] [pid 8910:tid 8990] [client 20.116.26.190:21202] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/max.php"] [unique_id "ac1HvaJZINUcF3tYgEySnwAAARY"]
[Thu Apr 02 00:28:45.823198 2026] [:error] [pid 17856:tid 17871] [client 20.116.26.190:21268] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/plugins/phpThumb/404.php"] [unique_id "ac1HvT7Idlm5j9frhqSUWgAAAE0"]
[Thu Apr 02 00:28:46.244296 2026] [:error] [pid 62559:tid 62570] [client 20.116.26.190:21361] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/plugins/phpThumb/404.php"] [unique_id "ac1Hvi7NKI8IaNKZFIcvngAAAUk"]
[Thu Apr 02 00:28:46.659544 2026] [:error] [pid 62559:tid 62574] [client 20.116.26.190:21311] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/plugins/phpThumb/404.php"] [unique_id "ac1Hvi7NKI8IaNKZFIcvowAAAU0"]
[Thu Apr 02 00:28:47.076511 2026] [:error] [pid 8995:tid 9011] [client 20.116.26.190:21261] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/plugins/phpThumb/404.php"] [unique_id "ac1Hv-onaBjs3qxcRecIiAAAAA0"]
[Thu Apr 02 00:28:47.496324 2026] [:error] [pid 62559:tid 62575] [client 20.116.26.190:21121] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/media.php"] [unique_id "ac1Hvy7NKI8IaNKZFIcvpQAAAU4"]
[Thu Apr 02 00:28:47.910387 2026] [:error] [pid 8910:tid 8980] [client 20.116.26.190:21290] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/media.php"] [unique_id "ac1Hv6JZINUcF3tYgEySowAAAQw"]
[Thu Apr 02 00:28:48.333204 2026] [:error] [pid 62559:tid 62585] [client 20.116.26.190:21132] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/media.php"] [unique_id "ac1HwC7NKI8IaNKZFIcvtwAAAVg"]
[Thu Apr 02 00:28:48.754981 2026] [:error] [pid 17856:tid 17876] [client 20.116.26.190:21459] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/media.php"] [unique_id "ac1HwD7Idlm5j9frhqSUXgAAAFI"]
[Thu Apr 02 00:28:49.175355 2026] [:error] [pid 8908:tid 8928] [client 20.116.26.190:21281] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/1.php"] [unique_id "ac1HwfkmxtJXGnLdvgD_5wAAAI8"]
[Thu Apr 02 00:28:49.591113 2026] [:error] [pid 8909:tid 8949] [client 20.116.26.190:21274] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/1.php"] [unique_id "ac1HwTvP_a0662gDl6A00wAAAMg"]
[Thu Apr 02 00:28:50.005078 2026] [:error] [pid 62559:tid 62566] [client 20.116.26.190:21437] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/1.php"] [unique_id "ac1Hwi7NKI8IaNKZFIcvxAAAAUU"]
[Thu Apr 02 00:28:50.421165 2026] [:error] [pid 62559:tid 62571] [client 20.116.26.190:21196] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/1.php"] [unique_id "ac1Hwi7NKI8IaNKZFIcvxwAAAUo"]
[Thu Apr 02 00:28:50.833424 2026] [:error] [pid 62559:tid 62581] [client 20.116.26.190:21282] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/install.php"] [unique_id "ac1Hwi7NKI8IaNKZFIcvzgAAAVQ"]
[Thu Apr 02 00:28:51.245151 2026] [:error] [pid 8910:tid 8991] [client 20.116.26.190:21267] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/install.php"] [unique_id "ac1Hw6JZINUcF3tYgEySqAAAARc"]
[Thu Apr 02 00:28:51.660435 2026] [:error] [pid 8995:tid 9006] [client 20.116.26.190:21473] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/install.php"] [unique_id "ac1Hw-onaBjs3qxcRecIjwAAAAg"]
[Thu Apr 02 00:28:52.085910 2026] [:error] [pid 8909:tid 8941] [client 20.116.26.190:21294] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/install.php"] [unique_id "ac1HxDvP_a0662gDl6A02wAAAMA"]
[Thu Apr 02 00:28:52.506058 2026] [:error] [pid 8909:tid 8953] [client 20.116.26.190:21210] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/include/wp-configs.php"] [unique_id "ac1HxDvP_a0662gDl6A03AAAAMw"]
[Thu Apr 02 00:28:52.919309 2026] [:error] [pid 8909:tid 8944] [client 20.116.26.190:21304] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/include/wp-configs.php"] [unique_id "ac1HxDvP_a0662gDl6A03gAAAMM"]
[Thu Apr 02 00:28:53.334577 2026] [:error] [pid 62559:tid 62562] [client 20.116.26.190:21218] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/include/wp-configs.php"] [unique_id "ac1HxS7NKI8IaNKZFIcv1QAAAUE"]
[Thu Apr 02 00:28:53.751190 2026] [:error] [pid 8908:tid 8914] [client 20.116.26.190:21172] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/include/wp-configs.php"] [unique_id "ac1HxfkmxtJXGnLdvgD__QAAAIE"]
[Thu Apr 02 00:28:54.617770 2026] [:error] [pid 17856:tid 17860] [client 20.116.26.190:21363] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/js/chosen.php"] [unique_id "ac1Hxj7Idlm5j9frhqSUbwAAAEI"]
[Thu Apr 02 00:28:55.033442 2026] [:error] [pid 17856:tid 17876] [client 20.116.26.190:21216] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/js/chosen.php"] [unique_id "ac1Hxz7Idlm5j9frhqSUhgAAAFI"]
[Thu Apr 02 00:28:55.462698 2026] [:error] [pid 17856:tid 17865] [client 20.116.26.190:21226] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/js/chosen.php"] [unique_id "ac1Hxz7Idlm5j9frhqSUjQAAAEc"]
[Thu Apr 02 00:28:55.878002 2026] [:error] [pid 8995:tid 9006] [client 20.116.26.190:21207] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/js/chosen.php"] [unique_id "ac1Hx-onaBjs3qxcRecIsAAAAAg"]
[Thu Apr 02 00:28:56.297986 2026] [:error] [pid 8908:tid 8925] [client 20.116.26.190:21306] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "ac1HyPkmxtJXGnLdvgAAHAAAAIw"]
[Thu Apr 02 00:28:56.711917 2026] [:error] [pid 8908:tid 8933] [client 20.116.26.190:21358] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "ac1HyPkmxtJXGnLdvgAAIAAAAJQ"]
[Thu Apr 02 00:28:57.133908 2026] [:error] [pid 8908:tid 8914] [client 20.116.26.190:21227] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "ac1HyfkmxtJXGnLdvgAAIwAAAIE"]
[Thu Apr 02 00:28:57.570062 2026] [:error] [pid 8909:tid 8951] [client 20.116.26.190:21256] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "ac1HyTvP_a0662gDl6A1BgAAAMo"]
[Thu Apr 02 00:28:57.986572 2026] [:error] [pid 8910:tid 8979] [client 20.116.26.190:21217] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bg/xmrlpc.php"] [unique_id "ac1HyaJZINUcF3tYgEySzgAAAQs"]
[Thu Apr 02 00:28:58.410702 2026] [:error] [pid 8910:tid 8973] [client 20.116.26.190:21371] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bg/xmrlpc.php"] [unique_id "ac1HyqJZINUcF3tYgEyS1QAAAQU"]
[Thu Apr 02 00:28:58.826362 2026] [:error] [pid 17856:tid 17862] [client 20.116.26.190:21303] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bg/xmrlpc.php"] [unique_id "ac1Hyj7Idlm5j9frhqSUnAAAAEQ"]
[Thu Apr 02 00:28:59.249916 2026] [:error] [pid 17856:tid 17870] [client 20.116.26.190:21284] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bg/xmrlpc.php"] [unique_id "ac1Hyz7Idlm5j9frhqSUnQAAAEw"]
[Thu Apr 02 00:28:59.661241 2026] [:error] [pid 17856:tid 17874] [client 20.116.26.190:21233] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "ac1Hyz7Idlm5j9frhqSUoAAAAFA"]
[Thu Apr 02 00:29:00.075314 2026] [:error] [pid 8908:tid 8931] [client 20.116.26.190:21128] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "ac1HzPkmxtJXGnLdvgAAJwAAAJI"]
[Thu Apr 02 00:29:00.489005 2026] [:error] [pid 8910:tid 8973] [client 20.116.26.190:21287] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "ac1HzKJZINUcF3tYgEyS2wAAAQU"]
[Thu Apr 02 00:29:00.903083 2026] [:error] [pid 8908:tid 8936] [client 20.116.26.190:21310] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "ac1HzPkmxtJXGnLdvgAALQAAAJc"]
[Thu Apr 02 00:29:01.317640 2026] [:error] [pid 17856:tid 17878] [client 20.116.26.190:21275] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/css/colors/blue/atomlib.php"] [unique_id "ac1HzT7Idlm5j9frhqSUpAAAAFQ"]
[Thu Apr 02 00:29:01.749087 2026] [:error] [pid 8910:tid 8988] [client 20.116.26.190:21252] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/css/colors/blue/atomlib.php"] [unique_id "ac1HzaJZINUcF3tYgEyS4AAAARQ"]
[Thu Apr 02 00:29:02.160563 2026] [:error] [pid 8910:tid 8990] [client 20.116.26.190:21263] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/css/colors/blue/atomlib.php"] [unique_id "ac1HzqJZINUcF3tYgEyS4wAAARY"]
[Thu Apr 02 00:29:02.595625 2026] [:error] [pid 17856:tid 17880] [client 20.116.26.190:21352] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/css/colors/blue/atomlib.php"] [unique_id "ac1Hzj7Idlm5j9frhqSUrAAAAFY"]
[Thu Apr 02 00:29:03.014431 2026] [:error] [pid 8908:tid 8935] [client 20.116.26.190:21270] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/byp.php"] [unique_id "ac1Hz_kmxtJXGnLdvgAAMQAAAJY"]
[Thu Apr 02 00:29:03.428614 2026] [:error] [pid 8910:tid 8968] [client 20.116.26.190:21211] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/byp.php"] [unique_id "ac1Hz6JZINUcF3tYgEyS5AAAAQA"]
[Thu Apr 02 00:29:03.841726 2026] [:error] [pid 8995:tid 9004] [client 20.116.26.190:21309] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/byp.php"] [unique_id "ac1Hz-onaBjs3qxcRecIuAAAAAY"]
[Thu Apr 02 00:29:04.252751 2026] [:error] [pid 8909:tid 8954] [client 20.116.26.190:21289] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/byp.php"] [unique_id "ac1H0DvP_a0662gDl6A1EwAAAM0"]
[Thu Apr 02 00:29:04.673124 2026] [:error] [pid 8995:tid 9019] [client 20.116.26.190:21192] [client 20.116.26.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/theme-compat/index.php"] [unique_id "ac1H0OonaBjs3qxcRecIvgAAABU"]
[Thu Apr 02 00:29:05.085608 2026] [:error] [pid 8908:tid 8923] [client 20.116.26.190:21208] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/wp-login.php"] [unique_id "ac1H0fkmxtJXGnLdvgAAMwAAAIo"]
[Thu Apr 02 00:29:05.500076 2026] [:error] [pid 8909:tid 8960] [client 20.116.26.190:21429] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/wp-login.php"] [unique_id "ac1H0TvP_a0662gDl6A1GgAAANM"]
[Thu Apr 02 00:29:05.919291 2026] [:error] [pid 8909:tid 8961] [client 20.116.26.190:21292] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/wp-login.php"] [unique_id "ac1H0TvP_a0662gDl6A1HQAAANQ"]
[Thu Apr 02 00:29:06.334941 2026] [:error] [pid 8995:tid 9020] [client 20.116.26.190:21418] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/admin/editor/engine.php"] [unique_id "ac1H0uonaBjs3qxcRecIwAAAABY"]
[Thu Apr 02 00:29:06.745726 2026] [:error] [pid 8909:tid 8946] [client 20.116.26.190:21302] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/admin/editor/engine.php"] [unique_id "ac1H0jvP_a0662gDl6A1IQAAAMU"]
[Thu Apr 02 00:29:07.157657 2026] [:error] [pid 17856:tid 17873] [client 20.116.26.190:21456] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/admin/editor/engine.php"] [unique_id "ac1H0z7Idlm5j9frhqSUvwAAAE8"]
[Thu Apr 02 00:29:07.573978 2026] [:error] [pid 8995:tid 8998] [client 20.116.26.190:21277] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/admin/editor/engine.php"] [unique_id "ac1H0-onaBjs3qxcRecIwwAAAAA"]
[Thu Apr 02 00:29:07.984582 2026] [:error] [pid 8995:tid 9016] [client 20.116.26.190:21136] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/chosen.php"] [unique_id "ac1H0-onaBjs3qxcRecIxgAAABI"]
[Thu Apr 02 00:29:08.408094 2026] [:error] [pid 17856:tid 17866] [client 20.116.26.190:21280] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/chosen.php"] [unique_id "ac1H1D7Idlm5j9frhqSUxwAAAEg"]
[Thu Apr 02 00:29:08.843707 2026] [:error] [pid 8910:tid 8983] [client 20.116.26.190:21203] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/chosen.php"] [unique_id "ac1H1KJZINUcF3tYgEyS7wAAAQ8"]
[Thu Apr 02 00:29:09.254022 2026] [:error] [pid 62559:tid 62574] [client 20.116.26.190:21248] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/chosen.php"] [unique_id "ac1H1S7NKI8IaNKZFIcv_AAAAU0"]
[Thu Apr 02 00:29:09.675067 2026] [:error] [pid 8908:tid 8924] [client 20.116.26.190:21206] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/themes/aahana/json.php"] [unique_id "ac1H1fkmxtJXGnLdvgAAOgAAAIs"]
[Thu Apr 02 00:29:10.090594 2026] [:error] [pid 8909:tid 8956] [client 20.116.26.190:21150] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/themes/aahana/json.php"] [unique_id "ac1H1jvP_a0662gDl6A1JgAAAM8"]
[Thu Apr 02 00:29:10.510584 2026] [:error] [pid 62559:tid 62570] [client 20.116.26.190:21070] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/themes/aahana/json.php"] [unique_id "ac1H1i7NKI8IaNKZFIcwAgAAAUk"]
[Thu Apr 02 00:29:10.970881 2026] [:error] [pid 62559:tid 62573] [client 20.116.26.190:21223] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/themes/aahana/json.php"] [unique_id "ac1H1i7NKI8IaNKZFIcwCAAAAUw"]
[Thu Apr 02 00:29:11.384413 2026] [:error] [pid 62559:tid 62571] [client 20.116.26.190:21184] [client 20.116.26.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/html-api/about.php"] [unique_id "ac1H1y7NKI8IaNKZFIcwDQAAAUo"]
[Thu Apr 02 00:29:11.804617 2026] [:error] [pid 8908:tid 8931] [client 20.116.26.190:21269] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/images/lmfi2.php"] [unique_id "ac1H1_kmxtJXGnLdvgAAPAAAAJI"]
[Thu Apr 02 00:29:12.225346 2026] [:error] [pid 62559:tid 62579] [client 20.116.26.190:21257] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/images/lmfi2.php"] [unique_id "ac1H2C7NKI8IaNKZFIcwHAAAAVI"]
[Thu Apr 02 00:29:12.642300 2026] [:error] [pid 8908:tid 8936] [client 20.116.26.190:21124] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/images/lmfi2.php"] [unique_id "ac1H2PkmxtJXGnLdvgAAPgAAAJc"]
[Thu Apr 02 00:29:13.068692 2026] [:error] [pid 8908:tid 8919] [client 20.116.26.190:21193] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/function.php"] [unique_id "ac1H2fkmxtJXGnLdvgAAQgAAAIY"]
[Thu Apr 02 00:29:13.481017 2026] [:error] [pid 62559:tid 62581] [client 20.116.26.190:21190] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/function.php"] [unique_id "ac1H2S7NKI8IaNKZFIcwHwAAAVQ"]
[Thu Apr 02 00:29:13.892760 2026] [:error] [pid 8909:tid 8947] [client 20.116.26.190:21288] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/function.php"] [unique_id "ac1H2TvP_a0662gDl6A1LwAAAMY"]
[Thu Apr 02 00:29:14.303808 2026] [:error] [pid 62559:tid 62579] [client 20.116.26.190:21214] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/function.php"] [unique_id "ac1H2i7NKI8IaNKZFIcwIQAAAVI"]
[Thu Apr 02 00:29:14.727691 2026] [:error] [pid 8908:tid 8916] [client 20.116.26.190:21186] [client 20.116.26.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/Text/Diff/alfa-rex.php"] [unique_id "ac1H2vkmxtJXGnLdvgAASAAAAIM"]
[Thu Apr 02 00:29:15.144665 2026] [:error] [pid 8908:tid 8932] [client 20.116.26.190:21380] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/images/chosen.php"] [unique_id "ac1H2_kmxtJXGnLdvgAASQAAAJM"]
[Thu Apr 02 00:29:15.567898 2026] [:error] [pid 8910:tid 8973] [client 20.116.26.190:21298] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/images/chosen.php"] [unique_id "ac1H26JZINUcF3tYgEyS-wAAAQU"]
[Thu Apr 02 00:29:15.998546 2026] [:error] [pid 17856:tid 17862] [client 20.116.26.190:21241] [client 20.116.26.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/images/chosen.php"] [unique_id "ac1H2z7Idlm5j9frhqSU1gAAAEQ"]
[Thu Apr 02 00:29:16.628131 2026] [proxy_fcgi:error] [pid 8909:tid 8954] [client 20.116.26.190:21229] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 02:41:52.068379 2026] [:error] [pid 8037:tid 8109] [client 216.24.210.239:24445] [client 216.24.210.239] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/buttons.css"] [unique_id "ac1m8IGD8ox-W9jHVfDZbAAAAQE"]
[Thu Apr 02 06:23:20.622547 2026] [proxy_fcgi:error] [pid 37543:tid 37567] [client 158.158.99.125:58769] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 06:23:20.871778 2026] [proxy_fcgi:error] [pid 37543:tid 37568] [client 158.158.99.125:58769] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 06:23:21.114876 2026] [proxy_fcgi:error] [pid 37543:tid 37551] [client 158.158.99.125:58769] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 06:23:21.359433 2026] [proxy_fcgi:error] [pid 37543:tid 37565] [client 158.158.99.125:58769] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 06:23:21.603259 2026] [proxy_fcgi:error] [pid 37543:tid 37547] [client 158.158.99.125:58769] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 06:23:21.848649 2026] [proxy_fcgi:error] [pid 37543:tid 37556] [client 158.158.99.125:58769] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 06:23:22.093425 2026] [proxy_fcgi:error] [pid 37543:tid 37569] [client 158.158.99.125:58769] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 06:23:22.337661 2026] [:error] [pid 37543:tid 37554] [client 158.158.99.125:58769] [client 158.158.99.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/azrhw.php"] [unique_id "ac2a2nhdk2bEYJCvILYiPwAAAUk"]
[Thu Apr 02 06:23:23.000805 2026] [:error] [pid 37543:tid 37546] [client 158.158.99.125:18850] [client 158.158.99.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wtiiy.php"] [unique_id "ac2a2nhdk2bEYJCvILYiQQAAAUE"]
[Thu Apr 02 06:23:23.490596 2026] [:error] [pid 37543:tid 37561] [client 158.158.99.125:18824] [client 158.158.99.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wtiiy.php"] [unique_id "ac2a23hdk2bEYJCvILYiQwAAAVA"]
[Thu Apr 02 06:23:24.009410 2026] [:error] [pid 37543:tid 37560] [client 158.158.99.125:58791] [client 158.158.99.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wtiiy.php"] [unique_id "ac2a3Hhdk2bEYJCvILYiSAAAAU8"]
[Thu Apr 02 06:23:24.549873 2026] [:error] [pid 29467:tid 29474] [client 158.158.99.125:58756] [client 158.158.99.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lef.php"] [unique_id "ac2a3L4VUBFCJAq-WOklnAAAAQQ"]
[Thu Apr 02 06:23:25.170804 2026] [:error] [pid 59201:tid 59273] [client 158.158.99.125:18823] [client 158.158.99.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-ccv.php"] [unique_id "ac2a3cAC0Tw8eL6gzZ6FZgAAAIY"]
[Thu Apr 02 06:23:25.699616 2026] [:error] [pid 37543:tid 37559] [client 158.158.99.125:58806] [client 158.158.99.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-ccv.php"] [unique_id "ac2a3Xhdk2bEYJCvILYiUQAAAU4"]
[Thu Apr 02 06:23:26.179345 2026] [:error] [pid 29467:tid 29486] [client 158.158.99.125:18869] [client 158.158.99.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-ccv.php"] [unique_id "ac2a3r4VUBFCJAq-WOkloAAAARA"]
[Thu Apr 02 06:23:26.657122 2026] [:error] [pid 29467:tid 29485] [client 158.158.99.125:45467] [client 158.158.99.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-ccv.php"] [unique_id "ac2a3r4VUBFCJAq-WOkloQAAAQ8"]
[Thu Apr 02 06:23:27.152988 2026] [:error] [pid 59200:tid 59263] [client 158.158.99.125:58815] [client 158.158.99.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/h2.php"] [unique_id "ac2a37fP26txrdLs3Er9TgAAAFc"]
[Thu Apr 02 06:23:27.630862 2026] [:error] [pid 59200:tid 59247] [client 158.158.99.125:58776] [client 158.158.99.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/h2.php"] [unique_id "ac2a37fP26txrdLs3Er9UQAAAEc"]
[Thu Apr 02 06:23:28.116144 2026] [:error] [pid 37543:tid 37551] [client 158.158.99.125:42348] [client 158.158.99.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/haz.php"] [unique_id "ac2a4Hhdk2bEYJCvILYiVwAAAUY"]
[Thu Apr 02 06:23:28.598058 2026] [:error] [pid 29467:tid 29473] [client 158.158.99.125:18854] [client 158.158.99.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/haz.php"] [unique_id "ac2a4L4VUBFCJAq-WOklpgAAAQM"]
[Thu Apr 02 06:23:29.140510 2026] [:error] [pid 59194:tid 59214] [client 158.158.99.125:45449] [client 158.158.99.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/torsa1.php"] [unique_id "ac2a4RMpAeV11hcQehzgkAAAAAE"]
[Thu Apr 02 06:23:29.648686 2026] [:error] [pid 59200:tid 59240] [client 158.158.99.125:58768] [client 158.158.99.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/torsa1.php"] [unique_id "ac2a4bfP26txrdLs3Er9UwAAAEA"]
[Thu Apr 02 06:23:30.148411 2026] [:error] [pid 29467:tid 29487] [client 158.158.99.125:45474] [client 158.158.99.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/55.php"] [unique_id "ac2a4r4VUBFCJAq-WOklqQAAARE"]
[Thu Apr 02 06:23:30.634762 2026] [:error] [pid 37543:tid 37549] [client 158.158.99.125:42345] [client 158.158.99.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/55.php"] [unique_id "ac2a4nhdk2bEYJCvILYiXAAAAUQ"]
[Thu Apr 02 06:23:31.114488 2026] [:error] [pid 37543:tid 37546] [client 158.158.99.125:18844] [client 158.158.99.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/55.php"] [unique_id "ac2a43hdk2bEYJCvILYiXgAAAUE"]
[Thu Apr 02 06:23:31.596510 2026] [:error] [pid 37543:tid 37560] [client 158.158.99.125:31308] [client 158.158.99.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/55.php"] [unique_id "ac2a43hdk2bEYJCvILYiZAAAAU8"]
[Thu Apr 02 06:23:32.075515 2026] [:error] [pid 59201:tid 59269] [client 158.158.99.125:58775] [client 158.158.99.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mmp.php"] [unique_id "ac2a5MAC0Tw8eL6gzZ6FcgAAAII"]
[Thu Apr 02 06:23:32.563606 2026] [:error] [pid 59200:tid 59248] [client 158.158.99.125:18845] [client 158.158.99.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mmp.php"] [unique_id "ac2a5LfP26txrdLs3Er9VQAAAEg"]
[Thu Apr 02 06:23:33.052180 2026] [:error] [pid 37543:tid 37561] [client 158.158.99.125:45445] [client 158.158.99.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rrr.php"] [unique_id "ac2a5Xhdk2bEYJCvILYiaQAAAVA"]
[Thu Apr 02 06:23:33.530153 2026] [:error] [pid 29467:tid 29480] [client 158.158.99.125:18834] [client 158.158.99.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rrr.php"] [unique_id "ac2a5b4VUBFCJAq-WOkluwAAAQo"]
[Thu Apr 02 06:23:34.010403 2026] [:error] [pid 59305:tid 59333] [client 158.158.99.125:58759] [client 158.158.99.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rrr.php"] [unique_id "ac2a5qr2tV4rDwKFxKcWPQAAANg"]
[Thu Apr 02 06:23:34.489326 2026] [:error] [pid 37543:tid 37560] [client 158.158.99.125:45456] [client 158.158.99.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rrr.php"] [unique_id "ac2a5nhdk2bEYJCvILYibAAAAU8"]
[Thu Apr 02 06:23:34.966441 2026] [:error] [pid 59305:tid 59328] [client 158.158.99.125:45472] [client 158.158.99.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/un.php"] [unique_id "ac2a5qr2tV4rDwKFxKcWRAAAANM"]
[Thu Apr 02 06:23:35.488369 2026] [:error] [pid 59194:tid 59229] [client 158.158.99.125:18841] [client 158.158.99.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/un.php"] [unique_id "ac2a5xMpAeV11hcQehzglQAAABA"]
[Thu Apr 02 06:23:36.175602 2026] [:error] [pid 59194:tid 59225] [client 158.158.99.125:58792] [client 158.158.99.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/un.php"] [unique_id "ac2a6BMpAeV11hcQehzgmAAAAAw"]
[Thu Apr 02 06:23:36.693774 2026] [:error] [pid 59194:tid 59223] [client 158.158.99.125:18877] [client 158.158.99.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/un.php"] [unique_id "ac2a6BMpAeV11hcQehzgmwAAAAo"]
[Thu Apr 02 06:23:37.193622 2026] [:error] [pid 59194:tid 59231] [client 158.158.99.125:18819] [client 158.158.99.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lupo.php"] [unique_id "ac2a6RMpAeV11hcQehzgnAAAABI"]
[Thu Apr 02 06:23:37.671093 2026] [:error] [pid 59201:tid 59282] [client 158.158.99.125:58760] [client 158.158.99.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lupo.php"] [unique_id "ac2a6cAC0Tw8eL6gzZ6FeAAAAI8"]
[Thu Apr 02 06:23:38.176514 2026] [:error] [pid 59305:tid 59331] [client 158.158.99.125:42304] [client 158.158.99.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lupo.php"] [unique_id "ac2a6qr2tV4rDwKFxKcWTwAAANY"]
[Thu Apr 02 06:23:38.656962 2026] [:error] [pid 37543:tid 37563] [client 158.158.99.125:42333] [client 158.158.99.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lupo.php"] [unique_id "ac2a6nhdk2bEYJCvILYibwAAAVI"]
[Thu Apr 02 06:23:39.154172 2026] [:error] [pid 59201:tid 59278] [client 158.158.99.125:58797] [client 158.158.99.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ianmg.php"] [unique_id "ac2a68AC0Tw8eL6gzZ6FfQAAAIs"]
[Thu Apr 02 06:23:39.664808 2026] [:error] [pid 59201:tid 59280] [client 158.158.99.125:18870] [client 158.158.99.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ianmg.php"] [unique_id "ac2a68AC0Tw8eL6gzZ6FfgAAAI0"]
[Thu Apr 02 07:13:38.042948 2026] [proxy_fcgi:error] [pid 59305:tid 59321] [client 20.250.12.127:59068] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 17:21:09.213499 2026] [:error] [pid 59200:tid 59250] [client 216.24.210.109:51319] [client 216.24.210.109] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/buttons.css"] [unique_id "ac41BbfP26txrdLs3EpUOgAAAEo"]
[Thu Apr 02 19:04:06.894937 2026] [proxy_fcgi:error] [pid 29467:tid 29473] [client 51.12.92.153:12650] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 19:04:07.165879 2026] [proxy_fcgi:error] [pid 29467:tid 29481] [client 51.12.92.153:12650] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 19:04:07.433106 2026] [proxy_fcgi:error] [pid 29467:tid 29487] [client 51.12.92.153:12650] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 19:04:07.706438 2026] [proxy_fcgi:error] [pid 29467:tid 29471] [client 51.12.92.153:12650] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 19:04:07.993288 2026] [proxy_fcgi:error] [pid 29467:tid 29470] [client 51.12.92.153:12650] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 19:04:08.260315 2026] [proxy_fcgi:error] [pid 29467:tid 29485] [client 51.12.92.153:12650] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 19:04:08.527502 2026] [proxy_fcgi:error] [pid 29467:tid 29477] [client 51.12.92.153:12650] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 19:04:08.792177 2026] [proxy_fcgi:error] [pid 29467:tid 29479] [client 51.12.92.153:12650] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 19:04:09.058084 2026] [proxy_fcgi:error] [pid 29467:tid 29491] [client 51.12.92.153:12650] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 19:04:09.325787 2026] [proxy_fcgi:error] [pid 29467:tid 29486] [client 51.12.92.153:12650] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 19:04:09.587545 2026] [:error] [pid 29467:tid 29472] [client 51.12.92.153:12650] [client 51.12.92.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dtwpf.php"] [unique_id "ac5NKb4VUBFCJAq-WOlTqwAAAQI"]
[Thu Apr 02 19:04:10.163111 2026] [:error] [pid 59305:tid 59313] [client 51.12.92.153:36549] [client 51.12.92.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dtwpf.php"] [unique_id "ac5NKqr2tV4rDwKFxKdpGwAAAMQ"]
[Thu Apr 02 19:04:10.735965 2026] [:error] [pid 59305:tid 59320] [client 51.12.92.153:25131] [client 51.12.92.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dtwpf.php"] [unique_id "ac5NKqr2tV4rDwKFxKdpHwAAAMs"]
[Thu Apr 02 19:04:11.288146 2026] [:error] [pid 59305:tid 59309] [client 51.12.92.153:23681] [client 51.12.92.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dtwpf.php"] [unique_id "ac5NK6r2tV4rDwKFxKdpJgAAAMA"]
[Thu Apr 02 19:04:11.835876 2026] [:error] [pid 59194:tid 59228] [client 51.12.92.153:24364] [client 51.12.92.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wtiiy.php"] [unique_id "ac5NKxMpAeV11hcQehw7PwAAAA8"]
[Thu Apr 02 19:04:12.663580 2026] [:error] [pid 54384:tid 54395] [client 51.12.92.153:38432] [client 51.12.92.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wtiiy.php"] [unique_id "ac5NLNWWpaby3TVN7Mf8cQAAAck"]
[Thu Apr 02 19:04:13.213306 2026] [:error] [pid 59305:tid 59320] [client 51.12.92.153:36588] [client 51.12.92.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wtiiy.php"] [unique_id "ac5NLar2tV4rDwKFxKdpKgAAAMs"]
[Thu Apr 02 19:04:13.847797 2026] [:error] [pid 54384:tid 54410] [client 51.12.92.153:30585] [client 51.12.92.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wtiiy.php"] [unique_id "ac5NLdWWpaby3TVN7Mf8cgAAAdg"]
[Thu Apr 02 19:04:14.489625 2026] [:error] [pid 59194:tid 59215] [client 51.12.92.153:31947] [client 51.12.92.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/s.php"] [unique_id "ac5NLhMpAeV11hcQehw7QQAAAAI"]
[Thu Apr 02 19:04:15.108734 2026] [:error] [pid 54384:tid 54394] [client 51.12.92.153:35476] [client 51.12.92.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/s.php"] [unique_id "ac5NL9WWpaby3TVN7Mf8dgAAAcg"]
[Thu Apr 02 19:04:15.797142 2026] [:error] [pid 59200:tid 59258] [client 51.12.92.153:17779] [client 51.12.92.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/s.php"] [unique_id "ac5NL7fP26txrdLs3EppZgAAAFI"]
[Thu Apr 02 19:04:16.384657 2026] [:error] [pid 37543:tid 37553] [client 51.12.92.153:35465] [client 51.12.92.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/s.php"] [unique_id "ac5NMHhdk2bEYJCvILbLoQAAAUg"]
[Thu Apr 02 19:04:17.023687 2026] [:error] [pid 59305:tid 59309] [client 51.12.92.153:12647] [client 51.12.92.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sadcut1.php"] [unique_id "ac5NMar2tV4rDwKFxKdpMAAAAMA"]
[Thu Apr 02 19:04:17.734592 2026] [:error] [pid 23927:tid 23944] [client 51.12.92.153:24348] [client 51.12.92.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sadcut1.php"] [unique_id "ac5NMUsZwqCndhl9uKCYgwAAAY8"]
[Thu Apr 02 19:04:18.288296 2026] [:error] [pid 59305:tid 59325] [client 51.12.92.153:31957] [client 51.12.92.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sadcut1.php"] [unique_id "ac5NMqr2tV4rDwKFxKdpPgAAANA"]
[Thu Apr 02 19:04:19.172921 2026] [:error] [pid 23927:tid 23952] [client 51.12.92.153:23693] [client 51.12.92.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sadcut1.php"] [unique_id "ac5NM0sZwqCndhl9uKCYhQAAAZc"]
[Thu Apr 02 19:04:19.725307 2026] [:error] [pid 29467:tid 29493] [client 51.12.92.153:15691] [client 51.12.92.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lef.php"] [unique_id "ac5NM74VUBFCJAq-WOlTugAAARc"]
[Thu Apr 02 19:04:20.323337 2026] [:error] [pid 59305:tid 59312] [client 51.12.92.153:46150] [client 51.12.92.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lef.php"] [unique_id "ac5NNKr2tV4rDwKFxKdpQwAAAMM"]
[Thu Apr 02 19:04:21.166656 2026] [:error] [pid 59305:tid 59316] [client 51.12.92.153:12610] [client 51.12.92.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lef.php"] [unique_id "ac5NNar2tV4rDwKFxKdpRwAAAMc"]
[Thu Apr 02 19:04:21.786095 2026] [:error] [pid 59305:tid 59332] [client 51.12.92.153:38422] [client 51.12.92.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lef.php"] [unique_id "ac5NNar2tV4rDwKFxKdpTAAAANc"]
[Thu Apr 02 19:04:22.353394 2026] [:error] [pid 59305:tid 59311] [client 51.12.92.153:45086] [client 51.12.92.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ftde.php"] [unique_id "ac5NNqr2tV4rDwKFxKdpUgAAAMI"]
[Thu Apr 02 19:04:22.923479 2026] [:error] [pid 37543:tid 37563] [client 51.12.92.153:24328] [client 51.12.92.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ftde.php"] [unique_id "ac5NNnhdk2bEYJCvILbLugAAAVI"]
[Thu Apr 02 19:04:23.578143 2026] [:error] [pid 29467:tid 29480] [client 51.12.92.153:42319] [client 51.12.92.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-ccv.php"] [unique_id "ac5NN74VUBFCJAq-WOlTvwAAAQo"]
[Thu Apr 02 19:04:24.153426 2026] [:error] [pid 59201:tid 59271] [client 51.12.92.153:25735] [client 51.12.92.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-ccv.php"] [unique_id "ac5NOMAC0Tw8eL6gzZ4OfwAAAIQ"]
[Thu Apr 02 19:04:24.709887 2026] [:error] [pid 29467:tid 29492] [client 51.12.92.153:35529] [client 51.12.92.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-ccv.php"] [unique_id "ac5NOL4VUBFCJAq-WOlTxQAAARY"]
[Thu Apr 02 19:04:25.367472 2026] [:error] [pid 23927:tid 23942] [client 51.12.92.153:25762] [client 51.12.92.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/h2.php"] [unique_id "ac5NOUsZwqCndhl9uKCYjQAAAY0"]
[Thu Apr 02 19:04:26.032141 2026] [:error] [pid 59305:tid 59312] [client 51.12.92.153:35540] [client 51.12.92.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/h2.php"] [unique_id "ac5NOqr2tV4rDwKFxKdpXwAAAMM"]
[Thu Apr 02 19:04:26.662042 2026] [:error] [pid 23927:tid 23938] [client 51.12.92.153:45116] [client 51.12.92.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/haz.php"] [unique_id "ac5NOksZwqCndhl9uKCYlwAAAYk"]
[Thu Apr 02 19:04:27.241317 2026] [:error] [pid 23927:tid 23943] [client 51.12.92.153:35554] [client 51.12.92.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/haz.php"] [unique_id "ac5NO0sZwqCndhl9uKCYmwAAAY4"]
[Thu Apr 02 19:04:27.820836 2026] [:error] [pid 59305:tid 59326] [client 51.12.92.153:25137] [client 51.12.92.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/haz.php"] [unique_id "ac5NO6r2tV4rDwKFxKdpZAAAANE"]
[Thu Apr 02 19:04:28.487656 2026] [:error] [pid 59305:tid 59327] [client 51.12.92.153:15681] [client 51.12.92.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/haz.php"] [unique_id "ac5NPKr2tV4rDwKFxKdpaAAAANI"]
[Thu Apr 02 19:04:29.133087 2026] [:error] [pid 23927:tid 23933] [client 51.12.92.153:42322] [client 51.12.92.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dass.php"] [unique_id "ac5NPUsZwqCndhl9uKCYpQAAAYQ"]
[Thu Apr 02 19:04:29.804292 2026] [:error] [pid 59305:tid 59316] [client 51.12.92.153:46165] [client 51.12.92.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dass.php"] [unique_id "ac5NPar2tV4rDwKFxKdpcAAAAMc"]
[Thu Apr 02 19:04:30.635921 2026] [:error] [pid 59305:tid 59324] [client 51.12.92.153:24342] [client 51.12.92.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dass.php"] [unique_id "ac5NPqr2tV4rDwKFxKdpewAAAM8"]
[Thu Apr 02 19:04:31.245750 2026] [:error] [pid 29467:tid 29478] [client 51.12.92.153:41883] [client 51.12.92.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dass.php"] [unique_id "ac5NP74VUBFCJAq-WOlT1AAAAQg"]
[Thu Apr 02 19:04:31.907072 2026] [:error] [pid 29467:tid 29476] [client 51.12.92.153:41918] [client 51.12.92.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rithin.php"] [unique_id "ac5NP74VUBFCJAq-WOlT2wAAAQY"]
[Thu Apr 02 19:04:32.890287 2026] [:error] [pid 29467:tid 29490] [client 51.12.92.153:38425] [client 51.12.92.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rithin.php"] [unique_id "ac5NQL4VUBFCJAq-WOlT4QAAARQ"]
[Thu Apr 02 19:04:33.765026 2026] [:error] [pid 59305:tid 59318] [client 51.12.92.153:35486] [client 51.12.92.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rithin.php"] [unique_id "ac5NQar2tV4rDwKFxKdpkQAAAMk"]
[Thu Apr 02 19:04:34.573319 2026] [:error] [pid 59194:tid 59221] [client 51.12.92.153:36939] [client 51.12.92.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rithin.php"] [unique_id "ac5NQhMpAeV11hcQehw7RgAAAAg"]
[Thu Apr 02 19:04:35.239687 2026] [:error] [pid 59305:tid 59316] [client 51.12.92.153:15690] [client 51.12.92.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cilng.php"] [unique_id "ac5NQ6r2tV4rDwKFxKdpmgAAAMc"]
[Thu Apr 02 19:04:35.924859 2026] [:error] [pid 54384:tid 54392] [client 51.12.92.153:53216] [client 51.12.92.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cilng.php"] [unique_id "ac5NQ9WWpaby3TVN7Mf8swAAAcY"]
[Thu Apr 02 19:04:36.801878 2026] [:error] [pid 23927:tid 23938] [client 51.12.92.153:30575] [client 51.12.92.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cilng.php"] [unique_id "ac5NREsZwqCndhl9uKCYrQAAAYk"]
[Thu Apr 02 19:04:37.404982 2026] [:error] [pid 29467:tid 29488] [client 51.12.92.153:39569] [client 51.12.92.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cilng.php"] [unique_id "ac5NRb4VUBFCJAq-WOlT7gAAARI"]
[Thu Apr 02 19:04:38.070685 2026] [:error] [pid 54384:tid 54409] [client 51.12.92.153:55183] [client 51.12.92.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f222.php"] [unique_id "ac5NRtWWpaby3TVN7Mf8xAAAAdc"]
[Thu Apr 02 19:04:38.647746 2026] [:error] [pid 59305:tid 59317] [client 51.12.92.153:35561] [client 51.12.92.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f222.php"] [unique_id "ac5NRqr2tV4rDwKFxKdpngAAAMg"]
[Thu Apr 02 19:04:39.431428 2026] [:error] [pid 59194:tid 59220] [client 51.12.92.153:35526] [client 51.12.92.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f222.php"] [unique_id "ac5NRxMpAeV11hcQehw7SQAAAAc"]
[Thu Apr 02 19:04:39.981012 2026] [:error] [pid 54384:tid 54389] [client 51.12.92.153:36983] [client 51.12.92.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f222.php"] [unique_id "ac5NR9WWpaby3TVN7Mf8ygAAAcM"]
[Thu Apr 02 19:04:40.578254 2026] [:error] [pid 59305:tid 59324] [client 51.12.92.153:45109] [client 51.12.92.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-ver.php"] [unique_id "ac5NSKr2tV4rDwKFxKdppAAAAM8"]
[Thu Apr 02 19:04:41.187929 2026] [:error] [pid 59305:tid 59333] [client 51.12.92.153:36939] [client 51.12.92.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-ver.php"] [unique_id "ac5NSar2tV4rDwKFxKdppQAAANg"]
[Thu Apr 02 19:04:41.884027 2026] [:error] [pid 59305:tid 59328] [client 51.12.92.153:53187] [client 51.12.92.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-ver.php"] [unique_id "ac5NSar2tV4rDwKFxKdprgAAANM"]
[Thu Apr 02 19:04:42.560152 2026] [:error] [pid 29467:tid 29474] [client 51.12.92.153:53189] [client 51.12.92.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-ver.php"] [unique_id "ac5NSr4VUBFCJAq-WOlUCQAAAQQ"]
[Thu Apr 02 19:04:43.133893 2026] [:error] [pid 37543:tid 37565] [client 51.12.92.153:39566] [client 51.12.92.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-block.php"] [unique_id "ac5NS3hdk2bEYJCvILbL1gAAAVQ"]
[Thu Apr 02 19:04:43.785444 2026] [:error] [pid 59305:tid 59312] [client 51.12.92.153:24365] [client 51.12.92.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-block.php"] [unique_id "ac5NS6r2tV4rDwKFxKdpuQAAAMM"]
[Thu Apr 02 19:04:44.540623 2026] [:error] [pid 29467:tid 29485] [client 51.12.92.153:42308] [client 51.12.92.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-block.php"] [unique_id "ac5NTL4VUBFCJAq-WOlUEQAAAQ8"]
[Thu Apr 02 19:04:45.074984 2026] [:error] [pid 59305:tid 59332] [client 51.12.92.153:50047] [client 51.12.92.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-block.php"] [unique_id "ac5NTar2tV4rDwKFxKdpwQAAANc"]
[Thu Apr 02 19:04:45.644023 2026] [:error] [pid 59194:tid 59215] [client 51.12.92.153:51112] [client 51.12.92.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sf.php"] [unique_id "ac5NTRMpAeV11hcQehw7TAAAAAI"]
[Thu Apr 02 19:04:46.245976 2026] [:error] [pid 59201:tid 59267] [client 51.12.92.153:51125] [client 51.12.92.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sf.php"] [unique_id "ac5NTsAC0Tw8eL6gzZ4OlQAAAIA"]
[Thu Apr 02 19:04:46.807109 2026] [:error] [pid 37543:tid 37560] [client 51.12.92.153:42327] [client 51.12.92.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sf.php"] [unique_id "ac5NTnhdk2bEYJCvILbL3wAAAU8"]
[Thu Apr 02 19:04:47.592430 2026] [:error] [pid 59305:tid 59325] [client 51.12.92.153:53207] [client 51.12.92.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sf.php"] [unique_id "ac5NT6r2tV4rDwKFxKdpyQAAANA"]
[Thu Apr 02 19:04:48.287189 2026] [:error] [pid 29467:tid 29481] [client 51.12.92.153:24845] [client 51.12.92.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-blog.php"] [unique_id "ac5NUL4VUBFCJAq-WOlUFQAAAQs"]
[Thu Apr 02 19:04:48.958119 2026] [:error] [pid 23927:tid 23932] [client 51.12.92.153:18318] [client 51.12.92.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-blog.php"] [unique_id "ac5NUEsZwqCndhl9uKCYuwAAAYM"]
[Thu Apr 02 19:04:49.834334 2026] [:error] [pid 59305:tid 59310] [client 51.12.92.153:53217] [client 51.12.92.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-blog.php"] [unique_id "ac5NUar2tV4rDwKFxKdp1wAAAME"]
[Thu Apr 02 19:04:51.180711 2026] [:error] [pid 59200:tid 59264] [client 51.12.92.153:36330] [client 51.12.92.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-blog.php"] [unique_id "ac5NU7fP26txrdLs3EppfAAAAFg"]
[Thu Apr 02 19:04:52.010655 2026] [:error] [pid 23927:tid 23949] [client 51.12.92.153:24881] [client 51.12.92.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ckk.php"] [unique_id "ac5NVEsZwqCndhl9uKCYxQAAAZQ"]
[Thu Apr 02 19:04:52.662602 2026] [:error] [pid 59201:tid 59277] [client 51.12.92.153:15735] [client 51.12.92.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ckk.php"] [unique_id "ac5NVMAC0Tw8eL6gzZ4OpgAAAIo"]
[Thu Apr 02 19:04:53.218233 2026] [:error] [pid 59194:tid 59213] [client 51.12.92.153:50000] [client 51.12.92.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ckk.php"] [unique_id "ac5NVRMpAeV11hcQehw7XgAAAAA"]
[Thu Apr 02 19:04:53.777114 2026] [:error] [pid 59305:tid 59322] [client 51.12.92.153:53218] [client 51.12.92.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ckk.php"] [unique_id "ac5NVar2tV4rDwKFxKdp5QAAAM0"]
[Thu Apr 02 19:04:54.352094 2026] [:error] [pid 59201:tid 59281] [client 51.12.92.153:42310] [client 51.12.92.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kiwkiw.php"] [unique_id "ac5NVsAC0Tw8eL6gzZ4OqgAAAI4"]
[Thu Apr 02 19:04:54.901712 2026] [:error] [pid 23927:tid 23950] [client 51.12.92.153:30555] [client 51.12.92.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kiwkiw.php"] [unique_id "ac5NVksZwqCndhl9uKCYzgAAAZU"]
[Thu Apr 02 19:04:55.513211 2026] [:error] [pid 29467:tid 29490] [client 51.12.92.153:17199] [client 51.12.92.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kiwkiw.php"] [unique_id "ac5NV74VUBFCJAq-WOlUNgAAARQ"]
[Thu Apr 02 19:04:56.222075 2026] [:error] [pid 54384:tid 54406] [client 51.12.92.153:55265] [client 51.12.92.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kiwkiw.php"] [unique_id "ac5NWNWWpaby3TVN7Mf83QAAAdQ"]
[Thu Apr 02 19:04:56.876011 2026] [:error] [pid 59194:tid 59221] [client 51.12.92.153:41881] [client 51.12.92.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sfcl.php"] [unique_id "ac5NWBMpAeV11hcQehw7ZQAAAAg"]
[Thu Apr 02 19:04:57.687935 2026] [:error] [pid 37543:tid 37554] [client 51.12.92.153:25821] [client 51.12.92.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sfcl.php"] [unique_id "ac5NWXhdk2bEYJCvILbL-AAAAUk"]
[Thu Apr 02 19:04:58.358545 2026] [:error] [pid 23927:tid 23944] [client 51.12.92.153:35539] [client 51.12.92.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sfcl.php"] [unique_id "ac5NWksZwqCndhl9uKCY5gAAAY8"]
[Thu Apr 02 19:04:59.071801 2026] [:error] [pid 59201:tid 59280] [client 51.12.92.153:13258] [client 51.12.92.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sfcl.php"] [unique_id "ac5NW8AC0Tw8eL6gzZ4OrAAAAI0"]
[Thu Apr 02 19:04:59.842346 2026] [:error] [pid 23927:tid 23951] [client 51.12.92.153:25835] [client 51.12.92.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xxx.php"] [unique_id "ac5NW0sZwqCndhl9uKCY8wAAAZY"]
[Thu Apr 02 19:05:00.581035 2026] [:error] [pid 59305:tid 59332] [client 51.12.92.153:55735] [client 51.12.92.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xxx.php"] [unique_id "ac5NXKr2tV4rDwKFxKdp9AAAANc"]
[Thu Apr 02 19:05:01.278028 2026] [:error] [pid 59305:tid 59312] [client 51.12.92.153:17273] [client 51.12.92.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xxx.php"] [unique_id "ac5NXar2tV4rDwKFxKdp-gAAAMM"]
[Thu Apr 02 19:05:01.920469 2026] [:error] [pid 59305:tid 59310] [client 51.12.92.153:50033] [client 51.12.92.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xxx.php"] [unique_id "ac5NXar2tV4rDwKFxKdp_QAAAME"]
[Thu Apr 02 19:05:02.479399 2026] [:error] [pid 54384:tid 54391] [client 51.12.92.153:55234] [client 51.12.92.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-upload.php"] [unique_id "ac5NXtWWpaby3TVN7Mf89AAAAcU"]
[Thu Apr 02 19:05:03.174405 2026] [:error] [pid 54384:tid 54399] [client 51.12.92.153:51594] [client 51.12.92.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-upload.php"] [unique_id "ac5NX9WWpaby3TVN7Mf8_QAAAc0"]
[Thu Apr 02 19:05:03.755996 2026] [:error] [pid 29467:tid 29489] [client 51.12.92.153:51643] [client 51.12.92.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-upload.php"] [unique_id "ac5NX74VUBFCJAq-WOlURQAAARM"]
[Thu Apr 02 19:05:04.389406 2026] [:error] [pid 59194:tid 59213] [client 51.12.92.153:25855] [client 51.12.92.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-upload.php"] [unique_id "ac5NYBMpAeV11hcQehw7bgAAAAA"]
[Thu Apr 02 19:05:04.989433 2026] [:error] [pid 29467:tid 29487] [client 51.12.92.153:36293] [client 51.12.92.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/only.php"] [unique_id "ac5NYL4VUBFCJAq-WOlUSwAAARE"]
[Thu Apr 02 19:05:05.536435 2026] [:error] [pid 29467:tid 29486] [client 51.12.92.153:55715] [client 51.12.92.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/only.php"] [unique_id "ac5NYb4VUBFCJAq-WOlUTgAAARA"]
[Thu Apr 02 19:05:06.094561 2026] [:error] [pid 59200:tid 59247] [client 51.12.92.153:40815] [client 51.12.92.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/only.php"] [unique_id "ac5NYrfP26txrdLs3EppjgAAAEc"]
[Thu Apr 02 19:05:06.864809 2026] [:error] [pid 23927:tid 23939] [client 51.12.92.153:36316] [client 51.12.92.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/only.php"] [unique_id "ac5NYksZwqCndhl9uKCZAwAAAYo"]
[Thu Apr 02 19:05:07.665109 2026] [:error] [pid 59200:tid 59250] [client 51.12.92.153:55273] [client 51.12.92.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/torsa1.php"] [unique_id "ac5NY7fP26txrdLs3EpplQAAAEo"]
[Thu Apr 02 19:05:08.529484 2026] [:error] [pid 59305:tid 59332] [client 51.12.92.153:36308] [client 51.12.92.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/torsa1.php"] [unique_id "ac5NZKr2tV4rDwKFxKdqBgAAANc"]
[Thu Apr 02 19:05:09.230896 2026] [proxy_fcgi:error] [pid 23927:tid 23939] [client 51.12.92.153:36306] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 19:05:09.512340 2026] [proxy_fcgi:error] [pid 23927:tid 23938] [client 51.12.92.153:36306] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 19:05:09.783361 2026] [proxy_fcgi:error] [pid 23927:tid 23929] [client 51.12.92.153:36306] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 19:05:10.047901 2026] [proxy_fcgi:error] [pid 23927:tid 23935] [client 51.12.92.153:36306] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 19:05:10.313799 2026] [proxy_fcgi:error] [pid 23927:tid 23951] [client 51.12.92.153:36306] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 19:05:10.582242 2026] [proxy_fcgi:error] [pid 23927:tid 23943] [client 51.12.92.153:36306] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 19:05:10.859096 2026] [proxy_fcgi:error] [pid 23927:tid 23936] [client 51.12.92.153:36306] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 19:05:11.130799 2026] [proxy_fcgi:error] [pid 23927:tid 23942] [client 51.12.92.153:36306] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 19:05:11.403292 2026] [proxy_fcgi:error] [pid 23927:tid 23949] [client 51.12.92.153:36306] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 19:05:11.668282 2026] [proxy_fcgi:error] [pid 23927:tid 23937] [client 51.12.92.153:36306] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 19:05:11.933139 2026] [proxy_fcgi:error] [pid 23927:tid 23934] [client 51.12.92.153:36306] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 19:05:12.195158 2026] [:error] [pid 23927:tid 23945] [client 51.12.92.153:36306] [client 51.12.92.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ianmg.php"] [unique_id "ac5NaEsZwqCndhl9uKCZJwAAAZA"]
[Thu Apr 02 19:05:12.756785 2026] [:error] [pid 59305:tid 59312] [client 51.12.92.153:55288] [client 51.12.92.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ianmg.php"] [unique_id "ac5NaKr2tV4rDwKFxKdqFgAAAMM"]
[Thu Apr 02 19:05:13.415927 2026] [:error] [pid 29467:tid 29493] [client 51.12.92.153:39641] [client 51.12.92.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ianmg.php"] [unique_id "ac5Nab4VUBFCJAq-WOlUYQAAARc"]
[Thu Apr 02 19:05:14.266990 2026] [:error] [pid 29467:tid 29482] [client 51.12.92.153:25843] [client 51.12.92.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ianmg.php"] [unique_id "ac5Nar4VUBFCJAq-WOlUbAAAAQw"]
[Thu Apr 02 19:05:14.956199 2026] [:error] [pid 29467:tid 29476] [client 51.12.92.153:39634] [client 51.12.92.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-block.php"] [unique_id "ac5Nar4VUBFCJAq-WOlUdQAAAQY"]
[Thu Apr 02 19:05:15.601270 2026] [:error] [pid 29467:tid 29488] [client 51.12.92.153:5789] [client 51.12.92.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-block.php"] [unique_id "ac5Na74VUBFCJAq-WOlUfAAAARI"]
[Thu Apr 02 19:05:16.194669 2026] [:error] [pid 29467:tid 29478] [client 51.12.92.153:5330] [client 51.12.92.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-block.php"] [unique_id "ac5NbL4VUBFCJAq-WOlUhAAAAQg"]
[Thu Apr 02 19:05:16.844099 2026] [:error] [pid 59305:tid 59315] [client 51.12.92.153:13860] [client 51.12.92.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-block.php"] [unique_id "ac5NbKr2tV4rDwKFxKdqGQAAAMY"]
[Thu Apr 02 19:37:50.921409 2026] [:error] [pid 59201:tid 59270] [client 51.103.99.120:42391] [client 51.103.99.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ac5VDsAC0Tw8eL6gzZ4XYwAAAIM"]
[Thu Apr 02 19:37:51.400904 2026] [:error] [pid 59201:tid 59267] [client 51.103.99.120:26093] [client 51.103.99.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ac5VD8AC0Tw8eL6gzZ4XZQAAAIA"]
[Thu Apr 02 19:37:52.063523 2026] [:error] [pid 59194:tid 59220] [client 51.103.99.120:15713] [client 51.103.99.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ac5VEBMpAeV11hcQehxBvgAAAAc"]
[Thu Apr 02 19:37:52.573563 2026] [:error] [pid 59200:tid 59260] [client 51.103.99.120:14687] [client 51.103.99.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ac5VELfP26txrdLs3Epw5wAAAFQ"]
[Thu Apr 02 19:38:29.890429 2026] [proxy_fcgi:error] [pid 59305:tid 59327] [client 20.215.208.99:47167] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 19:38:30.159603 2026] [proxy_fcgi:error] [pid 59305:tid 59322] [client 20.215.208.99:47167] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 19:38:30.418474 2026] [proxy_fcgi:error] [pid 59305:tid 59315] [client 20.215.208.99:47167] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 19:38:30.678168 2026] [proxy_fcgi:error] [pid 59305:tid 59332] [client 20.215.208.99:47167] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 19:38:30.936789 2026] [proxy_fcgi:error] [pid 59305:tid 59325] [client 20.215.208.99:47167] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 19:38:31.198961 2026] [proxy_fcgi:error] [pid 59305:tid 59329] [client 20.215.208.99:47167] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 19:38:31.457921 2026] [proxy_fcgi:error] [pid 59305:tid 59331] [client 20.215.208.99:47167] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 19:38:31.717012 2026] [proxy_fcgi:error] [pid 59305:tid 59326] [client 20.215.208.99:47167] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 19:38:31.985762 2026] [proxy_fcgi:error] [pid 59305:tid 59321] [client 20.215.208.99:47167] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 19:38:32.266109 2026] [proxy_fcgi:error] [pid 59305:tid 59328] [client 20.215.208.99:47167] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 19:38:32.521890 2026] [:error] [pid 59305:tid 59333] [client 20.215.208.99:47167] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hnphq.php"] [unique_id "ac5VOKr2tV4rDwKFxKd_0gAAANg"]
[Thu Apr 02 19:38:33.041691 2026] [:error] [pid 37543:tid 37559] [client 20.215.208.99:3394] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hnphq.php"] [unique_id "ac5VOXhdk2bEYJCvILbXvgAAAU4"]
[Thu Apr 02 19:38:33.554852 2026] [:error] [pid 59194:tid 59214] [client 20.215.208.99:14380] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hnphq.php"] [unique_id "ac5VORMpAeV11hcQehxB3gAAAAE"]
[Thu Apr 02 19:38:34.067366 2026] [:error] [pid 37543:tid 37561] [client 20.215.208.99:60326] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hnphq.php"] [unique_id "ac5VOnhdk2bEYJCvILbXwQAAAVA"]
[Thu Apr 02 19:38:34.633766 2026] [:error] [pid 59305:tid 59313] [client 20.215.208.99:30709] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/b4txckoieeyhynhsrpi9lCdefault.php"] [unique_id "ac5VOqr2tV4rDwKFxKd_0wAAAMQ"]
[Thu Apr 02 19:38:35.145939 2026] [:error] [pid 37543:tid 37569] [client 20.215.208.99:17436] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/b4txckoieeyhynhsrpi9lCdefault.php"] [unique_id "ac5VO3hdk2bEYJCvILbXygAAAVg"]
[Thu Apr 02 19:38:35.660514 2026] [:error] [pid 23927:tid 23953] [client 20.215.208.99:24646] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/b4txckoieeyhynhsrpi9lCdefault.php"] [unique_id "ac5VO0sZwqCndhl9uKCnwwAAAZg"]
[Thu Apr 02 19:38:36.213960 2026] [:error] [pid 37543:tid 37549] [client 20.215.208.99:14364] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/b4txckoieeyhynhsrpi9lCdefault.php"] [unique_id "ac5VPHhdk2bEYJCvILbX0QAAAUQ"]
[Thu Apr 02 19:38:36.728848 2026] [:error] [pid 29467:tid 29493] [client 20.215.208.99:54529] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aligk.php"] [unique_id "ac5VPL4VUBFCJAq-WOlxcQAAARc"]
[Thu Apr 02 19:38:37.241174 2026] [:error] [pid 54384:tid 54392] [client 20.215.208.99:24651] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aligk.php"] [unique_id "ac5VPdWWpaby3TVN7McKBAAAAcY"]
[Thu Apr 02 19:38:37.758574 2026] [:error] [pid 23927:tid 23938] [client 20.215.208.99:3454] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aligk.php"] [unique_id "ac5VPUsZwqCndhl9uKCnxgAAAYk"]
[Thu Apr 02 19:38:38.324512 2026] [:error] [pid 23927:tid 23953] [client 20.215.208.99:17419] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aligk.php"] [unique_id "ac5VPksZwqCndhl9uKCnzAAAAZg"]
[Thu Apr 02 19:38:38.846017 2026] [:error] [pid 29467:tid 29475] [client 20.215.208.99:60314] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jlex.php"] [unique_id "ac5VPr4VUBFCJAq-WOlxdgAAAQU"]
[Thu Apr 02 19:38:39.358827 2026] [:error] [pid 59305:tid 59315] [client 20.215.208.99:24701] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jlex.php"] [unique_id "ac5VP6r2tV4rDwKFxKd_1gAAAMY"]
[Thu Apr 02 19:38:39.878140 2026] [:error] [pid 23927:tid 23945] [client 20.215.208.99:14337] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jlex.php"] [unique_id "ac5VP0sZwqCndhl9uKCn0wAAAZA"]
[Thu Apr 02 19:38:40.399452 2026] [:error] [pid 23927:tid 23939] [client 20.215.208.99:23133] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jlex.php"] [unique_id "ac5VQEsZwqCndhl9uKCn1QAAAYo"]
[Thu Apr 02 19:38:40.913093 2026] [:error] [pid 59305:tid 59328] [client 20.215.208.99:64815] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-class-20260318124352.php"] [unique_id "ac5VQKr2tV4rDwKFxKd_3QAAANM"]
[Thu Apr 02 19:38:41.425776 2026] [:error] [pid 23927:tid 23950] [client 20.215.208.99:17446] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-class-20260318124352.php"] [unique_id "ac5VQUsZwqCndhl9uKCn2QAAAZU"]
[Thu Apr 02 19:38:41.953813 2026] [:error] [pid 54384:tid 54410] [client 20.215.208.99:47134] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-class-20260318124352.php"] [unique_id "ac5VQdWWpaby3TVN7McKCQAAAdg"]
[Thu Apr 02 19:38:42.506415 2026] [:error] [pid 59305:tid 59327] [client 20.215.208.99:24665] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-class-20260318124352.php"] [unique_id "ac5VQqr2tV4rDwKFxKd_4QAAANI"]
[Thu Apr 02 19:38:43.017674 2026] [:error] [pid 23927:tid 23938] [client 20.215.208.99:47140] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/5xkfgawzejgwqh9hiaznCdefault.php"] [unique_id "ac5VQ0sZwqCndhl9uKCn2gAAAYk"]
[Thu Apr 02 19:38:43.540448 2026] [:error] [pid 23927:tid 23948] [client 20.215.208.99:64802] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/5xkfgawzejgwqh9hiaznCdefault.php"] [unique_id "ac5VQ0sZwqCndhl9uKCn3AAAAZM"]
[Thu Apr 02 19:38:44.053490 2026] [:error] [pid 59305:tid 59323] [client 20.215.208.99:54548] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/5xkfgawzejgwqh9hiaznCdefault.php"] [unique_id "ac5VRKr2tV4rDwKFxKd_5QAAAM4"]
[Thu Apr 02 19:38:44.563974 2026] [:error] [pid 59200:tid 59254] [client 20.215.208.99:14387] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/5xkfgawzejgwqh9hiaznCdefault.php"] [unique_id "ac5VRLfP26txrdLs3EpxCgAAAE4"]
[Thu Apr 02 19:38:45.076958 2026] [:error] [pid 37543:tid 37558] [client 20.215.208.99:30700] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Okxob.php"] [unique_id "ac5VRXhdk2bEYJCvILbX5QAAAU0"]
[Thu Apr 02 19:38:45.594346 2026] [:error] [pid 59201:tid 59278] [client 20.215.208.99:60338] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Okxob.php"] [unique_id "ac5VRcAC0Tw8eL6gzZ4XoQAAAIs"]
[Thu Apr 02 19:38:46.133873 2026] [:error] [pid 59200:tid 59240] [client 20.215.208.99:24671] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Okxob.php"] [unique_id "ac5VRrfP26txrdLs3EpxDAAAAEA"]
[Thu Apr 02 19:38:46.666681 2026] [:error] [pid 23927:tid 23931] [client 20.215.208.99:36334] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Okxob.php"] [unique_id "ac5VRksZwqCndhl9uKCn4wAAAYI"]
[Thu Apr 02 19:38:47.256152 2026] [:error] [pid 59200:tid 59244] [client 20.215.208.99:54562] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/q7lhrgzoo7ijhnkcedq2Cdefault.php"] [unique_id "ac5VR7fP26txrdLs3EpxEgAAAEQ"]
[Thu Apr 02 19:38:47.849266 2026] [:error] [pid 23927:tid 23937] [client 20.215.208.99:36300] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/q7lhrgzoo7ijhnkcedq2Cdefault.php"] [unique_id "ac5VR0sZwqCndhl9uKCn5wAAAYg"]
[Thu Apr 02 19:38:48.395369 2026] [:error] [pid 59194:tid 59228] [client 20.215.208.99:18955] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/q7lhrgzoo7ijhnkcedq2Cdefault.php"] [unique_id "ac5VSBMpAeV11hcQehxB5AAAAA8"]
[Thu Apr 02 19:38:48.926412 2026] [:error] [pid 29467:tid 29483] [client 20.215.208.99:54564] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/q7lhrgzoo7ijhnkcedq2Cdefault.php"] [unique_id "ac5VSL4VUBFCJAq-WOlxgAAAAQ0"]
[Thu Apr 02 19:38:49.437999 2026] [:error] [pid 54384:tid 54391] [client 20.215.208.99:60331] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kthusnjbc8ab0jiryls2jinCdefault.php"] [unique_id "ac5VSdWWpaby3TVN7McKDgAAAcU"]
[Thu Apr 02 19:38:49.964174 2026] [:error] [pid 59200:tid 59253] [client 20.215.208.99:23120] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kthusnjbc8ab0jiryls2jinCdefault.php"] [unique_id "ac5VSbfP26txrdLs3EpxGwAAAE0"]
[Thu Apr 02 19:38:50.484110 2026] [:error] [pid 59200:tid 59250] [client 20.215.208.99:44920] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kthusnjbc8ab0jiryls2jinCdefault.php"] [unique_id "ac5VSrfP26txrdLs3EpxHgAAAEo"]
[Thu Apr 02 19:38:51.038719 2026] [:error] [pid 59200:tid 59244] [client 20.215.208.99:44912] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kthusnjbc8ab0jiryls2jinCdefault.php"] [unique_id "ac5VS7fP26txrdLs3EpxIQAAAEQ"]
[Thu Apr 02 19:38:51.564213 2026] [:error] [pid 59200:tid 59243] [client 20.215.208.99:24654] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/only.php"] [unique_id "ac5VS7fP26txrdLs3EpxJAAAAEM"]
[Thu Apr 02 19:38:52.142833 2026] [:error] [pid 59200:tid 59256] [client 20.215.208.99:17451] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/only.php"] [unique_id "ac5VTLfP26txrdLs3EpxJQAAAFA"]
[Thu Apr 02 19:38:52.683315 2026] [:error] [pid 23927:tid 23950] [client 20.215.208.99:17426] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/only.php"] [unique_id "ac5VTEsZwqCndhl9uKCn8gAAAZU"]
[Thu Apr 02 19:38:53.209990 2026] [:error] [pid 59200:tid 59253] [client 20.215.208.99:3422] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/only.php"] [unique_id "ac5VTbfP26txrdLs3EpxLAAAAE0"]
[Thu Apr 02 19:38:53.723822 2026] [:error] [pid 23927:tid 23943] [client 20.215.208.99:30693] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/repurify.php"] [unique_id "ac5VTUsZwqCndhl9uKCn9wAAAY4"]
[Thu Apr 02 19:38:54.249738 2026] [:error] [pid 29467:tid 29475] [client 20.215.208.99:30630] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/repurify.php"] [unique_id "ac5VTr4VUBFCJAq-WOlxgQAAAQU"]
[Thu Apr 02 19:38:54.797791 2026] [:error] [pid 59305:tid 59330] [client 20.215.208.99:14396] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/repurify.php"] [unique_id "ac5VTqr2tV4rDwKFxKd_7AAAANU"]
[Thu Apr 02 19:38:55.346970 2026] [:error] [pid 59305:tid 59320] [client 20.215.208.99:30686] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/repurify.php"] [unique_id "ac5VT6r2tV4rDwKFxKd_7wAAAMs"]
[Thu Apr 02 19:38:55.875720 2026] [:error] [pid 59305:tid 59328] [client 20.215.208.99:22072] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tdsaz.php"] [unique_id "ac5VT6r2tV4rDwKFxKd_8gAAANM"]
[Thu Apr 02 19:38:56.409673 2026] [:error] [pid 59200:tid 59243] [client 20.215.208.99:30694] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tdsaz.php"] [unique_id "ac5VULfP26txrdLs3EpxLwAAAEM"]
[Thu Apr 02 19:38:57.034790 2026] [:error] [pid 59201:tid 59282] [client 20.215.208.99:18995] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tdsaz.php"] [unique_id "ac5VUcAC0Tw8eL6gzZ4XrAAAAI8"]
[Thu Apr 02 19:38:57.606175 2026] [:error] [pid 59201:tid 59283] [client 20.215.208.99:30668] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tdsaz.php"] [unique_id "ac5VUcAC0Tw8eL6gzZ4XrwAAAJA"]
[Thu Apr 02 19:38:58.194524 2026] [:error] [pid 29467:tid 29477] [client 20.215.208.99:17465] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xwx1.php"] [unique_id "ac5VUr4VUBFCJAq-WOlxiwAAAQc"]
[Thu Apr 02 19:38:58.750336 2026] [:error] [pid 23927:tid 23944] [client 20.215.208.99:14373] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xwx1.php"] [unique_id "ac5VUksZwqCndhl9uKCoAAAAAY8"]
[Thu Apr 02 19:38:59.269960 2026] [:error] [pid 29467:tid 29487] [client 20.215.208.99:17986] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xwx1.php"] [unique_id "ac5VU74VUBFCJAq-WOlxkgAAARE"]
[Thu Apr 02 19:38:59.791030 2026] [:error] [pid 54384:tid 54396] [client 20.215.208.99:30650] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xwx1.php"] [unique_id "ac5VU9WWpaby3TVN7McKHAAAAco"]
[Thu Apr 02 19:39:00.301603 2026] [:error] [pid 29467:tid 29478] [client 20.215.208.99:14344] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hfles.php"] [unique_id "ac5VVL4VUBFCJAq-WOlxlwAAAQg"]
[Thu Apr 02 19:39:00.814730 2026] [:error] [pid 54384:tid 54408] [client 20.215.208.99:22016] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hfles.php"] [unique_id "ac5VVNWWpaby3TVN7McKIQAAAdY"]
[Thu Apr 02 19:39:01.333024 2026] [:error] [pid 59305:tid 59323] [client 20.215.208.99:56322] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hfles.php"] [unique_id "ac5VVar2tV4rDwKFxKd_9gAAAM4"]
[Thu Apr 02 19:39:01.868444 2026] [:error] [pid 59201:tid 59277] [client 20.215.208.99:14397] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hfles.php"] [unique_id "ac5VVcAC0Tw8eL6gzZ4XsgAAAIo"]
[Thu Apr 02 19:39:02.474793 2026] [:error] [pid 59305:tid 59325] [client 20.215.208.99:14346] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "ac5VVqr2tV4rDwKFxKd_-QAAANA"]
[Thu Apr 02 19:39:02.984850 2026] [:error] [pid 23927:tid 23947] [client 20.215.208.99:44875] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "ac5VVksZwqCndhl9uKCoAgAAAZI"]
[Thu Apr 02 19:39:03.495824 2026] [:error] [pid 59201:tid 59286] [client 20.215.208.99:14375] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "ac5VV8AC0Tw8eL6gzZ4XtgAAAJM"]
[Thu Apr 02 19:39:04.013716 2026] [:error] [pid 59305:tid 59320] [client 20.215.208.99:56353] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "ac5VWKr2tV4rDwKFxKd__wAAAMs"]
[Thu Apr 02 19:39:04.562790 2026] [:error] [pid 59201:tid 59267] [client 20.215.208.99:28779] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/byrgo.php"] [unique_id "ac5VWMAC0Tw8eL6gzZ4XugAAAIA"]
[Thu Apr 02 19:39:05.094274 2026] [:error] [pid 59200:tid 59241] [client 20.215.208.99:22123] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/byrgo.php"] [unique_id "ac5VWbfP26txrdLs3EpxOAAAAEE"]
[Thu Apr 02 19:39:05.626181 2026] [:error] [pid 59201:tid 59285] [client 20.215.208.99:3446] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/byrgo.php"] [unique_id "ac5VWcAC0Tw8eL6gzZ4XvAAAAJI"]
[Thu Apr 02 19:39:06.138365 2026] [:error] [pid 59194:tid 59231] [client 20.215.208.99:30649] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/byrgo.php"] [unique_id "ac5VWhMpAeV11hcQehxB8gAAABI"]
[Thu Apr 02 19:39:06.648660 2026] [:error] [pid 29467:tid 29476] [client 20.215.208.99:30634] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-class-20260318122951.php"] [unique_id "ac5VWr4VUBFCJAq-WOlxogAAAQY"]
[Thu Apr 02 19:39:07.171862 2026] [:error] [pid 37543:tid 37569] [client 20.215.208.99:56348] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-class-20260318122951.php"] [unique_id "ac5VW3hdk2bEYJCvILbYDQAAAVg"]
[Thu Apr 02 19:39:07.687200 2026] [:error] [pid 37543:tid 37545] [client 20.215.208.99:18035] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-class-20260318122951.php"] [unique_id "ac5VW3hdk2bEYJCvILbYEQAAAUA"]
[Thu Apr 02 19:39:08.218894 2026] [:error] [pid 59305:tid 59323] [client 20.215.208.99:56331] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-class-20260318122951.php"] [unique_id "ac5VXKr2tV4rDwKFxKeACAAAAM4"]
[Thu Apr 02 19:39:08.737436 2026] [:error] [pid 29467:tid 29475] [client 20.215.208.99:54556] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lupo.php"] [unique_id "ac5VXL4VUBFCJAq-WOlxrgAAAQU"]
[Thu Apr 02 19:39:09.252867 2026] [:error] [pid 59194:tid 59217] [client 20.215.208.99:18024] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lupo.php"] [unique_id "ac5VXRMpAeV11hcQehxB9AAAAAQ"]
[Thu Apr 02 19:39:09.762445 2026] [:error] [pid 37543:tid 37560] [client 20.215.208.99:41931] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lupo.php"] [unique_id "ac5VXXhdk2bEYJCvILbYEgAAAU8"]
[Thu Apr 02 19:39:10.282182 2026] [:error] [pid 23927:tid 23944] [client 20.215.208.99:3399] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lupo.php"] [unique_id "ac5VXksZwqCndhl9uKCoCwAAAY8"]
[Thu Apr 02 19:39:10.802485 2026] [:error] [pid 29467:tid 29491] [client 20.215.208.99:30646] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-moonka.php"] [unique_id "ac5VXr4VUBFCJAq-WOlxtgAAARU"]
[Thu Apr 02 19:39:11.354980 2026] [:error] [pid 54384:tid 54406] [client 20.215.208.99:54586] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-moonka.php"] [unique_id "ac5VX9WWpaby3TVN7McKMAAAAdQ"]
[Thu Apr 02 19:39:11.875326 2026] [:error] [pid 59200:tid 59245] [client 20.215.208.99:56378] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-moonka.php"] [unique_id "ac5VX7fP26txrdLs3EpxPQAAAEU"]
[Thu Apr 02 19:39:12.415039 2026] [:error] [pid 29467:tid 29490] [client 20.215.208.99:22035] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-moonka.php"] [unique_id "ac5VYL4VUBFCJAq-WOlxuwAAARQ"]
[Thu Apr 02 19:39:13.127102 2026] [:error] [pid 59194:tid 59218] [client 20.215.208.99:3596] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zoper1.php"] [unique_id "ac5VYRMpAeV11hcQehxB-QAAAAU"]
[Thu Apr 02 19:39:13.832762 2026] [:error] [pid 29467:tid 29470] [client 20.215.208.99:56330] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zoper1.php"] [unique_id "ac5VYb4VUBFCJAq-WOlxwAAAAQA"]
[Thu Apr 02 19:39:14.379477 2026] [:error] [pid 59200:tid 59262] [client 20.215.208.99:18019] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zoper1.php"] [unique_id "ac5VYrfP26txrdLs3EpxQAAAAFY"]
[Thu Apr 02 19:39:14.897985 2026] [:error] [pid 59201:tid 59290] [client 20.215.208.99:54588] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zoper1.php"] [unique_id "ac5VYsAC0Tw8eL6gzZ4XyQAAAJc"]
[Thu Apr 02 19:39:15.408511 2026] [:error] [pid 29467:tid 29477] [client 20.215.208.99:44868] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ta0ol.php"] [unique_id "ac5VY74VUBFCJAq-WOlxzAAAAQc"]
[Thu Apr 02 19:39:15.927752 2026] [:error] [pid 29467:tid 29471] [client 20.215.208.99:54569] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ta0ol.php"] [unique_id "ac5VY74VUBFCJAq-WOlxzgAAAQE"]
[Thu Apr 02 19:39:16.454265 2026] [:error] [pid 59200:tid 59241] [client 20.215.208.99:24667] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ta0ol.php"] [unique_id "ac5VZLfP26txrdLs3EpxQgAAAEE"]
[Thu Apr 02 19:39:16.963395 2026] [:error] [pid 54384:tid 54410] [client 20.215.208.99:54573] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ta0ol.php"] [unique_id "ac5VZNWWpaby3TVN7McKOgAAAdg"]
[Thu Apr 02 19:39:17.477770 2026] [:error] [pid 29467:tid 29487] [client 20.215.208.99:4048] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/irpl4xz4fmlzm4tlvvu4h1mCdefault.php"] [unique_id "ac5VZb4VUBFCJAq-WOlx2gAAARE"]
[Thu Apr 02 19:39:17.997066 2026] [:error] [pid 54384:tid 54390] [client 20.215.208.99:18008] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/irpl4xz4fmlzm4tlvvu4h1mCdefault.php"] [unique_id "ac5VZdWWpaby3TVN7McKPAAAAcQ"]
[Thu Apr 02 19:39:18.532137 2026] [:error] [pid 54384:tid 54407] [client 20.215.208.99:22083] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/irpl4xz4fmlzm4tlvvu4h1mCdefault.php"] [unique_id "ac5VZtWWpaby3TVN7McKPgAAAdU"]
[Thu Apr 02 19:39:19.061126 2026] [:error] [pid 23927:tid 23944] [client 20.215.208.99:23149] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/irpl4xz4fmlzm4tlvvu4h1mCdefault.php"] [unique_id "ac5VZ0sZwqCndhl9uKCoFwAAAY8"]
[Thu Apr 02 19:39:19.671153 2026] [:error] [pid 23927:tid 23952] [client 20.215.208.99:3585] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wmore1.php"] [unique_id "ac5VZ0sZwqCndhl9uKCoGgAAAZc"]
[Thu Apr 02 19:39:20.187602 2026] [:error] [pid 59201:tid 59270] [client 20.215.208.99:3646] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wmore1.php"] [unique_id "ac5VaMAC0Tw8eL6gzZ4X1AAAAIM"]
[Thu Apr 02 19:39:20.716976 2026] [:error] [pid 23927:tid 23948] [client 20.215.208.99:51619] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wmore1.php"] [unique_id "ac5VaEsZwqCndhl9uKCoIgAAAZM"]
[Thu Apr 02 19:39:21.241611 2026] [:error] [pid 59194:tid 59224] [client 20.215.208.99:3592] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wmore1.php"] [unique_id "ac5VaRMpAeV11hcQehxB_QAAAAs"]
[Thu Apr 02 19:39:21.767900 2026] [:error] [pid 29467:tid 29485] [client 20.215.208.99:56334] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tx79.php"] [unique_id "ac5Vab4VUBFCJAq-WOlx3wAAAQ8"]
[Thu Apr 02 19:39:22.334307 2026] [:error] [pid 29467:tid 29490] [client 20.215.208.99:3626] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tx79.php"] [unique_id "ac5Var4VUBFCJAq-WOlx4wAAARQ"]
[Thu Apr 02 19:39:22.848061 2026] [:error] [pid 37543:tid 37564] [client 20.215.208.99:22037] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tx79.php"] [unique_id "ac5Vanhdk2bEYJCvILbYKQAAAVM"]
[Thu Apr 02 19:39:23.360746 2026] [:error] [pid 37543:tid 37568] [client 20.215.208.99:4080] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tx79.php"] [unique_id "ac5Va3hdk2bEYJCvILbYKgAAAVc"]
[Thu Apr 02 19:39:23.886738 2026] [:error] [pid 37543:tid 37552] [client 20.215.208.99:22130] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "ac5Va3hdk2bEYJCvILbYKwAAAUc"]
[Thu Apr 02 19:39:24.436412 2026] [:error] [pid 37543:tid 37569] [client 20.215.208.99:56332] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "ac5VbHhdk2bEYJCvILbYLAAAAVg"]
[Thu Apr 02 19:39:24.997182 2026] [:error] [pid 37543:tid 37555] [client 20.215.208.99:51635] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "ac5VbHhdk2bEYJCvILbYMQAAAUo"]
[Thu Apr 02 19:39:25.514722 2026] [:error] [pid 59194:tid 59215] [client 20.215.208.99:40415] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "ac5VbRMpAeV11hcQehxCAAAAAAI"]
[Thu Apr 02 19:39:26.058673 2026] [:error] [pid 54384:tid 54403] [client 20.215.208.99:26152] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/less.php"] [unique_id "ac5VbtWWpaby3TVN7McKSAAAAdE"]
[Thu Apr 02 19:39:26.613110 2026] [:error] [pid 37543:tid 37547] [client 20.215.208.99:3988] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/less.php"] [unique_id "ac5Vbnhdk2bEYJCvILbYOQAAAUI"]
[Thu Apr 02 19:39:27.154533 2026] [:error] [pid 29467:tid 29474] [client 20.215.208.99:51646] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/less.php"] [unique_id "ac5Vb74VUBFCJAq-WOlx7wAAAQQ"]
[Thu Apr 02 19:39:27.710660 2026] [:error] [pid 54384:tid 54407] [client 20.215.208.99:31233] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/less.php"] [unique_id "ac5Vb9WWpaby3TVN7McKSgAAAdU"]
[Thu Apr 02 19:39:28.244879 2026] [:error] [pid 29467:tid 29470] [client 20.215.208.99:48601] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/t2gorhwasq4vioshtatw5eCdefault.php"] [unique_id "ac5VcL4VUBFCJAq-WOlx9QAAAQA"]
[Thu Apr 02 19:39:28.965197 2026] [:error] [pid 29467:tid 29486] [client 20.215.208.99:21083] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/t2gorhwasq4vioshtatw5eCdefault.php"] [unique_id "ac5VcL4VUBFCJAq-WOlx_gAAARA"]
[Thu Apr 02 19:39:29.480907 2026] [:error] [pid 29467:tid 29481] [client 20.215.208.99:40412] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/t2gorhwasq4vioshtatw5eCdefault.php"] [unique_id "ac5Vcb4VUBFCJAq-WOlyAQAAAQs"]
[Thu Apr 02 19:39:29.995731 2026] [:error] [pid 29467:tid 29474] [client 20.215.208.99:19572] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/t2gorhwasq4vioshtatw5eCdefault.php"] [unique_id "ac5Vcb4VUBFCJAq-WOlyBQAAAQQ"]
[Thu Apr 02 19:39:30.520205 2026] [:error] [pid 54384:tid 54386] [client 20.215.208.99:31253] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/new3.php"] [unique_id "ac5VctWWpaby3TVN7McKSwAAAcA"]
[Thu Apr 02 19:39:31.044857 2026] [:error] [pid 23927:tid 23947] [client 20.215.208.99:28180] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/new3.php"] [unique_id "ac5Vc0sZwqCndhl9uKCoMwAAAZI"]
[Thu Apr 02 19:39:31.557021 2026] [:error] [pid 29467:tid 29470] [client 20.215.208.99:21108] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/new3.php"] [unique_id "ac5Vc74VUBFCJAq-WOlyDwAAAQA"]
[Thu Apr 02 19:39:32.108928 2026] [proxy_fcgi:error] [pid 59201:tid 59274] [client 20.215.208.99:59736] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 19:39:32.370090 2026] [proxy_fcgi:error] [pid 59201:tid 59282] [client 20.215.208.99:59736] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 19:39:32.628927 2026] [proxy_fcgi:error] [pid 59201:tid 59285] [client 20.215.208.99:59736] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 19:39:32.887541 2026] [proxy_fcgi:error] [pid 59201:tid 59273] [client 20.215.208.99:59736] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 19:39:33.152170 2026] [proxy_fcgi:error] [pid 59201:tid 59283] [client 20.215.208.99:59736] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 19:39:33.413227 2026] [proxy_fcgi:error] [pid 59201:tid 59276] [client 20.215.208.99:59736] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 19:39:33.672972 2026] [proxy_fcgi:error] [pid 59201:tid 59267] [client 20.215.208.99:59736] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 19:39:33.937420 2026] [proxy_fcgi:error] [pid 59201:tid 59269] [client 20.215.208.99:59736] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 19:39:34.196465 2026] [proxy_fcgi:error] [pid 59201:tid 59290] [client 20.215.208.99:59736] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 19:39:34.455121 2026] [proxy_fcgi:error] [pid 59201:tid 59287] [client 20.215.208.99:59736] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 19:39:34.715353 2026] [proxy_fcgi:error] [pid 59201:tid 59271] [client 20.215.208.99:59736] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 19:39:34.970294 2026] [:error] [pid 59201:tid 59278] [client 20.215.208.99:59736] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ac5VdsAC0Tw8eL6gzZ4X6AAAAIs"]
[Thu Apr 02 19:39:35.493173 2026] [:error] [pid 29467:tid 29482] [client 20.215.208.99:48599] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ac5Vd74VUBFCJAq-WOlyJwAAAQw"]
[Thu Apr 02 19:39:36.007273 2026] [:error] [pid 54384:tid 54389] [client 20.215.208.99:25605] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ac5VeNWWpaby3TVN7McKUQAAAcM"]
[Thu Apr 02 19:39:36.522773 2026] [:error] [pid 29467:tid 29474] [client 20.215.208.99:58973] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ac5VeL4VUBFCJAq-WOlyLQAAAQQ"]
[Thu Apr 02 19:39:37.039627 2026] [:error] [pid 29467:tid 29494] [client 20.215.208.99:25635] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sts.php"] [unique_id "ac5Veb4VUBFCJAq-WOlyLwAAARg"]
[Thu Apr 02 19:39:37.590854 2026] [:error] [pid 37543:tid 37554] [client 20.215.208.99:19528] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sts.php"] [unique_id "ac5VeXhdk2bEYJCvILbYPwAAAUk"]
[Thu Apr 02 19:39:38.103735 2026] [:error] [pid 59305:tid 59318] [client 20.215.208.99:58458] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sts.php"] [unique_id "ac5Veqr2tV4rDwKFxKeAFQAAAMk"]
[Thu Apr 02 19:39:38.653960 2026] [:error] [pid 29467:tid 29490] [client 20.215.208.99:29548] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sts.php"] [unique_id "ac5Ver4VUBFCJAq-WOlyNQAAARQ"]
[Thu Apr 02 19:39:39.179373 2026] [:error] [pid 54384:tid 54410] [client 20.215.208.99:3759] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hbvdoz7cy9k6xge9zhuvkvitCdefault.php"] [unique_id "ac5Ve9WWpaby3TVN7McKWAAAAdg"]
[Thu Apr 02 19:39:39.735455 2026] [:error] [pid 59305:tid 59330] [client 20.215.208.99:33797] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hbvdoz7cy9k6xge9zhuvkvitCdefault.php"] [unique_id "ac5Ve6r2tV4rDwKFxKeAGgAAANU"]
[Thu Apr 02 19:39:40.251739 2026] [:error] [pid 29467:tid 29485] [client 20.215.208.99:29552] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hbvdoz7cy9k6xge9zhuvkvitCdefault.php"] [unique_id "ac5VfL4VUBFCJAq-WOlyPgAAAQ8"]
[Thu Apr 02 19:39:40.763670 2026] [:error] [pid 29467:tid 29491] [client 20.215.208.99:26641] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hbvdoz7cy9k6xge9zhuvkvitCdefault.php"] [unique_id "ac5VfL4VUBFCJAq-WOlyRAAAARU"]
[Thu Apr 02 19:39:41.294098 2026] [:error] [pid 23927:tid 23942] [client 20.215.208.99:58478] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wziar1.php"] [unique_id "ac5VfUsZwqCndhl9uKCoNgAAAY0"]
[Thu Apr 02 19:39:41.808464 2026] [:error] [pid 37543:tid 37563] [client 20.215.208.99:28229] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wziar1.php"] [unique_id "ac5VfXhdk2bEYJCvILbYQwAAAVI"]
[Thu Apr 02 19:39:42.322950 2026] [:error] [pid 23927:tid 23936] [client 20.215.208.99:33802] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wziar1.php"] [unique_id "ac5VfksZwqCndhl9uKCoOAAAAYc"]
[Thu Apr 02 19:39:42.841299 2026] [:error] [pid 59201:tid 59289] [client 20.215.208.99:29537] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wziar1.php"] [unique_id "ac5VfsAC0Tw8eL6gzZ4X7gAAAJY"]
[Thu Apr 02 19:39:43.362848 2026] [:error] [pid 59305:tid 59309] [client 20.215.208.99:26646] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fsgdjkl.php"] [unique_id "ac5Vf6r2tV4rDwKFxKeAHQAAAMA"]
[Thu Apr 02 19:39:43.891642 2026] [:error] [pid 23927:tid 23951] [client 20.215.208.99:57088] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fsgdjkl.php"] [unique_id "ac5Vf0sZwqCndhl9uKCoQAAAAZY"]
[Thu Apr 02 19:39:44.407026 2026] [:error] [pid 23927:tid 23945] [client 20.215.208.99:58448] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fsgdjkl.php"] [unique_id "ac5VgEsZwqCndhl9uKCoRAAAAZA"]
[Thu Apr 02 19:39:44.924117 2026] [:error] [pid 59194:tid 59236] [client 20.215.208.99:26657] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fsgdjkl.php"] [unique_id "ac5VgBMpAeV11hcQehxCCwAAABc"]
[Thu Apr 02 19:39:45.465170 2026] [:error] [pid 59305:tid 59324] [client 20.215.208.99:21092] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/exhds0ucw0ju9vjgasxqCdefault.php"] [unique_id "ac5Vgar2tV4rDwKFxKeAIwAAAM8"]
[Thu Apr 02 19:39:45.990037 2026] [:error] [pid 59305:tid 59310] [client 20.215.208.99:58488] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/exhds0ucw0ju9vjgasxqCdefault.php"] [unique_id "ac5Vgar2tV4rDwKFxKeAJQAAAME"]
[Thu Apr 02 19:39:46.524838 2026] [:error] [pid 59194:tid 59231] [client 20.215.208.99:33795] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/exhds0ucw0ju9vjgasxqCdefault.php"] [unique_id "ac5VghMpAeV11hcQehxCDQAAABI"]
[Thu Apr 02 19:39:47.057814 2026] [:error] [pid 54384:tid 54403] [client 20.215.208.99:29566] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/exhds0ucw0ju9vjgasxqCdefault.php"] [unique_id "ac5Vg9WWpaby3TVN7McKYwAAAdE"]
[Thu Apr 02 19:39:47.571964 2026] [:error] [pid 59201:tid 59267] [client 20.215.208.99:59712] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/CDX2.php"] [unique_id "ac5Vg8AC0Tw8eL6gzZ4X8QAAAIA"]
[Thu Apr 02 19:39:48.092720 2026] [:error] [pid 59194:tid 59216] [client 20.215.208.99:55829] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/CDX2.php"] [unique_id "ac5VhBMpAeV11hcQehxCDwAAAAM"]
[Thu Apr 02 19:39:48.630063 2026] [:error] [pid 23927:tid 23939] [client 20.215.208.99:28234] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/CDX2.php"] [unique_id "ac5VhEsZwqCndhl9uKCoWQAAAYo"]
[Thu Apr 02 19:39:49.239348 2026] [:error] [pid 59194:tid 59221] [client 20.215.208.99:64884] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/CDX2.php"] [unique_id "ac5VhRMpAeV11hcQehxCEwAAAAg"]
[Thu Apr 02 19:39:49.904904 2026] [:error] [pid 29467:tid 29476] [client 20.215.208.99:55862] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a8.php"] [unique_id "ac5Vhb4VUBFCJAq-WOlySwAAAQY"]
[Thu Apr 02 19:39:50.578358 2026] [:error] [pid 29467:tid 29475] [client 20.215.208.99:21063] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a8.php"] [unique_id "ac5Vhr4VUBFCJAq-WOlyUAAAAQU"]
[Thu Apr 02 19:39:51.113383 2026] [:error] [pid 59201:tid 59277] [client 20.215.208.99:3751] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a8.php"] [unique_id "ac5Vh8AC0Tw8eL6gzZ4X9gAAAIo"]
[Thu Apr 02 19:39:51.637692 2026] [:error] [pid 37543:tid 37559] [client 20.215.208.99:57147] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a8.php"] [unique_id "ac5Vh3hdk2bEYJCvILbYSgAAAU4"]
[Thu Apr 02 19:39:52.175366 2026] [:error] [pid 59305:tid 59318] [client 20.215.208.99:26634] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "ac5ViKr2tV4rDwKFxKeALwAAAMk"]
[Thu Apr 02 19:39:52.716309 2026] [:error] [pid 59200:tid 59255] [client 20.215.208.99:55856] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "ac5ViLfP26txrdLs3EpxZAAAAE8"]
[Thu Apr 02 19:39:53.227168 2026] [:error] [pid 37543:tid 37569] [client 20.215.208.99:59716] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "ac5ViXhdk2bEYJCvILbYUgAAAVg"]
[Thu Apr 02 19:39:53.748803 2026] [:error] [pid 59194:tid 59231] [client 20.215.208.99:24117] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "ac5ViRMpAeV11hcQehxCGwAAABI"]
[Thu Apr 02 19:39:54.263654 2026] [:error] [pid 59305:tid 59316] [client 20.215.208.99:64876] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ortasekerli1.php"] [unique_id "ac5Viqr2tV4rDwKFxKeAMgAAAMc"]
[Thu Apr 02 19:39:54.774418 2026] [:error] [pid 54384:tid 54395] [client 20.215.208.99:29551] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ortasekerli1.php"] [unique_id "ac5VitWWpaby3TVN7McKbAAAAck"]
[Thu Apr 02 19:39:55.293769 2026] [:error] [pid 59201:tid 59290] [client 20.215.208.99:33839] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ortasekerli1.php"] [unique_id "ac5Vi8AC0Tw8eL6gzZ4X_gAAAJc"]
[Thu Apr 02 19:39:55.822328 2026] [:error] [pid 29467:tid 29482] [client 20.215.208.99:55851] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ortasekerli1.php"] [unique_id "ac5Vi74VUBFCJAq-WOlyVAAAAQw"]
[Thu Apr 02 19:39:56.334287 2026] [:error] [pid 29467:tid 29494] [client 20.215.208.99:64861] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a7.php"] [unique_id "ac5VjL4VUBFCJAq-WOlyVgAAARg"]
[Thu Apr 02 19:39:56.846627 2026] [:error] [pid 59305:tid 59330] [client 20.215.208.99:60962] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a7.php"] [unique_id "ac5VjKr2tV4rDwKFxKeAMwAAANU"]
[Thu Apr 02 19:39:57.375415 2026] [:error] [pid 29467:tid 29488] [client 20.215.208.99:3726] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a7.php"] [unique_id "ac5Vjb4VUBFCJAq-WOlyXwAAARI"]
[Thu Apr 02 19:39:57.923081 2026] [:error] [pid 29467:tid 29482] [client 20.215.208.99:58495] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a7.php"] [unique_id "ac5Vjb4VUBFCJAq-WOlyYgAAAQw"]
[Thu Apr 02 19:39:58.457807 2026] [:error] [pid 29467:tid 29480] [client 20.215.208.99:58433] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/index-20260330022921.php"] [unique_id "ac5Vjr4VUBFCJAq-WOlyaAAAAQo"]
[Thu Apr 02 19:39:59.003039 2026] [:error] [pid 29467:tid 29477] [client 20.215.208.99:29509] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/index-20260330022921.php"] [unique_id "ac5Vj74VUBFCJAq-WOlybwAAAQc"]
[Thu Apr 02 19:39:59.604212 2026] [:error] [pid 29467:tid 29470] [client 20.215.208.99:19569] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/index-20260330022921.php"] [unique_id "ac5Vj74VUBFCJAq-WOlycwAAAQA"]
[Thu Apr 02 19:40:00.126446 2026] [:error] [pid 29467:tid 29489] [client 20.215.208.99:54596] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/index-20260330022921.php"] [unique_id "ac5VkL4VUBFCJAq-WOlydwAAARM"]
[Thu Apr 02 19:40:00.759802 2026] [:error] [pid 29467:tid 29477] [client 20.215.208.99:35159] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Geforce.php"] [unique_id "ac5VkL4VUBFCJAq-WOlyegAAAQc"]
[Thu Apr 02 19:40:01.283949 2026] [:error] [pid 59201:tid 59287] [client 20.215.208.99:58459] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Geforce.php"] [unique_id "ac5VkcAC0Tw8eL6gzZ4YCAAAAJQ"]
[Thu Apr 02 19:40:01.813500 2026] [:error] [pid 23927:tid 23953] [client 20.215.208.99:55837] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Geforce.php"] [unique_id "ac5VkUsZwqCndhl9uKCobwAAAZg"]
[Thu Apr 02 19:40:02.323556 2026] [:error] [pid 29467:tid 29478] [client 20.215.208.99:40391] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Geforce.php"] [unique_id "ac5Vkr4VUBFCJAq-WOlyhAAAAQg"]
[Thu Apr 02 19:40:02.928267 2026] [:error] [pid 59305:tid 59322] [client 20.215.208.99:3773] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/press.php"] [unique_id "ac5Vkqr2tV4rDwKFxKeAOgAAAM0"]
[Thu Apr 02 19:40:03.518710 2026] [:error] [pid 37543:tid 37558] [client 20.215.208.99:35193] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/press.php"] [unique_id "ac5Vk3hdk2bEYJCvILbYWwAAAU0"]
[Thu Apr 02 19:40:04.076938 2026] [:error] [pid 29467:tid 29474] [client 20.215.208.99:3731] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/press.php"] [unique_id "ac5VlL4VUBFCJAq-WOlykAAAAQQ"]
[Thu Apr 02 19:40:04.705878 2026] [:error] [pid 54384:tid 54396] [client 20.215.208.99:25649] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/press.php"] [unique_id "ac5VlNWWpaby3TVN7McKdAAAAco"]
[Thu Apr 02 19:40:05.236969 2026] [:error] [pid 54384:tid 54410] [client 20.215.208.99:24097] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-ccv.php"] [unique_id "ac5VldWWpaby3TVN7McKdgAAAdg"]
[Thu Apr 02 19:40:05.751258 2026] [:error] [pid 59194:tid 59215] [client 20.215.208.99:33825] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-ccv.php"] [unique_id "ac5VlRMpAeV11hcQehxCIgAAAAI"]
[Thu Apr 02 19:40:06.280771 2026] [:error] [pid 29467:tid 29472] [client 20.215.208.99:35164] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-ccv.php"] [unique_id "ac5Vlr4VUBFCJAq-WOlynQAAAQI"]
[Thu Apr 02 19:40:06.807453 2026] [:error] [pid 37543:tid 37550] [client 20.215.208.99:3547] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-ccv.php"] [unique_id "ac5Vlnhdk2bEYJCvILbYXQAAAUU"]
[Thu Apr 02 19:40:07.318869 2026] [:error] [pid 59305:tid 59326] [client 20.215.208.99:26631] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/luyuc.php"] [unique_id "ac5Vl6r2tV4rDwKFxKeAPQAAANE"]
[Thu Apr 02 19:40:07.833011 2026] [:error] [pid 59305:tid 59331] [client 20.215.208.99:26660] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/luyuc.php"] [unique_id "ac5Vl6r2tV4rDwKFxKeAPwAAANY"]
[Thu Apr 02 19:40:08.355761 2026] [:error] [pid 23927:tid 23932] [client 20.215.208.99:35172] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/luyuc.php"] [unique_id "ac5VmEsZwqCndhl9uKCoeQAAAYM"]
[Thu Apr 02 19:40:08.882958 2026] [:error] [pid 59305:tid 59328] [client 20.215.208.99:64846] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/luyuc.php"] [unique_id "ac5VmKr2tV4rDwKFxKeARQAAANM"]
[Thu Apr 02 19:40:09.394753 2026] [:error] [pid 59305:tid 59332] [client 20.215.208.99:61412] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bless.php"] [unique_id "ac5Vmar2tV4rDwKFxKeARgAAANc"]
[Thu Apr 02 19:40:09.912753 2026] [:error] [pid 29467:tid 29482] [client 20.215.208.99:3760] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bless.php"] [unique_id "ac5Vmb4VUBFCJAq-WOlysQAAAQw"]
[Thu Apr 02 19:40:10.489252 2026] [:error] [pid 23927:tid 23942] [client 20.215.208.99:60951] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bless.php"] [unique_id "ac5VmksZwqCndhl9uKCofQAAAY0"]
[Thu Apr 02 19:40:11.007699 2026] [:error] [pid 37543:tid 37569] [client 20.215.208.99:60940] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bless.php"] [unique_id "ac5Vm3hdk2bEYJCvILbYYwAAAVg"]
[Thu Apr 02 19:40:11.517706 2026] [:error] [pid 29467:tid 29481] [client 20.215.208.99:33806] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/htto.php"] [unique_id "ac5Vm74VUBFCJAq-WOlyvgAAAQs"]
[Thu Apr 02 19:40:12.030909 2026] [:error] [pid 29467:tid 29474] [client 20.215.208.99:35138] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/htto.php"] [unique_id "ac5VnL4VUBFCJAq-WOlywwAAAQQ"]
[Thu Apr 02 19:40:12.550022 2026] [:error] [pid 54384:tid 54407] [client 20.215.208.99:3890] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/htto.php"] [unique_id "ac5VnNWWpaby3TVN7McKegAAAdU"]
[Thu Apr 02 19:40:13.062194 2026] [:error] [pid 59194:tid 59228] [client 20.215.208.99:24127] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/htto.php"] [unique_id "ac5VnRMpAeV11hcQehxCJwAAAA8"]
[Thu Apr 02 23:40:25.455874 2026] [proxy_fcgi:error] [pid 54384:tid 54407] [client 20.63.60.10:18402] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 23:40:25.457054 2026] [proxy_fcgi:error] [pid 54384:tid 54400] [client 20.63.60.10:18419] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 23:40:59.081906 2026] [proxy_fcgi:error] [pid 59200:tid 59248] [client 20.63.60.10:8141] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 23:41:15.782024 2026] [proxy_fcgi:error] [pid 59305:tid 59328] [client 20.63.60.10:30593] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 23:41:27.279291 2026] [:error] [pid 37543:tid 37566] [client 20.63.60.10:32710] [client 20.63.60.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xozx.php"] [unique_id "ac6OJ3hdk2bEYJCvILYXTAAAAVU"]
[Thu Apr 02 23:41:27.279291 2026] [:error] [pid 59194:tid 59226] [client 20.63.60.10:32751] [client 20.63.60.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xozx.php"] [unique_id "ac6OJxMpAeV11hcQehxoqgAAAA0"]
[Thu Apr 02 23:41:27.688712 2026] [:error] [pid 23927:tid 23932] [client 20.63.60.10:32747] [client 20.63.60.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xozx.php"] [unique_id "ac6OJ0sZwqCndhl9uKAGUQAAAYM"]
[Thu Apr 02 23:41:27.690689 2026] [:error] [pid 23927:tid 23953] [client 20.63.60.10:32731] [client 20.63.60.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xozx.php"] [unique_id "ac6OJ0sZwqCndhl9uKAGUgAAAZg"]
[Thu Apr 02 23:41:28.100663 2026] [:error] [pid 54384:tid 54408] [client 20.63.60.10:32767] [client 20.63.60.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xozx.php"] [unique_id "ac6OKNWWpaby3TVN7MdT_AAAAdY"]
[Thu Apr 02 23:41:28.100888 2026] [:error] [pid 54384:tid 54407] [client 20.63.60.10:32757] [client 20.63.60.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xozx.php"] [unique_id "ac6OKNWWpaby3TVN7MdT_QAAAdU"]
[Thu Apr 02 23:41:28.512144 2026] [:error] [pid 54384:tid 54388] [client 20.63.60.10:32579] [client 20.63.60.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xozx.php"] [unique_id "ac6OKNWWpaby3TVN7MdT_wAAAcI"]
[Thu Apr 02 23:41:28.512642 2026] [:error] [pid 54384:tid 54410] [client 20.63.60.10:32658] [client 20.63.60.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xozx.php"] [unique_id "ac6OKNWWpaby3TVN7MdUAAAAAdg"]
[Fri Apr 03 00:36:57.039860 2026] [proxy_fcgi:error] [pid 25470:tid 25487] [client 40.89.133.150:41342] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 00:36:57.278858 2026] [proxy_fcgi:error] [pid 25470:tid 25482] [client 40.89.133.150:41342] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 00:36:57.633620 2026] [proxy_fcgi:error] [pid 25470:tid 25484] [client 40.89.133.150:41342] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 00:36:57.876226 2026] [proxy_fcgi:error] [pid 25470:tid 25496] [client 40.89.133.150:41342] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 00:36:58.141509 2026] [proxy_fcgi:error] [pid 25470:tid 25480] [client 40.89.133.150:41342] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 00:36:58.400662 2026] [proxy_fcgi:error] [pid 25470:tid 25486] [client 40.89.133.150:41342] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 00:36:59.018931 2026] [proxy_fcgi:error] [pid 25470:tid 25475] [client 40.89.133.150:41342] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 00:36:59.391736 2026] [proxy_fcgi:error] [pid 25470:tid 25483] [client 40.89.133.150:41342] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 00:36:59.630290 2026] [proxy_fcgi:error] [pid 25470:tid 25472] [client 40.89.133.150:41342] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 00:36:59.866639 2026] [:error] [pid 25470:tid 25492] [client 40.89.133.150:41342] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/uploads/index.php"] [unique_id "ac6bK3hROcck6_9HYyjXKAAAANQ"]
[Fri Apr 03 00:37:00.361626 2026] [:error] [pid 25470:tid 25478] [client 40.89.133.150:40057] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/uploads/index.php"] [unique_id "ac6bLHhROcck6_9HYyjXKgAAAMY"]
[Fri Apr 03 00:37:00.959597 2026] [:error] [pid 25035:tid 25444] [client 40.89.133.150:41320] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/uploads/index.php"] [unique_id "ac6bLBhR292toNOkLqGQXgAAAII"]
[Fri Apr 03 00:37:01.459926 2026] [:error] [pid 25018:tid 25424] [client 40.89.133.150:41298] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/uploads/index.php"] [unique_id "ac6bLXupR6lXnAUzFGrZlgAAAEs"]
[Fri Apr 03 00:37:01.947609 2026] [:error] [pid 25018:tid 25415] [client 40.89.133.150:40033] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/n.php"] [unique_id "ac6bLXupR6lXnAUzFGrZlwAAAEM"]
[Fri Apr 03 00:37:02.420308 2026] [:error] [pid 25470:tid 25474] [client 40.89.133.150:41286] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/n.php"] [unique_id "ac6bLnhROcck6_9HYyjXMgAAAMI"]
[Fri Apr 03 00:37:03.118876 2026] [:error] [pid 25470:tid 25482] [client 40.89.133.150:40009] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/n.php"] [unique_id "ac6bL3hROcck6_9HYyjXNgAAAMo"]
[Fri Apr 03 00:37:03.592611 2026] [:error] [pid 25010:tid 25348] [client 40.89.133.150:41293] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/n.php"] [unique_id "ac6bL4_KcjFQF5TuqTV5YQAAAAE"]
[Fri Apr 03 00:37:04.079740 2026] [:error] [pid 25470:tid 25480] [client 40.89.133.150:40041] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/abc.php"] [unique_id "ac6bMHhROcck6_9HYyjXOgAAAMg"]
[Fri Apr 03 00:37:04.633132 2026] [:error] [pid 25010:tid 25369] [client 40.89.133.150:41217] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/abc.php"] [unique_id "ac6bMI_KcjFQF5TuqTV5ZQAAABQ"]
[Fri Apr 03 00:37:05.163028 2026] [:error] [pid 25018:tid 25418] [client 40.89.133.150:41276] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/abc.php"] [unique_id "ac6bMXupR6lXnAUzFGrZmQAAAEU"]
[Fri Apr 03 00:37:05.638624 2026] [:error] [pid 25018:tid 25435] [client 40.89.133.150:40062] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/abc.php"] [unique_id "ac6bMXupR6lXnAUzFGrZmwAAAFY"]
[Fri Apr 03 00:37:06.133055 2026] [:error] [pid 25018:tid 25434] [client 40.89.133.150:41340] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/new4.php"] [unique_id "ac6bMnupR6lXnAUzFGrZnQAAAFU"]
[Fri Apr 03 00:37:06.610425 2026] [:error] [pid 25010:tid 25365] [client 40.89.133.150:42190] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/new4.php"] [unique_id "ac6bMo_KcjFQF5TuqTV5bAAAABA"]
[Fri Apr 03 00:37:07.100541 2026] [:error] [pid 25035:tid 25464] [client 40.89.133.150:41334] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/new4.php"] [unique_id "ac6bMxhR292toNOkLqGQbgAAAJY"]
[Fri Apr 03 00:37:07.635450 2026] [:error] [pid 25010:tid 25366] [client 40.89.133.150:41222] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/new4.php"] [unique_id "ac6bM4_KcjFQF5TuqTV5cQAAABE"]
[Fri Apr 03 00:37:08.383049 2026] [:error] [pid 25010:tid 25351] [client 40.89.133.150:42170] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/r4f_1.php"] [unique_id "ac6bNI_KcjFQF5TuqTV5dAAAAAM"]
[Fri Apr 03 00:37:08.863969 2026] [:error] [pid 25018:tid 25424] [client 40.89.133.150:42114] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/r4f_1.php"] [unique_id "ac6bNHupR6lXnAUzFGrZqAAAAEs"]
[Fri Apr 03 00:37:09.371618 2026] [:error] [pid 25470:tid 25491] [client 40.89.133.150:42160] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/r4f_1.php"] [unique_id "ac6bNXhROcck6_9HYyjXQAAAANM"]
[Fri Apr 03 00:37:09.845388 2026] [:error] [pid 25010:tid 25370] [client 40.89.133.150:41280] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/r4f_1.php"] [unique_id "ac6bNY_KcjFQF5TuqTV5eAAAABU"]
[Fri Apr 03 00:37:10.393603 2026] [:error] [pid 25470:tid 25494] [client 40.89.133.150:42229] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "ac6bNnhROcck6_9HYyjXRAAAANY"]
[Fri Apr 03 00:37:10.877943 2026] [:error] [pid 25470:tid 25493] [client 40.89.133.150:42121] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "ac6bNnhROcck6_9HYyjXRgAAANU"]
[Fri Apr 03 00:37:11.449366 2026] [:error] [pid 25018:tid 25434] [client 40.89.133.150:42238] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "ac6bN3upR6lXnAUzFGrZrgAAAFU"]
[Fri Apr 03 00:37:11.922114 2026] [:error] [pid 25010:tid 25351] [client 40.89.133.150:42209] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "ac6bN4_KcjFQF5TuqTV5fwAAAAM"]
[Fri Apr 03 00:37:12.399847 2026] [:error] [pid 25018:tid 25411] [client 40.89.133.150:41221] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class.php"] [unique_id "ac6bOHupR6lXnAUzFGrZtQAAAEA"]
[Fri Apr 03 00:37:12.898408 2026] [:error] [pid 25018:tid 25428] [client 40.89.133.150:41330] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class.php"] [unique_id "ac6bOHupR6lXnAUzFGrZuQAAAE8"]
[Fri Apr 03 00:37:13.392431 2026] [:error] [pid 25470:tid 25488] [client 40.89.133.150:42164] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class.php"] [unique_id "ac6bOXhROcck6_9HYyjXTAAAANA"]
[Fri Apr 03 00:37:13.865041 2026] [:error] [pid 25018:tid 25418] [client 40.89.133.150:41311] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class.php"] [unique_id "ac6bOXupR6lXnAUzFGrZvwAAAEU"]
[Fri Apr 03 00:37:14.375732 2026] [:error] [pid 25018:tid 25431] [client 40.89.133.150:42237] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bless11.php"] [unique_id "ac6bOnupR6lXnAUzFGrZwQAAAFI"]
[Fri Apr 03 00:37:14.846094 2026] [:error] [pid 25470:tid 25481] [client 40.89.133.150:42163] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bless11.php"] [unique_id "ac6bOnhROcck6_9HYyjXUQAAAMk"]
[Fri Apr 03 00:37:15.333042 2026] [:error] [pid 25035:tid 25446] [client 40.89.133.150:42112] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bless11.php"] [unique_id "ac6bOxhR292toNOkLqGQfAAAAIQ"]
[Fri Apr 03 00:37:15.824926 2026] [:error] [pid 25010:tid 25361] [client 40.89.133.150:42133] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bless11.php"] [unique_id "ac6bO4_KcjFQF5TuqTV5jwAAAAw"]
[Fri Apr 03 00:37:16.390392 2026] [:error] [pid 25010:tid 25353] [client 40.89.133.150:41303] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/o.php"] [unique_id "ac6bPI_KcjFQF5TuqTV5kwAAAAU"]
[Fri Apr 03 00:37:16.865173 2026] [:error] [pid 25470:tid 25483] [client 40.89.133.150:42233] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/o.php"] [unique_id "ac6bPHhROcck6_9HYyjXVgAAAMs"]
[Fri Apr 03 00:37:17.400800 2026] [:error] [pid 25035:tid 25450] [client 40.89.133.150:42197] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/o.php"] [unique_id "ac6bPRhR292toNOkLqGQgQAAAIg"]
[Fri Apr 03 00:37:17.886681 2026] [:error] [pid 25470:tid 25478] [client 40.89.133.150:41220] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/o.php"] [unique_id "ac6bPXhROcck6_9HYyjXXAAAAMY"]
[Fri Apr 03 00:37:18.390133 2026] [:error] [pid 25470:tid 25488] [client 40.89.133.150:42219] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a.php"] [unique_id "ac6bPnhROcck6_9HYyjXZAAAANA"]
[Fri Apr 03 00:37:18.971099 2026] [:error] [pid 25470:tid 25490] [client 40.89.133.150:42149] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a.php"] [unique_id "ac6bPnhROcck6_9HYyjXbAAAANI"]
[Fri Apr 03 00:37:19.651830 2026] [:error] [pid 25470:tid 25476] [client 40.89.133.150:42236] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a.php"] [unique_id "ac6bP3hROcck6_9HYyjXbwAAAMQ"]
[Fri Apr 03 00:37:20.200552 2026] [:error] [pid 25010:tid 25365] [client 40.89.133.150:42182] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a.php"] [unique_id "ac6bQI_KcjFQF5TuqTV5ogAAABA"]
[Fri Apr 03 00:37:20.675107 2026] [:error] [pid 25010:tid 25368] [client 40.89.133.150:41285] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/system_log.php"] [unique_id "ac6bQI_KcjFQF5TuqTV5pQAAABM"]
[Fri Apr 03 00:37:21.149979 2026] [:error] [pid 25010:tid 25362] [client 40.89.133.150:42221] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/system_log.php"] [unique_id "ac6bQY_KcjFQF5TuqTV5qAAAAA0"]
[Fri Apr 03 00:37:21.650862 2026] [:error] [pid 25470:tid 25474] [client 40.89.133.150:42169] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/system_log.php"] [unique_id "ac6bQXhROcck6_9HYyjXdwAAAMI"]
[Fri Apr 03 00:37:21.913195 2026] [:error] [pid 25470:tid 25485] [client 20.215.208.34:24672] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ac6bQXhROcck6_9HYyjXeQAAAM0"]
[Fri Apr 03 00:37:22.240494 2026] [:error] [pid 25470:tid 25479] [client 40.89.133.150:41288] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/system_log.php"] [unique_id "ac6bQnhROcck6_9HYyjXfQAAAMc"]
[Fri Apr 03 00:37:22.512813 2026] [:error] [pid 25018:tid 25425] [client 20.215.208.34:24597] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ac6bQnupR6lXnAUzFGrZ3QAAAEw"]
[Fri Apr 03 00:37:22.765017 2026] [:error] [pid 25010:tid 25357] [client 40.89.133.150:42129] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/ssd/sallu.php"] [unique_id "ac6bQo_KcjFQF5TuqTV5sgAAAAk"]
[Fri Apr 03 00:37:23.037003 2026] [:error] [pid 25470:tid 25482] [client 20.215.208.34:24272] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ac6bQ3hROcck6_9HYyjXhQAAAMo"]
[Fri Apr 03 00:37:23.248751 2026] [:error] [pid 25470:tid 25477] [client 40.89.133.150:42136] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/ssd/sallu.php"] [unique_id "ac6bQ3hROcck6_9HYyjXhwAAAMU"]
[Fri Apr 03 00:37:23.663024 2026] [:error] [pid 25035:tid 25465] [client 20.215.208.34:24269] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ac6bQxhR292toNOkLqGQhgAAAJc"]
[Fri Apr 03 00:37:23.830501 2026] [:error] [pid 25470:tid 25495] [client 40.89.133.150:41254] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/ssd/sallu.php"] [unique_id "ac6bQ3hROcck6_9HYyjXjgAAANc"]
[Fri Apr 03 00:37:24.377724 2026] [:error] [pid 25018:tid 25414] [client 40.89.133.150:41343] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/ssd/sallu.php"] [unique_id "ac6bRHupR6lXnAUzFGrZ4AAAAEI"]
[Fri Apr 03 00:37:24.926206 2026] [:error] [pid 25010:tid 25351] [client 40.89.133.150:42173] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a2.php"] [unique_id "ac6bRI_KcjFQF5TuqTV5vgAAAAM"]
[Fri Apr 03 00:37:25.418622 2026] [:error] [pid 25010:tid 25373] [client 40.89.133.150:42172] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a2.php"] [unique_id "ac6bRY_KcjFQF5TuqTV5wgAAABg"]
[Fri Apr 03 00:37:25.903363 2026] [:error] [pid 25018:tid 25430] [client 40.89.133.150:42159] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a2.php"] [unique_id "ac6bRXupR6lXnAUzFGrZ5AAAAFE"]
[Fri Apr 03 00:37:26.382194 2026] [:error] [pid 25010:tid 25359] [client 40.89.133.150:41333] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a2.php"] [unique_id "ac6bRo_KcjFQF5TuqTV5xQAAAAs"]
[Fri Apr 03 00:37:26.864806 2026] [:error] [pid 25470:tid 25480] [client 40.89.133.150:41283] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/classwithtostring.php"] [unique_id "ac6bRnhROcck6_9HYyjXogAAAMg"]
[Fri Apr 03 00:37:27.393478 2026] [:error] [pid 25470:tid 25486] [client 40.89.133.150:41278] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/classwithtostring.php"] [unique_id "ac6bR3hROcck6_9HYyjXqgAAAM4"]
[Fri Apr 03 00:37:27.882411 2026] [:error] [pid 25470:tid 25479] [client 40.89.133.150:42220] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/classwithtostring.php"] [unique_id "ac6bR3hROcck6_9HYyjXsQAAAMc"]
[Fri Apr 03 00:37:28.357010 2026] [:error] [pid 25010:tid 25361] [client 40.89.133.150:42144] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/classwithtostring.php"] [unique_id "ac6bSI_KcjFQF5TuqTV5zwAAAAw"]
[Fri Apr 03 00:37:28.883351 2026] [:error] [pid 25470:tid 25486] [client 40.89.133.150:41263] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/css.php"] [unique_id "ac6bSHhROcck6_9HYyjXvQAAAM4"]
[Fri Apr 03 00:37:29.358984 2026] [:error] [pid 25010:tid 25362] [client 40.89.133.150:42177] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/css.php"] [unique_id "ac6bSY_KcjFQF5TuqTV50wAAAA0"]
[Fri Apr 03 00:37:29.835752 2026] [:error] [pid 25018:tid 25415] [client 40.89.133.150:41301] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/css.php"] [unique_id "ac6bSXupR6lXnAUzFGrZ6gAAAEM"]
[Fri Apr 03 00:37:30.383643 2026] [:error] [pid 25010:tid 25351] [client 40.89.133.150:42113] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/css.php"] [unique_id "ac6bSo_KcjFQF5TuqTV52AAAAAM"]
[Fri Apr 03 00:37:30.916848 2026] [:error] [pid 25018:tid 25422] [client 40.89.133.150:42223] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file32.php"] [unique_id "ac6bSnupR6lXnAUzFGrZ7QAAAEk"]
[Fri Apr 03 00:37:31.325469 2026] [:error] [pid 25035:tid 25464] [client 20.91.227.129:24590] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ac6bSxhR292toNOkLqGQkAAAAJY"]
[Fri Apr 03 00:37:31.390024 2026] [:error] [pid 25470:tid 25483] [client 40.89.133.150:42210] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file32.php"] [unique_id "ac6bS3hROcck6_9HYyjXzgAAAMs"]
[Fri Apr 03 00:37:31.875098 2026] [:error] [pid 25470:tid 25482] [client 40.89.133.150:41321] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file32.php"] [unique_id "ac6bS3hROcck6_9HYyjX0wAAAMo"]
[Fri Apr 03 00:37:32.110404 2026] [:error] [pid 25018:tid 25437] [client 20.91.227.129:25213] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ac6bTHupR6lXnAUzFGrZ9wAAAFg"]
[Fri Apr 03 00:37:32.364456 2026] [:error] [pid 25018:tid 25427] [client 40.89.133.150:41338] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file32.php"] [unique_id "ac6bTHupR6lXnAUzFGrZ-AAAAE4"]
[Fri Apr 03 00:37:32.841446 2026] [:error] [pid 25018:tid 25436] [client 40.89.133.150:40008] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nope.php"] [unique_id "ac6bTHupR6lXnAUzFGrZ_AAAAFc"]
[Fri Apr 03 00:37:33.370374 2026] [:error] [pid 25470:tid 25480] [client 40.89.133.150:42207] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nope.php"] [unique_id "ac6bTXhROcck6_9HYyjX5QAAAMg"]
[Fri Apr 03 00:37:33.749746 2026] [:error] [pid 25470:tid 25496] [client 20.91.227.129:24666] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ac6bTXhROcck6_9HYyjX6gAAANg"]
[Fri Apr 03 00:37:33.846124 2026] [:error] [pid 25470:tid 25490] [client 40.89.133.150:42203] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nope.php"] [unique_id "ac6bTXhROcck6_9HYyjX6wAAANI"]
[Fri Apr 03 00:37:34.293702 2026] [:error] [pid 25470:tid 25492] [client 20.91.227.129:25113] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ac6bTnhROcck6_9HYyjX8wAAANQ"]
[Fri Apr 03 00:37:34.320919 2026] [:error] [pid 25470:tid 25479] [client 40.89.133.150:40053] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nope.php"] [unique_id "ac6bTnhROcck6_9HYyjX9QAAAMc"]
[Fri Apr 03 00:37:34.870619 2026] [:error] [pid 25018:tid 25428] [client 20.91.227.129:24671] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ac6bTnupR6lXnAUzFGrZ_gAAAE8"]
[Fri Apr 03 00:37:34.962138 2026] [:error] [pid 25470:tid 25492] [client 40.89.133.150:41329] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/js.php"] [unique_id "ac6bTnhROcck6_9HYyjX_QAAANQ"]
[Fri Apr 03 00:37:35.405927 2026] [:error] [pid 25470:tid 25472] [client 20.91.227.129:25100] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ac6bT3hROcck6_9HYyjYBAAAAMA"]
[Fri Apr 03 00:37:35.439039 2026] [:error] [pid 25010:tid 25349] [client 40.89.133.150:41336] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/js.php"] [unique_id "ac6bT4_KcjFQF5TuqTV53gAAAAI"]
[Fri Apr 03 00:37:35.924564 2026] [:error] [pid 25010:tid 25353] [client 40.89.133.150:42204] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/js.php"] [unique_id "ac6bT4_KcjFQF5TuqTV53wAAAAU"]
[Fri Apr 03 00:37:36.407835 2026] [:error] [pid 25035:tid 25463] [client 40.89.133.150:41312] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/js.php"] [unique_id "ac6bUBhR292toNOkLqGQkgAAAJU"]
[Fri Apr 03 00:37:36.633014 2026] [:error] [pid 25035:tid 25446] [client 20.91.227.129:25099] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ac6bUBhR292toNOkLqGQlAAAAIQ"]
[Fri Apr 03 00:37:36.888313 2026] [:error] [pid 25470:tid 25495] [client 40.89.133.150:42151] [client 40.89.133.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "ac6bUHhROcck6_9HYyjYFAAAANc"]
[Fri Apr 03 00:37:37.504053 2026] [:error] [pid 25010:tid 25356] [client 40.89.133.150:41302] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/num.php"] [unique_id "ac6bUY_KcjFQF5TuqTV54AAAAAg"]
[Fri Apr 03 00:37:38.050149 2026] [:error] [pid 25010:tid 25358] [client 40.89.133.150:42157] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/num.php"] [unique_id "ac6bUo_KcjFQF5TuqTV54wAAAAo"]
[Fri Apr 03 00:37:38.577149 2026] [:error] [pid 25010:tid 25365] [client 40.89.133.150:42132] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/num.php"] [unique_id "ac6bUo_KcjFQF5TuqTV56AAAABA"]
[Fri Apr 03 00:37:39.064968 2026] [:error] [pid 25470:tid 25485] [client 40.89.133.150:42201] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/num.php"] [unique_id "ac6bU3hROcck6_9HYyjYIQAAAM0"]
[Fri Apr 03 00:37:39.551444 2026] [:error] [pid 25470:tid 25488] [client 40.89.133.150:42156] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mah.php"] [unique_id "ac6bU3hROcck6_9HYyjYKAAAANA"]
[Fri Apr 03 00:37:40.028910 2026] [:error] [pid 25010:tid 25358] [client 40.89.133.150:41312] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mah.php"] [unique_id "ac6bVI_KcjFQF5TuqTV58wAAAAo"]
[Fri Apr 03 00:37:40.052907 2026] [:error] [pid 25470:tid 25483] [client 172.161.11.137:20626] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ac6bVHhROcck6_9HYyjYLwAAAMs"]
[Fri Apr 03 00:37:40.539864 2026] [:error] [pid 25470:tid 25487] [client 40.89.133.150:41309] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mah.php"] [unique_id "ac6bVHhROcck6_9HYyjYNgAAAM8"]
[Fri Apr 03 00:37:40.675094 2026] [:error] [pid 25470:tid 25494] [client 172.161.11.137:20971] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ac6bVHhROcck6_9HYyjYOQAAANY"]
[Fri Apr 03 00:37:41.032592 2026] [:error] [pid 25010:tid 25351] [client 40.89.133.150:42202] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mah.php"] [unique_id "ac6bVY_KcjFQF5TuqTV5-AAAAAM"]
[Fri Apr 03 00:37:41.510200 2026] [:error] [pid 25470:tid 25485] [client 40.89.133.150:42180] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-good.php"] [unique_id "ac6bVXhROcck6_9HYyjYPgAAAM0"]
[Fri Apr 03 00:37:41.769467 2026] [:error] [pid 25470:tid 25492] [client 20.215.208.34:25139] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ac6bVXhROcck6_9HYyjYQQAAANQ"]
[Fri Apr 03 00:37:41.778933 2026] [:error] [pid 25470:tid 25472] [client 172.161.11.137:21324] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ac6bVXhROcck6_9HYyjYQgAAAMA"]
[Fri Apr 03 00:37:42.035711 2026] [:error] [pid 25035:tid 25454] [client 40.89.133.150:42123] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-good.php"] [unique_id "ac6bVhhR292toNOkLqGQpAAAAIw"]
[Fri Apr 03 00:37:42.271982 2026] [:error] [pid 25010:tid 25356] [client 172.161.11.137:21283] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ac6bVo_KcjFQF5TuqTV6AAAAAAg"]
[Fri Apr 03 00:37:42.429121 2026] [:error] [pid 25035:tid 25465] [client 20.215.208.34:24607] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ac6bVhhR292toNOkLqGQpgAAAJc"]
[Fri Apr 03 00:37:42.572127 2026] [:error] [pid 25470:tid 25479] [client 40.89.133.150:42211] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-good.php"] [unique_id "ac6bVnhROcck6_9HYyjYSQAAAMc"]
[Fri Apr 03 00:37:43.077091 2026] [:error] [pid 25470:tid 25476] [client 20.215.208.34:24590] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ac6bV3hROcck6_9HYyjYVAAAAMQ"]
[Fri Apr 03 00:37:43.099732 2026] [:error] [pid 25470:tid 25487] [client 40.89.133.150:41328] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-good.php"] [unique_id "ac6bV3hROcck6_9HYyjYVQAAAM8"]
[Fri Apr 03 00:37:43.664470 2026] [:error] [pid 25470:tid 25493] [client 20.215.208.34:24667] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ac6bV3hROcck6_9HYyjYXAAAANU"]
[Fri Apr 03 00:37:43.712641 2026] [:error] [pid 25470:tid 25485] [client 40.89.133.150:39963] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/atomlib.php"] [unique_id "ac6bV3hROcck6_9HYyjYXwAAAM0"]
[Fri Apr 03 00:37:44.212857 2026] [:error] [pid 25470:tid 25495] [client 40.89.133.150:41326] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/atomlib.php"] [unique_id "ac6bWHhROcck6_9HYyjYZQAAANc"]
[Fri Apr 03 00:37:44.693834 2026] [:error] [pid 25470:tid 25491] [client 40.89.133.150:42116] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/atomlib.php"] [unique_id "ac6bWHhROcck6_9HYyjYbQAAANM"]
[Fri Apr 03 00:37:45.171575 2026] [:error] [pid 25010:tid 25347] [client 40.89.133.150:42222] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/atomlib.php"] [unique_id "ac6bWY_KcjFQF5TuqTV6BgAAAAA"]
[Fri Apr 03 00:37:45.648439 2026] [:error] [pid 25010:tid 25362] [client 40.89.133.150:41248] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wfile.php"] [unique_id "ac6bWY_KcjFQF5TuqTV6CgAAAA0"]
[Fri Apr 03 00:37:46.165169 2026] [:error] [pid 25035:tid 25458] [client 40.89.133.150:42194] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wfile.php"] [unique_id "ac6bWhhR292toNOkLqGQrQAAAJA"]
[Fri Apr 03 00:37:46.699848 2026] [:error] [pid 25010:tid 25358] [client 40.89.133.150:41343] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wfile.php"] [unique_id "ac6bWo_KcjFQF5TuqTV6EQAAAAo"]
[Fri Apr 03 00:37:47.170524 2026] [:error] [pid 25470:tid 25488] [client 40.89.133.150:41291] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wfile.php"] [unique_id "ac6bW3hROcck6_9HYyjYgQAAANA"]
[Fri Apr 03 00:37:47.740316 2026] [:error] [pid 25010:tid 25369] [client 40.89.133.150:42146] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ok.php"] [unique_id "ac6bW4_KcjFQF5TuqTV6FQAAABQ"]
[Fri Apr 03 00:37:48.477539 2026] [:error] [pid 25010:tid 25364] [client 40.89.133.150:41217] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ok.php"] [unique_id "ac6bXI_KcjFQF5TuqTV6GQAAAA8"]
[Fri Apr 03 00:37:49.163726 2026] [:error] [pid 25470:tid 25473] [client 40.89.133.150:41235] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ok.php"] [unique_id "ac6bXXhROcck6_9HYyjYjQAAAME"]
[Fri Apr 03 00:37:49.668585 2026] [:error] [pid 25010:tid 25373] [client 40.89.133.150:41318] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ok.php"] [unique_id "ac6bXY_KcjFQF5TuqTV6HAAAABg"]
[Fri Apr 03 00:37:50.172932 2026] [:error] [pid 25010:tid 25351] [client 40.89.133.150:42734] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sid3.php"] [unique_id "ac6bXo_KcjFQF5TuqTV6HQAAAAM"]
[Fri Apr 03 00:37:50.605978 2026] [proxy_fcgi:error] [pid 25010:tid 25362] [client 158.158.117.24:21119] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 00:37:50.692182 2026] [:error] [pid 25470:tid 25476] [client 40.89.133.150:42192] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sid3.php"] [unique_id "ac6bXnhROcck6_9HYyjYoAAAAMQ"]
[Fri Apr 03 00:37:50.849037 2026] [proxy_fcgi:error] [pid 25010:tid 25348] [client 158.158.117.24:21119] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 00:37:51.096925 2026] [proxy_fcgi:error] [pid 25010:tid 25361] [client 158.158.117.24:21119] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 00:37:51.184082 2026] [:error] [pid 25035:tid 25457] [client 40.89.133.150:42677] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sid3.php"] [unique_id "ac6bXxhR292toNOkLqGQuQAAAI8"]
[Fri Apr 03 00:37:51.339178 2026] [proxy_fcgi:error] [pid 25010:tid 25353] [client 158.158.117.24:21119] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 00:37:51.668145 2026] [:error] [pid 25018:tid 25432] [client 40.89.133.150:42134] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sid3.php"] [unique_id "ac6bX3upR6lXnAUzFGraEgAAAFM"]
[Fri Apr 03 00:37:51.669937 2026] [proxy_fcgi:error] [pid 25010:tid 25368] [client 158.158.117.24:21119] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 00:37:51.913059 2026] [proxy_fcgi:error] [pid 25010:tid 25358] [client 158.158.117.24:21119] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 00:37:52.144308 2026] [:error] [pid 25470:tid 25475] [client 40.89.133.150:42181] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/222.php"] [unique_id "ac6bYHhROcck6_9HYyjYqAAAAMM"]
[Fri Apr 03 00:37:52.398394 2026] [proxy_fcgi:error] [pid 25010:tid 25352] [client 158.158.117.24:21119] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 00:37:52.615381 2026] [:error] [pid 25470:tid 25473] [client 40.89.133.150:42706] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/222.php"] [unique_id "ac6bYHhROcck6_9HYyjYrQAAAME"]
[Fri Apr 03 00:37:52.641432 2026] [proxy_fcgi:error] [pid 25010:tid 25371] [client 158.158.117.24:21119] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 00:37:52.884066 2026] [proxy_fcgi:error] [pid 25010:tid 25359] [client 158.158.117.24:21119] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 00:37:53.123159 2026] [:error] [pid 25010:tid 25351] [client 158.158.117.24:21119] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/uploads/index.php"] [unique_id "ac6bYY_KcjFQF5TuqTV6LQAAAAM"]
[Fri Apr 03 00:37:53.150166 2026] [:error] [pid 25010:tid 25347] [client 40.89.133.150:42735] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/222.php"] [unique_id "ac6bYY_KcjFQF5TuqTV6LgAAAAA"]
[Fri Apr 03 00:37:53.628003 2026] [:error] [pid 25010:tid 25365] [client 40.89.133.150:42673] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/222.php"] [unique_id "ac6bYY_KcjFQF5TuqTV6LwAAABA"]
[Fri Apr 03 00:37:53.660897 2026] [:error] [pid 25010:tid 25348] [client 158.158.117.24:21034] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/uploads/index.php"] [unique_id "ac6bYY_KcjFQF5TuqTV6MAAAAAE"]
[Fri Apr 03 00:37:54.140194 2026] [:error] [pid 25010:tid 25369] [client 158.158.117.24:20611] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/uploads/index.php"] [unique_id "ac6bYo_KcjFQF5TuqTV6MgAAABQ"]
[Fri Apr 03 00:37:54.478524 2026] [:error] [pid 25010:tid 25358] [client 40.89.133.150:42216] [client 40.89.133.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dwelectservices.com.au"] [uri "/filemanager.php"] [unique_id "ac6bYo_KcjFQF5TuqTV6NgAAAAo"]
[Fri Apr 03 00:37:54.652711 2026] [:error] [pid 25470:tid 25475] [client 158.158.117.24:21107] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/uploads/index.php"] [unique_id "ac6bYnhROcck6_9HYyjYvgAAAMM"]
[Fri Apr 03 00:37:54.991584 2026] [:error] [pid 25010:tid 25355] [client 40.89.133.150:42632] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/123.php"] [unique_id "ac6bYo_KcjFQF5TuqTV6OwAAAAc"]
[Fri Apr 03 00:37:55.168525 2026] [:error] [pid 25470:tid 25482] [client 158.158.117.24:21100] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/n.php"] [unique_id "ac6bY3hROcck6_9HYyjYwgAAAMo"]
[Fri Apr 03 00:37:55.467318 2026] [:error] [pid 25010:tid 25347] [client 40.89.133.150:42200] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/123.php"] [unique_id "ac6bY4_KcjFQF5TuqTV6PwAAAAA"]
[Fri Apr 03 00:37:55.658568 2026] [:error] [pid 25010:tid 25372] [client 158.158.117.24:21095] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/n.php"] [unique_id "ac6bY4_KcjFQF5TuqTV6QgAAABc"]
[Fri Apr 03 00:37:55.939662 2026] [:error] [pid 25035:tid 25454] [client 40.89.133.150:42680] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/123.php"] [unique_id "ac6bYxhR292toNOkLqGQxAAAAIw"]
[Fri Apr 03 00:37:56.297430 2026] [:error] [pid 25470:tid 25479] [client 158.158.117.24:21018] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/n.php"] [unique_id "ac6bZHhROcck6_9HYyjYyAAAAMc"]
[Fri Apr 03 00:37:56.495379 2026] [:error] [pid 25470:tid 25474] [client 40.89.133.150:42687] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/123.php"] [unique_id "ac6bZHhROcck6_9HYyjYywAAAMI"]
[Fri Apr 03 00:37:56.871885 2026] [:error] [pid 25470:tid 25478] [client 158.158.117.24:21094] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/n.php"] [unique_id "ac6bZHhROcck6_9HYyjY0AAAAMY"]
[Fri Apr 03 00:37:56.972653 2026] [:error] [pid 25018:tid 25411] [client 40.89.133.150:41259] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-links-opml.php"] [unique_id "ac6bZHupR6lXnAUzFGraGwAAAEA"]
[Fri Apr 03 00:37:57.366496 2026] [:error] [pid 25470:tid 25492] [client 158.158.117.24:21424] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/abc.php"] [unique_id "ac6bZXhROcck6_9HYyjY2AAAANQ"]
[Fri Apr 03 00:37:57.562420 2026] [:error] [pid 25010:tid 25367] [client 40.89.133.150:39960] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-links-opml.php"] [unique_id "ac6bZY_KcjFQF5TuqTV6RwAAABI"]
[Fri Apr 03 00:37:58.011475 2026] [:error] [pid 25010:tid 25359] [client 158.158.117.24:21419] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/abc.php"] [unique_id "ac6bZo_KcjFQF5TuqTV6TQAAAAs"]
[Fri Apr 03 00:37:58.169678 2026] [:error] [pid 25035:tid 25463] [client 40.89.133.150:42667] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-links-opml.php"] [unique_id "ac6bZhhR292toNOkLqGQygAAAJU"]
[Fri Apr 03 00:37:58.497086 2026] [:error] [pid 25470:tid 25489] [client 158.158.117.24:21471] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/abc.php"] [unique_id "ac6bZnhROcck6_9HYyjY4gAAANE"]
[Fri Apr 03 00:37:58.642349 2026] [:error] [pid 25470:tid 25473] [client 40.89.133.150:42742] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-links-opml.php"] [unique_id "ac6bZnhROcck6_9HYyjY5AAAAME"]
[Fri Apr 03 00:37:58.977550 2026] [:error] [pid 25018:tid 25425] [client 158.158.117.24:21472] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/abc.php"] [unique_id "ac6bZnupR6lXnAUzFGraIAAAAEw"]
[Fri Apr 03 00:37:59.476891 2026] [:error] [pid 25035:tid 25464] [client 158.158.117.24:21069] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/new4.php"] [unique_id "ac6bZxhR292toNOkLqGQzgAAAJY"]
[Fri Apr 03 00:37:59.514327 2026] [proxy_fcgi:error] [pid 25470:tid 25483] [client 40.89.133.150:42650] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 00:37:59.754283 2026] [proxy_fcgi:error] [pid 25470:tid 25485] [client 40.89.133.150:42650] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 00:37:59.818995 2026] [proxy_fcgi:error] [pid 25035:tid 25444] [client 4.232.187.184:21078] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 00:37:59.982767 2026] [:error] [pid 25470:tid 25478] [client 158.158.117.24:21487] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/new4.php"] [unique_id "ac6bZ3hROcck6_9HYyjY9AAAAMY"]
[Fri Apr 03 00:38:00.001803 2026] [proxy_fcgi:error] [pid 25470:tid 25489] [client 40.89.133.150:42650] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 00:38:00.245134 2026] [proxy_fcgi:error] [pid 25470:tid 25482] [client 40.89.133.150:42650] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 00:38:00.316760 2026] [proxy_fcgi:error] [pid 25035:tid 25451] [client 4.232.187.184:21078] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 00:38:00.557320 2026] [proxy_fcgi:error] [pid 25035:tid 25446] [client 4.232.187.184:21078] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 00:38:00.598034 2026] [:error] [pid 25035:tid 25459] [client 158.158.117.24:21400] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/new4.php"] [unique_id "ac6baBhR292toNOkLqGQ1gAAAJE"]
[Fri Apr 03 00:38:00.767884 2026] [proxy_fcgi:error] [pid 25470:tid 25473] [client 40.89.133.150:42650] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 00:38:00.938085 2026] [proxy_fcgi:error] [pid 25035:tid 25460] [client 4.232.187.184:21078] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 00:38:01.006085 2026] [proxy_fcgi:error] [pid 25470:tid 25472] [client 40.89.133.150:42650] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 00:38:01.088381 2026] [:error] [pid 25018:tid 25427] [client 158.158.117.24:21083] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/new4.php"] [unique_id "ac6baXupR6lXnAUzFGraJgAAAE4"]
[Fri Apr 03 00:38:01.176454 2026] [proxy_fcgi:error] [pid 25035:tid 25452] [client 4.232.187.184:21078] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 00:38:01.374944 2026] [proxy_fcgi:error] [pid 25470:tid 25492] [client 40.89.133.150:42650] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 00:38:01.414625 2026] [proxy_fcgi:error] [pid 25035:tid 25463] [client 4.232.187.184:21078] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 00:38:01.574676 2026] [:error] [pid 25470:tid 25496] [client 158.158.117.24:21384] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/r4f_1.php"] [unique_id "ac6baXhROcck6_9HYyjY_gAAANg"]
[Fri Apr 03 00:38:01.624391 2026] [proxy_fcgi:error] [pid 25470:tid 25495] [client 40.89.133.150:42650] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 00:38:01.863753 2026] [proxy_fcgi:error] [pid 25470:tid 25477] [client 40.89.133.150:42650] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 00:38:01.887955 2026] [proxy_fcgi:error] [pid 25035:tid 25443] [client 4.232.187.184:21078] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 00:38:02.065052 2026] [:error] [pid 25010:tid 25353] [client 158.158.117.24:21460] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/r4f_1.php"] [unique_id "ac6bao_KcjFQF5TuqTV6WAAAAAU"]
[Fri Apr 03 00:38:02.100351 2026] [:error] [pid 25470:tid 25493] [client 40.89.133.150:42650] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/an7.php"] [unique_id "ac6banhROcck6_9HYyjZBAAAANU"]
[Fri Apr 03 00:38:02.230727 2026] [proxy_fcgi:error] [pid 25035:tid 25444] [client 4.232.187.184:21078] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 00:38:02.551793 2026] [:error] [pid 25470:tid 25482] [client 158.158.117.24:20327] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/r4f_1.php"] [unique_id "ac6banhROcck6_9HYyjZCQAAAMo"]
[Fri Apr 03 00:38:02.628709 2026] [proxy_fcgi:error] [pid 25035:tid 25453] [client 4.232.187.184:21078] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 00:38:02.679824 2026] [:error] [pid 25470:tid 25480] [client 40.89.133.150:42235] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/an7.php"] [unique_id "ac6banhROcck6_9HYyjZDAAAAMg"]
[Fri Apr 03 00:38:02.899402 2026] [:error] [pid 25035:tid 25451] [client 4.232.187.184:21078] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/uploads/index.php"] [unique_id "ac6bahhR292toNOkLqGQ5QAAAIk"]
[Fri Apr 03 00:38:03.163090 2026] [:error] [pid 25018:tid 25424] [client 40.89.133.150:42661] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/an7.php"] [unique_id "ac6ba3upR6lXnAUzFGraLAAAAEs"]
[Fri Apr 03 00:38:03.168927 2026] [:error] [pid 25010:tid 25368] [client 158.158.117.24:21086] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/r4f_1.php"] [unique_id "ac6ba4_KcjFQF5TuqTV6XAAAABM"]
[Fri Apr 03 00:38:03.385738 2026] [:error] [pid 25010:tid 25357] [client 4.232.187.184:21014] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/uploads/index.php"] [unique_id "ac6ba4_KcjFQF5TuqTV6XgAAAAk"]
[Fri Apr 03 00:38:03.634923 2026] [:error] [pid 25470:tid 25483] [client 40.89.133.150:42130] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/an7.php"] [unique_id "ac6ba3hROcck6_9HYyjZFQAAAMs"]
[Fri Apr 03 00:38:03.651809 2026] [:error] [pid 25470:tid 25493] [client 158.158.117.24:21402] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "ac6ba3hROcck6_9HYyjZFgAAANU"]
[Fri Apr 03 00:38:03.984101 2026] [:error] [pid 25470:tid 25482] [client 4.232.187.184:20996] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/uploads/index.php"] [unique_id "ac6ba3hROcck6_9HYyjZGgAAAMo"]
[Fri Apr 03 00:38:04.166033 2026] [:error] [pid 25018:tid 25435] [client 158.158.117.24:21493] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "ac6bbHupR6lXnAUzFGraLwAAAFY"]
[Fri Apr 03 00:38:04.221467 2026] [:error] [pid 25018:tid 25426] [client 40.89.133.150:42666] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-gr.php"] [unique_id "ac6bbHupR6lXnAUzFGraMAAAAE0"]
[Fri Apr 03 00:38:04.704171 2026] [:error] [pid 25018:tid 25430] [client 40.89.133.150:41284] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-gr.php"] [unique_id "ac6bbHupR6lXnAUzFGraMwAAAFE"]
[Fri Apr 03 00:38:04.711091 2026] [:error] [pid 25018:tid 25423] [client 158.158.117.24:21067] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "ac6bbHupR6lXnAUzFGraNAAAAEo"]
[Fri Apr 03 00:38:04.734641 2026] [:error] [pid 25010:tid 25348] [client 4.232.187.184:21099] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/uploads/index.php"] [unique_id "ac6bbI_KcjFQF5TuqTV6YwAAAAE"]
[Fri Apr 03 00:38:05.191582 2026] [:error] [pid 25018:tid 25419] [client 40.89.133.150:42647] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-gr.php"] [unique_id "ac6bbXupR6lXnAUzFGraOgAAAEY"]
[Fri Apr 03 00:38:05.198969 2026] [:error] [pid 25010:tid 25366] [client 158.158.117.24:21087] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "ac6bbY_KcjFQF5TuqTV6ZAAAABE"]
[Fri Apr 03 00:38:05.217241 2026] [:error] [pid 25470:tid 25487] [client 4.232.187.184:21017] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/n.php"] [unique_id "ac6bbXhROcck6_9HYyjZIQAAAM8"]
[Fri Apr 03 00:38:05.748800 2026] [:error] [pid 25470:tid 25474] [client 158.158.117.24:21016] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class.php"] [unique_id "ac6bbXhROcck6_9HYyjZJgAAAMI"]
[Fri Apr 03 00:38:05.782570 2026] [:error] [pid 25010:tid 25361] [client 4.232.187.184:20679] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/n.php"] [unique_id "ac6bbY_KcjFQF5TuqTV6aAAAAAw"]
[Fri Apr 03 00:38:05.886158 2026] [:error] [pid 25470:tid 25493] [client 40.89.133.150:42178] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-gr.php"] [unique_id "ac6bbXhROcck6_9HYyjZJwAAANU"]
[Fri Apr 03 00:38:06.253434 2026] [:error] [pid 25018:tid 25428] [client 158.158.117.24:21470] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class.php"] [unique_id "ac6bbnupR6lXnAUzFGraPAAAAE8"]
[Fri Apr 03 00:38:06.268768 2026] [:error] [pid 25018:tid 25418] [client 4.232.187.184:21075] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/n.php"] [unique_id "ac6bbnupR6lXnAUzFGraPQAAAEU"]
[Fri Apr 03 00:38:06.457556 2026] [:error] [pid 25470:tid 25479] [client 40.89.133.150:42117] [client 40.89.133.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "ac6bbnhROcck6_9HYyjZLgAAAMc"]
[Fri Apr 03 00:38:06.772947 2026] [:error] [pid 25018:tid 25434] [client 4.232.187.184:21000] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/n.php"] [unique_id "ac6bbnupR6lXnAUzFGraQQAAAFU"]
[Fri Apr 03 00:38:06.781054 2026] [:error] [pid 25470:tid 25492] [client 158.158.117.24:21074] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class.php"] [unique_id "ac6bbnhROcck6_9HYyjZMAAAANQ"]
[Fri Apr 03 00:38:06.935607 2026] [:error] [pid 25035:tid 25452] [client 40.89.133.150:42654] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/update/f35.php"] [unique_id "ac6bbhhR292toNOkLqGQ5wAAAIo"]
[Fri Apr 03 00:38:07.269326 2026] [:error] [pid 25470:tid 25487] [client 158.158.117.24:21378] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class.php"] [unique_id "ac6bb3hROcck6_9HYyjZMgAAAM8"]
[Fri Apr 03 00:38:07.401341 2026] [:error] [pid 25470:tid 25490] [client 4.232.187.184:21074] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/abc.php"] [unique_id "ac6bb3hROcck6_9HYyjZNAAAANI"]
[Fri Apr 03 00:38:07.484734 2026] [:error] [pid 25470:tid 25477] [client 40.89.133.150:42715] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/update/f35.php"] [unique_id "ac6bb3hROcck6_9HYyjZNQAAAMU"]
[Fri Apr 03 00:38:07.886967 2026] [:error] [pid 25470:tid 25489] [client 4.232.187.184:20682] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/abc.php"] [unique_id "ac6bb3hROcck6_9HYyjZOgAAANE"]
[Fri Apr 03 00:38:07.893366 2026] [:error] [pid 25470:tid 25486] [client 158.158.117.24:21090] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bless11.php"] [unique_id "ac6bb3hROcck6_9HYyjZOwAAAM4"]
[Fri Apr 03 00:38:08.130741 2026] [:error] [pid 25018:tid 25411] [client 40.89.133.150:39992] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/update/f35.php"] [unique_id "ac6bcHupR6lXnAUzFGraQwAAAEA"]
[Fri Apr 03 00:38:08.425002 2026] [:error] [pid 25010:tid 25372] [client 158.158.117.24:21019] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bless11.php"] [unique_id "ac6bcI_KcjFQF5TuqTV6cwAAABc"]
[Fri Apr 03 00:38:08.467090 2026] [:error] [pid 25010:tid 25348] [client 4.232.187.184:20686] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/abc.php"] [unique_id "ac6bcI_KcjFQF5TuqTV6dAAAAAE"]
[Fri Apr 03 00:38:08.617614 2026] [:error] [pid 25010:tid 25366] [client 40.89.133.150:42630] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/update/f35.php"] [unique_id "ac6bcI_KcjFQF5TuqTV6dQAAABE"]
[Fri Apr 03 00:38:08.925553 2026] [:error] [pid 25010:tid 25353] [client 158.158.117.24:21455] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bless11.php"] [unique_id "ac6bcI_KcjFQF5TuqTV6dwAAAAU"]
[Fri Apr 03 00:38:08.993493 2026] [:error] [pid 25018:tid 25430] [client 4.232.187.184:21087] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/abc.php"] [unique_id "ac6bcHupR6lXnAUzFGraRQAAAFE"]
[Fri Apr 03 00:38:09.128530 2026] [:error] [pid 25010:tid 25373] [client 40.89.133.150:42701] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ext.php"] [unique_id "ac6bcY_KcjFQF5TuqTV6eAAAABg"]
[Fri Apr 03 00:38:09.411809 2026] [:error] [pid 25035:tid 25444] [client 158.158.117.24:21404] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bless11.php"] [unique_id "ac6bcRhR292toNOkLqGQ7wAAAII"]
[Fri Apr 03 00:38:09.591325 2026] [:error] [pid 25035:tid 25453] [client 4.232.187.184:21399] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/new4.php"] [unique_id "ac6bcRhR292toNOkLqGQ8QAAAIs"]
[Fri Apr 03 00:38:09.600477 2026] [:error] [pid 25035:tid 25451] [client 40.89.133.150:42733] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ext.php"] [unique_id "ac6bcRhR292toNOkLqGQ8gAAAIk"]
[Fri Apr 03 00:38:10.002621 2026] [:error] [pid 25010:tid 25371] [client 158.158.117.24:21064] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/o.php"] [unique_id "ac6bco_KcjFQF5TuqTV6fQAAABY"]
[Fri Apr 03 00:38:10.167915 2026] [:error] [pid 25010:tid 25355] [client 40.89.133.150:42231] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ext.php"] [unique_id "ac6bco_KcjFQF5TuqTV6fgAAAAc"]
[Fri Apr 03 00:38:10.260286 2026] [:error] [pid 25010:tid 25357] [client 4.232.187.184:21449] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/new4.php"] [unique_id "ac6bco_KcjFQF5TuqTV6fwAAAAk"]
[Fri Apr 03 00:38:10.521149 2026] [:error] [pid 25470:tid 25493] [client 158.158.117.24:21072] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/o.php"] [unique_id "ac6bcnhROcck6_9HYyjZSQAAANU"]
[Fri Apr 03 00:38:10.687586 2026] [:error] [pid 25010:tid 25370] [client 40.89.133.150:42127] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ext.php"] [unique_id "ac6bco_KcjFQF5TuqTV6gwAAABU"]
[Fri Apr 03 00:38:11.007499 2026] [:error] [pid 25010:tid 25354] [client 158.158.117.24:21443] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/o.php"] [unique_id "ac6bc4_KcjFQF5TuqTV6hwAAAAY"]
[Fri Apr 03 00:38:11.039108 2026] [:error] [pid 25018:tid 25412] [client 4.232.187.184:21055] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/new4.php"] [unique_id "ac6bc3upR6lXnAUzFGraSgAAAEE"]
[Fri Apr 03 00:38:11.214176 2026] [:error] [pid 25010:tid 25348] [client 40.89.133.150:42744] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/about3.php"] [unique_id "ac6bc4_KcjFQF5TuqTV6iQAAAAE"]
[Fri Apr 03 00:38:11.522847 2026] [:error] [pid 25010:tid 25353] [client 158.158.117.24:20999] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/o.php"] [unique_id "ac6bc4_KcjFQF5TuqTV6iwAAAAU"]
[Fri Apr 03 00:38:11.658290 2026] [:error] [pid 25018:tid 25435] [client 4.232.187.184:21479] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/new4.php"] [unique_id "ac6bc3upR6lXnAUzFGraTAAAAFY"]
[Fri Apr 03 00:38:11.693762 2026] [:error] [pid 25018:tid 25429] [client 40.89.133.150:41295] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/about3.php"] [unique_id "ac6bc3upR6lXnAUzFGraTQAAAFA"]
[Fri Apr 03 00:38:12.011142 2026] [:error] [pid 25010:tid 25362] [client 158.158.117.24:21482] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a.php"] [unique_id "ac6bdI_KcjFQF5TuqTV6jgAAAA0"]
[Fri Apr 03 00:38:12.325394 2026] [:error] [pid 25470:tid 25492] [client 4.232.187.184:21001] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/r4f_1.php"] [unique_id "ac6bdHhROcck6_9HYyjZUgAAANQ"]
[Fri Apr 03 00:38:12.343519 2026] [:error] [pid 25470:tid 25477] [client 20.91.227.129:25710] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ac6bdHhROcck6_9HYyjZUwAAAMU"]
[Fri Apr 03 00:38:12.363965 2026] [:error] [pid 25470:tid 25495] [client 40.89.133.150:41245] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/about3.php"] [unique_id "ac6bdHhROcck6_9HYyjZVAAAANc"]
[Fri Apr 03 00:38:12.511733 2026] [:error] [pid 25470:tid 25483] [client 158.158.117.24:21447] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a.php"] [unique_id "ac6bdHhROcck6_9HYyjZVgAAAMs"]
[Fri Apr 03 00:38:12.838921 2026] [:error] [pid 25470:tid 25493] [client 40.89.133.150:42176] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/about3.php"] [unique_id "ac6bdHhROcck6_9HYyjZWQAAANU"]
[Fri Apr 03 00:38:12.959333 2026] [:error] [pid 25470:tid 25473] [client 4.232.187.184:21453] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/r4f_1.php"] [unique_id "ac6bdHhROcck6_9HYyjZWwAAAME"]
[Fri Apr 03 00:38:13.008535 2026] [:error] [pid 25470:tid 25487] [client 158.158.117.24:21008] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a.php"] [unique_id "ac6bdXhROcck6_9HYyjZXQAAAM8"]
[Fri Apr 03 00:38:13.332386 2026] [:error] [pid 25470:tid 25492] [client 40.89.133.150:39987] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp.php"] [unique_id "ac6bdXhROcck6_9HYyjZZQAAANQ"]
[Fri Apr 03 00:38:13.444885 2026] [:error] [pid 25035:tid 25443] [client 4.232.187.184:21441] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/r4f_1.php"] [unique_id "ac6bdRhR292toNOkLqGQ-wAAAIE"]
[Fri Apr 03 00:38:13.509713 2026] [:error] [pid 25035:tid 25458] [client 158.158.117.24:21473] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a.php"] [unique_id "ac6bdRhR292toNOkLqGQ_AAAAJA"]
[Fri Apr 03 00:38:13.904742 2026] [:error] [pid 25035:tid 25448] [client 40.89.133.150:42225] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp.php"] [unique_id "ac6bdRhR292toNOkLqGQ_gAAAIY"]
[Fri Apr 03 00:38:13.925634 2026] [:error] [pid 25035:tid 25453] [client 4.232.187.184:21409] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/r4f_1.php"] [unique_id "ac6bdRhR292toNOkLqGQ_wAAAIs"]
[Fri Apr 03 00:38:14.030329 2026] [:error] [pid 25470:tid 25493] [client 158.158.117.24:21023] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/system_log.php"] [unique_id "ac6bdnhROcck6_9HYyjZagAAANU"]
[Fri Apr 03 00:38:14.395511 2026] [:error] [pid 25035:tid 25446] [client 40.89.133.150:42662] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp.php"] [unique_id "ac6bdhhR292toNOkLqGRAAAAAIQ"]
[Fri Apr 03 00:38:14.408678 2026] [:error] [pid 25010:tid 25369] [client 4.232.187.184:21444] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "ac6bdo_KcjFQF5TuqTV6kgAAABQ"]
[Fri Apr 03 00:38:14.522033 2026] [:error] [pid 25035:tid 25450] [client 158.158.117.24:21501] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/system_log.php"] [unique_id "ac6bdhhR292toNOkLqGRAgAAAIg"]
[Fri Apr 03 00:38:14.883969 2026] [:error] [pid 25018:tid 25423] [client 4.232.187.184:21003] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "ac6bdnupR6lXnAUzFGraUgAAAEo"]
[Fri Apr 03 00:38:14.899844 2026] [:error] [pid 25470:tid 25485] [client 40.89.133.150:41228] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp.php"] [unique_id "ac6bdnhROcck6_9HYyjZbwAAAM0"]
[Fri Apr 03 00:38:15.030808 2026] [:error] [pid 25470:tid 25492] [client 158.158.117.24:20997] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/system_log.php"] [unique_id "ac6bd3hROcck6_9HYyjZcAAAANQ"]
[Fri Apr 03 00:38:15.364149 2026] [:error] [pid 25035:tid 25455] [client 4.232.187.184:21116] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "ac6bdxhR292toNOkLqGRAwAAAI0"]
[Fri Apr 03 00:38:15.430100 2026] [:error] [pid 25470:tid 25475] [client 40.89.133.150:42185] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zwso.php"] [unique_id "ac6bd3hROcck6_9HYyjZdAAAAMM"]
[Fri Apr 03 00:38:15.548373 2026] [:error] [pid 25035:tid 25461] [client 158.158.117.24:20713] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/system_log.php"] [unique_id "ac6bdxhR292toNOkLqGRBQAAAJM"]
[Fri Apr 03 00:38:15.838060 2026] [:error] [pid 25470:tid 25495] [client 4.232.187.184:21445] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "ac6bd3hROcck6_9HYyjZdQAAANc"]
[Fri Apr 03 00:38:15.954500 2026] [:error] [pid 25018:tid 25437] [client 40.89.133.150:42652] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zwso.php"] [unique_id "ac6bd3upR6lXnAUzFGraVQAAAFg"]
[Fri Apr 03 00:38:16.037331 2026] [:error] [pid 25018:tid 25434] [client 158.158.117.24:21391] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/ssd/sallu.php"] [unique_id "ac6beHupR6lXnAUzFGraVgAAAFU"]
[Fri Apr 03 00:38:16.383630 2026] [:error] [pid 25018:tid 25429] [client 4.232.187.184:21439] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class.php"] [unique_id "ac6beHupR6lXnAUzFGraWAAAAFA"]
[Fri Apr 03 00:38:16.433881 2026] [:error] [pid 25035:tid 25445] [client 40.89.133.150:42183] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zwso.php"] [unique_id "ac6beBhR292toNOkLqGRCQAAAIM"]
[Fri Apr 03 00:38:16.676854 2026] [:error] [pid 25035:tid 25453] [client 158.158.117.24:21071] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/ssd/sallu.php"] [unique_id "ac6beBhR292toNOkLqGRDAAAAIs"]
[Fri Apr 03 00:38:16.852268 2026] [:error] [pid 25035:tid 25451] [client 4.232.187.184:21381] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class.php"] [unique_id "ac6beBhR292toNOkLqGRDQAAAIk"]
[Fri Apr 03 00:38:16.939680 2026] [:error] [pid 25010:tid 25371] [client 40.89.133.150:42707] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zwso.php"] [unique_id "ac6beI_KcjFQF5TuqTV6nQAAABY"]
[Fri Apr 03 00:38:17.174078 2026] [:error] [pid 25470:tid 25483] [client 158.158.117.24:21058] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/ssd/sallu.php"] [unique_id "ac6beXhROcck6_9HYyjZeAAAAMs"]
[Fri Apr 03 00:38:17.440758 2026] [:error] [pid 25035:tid 25459] [client 40.89.133.150:40042] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/alfa.php"] [unique_id "ac6beRhR292toNOkLqGREAAAAJE"]
[Fri Apr 03 00:38:17.531828 2026] [:error] [pid 25470:tid 25488] [client 4.232.187.184:21114] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class.php"] [unique_id "ac6beXhROcck6_9HYyjZfAAAANA"]
[Fri Apr 03 00:38:17.678180 2026] [:error] [pid 25010:tid 25370] [client 158.158.117.24:21457] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/ssd/sallu.php"] [unique_id "ac6beY_KcjFQF5TuqTV6oAAAABU"]
[Fri Apr 03 00:38:18.081261 2026] [:error] [pid 25018:tid 25427] [client 40.89.133.150:42684] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/alfa.php"] [unique_id "ac6benupR6lXnAUzFGraXQAAAE4"]
[Fri Apr 03 00:38:18.084819 2026] [:error] [pid 25470:tid 25479] [client 4.232.187.184:21117] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class.php"] [unique_id "ac6benhROcck6_9HYyjZfwAAAMc"]
[Fri Apr 03 00:38:18.164835 2026] [:error] [pid 25470:tid 25472] [client 158.158.117.24:21456] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a2.php"] [unique_id "ac6benhROcck6_9HYyjZhAAAAMA"]
[Fri Apr 03 00:38:18.594577 2026] [:error] [pid 25470:tid 25483] [client 4.232.187.184:21411] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bless11.php"] [unique_id "ac6benhROcck6_9HYyjZhQAAAMs"]
[Fri Apr 03 00:38:18.634367 2026] [:error] [pid 25470:tid 25496] [client 40.89.133.150:43454] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/alfa.php"] [unique_id "ac6benhROcck6_9HYyjZhgAAANg"]
[Fri Apr 03 00:38:18.650767 2026] [:error] [pid 25470:tid 25473] [client 158.158.117.24:21102] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a2.php"] [unique_id "ac6benhROcck6_9HYyjZhwAAAME"]
[Fri Apr 03 00:38:19.073686 2026] [:error] [pid 25010:tid 25348] [client 4.232.187.184:21085] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bless11.php"] [unique_id "ac6be4_KcjFQF5TuqTV6qAAAAAE"]
[Fri Apr 03 00:38:19.136516 2026] [:error] [pid 25010:tid 25373] [client 158.158.117.24:20993] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a2.php"] [unique_id "ac6be4_KcjFQF5TuqTV6qQAAABg"]
[Fri Apr 03 00:38:19.287825 2026] [:error] [pid 25010:tid 25365] [client 40.89.133.150:43478] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/alfa.php"] [unique_id "ac6be4_KcjFQF5TuqTV6rAAAABA"]
[Fri Apr 03 00:38:19.652843 2026] [:error] [pid 25018:tid 25412] [client 158.158.117.24:20292] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a2.php"] [unique_id "ac6be3upR6lXnAUzFGraZAAAAEE"]
[Fri Apr 03 00:38:19.667600 2026] [:error] [pid 25010:tid 25352] [client 4.232.187.184:21473] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bless11.php"] [unique_id "ac6be4_KcjFQF5TuqTV6rwAAAAQ"]
[Fri Apr 03 00:38:19.835886 2026] [:error] [pid 25018:tid 25428] [client 40.89.133.150:42729] [client 40.89.133.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dwelectservices.com.au"] [uri "/fm.php"] [unique_id "ac6be3upR6lXnAUzFGraZgAAAE8"]
[Fri Apr 03 00:38:20.191824 2026] [:error] [pid 25010:tid 25363] [client 4.232.187.184:21443] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bless11.php"] [unique_id "ac6bfI_KcjFQF5TuqTV6sgAAAA4"]
[Fri Apr 03 00:38:20.203564 2026] [:error] [pid 25010:tid 25355] [client 158.158.117.24:21075] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/classwithtostring.php"] [unique_id "ac6bfI_KcjFQF5TuqTV6swAAAAc"]
[Fri Apr 03 00:38:20.518860 2026] [:error] [pid 25035:tid 25466] [client 40.89.133.150:42693] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ahax.php"] [unique_id "ac6bfBhR292toNOkLqGREgAAAJg"]
[Fri Apr 03 00:38:20.698579 2026] [:error] [pid 25010:tid 25357] [client 158.158.117.24:21082] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/classwithtostring.php"] [unique_id "ac6bfI_KcjFQF5TuqTV6tAAAAAk"]
[Fri Apr 03 00:38:20.851066 2026] [:error] [pid 25010:tid 25354] [client 4.232.187.184:21440] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/o.php"] [unique_id "ac6bfI_KcjFQF5TuqTV6tQAAAAY"]
[Fri Apr 03 00:38:21.132823 2026] [:error] [pid 25035:tid 25461] [client 40.89.133.150:43417] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ahax.php"] [unique_id "ac6bfRhR292toNOkLqGREwAAAJM"]
[Fri Apr 03 00:38:21.180484 2026] [:error] [pid 25035:tid 25460] [client 158.158.117.24:21434] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/classwithtostring.php"] [unique_id "ac6bfRhR292toNOkLqGRFAAAAJI"]
[Fri Apr 03 00:38:21.399756 2026] [:error] [pid 25018:tid 25412] [client 4.232.187.184:20309] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/o.php"] [unique_id "ac6bfXupR6lXnAUzFGracQAAAEE"]
[Fri Apr 03 00:38:21.668979 2026] [:error] [pid 25035:tid 25462] [client 158.158.117.24:21452] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/classwithtostring.php"] [unique_id "ac6bfRhR292toNOkLqGRFQAAAJQ"]
[Fri Apr 03 00:38:21.703669 2026] [:error] [pid 25018:tid 25437] [client 40.89.133.150:43481] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ahax.php"] [unique_id "ac6bfXupR6lXnAUzFGracwAAAFg"]
[Fri Apr 03 00:38:21.873646 2026] [:error] [pid 25035:tid 25464] [client 4.232.187.184:21015] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/o.php"] [unique_id "ac6bfRhR292toNOkLqGRFgAAAJY"]
[Fri Apr 03 00:38:22.153592 2026] [:error] [pid 25035:tid 25448] [client 158.158.117.24:21411] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/css.php"] [unique_id "ac6bfhhR292toNOkLqGRGAAAAIY"]
[Fri Apr 03 00:38:22.354326 2026] [:error] [pid 25470:tid 25487] [client 40.89.133.150:42728] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ahax.php"] [unique_id "ac6bfnhROcck6_9HYyjZkgAAAM8"]
[Fri Apr 03 00:38:22.368158 2026] [:error] [pid 25470:tid 25480] [client 4.232.187.184:21486] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/o.php"] [unique_id "ac6bfnhROcck6_9HYyjZkwAAAMg"]
[Fri Apr 03 00:38:22.844600 2026] [:error] [pid 25010:tid 25361] [client 40.89.133.150:43462] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/g.php"] [unique_id "ac6bfo_KcjFQF5TuqTV6vwAAAAw"]
[Fri Apr 03 00:38:22.896887 2026] [:error] [pid 25010:tid 25354] [client 4.232.187.184:21477] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a.php"] [unique_id "ac6bfo_KcjFQF5TuqTV6wAAAAAY"]
[Fri Apr 03 00:38:23.349127 2026] [:error] [pid 25010:tid 25347] [client 40.89.133.150:42717] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/g.php"] [unique_id "ac6bf4_KcjFQF5TuqTV6xQAAAAA"]
[Fri Apr 03 00:38:23.397431 2026] [:error] [pid 25035:tid 25446] [client 4.232.187.184:21069] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a.php"] [unique_id "ac6bfxhR292toNOkLqGRHwAAAIQ"]
[Fri Apr 03 00:38:23.836996 2026] [:error] [pid 25035:tid 25454] [client 40.89.133.150:42624] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/g.php"] [unique_id "ac6bfxhR292toNOkLqGRJQAAAIw"]
[Fri Apr 03 00:38:23.861354 2026] [:error] [pid 25035:tid 25457] [client 4.232.187.184:21383] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a.php"] [unique_id "ac6bfxhR292toNOkLqGRJgAAAI8"]
[Fri Apr 03 00:38:23.928831 2026] [:error] [pid 25035:tid 25442] [client 158.158.117.24:20294] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/css.php"] [unique_id "ac6bfxhR292toNOkLqGRJwAAAIA"]
[Fri Apr 03 00:38:24.335571 2026] [:error] [pid 25035:tid 25463] [client 40.89.133.150:42629] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/g.php"] [unique_id "ac6bgBhR292toNOkLqGRLAAAAJU"]
[Fri Apr 03 00:38:24.381293 2026] [:error] [pid 25035:tid 25444] [client 4.232.187.184:21460] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a.php"] [unique_id "ac6bgBhR292toNOkLqGRLgAAAII"]
[Fri Apr 03 00:38:24.414338 2026] [:error] [pid 25035:tid 25447] [client 158.158.117.24:21089] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/css.php"] [unique_id "ac6bgBhR292toNOkLqGRLwAAAIU"]
[Fri Apr 03 00:38:24.857081 2026] [:error] [pid 25018:tid 25419] [client 4.232.187.184:21467] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/system_log.php"] [unique_id "ac6bgHupR6lXnAUzFGraeAAAAEY"]
[Fri Apr 03 00:38:24.986648 2026] [:error] [pid 25470:tid 25482] [client 158.158.117.24:21436] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/css.php"] [unique_id "ac6bgHhROcck6_9HYyjZlwAAAMo"]
[Fri Apr 03 00:38:25.028294 2026] [:error] [pid 25010:tid 25363] [client 40.89.133.150:42655] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/0x.php"] [unique_id "ac6bgY_KcjFQF5TuqTV6yQAAAA4"]
[Fri Apr 03 00:38:25.502932 2026] [:error] [pid 25470:tid 25479] [client 40.89.133.150:43468] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/0x.php"] [unique_id "ac6bgXhROcck6_9HYyjZnAAAAMc"]
[Fri Apr 03 00:38:25.525935 2026] [:error] [pid 25470:tid 25477] [client 4.232.187.184:21103] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/system_log.php"] [unique_id "ac6bgXhROcck6_9HYyjZnQAAAMU"]
[Fri Apr 03 00:38:25.609415 2026] [:error] [pid 25470:tid 25484] [client 158.158.117.24:21417] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file32.php"] [unique_id "ac6bgXhROcck6_9HYyjZngAAAMw"]
[Fri Apr 03 00:38:25.996219 2026] [:error] [pid 25470:tid 25472] [client 40.89.133.150:43410] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/0x.php"] [unique_id "ac6bgXhROcck6_9HYyjZogAAAMA"]
[Fri Apr 03 00:38:26.008657 2026] [:error] [pid 25470:tid 25488] [client 4.232.187.184:21423] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/system_log.php"] [unique_id "ac6bgnhROcck6_9HYyjZowAAANA"]
[Fri Apr 03 00:38:26.213528 2026] [:error] [pid 25470:tid 25476] [client 158.158.117.24:21070] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file32.php"] [unique_id "ac6bgnhROcck6_9HYyjZpgAAAMQ"]
[Fri Apr 03 00:38:26.565886 2026] [:error] [pid 25035:tid 25456] [client 4.232.187.184:21119] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/system_log.php"] [unique_id "ac6bghhR292toNOkLqGRNAAAAI4"]
[Fri Apr 03 00:38:26.581782 2026] [:error] [pid 25470:tid 25494] [client 40.89.133.150:43484] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/0x.php"] [unique_id "ac6bgnhROcck6_9HYyjZqQAAANY"]
[Fri Apr 03 00:38:26.792197 2026] [:error] [pid 25470:tid 25477] [client 158.158.117.24:21088] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file32.php"] [unique_id "ac6bgnhROcck6_9HYyjZrQAAAMU"]
[Fri Apr 03 00:38:27.219293 2026] [:error] [pid 25470:tid 25488] [client 40.89.133.150:42710] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/app/webroot/filemanager.php"] [unique_id "ac6bg3hROcck6_9HYyjZswAAANA"]
[Fri Apr 03 00:38:27.403041 2026] [:error] [pid 25035:tid 25462] [client 158.158.117.24:20620] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file32.php"] [unique_id "ac6bgxhR292toNOkLqGRNQAAAJQ"]
[Fri Apr 03 00:38:27.403427 2026] [:error] [pid 25470:tid 25483] [client 4.232.187.184:20667] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/ssd/sallu.php"] [unique_id "ac6bg3hROcck6_9HYyjZtQAAAMs"]
[Fri Apr 03 00:38:27.872299 2026] [:error] [pid 25470:tid 25475] [client 40.89.133.150:42718] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/app/webroot/filemanager.php"] [unique_id "ac6bg3hROcck6_9HYyjZuQAAAMM"]
[Fri Apr 03 00:38:27.912614 2026] [:error] [pid 25035:tid 25443] [client 4.232.187.184:21455] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/ssd/sallu.php"] [unique_id "ac6bgxhR292toNOkLqGRNgAAAIE"]
[Fri Apr 03 00:38:28.081611 2026] [:error] [pid 25018:tid 25420] [client 158.158.117.24:21388] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nope.php"] [unique_id "ac6bhHupR6lXnAUzFGraeQAAAEc"]
[Fri Apr 03 00:38:28.444326 2026] [:error] [pid 25018:tid 25436] [client 40.89.133.150:42739] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/app/webroot/filemanager.php"] [unique_id "ac6bhHupR6lXnAUzFGraewAAAFc"]
[Fri Apr 03 00:38:28.468821 2026] [:error] [pid 25018:tid 25425] [client 4.232.187.184:21035] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/ssd/sallu.php"] [unique_id "ac6bhHupR6lXnAUzFGrafAAAAEw"]
[Fri Apr 03 00:38:28.721058 2026] [:error] [pid 25018:tid 25423] [client 158.158.117.24:21115] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nope.php"] [unique_id "ac6bhHupR6lXnAUzFGrafgAAAEo"]
[Fri Apr 03 00:38:29.012154 2026] [:error] [pid 25035:tid 25444] [client 40.89.133.150:43413] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/app/webroot/filemanager.php"] [unique_id "ac6bhRhR292toNOkLqGROgAAAII"]
[Fri Apr 03 00:38:29.052329 2026] [:error] [pid 25470:tid 25474] [client 4.232.187.184:21390] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/ssd/sallu.php"] [unique_id "ac6bhXhROcck6_9HYyjZvQAAAMI"]
[Fri Apr 03 00:38:29.199335 2026] [:error] [pid 25470:tid 25481] [client 158.158.117.24:21499] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nope.php"] [unique_id "ac6bhXhROcck6_9HYyjZvwAAAMk"]
[Fri Apr 03 00:38:29.597822 2026] [:error] [pid 25470:tid 25492] [client 40.89.133.150:43402] [client 40.89.133.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/IXR/about.php"] [unique_id "ac6bhXhROcck6_9HYyjZwQAAANQ"]
[Fri Apr 03 00:38:29.725034 2026] [:error] [pid 25470:tid 25496] [client 4.232.187.184:21469] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a2.php"] [unique_id "ac6bhXhROcck6_9HYyjZxAAAANg"]
[Fri Apr 03 00:38:29.755349 2026] [:error] [pid 25470:tid 25495] [client 158.158.117.24:21027] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nope.php"] [unique_id "ac6bhXhROcck6_9HYyjZxgAAANc"]
[Fri Apr 03 00:38:30.150749 2026] [:error] [pid 25010:tid 25368] [client 40.89.133.150:43426] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/k.php"] [unique_id "ac6bho_KcjFQF5TuqTV61gAAABM"]
[Fri Apr 03 00:38:30.311405 2026] [:error] [pid 25035:tid 25445] [client 158.158.117.24:21390] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/js.php"] [unique_id "ac6bhhhR292toNOkLqGROwAAAIM"]
[Fri Apr 03 00:38:30.341639 2026] [:error] [pid 25018:tid 25433] [client 4.232.187.184:21061] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a2.php"] [unique_id "ac6bhnupR6lXnAUzFGragAAAAFQ"]
[Fri Apr 03 00:38:30.643204 2026] [:error] [pid 25470:tid 25482] [client 40.89.133.150:42731] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/k.php"] [unique_id "ac6bhnhROcck6_9HYyjZygAAAMo"]
[Fri Apr 03 00:38:30.794612 2026] [:error] [pid 25470:tid 25484] [client 158.158.117.24:21401] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/js.php"] [unique_id "ac6bhnhROcck6_9HYyjZywAAAMw"]
[Fri Apr 03 00:38:30.951965 2026] [:error] [pid 25470:tid 25491] [client 4.232.187.184:21400] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a2.php"] [unique_id "ac6bhnhROcck6_9HYyjZzQAAANM"]
[Fri Apr 03 00:38:31.149612 2026] [:error] [pid 25035:tid 25454] [client 40.89.133.150:43393] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/k.php"] [unique_id "ac6bhxhR292toNOkLqGRPwAAAIw"]
[Fri Apr 03 00:38:31.352394 2026] [:error] [pid 25470:tid 25488] [client 158.158.117.24:20996] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/js.php"] [unique_id "ac6bh3hROcck6_9HYyjZzgAAANA"]
[Fri Apr 03 00:38:31.530643 2026] [:error] [pid 25010:tid 25354] [client 4.232.187.184:21503] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a2.php"] [unique_id "ac6bh4_KcjFQF5TuqTV62wAAAAY"]
[Fri Apr 03 00:38:31.695609 2026] [:error] [pid 25010:tid 25367] [client 40.89.133.150:42627] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/k.php"] [unique_id "ac6bh4_KcjFQF5TuqTV63QAAABI"]
[Fri Apr 03 00:38:32.239192 2026] [:error] [pid 25010:tid 25368] [client 40.89.133.150:41251] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/flower.php"] [unique_id "ac6biI_KcjFQF5TuqTV64wAAABM"]
[Fri Apr 03 00:38:32.352249 2026] [:error] [pid 25010:tid 25371] [client 158.158.117.24:21492] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/js.php"] [unique_id "ac6biI_KcjFQF5TuqTV65AAAABY"]
[Fri Apr 03 00:38:32.519884 2026] [:error] [pid 25035:tid 25448] [client 4.232.187.184:21437] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/classwithtostring.php"] [unique_id "ac6biBhR292toNOkLqGRQQAAAIY"]
[Fri Apr 03 00:38:32.725441 2026] [:error] [pid 25018:tid 25432] [client 40.89.133.150:42697] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/flower.php"] [unique_id "ac6biHupR6lXnAUzFGraggAAAFM"]
[Fri Apr 03 00:38:32.864931 2026] [:error] [pid 25035:tid 25466] [client 158.158.117.24:21097] [client 158.158.117.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "ac6biBhR292toNOkLqGRRAAAAJg"]
[Fri Apr 03 00:38:33.082596 2026] [:error] [pid 25018:tid 25428] [client 4.232.187.184:21501] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/classwithtostring.php"] [unique_id "ac6biXupR6lXnAUzFGrahAAAAE8"]
[Fri Apr 03 00:38:33.262581 2026] [:error] [pid 25010:tid 25367] [client 40.89.133.150:42640] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/flower.php"] [unique_id "ac6biY_KcjFQF5TuqTV67gAAABI"]
[Fri Apr 03 00:38:33.434842 2026] [:error] [pid 25018:tid 25437] [client 158.158.117.24:21408] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/num.php"] [unique_id "ac6biXupR6lXnAUzFGrahgAAAFg"]
[Fri Apr 03 00:38:33.680392 2026] [:error] [pid 25470:tid 25472] [client 4.232.187.184:21448] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/classwithtostring.php"] [unique_id "ac6biXhROcck6_9HYyjZ1QAAAMA"]
[Fri Apr 03 00:38:33.745771 2026] [:error] [pid 25470:tid 25479] [client 40.89.133.150:43459] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/flower.php"] [unique_id "ac6biXhROcck6_9HYyjZ1gAAAMc"]
[Fri Apr 03 00:38:34.171999 2026] [:error] [pid 25470:tid 25481] [client 4.232.187.184:21495] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/classwithtostring.php"] [unique_id "ac6binhROcck6_9HYyjZ2wAAAMk"]
[Fri Apr 03 00:38:34.223228 2026] [:error] [pid 25470:tid 25489] [client 40.89.133.150:42648] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/public/filemanager.php"] [unique_id "ac6binhROcck6_9HYyjZ3AAAANE"]
[Fri Apr 03 00:38:34.276139 2026] [:error] [pid 25035:tid 25444] [client 158.158.117.24:21486] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/num.php"] [unique_id "ac6bihhR292toNOkLqGRWAAAAII"]
[Fri Apr 03 00:38:34.697199 2026] [:error] [pid 25035:tid 25451] [client 40.89.133.150:43493] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/public/filemanager.php"] [unique_id "ac6bihhR292toNOkLqGRWwAAAIk"]
[Fri Apr 03 00:38:34.799616 2026] [:error] [pid 25035:tid 25465] [client 4.232.187.184:21446] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/css.php"] [unique_id "ac6bihhR292toNOkLqGRXQAAAJc"]
[Fri Apr 03 00:38:35.190207 2026] [:error] [pid 25470:tid 25473] [client 40.89.133.150:43425] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/public/filemanager.php"] [unique_id "ac6bi3hROcck6_9HYyjZ4AAAAME"]
[Fri Apr 03 00:38:35.232119 2026] [:error] [pid 25010:tid 25363] [client 158.158.117.24:21379] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/num.php"] [unique_id "ac6bi4_KcjFQF5TuqTV6_AAAAA4"]
[Fri Apr 03 00:38:35.268072 2026] [:error] [pid 25470:tid 25474] [client 4.232.187.184:20694] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/css.php"] [unique_id "ac6bi3hROcck6_9HYyjZ4gAAAMI"]
[Fri Apr 03 00:38:35.664875 2026] [:error] [pid 25470:tid 25494] [client 40.89.133.150:43439] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/public/filemanager.php"] [unique_id "ac6bi3hROcck6_9HYyjZ4wAAANY"]
[Fri Apr 03 00:38:35.808159 2026] [:error] [pid 25035:tid 25442] [client 158.158.117.24:21838] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/num.php"] [unique_id "ac6bixhR292toNOkLqGRYwAAAIA"]
[Fri Apr 03 00:38:35.810000 2026] [:error] [pid 25470:tid 25495] [client 4.232.187.184:21494] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/css.php"] [unique_id "ac6bi3hROcck6_9HYyjZ5AAAANc"]
[Fri Apr 03 00:38:36.136601 2026] [:error] [pid 25035:tid 25452] [client 40.89.133.150:42690] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/voga/sallu.php"] [unique_id "ac6bjBhR292toNOkLqGRZQAAAIo"]
[Fri Apr 03 00:38:36.306730 2026] [:error] [pid 25035:tid 25457] [client 158.158.117.24:20675] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mah.php"] [unique_id "ac6bjBhR292toNOkLqGRZgAAAI8"]
[Fri Apr 03 00:38:36.354895 2026] [:error] [pid 25035:tid 25450] [client 4.232.187.184:21480] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/css.php"] [unique_id "ac6bjBhR292toNOkLqGRZwAAAIg"]
[Fri Apr 03 00:38:36.616492 2026] [:error] [pid 25035:tid 25454] [client 40.89.133.150:42720] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/voga/sallu.php"] [unique_id "ac6bjBhR292toNOkLqGRaAAAAIw"]
[Fri Apr 03 00:38:36.833842 2026] [:error] [pid 25470:tid 25482] [client 158.158.117.24:21409] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mah.php"] [unique_id "ac6bjHhROcck6_9HYyjZ6QAAAMo"]
[Fri Apr 03 00:38:36.886598 2026] [:error] [pid 25010:tid 25362] [client 4.232.187.184:21418] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file32.php"] [unique_id "ac6bjI_KcjFQF5TuqTV7BQAAAA0"]
[Fri Apr 03 00:38:37.088496 2026] [:error] [pid 25035:tid 25444] [client 40.89.133.150:43421] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/voga/sallu.php"] [unique_id "ac6bjRhR292toNOkLqGRagAAAII"]
[Fri Apr 03 00:38:37.420555 2026] [:error] [pid 25470:tid 25491] [client 4.232.187.184:21451] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file32.php"] [unique_id "ac6bjXhROcck6_9HYyjZ7AAAANM"]
[Fri Apr 03 00:38:37.564856 2026] [:error] [pid 25010:tid 25370] [client 40.89.133.150:43451] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/voga/sallu.php"] [unique_id "ac6bjY_KcjFQF5TuqTV7CAAAABU"]
[Fri Apr 03 00:38:37.930988 2026] [:error] [pid 25470:tid 25488] [client 4.232.187.184:21431] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file32.php"] [unique_id "ac6bjXhROcck6_9HYyjZ9QAAANA"]
[Fri Apr 03 00:38:38.041402 2026] [:error] [pid 25035:tid 25455] [client 40.89.133.150:43499] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dlu.php"] [unique_id "ac6bjhhR292toNOkLqGRcQAAAI0"]
[Fri Apr 03 00:38:38.087019 2026] [:error] [pid 25035:tid 25452] [client 158.158.117.24:21771] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mah.php"] [unique_id "ac6bjhhR292toNOkLqGRcwAAAIo"]
[Fri Apr 03 00:38:38.403049 2026] [:error] [pid 25018:tid 25436] [client 4.232.187.184:21450] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file32.php"] [unique_id "ac6bjnupR6lXnAUzFGraiAAAAFc"]
[Fri Apr 03 00:38:38.520981 2026] [:error] [pid 25035:tid 25450] [client 40.89.133.150:42730] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dlu.php"] [unique_id "ac6bjhhR292toNOkLqGRdwAAAIg"]
[Fri Apr 03 00:38:38.603290 2026] [:error] [pid 25035:tid 25466] [client 158.158.117.24:21848] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mah.php"] [unique_id "ac6bjhhR292toNOkLqGReQAAAJg"]
[Fri Apr 03 00:38:38.995841 2026] [:error] [pid 25018:tid 25423] [client 40.89.133.150:43432] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dlu.php"] [unique_id "ac6bjnupR6lXnAUzFGraiQAAAEo"]
[Fri Apr 03 00:38:39.215281 2026] [:error] [pid 25470:tid 25480] [client 158.158.117.24:21488] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-good.php"] [unique_id "ac6bj3hROcck6_9HYyjZ-AAAAMg"]
[Fri Apr 03 00:38:39.498246 2026] [:error] [pid 25035:tid 25448] [client 40.89.133.150:43441] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dlu.php"] [unique_id "ac6bjxhR292toNOkLqGRhAAAAIY"]
[Fri Apr 03 00:38:39.537432 2026] [:error] [pid 25035:tid 25443] [client 4.232.187.184:21096] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nope.php"] [unique_id "ac6bjxhR292toNOkLqGRhQAAAIE"]
[Fri Apr 03 00:38:39.712519 2026] [:error] [pid 25018:tid 25433] [client 158.158.117.24:21823] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-good.php"] [unique_id "ac6bj3upR6lXnAUzFGrajAAAAFQ"]
[Fri Apr 03 00:38:39.990189 2026] [:error] [pid 25035:tid 25447] [client 40.89.133.150:41295] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/555.php"] [unique_id "ac6bjxhR292toNOkLqGRiwAAAIU"]
[Fri Apr 03 00:38:40.117488 2026] [:error] [pid 25035:tid 25444] [client 4.232.187.184:21386] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nope.php"] [unique_id "ac6bkBhR292toNOkLqGRjAAAAII"]
[Fri Apr 03 00:38:40.192725 2026] [:error] [pid 25035:tid 25461] [client 158.158.117.24:21410] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-good.php"] [unique_id "ac6bkBhR292toNOkLqGRjgAAAJM"]
[Fri Apr 03 00:38:40.461859 2026] [:error] [pid 25035:tid 25463] [client 40.89.133.150:43490] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/555.php"] [unique_id "ac6bkBhR292toNOkLqGRkQAAAJU"]
[Fri Apr 03 00:38:40.655753 2026] [:error] [pid 25470:tid 25496] [client 4.232.187.184:21056] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nope.php"] [unique_id "ac6bkHhROcck6_9HYyjaAgAAANg"]
[Fri Apr 03 00:38:40.733735 2026] [:error] [pid 25018:tid 25417] [client 158.158.117.24:21418] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-good.php"] [unique_id "ac6bkHupR6lXnAUzFGrajwAAAEQ"]
[Fri Apr 03 00:38:41.044181 2026] [:error] [pid 25018:tid 25432] [client 40.89.133.150:43414] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/555.php"] [unique_id "ac6bkXupR6lXnAUzFGrakgAAAFM"]
[Fri Apr 03 00:38:41.176889 2026] [:error] [pid 25018:tid 25437] [client 4.232.187.184:21485] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nope.php"] [unique_id "ac6bkXupR6lXnAUzFGrakwAAAFg"]
[Fri Apr 03 00:38:41.454323 2026] [:error] [pid 25035:tid 25454] [client 158.158.117.24:21885] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/atomlib.php"] [unique_id "ac6bkRhR292toNOkLqGRmgAAAIw"]
[Fri Apr 03 00:38:41.524933 2026] [:error] [pid 25035:tid 25444] [client 40.89.133.150:42626] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/555.php"] [unique_id "ac6bkRhR292toNOkLqGRnQAAAII"]
[Fri Apr 03 00:38:41.697532 2026] [:error] [pid 25018:tid 25435] [client 4.232.187.184:21458] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/js.php"] [unique_id "ac6bkXupR6lXnAUzFGralAAAAFY"]
[Fri Apr 03 00:38:42.050895 2026] [:error] [pid 25470:tid 25494] [client 158.158.117.24:21847] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/atomlib.php"] [unique_id "ac6bknhROcck6_9HYyjaCQAAANY"]
[Fri Apr 03 00:38:42.152106 2026] [:error] [pid 25470:tid 25486] [client 40.89.133.150:43511] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-mail.php"] [unique_id "ac6bknhROcck6_9HYyjaCwAAAM4"]
[Fri Apr 03 00:38:42.209663 2026] [:error] [pid 25470:tid 25485] [client 4.232.187.184:20662] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/js.php"] [unique_id "ac6bknhROcck6_9HYyjaDQAAAM0"]
[Fri Apr 03 00:38:42.552579 2026] [:error] [pid 25470:tid 25477] [client 158.158.117.24:21799] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/atomlib.php"] [unique_id "ac6bknhROcck6_9HYyjaEwAAAMU"]
[Fri Apr 03 00:38:42.661448 2026] [:error] [pid 25035:tid 25457] [client 40.89.133.150:43419] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-mail.php"] [unique_id "ac6bkhhR292toNOkLqGRpgAAAI8"]
[Fri Apr 03 00:38:42.745667 2026] [:error] [pid 25035:tid 25445] [client 4.232.187.184:21456] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/js.php"] [unique_id "ac6bkhhR292toNOkLqGRpwAAAIM"]
[Fri Apr 03 00:38:43.147743 2026] [:error] [pid 25018:tid 25421] [client 158.158.117.24:21464] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/atomlib.php"] [unique_id "ac6bk3upR6lXnAUzFGramAAAAEg"]
[Fri Apr 03 00:38:43.163365 2026] [:error] [pid 25018:tid 25420] [client 40.89.133.150:43466] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-mail.php"] [unique_id "ac6bk3upR6lXnAUzFGramQAAAEc"]
[Fri Apr 03 00:38:43.369428 2026] [:error] [pid 25035:tid 25462] [client 4.232.187.184:21016] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/js.php"] [unique_id "ac6bkxhR292toNOkLqGRrAAAAJQ"]
[Fri Apr 03 00:38:43.702365 2026] [:error] [pid 25010:tid 25358] [client 40.89.133.150:41270] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-mail.php"] [unique_id "ac6bk4_KcjFQF5TuqTV7FAAAAAo"]
[Fri Apr 03 00:38:43.850427 2026] [:error] [pid 25018:tid 25429] [client 4.232.187.184:21435] [client 4.232.187.184] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "ac6bk3upR6lXnAUzFGranAAAAFA"]
[Fri Apr 03 00:38:44.069555 2026] [:error] [pid 25470:tid 25472] [client 158.158.117.24:21792] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wfile.php"] [unique_id "ac6blHhROcck6_9HYyjaHAAAAMA"]
[Fri Apr 03 00:38:44.300443 2026] [:error] [pid 25470:tid 25496] [client 40.89.133.150:42709] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/403.php"] [unique_id "ac6blHhROcck6_9HYyjaHQAAANg"]
[Fri Apr 03 00:38:44.319755 2026] [:error] [pid 25035:tid 25455] [client 4.232.187.184:21058] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/num.php"] [unique_id "ac6blBhR292toNOkLqGRsgAAAI0"]
[Fri Apr 03 00:38:44.560447 2026] [:error] [pid 25470:tid 25474] [client 158.158.117.24:21463] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wfile.php"] [unique_id "ac6blHhROcck6_9HYyjaIAAAAMI"]
[Fri Apr 03 00:38:44.795715 2026] [:error] [pid 25470:tid 25473] [client 40.89.133.150:42660] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/403.php"] [unique_id "ac6blHhROcck6_9HYyjaIgAAAME"]
[Fri Apr 03 00:38:44.854737 2026] [:error] [pid 25470:tid 25485] [client 4.232.187.184:21081] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/num.php"] [unique_id "ac6blHhROcck6_9HYyjaIwAAAM0"]
[Fri Apr 03 00:38:45.055574 2026] [:error] [pid 25470:tid 25472] [client 158.158.117.24:21884] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wfile.php"] [unique_id "ac6blXhROcck6_9HYyjaJgAAAMA"]
[Fri Apr 03 00:38:45.359073 2026] [:error] [pid 25010:tid 25353] [client 40.89.133.150:39966] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/403.php"] [unique_id "ac6blY_KcjFQF5TuqTV7GQAAAAU"]
[Fri Apr 03 00:38:45.549021 2026] [:error] [pid 25035:tid 25453] [client 158.158.117.24:21825] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wfile.php"] [unique_id "ac6blRhR292toNOkLqGRvgAAAIs"]
[Fri Apr 03 00:38:45.613743 2026] [:error] [pid 25035:tid 25456] [client 4.232.187.184:20683] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/num.php"] [unique_id "ac6blRhR292toNOkLqGRvwAAAI4"]
[Fri Apr 03 00:38:45.842909 2026] [:error] [pid 25035:tid 25459] [client 40.89.133.150:42646] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/403.php"] [unique_id "ac6blRhR292toNOkLqGRwQAAAJE"]
[Fri Apr 03 00:38:46.055615 2026] [:error] [pid 25035:tid 25457] [client 158.158.117.24:21453] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ok.php"] [unique_id "ac6blhhR292toNOkLqGRxAAAAI8"]
[Fri Apr 03 00:38:46.157480 2026] [:error] [pid 25010:tid 25356] [client 4.232.187.184:21089] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mah.php"] [unique_id "ac6blo_KcjFQF5TuqTV7HwAAAAg"]
[Fri Apr 03 00:38:46.403868 2026] [:error] [pid 25010:tid 25371] [client 40.89.133.150:42741] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tox.php"] [unique_id "ac6blo_KcjFQF5TuqTV7IAAAABY"]
[Fri Apr 03 00:38:46.542890 2026] [:error] [pid 25470:tid 25490] [client 158.158.117.24:21855] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ok.php"] [unique_id "ac6blnhROcck6_9HYyjaLAAAANI"]
[Fri Apr 03 00:38:46.781599 2026] [:error] [pid 25035:tid 25449] [client 4.232.187.184:21428] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mah.php"] [unique_id "ac6blhhR292toNOkLqGRygAAAIc"]
[Fri Apr 03 00:38:46.881630 2026] [:error] [pid 25035:tid 25445] [client 40.89.133.150:42712] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tox.php"] [unique_id "ac6blhhR292toNOkLqGRzAAAAIM"]
[Fri Apr 03 00:38:47.059248 2026] [:error] [pid 25018:tid 25418] [client 158.158.117.24:21777] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ok.php"] [unique_id "ac6bl3upR6lXnAUzFGranwAAAEU"]
[Fri Apr 03 00:38:47.367062 2026] [:error] [pid 25018:tid 25437] [client 4.232.187.184:21482] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mah.php"] [unique_id "ac6bl3upR6lXnAUzFGraoQAAAFg"]
[Fri Apr 03 00:38:47.515664 2026] [:error] [pid 25035:tid 25455] [client 40.89.133.150:42128] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tox.php"] [unique_id "ac6blxhR292toNOkLqGR0gAAAI0"]
[Fri Apr 03 00:38:47.547660 2026] [:error] [pid 25470:tid 25485] [client 158.158.117.24:21779] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ok.php"] [unique_id "ac6bl3hROcck6_9HYyjaMAAAAM0"]
[Fri Apr 03 00:38:47.987020 2026] [:error] [pid 25470:tid 25472] [client 40.89.133.150:43438] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tox.php"] [unique_id "ac6bl3hROcck6_9HYyjaMQAAAMA"]
[Fri Apr 03 00:38:48.016443 2026] [:error] [pid 25470:tid 25483] [client 4.232.187.184:21783] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mah.php"] [unique_id "ac6bmHhROcck6_9HYyjaMgAAAMs"]
[Fri Apr 03 00:38:48.053549 2026] [:error] [pid 25018:tid 25420] [client 158.158.117.24:21407] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sid3.php"] [unique_id "ac6bmHupR6lXnAUzFGrapQAAAEc"]
[Fri Apr 03 00:38:48.467608 2026] [:error] [pid 25010:tid 25366] [client 40.89.133.150:40035] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lv.php"] [unique_id "ac6bmI_KcjFQF5TuqTV7KQAAABE"]
[Fri Apr 03 00:38:48.556596 2026] [:error] [pid 25470:tid 25477] [client 158.158.117.24:21489] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sid3.php"] [unique_id "ac6bmHhROcck6_9HYyjaNgAAAMU"]
[Fri Apr 03 00:38:48.585619 2026] [:error] [pid 25470:tid 25491] [client 4.232.187.184:21805] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-good.php"] [unique_id "ac6bmHhROcck6_9HYyjaOAAAANM"]
[Fri Apr 03 00:38:48.958403 2026] [:error] [pid 25035:tid 25451] [client 40.89.133.150:42224] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lv.php"] [unique_id "ac6bmBhR292toNOkLqGR3QAAAIk"]
[Fri Apr 03 00:38:49.102273 2026] [:error] [pid 25035:tid 25445] [client 4.232.187.184:21844] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-good.php"] [unique_id "ac6bmRhR292toNOkLqGR3wAAAIM"]
[Fri Apr 03 00:38:49.126947 2026] [:error] [pid 25470:tid 25485] [client 158.158.117.24:21845] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sid3.php"] [unique_id "ac6bmXhROcck6_9HYyjaOwAAAM0"]
[Fri Apr 03 00:38:49.637966 2026] [:error] [pid 25035:tid 25464] [client 158.158.117.24:21479] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sid3.php"] [unique_id "ac6bmRhR292toNOkLqGR5QAAAJY"]
[Fri Apr 03 00:38:49.670921 2026] [:error] [pid 25035:tid 25442] [client 4.232.187.184:21868] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-good.php"] [unique_id "ac6bmRhR292toNOkLqGR5gAAAIA"]
[Fri Apr 03 00:38:49.725055 2026] [:error] [pid 25470:tid 25480] [client 40.89.133.150:43508] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lv.php"] [unique_id "ac6bmXhROcck6_9HYyjaQAAAAMg"]
[Fri Apr 03 00:38:50.120157 2026] [:error] [pid 25035:tid 25449] [client 158.158.117.24:21469] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/222.php"] [unique_id "ac6bmhhR292toNOkLqGR7AAAAIc"]
[Fri Apr 03 00:38:50.198883 2026] [:error] [pid 25035:tid 25444] [client 40.89.133.150:43460] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lv.php"] [unique_id "ac6bmhhR292toNOkLqGR7wAAAII"]
[Fri Apr 03 00:38:50.242356 2026] [:error] [pid 25035:tid 25459] [client 4.232.187.184:21865] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-good.php"] [unique_id "ac6bmhhR292toNOkLqGR8gAAAJE"]
[Fri Apr 03 00:38:50.625682 2026] [:error] [pid 25018:tid 25433] [client 158.158.117.24:21822] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/222.php"] [unique_id "ac6bmnupR6lXnAUzFGraqgAAAFQ"]
[Fri Apr 03 00:38:50.684799 2026] [:error] [pid 25018:tid 25419] [client 40.89.133.150:43907] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hook.php"] [unique_id "ac6bmnupR6lXnAUzFGraqwAAAEY"]
[Fri Apr 03 00:38:50.734682 2026] [:error] [pid 25470:tid 25487] [client 4.232.187.184:21843] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/atomlib.php"] [unique_id "ac6bmnhROcck6_9HYyjaQwAAAM8"]
[Fri Apr 03 00:38:51.124878 2026] [:error] [pid 25018:tid 25418] [client 158.158.117.24:21503] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/222.php"] [unique_id "ac6bm3upR6lXnAUzFGrarwAAAEU"]
[Fri Apr 03 00:38:51.230098 2026] [:error] [pid 25010:tid 25357] [client 40.89.133.150:44025] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hook.php"] [unique_id "ac6bm4_KcjFQF5TuqTV7KgAAAAk"]
[Fri Apr 03 00:38:51.238127 2026] [:error] [pid 25035:tid 25444] [client 4.232.187.184:21468] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/atomlib.php"] [unique_id "ac6bmxhR292toNOkLqGR_AAAAII"]
[Fri Apr 03 00:38:51.734221 2026] [:error] [pid 25010:tid 25348] [client 40.89.133.150:43467] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hook.php"] [unique_id "ac6bm4_KcjFQF5TuqTV7LgAAAAE"]
[Fri Apr 03 00:38:51.774611 2026] [:error] [pid 25018:tid 25411] [client 4.232.187.184:21476] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/atomlib.php"] [unique_id "ac6bm3upR6lXnAUzFGraswAAAEA"]
[Fri Apr 03 00:38:51.923519 2026] [:error] [pid 25010:tid 25356] [client 158.158.117.24:21773] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/222.php"] [unique_id "ac6bm4_KcjFQF5TuqTV7LwAAAAg"]
[Fri Apr 03 00:38:52.273790 2026] [:error] [pid 25010:tid 25370] [client 4.232.187.184:20292] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/atomlib.php"] [unique_id "ac6bnI_KcjFQF5TuqTV7MwAAABU"]
[Fri Apr 03 00:38:52.354795 2026] [:error] [pid 25470:tid 25475] [client 40.89.133.150:43980] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hook.php"] [unique_id "ac6bnHhROcck6_9HYyjaRwAAAMM"]
[Fri Apr 03 00:38:52.417903 2026] [:error] [pid 25010:tid 25372] [client 158.158.117.24:21057] [client 158.158.117.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dwelectservices.com.au"] [uri "/filemanager.php"] [unique_id "ac6bnI_KcjFQF5TuqTV7NAAAABc"]
[Fri Apr 03 00:38:52.816949 2026] [:error] [pid 25035:tid 25458] [client 4.232.187.184:21787] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wfile.php"] [unique_id "ac6bnBhR292toNOkLqGSBwAAAJA"]
[Fri Apr 03 00:38:52.942355 2026] [proxy_fcgi:error] [pid 25035:tid 25465] [client 158.158.117.24:21813] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 00:38:53.007073 2026] [:error] [pid 25018:tid 25436] [client 40.89.133.150:43982] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/menu.php"] [unique_id "ac6bnXupR6lXnAUzFGratwAAAFc"]
[Fri Apr 03 00:38:53.184875 2026] [proxy_fcgi:error] [pid 25035:tid 25466] [client 158.158.117.24:21813] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 00:38:53.281563 2026] [:error] [pid 25470:tid 25476] [client 4.232.187.184:21790] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wfile.php"] [unique_id "ac6bnXhROcck6_9HYyjaSwAAAMQ"]
[Fri Apr 03 00:38:53.583931 2026] [:error] [pid 25018:tid 25433] [client 40.89.133.150:43968] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/menu.php"] [unique_id "ac6bnXupR6lXnAUzFGrauQAAAFQ"]
[Fri Apr 03 00:38:53.779844 2026] [:error] [pid 25010:tid 25361] [client 4.232.187.184:21496] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wfile.php"] [unique_id "ac6bnY_KcjFQF5TuqTV7NwAAAAw"]
[Fri Apr 03 00:38:53.783373 2026] [proxy_fcgi:error] [pid 25035:tid 25452] [client 158.158.117.24:21813] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 00:38:54.025305 2026] [proxy_fcgi:error] [pid 25035:tid 25453] [client 158.158.117.24:21813] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 00:38:54.127436 2026] [:error] [pid 25010:tid 25367] [client 40.89.133.150:43939] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/menu.php"] [unique_id "ac6bno_KcjFQF5TuqTV7OAAAABI"]
[Fri Apr 03 00:38:54.268752 2026] [proxy_fcgi:error] [pid 25035:tid 25464] [client 158.158.117.24:21813] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 00:38:54.301305 2026] [:error] [pid 25010:tid 25363] [client 4.232.187.184:21881] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wfile.php"] [unique_id "ac6bno_KcjFQF5TuqTV7OQAAAA4"]
[Fri Apr 03 00:38:54.510608 2026] [proxy_fcgi:error] [pid 25035:tid 25448] [client 158.158.117.24:21813] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 00:38:54.763714 2026] [:error] [pid 25470:tid 25493] [client 40.89.133.150:42671] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/menu.php"] [unique_id "ac6bnnhROcck6_9HYyjaVAAAANU"]
[Fri Apr 03 00:38:54.773395 2026] [:error] [pid 25010:tid 25362] [client 4.232.187.184:21392] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ok.php"] [unique_id "ac6bno_KcjFQF5TuqTV7PgAAAA0"]
[Fri Apr 03 00:38:54.998403 2026] [proxy_fcgi:error] [pid 25035:tid 25458] [client 158.158.117.24:21813] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 00:38:55.238845 2026] [proxy_fcgi:error] [pid 25035:tid 25444] [client 158.158.117.24:21813] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 00:38:55.266354 2026] [:error] [pid 25470:tid 25477] [client 4.232.187.184:21470] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ok.php"] [unique_id "ac6bn3hROcck6_9HYyjaXQAAAMU"]
[Fri Apr 03 00:38:55.397858 2026] [:error] [pid 25470:tid 25473] [client 40.89.133.150:43913] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jp.php"] [unique_id "ac6bn3hROcck6_9HYyjaYgAAAME"]
[Fri Apr 03 00:38:55.479325 2026] [proxy_fcgi:error] [pid 25035:tid 25465] [client 158.158.117.24:21813] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 00:38:55.748097 2026] [:error] [pid 25035:tid 25466] [client 158.158.117.24:21813] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f6.php"] [unique_id "ac6bnxhR292toNOkLqGSIQAAAJg"]
[Fri Apr 03 00:38:55.956307 2026] [:error] [pid 25018:tid 25428] [client 4.232.187.184:20722] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ok.php"] [unique_id "ac6bn3upR6lXnAUzFGraxQAAAE8"]
[Fri Apr 03 00:38:56.264167 2026] [:error] [pid 25470:tid 25496] [client 158.158.117.24:21798] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f6.php"] [unique_id "ac6boHhROcck6_9HYyjaagAAANg"]
[Fri Apr 03 00:38:56.615807 2026] [:error] [pid 25470:tid 25472] [client 40.89.133.150:43972] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jp.php"] [unique_id "ac6boHhROcck6_9HYyjabwAAAMA"]
[Fri Apr 03 00:38:56.626004 2026] [:error] [pid 25018:tid 25419] [client 4.232.187.184:21484] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ok.php"] [unique_id "ac6boHupR6lXnAUzFGraygAAAEY"]
[Fri Apr 03 00:38:56.748315 2026] [:error] [pid 25470:tid 25483] [client 158.158.117.24:21872] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f6.php"] [unique_id "ac6boHhROcck6_9HYyjacgAAAMs"]
[Fri Apr 03 00:38:57.112109 2026] [:error] [pid 25035:tid 25457] [client 40.89.133.150:44018] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jp.php"] [unique_id "ac6boRhR292toNOkLqGSIwAAAI8"]
[Fri Apr 03 00:38:57.210114 2026] [:error] [pid 25035:tid 25460] [client 4.232.187.184:21462] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sid3.php"] [unique_id "ac6boRhR292toNOkLqGSJQAAAJI"]
[Fri Apr 03 00:38:57.231000 2026] [:error] [pid 25470:tid 25484] [client 158.158.117.24:20705] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f6.php"] [unique_id "ac6boXhROcck6_9HYyjadgAAAMw"]
[Fri Apr 03 00:38:57.661794 2026] [:error] [pid 25035:tid 25461] [client 40.89.133.150:42689] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jp.php"] [unique_id "ac6boRhR292toNOkLqGSKgAAAJM"]
[Fri Apr 03 00:38:57.685347 2026] [:error] [pid 25470:tid 25495] [client 4.232.187.184:21800] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sid3.php"] [unique_id "ac6boXhROcck6_9HYyjaeAAAANc"]
[Fri Apr 03 00:38:57.718519 2026] [:error] [pid 25470:tid 25496] [client 158.158.117.24:21767] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file.php"] [unique_id "ac6boXhROcck6_9HYyjaeQAAANg"]
[Fri Apr 03 00:38:58.143005 2026] [:error] [pid 25035:tid 25464] [client 40.89.133.150:43917] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/v.php"] [unique_id "ac6bohhR292toNOkLqGSMAAAAJY"]
[Fri Apr 03 00:38:58.191797 2026] [:error] [pid 25035:tid 25442] [client 4.232.187.184:21858] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sid3.php"] [unique_id "ac6bohhR292toNOkLqGSMgAAAIA"]
[Fri Apr 03 00:38:58.202015 2026] [:error] [pid 25035:tid 25448] [client 158.158.117.24:21048] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file.php"] [unique_id "ac6bohhR292toNOkLqGSMwAAAIY"]
[Fri Apr 03 00:38:58.658780 2026] [:error] [pid 25470:tid 25486] [client 4.232.187.184:21416] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sid3.php"] [unique_id "ac6bonhROcck6_9HYyjafwAAAM4"]
[Fri Apr 03 00:38:58.709090 2026] [:error] [pid 25018:tid 25412] [client 158.158.117.24:21864] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file.php"] [unique_id "ac6bonupR6lXnAUzFGrazwAAAEE"]
[Fri Apr 03 00:38:58.816165 2026] [:error] [pid 25010:tid 25363] [client 40.89.133.150:44009] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/v.php"] [unique_id "ac6boo_KcjFQF5TuqTV7RwAAAA4"]
[Fri Apr 03 00:38:59.190123 2026] [:error] [pid 25010:tid 25349] [client 158.158.117.24:21468] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file.php"] [unique_id "ac6bo4_KcjFQF5TuqTV7SgAAAAI"]
[Fri Apr 03 00:38:59.251813 2026] [:error] [pid 25470:tid 25482] [client 4.232.187.184:21765] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/222.php"] [unique_id "ac6bo3hROcck6_9HYyjahgAAAMo"]
[Fri Apr 03 00:38:59.545352 2026] [:error] [pid 25010:tid 25372] [client 40.89.133.150:43909] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/v.php"] [unique_id "ac6bo4_KcjFQF5TuqTV7TAAAABc"]
[Fri Apr 03 00:38:59.669927 2026] [:error] [pid 25470:tid 25496] [client 158.158.117.24:21481] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/an7.php"] [unique_id "ac6bo3hROcck6_9HYyjaiAAAANg"]
[Fri Apr 03 00:38:59.722610 2026] [:error] [pid 25010:tid 25369] [client 4.232.187.184:21768] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/222.php"] [unique_id "ac6bo4_KcjFQF5TuqTV7UgAAABQ"]
[Fri Apr 03 00:39:00.077092 2026] [:error] [pid 25010:tid 25351] [client 40.89.133.150:44010] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/v.php"] [unique_id "ac6bpI_KcjFQF5TuqTV7UwAAAAM"]
[Fri Apr 03 00:39:00.201542 2026] [:error] [pid 25010:tid 25359] [client 4.232.187.184:21791] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/222.php"] [unique_id "ac6bpI_KcjFQF5TuqTV7VgAAAAs"]
[Fri Apr 03 00:39:00.347006 2026] [:error] [pid 25010:tid 25363] [client 158.158.117.24:21385] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/an7.php"] [unique_id "ac6bpI_KcjFQF5TuqTV7WAAAAA4"]
[Fri Apr 03 00:39:00.651572 2026] [:error] [pid 25010:tid 25353] [client 40.89.133.150:43928] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/te.php"] [unique_id "ac6bpI_KcjFQF5TuqTV7XAAAAAU"]
[Fri Apr 03 00:39:00.678884 2026] [:error] [pid 25470:tid 25492] [client 4.232.187.184:21763] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/222.php"] [unique_id "ac6bpHhROcck6_9HYyjajAAAANQ"]
[Fri Apr 03 00:39:00.839137 2026] [:error] [pid 25010:tid 25364] [client 158.158.117.24:21851] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/an7.php"] [unique_id "ac6bpI_KcjFQF5TuqTV7YAAAAA8"]
[Fri Apr 03 00:39:01.231099 2026] [:error] [pid 25018:tid 25417] [client 4.232.187.184:21405] [client 4.232.187.184] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dwelectservices.com.au"] [uri "/filemanager.php"] [unique_id "ac6bpXupR6lXnAUzFGra0QAAAEQ"]
[Fri Apr 03 00:39:01.245591 2026] [proxy_fcgi:error] [pid 25035:tid 25459] [client 40.89.133.150:43948] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 00:39:01.321176 2026] [:error] [pid 25018:tid 25424] [client 158.158.117.24:21383] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/an7.php"] [unique_id "ac6bpXupR6lXnAUzFGra0gAAAEs"]
[Fri Apr 03 00:39:01.491291 2026] [proxy_fcgi:error] [pid 25035:tid 25451] [client 40.89.133.150:43948] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 00:39:01.728095 2026] [proxy_fcgi:error] [pid 25035:tid 25464] [client 40.89.133.150:43948] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 00:39:01.791078 2026] [:error] [pid 25018:tid 25426] [client 4.232.187.184:21415] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/123.php"] [unique_id "ac6bpXupR6lXnAUzFGra0wAAAE0"]
[Fri Apr 03 00:39:01.805308 2026] [:error] [pid 25035:tid 25465] [client 158.158.117.24:21497] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-gr.php"] [unique_id "ac6bpRhR292toNOkLqGSPAAAAJc"]
[Fri Apr 03 00:39:01.966034 2026] [proxy_fcgi:error] [pid 25035:tid 25448] [client 40.89.133.150:43948] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 00:39:02.203886 2026] [proxy_fcgi:error] [pid 25035:tid 25463] [client 40.89.133.150:43948] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 00:39:02.330470 2026] [proxy_fcgi:error] [pid 25018:tid 25411] [client 4.232.187.184:21883] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 00:39:02.436313 2026] [:error] [pid 25035:tid 25454] [client 158.158.117.24:21764] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-gr.php"] [unique_id "ac6bphhR292toNOkLqGSQgAAAIw"]
[Fri Apr 03 00:39:02.441136 2026] [proxy_fcgi:error] [pid 25035:tid 25452] [client 40.89.133.150:43948] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 00:39:02.575815 2026] [proxy_fcgi:error] [pid 25018:tid 25412] [client 4.232.187.184:21883] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 00:39:02.916960 2026] [proxy_fcgi:error] [pid 25035:tid 25443] [client 40.89.133.150:43948] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 00:39:02.927011 2026] [:error] [pid 25010:tid 25366] [client 158.158.117.24:21846] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-gr.php"] [unique_id "ac6bpo_KcjFQF5TuqTV7ZQAAABE"]
[Fri Apr 03 00:39:03.052693 2026] [proxy_fcgi:error] [pid 25018:tid 25428] [client 4.232.187.184:21883] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 00:39:03.159546 2026] [proxy_fcgi:error] [pid 25035:tid 25461] [client 40.89.133.150:43948] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 00:39:03.287293 2026] [proxy_fcgi:error] [pid 25018:tid 25435] [client 4.232.187.184:21883] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 00:39:03.439386 2026] [:error] [pid 25018:tid 25423] [client 158.158.117.24:21389] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-gr.php"] [unique_id "ac6bp3upR6lXnAUzFGra2gAAAEo"]
[Fri Apr 03 00:39:03.455800 2026] [proxy_fcgi:error] [pid 25035:tid 25445] [client 40.89.133.150:43948] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 00:39:03.594482 2026] [proxy_fcgi:error] [pid 25018:tid 25436] [client 4.232.187.184:21883] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 00:39:03.830430 2026] [proxy_fcgi:error] [pid 25018:tid 25437] [client 4.232.187.184:21883] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 00:39:03.929187 2026] [:error] [pid 25010:tid 25347] [client 158.158.117.24:21108] [client 158.158.117.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "ac6bp4_KcjFQF5TuqTV7agAAAAA"]
[Fri Apr 03 00:39:03.929385 2026] [:error] [pid 25035:tid 25463] [client 40.89.133.150:43948] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/shoha.php"] [unique_id "ac6bpxhR292toNOkLqGSTAAAAJU"]
[Fri Apr 03 00:39:04.350576 2026] [proxy_fcgi:error] [pid 25018:tid 25433] [client 4.232.187.184:21883] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 00:39:04.405828 2026] [:error] [pid 25035:tid 25454] [client 40.89.133.150:43942] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/shoha.php"] [unique_id "ac6bqBhR292toNOkLqGSUAAAAIw"]
[Fri Apr 03 00:39:04.431726 2026] [:error] [pid 25010:tid 25368] [client 158.158.117.24:21445] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/update/f35.php"] [unique_id "ac6bqI_KcjFQF5TuqTV7bwAAABM"]
[Fri Apr 03 00:39:04.614827 2026] [proxy_fcgi:error] [pid 25018:tid 25429] [client 4.232.187.184:21883] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 00:39:04.849941 2026] [proxy_fcgi:error] [pid 25018:tid 25419] [client 4.232.187.184:21883] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 00:39:05.024498 2026] [:error] [pid 25018:tid 25417] [client 40.89.133.150:42152] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/shoha.php"] [unique_id "ac6bqXupR6lXnAUzFGra4gAAAEQ"]
[Fri Apr 03 00:39:05.082154 2026] [:error] [pid 25018:tid 25424] [client 4.232.187.184:21883] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f6.php"] [unique_id "ac6bqXupR6lXnAUzFGra4wAAAEs"]
[Fri Apr 03 00:39:05.233171 2026] [:error] [pid 25470:tid 25489] [client 158.158.117.24:21403] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/update/f35.php"] [unique_id "ac6bqXhROcck6_9HYyjasAAAANE"]
[Fri Apr 03 00:39:05.504912 2026] [:error] [pid 25470:tid 25496] [client 40.89.133.150:43951] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/shoha.php"] [unique_id "ac6bqXhROcck6_9HYyjatAAAANg"]
[Fri Apr 03 00:39:05.675357 2026] [:error] [pid 25470:tid 25493] [client 4.232.187.184:21854] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f6.php"] [unique_id "ac6bqXhROcck6_9HYyjatwAAANU"]
[Fri Apr 03 00:39:05.726246 2026] [:error] [pid 25018:tid 25434] [client 158.158.117.24:21768] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/update/f35.php"] [unique_id "ac6bqXupR6lXnAUzFGra5gAAAFU"]
[Fri Apr 03 00:39:06.099010 2026] [:error] [pid 25470:tid 25472] [client 40.89.133.150:42732] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/info.php"] [unique_id "ac6bqnhROcck6_9HYyjavAAAAMA"]
[Fri Apr 03 00:39:06.221650 2026] [:error] [pid 25470:tid 25485] [client 4.232.187.184:21389] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f6.php"] [unique_id "ac6bqnhROcck6_9HYyjavgAAAM0"]
[Fri Apr 03 00:39:06.435621 2026] [:error] [pid 25035:tid 25450] [client 158.158.117.24:21502] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/update/f35.php"] [unique_id "ac6bqhhR292toNOkLqGSVwAAAIg"]
[Fri Apr 03 00:39:06.663073 2026] [:error] [pid 25018:tid 25428] [client 40.89.133.150:44022] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/info.php"] [unique_id "ac6bqnupR6lXnAUzFGra6wAAAE8"]
[Fri Apr 03 00:39:06.727628 2026] [:error] [pid 25035:tid 25453] [client 4.232.187.184:21815] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f6.php"] [unique_id "ac6bqhhR292toNOkLqGSWgAAAIs"]
[Fri Apr 03 00:39:06.971743 2026] [:error] [pid 25018:tid 25423] [client 158.158.117.24:20656] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ext.php"] [unique_id "ac6bqnupR6lXnAUzFGra7QAAAEo"]
[Fri Apr 03 00:39:07.158375 2026] [:error] [pid 25018:tid 25436] [client 40.89.133.150:43919] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/info.php"] [unique_id "ac6bq3upR6lXnAUzFGra7wAAAFc"]
[Fri Apr 03 00:39:07.423600 2026] [:error] [pid 25470:tid 25490] [client 4.232.187.184:21880] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file.php"] [unique_id "ac6bq3hROcck6_9HYyjaxgAAANI"]
[Fri Apr 03 00:39:07.463555 2026] [:error] [pid 25470:tid 25493] [client 158.158.117.24:21059] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ext.php"] [unique_id "ac6bq3hROcck6_9HYyjaxwAAANU"]
[Fri Apr 03 00:39:07.779503 2026] [:error] [pid 25470:tid 25487] [client 40.89.133.150:42649] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/info.php"] [unique_id "ac6bq3hROcck6_9HYyjaygAAAM8"]
[Fri Apr 03 00:39:07.950514 2026] [:error] [pid 25010:tid 25348] [client 158.158.117.24:21475] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ext.php"] [unique_id "ac6bq4_KcjFQF5TuqTV7egAAAAE"]
[Fri Apr 03 00:39:07.973210 2026] [:error] [pid 25010:tid 25365] [client 4.232.187.184:21777] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file.php"] [unique_id "ac6bq4_KcjFQF5TuqTV7ewAAABA"]
[Fri Apr 03 00:39:08.360883 2026] [:error] [pid 25470:tid 25481] [client 40.89.133.150:43403] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/new.php"] [unique_id "ac6brHhROcck6_9HYyja0AAAAMk"]
[Fri Apr 03 00:39:08.436738 2026] [:error] [pid 25010:tid 25359] [client 158.158.117.24:21783] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ext.php"] [unique_id "ac6brI_KcjFQF5TuqTV7fQAAAAs"]
[Fri Apr 03 00:39:08.442540 2026] [:error] [pid 25010:tid 25363] [client 4.232.187.184:21500] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file.php"] [unique_id "ac6brI_KcjFQF5TuqTV7fgAAAA4"]
[Fri Apr 03 00:39:08.923626 2026] [:error] [pid 25035:tid 25459] [client 158.158.117.24:21853] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/about3.php"] [unique_id "ac6brBhR292toNOkLqGSXwAAAJE"]
[Fri Apr 03 00:39:08.924190 2026] [:error] [pid 25035:tid 25448] [client 40.89.133.150:43470] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/new.php"] [unique_id "ac6brBhR292toNOkLqGSYAAAAIY"]
[Fri Apr 03 00:39:09.033042 2026] [:error] [pid 25470:tid 25489] [client 4.232.187.184:21834] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file.php"] [unique_id "ac6brXhROcck6_9HYyja1QAAANE"]
[Fri Apr 03 00:39:09.436358 2026] [:error] [pid 25018:tid 25419] [client 158.158.117.24:21832] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/about3.php"] [unique_id "ac6brXupR6lXnAUzFGra9QAAAEY"]
[Fri Apr 03 00:39:09.461322 2026] [:error] [pid 25470:tid 25472] [client 40.89.133.150:43453] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/new.php"] [unique_id "ac6brXhROcck6_9HYyja2gAAAMA"]
[Fri Apr 03 00:39:09.740287 2026] [:error] [pid 25035:tid 25458] [client 4.232.187.184:20715] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/an7.php"] [unique_id "ac6brRhR292toNOkLqGSYwAAAJA"]
[Fri Apr 03 00:39:10.105065 2026] [:error] [pid 25035:tid 25447] [client 158.158.117.24:21381] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/about3.php"] [unique_id "ac6brhhR292toNOkLqGSZQAAAIU"]
[Fri Apr 03 00:39:10.165855 2026] [:error] [pid 25010:tid 25357] [client 40.89.133.150:42641] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/new.php"] [unique_id "ac6bro_KcjFQF5TuqTV7gwAAAAk"]
[Fri Apr 03 00:39:10.220322 2026] [:error] [pid 25470:tid 25481] [client 4.232.187.184:21388] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/an7.php"] [unique_id "ac6brnhROcck6_9HYyja3wAAAMk"]
[Fri Apr 03 00:39:10.596892 2026] [:error] [pid 25470:tid 25490] [client 158.158.117.24:21399] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/about3.php"] [unique_id "ac6brnhROcck6_9HYyja5QAAANI"]
[Fri Apr 03 00:39:10.733290 2026] [:error] [pid 25470:tid 25472] [client 4.232.187.184:21051] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/an7.php"] [unique_id "ac6brnhROcck6_9HYyja5gAAAMA"]
[Fri Apr 03 00:39:10.775419 2026] [:error] [pid 25470:tid 25495] [client 40.89.133.150:43415] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/666.php"] [unique_id "ac6brnhROcck6_9HYyja5wAAANc"]
[Fri Apr 03 00:39:11.091796 2026] [:error] [pid 25010:tid 25370] [client 158.158.117.24:20704] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp.php"] [unique_id "ac6br4_KcjFQF5TuqTV7hwAAABU"]
[Fri Apr 03 00:39:11.207509 2026] [:error] [pid 25010:tid 25365] [client 4.232.187.184:21466] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/an7.php"] [unique_id "ac6br4_KcjFQF5TuqTV7iAAAABA"]
[Fri Apr 03 00:39:11.547178 2026] [:error] [pid 25035:tid 25450] [client 40.89.133.150:43464] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/666.php"] [unique_id "ac6brxhR292toNOkLqGSZgAAAIg"]
[Fri Apr 03 00:39:11.683479 2026] [:error] [pid 25018:tid 25414] [client 4.232.187.184:21779] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-gr.php"] [unique_id "ac6br3upR6lXnAUzFGra_wAAAEI"]
[Fri Apr 03 00:39:11.971025 2026] [:error] [pid 25018:tid 25433] [client 158.158.117.24:20687] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp.php"] [unique_id "ac6br3upR6lXnAUzFGrbAQAAAFQ"]
[Fri Apr 03 00:39:12.040687 2026] [:error] [pid 25035:tid 25464] [client 40.89.133.150:43937] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/666.php"] [unique_id "ac6bsBhR292toNOkLqGSbAAAAJY"]
[Fri Apr 03 00:39:12.154616 2026] [:error] [pid 25470:tid 25472] [client 4.232.187.184:21760] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-gr.php"] [unique_id "ac6bsHhROcck6_9HYyja8AAAAMA"]
[Fri Apr 03 00:39:12.453207 2026] [:error] [pid 25035:tid 25455] [client 158.158.117.24:21778] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp.php"] [unique_id "ac6bsBhR292toNOkLqGSbgAAAI0"]
[Fri Apr 03 00:39:12.593190 2026] [:error] [pid 25018:tid 25427] [client 40.89.133.150:43956] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/666.php"] [unique_id "ac6bsHupR6lXnAUzFGrbBgAAAE4"]
[Fri Apr 03 00:39:12.672027 2026] [:error] [pid 25470:tid 25473] [client 4.232.187.184:21874] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-gr.php"] [unique_id "ac6bsHhROcck6_9HYyja8gAAAME"]
[Fri Apr 03 00:39:12.992003 2026] [:error] [pid 25470:tid 25492] [client 158.158.117.24:20302] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp.php"] [unique_id "ac6bsHhROcck6_9HYyja9gAAANQ"]
[Fri Apr 03 00:39:13.113848 2026] [:error] [pid 25018:tid 25426] [client 40.89.133.150:41309] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/akcc.php"] [unique_id "ac6bsXupR6lXnAUzFGrbBwAAAE0"]
[Fri Apr 03 00:39:13.167128 2026] [:error] [pid 25018:tid 25411] [client 4.232.187.184:21887] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-gr.php"] [unique_id "ac6bsXupR6lXnAUzFGrbCAAAAEA"]
[Fri Apr 03 00:39:13.496364 2026] [:error] [pid 25470:tid 25493] [client 158.158.117.24:21774] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zwso.php"] [unique_id "ac6bsXhROcck6_9HYyja_AAAANU"]
[Fri Apr 03 00:39:13.658092 2026] [:error] [pid 25018:tid 25432] [client 40.89.133.150:44014] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/akcc.php"] [unique_id "ac6bsXupR6lXnAUzFGrbCwAAAFM"]
[Fri Apr 03 00:39:13.686734 2026] [:error] [pid 25018:tid 25412] [client 4.232.187.184:21404] [client 4.232.187.184] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "ac6bsXupR6lXnAUzFGrbDAAAAEE"]
[Fri Apr 03 00:39:13.988735 2026] [:error] [pid 25018:tid 25431] [client 158.158.117.24:21810] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zwso.php"] [unique_id "ac6bsXupR6lXnAUzFGrbDwAAAFI"]
[Fri Apr 03 00:39:14.154586 2026] [:error] [pid 25035:tid 25446] [client 4.232.187.184:21110] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/update/f35.php"] [unique_id "ac6bshhR292toNOkLqGScAAAAIQ"]
[Fri Apr 03 00:39:14.196685 2026] [:error] [pid 25035:tid 25454] [client 40.89.133.150:43404] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/akcc.php"] [unique_id "ac6bshhR292toNOkLqGScQAAAIw"]
[Fri Apr 03 00:39:14.483745 2026] [:error] [pid 25018:tid 25436] [client 158.158.117.24:21044] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zwso.php"] [unique_id "ac6bsnupR6lXnAUzFGrbFAAAAFc"]
[Fri Apr 03 00:39:14.738228 2026] [:error] [pid 25018:tid 25427] [client 4.232.187.184:20691] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/update/f35.php"] [unique_id "ac6bsnupR6lXnAUzFGrbFwAAAE4"]
[Fri Apr 03 00:39:14.788145 2026] [:error] [pid 25018:tid 25417] [client 40.89.133.150:43496] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/akcc.php"] [unique_id "ac6bsnupR6lXnAUzFGrbGAAAAEQ"]
[Fri Apr 03 00:39:14.969115 2026] [:error] [pid 25035:tid 25458] [client 158.158.117.24:20614] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zwso.php"] [unique_id "ac6bshhR292toNOkLqGScwAAAJA"]
[Fri Apr 03 00:39:15.259531 2026] [:error] [pid 25035:tid 25449] [client 4.232.187.184:20726] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/update/f35.php"] [unique_id "ac6bsxhR292toNOkLqGSeAAAAIc"]
[Fri Apr 03 00:39:15.440290 2026] [:error] [pid 25035:tid 25453] [client 40.89.133.150:43504] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mo.php"] [unique_id "ac6bsxhR292toNOkLqGSeQAAAIs"]
[Fri Apr 03 00:39:15.459883 2026] [:error] [pid 25035:tid 25451] [client 158.158.117.24:21496] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/alfa.php"] [unique_id "ac6bsxhR292toNOkLqGSegAAAIk"]
[Fri Apr 03 00:39:15.795797 2026] [:error] [pid 25018:tid 25415] [client 4.232.187.184:21471] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/update/f35.php"] [unique_id "ac6bs3upR6lXnAUzFGrbGgAAAEM"]
[Fri Apr 03 00:39:15.942065 2026] [:error] [pid 25035:tid 25445] [client 40.89.133.150:43501] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mo.php"] [unique_id "ac6bsxhR292toNOkLqGSfAAAAIM"]
[Fri Apr 03 00:39:16.144867 2026] [:error] [pid 25035:tid 25463] [client 158.158.117.24:21431] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/alfa.php"] [unique_id "ac6btBhR292toNOkLqGSfgAAAJU"]
[Fri Apr 03 00:39:16.287889 2026] [:error] [pid 25470:tid 25473] [client 4.232.187.184:21481] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ext.php"] [unique_id "ac6btHhROcck6_9HYyjbEwAAAME"]
[Fri Apr 03 00:39:16.689340 2026] [:error] [pid 25018:tid 25437] [client 158.158.117.24:22228] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/alfa.php"] [unique_id "ac6btHupR6lXnAUzFGrbGwAAAFg"]
[Fri Apr 03 00:39:16.690372 2026] [:error] [pid 25470:tid 25484] [client 40.89.133.150:43957] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mo.php"] [unique_id "ac6btHhROcck6_9HYyjbFwAAAMw"]
[Fri Apr 03 00:39:16.867432 2026] [:error] [pid 25018:tid 25419] [client 4.232.187.184:21849] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ext.php"] [unique_id "ac6btHupR6lXnAUzFGrbHgAAAEY"]
[Fri Apr 03 00:39:17.176350 2026] [:error] [pid 25018:tid 25429] [client 158.158.117.24:21875] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/alfa.php"] [unique_id "ac6btXupR6lXnAUzFGrbIQAAAFA"]
[Fri Apr 03 00:39:17.296103 2026] [:error] [pid 25470:tid 25480] [client 40.89.133.150:43486] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mo.php"] [unique_id "ac6btXhROcck6_9HYyjbHgAAAMg"]
[Fri Apr 03 00:39:17.346650 2026] [:error] [pid 25470:tid 25487] [client 4.232.187.184:21497] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ext.php"] [unique_id "ac6btXhROcck6_9HYyjbIAAAAM8"]
[Fri Apr 03 00:39:17.692772 2026] [:error] [pid 25470:tid 25488] [client 158.158.117.24:21870] [client 158.158.117.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dwelectservices.com.au"] [uri "/fm.php"] [unique_id "ac6btXhROcck6_9HYyjbJAAAANA"]
[Fri Apr 03 00:39:17.784520 2026] [:error] [pid 25018:tid 25430] [client 40.89.133.150:43915] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/doc.php"] [unique_id "ac6btXupR6lXnAUzFGrbJAAAAFE"]
[Fri Apr 03 00:39:17.829005 2026] [:error] [pid 25018:tid 25411] [client 4.232.187.184:20708] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ext.php"] [unique_id "ac6btXupR6lXnAUzFGrbJgAAAEA"]
[Fri Apr 03 00:39:18.178578 2026] [:error] [pid 25470:tid 25489] [client 158.158.117.24:21392] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ahax.php"] [unique_id "ac6btnhROcck6_9HYyjbKAAAANE"]
[Fri Apr 03 00:39:18.369656 2026] [:error] [pid 25018:tid 25414] [client 4.232.187.184:21474] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/about3.php"] [unique_id "ac6btnupR6lXnAUzFGrbKQAAAEI"]
[Fri Apr 03 00:39:18.399127 2026] [:error] [pid 25470:tid 25478] [client 40.89.133.150:43938] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/doc.php"] [unique_id "ac6btnhROcck6_9HYyjbKwAAAMY"]
[Fri Apr 03 00:39:18.704881 2026] [:error] [pid 25035:tid 25459] [client 158.158.117.24:21843] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ahax.php"] [unique_id "ac6bthhR292toNOkLqGSgAAAAJE"]
[Fri Apr 03 00:39:18.885761 2026] [:error] [pid 25470:tid 25489] [client 40.89.133.150:43409] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/doc.php"] [unique_id "ac6btnhROcck6_9HYyjbNAAAANE"]
[Fri Apr 03 00:39:18.964169 2026] [:error] [pid 25470:tid 25480] [client 4.232.187.184:21475] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/about3.php"] [unique_id "ac6btnhROcck6_9HYyjbNgAAAMg"]
[Fri Apr 03 00:39:19.213973 2026] [:error] [pid 25470:tid 25488] [client 158.158.117.24:20724] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ahax.php"] [unique_id "ac6bt3hROcck6_9HYyjbPAAAANA"]
[Fri Apr 03 00:39:19.452017 2026] [:error] [pid 25470:tid 25483] [client 40.89.133.150:43431] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/doc.php"] [unique_id "ac6bt3hROcck6_9HYyjbPwAAAMs"]
[Fri Apr 03 00:39:19.508926 2026] [:error] [pid 25470:tid 25489] [client 4.232.187.184:21821] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/about3.php"] [unique_id "ac6bt3hROcck6_9HYyjbQQAAANE"]
[Fri Apr 03 00:39:19.786932 2026] [:error] [pid 25470:tid 25481] [client 158.158.117.24:21800] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ahax.php"] [unique_id "ac6bt3hROcck6_9HYyjbRgAAAMk"]
[Fri Apr 03 00:39:20.040543 2026] [:error] [pid 25470:tid 25472] [client 40.89.133.150:42678] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/inde.php"] [unique_id "ac6buHhROcck6_9HYyjbSAAAAMA"]
[Fri Apr 03 00:39:20.082457 2026] [:error] [pid 25470:tid 25496] [client 4.232.187.184:21778] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/about3.php"] [unique_id "ac6buHhROcck6_9HYyjbSQAAANg"]
[Fri Apr 03 00:39:20.286308 2026] [:error] [pid 25470:tid 25474] [client 158.158.117.24:22191] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/g.php"] [unique_id "ac6buHhROcck6_9HYyjbTAAAAMI"]
[Fri Apr 03 00:39:20.596287 2026] [:error] [pid 25018:tid 25433] [client 4.232.187.184:21489] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp.php"] [unique_id "ac6buHupR6lXnAUzFGrbKwAAAFQ"]
[Fri Apr 03 00:39:20.750498 2026] [:error] [pid 25018:tid 25419] [client 40.89.133.150:43954] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/inde.php"] [unique_id "ac6buHupR6lXnAUzFGrbLAAAAEY"]
[Fri Apr 03 00:39:20.799296 2026] [:error] [pid 25470:tid 25493] [client 158.158.117.24:22220] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/g.php"] [unique_id "ac6buHhROcck6_9HYyjbUQAAANU"]
[Fri Apr 03 00:39:21.129431 2026] [:error] [pid 25470:tid 25476] [client 4.232.187.184:21027] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp.php"] [unique_id "ac6buXhROcck6_9HYyjbVwAAAMQ"]
[Fri Apr 03 00:39:21.240634 2026] [:error] [pid 25470:tid 25475] [client 40.89.133.150:44717] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/inde.php"] [unique_id "ac6buXhROcck6_9HYyjbWgAAAMM"]
[Fri Apr 03 00:39:21.288799 2026] [:error] [pid 25470:tid 25487] [client 158.158.117.24:21790] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/g.php"] [unique_id "ac6buXhROcck6_9HYyjbXAAAAM8"]
[Fri Apr 03 00:39:21.621564 2026] [:error] [pid 25470:tid 25493] [client 4.232.187.184:21814] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp.php"] [unique_id "ac6buXhROcck6_9HYyjbYgAAANU"]
[Fri Apr 03 00:39:21.759509 2026] [:error] [pid 25470:tid 25472] [client 40.89.133.150:43993] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/inde.php"] [unique_id "ac6buXhROcck6_9HYyjbZAAAAMA"]
[Fri Apr 03 00:39:21.790812 2026] [:error] [pid 25470:tid 25490] [client 158.158.117.24:21808] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/g.php"] [unique_id "ac6buXhROcck6_9HYyjbZQAAANI"]
[Fri Apr 03 00:39:22.253404 2026] [:error] [pid 25470:tid 25485] [client 40.89.133.150:44748] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ioxi-o.php"] [unique_id "ac6bunhROcck6_9HYyjbawAAAM0"]
[Fri Apr 03 00:39:22.254855 2026] [:error] [pid 25470:tid 25486] [client 4.232.187.184:21886] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp.php"] [unique_id "ac6bunhROcck6_9HYyjbbAAAAM4"]
[Fri Apr 03 00:39:22.300543 2026] [:error] [pid 25470:tid 25480] [client 158.158.117.24:21789] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/0x.php"] [unique_id "ac6bunhROcck6_9HYyjbbQAAAMg"]
[Fri Apr 03 00:39:22.809575 2026] [:error] [pid 25010:tid 25358] [client 40.89.133.150:43925] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ioxi-o.php"] [unique_id "ac6buo_KcjFQF5TuqTV7kwAAAAo"]
[Fri Apr 03 00:39:22.880778 2026] [:error] [pid 25470:tid 25486] [client 158.158.117.24:22222] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/0x.php"] [unique_id "ac6bunhROcck6_9HYyjbdQAAAM4"]
[Fri Apr 03 00:39:23.025411 2026] [:error] [pid 25470:tid 25477] [client 4.232.187.184:20651] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zwso.php"] [unique_id "ac6bu3hROcck6_9HYyjbewAAAMU"]
[Fri Apr 03 00:39:23.363324 2026] [:error] [pid 25470:tid 25491] [client 158.158.117.24:21840] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/0x.php"] [unique_id "ac6bu3hROcck6_9HYyjbfwAAANM"]
[Fri Apr 03 00:39:23.400712 2026] [:error] [pid 25470:tid 25488] [client 40.89.133.150:44747] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ioxi-o.php"] [unique_id "ac6bu3hROcck6_9HYyjbgAAAANA"]
[Fri Apr 03 00:39:23.505975 2026] [:error] [pid 25470:tid 25482] [client 4.232.187.184:21493] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zwso.php"] [unique_id "ac6bu3hROcck6_9HYyjbggAAAMo"]
[Fri Apr 03 00:39:23.894460 2026] [:error] [pid 25470:tid 25493] [client 158.158.117.24:21458] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/0x.php"] [unique_id "ac6bu3hROcck6_9HYyjbhgAAANU"]
[Fri Apr 03 00:39:23.963786 2026] [:error] [pid 25470:tid 25495] [client 40.89.133.150:43507] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ioxi-o.php"] [unique_id "ac6bu3hROcck6_9HYyjbhwAAANc"]
[Fri Apr 03 00:39:24.108462 2026] [:error] [pid 25018:tid 25426] [client 4.232.187.184:21837] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zwso.php"] [unique_id "ac6bvHupR6lXnAUzFGrbMAAAAE0"]
[Fri Apr 03 00:39:24.404500 2026] [:error] [pid 25018:tid 25432] [client 158.158.117.24:21776] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/app/webroot/filemanager.php"] [unique_id "ac6bvHupR6lXnAUzFGrbNAAAAFM"]
[Fri Apr 03 00:39:24.545364 2026] [:error] [pid 25010:tid 25363] [client 40.89.133.150:44002] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/simple.php"] [unique_id "ac6bvI_KcjFQF5TuqTV7lwAAAA4"]
[Fri Apr 03 00:39:24.761683 2026] [:error] [pid 25470:tid 25496] [client 4.232.187.184:21861] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zwso.php"] [unique_id "ac6bvHhROcck6_9HYyjbiwAAANg"]
[Fri Apr 03 00:39:24.891755 2026] [:error] [pid 25470:tid 25490] [client 158.158.117.24:22162] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/app/webroot/filemanager.php"] [unique_id "ac6bvHhROcck6_9HYyjbkAAAANI"]
[Fri Apr 03 00:39:25.126108 2026] [:error] [pid 25035:tid 25450] [client 40.89.133.150:44673] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/simple.php"] [unique_id "ac6bvRhR292toNOkLqGShAAAAIg"]
[Fri Apr 03 00:39:25.230373 2026] [:error] [pid 25470:tid 25487] [client 4.232.187.184:21033] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/alfa.php"] [unique_id "ac6bvXhROcck6_9HYyjbkgAAAM8"]
[Fri Apr 03 00:39:25.371670 2026] [:error] [pid 25470:tid 25491] [client 158.158.117.24:21862] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/app/webroot/filemanager.php"] [unique_id "ac6bvXhROcck6_9HYyjblAAAANM"]
[Fri Apr 03 00:39:25.665718 2026] [:error] [pid 25010:tid 25372] [client 40.89.133.150:44702] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/simple.php"] [unique_id "ac6bvY_KcjFQF5TuqTV7mwAAABc"]
[Fri Apr 03 00:39:25.866323 2026] [:error] [pid 25018:tid 25428] [client 158.158.117.24:22258] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/app/webroot/filemanager.php"] [unique_id "ac6bvXupR6lXnAUzFGrbOAAAAE8"]
[Fri Apr 03 00:39:26.075949 2026] [:error] [pid 25018:tid 25437] [client 4.232.187.184:21809] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/alfa.php"] [unique_id "ac6bvnupR6lXnAUzFGrbPAAAAFg"]
[Fri Apr 03 00:39:26.349987 2026] [:error] [pid 25035:tid 25457] [client 158.158.117.24:21811] [client 158.158.117.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/IXR/about.php"] [unique_id "ac6bvhhR292toNOkLqGSiQAAAI8"]
[Fri Apr 03 00:39:26.394945 2026] [:error] [pid 25035:tid 25446] [client 40.89.133.150:43936] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/simple.php"] [unique_id "ac6bvhhR292toNOkLqGSigAAAIQ"]
[Fri Apr 03 00:39:26.543090 2026] [:error] [pid 25470:tid 25477] [client 4.232.187.184:21034] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/alfa.php"] [unique_id "ac6bvnhROcck6_9HYyjbnAAAAMU"]
[Fri Apr 03 00:39:26.832832 2026] [:error] [pid 25470:tid 25473] [client 158.158.117.24:21815] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/k.php"] [unique_id "ac6bvnhROcck6_9HYyjboQAAAME"]
[Fri Apr 03 00:39:27.213415 2026] [:error] [pid 25470:tid 25485] [client 4.232.187.184:21788] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/alfa.php"] [unique_id "ac6bv3hROcck6_9HYyjbpQAAAM0"]
[Fri Apr 03 00:39:27.313413 2026] [:error] [pid 25035:tid 25465] [client 158.158.117.24:21830] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/k.php"] [unique_id "ac6bvxhR292toNOkLqGSiwAAAJc"]
[Fri Apr 03 00:39:27.523781 2026] [:error] [pid 25035:tid 25458] [client 40.89.133.150:44760] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zxin.php"] [unique_id "ac6bvxhR292toNOkLqGSjQAAAJA"]
[Fri Apr 03 00:39:27.784145 2026] [:error] [pid 25470:tid 25483] [client 4.232.187.184:21860] [client 4.232.187.184] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dwelectservices.com.au"] [uri "/fm.php"] [unique_id "ac6bv3hROcck6_9HYyjbqQAAAMs"]
[Fri Apr 03 00:39:27.800057 2026] [:error] [pid 25035:tid 25456] [client 158.158.117.24:21772] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/k.php"] [unique_id "ac6bvxhR292toNOkLqGSkAAAAI4"]
[Fri Apr 03 00:39:28.265953 2026] [:error] [pid 25010:tid 25365] [client 4.232.187.184:21084] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ahax.php"] [unique_id "ac6bwI_KcjFQF5TuqTV7pgAAABA"]
[Fri Apr 03 00:39:28.288454 2026] [:error] [pid 25035:tid 25447] [client 158.158.117.24:21797] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/flower.php"] [unique_id "ac6bwBhR292toNOkLqGSkQAAAIU"]
[Fri Apr 03 00:39:28.816071 2026] [:error] [pid 25010:tid 25348] [client 158.158.117.24:21794] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/flower.php"] [unique_id "ac6bwI_KcjFQF5TuqTV7rAAAAAE"]
[Fri Apr 03 00:39:28.869924 2026] [:error] [pid 25035:tid 25445] [client 4.232.187.184:21828] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ahax.php"] [unique_id "ac6bwBhR292toNOkLqGSlQAAAIM"]
[Fri Apr 03 00:39:28.997157 2026] [:error] [pid 25035:tid 25455] [client 40.89.133.150:44742] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zxin.php"] [unique_id "ac6bwBhR292toNOkLqGSlgAAAI0"]
[Fri Apr 03 00:39:29.313326 2026] [:error] [pid 25035:tid 25451] [client 158.158.117.24:20729] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/flower.php"] [unique_id "ac6bwRhR292toNOkLqGSmQAAAIk"]
[Fri Apr 03 00:39:29.349206 2026] [:error] [pid 25010:tid 25369] [client 4.232.187.184:21822] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ahax.php"] [unique_id "ac6bwY_KcjFQF5TuqTV7sQAAABQ"]
[Fri Apr 03 00:39:29.472647 2026] [:error] [pid 25010:tid 25362] [client 40.89.133.150:42115] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zxin.php"] [unique_id "ac6bwY_KcjFQF5TuqTV7sgAAAA0"]
[Fri Apr 03 00:39:29.812531 2026] [:error] [pid 25470:tid 25476] [client 158.158.117.24:22230] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/flower.php"] [unique_id "ac6bwXhROcck6_9HYyjbtgAAAMQ"]
[Fri Apr 03 00:39:29.827496 2026] [:error] [pid 25035:tid 25457] [client 4.232.187.184:21885] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/g.php"] [unique_id "ac6bwRhR292toNOkLqGSmwAAAI8"]
[Fri Apr 03 00:39:30.022136 2026] [:error] [pid 25010:tid 25348] [client 40.89.133.150:44734] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zxin.php"] [unique_id "ac6bwo_KcjFQF5TuqTV7uAAAAAE"]
[Fri Apr 03 00:39:30.323075 2026] [:error] [pid 25010:tid 25347] [client 158.158.117.24:21762] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/public/filemanager.php"] [unique_id "ac6bwo_KcjFQF5TuqTV7vQAAAAA"]
[Fri Apr 03 00:39:30.507016 2026] [:error] [pid 25010:tid 25362] [client 40.89.133.150:43970] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/index/function.php"] [unique_id "ac6bwo_KcjFQF5TuqTV7vgAAAA0"]
[Fri Apr 03 00:39:30.806179 2026] [:error] [pid 25018:tid 25414] [client 158.158.117.24:21834] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/public/filemanager.php"] [unique_id "ac6bwnupR6lXnAUzFGrbQgAAAEI"]
[Fri Apr 03 00:39:30.989397 2026] [:error] [pid 25470:tid 25487] [client 40.89.133.150:44773] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/index/function.php"] [unique_id "ac6bwnhROcck6_9HYyjbuwAAAM8"]
[Fri Apr 03 00:39:31.007891 2026] [:error] [pid 25010:tid 25359] [client 4.232.187.184:21827] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/g.php"] [unique_id "ac6bw4_KcjFQF5TuqTV7xAAAAAs"]
[Fri Apr 03 00:39:31.293756 2026] [:error] [pid 25470:tid 25485] [client 158.158.117.24:22216] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/public/filemanager.php"] [unique_id "ac6bw3hROcck6_9HYyjbxAAAAM0"]
[Fri Apr 03 00:39:31.471463 2026] [:error] [pid 25010:tid 25370] [client 40.89.133.150:43396] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/index/function.php"] [unique_id "ac6bw4_KcjFQF5TuqTV7xQAAABU"]
[Fri Apr 03 00:39:31.780710 2026] [:error] [pid 25470:tid 25483] [client 158.158.117.24:22172] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/public/filemanager.php"] [unique_id "ac6bw3hROcck6_9HYyjbxwAAAMs"]
[Fri Apr 03 00:39:32.274391 2026] [:error] [pid 25470:tid 25475] [client 158.158.117.24:22243] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/voga/sallu.php"] [unique_id "ac6bxHhROcck6_9HYyjb0AAAAMM"]
[Fri Apr 03 00:39:32.387332 2026] [:error] [pid 25035:tid 25448] [client 40.89.133.150:44694] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/index/function.php"] [unique_id "ac6bxBhR292toNOkLqGSnwAAAIY"]
[Fri Apr 03 00:39:32.800297 2026] [:error] [pid 25035:tid 25452] [client 158.158.117.24:22240] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/voga/sallu.php"] [unique_id "ac6bxBhR292toNOkLqGSoAAAAIo"]
[Fri Apr 03 00:39:33.260048 2026] [:error] [pid 25470:tid 25473] [client 40.89.133.150:43974] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/NewFile.php"] [unique_id "ac6bxXhROcck6_9HYyjb2AAAAME"]
[Fri Apr 03 00:39:33.295921 2026] [:error] [pid 25470:tid 25490] [client 158.158.117.24:22245] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/voga/sallu.php"] [unique_id "ac6bxXhROcck6_9HYyjb2gAAANI"]
[Fri Apr 03 00:39:33.768153 2026] [:error] [pid 25470:tid 25495] [client 40.89.133.150:44769] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/NewFile.php"] [unique_id "ac6bxXhROcck6_9HYyjb4QAAANc"]
[Fri Apr 03 00:39:33.812410 2026] [:error] [pid 25470:tid 25475] [client 158.158.117.24:22231] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/voga/sallu.php"] [unique_id "ac6bxXhROcck6_9HYyjb4wAAAMM"]
[Fri Apr 03 00:39:34.247977 2026] [:error] [pid 25010:tid 25361] [client 40.89.133.150:43983] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/NewFile.php"] [unique_id "ac6bxo_KcjFQF5TuqTV71QAAAAw"]
[Fri Apr 03 00:39:34.304615 2026] [:error] [pid 25010:tid 25357] [client 158.158.117.24:21448] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dlu.php"] [unique_id "ac6bxo_KcjFQF5TuqTV71gAAAAk"]
[Fri Apr 03 00:39:34.827153 2026] [:error] [pid 25470:tid 25477] [client 40.89.133.150:43950] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/NewFile.php"] [unique_id "ac6bxnhROcck6_9HYyjb8AAAAMU"]
[Fri Apr 03 00:39:34.852562 2026] [:error] [pid 25470:tid 25495] [client 158.158.117.24:21761] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dlu.php"] [unique_id "ac6bxnhROcck6_9HYyjb8gAAANc"]
[Fri Apr 03 00:39:35.318996 2026] [:error] [pid 25470:tid 25478] [client 40.89.133.150:44031] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aa.php"] [unique_id "ac6bx3hROcck6_9HYyjb-QAAAMY"]
[Fri Apr 03 00:39:35.613513 2026] [:error] [pid 25470:tid 25489] [client 158.158.117.24:22229] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dlu.php"] [unique_id "ac6bx3hROcck6_9HYyjb_AAAANE"]
[Fri Apr 03 00:39:35.933906 2026] [:error] [pid 25018:tid 25435] [client 40.89.133.150:44701] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aa.php"] [unique_id "ac6bx3upR6lXnAUzFGrbSgAAAFY"]
[Fri Apr 03 00:39:36.281612 2026] [:error] [pid 25018:tid 25424] [client 158.158.117.24:22259] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dlu.php"] [unique_id "ac6byHupR6lXnAUzFGrbTQAAAEs"]
[Fri Apr 03 00:39:36.526590 2026] [:error] [pid 25035:tid 25455] [client 40.89.133.150:44700] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aa.php"] [unique_id "ac6byBhR292toNOkLqGSqQAAAI0"]
[Fri Apr 03 00:39:36.773722 2026] [:error] [pid 25470:tid 25496] [client 158.158.117.24:22207] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/555.php"] [unique_id "ac6byHhROcck6_9HYyjcCQAAANg"]
[Fri Apr 03 00:39:37.057340 2026] [:error] [pid 25470:tid 25474] [client 40.89.133.150:42230] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aa.php"] [unique_id "ac6byXhROcck6_9HYyjcCwAAAMI"]
[Fri Apr 03 00:39:37.261760 2026] [:error] [pid 25010:tid 25359] [client 158.158.117.24:21812] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/555.php"] [unique_id "ac6byY_KcjFQF5TuqTV73gAAAAs"]
[Fri Apr 03 00:39:37.614415 2026] [:error] [pid 25010:tid 25363] [client 40.89.133.150:43908] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wolv2.php"] [unique_id "ac6byY_KcjFQF5TuqTV74QAAAA4"]
[Fri Apr 03 00:39:37.842654 2026] [:error] [pid 25470:tid 25494] [client 158.158.117.24:21873] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/555.php"] [unique_id "ac6byXhROcck6_9HYyjcEQAAANY"]
[Fri Apr 03 00:39:38.088033 2026] [:error] [pid 25018:tid 25414] [client 40.89.133.150:43953] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wolv2.php"] [unique_id "ac6bynupR6lXnAUzFGrbVAAAAEI"]
[Fri Apr 03 00:39:38.326888 2026] [:error] [pid 25035:tid 25453] [client 158.158.117.24:21865] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/555.php"] [unique_id "ac6byhhR292toNOkLqGStgAAAIs"]
[Fri Apr 03 00:39:38.575021 2026] [:error] [pid 25470:tid 25491] [client 40.89.133.150:44767] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wolv2.php"] [unique_id "ac6bynhROcck6_9HYyjcFwAAANM"]
[Fri Apr 03 00:39:38.924807 2026] [:error] [pid 25035:tid 25451] [client 158.158.117.24:21035] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-mail.php"] [unique_id "ac6byhhR292toNOkLqGSvwAAAIk"]
[Fri Apr 03 00:39:39.053460 2026] [:error] [pid 25035:tid 25452] [client 40.89.133.150:44706] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wolv2.php"] [unique_id "ac6byxhR292toNOkLqGSwwAAAIo"]
[Fri Apr 03 00:39:39.408695 2026] [:error] [pid 25035:tid 25442] [client 158.158.117.24:22170] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-mail.php"] [unique_id "ac6byxhR292toNOkLqGSygAAAIA"]
[Fri Apr 03 00:39:39.567535 2026] [:error] [pid 25470:tid 25478] [client 40.89.133.150:44749] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/geck.php"] [unique_id "ac6by3hROcck6_9HYyjcHAAAAMY"]
[Fri Apr 03 00:39:40.048118 2026] [:error] [pid 25470:tid 25488] [client 40.89.133.150:44699] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/geck.php"] [unique_id "ac6bzHhROcck6_9HYyjcIgAAANA"]
[Fri Apr 03 00:39:40.467992 2026] [:error] [pid 25035:tid 25451] [client 158.158.117.24:22158] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-mail.php"] [unique_id "ac6bzBhR292toNOkLqGS0QAAAIk"]
[Fri Apr 03 00:39:40.523751 2026] [:error] [pid 25018:tid 25425] [client 40.89.133.150:44008] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/geck.php"] [unique_id "ac6bzHupR6lXnAUzFGrbVgAAAEw"]
[Fri Apr 03 00:39:40.982509 2026] [:error] [pid 25018:tid 25435] [client 158.158.117.24:21824] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-mail.php"] [unique_id "ac6bzHupR6lXnAUzFGrbWAAAAFY"]
[Fri Apr 03 00:39:41.022434 2026] [:error] [pid 25470:tid 25478] [client 40.89.133.150:44764] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/geck.php"] [unique_id "ac6bzXhROcck6_9HYyjcKgAAAMY"]
[Fri Apr 03 00:39:41.472405 2026] [:error] [pid 25470:tid 25482] [client 158.158.117.24:21837] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/403.php"] [unique_id "ac6bzXhROcck6_9HYyjcLgAAAMo"]
[Fri Apr 03 00:39:41.636588 2026] [:error] [pid 25470:tid 25473] [client 40.89.133.150:44674] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xtt.php"] [unique_id "ac6bzXhROcck6_9HYyjcMAAAAME"]
[Fri Apr 03 00:39:42.169113 2026] [:error] [pid 25470:tid 25477] [client 40.89.133.150:43992] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xtt.php"] [unique_id "ac6bznhROcck6_9HYyjcOAAAAMU"]
[Fri Apr 03 00:39:42.654028 2026] [:error] [pid 25035:tid 25453] [client 40.89.133.150:39137] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xtt.php"] [unique_id "ac6bzhhR292toNOkLqGS1QAAAIs"]
[Fri Apr 03 00:39:42.730554 2026] [:error] [pid 25018:tid 25426] [client 158.158.117.24:21446] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/403.php"] [unique_id "ac6bznupR6lXnAUzFGrbWwAAAE0"]
[Fri Apr 03 00:39:43.157709 2026] [:error] [pid 25018:tid 25429] [client 40.89.133.150:44729] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xtt.php"] [unique_id "ac6bz3upR6lXnAUzFGrbXAAAAFA"]
[Fri Apr 03 00:39:43.249778 2026] [:error] [pid 25018:tid 25420] [client 158.158.117.24:20677] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/403.php"] [unique_id "ac6bz3upR6lXnAUzFGrbXQAAAEc"]
[Fri Apr 03 00:39:43.632221 2026] [:error] [pid 25018:tid 25427] [client 40.89.133.150:44020] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin.php"] [unique_id "ac6bz3upR6lXnAUzFGrbXwAAAE4"]
[Fri Apr 03 00:39:43.742524 2026] [:error] [pid 25035:tid 25445] [client 158.158.117.24:22177] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/403.php"] [unique_id "ac6bzxhR292toNOkLqGS2AAAAIM"]
[Fri Apr 03 00:39:44.126798 2026] [:error] [pid 25010:tid 25354] [client 40.89.133.150:43984] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin.php"] [unique_id "ac6b0I_KcjFQF5TuqTV77QAAAAY"]
[Fri Apr 03 00:39:44.347178 2026] [:error] [pid 25470:tid 25475] [client 158.158.117.24:21770] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tox.php"] [unique_id "ac6b0HhROcck6_9HYyjcTwAAAMM"]
[Fri Apr 03 00:39:44.622893 2026] [:error] [pid 25010:tid 25361] [client 40.89.133.150:44712] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin.php"] [unique_id "ac6b0I_KcjFQF5TuqTV78QAAAAw"]
[Fri Apr 03 00:39:44.853325 2026] [:error] [pid 25470:tid 25478] [client 158.158.117.24:21782] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tox.php"] [unique_id "ac6b0HhROcck6_9HYyjcVAAAAMY"]
[Fri Apr 03 00:39:45.108580 2026] [:error] [pid 25010:tid 25353] [client 40.89.133.150:43460] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin.php"] [unique_id "ac6b0Y_KcjFQF5TuqTV79gAAAAU"]
[Fri Apr 03 00:39:45.335654 2026] [:error] [pid 25470:tid 25476] [client 158.158.117.24:21386] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tox.php"] [unique_id "ac6b0XhROcck6_9HYyjcWQAAAMQ"]
[Fri Apr 03 00:39:45.642305 2026] [:error] [pid 25018:tid 25437] [client 40.89.133.150:43964] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/system.php"] [unique_id "ac6b0XupR6lXnAUzFGrbYQAAAFg"]
[Fri Apr 03 00:39:45.821605 2026] [:error] [pid 25035:tid 25448] [client 158.158.117.24:22270] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tox.php"] [unique_id "ac6b0RhR292toNOkLqGS4AAAAIY"]
[Fri Apr 03 00:39:46.342315 2026] [:error] [pid 25010:tid 25356] [client 40.89.133.150:44727] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/system.php"] [unique_id "ac6b0o_KcjFQF5TuqTV7_AAAAAg"]
[Fri Apr 03 00:39:46.536660 2026] [:error] [pid 25010:tid 25351] [client 158.158.117.24:22194] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lv.php"] [unique_id "ac6b0o_KcjFQF5TuqTV8AAAAAAM"]
[Fri Apr 03 00:39:47.008801 2026] [:error] [pid 25035:tid 25445] [client 40.89.133.150:44774] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/system.php"] [unique_id "ac6b0xhR292toNOkLqGS4wAAAIM"]
[Fri Apr 03 00:39:47.464814 2026] [:error] [pid 25018:tid 25421] [client 158.158.117.24:22556] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lv.php"] [unique_id "ac6b03upR6lXnAUzFGrbZgAAAEg"]
[Fri Apr 03 00:39:47.636925 2026] [:error] [pid 25010:tid 25356] [client 40.89.133.150:43976] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/system.php"] [unique_id "ac6b04_KcjFQF5TuqTV8CgAAAAg"]
[Fri Apr 03 00:39:47.995755 2026] [:error] [pid 25470:tid 25485] [client 158.158.117.24:22569] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lv.php"] [unique_id "ac6b03hROcck6_9HYyjcagAAAM0"]
[Fri Apr 03 00:39:48.114846 2026] [:error] [pid 25470:tid 25476] [client 40.89.133.150:44709] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/manager.php"] [unique_id "ac6b1HhROcck6_9HYyjcawAAAMQ"]
[Fri Apr 03 00:39:48.484545 2026] [:error] [pid 25010:tid 25363] [client 158.158.117.24:22627] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lv.php"] [unique_id "ac6b1I_KcjFQF5TuqTV8FQAAAA4"]
[Fri Apr 03 00:39:48.733796 2026] [:error] [pid 25035:tid 25442] [client 40.89.133.150:44704] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/manager.php"] [unique_id "ac6b1BhR292toNOkLqGS5gAAAIA"]
[Fri Apr 03 00:39:48.983556 2026] [:error] [pid 25010:tid 25365] [client 158.158.117.24:22238] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hook.php"] [unique_id "ac6b1I_KcjFQF5TuqTV8GAAAABA"]
[Fri Apr 03 00:39:49.211050 2026] [:error] [pid 25470:tid 25492] [client 40.89.133.150:42131] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/manager.php"] [unique_id "ac6b1XhROcck6_9HYyjcegAAANQ"]
[Fri Apr 03 00:39:49.551044 2026] [:error] [pid 25010:tid 25353] [client 158.158.117.24:22236] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hook.php"] [unique_id "ac6b1Y_KcjFQF5TuqTV8HAAAAAU"]
[Fri Apr 03 00:39:49.807838 2026] [:error] [pid 25470:tid 25473] [client 40.89.133.150:44798] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/manager.php"] [unique_id "ac6b1XhROcck6_9HYyjcgQAAAME"]
[Fri Apr 03 00:39:50.041094 2026] [:error] [pid 25470:tid 25494] [client 158.158.117.24:22145] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hook.php"] [unique_id "ac6b1nhROcck6_9HYyjchgAAANY"]
[Fri Apr 03 00:39:50.284988 2026] [:error] [pid 25470:tid 25480] [client 40.89.133.150:44695] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gdn.php"] [unique_id "ac6b1nhROcck6_9HYyjcigAAAMg"]
[Fri Apr 03 00:39:50.534503 2026] [:error] [pid 25470:tid 25487] [client 158.158.117.24:22637] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hook.php"] [unique_id "ac6b1nhROcck6_9HYyjcjgAAAM8"]
[Fri Apr 03 00:39:50.755104 2026] [:error] [pid 25035:tid 25447] [client 40.89.133.150:44021] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gdn.php"] [unique_id "ac6b1hhR292toNOkLqGS6gAAAIU"]
[Fri Apr 03 00:39:51.023657 2026] [:error] [pid 25035:tid 25462] [client 158.158.117.24:22553] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/menu.php"] [unique_id "ac6b1xhR292toNOkLqGS7AAAAJQ"]
[Fri Apr 03 00:39:51.303093 2026] [:error] [pid 25010:tid 25362] [client 40.89.133.150:44713] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gdn.php"] [unique_id "ac6b14_KcjFQF5TuqTV8IAAAAA0"]
[Fri Apr 03 00:39:51.513224 2026] [:error] [pid 25010:tid 25365] [client 158.158.117.24:22211] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/menu.php"] [unique_id "ac6b14_KcjFQF5TuqTV8JAAAABA"]
[Fri Apr 03 00:39:51.824720 2026] [:error] [pid 25470:tid 25478] [client 40.89.133.150:43498] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gdn.php"] [unique_id "ac6b13hROcck6_9HYyjcnQAAAMY"]
[Fri Apr 03 00:39:52.021536 2026] [:error] [pid 25470:tid 25473] [client 158.158.117.24:22249] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/menu.php"] [unique_id "ac6b2HhROcck6_9HYyjcogAAAME"]
[Fri Apr 03 00:39:52.300386 2026] [:error] [pid 25035:tid 25449] [client 40.89.133.150:45273] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ton.php"] [unique_id "ac6b2BhR292toNOkLqGS8QAAAIc"]
[Fri Apr 03 00:39:52.513713 2026] [:error] [pid 25035:tid 25442] [client 158.158.117.24:22595] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/menu.php"] [unique_id "ac6b2BhR292toNOkLqGS8wAAAIA"]
[Fri Apr 03 00:39:52.978968 2026] [:error] [pid 25470:tid 25478] [client 40.89.133.150:44791] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ton.php"] [unique_id "ac6b2HhROcck6_9HYyjcrAAAAMY"]
[Fri Apr 03 00:39:53.036277 2026] [:error] [pid 25470:tid 25490] [client 158.158.117.24:22155] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jp.php"] [unique_id "ac6b2XhROcck6_9HYyjcrQAAANI"]
[Fri Apr 03 00:39:53.465050 2026] [:error] [pid 25010:tid 25356] [client 40.89.133.150:45189] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ton.php"] [unique_id "ac6b2Y_KcjFQF5TuqTV8LAAAAAg"]
[Fri Apr 03 00:39:53.550393 2026] [:error] [pid 25010:tid 25361] [client 158.158.117.24:22647] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jp.php"] [unique_id "ac6b2Y_KcjFQF5TuqTV8LQAAAAw"]
[Fri Apr 03 00:39:53.954960 2026] [:error] [pid 25470:tid 25491] [client 40.89.133.150:44796] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ton.php"] [unique_id "ac6b2XhROcck6_9HYyjctwAAANM"]
[Fri Apr 03 00:39:54.050369 2026] [:error] [pid 25018:tid 25415] [client 158.158.117.24:22255] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jp.php"] [unique_id "ac6b2nupR6lXnAUzFGrbbAAAAEM"]
[Fri Apr 03 00:39:54.540347 2026] [:error] [pid 25470:tid 25481] [client 40.89.133.150:44778] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/media.php"] [unique_id "ac6b2nhROcck6_9HYyjcvwAAAMk"]
[Fri Apr 03 00:39:54.621514 2026] [:error] [pid 25470:tid 25473] [client 158.158.117.24:22265] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jp.php"] [unique_id "ac6b2nhROcck6_9HYyjcwAAAAME"]
[Fri Apr 03 00:39:55.057818 2026] [:error] [pid 25470:tid 25476] [client 40.89.133.150:44775] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/media.php"] [unique_id "ac6b23hROcck6_9HYyjcxwAAAMQ"]
[Fri Apr 03 00:39:55.124793 2026] [proxy_fcgi:error] [pid 25470:tid 25493] [client 158.158.117.24:22225] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 00:39:55.380099 2026] [proxy_fcgi:error] [pid 25470:tid 25495] [client 158.158.117.24:22225] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 00:39:55.548935 2026] [:error] [pid 25470:tid 25494] [client 40.89.133.150:45224] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/media.php"] [unique_id "ac6b23hROcck6_9HYyjczwAAANY"]
[Fri Apr 03 00:39:55.624378 2026] [proxy_fcgi:error] [pid 25470:tid 25484] [client 158.158.117.24:22225] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 00:39:55.870638 2026] [proxy_fcgi:error] [pid 25470:tid 25476] [client 158.158.117.24:22225] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 00:39:56.113504 2026] [proxy_fcgi:error] [pid 25470:tid 25481] [client 158.158.117.24:22225] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 00:39:56.133269 2026] [:error] [pid 25018:tid 25425] [client 40.89.133.150:44715] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/media.php"] [unique_id "ac6b3HupR6lXnAUzFGrbbwAAAEw"]
[Fri Apr 03 00:39:56.358399 2026] [proxy_fcgi:error] [pid 25470:tid 25488] [client 158.158.117.24:22225] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 00:39:56.653434 2026] [:error] [pid 25470:tid 25492] [client 40.89.133.150:45237] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "ac6b3HhROcck6_9HYyjc3QAAANQ"]
[Fri Apr 03 00:39:56.707671 2026] [proxy_fcgi:error] [pid 25470:tid 25479] [client 158.158.117.24:22225] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 00:39:57.158364 2026] [:error] [pid 25470:tid 25491] [client 40.89.133.150:44718] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "ac6b3XhROcck6_9HYyjc4wAAANM"]
[Fri Apr 03 00:39:57.191863 2026] [proxy_fcgi:error] [pid 25470:tid 25478] [client 158.158.117.24:22225] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 00:39:57.448140 2026] [proxy_fcgi:error] [pid 25470:tid 25496] [client 158.158.117.24:22225] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 00:39:57.693571 2026] [proxy_fcgi:error] [pid 25470:tid 25494] [client 158.158.117.24:22225] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 00:39:57.734767 2026] [:error] [pid 25035:tid 25443] [client 40.89.133.150:44755] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "ac6b3RhR292toNOkLqGTBQAAAIE"]
[Fri Apr 03 00:39:57.932320 2026] [:error] [pid 25470:tid 25491] [client 158.158.117.24:22225] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/admin-post.php"] [unique_id "ac6b3XhROcck6_9HYyjc8wAAANM"]
[Fri Apr 03 00:39:58.210403 2026] [:error] [pid 25470:tid 25474] [client 40.89.133.150:44684] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "ac6b3nhROcck6_9HYyjc9wAAAMI"]
[Fri Apr 03 00:39:58.455030 2026] [:error] [pid 25470:tid 25496] [client 158.158.117.24:22210] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/admin-post.php"] [unique_id "ac6b3nhROcck6_9HYyjc-AAAANg"]
[Fri Apr 03 00:39:58.763657 2026] [:error] [pid 25470:tid 25480] [client 40.89.133.150:45241] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admir.php"] [unique_id "ac6b3nhROcck6_9HYyjc_QAAAMg"]
[Fri Apr 03 00:39:59.054458 2026] [:error] [pid 25470:tid 25493] [client 158.158.117.24:22528] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/admin-post.php"] [unique_id "ac6b33hROcck6_9HYyjc_wAAANU"]
[Fri Apr 03 00:39:59.253706 2026] [:error] [pid 25470:tid 25474] [client 40.89.133.150:45299] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admir.php"] [unique_id "ac6b33hROcck6_9HYyjdAQAAAMI"]
[Fri Apr 03 00:39:59.542255 2026] [:error] [pid 25010:tid 25371] [client 158.158.117.24:22173] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/admin-post.php"] [unique_id "ac6b34_KcjFQF5TuqTV8QwAAABY"]
[Fri Apr 03 00:39:59.727884 2026] [:error] [pid 25018:tid 25432] [client 40.89.133.150:45280] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admir.php"] [unique_id "ac6b33upR6lXnAUzFGrbcgAAAFM"]
[Fri Apr 03 00:40:00.034017 2026] [:error] [pid 25010:tid 25361] [client 158.158.117.24:22264] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/shoha.php"] [unique_id "ac6b4I_KcjFQF5TuqTV8RgAAAAw"]
[Fri Apr 03 00:40:00.257839 2026] [:error] [pid 25018:tid 25422] [client 40.89.133.150:45253] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admir.php"] [unique_id "ac6b4HupR6lXnAUzFGrbcwAAAEk"]
[Fri Apr 03 00:40:00.682008 2026] [:error] [pid 25018:tid 25417] [client 158.158.117.24:22557] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/shoha.php"] [unique_id "ac6b4HupR6lXnAUzFGrbeAAAAEQ"]
[Fri Apr 03 00:40:00.741535 2026] [:error] [pid 25010:tid 25364] [client 40.89.133.150:43916] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fs.php"] [unique_id "ac6b4I_KcjFQF5TuqTV8SwAAAA8"]
[Fri Apr 03 00:40:01.164814 2026] [:error] [pid 25010:tid 25358] [client 158.158.117.24:22552] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/shoha.php"] [unique_id "ac6b4Y_KcjFQF5TuqTV8TgAAAAo"]
[Fri Apr 03 00:40:01.216335 2026] [:error] [pid 25018:tid 25434] [client 40.89.133.150:45266] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fs.php"] [unique_id "ac6b4XupR6lXnAUzFGrbfgAAAFU"]
[Fri Apr 03 00:40:01.644624 2026] [:error] [pid 25010:tid 25351] [client 158.158.117.24:22179] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/shoha.php"] [unique_id "ac6b4Y_KcjFQF5TuqTV8TwAAAAM"]
[Fri Apr 03 00:40:01.767678 2026] [:error] [pid 25018:tid 25432] [client 40.89.133.150:44782] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fs.php"] [unique_id "ac6b4XupR6lXnAUzFGrbhwAAAFM"]
[Fri Apr 03 00:40:02.130336 2026] [:error] [pid 25018:tid 25417] [client 158.158.117.24:22649] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/info.php"] [unique_id "ac6b4nupR6lXnAUzFGrbjAAAAEQ"]
[Fri Apr 03 00:40:02.312010 2026] [:error] [pid 25010:tid 25352] [client 40.89.133.150:45205] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fs.php"] [unique_id "ac6b4o_KcjFQF5TuqTV8UwAAAAQ"]
[Fri Apr 03 00:40:02.614016 2026] [:error] [pid 25010:tid 25348] [client 158.158.117.24:22594] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/info.php"] [unique_id "ac6b4o_KcjFQF5TuqTV8VgAAAAE"]
[Fri Apr 03 00:40:02.784576 2026] [:error] [pid 25010:tid 25367] [client 40.89.133.150:44685] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/error.php"] [unique_id "ac6b4o_KcjFQF5TuqTV8WAAAABI"]
[Fri Apr 03 00:40:03.115139 2026] [:error] [pid 25010:tid 25351] [client 158.158.117.24:22214] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/info.php"] [unique_id "ac6b44_KcjFQF5TuqTV8XgAAAAM"]
[Fri Apr 03 00:40:03.264471 2026] [proxy_fcgi:error] [pid 25010:tid 25362] [client 40.89.133.150:43935] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 00:40:03.605730 2026] [:error] [pid 25470:tid 25496] [client 158.158.117.24:19931] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/info.php"] [unique_id "ac6b43hROcck6_9HYyjdFgAAANg"]
[Fri Apr 03 00:40:03.741871 2026] [proxy_fcgi:error] [pid 25010:tid 25367] [client 40.89.133.150:43935] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 00:40:03.980083 2026] [proxy_fcgi:error] [pid 25010:tid 25371] [client 40.89.133.150:43935] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 00:40:04.102833 2026] [:error] [pid 25035:tid 25443] [client 158.158.117.24:22250] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/new.php"] [unique_id "ac6b5BhR292toNOkLqGTCwAAAIE"]
[Fri Apr 03 00:40:04.312378 2026] [proxy_fcgi:error] [pid 25010:tid 25353] [client 40.89.133.150:43935] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 00:40:04.551417 2026] [proxy_fcgi:error] [pid 25010:tid 25363] [client 40.89.133.150:43935] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 00:40:04.598588 2026] [:error] [pid 25018:tid 25414] [client 158.158.117.24:20729] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/new.php"] [unique_id "ac6b5HupR6lXnAUzFGrbmwAAAEI"]
[Fri Apr 03 00:40:04.791783 2026] [proxy_fcgi:error] [pid 25010:tid 25361] [client 40.89.133.150:43935] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 00:40:05.087393 2026] [:error] [pid 25010:tid 25372] [client 158.158.117.24:22588] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/new.php"] [unique_id "ac6b5Y_KcjFQF5TuqTV8dwAAABc"]
[Fri Apr 03 00:40:05.326040 2026] [proxy_fcgi:error] [pid 25010:tid 25367] [client 40.89.133.150:43935] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 00:40:05.572008 2026] [:error] [pid 25010:tid 25368] [client 158.158.117.24:22221] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/new.php"] [unique_id "ac6b5Y_KcjFQF5TuqTV8fgAAABM"]
[Fri Apr 03 00:40:05.575020 2026] [proxy_fcgi:error] [pid 25010:tid 25351] [client 40.89.133.150:43935] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 00:40:05.818061 2026] [proxy_fcgi:error] [pid 25010:tid 25365] [client 40.89.133.150:43935] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 00:40:06.055124 2026] [:error] [pid 25010:tid 25370] [client 40.89.133.150:43935] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/yas.php"] [unique_id "ac6b5o_KcjFQF5TuqTV8hQAAABU"]
[Fri Apr 03 00:40:06.070960 2026] [:error] [pid 25470:tid 25491] [client 158.158.117.24:22572] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/666.php"] [unique_id "ac6b5nhROcck6_9HYyjdKAAAANM"]
[Fri Apr 03 00:40:06.576875 2026] [:error] [pid 25035:tid 25466] [client 40.89.133.150:44751] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/yas.php"] [unique_id "ac6b5hhR292toNOkLqGTFwAAAJg"]
[Fri Apr 03 00:40:06.584156 2026] [:error] [pid 25018:tid 25436] [client 158.158.117.24:22192] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/666.php"] [unique_id "ac6b5nupR6lXnAUzFGrbnwAAAFc"]
[Fri Apr 03 00:40:07.049482 2026] [:error] [pid 25035:tid 25457] [client 40.89.133.150:43400] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/yas.php"] [unique_id "ac6b5xhR292toNOkLqGTHQAAAI8"]
[Fri Apr 03 00:40:07.081054 2026] [:error] [pid 25035:tid 25443] [client 158.158.117.24:22606] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/666.php"] [unique_id "ac6b5xhR292toNOkLqGTHgAAAIE"]
[Fri Apr 03 00:40:07.544682 2026] [:error] [pid 25470:tid 25479] [client 40.89.133.150:44728] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/yas.php"] [unique_id "ac6b53hROcck6_9HYyjdLwAAAMc"]
[Fri Apr 03 00:40:07.564066 2026] [:error] [pid 25470:tid 25493] [client 158.158.117.24:22635] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/666.php"] [unique_id "ac6b53hROcck6_9HYyjdMAAAANU"]
[Fri Apr 03 00:40:08.044315 2026] [:error] [pid 25470:tid 25486] [client 40.89.133.150:44743] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file5.php"] [unique_id "ac6b6HhROcck6_9HYyjdNQAAAM4"]
[Fri Apr 03 00:40:08.260012 2026] [:error] [pid 25035:tid 25460] [client 158.158.117.24:21829] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/akcc.php"] [unique_id "ac6b6BhR292toNOkLqGTIgAAAJI"]
[Fri Apr 03 00:40:08.537702 2026] [:error] [pid 25035:tid 25444] [client 40.89.133.150:45187] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file5.php"] [unique_id "ac6b6BhR292toNOkLqGTJQAAAII"]
[Fri Apr 03 00:40:08.742426 2026] [:error] [pid 25035:tid 25445] [client 158.158.117.24:22153] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/akcc.php"] [unique_id "ac6b6BhR292toNOkLqGTJgAAAIM"]
[Fri Apr 03 00:40:09.021655 2026] [:error] [pid 25470:tid 25476] [client 40.89.133.150:44768] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file5.php"] [unique_id "ac6b6XhROcck6_9HYyjdPwAAAMQ"]
[Fri Apr 03 00:40:09.239138 2026] [:error] [pid 25470:tid 25495] [client 158.158.117.24:22541] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/akcc.php"] [unique_id "ac6b6XhROcck6_9HYyjdQgAAANc"]
[Fri Apr 03 00:40:09.514602 2026] [:error] [pid 25035:tid 25452] [client 40.89.133.150:42219] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file5.php"] [unique_id "ac6b6RhR292toNOkLqGTKgAAAIo"]
[Fri Apr 03 00:40:09.727769 2026] [:error] [pid 25470:tid 25494] [client 158.158.117.24:22545] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/akcc.php"] [unique_id "ac6b6XhROcck6_9HYyjdRwAAANY"]
[Fri Apr 03 00:40:09.992429 2026] [:error] [pid 25035:tid 25456] [client 40.89.133.150:44756] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/v3.php"] [unique_id "ac6b6RhR292toNOkLqGTLAAAAI4"]
[Fri Apr 03 00:40:10.217444 2026] [:error] [pid 25018:tid 25415] [client 158.158.117.24:22653] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mo.php"] [unique_id "ac6b6nupR6lXnAUzFGrbqAAAAEM"]
[Fri Apr 03 00:40:10.506633 2026] [:error] [pid 25018:tid 25411] [client 40.89.133.150:45208] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/v3.php"] [unique_id "ac6b6nupR6lXnAUzFGrbrAAAAEA"]
[Fri Apr 03 00:40:10.708904 2026] [:error] [pid 25010:tid 25357] [client 158.158.117.24:22610] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mo.php"] [unique_id "ac6b6o_KcjFQF5TuqTV8nwAAAAk"]
[Fri Apr 03 00:40:11.070284 2026] [:error] [pid 25018:tid 25435] [client 40.89.133.150:44779] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/v3.php"] [unique_id "ac6b63upR6lXnAUzFGrbsQAAAFY"]
[Fri Apr 03 00:40:11.197616 2026] [:error] [pid 25470:tid 25489] [client 158.158.117.24:20331] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mo.php"] [unique_id "ac6b63hROcck6_9HYyjdUAAAANE"]
[Fri Apr 03 00:40:11.638287 2026] [:error] [pid 25470:tid 25477] [client 40.89.133.150:42658] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/v3.php"] [unique_id "ac6b63hROcck6_9HYyjdWAAAAMU"]
[Fri Apr 03 00:40:11.677948 2026] [:error] [pid 25470:tid 25478] [client 158.158.117.24:22642] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mo.php"] [unique_id "ac6b63hROcck6_9HYyjdWQAAAMY"]
[Fri Apr 03 00:40:12.107719 2026] [:error] [pid 25470:tid 25476] [client 40.89.133.150:44733] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "ac6b7HhROcck6_9HYyjdYAAAAMQ"]
[Fri Apr 03 00:40:12.185935 2026] [:error] [pid 25470:tid 25488] [client 158.158.117.24:22544] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/doc.php"] [unique_id "ac6b7HhROcck6_9HYyjdYwAAANA"]
[Fri Apr 03 00:40:12.577849 2026] [:error] [pid 25018:tid 25423] [client 40.89.133.150:43971] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "ac6b7HupR6lXnAUzFGrbsgAAAEo"]
[Fri Apr 03 00:40:12.668280 2026] [:error] [pid 25470:tid 25486] [client 158.158.117.24:22611] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/doc.php"] [unique_id "ac6b7HhROcck6_9HYyjdaQAAAM4"]
[Fri Apr 03 00:40:13.053636 2026] [:error] [pid 25470:tid 25475] [client 40.89.133.150:45296] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "ac6b7XhROcck6_9HYyjdcAAAAMM"]
[Fri Apr 03 00:40:13.157039 2026] [:error] [pid 25470:tid 25495] [client 158.158.117.24:22547] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/doc.php"] [unique_id "ac6b7XhROcck6_9HYyjdcwAAANc"]
[Fri Apr 03 00:40:13.630485 2026] [:error] [pid 25470:tid 25482] [client 40.89.133.150:39951] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "ac6b7XhROcck6_9HYyjdegAAAMo"]
[Fri Apr 03 00:40:13.655933 2026] [:error] [pid 25470:tid 25487] [client 158.158.117.24:22144] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/doc.php"] [unique_id "ac6b7XhROcck6_9HYyjdewAAAM8"]
[Fri Apr 03 00:40:13.802625 2026] [proxy_fcgi:error] [pid 25010:tid 25373] [client 4.232.187.184:22476] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 00:40:14.132592 2026] [:error] [pid 25010:tid 25354] [client 40.89.133.150:45257] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gg.php"] [unique_id "ac6b7o_KcjFQF5TuqTV8qgAAAAY"]
[Fri Apr 03 00:40:14.142644 2026] [:error] [pid 25010:tid 25368] [client 158.158.117.24:22232] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/inde.php"] [unique_id "ac6b7o_KcjFQF5TuqTV8qwAAABM"]
[Fri Apr 03 00:40:14.272038 2026] [:error] [pid 25010:tid 25347] [client 4.232.187.184:22476] [client 4.232.187.184] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/IXR/about.php"] [unique_id "ac6b7o_KcjFQF5TuqTV8rQAAAAA"]
[Fri Apr 03 00:40:14.607642 2026] [:error] [pid 25035:tid 25457] [client 40.89.133.150:45227] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gg.php"] [unique_id "ac6b7hhR292toNOkLqGTNAAAAI8"]
[Fri Apr 03 00:40:14.694013 2026] [:error] [pid 25010:tid 25361] [client 158.158.117.24:22646] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/inde.php"] [unique_id "ac6b7o_KcjFQF5TuqTV8rwAAAAw"]
[Fri Apr 03 00:40:15.061795 2026] [proxy_fcgi:error] [pid 25035:tid 25459] [client 4.232.187.184:22910] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 00:40:15.171420 2026] [:error] [pid 25470:tid 25473] [client 40.89.133.150:45243] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gg.php"] [unique_id "ac6b73hROcck6_9HYyjdhQAAAME"]
[Fri Apr 03 00:40:15.190399 2026] [:error] [pid 25470:tid 25494] [client 158.158.117.24:22215] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/inde.php"] [unique_id "ac6b73hROcck6_9HYyjdhgAAANY"]
[Fri Apr 03 00:40:15.300893 2026] [proxy_fcgi:error] [pid 25035:tid 25458] [client 4.232.187.184:22910] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 00:40:15.643643 2026] [:error] [pid 25010:tid 25364] [client 40.89.133.150:45225] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gg.php"] [unique_id "ac6b74_KcjFQF5TuqTV8swAAAA8"]
[Fri Apr 03 00:40:15.680122 2026] [:error] [pid 25010:tid 25363] [client 158.158.117.24:21432] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/inde.php"] [unique_id "ac6b74_KcjFQF5TuqTV8tAAAAA4"]
[Fri Apr 03 00:40:16.121461 2026] [:error] [pid 25018:tid 25424] [client 40.89.133.150:45302] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/upgrade/index.php"] [unique_id "ac6b8HupR6lXnAUzFGrbtwAAAEs"]
[Fri Apr 03 00:40:16.130723 2026] [proxy_fcgi:error] [pid 25035:tid 25447] [client 4.232.187.184:22910] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 00:40:16.162318 2026] [:error] [pid 25010:tid 25351] [client 158.158.117.24:22271] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ioxi-o.php"] [unique_id "ac6b8I_KcjFQF5TuqTV8twAAAAM"]
[Fri Apr 03 00:40:16.378199 2026] [proxy_fcgi:error] [pid 25035:tid 25456] [client 4.232.187.184:22910] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 00:40:16.646963 2026] [:error] [pid 25470:tid 25476] [client 158.158.117.24:22581] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ioxi-o.php"] [unique_id "ac6b8HhROcck6_9HYyjdkAAAAMQ"]
[Fri Apr 03 00:40:16.691409 2026] [:error] [pid 25470:tid 25473] [client 40.89.133.150:45265] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/upgrade/index.php"] [unique_id "ac6b8HhROcck6_9HYyjdkQAAAME"]
[Fri Apr 03 00:40:16.789696 2026] [proxy_fcgi:error] [pid 25035:tid 25463] [client 4.232.187.184:22910] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 00:40:17.131181 2026] [:error] [pid 25470:tid 25484] [client 158.158.117.24:22262] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ioxi-o.php"] [unique_id "ac6b8XhROcck6_9HYyjdlgAAAMw"]
[Fri Apr 03 00:40:17.162891 2026] [:error] [pid 25035:tid 25465] [client 40.89.133.150:43946] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/upgrade/index.php"] [unique_id "ac6b8RhR292toNOkLqGTRgAAAJc"]
[Fri Apr 03 00:40:17.218571 2026] [proxy_fcgi:error] [pid 25035:tid 25453] [client 4.232.187.184:22910] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 00:40:17.463374 2026] [proxy_fcgi:error] [pid 25035:tid 25464] [client 4.232.187.184:22910] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 00:40:17.636509 2026] [:error] [pid 25035:tid 25460] [client 40.89.133.150:44752] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/upgrade/index.php"] [unique_id "ac6b8RhR292toNOkLqGTTQAAAJI"]
[Fri Apr 03 00:40:17.660680 2026] [:error] [pid 25035:tid 25454] [client 158.158.117.24:22597] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ioxi-o.php"] [unique_id "ac6b8RhR292toNOkLqGTTgAAAIw"]
[Fri Apr 03 00:40:17.696175 2026] [:error] [pid 25035:tid 25459] [client 4.232.187.184:22910] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lv.php"] [unique_id "ac6b8RhR292toNOkLqGTTwAAAJE"]
[Fri Apr 03 00:40:18.110886 2026] [:error] [pid 25035:tid 25445] [client 40.89.133.150:44677] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/himu.php"] [unique_id "ac6b8hhR292toNOkLqGTUwAAAIM"]
[Fri Apr 03 00:40:18.391449 2026] [:error] [pid 25018:tid 25428] [client 4.232.187.184:22515] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lv.php"] [unique_id "ac6b8nupR6lXnAUzFGrbxQAAAE8"]
[Fri Apr 03 00:40:18.529004 2026] [:error] [pid 25035:tid 25462] [client 158.158.117.24:22988] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/simple.php"] [unique_id "ac6b8hhR292toNOkLqGTVAAAAJQ"]
[Fri Apr 03 00:40:18.665806 2026] [:error] [pid 25035:tid 25452] [client 40.89.133.150:44678] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/himu.php"] [unique_id "ac6b8hhR292toNOkLqGTVwAAAIo"]
[Fri Apr 03 00:40:19.011001 2026] [:error] [pid 25018:tid 25414] [client 4.232.187.184:22470] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lv.php"] [unique_id "ac6b83upR6lXnAUzFGrbyQAAAEI"]
[Fri Apr 03 00:40:19.087952 2026] [:error] [pid 25018:tid 25436] [client 158.158.117.24:22652] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/simple.php"] [unique_id "ac6b83upR6lXnAUzFGrbygAAAFc"]
[Fri Apr 03 00:40:19.279983 2026] [:error] [pid 25035:tid 25463] [client 40.89.133.150:44691] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/himu.php"] [unique_id "ac6b8xhR292toNOkLqGTWgAAAJU"]
[Fri Apr 03 00:40:19.625228 2026] [:error] [pid 25035:tid 25450] [client 4.232.187.184:22822] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lv.php"] [unique_id "ac6b8xhR292toNOkLqGTXAAAAIg"]
[Fri Apr 03 00:40:19.632015 2026] [:error] [pid 25010:tid 25355] [client 158.158.117.24:22554] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/simple.php"] [unique_id "ac6b84_KcjFQF5TuqTV8wQAAAAc"]
[Fri Apr 03 00:40:19.796129 2026] [:error] [pid 25035:tid 25461] [client 40.89.133.150:44766] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/himu.php"] [unique_id "ac6b8xhR292toNOkLqGTXgAAAJM"]
[Fri Apr 03 00:40:20.124394 2026] [:error] [pid 25010:tid 25365] [client 4.232.187.184:22890] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hook.php"] [unique_id "ac6b9I_KcjFQF5TuqTV8wwAAABA"]
[Fri Apr 03 00:40:20.143148 2026] [:error] [pid 25010:tid 25366] [client 158.158.117.24:23031] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/simple.php"] [unique_id "ac6b9I_KcjFQF5TuqTV8xQAAABE"]
[Fri Apr 03 00:40:20.347425 2026] [:error] [pid 25010:tid 25372] [client 40.89.133.150:45244] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/z.php"] [unique_id "ac6b9I_KcjFQF5TuqTV8ygAAABc"]
[Fri Apr 03 00:40:20.612176 2026] [:error] [pid 25035:tid 25454] [client 4.232.187.184:22838] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hook.php"] [unique_id "ac6b9BhR292toNOkLqGTZAAAAIw"]
[Fri Apr 03 00:40:20.639813 2026] [:error] [pid 25018:tid 25432] [client 158.158.117.24:22951] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zxin.php"] [unique_id "ac6b9HupR6lXnAUzFGrbzgAAAFM"]
[Fri Apr 03 00:40:20.837051 2026] [:error] [pid 25035:tid 25458] [client 40.89.133.150:44690] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/z.php"] [unique_id "ac6b9BhR292toNOkLqGTZgAAAJA"]
[Fri Apr 03 00:40:21.098034 2026] [:error] [pid 25035:tid 25462] [client 4.232.187.184:22810] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hook.php"] [unique_id "ac6b9RhR292toNOkLqGTaAAAAJQ"]
[Fri Apr 03 00:40:21.394646 2026] [:error] [pid 25010:tid 25351] [client 158.158.117.24:22537] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zxin.php"] [unique_id "ac6b9Y_KcjFQF5TuqTV80wAAAAM"]
[Fri Apr 03 00:40:21.414954 2026] [:error] [pid 25018:tid 25426] [client 40.89.133.150:44672] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/z.php"] [unique_id "ac6b9XupR6lXnAUzFGrb0AAAAE0"]
[Fri Apr 03 00:40:21.913782 2026] [:error] [pid 25018:tid 25433] [client 158.158.117.24:22951] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zxin.php"] [unique_id "ac6b9XupR6lXnAUzFGrb0wAAAFQ"]
[Fri Apr 03 00:40:22.019758 2026] [:error] [pid 25010:tid 25356] [client 4.232.187.184:22832] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hook.php"] [unique_id "ac6b9o_KcjFQF5TuqTV81wAAAAg"]
[Fri Apr 03 00:40:22.069691 2026] [:error] [pid 25010:tid 25373] [client 40.89.133.150:45232] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/z.php"] [unique_id "ac6b9o_KcjFQF5TuqTV82QAAABg"]
[Fri Apr 03 00:40:22.454449 2026] [:error] [pid 25010:tid 25366] [client 158.158.117.24:22640] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zxin.php"] [unique_id "ac6b9o_KcjFQF5TuqTV83QAAABE"]
[Fri Apr 03 00:40:22.561114 2026] [:error] [pid 25010:tid 25372] [client 4.232.187.184:22454] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/menu.php"] [unique_id "ac6b9o_KcjFQF5TuqTV83wAAABc"]
[Fri Apr 03 00:40:22.568046 2026] [:error] [pid 25010:tid 25370] [client 40.89.133.150:43978] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/png.php"] [unique_id "ac6b9o_KcjFQF5TuqTV84AAAABU"]
[Fri Apr 03 00:40:23.094711 2026] [:error] [pid 25035:tid 25460] [client 40.89.133.150:45852] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/png.php"] [unique_id "ac6b9xhR292toNOkLqGTcAAAAJI"]
[Fri Apr 03 00:40:23.149195 2026] [:error] [pid 25010:tid 25368] [client 158.158.117.24:22982] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/index/function.php"] [unique_id "ac6b94_KcjFQF5TuqTV85gAAABM"]
[Fri Apr 03 00:40:23.291944 2026] [:error] [pid 25010:tid 25356] [client 4.232.187.184:20722] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/menu.php"] [unique_id "ac6b94_KcjFQF5TuqTV85wAAAAg"]
[Fri Apr 03 00:40:23.661945 2026] [:error] [pid 25035:tid 25462] [client 40.89.133.150:45210] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/png.php"] [unique_id "ac6b9xhR292toNOkLqGTdQAAAJQ"]
[Fri Apr 03 00:40:23.662505 2026] [:error] [pid 25035:tid 25446] [client 158.158.117.24:21382] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/index/function.php"] [unique_id "ac6b9xhR292toNOkLqGTdgAAAIQ"]
[Fri Apr 03 00:40:23.775920 2026] [:error] [pid 25035:tid 25444] [client 4.232.187.184:22480] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/menu.php"] [unique_id "ac6b9xhR292toNOkLqGTeAAAAII"]
[Fri Apr 03 00:40:24.167537 2026] [:error] [pid 25010:tid 25357] [client 40.89.133.150:43447] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/png.php"] [unique_id "ac6b-I_KcjFQF5TuqTV86wAAAAk"]
[Fri Apr 03 00:40:24.315332 2026] [:error] [pid 25010:tid 25355] [client 4.232.187.184:22434] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/menu.php"] [unique_id "ac6b-I_KcjFQF5TuqTV87AAAAAc"]
[Fri Apr 03 00:40:24.648179 2026] [:error] [pid 25010:tid 25366] [client 40.89.133.150:45866] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mds.php"] [unique_id "ac6b-I_KcjFQF5TuqTV87gAAABE"]
[Fri Apr 03 00:40:24.845486 2026] [:error] [pid 25035:tid 25458] [client 4.232.187.184:22409] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jp.php"] [unique_id "ac6b-BhR292toNOkLqGTggAAAJA"]
[Fri Apr 03 00:40:24.855945 2026] [:error] [pid 25035:tid 25457] [client 158.158.117.24:22952] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/index/function.php"] [unique_id "ac6b-BhR292toNOkLqGTgwAAAI8"]
[Fri Apr 03 00:40:25.382534 2026] [:error] [pid 25035:tid 25452] [client 158.158.117.24:22992] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/index/function.php"] [unique_id "ac6b-RhR292toNOkLqGTjAAAAIo"]
[Fri Apr 03 00:40:25.426931 2026] [:error] [pid 25035:tid 25450] [client 40.89.133.150:45865] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mds.php"] [unique_id "ac6b-RhR292toNOkLqGTjQAAAIg"]
[Fri Apr 03 00:40:25.525467 2026] [:error] [pid 25035:tid 25448] [client 4.232.187.184:22511] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jp.php"] [unique_id "ac6b-RhR292toNOkLqGTjwAAAIY"]
[Fri Apr 03 00:40:26.046965 2026] [:error] [pid 25035:tid 25445] [client 40.89.133.150:45297] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mds.php"] [unique_id "ac6b-hhR292toNOkLqGTkQAAAIM"]
[Fri Apr 03 00:40:26.145847 2026] [:error] [pid 25010:tid 25361] [client 4.232.187.184:22407] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jp.php"] [unique_id "ac6b-o_KcjFQF5TuqTV89gAAAAw"]
[Fri Apr 03 00:40:26.169376 2026] [:error] [pid 25010:tid 25373] [client 158.158.117.24:20727] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/NewFile.php"] [unique_id "ac6b-o_KcjFQF5TuqTV8-AAAABg"]
[Fri Apr 03 00:40:26.521788 2026] [:error] [pid 25010:tid 25357] [client 40.89.133.150:45914] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mds.php"] [unique_id "ac6b-o_KcjFQF5TuqTV8_QAAAAk"]
[Fri Apr 03 00:40:26.682715 2026] [:error] [pid 25018:tid 25433] [client 158.158.117.24:22227] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/NewFile.php"] [unique_id "ac6b-nupR6lXnAUzFGrb7QAAAFQ"]
[Fri Apr 03 00:40:26.753170 2026] [:error] [pid 25470:tid 25496] [client 4.232.187.184:22473] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jp.php"] [unique_id "ac6b-nhROcck6_9HYyjdmwAAANg"]
[Fri Apr 03 00:40:27.010093 2026] [:error] [pid 25018:tid 25424] [client 40.89.133.150:45304] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/acp.php"] [unique_id "ac6b-3upR6lXnAUzFGrb7wAAAEs"]
[Fri Apr 03 00:40:27.250406 2026] [:error] [pid 25010:tid 25356] [client 158.158.117.24:22999] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/NewFile.php"] [unique_id "ac6b-4_KcjFQF5TuqTV9AQAAAAg"]
[Fri Apr 03 00:40:27.421327 2026] [:error] [pid 25018:tid 25419] [client 4.232.187.184:22808] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/v.php"] [unique_id "ac6b-3upR6lXnAUzFGrb8wAAAEY"]
[Fri Apr 03 00:40:27.492617 2026] [:error] [pid 25035:tid 25447] [client 40.89.133.150:45834] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/acp.php"] [unique_id "ac6b-xhR292toNOkLqGTlAAAAIU"]
[Fri Apr 03 00:40:27.875886 2026] [:error] [pid 25010:tid 25347] [client 158.158.117.24:22613] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/NewFile.php"] [unique_id "ac6b-4_KcjFQF5TuqTV9CQAAAAA"]
[Fri Apr 03 00:40:27.993573 2026] [:error] [pid 25470:tid 25480] [client 40.89.133.150:45285] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/acp.php"] [unique_id "ac6b-3hROcck6_9HYyjdnAAAAMg"]
[Fri Apr 03 00:40:28.293775 2026] [:error] [pid 25018:tid 25423] [client 4.232.187.184:22525] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/v.php"] [unique_id "ac6b_HupR6lXnAUzFGrb-gAAAEo"]
[Fri Apr 03 00:40:28.394711 2026] [:error] [pid 25470:tid 25482] [client 158.158.117.24:22529] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aa.php"] [unique_id "ac6b_HhROcck6_9HYyjdngAAAMo"]
[Fri Apr 03 00:40:28.525552 2026] [:error] [pid 25470:tid 25483] [client 40.89.133.150:45207] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/acp.php"] [unique_id "ac6b_HhROcck6_9HYyjdoAAAAMs"]
[Fri Apr 03 00:40:28.961623 2026] [:error] [pid 25010:tid 25359] [client 4.232.187.184:22452] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/v.php"] [unique_id "ac6b_I_KcjFQF5TuqTV9DwAAAAs"]
[Fri Apr 03 00:40:29.062989 2026] [:error] [pid 25010:tid 25347] [client 40.89.133.150:44767] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/m.php"] [unique_id "ac6b_Y_KcjFQF5TuqTV9EgAAAAA"]
[Fri Apr 03 00:40:29.535445 2026] [:error] [pid 25010:tid 25365] [client 40.89.133.150:44739] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/m.php"] [unique_id "ac6b_Y_KcjFQF5TuqTV9FwAAABA"]
[Fri Apr 03 00:40:29.616679 2026] [:error] [pid 25018:tid 25426] [client 4.232.187.184:22863] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/v.php"] [unique_id "ac6b_XupR6lXnAUzFGrb_gAAAE0"]
[Fri Apr 03 00:40:29.675557 2026] [:error] [pid 25010:tid 25370] [client 158.158.117.24:22986] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aa.php"] [unique_id "ac6b_Y_KcjFQF5TuqTV9GQAAABU"]
[Fri Apr 03 00:40:30.034722 2026] [:error] [pid 25470:tid 25495] [client 40.89.133.150:44794] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/m.php"] [unique_id "ac6b_nhROcck6_9HYyjdpgAAANc"]
[Fri Apr 03 00:40:30.270787 2026] [:error] [pid 25010:tid 25372] [client 158.158.117.24:20712] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aa.php"] [unique_id "ac6b_o_KcjFQF5TuqTV9HgAAABc"]
[Fri Apr 03 00:40:30.283391 2026] [:error] [pid 25010:tid 25368] [client 4.232.187.184:22901] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/te.php"] [unique_id "ac6b_o_KcjFQF5TuqTV9HwAAABM"]
[Fri Apr 03 00:40:30.589868 2026] [:error] [pid 25470:tid 25494] [client 40.89.133.150:45907] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/m.php"] [unique_id "ac6b_nhROcck6_9HYyjdqgAAANY"]
[Fri Apr 03 00:40:30.854063 2026] [:error] [pid 25018:tid 25432] [client 158.158.117.24:22582] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aa.php"] [unique_id "ac6b_nupR6lXnAUzFGrcAgAAAFM"]
[Fri Apr 03 00:40:31.008638 2026] [:error] [pid 25018:tid 25428] [client 4.232.187.184:22462] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/te.php"] [unique_id "ac6b_3upR6lXnAUzFGrcBQAAAE8"]
[Fri Apr 03 00:40:31.066847 2026] [:error] [pid 25470:tid 25481] [client 40.89.133.150:45876] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-is.php"] [unique_id "ac6b_3hROcck6_9HYyjdrQAAAMk"]
[Fri Apr 03 00:40:31.502709 2026] [:error] [pid 25470:tid 25479] [client 4.232.187.184:22428] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/te.php"] [unique_id "ac6b_3hROcck6_9HYyjdsQAAAMc"]
[Fri Apr 03 00:40:31.519493 2026] [:error] [pid 25470:tid 25487] [client 158.158.117.24:22546] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wolv2.php"] [unique_id "ac6b_3hROcck6_9HYyjdswAAAM8"]
[Fri Apr 03 00:40:31.609731 2026] [:error] [pid 25470:tid 25478] [client 40.89.133.150:45894] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-is.php"] [unique_id "ac6b_3hROcck6_9HYyjdtQAAAMY"]
[Fri Apr 03 00:40:32.029836 2026] [:error] [pid 25470:tid 25484] [client 158.158.117.24:22945] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wolv2.php"] [unique_id "ac6cAHhROcck6_9HYyjduAAAAMw"]
[Fri Apr 03 00:40:32.034387 2026] [:error] [pid 25470:tid 25489] [client 4.232.187.184:22481] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/te.php"] [unique_id "ac6cAHhROcck6_9HYyjduQAAANE"]
[Fri Apr 03 00:40:32.100798 2026] [:error] [pid 25470:tid 25494] [client 40.89.133.150:45930] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-is.php"] [unique_id "ac6cAHhROcck6_9HYyjduwAAANY"]
[Fri Apr 03 00:40:32.553792 2026] [:error] [pid 25470:tid 25482] [client 158.158.117.24:22636] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wolv2.php"] [unique_id "ac6cAHhROcck6_9HYyjdwQAAAMo"]
[Fri Apr 03 00:40:32.578578 2026] [:error] [pid 25470:tid 25487] [client 40.89.133.150:45919] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-is.php"] [unique_id "ac6cAHhROcck6_9HYyjdwgAAAM8"]
[Fri Apr 03 00:40:32.759429 2026] [:error] [pid 25470:tid 25476] [client 4.232.187.184:21406] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bless.php"] [unique_id "ac6cAHhROcck6_9HYyjdwwAAAMQ"]
[Fri Apr 03 00:40:33.067722 2026] [:error] [pid 25010:tid 25368] [client 40.89.133.150:45933] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file15.php"] [unique_id "ac6cAY_KcjFQF5TuqTV9JwAAABM"]
[Fri Apr 03 00:40:33.121113 2026] [:error] [pid 25010:tid 25371] [client 158.158.117.24:22955] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wolv2.php"] [unique_id "ac6cAY_KcjFQF5TuqTV9KAAAABY"]
[Fri Apr 03 00:40:33.741689 2026] [:error] [pid 25010:tid 25359] [client 40.89.133.150:45870] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file15.php"] [unique_id "ac6cAY_KcjFQF5TuqTV9LAAAAAs"]
[Fri Apr 03 00:40:33.997099 2026] [:error] [pid 25010:tid 25364] [client 4.232.187.184:22787] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bless.php"] [unique_id "ac6cAY_KcjFQF5TuqTV9LgAAAA8"]
[Fri Apr 03 00:40:33.997099 2026] [:error] [pid 25018:tid 25432] [client 158.158.117.24:21852] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/geck.php"] [unique_id "ac6cAXupR6lXnAUzFGrcEgAAAFM"]
[Fri Apr 03 00:40:34.217478 2026] [:error] [pid 25470:tid 25496] [client 40.89.133.150:45185] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file15.php"] [unique_id "ac6cAnhROcck6_9HYyjdywAAANg"]
[Fri Apr 03 00:40:34.473313 2026] [:error] [pid 25470:tid 25480] [client 4.232.187.184:23182] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bless.php"] [unique_id "ac6cAnhROcck6_9HYyjdzQAAAMg"]
[Fri Apr 03 00:40:34.776219 2026] [:error] [pid 25035:tid 25454] [client 40.89.133.150:45842] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file15.php"] [unique_id "ac6cAhhR292toNOkLqGTngAAAIw"]
[Fri Apr 03 00:40:34.911766 2026] [:error] [pid 25035:tid 25452] [client 158.158.117.24:22598] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/geck.php"] [unique_id "ac6cAhhR292toNOkLqGTnwAAAIo"]
[Fri Apr 03 00:40:35.077134 2026] [:error] [pid 25035:tid 25453] [client 4.232.187.184:22861] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bless.php"] [unique_id "ac6cAxhR292toNOkLqGTowAAAIs"]
[Fri Apr 03 00:40:35.407149 2026] [:error] [pid 25018:tid 25423] [client 158.158.117.24:22984] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/geck.php"] [unique_id "ac6cA3upR6lXnAUzFGrcGAAAAEo"]
[Fri Apr 03 00:40:35.588774 2026] [:error] [pid 25035:tid 25451] [client 4.232.187.184:22867] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/12.php"] [unique_id "ac6cAxhR292toNOkLqGTqwAAAIk"]
[Fri Apr 03 00:40:35.902849 2026] [:error] [pid 25035:tid 25452] [client 158.158.117.24:22977] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/geck.php"] [unique_id "ac6cAxhR292toNOkLqGTrwAAAIo"]
[Fri Apr 03 00:40:36.090480 2026] [:error] [pid 25035:tid 25453] [client 4.232.187.184:23229] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/12.php"] [unique_id "ac6cBBhR292toNOkLqGTswAAAIs"]
[Fri Apr 03 00:40:36.387309 2026] [:error] [pid 25035:tid 25445] [client 158.158.117.24:23026] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xtt.php"] [unique_id "ac6cBBhR292toNOkLqGTtgAAAIM"]
[Fri Apr 03 00:40:36.589989 2026] [:error] [pid 25035:tid 25455] [client 4.232.187.184:22895] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/12.php"] [unique_id "ac6cBBhR292toNOkLqGTuAAAAI0"]
[Fri Apr 03 00:40:36.885141 2026] [:error] [pid 25035:tid 25465] [client 158.158.117.24:22987] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xtt.php"] [unique_id "ac6cBBhR292toNOkLqGTvQAAAJc"]
[Fri Apr 03 00:40:37.105026 2026] [:error] [pid 25470:tid 25485] [client 4.232.187.184:22866] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/12.php"] [unique_id "ac6cBXhROcck6_9HYyjd0gAAAM0"]
[Fri Apr 03 00:40:37.382948 2026] [:error] [pid 25035:tid 25449] [client 158.158.117.24:23028] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xtt.php"] [unique_id "ac6cBRhR292toNOkLqGTxAAAAIc"]
[Fri Apr 03 00:40:37.592870 2026] [:error] [pid 25010:tid 25358] [client 4.232.187.184:23290] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class-t.api.php"] [unique_id "ac6cBY_KcjFQF5TuqTV9OgAAAAo"]
[Fri Apr 03 00:40:37.818175 2026] [:error] [pid 25470:tid 25496] [client 40.89.133.150:42676] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wsd.php"] [unique_id "ac6cBXhROcck6_9HYyjd1QAAANg"]
[Fri Apr 03 00:40:37.873845 2026] [:error] [pid 25470:tid 25495] [client 158.158.117.24:22618] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xtt.php"] [unique_id "ac6cBXhROcck6_9HYyjd1gAAANc"]
[Fri Apr 03 00:40:38.074626 2026] [:error] [pid 25470:tid 25482] [client 4.232.187.184:23245] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class-t.api.php"] [unique_id "ac6cBnhROcck6_9HYyjd2QAAAMo"]
[Fri Apr 03 00:40:38.346020 2026] [:error] [pid 25470:tid 25492] [client 40.89.133.150:45262] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wsd.php"] [unique_id "ac6cBnhROcck6_9HYyjd3QAAANQ"]
[Fri Apr 03 00:40:38.460121 2026] [:error] [pid 25470:tid 25475] [client 158.158.117.24:22605] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin.php"] [unique_id "ac6cBnhROcck6_9HYyjd3wAAAMM"]
[Fri Apr 03 00:40:38.543133 2026] [:error] [pid 25470:tid 25481] [client 4.232.187.184:23277] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class-t.api.php"] [unique_id "ac6cBnhROcck6_9HYyjd4gAAAMk"]
[Fri Apr 03 00:40:38.956030 2026] [:error] [pid 25035:tid 25462] [client 158.158.117.24:22969] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin.php"] [unique_id "ac6cBhhR292toNOkLqGTywAAAJQ"]
[Fri Apr 03 00:40:39.016470 2026] [:error] [pid 25035:tid 25465] [client 4.232.187.184:22845] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class-t.api.php"] [unique_id "ac6cBxhR292toNOkLqGTzAAAAJc"]
[Fri Apr 03 00:40:39.124454 2026] [:error] [pid 25470:tid 25493] [client 40.89.133.150:45935] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wsd.php"] [unique_id "ac6cB3hROcck6_9HYyjd5gAAANU"]
[Fri Apr 03 00:40:39.487547 2026] [:error] [pid 25018:tid 25418] [client 4.232.187.184:20611] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bolt.php"] [unique_id "ac6cB3upR6lXnAUzFGrcIgAAAEU"]
[Fri Apr 03 00:40:39.557104 2026] [:error] [pid 25035:tid 25446] [client 158.158.117.24:21016] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin.php"] [unique_id "ac6cBxhR292toNOkLqGT0gAAAIQ"]
[Fri Apr 03 00:40:39.750518 2026] [:error] [pid 25035:tid 25451] [client 40.89.133.150:45287] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wsd.php"] [unique_id "ac6cBxhR292toNOkLqGT0wAAAIk"]
[Fri Apr 03 00:40:39.967432 2026] [:error] [pid 25470:tid 25481] [client 4.232.187.184:22900] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bolt.php"] [unique_id "ac6cB3hROcck6_9HYyjd7wAAAMk"]
[Fri Apr 03 00:40:40.239032 2026] [:error] [pid 25010:tid 25349] [client 40.89.133.150:45247] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/about.php"] [unique_id "ac6cCI_KcjFQF5TuqTV9PwAAAAI"]
[Fri Apr 03 00:40:40.309454 2026] [:error] [pid 25018:tid 25428] [client 158.158.117.24:22533] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin.php"] [unique_id "ac6cCHupR6lXnAUzFGrcJAAAAE8"]
[Fri Apr 03 00:40:40.467004 2026] [:error] [pid 25018:tid 25429] [client 4.232.187.184:22880] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bolt.php"] [unique_id "ac6cCHupR6lXnAUzFGrcJQAAAFA"]
[Fri Apr 03 00:40:40.725534 2026] [:error] [pid 25010:tid 25362] [client 40.89.133.150:45222] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/about.php"] [unique_id "ac6cCI_KcjFQF5TuqTV9QAAAAA0"]
[Fri Apr 03 00:40:40.805165 2026] [:error] [pid 25470:tid 25483] [client 158.158.117.24:22147] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/system.php"] [unique_id "ac6cCHhROcck6_9HYyjd9QAAAMs"]
[Fri Apr 03 00:40:40.965613 2026] [:error] [pid 25470:tid 25484] [client 4.232.187.184:23275] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bolt.php"] [unique_id "ac6cCHhROcck6_9HYyjd-AAAAMw"]
[Fri Apr 03 00:40:41.199590 2026] [:error] [pid 25018:tid 25426] [client 40.89.133.150:45838] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/about.php"] [unique_id "ac6cCXupR6lXnAUzFGrcKgAAAE0"]
[Fri Apr 03 00:40:41.386328 2026] [:error] [pid 25470:tid 25479] [client 158.158.117.24:22990] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/system.php"] [unique_id "ac6cCXhROcck6_9HYyjd-QAAAMc"]
[Fri Apr 03 00:40:41.600207 2026] [:error] [pid 25470:tid 25474] [client 4.232.187.184:23193] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lock360.php"] [unique_id "ac6cCXhROcck6_9HYyjd_AAAAMI"]
[Fri Apr 03 00:40:41.692689 2026] [:error] [pid 25470:tid 25491] [client 40.89.133.150:44771] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/about.php"] [unique_id "ac6cCXhROcck6_9HYyjd_gAAANM"]
[Fri Apr 03 00:40:41.878881 2026] [:error] [pid 25470:tid 25496] [client 158.158.117.24:22962] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/system.php"] [unique_id "ac6cCXhROcck6_9HYyjeAwAAANg"]
[Fri Apr 03 00:40:42.278930 2026] [:error] [pid 25470:tid 25478] [client 40.89.133.150:44697] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/an.php"] [unique_id "ac6cCnhROcck6_9HYyjeCAAAAMY"]
[Fri Apr 03 00:40:42.312687 2026] [:error] [pid 25470:tid 25474] [client 4.232.187.184:23268] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lock360.php"] [unique_id "ac6cCnhROcck6_9HYyjeCQAAAMI"]
[Fri Apr 03 00:40:42.368990 2026] [:error] [pid 25470:tid 25491] [client 158.158.117.24:23011] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/system.php"] [unique_id "ac6cCnhROcck6_9HYyjeCgAAANM"]
[Fri Apr 03 00:40:42.753975 2026] [:error] [pid 25470:tid 25483] [client 40.89.133.150:45826] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/an.php"] [unique_id "ac6cCnhROcck6_9HYyjeEQAAAMs"]
[Fri Apr 03 00:40:43.047056 2026] [:error] [pid 25470:tid 25478] [client 4.232.187.184:23273] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lock360.php"] [unique_id "ac6cC3hROcck6_9HYyjeGAAAAMY"]
[Fri Apr 03 00:40:43.074760 2026] [:error] [pid 25470:tid 25474] [client 158.158.117.24:22967] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/manager.php"] [unique_id "ac6cC3hROcck6_9HYyjeGgAAAMI"]
[Fri Apr 03 00:40:43.248398 2026] [:error] [pid 25470:tid 25493] [client 40.89.133.150:45264] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/an.php"] [unique_id "ac6cC3hROcck6_9HYyjeGwAAANU"]
[Fri Apr 03 00:40:43.526518 2026] [:error] [pid 25470:tid 25496] [client 4.232.187.184:23236] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lock360.php"] [unique_id "ac6cC3hROcck6_9HYyjeHwAAANg"]
[Fri Apr 03 00:40:43.589531 2026] [:error] [pid 25470:tid 25494] [client 158.158.117.24:22576] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/manager.php"] [unique_id "ac6cC3hROcck6_9HYyjeIQAAANY"]
[Fri Apr 03 00:40:43.730802 2026] [:error] [pid 25018:tid 25424] [client 40.89.133.150:44030] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/an.php"] [unique_id "ac6cC3upR6lXnAUzFGrcLwAAAEs"]
[Fri Apr 03 00:40:44.030362 2026] [:error] [pid 25470:tid 25482] [client 4.232.187.184:22842] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/public/manager.php"] [unique_id "ac6cDHhROcck6_9HYyjeJgAAAMo"]
[Fri Apr 03 00:40:44.091436 2026] [:error] [pid 25470:tid 25477] [client 158.158.117.24:22936] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/manager.php"] [unique_id "ac6cDHhROcck6_9HYyjeJwAAAMU"]
[Fri Apr 03 00:40:44.210955 2026] [:error] [pid 25470:tid 25496] [client 40.89.133.150:45861] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/404.php"] [unique_id "ac6cDHhROcck6_9HYyjeKQAAANg"]
[Fri Apr 03 00:40:44.514420 2026] [:error] [pid 25035:tid 25445] [client 4.232.187.184:22904] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/public/manager.php"] [unique_id "ac6cDBhR292toNOkLqGT3wAAAIM"]
[Fri Apr 03 00:40:44.590217 2026] [:error] [pid 25010:tid 25366] [client 158.158.117.24:22604] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/manager.php"] [unique_id "ac6cDI_KcjFQF5TuqTV9SQAAABE"]
[Fri Apr 03 00:40:44.712459 2026] [:error] [pid 25035:tid 25442] [client 40.89.133.150:43401] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/404.php"] [unique_id "ac6cDBhR292toNOkLqGT4AAAAIA"]
[Fri Apr 03 00:40:44.987785 2026] [:error] [pid 25018:tid 25435] [client 4.232.187.184:22813] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/public/manager.php"] [unique_id "ac6cDHupR6lXnAUzFGrcMwAAAFY"]
[Fri Apr 03 00:40:45.107965 2026] [:error] [pid 25018:tid 25420] [client 158.158.117.24:22586] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gdn.php"] [unique_id "ac6cDXupR6lXnAUzFGrcNAAAAEc"]
[Fri Apr 03 00:40:45.207802 2026] [:error] [pid 25035:tid 25462] [client 40.89.133.150:45240] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/404.php"] [unique_id "ac6cDRhR292toNOkLqGT4QAAAJQ"]
[Fri Apr 03 00:40:45.453076 2026] [:error] [pid 25010:tid 25368] [client 4.232.187.184:22834] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/public/manager.php"] [unique_id "ac6cDY_KcjFQF5TuqTV9TQAAABM"]
[Fri Apr 03 00:40:45.682626 2026] [:error] [pid 25035:tid 25452] [client 40.89.133.150:45238] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/404.php"] [unique_id "ac6cDRhR292toNOkLqGT5gAAAIo"]
[Fri Apr 03 00:40:45.719060 2026] [:error] [pid 25035:tid 25448] [client 158.158.117.24:22592] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gdn.php"] [unique_id "ac6cDRhR292toNOkLqGT6AAAAIY"]
[Fri Apr 03 00:40:46.008966 2026] [:error] [pid 25035:tid 25444] [client 4.232.187.184:23282] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/inputs.php"] [unique_id "ac6cDhhR292toNOkLqGT6QAAAII"]
[Fri Apr 03 00:40:46.179996 2026] [:error] [pid 25035:tid 25451] [client 40.89.133.150:44783] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lol.php"] [unique_id "ac6cDhhR292toNOkLqGT7AAAAIk"]
[Fri Apr 03 00:40:46.392455 2026] [:error] [pid 25035:tid 25453] [client 158.158.117.24:23006] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gdn.php"] [unique_id "ac6cDhhR292toNOkLqGT7wAAAIs"]
[Fri Apr 03 00:40:46.482940 2026] [:error] [pid 25018:tid 25428] [client 4.232.187.184:22818] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/inputs.php"] [unique_id "ac6cDnupR6lXnAUzFGrcOAAAAE8"]
[Fri Apr 03 00:40:46.651818 2026] [:error] [pid 25035:tid 25443] [client 40.89.133.150:45951] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lol.php"] [unique_id "ac6cDhhR292toNOkLqGT8QAAAIE"]
[Fri Apr 03 00:40:46.886840 2026] [:error] [pid 25035:tid 25458] [client 158.158.117.24:22940] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gdn.php"] [unique_id "ac6cDhhR292toNOkLqGT8wAAAJA"]
[Fri Apr 03 00:40:46.960425 2026] [:error] [pid 25035:tid 25442] [client 4.232.187.184:22849] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/inputs.php"] [unique_id "ac6cDhhR292toNOkLqGT9AAAAIA"]
[Fri Apr 03 00:40:47.196034 2026] [:error] [pid 25035:tid 25460] [client 40.89.133.150:41309] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lol.php"] [unique_id "ac6cDxhR292toNOkLqGT9QAAAJI"]
[Fri Apr 03 00:40:47.442130 2026] [:error] [pid 25010:tid 25355] [client 4.232.187.184:22466] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/inputs.php"] [unique_id "ac6cD4_KcjFQF5TuqTV9VAAAAAc"]
[Fri Apr 03 00:40:47.581324 2026] [:error] [pid 25470:tid 25473] [client 158.158.117.24:23027] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ton.php"] [unique_id "ac6cD3hROcck6_9HYyjeNAAAAME"]
[Fri Apr 03 00:40:47.670646 2026] [:error] [pid 25470:tid 25481] [client 40.89.133.150:45840] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lol.php"] [unique_id "ac6cD3hROcck6_9HYyjeNQAAAMk"]
[Fri Apr 03 00:40:47.920707 2026] [:error] [pid 25035:tid 25448] [client 4.232.187.184:22520] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ol.php"] [unique_id "ac6cDxhR292toNOkLqGT-AAAAIY"]
[Fri Apr 03 00:40:48.154150 2026] [:error] [pid 25010:tid 25352] [client 40.89.133.150:45889] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/radio.php"] [unique_id "ac6cEI_KcjFQF5TuqTV9VgAAAAQ"]
[Fri Apr 03 00:40:48.277999 2026] [:error] [pid 25010:tid 25354] [client 158.158.117.24:22555] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ton.php"] [unique_id "ac6cEI_KcjFQF5TuqTV9VwAAAAY"]
[Fri Apr 03 00:40:48.479701 2026] [:error] [pid 25035:tid 25464] [client 4.232.187.184:23261] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ol.php"] [unique_id "ac6cEBhR292toNOkLqGT_AAAAJY"]
[Fri Apr 03 00:40:48.671713 2026] [:error] [pid 25018:tid 25436] [client 40.89.133.150:45272] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/radio.php"] [unique_id "ac6cEHupR6lXnAUzFGrcPQAAAFc"]
[Fri Apr 03 00:40:48.962077 2026] [:error] [pid 25035:tid 25449] [client 158.158.117.24:23352] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ton.php"] [unique_id "ac6cEBhR292toNOkLqGT_gAAAIc"]
[Fri Apr 03 00:40:48.982854 2026] [:error] [pid 25035:tid 25453] [client 4.232.187.184:23249] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ol.php"] [unique_id "ac6cEBhR292toNOkLqGT_wAAAIs"]
[Fri Apr 03 00:40:49.158756 2026] [:error] [pid 25470:tid 25494] [client 40.89.133.150:45245] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/radio.php"] [unique_id "ac6cEXhROcck6_9HYyjePQAAANY"]
[Fri Apr 03 00:40:49.466335 2026] [:error] [pid 25470:tid 25483] [client 4.232.187.184:22856] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ol.php"] [unique_id "ac6cEXhROcck6_9HYyjePgAAAMs"]
[Fri Apr 03 00:40:49.681489 2026] [:error] [pid 25470:tid 25485] [client 158.158.117.24:23368] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ton.php"] [unique_id "ac6cEXhROcck6_9HYyjeQgAAAM0"]
[Fri Apr 03 00:40:49.700697 2026] [:error] [pid 25470:tid 25476] [client 40.89.133.150:45307] [client 40.89.133.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/radio.php"] [unique_id "ac6cEXhROcck6_9HYyjeQwAAAMQ"]
[Fri Apr 03 00:40:49.987710 2026] [:error] [pid 25035:tid 25455] [client 4.232.187.184:23257] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/v2.php"] [unique_id "ac6cERhR292toNOkLqGUAQAAAI0"]
[Fri Apr 03 00:40:50.440290 2026] [:error] [pid 25470:tid 25474] [client 158.158.117.24:23388] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/media.php"] [unique_id "ac6cEnhROcck6_9HYyjeRwAAAMI"]
[Fri Apr 03 00:40:50.482832 2026] [:error] [pid 25470:tid 25496] [client 4.232.187.184:22874] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/v2.php"] [unique_id "ac6cEnhROcck6_9HYyjeSQAAANg"]
[Fri Apr 03 00:40:50.971674 2026] [:error] [pid 25010:tid 25373] [client 4.232.187.184:23201] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/v2.php"] [unique_id "ac6cEo_KcjFQF5TuqTV9YwAAABg"]
[Fri Apr 03 00:40:51.198161 2026] [:error] [pid 25010:tid 25363] [client 158.158.117.24:22596] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/media.php"] [unique_id "ac6cE4_KcjFQF5TuqTV9ZAAAAA4"]
[Fri Apr 03 00:40:51.633083 2026] [:error] [pid 25035:tid 25450] [client 4.232.187.184:22462] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/v2.php"] [unique_id "ac6cExhR292toNOkLqGUBAAAAIg"]
[Fri Apr 03 00:40:51.873677 2026] [:error] [pid 25470:tid 25492] [client 158.158.117.24:23316] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/media.php"] [unique_id "ac6cE3hROcck6_9HYyjeUwAAANQ"]
[Fri Apr 03 00:40:52.097580 2026] [:error] [pid 25470:tid 25482] [client 4.232.187.184:22496] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/admin-post.php"] [unique_id "ac6cFHhROcck6_9HYyjeVAAAAMo"]
[Fri Apr 03 00:40:52.403674 2026] [:error] [pid 25470:tid 25496] [client 158.158.117.24:23333] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/media.php"] [unique_id "ac6cFHhROcck6_9HYyjeVwAAANg"]
[Fri Apr 03 00:40:52.580555 2026] [:error] [pid 25010:tid 25365] [client 4.232.187.184:22460] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/admin-post.php"] [unique_id "ac6cFI_KcjFQF5TuqTV9aAAAABA"]
[Fri Apr 03 00:40:52.970713 2026] [:error] [pid 25010:tid 25367] [client 158.158.117.24:22957] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "ac6cFI_KcjFQF5TuqTV9awAAABI"]
[Fri Apr 03 00:40:53.071957 2026] [:error] [pid 25470:tid 25479] [client 4.232.187.184:23200] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/admin-post.php"] [unique_id "ac6cFXhROcck6_9HYyjeXAAAAMc"]
[Fri Apr 03 00:40:53.475477 2026] [:error] [pid 25010:tid 25364] [client 158.158.117.24:23322] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "ac6cFY_KcjFQF5TuqTV9bgAAAA8"]
[Fri Apr 03 00:40:53.562332 2026] [:error] [pid 25470:tid 25489] [client 4.232.187.184:22844] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/admin-post.php"] [unique_id "ac6cFXhROcck6_9HYyjeYgAAANE"]
[Fri Apr 03 00:40:53.988469 2026] [:error] [pid 25470:tid 25473] [client 158.158.117.24:23039] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "ac6cFXhROcck6_9HYyjeaQAAAME"]
[Fri Apr 03 00:40:54.053495 2026] [:error] [pid 25470:tid 25492] [client 4.232.187.184:23257] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/shoha.php"] [unique_id "ac6cFnhROcck6_9HYyjeagAAANQ"]
[Fri Apr 03 00:40:54.556251 2026] [:error] [pid 25470:tid 25496] [client 4.232.187.184:22871] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/shoha.php"] [unique_id "ac6cFnhROcck6_9HYyjebgAAANg"]
[Fri Apr 03 00:40:54.618981 2026] [:error] [pid 25470:tid 25483] [client 158.158.117.24:22916] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "ac6cFnhROcck6_9HYyjebwAAAMs"]
[Fri Apr 03 00:40:55.031334 2026] [:error] [pid 25470:tid 25479] [client 4.232.187.184:23251] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/shoha.php"] [unique_id "ac6cF3hROcck6_9HYyjecwAAAMc"]
[Fri Apr 03 00:40:55.357626 2026] [:error] [pid 25470:tid 25485] [client 158.158.117.24:23335] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admir.php"] [unique_id "ac6cF3hROcck6_9HYyjedQAAAM0"]
[Fri Apr 03 00:40:55.499917 2026] [:error] [pid 25470:tid 25493] [client 4.232.187.184:23179] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/shoha.php"] [unique_id "ac6cF3hROcck6_9HYyjedwAAANU"]
[Fri Apr 03 00:40:55.896534 2026] [:error] [pid 25470:tid 25489] [client 158.158.117.24:23300] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admir.php"] [unique_id "ac6cF3hROcck6_9HYyjeewAAANE"]
[Fri Apr 03 00:40:56.247375 2026] [:error] [pid 25470:tid 25476] [client 4.232.187.184:23219] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/info.php"] [unique_id "ac6cGHhROcck6_9HYyjefgAAAMQ"]
[Fri Apr 03 00:40:56.469074 2026] [:error] [pid 25470:tid 25492] [client 158.158.117.24:22198] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admir.php"] [unique_id "ac6cGHhROcck6_9HYyjehQAAANQ"]
[Fri Apr 03 00:40:56.805695 2026] [:error] [pid 25470:tid 25485] [client 4.232.187.184:22485] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/info.php"] [unique_id "ac6cGHhROcck6_9HYyjeigAAAM0"]
[Fri Apr 03 00:40:56.961477 2026] [:error] [pid 25470:tid 25487] [client 158.158.117.24:22918] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admir.php"] [unique_id "ac6cGHhROcck6_9HYyjejAAAAM8"]
[Fri Apr 03 00:40:57.533011 2026] [proxy_fcgi:error] [pid 25470:tid 25476] [client 158.158.117.24:23349] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 00:40:57.558608 2026] [:error] [pid 25470:tid 25480] [client 4.232.187.184:23237] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/info.php"] [unique_id "ac6cGXhROcck6_9HYyjelAAAAMg"]
[Fri Apr 03 00:40:57.781631 2026] [proxy_fcgi:error] [pid 25470:tid 25487] [client 158.158.117.24:23349] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 00:40:58.062529 2026] [:error] [pid 25470:tid 25473] [client 4.232.187.184:21870] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/info.php"] [unique_id "ac6cGnhROcck6_9HYyjemwAAAME"]
[Fri Apr 03 00:40:58.530865 2026] [proxy_fcgi:error] [pid 25470:tid 25493] [client 158.158.117.24:23349] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 00:40:58.773630 2026] [proxy_fcgi:error] [pid 25470:tid 25475] [client 158.158.117.24:23349] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 00:40:59.165535 2026] [proxy_fcgi:error] [pid 25470:tid 25478] [client 158.158.117.24:23349] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 00:40:59.451432 2026] [proxy_fcgi:error] [pid 25470:tid 25492] [client 158.158.117.24:23349] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 00:40:59.784574 2026] [proxy_fcgi:error] [pid 25470:tid 25473] [client 158.158.117.24:23349] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 00:41:00.283270 2026] [proxy_fcgi:error] [pid 25470:tid 25472] [client 158.158.117.24:23349] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 00:41:00.527421 2026] [proxy_fcgi:error] [pid 25470:tid 25485] [client 158.158.117.24:23349] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 00:41:00.544474 2026] [:error] [pid 25470:tid 25479] [client 4.232.187.184:22851] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/new.php"] [unique_id "ac6cHHhROcck6_9HYyjergAAAMc"]
[Fri Apr 03 00:41:00.767476 2026] [:error] [pid 25470:tid 25477] [client 158.158.117.24:23349] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-configs.php"] [unique_id "ac6cHHhROcck6_9HYyjesQAAAMU"]
[Fri Apr 03 00:41:01.068078 2026] [:error] [pid 25470:tid 25491] [client 4.232.187.184:22793] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/new.php"] [unique_id "ac6cHXhROcck6_9HYyjesgAAANM"]
[Fri Apr 03 00:41:01.321145 2026] [:error] [pid 25018:tid 25431] [client 158.158.117.24:23306] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-configs.php"] [unique_id "ac6cHXupR6lXnAUzFGrcZAAAAFI"]
[Fri Apr 03 00:41:01.587634 2026] [:error] [pid 25010:tid 25357] [client 4.232.187.184:22887] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/new.php"] [unique_id "ac6cHY_KcjFQF5TuqTV9dgAAAAk"]
[Fri Apr 03 00:41:01.852918 2026] [:error] [pid 25470:tid 25482] [client 158.158.117.24:22217] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-configs.php"] [unique_id "ac6cHXhROcck6_9HYyjetgAAAMo"]
[Fri Apr 03 00:41:02.101489 2026] [:error] [pid 25035:tid 25451] [client 4.232.187.184:22826] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/new.php"] [unique_id "ac6cHhhR292toNOkLqGUFQAAAIk"]
[Fri Apr 03 00:41:02.390339 2026] [:error] [pid 25010:tid 25358] [client 158.158.117.24:22996] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-configs.php"] [unique_id "ac6cHo_KcjFQF5TuqTV9dwAAAAo"]
[Fri Apr 03 00:41:02.730599 2026] [:error] [pid 25035:tid 25453] [client 4.232.187.184:22807] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/666.php"] [unique_id "ac6cHhhR292toNOkLqGUFwAAAIs"]
[Fri Apr 03 00:41:02.876169 2026] [:error] [pid 25010:tid 25349] [client 158.158.117.24:21766] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/yas.php"] [unique_id "ac6cHo_KcjFQF5TuqTV9eAAAAAI"]
[Fri Apr 03 00:41:03.307016 2026] [:error] [pid 25018:tid 25415] [client 4.232.187.184:23248] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/666.php"] [unique_id "ac6cH3upR6lXnAUzFGrcbQAAAEM"]
[Fri Apr 03 00:41:03.374776 2026] [:error] [pid 25018:tid 25420] [client 158.158.117.24:22650] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/yas.php"] [unique_id "ac6cH3upR6lXnAUzFGrcbgAAAEc"]
[Fri Apr 03 00:41:03.780445 2026] [:error] [pid 25035:tid 25466] [client 4.232.187.184:22843] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/666.php"] [unique_id "ac6cHxhR292toNOkLqGUGwAAAJg"]
[Fri Apr 03 00:41:03.884691 2026] [:error] [pid 25470:tid 25482] [client 158.158.117.24:22600] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/yas.php"] [unique_id "ac6cH3hROcck6_9HYyjevAAAAMo"]
[Fri Apr 03 00:41:04.370436 2026] [:error] [pid 25470:tid 25493] [client 4.232.187.184:23278] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/666.php"] [unique_id "ac6cIHhROcck6_9HYyjevwAAANU"]
[Fri Apr 03 00:41:04.467992 2026] [:error] [pid 25470:tid 25485] [client 158.158.117.24:22971] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/yas.php"] [unique_id "ac6cIHhROcck6_9HYyjewAAAAM0"]
[Fri Apr 03 00:41:04.855077 2026] [:error] [pid 25470:tid 25473] [client 4.232.187.184:23584] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/akcc.php"] [unique_id "ac6cIHhROcck6_9HYyjewwAAAME"]
[Fri Apr 03 00:41:04.970556 2026] [:error] [pid 25470:tid 25482] [client 158.158.117.24:23018] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file5.php"] [unique_id "ac6cIHhROcck6_9HYyjexQAAAMo"]
[Fri Apr 03 00:41:05.442984 2026] [:error] [pid 25470:tid 25480] [client 4.232.187.184:23209] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/akcc.php"] [unique_id "ac6cIXhROcck6_9HYyjezAAAAMg"]
[Fri Apr 03 00:41:05.521351 2026] [:error] [pid 25010:tid 25367] [client 158.158.117.24:22961] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file5.php"] [unique_id "ac6cIY_KcjFQF5TuqTV9jAAAABI"]
[Fri Apr 03 00:41:05.949835 2026] [:error] [pid 25035:tid 25445] [client 4.232.187.184:23203] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/akcc.php"] [unique_id "ac6cIRhR292toNOkLqGUHgAAAIM"]
[Fri Apr 03 00:41:06.047801 2026] [:error] [pid 25035:tid 25447] [client 158.158.117.24:22927] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file5.php"] [unique_id "ac6cIhhR292toNOkLqGUHwAAAIU"]
[Fri Apr 03 00:41:06.681637 2026] [:error] [pid 25470:tid 25479] [client 4.232.187.184:23230] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/akcc.php"] [unique_id "ac6cInhROcck6_9HYyjezwAAAMc"]
[Fri Apr 03 00:41:06.743025 2026] [:error] [pid 25470:tid 25495] [client 158.158.117.24:22963] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file5.php"] [unique_id "ac6cInhROcck6_9HYyje0QAAANc"]
[Fri Apr 03 00:41:07.180003 2026] [:error] [pid 25010:tid 25357] [client 4.232.187.184:23568] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mo.php"] [unique_id "ac6cI4_KcjFQF5TuqTV9lgAAAAk"]
[Fri Apr 03 00:41:07.398849 2026] [:error] [pid 25018:tid 25435] [client 158.158.117.24:23005] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/v3.php"] [unique_id "ac6cI3upR6lXnAUzFGrcdAAAAFY"]
[Fri Apr 03 00:41:07.670600 2026] [:error] [pid 25010:tid 25362] [client 4.232.187.184:23667] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mo.php"] [unique_id "ac6cI4_KcjFQF5TuqTV9mgAAAA0"]
[Fri Apr 03 00:41:07.892282 2026] [:error] [pid 25018:tid 25420] [client 158.158.117.24:23303] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/v3.php"] [unique_id "ac6cI3upR6lXnAUzFGrcdwAAAEc"]
[Fri Apr 03 00:41:08.413801 2026] [:error] [pid 25018:tid 25428] [client 158.158.117.24:23355] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/v3.php"] [unique_id "ac6cJHupR6lXnAUzFGrcewAAAE8"]
[Fri Apr 03 00:41:08.422325 2026] [:error] [pid 25035:tid 25460] [client 4.232.187.184:23585] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mo.php"] [unique_id "ac6cJBhR292toNOkLqGUIgAAAJI"]
[Fri Apr 03 00:41:08.900241 2026] [:error] [pid 25018:tid 25427] [client 4.232.187.184:23574] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mo.php"] [unique_id "ac6cJHupR6lXnAUzFGrcfQAAAE4"]
[Fri Apr 03 00:41:08.999879 2026] [:error] [pid 25010:tid 25356] [client 158.158.117.24:22617] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/v3.php"] [unique_id "ac6cJI_KcjFQF5TuqTV9pgAAAAg"]
[Fri Apr 03 00:41:09.364631 2026] [:error] [pid 25010:tid 25365] [client 4.232.187.184:23216] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/doc.php"] [unique_id "ac6cJY_KcjFQF5TuqTV9qgAAABA"]
[Fri Apr 03 00:41:09.535448 2026] [:error] [pid 25035:tid 25448] [client 158.158.117.24:22590] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "ac6cJRhR292toNOkLqGUJgAAAIY"]
[Fri Apr 03 00:41:10.024657 2026] [:error] [pid 25010:tid 25369] [client 4.232.187.184:23247] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/doc.php"] [unique_id "ac6cJo_KcjFQF5TuqTV9sgAAABQ"]
[Fri Apr 03 00:41:10.028129 2026] [:error] [pid 25010:tid 25362] [client 158.158.117.24:22593] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "ac6cJo_KcjFQF5TuqTV9swAAAA0"]
[Fri Apr 03 00:41:10.509875 2026] [:error] [pid 25010:tid 25354] [client 4.232.187.184:23626] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/doc.php"] [unique_id "ac6cJo_KcjFQF5TuqTV9vAAAAAY"]
[Fri Apr 03 00:41:10.512329 2026] [:error] [pid 25010:tid 25368] [client 158.158.117.24:22923] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "ac6cJo_KcjFQF5TuqTV9vQAAABM"]
[Fri Apr 03 00:41:10.990701 2026] [:error] [pid 25010:tid 25367] [client 4.232.187.184:21795] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/doc.php"] [unique_id "ac6cJo_KcjFQF5TuqTV9wwAAABI"]
[Fri Apr 03 00:41:11.091285 2026] [:error] [pid 25010:tid 25366] [client 158.158.117.24:22621] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "ac6cJ4_KcjFQF5TuqTV9xQAAABE"]
[Fri Apr 03 00:41:11.620600 2026] [:error] [pid 25018:tid 25425] [client 158.158.117.24:22978] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gg.php"] [unique_id "ac6cJ3upR6lXnAUzFGrcgQAAAEw"]
[Fri Apr 03 00:41:11.796736 2026] [:error] [pid 25010:tid 25361] [client 4.232.187.184:23178] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/inde.php"] [unique_id "ac6cJ4_KcjFQF5TuqTV9zwAAAAw"]
[Fri Apr 03 00:41:12.137319 2026] [:error] [pid 25010:tid 25357] [client 158.158.117.24:23302] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gg.php"] [unique_id "ac6cKI_KcjFQF5TuqTV91AAAAAk"]
[Fri Apr 03 00:41:12.329503 2026] [:error] [pid 25010:tid 25349] [client 4.232.187.184:23586] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/inde.php"] [unique_id "ac6cKI_KcjFQF5TuqTV91wAAAAI"]
[Fri Apr 03 00:41:12.677058 2026] [:error] [pid 25010:tid 25364] [client 158.158.117.24:23377] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gg.php"] [unique_id "ac6cKI_KcjFQF5TuqTV92gAAAA8"]
[Fri Apr 03 00:41:12.807852 2026] [:error] [pid 25010:tid 25365] [client 4.232.187.184:23557] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/inde.php"] [unique_id "ac6cKI_KcjFQF5TuqTV92wAAABA"]
[Fri Apr 03 00:41:13.197724 2026] [:error] [pid 25035:tid 25465] [client 158.158.117.24:22925] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gg.php"] [unique_id "ac6cKRhR292toNOkLqGUMQAAAJc"]
[Fri Apr 03 00:41:13.278176 2026] [:error] [pid 25010:tid 25353] [client 4.232.187.184:23632] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/inde.php"] [unique_id "ac6cKY_KcjFQF5TuqTV94QAAAAU"]
[Fri Apr 03 00:41:13.767281 2026] [:error] [pid 25010:tid 25355] [client 4.232.187.184:23631] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ioxi-o.php"] [unique_id "ac6cKY_KcjFQF5TuqTV95AAAAAc"]
[Fri Apr 03 00:41:14.002620 2026] [:error] [pid 25010:tid 25364] [client 158.158.117.24:23389] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/upgrade/index.php"] [unique_id "ac6cKo_KcjFQF5TuqTV96AAAAA8"]
[Fri Apr 03 00:41:14.237891 2026] [:error] [pid 25035:tid 25454] [client 4.232.187.184:23267] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ioxi-o.php"] [unique_id "ac6cKhhR292toNOkLqGUNQAAAIw"]
[Fri Apr 03 00:41:14.715210 2026] [:error] [pid 25035:tid 25444] [client 4.232.187.184:23255] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ioxi-o.php"] [unique_id "ac6cKhhR292toNOkLqGUOAAAAII"]
[Fri Apr 03 00:41:14.736981 2026] [:error] [pid 25035:tid 25455] [client 158.158.117.24:21033] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/upgrade/index.php"] [unique_id "ac6cKhhR292toNOkLqGUOgAAAI0"]
[Fri Apr 03 00:41:15.185375 2026] [:error] [pid 25010:tid 25357] [client 4.232.187.184:23254] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ioxi-o.php"] [unique_id "ac6cK4_KcjFQF5TuqTV97gAAAAk"]
[Fri Apr 03 00:41:15.376877 2026] [:error] [pid 25010:tid 25368] [client 158.158.117.24:22161] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/upgrade/index.php"] [unique_id "ac6cK4_KcjFQF5TuqTV98QAAABM"]
[Fri Apr 03 00:41:15.764748 2026] [:error] [pid 25010:tid 25361] [client 4.232.187.184:22445] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/simple.php"] [unique_id "ac6cK4_KcjFQF5TuqTV99QAAAAw"]
[Fri Apr 03 00:41:16.010289 2026] [:error] [pid 25018:tid 25423] [client 158.158.117.24:22921] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/upgrade/index.php"] [unique_id "ac6cLHupR6lXnAUzFGrchQAAAEo"]
[Fri Apr 03 00:41:16.253444 2026] [:error] [pid 25470:tid 25479] [client 4.232.187.184:23558] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/simple.php"] [unique_id "ac6cLHhROcck6_9HYyje2gAAAMc"]
[Fri Apr 03 00:41:16.727620 2026] [:error] [pid 25010:tid 25358] [client 4.232.187.184:23173] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/simple.php"] [unique_id "ac6cLI_KcjFQF5TuqTV9-wAAAAo"]
[Fri Apr 03 00:41:16.997721 2026] [:error] [pid 25010:tid 25354] [client 158.158.117.24:22616] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/himu.php"] [unique_id "ac6cLI_KcjFQF5TuqTV9_AAAAAY"]
[Fri Apr 03 00:41:17.225208 2026] [proxy_fcgi:error] [pid 25010:tid 25351] [client 4.232.187.184:22417] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 00:41:17.462930 2026] [proxy_fcgi:error] [pid 25010:tid 25359] [client 4.232.187.184:22417] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 00:41:17.940692 2026] [proxy_fcgi:error] [pid 25010:tid 25368] [client 4.232.187.184:22417] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 00:41:18.140306 2026] [:error] [pid 25010:tid 25351] [client 158.158.117.24:23317] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/himu.php"] [unique_id "ac6cLo_KcjFQF5TuqTV-CAAAAAM"]
[Fri Apr 03 00:41:18.197811 2026] [proxy_fcgi:error] [pid 25010:tid 25347] [client 4.232.187.184:22417] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 00:41:18.435769 2026] [proxy_fcgi:error] [pid 25010:tid 25355] [client 4.232.187.184:22417] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 00:41:18.674643 2026] [proxy_fcgi:error] [pid 25010:tid 25364] [client 4.232.187.184:22417] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 00:41:18.850125 2026] [:error] [pid 25010:tid 25372] [client 158.158.117.24:23412] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/himu.php"] [unique_id "ac6cLo_KcjFQF5TuqTV-EgAAABc"]
[Fri Apr 03 00:41:19.523921 2026] [:error] [pid 25470:tid 25482] [client 158.158.117.24:23353] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/himu.php"] [unique_id "ac6cL3hROcck6_9HYyje5wAAAMo"]
[Fri Apr 03 00:41:20.129836 2026] [proxy_fcgi:error] [pid 25010:tid 25359] [client 4.232.187.184:22417] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 00:41:20.441489 2026] [proxy_fcgi:error] [pid 25010:tid 25355] [client 4.232.187.184:22417] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 00:41:20.648825 2026] [:error] [pid 25470:tid 25491] [client 158.158.117.24:23736] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/z.php"] [unique_id "ac6cMHhROcck6_9HYyje7QAAANM"]
[Fri Apr 03 00:41:20.682385 2026] [proxy_fcgi:error] [pid 25010:tid 25371] [client 4.232.187.184:22417] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 00:41:20.994495 2026] [proxy_fcgi:error] [pid 25010:tid 25358] [client 4.232.187.184:22417] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 00:41:21.227897 2026] [:error] [pid 25010:tid 25356] [client 4.232.187.184:22417] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gdn.php"] [unique_id "ac6cMY_KcjFQF5TuqTV-GwAAAAg"]
[Fri Apr 03 00:41:21.399146 2026] [:error] [pid 25470:tid 25496] [client 158.158.117.24:23360] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/z.php"] [unique_id "ac6cMXhROcck6_9HYyje8QAAANg"]
[Fri Apr 03 00:41:21.702846 2026] [:error] [pid 25035:tid 25447] [client 4.232.187.184:23646] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gdn.php"] [unique_id "ac6cMRhR292toNOkLqGUQQAAAIU"]
[Fri Apr 03 00:41:22.407052 2026] [:error] [pid 25018:tid 25435] [client 158.158.117.24:23773] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/z.php"] [unique_id "ac6cMnupR6lXnAUzFGrckgAAAFY"]
[Fri Apr 03 00:41:22.474516 2026] [:error] [pid 25035:tid 25456] [client 4.232.187.184:23187] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gdn.php"] [unique_id "ac6cMhhR292toNOkLqGUQgAAAI4"]
[Fri Apr 03 00:41:22.967359 2026] [:error] [pid 25470:tid 25474] [client 4.232.187.184:23579] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gdn.php"] [unique_id "ac6cMnhROcck6_9HYyje-gAAAMI"]
[Fri Apr 03 00:41:23.483298 2026] [:error] [pid 25470:tid 25487] [client 4.232.187.184:22891] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ton.php"] [unique_id "ac6cM3hROcck6_9HYyje-wAAAM8"]
[Fri Apr 03 00:41:24.100027 2026] [:error] [pid 25035:tid 25465] [client 4.232.187.184:23252] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ton.php"] [unique_id "ac6cNBhR292toNOkLqGUSQAAAJc"]
[Fri Apr 03 00:41:24.859837 2026] [:error] [pid 25470:tid 25493] [client 4.232.187.184:23188] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ton.php"] [unique_id "ac6cNHhROcck6_9HYyje_gAAANU"]
[Fri Apr 03 00:41:25.327432 2026] [:error] [pid 25035:tid 25462] [client 4.232.187.184:23565] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ton.php"] [unique_id "ac6cNRhR292toNOkLqGUSwAAAJQ"]
[Fri Apr 03 00:41:25.810727 2026] [:error] [pid 25470:tid 25476] [client 4.232.187.184:23206] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/media.php"] [unique_id "ac6cNXhROcck6_9HYyjfBQAAAMQ"]
[Fri Apr 03 00:41:26.266972 2026] [:error] [pid 25018:tid 25412] [client 158.158.117.24:22169] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/z.php"] [unique_id "ac6cNnupR6lXnAUzFGrcnAAAAEE"]
[Fri Apr 03 00:41:26.278165 2026] [:error] [pid 25470:tid 25472] [client 4.232.187.184:22862] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/media.php"] [unique_id "ac6cNnhROcck6_9HYyjfCAAAAMA"]
[Fri Apr 03 00:41:26.791530 2026] [:error] [pid 25035:tid 25457] [client 4.232.187.184:23559] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/media.php"] [unique_id "ac6cNhhR292toNOkLqGUTQAAAI8"]
[Fri Apr 03 00:41:27.043243 2026] [:error] [pid 25035:tid 25461] [client 158.158.117.24:22540] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/png.php"] [unique_id "ac6cNxhR292toNOkLqGUTgAAAJM"]
[Fri Apr 03 00:41:27.421383 2026] [:error] [pid 25470:tid 25472] [client 4.232.187.184:23220] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/media.php"] [unique_id "ac6cN3hROcck6_9HYyjfEgAAAMA"]
[Fri Apr 03 00:41:27.893260 2026] [:error] [pid 25470:tid 25475] [client 4.232.187.184:23295] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "ac6cN3hROcck6_9HYyjfFwAAAMM"]
[Fri Apr 03 00:41:28.040022 2026] [:error] [pid 25470:tid 25491] [client 158.158.117.24:23767] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/png.php"] [unique_id "ac6cOHhROcck6_9HYyjfGwAAANM"]
[Fri Apr 03 00:41:28.397111 2026] [:error] [pid 25018:tid 25435] [client 4.232.187.184:23285] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "ac6cOHupR6lXnAUzFGrcnwAAAFY"]
[Fri Apr 03 00:41:28.528685 2026] [:error] [pid 25018:tid 25434] [client 158.158.117.24:23395] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/png.php"] [unique_id "ac6cOHupR6lXnAUzFGrcoAAAAFU"]
[Fri Apr 03 00:41:28.925519 2026] [:error] [pid 25035:tid 25449] [client 4.232.187.184:22858] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "ac6cOBhR292toNOkLqGUTwAAAIc"]
[Fri Apr 03 00:41:29.023547 2026] [:error] [pid 25035:tid 25447] [client 158.158.117.24:23419] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/png.php"] [unique_id "ac6cORhR292toNOkLqGUUQAAAIU"]
[Fri Apr 03 00:41:29.413774 2026] [:error] [pid 25470:tid 25482] [client 4.232.187.184:23197] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "ac6cOXhROcck6_9HYyjfIwAAAMo"]
[Fri Apr 03 00:41:29.639142 2026] [:error] [pid 25018:tid 25411] [client 158.158.117.24:23421] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mds.php"] [unique_id "ac6cOXupR6lXnAUzFGrcpQAAAEA"]
[Fri Apr 03 00:41:29.887020 2026] [:error] [pid 25010:tid 25349] [client 4.232.187.184:23192] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admir.php"] [unique_id "ac6cOY_KcjFQF5TuqTV-IwAAAAI"]
[Fri Apr 03 00:41:30.149595 2026] [:error] [pid 25010:tid 25371] [client 158.158.117.24:23681] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mds.php"] [unique_id "ac6cOo_KcjFQF5TuqTV-JQAAABY"]
[Fri Apr 03 00:41:30.392343 2026] [:error] [pid 25010:tid 25362] [client 4.232.187.184:22786] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admir.php"] [unique_id "ac6cOo_KcjFQF5TuqTV-JgAAAA0"]
[Fri Apr 03 00:41:30.871880 2026] [:error] [pid 25470:tid 25475] [client 158.158.117.24:22634] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mds.php"] [unique_id "ac6cOnhROcck6_9HYyjfLAAAAMM"]
[Fri Apr 03 00:41:30.929882 2026] [:error] [pid 25035:tid 25462] [client 4.232.187.184:23241] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admir.php"] [unique_id "ac6cOhhR292toNOkLqGUWgAAAJQ"]
[Fri Apr 03 00:41:31.521455 2026] [:error] [pid 25470:tid 25492] [client 158.158.117.24:23413] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mds.php"] [unique_id "ac6cO3hROcck6_9HYyjfLwAAANQ"]
[Fri Apr 03 00:41:31.587968 2026] [:error] [pid 25470:tid 25472] [client 4.232.187.184:22828] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admir.php"] [unique_id "ac6cO3hROcck6_9HYyjfMAAAAMA"]
[Fri Apr 03 00:41:32.144647 2026] [:error] [pid 25470:tid 25481] [client 158.158.117.24:23346] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/acp.php"] [unique_id "ac6cPHhROcck6_9HYyjfMQAAAMk"]
[Fri Apr 03 00:41:32.274869 2026] [:error] [pid 25035:tid 25448] [client 4.232.187.184:23181] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fs.php"] [unique_id "ac6cPBhR292toNOkLqGUXwAAAIY"]
[Fri Apr 03 00:41:32.672984 2026] [:error] [pid 25470:tid 25473] [client 158.158.117.24:23010] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/acp.php"] [unique_id "ac6cPHhROcck6_9HYyjfNwAAAME"]
[Fri Apr 03 00:41:33.018546 2026] [:error] [pid 25470:tid 25490] [client 4.232.187.184:23183] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fs.php"] [unique_id "ac6cPXhROcck6_9HYyjfPAAAANI"]
[Fri Apr 03 00:41:33.386480 2026] [:error] [pid 25035:tid 25456] [client 158.158.117.24:23315] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/acp.php"] [unique_id "ac6cPRhR292toNOkLqGUYgAAAI4"]
[Fri Apr 03 00:41:33.618600 2026] [:error] [pid 25470:tid 25478] [client 4.232.187.184:23572] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fs.php"] [unique_id "ac6cPXhROcck6_9HYyjfQQAAAMY"]
[Fri Apr 03 00:41:33.874968 2026] [:error] [pid 25470:tid 25493] [client 158.158.117.24:22991] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/acp.php"] [unique_id "ac6cPXhROcck6_9HYyjfRAAAANU"]
[Fri Apr 03 00:41:34.086758 2026] [:error] [pid 25010:tid 25365] [client 4.232.187.184:23233] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fs.php"] [unique_id "ac6cPo_KcjFQF5TuqTV-LQAAABA"]
[Fri Apr 03 00:41:34.419436 2026] [:error] [pid 25010:tid 25348] [client 158.158.117.24:23682] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/m.php"] [unique_id "ac6cPo_KcjFQF5TuqTV-LgAAAAE"]
[Fri Apr 03 00:41:34.584152 2026] [:error] [pid 25470:tid 25475] [client 4.232.187.184:23659] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/error.php"] [unique_id "ac6cPnhROcck6_9HYyjfSgAAAMM"]
[Fri Apr 03 00:41:35.212848 2026] [:error] [pid 25018:tid 25431] [client 158.158.117.24:23714] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/m.php"] [unique_id "ac6cP3upR6lXnAUzFGrcqAAAAFI"]
[Fri Apr 03 00:41:35.427159 2026] [:error] [pid 25018:tid 25437] [client 4.232.187.184:23936] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/error.php"] [unique_id "ac6cP3upR6lXnAUzFGrcqgAAAFg"]
[Fri Apr 03 00:41:35.714028 2026] [:error] [pid 25010:tid 25364] [client 158.158.117.24:23698] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/m.php"] [unique_id "ac6cP4_KcjFQF5TuqTV-MAAAAA8"]
[Fri Apr 03 00:41:36.083976 2026] [:error] [pid 25018:tid 25423] [client 4.232.187.184:23644] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/error.php"] [unique_id "ac6cQHupR6lXnAUzFGrcrQAAAEo"]
[Fri Apr 03 00:41:36.431603 2026] [:error] [pid 25035:tid 25449] [client 158.158.117.24:23326] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/m.php"] [unique_id "ac6cQBhR292toNOkLqGUbgAAAIc"]
[Fri Apr 03 00:41:36.601739 2026] [:error] [pid 25018:tid 25422] [client 4.232.187.184:23232] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/error.php"] [unique_id "ac6cQHupR6lXnAUzFGrcsAAAAEk"]
[Fri Apr 03 00:41:36.915730 2026] [:error] [pid 25010:tid 25368] [client 158.158.117.24:23409] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-is.php"] [unique_id "ac6cQI_KcjFQF5TuqTV-NAAAABM"]
[Fri Apr 03 00:41:37.075210 2026] [:error] [pid 25018:tid 25421] [client 4.232.187.184:24024] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/colour.php"] [unique_id "ac6cQXupR6lXnAUzFGrcswAAAEg"]
[Fri Apr 03 00:41:37.647910 2026] [:error] [pid 25470:tid 25491] [client 4.232.187.184:23990] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/colour.php"] [unique_id "ac6cQXhROcck6_9HYyjfTwAAANM"]
[Fri Apr 03 00:41:37.706935 2026] [:error] [pid 25035:tid 25456] [client 158.158.117.24:23001] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-is.php"] [unique_id "ac6cQRhR292toNOkLqGUcwAAAI4"]
[Fri Apr 03 00:41:38.203350 2026] [:error] [pid 25018:tid 25414] [client 158.158.117.24:23310] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-is.php"] [unique_id "ac6cQnupR6lXnAUzFGrctwAAAEI"]
[Fri Apr 03 00:41:38.291771 2026] [:error] [pid 25010:tid 25366] [client 4.232.187.184:23960] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/colour.php"] [unique_id "ac6cQo_KcjFQF5TuqTV-OAAAABE"]
[Fri Apr 03 00:41:38.687717 2026] [:error] [pid 25470:tid 25474] [client 158.158.117.24:23296] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-is.php"] [unique_id "ac6cQnhROcck6_9HYyjfUgAAAMI"]
[Fri Apr 03 00:41:38.903833 2026] [:error] [pid 25470:tid 25493] [client 4.232.187.184:23552] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/colour.php"] [unique_id "ac6cQnhROcck6_9HYyjfUwAAANU"]
[Fri Apr 03 00:41:39.402195 2026] [:error] [pid 25470:tid 25476] [client 4.232.187.184:23989] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cc.php"] [unique_id "ac6cQ3hROcck6_9HYyjfWQAAAMQ"]
[Fri Apr 03 00:41:39.573510 2026] [:error] [pid 25010:tid 25367] [client 158.158.117.24:23348] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file15.php"] [unique_id "ac6cQ4_KcjFQF5TuqTV-PgAAABI"]
[Fri Apr 03 00:41:39.991750 2026] [:error] [pid 25035:tid 25462] [client 4.232.187.184:23598] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cc.php"] [unique_id "ac6cQxhR292toNOkLqGUdwAAAJQ"]
[Fri Apr 03 00:41:40.072319 2026] [:error] [pid 25470:tid 25479] [client 158.158.117.24:23788] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file15.php"] [unique_id "ac6cRHhROcck6_9HYyjfXgAAAMc"]
[Fri Apr 03 00:41:40.685963 2026] [:error] [pid 25010:tid 25354] [client 4.232.187.184:23563] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cc.php"] [unique_id "ac6cRI_KcjFQF5TuqTV-QQAAAAY"]
[Fri Apr 03 00:41:40.803611 2026] [:error] [pid 25035:tid 25445] [client 158.158.117.24:22174] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file15.php"] [unique_id "ac6cRBhR292toNOkLqGUfAAAAIM"]
[Fri Apr 03 00:41:41.316871 2026] [:error] [pid 25470:tid 25490] [client 158.158.117.24:23738] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file15.php"] [unique_id "ac6cRXhROcck6_9HYyjfYwAAANI"]
[Fri Apr 03 00:41:41.412337 2026] [:error] [pid 25470:tid 25481] [client 4.232.187.184:22847] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cc.php"] [unique_id "ac6cRXhROcck6_9HYyjfZQAAAMk"]
[Fri Apr 03 00:41:41.794180 2026] [:error] [pid 25470:tid 25488] [client 158.158.117.24:23696] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wsd.php"] [unique_id "ac6cRXhROcck6_9HYyjfZwAAANA"]
[Fri Apr 03 00:41:42.095897 2026] [:error] [pid 25010:tid 25365] [client 4.232.187.184:23941] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bkxzo.php"] [unique_id "ac6cRo_KcjFQF5TuqTV-SAAAABA"]
[Fri Apr 03 00:41:42.290399 2026] [:error] [pid 25010:tid 25369] [client 158.158.117.24:22624] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wsd.php"] [unique_id "ac6cRo_KcjFQF5TuqTV-SQAAABQ"]
[Fri Apr 03 00:41:42.643244 2026] [:error] [pid 25018:tid 25428] [client 4.232.187.184:23253] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bkxzo.php"] [unique_id "ac6cRnupR6lXnAUzFGrcwAAAAE8"]
[Fri Apr 03 00:41:42.786453 2026] [:error] [pid 25470:tid 25475] [client 158.158.117.24:23366] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wsd.php"] [unique_id "ac6cRnhROcck6_9HYyjfawAAAMM"]
[Fri Apr 03 00:41:43.133423 2026] [:error] [pid 25470:tid 25479] [client 4.232.187.184:24044] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bkxzo.php"] [unique_id "ac6cR3hROcck6_9HYyjfbwAAAMc"]
[Fri Apr 03 00:41:43.390159 2026] [:error] [pid 25470:tid 25486] [client 158.158.117.24:23725] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wsd.php"] [unique_id "ac6cR3hROcck6_9HYyjfcQAAAM4"]
[Fri Apr 03 00:41:43.598819 2026] [:error] [pid 25010:tid 25359] [client 4.232.187.184:23939] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bkxzo.php"] [unique_id "ac6cR4_KcjFQF5TuqTV-TAAAAAs"]
[Fri Apr 03 00:41:43.874546 2026] [:error] [pid 25470:tid 25488] [client 158.158.117.24:23350] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/about.php"] [unique_id "ac6cR3hROcck6_9HYyjfdwAAANA"]
[Fri Apr 03 00:41:44.211503 2026] [:error] [pid 25470:tid 25485] [client 4.232.187.184:23616] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lo.php"] [unique_id "ac6cSHhROcck6_9HYyjfegAAAM0"]
[Fri Apr 03 00:41:44.361926 2026] [:error] [pid 25470:tid 25492] [client 158.158.117.24:23370] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/about.php"] [unique_id "ac6cSHhROcck6_9HYyjffAAAANQ"]
[Fri Apr 03 00:41:44.704228 2026] [:error] [pid 25470:tid 25490] [client 4.232.187.184:22428] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lo.php"] [unique_id "ac6cSHhROcck6_9HYyjfgAAAANI"]
[Fri Apr 03 00:41:44.848538 2026] [:error] [pid 25470:tid 25478] [client 158.158.117.24:23357] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/about.php"] [unique_id "ac6cSHhROcck6_9HYyjfggAAAMY"]
[Fri Apr 03 00:41:45.352125 2026] [:error] [pid 25010:tid 25349] [client 158.158.117.24:23417] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/about.php"] [unique_id "ac6cSY_KcjFQF5TuqTV-TgAAAAI"]
[Fri Apr 03 00:41:45.455173 2026] [:error] [pid 25010:tid 25355] [client 4.232.187.184:24011] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lo.php"] [unique_id "ac6cSY_KcjFQF5TuqTV-UAAAAAc"]
[Fri Apr 03 00:41:45.830266 2026] [:error] [pid 25010:tid 25368] [client 158.158.117.24:23781] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/an.php"] [unique_id "ac6cSY_KcjFQF5TuqTV-UwAAABM"]
[Fri Apr 03 00:41:46.021196 2026] [:error] [pid 25010:tid 25347] [client 4.232.187.184:23983] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lo.php"] [unique_id "ac6cSo_KcjFQF5TuqTV-VQAAAAA"]
[Fri Apr 03 00:41:46.321264 2026] [:error] [pid 25018:tid 25414] [client 158.158.117.24:22968] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/an.php"] [unique_id "ac6cSnupR6lXnAUzFGrcwQAAAEI"]
[Fri Apr 03 00:41:46.612621 2026] [:error] [pid 25035:tid 25459] [client 4.232.187.184:23223] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2.php"] [unique_id "ac6cShhR292toNOkLqGUggAAAJE"]
[Fri Apr 03 00:41:46.799342 2026] [:error] [pid 25035:tid 25455] [client 158.158.117.24:23334] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/an.php"] [unique_id "ac6cShhR292toNOkLqGUhAAAAI0"]
[Fri Apr 03 00:41:47.286759 2026] [:error] [pid 25470:tid 25485] [client 4.232.187.184:23259] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2.php"] [unique_id "ac6cS3hROcck6_9HYyjfiQAAAM0"]
[Fri Apr 03 00:41:47.438250 2026] [:error] [pid 25470:tid 25487] [client 158.158.117.24:23037] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/an.php"] [unique_id "ac6cS3hROcck6_9HYyjfjgAAAM8"]
[Fri Apr 03 00:41:47.791416 2026] [:error] [pid 25470:tid 25492] [client 4.232.187.184:23675] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2.php"] [unique_id "ac6cS3hROcck6_9HYyjfkAAAANQ"]
[Fri Apr 03 00:41:47.978832 2026] [:error] [pid 25470:tid 25488] [client 158.158.117.24:23693] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/404.php"] [unique_id "ac6cS3hROcck6_9HYyjfkgAAANA"]
[Fri Apr 03 00:41:48.299580 2026] [:error] [pid 25470:tid 25474] [client 4.232.187.184:23617] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2.php"] [unique_id "ac6cTHhROcck6_9HYyjflAAAAMI"]
[Fri Apr 03 00:41:48.536739 2026] [:error] [pid 25470:tid 25476] [client 158.158.117.24:23763] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/404.php"] [unique_id "ac6cTHhROcck6_9HYyjfmAAAAMQ"]
[Fri Apr 03 00:41:48.774881 2026] [:error] [pid 25470:tid 25487] [client 4.232.187.184:23966] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/layout.php"] [unique_id "ac6cTHhROcck6_9HYyjfmgAAAM8"]
[Fri Apr 03 00:41:49.103476 2026] [:error] [pid 25470:tid 25488] [client 158.158.117.24:23385] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/404.php"] [unique_id "ac6cTXhROcck6_9HYyjfnAAAANA"]
[Fri Apr 03 00:41:49.341246 2026] [:error] [pid 25035:tid 25460] [client 4.232.187.184:23614] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/layout.php"] [unique_id "ac6cTRhR292toNOkLqGUiQAAAJI"]
[Fri Apr 03 00:41:49.620669 2026] [:error] [pid 25470:tid 25476] [client 158.158.117.24:24124] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/404.php"] [unique_id "ac6cTXhROcck6_9HYyjfngAAAMQ"]
[Fri Apr 03 00:41:49.865570 2026] [:error] [pid 25470:tid 25481] [client 4.232.187.184:23243] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/layout.php"] [unique_id "ac6cTXhROcck6_9HYyjfoQAAAMk"]
[Fri Apr 03 00:41:50.103634 2026] [:error] [pid 25470:tid 25485] [client 158.158.117.24:23757] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lol.php"] [unique_id "ac6cTnhROcck6_9HYyjfpQAAAM0"]
[Fri Apr 03 00:41:50.561768 2026] [:error] [pid 25010:tid 25352] [client 4.232.187.184:23975] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/layout.php"] [unique_id "ac6cTo_KcjFQF5TuqTV-awAAAAQ"]
[Fri Apr 03 00:41:50.604283 2026] [:error] [pid 25010:tid 25359] [client 158.158.117.24:23746] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lol.php"] [unique_id "ac6cTo_KcjFQF5TuqTV-bAAAAAs"]
[Fri Apr 03 00:41:51.089467 2026] [:error] [pid 25010:tid 25358] [client 158.158.117.24:22949] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lol.php"] [unique_id "ac6cT4_KcjFQF5TuqTV-bwAAAAo"]
[Fri Apr 03 00:41:51.257227 2026] [:error] [pid 25018:tid 25420] [client 4.232.187.184:23955] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "ac6cT3upR6lXnAUzFGrcyAAAAEc"]
[Fri Apr 03 00:41:51.574759 2026] [:error] [pid 25035:tid 25453] [client 158.158.117.24:24123] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lol.php"] [unique_id "ac6cTxhR292toNOkLqGUjAAAAIs"]
[Fri Apr 03 00:41:51.721075 2026] [:error] [pid 25018:tid 25436] [client 4.232.187.184:24048] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "ac6cT3upR6lXnAUzFGrcyQAAAFc"]
[Fri Apr 03 00:41:52.084553 2026] [:error] [pid 25035:tid 25459] [client 158.158.117.24:24136] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/radio.php"] [unique_id "ac6cUBhR292toNOkLqGUjQAAAJE"]
[Fri Apr 03 00:41:52.187281 2026] [:error] [pid 25035:tid 25455] [client 4.232.187.184:23635] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "ac6cUBhR292toNOkLqGUjgAAAI0"]
[Fri Apr 03 00:41:52.573350 2026] [:error] [pid 25470:tid 25495] [client 158.158.117.24:23400] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/radio.php"] [unique_id "ac6cUHhROcck6_9HYyjfrQAAANc"]
[Fri Apr 03 00:41:52.667053 2026] [:error] [pid 25470:tid 25492] [client 4.232.187.184:23275] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "ac6cUHhROcck6_9HYyjfrgAAANQ"]
[Fri Apr 03 00:41:53.228981 2026] [:error] [pid 25010:tid 25347] [client 158.158.117.24:23715] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/radio.php"] [unique_id "ac6cUY_KcjFQF5TuqTV-fQAAAAA"]
[Fri Apr 03 00:41:53.260967 2026] [:error] [pid 25470:tid 25479] [client 4.232.187.184:23937] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "ac6cUXhROcck6_9HYyjfsQAAAMc"]
[Fri Apr 03 00:41:53.779947 2026] [:error] [pid 25010:tid 25354] [client 4.232.187.184:22857] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "ac6cUY_KcjFQF5TuqTV-ggAAAAY"]
[Fri Apr 03 00:41:54.043466 2026] [:error] [pid 25018:tid 25426] [client 158.158.117.24:23690] [client 158.158.117.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/radio.php"] [unique_id "ac6cUnupR6lXnAUzFGrczQAAAE0"]
[Fri Apr 03 00:41:54.380424 2026] [:error] [pid 25470:tid 25472] [client 4.232.187.184:24031] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "ac6cUnhROcck6_9HYyjfuQAAAMA"]
[Fri Apr 03 00:41:54.886115 2026] [:error] [pid 25470:tid 25488] [client 4.232.187.184:23580] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "ac6cUnhROcck6_9HYyjfuwAAANA"]
[Fri Apr 03 00:41:55.484340 2026] [:error] [pid 25035:tid 25453] [client 4.232.187.184:23242] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/content.php"] [unique_id "ac6cUxhR292toNOkLqGUlwAAAIs"]
[Fri Apr 03 00:41:56.109865 2026] [:error] [pid 25010:tid 25365] [client 4.232.187.184:23244] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/content.php"] [unique_id "ac6cVI_KcjFQF5TuqTV-jwAAABA"]
[Fri Apr 03 00:41:56.601009 2026] [:error] [pid 25470:tid 25475] [client 4.232.187.184:23949] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/content.php"] [unique_id "ac6cVHhROcck6_9HYyjfxQAAAMM"]
[Fri Apr 03 00:41:57.083108 2026] [:error] [pid 25470:tid 25490] [client 4.232.187.184:23648] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/content.php"] [unique_id "ac6cVXhROcck6_9HYyjfxgAAANI"]
[Fri Apr 03 00:41:57.550135 2026] [:error] [pid 25018:tid 25436] [client 4.232.187.184:24055] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-configs.php"] [unique_id "ac6cVXupR6lXnAUzFGrc1QAAAFc"]
[Fri Apr 03 00:41:58.023677 2026] [:error] [pid 25470:tid 25479] [client 4.232.187.184:24010] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-configs.php"] [unique_id "ac6cVnhROcck6_9HYyjfywAAAMc"]
[Fri Apr 03 00:41:58.567605 2026] [:error] [pid 25470:tid 25482] [client 4.232.187.184:23634] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-configs.php"] [unique_id "ac6cVnhROcck6_9HYyjfzwAAAMo"]
[Fri Apr 03 00:41:59.215845 2026] [:error] [pid 25470:tid 25485] [client 4.232.187.184:24041] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-configs.php"] [unique_id "ac6cV3hROcck6_9HYyjf1AAAAM0"]
[Fri Apr 03 00:41:59.697001 2026] [:error] [pid 25018:tid 25431] [client 4.232.187.184:23664] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/yas.php"] [unique_id "ac6cV3upR6lXnAUzFGrc3QAAAFI"]
[Fri Apr 03 00:42:00.380386 2026] [:error] [pid 25018:tid 25436] [client 4.232.187.184:23608] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/yas.php"] [unique_id "ac6cWHupR6lXnAUzFGrc4AAAAFc"]
[Fri Apr 03 00:42:00.852181 2026] [:error] [pid 25018:tid 25425] [client 4.232.187.184:22843] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/yas.php"] [unique_id "ac6cWHupR6lXnAUzFGrc4gAAAEw"]
[Fri Apr 03 00:42:01.504274 2026] [:error] [pid 25018:tid 25414] [client 4.232.187.184:23175] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/yas.php"] [unique_id "ac6cWXupR6lXnAUzFGrc5gAAAEI"]
[Fri Apr 03 00:42:01.986869 2026] [:error] [pid 25470:tid 25479] [client 4.232.187.184:22835] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file5.php"] [unique_id "ac6cWXhROcck6_9HYyjf4AAAAMc"]
[Fri Apr 03 00:42:02.464422 2026] [:error] [pid 25010:tid 25357] [client 4.232.187.184:23963] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file5.php"] [unique_id "ac6cWo_KcjFQF5TuqTV-sAAAAAk"]
[Fri Apr 03 00:42:02.973503 2026] [:error] [pid 25470:tid 25472] [client 4.232.187.184:24007] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file5.php"] [unique_id "ac6cWnhROcck6_9HYyjf5AAAAMA"]
[Fri Apr 03 00:42:03.576929 2026] [:error] [pid 25470:tid 25490] [client 4.232.187.184:23573] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file5.php"] [unique_id "ac6cW3hROcck6_9HYyjf6gAAANI"]
[Fri Apr 03 00:42:04.077168 2026] [:error] [pid 25470:tid 25491] [client 4.232.187.184:23969] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/v3.php"] [unique_id "ac6cXHhROcck6_9HYyjf7gAAANM"]
[Fri Apr 03 00:42:05.118225 2026] [:error] [pid 25018:tid 25436] [client 4.232.187.184:23970] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/v3.php"] [unique_id "ac6cXXupR6lXnAUzFGrc6gAAAFc"]
[Fri Apr 03 00:42:05.663025 2026] [:error] [pid 25018:tid 25426] [client 4.232.187.184:24259] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/v3.php"] [unique_id "ac6cXXupR6lXnAUzFGrc7QAAAE0"]
[Fri Apr 03 00:42:06.189733 2026] [:error] [pid 25470:tid 25484] [client 4.232.187.184:24027] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/v3.php"] [unique_id "ac6cXnhROcck6_9HYyjf_gAAAMw"]
[Fri Apr 03 00:42:06.984190 2026] [:error] [pid 25010:tid 25372] [client 4.232.187.184:24250] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "ac6cXo_KcjFQF5TuqTV-0AAAABc"]
[Fri Apr 03 00:42:07.457184 2026] [:error] [pid 25010:tid 25370] [client 4.232.187.184:24245] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "ac6cX4_KcjFQF5TuqTV-1AAAABU"]
[Fri Apr 03 00:42:07.977673 2026] [:error] [pid 25470:tid 25480] [client 4.232.187.184:24268] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "ac6cX3hROcck6_9HYyjgAgAAAMg"]
[Fri Apr 03 00:42:08.699146 2026] [:error] [pid 25035:tid 25459] [client 4.232.187.184:24218] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "ac6cYBhR292toNOkLqGUsgAAAJE"]
[Fri Apr 03 00:42:09.178808 2026] [:error] [pid 25035:tid 25465] [client 4.232.187.184:23953] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gg.php"] [unique_id "ac6cYRhR292toNOkLqGUtQAAAJc"]
[Fri Apr 03 00:42:09.939839 2026] [:error] [pid 25470:tid 25478] [client 4.232.187.184:24057] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gg.php"] [unique_id "ac6cYXhROcck6_9HYyjgBwAAAMY"]
[Fri Apr 03 00:42:10.412985 2026] [:error] [pid 25470:tid 25494] [client 4.232.187.184:23620] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gg.php"] [unique_id "ac6cYnhROcck6_9HYyjgCgAAANY"]
[Fri Apr 03 00:42:10.901020 2026] [:error] [pid 25010:tid 25358] [client 4.232.187.184:23650] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gg.php"] [unique_id "ac6cYo_KcjFQF5TuqTV-7gAAAAo"]
[Fri Apr 03 00:42:11.421132 2026] [:error] [pid 25010:tid 25373] [client 4.232.187.184:24004] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/upgrade/index.php"] [unique_id "ac6cY4_KcjFQF5TuqTV--AAAABg"]
[Fri Apr 03 00:42:26.372872 2026] [proxy_fcgi:error] [pid 25010:tid 25368] [client 4.232.187.184:24018] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 00:42:26.723031 2026] [proxy_fcgi:error] [pid 25010:tid 25371] [client 4.232.187.184:24018] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 00:42:26.959554 2026] [proxy_fcgi:error] [pid 25010:tid 25349] [client 4.232.187.184:24018] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 00:42:27.291468 2026] [proxy_fcgi:error] [pid 25010:tid 25355] [client 4.232.187.184:24018] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 00:42:27.586686 2026] [proxy_fcgi:error] [pid 25010:tid 25352] [client 4.232.187.184:24018] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 00:42:27.911047 2026] [proxy_fcgi:error] [pid 25010:tid 25370] [client 4.232.187.184:24018] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 00:42:28.261671 2026] [proxy_fcgi:error] [pid 25010:tid 25369] [client 4.232.187.184:24018] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 00:42:28.660720 2026] [proxy_fcgi:error] [pid 25010:tid 25372] [client 4.232.187.184:24018] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 00:42:29.000069 2026] [proxy_fcgi:error] [pid 25010:tid 25356] [client 4.232.187.184:24018] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 00:42:29.235676 2026] [proxy_fcgi:error] [pid 25010:tid 25354] [client 4.232.187.184:24018] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 00:42:29.470298 2026] [:error] [pid 25010:tid 25366] [client 4.232.187.184:24018] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/an.php"] [unique_id "ac6cdY_KcjFQF5TuqTV_VQAAABE"]
[Fri Apr 03 00:42:43.541565 2026] [:error] [pid 25035:tid 25464] [client 4.232.187.184:24552] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/an.php"] [unique_id "ac6cgxhR292toNOkLqGVDAAAAJY"]
[Fri Apr 03 00:42:44.490391 2026] [:error] [pid 25018:tid 25429] [client 4.232.187.184:24284] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/an.php"] [unique_id "ac6chHupR6lXnAUzFGrdNQAAAFA"]
[Fri Apr 03 00:42:44.900319 2026] [:error] [pid 25018:tid 25421] [client 4.232.187.184:24254] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/404.php"] [unique_id "ac6chHupR6lXnAUzFGrdOgAAAEg"]
[Fri Apr 03 00:42:45.374905 2026] [:error] [pid 25035:tid 25459] [client 4.232.187.184:24247] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/404.php"] [unique_id "ac6chRhR292toNOkLqGVDgAAAJE"]
[Fri Apr 03 00:42:45.845071 2026] [:error] [pid 25018:tid 25430] [client 4.232.187.184:24297] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/404.php"] [unique_id "ac6chXupR6lXnAUzFGrdQgAAAFE"]
[Fri Apr 03 00:42:46.311591 2026] [:error] [pid 25010:tid 25370] [client 4.232.187.184:24207] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/404.php"] [unique_id "ac6cho_KcjFQF5TuqTV_dwAAABU"]
[Fri Apr 03 00:42:46.809962 2026] [:error] [pid 25470:tid 25472] [client 4.232.187.184:24563] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lol.php"] [unique_id "ac6chnhROcck6_9HYyjglQAAAMA"]
[Fri Apr 03 00:42:47.277315 2026] [:error] [pid 25035:tid 25463] [client 4.232.187.184:24459] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lol.php"] [unique_id "ac6chxhR292toNOkLqGVFAAAAJU"]
[Fri Apr 03 00:42:47.745130 2026] [:error] [pid 25035:tid 25453] [client 4.232.187.184:24570] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lol.php"] [unique_id "ac6chxhR292toNOkLqGVFgAAAIs"]
[Fri Apr 03 00:42:48.315815 2026] [:error] [pid 25018:tid 25434] [client 4.232.187.184:24300] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lol.php"] [unique_id "ac6ciHupR6lXnAUzFGrdSAAAAFU"]
[Fri Apr 03 00:42:48.933204 2026] [:error] [pid 25010:tid 25361] [client 4.232.187.184:24253] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/radio.php"] [unique_id "ac6ciI_KcjFQF5TuqTV_fgAAAAw"]
[Fri Apr 03 00:42:49.555875 2026] [:error] [pid 25470:tid 25472] [client 4.232.187.184:24270] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/radio.php"] [unique_id "ac6ciXhROcck6_9HYyjgngAAAMA"]
[Fri Apr 03 00:42:50.023932 2026] [:error] [pid 25470:tid 25489] [client 4.232.187.184:24192] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/radio.php"] [unique_id "ac6cinhROcck6_9HYyjgowAAANE"]
[Fri Apr 03 00:42:50.626250 2026] [:error] [pid 25010:tid 25357] [client 4.232.187.184:24475] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/radio.php"] [unique_id "ac6cio_KcjFQF5TuqTV_ggAAAAk"]
[Fri Apr 03 07:49:34.751080 2026] [proxy_fcgi:error] [pid 33446:tid 33491] [client 72.146.33.167:20806] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 07:49:35.061987 2026] [proxy_fcgi:error] [pid 33446:tid 33484] [client 72.146.33.167:20806] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 07:49:35.342445 2026] [proxy_fcgi:error] [pid 33446:tid 33481] [client 72.146.33.167:20806] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 07:49:35.663284 2026] [proxy_fcgi:error] [pid 33446:tid 33490] [client 72.146.33.167:20806] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 07:49:35.899420 2026] [proxy_fcgi:error] [pid 33446:tid 33489] [client 72.146.33.167:20806] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 07:49:36.137421 2026] [proxy_fcgi:error] [pid 33446:tid 33497] [client 72.146.33.167:20806] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 07:49:36.467154 2026] [proxy_fcgi:error] [pid 33446:tid 33482] [client 72.146.33.167:20806] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 07:49:36.703317 2026] [proxy_fcgi:error] [pid 33446:tid 33478] [client 72.146.33.167:20806] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 07:49:36.938363 2026] [proxy_fcgi:error] [pid 33446:tid 33496] [client 72.146.33.167:20806] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 07:49:37.177319 2026] [proxy_fcgi:error] [pid 33446:tid 33494] [client 72.146.33.167:20806] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 07:49:37.470899 2026] [:error] [pid 33446:tid 33499] [client 72.146.33.167:20806] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "ac8Akdg3dCqFYIIdw0orgwAAAFY"]
[Fri Apr 03 07:49:38.140218 2026] [:error] [pid 33542:tid 33569] [client 72.146.33.167:22464] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "ac8Aknwb6uB1LaGtepYsOQAAANg"]
[Fri Apr 03 07:49:38.794039 2026] [:error] [pid 40562:tid 40580] [client 72.146.33.167:25268] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "ac8AkjfFMXuP9zvqCeqC2QAAAY8"]
[Fri Apr 03 07:49:39.566453 2026] [:error] [pid 40562:tid 40569] [client 72.146.33.167:26693] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "ac8AkzfFMXuP9zvqCeqC3QAAAYQ"]
[Fri Apr 03 07:49:40.349346 2026] [:error] [pid 33445:tid 33466] [client 72.146.33.167:22478] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mfptbopeeg7v0sezxnbtgcgsCdefault.php"] [unique_id "ac8AlFlRNZ0iDVmJWM2bYQAAABA"]
[Fri Apr 03 07:49:41.165707 2026] [:error] [pid 35469:tid 35485] [client 72.146.33.167:44667] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mfptbopeeg7v0sezxnbtgcgsCdefault.php"] [unique_id "ac8AlaGvTIc8-wY3jUQtVgAAAQ4"]
[Fri Apr 03 07:49:41.904352 2026] [:error] [pid 33542:tid 33547] [client 72.146.33.167:22733] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mfptbopeeg7v0sezxnbtgcgsCdefault.php"] [unique_id "ac8AlXwb6uB1LaGtepYsTQAAAMI"]
[Fri Apr 03 07:49:42.730952 2026] [:error] [pid 33542:tid 33552] [client 72.146.33.167:44644] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mfptbopeeg7v0sezxnbtgcgsCdefault.php"] [unique_id "ac8Alnwb6uB1LaGtepYsTwAAAMc"]
[Fri Apr 03 07:49:43.484687 2026] [:error] [pid 40562:tid 40583] [client 72.146.33.167:24141] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ac8AlzfFMXuP9zvqCeqC4AAAAZI"]
[Fri Apr 03 07:49:44.245958 2026] [:error] [pid 40533:tid 40546] [client 72.146.33.167:58974] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ac8AmPbIAA8AViDmwssXYgAAAUs"]
[Fri Apr 03 07:49:45.113876 2026] [:error] [pid 33446:tid 33480] [client 72.146.33.167:33860] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ac8Amdg3dCqFYIIdw0oriAAAAEM"]
[Fri Apr 03 07:49:46.116608 2026] [:error] [pid 35469:tid 35477] [client 72.146.33.167:44626] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ac8AmqGvTIc8-wY3jUQtWgAAAQY"]
[Fri Apr 03 07:49:46.994027 2026] [:error] [pid 33445:tid 33462] [client 72.146.33.167:18508] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ff1.php"] [unique_id "ac8AmllRNZ0iDVmJWM2bZQAAAAw"]
[Fri Apr 03 07:49:47.613770 2026] [:error] [pid 35469:tid 35478] [client 72.146.33.167:38819] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ff1.php"] [unique_id "ac8Am6GvTIc8-wY3jUQtXAAAAQc"]
[Fri Apr 03 07:49:48.528197 2026] [:error] [pid 33445:tid 33465] [client 72.146.33.167:53529] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ff1.php"] [unique_id "ac8AnFlRNZ0iDVmJWM2baAAAAA8"]
[Fri Apr 03 07:49:49.256001 2026] [:error] [pid 33542:tid 33559] [client 72.146.33.167:3115] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ff1.php"] [unique_id "ac8AnXwb6uB1LaGtepYsWwAAAM4"]
[Fri Apr 03 07:49:49.995823 2026] [:error] [pid 33542:tid 33565] [client 72.146.33.167:24141] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x1.php"] [unique_id "ac8AnXwb6uB1LaGtepYsXwAAANQ"]
[Fri Apr 03 07:49:50.658875 2026] [:error] [pid 35469:tid 35471] [client 72.146.33.167:38802] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x1.php"] [unique_id "ac8AnqGvTIc8-wY3jUQtXwAAAQA"]
[Fri Apr 03 07:49:51.290519 2026] [:error] [pid 33447:tid 33526] [client 72.146.33.167:48611] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x1.php"] [unique_id "ac8An0gaPmDHz92j4lOjXgAAAJY"]
[Fri Apr 03 07:49:51.840895 2026] [:error] [pid 40533:tid 40548] [client 72.146.33.167:58989] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x1.php"] [unique_id "ac8An_bIAA8AViDmwssXbQAAAU0"]
[Fri Apr 03 07:49:52.447118 2026] [:error] [pid 33446:tid 33494] [client 72.146.33.167:20825] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ta0ol.php"] [unique_id "ac8AoNg3dCqFYIIdw0orjgAAAFE"]
[Fri Apr 03 07:49:53.135803 2026] [:error] [pid 33445:tid 33472] [client 72.146.33.167:16273] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ta0ol.php"] [unique_id "ac8AoVlRNZ0iDVmJWM2bagAAABY"]
[Fri Apr 03 07:49:53.780976 2026] [:error] [pid 40562:tid 40589] [client 72.146.33.167:44691] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ta0ol.php"] [unique_id "ac8AoTfFMXuP9zvqCeqC7AAAAZg"]
[Fri Apr 03 07:49:54.432805 2026] [:error] [pid 40562:tid 40569] [client 72.146.33.167:3555] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ta0ol.php"] [unique_id "ac8AojfFMXuP9zvqCeqC8AAAAYQ"]
[Fri Apr 03 07:49:55.144274 2026] [:error] [pid 33542:tid 33559] [client 72.146.33.167:20191] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/t00l.php"] [unique_id "ac8Ao3wb6uB1LaGtepYsYQAAAM4"]
[Fri Apr 03 07:49:55.807027 2026] [:error] [pid 40533:tid 40541] [client 72.146.33.167:3078] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/t00l.php"] [unique_id "ac8Ao_bIAA8AViDmwssXegAAAUY"]
[Fri Apr 03 07:49:56.656871 2026] [:error] [pid 40533:tid 40552] [client 72.146.33.167:11902] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/t00l.php"] [unique_id "ac8ApPbIAA8AViDmwssXfQAAAVE"]
[Fri Apr 03 07:49:57.122959 2026] [:error] [pid 40533:tid 40536] [client 72.146.33.167:48637] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/t00l.php"] [unique_id "ac8ApfbIAA8AViDmwssXfwAAAUE"]
[Fri Apr 03 07:49:57.660166 2026] [:error] [pid 33446:tid 33495] [client 72.146.33.167:20196] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/24.php"] [unique_id "ac8Apdg3dCqFYIIdw0orkAAAAFI"]
[Fri Apr 03 07:49:58.311281 2026] [:error] [pid 33445:tid 33461] [client 72.146.33.167:18541] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/24.php"] [unique_id "ac8ApllRNZ0iDVmJWM2bbAAAAAs"]
[Fri Apr 03 07:49:58.870755 2026] [:error] [pid 33447:tid 33526] [client 72.146.33.167:38799] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/24.php"] [unique_id "ac8ApkgaPmDHz92j4lOjcAAAAJY"]
[Fri Apr 03 07:49:59.421185 2026] [:error] [pid 33446:tid 33486] [client 72.146.33.167:38791] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/24.php"] [unique_id "ac8Ap9g3dCqFYIIdw0orkgAAAEk"]
[Fri Apr 03 07:50:00.123020 2026] [:error] [pid 33446:tid 33491] [client 72.146.33.167:25284] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ass.php"] [unique_id "ac8AqNg3dCqFYIIdw0orlQAAAE4"]
[Fri Apr 03 07:50:00.637293 2026] [:error] [pid 40562:tid 40568] [client 72.146.33.167:3552] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ass.php"] [unique_id "ac8AqDfFMXuP9zvqCeqC_gAAAYM"]
[Fri Apr 03 07:50:01.217975 2026] [:error] [pid 40562:tid 40586] [client 72.146.33.167:56239] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ass.php"] [unique_id "ac8AqTfFMXuP9zvqCeqDAAAAAZU"]
[Fri Apr 03 07:50:01.840503 2026] [:error] [pid 33447:tid 33508] [client 72.146.33.167:20210] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ass.php"] [unique_id "ac8AqUgaPmDHz92j4lOjeAAAAIQ"]
[Fri Apr 03 07:50:02.661656 2026] [:error] [pid 35469:tid 35477] [client 72.146.33.167:22728] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/as.php"] [unique_id "ac8AqqGvTIc8-wY3jUQtZQAAAQY"]
[Fri Apr 03 07:50:03.326859 2026] [:error] [pid 33447:tid 33516] [client 72.146.33.167:28515] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/as.php"] [unique_id "ac8Aq0gaPmDHz92j4lOjgAAAAIw"]
[Fri Apr 03 07:50:04.160282 2026] [:error] [pid 33447:tid 33513] [client 72.146.33.167:38796] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/as.php"] [unique_id "ac8ArEgaPmDHz92j4lOjhQAAAIk"]
[Fri Apr 03 07:50:04.894127 2026] [:error] [pid 33446:tid 33494] [client 72.146.33.167:25310] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/as.php"] [unique_id "ac8ArNg3dCqFYIIdw0ornAAAAFE"]
[Fri Apr 03 07:50:05.603194 2026] [:error] [pid 40533:tid 40547] [client 72.146.33.167:38839] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fyiiz.php"] [unique_id "ac8ArfbIAA8AViDmwssXhAAAAUw"]
[Fri Apr 03 07:50:06.290446 2026] [:error] [pid 40533:tid 40549] [client 72.146.33.167:18436] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fyiiz.php"] [unique_id "ac8ArvbIAA8AViDmwssXiQAAAU4"]
[Fri Apr 03 07:50:07.055247 2026] [:error] [pid 40562:tid 40580] [client 72.146.33.167:24506] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fyiiz.php"] [unique_id "ac8ArzfFMXuP9zvqCeqDBgAAAY8"]
[Fri Apr 03 07:50:07.704028 2026] [:error] [pid 40533:tid 40545] [client 72.146.33.167:11828] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fyiiz.php"] [unique_id "ac8Ar_bIAA8AViDmwssXkQAAAUo"]
[Fri Apr 03 07:50:08.269052 2026] [:error] [pid 40562:tid 40581] [client 72.146.33.167:20166] [client 72.146.33.167] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/app.php"] [unique_id "ac8AsDfFMXuP9zvqCeqDCgAAAZA"]
[Fri Apr 03 07:50:08.812428 2026] [:error] [pid 40533:tid 40537] [client 72.146.33.167:23515] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/max.php"] [unique_id "ac8AsPbIAA8AViDmwssXkwAAAUI"]
[Fri Apr 03 07:50:09.502582 2026] [:error] [pid 33446:tid 33491] [client 72.146.33.167:28487] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/max.php"] [unique_id "ac8Asdg3dCqFYIIdw0orngAAAE4"]
[Fri Apr 03 07:50:10.311132 2026] [:error] [pid 33542:tid 33557] [client 72.146.33.167:48610] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/max.php"] [unique_id "ac8Asnwb6uB1LaGtepYsbAAAAMw"]
[Fri Apr 03 07:50:10.921584 2026] [:error] [pid 33542:tid 33556] [client 72.146.33.167:29435] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xwx1.php"] [unique_id "ac8Asnwb6uB1LaGtepYscAAAAMs"]
[Fri Apr 03 07:50:11.461851 2026] [:error] [pid 33542:tid 33553] [client 72.146.33.167:11842] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xwx1.php"] [unique_id "ac8As3wb6uB1LaGtepYsdAAAAMg"]
[Fri Apr 03 07:50:12.468888 2026] [:error] [pid 40562:tid 40568] [client 72.146.33.167:28494] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xwx1.php"] [unique_id "ac8AtDfFMXuP9zvqCeqDEwAAAYM"]
[Fri Apr 03 07:50:13.170693 2026] [:error] [pid 40533:tid 40550] [client 72.146.33.167:59038] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xwx1.php"] [unique_id "ac8AtfbIAA8AViDmwssXlgAAAU8"]
[Fri Apr 03 07:50:13.778797 2026] [:error] [pid 33445:tid 33457] [client 72.146.33.167:18965] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/Jcrop.php"] [unique_id "ac8AtVlRNZ0iDVmJWM2bdwAAAAc"]
[Fri Apr 03 07:50:14.426011 2026] [:error] [pid 33542:tid 33550] [client 72.146.33.167:31872] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/Jcrop.php"] [unique_id "ac8Atnwb6uB1LaGtepYsewAAAMU"]
[Fri Apr 03 07:50:14.983212 2026] [:error] [pid 33445:tid 33455] [client 72.146.33.167:24479] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/Jcrop.php"] [unique_id "ac8AtllRNZ0iDVmJWM2beAAAAAU"]
[Fri Apr 03 07:50:15.521293 2026] [:error] [pid 33445:tid 33461] [client 72.146.33.167:18471] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/Jcrop.php"] [unique_id "ac8At1lRNZ0iDVmJWM2beQAAAAs"]
[Fri Apr 03 07:50:16.069275 2026] [:error] [pid 33542:tid 33549] [client 72.146.33.167:28490] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ng.php"] [unique_id "ac8AuHwb6uB1LaGtepYsgwAAAMQ"]
[Fri Apr 03 07:50:16.714742 2026] [:error] [pid 35469:tid 35471] [client 72.146.33.167:25287] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ng.php"] [unique_id "ac8AuKGvTIc8-wY3jUQtaQAAAQA"]
[Fri Apr 03 07:50:17.286453 2026] [:error] [pid 40533:tid 40558] [client 72.146.33.167:11776] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ng.php"] [unique_id "ac8AufbIAA8AViDmwssXlwAAAVc"]
[Fri Apr 03 07:50:17.822936 2026] [:error] [pid 40533:tid 40543] [client 72.146.33.167:28526] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ng.php"] [unique_id "ac8AufbIAA8AViDmwssXmAAAAUg"]
[Fri Apr 03 07:50:18.465888 2026] [:error] [pid 40562:tid 40587] [client 72.146.33.167:29421] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/index.php"] [unique_id "ac8AujfFMXuP9zvqCeqDHwAAAZY"]
[Fri Apr 03 07:50:19.099394 2026] [:error] [pid 35469:tid 35479] [client 72.146.33.167:18972] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/index.php"] [unique_id "ac8Au6GvTIc8-wY3jUQtbAAAAQg"]
[Fri Apr 03 07:50:19.719890 2026] [:error] [pid 40562:tid 40572] [client 72.146.33.167:28555] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/index.php"] [unique_id "ac8AuzfFMXuP9zvqCeqDIQAAAYc"]
[Fri Apr 03 07:50:20.369192 2026] [:error] [pid 40562:tid 40578] [client 72.146.33.167:31889] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/index.php"] [unique_id "ac8AvDfFMXuP9zvqCeqDIwAAAY0"]
[Fri Apr 03 07:50:20.861860 2026] [:error] [pid 33447:tid 33506] [client 72.146.33.167:28531] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/erty.php"] [unique_id "ac8AvEgaPmDHz92j4lOjjwAAAII"]
[Fri Apr 03 07:50:21.496442 2026] [:error] [pid 33447:tid 33520] [client 72.146.33.167:31888] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/erty.php"] [unique_id "ac8AvUgaPmDHz92j4lOjkAAAAJA"]
[Fri Apr 03 07:50:22.068964 2026] [:error] [pid 40562:tid 40573] [client 72.146.33.167:19892] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/erty.php"] [unique_id "ac8AvjfFMXuP9zvqCeqDJAAAAYg"]
[Fri Apr 03 07:50:22.636511 2026] [:error] [pid 33542:tid 33554] [client 72.146.33.167:22452] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/erty.php"] [unique_id "ac8Avnwb6uB1LaGtepYslQAAAMk"]
[Fri Apr 03 07:50:23.396514 2026] [:error] [pid 35469:tid 35484] [client 72.146.33.167:18999] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/0.php"] [unique_id "ac8Av6GvTIc8-wY3jUQtcwAAAQ0"]
[Fri Apr 03 07:50:23.940837 2026] [:error] [pid 33542:tid 33559] [client 72.146.33.167:40498] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/0.php"] [unique_id "ac8Av3wb6uB1LaGtepYsmwAAAM4"]
[Fri Apr 03 07:50:24.770036 2026] [:error] [pid 33542:tid 33554] [client 72.146.33.167:28535] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/0.php"] [unique_id "ac8AwHwb6uB1LaGtepYsoAAAAMk"]
[Fri Apr 03 07:50:25.394133 2026] [:error] [pid 40562:tid 40568] [client 72.146.33.167:41799] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/0.php"] [unique_id "ac8AwTfFMXuP9zvqCeqDKgAAAYM"]
[Fri Apr 03 07:50:25.914822 2026] [:error] [pid 35469:tid 35478] [client 72.146.33.167:56213] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wgift1.php"] [unique_id "ac8AwaGvTIc8-wY3jUQtdwAAAQc"]
[Fri Apr 03 07:50:26.413175 2026] [:error] [pid 33446:tid 33500] [client 72.146.33.167:40476] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wgift1.php"] [unique_id "ac8Awtg3dCqFYIIdw0orrwAAAFc"]
[Fri Apr 03 07:50:26.891400 2026] [:error] [pid 40562:tid 40587] [client 72.146.33.167:28554] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wgift1.php"] [unique_id "ac8AwjfFMXuP9zvqCeqDMAAAAZY"]
[Fri Apr 03 07:50:27.509678 2026] [:error] [pid 33447:tid 33526] [client 72.146.33.167:40387] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wgift1.php"] [unique_id "ac8Aw0gaPmDHz92j4lOjlgAAAJY"]
[Fri Apr 03 07:50:28.025587 2026] [:error] [pid 40533:tid 40540] [client 72.146.33.167:19841] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rithin.php"] [unique_id "ac8AxPbIAA8AViDmwssXoQAAAUU"]
[Fri Apr 03 07:50:28.680757 2026] [:error] [pid 40533:tid 40543] [client 72.146.33.167:31901] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rithin.php"] [unique_id "ac8AxPbIAA8AViDmwssXogAAAUg"]
[Fri Apr 03 07:50:29.273605 2026] [:error] [pid 40533:tid 40546] [client 72.146.33.167:14527] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rithin.php"] [unique_id "ac8AxfbIAA8AViDmwssXpQAAAUs"]
[Fri Apr 03 07:50:30.213680 2026] [:error] [pid 33445:tid 33456] [client 72.146.33.167:31883] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rithin.php"] [unique_id "ac8AxllRNZ0iDVmJWM2bgwAAAAY"]
[Fri Apr 03 07:50:30.792067 2026] [:error] [pid 33446:tid 33501] [client 72.146.33.167:21907] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a5.php"] [unique_id "ac8Axtg3dCqFYIIdw0ortQAAAFg"]
[Fri Apr 03 07:50:31.260394 2026] [:error] [pid 40533:tid 40555] [client 72.146.33.167:29415] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a5.php"] [unique_id "ac8Ax_bIAA8AViDmwssXrQAAAVQ"]
[Fri Apr 03 07:50:31.941942 2026] [:error] [pid 40533:tid 40549] [client 72.146.33.167:14772] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a5.php"] [unique_id "ac8Ax_bIAA8AViDmwssXrwAAAU4"]
[Fri Apr 03 07:50:32.670664 2026] [:error] [pid 33447:tid 33522] [client 72.146.33.167:24503] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a5.php"] [unique_id "ac8AyEgaPmDHz92j4lOjnwAAAJI"]
[Fri Apr 03 07:50:33.515760 2026] [:error] [pid 33446:tid 33500] [client 72.146.33.167:31887] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class.php"] [unique_id "ac8Aydg3dCqFYIIdw0orugAAAFc"]
[Fri Apr 03 07:50:34.351908 2026] [:error] [pid 33446:tid 33489] [client 72.146.33.167:28526] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class.php"] [unique_id "ac8Aytg3dCqFYIIdw0orvQAAAEw"]
[Fri Apr 03 07:50:34.873934 2026] [:error] [pid 35469:tid 35478] [client 72.146.33.167:18440] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class.php"] [unique_id "ac8AyqGvTIc8-wY3jUQthwAAAQc"]
[Fri Apr 03 07:50:35.586608 2026] [:error] [pid 33447:tid 33517] [client 72.146.33.167:19847] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class.php"] [unique_id "ac8Ay0gaPmDHz92j4lOjpgAAAI0"]
[Fri Apr 03 07:50:36.645791 2026] [:error] [pid 33542:tid 33548] [client 72.146.33.167:19882] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zwq13.php"] [unique_id "ac8AzHwb6uB1LaGtepYspgAAAMM"]
[Fri Apr 03 07:50:37.446854 2026] [proxy_fcgi:error] [pid 40562:tid 40570] [client 72.146.33.167:28544] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 07:50:37.683207 2026] [proxy_fcgi:error] [pid 40562:tid 40580] [client 72.146.33.167:28544] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 07:50:37.927851 2026] [proxy_fcgi:error] [pid 40562:tid 40578] [client 72.146.33.167:28544] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 07:50:38.175473 2026] [proxy_fcgi:error] [pid 40562:tid 40589] [client 72.146.33.167:28544] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 07:50:38.411210 2026] [proxy_fcgi:error] [pid 40562:tid 40576] [client 72.146.33.167:28544] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 07:50:38.648971 2026] [proxy_fcgi:error] [pid 40562:tid 40573] [client 72.146.33.167:28544] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 07:50:38.924300 2026] [proxy_fcgi:error] [pid 40562:tid 40583] [client 72.146.33.167:28544] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 07:50:39.164656 2026] [proxy_fcgi:error] [pid 40562:tid 40575] [client 72.146.33.167:28544] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 07:50:39.506801 2026] [proxy_fcgi:error] [pid 40562:tid 40568] [client 72.146.33.167:28544] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 07:50:40.993444 2026] [proxy_fcgi:error] [pid 40562:tid 40569] [client 72.146.33.167:28544] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 07:50:41.264831 2026] [proxy_fcgi:error] [pid 40562:tid 40572] [client 72.146.33.167:28544] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 07:50:41.497571 2026] [:error] [pid 40562:tid 40571] [client 72.146.33.167:28544] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/web.php"] [unique_id "ac8A0TfFMXuP9zvqCeqDTgAAAYY"]
[Fri Apr 03 07:50:42.576375 2026] [:error] [pid 33445:tid 33474] [client 72.146.33.167:31875] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/web.php"] [unique_id "ac8A0llRNZ0iDVmJWM2bhwAAABg"]
[Fri Apr 03 07:50:43.403984 2026] [:error] [pid 33447:tid 33528] [client 72.146.33.167:28547] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/web.php"] [unique_id "ac8A00gaPmDHz92j4lOjsQAAAJg"]
[Fri Apr 03 07:50:44.475399 2026] [:error] [pid 40562:tid 40565] [client 72.146.33.167:22414] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/web.php"] [unique_id "ac8A1DfFMXuP9zvqCeqDUAAAAYA"]
[Fri Apr 03 07:50:45.238124 2026] [:error] [pid 40562:tid 40583] [client 72.146.33.167:59031] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "ac8A1TfFMXuP9zvqCeqDVAAAAZI"]
[Fri Apr 03 07:50:55.952650 2026] [:error] [pid 33445:tid 33468] [client 72.146.33.167:54645] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "ac8A31lRNZ0iDVmJWM2bkgAAABI"]
[Fri Apr 03 07:51:02.788550 2026] [:error] [pid 33542:tid 33549] [client 72.146.33.167:14767] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lp6.php"] [unique_id "ac8A5nwb6uB1LaGtepYs0gAAAMQ"]
[Fri Apr 03 07:51:03.416746 2026] [:error] [pid 35469:tid 35485] [client 72.146.33.167:28594] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lp6.php"] [unique_id "ac8A56GvTIc8-wY3jUQtoQAAAQ4"]
[Fri Apr 03 07:51:04.171323 2026] [:error] [pid 33542:tid 33567] [client 72.146.33.167:25808] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lp6.php"] [unique_id "ac8A6Hwb6uB1LaGtepYs1gAAANY"]
[Fri Apr 03 07:51:05.040932 2026] [:error] [pid 40533:tid 40538] [client 72.146.33.167:55140] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lp6.php"] [unique_id "ac8A6fbIAA8AViDmwssXxQAAAUM"]
[Fri Apr 03 07:51:05.738336 2026] [:error] [pid 33446:tid 33478] [client 72.146.33.167:40434] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/com.php"] [unique_id "ac8A6dg3dCqFYIIdw0or4QAAAEE"]
[Fri Apr 03 07:51:06.411555 2026] [:error] [pid 33446:tid 33492] [client 72.146.33.167:52838] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/com.php"] [unique_id "ac8A6tg3dCqFYIIdw0or4wAAAE8"]
[Fri Apr 03 07:51:07.469777 2026] [:error] [pid 40533:tid 40547] [client 72.146.33.167:14749] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/com.php"] [unique_id "ac8A6_bIAA8AViDmwssXyQAAAUw"]
[Fri Apr 03 07:51:08.168779 2026] [:error] [pid 33542:tid 33549] [client 72.146.33.167:54643] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/com.php"] [unique_id "ac8A7Hwb6uB1LaGtepYs3AAAAMQ"]
[Fri Apr 03 07:51:09.263576 2026] [:error] [pid 40562:tid 40587] [client 72.146.33.167:14543] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bolt.php"] [unique_id "ac8A7TfFMXuP9zvqCeqDeAAAAZY"]
[Fri Apr 03 07:51:09.895565 2026] [:error] [pid 40533:tid 40539] [client 72.146.33.167:19840] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bolt.php"] [unique_id "ac8A7fbIAA8AViDmwssX0QAAAUQ"]
[Fri Apr 03 07:51:10.611410 2026] [:error] [pid 40533:tid 40559] [client 72.146.33.167:39320] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bolt.php"] [unique_id "ac8A7vbIAA8AViDmwssX1AAAAVg"]
[Fri Apr 03 07:51:11.565883 2026] [:error] [pid 40533:tid 40554] [client 72.146.33.167:14500] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bolt.php"] [unique_id "ac8A7_bIAA8AViDmwssX1QAAAVM"]
[Fri Apr 03 07:51:12.426148 2026] [:error] [pid 40533:tid 40537] [client 72.146.33.167:54636] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wander.php"] [unique_id "ac8A8PbIAA8AViDmwssX1gAAAUI"]
[Fri Apr 03 07:51:13.011567 2026] [:error] [pid 40562:tid 40583] [client 72.146.33.167:19862] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wander.php"] [unique_id "ac8A8TfFMXuP9zvqCeqDfQAAAZI"]
[Fri Apr 03 07:51:13.723303 2026] [:error] [pid 40533:tid 40548] [client 72.146.33.167:25812] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wander.php"] [unique_id "ac8A8fbIAA8AViDmwssX2QAAAU0"]
[Fri Apr 03 07:51:14.597769 2026] [:error] [pid 40533:tid 40552] [client 72.146.33.167:25828] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wander.php"] [unique_id "ac8A8vbIAA8AViDmwssX2gAAAVE"]
[Fri Apr 03 07:51:15.209133 2026] [:error] [pid 33446:tid 33497] [client 72.146.33.167:55132] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/amax.php"] [unique_id "ac8A89g3dCqFYIIdw0or6gAAAFQ"]
[Fri Apr 03 07:51:16.206688 2026] [:error] [pid 33446:tid 33482] [client 72.146.33.167:52824] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/amax.php"] [unique_id "ac8A9Ng3dCqFYIIdw0or7gAAAEU"]
[Fri Apr 03 07:51:17.343809 2026] [:error] [pid 40533:tid 40537] [client 72.146.33.167:14762] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/amax.php"] [unique_id "ac8A9fbIAA8AViDmwssX4wAAAUI"]
[Fri Apr 03 07:51:18.089971 2026] [:error] [pid 40533:tid 40541] [client 72.146.33.167:14226] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/amax.php"] [unique_id "ac8A9vbIAA8AViDmwssX5QAAAUY"]
[Fri Apr 03 07:51:18.843819 2026] [:error] [pid 40533:tid 40548] [client 72.146.33.167:52833] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "ac8A9vbIAA8AViDmwssX6AAAAU0"]
[Fri Apr 03 07:51:19.578801 2026] [:error] [pid 35469:tid 35481] [client 72.146.33.167:52847] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "ac8A96GvTIc8-wY3jUQtpgAAAQo"]
[Fri Apr 03 07:51:20.335363 2026] [:error] [pid 33542:tid 33564] [client 72.146.33.167:25809] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "ac8A-Hwb6uB1LaGtepYs4wAAANM"]
[Fri Apr 03 07:51:20.896488 2026] [:error] [pid 33445:tid 33474] [client 72.146.33.167:25845] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "ac8A-FlRNZ0iDVmJWM2bnAAAABg"]
[Fri Apr 03 07:51:21.764822 2026] [:error] [pid 33542:tid 33561] [client 72.146.33.167:54629] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/v3.php"] [unique_id "ac8A-Xwb6uB1LaGtepYs5QAAANA"]
[Fri Apr 03 07:51:22.659209 2026] [:error] [pid 33542:tid 33552] [client 72.146.33.167:14477] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/v3.php"] [unique_id "ac8A-nwb6uB1LaGtepYs5wAAAMc"]
[Fri Apr 03 07:51:23.527122 2026] [:error] [pid 33542:tid 33553] [client 72.146.33.167:15100] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/v3.php"] [unique_id "ac8A-3wb6uB1LaGtepYs6gAAAMg"]
[Fri Apr 03 07:51:24.313867 2026] [:error] [pid 33542:tid 33568] [client 72.146.33.167:54607] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/v3.php"] [unique_id "ac8A_Hwb6uB1LaGtepYs7AAAANc"]
[Fri Apr 03 07:51:25.101607 2026] [:error] [pid 33542:tid 33563] [client 72.146.33.167:14775] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/torsa1.php"] [unique_id "ac8A_Xwb6uB1LaGtepYs7wAAANI"]
[Fri Apr 03 07:51:25.798083 2026] [:error] [pid 40562:tid 40568] [client 72.146.33.167:52834] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/torsa1.php"] [unique_id "ac8A_TfFMXuP9zvqCeqDhAAAAYM"]
[Fri Apr 03 07:51:26.682379 2026] [:error] [pid 40562:tid 40578] [client 72.146.33.167:52849] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/torsa1.php"] [unique_id "ac8A_jfFMXuP9zvqCeqDhgAAAY0"]
[Fri Apr 03 07:51:27.363598 2026] [:error] [pid 35469:tid 35478] [client 72.146.33.167:41804] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/torsa1.php"] [unique_id "ac8A_6GvTIc8-wY3jUQtqwAAAQc"]
[Fri Apr 03 07:51:28.006587 2026] [:error] [pid 40533:tid 40542] [client 72.146.33.167:52807] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/to.php"] [unique_id "ac8BAPbIAA8AViDmwssX8QAAAUc"]
[Fri Apr 03 07:51:28.712020 2026] [:error] [pid 40533:tid 40543] [client 72.146.33.167:14470] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/to.php"] [unique_id "ac8BAPbIAA8AViDmwssX9AAAAUg"]
[Fri Apr 03 07:51:29.245238 2026] [:error] [pid 33542:tid 33567] [client 72.146.33.167:48169] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/to.php"] [unique_id "ac8BAXwb6uB1LaGtepYs_AAAANY"]
[Fri Apr 03 07:51:29.971890 2026] [:error] [pid 35469:tid 35489] [client 72.146.33.167:31851] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/to.php"] [unique_id "ac8BAaGvTIc8-wY3jUQtrwAAARI"]
[Fri Apr 03 07:51:30.855508 2026] [:error] [pid 33447:tid 33510] [client 72.146.33.167:14741] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wqqs.php"] [unique_id "ac8BAkgaPmDHz92j4lOjzQAAAIY"]
[Fri Apr 03 07:51:31.818697 2026] [:error] [pid 33542:tid 33561] [client 72.146.33.167:54637] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wqqs.php"] [unique_id "ac8BA3wb6uB1LaGtepYtAwAAANA"]
[Fri Apr 03 07:51:32.869161 2026] [:error] [pid 33446:tid 33484] [client 72.146.33.167:31829] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wqqs.php"] [unique_id "ac8BBNg3dCqFYIIdw0or-wAAAEc"]
[Fri Apr 03 07:51:33.739139 2026] [:error] [pid 33542:tid 33545] [client 72.146.33.167:31852] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wqqs.php"] [unique_id "ac8BBXwb6uB1LaGtepYtCwAAAMA"]
[Fri Apr 03 07:51:34.434425 2026] [:error] [pid 33542:tid 33566] [client 72.146.33.167:24731] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wps.php"] [unique_id "ac8BBnwb6uB1LaGtepYtDQAAANU"]
[Fri Apr 03 07:51:34.968882 2026] [:error] [pid 33447:tid 33528] [client 72.146.33.167:24762] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wps.php"] [unique_id "ac8BBkgaPmDHz92j4lOj0AAAAJg"]
[Fri Apr 03 07:51:35.761173 2026] [:error] [pid 33542:tid 33546] [client 72.146.33.167:14754] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wps.php"] [unique_id "ac8BB3wb6uB1LaGtepYtEAAAAME"]
[Fri Apr 03 07:51:36.468493 2026] [:error] [pid 33542:tid 33569] [client 72.146.33.167:20325] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wps.php"] [unique_id "ac8BCHwb6uB1LaGtepYtFAAAANg"]
[Fri Apr 03 07:51:37.112848 2026] [:error] [pid 33542:tid 33548] [client 72.146.33.167:17075] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/inege.php"] [unique_id "ac8BCXwb6uB1LaGtepYtFQAAAMM"]
[Fri Apr 03 07:51:38.062171 2026] [:error] [pid 33446:tid 33488] [client 72.146.33.167:14560] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/inege.php"] [unique_id "ac8BCtg3dCqFYIIdw0or_gAAAEs"]
[Fri Apr 03 07:51:38.647215 2026] [:error] [pid 33446:tid 33482] [client 72.146.33.167:24746] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/inege.php"] [unique_id "ac8BCtg3dCqFYIIdw0or_wAAAEU"]
[Fri Apr 03 07:51:39.436711 2026] [:error] [pid 33542:tid 33550] [client 72.146.33.167:55120] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/inege.php"] [unique_id "ac8BC3wb6uB1LaGtepYtHQAAAMU"]
[Fri Apr 03 07:51:40.404623 2026] [:error] [pid 33542:tid 33568] [client 72.146.33.167:17036] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aifa.php"] [unique_id "ac8BDHwb6uB1LaGtepYtHwAAANc"]
[Fri Apr 03 07:51:41.026746 2026] [proxy_fcgi:error] [pid 33445:tid 33464] [client 72.146.33.167:43083] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 07:51:41.279752 2026] [proxy_fcgi:error] [pid 33445:tid 33460] [client 72.146.33.167:43083] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 07:51:41.524778 2026] [proxy_fcgi:error] [pid 33445:tid 33466] [client 72.146.33.167:43083] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 07:51:41.765135 2026] [proxy_fcgi:error] [pid 33445:tid 33454] [client 72.146.33.167:43083] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 07:51:42.006895 2026] [proxy_fcgi:error] [pid 33445:tid 33470] [client 72.146.33.167:43083] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 07:51:42.485858 2026] [proxy_fcgi:error] [pid 33445:tid 33467] [client 72.146.33.167:43083] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 07:51:42.724538 2026] [proxy_fcgi:error] [pid 33445:tid 33463] [client 72.146.33.167:43083] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 07:51:42.960962 2026] [proxy_fcgi:error] [pid 33445:tid 33465] [client 72.146.33.167:43083] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 07:51:43.210894 2026] [proxy_fcgi:error] [pid 33445:tid 33473] [client 72.146.33.167:43083] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 07:51:43.465442 2026] [proxy_fcgi:error] [pid 33445:tid 33453] [client 72.146.33.167:43083] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 07:51:44.995018 2026] [:error] [pid 33445:tid 33457] [client 72.146.33.167:43083] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/network.php"] [unique_id "ac8BEFlRNZ0iDVmJWM2brAAAAAc"]
[Fri Apr 03 07:51:45.826307 2026] [:error] [pid 40562:tid 40567] [client 72.146.33.167:37276] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/network.php"] [unique_id "ac8BETfFMXuP9zvqCeqDiwAAAYI"]
[Fri Apr 03 07:51:46.689954 2026] [:error] [pid 40562:tid 40569] [client 72.146.33.167:20310] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/network.php"] [unique_id "ac8BEjfFMXuP9zvqCeqDjQAAAYQ"]
[Fri Apr 03 07:51:47.374822 2026] [:error] [pid 33446:tid 33488] [client 72.146.33.167:37257] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/network.php"] [unique_id "ac8BE9g3dCqFYIIdw0osCgAAAEs"]
[Fri Apr 03 07:51:47.920472 2026] [:error] [pid 40562:tid 40579] [client 72.146.33.167:43119] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-2019.php"] [unique_id "ac8BEzfFMXuP9zvqCeqDkgAAAY4"]
[Fri Apr 03 07:51:48.791664 2026] [:error] [pid 33446:tid 33497] [client 72.146.33.167:20588] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-2019.php"] [unique_id "ac8BFNg3dCqFYIIdw0osDAAAAFQ"]
[Fri Apr 03 07:51:49.364699 2026] [:error] [pid 33446:tid 33498] [client 72.146.33.167:24718] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-2019.php"] [unique_id "ac8BFdg3dCqFYIIdw0osDgAAAFU"]
[Fri Apr 03 07:51:49.880569 2026] [:error] [pid 33445:tid 33468] [client 72.146.33.167:28576] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-2019.php"] [unique_id "ac8BFVlRNZ0iDVmJWM2bsQAAABI"]
[Fri Apr 03 07:51:50.459605 2026] [:error] [pid 40562:tid 40586] [client 72.146.33.167:55105] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bypass.php"] [unique_id "ac8BFjfFMXuP9zvqCeqDlgAAAZU"]
[Fri Apr 03 07:51:50.965318 2026] [:error] [pid 40562:tid 40575] [client 72.146.33.167:52851] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bypass.php"] [unique_id "ac8BFjfFMXuP9zvqCeqDmgAAAYo"]
[Fri Apr 03 07:51:51.718532 2026] [:error] [pid 40533:tid 40549] [client 72.146.33.167:54627] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bypass.php"] [unique_id "ac8BF_bIAA8AViDmwssX_QAAAU4"]
[Fri Apr 03 07:51:52.263812 2026] [:error] [pid 40533:tid 40543] [client 72.146.33.167:37282] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bypass.php"] [unique_id "ac8BGPbIAA8AViDmwssX_wAAAUg"]
[Fri Apr 03 07:51:52.996796 2026] [:error] [pid 33542:tid 33548] [client 72.146.33.167:24705] [client 72.146.33.167] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "ac8BGHwb6uB1LaGtepYtNAAAAMM"]
[Fri Apr 03 07:51:53.633183 2026] [:error] [pid 33445:tid 33454] [client 72.146.33.167:43073] [client 72.146.33.167] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/theme-compat/wp-login.php"] [unique_id "ac8BGVlRNZ0iDVmJWM2bswAAAAQ"]
[Fri Apr 03 07:51:54.512910 2026] [:error] [pid 33542:tid 33568] [client 72.146.33.167:44644] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tiny.php"] [unique_id "ac8BGnwb6uB1LaGtepYtNgAAANc"]
[Fri Apr 03 07:51:55.339714 2026] [:error] [pid 40533:tid 40536] [client 72.146.33.167:37273] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tiny.php"] [unique_id "ac8BG_bIAA8AViDmwssYAgAAAUE"]
[Fri Apr 03 07:51:56.038686 2026] [:error] [pid 33446:tid 33477] [client 72.146.33.167:17053] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tiny.php"] [unique_id "ac8BHNg3dCqFYIIdw0osGAAAAEA"]
[Fri Apr 03 07:51:56.665188 2026] [:error] [pid 40533:tid 40554] [client 72.146.33.167:37257] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tiny.php"] [unique_id "ac8BHPbIAA8AViDmwssYBQAAAVM"]
[Fri Apr 03 07:51:57.280240 2026] [:error] [pid 40533:tid 40553] [client 72.146.33.167:3963] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lock.php"] [unique_id "ac8BHfbIAA8AViDmwssYCAAAAVI"]
[Fri Apr 03 07:51:57.916319 2026] [:error] [pid 35469:tid 35481] [client 72.146.33.167:8404] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lock.php"] [unique_id "ac8BHaGvTIc8-wY3jUQtvAAAAQo"]
[Fri Apr 03 07:51:58.597600 2026] [:error] [pid 33446:tid 33495] [client 72.146.33.167:24748] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lock.php"] [unique_id "ac8BHtg3dCqFYIIdw0osGwAAAFI"]
[Fri Apr 03 07:51:59.503026 2026] [:error] [pid 40533:tid 40549] [client 72.146.33.167:20293] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lock.php"] [unique_id "ac8BH_bIAA8AViDmwssYDAAAAU4"]
[Fri Apr 03 07:52:00.102291 2026] [:error] [pid 40533:tid 40552] [client 72.146.33.167:43111] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mail.php"] [unique_id "ac8BIPbIAA8AViDmwssYDgAAAVE"]
[Fri Apr 03 07:52:00.815781 2026] [:error] [pid 40533:tid 40557] [client 72.146.33.167:52829] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mail.php"] [unique_id "ac8BIPbIAA8AViDmwssYEQAAAVY"]
[Fri Apr 03 07:52:01.471386 2026] [:error] [pid 40533:tid 40553] [client 72.146.33.167:54642] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mail.php"] [unique_id "ac8BIfbIAA8AViDmwssYFgAAAVI"]
[Fri Apr 03 07:52:02.211380 2026] [:error] [pid 33446:tid 33480] [client 72.146.33.167:54629] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mail.php"] [unique_id "ac8BItg3dCqFYIIdw0osIQAAAEM"]
[Fri Apr 03 07:52:03.011656 2026] [:error] [pid 35469:tid 35482] [client 72.146.33.167:31857] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/marijuana.php"] [unique_id "ac8BI6GvTIc8-wY3jUQtwAAAAQs"]
[Fri Apr 03 07:52:04.218482 2026] [:error] [pid 33542:tid 33553] [client 72.146.33.167:8422] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/marijuana.php"] [unique_id "ac8BJHwb6uB1LaGtepYtRwAAAMg"]
[Fri Apr 03 07:52:06.378096 2026] [:error] [pid 33446:tid 33482] [client 72.146.33.167:55158] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/marijuana.php"] [unique_id "ac8BJtg3dCqFYIIdw0osJgAAAEU"]
[Fri Apr 03 07:52:07.082717 2026] [:error] [pid 35469:tid 35493] [client 72.146.33.167:24710] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/marijuana.php"] [unique_id "ac8BJ6GvTIc8-wY3jUQtwQAAARY"]
[Fri Apr 03 07:52:07.733047 2026] [:error] [pid 35469:tid 35471] [client 72.146.33.167:39864] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/333.php"] [unique_id "ac8BJ6GvTIc8-wY3jUQtwwAAAQA"]
[Fri Apr 03 07:52:08.285002 2026] [:error] [pid 40562:tid 40577] [client 72.146.33.167:37288] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/333.php"] [unique_id "ac8BKDfFMXuP9zvqCeqDogAAAYw"]
[Fri Apr 03 07:52:09.539435 2026] [:error] [pid 40533:tid 40558] [client 72.146.33.167:8399] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/333.php"] [unique_id "ac8BKfbIAA8AViDmwssYHAAAAVc"]
[Fri Apr 03 07:52:10.482650 2026] [:error] [pid 40562:tid 40571] [client 72.146.33.167:3604] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/333.php"] [unique_id "ac8BKjfFMXuP9zvqCeqDpQAAAYY"]
[Fri Apr 03 07:52:11.436009 2026] [:error] [pid 40562:tid 40589] [client 72.146.33.167:43132] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/444.php"] [unique_id "ac8BKzfFMXuP9zvqCeqDpwAAAZg"]
[Fri Apr 03 07:52:12.372115 2026] [:error] [pid 33446:tid 33491] [client 72.146.33.167:20292] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/444.php"] [unique_id "ac8BLNg3dCqFYIIdw0osLQAAAE4"]
[Fri Apr 03 07:52:13.174880 2026] [:error] [pid 35469:tid 35481] [client 72.146.33.167:24117] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/444.php"] [unique_id "ac8BLaGvTIc8-wY3jUQtygAAAQo"]
[Fri Apr 03 07:52:14.216294 2026] [:error] [pid 33446:tid 33494] [client 72.146.33.167:20605] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/444.php"] [unique_id "ac8BLtg3dCqFYIIdw0osOQAAAFE"]
[Fri Apr 03 07:52:15.274020 2026] [:error] [pid 40533:tid 40536] [client 72.146.33.167:43133] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file9.php"] [unique_id "ac8BL_bIAA8AViDmwssYJwAAAUE"]
[Fri Apr 03 07:52:15.858723 2026] [:error] [pid 33447:tid 33522] [client 72.146.33.167:3586] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file9.php"] [unique_id "ac8BL0gaPmDHz92j4lOj4gAAAJI"]
[Fri Apr 03 07:52:16.830113 2026] [:error] [pid 40533:tid 40542] [client 72.146.33.167:20347] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file9.php"] [unique_id "ac8BMPbIAA8AViDmwssYLQAAAUc"]
[Fri Apr 03 07:52:18.009801 2026] [:error] [pid 40533:tid 40542] [client 72.146.33.167:31312] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file9.php"] [unique_id "ac8BMvbIAA8AViDmwssYNgAAAUc"]
[Fri Apr 03 07:52:18.776326 2026] [:error] [pid 40562:tid 40571] [client 72.146.33.167:39836] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/filesss.php"] [unique_id "ac8BMjfFMXuP9zvqCeqDuwAAAYY"]
[Fri Apr 03 07:52:19.693043 2026] [:error] [pid 35469:tid 35480] [client 72.146.33.167:38232] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/filesss.php"] [unique_id "ac8BM6GvTIc8-wY3jUQt1QAAAQk"]
[Fri Apr 03 07:52:20.260128 2026] [:error] [pid 35469:tid 35472] [client 72.146.33.167:31318] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/filesss.php"] [unique_id "ac8BNKGvTIc8-wY3jUQt2gAAAQE"]
[Fri Apr 03 07:52:21.386712 2026] [:error] [pid 40562:tid 40568] [client 72.146.33.167:8426] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/filesss.php"] [unique_id "ac8BNTfFMXuP9zvqCeqDvQAAAYM"]
[Fri Apr 03 07:52:22.000476 2026] [:error] [pid 40533:tid 40548] [client 72.146.33.167:57432] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file88.php"] [unique_id "ac8BNfbIAA8AViDmwssYSAAAAU0"]
[Fri Apr 03 07:52:22.611441 2026] [:error] [pid 40562:tid 40580] [client 72.146.33.167:16117] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file88.php"] [unique_id "ac8BNjfFMXuP9zvqCeqDvwAAAY8"]
[Fri Apr 03 07:52:23.135600 2026] [:error] [pid 33445:tid 33453] [client 72.146.33.167:21346] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file88.php"] [unique_id "ac8BN1lRNZ0iDVmJWM2bzQAAAAM"]
[Fri Apr 03 07:52:23.791619 2026] [:error] [pid 40562:tid 40575] [client 72.146.33.167:38242] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file88.php"] [unique_id "ac8BNzfFMXuP9zvqCeqDxwAAAYo"]
[Fri Apr 03 07:52:24.329879 2026] [:error] [pid 40533:tid 40542] [client 72.146.33.167:21887] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admir.php"] [unique_id "ac8BOPbIAA8AViDmwssYSQAAAUc"]
[Fri Apr 03 07:52:25.028429 2026] [:error] [pid 35469:tid 35491] [client 72.146.33.167:3634] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admir.php"] [unique_id "ac8BOaGvTIc8-wY3jUQt4QAAARQ"]
[Fri Apr 03 07:52:25.683430 2026] [:error] [pid 33446:tid 33490] [client 72.146.33.167:32826] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admir.php"] [unique_id "ac8BOdg3dCqFYIIdw0osSQAAAE0"]
[Fri Apr 03 07:52:26.168907 2026] [:error] [pid 33542:tid 33560] [client 72.146.33.167:47629] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admir.php"] [unique_id "ac8BOnwb6uB1LaGtepYtcAAAAM8"]
[Fri Apr 03 07:52:26.710726 2026] [:error] [pid 33446:tid 33491] [client 72.146.33.167:25812] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aj.php"] [unique_id "ac8BOtg3dCqFYIIdw0osTgAAAE4"]
[Fri Apr 03 07:52:27.321973 2026] [:error] [pid 35469:tid 35493] [client 72.146.33.167:26304] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aj.php"] [unique_id "ac8BO6GvTIc8-wY3jUQt5QAAARY"]
[Fri Apr 03 07:52:27.824182 2026] [:error] [pid 33445:tid 33460] [client 72.146.33.167:21323] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aj.php"] [unique_id "ac8BO1lRNZ0iDVmJWM2bzwAAAAo"]
[Fri Apr 03 07:52:28.426924 2026] [:error] [pid 35469:tid 35471] [client 72.146.33.167:31300] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aj.php"] [unique_id "ac8BPKGvTIc8-wY3jUQt5gAAAQA"]
[Fri Apr 03 07:52:28.967630 2026] [:error] [pid 35469:tid 35492] [client 72.146.33.167:32784] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/opts.php"] [unique_id "ac8BPKGvTIc8-wY3jUQt5wAAARU"]
[Fri Apr 03 07:52:29.742844 2026] [:error] [pid 35469:tid 35489] [client 72.146.33.167:47665] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/opts.php"] [unique_id "ac8BPaGvTIc8-wY3jUQt6QAAARI"]
[Fri Apr 03 07:52:30.395144 2026] [:error] [pid 33446:tid 33485] [client 72.146.33.167:57449] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/opts.php"] [unique_id "ac8BPtg3dCqFYIIdw0osVQAAAEg"]
[Fri Apr 03 07:52:30.968993 2026] [:error] [pid 33446:tid 33482] [client 72.146.33.167:57457] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/opts.php"] [unique_id "ac8BPtg3dCqFYIIdw0osWQAAAEU"]
[Fri Apr 03 07:52:31.459250 2026] [:error] [pid 40562:tid 40568] [client 72.146.33.167:16113] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/filer.php"] [unique_id "ac8BPzfFMXuP9zvqCeqD0AAAAYM"]
[Fri Apr 03 07:52:32.019772 2026] [:error] [pid 33447:tid 33508] [client 72.146.33.167:41024] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/filer.php"] [unique_id "ac8BQEgaPmDHz92j4lOj8AAAAIQ"]
[Fri Apr 03 07:52:32.677293 2026] [:error] [pid 35469:tid 35481] [client 72.146.33.167:43587] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/filer.php"] [unique_id "ac8BQKGvTIc8-wY3jUQt7gAAAQo"]
[Fri Apr 03 07:52:33.526537 2026] [:error] [pid 35469:tid 35495] [client 72.146.33.167:35796] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/filer.php"] [unique_id "ac8BQaGvTIc8-wY3jUQt8AAAARg"]
[Fri Apr 03 07:52:34.329103 2026] [:error] [pid 40562:tid 40572] [client 72.146.33.167:35833] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lites.php"] [unique_id "ac8BQjfFMXuP9zvqCeqD2AAAAYc"]
[Fri Apr 03 07:52:35.031085 2026] [:error] [pid 33446:tid 33482] [client 72.146.33.167:3748] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lites.php"] [unique_id "ac8BQ9g3dCqFYIIdw0osYwAAAEU"]
[Fri Apr 03 07:52:35.692077 2026] [:error] [pid 40533:tid 40537] [client 72.146.33.167:41047] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lites.php"] [unique_id "ac8BQ_bIAA8AViDmwssYVQAAAUI"]
[Fri Apr 03 07:52:36.955512 2026] [:error] [pid 40562:tid 40569] [client 72.146.33.167:42674] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lites.php"] [unique_id "ac8BRDfFMXuP9zvqCeqD2wAAAYQ"]
[Fri Apr 03 07:52:37.701376 2026] [:error] [pid 40562:tid 40583] [client 72.146.33.167:35891] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/0x.php"] [unique_id "ac8BRTfFMXuP9zvqCeqD4AAAAZI"]
[Fri Apr 03 07:52:38.555505 2026] [:error] [pid 33445:tid 33464] [client 72.146.33.167:18774] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/0x.php"] [unique_id "ac8BRllRNZ0iDVmJWM2b2AAAAA4"]
[Fri Apr 03 07:52:39.202227 2026] [:error] [pid 33542:tid 33554] [client 72.146.33.167:17137] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/0x.php"] [unique_id "ac8BR3wb6uB1LaGtepYtgAAAAMk"]
[Fri Apr 03 07:52:40.283153 2026] [:error] [pid 40533:tid 40554] [client 72.146.33.167:42602] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/0x.php"] [unique_id "ac8BSPbIAA8AViDmwssYWQAAAVM"]
[Fri Apr 03 07:52:41.205805 2026] [:error] [pid 40562:tid 40568] [client 72.146.33.167:57476] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/he.php"] [unique_id "ac8BSTfFMXuP9zvqCeqD5QAAAYM"]
[Fri Apr 03 07:52:41.788964 2026] [:error] [pid 33446:tid 33478] [client 72.146.33.167:41868] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/he.php"] [unique_id "ac8BSdg3dCqFYIIdw0oseAAAAEE"]
[Fri Apr 03 07:52:42.416543 2026] [:error] [pid 33447:tid 33512] [client 72.146.33.167:15753] [client 72.146.33.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/he.php"] [unique_id "ac8BSkgaPmDHz92j4lOj-QAAAIg"]
[Fri Apr 03 07:52:43.181956 2026] [proxy_fcgi:error] [pid 33542:tid 33549] [client 72.146.33.167:32420] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 07:52:44.234741 2026] [proxy_fcgi:error] [pid 33542:tid 33546] [client 72.146.33.167:32420] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 07:52:44.472207 2026] [proxy_fcgi:error] [pid 33542:tid 33550] [client 72.146.33.167:32420] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 07:52:44.708677 2026] [proxy_fcgi:error] [pid 33542:tid 33566] [client 72.146.33.167:32420] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 07:52:44.956680 2026] [proxy_fcgi:error] [pid 33542:tid 33547] [client 72.146.33.167:32420] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 07:52:45.194361 2026] [proxy_fcgi:error] [pid 33542:tid 33563] [client 72.146.33.167:32420] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 11:36:11.624784 2026] [:error] [pid 40562:tid 40589] [client 185.223.152.53:60609] [client 185.223.152.53] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/"] [unique_id "ac81qzfFMXuP9zvqCerWcAAAAZg"]
[Fri Apr 03 11:36:12.308668 2026] [:error] [pid 40533:tid 40557] [client 185.223.152.58:30531] [client 185.223.152.58] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/inputs.php"] [unique_id "ac81rPbIAA8AViDmwstURwAAAVY"]
[Fri Apr 03 11:36:12.994159 2026] [:error] [pid 40562:tid 40570] [client 185.223.152.49:46039] [client 185.223.152.49] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/.well-known/core.php"] [unique_id "ac81rDfFMXuP9zvqCerWeAAAAYU"]
[Fri Apr 03 11:36:13.682629 2026] [:error] [pid 40562:tid 40565] [client 185.223.152.56:40831] [client 185.223.152.56] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-content/users.php"] [unique_id "ac81rTfFMXuP9zvqCerWewAAAYA"]
[Fri Apr 03 11:36:14.379640 2026] [:error] [pid 33542:tid 33549] [client 185.223.152.55:39623] [client 185.223.152.55] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-content/wp-activate.php"] [unique_id "ac81rnwb6uB1LaGtepaVLwAAAMQ"]
[Fri Apr 03 11:36:15.196082 2026] [:error] [pid 33446:tid 33498] [client 185.223.152.40:47677] [client 185.223.152.40] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/num.php"] [unique_id "ac81r9g3dCqFYIIdw0pkegAAAFU"]
[Fri Apr 03 11:36:21.019725 2026] [:error] [pid 35469:tid 35478] [client 185.223.152.39:49205] [client 185.223.152.39] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/php-compat/"] [unique_id "ac81taGvTIc8-wY3jURfnwAAAQc"]
[Fri Apr 03 11:36:21.705190 2026] [:error] [pid 33446:tid 33479] [client 185.223.152.52:25139] [client 185.223.152.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/codemirror/config.php"] [unique_id "ac81tdg3dCqFYIIdw0pkjwAAAEI"]
[Fri Apr 03 11:36:24.041739 2026] [:error] [pid 33447:tid 33526] [client 185.223.152.63:53221] [client 185.223.152.63] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-content/test.php"] [unique_id "ac81uEgaPmDHz92j4lPQqwAAAJY"]
[Fri Apr 03 11:36:24.727113 2026] [:error] [pid 40562:tid 40573] [client 185.223.152.39:26683] [client 185.223.152.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/header.php"] [unique_id "ac81uDfFMXuP9zvqCerWogAAAYg"]
[Fri Apr 03 11:36:25.416313 2026] [:error] [pid 33445:tid 33459] [client 185.223.152.59:43225] [client 185.223.152.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/block-bindings/system_core.php"] [unique_id "ac81uVlRNZ0iDVmJWM3M9gAAAAk"]
[Fri Apr 03 11:36:26.108096 2026] [:error] [pid 33542:tid 33556] [client 185.223.152.51:37627] [client 185.223.152.51] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/system_core.php"] [unique_id "ac81unwb6uB1LaGtepaVPQAAAMs"]
[Fri Apr 03 11:36:26.795982 2026] [:error] [pid 33445:tid 33456] [client 185.223.152.59:45801] [client 185.223.152.59] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/rip.php"] [unique_id "ac81ullRNZ0iDVmJWM3NCQAAAAY"]
[Fri Apr 03 11:36:27.481292 2026] [:error] [pid 33445:tid 33462] [client 185.223.152.59:54133] [client 185.223.152.59] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-content/uploads/admin.php"] [unique_id "ac81u1lRNZ0iDVmJWM3NDgAAAAw"]
[Fri Apr 03 11:36:28.166457 2026] [:error] [pid 33542:tid 33567] [client 185.223.152.56:63021] [client 185.223.152.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "ac81vHwb6uB1LaGtepaVPwAAANY"]
[Fri Apr 03 11:36:28.871610 2026] [:error] [pid 33447:tid 33528] [client 185.223.152.48:37691] [client 185.223.152.48] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/admin.php"] [unique_id "ac81vEgaPmDHz92j4lPQrQAAAJg"]
[Fri Apr 03 11:36:29.559111 2026] [:error] [pid 33445:tid 33455] [client 185.223.152.64:26263] [client 185.223.152.64] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/upload/zczv.php"] [unique_id "ac81vVlRNZ0iDVmJWM3NFAAAAAU"]
[Fri Apr 03 11:36:30.247597 2026] [:error] [pid 33447:tid 33515] [client 185.223.152.60:58725] [client 185.223.152.60] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-content/"] [unique_id "ac81vkgaPmDHz92j4lPQrgAAAIs"]
[Fri Apr 03 11:36:31.108048 2026] [:error] [pid 33445:tid 33468] [client 185.223.152.43:22909] [client 185.223.152.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dwelectservices.com.au"] [uri "/filemanager.php"] [unique_id "ac81v1lRNZ0iDVmJWM3NGgAAABI"]
[Fri Apr 03 11:36:31.794870 2026] [:error] [pid 40562:tid 40567] [client 185.223.152.51:52461] [client 185.223.152.51] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/admin/"] [unique_id "ac81vzfFMXuP9zvqCerWpQAAAYI"]
[Fri Apr 03 11:36:32.514692 2026] [:error] [pid 33542:tid 33553] [client 185.223.152.51:25017] [client 185.223.152.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/speculative8.php"] [unique_id "ac81wHwb6uB1LaGtepaVRAAAAMg"]
[Fri Apr 03 11:36:33.203116 2026] [:error] [pid 55174:tid 55182] [client 185.223.152.59:26475] [client 185.223.152.59] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/assets/images/selam.php"] [unique_id "ac81wZ_WKqUonPNUHYxnxgAAAcY"]
[Fri Apr 03 11:36:33.887566 2026] [:error] [pid 40562:tid 40574] [client 185.223.152.49:25621] [client 185.223.152.49] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/item.php"] [unique_id "ac81wTfFMXuP9zvqCerWrQAAAYk"]
[Fri Apr 03 11:36:34.573092 2026] [:error] [pid 40533:tid 40545] [client 185.223.152.56:31741] [client 185.223.152.56] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/3PJcpMFsD8B.php"] [unique_id "ac81wvbIAA8AViDmwstUYwAAAUo"]
[Fri Apr 03 11:36:35.290399 2026] [:error] [pid 40533:tid 40536] [client 185.223.152.43:50159] [client 185.223.152.43] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/1.php"] [unique_id "ac81w_bIAA8AViDmwstUZQAAAUE"]
[Fri Apr 03 11:36:35.975649 2026] [:error] [pid 33447:tid 33510] [client 185.223.152.64:60621] [client 185.223.152.64] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-config-sample.php"] [unique_id "ac81w0gaPmDHz92j4lPQsQAAAIY"]
[Fri Apr 03 11:36:36.684376 2026] [:error] [pid 35469:tid 35487] [client 185.223.152.52:30321] [client 185.223.152.52] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hello-plus/classes/ehp-sarang.php"] [unique_id "ac81xKGvTIc8-wY3jURfpQAAARA"]
[Fri Apr 03 11:36:37.373783 2026] [:error] [pid 35469:tid 35477] [client 185.223.152.51:40941] [client 185.223.152.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dwelectservices.com.au"] [uri "/fm.php"] [unique_id "ac81xaGvTIc8-wY3jURfqAAAAQY"]
[Fri Apr 03 11:36:38.067857 2026] [:error] [pid 33542:tid 33547] [client 185.223.152.64:44187] [client 185.223.152.64] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-content/updraft/plugins-old/updraftplus/vendor/team-updraft/"] [unique_id "ac81xnwb6uB1LaGtepaVTgAAAMI"]
[Fri Apr 03 11:36:38.755729 2026] [:error] [pid 33446:tid 33489] [client 185.223.152.59:47097] [client 185.223.152.59] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/"] [unique_id "ac81xtg3dCqFYIIdw0pkuQAAAEw"]
[Fri Apr 03 11:36:39.443352 2026] [:error] [pid 33542:tid 33553] [client 185.223.152.59:25781] [client 185.223.152.59] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/"] [unique_id "ac81x3wb6uB1LaGtepaVTwAAAMg"]
[Fri Apr 03 11:36:40.132810 2026] [:error] [pid 40562:tid 40582] [client 185.223.152.61:23585] [client 185.223.152.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-content/updates.php"] [unique_id "ac81yDfFMXuP9zvqCerWtgAAAZE"]
[Fri Apr 03 11:36:40.822561 2026] [:error] [pid 33445:tid 33452] [client 185.223.152.61:64625] [client 185.223.152.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/js/"] [unique_id "ac81yFlRNZ0iDVmJWM3NJgAAAAI"]
[Fri Apr 03 11:36:46.508472 2026] [:error] [pid 35469:tid 35480] [client 185.223.152.54:26497] [client 185.223.152.54] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/class.api.php"] [unique_id "ac81zqGvTIc8-wY3jURfswAAAQk"]
[Fri Apr 03 11:36:47.202802 2026] [:error] [pid 35469:tid 35494] [client 185.223.152.45:36955] [client 185.223.152.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/"] [unique_id "ac81z6GvTIc8-wY3jURftwAAARc"]
[Fri Apr 03 11:36:47.887986 2026] [:error] [pid 35469:tid 35487] [client 185.223.152.39:46075] [client 185.223.152.39] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/adminfuns.php"] [unique_id "ac81z6GvTIc8-wY3jURfuwAAARA"]
[Fri Apr 03 11:36:48.574790 2026] [:error] [pid 35469:tid 35493] [client 185.223.152.52:37455] [client 185.223.152.52] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/comments/feed/"] [unique_id "ac810KGvTIc8-wY3jURfwwAAARY"]
[Fri Apr 03 11:36:49.261491 2026] [:error] [pid 35469:tid 35472] [client 185.223.152.42:65203] [client 185.223.152.42] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "ac810aGvTIc8-wY3jURfxAAAAQE"]
[Fri Apr 03 11:36:49.947050 2026] [:error] [pid 55174:tid 55178] [client 185.223.152.63:27057] [client 185.223.152.63] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/network/cache/"] [unique_id "ac810Z_WKqUonPNUHYxnyAAAAcI"]
[Fri Apr 03 11:36:50.634601 2026] [:error] [pid 40562:tid 40584] [client 185.223.152.62:36255] [client 185.223.152.62] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/mah.php"] [unique_id "ac810jfFMXuP9zvqCerWxgAAAZM"]
[Fri Apr 03 11:36:51.318807 2026] [:error] [pid 35469:tid 35476] [client 185.223.152.51:37129] [client 185.223.152.51] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/shell.php"] [unique_id "ac8106GvTIc8-wY3jURfxQAAAQU"]
[Fri Apr 03 11:36:52.004148 2026] [:error] [pid 55174:tid 55190] [client 185.223.152.50:36727] [client 185.223.152.50] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/goods.php"] [unique_id "ac811J_WKqUonPNUHYxnywAAAc4"]
[Fri Apr 03 11:36:52.687683 2026] [:error] [pid 40533:tid 40552] [client 185.223.152.44:39417] [client 185.223.152.44] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/revslider/includes/external/page/"] [unique_id "ac811PbIAA8AViDmwstUaAAAAVE"]
[Fri Apr 03 11:36:53.374142 2026] [:error] [pid 33445:tid 33470] [client 185.223.152.48:61275] [client 185.223.152.48] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/bolt.php"] [unique_id "ac811VlRNZ0iDVmJWM3NNwAAABQ"]
[Fri Apr 03 11:36:54.198535 2026] [:error] [pid 35469:tid 35484] [client 185.223.152.56:42685] [client 185.223.152.56] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/about.php"] [unique_id "ac811qGvTIc8-wY3jURfzwAAAQ0"]
[Fri Apr 03 11:36:54.882620 2026] [:error] [pid 35469:tid 35480] [client 185.223.152.48:54933] [client 185.223.152.48] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/archives/"] [unique_id "ac811qGvTIc8-wY3jURf0wAAAQk"]
[Fri Apr 03 11:36:55.567802 2026] [:error] [pid 35469:tid 35476] [client 185.223.152.47:57895] [client 185.223.152.47] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/code/"] [unique_id "ac8116GvTIc8-wY3jURf2wAAAQU"]
[Fri Apr 03 11:36:56.289128 2026] [:error] [pid 35469:tid 35479] [client 185.223.152.42:29865] [client 185.223.152.42] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-content/uploads/"] [unique_id "ac812KGvTIc8-wY3jURf4AAAAQg"]
[Fri Apr 03 11:36:56.982761 2026] [:error] [pid 33445:tid 33461] [client 185.223.152.44:27115] [client 185.223.152.44] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/dist/block-library/"] [unique_id "ac812FlRNZ0iDVmJWM3NPwAAAAs"]
[Fri Apr 03 11:36:59.235345 2026] [:error] [pid 55174:tid 55186] [client 185.223.152.42:28821] [client 185.223.152.42] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/edit.php"] [unique_id "ac8125_WKqUonPNUHYxn0wAAAco"]
[Fri Apr 03 11:37:00.051350 2026] [:error] [pid 35469:tid 35471] [client 185.223.152.58:53703] [client 185.223.152.58] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/"] [unique_id "ac813KGvTIc8-wY3jURf7AAAAQA"]
[Fri Apr 03 11:37:00.781396 2026] [:error] [pid 33542:tid 33551] [client 185.223.152.60:45847] [client 185.223.152.60] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/404.php"] [unique_id "ac813Hwb6uB1LaGtepaVYgAAAMY"]
[Fri Apr 03 11:37:01.483573 2026] [:error] [pid 33542:tid 33554] [client 185.223.152.43:57085] [client 185.223.152.43] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/advanced-product-fields-for-woocommerce/db.php"] [unique_id "ac813Xwb6uB1LaGtepaVZAAAAMk"]
[Fri Apr 03 11:37:02.190988 2026] [:error] [pid 35469:tid 35493] [client 185.223.152.64:47003] [client 185.223.152.64] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/js/widgets/"] [unique_id "ac813qGvTIc8-wY3jURf7gAAARY"]
[Fri Apr 03 11:37:02.879053 2026] [:error] [pid 35469:tid 35475] [client 185.223.152.38:36607] [client 185.223.152.38] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/index/function.php"] [unique_id "ac813qGvTIc8-wY3jURf9AAAAQQ"]
[Fri Apr 03 11:37:03.564251 2026] [:error] [pid 33445:tid 33467] [client 185.223.152.50:29467] [client 185.223.152.50] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/simple.php"] [unique_id "ac8131lRNZ0iDVmJWM3NSgAAABE"]
[Fri Apr 03 11:37:04.248887 2026] [:error] [pid 33445:tid 33457] [client 185.223.152.37:40065] [client 185.223.152.37] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "ac814FlRNZ0iDVmJWM3NUAAAAAc"]
[Fri Apr 03 11:37:04.942482 2026] [:error] [pid 33446:tid 33491] [client 185.223.152.51:48033] [client 185.223.152.51] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/theme-compat/"] [unique_id "ac814Ng3dCqFYIIdw0pkygAAAE4"]
[Fri Apr 03 11:37:05.626300 2026] [:error] [pid 33445:tid 33458] [client 185.223.152.62:20569] [client 185.223.152.62] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/includes/images/"] [unique_id "ac814VlRNZ0iDVmJWM3NWAAAAAg"]
[Fri Apr 03 11:37:06.359250 2026] [:error] [pid 40533:tid 40544] [client 185.223.152.59:36803] [client 185.223.152.59] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/so-pinyin-slugs/inc/main_json.php"] [unique_id "ac814vbIAA8AViDmwstUbwAAAUk"]
[Fri Apr 03 11:37:08.767280 2026] [:error] [pid 33447:tid 33528] [client 185.223.152.43:50079] [client 185.223.152.43] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/x.php"] [unique_id "ac815EgaPmDHz92j4lPQ0QAAAJg"]
[Fri Apr 03 11:37:09.463183 2026] [:error] [pid 35469:tid 35491] [client 185.223.152.57:64737] [client 185.223.152.57] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/admin.php"] [unique_id "ac815aGvTIc8-wY3jURf_QAAARQ"]
[Fri Apr 03 11:37:15.228522 2026] [:error] [pid 55174:tid 55198] [client 185.223.152.57:27705] [client 185.223.152.57] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/mediaelement/"] [unique_id "ac8165_WKqUonPNUHYxn2AAAAdY"]
[Fri Apr 03 11:37:15.914319 2026] [:error] [pid 33447:tid 33513] [client 185.223.152.60:61217] [client 185.223.152.60] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-content/upgrade/"] [unique_id "ac8160gaPmDHz92j4lPQ1wAAAIk"]
[Fri Apr 03 11:37:21.640368 2026] [:error] [pid 55174:tid 55200] [client 185.223.152.53:41783] [client 185.223.152.53] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/images/"] [unique_id "ac818Z_WKqUonPNUHYxn3gAAAdg"]
[Fri Apr 03 11:37:22.369030 2026] [:error] [pid 35469:tid 35484] [client 185.223.152.39:60953] [client 185.223.152.39] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/"] [unique_id "ac818qGvTIc8-wY3jURgDwAAAQ0"]
[Fri Apr 03 11:37:23.068518 2026] [:error] [pid 33446:tid 33487] [client 185.223.152.53:34083] [client 185.223.152.53] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/includes/"] [unique_id "ac8189g3dCqFYIIdw0pk-gAAAEo"]
[Fri Apr 03 11:37:23.758604 2026] [:error] [pid 33445:tid 33471] [client 185.223.152.52:38741] [client 185.223.152.52] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/"] [unique_id "ac8181lRNZ0iDVmJWM3NiQAAABU"]
[Fri Apr 03 11:37:24.454749 2026] [:error] [pid 33445:tid 33472] [client 185.223.152.57:62315] [client 185.223.152.57] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/shell/"] [unique_id "ac819FlRNZ0iDVmJWM3NjAAAABY"]
[Fri Apr 03 11:37:25.140676 2026] [:error] [pid 35469:tid 35493] [client 185.223.152.39:41075] [client 185.223.152.39] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/private/"] [unique_id "ac819aGvTIc8-wY3jURgFAAAARY"]
[Fri Apr 03 11:37:25.839425 2026] [:error] [pid 33446:tid 33492] [client 185.223.152.40:64671] [client 185.223.152.40] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/filester/assets/css/404.php"] [unique_id "ac819dg3dCqFYIIdw0plBQAAAE8"]
[Fri Apr 03 11:37:26.548208 2026] [:error] [pid 33447:tid 33510] [client 185.223.152.53:51997] [client 185.223.152.53] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/file.php"] [unique_id "ac819kgaPmDHz92j4lPQ5QAAAIY"]
[Fri Apr 03 11:37:27.234980 2026] [:error] [pid 33445:tid 33459] [client 185.223.152.53:26957] [client 185.223.152.53] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hello.php"] [unique_id "ac8191lRNZ0iDVmJWM3NlAAAAAk"]
[Fri Apr 03 11:37:32.976902 2026] [:error] [pid 55174:tid 55199] [client 185.223.152.62:63785] [client 185.223.152.62] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/block-bindings/"] [unique_id "ac81_J_WKqUonPNUHYxn6QAAAdc"]
[Fri Apr 03 11:37:33.688548 2026] [:error] [pid 35469:tid 35487] [client 185.223.152.62:28525] [client 185.223.152.62] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/network/"] [unique_id "ac81_aGvTIc8-wY3jURgIwAAARA"]
[Fri Apr 03 11:37:34.376741 2026] [:error] [pid 35469:tid 35479] [client 185.223.152.41:24769] [client 185.223.152.41] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/sodium_compat/src/Core/"] [unique_id "ac81_qGvTIc8-wY3jURgJQAAAQg"]
[Fri Apr 03 11:37:35.076822 2026] [:error] [pid 33446:tid 33493] [client 185.223.152.37:59833] [client 185.223.152.37] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/222.php"] [unique_id "ac81_9g3dCqFYIIdw0plFAAAAFA"]
[Fri Apr 03 11:37:35.761428 2026] [:error] [pid 35469:tid 35486] [client 185.223.152.37:48119] [client 185.223.152.37] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/colors/ocean/"] [unique_id "ac81_6GvTIc8-wY3jURgMQAAAQ8"]
[Fri Apr 03 11:37:36.450416 2026] [:error] [pid 33446:tid 33492] [client 185.223.152.61:24103] [client 185.223.152.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/comment-content/"] [unique_id "ac82ANg3dCqFYIIdw0plGwAAAE8"]
[Fri Apr 03 11:37:37.134815 2026] [:error] [pid 35469:tid 35480] [client 185.223.152.53:56249] [client 185.223.152.53] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/click.php"] [unique_id "ac82AaGvTIc8-wY3jURgNwAAAQk"]
[Fri Apr 03 11:37:37.835987 2026] [:error] [pid 33447:tid 33525] [client 185.223.152.239:53733] [client 185.223.152.239] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-wlx.php"] [unique_id "ac82AUgaPmDHz92j4lPQ8AAAAJU"]
[Fri Apr 03 11:37:43.522807 2026] [:error] [pid 40533:tid 40543] [client 185.223.152.55:34399] [client 185.223.152.55] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/nextpage/"] [unique_id "ac82B_bIAA8AViDmwstUjgAAAUg"]
[Fri Apr 03 11:37:44.233792 2026] [:error] [pid 40562:tid 40589] [client 185.223.152.42:34241] [client 185.223.152.42] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/includes/"] [unique_id "ac82CDfFMXuP9zvqCerW4QAAAZg"]
[Fri Apr 03 11:37:44.922169 2026] [:error] [pid 33446:tid 33482] [client 185.223.152.44:24393] [client 185.223.152.44] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/"] [unique_id "ac82CNg3dCqFYIIdw0plJQAAAEU"]
[Fri Apr 03 11:37:45.608587 2026] [:error] [pid 33445:tid 33470] [client 185.223.152.239:61349] [client 185.223.152.239] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/details/"] [unique_id "ac82CVlRNZ0iDVmJWM3NuwAAABQ"]
[Fri Apr 03 11:37:46.325751 2026] [:error] [pid 33446:tid 33491] [client 185.223.152.39:25225] [client 185.223.152.39] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-content/buy.php"] [unique_id "ac82Ctg3dCqFYIIdw0plJwAAAE4"]
[Fri Apr 03 11:37:47.045968 2026] [:error] [pid 33447:tid 33505] [client 185.223.152.55:43149] [client 185.223.152.55] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/sodium_compat/lib/"] [unique_id "ac82C0gaPmDHz92j4lPRDwAAAIE"]
[Fri Apr 03 11:37:47.730072 2026] [:error] [pid 55174:tid 55197] [client 185.223.152.43:43341] [client 185.223.152.43] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/image/"] [unique_id "ac82C5_WKqUonPNUHYxn8AAAAdU"]
[Fri Apr 03 11:37:48.418074 2026] [:error] [pid 33445:tid 33450] [client 185.223.152.42:58379] [client 185.223.152.42] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-themes.php"] [unique_id "ac82DFlRNZ0iDVmJWM3NxgAAAAA"]
[Fri Apr 03 11:37:49.115980 2026] [:error] [pid 33542:tid 33552] [client 185.223.152.41:42375] [client 185.223.152.41] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/"] [unique_id "ac82DXwb6uB1LaGtepaVgwAAAMc"]
[Fri Apr 03 11:37:49.829665 2026] [:error] [pid 33542:tid 33549] [client 185.223.152.61:32617] [client 185.223.152.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/colors/light/"] [unique_id "ac82DXwb6uB1LaGtepaVhQAAAMQ"]
[Fri Apr 03 11:37:50.515637 2026] [:error] [pid 40533:tid 40544] [client 185.223.152.52:42053] [client 185.223.152.52] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/theme-check/main.php"] [unique_id "ac82DvbIAA8AViDmwstUlwAAAUk"]
[Fri Apr 03 11:37:51.201497 2026] [:error] [pid 33542:tid 33555] [client 185.223.152.49:61529] [client 185.223.152.49] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/colors/"] [unique_id "ac82D3wb6uB1LaGtepaVhwAAAMo"]
[Fri Apr 03 11:37:51.888068 2026] [:error] [pid 35469:tid 35494] [client 185.223.152.47:21387] [client 185.223.152.47] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-admin.php"] [unique_id "ac82D6GvTIc8-wY3jURgYgAAARc"]
[Fri Apr 03 11:37:52.578820 2026] [:error] [pid 33446:tid 33495] [client 185.223.152.51:46911] [client 185.223.152.51] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "ac82ENg3dCqFYIIdw0plMgAAAFI"]
[Fri Apr 03 11:37:53.283501 2026] [:error] [pid 35469:tid 35488] [client 185.223.152.51:35709] [client 185.223.152.51] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wa/"] [unique_id "ac82EaGvTIc8-wY3jURgZAAAARE"]
[Fri Apr 03 11:37:53.983682 2026] [:error] [pid 55174:tid 55177] [client 185.223.152.56:43339] [client 185.223.152.56] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/post-comments-form/"] [unique_id "ac82EZ_WKqUonPNUHYxn9gAAAcE"]
[Fri Apr 03 11:37:54.688150 2026] [:error] [pid 40533:tid 40535] [client 185.223.152.50:52995] [client 185.223.152.50] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/radio.php"] [unique_id "ac82EvbIAA8AViDmwstUoQAAAUA"]
[Fri Apr 03 11:37:55.375319 2026] [:error] [pid 33447:tid 33524] [client 185.223.152.57:63305] [client 185.223.152.57] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/template-singl-portfolio.php"] [unique_id "ac82E0gaPmDHz92j4lPRGgAAAJQ"]
[Fri Apr 03 11:37:56.063168 2026] [:error] [pid 55174:tid 55179] [client 185.223.152.45:34087] [client 185.223.152.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/404.php"] [unique_id "ac82FJ_WKqUonPNUHYxn-wAAAcM"]
[Fri Apr 03 11:37:56.756953 2026] [:error] [pid 35469:tid 35481] [client 185.223.152.62:48393] [client 185.223.152.62] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/html-api/widgets/"] [unique_id "ac82FKGvTIc8-wY3jURgbQAAAQo"]
[Fri Apr 03 11:37:58.928121 2026] [:error] [pid 35469:tid 35477] [client 185.223.152.62:50113] [client 185.223.152.62] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/options.php"] [unique_id "ac82FqGvTIc8-wY3jURgdQAAAQY"]
[Fri Apr 03 11:37:59.623693 2026] [:error] [pid 40562:tid 40566] [client 185.223.152.55:49141] [client 185.223.152.55] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp.php"] [unique_id "ac82FzfFMXuP9zvqCerW6QAAAYE"]
[Fri Apr 03 11:38:00.342585 2026] [:error] [pid 40562:tid 40579] [client 185.223.152.45:32567] [client 185.223.152.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/ID3/"] [unique_id "ac82GDfFMXuP9zvqCerW7AAAAY4"]
[Fri Apr 03 11:38:01.225501 2026] [:error] [pid 55174:tid 55184] [client 185.223.152.38:39267] [client 185.223.152.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/tinymce/themes/about.php"] [unique_id "ac82GZ_WKqUonPNUHYxoBgAAAcg"]
[Fri Apr 03 11:38:01.914224 2026] [:error] [pid 35469:tid 35481] [client 185.223.152.55:30161] [client 185.223.152.55] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/mah/function.php"] [unique_id "ac82GaGvTIc8-wY3jURgegAAAQo"]
[Fri Apr 03 11:38:02.624311 2026] [:error] [pid 35469:tid 35478] [client 185.223.152.42:23103] [client 185.223.152.42] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "ac82GqGvTIc8-wY3jURggAAAAQc"]
[Fri Apr 03 11:38:03.309125 2026] [:error] [pid 33446:tid 33499] [client 185.223.152.54:43067] [client 185.223.152.54] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/column/"] [unique_id "ac82G9g3dCqFYIIdw0plRQAAAFY"]
[Fri Apr 03 11:38:03.994091 2026] [:error] [pid 55174:tid 55178] [client 185.223.152.41:62111] [client 185.223.152.41] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/ahax.php"] [unique_id "ac82G5_WKqUonPNUHYxoBwAAAcI"]
[Fri Apr 03 11:38:04.680006 2026] [:error] [pid 40533:tid 40537] [client 185.223.152.61:55721] [client 185.223.152.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/post-terms/"] [unique_id "ac82HPbIAA8AViDmwstUqAAAAUI"]
[Fri Apr 03 11:38:05.365779 2026] [:error] [pid 33446:tid 33477] [client 185.223.152.48:63093] [client 185.223.152.48] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/sitemaps/"] [unique_id "ac82Hdg3dCqFYIIdw0plSwAAAEA"]
[Fri Apr 03 11:38:06.051491 2026] [:error] [pid 33445:tid 33467] [client 185.223.152.55:52237] [client 185.223.152.55] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/imgareaselect/"] [unique_id "ac82HllRNZ0iDVmJWM3N0wAAABE"]
[Fri Apr 03 11:38:06.742492 2026] [:error] [pid 35469:tid 35471] [client 185.223.152.52:42847] [client 185.223.152.52] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-content/about.php"] [unique_id "ac82HqGvTIc8-wY3jURghAAAAQA"]
[Fri Apr 03 11:38:07.428751 2026] [:error] [pid 35469:tid 35489] [client 185.223.152.44:55713] [client 185.223.152.44] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/abcd.php"] [unique_id "ac82H6GvTIc8-wY3jURghgAAARI"]
[Fri Apr 03 11:38:08.113612 2026] [:error] [pid 40533:tid 40542] [client 185.223.152.57:55419] [client 185.223.152.57] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/ioxi-o.php"] [unique_id "ac82IPbIAA8AViDmwstUrQAAAUc"]
[Fri Apr 03 11:38:08.799400 2026] [:error] [pid 40562:tid 40570] [client 185.223.152.63:44613] [client 185.223.152.63] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/twentytwentyfour/patterns/template-singl-portfolio.php"] [unique_id "ac82IDfFMXuP9zvqCerW9AAAAYU"]
[Fri Apr 03 11:38:09.485097 2026] [:error] [pid 55174:tid 55176] [client 185.223.152.45:49799] [client 185.223.152.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-update.php"] [unique_id "ac82IZ_WKqUonPNUHYxoDAAAAcA"]
[Fri Apr 03 11:38:10.180983 2026] [:error] [pid 33447:tid 33525] [client 185.223.152.59:63029] [client 185.223.152.59] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Text/Diff/"] [unique_id "ac82IkgaPmDHz92j4lPRJgAAAJU"]
[Fri Apr 03 11:38:10.866989 2026] [:error] [pid 33447:tid 33510] [client 185.223.152.58:56235] [client 185.223.152.58] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/radio.php"] [unique_id "ac82IkgaPmDHz92j4lPRJwAAAIY"]
[Fri Apr 03 11:38:11.552722 2026] [:error] [pid 55174:tid 55181] [client 185.223.152.58:61623] [client 185.223.152.58] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/user.php"] [unique_id "ac82I5_WKqUonPNUHYxoEAAAAcU"]
[Fri Apr 03 11:38:12.237513 2026] [:error] [pid 33447:tid 33516] [client 185.223.152.48:43501] [client 185.223.152.48] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/info.php"] [unique_id "ac82JEgaPmDHz92j4lPRKQAAAIw"]
[Fri Apr 03 11:38:17.922892 2026] [:error] [pid 35469:tid 35489] [client 185.223.152.57:48561] [client 185.223.152.57] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/bless.php"] [unique_id "ac82KaGvTIc8-wY3jURgkQAAARI"]
[Fri Apr 03 11:38:18.607716 2026] [:error] [pid 40562:tid 40576] [client 185.223.152.60:44729] [client 185.223.152.60] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-links-opml.php"] [unique_id "ac82KjfFMXuP9zvqCerW-wAAAYs"]
[Fri Apr 03 11:38:19.297775 2026] [:error] [pid 33445:tid 33460] [client 185.223.152.239:24251] [client 185.223.152.239] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/colors/PHPMailer/s"] [unique_id "ac82K1lRNZ0iDVmJWM3N4QAAAAo"]
[Fri Apr 03 11:38:19.983353 2026] [:error] [pid 33445:tid 33471] [client 185.223.152.63:64037] [client 185.223.152.63] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/as.php"] [unique_id "ac82K1lRNZ0iDVmJWM3N5QAAABU"]
[Fri Apr 03 11:38:20.668793 2026] [:error] [pid 55174:tid 55199] [client 185.223.152.48:39567] [client 185.223.152.48] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/pullquote/"] [unique_id "ac82LJ_WKqUonPNUHYxoGQAAAdc"]
[Fri Apr 03 11:38:21.354569 2026] [:error] [pid 33445:tid 33455] [client 185.223.152.50:43099] [client 185.223.152.50] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/twentytwentyone/template-parts/"] [unique_id "ac82LVlRNZ0iDVmJWM3N7wAAAAU"]
[Fri Apr 03 11:38:22.038757 2026] [:error] [pid 35469:tid 35486] [client 185.223.152.55:21701] [client 185.223.152.55] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/PHPMailer/widgets/"] [unique_id "ac82LqGvTIc8-wY3jURglgAAAQ8"]
[Fri Apr 03 11:38:22.724982 2026] [:error] [pid 35469:tid 35495] [client 185.223.152.59:29897] [client 185.223.152.59] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/social-links/"] [unique_id "ac82LqGvTIc8-wY3jURglwAAARg"]
[Fri Apr 03 11:38:23.412027 2026] [:error] [pid 33445:tid 33465] [client 185.223.152.40:37791] [client 185.223.152.40] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/ab.php"] [unique_id "ac82L1lRNZ0iDVmJWM3N9wAAAA8"]
[Fri Apr 03 11:38:24.103498 2026] [:error] [pid 55174:tid 55200] [client 185.223.152.37:23539] [client 185.223.152.37] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/navigation-submenu/"] [unique_id "ac82MJ_WKqUonPNUHYxoGwAAAdg"]
[Fri Apr 03 11:38:24.816024 2026] [:error] [pid 33446:tid 33482] [client 185.223.152.43:39373] [client 185.223.152.43] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/paragraph/"] [unique_id "ac82MNg3dCqFYIIdw0plZgAAAEU"]
[Fri Apr 03 11:38:25.504074 2026] [:error] [pid 33446:tid 33495] [client 185.223.152.51:34113] [client 185.223.152.51] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/aa.php"] [unique_id "ac82Mdg3dCqFYIIdw0plawAAAFI"]
[Fri Apr 03 11:38:26.188879 2026] [:error] [pid 33445:tid 33473] [client 185.223.152.51:24839] [client 185.223.152.51] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/video/"] [unique_id "ac82MllRNZ0iDVmJWM3N_wAAABc"]
[Fri Apr 03 11:38:26.877708 2026] [:error] [pid 33445:tid 33468] [client 185.223.152.41:44445] [client 185.223.152.41] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-content/packed.php"] [unique_id "ac82MllRNZ0iDVmJWM3OBAAAABI"]
[Fri Apr 03 11:38:27.563426 2026] [:error] [pid 33542:tid 33565] [client 185.223.152.38:65193] [client 185.223.152.38] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-good.php"] [unique_id "ac82M3wb6uB1LaGtepaVqAAAANQ"]
[Fri Apr 03 11:38:28.252184 2026] [:error] [pid 33447:tid 33506] [client 185.223.152.37:30597] [client 185.223.152.37] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/IXR/"] [unique_id "ac82NEgaPmDHz92j4lPRNQAAAII"]
[Fri Apr 03 11:38:28.938599 2026] [:error] [pid 35469:tid 35471] [client 185.223.152.62:27565] [client 185.223.152.62] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Text/Diff/Engine/"] [unique_id "ac82NKGvTIc8-wY3jURgmwAAAQA"]
[Fri Apr 03 11:38:29.635626 2026] [:error] [pid 33445:tid 33456] [client 185.223.152.42:25997] [client 185.223.152.42] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-content/languages/"] [unique_id "ac82NVlRNZ0iDVmJWM3ODAAAAAY"]
[Fri Apr 03 11:38:30.324327 2026] [:error] [pid 33447:tid 33518] [client 185.223.152.60:48665] [client 185.223.152.60] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/about.php"] [unique_id "ac82NkgaPmDHz92j4lPRNgAAAI4"]
[Fri Apr 03 11:38:31.162026 2026] [:error] [pid 40562:tid 40581] [client 185.223.152.44:55477] [client 185.223.152.44] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/rest-api/"] [unique_id "ac82NzfFMXuP9zvqCerXCgAAAZA"]
[Fri Apr 03 11:38:31.849050 2026] [:error] [pid 40533:tid 40543] [client 185.223.152.59:62017] [client 185.223.152.59] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/group/"] [unique_id "ac82N_bIAA8AViDmwstUswAAAUg"]
[Fri Apr 03 11:38:32.610336 2026] [:error] [pid 35469:tid 35485] [client 185.223.152.58:34831] [client 185.223.152.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/k.php"] [unique_id "ac82OKGvTIc8-wY3jURgpwAAAQ4"]
[Fri Apr 03 11:38:33.339805 2026] [:error] [pid 33445:tid 33471] [client 185.223.152.52:23269] [client 185.223.152.52] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/twentytwentyfour/patterns/file.php"] [unique_id "ac82OVlRNZ0iDVmJWM3ODgAAABU"]
[Fri Apr 03 11:38:34.023975 2026] [:error] [pid 35469:tid 35491] [client 185.223.152.45:65077] [client 185.223.152.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/PHPMailer/"] [unique_id "ac82OqGvTIc8-wY3jURgqgAAARQ"]
[Fri Apr 03 11:38:34.708638 2026] [:error] [pid 33447:tid 33526] [client 185.223.152.47:27269] [client 185.223.152.47] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/twentytwentyfour/"] [unique_id "ac82OkgaPmDHz92j4lPROwAAAJY"]
[Fri Apr 03 11:38:35.405616 2026] [:error] [pid 55174:tid 55178] [client 185.223.152.50:25259] [client 185.223.152.50] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/dist/development/"] [unique_id "ac82O5_WKqUonPNUHYxoIAAAAcI"]
[Fri Apr 03 11:38:36.095916 2026] [:error] [pid 33447:tid 33507] [client 185.223.152.239:51371] [client 185.223.152.239] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/dist"] [unique_id "ac82PEgaPmDHz92j4lPRPQAAAIM"]
[Fri Apr 03 11:38:36.781090 2026] [:error] [pid 33446:tid 33481] [client 185.223.152.41:54427] [client 185.223.152.41] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/dist/components/"] [unique_id "ac82PNg3dCqFYIIdw0plbgAAAEQ"]
[Fri Apr 03 11:38:37.491447 2026] [:error] [pid 33446:tid 33498] [client 185.223.152.53:50515] [client 185.223.152.53] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/a.php"] [unique_id "ac82Pdg3dCqFYIIdw0pldQAAAFU"]
[Fri Apr 03 11:38:38.191628 2026] [:error] [pid 33445:tid 33462] [client 185.223.152.56:22385] [client 185.223.152.56] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/admin/function.php"] [unique_id "ac82PllRNZ0iDVmJWM3OEwAAAAw"]
[Fri Apr 03 11:38:38.876198 2026] [:error] [pid 55174:tid 55192] [client 185.223.152.57:54665] [client 185.223.152.57] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wordpress/wp-admin/maint/"] [unique_id "ac82Pp_WKqUonPNUHYxoJQAAAdA"]
[Fri Apr 03 11:38:39.561370 2026] [:error] [pid 40533:tid 40553] [client 185.223.152.54:30875] [client 185.223.152.54] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/2.php"] [unique_id "ac82P_bIAA8AViDmwstUtgAAAVI"]
[Fri Apr 03 11:38:40.246515 2026] [:error] [pid 35469:tid 35485] [client 185.223.152.47:57445] [client 185.223.152.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/jcrop/Jcrop.php"] [unique_id "ac82QKGvTIc8-wY3jURgswAAAQ4"]
[Fri Apr 03 11:38:40.963246 2026] [:error] [pid 33447:tid 33522] [client 185.223.152.41:49469] [client 185.223.152.41] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/worksec.php"] [unique_id "ac82QEgaPmDHz92j4lPRQQAAAJI"]
[Fri Apr 03 11:38:41.652008 2026] [:error] [pid 33446:tid 33496] [client 185.223.152.41:38451] [client 185.223.152.41] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-content/edit-wolf.php"] [unique_id "ac82Qdg3dCqFYIIdw0pleQAAAFM"]
[Fri Apr 03 11:38:42.374777 2026] [:error] [pid 33446:tid 33493] [client 185.223.152.43:38341] [client 185.223.152.43] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/xmlrpc.php"] [unique_id "ac82Qtg3dCqFYIIdw0plfwAAAFA"]
[Fri Apr 03 11:38:43.064325 2026] [:error] [pid 33542:tid 33558] [client 185.223.152.45:23361] [client 185.223.152.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-file.php"] [unique_id "ac82Q3wb6uB1LaGtepaVsQAAAM0"]
[Fri Apr 03 11:38:43.751624 2026] [:error] [pid 33445:tid 33474] [client 185.223.152.47:63659] [client 185.223.152.47] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/files.php"] [unique_id "ac82Q1lRNZ0iDVmJWM3OGwAAABg"]
[Fri Apr 03 11:38:44.436342 2026] [:error] [pid 33542:tid 33547] [client 185.223.152.49:40091] [client 185.223.152.49] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/colors/sunrise/"] [unique_id "ac82RHwb6uB1LaGtepaVswAAAMI"]
[Fri Apr 03 11:38:45.122412 2026] [:error] [pid 35469:tid 35476] [client 185.223.152.56:38691] [client 185.223.152.56] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/wp-blog.php"] [unique_id "ac82RaGvTIc8-wY3jURgwQAAAQU"]
[Fri Apr 03 11:38:45.809493 2026] [:error] [pid 40562:tid 40567] [client 185.223.152.62:28967] [client 185.223.152.62] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/user/block-patterns/"] [unique_id "ac82RTfFMXuP9zvqCerXGgAAAYI"]
[Fri Apr 03 11:38:46.497089 2026] [:error] [pid 55174:tid 55196] [client 185.223.152.45:29741] [client 185.223.152.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-content/uploads/elementor/"] [unique_id "ac82Rp_WKqUonPNUHYxoKgAAAdQ"]
[Fri Apr 03 11:38:47.185106 2026] [:error] [pid 33446:tid 33481] [client 185.223.152.62:48011] [client 185.223.152.62] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/system_log.php"] [unique_id "ac82R9g3dCqFYIIdw0pligAAAEQ"]
[Fri Apr 03 11:38:47.870869 2026] [:error] [pid 33445:tid 33463] [client 185.223.152.57:62023] [client 185.223.152.57] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/bk/"] [unique_id "ac82R1lRNZ0iDVmJWM3OHQAAAA0"]
[Fri Apr 03 11:38:48.557835 2026] [:error] [pid 40562:tid 40572] [client 185.223.152.56:31821] [client 185.223.152.56] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/twentytwentytwo/assets/fonts/"] [unique_id "ac82SDfFMXuP9zvqCerXIAAAAYc"]
[Fri Apr 03 11:38:49.247576 2026] [:error] [pid 33447:tid 33520] [client 185.223.152.57:27405] [client 185.223.152.57] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/dist/customize-widgets/"] [unique_id "ac82SUgaPmDHz92j4lPRRQAAAJA"]
[Fri Apr 03 11:38:49.969840 2026] [:error] [pid 35469:tid 35484] [client 185.223.152.48:40955] [client 185.223.152.48] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Text/"] [unique_id "ac82SaGvTIc8-wY3jURgxwAAAQ0"]
[Fri Apr 03 11:38:50.655941 2026] [:error] [pid 35469:tid 35476] [client 185.223.152.45:58195] [client 185.223.152.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "ac82SqGvTIc8-wY3jURgzAAAAQU"]
[Fri Apr 03 11:38:51.366376 2026] [:error] [pid 55174:tid 55198] [client 185.223.152.39:20819] [client 185.223.152.39] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/themes.php"] [unique_id "ac82S5_WKqUonPNUHYxoLgAAAdY"]
[Fri Apr 03 11:38:52.053157 2026] [:error] [pid 40562:tid 40576] [client 185.223.152.49:45801] [client 185.223.152.49] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/css.php"] [unique_id "ac82TDfFMXuP9zvqCerXIgAAAYs"]
[Fri Apr 03 11:38:52.763033 2026] [:error] [pid 33542:tid 33555] [client 185.223.152.49:33461] [client 185.223.152.49] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/network/colors/"] [unique_id "ac82THwb6uB1LaGtepaVtwAAAMo"]
[Fri Apr 03 11:38:53.449076 2026] [:error] [pid 35469:tid 35484] [client 185.223.152.47:49627] [client 185.223.152.47] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/images/block-bindings/"] [unique_id "ac82TaGvTIc8-wY3jURg1gAAAQ0"]
[Fri Apr 03 11:38:54.135718 2026] [:error] [pid 33445:tid 33467] [client 185.223.152.55:47523] [client 185.223.152.55] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-content.php"] [unique_id "ac82TllRNZ0iDVmJWM3OJwAAABE"]
[Fri Apr 03 11:38:54.823905 2026] [:error] [pid 55174:tid 55182] [client 185.223.152.48:37357] [client 185.223.152.48] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-domain.php"] [unique_id "ac82Tp_WKqUonPNUHYxoNgAAAcY"]
[Fri Apr 03 11:38:55.512641 2026] [:error] [pid 35469:tid 35486] [client 185.223.152.49:62357] [client 185.223.152.49] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/js/widgets/admin.php"] [unique_id "ac82T6GvTIc8-wY3jURg3AAAAQ8"]
[Fri Apr 03 11:38:56.203545 2026] [:error] [pid 55174:tid 55179] [client 185.223.152.47:27409] [client 185.223.152.47] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/jcrop/"] [unique_id "ac82UJ_WKqUonPNUHYxoOQAAAcM"]
[Fri Apr 03 11:38:56.902429 2026] [:error] [pid 33446:tid 33485] [client 185.223.152.61:57291] [client 185.223.152.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-content/lock360.php"] [unique_id "ac82UNg3dCqFYIIdw0pljwAAAEg"]
[Fri Apr 03 11:38:57.591570 2026] [:error] [pid 55174:tid 55193] [client 185.223.152.63:38577] [client 185.223.152.63] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/customize/fonts/"] [unique_id "ac82UZ_WKqUonPNUHYxoPQAAAdE"]
[Fri Apr 03 11:38:58.283810 2026] [:error] [pid 33542:tid 33567] [client 185.223.152.40:51997] [client 185.223.152.40] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/shell.php"] [unique_id "ac82Unwb6uB1LaGtepaVvAAAANY"]
[Fri Apr 03 11:38:59.014087 2026] [:error] [pid 40562:tid 40583] [client 185.223.152.49:64359] [client 185.223.152.49] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "ac82UzfFMXuP9zvqCerXIwAAAZI"]
[Fri Apr 03 11:38:59.698324 2026] [:error] [pid 33447:tid 33522] [client 185.223.152.61:64559] [client 185.223.152.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/theme-compat/network/"] [unique_id "ac82U0gaPmDHz92j4lPRTgAAAJI"]
[Fri Apr 03 11:39:00.407433 2026] [:error] [pid 33446:tid 33481] [client 185.223.152.43:31867] [client 185.223.152.43] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/we.php"] [unique_id "ac82VNg3dCqFYIIdw0plkwAAAEQ"]
[Fri Apr 03 11:39:01.134027 2026] [:error] [pid 33445:tid 33457] [client 185.223.152.39:32117] [client 185.223.152.39] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/chosen.php"] [unique_id "ac82VVlRNZ0iDVmJWM3OKwAAAAc"]
[Fri Apr 03 11:39:01.828966 2026] [:error] [pid 33445:tid 33473] [client 185.223.152.53:48979] [client 185.223.152.53] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/reception1/includes/tcpdf/examples/config/"] [unique_id "ac82VVlRNZ0iDVmJWM3OMwAAABc"]
[Fri Apr 03 11:39:02.513753 2026] [:error] [pid 33445:tid 33474] [client 185.223.152.64:33127] [client 185.223.152.64] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/wp-signin.php"] [unique_id "ac82VllRNZ0iDVmJWM3ONgAAABg"]
[Fri Apr 03 11:39:03.213890 2026] [:error] [pid 33446:tid 33499] [client 185.223.152.42:65535] [client 185.223.152.42] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-content/uploads/2024/"] [unique_id "ac82V9g3dCqFYIIdw0pllQAAAFY"]
[Fri Apr 03 11:39:03.900054 2026] [:error] [pid 33445:tid 33457] [client 185.223.152.53:37891] [client 185.223.152.53] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/colors/midnight/"] [unique_id "ac82V1lRNZ0iDVmJWM3OOQAAAAc"]
[Fri Apr 03 11:39:04.621732 2026] [:error] [pid 33446:tid 33489] [client 185.223.152.45:61229] [client 185.223.152.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Requests/src/Auth/"] [unique_id "ac82WNg3dCqFYIIdw0pllwAAAEw"]
[Fri Apr 03 11:39:05.309054 2026] [:error] [pid 33447:tid 33526] [client 185.223.152.39:56119] [client 185.223.152.39] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-content/uploads/wpforms/"] [unique_id "ac82WUgaPmDHz92j4lPRWAAAAJY"]
[Fri Apr 03 11:39:05.993811 2026] [:error] [pid 33446:tid 33482] [client 185.223.152.50:29187] [client 185.223.152.50] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/page-list/"] [unique_id "ac82Wdg3dCqFYIIdw0plmgAAAEU"]
[Fri Apr 03 11:39:06.679986 2026] [:error] [pid 40562:tid 40567] [client 185.223.152.48:63313] [client 185.223.152.48] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/images/"] [unique_id "ac82WjfFMXuP9zvqCerXJgAAAYI"]
[Fri Apr 03 11:39:07.367527 2026] [:error] [pid 33447:tid 33521] [client 185.223.152.55:44023] [client 185.223.152.55] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/mini.php"] [unique_id "ac82W0gaPmDHz92j4lPRXwAAAJE"]
[Fri Apr 03 11:39:08.053126 2026] [:error] [pid 33447:tid 33513] [client 185.223.152.59:44035] [client 185.223.152.59] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-content/languages/plugins/admin.php"] [unique_id "ac82XEgaPmDHz92j4lPRYgAAAIk"]
[Fri Apr 03 11:39:08.742418 2026] [:error] [pid 33542:tid 33566] [client 185.223.152.60:58229] [client 185.223.152.60] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/new.php"] [unique_id "ac82XHwb6uB1LaGtepaVvwAAANU"]
[Fri Apr 03 11:39:14.447204 2026] [:error] [pid 33446:tid 33477] [client 185.223.152.40:37963] [client 185.223.152.40] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/system.php"] [unique_id "ac82Ytg3dCqFYIIdw0plpwAAAEA"]
[Fri Apr 03 11:39:15.150498 2026] [:error] [pid 33445:tid 33472] [client 185.223.152.64:51913] [client 185.223.152.64] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/"] [unique_id "ac82Y1lRNZ0iDVmJWM3OPgAAABY"]
[Fri Apr 03 11:39:15.844186 2026] [:error] [pid 33445:tid 33456] [client 185.223.152.59:59567] [client 185.223.152.59] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/certificates/"] [unique_id "ac82Y1lRNZ0iDVmJWM3OQAAAAAY"]
[Fri Apr 03 11:39:16.606202 2026] [:error] [pid 33445:tid 33469] [client 185.223.152.56:50045] [client 185.223.152.56] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/lock360.php"] [unique_id "ac82ZFlRNZ0iDVmJWM3OSAAAABM"]
[Fri Apr 03 11:39:17.333662 2026] [:error] [pid 33445:tid 33451] [client 185.223.152.60:30881] [client 185.223.152.60] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/providers/"] [unique_id "ac82ZVlRNZ0iDVmJWM3OTAAAAAE"]
[Fri Apr 03 11:39:18.049306 2026] [:error] [pid 40533:tid 40544] [client 185.223.152.63:42657] [client 185.223.152.63] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/pomo/"] [unique_id "ac82ZvbIAA8AViDmwstUxwAAAUk"]
[Fri Apr 03 11:39:18.734843 2026] [:error] [pid 40533:tid 40545] [client 185.223.152.47:29119] [client 185.223.152.47] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/dist/commands/"] [unique_id "ac82ZvbIAA8AViDmwstUywAAAUo"]
[Fri Apr 03 11:39:19.422376 2026] [:error] [pid 40533:tid 40553] [client 185.223.152.53:21037] [client 185.223.152.53] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/query-title/"] [unique_id "ac82Z_bIAA8AViDmwstU0QAAAVI"]
[Fri Apr 03 11:39:25.107681 2026] [:error] [pid 35469:tid 35492] [client 185.223.152.56:51635] [client 185.223.152.56] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/separator/"] [unique_id "ac82baGvTIc8-wY3jURg8wAAARU"]
[Fri Apr 03 11:39:25.796427 2026] [:error] [pid 33446:tid 33479] [client 185.223.152.37:26495] [client 185.223.152.37] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wordpress/wp-includes/blocks/accordion/"] [unique_id "ac82bdg3dCqFYIIdw0plsgAAAEI"]
[Fri Apr 03 11:39:26.483975 2026] [:error] [pid 33542:tid 33566] [client 185.223.152.42:43597] [client 185.223.152.42] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/.well-known/acme-challenge/"] [unique_id "ac82bnwb6uB1LaGtepaV0wAAANU"]
[Fri Apr 03 11:39:27.168608 2026] [:error] [pid 40562:tid 40572] [client 185.223.152.41:52443] [client 185.223.152.41] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/t.php"] [unique_id "ac82bzfFMXuP9zvqCerXNwAAAYc"]
[Fri Apr 03 11:39:27.863944 2026] [:error] [pid 35469:tid 35476] [client 185.223.152.55:63367] [client 185.223.152.55] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/rest-api/search/images/"] [unique_id "ac82b6GvTIc8-wY3jURg-gAAAQU"]
[Fri Apr 03 11:39:28.581948 2026] [:error] [pid 35469:tid 35495] [client 185.223.152.38:39859] [client 185.223.152.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/themes.php"] [unique_id "ac82cKGvTIc8-wY3jURg_QAAARg"]
[Fri Apr 03 11:39:29.265912 2026] [:error] [pid 33446:tid 33483] [client 185.223.152.37:32571] [client 185.223.152.37] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/freeform/"] [unique_id "ac82cdg3dCqFYIIdw0pltQAAAEY"]
[Fri Apr 03 11:39:29.982189 2026] [:error] [pid 35469:tid 35491] [client 185.223.152.49:51009] [client 185.223.152.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "ac82caGvTIc8-wY3jURhCQAAARQ"]
[Fri Apr 03 11:39:30.670564 2026] [:error] [pid 33445:tid 33471] [client 185.223.152.51:53191] [client 185.223.152.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/widgets/chosen.php"] [unique_id "ac82cllRNZ0iDVmJWM3ObwAAABU"]
[Fri Apr 03 11:39:31.357738 2026] [:error] [pid 33447:tid 33517] [client 185.223.152.44:28801] [client 185.223.152.44] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/network/about.php"] [unique_id "ac82c0gaPmDHz92j4lPRgQAAAI0"]
[Fri Apr 03 11:39:32.043538 2026] [:error] [pid 33542:tid 33547] [client 185.223.152.58:26405] [client 185.223.152.58] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/buy.php"] [unique_id "ac82dHwb6uB1LaGtepaV3QAAAMI"]
[Fri Apr 03 11:39:32.733414 2026] [:error] [pid 55174:tid 55183] [client 185.223.152.64:43853] [client 185.223.152.64] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-content/languages/themes/"] [unique_id "ac82dJ_WKqUonPNUHYxoTgAAAcc"]
[Fri Apr 03 11:39:33.425482 2026] [:error] [pid 33446:tid 33491] [client 185.223.152.55:40743] [client 185.223.152.55] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-content/ws29.php"] [unique_id "ac82ddg3dCqFYIIdw0pluAAAAE4"]
[Fri Apr 03 11:39:34.112097 2026] [:error] [pid 40562:tid 40573] [client 185.223.152.53:47353] [client 185.223.152.53] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/m.php"] [unique_id "ac82djfFMXuP9zvqCerXPQAAAYg"]
[Fri Apr 03 11:39:34.879115 2026] [:error] [pid 55174:tid 55176] [client 185.223.152.239:46297] [client 185.223.152.239] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "ac82dp_WKqUonPNUHYxoWAAAAcA"]
[Fri Apr 03 11:39:35.563725 2026] [:error] [pid 33445:tid 33471] [client 185.223.152.41:47591] [client 185.223.152.41] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/media/"] [unique_id "ac82d1lRNZ0iDVmJWM3OeQAAABU"]
[Fri Apr 03 11:39:36.249027 2026] [:error] [pid 35469:tid 35471] [client 185.223.152.60:33935] [client 185.223.152.60] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/images/chosen.php"] [unique_id "ac82eKGvTIc8-wY3jURhFQAAAQA"]
[Fri Apr 03 11:39:36.933920 2026] [:error] [pid 33447:tid 33505] [client 185.223.152.57:50857] [client 185.223.152.57] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-content/wp-conflg.php"] [unique_id "ac82eEgaPmDHz92j4lPRhQAAAIE"]
[Fri Apr 03 11:39:37.619314 2026] [:error] [pid 33445:tid 33457] [client 185.223.152.239:54089] [client 185.223.152.239] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/rest-api/endpoints/"] [unique_id "ac82eVlRNZ0iDVmJWM3OggAAAAc"]
[Fri Apr 03 11:39:38.305659 2026] [:error] [pid 33542:tid 33567] [client 185.223.152.60:58813] [client 185.223.152.60] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/colors/coffee/"] [unique_id "ac82enwb6uB1LaGtepaV5QAAANY"]
[Fri Apr 03 11:39:38.991072 2026] [:error] [pid 35469:tid 35494] [client 185.223.152.39:46897] [client 185.223.152.39] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/dist/script-modules/block-library/file/"] [unique_id "ac82eqGvTIc8-wY3jURhFgAAARc"]
[Fri Apr 03 11:39:39.707930 2026] [:error] [pid 33446:tid 33491] [client 185.223.152.52:37401] [client 185.223.152.52] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/tag-cloud/"] [unique_id "ac82e9g3dCqFYIIdw0plwgAAAE4"]
[Fri Apr 03 11:39:45.394638 2026] [:error] [pid 33445:tid 33473] [client 185.223.152.64:44061] [client 185.223.152.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/crop/about.php"] [unique_id "ac82gVlRNZ0iDVmJWM3OmgAAABc"]
[Fri Apr 03 11:39:46.078254 2026] [:error] [pid 55174:tid 55200] [client 185.223.152.50:29059] [client 185.223.152.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/wp-conflg.php"] [unique_id "ac82gp_WKqUonPNUHYxocQAAAdg"]
[Fri Apr 03 11:39:46.776909 2026] [:error] [pid 55174:tid 55196] [client 185.223.152.239:43297] [client 185.223.152.239] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/rest-api/fields/"] [unique_id "ac82gp_WKqUonPNUHYxodAAAAdQ"]
[Fri Apr 03 11:39:47.464029 2026] [:error] [pid 40533:tid 40540] [client 185.223.152.64:22897] [client 185.223.152.64] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-content/updraft/emptydir/"] [unique_id "ac82g_bIAA8AViDmwstU4QAAAUU"]
[Fri Apr 03 11:39:48.150701 2026] [:error] [pid 35469:tid 35479] [client 185.223.152.50:31967] [client 185.223.152.50] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/chosen.php"] [unique_id "ac82hKGvTIc8-wY3jURhMwAAAQg"]
[Fri Apr 03 11:39:48.839519 2026] [:error] [pid 33445:tid 33463] [client 185.223.152.39:21341] [client 185.223.152.39] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/theme-compat/images/"] [unique_id "ac82hFlRNZ0iDVmJWM3OogAAAA0"]
[Fri Apr 03 11:39:49.524131 2026] [:error] [pid 33445:tid 33473] [client 185.223.152.57:60853] [client 185.223.152.57] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/twentytwenty/assets/fonts/inter/"] [unique_id "ac82hVlRNZ0iDVmJWM3OpAAAABc"]
[Fri Apr 03 11:39:50.208714 2026] [:error] [pid 33542:tid 33562] [client 185.223.152.59:33131] [client 185.223.152.59] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/dropdown.php"] [unique_id "ac82hnwb6uB1LaGtepaV7gAAANE"]
[Fri Apr 03 11:39:50.893130 2026] [:error] [pid 35469:tid 35487] [client 185.223.152.47:47007] [client 185.223.152.47] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-content/uploads/2025/"] [unique_id "ac82hqGvTIc8-wY3jURhQgAAARA"]
[Fri Apr 03 11:39:51.593994 2026] [:error] [pid 35469:tid 35492] [client 185.223.152.60:64631] [client 185.223.152.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Text/Diff/Engine/template-singl-portfolio.php"] [unique_id "ac82h6GvTIc8-wY3jURhRgAAARU"]
[Fri Apr 03 11:39:52.285602 2026] [:error] [pid 35469:tid 35495] [client 185.223.152.50:24141] [client 185.223.152.50] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/user/coffee/"] [unique_id "ac82iKGvTIc8-wY3jURhTgAAARg"]
[Fri Apr 03 11:39:53.018578 2026] [:error] [pid 35469:tid 35481] [client 185.223.152.56:31173] [client 185.223.152.56] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/.well-known/"] [unique_id "ac82iaGvTIc8-wY3jURhTwAAAQo"]
[Fri Apr 03 11:39:53.730003 2026] [:error] [pid 40562:tid 40568] [client 185.223.152.60:42755] [client 185.223.152.60] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/wordpress-seo/admin/metabox/about.php"] [unique_id "ac82iTfFMXuP9zvqCerXZAAAAYM"]
[Fri Apr 03 11:39:54.469147 2026] [:error] [pid 33447:tid 33505] [client 185.223.152.47:46915] [client 185.223.152.47] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-content/database.php"] [unique_id "ac82ikgaPmDHz92j4lPRoQAAAIE"]
[Fri Apr 03 11:39:55.160008 2026] [:error] [pid 35469:tid 35471] [client 185.223.152.64:38981] [client 185.223.152.64] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/search/"] [unique_id "ac82i6GvTIc8-wY3jURhVAAAAQA"]
[Fri Apr 03 11:39:55.849766 2026] [:error] [pid 55174:tid 55191] [client 185.223.152.40:20883] [client 185.223.152.40] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/images/html-api/"] [unique_id "ac82i5_WKqUonPNUHYxohgAAAc8"]
[Fri Apr 03 11:39:56.555940 2026] [:error] [pid 55174:tid 55185] [client 185.223.152.54:46365] [client 185.223.152.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "ac82jJ_WKqUonPNUHYxoiQAAAck"]
[Fri Apr 03 11:39:57.240743 2026] [:error] [pid 35469:tid 35485] [client 185.223.152.50:47795] [client 185.223.152.50] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/wp.php"] [unique_id "ac82jaGvTIc8-wY3jURhVgAAAQ4"]
[Fri Apr 03 11:39:57.961537 2026] [:error] [pid 33445:tid 33471] [client 185.223.152.63:26599] [client 185.223.152.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/wp-conflg.php"] [unique_id "ac82jVlRNZ0iDVmJWM3OsgAAABU"]
[Fri Apr 03 11:39:58.648379 2026] [:error] [pid 35469:tid 35473] [client 185.223.152.39:59101] [client 185.223.152.39] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Requests/library/"] [unique_id "ac82jqGvTIc8-wY3jURhWwAAAQI"]
[Fri Apr 03 11:39:59.335910 2026] [:error] [pid 35469:tid 35482] [client 185.223.152.42:41169] [client 185.223.152.42] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/x/wp-classs-editor.php"] [unique_id "ac82j6GvTIc8-wY3jURhYwAAAQs"]
[Fri Apr 03 11:40:00.029628 2026] [:error] [pid 35469:tid 35474] [client 185.223.152.56:39495] [client 185.223.152.56] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/wordpress-seo/src/dashboard/application/search-rankings/about.php"] [unique_id "ac82kKGvTIc8-wY3jURhZwAAAQM"]
[Fri Apr 03 11:40:00.722509 2026] [:error] [pid 33542:tid 33547] [client 185.223.152.64:63131] [client 185.223.152.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/chosen.php"] [unique_id "ac82kHwb6uB1LaGtepaV8QAAAMI"]
[Fri Apr 03 11:40:01.490095 2026] [:error] [pid 40562:tid 40586] [client 185.223.152.43:61939] [client 185.223.152.43] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/wp-conflg.php"] [unique_id "ac82kTfFMXuP9zvqCerXaQAAAZU"]
[Fri Apr 03 11:40:02.176776 2026] [:error] [pid 33446:tid 33490] [client 185.223.152.40:60833] [client 185.223.152.40] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/zz.php"] [unique_id "ac82ktg3dCqFYIIdw0pl2AAAAE0"]
[Fri Apr 03 11:40:02.863484 2026] [:error] [pid 40562:tid 40567] [client 185.223.152.61:50755] [client 185.223.152.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/sodium_compat/namespaced/Core/"] [unique_id "ac82kjfFMXuP9zvqCerXbAAAAYI"]
[Fri Apr 03 11:40:08.574795 2026] [:error] [pid 40562:tid 40583] [client 185.223.152.60:42725] [client 185.223.152.60] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-content/admin-header.php"] [unique_id "ac82mDfFMXuP9zvqCerXdAAAAZI"]
[Fri Apr 03 11:40:09.261451 2026] [:error] [pid 35469:tid 35478] [client 185.223.152.54:32551] [client 185.223.152.54] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/post-content/"] [unique_id "ac82maGvTIc8-wY3jURhmQAAAQc"]
[Fri Apr 03 11:40:09.961481 2026] [:error] [pid 35469:tid 35487] [client 185.223.152.49:64347] [client 185.223.152.49] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/function/function.php"] [unique_id "ac82maGvTIc8-wY3jURhnwAAARA"]
[Fri Apr 03 11:40:10.659949 2026] [:error] [pid 40562:tid 40570] [client 185.223.152.52:30433] [client 185.223.152.52] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/log.php"] [unique_id "ac82mjfFMXuP9zvqCerXeAAAAYU"]
[Fri Apr 03 11:40:11.349543 2026] [:error] [pid 33445:tid 33467] [client 185.223.152.37:58275] [client 185.223.152.37] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/hplfuns.php"] [unique_id "ac82m1lRNZ0iDVmJWM3O7AAAABE"]
[Fri Apr 03 11:40:12.040910 2026] [:error] [pid 55174:tid 55194] [client 185.223.152.40:51591] [client 185.223.152.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/joker.php"] [unique_id "ac82nJ_WKqUonPNUHYxolAAAAdI"]
[Fri Apr 03 11:40:12.728295 2026] [:error] [pid 33445:tid 33450] [client 185.223.152.55:26697] [client 185.223.152.55] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/Iitespeed-cache/classwithtostring.php"] [unique_id "ac82nFlRNZ0iDVmJWM3O8wAAAAA"]
[Fri Apr 03 11:40:13.422562 2026] [:error] [pid 33445:tid 33467] [client 185.223.152.41:35235] [client 185.223.152.41] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/theme-check/theme-check.php"] [unique_id "ac82nVlRNZ0iDVmJWM3O-AAAABE"]
[Fri Apr 03 11:40:14.109070 2026] [:error] [pid 35469:tid 35480] [client 185.223.152.57:22703] [client 185.223.152.57] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/theme-check/joker.php"] [unique_id "ac82nqGvTIc8-wY3jURhpgAAAQk"]
[Fri Apr 03 11:40:14.793942 2026] [:error] [pid 33445:tid 33450] [client 185.223.152.55:42205] [client 185.223.152.55] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/comment-date/"] [unique_id "ac82nllRNZ0iDVmJWM3O_wAAAAA"]
[Fri Apr 03 11:40:15.483634 2026] [:error] [pid 33446:tid 33491] [client 185.223.152.55:48687] [client 185.223.152.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/crop/joker.php"] [unique_id "ac82n9g3dCqFYIIdw0pl6wAAAE4"]
[Fri Apr 03 11:40:16.175585 2026] [:error] [pid 40562:tid 40589] [client 185.223.152.41:38967] [client 185.223.152.41] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/news-portal/content-"] [unique_id "ac82oDfFMXuP9zvqCerXfQAAAZg"]
[Fri Apr 03 11:40:16.865951 2026] [:error] [pid 33445:tid 33452] [client 185.223.152.42:35819] [client 185.223.152.42] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/news-portal/user-install.php"] [unique_id "ac82oFlRNZ0iDVmJWM3PDAAAAAI"]
[Fri Apr 03 11:40:17.550639 2026] [:error] [pid 33445:tid 33457] [client 185.223.152.58:53359] [client 185.223.152.58] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/js/chosen.php"] [unique_id "ac82oVlRNZ0iDVmJWM3PEQAAAAc"]
[Fri Apr 03 11:40:18.236085 2026] [:error] [pid 35469:tid 35474] [client 185.223.152.44:56845] [client 185.223.152.44] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/joker.php"] [unique_id "ac82oqGvTIc8-wY3jURhqgAAAQM"]
[Fri Apr 03 11:40:18.921700 2026] [:error] [pid 33542:tid 33545] [client 185.223.152.239:41507] [client 185.223.152.239] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/elementor/core/files/about.php"] [unique_id "ac82onwb6uB1LaGtepaWAQAAAMA"]
[Fri Apr 03 11:40:19.651093 2026] [:error] [pid 35469:tid 35481] [client 185.223.152.41:26867] [client 185.223.152.41] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/elementor/includes/interfaces/about.php"] [unique_id "ac82o6GvTIc8-wY3jURhrwAAAQo"]
[Fri Apr 03 11:40:20.350380 2026] [:error] [pid 35469:tid 35484] [client 185.223.152.52:26309] [client 185.223.152.52] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/waspthemes-yellow-pencil/images/list/about.php"] [unique_id "ac82pKGvTIc8-wY3jURhygAAAQ0"]
[Fri Apr 03 11:40:21.062390 2026] [:error] [pid 40562:tid 40569] [client 185.223.152.50:57883] [client 185.223.152.50] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/woocommerce/includes/import/about.php"] [unique_id "ac82pTfFMXuP9zvqCerXgwAAAYQ"]
[Fri Apr 03 11:40:21.817844 2026] [:error] [pid 33446:tid 33496] [client 185.223.152.59:53955] [client 185.223.152.59] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/miniorange-malware-protection/handler/about.php"] [unique_id "ac82pdg3dCqFYIIdw0pl8QAAAFM"]
[Fri Apr 03 11:40:22.510967 2026] [:error] [pid 35469:tid 35476] [client 185.223.152.42:55225] [client 185.223.152.42] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-content/text.php"] [unique_id "ac82pqGvTIc8-wY3jURh1gAAAQU"]
[Fri Apr 03 11:40:23.213645 2026] [:error] [pid 33446:tid 33491] [client 185.223.152.49:31239] [client 185.223.152.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/src/Decode/HTML/sitemaps.php"] [unique_id "ac82p9g3dCqFYIIdw0pl9wAAAE4"]
[Fri Apr 03 11:40:23.924296 2026] [:error] [pid 33446:tid 33485] [client 185.223.152.60:30245] [client 185.223.152.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/mer_gagal.php"] [unique_id "ac82p9g3dCqFYIIdw0pl-gAAAEg"]
[Fri Apr 03 11:40:24.638399 2026] [:error] [pid 35469:tid 35494] [client 185.223.152.39:63571] [client 185.223.152.39] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/colors/lock.php"] [unique_id "ac82qKGvTIc8-wY3jURh3QAAARc"]
[Fri Apr 03 11:40:25.375746 2026] [:error] [pid 35469:tid 35483] [client 185.223.152.59:33015] [client 185.223.152.59] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/mtodm/"] [unique_id "ac82qaGvTIc8-wY3jURh3gAAAQw"]
[Fri Apr 03 11:40:26.060837 2026] [:error] [pid 40562:tid 40578] [client 185.223.152.48:34091] [client 185.223.152.48] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/elementor/modules/atomic-widgets/prop-types/transform/lock.php"] [unique_id "ac82qjfFMXuP9zvqCerXiAAAAY0"]
[Fri Apr 03 11:40:26.750140 2026] [:error] [pid 35469:tid 35485] [client 185.223.152.43:28505] [client 185.223.152.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/latest-comments/template-loader.php"] [unique_id "ac82qqGvTIc8-wY3jURh5AAAAQ4"]
[Fri Apr 03 11:40:27.434484 2026] [:error] [pid 35469:tid 35480] [client 185.223.152.38:37931] [client 185.223.152.38] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/accordion/"] [unique_id "ac82q6GvTIc8-wY3jURh5gAAAQk"]
[Fri Apr 03 11:40:28.188873 2026] [:error] [pid 35469:tid 35488] [client 185.223.152.61:23415] [client 185.223.152.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/table/"] [unique_id "ac82rKGvTIc8-wY3jURh6gAAARE"]
[Fri Apr 03 11:40:28.960638 2026] [:error] [pid 33445:tid 33458] [client 185.223.152.41:30083] [client 185.223.152.41] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/twentytwentytwo/parts/"] [unique_id "ac82rFlRNZ0iDVmJWM3PQQAAAAg"]
[Fri Apr 03 11:40:29.711381 2026] [:error] [pid 33447:tid 33504] [client 185.223.152.45:23381] [client 185.223.152.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/chillbud/inc/welcome/assets/img/"] [unique_id "ac82rUgaPmDHz92j4lPRrgAAAIA"]
[Fri Apr 03 11:40:35.414069 2026] [:error] [pid 35469:tid 35493] [client 185.223.152.63:55967] [client 185.223.152.63] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/dist/edit-post/"] [unique_id "ac82s6GvTIc8-wY3jURh9QAAARY"]
[Fri Apr 03 11:40:36.100777 2026] [:error] [pid 33447:tid 33527] [client 185.223.152.63:63697] [client 185.223.152.63] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/elementor-pro/cong.php"] [unique_id "ac82tEgaPmDHz92j4lPRvQAAAJc"]
[Fri Apr 03 11:40:36.821358 2026] [:error] [pid 35469:tid 35484] [client 185.223.152.239:40343] [client 185.223.152.239] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/hert.php"] [unique_id "ac82tKGvTIc8-wY3jURh-QAAAQ0"]
[Fri Apr 03 11:40:37.559508 2026] [:error] [pid 33447:tid 33504] [client 185.223.152.48:49479] [client 185.223.152.48] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/maintenance.php"] [unique_id "ac82tUgaPmDHz92j4lPRwgAAAIA"]
[Fri Apr 03 11:40:38.250515 2026] [:error] [pid 33447:tid 33522] [client 185.223.152.53:22697] [client 185.223.152.53] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/coke.php"] [unique_id "ac82tkgaPmDHz92j4lPRxwAAAJI"]
[Fri Apr 03 11:40:38.939730 2026] [:error] [pid 33445:tid 33466] [client 185.223.152.57:65401] [client 185.223.152.57] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/plugins-long.php"] [unique_id "ac82tllRNZ0iDVmJWM3PWAAAABA"]
[Fri Apr 03 11:40:39.634607 2026] [:error] [pid 35469:tid 35473] [client 185.223.152.63:50983] [client 185.223.152.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/widgets/class-wp-widget-text-cron.php"] [unique_id "ac82t6GvTIc8-wY3jURh_AAAAQI"]
[Fri Apr 03 11:40:40.326102 2026] [:error] [pid 35469:tid 35476] [client 185.223.152.62:23197] [client 185.223.152.62] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/php7.php"] [unique_id "ac82uKGvTIc8-wY3jURh_gAAAQU"]
[Fri Apr 03 11:40:41.015754 2026] [:error] [pid 33445:tid 33470] [client 185.223.152.41:35423] [client 185.223.152.41] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "ac82uVlRNZ0iDVmJWM3PYQAAABQ"]
[Fri Apr 03 11:40:41.703540 2026] [:error] [pid 33445:tid 33471] [client 185.223.152.49:34235] [client 185.223.152.49] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/home-link/"] [unique_id "ac82uVlRNZ0iDVmJWM3PYgAAABU"]
[Fri Apr 03 11:40:42.389750 2026] [:error] [pid 33445:tid 33463] [client 185.223.152.50:30917] [client 185.223.152.50] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/fuka.php"] [unique_id "ac82ullRNZ0iDVmJWM3PaAAAAA0"]
[Fri Apr 03 11:40:43.081790 2026] [:error] [pid 33445:tid 33471] [client 185.223.152.55:61665] [client 185.223.152.55] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/astra/inc/builder/type/base/dynamic-css/button/"] [unique_id "ac82u1lRNZ0iDVmJWM3PagAAABU"]
[Fri Apr 03 11:40:43.770765 2026] [:error] [pid 35469:tid 35482] [client 185.223.152.45:58335] [client 185.223.152.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/post-template-path.php"] [unique_id "ac82u6GvTIc8-wY3jURh_wAAAQs"]
[Fri Apr 03 11:40:44.455372 2026] [:error] [pid 35469:tid 35484] [client 185.223.152.52:25551] [client 185.223.152.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/ID3/plex1.php"] [unique_id "ac82vKGvTIc8-wY3jURiAgAAAQ0"]
[Fri Apr 03 11:40:45.140752 2026] [:error] [pid 33445:tid 33456] [client 185.223.152.54:38237] [client 185.223.152.54] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/widgets-form-blocks-interface.php"] [unique_id "ac82vVlRNZ0iDVmJWM3PcwAAAAY"]
[Fri Apr 03 11:40:45.827144 2026] [:error] [pid 35469:tid 35486] [client 185.223.152.50:53941] [client 185.223.152.50] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/post-template/"] [unique_id "ac82vaGvTIc8-wY3jURiBgAAAQ8"]
[Fri Apr 03 11:40:46.512966 2026] [:error] [pid 33445:tid 33457] [client 185.223.152.62:41697] [client 185.223.152.62] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/pretty-link/js/build/wp-cron.php"] [unique_id "ac82vllRNZ0iDVmJWM3PfQAAAAc"]
[Fri Apr 03 11:40:47.204001 2026] [:error] [pid 33445:tid 33470] [client 185.223.152.39:43575] [client 185.223.152.39] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-content/webp-express/radio.php"] [unique_id "ac82v1lRNZ0iDVmJWM3PfwAAABQ"]
[Fri Apr 03 11:40:47.935933 2026] [:error] [pid 33445:tid 33469] [client 185.223.152.61:45021] [client 185.223.152.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-content/webp-express/webp-images-bigger-than-source/providers/"] [unique_id "ac82v1lRNZ0iDVmJWM3PhAAAABM"]
[Fri Apr 03 11:40:48.621453 2026] [:error] [pid 33542:tid 33564] [client 185.223.152.51:61907] [client 185.223.152.51] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/888starz-egypt-theme/inc/page/wp-cron.php"] [unique_id "ac82wHwb6uB1LaGtepaWFAAAANM"]
[Fri Apr 03 11:40:49.309872 2026] [:error] [pid 40562:tid 40568] [client 185.223.152.37:30377] [client 185.223.152.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/nextpage/wp-cron.php"] [unique_id "ac82wTfFMXuP9zvqCerXmgAAAYM"]
[Fri Apr 03 11:40:49.995496 2026] [:error] [pid 35469:tid 35484] [client 185.223.152.54:25939] [client 185.223.152.54] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/sodium_compat/namespaced/customize/"] [unique_id "ac82waGvTIc8-wY3jURiDAAAAQ0"]
[Fri Apr 03 11:40:50.683100 2026] [:error] [pid 35469:tid 35474] [client 185.223.152.55:48389] [client 185.223.152.55] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/smilies/theme-compat/"] [unique_id "ac82wqGvTIc8-wY3jURiDwAAAQM"]
[Fri Apr 03 11:40:51.369024 2026] [:error] [pid 33446:tid 33490] [client 185.223.152.43:42331] [client 185.223.152.43] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/network/wp-rest/about.php"] [unique_id "ac82w9g3dCqFYIIdw0pmFgAAAE0"]
[Fri Apr 03 11:40:52.060052 2026] [:error] [pid 40562:tid 40583] [client 185.223.152.62:28457] [client 185.223.152.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/button/admiin.php"] [unique_id "ac82xDfFMXuP9zvqCerXoQAAAZI"]
[Fri Apr 03 11:40:52.830078 2026] [:error] [pid 33445:tid 33454] [client 185.223.152.39:51403] [client 185.223.152.39] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/src/Content/Type/"] [unique_id "ac82xFlRNZ0iDVmJWM3PigAAAAQ"]
[Fri Apr 03 11:40:53.514901 2026] [:error] [pid 40562:tid 40584] [client 185.223.152.48:40929] [client 185.223.152.48] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/colors/sunrise/rum.php"] [unique_id "ac82xTfFMXuP9zvqCerXpQAAAZM"]
[Fri Apr 03 11:40:54.197886 2026] [:error] [pid 33542:tid 33568] [client 185.223.152.60:45453] [client 185.223.152.60] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/session_init.php"] [unique_id "ac82xnwb6uB1LaGtepaWGgAAANc"]
[Fri Apr 03 11:40:54.883213 2026] [:error] [pid 33447:tid 33525] [client 185.223.152.38:38723] [client 185.223.152.38] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/includes/wp-config-extra.php"] [unique_id "ac82xkgaPmDHz92j4lPR2AAAAJU"]
[Fri Apr 03 11:40:55.572215 2026] [:error] [pid 40562:tid 40572] [client 185.223.152.56:35341] [client 185.223.152.56] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hello-plus/classes/ehp-social-elf.php"] [unique_id "ac82xzfFMXuP9zvqCerXsAAAAYc"]
[Fri Apr 03 11:40:56.260796 2026] [:error] [pid 40562:tid 40571] [client 185.223.152.49:32175] [client 185.223.152.49] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/enhanced-text-widget/analyst/src/403.php"] [unique_id "ac82yDfFMXuP9zvqCerXsgAAAYY"]
[Fri Apr 03 11:40:56.945687 2026] [:error] [pid 33445:tid 33459] [client 185.223.152.37:63163] [client 185.223.152.37] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/fukasawa/inc/classes/403.php"] [unique_id "ac82yFlRNZ0iDVmJWM3PlAAAAAk"]
[Fri Apr 03 11:40:57.630104 2026] [:error] [pid 40533:tid 40558] [client 185.223.152.39:23593] [client 185.223.152.39] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/wp-load.php"] [unique_id "ac82yfbIAA8AViDmwstVBAAAAVc"]
[Fri Apr 03 11:40:58.315497 2026] [:error] [pid 33445:tid 33450] [client 185.223.152.64:51809] [client 185.223.152.64] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "ac82yllRNZ0iDVmJWM3PmAAAAAA"]
[Fri Apr 03 11:40:59.018605 2026] [:error] [pid 35469:tid 35489] [client 185.223.152.63:61203] [client 185.223.152.63] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-content/languages/themes/load.php"] [unique_id "ac82y6GvTIc8-wY3jURiIAAAARI"]
[Fri Apr 03 11:40:59.705930 2026] [:error] [pid 55174:tid 55197] [client 185.223.152.63:63785] [client 185.223.152.63] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-content/system.php"] [unique_id "ac82y5_WKqUonPNUHYxoxwAAAdU"]
[Fri Apr 03 11:41:00.415001 2026] [:error] [pid 33447:tid 33511] [client 185.223.152.64:62997] [client 185.223.152.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/tinymce/plugins/users.php"] [unique_id "ac82zEgaPmDHz92j4lPR2gAAAIc"]
[Fri Apr 03 11:41:01.146152 2026] [:error] [pid 33445:tid 33461] [client 185.223.152.56:64567] [client 185.223.152.56] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/database.php"] [unique_id "ac82zVlRNZ0iDVmJWM3PnwAAAAs"]
[Fri Apr 03 11:41:01.832455 2026] [:error] [pid 33445:tid 33451] [client 185.223.152.61:49621] [client 185.223.152.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/prayer_intentions.php"] [unique_id "ac82zVlRNZ0iDVmJWM3PoAAAAAE"]
[Fri Apr 03 11:41:02.515753 2026] [:error] [pid 33542:tid 33547] [client 185.223.152.64:45893] [client 185.223.152.64] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/slideshow-ck/themes/config.php"] [unique_id "ac82znwb6uB1LaGtepaWHAAAAMI"]
[Fri Apr 03 11:41:03.201977 2026] [:error] [pid 35469:tid 35483] [client 185.223.152.55:60629] [client 185.223.152.55] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/db-status.php"] [unique_id "ac82z6GvTIc8-wY3jURiJQAAAQw"]
[Fri Apr 03 11:41:03.899286 2026] [:error] [pid 33542:tid 33549] [client 185.223.152.51:21123] [client 185.223.152.51] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/contact-form-7/includes/js/jquery-ui/themes/system.php"] [unique_id "ac82z3wb6uB1LaGtepaWIwAAAMQ"]
[Fri Apr 03 11:41:04.590285 2026] [:error] [pid 33446:tid 33483] [client 185.223.152.50:29049] [client 185.223.152.50] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-content/uploads/error.php"] [unique_id "ac820Ng3dCqFYIIdw0pmHgAAAEY"]
[Fri Apr 03 11:41:05.290558 2026] [:error] [pid 33445:tid 33463] [client 185.223.152.56:26285] [client 185.223.152.56] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/comments-pagination-next/"] [unique_id "ac820VlRNZ0iDVmJWM3PpQAAAA0"]
[Fri Apr 03 11:41:05.976555 2026] [:error] [pid 33445:tid 33452] [client 185.223.152.50:48177] [client 185.223.152.50] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Requests/src/Exception/"] [unique_id "ac820VlRNZ0iDVmJWM3PpgAAAAI"]
[Fri Apr 03 11:41:06.660886 2026] [:error] [pid 33445:tid 33450] [client 185.223.152.64:51507] [client 185.223.152.64] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/cgi-bin/cgi-bin/sql.php"] [unique_id "ac820llRNZ0iDVmJWM3PqgAAAAA"]
[Fri Apr 03 11:41:07.346816 2026] [:error] [pid 33447:tid 33506] [client 185.223.152.56:65525] [client 185.223.152.56] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/options.php"] [unique_id "ac8200gaPmDHz92j4lPR3wAAAII"]
[Fri Apr 03 11:41:08.032163 2026] [:error] [pid 40533:tid 40537] [client 185.223.152.61:20321] [client 185.223.152.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/all-in-one-wp-security-and-firewall/templates/wp-admin/security.php"] [unique_id "ac821PbIAA8AViDmwstVFAAAAUI"]
[Fri Apr 03 11:41:08.723451 2026] [:error] [pid 35469:tid 35483] [client 185.223.152.62:34725] [client 185.223.152.62] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/maintenance.php"] [unique_id "ac821KGvTIc8-wY3jURiMAAAAQw"]
[Fri Apr 03 11:41:09.411269 2026] [:error] [pid 55174:tid 55198] [client 185.223.152.40:53365] [client 185.223.152.40] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/wp-mail.phpp"] [unique_id "ac821Z_WKqUonPNUHYxo0AAAAdY"]
[Fri Apr 03 11:41:10.099111 2026] [:error] [pid 33542:tid 33566] [client 185.223.152.52:61111] [client 185.223.152.52] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-content/uploads/upload.php"] [unique_id "ac821nwb6uB1LaGtepaWLQAAANU"]
[Fri Apr 03 11:41:10.798361 2026] [:error] [pid 33445:tid 33469] [client 185.223.152.39:42417] [client 185.223.152.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/wp-cron.php"] [unique_id "ac821llRNZ0iDVmJWM3PswAAABM"]
[Fri Apr 03 11:41:11.485640 2026] [:error] [pid 40533:tid 40556] [client 185.223.152.43:46669] [client 185.223.152.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/tinymce/plugins/api.php"] [unique_id "ac821_bIAA8AViDmwstVGgAAAVU"]
[Fri Apr 03 11:41:12.172881 2026] [:error] [pid 33445:tid 33471] [client 185.223.152.48:38229] [client 185.223.152.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/panel.php"] [unique_id "ac822FlRNZ0iDVmJWM3PvQAAABU"]
[Fri Apr 03 11:41:12.859522 2026] [:error] [pid 33542:tid 33562] [client 185.223.152.39:39037] [client 185.223.152.39] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/000.php"] [unique_id "ac822Hwb6uB1LaGtepaWMQAAANE"]
[Fri Apr 03 11:41:13.544849 2026] [:error] [pid 35469:tid 35492] [client 185.223.152.49:27763] [client 185.223.152.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Text/Diff/Engine/tx1.php"] [unique_id "ac822aGvTIc8-wY3jURiMgAAARU"]
[Fri Apr 03 11:41:14.235072 2026] [:error] [pid 40562:tid 40566] [client 185.223.152.39:52467] [client 185.223.152.39] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/news-portal/network.php"] [unique_id "ac822jfFMXuP9zvqCerXwgAAAYE"]
[Fri Apr 03 11:41:14.921927 2026] [:error] [pid 40562:tid 40583] [client 185.223.152.44:28009] [client 185.223.152.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/customize/autoload_classmap.php"] [unique_id "ac822jfFMXuP9zvqCerXxAAAAZI"]
[Fri Apr 03 11:41:15.607183 2026] [:error] [pid 35469:tid 35479] [client 185.223.152.40:51137] [client 185.223.152.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "ac8226GvTIc8-wY3jURiNgAAAQg"]
[Fri Apr 03 11:41:16.291331 2026] [:error] [pid 35469:tid 35476] [client 185.223.152.48:40061] [client 185.223.152.48] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/chosen.php"] [unique_id "ac823KGvTIc8-wY3jURiOgAAAQU"]
[Fri Apr 03 11:41:16.983990 2026] [:error] [pid 33445:tid 33462] [client 185.223.152.38:45093] [client 185.223.152.38] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/news-portal/sitebar.php"] [unique_id "ac823FlRNZ0iDVmJWM3PwwAAAAw"]
[Fri Apr 03 11:41:17.676013 2026] [:error] [pid 40533:tid 40543] [client 185.223.152.239:50893] [client 185.223.152.239] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-content/languages/themes/bb.php"] [unique_id "ac823fbIAA8AViDmwstVHwAAAUg"]
[Fri Apr 03 11:41:18.365016 2026] [:error] [pid 33445:tid 33464] [client 185.223.152.47:47251] [client 185.223.152.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh.php"] [unique_id "ac823llRNZ0iDVmJWM3PxQAAAA4"]
[Fri Apr 03 11:41:19.052202 2026] [:error] [pid 33446:tid 33499] [client 185.223.152.63:32271] [client 185.223.152.63] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/maint/about2.php"] [unique_id "ac8239g3dCqFYIIdw0pmJgAAAFY"]
[Fri Apr 03 11:41:19.741092 2026] [:error] [pid 35469:tid 35493] [client 185.223.152.48:27007] [client 185.223.152.48] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/network/pngoptimazie.php"] [unique_id "ac8236GvTIc8-wY3jURiQQAAARY"]
[Fri Apr 03 11:41:20.430604 2026] [:error] [pid 55174:tid 55194] [client 185.223.152.39:21701] [client 185.223.152.39] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/contact-form-7/rstsgd.php"] [unique_id "ac824J_WKqUonPNUHYxo2QAAAdI"]
[Fri Apr 03 11:41:21.117905 2026] [:error] [pid 33446:tid 33494] [client 185.223.152.61:24483] [client 185.223.152.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/shortcodes-ultimate/admin.php"] [unique_id "ac824dg3dCqFYIIdw0pmLwAAAFE"]
[Fri Apr 03 11:41:21.807607 2026] [:error] [pid 33446:tid 33487] [client 185.223.152.41:37361] [client 185.223.152.41] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/install-helper-new.php"] [unique_id "ac824dg3dCqFYIIdw0pmMgAAAEo"]
[Fri Apr 03 11:41:22.493525 2026] [:error] [pid 40562:tid 40577] [client 185.223.152.41:63091] [client 185.223.152.41] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/user/mariju.php"] [unique_id "ac824jfFMXuP9zvqCerX1AAAAYw"]
[Fri Apr 03 11:41:23.180805 2026] [:error] [pid 55174:tid 55198] [client 185.223.152.56:25913] [client 185.223.152.56] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/options-discussion-statement.php"] [unique_id "ac8245_WKqUonPNUHYxo2wAAAdY"]
[Fri Apr 03 11:41:23.866457 2026] [:error] [pid 33446:tid 33489] [client 185.223.152.60:27647] [client 185.223.152.60] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/images/xmrlpc.php"] [unique_id "ac8249g3dCqFYIIdw0pmOQAAAEw"]
[Fri Apr 03 11:41:24.566848 2026] [:error] [pid 33542:tid 33554] [client 185.223.152.55:32571] [client 185.223.152.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/author-template-object.php"] [unique_id "ac825Hwb6uB1LaGtepaWNwAAAMk"]
[Fri Apr 03 11:41:25.254865 2026] [:error] [pid 40533:tid 40550] [client 185.223.152.49:24507] [client 185.223.152.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/certificates/doc.php"] [unique_id "ac825fbIAA8AViDmwstVIQAAAU8"]
[Fri Apr 03 11:41:25.946143 2026] [:error] [pid 33542:tid 33553] [client 185.223.152.60:54651] [client 185.223.152.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/dist/vendor/about.php"] [unique_id "ac825Xwb6uB1LaGtepaWOgAAAMg"]
[Fri Apr 03 11:41:26.640794 2026] [:error] [pid 33447:tid 33510] [client 185.223.152.49:62473] [client 185.223.152.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Requests/src/Exception/177.php"] [unique_id "ac825kgaPmDHz92j4lPR9wAAAIY"]
[Fri Apr 03 11:41:27.325667 2026] [:error] [pid 35469:tid 35471] [client 185.223.152.64:31883] [client 185.223.152.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/site-title-restful.php"] [unique_id "ac8256GvTIc8-wY3jURiSAAAAQA"]
[Fri Apr 03 11:41:28.015040 2026] [:error] [pid 35469:tid 35495] [client 185.223.152.43:53621] [client 185.223.152.43] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-content/fonts/poppins/wp-login.php"] [unique_id "ac826KGvTIc8-wY3jURiTAAAARg"]
[Fri Apr 03 11:41:28.702460 2026] [:error] [pid 35469:tid 35489] [client 185.223.152.59:36333] [client 185.223.152.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/sodium_compat/namespaced/Core/goods.php"] [unique_id "ac826KGvTIc8-wY3jURiUAAAARI"]
[Fri Apr 03 11:41:29.388154 2026] [:error] [pid 35469:tid 35483] [client 185.223.152.53:41291] [client 185.223.152.53] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/js/widgets/moon.php"] [unique_id "ac826aGvTIc8-wY3jURiUgAAAQw"]
[Fri Apr 03 11:41:30.074533 2026] [:error] [pid 33542:tid 33569] [client 185.223.152.48:31373] [client 185.223.152.48] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-content/uploads/wpcode/moon.php"] [unique_id "ac826nwb6uB1LaGtepaWPwAAANg"]
[Fri Apr 03 11:41:30.905909 2026] [:error] [pid 33446:tid 33486] [client 185.223.152.47:41307] [client 185.223.152.47] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "ac826tg3dCqFYIIdw0pmOwAAAEk"]
[Fri Apr 03 11:41:31.752476 2026] [:error] [pid 33445:tid 33467] [client 185.223.152.47:51535] [client 185.223.152.47] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/colors/coffee/backup/js/images/wkag/"] [unique_id "ac8261lRNZ0iDVmJWM3PywAAABE"]
[Fri Apr 03 11:41:32.439355 2026] [:error] [pid 33447:tid 33511] [client 185.223.152.53:64247] [client 185.223.152.53] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/ftde.php"] [unique_id "ac827EgaPmDHz92j4lPR_wAAAIc"]
[Fri Apr 03 11:41:33.128429 2026] [:error] [pid 40533:tid 40545] [client 185.223.152.49:24221] [client 185.223.152.49] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/neve/assets/apps/dashboard/build/"] [unique_id "ac827fbIAA8AViDmwstVKAAAAUo"]
[Fri Apr 03 11:41:38.816800 2026] [:error] [pid 33445:tid 33464] [client 185.223.152.61:35639] [client 185.223.152.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/comment-reply-link/"] [unique_id "ac828llRNZ0iDVmJWM3QCgAAAA4"]
[Fri Apr 03 11:41:39.501489 2026] [:error] [pid 33445:tid 33467] [client 185.223.152.52:55629] [client 185.223.152.52] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/pattern/"] [unique_id "ac8281lRNZ0iDVmJWM3QMQAAABE"]
[Fri Apr 03 11:41:40.194013 2026] [:error] [pid 35469:tid 35474] [client 185.223.152.42:28767] [client 185.223.152.42] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/comments-pagination-numbers/"] [unique_id "ac829KGvTIc8-wY3jURiWQAAAQM"]
[Fri Apr 03 11:41:40.949037 2026] [:error] [pid 35469:tid 35486] [client 185.223.152.45:60467] [client 185.223.152.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/dist/script-modules/block-library/navigation/"] [unique_id "ac829KGvTIc8-wY3jURiWgAAAQ8"]
[Fri Apr 03 11:41:41.643325 2026] [:error] [pid 35469:tid 35482] [client 185.223.152.60:61953] [client 185.223.152.60] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/fonts/"] [unique_id "ac829aGvTIc8-wY3jURiXQAAAQs"]
[Fri Apr 03 11:41:42.328985 2026] [:error] [pid 33445:tid 33463] [client 185.223.152.62:48059] [client 185.223.152.62] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/install.php"] [unique_id "ac829llRNZ0iDVmJWM3QdAAAAA0"]
[Fri Apr 03 11:41:43.014954 2026] [:error] [pid 55174:tid 55189] [client 185.223.152.50:49515] [client 185.223.152.50] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/legacy-widget/"] [unique_id "ac8295_WKqUonPNUHYxo7AAAAc0"]
[Fri Apr 03 11:41:43.703547 2026] [:error] [pid 33445:tid 33473] [client 185.223.152.56:33761] [client 185.223.152.56] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/ALFA_DATA/alfacgiapi/"] [unique_id "ac8291lRNZ0iDVmJWM3QeQAAABc"]
[Fri Apr 03 11:41:44.390723 2026] [:error] [pid 33446:tid 33500] [client 185.223.152.38:44557] [client 185.223.152.38] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/customize/wp-conflg.php"] [unique_id "ac82-Ng3dCqFYIIdw0pmRQAAAFc"]
[Fri Apr 03 11:41:45.084833 2026] [:error] [pid 35469:tid 35477] [client 185.223.152.43:26515] [client 185.223.152.43] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/dist/"] [unique_id "ac82-aGvTIc8-wY3jURiYwAAAQY"]
[Fri Apr 03 11:41:45.768413 2026] [:error] [pid 35469:tid 35481] [client 185.223.152.56:45963] [client 185.223.152.56] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/ws.php"] [unique_id "ac82-aGvTIc8-wY3jURiaAAAAQo"]
[Fri Apr 03 11:41:46.457210 2026] [:error] [pid 33447:tid 33516] [client 185.223.152.60:41153] [client 185.223.152.60] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/classwithtostring.php"] [unique_id "ac82-kgaPmDHz92j4lPSBQAAAIw"]
[Fri Apr 03 11:41:47.148058 2026] [:error] [pid 33445:tid 33458] [client 185.223.152.53:61195] [client 185.223.152.53] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/wordpress-seo/inc/WPSEO.php"] [unique_id "ac82-1lRNZ0iDVmJWM3QfgAAAAg"]
[Fri Apr 03 11:41:47.843478 2026] [:error] [pid 33445:tid 33461] [client 185.223.152.63:46935] [client 185.223.152.63] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/elementor/core/files/base.php"] [unique_id "ac82-1lRNZ0iDVmJWM3QgAAAAAs"]
[Fri Apr 03 11:41:48.530619 2026] [:error] [pid 33445:tid 33467] [client 185.223.152.38:58381] [client 185.223.152.38] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/woocommerce/includes/admin/reports/class-wc-report-orders-stats.php"] [unique_id "ac82_FlRNZ0iDVmJWM3QhgAAABE"]
[Fri Apr 03 11:41:49.217707 2026] [:error] [pid 33446:tid 33478] [client 185.223.152.48:41863] [client 185.223.152.48] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/contact-form-7/admin/js/contact-form-7-admin.js.php"] [unique_id "ac82_dg3dCqFYIIdw0pmSQAAAEE"]
[Fri Apr 03 11:41:49.905632 2026] [:error] [pid 33446:tid 33494] [client 185.223.152.37:55025] [client 185.223.152.37] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/revslider/temp/update_extract/revslider.php"] [unique_id "ac82_dg3dCqFYIIdw0pmTAAAAFE"]
[Fri Apr 03 11:41:50.591026 2026] [:error] [pid 33542:tid 33557] [client 185.223.152.49:47969] [client 185.223.152.49] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/wp-file-manager/lib/php/connector.minimal.php"] [unique_id "ac82_nwb6uB1LaGtepaWSwAAAMw"]
[Fri Apr 03 11:41:56.275828 2026] [:error] [pid 40562:tid 40566] [client 185.223.152.61:31225] [client 185.223.152.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-content/upgrade/shell.php"] [unique_id "ac83BDfFMXuP9zvqCerX8QAAAYE"]
[Fri Apr 03 11:41:56.959818 2026] [:error] [pid 33445:tid 33474] [client 185.223.152.49:23973] [client 185.223.152.49] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-settings.php"] [unique_id "ac83BFlRNZ0iDVmJWM3QjAAAABg"]
[Fri Apr 03 11:41:57.643012 2026] [:error] [pid 35469:tid 35493] [client 185.223.152.62:59749] [client 185.223.152.62] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-blog-header.php"] [unique_id "ac83BaGvTIc8-wY3jURigQAAARY"]
[Fri Apr 03 11:41:58.326828 2026] [:error] [pid 33447:tid 33513] [client 185.223.152.45:51811] [client 185.223.152.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/storage/framework/cache/data/shell.php"] [unique_id "ac83BkgaPmDHz92j4lPSFwAAAIk"]
[Fri Apr 03 11:41:59.013672 2026] [:error] [pid 40562:tid 40582] [client 185.223.152.239:53651] [client 185.223.152.239] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-content/cache/supercache/shell.php"] [unique_id "ac83BzfFMXuP9zvqCerX-AAAAZE"]
[Fri Apr 03 11:41:59.698374 2026] [:error] [pid 40562:tid 40581] [client 185.223.152.43:65273] [client 185.223.152.43] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-content/advanced-cache.php"] [unique_id "ac83BzfFMXuP9zvqCerX-wAAAZA"]
[Fri Apr 03 11:42:00.383667 2026] [:error] [pid 33446:tid 33493] [client 185.223.152.63:61439] [client 185.223.152.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/latest-posts.php"] [unique_id "ac83CNg3dCqFYIIdw0pmVgAAAFA"]
[Fri Apr 03 11:42:01.114451 2026] [:error] [pid 40562:tid 40580] [client 185.223.152.44:62325] [client 185.223.152.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/rss.php"] [unique_id "ac83CTfFMXuP9zvqCerX_QAAAY8"]
[Fri Apr 03 11:42:01.799598 2026] [:error] [pid 33446:tid 33481] [client 185.223.152.51:29161] [client 185.223.152.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/search.php"] [unique_id "ac83Cdg3dCqFYIIdw0pmWQAAAEQ"]
[Fri Apr 03 11:42:07.486113 2026] [:error] [pid 33445:tid 33470] [client 185.223.152.53:21737] [client 185.223.152.53] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/templates/system/core.php"] [unique_id "ac83D1lRNZ0iDVmJWM3QqAAAABQ"]
[Fri Apr 03 11:42:08.174676 2026] [:error] [pid 40562:tid 40572] [client 185.223.152.52:45239] [client 185.223.152.52] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/administrator/components/com_ajax/ajax.php"] [unique_id "ac83EDfFMXuP9zvqCerYAAAAAYc"]
[Fri Apr 03 11:42:08.864713 2026] [:error] [pid 33542:tid 33569] [client 185.223.152.38:29069] [client 185.223.152.38] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/components/com_fields/models/fields.php"] [unique_id "ac83EHwb6uB1LaGtepaWWAAAANg"]
[Fri Apr 03 11:42:09.558459 2026] [:error] [pid 33445:tid 33470] [client 185.223.152.49:32935] [client 185.223.152.49] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/modules/mod_login/tmpl/default.php"] [unique_id "ac83EVlRNZ0iDVmJWM3QsAAAABQ"]
[Fri Apr 03 11:42:10.255742 2026] [:error] [pid 35469:tid 35491] [client 185.223.152.41:27307] [client 185.223.152.41] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/plugins/system/shell.php"] [unique_id "ac83EqGvTIc8-wY3jURihgAAARQ"]
[Fri Apr 03 11:42:10.989600 2026] [:error] [pid 35469:tid 35494] [client 185.223.152.52:60501] [client 185.223.152.52] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/tmp/core.php"] [unique_id "ac83EqGvTIc8-wY3jURihwAAARc"]
[Fri Apr 03 11:42:11.699463 2026] [:error] [pid 40562:tid 40582] [client 185.223.152.54:43995] [client 185.223.152.54] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/cache/core.php"] [unique_id "ac83EzfFMXuP9zvqCerYCQAAAZE"]
[Fri Apr 03 11:42:12.426753 2026] [:error] [pid 40562:tid 40572] [client 185.223.152.52:58587] [client 185.223.152.52] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/images/core.php"] [unique_id "ac83FDfFMXuP9zvqCerYCgAAAYc"]
[Fri Apr 03 11:42:13.118725 2026] [:error] [pid 55174:tid 55190] [client 185.223.152.50:31523] [client 185.223.152.50] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/language/overrides/system.php"] [unique_id "ac83FZ_WKqUonPNUHYxo9QAAAc4"]
[Fri Apr 03 11:42:13.836444 2026] [:error] [pid 35469:tid 35475] [client 185.223.152.42:47963] [client 185.223.152.42] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/administrator/cache/core.php"] [unique_id "ac83FaGvTIc8-wY3jURijQAAAQQ"]
[Fri Apr 03 11:42:14.525126 2026] [:error] [pid 40562:tid 40567] [client 185.223.152.39:57207] [client 185.223.152.39] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/components/com_media/controller.php"] [unique_id "ac83FjfFMXuP9zvqCerYDQAAAYI"]
[Fri Apr 03 11:42:15.211805 2026] [:error] [pid 33447:tid 33508] [client 185.223.152.38:22333] [client 185.223.152.38] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/templates/template/error.php"] [unique_id "ac83F0gaPmDHz92j4lPSHQAAAIQ"]
[Fri Apr 03 11:42:15.896459 2026] [:error] [pid 33447:tid 33509] [client 185.223.152.44:38683] [client 185.223.152.44] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/administrator/modules/mod_login/core.php"] [unique_id "ac83F0gaPmDHz92j4lPSHgAAAIU"]
[Fri Apr 03 11:42:16.581704 2026] [:error] [pid 55174:tid 55180] [client 185.223.152.62:26445] [client 185.223.152.62] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/plugins/user/profile/core.php"] [unique_id "ac83GJ_WKqUonPNUHYxo9gAAAcQ"]
[Fri Apr 03 11:42:17.267387 2026] [:error] [pid 33447:tid 33512] [client 185.223.152.57:52989] [client 185.223.152.57] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/configuration.php"] [unique_id "ac83GUgaPmDHz92j4lPSHwAAAIg"]
[Fri Apr 03 11:42:17.955978 2026] [:error] [pid 55174:tid 55176] [client 185.223.152.239:49653] [client 185.223.152.239] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/admin/controller/extension/module/shell.php"] [unique_id "ac83GZ_WKqUonPNUHYxo-gAAAcA"]
[Fri Apr 03 11:42:18.657925 2026] [:error] [pid 40562:tid 40565] [client 185.223.152.239:54587] [client 185.223.152.239] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/image/data/core.php"] [unique_id "ac83GjfFMXuP9zvqCerYEAAAAYA"]
[Fri Apr 03 11:42:19.342654 2026] [:error] [pid 33445:tid 33451] [client 185.223.152.39:23985] [client 185.223.152.39] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/system/storage/cache/core.php"] [unique_id "ac83G1lRNZ0iDVmJWM3QuQAAAAE"]
[Fri Apr 03 11:42:20.028326 2026] [:error] [pid 33447:tid 33514] [client 185.223.152.63:34537] [client 185.223.152.63] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/catalog/view/theme/default/template/common/shell.php"] [unique_id "ac83HEgaPmDHz92j4lPSIgAAAIo"]
[Fri Apr 03 11:42:20.713582 2026] [:error] [pid 33542:tid 33551] [client 185.223.152.50:32239] [client 185.223.152.50] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/admin/view/template/extension/module/shell.php"] [unique_id "ac83HHwb6uB1LaGtepaWWwAAAMY"]
[Fri Apr 03 11:42:21.399582 2026] [:error] [pid 33447:tid 33526] [client 185.223.152.42:24753] [client 185.223.152.42] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/download/core.php"] [unique_id "ac83HUgaPmDHz92j4lPSJAAAAJY"]
[Fri Apr 03 11:42:22.084349 2026] [:error] [pid 33542:tid 33554] [client 185.223.152.48:37193] [client 185.223.152.48] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/system/engine/loader.php"] [unique_id "ac83Hnwb6uB1LaGtepaWXwAAAMk"]
[Fri Apr 03 11:42:22.769333 2026] [:error] [pid 33445:tid 33469] [client 185.223.152.44:30161] [client 185.223.152.44] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/admin/controller/common/filemanager/core.php"] [unique_id "ac83HllRNZ0iDVmJWM3QwQAAABM"]
[Fri Apr 03 11:42:23.455568 2026] [:error] [pid 33447:tid 33524] [client 185.223.152.51:33587] [client 185.223.152.51] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/catalog/controller/journal3/settings.php"] [unique_id "ac83H0gaPmDHz92j4lPSJQAAAJQ"]
[Fri Apr 03 11:42:24.144105 2026] [:error] [pid 33542:tid 33562] [client 185.223.152.62:37499] [client 185.223.152.62] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/storage/app/public/core.php"] [unique_id "ac83IHwb6uB1LaGtepaWYAAAANE"]
[Fri Apr 03 11:42:29.829045 2026] [:error] [pid 55174:tid 55198] [client 185.223.152.39:62175] [client 185.223.152.39] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/public/core.php"] [unique_id "ac83JZ_WKqUonPNUHYxpBAAAAdY"]
[Fri Apr 03 11:42:31.966624 2026] [:error] [pid 33445:tid 33470] [client 185.223.152.56:22057] [client 185.223.152.56] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/vendor/composer/installed.php"] [unique_id "ac83J1lRNZ0iDVmJWM3Q0gAAABQ"]
[Fri Apr 03 11:42:32.811578 2026] [:error] [pid 40562:tid 40581] [client 185.223.152.47:30907] [client 185.223.152.47] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/storage/framework/sessions/core.php"] [unique_id "ac83KDfFMXuP9zvqCerYGwAAAZA"]
[Fri Apr 03 11:42:33.496787 2026] [:error] [pid 33447:tid 33513] [client 185.223.152.42:41053] [client 185.223.152.42] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/bootstrap/cache/config.php"] [unique_id "ac83KUgaPmDHz92j4lPSMQAAAIk"]
[Fri Apr 03 11:42:34.316507 2026] [:error] [pid 33446:tid 33496] [client 185.223.152.58:55053] [client 185.223.152.58] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/storage/framework/views/core.php"] [unique_id "ac83Ktg3dCqFYIIdw0pmfwAAAFM"]
[Fri Apr 03 21:25:54.271301 2026] [proxy_fcgi:error] [pid 40562:tid 40583] [client 158.158.51.12:25888] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 21:25:54.514446 2026] [proxy_fcgi:error] [pid 40562:tid 40586] [client 158.158.51.12:25888] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 21:25:54.822442 2026] [proxy_fcgi:error] [pid 40562:tid 40573] [client 158.158.51.12:25888] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 21:25:55.070765 2026] [proxy_fcgi:error] [pid 40562:tid 40581] [client 158.158.51.12:25888] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 21:25:55.313519 2026] [proxy_fcgi:error] [pid 40562:tid 40565] [client 158.158.51.12:25888] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 21:25:55.555174 2026] [proxy_fcgi:error] [pid 40562:tid 40588] [client 158.158.51.12:25888] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 21:25:55.800384 2026] [proxy_fcgi:error] [pid 40562:tid 40585] [client 158.158.51.12:25888] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 21:25:56.043346 2026] [proxy_fcgi:error] [pid 40562:tid 40587] [client 158.158.51.12:25888] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 21:25:56.458585 2026] [proxy_fcgi:error] [pid 40562:tid 40576] [client 158.158.51.12:25888] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 21:25:56.744916 2026] [proxy_fcgi:error] [pid 40562:tid 40586] [client 158.158.51.12:25888] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 21:25:56.983447 2026] [:error] [pid 40562:tid 40573] [client 158.158.51.12:25888] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xwx1.php"] [unique_id "ac-_5DfFMXuP9zvqCeqIfQAAAYg"]
[Fri Apr 03 21:25:57.907908 2026] [:error] [pid 33445:tid 33459] [client 158.158.51.12:1194] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xwx1.php"] [unique_id "ac-_5VlRNZ0iDVmJWM0NeAAAAAk"]
[Fri Apr 03 21:25:58.710218 2026] [:error] [pid 40533:tid 40547] [client 158.158.51.12:1726] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xwx1.php"] [unique_id "ac-_5vbIAA8AViDmwsuwsgAAAUw"]
[Fri Apr 03 21:25:59.282105 2026] [:error] [pid 33542:tid 33558] [client 158.158.51.12:43649] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xwx1.php"] [unique_id "ac-_53wb6uB1LaGtepb8JAAAAM0"]
[Fri Apr 03 21:26:01.905017 2026] [:error] [pid 33445:tid 33468] [client 158.158.51.12:42908] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bolt.php"] [unique_id "ac-_6VlRNZ0iDVmJWM0NfQAAABI"]
[Fri Apr 03 21:26:04.246782 2026] [:error] [pid 33446:tid 33478] [client 158.158.51.12:38686] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bolt.php"] [unique_id "ac-_7Ng3dCqFYIIdw0pvIwAAAEE"]
[Fri Apr 03 21:26:06.857513 2026] [:error] [pid 33445:tid 33464] [client 158.158.51.12:37733] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bolt.php"] [unique_id "ac-_7llRNZ0iDVmJWM0NggAAAA4"]
[Fri Apr 03 21:26:07.825909 2026] [:error] [pid 33446:tid 33500] [client 158.158.51.12:56418] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bolt.php"] [unique_id "ac-_79g3dCqFYIIdw0pvQQAAAFc"]
[Fri Apr 03 21:26:09.398816 2026] [:error] [pid 55174:tid 55191] [client 158.158.51.12:36702] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Sanskrit.php"] [unique_id "ac-_8Z_WKqUonPNUHYz3jgAAAc8"]
[Fri Apr 03 21:26:10.178907 2026] [:error] [pid 33446:tid 33484] [client 158.158.51.12:56431] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Sanskrit.php"] [unique_id "ac-_8tg3dCqFYIIdw0pvSwAAAEc"]
[Fri Apr 03 21:26:10.971489 2026] [:error] [pid 40562:tid 40577] [client 158.158.51.12:37698] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Sanskrit.php"] [unique_id "ac-_8jfFMXuP9zvqCeqImAAAAYw"]
[Fri Apr 03 21:26:12.204421 2026] [:error] [pid 33447:tid 33527] [client 158.158.51.12:24429] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Sanskrit.php"] [unique_id "ac-_9EgaPmDHz92j4lNODQAAAJc"]
[Fri Apr 03 21:26:13.292254 2026] [:error] [pid 35469:tid 35495] [client 158.158.51.12:41152] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ac-_9aGvTIc8-wY3jUScOgAAARg"]
[Fri Apr 03 21:26:15.207818 2026] [:error] [pid 55174:tid 55190] [client 158.158.51.12:55534] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ac-_95_WKqUonPNUHYz3mAAAAc4"]
[Fri Apr 03 21:26:16.591619 2026] [:error] [pid 33542:tid 33550] [client 158.158.51.12:55547] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ac-_-Hwb6uB1LaGtepb8NQAAAMU"]
[Fri Apr 03 21:26:17.456420 2026] [:error] [pid 33445:tid 33450] [client 158.158.51.12:23882] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ac-_-VlRNZ0iDVmJWM0NmAAAAAA"]
[Fri Apr 03 21:26:18.293356 2026] [:error] [pid 55174:tid 55197] [client 158.158.51.12:41192] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws88.php"] [unique_id "ac-_-p_WKqUonPNUHYz3owAAAdU"]
[Fri Apr 03 21:26:19.230591 2026] [:error] [pid 55174:tid 55178] [client 158.158.51.12:46297] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws88.php"] [unique_id "ac-_-5_WKqUonPNUHYz3pgAAAcI"]
[Fri Apr 03 21:26:19.886100 2026] [:error] [pid 40533:tid 40536] [client 158.158.51.12:37726] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws88.php"] [unique_id "ac-_-_bIAA8AViDmwsuwwgAAAUE"]
[Fri Apr 03 21:26:21.004013 2026] [:error] [pid 35469:tid 35471] [client 158.158.51.12:38730] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws88.php"] [unique_id "ac-__aGvTIc8-wY3jUScTAAAAQA"]
[Fri Apr 03 21:26:21.961618 2026] [:error] [pid 35469:tid 35486] [client 158.158.51.12:23918] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "ac-__aGvTIc8-wY3jUScUQAAAQ8"]
[Fri Apr 03 21:26:22.499079 2026] [:error] [pid 33445:tid 33469] [client 158.158.51.12:37736] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "ac-__llRNZ0iDVmJWM0NuAAAABM"]
[Fri Apr 03 21:26:23.214286 2026] [:error] [pid 33445:tid 33459] [client 158.158.51.12:19525] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "ac-__1lRNZ0iDVmJWM0NvAAAAAk"]
[Fri Apr 03 21:26:23.923263 2026] [:error] [pid 40533:tid 40545] [client 158.158.51.12:60248] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "ac-___bIAA8AViDmwsuwzQAAAUo"]
[Fri Apr 03 21:26:24.525086 2026] [:error] [pid 35469:tid 35487] [client 158.158.51.12:17356] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/CDX1.php"] [unique_id "ac_AAKGvTIc8-wY3jUScWgAAARA"]
[Fri Apr 03 21:26:25.053572 2026] [:error] [pid 35469:tid 35494] [client 158.158.51.12:23372] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/CDX1.php"] [unique_id "ac_AAaGvTIc8-wY3jUScXAAAARc"]
[Fri Apr 03 21:26:25.816016 2026] [:error] [pid 35469:tid 35488] [client 158.158.51.12:26476] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/CDX1.php"] [unique_id "ac_AAaGvTIc8-wY3jUScZwAAARE"]
[Fri Apr 03 21:26:26.298429 2026] [:error] [pid 35469:tid 35489] [client 158.158.51.12:36031] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/CDX1.php"] [unique_id "ac_AAqGvTIc8-wY3jUScbAAAARI"]
[Fri Apr 03 21:26:27.106444 2026] [:error] [pid 33445:tid 33466] [client 158.158.51.12:23361] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/8daf1238_1774208172.php"] [unique_id "ac_AA1lRNZ0iDVmJWM0N0AAAABA"]
[Fri Apr 03 21:26:27.894019 2026] [:error] [pid 35469:tid 35493] [client 158.158.51.12:15735] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/8daf1238_1774208172.php"] [unique_id "ac_AA6GvTIc8-wY3jUScegAAARY"]
[Fri Apr 03 21:26:28.684359 2026] [:error] [pid 33445:tid 33461] [client 158.158.51.12:58978] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/8daf1238_1774208172.php"] [unique_id "ac_ABFlRNZ0iDVmJWM0N2AAAAAs"]
[Fri Apr 03 21:26:29.422348 2026] [:error] [pid 35469:tid 35479] [client 158.158.51.12:16016] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/8daf1238_1774208172.php"] [unique_id "ac_ABaGvTIc8-wY3jUSciwAAAQg"]
[Fri Apr 03 21:26:29.935722 2026] [:error] [pid 55174:tid 55196] [client 158.158.51.12:50647] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ortasekerli1.php"] [unique_id "ac_ABZ_WKqUonPNUHYz3uAAAAdQ"]
[Fri Apr 03 21:26:30.616210 2026] [:error] [pid 35469:tid 35479] [client 158.158.51.12:62113] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ortasekerli1.php"] [unique_id "ac_ABqGvTIc8-wY3jUSclAAAAQg"]
[Fri Apr 03 21:26:31.300376 2026] [:error] [pid 33445:tid 33468] [client 158.158.51.12:60245] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ortasekerli1.php"] [unique_id "ac_AB1lRNZ0iDVmJWM0N6wAAABI"]
[Fri Apr 03 21:26:31.856574 2026] [:error] [pid 35469:tid 35495] [client 158.158.51.12:35991] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ortasekerli1.php"] [unique_id "ac_AB6GvTIc8-wY3jUScnAAAARg"]
[Fri Apr 03 21:26:32.895615 2026] [:error] [pid 35469:tid 35472] [client 158.158.51.12:44942] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bgymj.php"] [unique_id "ac_ACKGvTIc8-wY3jUScowAAAQE"]
[Fri Apr 03 21:26:33.643498 2026] [:error] [pid 33446:tid 33486] [client 158.158.51.12:15742] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bgymj.php"] [unique_id "ac_ACdg3dCqFYIIdw0pvagAAAEk"]
[Fri Apr 03 21:26:34.561865 2026] [:error] [pid 33446:tid 33493] [client 158.158.51.12:44950] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bgymj.php"] [unique_id "ac_ACtg3dCqFYIIdw0pvbgAAAFA"]
[Fri Apr 03 21:26:35.268099 2026] [:error] [pid 33446:tid 33478] [client 158.158.51.12:16011] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bgymj.php"] [unique_id "ac_AC9g3dCqFYIIdw0pvdgAAAEE"]
[Fri Apr 03 21:26:35.819129 2026] [:error] [pid 33447:tid 33525] [client 158.158.51.12:38768] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "ac_AC0gaPmDHz92j4lNOGgAAAJU"]
[Fri Apr 03 21:26:36.847983 2026] [:error] [pid 33447:tid 33520] [client 158.158.51.12:26455] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "ac_ADEgaPmDHz92j4lNOHAAAAJA"]
[Fri Apr 03 21:26:40.697435 2026] [:error] [pid 35469:tid 35487] [client 158.158.51.12:50655] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "ac_AEKGvTIc8-wY3jUScsAAAARA"]
[Fri Apr 03 21:26:42.654044 2026] [:error] [pid 33446:tid 33489] [client 158.158.51.12:19542] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "ac_AEtg3dCqFYIIdw0pvrgAAAEw"]
[Fri Apr 03 21:26:49.090743 2026] [:error] [pid 33446:tid 33497] [client 158.158.51.12:21099] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wziar1.php"] [unique_id "ac_AGdg3dCqFYIIdw0pvyQAAAFQ"]
[Fri Apr 03 21:26:52.073283 2026] [:error] [pid 33447:tid 33511] [client 158.158.51.12:39371] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wziar1.php"] [unique_id "ac_AHEgaPmDHz92j4lNOMAAAAIc"]
[Fri Apr 03 21:26:54.074283 2026] [:error] [pid 35469:tid 35490] [client 158.158.51.12:51843] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wziar1.php"] [unique_id "ac_AHqGvTIc8-wY3jUSc1AAAARM"]
[Fri Apr 03 21:26:54.751943 2026] [:error] [pid 33445:tid 33466] [client 158.158.51.12:15722] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wziar1.php"] [unique_id "ac_AHllRNZ0iDVmJWM0OJAAAABA"]
[Fri Apr 03 21:26:56.220050 2026] [proxy_fcgi:error] [pid 33446:tid 33495] [client 158.158.51.12:60307] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 21:26:56.468809 2026] [proxy_fcgi:error] [pid 33446:tid 33500] [client 158.158.51.12:60307] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 21:26:56.711027 2026] [proxy_fcgi:error] [pid 33446:tid 33483] [client 158.158.51.12:60307] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 21:26:56.954357 2026] [proxy_fcgi:error] [pid 33446:tid 33477] [client 158.158.51.12:60307] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 21:26:57.415986 2026] [proxy_fcgi:error] [pid 33446:tid 33496] [client 158.158.51.12:60307] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 21:26:57.657846 2026] [proxy_fcgi:error] [pid 33446:tid 33484] [client 158.158.51.12:60307] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 21:26:57.900156 2026] [proxy_fcgi:error] [pid 33446:tid 33479] [client 158.158.51.12:60307] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 21:26:58.143841 2026] [proxy_fcgi:error] [pid 33446:tid 33486] [client 158.158.51.12:60307] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 21:26:58.385658 2026] [proxy_fcgi:error] [pid 33446:tid 33493] [client 158.158.51.12:60307] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 21:26:58.632825 2026] [proxy_fcgi:error] [pid 33446:tid 33487] [client 158.158.51.12:60307] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 21:26:58.934124 2026] [proxy_fcgi:error] [pid 33446:tid 33482] [client 158.158.51.12:60307] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 21:26:59.172933 2026] [:error] [pid 33446:tid 33499] [client 158.158.51.12:60307] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/b4txckoieeyhynhsrpi9lCdefault.php"] [unique_id "ac_AI9g3dCqFYIIdw0pv5QAAAFY"]
[Fri Apr 03 21:26:59.829745 2026] [:error] [pid 33542:tid 33560] [client 158.158.51.12:42966] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/b4txckoieeyhynhsrpi9lCdefault.php"] [unique_id "ac_AI3wb6uB1LaGtepb8WQAAAM8"]
[Fri Apr 03 21:27:00.734691 2026] [:error] [pid 35469:tid 35475] [client 158.158.51.12:21551] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/b4txckoieeyhynhsrpi9lCdefault.php"] [unique_id "ac_AJKGvTIc8-wY3jUSc8gAAAQQ"]
[Fri Apr 03 21:27:01.356640 2026] [:error] [pid 33446:tid 33490] [client 158.158.51.12:49447] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/b4txckoieeyhynhsrpi9lCdefault.php"] [unique_id "ac_AJdg3dCqFYIIdw0pv6AAAAE0"]
[Fri Apr 03 21:27:02.131830 2026] [:error] [pid 33446:tid 33486] [client 158.158.51.12:56360] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/amax.php"] [unique_id "ac_AJtg3dCqFYIIdw0pv7wAAAEk"]
[Fri Apr 03 21:27:02.998979 2026] [:error] [pid 33447:tid 33510] [client 158.158.51.12:42988] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/amax.php"] [unique_id "ac_AJkgaPmDHz92j4lNOPAAAAIY"]
[Fri Apr 03 21:27:03.739921 2026] [:error] [pid 35469:tid 35472] [client 158.158.51.12:41645] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/amax.php"] [unique_id "ac_AJ6GvTIc8-wY3jUSc-gAAAQE"]
[Fri Apr 03 21:27:05.414172 2026] [:error] [pid 33446:tid 33488] [client 158.158.51.12:49444] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/amax.php"] [unique_id "ac_AKdg3dCqFYIIdw0pv_QAAAEs"]
[Fri Apr 03 21:27:06.668471 2026] [:error] [pid 33447:tid 33507] [client 158.158.51.12:56868] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ac_AKkgaPmDHz92j4lNOQAAAAIM"]
[Fri Apr 03 21:27:08.608528 2026] [:error] [pid 33445:tid 33453] [client 158.158.51.12:60314] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ac_ALFlRNZ0iDVmJWM0OOgAAAAM"]
[Fri Apr 03 21:27:09.629587 2026] [:error] [pid 35469:tid 35471] [client 158.158.51.12:51888] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ac_ALaGvTIc8-wY3jUSdCQAAAQA"]
[Fri Apr 03 21:27:10.663478 2026] [:error] [pid 33446:tid 33498] [client 158.158.51.12:39363] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ac_ALtg3dCqFYIIdw0pwEQAAAFU"]
[Fri Apr 03 21:27:12.387543 2026] [:error] [pid 33445:tid 33453] [client 158.158.51.12:2040] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/pass4.php"] [unique_id "ac_AMFlRNZ0iDVmJWM0OSgAAAAM"]
[Fri Apr 03 21:27:14.507722 2026] [:error] [pid 33446:tid 33490] [client 158.158.51.12:56847] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/pass4.php"] [unique_id "ac_AMtg3dCqFYIIdw0pwIQAAAE0"]
[Fri Apr 03 21:27:17.718652 2026] [:error] [pid 33446:tid 33478] [client 158.158.51.12:2031] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/pass4.php"] [unique_id "ac_ANdg3dCqFYIIdw0pwJwAAAEE"]
[Fri Apr 03 21:27:23.694874 2026] [:error] [pid 33446:tid 33481] [client 158.158.51.12:1401] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/pass4.php"] [unique_id "ac_AO9g3dCqFYIIdw0pwMwAAAEQ"]
[Fri Apr 03 21:27:26.591638 2026] [:error] [pid 35469:tid 35486] [client 158.158.51.12:1465] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a5.php"] [unique_id "ac_APqGvTIc8-wY3jUSdXgAAAQ8"]
[Fri Apr 03 21:27:31.008886 2026] [:error] [pid 33447:tid 33506] [client 158.158.51.12:23325] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a5.php"] [unique_id "ac_AQ0gaPmDHz92j4lNOZQAAAII"]
[Fri Apr 03 21:27:32.109668 2026] [:error] [pid 35469:tid 35479] [client 158.158.51.12:45507] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a5.php"] [unique_id "ac_ARKGvTIc8-wY3jUSdeAAAAQg"]
[Fri Apr 03 21:27:32.838598 2026] [:error] [pid 35469:tid 35490] [client 158.158.51.12:27410] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a5.php"] [unique_id "ac_ARKGvTIc8-wY3jUSdgQAAARM"]
[Fri Apr 03 21:27:33.555322 2026] [:error] [pid 33447:tid 33508] [client 158.158.51.12:56862] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "ac_ARUgaPmDHz92j4lNOaAAAAIQ"]
[Fri Apr 03 21:27:34.897291 2026] [:error] [pid 40562:tid 40571] [client 158.158.51.12:29927] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "ac_ARjfFMXuP9zvqCeqJIwAAAYY"]
[Fri Apr 03 21:27:36.940726 2026] [:error] [pid 40562:tid 40588] [client 158.158.51.12:39415] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "ac_ASDfFMXuP9zvqCeqJKgAAAZc"]
[Fri Apr 03 21:27:38.605533 2026] [:error] [pid 33446:tid 33479] [client 158.158.51.12:1393] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "ac_AStg3dCqFYIIdw0pwXwAAAEI"]
[Fri Apr 03 21:27:39.432200 2026] [:error] [pid 40533:tid 40540] [client 158.158.51.12:55448] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sadcut1.php"] [unique_id "ac_AS_bIAA8AViDmwsuxBQAAAUU"]
[Fri Apr 03 21:27:40.675363 2026] [:error] [pid 33445:tid 33458] [client 158.158.51.12:1414] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sadcut1.php"] [unique_id "ac_ATFlRNZ0iDVmJWM0OgQAAAAg"]
[Fri Apr 03 21:27:41.502006 2026] [:error] [pid 40533:tid 40552] [client 158.158.51.12:27411] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sadcut1.php"] [unique_id "ac_ATfbIAA8AViDmwsuxCgAAAVE"]
[Fri Apr 03 21:27:42.155598 2026] [:error] [pid 40562:tid 40573] [client 158.158.51.12:29935] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sadcut1.php"] [unique_id "ac_ATjfFMXuP9zvqCeqJNgAAAYg"]
[Fri Apr 03 21:27:43.428872 2026] [:error] [pid 33446:tid 33488] [client 158.158.51.12:37650] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a4.php"] [unique_id "ac_AT9g3dCqFYIIdw0pwewAAAEs"]
[Fri Apr 03 21:27:44.408467 2026] [:error] [pid 35469:tid 35490] [client 158.158.51.12:60775] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a4.php"] [unique_id "ac_AUKGvTIc8-wY3jUSdkwAAARM"]
[Fri Apr 03 21:27:45.362946 2026] [:error] [pid 35469:tid 35491] [client 158.158.51.12:41127] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a4.php"] [unique_id "ac_AUaGvTIc8-wY3jUSdmgAAARQ"]
[Fri Apr 03 21:27:46.167749 2026] [:error] [pid 33542:tid 33564] [client 158.158.51.12:37686] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a4.php"] [unique_id "ac_AUnwb6uB1LaGtepb8lAAAANM"]
[Fri Apr 03 21:27:46.820607 2026] [:error] [pid 40562:tid 40587] [client 158.158.51.12:25375] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gpt-sh.php"] [unique_id "ac_AUjfFMXuP9zvqCeqJRwAAAZY"]
[Fri Apr 03 21:27:47.526875 2026] [:error] [pid 33542:tid 33548] [client 158.158.51.12:54279] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gpt-sh.php"] [unique_id "ac_AU3wb6uB1LaGtepb8mAAAAMM"]
[Fri Apr 03 21:27:48.484849 2026] [:error] [pid 35469:tid 35485] [client 158.158.51.12:20020] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gpt-sh.php"] [unique_id "ac_AVKGvTIc8-wY3jUSdnwAAAQ4"]
[Fri Apr 03 21:27:49.184790 2026] [:error] [pid 35469:tid 35495] [client 158.158.51.12:41097] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gpt-sh.php"] [unique_id "ac_AVaGvTIc8-wY3jUSdpAAAARg"]
[Fri Apr 03 21:27:50.991476 2026] [:error] [pid 33445:tid 33465] [client 158.158.51.12:37132] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp.php"] [unique_id "ac_AVllRNZ0iDVmJWM0OkQAAAA8"]
[Fri Apr 03 21:27:51.943377 2026] [:error] [pid 35469:tid 35492] [client 158.158.51.12:37153] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp.php"] [unique_id "ac_AV6GvTIc8-wY3jUSdrwAAARU"]
[Fri Apr 03 21:27:52.941136 2026] [:error] [pid 35469:tid 35474] [client 158.158.51.12:37133] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp.php"] [unique_id "ac_AWKGvTIc8-wY3jUSdswAAAQM"]
[Fri Apr 03 21:27:54.129920 2026] [:error] [pid 33446:tid 33482] [client 158.158.51.12:20029] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp.php"] [unique_id "ac_AWtg3dCqFYIIdw0pwkQAAAEU"]
[Fri Apr 03 21:27:54.783535 2026] [:error] [pid 35469:tid 35479] [client 158.158.51.12:44996] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-the.php"] [unique_id "ac_AWqGvTIc8-wY3jUSdtAAAAQg"]
[Fri Apr 03 21:27:55.483152 2026] [:error] [pid 40562:tid 40565] [client 158.158.51.12:29876] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-the.php"] [unique_id "ac_AWzfFMXuP9zvqCeqJUgAAAYA"]
[Fri Apr 03 21:27:56.390809 2026] [:error] [pid 33447:tid 33528] [client 158.158.51.12:28542] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-the.php"] [unique_id "ac_AXEgaPmDHz92j4lNOcgAAAJg"]
[Fri Apr 03 21:27:57.289116 2026] [:error] [pid 35469:tid 35475] [client 158.158.51.12:52527] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-the.php"] [unique_id "ac_AXaGvTIc8-wY3jUSdwwAAAQQ"]
[Fri Apr 03 21:27:58.051288 2026] [proxy_fcgi:error] [pid 33447:tid 33504] [client 158.158.51.12:1978] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 21:27:58.368802 2026] [proxy_fcgi:error] [pid 33447:tid 33511] [client 158.158.51.12:1978] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 21:27:58.610878 2026] [proxy_fcgi:error] [pid 33447:tid 33514] [client 158.158.51.12:1978] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 21:27:58.907229 2026] [proxy_fcgi:error] [pid 33447:tid 33527] [client 158.158.51.12:1978] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 21:27:59.149623 2026] [proxy_fcgi:error] [pid 33447:tid 33519] [client 158.158.51.12:1978] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 21:27:59.422351 2026] [proxy_fcgi:error] [pid 33447:tid 33523] [client 158.158.51.12:1978] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 21:27:59.709712 2026] [proxy_fcgi:error] [pid 33447:tid 33512] [client 158.158.51.12:1978] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 21:27:59.976122 2026] [proxy_fcgi:error] [pid 33447:tid 33525] [client 158.158.51.12:1978] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 21:28:00.219386 2026] [proxy_fcgi:error] [pid 33447:tid 33516] [client 158.158.51.12:1978] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 21:28:00.510599 2026] [proxy_fcgi:error] [pid 33447:tid 33517] [client 158.158.51.12:1978] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 21:28:00.885624 2026] [proxy_fcgi:error] [pid 33447:tid 33528] [client 158.158.51.12:1978] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 21:28:01.168462 2026] [:error] [pid 33447:tid 33519] [client 158.158.51.12:1978] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ac_AYUgaPmDHz92j4lNOigAAAI8"]
[Fri Apr 03 21:28:02.542514 2026] [:error] [pid 40562:tid 40565] [client 158.158.51.12:32730] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ac_AYjfFMXuP9zvqCeqJWgAAAYA"]
[Fri Apr 03 21:28:03.377946 2026] [:error] [pid 33447:tid 33505] [client 158.158.51.12:53852] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ac_AY0gaPmDHz92j4lNOkQAAAIE"]
[Fri Apr 03 21:28:04.106622 2026] [:error] [pid 35469:tid 35491] [client 158.158.51.12:53877] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ac_AZKGvTIc8-wY3jUSd2AAAARQ"]
[Fri Apr 03 21:28:05.379285 2026] [:error] [pid 33446:tid 33494] [client 158.158.51.12:48111] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aligk.php"] [unique_id "ac_AZdg3dCqFYIIdw0pwqwAAAFE"]
[Fri Apr 03 21:28:06.853706 2026] [:error] [pid 55174:tid 55191] [client 158.158.51.12:64619] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aligk.php"] [unique_id "ac_AZp_WKqUonPNUHYz4bAAAAc8"]
[Fri Apr 03 21:28:07.712597 2026] [:error] [pid 55174:tid 55187] [client 158.158.51.12:26406] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aligk.php"] [unique_id "ac_AZ5_WKqUonPNUHYz4cAAAAcs"]
[Fri Apr 03 21:28:08.750789 2026] [:error] [pid 33445:tid 33463] [client 158.158.51.12:19050] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aligk.php"] [unique_id "ac_AaFlRNZ0iDVmJWM0OpgAAAA0"]
[Fri Apr 03 21:28:10.016620 2026] [:error] [pid 33446:tid 33491] [client 158.158.51.12:1638] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a7.php"] [unique_id "ac_Aatg3dCqFYIIdw0pwtQAAAE4"]
[Fri Apr 03 21:28:10.839895 2026] [:error] [pid 33445:tid 33473] [client 158.158.51.12:45468] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a7.php"] [unique_id "ac_AallRNZ0iDVmJWM0OqgAAABc"]
[Fri Apr 03 21:28:12.418499 2026] [:error] [pid 35469:tid 35481] [client 158.158.51.12:46905] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a7.php"] [unique_id "ac_AbKGvTIc8-wY3jUSd8AAAAQo"]
[Fri Apr 03 21:28:13.880524 2026] [:error] [pid 33446:tid 33489] [client 158.158.51.12:45484] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a7.php"] [unique_id "ac_Abdg3dCqFYIIdw0pwuwAAAEw"]
[Fri Apr 03 21:28:14.799118 2026] [:error] [pid 33446:tid 33491] [client 158.158.51.12:32659] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ta0ol.php"] [unique_id "ac_Abtg3dCqFYIIdw0pwvwAAAE4"]
[Fri Apr 03 21:28:16.527313 2026] [:error] [pid 33446:tid 33494] [client 158.158.51.12:24853] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ta0ol.php"] [unique_id "ac_AcNg3dCqFYIIdw0pwwgAAAFE"]
[Fri Apr 03 21:28:18.609992 2026] [:error] [pid 33447:tid 33505] [client 158.158.51.12:63434] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ta0ol.php"] [unique_id "ac_AckgaPmDHz92j4lNOmQAAAIE"]
[Fri Apr 03 21:28:20.023462 2026] [:error] [pid 33447:tid 33509] [client 158.158.51.12:1842] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ta0ol.php"] [unique_id "ac_AdEgaPmDHz92j4lNOnAAAAIU"]
[Fri Apr 03 21:29:30.743659 2026] [proxy_fcgi:error] [pid 40533:tid 40541] [client 158.158.51.12:1826] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 21:29:31.012975 2026] [proxy_fcgi:error] [pid 40533:tid 40553] [client 158.158.51.12:1826] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 21:29:31.256583 2026] [proxy_fcgi:error] [pid 40533:tid 40538] [client 158.158.51.12:1826] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 21:29:31.566112 2026] [proxy_fcgi:error] [pid 40533:tid 40537] [client 158.158.51.12:1826] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 21:29:31.923957 2026] [proxy_fcgi:error] [pid 40533:tid 40535] [client 158.158.51.12:1826] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 21:29:32.167119 2026] [proxy_fcgi:error] [pid 40533:tid 40543] [client 158.158.51.12:1826] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 21:29:32.459160 2026] [proxy_fcgi:error] [pid 40533:tid 40547] [client 158.158.51.12:1826] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 21:29:32.701649 2026] [proxy_fcgi:error] [pid 40533:tid 40555] [client 158.158.51.12:1826] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 21:29:32.944515 2026] [proxy_fcgi:error] [pid 40533:tid 40544] [client 158.158.51.12:1826] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 21:29:33.187049 2026] [proxy_fcgi:error] [pid 40533:tid 40551] [client 158.158.51.12:1826] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 21:29:33.493684 2026] [proxy_fcgi:error] [pid 40533:tid 40558] [client 158.158.51.12:1826] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 21:29:33.732602 2026] [:error] [pid 40533:tid 40539] [client 158.158.51.12:1826] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jp.php"] [unique_id "ac_AvfbIAA8AViDmwsuxTgAAAUQ"]
[Fri Apr 03 21:29:34.477849 2026] [:error] [pid 35469:tid 35478] [client 158.158.51.12:32727] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jp.php"] [unique_id "ac_AvqGvTIc8-wY3jUSe_wAAAQc"]
[Fri Apr 03 21:29:35.278843 2026] [:error] [pid 35469:tid 35475] [client 158.158.51.12:30953] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jp.php"] [unique_id "ac_Av6GvTIc8-wY3jUSfCQAAAQQ"]
[Fri Apr 03 21:29:35.922015 2026] [:error] [pid 33445:tid 33463] [client 158.158.51.12:64627] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jp.php"] [unique_id "ac_Av1lRNZ0iDVmJWM0PCAAAAA0"]
[Fri Apr 03 21:29:36.505688 2026] [:error] [pid 33445:tid 33464] [client 158.158.51.12:30914] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/motu.php"] [unique_id "ac_AwFlRNZ0iDVmJWM0PDgAAAA4"]
[Fri Apr 03 21:29:37.088370 2026] [:error] [pid 35469:tid 35488] [client 158.158.51.12:39316] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/motu.php"] [unique_id "ac_AwaGvTIc8-wY3jUSfEAAAARE"]
[Fri Apr 03 21:29:37.599162 2026] [:error] [pid 33446:tid 33479] [client 158.158.51.12:34806] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/motu.php"] [unique_id "ac_Awdg3dCqFYIIdw0pxRgAAAEI"]
[Fri Apr 03 21:29:38.398087 2026] [:error] [pid 35469:tid 35477] [client 158.158.51.12:45012] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/motu.php"] [unique_id "ac_AwqGvTIc8-wY3jUSfGQAAAQY"]
[Fri Apr 03 21:29:39.085661 2026] [:error] [pid 33445:tid 33456] [client 158.158.51.12:33405] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gfd.php"] [unique_id "ac_Aw1lRNZ0iDVmJWM0PFAAAAAY"]
[Fri Apr 03 21:29:39.659694 2026] [:error] [pid 33447:tid 33508] [client 158.158.51.12:64594] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gfd.php"] [unique_id "ac_Aw0gaPmDHz92j4lNPMQAAAIQ"]
[Fri Apr 03 21:29:40.337113 2026] [:error] [pid 35469:tid 35480] [client 158.158.51.12:39305] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gfd.php"] [unique_id "ac_AxKGvTIc8-wY3jUSfHQAAAQk"]
[Fri Apr 03 21:29:40.867144 2026] [:error] [pid 40562:tid 40568] [client 158.158.51.12:52502] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gfd.php"] [unique_id "ac_AxDfFMXuP9zvqCeqJ2wAAAYM"]
[Fri Apr 03 21:29:41.373907 2026] [:error] [pid 33446:tid 33482] [client 158.158.51.12:39340] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tx78.php"] [unique_id "ac_Axdg3dCqFYIIdw0pxTQAAAEU"]
[Fri Apr 03 21:29:42.405657 2026] [:error] [pid 40533:tid 40559] [client 158.158.51.12:41122] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tx78.php"] [unique_id "ac_AxvbIAA8AViDmwsuxVQAAAVg"]
[Fri Apr 03 21:29:43.383735 2026] [:error] [pid 33445:tid 33466] [client 158.158.51.12:34771] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tx78.php"] [unique_id "ac_Ax1lRNZ0iDVmJWM0PGwAAABA"]
[Fri Apr 03 21:29:44.171288 2026] [:error] [pid 33447:tid 33520] [client 158.158.51.12:28521] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tx78.php"] [unique_id "ac_AyEgaPmDHz92j4lNPRgAAAJA"]
[Fri Apr 03 21:29:45.214364 2026] [:error] [pid 35469:tid 35495] [client 158.158.51.12:33385] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/torsa1.php"] [unique_id "ac_AyaGvTIc8-wY3jUSfKQAAARg"]
[Fri Apr 03 21:29:46.319541 2026] [:error] [pid 33446:tid 33485] [client 158.158.51.12:37690] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/torsa1.php"] [unique_id "ac_Aytg3dCqFYIIdw0pxUQAAAEg"]
[Fri Apr 03 21:29:46.891544 2026] [:error] [pid 33445:tid 33462] [client 158.158.51.12:37642] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/torsa1.php"] [unique_id "ac_AyllRNZ0iDVmJWM0PIgAAAAw"]
[Fri Apr 03 21:29:49.012903 2026] [:error] [pid 33446:tid 33492] [client 158.158.51.12:18537] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/torsa1.php"] [unique_id "ac_Azdg3dCqFYIIdw0pxWQAAAE8"]
[Fri Apr 03 21:29:50.395810 2026] [:error] [pid 40562:tid 40577] [client 158.158.51.12:33399] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/8573.php"] [unique_id "ac_AzjfFMXuP9zvqCeqJ6QAAAYw"]
[Fri Apr 03 21:29:53.086907 2026] [:error] [pid 40533:tid 40553] [client 158.158.51.12:1904] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/8573.php"] [unique_id "ac_A0fbIAA8AViDmwsuxXQAAAVI"]
[Fri Apr 03 21:29:55.631560 2026] [:error] [pid 33446:tid 33498] [client 158.158.51.12:37176] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/8573.php"] [unique_id "ac_A09g3dCqFYIIdw0pxZAAAAFU"]
[Fri Apr 03 21:29:57.079209 2026] [:error] [pid 40533:tid 40556] [client 158.158.51.12:29852] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/8573.php"] [unique_id "ac_A1fbIAA8AViDmwsuxYQAAAVU"]
[Fri Apr 03 21:30:01.441315 2026] [:error] [pid 55174:tid 55177] [client 158.158.51.12:25344] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dass.php"] [unique_id "ac_A2Z_WKqUonPNUHYz41QAAAcE"]
[Fri Apr 03 21:30:02.499918 2026] [:error] [pid 33447:tid 33510] [client 158.158.51.12:33392] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dass.php"] [unique_id "ac_A2kgaPmDHz92j4lNPaAAAAIY"]
[Fri Apr 03 21:30:03.356820 2026] [:error] [pid 33447:tid 33523] [client 158.158.51.12:41100] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dass.php"] [unique_id "ac_A20gaPmDHz92j4lNPbgAAAJM"]
[Fri Apr 03 21:30:04.903764 2026] [:error] [pid 33445:tid 33461] [client 158.158.51.12:39339] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dass.php"] [unique_id "ac_A3FlRNZ0iDVmJWM0PMAAAAAs"]
[Fri Apr 03 21:30:05.682899 2026] [:error] [pid 33446:tid 33489] [client 158.158.51.12:20030] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/green.php"] [unique_id "ac_A3dg3dCqFYIIdw0pxdwAAAEw"]
[Fri Apr 03 21:30:06.674505 2026] [:error] [pid 33446:tid 33495] [client 158.158.51.12:41130] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/green.php"] [unique_id "ac_A3tg3dCqFYIIdw0pxegAAAFI"]
[Fri Apr 03 21:30:07.374333 2026] [:error] [pid 33447:tid 33528] [client 158.158.51.12:41150] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/green.php"] [unique_id "ac_A30gaPmDHz92j4lNPcwAAAJg"]
[Fri Apr 03 21:30:08.384568 2026] [:error] [pid 33446:tid 33481] [client 158.158.51.12:25395] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/green.php"] [unique_id "ac_A4Ng3dCqFYIIdw0pxfwAAAEQ"]
[Fri Apr 03 21:30:09.344687 2026] [:error] [pid 33445:tid 33472] [client 158.158.51.12:37183] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/myfile.php"] [unique_id "ac_A4VlRNZ0iDVmJWM0POAAAABY"]
[Fri Apr 03 21:30:10.764816 2026] [:error] [pid 33446:tid 33485] [client 158.158.51.12:19968] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/myfile.php"] [unique_id "ac_A4tg3dCqFYIIdw0pxggAAAEg"]
[Fri Apr 03 21:30:11.628635 2026] [:error] [pid 55174:tid 55196] [client 158.158.51.12:1918] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/myfile.php"] [unique_id "ac_A45_WKqUonPNUHYz44gAAAdQ"]
[Fri Apr 03 21:30:12.281666 2026] [:error] [pid 35469:tid 35478] [client 158.158.51.12:18509] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/myfile.php"] [unique_id "ac_A5KGvTIc8-wY3jUSfSgAAAQc"]
[Fri Apr 03 21:30:13.122476 2026] [:error] [pid 33447:tid 33513] [client 158.158.51.12:41144] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp9.php"] [unique_id "ac_A5UgaPmDHz92j4lNPfQAAAIk"]
[Fri Apr 03 21:30:14.501750 2026] [:error] [pid 35469:tid 35487] [client 158.158.51.12:30974] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp9.php"] [unique_id "ac_A5qGvTIc8-wY3jUSfUQAAARA"]
[Fri Apr 03 21:30:15.551514 2026] [:error] [pid 35469:tid 35486] [client 158.158.51.12:55881] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp9.php"] [unique_id "ac_A56GvTIc8-wY3jUSfWAAAAQ8"]
[Fri Apr 03 21:30:18.018325 2026] [:error] [pid 33445:tid 33466] [client 158.158.51.12:52531] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp9.php"] [unique_id "ac_A6llRNZ0iDVmJWM0PRAAAABA"]
[Fri Apr 03 21:30:20.267173 2026] [:error] [pid 40562:tid 40579] [client 158.158.51.12:39345] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xsas.php"] [unique_id "ac_A7DfFMXuP9zvqCeqKCQAAAY4"]
[Fri Apr 03 21:30:21.351718 2026] [:error] [pid 40533:tid 40553] [client 158.158.51.12:1891] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xsas.php"] [unique_id "ac_A7fbIAA8AViDmwsuxaAAAAVI"]
[Fri Apr 03 21:30:22.841402 2026] [:error] [pid 40562:tid 40569] [client 158.158.51.12:37130] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xsas.php"] [unique_id "ac_A7jfFMXuP9zvqCeqKEwAAAYQ"]
[Fri Apr 03 21:30:24.135039 2026] [:error] [pid 33446:tid 33478] [client 158.158.51.12:19995] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xsas.php"] [unique_id "ac_A8Ng3dCqFYIIdw0pxlgAAAEE"]
[Fri Apr 03 21:30:25.221740 2026] [:error] [pid 40562:tid 40588] [client 158.158.51.12:25345] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sid3.php"] [unique_id "ac_A8TfFMXuP9zvqCeqKFwAAAZc"]
[Fri Apr 03 21:30:25.778512 2026] [:error] [pid 40562:tid 40589] [client 158.158.51.12:29844] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sid3.php"] [unique_id "ac_A8TfFMXuP9zvqCeqKHAAAAZg"]
[Fri Apr 03 21:30:26.340584 2026] [:error] [pid 55174:tid 55179] [client 158.158.51.12:37676] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sid3.php"] [unique_id "ac_A8p_WKqUonPNUHYz47QAAAcM"]
[Fri Apr 03 21:30:27.072648 2026] [:error] [pid 55174:tid 55185] [client 158.158.51.12:52498] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sid3.php"] [unique_id "ac_A85_WKqUonPNUHYz48AAAAck"]
[Fri Apr 03 21:30:27.869535 2026] [:error] [pid 35469:tid 35482] [client 158.158.51.12:1874] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nw.php"] [unique_id "ac_A86GvTIc8-wY3jUSfegAAAQs"]
[Fri Apr 03 21:30:28.460080 2026] [:error] [pid 35469:tid 35480] [client 158.158.51.12:28491] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nw.php"] [unique_id "ac_A9KGvTIc8-wY3jUSffgAAAQk"]
[Fri Apr 03 21:30:29.140779 2026] [:error] [pid 33445:tid 33470] [client 158.158.51.12:1896] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nw.php"] [unique_id "ac_A9VlRNZ0iDVmJWM0PVQAAABQ"]
[Fri Apr 03 21:30:30.240187 2026] [:error] [pid 33446:tid 33480] [client 158.158.51.12:33360] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nw.php"] [unique_id "ac_A9tg3dCqFYIIdw0pxnAAAAEM"]
[Fri Apr 03 21:30:31.162556 2026] [:error] [pid 33445:tid 33466] [client 158.158.51.12:1866] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hhxc.php"] [unique_id "ac_A91lRNZ0iDVmJWM0PWQAAABA"]
[Fri Apr 03 21:30:31.949689 2026] [:error] [pid 33446:tid 33484] [client 158.158.51.12:25360] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hhxc.php"] [unique_id "ac_A99g3dCqFYIIdw0pxnwAAAEc"]
[Fri Apr 03 21:30:32.507843 2026] [:error] [pid 33447:tid 33521] [client 158.158.51.12:1906] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hhxc.php"] [unique_id "ac_A-EgaPmDHz92j4lNPnAAAAJE"]
[Fri Apr 03 21:30:33.359820 2026] [proxy_fcgi:error] [pid 35469:tid 35475] [client 158.158.51.12:19974] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 22:39:45.079336 2026] [proxy_fcgi:error] [pid 40533:tid 40559] [client 72.146.45.53:2264] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 23:49:58.199121 2026] [proxy_fcgi:error] [pid 33542:tid 33549] [client 45.92.1.144:60648] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 23:49:59.169859 2026] [:error] [pid 33542:tid 33558] [client 45.92.1.144:56122] [client 45.92.1.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/widgets/txets.php"] [unique_id "ac_hp3wb6uB1LaGtepYxIAAAAM0"]
[Fri Apr 03 23:49:59.648872 2026] [:error] [pid 33445:tid 33466] [client 45.92.1.144:58176] [client 45.92.1.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/rest-api/txets.php"] [unique_id "ac_hp1lRNZ0iDVmJWM1sigAAABA"]
[Fri Apr 03 23:50:00.134598 2026] [:error] [pid 33447:tid 33511] [client 45.92.1.144:55274] [client 45.92.1.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/post-template/txets.php"] [unique_id "ac_hqEgaPmDHz92j4lNq4QAAAIc"]
[Fri Apr 03 23:50:01.107829 2026] [:error] [pid 40562:tid 40584] [client 45.92.1.144:58176] [client 45.92.1.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/txets.php"] [unique_id "ac_hqTfFMXuP9zvqCeq2zAAAAZM"]
[Fri Apr 03 23:50:01.602369 2026] [proxy_fcgi:error] [pid 55174:tid 55178] [client 45.92.1.144:63679] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 23:50:02.095480 2026] [proxy_fcgi:error] [pid 33446:tid 33487] [client 45.92.1.144:64447] AH01071: Got error 'Primary script unknown'
[Sat Apr 04 02:38:33.569776 2026] [:error] [pid 12233:tid 12240] [client 72.146.45.53:8534] [client 72.146.45.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adAJKRQDAzkmdfiSgI3oEwAAAQU"]
[Sat Apr 04 02:38:34.046672 2026] [:error] [pid 12081:tid 12124] [client 72.146.45.53:22289] [client 72.146.45.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adAJKqMJBCYerZTQdmIrYQAAAFg"]
[Sat Apr 04 05:05:30.382802 2026] [proxy_fcgi:error] [pid 2458:tid 2526] [client 20.91.195.29:25222] AH01071: Got error 'Primary script unknown'
[Sat Apr 04 05:05:30.648714 2026] [proxy_fcgi:error] [pid 2458:tid 2508] [client 20.91.195.29:25222] AH01071: Got error 'Primary script unknown'
[Sat Apr 04 05:05:30.914485 2026] [proxy_fcgi:error] [pid 2458:tid 2509] [client 20.91.195.29:25222] AH01071: Got error 'Primary script unknown'
[Sat Apr 04 05:05:31.182067 2026] [proxy_fcgi:error] [pid 2458:tid 2506] [client 20.91.195.29:25222] AH01071: Got error 'Primary script unknown'
[Sat Apr 04 07:04:47.266400 2026] [:error] [pid 37114:tid 37135] [client 45.92.1.112:56006] [client 45.92.1.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/"] [unique_id "adBHj8-DnSj3fGMexeKi8gAAARM"]
[Sat Apr 04 07:04:47.747481 2026] [:error] [pid 37114:tid 37123] [client 45.92.1.112:59515] [client 45.92.1.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/"] [unique_id "adBHj8-DnSj3fGMexeKi-gAAAQc"]
[Sat Apr 04 07:04:48.306892 2026] [:error] [pid 2458:tid 2510] [client 45.92.1.112:54864] [client 45.92.1.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/"] [unique_id "adBHkCNozic5SuWqcln0rwAAAEY"]
[Sat Apr 04 07:04:48.790188 2026] [:error] [pid 37114:tid 37122] [client 45.92.1.112:52125] [client 45.92.1.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/"] [unique_id "adBHkM-DnSj3fGMexeKjAQAAAQY"]
[Sat Apr 04 07:04:49.378767 2026] [:error] [pid 2567:tid 2593] [client 45.92.1.112:53601] [client 45.92.1.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/"] [unique_id "adBHkWJJmfRsTrAKjdSTYwAAANM"]
[Sun Apr 05 03:33:22.484501 2026] [proxy_fcgi:error] [pid 36699:tid 36721] [client 4.223.104.110:41203] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 06:37:29.085349 2026] [proxy_fcgi:error] [pid 45409:tid 45415] [client 74.248.146.253:25470] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 07:32:07.859184 2026] [proxy_fcgi:error] [pid 45305:tid 45384] [client 4.223.104.110:39452] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 07:32:08.124179 2026] [proxy_fcgi:error] [pid 45305:tid 45382] [client 4.223.104.110:39452] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 07:32:08.388923 2026] [proxy_fcgi:error] [pid 45305:tid 45386] [client 4.223.104.110:39452] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 07:32:08.655142 2026] [proxy_fcgi:error] [pid 45305:tid 45387] [client 4.223.104.110:39452] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 07:32:08.921552 2026] [proxy_fcgi:error] [pid 45305:tid 45383] [client 4.223.104.110:39452] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 07:32:09.186822 2026] [proxy_fcgi:error] [pid 45305:tid 45388] [client 4.223.104.110:39452] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 07:32:09.456937 2026] [proxy_fcgi:error] [pid 45305:tid 45395] [client 4.223.104.110:39452] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 07:32:09.727010 2026] [proxy_fcgi:error] [pid 45305:tid 45389] [client 4.223.104.110:39452] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 07:32:09.988833 2026] [:error] [pid 45305:tid 45381] [client 4.223.104.110:39452] [client 4.223.104.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Jcrop.php"] [unique_id "adGfeejDQjr7aWhjflBmCQAAAIo"]
[Sun Apr 05 07:32:10.589791 2026] [:error] [pid 30921:tid 30943] [client 4.223.104.110:13902] [client 4.223.104.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Jcrop.php"] [unique_id "adGfemFGQVn8Q0ueB26XsQAAARQ"]
[Sun Apr 05 07:32:11.129315 2026] [:error] [pid 45305:tid 45386] [client 4.223.104.110:11686] [client 4.223.104.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Jcrop.php"] [unique_id "adGfe-jDQjr7aWhjflBmCwAAAI8"]
[Sun Apr 05 07:32:11.768911 2026] [:error] [pid 45409:tid 45426] [client 4.223.104.110:13895] [client 4.223.104.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Jcrop.php"] [unique_id "adGfe9Ht_Oyw03gjCNgFMwAAAM8"]
[Sun Apr 05 07:32:12.410471 2026] [:error] [pid 45409:tid 45412] [client 4.223.104.110:35875] [client 4.223.104.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rh.php"] [unique_id "adGffNHt_Oyw03gjCNgFNwAAAME"]
[Sun Apr 05 07:32:13.055531 2026] [:error] [pid 45305:tid 45395] [client 4.223.104.110:13904] [client 4.223.104.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rh.php"] [unique_id "adGffejDQjr7aWhjflBmEAAAAJg"]
[Sun Apr 05 07:32:13.612268 2026] [:error] [pid 45305:tid 45371] [client 4.223.104.110:11664] [client 4.223.104.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rh.php"] [unique_id "adGffejDQjr7aWhjflBmFAAAAIA"]
[Sun Apr 05 07:32:14.416661 2026] [:error] [pid 45303:tid 45327] [client 4.223.104.110:18116] [client 4.223.104.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rh.php"] [unique_id "adGffrboQ9eViZ4hdnmkkgAAAAo"]
[Sun Apr 05 07:32:15.076616 2026] [:error] [pid 45409:tid 45420] [client 4.223.104.110:11680] [client 4.223.104.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/55l453.php"] [unique_id "adGff9Ht_Oyw03gjCNgFPQAAAMk"]
[Sun Apr 05 07:32:15.661724 2026] [:error] [pid 45305:tid 45376] [client 4.223.104.110:11665] [client 4.223.104.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/55l453.php"] [unique_id "adGff-jDQjr7aWhjflBmGwAAAIU"]
[Sun Apr 05 07:32:16.313079 2026] [:error] [pid 45409:tid 45422] [client 4.223.104.110:56403] [client 4.223.104.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/55l453.php"] [unique_id "adGfgNHt_Oyw03gjCNgFPgAAAMs"]
[Sun Apr 05 07:32:16.942343 2026] [:error] [pid 30921:tid 30942] [client 4.223.104.110:29077] [client 4.223.104.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/55l453.php"] [unique_id "adGfgGFGQVn8Q0ueB26XvgAAARM"]
[Sun Apr 05 07:32:17.720948 2026] [:error] [pid 45409:tid 45431] [client 4.223.104.110:29059] [client 4.223.104.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xx.php"] [unique_id "adGfgdHt_Oyw03gjCNgFQgAAANQ"]
[Sun Apr 05 07:32:18.332648 2026] [:error] [pid 45409:tid 45412] [client 4.223.104.110:18158] [client 4.223.104.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xx.php"] [unique_id "adGfgtHt_Oyw03gjCNgFRAAAAME"]
[Sun Apr 05 07:32:18.926144 2026] [:error] [pid 45303:tid 45323] [client 4.223.104.110:18143] [client 4.223.104.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xx.php"] [unique_id "adGfgrboQ9eViZ4hdnmklQAAAAY"]
[Sun Apr 05 07:32:19.718303 2026] [:error] [pid 45305:tid 45389] [client 4.223.104.110:29059] [client 4.223.104.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xx.php"] [unique_id "adGfg-jDQjr7aWhjflBmLwAAAJI"]
[Sun Apr 05 07:32:20.296521 2026] [:error] [pid 45305:tid 45373] [client 4.223.104.110:11687] [client 4.223.104.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bkyac.php"] [unique_id "adGfhOjDQjr7aWhjflBmMQAAAII"]
[Sun Apr 05 07:32:20.842840 2026] [:error] [pid 45304:tid 45350] [client 4.223.104.110:54133] [client 4.223.104.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bkyac.php"] [unique_id "adGfhA5jnqDKKovdRkkhkAAAAEY"]
[Sun Apr 05 07:32:21.383986 2026] [:error] [pid 45409:tid 45422] [client 4.223.104.110:13889] [client 4.223.104.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bkyac.php"] [unique_id "adGfhdHt_Oyw03gjCNgFSQAAAMs"]
[Sun Apr 05 07:32:21.959352 2026] [:error] [pid 45304:tid 45356] [client 4.223.104.110:56400] [client 4.223.104.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bkyac.php"] [unique_id "adGfhQ5jnqDKKovdRkkhlAAAAEw"]
[Sun Apr 05 07:32:22.651918 2026] [:error] [pid 45409:tid 45423] [client 4.223.104.110:18142] [client 4.223.104.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cilus.php"] [unique_id "adGfhtHt_Oyw03gjCNgFTgAAAMw"]
[Sun Apr 05 07:32:23.231977 2026] [:error] [pid 45409:tid 45425] [client 4.223.104.110:29069] [client 4.223.104.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cilus.php"] [unique_id "adGfh9Ht_Oyw03gjCNgFUQAAAM4"]
[Sun Apr 05 07:32:23.928809 2026] [:error] [pid 45409:tid 45428] [client 4.223.104.110:13923] [client 4.223.104.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cilus.php"] [unique_id "adGfh9Ht_Oyw03gjCNgFUwAAANE"]
[Sun Apr 05 07:32:24.715205 2026] [:error] [pid 45409:tid 45421] [client 4.223.104.110:54139] [client 4.223.104.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cilus.php"] [unique_id "adGfiNHt_Oyw03gjCNgFVQAAAMo"]
[Sun Apr 05 07:32:25.976664 2026] [:error] [pid 45304:tid 45358] [client 4.223.104.110:29087] [client 4.223.104.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/error_log.php"] [unique_id "adGfiQ5jnqDKKovdRkkhmwAAAE4"]
[Sun Apr 05 07:32:26.766503 2026] [:error] [pid 45305:tid 45384] [client 4.223.104.110:35893] [client 4.223.104.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/error_log.php"] [unique_id "adGfiujDQjr7aWhjflBmRwAAAI0"]
[Sun Apr 05 07:32:27.983845 2026] [:error] [pid 45305:tid 45371] [client 4.223.104.110:11696] [client 4.223.104.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/error_log.php"] [unique_id "adGfi-jDQjr7aWhjflBmUAAAAIA"]
[Sun Apr 05 07:32:28.766685 2026] [:error] [pid 45409:tid 45428] [client 4.223.104.110:39448] [client 4.223.104.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/error_log.php"] [unique_id "adGfjNHt_Oyw03gjCNgFXQAAANE"]
[Sun Apr 05 07:32:29.811863 2026] [:error] [pid 45409:tid 45427] [client 4.223.104.110:56420] [client 4.223.104.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/HLA-dd.php"] [unique_id "adGfjdHt_Oyw03gjCNgFYQAAANA"]
[Sun Apr 05 07:32:31.105519 2026] [:error] [pid 45305:tid 45393] [client 4.223.104.110:35861] [client 4.223.104.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/HLA-dd.php"] [unique_id "adGfj-jDQjr7aWhjflBmVQAAAJY"]
[Sun Apr 05 07:32:32.351210 2026] [:error] [pid 45409:tid 45421] [client 4.223.104.110:54118] [client 4.223.104.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/HLA-dd.php"] [unique_id "adGfkNHt_Oyw03gjCNgFagAAAMo"]
[Sun Apr 05 07:32:33.302874 2026] [:error] [pid 45409:tid 45422] [client 4.223.104.110:29112] [client 4.223.104.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/HLA-dd.php"] [unique_id "adGfkdHt_Oyw03gjCNgFcAAAAMs"]
[Sun Apr 05 07:32:33.929167 2026] [:error] [pid 45409:tid 45412] [client 4.223.104.110:11650] [client 4.223.104.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wsc.php"] [unique_id "adGfkdHt_Oyw03gjCNgFcQAAAME"]
[Sun Apr 05 07:32:34.545798 2026] [:error] [pid 45303:tid 45324] [client 4.223.104.110:56436] [client 4.223.104.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wsc.php"] [unique_id "adGfkrboQ9eViZ4hdnmkogAAAAc"]
[Sun Apr 05 07:32:35.132221 2026] [:error] [pid 45305:tid 45386] [client 4.223.104.110:11705] [client 4.223.104.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wsc.php"] [unique_id "adGfk-jDQjr7aWhjflBmXgAAAI8"]
[Sun Apr 05 07:32:35.736573 2026] [:error] [pid 45304:tid 45357] [client 4.223.104.110:54130] [client 4.223.104.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wsc.php"] [unique_id "adGfkw5jnqDKKovdRkkhogAAAE0"]
[Sun Apr 05 07:32:36.535642 2026] [:error] [pid 45305:tid 45388] [client 4.223.104.110:29066] [client 4.223.104.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-lvminl.php"] [unique_id "adGflOjDQjr7aWhjflBmYwAAAJE"]
[Sun Apr 05 07:32:37.694016 2026] [:error] [pid 45409:tid 45412] [client 4.223.104.110:29111] [client 4.223.104.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-lvminl.php"] [unique_id "adGfldHt_Oyw03gjCNgFewAAAME"]
[Sun Apr 05 07:32:38.425911 2026] [:error] [pid 45305:tid 45374] [client 4.223.104.110:18123] [client 4.223.104.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-lvminl.php"] [unique_id "adGflujDQjr7aWhjflBmaAAAAIM"]
[Sun Apr 05 07:32:38.996182 2026] [:error] [pid 45305:tid 45389] [client 4.223.104.110:54096] [client 4.223.104.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-lvminl.php"] [unique_id "adGflujDQjr7aWhjflBmawAAAJI"]
[Sun Apr 05 07:32:39.700001 2026] [:error] [pid 45409:tid 45413] [client 4.223.104.110:11700] [client 4.223.104.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ww.php"] [unique_id "adGfl9Ht_Oyw03gjCNgFgAAAAMI"]
[Sun Apr 05 07:32:40.336329 2026] [:error] [pid 45305:tid 45390] [client 4.223.104.110:13947] [client 4.223.104.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ww.php"] [unique_id "adGfmOjDQjr7aWhjflBmdAAAAJM"]
[Sun Apr 05 07:32:40.869830 2026] [:error] [pid 30921:tid 30943] [client 4.223.104.110:29075] [client 4.223.104.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ww.php"] [unique_id "adGfmGFGQVn8Q0ueB26XzwAAARQ"]
[Sun Apr 05 07:32:41.464042 2026] [:error] [pid 45305:tid 45388] [client 4.223.104.110:39443] [client 4.223.104.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ww.php"] [unique_id "adGfmejDQjr7aWhjflBmeQAAAJE"]
[Sun Apr 05 07:32:42.033524 2026] [:error] [pid 45305:tid 45372] [client 4.223.104.110:56440] [client 4.223.104.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dczem.php"] [unique_id "adGfmujDQjr7aWhjflBmegAAAIE"]
[Sun Apr 05 07:32:42.595587 2026] [:error] [pid 45305:tid 45383] [client 4.223.104.110:18163] [client 4.223.104.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dczem.php"] [unique_id "adGfmujDQjr7aWhjflBmfQAAAIw"]
[Sun Apr 05 07:32:43.274123 2026] [:error] [pid 45303:tid 45340] [client 4.223.104.110:56424] [client 4.223.104.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dczem.php"] [unique_id "adGfm7boQ9eViZ4hdnmkpwAAABc"]
[Sun Apr 05 07:32:44.218917 2026] [:error] [pid 45409:tid 45429] [client 4.223.104.110:56429] [client 4.223.104.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dczem.php"] [unique_id "adGfnNHt_Oyw03gjCNgFiQAAANI"]
[Sun Apr 05 07:32:45.627451 2026] [:error] [pid 45305:tid 45388] [client 4.223.104.110:54134] [client 4.223.104.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/albrt.php"] [unique_id "adGfnejDQjr7aWhjflBmhQAAAJE"]
[Sun Apr 05 07:32:46.472933 2026] [:error] [pid 45305:tid 45382] [client 4.223.104.110:11682] [client 4.223.104.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/albrt.php"] [unique_id "adGfnujDQjr7aWhjflBmhwAAAIs"]
[Sun Apr 05 07:32:47.957354 2026] [:error] [pid 45305:tid 45372] [client 4.223.104.110:13891] [client 4.223.104.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/albrt.php"] [unique_id "adGfn-jDQjr7aWhjflBmmAAAAIE"]
[Sun Apr 05 07:32:49.701076 2026] [:error] [pid 45409:tid 45426] [client 4.223.104.110:29105] [client 4.223.104.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/albrt.php"] [unique_id "adGfodHt_Oyw03gjCNgFlwAAAM8"]
[Sun Apr 05 09:25:06.050052 2026] [proxy_fcgi:error] [pid 45303:tid 45339] [client 4.225.160.61:30991] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 09:25:06.317566 2026] [proxy_fcgi:error] [pid 45303:tid 45318] [client 4.225.160.61:30991] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 09:25:06.586836 2026] [proxy_fcgi:error] [pid 45303:tid 45341] [client 4.225.160.61:30991] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 09:25:06.858163 2026] [proxy_fcgi:error] [pid 45303:tid 45326] [client 4.225.160.61:30991] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 09:25:07.125806 2026] [proxy_fcgi:error] [pid 45303:tid 45324] [client 4.225.160.61:30991] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 09:25:07.414856 2026] [proxy_fcgi:error] [pid 45303:tid 45336] [client 4.225.160.61:30991] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 09:25:07.693889 2026] [proxy_fcgi:error] [pid 45303:tid 45335] [client 4.225.160.61:30991] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 09:25:07.960687 2026] [proxy_fcgi:error] [pid 45303:tid 45331] [client 4.225.160.61:30991] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 09:25:08.228594 2026] [proxy_fcgi:error] [pid 45303:tid 45317] [client 4.225.160.61:30991] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 09:25:08.496330 2026] [proxy_fcgi:error] [pid 45303:tid 45328] [client 4.225.160.61:30991] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 09:25:08.768201 2026] [:error] [pid 45303:tid 45332] [client 4.225.160.61:30991] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xwx1.php"] [unique_id "adG59LboQ9eViZ4hdnnH7wAAAA8"]
[Sun Apr 05 09:25:11.011436 2026] [:error] [pid 45304:tid 45361] [client 4.225.160.61:8243] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xwx1.php"] [unique_id "adG59w5jnqDKKovdRklANgAAAFE"]
[Sun Apr 05 09:25:17.322129 2026] [:error] [pid 45305:tid 45380] [client 4.225.160.61:31751] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xwx1.php"] [unique_id "adG5_ejDQjr7aWhjflC7OgAAAIk"]
[Sun Apr 05 09:25:19.812137 2026] [:error] [pid 45305:tid 45384] [client 4.225.160.61:4472] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xwx1.php"] [unique_id "adG5_-jDQjr7aWhjflC7TgAAAI0"]
[Sun Apr 05 09:25:22.196439 2026] [:error] [pid 45305:tid 45395] [client 4.225.160.61:13858] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bolt.php"] [unique_id "adG6AujDQjr7aWhjflC7WQAAAJg"]
[Sun Apr 05 09:25:23.723917 2026] [:error] [pid 45305:tid 45388] [client 4.225.160.61:43552] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bolt.php"] [unique_id "adG6A-jDQjr7aWhjflC7YwAAAJE"]
[Sun Apr 05 09:25:26.265390 2026] [:error] [pid 45409:tid 45411] [client 4.225.160.61:43532] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bolt.php"] [unique_id "adG6BtHt_Oyw03gjCNhCLgAAAMA"]
[Sun Apr 05 09:25:29.467937 2026] [:error] [pid 30921:tid 30932] [client 4.225.160.61:9392] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bolt.php"] [unique_id "adG6CWFGQVn8Q0ueB27C9QAAAQk"]
[Sun Apr 05 09:25:31.389420 2026] [:error] [pid 45305:tid 45387] [client 4.225.160.61:3046] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Sanskrit.php"] [unique_id "adG6C-jDQjr7aWhjflC7hQAAAJA"]
[Sun Apr 05 09:25:32.280519 2026] [:error] [pid 45305:tid 45384] [client 4.225.160.61:43563] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Sanskrit.php"] [unique_id "adG6DOjDQjr7aWhjflC7igAAAI0"]
[Sun Apr 05 09:25:33.278882 2026] [:error] [pid 45409:tid 45428] [client 4.225.160.61:37056] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Sanskrit.php"] [unique_id "adG6DdHt_Oyw03gjCNhCOQAAANE"]
[Sun Apr 05 09:25:34.882481 2026] [:error] [pid 30921:tid 30937] [client 4.225.160.61:12579] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Sanskrit.php"] [unique_id "adG6DmFGQVn8Q0ueB27DBAAAAQ4"]
[Sun Apr 05 09:25:37.064439 2026] [:error] [pid 30921:tid 30925] [client 4.225.160.61:44721] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adG6EWFGQVn8Q0ueB27DCgAAAQI"]
[Sun Apr 05 09:25:38.598347 2026] [:error] [pid 30921:tid 30924] [client 4.225.160.61:18589] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adG6EmFGQVn8Q0ueB27DEAAAAQE"]
[Sun Apr 05 09:25:40.572797 2026] [:error] [pid 45305:tid 45373] [client 4.225.160.61:44210] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adG6FOjDQjr7aWhjflC7tQAAAII"]
[Sun Apr 05 09:25:41.711795 2026] [:error] [pid 45305:tid 45391] [client 4.225.160.61:44691] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adG6FejDQjr7aWhjflC7uAAAAJQ"]
[Sun Apr 05 09:25:43.286172 2026] [:error] [pid 45303:tid 45323] [client 4.225.160.61:10192] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws88.php"] [unique_id "adG6F7boQ9eViZ4hdnnIBQAAAAY"]
[Sun Apr 05 09:25:45.672284 2026] [:error] [pid 30921:tid 30930] [client 4.225.160.61:21592] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws88.php"] [unique_id "adG6GWFGQVn8Q0ueB27DJgAAAQc"]
[Sun Apr 05 09:25:46.868146 2026] [:error] [pid 45303:tid 45341] [client 4.225.160.61:3032] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws88.php"] [unique_id "adG6GrboQ9eViZ4hdnnICgAAABg"]
[Sun Apr 05 09:25:48.629084 2026] [:error] [pid 45305:tid 45391] [client 4.225.160.61:9447] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws88.php"] [unique_id "adG6HOjDQjr7aWhjflC7zAAAAJQ"]
[Sun Apr 05 09:25:51.142068 2026] [:error] [pid 45305:tid 45375] [client 4.225.160.61:17557] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "adG6H-jDQjr7aWhjflC72gAAAIQ"]
[Sun Apr 05 09:25:53.783124 2026] [:error] [pid 45303:tid 45323] [client 4.225.160.61:44777] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "adG6IbboQ9eViZ4hdnnIEgAAAAY"]
[Sun Apr 05 09:25:56.520960 2026] [:error] [pid 30921:tid 30943] [client 4.225.160.61:26028] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "adG6JGFGQVn8Q0ueB27DNAAAARQ"]
[Sun Apr 05 09:25:57.757841 2026] [:error] [pid 45304:tid 45364] [client 4.225.160.61:26003] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "adG6JQ5jnqDKKovdRklAUwAAAFQ"]
[Sun Apr 05 09:26:00.770601 2026] [:error] [pid 45409:tid 45428] [client 4.225.160.61:13378] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/CDX1.php"] [unique_id "adG6KNHt_Oyw03gjCNhCdwAAANE"]
[Sun Apr 05 09:26:01.808936 2026] [:error] [pid 45303:tid 45335] [client 4.225.160.61:29201] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/CDX1.php"] [unique_id "adG6KbboQ9eViZ4hdnnIGQAAABI"]
[Sun Apr 05 09:26:04.843680 2026] [:error] [pid 45304:tid 45344] [client 4.225.160.61:10745] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/CDX1.php"] [unique_id "adG6LA5jnqDKKovdRklAWAAAAEA"]
[Sun Apr 05 09:26:06.677094 2026] [:error] [pid 45305:tid 45384] [client 4.225.160.61:31871] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/CDX1.php"] [unique_id "adG6LujDQjr7aWhjflC8DwAAAI0"]
[Sun Apr 05 09:26:08.716188 2026] [proxy_fcgi:error] [pid 30921:tid 30947] [client 4.225.160.61:45793] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 09:26:08.981006 2026] [proxy_fcgi:error] [pid 30921:tid 30932] [client 4.225.160.61:45793] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 09:26:09.246579 2026] [proxy_fcgi:error] [pid 30921:tid 30946] [client 4.225.160.61:45793] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 09:26:10.795344 2026] [proxy_fcgi:error] [pid 30921:tid 30942] [client 4.225.160.61:45793] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 09:26:11.077969 2026] [proxy_fcgi:error] [pid 30921:tid 30943] [client 4.225.160.61:45793] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 09:26:11.348857 2026] [proxy_fcgi:error] [pid 30921:tid 30925] [client 4.225.160.61:45793] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 09:26:11.800172 2026] [proxy_fcgi:error] [pid 30921:tid 30934] [client 4.225.160.61:45793] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 09:26:12.066600 2026] [proxy_fcgi:error] [pid 30921:tid 30931] [client 4.225.160.61:45793] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 09:26:12.331815 2026] [proxy_fcgi:error] [pid 30921:tid 30927] [client 4.225.160.61:45793] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 09:26:12.617096 2026] [proxy_fcgi:error] [pid 30921:tid 30939] [client 4.225.160.61:45793] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 09:26:12.882628 2026] [proxy_fcgi:error] [pid 30921:tid 30946] [client 4.225.160.61:45793] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 09:26:13.144806 2026] [:error] [pid 30921:tid 30932] [client 4.225.160.61:45793] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/classwithtostring.php"] [unique_id "adG6NWFGQVn8Q0ueB27DXgAAAQk"]
[Sun Apr 05 09:26:15.188970 2026] [:error] [pid 45304:tid 45359] [client 4.225.160.61:15138] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/classwithtostring.php"] [unique_id "adG6Nw5jnqDKKovdRklAZwAAAE8"]
[Sun Apr 05 09:26:17.980993 2026] [:error] [pid 30921:tid 30932] [client 4.225.160.61:44275] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/classwithtostring.php"] [unique_id "adG6OWFGQVn8Q0ueB27DagAAAQk"]
[Sun Apr 05 09:26:22.492874 2026] [:error] [pid 45409:tid 45413] [client 4.225.160.61:12618] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/classwithtostring.php"] [unique_id "adG6PtHt_Oyw03gjCNhCpwAAAMI"]
[Sun Apr 05 09:26:24.159511 2026] [:error] [pid 45409:tid 45421] [client 4.225.160.61:2881] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kj.php"] [unique_id "adG6QNHt_Oyw03gjCNhCqQAAAMo"]
[Sun Apr 05 09:26:29.691517 2026] [:error] [pid 45409:tid 45426] [client 4.225.160.61:12615] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kj.php"] [unique_id "adG6RdHt_Oyw03gjCNhCvAAAAM8"]
[Sun Apr 05 09:26:31.328652 2026] [:error] [pid 45409:tid 45426] [client 4.225.160.61:37027] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kj.php"] [unique_id "adG6R9Ht_Oyw03gjCNhCxgAAAM8"]
[Sun Apr 05 09:26:32.574984 2026] [:error] [pid 30921:tid 30938] [client 4.225.160.61:17504] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kj.php"] [unique_id "adG6SGFGQVn8Q0ueB27DkAAAAQ8"]
[Sun Apr 05 09:26:34.320497 2026] [:error] [pid 45305:tid 45392] [client 4.225.160.61:9656] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws85.php"] [unique_id "adG6SujDQjr7aWhjflC8YwAAAJU"]
[Sun Apr 05 09:26:35.882599 2026] [:error] [pid 45305:tid 45371] [client 4.225.160.61:17478] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws85.php"] [unique_id "adG6S-jDQjr7aWhjflC8cgAAAIA"]
[Sun Apr 05 09:26:37.040111 2026] [:error] [pid 45305:tid 45380] [client 4.225.160.61:2921] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws85.php"] [unique_id "adG6TejDQjr7aWhjflC8hwAAAIk"]
[Sun Apr 05 09:26:40.052194 2026] [:error] [pid 45304:tid 45357] [client 4.225.160.61:2569] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws85.php"] [unique_id "adG6UA5jnqDKKovdRklAdAAAAE0"]
[Sun Apr 05 09:26:43.050535 2026] [:error] [pid 45305:tid 45382] [client 4.225.160.61:2601] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-png.php"] [unique_id "adG6U-jDQjr7aWhjflC8rgAAAIs"]
[Sun Apr 05 09:26:46.587004 2026] [:error] [pid 30921:tid 30942] [client 4.225.160.61:2645] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-png.php"] [unique_id "adG6VmFGQVn8Q0ueB27DowAAARM"]
[Sun Apr 05 09:26:48.053324 2026] [:error] [pid 30921:tid 30938] [client 4.225.160.61:2583] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-png.php"] [unique_id "adG6WGFGQVn8Q0ueB27DpAAAAQ8"]
[Sun Apr 05 09:26:50.513147 2026] [:error] [pid 45303:tid 45318] [client 4.225.160.61:16041] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-png.php"] [unique_id "adG6WrboQ9eViZ4hdnnIawAAAAE"]
[Sun Apr 05 09:26:52.366023 2026] [:error] [pid 45409:tid 45417] [client 4.225.160.61:8417] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/666.php"] [unique_id "adG6XNHt_Oyw03gjCNhC3AAAAMY"]
[Sun Apr 05 09:26:53.588097 2026] [:error] [pid 45305:tid 45383] [client 4.225.160.61:13112] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/666.php"] [unique_id "adG6XejDQjr7aWhjflC8wQAAAIw"]
[Sun Apr 05 09:26:55.181860 2026] [:error] [pid 45305:tid 45371] [client 4.225.160.61:8412] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/666.php"] [unique_id "adG6X-jDQjr7aWhjflC8yQAAAIA"]
[Sun Apr 05 09:26:57.590286 2026] [:error] [pid 45409:tid 45434] [client 4.225.160.61:25525] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/666.php"] [unique_id "adG6YdHt_Oyw03gjCNhC6AAAANc"]
[Sun Apr 05 09:27:01.236974 2026] [:error] [pid 45305:tid 45391] [client 4.225.160.61:16003] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/b4txckoieeyhynhsrpi9lCdefault.php"] [unique_id "adG6ZejDQjr7aWhjflC8zgAAAJQ"]
[Sun Apr 05 09:27:05.320013 2026] [:error] [pid 45303:tid 45319] [client 4.225.160.61:2627] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/b4txckoieeyhynhsrpi9lCdefault.php"] [unique_id "adG6abboQ9eViZ4hdnnIfQAAAAI"]
[Sun Apr 05 09:27:08.583281 2026] [:error] [pid 30921:tid 30934] [client 4.225.160.61:8314] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/b4txckoieeyhynhsrpi9lCdefault.php"] [unique_id "adG6bGFGQVn8Q0ueB27DywAAAQs"]
[Sun Apr 05 09:27:10.144179 2026] [:error] [pid 45304:tid 45366] [client 4.225.160.61:14568] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/b4txckoieeyhynhsrpi9lCdefault.php"] [unique_id "adG6bg5jnqDKKovdRklAtAAAAFY"]
[Sun Apr 05 09:27:10.975701 2026] [:error] [pid 30921:tid 30935] [client 4.225.160.61:36517] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/amax.php"] [unique_id "adG6bmFGQVn8Q0ueB27D1AAAAQw"]
[Sun Apr 05 09:27:11.730766 2026] [:error] [pid 30921:tid 30925] [client 4.225.160.61:13343] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/amax.php"] [unique_id "adG6b2FGQVn8Q0ueB27D1QAAAQI"]
[Sun Apr 05 09:27:13.048024 2026] [proxy_fcgi:error] [pid 45305:tid 45394] [client 4.225.160.61:23333] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 09:27:13.586351 2026] [proxy_fcgi:error] [pid 45305:tid 45390] [client 4.225.160.61:23333] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 09:27:13.854883 2026] [proxy_fcgi:error] [pid 45305:tid 45374] [client 4.225.160.61:23333] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 09:27:14.131472 2026] [proxy_fcgi:error] [pid 45305:tid 45375] [client 4.225.160.61:23333] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 09:27:14.411905 2026] [proxy_fcgi:error] [pid 45305:tid 45382] [client 4.225.160.61:23333] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 09:27:14.692750 2026] [proxy_fcgi:error] [pid 45305:tid 45376] [client 4.225.160.61:23333] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 09:27:14.976002 2026] [proxy_fcgi:error] [pid 45305:tid 45379] [client 4.225.160.61:23333] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 09:27:15.244393 2026] [proxy_fcgi:error] [pid 45305:tid 45372] [client 4.225.160.61:23333] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 09:27:15.521976 2026] [proxy_fcgi:error] [pid 45305:tid 45394] [client 4.225.160.61:23333] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 09:27:15.806455 2026] [proxy_fcgi:error] [pid 45305:tid 45384] [client 4.225.160.61:23333] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 09:27:16.069782 2026] [:error] [pid 45305:tid 45390] [client 4.225.160.61:23333] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "adG6dOjDQjr7aWhjflC9BQAAAJM"]
[Sun Apr 05 09:27:18.741793 2026] [:error] [pid 45304:tid 45362] [client 4.225.160.61:19091] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "adG6dg5jnqDKKovdRklA1AAAAFI"]
[Sun Apr 05 09:27:22.383069 2026] [:error] [pid 45304:tid 45356] [client 4.225.160.61:26719] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "adG6eg5jnqDKKovdRklA4QAAAEw"]
[Sun Apr 05 09:27:28.329188 2026] [:error] [pid 45409:tid 45431] [client 4.225.160.61:25483] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "adG6gNHt_Oyw03gjCNhDLQAAANQ"]
[Sun Apr 05 09:27:30.203607 2026] [:error] [pid 45305:tid 45373] [client 4.225.160.61:25484] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wlld5fjtdpjmjhsds3qzmipfCdefault.php"] [unique_id "adG6gujDQjr7aWhjflC9NwAAAII"]
[Sun Apr 05 09:27:32.050112 2026] [:error] [pid 45409:tid 45411] [client 4.225.160.61:26713] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wlld5fjtdpjmjhsds3qzmipfCdefault.php"] [unique_id "adG6hNHt_Oyw03gjCNhDOQAAAMA"]
[Sun Apr 05 09:27:32.876934 2026] [:error] [pid 45304:tid 45358] [client 4.225.160.61:9871] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wlld5fjtdpjmjhsds3qzmipfCdefault.php"] [unique_id "adG6hA5jnqDKKovdRklA9QAAAE4"]
[Sun Apr 05 09:27:34.506084 2026] [:error] [pid 45409:tid 45416] [client 4.225.160.61:16013] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wlld5fjtdpjmjhsds3qzmipfCdefault.php"] [unique_id "adG6htHt_Oyw03gjCNhDRgAAAMU"]
[Sun Apr 05 09:27:37.818485 2026] [:error] [pid 30921:tid 30933] [client 4.225.160.61:2224] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tfm.php"] [unique_id "adG6iWFGQVn8Q0ueB27EDwAAAQo"]
[Sun Apr 05 09:27:39.008874 2026] [:error] [pid 45303:tid 45321] [client 4.225.160.61:2197] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tfm.php"] [unique_id "adG6i7boQ9eViZ4hdnnIvgAAAAQ"]
[Sun Apr 05 09:27:40.654309 2026] [:error] [pid 45305:tid 45371] [client 4.225.160.61:2338] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tfm.php"] [unique_id "adG6jOjDQjr7aWhjflC9VwAAAIA"]
[Sun Apr 05 09:27:42.758746 2026] [:error] [pid 45305:tid 45379] [client 4.225.160.61:9867] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tfm.php"] [unique_id "adG6jujDQjr7aWhjflC9YgAAAIg"]
[Sun Apr 05 09:27:48.016103 2026] [:error] [pid 45409:tid 45420] [client 4.225.160.61:13351] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lib.php"] [unique_id "adG6lNHt_Oyw03gjCNhDXwAAAMk"]
[Sun Apr 05 09:27:49.903357 2026] [:error] [pid 45305:tid 45379] [client 4.225.160.61:24968] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lib.php"] [unique_id "adG6lejDQjr7aWhjflC9fAAAAIg"]
[Sun Apr 05 09:27:52.825925 2026] [:error] [pid 45305:tid 45388] [client 4.225.160.61:26734] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lib.php"] [unique_id "adG6mOjDQjr7aWhjflC9igAAAJE"]
[Sun Apr 05 09:27:54.700071 2026] [:error] [pid 45409:tid 45435] [client 4.225.160.61:11545] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lib.php"] [unique_id "adG6mtHt_Oyw03gjCNhDagAAANg"]
[Sun Apr 05 09:27:56.895951 2026] [:error] [pid 30921:tid 30944] [client 4.225.160.61:35298] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rithin.php"] [unique_id "adG6nGFGQVn8Q0ueB27ENQAAARU"]
[Sun Apr 05 09:28:01.276749 2026] [:error] [pid 30921:tid 30941] [client 4.225.160.61:13341] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rithin.php"] [unique_id "adG6oWFGQVn8Q0ueB27EQAAAARI"]
[Sun Apr 05 09:28:03.805386 2026] [:error] [pid 45305:tid 45392] [client 4.225.160.61:35271] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rithin.php"] [unique_id "adG6o-jDQjr7aWhjflC9rAAAAJU"]
[Sun Apr 05 09:28:07.092430 2026] [:error] [pid 45305:tid 45387] [client 4.225.160.61:13355] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rithin.php"] [unique_id "adG6p-jDQjr7aWhjflC9uwAAAJA"]
[Sun Apr 05 09:28:12.813811 2026] [:error] [pid 45305:tid 45372] [client 4.225.160.61:35732] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/q7lhrgzoo7ijhnkcedq2Cdefault.php"] [unique_id "adG6rOjDQjr7aWhjflC92wAAAIE"]
[Sun Apr 05 09:28:16.744407 2026] [proxy_fcgi:error] [pid 45303:tid 45329] [client 4.225.160.61:35718] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 09:28:17.010200 2026] [proxy_fcgi:error] [pid 45303:tid 45327] [client 4.225.160.61:35718] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 09:28:17.275879 2026] [proxy_fcgi:error] [pid 45303:tid 45341] [client 4.225.160.61:35718] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 09:28:18.117720 2026] [proxy_fcgi:error] [pid 45303:tid 45320] [client 4.225.160.61:35718] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 09:28:18.383740 2026] [proxy_fcgi:error] [pid 45303:tid 45338] [client 4.225.160.61:35718] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 09:28:18.672808 2026] [proxy_fcgi:error] [pid 45303:tid 45324] [client 4.225.160.61:35718] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 09:28:18.938250 2026] [proxy_fcgi:error] [pid 45303:tid 45323] [client 4.225.160.61:35718] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 09:28:19.216062 2026] [proxy_fcgi:error] [pid 45303:tid 45321] [client 4.225.160.61:35718] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 09:28:19.481599 2026] [proxy_fcgi:error] [pid 45303:tid 45334] [client 4.225.160.61:35718] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 09:28:19.767851 2026] [proxy_fcgi:error] [pid 45303:tid 45336] [client 4.225.160.61:35718] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 09:28:20.041446 2026] [proxy_fcgi:error] [pid 45303:tid 45326] [client 4.225.160.61:35718] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 09:28:20.306687 2026] [:error] [pid 45303:tid 45335] [client 4.225.160.61:35718] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-good.php"] [unique_id "adG6tLboQ9eViZ4hdnnJFQAAABI"]
[Sun Apr 05 09:28:23.466668 2026] [:error] [pid 45305:tid 45371] [client 4.225.160.61:35715] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-good.php"] [unique_id "adG6t-jDQjr7aWhjflC-CwAAAIA"]
[Sun Apr 05 09:28:25.528238 2026] [:error] [pid 45305:tid 45376] [client 4.225.160.61:27280] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-good.php"] [unique_id "adG6uejDQjr7aWhjflC-EgAAAIU"]
[Sun Apr 05 09:28:27.444413 2026] [:error] [pid 45409:tid 45430] [client 4.225.160.61:11598] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-good.php"] [unique_id "adG6u9Ht_Oyw03gjCNhDxwAAANM"]
[Sun Apr 05 09:28:29.384691 2026] [:error] [pid 45305:tid 45391] [client 4.225.160.61:12324] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zoper1.php"] [unique_id "adG6vejDQjr7aWhjflC-HQAAAJQ"]
[Sun Apr 05 09:28:31.750989 2026] [:error] [pid 45305:tid 45371] [client 4.225.160.61:41623] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zoper1.php"] [unique_id "adG6v-jDQjr7aWhjflC-KgAAAIA"]
[Sun Apr 05 09:28:34.157974 2026] [:error] [pid 45409:tid 45430] [client 4.225.160.61:31771] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zoper1.php"] [unique_id "adG6wtHt_Oyw03gjCNhD0wAAANM"]
[Sun Apr 05 09:28:36.035588 2026] [:error] [pid 30921:tid 30945] [client 4.225.160.61:30354] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zoper1.php"] [unique_id "adG6xGFGQVn8Q0ueB27EjQAAARY"]
[Sun Apr 05 09:28:37.698848 2026] [:error] [pid 45305:tid 45385] [client 4.225.160.61:27277] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/5xkfgawzejgwqh9hiaznCdefault.php"] [unique_id "adG6xejDQjr7aWhjflC-SAAAAI4"]
[Sun Apr 05 09:28:40.096512 2026] [:error] [pid 45303:tid 45323] [client 4.225.160.61:10431] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/5xkfgawzejgwqh9hiaznCdefault.php"] [unique_id "adG6yLboQ9eViZ4hdnnJJQAAAAY"]
[Sun Apr 05 09:28:41.110151 2026] [:error] [pid 45305:tid 45386] [client 4.225.160.61:8607] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/5xkfgawzejgwqh9hiaznCdefault.php"] [unique_id "adG6yejDQjr7aWhjflC-ZAAAAI8"]
[Sun Apr 05 09:28:42.030519 2026] [:error] [pid 45409:tid 45430] [client 4.225.160.61:11218] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/5xkfgawzejgwqh9hiaznCdefault.php"] [unique_id "adG6ytHt_Oyw03gjCNhD3QAAANM"]
[Sun Apr 05 09:28:42.771148 2026] [:error] [pid 45304:tid 45347] [client 4.225.160.61:13615] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gifclass.php"] [unique_id "adG6yg5jnqDKKovdRklBVAAAAEM"]
[Sun Apr 05 09:28:43.740047 2026] [:error] [pid 45304:tid 45355] [client 4.225.160.61:8584] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gifclass.php"] [unique_id "adG6yw5jnqDKKovdRklBVgAAAEs"]
[Sun Apr 05 09:28:44.995419 2026] [:error] [pid 45305:tid 45383] [client 4.225.160.61:13605] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gifclass.php"] [unique_id "adG6zOjDQjr7aWhjflC-dQAAAIw"]
[Sun Apr 05 09:28:46.476260 2026] [:error] [pid 45305:tid 45374] [client 4.225.160.61:11250] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gifclass.php"] [unique_id "adG6zujDQjr7aWhjflC-fwAAAIM"]
[Sun Apr 05 09:28:47.856447 2026] [:error] [pid 45305:tid 45373] [client 4.225.160.61:35252] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gptsh.php"] [unique_id "adG6z-jDQjr7aWhjflC-gQAAAII"]
[Sun Apr 05 09:28:49.081975 2026] [:error] [pid 45303:tid 45323] [client 4.225.160.61:22268] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gptsh.php"] [unique_id "adG60bboQ9eViZ4hdnnJMAAAAAY"]
[Sun Apr 05 09:28:51.680676 2026] [:error] [pid 30921:tid 30928] [client 4.225.160.61:27849] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gptsh.php"] [unique_id "adG602FGQVn8Q0ueB27EogAAAQU"]
[Sun Apr 05 09:28:53.388561 2026] [:error] [pid 45409:tid 45411] [client 4.225.160.61:22759] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gptsh.php"] [unique_id "adG61dHt_Oyw03gjCNhD-QAAAMA"]
[Sun Apr 05 09:28:54.861550 2026] [:error] [pid 45409:tid 45435] [client 4.225.160.61:11209] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/new3.php"] [unique_id "adG61tHt_Oyw03gjCNhD-wAAANg"]
[Sun Apr 05 09:28:56.812904 2026] [:error] [pid 30921:tid 30923] [client 4.225.160.61:10445] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/new3.php"] [unique_id "adG62GFGQVn8Q0ueB27EugAAAQA"]
[Sun Apr 05 09:28:59.982187 2026] [:error] [pid 45409:tid 45435] [client 4.225.160.61:14786] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/new3.php"] [unique_id "adG629Ht_Oyw03gjCNhECgAAANg"]
[Sun Apr 05 09:29:01.848826 2026] [:error] [pid 45305:tid 45390] [client 4.225.160.61:10485] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/new3.php"] [unique_id "adG63ejDQjr7aWhjflC-xwAAAJM"]
[Sun Apr 05 09:29:04.782232 2026] [:error] [pid 30921:tid 30938] [client 4.225.160.61:33660] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp5.php"] [unique_id "adG64GFGQVn8Q0ueB27E0QAAAQ8"]
[Sun Apr 05 09:29:06.465383 2026] [:error] [pid 45409:tid 45416] [client 4.225.160.61:13133] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp5.php"] [unique_id "adG64tHt_Oyw03gjCNhEHwAAAMU"]
[Sun Apr 05 09:29:11.127019 2026] [:error] [pid 45305:tid 45379] [client 4.225.160.61:15510] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp5.php"] [unique_id "adG65-jDQjr7aWhjflC-7gAAAIg"]
[Sun Apr 05 09:29:14.968813 2026] [:error] [pid 45305:tid 45385] [client 4.225.160.61:40762] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp5.php"] [unique_id "adG66ujDQjr7aWhjflC-9wAAAI4"]
[Sun Apr 05 09:29:16.930074 2026] [:error] [pid 45303:tid 45317] [client 4.225.160.61:41057] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws87.php"] [unique_id "adG67LboQ9eViZ4hdnnJVwAAAAA"]
[Sun Apr 05 09:29:20.106271 2026] [proxy_fcgi:error] [pid 45303:tid 45329] [client 4.225.160.61:8196] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 09:29:20.376897 2026] [proxy_fcgi:error] [pid 45303:tid 45324] [client 4.225.160.61:8196] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 09:29:20.643769 2026] [proxy_fcgi:error] [pid 45303:tid 45333] [client 4.225.160.61:8196] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 09:29:21.300008 2026] [proxy_fcgi:error] [pid 45303:tid 45338] [client 4.225.160.61:8196] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 09:29:21.581069 2026] [proxy_fcgi:error] [pid 45303:tid 45334] [client 4.225.160.61:8196] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 09:29:21.852993 2026] [proxy_fcgi:error] [pid 45303:tid 45340] [client 4.225.160.61:8196] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 09:29:22.117312 2026] [proxy_fcgi:error] [pid 45303:tid 45330] [client 4.225.160.61:8196] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 09:29:22.406880 2026] [proxy_fcgi:error] [pid 45303:tid 45327] [client 4.225.160.61:8196] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 09:29:22.707074 2026] [proxy_fcgi:error] [pid 45303:tid 45332] [client 4.225.160.61:8196] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 09:29:22.973539 2026] [proxy_fcgi:error] [pid 45303:tid 45326] [client 4.225.160.61:8196] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 09:29:23.318173 2026] [proxy_fcgi:error] [pid 45303:tid 45331] [client 4.225.160.61:8196] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 09:29:23.597655 2026] [:error] [pid 45303:tid 45341] [client 4.225.160.61:8196] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/myfile.php"] [unique_id "adG687boQ9eViZ4hdnnJawAAABg"]
[Sun Apr 05 09:29:26.138732 2026] [:error] [pid 45409:tid 45430] [client 4.225.160.61:12058] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/myfile.php"] [unique_id "adG69tHt_Oyw03gjCNhEUAAAANM"]
[Sun Apr 05 09:29:27.088994 2026] [:error] [pid 45305:tid 45373] [client 4.225.160.61:12104] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/myfile.php"] [unique_id "adG69-jDQjr7aWhjflC_KAAAAII"]
[Sun Apr 05 09:29:28.226682 2026] [:error] [pid 45303:tid 45325] [client 4.225.160.61:16457] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/myfile.php"] [unique_id "adG6-LboQ9eViZ4hdnnJcgAAAAg"]
[Sun Apr 05 09:29:29.615965 2026] [:error] [pid 45305:tid 45371] [client 4.225.160.61:12137] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp9.php"] [unique_id "adG6-ejDQjr7aWhjflC_LgAAAIA"]
[Sun Apr 05 09:29:32.589495 2026] [:error] [pid 45303:tid 45331] [client 4.225.160.61:19045] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp9.php"] [unique_id "adG6_LboQ9eViZ4hdnnJeAAAAA4"]
[Sun Apr 05 09:29:34.363640 2026] [:error] [pid 45303:tid 45320] [client 4.225.160.61:12066] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp9.php"] [unique_id "adG6_rboQ9eViZ4hdnnJgAAAAAM"]
[Sun Apr 05 09:29:35.205222 2026] [:error] [pid 45305:tid 45373] [client 4.225.160.61:25920] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp9.php"] [unique_id "adG6_-jDQjr7aWhjflC_bAAAAII"]
[Sun Apr 05 09:29:38.657398 2026] [:error] [pid 45305:tid 45393] [client 4.225.160.61:2240] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xsas.php"] [unique_id "adG7AujDQjr7aWhjflC_hQAAAJY"]
[Sun Apr 05 09:29:41.646877 2026] [:error] [pid 45305:tid 45394] [client 4.225.160.61:35789] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xsas.php"] [unique_id "adG7BejDQjr7aWhjflC_igAAAJc"]
[Sun Apr 05 09:29:42.671286 2026] [:error] [pid 45303:tid 45333] [client 4.225.160.61:42998] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xsas.php"] [unique_id "adG7BrboQ9eViZ4hdnnJiQAAABA"]
[Sun Apr 05 09:29:43.865169 2026] [:error] [pid 30921:tid 30938] [client 4.225.160.61:9354] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xsas.php"] [unique_id "adG7B2FGQVn8Q0ueB27FFwAAAQ8"]
[Sun Apr 05 09:29:45.703064 2026] [:error] [pid 45409:tid 45420] [client 4.225.160.61:17010] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sid3.php"] [unique_id "adG7CdHt_Oyw03gjCNhElQAAAMk"]
[Sun Apr 05 09:29:46.275002 2026] [:error] [pid 45303:tid 45336] [client 4.225.160.61:21572] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sid3.php"] [unique_id "adG7CrboQ9eViZ4hdnnJjgAAABM"]
[Sun Apr 05 09:29:48.187146 2026] [:error] [pid 45409:tid 45413] [client 4.225.160.61:18104] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sid3.php"] [unique_id "adG7DNHt_Oyw03gjCNhEoAAAAMI"]
[Sun Apr 05 09:29:50.493530 2026] [:error] [pid 45305:tid 45388] [client 4.225.160.61:29621] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sid3.php"] [unique_id "adG7DujDQjr7aWhjflC_oQAAAJE"]
[Sun Apr 05 09:29:52.037455 2026] [:error] [pid 45303:tid 45317] [client 4.225.160.61:9454] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nw.php"] [unique_id "adG7ELboQ9eViZ4hdnnJmQAAAAA"]
[Sun Apr 05 09:29:54.631120 2026] [:error] [pid 45303:tid 45318] [client 4.225.160.61:31060] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nw.php"] [unique_id "adG7ErboQ9eViZ4hdnnJogAAAAE"]
[Sun Apr 05 09:29:56.520327 2026] [:error] [pid 45305:tid 45373] [client 4.225.160.61:18619] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nw.php"] [unique_id "adG7FOjDQjr7aWhjflC_sAAAAII"]
[Sun Apr 05 09:29:58.755833 2026] [:error] [pid 45305:tid 45379] [client 4.225.160.61:18617] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nw.php"] [unique_id "adG7FujDQjr7aWhjflC_vgAAAIg"]
[Sun Apr 05 09:30:00.343561 2026] [:error] [pid 45409:tid 45411] [client 4.225.160.61:46238] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hhxc.php"] [unique_id "adG7GNHt_Oyw03gjCNhEsgAAAMA"]
[Sun Apr 05 09:30:01.888990 2026] [:error] [pid 30921:tid 30946] [client 4.225.160.61:18611] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hhxc.php"] [unique_id "adG7GWFGQVn8Q0ueB27FNQAAARc"]
[Sun Apr 05 09:30:03.686282 2026] [:error] [pid 45409:tid 45426] [client 4.225.160.61:44792] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hhxc.php"] [unique_id "adG7G9Ht_Oyw03gjCNhEugAAAM8"]
[Sun Apr 05 09:30:05.617621 2026] [:error] [pid 30921:tid 30938] [client 4.225.160.61:2764] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hhxc.php"] [unique_id "adG7HWFGQVn8Q0ueB27FQQAAAQ8"]
[Sun Apr 05 10:53:31.670118 2026] [proxy_fcgi:error] [pid 45409:tid 45411] [client 51.107.75.125:11921] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 10:53:31.916871 2026] [proxy_fcgi:error] [pid 45409:tid 45415] [client 51.107.75.125:11921] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 10:53:32.153611 2026] [:error] [pid 45409:tid 45431] [client 51.107.75.125:11921] [client 51.107.75.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/taff.php"] [unique_id "adHOrNHt_Oyw03gjCNh4pAAAANQ"]
[Sun Apr 05 10:53:36.356510 2026] [:error] [pid 45305:tid 45395] [client 51.107.75.125:14970] [client 51.107.75.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/taff.php"] [unique_id "adHOsOjDQjr7aWhjflAHlgAAAJg"]
[Sun Apr 05 10:53:38.534153 2026] [:error] [pid 45304:tid 45367] [client 51.107.75.125:30698] [client 51.107.75.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/taff.php"] [unique_id "adHOsg5jnqDKKovdRklcAQAAAFc"]
[Sun Apr 05 10:53:54.649502 2026] [:error] [pid 30921:tid 30926] [client 51.107.75.125:63179] [client 51.107.75.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/maxro.php"] [unique_id "adHOwmFGQVn8Q0ueB27shQAAAQM"]
[Sun Apr 05 10:53:58.032621 2026] [:error] [pid 30921:tid 30943] [client 51.107.75.125:6681] [client 51.107.75.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/maxro.php"] [unique_id "adHOxmFGQVn8Q0ueB27slwAAARQ"]
[Sun Apr 05 10:54:00.947718 2026] [:error] [pid 45305:tid 45380] [client 51.107.75.125:6679] [client 51.107.75.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/maxro.php"] [unique_id "adHOyOjDQjr7aWhjflAIAAAAAIk"]
[Sun Apr 05 10:54:01.721951 2026] [:error] [pid 30921:tid 30937] [client 51.107.75.125:27602] [client 51.107.75.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/maxro.php"] [unique_id "adHOyWFGQVn8Q0ueB27sngAAAQ4"]
[Sun Apr 05 10:54:03.305373 2026] [:error] [pid 45305:tid 45385] [client 51.107.75.125:14920] [client 51.107.75.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tymi.php"] [unique_id "adHOy-jDQjr7aWhjflAICQAAAI4"]
[Sun Apr 05 10:54:07.292214 2026] [:error] [pid 45304:tid 45349] [client 51.107.75.125:60727] [client 51.107.75.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tymi.php"] [unique_id "adHOzw5jnqDKKovdRklcLgAAAEU"]
[Sun Apr 05 10:54:10.731117 2026] [:error] [pid 45305:tid 45395] [client 51.107.75.125:46182] [client 51.107.75.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tymi.php"] [unique_id "adHO0ujDQjr7aWhjflAIMgAAAJg"]
[Sun Apr 05 10:54:11.842566 2026] [:error] [pid 30921:tid 30935] [client 51.107.75.125:6799] [client 51.107.75.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tymi.php"] [unique_id "adHO02FGQVn8Q0ueB27stAAAAQw"]
[Sun Apr 05 10:54:12.696856 2026] [:error] [pid 45305:tid 45386] [client 51.107.75.125:46153] [client 51.107.75.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-class.php"] [unique_id "adHO1OjDQjr7aWhjflAIRAAAAI8"]
[Sun Apr 05 10:54:15.126551 2026] [:error] [pid 45409:tid 45430] [client 51.107.75.125:6275] [client 51.107.75.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-class.php"] [unique_id "adHO19Ht_Oyw03gjCNh5KQAAANM"]
[Sun Apr 05 10:54:16.349571 2026] [:error] [pid 45303:tid 45323] [client 51.107.75.125:18864] [client 51.107.75.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-class.php"] [unique_id "adHO2LboQ9eViZ4hdnnpTgAAAAY"]
[Sun Apr 05 10:54:20.664135 2026] [:error] [pid 45304:tid 45350] [client 51.107.75.125:56471] [client 51.107.75.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-class.php"] [unique_id "adHO3A5jnqDKKovdRklcOwAAAEY"]
[Sun Apr 05 10:54:34.981964 2026] [proxy_fcgi:error] [pid 45304:tid 45347] [client 51.107.75.125:6802] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 10:54:35.222033 2026] [proxy_fcgi:error] [pid 45304:tid 45366] [client 51.107.75.125:6802] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 10:54:35.462819 2026] [proxy_fcgi:error] [pid 45304:tid 45360] [client 51.107.75.125:6802] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 10:54:35.701816 2026] [proxy_fcgi:error] [pid 45304:tid 45363] [client 51.107.75.125:6802] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 10:54:35.941211 2026] [proxy_fcgi:error] [pid 45304:tid 45368] [client 51.107.75.125:6802] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 10:54:36.182675 2026] [proxy_fcgi:error] [pid 45304:tid 45346] [client 51.107.75.125:6802] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 10:54:36.422018 2026] [proxy_fcgi:error] [pid 45304:tid 45352] [client 51.107.75.125:6802] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 10:54:36.682877 2026] [proxy_fcgi:error] [pid 45304:tid 45345] [client 51.107.75.125:6802] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 10:54:36.932809 2026] [proxy_fcgi:error] [pid 45304:tid 45355] [client 51.107.75.125:6802] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 10:54:37.172510 2026] [proxy_fcgi:error] [pid 45304:tid 45356] [client 51.107.75.125:6802] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 10:54:37.416160 2026] [proxy_fcgi:error] [pid 45304:tid 45367] [client 51.107.75.125:6802] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 10:54:37.664936 2026] [:error] [pid 45304:tid 45357] [client 51.107.75.125:6802] [client 51.107.75.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-lvminl.php"] [unique_id "adHO7Q5jnqDKKovdRklcXwAAAE0"]
[Sun Apr 05 10:54:40.175998 2026] [:error] [pid 45305:tid 45379] [client 51.107.75.125:22211] [client 51.107.75.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-lvminl.php"] [unique_id "adHO8OjDQjr7aWhjflAIxQAAAIg"]
[Sun Apr 05 10:54:41.927191 2026] [:error] [pid 45305:tid 45378] [client 51.107.75.125:58269] [client 51.107.75.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-lvminl.php"] [unique_id "adHO8ejDQjr7aWhjflAI0wAAAIc"]
[Sun Apr 05 10:55:02.814019 2026] [:error] [pid 30921:tid 30937] [client 51.107.75.125:7082] [client 51.107.75.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ww.php"] [unique_id "adHPBmFGQVn8Q0ueB27tNgAAAQ4"]
[Sun Apr 05 10:55:04.009981 2026] [:error] [pid 45409:tid 45412] [client 51.107.75.125:38280] [client 51.107.75.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ww.php"] [unique_id "adHPCNHt_Oyw03gjCNh5ogAAAME"]
[Sun Apr 05 10:55:05.589616 2026] [:error] [pid 45305:tid 45382] [client 51.107.75.125:61425] [client 51.107.75.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ww.php"] [unique_id "adHPCejDQjr7aWhjflAJFQAAAIs"]
[Sun Apr 05 10:55:06.509659 2026] [:error] [pid 45303:tid 45334] [client 51.107.75.125:21147] [client 51.107.75.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ww.php"] [unique_id "adHPCrboQ9eViZ4hdnnplAAAABE"]
[Sun Apr 05 10:55:09.087709 2026] [:error] [pid 30921:tid 30930] [client 51.107.75.125:21058] [client 51.107.75.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dczem.php"] [unique_id "adHPDWFGQVn8Q0ueB27tQAAAAQc"]
[Sun Apr 05 10:55:10.579100 2026] [:error] [pid 30921:tid 30930] [client 51.107.75.125:7087] [client 51.107.75.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dczem.php"] [unique_id "adHPDmFGQVn8Q0ueB27tTAAAAQc"]
[Sun Apr 05 10:55:11.495163 2026] [:error] [pid 30921:tid 30926] [client 51.107.75.125:28451] [client 51.107.75.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dczem.php"] [unique_id "adHPD2FGQVn8Q0ueB27tUgAAAQM"]
[Sun Apr 05 10:55:12.878134 2026] [:error] [pid 30921:tid 30933] [client 51.107.75.125:21139] [client 51.107.75.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dczem.php"] [unique_id "adHPEGFGQVn8Q0ueB27tWQAAAQo"]
[Sun Apr 05 10:55:14.479929 2026] [:error] [pid 45409:tid 45428] [client 51.107.75.125:21158] [client 51.107.75.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/albrt.php"] [unique_id "adHPEtHt_Oyw03gjCNh5wQAAANE"]
[Sun Apr 05 10:55:15.630087 2026] [:error] [pid 45305:tid 45394] [client 51.107.75.125:29741] [client 51.107.75.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/albrt.php"] [unique_id "adHPE-jDQjr7aWhjflAJMAAAAJc"]
[Sun Apr 05 10:55:18.700555 2026] [:error] [pid 45409:tid 45411] [client 51.107.75.125:36752] [client 51.107.75.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/albrt.php"] [unique_id "adHPFtHt_Oyw03gjCNh52AAAAMA"]
[Sun Apr 05 10:55:20.308510 2026] [:error] [pid 45409:tid 45422] [client 51.107.75.125:36738] [client 51.107.75.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/albrt.php"] [unique_id "adHPGNHt_Oyw03gjCNh55AAAAMs"]
[Sun Apr 05 12:38:44.412142 2026] [proxy_fcgi:error] [pid 45304:tid 45363] [client 172.213.234.56:22138] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 21:11:02.435608 2026] [:error] [pid 30921:tid 30935] [client 98.159.37.108:27927] [client 98.159.37.108] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/buttons.css"] [unique_id "adJfZmFGQVn8Q0ueB24Y-wAAAQw"]
[Mon Apr 06 02:16:08.349266 2026] [proxy_fcgi:error] [pid 51581:tid 51685] [client 40.85.219.177:10757] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 02:16:09.266408 2026] [proxy_fcgi:error] [pid 51581:tid 51677] [client 40.85.219.177:10757] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 02:16:09.735915 2026] [:error] [pid 51581:tid 51680] [client 40.85.219.177:10757] [client 40.85.219.177] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dwelectservices.com.au"] [uri "/fm.php"] [unique_id "adKm6d4k74fhQLPUy7FZ6wAAAIs"]
[Mon Apr 06 02:16:16.380773 2026] [proxy_fcgi:error] [pid 51580:tid 51641] [client 40.85.219.177:10772] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 02:16:17.758937 2026] [proxy_fcgi:error] [pid 51580:tid 51663] [client 40.85.219.177:10772] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 02:16:19.216861 2026] [:error] [pid 51580:tid 51639] [client 40.85.219.177:10772] [client 40.85.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/link.php"] [unique_id "adKm81NFl1NiyNgNZAlUBQAAAEA"]
[Mon Apr 06 02:16:20.671660 2026] [:error] [pid 51753:tid 51824] [client 40.85.219.177:10811] [client 40.85.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/link.php"] [unique_id "adKm9K3pmp1JkaicYbuwqwAAAQ0"]
[Mon Apr 06 02:16:22.028494 2026] [:error] [pid 51584:tid 51697] [client 40.85.219.177:11206] [client 40.85.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/link.php"] [unique_id "adKm9sZ4qY_GoNCPARBBNwAAAMA"]
[Mon Apr 06 02:16:24.816953 2026] [:error] [pid 51753:tid 51813] [client 40.85.219.177:10778] [client 40.85.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/link.php"] [unique_id "adKm-K3pmp1JkaicYbuwugAAAQI"]
[Mon Apr 06 02:16:26.357315 2026] [:error] [pid 51580:tid 51658] [client 40.85.219.177:10795] [client 40.85.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/chosen.php"] [unique_id "adKm-lNFl1NiyNgNZAlUEgAAAFM"]
[Mon Apr 06 02:16:27.516733 2026] [:error] [pid 51584:tid 51701] [client 40.85.219.177:11208] [client 40.85.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/chosen.php"] [unique_id "adKm-8Z4qY_GoNCPARBBUwAAAMQ"]
[Mon Apr 06 02:16:28.797201 2026] [:error] [pid 51581:tid 51672] [client 40.85.219.177:10753] [client 40.85.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/chosen.php"] [unique_id "adKm_N4k74fhQLPUy7FaBQAAAIM"]
[Mon Apr 06 02:16:30.945483 2026] [:error] [pid 51581:tid 51677] [client 40.85.219.177:10810] [client 40.85.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/chosen.php"] [unique_id "adKm_t4k74fhQLPUy7FaCwAAAIg"]
[Mon Apr 06 02:16:33.489867 2026] [:error] [pid 51581:tid 51678] [client 40.85.219.177:10773] [client 40.85.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/info.php"] [unique_id "adKnAd4k74fhQLPUy7FaEQAAAIk"]
[Mon Apr 06 02:16:36.980979 2026] [:error] [pid 51753:tid 51821] [client 40.85.219.177:10754] [client 40.85.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/info.php"] [unique_id "adKnBK3pmp1JkaicYbuw4wAAAQo"]
[Mon Apr 06 02:16:40.246778 2026] [:error] [pid 51584:tid 51702] [client 40.85.219.177:10806] [client 40.85.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/info.php"] [unique_id "adKnCMZ4qY_GoNCPARBBggAAAMU"]
[Mon Apr 06 02:16:44.497145 2026] [:error] [pid 51581:tid 51678] [client 40.85.219.177:10763] [client 40.85.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/info.php"] [unique_id "adKnDN4k74fhQLPUy7FaGQAAAIk"]
[Mon Apr 06 02:16:49.163929 2026] [:error] [pid 51753:tid 51836] [client 40.85.219.177:11257] [client 40.85.219.177] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "adKnEa3pmp1JkaicYbuxMQAAARg"]
[Mon Apr 06 02:16:55.098721 2026] [:error] [pid 51753:tid 51835] [client 40.85.219.177:11207] [client 40.85.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/test.php"] [unique_id "adKnF63pmp1JkaicYbuxTwAAARc"]
[Mon Apr 06 02:16:59.820054 2026] [:error] [pid 51584:tid 51720] [client 40.85.219.177:10804] [client 40.85.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/test.php"] [unique_id "adKnG8Z4qY_GoNCPARBBuQAAANc"]
[Mon Apr 06 02:17:10.455330 2026] [:error] [pid 51753:tid 51822] [client 40.85.219.177:10781] [client 40.85.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/colors/ectoplasm/wp-login.php"] [unique_id "adKnJq3pmp1JkaicYbuxsgAAAQs"]
[Mon Apr 06 02:17:12.973944 2026] [:error] [pid 51753:tid 51834] [client 40.85.219.177:10786] [client 40.85.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/colors/ectoplasm/wp-login.php"] [unique_id "adKnKK3pmp1JkaicYbuxwgAAARY"]
[Mon Apr 06 02:17:13.901075 2026] [:error] [pid 51581:tid 51679] [client 40.85.219.177:10787] [client 40.85.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/colors/ectoplasm/wp-login.php"] [unique_id "adKnKd4k74fhQLPUy7FaTAAAAIo"]
[Mon Apr 06 02:17:15.746177 2026] [:error] [pid 51584:tid 51699] [client 40.85.219.177:11214] [client 40.85.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/colors/ectoplasm/wp-login.php"] [unique_id "adKnK8Z4qY_GoNCPARBB5gAAAMI"]
[Mon Apr 06 02:17:33.408109 2026] [:error] [pid 51580:tid 51652] [client 40.85.219.177:10775] [client 40.85.219.177] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/dist/preferences/index.php"] [unique_id "adKnPVNFl1NiyNgNZAlVPAAAAE0"]
[Mon Apr 06 02:17:38.426838 2026] [:error] [pid 51584:tid 51706] [client 40.85.219.177:11204] [client 40.85.219.177] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/html-api/index.php"] [unique_id "adKnQsZ4qY_GoNCPARBCXAAAAMk"]
[Mon Apr 06 02:17:43.127763 2026] [proxy_fcgi:error] [pid 51753:tid 51811] [client 40.85.219.177:10799] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 02:17:45.327643 2026] [:error] [pid 51753:tid 51822] [client 40.85.219.177:10799] [client 40.85.219.177] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/Cache/content.php"] [unique_id "adKnSa3pmp1JkaicYbuyVQAAAQs"]
[Mon Apr 06 02:17:50.606593 2026] [:error] [pid 51584:tid 51721] [client 40.85.219.177:10762] [client 40.85.219.177] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/wp-login.php"] [unique_id "adKnTsZ4qY_GoNCPARBCkQAAANg"]
[Mon Apr 06 02:17:52.272012 2026] [proxy_fcgi:error] [pid 51753:tid 51812] [client 40.85.219.177:11209] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 02:17:52.916578 2026] [:error] [pid 51753:tid 51829] [client 40.85.219.177:11209] [client 40.85.219.177] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/customize/wp-login.php"] [unique_id "adKnUK3pmp1JkaicYbuyjQAAARI"]
[Mon Apr 06 02:17:54.960375 2026] [:error] [pid 51581:tid 51692] [client 40.85.219.177:10813] [client 40.85.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/themes.php"] [unique_id "adKnUt4k74fhQLPUy7FapAAAAJY"]
[Mon Apr 06 02:17:57.642497 2026] [:error] [pid 51753:tid 51819] [client 40.85.219.177:10779] [client 40.85.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/themes.php"] [unique_id "adKnVa3pmp1JkaicYbuyoQAAAQg"]
[Mon Apr 06 02:18:03.136391 2026] [:error] [pid 51753:tid 51812] [client 40.85.219.177:10801] [client 40.85.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/themes.php"] [unique_id "adKnW63pmp1JkaicYbuytQAAAQE"]
[Mon Apr 06 02:18:08.750046 2026] [:error] [pid 51753:tid 51824] [client 40.85.219.177:10808] [client 40.85.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/themes.php"] [unique_id "adKnYK3pmp1JkaicYbuyygAAAQ0"]
[Mon Apr 06 02:18:14.415152 2026] [:error] [pid 51580:tid 51658] [client 40.85.219.177:10807] [client 40.85.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/readme.php"] [unique_id "adKnZlNFl1NiyNgNZAlV5QAAAFM"]
[Mon Apr 06 02:18:17.517486 2026] [:error] [pid 51753:tid 51829] [client 40.85.219.177:11218] [client 40.85.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/readme.php"] [unique_id "adKnaa3pmp1JkaicYbuy6wAAARI"]
[Mon Apr 06 02:18:22.315065 2026] [:error] [pid 51580:tid 51651] [client 40.85.219.177:10783] [client 40.85.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/readme.php"] [unique_id "adKnblNFl1NiyNgNZAlV-wAAAEw"]
[Mon Apr 06 02:18:28.743036 2026] [:error] [pid 51753:tid 51836] [client 40.85.219.177:11212] [client 40.85.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/edit.php"] [unique_id "adKndK3pmp1JkaicYbuzHQAAARg"]
[Mon Apr 06 02:18:34.829911 2026] [:error] [pid 51584:tid 51709] [client 40.85.219.177:10793] [client 40.85.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/edit.php"] [unique_id "adKnesZ4qY_GoNCPARBDGgAAAMw"]
[Mon Apr 06 02:18:35.965095 2026] [:error] [pid 51580:tid 51656] [client 40.85.219.177:10803] [client 40.85.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/edit.php"] [unique_id "adKne1NFl1NiyNgNZAlWLwAAAFE"]
[Mon Apr 06 02:18:37.291372 2026] [:error] [pid 51753:tid 51828] [client 40.85.219.177:10640] [client 40.85.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/edit.php"] [unique_id "adKnfa3pmp1JkaicYbuzWgAAARE"]
[Mon Apr 06 02:18:38.960680 2026] [:error] [pid 51753:tid 51814] [client 40.85.219.177:11211] [client 40.85.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/travelscape/json.php"] [unique_id "adKnfq3pmp1JkaicYbuzYgAAAQM"]
[Mon Apr 06 02:18:40.196878 2026] [:error] [pid 51580:tid 51646] [client 40.85.219.177:10771] [client 40.85.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/travelscape/json.php"] [unique_id "adKngFNFl1NiyNgNZAlWUgAAAEc"]
[Mon Apr 06 02:18:41.253206 2026] [:error] [pid 51753:tid 51821] [client 40.85.219.177:11245] [client 40.85.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/travelscape/json.php"] [unique_id "adKnga3pmp1JkaicYbuzagAAAQo"]
[Mon Apr 06 02:18:41.916429 2026] [:error] [pid 51584:tid 51714] [client 40.85.219.177:11248] [client 40.85.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/travelscape/json.php"] [unique_id "adKngcZ4qY_GoNCPARBDJgAAANE"]
[Mon Apr 06 02:18:43.149247 2026] [:error] [pid 51580:tid 51644] [client 40.85.219.177:10759] [client 40.85.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/wp-admin.php"] [unique_id "adKng1NFl1NiyNgNZAlWZgAAAEU"]
[Mon Apr 06 02:18:44.196215 2026] [:error] [pid 51580:tid 51650] [client 40.85.219.177:11258] [client 40.85.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/wp-admin.php"] [unique_id "adKnhFNFl1NiyNgNZAlWbQAAAEs"]
[Mon Apr 06 02:18:45.754676 2026] [:error] [pid 51753:tid 51818] [client 40.85.219.177:10782] [client 40.85.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/wp-admin.php"] [unique_id "adKnha3pmp1JkaicYbuzdwAAAQc"]
[Mon Apr 06 02:18:47.621371 2026] [:error] [pid 51753:tid 51834] [client 40.85.219.177:10812] [client 40.85.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/wp-admin.php"] [unique_id "adKnh63pmp1JkaicYbuzhAAAARY"]
[Mon Apr 06 02:18:48.794803 2026] [:error] [pid 51753:tid 51830] [client 40.85.219.177:10815] [client 40.85.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/upgrade/shell.php"] [unique_id "adKniK3pmp1JkaicYbuzlAAAARM"]
[Mon Apr 06 02:18:49.758685 2026] [:error] [pid 51753:tid 51829] [client 40.85.219.177:11213] [client 40.85.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/upgrade/shell.php"] [unique_id "adKnia3pmp1JkaicYbuzmgAAARI"]
[Mon Apr 06 02:18:50.827510 2026] [:error] [pid 51580:tid 51662] [client 40.85.219.177:11201] [client 40.85.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/upgrade/shell.php"] [unique_id "adKnilNFl1NiyNgNZAlWggAAAFc"]
[Mon Apr 06 02:18:52.953611 2026] [:error] [pid 51753:tid 51827] [client 40.85.219.177:10668] [client 40.85.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/upgrade/shell.php"] [unique_id "adKnjK3pmp1JkaicYbuzrAAAARA"]
[Mon Apr 06 02:18:55.731596 2026] [:error] [pid 51580:tid 51652] [client 40.85.219.177:11262] [client 40.85.219.177] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/network.php"] [unique_id "adKnj1NFl1NiyNgNZAlWogAAAE0"]
[Mon Apr 06 02:19:04.818201 2026] [:error] [pid 51580:tid 51662] [client 40.85.219.177:11233] [client 40.85.219.177] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/pomo/chosen.php"] [unique_id "adKnmFNFl1NiyNgNZAlWwgAAAFc"]
[Mon Apr 06 02:19:09.988413 2026] [proxy_fcgi:error] [pid 51584:tid 51721] [client 40.85.219.177:10630] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 02:19:10.213280 2026] [:error] [pid 51584:tid 51711] [client 40.85.219.177:10630] [client 40.85.219.177] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/customize/shell.php"] [unique_id "adKnnsZ4qY_GoNCPARBDbQAAAM4"]
[Mon Apr 06 02:19:12.011154 2026] [:error] [pid 51580:tid 51658] [client 40.85.219.177:11253] [client 40.85.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cgi-bin/fm.php"] [unique_id "adKnoFNFl1NiyNgNZAlW6AAAAFM"]
[Mon Apr 06 02:19:13.746747 2026] [:error] [pid 51753:tid 51831] [client 40.85.219.177:11216] [client 40.85.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cgi-bin/fm.php"] [unique_id "adKnoa3pmp1JkaicYbuz8QAAARQ"]
[Mon Apr 06 02:19:15.159343 2026] [:error] [pid 51753:tid 51825] [client 40.85.219.177:10641] [client 40.85.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cgi-bin/fm.php"] [unique_id "adKno63pmp1JkaicYbuz9gAAAQ4"]
[Mon Apr 06 02:19:17.042365 2026] [:error] [pid 51580:tid 51656] [client 40.85.219.177:11252] [client 40.85.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cgi-bin/fm.php"] [unique_id "adKnpVNFl1NiyNgNZAlW-QAAAFE"]
[Mon Apr 06 02:19:18.508433 2026] [:error] [pid 51580:tid 51662] [client 40.85.219.177:11231] [client 40.85.219.177] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/block-supports/variations.php"] [unique_id "adKnplNFl1NiyNgNZAlXBQAAAFc"]
[Mon Apr 06 02:19:19.599387 2026] [:error] [pid 51753:tid 51835] [client 40.85.219.177:11234] [client 40.85.219.177] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/rest-api/wp-login.php"] [unique_id "adKnp63pmp1JkaicYbu0CwAAARc"]
[Mon Apr 06 02:19:21.157454 2026] [:error] [pid 51580:tid 51663] [client 40.85.219.177:10790] [client 40.85.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/index.php"] [unique_id "adKnqVNFl1NiyNgNZAlXDgAAAFg"]
[Mon Apr 06 02:19:22.387137 2026] [:error] [pid 51580:tid 51658] [client 40.85.219.177:11237] [client 40.85.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/index.php"] [unique_id "adKnqlNFl1NiyNgNZAlXFwAAAFM"]
[Mon Apr 06 02:19:25.272287 2026] [:error] [pid 51753:tid 51825] [client 40.85.219.177:10784] [client 40.85.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/index.php"] [unique_id "adKnra3pmp1JkaicYbu0LQAAAQ4"]
[Mon Apr 06 02:19:26.285420 2026] [:error] [pid 51581:tid 51686] [client 40.85.219.177:11249] [client 40.85.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/index.php"] [unique_id "adKnrt4k74fhQLPUy7FbYgAAAJE"]
[Mon Apr 06 02:19:28.268947 2026] [:error] [pid 51581:tid 51671] [client 40.85.219.177:10671] [client 40.85.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/1.php"] [unique_id "adKnsN4k74fhQLPUy7FbZgAAAII"]
[Mon Apr 06 02:19:30.891964 2026] [:error] [pid 51753:tid 51818] [client 40.85.219.177:10758] [client 40.85.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/1.php"] [unique_id "adKnsq3pmp1JkaicYbu0SQAAAQc"]
[Mon Apr 06 02:19:35.033015 2026] [:error] [pid 51580:tid 51641] [client 40.85.219.177:11246] [client 40.85.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/1.php"] [unique_id "adKnt1NFl1NiyNgNZAlXMQAAAEI"]
[Mon Apr 06 02:19:47.018556 2026] [:error] [pid 51581:tid 51671] [client 40.85.219.177:11256] [client 40.85.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/install.php"] [unique_id "adKnw94k74fhQLPUy7FbmwAAAII"]
[Mon Apr 06 02:20:04.239993 2026] [:error] [pid 51581:tid 51694] [client 40.85.219.177:10765] [client 40.85.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/pki-validation/siteindex.php"] [unique_id "adKn1N4k74fhQLPUy7FbpwAAAJg"]
[Mon Apr 06 02:20:08.858931 2026] [:error] [pid 51580:tid 51648] [client 40.85.219.177:10761] [client 40.85.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/pki-validation/siteindex.php"] [unique_id "adKn2FNFl1NiyNgNZAlXswAAAEk"]
[Mon Apr 06 02:20:14.926597 2026] [:error] [pid 51753:tid 51834] [client 40.85.219.177:10768] [client 40.85.219.177] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/system.php"] [unique_id "adKn3q3pmp1JkaicYbu1KgAAARY"]
[Mon Apr 06 02:20:20.611818 2026] [:error] [pid 51581:tid 51676] [client 40.85.219.177:10648] [client 40.85.219.177] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/sitemaps/alfa-rex.php"] [unique_id "adKn5N4k74fhQLPUy7FbvgAAAIc"]
[Mon Apr 06 02:20:22.665894 2026] [:error] [pid 51580:tid 51657] [client 40.85.219.177:11203] [client 40.85.219.177] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "adKn5lNFl1NiyNgNZAlX3gAAAFI"]
[Mon Apr 06 02:20:26.121928 2026] [:error] [pid 51753:tid 51820] [client 40.85.219.177:10809] [client 40.85.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/db.php"] [unique_id "adKn6q3pmp1JkaicYbu1WwAAAQk"]
[Mon Apr 06 02:20:28.753760 2026] [:error] [pid 51581:tid 51669] [client 40.85.219.177:10780] [client 40.85.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/db.php"] [unique_id "adKn7N4k74fhQLPUy7Fb1AAAAIA"]
[Mon Apr 06 02:20:33.417852 2026] [:error] [pid 51581:tid 51679] [client 40.85.219.177:11259] [client 40.85.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/db.php"] [unique_id "adKn8d4k74fhQLPUy7Fb3AAAAIo"]
[Mon Apr 06 02:20:36.731551 2026] [:error] [pid 51753:tid 51827] [client 40.85.219.177:11200] [client 40.85.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/db.php"] [unique_id "adKn9K3pmp1JkaicYbu1iAAAARA"]
[Mon Apr 06 02:20:38.380095 2026] [:error] [pid 51580:tid 51656] [client 40.85.219.177:11239] [client 40.85.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/blue.php"] [unique_id "adKn9lNFl1NiyNgNZAlYIwAAAFE"]
[Mon Apr 06 02:20:41.440806 2026] [:error] [pid 51580:tid 51649] [client 40.85.219.177:11215] [client 40.85.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/blue.php"] [unique_id "adKn-VNFl1NiyNgNZAlYMgAAAEo"]
[Mon Apr 06 02:20:45.873059 2026] [:error] [pid 51580:tid 51650] [client 40.85.219.177:10638] [client 40.85.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/blue.php"] [unique_id "adKn_VNFl1NiyNgNZAlYSgAAAEs"]
[Mon Apr 06 02:20:48.422325 2026] [:error] [pid 51584:tid 51703] [client 40.85.219.177:10646] [client 40.85.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/blue.php"] [unique_id "adKoAMZ4qY_GoNCPARBEVwAAAMY"]
[Mon Apr 06 02:20:49.996126 2026] [:error] [pid 51580:tid 51647] [client 40.85.219.177:10755] [client 40.85.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/pki-validation/fm.php"] [unique_id "adKoAVNFl1NiyNgNZAlYWAAAAEg"]
[Mon Apr 06 02:20:51.484555 2026] [:error] [pid 51581:tid 51684] [client 40.85.219.177:11220] [client 40.85.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/pki-validation/fm.php"] [unique_id "adKoA94k74fhQLPUy7Fb-wAAAI8"]
[Mon Apr 06 02:20:53.819702 2026] [:error] [pid 51580:tid 51646] [client 40.85.219.177:11210] [client 40.85.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/pki-validation/fm.php"] [unique_id "adKoBVNFl1NiyNgNZAlYaQAAAEc"]
[Mon Apr 06 02:20:57.186122 2026] [:error] [pid 51580:tid 51652] [client 40.85.219.177:10757] [client 40.85.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/pki-validation/fm.php"] [unique_id "adKoCVNFl1NiyNgNZAlYcwAAAE0"]
[Mon Apr 06 02:21:01.830404 2026] [:error] [pid 51580:tid 51654] [client 40.85.219.177:11261] [client 40.85.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/configs.php"] [unique_id "adKoDVNFl1NiyNgNZAlYgwAAAE8"]
[Mon Apr 06 02:21:04.627925 2026] [:error] [pid 51580:tid 51654] [client 40.85.219.177:11238] [client 40.85.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/configs.php"] [unique_id "adKoEFNFl1NiyNgNZAlYigAAAE8"]
[Mon Apr 06 02:21:07.285473 2026] [:error] [pid 51753:tid 51826] [client 40.85.219.177:10643] [client 40.85.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/configs.php"] [unique_id "adKoE63pmp1JkaicYbu15AAAAQ8"]
[Mon Apr 06 02:21:10.294091 2026] [:error] [pid 51753:tid 51815] [client 40.85.219.177:11229] [client 40.85.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/configs.php"] [unique_id "adKoFq3pmp1JkaicYbu1-QAAAQQ"]
[Mon Apr 06 02:21:13.359552 2026] [:error] [pid 51584:tid 51708] [client 40.85.219.177:10651] [client 40.85.219.177] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/media/about.php"] [unique_id "adKoGcZ4qY_GoNCPARBEoQAAAMs"]
[Mon Apr 06 02:21:15.775984 2026] [:error] [pid 51584:tid 51705] [client 40.85.219.177:10635] [client 40.85.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cgi-bin/xmrlpc.php"] [unique_id "adKoG8Z4qY_GoNCPARBEqwAAAMg"]
[Mon Apr 06 02:21:18.165953 2026] [:error] [pid 51584:tid 51711] [client 40.85.219.177:10752] [client 40.85.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cgi-bin/xmrlpc.php"] [unique_id "adKoHsZ4qY_GoNCPARBEtgAAAM4"]
[Mon Apr 06 02:21:20.156706 2026] [:error] [pid 51753:tid 51823] [client 40.85.219.177:10785] [client 40.85.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cgi-bin/xmrlpc.php"] [unique_id "adKoIK3pmp1JkaicYbu2FwAAAQw"]
[Mon Apr 06 02:21:20.951618 2026] [:error] [pid 51581:tid 51692] [client 40.85.219.177:10636] [client 40.85.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/assets/admin.php"] [unique_id "adKoIN4k74fhQLPUy7FcMAAAAJY"]
[Mon Apr 06 02:21:22.677840 2026] [:error] [pid 51581:tid 51669] [client 40.85.219.177:11240] [client 40.85.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/assets/admin.php"] [unique_id "adKoIt4k74fhQLPUy7FcMgAAAIA"]
[Mon Apr 06 02:21:33.054232 2026] [:error] [pid 51753:tid 51815] [client 40.85.219.177:10633] [client 40.85.219.177] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/theme-compat/wp-login.php"] [unique_id "adKoLa3pmp1JkaicYbu2XQAAAQQ"]
[Mon Apr 06 02:21:35.710992 2026] [proxy_fcgi:error] [pid 51580:tid 51639] [client 40.85.219.177:11205] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 02:21:36.802466 2026] [proxy_fcgi:error] [pid 51580:tid 51653] [client 40.85.219.177:11205] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 02:21:37.006824 2026] [:error] [pid 51580:tid 51643] [client 40.85.219.177:11205] [client 40.85.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/uploads/plugins.php"] [unique_id "adKoMVNFl1NiyNgNZAlY4QAAAEQ"]
[Mon Apr 06 02:21:38.057228 2026] [:error] [pid 51581:tid 51689] [client 40.85.219.177:11226] [client 40.85.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/uploads/plugins.php"] [unique_id "adKoMt4k74fhQLPUy7FcSQAAAJQ"]
[Mon Apr 06 02:21:39.916343 2026] [:error] [pid 51581:tid 51692] [client 40.85.219.177:10795] [client 40.85.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/uploads/plugins.php"] [unique_id "adKoM94k74fhQLPUy7FcTAAAAJY"]
[Mon Apr 06 02:21:42.593989 2026] [:error] [pid 51580:tid 51647] [client 40.85.219.177:11243] [client 40.85.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/uploads/plugins.php"] [unique_id "adKoNlNFl1NiyNgNZAlY7wAAAEg"]
[Mon Apr 06 02:21:43.699114 2026] [:error] [pid 51580:tid 51650] [client 40.85.219.177:10774] [client 40.85.219.177] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/rest-api/alfa-rex.php"] [unique_id "adKoN1NFl1NiyNgNZAlY9QAAAEs"]
[Mon Apr 06 02:21:45.087122 2026] [:error] [pid 51581:tid 51681] [client 40.85.219.177:11217] [client 40.85.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gecko.php"] [unique_id "adKoOd4k74fhQLPUy7FcXQAAAIw"]
[Mon Apr 06 02:21:45.835985 2026] [:error] [pid 51580:tid 51650] [client 40.85.219.177:10767] [client 40.85.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gecko.php"] [unique_id "adKoOVNFl1NiyNgNZAlY_QAAAEs"]
[Mon Apr 06 02:21:46.978086 2026] [:error] [pid 51581:tid 51693] [client 40.85.219.177:10788] [client 40.85.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gecko.php"] [unique_id "adKoOt4k74fhQLPUy7FcYwAAAJc"]
[Mon Apr 06 02:21:50.351083 2026] [:error] [pid 51753:tid 51830] [client 40.85.219.177:10796] [client 40.85.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/plugin.php"] [unique_id "adKoPq3pmp1JkaicYbu2oAAAARM"]
[Mon Apr 06 02:21:52.067358 2026] [:error] [pid 51580:tid 51649] [client 40.85.219.177:10781] [client 40.85.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/plugin.php"] [unique_id "adKoQFNFl1NiyNgNZAlZJQAAAEo"]
[Mon Apr 06 02:21:53.630654 2026] [:error] [pid 51580:tid 51660] [client 40.85.219.177:11219] [client 40.85.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/plugin.php"] [unique_id "adKoQVNFl1NiyNgNZAlZMQAAAFU"]
[Mon Apr 06 02:21:55.111776 2026] [:error] [pid 51753:tid 51816] [client 40.85.219.177:11244] [client 40.85.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/plugin.php"] [unique_id "adKoQ63pmp1JkaicYbu2rAAAAQU"]
[Mon Apr 06 02:21:56.553671 2026] [:error] [pid 51753:tid 51836] [client 40.85.219.177:11228] [client 40.85.219.177] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/html-api/wp-login.php"] [unique_id "adKoRK3pmp1JkaicYbu2sgAAARg"]
[Mon Apr 06 02:21:57.731628 2026] [:error] [pid 51584:tid 51717] [client 40.85.219.177:10769] [client 40.85.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Assets/edit.php"] [unique_id "adKoRcZ4qY_GoNCPARBE6QAAANQ"]
[Mon Apr 06 02:21:58.760848 2026] [:error] [pid 51584:tid 51720] [client 40.85.219.177:11212] [client 40.85.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Assets/edit.php"] [unique_id "adKoRsZ4qY_GoNCPARBE7gAAANc"]
[Mon Apr 06 02:22:00.541776 2026] [:error] [pid 51753:tid 51836] [client 40.85.219.177:10792] [client 40.85.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Assets/edit.php"] [unique_id "adKoSK3pmp1JkaicYbu2vgAAARg"]
[Mon Apr 06 02:22:02.222538 2026] [:error] [pid 51753:tid 51823] [client 40.85.219.177:10770] [client 40.85.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Assets/edit.php"] [unique_id "adKoSq3pmp1JkaicYbu2zAAAAQw"]
[Mon Apr 06 02:22:04.759151 2026] [:error] [pid 51753:tid 51829] [client 40.85.219.177:10811] [client 40.85.219.177] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/crystal/about.php"] [unique_id "adKoTK3pmp1JkaicYbu22QAAARI"]
[Mon Apr 06 02:22:06.702793 2026] [:error] [pid 51753:tid 51813] [client 40.85.219.177:10789] [client 40.85.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/file.php"] [unique_id "adKoTq3pmp1JkaicYbu27AAAAQI"]
[Mon Apr 06 02:22:07.327206 2026] [:error] [pid 51584:tid 51715] [client 40.85.219.177:11247] [client 40.85.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/file.php"] [unique_id "adKoT8Z4qY_GoNCPARBE_QAAANI"]
[Mon Apr 06 02:22:08.000320 2026] [:error] [pid 51753:tid 51821] [client 40.85.219.177:10804] [client 40.85.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/file.php"] [unique_id "adKoT63pmp1JkaicYbu2-AAAAQo"]
[Mon Apr 06 02:22:09.356242 2026] [:error] [pid 51581:tid 51692] [client 40.85.219.177:10762] [client 40.85.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/file.php"] [unique_id "adKoUd4k74fhQLPUy7FckQAAAJY"]
[Mon Apr 06 02:22:10.643067 2026] [:error] [pid 51753:tid 51832] [client 40.85.219.177:10786] [client 40.85.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/pkivalidation/log.php"] [unique_id "adKoUq3pmp1JkaicYbu3BAAAARU"]
[Mon Apr 06 02:22:12.727482 2026] [:error] [pid 51584:tid 51721] [client 40.85.219.177:11209] [client 40.85.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/pkivalidation/log.php"] [unique_id "adKoVMZ4qY_GoNCPARBFBgAAANg"]
[Mon Apr 06 02:22:13.647717 2026] [:error] [pid 51580:tid 51649] [client 40.85.219.177:10776] [client 40.85.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/pkivalidation/log.php"] [unique_id "adKoVVNFl1NiyNgNZAlZUwAAAEo"]
[Mon Apr 06 02:22:14.531292 2026] [:error] [pid 51584:tid 51699] [client 40.85.219.177:10766] [client 40.85.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/pkivalidation/log.php"] [unique_id "adKoVsZ4qY_GoNCPARBFCgAAAMI"]
[Mon Apr 06 02:22:16.421015 2026] [:error] [pid 51581:tid 51686] [client 40.85.219.177:10754] [client 40.85.219.177] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "adKoWN4k74fhQLPUy7FcmgAAAJE"]
[Mon Apr 06 02:22:18.477435 2026] [:error] [pid 51580:tid 51640] [client 40.85.219.177:11206] [client 40.85.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/packed.php"] [unique_id "adKoWlNFl1NiyNgNZAlZZgAAAEE"]
[Mon Apr 06 02:22:22.939867 2026] [:error] [pid 51580:tid 51641] [client 40.85.219.177:10658] [client 40.85.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/packed.php"] [unique_id "adKoXlNFl1NiyNgNZAlZcgAAAEI"]
[Mon Apr 06 02:22:31.617244 2026] [:error] [pid 51584:tid 51721] [client 40.85.219.177:10756] [client 40.85.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/packed.php"] [unique_id "adKoZ8Z4qY_GoNCPARBFMgAAANg"]
[Mon Apr 06 02:22:37.991939 2026] [proxy_fcgi:error] [pid 51580:tid 51649] [client 40.85.219.177:10805] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 02:22:38.203184 2026] [proxy_fcgi:error] [pid 51580:tid 51656] [client 40.85.219.177:10805] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 02:22:38.408387 2026] [:error] [pid 51580:tid 51657] [client 40.85.219.177:10805] [client 40.85.219.177] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dwelectservices.com.au"] [uri "/filemanager.php"] [unique_id "adKoblNFl1NiyNgNZAlZmgAAAFI"]
[Mon Apr 06 02:22:40.881050 2026] [proxy_fcgi:error] [pid 51753:tid 51815] [client 40.85.219.177:10647] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 02:22:41.086774 2026] [:error] [pid 51753:tid 51813] [client 40.85.219.177:10647] [client 40.85.219.177] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "adKoca3pmp1JkaicYbu3fQAAAQI"]
[Mon Apr 06 02:22:46.280709 2026] [proxy_fcgi:error] [pid 51581:tid 51670] [client 40.85.219.177:10637] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 02:22:46.908949 2026] [:error] [pid 51581:tid 51681] [client 40.85.219.177:10637] [client 40.85.219.177] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Requests/Utility/cc.php"] [unique_id "adKodt4k74fhQLPUy7FczAAAAIw"]
[Mon Apr 06 02:22:50.508122 2026] [:error] [pid 51580:tid 51650] [client 40.85.219.177:11251] [client 40.85.219.177] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Text/index.php"] [unique_id "adKoelNFl1NiyNgNZAlZvgAAAEs"]
[Mon Apr 06 02:22:53.135205 2026] [proxy_fcgi:error] [pid 51580:tid 51654] [client 40.85.219.177:10644] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 02:22:54.250723 2026] [proxy_fcgi:error] [pid 51580:tid 51662] [client 40.85.219.177:10644] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 02:22:54.471150 2026] [:error] [pid 51580:tid 51658] [client 40.85.219.177:10644] [client 40.85.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/mu-plugins/gecko.php"] [unique_id "adKoflNFl1NiyNgNZAlZ0AAAAFM"]
[Mon Apr 06 02:22:57.409967 2026] [:error] [pid 51753:tid 51816] [client 40.85.219.177:11263] [client 40.85.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/mu-plugins/gecko.php"] [unique_id "adKoga3pmp1JkaicYbu3vgAAAQU"]
[Mon Apr 06 02:22:58.719291 2026] [:error] [pid 51753:tid 51834] [client 40.85.219.177:10814] [client 40.85.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/mu-plugins/gecko.php"] [unique_id "adKogq3pmp1JkaicYbu3xAAAARY"]
[Mon Apr 06 02:23:00.575422 2026] [:error] [pid 51580:tid 51640] [client 40.85.219.177:10807] [client 40.85.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/mu-plugins/gecko.php"] [unique_id "adKohFNFl1NiyNgNZAlZ5AAAAEE"]
[Mon Apr 06 02:23:02.335992 2026] [:error] [pid 51753:tid 51821] [client 40.85.219.177:10787] [client 40.85.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/footer.php"] [unique_id "adKohq3pmp1JkaicYbu31AAAAQo"]
[Mon Apr 06 02:23:03.711512 2026] [:error] [pid 51584:tid 51719] [client 40.85.219.177:10764] [client 40.85.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/footer.php"] [unique_id "adKoh8Z4qY_GoNCPARBFfwAAANY"]
[Mon Apr 06 02:23:04.931675 2026] [:error] [pid 51581:tid 51677] [client 40.85.219.177:10772] [client 40.85.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/footer.php"] [unique_id "adKoiN4k74fhQLPUy7Fc8QAAAIg"]
[Mon Apr 06 02:23:07.191075 2026] [:error] [pid 51584:tid 51706] [client 40.85.219.177:10628] [client 40.85.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/footer.php"] [unique_id "adKoi8Z4qY_GoNCPARBFjgAAAMk"]
[Mon Apr 06 02:23:10.318124 2026] [:error] [pid 51581:tid 51671] [client 40.85.219.177:11218] [client 40.85.219.177] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "adKojt4k74fhQLPUy7Fc_wAAAII"]
[Mon Apr 06 02:23:12.327762 2026] [:error] [pid 51753:tid 51823] [client 40.85.219.177:10779] [client 40.85.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/config.php"] [unique_id "adKokK3pmp1JkaicYbu34wAAAQw"]
[Mon Apr 06 02:23:14.229406 2026] [:error] [pid 51580:tid 51647] [client 40.85.219.177:11260] [client 40.85.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/config.php"] [unique_id "adKoklNFl1NiyNgNZAlZ-QAAAEg"]
[Mon Apr 06 02:23:15.784877 2026] [:error] [pid 51753:tid 51822] [client 40.85.219.177:10665] [client 40.85.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/config.php"] [unique_id "adKok63pmp1JkaicYbu37gAAAQs"]
[Mon Apr 06 02:23:18.669479 2026] [:error] [pid 51753:tid 51821] [client 40.85.219.177:10799] [client 40.85.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/config.php"] [unique_id "adKolq3pmp1JkaicYbu39QAAAQo"]
[Mon Apr 06 02:23:20.503106 2026] [:error] [pid 51580:tid 51649] [client 40.85.219.177:10655] [client 40.85.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fw.php"] [unique_id "adKomFNFl1NiyNgNZAlaDgAAAEo"]
[Mon Apr 06 02:23:22.356380 2026] [:error] [pid 51580:tid 51643] [client 40.85.219.177:10801] [client 40.85.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fw.php"] [unique_id "adKomlNFl1NiyNgNZAlaFQAAAEQ"]
[Mon Apr 06 02:23:24.142770 2026] [:error] [pid 51753:tid 51823] [client 40.85.219.177:10800] [client 40.85.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fw.php"] [unique_id "adKonK3pmp1JkaicYbu4CAAAAQw"]
[Mon Apr 06 02:23:25.647934 2026] [:error] [pid 51753:tid 51822] [client 40.85.219.177:10773] [client 40.85.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fw.php"] [unique_id "adKona3pmp1JkaicYbu4EwAAAQs"]
[Mon Apr 06 02:23:27.227867 2026] [:error] [pid 51753:tid 51824] [client 40.85.219.177:10669] [client 40.85.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/post.php"] [unique_id "adKon63pmp1JkaicYbu4HgAAAQ0"]
[Mon Apr 06 02:23:29.037379 2026] [:error] [pid 51581:tid 51684] [client 40.85.219.177:10775] [client 40.85.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/post.php"] [unique_id "adKood4k74fhQLPUy7FdHwAAAI8"]
[Mon Apr 06 02:23:31.739972 2026] [:error] [pid 51753:tid 51832] [client 40.85.219.177:11202] [client 40.85.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/post.php"] [unique_id "adKoo63pmp1JkaicYbu4KgAAARU"]
[Mon Apr 06 02:23:39.379028 2026] [:error] [pid 51753:tid 51827] [client 40.85.219.177:11255] [client 40.85.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/post.php"] [unique_id "adKoq63pmp1JkaicYbu4TQAAARA"]
[Mon Apr 06 02:23:40.790178 2026] [:error] [pid 51753:tid 51826] [client 40.85.219.177:10672] [client 40.85.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-login.php"] [unique_id "adKorK3pmp1JkaicYbu4UwAAAQ8"]
[Mon Apr 06 02:23:54.853419 2026] [:error] [pid 51753:tid 51819] [client 40.85.219.177:10624] [client 40.85.219.177] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 40.85.219.177, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-login.php"] [unique_id "adKouq3pmp1JkaicYbu4iQAAAQg"]
[Mon Apr 06 02:23:54.864368 2026] [proxy_fcgi:error] [pid 51753:tid 51819] [client 40.85.219.177:10624] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 02:23:55.085802 2026] [proxy_fcgi:error] [pid 51753:tid 51812] [client 40.85.219.177:10624] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 02:23:55.570681 2026] [:error] [pid 51753:tid 51817] [client 40.85.219.177:10624] [client 40.85.219.177] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/fonts/admin.php"] [unique_id "adKou63pmp1JkaicYbu4kQAAAQY"]
[Mon Apr 06 02:24:34.176677 2026] [:error] [pid 51753:tid 51815] [client 40.85.219.177:10768] [client 40.85.219.177] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/index.php"] [unique_id "adKo4q3pmp1JkaicYbu5FAAAAQQ"]
[Mon Apr 06 02:24:36.591475 2026] [:error] [pid 51753:tid 51811] [client 40.85.219.177:10780] [client 40.85.219.177] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/fonts/install.php"] [unique_id "adKo5K3pmp1JkaicYbu5HAAAAQA"]
[Mon Apr 06 02:24:38.312960 2026] [proxy_fcgi:error] [pid 51580:tid 51653] [client 40.85.219.177:10661] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 02:24:39.192350 2026] [proxy_fcgi:error] [pid 51580:tid 51646] [client 40.85.219.177:10661] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 02:24:40.016809 2026] [proxy_fcgi:error] [pid 51580:tid 51648] [client 40.85.219.177:10661] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 02:24:40.221781 2026] [:error] [pid 51580:tid 51639] [client 40.85.219.177:10661] [client 40.85.219.177] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "adKo6FNFl1NiyNgNZAla8AAAAEA"]
[Mon Apr 06 02:24:42.740502 2026] [:error] [pid 51580:tid 51645] [client 40.85.219.177:10790] [client 40.85.219.177] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/html-api/about.php"] [unique_id "adKo6lNFl1NiyNgNZAlbAAAAAEY"]
[Mon Apr 06 02:24:48.747424 2026] [:error] [pid 51580:tid 51646] [client 40.85.219.177:10806] [client 40.85.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/uploads/index.php"] [unique_id "adKo8FNFl1NiyNgNZAlbGQAAAEc"]
[Mon Apr 06 02:25:03.750983 2026] [:error] [pid 51753:tid 51826] [client 40.85.219.177:11200] [client 40.85.219.177] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "adKo_63pmp1JkaicYbu5hAAAAQ8"]
[Mon Apr 06 02:25:07.636846 2026] [:error] [pid 51581:tid 51678] [client 40.85.219.177:10794] [client 40.85.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/images/lmfi2.php"] [unique_id "adKpA94k74fhQLPUy7FeNgAAAIk"]
[Mon Apr 06 02:25:09.383618 2026] [:error] [pid 51753:tid 51823] [client 40.85.219.177:11257] [client 40.85.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/images/lmfi2.php"] [unique_id "adKpBa3pmp1JkaicYbu5rgAAAQw"]
[Mon Apr 06 02:25:14.378887 2026] [:error] [pid 51753:tid 51835] [client 40.85.219.177:10761] [client 40.85.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/images/lmfi2.php"] [unique_id "adKpCq3pmp1JkaicYbu5wQAAARc"]
[Mon Apr 06 02:25:16.938292 2026] [:error] [pid 51584:tid 51719] [client 40.85.219.177:11239] [client 40.85.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/function.php"] [unique_id "adKpDMZ4qY_GoNCPARBGnAAAANY"]
[Mon Apr 06 02:25:19.621277 2026] [:error] [pid 51753:tid 51825] [client 40.85.219.177:10815] [client 40.85.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/function.php"] [unique_id "adKpD63pmp1JkaicYbu53AAAAQ4"]
[Mon Apr 06 02:25:22.568396 2026] [:error] [pid 51753:tid 51830] [client 40.85.219.177:10778] [client 40.85.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/function.php"] [unique_id "adKpEq3pmp1JkaicYbu5_gAAARM"]
[Mon Apr 06 02:25:24.233544 2026] [:error] [pid 51753:tid 51822] [client 40.85.219.177:10809] [client 40.85.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/function.php"] [unique_id "adKpFK3pmp1JkaicYbu6FAAAAQs"]
[Mon Apr 06 02:25:26.252525 2026] [:error] [pid 51584:tid 51719] [client 40.85.219.177:10757] [client 40.85.219.177] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Text/Diff/alfa-rex.php"] [unique_id "adKpFsZ4qY_GoNCPARBGwgAAANY"]
[Mon Apr 06 02:25:30.772703 2026] [:error] [pid 51753:tid 51831] [client 40.85.219.177:11220] [client 40.85.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/images/chosen.php"] [unique_id "adKpGq3pmp1JkaicYbu6RgAAARQ"]
[Mon Apr 06 02:25:35.390798 2026] [:error] [pid 51580:tid 51656] [client 40.85.219.177:10798] [client 40.85.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/images/chosen.php"] [unique_id "adKpH1NFl1NiyNgNZAlbtAAAAFE"]
[Mon Apr 06 02:25:40.148974 2026] [:error] [pid 51584:tid 51718] [client 40.85.219.177:11224] [client 40.85.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/images/chosen.php"] [unique_id "adKpJMZ4qY_GoNCPARBHHAAAANU"]
[Mon Apr 06 02:25:44.375036 2026] [proxy_fcgi:error] [pid 51581:tid 51691] [client 40.85.219.177:10803] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 02:25:45.038293 2026] [:error] [pid 51581:tid 51693] [client 40.85.219.177:10803] [client 40.85.219.177] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Text/Diff/alfa-rex.php"] [unique_id "adKpKd4k74fhQLPUy7FeiQAAAJc"]
[Mon Apr 06 02:25:46.562044 2026] [proxy_fcgi:error] [pid 51584:tid 51712] [client 40.85.219.177:10765] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 02:25:46.811823 2026] [proxy_fcgi:error] [pid 51584:tid 51704] [client 40.85.219.177:10765] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 02:25:47.020035 2026] [proxy_fcgi:error] [pid 51584:tid 51710] [client 40.85.219.177:10765] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 02:25:47.228531 2026] [proxy_fcgi:error] [pid 51584:tid 51721] [client 40.85.219.177:10765] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 02:25:48.708938 2026] [proxy_fcgi:error] [pid 51584:tid 51711] [client 40.85.219.177:10765] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 02:25:49.186987 2026] [proxy_fcgi:error] [pid 51584:tid 51698] [client 40.85.219.177:10765] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 02:25:49.396550 2026] [:error] [pid 51584:tid 51712] [client 40.85.219.177:10765] [client 40.85.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class-wp-html-open-elements.php"] [unique_id "adKpLcZ4qY_GoNCPARBHVgAAAM8"]
[Mon Apr 06 02:25:50.747522 2026] [:error] [pid 51580:tid 51650] [client 40.85.219.177:10759] [client 40.85.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class-wp-html-open-elements.php"] [unique_id "adKpLlNFl1NiyNgNZAlb7AAAAEs"]
[Mon Apr 06 02:25:52.343178 2026] [:error] [pid 51580:tid 51642] [client 40.85.219.177:11253] [client 40.85.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class-wp-html-open-elements.php"] [unique_id "adKpMFNFl1NiyNgNZAlb9QAAAEM"]
[Mon Apr 06 02:25:54.177345 2026] [:error] [pid 51580:tid 51639] [client 40.85.219.177:11207] [client 40.85.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class-wp-html-open-elements.php"] [unique_id "adKpMlNFl1NiyNgNZAlb-gAAAEA"]
[Mon Apr 06 02:25:58.549478 2026] [:error] [pid 51580:tid 51662] [client 40.85.219.177:10760] [client 40.85.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class-wp-html-processor-state.php"] [unique_id "adKpNlNFl1NiyNgNZAlcEwAAAFc"]
[Mon Apr 06 02:26:06.865165 2026] [:error] [pid 51581:tid 51688] [client 40.85.219.177:11216] [client 40.85.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class-wp-html-processor-state.php"] [unique_id "adKpPt4k74fhQLPUy7FeugAAAJM"]
[Mon Apr 06 02:26:11.202502 2026] [:error] [pid 51753:tid 51820] [client 40.85.219.177:11201] [client 40.85.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class-wp-html-processor.php"] [unique_id "adKpQ63pmp1JkaicYbu7jQAAAQk"]
[Mon Apr 06 02:26:13.308296 2026] [:error] [pid 51753:tid 51823] [client 40.85.219.177:10763] [client 40.85.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class-wp-html-processor.php"] [unique_id "adKpRa3pmp1JkaicYbu7mAAAAQw"]
[Mon Apr 06 02:26:15.621578 2026] [:error] [pid 51580:tid 51656] [client 40.85.219.177:10802] [client 40.85.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class-wp-html-processor.php"] [unique_id "adKpR1NFl1NiyNgNZAlcNgAAAFE"]
[Mon Apr 06 02:26:17.307895 2026] [:error] [pid 51584:tid 51704] [client 40.85.219.177:10804] [client 40.85.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class-wp-html-processor.php"] [unique_id "adKpScZ4qY_GoNCPARBHvgAAAMc"]
[Mon Apr 06 02:26:18.258654 2026] [:error] [pid 51584:tid 51710] [client 40.85.219.177:10770] [client 40.85.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class-wp-html-span.php"] [unique_id "adKpSsZ4qY_GoNCPARBHwwAAAM0"]
[Mon Apr 06 02:26:18.937329 2026] [:error] [pid 51753:tid 51816] [client 40.85.219.177:10659] [client 40.85.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class-wp-html-span.php"] [unique_id "adKpSq3pmp1JkaicYbu7qgAAAQU"]
[Mon Apr 06 02:26:20.443334 2026] [:error] [pid 51753:tid 51820] [client 40.85.219.177:10783] [client 40.85.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class-wp-html-span.php"] [unique_id "adKpTK3pmp1JkaicYbu7tAAAAQk"]
[Mon Apr 06 02:26:21.645302 2026] [:error] [pid 51584:tid 51720] [client 40.85.219.177:10784] [client 40.85.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class-wp-html-span.php"] [unique_id "adKpTcZ4qY_GoNCPARBHzQAAANc"]
[Mon Apr 06 02:26:23.013345 2026] [:error] [pid 51753:tid 51832] [client 40.85.219.177:10766] [client 40.85.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class-wp-html-stack-event.php"] [unique_id "adKpT63pmp1JkaicYbu7xQAAARU"]
[Mon Apr 06 02:26:24.867558 2026] [:error] [pid 51584:tid 51704] [client 40.85.219.177:10808] [client 40.85.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class-wp-html-stack-event.php"] [unique_id "adKpUMZ4qY_GoNCPARBH1wAAAMc"]
[Mon Apr 06 02:26:29.379388 2026] [:error] [pid 51753:tid 51830] [client 40.85.219.177:10776] [client 40.85.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class-wp-html-stack-event.php"] [unique_id "adKpVa3pmp1JkaicYbu74QAAARM"]
[Mon Apr 06 02:26:30.158649 2026] [:error] [pid 51581:tid 51673] [client 40.85.219.177:10754] [client 40.85.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class-wp-html-stack-event.php"] [unique_id "adKpVt4k74fhQLPUy7Fe8QAAAIQ"]
[Mon Apr 06 02:26:30.886714 2026] [:error] [pid 51580:tid 51641] [client 40.85.219.177:10626] [client 40.85.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class-wp-html-tag-processor.php"] [unique_id "adKpVlNFl1NiyNgNZAlcYgAAAEI"]
[Mon Apr 06 02:26:32.750743 2026] [:error] [pid 51753:tid 51818] [client 40.85.219.177:10774] [client 40.85.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class-wp-html-tag-processor.php"] [unique_id "adKpWK3pmp1JkaicYbu77wAAAQc"]
[Mon Apr 06 02:26:34.752780 2026] [:error] [pid 51580:tid 51647] [client 40.85.219.177:11262] [client 40.85.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class-wp-html-tag-processor.php"] [unique_id "adKpWlNFl1NiyNgNZAlcdwAAAEg"]
[Mon Apr 06 02:26:37.035303 2026] [:error] [pid 51584:tid 51701] [client 40.85.219.177:10788] [client 40.85.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class-wp-html-tag-processor.php"] [unique_id "adKpXcZ4qY_GoNCPARBH8QAAAMQ"]
[Mon Apr 06 02:26:38.473260 2026] [:error] [pid 51581:tid 51687] [client 40.85.219.177:11217] [client 40.85.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class-wp-html-text-replacement.php"] [unique_id "adKpXt4k74fhQLPUy7FfAQAAAJI"]
[Mon Apr 06 02:26:39.451471 2026] [:error] [pid 51753:tid 51820] [client 40.85.219.177:10650] [client 40.85.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class-wp-html-text-replacement.php"] [unique_id "adKpX63pmp1JkaicYbu8GQAAAQk"]
[Mon Apr 06 02:26:41.080348 2026] [:error] [pid 51753:tid 51830] [client 40.85.219.177:11210] [client 40.85.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class-wp-html-text-replacement.php"] [unique_id "adKpYa3pmp1JkaicYbu8JgAAARM"]
[Mon Apr 06 02:26:42.127671 2026] [:error] [pid 51581:tid 51691] [client 40.85.219.177:11214] [client 40.85.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class-wp-html-text-replacement.php"] [unique_id "adKpYt4k74fhQLPUy7FfBwAAAJU"]
[Mon Apr 06 02:26:44.320989 2026] [:error] [pid 51581:tid 51684] [client 40.85.219.177:11256] [client 40.85.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class-wp-html-token.php"] [unique_id "adKpZN4k74fhQLPUy7FfDgAAAI8"]
[Mon Apr 06 02:26:45.496793 2026] [:error] [pid 51581:tid 51683] [client 40.85.219.177:10792] [client 40.85.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class-wp-html-token.php"] [unique_id "adKpZd4k74fhQLPUy7FfEQAAAI4"]
[Mon Apr 06 02:26:46.327709 2026] [:error] [pid 51580:tid 51647] [client 40.85.219.177:11243] [client 40.85.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class-wp-html-token.php"] [unique_id "adKpZlNFl1NiyNgNZAlcpwAAAEg"]
[Mon Apr 06 02:26:47.086863 2026] [:error] [pid 51580:tid 51646] [client 40.85.219.177:10812] [client 40.85.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class-wp-html-token.php"] [unique_id "adKpZ1NFl1NiyNgNZAlcqwAAAEc"]
[Mon Apr 06 02:26:48.489411 2026] [:error] [pid 51580:tid 51655] [client 40.85.219.177:11230] [client 40.85.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class-wp-html-unsupported-exception.php"] [unique_id "adKpaFNFl1NiyNgNZAlcrwAAAFA"]
[Mon Apr 06 02:26:49.467632 2026] [proxy_fcgi:error] [pid 51580:tid 51639] [client 40.85.219.177:11206] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 02:26:49.682308 2026] [proxy_fcgi:error] [pid 51580:tid 51652] [client 40.85.219.177:11206] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 02:26:49.890517 2026] [proxy_fcgi:error] [pid 51580:tid 51655] [client 40.85.219.177:11206] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 02:26:50.101003 2026] [proxy_fcgi:error] [pid 51580:tid 51649] [client 40.85.219.177:11206] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 02:26:50.330310 2026] [proxy_fcgi:error] [pid 51580:tid 51659] [client 40.85.219.177:11206] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 02:26:50.548627 2026] [proxy_fcgi:error] [pid 51580:tid 51657] [client 40.85.219.177:11206] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 05:19:55.253289 2026] [proxy_fcgi:error] [pid 35786:tid 35815] [client 98.71.81.8:26045] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 05:19:56.768316 2026] [proxy_fcgi:error] [pid 35786:tid 35800] [client 98.71.81.8:26045] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 05:19:57.024557 2026] [proxy_fcgi:error] [pid 35786:tid 35807] [client 98.71.81.8:26045] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 05:19:57.277541 2026] [proxy_fcgi:error] [pid 35786:tid 35805] [client 98.71.81.8:26045] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 05:19:57.530275 2026] [proxy_fcgi:error] [pid 35786:tid 35793] [client 98.71.81.8:26045] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 05:19:57.783888 2026] [proxy_fcgi:error] [pid 35786:tid 35817] [client 98.71.81.8:26045] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 05:19:58.036830 2026] [proxy_fcgi:error] [pid 35786:tid 35797] [client 98.71.81.8:26045] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 05:27:57.518570 2026] [:error] [pid 35687:tid 35743] [client 157.230.36.222:59292] [client 157.230.36.222] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/sftp-config.json"] [unique_id "adLT3Z3LtDozV0i8BiuXZgAAAFQ"]
[Mon Apr 06 19:18:41.636074 2026] [proxy_fcgi:error] [pid 9442:tid 9451] [client 20.215.65.23:24548] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 19:18:41.893585 2026] [proxy_fcgi:error] [pid 9442:tid 9457] [client 20.215.65.23:24548] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 19:18:42.151549 2026] [proxy_fcgi:error] [pid 9442:tid 9462] [client 20.215.65.23:24548] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 19:18:42.409004 2026] [proxy_fcgi:error] [pid 9442:tid 9446] [client 20.215.65.23:24548] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 19:18:42.666682 2026] [proxy_fcgi:error] [pid 9442:tid 9444] [client 20.215.65.23:24548] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 19:18:42.924413 2026] [proxy_fcgi:error] [pid 9442:tid 9453] [client 20.215.65.23:24548] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 19:18:43.182365 2026] [proxy_fcgi:error] [pid 9442:tid 9454] [client 20.215.65.23:24548] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 19:18:43.440287 2026] [proxy_fcgi:error] [pid 9442:tid 9449] [client 20.215.65.23:24548] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 19:18:43.702924 2026] [proxy_fcgi:error] [pid 9442:tid 9465] [client 20.215.65.23:24548] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 19:18:43.962076 2026] [proxy_fcgi:error] [pid 9442:tid 9460] [client 20.215.65.23:24548] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 19:18:44.217337 2026] [:error] [pid 9442:tid 9458] [client 20.215.65.23:24548] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/7.php"] [unique_id "adOWlEPsNnAJTnmz6saWSwAAAQ4"]
[Mon Apr 06 19:18:44.726127 2026] [:error] [pid 35688:tid 35763] [client 20.215.65.23:46546] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/7.php"] [unique_id "adOWlOZ85qg4jLsRpQyC5AAAAI0"]
[Mon Apr 06 19:18:45.235201 2026] [:error] [pid 35687:tid 35748] [client 20.215.65.23:38726] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/7.php"] [unique_id "adOWlZ3LtDozV0i8Bite7gAAAFg"]
[Mon Apr 06 19:18:45.747057 2026] [:error] [pid 1827:tid 1847] [client 20.215.65.23:57551] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/7.php"] [unique_id "adOWleVeb6S_DnjZ2xH_AgAAAhI"]
[Mon Apr 06 19:18:46.259905 2026] [:error] [pid 1827:tid 1848] [client 20.215.65.23:57578] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/8.php"] [unique_id "adOWluVeb6S_DnjZ2xH_BQAAAhM"]
[Mon Apr 06 19:18:46.770636 2026] [:error] [pid 9442:tid 9460] [client 20.215.65.23:39367] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/8.php"] [unique_id "adOWlkPsNnAJTnmz6saWVAAAARA"]
[Mon Apr 06 19:18:47.281052 2026] [:error] [pid 9442:tid 9452] [client 20.215.65.23:24573] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/8.php"] [unique_id "adOWl0PsNnAJTnmz6saWVgAAAQg"]
[Mon Apr 06 19:18:47.790637 2026] [:error] [pid 38562:tid 38589] [client 20.215.65.23:18478] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/8.php"] [unique_id "adOWl6eD6Ohe6wzRuy5vMQAAAVg"]
[Mon Apr 06 19:18:48.298777 2026] [:error] [pid 38562:tid 38578] [client 20.215.65.23:32461] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/1.php"] [unique_id "adOWmKeD6Ohe6wzRuy5vOAAAAU0"]
[Mon Apr 06 19:18:48.807440 2026] [:error] [pid 38562:tid 38580] [client 20.215.65.23:36174] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/1.php"] [unique_id "adOWmKeD6Ohe6wzRuy5vOwAAAU8"]
[Mon Apr 06 19:18:49.317997 2026] [:error] [pid 35688:tid 35768] [client 20.215.65.23:19639] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/1.php"] [unique_id "adOWmeZ85qg4jLsRpQyC6QAAAJI"]
[Mon Apr 06 19:18:49.826490 2026] [:error] [pid 35686:tid 35705] [client 20.215.65.23:38730] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/1.php"] [unique_id "adOWmcMKdea6oORd2fzIRQAAAAk"]
[Mon Apr 06 19:18:50.335497 2026] [:error] [pid 10280:tid 10289] [client 20.215.65.23:14381] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2.php"] [unique_id "adOWml8QUJkf8g-BFfPYRQAAAcY"]
[Mon Apr 06 19:18:50.845112 2026] [:error] [pid 10280:tid 10304] [client 20.215.65.23:34015] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2.php"] [unique_id "adOWml8QUJkf8g-BFfPYSQAAAdU"]
[Mon Apr 06 19:18:51.354120 2026] [:error] [pid 35687:tid 35738] [client 20.215.65.23:19659] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2.php"] [unique_id "adOWm53LtDozV0i8Bite8gAAAE8"]
[Mon Apr 06 19:18:51.874337 2026] [:error] [pid 35687:tid 35727] [client 20.215.65.23:57585] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2.php"] [unique_id "adOWm53LtDozV0i8Bite9QAAAEQ"]
[Mon Apr 06 19:18:52.385563 2026] [:error] [pid 35786:tid 35804] [client 20.215.65.23:15451] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/3.php"] [unique_id "adOWnGgkfCKTaLhwaKQUwQAAAMs"]
[Mon Apr 06 19:18:52.894172 2026] [:error] [pid 35687:tid 35734] [client 20.215.65.23:36193] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/3.php"] [unique_id "adOWnJ3LtDozV0i8Bite-QAAAEs"]
[Mon Apr 06 19:18:53.402877 2026] [:error] [pid 35786:tid 35812] [client 20.215.65.23:36099] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/3.php"] [unique_id "adOWnWgkfCKTaLhwaKQUxQAAANM"]
[Mon Apr 06 19:18:53.910663 2026] [:error] [pid 9413:tid 9419] [client 20.215.65.23:36197] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/3.php"] [unique_id "adOWnXllvEK3chn01wG6HQAAAYQ"]
[Mon Apr 06 19:18:54.418710 2026] [:error] [pid 35686:tid 35717] [client 20.215.65.23:57550] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/4.php"] [unique_id "adOWnsMKdea6oORd2fzISQAAABU"]
[Mon Apr 06 19:18:54.927909 2026] [:error] [pid 38562:tid 38566] [client 20.215.65.23:57549] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/4.php"] [unique_id "adOWnqeD6Ohe6wzRuy5vSAAAAUE"]
[Mon Apr 06 19:18:55.440974 2026] [:error] [pid 10280:tid 10295] [client 20.215.65.23:33500] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/4.php"] [unique_id "adOWn18QUJkf8g-BFfPYWQAAAcw"]
[Mon Apr 06 19:18:55.951571 2026] [:error] [pid 35687:tid 35745] [client 20.215.65.23:21583] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/4.php"] [unique_id "adOWn53LtDozV0i8BitfAQAAAFY"]
[Mon Apr 06 19:18:56.463981 2026] [:error] [pid 9442:tid 9463] [client 20.215.65.23:57573] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/5.php"] [unique_id "adOWoEPsNnAJTnmz6saWXgAAARM"]
[Mon Apr 06 19:18:56.973440 2026] [:error] [pid 9442:tid 9461] [client 20.215.65.23:26536] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/5.php"] [unique_id "adOWoEPsNnAJTnmz6saWYAAAARE"]
[Mon Apr 06 19:18:57.483592 2026] [:error] [pid 35688:tid 35751] [client 20.215.65.23:34004] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/5.php"] [unique_id "adOWoeZ85qg4jLsRpQyC8wAAAIE"]
[Mon Apr 06 19:18:57.993137 2026] [:error] [pid 9442:tid 9455] [client 20.215.65.23:14395] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/5.php"] [unique_id "adOWoUPsNnAJTnmz6saWaQAAAQs"]
[Mon Apr 06 19:18:58.507202 2026] [:error] [pid 35688:tid 35772] [client 20.215.65.23:24544] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/6.php"] [unique_id "adOWouZ85qg4jLsRpQyC9QAAAJY"]
[Mon Apr 06 19:18:59.014977 2026] [:error] [pid 35688:tid 35768] [client 20.215.65.23:33516] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/6.php"] [unique_id "adOWo-Z85qg4jLsRpQyC-AAAAJI"]
[Mon Apr 06 19:18:59.524148 2026] [:error] [pid 9442:tid 9463] [client 20.215.65.23:24547] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/6.php"] [unique_id "adOWo0PsNnAJTnmz6saWbwAAARM"]
[Mon Apr 06 19:19:00.035389 2026] [:error] [pid 9442:tid 9446] [client 20.215.65.23:33510] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/6.php"] [unique_id "adOWpEPsNnAJTnmz6saWcgAAAQI"]
[Mon Apr 06 19:19:00.548019 2026] [:error] [pid 1827:tid 1848] [client 20.215.65.23:17277] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/9.php"] [unique_id "adOWpOVeb6S_DnjZ2xH_FQAAAhM"]
[Mon Apr 06 19:19:01.057652 2026] [:error] [pid 35688:tid 35760] [client 20.215.65.23:36167] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/9.php"] [unique_id "adOWpeZ85qg4jLsRpQyDAQAAAIo"]
[Mon Apr 06 19:19:01.567053 2026] [:error] [pid 35686:tid 35706] [client 20.215.65.23:33492] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/9.php"] [unique_id "adOWpcMKdea6oORd2fzITwAAAAo"]
[Mon Apr 06 19:19:02.076412 2026] [:error] [pid 35688:tid 35766] [client 20.215.65.23:33408] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/9.php"] [unique_id "adOWpuZ85qg4jLsRpQyDCQAAAJA"]
[Mon Apr 06 19:19:02.585593 2026] [:error] [pid 9442:tid 9454] [client 20.215.65.23:33446] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/10.php"] [unique_id "adOWpkPsNnAJTnmz6saWdAAAAQo"]
[Mon Apr 06 19:19:03.093879 2026] [:error] [pid 1827:tid 1837] [client 20.215.65.23:31065] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/10.php"] [unique_id "adOWp-Veb6S_DnjZ2xH_GwAAAgg"]
[Mon Apr 06 19:19:03.603080 2026] [:error] [pid 1827:tid 1834] [client 20.215.65.23:33532] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/10.php"] [unique_id "adOWp-Veb6S_DnjZ2xH_HQAAAgU"]
[Mon Apr 06 19:19:04.111861 2026] [:error] [pid 35687:tid 35744] [client 20.215.65.23:33428] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/10.php"] [unique_id "adOWqJ3LtDozV0i8BitfDwAAAFU"]
[Mon Apr 06 19:19:04.621270 2026] [:error] [pid 35688:tid 35753] [client 20.215.65.23:38059] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.mopj.php"] [unique_id "adOWqOZ85qg4jLsRpQyDDQAAAIM"]
[Mon Apr 06 19:19:05.130367 2026] [:error] [pid 1827:tid 1842] [client 20.215.65.23:34539] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.mopj.php"] [unique_id "adOWqeVeb6S_DnjZ2xH_KAAAAg0"]
[Mon Apr 06 19:19:05.639428 2026] [:error] [pid 35786:tid 35814] [client 20.215.65.23:39379] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.mopj.php"] [unique_id "adOWqWgkfCKTaLhwaKQUywAAANU"]
[Mon Apr 06 19:19:06.148717 2026] [:error] [pid 35688:tid 35760] [client 20.215.65.23:32464] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.mopj.php"] [unique_id "adOWquZ85qg4jLsRpQyDEQAAAIo"]
[Mon Apr 06 19:19:06.656820 2026] [:error] [pid 35688:tid 35762] [client 20.215.65.23:19668] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/100.php"] [unique_id "adOWquZ85qg4jLsRpQyDFQAAAIw"]
[Mon Apr 06 19:19:07.166147 2026] [:error] [pid 35687:tid 35730] [client 20.215.65.23:17787] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/100.php"] [unique_id "adOWq53LtDozV0i8BitfFQAAAEc"]
[Mon Apr 06 19:19:07.678638 2026] [:error] [pid 35688:tid 35757] [client 20.215.65.23:17742] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/100.php"] [unique_id "adOWq-Z85qg4jLsRpQyDFgAAAIc"]
[Mon Apr 06 19:19:08.189270 2026] [:error] [pid 10280:tid 10299] [client 20.215.65.23:33417] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/100.php"] [unique_id "adOWrF8QUJkf8g-BFfPYdgAAAdA"]
[Mon Apr 06 19:19:08.697579 2026] [:error] [pid 35786:tid 35802] [client 20.215.65.23:33484] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nano.php"] [unique_id "adOWrGgkfCKTaLhwaKQU0QAAAMk"]
[Mon Apr 06 19:19:09.205317 2026] [:error] [pid 35786:tid 35793] [client 20.215.65.23:2897] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nano.php"] [unique_id "adOWrWgkfCKTaLhwaKQU0gAAAMA"]
[Mon Apr 06 19:19:09.716372 2026] [:error] [pid 10280:tid 10289] [client 20.215.65.23:36206] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nano.php"] [unique_id "adOWrV8QUJkf8g-BFfPYfgAAAcY"]
[Mon Apr 06 19:19:10.225908 2026] [:error] [pid 38562:tid 38573] [client 20.215.65.23:36220] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nano.php"] [unique_id "adOWrqeD6Ohe6wzRuy5vVAAAAUg"]
[Mon Apr 06 19:19:10.737315 2026] [:error] [pid 38562:tid 38571] [client 20.215.65.23:15128] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f35_S.php"] [unique_id "adOWrqeD6Ohe6wzRuy5vVwAAAUY"]
[Mon Apr 06 19:19:11.249328 2026] [:error] [pid 10280:tid 10283] [client 20.215.65.23:24535] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f35_S.php"] [unique_id "adOWr18QUJkf8g-BFfPYgAAAAcA"]
[Mon Apr 06 19:19:11.759635 2026] [:error] [pid 35688:tid 35764] [client 20.215.65.23:29691] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f35_S.php"] [unique_id "adOWr-Z85qg4jLsRpQyDIAAAAI4"]
[Mon Apr 06 19:19:12.269030 2026] [:error] [pid 9442:tid 9462] [client 20.215.65.23:19648] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f35_S.php"] [unique_id "adOWsEPsNnAJTnmz6saWhgAAARI"]
[Mon Apr 06 19:19:12.776980 2026] [:error] [pid 9442:tid 9451] [client 20.215.65.23:26513] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2026w.php"] [unique_id "adOWsEPsNnAJTnmz6saWiwAAAQc"]
[Mon Apr 06 19:19:13.286400 2026] [:error] [pid 35688:tid 35771] [client 20.215.65.23:36111] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2026w.php"] [unique_id "adOWseZ85qg4jLsRpQyDJwAAAJU"]
[Mon Apr 06 19:19:13.796351 2026] [:error] [pid 35688:tid 35755] [client 20.215.65.23:36103] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2026w.php"] [unique_id "adOWseZ85qg4jLsRpQyDKgAAAIU"]
[Mon Apr 06 19:19:14.308763 2026] [:error] [pid 10280:tid 10306] [client 20.215.65.23:32493] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2026w.php"] [unique_id "adOWsl8QUJkf8g-BFfPYhQAAAdc"]
[Mon Apr 06 19:19:14.817411 2026] [:error] [pid 35687:tid 35739] [client 20.215.65.23:14351] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file31.php"] [unique_id "adOWsp3LtDozV0i8BitfGwAAAFA"]
[Mon Apr 06 19:19:15.326483 2026] [:error] [pid 35687:tid 35744] [client 20.215.65.23:34543] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file31.php"] [unique_id "adOWs53LtDozV0i8BitfHgAAAFU"]
[Mon Apr 06 19:19:15.840556 2026] [:error] [pid 1827:tid 1833] [client 20.215.65.23:57577] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file31.php"] [unique_id "adOWs-Veb6S_DnjZ2xH_OAAAAgQ"]
[Mon Apr 06 19:19:16.351045 2026] [:error] [pid 1827:tid 1840] [client 20.215.65.23:19689] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file31.php"] [unique_id "adOWtOVeb6S_DnjZ2xH_PQAAAgs"]
[Mon Apr 06 19:19:16.861461 2026] [:error] [pid 35687:tid 35724] [client 20.215.65.23:18274] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/111.php"] [unique_id "adOWtJ3LtDozV0i8BitfJAAAAEE"]
[Mon Apr 06 19:19:17.375661 2026] [:error] [pid 1827:tid 1832] [client 20.215.65.23:34044] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/111.php"] [unique_id "adOWteVeb6S_DnjZ2xH_PwAAAgM"]
[Mon Apr 06 19:19:17.884737 2026] [:error] [pid 35686:tid 35707] [client 20.215.65.23:36162] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/111.php"] [unique_id "adOWtcMKdea6oORd2fzIWwAAAAs"]
[Mon Apr 06 19:19:18.394996 2026] [:error] [pid 35786:tid 35794] [client 20.215.65.23:14345] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/111.php"] [unique_id "adOWtmgkfCKTaLhwaKQU2QAAAME"]
[Mon Apr 06 19:19:18.907453 2026] [:error] [pid 35687:tid 35735] [client 20.215.65.23:19652] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/control.php"] [unique_id "adOWtp3LtDozV0i8BitfKQAAAEw"]
[Mon Apr 06 19:19:19.416833 2026] [:error] [pid 10280:tid 10300] [client 20.215.65.23:32454] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/control.php"] [unique_id "adOWt18QUJkf8g-BFfPYlQAAAdE"]
[Mon Apr 06 19:19:19.926801 2026] [:error] [pid 35786:tid 35817] [client 20.215.65.23:39369] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/control.php"] [unique_id "adOWt2gkfCKTaLhwaKQU2wAAANg"]
[Mon Apr 06 19:19:20.437296 2026] [:error] [pid 9442:tid 9468] [client 20.215.65.23:19672] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/control.php"] [unique_id "adOWuEPsNnAJTnmz6saWlgAAARg"]
[Mon Apr 06 19:19:20.946382 2026] [:error] [pid 35786:tid 35810] [client 20.215.65.23:17529] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/1111.php"] [unique_id "adOWuGgkfCKTaLhwaKQU3QAAANE"]
[Mon Apr 06 19:19:21.461313 2026] [:error] [pid 9442:tid 9453] [client 20.215.65.23:57579] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/1111.php"] [unique_id "adOWuUPsNnAJTnmz6saWmwAAAQk"]
[Mon Apr 06 19:19:21.971589 2026] [:error] [pid 1827:tid 1829] [client 20.215.65.23:2406] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/1111.php"] [unique_id "adOWueVeb6S_DnjZ2xH_RAAAAgA"]
[Mon Apr 06 19:19:22.480901 2026] [:error] [pid 9442:tid 9446] [client 20.215.65.23:19625] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/1111.php"] [unique_id "adOWukPsNnAJTnmz6saWqAAAAQI"]
[Mon Apr 06 19:19:22.990132 2026] [:error] [pid 9442:tid 9466] [client 20.215.65.23:26526] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fetch.php"] [unique_id "adOWukPsNnAJTnmz6saWrwAAARY"]
[Mon Apr 06 19:19:23.498943 2026] [:error] [pid 38562:tid 38569] [client 20.215.65.23:39422] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fetch.php"] [unique_id "adOWu6eD6Ohe6wzRuy5vXQAAAUQ"]
[Mon Apr 06 19:19:24.012930 2026] [:error] [pid 38562:tid 38568] [client 20.215.65.23:24532] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fetch.php"] [unique_id "adOWvKeD6Ohe6wzRuy5vXwAAAUM"]
[Mon Apr 06 19:19:24.521786 2026] [:error] [pid 35686:tid 35712] [client 20.215.65.23:39403] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fetch.php"] [unique_id "adOWvMMKdea6oORd2fzIZgAAABA"]
[Mon Apr 06 19:19:25.031759 2026] [:error] [pid 9442:tid 9450] [client 20.215.65.23:33486] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp1.php"] [unique_id "adOWvUPsNnAJTnmz6saWwwAAAQY"]
[Mon Apr 06 19:19:25.540195 2026] [:error] [pid 9442:tid 9446] [client 20.215.65.23:34035] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp1.php"] [unique_id "adOWvUPsNnAJTnmz6saWyAAAAQI"]
[Mon Apr 06 19:19:26.050399 2026] [:error] [pid 9442:tid 9459] [client 20.215.65.23:26523] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp1.php"] [unique_id "adOWvkPsNnAJTnmz6saWzwAAAQ8"]
[Mon Apr 06 19:19:26.558643 2026] [:error] [pid 9442:tid 9455] [client 20.215.65.23:36178] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp1.php"] [unique_id "adOWvkPsNnAJTnmz6saW2AAAAQs"]
[Mon Apr 06 19:19:27.070793 2026] [:error] [pid 1827:tid 1844] [client 20.215.65.23:39390] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aligk.php"] [unique_id "adOWv-Veb6S_DnjZ2xH_SwAAAg8"]
[Mon Apr 06 19:19:27.581116 2026] [:error] [pid 35786:tid 35800] [client 20.215.65.23:24554] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aligk.php"] [unique_id "adOWv2gkfCKTaLhwaKQU3wAAAMc"]
[Mon Apr 06 19:19:28.089549 2026] [:error] [pid 9442:tid 9467] [client 20.215.65.23:39409] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aligk.php"] [unique_id "adOWwEPsNnAJTnmz6saW4QAAARc"]
[Mon Apr 06 19:19:28.597247 2026] [:error] [pid 1827:tid 1841] [client 20.215.65.23:33993] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aligk.php"] [unique_id "adOWwOVeb6S_DnjZ2xH_UQAAAgw"]
[Mon Apr 06 19:19:29.106385 2026] [:error] [pid 9442:tid 9466] [client 20.215.65.23:57598] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/byrgo.php"] [unique_id "adOWwUPsNnAJTnmz6saW5wAAARY"]
[Mon Apr 06 19:19:29.616358 2026] [:error] [pid 9442:tid 9452] [client 20.215.65.23:34528] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/byrgo.php"] [unique_id "adOWwUPsNnAJTnmz6saW6wAAAQg"]
[Mon Apr 06 19:19:30.127884 2026] [:error] [pid 9442:tid 9448] [client 20.215.65.23:32504] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/byrgo.php"] [unique_id "adOWwkPsNnAJTnmz6saW9AAAAQQ"]
[Mon Apr 06 19:19:30.636055 2026] [:error] [pid 9442:tid 9454] [client 20.215.65.23:36126] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/byrgo.php"] [unique_id "adOWwkPsNnAJTnmz6saW-AAAAQo"]
[Mon Apr 06 19:19:31.146952 2026] [:error] [pid 9413:tid 9425] [client 20.215.65.23:34448] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xwpg.php"] [unique_id "adOWw3llvEK3chn01wG6OgAAAYo"]
[Mon Apr 06 19:19:31.655717 2026] [:error] [pid 35688:tid 35755] [client 20.215.65.23:34508] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xwpg.php"] [unique_id "adOWw-Z85qg4jLsRpQyDLgAAAIU"]
[Mon Apr 06 19:19:32.169332 2026] [:error] [pid 35687:tid 35734] [client 20.215.65.23:64111] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xwpg.php"] [unique_id "adOWxJ3LtDozV0i8BitfMQAAAEs"]
[Mon Apr 06 19:19:32.678569 2026] [:error] [pid 35687:tid 35740] [client 20.215.65.23:32508] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xwpg.php"] [unique_id "adOWxJ3LtDozV0i8BitfMgAAAFE"]
[Mon Apr 06 19:19:33.194834 2026] [:error] [pid 38562:tid 38573] [client 20.215.65.23:34001] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ass.php"] [unique_id "adOWxaeD6Ohe6wzRuy5vZwAAAUg"]
[Mon Apr 06 19:19:33.704412 2026] [:error] [pid 9442:tid 9452] [client 20.215.65.23:33514] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ass.php"] [unique_id "adOWxUPsNnAJTnmz6saXDwAAAQg"]
[Mon Apr 06 19:19:34.220047 2026] [:error] [pid 1827:tid 1842] [client 20.215.65.23:33480] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ass.php"] [unique_id "adOWxuVeb6S_DnjZ2xH_VwAAAg0"]
[Mon Apr 06 19:19:34.729169 2026] [:error] [pid 9442:tid 9447] [client 20.215.65.23:57561] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ass.php"] [unique_id "adOWxkPsNnAJTnmz6saXFQAAAQM"]
[Mon Apr 06 19:19:35.238675 2026] [:error] [pid 38562:tid 38571] [client 20.215.65.23:36104] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/about.php"] [unique_id "adOWx6eD6Ohe6wzRuy5vawAAAUY"]
[Mon Apr 06 19:19:35.748223 2026] [:error] [pid 9442:tid 9468] [client 20.215.65.23:16998] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/about.php"] [unique_id "adOWx0PsNnAJTnmz6saXGAAAARg"]
[Mon Apr 06 19:19:36.258434 2026] [:error] [pid 9442:tid 9457] [client 20.215.65.23:26497] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/about.php"] [unique_id "adOWyEPsNnAJTnmz6saXHAAAAQ0"]
[Mon Apr 06 19:19:36.767798 2026] [:error] [pid 10280:tid 10283] [client 20.215.65.23:32502] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/about.php"] [unique_id "adOWyF8QUJkf8g-BFfPYsAAAAcA"]
[Mon Apr 06 19:19:37.280530 2026] [:error] [pid 9442:tid 9445] [client 20.215.65.23:26539] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/no18.php"] [unique_id "adOWyUPsNnAJTnmz6saXJwAAAQE"]
[Mon Apr 06 19:19:37.789068 2026] [:error] [pid 10280:tid 10287] [client 20.215.65.23:57590] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/no18.php"] [unique_id "adOWyV8QUJkf8g-BFfPYtgAAAcQ"]
[Mon Apr 06 19:19:38.298979 2026] [:error] [pid 10280:tid 10284] [client 20.215.65.23:29675] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/no18.php"] [unique_id "adOWyl8QUJkf8g-BFfPYuQAAAcE"]
[Mon Apr 06 19:19:38.808865 2026] [:error] [pid 35688:tid 35758] [client 20.215.65.23:26557] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/no18.php"] [unique_id "adOWyuZ85qg4jLsRpQyDQAAAAIg"]
[Mon Apr 06 19:19:39.317655 2026] [:error] [pid 35688:tid 35755] [client 20.215.65.23:34031] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fine.php"] [unique_id "adOWy-Z85qg4jLsRpQyDQgAAAIU"]
[Mon Apr 06 19:19:39.827094 2026] [:error] [pid 38562:tid 38575] [client 20.215.65.23:15156] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fine.php"] [unique_id "adOWy6eD6Ohe6wzRuy5vbgAAAUo"]
[Mon Apr 06 19:19:40.336592 2026] [:error] [pid 35688:tid 35774] [client 20.215.65.23:19647] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fine.php"] [unique_id "adOWzOZ85qg4jLsRpQyDRwAAAJg"]
[Mon Apr 06 19:19:40.847807 2026] [:error] [pid 38562:tid 38584] [client 20.215.65.23:18438] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fine.php"] [unique_id "adOWzKeD6Ohe6wzRuy5vcQAAAVM"]
[Mon Apr 06 19:19:41.361523 2026] [:error] [pid 35687:tid 35735] [client 20.215.65.23:36168] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zample.php"] [unique_id "adOWzZ3LtDozV0i8BitfNQAAAEw"]
[Mon Apr 06 19:19:41.870136 2026] [:error] [pid 35688:tid 35761] [client 20.215.65.23:57592] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zample.php"] [unique_id "adOWzeZ85qg4jLsRpQyDSQAAAIs"]
[Mon Apr 06 19:19:42.379946 2026] [:error] [pid 35688:tid 35759] [client 20.215.65.23:29670] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zample.php"] [unique_id "adOWzuZ85qg4jLsRpQyDTQAAAIk"]
[Mon Apr 06 19:19:42.892414 2026] [:error] [pid 35786:tid 35812] [client 20.215.65.23:29629] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zample.php"] [unique_id "adOWzmgkfCKTaLhwaKQU6gAAANM"]
[Mon Apr 06 19:19:43.411800 2026] [proxy_fcgi:error] [pid 9413:tid 9415] [client 20.215.65.23:46535] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 19:19:43.670396 2026] [proxy_fcgi:error] [pid 9413:tid 9439] [client 20.215.65.23:46535] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 19:19:45.064631 2026] [proxy_fcgi:error] [pid 9413:tid 9436] [client 20.215.65.23:46535] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 19:19:45.322811 2026] [proxy_fcgi:error] [pid 9413:tid 9428] [client 20.215.65.23:46535] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 19:19:45.581079 2026] [proxy_fcgi:error] [pid 9413:tid 9420] [client 20.215.65.23:46535] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 19:19:45.839738 2026] [proxy_fcgi:error] [pid 9413:tid 9438] [client 20.215.65.23:46535] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 19:19:46.098037 2026] [proxy_fcgi:error] [pid 9413:tid 9422] [client 20.215.65.23:46535] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 19:19:46.357317 2026] [proxy_fcgi:error] [pid 9413:tid 9433] [client 20.215.65.23:46535] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 19:19:46.616986 2026] [proxy_fcgi:error] [pid 9413:tid 9424] [client 20.215.65.23:46535] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 19:19:46.874526 2026] [proxy_fcgi:error] [pid 9413:tid 9430] [client 20.215.65.23:46535] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 19:19:47.133093 2026] [proxy_fcgi:error] [pid 9413:tid 9417] [client 20.215.65.23:46535] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 19:19:47.394170 2026] [:error] [pid 9413:tid 9419] [client 20.215.65.23:46535] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sf.php"] [unique_id "adOW03llvEK3chn01wG6TAAAAYQ"]
[Mon Apr 06 19:19:47.903250 2026] [:error] [pid 35688:tid 35750] [client 20.215.65.23:36137] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sf.php"] [unique_id "adOW0-Z85qg4jLsRpQyDZgAAAIA"]
[Mon Apr 06 19:19:48.416642 2026] [:error] [pid 35688:tid 35769] [client 20.215.65.23:19628] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sf.php"] [unique_id "adOW1OZ85qg4jLsRpQyDaAAAAJM"]
[Mon Apr 06 19:19:48.925798 2026] [:error] [pid 35687:tid 35723] [client 20.215.65.23:26506] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sf.php"] [unique_id "adOW1J3LtDozV0i8BitfOwAAAEA"]
[Mon Apr 06 19:19:49.457440 2026] [:error] [pid 10280:tid 10290] [client 20.215.65.23:33478] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/eee.php"] [unique_id "adOW1V8QUJkf8g-BFfPYywAAAcc"]
[Mon Apr 06 19:19:49.965384 2026] [:error] [pid 35687:tid 35727] [client 20.215.65.23:15441] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/eee.php"] [unique_id "adOW1Z3LtDozV0i8BitfPgAAAEQ"]
[Mon Apr 06 19:19:50.473921 2026] [:error] [pid 38562:tid 38579] [client 20.215.65.23:34530] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/eee.php"] [unique_id "adOW1qeD6Ohe6wzRuy5vegAAAU4"]
[Mon Apr 06 19:19:50.987224 2026] [:error] [pid 35688:tid 35755] [client 20.215.65.23:34473] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/eee.php"] [unique_id "adOW1uZ85qg4jLsRpQyDbgAAAIU"]
[Mon Apr 06 19:19:51.497186 2026] [:error] [pid 35688:tid 35762] [client 20.215.65.23:15460] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/no1.php"] [unique_id "adOW1-Z85qg4jLsRpQyDcQAAAIw"]
[Mon Apr 06 19:19:52.006281 2026] [:error] [pid 10280:tid 10287] [client 20.215.65.23:28063] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/no1.php"] [unique_id "adOW2F8QUJkf8g-BFfPY1wAAAcQ"]
[Mon Apr 06 19:19:52.514214 2026] [:error] [pid 9442:tid 9460] [client 20.215.65.23:19609] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/no1.php"] [unique_id "adOW2EPsNnAJTnmz6saXRQAAARA"]
[Mon Apr 06 19:19:53.024280 2026] [:error] [pid 38562:tid 38580] [client 20.215.65.23:14350] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/no1.php"] [unique_id "adOW2aeD6Ohe6wzRuy5vgQAAAU8"]
[Mon Apr 06 19:19:53.535007 2026] [:error] [pid 35688:tid 35770] [client 20.215.65.23:18495] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/w2025.php"] [unique_id "adOW2eZ85qg4jLsRpQyDdQAAAJQ"]
[Mon Apr 06 19:19:54.043299 2026] [:error] [pid 9442:tid 9449] [client 20.215.65.23:27044] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/w2025.php"] [unique_id "adOW2kPsNnAJTnmz6saXSwAAAQU"]
[Mon Apr 06 19:19:54.552091 2026] [:error] [pid 9442:tid 9461] [client 20.215.65.23:19634] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/w2025.php"] [unique_id "adOW2kPsNnAJTnmz6saXTgAAARE"]
[Mon Apr 06 19:19:55.064649 2026] [:error] [pid 35686:tid 35719] [client 20.215.65.23:36114] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/w2025.php"] [unique_id "adOW28MKdea6oORd2fzIiwAAABc"]
[Mon Apr 06 19:19:55.574522 2026] [:error] [pid 35688:tid 35769] [client 20.215.65.23:26546] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/swallowable.php"] [unique_id "adOW2-Z85qg4jLsRpQyDfwAAAJM"]
[Mon Apr 06 19:19:56.085011 2026] [:error] [pid 9442:tid 9467] [client 20.215.65.23:26547] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/swallowable.php"] [unique_id "adOW3EPsNnAJTnmz6saXVAAAARc"]
[Mon Apr 06 19:19:56.596517 2026] [:error] [pid 35688:tid 35755] [client 20.215.65.23:36830] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/swallowable.php"] [unique_id "adOW3OZ85qg4jLsRpQyDgwAAAIU"]
[Mon Apr 06 19:19:57.110375 2026] [:error] [pid 9442:tid 9450] [client 20.215.65.23:41307] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/swallowable.php"] [unique_id "adOW3UPsNnAJTnmz6saXWwAAAQY"]
[Mon Apr 06 19:19:57.619826 2026] [:error] [pid 10280:tid 10297] [client 20.215.65.23:36821] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fvvff.php"] [unique_id "adOW3V8QUJkf8g-BFfPY5QAAAc4"]
[Mon Apr 06 19:19:58.128834 2026] [:error] [pid 9442:tid 9458] [client 20.215.65.23:41327] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fvvff.php"] [unique_id "adOW3kPsNnAJTnmz6saXYAAAAQ4"]
[Mon Apr 06 19:19:58.637758 2026] [:error] [pid 10280:tid 10291] [client 20.215.65.23:18813] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fvvff.php"] [unique_id "adOW3l8QUJkf8g-BFfPY6wAAAcg"]
[Mon Apr 06 19:19:59.145180 2026] [:error] [pid 9442:tid 9454] [client 20.215.65.23:14855] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fvvff.php"] [unique_id "adOW30PsNnAJTnmz6saXaAAAAQo"]
[Mon Apr 06 19:19:59.655143 2026] [:error] [pid 35688:tid 35769] [client 20.215.65.23:18804] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a2.php"] [unique_id "adOW3-Z85qg4jLsRpQyDiAAAAJM"]
[Mon Apr 06 19:20:00.166100 2026] [:error] [pid 9442:tid 9466] [client 20.215.65.23:36802] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a2.php"] [unique_id "adOW4EPsNnAJTnmz6saXagAAARY"]
[Mon Apr 06 19:20:00.677123 2026] [:error] [pid 10280:tid 10294] [client 20.215.65.23:41294] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a2.php"] [unique_id "adOW4F8QUJkf8g-BFfPY9wAAAcs"]
[Mon Apr 06 19:20:01.187587 2026] [:error] [pid 35688:tid 35759] [client 20.215.65.23:18800] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a2.php"] [unique_id "adOW4eZ85qg4jLsRpQyDjgAAAIk"]
[Mon Apr 06 19:20:01.694965 2026] [:error] [pid 35686:tid 35720] [client 20.215.65.23:29144] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/edit.php"] [unique_id "adOW4cMKdea6oORd2fzIkQAAABg"]
[Mon Apr 06 19:20:02.204013 2026] [:error] [pid 35687:tid 35742] [client 20.215.65.23:41332] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/edit.php"] [unique_id "adOW4p3LtDozV0i8BitfQgAAAFM"]
[Mon Apr 06 19:20:02.713075 2026] [:error] [pid 9442:tid 9463] [client 20.215.65.23:14366] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/edit.php"] [unique_id "adOW4kPsNnAJTnmz6saXfQAAARM"]
[Mon Apr 06 19:20:03.222516 2026] [:error] [pid 35688:tid 35761] [client 20.215.65.23:14352] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/edit.php"] [unique_id "adOW4-Z85qg4jLsRpQyDlQAAAIs"]
[Mon Apr 06 19:20:03.731505 2026] [:error] [pid 10280:tid 10299] [client 20.215.65.23:26498] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ioxi-o.php"] [unique_id "adOW418QUJkf8g-BFfPY_AAAAdA"]
[Mon Apr 06 19:20:04.245297 2026] [:error] [pid 35688:tid 35755] [client 20.215.65.23:36210] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ioxi-o.php"] [unique_id "adOW5OZ85qg4jLsRpQyDnQAAAIU"]
[Mon Apr 06 19:20:04.753950 2026] [:error] [pid 35786:tid 35805] [client 20.215.65.23:14633] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ioxi-o.php"] [unique_id "adOW5GgkfCKTaLhwaKQU7AAAAMw"]
[Mon Apr 06 19:20:05.263495 2026] [:error] [pid 35686:tid 35703] [client 20.215.65.23:34046] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ioxi-o.php"] [unique_id "adOW5cMKdea6oORd2fzIkwAAAAc"]
[Mon Apr 06 19:20:05.772828 2026] [:error] [pid 9442:tid 9454] [client 20.215.65.23:41920] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "adOW5UPsNnAJTnmz6saXhgAAAQo"]
[Mon Apr 06 19:20:06.282927 2026] [:error] [pid 1827:tid 1849] [client 20.215.65.23:18493] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "adOW5uVeb6S_DnjZ2xH_dAAAAhQ"]
[Mon Apr 06 19:20:06.795377 2026] [:error] [pid 35686:tid 35719] [client 20.215.65.23:20826] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "adOW5sMKdea6oORd2fzImAAAABc"]
[Mon Apr 06 19:20:07.305377 2026] [:error] [pid 35786:tid 35798] [client 20.215.65.23:33517] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "adOW52gkfCKTaLhwaKQU7QAAAMU"]
[Mon Apr 06 19:20:07.815199 2026] [:error] [pid 35786:tid 35795] [client 20.215.65.23:20817] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/66.php"] [unique_id "adOW52gkfCKTaLhwaKQU7wAAAMI"]
[Mon Apr 06 19:20:08.326881 2026] [:error] [pid 35786:tid 35808] [client 20.215.65.23:2763] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/66.php"] [unique_id "adOW6GgkfCKTaLhwaKQU8QAAAM8"]
[Mon Apr 06 19:20:08.835880 2026] [:error] [pid 9442:tid 9449] [client 20.215.65.23:2654] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/66.php"] [unique_id "adOW6EPsNnAJTnmz6saXjQAAAQU"]
[Mon Apr 06 19:20:09.345727 2026] [:error] [pid 38562:tid 38588] [client 20.215.65.23:2681] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/66.php"] [unique_id "adOW6aeD6Ohe6wzRuy5vkgAAAVc"]
[Mon Apr 06 19:20:09.854493 2026] [:error] [pid 9442:tid 9457] [client 20.215.65.23:34554] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a5.php"] [unique_id "adOW6UPsNnAJTnmz6saXkAAAAQ0"]
[Mon Apr 06 19:20:10.366012 2026] [:error] [pid 35686:tid 35703] [client 20.215.65.23:14368] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a5.php"] [unique_id "adOW6sMKdea6oORd2fzIogAAAAc"]
[Mon Apr 06 19:20:10.873921 2026] [:error] [pid 35786:tid 35807] [client 20.215.65.23:2807] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a5.php"] [unique_id "adOW6mgkfCKTaLhwaKQU9AAAAM4"]
[Mon Apr 06 19:20:11.397749 2026] [:error] [pid 35687:tid 35728] [client 20.215.65.23:32462] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a5.php"] [unique_id "adOW653LtDozV0i8BitfSQAAAEU"]
[Mon Apr 06 19:20:11.922468 2026] [:error] [pid 35688:tid 35759] [client 20.215.65.23:20817] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ol.php"] [unique_id "adOW6-Z85qg4jLsRpQyDogAAAIk"]
[Mon Apr 06 19:20:12.442622 2026] [:error] [pid 35686:tid 35718] [client 20.215.65.23:46499] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ol.php"] [unique_id "adOW7MMKdea6oORd2fzIpwAAABY"]
[Mon Apr 06 19:20:12.956800 2026] [:error] [pid 35688:tid 35767] [client 20.215.65.23:15117] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ol.php"] [unique_id "adOW7OZ85qg4jLsRpQyDpwAAAJE"]
[Mon Apr 06 19:20:13.468368 2026] [:error] [pid 9442:tid 9464] [client 20.215.65.23:29607] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ol.php"] [unique_id "adOW7UPsNnAJTnmz6saXmwAAARQ"]
[Mon Apr 06 19:20:13.988329 2026] [:error] [pid 35686:tid 35702] [client 20.215.65.23:2303] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f6.php"] [unique_id "adOW7cMKdea6oORd2fzIrQAAAAY"]
[Mon Apr 06 19:20:14.503981 2026] [:error] [pid 38562:tid 38576] [client 20.215.65.23:2761] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f6.php"] [unique_id "adOW7qeD6Ohe6wzRuy5vogAAAUs"]
[Mon Apr 06 19:20:15.019030 2026] [:error] [pid 38562:tid 38578] [client 20.215.65.23:46570] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f6.php"] [unique_id "adOW76eD6Ohe6wzRuy5vpQAAAU0"]
[Mon Apr 06 19:20:15.527739 2026] [:error] [pid 35688:tid 35766] [client 20.215.65.23:2268] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f6.php"] [unique_id "adOW7-Z85qg4jLsRpQyDsgAAAJA"]
[Mon Apr 06 19:20:16.039073 2026] [:error] [pid 38562:tid 38584] [client 20.215.65.23:34525] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/inputs.php"] [unique_id "adOW8KeD6Ohe6wzRuy5vqAAAAVM"]
[Mon Apr 06 19:20:16.548957 2026] [:error] [pid 9442:tid 9465] [client 20.215.65.23:21614] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/inputs.php"] [unique_id "adOW8EPsNnAJTnmz6saXowAAARU"]
[Mon Apr 06 19:20:17.058093 2026] [:error] [pid 9442:tid 9450] [client 20.215.65.23:59512] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/inputs.php"] [unique_id "adOW8UPsNnAJTnmz6saXpQAAAQY"]
[Mon Apr 06 19:20:17.566969 2026] [:error] [pid 9442:tid 9464] [client 20.215.65.23:36153] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/inputs.php"] [unique_id "adOW8UPsNnAJTnmz6saXqwAAARQ"]
[Mon Apr 06 19:20:18.079548 2026] [:error] [pid 9442:tid 9445] [client 20.215.65.23:14390] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/style.php"] [unique_id "adOW8kPsNnAJTnmz6saXsQAAAQE"]
[Mon Apr 06 19:20:18.589330 2026] [:error] [pid 9442:tid 9450] [client 20.215.65.23:26597] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/style.php"] [unique_id "adOW8kPsNnAJTnmz6saXtgAAAQY"]
[Mon Apr 06 19:20:19.098525 2026] [:error] [pid 9413:tid 9423] [client 20.215.65.23:2810] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/style.php"] [unique_id "adOW83llvEK3chn01wG6XQAAAYg"]
[Mon Apr 06 19:20:19.609150 2026] [:error] [pid 9442:tid 9462] [client 20.215.65.23:36102] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/style.php"] [unique_id "adOW80PsNnAJTnmz6saXwAAAARI"]
[Mon Apr 06 19:20:20.117333 2026] [:error] [pid 35687:tid 35736] [client 20.215.65.23:34515] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aa.php"] [unique_id "adOW9J3LtDozV0i8BitfTQAAAE0"]
[Mon Apr 06 19:20:20.629593 2026] [:error] [pid 35687:tid 35740] [client 20.215.65.23:18476] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aa.php"] [unique_id "adOW9J3LtDozV0i8BitfTwAAAFE"]
[Mon Apr 06 19:20:21.137668 2026] [:error] [pid 35686:tid 35716] [client 20.215.65.23:18454] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aa.php"] [unique_id "adOW9cMKdea6oORd2fzIrgAAABQ"]
[Mon Apr 06 19:20:21.646315 2026] [:error] [pid 35688:tid 35762] [client 20.215.65.23:20823] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aa.php"] [unique_id "adOW9eZ85qg4jLsRpQyDwAAAAIw"]
[Mon Apr 06 19:20:22.155688 2026] [:error] [pid 10280:tid 10287] [client 20.215.65.23:47829] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/av.php"] [unique_id "adOW9l8QUJkf8g-BFfPZGQAAAcQ"]
[Mon Apr 06 19:20:22.666480 2026] [:error] [pid 9442:tid 9452] [client 20.215.65.23:30641] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/av.php"] [unique_id "adOW9kPsNnAJTnmz6saX0AAAAQg"]
[Mon Apr 06 19:20:23.179039 2026] [:error] [pid 10280:tid 10302] [client 20.215.65.23:21621] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/av.php"] [unique_id "adOW918QUJkf8g-BFfPZGwAAAdM"]
[Mon Apr 06 19:20:23.689083 2026] [:error] [pid 10280:tid 10301] [client 20.215.65.23:19591] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/av.php"] [unique_id "adOW918QUJkf8g-BFfPZHAAAAdI"]
[Mon Apr 06 19:20:24.199911 2026] [:error] [pid 9442:tid 9462] [client 20.215.65.23:32420] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "adOW-EPsNnAJTnmz6saX2QAAARI"]
[Mon Apr 06 19:20:24.708345 2026] [:error] [pid 9442:tid 9446] [client 20.215.65.23:24974] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "adOW-EPsNnAJTnmz6saX3wAAAQI"]
[Mon Apr 06 19:20:25.220449 2026] [:error] [pid 35688:tid 35756] [client 20.215.65.23:19227] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "adOW-eZ85qg4jLsRpQyDxgAAAIY"]
[Mon Apr 06 19:20:25.728948 2026] [:error] [pid 9442:tid 9456] [client 20.215.65.23:30661] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "adOW-UPsNnAJTnmz6saX7QAAAQw"]
[Mon Apr 06 19:20:26.242263 2026] [:error] [pid 10280:tid 10304] [client 20.215.65.23:46464] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bless4.php"] [unique_id "adOW-l8QUJkf8g-BFfPZIAAAAdU"]
[Mon Apr 06 19:20:26.753587 2026] [:error] [pid 9442:tid 9468] [client 20.215.65.23:19630] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bless4.php"] [unique_id "adOW-kPsNnAJTnmz6saX-AAAARg"]
[Mon Apr 06 19:20:27.261624 2026] [:error] [pid 9442:tid 9458] [client 20.215.65.23:30103] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bless4.php"] [unique_id "adOW-0PsNnAJTnmz6saX_gAAAQ4"]
[Mon Apr 06 19:20:27.770059 2026] [:error] [pid 10280:tid 10284] [client 20.215.65.23:30192] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bless4.php"] [unique_id "adOW-18QUJkf8g-BFfPZKAAAAcE"]
[Mon Apr 06 19:20:28.278077 2026] [:error] [pid 10280:tid 10296] [client 20.215.65.23:36185] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-act.php"] [unique_id "adOW_F8QUJkf8g-BFfPZNgAAAc0"]
[Mon Apr 06 19:20:28.789298 2026] [:error] [pid 35688:tid 35763] [client 20.215.65.23:24986] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-act.php"] [unique_id "adOW_OZ85qg4jLsRpQyDywAAAI0"]
[Mon Apr 06 19:20:29.298606 2026] [:error] [pid 38562:tid 38571] [client 20.215.65.23:30597] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-act.php"] [unique_id "adOW_aeD6Ohe6wzRuy5vswAAAUY"]
[Mon Apr 06 19:20:29.806846 2026] [:error] [pid 38562:tid 38579] [client 20.215.65.23:37405] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-act.php"] [unique_id "adOW_aeD6Ohe6wzRuy5vtgAAAU4"]
[Mon Apr 06 19:20:30.315119 2026] [:error] [pid 35688:tid 35755] [client 20.215.65.23:30633] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xqq.php"] [unique_id "adOW_uZ85qg4jLsRpQyDzgAAAIU"]
[Mon Apr 06 19:20:30.824011 2026] [:error] [pid 35688:tid 35759] [client 20.215.65.23:46479] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xqq.php"] [unique_id "adOW_uZ85qg4jLsRpQyD0AAAAIk"]
[Mon Apr 06 19:20:31.336211 2026] [:error] [pid 9413:tid 9431] [client 20.215.65.23:34554] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xqq.php"] [unique_id "adOW_3llvEK3chn01wG6YQAAAZA"]
[Mon Apr 06 19:20:31.844634 2026] [:error] [pid 35688:tid 35751] [client 20.215.65.23:20023] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xqq.php"] [unique_id "adOW_-Z85qg4jLsRpQyD1QAAAIE"]
[Mon Apr 06 19:20:32.356314 2026] [:error] [pid 10280:tid 10300] [client 20.215.65.23:42571] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/plss3.php"] [unique_id "adOXAF8QUJkf8g-BFfPZVQAAAdE"]
[Mon Apr 06 19:20:32.870387 2026] [:error] [pid 35686:tid 35710] [client 20.215.65.23:19202] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/plss3.php"] [unique_id "adOXAMMKdea6oORd2fzItQAAAA4"]
[Mon Apr 06 19:20:33.378604 2026] [:error] [pid 35688:tid 35750] [client 20.215.65.23:53138] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/plss3.php"] [unique_id "adOXAeZ85qg4jLsRpQyD4AAAAIA"]
[Mon Apr 06 19:20:33.886976 2026] [:error] [pid 1827:tid 1843] [client 20.215.65.23:53120] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/plss3.php"] [unique_id "adOXAeVeb6S_DnjZ2xH_igAAAg4"]
[Mon Apr 06 19:20:34.395795 2026] [:error] [pid 1827:tid 1841] [client 20.215.65.23:16920] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aaa.php"] [unique_id "adOXAuVeb6S_DnjZ2xH_jQAAAgw"]
[Mon Apr 06 19:20:34.904320 2026] [:error] [pid 10280:tid 10301] [client 20.215.65.23:48195] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aaa.php"] [unique_id "adOXAl8QUJkf8g-BFfPZYgAAAdI"]
[Mon Apr 06 19:20:35.413876 2026] [:error] [pid 10280:tid 10291] [client 20.215.65.23:2833] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aaa.php"] [unique_id "adOXA18QUJkf8g-BFfPZZAAAAcg"]
[Mon Apr 06 19:20:35.923690 2026] [:error] [pid 35688:tid 35769] [client 20.215.65.23:25538] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aaa.php"] [unique_id "adOXA-Z85qg4jLsRpQyD5gAAAJM"]
[Mon Apr 06 19:20:36.432570 2026] [:error] [pid 35688:tid 35768] [client 20.215.65.23:30160] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/classwithtostring.php"] [unique_id "adOXBOZ85qg4jLsRpQyD6gAAAJI"]
[Mon Apr 06 19:20:36.942101 2026] [:error] [pid 1827:tid 1853] [client 20.215.65.23:2915] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/classwithtostring.php"] [unique_id "adOXBOVeb6S_DnjZ2xH_lgAAAhg"]
[Mon Apr 06 19:20:37.453608 2026] [:error] [pid 1827:tid 1848] [client 20.215.65.23:46486] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/classwithtostring.php"] [unique_id "adOXBeVeb6S_DnjZ2xH_mQAAAhM"]
[Mon Apr 06 19:20:37.964073 2026] [:error] [pid 10280:tid 10286] [client 20.215.65.23:46047] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/classwithtostring.php"] [unique_id "adOXBV8QUJkf8g-BFfPZbgAAAcM"]
[Mon Apr 06 19:20:38.505313 2026] [:error] [pid 35688:tid 35761] [client 20.215.65.23:25005] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "adOXBuZ85qg4jLsRpQyD8gAAAIs"]
[Mon Apr 06 19:20:39.013197 2026] [:error] [pid 35688:tid 35753] [client 20.215.65.23:53128] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "adOXB-Z85qg4jLsRpQyD8wAAAIM"]
[Mon Apr 06 19:20:39.521902 2026] [:error] [pid 35686:tid 35705] [client 20.215.65.23:2933] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "adOXB8MKdea6oORd2fzIugAAAAk"]
[Mon Apr 06 19:20:40.031541 2026] [:error] [pid 1827:tid 1841] [client 20.215.65.23:19230] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "adOXCOVeb6S_DnjZ2xH_ogAAAgw"]
[Mon Apr 06 19:20:40.544929 2026] [:error] [pid 9442:tid 9453] [client 20.215.65.23:27646] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tinyfilemanager.php"] [unique_id "adOXCEPsNnAJTnmz6saYFgAAAQk"]
[Mon Apr 06 19:20:41.054005 2026] [:error] [pid 10280:tid 10284] [client 20.215.65.23:19263] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tinyfilemanager.php"] [unique_id "adOXCV8QUJkf8g-BFfPZcgAAAcE"]
[Mon Apr 06 19:20:41.564132 2026] [:error] [pid 35688:tid 35774] [client 20.215.65.23:46017] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tinyfilemanager.php"] [unique_id "adOXCeZ85qg4jLsRpQyD-QAAAJg"]
[Mon Apr 06 19:20:42.073830 2026] [:error] [pid 35686:tid 35701] [client 20.215.65.23:25597] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tinyfilemanager.php"] [unique_id "adOXCsMKdea6oORd2fzIvgAAAAU"]
[Mon Apr 06 19:20:42.585593 2026] [:error] [pid 35687:tid 35727] [client 20.215.65.23:23036] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-update.php"] [unique_id "adOXCp3LtDozV0i8BitfZQAAAEQ"]
[Mon Apr 06 19:20:43.094617 2026] [:error] [pid 35686:tid 35718] [client 20.215.65.23:30109] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-update.php"] [unique_id "adOXC8MKdea6oORd2fzIvwAAABY"]
[Mon Apr 06 19:20:43.603207 2026] [:error] [pid 35688:tid 35756] [client 20.215.65.23:30100] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-update.php"] [unique_id "adOXC-Z85qg4jLsRpQyD_wAAAIY"]
[Mon Apr 06 19:20:44.118474 2026] [:error] [pid 35686:tid 35708] [client 20.215.65.23:15363] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-update.php"] [unique_id "adOXDMMKdea6oORd2fzIwwAAAAw"]
[Mon Apr 06 19:20:44.634998 2026] [:error] [pid 1827:tid 1852] [client 20.215.65.23:17009] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sbhu.php"] [unique_id "adOXDOVeb6S_DnjZ2xH_qAAAAhc"]
[Mon Apr 06 19:20:45.150204 2026] [:error] [pid 1827:tid 1849] [client 20.215.65.23:2305] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sbhu.php"] [unique_id "adOXDeVeb6S_DnjZ2xH_rwAAAhQ"]
[Mon Apr 06 19:20:45.660827 2026] [:error] [pid 35686:tid 35717] [client 20.215.65.23:53127] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sbhu.php"] [unique_id "adOXDcMKdea6oORd2fzIyAAAABU"]
[Mon Apr 06 19:20:46.169699 2026] [:error] [pid 1827:tid 1836] [client 20.215.65.23:16966] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sbhu.php"] [unique_id "adOXDuVeb6S_DnjZ2xH_sgAAAgc"]
[Mon Apr 06 19:20:46.692025 2026] [:error] [pid 9413:tid 9429] [client 20.215.65.23:2837] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-blog.php"] [unique_id "adOXDnllvEK3chn01wG6ZAAAAY4"]
[Mon Apr 06 19:20:47.227889 2026] [proxy_fcgi:error] [pid 35687:tid 35738] [client 20.215.65.23:2363] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 19:20:48.003872 2026] [proxy_fcgi:error] [pid 35687:tid 35737] [client 20.215.65.23:2363] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 19:20:48.265742 2026] [proxy_fcgi:error] [pid 35687:tid 35731] [client 20.215.65.23:2363] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 19:20:48.524976 2026] [proxy_fcgi:error] [pid 35687:tid 35725] [client 20.215.65.23:2363] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 19:20:48.784459 2026] [proxy_fcgi:error] [pid 35687:tid 35728] [client 20.215.65.23:2363] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 19:20:49.044489 2026] [proxy_fcgi:error] [pid 35687:tid 35745] [client 20.215.65.23:2363] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 19:20:49.563656 2026] [proxy_fcgi:error] [pid 35687:tid 35732] [client 20.215.65.23:2363] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 19:20:51.366310 2026] [:error] [pid 35687:tid 35729] [client 20.215.65.23:2363] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/we.php"] [unique_id "adOXE53LtDozV0i8BitfegAAAEY"]
[Mon Apr 06 19:20:51.877811 2026] [:error] [pid 38562:tid 38575] [client 20.215.65.23:25057] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/we.php"] [unique_id "adOXE6eD6Ohe6wzRuy5vzwAAAUo"]
[Mon Apr 06 19:20:52.386644 2026] [:error] [pid 35687:tid 35736] [client 20.215.65.23:35554] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/we.php"] [unique_id "adOXFJ3LtDozV0i8BitfewAAAE0"]
[Mon Apr 06 19:20:52.896168 2026] [:error] [pid 9442:tid 9447] [client 20.215.65.23:35481] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/we.php"] [unique_id "adOXFEPsNnAJTnmz6saYQwAAAQM"]
[Mon Apr 06 19:20:53.406782 2026] [:error] [pid 10280:tid 10295] [client 20.215.65.23:15651] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/alpha.php"] [unique_id "adOXFV8QUJkf8g-BFfPZhQAAAcw"]
[Mon Apr 06 19:20:53.915887 2026] [:error] [pid 10280:tid 10298] [client 20.215.65.23:52516] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/alpha.php"] [unique_id "adOXFV8QUJkf8g-BFfPZiAAAAc8"]
[Mon Apr 06 19:20:54.424499 2026] [:error] [pid 10280:tid 10305] [client 20.215.65.23:35499] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/alpha.php"] [unique_id "adOXFl8QUJkf8g-BFfPZjQAAAdY"]
[Mon Apr 06 19:20:54.932255 2026] [:error] [pid 9442:tid 9468] [client 20.215.65.23:35478] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/alpha.php"] [unique_id "adOXFkPsNnAJTnmz6saYTgAAARg"]
[Mon Apr 06 19:20:55.441655 2026] [:error] [pid 9442:tid 9446] [client 20.215.65.23:35562] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/makeasmtp.php"] [unique_id "adOXF0PsNnAJTnmz6saYUQAAAQI"]
[Mon Apr 06 19:20:55.949831 2026] [:error] [pid 1827:tid 1849] [client 20.215.65.23:35499] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/makeasmtp.php"] [unique_id "adOXF-Veb6S_DnjZ2xH_wQAAAhQ"]
[Mon Apr 06 19:20:56.460526 2026] [:error] [pid 35687:tid 35733] [client 20.215.65.23:25071] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/makeasmtp.php"] [unique_id "adOXGJ3LtDozV0i8BitffQAAAEo"]
[Mon Apr 06 19:20:56.969391 2026] [:error] [pid 9442:tid 9457] [client 20.215.65.23:22987] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/makeasmtp.php"] [unique_id "adOXGEPsNnAJTnmz6saYXgAAAQ0"]
[Mon Apr 06 19:20:57.481426 2026] [:error] [pid 38562:tid 38569] [client 20.215.65.23:2085] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-michan.php"] [unique_id "adOXGaeD6Ohe6wzRuy5v2AAAAUQ"]
[Mon Apr 06 19:20:58.002355 2026] [:error] [pid 35688:tid 35764] [client 20.215.65.23:15632] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-michan.php"] [unique_id "adOXGuZ85qg4jLsRpQyEIQAAAI4"]
[Mon Apr 06 19:20:58.515645 2026] [:error] [pid 35688:tid 35755] [client 20.215.65.23:35458] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-michan.php"] [unique_id "adOXGuZ85qg4jLsRpQyEJwAAAIU"]
[Mon Apr 06 19:20:59.030115 2026] [:error] [pid 38562:tid 38585] [client 20.215.65.23:32447] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-michan.php"] [unique_id "adOXG6eD6Ohe6wzRuy5v2wAAAVQ"]
[Mon Apr 06 19:20:59.540250 2026] [:error] [pid 10280:tid 10306] [client 20.215.65.23:30099] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-the.php"] [unique_id "adOXG18QUJkf8g-BFfPZmgAAAdc"]
[Mon Apr 06 19:21:00.053505 2026] [:error] [pid 35688:tid 35761] [client 20.215.65.23:35494] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-the.php"] [unique_id "adOXHOZ85qg4jLsRpQyELAAAAIs"]
[Mon Apr 06 19:21:00.568211 2026] [:error] [pid 9442:tid 9468] [client 20.215.65.23:59395] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-the.php"] [unique_id "adOXHEPsNnAJTnmz6saYZwAAARg"]
[Mon Apr 06 19:21:01.085302 2026] [:error] [pid 35688:tid 35764] [client 20.215.65.23:15643] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-the.php"] [unique_id "adOXHeZ85qg4jLsRpQyEMgAAAI4"]
[Mon Apr 06 19:21:01.594269 2026] [:error] [pid 35786:tid 35810] [client 20.215.65.23:32436] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "adOXHWgkfCKTaLhwaKQVEAAAANE"]
[Mon Apr 06 19:21:02.105888 2026] [:error] [pid 10280:tid 10297] [client 20.215.65.23:53137] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "adOXHl8QUJkf8g-BFfPZpAAAAc4"]
[Mon Apr 06 19:21:02.616347 2026] [:error] [pid 1827:tid 1853] [client 20.215.65.23:21122] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "adOXHuVeb6S_DnjZ2xH_ywAAAhg"]
[Mon Apr 06 19:21:03.126941 2026] [:error] [pid 38562:tid 38589] [client 20.215.65.23:2082] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "adOXH6eD6Ohe6wzRuy5v5gAAAVg"]
[Mon Apr 06 19:21:03.636525 2026] [:error] [pid 9442:tid 9467] [client 20.215.65.23:19994] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/BDKR28WP.php"] [unique_id "adOXH0PsNnAJTnmz6saYjQAAARc"]
[Mon Apr 06 19:21:04.145755 2026] [:error] [pid 35687:tid 35744] [client 20.215.65.23:2499] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/BDKR28WP.php"] [unique_id "adOXIJ3LtDozV0i8BitfgwAAAFU"]
[Mon Apr 06 19:21:04.655181 2026] [:error] [pid 38562:tid 38587] [client 20.215.65.23:35462] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/BDKR28WP.php"] [unique_id "adOXIKeD6Ohe6wzRuy5v5wAAAVY"]
[Mon Apr 06 19:21:05.163883 2026] [:error] [pid 10280:tid 10290] [client 20.215.65.23:59393] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/BDKR28WP.php"] [unique_id "adOXIV8QUJkf8g-BFfPZrAAAAcc"]
[Mon Apr 06 19:21:05.672829 2026] [:error] [pid 35688:tid 35755] [client 20.215.65.23:15675] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/l10n/"] [unique_id "adOXIeZ85qg4jLsRpQyERgAAAIU"]
[Mon Apr 06 19:21:06.181442 2026] [:error] [pid 35687:tid 35743] [client 20.215.65.23:30123] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/l10n/"] [unique_id "adOXIp3LtDozV0i8BitfhQAAAFQ"]
[Mon Apr 06 19:21:06.690219 2026] [:error] [pid 9413:tid 9436] [client 20.215.65.23:21126] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/l10n/"] [unique_id "adOXInllvEK3chn01wG6bgAAAZU"]
[Mon Apr 06 19:21:07.198648 2026] [:error] [pid 35687:tid 35740] [client 20.215.65.23:32389] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/l10n/"] [unique_id "adOXI53LtDozV0i8BitfhwAAAFE"]
[Mon Apr 06 19:21:07.710164 2026] [:error] [pid 10280:tid 10295] [client 20.215.65.23:32419] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wen.php"] [unique_id "adOXI18QUJkf8g-BFfPZtAAAAcw"]
[Mon Apr 06 19:21:08.218302 2026] [:error] [pid 9442:tid 9466] [client 20.215.65.23:30138] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wen.php"] [unique_id "adOXJEPsNnAJTnmz6saYmQAAARY"]
[Mon Apr 06 19:21:08.727196 2026] [:error] [pid 9442:tid 9454] [client 20.215.65.23:20771] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wen.php"] [unique_id "adOXJEPsNnAJTnmz6saYmwAAAQo"]
[Mon Apr 06 19:21:09.238305 2026] [:error] [pid 35688:tid 35761] [client 20.215.65.23:16742] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wen.php"] [unique_id "adOXJeZ85qg4jLsRpQyETgAAAIs"]
[Mon Apr 06 19:21:09.749006 2026] [:error] [pid 1827:tid 1851] [client 20.215.65.23:42550] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp.php"] [unique_id "adOXJeVeb6S_DnjZ2xH_1gAAAhY"]
[Mon Apr 06 19:21:10.259267 2026] [:error] [pid 9442:tid 9466] [client 20.215.65.23:47158] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp.php"] [unique_id "adOXJkPsNnAJTnmz6saYpAAAARY"]
[Mon Apr 06 19:21:10.768694 2026] [:error] [pid 35688:tid 35752] [client 20.215.65.23:15641] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp.php"] [unique_id "adOXJuZ85qg4jLsRpQyEVgAAAII"]
[Mon Apr 06 19:21:11.278583 2026] [:error] [pid 9442:tid 9448] [client 20.215.65.23:30118] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp.php"] [unique_id "adOXJ0PsNnAJTnmz6saYrQAAAQQ"]
[Mon Apr 06 19:21:11.786877 2026] [:error] [pid 35688:tid 35751] [client 20.215.65.23:42517] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "adOXJ-Z85qg4jLsRpQyEWgAAAIE"]
[Mon Apr 06 19:21:12.295913 2026] [:error] [pid 35688:tid 35765] [client 20.215.65.23:17664] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "adOXKOZ85qg4jLsRpQyEXAAAAI8"]
[Mon Apr 06 19:21:12.803944 2026] [:error] [pid 9442:tid 9450] [client 20.215.65.23:30094] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "adOXKEPsNnAJTnmz6saYswAAAQY"]
[Mon Apr 06 19:21:13.316364 2026] [:error] [pid 35786:tid 35799] [client 20.215.65.23:2547] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "adOXKWgkfCKTaLhwaKQVFwAAAMY"]
[Mon Apr 06 19:21:13.827093 2026] [:error] [pid 35688:tid 35752] [client 20.215.65.23:42532] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fe5.php"] [unique_id "adOXKeZ85qg4jLsRpQyEYwAAAII"]
[Mon Apr 06 19:21:14.337002 2026] [:error] [pid 9442:tid 9449] [client 20.215.65.23:15194] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fe5.php"] [unique_id "adOXKkPsNnAJTnmz6saYxAAAAQU"]
[Mon Apr 06 19:21:14.846981 2026] [:error] [pid 35686:tid 35707] [client 20.215.65.23:58207] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fe5.php"] [unique_id "adOXKsMKdea6oORd2fzI4QAAAAs"]
[Mon Apr 06 19:21:15.357867 2026] [:error] [pid 9442:tid 9463] [client 20.215.65.23:35467] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fe5.php"] [unique_id "adOXK0PsNnAJTnmz6saY0AAAARM"]
[Mon Apr 06 19:21:15.867135 2026] [:error] [pid 9442:tid 9454] [client 20.215.65.23:15658] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kj.php"] [unique_id "adOXK0PsNnAJTnmz6saY1gAAAQo"]
[Mon Apr 06 19:21:16.379044 2026] [:error] [pid 38562:tid 38579] [client 20.215.65.23:15637] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kj.php"] [unique_id "adOXLKeD6Ohe6wzRuy5v8QAAAU4"]
[Mon Apr 06 19:21:16.895830 2026] [:error] [pid 9442:tid 9448] [client 20.215.65.23:58184] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kj.php"] [unique_id "adOXLEPsNnAJTnmz6saY6QAAAQQ"]
[Mon Apr 06 19:21:17.404012 2026] [:error] [pid 35688:tid 35756] [client 20.215.65.23:2557] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kj.php"] [unique_id "adOXLeZ85qg4jLsRpQyEegAAAIY"]
[Mon Apr 06 19:21:17.912155 2026] [:error] [pid 9442:tid 9453] [client 20.215.65.23:15181] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "adOXLUPsNnAJTnmz6saY-gAAAQk"]
[Mon Apr 06 19:21:18.421430 2026] [:error] [pid 1827:tid 1833] [client 20.215.65.23:16722] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "adOXLuVeb6S_DnjZ2xH_4QAAAgQ"]
[Mon Apr 06 19:21:18.929458 2026] [:error] [pid 35786:tid 35814] [client 20.215.65.23:18964] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "adOXLmgkfCKTaLhwaKQVGQAAANU"]
[Mon Apr 06 19:21:19.438796 2026] [:error] [pid 9442:tid 9466] [client 20.215.65.23:2090] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "adOXL0PsNnAJTnmz6saZAQAAARY"]
[Mon Apr 06 19:21:19.948975 2026] [:error] [pid 9442:tid 9445] [client 20.215.65.23:16747] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/av.php"] [unique_id "adOXL0PsNnAJTnmz6saZBQAAAQE"]
[Mon Apr 06 19:21:20.457746 2026] [:error] [pid 35688:tid 35766] [client 20.215.65.23:25511] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/av.php"] [unique_id "adOXMOZ85qg4jLsRpQyEhwAAAJA"]
[Mon Apr 06 19:21:20.967601 2026] [:error] [pid 9442:tid 9466] [client 20.215.65.23:20428] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/av.php"] [unique_id "adOXMEPsNnAJTnmz6saZCwAAARY"]
[Mon Apr 06 19:21:21.479495 2026] [:error] [pid 35687:tid 35727] [client 20.215.65.23:58230] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/av.php"] [unique_id "adOXMZ3LtDozV0i8BitfjQAAAEQ"]
[Mon Apr 06 19:21:21.987478 2026] [:error] [pid 35687:tid 35732] [client 20.215.65.23:16720] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/abcd.php"] [unique_id "adOXMZ3LtDozV0i8BitfkAAAAEk"]
[Mon Apr 06 19:21:22.495758 2026] [:error] [pid 35786:tid 35813] [client 20.215.65.23:39352] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/abcd.php"] [unique_id "adOXMmgkfCKTaLhwaKQVHAAAANQ"]
[Mon Apr 06 19:21:23.007053 2026] [:error] [pid 38562:tid 38572] [client 20.215.65.23:16720] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/abcd.php"] [unique_id "adOXM6eD6Ohe6wzRuy5v-QAAAUc"]
[Mon Apr 06 19:21:23.516521 2026] [:error] [pid 9442:tid 9454] [client 20.215.65.23:25065] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/abcd.php"] [unique_id "adOXM0PsNnAJTnmz6saZEwAAAQo"]
[Mon Apr 06 19:21:24.030135 2026] [:error] [pid 35686:tid 35719] [client 20.215.65.23:40602] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/about2.php"] [unique_id "adOXNMMKdea6oORd2fzI8AAAABc"]
[Mon Apr 06 19:21:24.539756 2026] [:error] [pid 38562:tid 38585] [client 20.215.65.23:2539] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/about2.php"] [unique_id "adOXNKeD6Ohe6wzRuy5v-wAAAVQ"]
[Mon Apr 06 19:21:25.050905 2026] [:error] [pid 1827:tid 1829] [client 20.215.65.23:20429] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/about2.php"] [unique_id "adOXNeVeb6S_DnjZ2xH_5wAAAgA"]
[Mon Apr 06 19:21:25.560719 2026] [:error] [pid 38562:tid 38575] [client 20.215.65.23:15199] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/about2.php"] [unique_id "adOXNaeD6Ohe6wzRuy5wAAAAAUo"]
[Mon Apr 06 19:21:26.070790 2026] [:error] [pid 35688:tid 35752] [client 20.215.65.23:19055] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fi.php"] [unique_id "adOXNuZ85qg4jLsRpQyEmQAAAII"]
[Mon Apr 06 19:21:26.583358 2026] [:error] [pid 9442:tid 9446] [client 20.215.65.23:16749] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fi.php"] [unique_id "adOXNkPsNnAJTnmz6saZIgAAAQI"]
[Mon Apr 06 19:21:27.099732 2026] [:error] [pid 38562:tid 38587] [client 20.215.65.23:40638] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fi.php"] [unique_id "adOXN6eD6Ohe6wzRuy5wBQAAAVY"]
[Mon Apr 06 19:21:27.608512 2026] [:error] [pid 10280:tid 10289] [client 20.215.65.23:40690] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fi.php"] [unique_id "adOXN18QUJkf8g-BFfPZ3wAAAcY"]
[Mon Apr 06 19:21:28.117604 2026] [:error] [pid 9413:tid 9435] [client 20.215.65.23:22519] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a1.php"] [unique_id "adOXOHllvEK3chn01wG6dQAAAZQ"]
[Mon Apr 06 19:21:28.626278 2026] [:error] [pid 35687:tid 35733] [client 20.215.65.23:28565] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a1.php"] [unique_id "adOXOJ3LtDozV0i8BitflwAAAEo"]
[Mon Apr 06 19:21:29.137952 2026] [:error] [pid 9442:tid 9449] [client 20.215.65.23:17460] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a1.php"] [unique_id "adOXOUPsNnAJTnmz6saZKwAAAQU"]
[Mon Apr 06 19:21:29.646833 2026] [:error] [pid 35686:tid 35698] [client 20.215.65.23:15190] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a1.php"] [unique_id "adOXOcMKdea6oORd2fzI9AAAAAI"]
[Mon Apr 06 19:21:30.154772 2026] [:error] [pid 35686:tid 35713] [client 20.215.65.23:22493] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/update/f35.php"] [unique_id "adOXOsMKdea6oORd2fzI9wAAABE"]
[Mon Apr 06 19:21:30.664098 2026] [:error] [pid 35688:tid 35756] [client 20.215.65.23:40599] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/update/f35.php"] [unique_id "adOXOuZ85qg4jLsRpQyEoQAAAIY"]
[Mon Apr 06 19:21:31.172588 2026] [:error] [pid 35688:tid 35752] [client 20.215.65.23:60029] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/update/f35.php"] [unique_id "adOXO-Z85qg4jLsRpQyEogAAAII"]
[Mon Apr 06 19:21:31.680668 2026] [:error] [pid 10280:tid 10295] [client 20.215.65.23:15183] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/update/f35.php"] [unique_id "adOXO18QUJkf8g-BFfPZ6wAAAcw"]
[Mon Apr 06 19:21:32.189654 2026] [:error] [pid 35688:tid 35761] [client 20.215.65.23:25992] [client 20.215.65.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "adOXPOZ85qg4jLsRpQyEqAAAAIs"]
[Mon Apr 06 19:21:32.698389 2026] [:error] [pid 35688:tid 35767] [client 20.215.65.23:26047] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f35.php"] [unique_id "adOXPOZ85qg4jLsRpQyEqwAAAJE"]
[Mon Apr 06 19:21:33.207708 2026] [:error] [pid 9442:tid 9450] [client 20.215.65.23:25505] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f35.php"] [unique_id "adOXPUPsNnAJTnmz6saZNwAAAQY"]
[Mon Apr 06 19:21:33.716394 2026] [:error] [pid 9442:tid 9446] [client 20.215.65.23:20438] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f35.php"] [unique_id "adOXPUPsNnAJTnmz6saZOAAAAQI"]
[Mon Apr 06 19:21:34.225204 2026] [:error] [pid 9442:tid 9459] [client 20.215.65.23:20453] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "adOXPkPsNnAJTnmz6saZOgAAAQ8"]
[Mon Apr 06 19:21:34.735109 2026] [:error] [pid 35688:tid 35760] [client 20.215.65.23:19070] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "adOXPuZ85qg4jLsRpQyEtwAAAIo"]
[Mon Apr 06 19:21:35.244836 2026] [:error] [pid 10280:tid 10294] [client 20.215.65.23:25492] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "adOXP18QUJkf8g-BFfPZ8wAAAcs"]
[Mon Apr 06 19:21:35.754484 2026] [:error] [pid 38562:tid 38573] [client 20.215.65.23:17683] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "adOXP6eD6Ohe6wzRuy5wFQAAAUg"]
[Mon Apr 06 19:21:36.263864 2026] [:error] [pid 35688:tid 35763] [client 20.215.65.23:17427] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "adOXQOZ85qg4jLsRpQyEwQAAAI0"]
[Mon Apr 06 19:21:36.775493 2026] [:error] [pid 9442:tid 9460] [client 20.215.65.23:25489] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "adOXQEPsNnAJTnmz6saZRAAAARA"]
[Mon Apr 06 19:21:37.284679 2026] [:error] [pid 9442:tid 9445] [client 20.215.65.23:25482] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "adOXQUPsNnAJTnmz6saZRwAAAQE"]
[Mon Apr 06 19:21:37.796353 2026] [:error] [pid 35687:tid 35746] [client 20.215.65.23:25523] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "adOXQZ3LtDozV0i8BitfmQAAAFc"]
[Mon Apr 06 19:21:38.305993 2026] [:error] [pid 9442:tid 9461] [client 20.215.65.23:19053] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/prv8.php"] [unique_id "adOXQkPsNnAJTnmz6saZUAAAARE"]
[Mon Apr 06 19:21:38.815477 2026] [:error] [pid 9442:tid 9455] [client 20.215.65.23:19052] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/prv8.php"] [unique_id "adOXQkPsNnAJTnmz6saZUwAAAQs"]
[Mon Apr 06 19:21:39.325270 2026] [:error] [pid 9413:tid 9436] [client 20.215.65.23:19652] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/prv8.php"] [unique_id "adOXQ3llvEK3chn01wG6eQAAAZU"]
[Mon Apr 06 19:21:39.834674 2026] [:error] [pid 9413:tid 9428] [client 20.215.65.23:25525] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/prv8.php"] [unique_id "adOXQ3llvEK3chn01wG6egAAAY0"]
[Mon Apr 06 19:21:40.344763 2026] [:error] [pid 9442:tid 9449] [client 20.215.65.23:20455] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/k.php"] [unique_id "adOXREPsNnAJTnmz6saZXAAAAQU"]
[Mon Apr 06 19:21:40.853852 2026] [:error] [pid 9442:tid 9463] [client 20.215.65.23:17421] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/k.php"] [unique_id "adOXREPsNnAJTnmz6saZYwAAARM"]
[Mon Apr 06 19:21:41.363080 2026] [:error] [pid 9442:tid 9465] [client 20.215.65.23:20753] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/k.php"] [unique_id "adOXRUPsNnAJTnmz6saZawAAARU"]
[Mon Apr 06 19:21:41.874011 2026] [:error] [pid 9442:tid 9456] [client 20.215.65.23:17677] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/k.php"] [unique_id "adOXRUPsNnAJTnmz6saZcgAAAQw"]
[Mon Apr 06 19:21:42.382302 2026] [:error] [pid 10280:tid 10295] [client 20.215.65.23:25500] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dev.php"] [unique_id "adOXRl8QUJkf8g-BFfPZ_gAAAcw"]
[Mon Apr 06 19:21:42.891746 2026] [:error] [pid 10280:tid 10302] [client 20.215.65.23:18975] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dev.php"] [unique_id "adOXRl8QUJkf8g-BFfPaAAAAAdM"]
[Mon Apr 06 19:21:43.401052 2026] [:error] [pid 35688:tid 35750] [client 20.215.65.23:19014] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dev.php"] [unique_id "adOXR-Z85qg4jLsRpQyE1AAAAIA"]
[Mon Apr 06 19:21:43.909557 2026] [:error] [pid 35687:tid 35727] [client 20.215.65.23:25502] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dev.php"] [unique_id "adOXR53LtDozV0i8BitfnAAAAEQ"]
[Mon Apr 06 19:21:44.425246 2026] [:error] [pid 9413:tid 9417] [client 20.215.65.23:58228] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bal.php"] [unique_id "adOXSHllvEK3chn01wG6hQAAAYI"]
[Mon Apr 06 19:21:44.936010 2026] [:error] [pid 35688:tid 35755] [client 20.215.65.23:18951] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bal.php"] [unique_id "adOXSOZ85qg4jLsRpQyE3gAAAIU"]
[Mon Apr 06 19:21:45.444247 2026] [:error] [pid 10280:tid 10302] [client 20.215.65.23:19065] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bal.php"] [unique_id "adOXSV8QUJkf8g-BFfPaEAAAAdM"]
[Mon Apr 06 19:21:45.954034 2026] [:error] [pid 9413:tid 9435] [client 20.215.65.23:18958] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bal.php"] [unique_id "adOXSXllvEK3chn01wG6iAAAAZQ"]
[Mon Apr 06 19:21:46.461833 2026] [:error] [pid 9413:tid 9426] [client 20.215.65.23:28548] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/in.php"] [unique_id "adOXSnllvEK3chn01wG6iwAAAYs"]
[Mon Apr 06 19:21:46.971063 2026] [:error] [pid 35688:tid 35750] [client 20.215.65.23:2104] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/in.php"] [unique_id "adOXSuZ85qg4jLsRpQyE4wAAAIA"]
[Mon Apr 06 19:21:47.481062 2026] [:error] [pid 9413:tid 9415] [client 20.215.65.23:58195] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/in.php"] [unique_id "adOXS3llvEK3chn01wG6jgAAAYA"]
[Mon Apr 06 19:21:47.989627 2026] [:error] [pid 9442:tid 9448] [client 20.215.65.23:15175] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/in.php"] [unique_id "adOXS0PsNnAJTnmz6saZuAAAAQQ"]
[Mon Apr 06 19:21:48.497595 2026] [:error] [pid 9442:tid 9458] [client 20.215.65.23:15185] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gssdd.php"] [unique_id "adOXTEPsNnAJTnmz6saZvwAAAQ4"]
[Mon Apr 06 19:21:49.015856 2026] [proxy_fcgi:error] [pid 9442:tid 9468] [client 20.215.65.23:31056] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 19:21:49.274651 2026] [proxy_fcgi:error] [pid 9442:tid 9445] [client 20.215.65.23:31056] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 19:21:49.533528 2026] [proxy_fcgi:error] [pid 9442:tid 9467] [client 20.215.65.23:31056] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 19:21:49.794434 2026] [proxy_fcgi:error] [pid 9442:tid 9454] [client 20.215.65.23:31056] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 19:21:50.312639 2026] [proxy_fcgi:error] [pid 9442:tid 9458] [client 20.215.65.23:31056] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 19:21:50.571313 2026] [proxy_fcgi:error] [pid 9442:tid 9450] [client 20.215.65.23:31056] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 19:21:50.831103 2026] [proxy_fcgi:error] [pid 9442:tid 9456] [client 20.215.65.23:31056] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 19:21:51.091831 2026] [proxy_fcgi:error] [pid 9442:tid 9447] [client 20.215.65.23:31056] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 19:21:51.350614 2026] [proxy_fcgi:error] [pid 9442:tid 9454] [client 20.215.65.23:31056] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 19:21:51.609649 2026] [proxy_fcgi:error] [pid 9442:tid 9445] [client 20.215.65.23:31056] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 19:21:51.864835 2026] [:error] [pid 9442:tid 9466] [client 20.215.65.23:31056] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/"] [unique_id "adOXT0PsNnAJTnmz6saZ-wAAARY"]
[Mon Apr 06 19:21:52.380742 2026] [:error] [pid 10280:tid 10283] [client 20.215.65.23:20465] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/"] [unique_id "adOXUF8QUJkf8g-BFfPaTgAAAcA"]
[Mon Apr 06 19:21:52.890149 2026] [:error] [pid 38562:tid 38577] [client 20.215.65.23:31064] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/"] [unique_id "adOXUKeD6Ohe6wzRuy5wMwAAAUw"]
[Mon Apr 06 19:21:53.400936 2026] [:error] [pid 38562:tid 38588] [client 20.215.65.23:18961] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/"] [unique_id "adOXUaeD6Ohe6wzRuy5wNQAAAVc"]
[Mon Apr 06 19:21:53.910584 2026] [:error] [pid 9442:tid 9463] [client 20.215.65.23:32908] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/simple.php"] [unique_id "adOXUUPsNnAJTnmz6saaEAAAARM"]
[Mon Apr 06 19:21:54.420062 2026] [:error] [pid 38562:tid 38571] [client 20.215.65.23:18979] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/simple.php"] [unique_id "adOXUqeD6Ohe6wzRuy5wPQAAAUY"]
[Mon Apr 06 19:21:54.928584 2026] [:error] [pid 9442:tid 9448] [client 20.215.65.23:14147] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/simple.php"] [unique_id "adOXUkPsNnAJTnmz6saaJwAAAQQ"]
[Mon Apr 06 19:21:55.437327 2026] [:error] [pid 9442:tid 9448] [client 20.215.65.23:20418] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/simple.php"] [unique_id "adOXU0PsNnAJTnmz6saaMwAAAQQ"]
[Mon Apr 06 19:21:55.947080 2026] [:error] [pid 35786:tid 35814] [client 20.215.65.23:64019] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ew.php"] [unique_id "adOXU2gkfCKTaLhwaKQVLAAAANU"]
[Mon Apr 06 19:21:56.455761 2026] [:error] [pid 35688:tid 35765] [client 20.215.65.23:23473] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ew.php"] [unique_id "adOXVOZ85qg4jLsRpQyFAwAAAI8"]
[Mon Apr 06 19:21:56.966347 2026] [:error] [pid 9442:tid 9451] [client 20.215.65.23:23456] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ew.php"] [unique_id "adOXVEPsNnAJTnmz6saaUAAAAQc"]
[Mon Apr 06 19:21:57.476427 2026] [:error] [pid 9442:tid 9468] [client 20.215.65.23:31085] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ew.php"] [unique_id "adOXVUPsNnAJTnmz6saaWgAAARg"]
[Mon Apr 06 19:21:57.985267 2026] [:error] [pid 38562:tid 38566] [client 20.215.65.23:21946] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file21.php"] [unique_id "adOXVaeD6Ohe6wzRuy5wSwAAAUE"]
[Mon Apr 06 19:21:58.495284 2026] [:error] [pid 35686:tid 35714] [client 20.215.65.23:32901] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file21.php"] [unique_id "adOXVsMKdea6oORd2fzJDwAAABI"]
[Mon Apr 06 19:21:59.004086 2026] [:error] [pid 35687:tid 35734] [client 20.215.65.23:14199] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file21.php"] [unique_id "adOXV53LtDozV0i8BitfowAAAEs"]
[Mon Apr 06 19:21:59.514080 2026] [:error] [pid 9442:tid 9466] [client 20.215.65.23:14198] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file21.php"] [unique_id "adOXV0PsNnAJTnmz6saaegAAARY"]
[Mon Apr 06 19:22:00.024069 2026] [:error] [pid 35688:tid 35764] [client 20.215.65.23:58652] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class19.php"] [unique_id "adOXWOZ85qg4jLsRpQyFDQAAAI4"]
[Mon Apr 06 19:22:00.536664 2026] [:error] [pid 9442:tid 9446] [client 20.215.65.23:58678] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class19.php"] [unique_id "adOXWEPsNnAJTnmz6saajAAAAQI"]
[Mon Apr 06 19:22:01.045553 2026] [:error] [pid 38562:tid 38576] [client 20.215.65.23:59910] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class19.php"] [unique_id "adOXWaeD6Ohe6wzRuy5wVgAAAUs"]
[Mon Apr 06 19:22:01.555968 2026] [:error] [pid 10280:tid 10303] [client 20.215.65.23:16407] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class19.php"] [unique_id "adOXWV8QUJkf8g-BFfPakgAAAdQ"]
[Mon Apr 06 19:22:02.067089 2026] [:error] [pid 9442:tid 9466] [client 20.215.65.23:28047] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class20.php"] [unique_id "adOXWkPsNnAJTnmz6saargAAARY"]
[Mon Apr 06 19:22:02.580915 2026] [:error] [pid 35688:tid 35761] [client 20.215.65.23:2224] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class20.php"] [unique_id "adOXWuZ85qg4jLsRpQyFFwAAAIs"]
[Mon Apr 06 19:22:03.090505 2026] [:error] [pid 35688:tid 35753] [client 20.215.65.23:28045] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class20.php"] [unique_id "adOXW-Z85qg4jLsRpQyFGAAAAIM"]
[Mon Apr 06 19:22:03.598458 2026] [:error] [pid 9413:tid 9435] [client 20.215.65.23:14146] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class20.php"] [unique_id "adOXW3llvEK3chn01wG6sAAAAZQ"]
[Mon Apr 06 19:22:04.108189 2026] [:error] [pid 10280:tid 10291] [client 20.215.65.23:21962] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file18.php"] [unique_id "adOXXF8QUJkf8g-BFfParwAAAcg"]
[Mon Apr 06 19:22:04.617351 2026] [:error] [pid 35688:tid 35770] [client 20.215.65.23:32917] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file18.php"] [unique_id "adOXXOZ85qg4jLsRpQyFHQAAAJQ"]
[Mon Apr 06 19:22:05.126626 2026] [:error] [pid 9442:tid 9462] [client 20.215.65.23:14203] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file18.php"] [unique_id "adOXXUPsNnAJTnmz6saa4QAAARI"]
[Mon Apr 06 19:22:05.636341 2026] [:error] [pid 9442:tid 9447] [client 20.215.65.23:21896] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file18.php"] [unique_id "adOXXUPsNnAJTnmz6saa8AAAAQM"]
[Mon Apr 06 19:22:06.145693 2026] [:error] [pid 9442:tid 9462] [client 20.215.65.23:26062] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vee.php"] [unique_id "adOXXkPsNnAJTnmz6saa_AAAARI"]
[Mon Apr 06 19:22:06.654627 2026] [:error] [pid 9442:tid 9444] [client 20.215.65.23:39999] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vee.php"] [unique_id "adOXXkPsNnAJTnmz6sabBQAAAQA"]
[Mon Apr 06 19:22:07.163105 2026] [:error] [pid 9442:tid 9452] [client 20.215.65.23:2995] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vee.php"] [unique_id "adOXX0PsNnAJTnmz6sabFAAAAQg"]
[Mon Apr 06 19:22:07.673101 2026] [:error] [pid 9442:tid 9460] [client 20.215.65.23:36802] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vee.php"] [unique_id "adOXX0PsNnAJTnmz6sabHwAAARA"]
[Mon Apr 06 19:22:08.191560 2026] [:error] [pid 10280:tid 10292] [client 20.215.65.23:21990] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cabs.php"] [unique_id "adOXYF8QUJkf8g-BFfPa1gAAAck"]
[Mon Apr 06 19:22:08.700915 2026] [:error] [pid 9442:tid 9456] [client 20.215.65.23:28665] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cabs.php"] [unique_id "adOXYEPsNnAJTnmz6sabMwAAAQw"]
[Mon Apr 06 19:22:09.209871 2026] [:error] [pid 9442:tid 9466] [client 20.215.65.23:32918] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cabs.php"] [unique_id "adOXYUPsNnAJTnmz6sabQAAAARY"]
[Mon Apr 06 19:22:09.724791 2026] [:error] [pid 9442:tid 9459] [client 20.215.65.23:21897] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cabs.php"] [unique_id "adOXYUPsNnAJTnmz6sabSwAAAQ8"]
[Mon Apr 06 19:22:10.237020 2026] [:error] [pid 35688:tid 35774] [client 20.215.65.23:39954] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xwx1.php"] [unique_id "adOXYuZ85qg4jLsRpQyFMAAAAJg"]
[Mon Apr 06 19:22:10.747459 2026] [:error] [pid 10280:tid 10286] [client 20.215.65.23:26100] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xwx1.php"] [unique_id "adOXYl8QUJkf8g-BFfPa6wAAAcM"]
[Mon Apr 06 19:22:11.257576 2026] [:error] [pid 9442:tid 9465] [client 20.215.65.23:14151] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xwx1.php"] [unique_id "adOXY0PsNnAJTnmz6sabZQAAARU"]
[Mon Apr 06 19:22:11.772865 2026] [:error] [pid 9413:tid 9431] [client 20.215.65.23:22431] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xwx1.php"] [unique_id "adOXY3llvEK3chn01wG6vwAAAZA"]
[Mon Apr 06 19:22:12.282532 2026] [:error] [pid 10280:tid 10304] [client 20.215.65.23:21984] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x1da.php"] [unique_id "adOXZF8QUJkf8g-BFfPa7wAAAdU"]
[Mon Apr 06 19:22:12.791592 2026] [:error] [pid 35686:tid 35718] [client 20.215.65.23:14196] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x1da.php"] [unique_id "adOXZMMKdea6oORd2fzJFwAAABY"]
[Mon Apr 06 19:22:13.300739 2026] [:error] [pid 35688:tid 35774] [client 20.215.65.23:41879] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x1da.php"] [unique_id "adOXZeZ85qg4jLsRpQyFPwAAAJg"]
[Mon Apr 06 19:22:13.810523 2026] [:error] [pid 35688:tid 35763] [client 20.215.65.23:23542] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x1da.php"] [unique_id "adOXZeZ85qg4jLsRpQyFRAAAAI0"]
[Mon Apr 06 19:22:14.320400 2026] [:error] [pid 35688:tid 35768] [client 20.215.65.23:28134] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jp.php"] [unique_id "adOXZuZ85qg4jLsRpQyFSQAAAJI"]
[Mon Apr 06 19:22:14.829415 2026] [:error] [pid 9413:tid 9419] [client 20.215.65.23:51299] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jp.php"] [unique_id "adOXZnllvEK3chn01wG6wgAAAYQ"]
[Mon Apr 06 19:22:15.337600 2026] [:error] [pid 9442:tid 9452] [client 20.215.65.23:18000] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jp.php"] [unique_id "adOXZ0PsNnAJTnmz6sabtAAAAQg"]
[Mon Apr 06 19:22:15.845837 2026] [:error] [pid 10280:tid 10289] [client 20.215.65.23:51288] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jp.php"] [unique_id "adOXZ18QUJkf8g-BFfPa_gAAAcY"]
[Mon Apr 06 19:22:16.354503 2026] [:error] [pid 10280:tid 10284] [client 20.215.65.23:33514] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/chosen.php"] [unique_id "adOXaF8QUJkf8g-BFfPbAwAAAcE"]
[Mon Apr 06 19:22:16.865578 2026] [:error] [pid 35687:tid 35729] [client 20.215.65.23:2303] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/chosen.php"] [unique_id "adOXaJ3LtDozV0i8BitfzAAAAEY"]
[Mon Apr 06 19:22:17.375036 2026] [:error] [pid 35688:tid 35768] [client 20.215.65.23:27072] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/chosen.php"] [unique_id "adOXaeZ85qg4jLsRpQyFWQAAAJI"]
[Mon Apr 06 19:22:17.883998 2026] [:error] [pid 35688:tid 35774] [client 20.215.65.23:15900] [client 20.215.65.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/chosen.php"] [unique_id "adOXaeZ85qg4jLsRpQyFXQAAAJg"]
[Tue Apr 07 05:58:52.500103 2026] [:error] [pid 37598:tid 37662] [client 216.24.210.126:61963] [client 216.24.210.126] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/buttons.css"] [unique_id "adQsnO9g7q_cV2WhPax89gAAAIE"]
[Tue Apr 07 06:16:39.401193 2026] [proxy_fcgi:error] [pid 37596:tid 37622] [client 194.26.192.92:58207] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 06:16:40.374265 2026] [:error] [pid 37719:tid 37724] [client 194.26.192.92:58490] [client 194.26.192.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/widgets/txets.php"] [unique_id "adQwyE09Xv52u2xXGLA3dAAAAMI"]
[Tue Apr 07 06:16:40.867762 2026] [:error] [pid 37719:tid 37740] [client 194.26.192.92:58588] [client 194.26.192.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/rest-api/txets.php"] [unique_id "adQwyE09Xv52u2xXGLA3dwAAANI"]
[Tue Apr 07 06:16:41.350684 2026] [:error] [pid 37597:tid 37651] [client 194.26.192.92:58685] [client 194.26.192.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/post-template/txets.php"] [unique_id "adQwyQ6uAY0QAy-8EEJPygAAAFE"]
[Tue Apr 07 06:16:42.325041 2026] [:error] [pid 37597:tid 37648] [client 194.26.192.92:58946] [client 194.26.192.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/txets.php"] [unique_id "adQwyg6uAY0QAy-8EEJPzAAAAE4"]
[Tue Apr 07 06:16:42.812168 2026] [proxy_fcgi:error] [pid 37598:tid 37665] [client 194.26.192.92:59038] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 06:16:43.301831 2026] [proxy_fcgi:error] [pid 37719:tid 37746] [client 194.26.192.92:59129] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 10:56:51.612651 2026] [:error] [pid 12948:tid 12956] [client 217.216.72.68:65294] [client 217.216.72.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-content/"] [unique_id "adRyc8beSPAN8LvMqsY2kwAAAQU"]
[Tue Apr 07 10:56:55.540066 2026] [:error] [pid 37596:tid 37616] [client 217.216.72.68:58294] [client 217.216.72.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/"] [unique_id "adRyd6paAOZHEjRWjP1XCAAAAAo"]
[Tue Apr 07 10:57:01.922333 2026] [:error] [pid 12948:tid 12953] [client 217.216.72.68:61905] [client 217.216.72.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/readme.html"] [unique_id "adRyfcbeSPAN8LvMqsY27wAAAQI"]
[Tue Apr 07 10:57:02.036475 2026] [:error] [pid 37719:tid 37737] [client 217.216.72.68:64148] [client 217.216.72.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-login.php"] [unique_id "adRyfk09Xv52u2xXGLDvVwAAAM8"]
[Tue Apr 07 10:57:15.010492 2026] [:error] [pid 37719:tid 37740] [client 217.216.72.68:58995] [client 217.216.72.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/"] [unique_id "adRyi009Xv52u2xXGLDvwAAAANI"]
[Tue Apr 07 10:57:26.509318 2026] [:error] [pid 37719:tid 37726] [client 217.216.72.68:61905] [client 217.216.72.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-login.php"] [unique_id "adRylk09Xv52u2xXGLDwJwAAAMQ"]
[Tue Apr 07 10:57:26.942563 2026] [:error] [pid 37719:tid 37745] [client 217.216.72.68:64257] [client 217.216.72.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/xmlrpc.php"] [unique_id "adRylk09Xv52u2xXGLDwKQAAANc"]
[Tue Apr 07 16:33:18.001628 2026] [proxy_fcgi:error] [pid 37597:tid 37639] [client 92.62.121.214:45322] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:33:18.263623 2026] [proxy_fcgi:error] [pid 37597:tid 37641] [client 92.62.121.214:45322] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:33:18.526168 2026] [proxy_fcgi:error] [pid 37597:tid 37651] [client 92.62.121.214:45322] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:33:18.791292 2026] [proxy_fcgi:error] [pid 37597:tid 37656] [client 92.62.121.214:45322] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:33:19.056117 2026] [proxy_fcgi:error] [pid 37597:tid 37645] [client 92.62.121.214:45322] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:33:19.444702 2026] [proxy_fcgi:error] [pid 37597:tid 37634] [client 92.62.121.214:45322] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:33:19.705633 2026] [proxy_fcgi:error] [pid 37597:tid 37649] [client 92.62.121.214:45322] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:33:19.965514 2026] [proxy_fcgi:error] [pid 37597:tid 37654] [client 92.62.121.214:45322] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:33:20.226018 2026] [proxy_fcgi:error] [pid 37597:tid 37641] [client 92.62.121.214:45322] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:33:20.747044 2026] [proxy_fcgi:error] [pid 37597:tid 37650] [client 92.62.121.214:45322] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:33:21.007157 2026] [proxy_fcgi:error] [pid 37597:tid 37644] [client 92.62.121.214:45322] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:33:21.267022 2026] [proxy_fcgi:error] [pid 37597:tid 37657] [client 92.62.121.214:45322] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:33:21.674987 2026] [proxy_fcgi:error] [pid 37597:tid 37638] [client 92.62.121.214:45322] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:33:21.936015 2026] [proxy_fcgi:error] [pid 37597:tid 37655] [client 92.62.121.214:45322] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:33:22.197628 2026] [proxy_fcgi:error] [pid 37597:tid 37652] [client 92.62.121.214:45322] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:33:22.460803 2026] [proxy_fcgi:error] [pid 37597:tid 37640] [client 92.62.121.214:45322] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:33:22.724717 2026] [proxy_fcgi:error] [pid 37597:tid 37657] [client 92.62.121.214:45322] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:33:22.984452 2026] [proxy_fcgi:error] [pid 37597:tid 37638] [client 92.62.121.214:45322] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:33:23.245740 2026] [proxy_fcgi:error] [pid 37597:tid 37647] [client 92.62.121.214:45322] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:33:26.928750 2026] [:error] [pid 37597:tid 37654] [client 92.62.121.214:45322] [client 92.62.121.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "adTBVg6uAY0QAy-8EEK4XAAAAFQ"]
[Tue Apr 07 16:33:28.442916 2026] [:error] [pid 37719:tid 37733] [client 92.62.121.214:33780] [client 92.62.121.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "adTBWE09Xv52u2xXGLCK_QAAAMs"]
[Tue Apr 07 16:33:29.871420 2026] [proxy_fcgi:error] [pid 12948:tid 12964] [client 92.62.121.214:33796] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:33:30.657037 2026] [:error] [pid 12948:tid 12958] [client 92.62.121.214:33796] [client 92.62.121.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dwelectservices.com.au"] [uri "/tinyfilemanager.php"] [unique_id "adTBWsbeSPAN8LvMqsZ4ZgAAAQc"]
[Tue Apr 07 16:33:31.887089 2026] [proxy_fcgi:error] [pid 59490:tid 59513] [client 92.62.121.214:33804] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:33:32.142308 2026] [:error] [pid 59490:tid 59516] [client 92.62.121.214:33804] [client 92.62.121.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "adTBXEcw8OFbiUZ7Rx1BHwAAAVg"]
[Tue Apr 07 16:33:33.134896 2026] [proxy_fcgi:error] [pid 37596:tid 37623] [client 92.62.121.214:33820] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:33:34.433439 2026] [:error] [pid 37596:tid 37629] [client 92.62.121.214:33820] [client 92.62.121.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "adTBXqpaAOZHEjRWjP179gAAABc"]
[Tue Apr 07 16:33:37.051887 2026] [:error] [pid 37719:tid 37728] [client 92.62.121.214:58762] [client 92.62.121.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "adTBYU09Xv52u2xXGLCLBwAAAMY"]
[Tue Apr 07 16:33:37.782496 2026] [:error] [pid 37719:tid 37737] [client 92.62.121.214:58770] [client 92.62.121.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "adTBYU09Xv52u2xXGLCLCAAAAM8"]
[Tue Apr 07 16:33:40.208161 2026] [:error] [pid 37719:tid 37724] [client 92.62.121.214:58772] [client 92.62.121.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "adTBZE09Xv52u2xXGLCLCgAAAMI"]
[Tue Apr 07 16:33:40.837570 2026] [:error] [pid 59551:tid 59576] [client 92.62.121.214:58776] [client 92.62.121.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "adTBZF7LN7Ubyqs-sVugpQAAAZc"]
[Tue Apr 07 16:33:41.586354 2026] [:error] [pid 37597:tid 37647] [client 92.62.121.214:58790] [client 92.62.121.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "adTBZQ6uAY0QAy-8EEK4dQAAAE0"]
[Tue Apr 07 16:33:42.501282 2026] [:error] [pid 59551:tid 59557] [client 92.62.121.214:2045] [client 92.62.121.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "adTBZl7LN7Ubyqs-sVugpwAAAYQ"]
[Tue Apr 07 16:33:43.257701 2026] [proxy_fcgi:error] [pid 59551:tid 59568] [client 92.62.121.214:58820] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:33:43.773072 2026] [:error] [pid 59551:tid 59569] [client 92.62.121.214:58820] [client 92.62.121.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dwelectservices.com.au"] [uri "/filemanager.php"] [unique_id "adTBZ17LN7Ubyqs-sVugrQAAAZA"]
[Tue Apr 07 16:33:45.080373 2026] [:error] [pid 59551:tid 59572] [client 92.62.121.214:55636] [client 92.62.121.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "adTBaV7LN7Ubyqs-sVugtAAAAZM"]
[Tue Apr 07 16:33:46.143413 2026] [:error] [pid 37719:tid 37745] [client 92.62.121.214:55648] [client 92.62.121.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "adTBak09Xv52u2xXGLCLEQAAANc"]
[Tue Apr 07 16:33:46.967361 2026] [proxy_fcgi:error] [pid 37597:tid 37636] [client 92.62.121.214:37593] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:33:47.231672 2026] [:error] [pid 37597:tid 37645] [client 92.62.121.214:37593] [client 92.62.121.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "adTBaw6uAY0QAy-8EEK4gAAAAEs"]
[Tue Apr 07 16:33:47.831439 2026] [proxy_fcgi:error] [pid 59804:tid 59816] [client 92.62.121.214:55664] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:33:48.603915 2026] [proxy_fcgi:error] [pid 59804:tid 59808] [client 92.62.121.214:55664] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:33:49.372566 2026] [:error] [pid 59804:tid 59812] [client 92.62.121.214:55664] [client 92.62.121.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "adTBbXYVIXiPh5_eJTlSuwAAAgY"]
[Tue Apr 07 16:33:50.055336 2026] [proxy_fcgi:error] [pid 37597:tid 37648] [client 92.62.121.214:55674] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:33:50.314745 2026] [:error] [pid 37597:tid 37654] [client 92.62.121.214:55674] [client 92.62.121.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "adTBbg6uAY0QAy-8EEK4iwAAAFQ"]
[Tue Apr 07 16:33:51.122032 2026] [proxy_fcgi:error] [pid 37597:tid 37634] [client 92.62.121.214:43337] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:33:51.667153 2026] [:error] [pid 37597:tid 37636] [client 92.62.121.214:43337] [client 92.62.121.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "adTBbw6uAY0QAy-8EEK4kQAAAEI"]
[Tue Apr 07 16:33:52.728187 2026] [:error] [pid 37597:tid 37638] [client 92.62.121.214:55690] [client 92.62.121.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "adTBcA6uAY0QAy-8EEK4mAAAAEQ"]
[Tue Apr 07 16:33:53.681508 2026] [proxy_fcgi:error] [pid 37598:tid 37671] [client 92.62.121.214:47224] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:33:53.942024 2026] [proxy_fcgi:error] [pid 37598:tid 37667] [client 92.62.121.214:47224] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:33:54.469436 2026] [:error] [pid 37598:tid 37679] [client 92.62.121.214:47224] [client 92.62.121.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "adTBcu9g7q_cV2WhPaxyDwAAAJI"]
[Tue Apr 07 16:33:55.306106 2026] [:error] [pid 59804:tid 59807] [client 92.62.121.214:47236] [client 92.62.121.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "adTBc3YVIXiPh5_eJTlSvwAAAgE"]
[Tue Apr 07 16:33:56.293290 2026] [:error] [pid 59804:tid 59827] [client 92.62.121.214:47244] [client 92.62.121.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "adTBdHYVIXiPh5_eJTlSwgAAAhU"]
[Tue Apr 07 16:33:57.179070 2026] [:error] [pid 37597:tid 37641] [client 92.62.121.214:47258] [client 92.62.121.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "adTBdQ6uAY0QAy-8EEK4owAAAEc"]
[Tue Apr 07 16:33:57.838195 2026] [:error] [pid 59551:tid 59555] [client 92.62.121.214:47260] [client 92.62.121.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "adTBdV7LN7Ubyqs-sVugugAAAYI"]
[Tue Apr 07 16:33:58.958035 2026] [proxy_fcgi:error] [pid 59660:tid 59668] [client 92.62.121.214:47272] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:33:59.213067 2026] [:error] [pid 59660:tid 59683] [client 92.62.121.214:47272] [client 92.62.121.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "adTBdzp3-oiX2o5bTszkZQAAAdU"]
[Tue Apr 07 16:34:00.013051 2026] [:error] [pid 37719:tid 37734] [client 92.62.121.214:47280] [client 92.62.121.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "adTBeE09Xv52u2xXGLCLEwAAAMw"]
[Tue Apr 07 16:34:00.804099 2026] [:error] [pid 37598:tid 37676] [client 92.62.121.214:47292] [client 92.62.121.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "adTBeO9g7q_cV2WhPaxyEgAAAI8"]
[Tue Apr 07 16:34:02.016722 2026] [proxy_fcgi:error] [pid 59804:tid 59808] [client 92.62.121.214:47294] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:34:02.552711 2026] [proxy_fcgi:error] [pid 59804:tid 59828] [client 92.62.121.214:47294] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:34:04.980126 2026] [:error] [pid 59804:tid 59825] [client 92.62.121.214:47294] [client 92.62.121.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/admin.php"] [unique_id "adTBfHYVIXiPh5_eJTlS1AAAAhM"]
[Tue Apr 07 16:34:06.460777 2026] [:error] [pid 59551:tid 59571] [client 92.62.121.214:11649] [client 92.62.121.214] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 92.62.121.214, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "adTBfl7LN7Ubyqs-sVugxgAAAZI"]
[Tue Apr 07 16:34:06.737379 2026] [proxy_fcgi:error] [pid 59551:tid 59558] [client 92.62.121.214:11649] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:34:08.066271 2026] [proxy_fcgi:error] [pid 59551:tid 59555] [client 92.62.121.214:11649] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:34:08.332640 2026] [proxy_fcgi:error] [pid 59551:tid 59564] [client 92.62.121.214:11649] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:34:09.641939 2026] [:error] [pid 59551:tid 59574] [client 92.62.121.214:11649] [client 92.62.121.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "adTBgV7LN7Ubyqs-sVug0gAAAZU"]
[Tue Apr 07 16:34:10.454858 2026] [proxy_fcgi:error] [pid 37597:tid 37638] [client 92.62.121.214:42634] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:34:10.715850 2026] [proxy_fcgi:error] [pid 37597:tid 37658] [client 92.62.121.214:42634] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:34:10.977636 2026] [:error] [pid 37597:tid 37644] [client 92.62.121.214:42634] [client 92.62.121.214] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 92.62.121.214, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "adTBgg6uAY0QAy-8EEK4vwAAAEo"]
[Tue Apr 07 16:34:11.508614 2026] [:error] [pid 37597:tid 37651] [client 92.62.121.214:42634] [client 92.62.121.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/item.php"] [unique_id "adTBgw6uAY0QAy-8EEK4wQAAAFE"]
[Tue Apr 07 16:34:13.050289 2026] [proxy_fcgi:error] [pid 37597:tid 37644] [client 92.62.121.214:42642] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:34:13.311309 2026] [proxy_fcgi:error] [pid 37597:tid 37648] [client 92.62.121.214:42642] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:34:13.836730 2026] [proxy_fcgi:error] [pid 37597:tid 37641] [client 92.62.121.214:42642] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:34:14.355906 2026] [:error] [pid 37597:tid 37656] [client 92.62.121.214:42642] [client 92.62.121.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "adTBhg6uAY0QAy-8EEK41AAAAFY"]
[Tue Apr 07 16:34:14.952963 2026] [proxy_fcgi:error] [pid 37719:tid 37725] [client 92.62.121.214:37194] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:34:15.727856 2026] [proxy_fcgi:error] [pid 37719:tid 37732] [client 92.62.121.214:37194] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:34:16.280421 2026] [proxy_fcgi:error] [pid 37719:tid 37722] [client 92.62.121.214:37194] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:34:16.801302 2026] [proxy_fcgi:error] [pid 37719:tid 37746] [client 92.62.121.214:37194] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:34:17.060863 2026] [:error] [pid 37719:tid 37725] [client 92.62.121.214:37194] [client 92.62.121.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "adTBiU09Xv52u2xXGLCLLQAAAMM"]
[Tue Apr 07 16:34:17.643354 2026] [proxy_fcgi:error] [pid 37598:tid 37661] [client 92.62.121.214:37206] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:34:17.919270 2026] [proxy_fcgi:error] [pid 37598:tid 37668] [client 92.62.121.214:37206] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:34:18.180418 2026] [:error] [pid 37598:tid 37674] [client 92.62.121.214:37206] [client 92.62.121.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "adTBiu9g7q_cV2WhPaxyJQAAAI0"]
[Tue Apr 07 16:34:19.236574 2026] [proxy_fcgi:error] [pid 59551:tid 59570] [client 92.62.121.214:37208] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:34:19.779979 2026] [:error] [pid 59551:tid 59568] [client 92.62.121.214:37208] [client 92.62.121.214] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 92.62.121.214, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "adTBi17LN7Ubyqs-sVug3QAAAY8"]
[Tue Apr 07 16:34:20.049962 2026] [:error] [pid 59551:tid 59569] [client 92.62.121.214:37208] [client 92.62.121.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "adTBjF7LN7Ubyqs-sVug3wAAAZA"]
[Tue Apr 07 16:34:23.357311 2026] [proxy_fcgi:error] [pid 59551:tid 59566] [client 92.62.121.214:37212] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:34:24.914512 2026] [proxy_fcgi:error] [pid 59551:tid 59553] [client 92.62.121.214:37212] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:34:25.175366 2026] [:error] [pid 59551:tid 59562] [client 92.62.121.214:37212] [client 92.62.121.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "adTBkV7LN7Ubyqs-sVug-wAAAYk"]
[Tue Apr 07 16:34:26.002866 2026] [proxy_fcgi:error] [pid 59551:tid 59563] [client 92.62.121.214:53824] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:34:26.796690 2026] [:error] [pid 59551:tid 59573] [client 92.62.121.214:53824] [client 92.62.121.214] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 92.62.121.214, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "adTBkl7LN7Ubyqs-sVuhAQAAAZQ"]
[Tue Apr 07 16:34:27.976660 2026] [proxy_fcgi:error] [pid 59551:tid 59564] [client 92.62.121.214:53824] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:34:28.241079 2026] [proxy_fcgi:error] [pid 59551:tid 59554] [client 92.62.121.214:53824] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:34:28.500867 2026] [proxy_fcgi:error] [pid 59551:tid 59553] [client 92.62.121.214:53824] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:34:28.758854 2026] [:error] [pid 59551:tid 59562] [client 92.62.121.214:53824] [client 92.62.121.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "adTBlF7LN7Ubyqs-sVuhCgAAAYk"]
[Tue Apr 07 16:34:29.615260 2026] [proxy_fcgi:error] [pid 59551:tid 59563] [client 92.62.121.214:53834] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:34:29.886456 2026] [:error] [pid 59551:tid 59555] [client 92.62.121.214:53834] [client 92.62.121.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/infi.php"] [unique_id "adTBlV7LN7Ubyqs-sVuhDAAAAYI"]
[Tue Apr 07 16:34:31.048924 2026] [proxy_fcgi:error] [pid 37597:tid 37641] [client 92.62.121.214:53836] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:34:31.342768 2026] [:error] [pid 37597:tid 37649] [client 92.62.121.214:53836] [client 92.62.121.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "adTBlw6uAY0QAy-8EEK45wAAAE8"]
[Tue Apr 07 16:34:32.090921 2026] [proxy_fcgi:error] [pid 59804:tid 59811] [client 92.62.121.214:53844] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:34:32.614913 2026] [proxy_fcgi:error] [pid 59804:tid 59806] [client 92.62.121.214:53844] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:34:32.870454 2026] [:error] [pid 59804:tid 59821] [client 92.62.121.214:53844] [client 92.62.121.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "adTBmHYVIXiPh5_eJTlS6AAAAg8"]
[Tue Apr 07 16:34:35.154752 2026] [:error] [pid 59804:tid 59813] [client 92.62.121.214:46868] [client 92.62.121.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "adTBm3YVIXiPh5_eJTlS6QAAAgc"]
[Tue Apr 07 16:34:35.952986 2026] [proxy_fcgi:error] [pid 37597:tid 37641] [client 92.62.121.214:46884] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:34:36.220948 2026] [proxy_fcgi:error] [pid 37597:tid 37639] [client 92.62.121.214:46884] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:34:37.281422 2026] [:error] [pid 37597:tid 37640] [client 92.62.121.214:46884] [client 92.62.121.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "adTBnQ6uAY0QAy-8EEK4_QAAAEY"]
[Tue Apr 07 16:34:38.451588 2026] [:error] [pid 37597:tid 37651] [client 92.62.121.214:46898] [client 92.62.121.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "adTBng6uAY0QAy-8EEK5BgAAAFE"]
[Tue Apr 07 16:34:39.924345 2026] [:error] [pid 37596:tid 37622] [client 92.62.121.214:46902] [client 92.62.121.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/edit.php"] [unique_id "adTBn6paAOZHEjRWjP18BgAAABA"]
[Tue Apr 07 16:34:40.707826 2026] [proxy_fcgi:error] [pid 59551:tid 59558] [client 92.62.121.214:46906] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:34:41.237570 2026] [proxy_fcgi:error] [pid 59551:tid 59576] [client 92.62.121.214:46906] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:34:41.500064 2026] [:error] [pid 59551:tid 59568] [client 92.62.121.214:46906] [client 92.62.121.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "adTBoV7LN7Ubyqs-sVuhFQAAAY8"]
[Tue Apr 07 16:34:42.421624 2026] [proxy_fcgi:error] [pid 37719:tid 37736] [client 92.62.121.214:46918] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:34:42.940486 2026] [:error] [pid 37719:tid 37746] [client 92.62.121.214:46918] [client 92.62.121.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/click.php"] [unique_id "adTBok09Xv52u2xXGLCLQwAAANg"]
[Tue Apr 07 16:34:44.454344 2026] [:error] [pid 59660:tid 59682] [client 92.62.121.214:44874] [client 92.62.121.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "adTBpDp3-oiX2o5bTszkcgAAAdQ"]
[Tue Apr 07 16:34:45.439487 2026] [proxy_fcgi:error] [pid 37598:tid 37676] [client 92.62.121.214:44890] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:34:46.234882 2026] [proxy_fcgi:error] [pid 37598:tid 37678] [client 92.62.121.214:44890] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:34:46.757372 2026] [proxy_fcgi:error] [pid 37598:tid 37682] [client 92.62.121.214:44890] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:34:47.015160 2026] [:error] [pid 37598:tid 37664] [client 92.62.121.214:44890] [client 92.62.121.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "adTBp-9g7q_cV2WhPaxyNwAAAIM"]
[Tue Apr 07 16:34:47.885930 2026] [:error] [pid 37598:tid 37677] [client 92.62.121.214:44906] [client 92.62.121.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/xl2023.php"] [unique_id "adTBp-9g7q_cV2WhPaxyOQAAAJA"]
[Tue Apr 07 16:34:48.774449 2026] [:error] [pid 37719:tid 37736] [client 92.62.121.214:44916] [client 92.62.121.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/certificates/admin.php"] [unique_id "adTBqE09Xv52u2xXGLCLRwAAAM4"]
[Tue Apr 07 16:34:49.736490 2026] [:error] [pid 37597:tid 37656] [client 92.62.121.214:44922] [client 92.62.121.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/media/dog.php"] [unique_id "adTBqQ6uAY0QAy-8EEK5OwAAAFY"]
[Tue Apr 07 16:34:50.716004 2026] [proxy_fcgi:error] [pid 12948:tid 12963] [client 92.62.121.214:44936] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:34:50.975499 2026] [:error] [pid 12948:tid 12960] [client 92.62.121.214:44936] [client 92.62.121.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "adTBqsbeSPAN8LvMqsZ4hgAAAQk"]
[Tue Apr 07 16:34:51.768602 2026] [:error] [pid 59804:tid 59807] [client 92.62.121.214:44940] [client 92.62.121.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "adTBq3YVIXiPh5_eJTlS8gAAAgE"]
[Tue Apr 07 16:34:52.593188 2026] [proxy_fcgi:error] [pid 37719:tid 37733] [client 92.62.121.214:44950] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:34:53.122728 2026] [:error] [pid 37719:tid 37726] [client 92.62.121.214:44950] [client 92.62.121.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "adTBrU09Xv52u2xXGLCLTgAAAMQ"]
[Tue Apr 07 16:34:53.866299 2026] [:error] [pid 59804:tid 59818] [client 92.62.121.214:53222] [client 92.62.121.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "adTBrXYVIXiPh5_eJTlS9QAAAgw"]
[Tue Apr 07 16:34:54.615438 2026] [:error] [pid 59804:tid 59830] [client 92.62.121.214:53224] [client 92.62.121.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/pomo/admin.php"] [unique_id "adTBrnYVIXiPh5_eJTlS-AAAAhg"]
[Tue Apr 07 16:34:55.575382 2026] [:error] [pid 59804:tid 59828] [client 92.62.121.214:53236] [client 92.62.121.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/IXR/security.php"] [unique_id "adTBr3YVIXiPh5_eJTlS-wAAAhY"]
[Tue Apr 07 16:34:56.738070 2026] [:error] [pid 59551:tid 59577] [client 92.62.121.214:53248] [client 92.62.121.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "adTBsF7LN7Ubyqs-sVuhJAAAAZg"]
[Tue Apr 07 16:34:57.980471 2026] [:error] [pid 37597:tid 37638] [client 92.62.121.214:53252] [client 92.62.121.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/fonts/about.php"] [unique_id "adTBsQ6uAY0QAy-8EEK5ZgAAAEQ"]
[Tue Apr 07 16:34:58.771337 2026] [proxy_fcgi:error] [pid 37597:tid 37634] [client 92.62.121.214:53264] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:34:59.580547 2026] [proxy_fcgi:error] [pid 37597:tid 37647] [client 92.62.121.214:53264] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:34:59.848406 2026] [:error] [pid 37597:tid 37641] [client 92.62.121.214:53264] [client 92.62.121.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "adTBsw6uAY0QAy-8EEK5eAAAAEc"]
[Tue Apr 07 16:35:01.126353 2026] [proxy_fcgi:error] [pid 37719:tid 37728] [client 92.62.121.214:53276] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:35:01.583190 2026] [proxy_fcgi:error] [pid 37719:tid 37722] [client 92.62.121.214:53276] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:35:03.308072 2026] [:error] [pid 37719:tid 37730] [client 92.62.121.214:53276] [client 92.62.121.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/file.php"] [unique_id "adTBt009Xv52u2xXGLCLaQAAAMg"]
[Tue Apr 07 16:35:04.954398 2026] [:error] [pid 59490:tid 59502] [client 92.62.121.214:44474] [client 92.62.121.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "adTBuEcw8OFbiUZ7Rx1BMQAAAUo"]
[Tue Apr 07 16:35:05.959156 2026] [:error] [pid 59551:tid 59566] [client 92.62.121.214:44484] [client 92.62.121.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "adTBuV7LN7Ubyqs-sVuhLgAAAY0"]
[Tue Apr 07 16:35:07.632318 2026] [:error] [pid 37598:tid 37680] [client 92.62.121.214:44500] [client 92.62.121.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "adTBu-9g7q_cV2WhPaxyRwAAAJM"]
[Tue Apr 07 16:35:08.914976 2026] [proxy_fcgi:error] [pid 59490:tid 59516] [client 92.62.121.214:44504] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:35:09.175719 2026] [proxy_fcgi:error] [pid 59490:tid 59499] [client 92.62.121.214:44504] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:35:09.448580 2026] [proxy_fcgi:error] [pid 59490:tid 59512] [client 92.62.121.214:44504] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:35:09.717146 2026] [proxy_fcgi:error] [pid 59490:tid 59509] [client 92.62.121.214:44504] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:35:11.010381 2026] [:error] [pid 59490:tid 59501] [client 92.62.121.214:44504] [client 92.62.121.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "adTBv0cw8OFbiUZ7Rx1BPgAAAUk"]
[Tue Apr 07 16:35:11.678431 2026] [:error] [pid 37597:tid 37640] [client 92.62.121.214:44510] [client 92.62.121.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "adTBvw6uAY0QAy-8EEK5mwAAAEY"]
[Tue Apr 07 16:35:12.358797 2026] [:error] [pid 37597:tid 37634] [client 92.62.121.214:44522] [client 92.62.121.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "adTBwA6uAY0QAy-8EEK5nQAAAEA"]
[Tue Apr 07 16:35:13.061387 2026] [:error] [pid 37597:tid 37643] [client 92.62.121.214:44524] [client 92.62.121.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "adTBwQ6uAY0QAy-8EEK5ogAAAEk"]
[Tue Apr 07 16:35:13.857144 2026] [:error] [pid 37597:tid 37655] [client 92.62.121.214:36146] [client 92.62.121.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "adTBwQ6uAY0QAy-8EEK5qQAAAFU"]
[Tue Apr 07 16:35:14.629301 2026] [:error] [pid 37597:tid 37640] [client 92.62.121.214:36152] [client 92.62.121.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "adTBwg6uAY0QAy-8EEK5rwAAAEY"]
[Tue Apr 07 16:35:15.758437 2026] [:error] [pid 37597:tid 37641] [client 92.62.121.214:36166] [client 92.62.121.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/media/index.php"] [unique_id "adTBww6uAY0QAy-8EEK5ugAAAEc"]
[Tue Apr 07 16:35:16.627553 2026] [:error] [pid 59551:tid 59576] [client 92.62.121.214:36182] [client 92.62.121.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "adTBxF7LN7Ubyqs-sVuhNwAAAZc"]
[Tue Apr 07 16:35:17.260925 2026] [:error] [pid 12948:tid 12958] [client 92.62.121.214:21700] [client 92.62.121.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "adTBxcbeSPAN8LvMqsZ4kgAAAQc"]
[Tue Apr 07 16:35:18.024901 2026] [:error] [pid 37596:tid 37612] [client 92.62.121.214:36200] [client 92.62.121.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "adTBxqpaAOZHEjRWjP18CwAAAAY"]
[Tue Apr 07 16:35:19.182319 2026] [:error] [pid 59551:tid 59572] [client 92.62.121.214:36202] [client 92.62.121.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/fonts/themes.php"] [unique_id "adTBx17LN7Ubyqs-sVuhPgAAAZM"]
[Tue Apr 07 16:35:20.246819 2026] [:error] [pid 59660:tid 59666] [client 92.62.121.214:36206] [client 92.62.121.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/certificates/index.php"] [unique_id "adTByDp3-oiX2o5bTszkeQAAAcQ"]
[Tue Apr 07 16:35:20.947616 2026] [proxy_fcgi:error] [pid 12948:tid 12962] [client 92.62.121.214:36222] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:35:21.473358 2026] [:error] [pid 12948:tid 12959] [client 92.62.121.214:36222] [client 92.62.121.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "adTBycbeSPAN8LvMqsZ4lwAAAQg"]
[Tue Apr 07 16:35:22.735171 2026] [:error] [pid 59551:tid 59554] [client 92.62.121.214:36234] [client 92.62.121.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "adTByl7LN7Ubyqs-sVuhRwAAAYE"]
[Tue Apr 07 16:35:23.902974 2026] [proxy_fcgi:error] [pid 12948:tid 12965] [client 92.62.121.214:34502] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:35:24.166032 2026] [:error] [pid 12948:tid 12975] [client 92.62.121.214:34502] [client 92.62.121.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "adTBzMbeSPAN8LvMqsZ4nAAAARg"]
[Tue Apr 07 16:35:25.084983 2026] [proxy_fcgi:error] [pid 59490:tid 59499] [client 92.62.121.214:34504] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:35:25.348724 2026] [proxy_fcgi:error] [pid 59490:tid 59512] [client 92.62.121.214:34504] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:35:25.612313 2026] [proxy_fcgi:error] [pid 59490:tid 59505] [client 92.62.121.214:34504] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:35:25.868648 2026] [:error] [pid 59490:tid 59509] [client 92.62.121.214:34504] [client 92.62.121.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "adTBzUcw8OFbiUZ7Rx1BRwAAAVE"]
[Tue Apr 07 16:35:26.651342 2026] [proxy_fcgi:error] [pid 59660:tid 59685] [client 92.62.121.214:34518] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:35:26.905809 2026] [:error] [pid 59660:tid 59671] [client 92.62.121.214:34518] [client 92.62.121.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "adTBzjp3-oiX2o5bTszkfwAAAck"]
[Tue Apr 07 16:35:27.981775 2026] [proxy_fcgi:error] [pid 59660:tid 59669] [client 92.62.121.214:34532] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:35:28.244530 2026] [proxy_fcgi:error] [pid 59660:tid 59663] [client 92.62.121.214:34532] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:35:28.504797 2026] [proxy_fcgi:error] [pid 59660:tid 59675] [client 92.62.121.214:34532] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:35:29.823430 2026] [proxy_fcgi:error] [pid 59660:tid 59682] [client 92.62.121.214:34532] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:35:30.390953 2026] [proxy_fcgi:error] [pid 59660:tid 59676] [client 92.62.121.214:34532] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:35:30.912763 2026] [proxy_fcgi:error] [pid 59660:tid 59679] [client 92.62.121.214:34532] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:35:31.700634 2026] [proxy_fcgi:error] [pid 59660:tid 59662] [client 92.62.121.214:34532] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:35:32.014110 2026] [:error] [pid 59660:tid 59684] [client 92.62.121.214:34532] [client 92.62.121.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "adTB1Dp3-oiX2o5bTszklQAAAdY"]
[Tue Apr 07 16:35:32.657816 2026] [:error] [pid 37719:tid 37743] [client 92.62.121.214:34548] [client 92.62.121.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "adTB1E09Xv52u2xXGLCLfQAAANU"]
[Tue Apr 07 16:35:33.207472 2026] [proxy_fcgi:error] [pid 37597:tid 37648] [client 92.62.121.214:34552] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:35:33.462110 2026] [:error] [pid 37597:tid 37644] [client 92.62.121.214:34552] [client 92.62.121.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "adTB1Q6uAY0QAy-8EEK50AAAAEo"]
[Tue Apr 07 16:35:34.304116 2026] [proxy_fcgi:error] [pid 37598:tid 37676] [client 92.62.121.214:45238] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:35:34.561355 2026] [:error] [pid 37598:tid 37666] [client 92.62.121.214:45238] [client 92.62.121.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "adTB1u9g7q_cV2WhPaxyTAAAAIU"]
[Tue Apr 07 16:35:35.199656 2026] [:error] [pid 59804:tid 59823] [client 92.62.121.214:45240] [client 92.62.121.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "adTB13YVIXiPh5_eJTlTEgAAAhE"]
[Tue Apr 07 16:35:38.596060 2026] [:error] [pid 59551:tid 59559] [client 92.62.121.214:45256] [client 92.62.121.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "adTB2l7LN7Ubyqs-sVuhWwAAAYY"]
[Tue Apr 07 16:35:39.581206 2026] [:error] [pid 59804:tid 59819] [client 92.62.121.214:45264] [client 92.62.121.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dwelectservices.com.au"] [uri "/fm.php"] [unique_id "adTB23YVIXiPh5_eJTlTGwAAAg0"]
[Tue Apr 07 16:35:41.344903 2026] [proxy_fcgi:error] [pid 37597:tid 37650] [client 92.62.121.214:45274] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:35:41.892872 2026] [:error] [pid 37597:tid 37646] [client 92.62.121.214:45274] [client 92.62.121.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "adTB3Q6uAY0QAy-8EEK52AAAAEw"]
[Tue Apr 07 16:35:42.777779 2026] [proxy_fcgi:error] [pid 37597:tid 37635] [client 92.62.121.52:45276] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:35:43.300925 2026] [:error] [pid 37597:tid 37640] [client 92.62.121.52:45276] [client 92.62.121.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/function.php"] [unique_id "adTB3w6uAY0QAy-8EEK53gAAAEY"]
[Tue Apr 07 16:35:43.829311 2026] [:error] [pid 59551:tid 59576] [client 92.62.121.52:49500] [client 92.62.121.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/plugins.php"] [unique_id "adTB317LN7Ubyqs-sVuhXwAAAZc"]
[Tue Apr 07 16:35:44.653801 2026] [proxy_fcgi:error] [pid 59804:tid 59815] [client 92.62.121.52:49516] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:35:44.918721 2026] [:error] [pid 59804:tid 59813] [client 92.62.121.52:49516] [client 92.62.121.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/chosen.php"] [unique_id "adTB4HYVIXiPh5_eJTlTIAAAAgc"]
[Tue Apr 07 16:35:45.439298 2026] [:error] [pid 59804:tid 59811] [client 92.62.121.52:49524] [client 92.62.121.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "adTB4XYVIXiPh5_eJTlTIgAAAgU"]
[Tue Apr 07 16:35:46.508670 2026] [proxy_fcgi:error] [pid 59551:tid 59570] [client 92.62.121.52:49534] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:35:46.788433 2026] [proxy_fcgi:error] [pid 59551:tid 59577] [client 92.62.121.52:49534] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:35:48.550730 2026] [proxy_fcgi:error] [pid 59551:tid 59573] [client 92.62.121.52:49534] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:35:49.078192 2026] [:error] [pid 59551:tid 59569] [client 92.62.121.52:49534] [client 92.62.121.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/atomlib.php"] [unique_id "adTB5V7LN7Ubyqs-sVuhcwAAAZA"]
[Tue Apr 07 16:35:49.709546 2026] [:error] [pid 37598:tid 37673] [client 92.62.121.52:49550] [client 92.62.121.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/rest-api/index.php"] [unique_id "adTB5e9g7q_cV2WhPaxyVQAAAIw"]
[Tue Apr 07 16:35:51.291045 2026] [proxy_fcgi:error] [pid 59804:tid 59807] [client 92.62.121.52:49558] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:35:51.569568 2026] [:error] [pid 59804:tid 59811] [client 92.62.121.52:49558] [client 92.62.121.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/index.php"] [unique_id "adTB53YVIXiPh5_eJTlTLQAAAgU"]
[Tue Apr 07 16:35:52.512179 2026] [:error] [pid 59551:tid 59570] [client 92.62.121.52:49570] [client 92.62.121.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "adTB6F7LN7Ubyqs-sVuhdgAAAZE"]
[Tue Apr 07 16:35:53.356356 2026] [:error] [pid 59804:tid 59823] [client 92.62.121.52:49576] [client 92.62.121.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "adTB6XYVIXiPh5_eJTlTMgAAAhE"]
[Tue Apr 07 16:35:55.314217 2026] [proxy_fcgi:error] [pid 37597:tid 37634] [client 92.62.121.52:49174] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:35:55.592512 2026] [:error] [pid 37597:tid 37647] [client 92.62.121.52:49174] [client 92.62.121.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/Exception-wp.php"] [unique_id "adTB6w6uAY0QAy-8EEK58QAAAE0"]
[Tue Apr 07 16:35:56.608717 2026] [:error] [pid 37719:tid 37745] [client 92.62.121.52:49184] [client 92.62.121.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "adTB7E09Xv52u2xXGLCLkgAAANc"]
[Tue Apr 07 16:35:57.471411 2026] [proxy_fcgi:error] [pid 59551:tid 59565] [client 92.62.121.52:49188] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:35:57.731280 2026] [proxy_fcgi:error] [pid 59551:tid 59553] [client 92.62.121.52:49188] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:35:58.254688 2026] [proxy_fcgi:error] [pid 59551:tid 59567] [client 92.62.121.52:49188] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:35:59.309328 2026] [:error] [pid 59551:tid 59570] [client 92.62.121.52:49188] [client 92.62.121.52] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 92.62.121.52, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/js/wp-login.php"] [unique_id "adTB717LN7Ubyqs-sVuhgQAAAZE"]
[Tue Apr 07 16:35:59.841583 2026] [:error] [pid 59551:tid 59576] [client 92.62.121.52:49188] File does not exist: /home/dwelects/public_html/worm.PhP
[Tue Apr 07 16:36:00.099183 2026] [proxy_fcgi:error] [pid 59551:tid 59574] [client 92.62.121.52:49188] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:36:00.390069 2026] [proxy_fcgi:error] [pid 59551:tid 59577] [client 92.62.121.52:49188] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:36:00.916761 2026] [:error] [pid 59551:tid 59569] [client 92.62.121.52:49188] [client 92.62.121.52] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 92.62.121.52, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "adTB8F7LN7Ubyqs-sVuhiwAAAZA"]
[Tue Apr 07 16:36:01.733618 2026] [proxy_fcgi:error] [pid 59551:tid 59564] [client 92.62.121.52:49188] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:36:01.998477 2026] [proxy_fcgi:error] [pid 59551:tid 59566] [client 92.62.121.52:49188] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:36:02.555787 2026] [proxy_fcgi:error] [pid 59551:tid 59572] [client 92.62.121.52:49188] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:36:03.092966 2026] [proxy_fcgi:error] [pid 59551:tid 59561] [client 92.62.121.52:49188] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:36:03.879081 2026] [proxy_fcgi:error] [pid 59551:tid 59577] [client 92.62.121.52:49188] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:36:05.700357 2026] [proxy_fcgi:error] [pid 59551:tid 59553] [client 92.62.121.52:49188] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:36:05.959397 2026] [proxy_fcgi:error] [pid 59551:tid 59566] [client 92.62.121.52:49188] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:36:07.253735 2026] [proxy_fcgi:error] [pid 59551:tid 59563] [client 92.62.121.52:49188] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:36:07.767463 2026] [:error] [pid 59551:tid 59555] [client 92.62.121.52:49188] [client 92.62.121.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "adTB917LN7Ubyqs-sVuhqwAAAYI"]
[Tue Apr 07 16:36:09.102825 2026] [proxy_fcgi:error] [pid 37596:tid 37630] [client 92.62.121.52:51240] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:36:09.366692 2026] [:error] [pid 37596:tid 37613] [client 92.62.121.52:51240] [client 92.62.121.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "adTB-apaAOZHEjRWjP18IQAAAAc"]
[Tue Apr 07 16:36:10.248966 2026] [proxy_fcgi:error] [pid 12948:tid 12968] [client 92.62.121.52:51244] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:36:10.525465 2026] [proxy_fcgi:error] [pid 12948:tid 12970] [client 92.62.121.52:51244] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:36:10.790956 2026] [:error] [pid 12948:tid 12955] [client 92.62.121.52:51244] [client 92.62.121.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/atomlib.php"] [unique_id "adTB-sbeSPAN8LvMqsZ4swAAAQQ"]
[Tue Apr 07 16:36:12.229399 2026] [proxy_fcgi:error] [pid 12948:tid 12958] [client 92.62.121.52:51258] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:36:12.763101 2026] [proxy_fcgi:error] [pid 12948:tid 12969] [client 92.62.121.52:51258] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:36:13.291391 2026] [proxy_fcgi:error] [pid 12948:tid 12953] [client 92.62.121.52:51258] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:36:13.562540 2026] [proxy_fcgi:error] [pid 12948:tid 12962] [client 92.62.121.52:51258] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:36:14.089863 2026] [:error] [pid 12948:tid 12952] [client 92.62.121.52:51258] [client 92.62.121.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "adTB_sbeSPAN8LvMqsZ4wQAAAQE"]
[Tue Apr 07 16:36:14.921491 2026] [proxy_fcgi:error] [pid 37597:tid 37648] [client 92.62.121.52:46862] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:36:15.184176 2026] [proxy_fcgi:error] [pid 37597:tid 37636] [client 92.62.121.52:46862] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:36:15.441422 2026] [:error] [pid 37597:tid 37658] [client 92.62.121.52:46862] [client 92.62.121.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "adTB_w6uAY0QAy-8EEK6EgAAAFg"]
[Tue Apr 07 16:36:16.617026 2026] [:error] [pid 37597:tid 37637] [client 92.62.121.52:60520] [client 92.62.121.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "adTCAA6uAY0QAy-8EEK6GQAAAEM"]
[Tue Apr 07 16:36:17.638612 2026] [proxy_fcgi:error] [pid 37598:tid 37680] [client 92.62.121.52:60524] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:36:18.422173 2026] [proxy_fcgi:error] [pid 37598:tid 37667] [client 92.62.121.52:60524] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:36:18.680450 2026] [proxy_fcgi:error] [pid 37598:tid 37671] [client 92.62.121.52:60524] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:36:18.936058 2026] [:error] [pid 37598:tid 37676] [client 92.62.121.52:60524] [client 92.62.121.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "adTCAu9g7q_cV2WhPaxyagAAAI8"]
[Tue Apr 07 16:36:19.888796 2026] [:error] [pid 37597:tid 37635] [client 92.62.121.52:60526] [client 92.62.121.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "adTCAw6uAY0QAy-8EEK6IgAAAEE"]
[Tue Apr 07 16:36:22.032311 2026] [proxy_fcgi:error] [pid 37597:tid 37655] [client 92.62.121.52:60530] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:36:22.540660 2026] [:error] [pid 37597:tid 37644] [client 92.62.121.52:60530] [client 92.62.121.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/dist/default.php"] [unique_id "adTCBg6uAY0QAy-8EEK6MwAAAEo"]
[Tue Apr 07 16:36:23.788397 2026] [:error] [pid 12948:tid 12958] [client 92.62.121.52:53958] [client 92.62.121.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dwelectservices.com.au"] [uri "/tiny.php"] [unique_id "adTCB8beSPAN8LvMqsZ4wwAAAQc"]
[Tue Apr 07 16:36:24.976605 2026] [proxy_fcgi:error] [pid 59804:tid 59811] [client 92.62.121.52:53964] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:36:25.238160 2026] [proxy_fcgi:error] [pid 59804:tid 59810] [client 92.62.121.52:53964] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:36:25.506636 2026] [:error] [pid 59804:tid 59819] [client 92.62.121.52:53964] [client 92.62.121.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "adTCCXYVIXiPh5_eJTlTUQAAAg0"]
[Tue Apr 07 16:36:27.776678 2026] [proxy_fcgi:error] [pid 37597:tid 37649] [client 92.62.121.52:53968] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:36:28.038571 2026] [proxy_fcgi:error] [pid 37597:tid 37646] [client 92.62.121.52:53968] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:36:28.565322 2026] [proxy_fcgi:error] [pid 37597:tid 37640] [client 92.62.121.52:53968] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:36:29.359985 2026] [:error] [pid 37597:tid 37656] [client 92.62.121.52:53968] [client 92.62.121.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/Parse/about.php"] [unique_id "adTCDQ6uAY0QAy-8EEK6ZQAAAFY"]
[Tue Apr 07 16:36:31.931531 2026] [proxy_fcgi:error] [pid 37598:tid 37675] [client 92.62.121.52:53970] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:36:32.729431 2026] [:error] [pid 37598:tid 37676] [client 92.62.121.52:53970] [client 92.62.121.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "adTCEO9g7q_cV2WhPaxyfQAAAI8"]
[Tue Apr 07 16:36:34.043087 2026] [proxy_fcgi:error] [pid 59551:tid 59566] [client 92.62.121.52:38878] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:36:35.388989 2026] [proxy_fcgi:error] [pid 59551:tid 59563] [client 92.62.121.52:38878] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:36:35.650667 2026] [proxy_fcgi:error] [pid 59551:tid 59574] [client 92.62.121.52:38878] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:36:36.178956 2026] [:error] [pid 59551:tid 59571] [client 92.62.121.52:38878] [client 92.62.121.52] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 92.62.121.52, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/colors/ocean/wp-login.php"] [unique_id "adTCFF7LN7Ubyqs-sVuhwgAAAZI"]
[Tue Apr 07 16:36:36.998739 2026] [proxy_fcgi:error] [pid 59551:tid 59555] [client 92.62.121.52:38878] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:36:37.524961 2026] [:error] [pid 59551:tid 59569] [client 92.62.121.52:38878] [client 92.62.121.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/Cache/upfile.php"] [unique_id "adTCFV7LN7Ubyqs-sVuhxwAAAZA"]
[Tue Apr 07 16:36:38.317973 2026] [proxy_fcgi:error] [pid 37598:tid 37671] [client 92.62.121.52:38890] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:36:38.606458 2026] [:error] [pid 37598:tid 37677] [client 92.62.121.52:38890] [client 92.62.121.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "adTCFu9g7q_cV2WhPaxyggAAAJA"]
[Tue Apr 07 16:36:39.301460 2026] [proxy_fcgi:error] [pid 37719:tid 37735] [client 92.62.121.52:38894] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:36:39.845142 2026] [proxy_fcgi:error] [pid 37719:tid 37744] [client 92.62.121.52:38894] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:36:40.378973 2026] [:error] [pid 37719:tid 37742] [client 92.62.121.52:38894] [client 92.62.121.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/widgets/class-wp-widget-search-function.php"] [unique_id "adTCGE09Xv52u2xXGLCLuwAAANQ"]
[Tue Apr 07 16:36:41.654076 2026] [proxy_fcgi:error] [pid 59551:tid 59561] [client 92.62.121.52:38898] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:36:41.927776 2026] [proxy_fcgi:error] [pid 59551:tid 59564] [client 92.62.121.52:38898] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:36:42.193495 2026] [:error] [pid 59551:tid 59568] [client 92.62.121.52:38898] [client 92.62.121.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/Canonical.php"] [unique_id "adTCGl7LN7Ubyqs-sVuh1QAAAY8"]
[Tue Apr 07 16:36:43.133428 2026] [:error] [pid 37598:tid 37679] [client 92.62.121.52:38904] [client 92.62.121.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "adTCG-9g7q_cV2WhPaxyiQAAAJI"]
[Tue Apr 07 16:36:44.066097 2026] [proxy_fcgi:error] [pid 37597:tid 37652] [client 92.62.121.52:37652] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:36:44.331310 2026] [proxy_fcgi:error] [pid 37597:tid 37634] [client 92.62.121.52:37652] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:36:44.867713 2026] [:error] [pid 37597:tid 37635] [client 92.62.121.52:37652] [client 92.62.121.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/class-feed-index.php"] [unique_id "adTCHA6uAY0QAy-8EEK6jwAAAEE"]
[Tue Apr 07 16:36:45.530973 2026] [proxy_fcgi:error] [pid 37597:tid 37651] [client 92.62.121.52:37658] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:36:46.058411 2026] [proxy_fcgi:error] [pid 37597:tid 37634] [client 92.62.121.52:37658] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:36:46.315623 2026] [:error] [pid 37597:tid 37642] [client 92.62.121.52:37658] [client 92.62.121.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php"] [unique_id "adTCHg6uAY0QAy-8EEK6mgAAAEg"]
[Tue Apr 07 16:36:47.359737 2026] [:error] [pid 59490:tid 59511] [client 92.62.121.52:37672] [client 92.62.121.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/db.php"] [unique_id "adTCH0cw8OFbiUZ7Rx1BagAAAVM"]
[Tue Apr 07 16:36:48.218642 2026] [:error] [pid 59660:tid 59666] [client 92.62.121.52:37682] [client 92.62.121.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/class-wp-dependency-float.php"] [unique_id "adTCIDp3-oiX2o5bTszkpwAAAcQ"]
[Tue Apr 07 16:36:48.987510 2026] [:error] [pid 59490:tid 59503] [client 92.62.121.52:37686] [client 92.62.121.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "adTCIEcw8OFbiUZ7Rx1BawAAAUs"]
[Tue Apr 07 16:36:49.724726 2026] [:error] [pid 37597:tid 37651] [client 92.62.121.52:37698] [client 92.62.121.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/PHPMailer/purna.php"] [unique_id "adTCIQ6uAY0QAy-8EEK6pwAAAFE"]
[Tue Apr 07 16:36:50.498419 2026] [:error] [pid 59490:tid 59515] [client 92.62.121.52:37712] [client 92.62.121.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/interactivity-api/interactivity-api-class.php"] [unique_id "adTCIkcw8OFbiUZ7Rx1BbAAAAVc"]
[Tue Apr 07 16:36:51.190015 2026] [:error] [pid 37597:tid 37657] [client 92.62.121.52:37726] [client 92.62.121.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/l10n/class-wp-widddget-pages.php"] [unique_id "adTCIw6uAY0QAy-8EEK6rQAAAFc"]
[Tue Apr 07 16:36:52.420454 2026] [:error] [pid 37597:tid 37648] [client 92.62.121.52:37740] [client 92.62.121.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php"] [unique_id "adTCJA6uAY0QAy-8EEK6sQAAAE4"]
[Tue Apr 07 16:36:53.178695 2026] [:error] [pid 59551:tid 59560] [client 92.62.121.52:37756] [client 92.62.121.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php"] [unique_id "adTCJV7LN7Ubyqs-sVuh2gAAAYc"]
[Tue Apr 07 16:36:53.863355 2026] [:error] [pid 59804:tid 59807] [client 92.62.121.52:50560] [client 92.62.121.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/ID3/module.audio-video.riff-set.php"] [unique_id "adTCJXYVIXiPh5_eJTlTWAAAAgE"]
[Tue Apr 07 16:36:54.692151 2026] [:error] [pid 12948:tid 12966] [client 92.62.121.52:50570] [client 92.62.121.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/tinymce/utils/license.php"] [unique_id "adTCJsbeSPAN8LvMqsZ45AAAAQ8"]
[Tue Apr 07 16:36:55.411504 2026] [:error] [pid 37597:tid 37645] [client 92.62.121.52:50574] [client 92.62.121.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Text/options.php"] [unique_id "adTCJw6uAY0QAy-8EEK6ugAAAEs"]
[Tue Apr 07 16:36:56.267775 2026] [proxy_fcgi:error] [pid 37719:tid 37730] [client 92.62.121.52:50588] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:36:57.062359 2026] [:error] [pid 37719:tid 37723] [client 92.62.121.52:50588] [client 92.62.121.52] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 92.62.121.52, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "adTCKU09Xv52u2xXGLCLzgAAAME"]
[Tue Apr 07 16:36:58.373707 2026] [:error] [pid 37719:tid 37725] [client 92.62.121.52:50588] [client 92.62.121.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/IXR/goto.php"] [unique_id "adTCKk09Xv52u2xXGLCL1AAAAMM"]
[Tue Apr 07 16:36:59.689459 2026] [proxy_fcgi:error] [pid 12948:tid 12964] [client 92.62.121.52:50590] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:36:59.955272 2026] [proxy_fcgi:error] [pid 12948:tid 12968] [client 92.62.121.52:50590] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:37:00.993078 2026] [proxy_fcgi:error] [pid 12948:tid 12973] [client 92.62.121.52:50590] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:37:01.253709 2026] [proxy_fcgi:error] [pid 12948:tid 12972] [client 92.62.121.52:50590] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:37:02.324687 2026] [proxy_fcgi:error] [pid 12948:tid 12952] [client 92.62.121.52:50590] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:37:02.583704 2026] [proxy_fcgi:error] [pid 12948:tid 12975] [client 92.62.121.52:50590] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:37:02.843594 2026] [proxy_fcgi:error] [pid 12948:tid 12956] [client 92.62.121.52:50590] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:37:03.108753 2026] [proxy_fcgi:error] [pid 12948:tid 12964] [client 92.62.121.52:50590] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:37:03.363856 2026] [:error] [pid 12948:tid 12957] [client 92.62.121.52:50590] [client 92.62.121.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "adTCL8beSPAN8LvMqsZ4_gAAAQY"]
[Tue Apr 07 16:37:04.240650 2026] [:error] [pid 37719:tid 37737] [client 92.62.121.52:38546] [client 92.62.121.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/wp_class_datlib.php"] [unique_id "adTCME09Xv52u2xXGLCL2wAAAM8"]
[Tue Apr 07 16:37:04.925520 2026] [:error] [pid 59804:tid 59807] [client 92.62.121.52:38556] [client 92.62.121.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "adTCMHYVIXiPh5_eJTlTYgAAAgE"]
[Tue Apr 07 16:37:06.075932 2026] [proxy_fcgi:error] [pid 59804:tid 59809] [client 92.62.121.52:38570] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:37:06.355542 2026] [proxy_fcgi:error] [pid 59804:tid 59816] [client 92.62.121.52:38570] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:37:06.888843 2026] [proxy_fcgi:error] [pid 59804:tid 59820] [client 92.62.121.52:38570] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:37:07.434619 2026] [:error] [pid 59804:tid 59811] [client 92.62.121.52:38570] [client 92.62.121.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/Registry-private.php"] [unique_id "adTCM3YVIXiPh5_eJTlTcAAAAgU"]
[Tue Apr 07 16:37:08.463465 2026] [:error] [pid 12948:tid 12952] [client 92.62.121.52:38572] [client 92.62.121.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-meta.php"] [unique_id "adTCNMbeSPAN8LvMqsZ5AQAAAQE"]
[Tue Apr 07 16:37:11.187779 2026] [:error] [pid 59551:tid 59572] [client 92.62.121.52:38580] [client 92.62.121.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/widgets/bypass.php"] [unique_id "adTCN17LN7Ubyqs-sVuh5gAAAZM"]
[Tue Apr 07 16:37:13.358164 2026] [:error] [pid 59804:tid 59819] [client 92.62.121.52:38594] [client 92.62.121.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/style-engine/adminfus.php"] [unique_id "adTCOXYVIXiPh5_eJTlTjgAAAg0"]
[Tue Apr 07 16:37:14.132337 2026] [proxy_fcgi:error] [pid 59490:tid 59495] [client 92.62.121.52:43818] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:37:14.387315 2026] [:error] [pid 59490:tid 59511] [client 92.62.121.52:43818] [client 92.62.121.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/group/wp-style.php"] [unique_id "adTCOkcw8OFbiUZ7Rx1BcwAAAVM"]
[Tue Apr 07 16:37:16.112734 2026] [:error] [pid 59551:tid 59556] [client 92.62.121.52:43822] [client 92.62.121.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/widgets/class-wp-wolf-widget.php"] [unique_id "adTCPF7LN7Ubyqs-sVuh-gAAAYM"]
[Tue Apr 07 16:37:19.894286 2026] [:error] [pid 59551:tid 59554] [client 92.62.121.52:43832] [client 92.62.121.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Text/index.php"] [unique_id "adTCP17LN7Ubyqs-sVuiDwAAAYE"]
[Tue Apr 07 16:37:21.131347 2026] [proxy_fcgi:error] [pid 37597:tid 37634] [client 92.62.121.52:43844] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:37:22.454897 2026] [:error] [pid 37597:tid 37652] [client 92.62.121.52:43844] [client 92.62.121.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/about.php"] [unique_id "adTCQg6uAY0QAy-8EEK60QAAAFI"]
[Tue Apr 07 16:37:23.956980 2026] [proxy_fcgi:error] [pid 12948:tid 12972] [client 92.62.121.52:43574] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:37:24.744892 2026] [proxy_fcgi:error] [pid 12948:tid 12952] [client 92.62.121.52:43574] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:37:25.015310 2026] [:error] [pid 12948:tid 12962] [client 92.62.121.52:43574] [client 92.62.121.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/wp-sup.php"] [unique_id "adTCRcbeSPAN8LvMqsZ5EAAAAQs"]
[Tue Apr 07 16:37:26.676033 2026] [:error] [pid 37597:tid 37645] [client 92.62.121.52:43588] [client 92.62.121.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/widgets/class-t.api.php"] [unique_id "adTCRg6uAY0QAy-8EEK64AAAAEs"]
[Tue Apr 07 16:37:28.742742 2026] [:error] [pid 37598:tid 37682] [client 92.62.121.52:43594] [client 92.62.121.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/dist/require-dynamic-blocks.php"] [unique_id "adTCSO9g7q_cV2WhPaxyvQAAAJU"]
[Tue Apr 07 16:37:30.573444 2026] [:error] [pid 12948:tid 12951] [client 92.62.121.52:43602] [client 92.62.121.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/widgets/class-wp-widget-rss-database.php"] [unique_id "adTCSsbeSPAN8LvMqsZ5HgAAAQA"]
[Tue Apr 07 16:37:31.876198 2026] [proxy_fcgi:error] [pid 59660:tid 59675] [client 92.62.121.52:43612] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:37:32.133569 2026] [:error] [pid 59660:tid 59680] [client 92.62.121.52:43612] [client 92.62.121.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/class-wp-customize-manager-client.php"] [unique_id "adTCTDp3-oiX2o5bTszk0wAAAdI"]
[Tue Apr 07 16:37:33.143914 2026] [:error] [pid 37597:tid 37649] [client 92.62.121.52:43618] [client 92.62.121.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-boolean.php"] [unique_id "adTCTQ6uAY0QAy-8EEK69QAAAE8"]
[Tue Apr 07 16:37:35.160791 2026] [:error] [pid 12948:tid 12952] [client 92.62.121.52:50832] [client 92.62.121.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/smilies/simi.php"] [unique_id "adTCT8beSPAN8LvMqsZ5KQAAAQE"]
[Tue Apr 07 16:37:36.091947 2026] [proxy_fcgi:error] [pid 59551:tid 59575] [client 92.62.121.52:50848] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:37:37.140268 2026] [proxy_fcgi:error] [pid 59551:tid 59562] [client 92.62.121.52:50848] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:37:37.392495 2026] [:error] [pid 59551:tid 59571] [client 92.62.121.52:50848] [client 92.62.121.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/style-engine-session.php"] [unique_id "adTCUV7LN7Ubyqs-sVuiLQAAAZI"]
[Tue Apr 07 16:37:38.863729 2026] [proxy_fcgi:error] [pid 59551:tid 59556] [client 92.62.121.52:50864] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:37:39.380548 2026] [:error] [pid 59551:tid 59561] [client 92.62.121.52:50864] [client 92.62.121.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.min.php"] [unique_id "adTCU17LN7Ubyqs-sVuiNQAAAYg"]
[Tue Apr 07 16:37:40.381366 2026] [:error] [pid 37598:tid 37684] [client 92.62.121.52:50872] [client 92.62.121.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/file/wp-style.php"] [unique_id "adTCVO9g7q_cV2WhPaxyygAAAJc"]
[Tue Apr 07 16:37:42.989449 2026] [:error] [pid 37719:tid 37745] [client 92.62.121.52:50884] [client 92.62.121.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/IXR/class-IXR-cilent.php"] [unique_id "adTCVk09Xv52u2xXGLCMAwAAANc"]
[Tue Apr 07 16:37:44.290796 2026] [:error] [pid 37597:tid 37642] [client 92.62.121.52:55242] [client 92.62.121.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/install.php"] [unique_id "adTCWA6uAY0QAy-8EEK7FAAAAEg"]
[Tue Apr 07 16:37:45.158854 2026] [:error] [pid 37597:tid 37651] [client 92.62.121.52:55244] [client 92.62.121.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/PHPMailer/xleet.php"] [unique_id "adTCWQ6uAY0QAy-8EEK7FwAAAFE"]
[Tue Apr 07 16:37:46.475021 2026] [proxy_fcgi:error] [pid 37597:tid 37644] [client 92.62.121.52:55252] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:37:47.848016 2026] [:error] [pid 37597:tid 37645] [client 92.62.121.52:55252] [client 92.62.121.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/category-double.php"] [unique_id "adTCWw6uAY0QAy-8EEK7MQAAAEs"]
[Tue Apr 07 16:37:49.290955 2026] [:error] [pid 37719:tid 37741] [client 92.62.121.52:55254] [client 92.62.121.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/db.php"] [unique_id "adTCXU09Xv52u2xXGLCMEAAAANM"]
[Tue Apr 07 16:37:50.314357 2026] [:error] [pid 37597:tid 37654] [client 92.62.121.52:55262] [client 92.62.121.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/widgets/security.php"] [unique_id "adTCXg6uAY0QAy-8EEK7PAAAAFQ"]
[Tue Apr 07 16:37:51.621761 2026] [proxy_fcgi:error] [pid 37719:tid 37725] [client 92.62.121.52:55268] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:37:51.885495 2026] [:error] [pid 37719:tid 37738] [client 92.62.121.52:55268] [client 92.62.121.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/class-wp-language-pack.php"] [unique_id "adTCX009Xv52u2xXGLCMFwAAANA"]
[Tue Apr 07 16:37:53.273013 2026] [:error] [pid 59551:tid 59560] [client 92.62.121.52:55272] [client 92.62.121.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/class-walker-comment-client.php"] [unique_id "adTCYV7LN7Ubyqs-sVuiQgAAAYc"]
[Tue Apr 07 16:37:55.496323 2026] [:error] [pid 37719:tid 37741] [client 92.62.121.52:52946] [client 92.62.121.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/class-wp-network-query-stat.php"] [unique_id "adTCY009Xv52u2xXGLCMJgAAANM"]
[Tue Apr 07 16:37:56.864424 2026] [proxy_fcgi:error] [pid 37719:tid 37729] [client 92.62.121.52:52958] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:37:57.129380 2026] [:error] [pid 37719:tid 37736] [client 92.62.121.52:52958] [client 92.62.121.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/class-wp-session-tokens-https.php"] [unique_id "adTCZU09Xv52u2xXGLCMLQAAAM4"]
[Tue Apr 07 16:37:58.495284 2026] [:error] [pid 59660:tid 59674] [client 92.62.121.52:52972] [client 92.62.121.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/crystal/lrs_dage.php"] [unique_id "adTCZjp3-oiX2o5bTszk2QAAAcw"]
[Tue Apr 07 16:37:59.712936 2026] [:error] [pid 59551:tid 59573] [client 92.62.121.52:52982] [client 92.62.121.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/as.php"] [unique_id "adTCZ17LN7Ubyqs-sVuiSAAAAZQ"]
[Tue Apr 07 16:38:00.953174 2026] [:error] [pid 59551:tid 59563] [client 92.62.121.52:52998] [client 92.62.121.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/certificates/wp-conflg.php"] [unique_id "adTCaF7LN7Ubyqs-sVuiTAAAAYo"]
[Tue Apr 07 16:38:01.872805 2026] [:error] [pid 37719:tid 37725] [client 92.62.121.52:53012] [client 92.62.121.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/install.php"] [unique_id "adTCaU09Xv52u2xXGLCMPAAAAMM"]
[Tue Apr 07 16:38:02.460795 2026] [:error] [pid 37719:tid 37729] [client 92.62.121.52:53024] [client 92.62.121.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/customize/db.php"] [unique_id "adTCak09Xv52u2xXGLCMPwAAAMc"]
[Tue Apr 07 16:38:03.043747 2026] [proxy_fcgi:error] [pid 37719:tid 37731] [client 92.62.121.52:53030] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:38:04.633918 2026] [:error] [pid 37719:tid 37735] [client 92.62.121.52:53030] [client 92.62.121.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/thickbox/about.php"] [unique_id "adTCbE09Xv52u2xXGLCMSAAAAM0"]
[Tue Apr 07 16:38:06.290716 2026] [:error] [pid 59490:tid 59509] [client 92.62.121.52:53540] [client 92.62.121.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/rk2.php"] [unique_id "adTCbkcw8OFbiUZ7Rx1BiAAAAVE"]
[Tue Apr 07 16:38:07.496004 2026] [proxy_fcgi:error] [pid 59490:tid 59502] [client 92.62.121.52:53550] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:38:07.789222 2026] [:error] [pid 59490:tid 59498] [client 92.62.121.52:53550] [client 92.62.121.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/certificates/past.php"] [unique_id "adTCb0cw8OFbiUZ7Rx1BiwAAAUY"]
[Tue Apr 07 16:38:08.796594 2026] [proxy_fcgi:error] [pid 37597:tid 37638] [client 92.62.121.52:53562] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:38:09.312899 2026] [:error] [pid 37597:tid 37652] [client 92.62.121.52:53562] [client 92.62.121.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/edit-tags.php"] [unique_id "adTCcQ6uAY0QAy-8EEK7WwAAAFI"]
[Tue Apr 07 16:38:10.295081 2026] [proxy_fcgi:error] [pid 37719:tid 37729] [client 92.62.121.52:53574] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:38:11.607085 2026] [:error] [pid 37719:tid 37745] [client 92.62.121.52:53574] [client 92.62.121.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/dist/footer-default.php"] [unique_id "adTCc009Xv52u2xXGLCMWwAAANc"]
[Tue Apr 07 16:38:12.653096 2026] [:error] [pid 37598:tid 37670] [client 92.62.121.52:53588] [client 92.62.121.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/widgets/class-wp-widget-meta-request.php"] [unique_id "adTCdO9g7q_cV2WhPaxy2wAAAIk"]
[Tue Apr 07 16:38:13.881634 2026] [:error] [pid 37719:tid 37733] [client 92.62.121.52:44014] [client 92.62.121.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/dist/edit-widgets/bypass.php"] [unique_id "adTCdU09Xv52u2xXGLCMXgAAAMs"]
[Tue Apr 07 16:38:15.456920 2026] [:error] [pid 37598:tid 37662] [client 92.62.121.52:44022] [client 92.62.121.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/l10n/wp-login.php"] [unique_id "adTCd-9g7q_cV2WhPaxy5AAAAIE"]
[Tue Apr 07 16:38:18.542144 2026] [:error] [pid 37598:tid 37679] [client 92.62.121.52:44036] [client 92.62.121.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/widgets/wp-ss.php"] [unique_id "adTCeu9g7q_cV2WhPaxy8QAAAJI"]
[Tue Apr 07 16:38:19.545984 2026] [:error] [pid 59490:tid 59503] [client 92.62.121.52:44040] [client 92.62.121.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/IXR/xsec1.php"] [unique_id "adTCe0cw8OFbiUZ7Rx1BjQAAAUs"]
[Tue Apr 07 16:38:21.308141 2026] [:error] [pid 37719:tid 37741] [client 92.62.121.52:44050] [client 92.62.121.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/crystal/sad.php"] [unique_id "adTCfU09Xv52u2xXGLCMZQAAANM"]
[Tue Apr 07 16:38:22.267602 2026] [:error] [pid 12948:tid 12966] [client 92.62.121.52:44052] [client 92.62.121.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/script-loader-packages.min.php"] [unique_id "adTCfsbeSPAN8LvMqsZ5RgAAAQ8"]
[Tue Apr 07 16:38:23.611077 2026] [:error] [pid 37719:tid 37743] [client 92.62.121.52:55838] [client 92.62.121.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/network/class.php"] [unique_id "adTCf009Xv52u2xXGLCMbgAAANU"]
[Tue Apr 07 16:38:24.547375 2026] [:error] [pid 37597:tid 37658] [client 92.62.121.52:55852] [client 92.62.121.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/network/class.php"] [unique_id "adTCgA6uAY0QAy-8EEK7bAAAAFg"]
[Tue Apr 07 16:38:25.619095 2026] [:error] [pid 59551:tid 59558] [client 92.62.121.52:55858] [client 92.62.121.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/network/class.php"] [unique_id "adTCgV7LN7Ubyqs-sVuicAAAAYU"]
[Tue Apr 07 16:38:26.536763 2026] [:error] [pid 37598:tid 37684] [client 92.62.121.52:55864] [client 92.62.121.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/network/class.php"] [unique_id "adTCgu9g7q_cV2WhPaxy-gAAAJc"]
[Tue Apr 07 16:38:27.457206 2026] [:error] [pid 37719:tid 37729] [client 92.62.121.52:55866] [client 92.62.121.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/network/class.php"] [unique_id "adTCg009Xv52u2xXGLCMdAAAAMc"]
[Tue Apr 07 16:38:43.541791 2026] [autoindex:error] [pid 37719:tid 37730] [client 92.62.121.52:55870] AH01276: Cannot serve directory /home/dwelects/public_html/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 07 16:38:53.646636 2026] [autoindex:error] [pid 37719:tid 37736] [client 92.62.121.52:55870] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 07 16:39:06.783914 2026] [:error] [pid 12948:tid 12972] [client 92.62.121.52:60824] [client 92.62.121.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/components/com_newsfeeds/models/"] [unique_id "adTCqsbeSPAN8LvMqsZ5egAAARU"]
[Tue Apr 07 16:39:08.755781 2026] [:error] [pid 59660:tid 59686] [client 92.62.121.52:53040] [client 92.62.121.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/components/com_newsfeeds/models/"] [unique_id "adTCrDp3-oiX2o5bTszk_QAAAdg"]
[Tue Apr 07 16:39:10.138425 2026] [:error] [pid 59551:tid 59561] [client 92.62.121.52:53052] [client 92.62.121.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/components/com_newsfeeds/models/"] [unique_id "adTCrl7LN7Ubyqs-sVuiowAAAYg"]
[Tue Apr 07 16:39:10.993811 2026] [:error] [pid 59804:tid 59814] [client 92.62.121.52:53054] [client 92.62.121.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/components/com_newsfeeds/models/"] [unique_id "adTCrnYVIXiPh5_eJTlT9gAAAgg"]
[Tue Apr 07 16:39:12.575705 2026] [:error] [pid 37598:tid 37677] [client 92.62.121.52:53066] [client 92.62.121.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/components/com_newsfeeds/models/"] [unique_id "adTCsO9g7q_cV2WhPaxzJAAAAJA"]
[Wed Apr 08 05:16:03.180123 2026] [:error] [pid 47625:tid 47636] [client 104.28.163.34:41738] [client 104.28.163.34] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/"] [unique_id "adV0EyVuHyNWzZlE8PD0TwAAAAI"]
[Wed Apr 08 05:34:03.693144 2026] [proxy_fcgi:error] [pid 47626:tid 47673] [client 20.208.44.100:62859] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 05:34:03.949989 2026] [proxy_fcgi:error] [pid 47626:tid 47692] [client 20.208.44.100:62859] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 05:34:04.190400 2026] [proxy_fcgi:error] [pid 47626:tid 47672] [client 20.208.44.100:62859] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 05:34:04.471706 2026] [proxy_fcgi:error] [pid 47626:tid 47688] [client 20.208.44.100:62859] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 05:34:04.727980 2026] [proxy_fcgi:error] [pid 47626:tid 47677] [client 20.208.44.100:62859] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 05:34:04.979115 2026] [proxy_fcgi:error] [pid 47626:tid 47681] [client 20.208.44.100:62859] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 05:34:05.242469 2026] [proxy_fcgi:error] [pid 47626:tid 47668] [client 20.208.44.100:62859] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 05:34:05.482509 2026] [proxy_fcgi:error] [pid 47626:tid 47678] [client 20.208.44.100:62859] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 05:34:05.722278 2026] [proxy_fcgi:error] [pid 47626:tid 47685] [client 20.208.44.100:62859] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 05:34:05.992194 2026] [proxy_fcgi:error] [pid 47626:tid 47671] [client 20.208.44.100:62859] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 05:34:06.227523 2026] [:error] [pid 47626:tid 47687] [client 20.208.44.100:62859] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dass.php"] [unique_id "adV4TqjWI8TWtHx2sdb-7wAAAFM"]
[Wed Apr 08 05:34:06.928055 2026] [:error] [pid 47626:tid 47692] [client 20.208.44.100:20713] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dass.php"] [unique_id "adV4TqjWI8TWtHx2sdb-8gAAAFg"]
[Wed Apr 08 05:34:07.539250 2026] [:error] [pid 16630:tid 16649] [client 20.208.44.100:30354] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dass.php"] [unique_id "adV4TyjfVAkPG-jgJEqUOgAAARE"]
[Wed Apr 08 05:34:08.082604 2026] [:error] [pid 16630:tid 16640] [client 20.208.44.100:28064] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dass.php"] [unique_id "adV4UCjfVAkPG-jgJEqUPgAAAQg"]
[Wed Apr 08 05:34:08.753249 2026] [:error] [pid 47732:tid 47741] [client 20.208.44.100:2608] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lib.php"] [unique_id "adV4UIm4N5QW9Mh7G104WgAAAMc"]
[Wed Apr 08 05:34:09.538718 2026] [:error] [pid 16630:tid 16636] [client 20.208.44.100:26605] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lib.php"] [unique_id "adV4USjfVAkPG-jgJEqURwAAAQQ"]
[Wed Apr 08 05:34:10.093274 2026] [:error] [pid 47625:tid 47647] [client 20.208.44.100:25270] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lib.php"] [unique_id "adV4UiVuHyNWzZlE8PD7BQAAAA0"]
[Wed Apr 08 05:34:10.692941 2026] [:error] [pid 16630:tid 16654] [client 20.208.44.100:18176] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lib.php"] [unique_id "adV4UijfVAkPG-jgJEqUTQAAARY"]
[Wed Apr 08 05:34:11.268797 2026] [:error] [pid 16630:tid 16649] [client 20.208.44.100:18207] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp9.php"] [unique_id "adV4UyjfVAkPG-jgJEqUVAAAARE"]
[Wed Apr 08 05:34:11.777705 2026] [:error] [pid 47625:tid 47652] [client 20.208.44.100:16626] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp9.php"] [unique_id "adV4UyVuHyNWzZlE8PD7CAAAABI"]
[Wed Apr 08 05:34:12.451889 2026] [:error] [pid 16630:tid 16646] [client 20.208.44.100:60524] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp9.php"] [unique_id "adV4VCjfVAkPG-jgJEqUXQAAAQ4"]
[Wed Apr 08 05:34:13.004335 2026] [:error] [pid 16630:tid 16636] [client 20.208.44.100:32669] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp9.php"] [unique_id "adV4VSjfVAkPG-jgJEqUYgAAAQQ"]
[Wed Apr 08 05:34:13.639044 2026] [:error] [pid 16630:tid 16637] [client 20.208.44.100:56453] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/pass4.php"] [unique_id "adV4VSjfVAkPG-jgJEqUagAAAQU"]
[Wed Apr 08 05:34:14.326781 2026] [:error] [pid 47732:tid 47734] [client 20.208.44.100:18301] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/pass4.php"] [unique_id "adV4Vom4N5QW9Mh7G104YQAAAMA"]
[Wed Apr 08 05:34:14.834870 2026] [:error] [pid 47626:tid 47668] [client 20.208.44.100:26037] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/pass4.php"] [unique_id "adV4VqjWI8TWtHx2sdb--gAAAEA"]
[Wed Apr 08 05:34:15.667387 2026] [:error] [pid 47626:tid 47690] [client 20.208.44.100:12668] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/pass4.php"] [unique_id "adV4V6jWI8TWtHx2sdb-_gAAAFY"]
[Wed Apr 08 05:34:16.519248 2026] [:error] [pid 47626:tid 47684] [client 20.208.44.100:44589] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bgymj.php"] [unique_id "adV4WKjWI8TWtHx2sdb_AAAAAFA"]
[Wed Apr 08 05:34:17.536491 2026] [:error] [pid 47627:tid 47703] [client 20.208.44.100:13414] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bgymj.php"] [unique_id "adV4WXOljf1Quv_kDjmWLgAAAIQ"]
[Wed Apr 08 05:34:18.078193 2026] [:error] [pid 47627:tid 47709] [client 20.208.44.100:12545] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bgymj.php"] [unique_id "adV4WnOljf1Quv_kDjmWLwAAAIo"]
[Wed Apr 08 05:34:19.013639 2026] [:error] [pid 47625:tid 47656] [client 20.208.44.100:54781] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bgymj.php"] [unique_id "adV4WyVuHyNWzZlE8PD7FAAAABY"]
[Wed Apr 08 05:34:19.689026 2026] [:error] [pid 47732:tid 47748] [client 20.208.44.100:32232] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/8573.php"] [unique_id "adV4W4m4N5QW9Mh7G104bgAAAM4"]
[Wed Apr 08 05:34:20.264941 2026] [:error] [pid 47732:tid 47753] [client 20.208.44.100:13425] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/8573.php"] [unique_id "adV4XIm4N5QW9Mh7G104bwAAANM"]
[Wed Apr 08 05:34:21.186405 2026] [:error] [pid 47625:tid 47641] [client 20.208.44.100:44579] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/8573.php"] [unique_id "adV4XSVuHyNWzZlE8PD7HwAAAAc"]
[Wed Apr 08 05:34:21.928742 2026] [:error] [pid 47732:tid 47737] [client 20.208.44.100:12603] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/8573.php"] [unique_id "adV4XYm4N5QW9Mh7G104dQAAAMM"]
[Wed Apr 08 05:34:22.678898 2026] [:error] [pid 47732:tid 47758] [client 20.208.44.100:2140] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/torsa1.php"] [unique_id "adV4Xom4N5QW9Mh7G104ewAAANg"]
[Wed Apr 08 05:34:24.072859 2026] [:error] [pid 47627:tid 47703] [client 20.208.44.100:16938] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/torsa1.php"] [unique_id "adV4YHOljf1Quv_kDjmWPAAAAIQ"]
[Wed Apr 08 05:34:24.760884 2026] [:error] [pid 16630:tid 16645] [client 20.208.44.100:54783] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/torsa1.php"] [unique_id "adV4YCjfVAkPG-jgJEqUnQAAAQ0"]
[Wed Apr 08 05:34:25.522905 2026] [:error] [pid 16630:tid 16637] [client 20.208.44.100:16526] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/torsa1.php"] [unique_id "adV4YSjfVAkPG-jgJEqUpgAAAQU"]
[Wed Apr 08 05:34:26.567721 2026] [:error] [pid 16630:tid 16641] [client 20.208.44.100:28143] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-good.php"] [unique_id "adV4YijfVAkPG-jgJEqUqwAAAQk"]
[Wed Apr 08 05:34:27.257909 2026] [:error] [pid 47732:tid 47756] [client 20.208.44.100:32242] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-good.php"] [unique_id "adV4Y4m4N5QW9Mh7G104jQAAANY"]
[Wed Apr 08 05:34:27.953110 2026] [:error] [pid 47732:tid 47743] [client 20.208.44.100:13424] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-good.php"] [unique_id "adV4Y4m4N5QW9Mh7G104jwAAAMk"]
[Wed Apr 08 05:34:28.476176 2026] [:error] [pid 47732:tid 47750] [client 20.208.44.100:11457] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-good.php"] [unique_id "adV4ZIm4N5QW9Mh7G104kgAAANA"]
[Wed Apr 08 05:34:29.204650 2026] [:error] [pid 16630:tid 16632] [client 20.208.44.100:2173] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gfd.php"] [unique_id "adV4ZSjfVAkPG-jgJEqUtQAAAQA"]
[Wed Apr 08 05:34:30.077829 2026] [:error] [pid 16630:tid 16655] [client 20.208.44.100:16571] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gfd.php"] [unique_id "adV4ZijfVAkPG-jgJEqUvAAAARc"]
[Wed Apr 08 05:34:30.897320 2026] [:error] [pid 47732:tid 47754] [client 20.208.44.100:12585] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gfd.php"] [unique_id "adV4Zom4N5QW9Mh7G104lwAAANQ"]
[Wed Apr 08 05:34:31.675357 2026] [:error] [pid 47627:tid 47720] [client 20.208.44.100:16553] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gfd.php"] [unique_id "adV4Z3Oljf1Quv_kDjmWRQAAAJU"]
[Wed Apr 08 05:34:32.276345 2026] [:error] [pid 47732:tid 47750] [client 20.208.44.100:54765] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/asasx.php"] [unique_id "adV4aIm4N5QW9Mh7G104mQAAANA"]
[Wed Apr 08 05:34:32.774381 2026] [:error] [pid 16630:tid 16641] [client 20.208.44.100:32200] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/asasx.php"] [unique_id "adV4aCjfVAkPG-jgJEqUzwAAAQk"]
[Wed Apr 08 05:34:33.260647 2026] [:error] [pid 16630:tid 16640] [client 20.208.44.100:54741] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/asasx.php"] [unique_id "adV4aSjfVAkPG-jgJEqU1gAAAQg"]
[Wed Apr 08 05:34:33.863157 2026] [:error] [pid 16630:tid 16645] [client 20.208.44.100:57757] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/asasx.php"] [unique_id "adV4aSjfVAkPG-jgJEqU3AAAAQ0"]
[Wed Apr 08 05:34:34.408734 2026] [:error] [pid 16630:tid 16654] [client 20.208.44.100:2166] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gptsh.php"] [unique_id "adV4aijfVAkPG-jgJEqU3wAAARY"]
[Wed Apr 08 05:34:34.910510 2026] [:error] [pid 16630:tid 16632] [client 20.208.44.100:54776] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gptsh.php"] [unique_id "adV4aijfVAkPG-jgJEqU4wAAAQA"]
[Wed Apr 08 05:34:35.426647 2026] [:error] [pid 16630:tid 16636] [client 20.208.44.100:2391] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gptsh.php"] [unique_id "adV4ayjfVAkPG-jgJEqU6AAAAQQ"]
[Wed Apr 08 05:34:35.915228 2026] [:error] [pid 47732:tid 47742] [client 20.208.44.100:2163] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gptsh.php"] [unique_id "adV4a4m4N5QW9Mh7G104ogAAAMg"]
[Wed Apr 08 05:34:36.452516 2026] [:error] [pid 16630:tid 16651] [client 20.208.44.100:13431] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/666.php"] [unique_id "adV4bCjfVAkPG-jgJEqU7QAAARM"]
[Wed Apr 08 05:34:37.000452 2026] [:error] [pid 16630:tid 16645] [client 20.208.44.100:28135] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/666.php"] [unique_id "adV4bCjfVAkPG-jgJEqU7wAAAQ0"]
[Wed Apr 08 05:34:37.496147 2026] [:error] [pid 16630:tid 16636] [client 20.208.44.100:47907] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/666.php"] [unique_id "adV4bSjfVAkPG-jgJEqU8wAAAQQ"]
[Wed Apr 08 05:34:38.040572 2026] [:error] [pid 47732:tid 47750] [client 20.208.44.100:12578] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/666.php"] [unique_id "adV4bom4N5QW9Mh7G104pQAAANA"]
[Wed Apr 08 05:34:38.641867 2026] [:error] [pid 16630:tid 16649] [client 20.208.44.100:44570] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws86.php"] [unique_id "adV4bijfVAkPG-jgJEqU9QAAARE"]
[Wed Apr 08 05:34:39.119087 2026] [:error] [pid 16630:tid 16654] [client 20.208.44.100:40492] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws86.php"] [unique_id "adV4byjfVAkPG-jgJEqU-AAAARY"]
[Wed Apr 08 05:34:39.624843 2026] [:error] [pid 16630:tid 16635] [client 20.208.44.100:28098] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws86.php"] [unique_id "adV4byjfVAkPG-jgJEqU_QAAAQM"]
[Wed Apr 08 05:34:40.107200 2026] [:error] [pid 16630:tid 16646] [client 20.208.44.100:54778] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws86.php"] [unique_id "adV4cCjfVAkPG-jgJEqVAQAAAQ4"]
[Wed Apr 08 05:34:40.619534 2026] [:error] [pid 47732:tid 47751] [client 20.208.44.100:11837] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/byypas.php"] [unique_id "adV4cIm4N5QW9Mh7G104rwAAANE"]
[Wed Apr 08 05:34:41.149040 2026] [:error] [pid 47627:tid 47715] [client 20.208.44.100:25663] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/byypas.php"] [unique_id "adV4cXOljf1Quv_kDjmWVAAAAJA"]
[Wed Apr 08 05:34:41.636191 2026] [:error] [pid 16630:tid 16651] [client 20.208.44.100:12595] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/byypas.php"] [unique_id "adV4cSjfVAkPG-jgJEqVCAAAARM"]
[Wed Apr 08 05:34:42.134487 2026] [:error] [pid 16630:tid 16655] [client 20.208.44.100:13380] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/byypas.php"] [unique_id "adV4cijfVAkPG-jgJEqVCwAAARc"]
[Wed Apr 08 05:34:42.613857 2026] [:error] [pid 16630:tid 16643] [client 20.208.44.100:16513] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-the.php"] [unique_id "adV4cijfVAkPG-jgJEqVDAAAAQs"]
[Wed Apr 08 05:34:43.104048 2026] [:error] [pid 47625:tid 47644] [client 20.208.44.100:54761] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-the.php"] [unique_id "adV4cyVuHyNWzZlE8PD7OgAAAAo"]
[Wed Apr 08 05:34:43.710619 2026] [:error] [pid 16630:tid 16651] [client 20.208.44.100:13421] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-the.php"] [unique_id "adV4cyjfVAkPG-jgJEqVFAAAARM"]
[Wed Apr 08 05:34:44.244868 2026] [:error] [pid 16630:tid 16655] [client 20.208.44.100:13419] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-the.php"] [unique_id "adV4dCjfVAkPG-jgJEqVGAAAARc"]
[Wed Apr 08 05:34:44.771205 2026] [:error] [pid 16630:tid 16643] [client 20.208.44.100:11488] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adV4dCjfVAkPG-jgJEqVGwAAAQs"]
[Wed Apr 08 05:34:45.376301 2026] [:error] [pid 47626:tid 47684] [client 20.208.44.100:16559] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adV4dajWI8TWtHx2sdb_GgAAAFA"]
[Wed Apr 08 05:34:45.911194 2026] [:error] [pid 47626:tid 47669] [client 20.208.44.100:25633] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adV4dajWI8TWtHx2sdb_GwAAAEE"]
[Wed Apr 08 05:34:46.834634 2026] [:error] [pid 16630:tid 16649] [client 20.208.44.100:11823] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adV4dijfVAkPG-jgJEqVKQAAARE"]
[Wed Apr 08 05:34:47.577052 2026] [:error] [pid 47625:tid 47638] [client 20.208.44.100:12571] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/q7lhrgzoo7ijhnkcedq2Cdefault.php"] [unique_id "adV4dyVuHyNWzZlE8PD7QAAAAAQ"]
[Wed Apr 08 05:34:48.340076 2026] [:error] [pid 47732:tid 47749] [client 20.208.44.100:57767] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/q7lhrgzoo7ijhnkcedq2Cdefault.php"] [unique_id "adV4eIm4N5QW9Mh7G104xAAAAM8"]
[Wed Apr 08 05:34:48.920363 2026] [:error] [pid 47732:tid 47742] [client 20.208.44.100:11796] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/q7lhrgzoo7ijhnkcedq2Cdefault.php"] [unique_id "adV4eIm4N5QW9Mh7G104yQAAAMg"]
[Wed Apr 08 05:34:49.468593 2026] [:error] [pid 47627:tid 47701] [client 20.208.44.100:11812] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/q7lhrgzoo7ijhnkcedq2Cdefault.php"] [unique_id "adV4eXOljf1Quv_kDjmWWAAAAII"]
[Wed Apr 08 05:34:50.204435 2026] [:error] [pid 16630:tid 16648] [client 20.208.44.100:57784] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/exhds0ucw0ju9vjgasxqCdefault.php"] [unique_id "adV4eijfVAkPG-jgJEqVPwAAARA"]
[Wed Apr 08 05:34:51.060303 2026] [:error] [pid 16630:tid 16646] [client 20.208.44.100:2141] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/exhds0ucw0ju9vjgasxqCdefault.php"] [unique_id "adV4eyjfVAkPG-jgJEqVRQAAAQ4"]
[Wed Apr 08 05:34:52.135297 2026] [:error] [pid 16630:tid 16640] [client 20.208.44.100:40483] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/exhds0ucw0ju9vjgasxqCdefault.php"] [unique_id "adV4fCjfVAkPG-jgJEqVUQAAAQg"]
[Wed Apr 08 05:34:52.775560 2026] [:error] [pid 47625:tid 47635] [client 20.208.44.100:44561] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/exhds0ucw0ju9vjgasxqCdefault.php"] [unique_id "adV4fCVuHyNWzZlE8PD7RwAAAAE"]
[Wed Apr 08 05:34:53.333493 2026] [:error] [pid 47627:tid 47704] [client 20.208.44.100:54726] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "adV4fXOljf1Quv_kDjmWXQAAAIU"]
[Wed Apr 08 05:34:53.911316 2026] [:error] [pid 47732:tid 47739] [client 20.208.44.100:54732] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "adV4fYm4N5QW9Mh7G1041QAAAMU"]
[Wed Apr 08 05:34:54.433367 2026] [:error] [pid 16630:tid 16656] [client 20.208.44.100:57783] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "adV4fijfVAkPG-jgJEqVXwAAARg"]
[Wed Apr 08 05:34:55.006296 2026] [:error] [pid 47732:tid 47734] [client 20.208.44.100:25607] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "adV4f4m4N5QW9Mh7G1043wAAAMA"]
[Wed Apr 08 05:34:55.557140 2026] [:error] [pid 47625:tid 47634] [client 20.208.44.100:2132] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bless.php"] [unique_id "adV4fyVuHyNWzZlE8PD7UAAAAAA"]
[Wed Apr 08 05:34:56.111974 2026] [:error] [pid 47627:tid 47715] [client 20.208.44.100:44567] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bless.php"] [unique_id "adV4gHOljf1Quv_kDjmWYwAAAJA"]
[Wed Apr 08 05:34:56.637613 2026] [:error] [pid 47627:tid 47717] [client 20.208.44.100:28146] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bless.php"] [unique_id "adV4gHOljf1Quv_kDjmWZAAAAJI"]
[Wed Apr 08 05:34:57.226775 2026] [:error] [pid 47626:tid 47668] [client 20.208.44.100:16932] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bless.php"] [unique_id "adV4gajWI8TWtHx2sdb_OAAAAEA"]
[Wed Apr 08 05:34:57.767774 2026] [:error] [pid 47626:tid 47681] [client 20.208.44.100:16562] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bolt.php"] [unique_id "adV4gajWI8TWtHx2sdb_OQAAAE0"]
[Wed Apr 08 05:34:58.338233 2026] [:error] [pid 47625:tid 47652] [client 20.208.44.100:47885] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bolt.php"] [unique_id "adV4giVuHyNWzZlE8PD7XQAAABI"]
[Wed Apr 08 05:34:58.873738 2026] [:error] [pid 16630:tid 16647] [client 20.208.44.100:25629] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bolt.php"] [unique_id "adV4gijfVAkPG-jgJEqVfwAAAQ8"]
[Wed Apr 08 05:34:59.432007 2026] [:error] [pid 47627:tid 47705] [client 20.208.44.100:12591] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bolt.php"] [unique_id "adV4g3Oljf1Quv_kDjmWcAAAAIY"]
[Wed Apr 08 05:34:59.952293 2026] [:error] [pid 47627:tid 47715] [client 20.208.44.100:54752] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp5.php"] [unique_id "adV4g3Oljf1Quv_kDjmWcgAAAJA"]
[Wed Apr 08 05:35:00.485842 2026] [:error] [pid 47627:tid 47721] [client 20.208.44.100:2126] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp5.php"] [unique_id "adV4hHOljf1Quv_kDjmWdQAAAJY"]
[Wed Apr 08 05:35:00.968856 2026] [:error] [pid 47627:tid 47714] [client 20.208.44.100:16524] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp5.php"] [unique_id "adV4hHOljf1Quv_kDjmWeAAAAI8"]
[Wed Apr 08 05:35:01.470315 2026] [:error] [pid 47732:tid 47744] [client 20.208.44.100:13383] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp5.php"] [unique_id "adV4hYm4N5QW9Mh7G104-gAAAMo"]
[Wed Apr 08 05:35:02.003776 2026] [:error] [pid 47625:tid 47647] [client 20.208.44.100:32672] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp.php"] [unique_id "adV4hiVuHyNWzZlE8PD7aQAAAA0"]
[Wed Apr 08 05:35:02.551738 2026] [:error] [pid 47732:tid 47753] [client 20.208.44.100:11473] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp.php"] [unique_id "adV4hom4N5QW9Mh7G105BAAAANM"]
[Wed Apr 08 05:35:03.073392 2026] [:error] [pid 16630:tid 16637] [client 20.208.44.100:40481] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp.php"] [unique_id "adV4hyjfVAkPG-jgJEqVlQAAAQU"]
[Wed Apr 08 05:35:03.566844 2026] [:error] [pid 16630:tid 16640] [client 20.208.44.100:12586] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp.php"] [unique_id "adV4hyjfVAkPG-jgJEqVmQAAAQg"]
[Wed Apr 08 05:35:04.088968 2026] [:error] [pid 16630:tid 16653] [client 20.208.44.100:25661] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adV4iCjfVAkPG-jgJEqVoAAAARU"]
[Wed Apr 08 05:35:04.585419 2026] [:error] [pid 16630:tid 16637] [client 20.208.44.100:57753] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adV4iCjfVAkPG-jgJEqVpwAAAQU"]
[Wed Apr 08 05:35:05.339555 2026] [proxy_fcgi:error] [pid 16630:tid 16641] [client 20.208.44.100:12549] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 05:35:05.579507 2026] [proxy_fcgi:error] [pid 16630:tid 16655] [client 20.208.44.100:12549] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 05:35:05.852123 2026] [proxy_fcgi:error] [pid 16630:tid 16647] [client 20.208.44.100:12549] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 05:35:06.104879 2026] [proxy_fcgi:error] [pid 16630:tid 16654] [client 20.208.44.100:12549] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 05:35:07.741329 2026] [proxy_fcgi:error] [pid 16630:tid 16649] [client 20.208.44.100:12549] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 05:35:07.982254 2026] [proxy_fcgi:error] [pid 16630:tid 16643] [client 20.208.44.100:12549] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 05:35:08.238481 2026] [proxy_fcgi:error] [pid 16630:tid 16651] [client 20.208.44.100:12549] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 05:35:08.738456 2026] [proxy_fcgi:error] [pid 16630:tid 16639] [client 20.208.44.100:12549] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 05:35:08.979138 2026] [proxy_fcgi:error] [pid 16630:tid 16637] [client 20.208.44.100:12549] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 05:35:09.260428 2026] [:error] [pid 16630:tid 16648] [client 20.208.44.100:12549] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a5.php"] [unique_id "adV4jSjfVAkPG-jgJEqV1QAAARA"]
[Wed Apr 08 05:35:09.747199 2026] [:error] [pid 47732:tid 47754] [client 20.208.44.100:47892] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a5.php"] [unique_id "adV4jYm4N5QW9Mh7G105HQAAANQ"]
[Wed Apr 08 05:35:10.232137 2026] [:error] [pid 47627:tid 47717] [client 20.208.44.100:16555] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a5.php"] [unique_id "adV4jnOljf1Quv_kDjmWjwAAAJI"]
[Wed Apr 08 05:35:10.768654 2026] [:error] [pid 16630:tid 16654] [client 20.208.44.100:11484] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a5.php"] [unique_id "adV4jijfVAkPG-jgJEqV2QAAARY"]
[Wed Apr 08 05:35:11.316249 2026] [:error] [pid 16630:tid 16651] [client 20.208.44.100:11494] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws.php"] [unique_id "adV4jyjfVAkPG-jgJEqV4AAAARM"]
[Wed Apr 08 05:35:11.866953 2026] [:error] [pid 47732:tid 47749] [client 20.208.44.100:47880] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws.php"] [unique_id "adV4j4m4N5QW9Mh7G105HwAAAM8"]
[Wed Apr 08 05:35:12.364011 2026] [:error] [pid 16630:tid 16644] [client 20.208.44.100:13418] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws.php"] [unique_id "adV4kCjfVAkPG-jgJEqV5QAAAQw"]
[Wed Apr 08 05:35:12.856077 2026] [:error] [pid 16630:tid 16639] [client 20.208.44.100:57786] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws.php"] [unique_id "adV4kCjfVAkPG-jgJEqV6QAAAQc"]
[Wed Apr 08 05:35:13.331518 2026] [:error] [pid 47627:tid 47722] [client 20.208.44.100:16950] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rithin.php"] [unique_id "adV4kXOljf1Quv_kDjmWlwAAAJc"]
[Wed Apr 08 05:35:13.847323 2026] [:error] [pid 16630:tid 16632] [client 20.208.44.100:28138] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rithin.php"] [unique_id "adV4kSjfVAkPG-jgJEqV7AAAAQA"]
[Wed Apr 08 05:35:14.321993 2026] [:error] [pid 16630:tid 16656] [client 20.208.44.100:47928] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rithin.php"] [unique_id "adV4kijfVAkPG-jgJEqV8wAAARg"]
[Wed Apr 08 05:35:14.808556 2026] [:error] [pid 47625:tid 47652] [client 20.208.44.100:14418] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rithin.php"] [unique_id "adV4kiVuHyNWzZlE8PD7cQAAABI"]
[Wed Apr 08 05:35:15.288958 2026] [:error] [pid 47625:tid 47647] [client 20.208.44.100:26094] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nw.php"] [unique_id "adV4kyVuHyNWzZlE8PD7cgAAAA0"]
[Wed Apr 08 05:35:15.776851 2026] [:error] [pid 16630:tid 16647] [client 20.208.44.100:28137] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nw.php"] [unique_id "adV4kyjfVAkPG-jgJEqV_gAAAQ8"]
[Wed Apr 08 05:35:16.265076 2026] [:error] [pid 16630:tid 16648] [client 20.208.44.100:28142] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nw.php"] [unique_id "adV4lCjfVAkPG-jgJEqWBAAAARA"]
[Wed Apr 08 05:35:16.762993 2026] [:error] [pid 47627:tid 47713] [client 20.208.44.100:11827] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nw.php"] [unique_id "adV4lHOljf1Quv_kDjmWogAAAI4"]
[Wed Apr 08 05:35:17.234049 2026] [:error] [pid 47732:tid 47738] [client 20.208.44.100:40504] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/motu.php"] [unique_id "adV4lYm4N5QW9Mh7G105JAAAAMQ"]
[Wed Apr 08 05:35:17.754346 2026] [:error] [pid 47627:tid 47720] [client 20.208.44.100:25614] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/motu.php"] [unique_id "adV4lXOljf1Quv_kDjmWpQAAAJU"]
[Wed Apr 08 05:35:18.285029 2026] [:error] [pid 47627:tid 47723] [client 20.208.44.100:14407] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/motu.php"] [unique_id "adV4lnOljf1Quv_kDjmWqAAAAJg"]
[Wed Apr 08 05:35:18.765414 2026] [:error] [pid 47626:tid 47680] [client 20.208.44.100:14443] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/motu.php"] [unique_id "adV4lqjWI8TWtHx2sdb_XwAAAEw"]
[Wed Apr 08 05:35:19.329474 2026] [:error] [pid 47625:tid 47650] [client 20.208.44.100:25624] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/amax.php"] [unique_id "adV4lyVuHyNWzZlE8PD7dwAAABA"]
[Wed Apr 08 05:35:19.820462 2026] [:error] [pid 47625:tid 47641] [client 20.208.44.100:28110] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/amax.php"] [unique_id "adV4lyVuHyNWzZlE8PD7egAAAAc"]
[Wed Apr 08 05:35:20.307953 2026] [:error] [pid 47626:tid 47690] [client 20.208.44.100:16956] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/amax.php"] [unique_id "adV4mKjWI8TWtHx2sdb_ZgAAAFY"]
[Wed Apr 08 05:35:20.798957 2026] [:error] [pid 47732:tid 47743] [client 20.208.44.100:40497] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/amax.php"] [unique_id "adV4mIm4N5QW9Mh7G105KQAAAMk"]
[Wed Apr 08 05:35:21.287074 2026] [:error] [pid 47625:tid 47635] [client 20.208.44.100:32194] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "adV4mSVuHyNWzZlE8PD7fAAAAAE"]
[Wed Apr 08 05:35:21.809122 2026] [:error] [pid 47732:tid 47754] [client 20.208.44.100:28132] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "adV4mYm4N5QW9Mh7G105KgAAANQ"]
[Wed Apr 08 05:35:22.365591 2026] [:error] [pid 47625:tid 47643] [client 20.208.44.100:28133] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "adV4miVuHyNWzZlE8PD7fgAAAAk"]
[Wed Apr 08 05:35:22.839125 2026] [:error] [pid 47626:tid 47691] [client 20.208.44.100:25635] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "adV4mqjWI8TWtHx2sdb_bQAAAFc"]
[Wed Apr 08 05:35:23.317059 2026] [:error] [pid 47626:tid 47674] [client 20.208.44.100:11811] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gifclass.php"] [unique_id "adV4m6jWI8TWtHx2sdb_cAAAAEY"]
[Wed Apr 08 05:35:23.799549 2026] [:error] [pid 47625:tid 47649] [client 20.208.44.100:44544] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gifclass.php"] [unique_id "adV4myVuHyNWzZlE8PD7gQAAAA8"]
[Wed Apr 08 05:35:24.352811 2026] [:error] [pid 47625:tid 47640] [client 20.208.44.100:25662] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gifclass.php"] [unique_id "adV4nCVuHyNWzZlE8PD7hAAAAAY"]
[Wed Apr 08 05:35:24.875352 2026] [:error] [pid 47626:tid 47671] [client 20.208.44.100:11832] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gifclass.php"] [unique_id "adV4nKjWI8TWtHx2sdb_cwAAAEM"]
[Wed Apr 08 05:35:25.396494 2026] [:error] [pid 47626:tid 47690] [client 20.208.44.100:28097] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws85.php"] [unique_id "adV4najWI8TWtHx2sdb_dQAAAFY"]
[Wed Apr 08 05:35:25.889073 2026] [:error] [pid 16630:tid 16636] [client 20.208.44.100:44602] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws85.php"] [unique_id "adV4nSjfVAkPG-jgJEqWHQAAAQQ"]
[Wed Apr 08 05:35:26.438120 2026] [:error] [pid 47625:tid 47639] [client 20.208.44.100:14408] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws85.php"] [unique_id "adV4niVuHyNWzZlE8PD7hwAAAAU"]
[Wed Apr 08 05:35:26.933600 2026] [:error] [pid 47627:tid 47721] [client 20.208.44.100:29439] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws85.php"] [unique_id "adV4nnOljf1Quv_kDjmWvQAAAJY"]
[Wed Apr 08 05:35:27.426771 2026] [:error] [pid 47732:tid 47745] [client 20.208.44.100:57728] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws87.php"] [unique_id "adV4n4m4N5QW9Mh7G105MAAAAMs"]
[Wed Apr 08 05:35:27.918247 2026] [:error] [pid 47625:tid 47641] [client 20.208.44.100:45237] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws87.php"] [unique_id "adV4nyVuHyNWzZlE8PD7iQAAAAc"]
[Wed Apr 08 05:35:28.409867 2026] [:error] [pid 47625:tid 47658] [client 20.208.44.100:16556] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws87.php"] [unique_id "adV4oCVuHyNWzZlE8PD7igAAABg"]
[Wed Apr 08 05:35:29.018862 2026] [:error] [pid 47625:tid 47634] [client 20.208.44.100:25640] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws87.php"] [unique_id "adV4oSVuHyNWzZlE8PD7jQAAAAA"]
[Wed Apr 08 05:35:29.558897 2026] [:error] [pid 47732:tid 47757] [client 20.208.44.100:2153] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ortasekerli1.php"] [unique_id "adV4oYm4N5QW9Mh7G105NAAAANc"]
[Wed Apr 08 05:35:30.157008 2026] [:error] [pid 47627:tid 47708] [client 20.208.44.100:47878] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ortasekerli1.php"] [unique_id "adV4onOljf1Quv_kDjmWwwAAAIk"]
[Wed Apr 08 05:35:30.634452 2026] [:error] [pid 47627:tid 47722] [client 20.208.44.100:40487] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ortasekerli1.php"] [unique_id "adV4onOljf1Quv_kDjmWxgAAAJc"]
[Wed Apr 08 05:35:31.122578 2026] [:error] [pid 16630:tid 16641] [client 20.208.44.100:16898] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ortasekerli1.php"] [unique_id "adV4oyjfVAkPG-jgJEqWKQAAAQk"]
[Wed Apr 08 05:35:31.619544 2026] [:error] [pid 16630:tid 16636] [client 20.208.44.100:16537] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/new3.php"] [unique_id "adV4oyjfVAkPG-jgJEqWKgAAAQQ"]
[Wed Apr 08 05:35:32.162851 2026] [:error] [pid 47625:tid 47649] [client 20.208.44.100:11801] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/new3.php"] [unique_id "adV4pCVuHyNWzZlE8PD7kAAAAA8"]
[Wed Apr 08 05:35:32.711280 2026] [:error] [pid 47625:tid 47656] [client 20.208.44.100:40454] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/new3.php"] [unique_id "adV4pCVuHyNWzZlE8PD7kwAAABY"]
[Wed Apr 08 05:35:33.184036 2026] [:error] [pid 47627:tid 47719] [client 20.208.44.100:14432] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/new3.php"] [unique_id "adV4pXOljf1Quv_kDjmW0AAAAJQ"]
[Wed Apr 08 05:35:33.660627 2026] [:error] [pid 47625:tid 47646] [client 20.208.44.100:44556] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sid3.php"] [unique_id "adV4pSVuHyNWzZlE8PD7mwAAAAw"]
[Wed Apr 08 05:35:34.156923 2026] [:error] [pid 47627:tid 47717] [client 20.208.44.100:56501] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sid3.php"] [unique_id "adV4pnOljf1Quv_kDjmW0wAAAJI"]
[Wed Apr 08 05:35:34.647248 2026] [:error] [pid 47625:tid 47651] [client 20.208.44.100:11821] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sid3.php"] [unique_id "adV4piVuHyNWzZlE8PD7oQAAABE"]
[Wed Apr 08 05:35:35.124744 2026] [:error] [pid 47627:tid 47716] [client 20.208.44.100:16531] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sid3.php"] [unique_id "adV4p3Oljf1Quv_kDjmW1gAAAJE"]
[Wed Apr 08 05:35:35.604520 2026] [:error] [pid 47732:tid 47746] [client 20.208.44.100:25613] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-png.php"] [unique_id "adV4p4m4N5QW9Mh7G105QwAAAMw"]
[Wed Apr 08 05:35:36.080914 2026] [:error] [pid 47732:tid 47756] [client 20.208.44.100:57764] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-png.php"] [unique_id "adV4qIm4N5QW9Mh7G105RwAAANY"]
[Wed Apr 08 05:35:36.560158 2026] [:error] [pid 47627:tid 47711] [client 20.208.44.100:44597] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-png.php"] [unique_id "adV4qHOljf1Quv_kDjmW2gAAAIw"]
[Wed Apr 08 05:35:37.032001 2026] [:error] [pid 16630:tid 16636] [client 20.208.44.100:47935] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-png.php"] [unique_id "adV4qSjfVAkPG-jgJEqWNwAAAQQ"]
[Wed Apr 08 05:35:37.578262 2026] [:error] [pid 47626:tid 47682] [client 20.208.44.100:28121] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/t2gorhwasq4vioshtatw5eCdefault.php"] [unique_id "adV4qajWI8TWtHx2sdb_jQAAAE4"]
[Wed Apr 08 05:35:38.057275 2026] [:error] [pid 47627:tid 47710] [client 20.208.44.100:16955] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/t2gorhwasq4vioshtatw5eCdefault.php"] [unique_id "adV4qnOljf1Quv_kDjmW3gAAAIs"]
[Wed Apr 08 05:35:38.534949 2026] [:error] [pid 16630:tid 16652] [client 20.208.44.100:11512] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/t2gorhwasq4vioshtatw5eCdefault.php"] [unique_id "adV4qijfVAkPG-jgJEqWPAAAARQ"]
[Wed Apr 08 05:35:39.035216 2026] [:error] [pid 47627:tid 47721] [client 20.208.44.100:40489] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/t2gorhwasq4vioshtatw5eCdefault.php"] [unique_id "adV4q3Oljf1Quv_kDjmW4wAAAJY"]
[Wed Apr 08 05:35:39.578700 2026] [:error] [pid 16630:tid 16637] [client 20.208.44.100:16953] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kj.php"] [unique_id "adV4qyjfVAkPG-jgJEqWQQAAAQU"]
[Wed Apr 08 05:35:40.056834 2026] [:error] [pid 16630:tid 16639] [client 20.208.44.100:16575] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kj.php"] [unique_id "adV4rCjfVAkPG-jgJEqWQwAAAQc"]
[Wed Apr 08 05:35:40.540812 2026] [:error] [pid 16630:tid 16634] [client 20.208.44.100:44604] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kj.php"] [unique_id "adV4rCjfVAkPG-jgJEqWRAAAAQI"]
[Wed Apr 08 05:35:41.037902 2026] [:error] [pid 16630:tid 16649] [client 20.208.44.100:13388] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kj.php"] [unique_id "adV4rSjfVAkPG-jgJEqWRQAAARE"]
[Wed Apr 08 05:35:41.519602 2026] [:error] [pid 16630:tid 16645] [client 20.208.44.100:11806] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/b4txckoieeyhynhsrpi9lCdefault.php"] [unique_id "adV4rSjfVAkPG-jgJEqWSQAAAQ0"]
[Wed Apr 08 05:35:42.011566 2026] [:error] [pid 47627:tid 47708] [client 20.208.44.100:40494] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/b4txckoieeyhynhsrpi9lCdefault.php"] [unique_id "adV4rnOljf1Quv_kDjmW7AAAAIk"]
[Wed Apr 08 05:35:42.502902 2026] [:error] [pid 47732:tid 47749] [client 20.208.44.100:28136] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/b4txckoieeyhynhsrpi9lCdefault.php"] [unique_id "adV4rom4N5QW9Mh7G105VwAAAM8"]
[Wed Apr 08 05:35:42.981253 2026] [:error] [pid 47732:tid 47740] [client 20.208.44.100:26083] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/b4txckoieeyhynhsrpi9lCdefault.php"] [unique_id "adV4rom4N5QW9Mh7G105WQAAAMY"]
[Wed Apr 08 05:35:43.508986 2026] [:error] [pid 47732:tid 47735] [client 20.208.44.100:16563] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/CDX2.php"] [unique_id "adV4r4m4N5QW9Mh7G105XQAAAME"]
[Wed Apr 08 05:35:44.004820 2026] [:error] [pid 16630:tid 16653] [client 20.208.44.100:16546] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/CDX2.php"] [unique_id "adV4sCjfVAkPG-jgJEqWVAAAARU"]
[Wed Apr 08 05:35:44.477550 2026] [:error] [pid 16630:tid 16642] [client 20.208.44.100:28148] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/CDX2.php"] [unique_id "adV4sCjfVAkPG-jgJEqWVwAAAQo"]
[Wed Apr 08 05:35:44.973416 2026] [:error] [pid 47732:tid 47746] [client 20.208.44.100:25603] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/CDX2.php"] [unique_id "adV4sIm4N5QW9Mh7G105ZgAAAMw"]
[Wed Apr 08 05:35:45.451925 2026] [:error] [pid 47626:tid 47690] [client 20.208.44.100:25657] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wziar1.php"] [unique_id "adV4sajWI8TWtHx2sdb_lgAAAFY"]
[Wed Apr 08 05:35:45.928998 2026] [:error] [pid 47627:tid 47720] [client 20.208.44.100:12594] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wziar1.php"] [unique_id "adV4sXOljf1Quv_kDjmW9gAAAJU"]
[Wed Apr 08 05:35:46.441417 2026] [:error] [pid 16630:tid 16645] [client 20.208.44.100:12584] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wziar1.php"] [unique_id "adV4sijfVAkPG-jgJEqWYQAAAQ0"]
[Wed Apr 08 05:35:46.944952 2026] [:error] [pid 47627:tid 47700] [client 20.208.44.100:44584] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wziar1.php"] [unique_id "adV4snOljf1Quv_kDjmW-gAAAIE"]
[Wed Apr 08 05:35:47.422579 2026] [:error] [pid 16630:tid 16641] [client 20.208.44.100:26021] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "adV4syjfVAkPG-jgJEqWZwAAAQk"]
[Wed Apr 08 05:35:47.963693 2026] [:error] [pid 47732:tid 47744] [client 20.208.44.100:11462] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "adV4s4m4N5QW9Mh7G105eQAAAMo"]
[Wed Apr 08 05:35:48.445760 2026] [:error] [pid 47627:tid 47707] [client 20.208.44.100:40502] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "adV4tHOljf1Quv_kDjmW_QAAAIg"]
[Wed Apr 08 05:35:48.965529 2026] [:error] [pid 47732:tid 47757] [client 20.208.44.100:28103] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "adV4tIm4N5QW9Mh7G105gAAAANc"]
[Wed Apr 08 05:35:49.447545 2026] [:error] [pid 47626:tid 47685] [client 20.208.44.100:11492] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sadcut1.php"] [unique_id "adV4tajWI8TWtHx2sdb_mAAAAFE"]
[Wed Apr 08 05:35:49.944064 2026] [:error] [pid 16630:tid 16652] [client 20.208.44.100:12607] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sadcut1.php"] [unique_id "adV4tSjfVAkPG-jgJEqWdQAAARQ"]
[Wed Apr 08 05:35:50.430250 2026] [:error] [pid 16630:tid 16635] [client 20.208.44.100:29438] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sadcut1.php"] [unique_id "adV4tijfVAkPG-jgJEqWegAAAQM"]
[Wed Apr 08 05:35:50.949500 2026] [:error] [pid 47732:tid 47753] [client 20.208.44.100:40453] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sadcut1.php"] [unique_id "adV4tom4N5QW9Mh7G105kwAAANM"]
[Wed Apr 08 05:35:51.473400 2026] [:error] [pid 16630:tid 16642] [client 20.208.44.100:14425] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/8daf1238_1774208172.php"] [unique_id "adV4tyjfVAkPG-jgJEqWfgAAAQo"]
[Wed Apr 08 05:35:51.955154 2026] [:error] [pid 16630:tid 16643] [client 20.208.44.100:16913] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/8daf1238_1774208172.php"] [unique_id "adV4tyjfVAkPG-jgJEqWhQAAAQs"]
[Wed Apr 08 05:35:52.478804 2026] [:error] [pid 47625:tid 47649] [client 20.208.44.100:13386] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/8daf1238_1774208172.php"] [unique_id "adV4uCVuHyNWzZlE8PD7rQAAAA8"]
[Wed Apr 08 05:35:52.963172 2026] [:error] [pid 16630:tid 16655] [client 20.208.44.100:2161] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/8daf1238_1774208172.php"] [unique_id "adV4uCjfVAkPG-jgJEqWiAAAARc"]
[Wed Apr 08 05:35:53.494372 2026] [:error] [pid 47625:tid 47640] [client 20.208.44.100:25628] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xsas.php"] [unique_id "adV4uSVuHyNWzZlE8PD7sAAAAAY"]
[Wed Apr 08 05:35:54.036109 2026] [:error] [pid 47626:tid 47675] [client 20.208.44.100:11779] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xsas.php"] [unique_id "adV4uqjWI8TWtHx2sdb_mwAAAEc"]
[Wed Apr 08 05:35:54.585528 2026] [:error] [pid 47625:tid 47658] [client 20.208.44.100:13399] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xsas.php"] [unique_id "adV4uiVuHyNWzZlE8PD7sQAAABg"]
[Wed Apr 08 05:35:55.110491 2026] [:error] [pid 47627:tid 47710] [client 20.208.44.100:32201] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xsas.php"] [unique_id "adV4u3Oljf1Quv_kDjmXDwAAAIs"]
[Wed Apr 08 05:35:55.735465 2026] [:error] [pid 47627:tid 47699] [client 20.208.44.100:2121] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a4.php"] [unique_id "adV4u3Oljf1Quv_kDjmXEQAAAIA"]
[Wed Apr 08 05:35:56.546048 2026] [:error] [pid 47732:tid 47740] [client 20.208.44.100:44560] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a4.php"] [unique_id "adV4vIm4N5QW9Mh7G105rwAAAMY"]
[Wed Apr 08 05:35:57.144423 2026] [:error] [pid 47732:tid 47746] [client 20.208.44.100:51705] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a4.php"] [unique_id "adV4vYm4N5QW9Mh7G105tAAAAMw"]
[Wed Apr 08 05:35:57.811772 2026] [:error] [pid 47626:tid 47692] [client 20.208.44.100:54755] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a4.php"] [unique_id "adV4vajWI8TWtHx2sdb_nwAAAFg"]
[Wed Apr 08 05:35:58.371220 2026] [:error] [pid 47627:tid 47711] [client 20.208.44.100:54742] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jga.php"] [unique_id "adV4vnOljf1Quv_kDjmXGQAAAIw"]
[Wed Apr 08 05:35:58.849953 2026] [:error] [pid 16630:tid 16637] [client 20.208.44.100:36706] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jga.php"] [unique_id "adV4vijfVAkPG-jgJEqWsAAAAQU"]
[Wed Apr 08 05:35:59.344642 2026] [:error] [pid 47627:tid 47706] [client 20.208.44.100:47992] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jga.php"] [unique_id "adV4v3Oljf1Quv_kDjmXGwAAAIc"]
[Wed Apr 08 05:35:59.818660 2026] [:error] [pid 47625:tid 47641] [client 20.208.44.100:47930] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jga.php"] [unique_id "adV4vyVuHyNWzZlE8PD7tgAAAAc"]
[Wed Apr 08 05:36:00.330099 2026] [:error] [pid 47732:tid 47757] [client 20.208.44.100:2202] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/buc.php"] [unique_id "adV4wIm4N5QW9Mh7G105zgAAANc"]
[Wed Apr 08 05:36:00.848684 2026] [:error] [pid 47626:tid 47690] [client 20.208.44.100:14442] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/buc.php"] [unique_id "adV4wKjWI8TWtHx2sdb_owAAAFY"]
[Wed Apr 08 05:36:01.344046 2026] [:error] [pid 47732:tid 47753] [client 20.208.44.100:11480] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/buc.php"] [unique_id "adV4wYm4N5QW9Mh7G1051wAAANM"]
[Wed Apr 08 05:36:01.887323 2026] [:error] [pid 47627:tid 47699] [client 20.208.44.100:54704] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/buc.php"] [unique_id "adV4wXOljf1Quv_kDjmXIgAAAIA"]
[Wed Apr 08 05:36:02.392317 2026] [:error] [pid 16630:tid 16648] [client 20.208.44.100:17315] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Cap.php"] [unique_id "adV4wijfVAkPG-jgJEqWzgAAARA"]
[Wed Apr 08 05:36:02.984630 2026] [:error] [pid 47732:tid 47748] [client 20.208.44.100:36727] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Cap.php"] [unique_id "adV4wom4N5QW9Mh7G1053AAAAM4"]
[Wed Apr 08 05:36:03.581576 2026] [:error] [pid 47732:tid 47757] [client 20.208.44.100:14357] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Cap.php"] [unique_id "adV4w4m4N5QW9Mh7G1053QAAANc"]
[Wed Apr 08 05:36:04.054191 2026] [:error] [pid 16630:tid 16633] [client 20.208.44.100:12975] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Cap.php"] [unique_id "adV4xCjfVAkPG-jgJEqW2QAAAQE"]
[Wed Apr 08 05:36:04.589456 2026] [:error] [pid 16630:tid 16632] [client 20.208.44.100:34824] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jlex.php"] [unique_id "adV4xCjfVAkPG-jgJEqW4gAAAQA"]
[Wed Apr 08 05:36:05.178365 2026] [:error] [pid 16630:tid 16639] [client 20.208.44.100:14370] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jlex.php"] [unique_id "adV4xSjfVAkPG-jgJEqW6wAAAQc"]
[Wed Apr 08 05:36:05.756946 2026] [:error] [pid 16630:tid 16632] [client 20.208.44.100:12991] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jlex.php"] [unique_id "adV4xSjfVAkPG-jgJEqW7gAAAQA"]
[Wed Apr 08 05:36:06.231514 2026] [:error] [pid 16630:tid 16641] [client 20.208.44.100:62925] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jlex.php"] [unique_id "adV4xijfVAkPG-jgJEqW8wAAAQk"]
[Wed Apr 08 05:36:06.786631 2026] [:error] [pid 47732:tid 47753] [client 20.208.44.100:18569] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gpt-sh.php"] [unique_id "adV4xom4N5QW9Mh7G1054wAAANM"]
[Wed Apr 08 05:36:07.288114 2026] [:error] [pid 47627:tid 47723] [client 20.208.44.100:2488] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gpt-sh.php"] [unique_id "adV4x3Oljf1Quv_kDjmXMQAAAJg"]
[Wed Apr 08 05:36:07.876949 2026] [:error] [pid 47627:tid 47721] [client 20.208.44.100:60423] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gpt-sh.php"] [unique_id "adV4x3Oljf1Quv_kDjmXMwAAAJY"]
[Wed Apr 08 05:36:08.631246 2026] [proxy_fcgi:error] [pid 47732:tid 47747] [client 20.208.44.100:19073] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 05:36:08.882418 2026] [proxy_fcgi:error] [pid 47732:tid 47758] [client 20.208.44.100:19073] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 05:36:09.629034 2026] [proxy_fcgi:error] [pid 47732:tid 47744] [client 20.208.44.100:19073] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 05:36:09.940909 2026] [proxy_fcgi:error] [pid 47732:tid 47735] [client 20.208.44.100:19073] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 05:36:10.214581 2026] [proxy_fcgi:error] [pid 47732:tid 47748] [client 20.208.44.100:19073] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 05:36:10.488392 2026] [proxy_fcgi:error] [pid 47732:tid 47744] [client 20.208.44.100:19073] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 05:36:10.727636 2026] [proxy_fcgi:error] [pid 47732:tid 47753] [client 20.208.44.100:19073] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 05:36:11.030009 2026] [proxy_fcgi:error] [pid 47732:tid 47736] [client 20.208.44.100:19073] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 05:36:11.270868 2026] [proxy_fcgi:error] [pid 47732:tid 47758] [client 20.208.44.100:19073] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 05:36:11.530508 2026] [proxy_fcgi:error] [pid 47732:tid 47747] [client 20.208.44.100:19073] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 05:36:11.770809 2026] [proxy_fcgi:error] [pid 47732:tid 47734] [client 20.208.44.100:19073] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 05:36:12.009195 2026] [:error] [pid 47732:tid 47738] [client 20.208.44.100:19073] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/myfile.php"] [unique_id "adV4zIm4N5QW9Mh7G106PgAAAMQ"]
[Wed Apr 08 05:36:12.500093 2026] [:error] [pid 16630:tid 16656] [client 20.208.44.100:14026] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/myfile.php"] [unique_id "adV4zCjfVAkPG-jgJEqXEQAAARg"]
[Wed Apr 08 05:36:13.046524 2026] [:error] [pid 47626:tid 47690] [client 20.208.44.100:19075] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/myfile.php"] [unique_id "adV4zajWI8TWtHx2sdb_rwAAAFY"]
[Wed Apr 08 05:36:13.560882 2026] [:error] [pid 16630:tid 16647] [client 20.208.44.100:60434] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/myfile.php"] [unique_id "adV4zSjfVAkPG-jgJEqXEgAAAQ8"]
[Wed Apr 08 05:36:14.078148 2026] [:error] [pid 47732:tid 47744] [client 20.208.44.100:36140] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xwx1.php"] [unique_id "adV4zom4N5QW9Mh7G106RwAAAMo"]
[Wed Apr 08 05:36:14.677058 2026] [:error] [pid 47627:tid 47717] [client 20.208.44.100:17707] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xwx1.php"] [unique_id "adV4znOljf1Quv_kDjmXXAAAAJI"]
[Wed Apr 08 05:36:15.267770 2026] [:error] [pid 47732:tid 47736] [client 20.208.44.100:36157] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xwx1.php"] [unique_id "adV4z4m4N5QW9Mh7G106TQAAAMI"]
[Wed Apr 08 05:36:15.779081 2026] [:error] [pid 47625:tid 47648] [client 20.208.44.100:60459] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xwx1.php"] [unique_id "adV4zyVuHyNWzZlE8PD7wQAAAA4"]
[Wed Apr 08 08:41:12.845453 2026] [proxy_fcgi:error] [pid 47626:tid 47674] [client 20.100.182.194:10701] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 08:41:13.109847 2026] [proxy_fcgi:error] [pid 47626:tid 47669] [client 20.100.182.194:10701] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 08:41:13.638532 2026] [proxy_fcgi:error] [pid 47626:tid 47677] [client 20.100.182.194:10701] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 08:41:13.902455 2026] [proxy_fcgi:error] [pid 47626:tid 47691] [client 20.100.182.194:10701] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 08:41:14.168302 2026] [proxy_fcgi:error] [pid 47626:tid 47672] [client 20.100.182.194:10701] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 08:41:14.432286 2026] [proxy_fcgi:error] [pid 47626:tid 47688] [client 20.100.182.194:10701] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 08:41:14.694534 2026] [proxy_fcgi:error] [pid 47626:tid 47689] [client 20.100.182.194:10701] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 08:41:14.960790 2026] [proxy_fcgi:error] [pid 47626:tid 47673] [client 20.100.182.194:10701] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 09:25:26.499562 2026] [:error] [pid 47627:tid 47721] [client 103.168.67.159:46916] [client 103.168.67.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/"] [unique_id "adWuhnOljf1Quv_kDjn0JgAAAJY"]
[Wed Apr 08 09:25:27.198526 2026] [:error] [pid 16630:tid 16635] [client 103.168.67.159:47272] [client 103.168.67.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/"] [unique_id "adWuhyjfVAkPG-jgJEpQoAAAAQM"]
[Wed Apr 08 09:25:27.902140 2026] [:error] [pid 47626:tid 47669] [client 103.168.67.159:47640] [client 103.168.67.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/"] [unique_id "adWuh6jWI8TWtHx2sdZJzQAAAEE"]
[Wed Apr 08 09:25:28.615494 2026] [:error] [pid 47627:tid 47721] [client 103.168.67.159:48068] [client 103.168.67.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/"] [unique_id "adWuiHOljf1Quv_kDjn0OQAAAJY"]
[Wed Apr 08 09:25:29.327501 2026] [:error] [pid 47626:tid 47692] [client 103.168.67.159:48476] [client 103.168.67.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dashboard"] [unique_id "adWuiajWI8TWtHx2sdZJ1AAAAFg"]
[Wed Apr 08 09:25:30.029588 2026] [:error] [pid 49984:tid 49999] [client 103.168.67.159:48950] [client 103.168.67.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dashboard"] [unique_id "adWuiuYY_Bz5lRHcJIE-OwAAAUk"]
[Wed Apr 08 09:25:30.731319 2026] [:error] [pid 47626:tid 47672] [client 103.168.67.159:49402] [client 103.168.67.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dashboard"] [unique_id "adWuiqjWI8TWtHx2sdZJ8wAAAEQ"]
[Wed Apr 08 09:25:31.446907 2026] [:error] [pid 49984:tid 49998] [client 103.168.67.159:1784] [client 103.168.67.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dashboard"] [unique_id "adWui-YY_Bz5lRHcJIE-UwAAAUg"]
[Wed Apr 08 09:59:40.073060 2026] [proxy_fcgi:error] [pid 47625:tid 47649] [client 20.215.49.238:8571] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 09:59:40.332475 2026] [proxy_fcgi:error] [pid 47625:tid 47646] [client 20.215.49.238:8571] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 09:59:40.850731 2026] [proxy_fcgi:error] [pid 47625:tid 47652] [client 20.215.49.238:8571] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 09:59:41.108715 2026] [proxy_fcgi:error] [pid 47625:tid 47650] [client 20.215.49.238:8571] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 09:59:41.367360 2026] [proxy_fcgi:error] [pid 47625:tid 47647] [client 20.215.49.238:8571] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 09:59:41.626475 2026] [proxy_fcgi:error] [pid 47625:tid 47658] [client 20.215.49.238:8571] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 09:59:41.887324 2026] [proxy_fcgi:error] [pid 47625:tid 47657] [client 20.215.49.238:8571] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 09:59:42.145688 2026] [proxy_fcgi:error] [pid 47625:tid 47642] [client 20.215.49.238:8571] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 11:02:43.835202 2026] [proxy_fcgi:error] [pid 47625:tid 47639] [client 172.213.26.45:32782] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 11:02:44.072864 2026] [proxy_fcgi:error] [pid 47625:tid 47636] [client 172.213.26.45:32782] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 11:02:44.547459 2026] [proxy_fcgi:error] [pid 47625:tid 47648] [client 172.213.26.45:32782] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 11:02:44.784096 2026] [proxy_fcgi:error] [pid 47625:tid 47634] [client 172.213.26.45:32782] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 11:02:45.021147 2026] [proxy_fcgi:error] [pid 47625:tid 47644] [client 172.213.26.45:32782] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 11:02:45.257859 2026] [proxy_fcgi:error] [pid 47625:tid 47646] [client 172.213.26.45:32782] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 11:02:45.494193 2026] [proxy_fcgi:error] [pid 47625:tid 47654] [client 172.213.26.45:32782] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 11:02:45.731346 2026] [proxy_fcgi:error] [pid 47625:tid 47650] [client 172.213.26.45:32782] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 20:28:45.495034 2026] [proxy_fcgi:error] [pid 12453:tid 12479] [client 4.233.61.201:9804] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 20:28:45.736050 2026] [proxy_fcgi:error] [pid 12453:tid 12466] [client 4.233.61.201:9804] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 20:28:47.422649 2026] [proxy_fcgi:error] [pid 12453:tid 12478] [client 4.233.61.201:9804] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 20:28:47.676878 2026] [proxy_fcgi:error] [pid 12453:tid 12456] [client 4.233.61.201:9804] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 20:28:47.928526 2026] [proxy_fcgi:error] [pid 12453:tid 12472] [client 4.233.61.201:9804] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 20:28:48.191915 2026] [proxy_fcgi:error] [pid 12453:tid 12468] [client 4.233.61.201:9804] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 20:28:48.430498 2026] [proxy_fcgi:error] [pid 12453:tid 12455] [client 4.233.61.201:9804] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 20:28:48.668701 2026] [proxy_fcgi:error] [pid 12453:tid 12471] [client 4.233.61.201:9804] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 20:28:48.927988 2026] [proxy_fcgi:error] [pid 12453:tid 12466] [client 4.233.61.201:9804] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 20:28:49.188953 2026] [proxy_fcgi:error] [pid 12453:tid 12465] [client 4.233.61.201:9804] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 20:28:49.442421 2026] [:error] [pid 12453:tid 12478] [client 4.233.61.201:9804] [client 4.233.61.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/shout.php"] [unique_id "adZKARjtW7S6XsLPvrQg9gAAAJc"]
[Wed Apr 08 20:28:53.218120 2026] [:error] [pid 7047:tid 7060] [client 4.233.61.201:37159] [client 4.233.61.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/shout.php"] [unique_id "adZKBeNh3oGO3pKiCzwIfAAAAYs"]
[Wed Apr 08 20:28:54.970553 2026] [:error] [pid 35642:tid 35645] [client 4.233.61.201:39900] [client 4.233.61.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/shout.php"] [unique_id "adZKBg-CqryxdEs5DN9WuAAAAEE"]
[Wed Apr 08 20:28:56.770348 2026] [:error] [pid 12453:tid 12458] [client 4.233.61.201:60984] [client 4.233.61.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/shout.php"] [unique_id "adZKCBjtW7S6XsLPvrQhAgAAAIM"]
[Wed Apr 08 20:29:50.379953 2026] [proxy_fcgi:error] [pid 7189:tid 7215] [client 4.233.61.201:35106] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 20:29:50.824785 2026] [proxy_fcgi:error] [pid 7189:tid 7209] [client 4.233.61.201:35106] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 20:29:51.276686 2026] [proxy_fcgi:error] [pid 7189:tid 7210] [client 4.233.61.201:35106] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 20:29:51.515627 2026] [proxy_fcgi:error] [pid 7189:tid 7194] [client 4.233.61.201:35106] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 20:29:51.755781 2026] [proxy_fcgi:error] [pid 7189:tid 7207] [client 4.233.61.201:35106] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 20:29:51.995749 2026] [proxy_fcgi:error] [pid 7189:tid 7204] [client 4.233.61.201:35106] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 20:29:52.350293 2026] [proxy_fcgi:error] [pid 7189:tid 7195] [client 4.233.61.201:35106] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 20:29:52.601904 2026] [proxy_fcgi:error] [pid 7189:tid 7191] [client 4.233.61.201:35106] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 20:29:53.040603 2026] [proxy_fcgi:error] [pid 7189:tid 7209] [client 4.233.61.201:35106] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 20:29:53.390030 2026] [proxy_fcgi:error] [pid 7189:tid 7196] [client 4.233.61.201:35106] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 20:29:53.628093 2026] [proxy_fcgi:error] [pid 7189:tid 7213] [client 4.233.61.201:35106] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 20:29:53.876211 2026] [:error] [pid 7189:tid 7210] [client 4.233.61.201:35106] [client 4.233.61.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ar.php"] [unique_id "adZKQRaBqhBSu0L37lrMQgAAAdM"]
[Wed Apr 08 20:29:56.085177 2026] [:error] [pid 7047:tid 7059] [client 4.233.61.201:61610] [client 4.233.61.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ar.php"] [unique_id "adZKRONh3oGO3pKiCzwJTgAAAYo"]
[Wed Apr 08 20:29:59.045065 2026] [:error] [pid 7189:tid 7204] [client 4.233.61.201:61586] [client 4.233.61.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ar.php"] [unique_id "adZKRxaBqhBSu0L37lrMRgAAAc0"]
[Wed Apr 08 20:30:01.236770 2026] [:error] [pid 12453:tid 12456] [client 4.233.61.201:55857] [client 4.233.61.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ar.php"] [unique_id "adZKSRjtW7S6XsLPvrQhcQAAAIE"]
[Wed Apr 08 20:30:02.284353 2026] [:error] [pid 7047:tid 7066] [client 4.233.61.201:36793] [client 4.233.61.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/qing.php"] [unique_id "adZKSuNh3oGO3pKiCzwJYAAAAZE"]
[Wed Apr 08 20:30:09.070998 2026] [:error] [pid 12453:tid 12460] [client 4.233.61.201:55849] [client 4.233.61.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/qing.php"] [unique_id "adZKURjtW7S6XsLPvrQhrgAAAIU"]
[Wed Apr 08 20:30:16.090524 2026] [:error] [pid 7047:tid 7065] [client 4.233.61.201:57512] [client 4.233.61.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/qing.php"] [unique_id "adZKWONh3oGO3pKiCzwJyQAAAZA"]
[Wed Apr 08 20:30:37.861576 2026] [:error] [pid 7047:tid 7054] [client 4.233.61.201:43882] [client 4.233.61.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mms.php"] [unique_id "adZKbeNh3oGO3pKiCzwKPwAAAYU"]
[Wed Apr 08 20:30:56.065481 2026] [proxy_fcgi:error] [pid 7047:tid 7055] [client 4.233.61.201:43837] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 20:30:56.306331 2026] [proxy_fcgi:error] [pid 7047:tid 7070] [client 4.233.61.201:43837] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 20:30:56.675688 2026] [proxy_fcgi:error] [pid 7047:tid 7064] [client 4.233.61.201:43837] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 20:30:56.928956 2026] [proxy_fcgi:error] [pid 7047:tid 7052] [client 4.233.61.201:43837] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 20:30:57.168962 2026] [proxy_fcgi:error] [pid 7047:tid 7072] [client 4.233.61.201:43837] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 20:30:57.407565 2026] [proxy_fcgi:error] [pid 7047:tid 7056] [client 4.233.61.201:43837] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 20:30:57.648839 2026] [proxy_fcgi:error] [pid 7047:tid 7061] [client 4.233.61.201:43837] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 20:30:59.209782 2026] [proxy_fcgi:error] [pid 7047:tid 7060] [client 4.233.61.201:43837] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 20:30:59.449819 2026] [proxy_fcgi:error] [pid 7047:tid 7058] [client 4.233.61.201:43837] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 20:30:59.720143 2026] [proxy_fcgi:error] [pid 7047:tid 7057] [client 4.233.61.201:43837] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 20:30:59.975985 2026] [proxy_fcgi:error] [pid 7047:tid 7051] [client 4.233.61.201:43837] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 20:31:00.212833 2026] [:error] [pid 7047:tid 7065] [client 4.233.61.201:43837] [client 4.233.61.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/12.php"] [unique_id "adZKhONh3oGO3pKiCzwKuAAAAZA"]
[Wed Apr 08 20:31:23.566209 2026] [:error] [pid 12386:tid 12422] [client 4.233.61.201:45070] [client 4.233.61.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/02.php"] [unique_id "adZKmxLhhLtqHi2gK7UWBgAAAQY"]
[Wed Apr 08 20:31:27.118280 2026] [:error] [pid 12490:tid 12501] [client 4.233.61.201:46191] [client 4.233.61.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/02.php"] [unique_id "adZKn21Fea4F4fbumr38bgAAAMk"]
[Wed Apr 08 20:31:32.629336 2026] [:error] [pid 12490:tid 12508] [client 4.233.61.201:58660] [client 4.233.61.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2.php"] [unique_id "adZKpG1Fea4F4fbumr38dwAAANA"]
[Wed Apr 08 20:31:34.742180 2026] [:error] [pid 7189:tid 7209] [client 4.233.61.201:45009] [client 4.233.61.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2.php"] [unique_id "adZKphaBqhBSu0L37lrM4wAAAdI"]
[Wed Apr 08 20:32:04.655980 2026] [proxy_fcgi:error] [pid 35642:tid 35645] [client 4.233.61.201:41080] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 20:32:04.895532 2026] [proxy_fcgi:error] [pid 35642:tid 35665] [client 4.233.61.201:41080] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 20:32:05.136635 2026] [proxy_fcgi:error] [pid 35642:tid 35648] [client 4.233.61.201:41080] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 20:32:05.380012 2026] [proxy_fcgi:error] [pid 35642:tid 35666] [client 4.233.61.201:41080] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 20:32:05.619412 2026] [proxy_fcgi:error] [pid 35642:tid 35646] [client 4.233.61.201:41080] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 20:32:05.856664 2026] [proxy_fcgi:error] [pid 35642:tid 35657] [client 4.233.61.201:41080] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 20:32:06.118782 2026] [proxy_fcgi:error] [pid 35642:tid 35647] [client 4.233.61.201:41080] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 20:32:06.361370 2026] [proxy_fcgi:error] [pid 35642:tid 35660] [client 4.233.61.201:41080] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 20:32:06.619142 2026] [proxy_fcgi:error] [pid 35642:tid 35652] [client 4.233.61.201:41080] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 20:32:06.867538 2026] [proxy_fcgi:error] [pid 35642:tid 35649] [client 4.233.61.201:41080] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 20:32:07.169402 2026] [proxy_fcgi:error] [pid 35642:tid 35654] [client 4.233.61.201:41080] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 20:32:07.407220 2026] [:error] [pid 35642:tid 35656] [client 4.233.61.201:41080] [client 4.233.61.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aa.php"] [unique_id "adZKxw-CqryxdEs5DN9XlgAAAEw"]
[Wed Apr 08 20:32:17.231626 2026] [:error] [pid 7047:tid 7053] [client 4.233.61.201:59254] [client 4.233.61.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aa.php"] [unique_id "adZK0eNh3oGO3pKiCzwLnQAAAYQ"]
[Wed Apr 08 20:32:20.875862 2026] [:error] [pid 7047:tid 7050] [client 4.233.61.201:49928] [client 4.233.61.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aa.php"] [unique_id "adZK1ONh3oGO3pKiCzwLtgAAAYE"]
[Wed Apr 08 20:32:24.082898 2026] [:error] [pid 12453:tid 12478] [client 4.233.61.201:48180] [client 4.233.61.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/goods.php"] [unique_id "adZK2BjtW7S6XsLPvrQjcgAAAJc"]
[Wed Apr 08 20:32:30.902703 2026] [:error] [pid 7047:tid 7051] [client 4.233.61.201:9902] [client 4.233.61.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/goods.php"] [unique_id "adZK3uNh3oGO3pKiCzwL8QAAAYI"]
[Wed Apr 08 20:32:42.078464 2026] [:error] [pid 12453:tid 12471] [client 4.233.61.201:40974] [client 4.233.61.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/pepe.php"] [unique_id "adZK6hjtW7S6XsLPvrQjlwAAAJA"]
[Wed Apr 08 20:32:43.204818 2026] [:error] [pid 7189:tid 7199] [client 4.233.61.201:40994] [client 4.233.61.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/pepe.php"] [unique_id "adZK6xaBqhBSu0L37lrNZgAAAcg"]
[Wed Apr 08 20:32:44.942417 2026] [:error] [pid 12490:tid 12492] [client 4.233.61.201:41009] [client 4.233.61.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/pepe.php"] [unique_id "adZK7G1Fea4F4fbumr38pQAAAMA"]
[Wed Apr 08 20:32:46.873917 2026] [:error] [pid 7047:tid 7072] [client 4.233.61.201:51690] [client 4.233.61.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/pepe.php"] [unique_id "adZK7uNh3oGO3pKiCzwMEAAAAZc"]
[Wed Apr 08 20:32:50.392761 2026] [:error] [pid 7047:tid 7066] [client 4.233.61.201:41619] [client 4.233.61.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file32.php"] [unique_id "adZK8uNh3oGO3pKiCzwMFQAAAZE"]
[Wed Apr 08 20:32:51.430707 2026] [:error] [pid 12453:tid 12461] [client 4.233.61.201:51702] [client 4.233.61.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file32.php"] [unique_id "adZK8xjtW7S6XsLPvrQjqAAAAIY"]
[Wed Apr 08 20:32:59.288941 2026] [:error] [pid 35642:tid 35650] [client 4.233.61.201:54446] [client 4.233.61.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file32.php"] [unique_id "adZK-w-CqryxdEs5DN9XtAAAAEY"]
[Wed Apr 08 20:33:05.066398 2026] [:error] [pid 64066:tid 64087] [client 4.233.61.201:36686] [client 4.233.61.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file.php"] [unique_id "adZLAVR3WucJgr2vZGY5MgAAAVI"]
[Wed Apr 08 20:33:11.771877 2026] [proxy_fcgi:error] [pid 12386:tid 12437] [client 4.233.61.201:48759] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 20:33:12.032384 2026] [proxy_fcgi:error] [pid 12386:tid 12427] [client 4.233.61.201:48759] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 20:33:12.272922 2026] [proxy_fcgi:error] [pid 12386:tid 12423] [client 4.233.61.201:48759] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 20:33:12.513283 2026] [proxy_fcgi:error] [pid 12386:tid 12420] [client 4.233.61.201:48759] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 20:33:12.770573 2026] [proxy_fcgi:error] [pid 12386:tid 12432] [client 4.233.61.201:48759] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 20:33:13.755605 2026] [proxy_fcgi:error] [pid 12386:tid 12435] [client 4.233.61.201:48759] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 20:33:14.010586 2026] [proxy_fcgi:error] [pid 12386:tid 12422] [client 4.233.61.201:48759] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 20:33:14.251640 2026] [proxy_fcgi:error] [pid 12386:tid 12421] [client 4.233.61.201:48759] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 20:33:14.497574 2026] [proxy_fcgi:error] [pid 12386:tid 12436] [client 4.233.61.201:48759] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 20:33:15.286289 2026] [proxy_fcgi:error] [pid 12386:tid 12424] [client 4.233.61.201:48759] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 20:33:15.523326 2026] [:error] [pid 12386:tid 12418] [client 4.233.61.201:48759] [client 4.233.61.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xx.php"] [unique_id "adZLCxLhhLtqHi2gK7UWPQAAAQI"]
[Wed Apr 08 20:33:22.046537 2026] [:error] [pid 7189:tid 7194] [client 4.233.61.201:60958] [client 4.233.61.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xx.php"] [unique_id "adZLEhaBqhBSu0L37lrNowAAAcM"]
[Wed Apr 08 20:33:26.237438 2026] [:error] [pid 7047:tid 7059] [client 4.233.61.201:43255] [client 4.233.61.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xx.php"] [unique_id "adZLFuNh3oGO3pKiCzwMVgAAAYo"]
[Wed Apr 08 20:33:39.451669 2026] [:error] [pid 7047:tid 7059] [client 4.233.61.201:39940] [client 4.233.61.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-mn.php"] [unique_id "adZLI-Nh3oGO3pKiCzwMkwAAAYo"]
[Wed Apr 08 20:34:00.669906 2026] [:error] [pid 64066:tid 64091] [client 4.233.61.201:37464] [client 4.233.61.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/pp.php"] [unique_id "adZLOFR3WucJgr2vZGY5ZwAAAVY"]
[Wed Apr 08 20:34:15.517002 2026] [proxy_fcgi:error] [pid 12490:tid 12509] [client 4.233.61.201:38254] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 20:34:15.771945 2026] [proxy_fcgi:error] [pid 12490:tid 12497] [client 4.233.61.201:38254] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 20:34:16.025603 2026] [proxy_fcgi:error] [pid 12490:tid 12513] [client 4.233.61.201:38254] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 22:21:52.475802 2026] [:error] [pid 12490:tid 12502] [client 68.221.140.17:15872] [client 68.221.140.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adZkgG1Fea4F4fbumr0gTwAAAMo"]
[Wed Apr 08 22:21:52.976720 2026] [:error] [pid 64066:tid 64091] [client 68.221.140.17:12052] [client 68.221.140.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adZkgFR3WucJgr2vZGZnWAAAAVY"]
[Wed Apr 08 22:21:53.501179 2026] [:error] [pid 12453:tid 12456] [client 68.221.140.17:15832] [client 68.221.140.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adZkgRjtW7S6XsLPvrRSSgAAAIE"]
[Wed Apr 08 22:21:53.993710 2026] [:error] [pid 7047:tid 7058] [client 68.221.140.17:15841] [client 68.221.140.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adZkgeNh3oGO3pKiCzw-9wAAAYk"]
[Thu Apr 09 02:35:35.768895 2026] [proxy_fcgi:error] [pid 40460:tid 40478] [client 158.158.121.169:11706] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 07:18:49.944907 2026] [proxy_fcgi:error] [pid 20535:tid 20546] [client 20.63.32.44:33552] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 07:18:50.154432 2026] [proxy_fcgi:error] [pid 20535:tid 20548] [client 20.63.32.44:33552] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 07:18:50.370206 2026] [proxy_fcgi:error] [pid 20535:tid 20558] [client 20.63.32.44:33552] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 07:18:50.580607 2026] [proxy_fcgi:error] [pid 20535:tid 20560] [client 20.63.32.44:33552] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 07:18:50.791200 2026] [proxy_fcgi:error] [pid 20535:tid 20549] [client 20.63.32.44:33552] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 07:18:51.001582 2026] [proxy_fcgi:error] [pid 20535:tid 20561] [client 20.63.32.44:33552] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 07:18:51.208964 2026] [proxy_fcgi:error] [pid 20535:tid 20547] [client 20.63.32.44:33552] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 12:54:38.298920 2026] [proxy_fcgi:error] [pid 24624:tid 24635] [client 20.63.32.44:19455] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 15:01:22.775056 2026] [proxy_fcgi:error] [pid 24927:tid 24940] [client 20.240.63.86:41968] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 15:01:23.216566 2026] [proxy_fcgi:error] [pid 24927:tid 24949] [client 20.240.63.86:41968] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 15:01:23.555582 2026] [proxy_fcgi:error] [pid 24927:tid 24946] [client 20.240.63.86:41968] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 15:01:23.827850 2026] [proxy_fcgi:error] [pid 24927:tid 24931] [client 20.240.63.86:41968] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 15:01:24.094557 2026] [proxy_fcgi:error] [pid 24927:tid 24945] [client 20.240.63.86:41968] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 15:01:24.527222 2026] [proxy_fcgi:error] [pid 24927:tid 24943] [client 20.240.63.86:41968] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 15:01:24.879754 2026] [proxy_fcgi:error] [pid 24927:tid 24950] [client 20.240.63.86:41968] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 15:01:25.197876 2026] [proxy_fcgi:error] [pid 24927:tid 24932] [client 20.240.63.86:41968] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 15:01:25.528177 2026] [proxy_fcgi:error] [pid 24927:tid 24933] [client 20.240.63.86:41968] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 15:01:25.821553 2026] [proxy_fcgi:error] [pid 24927:tid 24938] [client 20.240.63.86:41968] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 15:01:26.157225 2026] [:error] [pid 24927:tid 24935] [client 20.240.63.86:41968] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-cxx.php"] [unique_id "addOxjXObuzEuw8mNJuGRwAAAQU"]
[Thu Apr 09 15:01:27.401926 2026] [:error] [pid 24517:tid 24580] [client 20.240.63.86:41878] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-cxx.php"] [unique_id "addOx3boYEn2ZFM_PS9RpQAAAIY"]
[Thu Apr 09 15:01:28.682956 2026] [:error] [pid 24515:tid 24523] [client 20.240.63.86:43161] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-cxx.php"] [unique_id "addOyK1OMnvM2fMnB1M-WgAAAAQ"]
[Thu Apr 09 15:01:30.595047 2026] [:error] [pid 24515:tid 24526] [client 20.240.63.86:41279] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-cxx.php"] [unique_id "addOyq1OMnvM2fMnB1M-XgAAAAc"]
[Thu Apr 09 15:01:31.926130 2026] [:error] [pid 24927:tid 24947] [client 20.240.63.86:39299] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/water.php"] [unique_id "addOyzXObuzEuw8mNJuGUwAAARE"]
[Thu Apr 09 15:01:33.396280 2026] [:error] [pid 24516:tid 24562] [client 20.240.63.86:43140] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/water.php"] [unique_id "addOzdhW7vSS-UkeWCX9hgAAAE8"]
[Thu Apr 09 15:01:34.176028 2026] [:error] [pid 24927:tid 24953] [client 20.240.63.86:5531] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/water.php"] [unique_id "addOzjXObuzEuw8mNJuGWAAAARc"]
[Thu Apr 09 15:01:35.537306 2026] [:error] [pid 24517:tid 24594] [client 20.240.63.86:41910] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/water.php"] [unique_id "addOz3boYEn2ZFM_PS9RrwAAAJQ"]
[Thu Apr 09 15:01:36.430655 2026] [:error] [pid 24927:tid 24952] [client 20.240.63.86:43899] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/12.php"] [unique_id "addO0DXObuzEuw8mNJuGXAAAARY"]
[Thu Apr 09 15:01:37.356752 2026] [:error] [pid 24927:tid 24940] [client 20.240.63.86:41871] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/12.php"] [unique_id "addO0TXObuzEuw8mNJuGXQAAAQo"]
[Thu Apr 09 15:01:37.988712 2026] [:error] [pid 24516:tid 24566] [client 20.240.63.86:42588] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/12.php"] [unique_id "addO0dhW7vSS-UkeWCX9iwAAAFM"]
[Thu Apr 09 15:01:39.527934 2026] [:error] [pid 24624:tid 24640] [client 20.240.63.86:40615] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/12.php"] [unique_id "addO0-4Jn-WvK1ZBTviGjwAAAM4"]
[Thu Apr 09 15:01:40.914980 2026] [:error] [pid 24927:tid 24937] [client 20.240.63.86:40003] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ggb.php"] [unique_id "addO1DXObuzEuw8mNJuGYQAAAQc"]
[Thu Apr 09 15:01:41.950320 2026] [:error] [pid 24927:tid 24942] [client 20.240.63.86:42512] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ggb.php"] [unique_id "addO1TXObuzEuw8mNJuGZwAAAQw"]
[Thu Apr 09 15:01:43.064198 2026] [:error] [pid 24927:tid 24933] [client 20.240.63.86:43852] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ggb.php"] [unique_id "addO1zXObuzEuw8mNJuGbAAAAQM"]
[Thu Apr 09 15:01:43.949719 2026] [:error] [pid 24927:tid 24949] [client 20.240.63.86:40685] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ggb.php"] [unique_id "addO1zXObuzEuw8mNJuGcgAAARM"]
[Thu Apr 09 15:01:45.722670 2026] [:error] [pid 24927:tid 24945] [client 20.240.63.86:40604] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/13.php"] [unique_id "addO2TXObuzEuw8mNJuGdQAAAQ8"]
[Thu Apr 09 15:01:46.357961 2026] [:error] [pid 24927:tid 24934] [client 20.240.63.86:40643] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/13.php"] [unique_id "addO2jXObuzEuw8mNJuGdwAAAQQ"]
[Thu Apr 09 15:01:47.247195 2026] [:error] [pid 24517:tid 24576] [client 20.240.63.86:43855] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/13.php"] [unique_id "addO23boYEn2ZFM_PS9RuQAAAII"]
[Thu Apr 09 15:01:48.204529 2026] [:error] [pid 24927:tid 24950] [client 20.240.63.86:5558] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/13.php"] [unique_id "addO3DXObuzEuw8mNJuGewAAARQ"]
[Thu Apr 09 15:01:49.109687 2026] [:error] [pid 24624:tid 24635] [client 20.240.63.86:41225] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wert.php"] [unique_id "addO3e4Jn-WvK1ZBTviGlwAAAMk"]
[Thu Apr 09 15:01:50.256112 2026] [:error] [pid 24624:tid 24646] [client 20.240.63.86:5560] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wert.php"] [unique_id "addO3u4Jn-WvK1ZBTviGnAAAANQ"]
[Thu Apr 09 15:01:52.739199 2026] [:error] [pid 24927:tid 24943] [client 20.240.63.86:5522] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wert.php"] [unique_id "addO4DXObuzEuw8mNJuGhQAAAQ0"]
[Thu Apr 09 15:01:56.848182 2026] [:error] [pid 24927:tid 24954] [client 20.240.63.86:41334] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wert.php"] [unique_id "addO5DXObuzEuw8mNJuGhgAAARg"]
[Thu Apr 09 15:02:06.721601 2026] [:error] [pid 24516:tid 24559] [client 20.240.63.86:41263] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/11.php"] [unique_id "addO7thW7vSS-UkeWCX9mwAAAEw"]
[Thu Apr 09 15:02:09.558134 2026] [:error] [pid 24927:tid 24950] [client 20.240.63.86:41896] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/11.php"] [unique_id "addO8TXObuzEuw8mNJuGkgAAARQ"]
[Thu Apr 09 15:02:11.380040 2026] [:error] [pid 24516:tid 24564] [client 20.240.63.86:41981] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/11.php"] [unique_id "addO89hW7vSS-UkeWCX9owAAAFE"]
[Thu Apr 09 15:02:12.148978 2026] [:error] [pid 24517:tid 24584] [client 20.240.63.86:40688] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/11.php"] [unique_id "addO9HboYEn2ZFM_PS9R0gAAAIo"]
[Thu Apr 09 15:02:13.053205 2026] [:error] [pid 24517:tid 24574] [client 20.240.63.86:43850] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/p.php"] [unique_id "addO9XboYEn2ZFM_PS9R1AAAAIA"]
[Thu Apr 09 15:02:14.514301 2026] [:error] [pid 24624:tid 24639] [client 20.240.63.86:5532] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/p.php"] [unique_id "addO9u4Jn-WvK1ZBTviGwgAAAM0"]
[Thu Apr 09 15:02:16.857418 2026] [:error] [pid 24927:tid 24951] [client 20.240.63.86:44452] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/p.php"] [unique_id "addO-DXObuzEuw8mNJuGogAAARU"]
[Thu Apr 09 15:02:18.934793 2026] [:error] [pid 24515:tid 24529] [client 20.240.63.86:41324] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/p.php"] [unique_id "addO-q1OMnvM2fMnB1M-iAAAAAo"]
[Thu Apr 09 15:02:21.408471 2026] [:error] [pid 24515:tid 24519] [client 20.240.63.86:41275] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/oij98gy.php"] [unique_id "addO_a1OMnvM2fMnB1M-iwAAAAA"]
[Thu Apr 09 15:02:22.627317 2026] [:error] [pid 24624:tid 24644] [client 20.240.63.86:5508] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/oij98gy.php"] [unique_id "addO_u4Jn-WvK1ZBTviGxAAAANI"]
[Thu Apr 09 15:02:24.260493 2026] [:error] [pid 24517:tid 24577] [client 20.240.63.86:43208] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/oij98gy.php"] [unique_id "addPAHboYEn2ZFM_PS9R2QAAAIM"]
[Thu Apr 09 15:02:25.202923 2026] [proxy_fcgi:error] [pid 24927:tid 24947] [client 20.240.63.86:44471] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 15:02:25.469524 2026] [proxy_fcgi:error] [pid 24927:tid 24950] [client 20.240.63.86:44471] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 15:02:25.797245 2026] [proxy_fcgi:error] [pid 24927:tid 24942] [client 20.240.63.86:44471] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 15:02:26.177313 2026] [proxy_fcgi:error] [pid 24927:tid 24932] [client 20.240.63.86:44471] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 15:02:26.453734 2026] [proxy_fcgi:error] [pid 24927:tid 24941] [client 20.240.63.86:44471] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 15:02:26.763695 2026] [proxy_fcgi:error] [pid 24927:tid 24935] [client 20.240.63.86:44471] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 15:02:27.031171 2026] [proxy_fcgi:error] [pid 24927:tid 24936] [client 20.240.63.86:44471] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 15:02:27.297435 2026] [proxy_fcgi:error] [pid 24927:tid 24947] [client 20.240.63.86:44471] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 15:02:27.562194 2026] [proxy_fcgi:error] [pid 24927:tid 24933] [client 20.240.63.86:44471] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 15:02:27.881993 2026] [proxy_fcgi:error] [pid 24927:tid 24935] [client 20.240.63.86:44471] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 15:02:28.147516 2026] [proxy_fcgi:error] [pid 24927:tid 24944] [client 20.240.63.86:44471] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 15:02:28.708493 2026] [:error] [pid 24927:tid 24938] [client 20.240.63.86:44471] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/4.php"] [unique_id "addPBDXObuzEuw8mNJuGxQAAAQg"]
[Thu Apr 09 15:02:29.846574 2026] [:error] [pid 24516:tid 24566] [client 20.240.63.86:44422] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/4.php"] [unique_id "addPBdhW7vSS-UkeWCX9qQAAAFM"]
[Thu Apr 09 15:02:30.862695 2026] [:error] [pid 24515:tid 24531] [client 20.240.63.86:43870] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/4.php"] [unique_id "addPBq1OMnvM2fMnB1M-kgAAAAw"]
[Thu Apr 09 15:02:32.020729 2026] [:error] [pid 24515:tid 24526] [client 20.240.63.86:44429] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/4.php"] [unique_id "addPCK1OMnvM2fMnB1M-kwAAAAc"]
[Thu Apr 09 15:02:33.074758 2026] [:error] [pid 24517:tid 24580] [client 20.240.63.86:41876] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/5.php"] [unique_id "addPCXboYEn2ZFM_PS9R7gAAAIY"]
[Thu Apr 09 15:02:33.748726 2026] [:error] [pid 24515:tid 24522] [client 20.240.63.86:42558] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/5.php"] [unique_id "addPCa1OMnvM2fMnB1M-lgAAAAM"]
[Thu Apr 09 15:02:34.388156 2026] [:error] [pid 24515:tid 24525] [client 20.240.63.86:10901] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/5.php"] [unique_id "addPCq1OMnvM2fMnB1M-lwAAAAY"]
[Thu Apr 09 15:02:35.647283 2026] [:error] [pid 24927:tid 24942] [client 20.240.63.86:43894] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/5.php"] [unique_id "addPCzXObuzEuw8mNJuGyQAAAQw"]
[Thu Apr 09 15:02:36.335390 2026] [:error] [pid 24927:tid 24941] [client 20.240.63.86:10413] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/6.php"] [unique_id "addPDDXObuzEuw8mNJuGywAAAQs"]
[Thu Apr 09 15:02:37.837457 2026] [:error] [pid 24516:tid 24562] [client 20.240.63.86:45107] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/6.php"] [unique_id "addPDdhW7vSS-UkeWCX9sAAAAE8"]
[Thu Apr 09 15:02:38.719959 2026] [:error] [pid 24515:tid 24519] [client 20.240.63.86:42546] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/6.php"] [unique_id "addPDq1OMnvM2fMnB1M-mgAAAAA"]
[Thu Apr 09 15:02:39.627060 2026] [:error] [pid 24927:tid 24954] [client 20.240.63.86:43237] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/6.php"] [unique_id "addPDzXObuzEuw8mNJuGzwAAARg"]
[Thu Apr 09 15:02:40.376266 2026] [:error] [pid 24515:tid 24543] [client 20.240.63.86:45152] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/9.php"] [unique_id "addPEK1OMnvM2fMnB1M-mwAAABg"]
[Thu Apr 09 15:02:41.391311 2026] [:error] [pid 24516:tid 24563] [client 20.240.63.86:41874] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/9.php"] [unique_id "addPEdhW7vSS-UkeWCX9sQAAAFA"]
[Thu Apr 09 15:02:42.369317 2026] [:error] [pid 24515:tid 24539] [client 20.240.63.86:41955] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/9.php"] [unique_id "addPEq1OMnvM2fMnB1M-nwAAABQ"]
[Thu Apr 09 15:02:43.450332 2026] [:error] [pid 24515:tid 24528] [client 20.240.63.86:41930] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/9.php"] [unique_id "addPE61OMnvM2fMnB1M-oAAAAAk"]
[Thu Apr 09 15:02:44.405834 2026] [:error] [pid 24927:tid 24945] [client 20.240.63.86:42535] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/10.php"] [unique_id "addPFDXObuzEuw8mNJuG0AAAAQ8"]
[Thu Apr 09 15:02:45.805373 2026] [:error] [pid 24515:tid 24520] [client 20.240.63.86:42590] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/10.php"] [unique_id "addPFa1OMnvM2fMnB1M-owAAAAE"]
[Thu Apr 09 15:02:46.604763 2026] [:error] [pid 24927:tid 24934] [client 20.240.63.86:43247] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/10.php"] [unique_id "addPFjXObuzEuw8mNJuG0gAAAQQ"]
[Thu Apr 09 15:02:47.285171 2026] [:error] [pid 24516:tid 24566] [client 20.240.63.86:43902] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/10.php"] [unique_id "addPF9hW7vSS-UkeWCX9tAAAAFM"]
[Thu Apr 09 15:02:48.483463 2026] [:error] [pid 24624:tid 24630] [client 20.240.63.86:43873] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.mopj.php"] [unique_id "addPGO4Jn-WvK1ZBTviGxQAAAMQ"]
[Thu Apr 09 15:02:49.566844 2026] [:error] [pid 24516:tid 24548] [client 20.240.63.86:5523] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.mopj.php"] [unique_id "addPGdhW7vSS-UkeWCX9tgAAAEE"]
[Thu Apr 09 15:02:51.061023 2026] [:error] [pid 24517:tid 24574] [client 20.240.63.86:44443] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.mopj.php"] [unique_id "addPG3boYEn2ZFM_PS9R8gAAAIA"]
[Thu Apr 09 15:02:51.957970 2026] [:error] [pid 24624:tid 24650] [client 20.240.63.86:41881] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.mopj.php"] [unique_id "addPG-4Jn-WvK1ZBTviGyAAAANg"]
[Thu Apr 09 15:02:52.645633 2026] [:error] [pid 24927:tid 24932] [client 20.240.63.86:45114] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/100.php"] [unique_id "addPHDXObuzEuw8mNJuG1wAAAQI"]
[Thu Apr 09 15:02:53.320400 2026] [:error] [pid 24927:tid 24941] [client 20.240.63.86:10884] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/100.php"] [unique_id "addPHTXObuzEuw8mNJuG2AAAAQs"]
[Thu Apr 09 15:02:54.060409 2026] [:error] [pid 24624:tid 24633] [client 20.240.63.86:42623] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/100.php"] [unique_id "addPHu4Jn-WvK1ZBTviGzQAAAMc"]
[Thu Apr 09 15:02:55.166302 2026] [:error] [pid 24624:tid 24638] [client 20.240.63.86:45765] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/100.php"] [unique_id "addPH-4Jn-WvK1ZBTviGzgAAAMw"]
[Thu Apr 09 15:02:56.110769 2026] [:error] [pid 24516:tid 24553] [client 20.240.63.86:42521] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nano.php"] [unique_id "addPINhW7vSS-UkeWCX9twAAAEY"]
[Thu Apr 09 15:02:57.960199 2026] [:error] [pid 24927:tid 24939] [client 20.240.63.86:43813] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nano.php"] [unique_id "addPITXObuzEuw8mNJuG4AAAAQk"]
[Thu Apr 09 15:02:58.659152 2026] [:error] [pid 24516:tid 24552] [client 20.240.63.86:37814] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nano.php"] [unique_id "addPIthW7vSS-UkeWCX9uQAAAEU"]
[Thu Apr 09 15:02:59.790485 2026] [:error] [pid 24516:tid 24550] [client 20.240.63.86:43833] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nano.php"] [unique_id "addPI9hW7vSS-UkeWCX9uwAAAEM"]
[Thu Apr 09 15:03:00.531452 2026] [:error] [pid 24517:tid 24592] [client 20.240.63.86:43263] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f35_S.php"] [unique_id "addPJHboYEn2ZFM_PS9R9gAAAJI"]
[Thu Apr 09 15:03:02.093994 2026] [:error] [pid 24516:tid 24561] [client 20.240.63.86:41975] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f35_S.php"] [unique_id "addPJthW7vSS-UkeWCX9xQAAAE4"]
[Thu Apr 09 15:03:02.997898 2026] [:error] [pid 24516:tid 24552] [client 20.240.63.86:43251] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f35_S.php"] [unique_id "addPJthW7vSS-UkeWCX9ygAAAEU"]
[Thu Apr 09 15:03:03.835970 2026] [:error] [pid 24516:tid 24557] [client 20.240.63.86:44499] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f35_S.php"] [unique_id "addPJ9hW7vSS-UkeWCX90AAAAEo"]
[Thu Apr 09 15:03:05.217927 2026] [:error] [pid 24927:tid 24930] [client 20.240.63.86:45172] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2026w.php"] [unique_id "addPKTXObuzEuw8mNJuG5wAAAQA"]
[Thu Apr 09 15:03:06.312817 2026] [:error] [pid 24516:tid 24558] [client 20.240.63.86:45162] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2026w.php"] [unique_id "addPKthW7vSS-UkeWCX92wAAAEs"]
[Thu Apr 09 15:03:07.122466 2026] [:error] [pid 24927:tid 24935] [client 20.240.63.86:43830] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2026w.php"] [unique_id "addPKzXObuzEuw8mNJuG6QAAAQU"]
[Thu Apr 09 15:03:07.881498 2026] [:error] [pid 24515:tid 24530] [client 20.240.63.86:10943] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2026w.php"] [unique_id "addPK61OMnvM2fMnB1M-pgAAAAs"]
[Thu Apr 09 15:03:08.815516 2026] [:error] [pid 24927:tid 24953] [client 20.240.63.86:42561] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/111.php"] [unique_id "addPLDXObuzEuw8mNJuG8QAAARc"]
[Thu Apr 09 15:03:09.589215 2026] [:error] [pid 24927:tid 24936] [client 20.240.63.86:45168] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/111.php"] [unique_id "addPLTXObuzEuw8mNJuG8wAAAQY"]
[Thu Apr 09 15:03:10.349804 2026] [:error] [pid 24516:tid 24561] [client 20.240.63.86:45735] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/111.php"] [unique_id "addPLthW7vSS-UkeWCX96wAAAE4"]
[Thu Apr 09 15:03:11.128953 2026] [:error] [pid 24624:tid 24628] [client 20.240.63.86:41936] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/111.php"] [unique_id "addPL-4Jn-WvK1ZBTviG2wAAAMI"]
[Thu Apr 09 15:03:11.717151 2026] [:error] [pid 24515:tid 24542] [client 20.240.63.86:44541] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp1.php"] [unique_id "addPL61OMnvM2fMnB1M-rAAAABc"]
[Thu Apr 09 15:03:12.629910 2026] [:error] [pid 24927:tid 24946] [client 20.240.63.86:43226] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp1.php"] [unique_id "addPMDXObuzEuw8mNJuG9QAAARA"]
[Thu Apr 09 15:03:13.505607 2026] [:error] [pid 24624:tid 24630] [client 20.240.63.86:42527] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp1.php"] [unique_id "addPMe4Jn-WvK1ZBTviG4QAAAMQ"]
[Thu Apr 09 15:03:14.349911 2026] [:error] [pid 24624:tid 24643] [client 20.240.63.86:43179] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp1.php"] [unique_id "addPMu4Jn-WvK1ZBTviG4wAAANE"]
[Thu Apr 09 15:03:15.359360 2026] [:error] [pid 24927:tid 24930] [client 20.240.63.86:42540] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aligk.php"] [unique_id "addPMzXObuzEuw8mNJuG9wAAAQA"]
[Thu Apr 09 15:03:16.329130 2026] [:error] [pid 24624:tid 24646] [client 20.240.63.86:41921] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aligk.php"] [unique_id "addPNO4Jn-WvK1ZBTviG5QAAANQ"]
[Thu Apr 09 15:03:17.281899 2026] [:error] [pid 24624:tid 24633] [client 20.240.63.86:42620] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aligk.php"] [unique_id "addPNe4Jn-WvK1ZBTviG5gAAAMc"]
[Thu Apr 09 15:03:18.213099 2026] [:error] [pid 24624:tid 24648] [client 20.240.63.86:5512] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aligk.php"] [unique_id "addPNu4Jn-WvK1ZBTviG6QAAANY"]
[Thu Apr 09 15:03:19.004075 2026] [:error] [pid 24927:tid 24944] [client 20.240.63.86:5520] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/byrgo.php"] [unique_id "addPNzXObuzEuw8mNJuG_AAAAQ4"]
[Thu Apr 09 15:03:20.048879 2026] [:error] [pid 24927:tid 24942] [client 20.240.63.86:44520] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/byrgo.php"] [unique_id "addPODXObuzEuw8mNJuHAwAAAQw"]
[Thu Apr 09 15:03:20.790390 2026] [:error] [pid 24624:tid 24644] [client 20.240.63.86:43778] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/byrgo.php"] [unique_id "addPOO4Jn-WvK1ZBTviG7gAAANI"]
[Thu Apr 09 15:03:21.465010 2026] [:error] [pid 24516:tid 24555] [client 20.240.63.86:44446] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/byrgo.php"] [unique_id "addPOdhW7vSS-UkeWCX-FAAAAEg"]
[Thu Apr 09 15:03:23.073931 2026] [:error] [pid 24515:tid 24532] [client 20.240.63.86:42538] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xwpg.php"] [unique_id "addPO61OMnvM2fMnB1M-xQAAAA0"]
[Thu Apr 09 15:03:23.874039 2026] [:error] [pid 24517:tid 24574] [client 20.240.63.86:43169] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xwpg.php"] [unique_id "addPO3boYEn2ZFM_PS9R_wAAAIA"]
[Thu Apr 09 15:03:25.071154 2026] [:error] [pid 24517:tid 24581] [client 20.240.63.86:44529] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xwpg.php"] [unique_id "addPPXboYEn2ZFM_PS9SAwAAAIc"]
[Thu Apr 09 15:03:26.438271 2026] [:error] [pid 24927:tid 24939] [client 20.240.63.86:45780] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xwpg.php"] [unique_id "addPPjXObuzEuw8mNJuHJwAAAQk"]
[Thu Apr 09 15:03:27.316578 2026] [:error] [pid 24516:tid 24548] [client 20.240.63.86:44424] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ass.php"] [unique_id "addPP9hW7vSS-UkeWCX-LAAAAEE"]
[Thu Apr 09 15:03:28.266361 2026] [proxy_fcgi:error] [pid 24624:tid 24641] [client 20.240.63.86:45105] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 15:03:28.579144 2026] [proxy_fcgi:error] [pid 24624:tid 24628] [client 20.240.63.86:45105] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 15:03:28.890053 2026] [proxy_fcgi:error] [pid 24624:tid 24630] [client 20.240.63.86:45105] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 15:03:29.156078 2026] [proxy_fcgi:error] [pid 24624:tid 24640] [client 20.240.63.86:45105] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 15:03:29.492620 2026] [proxy_fcgi:error] [pid 24624:tid 24631] [client 20.240.63.86:45105] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 15:03:29.773590 2026] [proxy_fcgi:error] [pid 24624:tid 24635] [client 20.240.63.86:45105] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 15:03:30.079944 2026] [proxy_fcgi:error] [pid 24624:tid 24627] [client 20.240.63.86:45105] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 15:03:30.366190 2026] [proxy_fcgi:error] [pid 24624:tid 24632] [client 20.240.63.86:45105] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 15:03:31.621478 2026] [proxy_fcgi:error] [pid 24624:tid 24643] [client 20.240.63.86:45105] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 15:03:31.968559 2026] [proxy_fcgi:error] [pid 24624:tid 24637] [client 20.240.63.86:45105] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 15:03:32.262144 2026] [proxy_fcgi:error] [pid 24624:tid 24646] [client 20.240.63.86:45105] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 15:03:32.637352 2026] [:error] [pid 24624:tid 24633] [client 20.240.63.86:45105] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sf.php"] [unique_id "addPRO4Jn-WvK1ZBTviHCAAAAMc"]
[Thu Apr 09 15:03:33.823174 2026] [:error] [pid 24624:tid 24650] [client 20.240.63.86:43869] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sf.php"] [unique_id "addPRe4Jn-WvK1ZBTviHCgAAANg"]
[Thu Apr 09 15:03:34.795884 2026] [:error] [pid 24624:tid 24648] [client 20.240.63.86:5528] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sf.php"] [unique_id "addPRu4Jn-WvK1ZBTviHCwAAANY"]
[Thu Apr 09 15:03:35.792290 2026] [:error] [pid 24624:tid 24639] [client 20.240.63.86:43146] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sf.php"] [unique_id "addPR-4Jn-WvK1ZBTviHDgAAAM0"]
[Thu Apr 09 15:03:36.576092 2026] [:error] [pid 24927:tid 24934] [client 20.240.63.86:43138] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/no1.php"] [unique_id "addPSDXObuzEuw8mNJuHPgAAAQQ"]
[Thu Apr 09 15:03:38.130918 2026] [:error] [pid 24517:tid 24586] [client 20.240.63.86:43885] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/no1.php"] [unique_id "addPSnboYEn2ZFM_PS9SFQAAAIw"]
[Thu Apr 09 15:03:39.375016 2026] [:error] [pid 24517:tid 24583] [client 20.240.63.86:43157] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/no1.php"] [unique_id "addPS3boYEn2ZFM_PS9SFgAAAIk"]
[Thu Apr 09 15:03:40.919590 2026] [:error] [pid 24517:tid 24590] [client 20.240.63.86:46408] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/no1.php"] [unique_id "addPTHboYEn2ZFM_PS9SGAAAAJA"]
[Thu Apr 09 15:03:41.625219 2026] [:error] [pid 24517:tid 24591] [client 20.240.63.86:44467] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/w2025.php"] [unique_id "addPTXboYEn2ZFM_PS9SGQAAAJE"]
[Thu Apr 09 15:03:42.767738 2026] [:error] [pid 24515:tid 24531] [client 20.240.63.86:45082] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/w2025.php"] [unique_id "addPTq1OMnvM2fMnB1M-0wAAAAw"]
[Thu Apr 09 15:03:43.491179 2026] [:error] [pid 24927:tid 24933] [client 20.240.63.86:45118] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/w2025.php"] [unique_id "addPTzXObuzEuw8mNJuHRwAAAQM"]
[Thu Apr 09 15:03:44.151019 2026] [:error] [pid 24516:tid 24552] [client 20.240.63.86:44461] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/w2025.php"] [unique_id "addPUNhW7vSS-UkeWCX-YwAAAEU"]
[Thu Apr 09 15:03:44.940554 2026] [:error] [pid 24927:tid 24953] [client 20.240.63.86:10917] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fvvff.php"] [unique_id "addPUDXObuzEuw8mNJuHTAAAARc"]
[Thu Apr 09 15:03:45.599665 2026] [:error] [pid 24927:tid 24945] [client 20.240.63.86:44532] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fvvff.php"] [unique_id "addPUTXObuzEuw8mNJuHTgAAAQ8"]
[Thu Apr 09 15:03:46.229146 2026] [:error] [pid 24517:tid 24593] [client 20.240.63.86:44492] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fvvff.php"] [unique_id "addPUnboYEn2ZFM_PS9SGwAAAJM"]
[Thu Apr 09 15:03:47.098439 2026] [:error] [pid 24624:tid 24639] [client 20.240.63.86:43148] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fvvff.php"] [unique_id "addPU-4Jn-WvK1ZBTviHGgAAAM0"]
[Thu Apr 09 15:03:47.685616 2026] [:error] [pid 24624:tid 24641] [client 20.240.63.86:5545] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a2.php"] [unique_id "addPU-4Jn-WvK1ZBTviHHAAAAM8"]
[Thu Apr 09 15:03:48.266617 2026] [:error] [pid 24927:tid 24932] [client 20.240.63.86:45761] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a2.php"] [unique_id "addPVDXObuzEuw8mNJuHUAAAAQI"]
[Thu Apr 09 15:03:49.136843 2026] [:error] [pid 24927:tid 24935] [client 20.240.63.86:10373] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a2.php"] [unique_id "addPVTXObuzEuw8mNJuHVAAAAQU"]
[Thu Apr 09 15:03:50.104123 2026] [:error] [pid 24515:tid 24524] [client 20.240.63.86:40613] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a2.php"] [unique_id "addPVq1OMnvM2fMnB1M-1gAAAAU"]
[Thu Apr 09 15:03:51.348832 2026] [:error] [pid 24624:tid 24647] [client 20.240.63.86:43880] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/edit.php"] [unique_id "addPV-4Jn-WvK1ZBTviHHgAAANU"]
[Thu Apr 09 15:03:52.056191 2026] [:error] [pid 24927:tid 24952] [client 20.240.63.86:10420] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/edit.php"] [unique_id "addPWDXObuzEuw8mNJuHXQAAARY"]
[Thu Apr 09 15:03:52.883503 2026] [:error] [pid 24927:tid 24930] [client 20.240.63.86:40653] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/edit.php"] [unique_id "addPWDXObuzEuw8mNJuHYAAAAQA"]
[Thu Apr 09 15:03:53.951732 2026] [:error] [pid 24927:tid 24950] [client 20.240.63.86:46340] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/edit.php"] [unique_id "addPWTXObuzEuw8mNJuHZAAAARQ"]
[Thu Apr 09 15:03:54.698324 2026] [:error] [pid 24927:tid 24937] [client 20.240.63.86:43783] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ioxi-o.php"] [unique_id "addPWjXObuzEuw8mNJuHaQAAAQc"]
[Thu Apr 09 15:03:55.497307 2026] [:error] [pid 24927:tid 24947] [client 20.240.63.86:47068] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ioxi-o.php"] [unique_id "addPWzXObuzEuw8mNJuHagAAARE"]
[Thu Apr 09 15:03:56.599602 2026] [:error] [pid 24927:tid 24935] [client 20.240.63.86:45142] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ioxi-o.php"] [unique_id "addPXDXObuzEuw8mNJuHcwAAAQU"]
[Thu Apr 09 15:03:58.640092 2026] [:error] [pid 24624:tid 24644] [client 20.240.63.86:43785] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ioxi-o.php"] [unique_id "addPXu4Jn-WvK1ZBTviHIQAAANI"]
[Thu Apr 09 15:03:59.227824 2026] [:error] [pid 24927:tid 24932] [client 20.240.63.86:10430] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "addPXzXObuzEuw8mNJuHeQAAAQI"]
[Thu Apr 09 15:04:00.459763 2026] [:error] [pid 24927:tid 24945] [client 20.240.63.86:47103] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "addPYDXObuzEuw8mNJuHfgAAAQ8"]
[Thu Apr 09 15:04:01.962919 2026] [:error] [pid 24624:tid 24646] [client 20.240.63.86:45161] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "addPYe4Jn-WvK1ZBTviHJgAAANQ"]
[Thu Apr 09 15:04:02.837598 2026] [:error] [pid 24516:tid 24548] [client 20.240.63.86:5538] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "addPYthW7vSS-UkeWCX-ZgAAAEE"]
[Thu Apr 09 15:04:04.203180 2026] [:error] [pid 24516:tid 24559] [client 20.240.63.86:45816] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/66.php"] [unique_id "addPZNhW7vSS-UkeWCX-aQAAAEw"]
[Thu Apr 09 15:04:05.286454 2026] [:error] [pid 24517:tid 24590] [client 20.240.63.86:10405] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/66.php"] [unique_id "addPZXboYEn2ZFM_PS9SKQAAAJA"]
[Thu Apr 09 15:04:07.325818 2026] [:error] [pid 24516:tid 24563] [client 20.240.63.86:43793] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/66.php"] [unique_id "addPZ9hW7vSS-UkeWCX-bAAAAFA"]
[Thu Apr 09 15:04:09.511635 2026] [:error] [pid 24516:tid 24561] [client 20.240.63.86:45091] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/66.php"] [unique_id "addPadhW7vSS-UkeWCX-bgAAAE4"]
[Thu Apr 09 15:04:14.718615 2026] [:error] [pid 24516:tid 24552] [client 20.240.63.86:5564] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a5.php"] [unique_id "addPbthW7vSS-UkeWCX-dgAAAEU"]
[Thu Apr 09 15:04:16.004675 2026] [:error] [pid 24516:tid 24547] [client 20.240.63.86:46369] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a5.php"] [unique_id "addPcNhW7vSS-UkeWCX-dwAAAEA"]
[Thu Apr 09 15:04:16.993368 2026] [:error] [pid 24516:tid 24553] [client 20.240.63.86:47032] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a5.php"] [unique_id "addPcNhW7vSS-UkeWCX-eQAAAEY"]
[Thu Apr 09 15:04:17.689451 2026] [:error] [pid 24515:tid 24530] [client 20.240.63.86:10894] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a5.php"] [unique_id "addPca1OMnvM2fMnB1M-3wAAAAs"]
[Thu Apr 09 15:04:18.748678 2026] [:error] [pid 24516:tid 24565] [client 20.240.63.86:10397] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ol.php"] [unique_id "addPcthW7vSS-UkeWCX-ewAAAFI"]
[Thu Apr 09 15:04:19.530129 2026] [:error] [pid 24515:tid 24539] [client 20.240.63.86:43250] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ol.php"] [unique_id "addPc61OMnvM2fMnB1M-4AAAABQ"]
[Thu Apr 09 15:04:20.243875 2026] [:error] [pid 24516:tid 24562] [client 20.240.63.86:45822] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ol.php"] [unique_id "addPdNhW7vSS-UkeWCX-fAAAAE8"]
[Thu Apr 09 15:04:21.176791 2026] [:error] [pid 24927:tid 24941] [client 20.240.63.86:43804] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ol.php"] [unique_id "addPdTXObuzEuw8mNJuHiAAAAQs"]
[Thu Apr 09 15:04:22.028853 2026] [:error] [pid 24927:tid 24933] [client 20.240.63.86:45758] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f6.php"] [unique_id "addPdjXObuzEuw8mNJuHiwAAAQM"]
[Thu Apr 09 15:04:22.826581 2026] [:error] [pid 24515:tid 24523] [client 20.240.63.86:45775] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f6.php"] [unique_id "addPdq1OMnvM2fMnB1M-4wAAAAQ"]
[Thu Apr 09 15:04:23.734380 2026] [:error] [pid 24515:tid 24532] [client 20.240.63.86:46412] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f6.php"] [unique_id "addPd61OMnvM2fMnB1M-5AAAAA0"]
[Thu Apr 09 15:04:24.651751 2026] [:error] [pid 24624:tid 24636] [client 20.240.63.86:45140] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f6.php"] [unique_id "addPeO4Jn-WvK1ZBTviHQQAAAMo"]
[Thu Apr 09 15:04:25.584307 2026] [:error] [pid 24517:tid 24593] [client 20.240.63.86:44510] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/inputs.php"] [unique_id "addPeXboYEn2ZFM_PS9SXAAAAJM"]
[Thu Apr 09 15:04:26.529291 2026] [:error] [pid 24517:tid 24589] [client 20.240.63.86:39952] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/inputs.php"] [unique_id "addPenboYEn2ZFM_PS9SYgAAAI8"]
[Thu Apr 09 15:04:27.451897 2026] [:error] [pid 24624:tid 24641] [client 20.240.63.86:43871] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/inputs.php"] [unique_id "addPe-4Jn-WvK1ZBTviHVgAAAM8"]
[Thu Apr 09 15:04:28.255051 2026] [:error] [pid 24927:tid 24935] [client 20.240.63.86:10421] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/inputs.php"] [unique_id "addPfDXObuzEuw8mNJuHkQAAAQU"]
[Thu Apr 09 15:04:28.966513 2026] [:error] [pid 24927:tid 24938] [client 20.240.63.86:45175] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/style.php"] [unique_id "addPfDXObuzEuw8mNJuHlQAAAQg"]
[Thu Apr 09 15:04:32.569066 2026] [proxy_fcgi:error] [pid 24624:tid 24627] [client 20.240.63.86:46450] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 15:04:32.885042 2026] [proxy_fcgi:error] [pid 24624:tid 24648] [client 20.240.63.86:46450] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 15:04:33.191781 2026] [proxy_fcgi:error] [pid 24624:tid 24639] [client 20.240.63.86:46450] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 15:04:33.802909 2026] [proxy_fcgi:error] [pid 24624:tid 24628] [client 20.240.63.86:46450] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 15:04:34.205327 2026] [proxy_fcgi:error] [pid 24624:tid 24650] [client 20.240.63.86:46450] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 15:04:34.735644 2026] [proxy_fcgi:error] [pid 24624:tid 24644] [client 20.240.63.86:46450] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 15:04:35.346169 2026] [proxy_fcgi:error] [pid 24624:tid 24636] [client 20.240.63.86:46450] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 15:04:35.998108 2026] [proxy_fcgi:error] [pid 24624:tid 24641] [client 20.240.63.86:46450] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 15:04:36.265111 2026] [proxy_fcgi:error] [pid 24624:tid 24635] [client 20.240.63.86:46450] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 15:04:36.821675 2026] [:error] [pid 24624:tid 24633] [client 20.240.63.86:46450] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tinyfilemanager.php"] [unique_id "addPhO4Jn-WvK1ZBTviHbQAAAMc"]
[Thu Apr 09 15:04:38.672651 2026] [:error] [pid 24516:tid 24564] [client 20.240.63.86:47049] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tinyfilemanager.php"] [unique_id "addPhthW7vSS-UkeWCX-iAAAAFE"]
[Thu Apr 09 15:04:41.197374 2026] [:error] [pid 24517:tid 24595] [client 20.240.63.86:47063] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tinyfilemanager.php"] [unique_id "addPiXboYEn2ZFM_PS9SeQAAAJU"]
[Thu Apr 09 15:04:42.041901 2026] [:error] [pid 24517:tid 24592] [client 20.240.63.86:46463] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tinyfilemanager.php"] [unique_id "addPinboYEn2ZFM_PS9SegAAAJI"]
[Thu Apr 09 15:04:42.998848 2026] [:error] [pid 24517:tid 24574] [client 20.240.63.86:10412] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-update.php"] [unique_id "addPinboYEn2ZFM_PS9SfgAAAIA"]
[Thu Apr 09 15:04:44.433336 2026] [:error] [pid 24515:tid 24523] [client 20.240.63.86:46976] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-update.php"] [unique_id "addPjK1OMnvM2fMnB1M-7wAAAAQ"]
[Thu Apr 09 15:04:45.649572 2026] [:error] [pid 24517:tid 24590] [client 20.240.63.86:44521] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-update.php"] [unique_id "addPjXboYEn2ZFM_PS9SgAAAAJA"]
[Thu Apr 09 15:04:46.406085 2026] [:error] [pid 24927:tid 24934] [client 20.240.63.86:47058] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-update.php"] [unique_id "addPjjXObuzEuw8mNJuHuAAAAQQ"]
[Thu Apr 09 15:04:47.138039 2026] [:error] [pid 24927:tid 24937] [client 20.240.63.86:44432] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sbhu.php"] [unique_id "addPjzXObuzEuw8mNJuHuwAAAQc"]
[Thu Apr 09 15:04:48.320072 2026] [:error] [pid 24927:tid 24930] [client 20.240.63.86:45163] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sbhu.php"] [unique_id "addPkDXObuzEuw8mNJuHvwAAAQA"]
[Thu Apr 09 15:04:48.959777 2026] [:error] [pid 24927:tid 24948] [client 20.240.63.86:46396] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sbhu.php"] [unique_id "addPkDXObuzEuw8mNJuHwgAAARI"]
[Thu Apr 09 15:04:51.766366 2026] [:error] [pid 24624:tid 24642] [client 20.240.63.86:10924] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sbhu.php"] [unique_id "addPk-4Jn-WvK1ZBTviHbwAAANA"]
[Thu Apr 09 15:04:53.929326 2026] [:error] [pid 24624:tid 24639] [client 20.240.63.86:10932] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-blog.php"] [unique_id "addPle4Jn-WvK1ZBTviHcwAAAM0"]
[Thu Apr 09 15:04:55.202618 2026] [:error] [pid 24515:tid 24527] [client 20.240.63.86:40676] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-blog.php"] [unique_id "addPl61OMnvM2fMnB1M-9gAAAAg"]
[Thu Apr 09 15:04:56.232618 2026] [:error] [pid 24516:tid 24565] [client 20.240.63.86:45800] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-blog.php"] [unique_id "addPmNhW7vSS-UkeWCX-lAAAAFI"]
[Thu Apr 09 15:04:58.606961 2026] [:error] [pid 24515:tid 24534] [client 20.240.63.86:45154] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-blog.php"] [unique_id "addPmq1OMnvM2fMnB1M--QAAAA8"]
[Thu Apr 09 15:04:59.607082 2026] [:error] [pid 24516:tid 24563] [client 20.240.63.86:5527] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "addPm9hW7vSS-UkeWCX-lgAAAFA"]
[Thu Apr 09 15:05:00.856163 2026] [:error] [pid 24515:tid 24532] [client 20.240.63.86:45116] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "addPnK1OMnvM2fMnB1M-_AAAAA0"]
[Thu Apr 09 15:05:02.040527 2026] [:error] [pid 24516:tid 24566] [client 20.240.63.86:46399] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "addPnthW7vSS-UkeWCX-mgAAAFM"]
[Thu Apr 09 15:05:03.018175 2026] [:error] [pid 24624:tid 24634] [client 20.240.63.86:45820] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "addPn-4Jn-WvK1ZBTviHgAAAAMg"]
[Thu Apr 09 15:05:04.131967 2026] [:error] [pid 24517:tid 24579] [client 20.240.63.86:47078] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "addPoHboYEn2ZFM_PS9SkwAAAIU"]
[Thu Apr 09 15:05:04.857474 2026] [:error] [pid 24517:tid 24597] [client 20.240.63.86:48367] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "addPoHboYEn2ZFM_PS9SlQAAAJc"]
[Thu Apr 09 15:05:05.915531 2026] [:error] [pid 24517:tid 24585] [client 20.240.63.86:47782] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "addPoXboYEn2ZFM_PS9SmAAAAIs"]
[Thu Apr 09 15:05:06.819727 2026] [:error] [pid 24515:tid 24528] [client 20.240.63.86:5519] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "addPoq1OMnvM2fMnB1M_DQAAAAk"]
[Thu Apr 09 15:05:07.660622 2026] [:error] [pid 24515:tid 24520] [client 20.240.63.86:44473] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ms-edit.php"] [unique_id "addPo61OMnvM2fMnB1M_EQAAAAE"]
[Thu Apr 09 15:05:08.586291 2026] [:error] [pid 24927:tid 24940] [client 20.240.63.86:48313] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ms-edit.php"] [unique_id "addPpDXObuzEuw8mNJuH1QAAAQo"]
[Thu Apr 09 15:05:09.478500 2026] [:error] [pid 24927:tid 24943] [client 20.240.63.86:40043] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ms-edit.php"] [unique_id "addPpTXObuzEuw8mNJuH2wAAAQ0"]
[Thu Apr 09 15:05:11.321879 2026] [:error] [pid 24927:tid 24954] [client 20.240.63.86:46449] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ms-edit.php"] [unique_id "addPpzXObuzEuw8mNJuH3gAAARg"]
[Thu Apr 09 15:05:12.178043 2026] [:error] [pid 24624:tid 24639] [client 20.240.63.86:42610] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/adminfuns.php"] [unique_id "addPqO4Jn-WvK1ZBTviHmQAAAM0"]
[Thu Apr 09 15:05:12.994312 2026] [:error] [pid 24516:tid 24558] [client 20.240.63.86:47008] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/adminfuns.php"] [unique_id "addPqNhW7vSS-UkeWCX-ogAAAEs"]
[Thu Apr 09 15:05:14.907937 2026] [:error] [pid 24516:tid 24564] [client 20.240.63.86:44527] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/adminfuns.php"] [unique_id "addPqthW7vSS-UkeWCX-pQAAAFE"]
[Thu Apr 09 15:05:15.683531 2026] [:error] [pid 24516:tid 24563] [client 20.240.63.86:46346] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/adminfuns.php"] [unique_id "addPq9hW7vSS-UkeWCX-pgAAAFA"]
[Thu Apr 09 15:05:16.742717 2026] [:error] [pid 24517:tid 24592] [client 20.240.63.86:45081] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/goods.php"] [unique_id "addPrHboYEn2ZFM_PS9SoQAAAJI"]
[Thu Apr 09 15:05:18.769205 2026] [:error] [pid 24927:tid 24948] [client 20.240.63.86:47832] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/goods.php"] [unique_id "addPrjXObuzEuw8mNJuH4QAAARI"]
[Thu Apr 09 15:05:19.680921 2026] [:error] [pid 24927:tid 24944] [client 20.240.63.86:47789] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/goods.php"] [unique_id "addPrzXObuzEuw8mNJuH4wAAAQ4"]
[Thu Apr 09 15:05:20.757094 2026] [:error] [pid 24517:tid 24578] [client 20.240.63.86:47761] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/goods.php"] [unique_id "addPsHboYEn2ZFM_PS9SogAAAIQ"]
[Thu Apr 09 15:05:21.817488 2026] [:error] [pid 24517:tid 24584] [client 20.240.63.86:10936] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ms-edit.php"] [unique_id "addPsXboYEn2ZFM_PS9SowAAAIo"]
[Thu Apr 09 15:05:23.538885 2026] [:error] [pid 24517:tid 24575] [client 20.240.63.86:45074] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ms-edit.php"] [unique_id "addPs3boYEn2ZFM_PS9SpQAAAIE"]
[Thu Apr 09 15:05:24.525034 2026] [:error] [pid 24516:tid 24569] [client 20.240.63.86:48356] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ms-edit.php"] [unique_id "addPtNhW7vSS-UkeWCX-pwAAAFY"]
[Thu Apr 09 15:05:25.797194 2026] [:error] [pid 24927:tid 24931] [client 20.240.63.86:10896] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ms-edit.php"] [unique_id "addPtTXObuzEuw8mNJuH5AAAAQE"]
[Thu Apr 09 15:05:26.634132 2026] [:error] [pid 24515:tid 24535] [client 20.240.63.86:41275] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/222.php"] [unique_id "addPtq1OMnvM2fMnB1M_QwAAABA"]
[Thu Apr 09 15:05:27.554054 2026] [:error] [pid 24624:tid 24639] [client 20.240.63.86:46368] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/222.php"] [unique_id "addPt-4Jn-WvK1ZBTviHoQAAAM0"]
[Thu Apr 09 15:05:28.538252 2026] [:error] [pid 24624:tid 24633] [client 20.240.63.86:46994] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/222.php"] [unique_id "addPuO4Jn-WvK1ZBTviHpAAAAMc"]
[Thu Apr 09 15:05:29.766323 2026] [:error] [pid 24516:tid 24570] [client 20.240.63.86:47796] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/222.php"] [unique_id "addPudhW7vSS-UkeWCX-qAAAAFc"]
[Thu Apr 09 15:05:30.965400 2026] [:error] [pid 24517:tid 24596] [client 20.240.63.86:20893] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cgi-bin/index.php"] [unique_id "addPunboYEn2ZFM_PS9SqgAAAJY"]
[Thu Apr 09 15:05:32.008354 2026] [:error] [pid 24517:tid 24574] [client 20.240.63.86:46999] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cgi-bin/index.php"] [unique_id "addPvHboYEn2ZFM_PS9SrAAAAIA"]
[Thu Apr 09 15:05:32.977748 2026] [:error] [pid 24517:tid 24581] [client 20.240.63.86:47853] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cgi-bin/index.php"] [unique_id "addPvHboYEn2ZFM_PS9SrwAAAIc"]
[Thu Apr 09 15:05:33.959423 2026] [:error] [pid 24517:tid 24578] [client 20.240.63.86:17758] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cgi-bin/index.php"] [unique_id "addPvXboYEn2ZFM_PS9SsQAAAIQ"]
[Thu Apr 09 15:05:34.751846 2026] [:error] [pid 24517:tid 24577] [client 20.240.63.86:46360] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fff.php"] [unique_id "addPvnboYEn2ZFM_PS9SswAAAIM"]
[Thu Apr 09 15:05:35.972566 2026] [:error] [pid 24515:tid 24525] [client 20.240.63.86:46336] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fff.php"] [unique_id "addPv61OMnvM2fMnB1M_SwAAAAY"]
[Thu Apr 09 15:05:37.418584 2026] [proxy_fcgi:error] [pid 24517:tid 24580] [client 20.240.63.86:17354] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 15:05:37.957580 2026] [proxy_fcgi:error] [pid 24517:tid 24576] [client 20.240.63.86:17354] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 15:05:38.296351 2026] [proxy_fcgi:error] [pid 24517:tid 24594] [client 20.240.63.86:17354] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 15:05:38.615908 2026] [proxy_fcgi:error] [pid 24517:tid 24591] [client 20.240.63.86:17354] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 15:05:38.902661 2026] [proxy_fcgi:error] [pid 24517:tid 24593] [client 20.240.63.86:17354] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 15:05:39.229745 2026] [proxy_fcgi:error] [pid 24517:tid 24598] [client 20.240.63.86:17354] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 15:05:40.015168 2026] [proxy_fcgi:error] [pid 24517:tid 24582] [client 20.240.63.86:17354] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 15:05:40.583994 2026] [proxy_fcgi:error] [pid 24517:tid 24579] [client 20.240.63.86:17354] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 15:05:40.850953 2026] [:error] [pid 24517:tid 24592] [client 20.240.63.86:17354] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp.php"] [unique_id "addPxHboYEn2ZFM_PS9SwAAAAJI"]
[Thu Apr 09 15:05:42.653555 2026] [:error] [pid 24515:tid 24539] [client 20.240.63.86:45081] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp.php"] [unique_id "addPxq1OMnvM2fMnB1M_UAAAABQ"]
[Thu Apr 09 15:05:44.071640 2026] [:error] [pid 24515:tid 24528] [client 20.240.63.86:48946] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp.php"] [unique_id "addPyK1OMnvM2fMnB1M_UgAAAAk"]
[Thu Apr 09 15:05:46.357551 2026] [:error] [pid 24927:tid 24953] [client 20.240.63.86:20870] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp.php"] [unique_id "addPyjXObuzEuw8mNJuH6gAAARc"]
[Thu Apr 09 15:05:47.153205 2026] [:error] [pid 24624:tid 24642] [client 20.240.63.86:47835] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "addPy-4Jn-WvK1ZBTviHvwAAANA"]
[Thu Apr 09 15:05:47.968377 2026] [:error] [pid 24516:tid 24567] [client 20.240.63.86:16222] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "addPy9hW7vSS-UkeWCX-wQAAAFQ"]
[Thu Apr 09 15:05:48.821324 2026] [:error] [pid 24517:tid 24578] [client 20.240.63.86:47050] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "addPzHboYEn2ZFM_PS9SxAAAAIQ"]
[Thu Apr 09 15:05:49.773084 2026] [:error] [pid 24515:tid 24529] [client 20.240.63.86:43208] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "addPza1OMnvM2fMnB1M_XAAAAAo"]
[Thu Apr 09 15:05:50.663457 2026] [:error] [pid 24515:tid 24537] [client 20.240.63.86:14846] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fe5.php"] [unique_id "addPzq1OMnvM2fMnB1M_XgAAABI"]
[Thu Apr 09 15:05:51.564394 2026] [:error] [pid 24927:tid 24952] [client 20.240.63.86:47011] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fe5.php"] [unique_id "addPzzXObuzEuw8mNJuH7gAAARY"]
[Thu Apr 09 15:05:52.563858 2026] [:error] [pid 24927:tid 24948] [client 20.240.63.86:47051] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fe5.php"] [unique_id "addP0DXObuzEuw8mNJuH7wAAARI"]
[Thu Apr 09 15:05:54.749764 2026] [:error] [pid 24927:tid 24943] [client 20.240.63.86:48985] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fe5.php"] [unique_id "addP0jXObuzEuw8mNJuH9gAAAQ0"]
[Thu Apr 09 15:05:56.304344 2026] [:error] [pid 24517:tid 24593] [client 20.240.63.86:16246] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "addP1HboYEn2ZFM_PS9SygAAAJM"]
[Thu Apr 09 15:05:57.991036 2026] [:error] [pid 24927:tid 24939] [client 20.240.63.86:17385] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "addP1TXObuzEuw8mNJuH-gAAAQk"]
[Thu Apr 09 15:06:00.867569 2026] [:error] [pid 24516:tid 24554] [client 20.240.63.86:16548] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "addP2NhW7vSS-UkeWCX-zwAAAEc"]
[Thu Apr 09 15:06:02.582208 2026] [:error] [pid 24624:tid 24642] [client 20.240.63.86:48259] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "addP2u4Jn-WvK1ZBTviHyQAAANA"]
[Thu Apr 09 15:06:04.307575 2026] [:error] [pid 24516:tid 24560] [client 20.240.63.86:48904] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/av.php"] [unique_id "addP3NhW7vSS-UkeWCX-0wAAAE0"]
[Thu Apr 09 15:06:05.921379 2026] [:error] [pid 24624:tid 24640] [client 20.240.63.86:47775] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/av.php"] [unique_id "addP3e4Jn-WvK1ZBTviHywAAAM4"]
[Thu Apr 09 15:06:06.674191 2026] [:error] [pid 24515:tid 24526] [client 20.240.63.86:47766] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/av.php"] [unique_id "addP3q1OMnvM2fMnB1M_ZAAAAAc"]
[Thu Apr 09 15:06:08.145112 2026] [:error] [pid 24927:tid 24937] [client 20.240.63.86:49550] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/av.php"] [unique_id "addP4DXObuzEuw8mNJuIBAAAAQc"]
[Thu Apr 09 15:06:12.437463 2026] [:error] [pid 24517:tid 24576] [client 20.240.63.86:12494] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/abcd.php"] [unique_id "addP5HboYEn2ZFM_PS9S1AAAAII"]
[Thu Apr 09 15:06:20.225133 2026] [:error] [pid 24624:tid 24634] [client 20.240.63.86:20927] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/abcd.php"] [unique_id "addP7O4Jn-WvK1ZBTviH3AAAAMg"]
[Thu Apr 09 15:06:56.829191 2026] [proxy_fcgi:error] [pid 24624:tid 24635] [client 20.240.63.86:15859] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 15:06:57.521863 2026] [:error] [pid 24624:tid 24628] [client 20.240.63.86:15859] [client 20.240.63.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "addQEe4Jn-WvK1ZBTviH_QAAAMI"]
[Thu Apr 09 15:06:59.432451 2026] [proxy_fcgi:error] [pid 24624:tid 24629] [client 20.240.63.86:15395] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 15:07:00.337743 2026] [proxy_fcgi:error] [pid 24624:tid 24626] [client 20.240.63.86:15395] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 15:07:00.807275 2026] [proxy_fcgi:error] [pid 24624:tid 24637] [client 20.240.63.86:15395] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 15:07:01.075627 2026] [proxy_fcgi:error] [pid 24624:tid 24633] [client 20.240.63.86:15395] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 15:07:01.392721 2026] [proxy_fcgi:error] [pid 24624:tid 24638] [client 20.240.63.86:15395] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 15:07:01.668424 2026] [proxy_fcgi:error] [pid 24624:tid 24640] [client 20.240.63.86:15395] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 15:07:01.971890 2026] [proxy_fcgi:error] [pid 24624:tid 24645] [client 20.240.63.86:15395] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 15:07:02.236759 2026] [:error] [pid 24624:tid 24632] [client 20.240.63.86:15395] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/motu.php"] [unique_id "addQFu4Jn-WvK1ZBTviICQAAAMY"]
[Thu Apr 09 15:07:03.623695 2026] [:error] [pid 24517:tid 24587] [client 20.240.63.86:5250] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/motu.php"] [unique_id "addQF3boYEn2ZFM_PS9S8gAAAI0"]
[Thu Apr 09 15:07:04.586884 2026] [:error] [pid 24927:tid 24941] [client 20.240.63.86:10458] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/motu.php"] [unique_id "addQGDXObuzEuw8mNJuINQAAAQs"]
[Thu Apr 09 15:07:05.309639 2026] [:error] [pid 24517:tid 24582] [client 20.240.63.86:50363] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/motu.php"] [unique_id "addQGXboYEn2ZFM_PS9S9AAAAIg"]
[Thu Apr 09 15:07:06.049324 2026] [:error] [pid 24624:tid 24643] [client 20.240.63.86:10472] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bs1.php"] [unique_id "addQGu4Jn-WvK1ZBTviICgAAANE"]
[Thu Apr 09 15:07:06.923310 2026] [:error] [pid 24927:tid 24932] [client 20.240.63.86:14066] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bs1.php"] [unique_id "addQGjXObuzEuw8mNJuIOQAAAQI"]
[Thu Apr 09 15:07:07.644102 2026] [:error] [pid 24927:tid 24935] [client 20.240.63.86:50319] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bs1.php"] [unique_id "addQGzXObuzEuw8mNJuIPAAAAQU"]
[Thu Apr 09 15:07:08.574139 2026] [:error] [pid 24517:tid 24596] [client 20.240.63.86:14041] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bs1.php"] [unique_id "addQHHboYEn2ZFM_PS9S9QAAAJY"]
[Thu Apr 09 15:07:09.856395 2026] [:error] [pid 24927:tid 24950] [client 20.240.63.86:5306] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bengi.php"] [unique_id "addQHTXObuzEuw8mNJuIPgAAARQ"]
[Thu Apr 09 15:07:10.804068 2026] [:error] [pid 24624:tid 24649] [client 20.240.63.86:15368] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bengi.php"] [unique_id "addQHu4Jn-WvK1ZBTviIDwAAANc"]
[Thu Apr 09 15:07:11.516830 2026] [:error] [pid 24927:tid 24931] [client 20.240.63.86:13043] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bengi.php"] [unique_id "addQHzXObuzEuw8mNJuIQAAAAQE"]
[Thu Apr 09 15:07:12.324473 2026] [:error] [pid 24927:tid 24937] [client 20.240.63.86:10956] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bengi.php"] [unique_id "addQIDXObuzEuw8mNJuIRQAAAQc"]
[Thu Apr 09 15:07:13.312517 2026] [:error] [pid 24517:tid 24586] [client 20.240.63.86:10953] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "addQIXboYEn2ZFM_PS9S-AAAAIw"]
[Thu Apr 09 15:07:14.840144 2026] [:error] [pid 24517:tid 24595] [client 20.240.63.86:16601] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "addQInboYEn2ZFM_PS9S-wAAAJU"]
[Thu Apr 09 15:07:15.419609 2026] [:error] [pid 24624:tid 24626] [client 20.240.63.86:5237] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "addQI-4Jn-WvK1ZBTviIEgAAAMA"]
[Thu Apr 09 15:07:16.798960 2026] [:error] [pid 24517:tid 24577] [client 20.240.63.86:16578] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "addQJHboYEn2ZFM_PS9S_QAAAIM"]
[Thu Apr 09 15:07:17.845955 2026] [:error] [pid 24624:tid 24638] [client 20.240.63.86:12735] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/axx.php"] [unique_id "addQJe4Jn-WvK1ZBTviIFQAAAMw"]
[Thu Apr 09 15:07:18.456687 2026] [:error] [pid 24624:tid 24627] [client 20.240.63.86:50816] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/axx.php"] [unique_id "addQJu4Jn-WvK1ZBTviIFwAAAME"]
[Thu Apr 09 15:07:19.325877 2026] [:error] [pid 24516:tid 24547] [client 20.240.63.86:11945] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/axx.php"] [unique_id "addQJ9hW7vSS-UkeWCX-7AAAAEA"]
[Thu Apr 09 15:07:22.561361 2026] [:error] [pid 24517:tid 24575] [client 20.240.63.86:12238] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/axx.php"] [unique_id "addQKnboYEn2ZFM_PS9TAQAAAIE"]
[Thu Apr 09 15:07:23.407848 2026] [:error] [pid 24927:tid 24945] [client 20.240.63.86:5940] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/alfashell.php"] [unique_id "addQKzXObuzEuw8mNJuIVQAAAQ8"]
[Thu Apr 09 15:07:24.529684 2026] [:error] [pid 24927:tid 24950] [client 20.240.63.86:50412] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/alfashell.php"] [unique_id "addQLDXObuzEuw8mNJuIVwAAARQ"]
[Thu Apr 09 15:07:25.723530 2026] [:error] [pid 24516:tid 24553] [client 20.240.63.86:12976] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/alfashell.php"] [unique_id "addQLdhW7vSS-UkeWCX-7QAAAEY"]
[Thu Apr 09 15:07:26.997021 2026] [:error] [pid 24517:tid 24582] [client 20.240.63.86:5335] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/alfashell.php"] [unique_id "addQLnboYEn2ZFM_PS9TBAAAAIg"]
[Thu Apr 09 15:07:27.987920 2026] [:error] [pid 24624:tid 24639] [client 20.240.63.86:11927] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gettest.php"] [unique_id "addQL-4Jn-WvK1ZBTviIIAAAAM0"]
[Thu Apr 09 15:07:29.536026 2026] [:error] [pid 24515:tid 24528] [client 20.240.63.86:5777] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gettest.php"] [unique_id "addQMa1OMnvM2fMnB1M_fQAAAAk"]
[Thu Apr 09 15:07:30.598324 2026] [:error] [pid 24516:tid 24564] [client 20.240.63.86:13055] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gettest.php"] [unique_id "addQMthW7vSS-UkeWCX-8gAAAFE"]
[Thu Apr 09 15:07:31.729055 2026] [:error] [pid 24516:tid 24561] [client 20.240.63.86:14263] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gettest.php"] [unique_id "addQM9hW7vSS-UkeWCX-9AAAAE4"]
[Thu Apr 09 15:07:32.769012 2026] [:error] [pid 24624:tid 24630] [client 20.240.63.86:13238] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/acp.php"] [unique_id "addQNO4Jn-WvK1ZBTviIJAAAAMQ"]
[Thu Apr 09 15:07:34.167791 2026] [:error] [pid 24515:tid 24531] [client 20.240.63.86:14498] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/acp.php"] [unique_id "addQNq1OMnvM2fMnB1M_gAAAAAw"]
[Thu Apr 09 15:07:34.885647 2026] [:error] [pid 24516:tid 24554] [client 20.240.63.86:22812] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/acp.php"] [unique_id "addQNthW7vSS-UkeWCX-9gAAAEc"]
[Thu Apr 09 15:07:35.623549 2026] [:error] [pid 24516:tid 24550] [client 20.240.63.86:22815] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/acp.php"] [unique_id "addQN9hW7vSS-UkeWCX--AAAAEM"]
[Thu Apr 09 15:07:36.292547 2026] [:error] [pid 24517:tid 24584] [client 20.240.63.86:5792] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file48.php"] [unique_id "addQOHboYEn2ZFM_PS9TDQAAAIo"]
[Thu Apr 09 15:07:37.070489 2026] [:error] [pid 24927:tid 24946] [client 20.240.63.86:13204] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file48.php"] [unique_id "addQOTXObuzEuw8mNJuIYQAAARA"]
[Thu Apr 09 15:07:37.761610 2026] [:error] [pid 24515:tid 24524] [client 20.240.63.86:10650] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file48.php"] [unique_id "addQOa1OMnvM2fMnB1M_gwAAAAU"]
[Thu Apr 09 15:07:38.462772 2026] [:error] [pid 24624:tid 24643] [client 20.240.63.86:20595] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file48.php"] [unique_id "addQOu4Jn-WvK1ZBTviIJQAAANE"]
[Thu Apr 09 15:07:39.145754 2026] [:error] [pid 24927:tid 24940] [client 20.240.63.86:20574] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/g.php"] [unique_id "addQOzXObuzEuw8mNJuIZAAAAQo"]
[Thu Apr 09 15:07:40.034466 2026] [:error] [pid 24515:tid 24522] [client 20.240.63.86:5716] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/g.php"] [unique_id "addQPK1OMnvM2fMnB1M_hgAAAAM"]
[Thu Apr 09 15:07:40.800983 2026] [:error] [pid 24624:tid 24642] [client 20.240.63.86:14496] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/g.php"] [unique_id "addQPO4Jn-WvK1ZBTviIKQAAANA"]
[Thu Apr 09 15:07:41.822094 2026] [:error] [pid 24517:tid 24588] [client 20.240.63.86:5800] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/g.php"] [unique_id "addQPXboYEn2ZFM_PS9TEAAAAI4"]
[Thu Apr 09 15:07:42.872475 2026] [:error] [pid 24927:tid 24933] [client 20.240.63.86:5123] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/"] [unique_id "addQPjXObuzEuw8mNJuIaAAAAQM"]
[Thu Apr 09 15:07:43.647083 2026] [:error] [pid 24624:tid 24630] [client 20.240.63.86:5730] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/"] [unique_id "addQP-4Jn-WvK1ZBTviIMgAAAMQ"]
[Thu Apr 09 15:07:46.052438 2026] [:error] [pid 24517:tid 24596] [client 20.240.63.86:5315] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/"] [unique_id "addQQnboYEn2ZFM_PS9TEgAAAJY"]
[Thu Apr 09 15:07:46.769953 2026] [:error] [pid 24927:tid 24937] [client 20.240.63.86:12952] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/"] [unique_id "addQQjXObuzEuw8mNJuIaQAAAQc"]
[Thu Apr 09 15:07:48.228126 2026] [:error] [pid 24516:tid 24560] [client 20.240.63.86:13442] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/simple.php"] [unique_id "addQRNhW7vSS-UkeWCX--gAAAE0"]
[Thu Apr 09 15:07:49.281560 2026] [:error] [pid 24516:tid 24553] [client 20.240.63.86:5485] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/simple.php"] [unique_id "addQRdhW7vSS-UkeWCX--wAAAEY"]
[Thu Apr 09 15:07:50.128918 2026] [:error] [pid 24515:tid 24528] [client 20.240.63.86:50884] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/simple.php"] [unique_id "addQRq1OMnvM2fMnB1M_jAAAAAk"]
[Thu Apr 09 15:07:50.848954 2026] [:error] [pid 24516:tid 24552] [client 20.240.63.86:5782] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/simple.php"] [unique_id "addQRthW7vSS-UkeWCX_BwAAAEU"]
[Thu Apr 09 15:07:51.514699 2026] [:error] [pid 24515:tid 24540] [client 20.240.63.86:15073] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ew.php"] [unique_id "addQR61OMnvM2fMnB1M_jQAAABU"]
[Thu Apr 09 15:07:52.334948 2026] [:error] [pid 24927:tid 24932] [client 20.240.63.86:5474] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ew.php"] [unique_id "addQSDXObuzEuw8mNJuIdAAAAQI"]
[Thu Apr 09 15:07:53.554608 2026] [:error] [pid 24516:tid 24571] [client 20.240.63.86:13218] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ew.php"] [unique_id "addQSdhW7vSS-UkeWCX_CQAAAFg"]
[Thu Apr 09 15:07:54.689905 2026] [:error] [pid 24927:tid 24940] [client 20.240.63.86:50932] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ew.php"] [unique_id "addQSjXObuzEuw8mNJuIeAAAAQo"]
[Thu Apr 09 15:07:55.575983 2026] [:error] [pid 24927:tid 24937] [client 20.240.63.86:6051] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file21.php"] [unique_id "addQSzXObuzEuw8mNJuIfgAAAQc"]
[Thu Apr 09 15:07:56.587915 2026] [:error] [pid 24927:tid 24941] [client 20.240.63.86:5427] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file21.php"] [unique_id "addQTDXObuzEuw8mNJuIgAAAAQs"]
[Thu Apr 09 15:07:57.529382 2026] [:error] [pid 24516:tid 24567] [client 20.240.63.86:50891] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file21.php"] [unique_id "addQTdhW7vSS-UkeWCX_CwAAAFQ"]
[Thu Apr 09 15:08:00.703868 2026] [:error] [pid 24517:tid 24589] [client 20.240.63.86:10342] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file21.php"] [unique_id "addQUHboYEn2ZFM_PS9TGAAAAI8"]
[Thu Apr 09 15:08:02.420610 2026] [proxy_fcgi:error] [pid 24927:tid 24939] [client 20.240.63.86:26302] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 15:08:02.692224 2026] [proxy_fcgi:error] [pid 24927:tid 24934] [client 20.240.63.86:26302] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 15:08:03.000921 2026] [proxy_fcgi:error] [pid 24927:tid 24947] [client 20.240.63.86:26302] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 15:08:03.267924 2026] [proxy_fcgi:error] [pid 24927:tid 24948] [client 20.240.63.86:26302] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 15:08:03.654040 2026] [proxy_fcgi:error] [pid 24927:tid 24936] [client 20.240.63.86:26302] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 15:08:03.920214 2026] [proxy_fcgi:error] [pid 24927:tid 24939] [client 20.240.63.86:26302] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 15:08:04.220428 2026] [proxy_fcgi:error] [pid 24927:tid 24941] [client 20.240.63.86:26302] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 15:08:05.972523 2026] [proxy_fcgi:error] [pid 24927:tid 24937] [client 20.240.63.86:26302] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 15:08:06.274494 2026] [proxy_fcgi:error] [pid 24927:tid 24939] [client 20.240.63.86:26302] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 22:23:54.996717 2026] [proxy_fcgi:error] [pid 24515:tid 24543] [client 20.199.96.18:63652] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 22:23:55.238357 2026] [proxy_fcgi:error] [pid 24515:tid 24535] [client 20.199.96.18:63652] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 22:23:55.487218 2026] [proxy_fcgi:error] [pid 24515:tid 24519] [client 20.199.96.18:63652] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 22:23:55.726396 2026] [proxy_fcgi:error] [pid 24515:tid 24536] [client 20.199.96.18:63652] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 22:23:55.965980 2026] [proxy_fcgi:error] [pid 24515:tid 24530] [client 20.199.96.18:63652] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 22:23:56.206210 2026] [proxy_fcgi:error] [pid 24515:tid 24537] [client 20.199.96.18:63652] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 22:23:56.445195 2026] [proxy_fcgi:error] [pid 24515:tid 24520] [client 20.199.96.18:63652] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 22:23:56.684681 2026] [proxy_fcgi:error] [pid 24515:tid 24540] [client 20.199.96.18:63652] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 22:23:56.924226 2026] [proxy_fcgi:error] [pid 24515:tid 24541] [client 20.199.96.18:63652] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 22:23:57.165685 2026] [proxy_fcgi:error] [pid 24515:tid 24527] [client 20.199.96.18:63652] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 22:23:57.401352 2026] [:error] [pid 24515:tid 24529] [client 20.199.96.18:63652] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-cxx.php"] [unique_id "ade2fa1OMnvM2fMnB1PhLgAAAAo"]
[Thu Apr 09 22:23:57.896897 2026] [:error] [pid 24624:tid 24648] [client 20.199.96.18:58395] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-cxx.php"] [unique_id "ade2fe4Jn-WvK1ZBTvjuOQAAANY"]
[Thu Apr 09 22:23:58.384280 2026] [:error] [pid 20837:tid 20841] [client 20.199.96.18:64556] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-cxx.php"] [unique_id "ade2fvSL71FHZkjrGzMJUgAAAYI"]
[Thu Apr 09 22:23:58.857848 2026] [:error] [pid 20837:tid 20849] [client 20.199.96.18:61751] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-cxx.php"] [unique_id "ade2fvSL71FHZkjrGzMJUwAAAYo"]
[Thu Apr 09 22:23:59.368650 2026] [:error] [pid 20837:tid 20843] [client 20.199.96.18:64513] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/water.php"] [unique_id "ade2f_SL71FHZkjrGzMJVQAAAYQ"]
[Thu Apr 09 22:23:59.843126 2026] [:error] [pid 20837:tid 20860] [client 20.199.96.18:58410] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/water.php"] [unique_id "ade2f_SL71FHZkjrGzMJVwAAAZU"]
[Thu Apr 09 22:24:00.346568 2026] [:error] [pid 20837:tid 20863] [client 20.199.96.18:63574] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/water.php"] [unique_id "ade2gPSL71FHZkjrGzMJWQAAAZg"]
[Thu Apr 09 22:24:00.831989 2026] [:error] [pid 24515:tid 24523] [client 20.199.96.18:61752] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/water.php"] [unique_id "ade2gK1OMnvM2fMnB1PhMAAAAAQ"]
[Thu Apr 09 22:24:01.318869 2026] [:error] [pid 24624:tid 24626] [client 20.199.96.18:58372] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/12.php"] [unique_id "ade2ge4Jn-WvK1ZBTvjuRwAAAMA"]
[Thu Apr 09 22:24:01.804134 2026] [:error] [pid 20837:tid 20858] [client 20.199.96.18:64565] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/12.php"] [unique_id "ade2gfSL71FHZkjrGzMJXAAAAZM"]
[Thu Apr 09 22:24:02.283801 2026] [:error] [pid 24624:tid 24629] [client 20.199.96.18:63648] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/12.php"] [unique_id "ade2gu4Jn-WvK1ZBTvjuSQAAAMM"]
[Thu Apr 09 22:24:02.783370 2026] [:error] [pid 20837:tid 20847] [client 20.199.96.18:63587] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/12.php"] [unique_id "ade2gvSL71FHZkjrGzMJXwAAAYg"]
[Thu Apr 09 22:24:03.269367 2026] [:error] [pid 24515:tid 24519] [client 20.199.96.18:61714] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ggb.php"] [unique_id "ade2g61OMnvM2fMnB1PhNQAAAAA"]
[Thu Apr 09 22:24:03.807079 2026] [:error] [pid 63331:tid 63338] [client 20.199.96.18:63565] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ggb.php"] [unique_id "ade2gybKfIYuVjWbE4WPQwAAAcU"]
[Thu Apr 09 22:24:04.399327 2026] [:error] [pid 24515:tid 24530] [client 20.199.96.18:63590] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ggb.php"] [unique_id "ade2hK1OMnvM2fMnB1PhNwAAAAs"]
[Thu Apr 09 22:24:04.899667 2026] [:error] [pid 24515:tid 24528] [client 20.199.96.18:63631] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ggb.php"] [unique_id "ade2hK1OMnvM2fMnB1PhOQAAAAk"]
[Thu Apr 09 22:24:05.392281 2026] [:error] [pid 20837:tid 20844] [client 20.199.96.18:61796] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/13.php"] [unique_id "ade2hfSL71FHZkjrGzMJYgAAAYU"]
[Thu Apr 09 22:24:05.891543 2026] [:error] [pid 63331:tid 63342] [client 20.199.96.18:63596] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/13.php"] [unique_id "ade2hSbKfIYuVjWbE4WPSAAAAck"]
[Thu Apr 09 22:24:06.399446 2026] [:error] [pid 20837:tid 20841] [client 20.199.96.18:63626] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/13.php"] [unique_id "ade2hvSL71FHZkjrGzMJZAAAAYI"]
[Thu Apr 09 22:24:06.900604 2026] [:error] [pid 24515:tid 24524] [client 20.199.96.18:64629] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/13.php"] [unique_id "ade2hq1OMnvM2fMnB1PhOgAAAAU"]
[Thu Apr 09 22:24:07.407846 2026] [:error] [pid 24517:tid 24578] [client 20.199.96.18:61771] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wert.php"] [unique_id "ade2h3boYEn2ZFM_PS-HjwAAAIQ"]
[Thu Apr 09 22:24:07.957979 2026] [:error] [pid 24515:tid 24520] [client 20.199.96.18:58096] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wert.php"] [unique_id "ade2h61OMnvM2fMnB1PhPAAAAAE"]
[Thu Apr 09 22:24:08.450689 2026] [:error] [pid 24517:tid 24598] [client 20.199.96.18:61697] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wert.php"] [unique_id "ade2iHboYEn2ZFM_PS-HkAAAAJg"]
[Thu Apr 09 22:24:08.977343 2026] [:error] [pid 24515:tid 24541] [client 20.199.96.18:61706] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wert.php"] [unique_id "ade2iK1OMnvM2fMnB1PhPwAAABY"]
[Thu Apr 09 22:24:09.465366 2026] [:error] [pid 24624:tid 24644] [client 20.199.96.18:58382] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/11.php"] [unique_id "ade2ie4Jn-WvK1ZBTvjuTQAAANI"]
[Thu Apr 09 22:24:09.965387 2026] [:error] [pid 24517:tid 24575] [client 20.199.96.18:64528] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/11.php"] [unique_id "ade2iXboYEn2ZFM_PS-HkQAAAIE"]
[Thu Apr 09 22:24:10.442263 2026] [:error] [pid 24927:tid 24931] [client 20.199.96.18:63568] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/11.php"] [unique_id "ade2ijXObuzEuw8mNJsyDAAAAQE"]
[Thu Apr 09 22:24:10.924424 2026] [:error] [pid 63331:tid 63352] [client 20.199.96.18:64534] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/11.php"] [unique_id "ade2iibKfIYuVjWbE4WPUAAAAdM"]
[Thu Apr 09 22:24:11.399384 2026] [:error] [pid 24517:tid 24597] [client 20.199.96.18:64560] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/p.php"] [unique_id "ade2i3boYEn2ZFM_PS-HkwAAAJc"]
[Thu Apr 09 22:24:11.881768 2026] [:error] [pid 24515:tid 24534] [client 20.199.96.18:63599] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/p.php"] [unique_id "ade2i61OMnvM2fMnB1PhQwAAAA8"]
[Thu Apr 09 22:24:12.356206 2026] [:error] [pid 20837:tid 20862] [client 20.199.96.18:61721] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/p.php"] [unique_id "ade2jPSL71FHZkjrGzMJZQAAAZc"]
[Thu Apr 09 22:24:12.840316 2026] [:error] [pid 24517:tid 24586] [client 20.199.96.18:64514] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/p.php"] [unique_id "ade2jHboYEn2ZFM_PS-HlAAAAIw"]
[Thu Apr 09 22:24:13.316188 2026] [:error] [pid 24515:tid 24535] [client 20.199.96.18:64612] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/oij98gy.php"] [unique_id "ade2ja1OMnvM2fMnB1PhRQAAABA"]
[Thu Apr 09 22:24:13.801133 2026] [:error] [pid 24516:tid 24548] [client 20.199.96.18:63632] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/oij98gy.php"] [unique_id "ade2jdhW7vSS-UkeWCU7nAAAAEE"]
[Thu Apr 09 22:24:14.278914 2026] [:error] [pid 20837:tid 20843] [client 20.199.96.18:58386] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/oij98gy.php"] [unique_id "ade2jvSL71FHZkjrGzMJZgAAAYQ"]
[Thu Apr 09 22:24:14.798828 2026] [:error] [pid 24927:tid 24936] [client 20.199.96.18:64605] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/oij98gy.php"] [unique_id "ade2jjXObuzEuw8mNJsyDQAAAQY"]
[Thu Apr 09 22:24:15.271165 2026] [:error] [pid 24516:tid 24565] [client 20.199.96.18:63677] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bthil.php"] [unique_id "ade2j9hW7vSS-UkeWCU7owAAAFI"]
[Thu Apr 09 22:24:15.771808 2026] [:error] [pid 24517:tid 24585] [client 20.199.96.18:63678] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bthil.php"] [unique_id "ade2j3boYEn2ZFM_PS-HlQAAAIs"]
[Thu Apr 09 22:24:16.249078 2026] [:error] [pid 24927:tid 24953] [client 20.199.96.18:64543] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bthil.php"] [unique_id "ade2kDXObuzEuw8mNJsyDgAAARc"]
[Thu Apr 09 22:24:16.745500 2026] [:error] [pid 24927:tid 24946] [client 20.199.96.18:63572] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bthil.php"] [unique_id "ade2kDXObuzEuw8mNJsyDwAAARA"]
[Thu Apr 09 22:24:17.226320 2026] [:error] [pid 24927:tid 24934] [client 20.199.96.18:61761] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/turkshell.php"] [unique_id "ade2kTXObuzEuw8mNJsyEAAAAQQ"]
[Thu Apr 09 22:24:17.706139 2026] [:error] [pid 63331:tid 63345] [client 20.199.96.18:61713] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/turkshell.php"] [unique_id "ade2kSbKfIYuVjWbE4WPUgAAAcw"]
[Thu Apr 09 22:24:18.183641 2026] [:error] [pid 24515:tid 24536] [client 20.199.96.18:61776] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/turkshell.php"] [unique_id "ade2kq1OMnvM2fMnB1PhRgAAABE"]
[Thu Apr 09 22:24:18.656988 2026] [:error] [pid 20837:tid 20851] [client 20.199.96.18:64624] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/turkshell.php"] [unique_id "ade2kvSL71FHZkjrGzMJaQAAAYw"]
[Thu Apr 09 22:24:19.129530 2026] [:error] [pid 24927:tid 24947] [client 20.199.96.18:64559] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tea.php"] [unique_id "ade2kzXObuzEuw8mNJsyEQAAARE"]
[Thu Apr 09 22:24:19.611312 2026] [:error] [pid 24624:tid 24640] [client 20.199.96.18:63611] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tea.php"] [unique_id "ade2k-4Jn-WvK1ZBTvjuUgAAAM4"]
[Thu Apr 09 22:24:20.081707 2026] [:error] [pid 24515:tid 24524] [client 20.199.96.18:64544] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tea.php"] [unique_id "ade2lK1OMnvM2fMnB1PhSAAAAAU"]
[Thu Apr 09 22:24:20.563049 2026] [:error] [pid 24927:tid 24940] [client 20.199.96.18:64627] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tea.php"] [unique_id "ade2lDXObuzEuw8mNJsyEgAAAQo"]
[Thu Apr 09 22:24:21.043153 2026] [:error] [pid 20837:tid 20863] [client 20.199.96.18:58055] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/qqa.php"] [unique_id "ade2lfSL71FHZkjrGzMJagAAAZg"]
[Thu Apr 09 22:24:21.527201 2026] [:error] [pid 63331:tid 63340] [client 20.199.96.18:61755] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/qqa.php"] [unique_id "ade2lSbKfIYuVjWbE4WPVgAAAcc"]
[Thu Apr 09 22:24:22.008079 2026] [:error] [pid 20837:tid 20858] [client 20.199.96.18:63594] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/qqa.php"] [unique_id "ade2lvSL71FHZkjrGzMJawAAAZM"]
[Thu Apr 09 22:24:22.491276 2026] [:error] [pid 63331:tid 63355] [client 20.199.96.18:61735] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/qqa.php"] [unique_id "ade2libKfIYuVjWbE4WPVwAAAdY"]
[Thu Apr 09 22:24:22.992934 2026] [:error] [pid 24515:tid 24520] [client 20.199.96.18:63607] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/seo.php"] [unique_id "ade2lq1OMnvM2fMnB1PhSQAAAAE"]
[Thu Apr 09 22:24:23.470087 2026] [:error] [pid 24515:tid 24539] [client 20.199.96.18:61795] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/seo.php"] [unique_id "ade2l61OMnvM2fMnB1PhSgAAABQ"]
[Thu Apr 09 22:24:23.958494 2026] [:error] [pid 24515:tid 24521] [client 20.199.96.18:63630] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/seo.php"] [unique_id "ade2l61OMnvM2fMnB1PhTAAAAAI"]
[Thu Apr 09 22:24:24.436788 2026] [:error] [pid 24515:tid 24537] [client 20.199.96.18:61781] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/seo.php"] [unique_id "ade2mK1OMnvM2fMnB1PhTQAAABI"]
[Thu Apr 09 22:24:24.918917 2026] [:error] [pid 24515:tid 24526] [client 20.199.96.18:64581] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/7.php"] [unique_id "ade2mK1OMnvM2fMnB1PhTwAAAAc"]
[Thu Apr 09 22:24:25.393507 2026] [:error] [pid 20837:tid 20845] [client 20.199.96.18:58405] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/7.php"] [unique_id "ade2mfSL71FHZkjrGzMJbQAAAYY"]
[Thu Apr 09 22:24:25.871427 2026] [:error] [pid 20837:tid 20842] [client 20.199.96.18:61788] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/7.php"] [unique_id "ade2mfSL71FHZkjrGzMJbwAAAYM"]
[Thu Apr 09 22:24:26.353185 2026] [:error] [pid 20837:tid 20847] [client 20.199.96.18:64599] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/7.php"] [unique_id "ade2mvSL71FHZkjrGzMJcAAAAYg"]
[Thu Apr 09 22:24:26.831724 2026] [:error] [pid 20837:tid 20852] [client 20.199.96.18:58071] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/8.php"] [unique_id "ade2mvSL71FHZkjrGzMJcQAAAY0"]
[Thu Apr 09 22:24:27.312004 2026] [:error] [pid 24515:tid 24531] [client 20.199.96.18:63633] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/8.php"] [unique_id "ade2m61OMnvM2fMnB1PhUwAAAAw"]
[Thu Apr 09 22:24:27.808470 2026] [:error] [pid 24927:tid 24945] [client 20.199.96.18:64561] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/8.php"] [unique_id "ade2mzXObuzEuw8mNJsyEwAAAQ8"]
[Thu Apr 09 22:24:28.289720 2026] [:error] [pid 18477:tid 18487] [client 20.199.96.18:58414] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/8.php"] [unique_id "ade2nMDe826HlFeoLPKn3QAAAUg"]
[Thu Apr 09 22:24:28.778376 2026] [:error] [pid 24927:tid 24944] [client 20.199.96.18:61720] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/1.php"] [unique_id "ade2nDXObuzEuw8mNJsyFQAAAQ4"]
[Thu Apr 09 22:24:29.270000 2026] [:error] [pid 18477:tid 18495] [client 20.199.96.18:63642] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/1.php"] [unique_id "ade2ncDe826HlFeoLPKn3gAAAVA"]
[Thu Apr 09 22:24:29.743337 2026] [:error] [pid 24517:tid 24587] [client 20.199.96.18:64592] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/1.php"] [unique_id "ade2nXboYEn2ZFM_PS-HmgAAAI0"]
[Thu Apr 09 22:24:30.239900 2026] [:error] [pid 63331:tid 63334] [client 20.199.96.18:64569] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/1.php"] [unique_id "ade2nibKfIYuVjWbE4WPXQAAAcE"]
[Thu Apr 09 22:24:30.721040 2026] [:error] [pid 24515:tid 24522] [client 20.199.96.18:58379] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2.php"] [unique_id "ade2nq1OMnvM2fMnB1PhVgAAAAM"]
[Thu Apr 09 22:24:31.209064 2026] [:error] [pid 63331:tid 63351] [client 20.199.96.18:61807] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2.php"] [unique_id "ade2nybKfIYuVjWbE4WPXwAAAdI"]
[Thu Apr 09 22:24:31.680686 2026] [:error] [pid 24927:tid 24939] [client 20.199.96.18:58390] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2.php"] [unique_id "ade2nzXObuzEuw8mNJsyGwAAAQk"]
[Thu Apr 09 22:24:32.196375 2026] [:error] [pid 18477:tid 18497] [client 20.199.96.18:63566] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2.php"] [unique_id "ade2oMDe826HlFeoLPKn4AAAAVI"]
[Thu Apr 09 22:24:32.679167 2026] [:error] [pid 24517:tid 24596] [client 20.199.96.18:63621] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/3.php"] [unique_id "ade2oHboYEn2ZFM_PS-HnAAAAJY"]
[Thu Apr 09 22:24:33.186821 2026] [:error] [pid 24516:tid 24551] [client 20.199.96.18:58422] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/3.php"] [unique_id "ade2odhW7vSS-UkeWCU7qAAAAEQ"]
[Thu Apr 09 22:24:33.668405 2026] [:error] [pid 24927:tid 24943] [client 20.199.96.18:63623] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/3.php"] [unique_id "ade2oTXObuzEuw8mNJsyHAAAAQ0"]
[Thu Apr 09 22:24:34.199511 2026] [:error] [pid 63331:tid 63350] [client 20.199.96.18:61814] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/3.php"] [unique_id "ade2oibKfIYuVjWbE4WPZQAAAdE"]
[Thu Apr 09 22:24:34.675282 2026] [:error] [pid 24516:tid 24552] [client 20.199.96.18:63602] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/4.php"] [unique_id "ade2othW7vSS-UkeWCU7qwAAAEU"]
[Thu Apr 09 22:24:35.151546 2026] [:error] [pid 24515:tid 24532] [client 20.199.96.18:61733] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/4.php"] [unique_id "ade2o61OMnvM2fMnB1PhWAAAAA0"]
[Thu Apr 09 22:24:35.624047 2026] [:error] [pid 24515:tid 24524] [client 20.199.96.18:61784] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/4.php"] [unique_id "ade2o61OMnvM2fMnB1PhWQAAAAU"]
[Thu Apr 09 22:24:36.110638 2026] [:error] [pid 20837:tid 20857] [client 20.199.96.18:61810] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/4.php"] [unique_id "ade2pPSL71FHZkjrGzMJcgAAAZI"]
[Thu Apr 09 22:24:36.590770 2026] [:error] [pid 24515:tid 24521] [client 20.199.96.18:64562] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/5.php"] [unique_id "ade2pK1OMnvM2fMnB1PhXQAAAAI"]
[Thu Apr 09 22:24:37.092685 2026] [:error] [pid 24515:tid 24526] [client 20.199.96.18:61705] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/5.php"] [unique_id "ade2pa1OMnvM2fMnB1PhXwAAAAc"]
[Thu Apr 09 22:24:37.569101 2026] [:error] [pid 20837:tid 20840] [client 20.199.96.18:64588] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/5.php"] [unique_id "ade2pfSL71FHZkjrGzMJcwAAAYE"]
[Thu Apr 09 22:24:38.067598 2026] [:error] [pid 63331:tid 63357] [client 20.199.96.18:64567] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/5.php"] [unique_id "ade2pibKfIYuVjWbE4WPbAAAAdg"]
[Thu Apr 09 22:24:38.580689 2026] [:error] [pid 63331:tid 63339] [client 20.199.96.18:64525] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/6.php"] [unique_id "ade2pibKfIYuVjWbE4WPbwAAAcY"]
[Thu Apr 09 22:24:39.106013 2026] [:error] [pid 63331:tid 63337] [client 20.199.96.18:64551] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/6.php"] [unique_id "ade2pybKfIYuVjWbE4WPcgAAAcQ"]
[Thu Apr 09 22:24:39.596746 2026] [:error] [pid 24515:tid 24523] [client 20.199.96.18:58393] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/6.php"] [unique_id "ade2p61OMnvM2fMnB1PhYwAAAAQ"]
[Thu Apr 09 22:24:40.089476 2026] [:error] [pid 63331:tid 63353] [client 20.199.96.18:61820] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/6.php"] [unique_id "ade2qCbKfIYuVjWbE4WPewAAAdQ"]
[Thu Apr 09 22:24:40.596326 2026] [:error] [pid 20837:tid 20839] [client 20.199.96.18:64538] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/9.php"] [unique_id "ade2qPSL71FHZkjrGzMJdQAAAYA"]
[Thu Apr 09 22:24:41.085693 2026] [:error] [pid 18477:tid 18480] [client 20.199.96.18:63646] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/9.php"] [unique_id "ade2qcDe826HlFeoLPKn4QAAAUE"]
[Thu Apr 09 22:24:41.603457 2026] [:error] [pid 18477:tid 18502] [client 20.199.96.18:58418] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/9.php"] [unique_id "ade2qcDe826HlFeoLPKn4gAAAVc"]
[Thu Apr 09 22:24:42.178434 2026] [:error] [pid 24515:tid 24543] [client 20.199.96.18:53697] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/9.php"] [unique_id "ade2qq1OMnvM2fMnB1PhZQAAABg"]
[Thu Apr 09 22:24:42.722619 2026] [:error] [pid 24515:tid 24519] [client 20.199.96.18:64625] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/10.php"] [unique_id "ade2qq1OMnvM2fMnB1PhZwAAAAA"]
[Thu Apr 09 22:24:43.224048 2026] [:error] [pid 24515:tid 24528] [client 20.199.96.18:61704] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/10.php"] [unique_id "ade2q61OMnvM2fMnB1PhaAAAAAk"]
[Thu Apr 09 22:24:43.782502 2026] [:error] [pid 24515:tid 24532] [client 20.199.96.18:63605] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/10.php"] [unique_id "ade2q61OMnvM2fMnB1PhaQAAAA0"]
[Thu Apr 09 22:24:44.383123 2026] [:error] [pid 18477:tid 18485] [client 20.199.96.18:58421] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/10.php"] [unique_id "ade2rMDe826HlFeoLPKn4wAAAUY"]
[Thu Apr 09 22:24:44.871691 2026] [:error] [pid 18477:tid 18489] [client 20.199.96.18:63615] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.mopj.php"] [unique_id "ade2rMDe826HlFeoLPKn5AAAAUo"]
[Thu Apr 09 22:24:45.361840 2026] [:error] [pid 18477:tid 18493] [client 20.199.96.18:61801] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.mopj.php"] [unique_id "ade2rcDe826HlFeoLPKn5QAAAU4"]
[Thu Apr 09 22:24:45.858026 2026] [:error] [pid 24624:tid 24649] [client 20.199.96.18:61767] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.mopj.php"] [unique_id "ade2re4Jn-WvK1ZBTvjuVAAAANc"]
[Thu Apr 09 22:24:46.331625 2026] [:error] [pid 24515:tid 24531] [client 20.199.96.18:58376] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.mopj.php"] [unique_id "ade2rq1OMnvM2fMnB1PhbwAAAAw"]
[Thu Apr 09 22:24:46.813770 2026] [:error] [pid 24515:tid 24527] [client 20.199.96.18:61750] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/100.php"] [unique_id "ade2rq1OMnvM2fMnB1PhcAAAAAg"]
[Thu Apr 09 22:24:47.360720 2026] [:error] [pid 24515:tid 24523] [client 20.199.96.18:61703] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/100.php"] [unique_id "ade2r61OMnvM2fMnB1PhcgAAAAQ"]
[Thu Apr 09 22:24:47.844193 2026] [:error] [pid 24515:tid 24538] [client 20.199.96.18:58412] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/100.php"] [unique_id "ade2r61OMnvM2fMnB1PhcwAAABM"]
[Thu Apr 09 22:24:48.330184 2026] [:error] [pid 20837:tid 20860] [client 20.199.96.18:64571] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/100.php"] [unique_id "ade2sPSL71FHZkjrGzMJfAAAAZU"]
[Thu Apr 09 22:24:48.806279 2026] [:error] [pid 24515:tid 24535] [client 20.199.96.18:63641] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nano.php"] [unique_id "ade2sK1OMnvM2fMnB1PhdAAAABA"]
[Thu Apr 09 22:24:49.293610 2026] [:error] [pid 24624:tid 24634] [client 20.199.96.18:61709] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nano.php"] [unique_id "ade2se4Jn-WvK1ZBTvjuVQAAAMg"]
[Thu Apr 09 22:24:49.784470 2026] [:error] [pid 20837:tid 20842] [client 20.199.96.18:58395] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nano.php"] [unique_id "ade2sfSL71FHZkjrGzMJfwAAAYM"]
[Thu Apr 09 22:24:50.259244 2026] [:error] [pid 24515:tid 24530] [client 20.199.96.18:64608] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nano.php"] [unique_id "ade2sq1OMnvM2fMnB1PhdgAAAAs"]
[Thu Apr 09 22:24:50.736149 2026] [:error] [pid 20837:tid 20852] [client 20.199.96.18:58100] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f35_S.php"] [unique_id "ade2svSL71FHZkjrGzMJgQAAAY0"]
[Thu Apr 09 22:24:51.215343 2026] [:error] [pid 24515:tid 24519] [client 20.199.96.18:44331] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f35_S.php"] [unique_id "ade2s61OMnvM2fMnB1PhdwAAAAA"]
[Thu Apr 09 22:24:51.696582 2026] [:error] [pid 24515:tid 24528] [client 20.199.96.18:64631] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f35_S.php"] [unique_id "ade2s61OMnvM2fMnB1PheAAAAAk"]
[Thu Apr 09 22:24:52.166272 2026] [:error] [pid 18477:tid 18491] [client 20.199.96.18:63573] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f35_S.php"] [unique_id "ade2tMDe826HlFeoLPKn5gAAAUw"]
[Thu Apr 09 22:24:52.658873 2026] [:error] [pid 20837:tid 20856] [client 20.199.96.18:61702] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2026w.php"] [unique_id "ade2tPSL71FHZkjrGzMJhAAAAZE"]
[Thu Apr 09 22:24:53.139147 2026] [:error] [pid 24515:tid 24520] [client 20.199.96.18:61798] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2026w.php"] [unique_id "ade2ta1OMnvM2fMnB1PhewAAAAE"]
[Thu Apr 09 22:24:53.651109 2026] [:error] [pid 20837:tid 20840] [client 20.199.96.18:64635] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2026w.php"] [unique_id "ade2tfSL71FHZkjrGzMJhQAAAYE"]
[Thu Apr 09 22:24:54.124608 2026] [:error] [pid 24515:tid 24541] [client 20.199.96.18:63608] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2026w.php"] [unique_id "ade2tq1OMnvM2fMnB1PhfQAAABY"]
[Thu Apr 09 22:24:54.604550 2026] [:error] [pid 18477:tid 18501] [client 20.199.96.18:61782] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/111.php"] [unique_id "ade2tsDe826HlFeoLPKn5wAAAVY"]
[Thu Apr 09 22:24:55.085960 2026] [:error] [pid 24515:tid 24539] [client 20.199.96.18:61753] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/111.php"] [unique_id "ade2t61OMnvM2fMnB1PhfwAAABQ"]
[Thu Apr 09 22:24:55.560507 2026] [:error] [pid 24515:tid 24540] [client 20.199.96.18:61701] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/111.php"] [unique_id "ade2t61OMnvM2fMnB1PhgAAAABU"]
[Thu Apr 09 22:24:56.046325 2026] [:error] [pid 24624:tid 24628] [client 20.199.96.18:63567] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/111.php"] [unique_id "ade2uO4Jn-WvK1ZBTvjuVwAAAMI"]
[Thu Apr 09 22:24:56.518816 2026] [:error] [pid 63331:tid 63348] [client 20.199.96.18:64533] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp1.php"] [unique_id "ade2uCbKfIYuVjWbE4WPwwAAAc8"]
[Thu Apr 09 22:24:56.993472 2026] [:error] [pid 63331:tid 63333] [client 20.199.96.18:61743] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp1.php"] [unique_id "ade2uCbKfIYuVjWbE4WPxgAAAcA"]
[Thu Apr 09 22:24:57.491097 2026] [proxy_fcgi:error] [pid 24927:tid 24940] [client 20.199.96.18:63674] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 22:24:57.730012 2026] [proxy_fcgi:error] [pid 24927:tid 24945] [client 20.199.96.18:63674] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 22:24:57.968527 2026] [proxy_fcgi:error] [pid 24927:tid 24952] [client 20.199.96.18:63674] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 22:24:58.215436 2026] [proxy_fcgi:error] [pid 24927:tid 24944] [client 20.199.96.18:63674] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 22:24:58.456573 2026] [proxy_fcgi:error] [pid 24927:tid 24935] [client 20.199.96.18:63674] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 22:24:58.698870 2026] [proxy_fcgi:error] [pid 24927:tid 24933] [client 20.199.96.18:63674] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 22:24:58.937525 2026] [proxy_fcgi:error] [pid 24927:tid 24954] [client 20.199.96.18:63674] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 22:24:59.177719 2026] [proxy_fcgi:error] [pid 24927:tid 24950] [client 20.199.96.18:63674] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 22:24:59.418034 2026] [proxy_fcgi:error] [pid 24927:tid 24932] [client 20.199.96.18:63674] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 22:24:59.657682 2026] [proxy_fcgi:error] [pid 24927:tid 24941] [client 20.199.96.18:63674] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 22:24:59.897026 2026] [proxy_fcgi:error] [pid 24927:tid 24930] [client 20.199.96.18:63674] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 22:25:00.135759 2026] [:error] [pid 24927:tid 24949] [client 20.199.96.18:63674] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin.php"] [unique_id "ade2vDXObuzEuw8mNJsyLAAAARM"]
[Thu Apr 09 22:25:00.620640 2026] [:error] [pid 20837:tid 20839] [client 20.199.96.18:61808] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin.php"] [unique_id "ade2vPSL71FHZkjrGzMJhgAAAYA"]
[Thu Apr 09 22:25:01.097756 2026] [:error] [pid 20837:tid 20854] [client 20.199.96.18:64638] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin.php"] [unique_id "ade2vfSL71FHZkjrGzMJhwAAAY8"]
[Thu Apr 09 22:25:01.574555 2026] [:error] [pid 24515:tid 24520] [client 20.199.96.18:58384] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin.php"] [unique_id "ade2va1OMnvM2fMnB1PhhQAAAAE"]
[Thu Apr 09 22:25:02.049803 2026] [:error] [pid 20837:tid 20862] [client 20.199.96.18:64541] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/inege.php"] [unique_id "ade2vvSL71FHZkjrGzMJiQAAAZc"]
[Thu Apr 09 22:25:02.521140 2026] [:error] [pid 20837:tid 20849] [client 20.199.96.18:64587] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/inege.php"] [unique_id "ade2vvSL71FHZkjrGzMJigAAAYo"]
[Thu Apr 09 22:25:03.002643 2026] [:error] [pid 20837:tid 20848] [client 20.199.96.18:58423] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/inege.php"] [unique_id "ade2v_SL71FHZkjrGzMJjAAAAYk"]
[Thu Apr 09 22:25:03.476365 2026] [:error] [pid 24515:tid 24533] [client 20.199.96.18:64589] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/inege.php"] [unique_id "ade2v61OMnvM2fMnB1PhiAAAAA4"]
[Thu Apr 09 22:25:03.955960 2026] [:error] [pid 24515:tid 24539] [client 20.199.96.18:58087] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fe5.php"] [unique_id "ade2v61OMnvM2fMnB1PhiQAAABQ"]
[Thu Apr 09 22:25:04.429889 2026] [:error] [pid 20837:tid 20847] [client 20.199.96.18:61777] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fe5.php"] [unique_id "ade2wPSL71FHZkjrGzMJlAAAAYg"]
[Thu Apr 09 22:25:04.910043 2026] [:error] [pid 20837:tid 20856] [client 20.199.96.18:63640] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fe5.php"] [unique_id "ade2wPSL71FHZkjrGzMJlwAAAZE"]
[Thu Apr 09 22:25:05.384399 2026] [:error] [pid 24927:tid 24951] [client 20.199.96.18:58375] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fe5.php"] [unique_id "ade2wTXObuzEuw8mNJsyLQAAARU"]
[Thu Apr 09 22:25:05.868513 2026] [:error] [pid 20837:tid 20854] [client 20.199.96.18:61792] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/uuu.php"] [unique_id "ade2wfSL71FHZkjrGzMJnQAAAY8"]
[Thu Apr 09 22:25:06.340520 2026] [:error] [pid 20837:tid 20862] [client 20.199.96.18:64539] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/uuu.php"] [unique_id "ade2wvSL71FHZkjrGzMJoAAAAZc"]
[Thu Apr 09 22:25:06.813868 2026] [:error] [pid 24517:tid 24592] [client 20.199.96.18:56605] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/uuu.php"] [unique_id "ade2wnboYEn2ZFM_PS-HnQAAAJI"]
[Thu Apr 09 22:25:07.289976 2026] [:error] [pid 20837:tid 20860] [client 20.199.96.18:63604] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/uuu.php"] [unique_id "ade2w_SL71FHZkjrGzMJpQAAAZU"]
[Thu Apr 09 22:25:07.762239 2026] [:error] [pid 20837:tid 20842] [client 20.199.96.18:61819] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sf.php"] [unique_id "ade2w_SL71FHZkjrGzMJqAAAAYM"]
[Thu Apr 09 22:25:08.238174 2026] [:error] [pid 24624:tid 24635] [client 20.199.96.18:64550] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sf.php"] [unique_id "ade2xO4Jn-WvK1ZBTvjuXQAAAMk"]
[Thu Apr 09 22:25:08.733181 2026] [:error] [pid 18477:tid 18496] [client 20.199.96.18:63653] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sf.php"] [unique_id "ade2xMDe826HlFeoLPKn6QAAAVE"]
[Thu Apr 09 22:25:09.206577 2026] [:error] [pid 24927:tid 24939] [client 20.199.96.18:61736] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sf.php"] [unique_id "ade2xTXObuzEuw8mNJsyLgAAAQk"]
[Thu Apr 09 22:25:09.678753 2026] [:error] [pid 24927:tid 24943] [client 20.199.96.18:61761] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/no1.php"] [unique_id "ade2xTXObuzEuw8mNJsyLwAAAQ0"]
[Thu Apr 09 22:25:10.152824 2026] [:error] [pid 24517:tid 24598] [client 20.199.96.18:56519] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/no1.php"] [unique_id "ade2xnboYEn2ZFM_PS-HoAAAAJg"]
[Thu Apr 09 22:25:10.627477 2026] [:error] [pid 18477:tid 18492] [client 20.199.96.18:58053] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/no1.php"] [unique_id "ade2xsDe826HlFeoLPKn6gAAAU0"]
[Thu Apr 09 22:25:11.119978 2026] [:error] [pid 20837:tid 20848] [client 20.199.96.18:61770] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/no1.php"] [unique_id "ade2x_SL71FHZkjrGzMJvAAAAYk"]
[Thu Apr 09 22:25:11.596796 2026] [:error] [pid 20837:tid 20858] [client 20.199.96.18:58397] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/w2025.php"] [unique_id "ade2x_SL71FHZkjrGzMJvwAAAZM"]
[Thu Apr 09 22:25:12.093223 2026] [:error] [pid 24515:tid 24540] [client 20.199.96.18:64632] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/w2025.php"] [unique_id "ade2yK1OMnvM2fMnB1PhiwAAABU"]
[Thu Apr 09 22:25:12.566894 2026] [:error] [pid 24927:tid 24938] [client 20.199.96.18:58387] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/w2025.php"] [unique_id "ade2yDXObuzEuw8mNJsyMgAAAQg"]
[Thu Apr 09 22:25:13.039394 2026] [:error] [pid 24927:tid 24937] [client 20.199.96.18:61775] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/w2025.php"] [unique_id "ade2yTXObuzEuw8mNJsyMwAAAQc"]
[Thu Apr 09 22:25:13.514896 2026] [:error] [pid 24927:tid 24947] [client 20.199.96.18:58061] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fvvff.php"] [unique_id "ade2yTXObuzEuw8mNJsyNgAAARE"]
[Thu Apr 09 22:25:13.989999 2026] [:error] [pid 24624:tid 24645] [client 20.199.96.18:56590] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fvvff.php"] [unique_id "ade2ye4Jn-WvK1ZBTvjuXwAAANM"]
[Thu Apr 09 22:25:14.465125 2026] [:error] [pid 24516:tid 24562] [client 20.199.96.18:64590] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fvvff.php"] [unique_id "ade2ythW7vSS-UkeWCU7sAAAAE8"]
[Thu Apr 09 22:25:14.941799 2026] [:error] [pid 24516:tid 24555] [client 20.199.96.18:58373] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fvvff.php"] [unique_id "ade2ythW7vSS-UkeWCU7sgAAAEg"]
[Thu Apr 09 22:25:15.414660 2026] [:error] [pid 24516:tid 24565] [client 20.199.96.18:64564] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a2.php"] [unique_id "ade2y9hW7vSS-UkeWCU7tQAAAFI"]
[Thu Apr 09 22:25:15.893907 2026] [:error] [pid 63331:tid 63346] [client 20.199.96.18:63627] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a2.php"] [unique_id "ade2yybKfIYuVjWbE4WP4gAAAc0"]
[Thu Apr 09 22:25:16.365843 2026] [:error] [pid 63331:tid 63353] [client 20.199.96.18:54193] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a2.php"] [unique_id "ade2zCbKfIYuVjWbE4WP5AAAAdQ"]
[Thu Apr 09 22:25:16.841047 2026] [:error] [pid 63331:tid 63342] [client 20.199.96.18:58388] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a2.php"] [unique_id "ade2zCbKfIYuVjWbE4WP5QAAAck"]
[Thu Apr 09 22:25:17.317912 2026] [:error] [pid 24515:tid 24523] [client 20.199.96.18:61728] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/edit.php"] [unique_id "ade2za1OMnvM2fMnB1PhjgAAAAQ"]
[Thu Apr 09 22:25:17.793081 2026] [:error] [pid 24927:tid 24932] [client 20.199.96.18:56527] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/edit.php"] [unique_id "ade2zTXObuzEuw8mNJsyPQAAAQI"]
[Thu Apr 09 22:25:18.269575 2026] [:error] [pid 20837:tid 20840] [client 20.199.96.18:61749] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/edit.php"] [unique_id "ade2zvSL71FHZkjrGzMJxwAAAYE"]
[Thu Apr 09 22:25:18.751998 2026] [:error] [pid 18477:tid 18482] [client 20.199.96.18:63635] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/edit.php"] [unique_id "ade2zsDe826HlFeoLPKn7QAAAUM"]
[Thu Apr 09 22:25:19.232345 2026] [:error] [pid 24927:tid 24951] [client 20.199.96.18:44349] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ioxi-o.php"] [unique_id "ade2zzXObuzEuw8mNJsyQgAAARU"]
[Thu Apr 09 22:25:19.706622 2026] [:error] [pid 24624:tid 24649] [client 20.199.96.18:61823] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ioxi-o.php"] [unique_id "ade2z-4Jn-WvK1ZBTvjuYAAAANc"]
[Thu Apr 09 22:25:20.180066 2026] [:error] [pid 24624:tid 24634] [client 20.199.96.18:64639] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ioxi-o.php"] [unique_id "ade20O4Jn-WvK1ZBTvjuYQAAAMg"]
[Thu Apr 09 22:25:20.651251 2026] [:error] [pid 24517:tid 24577] [client 20.199.96.18:64618] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ioxi-o.php"] [unique_id "ade20HboYEn2ZFM_PS-HowAAAIM"]
[Thu Apr 09 22:25:21.126965 2026] [:error] [pid 24516:tid 24552] [client 20.199.96.18:64563] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "ade20dhW7vSS-UkeWCU7uQAAAEU"]
[Thu Apr 09 22:25:21.599410 2026] [:error] [pid 18477:tid 18498] [client 20.199.96.18:58389] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "ade20cDe826HlFeoLPKn7gAAAVM"]
[Thu Apr 09 22:25:22.083987 2026] [:error] [pid 24624:tid 24632] [client 20.199.96.18:58417] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "ade20u4Jn-WvK1ZBTvjuYwAAAMY"]
[Thu Apr 09 22:25:22.557331 2026] [:error] [pid 24516:tid 24570] [client 20.199.96.18:63676] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "ade20thW7vSS-UkeWCU7vAAAAFc"]
[Thu Apr 09 22:25:23.039278 2026] [:error] [pid 24927:tid 24934] [client 20.199.96.18:58409] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/66.php"] [unique_id "ade20zXObuzEuw8mNJsyTAAAAQQ"]
[Thu Apr 09 22:25:23.533098 2026] [:error] [pid 24516:tid 24564] [client 20.199.96.18:63589] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/66.php"] [unique_id "ade209hW7vSS-UkeWCU7vgAAAFE"]
[Thu Apr 09 22:25:24.010120 2026] [:error] [pid 18477:tid 18503] [client 20.199.96.18:64636] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/66.php"] [unique_id "ade21MDe826HlFeoLPKn7wAAAVg"]
[Thu Apr 09 22:25:24.484552 2026] [:error] [pid 24927:tid 24935] [client 20.199.96.18:64521] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/66.php"] [unique_id "ade21DXObuzEuw8mNJsyTgAAAQU"]
[Thu Apr 09 22:25:24.958833 2026] [:error] [pid 24927:tid 24932] [client 20.199.96.18:53718] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a5.php"] [unique_id "ade21DXObuzEuw8mNJsyTwAAAQI"]
[Thu Apr 09 22:25:25.462129 2026] [:error] [pid 24927:tid 24950] [client 20.199.96.18:58406] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a5.php"] [unique_id "ade21TXObuzEuw8mNJsyUQAAARQ"]
[Thu Apr 09 22:25:25.944346 2026] [:error] [pid 24516:tid 24555] [client 20.199.96.18:58411] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a5.php"] [unique_id "ade21dhW7vSS-UkeWCU7xAAAAEg"]
[Thu Apr 09 22:25:26.444069 2026] [:error] [pid 24624:tid 24628] [client 20.199.96.18:63553] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a5.php"] [unique_id "ade21u4Jn-WvK1ZBTvjuZAAAAMI"]
[Thu Apr 09 22:25:26.927483 2026] [:error] [pid 24624:tid 24629] [client 20.199.96.18:58069] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ol.php"] [unique_id "ade21u4Jn-WvK1ZBTvjuZgAAAMM"]
[Thu Apr 09 22:25:27.412473 2026] [:error] [pid 24517:tid 24582] [client 20.199.96.18:61696] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ol.php"] [unique_id "ade213boYEn2ZFM_PS-HqQAAAIg"]
[Thu Apr 09 22:25:27.897906 2026] [:error] [pid 24624:tid 24646] [client 20.199.96.18:58083] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ol.php"] [unique_id "ade21-4Jn-WvK1ZBTvjuaQAAANQ"]
[Thu Apr 09 22:25:28.376851 2026] [:error] [pid 24624:tid 24648] [client 20.199.96.18:58079] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ol.php"] [unique_id "ade22O4Jn-WvK1ZBTvjuawAAANY"]
[Thu Apr 09 22:25:28.856147 2026] [:error] [pid 18477:tid 18494] [client 20.199.96.18:64529] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f6.php"] [unique_id "ade22MDe826HlFeoLPKn8QAAAU8"]
[Thu Apr 09 22:25:29.341086 2026] [:error] [pid 24927:tid 24930] [client 20.199.96.18:58404] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f6.php"] [unique_id "ade22TXObuzEuw8mNJsyVwAAAQA"]
[Thu Apr 09 22:25:29.814556 2026] [:error] [pid 20837:tid 20853] [client 20.199.96.18:58425] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f6.php"] [unique_id "ade22fSL71FHZkjrGzMJyAAAAY4"]
[Thu Apr 09 22:25:30.295381 2026] [:error] [pid 24515:tid 24541] [client 20.199.96.18:56598] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f6.php"] [unique_id "ade22q1OMnvM2fMnB1PhlAAAABY"]
[Thu Apr 09 22:25:30.766473 2026] [:error] [pid 63331:tid 63351] [client 20.199.96.18:61773] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/inputs.php"] [unique_id "ade22ibKfIYuVjWbE4WP5wAAAdI"]
[Thu Apr 09 22:25:31.247505 2026] [:error] [pid 24624:tid 24644] [client 20.199.96.18:61818] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/inputs.php"] [unique_id "ade22-4Jn-WvK1ZBTvjubgAAANI"]
[Thu Apr 09 22:25:31.719550 2026] [:error] [pid 63331:tid 63357] [client 20.199.96.18:58402] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/inputs.php"] [unique_id "ade22ybKfIYuVjWbE4WP7AAAAdg"]
[Thu Apr 09 22:25:32.190814 2026] [:error] [pid 20837:tid 20854] [client 20.199.96.18:58086] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/inputs.php"] [unique_id "ade23PSL71FHZkjrGzMJygAAAY8"]
[Thu Apr 09 22:25:32.661209 2026] [:error] [pid 63331:tid 63352] [client 20.199.96.18:61729] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/style.php"] [unique_id "ade23CbKfIYuVjWbE4WP7QAAAdM"]
[Thu Apr 09 22:25:33.140015 2026] [:error] [pid 20837:tid 20859] [client 20.199.96.18:64575] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/style.php"] [unique_id "ade23fSL71FHZkjrGzMJywAAAZQ"]
[Thu Apr 09 22:25:33.655035 2026] [:error] [pid 18477:tid 18500] [client 20.199.96.18:53742] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/style.php"] [unique_id "ade23cDe826HlFeoLPKn9AAAAVU"]
[Thu Apr 09 22:25:34.131426 2026] [:error] [pid 18477:tid 18497] [client 20.199.96.18:64549] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/style.php"] [unique_id "ade23sDe826HlFeoLPKn9QAAAVI"]
[Thu Apr 09 22:25:34.622151 2026] [:error] [pid 24927:tid 24940] [client 20.199.96.18:61759] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aa.php"] [unique_id "ade23jXObuzEuw8mNJsyXAAAAQo"]
[Thu Apr 09 22:25:35.101193 2026] [:error] [pid 18477:tid 18502] [client 20.199.96.18:61763] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aa.php"] [unique_id "ade238De826HlFeoLPKn9wAAAVc"]
[Thu Apr 09 22:25:35.576427 2026] [:error] [pid 18477:tid 18501] [client 20.199.96.18:61708] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aa.php"] [unique_id "ade238De826HlFeoLPKn-gAAAVY"]
[Thu Apr 09 22:25:36.050094 2026] [:error] [pid 24927:tid 24942] [client 20.199.96.18:64570] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aa.php"] [unique_id "ade24DXObuzEuw8mNJsyYwAAAQw"]
[Thu Apr 09 22:25:36.526776 2026] [:error] [pid 63331:tid 63337] [client 20.199.96.18:64626] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/av.php"] [unique_id "ade24CbKfIYuVjWbE4WP7wAAAcQ"]
[Thu Apr 09 22:25:37.002464 2026] [:error] [pid 20837:tid 20841] [client 20.199.96.18:58091] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/av.php"] [unique_id "ade24fSL71FHZkjrGzMJzQAAAYI"]
[Thu Apr 09 22:25:37.483118 2026] [:error] [pid 24927:tid 24939] [client 20.199.96.18:56564] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/av.php"] [unique_id "ade24TXObuzEuw8mNJsyaAAAAQk"]
[Thu Apr 09 22:25:37.960965 2026] [:error] [pid 24927:tid 24931] [client 20.199.96.18:53752] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/av.php"] [unique_id "ade24TXObuzEuw8mNJsybgAAAQE"]
[Thu Apr 09 22:25:38.440267 2026] [:error] [pid 24927:tid 24947] [client 20.199.96.18:63645] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "ade24jXObuzEuw8mNJsybwAAARE"]
[Thu Apr 09 22:25:38.912950 2026] [:error] [pid 24515:tid 24534] [client 20.199.96.18:58368] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "ade24q1OMnvM2fMnB1PhmAAAAA8"]
[Thu Apr 09 22:25:39.400658 2026] [:error] [pid 24515:tid 24540] [client 20.199.96.18:44326] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "ade2461OMnvM2fMnB1PhmQAAABU"]
[Thu Apr 09 22:25:39.876014 2026] [:error] [pid 24515:tid 24531] [client 20.199.96.18:61747] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "ade2461OMnvM2fMnB1PhmgAAAAw"]
[Thu Apr 09 22:25:40.350852 2026] [:error] [pid 24927:tid 24934] [client 20.199.96.18:61699] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bless4.php"] [unique_id "ade25DXObuzEuw8mNJsycQAAAQQ"]
[Thu Apr 09 22:25:40.823329 2026] [:error] [pid 24515:tid 24523] [client 20.199.96.18:61813] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bless4.php"] [unique_id "ade25K1OMnvM2fMnB1PhnQAAAAQ"]
[Thu Apr 09 22:25:41.294340 2026] [:error] [pid 63331:tid 63350] [client 20.199.96.18:61789] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bless4.php"] [unique_id "ade25SbKfIYuVjWbE4WP8gAAAdE"]
[Thu Apr 09 22:25:41.777145 2026] [:error] [pid 63331:tid 63338] [client 20.199.96.18:64553] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bless4.php"] [unique_id "ade25SbKfIYuVjWbE4WP8wAAAcU"]
[Thu Apr 09 22:25:42.252759 2026] [:error] [pid 24927:tid 24938] [client 20.199.96.18:64601] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-act.php"] [unique_id "ade25jXObuzEuw8mNJsycgAAAQg"]
[Thu Apr 09 22:25:42.763520 2026] [:error] [pid 18477:tid 18481] [client 20.199.96.18:63639] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-act.php"] [unique_id "ade25sDe826HlFeoLPKoAAAAAUI"]
[Thu Apr 09 22:25:43.239176 2026] [:error] [pid 18477:tid 18499] [client 20.199.96.18:56618] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-act.php"] [unique_id "ade258De826HlFeoLPKoAQAAAVQ"]
[Thu Apr 09 22:25:43.722202 2026] [:error] [pid 24927:tid 24944] [client 20.199.96.18:61742] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-act.php"] [unique_id "ade25zXObuzEuw8mNJsydQAAAQ4"]
[Thu Apr 09 22:25:44.209410 2026] [:error] [pid 24624:tid 24626] [client 20.199.96.18:63591] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xqq.php"] [unique_id "ade26O4Jn-WvK1ZBTvjudwAAAMA"]
[Thu Apr 09 22:25:44.686672 2026] [:error] [pid 24927:tid 24936] [client 20.199.96.18:56570] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xqq.php"] [unique_id "ade26DXObuzEuw8mNJsydwAAAQY"]
[Thu Apr 09 22:25:45.157714 2026] [:error] [pid 18477:tid 18494] [client 20.199.96.18:58431] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xqq.php"] [unique_id "ade26cDe826HlFeoLPKoBQAAAU8"]
[Thu Apr 09 22:25:45.640794 2026] [:error] [pid 24927:tid 24946] [client 20.199.96.18:64532] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xqq.php"] [unique_id "ade26TXObuzEuw8mNJsyegAAARA"]
[Thu Apr 09 22:25:46.114656 2026] [:error] [pid 63331:tid 63346] [client 20.199.96.18:64620] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/plss3.php"] [unique_id "ade26ibKfIYuVjWbE4WP9AAAAc0"]
[Thu Apr 09 22:25:46.623790 2026] [:error] [pid 63331:tid 63353] [client 20.199.96.18:63637] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/plss3.php"] [unique_id "ade26ibKfIYuVjWbE4WP9QAAAdQ"]
[Thu Apr 09 22:25:47.111062 2026] [:error] [pid 63331:tid 63342] [client 20.199.96.18:61722] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/plss3.php"] [unique_id "ade26ybKfIYuVjWbE4WP9gAAAck"]
[Thu Apr 09 22:25:47.639444 2026] [:error] [pid 24624:tid 24648] [client 20.199.96.18:63618] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/plss3.php"] [unique_id "ade26-4Jn-WvK1ZBTvjufQAAANY"]
[Thu Apr 09 22:25:48.118192 2026] [:error] [pid 24517:tid 24592] [client 20.199.96.18:61723] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aaa.php"] [unique_id "ade27HboYEn2ZFM_PS-HrgAAAJI"]
[Thu Apr 09 22:25:48.591796 2026] [:error] [pid 24624:tid 24631] [client 20.199.96.18:64615] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aaa.php"] [unique_id "ade27O4Jn-WvK1ZBTvjugAAAAMU"]
[Thu Apr 09 22:25:49.075902 2026] [:error] [pid 63331:tid 63340] [client 20.199.96.18:56617] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aaa.php"] [unique_id "ade27SbKfIYuVjWbE4WP-AAAAcc"]
[Thu Apr 09 22:25:49.564923 2026] [:error] [pid 63331:tid 63356] [client 20.199.96.18:63663] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aaa.php"] [unique_id "ade27SbKfIYuVjWbE4WP-gAAAdc"]
[Thu Apr 09 22:25:50.047370 2026] [:error] [pid 24927:tid 24944] [client 20.199.96.18:58370] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/classwithtostring.php"] [unique_id "ade27jXObuzEuw8mNJsygQAAAQ4"]
[Thu Apr 09 22:25:50.522888 2026] [:error] [pid 63331:tid 63357] [client 20.199.96.18:63643] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/classwithtostring.php"] [unique_id "ade27ibKfIYuVjWbE4WP_QAAAdg"]
[Thu Apr 09 22:25:51.013410 2026] [:error] [pid 63331:tid 63343] [client 20.199.96.18:54177] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/classwithtostring.php"] [unique_id "ade27ybKfIYuVjWbE4WP_gAAAco"]
[Thu Apr 09 22:25:51.489678 2026] [:error] [pid 63331:tid 63352] [client 20.199.96.18:61799] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/classwithtostring.php"] [unique_id "ade27ybKfIYuVjWbE4WQAQAAAdM"]
[Thu Apr 09 22:25:51.973184 2026] [:error] [pid 63331:tid 63350] [client 20.199.96.18:63658] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "ade27ybKfIYuVjWbE4WQBgAAAdE"]
[Thu Apr 09 22:25:52.452764 2026] [:error] [pid 63331:tid 63346] [client 20.199.96.18:58378] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "ade28CbKfIYuVjWbE4WQBwAAAc0"]
[Thu Apr 09 22:25:52.934044 2026] [:error] [pid 63331:tid 63354] [client 20.199.96.18:61765] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "ade28CbKfIYuVjWbE4WQCQAAAdU"]
[Thu Apr 09 22:25:53.410188 2026] [:error] [pid 63331:tid 63344] [client 20.199.96.18:63641] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "ade28SbKfIYuVjWbE4WQCwAAAcs"]
[Thu Apr 09 22:25:53.894478 2026] [:error] [pid 20837:tid 20862] [client 20.199.96.18:58064] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tinyfilemanager.php"] [unique_id "ade28fSL71FHZkjrGzMJ1AAAAZc"]
[Thu Apr 09 22:25:54.379821 2026] [:error] [pid 63331:tid 63351] [client 20.199.96.18:64537] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tinyfilemanager.php"] [unique_id "ade28ibKfIYuVjWbE4WQDQAAAdI"]
[Thu Apr 09 22:25:54.873618 2026] [:error] [pid 63331:tid 63343] [client 20.199.96.18:56521] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tinyfilemanager.php"] [unique_id "ade28ibKfIYuVjWbE4WQEAAAAco"]
[Thu Apr 09 22:25:55.347432 2026] [:error] [pid 63331:tid 63352] [client 20.199.96.18:64582] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tinyfilemanager.php"] [unique_id "ade28ybKfIYuVjWbE4WQEwAAAdM"]
[Thu Apr 09 22:25:55.825771 2026] [:error] [pid 63331:tid 63333] [client 20.199.96.18:63656] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-update.php"] [unique_id "ade28ybKfIYuVjWbE4WQFQAAAcA"]
[Thu Apr 09 22:25:56.303301 2026] [:error] [pid 63331:tid 63336] [client 20.199.96.18:63555] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-update.php"] [unique_id "ade29CbKfIYuVjWbE4WQGAAAAcM"]
[Thu Apr 09 22:25:56.792288 2026] [:error] [pid 63331:tid 63338] [client 20.199.96.18:63659] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-update.php"] [unique_id "ade29CbKfIYuVjWbE4WQHAAAAcU"]
[Thu Apr 09 22:25:57.263801 2026] [:error] [pid 63331:tid 63354] [client 20.199.96.18:63559] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-update.php"] [unique_id "ade29SbKfIYuVjWbE4WQHwAAAdU"]
[Thu Apr 09 22:25:57.736774 2026] [:error] [pid 24515:tid 24520] [client 20.199.96.18:64554] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sbhu.php"] [unique_id "ade29a1OMnvM2fMnB1PhpAAAAAE"]
[Thu Apr 09 22:25:58.215336 2026] [:error] [pid 24515:tid 24541] [client 20.199.96.18:63666] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sbhu.php"] [unique_id "ade29q1OMnvM2fMnB1PhpgAAABY"]
[Thu Apr 09 22:25:58.699517 2026] [:error] [pid 24927:tid 24939] [client 20.199.96.18:61803] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sbhu.php"] [unique_id "ade29jXObuzEuw8mNJsyggAAAQk"]
[Thu Apr 09 22:25:59.210187 2026] [proxy_fcgi:error] [pid 24516:tid 24570] [client 20.199.96.18:61732] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 22:25:59.449136 2026] [proxy_fcgi:error] [pid 24516:tid 24548] [client 20.199.96.18:61732] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 22:26:00.173358 2026] [proxy_fcgi:error] [pid 24516:tid 24562] [client 20.199.96.18:61732] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 22:26:00.412436 2026] [proxy_fcgi:error] [pid 24516:tid 24547] [client 20.199.96.18:61732] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 22:26:00.651650 2026] [proxy_fcgi:error] [pid 24516:tid 24568] [client 20.199.96.18:61732] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 22:26:00.891284 2026] [proxy_fcgi:error] [pid 24516:tid 24565] [client 20.199.96.18:61732] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 22:26:01.131348 2026] [proxy_fcgi:error] [pid 24516:tid 24559] [client 20.199.96.18:61732] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 22:26:01.611708 2026] [proxy_fcgi:error] [pid 24516:tid 24561] [client 20.199.96.18:61732] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 22:26:01.847458 2026] [:error] [pid 24516:tid 24571] [client 20.199.96.18:61732] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/"] [unique_id "ade2-dhW7vSS-UkeWCU71wAAAFg"]
[Thu Apr 09 22:26:02.329716 2026] [:error] [pid 63331:tid 63355] [client 20.199.96.18:64548] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/"] [unique_id "ade2-ibKfIYuVjWbE4WQJQAAAdY"]
[Thu Apr 09 22:26:02.811533 2026] [:error] [pid 24515:tid 24540] [client 20.199.96.18:61816] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/"] [unique_id "ade2-q1OMnvM2fMnB1PhqwAAABU"]
[Thu Apr 09 22:26:03.284215 2026] [:error] [pid 63331:tid 63339] [client 20.199.96.18:64572] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/"] [unique_id "ade2-ybKfIYuVjWbE4WQKQAAAcY"]
[Thu Apr 09 22:26:03.769339 2026] [:error] [pid 24624:tid 24641] [client 20.199.96.18:56514] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/we.php"] [unique_id "ade2--4Jn-WvK1ZBTvjukwAAAM8"]
[Thu Apr 09 22:26:04.291353 2026] [:error] [pid 24515:tid 24523] [client 20.199.96.18:58380] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/we.php"] [unique_id "ade2_K1OMnvM2fMnB1PhrgAAAAQ"]
[Thu Apr 09 22:26:04.762827 2026] [:error] [pid 24515:tid 24527] [client 20.199.96.18:56632] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/we.php"] [unique_id "ade2_K1OMnvM2fMnB1PhrwAAAAg"]
[Thu Apr 09 22:26:05.240005 2026] [:error] [pid 20837:tid 20861] [client 20.199.96.18:64578] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/we.php"] [unique_id "ade2_fSL71FHZkjrGzMJ1wAAAZY"]
[Thu Apr 09 22:26:05.722476 2026] [:error] [pid 20837:tid 20851] [client 20.199.96.18:63675] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/alpha.php"] [unique_id "ade2_fSL71FHZkjrGzMJ2AAAAYw"]
[Thu Apr 09 22:26:06.194805 2026] [:error] [pid 24515:tid 24525] [client 20.199.96.18:58413] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/alpha.php"] [unique_id "ade2_q1OMnvM2fMnB1PhsQAAAAY"]
[Thu Apr 09 22:26:06.673433 2026] [:error] [pid 63331:tid 63334] [client 20.199.96.18:61758] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/alpha.php"] [unique_id "ade2_ibKfIYuVjWbE4WQLQAAAcE"]
[Thu Apr 09 22:26:07.144184 2026] [:error] [pid 24515:tid 24542] [client 20.199.96.18:56610] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/alpha.php"] [unique_id "ade2_61OMnvM2fMnB1PhtQAAABc"]
[Thu Apr 09 22:26:07.637228 2026] [:error] [pid 20837:tid 20853] [client 20.199.96.18:61806] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/makeasmtp.php"] [unique_id "ade2__SL71FHZkjrGzMJ2wAAAY4"]
[Thu Apr 09 22:26:08.123164 2026] [:error] [pid 63331:tid 63342] [client 20.199.96.18:63619] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/makeasmtp.php"] [unique_id "ade3ACbKfIYuVjWbE4WQMQAAAck"]
[Thu Apr 09 22:26:08.618627 2026] [:error] [pid 24515:tid 24532] [client 20.199.96.18:64576] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/makeasmtp.php"] [unique_id "ade3AK1OMnvM2fMnB1PhuAAAAA0"]
[Thu Apr 09 22:26:09.094409 2026] [:error] [pid 63331:tid 63351] [client 20.199.96.18:43724] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/makeasmtp.php"] [unique_id "ade3ASbKfIYuVjWbE4WQNAAAAdI"]
[Thu Apr 09 22:26:09.566687 2026] [:error] [pid 18477:tid 18501] [client 20.199.96.18:61809] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-michan.php"] [unique_id "ade3AcDe826HlFeoLPKoCwAAAVY"]
[Thu Apr 09 22:26:10.039613 2026] [:error] [pid 24516:tid 24550] [client 20.199.96.18:61724] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-michan.php"] [unique_id "ade3AthW7vSS-UkeWCU72AAAAEM"]
[Thu Apr 09 22:26:10.538754 2026] [:error] [pid 24517:tid 24574] [client 20.199.96.18:63617] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-michan.php"] [unique_id "ade3AnboYEn2ZFM_PS-HtAAAAIA"]
[Thu Apr 09 22:26:11.022103 2026] [:error] [pid 24516:tid 24557] [client 20.199.96.18:64634] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-michan.php"] [unique_id "ade3A9hW7vSS-UkeWCU72gAAAEo"]
[Thu Apr 09 22:26:11.495731 2026] [:error] [pid 24516:tid 24551] [client 20.199.96.18:61757] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-the.php"] [unique_id "ade3A9hW7vSS-UkeWCU73AAAAEQ"]
[Thu Apr 09 22:26:11.969120 2026] [:error] [pid 24927:tid 24953] [client 20.199.96.18:58382] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-the.php"] [unique_id "ade3AzXObuzEuw8mNJsyjQAAARc"]
[Thu Apr 09 22:26:12.492437 2026] [:error] [pid 24624:tid 24632] [client 20.199.96.18:64584] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-the.php"] [unique_id "ade3BO4Jn-WvK1ZBTvjumAAAAMY"]
[Thu Apr 09 22:26:12.971119 2026] [:error] [pid 24624:tid 24629] [client 20.199.96.18:63628] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-the.php"] [unique_id "ade3BO4Jn-WvK1ZBTvjumwAAAMM"]
[Thu Apr 09 22:26:13.453027 2026] [:error] [pid 24624:tid 24638] [client 20.199.96.18:61791] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "ade3Be4Jn-WvK1ZBTvjungAAAMw"]
[Thu Apr 09 22:26:13.925677 2026] [:error] [pid 24515:tid 24539] [client 20.199.96.18:53710] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "ade3Ba1OMnvM2fMnB1PhugAAABQ"]
[Thu Apr 09 22:26:14.404972 2026] [:error] [pid 24515:tid 24534] [client 20.199.96.18:56578] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "ade3Bq1OMnvM2fMnB1PhuwAAAA8"]
[Thu Apr 09 22:26:14.883683 2026] [:error] [pid 63331:tid 63341] [client 20.199.96.18:53708] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "ade3BibKfIYuVjWbE4WQOgAAAcg"]
[Thu Apr 09 22:26:15.360523 2026] [:error] [pid 20837:tid 20855] [client 20.199.96.18:64609] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/BDKR28WP.php"] [unique_id "ade3B_SL71FHZkjrGzMJ4wAAAZA"]
[Thu Apr 09 22:26:15.845055 2026] [:error] [pid 20837:tid 20846] [client 20.199.96.18:54165] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/BDKR28WP.php"] [unique_id "ade3B_SL71FHZkjrGzMJ5gAAAYc"]
[Thu Apr 09 22:26:16.331370 2026] [:error] [pid 24517:tid 24577] [client 20.199.96.18:61707] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/BDKR28WP.php"] [unique_id "ade3CHboYEn2ZFM_PS-HtgAAAIM"]
[Thu Apr 09 22:26:16.806952 2026] [:error] [pid 24515:tid 24531] [client 20.199.96.18:54205] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/BDKR28WP.php"] [unique_id "ade3CK1OMnvM2fMnB1PhvgAAAAw"]
[Thu Apr 09 22:26:17.280613 2026] [:error] [pid 18477:tid 18479] [client 20.199.96.18:58104] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/l10n/"] [unique_id "ade3CcDe826HlFeoLPKoDgAAAUA"]
[Thu Apr 09 22:26:17.752143 2026] [:error] [pid 24516:tid 24563] [client 20.199.96.18:64557] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/l10n/"] [unique_id "ade3CdhW7vSS-UkeWCU74AAAAFA"]
[Thu Apr 09 22:26:18.232361 2026] [:error] [pid 24515:tid 24527] [client 20.199.96.18:61734] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/l10n/"] [unique_id "ade3Cq1OMnvM2fMnB1PhwAAAAAg"]
[Thu Apr 09 22:26:18.726050 2026] [:error] [pid 24624:tid 24650] [client 20.199.96.18:58369] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/l10n/"] [unique_id "ade3Cu4Jn-WvK1ZBTvjupAAAANg"]
[Thu Apr 09 22:26:19.196508 2026] [:error] [pid 18477:tid 18486] [client 20.199.96.18:63620] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wen.php"] [unique_id "ade3C8De826HlFeoLPKoDwAAAUc"]
[Thu Apr 09 22:26:19.676565 2026] [:error] [pid 20837:tid 20856] [client 20.199.96.18:61710] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wen.php"] [unique_id "ade3C_SL71FHZkjrGzMJ7AAAAZE"]
[Thu Apr 09 22:26:20.148007 2026] [:error] [pid 24516:tid 24564] [client 20.199.96.18:58430] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wen.php"] [unique_id "ade3DNhW7vSS-UkeWCU74gAAAFE"]
[Thu Apr 09 22:26:20.628753 2026] [:error] [pid 24516:tid 24560] [client 20.199.96.18:63586] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wen.php"] [unique_id "ade3DNhW7vSS-UkeWCU74wAAAE0"]
[Thu Apr 09 22:26:21.101644 2026] [:error] [pid 20837:tid 20840] [client 20.199.96.18:58394] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp.php"] [unique_id "ade3DfSL71FHZkjrGzMJ7gAAAYE"]
[Thu Apr 09 22:26:21.587961 2026] [:error] [pid 20837:tid 20853] [client 20.199.96.18:54162] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp.php"] [unique_id "ade3DfSL71FHZkjrGzMJ7wAAAY4"]
[Thu Apr 09 22:26:22.067565 2026] [:error] [pid 24517:tid 24576] [client 20.199.96.18:56552] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp.php"] [unique_id "ade3DnboYEn2ZFM_PS-HuQAAAII"]
[Thu Apr 09 22:26:22.543380 2026] [:error] [pid 24515:tid 24535] [client 20.199.96.18:64552] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp.php"] [unique_id "ade3Dq1OMnvM2fMnB1PhxQAAABA"]
[Thu Apr 09 22:26:23.016783 2026] [:error] [pid 24515:tid 24519] [client 20.199.96.18:63612] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "ade3D61OMnvM2fMnB1PhxwAAAAA"]
[Thu Apr 09 22:26:23.499450 2026] [:error] [pid 24515:tid 24532] [client 20.199.96.18:61822] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "ade3D61OMnvM2fMnB1PhygAAAA0"]
[Thu Apr 09 22:26:24.001495 2026] [:error] [pid 24515:tid 24530] [client 20.199.96.18:64555] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "ade3EK1OMnvM2fMnB1PhywAAAAs"]
[Thu Apr 09 22:26:24.478405 2026] [:error] [pid 63331:tid 63353] [client 20.199.96.18:44313] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "ade3ECbKfIYuVjWbE4WQPQAAAdQ"]
[Thu Apr 09 22:26:24.952712 2026] [:error] [pid 63331:tid 63354] [client 20.199.96.18:61737] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fe5.php"] [unique_id "ade3ECbKfIYuVjWbE4WQPgAAAdU"]
[Thu Apr 09 22:26:25.430445 2026] [:error] [pid 24515:tid 24540] [client 20.199.96.18:61744] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fe5.php"] [unique_id "ade3Ea1OMnvM2fMnB1PhzgAAABU"]
[Thu Apr 09 22:26:25.910018 2026] [:error] [pid 24515:tid 24531] [client 20.199.96.18:63581] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fe5.php"] [unique_id "ade3Ea1OMnvM2fMnB1PhzwAAAAw"]
[Thu Apr 09 22:26:26.398305 2026] [:error] [pid 20837:tid 20847] [client 20.199.96.18:56628] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fe5.php"] [unique_id "ade3EvSL71FHZkjrGzMJ_QAAAYg"]
[Thu Apr 09 22:26:26.881338 2026] [:error] [pid 24515:tid 24538] [client 20.199.96.18:58371] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "ade3Eq1OMnvM2fMnB1Ph0gAAABM"]
[Thu Apr 09 22:26:27.361671 2026] [:error] [pid 63331:tid 63356] [client 20.199.96.18:58398] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "ade3EybKfIYuVjWbE4WQQwAAAdc"]
[Thu Apr 09 22:26:27.853695 2026] [:error] [pid 63331:tid 63355] [client 20.199.96.18:54175] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "ade3EybKfIYuVjWbE4WQRwAAAdY"]
[Thu Apr 09 22:26:28.331304 2026] [:error] [pid 24624:tid 24632] [client 20.199.96.18:61716] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "ade3FO4Jn-WvK1ZBTvjuqwAAAMY"]
[Thu Apr 09 22:26:28.816997 2026] [:error] [pid 24515:tid 24519] [client 20.199.96.18:56571] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/av.php"] [unique_id "ade3FK1OMnvM2fMnB1Ph1AAAAAA"]
[Thu Apr 09 22:26:29.290967 2026] [:error] [pid 24515:tid 24542] [client 20.199.96.18:53747] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/av.php"] [unique_id "ade3Fa1OMnvM2fMnB1Ph1gAAABc"]
[Thu Apr 09 22:26:29.788456 2026] [:error] [pid 18477:tid 18503] [client 20.199.96.18:58403] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/av.php"] [unique_id "ade3FcDe826HlFeoLPKoFAAAAVg"]
[Thu Apr 09 22:26:30.267026 2026] [:error] [pid 24516:tid 24565] [client 20.199.96.18:54195] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/av.php"] [unique_id "ade3FthW7vSS-UkeWCU75gAAAFI"]
[Thu Apr 09 22:26:30.748376 2026] [:error] [pid 24515:tid 24539] [client 20.199.96.18:64547] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/abcd.php"] [unique_id "ade3Fq1OMnvM2fMnB1Ph2gAAABQ"]
[Thu Apr 09 22:26:31.230012 2026] [:error] [pid 24515:tid 24533] [client 20.199.96.18:61725] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/abcd.php"] [unique_id "ade3F61OMnvM2fMnB1Ph3QAAAA4"]
[Thu Apr 09 22:26:31.714499 2026] [:error] [pid 24624:tid 24638] [client 20.199.96.18:56637] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/abcd.php"] [unique_id "ade3F-4Jn-WvK1ZBTvjurwAAAMw"]
[Thu Apr 09 22:26:32.196837 2026] [:error] [pid 24516:tid 24559] [client 20.199.96.18:61745] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/abcd.php"] [unique_id "ade3GNhW7vSS-UkeWCU75wAAAEw"]
[Thu Apr 09 22:26:32.681488 2026] [:error] [pid 24515:tid 24537] [client 20.199.96.18:54166] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fi.php"] [unique_id "ade3GK1OMnvM2fMnB1Ph4AAAABI"]
[Thu Apr 09 22:26:33.161537 2026] [:error] [pid 24515:tid 24525] [client 20.199.96.18:58399] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fi.php"] [unique_id "ade3Ga1OMnvM2fMnB1Ph4gAAAAY"]
[Thu Apr 09 22:26:33.642306 2026] [:error] [pid 18477:tid 18495] [client 20.199.96.18:61787] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fi.php"] [unique_id "ade3GcDe826HlFeoLPKoFwAAAVA"]
[Thu Apr 09 22:26:34.123547 2026] [:error] [pid 20837:tid 20863] [client 20.199.96.18:61717] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fi.php"] [unique_id "ade3GvSL71FHZkjrGzMKAAAAAZg"]
[Thu Apr 09 22:26:34.596675 2026] [:error] [pid 24517:tid 24579] [client 20.199.96.18:53723] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a1.php"] [unique_id "ade3GnboYEn2ZFM_PS-HvAAAAIU"]
[Thu Apr 09 22:26:35.104956 2026] [:error] [pid 24517:tid 24588] [client 20.199.96.18:54194] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a1.php"] [unique_id "ade3G3boYEn2ZFM_PS-HvwAAAI4"]
[Thu Apr 09 22:26:35.578473 2026] [:error] [pid 24517:tid 24592] [client 20.199.96.18:61774] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a1.php"] [unique_id "ade3G3boYEn2ZFM_PS-HwAAAAJI"]
[Thu Apr 09 22:26:36.055689 2026] [:error] [pid 24516:tid 24561] [client 20.199.96.18:53721] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a1.php"] [unique_id "ade3HNhW7vSS-UkeWCU76QAAAE4"]
[Thu Apr 09 22:26:36.528617 2026] [:error] [pid 24517:tid 24578] [client 20.199.96.18:54182] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/update/f35.php"] [unique_id "ade3HHboYEn2ZFM_PS-HwQAAAIQ"]
[Thu Apr 09 22:26:37.035351 2026] [:error] [pid 63331:tid 63356] [client 20.199.96.18:54192] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/update/f35.php"] [unique_id "ade3HSbKfIYuVjWbE4WQTgAAAdc"]
[Thu Apr 09 22:26:37.512302 2026] [:error] [pid 24515:tid 24534] [client 20.199.96.18:56526] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/update/f35.php"] [unique_id "ade3Ha1OMnvM2fMnB1Ph6AAAAA8"]
[Thu Apr 09 22:26:37.990831 2026] [:error] [pid 24515:tid 24540] [client 20.199.96.18:64600] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/update/f35.php"] [unique_id "ade3Ha1OMnvM2fMnB1Ph6QAAABU"]
[Thu Apr 09 22:26:38.466992 2026] [:error] [pid 24515:tid 24523] [client 20.199.96.18:61748] [client 20.199.96.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "ade3Hq1OMnvM2fMnB1Ph6gAAAAQ"]
[Thu Apr 09 22:26:38.952740 2026] [:error] [pid 24515:tid 24528] [client 20.199.96.18:64573] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f35.php"] [unique_id "ade3Hq1OMnvM2fMnB1Ph7AAAAAk"]
[Thu Apr 09 22:26:39.434173 2026] [:error] [pid 24515:tid 24543] [client 20.199.96.18:61739] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f35.php"] [unique_id "ade3H61OMnvM2fMnB1Ph7wAAABg"]
[Thu Apr 09 22:26:39.913322 2026] [:error] [pid 24515:tid 24519] [client 20.199.96.18:63576] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f35.php"] [unique_id "ade3H61OMnvM2fMnB1Ph8gAAAAA"]
[Thu Apr 09 22:26:40.384788 2026] [:error] [pid 20837:tid 20839] [client 20.199.96.18:64524] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "ade3IPSL71FHZkjrGzMKAQAAAYA"]
[Thu Apr 09 22:26:40.883630 2026] [:error] [pid 24515:tid 24542] [client 20.199.96.18:63651] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "ade3IK1OMnvM2fMnB1Ph9AAAABc"]
[Thu Apr 09 22:26:41.380850 2026] [:error] [pid 24515:tid 24523] [client 20.199.96.18:64512] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "ade3Ia1OMnvM2fMnB1Ph9gAAAAQ"]
[Thu Apr 09 22:26:41.854944 2026] [:error] [pid 20837:tid 20857] [client 20.199.96.18:63647] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "ade3IfSL71FHZkjrGzMKAwAAAZI"]
[Thu Apr 09 22:26:42.335791 2026] [:error] [pid 24516:tid 24557] [client 20.199.96.18:64606] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "ade3IthW7vSS-UkeWCU77QAAAEo"]
[Thu Apr 09 22:26:42.809793 2026] [:error] [pid 24515:tid 24531] [client 20.199.96.18:63575] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "ade3Iq1OMnvM2fMnB1Ph-QAAAAw"]
[Thu Apr 09 22:26:43.286699 2026] [:error] [pid 20837:tid 20854] [client 20.199.96.18:54164] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "ade3I_SL71FHZkjrGzMKBAAAAY8"]
[Thu Apr 09 22:26:43.760686 2026] [:error] [pid 20837:tid 20859] [client 20.199.96.18:54178] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "ade3I_SL71FHZkjrGzMKBQAAAZQ"]
[Thu Apr 09 22:26:44.252049 2026] [:error] [pid 24516:tid 24567] [client 20.199.96.18:61746] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/prv8.php"] [unique_id "ade3JNhW7vSS-UkeWCU77wAAAFQ"]
[Thu Apr 09 22:26:44.727574 2026] [:error] [pid 20837:tid 20855] [client 20.199.96.18:64574] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/prv8.php"] [unique_id "ade3JPSL71FHZkjrGzMKBwAAAZA"]
[Thu Apr 09 22:26:45.222183 2026] [:error] [pid 63331:tid 63357] [client 20.199.96.18:63592] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/prv8.php"] [unique_id "ade3JSbKfIYuVjWbE4WQVAAAAdg"]
[Thu Apr 09 22:26:45.695462 2026] [:error] [pid 20837:tid 20850] [client 20.199.96.18:56584] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/prv8.php"] [unique_id "ade3JfSL71FHZkjrGzMKCgAAAYs"]
[Thu Apr 09 22:26:46.166085 2026] [:error] [pid 63331:tid 63352] [client 20.199.96.18:23728] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/k.php"] [unique_id "ade3JibKfIYuVjWbE4WQVwAAAdM"]
[Thu Apr 09 22:26:46.640019 2026] [:error] [pid 20837:tid 20842] [client 20.199.96.18:44345] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/k.php"] [unique_id "ade3JvSL71FHZkjrGzMKCwAAAYM"]
[Thu Apr 09 22:26:47.110760 2026] [:error] [pid 20837:tid 20846] [client 20.199.96.18:58424] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/k.php"] [unique_id "ade3J_SL71FHZkjrGzMKDAAAAYc"]
[Thu Apr 09 22:26:47.587298 2026] [:error] [pid 20837:tid 20862] [client 20.199.96.18:58074] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/k.php"] [unique_id "ade3J_SL71FHZkjrGzMKDQAAAZc"]
[Thu Apr 09 22:26:48.075768 2026] [:error] [pid 20837:tid 20847] [client 20.199.96.18:64630] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bal.php"] [unique_id "ade3KPSL71FHZkjrGzMKDwAAAYg"]
[Thu Apr 09 22:26:48.548946 2026] [:error] [pid 20837:tid 20858] [client 20.199.96.18:43717] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bal.php"] [unique_id "ade3KPSL71FHZkjrGzMKEQAAAZM"]
[Thu Apr 09 22:26:49.021754 2026] [:error] [pid 24516:tid 24563] [client 20.199.96.18:58420] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bal.php"] [unique_id "ade3KdhW7vSS-UkeWCU78QAAAFA"]
[Thu Apr 09 22:26:49.500747 2026] [:error] [pid 20837:tid 20851] [client 20.199.96.18:53724] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bal.php"] [unique_id "ade3KfSL71FHZkjrGzMKFAAAAYw"]
[Thu Apr 09 22:26:49.981674 2026] [:error] [pid 20837:tid 20854] [client 20.199.96.18:58400] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/in.php"] [unique_id "ade3KfSL71FHZkjrGzMKFgAAAY8"]
[Thu Apr 09 22:26:50.466919 2026] [:error] [pid 20837:tid 20853] [client 20.199.96.18:54167] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/in.php"] [unique_id "ade3KvSL71FHZkjrGzMKGAAAAY4"]
[Thu Apr 09 22:26:50.945893 2026] [:error] [pid 20837:tid 20840] [client 20.199.96.18:56520] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/in.php"] [unique_id "ade3KvSL71FHZkjrGzMKGgAAAYE"]
[Thu Apr 09 22:26:51.437922 2026] [:error] [pid 20837:tid 20850] [client 20.199.96.18:61756] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/in.php"] [unique_id "ade3K_SL71FHZkjrGzMKGwAAAYs"]
[Thu Apr 09 22:26:51.913844 2026] [:error] [pid 20837:tid 20849] [client 20.199.96.18:61815] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gssdd.php"] [unique_id "ade3K_SL71FHZkjrGzMKHQAAAYo"]
[Thu Apr 09 22:26:52.386382 2026] [:error] [pid 24515:tid 24541] [client 20.199.96.18:56627] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gssdd.php"] [unique_id "ade3LK1OMnvM2fMnB1Ph_wAAABY"]
[Thu Apr 09 22:26:52.864568 2026] [:error] [pid 24515:tid 24542] [client 20.199.96.18:63582] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gssdd.php"] [unique_id "ade3LK1OMnvM2fMnB1PiAAAAABc"]
[Thu Apr 09 22:26:53.343914 2026] [:error] [pid 20837:tid 20846] [client 20.199.96.18:61790] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gssdd.php"] [unique_id "ade3LfSL71FHZkjrGzMKHgAAAYc"]
[Thu Apr 09 22:26:53.833005 2026] [:error] [pid 24624:tid 24627] [client 20.199.96.18:64633] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/motu.php"] [unique_id "ade3Le4Jn-WvK1ZBTvjutAAAAME"]
[Thu Apr 09 22:26:54.308829 2026] [:error] [pid 24624:tid 24643] [client 20.199.96.18:64516] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/motu.php"] [unique_id "ade3Lu4Jn-WvK1ZBTvjutQAAANE"]
[Thu Apr 09 22:26:54.782766 2026] [:error] [pid 24624:tid 24635] [client 20.199.96.18:44290] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/motu.php"] [unique_id "ade3Lu4Jn-WvK1ZBTvjutwAAAMk"]
[Thu Apr 09 22:26:55.259928 2026] [:error] [pid 20837:tid 20848] [client 20.199.96.18:56524] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/motu.php"] [unique_id "ade3L_SL71FHZkjrGzMKHwAAAYk"]
[Thu Apr 09 22:26:55.736911 2026] [:error] [pid 63331:tid 63342] [client 20.199.96.18:56593] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bs1.php"] [unique_id "ade3LybKfIYuVjWbE4WQXgAAAck"]
[Thu Apr 09 22:26:56.207331 2026] [:error] [pid 63331:tid 63340] [client 20.199.96.18:64579] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bs1.php"] [unique_id "ade3MCbKfIYuVjWbE4WQYQAAAcc"]
[Thu Apr 09 22:26:56.692152 2026] [:error] [pid 63331:tid 63343] [client 20.199.96.18:53755] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bs1.php"] [unique_id "ade3MCbKfIYuVjWbE4WQYwAAAco"]
[Thu Apr 09 22:26:57.162763 2026] [:error] [pid 20837:tid 20847] [client 20.199.96.18:56591] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bs1.php"] [unique_id "ade3MfSL71FHZkjrGzMKIgAAAYg"]
[Thu Apr 09 22:26:57.645273 2026] [:error] [pid 20837:tid 20861] [client 20.199.96.18:56606] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bengi.php"] [unique_id "ade3MfSL71FHZkjrGzMKIwAAAZY"]
[Thu Apr 09 22:26:58.119626 2026] [:error] [pid 18477:tid 18497] [client 20.199.96.18:44332] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bengi.php"] [unique_id "ade3MsDe826HlFeoLPKoGQAAAVI"]
[Thu Apr 09 22:26:58.632849 2026] [:error] [pid 18477:tid 18502] [client 20.199.96.18:64583] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bengi.php"] [unique_id "ade3MsDe826HlFeoLPKoGgAAAVc"]
[Thu Apr 09 22:26:59.109196 2026] [:error] [pid 20837:tid 20851] [client 20.199.96.18:58383] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bengi.php"] [unique_id "ade3M_SL71FHZkjrGzMKJgAAAYw"]
[Thu Apr 09 22:26:59.613960 2026] [:error] [pid 24515:tid 24538] [client 20.199.96.18:54151] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "ade3M61OMnvM2fMnB1PiBQAAABM"]
[Thu Apr 09 22:27:00.087673 2026] [:error] [pid 63331:tid 63333] [client 20.199.96.18:63598] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "ade3NCbKfIYuVjWbE4WQZgAAAcA"]
[Thu Apr 09 22:27:00.563066 2026] [:error] [pid 63331:tid 63335] [client 20.199.96.18:44302] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "ade3NCbKfIYuVjWbE4WQaQAAAcI"]
[Thu Apr 09 22:27:01.294848 2026] [proxy_fcgi:error] [pid 24624:tid 24645] [client 20.199.96.18:61730] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 22:27:01.535142 2026] [proxy_fcgi:error] [pid 24624:tid 24629] [client 20.199.96.18:61730] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 22:27:01.772717 2026] [proxy_fcgi:error] [pid 24624:tid 24642] [client 20.199.96.18:61730] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 22:27:02.012498 2026] [proxy_fcgi:error] [pid 24624:tid 24648] [client 20.199.96.18:61730] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 22:27:02.252122 2026] [proxy_fcgi:error] [pid 24624:tid 24630] [client 20.199.96.18:61730] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 22:27:02.490982 2026] [proxy_fcgi:error] [pid 24624:tid 24646] [client 20.199.96.18:61730] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 22:27:02.968668 2026] [proxy_fcgi:error] [pid 24624:tid 24631] [client 20.199.96.18:61730] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 22:27:03.207154 2026] [proxy_fcgi:error] [pid 24624:tid 24650] [client 20.199.96.18:61730] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 22:27:03.461790 2026] [proxy_fcgi:error] [pid 24624:tid 24627] [client 20.199.96.18:61730] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 22:27:03.699182 2026] [:error] [pid 24624:tid 24643] [client 20.199.96.18:61730] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class19.php"] [unique_id "ade3N-4Jn-WvK1ZBTvjuywAAANE"]
[Thu Apr 09 22:27:04.169780 2026] [:error] [pid 24624:tid 24636] [client 20.199.96.18:56560] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class19.php"] [unique_id "ade3OO4Jn-WvK1ZBTvjuzAAAAMo"]
[Thu Apr 09 22:27:04.726800 2026] [:error] [pid 24517:tid 24580] [client 20.199.96.18:64527] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class19.php"] [unique_id "ade3OHboYEn2ZFM_PS-HwgAAAIY"]
[Thu Apr 09 22:27:05.198317 2026] [:error] [pid 24517:tid 24597] [client 20.199.96.18:56565] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class19.php"] [unique_id "ade3OXboYEn2ZFM_PS-HxAAAAJc"]
[Thu Apr 09 22:27:05.686064 2026] [:error] [pid 24927:tid 24935] [client 20.199.96.18:58415] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class20.php"] [unique_id "ade3OTXObuzEuw8mNJsyjgAAAQU"]
[Thu Apr 09 22:27:06.163292 2026] [:error] [pid 63331:tid 63340] [client 20.199.96.18:53863] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class20.php"] [unique_id "ade3OibKfIYuVjWbE4WQbgAAAcc"]
[Thu Apr 09 22:27:06.643179 2026] [:error] [pid 63331:tid 63347] [client 20.199.96.18:54188] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class20.php"] [unique_id "ade3OibKfIYuVjWbE4WQcAAAAc4"]
[Thu Apr 09 22:27:07.153739 2026] [:error] [pid 24517:tid 24585] [client 20.199.96.18:63588] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class20.php"] [unique_id "ade3O3boYEn2ZFM_PS-HxQAAAIs"]
[Thu Apr 09 22:27:07.656643 2026] [:error] [pid 20837:tid 20840] [client 20.199.96.18:64594] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file18.php"] [unique_id "ade3O_SL71FHZkjrGzMKKwAAAYE"]
[Thu Apr 09 22:27:08.146534 2026] [:error] [pid 20837:tid 20857] [client 20.199.96.18:53730] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file18.php"] [unique_id "ade3PPSL71FHZkjrGzMKLAAAAZI"]
[Thu Apr 09 22:27:08.649428 2026] [:error] [pid 24516:tid 24568] [client 20.199.96.18:64515] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file18.php"] [unique_id "ade3PNhW7vSS-UkeWCU7-QAAAFU"]
[Thu Apr 09 22:27:09.158438 2026] [:error] [pid 18477:tid 18484] [client 20.199.96.18:61719] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file18.php"] [unique_id "ade3PcDe826HlFeoLPKoHwAAAUU"]
[Thu Apr 09 22:27:09.668158 2026] [:error] [pid 20837:tid 20842] [client 20.199.96.18:53731] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vee.php"] [unique_id "ade3PfSL71FHZkjrGzMKLwAAAYM"]
[Thu Apr 09 22:27:10.158528 2026] [:error] [pid 20837:tid 20848] [client 20.199.96.18:58401] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vee.php"] [unique_id "ade3PvSL71FHZkjrGzMKMgAAAYk"]
[Thu Apr 09 22:27:10.656656 2026] [:error] [pid 18477:tid 18479] [client 20.199.96.18:23696] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vee.php"] [unique_id "ade3PsDe826HlFeoLPKoIgAAAUA"]
[Thu Apr 09 22:27:11.180005 2026] [:error] [pid 63331:tid 63339] [client 20.199.96.18:44294] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vee.php"] [unique_id "ade3PybKfIYuVjWbE4WQdQAAAcY"]
[Thu Apr 09 22:27:11.689903 2026] [:error] [pid 18477:tid 18482] [client 20.199.96.18:56532] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cabs.php"] [unique_id "ade3P8De826HlFeoLPKoJgAAAUM"]
[Thu Apr 09 22:27:12.241976 2026] [:error] [pid 24515:tid 24535] [client 20.199.96.18:61754] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cabs.php"] [unique_id "ade3QK1OMnvM2fMnB1PiDAAAABA"]
[Thu Apr 09 22:27:12.745912 2026] [:error] [pid 24515:tid 24539] [client 20.199.96.18:58063] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cabs.php"] [unique_id "ade3QK1OMnvM2fMnB1PiDgAAABQ"]
[Thu Apr 09 22:27:13.319750 2026] [:error] [pid 24515:tid 24532] [client 20.199.96.18:63563] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cabs.php"] [unique_id "ade3Qa1OMnvM2fMnB1PiEgAAAA0"]
[Thu Apr 09 22:27:13.831717 2026] [:error] [pid 24624:tid 24639] [client 20.199.96.18:63625] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xwx1.php"] [unique_id "ade3Qe4Jn-WvK1ZBTvju0wAAAM0"]
[Thu Apr 09 22:27:14.331602 2026] [:error] [pid 24517:tid 24584] [client 20.199.96.18:58408] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xwx1.php"] [unique_id "ade3QnboYEn2ZFM_PS-HyQAAAIo"]
[Thu Apr 09 22:27:14.957341 2026] [:error] [pid 24624:tid 24637] [client 20.199.96.18:56595] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xwx1.php"] [unique_id "ade3Qu4Jn-WvK1ZBTvju1gAAAMs"]
[Thu Apr 09 22:27:15.475276 2026] [:error] [pid 24624:tid 24646] [client 20.199.96.18:63669] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xwx1.php"] [unique_id "ade3Q-4Jn-WvK1ZBTvju2QAAANQ"]
[Thu Apr 09 22:27:16.167674 2026] [:error] [pid 24515:tid 24538] [client 20.199.96.18:56614] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x1da.php"] [unique_id "ade3RK1OMnvM2fMnB1PiFgAAABM"]
[Thu Apr 09 22:27:16.880209 2026] [:error] [pid 24515:tid 24521] [client 20.199.96.18:61793] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x1da.php"] [unique_id "ade3RK1OMnvM2fMnB1PiGQAAAAI"]
[Thu Apr 09 22:27:17.369925 2026] [:error] [pid 63331:tid 63351] [client 20.199.96.18:44318] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x1da.php"] [unique_id "ade3RSbKfIYuVjWbE4WQgQAAAdI"]
[Thu Apr 09 22:27:17.907998 2026] [:error] [pid 20837:tid 20852] [client 20.199.96.18:44288] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x1da.php"] [unique_id "ade3RfSL71FHZkjrGzMKPAAAAY0"]
[Thu Apr 09 22:27:18.426426 2026] [:error] [pid 24515:tid 24525] [client 20.199.96.18:64586] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jp.php"] [unique_id "ade3Rq1OMnvM2fMnB1PiHQAAAAY"]
[Thu Apr 09 22:27:18.932761 2026] [:error] [pid 24515:tid 24527] [client 20.199.96.18:64622] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jp.php"] [unique_id "ade3Rq1OMnvM2fMnB1PiIAAAAAg"]
[Thu Apr 09 22:27:19.419009 2026] [:error] [pid 24515:tid 24522] [client 20.199.96.18:53729] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jp.php"] [unique_id "ade3R61OMnvM2fMnB1PiIwAAAAM"]
[Thu Apr 09 22:27:19.935833 2026] [:error] [pid 24515:tid 24520] [client 20.199.96.18:63649] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jp.php"] [unique_id "ade3R61OMnvM2fMnB1PiJQAAAAE"]
[Thu Apr 09 22:27:20.432276 2026] [:error] [pid 24515:tid 24540] [client 20.199.96.18:63597] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/chosen.php"] [unique_id "ade3SK1OMnvM2fMnB1PiJwAAABU"]
[Thu Apr 09 22:27:20.979156 2026] [:error] [pid 20837:tid 20841] [client 20.199.96.18:58070] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/chosen.php"] [unique_id "ade3SPSL71FHZkjrGzMKPgAAAYI"]
[Thu Apr 09 22:27:21.485456 2026] [:error] [pid 24515:tid 24530] [client 20.199.96.18:44310] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/chosen.php"] [unique_id "ade3Sa1OMnvM2fMnB1PiKwAAAAs"]
[Thu Apr 09 22:27:21.995013 2026] [:error] [pid 18477:tid 18493] [client 20.199.96.18:64546] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/chosen.php"] [unique_id "ade3ScDe826HlFeoLPKoLQAAAU4"]
[Thu Apr 09 23:01:25.271977 2026] [:error] [pid 20837:tid 20842] [client 20.100.175.19:65223] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ade_RfSL71FHZkjrGzMT-gAAAYM"]
[Thu Apr 09 23:01:28.442410 2026] [proxy_fcgi:error] [pid 24515:tid 24532] [client 20.100.175.19:64814] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 23:01:28.706712 2026] [proxy_fcgi:error] [pid 24515:tid 24536] [client 20.100.175.19:64814] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 23:01:28.983555 2026] [proxy_fcgi:error] [pid 24515:tid 24540] [client 20.100.175.19:64814] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 23:01:29.245755 2026] [proxy_fcgi:error] [pid 24515:tid 24539] [client 20.100.175.19:64814] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 23:01:29.504402 2026] [:error] [pid 24515:tid 24542] [client 20.100.175.19:64814] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/5xkfgawzejgwqh9hiaznCdefault.php"] [unique_id "ade_Sa1OMnvM2fMnB1P1hgAAABc"]
[Thu Apr 09 23:01:34.797936 2026] [:error] [pid 24927:tid 24954] [client 20.100.175.19:64802] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/5xkfgawzejgwqh9hiaznCdefault.php"] [unique_id "ade_TjXObuzEuw8mNJs4_AAAARg"]
[Thu Apr 09 23:01:36.669817 2026] [:error] [pid 24927:tid 24951] [client 20.100.175.19:64777] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/5xkfgawzejgwqh9hiaznCdefault.php"] [unique_id "ade_UDXObuzEuw8mNJs5AQAAARU"]
[Thu Apr 09 23:01:37.953183 2026] [:error] [pid 20837:tid 20847] [client 20.100.175.19:64482] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/5xkfgawzejgwqh9hiaznCdefault.php"] [unique_id "ade_UfSL71FHZkjrGzMUEQAAAYg"]
[Thu Apr 09 23:01:39.048161 2026] [:error] [pid 24927:tid 24940] [client 20.100.175.19:65256] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/file61.php"] [unique_id "ade_UzXObuzEuw8mNJs5BgAAAQo"]
[Thu Apr 09 23:01:40.630008 2026] [:error] [pid 63331:tid 63351] [client 20.100.175.19:64490] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/file61.php"] [unique_id "ade_VCbKfIYuVjWbE4WfZwAAAdI"]
[Thu Apr 09 23:01:43.055967 2026] [:error] [pid 63331:tid 63339] [client 20.100.175.19:64895] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/file61.php"] [unique_id "ade_VybKfIYuVjWbE4WfawAAAcY"]
[Thu Apr 09 23:01:46.182591 2026] [:error] [pid 24517:tid 24582] [client 20.100.175.19:64493] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/file61.php"] [unique_id "ade_WnboYEn2ZFM_PS-MGwAAAIg"]
[Thu Apr 09 23:01:56.148387 2026] [:error] [pid 24516:tid 24547] [client 20.100.175.19:65220] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/term.php"] [unique_id "ade_ZNhW7vSS-UkeWCVA0AAAAEA"]
[Thu Apr 09 23:02:01.888460 2026] [:error] [pid 18477:tid 18483] [client 20.100.175.19:65249] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/term.php"] [unique_id "ade_acDe826HlFeoLPKvAwAAAUQ"]
[Thu Apr 09 23:02:04.007314 2026] [:error] [pid 18477:tid 18497] [client 20.100.175.19:64847] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/a7.php"] [unique_id "ade_bMDe826HlFeoLPKvBgAAAVI"]
[Thu Apr 09 23:02:05.851890 2026] [:error] [pid 63331:tid 63344] [client 20.100.175.19:64387] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/a7.php"] [unique_id "ade_bSbKfIYuVjWbE4WfkAAAAcs"]
[Thu Apr 09 23:02:06.885063 2026] [:error] [pid 18477:tid 18491] [client 20.100.175.19:64405] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/a7.php"] [unique_id "ade_bsDe826HlFeoLPKvDAAAAUw"]
[Thu Apr 09 23:02:08.694808 2026] [:error] [pid 63331:tid 63345] [client 20.100.175.19:64389] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/a7.php"] [unique_id "ade_cCbKfIYuVjWbE4WflgAAAcw"]
[Thu Apr 09 23:02:11.526650 2026] [:error] [pid 24515:tid 24521] [client 20.100.175.19:64842] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/tx78.php"] [unique_id "ade_c61OMnvM2fMnB1P1nwAAAAI"]
[Thu Apr 09 23:02:12.668355 2026] [:error] [pid 63331:tid 63344] [client 20.100.175.19:64455] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/tx78.php"] [unique_id "ade_dCbKfIYuVjWbE4WfnQAAAcs"]
[Thu Apr 09 23:02:13.893893 2026] [:error] [pid 63331:tid 63337] [client 20.100.175.19:64854] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/tx78.php"] [unique_id "ade_dSbKfIYuVjWbE4WfpAAAAcQ"]
[Thu Apr 09 23:02:15.354623 2026] [:error] [pid 63331:tid 63356] [client 20.100.175.19:64815] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/tx78.php"] [unique_id "ade_dybKfIYuVjWbE4WfqQAAAdc"]
[Thu Apr 09 23:02:17.142400 2026] [:error] [pid 20837:tid 20858] [client 20.100.175.19:64494] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wmore1.php"] [unique_id "ade_efSL71FHZkjrGzMUOgAAAZM"]
[Thu Apr 09 23:02:20.004906 2026] [:error] [pid 24515:tid 24532] [client 20.100.175.19:64794] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wmore1.php"] [unique_id "ade_fK1OMnvM2fMnB1P1qAAAAA0"]
[Thu Apr 09 23:02:23.986228 2026] [:error] [pid 20837:tid 20845] [client 20.100.175.19:64871] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wmore1.php"] [unique_id "ade_f_SL71FHZkjrGzMURwAAAYY"]
[Thu Apr 09 23:02:25.382052 2026] [:error] [pid 63331:tid 63352] [client 20.100.175.19:64863] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wmore1.php"] [unique_id "ade_gSbKfIYuVjWbE4WfuwAAAdM"]
[Thu Apr 09 23:02:27.055327 2026] [:error] [pid 24516:tid 24571] [client 20.100.175.19:65245] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/dass.php"] [unique_id "ade_g9hW7vSS-UkeWCVA4wAAAFg"]
[Thu Apr 09 23:02:28.559210 2026] [:error] [pid 18477:tid 18489] [client 20.100.175.19:64408] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/dass.php"] [unique_id "ade_hMDe826HlFeoLPKvEQAAAUo"]
[Thu Apr 09 23:02:29.823434 2026] [proxy_fcgi:error] [pid 24624:tid 24630] [client 20.100.175.19:64795] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 23:02:30.090439 2026] [proxy_fcgi:error] [pid 24624:tid 24628] [client 20.100.175.19:64795] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 23:02:30.353476 2026] [proxy_fcgi:error] [pid 24624:tid 24650] [client 20.100.175.19:64795] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 23:02:30.978078 2026] [proxy_fcgi:error] [pid 24624:tid 24631] [client 20.100.175.19:64795] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 23:02:31.242279 2026] [proxy_fcgi:error] [pid 24624:tid 24632] [client 20.100.175.19:64795] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 23:02:31.537732 2026] [:error] [pid 24624:tid 24644] [client 20.100.175.19:64795] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/8573.php"] [unique_id "ade_h-4Jn-WvK1ZBTvj4WwAAANI"]
[Thu Apr 09 23:02:32.563771 2026] [:error] [pid 20837:tid 20840] [client 20.100.175.19:65230] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/8573.php"] [unique_id "ade_iPSL71FHZkjrGzMUVQAAAYE"]
[Thu Apr 09 23:02:33.628553 2026] [:error] [pid 63331:tid 63348] [client 20.100.175.19:64844] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/8573.php"] [unique_id "ade_iSbKfIYuVjWbE4WfxwAAAc8"]
[Thu Apr 09 23:02:34.789551 2026] [:error] [pid 24515:tid 24530] [client 20.100.175.19:64439] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/8573.php"] [unique_id "ade_iq1OMnvM2fMnB1P1tAAAAAs"]
[Thu Apr 09 23:02:36.107928 2026] [:error] [pid 24515:tid 24532] [client 20.100.175.19:64846] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/torsa1.php"] [unique_id "ade_jK1OMnvM2fMnB1P1uAAAAA0"]
[Thu Apr 09 23:02:38.638946 2026] [:error] [pid 20837:tid 20851] [client 20.100.175.19:64788] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/torsa1.php"] [unique_id "ade_jvSL71FHZkjrGzMUWQAAAYw"]
[Thu Apr 09 23:02:40.861961 2026] [:error] [pid 24515:tid 24530] [client 20.100.175.19:64392] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/torsa1.php"] [unique_id "ade_kK1OMnvM2fMnB1P1wwAAAAs"]
[Thu Apr 09 23:02:43.971311 2026] [:error] [pid 24515:tid 24542] [client 20.100.175.19:65231] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/torsa1.php"] [unique_id "ade_k61OMnvM2fMnB1P15gAAABc"]
[Thu Apr 09 23:02:45.895729 2026] [:error] [pid 24624:tid 24628] [client 20.100.175.19:65266] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-good.php"] [unique_id "ade_le4Jn-WvK1ZBTvj4aAAAAMI"]
[Thu Apr 09 23:02:47.677118 2026] [:error] [pid 18477:tid 18498] [client 20.100.175.19:64849] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-good.php"] [unique_id "ade_l8De826HlFeoLPKvEwAAAVM"]
[Thu Apr 09 23:02:49.029324 2026] [:error] [pid 24517:tid 24574] [client 20.100.175.19:64462] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-good.php"] [unique_id "ade_mXboYEn2ZFM_PS-MOgAAAIA"]
[Thu Apr 09 23:02:50.306497 2026] [:error] [pid 24927:tid 24937] [client 20.100.175.19:64789] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-good.php"] [unique_id "ade_mjXObuzEuw8mNJs5HAAAAQc"]
[Thu Apr 09 23:02:51.960185 2026] [:error] [pid 20837:tid 20842] [client 20.100.175.19:64507] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/gfd.php"] [unique_id "ade_m_SL71FHZkjrGzMUYAAAAYM"]
[Thu Apr 09 23:02:52.850037 2026] [:error] [pid 24517:tid 24587] [client 20.100.175.19:64419] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/gfd.php"] [unique_id "ade_nHboYEn2ZFM_PS-MPQAAAI0"]
[Thu Apr 09 23:02:53.533767 2026] [:error] [pid 20837:tid 20863] [client 20.100.175.19:64496] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/gfd.php"] [unique_id "ade_nfSL71FHZkjrGzMUYgAAAZg"]
[Thu Apr 09 23:02:54.356189 2026] [:error] [pid 20837:tid 20862] [client 20.100.175.19:64889] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/gfd.php"] [unique_id "ade_nvSL71FHZkjrGzMUYwAAAZc"]
[Thu Apr 09 23:02:55.428479 2026] [:error] [pid 63331:tid 63340] [client 20.100.175.19:65228] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/asasx.php"] [unique_id "ade_nybKfIYuVjWbE4WgCAAAAcc"]
[Thu Apr 09 23:02:56.903902 2026] [:error] [pid 24517:tid 24583] [client 20.100.175.19:65274] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/asasx.php"] [unique_id "ade_oHboYEn2ZFM_PS-MQgAAAIk"]
[Thu Apr 09 23:02:58.078015 2026] [:error] [pid 24517:tid 24595] [client 20.100.175.19:64872] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/asasx.php"] [unique_id "ade_onboYEn2ZFM_PS-MRQAAAJU"]
[Thu Apr 09 23:03:01.319230 2026] [:error] [pid 24516:tid 24547] [client 20.100.175.19:64492] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/asasx.php"] [unique_id "ade_pdhW7vSS-UkeWCVA8AAAAEA"]
[Thu Apr 09 23:03:04.560225 2026] [:error] [pid 20837:tid 20839] [client 20.100.175.19:64485] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/gptsh.php"] [unique_id "ade_qPSL71FHZkjrGzMUaAAAAYA"]
[Thu Apr 09 23:03:09.279724 2026] [:error] [pid 24515:tid 24523] [client 20.100.175.19:65227] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/gptsh.php"] [unique_id "ade_ra1OMnvM2fMnB1P1_gAAAAQ"]
[Thu Apr 09 23:03:12.717298 2026] [:error] [pid 24515:tid 24538] [client 20.100.175.19:64435] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/gptsh.php"] [unique_id "ade_sK1OMnvM2fMnB1P2BwAAABM"]
[Thu Apr 09 23:03:19.338366 2026] [:error] [pid 24516:tid 24558] [client 20.100.175.19:64448] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/666.php"] [unique_id "ade_t9hW7vSS-UkeWCVA9QAAAEs"]
[Thu Apr 09 23:03:22.183273 2026] [:error] [pid 24515:tid 24519] [client 20.100.175.19:64843] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/666.php"] [unique_id "ade_uq1OMnvM2fMnB1P2IQAAAAA"]
[Thu Apr 09 23:03:24.351179 2026] [:error] [pid 20837:tid 20862] [client 20.100.175.19:64404] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/666.php"] [unique_id "ade_vPSL71FHZkjrGzMUdAAAAZc"]
[Thu Apr 09 23:03:26.820769 2026] [:error] [pid 63331:tid 63350] [client 20.100.175.19:64836] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/666.php"] [unique_id "ade_vibKfIYuVjWbE4WgFQAAAdE"]
[Thu Apr 09 23:03:28.451839 2026] [:error] [pid 24515:tid 24524] [client 20.100.175.19:64785] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws86.php"] [unique_id "ade_wK1OMnvM2fMnB1P2MwAAAAU"]
[Thu Apr 09 23:03:30.141999 2026] [:error] [pid 24515:tid 24532] [client 20.100.175.19:64509] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws86.php"] [unique_id "ade_wq1OMnvM2fMnB1P2OwAAAA0"]
[Thu Apr 09 23:03:33.061897 2026] [proxy_fcgi:error] [pid 18477:tid 18502] [client 20.100.175.19:64391] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 23:03:33.325338 2026] [proxy_fcgi:error] [pid 18477:tid 18491] [client 20.100.175.19:64391] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 23:03:33.823034 2026] [proxy_fcgi:error] [pid 18477:tid 18493] [client 20.100.175.19:64391] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 23:03:34.082491 2026] [:error] [pid 18477:tid 18480] [client 20.100.175.19:64391] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ade_xsDe826HlFeoLPKvHgAAAUE"]
[Thu Apr 09 23:03:37.525139 2026] [:error] [pid 63331:tid 63351] [client 20.100.175.19:65238] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ade_ySbKfIYuVjWbE4WgJQAAAdI"]
[Thu Apr 09 23:03:41.152390 2026] [:error] [pid 24624:tid 24636] [client 20.100.175.19:64481] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ade_ze4Jn-WvK1ZBTvj4hAAAAMo"]
[Thu Apr 09 23:03:42.971367 2026] [:error] [pid 24515:tid 24530] [client 20.100.175.19:64834] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ade_zq1OMnvM2fMnB1P2bAAAAAs"]
[Thu Apr 09 23:03:43.716441 2026] [:error] [pid 24515:tid 24532] [client 20.100.175.19:64796] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/q7lhrgzoo7ijhnkcedq2Cdefault.php"] [unique_id "ade_z61OMnvM2fMnB1P2cgAAAA0"]
[Thu Apr 09 23:03:44.603131 2026] [:error] [pid 24516:tid 24550] [client 20.100.175.19:64823] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/q7lhrgzoo7ijhnkcedq2Cdefault.php"] [unique_id "ade_0NhW7vSS-UkeWCVA_QAAAEM"]
[Thu Apr 09 23:03:45.602565 2026] [:error] [pid 20837:tid 20856] [client 20.100.175.19:64816] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/q7lhrgzoo7ijhnkcedq2Cdefault.php"] [unique_id "ade_0fSL71FHZkjrGzMUhQAAAZE"]
[Thu Apr 09 23:03:46.683057 2026] [:error] [pid 18477:tid 18493] [client 20.100.175.19:64454] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/q7lhrgzoo7ijhnkcedq2Cdefault.php"] [unique_id "ade_0sDe826HlFeoLPKvKwAAAU4"]
[Thu Apr 09 23:03:47.712556 2026] [:error] [pid 20837:tid 20854] [client 20.100.175.19:64466] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/exhds0ucw0ju9vjgasxqCdefault.php"] [unique_id "ade_0_SL71FHZkjrGzMUiQAAAY8"]
[Thu Apr 09 23:03:48.539502 2026] [:error] [pid 24624:tid 24649] [client 20.100.175.19:64503] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/exhds0ucw0ju9vjgasxqCdefault.php"] [unique_id "ade_1O4Jn-WvK1ZBTvj4lQAAANc"]
[Thu Apr 09 23:03:49.611070 2026] [:error] [pid 24624:tid 24626] [client 20.100.175.19:63903] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/exhds0ucw0ju9vjgasxqCdefault.php"] [unique_id "ade_1e4Jn-WvK1ZBTvj4lwAAAMA"]
[Thu Apr 09 23:03:50.872330 2026] [:error] [pid 24515:tid 24540] [client 20.100.175.19:65237] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/exhds0ucw0ju9vjgasxqCdefault.php"] [unique_id "ade_1q1OMnvM2fMnB1P2eAAAABU"]
[Thu Apr 09 23:03:52.540898 2026] [:error] [pid 18477:tid 18489] [client 20.100.175.19:63472] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "ade_2MDe826HlFeoLPKvMgAAAUo"]
[Thu Apr 09 23:03:54.293119 2026] [:error] [pid 24624:tid 24637] [client 20.100.175.19:65263] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "ade_2u4Jn-WvK1ZBTvj4mwAAAMs"]
[Thu Apr 09 23:03:58.081978 2026] [:error] [pid 20837:tid 20844] [client 20.100.175.19:64409] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "ade_3vSL71FHZkjrGzMUkgAAAYU"]
[Thu Apr 09 23:03:59.543614 2026] [:error] [pid 24515:tid 24542] [client 20.100.175.19:64483] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "ade_361OMnvM2fMnB1P2fgAAABc"]
[Thu Apr 09 23:04:03.658796 2026] [:error] [pid 24515:tid 24541] [client 20.100.175.19:64395] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bless.php"] [unique_id "ade_461OMnvM2fMnB1P2iwAAABY"]
[Thu Apr 09 23:04:06.616887 2026] [:error] [pid 24515:tid 24536] [client 20.100.175.19:65260] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bless.php"] [unique_id "ade_5q1OMnvM2fMnB1P2jwAAABE"]
[Thu Apr 09 23:04:11.929148 2026] [:error] [pid 24515:tid 24542] [client 20.100.175.19:64830] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bless.php"] [unique_id "ade_661OMnvM2fMnB1P2mQAAABc"]
[Thu Apr 09 23:04:14.754123 2026] [:error] [pid 24624:tid 24629] [client 20.100.175.19:63893] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bless.php"] [unique_id "ade_7u4Jn-WvK1ZBTvj4qQAAAMM"]
[Thu Apr 09 23:04:18.315491 2026] [:error] [pid 63331:tid 63334] [client 20.100.175.19:65222] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bolt.php"] [unique_id "ade_8ibKfIYuVjWbE4WgSwAAAcE"]
[Thu Apr 09 23:04:22.865593 2026] [:error] [pid 24516:tid 24548] [client 20.100.175.19:64891] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bolt.php"] [unique_id "ade_9thW7vSS-UkeWCVBBAAAAEE"]
[Thu Apr 09 23:04:27.733104 2026] [:error] [pid 24624:tid 24640] [client 20.100.175.19:64892] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bolt.php"] [unique_id "ade_--4Jn-WvK1ZBTvj4ugAAAM4"]
[Thu Apr 09 23:04:42.722442 2026] [proxy_fcgi:error] [pid 63331:tid 63352] [client 20.100.175.19:65258] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 23:04:42.989378 2026] [proxy_fcgi:error] [pid 63331:tid 63341] [client 20.100.175.19:65258] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 23:04:45.140720 2026] [proxy_fcgi:error] [pid 63331:tid 63340] [client 20.100.175.19:65258] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 23:04:45.424699 2026] [proxy_fcgi:error] [pid 63331:tid 63350] [client 20.100.175.19:65258] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 23:04:45.729919 2026] [proxy_fcgi:error] [pid 63331:tid 63335] [client 20.100.175.19:65258] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 23:04:46.030071 2026] [proxy_fcgi:error] [pid 63331:tid 63355] [client 20.100.175.19:65258] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 23:04:46.342291 2026] [proxy_fcgi:error] [pid 63331:tid 63349] [client 20.100.175.19:65258] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 23:04:46.644825 2026] [proxy_fcgi:error] [pid 63331:tid 63344] [client 20.100.175.19:65258] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 23:04:46.967472 2026] [proxy_fcgi:error] [pid 63331:tid 63357] [client 20.100.175.19:65258] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 23:04:47.551605 2026] [:error] [pid 63331:tid 63341] [client 20.100.175.19:65258] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/classwithtostring.php"] [unique_id "adfADybKfIYuVjWbE4WghwAAAcg"]
[Thu Apr 09 23:04:53.709790 2026] [:error] [pid 20837:tid 20846] [client 20.100.175.19:64781] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/classwithtostring.php"] [unique_id "adfAFfSL71FHZkjrGzMUqAAAAYc"]
[Thu Apr 09 23:04:58.686787 2026] [:error] [pid 63331:tid 63340] [client 20.100.175.19:64772] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/classwithtostring.php"] [unique_id "adfAGibKfIYuVjWbE4WgjwAAAcc"]
[Thu Apr 09 23:05:06.224161 2026] [:error] [pid 24517:tid 24593] [client 20.100.175.19:64825] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws88.php"] [unique_id "adfAInboYEn2ZFM_PS-MaAAAAJM"]
[Thu Apr 09 23:05:07.422082 2026] [:error] [pid 24517:tid 24581] [client 20.100.175.19:64474] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws88.php"] [unique_id "adfAI3boYEn2ZFM_PS-MawAAAIc"]
[Thu Apr 09 23:05:08.648570 2026] [:error] [pid 20837:tid 20848] [client 20.100.175.19:64893] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws88.php"] [unique_id "adfAJPSL71FHZkjrGzMUtwAAAYk"]
[Thu Apr 09 23:05:11.166693 2026] [:error] [pid 24517:tid 24592] [client 20.100.175.19:65265] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws88.php"] [unique_id "adfAJ3boYEn2ZFM_PS-MdQAAAJI"]
[Thu Apr 09 23:05:12.415889 2026] [:error] [pid 24517:tid 24583] [client 20.100.175.19:64875] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/a5.php"] [unique_id "adfAKHboYEn2ZFM_PS-MeAAAAIk"]
[Thu Apr 09 23:05:13.904826 2026] [:error] [pid 24515:tid 24524] [client 20.100.175.19:63382] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/a5.php"] [unique_id "adfAKa1OMnvM2fMnB1P27gAAAAU"]
[Thu Apr 09 23:05:17.884696 2026] [:error] [pid 18477:tid 18494] [client 20.100.175.19:64818] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/a5.php"] [unique_id "adfALcDe826HlFeoLPKvVwAAAU8"]
[Thu Apr 09 23:05:21.253120 2026] [:error] [pid 20837:tid 20839] [client 20.100.175.19:64400] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/a5.php"] [unique_id "adfAMfSL71FHZkjrGzMU0AAAAYA"]
[Thu Apr 09 23:05:26.571608 2026] [:error] [pid 24515:tid 24543] [client 20.100.175.19:63902] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws.php"] [unique_id "adfANq1OMnvM2fMnB1P2_AAAABg"]
[Thu Apr 09 23:05:33.306332 2026] [:error] [pid 24927:tid 24942] [client 20.100.175.19:64388] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws.php"] [unique_id "adfAPTXObuzEuw8mNJs5YAAAAQw"]
[Thu Apr 09 23:05:41.072297 2026] [:error] [pid 18477:tid 18491] [client 20.100.175.19:64782] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/rithin.php"] [unique_id "adfARcDe826HlFeoLPKvXgAAAUw"]
[Thu Apr 09 23:05:43.077577 2026] [:error] [pid 24516:tid 24565] [client 20.100.175.19:64800] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/rithin.php"] [unique_id "adfAR9hW7vSS-UkeWCVBTgAAAFI"]
[Thu Apr 09 23:05:44.040000 2026] [:error] [pid 24927:tid 24950] [client 20.100.175.19:64510] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/rithin.php"] [unique_id "adfASDXObuzEuw8mNJs5awAAARQ"]
[Thu Apr 09 23:05:45.891899 2026] [:error] [pid 18477:tid 18502] [client 20.100.175.19:64402] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/rithin.php"] [unique_id "adfAScDe826HlFeoLPKvawAAAVc"]
[Thu Apr 09 23:05:47.130842 2026] [proxy_fcgi:error] [pid 24517:tid 24597] [client 20.100.175.19:64812] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 23:05:48.361566 2026] [proxy_fcgi:error] [pid 24517:tid 24580] [client 20.100.175.19:64812] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 23:05:48.623818 2026] [proxy_fcgi:error] [pid 24517:tid 24578] [client 20.100.175.19:64812] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 23:05:48.894759 2026] [proxy_fcgi:error] [pid 24517:tid 24591] [client 20.100.175.19:64812] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 23:05:49.170439 2026] [proxy_fcgi:error] [pid 24517:tid 24579] [client 20.100.175.19:64812] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 23:05:49.433916 2026] [proxy_fcgi:error] [pid 24517:tid 24585] [client 20.100.175.19:64812] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 23:05:49.696628 2026] [proxy_fcgi:error] [pid 24517:tid 24598] [client 20.100.175.19:64812] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 23:05:49.959596 2026] [proxy_fcgi:error] [pid 24517:tid 24574] [client 20.100.175.19:64812] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 23:05:50.234760 2026] [proxy_fcgi:error] [pid 24517:tid 24577] [client 20.100.175.19:64812] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 23:05:50.507231 2026] [proxy_fcgi:error] [pid 24517:tid 24596] [client 20.100.175.19:64812] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 23:05:50.894976 2026] [proxy_fcgi:error] [pid 24517:tid 24589] [client 20.100.175.19:64812] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 23:05:51.153986 2026] [:error] [pid 24517:tid 24594] [client 20.100.175.19:64812] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/t2gorhwasq4vioshtatw5eCdefault.php"] [unique_id "adfAT3boYEn2ZFM_PS-MlwAAAJQ"]
[Thu Apr 09 23:05:52.844164 2026] [:error] [pid 24927:tid 24949] [client 20.100.175.19:65273] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/t2gorhwasq4vioshtatw5eCdefault.php"] [unique_id "adfAUDXObuzEuw8mNJs5dQAAARM"]
[Thu Apr 09 23:05:54.037679 2026] [:error] [pid 24927:tid 24948] [client 20.100.175.19:63970] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/t2gorhwasq4vioshtatw5eCdefault.php"] [unique_id "adfAUjXObuzEuw8mNJs5eQAAARI"]
[Thu Apr 09 23:05:55.220517 2026] [:error] [pid 63331:tid 63345] [client 20.100.175.19:63430] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/t2gorhwasq4vioshtatw5eCdefault.php"] [unique_id "adfAUybKfIYuVjWbE4WglwAAAcw"]
[Thu Apr 09 23:05:56.761495 2026] [:error] [pid 63331:tid 63334] [client 20.100.175.19:64866] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/kj.php"] [unique_id "adfAVCbKfIYuVjWbE4WgmQAAAcE"]
[Thu Apr 09 23:05:57.926311 2026] [:error] [pid 24516:tid 24558] [client 20.100.175.19:64779] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/kj.php"] [unique_id "adfAVdhW7vSS-UkeWCVBVAAAAEs"]
[Thu Apr 09 23:05:59.965250 2026] [:error] [pid 63331:tid 63350] [client 20.100.175.19:65246] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/kj.php"] [unique_id "adfAVybKfIYuVjWbE4WgoAAAAdE"]
[Thu Apr 09 23:06:02.273175 2026] [:error] [pid 24515:tid 24538] [client 20.100.175.19:64813] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/kj.php"] [unique_id "adfAWq1OMnvM2fMnB1P3GwAAABM"]
[Thu Apr 09 23:06:03.214057 2026] [:error] [pid 24515:tid 24526] [client 20.100.175.19:64484] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/b4txckoieeyhynhsrpi9lCdefault.php"] [unique_id "adfAW61OMnvM2fMnB1P3IAAAAAc"]
[Thu Apr 09 23:06:04.061542 2026] [:error] [pid 20837:tid 20843] [client 20.100.175.19:64824] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/b4txckoieeyhynhsrpi9lCdefault.php"] [unique_id "adfAXPSL71FHZkjrGzMVDwAAAYQ"]
[Thu Apr 09 23:06:04.670115 2026] [:error] [pid 63331:tid 63341] [client 20.100.175.19:65264] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/b4txckoieeyhynhsrpi9lCdefault.php"] [unique_id "adfAXCbKfIYuVjWbE4WgpwAAAcg"]
[Thu Apr 09 23:06:05.560786 2026] [:error] [pid 63331:tid 63334] [client 20.100.175.19:63956] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/b4txckoieeyhynhsrpi9lCdefault.php"] [unique_id "adfAXSbKfIYuVjWbE4WgqwAAAcE"]
[Thu Apr 09 23:06:06.473653 2026] [:error] [pid 63331:tid 63354] [client 20.100.175.19:65253] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/CDX2.php"] [unique_id "adfAXibKfIYuVjWbE4WgrgAAAdU"]
[Thu Apr 09 23:06:07.169704 2026] [:error] [pid 24515:tid 24533] [client 20.100.175.19:64472] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/CDX2.php"] [unique_id "adfAX61OMnvM2fMnB1P3JAAAAA4"]
[Thu Apr 09 23:06:08.084169 2026] [:error] [pid 24927:tid 24934] [client 20.100.175.19:64473] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/CDX2.php"] [unique_id "adfAYDXObuzEuw8mNJs5ggAAAQQ"]
[Thu Apr 09 23:06:08.702821 2026] [:error] [pid 18477:tid 18496] [client 20.100.175.19:64894] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/CDX2.php"] [unique_id "adfAYMDe826HlFeoLPKvfQAAAVE"]
[Thu Apr 09 23:06:09.962591 2026] [:error] [pid 18477:tid 18490] [client 20.100.175.19:65236] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wziar1.php"] [unique_id "adfAYcDe826HlFeoLPKvgAAAAUs"]
[Thu Apr 09 23:06:11.052306 2026] [:error] [pid 24516:tid 24559] [client 20.100.175.19:64777] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wziar1.php"] [unique_id "adfAY9hW7vSS-UkeWCVBWQAAAEw"]
[Thu Apr 09 23:06:12.955802 2026] [:error] [pid 24515:tid 24528] [client 20.100.175.19:64505] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wziar1.php"] [unique_id "adfAZK1OMnvM2fMnB1P3LgAAAAk"]
[Thu Apr 09 23:06:14.685268 2026] [:error] [pid 63331:tid 63356] [client 20.100.175.19:64457] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wziar1.php"] [unique_id "adfAZibKfIYuVjWbE4WgxAAAAdc"]
[Thu Apr 09 23:06:15.544550 2026] [:error] [pid 24516:tid 24549] [client 20.100.175.19:64431] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "adfAZ9hW7vSS-UkeWCVBZQAAAEI"]
[Thu Apr 09 23:06:16.967303 2026] [:error] [pid 24515:tid 24531] [client 20.100.175.19:64448] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "adfAaK1OMnvM2fMnB1P3MAAAAAw"]
[Thu Apr 09 23:06:18.206817 2026] [:error] [pid 24515:tid 24532] [client 20.100.175.19:65247] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "adfAaq1OMnvM2fMnB1P3OAAAAA0"]
[Thu Apr 09 23:06:20.356660 2026] [:error] [pid 24515:tid 24523] [client 20.100.175.19:64459] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "adfAbK1OMnvM2fMnB1P3SQAAAAQ"]
[Thu Apr 09 23:06:21.480279 2026] [:error] [pid 63331:tid 63338] [client 20.100.175.19:64790] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/sadcut1.php"] [unique_id "adfAbSbKfIYuVjWbE4WgzgAAAcU"]
[Thu Apr 09 23:06:28.670643 2026] [:error] [pid 18477:tid 18488] [client 20.100.175.19:64774] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/sadcut1.php"] [unique_id "adfAdMDe826HlFeoLPKvmQAAAUk"]
[Thu Apr 09 23:06:32.690891 2026] [:error] [pid 24515:tid 24524] [client 20.100.175.19:63374] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/sadcut1.php"] [unique_id "adfAeK1OMnvM2fMnB1P3bgAAAAU"]
[Thu Apr 09 23:06:34.963099 2026] [:error] [pid 24624:tid 24642] [client 20.100.175.19:64384] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/sadcut1.php"] [unique_id "adfAeu4Jn-WvK1ZBTvj43wAAANA"]
[Thu Apr 09 23:06:37.197983 2026] [:error] [pid 63331:tid 63333] [client 20.100.175.19:64860] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/8daf1238_1774208172.php"] [unique_id "adfAfSbKfIYuVjWbE4Wg3wAAAcA"]
[Thu Apr 09 23:06:40.775666 2026] [:error] [pid 24516:tid 24556] [client 20.100.175.19:64408] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/8daf1238_1774208172.php"] [unique_id "adfAgNhW7vSS-UkeWCVBdAAAAEk"]
[Thu Apr 09 23:06:43.533085 2026] [:error] [pid 24624:tid 24633] [client 20.100.175.19:63979] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/8daf1238_1774208172.php"] [unique_id "adfAg-4Jn-WvK1ZBTvj45wAAAMc"]
[Thu Apr 09 23:06:47.938804 2026] [:error] [pid 20837:tid 20857] [client 20.100.175.19:64464] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/8daf1238_1774208172.php"] [unique_id "adfAh_SL71FHZkjrGzMVTAAAAZI"]
[Thu Apr 09 23:07:22.531800 2026] [proxy_fcgi:error] [pid 24624:tid 24635] [client 20.100.175.19:64449] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 23:07:22.796364 2026] [proxy_fcgi:error] [pid 24624:tid 24647] [client 20.100.175.19:64449] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 23:07:23.064022 2026] [proxy_fcgi:error] [pid 24624:tid 24648] [client 20.100.175.19:64449] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 23:07:23.327133 2026] [proxy_fcgi:error] [pid 24624:tid 24636] [client 20.100.175.19:64449] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 23:07:23.591179 2026] [proxy_fcgi:error] [pid 24624:tid 24641] [client 20.100.175.19:64449] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 23:07:23.855327 2026] [proxy_fcgi:error] [pid 24624:tid 24649] [client 20.100.175.19:64449] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 23:07:24.143184 2026] [proxy_fcgi:error] [pid 24624:tid 24634] [client 20.100.175.19:64449] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 23:07:24.412928 2026] [proxy_fcgi:error] [pid 24624:tid 24642] [client 20.100.175.19:64449] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 23:07:24.676503 2026] [proxy_fcgi:error] [pid 24624:tid 24626] [client 20.100.175.19:64449] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 23:07:24.955126 2026] [proxy_fcgi:error] [pid 24624:tid 24646] [client 20.100.175.19:64449] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 23:07:26.482087 2026] [proxy_fcgi:error] [pid 24624:tid 24628] [client 20.100.175.19:64449] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 23:07:26.755066 2026] [:error] [pid 24624:tid 24637] [client 20.100.175.19:64449] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/aligk.php"] [unique_id "adfAru4Jn-WvK1ZBTvj5GgAAAMs"]
[Thu Apr 09 23:07:34.877517 2026] [:error] [pid 24515:tid 24528] [client 20.100.175.19:65243] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/aligk.php"] [unique_id "adfAtq1OMnvM2fMnB1P39gAAAAk"]
[Thu Apr 09 23:07:37.921830 2026] [:error] [pid 18477:tid 18498] [client 20.100.175.19:64390] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/aligk.php"] [unique_id "adfAucDe826HlFeoLPKvtgAAAVM"]
[Thu Apr 09 23:07:47.683244 2026] [:error] [pid 20837:tid 20856] [client 20.100.175.19:64385] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wtiiy.php"] [unique_id "adfAw_SL71FHZkjrGzMVnQAAAZE"]
[Thu Apr 09 23:07:59.212710 2026] [:error] [pid 63331:tid 63341] [client 20.100.175.19:63437] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wtiiy.php"] [unique_id "adfAzybKfIYuVjWbE4WhPgAAAcg"]
[Thu Apr 09 23:08:01.601319 2026] [:error] [pid 63331:tid 63344] [client 20.100.175.19:64842] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "adfA0SbKfIYuVjWbE4WhTQAAAcs"]
[Thu Apr 09 23:08:03.376619 2026] [:error] [pid 18477:tid 18479] [client 20.100.175.19:64808] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "adfA08De826HlFeoLPKvyAAAAUA"]
[Thu Apr 09 23:08:07.048851 2026] [:error] [pid 63331:tid 63353] [client 20.100.175.19:64792] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "adfA1ybKfIYuVjWbE4WhYgAAAdQ"]
[Thu Apr 09 23:08:12.348049 2026] [:error] [pid 24517:tid 24574] [client 20.100.175.19:64787] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "adfA3HboYEn2ZFM_PS-M0AAAAIA"]
[Thu Apr 09 23:08:16.532759 2026] [:error] [pid 20837:tid 20857] [client 20.100.175.19:65278] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp.php"] [unique_id "adfA4PSL71FHZkjrGzMVywAAAZI"]
[Thu Apr 09 23:08:17.741531 2026] [:error] [pid 24515:tid 24525] [client 20.100.175.19:63927] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp.php"] [unique_id "adfA4a1OMnvM2fMnB1P4ggAAAAY"]
[Thu Apr 09 23:08:19.448793 2026] [:error] [pid 24927:tid 24932] [client 20.100.175.19:64452] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp.php"] [unique_id "adfA4zXObuzEuw8mNJs52QAAAQI"]
[Thu Apr 09 23:08:21.688506 2026] [:error] [pid 24515:tid 24536] [client 20.100.175.19:64768] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp.php"] [unique_id "adfA5a1OMnvM2fMnB1P4jwAAABE"]
[Thu Apr 09 23:08:24.404495 2026] [:error] [pid 24515:tid 24522] [client 20.100.175.19:64840] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/irpl4xz4fmlzm4tlvvu4h1mCdefault.php"] [unique_id "adfA6K1OMnvM2fMnB1P4mgAAAAM"]
[Thu Apr 09 23:08:33.090081 2026] [proxy_fcgi:error] [pid 24517:tid 24589] [client 20.100.175.19:64401] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 23:08:33.397729 2026] [proxy_fcgi:error] [pid 24517:tid 24582] [client 20.100.175.19:64401] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 23:08:33.660058 2026] [proxy_fcgi:error] [pid 24517:tid 24587] [client 20.100.175.19:64401] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 23:52:20.820433 2026] [proxy_fcgi:error] [pid 24515:tid 24527] [client 4.204.215.156:7164] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 23:52:23.065282 2026] [proxy_fcgi:error] [pid 24515:tid 24529] [client 4.204.215.156:7164] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 23:52:23.275433 2026] [:error] [pid 24515:tid 24524] [client 4.204.215.156:7164] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/chosen.php"] [unique_id "adfLN61OMnvM2fMnB1MGgQAAAAU"]
[Thu Apr 09 23:52:27.551571 2026] [:error] [pid 24515:tid 24538] [client 4.204.215.156:7099] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/chosen.php"] [unique_id "adfLO61OMnvM2fMnB1MGkAAAABM"]
[Thu Apr 09 23:52:30.208204 2026] [:error] [pid 24515:tid 24525] [client 4.204.215.156:7130] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/chosen.php"] [unique_id "adfLPq1OMnvM2fMnB1MGnQAAAAY"]
[Thu Apr 09 23:52:32.001605 2026] [:error] [pid 24515:tid 24533] [client 4.204.215.156:7127] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/chosen.php"] [unique_id "adfLQK1OMnvM2fMnB1MGqQAAAA4"]
[Thu Apr 09 23:52:33.144866 2026] [:error] [pid 24515:tid 24530] [client 4.204.215.156:7115] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/admin.php"] [unique_id "adfLQa1OMnvM2fMnB1MGrgAAAAs"]
[Thu Apr 09 23:52:37.640769 2026] [:error] [pid 24515:tid 24519] [client 4.204.215.156:7160] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/admin.php"] [unique_id "adfLRa1OMnvM2fMnB1MGxAAAAAA"]
[Thu Apr 09 23:52:43.048705 2026] [:error] [pid 18477:tid 18499] [client 4.204.215.156:7138] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/admin.php"] [unique_id "adfLS8De826HlFeoLPK0FwAAAVQ"]
[Thu Apr 09 23:52:52.135249 2026] [:error] [pid 24624:tid 24639] [client 4.204.215.156:7140] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin.php"] [unique_id "adfLVO4Jn-WvK1ZBTvgAZgAAAM0"]
[Thu Apr 09 23:52:56.645432 2026] [:error] [pid 24515:tid 24535] [client 4.204.215.156:7135] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin.php"] [unique_id "adfLWK1OMnvM2fMnB1MG8AAAABA"]
[Thu Apr 09 23:53:00.237298 2026] [:error] [pid 18477:tid 18493] [client 4.204.215.156:7055] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin.php"] [unique_id "adfLXMDe826HlFeoLPK0HgAAAU4"]
[Thu Apr 09 23:53:02.959583 2026] [:error] [pid 24515:tid 24543] [client 4.204.215.156:7105] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin.php"] [unique_id "adfLXq1OMnvM2fMnB1MG_AAAABg"]
[Thu Apr 09 23:53:05.525798 2026] [:error] [pid 24515:tid 24531] [client 4.204.215.156:7152] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/install.php"] [unique_id "adfLYa1OMnvM2fMnB1MHBwAAAAw"]
[Thu Apr 09 23:53:06.583773 2026] [:error] [pid 20837:tid 20853] [client 4.204.215.156:7106] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/install.php"] [unique_id "adfLYvSL71FHZkjrGzMdhQAAAY4"]
[Thu Apr 09 23:53:07.877702 2026] [:error] [pid 24624:tid 24632] [client 4.204.215.156:7109] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/install.php"] [unique_id "adfLY-4Jn-WvK1ZBTvgAhwAAAMY"]
[Thu Apr 09 23:53:09.965297 2026] [:error] [pid 63331:tid 63350] [client 4.204.215.156:7009] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/install.php"] [unique_id "adfLZSbKfIYuVjWbE4WtAgAAAdE"]
[Thu Apr 09 23:53:11.724183 2026] [:error] [pid 24515:tid 24527] [client 4.204.215.156:7163] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "adfLZ61OMnvM2fMnB1MHGwAAAAg"]
[Thu Apr 09 23:53:13.912659 2026] [:error] [pid 24515:tid 24528] [client 4.204.215.156:7123] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "adfLaa1OMnvM2fMnB1MHHwAAAAk"]
[Thu Apr 09 23:53:19.236363 2026] [:error] [pid 24515:tid 24534] [client 4.204.215.156:7146] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "adfLb61OMnvM2fMnB1MHJgAAAA8"]
[Thu Apr 09 23:53:40.744298 2026] [:error] [pid 24624:tid 24641] [client 4.204.215.156:7061] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/maint/atomlib.php"] [unique_id "adfLhO4Jn-WvK1ZBTvgAmQAAAM8"]
[Thu Apr 09 23:53:45.832322 2026] [:error] [pid 24516:tid 24567] [client 4.204.215.156:7151] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/images/pomo.php"] [unique_id "adfLidhW7vSS-UkeWCVFvgAAAFQ"]
[Thu Apr 09 23:53:47.394679 2026] [:error] [pid 20837:tid 20847] [client 4.204.215.156:7063] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/images/pomo.php"] [unique_id "adfLi_SL71FHZkjrGzMdswAAAYg"]
[Thu Apr 09 23:53:48.270988 2026] [:error] [pid 63331:tid 63348] [client 4.204.215.156:7149] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/images/pomo.php"] [unique_id "adfLjCbKfIYuVjWbE4WtRgAAAc8"]
[Thu Apr 09 23:53:49.283516 2026] [:error] [pid 24515:tid 24531] [client 4.204.215.156:7047] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/images/pomo.php"] [unique_id "adfLja1OMnvM2fMnB1MHYAAAAAw"]
[Thu Apr 09 23:53:51.373359 2026] [:error] [pid 63331:tid 63339] [client 4.204.215.156:7162] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/includes/pomo.php"] [unique_id "adfLjybKfIYuVjWbE4WtSwAAAcY"]
[Thu Apr 09 23:53:53.372032 2026] [:error] [pid 18477:tid 18496] [client 4.204.215.156:7062] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/includes/pomo.php"] [unique_id "adfLkcDe826HlFeoLPK0LQAAAVE"]
[Thu Apr 09 23:53:54.366619 2026] [:error] [pid 24927:tid 24952] [client 4.204.215.156:7137] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/includes/pomo.php"] [unique_id "adfLkjXObuzEuw8mNJs_vQAAARY"]
[Thu Apr 09 23:53:55.975370 2026] [:error] [pid 20837:tid 20851] [client 4.204.215.156:7041] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/includes/pomo.php"] [unique_id "adfLk_SL71FHZkjrGzMduQAAAYw"]
[Thu Apr 09 23:53:58.467536 2026] [:error] [pid 24515:tid 24540] [client 4.204.215.156:7042] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/js/pomo.php"] [unique_id "adfLlq1OMnvM2fMnB1MHcAAAABU"]
[Thu Apr 09 23:54:00.155911 2026] [:error] [pid 24516:tid 24551] [client 4.204.215.156:7161] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/js/pomo.php"] [unique_id "adfLmNhW7vSS-UkeWCVFxQAAAEQ"]
[Thu Apr 09 23:54:02.971534 2026] [:error] [pid 24515:tid 24535] [client 4.204.215.156:7060] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/js/pomo.php"] [unique_id "adfLmq1OMnvM2fMnB1MHhQAAABA"]
[Thu Apr 09 23:54:06.270741 2026] [:error] [pid 63331:tid 63356] [client 4.204.215.156:6987] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/js/pomo.php"] [unique_id "adfLnibKfIYuVjWbE4WtVwAAAdc"]
[Thu Apr 09 23:54:12.682298 2026] [:error] [pid 20837:tid 20851] [client 4.204.215.156:6977] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/js/widgets/pomo.php"] [unique_id "adfLpPSL71FHZkjrGzMdxQAAAYw"]
[Thu Apr 09 23:54:15.601190 2026] [:error] [pid 24624:tid 24632] [client 4.204.215.156:7166] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/js/widgets/pomo.php"] [unique_id "adfLp-4Jn-WvK1ZBTvgAsgAAAMY"]
[Thu Apr 09 23:54:17.545085 2026] [:error] [pid 20837:tid 20842] [client 4.204.215.156:7118] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/js/widgets/pomo.php"] [unique_id "adfLqfSL71FHZkjrGzMdzAAAAYM"]
[Thu Apr 09 23:54:20.017825 2026] [:error] [pid 20837:tid 20848] [client 4.204.215.156:7143] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/js/widgets/pomo.php"] [unique_id "adfLrPSL71FHZkjrGzMd0QAAAYk"]
[Thu Apr 09 23:54:22.377526 2026] [:error] [pid 24517:tid 24594] [client 4.204.215.156:7117] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/network/pomo.php"] [unique_id "adfLrnboYEn2ZFM_PS-P3gAAAJQ"]
[Thu Apr 09 23:54:23.734107 2026] [:error] [pid 20837:tid 20855] [client 4.204.215.156:7134] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/network/pomo.php"] [unique_id "adfLr_SL71FHZkjrGzMd1QAAAZA"]
[Thu Apr 09 23:54:25.370887 2026] [:error] [pid 24515:tid 24536] [client 4.204.215.156:7110] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/network/pomo.php"] [unique_id "adfLsa1OMnvM2fMnB1MHqAAAABE"]
[Thu Apr 09 23:54:26.712046 2026] [:error] [pid 63331:tid 63339] [client 4.204.215.156:7082] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/network/pomo.php"] [unique_id "adfLsibKfIYuVjWbE4WtZAAAAcY"]
[Thu Apr 09 23:54:30.273935 2026] [:error] [pid 18477:tid 18495] [client 4.204.215.156:7079] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/user/pomo.php"] [unique_id "adfLtsDe826HlFeoLPK0MgAAAVA"]
[Thu Apr 09 23:54:33.609052 2026] [:error] [pid 20837:tid 20851] [client 4.204.215.156:7068] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/mailer.php"] [unique_id "adfLufSL71FHZkjrGzMd5wAAAYw"]
[Thu Apr 09 23:54:37.750556 2026] [:error] [pid 24515:tid 24542] [client 4.204.215.156:7051] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/mailer.php"] [unique_id "adfLva1OMnvM2fMnB1MHqgAAABc"]
[Thu Apr 09 23:54:42.066718 2026] [:error] [pid 24624:tid 24630] [client 4.204.215.156:7147] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/mailer.php"] [unique_id "adfLwu4Jn-WvK1ZBTvgAxwAAAMQ"]
[Thu Apr 09 23:55:05.194283 2026] [:error] [pid 20837:tid 20857] [client 4.204.215.156:7044] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/sendmail.php"] [unique_id "adfL2fSL71FHZkjrGzMd8gAAAZI"]
[Thu Apr 09 23:55:09.662340 2026] [:error] [pid 24516:tid 24556] [client 4.204.215.156:6978] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/send.php"] [unique_id "adfL3dhW7vSS-UkeWCVF1AAAAEk"]
[Thu Apr 09 23:55:12.652658 2026] [:error] [pid 63331:tid 63339] [client 4.204.215.156:7157] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/send.php"] [unique_id "adfL4CbKfIYuVjWbE4WthAAAAcY"]
[Thu Apr 09 23:55:17.273907 2026] [:error] [pid 18477:tid 18487] [client 4.204.215.156:7064] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/send.php"] [unique_id "adfL5cDe826HlFeoLPK0OQAAAUg"]
[Thu Apr 09 23:55:20.210329 2026] [:error] [pid 63331:tid 63352] [client 4.204.215.156:7076] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/send.php"] [unique_id "adfL6CbKfIYuVjWbE4WtiwAAAdM"]
[Thu Apr 09 23:55:22.239760 2026] [:error] [pid 20837:tid 20857] [client 4.204.215.156:7056] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/Sendemail.php"] [unique_id "adfL6vSL71FHZkjrGzMd_gAAAZI"]
[Thu Apr 09 23:55:24.344097 2026] [:error] [pid 24927:tid 24939] [client 4.204.215.156:7111] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/Sendemail.php"] [unique_id "adfL7DXObuzEuw8mNJs_1wAAAQk"]
[Thu Apr 09 23:55:26.049731 2026] [:error] [pid 24515:tid 24532] [client 4.204.215.156:7017] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/Sendemail.php"] [unique_id "adfL7q1OMnvM2fMnB1MHwQAAAA0"]
[Thu Apr 09 23:55:28.806411 2026] [:error] [pid 63331:tid 63350] [client 4.204.215.156:7070] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/Sendemail.php"] [unique_id "adfL8CbKfIYuVjWbE4WtjwAAAdE"]
[Thu Apr 09 23:55:31.066378 2026] [:error] [pid 20837:tid 20859] [client 4.204.215.156:7078] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/blog.php"] [unique_id "adfL8_SL71FHZkjrGzMeBAAAAZQ"]
[Thu Apr 09 23:55:33.266467 2026] [proxy_fcgi:error] [pid 20837:tid 20849] [client 4.204.215.156:7054] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 23:55:33.477008 2026] [proxy_fcgi:error] [pid 20837:tid 20850] [client 4.204.215.156:7054] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 23:55:33.704001 2026] [proxy_fcgi:error] [pid 20837:tid 20852] [client 4.204.215.156:7054] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 23:55:33.913509 2026] [proxy_fcgi:error] [pid 20837:tid 20847] [client 4.204.215.156:7054] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 23:55:34.122730 2026] [proxy_fcgi:error] [pid 20837:tid 20862] [client 4.204.215.156:7054] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 23:55:35.039725 2026] [proxy_fcgi:error] [pid 20837:tid 20861] [client 4.204.215.156:7054] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 23:55:35.264102 2026] [proxy_fcgi:error] [pid 20837:tid 20846] [client 4.204.215.156:7054] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 23:55:35.477589 2026] [proxy_fcgi:error] [pid 20837:tid 20857] [client 4.204.215.156:7054] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 23:55:35.704973 2026] [proxy_fcgi:error] [pid 20837:tid 20853] [client 4.204.215.156:7054] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 23:55:35.913016 2026] [proxy_fcgi:error] [pid 20837:tid 20840] [client 4.204.215.156:7054] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 23:55:36.125443 2026] [proxy_fcgi:error] [pid 20837:tid 20854] [client 4.204.215.156:7054] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 23:55:37.793994 2026] [:error] [pid 20837:tid 20850] [client 4.204.215.156:7054] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/alexus.php"] [unique_id "adfL-fSL71FHZkjrGzMeGgAAAYs"]
[Thu Apr 09 23:55:43.288948 2026] [:error] [pid 20837:tid 20843] [client 4.204.215.156:7120] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/alexus.php"] [unique_id "adfL__SL71FHZkjrGzMeIAAAAYQ"]
[Thu Apr 09 23:55:45.917780 2026] [:error] [pid 24515:tid 24541] [client 4.204.215.156:7086] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/alexus.php"] [unique_id "adfMAa1OMnvM2fMnB1MHzQAAABY"]
[Thu Apr 09 23:55:48.477403 2026] [:error] [pid 20837:tid 20854] [client 4.204.215.156:7131] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/alexus.php"] [unique_id "adfMBPSL71FHZkjrGzMeJAAAAY8"]
[Thu Apr 09 23:55:52.178206 2026] [:error] [pid 63331:tid 63345] [client 4.204.215.156:7141] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/alexuse.php"] [unique_id "adfMCCbKfIYuVjWbE4WtlwAAAcw"]
[Thu Apr 09 23:55:55.475336 2026] [:error] [pid 20837:tid 20847] [client 4.204.215.156:7032] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/alexuse.php"] [unique_id "adfMC_SL71FHZkjrGzMeLAAAAYg"]
[Thu Apr 09 23:55:56.724425 2026] [:error] [pid 18477:tid 18480] [client 4.204.215.156:7126] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/alexuse.php"] [unique_id "adfMDMDe826HlFeoLPK0PwAAAUE"]
[Thu Apr 09 23:55:59.143930 2026] [:error] [pid 20837:tid 20861] [client 4.204.215.156:7069] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/alexuse.php"] [unique_id "adfMD_SL71FHZkjrGzMeMAAAAZY"]
[Thu Apr 09 23:56:01.986568 2026] [:error] [pid 24515:tid 24541] [client 4.204.215.156:7158] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/alexusmailer%202.0.php"] [unique_id "adfMEa1OMnvM2fMnB1MH3AAAABY"]
[Thu Apr 09 23:56:06.248458 2026] [:error] [pid 63331:tid 63333] [client 4.204.215.156:7125] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/alexusmailer%202.0.php"] [unique_id "adfMFibKfIYuVjWbE4WtoAAAAcA"]
[Thu Apr 09 23:56:09.665111 2026] [:error] [pid 63331:tid 63345] [client 4.204.215.156:7088] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/alexusmailer%202.0.php"] [unique_id "adfMGSbKfIYuVjWbE4WtpQAAAcw"]
[Thu Apr 09 23:56:18.907457 2026] [:error] [pid 20837:tid 20860] [client 4.204.215.156:7057] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/leaf.php"] [unique_id "adfMIvSL71FHZkjrGzMeNwAAAZU"]
[Thu Apr 09 23:56:22.213345 2026] [:error] [pid 24927:tid 24945] [client 4.204.215.156:7098] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/leaf.php"] [unique_id "adfMJjXObuzEuw8mNJs_9gAAAQ8"]
[Thu Apr 09 23:56:24.804584 2026] [:error] [pid 24927:tid 24935] [client 4.204.215.156:7046] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/leaf.php"] [unique_id "adfMKDXObuzEuw8mNJs_9wAAAQU"]
[Thu Apr 09 23:56:27.290866 2026] [:error] [pid 24927:tid 24946] [client 4.204.215.156:7148] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/leaf.php"] [unique_id "adfMKzXObuzEuw8mNJs__AAAARA"]
[Thu Apr 09 23:56:28.635318 2026] [:error] [pid 24624:tid 24641] [client 4.204.215.156:7150] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/leafmailer.php"] [unique_id "adfMLO4Jn-WvK1ZBTvgBWAAAAM8"]
[Thu Apr 09 23:56:31.451727 2026] [:error] [pid 24515:tid 24522] [client 4.204.215.156:6984] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/leafmailer.php"] [unique_id "adfML61OMnvM2fMnB1MH8QAAAAM"]
[Thu Apr 09 23:56:34.530300 2026] [:error] [pid 24515:tid 24538] [client 4.204.215.156:7116] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/leafmailer.php"] [unique_id "adfMMq1OMnvM2fMnB1MH9gAAABM"]
[Thu Apr 09 23:56:36.129721 2026] [proxy_fcgi:error] [pid 24927:tid 24952] [client 4.204.215.156:7104] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 23:56:36.340118 2026] [proxy_fcgi:error] [pid 24927:tid 24954] [client 4.204.215.156:7104] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 23:56:36.549248 2026] [proxy_fcgi:error] [pid 24927:tid 24930] [client 4.204.215.156:7104] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 23:56:37.398646 2026] [proxy_fcgi:error] [pid 24927:tid 24944] [client 4.204.215.156:7104] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 23:56:37.607785 2026] [proxy_fcgi:error] [pid 24927:tid 24945] [client 4.204.215.156:7104] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 23:56:37.817316 2026] [proxy_fcgi:error] [pid 24927:tid 24935] [client 4.204.215.156:7104] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 23:56:38.026720 2026] [proxy_fcgi:error] [pid 24927:tid 24937] [client 4.204.215.156:7104] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 23:56:38.844719 2026] [proxy_fcgi:error] [pid 24927:tid 24948] [client 4.204.215.156:7104] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 23:56:39.062188 2026] [proxy_fcgi:error] [pid 24927:tid 24946] [client 4.204.215.156:7104] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 23:56:39.270838 2026] [proxy_fcgi:error] [pid 24927:tid 24949] [client 4.204.215.156:7104] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 23:56:39.489720 2026] [proxy_fcgi:error] [pid 24927:tid 24940] [client 4.204.215.156:7104] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 23:56:39.697241 2026] [:error] [pid 24927:tid 24943] [client 4.204.215.156:7104] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/olux.php"] [unique_id "adfMNzXObuzEuw8mNJtAGQAAAQ0"]
[Thu Apr 09 23:56:42.783695 2026] [:error] [pid 24516:tid 24555] [client 4.204.215.156:7037] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/olux.php"] [unique_id "adfMOthW7vSS-UkeWCVF8QAAAEg"]
[Thu Apr 09 23:56:44.678750 2026] [:error] [pid 24517:tid 24591] [client 4.204.215.156:7058] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/olux.php"] [unique_id "adfMPHboYEn2ZFM_PS-QCwAAAJE"]
[Thu Apr 09 23:56:48.311841 2026] [:error] [pid 24517:tid 24584] [client 4.204.215.156:7132] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/olux.php"] [unique_id "adfMQHboYEn2ZFM_PS-QDAAAAIo"]
[Thu Apr 09 23:56:50.309949 2026] [:error] [pid 24517:tid 24577] [client 4.204.215.156:6998] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/olu.php"] [unique_id "adfMQnboYEn2ZFM_PS-QDQAAAIM"]
[Thu Apr 09 23:57:06.413373 2026] [:error] [pid 20837:tid 20844] [client 4.204.215.156:7048] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/anone.php"] [unique_id "adfMUvSL71FHZkjrGzMeVQAAAYU"]
[Thu Apr 09 23:57:10.487957 2026] [:error] [pid 20837:tid 20847] [client 4.204.215.156:7155] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/anone.php"] [unique_id "adfMVvSL71FHZkjrGzMeZgAAAYg"]
[Thu Apr 09 23:57:15.623111 2026] [:error] [pid 20837:tid 20856] [client 4.204.215.156:7130] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/anone.php"] [unique_id "adfMW_SL71FHZkjrGzMecAAAAZE"]
[Thu Apr 09 23:57:25.421856 2026] [:error] [pid 24515:tid 24530] [client 4.204.215.156:7154] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/nasgor.php"] [unique_id "adfMZa1OMnvM2fMnB1MIGQAAAAs"]
[Thu Apr 09 23:57:49.718823 2026] [proxy_fcgi:error] [pid 24515:tid 24539] [client 4.204.215.156:7164] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 23:57:49.927901 2026] [proxy_fcgi:error] [pid 24515:tid 24538] [client 4.204.215.156:7164] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 23:57:50.146302 2026] [proxy_fcgi:error] [pid 24515:tid 24542] [client 4.204.215.156:7164] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 23:57:50.352565 2026] [:error] [pid 24515:tid 24520] [client 4.204.215.156:7164] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-conffg.php"] [unique_id "adfMfq1OMnvM2fMnB1MIYwAAAAE"]
[Thu Apr 09 23:57:54.435795 2026] [:error] [pid 20837:tid 20855] [client 4.204.215.156:7090] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-conffg.php"] [unique_id "adfMgvSL71FHZkjrGzMejAAAAZA"]
[Thu Apr 09 23:58:02.536950 2026] [:error] [pid 24516:tid 24561] [client 4.204.215.156:7050] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-conffg.php"] [unique_id "adfMithW7vSS-UkeWCVGAQAAAE4"]
[Thu Apr 09 23:58:08.218170 2026] [:error] [pid 18477:tid 18500] [client 4.204.215.156:7053] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-confiig.php"] [unique_id "adfMkMDe826HlFeoLPK0YAAAAVU"]
[Thu Apr 09 23:58:17.261187 2026] [:error] [pid 24515:tid 24526] [client 4.204.215.156:7127] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-confiig.php"] [unique_id "adfMma1OMnvM2fMnB1MImAAAAAc"]
[Thu Apr 09 23:58:18.811993 2026] [:error] [pid 24515:tid 24519] [client 4.204.215.156:7045] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-confiig.php"] [unique_id "adfMmq1OMnvM2fMnB1MInQAAAAA"]
[Thu Apr 09 23:58:19.557684 2026] [:error] [pid 24515:tid 24542] [client 4.204.215.156:7067] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-confiig.php"] [unique_id "adfMm61OMnvM2fMnB1MIngAAABc"]
[Thu Apr 09 23:58:21.403953 2026] [:error] [pid 24516:tid 24571] [client 4.204.215.156:7040] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-settings.php"] [unique_id "adfMndhW7vSS-UkeWCVGBgAAAFg"]
[Thu Apr 09 23:58:23.364417 2026] [:error] [pid 24927:tid 24940] [client 4.204.215.156:7135] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-settings.php"] [unique_id "adfMnzXObuzEuw8mNJtANAAAAQo"]
[Thu Apr 09 23:58:25.170195 2026] [:error] [pid 63331:tid 63344] [client 4.204.215.156:7151] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-settings.php"] [unique_id "adfMoSbKfIYuVjWbE4WuCQAAAcs"]
[Thu Apr 09 23:58:26.212837 2026] [:error] [pid 24515:tid 24536] [client 4.204.215.156:7165] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-settings.php"] [unique_id "adfMoq1OMnvM2fMnB1MIpQAAABE"]
[Thu Apr 09 23:58:27.505354 2026] [:error] [pid 24517:tid 24591] [client 4.204.215.156:7128] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-confirm.php"] [unique_id "adfMo3boYEn2ZFM_PS-QFgAAAJE"]
[Thu Apr 09 23:58:29.274314 2026] [:error] [pid 24515:tid 24524] [client 4.204.215.156:6995] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-confirm.php"] [unique_id "adfMpa1OMnvM2fMnB1MIrQAAAAU"]
[Thu Apr 09 23:58:30.207992 2026] [:error] [pid 24515:tid 24531] [client 4.204.215.156:7055] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-confirm.php"] [unique_id "adfMpq1OMnvM2fMnB1MIsAAAAAw"]
[Thu Apr 09 23:58:32.899916 2026] [:error] [pid 18477:tid 18498] [client 4.204.215.156:7115] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-confirm.php"] [unique_id "adfMqMDe826HlFeoLPK0cgAAAVM"]
[Thu Apr 09 23:58:35.146312 2026] [:error] [pid 24515:tid 24526] [client 4.204.215.156:7079] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-one.php"] [unique_id "adfMq61OMnvM2fMnB1MIugAAAAc"]
[Thu Apr 09 23:58:37.143954 2026] [:error] [pid 24624:tid 24641] [client 4.204.215.156:7081] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-one.php"] [unique_id "adfMre4Jn-WvK1ZBTvgBlgAAAM8"]
[Thu Apr 09 23:58:37.996935 2026] [:error] [pid 24927:tid 24953] [client 4.204.215.156:7085] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-one.php"] [unique_id "adfMrTXObuzEuw8mNJtAQgAAARc"]
[Thu Apr 09 23:58:38.717655 2026] [:error] [pid 18477:tid 18486] [client 4.204.215.156:7008] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-one.php"] [unique_id "adfMrsDe826HlFeoLPK0dQAAAUc"]
[Thu Apr 09 23:58:40.152376 2026] [:error] [pid 20837:tid 20841] [client 4.204.215.156:7159] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-ad.php"] [unique_id "adfMsPSL71FHZkjrGzMepgAAAYI"]
[Thu Apr 09 23:58:43.445575 2026] [:error] [pid 24515:tid 24520] [client 4.204.215.156:7027] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-ad.php"] [unique_id "adfMs61OMnvM2fMnB1MIyAAAAAE"]
[Thu Apr 09 23:58:50.344679 2026] [proxy_fcgi:error] [pid 24927:tid 24938] [client 4.204.215.156:6997] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 23:58:50.553970 2026] [proxy_fcgi:error] [pid 24927:tid 24954] [client 4.204.215.156:6997] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 23:58:50.763998 2026] [proxy_fcgi:error] [pid 24927:tid 24952] [client 4.204.215.156:6997] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 23:58:52.397346 2026] [proxy_fcgi:error] [pid 24927:tid 24930] [client 4.204.215.156:6997] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 23:58:55.926150 2026] [:error] [pid 24927:tid 24932] [client 4.204.215.156:6997] [client 4.204.215.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/SimplePie/pomo.php"] [unique_id "adfMvzXObuzEuw8mNJtAUgAAAQI"]
[Thu Apr 09 23:58:59.018348 2026] [:error] [pid 20837:tid 20843] [client 4.204.215.156:7161] [client 4.204.215.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/css/dist/niil.php"] [unique_id "adfMw_SL71FHZkjrGzMeswAAAYQ"]
[Thu Apr 09 23:59:01.805155 2026] [:error] [pid 20837:tid 20844] [client 4.204.215.156:7059] [client 4.204.215.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/sodium_compat/src/Core/Curve25519-items.php"] [unique_id "adfMxfSL71FHZkjrGzMeuAAAAYU"]
[Thu Apr 09 23:59:03.024881 2026] [:error] [pid 24515:tid 24522] [client 4.204.215.156:7109] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/init.php"] [unique_id "adfMx61OMnvM2fMnB1MI2wAAAAM"]
[Thu Apr 09 23:59:04.781178 2026] [:error] [pid 18477:tid 18480] [client 4.204.215.156:7015] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/init.php"] [unique_id "adfMyMDe826HlFeoLPK0eAAAAUE"]
[Thu Apr 09 23:59:07.064009 2026] [:error] [pid 20837:tid 20845] [client 4.204.215.156:7007] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/init.php"] [unique_id "adfMy_SL71FHZkjrGzMeuwAAAYY"]
[Thu Apr 09 23:59:08.845848 2026] [:error] [pid 63331:tid 63350] [client 4.204.215.156:7142] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/init.php"] [unique_id "adfMzCbKfIYuVjWbE4WuMwAAAdE"]
[Thu Apr 09 23:59:14.025790 2026] [:error] [pid 18477:tid 18496] [client 4.204.215.156:7152] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bb.php"] [unique_id "adfM0sDe826HlFeoLPK0gwAAAVE"]
[Thu Apr 09 23:59:20.059906 2026] [:error] [pid 24927:tid 24954] [client 4.204.215.156:7162] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bb.php"] [unique_id "adfM2DXObuzEuw8mNJtAWgAAARg"]
[Thu Apr 09 23:59:31.126943 2026] [:error] [pid 24517:tid 24584] [client 4.204.215.156:7108] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/lf.php"] [unique_id "adfM43boYEn2ZFM_PS-QJgAAAIo"]
[Thu Apr 09 23:59:39.052698 2026] [:error] [pid 24515:tid 24536] [client 4.204.215.156:7139] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/lf.php"] [unique_id "adfM661OMnvM2fMnB1MJCQAAABE"]
[Thu Apr 09 23:59:44.302724 2026] [:error] [pid 24515:tid 24532] [client 4.204.215.156:7005] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/hello.php"] [unique_id "adfM8K1OMnvM2fMnB1MJIQAAAA0"]
[Thu Apr 09 23:59:50.303268 2026] [:error] [pid 24624:tid 24641] [client 4.204.215.156:6938] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/hello.php"] [unique_id "adfM9u4Jn-WvK1ZBTvgByAAAAM8"]
[Thu Apr 09 23:59:55.075571 2026] [:error] [pid 24515:tid 24529] [client 4.204.215.156:7105] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/hello.php"] [unique_id "adfM-61OMnvM2fMnB1MJMgAAAAo"]
[Fri Apr 10 00:00:03.519853 2026] [proxy_fcgi:error] [pid 24515:tid 24540] [client 4.204.215.156:7107] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 00:00:03.730393 2026] [proxy_fcgi:error] [pid 24515:tid 24527] [client 4.204.215.156:7107] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 00:00:03.940307 2026] [proxy_fcgi:error] [pid 24515:tid 24523] [client 4.204.215.156:7107] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 00:00:04.187548 2026] [proxy_fcgi:error] [pid 24515:tid 24519] [client 4.204.215.156:7107] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 00:00:04.412214 2026] [proxy_fcgi:error] [pid 24515:tid 24531] [client 4.204.215.156:7107] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 00:00:04.621997 2026] [proxy_fcgi:error] [pid 24515:tid 24537] [client 4.204.215.156:7107] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 00:00:04.845379 2026] [proxy_fcgi:error] [pid 24515:tid 24541] [client 4.204.215.156:7107] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 00:00:05.090117 2026] [proxy_fcgi:error] [pid 24515:tid 24538] [client 4.204.215.156:7107] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 00:00:05.325715 2026] [proxy_fcgi:error] [pid 24515:tid 24528] [client 4.204.215.156:7107] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 00:00:05.540393 2026] [proxy_fcgi:error] [pid 24515:tid 24529] [client 4.204.215.156:7107] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 00:00:05.750325 2026] [proxy_fcgi:error] [pid 24515:tid 24520] [client 4.204.215.156:7107] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 00:00:06.438827 2026] [:error] [pid 24515:tid 24542] [client 4.204.215.156:7107] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/.well-known/acme-challenge/about.php"] [unique_id "adfNBq1OMnvM2fMnB1MJWgAAABc"]
[Fri Apr 10 00:00:45.834087 2026] [:error] [pid 63331:tid 63348] [client 4.204.215.156:6978] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/.well-known/acme-challenge/admin.php"] [unique_id "adfNLSbKfIYuVjWbE4WucgAAAc8"]
[Fri Apr 10 00:00:59.738200 2026] [:error] [pid 24515:tid 24540] [client 4.204.215.156:7110] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/sad/about.php"] [unique_id "adfNO61OMnvM2fMnB1MJjwAAABU"]
[Fri Apr 10 00:01:11.647132 2026] [proxy_fcgi:error] [pid 24515:tid 24534] [client 4.204.215.156:7022] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 00:01:13.393850 2026] [proxy_fcgi:error] [pid 24515:tid 24540] [client 4.204.215.156:7022] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 00:01:15.417805 2026] [:error] [pid 24515:tid 24540] [client 4.204.215.156:7022] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/files/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "adfNS61OMnvM2fMnB1MJtQAAABU"]
[Fri Apr 10 00:01:20.780200 2026] [:error] [pid 24517:tid 24596] [client 4.204.215.156:7106] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/files/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "adfNUHboYEn2ZFM_PS-QOAAAAJY"]
[Fri Apr 10 00:01:26.194376 2026] [:error] [pid 24927:tid 24934] [client 4.204.215.156:7126] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/files/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "adfNVjXObuzEuw8mNJtAigAAAQQ"]
[Fri Apr 10 00:01:40.435194 2026] [:error] [pid 63331:tid 63355] [client 4.204.215.156:7083] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/images/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "adfNZCbKfIYuVjWbE4WuoQAAAdY"]
[Fri Apr 10 00:01:43.936717 2026] [:error] [pid 24515:tid 24519] [client 4.204.215.156:7057] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/images/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "adfNZ61OMnvM2fMnB1MJ7AAAAAA"]
[Fri Apr 10 00:01:58.230637 2026] [:error] [pid 63331:tid 63349] [client 4.204.215.156:7121] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa%22"] [unique_id "adfNdibKfIYuVjWbE4WurwAAAdA"]
[Fri Apr 10 00:02:01.360824 2026] [:error] [pid 24516:tid 24565] [client 4.204.215.156:7144] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa%22"] [unique_id "adfNedhW7vSS-UkeWCVGOgAAAFI"]
[Fri Apr 10 00:02:14.965025 2026] [:error] [pid 63331:tid 63341] [client 4.204.215.156:7136] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "adfNhibKfIYuVjWbE4WuyQAAAcg"]
[Fri Apr 10 00:02:17.278387 2026] [proxy_fcgi:error] [pid 24624:tid 24628] [client 4.204.215.156:7040] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 00:02:17.506582 2026] [proxy_fcgi:error] [pid 24624:tid 24632] [client 4.204.215.156:7040] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 00:02:17.734546 2026] [proxy_fcgi:error] [pid 24624:tid 24633] [client 4.204.215.156:7040] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 00:02:18.396546 2026] [proxy_fcgi:error] [pid 24624:tid 24645] [client 4.204.215.156:7040] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 00:44:45.762575 2026] [proxy_fcgi:error] [pid 36397:tid 36410] [client 173.239.214.146:38379] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 00:44:45.977338 2026] [proxy_fcgi:error] [pid 36397:tid 36413] [client 173.239.214.146:38379] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 00:44:46.191667 2026] [proxy_fcgi:error] [pid 36397:tid 36423] [client 173.239.214.146:38379] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 00:44:46.404381 2026] [proxy_fcgi:error] [pid 36397:tid 36405] [client 173.239.214.146:38379] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 00:44:46.615900 2026] [proxy_fcgi:error] [pid 36397:tid 36407] [client 173.239.214.146:38379] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 00:44:46.857340 2026] [proxy_fcgi:error] [pid 36397:tid 36404] [client 173.239.214.146:38379] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 00:44:47.083192 2026] [proxy_fcgi:error] [pid 36397:tid 36415] [client 173.239.214.146:38379] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 00:44:47.302622 2026] [proxy_fcgi:error] [pid 36397:tid 36402] [client 173.239.214.146:38379] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 00:44:47.736872 2026] [proxy_fcgi:error] [pid 36397:tid 36409] [client 173.239.214.146:38379] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 00:44:47.965631 2026] [proxy_fcgi:error] [pid 36397:tid 36411] [client 173.239.214.146:38379] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 00:44:48.181561 2026] [proxy_fcgi:error] [pid 36397:tid 36408] [client 173.239.214.146:38379] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 00:44:48.406901 2026] [proxy_fcgi:error] [pid 36397:tid 36401] [client 173.239.214.146:38379] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 00:44:48.619881 2026] [proxy_fcgi:error] [pid 36397:tid 36421] [client 173.239.214.146:38379] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 00:44:48.846370 2026] [proxy_fcgi:error] [pid 36397:tid 36417] [client 173.239.214.146:38379] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 00:44:49.065363 2026] [proxy_fcgi:error] [pid 36397:tid 36406] [client 173.239.214.146:38379] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 00:44:49.276279 2026] [proxy_fcgi:error] [pid 36397:tid 36419] [client 173.239.214.146:38379] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 00:44:49.494871 2026] [proxy_fcgi:error] [pid 36397:tid 36418] [client 173.239.214.146:38379] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 00:44:49.708187 2026] [proxy_fcgi:error] [pid 36397:tid 36403] [client 173.239.214.146:38379] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 00:44:52.772702 2026] [:error] [pid 36397:tid 36416] [client 173.239.214.146:38379] [client 173.239.214.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "adfXhGhis4RvVEWEv9vtlgAAAA8"]
[Fri Apr 10 00:44:53.939122 2026] [:error] [pid 36672:tid 36675] [client 173.239.214.178:48125] [client 173.239.214.178] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "adfXhT99r9VLJsT_o8h1GQAAAME"]
[Fri Apr 10 00:44:55.090275 2026] [proxy_fcgi:error] [pid 36672:tid 36693] [client 173.239.214.159:37073] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 00:44:55.801670 2026] [:error] [pid 36672:tid 36677] [client 173.239.214.159:37073] [client 173.239.214.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dwelectservices.com.au"] [uri "/tinyfilemanager.php"] [unique_id "adfXhz99r9VLJsT_o8h1JAAAAMM"]
[Fri Apr 10 00:44:56.667965 2026] [proxy_fcgi:error] [pid 36397:tid 36406] [client 173.239.214.163:50369] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 00:44:56.879040 2026] [:error] [pid 36397:tid 36419] [client 173.239.214.163:50369] [client 173.239.214.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "adfXiGhis4RvVEWEv9vtmgAAABI"]
[Fri Apr 10 00:44:57.612927 2026] [proxy_fcgi:error] [pid 36399:tid 36476] [client 173.239.214.151:25715] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 00:44:58.713735 2026] [:error] [pid 36399:tid 36461] [client 173.239.214.151:25715] [client 173.239.214.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "adfXiq8Hkxpyh6_TlVQtEAAAAIY"]
[Fri Apr 10 00:44:59.429469 2026] [:error] [pid 36398:tid 36449] [client 173.239.214.159:27065] [client 173.239.214.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "adfXi-X640wXZwwgfP9ulwAAAFU"]
[Fri Apr 10 00:44:59.855059 2026] [:error] [pid 36399:tid 36465] [client 173.239.214.164:56897] [client 173.239.214.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "adfXi68Hkxpyh6_TlVQtEQAAAIo"]
[Fri Apr 10 00:45:00.291480 2026] [:error] [pid 36398:tid 36440] [client 173.239.214.144:61801] [client 173.239.214.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "adfXjOX640wXZwwgfP9umAAAAEw"]
[Fri Apr 10 00:45:00.783990 2026] [:error] [pid 36398:tid 36432] [client 173.239.214.133:36779] [client 173.239.214.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "adfXjOX640wXZwwgfP9umQAAAEQ"]
[Fri Apr 10 00:45:01.240616 2026] [:error] [pid 36397:tid 36420] [client 173.239.214.141:64487] [client 173.239.214.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "adfXjWhis4RvVEWEv9vtnQAAABM"]
[Fri Apr 10 00:45:01.972308 2026] [:error] [pid 36398:tid 36436] [client 173.239.214.163:62641] [client 173.239.214.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "adfXjeX640wXZwwgfP9ungAAAEg"]
[Fri Apr 10 00:45:02.438915 2026] [proxy_fcgi:error] [pid 36397:tid 36410] [client 45.131.195.226:62815] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 00:45:02.962966 2026] [:error] [pid 36397:tid 36407] [client 45.131.195.226:62815] [client 45.131.195.226] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dwelectservices.com.au"] [uri "/filemanager.php"] [unique_id "adfXjmhis4RvVEWEv9vtogAAAAY"]
[Fri Apr 10 00:45:05.175299 2026] [:error] [pid 36399:tid 36464] [client 173.239.214.150:29913] [client 173.239.214.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "adfXka8Hkxpyh6_TlVQtFwAAAIk"]
[Fri Apr 10 00:45:05.937153 2026] [:error] [pid 36399:tid 36467] [client 173.239.214.170:53397] [client 173.239.214.170] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "adfXka8Hkxpyh6_TlVQtGQAAAIw"]
[Fri Apr 10 00:45:07.436982 2026] [proxy_fcgi:error] [pid 36672:tid 36688] [client 173.239.214.155:51795] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 00:45:07.664822 2026] [:error] [pid 36672:tid 36698] [client 173.239.214.155:51795] [client 173.239.214.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "adfXkz99r9VLJsT_o8h1NgAAANg"]
[Fri Apr 10 00:45:08.146405 2026] [proxy_fcgi:error] [pid 36672:tid 36689] [client 173.239.214.141:36061] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 00:45:08.823026 2026] [proxy_fcgi:error] [pid 36672:tid 36697] [client 173.239.214.141:36061] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 00:45:09.533085 2026] [:error] [pid 36672:tid 36677] [client 173.239.214.141:36061] [client 173.239.214.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "adfXlT99r9VLJsT_o8h1QwAAAMM"]
[Fri Apr 10 00:45:09.998925 2026] [proxy_fcgi:error] [pid 36672:tid 36688] [client 173.239.214.156:48567] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 00:45:10.222400 2026] [:error] [pid 36672:tid 36698] [client 173.239.214.156:48567] [client 173.239.214.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "adfXlj99r9VLJsT_o8h1RgAAANg"]
[Fri Apr 10 00:45:10.725463 2026] [proxy_fcgi:error] [pid 36672:tid 36674] [client 173.239.214.139:29405] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 00:45:11.213609 2026] [:error] [pid 36672:tid 36686] [client 173.239.214.139:29405] [client 173.239.214.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "adfXlz99r9VLJsT_o8h1TAAAAMw"]
[Fri Apr 10 00:45:11.879141 2026] [:error] [pid 36672:tid 36681] [client 173.239.214.141:30973] [client 173.239.214.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "adfXlz99r9VLJsT_o8h1TgAAAMc"]
[Fri Apr 10 00:45:12.536327 2026] [proxy_fcgi:error] [pid 36672:tid 36677] [client 173.239.214.177:35145] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 00:45:12.790470 2026] [proxy_fcgi:error] [pid 36672:tid 36679] [client 173.239.214.177:35145] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 00:45:13.288949 2026] [:error] [pid 36672:tid 36696] [client 173.239.214.177:35145] [client 173.239.214.177] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "adfXmT99r9VLJsT_o8h1VQAAANY"]
[Fri Apr 10 00:45:14.036090 2026] [:error] [pid 36397:tid 36416] [client 173.239.214.142:29155] [client 173.239.214.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "adfXmmhis4RvVEWEv9vtpAAAAA8"]
[Fri Apr 10 00:45:14.732766 2026] [:error] [pid 36672:tid 36678] [client 173.239.214.153:33157] [client 173.239.214.153] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "adfXmj99r9VLJsT_o8h1WQAAAMQ"]
[Fri Apr 10 00:45:15.180071 2026] [:error] [pid 36672:tid 36694] [client 45.131.195.226:23925] [client 45.131.195.226] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "adfXmz99r9VLJsT_o8h1WgAAANQ"]
[Fri Apr 10 00:45:15.616294 2026] [:error] [pid 36399:tid 36470] [client 45.131.195.227:57109] [client 45.131.195.227] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "adfXm68Hkxpyh6_TlVQtHwAAAI8"]
[Fri Apr 10 00:45:16.592024 2026] [proxy_fcgi:error] [pid 36398:tid 36434] [client 173.239.214.171:35283] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 00:45:16.819527 2026] [:error] [pid 36398:tid 36436] [client 173.239.214.171:35283] [client 173.239.214.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "adfXnOX640wXZwwgfP9urgAAAEg"]
[Fri Apr 10 00:45:17.839835 2026] [:error] [pid 36672:tid 36690] [client 173.239.214.150:36323] [client 173.239.214.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "adfXnT99r9VLJsT_o8h1ZAAAANA"]
[Fri Apr 10 00:45:18.920799 2026] [:error] [pid 36398:tid 36433] [client 173.239.214.160:37967] [client 173.239.214.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "adfXnuX640wXZwwgfP9usQAAAEU"]
[Fri Apr 10 00:45:20.055707 2026] [proxy_fcgi:error] [pid 36672:tid 36698] [client 173.239.214.165:47149] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 00:45:20.564355 2026] [proxy_fcgi:error] [pid 36672:tid 36690] [client 173.239.214.165:47149] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 00:45:21.538756 2026] [:error] [pid 36672:tid 36684] [client 173.239.214.165:47149] [client 173.239.214.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/admin.php"] [unique_id "adfXoT99r9VLJsT_o8h1fAAAAMo"]
[Fri Apr 10 00:45:22.709788 2026] [:error] [pid 36672:tid 36690] [client 173.239.214.173:50831] [client 173.239.214.173] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.214.173, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "adfXoj99r9VLJsT_o8h1hgAAANA"]
[Fri Apr 10 00:45:22.931744 2026] [proxy_fcgi:error] [pid 36672:tid 36678] [client 173.239.214.173:50831] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 00:45:24.317044 2026] [proxy_fcgi:error] [pid 36672:tid 36675] [client 173.239.214.173:50831] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 00:45:24.529573 2026] [proxy_fcgi:error] [pid 36672:tid 36679] [client 173.239.214.173:50831] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 00:45:25.659072 2026] [:error] [pid 36672:tid 36685] [client 173.239.214.173:50831] [client 173.239.214.173] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "adfXpT99r9VLJsT_o8h1oQAAAMs"]
[Fri Apr 10 00:45:49.945623 2026] [autoindex:error] [pid 36397:tid 36421] [client 173.239.214.163:24445] AH01276: Cannot serve directory /home/dwelects/public_html/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Apr 10 00:45:57.397488 2026] [autoindex:error] [pid 36397:tid 36425] [client 173.239.214.163:24445] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Apr 10 01:43:39.956303 2026] [proxy_fcgi:error] [pid 29569:tid 29596] [client 52.143.158.250:2355] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 01:43:40.194317 2026] [proxy_fcgi:error] [pid 29569:tid 29583] [client 52.143.158.250:2355] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 01:43:40.447632 2026] [proxy_fcgi:error] [pid 29569:tid 29577] [client 52.143.158.250:2355] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 01:43:40.688973 2026] [proxy_fcgi:error] [pid 29569:tid 29587] [client 52.143.158.250:2355] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 01:43:40.985845 2026] [proxy_fcgi:error] [pid 29569:tid 29584] [client 52.143.158.250:2355] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 01:43:41.223170 2026] [proxy_fcgi:error] [pid 29569:tid 29592] [client 52.143.158.250:2355] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 01:43:42.850288 2026] [proxy_fcgi:error] [pid 29569:tid 29593] [client 52.143.158.250:2355] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 01:43:43.139636 2026] [proxy_fcgi:error] [pid 29569:tid 29586] [client 52.143.158.250:2355] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 01:43:43.446020 2026] [proxy_fcgi:error] [pid 29569:tid 29589] [client 52.143.158.250:2355] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 01:43:43.761347 2026] [proxy_fcgi:error] [pid 29569:tid 29590] [client 52.143.158.250:2355] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 01:43:44.037897 2026] [:error] [pid 29569:tid 29580] [client 52.143.158.250:2355] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/zc-104.php"] [unique_id "adflULt9mkieWu8HPk5HTwAAAUc"]
[Fri Apr 10 01:43:44.934869 2026] [:error] [pid 21486:tid 21500] [client 52.143.158.250:42687] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/zc-104.php"] [unique_id "adflUKBRftltyNdYwLooUwAAAQw"]
[Fri Apr 10 01:43:45.763756 2026] [:error] [pid 36672:tid 36693] [client 52.143.158.250:51255] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/zc-104.php"] [unique_id "adflUT99r9VLJsT_o8iKcgAAANM"]
[Fri Apr 10 01:43:46.842685 2026] [:error] [pid 36672:tid 36676] [client 52.143.158.250:36353] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/zc-104.php"] [unique_id "adflUj99r9VLJsT_o8iKdAAAAMI"]
[Fri Apr 10 01:43:47.741155 2026] [:error] [pid 36399:tid 36479] [client 52.143.158.250:63950] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/rzki.php"] [unique_id "adflU68Hkxpyh6_TlVQ5SgAAAJg"]
[Fri Apr 10 01:43:48.577797 2026] [:error] [pid 36672:tid 36686] [client 52.143.158.250:62430] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/rzki.php"] [unique_id "adflVD99r9VLJsT_o8iKewAAAMw"]
[Fri Apr 10 01:43:49.353043 2026] [:error] [pid 36398:tid 36428] [client 52.143.158.250:63973] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/rzki.php"] [unique_id "adflVeX640wXZwwgfP93WwAAAEA"]
[Fri Apr 10 01:43:49.947931 2026] [:error] [pid 36398:tid 36432] [client 52.143.158.250:43056] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/rzki.php"] [unique_id "adflVeX640wXZwwgfP93XAAAAEQ"]
[Fri Apr 10 01:43:50.649375 2026] [:error] [pid 36399:tid 36459] [client 52.143.158.250:63952] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xsas.php"] [unique_id "adflVq8Hkxpyh6_TlVQ5TQAAAIQ"]
[Fri Apr 10 01:43:51.364488 2026] [:error] [pid 36397:tid 36420] [client 52.143.158.250:54036] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xsas.php"] [unique_id "adflV2his4RvVEWEv9v1oQAAABM"]
[Fri Apr 10 01:43:52.004656 2026] [:error] [pid 36399:tid 36457] [client 52.143.158.250:2704] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xsas.php"] [unique_id "adflWK8Hkxpyh6_TlVQ5UgAAAII"]
[Fri Apr 10 01:43:52.695223 2026] [:error] [pid 29569:tid 29594] [client 52.143.158.250:62888] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xsas.php"] [unique_id "adflWLt9mkieWu8HPk5HVQAAAVU"]
[Fri Apr 10 01:43:53.428696 2026] [:error] [pid 36399:tid 36477] [client 52.143.158.250:42648] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/d12.php"] [unique_id "adflWa8Hkxpyh6_TlVQ5VAAAAJY"]
[Fri Apr 10 01:43:54.071211 2026] [:error] [pid 36399:tid 36479] [client 52.143.158.250:63338] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/d12.php"] [unique_id "adflWq8Hkxpyh6_TlVQ5VgAAAJg"]
[Fri Apr 10 01:43:54.729643 2026] [:error] [pid 36672:tid 36693] [client 52.143.158.250:52024] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/d12.php"] [unique_id "adflWj99r9VLJsT_o8iKfwAAANM"]
[Fri Apr 10 01:43:55.467896 2026] [:error] [pid 36399:tid 36467] [client 52.143.158.250:41552] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/d12.php"] [unique_id "adflW68Hkxpyh6_TlVQ5WQAAAIw"]
[Fri Apr 10 01:43:56.003582 2026] [:error] [pid 29569:tid 29582] [client 52.143.158.250:36360] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/okxh.php"] [unique_id "adflXLt9mkieWu8HPk5HWAAAAUk"]
[Fri Apr 10 01:43:56.666626 2026] [:error] [pid 29569:tid 29579] [client 52.143.158.250:61054] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/okxh.php"] [unique_id "adflXLt9mkieWu8HPk5HWQAAAUY"]
[Fri Apr 10 01:43:57.282080 2026] [:error] [pid 36399:tid 36459] [client 52.143.158.250:36360] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/okxh.php"] [unique_id "adflXa8Hkxpyh6_TlVQ5XQAAAIQ"]
[Fri Apr 10 01:43:58.003004 2026] [:error] [pid 29569:tid 29590] [client 52.143.158.250:2691] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/okxh.php"] [unique_id "adflXrt9mkieWu8HPk5HWgAAAVE"]
[Fri Apr 10 01:43:58.507828 2026] [:error] [pid 36672:tid 36678] [client 52.143.158.250:63307] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/55b76.php"] [unique_id "adflXj99r9VLJsT_o8iKhQAAAMQ"]
[Fri Apr 10 01:43:59.080850 2026] [:error] [pid 36672:tid 36691] [client 52.143.158.250:48072] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/55b76.php"] [unique_id "adflXz99r9VLJsT_o8iKhwAAANE"]
[Fri Apr 10 01:43:59.858328 2026] [:error] [pid 36399:tid 36462] [client 52.143.158.250:42628] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/55b76.php"] [unique_id "adflX68Hkxpyh6_TlVQ5YAAAAIc"]
[Fri Apr 10 01:44:00.817568 2026] [:error] [pid 29569:tid 29578] [client 52.143.158.250:63954] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/55b76.php"] [unique_id "adflYLt9mkieWu8HPk5HXQAAAUU"]
[Fri Apr 10 01:44:01.606170 2026] [:error] [pid 36672:tid 36689] [client 52.143.158.250:62274] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/tt.php"] [unique_id "adflYT99r9VLJsT_o8iKiwAAAM8"]
[Fri Apr 10 01:44:02.215125 2026] [:error] [pid 36672:tid 36681] [client 52.143.158.250:62334] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/tt.php"] [unique_id "adflYj99r9VLJsT_o8iKjAAAAMc"]
[Fri Apr 10 01:44:02.851445 2026] [:error] [pid 29569:tid 29595] [client 52.143.158.250:62410] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/tt.php"] [unique_id "adflYrt9mkieWu8HPk5HXwAAAVY"]
[Fri Apr 10 01:44:03.560923 2026] [:error] [pid 36397:tid 36409] [client 52.143.158.250:48113] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/tt.php"] [unique_id "adflY2his4RvVEWEv9v1pAAAAAg"]
[Fri Apr 10 01:44:04.573656 2026] [:error] [pid 29569:tid 29583] [client 52.143.158.250:51227] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/maul.php"] [unique_id "adflZLt9mkieWu8HPk5HYgAAAUo"]
[Fri Apr 10 01:44:05.673545 2026] [:error] [pid 36398:tid 36430] [client 52.143.158.250:41573] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/maul.php"] [unique_id "adflZeX640wXZwwgfP93XgAAAEI"]
[Fri Apr 10 01:44:06.456551 2026] [:error] [pid 36399:tid 36460] [client 52.143.158.250:46045] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/maul.php"] [unique_id "adflZq8Hkxpyh6_TlVQ5ZAAAAIU"]
[Fri Apr 10 01:44:07.268362 2026] [:error] [pid 36398:tid 36452] [client 52.143.158.250:62291] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/maul.php"] [unique_id "adflZ-X640wXZwwgfP93YAAAAFg"]
[Fri Apr 10 01:44:07.992946 2026] [:error] [pid 36672:tid 36691] [client 52.143.158.250:42662] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/5b9ac.php"] [unique_id "adflZz99r9VLJsT_o8iKkgAAANE"]
[Fri Apr 10 01:44:09.353638 2026] [:error] [pid 29569:tid 29594] [client 52.143.158.250:62867] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/5b9ac.php"] [unique_id "adflabt9mkieWu8HPk5HZgAAAVU"]
[Fri Apr 10 01:44:10.195148 2026] [:error] [pid 29569:tid 29593] [client 52.143.158.250:48097] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/5b9ac.php"] [unique_id "adflart9mkieWu8HPk5HaAAAAVQ"]
[Fri Apr 10 01:44:11.686010 2026] [:error] [pid 36398:tid 36437] [client 52.143.158.250:62272] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/5b9ac.php"] [unique_id "adfla-X640wXZwwgfP93YwAAAEk"]
[Fri Apr 10 01:44:12.583029 2026] [:error] [pid 36399:tid 36463] [client 52.143.158.250:2345] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/hehe.php"] [unique_id "adflbK8Hkxpyh6_TlVQ5aAAAAIg"]
[Fri Apr 10 01:44:13.348220 2026] [:error] [pid 36397:tid 36405] [client 52.143.158.250:41580] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/hehe.php"] [unique_id "adflbWhis4RvVEWEv9v1pQAAAAQ"]
[Fri Apr 10 01:44:14.108089 2026] [:error] [pid 36399:tid 36474] [client 52.143.158.250:2365] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/hehe.php"] [unique_id "adflbq8Hkxpyh6_TlVQ5aQAAAJM"]
[Fri Apr 10 01:44:15.313716 2026] [:error] [pid 36397:tid 36419] [client 52.143.158.250:48104] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/hehe.php"] [unique_id "adflb2his4RvVEWEv9v1pwAAABI"]
[Fri Apr 10 01:44:15.880214 2026] [:error] [pid 21486:tid 21490] [client 52.143.158.250:2604] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "adflb6BRftltyNdYwLooaAAAAQI"]
[Fri Apr 10 01:44:16.582030 2026] [:error] [pid 36398:tid 36434] [client 52.143.158.250:51978] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "adflcOX640wXZwwgfP93aQAAAEY"]
[Fri Apr 10 01:44:17.280925 2026] [:error] [pid 29569:tid 29595] [client 52.143.158.250:61375] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "adflcbt9mkieWu8HPk5HcAAAAVY"]
[Fri Apr 10 01:44:17.867615 2026] [:error] [pid 29569:tid 29596] [client 52.143.158.250:42633] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "adflcbt9mkieWu8HPk5HcwAAAVc"]
[Fri Apr 10 01:44:18.479924 2026] [:error] [pid 36398:tid 36430] [client 52.143.158.250:61055] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/varb.php"] [unique_id "adflcuX640wXZwwgfP93bQAAAEI"]
[Fri Apr 10 01:44:19.147180 2026] [:error] [pid 36398:tid 36436] [client 52.143.158.250:65138] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/varb.php"] [unique_id "adflc-X640wXZwwgfP93bgAAAEg"]
[Fri Apr 10 01:44:19.741979 2026] [:error] [pid 29569:tid 29594] [client 52.143.158.250:46995] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/varb.php"] [unique_id "adflc7t9mkieWu8HPk5HdwAAAVU"]
[Fri Apr 10 01:44:20.428730 2026] [:error] [pid 29569:tid 29591] [client 52.143.158.250:41903] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/varb.php"] [unique_id "adfldLt9mkieWu8HPk5HeQAAAVI"]
[Fri Apr 10 01:44:21.191801 2026] [:error] [pid 36398:tid 36452] [client 52.143.158.250:43067] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/lm15.php"] [unique_id "adfldeX640wXZwwgfP93bwAAAFg"]
[Fri Apr 10 01:44:21.720554 2026] [:error] [pid 29569:tid 29586] [client 52.143.158.250:65128] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/lm15.php"] [unique_id "adfldbt9mkieWu8HPk5HewAAAU0"]
[Fri Apr 10 01:44:22.322298 2026] [:error] [pid 36399:tid 36462] [client 52.143.158.250:61337] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/lm15.php"] [unique_id "adfldq8Hkxpyh6_TlVQ5bgAAAIc"]
[Fri Apr 10 01:44:23.361550 2026] [:error] [pid 36399:tid 36460] [client 52.143.158.250:46420] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/lm15.php"] [unique_id "adfld68Hkxpyh6_TlVQ5cwAAAIU"]
[Fri Apr 10 01:44:24.007002 2026] [:error] [pid 36672:tid 36694] [client 52.143.158.250:51988] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/clss.php"] [unique_id "adfleD99r9VLJsT_o8iKmgAAANQ"]
[Fri Apr 10 01:44:24.629194 2026] [:error] [pid 36399:tid 36479] [client 52.143.158.250:61332] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/clss.php"] [unique_id "adfleK8Hkxpyh6_TlVQ5dQAAAJg"]
[Fri Apr 10 01:44:25.630086 2026] [:error] [pid 36672:tid 36692] [client 52.143.158.250:46456] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/clss.php"] [unique_id "adfleT99r9VLJsT_o8iKnQAAANI"]
[Fri Apr 10 01:44:26.299459 2026] [:error] [pid 36399:tid 36463] [client 52.143.158.250:65130] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/clss.php"] [unique_id "adfleq8Hkxpyh6_TlVQ5dwAAAIg"]
[Fri Apr 10 01:44:27.281473 2026] [:error] [pid 36398:tid 36451] [client 52.143.158.250:53620] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/44.php"] [unique_id "adfle-X640wXZwwgfP93cgAAAFc"]
[Fri Apr 10 01:44:28.116502 2026] [:error] [pid 36398:tid 36437] [client 52.143.158.250:2567] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/44.php"] [unique_id "adflfOX640wXZwwgfP93cwAAAEk"]
[Fri Apr 10 01:44:28.788868 2026] [:error] [pid 29569:tid 29596] [client 52.143.158.250:65093] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/44.php"] [unique_id "adflfLt9mkieWu8HPk5HgQAAAVc"]
[Fri Apr 10 01:44:29.879520 2026] [:error] [pid 29569:tid 29585] [client 52.143.158.250:48834] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/44.php"] [unique_id "adflfbt9mkieWu8HPk5HhQAAAUw"]
[Fri Apr 10 01:44:30.932580 2026] [:error] [pid 29569:tid 29577] [client 52.143.158.250:45374] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/a5e0a.php"] [unique_id "adflfrt9mkieWu8HPk5HhgAAAUQ"]
[Fri Apr 10 01:44:31.708178 2026] [:error] [pid 21486:tid 21495] [client 52.143.158.250:48493] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/a5e0a.php"] [unique_id "adflf6BRftltyNdYwLoobAAAAQc"]
[Fri Apr 10 01:44:32.645138 2026] [:error] [pid 29569:tid 29593] [client 52.143.158.250:48860] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/a5e0a.php"] [unique_id "adflgLt9mkieWu8HPk5HhwAAAVQ"]
[Fri Apr 10 01:44:33.381353 2026] [:error] [pid 36672:tid 36681] [client 52.143.158.250:47417] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/a5e0a.php"] [unique_id "adflgT99r9VLJsT_o8iKrQAAAMc"]
[Fri Apr 10 01:44:34.168599 2026] [:error] [pid 36672:tid 36693] [client 52.143.158.250:63509] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bo.php"] [unique_id "adflgj99r9VLJsT_o8iKrwAAANM"]
[Fri Apr 10 01:44:35.063703 2026] [:error] [pid 29569:tid 29590] [client 52.143.158.250:48895] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bo.php"] [unique_id "adflg7t9mkieWu8HPk5HigAAAVE"]
[Fri Apr 10 01:44:35.815918 2026] [:error] [pid 21486:tid 21512] [client 52.143.158.250:2812] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bo.php"] [unique_id "adflg6BRftltyNdYwLoobQAAARg"]
[Fri Apr 10 01:44:36.368899 2026] [:error] [pid 36672:tid 36696] [client 52.143.158.250:54986] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bo.php"] [unique_id "adflhD99r9VLJsT_o8iKswAAANY"]
[Fri Apr 10 01:44:36.983298 2026] [:error] [pid 29569:tid 29576] [client 52.143.158.250:55366] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/56c53.php"] [unique_id "adflhLt9mkieWu8HPk5HjAAAAUM"]
[Fri Apr 10 01:44:37.703867 2026] [:error] [pid 29569:tid 29575] [client 52.143.158.250:58354] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/56c53.php"] [unique_id "adflhbt9mkieWu8HPk5HjgAAAUI"]
[Fri Apr 10 01:44:38.306168 2026] [:error] [pid 36399:tid 36476] [client 52.143.158.250:59080] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/56c53.php"] [unique_id "adflhq8Hkxpyh6_TlVQ5gwAAAJU"]
[Fri Apr 10 01:44:39.171050 2026] [:error] [pid 36398:tid 36443] [client 52.143.158.250:2974] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/56c53.php"] [unique_id "adflh-X640wXZwwgfP93egAAAE8"]
[Fri Apr 10 01:44:39.812475 2026] [:error] [pid 36398:tid 36428] [client 52.143.158.250:49130] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/tx78.php"] [unique_id "adflh-X640wXZwwgfP93ewAAAEA"]
[Fri Apr 10 01:44:40.558228 2026] [:error] [pid 36398:tid 36439] [client 52.143.158.250:2792] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/tx78.php"] [unique_id "adfliOX640wXZwwgfP93fgAAAEs"]
[Fri Apr 10 01:44:41.234371 2026] [:error] [pid 36398:tid 36430] [client 52.143.158.250:49137] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/tx78.php"] [unique_id "adflieX640wXZwwgfP93fwAAAEI"]
[Fri Apr 10 01:44:42.099000 2026] [:error] [pid 29569:tid 29585] [client 52.143.158.250:48536] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/tx78.php"] [unique_id "adflirt9mkieWu8HPk5HkAAAAUw"]
[Fri Apr 10 01:44:42.625906 2026] [:error] [pid 29569:tid 29577] [client 52.143.158.250:46664] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws80.php"] [unique_id "adflirt9mkieWu8HPk5HkgAAAUQ"]
[Fri Apr 10 01:44:43.317648 2026] [proxy_fcgi:error] [pid 36398:tid 36451] [client 52.143.158.250:30615] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 01:44:43.595033 2026] [proxy_fcgi:error] [pid 36398:tid 36438] [client 52.143.158.250:30615] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 01:44:43.911425 2026] [proxy_fcgi:error] [pid 36398:tid 36445] [client 52.143.158.250:30615] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 01:44:44.164806 2026] [proxy_fcgi:error] [pid 36398:tid 36447] [client 52.143.158.250:30615] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 01:44:44.466764 2026] [proxy_fcgi:error] [pid 36398:tid 36435] [client 52.143.158.250:30615] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 01:44:44.720540 2026] [proxy_fcgi:error] [pid 36398:tid 36444] [client 52.143.158.250:30615] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 01:44:44.996320 2026] [proxy_fcgi:error] [pid 36398:tid 36448] [client 52.143.158.250:30615] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 01:44:45.295912 2026] [proxy_fcgi:error] [pid 36398:tid 36442] [client 52.143.158.250:30615] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 01:44:45.534475 2026] [proxy_fcgi:error] [pid 36398:tid 36428] [client 52.143.158.250:30615] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 01:44:45.859526 2026] [proxy_fcgi:error] [pid 36398:tid 36439] [client 52.143.158.250:30615] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 01:44:46.148654 2026] [proxy_fcgi:error] [pid 36398:tid 36430] [client 52.143.158.250:30615] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 01:44:46.517222 2026] [:error] [pid 36398:tid 36441] [client 52.143.158.250:30615] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bolt.php"] [unique_id "adfljuX640wXZwwgfP93kAAAAE0"]
[Fri Apr 10 01:44:47.354282 2026] [:error] [pid 36397:tid 36415] [client 52.143.158.250:54626] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bolt.php"] [unique_id "adflj2his4RvVEWEv9v1rgAAAA4"]
[Fri Apr 10 01:44:48.239501 2026] [:error] [pid 36398:tid 36451] [client 52.143.158.250:62673] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bolt.php"] [unique_id "adflkOX640wXZwwgfP93lAAAAFc"]
[Fri Apr 10 01:44:48.935518 2026] [:error] [pid 36398:tid 36450] [client 52.143.158.250:31118] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bolt.php"] [unique_id "adflkOX640wXZwwgfP93lgAAAFY"]
[Fri Apr 10 01:44:49.561020 2026] [:error] [pid 36397:tid 36412] [client 52.143.158.250:2511] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-blogs.php"] [unique_id "adflkWhis4RvVEWEv9v1sAAAAAs"]
[Fri Apr 10 01:44:50.272443 2026] [:error] [pid 21486:tid 21506] [client 52.143.158.250:2437] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-blogs.php"] [unique_id "adflkqBRftltyNdYwLoodAAAARI"]
[Fri Apr 10 01:44:50.831627 2026] [:error] [pid 21486:tid 21510] [client 52.143.158.250:32860] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-blogs.php"] [unique_id "adflkqBRftltyNdYwLoodQAAARY"]
[Fri Apr 10 01:44:51.838948 2026] [:error] [pid 29569:tid 29587] [client 52.143.158.250:38446] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-blogs.php"] [unique_id "adflk7t9mkieWu8HPk5HnQAAAU4"]
[Fri Apr 10 01:44:52.740704 2026] [:error] [pid 36672:tid 36694] [client 52.143.158.250:45721] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/zlnckdxn.php"] [unique_id "adfllD99r9VLJsT_o8iKuAAAANQ"]
[Fri Apr 10 01:44:53.719274 2026] [:error] [pid 36397:tid 36414] [client 52.143.158.250:58558] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/zlnckdxn.php"] [unique_id "adfllWhis4RvVEWEv9v1sgAAAA0"]
[Fri Apr 10 01:44:54.447878 2026] [:error] [pid 36672:tid 36697] [client 52.143.158.250:38447] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/zlnckdxn.php"] [unique_id "adfllj99r9VLJsT_o8iKuwAAANc"]
[Fri Apr 10 01:44:55.159448 2026] [:error] [pid 29569:tid 29577] [client 52.143.158.250:42346] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/zlnckdxn.php"] [unique_id "adfll7t9mkieWu8HPk5HogAAAUQ"]
[Fri Apr 10 01:44:56.155202 2026] [:error] [pid 36397:tid 36402] [client 52.143.158.250:32876] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/fs6.php"] [unique_id "adflmGhis4RvVEWEv9v1tAAAAAE"]
[Fri Apr 10 01:44:57.539082 2026] [:error] [pid 36672:tid 36692] [client 52.143.158.250:2444] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/fs6.php"] [unique_id "adflmT99r9VLJsT_o8iKvgAAANI"]
[Fri Apr 10 01:44:59.687884 2026] [:error] [pid 21486:tid 21492] [client 52.143.158.250:64926] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/fs6.php"] [unique_id "adflm6BRftltyNdYwLoofQAAAQQ"]
[Fri Apr 10 01:45:00.848247 2026] [:error] [pid 36397:tid 36417] [client 52.143.158.250:45744] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/fs6.php"] [unique_id "adflnGhis4RvVEWEv9v1twAAABA"]
[Fri Apr 10 01:45:02.051178 2026] [:error] [pid 21486:tid 21510] [client 52.143.158.250:63906] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xwzs.php"] [unique_id "adflnqBRftltyNdYwLooggAAARY"]
[Fri Apr 10 01:45:03.162316 2026] [:error] [pid 36399:tid 36476] [client 52.143.158.250:57062] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xwzs.php"] [unique_id "adfln68Hkxpyh6_TlVQ5jgAAAJU"]
[Fri Apr 10 01:45:03.820032 2026] [:error] [pid 36399:tid 36467] [client 52.143.158.250:34020] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xwzs.php"] [unique_id "adfln68Hkxpyh6_TlVQ5kgAAAIw"]
[Fri Apr 10 01:45:04.627347 2026] [:error] [pid 36398:tid 36441] [client 52.143.158.250:64905] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xwzs.php"] [unique_id "adfloOX640wXZwwgfP93nAAAAE0"]
[Fri Apr 10 01:45:05.454781 2026] [:error] [pid 36397:tid 36411] [client 52.143.158.250:56995] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/network/users.php"] [unique_id "adfloWhis4RvVEWEv9v1wQAAAAo"]
[Fri Apr 10 01:45:06.222801 2026] [:error] [pid 36672:tid 36697] [client 52.143.158.250:57023] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/network/users.php"] [unique_id "adfloj99r9VLJsT_o8iKxgAAANc"]
[Fri Apr 10 01:45:07.207312 2026] [:error] [pid 29569:tid 29585] [client 52.143.158.250:60446] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/network/users.php"] [unique_id "adflo7t9mkieWu8HPk5HvgAAAUw"]
[Fri Apr 10 01:45:08.488827 2026] [:error] [pid 36398:tid 36449] [client 52.143.158.250:34004] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/network/users.php"] [unique_id "adflpOX640wXZwwgfP93owAAAFU"]
[Fri Apr 10 01:45:10.271924 2026] [:error] [pid 21486:tid 21498] [client 52.143.158.250:46398] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws66.php"] [unique_id "adflpqBRftltyNdYwLoogwAAAQo"]
[Fri Apr 10 01:45:11.138016 2026] [:error] [pid 36397:tid 36410] [client 52.143.158.250:62140] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws66.php"] [unique_id "adflp2his4RvVEWEv9v1xgAAAAk"]
[Fri Apr 10 01:45:11.765102 2026] [:error] [pid 36398:tid 36436] [client 52.143.158.250:56607] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws66.php"] [unique_id "adflp-X640wXZwwgfP93rwAAAEg"]
[Fri Apr 10 01:45:12.563526 2026] [:error] [pid 21486:tid 21488] [client 52.143.158.250:60968] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws66.php"] [unique_id "adflqKBRftltyNdYwLooiQAAAQA"]
[Fri Apr 10 01:45:13.241925 2026] [:error] [pid 21486:tid 21500] [client 52.143.158.250:32793] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ewe.php"] [unique_id "adflqaBRftltyNdYwLooigAAAQw"]
[Fri Apr 10 01:45:13.946233 2026] [:error] [pid 36399:tid 36477] [client 52.143.158.250:62942] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ewe.php"] [unique_id "adflqa8Hkxpyh6_TlVQ5uwAAAJY"]
[Fri Apr 10 01:45:14.641556 2026] [:error] [pid 36399:tid 36460] [client 52.143.158.250:55336] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ewe.php"] [unique_id "adflqq8Hkxpyh6_TlVQ5vAAAAIU"]
[Fri Apr 10 01:45:15.506552 2026] [:error] [pid 36397:tid 36408] [client 52.143.158.250:41063] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ewe.php"] [unique_id "adflq2his4RvVEWEv9v1zAAAAAc"]
[Fri Apr 10 01:45:16.377587 2026] [:error] [pid 36398:tid 36446] [client 52.143.158.250:59684] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/aboute.php"] [unique_id "adflrOX640wXZwwgfP93tAAAAFI"]
[Fri Apr 10 01:45:17.029712 2026] [:error] [pid 36398:tid 36430] [client 52.143.158.250:47794] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/aboute.php"] [unique_id "adflreX640wXZwwgfP93tQAAAEI"]
[Fri Apr 10 01:45:17.647146 2026] [:error] [pid 36397:tid 36407] [client 52.143.158.250:41047] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/aboute.php"] [unique_id "adflrWhis4RvVEWEv9v1zwAAAAY"]
[Fri Apr 10 01:45:18.587967 2026] [:error] [pid 36397:tid 36403] [client 52.143.158.250:47751] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/aboute.php"] [unique_id "adflrmhis4RvVEWEv9v10gAAAAI"]
[Fri Apr 10 01:45:19.244401 2026] [:error] [pid 29569:tid 29591] [client 52.143.158.250:47335] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/x9.php"] [unique_id "adflr7t9mkieWu8HPk5HwQAAAVI"]
[Fri Apr 10 01:45:20.105516 2026] [:error] [pid 36397:tid 36415] [client 52.143.158.250:47350] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/x9.php"] [unique_id "adflsGhis4RvVEWEv9v11QAAAA4"]
[Fri Apr 10 01:45:21.051925 2026] [:error] [pid 36397:tid 36422] [client 52.143.158.250:61804] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/x9.php"] [unique_id "adflsWhis4RvVEWEv9v11gAAABU"]
[Fri Apr 10 01:45:21.833176 2026] [:error] [pid 36398:tid 36445] [client 52.143.158.250:61252] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/x9.php"] [unique_id "adflseX640wXZwwgfP93ugAAAFE"]
[Fri Apr 10 01:45:22.486627 2026] [:error] [pid 36399:tid 36470] [client 52.143.158.250:44751] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/an.php"] [unique_id "adflsq8Hkxpyh6_TlVQ5vwAAAI8"]
[Fri Apr 10 01:45:23.264359 2026] [:error] [pid 36397:tid 36404] [client 52.143.158.250:47775] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/an.php"] [unique_id "adfls2his4RvVEWEv9v12AAAAAM"]
[Fri Apr 10 01:45:23.949744 2026] [:error] [pid 36397:tid 36405] [client 52.143.158.250:51547] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/an.php"] [unique_id "adfls2his4RvVEWEv9v12gAAAAQ"]
[Fri Apr 10 01:45:24.616566 2026] [:error] [pid 36397:tid 36408] [client 52.143.158.250:39103] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/an.php"] [unique_id "adfltGhis4RvVEWEv9v12wAAAAc"]
[Fri Apr 10 01:45:25.526293 2026] [:error] [pid 36399:tid 36475] [client 52.143.158.250:39087] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/aboutc.php"] [unique_id "adflta8Hkxpyh6_TlVQ5xAAAAJQ"]
[Fri Apr 10 01:45:26.159985 2026] [:error] [pid 36399:tid 36471] [client 52.143.158.250:44776] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/aboutc.php"] [unique_id "adfltq8Hkxpyh6_TlVQ5xQAAAJA"]
[Fri Apr 10 01:45:26.919938 2026] [:error] [pid 36672:tid 36678] [client 52.143.158.250:35922] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/aboutc.php"] [unique_id "adfltj99r9VLJsT_o8iK1gAAAMQ"]
[Fri Apr 10 01:45:27.498273 2026] [:error] [pid 29569:tid 29578] [client 52.143.158.250:57720] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/aboutc.php"] [unique_id "adflt7t9mkieWu8HPk5HwgAAAUU"]
[Fri Apr 10 01:45:28.155884 2026] [:error] [pid 36672:tid 36682] [client 52.143.158.250:50877] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/gdn.php"] [unique_id "adfluD99r9VLJsT_o8iK1wAAAMg"]
[Fri Apr 10 01:45:29.320875 2026] [:error] [pid 36397:tid 36421] [client 52.143.158.250:44739] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/gdn.php"] [unique_id "adfluWhis4RvVEWEv9v13QAAABQ"]
[Fri Apr 10 01:45:32.819443 2026] [:error] [pid 29569:tid 29573] [client 52.143.158.250:51923] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/gdn.php"] [unique_id "adflvLt9mkieWu8HPk5HxwAAAUA"]
[Fri Apr 10 01:45:34.171570 2026] [:error] [pid 21486:tid 21495] [client 52.143.158.250:35879] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/gdn.php"] [unique_id "adflvqBRftltyNdYwLoolQAAAQc"]
[Fri Apr 10 01:45:34.828822 2026] [:error] [pid 21486:tid 21504] [client 52.143.158.250:57953] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/first.php"] [unique_id "adflvqBRftltyNdYwLoomAAAARA"]
[Fri Apr 10 01:45:35.467568 2026] [:error] [pid 21486:tid 21506] [client 52.143.158.250:47739] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/first.php"] [unique_id "adflv6BRftltyNdYwLoomQAAARI"]
[Fri Apr 10 01:45:36.219197 2026] [:error] [pid 21486:tid 21509] [client 52.143.158.250:60847] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/first.php"] [unique_id "adflwKBRftltyNdYwLoonAAAARU"]
[Fri Apr 10 01:45:36.920019 2026] [:error] [pid 21486:tid 21498] [client 52.143.158.250:39129] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/first.php"] [unique_id "adflwKBRftltyNdYwLoooAAAAQo"]
[Fri Apr 10 01:45:37.788349 2026] [:error] [pid 36398:tid 36439] [client 52.143.158.250:65325] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/redixsx.php"] [unique_id "adflweX640wXZwwgfP93yQAAAEs"]
[Fri Apr 10 01:45:39.110200 2026] [:error] [pid 36398:tid 36438] [client 52.143.158.250:46945] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/redixsx.php"] [unique_id "adflw-X640wXZwwgfP93ywAAAEo"]
[Fri Apr 10 01:45:40.367286 2026] [:error] [pid 36672:tid 36677] [client 52.143.158.250:61728] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/redixsx.php"] [unique_id "adflxD99r9VLJsT_o8iK3QAAAMM"]
[Fri Apr 10 01:45:41.150487 2026] [:error] [pid 36398:tid 36451] [client 52.143.158.250:49295] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/redixsx.php"] [unique_id "adflxeX640wXZwwgfP930AAAAFc"]
[Fri Apr 10 01:45:42.995324 2026] [:error] [pid 36672:tid 36695] [client 52.143.158.250:42240] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/cpp2.php"] [unique_id "adflxj99r9VLJsT_o8iK4QAAANU"]
[Fri Apr 10 01:45:44.396525 2026] [:error] [pid 36398:tid 36431] [client 52.143.158.250:62595] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/cpp2.php"] [unique_id "adflyOX640wXZwwgfP930wAAAEM"]
[Fri Apr 10 01:45:45.086592 2026] [:error] [pid 36399:tid 36477] [client 52.143.158.250:44731] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/cpp2.php"] [unique_id "adflya8Hkxpyh6_TlVQ5yQAAAJY"]
[Fri Apr 10 01:45:45.887429 2026] [:error] [pid 36398:tid 36446] [client 52.143.158.250:46630] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/cpp2.php"] [unique_id "adflyeX640wXZwwgfP932AAAAFI"]
[Fri Apr 10 01:45:46.684070 2026] [proxy_fcgi:error] [pid 29569:tid 29577] [client 52.143.158.250:60781] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 01:45:46.921082 2026] [proxy_fcgi:error] [pid 29569:tid 29592] [client 52.143.158.250:60781] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 01:45:47.195140 2026] [proxy_fcgi:error] [pid 29569:tid 29581] [client 52.143.158.250:60781] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 01:45:47.435192 2026] [proxy_fcgi:error] [pid 29569:tid 29582] [client 52.143.158.250:60781] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 01:45:47.671414 2026] [proxy_fcgi:error] [pid 29569:tid 29597] [client 52.143.158.250:60781] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 01:45:47.907528 2026] [proxy_fcgi:error] [pid 29569:tid 29591] [client 52.143.158.250:60781] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 01:45:48.158421 2026] [proxy_fcgi:error] [pid 29569:tid 29589] [client 52.143.158.250:60781] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 01:45:48.393780 2026] [proxy_fcgi:error] [pid 29569:tid 29590] [client 52.143.158.250:60781] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 01:45:48.842757 2026] [proxy_fcgi:error] [pid 29569:tid 29575] [client 52.143.158.250:60781] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 01:45:49.109838 2026] [proxy_fcgi:error] [pid 29569:tid 29580] [client 52.143.158.250:60781] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 01:45:49.479473 2026] [proxy_fcgi:error] [pid 29569:tid 29573] [client 52.143.158.250:60781] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 01:45:49.727414 2026] [:error] [pid 29569:tid 29576] [client 52.143.158.250:60781] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/900.php"] [unique_id "adflzbt9mkieWu8HPk5H3QAAAUM"]
[Fri Apr 10 01:45:50.846032 2026] [:error] [pid 21486:tid 21499] [client 52.143.158.250:60500] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/900.php"] [unique_id "adflzqBRftltyNdYwLoopQAAAQs"]
[Fri Apr 10 01:45:52.076021 2026] [:error] [pid 36672:tid 36684] [client 52.143.158.250:58053] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/900.php"] [unique_id "adfl0D99r9VLJsT_o8iK6AAAAMo"]
[Fri Apr 10 01:45:53.130602 2026] [:error] [pid 21486:tid 21497] [client 52.143.158.250:60048] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/900.php"] [unique_id "adfl0aBRftltyNdYwLooqQAAAQk"]
[Fri Apr 10 01:45:54.060117 2026] [:error] [pid 21486:tid 21496] [client 52.143.158.250:52779] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/blsvgeyaza.php"] [unique_id "adfl0qBRftltyNdYwLooqwAAAQg"]
[Fri Apr 10 01:45:54.873543 2026] [:error] [pid 29569:tid 29591] [client 52.143.158.250:62603] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/blsvgeyaza.php"] [unique_id "adfl0rt9mkieWu8HPk5H4gAAAVI"]
[Fri Apr 10 01:45:55.858540 2026] [:error] [pid 36398:tid 36428] [client 52.143.158.250:52751] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/blsvgeyaza.php"] [unique_id "adfl0-X640wXZwwgfP933QAAAEA"]
[Fri Apr 10 01:45:56.798894 2026] [:error] [pid 36399:tid 36461] [client 52.143.158.250:55813] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/blsvgeyaza.php"] [unique_id "adfl1K8Hkxpyh6_TlVQ5zwAAAIY"]
[Fri Apr 10 01:45:57.880174 2026] [:error] [pid 36399:tid 36475] [client 52.143.158.250:49311] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/gqhyti.php"] [unique_id "adfl1a8Hkxpyh6_TlVQ50AAAAJQ"]
[Fri Apr 10 01:45:58.603949 2026] [:error] [pid 36672:tid 36674] [client 52.143.158.250:46935] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/gqhyti.php"] [unique_id "adfl1j99r9VLJsT_o8iK7gAAAMA"]
[Fri Apr 10 01:45:59.407578 2026] [:error] [pid 29569:tid 29575] [client 52.143.158.250:42287] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/gqhyti.php"] [unique_id "adfl17t9mkieWu8HPk5H5AAAAUI"]
[Fri Apr 10 01:46:00.084442 2026] [:error] [pid 36398:tid 36451] [client 52.143.158.250:42252] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/gqhyti.php"] [unique_id "adfl2OX640wXZwwgfP934gAAAFc"]
[Fri Apr 10 01:46:01.139714 2026] [:error] [pid 36398:tid 36436] [client 52.143.158.250:44728] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/autoxxi.php"] [unique_id "adfl2eX640wXZwwgfP934wAAAEg"]
[Fri Apr 10 01:46:01.878128 2026] [:error] [pid 21486:tid 21490] [client 52.143.158.250:63384] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/autoxxi.php"] [unique_id "adfl2aBRftltyNdYwLoosAAAAQI"]
[Fri Apr 10 01:46:02.868532 2026] [:error] [pid 21486:tid 21502] [client 52.143.158.250:58250] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/autoxxi.php"] [unique_id "adfl2qBRftltyNdYwLoosgAAAQ4"]
[Fri Apr 10 01:46:03.948843 2026] [:error] [pid 36397:tid 36407] [client 52.143.158.250:63379] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/autoxxi.php"] [unique_id "adfl22his4RvVEWEv9v17wAAAAY"]
[Fri Apr 10 01:46:04.935541 2026] [:error] [pid 21486:tid 21491] [client 52.143.158.250:45980] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/1144452145_error_log.php"] [unique_id "adfl3KBRftltyNdYwLootQAAAQM"]
[Fri Apr 10 01:46:05.860807 2026] [:error] [pid 36672:tid 36676] [client 52.143.158.250:49330] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/1144452145_error_log.php"] [unique_id "adfl3T99r9VLJsT_o8iK9QAAAMI"]
[Fri Apr 10 01:46:06.578009 2026] [:error] [pid 21486:tid 21495] [client 52.143.158.250:58003] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/1144452145_error_log.php"] [unique_id "adfl3qBRftltyNdYwLootgAAAQc"]
[Fri Apr 10 01:46:07.345251 2026] [:error] [pid 36672:tid 36680] [client 52.143.158.250:60037] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/1144452145_error_log.php"] [unique_id "adfl3z99r9VLJsT_o8iK9wAAAMY"]
[Fri Apr 10 01:46:08.003769 2026] [:error] [pid 36399:tid 36472] [client 52.143.158.250:63382] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws48.php"] [unique_id "adfl4K8Hkxpyh6_TlVQ51gAAAJE"]
[Fri Apr 10 01:46:08.628181 2026] [:error] [pid 29569:tid 29583] [client 52.143.158.250:53092] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws48.php"] [unique_id "adfl4Lt9mkieWu8HPk5H6QAAAUo"]
[Fri Apr 10 01:46:09.439088 2026] [:error] [pid 29569:tid 29595] [client 52.143.158.250:63413] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws48.php"] [unique_id "adfl4bt9mkieWu8HPk5H7AAAAVY"]
[Fri Apr 10 01:46:10.078085 2026] [:error] [pid 36399:tid 36469] [client 52.143.158.250:53561] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws48.php"] [unique_id "adfl4q8Hkxpyh6_TlVQ52AAAAI4"]
[Fri Apr 10 01:46:10.889363 2026] [:error] [pid 21486:tid 21506] [client 52.143.158.250:30716] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-asyn-upload.php"] [unique_id "adfl4qBRftltyNdYwLoougAAARI"]
[Fri Apr 10 01:46:11.639410 2026] [:error] [pid 36399:tid 36466] [client 52.143.158.250:60907] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-asyn-upload.php"] [unique_id "adfl468Hkxpyh6_TlVQ52wAAAIs"]
[Fri Apr 10 01:46:12.966335 2026] [:error] [pid 36397:tid 36406] [client 52.143.158.250:60741] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-asyn-upload.php"] [unique_id "adfl5Ghis4RvVEWEv9v19gAAAAU"]
[Fri Apr 10 01:46:13.596653 2026] [:error] [pid 36397:tid 36422] [client 52.143.158.250:63469] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-asyn-upload.php"] [unique_id "adfl5Whis4RvVEWEv9v19wAAABU"]
[Fri Apr 10 01:46:14.220083 2026] [:error] [pid 36397:tid 36405] [client 52.143.158.250:55830] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/schallfuns.php"] [unique_id "adfl5mhis4RvVEWEv9v1-wAAAAQ"]
[Fri Apr 10 01:46:14.974195 2026] [:error] [pid 21486:tid 21498] [client 52.143.158.250:60755] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/schallfuns.php"] [unique_id "adfl5qBRftltyNdYwLoovQAAAQo"]
[Fri Apr 10 01:46:15.873744 2026] [:error] [pid 36397:tid 36421] [client 52.143.158.250:58018] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/schallfuns.php"] [unique_id "adfl52his4RvVEWEv9v1_gAAABQ"]
[Fri Apr 10 01:46:16.533454 2026] [:error] [pid 36397:tid 36403] [client 52.143.158.250:53551] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/schallfuns.php"] [unique_id "adfl6Ghis4RvVEWEv9v1_wAAAAI"]
[Fri Apr 10 01:46:17.196050 2026] [:error] [pid 29569:tid 29578] [client 52.143.158.250:30666] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/CDX1.php"] [unique_id "adfl6bt9mkieWu8HPk5H8wAAAUU"]
[Fri Apr 10 01:46:17.754466 2026] [:error] [pid 36397:tid 36416] [client 52.143.158.250:45991] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/CDX1.php"] [unique_id "adfl6Whis4RvVEWEv9v2AgAAAA8"]
[Fri Apr 10 01:46:18.317508 2026] [:error] [pid 29569:tid 29575] [client 52.143.158.250:42272] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/CDX1.php"] [unique_id "adfl6rt9mkieWu8HPk5H9gAAAUI"]
[Fri Apr 10 01:46:19.327288 2026] [:error] [pid 29569:tid 29580] [client 52.143.158.250:53065] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/CDX1.php"] [unique_id "adfl67t9mkieWu8HPk5H-AAAAUc"]
[Fri Apr 10 01:46:20.101459 2026] [:error] [pid 36399:tid 36471] [client 52.143.158.250:52750] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/clasa99.php"] [unique_id "adfl7K8Hkxpyh6_TlVQ54QAAAJA"]
[Fri Apr 10 01:46:20.852036 2026] [:error] [pid 36672:tid 36681] [client 52.143.158.250:60774] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/clasa99.php"] [unique_id "adfl7D99r9VLJsT_o8iK-wAAAMc"]
[Fri Apr 10 01:46:21.609491 2026] [:error] [pid 36672:tid 36698] [client 52.143.158.250:63392] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/clasa99.php"] [unique_id "adfl7T99r9VLJsT_o8iK_QAAANg"]
[Fri Apr 10 01:46:22.594069 2026] [:error] [pid 36398:tid 36431] [client 52.143.158.250:60765] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/clasa99.php"] [unique_id "adfl7uX640wXZwwgfP936AAAAEM"]
[Fri Apr 10 01:46:23.341526 2026] [:error] [pid 36397:tid 36412] [client 52.143.158.250:60890] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/myfilexxx.php"] [unique_id "adfl72his4RvVEWEv9v2BQAAAAs"]
[Fri Apr 10 01:46:24.236977 2026] [:error] [pid 36672:tid 36685] [client 52.143.158.250:60888] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/myfilexxx.php"] [unique_id "adfl8D99r9VLJsT_o8iLBQAAAMs"]
[Fri Apr 10 01:46:25.179316 2026] [:error] [pid 36672:tid 36677] [client 52.143.158.250:49342] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/myfilexxx.php"] [unique_id "adfl8T99r9VLJsT_o8iLBwAAAMM"]
[Fri Apr 10 01:46:25.805638 2026] [:error] [pid 29569:tid 29591] [client 52.143.158.250:58111] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/myfilexxx.php"] [unique_id "adfl8bt9mkieWu8HPk5H_gAAAVI"]
[Fri Apr 10 01:46:26.661655 2026] [:error] [pid 36672:tid 36697] [client 52.143.158.250:60873] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/karma_144a.php"] [unique_id "adfl8j99r9VLJsT_o8iLDQAAANc"]
[Fri Apr 10 01:46:27.544077 2026] [:error] [pid 29569:tid 29575] [client 52.143.158.250:58106] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/karma_144a.php"] [unique_id "adfl87t9mkieWu8HPk5IAAAAAUI"]
[Fri Apr 10 01:46:28.494754 2026] [:error] [pid 29569:tid 29580] [client 52.143.158.250:55861] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/karma_144a.php"] [unique_id "adfl9Lt9mkieWu8HPk5IAQAAAUc"]
[Fri Apr 10 01:46:29.653891 2026] [:error] [pid 21486:tid 21496] [client 52.143.158.250:63447] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/karma_144a.php"] [unique_id "adfl9aBRftltyNdYwLooyAAAAQg"]
[Fri Apr 10 01:46:30.349042 2026] [:error] [pid 21486:tid 21498] [client 52.143.158.250:63457] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/3586%20b64.php"] [unique_id "adfl9qBRftltyNdYwLooygAAAQo"]
[Fri Apr 10 01:46:31.247989 2026] [:error] [pid 21486:tid 21493] [client 52.143.158.250:46603] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/3586%20b64.php"] [unique_id "adfl96BRftltyNdYwLoozAAAAQU"]
[Fri Apr 10 01:46:31.951694 2026] [:error] [pid 21486:tid 21503] [client 52.143.158.250:58087] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/3586%20b64.php"] [unique_id "adfl96BRftltyNdYwLoozwAAAQ8"]
[Fri Apr 10 01:46:32.933510 2026] [:error] [pid 36399:tid 36469] [client 52.143.158.250:42285] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/3586%20b64.php"] [unique_id "adfl-K8Hkxpyh6_TlVQ55QAAAI4"]
[Fri Apr 10 01:46:33.839186 2026] [:error] [pid 29569:tid 29594] [client 52.143.158.250:58076] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws.php"] [unique_id "adfl-bt9mkieWu8HPk5IBQAAAVU"]
[Fri Apr 10 01:46:34.549571 2026] [:error] [pid 29569:tid 29587] [client 52.143.158.250:62002] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws.php"] [unique_id "adfl-rt9mkieWu8HPk5ICAAAAU4"]
[Fri Apr 10 01:46:35.287967 2026] [:error] [pid 29569:tid 29589] [client 52.143.158.250:33980] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws.php"] [unique_id "adfl-7t9mkieWu8HPk5IEAAAAVA"]
[Fri Apr 10 01:46:35.814951 2026] [:error] [pid 36672:tid 36685] [client 52.143.158.250:49780] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws.php"] [unique_id "adfl-z99r9VLJsT_o8iLHAAAAMs"]
[Fri Apr 10 01:46:36.362756 2026] [:error] [pid 36672:tid 36677] [client 52.143.158.250:30664] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bmi.php"] [unique_id "adfl_D99r9VLJsT_o8iLHwAAAMM"]
[Fri Apr 10 01:46:36.903078 2026] [:error] [pid 36672:tid 36695] [client 52.143.158.250:60796] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bmi.php"] [unique_id "adfl_D99r9VLJsT_o8iLIgAAANU"]
[Fri Apr 10 01:46:37.622693 2026] [:error] [pid 36672:tid 36690] [client 52.143.158.250:46004] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bmi.php"] [unique_id "adfl_T99r9VLJsT_o8iLJQAAANA"]
[Fri Apr 10 01:46:38.241985 2026] [:error] [pid 36672:tid 36678] [client 52.143.158.250:46007] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bmi.php"] [unique_id "adfl_j99r9VLJsT_o8iLKQAAAMQ"]
[Fri Apr 10 01:46:38.957402 2026] [:error] [pid 21486:tid 21496] [client 52.143.158.250:58040] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bypltspd.php"] [unique_id "adfl_qBRftltyNdYwLoo2QAAAQg"]
[Fri Apr 10 01:46:39.730108 2026] [:error] [pid 21486:tid 21493] [client 52.143.158.250:42302] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bypltspd.php"] [unique_id "adfl_6BRftltyNdYwLoo2wAAAQU"]
[Fri Apr 10 01:46:40.610933 2026] [:error] [pid 36672:tid 36698] [client 52.143.158.250:49743] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bypltspd.php"] [unique_id "adfmAD99r9VLJsT_o8iLLgAAANg"]
[Fri Apr 10 01:46:41.450866 2026] [:error] [pid 36672:tid 36694] [client 52.143.158.250:53088] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bypltspd.php"] [unique_id "adfmAT99r9VLJsT_o8iLMQAAANQ"]
[Fri Apr 10 01:46:42.478014 2026] [:error] [pid 29569:tid 29573] [client 52.143.158.250:53555] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/shell.php"] [unique_id "adfmArt9mkieWu8HPk5IIgAAAUA"]
[Fri Apr 10 01:46:43.250609 2026] [:error] [pid 36672:tid 36684] [client 52.143.158.250:55866] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/shell.php"] [unique_id "adfmAz99r9VLJsT_o8iLNQAAAMo"]
[Fri Apr 10 01:46:43.959617 2026] [:error] [pid 36397:tid 36416] [client 52.143.158.250:52746] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/shell.php"] [unique_id "adfmA2his4RvVEWEv9v2DgAAAA8"]
[Fri Apr 10 01:46:44.848461 2026] [:error] [pid 29569:tid 29583] [client 52.143.158.250:42292] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/shell.php"] [unique_id "adfmBLt9mkieWu8HPk5IJgAAAUo"]
[Fri Apr 10 01:46:45.703290 2026] [:error] [pid 36672:tid 36686] [client 52.143.158.250:61994] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-links-opml.php"] [unique_id "adfmBT99r9VLJsT_o8iLPQAAAMw"]
[Fri Apr 10 01:46:46.577803 2026] [:error] [pid 36397:tid 36410] [client 52.143.158.250:58255] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-links-opml.php"] [unique_id "adfmBmhis4RvVEWEv9v2DwAAAAk"]
[Fri Apr 10 01:46:47.345908 2026] [:error] [pid 21486:tid 21491] [client 52.143.158.250:57997] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-links-opml.php"] [unique_id "adfmB6BRftltyNdYwLoo3gAAAQM"]
[Fri Apr 10 01:46:48.515721 2026] [:error] [pid 21486:tid 21504] [client 52.143.158.250:39893] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-links-opml.php"] [unique_id "adfmCKBRftltyNdYwLoo4gAAARA"]
[Fri Apr 10 01:46:49.701667 2026] [proxy_fcgi:error] [pid 36398:tid 36448] [client 52.143.158.250:49781] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 01:46:49.937277 2026] [proxy_fcgi:error] [pid 36398:tid 36452] [client 52.143.158.250:49781] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 01:46:50.214312 2026] [proxy_fcgi:error] [pid 36398:tid 36435] [client 52.143.158.250:49781] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 01:46:50.454478 2026] [proxy_fcgi:error] [pid 36398:tid 36449] [client 52.143.158.250:49781] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 01:46:50.925148 2026] [proxy_fcgi:error] [pid 36398:tid 36443] [client 52.143.158.250:49781] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 01:46:51.160117 2026] [proxy_fcgi:error] [pid 36398:tid 36446] [client 52.143.158.250:49781] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 01:46:51.424324 2026] [proxy_fcgi:error] [pid 36398:tid 36433] [client 52.143.158.250:49781] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 01:46:51.686516 2026] [proxy_fcgi:error] [pid 36398:tid 36432] [client 52.143.158.250:49781] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 01:46:51.964510 2026] [proxy_fcgi:error] [pid 36398:tid 36439] [client 52.143.158.250:49781] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 01:46:52.204246 2026] [:error] [pid 36398:tid 36438] [client 52.143.158.250:49781] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/mh.php"] [unique_id "adfmDOX640wXZwwgfP94BgAAAEo"]
[Fri Apr 10 01:46:53.056791 2026] [:error] [pid 36672:tid 36687] [client 52.143.158.250:63153] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/mh.php"] [unique_id "adfmDT99r9VLJsT_o8iLQgAAAM0"]
[Fri Apr 10 01:46:53.772171 2026] [:error] [pid 36399:tid 36461] [client 52.143.158.250:52770] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/mh.php"] [unique_id "adfmDa8Hkxpyh6_TlVQ58QAAAIY"]
[Fri Apr 10 01:46:54.835581 2026] [:error] [pid 36672:tid 36684] [client 52.143.158.250:54924] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/mh.php"] [unique_id "adfmDj99r9VLJsT_o8iLRQAAAMo"]
[Fri Apr 10 01:46:55.460288 2026] [:error] [pid 36399:tid 36474] [client 52.143.158.250:60885] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws88.php"] [unique_id "adfmD68Hkxpyh6_TlVQ58wAAAJM"]
[Fri Apr 10 01:46:55.993809 2026] [:error] [pid 36399:tid 36462] [client 52.143.158.250:37731] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws88.php"] [unique_id "adfmD68Hkxpyh6_TlVQ59QAAAIc"]
[Fri Apr 10 01:46:56.541436 2026] [:error] [pid 36397:tid 36413] [client 52.143.158.250:2398] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws88.php"] [unique_id "adfmEGhis4RvVEWEv9v2GwAAAAw"]
[Fri Apr 10 01:46:57.153820 2026] [:error] [pid 36672:tid 36686] [client 52.143.158.250:60897] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws88.php"] [unique_id "adfmET99r9VLJsT_o8iLRwAAAMw"]
[Fri Apr 10 01:46:57.897056 2026] [:error] [pid 36672:tid 36689] [client 52.143.158.250:53083] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws86.php"] [unique_id "adfmET99r9VLJsT_o8iLSwAAAM8"]
[Fri Apr 10 01:46:58.762612 2026] [:error] [pid 36398:tid 36436] [client 52.143.158.250:63430] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws86.php"] [unique_id "adfmEuX640wXZwwgfP94CgAAAEg"]
[Fri Apr 10 01:46:59.617687 2026] [:error] [pid 21486:tid 21509] [client 52.143.158.250:57998] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws86.php"] [unique_id "adfmE6BRftltyNdYwLoo5QAAARU"]
[Fri Apr 10 01:47:00.316254 2026] [:error] [pid 21486:tid 21498] [client 52.143.158.250:2392] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws86.php"] [unique_id "adfmFKBRftltyNdYwLoo5gAAAQo"]
[Fri Apr 10 01:47:01.487509 2026] [:error] [pid 36672:tid 36682] [client 52.143.158.250:55853] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/vx.php"] [unique_id "adfmFT99r9VLJsT_o8iLUAAAAMg"]
[Fri Apr 10 01:47:02.250791 2026] [:error] [pid 29569:tid 29590] [client 52.143.158.250:58285] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/vx.php"] [unique_id "adfmFrt9mkieWu8HPk5IKgAAAVE"]
[Fri Apr 10 01:47:03.083854 2026] [:error] [pid 36398:tid 36434] [client 52.143.158.250:54948] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/vx.php"] [unique_id "adfmF-X640wXZwwgfP94DAAAAEY"]
[Fri Apr 10 01:47:04.398962 2026] [:error] [pid 29569:tid 29580] [client 52.143.158.250:60789] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/vx.php"] [unique_id "adfmGLt9mkieWu8HPk5ILQAAAUc"]
[Fri Apr 10 01:47:05.300777 2026] [:error] [pid 36672:tid 36681] [client 52.143.158.250:62008] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/dass.php"] [unique_id "adfmGT99r9VLJsT_o8iLVgAAAMc"]
[Fri Apr 10 01:47:06.254283 2026] [:error] [pid 21486:tid 21507] [client 52.143.158.250:2405] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/dass.php"] [unique_id "adfmGqBRftltyNdYwLoo7wAAARM"]
[Fri Apr 10 01:47:07.015457 2026] [:error] [pid 36397:tid 36415] [client 52.143.158.250:63833] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/dass.php"] [unique_id "adfmG2his4RvVEWEv9v2IgAAAA4"]
[Fri Apr 10 01:47:07.690046 2026] [:error] [pid 36398:tid 36432] [client 52.143.158.250:58037] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/dass.php"] [unique_id "adfmG-X640wXZwwgfP94EwAAAEQ"]
[Fri Apr 10 01:47:08.338063 2026] [:error] [pid 29569:tid 29588] [client 52.143.158.250:63139] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/s.php"] [unique_id "adfmHLt9mkieWu8HPk5ILwAAAU8"]
[Fri Apr 10 01:47:09.506202 2026] [:error] [pid 29569:tid 29584] [client 52.143.158.250:46010] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/s.php"] [unique_id "adfmHbt9mkieWu8HPk5IMgAAAUs"]
[Fri Apr 10 01:47:10.457565 2026] [:error] [pid 29569:tid 29583] [client 52.143.158.250:58247] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/s.php"] [unique_id "adfmHrt9mkieWu8HPk5INQAAAUo"]
[Fri Apr 10 01:47:11.308334 2026] [:error] [pid 36672:tid 36684] [client 52.143.158.250:63112] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/s.php"] [unique_id "adfmHz99r9VLJsT_o8iLWgAAAMo"]
[Fri Apr 10 01:47:12.157893 2026] [:error] [pid 36672:tid 36682] [client 52.143.158.250:52783] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/kj.php"] [unique_id "adfmID99r9VLJsT_o8iLWwAAAMg"]
[Fri Apr 10 01:47:12.792136 2026] [:error] [pid 36672:tid 36683] [client 52.143.158.250:60875] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/kj.php"] [unique_id "adfmID99r9VLJsT_o8iLXQAAAMk"]
[Fri Apr 10 01:47:13.435293 2026] [:error] [pid 36672:tid 36689] [client 52.143.158.250:49742] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/kj.php"] [unique_id "adfmIT99r9VLJsT_o8iLYgAAAM8"]
[Fri Apr 10 01:47:14.108113 2026] [:error] [pid 36672:tid 36679] [client 52.143.158.250:58014] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/kj.php"] [unique_id "adfmIj99r9VLJsT_o8iLZAAAAMU"]
[Fri Apr 10 01:47:14.944396 2026] [:error] [pid 29569:tid 29588] [client 52.143.158.250:61985] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws83.php"] [unique_id "adfmIrt9mkieWu8HPk5IPAAAAU8"]
[Fri Apr 10 01:47:16.028863 2026] [:error] [pid 29569:tid 29584] [client 52.143.158.250:2403] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws83.php"] [unique_id "adfmJLt9mkieWu8HPk5IPQAAAUs"]
[Fri Apr 10 01:47:16.771575 2026] [:error] [pid 36672:tid 36682] [client 52.143.158.250:58272] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws83.php"] [unique_id "adfmJD99r9VLJsT_o8iLaQAAAMg"]
[Fri Apr 10 01:47:17.520207 2026] [:error] [pid 29569:tid 29596] [client 52.143.158.250:63861] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws83.php"] [unique_id "adfmJbt9mkieWu8HPk5IPwAAAVc"]
[Fri Apr 10 01:47:18.398405 2026] [:error] [pid 36672:tid 36677] [client 52.143.158.250:63845] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws75.php"] [unique_id "adfmJj99r9VLJsT_o8iLagAAAMM"]
[Fri Apr 10 01:47:19.012577 2026] [:error] [pid 29569:tid 29577] [client 52.143.158.250:55856] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws75.php"] [unique_id "adfmJ7t9mkieWu8HPk5IQQAAAUQ"]
[Fri Apr 10 01:47:19.741296 2026] [:error] [pid 29569:tid 29594] [client 52.143.158.250:39899] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws75.php"] [unique_id "adfmJ7t9mkieWu8HPk5IQgAAAVU"]
[Fri Apr 10 01:47:20.293297 2026] [:error] [pid 36672:tid 36675] [client 52.143.158.250:64611] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws75.php"] [unique_id "adfmKD99r9VLJsT_o8iLbgAAAME"]
[Fri Apr 10 01:47:20.915634 2026] [:error] [pid 29569:tid 29576] [client 52.143.158.250:53546] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ms-edit.php"] [unique_id "adfmKLt9mkieWu8HPk5ISAAAAUM"]
[Fri Apr 10 01:47:21.454657 2026] [:error] [pid 36399:tid 36455] [client 52.143.158.250:63133] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ms-edit.php"] [unique_id "adfmKa8Hkxpyh6_TlVQ59wAAAIA"]
[Fri Apr 10 01:47:22.283748 2026] [:error] [pid 29569:tid 29588] [client 52.143.158.250:58292] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ms-edit.php"] [unique_id "adfmKrt9mkieWu8HPk5ISgAAAU8"]
[Fri Apr 10 01:47:22.853765 2026] [:error] [pid 36398:tid 36452] [client 52.143.158.250:39933] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ms-edit.php"] [unique_id "adfmKuX640wXZwwgfP94GAAAAFg"]
[Fri Apr 10 01:47:23.676552 2026] [:error] [pid 36397:tid 36416] [client 52.143.158.250:60778] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/abc.php"] [unique_id "adfmK2his4RvVEWEv9v2JQAAAA8"]
[Fri Apr 10 01:47:24.202764 2026] [:error] [pid 36397:tid 36413] [client 52.143.158.250:37739] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/abc.php"] [unique_id "adfmLGhis4RvVEWEv9v2JwAAAAw"]
[Fri Apr 10 01:47:24.705896 2026] [:error] [pid 36397:tid 36424] [client 52.143.158.250:63849] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/abc.php"] [unique_id "adfmLGhis4RvVEWEv9v2KQAAABc"]
[Fri Apr 10 01:47:25.255680 2026] [:error] [pid 36398:tid 36435] [client 52.143.158.250:36778] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/abc.php"] [unique_id "adfmLeX640wXZwwgfP94GwAAAEc"]
[Fri Apr 10 01:47:25.842154 2026] [:error] [pid 36399:tid 36476] [client 52.143.158.250:30671] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/motu.php"] [unique_id "adfmLa8Hkxpyh6_TlVQ6CAAAAJU"]
[Fri Apr 10 01:47:26.394536 2026] [:error] [pid 36397:tid 36406] [client 52.143.158.250:2898] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/motu.php"] [unique_id "adfmLmhis4RvVEWEv9v2KgAAAAU"]
[Fri Apr 10 01:47:26.985976 2026] [:error] [pid 29569:tid 29596] [client 52.143.158.250:60775] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/motu.php"] [unique_id "adfmLrt9mkieWu8HPk5ITQAAAVc"]
[Fri Apr 10 01:47:27.574064 2026] [:error] [pid 36399:tid 36479] [client 52.143.158.250:63433] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/motu.php"] [unique_id "adfmL68Hkxpyh6_TlVQ6CQAAAJg"]
[Fri Apr 10 01:47:28.326761 2026] [:error] [pid 21486:tid 21506] [client 52.143.158.250:58294] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/inputs.php"] [unique_id "adfmMKBRftltyNdYwLoo_QAAARI"]
[Fri Apr 10 01:47:29.001015 2026] [:error] [pid 36398:tid 36436] [client 52.143.158.250:54913] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/inputs.php"] [unique_id "adfmMeX640wXZwwgfP94JQAAAEg"]
[Fri Apr 10 01:47:29.536250 2026] [:error] [pid 21486:tid 21489] [client 52.143.158.250:37753] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/inputs.php"] [unique_id "adfmMaBRftltyNdYwLoo_gAAAQE"]
[Fri Apr 10 01:47:30.266760 2026] [:error] [pid 36399:tid 36465] [client 52.143.158.250:63832] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/inputs.php"] [unique_id "adfmMq8Hkxpyh6_TlVQ6CwAAAIo"]
[Fri Apr 10 01:47:31.095594 2026] [:error] [pid 36399:tid 36461] [client 52.143.158.250:2375] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp9.php"] [unique_id "adfmM68Hkxpyh6_TlVQ6DQAAAIY"]
[Fri Apr 10 01:47:31.765031 2026] [:error] [pid 36672:tid 36690] [client 52.143.158.250:60920] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp9.php"] [unique_id "adfmMz99r9VLJsT_o8iLcwAAANA"]
[Fri Apr 10 01:47:32.414538 2026] [:error] [pid 36399:tid 36472] [client 52.143.158.250:55836] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp9.php"] [unique_id "adfmNK8Hkxpyh6_TlVQ6DwAAAJE"]
[Fri Apr 10 01:47:33.417865 2026] [:error] [pid 21486:tid 21493] [client 52.143.158.250:63145] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp9.php"] [unique_id "adfmNaBRftltyNdYwLopAAAAAQU"]
[Fri Apr 10 01:47:34.081725 2026] [:error] [pid 36672:tid 36677] [client 52.143.158.250:49756] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/public/vx.php"] [unique_id "adfmNj99r9VLJsT_o8iLdgAAAMM"]
[Fri Apr 10 01:47:34.672345 2026] [:error] [pid 36672:tid 36689] [client 52.143.158.250:2891] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/public/vx.php"] [unique_id "adfmNj99r9VLJsT_o8iLeAAAAM8"]
[Fri Apr 10 01:47:35.433293 2026] [:error] [pid 29569:tid 29582] [client 52.143.158.250:55849] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/public/vx.php"] [unique_id "adfmN7t9mkieWu8HPk5IUAAAAUk"]
[Fri Apr 10 01:47:35.930899 2026] [:error] [pid 36399:tid 36467] [client 52.143.158.250:63483] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/public/vx.php"] [unique_id "adfmN68Hkxpyh6_TlVQ6EQAAAIw"]
[Fri Apr 10 01:47:36.581529 2026] [:error] [pid 36397:tid 36419] [client 52.143.158.250:31171] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/inege.php"] [unique_id "adfmOGhis4RvVEWEv9v2PQAAABI"]
[Fri Apr 10 01:47:37.277439 2026] [:error] [pid 29569:tid 29589] [client 52.143.158.250:53090] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/inege.php"] [unique_id "adfmObt9mkieWu8HPk5IVAAAAVA"]
[Fri Apr 10 01:47:38.012121 2026] [:error] [pid 36672:tid 36687] [client 52.143.158.250:45787] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/inege.php"] [unique_id "adfmOj99r9VLJsT_o8iLfgAAAM0"]
[Fri Apr 10 01:47:38.792496 2026] [:error] [pid 36672:tid 36679] [client 52.143.158.250:2902] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/inege.php"] [unique_id "adfmOj99r9VLJsT_o8iLgAAAAMU"]
[Fri Apr 10 01:47:39.431282 2026] [:error] [pid 36397:tid 36405] [client 52.143.158.250:55888] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/nw.php"] [unique_id "adfmO2his4RvVEWEv9v2PwAAAAQ"]
[Fri Apr 10 01:47:39.960537 2026] [:error] [pid 36672:tid 36686] [client 52.143.158.250:37709] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/nw.php"] [unique_id "adfmOz99r9VLJsT_o8iLhQAAAMw"]
[Fri Apr 10 01:47:40.554576 2026] [:error] [pid 36672:tid 36695] [client 52.143.158.250:39931] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/nw.php"] [unique_id "adfmPD99r9VLJsT_o8iLiQAAANU"]
[Fri Apr 10 01:47:41.303178 2026] [:error] [pid 36672:tid 36680] [client 52.143.158.250:54966] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/nw.php"] [unique_id "adfmPT99r9VLJsT_o8iLjAAAAMY"]
[Fri Apr 10 01:47:42.052895 2026] [:error] [pid 36672:tid 36679] [client 52.143.158.250:54934] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/t.php"] [unique_id "adfmPj99r9VLJsT_o8iLjwAAAMU"]
[Fri Apr 10 01:47:42.992313 2026] [:error] [pid 36672:tid 36691] [client 52.143.158.250:49782] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/t.php"] [unique_id "adfmPj99r9VLJsT_o8iLkAAAANE"]
[Fri Apr 10 01:47:43.696576 2026] [:error] [pid 36398:tid 36450] [client 52.143.158.250:61989] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/t.php"] [unique_id "adfmP-X640wXZwwgfP94LQAAAFY"]
[Fri Apr 10 01:47:44.411798 2026] [:error] [pid 36398:tid 36431] [client 52.143.158.250:61977] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/t.php"] [unique_id "adfmQOX640wXZwwgfP94LgAAAEM"]
[Fri Apr 10 01:47:44.983474 2026] [:error] [pid 29569:tid 29582] [client 52.143.158.250:53546] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "adfmQLt9mkieWu8HPk5IXAAAAUk"]
[Fri Apr 10 01:47:45.599852 2026] [:error] [pid 21486:tid 21512] [client 52.143.158.250:62010] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "adfmQaBRftltyNdYwLopBwAAARg"]
[Fri Apr 10 01:47:46.515628 2026] [:error] [pid 36397:tid 36425] [client 52.143.158.250:63165] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "adfmQmhis4RvVEWEv9v2QwAAABg"]
[Fri Apr 10 01:47:47.375734 2026] [:error] [pid 36672:tid 36681] [client 52.143.158.250:55862] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "adfmQz99r9VLJsT_o8iL2wAAAMc"]
[Fri Apr 10 01:47:48.441152 2026] [:error] [pid 36672:tid 36697] [client 52.143.158.250:49761] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/public/ws49.php"] [unique_id "adfmRD99r9VLJsT_o8iL8QAAANc"]
[Fri Apr 10 01:47:49.161104 2026] [:error] [pid 36398:tid 36438] [client 52.143.158.250:57985] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/public/ws49.php"] [unique_id "adfmReX640wXZwwgfP94MgAAAEo"]
[Fri Apr 10 01:47:49.931946 2026] [:error] [pid 36398:tid 36452] [client 52.143.158.250:64515] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/public/ws49.php"] [unique_id "adfmReX640wXZwwgfP94NgAAAFg"]
[Fri Apr 10 01:47:50.734348 2026] [:error] [pid 21486:tid 21499] [client 52.143.158.250:39920] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/public/ws49.php"] [unique_id "adfmRqBRftltyNdYwLopCAAAAQs"]
[Fri Apr 10 01:47:51.454132 2026] [proxy_fcgi:error] [pid 21486:tid 21510] [client 52.143.158.250:53068] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 01:47:52.021616 2026] [proxy_fcgi:error] [pid 21486:tid 21504] [client 52.143.158.250:53068] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 01:47:52.352410 2026] [proxy_fcgi:error] [pid 21486:tid 21496] [client 52.143.158.250:53068] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 01:47:52.652018 2026] [proxy_fcgi:error] [pid 21486:tid 21488] [client 52.143.158.250:53068] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 01:47:53.215130 2026] [proxy_fcgi:error] [pid 21486:tid 21506] [client 52.143.158.250:53068] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 01:47:53.451421 2026] [proxy_fcgi:error] [pid 21486:tid 21508] [client 52.143.158.250:53068] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 01:47:53.774452 2026] [proxy_fcgi:error] [pid 21486:tid 21509] [client 52.143.158.250:53068] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 01:47:54.016430 2026] [proxy_fcgi:error] [pid 21486:tid 21489] [client 52.143.158.250:53068] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 01:47:54.253790 2026] [proxy_fcgi:error] [pid 21486:tid 21498] [client 52.143.158.250:53068] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 01:47:54.546368 2026] [proxy_fcgi:error] [pid 21486:tid 21493] [client 52.143.158.250:53068] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 01:47:54.779300 2026] [:error] [pid 21486:tid 21501] [client 52.143.158.250:53068] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/666.php"] [unique_id "adfmSqBRftltyNdYwLopFAAAAQ0"]
[Fri Apr 10 01:47:55.682726 2026] [:error] [pid 36672:tid 36687] [client 52.143.158.250:45804] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/666.php"] [unique_id "adfmSz99r9VLJsT_o8iMWwAAAM0"]
[Fri Apr 10 01:47:57.249408 2026] [:error] [pid 21486:tid 21495] [client 52.143.158.250:45789] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/666.php"] [unique_id "adfmTaBRftltyNdYwLopFgAAAQc"]
[Fri Apr 10 01:47:58.147355 2026] [:error] [pid 21486:tid 21490] [client 52.143.158.250:39911] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/666.php"] [unique_id "adfmTqBRftltyNdYwLopGAAAAQI"]
[Fri Apr 10 01:47:58.699674 2026] [:error] [pid 36672:tid 36677] [client 52.143.158.250:63851] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xxw.php"] [unique_id "adfmTj99r9VLJsT_o8iMaQAAAMM"]
[Fri Apr 10 01:48:00.154652 2026] [:error] [pid 36672:tid 36696] [client 52.143.158.250:39872] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xxw.php"] [unique_id "adfmUD99r9VLJsT_o8iMbgAAANY"]
[Fri Apr 10 01:48:01.217600 2026] [:error] [pid 36398:tid 36448] [client 52.143.158.250:2882] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xxw.php"] [unique_id "adfmUeX640wXZwwgfP94SgAAAFQ"]
[Fri Apr 10 01:48:02.380238 2026] [:error] [pid 36672:tid 36686] [client 52.143.158.250:53540] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xxw.php"] [unique_id "adfmUj99r9VLJsT_o8iMcgAAAMw"]
[Fri Apr 10 01:48:03.765492 2026] [:error] [pid 36672:tid 36690] [client 52.143.158.250:45775] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-png.php"] [unique_id "adfmUz99r9VLJsT_o8iMdwAAANA"]
[Fri Apr 10 01:48:05.315941 2026] [:error] [pid 29569:tid 29597] [client 52.143.158.250:30675] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-png.php"] [unique_id "adfmVbt9mkieWu8HPk5IaAAAAVg"]
[Fri Apr 10 01:48:06.939401 2026] [:error] [pid 29569:tid 29578] [client 52.143.158.250:52766] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-png.php"] [unique_id "adfmVrt9mkieWu8HPk5IbQAAAUU"]
[Fri Apr 10 01:48:08.749149 2026] [:error] [pid 36672:tid 36690] [client 52.143.158.250:56607] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-png.php"] [unique_id "adfmWD99r9VLJsT_o8iMhgAAANA"]
[Fri Apr 10 01:48:09.629183 2026] [:error] [pid 36399:tid 36462] [client 52.143.158.250:36756] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/222.php"] [unique_id "adfmWa8Hkxpyh6_TlVQ6IAAAAIc"]
[Fri Apr 10 01:48:10.529983 2026] [:error] [pid 29569:tid 29573] [client 52.143.158.250:61957] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/222.php"] [unique_id "adfmWrt9mkieWu8HPk5IbwAAAUA"]
[Fri Apr 10 01:48:11.933810 2026] [:error] [pid 21486:tid 21510] [client 52.143.158.250:55863] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/222.php"] [unique_id "adfmW6BRftltyNdYwLopHwAAARY"]
[Fri Apr 10 01:48:13.172803 2026] [:error] [pid 36399:tid 36463] [client 52.143.158.250:60892] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/222.php"] [unique_id "adfmXa8Hkxpyh6_TlVQ6IwAAAIg"]
[Fri Apr 10 01:48:15.079710 2026] [:error] [pid 36397:tid 36417] [client 52.143.158.250:54915] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-blog.php"] [unique_id "adfmX2his4RvVEWEv9v2TQAAABA"]
[Fri Apr 10 01:48:16.403408 2026] [:error] [pid 36398:tid 36438] [client 52.143.158.250:39919] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-blog.php"] [unique_id "adfmYOX640wXZwwgfP94UwAAAEo"]
[Fri Apr 10 01:48:17.787554 2026] [:error] [pid 36398:tid 36428] [client 52.143.158.250:37750] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-blog.php"] [unique_id "adfmYeX640wXZwwgfP94VgAAAEA"]
[Fri Apr 10 01:48:18.983143 2026] [:error] [pid 36398:tid 36435] [client 52.143.158.250:54951] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-blog.php"] [unique_id "adfmYuX640wXZwwgfP94WAAAAEc"]
[Fri Apr 10 01:48:20.942836 2026] [:error] [pid 29569:tid 29578] [client 52.143.158.250:54923] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "adfmZLt9mkieWu8HPk5IewAAAUU"]
[Fri Apr 10 01:48:23.526344 2026] [:error] [pid 36399:tid 36464] [client 52.143.158.250:60915] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "adfmZ68Hkxpyh6_TlVQ6KAAAAIk"]
[Fri Apr 10 01:48:24.688903 2026] [:error] [pid 36398:tid 36442] [client 52.143.158.250:63826] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "adfmaOX640wXZwwgfP94YAAAAE4"]
[Fri Apr 10 01:48:25.733165 2026] [:error] [pid 36398:tid 36450] [client 52.143.158.250:49790] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "adfmaeX640wXZwwgfP94YgAAAFY"]
[Fri Apr 10 01:48:26.617222 2026] [:error] [pid 29569:tid 29576] [client 52.143.158.250:2824] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/lib.php"] [unique_id "adfmart9mkieWu8HPk5IggAAAUM"]
[Fri Apr 10 01:48:27.333542 2026] [:error] [pid 29569:tid 29581] [client 52.143.158.250:53559] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/lib.php"] [unique_id "adfma7t9mkieWu8HPk5IgwAAAUg"]
[Fri Apr 10 01:48:28.867024 2026] [:error] [pid 36672:tid 36683] [client 52.143.158.250:2880] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/lib.php"] [unique_id "adfmbD99r9VLJsT_o8iMmQAAAMk"]
[Fri Apr 10 01:48:30.777632 2026] [:error] [pid 36399:tid 36470] [client 52.143.158.250:60927] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/lib.php"] [unique_id "adfmbq8Hkxpyh6_TlVQ6KgAAAI8"]
[Fri Apr 10 01:48:31.968002 2026] [:error] [pid 21486:tid 21511] [client 52.143.158.250:60902] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/edit.php"] [unique_id "adfmb6BRftltyNdYwLopKQAAARc"]
[Fri Apr 10 01:48:33.251481 2026] [:error] [pid 21486:tid 21494] [client 52.143.158.250:36774] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/edit.php"] [unique_id "adfmcaBRftltyNdYwLopKgAAAQY"]
[Fri Apr 10 01:48:34.538522 2026] [:error] [pid 21486:tid 21507] [client 52.143.158.250:57595] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/edit.php"] [unique_id "adfmcqBRftltyNdYwLopLAAAARM"]
[Fri Apr 10 01:48:35.761694 2026] [:error] [pid 21486:tid 21499] [client 52.143.158.250:61972] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/edit.php"] [unique_id "adfmc6BRftltyNdYwLopLwAAAQs"]
[Fri Apr 10 01:48:38.048253 2026] [:error] [pid 21486:tid 21501] [client 52.143.158.250:62882] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ioxi-o.php"] [unique_id "adfmdqBRftltyNdYwLopNQAAAQ0"]
[Fri Apr 10 01:48:39.655003 2026] [:error] [pid 36397:tid 36419] [client 52.143.158.250:39918] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ioxi-o.php"] [unique_id "adfmd2his4RvVEWEv9v2WAAAABI"]
[Fri Apr 10 01:48:40.827202 2026] [:error] [pid 36399:tid 36459] [client 52.143.158.250:46457] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ioxi-o.php"] [unique_id "adfmeK8Hkxpyh6_TlVQ6MwAAAIQ"]
[Fri Apr 10 01:48:41.499103 2026] [:error] [pid 36399:tid 36476] [client 52.143.158.250:49729] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ioxi-o.php"] [unique_id "adfmea8Hkxpyh6_TlVQ6NQAAAJU"]
[Fri Apr 10 01:48:42.647064 2026] [:error] [pid 21486:tid 21494] [client 52.143.158.250:63577] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ajax.php"] [unique_id "adfmeqBRftltyNdYwLopOQAAAQY"]
[Fri Apr 10 01:48:43.512991 2026] [:error] [pid 36399:tid 36470] [client 52.143.158.250:63517] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ajax.php"] [unique_id "adfme68Hkxpyh6_TlVQ6OgAAAI8"]
[Fri Apr 10 01:48:44.375711 2026] [:error] [pid 21486:tid 21495] [client 52.143.158.250:59286] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ajax.php"] [unique_id "adfmfKBRftltyNdYwLopRAAAAQc"]
[Fri Apr 10 01:48:45.183127 2026] [:error] [pid 29569:tid 29592] [client 52.143.158.250:56286] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ajax.php"] [unique_id "adfmfbt9mkieWu8HPk5IjgAAAVM"]
[Fri Apr 10 01:48:45.945552 2026] [:error] [pid 36397:tid 36409] [client 52.143.158.250:62016] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/install.php"] [unique_id "adfmfWhis4RvVEWEv9v2XQAAAAg"]
[Fri Apr 10 01:48:46.966068 2026] [:error] [pid 36399:tid 36468] [client 52.143.158.250:54983] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/install.php"] [unique_id "adfmfq8Hkxpyh6_TlVQ6QQAAAI0"]
[Fri Apr 10 01:48:47.728086 2026] [:error] [pid 21486:tid 21507] [client 52.143.158.250:60619] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/install.php"] [unique_id "adfmf6BRftltyNdYwLopSAAAARM"]
[Fri Apr 10 01:48:48.787292 2026] [:error] [pid 21486:tid 21500] [client 52.143.158.250:63534] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/install.php"] [unique_id "adfmgKBRftltyNdYwLopTAAAAQw"]
[Fri Apr 10 01:48:50.182911 2026] [:error] [pid 36399:tid 36464] [client 52.143.158.250:36852] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/public/wp-blog.php"] [unique_id "adfmgq8Hkxpyh6_TlVQ6RAAAAIk"]
[Fri Apr 10 01:48:50.744752 2026] [:error] [pid 36399:tid 36465] [client 52.143.158.250:50762] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/public/wp-blog.php"] [unique_id "adfmgq8Hkxpyh6_TlVQ6RgAAAIo"]
[Fri Apr 10 01:48:51.501338 2026] [:error] [pid 21486:tid 21509] [client 52.143.158.250:40558] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/public/wp-blog.php"] [unique_id "adfmg6BRftltyNdYwLopTwAAARU"]
[Fri Apr 10 01:48:52.188465 2026] [:error] [pid 36399:tid 36461] [client 52.143.158.250:59075] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/public/wp-blog.php"] [unique_id "adfmhK8Hkxpyh6_TlVQ6SAAAAIY"]
[Fri Apr 10 01:48:53.142698 2026] [:error] [pid 36672:tid 36686] [client 52.143.158.250:34573] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/nw.php"] [unique_id "adfmhT99r9VLJsT_o8iMrQAAAMw"]
[Fri Apr 10 01:48:54.139755 2026] [proxy_fcgi:error] [pid 36397:tid 36416] [client 52.143.158.250:50795] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 01:48:54.378286 2026] [proxy_fcgi:error] [pid 36397:tid 36424] [client 52.143.158.250:50795] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 01:48:54.747744 2026] [proxy_fcgi:error] [pid 36397:tid 36423] [client 52.143.158.250:50795] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 01:48:55.289649 2026] [proxy_fcgi:error] [pid 36397:tid 36418] [client 52.143.158.250:50795] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 01:48:55.632609 2026] [proxy_fcgi:error] [pid 36397:tid 36402] [client 52.143.158.250:50795] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 01:48:55.999151 2026] [proxy_fcgi:error] [pid 36397:tid 36401] [client 52.143.158.250:50795] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 01:48:56.235885 2026] [proxy_fcgi:error] [pid 36397:tid 36425] [client 52.143.158.250:50795] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 01:48:56.482533 2026] [proxy_fcgi:error] [pid 36397:tid 36422] [client 52.143.158.250:50795] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 01:48:56.719115 2026] [proxy_fcgi:error] [pid 36397:tid 36414] [client 52.143.158.250:50795] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 01:48:56.968803 2026] [proxy_fcgi:error] [pid 36397:tid 36421] [client 52.143.158.250:50795] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 01:48:57.240103 2026] [:error] [pid 36397:tid 36407] [client 52.143.158.250:50795] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/1.php"] [unique_id "adfmiWhis4RvVEWEv9v2cgAAAAY"]
[Fri Apr 10 01:48:58.021867 2026] [:error] [pid 36397:tid 36411] [client 52.143.158.250:50788] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/1.php"] [unique_id "adfmimhis4RvVEWEv9v2cwAAAAo"]
[Fri Apr 10 01:48:58.712992 2026] [:error] [pid 36672:tid 36681] [client 52.143.158.250:54532] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/1.php"] [unique_id "adfmij99r9VLJsT_o8iMrwAAAMc"]
[Fri Apr 10 01:48:59.413820 2026] [:error] [pid 36398:tid 36447] [client 52.143.158.250:30631] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/1.php"] [unique_id "adfmi-X640wXZwwgfP94fwAAAFM"]
[Fri Apr 10 01:49:00.138697 2026] [:error] [pid 29569:tid 29583] [client 52.143.158.250:58228] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/term.php"] [unique_id "adfmjLt9mkieWu8HPk5IkQAAAUo"]
[Fri Apr 10 01:49:00.737836 2026] [:error] [pid 29569:tid 29578] [client 52.143.158.250:58329] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/term.php"] [unique_id "adfmjLt9mkieWu8HPk5IkwAAAUU"]
[Fri Apr 10 01:49:01.282646 2026] [:error] [pid 29569:tid 29593] [client 52.143.158.250:50307] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/term.php"] [unique_id "adfmjbt9mkieWu8HPk5IlAAAAVQ"]
[Fri Apr 10 01:49:02.055878 2026] [:error] [pid 29569:tid 29589] [client 52.143.158.250:36408] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/term.php"] [unique_id "adfmjrt9mkieWu8HPk5IlwAAAVA"]
[Fri Apr 10 01:49:02.746707 2026] [:error] [pid 36397:tid 36406] [client 52.143.158.250:47416] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/radio.php"] [unique_id "adfmjmhis4RvVEWEv9v2dgAAAAU"]
[Fri Apr 10 01:49:03.517444 2026] [:error] [pid 36398:tid 36445] [client 52.143.158.250:64183] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/radio.php"] [unique_id "adfmj-X640wXZwwgfP94gAAAAFE"]
[Fri Apr 10 01:49:04.295273 2026] [:error] [pid 36397:tid 36419] [client 52.143.158.250:30637] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/radio.php"] [unique_id "adfmkGhis4RvVEWEv9v2dwAAABI"]
[Fri Apr 10 01:49:05.173033 2026] [:error] [pid 21486:tid 21507] [client 52.143.158.250:34599] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/radio.php"] [unique_id "adfmkaBRftltyNdYwLopUwAAARM"]
[Fri Apr 10 01:49:06.066849 2026] [:error] [pid 21486:tid 21494] [client 52.143.158.250:64161] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/155.php"] [unique_id "adfmkqBRftltyNdYwLopVQAAAQY"]
[Fri Apr 10 01:49:06.672082 2026] [:error] [pid 36397:tid 36402] [client 52.143.158.250:30620] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/155.php"] [unique_id "adfmkmhis4RvVEWEv9v2eAAAAAE"]
[Fri Apr 10 01:49:07.172659 2026] [:error] [pid 21486:tid 21500] [client 52.143.158.250:61632] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/155.php"] [unique_id "adfmk6BRftltyNdYwLopVwAAAQw"]
[Fri Apr 10 01:49:08.212140 2026] [:error] [pid 36672:tid 36695] [client 52.143.158.250:36377] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/155.php"] [unique_id "adfmlD99r9VLJsT_o8iMtAAAANU"]
[Fri Apr 10 01:49:08.890183 2026] [:error] [pid 36672:tid 36684] [client 52.143.158.250:2159] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-the.php"] [unique_id "adfmlD99r9VLJsT_o8iMtgAAAMo"]
[Fri Apr 10 01:49:09.487650 2026] [:error] [pid 36398:tid 36450] [client 52.143.158.250:36376] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-the.php"] [unique_id "adfmleX640wXZwwgfP94ggAAAFY"]
[Fri Apr 10 01:49:10.295715 2026] [:error] [pid 36398:tid 36440] [client 52.143.158.250:34570] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-the.php"] [unique_id "adfmluX640wXZwwgfP94iQAAAEw"]
[Fri Apr 10 01:49:11.056526 2026] [:error] [pid 29569:tid 29582] [client 52.143.158.250:58534] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-the.php"] [unique_id "adfml7t9mkieWu8HPk5IoQAAAUk"]
[Fri Apr 10 01:49:11.806399 2026] [:error] [pid 36672:tid 36698] [client 52.143.158.250:45749] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp5.php"] [unique_id "adfmlz99r9VLJsT_o8iMuQAAANg"]
[Fri Apr 10 01:49:13.028038 2026] [:error] [pid 36672:tid 36677] [client 52.143.158.250:59732] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp5.php"] [unique_id "adfmmT99r9VLJsT_o8iMvAAAAMM"]
[Fri Apr 10 01:49:13.743332 2026] [:error] [pid 36399:tid 36478] [client 52.143.158.250:32849] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp5.php"] [unique_id "adfmma8Hkxpyh6_TlVQ6TwAAAJc"]
[Fri Apr 10 01:49:14.505861 2026] [:error] [pid 36672:tid 36680] [client 52.143.158.250:50363] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp5.php"] [unique_id "adfmmj99r9VLJsT_o8iMvQAAAMY"]
[Fri Apr 10 01:49:15.185212 2026] [:error] [pid 36397:tid 36403] [client 52.143.158.250:31131] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-access.php"] [unique_id "adfmm2his4RvVEWEv9v2eQAAAAI"]
[Fri Apr 10 01:49:16.156755 2026] [:error] [pid 36399:tid 36460] [client 52.143.158.250:57454] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-access.php"] [unique_id "adfmnK8Hkxpyh6_TlVQ6UwAAAIU"]
[Fri Apr 10 01:49:16.945712 2026] [:error] [pid 36399:tid 36458] [client 52.143.158.250:48888] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-access.php"] [unique_id "adfmnK8Hkxpyh6_TlVQ6VAAAAIM"]
[Fri Apr 10 01:49:17.942321 2026] [:error] [pid 36672:tid 36694] [client 52.143.158.250:45735] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-access.php"] [unique_id "adfmnT99r9VLJsT_o8iMvwAAANQ"]
[Fri Apr 10 01:49:18.749923 2026] [:error] [pid 36398:tid 36434] [client 52.143.158.250:48839] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/hots.php"] [unique_id "adfmnuX640wXZwwgfP94jgAAAEY"]
[Fri Apr 10 01:49:19.481979 2026] [:error] [pid 36399:tid 36471] [client 52.143.158.250:61912] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/hots.php"] [unique_id "adfmn68Hkxpyh6_TlVQ6VwAAAJA"]
[Fri Apr 10 01:49:20.454146 2026] [:error] [pid 36672:tid 36695] [client 52.143.158.250:48139] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/hots.php"] [unique_id "adfmoD99r9VLJsT_o8iMxAAAANU"]
[Fri Apr 10 01:49:21.458708 2026] [:error] [pid 36672:tid 36678] [client 52.143.158.250:40960] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/hots.php"] [unique_id "adfmoT99r9VLJsT_o8iMxwAAAMQ"]
[Fri Apr 10 01:49:22.271479 2026] [:error] [pid 36399:tid 36463] [client 52.143.158.250:61425] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/admin-footer.php"] [unique_id "adfmoq8Hkxpyh6_TlVQ6WgAAAIg"]
[Fri Apr 10 01:49:22.978087 2026] [:error] [pid 29569:tid 29585] [client 52.143.158.250:32832] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/admin-footer.php"] [unique_id "adfmort9mkieWu8HPk5IpgAAAUw"]
[Fri Apr 10 01:49:23.782436 2026] [:error] [pid 36672:tid 36693] [client 52.143.158.250:58515] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/admin-footer.php"] [unique_id "adfmoz99r9VLJsT_o8iMzQAAANM"]
[Fri Apr 10 01:49:24.681061 2026] [:error] [pid 36398:tid 36442] [client 52.143.158.250:57451] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/admin-footer.php"] [unique_id "adfmpOX640wXZwwgfP94kgAAAE4"]
[Fri Apr 10 01:49:25.499372 2026] [:error] [pid 36672:tid 36687] [client 52.143.158.250:39829] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws84.php"] [unique_id "adfmpT99r9VLJsT_o8iM1gAAAM0"]
[Fri Apr 10 01:49:26.330148 2026] [:error] [pid 36672:tid 36675] [client 52.143.158.250:61426] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws84.php"] [unique_id "adfmpj99r9VLJsT_o8iM2AAAAME"]
[Fri Apr 10 01:49:27.072209 2026] [:error] [pid 21486:tid 21491] [client 52.143.158.250:62375] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws84.php"] [unique_id "adfmp6BRftltyNdYwLopYAAAAQM"]
[Fri Apr 10 01:49:27.818043 2026] [:error] [pid 36672:tid 36698] [client 52.143.158.250:57444] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws84.php"] [unique_id "adfmpz99r9VLJsT_o8iM2QAAANg"]
[Fri Apr 10 01:49:28.445960 2026] [:error] [pid 29569:tid 29582] [client 52.143.158.250:62339] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bnm.php"] [unique_id "adfmqLt9mkieWu8HPk5IrwAAAUk"]
[Fri Apr 10 01:49:29.171703 2026] [:error] [pid 36672:tid 36681] [client 52.143.158.250:2678] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bnm.php"] [unique_id "adfmqT99r9VLJsT_o8iM2wAAAMc"]
[Fri Apr 10 01:49:29.860715 2026] [:error] [pid 29569:tid 29586] [client 52.143.158.250:61943] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bnm.php"] [unique_id "adfmqbt9mkieWu8HPk5IswAAAU0"]
[Fri Apr 10 01:49:30.473437 2026] [:error] [pid 29569:tid 29573] [client 52.143.158.250:2361] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bnm.php"] [unique_id "adfmqrt9mkieWu8HPk5ItwAAAUA"]
[Fri Apr 10 01:49:31.245197 2026] [:error] [pid 36672:tid 36683] [client 52.143.158.250:41018] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/amax.php"] [unique_id "adfmqz99r9VLJsT_o8iM4AAAAMk"]
[Fri Apr 10 01:49:32.426284 2026] [:error] [pid 21486:tid 21502] [client 52.143.158.250:32311] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/amax.php"] [unique_id "adfmrKBRftltyNdYwLopYgAAAQ4"]
[Fri Apr 10 01:49:33.089283 2026] [:error] [pid 36672:tid 36688] [client 52.143.158.250:63286] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/amax.php"] [unique_id "adfmrT99r9VLJsT_o8iM5gAAAM4"]
[Fri Apr 10 01:49:37.943433 2026] [:error] [pid 21486:tid 21500] [client 52.143.158.250:2614] [client 52.143.158.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/amax.php"] [unique_id "adfmsaBRftltyNdYwLopZQAAAQw"]
[Fri Apr 10 01:51:54.935436 2026] [proxy_fcgi:error] [pid 36397:tid 36410] [client 52.143.158.250:63837] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 01:51:55.174656 2026] [proxy_fcgi:error] [pid 36397:tid 36422] [client 52.143.158.250:63837] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 11:20:40.267149 2026] [:error] [pid 13101:tid 13140] [client 136.107.146.246:60485] [client 136.107.146.246] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.107.146.246, incrementing ddos counter"] [hostname "dwelectservices.com.au"] [uri "/xmlrpc.php"] [unique_id "adhsiN8Ldw85818pj2rkBQAAAIc"]
[Fri Apr 10 11:20:40.276751 2026] [proxy_fcgi:error] [pid 13101:tid 13140] [client 136.107.146.246:60485] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 11:20:42.877270 2026] [:error] [pid 13101:tid 13155] [client 136.107.146.246:60485] [client 136.107.146.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "adhsit8Ldw85818pj2rkFAAAAJY"]
[Fri Apr 10 11:20:43.368698 2026] [:error] [pid 13100:tid 13107] [client 136.107.146.246:52230] [client 136.107.146.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "adhsi1zg-ZkZ0InWIP3tPQAAAQI"]
[Fri Apr 10 11:20:43.833640 2026] [:error] [pid 13101:tid 13151] [client 136.107.146.246:63698] [client 136.107.146.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "adhsi98Ldw85818pj2rkFgAAAJI"]
[Fri Apr 10 11:20:44.271399 2026] [:error] [pid 13101:tid 13137] [client 136.107.146.246:63581] [client 136.107.146.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "adhsjN8Ldw85818pj2rkGAAAAIQ"]
[Fri Apr 10 11:20:44.798063 2026] [:error] [pid 13189:tid 13192] [client 136.107.146.246:59545] [client 136.107.146.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "adhsjJAxiJKPums3eBA2YgAAAEA"]
[Fri Apr 10 11:20:45.313050 2026] [:error] [pid 13101:tid 13156] [client 136.107.146.246:56760] [client 136.107.146.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "adhsjd8Ldw85818pj2rkHAAAAJc"]
[Fri Apr 10 11:20:45.762374 2026] [:error] [pid 13189:tid 13194] [client 136.107.146.246:64182] [client 136.107.146.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "adhsjZAxiJKPums3eBA2ZQAAAEI"]
[Fri Apr 10 21:12:58.116715 2026] [proxy_fcgi:error] [pid 13101:tid 13137] [client 20.123.11.197:30860] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 21:12:58.368089 2026] [proxy_fcgi:error] [pid 13101:tid 13148] [client 20.123.11.197:30860] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 21:12:58.626149 2026] [proxy_fcgi:error] [pid 13101:tid 13140] [client 20.123.11.197:30860] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 21:12:58.876610 2026] [proxy_fcgi:error] [pid 13101:tid 13139] [client 20.123.11.197:30860] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 21:12:59.126953 2026] [proxy_fcgi:error] [pid 13101:tid 13153] [client 20.123.11.197:30860] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 21:12:59.376813 2026] [proxy_fcgi:error] [pid 13101:tid 13146] [client 20.123.11.197:30860] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 21:12:59.638426 2026] [proxy_fcgi:error] [pid 13101:tid 13157] [client 20.123.11.197:30860] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 21:12:59.891178 2026] [proxy_fcgi:error] [pid 13101:tid 13138] [client 20.123.11.197:30860] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 21:13:00.141068 2026] [proxy_fcgi:error] [pid 13101:tid 13151] [client 20.123.11.197:30860] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 21:13:00.391744 2026] [proxy_fcgi:error] [pid 13101:tid 13137] [client 20.123.11.197:30860] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 21:13:00.866451 2026] [:error] [pid 13101:tid 13148] [client 20.123.11.197:30860] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nwflm.php"] [unique_id "adj3XN8Ldw85818pj2rX5AAAAI8"]
[Fri Apr 10 21:13:01.982950 2026] [:error] [pid 62651:tid 62667] [client 20.123.11.197:38001] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nwflm.php"] [unique_id "adj3XTbAH0le57SIaqwhewAAAc4"]
[Fri Apr 10 21:13:02.610649 2026] [:error] [pid 25984:tid 25992] [client 20.123.11.197:43301] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nwflm.php"] [unique_id "adj3XrsdbY_MC14OH14c_AAAAUM"]
[Fri Apr 10 21:13:03.753054 2026] [:error] [pid 25984:tid 25994] [client 20.123.11.197:64549] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nwflm.php"] [unique_id "adj3X7sdbY_MC14OH14dAQAAAUU"]
[Fri Apr 10 21:13:05.233579 2026] [:error] [pid 62615:tid 62624] [client 20.123.11.197:32253] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dx.php"] [unique_id "adj3YdSLyvZ9rO5uVseVGAAAAYc"]
[Fri Apr 10 21:13:06.542942 2026] [:error] [pid 62615:tid 62629] [client 20.123.11.197:53754] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dx.php"] [unique_id "adj3YtSLyvZ9rO5uVseVHQAAAYw"]
[Fri Apr 10 21:13:07.790140 2026] [:error] [pid 62651:tid 62665] [client 20.123.11.197:32234] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dx.php"] [unique_id "adj3YzbAH0le57SIaqwhlgAAAcw"]
[Fri Apr 10 21:13:08.760825 2026] [:error] [pid 25984:tid 26008] [client 20.123.11.197:37958] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dx.php"] [unique_id "adj3ZLsdbY_MC14OH14dCAAAAVM"]
[Fri Apr 10 21:13:10.411936 2026] [:error] [pid 62651:tid 62656] [client 20.123.11.197:43316] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xff.php"] [unique_id "adj3ZjbAH0le57SIaqwhnAAAAcM"]
[Fri Apr 10 21:13:11.475821 2026] [:error] [pid 13102:tid 13165] [client 20.123.11.197:64562] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xff.php"] [unique_id "adj3Z_9xLvjW2guI55bEXwAAAAU"]
[Fri Apr 10 21:13:12.392462 2026] [:error] [pid 62819:tid 62838] [client 20.123.11.197:29576] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xff.php"] [unique_id "adj3aPU20EyPf7NlsldlaQAAApA"]
[Fri Apr 10 21:13:13.827920 2026] [:error] [pid 62819:tid 62822] [client 20.123.11.197:7110] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xff.php"] [unique_id "adj3afU20EyPf7NlsldlbwAAAoA"]
[Fri Apr 10 21:13:15.652538 2026] [:error] [pid 62769:tid 62788] [client 20.123.11.197:30862] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lupo.php"] [unique_id "adj3a8WsSnfLoB8ifjBJjAAAAlE"]
[Fri Apr 10 21:13:16.882780 2026] [:error] [pid 62710:tid 62734] [client 20.123.11.197:65212] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lupo.php"] [unique_id "adj3bOME7qrf5xEWWJsP_wAAAhU"]
[Fri Apr 10 21:13:17.836146 2026] [:error] [pid 62884:tid 62900] [client 20.123.11.197:7108] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lupo.php"] [unique_id "adj3beUCK1xrhnnmpo2AkAAAAsk"]
[Fri Apr 10 21:13:18.716111 2026] [:error] [pid 13189:tid 13215] [client 20.123.11.197:52543] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lupo.php"] [unique_id "adj3bpAxiJKPums3eBC1twAAAFc"]
[Fri Apr 10 21:13:19.958319 2026] [:error] [pid 62769:tid 62773] [client 20.123.11.197:53713] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/awa.php"] [unique_id "adj3b8WsSnfLoB8ifjBJmAAAAkI"]
[Fri Apr 10 21:13:20.776722 2026] [:error] [pid 62819:tid 62835] [client 20.123.11.197:30859] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/awa.php"] [unique_id "adj3cPU20EyPf7NlsldlhAAAAo0"]
[Fri Apr 10 21:13:22.200338 2026] [:error] [pid 62950:tid 62960] [client 20.123.11.197:30857] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/awa.php"] [unique_id "adj3ctCxAxfAl1KOpNPNsQAAAwU"]
[Fri Apr 10 21:13:23.592359 2026] [:error] [pid 62710:tid 62736] [client 20.123.11.197:53737] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/awa.php"] [unique_id "adj3c-ME7qrf5xEWWJsQBQAAAhc"]
[Fri Apr 10 21:13:24.783282 2026] [:error] [pid 62950:tid 62954] [client 20.123.11.197:53740] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sadcut1.php"] [unique_id "adj3dNCxAxfAl1KOpNPNzAAAAwA"]
[Fri Apr 10 21:13:26.782671 2026] [:error] [pid 62651:tid 62661] [client 20.123.11.197:29601] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sadcut1.php"] [unique_id "adj3djbAH0le57SIaqwhqAAAAcg"]
[Fri Apr 10 21:13:27.523277 2026] [:error] [pid 13101:tid 13143] [client 20.123.11.197:53749] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sadcut1.php"] [unique_id "adj3d98Ldw85818pj2rYOwAAAIo"]
[Fri Apr 10 21:13:28.982776 2026] [:error] [pid 3934:tid 3943] [client 20.123.11.197:29570] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sadcut1.php"] [unique_id "adj3eIa41m-BS8mg82fmdgAAAMQ"]
[Fri Apr 10 21:13:29.859717 2026] [:error] [pid 62769:tid 62781] [client 20.123.11.197:7149] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/popo.php"] [unique_id "adj3ecWsSnfLoB8ifjBJpgAAAko"]
[Fri Apr 10 21:13:31.424472 2026] [:error] [pid 25984:tid 25989] [client 20.123.11.197:30881] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/popo.php"] [unique_id "adj3e7sdbY_MC14OH14dOwAAAUA"]
[Fri Apr 10 21:13:32.649879 2026] [:error] [pid 63062:tid 63070] [client 20.123.11.197:32236] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/popo.php"] [unique_id "adj3fJ2HtsmV85NqkMfrAQAAA4Y"]
[Fri Apr 10 21:13:33.370179 2026] [:error] [pid 13100:tid 13121] [client 20.123.11.197:32231] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/popo.php"] [unique_id "adj3fVzg-ZkZ0InWIP29fAAAARA"]
[Fri Apr 10 21:13:34.348574 2026] [:error] [pid 62615:tid 62636] [client 20.123.11.197:29086] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/water.php"] [unique_id "adj3ftSLyvZ9rO5uVseVQgAAAZM"]
[Fri Apr 10 21:13:36.830183 2026] [:error] [pid 62615:tid 62636] [client 20.123.11.197:65161] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/water.php"] [unique_id "adj3gNSLyvZ9rO5uVseVSwAAAZM"]
[Fri Apr 10 21:13:37.897935 2026] [:error] [pid 63023:tid 63026] [client 20.123.11.197:7147] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/water.php"] [unique_id "adj3gaOf5IOzVN1LeZ9woQAAA0E"]
[Fri Apr 10 21:13:39.585848 2026] [:error] [pid 13102:tid 13160] [client 20.123.11.197:65152] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/water.php"] [unique_id "adj3g_9xLvjW2guI55bEdgAAAAA"]
[Fri Apr 10 21:13:42.758847 2026] [:error] [pid 3934:tid 3945] [client 20.123.11.197:52480] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ggb.php"] [unique_id "adj3hoa41m-BS8mg82fmfwAAAMY"]
[Fri Apr 10 21:13:46.035748 2026] [:error] [pid 13101:tid 13152] [client 20.123.11.197:53732] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ggb.php"] [unique_id "adj3it8Ldw85818pj2rYTAAAAJM"]
[Fri Apr 10 21:13:47.725519 2026] [:error] [pid 63023:tid 63025] [client 20.123.11.197:32194] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ggb.php"] [unique_id "adj3i6Of5IOzVN1LeZ9wuwAAA0A"]
[Fri Apr 10 21:13:50.831132 2026] [:error] [pid 25984:tid 26000] [client 20.123.11.197:43273] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ggb.php"] [unique_id "adj3jrsdbY_MC14OH14dWQAAAUs"]
[Fri Apr 10 21:13:52.624477 2026] [:error] [pid 3934:tid 3945] [client 20.123.11.197:37962] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/13.php"] [unique_id "adj3kIa41m-BS8mg82fmlwAAAMY"]
[Fri Apr 10 21:13:56.153336 2026] [:error] [pid 13100:tid 13114] [client 20.123.11.197:38010] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/13.php"] [unique_id "adj3lFzg-ZkZ0InWIP29jQAAAQk"]
[Fri Apr 10 21:13:57.509800 2026] [:error] [pid 62651:tid 62674] [client 20.123.11.197:32246] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/13.php"] [unique_id "adj3lTbAH0le57SIaqwhuwAAAdU"]
[Fri Apr 10 21:13:59.775580 2026] [:error] [pid 13101:tid 13136] [client 20.123.11.197:51715] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/13.php"] [unique_id "adj3l98Ldw85818pj2rYbgAAAIM"]
[Fri Apr 10 21:14:04.659393 2026] [proxy_fcgi:error] [pid 3934:tid 3939] [client 20.123.11.197:34101] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 21:14:04.927337 2026] [proxy_fcgi:error] [pid 3934:tid 3944] [client 20.123.11.197:34101] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 21:14:05.191630 2026] [proxy_fcgi:error] [pid 3934:tid 3944] [client 20.123.11.197:34101] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 21:14:05.444894 2026] [proxy_fcgi:error] [pid 3934:tid 3944] [client 20.123.11.197:34101] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 21:14:05.700003 2026] [proxy_fcgi:error] [pid 3934:tid 3954] [client 20.123.11.197:34101] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 21:14:05.955561 2026] [proxy_fcgi:error] [pid 3934:tid 3954] [client 20.123.11.197:34101] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 21:14:06.229730 2026] [proxy_fcgi:error] [pid 3934:tid 3954] [client 20.123.11.197:34101] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 21:14:06.482230 2026] [proxy_fcgi:error] [pid 3934:tid 3955] [client 20.123.11.197:34101] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 21:14:06.766393 2026] [proxy_fcgi:error] [pid 3934:tid 3954] [client 20.123.11.197:34101] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 21:14:07.032924 2026] [proxy_fcgi:error] [pid 3934:tid 3955] [client 20.123.11.197:34101] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 21:14:07.290002 2026] [proxy_fcgi:error] [pid 3934:tid 3955] [client 20.123.11.197:34101] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 21:14:07.538337 2026] [:error] [pid 3934:tid 3955] [client 20.123.11.197:34101] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2.php"] [unique_id "adj3n4a41m-BS8mg82fm6QAAANA"]
[Fri Apr 10 21:14:09.548397 2026] [:error] [pid 62819:tid 62824] [client 20.123.11.197:27632] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2.php"] [unique_id "adj3ofU20EyPf7NlsldlmQAAAoI"]
[Fri Apr 10 21:14:10.410871 2026] [:error] [pid 13100:tid 13115] [client 20.123.11.197:27030] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2.php"] [unique_id "adj3olzg-ZkZ0InWIP29sAAAAQo"]
[Fri Apr 10 21:14:11.775602 2026] [:error] [pid 62651:tid 62675] [client 20.123.11.197:34065] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2.php"] [unique_id "adj3ozbAH0le57SIaqwh4gAAAdY"]
[Fri Apr 10 21:14:12.647276 2026] [:error] [pid 62819:tid 62824] [client 20.123.11.197:57438] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/3.php"] [unique_id "adj3pPU20EyPf7NlsldlnQAAAoI"]
[Fri Apr 10 21:14:13.524959 2026] [:error] [pid 62819:tid 62825] [client 20.123.11.197:51767] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/3.php"] [unique_id "adj3pfU20EyPf7NlsldloAAAAoM"]
[Fri Apr 10 21:14:14.609396 2026] [:error] [pid 62819:tid 62826] [client 20.123.11.197:30253] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/3.php"] [unique_id "adj3pvU20EyPf7NlsldlpwAAAoQ"]
[Fri Apr 10 21:14:16.026990 2026] [:error] [pid 62769:tid 62795] [client 20.123.11.197:32825] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/3.php"] [unique_id "adj3qMWsSnfLoB8ifjBJ4QAAAlg"]
[Fri Apr 10 21:14:16.743961 2026] [:error] [pid 62819:tid 62844] [client 20.123.11.197:34091] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/4.php"] [unique_id "adj3qPU20EyPf7NlsldltAAAApY"]
[Fri Apr 10 21:14:22.091923 2026] [:error] [pid 62884:tid 62897] [client 20.123.11.197:30219] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/4.php"] [unique_id "adj3ruUCK1xrhnnmpo2A_QAAAsY"]
[Fri Apr 10 21:14:24.574358 2026] [:error] [pid 13189:tid 13214] [client 20.123.11.197:34051] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/4.php"] [unique_id "adj3sJAxiJKPums3eBC2EwAAAFY"]
[Fri Apr 10 21:14:26.582680 2026] [:error] [pid 13189:tid 13199] [client 20.123.11.197:30209] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/4.php"] [unique_id "adj3spAxiJKPums3eBC2HgAAAEc"]
[Fri Apr 10 21:14:28.714847 2026] [:error] [pid 63023:tid 63047] [client 20.123.11.197:36645] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/5.php"] [unique_id "adj3tKOf5IOzVN1LeZ9w2wAAA1U"]
[Fri Apr 10 21:14:29.811123 2026] [:error] [pid 25984:tid 25991] [client 20.123.11.197:25550] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/5.php"] [unique_id "adj3tbsdbY_MC14OH14dkgAAAUI"]
[Fri Apr 10 21:14:31.205855 2026] [:error] [pid 3934:tid 3952] [client 20.123.11.197:40865] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/5.php"] [unique_id "adj3t4a41m-BS8mg82fnIQAAAM0"]
[Fri Apr 10 21:14:32.356905 2026] [:error] [pid 62769:tid 62785] [client 20.123.11.197:25577] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/5.php"] [unique_id "adj3uMWsSnfLoB8ifjBKBwAAAk4"]
[Fri Apr 10 21:14:32.996937 2026] [:error] [pid 62710:tid 62714] [client 20.123.11.197:57431] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/6.php"] [unique_id "adj3uOME7qrf5xEWWJsQXAAAAgE"]
[Fri Apr 10 21:14:33.648473 2026] [:error] [pid 13101:tid 13157] [client 20.123.11.197:27646] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/6.php"] [unique_id "adj3ud8Ldw85818pj2rYmgAAAJg"]
[Fri Apr 10 21:14:34.375120 2026] [:error] [pid 3934:tid 3960] [client 20.123.11.197:30229] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/6.php"] [unique_id "adj3uoa41m-BS8mg82fnKAAAANU"]
[Fri Apr 10 21:14:35.080083 2026] [:error] [pid 62769:tid 62784] [client 20.123.11.197:27123] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/6.php"] [unique_id "adj3u8WsSnfLoB8ifjBKCQAAAk0"]
[Fri Apr 10 21:14:36.828278 2026] [:error] [pid 63023:tid 63029] [client 20.123.11.197:34055] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/9.php"] [unique_id "adj3vKOf5IOzVN1LeZ9w5QAAA0Q"]
[Fri Apr 10 21:14:38.156571 2026] [:error] [pid 13101:tid 13143] [client 20.123.11.197:32808] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/9.php"] [unique_id "adj3vt8Ldw85818pj2rYnwAAAIo"]
[Fri Apr 10 21:14:39.211541 2026] [:error] [pid 13102:tid 13167] [client 20.123.11.197:30258] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/9.php"] [unique_id "adj3v_9xLvjW2guI55bEswAAAAc"]
[Fri Apr 10 21:14:40.739965 2026] [:error] [pid 63062:tid 63080] [client 20.123.11.197:56746] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/9.php"] [unique_id "adj3wJ2HtsmV85NqkMfrTwAAA5A"]
[Fri Apr 10 21:14:42.274582 2026] [:error] [pid 3934:tid 3960] [client 20.123.11.197:57425] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/10.php"] [unique_id "adj3woa41m-BS8mg82fnMQAAANU"]
[Fri Apr 10 21:14:43.422252 2026] [:error] [pid 63023:tid 63041] [client 20.123.11.197:65246] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/10.php"] [unique_id "adj3w6Of5IOzVN1LeZ9w8AAAA1A"]
[Fri Apr 10 21:14:44.656142 2026] [:error] [pid 63062:tid 63076] [client 20.123.11.197:27585] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/10.php"] [unique_id "adj3xJ2HtsmV85NqkMfrVQAAA4w"]
[Fri Apr 10 21:14:46.591845 2026] [:error] [pid 63134:tid 63141] [client 20.123.11.197:57415] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/10.php"] [unique_id "adj3xtFALqPDwWi6eJKeSQAAA8Q"]
[Fri Apr 10 21:14:48.174937 2026] [:error] [pid 13102:tid 13180] [client 20.123.11.197:36646] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.mopj.php"] [unique_id "adj3yP9xLvjW2guI55bExgAAABQ"]
[Fri Apr 10 21:14:49.356807 2026] [:error] [pid 62615:tid 62623] [client 20.123.11.197:25599] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.mopj.php"] [unique_id "adj3ydSLyvZ9rO5uVseVqgAAAYY"]
[Fri Apr 10 21:14:50.464328 2026] [:error] [pid 3934:tid 3960] [client 20.123.11.197:65233] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.mopj.php"] [unique_id "adj3yoa41m-BS8mg82fnNAAAANU"]
[Fri Apr 10 21:14:51.221347 2026] [:error] [pid 13189:tid 13197] [client 20.123.11.197:30213] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.mopj.php"] [unique_id "adj3y5AxiJKPums3eBC2QQAAAEU"]
[Fri Apr 10 21:14:51.792564 2026] [:error] [pid 3934:tid 3959] [client 20.123.11.197:65263] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/100.php"] [unique_id "adj3y4a41m-BS8mg82fnNgAAANQ"]
[Fri Apr 10 21:14:52.513746 2026] [:error] [pid 13102:tid 13178] [client 20.123.11.197:51773] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/100.php"] [unique_id "adj3zP9xLvjW2guI55bE0gAAABI"]
[Fri Apr 10 21:14:53.437643 2026] [:error] [pid 63062:tid 63070] [client 20.123.11.197:56754] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/100.php"] [unique_id "adj3zZ2HtsmV85NqkMfrWgAAA4Y"]
[Fri Apr 10 21:14:54.514755 2026] [:error] [pid 13102:tid 13178] [client 20.123.11.197:40868] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/100.php"] [unique_id "adj3zv9xLvjW2guI55bE2wAAABI"]
[Fri Apr 10 21:14:55.345703 2026] [:error] [pid 62615:tid 62629] [client 20.123.11.197:40853] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nano.php"] [unique_id "adj3z9SLyvZ9rO5uVseVqwAAAYw"]
[Fri Apr 10 21:14:56.735570 2026] [:error] [pid 63134:tid 63149] [client 20.123.11.197:36663] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nano.php"] [unique_id "adj30NFALqPDwWi6eJKeWwAAA8w"]
[Fri Apr 10 21:14:57.561739 2026] [:error] [pid 62819:tid 62837] [client 20.123.11.197:32810] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nano.php"] [unique_id "adj30fU20EyPf7Nlsldl0QAAAo8"]
[Fri Apr 10 21:14:58.695396 2026] [:error] [pid 13102:tid 13175] [client 20.123.11.197:65248] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nano.php"] [unique_id "adj30v9xLvjW2guI55bE3gAAAA8"]
[Fri Apr 10 21:14:59.683991 2026] [:error] [pid 13101:tid 13135] [client 20.123.11.197:57435] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f35_S.php"] [unique_id "adj3098Ldw85818pj2rYsAAAAII"]
[Fri Apr 10 21:15:00.580353 2026] [:error] [pid 13102:tid 13182] [client 20.123.11.197:27647] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f35_S.php"] [unique_id "adj31P9xLvjW2guI55bE6wAAABY"]
[Fri Apr 10 21:15:01.353066 2026] [:error] [pid 13102:tid 13182] [client 20.123.11.197:36630] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f35_S.php"] [unique_id "adj31f9xLvjW2guI55bE8gAAABY"]
[Fri Apr 10 21:15:02.424703 2026] [:error] [pid 13189:tid 13198] [client 20.123.11.197:27626] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f35_S.php"] [unique_id "adj31pAxiJKPums3eBC2WAAAAEY"]
[Fri Apr 10 21:15:03.904941 2026] [:error] [pid 63023:tid 63038] [client 20.123.11.197:40841] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2026w.php"] [unique_id "adj316Of5IOzVN1LeZ9w_wAAA00"]
[Fri Apr 10 21:15:05.760827 2026] [:error] [pid 3934:tid 3940] [client 20.123.11.197:56738] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2026w.php"] [unique_id "adj32Ya41m-BS8mg82fnTAAAAME"]
[Fri Apr 10 21:15:06.705053 2026] [:error] [pid 13100:tid 13124] [client 20.123.11.197:30221] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2026w.php"] [unique_id "adj32lzg-ZkZ0InWIP29xwAAARM"]
[Fri Apr 10 21:15:07.788598 2026] [proxy_fcgi:error] [pid 62710:tid 62727] [client 20.123.11.197:27128] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 21:15:08.041035 2026] [proxy_fcgi:error] [pid 62710:tid 62733] [client 20.123.11.197:27128] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 21:15:08.292393 2026] [proxy_fcgi:error] [pid 62710:tid 62723] [client 20.123.11.197:27128] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 21:15:08.543354 2026] [proxy_fcgi:error] [pid 62710:tid 62724] [client 20.123.11.197:27128] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 21:15:08.812408 2026] [proxy_fcgi:error] [pid 62710:tid 62725] [client 20.123.11.197:27128] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 21:15:09.113405 2026] [proxy_fcgi:error] [pid 62710:tid 62723] [client 20.123.11.197:27128] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 21:15:09.365415 2026] [proxy_fcgi:error] [pid 62710:tid 62733] [client 20.123.11.197:27128] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 21:15:09.616548 2026] [proxy_fcgi:error] [pid 62710:tid 62733] [client 20.123.11.197:27128] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 21:15:11.119834 2026] [proxy_fcgi:error] [pid 62710:tid 62721] [client 20.123.11.197:27128] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 21:15:11.369250 2026] [proxy_fcgi:error] [pid 62710:tid 62723] [client 20.123.11.197:27128] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 21:15:11.618503 2026] [proxy_fcgi:error] [pid 62710:tid 62724] [client 20.123.11.197:27128] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 21:15:11.864823 2026] [:error] [pid 62710:tid 62718] [client 20.123.11.197:27128] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hplfuns.php"] [unique_id "adj33-ME7qrf5xEWWJsQmAAAAgU"]
[Fri Apr 10 21:15:12.931223 2026] [:error] [pid 62769:tid 62787] [client 20.123.11.197:57420] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hplfuns.php"] [unique_id "adj34MWsSnfLoB8ifjBKKQAAAlA"]
[Fri Apr 10 21:15:14.048657 2026] [:error] [pid 3934:tid 3947] [client 20.123.11.197:25597] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hplfuns.php"] [unique_id "adj34oa41m-BS8mg82fnUwAAAMg"]
[Fri Apr 10 21:15:14.789161 2026] [:error] [pid 62769:tid 62774] [client 20.123.11.197:25587] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hplfuns.php"] [unique_id "adj34sWsSnfLoB8ifjBKLAAAAkM"]
[Fri Apr 10 21:15:15.565459 2026] [:error] [pid 13189:tid 13209] [client 20.123.11.197:65228] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xa.php"] [unique_id "adj345AxiJKPums3eBC2cwAAAFE"]
[Fri Apr 10 21:15:16.277806 2026] [:error] [pid 3934:tid 3941] [client 20.123.11.197:32822] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xa.php"] [unique_id "adj35Ia41m-BS8mg82fnVwAAAMI"]
[Fri Apr 10 21:15:17.083510 2026] [:error] [pid 3934:tid 3951] [client 20.123.11.197:32793] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xa.php"] [unique_id "adj35Ya41m-BS8mg82fnWwAAAMw"]
[Fri Apr 10 21:15:17.740732 2026] [:error] [pid 3934:tid 3951] [client 20.123.11.197:36650] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xa.php"] [unique_id "adj35Ya41m-BS8mg82fnXwAAAMw"]
[Fri Apr 10 21:15:18.713931 2026] [:error] [pid 62615:tid 62617] [client 20.123.11.197:65262] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin.php"] [unique_id "adj35tSLyvZ9rO5uVseVvAAAAYA"]
[Fri Apr 10 21:15:20.023304 2026] [:error] [pid 62710:tid 62725] [client 20.123.11.197:27129] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin.php"] [unique_id "adj36OME7qrf5xEWWJsQogAAAgw"]
[Fri Apr 10 21:15:21.000943 2026] [:error] [pid 62710:tid 62716] [client 20.123.11.197:32784] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin.php"] [unique_id "adj36eME7qrf5xEWWJsQpAAAAgM"]
[Fri Apr 10 21:15:21.741437 2026] [:error] [pid 62769:tid 62793] [client 20.123.11.197:57410] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin.php"] [unique_id "adj36cWsSnfLoB8ifjBKMQAAAlY"]
[Fri Apr 10 21:15:22.555280 2026] [:error] [pid 25984:tid 26006] [client 20.123.11.197:32792] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/inege.php"] [unique_id "adj36rsdbY_MC14OH14dtQAAAVE"]
[Fri Apr 10 21:15:24.178528 2026] [:error] [pid 63062:tid 63081] [client 20.123.11.197:56716] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/inege.php"] [unique_id "adj37J2HtsmV85NqkMfrYQAAA5E"]
[Fri Apr 10 21:15:25.309603 2026] [:error] [pid 3934:tid 3958] [client 20.123.11.197:36627] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/inege.php"] [unique_id "adj37Ya41m-BS8mg82fndAAAANM"]
[Fri Apr 10 21:15:26.714172 2026] [:error] [pid 62769:tid 62774] [client 20.123.11.197:36644] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/inege.php"] [unique_id "adj37sWsSnfLoB8ifjBKOgAAAkM"]
[Fri Apr 10 21:15:27.666875 2026] [:error] [pid 62710:tid 62732] [client 20.123.11.197:57455] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fe5.php"] [unique_id "adj37-ME7qrf5xEWWJsQtgAAAhM"]
[Fri Apr 10 21:15:29.104943 2026] [:error] [pid 13101:tid 13149] [client 20.123.11.197:37954] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fe5.php"] [unique_id "adj38d8Ldw85818pj2rY2AAAAJA"]
[Fri Apr 10 21:15:29.994945 2026] [:error] [pid 62710:tid 62723] [client 20.123.11.197:30251] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fe5.php"] [unique_id "adj38eME7qrf5xEWWJsQvAAAAgo"]
[Fri Apr 10 21:15:30.619804 2026] [:error] [pid 63023:tid 63026] [client 20.123.11.197:27622] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fe5.php"] [unique_id "adj38qOf5IOzVN1LeZ9xEAAAA0E"]
[Fri Apr 10 21:15:31.439314 2026] [:error] [pid 62769:tid 62794] [client 20.123.11.197:65264] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/uuu.php"] [unique_id "adj388WsSnfLoB8ifjBKSQAAAlc"]
[Fri Apr 10 21:15:32.617517 2026] [:error] [pid 62769:tid 62788] [client 20.123.11.197:30231] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/uuu.php"] [unique_id "adj39MWsSnfLoB8ifjBKUwAAAlE"]
[Fri Apr 10 21:15:33.255729 2026] [:error] [pid 62884:tid 62903] [client 20.123.11.197:30237] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/uuu.php"] [unique_id "adj39eUCK1xrhnnmpo2BEgAAAsw"]
[Fri Apr 10 21:15:33.950765 2026] [:error] [pid 63023:tid 63048] [client 20.123.11.197:41570] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/uuu.php"] [unique_id "adj39aOf5IOzVN1LeZ9xFwAAA1Y"]
[Fri Apr 10 21:15:35.177093 2026] [:error] [pid 63134:tid 63150] [client 20.123.11.197:32226] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sf.php"] [unique_id "adj399FALqPDwWi6eJKecgAAA80"]
[Fri Apr 10 21:15:35.938899 2026] [:error] [pid 62615:tid 62624] [client 20.123.11.197:32813] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sf.php"] [unique_id "adj399SLyvZ9rO5uVseV1QAAAYc"]
[Fri Apr 10 21:15:36.783929 2026] [:error] [pid 62819:tid 62837] [client 20.123.11.197:41558] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sf.php"] [unique_id "adj3-PU20EyPf7Nlsldl1wAAAo8"]
[Fri Apr 10 21:15:37.588251 2026] [:error] [pid 63134:tid 63157] [client 20.123.11.197:57459] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sf.php"] [unique_id "adj3-dFALqPDwWi6eJKegAAAA9Q"]
[Fri Apr 10 21:15:38.576744 2026] [:error] [pid 13101:tid 13136] [client 20.123.11.197:27586] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/no1.php"] [unique_id "adj3-t8Ldw85818pj2rY4AAAAIM"]
[Fri Apr 10 21:15:39.358051 2026] [:error] [pid 13101:tid 13140] [client 20.123.11.197:41550] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/no1.php"] [unique_id "adj3-98Ldw85818pj2rY5QAAAIc"]
[Fri Apr 10 21:15:40.270675 2026] [:error] [pid 62769:tid 62780] [client 20.123.11.197:57412] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/no1.php"] [unique_id "adj3_MWsSnfLoB8ifjBKawAAAkk"]
[Fri Apr 10 21:15:41.478288 2026] [:error] [pid 63134:tid 63160] [client 20.123.11.197:36622] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/no1.php"] [unique_id "adj3_dFALqPDwWi6eJKehAAAA9c"]
[Fri Apr 10 21:15:42.719627 2026] [:error] [pid 62769:tid 62785] [client 20.123.11.197:27121] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/w2025.php"] [unique_id "adj3_sWsSnfLoB8ifjBKdAAAAk4"]
[Fri Apr 10 21:15:44.382821 2026] [:error] [pid 62769:tid 62790] [client 20.123.11.197:27084] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/w2025.php"] [unique_id "adj4AMWsSnfLoB8ifjBKeAAAAlM"]
[Fri Apr 10 21:15:45.805551 2026] [:error] [pid 62769:tid 62773] [client 20.123.11.197:32780] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/w2025.php"] [unique_id "adj4AcWsSnfLoB8ifjBKfwAAAkI"]
[Fri Apr 10 21:15:47.819363 2026] [:error] [pid 63134:tid 63139] [client 20.123.11.197:57447] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/w2025.php"] [unique_id "adj4A9FALqPDwWi6eJKejQAAA8I"]
[Fri Apr 10 21:15:50.074045 2026] [:error] [pid 63134:tid 63149] [client 20.123.11.197:27590] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fvvff.php"] [unique_id "adj4BtFALqPDwWi6eJKelgAAA8w"]
[Fri Apr 10 21:15:51.371709 2026] [:error] [pid 13102:tid 13183] [client 20.123.11.197:36649] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fvvff.php"] [unique_id "adj4B_9xLvjW2guI55bFVwAAABc"]
[Fri Apr 10 21:15:52.481206 2026] [:error] [pid 62769:tid 62791] [client 20.123.11.197:41588] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fvvff.php"] [unique_id "adj4CMWsSnfLoB8ifjBKhQAAAlQ"]
[Fri Apr 10 21:15:53.514929 2026] [:error] [pid 13189:tid 13212] [client 20.123.11.197:56712] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fvvff.php"] [unique_id "adj4CZAxiJKPums3eBC2jwAAAFQ"]
[Fri Apr 10 21:16:00.371045 2026] [:error] [pid 3934:tid 3959] [client 20.123.11.197:57466] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a2.php"] [unique_id "adj4EIa41m-BS8mg82fnjgAAANQ"]
[Fri Apr 10 21:16:01.318355 2026] [:error] [pid 13102:tid 13171] [client 20.123.11.197:56763] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a2.php"] [unique_id "adj4Ef9xLvjW2guI55bFYgAAAAs"]
[Fri Apr 10 21:16:02.348085 2026] [:error] [pid 13102:tid 13175] [client 20.123.11.197:40859] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a2.php"] [unique_id "adj4Ev9xLvjW2guI55bFZAAAAA8"]
[Fri Apr 10 21:16:04.230839 2026] [:error] [pid 13189:tid 13194] [client 20.123.11.197:65267] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a2.php"] [unique_id "adj4FJAxiJKPums3eBC2ngAAAEI"]
[Fri Apr 10 21:16:05.675169 2026] [:error] [pid 3934:tid 3945] [client 20.123.11.197:30260] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/edit.php"] [unique_id "adj4FYa41m-BS8mg82fnmQAAAMY"]
[Fri Apr 10 21:16:07.513334 2026] [:error] [pid 13189:tid 13198] [client 20.123.11.197:27619] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/edit.php"] [unique_id "adj4F5AxiJKPums3eBC2qgAAAEY"]
[Fri Apr 10 21:16:08.526145 2026] [:error] [pid 63023:tid 63048] [client 20.123.11.197:41596] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/edit.php"] [unique_id "adj4GKOf5IOzVN1LeZ9xKAAAA1Y"]
[Fri Apr 10 21:16:09.527136 2026] [:error] [pid 13189:tid 13195] [client 20.123.11.197:65222] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/edit.php"] [unique_id "adj4GZAxiJKPums3eBC2sAAAAEM"]
[Fri Apr 10 21:16:10.395184 2026] [:error] [pid 13189:tid 13198] [client 20.123.11.197:56752] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ioxi-o.php"] [unique_id "adj4GpAxiJKPums3eBC2sQAAAEY"]
[Fri Apr 10 21:16:11.884667 2026] [proxy_fcgi:error] [pid 3934:tid 3960] [client 20.123.11.197:36658] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 21:16:12.688029 2026] [proxy_fcgi:error] [pid 3934:tid 3956] [client 20.123.11.197:36658] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 21:16:12.946961 2026] [proxy_fcgi:error] [pid 3934:tid 3939] [client 20.123.11.197:36658] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 21:16:13.202589 2026] [proxy_fcgi:error] [pid 3934:tid 3960] [client 20.123.11.197:36658] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 21:16:13.463824 2026] [proxy_fcgi:error] [pid 3934:tid 3962] [client 20.123.11.197:36658] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 21:16:13.722742 2026] [proxy_fcgi:error] [pid 3934:tid 3961] [client 20.123.11.197:36658] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 21:16:13.975677 2026] [proxy_fcgi:error] [pid 3934:tid 3953] [client 20.123.11.197:36658] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 21:16:14.226200 2026] [proxy_fcgi:error] [pid 3934:tid 3956] [client 20.123.11.197:36658] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 21:16:14.477343 2026] [proxy_fcgi:error] [pid 3934:tid 3939] [client 20.123.11.197:36658] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 21:16:14.979767 2026] [:error] [pid 3934:tid 3960] [client 20.123.11.197:36658] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bless4.php"] [unique_id "adj4Hoa41m-BS8mg82fnsQAAANU"]
[Fri Apr 10 21:16:16.038345 2026] [:error] [pid 13102:tid 13171] [client 20.123.11.197:36660] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bless4.php"] [unique_id "adj4IP9xLvjW2guI55bFdAAAAAs"]
[Fri Apr 10 21:16:17.011502 2026] [:error] [pid 13102:tid 13161] [client 20.123.11.197:40863] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bless4.php"] [unique_id "adj4If9xLvjW2guI55bFeAAAAAE"]
[Fri Apr 10 21:16:18.005273 2026] [:error] [pid 13101:tid 13135] [client 20.123.11.197:29109] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bless4.php"] [unique_id "adj4It8Ldw85818pj2rZFAAAAII"]
[Fri Apr 10 21:16:19.022282 2026] [:error] [pid 13101:tid 13150] [client 20.123.11.197:41566] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-act.php"] [unique_id "adj4I98Ldw85818pj2rZFwAAAJE"]
[Fri Apr 10 21:16:20.027616 2026] [:error] [pid 13101:tid 13137] [client 20.123.11.197:41580] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-act.php"] [unique_id "adj4JN8Ldw85818pj2rZGQAAAIQ"]
[Fri Apr 10 21:16:20.957646 2026] [:error] [pid 13189:tid 13192] [client 20.123.11.197:25536] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-act.php"] [unique_id "adj4JJAxiJKPums3eBC21wAAAEA"]
[Fri Apr 10 21:16:22.470094 2026] [:error] [pid 13189:tid 13195] [client 20.123.11.197:57409] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-act.php"] [unique_id "adj4JpAxiJKPums3eBC23wAAAEM"]
[Fri Apr 10 21:16:23.701281 2026] [:error] [pid 62615:tid 62628] [client 20.123.11.197:36615] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xqq.php"] [unique_id "adj4J9SLyvZ9rO5uVseV6wAAAYs"]
[Fri Apr 10 21:16:25.194442 2026] [:error] [pid 63134:tid 63154] [client 20.123.11.197:41541] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xqq.php"] [unique_id "adj4KdFALqPDwWi6eJKetgAAA9E"]
[Fri Apr 10 21:16:25.953098 2026] [:error] [pid 13101:tid 13137] [client 20.123.11.197:32771] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xqq.php"] [unique_id "adj4Kd8Ldw85818pj2rZIAAAAIQ"]
[Fri Apr 10 21:16:27.111303 2026] [:error] [pid 63023:tid 63050] [client 20.123.11.197:41579] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xqq.php"] [unique_id "adj4K6Of5IOzVN1LeZ9xKgAAA1g"]
[Fri Apr 10 21:16:28.420967 2026] [:error] [pid 62769:tid 62777] [client 20.123.11.197:40884] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/plss3.php"] [unique_id "adj4LMWsSnfLoB8ifjBKsgAAAkY"]
[Fri Apr 10 21:16:29.965505 2026] [:error] [pid 62769:tid 62777] [client 20.123.11.197:32796] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/plss3.php"] [unique_id "adj4LcWsSnfLoB8ifjBKtAAAAkY"]
[Fri Apr 10 21:16:31.461804 2026] [:error] [pid 62615:tid 62619] [client 20.123.11.197:36608] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/plss3.php"] [unique_id "adj4L9SLyvZ9rO5uVseV8QAAAYI"]
[Fri Apr 10 21:16:32.664205 2026] [:error] [pid 3934:tid 3959] [client 20.123.11.197:32790] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/plss3.php"] [unique_id "adj4MIa41m-BS8mg82fnvAAAANQ"]
[Fri Apr 10 21:16:33.674438 2026] [:error] [pid 62769:tid 62777] [client 20.123.11.197:57422] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aaa.php"] [unique_id "adj4McWsSnfLoB8ifjBKxgAAAkY"]
[Fri Apr 10 21:16:36.574822 2026] [:error] [pid 62769:tid 62782] [client 20.123.11.197:30248] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aaa.php"] [unique_id "adj4NMWsSnfLoB8ifjBK0QAAAks"]
[Fri Apr 10 21:16:37.874332 2026] [:error] [pid 63062:tid 63086] [client 20.123.11.197:65261] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aaa.php"] [unique_id "adj4NZ2HtsmV85NqkMfrdwAAA5Y"]
[Fri Apr 10 21:16:38.525088 2026] [:error] [pid 63134:tid 63144] [client 20.123.11.197:30239] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aaa.php"] [unique_id "adj4NtFALqPDwWi6eJKeyAAAA8c"]
[Fri Apr 10 21:16:39.861921 2026] [:error] [pid 63134:tid 63139] [client 20.123.11.197:30265] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/classwithtostring.php"] [unique_id "adj4N9FALqPDwWi6eJKeygAAA8I"]
[Fri Apr 10 21:16:41.291272 2026] [:error] [pid 3934:tid 3956] [client 20.123.11.197:25582] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/classwithtostring.php"] [unique_id "adj4OYa41m-BS8mg82fnzAAAANE"]
[Fri Apr 10 21:16:42.994673 2026] [:error] [pid 62615:tid 62621] [client 20.123.11.197:41592] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/classwithtostring.php"] [unique_id "adj4OtSLyvZ9rO5uVseV-wAAAYQ"]
[Fri Apr 10 21:16:43.722712 2026] [:error] [pid 63134:tid 63158] [client 20.123.11.197:27106] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/classwithtostring.php"] [unique_id "adj4O9FALqPDwWi6eJKe0gAAA9U"]
[Fri Apr 10 21:16:44.721828 2026] [:error] [pid 13101:tid 13141] [client 20.123.11.197:41536] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "adj4PN8Ldw85818pj2rZLgAAAIg"]
[Fri Apr 10 21:16:47.043075 2026] [:error] [pid 25984:tid 25997] [client 20.123.11.197:25537] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "adj4P7sdbY_MC14OH14d0gAAAUg"]
[Fri Apr 10 21:16:48.455602 2026] [:error] [pid 62769:tid 62790] [client 20.123.11.197:40845] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "adj4QMWsSnfLoB8ifjBLBAAAAlM"]
[Fri Apr 10 21:16:49.407391 2026] [:error] [pid 13189:tid 13215] [client 20.123.11.197:32788] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "adj4QZAxiJKPums3eBC3IQAAAFc"]
[Fri Apr 10 21:16:50.758149 2026] [:error] [pid 62710:tid 62729] [client 20.123.11.197:51736] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tinyfilemanager.php"] [unique_id "adj4QuME7qrf5xEWWJsQ7gAAAhA"]
[Fri Apr 10 21:16:51.882294 2026] [:error] [pid 3934:tid 3956] [client 20.123.11.197:57411] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tinyfilemanager.php"] [unique_id "adj4Q4a41m-BS8mg82fn4wAAANE"]
[Fri Apr 10 21:16:52.826192 2026] [:error] [pid 13189:tid 13195] [client 20.123.11.197:41569] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tinyfilemanager.php"] [unique_id "adj4RJAxiJKPums3eBC3JQAAAEM"]
[Fri Apr 10 21:16:53.865845 2026] [:error] [pid 13189:tid 13201] [client 20.123.11.197:40871] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tinyfilemanager.php"] [unique_id "adj4RZAxiJKPums3eBC3LAAAAEk"]
[Fri Apr 10 21:16:54.581839 2026] [:error] [pid 13189:tid 13196] [client 20.123.11.197:25569] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-update.php"] [unique_id "adj4RpAxiJKPums3eBC3NAAAAEQ"]
[Fri Apr 10 21:16:55.512824 2026] [:error] [pid 62769:tid 62779] [client 20.123.11.197:27087] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-update.php"] [unique_id "adj4R8WsSnfLoB8ifjBLDgAAAkg"]
[Fri Apr 10 21:16:56.438262 2026] [:error] [pid 13189:tid 13196] [client 20.123.11.197:25570] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-update.php"] [unique_id "adj4SJAxiJKPums3eBC3PAAAAEQ"]
[Fri Apr 10 21:16:57.174617 2026] [:error] [pid 13101:tid 13135] [client 20.123.11.197:32829] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-update.php"] [unique_id "adj4Sd8Ldw85818pj2rZRAAAAII"]
[Fri Apr 10 21:16:58.115221 2026] [:error] [pid 62769:tid 62786] [client 20.123.11.197:29598] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sbhu.php"] [unique_id "adj4SsWsSnfLoB8ifjBLEwAAAk8"]
[Fri Apr 10 21:16:59.255071 2026] [:error] [pid 13189:tid 13210] [client 20.123.11.197:40854] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sbhu.php"] [unique_id "adj4S5AxiJKPums3eBC3SwAAAFI"]
[Fri Apr 10 21:17:00.261030 2026] [:error] [pid 62769:tid 62784] [client 20.123.11.197:57426] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sbhu.php"] [unique_id "adj4TMWsSnfLoB8ifjBLIwAAAk0"]
[Fri Apr 10 21:17:01.136767 2026] [:error] [pid 3934:tid 3962] [client 20.123.11.197:56762] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sbhu.php"] [unique_id "adj4TYa41m-BS8mg82fn7QAAANc"]
[Fri Apr 10 21:17:02.174979 2026] [:error] [pid 25984:tid 25989] [client 20.123.11.197:30240] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-blog.php"] [unique_id "adj4TrsdbY_MC14OH14d1wAAAUA"]
[Fri Apr 10 21:17:03.451004 2026] [:error] [pid 3934:tid 3943] [client 20.123.11.197:25563] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-blog.php"] [unique_id "adj4T4a41m-BS8mg82fn8gAAAMQ"]
[Fri Apr 10 21:17:04.414129 2026] [:error] [pid 13189:tid 13210] [client 20.123.11.197:27588] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-blog.php"] [unique_id "adj4UJAxiJKPums3eBC3UgAAAFI"]
[Fri Apr 10 21:17:05.723349 2026] [:error] [pid 62819:tid 62845] [client 20.123.11.197:27130] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-blog.php"] [unique_id "adj4UfU20EyPf7Nlsldl4gAAApc"]
[Fri Apr 10 21:17:06.436860 2026] [:error] [pid 13101:tid 13149] [client 20.123.11.197:34086] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "adj4Ut8Ldw85818pj2rZUAAAAJA"]
[Fri Apr 10 21:17:07.141952 2026] [:error] [pid 13189:tid 13200] [client 20.123.11.197:30256] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "adj4U5AxiJKPums3eBC3VwAAAEg"]
[Fri Apr 10 21:17:08.069191 2026] [:error] [pid 63134:tid 63138] [client 20.123.11.197:56706] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "adj4VNFALqPDwWi6eJKe4AAAA8E"]
[Fri Apr 10 21:17:09.512671 2026] [:error] [pid 13189:tid 13203] [client 20.123.11.197:32205] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "adj4VZAxiJKPums3eBC3ZgAAAEs"]
[Fri Apr 10 21:17:11.169653 2026] [:error] [pid 62769:tid 62781] [client 20.123.11.197:36619] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "adj4V8WsSnfLoB8ifjBLOgAAAko"]
[Fri Apr 10 21:17:12.954159 2026] [:error] [pid 13100:tid 13119] [client 20.123.11.197:40879] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "adj4WFzg-ZkZ0InWIP29zQAAAQ4"]
[Fri Apr 10 21:17:15.143400 2026] [proxy_fcgi:error] [pid 62769:tid 62771] [client 20.123.11.197:41578] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 21:17:15.397203 2026] [proxy_fcgi:error] [pid 62769:tid 62790] [client 20.123.11.197:41578] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 21:17:15.648302 2026] [proxy_fcgi:error] [pid 62769:tid 62776] [client 20.123.11.197:41578] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 21:17:15.899366 2026] [proxy_fcgi:error] [pid 62769:tid 62782] [client 20.123.11.197:41578] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 21:17:16.149689 2026] [proxy_fcgi:error] [pid 62769:tid 62780] [client 20.123.11.197:41578] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 21:17:16.660679 2026] [proxy_fcgi:error] [pid 62769:tid 62781] [client 20.123.11.197:41578] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 21:17:17.163908 2026] [proxy_fcgi:error] [pid 62769:tid 62783] [client 20.123.11.197:41578] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 21:17:17.413509 2026] [proxy_fcgi:error] [pid 62769:tid 62772] [client 20.123.11.197:41578] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 21:17:17.696680 2026] [:error] [pid 62769:tid 62790] [client 20.123.11.197:41578] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/makeasmtp.php"] [unique_id "adj4XcWsSnfLoB8ifjBLTwAAAlM"]
[Fri Apr 10 21:17:19.431430 2026] [:error] [pid 13189:tid 13200] [client 20.123.11.197:41590] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/makeasmtp.php"] [unique_id "adj4X5AxiJKPums3eBC3fAAAAEg"]
[Fri Apr 10 21:17:21.020152 2026] [:error] [pid 13189:tid 13201] [client 20.123.11.197:40838] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/makeasmtp.php"] [unique_id "adj4YZAxiJKPums3eBC3hAAAAEk"]
[Fri Apr 10 21:17:22.045025 2026] [:error] [pid 62769:tid 62783] [client 20.123.11.197:65253] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/makeasmtp.php"] [unique_id "adj4YsWsSnfLoB8ifjBLVgAAAkw"]
[Fri Apr 10 21:17:23.740955 2026] [:error] [pid 13189:tid 13194] [client 20.123.11.197:32826] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-michan.php"] [unique_id "adj4Y5AxiJKPums3eBC3hwAAAEI"]
[Fri Apr 10 21:17:24.734097 2026] [:error] [pid 13189:tid 13214] [client 20.123.11.197:40874] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-michan.php"] [unique_id "adj4ZJAxiJKPums3eBC3igAAAFY"]
[Fri Apr 10 21:17:25.650799 2026] [:error] [pid 13189:tid 13213] [client 20.123.11.197:40857] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-michan.php"] [unique_id "adj4ZZAxiJKPums3eBC3kgAAAFU"]
[Fri Apr 10 21:17:26.517892 2026] [:error] [pid 62769:tid 62792] [client 20.123.11.197:36657] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-michan.php"] [unique_id "adj4ZsWsSnfLoB8ifjBLXAAAAlU"]
[Fri Apr 10 21:17:27.239415 2026] [:error] [pid 62769:tid 62775] [client 20.123.11.197:40864] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-the.php"] [unique_id "adj4Z8WsSnfLoB8ifjBLYgAAAkQ"]
[Fri Apr 10 21:17:28.518695 2026] [:error] [pid 62651:tid 62677] [client 20.123.11.197:56718] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-the.php"] [unique_id "adj4aDbAH0le57SIaqwiHgAAAdg"]
[Fri Apr 10 21:17:29.263129 2026] [:error] [pid 13189:tid 13203] [client 20.123.11.197:65240] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-the.php"] [unique_id "adj4aZAxiJKPums3eBC3mgAAAEs"]
[Fri Apr 10 21:17:32.011322 2026] [:error] [pid 13100:tid 13106] [client 20.123.11.197:27604] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-the.php"] [unique_id "adj4bFzg-ZkZ0InWIP290QAAAQE"]
[Fri Apr 10 21:17:32.858396 2026] [:error] [pid 13100:tid 13120] [client 20.123.11.197:65266] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "adj4bFzg-ZkZ0InWIP290gAAAQ8"]
[Fri Apr 10 21:17:33.804475 2026] [:error] [pid 62769:tid 62779] [client 20.123.11.197:32769] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "adj4bcWsSnfLoB8ifjBLbAAAAkg"]
[Fri Apr 10 21:17:34.656983 2026] [:error] [pid 62769:tid 62781] [client 20.123.11.197:36670] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "adj4bsWsSnfLoB8ifjBLbwAAAko"]
[Fri Apr 10 21:17:36.540884 2026] [:error] [pid 62769:tid 62776] [client 20.123.11.197:40888] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "adj4cMWsSnfLoB8ifjBLeAAAAkU"]
[Fri Apr 10 21:17:37.557206 2026] [:error] [pid 63062:tid 63075] [client 20.123.11.197:25568] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/BDKR28WP.php"] [unique_id "adj4cZ2HtsmV85NqkMfrmwAAA4s"]
[Fri Apr 10 21:17:39.760550 2026] [:error] [pid 62819:tid 62830] [client 20.123.11.197:65256] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/BDKR28WP.php"] [unique_id "adj4c_U20EyPf7Nlsldl8gAAAog"]
[Fri Apr 10 21:17:40.664911 2026] [:error] [pid 13101:tid 13152] [client 20.123.11.197:27094] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/BDKR28WP.php"] [unique_id "adj4dN8Ldw85818pj2rZaAAAAJM"]
[Fri Apr 10 21:17:41.424559 2026] [:error] [pid 13101:tid 13139] [client 20.123.11.197:56742] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/BDKR28WP.php"] [unique_id "adj4dd8Ldw85818pj2rZbgAAAIY"]
[Fri Apr 10 21:17:42.789147 2026] [:error] [pid 13189:tid 13208] [client 20.123.11.197:36628] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/l10n/"] [unique_id "adj4dpAxiJKPums3eBC3owAAAFA"]
[Fri Apr 10 21:17:44.027202 2026] [:error] [pid 13189:tid 13203] [client 20.123.11.197:56707] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/l10n/"] [unique_id "adj4eJAxiJKPums3eBC3rgAAAEs"]
[Fri Apr 10 21:17:44.864606 2026] [:error] [pid 63134:tid 63156] [client 20.123.11.197:41564] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/l10n/"] [unique_id "adj4eNFALqPDwWi6eJKfEgAAA9M"]
[Fri Apr 10 21:17:45.619397 2026] [:error] [pid 63062:tid 63077] [client 20.123.11.197:40889] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/l10n/"] [unique_id "adj4eZ2HtsmV85NqkMfrnwAAA40"]
[Fri Apr 10 21:17:46.501048 2026] [:error] [pid 63134:tid 63160] [client 20.123.11.197:36611] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wen.php"] [unique_id "adj4etFALqPDwWi6eJKfGAAAA9c"]
[Fri Apr 10 21:17:47.278581 2026] [:error] [pid 62710:tid 62729] [client 20.123.11.197:25558] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wen.php"] [unique_id "adj4e-ME7qrf5xEWWJsRFgAAAhA"]
[Fri Apr 10 21:17:48.121827 2026] [:error] [pid 63062:tid 63069] [client 20.123.11.197:32803] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wen.php"] [unique_id "adj4fJ2HtsmV85NqkMfrowAAA4U"]
[Fri Apr 10 21:17:51.589063 2026] [:error] [pid 62710:tid 62724] [client 20.123.11.197:27037] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wen.php"] [unique_id "adj4f-ME7qrf5xEWWJsRFwAAAgs"]
[Fri Apr 10 21:17:52.388180 2026] [:error] [pid 62769:tid 62774] [client 20.123.11.197:36614] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp.php"] [unique_id "adj4gMWsSnfLoB8ifjBLkQAAAkM"]
[Fri Apr 10 21:17:53.932912 2026] [:error] [pid 62769:tid 62771] [client 20.123.11.197:25568] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp.php"] [unique_id "adj4gcWsSnfLoB8ifjBLnwAAAkA"]
[Fri Apr 10 21:17:55.125838 2026] [:error] [pid 13189:tid 13211] [client 20.123.11.197:41559] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp.php"] [unique_id "adj4g5AxiJKPums3eBC3uwAAAFM"]
[Fri Apr 10 21:17:56.420509 2026] [:error] [pid 63134:tid 63152] [client 20.123.11.197:32775] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp.php"] [unique_id "adj4hNFALqPDwWi6eJKfIQAAA88"]
[Fri Apr 10 21:17:57.570279 2026] [:error] [pid 13189:tid 13202] [client 20.123.11.197:56713] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "adj4hZAxiJKPums3eBC3wgAAAEo"]
[Fri Apr 10 21:17:58.396952 2026] [:error] [pid 13189:tid 13215] [client 20.123.11.197:27043] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "adj4hpAxiJKPums3eBC3xwAAAFc"]
[Fri Apr 10 21:17:59.846113 2026] [:error] [pid 62769:tid 62777] [client 20.123.11.197:30211] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "adj4h8WsSnfLoB8ifjBLtgAAAkY"]
[Fri Apr 10 21:18:01.057190 2026] [:error] [pid 62769:tid 62789] [client 20.123.11.197:65235] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "adj4icWsSnfLoB8ifjBLvAAAAlI"]
[Fri Apr 10 21:18:01.862567 2026] [:error] [pid 62884:tid 62911] [client 20.123.11.197:57429] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fe5.php"] [unique_id "adj4ieUCK1xrhnnmpo2BMAAAAtQ"]
[Fri Apr 10 21:18:02.858889 2026] [:error] [pid 62769:tid 62787] [client 20.123.11.197:51752] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fe5.php"] [unique_id "adj4isWsSnfLoB8ifjBLvwAAAlA"]
[Fri Apr 10 21:18:04.557317 2026] [:error] [pid 62710:tid 62713] [client 20.123.11.197:44592] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fe5.php"] [unique_id "adj4jOME7qrf5xEWWJsRHwAAAgA"]
[Fri Apr 10 21:18:05.775349 2026] [:error] [pid 13101:tid 13145] [client 20.123.11.197:62207] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fe5.php"] [unique_id "adj4jd8Ldw85818pj2rZggAAAIw"]
[Fri Apr 10 21:18:06.541935 2026] [:error] [pid 13101:tid 13136] [client 20.123.11.197:62206] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "adj4jt8Ldw85818pj2rZigAAAIM"]
[Fri Apr 10 21:18:07.301614 2026] [:error] [pid 62710:tid 62733] [client 20.123.11.197:6551] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "adj4j-ME7qrf5xEWWJsRIQAAAhQ"]
[Fri Apr 10 21:18:08.237637 2026] [:error] [pid 62769:tid 62795] [client 20.123.11.197:51284] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "adj4kMWsSnfLoB8ifjBLywAAAlg"]
[Fri Apr 10 21:18:09.078863 2026] [:error] [pid 62769:tid 62791] [client 20.123.11.197:62148] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "adj4kcWsSnfLoB8ifjBLzwAAAlQ"]
[Fri Apr 10 21:18:10.563979 2026] [:error] [pid 13101:tid 13144] [client 20.123.11.197:28071] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/av.php"] [unique_id "adj4kt8Ldw85818pj2rZlQAAAIs"]
[Fri Apr 10 21:18:11.385319 2026] [:error] [pid 13101:tid 13157] [client 20.123.11.197:32183] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/av.php"] [unique_id "adj4k98Ldw85818pj2rZnQAAAJg"]
[Fri Apr 10 21:18:12.184275 2026] [:error] [pid 62710:tid 62725] [client 20.123.11.197:40295] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/av.php"] [unique_id "adj4lOME7qrf5xEWWJsRJwAAAgw"]
[Fri Apr 10 21:18:13.038249 2026] [:error] [pid 63134:tid 63142] [client 20.123.11.197:40284] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/av.php"] [unique_id "adj4ldFALqPDwWi6eJKfJgAAA8U"]
[Fri Apr 10 21:18:13.847784 2026] [:error] [pid 62710:tid 62724] [client 20.123.11.197:42816] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/abcd.php"] [unique_id "adj4leME7qrf5xEWWJsRLwAAAgs"]
[Fri Apr 10 21:18:15.302074 2026] [:error] [pid 62769:tid 62794] [client 20.123.11.197:6219] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/abcd.php"] [unique_id "adj4l8WsSnfLoB8ifjBL5wAAAlc"]
[Fri Apr 10 21:18:15.997869 2026] [:error] [pid 13189:tid 13215] [client 20.123.11.197:6248] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/abcd.php"] [unique_id "adj4l5AxiJKPums3eBC32gAAAFc"]
[Fri Apr 10 21:18:17.349298 2026] [proxy_fcgi:error] [pid 63134:tid 63153] [client 20.123.11.197:54284] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 21:18:17.618657 2026] [proxy_fcgi:error] [pid 63134:tid 63156] [client 20.123.11.197:54284] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 21:18:17.875350 2026] [proxy_fcgi:error] [pid 63134:tid 63146] [client 20.123.11.197:54284] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 21:18:18.373704 2026] [:error] [pid 63134:tid 63152] [client 20.123.11.197:54284] [client 20.123.11.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "adj4mtFALqPDwWi6eJKfKwAAA88"]
[Fri Apr 10 21:18:19.378361 2026] [proxy_fcgi:error] [pid 62769:tid 62781] [client 20.123.11.197:52597] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 21:18:21.791401 2026] [proxy_fcgi:error] [pid 62769:tid 62781] [client 20.123.11.197:52597] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 21:18:22.183761 2026] [proxy_fcgi:error] [pid 62769:tid 62780] [client 20.123.11.197:52597] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 21:18:22.435070 2026] [proxy_fcgi:error] [pid 62769:tid 62772] [client 20.123.11.197:52597] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 21:18:22.688160 2026] [proxy_fcgi:error] [pid 62769:tid 62785] [client 20.123.11.197:52597] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 21:18:22.935870 2026] [:error] [pid 62769:tid 62791] [client 20.123.11.197:52597] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/in.php"] [unique_id "adj4nsWsSnfLoB8ifjBMBgAAAlQ"]
[Fri Apr 10 21:18:24.154844 2026] [:error] [pid 13101:tid 13148] [client 20.123.11.197:28635] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/in.php"] [unique_id "adj4oN8Ldw85818pj2rZrAAAAI8"]
[Fri Apr 10 21:18:24.902329 2026] [:error] [pid 13101:tid 13138] [client 20.123.11.197:6775] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/in.php"] [unique_id "adj4oN8Ldw85818pj2rZsgAAAIU"]
[Fri Apr 10 21:18:26.079772 2026] [:error] [pid 62710:tid 62720] [client 20.123.11.197:38449] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/in.php"] [unique_id "adj4ouME7qrf5xEWWJsRPwAAAgc"]
[Fri Apr 10 21:18:27.371381 2026] [:error] [pid 62769:tid 62788] [client 20.123.11.197:54755] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gssdd.php"] [unique_id "adj4o8WsSnfLoB8ifjBMFQAAAlE"]
[Fri Apr 10 21:18:28.741445 2026] [:error] [pid 62769:tid 62774] [client 20.123.11.197:28639] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gssdd.php"] [unique_id "adj4pMWsSnfLoB8ifjBMIAAAAkM"]
[Fri Apr 10 21:18:29.425695 2026] [:error] [pid 13101:tid 13146] [client 20.123.11.197:54765] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gssdd.php"] [unique_id "adj4pd8Ldw85818pj2rZwgAAAI0"]
[Fri Apr 10 21:18:30.124706 2026] [:error] [pid 62769:tid 62773] [client 20.123.11.197:28158] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gssdd.php"] [unique_id "adj4psWsSnfLoB8ifjBMIgAAAkI"]
[Fri Apr 10 21:18:30.871422 2026] [:error] [pid 13101:tid 13152] [client 20.123.11.197:34738] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/motu.php"] [unique_id "adj4pt8Ldw85818pj2rZywAAAJM"]
[Fri Apr 10 21:18:32.364585 2026] [:error] [pid 13189:tid 13200] [client 20.123.11.197:50445] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/motu.php"] [unique_id "adj4qJAxiJKPums3eBC3_gAAAEg"]
[Fri Apr 10 21:18:33.746772 2026] [:error] [pid 13101:tid 13143] [client 20.123.11.197:35442] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/motu.php"] [unique_id "adj4qd8Ldw85818pj2rZ0QAAAIo"]
[Fri Apr 10 21:18:34.821715 2026] [:error] [pid 13101:tid 13138] [client 20.123.11.197:6737] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/motu.php"] [unique_id "adj4qt8Ldw85818pj2rZ0wAAAIU"]
[Fri Apr 10 21:18:37.339666 2026] [:error] [pid 13189:tid 13214] [client 20.123.11.197:35417] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bs1.php"] [unique_id "adj4rZAxiJKPums3eBC4BwAAAFY"]
[Fri Apr 10 21:18:39.558116 2026] [:error] [pid 13101:tid 13138] [client 20.123.11.197:54754] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bs1.php"] [unique_id "adj4r98Ldw85818pj2rZ3AAAAIU"]
[Fri Apr 10 21:18:41.373839 2026] [:error] [pid 62769:tid 62791] [client 20.123.11.197:35356] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bs1.php"] [unique_id "adj4scWsSnfLoB8ifjBMLQAAAlQ"]
[Fri Apr 10 21:18:42.305065 2026] [:error] [pid 62884:tid 62910] [client 20.123.11.197:6764] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bs1.php"] [unique_id "adj4suUCK1xrhnnmpo2BOgAAAtM"]
[Fri Apr 10 21:18:43.387528 2026] [:error] [pid 63062:tid 63070] [client 20.123.11.197:54752] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bengi.php"] [unique_id "adj4s52HtsmV85NqkMfrsQAAA4Y"]
[Fri Apr 10 21:18:44.145764 2026] [:error] [pid 62769:tid 62778] [client 20.123.11.197:35374] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bengi.php"] [unique_id "adj4tMWsSnfLoB8ifjBMOAAAAkc"]
[Fri Apr 10 21:18:45.848096 2026] [:error] [pid 62769:tid 62793] [client 20.123.11.197:38416] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bengi.php"] [unique_id "adj4tcWsSnfLoB8ifjBMQQAAAlY"]
[Fri Apr 10 21:18:46.577998 2026] [:error] [pid 13101:tid 13150] [client 20.123.11.197:50483] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bengi.php"] [unique_id "adj4tt8Ldw85818pj2rZ6AAAAJE"]
[Fri Apr 10 21:18:47.873056 2026] [:error] [pid 62819:tid 62843] [client 20.123.11.197:38451] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "adj4t_U20EyPf7NlsldmCwAAApU"]
[Fri Apr 10 21:18:50.524697 2026] [:error] [pid 62710:tid 62722] [client 20.123.11.197:54745] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "adj4uuME7qrf5xEWWJsRWgAAAgk"]
[Fri Apr 10 21:18:52.482194 2026] [:error] [pid 63062:tid 63082] [client 20.123.11.197:6769] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "adj4vJ2HtsmV85NqkMfruwAAA5I"]
[Fri Apr 10 21:18:54.269321 2026] [:error] [pid 62710:tid 62732] [client 20.123.11.197:28150] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "adj4vuME7qrf5xEWWJsRYQAAAhM"]
[Fri Apr 10 21:18:55.469821 2026] [:error] [pid 62710:tid 62736] [client 20.123.11.197:50466] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/axx.php"] [unique_id "adj4v-ME7qrf5xEWWJsRZQAAAhc"]
[Fri Apr 10 21:18:56.684157 2026] [:error] [pid 62884:tid 62905] [client 20.123.11.197:54728] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/axx.php"] [unique_id "adj4wOUCK1xrhnnmpo2BSQAAAs4"]
[Fri Apr 10 21:18:58.215332 2026] [:error] [pid 62819:tid 62840] [client 20.123.11.197:50487] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/axx.php"] [unique_id "adj4wvU20EyPf7NlsldmGgAAApI"]
[Fri Apr 10 21:18:58.856550 2026] [:error] [pid 62710:tid 62720] [client 20.123.11.197:35402] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/axx.php"] [unique_id "adj4wuME7qrf5xEWWJsRagAAAgc"]
[Fri Apr 10 21:19:00.557073 2026] [:error] [pid 13189:tid 13196] [client 20.123.11.197:25558] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/alfashell.php"] [unique_id "adj4xJAxiJKPums3eBC4KQAAAEQ"]
[Fri Apr 10 21:19:01.525937 2026] [:error] [pid 62769:tid 62778] [client 20.123.11.197:50523] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/alfashell.php"] [unique_id "adj4xcWsSnfLoB8ifjBMUgAAAkc"]
[Fri Apr 10 21:19:02.186957 2026] [:error] [pid 62769:tid 62795] [client 20.123.11.197:45608] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/alfashell.php"] [unique_id "adj4xsWsSnfLoB8ifjBMUwAAAlg"]
[Fri Apr 10 21:19:02.838192 2026] [:error] [pid 13189:tid 13213] [client 20.123.11.197:45609] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/alfashell.php"] [unique_id "adj4xpAxiJKPums3eBC4MQAAAFU"]
[Fri Apr 10 21:19:03.906875 2026] [:error] [pid 62819:tid 62834] [client 20.123.11.197:45616] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gettest.php"] [unique_id "adj4x_U20EyPf7NlsldmHwAAAow"]
[Fri Apr 10 21:19:04.930684 2026] [:error] [pid 62819:tid 62830] [client 20.123.11.197:29665] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gettest.php"] [unique_id "adj4yPU20EyPf7NlsldmIwAAAog"]
[Fri Apr 10 21:19:06.082677 2026] [:error] [pid 62819:tid 62831] [client 20.123.11.197:45606] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gettest.php"] [unique_id "adj4yvU20EyPf7NlsldmKAAAAok"]
[Fri Apr 10 21:19:07.761953 2026] [:error] [pid 13189:tid 13206] [client 20.123.11.197:38450] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gettest.php"] [unique_id "adj4y5AxiJKPums3eBC4OAAAAE4"]
[Fri Apr 10 21:19:08.483754 2026] [:error] [pid 62710:tid 62719] [client 20.123.11.197:54737] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/acp.php"] [unique_id "adj4zOME7qrf5xEWWJsRfgAAAgY"]
[Fri Apr 10 21:19:09.504693 2026] [:error] [pid 62710:tid 62732] [client 20.123.11.197:41515] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/acp.php"] [unique_id "adj4zeME7qrf5xEWWJsRgwAAAhM"]
[Fri Apr 10 21:19:10.656522 2026] [:error] [pid 13101:tid 13148] [client 20.123.11.197:54736] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/acp.php"] [unique_id "adj4zt8Ldw85818pj2rZ8QAAAI8"]
[Fri Apr 10 21:19:11.444745 2026] [:error] [pid 62769:tid 62782] [client 20.123.11.197:50485] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/acp.php"] [unique_id "adj4z8WsSnfLoB8ifjBMWQAAAks"]
[Fri Apr 10 21:19:12.327822 2026] [:error] [pid 13189:tid 13206] [client 20.123.11.197:6753] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file48.php"] [unique_id "adj40JAxiJKPums3eBC4QAAAAE4"]
[Fri Apr 10 21:19:13.043496 2026] [:error] [pid 13189:tid 13200] [client 20.123.11.197:34697] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file48.php"] [unique_id "adj40ZAxiJKPums3eBC4RQAAAEg"]
[Fri Apr 10 21:19:13.890712 2026] [:error] [pid 62769:tid 62790] [client 20.123.11.197:34728] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file48.php"] [unique_id "adj40cWsSnfLoB8ifjBMWgAAAlM"]
[Fri Apr 10 21:19:14.691665 2026] [:error] [pid 13189:tid 13208] [client 20.123.11.197:27588] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file48.php"] [unique_id "adj40pAxiJKPums3eBC4UAAAAFA"]
[Fri Apr 10 21:19:15.427380 2026] [:error] [pid 13100:tid 13109] [client 20.123.11.197:29636] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/g.php"] [unique_id "adj401zg-ZkZ0InWIP298AAAAQQ"]
[Fri Apr 10 21:19:16.555298 2026] [:error] [pid 63062:tid 63078] [client 20.123.11.197:50432] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/g.php"] [unique_id "adj41J2HtsmV85NqkMfrygAAA44"]
[Fri Apr 10 21:19:17.127081 2026] [:error] [pid 62769:tid 62794] [client 20.123.11.197:41580] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/g.php"] [unique_id "adj41cWsSnfLoB8ifjBMXwAAAlc"]
[Fri Apr 10 21:19:17.764622 2026] [:error] [pid 62769:tid 62779] [client 20.123.11.197:34749] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/g.php"] [unique_id "adj41cWsSnfLoB8ifjBMYQAAAkg"]
[Fri Apr 10 21:19:18.833431 2026] [:error] [pid 13100:tid 13111] [client 20.123.11.197:6735] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/"] [unique_id "adj41lzg-ZkZ0InWIP298QAAAQY"]
[Fri Apr 10 21:19:19.590661 2026] [:error] [pid 13100:tid 13105] [client 20.123.11.197:42847] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/"] [unique_id "adj411zg-ZkZ0InWIP298gAAAQA"]
[Fri Apr 10 21:19:20.465184 2026] [:error] [pid 62769:tid 62780] [client 20.123.11.197:50511] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/"] [unique_id "adj42MWsSnfLoB8ifjBMZwAAAkk"]
[Fri Apr 10 21:19:21.528647 2026] [:error] [pid 62769:tid 62791] [client 20.123.11.197:29634] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/"] [unique_id "adj42cWsSnfLoB8ifjBMcAAAAlQ"]
[Fri Apr 10 21:19:22.492764 2026] [proxy_fcgi:error] [pid 13100:tid 13108] [client 20.123.11.197:44083] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 21:19:22.749320 2026] [proxy_fcgi:error] [pid 13100:tid 13107] [client 20.123.11.197:44083] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 21:19:23.006141 2026] [proxy_fcgi:error] [pid 13100:tid 13128] [client 20.123.11.197:44083] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 21:19:23.260207 2026] [proxy_fcgi:error] [pid 13100:tid 13119] [client 20.123.11.197:44083] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 21:19:23.513204 2026] [proxy_fcgi:error] [pid 13100:tid 13110] [client 20.123.11.197:44083] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 21:19:23.774809 2026] [proxy_fcgi:error] [pid 13100:tid 13114] [client 20.123.11.197:44083] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 21:19:24.080282 2026] [proxy_fcgi:error] [pid 13100:tid 13116] [client 20.123.11.197:44083] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 21:19:24.334342 2026] [proxy_fcgi:error] [pid 13100:tid 13121] [client 20.123.11.197:44083] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 21:19:24.586347 2026] [proxy_fcgi:error] [pid 13100:tid 13120] [client 20.123.11.197:44083] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 21:19:24.896103 2026] [proxy_fcgi:error] [pid 13100:tid 13106] [client 20.123.11.197:44083] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 21:19:25.151305 2026] [proxy_fcgi:error] [pid 13100:tid 13124] [client 20.123.11.197:44083] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 21:19:25.552512 2026] [:error] [pid 13100:tid 13126] [client 20.123.11.197:44083] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/chosen.php"] [unique_id "adj43Vzg-ZkZ0InWIP2-AQAAARU"]
[Fri Apr 10 21:19:26.181577 2026] [:error] [pid 62710:tid 62723] [client 20.123.11.197:50453] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/chosen.php"] [unique_id "adj43uME7qrf5xEWWJsRlgAAAgo"]
[Fri Apr 10 21:19:26.838828 2026] [:error] [pid 62710:tid 62736] [client 20.123.11.197:50461] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/chosen.php"] [unique_id "adj43uME7qrf5xEWWJsRlwAAAhc"]
[Fri Apr 10 21:19:27.535635 2026] [:error] [pid 62769:tid 62790] [client 20.123.11.197:50531] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/chosen.php"] [unique_id "adj438WsSnfLoB8ifjBMdAAAAlM"]
[Fri Apr 10 22:03:28.988526 2026] [proxy_fcgi:error] [pid 63134:tid 63147] [client 20.166.29.204:13771] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 22:03:29.240640 2026] [proxy_fcgi:error] [pid 63134:tid 63158] [client 20.166.29.204:13771] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 22:03:29.492614 2026] [proxy_fcgi:error] [pid 63134:tid 63155] [client 20.166.29.204:13771] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 22:03:29.744669 2026] [proxy_fcgi:error] [pid 63134:tid 63153] [client 20.166.29.204:13771] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 22:03:29.995810 2026] [proxy_fcgi:error] [pid 63134:tid 63137] [client 20.166.29.204:13771] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 22:03:30.247138 2026] [proxy_fcgi:error] [pid 63134:tid 63160] [client 20.166.29.204:13771] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 22:03:30.498502 2026] [proxy_fcgi:error] [pid 63134:tid 63157] [client 20.166.29.204:13771] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 22:03:30.752675 2026] [proxy_fcgi:error] [pid 63134:tid 63142] [client 20.166.29.204:13771] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 22:03:31.004665 2026] [proxy_fcgi:error] [pid 63134:tid 63149] [client 20.166.29.204:13771] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 22:03:31.257372 2026] [proxy_fcgi:error] [pid 63134:tid 63159] [client 20.166.29.204:13771] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 22:03:31.505009 2026] [:error] [pid 63134:tid 63158] [client 20.166.29.204:13771] [client 20.166.29.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/option.php"] [unique_id "adkDM9FALqPDwWi6eJKs7gAAA9U"]
[Fri Apr 10 22:03:32.000772 2026] [:error] [pid 63062:tid 63070] [client 20.166.29.204:13785] [client 20.166.29.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/option.php"] [unique_id "adkDM52HtsmV85NqkMf3hgAAA4Y"]
[Fri Apr 10 22:03:32.500560 2026] [:error] [pid 63062:tid 63077] [client 20.166.29.204:13786] [client 20.166.29.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/option.php"] [unique_id "adkDNJ2HtsmV85NqkMf3iQAAA40"]
[Fri Apr 10 22:03:32.998953 2026] [:error] [pid 63134:tid 63148] [client 20.166.29.204:13773] [client 20.166.29.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/option.php"] [unique_id "adkDNNFALqPDwWi6eJKs-AAAA8s"]
[Fri Apr 10 22:03:33.497056 2026] [:error] [pid 62769:tid 62789] [client 20.166.29.204:13812] [client 20.166.29.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/OK.php"] [unique_id "adkDNcWsSnfLoB8ifjBvkgAAAlI"]
[Fri Apr 10 22:03:33.996740 2026] [:error] [pid 62769:tid 62783] [client 20.166.29.204:13036] [client 20.166.29.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/OK.php"] [unique_id "adkDNcWsSnfLoB8ifjBvlAAAAkw"]
[Fri Apr 10 22:03:35.507793 2026] [:error] [pid 63134:tid 63155] [client 20.166.29.204:13000] [client 20.166.29.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/OK.php"] [unique_id "adkDN9FALqPDwWi6eJKtAAAAA9I"]
[Fri Apr 10 22:03:36.003438 2026] [:error] [pid 13189:tid 13205] [client 20.166.29.204:13768] [client 20.166.29.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/OK.php"] [unique_id "adkDOJAxiJKPums3eBDPTwAAAE0"]
[Fri Apr 10 22:03:36.511320 2026] [:error] [pid 62651:tid 62654] [client 20.166.29.204:9170] [client 20.166.29.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ss.php"] [unique_id "adkDODbAH0le57SIaqwpuQAAAcE"]
[Fri Apr 10 22:03:37.008549 2026] [:error] [pid 13189:tid 13215] [client 20.166.29.204:13002] [client 20.166.29.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ss.php"] [unique_id "adkDOZAxiJKPums3eBDPWQAAAFc"]
[Fri Apr 10 22:03:37.520037 2026] [:error] [pid 13100:tid 13115] [client 20.166.29.204:13767] [client 20.166.29.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ss.php"] [unique_id "adkDOVzg-ZkZ0InWIP3DqQAAAQo"]
[Fri Apr 10 22:03:38.021128 2026] [:error] [pid 13100:tid 13110] [client 20.166.29.204:13809] [client 20.166.29.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ss.php"] [unique_id "adkDOlzg-ZkZ0InWIP3DrQAAAQU"]
[Fri Apr 10 22:03:38.515720 2026] [:error] [pid 62769:tid 62779] [client 20.166.29.204:13017] [client 20.166.29.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/F1jgmosvPbq.php"] [unique_id "adkDOsWsSnfLoB8ifjBvmAAAAkg"]
[Fri Apr 10 22:03:39.013621 2026] [:error] [pid 63134:tid 63150] [client 20.166.29.204:13815] [client 20.166.29.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/F1jgmosvPbq.php"] [unique_id "adkDO9FALqPDwWi6eJKtBAAAA80"]
[Fri Apr 10 22:03:39.520346 2026] [:error] [pid 13100:tid 13116] [client 20.166.29.204:13004] [client 20.166.29.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/F1jgmosvPbq.php"] [unique_id "adkDO1zg-ZkZ0InWIP3DtQAAAQs"]
[Fri Apr 10 22:03:40.017409 2026] [:error] [pid 62819:tid 62826] [client 20.166.29.204:12998] [client 20.166.29.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/F1jgmosvPbq.php"] [unique_id "adkDPPU20EyPf7NlsldvegAAAoQ"]
[Fri Apr 10 22:03:40.518471 2026] [:error] [pid 62819:tid 62843] [client 20.166.29.204:13018] [client 20.166.29.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/v1Cd9rWaZMx.php"] [unique_id "adkDPPU20EyPf7NlsldvewAAApU"]
[Fri Apr 10 22:03:41.028794 2026] [:error] [pid 13189:tid 13193] [client 20.166.29.204:13003] [client 20.166.29.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/v1Cd9rWaZMx.php"] [unique_id "adkDPZAxiJKPums3eBDPaAAAAEE"]
[Fri Apr 10 22:03:41.523007 2026] [:error] [pid 13100:tid 13123] [client 20.166.29.204:13792] [client 20.166.29.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/v1Cd9rWaZMx.php"] [unique_id "adkDPVzg-ZkZ0InWIP3DvgAAARI"]
[Fri Apr 10 22:03:42.018714 2026] [:error] [pid 13189:tid 13202] [client 20.166.29.204:13016] [client 20.166.29.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/v1Cd9rWaZMx.php"] [unique_id "adkDPpAxiJKPums3eBDPbQAAAEo"]
[Fri Apr 10 22:03:42.513129 2026] [:error] [pid 13189:tid 13201] [client 20.166.29.204:13798] [client 20.166.29.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/NexusLeads.php"] [unique_id "adkDPpAxiJKPums3eBDPbwAAAEk"]
[Fri Apr 10 22:03:43.005778 2026] [:error] [pid 62884:tid 62899] [client 20.166.29.204:13817] [client 20.166.29.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/NexusLeads.php"] [unique_id "adkDP-UCK1xrhnnmpo2JCQAAAsg"]
[Fri Apr 10 22:03:43.507871 2026] [:error] [pid 62819:tid 62841] [client 20.166.29.204:13804] [client 20.166.29.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/NexusLeads.php"] [unique_id "adkDP_U20EyPf7NlsldvggAAApM"]
[Fri Apr 10 22:03:44.001913 2026] [:error] [pid 62651:tid 62663] [client 20.166.29.204:13805] [client 20.166.29.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/NexusLeads.php"] [unique_id "adkDQDbAH0le57SIaqwpvAAAAco"]
[Fri Apr 10 22:03:44.505821 2026] [:error] [pid 62769:tid 62793] [client 20.166.29.204:9169] [client 20.166.29.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rfzhh.php"] [unique_id "adkDQMWsSnfLoB8ifjBvqQAAAlY"]
[Fri Apr 10 22:03:44.998306 2026] [:error] [pid 63134:tid 63157] [client 20.166.29.204:9178] [client 20.166.29.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rfzhh.php"] [unique_id "adkDQNFALqPDwWi6eJKtFQAAA9Q"]
[Fri Apr 10 22:03:45.493751 2026] [:error] [pid 63062:tid 63070] [client 20.166.29.204:13811] [client 20.166.29.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rfzhh.php"] [unique_id "adkDQZ2HtsmV85NqkMf3lgAAA4Y"]
[Fri Apr 10 22:03:45.993386 2026] [:error] [pid 13189:tid 13210] [client 20.166.29.204:13762] [client 20.166.29.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rfzhh.php"] [unique_id "adkDQZAxiJKPums3eBDPewAAAFI"]
[Fri Apr 10 22:03:46.501255 2026] [:error] [pid 63062:tid 63076] [client 20.166.29.204:13765] [client 20.166.29.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/plugin-wp.php"] [unique_id "adkDQp2HtsmV85NqkMf3ogAAA4w"]
[Fri Apr 10 22:03:46.995859 2026] [:error] [pid 63134:tid 63158] [client 20.166.29.204:13041] [client 20.166.29.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/plugin-wp.php"] [unique_id "adkDQtFALqPDwWi6eJKtGgAAA9U"]
[Fri Apr 10 22:03:48.504470 2026] [:error] [pid 13189:tid 13215] [client 20.166.29.204:13048] [client 20.166.29.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/plugin-wp.php"] [unique_id "adkDRJAxiJKPums3eBDPjQAAAFc"]
[Fri Apr 10 22:03:49.000390 2026] [:error] [pid 13189:tid 13197] [client 20.166.29.204:9172] [client 20.166.29.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/plugin-wp.php"] [unique_id "adkDRJAxiJKPums3eBDPlAAAAEU"]
[Fri Apr 10 22:03:49.495715 2026] [:error] [pid 62884:tid 62907] [client 20.166.29.204:9167] [client 20.166.29.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/uplozyu.php"] [unique_id "adkDReUCK1xrhnnmpo2JDwAAAtA"]
[Fri Apr 10 22:03:49.988352 2026] [:error] [pid 13189:tid 13216] [client 20.166.29.204:13760] [client 20.166.29.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/uplozyu.php"] [unique_id "adkDRZAxiJKPums3eBDPmgAAAFg"]
[Fri Apr 10 22:03:50.483373 2026] [:error] [pid 13189:tid 13210] [client 20.166.29.204:13024] [client 20.166.29.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/uplozyu.php"] [unique_id "adkDRpAxiJKPums3eBDPngAAAFI"]
[Fri Apr 10 22:03:51.986996 2026] [:error] [pid 13189:tid 13197] [client 20.166.29.204:13819] [client 20.166.29.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/uplozyu.php"] [unique_id "adkDR5AxiJKPums3eBDPogAAAEU"]
[Fri Apr 10 22:03:52.484367 2026] [:error] [pid 62769:tid 62771] [client 20.166.29.204:13001] [client 20.166.29.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/4oivIQALaOZ.php"] [unique_id "adkDSMWsSnfLoB8ifjBvrAAAAkA"]
[Fri Apr 10 22:03:52.978957 2026] [:error] [pid 62769:tid 62782] [client 20.166.29.204:13777] [client 20.166.29.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/4oivIQALaOZ.php"] [unique_id "adkDSMWsSnfLoB8ifjBvrgAAAks"]
[Fri Apr 10 22:03:53.473728 2026] [:error] [pid 62819:tid 62827] [client 20.166.29.204:12996] [client 20.166.29.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/4oivIQALaOZ.php"] [unique_id "adkDSfU20EyPf7NlsldvkAAAAoU"]
[Fri Apr 10 22:03:54.986925 2026] [:error] [pid 62884:tid 62905] [client 20.166.29.204:13801] [client 20.166.29.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/4oivIQALaOZ.php"] [unique_id "adkDSuUCK1xrhnnmpo2JGAAAAs4"]
[Fri Apr 10 22:03:55.481473 2026] [:error] [pid 62651:tid 62658] [client 20.166.29.204:13009] [client 20.166.29.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lpktuneq.php"] [unique_id "adkDSzbAH0le57SIaqwpzAAAAcU"]
[Fri Apr 10 22:03:55.980886 2026] [:error] [pid 62819:tid 62836] [client 20.166.29.204:13034] [client 20.166.29.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lpktuneq.php"] [unique_id "adkDS_U20EyPf7NlsldvlgAAAo4"]
[Fri Apr 10 22:03:56.484038 2026] [:error] [pid 62819:tid 62837] [client 20.166.29.204:13802] [client 20.166.29.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lpktuneq.php"] [unique_id "adkDTPU20EyPf7NlsldvlwAAAo8"]
[Fri Apr 10 22:03:56.982281 2026] [:error] [pid 13189:tid 13196] [client 20.166.29.204:9187] [client 20.166.29.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lpktuneq.php"] [unique_id "adkDTJAxiJKPums3eBDPsQAAAEQ"]
[Fri Apr 10 22:03:57.483390 2026] [:error] [pid 62769:tid 62788] [client 20.166.29.204:9152] [client 20.166.29.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/5cnobsvIfGg.php"] [unique_id "adkDTcWsSnfLoB8ifjBvtwAAAlE"]
[Fri Apr 10 22:03:57.978983 2026] [:error] [pid 13101:tid 13147] [client 20.166.29.204:13043] [client 20.166.29.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/5cnobsvIfGg.php"] [unique_id "adkDTd8Ldw85818pj2rtTQAAAI4"]
[Fri Apr 10 22:03:58.476140 2026] [:error] [pid 13101:tid 13155] [client 20.166.29.204:9186] [client 20.166.29.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/5cnobsvIfGg.php"] [unique_id "adkDTt8Ldw85818pj2rtUQAAAJY"]
[Fri Apr 10 22:03:58.972933 2026] [:error] [pid 13101:tid 13149] [client 20.166.29.204:9175] [client 20.166.29.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/5cnobsvIfGg.php"] [unique_id "adkDTt8Ldw85818pj2rtVwAAAJA"]
[Fri Apr 10 22:03:59.469949 2026] [:error] [pid 13101:tid 13150] [client 20.166.29.204:13800] [client 20.166.29.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-widgets.php"] [unique_id "adkDT98Ldw85818pj2rtWgAAAJE"]
[Fri Apr 10 22:03:59.974121 2026] [:error] [pid 62769:tid 62792] [client 20.166.29.204:13775] [client 20.166.29.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-widgets.php"] [unique_id "adkDT8WsSnfLoB8ifjBvxAAAAlU"]
[Fri Apr 10 22:04:00.481648 2026] [:error] [pid 13189:tid 13193] [client 20.166.29.204:9095] [client 20.166.29.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-widgets.php"] [unique_id "adkDUJAxiJKPums3eBDPtQAAAEE"]
[Fri Apr 10 22:04:00.986816 2026] [:error] [pid 62819:tid 62844] [client 20.166.29.204:13794] [client 20.166.29.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-widgets.php"] [unique_id "adkDUPU20EyPf7NlsldvmQAAApY"]
[Fri Apr 10 22:04:01.481886 2026] [:error] [pid 13101:tid 13148] [client 20.166.29.204:13053] [client 20.166.29.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tsconfig.php"] [unique_id "adkDUd8Ldw85818pj2rtXwAAAI8"]
[Fri Apr 10 22:04:01.980394 2026] [:error] [pid 13189:tid 13211] [client 20.166.29.204:13821] [client 20.166.29.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tsconfig.php"] [unique_id "adkDUZAxiJKPums3eBDPuwAAAFM"]
[Fri Apr 10 22:04:02.486908 2026] [:error] [pid 13189:tid 13209] [client 20.166.29.204:13035] [client 20.166.29.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tsconfig.php"] [unique_id "adkDUpAxiJKPums3eBDPvgAAAFE"]
[Fri Apr 10 22:04:02.982061 2026] [:error] [pid 62769:tid 62781] [client 20.166.29.204:13776] [client 20.166.29.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tsconfig.php"] [unique_id "adkDUsWsSnfLoB8ifjBv1gAAAko"]
[Fri Apr 10 22:04:03.483043 2026] [:error] [pid 62710:tid 62730] [client 20.166.29.204:13047] [client 20.166.29.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ptFWN5XHUb1.php"] [unique_id "adkDU-ME7qrf5xEWWJsjHgAAAhE"]
[Fri Apr 10 22:04:03.988000 2026] [:error] [pid 62769:tid 62771] [client 20.166.29.204:13795] [client 20.166.29.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ptFWN5XHUb1.php"] [unique_id "adkDU8WsSnfLoB8ifjBv2wAAAkA"]
[Fri Apr 10 22:04:04.484329 2026] [:error] [pid 62769:tid 62779] [client 20.166.29.204:13044] [client 20.166.29.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ptFWN5XHUb1.php"] [unique_id "adkDVMWsSnfLoB8ifjBv3gAAAkg"]
[Fri Apr 10 22:04:04.981434 2026] [:error] [pid 13101:tid 13140] [client 20.166.29.204:13788] [client 20.166.29.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ptFWN5XHUb1.php"] [unique_id "adkDVN8Ldw85818pj2rtZQAAAIc"]
[Fri Apr 10 22:04:05.477121 2026] [:error] [pid 62769:tid 62774] [client 20.166.29.204:9119] [client 20.166.29.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/YpWD4kv2sPG.php"] [unique_id "adkDVcWsSnfLoB8ifjBv5gAAAkM"]
[Fri Apr 10 22:04:05.968288 2026] [:error] [pid 13189:tid 13192] [client 20.166.29.204:13770] [client 20.166.29.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/YpWD4kv2sPG.php"] [unique_id "adkDVZAxiJKPums3eBDPxwAAAEA"]
[Fri Apr 10 22:04:06.479213 2026] [:error] [pid 13101:tid 13156] [client 20.166.29.204:9154] [client 20.166.29.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/YpWD4kv2sPG.php"] [unique_id "adkDVt8Ldw85818pj2rtZwAAAJc"]
[Fri Apr 10 22:04:06.991423 2026] [:error] [pid 13101:tid 13154] [client 20.166.29.204:13045] [client 20.166.29.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/YpWD4kv2sPG.php"] [unique_id "adkDVt8Ldw85818pj2rtaQAAAJU"]
[Fri Apr 10 22:04:07.486996 2026] [:error] [pid 63134:tid 63156] [client 20.166.29.204:13780] [client 20.166.29.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/turbo.php"] [unique_id "adkDV9FALqPDwWi6eJKtKwAAA9M"]
[Fri Apr 10 22:04:07.980693 2026] [:error] [pid 62884:tid 62906] [client 20.166.29.204:13055] [client 20.166.29.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/turbo.php"] [unique_id "adkDV-UCK1xrhnnmpo2JIQAAAs8"]
[Fri Apr 10 22:04:08.482280 2026] [:error] [pid 62819:tid 62827] [client 20.166.29.204:9136] [client 20.166.29.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/turbo.php"] [unique_id "adkDWPU20EyPf7NlsldvnAAAAoU"]
[Fri Apr 10 22:04:08.977627 2026] [:error] [pid 13189:tid 13196] [client 20.166.29.204:12992] [client 20.166.29.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/turbo.php"] [unique_id "adkDWJAxiJKPums3eBDPzQAAAEQ"]
[Fri Apr 10 22:04:09.471528 2026] [:error] [pid 62884:tid 62912] [client 20.166.29.204:9199] [client 20.166.29.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/small.php"] [unique_id "adkDWeUCK1xrhnnmpo2JJAAAAtU"]
[Fri Apr 10 22:04:09.967824 2026] [:error] [pid 63134:tid 63150] [client 20.166.29.204:9135] [client 20.166.29.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/small.php"] [unique_id "adkDWdFALqPDwWi6eJKtMgAAA80"]
[Fri Apr 10 22:04:11.038981 2026] [:error] [pid 13189:tid 13199] [client 20.166.29.204:9182] [client 20.166.29.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/small.php"] [unique_id "adkDW5AxiJKPums3eBDPzwAAAEc"]
[Fri Apr 10 22:04:11.556527 2026] [:error] [pid 13101:tid 13152] [client 20.166.29.204:12995] [client 20.166.29.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/small.php"] [unique_id "adkDW98Ldw85818pj2rtbgAAAJM"]
[Fri Apr 10 22:04:12.051299 2026] [:error] [pid 62710:tid 62715] [client 20.166.29.204:9163] [client 20.166.29.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/SE6yfkFKuQA.php"] [unique_id "adkDXOME7qrf5xEWWJsjLAAAAgI"]
[Fri Apr 10 22:04:12.561356 2026] [:error] [pid 63134:tid 63139] [client 20.166.29.204:13816] [client 20.166.29.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/SE6yfkFKuQA.php"] [unique_id "adkDXNFALqPDwWi6eJKtNgAAA8I"]
[Fri Apr 10 22:04:13.064334 2026] [:error] [pid 62710:tid 62728] [client 20.166.29.204:13006] [client 20.166.29.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/SE6yfkFKuQA.php"] [unique_id "adkDXeME7qrf5xEWWJsjMAAAAg8"]
[Fri Apr 10 22:04:13.561959 2026] [:error] [pid 62769:tid 62775] [client 20.166.29.204:13791] [client 20.166.29.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/SE6yfkFKuQA.php"] [unique_id "adkDXcWsSnfLoB8ifjBwCgAAAkQ"]
[Fri Apr 10 22:04:14.060763 2026] [:error] [pid 63062:tid 63087] [client 20.166.29.204:13054] [client 20.166.29.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/6Vtfo6i9f2.php"] [unique_id "adkDXp2HtsmV85NqkMf3rQAAA5c"]
[Fri Apr 10 22:04:14.565151 2026] [:error] [pid 62769:tid 62772] [client 20.166.29.204:13027] [client 20.166.29.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/6Vtfo6i9f2.php"] [unique_id "adkDXsWsSnfLoB8ifjBwDgAAAkE"]
[Fri Apr 10 22:04:15.061645 2026] [:error] [pid 62769:tid 62790] [client 20.166.29.204:13031] [client 20.166.29.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/6Vtfo6i9f2.php"] [unique_id "adkDX8WsSnfLoB8ifjBwEAAAAlM"]
[Fri Apr 10 22:04:15.566456 2026] [:error] [pid 62710:tid 62716] [client 20.166.29.204:9155] [client 20.166.29.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/6Vtfo6i9f2.php"] [unique_id "adkDX-ME7qrf5xEWWJsjOQAAAgM"]
[Fri Apr 10 22:04:16.062452 2026] [:error] [pid 13189:tid 13201] [client 20.166.29.204:13014] [client 20.166.29.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/veoblmpa.php"] [unique_id "adkDYJAxiJKPums3eBDP1QAAAEk"]
[Fri Apr 10 22:04:16.559903 2026] [:error] [pid 13101:tid 13148] [client 20.166.29.204:9088] [client 20.166.29.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/veoblmpa.php"] [unique_id "adkDYN8Ldw85818pj2rtewAAAI8"]
[Fri Apr 10 22:04:17.055775 2026] [:error] [pid 63134:tid 63156] [client 20.166.29.204:9206] [client 20.166.29.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/veoblmpa.php"] [unique_id "adkDYdFALqPDwWi6eJKtOwAAA9M"]
[Fri Apr 10 22:04:17.555076 2026] [:error] [pid 62710:tid 62715] [client 20.166.29.204:9161] [client 20.166.29.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/veoblmpa.php"] [unique_id "adkDYeME7qrf5xEWWJsjPgAAAgI"]
[Fri Apr 10 22:04:18.065072 2026] [:error] [pid 13100:tid 13106] [client 20.166.29.204:9168] [client 20.166.29.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class-wp-pagebuilders-1QlZPC.php"] [unique_id "adkDYlzg-ZkZ0InWIP3D3gAAAQE"]
[Fri Apr 10 22:04:18.557317 2026] [:error] [pid 13100:tid 13112] [client 20.166.29.204:9101] [client 20.166.29.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class-wp-pagebuilders-1QlZPC.php"] [unique_id "adkDYlzg-ZkZ0InWIP3D4AAAAQc"]
[Fri Apr 10 22:04:19.051163 2026] [:error] [pid 63062:tid 63082] [client 20.166.29.204:9097] [client 20.166.29.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class-wp-pagebuilders-1QlZPC.php"] [unique_id "adkDY52HtsmV85NqkMf3vgAAA5I"]
[Fri Apr 10 22:04:19.547576 2026] [:error] [pid 13101:tid 13153] [client 20.166.29.204:9098] [client 20.166.29.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class-wp-pagebuilders-1QlZPC.php"] [unique_id "adkDY98Ldw85818pj2rtggAAAJQ"]
[Fri Apr 10 22:04:20.040897 2026] [:error] [pid 13101:tid 13137] [client 20.166.29.204:9108] [client 20.166.29.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/levyzxsb.php"] [unique_id "adkDZN8Ldw85818pj2rtgwAAAIQ"]
[Fri Apr 10 22:04:20.534853 2026] [:error] [pid 63062:tid 63070] [client 20.166.29.204:9184] [client 20.166.29.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/levyzxsb.php"] [unique_id "adkDZJ2HtsmV85NqkMf3xgAAA4Y"]
[Fri Apr 10 22:04:22.039890 2026] [:error] [pid 62769:tid 62778] [client 20.166.29.204:13028] [client 20.166.29.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/levyzxsb.php"] [unique_id "adkDZsWsSnfLoB8ifjBwHwAAAkc"]
[Fri Apr 10 22:04:22.547320 2026] [:error] [pid 13101:tid 13149] [client 20.166.29.204:13822] [client 20.166.29.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/levyzxsb.php"] [unique_id "adkDZt8Ldw85818pj2rthgAAAJA"]
[Fri Apr 10 22:04:23.044283 2026] [:error] [pid 13101:tid 13145] [client 20.166.29.204:9134] [client 20.166.29.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/HtQmJOArI4R.php"] [unique_id "adkDZ98Ldw85818pj2rtiQAAAIw"]
[Fri Apr 10 22:04:23.549768 2026] [:error] [pid 13189:tid 13216] [client 20.166.29.204:13039] [client 20.166.29.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/HtQmJOArI4R.php"] [unique_id "adkDZ5AxiJKPums3eBDP6AAAAFg"]
[Fri Apr 10 22:04:24.055068 2026] [:error] [pid 13101:tid 13133] [client 20.166.29.204:13042] [client 20.166.29.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/HtQmJOArI4R.php"] [unique_id "adkDaN8Ldw85818pj2rtjgAAAIA"]
[Fri Apr 10 22:04:25.562794 2026] [:error] [pid 13101:tid 13144] [client 20.166.29.204:9190] [client 20.166.29.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/HtQmJOArI4R.php"] [unique_id "adkDad8Ldw85818pj2rtkAAAAIs"]
[Fri Apr 10 22:04:26.064014 2026] [:error] [pid 62769:tid 62793] [client 20.166.29.204:9153] [client 20.166.29.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2whl5XBpvzE.php"] [unique_id "adkDasWsSnfLoB8ifjBwLgAAAlY"]
[Fri Apr 10 22:04:26.567618 2026] [:error] [pid 13100:tid 13108] [client 20.166.29.204:9094] [client 20.166.29.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2whl5XBpvzE.php"] [unique_id "adkDalzg-ZkZ0InWIP3D6QAAAQM"]
[Fri Apr 10 22:04:27.063726 2026] [:error] [pid 13100:tid 13121] [client 20.166.29.204:13782] [client 20.166.29.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2whl5XBpvzE.php"] [unique_id "adkDa1zg-ZkZ0InWIP3D6wAAARA"]
[Fri Apr 10 22:04:27.600802 2026] [:error] [pid 62769:tid 62776] [client 20.166.29.204:9177] [client 20.166.29.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2whl5XBpvzE.php"] [unique_id "adkDa8WsSnfLoB8ifjBwOgAAAkU"]
[Fri Apr 10 22:04:28.095584 2026] [:error] [pid 62769:tid 62792] [client 20.166.29.204:13806] [client 20.166.29.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jtMi25FrDCR.php"] [unique_id "adkDbMWsSnfLoB8ifjBwQAAAAlU"]
[Fri Apr 10 22:04:28.598352 2026] [:error] [pid 62769:tid 62790] [client 20.166.29.204:9025] [client 20.166.29.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jtMi25FrDCR.php"] [unique_id "adkDbMWsSnfLoB8ifjBwRgAAAlM"]
[Fri Apr 10 22:04:29.092249 2026] [:error] [pid 62769:tid 62784] [client 20.166.29.204:9200] [client 20.166.29.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jtMi25FrDCR.php"] [unique_id "adkDbcWsSnfLoB8ifjBwTQAAAk0"]
[Fri Apr 10 22:04:29.584636 2026] [:error] [pid 62651:tid 62653] [client 20.166.29.204:9143] [client 20.166.29.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jtMi25FrDCR.php"] [unique_id "adkDbTbAH0le57SIaqwp4AAAAcA"]
[Fri Apr 10 22:04:30.077193 2026] [:error] [pid 13189:tid 13197] [client 20.166.29.204:9105] [client 20.166.29.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/avTptOckufV.php"] [unique_id "adkDbpAxiJKPums3eBDP7QAAAEU"]
[Fri Apr 10 22:04:30.570460 2026] [:error] [pid 13189:tid 13213] [client 20.166.29.204:9202] [client 20.166.29.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/avTptOckufV.php"] [unique_id "adkDbpAxiJKPums3eBDP8AAAAFU"]
[Fri Apr 10 22:04:31.113438 2026] [proxy_fcgi:error] [pid 13189:tid 13199] [client 20.166.29.204:9131] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 22:04:31.362254 2026] [proxy_fcgi:error] [pid 13189:tid 13215] [client 20.166.29.204:9131] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 22:04:31.610365 2026] [proxy_fcgi:error] [pid 13189:tid 13209] [client 20.166.29.204:9131] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 22:04:31.859865 2026] [proxy_fcgi:error] [pid 13189:tid 13192] [client 20.166.29.204:9131] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 22:04:32.109480 2026] [proxy_fcgi:error] [pid 13189:tid 13199] [client 20.166.29.204:9131] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 22:04:32.359521 2026] [proxy_fcgi:error] [pid 13189:tid 13215] [client 20.166.29.204:9131] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 22:04:32.609003 2026] [proxy_fcgi:error] [pid 13189:tid 13207] [client 20.166.29.204:9131] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 22:04:32.858791 2026] [proxy_fcgi:error] [pid 13189:tid 13200] [client 20.166.29.204:9131] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 22:04:33.111806 2026] [proxy_fcgi:error] [pid 13189:tid 13209] [client 20.166.29.204:9131] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 22:04:33.363069 2026] [proxy_fcgi:error] [pid 13189:tid 13197] [client 20.166.29.204:9131] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 22:04:33.616867 2026] [proxy_fcgi:error] [pid 13189:tid 13193] [client 20.166.29.204:9131] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 22:04:33.862567 2026] [:error] [pid 13189:tid 13198] [client 20.166.29.204:9131] [client 20.166.29.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class-wp-more.php"] [unique_id "adkDcZAxiJKPums3eBDQHgAAAEY"]
[Fri Apr 10 22:04:34.363167 2026] [:error] [pid 62769:tid 62776] [client 20.166.29.204:9176] [client 20.166.29.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class-wp-more.php"] [unique_id "adkDcsWsSnfLoB8ifjBwXAAAAkU"]
[Fri Apr 10 22:04:34.867856 2026] [:error] [pid 62651:tid 62658] [client 20.166.29.204:9102] [client 20.166.29.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class-wp-more.php"] [unique_id "adkDcjbAH0le57SIaqwp9QAAAcU"]
[Fri Apr 10 22:04:35.370806 2026] [:error] [pid 62769:tid 62773] [client 20.166.29.204:9160] [client 20.166.29.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class-wp-more.php"] [unique_id "adkDc8WsSnfLoB8ifjBwZQAAAkI"]
[Fri Apr 10 22:04:35.873633 2026] [:error] [pid 62884:tid 62903] [client 20.166.29.204:9104] [client 20.166.29.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zMjcvbswY.php"] [unique_id "adkDc-UCK1xrhnnmpo2JQQAAAsw"]
[Fri Apr 10 22:04:36.369016 2026] [:error] [pid 13189:tid 13210] [client 20.166.29.204:9156] [client 20.166.29.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zMjcvbswY.php"] [unique_id "adkDdJAxiJKPums3eBDQJQAAAFI"]
[Fri Apr 10 22:04:36.860723 2026] [:error] [pid 13189:tid 13212] [client 20.166.29.204:9214] [client 20.166.29.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zMjcvbswY.php"] [unique_id "adkDdJAxiJKPums3eBDQKAAAAFQ"]
[Fri Apr 10 22:04:38.358161 2026] [:error] [pid 63062:tid 63084] [client 20.166.29.204:9197] [client 20.166.29.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zMjcvbswY.php"] [unique_id "adkDdp2HtsmV85NqkMf33AAAA5Q"]
[Fri Apr 10 22:04:38.862691 2026] [:error] [pid 63062:tid 63081] [client 20.166.29.204:9130] [client 20.166.29.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/4SnNfidKMe3.php"] [unique_id "adkDdp2HtsmV85NqkMf33gAAA5E"]
[Fri Apr 10 22:04:39.358059 2026] [:error] [pid 63062:tid 63079] [client 20.166.29.204:13012] [client 20.166.29.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/4SnNfidKMe3.php"] [unique_id "adkDd52HtsmV85NqkMf33wAAA48"]
[Fri Apr 10 22:04:39.894301 2026] [:error] [pid 62769:tid 62791] [client 20.166.29.204:13029] [client 20.166.29.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/4SnNfidKMe3.php"] [unique_id "adkDd8WsSnfLoB8ifjBwfQAAAlQ"]
[Fri Apr 10 22:04:41.412911 2026] [:error] [pid 62710:tid 62737] [client 20.166.29.204:9204] [client 20.166.29.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/4SnNfidKMe3.php"] [unique_id "adkDeeME7qrf5xEWWJsjXAAAAhg"]
[Fri Apr 10 23:23:55.180955 2026] [proxy_fcgi:error] [pid 62710:tid 62737] [client 74.248.123.16:64782] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 23:23:55.437517 2026] [proxy_fcgi:error] [pid 62710:tid 62720] [client 74.248.123.16:64782] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 23:23:55.693915 2026] [proxy_fcgi:error] [pid 62710:tid 62723] [client 74.248.123.16:64782] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 23:23:55.949331 2026] [proxy_fcgi:error] [pid 62710:tid 62721] [client 74.248.123.16:64782] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 23:23:56.206292 2026] [proxy_fcgi:error] [pid 62710:tid 62728] [client 74.248.123.16:64782] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 23:23:56.463669 2026] [proxy_fcgi:error] [pid 62710:tid 62734] [client 74.248.123.16:64782] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 23:23:56.718535 2026] [proxy_fcgi:error] [pid 62710:tid 62720] [client 74.248.123.16:64782] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 23:23:56.974974 2026] [proxy_fcgi:error] [pid 62710:tid 62731] [client 74.248.123.16:64782] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 23:23:57.232610 2026] [proxy_fcgi:error] [pid 62710:tid 62725] [client 74.248.123.16:64782] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 23:23:57.490045 2026] [proxy_fcgi:error] [pid 62710:tid 62717] [client 74.248.123.16:64782] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 23:23:57.744621 2026] [:error] [pid 62710:tid 62722] [client 74.248.123.16:64782] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zc-104.php"] [unique_id "adkWDeME7qrf5xEWWJtEdAAAAgk"]
[Fri Apr 10 23:23:58.519499 2026] [:error] [pid 62884:tid 62914] [client 74.248.123.16:63658] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zc-104.php"] [unique_id "adkWDuUCK1xrhnnmpo2Z0gAAAtc"]
[Fri Apr 10 23:23:59.038175 2026] [:error] [pid 63134:tid 63139] [client 74.248.123.16:61906] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zc-104.php"] [unique_id "adkWD9FALqPDwWi6eJLHiwAAA8I"]
[Fri Apr 10 23:23:59.555533 2026] [:error] [pid 13101:tid 13153] [client 74.248.123.16:64824] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zc-104.php"] [unique_id "adkWD98Ldw85818pj2oczQAAAJQ"]
[Fri Apr 10 23:24:00.069692 2026] [:error] [pid 63062:tid 63072] [client 74.248.123.16:63634] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rzki.php"] [unique_id "adkWEJ2HtsmV85NqkMcO4QAAA4g"]
[Fri Apr 10 23:24:00.622716 2026] [:error] [pid 62769:tid 62793] [client 74.248.123.16:61928] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rzki.php"] [unique_id "adkWEMWsSnfLoB8ifjC7cQAAAlY"]
[Fri Apr 10 23:24:01.136409 2026] [:error] [pid 62769:tid 62776] [client 74.248.123.16:64798] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rzki.php"] [unique_id "adkWEcWsSnfLoB8ifjC7dgAAAkU"]
[Fri Apr 10 23:24:01.650102 2026] [:error] [pid 13189:tid 13207] [client 74.248.123.16:61926] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rzki.php"] [unique_id "adkWEZAxiJKPums3eBAGrgAAAE8"]
[Fri Apr 10 23:24:02.159515 2026] [:error] [pid 13101:tid 13144] [client 74.248.123.16:63670] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xsas.php"] [unique_id "adkWEt8Ldw85818pj2oc3gAAAIs"]
[Fri Apr 10 23:24:02.668754 2026] [:error] [pid 62769:tid 62792] [client 74.248.123.16:63532] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xsas.php"] [unique_id "adkWEsWsSnfLoB8ifjC7ewAAAlU"]
[Fri Apr 10 23:24:03.197293 2026] [:error] [pid 13189:tid 13213] [client 74.248.123.16:61933] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xsas.php"] [unique_id "adkWE5AxiJKPums3eBAGsgAAAFU"]
[Fri Apr 10 23:24:03.710258 2026] [:error] [pid 62769:tid 62776] [client 74.248.123.16:63663] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xsas.php"] [unique_id "adkWE8WsSnfLoB8ifjC7gAAAAkU"]
[Fri Apr 10 23:24:04.247900 2026] [:error] [pid 63062:tid 63088] [client 74.248.123.16:65024] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/d12.php"] [unique_id "adkWFJ2HtsmV85NqkMcO_AAAA5g"]
[Fri Apr 10 23:24:04.763142 2026] [:error] [pid 62769:tid 62795] [client 74.248.123.16:63672] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/d12.php"] [unique_id "adkWFMWsSnfLoB8ifjC7hwAAAlg"]
[Fri Apr 10 23:24:05.279443 2026] [:error] [pid 13189:tid 13202] [client 74.248.123.16:64819] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/d12.php"] [unique_id "adkWFZAxiJKPums3eBAGugAAAEo"]
[Fri Apr 10 23:24:05.796829 2026] [:error] [pid 13189:tid 13216] [client 74.248.123.16:61889] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/d12.php"] [unique_id "adkWFZAxiJKPums3eBAGvQAAAFg"]
[Fri Apr 10 23:24:06.321195 2026] [:error] [pid 62769:tid 62791] [client 74.248.123.16:63629] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/okxh.php"] [unique_id "adkWFsWsSnfLoB8ifjC7kwAAAlQ"]
[Fri Apr 10 23:24:06.840570 2026] [:error] [pid 62769:tid 62790] [client 74.248.123.16:63616] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/okxh.php"] [unique_id "adkWFsWsSnfLoB8ifjC7ogAAAlM"]
[Fri Apr 10 23:24:07.352971 2026] [:error] [pid 62710:tid 62730] [client 74.248.123.16:64792] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/okxh.php"] [unique_id "adkWF-ME7qrf5xEWWJtEiQAAAhE"]
[Fri Apr 10 23:24:07.871548 2026] [:error] [pid 62769:tid 62776] [client 74.248.123.16:63505] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/okxh.php"] [unique_id "adkWF8WsSnfLoB8ifjC7tgAAAkU"]
[Fri Apr 10 23:24:08.378915 2026] [:error] [pid 13189:tid 13196] [client 74.248.123.16:64772] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/55b76.php"] [unique_id "adkWGJAxiJKPums3eBAGwgAAAEQ"]
[Fri Apr 10 23:24:08.888711 2026] [:error] [pid 62651:tid 62674] [client 74.248.123.16:61639] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/55b76.php"] [unique_id "adkWGDbAH0le57SIaqw4TQAAAdU"]
[Fri Apr 10 23:24:09.416645 2026] [:error] [pid 62769:tid 62785] [client 74.248.123.16:61901] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/55b76.php"] [unique_id "adkWGcWsSnfLoB8ifjC7xgAAAk4"]
[Fri Apr 10 23:24:10.011147 2026] [:error] [pid 62769:tid 62773] [client 74.248.123.16:65079] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/55b76.php"] [unique_id "adkWGsWsSnfLoB8ifjC7zgAAAkI"]
[Fri Apr 10 23:24:10.521736 2026] [:error] [pid 13189:tid 13203] [client 74.248.123.16:64784] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tt.php"] [unique_id "adkWGpAxiJKPums3eBAG0AAAAEs"]
[Fri Apr 10 23:24:11.038206 2026] [:error] [pid 13189:tid 13200] [client 74.248.123.16:61945] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tt.php"] [unique_id "adkWG5AxiJKPums3eBAG1wAAAEg"]
[Fri Apr 10 23:24:11.572880 2026] [:error] [pid 62710:tid 62716] [client 74.248.123.16:61911] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tt.php"] [unique_id "adkWG-ME7qrf5xEWWJtEmQAAAgM"]
[Fri Apr 10 23:24:12.137536 2026] [:error] [pid 63062:tid 63073] [client 74.248.123.16:61942] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tt.php"] [unique_id "adkWHJ2HtsmV85NqkMcPBQAAA4k"]
[Fri Apr 10 23:24:12.661006 2026] [:error] [pid 62651:tid 62661] [client 74.248.123.16:63631] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/maul.php"] [unique_id "adkWHDbAH0le57SIaqw4UQAAAcg"]
[Fri Apr 10 23:24:13.231895 2026] [:error] [pid 62884:tid 62899] [client 74.248.123.16:65037] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/maul.php"] [unique_id "adkWHeUCK1xrhnnmpo2Z7gAAAsg"]
[Fri Apr 10 23:24:13.805931 2026] [:error] [pid 62710:tid 62716] [client 74.248.123.16:63637] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/maul.php"] [unique_id "adkWHeME7qrf5xEWWJtEqgAAAgM"]
[Fri Apr 10 23:24:14.318778 2026] [:error] [pid 62769:tid 62778] [client 74.248.123.16:63671] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/maul.php"] [unique_id "adkWHsWsSnfLoB8ifjC73AAAAkc"]
[Fri Apr 10 23:24:14.825950 2026] [:error] [pid 13101:tid 13152] [client 74.248.123.16:61656] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/5b9ac.php"] [unique_id "adkWHt8Ldw85818pj2odAAAAAJM"]
[Fri Apr 10 23:24:15.355644 2026] [:error] [pid 13101:tid 13153] [client 74.248.123.16:64790] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/5b9ac.php"] [unique_id "adkWH98Ldw85818pj2odCgAAAJQ"]
[Fri Apr 10 23:24:15.868443 2026] [:error] [pid 63062:tid 63075] [client 74.248.123.16:61637] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/5b9ac.php"] [unique_id "adkWH52HtsmV85NqkMcPEQAAA4s"]
[Fri Apr 10 23:24:16.399815 2026] [:error] [pid 13189:tid 13192] [client 74.248.123.16:64796] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/5b9ac.php"] [unique_id "adkWIJAxiJKPums3eBAG5gAAAEA"]
[Fri Apr 10 23:24:17.035619 2026] [:error] [pid 13189:tid 13203] [client 74.248.123.16:64771] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hehe.php"] [unique_id "adkWIZAxiJKPums3eBAG6gAAAEs"]
[Fri Apr 10 23:24:17.597290 2026] [:error] [pid 62769:tid 62790] [client 74.248.123.16:61647] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hehe.php"] [unique_id "adkWIcWsSnfLoB8ifjC78gAAAlM"]
[Fri Apr 10 23:24:18.423543 2026] [:error] [pid 62710:tid 62736] [client 74.248.123.16:65073] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hehe.php"] [unique_id "adkWIuME7qrf5xEWWJtEtAAAAhc"]
[Fri Apr 10 23:24:18.946750 2026] [:error] [pid 63134:tid 63161] [client 74.248.123.16:63533] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hehe.php"] [unique_id "adkWItFALqPDwWi6eJLHsAAAA9g"]
[Fri Apr 10 23:24:19.464700 2026] [:error] [pid 62710:tid 62737] [client 74.248.123.16:61635] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "adkWI-ME7qrf5xEWWJtEwAAAAhg"]
[Fri Apr 10 23:24:19.983540 2026] [:error] [pid 62651:tid 62677] [client 74.248.123.16:61643] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "adkWIzbAH0le57SIaqw4XAAAAdg"]
[Fri Apr 10 23:24:20.508859 2026] [:error] [pid 62710:tid 62719] [client 74.248.123.16:65085] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "adkWJOME7qrf5xEWWJtEywAAAgY"]
[Fri Apr 10 23:24:21.032839 2026] [:error] [pid 63134:tid 63153] [client 74.248.123.16:63547] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "adkWJdFALqPDwWi6eJLHugAAA9A"]
[Fri Apr 10 23:24:21.620150 2026] [:error] [pid 13189:tid 13202] [client 74.248.123.16:63535] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/varb.php"] [unique_id "adkWJZAxiJKPums3eBAG9QAAAEo"]
[Fri Apr 10 23:24:22.141271 2026] [:error] [pid 63062:tid 63074] [client 74.248.123.16:64821] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/varb.php"] [unique_id "adkWJp2HtsmV85NqkMcPGQAAA4o"]
[Fri Apr 10 23:24:22.662883 2026] [:error] [pid 13189:tid 13210] [client 74.248.123.16:63668] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/varb.php"] [unique_id "adkWJpAxiJKPums3eBAHCwAAAFI"]
[Fri Apr 10 23:24:23.182223 2026] [:error] [pid 13189:tid 13212] [client 74.248.123.16:65056] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/varb.php"] [unique_id "adkWJ5AxiJKPums3eBAHEwAAAFQ"]
[Fri Apr 10 23:24:23.722875 2026] [:error] [pid 13189:tid 13215] [client 74.248.123.16:60683] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lm15.php"] [unique_id "adkWJ5AxiJKPums3eBAHHwAAAFc"]
[Fri Apr 10 23:24:24.313660 2026] [:error] [pid 63062:tid 63085] [client 74.248.123.16:65050] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lm15.php"] [unique_id "adkWKJ2HtsmV85NqkMcPGwAAA5U"]
[Fri Apr 10 23:24:24.849344 2026] [:error] [pid 62651:tid 62676] [client 74.248.123.16:65053] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lm15.php"] [unique_id "adkWKDbAH0le57SIaqw4ZAAAAdc"]
[Fri Apr 10 23:24:25.538154 2026] [:error] [pid 63062:tid 63078] [client 74.248.123.16:65028] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lm15.php"] [unique_id "adkWKZ2HtsmV85NqkMcPIAAAA44"]
[Fri Apr 10 23:24:26.088363 2026] [:error] [pid 62769:tid 62772] [client 74.248.123.16:65054] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/clss.php"] [unique_id "adkWKsWsSnfLoB8ifjC8HgAAAkE"]
[Fri Apr 10 23:24:26.606436 2026] [:error] [pid 13100:tid 13107] [client 74.248.123.16:63528] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/clss.php"] [unique_id "adkWKlzg-ZkZ0InWIP3RawAAAQI"]
[Fri Apr 10 23:24:27.219846 2026] [:error] [pid 63134:tid 63144] [client 74.248.123.16:65076] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/clss.php"] [unique_id "adkWK9FALqPDwWi6eJLHywAAA8c"]
[Fri Apr 10 23:24:27.753008 2026] [:error] [pid 62651:tid 62673] [client 74.248.123.16:65068] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/clss.php"] [unique_id "adkWKzbAH0le57SIaqw4agAAAdQ"]
[Fri Apr 10 23:24:28.318751 2026] [:error] [pid 13100:tid 13117] [client 74.248.123.16:63545] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/44.php"] [unique_id "adkWLFzg-ZkZ0InWIP3ReAAAAQw"]
[Fri Apr 10 23:24:28.836628 2026] [:error] [pid 62769:tid 62780] [client 74.248.123.16:61904] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/44.php"] [unique_id "adkWLMWsSnfLoB8ifjC8LgAAAkk"]
[Fri Apr 10 23:24:29.352522 2026] [:error] [pid 63062:tid 63077] [client 74.248.123.16:58414] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/44.php"] [unique_id "adkWLZ2HtsmV85NqkMcPLwAAA40"]
[Fri Apr 10 23:24:29.975978 2026] [:error] [pid 13189:tid 13193] [client 74.248.123.16:63513] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/44.php"] [unique_id "adkWLZAxiJKPums3eBAHPgAAAEE"]
[Fri Apr 10 23:24:30.493456 2026] [:error] [pid 62884:tid 62912] [client 74.248.123.16:61894] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a5e0a.php"] [unique_id "adkWLuUCK1xrhnnmpo2aBwAAAtU"]
[Fri Apr 10 23:24:31.295061 2026] [:error] [pid 62769:tid 62771] [client 74.248.123.16:65070] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a5e0a.php"] [unique_id "adkWL8WsSnfLoB8ifjC8PwAAAkA"]
[Fri Apr 10 23:24:31.804813 2026] [:error] [pid 62769:tid 62783] [client 74.248.123.16:65069] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a5e0a.php"] [unique_id "adkWL8WsSnfLoB8ifjC8TAAAAkw"]
[Fri Apr 10 23:24:32.321992 2026] [:error] [pid 63134:tid 63137] [client 74.248.123.16:63496] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a5e0a.php"] [unique_id "adkWMNFALqPDwWi6eJLHzQAAA8A"]
[Fri Apr 10 23:24:32.881436 2026] [:error] [pid 62769:tid 62787] [client 74.248.123.16:63679] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bo.php"] [unique_id "adkWMMWsSnfLoB8ifjC8XAAAAlA"]
[Fri Apr 10 23:24:33.438713 2026] [:error] [pid 62710:tid 62723] [client 74.248.123.16:61907] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bo.php"] [unique_id "adkWMeME7qrf5xEWWJtFEQAAAgo"]
[Fri Apr 10 23:24:33.967861 2026] [:error] [pid 62769:tid 62787] [client 74.248.123.16:63620] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bo.php"] [unique_id "adkWMcWsSnfLoB8ifjC8bgAAAlA"]
[Fri Apr 10 23:24:34.482926 2026] [:error] [pid 63134:tid 63141] [client 74.248.123.16:63548] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bo.php"] [unique_id "adkWMtFALqPDwWi6eJLH0AAAA8Q"]
[Fri Apr 10 23:24:35.067032 2026] [:error] [pid 63134:tid 63138] [client 74.248.123.16:61663] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/56c53.php"] [unique_id "adkWM9FALqPDwWi6eJLH1QAAA8E"]
[Fri Apr 10 23:24:35.593146 2026] [:error] [pid 62710:tid 62727] [client 74.248.123.16:64793] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/56c53.php"] [unique_id "adkWM-ME7qrf5xEWWJtFFwAAAg4"]
[Fri Apr 10 23:24:36.106799 2026] [:error] [pid 62769:tid 62774] [client 74.248.123.16:61910] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/56c53.php"] [unique_id "adkWNMWsSnfLoB8ifjC8fwAAAkM"]
[Fri Apr 10 23:24:36.612676 2026] [:error] [pid 62769:tid 62783] [client 74.248.123.16:60682] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/56c53.php"] [unique_id "adkWNMWsSnfLoB8ifjC8igAAAkw"]
[Fri Apr 10 23:24:37.142369 2026] [:error] [pid 63062:tid 63086] [client 74.248.123.16:65071] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tx78.php"] [unique_id "adkWNZ2HtsmV85NqkMcPOQAAA5Y"]
[Fri Apr 10 23:24:37.663019 2026] [:error] [pid 62769:tid 62782] [client 74.248.123.16:61929] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tx78.php"] [unique_id "adkWNcWsSnfLoB8ifjC8oQAAAks"]
[Fri Apr 10 23:24:38.177490 2026] [:error] [pid 13101:tid 13145] [client 74.248.123.16:61935] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tx78.php"] [unique_id "adkWNt8Ldw85818pj2odOgAAAIw"]
[Fri Apr 10 23:24:38.684507 2026] [:error] [pid 63062:tid 63071] [client 74.248.123.16:61634] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tx78.php"] [unique_id "adkWNp2HtsmV85NqkMcPOwAAA4c"]
[Fri Apr 10 23:24:39.275336 2026] [:error] [pid 13101:tid 13147] [client 74.248.123.16:61903] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws80.php"] [unique_id "adkWN98Ldw85818pj2odRQAAAI4"]
[Fri Apr 10 23:24:39.834017 2026] [:error] [pid 62769:tid 62794] [client 74.248.123.16:65048] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws80.php"] [unique_id "adkWN8WsSnfLoB8ifjC8wgAAAlc"]
[Fri Apr 10 23:24:40.382983 2026] [:error] [pid 63062:tid 63069] [client 74.248.123.16:61695] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws80.php"] [unique_id "adkWOJ2HtsmV85NqkMcPPQAAA4U"]
[Fri Apr 10 23:24:40.903204 2026] [:error] [pid 13189:tid 13192] [client 74.248.123.16:60724] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws80.php"] [unique_id "adkWOJAxiJKPums3eBAHUwAAAEA"]
[Fri Apr 10 23:24:41.423019 2026] [:error] [pid 62769:tid 62793] [client 74.248.123.16:61944] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jga.php"] [unique_id "adkWOcWsSnfLoB8ifjC81gAAAlY"]
[Fri Apr 10 23:24:41.930848 2026] [:error] [pid 13101:tid 13135] [client 74.248.123.16:64807] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jga.php"] [unique_id "adkWOd8Ldw85818pj2odVAAAAII"]
[Fri Apr 10 23:24:42.465875 2026] [:error] [pid 62710:tid 62724] [client 74.248.123.16:60324] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jga.php"] [unique_id "adkWOuME7qrf5xEWWJtFHQAAAgs"]
[Fri Apr 10 23:24:42.974293 2026] [:error] [pid 63062:tid 63076] [client 74.248.123.16:61655] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jga.php"] [unique_id "adkWOp2HtsmV85NqkMcPPgAAA4w"]
[Fri Apr 10 23:24:43.539649 2026] [:error] [pid 63062:tid 63082] [client 74.248.123.16:65026] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fs.php"] [unique_id "adkWO52HtsmV85NqkMcPQQAAA5I"]
[Fri Apr 10 23:24:44.091123 2026] [:error] [pid 13101:tid 13157] [client 74.248.123.16:63660] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fs.php"] [unique_id "adkWPN8Ldw85818pj2oddwAAAJg"]
[Fri Apr 10 23:24:44.635673 2026] [:error] [pid 63134:tid 63159] [client 74.248.123.16:56769] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fs.php"] [unique_id "adkWPNFALqPDwWi6eJLH4gAAA9Y"]
[Fri Apr 10 23:24:45.165050 2026] [:error] [pid 13101:tid 13151] [client 74.248.123.16:64805] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fs.php"] [unique_id "adkWPd8Ldw85818pj2odigAAAJI"]
[Fri Apr 10 23:24:45.689129 2026] [:error] [pid 13189:tid 13196] [client 74.248.123.16:61943] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/byypas.php"] [unique_id "adkWPZAxiJKPums3eBAHYgAAAEQ"]
[Fri Apr 10 23:24:46.199698 2026] [:error] [pid 63134:tid 63142] [client 74.248.123.16:63659] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/byypas.php"] [unique_id "adkWPtFALqPDwWi6eJLH6AAAA8U"]
[Fri Apr 10 23:24:46.723439 2026] [:error] [pid 63134:tid 63145] [client 74.248.123.16:64775] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/byypas.php"] [unique_id "adkWPtFALqPDwWi6eJLH9AAAA8g"]
[Fri Apr 10 23:24:47.261432 2026] [:error] [pid 13101:tid 13147] [client 74.248.123.16:61659] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/byypas.php"] [unique_id "adkWP98Ldw85818pj2odkgAAAI4"]
[Fri Apr 10 23:24:47.792210 2026] [:error] [pid 62710:tid 62735] [client 74.248.123.16:65064] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/b.php"] [unique_id "adkWP-ME7qrf5xEWWJtFJQAAAhY"]
[Fri Apr 10 23:24:48.325954 2026] [:error] [pid 63134:tid 63140] [client 74.248.123.16:65057] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/b.php"] [unique_id "adkWQNFALqPDwWi6eJLH_AAAA8M"]
[Fri Apr 10 23:24:48.836703 2026] [:error] [pid 13101:tid 13150] [client 74.248.123.16:63491] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/b.php"] [unique_id "adkWQN8Ldw85818pj2odogAAAJE"]
[Fri Apr 10 23:24:49.345467 2026] [:error] [pid 63134:tid 63158] [client 74.248.123.16:64803] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/b.php"] [unique_id "adkWQdFALqPDwWi6eJLH_wAAA9U"]
[Fri Apr 10 23:24:49.859417 2026] [:error] [pid 13100:tid 13111] [client 74.248.123.16:61660] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws49.php"] [unique_id "adkWQVzg-ZkZ0InWIP3RhwAAAQY"]
[Fri Apr 10 23:24:50.399518 2026] [:error] [pid 63134:tid 63145] [client 74.248.123.16:63626] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws49.php"] [unique_id "adkWQtFALqPDwWi6eJLIBgAAA8g"]
[Fri Apr 10 23:24:50.913565 2026] [:error] [pid 62651:tid 62667] [client 74.248.123.16:61662] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws49.php"] [unique_id "adkWQjbAH0le57SIaqw4eQAAAc4"]
[Fri Apr 10 23:24:51.433395 2026] [:error] [pid 62710:tid 62713] [client 74.248.123.16:61919] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws49.php"] [unique_id "adkWQ-ME7qrf5xEWWJtFLQAAAgA"]
[Fri Apr 10 23:24:51.974915 2026] [:error] [pid 13101:tid 13137] [client 74.248.123.16:65035] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-blog-header.php"] [unique_id "adkWQ98Ldw85818pj2odtgAAAIQ"]
[Fri Apr 10 23:24:52.487350 2026] [:error] [pid 13101:tid 13133] [client 74.248.123.16:61925] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-blog-header.php"] [unique_id "adkWRN8Ldw85818pj2odwAAAAIA"]
[Fri Apr 10 23:24:53.023116 2026] [:error] [pid 13189:tid 13210] [client 74.248.123.16:60322] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-blog-header.php"] [unique_id "adkWRZAxiJKPums3eBAHfQAAAFI"]
[Fri Apr 10 23:24:53.551079 2026] [:error] [pid 13189:tid 13215] [client 74.248.123.16:63512] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-blog-header.php"] [unique_id "adkWRZAxiJKPums3eBAHhgAAAFc"]
[Fri Apr 10 23:24:54.066599 2026] [:error] [pid 62884:tid 62894] [client 74.248.123.16:65036] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bgymj.php"] [unique_id "adkWRuUCK1xrhnnmpo2aIQAAAsM"]
[Fri Apr 10 23:24:54.574703 2026] [:error] [pid 62769:tid 62788] [client 74.248.123.16:64788] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bgymj.php"] [unique_id "adkWRsWsSnfLoB8ifjC87gAAAlE"]
[Fri Apr 10 23:24:55.083955 2026] [:error] [pid 63062:tid 63088] [client 74.248.123.16:61890] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bgymj.php"] [unique_id "adkWR52HtsmV85NqkMcPTAAAA5g"]
[Fri Apr 10 23:24:55.593151 2026] [:error] [pid 62769:tid 62793] [client 74.248.123.16:63673] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bgymj.php"] [unique_id "adkWR8WsSnfLoB8ifjC8-QAAAlY"]
[Fri Apr 10 23:24:56.107316 2026] [:error] [pid 13101:tid 13152] [client 74.248.123.16:60725] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gfd.php"] [unique_id "adkWSN8Ldw85818pj2od0gAAAJM"]
[Fri Apr 10 23:24:56.615358 2026] [:error] [pid 13100:tid 13123] [client 74.248.123.16:63522] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gfd.php"] [unique_id "adkWSFzg-ZkZ0InWIP3RjwAAARI"]
[Fri Apr 10 23:24:57.135935 2026] [proxy_fcgi:error] [pid 62710:tid 62727] [client 74.248.123.16:63675] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 23:24:57.917531 2026] [proxy_fcgi:error] [pid 62710:tid 62732] [client 74.248.123.16:63675] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 23:24:58.174333 2026] [proxy_fcgi:error] [pid 62710:tid 62726] [client 74.248.123.16:63675] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 23:24:58.433624 2026] [proxy_fcgi:error] [pid 62710:tid 62724] [client 74.248.123.16:63675] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 23:24:58.693731 2026] [proxy_fcgi:error] [pid 62710:tid 62716] [client 74.248.123.16:63675] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 23:24:58.951573 2026] [proxy_fcgi:error] [pid 62710:tid 62717] [client 74.248.123.16:63675] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 23:24:59.210214 2026] [proxy_fcgi:error] [pid 62710:tid 62735] [client 74.248.123.16:63675] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 23:24:59.469222 2026] [proxy_fcgi:error] [pid 62710:tid 62732] [client 74.248.123.16:63675] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 23:24:59.984013 2026] [proxy_fcgi:error] [pid 62710:tid 62719] [client 74.248.123.16:63675] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 23:25:00.244556 2026] [proxy_fcgi:error] [pid 62710:tid 62729] [client 74.248.123.16:63675] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 23:25:01.852746 2026] [:error] [pid 62710:tid 62716] [client 74.248.123.16:63675] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aboute.php"] [unique_id "adkWTeME7qrf5xEWWJtFXQAAAgM"]
[Fri Apr 10 23:25:02.362558 2026] [:error] [pid 62769:tid 62791] [client 74.248.123.16:60308] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aboute.php"] [unique_id "adkWTsWsSnfLoB8ifjC9GwAAAlQ"]
[Fri Apr 10 23:25:02.880776 2026] [:error] [pid 62769:tid 62795] [client 74.248.123.16:61636] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aboute.php"] [unique_id "adkWTsWsSnfLoB8ifjC9HQAAAlg"]
[Fri Apr 10 23:25:03.393194 2026] [:error] [pid 62651:tid 62654] [client 74.248.123.16:60340] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aboute.php"] [unique_id "adkWTzbAH0le57SIaqw4hgAAAcE"]
[Fri Apr 10 23:25:04.004612 2026] [:error] [pid 13101:tid 13144] [client 74.248.123.16:65039] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x9.php"] [unique_id "adkWUN8Ldw85818pj2od_AAAAIs"]
[Fri Apr 10 23:25:04.516686 2026] [:error] [pid 13101:tid 13140] [client 74.248.123.16:63657] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x9.php"] [unique_id "adkWUN8Ldw85818pj2oeCQAAAIc"]
[Fri Apr 10 23:25:05.034384 2026] [:error] [pid 13101:tid 13145] [client 74.248.123.16:61661] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x9.php"] [unique_id "adkWUd8Ldw85818pj2oeEgAAAIw"]
[Fri Apr 10 23:25:05.665411 2026] [:error] [pid 13189:tid 13205] [client 74.248.123.16:63625] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x9.php"] [unique_id "adkWUZAxiJKPums3eBAHmgAAAE0"]
[Fri Apr 10 23:25:06.183820 2026] [:error] [pid 13189:tid 13210] [client 74.248.123.16:64786] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/an.php"] [unique_id "adkWUpAxiJKPums3eBAHnQAAAFI"]
[Fri Apr 10 23:25:06.747755 2026] [:error] [pid 62819:tid 62846] [client 74.248.123.16:64818] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/an.php"] [unique_id "adkWUvU20EyPf7NlsleDqAAAApg"]
[Fri Apr 10 23:25:07.494116 2026] [:error] [pid 63134:tid 63150] [client 74.248.123.16:63646] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/an.php"] [unique_id "adkWU9FALqPDwWi6eJLIKAAAA80"]
[Fri Apr 10 23:25:08.091845 2026] [:error] [pid 62819:tid 62838] [client 74.248.123.16:58379] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/an.php"] [unique_id "adkWVPU20EyPf7NlsleDrAAAApA"]
[Fri Apr 10 23:25:08.626215 2026] [:error] [pid 62769:tid 62781] [client 74.248.123.16:61665] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aboutc.php"] [unique_id "adkWVMWsSnfLoB8ifjC9KAAAAko"]
[Fri Apr 10 23:25:09.152025 2026] [:error] [pid 13189:tid 13215] [client 74.248.123.16:63534] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aboutc.php"] [unique_id "adkWVZAxiJKPums3eBAHpgAAAFc"]
[Fri Apr 10 23:25:09.788040 2026] [:error] [pid 63134:tid 63145] [client 74.248.123.16:61651] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aboutc.php"] [unique_id "adkWVdFALqPDwWi6eJLILQAAA8g"]
[Fri Apr 10 23:25:10.376113 2026] [:error] [pid 13189:tid 13207] [client 74.248.123.16:63632] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aboutc.php"] [unique_id "adkWVpAxiJKPums3eBAHrQAAAE8"]
[Fri Apr 10 23:25:11.011677 2026] [:error] [pid 13189:tid 13199] [client 74.248.123.16:61934] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gdn.php"] [unique_id "adkWV5AxiJKPums3eBAHswAAAEc"]
[Fri Apr 10 23:25:21.234593 2026] [:error] [pid 62710:tid 62729] [client 74.248.123.16:58390] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gdn.php"] [unique_id "adkWYeME7qrf5xEWWJtFfwAAAhA"]
[Fri Apr 10 23:25:21.753284 2026] [:error] [pid 62710:tid 62714] [client 74.248.123.16:63542] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gdn.php"] [unique_id "adkWYeME7qrf5xEWWJtFgwAAAgE"]
[Fri Apr 10 23:25:22.336443 2026] [:error] [pid 62710:tid 62734] [client 74.248.123.16:61652] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gdn.php"] [unique_id "adkWYuME7qrf5xEWWJtFhQAAAhU"]
[Fri Apr 10 23:25:22.847481 2026] [:error] [pid 13101:tid 13150] [client 74.248.123.16:63529] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/first.php"] [unique_id "adkWYt8Ldw85818pj2oeTwAAAJE"]
[Fri Apr 10 23:25:23.363203 2026] [:error] [pid 62710:tid 62737] [client 74.248.123.16:65077] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/first.php"] [unique_id "adkWY-ME7qrf5xEWWJtFiQAAAhg"]
[Fri Apr 10 23:25:23.879249 2026] [:error] [pid 63062:tid 63084] [client 74.248.123.16:65029] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/first.php"] [unique_id "adkWY52HtsmV85NqkMcPlwAAA5Q"]
[Fri Apr 10 23:25:24.417189 2026] [:error] [pid 63134:tid 63149] [client 74.248.123.16:63508] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/first.php"] [unique_id "adkWZNFALqPDwWi6eJLIXAAAA8w"]
[Fri Apr 10 23:25:24.939520 2026] [:error] [pid 63134:tid 63156] [client 74.248.123.16:61916] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/redixsx.php"] [unique_id "adkWZNFALqPDwWi6eJLIXwAAA9M"]
[Fri Apr 10 23:25:25.458598 2026] [:error] [pid 62710:tid 62731] [client 74.248.123.16:63525] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/redixsx.php"] [unique_id "adkWZeME7qrf5xEWWJtFkwAAAhI"]
[Fri Apr 10 23:25:26.031676 2026] [:error] [pid 13101:tid 13150] [client 74.248.123.16:61657] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/redixsx.php"] [unique_id "adkWZt8Ldw85818pj2oeWQAAAJE"]
[Fri Apr 10 23:25:26.545273 2026] [:error] [pid 13101:tid 13142] [client 74.248.123.16:61679] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/redixsx.php"] [unique_id "adkWZt8Ldw85818pj2oeWwAAAIk"]
[Fri Apr 10 23:25:27.058490 2026] [:error] [pid 13101:tid 13149] [client 74.248.123.16:63515] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cpp2.php"] [unique_id "adkWZ98Ldw85818pj2oeYQAAAJA"]
[Fri Apr 10 23:25:27.656930 2026] [:error] [pid 62769:tid 62780] [client 74.248.123.16:64776] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cpp2.php"] [unique_id "adkWZ8WsSnfLoB8ifjC9eAAAAkk"]
[Fri Apr 10 23:25:28.182174 2026] [:error] [pid 62769:tid 62789] [client 74.248.123.16:60291] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cpp2.php"] [unique_id "adkWaMWsSnfLoB8ifjC9fgAAAlI"]
[Fri Apr 10 23:25:28.746142 2026] [:error] [pid 62769:tid 62774] [client 74.248.123.16:60300] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cpp2.php"] [unique_id "adkWaMWsSnfLoB8ifjC9gAAAAkM"]
[Fri Apr 10 23:25:29.270129 2026] [:error] [pid 62710:tid 62718] [client 74.248.123.16:60348] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admlo.php"] [unique_id "adkWaeME7qrf5xEWWJtFlgAAAgU"]
[Fri Apr 10 23:25:29.789173 2026] [:error] [pid 13101:tid 13147] [client 74.248.123.16:64774] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admlo.php"] [unique_id "adkWad8Ldw85818pj2oeaQAAAI4"]
[Fri Apr 10 23:25:30.341446 2026] [:error] [pid 63134:tid 63147] [client 74.248.123.16:64815] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admlo.php"] [unique_id "adkWatFALqPDwWi6eJLIbgAAA8o"]
[Fri Apr 10 23:25:30.853829 2026] [:error] [pid 62710:tid 62726] [client 74.248.123.16:60320] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admlo.php"] [unique_id "adkWauME7qrf5xEWWJtFnAAAAg0"]
[Fri Apr 10 23:25:31.402864 2026] [:error] [pid 13189:tid 13199] [client 74.248.123.16:61645] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin-ajax.php"] [unique_id "adkWa5AxiJKPums3eBAH6wAAAEc"]
[Fri Apr 10 23:25:31.912914 2026] [:error] [pid 62769:tid 62793] [client 74.248.123.16:61918] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin-ajax.php"] [unique_id "adkWa8WsSnfLoB8ifjC9hAAAAlY"]
[Fri Apr 10 23:25:32.453282 2026] [:error] [pid 62651:tid 62665] [client 74.248.123.16:63494] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin-ajax.php"] [unique_id "adkWbDbAH0le57SIaqw4oAAAAcw"]
[Fri Apr 10 23:25:32.966702 2026] [:error] [pid 62651:tid 62660] [client 74.248.123.16:61666] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin-ajax.php"] [unique_id "adkWbDbAH0le57SIaqw4oQAAAcc"]
[Fri Apr 10 23:25:33.482375 2026] [:error] [pid 63134:tid 63150] [client 74.248.123.16:61923] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/amthd.php"] [unique_id "adkWbdFALqPDwWi6eJLIdAAAA80"]
[Fri Apr 10 23:25:34.071955 2026] [:error] [pid 62819:tid 62842] [client 74.248.123.16:63524] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/amthd.php"] [unique_id "adkWbvU20EyPf7NlsleEHAAAApQ"]
[Fri Apr 10 23:25:34.600564 2026] [:error] [pid 62769:tid 62780] [client 74.248.123.16:61899] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/amthd.php"] [unique_id "adkWbsWsSnfLoB8ifjC9kQAAAkk"]
[Fri Apr 10 23:25:35.111043 2026] [:error] [pid 62710:tid 62735] [client 74.248.123.16:63498] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/amthd.php"] [unique_id "adkWb-ME7qrf5xEWWJtFqAAAAhY"]
[Fri Apr 10 23:25:35.659036 2026] [:error] [pid 62710:tid 62733] [client 74.248.123.16:60712] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/8xyz.php"] [unique_id "adkWb-ME7qrf5xEWWJtFrAAAAhQ"]
[Fri Apr 10 23:25:36.193340 2026] [:error] [pid 13101:tid 13148] [client 74.248.123.16:65081] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/8xyz.php"] [unique_id "adkWcN8Ldw85818pj2oeewAAAI8"]
[Fri Apr 10 23:25:36.753447 2026] [:error] [pid 13101:tid 13141] [client 74.248.123.16:64791] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/8xyz.php"] [unique_id "adkWcN8Ldw85818pj2oegwAAAIg"]
[Fri Apr 10 23:25:37.277513 2026] [:error] [pid 13101:tid 13155] [client 74.248.123.16:63635] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/8xyz.php"] [unique_id "adkWcd8Ldw85818pj2oeiAAAAJY"]
[Fri Apr 10 23:25:37.786601 2026] [:error] [pid 13101:tid 13149] [client 74.248.123.16:64806] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mini.php"] [unique_id "adkWcd8Ldw85818pj2oeiwAAAJA"]
[Fri Apr 10 23:25:38.304151 2026] [:error] [pid 13101:tid 13153] [client 74.248.123.16:64811] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mini.php"] [unique_id "adkWct8Ldw85818pj2oekQAAAJQ"]
[Fri Apr 10 23:25:38.898518 2026] [:error] [pid 13101:tid 13141] [client 74.248.123.16:63488] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mini.php"] [unique_id "adkWct8Ldw85818pj2oelgAAAIg"]
[Fri Apr 10 23:25:39.452153 2026] [:error] [pid 62710:tid 62730] [client 74.248.123.16:61667] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mini.php"] [unique_id "adkWc-ME7qrf5xEWWJtFtAAAAhE"]
[Fri Apr 10 23:25:39.966292 2026] [:error] [pid 13189:tid 13216] [client 74.248.123.16:61924] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws68.php"] [unique_id "adkWc5AxiJKPums3eBAIBwAAAFg"]
[Fri Apr 10 23:25:40.492322 2026] [:error] [pid 62710:tid 62737] [client 74.248.123.16:61896] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws68.php"] [unique_id "adkWdOME7qrf5xEWWJtFtwAAAhg"]
[Fri Apr 10 23:25:41.027623 2026] [:error] [pid 63062:tid 63075] [client 74.248.123.16:61891] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws68.php"] [unique_id "adkWdZ2HtsmV85NqkMcPzQAAA4s"]
[Fri Apr 10 23:25:41.603524 2026] [:error] [pid 63134:tid 63148] [client 74.248.123.16:63643] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws68.php"] [unique_id "adkWddFALqPDwWi6eJLIkAAAA8s"]
[Fri Apr 10 23:25:42.129284 2026] [:error] [pid 62769:tid 62795] [client 74.248.123.16:63667] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xxx.php"] [unique_id "adkWdsWsSnfLoB8ifjC9oAAAAlg"]
[Fri Apr 10 23:25:42.639552 2026] [:error] [pid 62769:tid 62773] [client 74.248.123.16:63490] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xxx.php"] [unique_id "adkWdsWsSnfLoB8ifjC9pQAAAkI"]
[Fri Apr 10 23:25:43.153534 2026] [:error] [pid 13100:tid 13115] [client 74.248.123.16:60708] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xxx.php"] [unique_id "adkWd1zg-ZkZ0InWIP3RuAAAAQo"]
[Fri Apr 10 23:25:43.684111 2026] [:error] [pid 62769:tid 62775] [client 74.248.123.16:65072] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xxx.php"] [unique_id "adkWd8WsSnfLoB8ifjC9tQAAAkQ"]
[Fri Apr 10 23:25:44.256032 2026] [:error] [pid 63062:tid 63065] [client 74.248.123.16:61633] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/njxjtooj.php"] [unique_id "adkWeJ2HtsmV85NqkMcP1AAAA4E"]
[Fri Apr 10 23:25:44.770195 2026] [:error] [pid 62769:tid 62782] [client 74.248.123.16:65074] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/njxjtooj.php"] [unique_id "adkWeMWsSnfLoB8ifjC9ugAAAks"]
[Fri Apr 10 23:25:45.292864 2026] [:error] [pid 62769:tid 62783] [client 74.248.123.16:61674] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/njxjtooj.php"] [unique_id "adkWecWsSnfLoB8ifjC9wwAAAkw"]
[Fri Apr 10 23:25:45.816560 2026] [:error] [pid 62710:tid 62731] [client 74.248.123.16:58482] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/njxjtooj.php"] [unique_id "adkWeeME7qrf5xEWWJtFvQAAAhI"]
[Fri Apr 10 23:25:46.382429 2026] [:error] [pid 62769:tid 62787] [client 74.248.123.16:63531] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws85.php"] [unique_id "adkWesWsSnfLoB8ifjC9xwAAAlA"]
[Fri Apr 10 23:25:46.899613 2026] [:error] [pid 62710:tid 62735] [client 74.248.123.16:63538] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws85.php"] [unique_id "adkWeuME7qrf5xEWWJtFxgAAAhY"]
[Fri Apr 10 23:25:47.428629 2026] [:error] [pid 62710:tid 62715] [client 74.248.123.16:60701] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws85.php"] [unique_id "adkWe-ME7qrf5xEWWJtFygAAAgI"]
[Fri Apr 10 23:25:47.942621 2026] [:error] [pid 62769:tid 62782] [client 74.248.123.16:60729] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws85.php"] [unique_id "adkWe8WsSnfLoB8ifjC9zQAAAks"]
[Fri Apr 10 23:25:48.466766 2026] [:error] [pid 63134:tid 63140] [client 74.248.123.16:63495] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws61.php"] [unique_id "adkWfNFALqPDwWi6eJLInwAAA8M"]
[Fri Apr 10 23:25:49.005823 2026] [:error] [pid 62769:tid 62773] [client 74.248.123.16:61905] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws61.php"] [unique_id "adkWfcWsSnfLoB8ifjC92wAAAkI"]
[Fri Apr 10 23:25:49.545847 2026] [:error] [pid 62769:tid 62793] [client 74.248.123.16:63656] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws61.php"] [unique_id "adkWfcWsSnfLoB8ifjC94AAAAlY"]
[Fri Apr 10 23:25:50.067623 2026] [:error] [pid 63134:tid 63139] [client 74.248.123.16:58373] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws61.php"] [unique_id "adkWftFALqPDwWi6eJLIpgAAA8I"]
[Fri Apr 10 23:25:50.620393 2026] [:error] [pid 13101:tid 13144] [client 74.248.123.16:58430] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/iyy.php"] [unique_id "adkWft8Ldw85818pj2oevAAAAIs"]
[Fri Apr 10 23:25:51.144109 2026] [:error] [pid 13101:tid 13149] [client 74.248.123.16:61897] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/iyy.php"] [unique_id "adkWf98Ldw85818pj2oewAAAAJA"]
[Fri Apr 10 23:25:51.658181 2026] [:error] [pid 13100:tid 13128] [client 74.248.123.16:65025] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/iyy.php"] [unique_id "adkWf1zg-ZkZ0InWIP3R3QAAARc"]
[Fri Apr 10 23:25:52.192849 2026] [:error] [pid 62884:tid 62913] [client 74.248.123.16:60698] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/iyy.php"] [unique_id "adkWgOUCK1xrhnnmpo2abwAAAtY"]
[Fri Apr 10 23:25:52.740422 2026] [:error] [pid 62819:tid 62827] [client 74.248.123.16:64779] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/900.php"] [unique_id "adkWgPU20EyPf7NlsleERQAAAoU"]
[Fri Apr 10 23:25:53.254144 2026] [:error] [pid 62819:tid 62822] [client 74.248.123.16:63662] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/900.php"] [unique_id "adkWgfU20EyPf7NlsleESgAAAoA"]
[Fri Apr 10 23:25:53.837921 2026] [:error] [pid 13101:tid 13137] [client 74.248.123.16:58415] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/900.php"] [unique_id "adkWgd8Ldw85818pj2oe1wAAAIQ"]
[Fri Apr 10 23:25:54.360558 2026] [:error] [pid 13189:tid 13208] [client 74.248.123.16:61947] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/900.php"] [unique_id "adkWgpAxiJKPums3eBAIMwAAAFA"]
[Fri Apr 10 23:25:54.870332 2026] [:error] [pid 62769:tid 62779] [client 74.248.123.16:60673] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/blsvgeyaza.php"] [unique_id "adkWgsWsSnfLoB8ifjC98AAAAkg"]
[Fri Apr 10 23:25:55.427867 2026] [:error] [pid 62819:tid 62838] [client 74.248.123.16:60713] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/blsvgeyaza.php"] [unique_id "adkWg_U20EyPf7NlsleEUwAAApA"]
[Fri Apr 10 23:25:56.032247 2026] [:error] [pid 13189:tid 13202] [client 74.248.123.16:60294] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/blsvgeyaza.php"] [unique_id "adkWhJAxiJKPums3eBAITwAAAEo"]
[Fri Apr 10 23:25:56.573938 2026] [:error] [pid 62769:tid 62780] [client 74.248.123.16:58462] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/blsvgeyaza.php"] [unique_id "adkWhMWsSnfLoB8ifjC9-AAAAkk"]
[Fri Apr 10 23:25:57.087317 2026] [:error] [pid 13189:tid 13212] [client 74.248.123.16:64804] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gqhyti.php"] [unique_id "adkWhZAxiJKPums3eBAIWAAAAFQ"]
[Fri Apr 10 23:25:57.595114 2026] [:error] [pid 62710:tid 62719] [client 74.248.123.16:63669] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gqhyti.php"] [unique_id "adkWheME7qrf5xEWWJtF3wAAAgY"]
[Fri Apr 10 23:25:58.170041 2026] [:error] [pid 63134:tid 63161] [client 74.248.123.16:56725] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gqhyti.php"] [unique_id "adkWhtFALqPDwWi6eJLIuwAAA9g"]
[Fri Apr 10 23:25:58.713677 2026] [:error] [pid 13100:tid 13122] [client 74.248.123.16:64768] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gqhyti.php"] [unique_id "adkWhlzg-ZkZ0InWIP3R4wAAARE"]
[Fri Apr 10 23:25:59.229154 2026] [:error] [pid 13189:tid 13209] [client 74.248.123.16:63539] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/autoxxi.php"] [unique_id "adkWh5AxiJKPums3eBAIZQAAAFE"]
[Fri Apr 10 23:25:59.747446 2026] [:error] [pid 13101:tid 13136] [client 74.248.123.16:64778] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/autoxxi.php"] [unique_id "adkWh98Ldw85818pj2oe9wAAAIM"]
[Fri Apr 10 23:26:00.321413 2026] [proxy_fcgi:error] [pid 13100:tid 13125] [client 74.248.123.16:58441] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 23:26:00.580161 2026] [proxy_fcgi:error] [pid 13100:tid 13123] [client 74.248.123.16:58441] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 23:26:00.839785 2026] [proxy_fcgi:error] [pid 13100:tid 13114] [client 74.248.123.16:58441] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 23:26:01.097974 2026] [proxy_fcgi:error] [pid 13100:tid 13106] [client 74.248.123.16:58441] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 23:26:01.354362 2026] [proxy_fcgi:error] [pid 13100:tid 13129] [client 74.248.123.16:58441] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 23:26:01.611040 2026] [proxy_fcgi:error] [pid 13100:tid 13124] [client 74.248.123.16:58441] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 23:26:01.867600 2026] [proxy_fcgi:error] [pid 13100:tid 13128] [client 74.248.123.16:58441] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 23:26:02.125072 2026] [proxy_fcgi:error] [pid 13100:tid 13116] [client 74.248.123.16:58441] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 23:26:02.381796 2026] [proxy_fcgi:error] [pid 13100:tid 13113] [client 74.248.123.16:58441] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 23:26:02.638414 2026] [proxy_fcgi:error] [pid 13100:tid 13118] [client 74.248.123.16:58441] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 23:26:02.895481 2026] [proxy_fcgi:error] [pid 13100:tid 13111] [client 74.248.123.16:58441] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 23:26:03.148947 2026] [:error] [pid 13100:tid 13107] [client 74.248.123.16:58441] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bmi.php"] [unique_id "adkWi1zg-ZkZ0InWIP3R8gAAAQI"]
[Fri Apr 10 23:26:03.658173 2026] [:error] [pid 13189:tid 13206] [client 74.248.123.16:65031] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bmi.php"] [unique_id "adkWi5AxiJKPums3eBAIcgAAAE4"]
[Fri Apr 10 23:26:04.225069 2026] [:error] [pid 13101:tid 13152] [client 74.248.123.16:65043] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bmi.php"] [unique_id "adkWjN8Ldw85818pj2ofCAAAAJM"]
[Fri Apr 10 23:26:04.736182 2026] [:error] [pid 62819:tid 62839] [client 74.248.123.16:65051] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bmi.php"] [unique_id "adkWjPU20EyPf7NlsleEXQAAApE"]
[Fri Apr 10 23:26:05.369489 2026] [:error] [pid 63134:tid 63151] [client 74.248.123.16:58419] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bypltspd.php"] [unique_id "adkWjdFALqPDwWi6eJLI0gAAA84"]
[Fri Apr 10 23:26:05.880731 2026] [:error] [pid 13189:tid 13204] [client 74.248.123.16:63641] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bypltspd.php"] [unique_id "adkWjZAxiJKPums3eBAIeAAAAEw"]
[Fri Apr 10 23:26:06.399120 2026] [:error] [pid 62819:tid 62842] [client 74.248.123.16:58468] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bypltspd.php"] [unique_id "adkWjvU20EyPf7NlsleEXwAAApQ"]
[Fri Apr 10 23:26:06.906580 2026] [:error] [pid 62769:tid 62785] [client 74.248.123.16:56715] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bypltspd.php"] [unique_id "adkWjsWsSnfLoB8ifjC-EgAAAk4"]
[Fri Apr 10 23:26:07.420705 2026] [:error] [pid 62769:tid 62790] [client 74.248.123.16:63621] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/shell.php"] [unique_id "adkWj8WsSnfLoB8ifjC-HQAAAlM"]
[Fri Apr 10 23:26:07.993700 2026] [:error] [pid 62769:tid 62788] [client 74.248.123.16:65046] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/shell.php"] [unique_id "adkWj8WsSnfLoB8ifjC-IwAAAlE"]
[Fri Apr 10 23:26:08.517621 2026] [:error] [pid 13189:tid 13203] [client 74.248.123.16:63677] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/shell.php"] [unique_id "adkWkJAxiJKPums3eBAIfAAAAEs"]
[Fri Apr 10 23:26:09.026299 2026] [:error] [pid 63134:tid 63139] [client 74.248.123.16:60715] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/shell.php"] [unique_id "adkWkdFALqPDwWi6eJLI1wAAA8I"]
[Fri Apr 10 23:26:09.539163 2026] [:error] [pid 63134:tid 63145] [client 74.248.123.16:63640] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-links-opml.php"] [unique_id "adkWkdFALqPDwWi6eJLI2gAAA8g"]
[Fri Apr 10 23:26:10.206796 2026] [:error] [pid 62769:tid 62776] [client 74.248.123.16:64827] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-links-opml.php"] [unique_id "adkWksWsSnfLoB8ifjC-NAAAAkU"]
[Fri Apr 10 23:26:10.739101 2026] [:error] [pid 62769:tid 62785] [client 74.248.123.16:61948] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-links-opml.php"] [unique_id "adkWksWsSnfLoB8ifjC-OQAAAk4"]
[Fri Apr 10 23:26:11.398554 2026] [:error] [pid 62710:tid 62736] [client 74.248.123.16:65083] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-links-opml.php"] [unique_id "adkWk-ME7qrf5xEWWJtF8wAAAhc"]
[Fri Apr 10 23:26:11.908501 2026] [:error] [pid 62819:tid 62827] [client 74.248.123.16:63678] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "adkWk_U20EyPf7NlsleEYQAAAoU"]
[Fri Apr 10 23:26:12.417964 2026] [:error] [pid 13101:tid 13136] [client 74.248.123.16:64813] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "adkWlN8Ldw85818pj2ofHQAAAIM"]
[Fri Apr 10 23:26:12.929958 2026] [:error] [pid 62819:tid 62837] [client 74.248.123.16:61900] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "adkWlPU20EyPf7NlsleEawAAAo8"]
[Fri Apr 10 23:26:13.544915 2026] [:error] [pid 63134:tid 63141] [client 74.248.123.16:64830] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "adkWldFALqPDwWi6eJLI5QAAA8Q"]
[Fri Apr 10 23:26:14.203662 2026] [:error] [pid 63134:tid 63138] [client 74.248.123.16:63651] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws82.php"] [unique_id "adkWltFALqPDwWi6eJLI6AAAA8E"]
[Fri Apr 10 23:26:14.709737 2026] [:error] [pid 63134:tid 63147] [client 74.248.123.16:54602] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws82.php"] [unique_id "adkWltFALqPDwWi6eJLI7AAAA8o"]
[Fri Apr 10 23:26:15.221874 2026] [:error] [pid 62710:tid 62732] [client 74.248.123.16:61912] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws82.php"] [unique_id "adkWl-ME7qrf5xEWWJtF9wAAAhM"]
[Fri Apr 10 23:26:15.781248 2026] [:error] [pid 13189:tid 13211] [client 74.248.123.16:64789] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws82.php"] [unique_id "adkWl5AxiJKPums3eBAIgQAAAFM"]
[Fri Apr 10 23:26:16.331907 2026] [:error] [pid 63062:tid 63076] [client 74.248.123.16:63654] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/new.php"] [unique_id "adkWmJ2HtsmV85NqkMcP-wAAA4w"]
[Fri Apr 10 23:26:16.882569 2026] [:error] [pid 13189:tid 13194] [client 74.248.123.16:63666] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/new.php"] [unique_id "adkWmJAxiJKPums3eBAIigAAAEI"]
[Fri Apr 10 23:26:17.404550 2026] [:error] [pid 63134:tid 63140] [client 74.248.123.16:61653] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/new.php"] [unique_id "adkWmdFALqPDwWi6eJLI8QAAA8M"]
[Fri Apr 10 23:26:17.929166 2026] [:error] [pid 62710:tid 62721] [client 74.248.123.16:61678] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/new.php"] [unique_id "adkWmeME7qrf5xEWWJtGAAAAAgg"]
[Fri Apr 10 23:26:18.438294 2026] [:error] [pid 13189:tid 13192] [client 74.248.123.16:65080] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/press.php"] [unique_id "adkWmpAxiJKPums3eBAIkwAAAEA"]
[Fri Apr 10 23:26:18.948349 2026] [:error] [pid 62710:tid 62728] [client 74.248.123.16:60697] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/press.php"] [unique_id "adkWmuME7qrf5xEWWJtGBgAAAg8"]
[Fri Apr 10 23:26:19.458567 2026] [:error] [pid 13189:tid 13194] [client 74.248.123.16:61922] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/press.php"] [unique_id "adkWm5AxiJKPums3eBAInQAAAEI"]
[Fri Apr 10 23:26:19.969346 2026] [:error] [pid 13189:tid 13197] [client 74.248.123.16:65063] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/press.php"] [unique_id "adkWm5AxiJKPums3eBAIoQAAAEU"]
[Fri Apr 10 23:26:20.567843 2026] [:error] [pid 13189:tid 13195] [client 74.248.123.16:65075] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file-mancvgertdxz.php"] [unique_id "adkWnJAxiJKPums3eBAIpAAAAEM"]
[Fri Apr 10 23:26:21.119331 2026] [:error] [pid 62710:tid 62731] [client 74.248.123.16:63666] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file-mancvgertdxz.php"] [unique_id "adkWneME7qrf5xEWWJtGEAAAAhI"]
[Fri Apr 10 23:26:21.628038 2026] [:error] [pid 62884:tid 62900] [client 74.248.123.16:63499] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file-mancvgertdxz.php"] [unique_id "adkWneUCK1xrhnnmpo2akgAAAsk"]
[Fri Apr 10 23:26:22.191432 2026] [:error] [pid 62710:tid 62726] [client 74.248.123.16:58469] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file-mancvgertdxz.php"] [unique_id "adkWnuME7qrf5xEWWJtGFgAAAg0"]
[Fri Apr 10 23:26:22.805447 2026] [:error] [pid 13189:tid 13202] [client 74.248.123.16:64820] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "adkWnpAxiJKPums3eBAIsQAAAEo"]
[Fri Apr 10 23:26:23.433528 2026] [:error] [pid 62769:tid 62792] [client 74.248.123.16:56788] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "adkWn8WsSnfLoB8ifjC-WAAAAlU"]
[Fri Apr 10 23:26:23.941250 2026] [:error] [pid 13189:tid 13201] [client 74.248.123.16:63520] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "adkWn5AxiJKPums3eBAIugAAAEk"]
[Fri Apr 10 23:26:24.583345 2026] [:error] [pid 13101:tid 13153] [client 74.248.123.16:61654] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "adkWoN8Ldw85818pj2ofMQAAAJQ"]
[Fri Apr 10 23:26:25.260096 2026] [:error] [pid 13101:tid 13145] [client 74.248.123.16:60309] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws57.php"] [unique_id "adkWod8Ldw85818pj2ofNAAAAIw"]
[Fri Apr 10 23:26:25.872208 2026] [:error] [pid 13101:tid 13136] [client 74.248.123.16:60677] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws57.php"] [unique_id "adkWod8Ldw85818pj2ofNgAAAIM"]
[Fri Apr 10 23:26:26.408424 2026] [:error] [pid 62710:tid 62723] [client 74.248.123.16:61898] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws57.php"] [unique_id "adkWouME7qrf5xEWWJtGGgAAAgo"]
[Fri Apr 10 23:26:26.942492 2026] [:error] [pid 62710:tid 62731] [client 74.248.123.16:63674] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws57.php"] [unique_id "adkWouME7qrf5xEWWJtGHQAAAhI"]
[Fri Apr 10 23:26:27.452808 2026] [:error] [pid 62710:tid 62718] [client 74.248.123.16:54620] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.qiodetme.php"] [unique_id "adkWo-ME7qrf5xEWWJtGIQAAAgU"]
[Fri Apr 10 23:26:27.963954 2026] [:error] [pid 62769:tid 62779] [client 74.248.123.16:63541] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.qiodetme.php"] [unique_id "adkWo8WsSnfLoB8ifjC-aAAAAkg"]
[Fri Apr 10 23:26:28.491114 2026] [:error] [pid 13101:tid 13155] [client 74.248.123.16:63652] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.qiodetme.php"] [unique_id "adkWpN8Ldw85818pj2ofPAAAAJY"]
[Fri Apr 10 23:26:29.003482 2026] [:error] [pid 13100:tid 13129] [client 74.248.123.16:58466] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.qiodetme.php"] [unique_id "adkWpVzg-ZkZ0InWIP3R_AAAARg"]
[Fri Apr 10 23:26:29.521200 2026] [:error] [pid 62884:tid 62911] [client 74.248.123.16:58459] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sodas.php"] [unique_id "adkWpeUCK1xrhnnmpo2amgAAAtQ"]
[Fri Apr 10 23:26:30.090202 2026] [:error] [pid 13100:tid 13124] [client 74.248.123.16:63546] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sodas.php"] [unique_id "adkWplzg-ZkZ0InWIP3R_QAAARM"]
[Fri Apr 10 23:26:30.735796 2026] [:error] [pid 63062:tid 63064] [client 74.248.123.16:63655] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sodas.php"] [unique_id "adkWpp2HtsmV85NqkMcQFgAAA4A"]
[Fri Apr 10 23:26:31.340809 2026] [:error] [pid 13101:tid 13145] [client 74.248.123.16:65087] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sodas.php"] [unique_id "adkWp98Ldw85818pj2ofQwAAAIw"]
[Fri Apr 10 23:26:31.901737 2026] [:error] [pid 13101:tid 13149] [client 74.248.123.16:64777] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/yw5bi63u.php"] [unique_id "adkWp98Ldw85818pj2ofRgAAAJA"]
[Fri Apr 10 23:26:32.415590 2026] [:error] [pid 62769:tid 62794] [client 74.248.123.16:61644] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/yw5bi63u.php"] [unique_id "adkWqMWsSnfLoB8ifjC-dAAAAlc"]
[Fri Apr 10 23:26:32.950884 2026] [:error] [pid 62769:tid 62774] [client 74.248.123.16:64814] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/yw5bi63u.php"] [unique_id "adkWqMWsSnfLoB8ifjC-eQAAAkM"]
[Fri Apr 10 23:26:33.466559 2026] [:error] [pid 62769:tid 62782] [client 74.248.123.16:60709] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/yw5bi63u.php"] [unique_id "adkWqcWsSnfLoB8ifjC-gAAAAks"]
[Fri Apr 10 23:26:34.049429 2026] [:error] [pid 13189:tid 13198] [client 74.248.123.16:63624] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws81.php"] [unique_id "adkWqpAxiJKPums3eBAI9AAAAEY"]
[Fri Apr 10 23:26:34.718852 2026] [:error] [pid 13101:tid 13155] [client 74.248.123.16:60341] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws81.php"] [unique_id "adkWqt8Ldw85818pj2ofSQAAAJY"]
[Fri Apr 10 23:26:35.293684 2026] [:error] [pid 62710:tid 62719] [client 74.248.123.16:61650] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws81.php"] [unique_id "adkWq-ME7qrf5xEWWJtGLQAAAgY"]
[Fri Apr 10 23:26:35.995507 2026] [:error] [pid 62769:tid 62789] [client 74.248.123.16:58451] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws81.php"] [unique_id "adkWq8WsSnfLoB8ifjC-jAAAAlI"]
[Fri Apr 10 23:26:36.511205 2026] [:error] [pid 62769:tid 62795] [client 74.248.123.16:64773] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mh.php"] [unique_id "adkWrMWsSnfLoB8ifjC-kQAAAlg"]
[Fri Apr 10 23:26:37.033862 2026] [:error] [pid 62769:tid 62788] [client 74.248.123.16:61946] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mh.php"] [unique_id "adkWrcWsSnfLoB8ifjC-lQAAAlE"]
[Fri Apr 10 23:26:37.550379 2026] [:error] [pid 13100:tid 13119] [client 74.248.123.16:58479] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mh.php"] [unique_id "adkWrVzg-ZkZ0InWIP3SCAAAAQ4"]
[Fri Apr 10 23:26:38.082554 2026] [:error] [pid 63134:tid 63154] [client 74.248.123.16:58407] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mh.php"] [unique_id "adkWrtFALqPDwWi6eJLJCgAAA9E"]
[Fri Apr 10 23:26:38.639914 2026] [:error] [pid 62769:tid 62791] [client 74.248.123.16:58446] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws88.php"] [unique_id "adkWrsWsSnfLoB8ifjC-mwAAAlQ"]
[Fri Apr 10 23:26:39.166393 2026] [:error] [pid 13101:tid 13145] [client 74.248.123.16:63526] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws88.php"] [unique_id "adkWr98Ldw85818pj2ofTwAAAIw"]
[Fri Apr 10 23:26:39.838177 2026] [:error] [pid 63134:tid 63137] [client 74.248.123.16:63509] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws88.php"] [unique_id "adkWr9FALqPDwWi6eJLJDQAAA8A"]
[Fri Apr 10 23:26:40.442401 2026] [:error] [pid 62769:tid 62776] [client 74.248.123.16:64770] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws88.php"] [unique_id "adkWsMWsSnfLoB8ifjC-oQAAAkU"]
[Fri Apr 10 23:26:40.978426 2026] [:error] [pid 62769:tid 62791] [client 74.248.123.16:58382] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws86.php"] [unique_id "adkWsMWsSnfLoB8ifjC-pwAAAlQ"]
[Fri Apr 10 23:26:41.487093 2026] [:error] [pid 62769:tid 62773] [client 74.248.123.16:58463] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws86.php"] [unique_id "adkWscWsSnfLoB8ifjC-rgAAAkI"]
[Fri Apr 10 23:26:42.003199 2026] [:error] [pid 62769:tid 62788] [client 74.248.123.16:60311] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws86.php"] [unique_id "adkWssWsSnfLoB8ifjC-sgAAAlE"]
[Fri Apr 10 23:26:42.517761 2026] [:error] [pid 63062:tid 63086] [client 74.248.123.16:64816] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws86.php"] [unique_id "adkWsp2HtsmV85NqkMcQNwAAA5Y"]
[Fri Apr 10 23:26:43.037904 2026] [:error] [pid 13189:tid 13195] [client 74.248.123.16:65038] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vx.php"] [unique_id "adkWs5AxiJKPums3eBAJKgAAAEM"]
[Fri Apr 10 23:26:43.576511 2026] [:error] [pid 13100:tid 13124] [client 74.248.123.16:58444] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vx.php"] [unique_id "adkWs1zg-ZkZ0InWIP3SEwAAARM"]
[Fri Apr 10 23:26:44.207777 2026] [:error] [pid 62651:tid 62676] [client 74.248.123.16:60681] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vx.php"] [unique_id "adkWtDbAH0le57SIaqw4zwAAAdc"]
[Fri Apr 10 23:26:44.763662 2026] [:error] [pid 62884:tid 62898] [client 74.248.123.16:61908] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vx.php"] [unique_id "adkWtOUCK1xrhnnmpo2arwAAAsc"]
[Fri Apr 10 23:26:45.367634 2026] [:error] [pid 62710:tid 62716] [client 74.248.123.16:60727] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dass.php"] [unique_id "adkWteME7qrf5xEWWJtGNAAAAgM"]
[Fri Apr 10 23:26:45.885849 2026] [:error] [pid 13189:tid 13204] [client 74.248.123.16:61937] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dass.php"] [unique_id "adkWtZAxiJKPums3eBAJPgAAAEw"]
[Fri Apr 10 23:26:46.396190 2026] [:error] [pid 63134:tid 63140] [client 74.248.123.16:63523] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dass.php"] [unique_id "adkWttFALqPDwWi6eJLJGwAAA8M"]
[Fri Apr 10 23:26:46.946337 2026] [:error] [pid 13189:tid 13193] [client 74.248.123.16:61950] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dass.php"] [unique_id "adkWtpAxiJKPums3eBAJSAAAAEE"]
[Fri Apr 10 23:26:47.609940 2026] [:error] [pid 63062:tid 63076] [client 74.248.123.16:63543] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/s.php"] [unique_id "adkWt52HtsmV85NqkMcQPQAAA4w"]
[Fri Apr 10 23:26:48.156791 2026] [:error] [pid 62769:tid 62775] [client 74.248.123.16:63676] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/s.php"] [unique_id "adkWuMWsSnfLoB8ifjC-xQAAAkQ"]
[Fri Apr 10 23:26:48.673329 2026] [:error] [pid 63134:tid 63145] [client 74.248.123.16:61648] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/s.php"] [unique_id "adkWuNFALqPDwWi6eJLJIwAAA8g"]
[Fri Apr 10 23:26:49.194601 2026] [:error] [pid 13189:tid 13197] [client 74.248.123.16:60288] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/s.php"] [unique_id "adkWuZAxiJKPums3eBAJYAAAAEU"]
[Fri Apr 10 23:26:49.762547 2026] [:error] [pid 62884:tid 62908] [client 74.248.123.16:61640] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kj.php"] [unique_id "adkWueUCK1xrhnnmpo2augAAAtE"]
[Fri Apr 10 23:26:50.388659 2026] [:error] [pid 62769:tid 62795] [client 74.248.123.16:60325] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kj.php"] [unique_id "adkWusWsSnfLoB8ifjC-yQAAAlg"]
[Fri Apr 10 23:26:50.916410 2026] [:error] [pid 63134:tid 63156] [client 74.248.123.16:61892] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kj.php"] [unique_id "adkWutFALqPDwWi6eJLJMAAAA9M"]
[Fri Apr 10 23:26:51.537136 2026] [:error] [pid 62710:tid 62735] [client 74.248.123.16:64823] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kj.php"] [unique_id "adkWu-ME7qrf5xEWWJtGOQAAAhY"]
[Fri Apr 10 23:26:52.158779 2026] [:error] [pid 62710:tid 62727] [client 74.248.123.16:64800] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws83.php"] [unique_id "adkWvOME7qrf5xEWWJtGPgAAAg4"]
[Fri Apr 10 23:26:52.699211 2026] [:error] [pid 62710:tid 62728] [client 74.248.123.16:63530] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws83.php"] [unique_id "adkWvOME7qrf5xEWWJtGRAAAAg8"]
[Fri Apr 10 23:26:53.211556 2026] [:error] [pid 62769:tid 62794] [client 74.248.123.16:58428] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws83.php"] [unique_id "adkWvcWsSnfLoB8ifjC-zgAAAlc"]
[Fri Apr 10 23:26:53.747597 2026] [:error] [pid 62769:tid 62784] [client 74.248.123.16:63498] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws83.php"] [unique_id "adkWvcWsSnfLoB8ifjC-0QAAAk0"]
[Fri Apr 10 23:26:54.374571 2026] [:error] [pid 62769:tid 62773] [client 74.248.123.16:61951] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws75.php"] [unique_id "adkWvsWsSnfLoB8ifjC-1wAAAkI"]
[Fri Apr 10 23:26:54.892035 2026] [:error] [pid 62710:tid 62734] [client 74.248.123.16:56718] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws75.php"] [unique_id "adkWvuME7qrf5xEWWJtGUAAAAhU"]
[Fri Apr 10 23:26:55.411803 2026] [:error] [pid 63062:tid 63085] [client 74.248.123.16:63519] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws75.php"] [unique_id "adkWv52HtsmV85NqkMcQUwAAA5U"]
[Fri Apr 10 23:26:55.934380 2026] [:error] [pid 13189:tid 13204] [client 74.248.123.16:61676] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws75.php"] [unique_id "adkWv5AxiJKPums3eBAJfQAAAEw"]
[Fri Apr 10 23:26:56.450181 2026] [:error] [pid 62819:tid 62825] [client 74.248.123.16:60706] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ms-edit.php"] [unique_id "adkWwPU20EyPf7NlsleEpQAAAoM"]
[Fri Apr 10 23:26:56.976474 2026] [:error] [pid 62769:tid 62787] [client 74.248.123.16:64787] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ms-edit.php"] [unique_id "adkWwMWsSnfLoB8ifjC-5AAAAlA"]
[Fri Apr 10 23:26:57.530746 2026] [:error] [pid 62769:tid 62782] [client 74.248.123.16:65047] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ms-edit.php"] [unique_id "adkWwcWsSnfLoB8ifjC-6QAAAks"]
[Fri Apr 10 23:26:58.049203 2026] [:error] [pid 62769:tid 62777] [client 74.248.123.16:61668] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ms-edit.php"] [unique_id "adkWwsWsSnfLoB8ifjC-7gAAAkY"]
[Fri Apr 10 23:26:58.627815 2026] [:error] [pid 63062:tid 63084] [client 74.248.123.16:60731] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/abc.php"] [unique_id "adkWwp2HtsmV85NqkMcQWAAAA5Q"]
[Fri Apr 10 23:26:59.138442 2026] [:error] [pid 62710:tid 62727] [client 74.248.123.16:61681] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/abc.php"] [unique_id "adkWw-ME7qrf5xEWWJtGWwAAAg4"]
[Fri Apr 10 23:26:59.694719 2026] [:error] [pid 63134:tid 63141] [client 74.248.123.16:60687] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/abc.php"] [unique_id "adkWw9FALqPDwWi6eJLJWgAAA8Q"]
[Fri Apr 10 23:27:00.417997 2026] [:error] [pid 62769:tid 62794] [client 74.248.123.16:63648] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/abc.php"] [unique_id "adkWxMWsSnfLoB8ifjC-_gAAAlc"]
[Fri Apr 10 23:27:00.938210 2026] [:error] [pid 13101:tid 13153] [client 74.248.123.16:61893] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/motu.php"] [unique_id "adkWxN8Ldw85818pj2ofaQAAAJQ"]
[Fri Apr 10 23:27:01.457778 2026] [:error] [pid 13101:tid 13140] [client 74.248.123.16:61632] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/motu.php"] [unique_id "adkWxd8Ldw85818pj2ofbAAAAIc"]
[Fri Apr 10 23:27:01.989684 2026] [:error] [pid 62769:tid 62783] [client 74.248.123.16:63647] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/motu.php"] [unique_id "adkWxcWsSnfLoB8ifjC_EwAAAkw"]
[Fri Apr 10 23:27:02.521336 2026] [proxy_fcgi:error] [pid 63062:tid 63072] [client 74.248.123.16:64809] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 23:27:02.794350 2026] [proxy_fcgi:error] [pid 63062:tid 63066] [client 74.248.123.16:64809] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 23:27:03.052400 2026] [proxy_fcgi:error] [pid 63062:tid 63069] [client 74.248.123.16:64809] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 23:27:03.568660 2026] [proxy_fcgi:error] [pid 63062:tid 63076] [client 74.248.123.16:64809] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 23:27:03.828247 2026] [proxy_fcgi:error] [pid 63062:tid 63078] [client 74.248.123.16:64809] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 23:27:04.086865 2026] [proxy_fcgi:error] [pid 63062:tid 63065] [client 74.248.123.16:64809] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 23:27:04.346427 2026] [proxy_fcgi:error] [pid 63062:tid 63088] [client 74.248.123.16:64809] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 23:27:04.861469 2026] [proxy_fcgi:error] [pid 63062:tid 63068] [client 74.248.123.16:64809] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 23:27:05.416086 2026] [:error] [pid 63062:tid 63064] [client 74.248.123.16:64809] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jp.php"] [unique_id "adkWyZ2HtsmV85NqkMcQbQAAA4A"]
[Fri Apr 10 23:27:05.994084 2026] [:error] [pid 13101:tid 13141] [client 74.248.123.16:58481] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jp.php"] [unique_id "adkWyd8Ldw85818pj2offwAAAIg"]
[Fri Apr 10 23:27:06.514628 2026] [:error] [pid 62769:tid 62775] [client 74.248.123.16:60293] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jp.php"] [unique_id "adkWysWsSnfLoB8ifjC_LgAAAkQ"]
[Fri Apr 10 23:27:07.031249 2026] [:error] [pid 62769:tid 62773] [client 74.248.123.16:65067] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jp.php"] [unique_id "adkWy8WsSnfLoB8ifjC_NwAAAkI"]
[Fri Apr 10 23:27:07.600877 2026] [:error] [pid 13101:tid 13143] [client 74.248.123.16:58490] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-good.php"] [unique_id "adkWy98Ldw85818pj2ofhQAAAIo"]
[Fri Apr 10 23:27:08.117802 2026] [:error] [pid 13101:tid 13157] [client 74.248.123.16:58396] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-good.php"] [unique_id "adkWzN8Ldw85818pj2ofiQAAAJg"]
[Fri Apr 10 23:27:08.634691 2026] [:error] [pid 63134:tid 63144] [client 74.248.123.16:60343] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-good.php"] [unique_id "adkWzNFALqPDwWi6eJLJZAAAA8c"]
[Fri Apr 10 23:27:09.152594 2026] [:error] [pid 62769:tid 62782] [client 74.248.123.16:58388] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-good.php"] [unique_id "adkWzcWsSnfLoB8ifjC_RAAAAks"]
[Fri Apr 10 23:27:09.678110 2026] [:error] [pid 62710:tid 62717] [client 74.248.123.16:56794] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a5.php"] [unique_id "adkWzeME7qrf5xEWWJtGagAAAgQ"]
[Fri Apr 10 23:27:10.205485 2026] [:error] [pid 63134:tid 63139] [client 74.248.123.16:63489] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a5.php"] [unique_id "adkWztFALqPDwWi6eJLJaQAAA8I"]
[Fri Apr 10 23:27:10.715863 2026] [:error] [pid 13100:tid 13113] [client 74.248.123.16:60350] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a5.php"] [unique_id "adkWzlzg-ZkZ0InWIP3SIwAAAQg"]
[Fri Apr 10 23:27:11.242500 2026] [:error] [pid 13101:tid 13134] [client 74.248.123.16:58472] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a5.php"] [unique_id "adkWz98Ldw85818pj2oflQAAAIE"]
[Fri Apr 10 23:27:11.755328 2026] [:error] [pid 62769:tid 62780] [client 74.248.123.16:63504] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/amp.php"] [unique_id "adkWz8WsSnfLoB8ifjC_UQAAAkk"]
[Fri Apr 10 23:27:12.271679 2026] [:error] [pid 13189:tid 13205] [client 74.248.123.16:65033] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/amp.php"] [unique_id "adkW0JAxiJKPums3eBAJqwAAAE0"]
[Fri Apr 10 23:27:12.779856 2026] [:error] [pid 62769:tid 62787] [client 74.248.123.16:58450] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/amp.php"] [unique_id "adkW0MWsSnfLoB8ifjC_ZgAAAlA"]
[Fri Apr 10 23:27:13.297881 2026] [:error] [pid 62884:tid 62893] [client 74.248.123.16:60735] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/amp.php"] [unique_id "adkW0eUCK1xrhnnmpo2axAAAAsI"]
[Fri Apr 10 23:27:13.839685 2026] [:error] [pid 13101:tid 13134] [client 74.248.123.16:56771] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/abrand.php"] [unique_id "adkW0d8Ldw85818pj2ofngAAAIE"]
[Fri Apr 10 23:27:14.398292 2026] [:error] [pid 62769:tid 62788] [client 74.248.123.16:58399] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/abrand.php"] [unique_id "adkW0sWsSnfLoB8ifjC_cwAAAlE"]
[Fri Apr 10 23:27:14.977178 2026] [:error] [pid 13101:tid 13152] [client 74.248.123.16:61641] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/abrand.php"] [unique_id "adkW0t8Ldw85818pj2ofowAAAJM"]
[Fri Apr 10 23:27:15.491080 2026] [:error] [pid 62769:tid 62786] [client 74.248.123.16:58452] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/abrand.php"] [unique_id "adkW08WsSnfLoB8ifjC_fAAAAk8"]
[Fri Apr 10 23:27:16.001934 2026] [:error] [pid 13100:tid 13112] [client 74.248.123.16:63521] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/init.php"] [unique_id "adkW1Fzg-ZkZ0InWIP3SJQAAAQc"]
[Fri Apr 10 23:27:16.539668 2026] [:error] [pid 62710:tid 62726] [client 74.248.123.16:60326] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/init.php"] [unique_id "adkW1OME7qrf5xEWWJtGbgAAAg0"]
[Fri Apr 10 23:27:17.052294 2026] [:error] [pid 62651:tid 62676] [client 74.248.123.16:60312] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/init.php"] [unique_id "adkW1TbAH0le57SIaqw42QAAAdc"]
[Fri Apr 10 23:27:17.634281 2026] [:error] [pid 62819:tid 62835] [client 74.248.123.16:58397] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/init.php"] [unique_id "adkW1fU20EyPf7NlsleEvQAAAo0"]
[Fri Apr 10 23:27:18.203627 2026] [:error] [pid 13189:tid 13203] [client 74.248.123.16:64829] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gettest.php"] [unique_id "adkW1pAxiJKPums3eBAJwgAAAEs"]
[Fri Apr 10 23:27:18.718988 2026] [:error] [pid 62769:tid 62788] [client 74.248.123.16:63540] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gettest.php"] [unique_id "adkW1sWsSnfLoB8ifjC_hQAAAlE"]
[Fri Apr 10 23:27:19.248063 2026] [:error] [pid 62710:tid 62725] [client 74.248.123.16:54594] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gettest.php"] [unique_id "adkW1-ME7qrf5xEWWJtGdgAAAgw"]
[Fri Apr 10 23:27:19.757806 2026] [:error] [pid 13101:tid 13154] [client 74.248.123.16:61940] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gettest.php"] [unique_id "adkW198Ldw85818pj2ofrgAAAJU"]
[Fri Apr 10 23:27:20.331895 2026] [:error] [pid 13101:tid 13142] [client 74.248.123.16:61895] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/myfile.php"] [unique_id "adkW2N8Ldw85818pj2ofswAAAIk"]
[Fri Apr 10 23:27:20.872748 2026] [:error] [pid 62769:tid 62771] [client 74.248.123.16:61931] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/myfile.php"] [unique_id "adkW2MWsSnfLoB8ifjC_jwAAAkA"]
[Fri Apr 10 23:27:21.490814 2026] [:error] [pid 13189:tid 13201] [client 74.248.123.16:63653] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/myfile.php"] [unique_id "adkW2ZAxiJKPums3eBAJ0gAAAEk"]
[Fri Apr 10 23:27:22.003040 2026] [:error] [pid 63134:tid 63138] [client 74.248.123.16:58457] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/myfile.php"] [unique_id "adkW2tFALqPDwWi6eJLJeAAAA8E"]
[Fri Apr 10 23:27:22.513384 2026] [:error] [pid 62769:tid 62772] [client 74.248.123.16:63627] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sid3.php"] [unique_id "adkW2sWsSnfLoB8ifjC_lwAAAkE"]
[Fri Apr 10 23:27:23.134211 2026] [:error] [pid 62769:tid 62783] [client 74.248.123.16:61888] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sid3.php"] [unique_id "adkW28WsSnfLoB8ifjC_nQAAAkw"]
[Fri Apr 10 23:27:23.644220 2026] [:error] [pid 13101:tid 13157] [client 74.248.123.16:60700] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sid3.php"] [unique_id "adkW298Ldw85818pj2ofvwAAAJg"]
[Fri Apr 10 23:27:24.166905 2026] [:error] [pid 62710:tid 62725] [client 74.248.123.16:58433] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sid3.php"] [unique_id "adkW3OME7qrf5xEWWJtGggAAAgw"]
[Fri Apr 10 23:27:24.674987 2026] [:error] [pid 13189:tid 13200] [client 74.248.123.16:61687] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/666.php"] [unique_id "adkW3JAxiJKPums3eBAJ3wAAAEg"]
[Fri Apr 10 23:27:25.188351 2026] [:error] [pid 62710:tid 62715] [client 74.248.123.16:63645] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/666.php"] [unique_id "adkW3eME7qrf5xEWWJtGhwAAAgI"]
[Fri Apr 10 23:27:25.739341 2026] [:error] [pid 62769:tid 62779] [client 74.248.123.16:58425] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/666.php"] [unique_id "adkW3cWsSnfLoB8ifjC_uAAAAkg"]
[Fri Apr 10 23:27:26.251375 2026] [:error] [pid 62769:tid 62777] [client 74.248.123.16:56803] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/666.php"] [unique_id "adkW3sWsSnfLoB8ifjC_wQAAAkY"]
[Fri Apr 10 23:27:26.772088 2026] [:error] [pid 13189:tid 13205] [client 74.248.123.16:61938] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xxw.php"] [unique_id "adkW3pAxiJKPums3eBAJ5QAAAE0"]
[Fri Apr 10 23:27:27.293730 2026] [:error] [pid 62884:tid 62900] [client 74.248.123.16:61670] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xxw.php"] [unique_id "adkW3-UCK1xrhnnmpo2a0gAAAsk"]
[Fri Apr 10 23:27:27.805917 2026] [:error] [pid 62769:tid 62794] [client 74.248.123.16:63644] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xxw.php"] [unique_id "adkW38WsSnfLoB8ifjC_4wAAAlc"]
[Fri Apr 10 23:27:28.341806 2026] [:error] [pid 13189:tid 13214] [client 74.248.123.16:56809] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xxw.php"] [unique_id "adkW4JAxiJKPums3eBAJ8AAAAFY"]
[Fri Apr 10 23:27:28.857565 2026] [:error] [pid 13189:tid 13206] [client 74.248.123.16:61914] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-png.php"] [unique_id "adkW4JAxiJKPums3eBAJ9wAAAE4"]
[Fri Apr 10 23:27:29.391318 2026] [:error] [pid 62769:tid 62784] [client 74.248.123.16:63665] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-png.php"] [unique_id "adkW4cWsSnfLoB8ifjC_9QAAAk0"]
[Fri Apr 10 23:27:29.957016 2026] [:error] [pid 13189:tid 13214] [client 74.248.123.16:61638] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-png.php"] [unique_id "adkW4ZAxiJKPums3eBAJ_gAAAFY"]
[Fri Apr 10 23:27:30.575365 2026] [:error] [pid 62884:tid 62899] [client 74.248.123.16:64783] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-png.php"] [unique_id "adkW4uUCK1xrhnnmpo2a0wAAAsg"]
[Fri Apr 10 23:27:31.112573 2026] [:error] [pid 62710:tid 62732] [client 74.248.123.16:61915] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/222.php"] [unique_id "adkW4-ME7qrf5xEWWJtGkAAAAhM"]
[Fri Apr 10 23:27:31.627027 2026] [:error] [pid 62710:tid 62724] [client 74.248.123.16:64780] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/222.php"] [unique_id "adkW4-ME7qrf5xEWWJtGlgAAAgs"]
[Fri Apr 10 23:27:32.149799 2026] [:error] [pid 63134:tid 63157] [client 74.248.123.16:61664] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/222.php"] [unique_id "adkW5NFALqPDwWi6eJLJfwAAA9Q"]
[Fri Apr 10 23:27:32.683131 2026] [:error] [pid 63134:tid 63155] [client 74.248.123.16:63550] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/222.php"] [unique_id "adkW5NFALqPDwWi6eJLJgQAAA9I"]
[Fri Apr 10 23:27:33.191646 2026] [:error] [pid 13189:tid 13202] [client 74.248.123.16:61689] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-blog.php"] [unique_id "adkW5ZAxiJKPums3eBAKCwAAAEo"]
[Fri Apr 10 23:27:33.705311 2026] [:error] [pid 62819:tid 62830] [client 74.248.123.16:60707] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-blog.php"] [unique_id "adkW5fU20EyPf7NlsleE0gAAAog"]
[Fri Apr 10 23:27:34.217282 2026] [:error] [pid 13189:tid 13207] [client 74.248.123.16:61921] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-blog.php"] [unique_id "adkW5pAxiJKPums3eBAKEAAAAE8"]
[Fri Apr 10 23:27:34.735910 2026] [:error] [pid 13189:tid 13215] [client 74.248.123.16:58368] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-blog.php"] [unique_id "adkW5pAxiJKPums3eBAKFAAAAFc"]
[Fri Apr 10 23:27:35.252820 2026] [:error] [pid 13101:tid 13150] [client 74.248.123.16:60695] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "adkW598Ldw85818pj2of2AAAAJE"]
[Fri Apr 10 23:27:35.835482 2026] [:error] [pid 62710:tid 62732] [client 74.248.123.16:60303] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "adkW5-ME7qrf5xEWWJtGnwAAAhM"]
[Fri Apr 10 23:27:36.355991 2026] [:error] [pid 13189:tid 13207] [client 74.248.123.16:61646] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "adkW6JAxiJKPums3eBAKGwAAAE8"]
[Fri Apr 10 23:27:36.871957 2026] [:error] [pid 62710:tid 62735] [client 74.248.123.16:56757] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "adkW6OME7qrf5xEWWJtGoQAAAhY"]
[Fri Apr 10 23:27:37.381285 2026] [:error] [pid 62651:tid 62654] [client 74.248.123.16:61677] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lib.php"] [unique_id "adkW6TbAH0le57SIaqw44gAAAcE"]
[Fri Apr 10 23:27:37.895753 2026] [:error] [pid 13101:tid 13144] [client 74.248.123.16:61936] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lib.php"] [unique_id "adkW6d8Ldw85818pj2of3QAAAIs"]
[Fri Apr 10 23:27:38.412154 2026] [:error] [pid 63134:tid 63141] [client 74.248.123.16:61941] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lib.php"] [unique_id "adkW6tFALqPDwWi6eJLJjAAAA8Q"]
[Fri Apr 10 23:27:38.928526 2026] [:error] [pid 13100:tid 13121] [client 74.248.123.16:56777] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lib.php"] [unique_id "adkW6lzg-ZkZ0InWIP3SNQAAARA"]
[Fri Apr 10 23:27:39.506460 2026] [:error] [pid 63062:tid 63086] [client 74.248.123.16:60717] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/edit.php"] [unique_id "adkW652HtsmV85NqkMcQiAAAA5Y"]
[Fri Apr 10 23:27:40.034123 2026] [:error] [pid 13100:tid 13110] [client 74.248.123.16:56827] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/edit.php"] [unique_id "adkW7Fzg-ZkZ0InWIP3SNgAAAQU"]
[Fri Apr 10 23:27:40.565805 2026] [:error] [pid 63062:tid 63069] [client 74.248.123.16:58383] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/edit.php"] [unique_id "adkW7J2HtsmV85NqkMcQkQAAA4U"]
[Fri Apr 10 23:27:41.080508 2026] [:error] [pid 13189:tid 13203] [client 74.248.123.16:61939] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/edit.php"] [unique_id "adkW7ZAxiJKPums3eBAKKwAAAEs"]
[Fri Apr 10 23:27:41.626967 2026] [:error] [pid 13101:tid 13144] [client 74.248.123.16:65030] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ioxi-o.php"] [unique_id "adkW7d8Ldw85818pj2of7QAAAIs"]
[Fri Apr 10 23:27:42.156057 2026] [:error] [pid 62769:tid 62786] [client 74.248.123.16:58454] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ioxi-o.php"] [unique_id "adkW7sWsSnfLoB8ifjDAHAAAAk8"]
[Fri Apr 10 23:27:42.667888 2026] [:error] [pid 62769:tid 62780] [client 74.248.123.16:58438] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ioxi-o.php"] [unique_id "adkW7sWsSnfLoB8ifjDAHwAAAkk"]
[Fri Apr 10 23:27:43.243859 2026] [:error] [pid 62769:tid 62778] [client 74.248.123.16:65062] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ioxi-o.php"] [unique_id "adkW78WsSnfLoB8ifjDAJgAAAkc"]
[Fri Apr 10 23:27:43.767916 2026] [:error] [pid 62769:tid 62782] [client 74.248.123.16:56818] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ajax.php"] [unique_id "adkW78WsSnfLoB8ifjDAKgAAAks"]
[Fri Apr 10 23:27:44.278253 2026] [:error] [pid 62710:tid 62729] [client 74.248.123.16:65027] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ajax.php"] [unique_id "adkW8OME7qrf5xEWWJtGpwAAAhA"]
[Fri Apr 10 23:27:44.802127 2026] [:error] [pid 62710:tid 62737] [client 74.248.123.16:65069] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ajax.php"] [unique_id "adkW8OME7qrf5xEWWJtGqgAAAhg"]
[Fri Apr 10 23:27:45.317494 2026] [:error] [pid 13189:tid 13198] [client 74.248.123.16:56781] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ajax.php"] [unique_id "adkW8ZAxiJKPums3eBAKNAAAAEY"]
[Fri Apr 10 23:27:45.876686 2026] [:error] [pid 62884:tid 62893] [client 74.248.123.16:58465] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/install.php"] [unique_id "adkW8eUCK1xrhnnmpo2a_wAAAsI"]
[Fri Apr 10 23:27:46.403976 2026] [:error] [pid 62710:tid 62734] [client 74.248.123.16:65032] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/install.php"] [unique_id "adkW8uME7qrf5xEWWJtGsQAAAhU"]
[Fri Apr 10 23:27:46.955059 2026] [:error] [pid 13189:tid 13202] [client 74.248.123.16:65034] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/install.php"] [unique_id "adkW8pAxiJKPums3eBAKPgAAAEo"]
[Fri Apr 10 23:27:47.465399 2026] [:error] [pid 13101:tid 13134] [client 74.248.123.16:65052] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/install.php"] [unique_id "adkW898Ldw85818pj2ogAwAAAIE"]
[Fri Apr 10 23:27:47.987804 2026] [:error] [pid 63134:tid 63159] [client 74.248.123.16:63641] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/public/wp-blog.php"] [unique_id "adkW89FALqPDwWi6eJLJogAAA9Y"]
[Fri Apr 10 23:27:48.500981 2026] [:error] [pid 63134:tid 63152] [client 74.248.123.16:61920] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/public/wp-blog.php"] [unique_id "adkW9NFALqPDwWi6eJLJqAAAA88"]
[Fri Apr 10 23:27:49.016739 2026] [:error] [pid 62819:tid 62830] [client 74.248.123.16:64827] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/public/wp-blog.php"] [unique_id "adkW9fU20EyPf7NlsleE4AAAAog"]
[Fri Apr 10 23:27:49.550651 2026] [:error] [pid 62819:tid 62844] [client 74.248.123.16:58393] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/public/wp-blog.php"] [unique_id "adkW9fU20EyPf7NlsleE5AAAApY"]
[Fri Apr 10 23:27:50.072502 2026] [:error] [pid 62710:tid 62737] [client 74.248.123.16:61658] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nw.php"] [unique_id "adkW9uME7qrf5xEWWJtGuQAAAhg"]
[Fri Apr 10 23:27:50.594017 2026] [:error] [pid 62819:tid 62829] [client 74.248.123.16:58458] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nw.php"] [unique_id "adkW9vU20EyPf7NlsleE6QAAAoc"]
[Fri Apr 10 23:27:51.106677 2026] [:error] [pid 13189:tid 13195] [client 74.248.123.16:63511] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nw.php"] [unique_id "adkW95AxiJKPums3eBAKVQAAAEM"]
[Fri Apr 10 23:27:51.619808 2026] [:error] [pid 13189:tid 13204] [client 74.248.123.16:64810] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nw.php"] [unique_id "adkW95AxiJKPums3eBAKWgAAAEw"]
[Fri Apr 10 23:27:52.199958 2026] [:error] [pid 62710:tid 62714] [client 74.248.123.16:60347] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tool.php"] [unique_id "adkW-OME7qrf5xEWWJtGvgAAAgE"]
[Fri Apr 10 23:27:52.711329 2026] [:error] [pid 13189:tid 13193] [client 74.248.123.16:64826] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tool.php"] [unique_id "adkW-JAxiJKPums3eBAKYQAAAEE"]
[Fri Apr 10 23:27:53.321530 2026] [:error] [pid 13189:tid 13204] [client 74.248.123.16:64822] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tool.php"] [unique_id "adkW-ZAxiJKPums3eBAKaQAAAEw"]
[Fri Apr 10 23:27:53.826360 2026] [:error] [pid 13189:tid 13215] [client 74.248.123.16:64828] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tool.php"] [unique_id "adkW-ZAxiJKPums3eBAKbgAAAFc"]
[Fri Apr 10 23:27:54.362759 2026] [:error] [pid 62769:tid 62777] [client 74.248.123.16:60292] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/drhunthq.php"] [unique_id "adkW-sWsSnfLoB8ifjDAQwAAAkY"]
[Fri Apr 10 23:27:54.873722 2026] [:error] [pid 62710:tid 62727] [client 74.248.123.16:63650] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/drhunthq.php"] [unique_id "adkW-uME7qrf5xEWWJtGyQAAAg4"]
[Fri Apr 10 23:27:55.469719 2026] [:error] [pid 62710:tid 62731] [client 74.248.123.16:58435] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/drhunthq.php"] [unique_id "adkW--ME7qrf5xEWWJtG0wAAAhI"]
[Fri Apr 10 23:27:55.997314 2026] [:error] [pid 62710:tid 62736] [client 74.248.123.16:60299] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/drhunthq.php"] [unique_id "adkW--ME7qrf5xEWWJtG2wAAAhc"]
[Fri Apr 10 23:27:56.506136 2026] [:error] [pid 62710:tid 62731] [client 74.248.123.16:54500] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin/index.php"] [unique_id "adkW_OME7qrf5xEWWJtG4wAAAhI"]
[Fri Apr 10 23:27:57.019139 2026] [:error] [pid 62769:tid 62791] [client 74.248.123.16:54592] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin/index.php"] [unique_id "adkW_cWsSnfLoB8ifjDATgAAAlQ"]
[Fri Apr 10 23:27:57.542055 2026] [:error] [pid 62819:tid 62833] [client 74.248.123.16:60672] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin/index.php"] [unique_id "adkW_fU20EyPf7NlsleE7AAAAos"]
[Fri Apr 10 23:27:59.732881 2026] [:error] [pid 13100:tid 13109] [client 74.248.123.16:56730] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin/index.php"] [unique_id "adkW_1zg-ZkZ0InWIP3SQgAAAQQ"]
[Fri Apr 10 23:28:00.394099 2026] [:error] [pid 62819:tid 62836] [client 74.248.123.16:58464] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tfm.php"] [unique_id "adkXAPU20EyPf7NlsleE9gAAAo4"]
[Fri Apr 10 23:28:01.011312 2026] [:error] [pid 62769:tid 62775] [client 74.248.123.16:60333] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tfm.php"] [unique_id "adkXAcWsSnfLoB8ifjDAdAAAAkQ"]
[Fri Apr 10 23:28:01.545176 2026] [:error] [pid 62769:tid 62786] [client 74.248.123.16:60327] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tfm.php"] [unique_id "adkXAcWsSnfLoB8ifjDAfQAAAk8"]
[Fri Apr 10 23:28:02.062614 2026] [:error] [pid 62884:tid 62899] [client 74.248.123.16:60328] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tfm.php"] [unique_id "adkXAuUCK1xrhnnmpo2bNgAAAsg"]
[Fri Apr 10 23:28:02.685361 2026] [:error] [pid 13189:tid 13206] [client 74.248.123.16:64801] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a4.php"] [unique_id "adkXApAxiJKPums3eBAKkQAAAE4"]
[Fri Apr 10 23:28:03.222425 2026] [:error] [pid 62769:tid 62790] [client 74.248.123.16:56789] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a4.php"] [unique_id "adkXA8WsSnfLoB8ifjDAiQAAAlM"]
[Fri Apr 10 23:28:03.757251 2026] [:error] [pid 62769:tid 62795] [client 74.248.123.16:63617] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a4.php"] [unique_id "adkXA8WsSnfLoB8ifjDAkAAAAlg"]
[Fri Apr 10 23:28:04.430432 2026] [:error] [pid 13189:tid 13202] [client 74.248.123.16:63514] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a4.php"] [unique_id "adkXBJAxiJKPums3eBAKmgAAAEo"]
[Fri Apr 10 23:28:05.121200 2026] [proxy_fcgi:error] [pid 13189:tid 13214] [client 74.248.123.16:56780] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 23:28:05.377866 2026] [proxy_fcgi:error] [pid 13189:tid 13207] [client 74.248.123.16:56780] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 23:28:05.633733 2026] [proxy_fcgi:error] [pid 13189:tid 13201] [client 74.248.123.16:56780] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 23:28:05.904164 2026] [proxy_fcgi:error] [pid 13189:tid 13196] [client 74.248.123.16:56780] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 23:28:06.163125 2026] [proxy_fcgi:error] [pid 13189:tid 13212] [client 74.248.123.16:56780] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 23:28:06.451673 2026] [proxy_fcgi:error] [pid 13189:tid 13194] [client 74.248.123.16:56780] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 23:28:06.752640 2026] [proxy_fcgi:error] [pid 13189:tid 13199] [client 74.248.123.16:56780] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 23:28:07.274217 2026] [proxy_fcgi:error] [pid 13189:tid 13208] [client 74.248.123.16:56780] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 23:28:07.653114 2026] [proxy_fcgi:error] [pid 13189:tid 13196] [client 74.248.123.16:56780] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 23:28:07.937279 2026] [proxy_fcgi:error] [pid 13189:tid 13212] [client 74.248.123.16:56780] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 23:28:08.189955 2026] [:error] [pid 13189:tid 13193] [client 74.248.123.16:56780] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-access.php"] [unique_id "adkXCJAxiJKPums3eBAKwgAAAEE"]
[Fri Apr 10 23:28:08.926061 2026] [:error] [pid 62710:tid 62723] [client 74.248.123.16:58467] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-access.php"] [unique_id "adkXCOME7qrf5xEWWJtG9gAAAgo"]
[Fri Apr 10 23:28:09.445792 2026] [:error] [pid 13100:tid 13107] [client 74.248.123.16:58434] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-access.php"] [unique_id "adkXCVzg-ZkZ0InWIP3SSQAAAQI"]
[Fri Apr 10 23:28:10.019669 2026] [:error] [pid 13101:tid 13148] [client 74.248.123.16:58369] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-access.php"] [unique_id "adkXCt8Ldw85818pj2ogKwAAAI8"]
[Fri Apr 10 23:28:10.761508 2026] [:error] [pid 13189:tid 13198] [client 74.248.123.16:63663] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hots.php"] [unique_id "adkXCpAxiJKPums3eBAK1QAAAEY"]
[Fri Apr 10 23:28:11.634763 2026] [:error] [pid 13189:tid 13214] [client 74.248.123.16:61680] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hots.php"] [unique_id "adkXC5AxiJKPums3eBAK3AAAAFY"]
[Fri Apr 10 23:28:12.153491 2026] [:error] [pid 62769:tid 62795] [client 74.248.123.16:56793] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hots.php"] [unique_id "adkXDMWsSnfLoB8ifjDA1AAAAlg"]
[Fri Apr 10 23:28:12.679737 2026] [:error] [pid 62819:tid 62828] [client 74.248.123.16:63664] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hots.php"] [unique_id "adkXDPU20EyPf7NlsleE_wAAAoY"]
[Fri Apr 10 23:28:13.204426 2026] [:error] [pid 62819:tid 62844] [client 74.248.123.16:64808] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin-footer.php"] [unique_id "adkXDfU20EyPf7NlsleFAAAAApY"]
[Fri Apr 10 23:28:13.742793 2026] [:error] [pid 62710:tid 62725] [client 74.248.123.16:56726] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin-footer.php"] [unique_id "adkXDeME7qrf5xEWWJtHAAAAAgw"]
[Fri Apr 10 23:28:14.362341 2026] [:error] [pid 62884:tid 62898] [client 74.248.123.16:60730] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin-footer.php"] [unique_id "adkXDuUCK1xrhnnmpo2bPQAAAsc"]
[Fri Apr 10 23:28:15.030887 2026] [:error] [pid 63062:tid 63070] [client 74.248.123.16:56765] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin-footer.php"] [unique_id "adkXD52HtsmV85NqkMcQyQAAA4Y"]
[Fri Apr 10 23:28:15.549409 2026] [:error] [pid 62710:tid 62718] [client 74.248.123.16:56724] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws84.php"] [unique_id "adkXD-ME7qrf5xEWWJtHAQAAAgU"]
[Fri Apr 10 23:28:16.070975 2026] [:error] [pid 62710:tid 62736] [client 74.248.123.16:64782] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws84.php"] [unique_id "adkXEOME7qrf5xEWWJtHBQAAAhc"]
[Fri Apr 10 23:28:16.586688 2026] [:error] [pid 62710:tid 62716] [client 74.248.123.16:54464] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws84.php"] [unique_id "adkXEOME7qrf5xEWWJtHCgAAAgM"]
[Fri Apr 10 23:28:17.122374 2026] [:error] [pid 62651:tid 62662] [client 74.248.123.16:63524] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws84.php"] [unique_id "adkXETbAH0le57SIaqw4_wAAAck"]
[Fri Apr 10 23:28:17.736536 2026] [:error] [pid 63062:tid 63085] [client 74.248.123.16:65060] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bnm.php"] [unique_id "adkXEZ2HtsmV85NqkMcQ2QAAA5U"]
[Fri Apr 10 23:28:18.369048 2026] [:error] [pid 13100:tid 13121] [client 74.248.123.16:58392] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bnm.php"] [unique_id "adkXElzg-ZkZ0InWIP3STwAAARA"]
[Fri Apr 10 23:28:18.957459 2026] [:error] [pid 63062:tid 63087] [client 74.248.123.16:61692] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bnm.php"] [unique_id "adkXEp2HtsmV85NqkMcQ2gAAA5c"]
[Fri Apr 10 23:28:19.696023 2026] [:error] [pid 13101:tid 13152] [client 74.248.123.16:61928] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bnm.php"] [unique_id "adkXE98Ldw85818pj2ogQwAAAJM"]
[Fri Apr 10 23:28:20.219833 2026] [:error] [pid 13101:tid 13143] [client 74.248.123.16:61889] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/amax.php"] [unique_id "adkXFN8Ldw85818pj2ogSgAAAIo"]
[Fri Apr 10 23:28:20.748999 2026] [:error] [pid 63134:tid 63157] [client 74.248.123.16:63549] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/amax.php"] [unique_id "adkXFNFALqPDwWi6eJLJ1AAAA9Q"]
[Fri Apr 10 23:28:21.303303 2026] [:error] [pid 13189:tid 13207] [client 74.248.123.16:60726] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/amax.php"] [unique_id "adkXFZAxiJKPums3eBALAAAAAE8"]
[Fri Apr 10 23:28:21.813569 2026] [:error] [pid 13189:tid 13204] [client 74.248.123.16:60335] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/amax.php"] [unique_id "adkXFZAxiJKPums3eBALAgAAAEw"]
[Fri Apr 10 23:28:22.357011 2026] [:error] [pid 62769:tid 62782] [client 74.248.123.16:64798] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/66.php"] [unique_id "adkXFsWsSnfLoB8ifjDBHwAAAks"]
[Fri Apr 10 23:28:22.934865 2026] [:error] [pid 63062:tid 63070] [client 74.248.123.16:63619] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/66.php"] [unique_id "adkXFp2HtsmV85NqkMcQ3wAAA4Y"]
[Fri Apr 10 23:28:23.514610 2026] [:error] [pid 13189:tid 13200] [client 74.248.123.16:63551] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/66.php"] [unique_id "adkXF5AxiJKPums3eBALDAAAAEg"]
[Fri Apr 10 23:28:24.110875 2026] [:error] [pid 62769:tid 62792] [client 74.248.123.16:58437] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/66.php"] [unique_id "adkXGMWsSnfLoB8ifjDBKwAAAlU"]
[Fri Apr 10 23:28:24.678756 2026] [:error] [pid 13189:tid 13202] [client 74.248.123.16:60691] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/public/file.php"] [unique_id "adkXGJAxiJKPums3eBALGgAAAEo"]
[Fri Apr 10 23:28:25.200841 2026] [:error] [pid 62769:tid 62779] [client 74.248.123.16:58449] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/public/file.php"] [unique_id "adkXGcWsSnfLoB8ifjDBOQAAAkg"]
[Fri Apr 10 23:28:25.713649 2026] [:error] [pid 63062:tid 63069] [client 74.248.123.16:63516] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/public/file.php"] [unique_id "adkXGZ2HtsmV85NqkMcQ4QAAA4U"]
[Fri Apr 10 23:28:26.333599 2026] [:error] [pid 13189:tid 13211] [client 74.248.123.16:63628] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/public/file.php"] [unique_id "adkXGpAxiJKPums3eBALLgAAAFM"]
[Fri Apr 10 23:28:27.123845 2026] [:error] [pid 63134:tid 63146] [client 74.248.123.16:58486] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/166.php"] [unique_id "adkXG9FALqPDwWi6eJLJ2wAAA8k"]
[Fri Apr 10 23:28:27.673990 2026] [:error] [pid 62769:tid 62792] [client 74.248.123.16:58436] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/166.php"] [unique_id "adkXG8WsSnfLoB8ifjDBWwAAAlU"]
[Fri Apr 10 23:28:28.198898 2026] [:error] [pid 63134:tid 63149] [client 74.248.123.16:50067] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/166.php"] [unique_id "adkXHNFALqPDwWi6eJLJ3QAAA8w"]
[Fri Apr 10 23:28:28.727861 2026] [:error] [pid 62819:tid 62833] [client 74.248.123.16:60705] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/166.php"] [unique_id "adkXHPU20EyPf7NlsleFFgAAAos"]
[Fri Apr 10 23:28:29.323999 2026] [:error] [pid 13101:tid 13134] [client 74.248.123.16:60688] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws77.php"] [unique_id "adkXHd8Ldw85818pj2ogdAAAAIE"]
[Fri Apr 10 23:28:29.886707 2026] [:error] [pid 62884:tid 62910] [client 74.248.123.16:58489] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws77.php"] [unique_id "adkXHeUCK1xrhnnmpo2bRgAAAtM"]
[Fri Apr 10 23:28:30.445452 2026] [:error] [pid 13189:tid 13207] [client 74.248.123.16:56713] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws77.php"] [unique_id "adkXHpAxiJKPums3eBALRAAAAE8"]
[Fri Apr 10 23:28:30.973195 2026] [:error] [pid 13101:tid 13138] [client 74.248.123.16:54466] [client 74.248.123.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws77.php"] [unique_id "adkXHt8Ldw85818pj2ogewAAAIU"]
[Sat Apr 11 01:50:23.028539 2026] [proxy_fcgi:error] [pid 21570:tid 21697] [client 51.107.88.105:12108] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 01:50:23.280923 2026] [proxy_fcgi:error] [pid 21570:tid 21693] [client 51.107.88.105:12108] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 01:50:23.541712 2026] [proxy_fcgi:error] [pid 21570:tid 21677] [client 51.107.88.105:12108] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 01:50:23.777954 2026] [proxy_fcgi:error] [pid 21570:tid 21687] [client 51.107.88.105:12108] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 01:50:24.014715 2026] [proxy_fcgi:error] [pid 21570:tid 21672] [client 51.107.88.105:12108] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 01:50:24.254167 2026] [proxy_fcgi:error] [pid 21570:tid 21689] [client 51.107.88.105:12108] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 01:50:24.491774 2026] [proxy_fcgi:error] [pid 21570:tid 21694] [client 51.107.88.105:12108] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 01:50:24.725826 2026] [proxy_fcgi:error] [pid 21570:tid 21693] [client 51.107.88.105:12108] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 01:50:24.971870 2026] [proxy_fcgi:error] [pid 21570:tid 21675] [client 51.107.88.105:12108] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 01:50:25.213013 2026] [proxy_fcgi:error] [pid 21570:tid 21687] [client 51.107.88.105:12108] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 01:50:25.452404 2026] [:error] [pid 21570:tid 21672] [client 51.107.88.105:12108] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/BhqKs28Cw94.php"] [unique_id "adk4YTKs5t9xRSNL6cnDngAAAEU"]
[Sat Apr 11 01:50:26.049427 2026] [:error] [pid 21568:tid 21588] [client 51.107.88.105:11633] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/BhqKs28Cw94.php"] [unique_id "adk4Yoiz5v_ljZxkpR_HAgAAARA"]
[Sat Apr 11 01:50:26.719924 2026] [:error] [pid 55451:tid 55468] [client 51.107.88.105:11641] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/BhqKs28Cw94.php"] [unique_id "adk4YnApxuyB7yCS5RkA3gAAAM8"]
[Sat Apr 11 01:50:27.216992 2026] [:error] [pid 21706:tid 21723] [client 51.107.88.105:11626] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/BhqKs28Cw94.php"] [unique_id "adk4YyGQ1M5d8fQSsLGiLQAAAA8"]
[Sat Apr 11 01:50:27.716212 2026] [:error] [pid 21568:tid 21593] [client 51.107.88.105:11607] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cdn3.php"] [unique_id "adk4Y4iz5v_ljZxkpR_HEQAAARU"]
[Sat Apr 11 01:50:28.228130 2026] [:error] [pid 55451:tid 55453] [client 51.107.88.105:11601] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cdn3.php"] [unique_id "adk4ZHApxuyB7yCS5RkA6QAAAMA"]
[Sat Apr 11 01:50:28.759711 2026] [:error] [pid 55451:tid 55465] [client 51.107.88.105:12142] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cdn3.php"] [unique_id "adk4ZHApxuyB7yCS5RkA8AAAAMw"]
[Sat Apr 11 01:50:29.290865 2026] [:error] [pid 21570:tid 21695] [client 51.107.88.105:11624] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cdn3.php"] [unique_id "adk4ZTKs5t9xRSNL6cnDqwAAAFU"]
[Sat Apr 11 01:50:29.765611 2026] [:error] [pid 21568:tid 21595] [client 51.107.88.105:11370] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/3Cr1w6dfjTK.php"] [unique_id "adk4ZYiz5v_ljZxkpR_HGAAAARc"]
[Sat Apr 11 01:50:30.362638 2026] [:error] [pid 55451:tid 55458] [client 51.107.88.105:11338] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/3Cr1w6dfjTK.php"] [unique_id "adk4ZnApxuyB7yCS5RkA-AAAAMU"]
[Sat Apr 11 01:50:30.880696 2026] [:error] [pid 21706:tid 21716] [client 51.107.88.105:12129] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/3Cr1w6dfjTK.php"] [unique_id "adk4ZiGQ1M5d8fQSsLGiTwAAAAg"]
[Sat Apr 11 01:50:31.411283 2026] [:error] [pid 55451:tid 55468] [client 51.107.88.105:12138] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/3Cr1w6dfjTK.php"] [unique_id "adk4Z3ApxuyB7yCS5RkA-gAAAM8"]
[Sat Apr 11 01:50:32.160812 2026] [:error] [pid 21706:tid 21727] [client 51.107.88.105:11361] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/beerd.php"] [unique_id "adk4aCGQ1M5d8fQSsLGiYwAAABM"]
[Sat Apr 11 01:50:32.632383 2026] [:error] [pid 21706:tid 21723] [client 51.107.88.105:11631] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/beerd.php"] [unique_id "adk4aCGQ1M5d8fQSsLGiaAAAAA8"]
[Sat Apr 11 01:50:33.109892 2026] [:error] [pid 21706:tid 21713] [client 51.107.88.105:11632] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/beerd.php"] [unique_id "adk4aSGQ1M5d8fQSsLGicAAAAAU"]
[Sat Apr 11 01:50:33.776724 2026] [:error] [pid 21706:tid 21727] [client 51.107.88.105:12066] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/beerd.php"] [unique_id "adk4aSGQ1M5d8fQSsLGieAAAABM"]
[Sat Apr 11 01:50:34.499954 2026] [:error] [pid 21570:tid 21675] [client 51.107.88.105:12118] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hhxc.php"] [unique_id "adk4ajKs5t9xRSNL6cnDsAAAAEc"]
[Sat Apr 11 01:50:35.541438 2026] [:error] [pid 21706:tid 21724] [client 51.107.88.105:11384] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hhxc.php"] [unique_id "adk4ayGQ1M5d8fQSsLGilgAAABA"]
[Sat Apr 11 01:50:52.382892 2026] [:error] [pid 21570:tid 21672] [client 51.107.88.105:12047] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/161dfd072f.php"] [unique_id "adk4fDKs5t9xRSNL6cnD6AAAAEU"]
[Sat Apr 11 01:50:53.396392 2026] [:error] [pid 55451:tid 55471] [client 51.107.88.105:11371] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/161dfd072f.php"] [unique_id "adk4fXApxuyB7yCS5RkBXQAAANI"]
[Sat Apr 11 01:50:53.981338 2026] [:error] [pid 55451:tid 55473] [client 51.107.88.105:12134] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/161dfd072f.php"] [unique_id "adk4fXApxuyB7yCS5RkBYwAAANQ"]
[Sat Apr 11 01:50:54.464871 2026] [:error] [pid 55451:tid 55474] [client 51.107.88.105:12150] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/161dfd072f.php"] [unique_id "adk4fnApxuyB7yCS5RkBaQAAANU"]
[Sat Apr 11 01:50:54.997529 2026] [:error] [pid 21706:tid 21717] [client 51.107.88.105:12121] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws80.php"] [unique_id "adk4fiGQ1M5d8fQSsLGjIwAAAAk"]
[Sat Apr 11 01:50:55.528410 2026] [:error] [pid 55451:tid 55464] [client 51.107.88.105:11364] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws80.php"] [unique_id "adk4f3ApxuyB7yCS5RkBcQAAAMs"]
[Sat Apr 11 01:50:56.007472 2026] [:error] [pid 21568:tid 21578] [client 51.107.88.105:12114] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws80.php"] [unique_id "adk4gIiz5v_ljZxkpR_HWgAAAQY"]
[Sat Apr 11 01:50:56.525798 2026] [:error] [pid 21568:tid 21593] [client 51.107.88.105:11748] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws80.php"] [unique_id "adk4gIiz5v_ljZxkpR_HXAAAARU"]
[Sat Apr 11 01:50:57.139050 2026] [:error] [pid 21568:tid 21574] [client 51.107.88.105:12070] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ylzed0twj8l9drdbchc1oocfCdefault.php"] [unique_id "adk4gYiz5v_ljZxkpR_HXgAAAQI"]
[Sat Apr 11 01:50:57.767694 2026] [:error] [pid 21568:tid 21582] [client 51.107.88.105:11759] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ylzed0twj8l9drdbchc1oocfCdefault.php"] [unique_id "adk4gYiz5v_ljZxkpR_HYAAAAQo"]
[Sat Apr 11 01:50:58.295204 2026] [:error] [pid 55451:tid 55469] [client 51.107.88.105:11745] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ylzed0twj8l9drdbchc1oocfCdefault.php"] [unique_id "adk4gnApxuyB7yCS5RkBhQAAANA"]
[Sat Apr 11 01:50:58.829200 2026] [:error] [pid 21570:tid 21693] [client 51.107.88.105:12078] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ylzed0twj8l9drdbchc1oocfCdefault.php"] [unique_id "adk4gjKs5t9xRSNL6cnEBgAAAFM"]
[Sat Apr 11 01:50:59.329426 2026] [:error] [pid 21570:tid 21665] [client 51.107.88.105:12103] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/RIP.php"] [unique_id "adk4gzKs5t9xRSNL6cnECwAAAEI"]
[Sat Apr 11 01:50:59.797578 2026] [:error] [pid 21569:tid 21654] [client 51.107.88.105:11591] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/RIP.php"] [unique_id "adk4g3AvQTgvXJ6vHoqYrwAAAIk"]
[Sat Apr 11 01:51:00.576933 2026] [:error] [pid 55451:tid 55476] [client 51.107.88.105:11597] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/RIP.php"] [unique_id "adk4hHApxuyB7yCS5RkBhwAAANc"]
[Sat Apr 11 01:51:01.388565 2026] [:error] [pid 21570:tid 21695] [client 51.107.88.105:11339] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/RIP.php"] [unique_id "adk4hTKs5t9xRSNL6cnEGQAAAFU"]
[Sat Apr 11 01:51:01.879753 2026] [:error] [pid 21568:tid 21574] [client 51.107.88.105:12102] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/no18.php"] [unique_id "adk4hYiz5v_ljZxkpR_HcAAAAQI"]
[Sat Apr 11 01:51:02.452736 2026] [:error] [pid 21568:tid 21576] [client 51.107.88.105:11490] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/no18.php"] [unique_id "adk4hoiz5v_ljZxkpR_HdgAAAQQ"]
[Sat Apr 11 01:51:02.950868 2026] [:error] [pid 21570:tid 21689] [client 51.107.88.105:12075] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/no18.php"] [unique_id "adk4hjKs5t9xRSNL6cnEHQAAAE8"]
[Sat Apr 11 01:51:03.432178 2026] [:error] [pid 21569:tid 21651] [client 51.107.88.105:11639] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/no18.php"] [unique_id "adk4h3AvQTgvXJ6vHoqYvgAAAIY"]
[Sat Apr 11 01:51:03.932506 2026] [:error] [pid 21570:tid 21697] [client 51.107.88.105:11729] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/blqjs.php"] [unique_id "adk4hzKs5t9xRSNL6cnEJQAAAFc"]
[Sat Apr 11 01:51:04.405788 2026] [:error] [pid 21706:tid 21712] [client 51.107.88.105:11617] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/blqjs.php"] [unique_id "adk4iCGQ1M5d8fQSsLGjMAAAAAQ"]
[Sat Apr 11 01:51:04.923299 2026] [:error] [pid 55451:tid 55477] [client 51.107.88.105:12105] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/blqjs.php"] [unique_id "adk4iHApxuyB7yCS5RkBmwAAANg"]
[Sat Apr 11 01:51:05.395508 2026] [:error] [pid 55451:tid 55461] [client 51.107.88.105:11716] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/blqjs.php"] [unique_id "adk4iXApxuyB7yCS5RkBnwAAAMg"]
[Sat Apr 11 01:51:05.880299 2026] [:error] [pid 55451:tid 55466] [client 51.107.88.105:11731] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sk25_1.php"] [unique_id "adk4iXApxuyB7yCS5RkBpQAAAM0"]
[Sat Apr 11 01:51:06.418642 2026] [:error] [pid 21568:tid 21580] [client 51.107.88.105:12082] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sk25_1.php"] [unique_id "adk4ioiz5v_ljZxkpR_HfQAAAQg"]
[Sat Apr 11 01:51:06.921816 2026] [:error] [pid 55451:tid 55457] [client 51.107.88.105:11381] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sk25_1.php"] [unique_id "adk4inApxuyB7yCS5RkBrgAAAMQ"]
[Sat Apr 11 01:51:07.540731 2026] [:error] [pid 21568:tid 21572] [client 51.107.88.105:12111] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sk25_1.php"] [unique_id "adk4i4iz5v_ljZxkpR_HfwAAAQA"]
[Sat Apr 11 01:51:08.066022 2026] [:error] [pid 55451:tid 55464] [client 51.107.88.105:11347] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fetch.php"] [unique_id "adk4jHApxuyB7yCS5RkBvAAAAMs"]
[Sat Apr 11 01:51:08.658333 2026] [:error] [pid 21706:tid 21732] [client 51.107.88.105:11739] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fetch.php"] [unique_id "adk4jCGQ1M5d8fQSsLGjOgAAABg"]
[Sat Apr 11 01:51:09.137100 2026] [:error] [pid 21570:tid 21677] [client 51.107.88.105:11719] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fetch.php"] [unique_id "adk4jTKs5t9xRSNL6cnEMQAAAEg"]
[Sat Apr 11 01:51:10.129508 2026] [:error] [pid 21706:tid 21730] [client 51.107.88.105:12040] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fetch.php"] [unique_id "adk4jiGQ1M5d8fQSsLGjQQAAABY"]
[Sat Apr 11 01:51:10.632847 2026] [:error] [pid 21569:tid 21671] [client 51.107.88.105:11746] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "adk4jnAvQTgvXJ6vHoqYyAAAAJM"]
[Sat Apr 11 01:51:11.121028 2026] [:error] [pid 21568:tid 21590] [client 51.107.88.105:11725] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "adk4j4iz5v_ljZxkpR_HiwAAARI"]
[Sat Apr 11 01:51:11.833980 2026] [:error] [pid 21568:tid 21588] [client 51.107.88.105:12095] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "adk4j4iz5v_ljZxkpR_HkAAAARA"]
[Sat Apr 11 01:51:12.353805 2026] [:error] [pid 21706:tid 21719] [client 51.107.88.105:11350] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "adk4kCGQ1M5d8fQSsLGjRQAAAAs"]
[Sat Apr 11 01:51:12.908491 2026] [:error] [pid 55451:tid 55466] [client 51.107.88.105:11611] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2nzyHnOkEg.php"] [unique_id "adk4kHApxuyB7yCS5RkB1gAAAM0"]
[Sat Apr 11 01:51:13.407568 2026] [:error] [pid 21568:tid 21590] [client 51.107.88.105:11348] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2nzyHnOkEg.php"] [unique_id "adk4kYiz5v_ljZxkpR_HlwAAARI"]
[Sat Apr 11 01:51:13.945971 2026] [:error] [pid 21569:tid 21657] [client 51.107.88.105:12071] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2nzyHnOkEg.php"] [unique_id "adk4kXAvQTgvXJ6vHoqY3QAAAIw"]
[Sat Apr 11 01:51:14.437843 2026] [:error] [pid 21569:tid 21646] [client 51.107.88.105:11595] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2nzyHnOkEg.php"] [unique_id "adk4knAvQTgvXJ6vHoqY5QAAAIE"]
[Sat Apr 11 01:51:14.912745 2026] [:error] [pid 21568:tid 21595] [client 51.107.88.105:12034] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/oircv.php"] [unique_id "adk4koiz5v_ljZxkpR_HnwAAARc"]
[Sat Apr 11 01:51:15.465701 2026] [:error] [pid 21569:tid 21656] [client 51.107.88.105:12064] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/oircv.php"] [unique_id "adk4k3AvQTgvXJ6vHoqY6wAAAIs"]
[Sat Apr 11 01:51:15.984557 2026] [:error] [pid 55451:tid 55462] [client 51.107.88.105:11380] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/oircv.php"] [unique_id "adk4k3ApxuyB7yCS5RkB3AAAAMk"]
[Sat Apr 11 01:51:16.453626 2026] [:error] [pid 55451:tid 55460] [client 51.107.88.105:11586] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/oircv.php"] [unique_id "adk4lHApxuyB7yCS5RkB4QAAAMc"]
[Sat Apr 11 01:51:17.059328 2026] [:error] [pid 55451:tid 55464] [client 51.107.88.105:11362] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/blnux.php"] [unique_id "adk4lXApxuyB7yCS5RkB4wAAAMs"]
[Sat Apr 11 01:51:17.606627 2026] [:error] [pid 55451:tid 55456] [client 51.107.88.105:12146] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/blnux.php"] [unique_id "adk4lXApxuyB7yCS5RkB6wAAAMM"]
[Sat Apr 11 01:51:18.124839 2026] [:error] [pid 21570:tid 21681] [client 51.107.88.105:11365] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/blnux.php"] [unique_id "adk4ljKs5t9xRSNL6cnEWgAAAEo"]
[Sat Apr 11 01:51:18.663822 2026] [:error] [pid 21568:tid 21580] [client 51.107.88.105:11340] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/blnux.php"] [unique_id "adk4loiz5v_ljZxkpR_HqAAAAQg"]
[Sat Apr 11 01:51:19.191809 2026] [:error] [pid 21570:tid 21672] [client 51.107.88.105:11754] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "adk4lzKs5t9xRSNL6cnEYQAAAEU"]
[Sat Apr 11 01:51:19.664942 2026] [:error] [pid 21570:tid 21692] [client 51.107.88.105:11909] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "adk4lzKs5t9xRSNL6cnEZQAAAFI"]
[Sat Apr 11 01:51:20.136523 2026] [:error] [pid 55451:tid 55476] [client 51.107.88.105:12091] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "adk4mHApxuyB7yCS5RkB-QAAANc"]
[Sat Apr 11 01:51:20.624017 2026] [:error] [pid 21570:tid 21681] [client 51.107.88.105:11354] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "adk4mDKs5t9xRSNL6cnEbgAAAEo"]
[Sat Apr 11 01:51:21.098674 2026] [:error] [pid 21568:tid 21582] [client 51.107.88.105:12081] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Spow_SRw.php"] [unique_id "adk4mYiz5v_ljZxkpR_HtgAAAQo"]
[Sat Apr 11 01:51:21.564728 2026] [:error] [pid 21570:tid 21690] [client 51.107.88.105:12119] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Spow_SRw.php"] [unique_id "adk4mTKs5t9xRSNL6cnEdAAAAFA"]
[Sat Apr 11 01:51:22.034339 2026] [:error] [pid 21570:tid 21661] [client 51.107.88.105:11622] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Spow_SRw.php"] [unique_id "adk4mjKs5t9xRSNL6cnEdgAAAEA"]
[Sat Apr 11 01:51:22.531910 2026] [:error] [pid 21570:tid 21665] [client 51.107.88.105:12132] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Spow_SRw.php"] [unique_id "adk4mjKs5t9xRSNL6cnEfQAAAEI"]
[Sat Apr 11 01:51:23.016514 2026] [:error] [pid 55451:tid 55466] [client 51.107.88.105:11766] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/albrt.php"] [unique_id "adk4m3ApxuyB7yCS5RkCAwAAAM0"]
[Sat Apr 11 01:51:23.501920 2026] [:error] [pid 21570:tid 21670] [client 51.107.88.105:12147] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/albrt.php"] [unique_id "adk4mzKs5t9xRSNL6cnEhwAAAEQ"]
[Sat Apr 11 01:51:24.035303 2026] [:error] [pid 21570:tid 21679] [client 51.107.88.105:11750] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/albrt.php"] [unique_id "adk4nDKs5t9xRSNL6cnEkAAAAEk"]
[Sat Apr 11 01:51:24.528614 2026] [:error] [pid 21568:tid 21590] [client 51.107.88.105:11665] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/albrt.php"] [unique_id "adk4nIiz5v_ljZxkpR_HyAAAARI"]
[Sat Apr 11 01:51:25.041440 2026] [proxy_fcgi:error] [pid 55451:tid 55463] [client 51.107.88.105:11390] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 01:51:25.282850 2026] [proxy_fcgi:error] [pid 55451:tid 55471] [client 51.107.88.105:11390] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 01:51:25.546023 2026] [proxy_fcgi:error] [pid 55451:tid 55467] [client 51.107.88.105:11390] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 01:51:25.785686 2026] [proxy_fcgi:error] [pid 55451:tid 55453] [client 51.107.88.105:11390] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 01:51:26.057944 2026] [proxy_fcgi:error] [pid 55451:tid 55469] [client 51.107.88.105:11390] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 01:51:26.333506 2026] [proxy_fcgi:error] [pid 55451:tid 55454] [client 51.107.88.105:11390] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 01:51:26.611912 2026] [proxy_fcgi:error] [pid 55451:tid 55455] [client 51.107.88.105:11390] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 01:51:26.852843 2026] [proxy_fcgi:error] [pid 55451:tid 55472] [client 51.107.88.105:11390] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 01:51:27.163787 2026] [proxy_fcgi:error] [pid 55451:tid 55456] [client 51.107.88.105:11390] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 01:51:27.402448 2026] [proxy_fcgi:error] [pid 55451:tid 55469] [client 51.107.88.105:11390] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 01:51:27.685751 2026] [proxy_fcgi:error] [pid 55451:tid 55454] [client 51.107.88.105:11390] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 01:51:27.931485 2026] [:error] [pid 55451:tid 55458] [client 51.107.88.105:11390] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/9EaklzMysJ.php"] [unique_id "adk4n3ApxuyB7yCS5RkCNQAAAMU"]
[Sat Apr 11 01:51:28.438345 2026] [:error] [pid 21706:tid 21727] [client 51.107.88.105:11757] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/9EaklzMysJ.php"] [unique_id "adk4oCGQ1M5d8fQSsLGjXQAAABM"]
[Sat Apr 11 01:51:28.926977 2026] [:error] [pid 21706:tid 21716] [client 51.107.88.105:11363] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/9EaklzMysJ.php"] [unique_id "adk4oCGQ1M5d8fQSsLGjYAAAAAg"]
[Sat Apr 11 01:51:29.406787 2026] [:error] [pid 21706:tid 21718] [client 51.107.88.105:11718] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/9EaklzMysJ.php"] [unique_id "adk4oSGQ1M5d8fQSsLGjYQAAAAo"]
[Sat Apr 11 01:51:29.956517 2026] [:error] [pid 21706:tid 21709] [client 51.107.88.105:12222] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wpxl.php"] [unique_id "adk4oSGQ1M5d8fQSsLGjZgAAAAE"]
[Sat Apr 11 01:51:30.809080 2026] [:error] [pid 55451:tid 55465] [client 51.107.88.105:11329] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wpxl.php"] [unique_id "adk4onApxuyB7yCS5RkCSgAAAMw"]
[Sat Apr 11 01:51:31.401162 2026] [:error] [pid 21706:tid 21715] [client 51.107.88.105:12137] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wpxl.php"] [unique_id "adk4oyGQ1M5d8fQSsLGjbgAAAAc"]
[Sat Apr 11 01:51:31.873519 2026] [:error] [pid 55451:tid 55462] [client 51.107.88.105:11358] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wpxl.php"] [unique_id "adk4o3ApxuyB7yCS5RkCUwAAAMk"]
[Sat Apr 11 01:51:32.345412 2026] [:error] [pid 21706:tid 21731] [client 51.107.88.105:11749] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/s3FiyJ2WGCnF0p1default.php"] [unique_id "adk4pCGQ1M5d8fQSsLGjdAAAABc"]
[Sat Apr 11 01:51:32.895318 2026] [:error] [pid 21706:tid 21714] [client 51.107.88.105:11353] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/s3FiyJ2WGCnF0p1default.php"] [unique_id "adk4pCGQ1M5d8fQSsLGjdgAAAAY"]
[Sat Apr 11 01:51:33.420671 2026] [:error] [pid 55451:tid 55465] [client 51.107.88.105:12074] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/s3FiyJ2WGCnF0p1default.php"] [unique_id "adk4pXApxuyB7yCS5RkCYwAAAMw"]
[Sat Apr 11 01:51:34.112983 2026] [:error] [pid 21569:tid 21674] [client 51.107.88.105:11735] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/s3FiyJ2WGCnF0p1default.php"] [unique_id "adk4pnAvQTgvXJ6vHoqZDgAAAJQ"]
[Sat Apr 11 01:51:34.582199 2026] [:error] [pid 55451:tid 55459] [client 51.107.88.105:11744] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bfil.php"] [unique_id "adk4pnApxuyB7yCS5RkCbQAAAMY"]
[Sat Apr 11 01:51:35.070551 2026] [:error] [pid 55451:tid 55458] [client 51.107.88.105:11510] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bfil.php"] [unique_id "adk4p3ApxuyB7yCS5RkCcgAAAMU"]
[Sat Apr 11 01:51:35.655793 2026] [:error] [pid 21570:tid 21661] [client 51.107.88.105:11387] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bfil.php"] [unique_id "adk4pzKs5t9xRSNL6cnErQAAAEA"]
[Sat Apr 11 01:51:36.174955 2026] [:error] [pid 55451:tid 55464] [client 51.107.88.105:11389] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bfil.php"] [unique_id "adk4qHApxuyB7yCS5RkCewAAAMs"]
[Sat Apr 11 01:51:36.652852 2026] [:error] [pid 21568:tid 21577] [client 51.107.88.105:11740] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lb.php"] [unique_id "adk4qIiz5v_ljZxkpR_H4AAAAQU"]
[Sat Apr 11 01:51:37.132109 2026] [:error] [pid 21570:tid 21682] [client 51.107.88.105:11662] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lb.php"] [unique_id "adk4qTKs5t9xRSNL6cnEsAAAAEs"]
[Sat Apr 11 01:51:37.686316 2026] [:error] [pid 21570:tid 21695] [client 51.107.88.105:12113] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lb.php"] [unique_id "adk4qTKs5t9xRSNL6cnEsgAAAFU"]
[Sat Apr 11 01:51:38.152927 2026] [:error] [pid 21568:tid 21595] [client 51.107.88.105:12045] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lb.php"] [unique_id "adk4qoiz5v_ljZxkpR_H6AAAARc"]
[Sat Apr 11 01:51:38.661436 2026] [:error] [pid 21706:tid 21725] [client 51.107.88.105:11391] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dx.php"] [unique_id "adk4qiGQ1M5d8fQSsLGjkQAAABE"]
[Sat Apr 11 01:51:39.202247 2026] [:error] [pid 21706:tid 21724] [client 51.107.88.105:11730] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dx.php"] [unique_id "adk4qyGQ1M5d8fQSsLGjlQAAABA"]
[Sat Apr 11 01:51:39.678507 2026] [:error] [pid 21568:tid 21580] [client 51.107.88.105:11755] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dx.php"] [unique_id "adk4q4iz5v_ljZxkpR_H7wAAAQg"]
[Sat Apr 11 01:51:40.168048 2026] [:error] [pid 55451:tid 55462] [client 51.107.88.105:12044] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dx.php"] [unique_id "adk4rHApxuyB7yCS5RkChwAAAMk"]
[Sat Apr 11 01:51:40.654111 2026] [:error] [pid 55451:tid 55469] [client 51.107.88.105:11610] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/menu.php"] [unique_id "adk4rHApxuyB7yCS5RkCjAAAANA"]
[Sat Apr 11 01:51:41.213819 2026] [:error] [pid 21706:tid 21722] [client 51.107.88.105:12153] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/menu.php"] [unique_id "adk4rSGQ1M5d8fQSsLGjnwAAAA4"]
[Sat Apr 11 01:51:41.690172 2026] [:error] [pid 21568:tid 21576] [client 51.107.88.105:11514] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/menu.php"] [unique_id "adk4rYiz5v_ljZxkpR_H8gAAAQQ"]
[Sat Apr 11 01:51:42.223993 2026] [:error] [pid 55451:tid 55453] [client 51.107.88.105:11612] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/menu.php"] [unique_id "adk4rnApxuyB7yCS5RkCkAAAAMA"]
[Sat Apr 11 01:51:42.697982 2026] [:error] [pid 21706:tid 21731] [client 51.107.88.105:12148] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/p14rAeWytPdH5hZcscCFdefault.php"] [unique_id "adk4riGQ1M5d8fQSsLGjpgAAABc"]
[Sat Apr 11 01:51:43.165773 2026] [:error] [pid 55451:tid 55454] [client 51.107.88.105:11756] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/p14rAeWytPdH5hZcscCFdefault.php"] [unique_id "adk4r3ApxuyB7yCS5RkCmQAAAME"]
[Sat Apr 11 01:51:43.688766 2026] [:error] [pid 55451:tid 55463] [client 51.107.88.105:12046] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/p14rAeWytPdH5hZcscCFdefault.php"] [unique_id "adk4r3ApxuyB7yCS5RkCngAAAMo"]
[Sat Apr 11 01:51:44.226504 2026] [:error] [pid 21706:tid 21710] [client 51.107.88.105:11590] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/p14rAeWytPdH5hZcscCFdefault.php"] [unique_id "adk4sCGQ1M5d8fQSsLGjqgAAAAI"]
[Sat Apr 11 01:51:44.771706 2026] [:error] [pid 55451:tid 55466] [client 51.107.88.105:12099] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/iindv.php"] [unique_id "adk4sHApxuyB7yCS5RkCpgAAAM0"]
[Sat Apr 11 01:51:45.295325 2026] [:error] [pid 21706:tid 21729] [client 51.107.88.105:12048] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/iindv.php"] [unique_id "adk4sSGQ1M5d8fQSsLGjrAAAABU"]
[Sat Apr 11 01:51:45.806824 2026] [:error] [pid 21706:tid 21732] [client 51.107.88.105:11687] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/iindv.php"] [unique_id "adk4sSGQ1M5d8fQSsLGjsgAAABg"]
[Sat Apr 11 01:51:46.278311 2026] [:error] [pid 21706:tid 21709] [client 51.107.88.105:11688] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/iindv.php"] [unique_id "adk4siGQ1M5d8fQSsLGjuwAAAAE"]
[Sat Apr 11 01:51:46.839623 2026] [:error] [pid 21570:tid 21695] [client 51.107.88.105:11481] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/maintura.php"] [unique_id "adk4sjKs5t9xRSNL6cnExQAAAFU"]
[Sat Apr 11 01:51:47.308044 2026] [:error] [pid 55451:tid 55453] [client 51.107.88.105:11603] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/maintura.php"] [unique_id "adk4s3ApxuyB7yCS5RkCqwAAAMA"]
[Sat Apr 11 01:51:48.546732 2026] [:error] [pid 21706:tid 21712] [client 51.107.88.105:11493] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/maintura.php"] [unique_id "adk4tCGQ1M5d8fQSsLGjyQAAAAQ"]
[Sat Apr 11 01:51:49.132252 2026] [:error] [pid 21706:tid 21716] [client 51.107.88.105:12122] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/maintura.php"] [unique_id "adk4tSGQ1M5d8fQSsLGj0QAAAAg"]
[Sat Apr 11 01:51:49.745435 2026] [:error] [pid 21706:tid 21731] [client 51.107.88.105:12212] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/iee52ruz0s81ndrdefault.php"] [unique_id "adk4tSGQ1M5d8fQSsLGj1QAAABc"]
[Sat Apr 11 01:51:50.251633 2026] [:error] [pid 21706:tid 21711] [client 51.107.88.105:11592] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/iee52ruz0s81ndrdefault.php"] [unique_id "adk4tiGQ1M5d8fQSsLGj1gAAAAM"]
[Sat Apr 11 01:51:50.814101 2026] [:error] [pid 21569:tid 21656] [client 51.107.88.105:12058] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/iee52ruz0s81ndrdefault.php"] [unique_id "adk4tnAvQTgvXJ6vHoqZGwAAAIs"]
[Sat Apr 11 01:51:51.280846 2026] [:error] [pid 55451:tid 55455] [client 51.107.88.105:11649] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/iee52ruz0s81ndrdefault.php"] [unique_id "adk4t3ApxuyB7yCS5RkCuAAAAMI"]
[Sat Apr 11 01:51:51.976464 2026] [:error] [pid 55451:tid 55472] [client 51.107.88.105:11383] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nvwf4svpvqohxdjtbjCdefault.php"] [unique_id "adk4t3ApxuyB7yCS5RkCugAAANM"]
[Sat Apr 11 01:51:52.471438 2026] [:error] [pid 21568:tid 21577] [client 51.107.88.105:11621] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nvwf4svpvqohxdjtbjCdefault.php"] [unique_id "adk4uIiz5v_ljZxkpR_IBgAAAQU"]
[Sat Apr 11 01:51:52.948028 2026] [:error] [pid 55451:tid 55475] [client 51.107.88.105:11388] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nvwf4svpvqohxdjtbjCdefault.php"] [unique_id "adk4uHApxuyB7yCS5RkCwgAAANY"]
[Sat Apr 11 01:51:53.482091 2026] [:error] [pid 55451:tid 55459] [client 51.107.88.105:11708] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nvwf4svpvqohxdjtbjCdefault.php"] [unique_id "adk4uXApxuyB7yCS5RkCxwAAAMY"]
[Sat Apr 11 01:51:53.996217 2026] [:error] [pid 55451:tid 55469] [client 51.107.88.105:12073] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zc-220.php"] [unique_id "adk4uXApxuyB7yCS5RkC0gAAANA"]
[Sat Apr 11 01:51:54.600979 2026] [:error] [pid 21570:tid 21661] [client 51.107.88.105:11635] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zc-220.php"] [unique_id "adk4ujKs5t9xRSNL6cnE3AAAAEA"]
[Sat Apr 11 01:51:55.183718 2026] [:error] [pid 55451:tid 55460] [client 51.107.88.105:11758] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zc-220.php"] [unique_id "adk4u3ApxuyB7yCS5RkC2wAAAMc"]
[Sat Apr 11 01:51:55.726878 2026] [:error] [pid 55451:tid 55465] [client 51.107.88.105:12106] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zc-220.php"] [unique_id "adk4u3ApxuyB7yCS5RkC4gAAAMw"]
[Sat Apr 11 01:51:56.222341 2026] [:error] [pid 55451:tid 55466] [client 51.107.88.105:11588] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fone1.php"] [unique_id "adk4vHApxuyB7yCS5RkC5QAAAM0"]
[Sat Apr 11 01:51:56.707114 2026] [:error] [pid 21570:tid 21668] [client 51.107.88.105:12063] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fone1.php"] [unique_id "adk4vDKs5t9xRSNL6cnE6gAAAEM"]
[Sat Apr 11 01:51:57.527575 2026] [:error] [pid 55451:tid 55475] [client 51.107.88.105:11836] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fone1.php"] [unique_id "adk4vXApxuyB7yCS5RkC7AAAANY"]
[Sat Apr 11 01:51:57.999180 2026] [:error] [pid 55451:tid 55454] [client 51.107.88.105:12097] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fone1.php"] [unique_id "adk4vXApxuyB7yCS5RkC8AAAAME"]
[Sat Apr 11 01:51:58.506865 2026] [:error] [pid 55451:tid 55464] [client 51.107.88.105:12133] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xxiviLDIot.php"] [unique_id "adk4vnApxuyB7yCS5RkC9QAAAMs"]
[Sat Apr 11 01:51:59.025686 2026] [:error] [pid 55451:tid 55465] [client 51.107.88.105:11593] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xxiviLDIot.php"] [unique_id "adk4v3ApxuyB7yCS5RkC-AAAAMw"]
[Sat Apr 11 01:51:59.499840 2026] [:error] [pid 55451:tid 55468] [client 51.107.88.105:11625] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xxiviLDIot.php"] [unique_id "adk4v3ApxuyB7yCS5RkC_gAAAM8"]
[Sat Apr 11 01:51:59.967758 2026] [:error] [pid 21569:tid 21656] [client 51.107.88.105:11751] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xxiviLDIot.php"] [unique_id "adk4v3AvQTgvXJ6vHoqZJgAAAIs"]
[Sat Apr 11 01:52:00.466115 2026] [:error] [pid 21568:tid 21573] [client 51.107.88.105:11337] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hanyatersenyum.php"] [unique_id "adk4wIiz5v_ljZxkpR_IEAAAAQE"]
[Sat Apr 11 01:52:00.930798 2026] [:error] [pid 55451:tid 55458] [client 51.107.88.105:12042] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hanyatersenyum.php"] [unique_id "adk4wHApxuyB7yCS5RkDBgAAAMU"]
[Sat Apr 11 01:52:01.504046 2026] [:error] [pid 21568:tid 21583] [client 51.107.88.105:11359] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hanyatersenyum.php"] [unique_id "adk4wYiz5v_ljZxkpR_IFQAAAQs"]
[Sat Apr 11 01:52:01.973884 2026] [:error] [pid 55451:tid 55465] [client 51.107.88.105:11960] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hanyatersenyum.php"] [unique_id "adk4wXApxuyB7yCS5RkDCwAAAMw"]
[Sat Apr 11 01:52:02.547453 2026] [:error] [pid 55451:tid 55471] [client 51.107.88.105:12192] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/5tdwvyWnTbRiMS8f18HXNBbALHKB5t4j.php"] [unique_id "adk4wnApxuyB7yCS5RkDFAAAANI"]
[Sat Apr 11 01:52:03.021280 2026] [:error] [pid 55451:tid 55467] [client 51.107.88.105:11775] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/5tdwvyWnTbRiMS8f18HXNBbALHKB5t4j.php"] [unique_id "adk4w3ApxuyB7yCS5RkDGgAAAM4"]
[Sat Apr 11 01:52:03.515978 2026] [:error] [pid 55451:tid 55456] [client 51.107.88.105:11638] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/5tdwvyWnTbRiMS8f18HXNBbALHKB5t4j.php"] [unique_id "adk4w3ApxuyB7yCS5RkDIAAAAMM"]
[Sat Apr 11 01:52:03.988870 2026] [:error] [pid 55451:tid 55453] [client 51.107.88.105:12165] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/5tdwvyWnTbRiMS8f18HXNBbALHKB5t4j.php"] [unique_id "adk4w3ApxuyB7yCS5RkDKQAAAMA"]
[Sat Apr 11 01:52:04.533077 2026] [:error] [pid 55451:tid 55468] [client 51.107.88.105:11508] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/upll22.php"] [unique_id "adk4xHApxuyB7yCS5RkDLwAAAM8"]
[Sat Apr 11 01:52:05.224516 2026] [:error] [pid 21569:tid 21662] [client 51.107.88.105:11333] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/upll22.php"] [unique_id "adk4xXAvQTgvXJ6vHoqZKwAAAI8"]
[Sat Apr 11 01:52:05.799711 2026] [:error] [pid 21568:tid 21574] [client 51.107.88.105:12156] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/upll22.php"] [unique_id "adk4xYiz5v_ljZxkpR_IIgAAAQI"]
[Sat Apr 11 01:52:06.336915 2026] [:error] [pid 21570:tid 21672] [client 51.107.88.105:11738] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/upll22.php"] [unique_id "adk4xjKs5t9xRSNL6cnFAwAAAEU"]
[Sat Apr 11 01:52:06.852135 2026] [:error] [pid 55451:tid 55456] [client 51.107.88.105:11623] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/100.php"] [unique_id "adk4xnApxuyB7yCS5RkDNQAAAMM"]
[Sat Apr 11 01:52:07.321938 2026] [:error] [pid 21568:tid 21581] [client 51.107.88.105:11685] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/100.php"] [unique_id "adk4x4iz5v_ljZxkpR_ILQAAAQk"]
[Sat Apr 11 01:52:07.893498 2026] [:error] [pid 21568:tid 21578] [client 51.107.88.105:11594] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/100.php"] [unique_id "adk4x4iz5v_ljZxkpR_IMgAAAQY"]
[Sat Apr 11 01:52:08.373114 2026] [:error] [pid 21568:tid 21573] [client 51.107.88.105:11589] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/100.php"] [unique_id "adk4yIiz5v_ljZxkpR_IOQAAAQE"]
[Sat Apr 11 01:52:08.935550 2026] [:error] [pid 55451:tid 55463] [client 51.107.88.105:11752] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/byrgo.php"] [unique_id "adk4yHApxuyB7yCS5RkDPwAAAMo"]
[Sat Apr 11 01:52:09.788582 2026] [:error] [pid 21706:tid 21723] [client 51.107.88.105:11614] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/byrgo.php"] [unique_id "adk4ySGQ1M5d8fQSsLGj5AAAAA8"]
[Sat Apr 11 01:52:10.255590 2026] [:error] [pid 21706:tid 21721] [client 51.107.88.105:12143] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/byrgo.php"] [unique_id "adk4yiGQ1M5d8fQSsLGj6wAAAA0"]
[Sat Apr 11 01:52:10.727473 2026] [:error] [pid 21569:tid 21650] [client 51.107.88.105:12087] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/byrgo.php"] [unique_id "adk4ynAvQTgvXJ6vHoqZNwAAAIU"]
[Sat Apr 11 01:52:11.219266 2026] [:error] [pid 55451:tid 55471] [client 51.107.88.105:12223] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zc-243.php"] [unique_id "adk4y3ApxuyB7yCS5RkDRQAAANI"]
[Sat Apr 11 01:52:11.746768 2026] [:error] [pid 21570:tid 21690] [client 51.107.88.105:12041] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zc-243.php"] [unique_id "adk4yzKs5t9xRSNL6cnFDgAAAFA"]
[Sat Apr 11 01:52:12.909749 2026] [:error] [pid 55451:tid 55475] [client 51.107.88.105:12154] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zc-243.php"] [unique_id "adk4zHApxuyB7yCS5RkDUAAAANY"]
[Sat Apr 11 01:52:13.459796 2026] [:error] [pid 21706:tid 21711] [client 51.107.88.105:12089] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zc-243.php"] [unique_id "adk4zSGQ1M5d8fQSsLGj7wAAAAM"]
[Sat Apr 11 01:52:14.024481 2026] [:error] [pid 21706:tid 21708] [client 51.107.88.105:12117] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/pm90apbv3v5fvgkbguyiCdefault.php"] [unique_id "adk4ziGQ1M5d8fQSsLGj8wAAAAA"]
[Sat Apr 11 01:52:14.576019 2026] [:error] [pid 21570:tid 21693] [client 51.107.88.105:11328] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/pm90apbv3v5fvgkbguyiCdefault.php"] [unique_id "adk4zjKs5t9xRSNL6cnFHQAAAFM"]
[Sat Apr 11 01:52:15.140251 2026] [:error] [pid 55451:tid 55472] [client 51.107.88.105:11772] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/pm90apbv3v5fvgkbguyiCdefault.php"] [unique_id "adk4z3ApxuyB7yCS5RkDXgAAANM"]
[Sat Apr 11 01:52:15.661026 2026] [:error] [pid 21568:tid 21591] [client 51.107.88.105:11619] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/pm90apbv3v5fvgkbguyiCdefault.php"] [unique_id "adk4z4iz5v_ljZxkpR_ISQAAARM"]
[Sat Apr 11 01:52:16.130863 2026] [:error] [pid 21568:tid 21573] [client 51.107.88.105:11608] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp.php"] [unique_id "adk40Iiz5v_ljZxkpR_ITAAAAQE"]
[Sat Apr 11 01:52:16.639290 2026] [:error] [pid 21706:tid 21713] [client 51.107.88.105:11587] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp.php"] [unique_id "adk40CGQ1M5d8fQSsLGj_AAAAAU"]
[Sat Apr 11 01:52:17.171492 2026] [:error] [pid 21568:tid 21580] [client 51.107.88.105:12115] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp.php"] [unique_id "adk40Yiz5v_ljZxkpR_IVQAAAQg"]
[Sat Apr 11 01:52:17.642044 2026] [:error] [pid 55451:tid 55453] [client 51.107.88.105:11351] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp.php"] [unique_id "adk40XApxuyB7yCS5RkDagAAAMA"]
[Sat Apr 11 01:52:18.351889 2026] [:error] [pid 21706:tid 21719] [client 51.107.88.105:11693] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/CDX1.php"] [unique_id "adk40iGQ1M5d8fQSsLGj_gAAAAs"]
[Sat Apr 11 01:52:18.825354 2026] [:error] [pid 55451:tid 55472] [client 51.107.88.105:12079] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/CDX1.php"] [unique_id "adk40nApxuyB7yCS5RkDegAAANM"]
[Sat Apr 11 01:52:19.319497 2026] [:error] [pid 55451:tid 55457] [client 51.107.88.105:11500] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/CDX1.php"] [unique_id "adk403ApxuyB7yCS5RkDfQAAAMQ"]
[Sat Apr 11 01:52:19.796018 2026] [:error] [pid 55451:tid 55464] [client 51.107.88.105:11709] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/CDX1.php"] [unique_id "adk403ApxuyB7yCS5RkDhQAAAMs"]
[Sat Apr 11 01:52:20.300091 2026] [:error] [pid 55451:tid 55457] [client 51.107.88.105:11669] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "adk41HApxuyB7yCS5RkDigAAAMQ"]
[Sat Apr 11 01:52:20.853311 2026] [:error] [pid 21706:tid 21730] [client 51.107.88.105:12061] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "adk41CGQ1M5d8fQSsLGkBwAAABY"]
[Sat Apr 11 01:52:21.437472 2026] [:error] [pid 55451:tid 55462] [client 51.107.88.105:12152] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "adk41XApxuyB7yCS5RkDlwAAAMk"]
[Sat Apr 11 01:52:22.418833 2026] [:error] [pid 55451:tid 55460] [client 51.107.88.105:12135] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "adk41nApxuyB7yCS5RkDmwAAAMc"]
[Sat Apr 11 01:52:22.920435 2026] [:error] [pid 55451:tid 55463] [client 51.107.88.105:11485] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "adk41nApxuyB7yCS5RkDoQAAAMo"]
[Sat Apr 11 01:52:23.444634 2026] [:error] [pid 21569:tid 21662] [client 51.107.88.105:12050] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "adk413AvQTgvXJ6vHoqZSgAAAI8"]
[Sat Apr 11 01:52:24.029059 2026] [:error] [pid 21569:tid 21683] [client 51.107.88.105:11680] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "adk42HAvQTgvXJ6vHoqZSwAAAJg"]
[Sat Apr 11 01:52:24.512132 2026] [:error] [pid 21570:tid 21670] [client 51.107.88.105:11509] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "adk42DKs5t9xRSNL6cnFOQAAAEQ"]
[Sat Apr 11 01:52:25.124836 2026] [:error] [pid 21570:tid 21689] [client 51.107.88.105:11507] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aligk.php"] [unique_id "adk42TKs5t9xRSNL6cnFOgAAAE8"]
[Sat Apr 11 01:52:25.654120 2026] [:error] [pid 55451:tid 55468] [client 51.107.88.105:11933] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aligk.php"] [unique_id "adk42XApxuyB7yCS5RkDtAAAAM8"]
[Sat Apr 11 01:52:26.153930 2026] [:error] [pid 21706:tid 21730] [client 51.107.88.105:11629] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aligk.php"] [unique_id "adk42iGQ1M5d8fQSsLGkEwAAABY"]
[Sat Apr 11 01:52:26.671360 2026] [:error] [pid 21706:tid 21715] [client 51.107.88.105:12150] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aligk.php"] [unique_id "adk42iGQ1M5d8fQSsLGkGAAAAAc"]
[Sat Apr 11 01:52:27.155113 2026] [proxy_fcgi:error] [pid 21706:tid 21711] [client 51.107.88.105:12100] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 01:52:27.394438 2026] [proxy_fcgi:error] [pid 21706:tid 21708] [client 51.107.88.105:12100] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 01:52:27.632621 2026] [proxy_fcgi:error] [pid 21706:tid 21710] [client 51.107.88.105:12100] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 01:52:27.868820 2026] [proxy_fcgi:error] [pid 21706:tid 21730] [client 51.107.88.105:12100] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 01:52:28.106226 2026] [proxy_fcgi:error] [pid 21706:tid 21709] [client 51.107.88.105:12100] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 01:52:28.368712 2026] [proxy_fcgi:error] [pid 21706:tid 21732] [client 51.107.88.105:12100] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 01:52:28.633392 2026] [proxy_fcgi:error] [pid 21706:tid 21728] [client 51.107.88.105:12100] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 01:52:28.870741 2026] [proxy_fcgi:error] [pid 21706:tid 21716] [client 51.107.88.105:12100] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 01:52:29.132453 2026] [proxy_fcgi:error] [pid 21706:tid 21721] [client 51.107.88.105:12100] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 01:52:29.611513 2026] [proxy_fcgi:error] [pid 21706:tid 21715] [client 51.107.88.105:12100] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 01:52:29.846657 2026] [:error] [pid 21706:tid 21729] [client 51.107.88.105:12100] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-the.php"] [unique_id "adk43SGQ1M5d8fQSsLGkLAAAABU"]
[Sat Apr 11 01:52:30.334253 2026] [:error] [pid 21570:tid 21692] [client 51.107.88.105:12038] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-the.php"] [unique_id "adk43jKs5t9xRSNL6cnFSQAAAFI"]
[Sat Apr 11 01:52:30.845051 2026] [:error] [pid 21568:tid 21580] [client 51.107.88.105:11737] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-the.php"] [unique_id "adk43oiz5v_ljZxkpR_IdgAAAQg"]
[Sat Apr 11 01:52:31.394024 2026] [:error] [pid 21568:tid 21592] [client 51.107.88.105:11345] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-the.php"] [unique_id "adk434iz5v_ljZxkpR_IeQAAARQ"]
[Sat Apr 11 01:52:32.525986 2026] [:error] [pid 21706:tid 21732] [client 51.107.88.105:11911] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jga.php"] [unique_id "adk44CGQ1M5d8fQSsLGkOAAAABg"]
[Sat Apr 11 01:52:32.993924 2026] [:error] [pid 55451:tid 55459] [client 51.107.88.105:11798] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jga.php"] [unique_id "adk44HApxuyB7yCS5RkDzwAAAMY"]
[Sat Apr 11 01:52:33.466417 2026] [:error] [pid 21569:tid 21650] [client 51.107.88.105:12094] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jga.php"] [unique_id "adk44XAvQTgvXJ6vHoqZVwAAAIU"]
[Sat Apr 11 01:52:34.062922 2026] [:error] [pid 21569:tid 21674] [client 51.107.88.105:11357] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jga.php"] [unique_id "adk44nAvQTgvXJ6vHoqZWQAAAJQ"]
[Sat Apr 11 01:52:34.537094 2026] [:error] [pid 21569:tid 21662] [client 51.107.88.105:12195] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/term.php"] [unique_id "adk44nAvQTgvXJ6vHoqZXAAAAI8"]
[Sat Apr 11 01:52:35.010102 2026] [:error] [pid 21706:tid 21725] [client 51.107.88.105:12221] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/term.php"] [unique_id "adk44yGQ1M5d8fQSsLGkPgAAABE"]
[Sat Apr 11 01:52:35.877690 2026] [:error] [pid 21568:tid 21576] [client 51.107.88.105:12109] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/term.php"] [unique_id "adk444iz5v_ljZxkpR_IjQAAAQQ"]
[Sat Apr 11 01:52:36.399367 2026] [:error] [pid 21569:tid 21680] [client 51.107.88.105:11701] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/term.php"] [unique_id "adk45HAvQTgvXJ6vHoqZaQAAAJc"]
[Sat Apr 11 01:52:36.931674 2026] [:error] [pid 55451:tid 55460] [client 51.107.88.105:11609] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jp.php"] [unique_id "adk45HApxuyB7yCS5RkD3wAAAMc"]
[Sat Apr 11 01:52:37.410009 2026] [:error] [pid 21569:tid 21646] [client 51.107.88.105:11332] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jp.php"] [unique_id "adk45XAvQTgvXJ6vHoqZbQAAAIE"]
[Sat Apr 11 01:52:37.944301 2026] [:error] [pid 21568:tid 21594] [client 51.107.88.105:12090] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jp.php"] [unique_id "adk45Yiz5v_ljZxkpR_IlAAAARY"]
[Sat Apr 11 01:52:38.456888 2026] [:error] [pid 21568:tid 21596] [client 51.107.88.105:11604] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jp.php"] [unique_id "adk45oiz5v_ljZxkpR_ImAAAARg"]
[Sat Apr 11 01:52:38.936140 2026] [:error] [pid 21569:tid 21659] [client 51.107.88.105:11916] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Ov-Simple1.php"] [unique_id "adk45nAvQTgvXJ6vHoqZdAAAAI0"]
[Sat Apr 11 01:52:39.622702 2026] [:error] [pid 55451:tid 55468] [client 51.107.88.105:12140] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Ov-Simple1.php"] [unique_id "adk453ApxuyB7yCS5RkD6AAAAM8"]
[Sat Apr 11 01:52:40.119643 2026] [:error] [pid 55451:tid 55461] [client 51.107.88.105:11605] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Ov-Simple1.php"] [unique_id "adk46HApxuyB7yCS5RkD7gAAAMg"]
[Sat Apr 11 01:52:40.607856 2026] [:error] [pid 21568:tid 21583] [client 51.107.88.105:12093] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Ov-Simple1.php"] [unique_id "adk46Iiz5v_ljZxkpR_IowAAAQs"]
[Sat Apr 11 01:52:41.209373 2026] [:error] [pid 55451:tid 55473] [client 51.107.88.105:12180] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dass.php"] [unique_id "adk46XApxuyB7yCS5RkD9gAAANQ"]
[Sat Apr 11 01:52:41.716618 2026] [:error] [pid 21706:tid 21725] [client 51.107.88.105:11458] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dass.php"] [unique_id "adk46SGQ1M5d8fQSsLGkSgAAABE"]
[Sat Apr 11 01:52:42.401021 2026] [:error] [pid 55451:tid 55465] [client 51.107.88.105:11640] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dass.php"] [unique_id "adk46nApxuyB7yCS5RkEBQAAAMw"]
[Sat Apr 11 01:52:42.881003 2026] [:error] [pid 55451:tid 55463] [client 51.107.88.105:11374] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dass.php"] [unique_id "adk46nApxuyB7yCS5RkEDwAAAMo"]
[Sat Apr 11 01:52:43.354763 2026] [:error] [pid 55451:tid 55476] [client 51.107.88.105:12174] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/classwithtostring.php"] [unique_id "adk463ApxuyB7yCS5RkEFwAAANc"]
[Sat Apr 11 01:52:43.850435 2026] [:error] [pid 21569:tid 21646] [client 51.107.88.105:11706] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/classwithtostring.php"] [unique_id "adk463AvQTgvXJ6vHoqZfgAAAIE"]
[Sat Apr 11 01:52:44.418476 2026] [:error] [pid 55451:tid 55465] [client 51.107.88.105:11721] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/classwithtostring.php"] [unique_id "adk47HApxuyB7yCS5RkEIgAAAMw"]
[Sat Apr 11 01:52:45.077632 2026] [:error] [pid 21706:tid 21720] [client 51.107.88.105:12176] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/classwithtostring.php"] [unique_id "adk47SGQ1M5d8fQSsLGkWAAAAAw"]
[Sat Apr 11 01:52:45.594684 2026] [:error] [pid 21568:tid 21581] [client 51.107.88.105:11689] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ta0ol.php"] [unique_id "adk47Yiz5v_ljZxkpR_IpgAAAQk"]
[Sat Apr 11 01:52:46.147800 2026] [:error] [pid 21706:tid 21712] [client 51.107.88.105:12123] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ta0ol.php"] [unique_id "adk47iGQ1M5d8fQSsLGkYAAAAAQ"]
[Sat Apr 11 01:52:46.851006 2026] [:error] [pid 21706:tid 21715] [client 51.107.88.105:12053] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ta0ol.php"] [unique_id "adk47iGQ1M5d8fQSsLGkZAAAAAc"]
[Sat Apr 11 01:52:47.610208 2026] [:error] [pid 55451:tid 55465] [client 51.107.88.105:12088] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ta0ol.php"] [unique_id "adk473ApxuyB7yCS5RkEMwAAAMw"]
[Sat Apr 11 01:52:48.141780 2026] [:error] [pid 21569:tid 21657] [client 51.107.88.105:11606] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-png.php"] [unique_id "adk48HAvQTgvXJ6vHoqZhQAAAIw"]
[Sat Apr 11 01:52:48.708877 2026] [:error] [pid 21706:tid 21731] [client 51.107.88.105:12051] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-png.php"] [unique_id "adk48CGQ1M5d8fQSsLGkawAAABc"]
[Sat Apr 11 01:52:49.225362 2026] [:error] [pid 21706:tid 21726] [client 51.107.88.105:11948] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-png.php"] [unique_id "adk48SGQ1M5d8fQSsLGkbwAAABI"]
[Sat Apr 11 01:52:50.177158 2026] [:error] [pid 55451:tid 55455] [client 51.107.88.105:12162] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-png.php"] [unique_id "adk48nApxuyB7yCS5RkESgAAAMI"]
[Sat Apr 11 01:52:50.647472 2026] [:error] [pid 55451:tid 55460] [client 51.107.88.105:11642] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tfm.php"] [unique_id "adk48nApxuyB7yCS5RkEUQAAAMc"]
[Sat Apr 11 01:52:51.304358 2026] [:error] [pid 21706:tid 21708] [client 51.107.88.105:11918] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tfm.php"] [unique_id "adk48yGQ1M5d8fQSsLGkcwAAAAA"]
[Sat Apr 11 01:53:18.609651 2026] [:error] [pid 55451:tid 55457] [client 51.107.88.105:11659] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a5.php"] [unique_id "adk5DnApxuyB7yCS5RkE-QAAAMQ"]
[Sat Apr 11 01:53:19.151388 2026] [:error] [pid 55451:tid 55465] [client 51.107.88.105:11598] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a5.php"] [unique_id "adk5D3ApxuyB7yCS5RkE_QAAAMw"]
[Sat Apr 11 01:53:19.717138 2026] [:error] [pid 21706:tid 21711] [client 51.107.88.105:11360] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a5.php"] [unique_id "adk5DyGQ1M5d8fQSsLGk9AAAAAM"]
[Sat Apr 11 01:53:20.222712 2026] [:error] [pid 21568:tid 21593] [client 51.107.88.105:11710] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a5.php"] [unique_id "adk5EIiz5v_ljZxkpR_I6AAAARU"]
[Sat Apr 11 01:53:20.790482 2026] [:error] [pid 55451:tid 55461] [client 51.107.88.105:12120] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kj.php"] [unique_id "adk5EHApxuyB7yCS5RkFCwAAAMg"]
[Sat Apr 11 01:53:21.828154 2026] [:error] [pid 21706:tid 21723] [client 51.107.88.105:12211] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kj.php"] [unique_id "adk5ESGQ1M5d8fQSsLGlBAAAAA8"]
[Sat Apr 11 01:53:22.477202 2026] [:error] [pid 21570:tid 21668] [client 51.107.88.105:11630] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kj.php"] [unique_id "adk5EjKs5t9xRSNL6cnFvQAAAEM"]
[Sat Apr 11 01:53:23.078721 2026] [:error] [pid 55451:tid 55474] [client 51.107.88.105:12076] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kj.php"] [unique_id "adk5E3ApxuyB7yCS5RkFGQAAANU"]
[Sat Apr 11 01:53:23.808682 2026] [:error] [pid 21569:tid 21676] [client 51.107.88.105:11765] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a7.php"] [unique_id "adk5E3AvQTgvXJ6vHoqaCwAAAJU"]
[Sat Apr 11 01:53:24.600006 2026] [:error] [pid 21570:tid 21675] [client 51.107.88.105:11714] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a7.php"] [unique_id "adk5FDKs5t9xRSNL6cnFwQAAAEc"]
[Sat Apr 11 01:53:25.188729 2026] [:error] [pid 55451:tid 55461] [client 51.107.88.105:11720] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a7.php"] [unique_id "adk5FXApxuyB7yCS5RkFJAAAAMg"]
[Sat Apr 11 01:53:25.867789 2026] [:error] [pid 55451:tid 55476] [client 51.107.88.105:12158] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a7.php"] [unique_id "adk5FXApxuyB7yCS5RkFLAAAANc"]
[Sat Apr 11 01:53:26.410171 2026] [:error] [pid 21706:tid 21721] [client 51.107.88.105:12185] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bgymj.php"] [unique_id "adk5FiGQ1M5d8fQSsLGlIwAAAA0"]
[Sat Apr 11 01:53:26.953071 2026] [:error] [pid 21706:tid 21722] [client 51.107.88.105:11472] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bgymj.php"] [unique_id "adk5FiGQ1M5d8fQSsLGlKAAAAA4"]
[Sat Apr 11 01:53:27.683275 2026] [:error] [pid 55451:tid 55470] [client 51.107.88.105:11495] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bgymj.php"] [unique_id "adk5F3ApxuyB7yCS5RkFOAAAANE"]
[Sat Apr 11 01:53:28.240192 2026] [:error] [pid 21568:tid 21594] [client 51.107.88.105:12124] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bgymj.php"] [unique_id "adk5GIiz5v_ljZxkpR_I-wAAARY"]
[Sat Apr 11 01:53:29.399692 2026] [proxy_fcgi:error] [pid 21570:tid 21677] [client 51.107.88.105:12160] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 01:53:29.638870 2026] [proxy_fcgi:error] [pid 21570:tid 21665] [client 51.107.88.105:12160] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 01:53:29.898144 2026] [proxy_fcgi:error] [pid 21570:tid 21675] [client 51.107.88.105:12160] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 01:53:30.281808 2026] [proxy_fcgi:error] [pid 21570:tid 21689] [client 51.107.88.105:12160] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 01:53:30.518627 2026] [proxy_fcgi:error] [pid 21570:tid 21691] [client 51.107.88.105:12160] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 01:53:30.827051 2026] [proxy_fcgi:error] [pid 21570:tid 21679] [client 51.107.88.105:12160] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 01:53:31.132217 2026] [proxy_fcgi:error] [pid 21570:tid 21682] [client 51.107.88.105:12160] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 01:53:31.376281 2026] [proxy_fcgi:error] [pid 21570:tid 21673] [client 51.107.88.105:12160] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 01:53:31.612826 2026] [proxy_fcgi:error] [pid 21570:tid 21663] [client 51.107.88.105:12160] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 01:53:31.924186 2026] [proxy_fcgi:error] [pid 21570:tid 21687] [client 51.107.88.105:12160] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 01:53:32.165008 2026] [proxy_fcgi:error] [pid 21570:tid 21685] [client 51.107.88.105:12160] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 01:53:32.591725 2026] [:error] [pid 21570:tid 21661] [client 51.107.88.105:12160] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sadcut1.php"] [unique_id "adk5HDKs5t9xRSNL6cnF5QAAAEA"]
[Sat Apr 11 01:53:34.209911 2026] [:error] [pid 21568:tid 21596] [client 51.107.88.105:12126] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sadcut1.php"] [unique_id "adk5Hoiz5v_ljZxkpR_JCQAAARg"]
[Sat Apr 11 01:53:35.014030 2026] [:error] [pid 21569:tid 21656] [client 51.107.88.105:12032] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sadcut1.php"] [unique_id "adk5H3AvQTgvXJ6vHoqaHgAAAIs"]
[Sat Apr 11 01:53:35.620405 2026] [:error] [pid 55451:tid 55463] [client 51.107.88.105:11681] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sadcut1.php"] [unique_id "adk5H3ApxuyB7yCS5RkFgwAAAMo"]
[Sat Apr 11 01:53:36.435197 2026] [:error] [pid 55451:tid 55459] [client 51.107.88.105:11938] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zoper1.php"] [unique_id "adk5IHApxuyB7yCS5RkFkQAAAMY"]
[Sat Apr 11 01:53:37.123307 2026] [:error] [pid 21568:tid 21582] [client 51.107.88.105:11728] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zoper1.php"] [unique_id "adk5IYiz5v_ljZxkpR_JEQAAAQo"]
[Sat Apr 11 01:53:37.867002 2026] [:error] [pid 21706:tid 21728] [client 51.107.88.105:12205] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zoper1.php"] [unique_id "adk5ISGQ1M5d8fQSsLGlUAAAABQ"]
[Sat Apr 11 01:53:38.391639 2026] [:error] [pid 21568:tid 21580] [client 51.107.88.105:11705] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zoper1.php"] [unique_id "adk5Ioiz5v_ljZxkpR_JEgAAAQg"]
[Sat Apr 11 01:53:39.405580 2026] [:error] [pid 21570:tid 21672] [client 51.107.88.105:11927] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws.php"] [unique_id "adk5IzKs5t9xRSNL6cnF8wAAAEU"]
[Sat Apr 11 01:53:39.953407 2026] [:error] [pid 21569:tid 21664] [client 51.107.88.105:12139] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws.php"] [unique_id "adk5I3AvQTgvXJ6vHoqaIAAAAJA"]
[Sat Apr 11 01:53:40.511474 2026] [:error] [pid 55451:tid 55455] [client 51.107.88.105:11469] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws.php"] [unique_id "adk5JHApxuyB7yCS5RkFuwAAAMI"]
[Sat Apr 11 01:53:41.063222 2026] [:error] [pid 21706:tid 21709] [client 51.107.88.105:11355] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws.php"] [unique_id "adk5JSGQ1M5d8fQSsLGlWQAAAAE"]
[Sat Apr 11 01:53:41.560060 2026] [:error] [pid 21706:tid 21728] [client 51.107.88.105:11919] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ortasekerli1.php"] [unique_id "adk5JSGQ1M5d8fQSsLGlXQAAABQ"]
[Sat Apr 11 01:53:42.106968 2026] [:error] [pid 55451:tid 55456] [client 51.107.88.105:11330] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ortasekerli1.php"] [unique_id "adk5JnApxuyB7yCS5RkFxAAAAMM"]
[Sat Apr 11 01:53:42.951287 2026] [:error] [pid 55451:tid 55476] [client 51.107.88.105:11704] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ortasekerli1.php"] [unique_id "adk5JnApxuyB7yCS5RkFyQAAANc"]
[Sat Apr 11 01:53:43.463131 2026] [:error] [pid 21706:tid 21718] [client 51.107.88.105:12188] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ortasekerli1.php"] [unique_id "adk5JyGQ1M5d8fQSsLGlaAAAAAo"]
[Sat Apr 11 01:53:44.094963 2026] [:error] [pid 21706:tid 21722] [client 51.107.88.105:11473] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-good.php"] [unique_id "adk5KCGQ1M5d8fQSsLGlawAAAA4"]
[Sat Apr 11 01:53:44.585574 2026] [:error] [pid 21568:tid 21579] [client 51.107.88.105:11724] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-good.php"] [unique_id "adk5KIiz5v_ljZxkpR_JHwAAAQc"]
[Sat Apr 11 01:53:45.943814 2026] [:error] [pid 21569:tid 21650] [client 51.107.88.105:11734] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-good.php"] [unique_id "adk5KXAvQTgvXJ6vHoqaLAAAAIU"]
[Sat Apr 11 01:53:46.531085 2026] [:error] [pid 21570:tid 21681] [client 51.107.88.105:11613] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-good.php"] [unique_id "adk5KjKs5t9xRSNL6cnGBQAAAEo"]
[Sat Apr 11 01:53:47.095712 2026] [:error] [pid 55451:tid 55467] [client 51.107.88.105:11356] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wmore1.php"] [unique_id "adk5K3ApxuyB7yCS5RkF1wAAAM4"]
[Sat Apr 11 01:53:47.868809 2026] [:error] [pid 55451:tid 55461] [client 51.107.88.105:11352] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wmore1.php"] [unique_id "adk5K3ApxuyB7yCS5RkF3AAAAMg"]
[Sat Apr 11 01:53:48.506233 2026] [:error] [pid 21570:tid 21690] [client 51.107.88.105:11697] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wmore1.php"] [unique_id "adk5LDKs5t9xRSNL6cnGDgAAAFA"]
[Sat Apr 11 01:53:49.442791 2026] [:error] [pid 21706:tid 21719] [client 51.107.88.105:11791] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wmore1.php"] [unique_id "adk5LSGQ1M5d8fQSsLGlcwAAAAs"]
[Sat Apr 11 01:53:50.352333 2026] [:error] [pid 21570:tid 21668] [client 51.107.88.105:12036] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/new3.php"] [unique_id "adk5LjKs5t9xRSNL6cnGFAAAAEM"]
[Sat Apr 11 01:53:51.786594 2026] [:error] [pid 21570:tid 21679] [client 51.107.88.105:11726] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/new3.php"] [unique_id "adk5LzKs5t9xRSNL6cnGGwAAAEk"]
[Sat Apr 11 01:53:52.557408 2026] [:error] [pid 21568:tid 21577] [client 51.107.88.105:12013] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/new3.php"] [unique_id "adk5MIiz5v_ljZxkpR_JMAAAAQU"]
[Sat Apr 11 01:53:53.085545 2026] [:error] [pid 21568:tid 21572] [client 51.107.88.105:12128] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/new3.php"] [unique_id "adk5MYiz5v_ljZxkpR_JOQAAAQA"]
[Sat Apr 11 01:53:53.930896 2026] [:error] [pid 21570:tid 21691] [client 51.107.88.105:12167] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nw.php"] [unique_id "adk5MTKs5t9xRSNL6cnGIgAAAFE"]
[Sat Apr 11 01:53:55.428391 2026] [:error] [pid 21570:tid 21693] [client 51.107.88.105:12189] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nw.php"] [unique_id "adk5MzKs5t9xRSNL6cnGKQAAAFM"]
[Sat Apr 11 01:53:56.300973 2026] [:error] [pid 21569:tid 21645] [client 51.107.88.105:11379] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nw.php"] [unique_id "adk5NHAvQTgvXJ6vHoqaOQAAAIA"]
[Sat Apr 11 01:53:57.180774 2026] [:error] [pid 55451:tid 55455] [client 51.107.88.105:12219] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nw.php"] [unique_id "adk5NXApxuyB7yCS5RkF9gAAAMI"]
[Sat Apr 11 01:53:58.220057 2026] [:error] [pid 21568:tid 21574] [client 51.107.88.105:11940] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/byypas.php"] [unique_id "adk5Noiz5v_ljZxkpR_JSAAAAQI"]
[Sat Apr 11 01:53:58.936850 2026] [:error] [pid 21569:tid 21683] [client 51.107.88.105:11723] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/byypas.php"] [unique_id "adk5NnAvQTgvXJ6vHoqaQQAAAJg"]
[Sat Apr 11 01:53:59.646436 2026] [:error] [pid 21706:tid 21726] [client 51.107.88.105:11727] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/byypas.php"] [unique_id "adk5NyGQ1M5d8fQSsLGlpAAAABI"]
[Sat Apr 11 01:54:00.864702 2026] [:error] [pid 21706:tid 21716] [client 51.107.88.105:11732] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/byypas.php"] [unique_id "adk5OCGQ1M5d8fQSsLGlqgAAAAg"]
[Sat Apr 11 01:54:01.987673 2026] [:error] [pid 21570:tid 21693] [client 51.107.88.105:12052] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rithin.php"] [unique_id "adk5OTKs5t9xRSNL6cnGNQAAAFM"]
[Sat Apr 11 01:54:03.362497 2026] [:error] [pid 21570:tid 21661] [client 51.107.88.105:11616] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rithin.php"] [unique_id "adk5OzKs5t9xRSNL6cnGPAAAAEA"]
[Sat Apr 11 01:54:04.109047 2026] [:error] [pid 21570:tid 21668] [client 51.107.88.105:12149] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rithin.php"] [unique_id "adk5PDKs5t9xRSNL6cnGQAAAAEM"]
[Sat Apr 11 01:54:04.752743 2026] [:error] [pid 21706:tid 21719] [client 51.107.88.105:11471] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rithin.php"] [unique_id "adk5PCGQ1M5d8fQSsLGlwwAAAAs"]
[Sat Apr 11 01:54:05.306280 2026] [:error] [pid 21568:tid 21590] [client 51.107.88.105:11488] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a4.php"] [unique_id "adk5PYiz5v_ljZxkpR_JVwAAARI"]
[Sat Apr 11 01:54:05.855522 2026] [:error] [pid 21570:tid 21694] [client 51.107.88.105:12191] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a4.php"] [unique_id "adk5PTKs5t9xRSNL6cnGQgAAAFQ"]
[Sat Apr 11 01:54:06.561451 2026] [:error] [pid 55451:tid 55470] [client 51.107.88.105:11618] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a4.php"] [unique_id "adk5PnApxuyB7yCS5RkGEQAAANE"]
[Sat Apr 11 01:54:07.576697 2026] [:error] [pid 21706:tid 21722] [client 51.107.88.105:11965] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a4.php"] [unique_id "adk5PyGQ1M5d8fQSsLGl0gAAAA4"]
[Sat Apr 11 01:54:08.248271 2026] [:error] [pid 21569:tid 21659] [client 51.107.88.105:11652] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jlex.php"] [unique_id "adk5QHAvQTgvXJ6vHoqaUAAAAI0"]
[Sat Apr 11 01:54:09.003762 2026] [:error] [pid 21706:tid 21719] [client 51.107.88.105:12207] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jlex.php"] [unique_id "adk5QSGQ1M5d8fQSsLGl3QAAAAs"]
[Sat Apr 11 01:54:09.677362 2026] [:error] [pid 21570:tid 21681] [client 51.107.88.105:12145] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jlex.php"] [unique_id "adk5QTKs5t9xRSNL6cnGUwAAAEo"]
[Sat Apr 11 01:54:10.402582 2026] [:error] [pid 21570:tid 21675] [client 51.107.88.105:12177] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jlex.php"] [unique_id "adk5QjKs5t9xRSNL6cnGWAAAAEc"]
[Sat Apr 11 01:54:11.077951 2026] [:error] [pid 55451:tid 55460] [client 51.107.88.105:11977] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xsas.php"] [unique_id "adk5Q3ApxuyB7yCS5RkGHgAAAMc"]
[Sat Apr 11 01:54:11.598222 2026] [:error] [pid 21569:tid 21653] [client 51.107.88.105:12043] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xsas.php"] [unique_id "adk5Q3AvQTgvXJ6vHoqaVQAAAIg"]
[Sat Apr 11 01:54:12.154034 2026] [:error] [pid 55451:tid 55458] [client 51.107.88.105:11978] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xsas.php"] [unique_id "adk5RHApxuyB7yCS5RkGKAAAAMU"]
[Sat Apr 11 01:54:13.240915 2026] [:error] [pid 21706:tid 21710] [client 51.107.88.105:11741] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xsas.php"] [unique_id "adk5RSGQ1M5d8fQSsLGl8QAAAAI"]
[Sat Apr 11 01:54:13.760575 2026] [:error] [pid 21568:tid 21578] [client 51.107.88.105:11499] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp/jp.php"] [unique_id "adk5RYiz5v_ljZxkpR_JaQAAAQY"]
[Sat Apr 11 01:54:14.361199 2026] [:error] [pid 21706:tid 21715] [client 51.107.88.105:12112] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp/jp.php"] [unique_id "adk5RiGQ1M5d8fQSsLGl_AAAAAc"]
[Sat Apr 11 01:54:15.004354 2026] [:error] [pid 21706:tid 21708] [client 51.107.88.105:12155] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp/jp.php"] [unique_id "adk5RyGQ1M5d8fQSsLGmAAAAAAA"]
[Sat Apr 11 01:54:15.618397 2026] [:error] [pid 21706:tid 21727] [client 51.107.88.105:12062] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp/jp.php"] [unique_id "adk5RyGQ1M5d8fQSsLGmCAAAABM"]
[Sat Apr 11 01:54:16.210203 2026] [:error] [pid 21706:tid 21712] [client 51.107.88.105:11456] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/8573.php"] [unique_id "adk5SCGQ1M5d8fQSsLGmDgAAAAQ"]
[Sat Apr 11 01:54:16.939546 2026] [:error] [pid 21706:tid 21728] [client 51.107.88.105:11467] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/8573.php"] [unique_id "adk5SCGQ1M5d8fQSsLGmEQAAABQ"]
[Sat Apr 11 01:54:17.511426 2026] [:error] [pid 21570:tid 21661] [client 51.107.88.105:11600] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/8573.php"] [unique_id "adk5STKs5t9xRSNL6cnGYwAAAEA"]
[Sat Apr 11 01:54:18.032455 2026] [:error] [pid 55451:tid 55469] [client 51.107.88.105:11491] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/8573.php"] [unique_id "adk5SnApxuyB7yCS5RkGNwAAANA"]
[Sat Apr 11 01:54:18.819430 2026] [:error] [pid 21568:tid 21591] [client 51.107.88.105:12131] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp5.php"] [unique_id "adk5Soiz5v_ljZxkpR_JdgAAARM"]
[Sat Apr 11 01:54:20.405767 2026] [:error] [pid 21569:tid 21646] [client 51.107.88.105:11696] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp5.php"] [unique_id "adk5THAvQTgvXJ6vHoqabQAAAIE"]
[Sat Apr 11 01:54:21.046053 2026] [:error] [pid 21569:tid 21680] [client 51.107.88.105:12203] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp5.php"] [unique_id "adk5TXAvQTgvXJ6vHoqacAAAAJc"]
[Sat Apr 11 01:54:22.689466 2026] [:error] [pid 21568:tid 21573] [client 51.107.88.105:11498] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp5.php"] [unique_id "adk5Toiz5v_ljZxkpR_JjwAAAQE"]
[Sat Apr 11 01:54:23.463288 2026] [:error] [pid 55451:tid 55455] [client 51.107.88.105:12170] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp9.php"] [unique_id "adk5T3ApxuyB7yCS5RkGUAAAAMI"]
[Sat Apr 11 01:54:25.160868 2026] [:error] [pid 21569:tid 21650] [client 51.107.88.105:12087] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp9.php"] [unique_id "adk5UXAvQTgvXJ6vHoqacwAAAIU"]
[Sat Apr 11 01:54:26.137000 2026] [:error] [pid 21706:tid 21720] [client 51.107.88.105:12144] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp9.php"] [unique_id "adk5UiGQ1M5d8fQSsLGmIwAAAAw"]
[Sat Apr 11 01:54:27.092784 2026] [:error] [pid 21706:tid 21725] [client 51.107.88.105:11375] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp9.php"] [unique_id "adk5UyGQ1M5d8fQSsLGmJQAAABE"]
[Sat Apr 11 01:54:27.734191 2026] [:error] [pid 21570:tid 21696] [client 51.107.88.105:12110] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws88.php"] [unique_id "adk5UzKs5t9xRSNL6cnGfwAAAFY"]
[Sat Apr 11 01:54:28.316616 2026] [:error] [pid 21706:tid 21716] [client 51.107.88.105:11700] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws88.php"] [unique_id "adk5VCGQ1M5d8fQSsLGmKwAAAAg"]
[Sat Apr 11 01:54:29.312339 2026] [:error] [pid 21569:tid 21650] [client 51.107.88.105:11925] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws88.php"] [unique_id "adk5VXAvQTgvXJ6vHoqafwAAAIU"]
[Sat Apr 11 01:54:29.881816 2026] [:error] [pid 21706:tid 21731] [client 51.107.88.105:11774] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws88.php"] [unique_id "adk5VSGQ1M5d8fQSsLGmMgAAABc"]
[Sat Apr 11 01:54:30.647141 2026] [:error] [pid 21569:tid 21659] [client 51.107.88.105:11615] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/motu.php"] [unique_id "adk5VnAvQTgvXJ6vHoqahQAAAI0"]
[Sat Apr 11 01:54:31.906758 2026] [:error] [pid 55451:tid 55473] [client 51.107.88.105:11742] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/motu.php"] [unique_id "adk5V3ApxuyB7yCS5RkGbgAAANQ"]
[Sat Apr 11 01:54:32.609389 2026] [proxy_fcgi:error] [pid 55451:tid 55464] [client 51.107.88.105:11769] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 01:54:32.859258 2026] [proxy_fcgi:error] [pid 55451:tid 55475] [client 51.107.88.105:11769] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 02:35:15.194415 2026] [proxy_fcgi:error] [pid 55451:tid 55472] [client 72.146.8.12:3046] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 04:23:33.199192 2026] [:error] [pid 33173:tid 33249] [client 164.68.120.90:54824] [client 164.68.120.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/employment"] [unique_id "adlcRa8109xRDP2izWiNhAAAAIQ"]
[Sat Apr 11 07:07:38.934210 2026] [proxy_fcgi:error] [pid 33172:tid 33218] [client 20.100.191.67:10995] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 07:07:39.193446 2026] [proxy_fcgi:error] [pid 33172:tid 33240] [client 20.100.191.67:10995] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 07:07:39.453989 2026] [proxy_fcgi:error] [pid 33172:tid 33235] [client 20.100.191.67:10995] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 07:07:39.713652 2026] [proxy_fcgi:error] [pid 33172:tid 33225] [client 20.100.191.67:10995] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 07:07:39.974892 2026] [proxy_fcgi:error] [pid 33172:tid 33242] [client 20.100.191.67:10995] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 07:07:40.237834 2026] [proxy_fcgi:error] [pid 33172:tid 33236] [client 20.100.191.67:10995] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 07:07:40.497048 2026] [proxy_fcgi:error] [pid 33172:tid 33234] [client 20.100.191.67:10995] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 08:07:04.274390 2026] [:error] [pid 15244:tid 15262] [client 4.205.120.59:3023] [client 4.205.120.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "admQqIkdEsz5NeAq8w2nlQAAARA"]
[Sat Apr 11 08:07:11.005974 2026] [:error] [pid 33171:tid 33190] [client 4.205.120.59:2564] [client 4.205.120.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "admQr7oqTMlo30hcVw-Z2QAAAAQ"]
[Sat Apr 11 08:07:14.822973 2026] [:error] [pid 15244:tid 15270] [client 4.205.120.59:2577] [client 4.205.120.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "admQsokdEsz5NeAq8w2nwgAAARg"]
[Sat Apr 11 08:07:16.081304 2026] [:error] [pid 33173:tid 33247] [client 4.205.120.59:3027] [client 4.205.120.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "admQtK8109xRDP2izWgo-wAAAII"]
[Sat Apr 11 08:51:51.625559 2026] [proxy_fcgi:error] [pid 9860:tid 9881] [client 72.146.30.147:2718] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 08:51:52.088247 2026] [proxy_fcgi:error] [pid 9860:tid 9871] [client 72.146.30.147:2718] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 08:51:52.555180 2026] [proxy_fcgi:error] [pid 9860:tid 9888] [client 72.146.30.147:2718] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 08:51:52.828850 2026] [proxy_fcgi:error] [pid 9860:tid 9882] [client 72.146.30.147:2718] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 08:51:53.066771 2026] [proxy_fcgi:error] [pid 9860:tid 9870] [client 72.146.30.147:2718] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 08:51:53.300870 2026] [proxy_fcgi:error] [pid 9860:tid 9876] [client 72.146.30.147:2718] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 08:51:53.550380 2026] [proxy_fcgi:error] [pid 9860:tid 9873] [client 72.146.30.147:2718] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 08:51:53.784934 2026] [proxy_fcgi:error] [pid 9860:tid 9878] [client 72.146.30.147:2718] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 08:51:54.163530 2026] [proxy_fcgi:error] [pid 9860:tid 9877] [client 72.146.30.147:2718] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 08:51:54.582791 2026] [proxy_fcgi:error] [pid 9860:tid 9869] [client 72.146.30.147:2718] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 08:51:54.831433 2026] [:error] [pid 9860:tid 9885] [client 72.146.30.147:2718] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/BhqKs28Cw94.php"] [unique_id "admbKtXzQ4DMsdEOlQCSqAAAARM"]
[Sat Apr 11 08:51:55.904624 2026] [:error] [pid 9862:tid 9908] [client 72.146.30.147:22822] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/BhqKs28Cw94.php"] [unique_id "admbK8QdWEjizEgEe2LsXgAAAUw"]
[Sat Apr 11 08:51:56.820011 2026] [:error] [pid 9954:tid 9960] [client 72.146.30.147:2712] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/BhqKs28Cw94.php"] [unique_id "admbLCCHpShicB0JKTLWcwAAAAM"]
[Sat Apr 11 08:51:57.793195 2026] [:error] [pid 9863:tid 9923] [client 72.146.30.147:61040] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/BhqKs28Cw94.php"] [unique_id "admbLWHClruQA-0uiPzvNwAAAYA"]
[Sat Apr 11 08:51:58.633530 2026] [:error] [pid 9863:tid 9925] [client 72.146.30.147:49439] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cdn3.php"] [unique_id "admbLmHClruQA-0uiPzvPwAAAYI"]
[Sat Apr 11 08:51:59.831026 2026] [:error] [pid 9954:tid 9979] [client 72.146.30.147:15945] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cdn3.php"] [unique_id "admbLyCHpShicB0JKTLWfAAAABY"]
[Sat Apr 11 08:52:00.936895 2026] [:error] [pid 9863:tid 9934] [client 72.146.30.147:61043] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cdn3.php"] [unique_id "admbMGHClruQA-0uiPzvSQAAAYs"]
[Sat Apr 11 08:52:01.771048 2026] [:error] [pid 9863:tid 9931] [client 72.146.30.147:15972] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cdn3.php"] [unique_id "admbMWHClruQA-0uiPzvTgAAAYg"]
[Sat Apr 11 08:52:02.434529 2026] [:error] [pid 9863:tid 9935] [client 72.146.30.147:42197] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/3Cr1w6dfjTK.php"] [unique_id "admbMmHClruQA-0uiPzvVgAAAYw"]
[Sat Apr 11 08:52:03.096987 2026] [:error] [pid 9954:tid 9976] [client 72.146.30.147:15981] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/3Cr1w6dfjTK.php"] [unique_id "admbMyCHpShicB0JKTLWhQAAABM"]
[Sat Apr 11 08:52:03.586625 2026] [:error] [pid 9863:tid 9926] [client 72.146.30.147:58384] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/3Cr1w6dfjTK.php"] [unique_id "admbM2HClruQA-0uiPzvYgAAAYM"]
[Sat Apr 11 08:52:04.186658 2026] [:error] [pid 9954:tid 9961] [client 72.146.30.147:22784] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/3Cr1w6dfjTK.php"] [unique_id "admbNCCHpShicB0JKTLWiAAAAAQ"]
[Sat Apr 11 08:52:05.132253 2026] [:error] [pid 9862:tid 9916] [client 72.146.30.147:42219] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/beerd.php"] [unique_id "admbNcQdWEjizEgEe2LsbQAAAVQ"]
[Sat Apr 11 08:52:05.833206 2026] [:error] [pid 9863:tid 9925] [client 72.146.30.147:21461] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/beerd.php"] [unique_id "admbNWHClruQA-0uiPzvagAAAYI"]
[Sat Apr 11 08:52:06.378625 2026] [:error] [pid 9954:tid 9974] [client 72.146.30.147:15940] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/beerd.php"] [unique_id "admbNiCHpShicB0JKTLWkAAAABE"]
[Sat Apr 11 08:52:07.055547 2026] [:error] [pid 9863:tid 9937] [client 72.146.30.147:61006] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/beerd.php"] [unique_id "admbN2HClruQA-0uiPzvcwAAAY4"]
[Sat Apr 11 08:52:07.716937 2026] [:error] [pid 9860:tid 9885] [client 72.146.30.147:42178] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hhxc.php"] [unique_id "admbN9XzQ4DMsdEOlQCSwAAAARM"]
[Sat Apr 11 08:52:08.535866 2026] [:error] [pid 9954:tid 9971] [client 72.146.30.147:60992] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hhxc.php"] [unique_id "admbOCCHpShicB0JKTLWnAAAAA4"]
[Sat Apr 11 08:52:09.197203 2026] [:error] [pid 9954:tid 9974] [client 72.146.30.147:22821] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hhxc.php"] [unique_id "admbOSCHpShicB0JKTLWogAAABE"]
[Sat Apr 11 08:52:10.115751 2026] [:error] [pid 9954:tid 9968] [client 72.146.30.147:60195] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hhxc.php"] [unique_id "admbOiCHpShicB0JKTLWqAAAAAs"]
[Sat Apr 11 08:52:11.170159 2026] [:error] [pid 9860:tid 9879] [client 72.146.30.147:21503] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/161dfd072f.php"] [unique_id "admbO9XzQ4DMsdEOlQCSywAAAQ0"]
[Sat Apr 11 08:52:12.133329 2026] [:error] [pid 9954:tid 9960] [client 72.146.30.147:58415] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/161dfd072f.php"] [unique_id "admbPCCHpShicB0JKTLWuQAAAAM"]
[Sat Apr 11 08:52:12.906111 2026] [:error] [pid 9954:tid 9959] [client 72.146.30.147:21454] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/161dfd072f.php"] [unique_id "admbPCCHpShicB0JKTLWvQAAAAI"]
[Sat Apr 11 08:52:13.456424 2026] [:error] [pid 9954:tid 9961] [client 72.146.30.147:45335] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/161dfd072f.php"] [unique_id "admbPSCHpShicB0JKTLWwAAAAAQ"]
[Sat Apr 11 08:52:14.178921 2026] [:error] [pid 9954:tid 9978] [client 72.146.30.147:15937] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws80.php"] [unique_id "admbPiCHpShicB0JKTLWxQAAABU"]
[Sat Apr 11 08:52:14.995616 2026] [:error] [pid 9862:tid 9900] [client 72.146.30.147:15979] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws80.php"] [unique_id "admbPsQdWEjizEgEe2LsdwAAAUQ"]
[Sat Apr 11 08:52:15.935298 2026] [:error] [pid 9863:tid 9941] [client 72.146.30.147:61009] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws80.php"] [unique_id "admbP2HClruQA-0uiPzvgAAAAZI"]
[Sat Apr 11 08:52:16.884401 2026] [:error] [pid 9860:tid 9869] [client 72.146.30.147:61025] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws80.php"] [unique_id "admbQNXzQ4DMsdEOlQCS1AAAAQM"]
[Sat Apr 11 08:52:17.650979 2026] [:error] [pid 9954:tid 9961] [client 72.146.30.147:22809] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ylzed0twj8l9drdbchc1oocfCdefault.php"] [unique_id "admbQSCHpShicB0JKTLW1gAAAAQ"]
[Sat Apr 11 08:52:18.736862 2026] [:error] [pid 9863:tid 9927] [client 72.146.30.147:2692] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ylzed0twj8l9drdbchc1oocfCdefault.php"] [unique_id "admbQmHClruQA-0uiPzvhQAAAYQ"]
[Sat Apr 11 08:52:19.573529 2026] [:error] [pid 9954:tid 9969] [client 72.146.30.147:49415] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ylzed0twj8l9drdbchc1oocfCdefault.php"] [unique_id "admbQyCHpShicB0JKTLW3gAAAAw"]
[Sat Apr 11 08:52:20.525986 2026] [:error] [pid 9860:tid 9867] [client 72.146.30.147:17701] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ylzed0twj8l9drdbchc1oocfCdefault.php"] [unique_id "admbRNXzQ4DMsdEOlQCS4QAAAQE"]
[Sat Apr 11 08:52:21.284978 2026] [:error] [pid 9860:tid 9876] [client 72.146.30.147:17255] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/RIP.php"] [unique_id "admbRdXzQ4DMsdEOlQCS5QAAAQo"]
[Sat Apr 11 08:52:22.102453 2026] [:error] [pid 9860:tid 9883] [client 72.146.30.147:45347] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/RIP.php"] [unique_id "admbRtXzQ4DMsdEOlQCS5wAAARE"]
[Sat Apr 11 08:52:22.923138 2026] [:error] [pid 9862:tid 9911] [client 72.146.30.147:17675] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/RIP.php"] [unique_id "admbRsQdWEjizEgEe2LsewAAAU8"]
[Sat Apr 11 08:52:23.584099 2026] [:error] [pid 9860:tid 9885] [client 72.146.30.147:58422] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/RIP.php"] [unique_id "admbR9XzQ4DMsdEOlQCS6AAAARM"]
[Sat Apr 11 08:52:24.256963 2026] [:error] [pid 9862:tid 9913] [client 72.146.30.147:42206] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/no18.php"] [unique_id "admbSMQdWEjizEgEe2LsfwAAAVE"]
[Sat Apr 11 08:52:26.837729 2026] [:error] [pid 9954:tid 9965] [client 72.146.30.147:21443] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/no18.php"] [unique_id "admbSiCHpShicB0JKTLW_AAAAAg"]
[Sat Apr 11 08:52:30.993559 2026] [:error] [pid 9954:tid 9978] [client 72.146.30.147:17664] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/no18.php"] [unique_id "admbTiCHpShicB0JKTLXDwAAABU"]
[Sat Apr 11 08:52:32.059167 2026] [:error] [pid 9862:tid 9897] [client 72.146.30.147:45323] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/no18.php"] [unique_id "admbUMQdWEjizEgEe2LskgAAAUE"]
[Sat Apr 11 08:52:32.770899 2026] [:error] [pid 9954:tid 9969] [client 72.146.30.147:45361] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/blqjs.php"] [unique_id "admbUCCHpShicB0JKTLXGgAAAAw"]
[Sat Apr 11 08:52:33.319999 2026] [:error] [pid 9863:tid 9923] [client 72.146.30.147:17708] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/blqjs.php"] [unique_id "admbUWHClruQA-0uiPzvrAAAAYA"]
[Sat Apr 11 08:52:33.940252 2026] [:error] [pid 9863:tid 9942] [client 72.146.30.147:61053] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/blqjs.php"] [unique_id "admbUWHClruQA-0uiPzvrQAAAZM"]
[Sat Apr 11 08:52:34.535114 2026] [:error] [pid 9862:tid 9910] [client 72.146.30.147:15974] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/blqjs.php"] [unique_id "admbUsQdWEjizEgEe2LsmwAAAU4"]
[Sat Apr 11 08:52:35.150434 2026] [:error] [pid 9860:tid 9866] [client 72.146.30.147:17702] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sk25_1.php"] [unique_id "admbU9XzQ4DMsdEOlQCS9gAAAQA"]
[Sat Apr 11 08:52:35.885652 2026] [:error] [pid 9862:tid 9900] [client 72.146.30.147:2701] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sk25_1.php"] [unique_id "admbU8QdWEjizEgEe2LsogAAAUQ"]
[Sat Apr 11 08:52:36.462670 2026] [:error] [pid 9860:tid 9877] [client 72.146.30.147:45360] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sk25_1.php"] [unique_id "admbVNXzQ4DMsdEOlQCS9wAAAQs"]
[Sat Apr 11 08:52:36.986636 2026] [:error] [pid 9954:tid 9963] [client 72.146.30.147:21451] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sk25_1.php"] [unique_id "admbVCCHpShicB0JKTLXIwAAAAY"]
[Sat Apr 11 08:52:37.732731 2026] [:error] [pid 9860:tid 9880] [client 72.146.30.147:2706] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fetch.php"] [unique_id "admbVdXzQ4DMsdEOlQCS-gAAAQ4"]
[Sat Apr 11 08:52:38.401770 2026] [:error] [pid 9954:tid 9968] [client 72.146.30.147:17681] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fetch.php"] [unique_id "admbViCHpShicB0JKTLXLQAAAAs"]
[Sat Apr 11 08:52:39.168898 2026] [:error] [pid 9954:tid 9971] [client 72.146.30.147:15957] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fetch.php"] [unique_id "admbVyCHpShicB0JKTLXNAAAAA4"]
[Sat Apr 11 08:52:40.336156 2026] [:error] [pid 9954:tid 9980] [client 72.146.30.147:22842] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fetch.php"] [unique_id "admbWCCHpShicB0JKTLXOwAAABc"]
[Sat Apr 11 08:52:41.288091 2026] [:error] [pid 9863:tid 9944] [client 72.146.30.147:42213] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "admbWWHClruQA-0uiPzvxAAAAZU"]
[Sat Apr 11 08:52:41.921660 2026] [:error] [pid 9862:tid 9918] [client 72.146.30.147:17717] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "admbWcQdWEjizEgEe2LsuQAAAVY"]
[Sat Apr 11 08:52:42.863965 2026] [:error] [pid 9862:tid 9912] [client 72.146.30.147:45356] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "admbWsQdWEjizEgEe2LswQAAAVA"]
[Sat Apr 11 08:52:43.496439 2026] [:error] [pid 9862:tid 9918] [client 72.146.30.147:42223] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "admbW8QdWEjizEgEe2LswwAAAVY"]
[Sat Apr 11 08:52:44.218979 2026] [:error] [pid 9954:tid 9972] [client 72.146.30.147:61032] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2nzyHnOkEg.php"] [unique_id "admbXCCHpShicB0JKTLXRgAAAA8"]
[Sat Apr 11 08:52:44.784748 2026] [:error] [pid 9860:tid 9881] [client 72.146.30.147:61054] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2nzyHnOkEg.php"] [unique_id "admbXNXzQ4DMsdEOlQCTBQAAAQ8"]
[Sat Apr 11 08:52:46.691498 2026] [:error] [pid 9862:tid 9914] [client 72.146.30.147:49408] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2nzyHnOkEg.php"] [unique_id "admbXsQdWEjizEgEe2Ls1gAAAVI"]
[Sat Apr 11 08:52:49.787595 2026] [:error] [pid 9954:tid 9965] [client 72.146.30.147:17225] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2nzyHnOkEg.php"] [unique_id "admbYSCHpShicB0JKTLXUQAAAAg"]
[Sat Apr 11 08:52:51.179797 2026] [:error] [pid 9862:tid 9903] [client 72.146.30.147:42188] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/oircv.php"] [unique_id "admbY8QdWEjizEgEe2Ls6AAAAUc"]
[Sat Apr 11 08:52:52.447444 2026] [:error] [pid 9860:tid 9883] [client 72.146.30.147:49448] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/oircv.php"] [unique_id "admbZNXzQ4DMsdEOlQCTGQAAARE"]
[Sat Apr 11 08:52:53.852645 2026] [:error] [pid 9860:tid 9873] [client 72.146.30.147:61022] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/oircv.php"] [unique_id "admbZdXzQ4DMsdEOlQCTIwAAAQc"]
[Sat Apr 11 08:52:54.819147 2026] [proxy_fcgi:error] [pid 9954:tid 9964] [client 72.146.30.147:22797] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 08:52:55.053923 2026] [proxy_fcgi:error] [pid 9954:tid 9963] [client 72.146.30.147:22797] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 08:52:55.304634 2026] [proxy_fcgi:error] [pid 9954:tid 9967] [client 72.146.30.147:22797] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 08:52:55.567297 2026] [proxy_fcgi:error] [pid 9954:tid 9977] [client 72.146.30.147:22797] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 08:52:55.799860 2026] [proxy_fcgi:error] [pid 9954:tid 9971] [client 72.146.30.147:22797] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 08:52:56.037721 2026] [proxy_fcgi:error] [pid 9954:tid 9965] [client 72.146.30.147:22797] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 08:52:56.275376 2026] [proxy_fcgi:error] [pid 9954:tid 9964] [client 72.146.30.147:22797] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 08:52:56.509422 2026] [proxy_fcgi:error] [pid 9954:tid 9963] [client 72.146.30.147:22797] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 08:52:56.742849 2026] [proxy_fcgi:error] [pid 9954:tid 9976] [client 72.146.30.147:22797] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 08:52:56.985728 2026] [proxy_fcgi:error] [pid 9954:tid 9966] [client 72.146.30.147:22797] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 08:52:57.222495 2026] [proxy_fcgi:error] [pid 9954:tid 9977] [client 72.146.30.147:22797] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 08:52:57.452044 2026] [:error] [pid 9954:tid 9979] [client 72.146.30.147:22797] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fyflv.php"] [unique_id "admbaSCHpShicB0JKTLXeAAAABY"]
[Sat Apr 11 08:52:58.169868 2026] [:error] [pid 9862:tid 9908] [client 72.146.30.147:42177] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fyflv.php"] [unique_id "admbasQdWEjizEgEe2Ls9QAAAUw"]
[Sat Apr 11 08:52:59.068837 2026] [:error] [pid 9954:tid 9978] [client 72.146.30.147:17252] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fyflv.php"] [unique_id "admbayCHpShicB0JKTLXggAAABU"]
[Sat Apr 11 08:52:59.764919 2026] [:error] [pid 9862:tid 9906] [client 72.146.30.147:22793] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fyflv.php"] [unique_id "admba8QdWEjizEgEe2Ls-AAAAUo"]
[Sat Apr 11 08:53:00.342785 2026] [:error] [pid 9863:tid 9928] [client 72.146.30.147:2693] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tymi.php"] [unique_id "admbbGHClruQA-0uiPzv_QAAAYU"]
[Sat Apr 11 08:53:01.258118 2026] [:error] [pid 9862:tid 9915] [client 72.146.30.147:15990] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tymi.php"] [unique_id "admbbcQdWEjizEgEe2Ls-wAAAVM"]
[Sat Apr 11 08:53:01.956426 2026] [:error] [pid 9954:tid 9980] [client 72.146.30.147:60164] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tymi.php"] [unique_id "admbbSCHpShicB0JKTLXmQAAABc"]
[Sat Apr 11 08:53:02.473734 2026] [:error] [pid 9860:tid 9879] [client 72.146.30.147:60198] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tymi.php"] [unique_id "admbbtXzQ4DMsdEOlQCTPAAAAQ0"]
[Sat Apr 11 08:53:03.097222 2026] [:error] [pid 9860:tid 9869] [client 72.146.30.147:21481] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sde.php"] [unique_id "admbb9XzQ4DMsdEOlQCTQwAAAQM"]
[Sat Apr 11 08:53:04.048825 2026] [:error] [pid 9860:tid 9888] [client 72.146.30.147:58411] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sde.php"] [unique_id "admbcNXzQ4DMsdEOlQCTSAAAARY"]
[Sat Apr 11 08:53:05.668076 2026] [:error] [pid 9954:tid 9962] [client 72.146.30.147:21449] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sde.php"] [unique_id "admbcSCHpShicB0JKTLXpgAAAAU"]
[Sat Apr 11 08:53:06.267794 2026] [:error] [pid 9954:tid 9971] [client 72.146.30.147:58421] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sde.php"] [unique_id "admbciCHpShicB0JKTLXpwAAAA4"]
[Sat Apr 11 08:53:06.930227 2026] [:error] [pid 9954:tid 9979] [client 72.146.30.147:17714] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wpb.php"] [unique_id "admbciCHpShicB0JKTLXqwAAABY"]
[Sat Apr 11 08:53:10.026697 2026] [:error] [pid 11397:tid 11406] [client 72.146.30.147:42239] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wpb.php"] [unique_id "admbdhbT92P038CGZ1X3xAAAAQU"]
[Sat Apr 11 08:53:10.701571 2026] [:error] [pid 11398:tid 11429] [client 72.146.30.147:21458] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wpb.php"] [unique_id "admbdlZwnV-c1dIvw1R4ugAAAUE"]
[Sat Apr 11 08:53:11.571716 2026] [:error] [pid 11399:tid 11462] [client 72.146.30.147:15991] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wpb.php"] [unique_id "admbd9aHvF2FBq_rdYVHVwAAAYc"]
[Sat Apr 11 08:53:12.189591 2026] [:error] [pid 11399:tid 11470] [client 72.146.30.147:17713] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Geforce.php"] [unique_id "admbeNaHvF2FBq_rdYVHXgAAAY8"]
[Sat Apr 11 08:53:13.279734 2026] [:error] [pid 11486:tid 11490] [client 72.146.30.147:61046] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Geforce.php"] [unique_id "admbeQsQ40bbATFzuxpV9AAAAAA"]
[Sat Apr 11 08:53:14.016006 2026] [:error] [pid 11397:tid 11410] [client 72.146.30.147:58375] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Geforce.php"] [unique_id "admbehbT92P038CGZ1X33AAAAQk"]
[Sat Apr 11 08:53:14.658349 2026] [:error] [pid 11486:tid 11499] [client 72.146.30.147:58413] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Geforce.php"] [unique_id "admbegsQ40bbATFzuxpV-QAAAAk"]
[Sat Apr 11 08:53:15.545369 2026] [:error] [pid 11399:tid 11456] [client 72.146.30.147:61013] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/9EaklzMysJ.php"] [unique_id "admbe9aHvF2FBq_rdYVHZQAAAYE"]
[Sat Apr 11 08:53:16.875699 2026] [:error] [pid 11399:tid 11460] [client 72.146.30.147:21408] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/9EaklzMysJ.php"] [unique_id "admbfNaHvF2FBq_rdYVHbAAAAYU"]
[Sat Apr 11 08:53:17.610311 2026] [:error] [pid 11397:tid 11422] [client 72.146.30.147:2707] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/9EaklzMysJ.php"] [unique_id "admbfRbT92P038CGZ1X36AAAARU"]
[Sat Apr 11 08:53:18.499771 2026] [:error] [pid 11397:tid 11407] [client 72.146.30.147:49443] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/9EaklzMysJ.php"] [unique_id "admbfhbT92P038CGZ1X37gAAAQY"]
[Sat Apr 11 08:53:19.316274 2026] [:error] [pid 11398:tid 11442] [client 72.146.30.147:61044] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wpxl.php"] [unique_id "admbf1ZwnV-c1dIvw1R40wAAAU4"]
[Sat Apr 11 08:53:20.011598 2026] [:error] [pid 11486:tid 11503] [client 72.146.30.147:17238] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wpxl.php"] [unique_id "admbgAsQ40bbATFzuxpV_QAAAA0"]
[Sat Apr 11 08:53:21.036285 2026] [:error] [pid 11486:tid 11512] [client 72.146.30.147:58403] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wpxl.php"] [unique_id "admbgQsQ40bbATFzuxpWAgAAABY"]
[Sat Apr 11 08:53:22.080999 2026] [:error] [pid 11398:tid 11445] [client 72.146.30.147:60184] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wpxl.php"] [unique_id "admbglZwnV-c1dIvw1R43gAAAVE"]
[Sat Apr 11 08:53:23.015029 2026] [:error] [pid 11397:tid 11410] [client 72.146.30.147:49442] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/s3FiyJ2WGCnF0p1default.php"] [unique_id "admbgxbT92P038CGZ1X3-AAAAQk"]
[Sat Apr 11 08:53:24.173381 2026] [:error] [pid 11486:tid 11502] [client 72.146.30.147:61047] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/s3FiyJ2WGCnF0p1default.php"] [unique_id "admbhAsQ40bbATFzuxpWDQAAAAw"]
[Sat Apr 11 08:53:25.088989 2026] [:error] [pid 11486:tid 11514] [client 72.146.30.147:58390] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/s3FiyJ2WGCnF0p1default.php"] [unique_id "admbhQsQ40bbATFzuxpWFQAAABg"]
[Sat Apr 11 08:53:26.466770 2026] [:error] [pid 11397:tid 11424] [client 72.146.30.147:17263] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/s3FiyJ2WGCnF0p1default.php"] [unique_id "admbhhbT92P038CGZ1X3_wAAARc"]
[Sat Apr 11 08:53:27.435757 2026] [:error] [pid 11486:tid 11506] [client 72.146.30.147:21478] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bfil.php"] [unique_id "admbhwsQ40bbATFzuxpWIQAAABA"]
[Sat Apr 11 08:53:28.948054 2026] [:error] [pid 11399:tid 11476] [client 72.146.30.147:21484] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bfil.php"] [unique_id "admbiNaHvF2FBq_rdYVHfwAAAZU"]
[Sat Apr 11 08:53:30.324132 2026] [:error] [pid 11486:tid 11491] [client 72.146.30.147:49457] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bfil.php"] [unique_id "admbigsQ40bbATFzuxpWKwAAAAE"]
[Sat Apr 11 08:53:32.478868 2026] [:error] [pid 11486:tid 11501] [client 72.146.30.147:45314] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bfil.php"] [unique_id "admbjAsQ40bbATFzuxpWOgAAAAs"]
[Sat Apr 11 08:53:34.601792 2026] [:error] [pid 11397:tid 11411] [client 72.146.30.147:45317] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lb.php"] [unique_id "admbjhbT92P038CGZ1X4EQAAAQo"]
[Sat Apr 11 08:53:36.311356 2026] [:error] [pid 11397:tid 11411] [client 72.146.30.147:15986] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lb.php"] [unique_id "admbkBbT92P038CGZ1X4HwAAAQo"]
[Sat Apr 11 08:53:37.563443 2026] [:error] [pid 11397:tid 11414] [client 72.146.30.147:60212] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lb.php"] [unique_id "admbkRbT92P038CGZ1X4JwAAAQ0"]
[Sat Apr 11 08:53:39.781335 2026] [:error] [pid 11397:tid 11410] [client 72.146.30.147:21489] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lb.php"] [unique_id "admbkxbT92P038CGZ1X4KAAAAQk"]
[Sat Apr 11 08:53:41.494336 2026] [:error] [pid 11399:tid 11474] [client 72.146.30.147:49447] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dx.php"] [unique_id "admbldaHvF2FBq_rdYVHqAAAAZM"]
[Sat Apr 11 08:53:42.594854 2026] [:error] [pid 11397:tid 11411] [client 72.146.30.147:2903] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dx.php"] [unique_id "admblhbT92P038CGZ1X4MgAAAQo"]
[Sat Apr 11 08:53:43.332762 2026] [:error] [pid 11398:tid 11448] [client 72.146.30.147:17689] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dx.php"] [unique_id "admbl1ZwnV-c1dIvw1R5CAAAAVQ"]
[Sat Apr 11 08:53:44.035314 2026] [:error] [pid 11486:tid 11504] [client 72.146.30.147:58383] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dx.php"] [unique_id "admbmAsQ40bbATFzuxpWZQAAAA4"]
[Sat Apr 11 08:53:45.365035 2026] [:error] [pid 11399:tid 11478] [client 72.146.30.147:45353] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/menu.php"] [unique_id "admbmdaHvF2FBq_rdYVHsgAAAZc"]
[Sat Apr 11 08:53:46.819999 2026] [:error] [pid 11397:tid 11424] [client 72.146.30.147:16745] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/menu.php"] [unique_id "admbmhbT92P038CGZ1X4OAAAARc"]
[Sat Apr 11 08:53:48.308757 2026] [:error] [pid 11398:tid 11451] [client 72.146.30.147:45319] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/menu.php"] [unique_id "admbnFZwnV-c1dIvw1R5FQAAAVc"]
[Sat Apr 11 08:53:49.167007 2026] [:error] [pid 11399:tid 11475] [client 72.146.30.147:15996] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/menu.php"] [unique_id "admbndaHvF2FBq_rdYVHvgAAAZQ"]
[Sat Apr 11 08:53:49.924652 2026] [:error] [pid 11399:tid 11462] [client 72.146.30.147:15951] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/p14rAeWytPdH5hZcscCFdefault.php"] [unique_id "admbndaHvF2FBq_rdYVHxQAAAYc"]
[Sat Apr 11 08:53:50.660589 2026] [:error] [pid 11486:tid 11495] [client 72.146.30.147:58417] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/p14rAeWytPdH5hZcscCFdefault.php"] [unique_id "admbngsQ40bbATFzuxpWfgAAAAU"]
[Sat Apr 11 08:53:51.195649 2026] [:error] [pid 11398:tid 11430] [client 72.146.30.147:16729] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/p14rAeWytPdH5hZcscCFdefault.php"] [unique_id "admbn1ZwnV-c1dIvw1R5HAAAAUI"]
[Sat Apr 11 08:53:52.027743 2026] [:error] [pid 11486:tid 11497] [client 72.146.30.147:49461] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/p14rAeWytPdH5hZcscCFdefault.php"] [unique_id "admboAsQ40bbATFzuxpWhQAAAAc"]
[Sat Apr 11 08:53:53.184211 2026] [:error] [pid 11486:tid 11507] [client 72.146.30.147:21464] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/iindv.php"] [unique_id "admboQsQ40bbATFzuxpWhwAAABE"]
[Sat Apr 11 08:53:54.164099 2026] [:error] [pid 11398:tid 11446] [client 72.146.30.147:16712] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/iindv.php"] [unique_id "admbolZwnV-c1dIvw1R5IQAAAVI"]
[Sat Apr 11 08:53:55.285328 2026] [:error] [pid 11398:tid 11448] [client 72.146.30.147:58387] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/iindv.php"] [unique_id "admbo1ZwnV-c1dIvw1R5JwAAAVQ"]
[Sat Apr 11 08:53:55.940071 2026] [:error] [pid 11398:tid 11439] [client 72.146.30.147:58402] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/iindv.php"] [unique_id "admbo1ZwnV-c1dIvw1R5KAAAAUs"]
[Sat Apr 11 08:53:56.615785 2026] [:error] [pid 11398:tid 11430] [client 72.146.30.147:49434] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/maintura.php"] [unique_id "admbpFZwnV-c1dIvw1R5KgAAAUI"]
[Sat Apr 11 08:53:57.531015 2026] [proxy_fcgi:error] [pid 11399:tid 11468] [client 72.146.30.147:2932] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 08:53:57.761630 2026] [proxy_fcgi:error] [pid 11399:tid 11469] [client 72.146.30.147:2932] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 08:53:58.064657 2026] [proxy_fcgi:error] [pid 11399:tid 11474] [client 72.146.30.147:2932] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 08:53:58.523397 2026] [proxy_fcgi:error] [pid 11399:tid 11460] [client 72.146.30.147:2932] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 08:53:58.755794 2026] [proxy_fcgi:error] [pid 11399:tid 11471] [client 72.146.30.147:2932] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 08:53:58.986982 2026] [proxy_fcgi:error] [pid 11399:tid 11455] [client 72.146.30.147:2932] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 08:53:59.270391 2026] [proxy_fcgi:error] [pid 11399:tid 11465] [client 72.146.30.147:2932] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 08:53:59.534447 2026] [proxy_fcgi:error] [pid 11399:tid 11479] [client 72.146.30.147:2932] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 08:53:59.766089 2026] [proxy_fcgi:error] [pid 11399:tid 11466] [client 72.146.30.147:2932] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 08:53:59.996874 2026] [proxy_fcgi:error] [pid 11399:tid 11470] [client 72.146.30.147:2932] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 08:54:00.365667 2026] [proxy_fcgi:error] [pid 11399:tid 11476] [client 72.146.30.147:2932] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 08:54:00.635005 2026] [:error] [pid 11399:tid 11463] [client 72.146.30.147:2932] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/byrgo.php"] [unique_id "admbqNaHvF2FBq_rdYVH8wAAAYg"]
[Sat Apr 11 08:54:01.214297 2026] [:error] [pid 11486:tid 11509] [client 72.146.30.147:49464] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/byrgo.php"] [unique_id "admbqQsQ40bbATFzuxpWvgAAABM"]
[Sat Apr 11 08:54:03.256504 2026] [:error] [pid 11486:tid 11514] [client 72.146.30.147:26068] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/byrgo.php"] [unique_id "admbqwsQ40bbATFzuxpWywAAABg"]
[Sat Apr 11 08:54:04.351355 2026] [:error] [pid 11399:tid 11463] [client 72.146.30.147:2663] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/byrgo.php"] [unique_id "admbrNaHvF2FBq_rdYVH_wAAAYg"]
[Sat Apr 11 08:54:05.777480 2026] [:error] [pid 11399:tid 11477] [client 72.146.30.147:2909] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zc-243.php"] [unique_id "admbrdaHvF2FBq_rdYVIBAAAAZY"]
[Sat Apr 11 08:54:06.496812 2026] [:error] [pid 11399:tid 11465] [client 72.146.30.147:42226] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zc-243.php"] [unique_id "admbrtaHvF2FBq_rdYVICgAAAYo"]
[Sat Apr 11 08:54:07.278573 2026] [:error] [pid 11486:tid 11492] [client 72.146.30.147:58490] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zc-243.php"] [unique_id "admbrwsQ40bbATFzuxpW7gAAAAI"]
[Sat Apr 11 08:54:07.927444 2026] [:error] [pid 11486:tid 11500] [client 72.146.30.147:2904] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zc-243.php"] [unique_id "admbrwsQ40bbATFzuxpW8wAAAAo"]
[Sat Apr 11 08:54:08.999560 2026] [:error] [pid 11399:tid 11465] [client 72.146.30.147:49468] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/pm90apbv3v5fvgkbguyiCdefault.php"] [unique_id "admbsNaHvF2FBq_rdYVIFwAAAYo"]
[Sat Apr 11 08:54:09.641898 2026] [:error] [pid 11486:tid 11495] [client 72.146.30.147:61044] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/pm90apbv3v5fvgkbguyiCdefault.php"] [unique_id "admbsQsQ40bbATFzuxpW-gAAAAU"]
[Sat Apr 11 08:54:10.492549 2026] [:error] [pid 11399:tid 11475] [client 72.146.30.147:2899] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/pm90apbv3v5fvgkbguyiCdefault.php"] [unique_id "admbstaHvF2FBq_rdYVIHwAAAZQ"]
[Sat Apr 11 08:54:11.390149 2026] [:error] [pid 11486:tid 11513] [client 72.146.30.147:2656] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/pm90apbv3v5fvgkbguyiCdefault.php"] [unique_id "admbswsQ40bbATFzuxpXCgAAABc"]
[Sat Apr 11 08:54:12.112522 2026] [:error] [pid 11486:tid 11512] [client 72.146.30.147:17668] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp.php"] [unique_id "admbtAsQ40bbATFzuxpXDwAAABY"]
[Sat Apr 11 08:54:13.077213 2026] [:error] [pid 11399:tid 11476] [client 72.146.30.147:15950] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp.php"] [unique_id "admbtdaHvF2FBq_rdYVIKQAAAZU"]
[Sat Apr 11 08:54:13.794652 2026] [:error] [pid 11398:tid 11436] [client 72.146.30.147:61033] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp.php"] [unique_id "admbtVZwnV-c1dIvw1R5SAAAAUg"]
[Sat Apr 11 08:54:14.812331 2026] [:error] [pid 11486:tid 11506] [client 72.146.30.147:47566] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp.php"] [unique_id "admbtgsQ40bbATFzuxpXHAAAABA"]
[Sat Apr 11 08:54:15.459167 2026] [:error] [pid 11486:tid 11504] [client 72.146.30.147:58369] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/CDX1.php"] [unique_id "admbtwsQ40bbATFzuxpXIAAAAA4"]
[Sat Apr 11 08:54:16.257179 2026] [:error] [pid 11398:tid 11435] [client 72.146.30.147:61029] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/CDX1.php"] [unique_id "admbuFZwnV-c1dIvw1R5VAAAAUc"]
[Sat Apr 11 08:54:16.964497 2026] [:error] [pid 11399:tid 11465] [client 72.146.30.147:58405] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/CDX1.php"] [unique_id "admbuNaHvF2FBq_rdYVIOwAAAYo"]
[Sat Apr 11 08:54:17.891475 2026] [:error] [pid 11486:tid 11514] [client 72.146.30.147:26061] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/CDX1.php"] [unique_id "admbuQsQ40bbATFzuxpXKwAAABg"]
[Sat Apr 11 08:54:18.874853 2026] [:error] [pid 11486:tid 11504] [client 72.146.30.147:21376] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "admbugsQ40bbATFzuxpXMQAAAA4"]
[Sat Apr 11 08:54:19.808734 2026] [:error] [pid 11399:tid 11460] [client 72.146.30.147:42198] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "admbu9aHvF2FBq_rdYVIQAAAAYU"]
[Sat Apr 11 08:54:20.546046 2026] [:error] [pid 11486:tid 11498] [client 72.146.30.147:61031] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "admbvAsQ40bbATFzuxpXOwAAAAg"]
[Sat Apr 11 08:54:21.565839 2026] [:error] [pid 11399:tid 11456] [client 72.146.30.147:26078] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "admbvdaHvF2FBq_rdYVIRwAAAYE"]
[Sat Apr 11 08:54:22.393746 2026] [:error] [pid 11397:tid 11401] [client 72.146.30.147:61045] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "admbvhbT92P038CGZ1X4cwAAAQA"]
[Sat Apr 11 08:54:23.025616 2026] [:error] [pid 11399:tid 11477] [client 72.146.30.147:2682] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "admbv9aHvF2FBq_rdYVISQAAAZY"]
[Sat Apr 11 08:54:24.170605 2026] [:error] [pid 11399:tid 11456] [client 72.146.30.147:2905] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "admbwNaHvF2FBq_rdYVIVgAAAYE"]
[Sat Apr 11 08:54:25.319719 2026] [:error] [pid 11486:tid 11495] [client 72.146.30.147:61041] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "admbwQsQ40bbATFzuxpXTgAAAAU"]
[Sat Apr 11 08:54:26.062180 2026] [:error] [pid 11486:tid 11498] [client 72.146.30.147:61012] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aligk.php"] [unique_id "admbwgsQ40bbATFzuxpXVAAAAAg"]
[Sat Apr 11 08:54:26.737968 2026] [:error] [pid 11397:tid 11417] [client 72.146.30.147:17682] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aligk.php"] [unique_id "admbwhbT92P038CGZ1X4fwAAARA"]
[Sat Apr 11 08:54:27.571916 2026] [:error] [pid 11399:tid 11455] [client 72.146.30.147:44059] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aligk.php"] [unique_id "admbw9aHvF2FBq_rdYVIaAAAAYA"]
[Sat Apr 11 08:54:28.205771 2026] [:error] [pid 11486:tid 11501] [client 72.146.30.147:42185] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aligk.php"] [unique_id "admbxAsQ40bbATFzuxpXXgAAAAs"]
[Sat Apr 11 08:54:32.785525 2026] [:error] [pid 11486:tid 11507] [client 72.146.30.147:58488] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file61.php"] [unique_id "admbyAsQ40bbATFzuxpXgwAAABE"]
[Sat Apr 11 08:54:33.405668 2026] [:error] [pid 11399:tid 11478] [client 72.146.30.147:61010] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file61.php"] [unique_id "admbydaHvF2FBq_rdYVIhgAAAZc"]
[Sat Apr 11 08:54:34.694728 2026] [:error] [pid 11399:tid 11459] [client 72.146.30.147:58475] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file61.php"] [unique_id "admbytaHvF2FBq_rdYVIigAAAYQ"]
[Sat Apr 11 08:54:36.080860 2026] [:error] [pid 11398:tid 11447] [client 72.146.30.147:17999] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file61.php"] [unique_id "admbzFZwnV-c1dIvw1R5bQAAAVM"]
[Sat Apr 11 08:54:36.873123 2026] [:error] [pid 11486:tid 11509] [client 72.146.30.147:16718] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xwx1.php"] [unique_id "admbzAsQ40bbATFzuxpXmQAAABM"]
[Sat Apr 11 08:54:37.761219 2026] [:error] [pid 11398:tid 11440] [client 72.146.30.147:58433] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xwx1.php"] [unique_id "admbzVZwnV-c1dIvw1R5egAAAUw"]
[Sat Apr 11 08:54:39.016606 2026] [:error] [pid 11486:tid 11490] [client 72.146.30.147:26053] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xwx1.php"] [unique_id "admbzwsQ40bbATFzuxpXpgAAAAA"]
[Sat Apr 11 08:54:40.411632 2026] [:error] [pid 11486:tid 11512] [client 72.146.30.147:2864] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xwx1.php"] [unique_id "admb0AsQ40bbATFzuxpXqwAAABY"]
[Sat Apr 11 08:54:41.334940 2026] [:error] [pid 11399:tid 11458] [client 72.146.30.147:17993] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tx79.php"] [unique_id "admb0daHvF2FBq_rdYVIpAAAAYM"]
[Sat Apr 11 08:54:42.153430 2026] [:error] [pid 11397:tid 11403] [client 72.146.30.147:17218] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tx79.php"] [unique_id "admb0hbT92P038CGZ1X4mwAAAQI"]
[Sat Apr 11 08:54:43.863204 2026] [:error] [pid 11399:tid 11479] [client 72.146.30.147:42227] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tx79.php"] [unique_id "admb09aHvF2FBq_rdYVIuAAAAZg"]
[Sat Apr 11 08:54:44.795876 2026] [:error] [pid 11486:tid 11494] [client 72.146.30.147:16708] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tx79.php"] [unique_id "admb1AsQ40bbATFzuxpXrgAAAAQ"]
[Sat Apr 11 08:54:46.071986 2026] [:error] [pid 11398:tid 11438] [client 72.146.30.147:16735] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/CDX2.php"] [unique_id "admb1lZwnV-c1dIvw1R5iwAAAUo"]
[Sat Apr 11 08:54:47.124041 2026] [:error] [pid 11486:tid 11502] [client 72.146.30.147:17687] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/CDX2.php"] [unique_id "admb1wsQ40bbATFzuxpXsQAAAAw"]
[Sat Apr 11 08:54:48.139895 2026] [:error] [pid 11399:tid 11464] [client 72.146.30.147:2830] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/CDX2.php"] [unique_id "admb2NaHvF2FBq_rdYVIygAAAYk"]
[Sat Apr 11 08:54:49.338891 2026] [:error] [pid 11398:tid 11440] [client 72.146.30.147:2827] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/CDX2.php"] [unique_id "admb2VZwnV-c1dIvw1R5lAAAAUw"]
[Sat Apr 11 08:54:51.181425 2026] [:error] [pid 11486:tid 11497] [client 72.146.30.147:15968] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/666.php"] [unique_id "admb2wsQ40bbATFzuxpXuAAAAAc"]
[Sat Apr 11 08:54:52.282009 2026] [:error] [pid 11486:tid 11498] [client 72.146.30.147:21480] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/666.php"] [unique_id "admb3AsQ40bbATFzuxpXvQAAAAg"]
[Sat Apr 11 08:54:53.383443 2026] [:error] [pid 11486:tid 11502] [client 72.146.30.147:18041] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/666.php"] [unique_id "admb3QsQ40bbATFzuxpXwAAAAAw"]
[Sat Apr 11 08:54:54.829720 2026] [:error] [pid 11486:tid 11497] [client 72.146.30.147:61035] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/666.php"] [unique_id "admb3gsQ40bbATFzuxpXyAAAAAc"]
[Sat Apr 11 08:54:55.830230 2026] [:error] [pid 11399:tid 11470] [client 72.146.30.147:2679] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wtiiy.php"] [unique_id "admb39aHvF2FBq_rdYVI5QAAAY8"]
[Sat Apr 11 08:54:56.850873 2026] [:error] [pid 11486:tid 11495] [client 72.146.30.147:17690] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wtiiy.php"] [unique_id "admb4AsQ40bbATFzuxpX0wAAAAU"]
[Sat Apr 11 08:54:57.557629 2026] [:error] [pid 11399:tid 11472] [client 72.146.30.147:61008] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wtiiy.php"] [unique_id "admb4daHvF2FBq_rdYVI6gAAAZE"]
[Sat Apr 11 08:54:59.096276 2026] [:error] [pid 11398:tid 11436] [client 72.146.30.147:18033] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wtiiy.php"] [unique_id "admb41ZwnV-c1dIvw1R5sAAAAUg"]
[Sat Apr 11 08:55:00.176300 2026] [proxy_fcgi:error] [pid 11397:tid 11407] [client 72.146.30.147:2921] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 08:55:00.429483 2026] [proxy_fcgi:error] [pid 11397:tid 11415] [client 72.146.30.147:2921] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 08:55:00.688290 2026] [proxy_fcgi:error] [pid 11397:tid 11405] [client 72.146.30.147:2921] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 08:55:01.155907 2026] [proxy_fcgi:error] [pid 11397:tid 11412] [client 72.146.30.147:2921] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 08:55:01.389740 2026] [proxy_fcgi:error] [pid 11397:tid 11410] [client 72.146.30.147:2921] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 08:55:01.633789 2026] [proxy_fcgi:error] [pid 11397:tid 11406] [client 72.146.30.147:2921] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 08:55:01.867167 2026] [proxy_fcgi:error] [pid 11397:tid 11420] [client 72.146.30.147:2921] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 08:55:02.156804 2026] [proxy_fcgi:error] [pid 11397:tid 11402] [client 72.146.30.147:2921] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 08:55:02.421738 2026] [proxy_fcgi:error] [pid 11397:tid 11407] [client 72.146.30.147:2921] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 08:55:02.655968 2026] [proxy_fcgi:error] [pid 11397:tid 11424] [client 72.146.30.147:2921] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 08:55:02.914997 2026] [:error] [pid 11397:tid 11403] [client 72.146.30.147:2921] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/classwithtostring.php"] [unique_id "admb5hbT92P038CGZ1X44AAAAQI"]
[Sat Apr 11 08:55:03.465836 2026] [:error] [pid 11398:tid 11450] [client 72.146.30.147:15978] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/classwithtostring.php"] [unique_id "admb51ZwnV-c1dIvw1R5vgAAAVY"]
[Sat Apr 11 08:55:04.160611 2026] [:error] [pid 11486:tid 11502] [client 72.146.30.147:58437] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/classwithtostring.php"] [unique_id "admb6AsQ40bbATFzuxpX5QAAAAw"]
[Sat Apr 11 08:55:04.933833 2026] [:error] [pid 11398:tid 11445] [client 72.146.30.147:61004] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/classwithtostring.php"] [unique_id "admb6FZwnV-c1dIvw1R5wQAAAVE"]
[Sat Apr 11 08:55:05.773385 2026] [:error] [pid 11397:tid 11417] [client 72.146.30.147:2636] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ta0ol.php"] [unique_id "admb6RbT92P038CGZ1X45AAAARA"]
[Sat Apr 11 08:55:06.703714 2026] [:error] [pid 11399:tid 11457] [client 72.146.30.147:26063] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ta0ol.php"] [unique_id "admb6taHvF2FBq_rdYVI_wAAAYI"]
[Sat Apr 11 08:55:07.346608 2026] [:error] [pid 11399:tid 11458] [client 72.146.30.147:58491] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ta0ol.php"] [unique_id "admb69aHvF2FBq_rdYVJAAAAAYM"]
[Sat Apr 11 08:55:08.138184 2026] [:error] [pid 11486:tid 11494] [client 72.146.30.147:18006] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ta0ol.php"] [unique_id "admb7AsQ40bbATFzuxpYAwAAAAQ"]
[Sat Apr 11 08:55:08.675277 2026] [:error] [pid 11399:tid 11461] [client 72.146.30.147:2875] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-png.php"] [unique_id "admb7NaHvF2FBq_rdYVJAQAAAYY"]
[Sat Apr 11 08:55:09.388267 2026] [:error] [pid 11398:tid 11449] [client 72.146.30.147:42221] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-png.php"] [unique_id "admb7VZwnV-c1dIvw1R5ygAAAVU"]
[Sat Apr 11 08:55:09.940329 2026] [:error] [pid 11398:tid 11434] [client 72.146.30.147:16765] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-png.php"] [unique_id "admb7VZwnV-c1dIvw1R5zQAAAUY"]
[Sat Apr 11 08:55:10.506293 2026] [:error] [pid 11486:tid 11492] [client 72.146.30.147:44043] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-png.php"] [unique_id "admb7gsQ40bbATFzuxpYFAAAAAI"]
[Sat Apr 11 08:55:11.141291 2026] [:error] [pid 11486:tid 11512] [client 72.146.30.147:17711] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tfm.php"] [unique_id "admb7wsQ40bbATFzuxpYFwAAABY"]
[Sat Apr 11 08:55:11.820156 2026] [:error] [pid 11398:tid 11435] [client 72.146.30.147:58436] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tfm.php"] [unique_id "admb71ZwnV-c1dIvw1R50gAAAUc"]
[Sat Apr 11 08:55:12.432186 2026] [:error] [pid 11486:tid 11490] [client 72.146.30.147:16716] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tfm.php"] [unique_id "admb8AsQ40bbATFzuxpYIQAAAAA"]
[Sat Apr 11 08:55:13.409735 2026] [:error] [pid 11399:tid 11458] [client 72.146.30.147:16714] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tfm.php"] [unique_id "admb8daHvF2FBq_rdYVJDAAAAYM"]
[Sat Apr 11 08:55:14.046806 2026] [:error] [pid 11486:tid 11503] [client 72.146.30.147:51995] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a5.php"] [unique_id "admb8gsQ40bbATFzuxpYKQAAAA0"]
[Sat Apr 11 08:55:14.722731 2026] [:error] [pid 11399:tid 11476] [client 72.146.30.147:21376] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a5.php"] [unique_id "admb8taHvF2FBq_rdYVJEgAAAZU"]
[Sat Apr 11 08:55:15.658882 2026] [:error] [pid 11486:tid 11507] [client 72.146.30.147:2836] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a5.php"] [unique_id "admb8wsQ40bbATFzuxpYLQAAABE"]
[Sat Apr 11 08:55:16.305200 2026] [:error] [pid 11397:tid 11421] [client 72.146.30.147:58480] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a5.php"] [unique_id "admb9BbT92P038CGZ1X48QAAARQ"]
[Sat Apr 11 08:55:16.951739 2026] [:error] [pid 11486:tid 11490] [client 72.146.30.147:2680] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kj.php"] [unique_id "admb9AsQ40bbATFzuxpYLwAAAAA"]
[Sat Apr 11 08:55:17.933958 2026] [:error] [pid 11399:tid 11474] [client 72.146.30.147:2683] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kj.php"] [unique_id "admb9daHvF2FBq_rdYVJIQAAAZM"]
[Sat Apr 11 08:55:19.244562 2026] [:error] [pid 11397:tid 11419] [client 72.146.30.147:2667] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kj.php"] [unique_id "admb9xbT92P038CGZ1X4_wAAARI"]
[Sat Apr 11 08:55:19.857626 2026] [:error] [pid 11397:tid 11411] [client 72.146.30.147:42191] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kj.php"] [unique_id "admb9xbT92P038CGZ1X5AwAAAQo"]
[Sat Apr 11 08:55:20.738109 2026] [:error] [pid 11399:tid 11476] [client 72.146.30.147:2918] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a7.php"] [unique_id "admb-NaHvF2FBq_rdYVJKAAAAZU"]
[Sat Apr 11 08:55:21.517925 2026] [:error] [pid 11397:tid 11422] [client 72.146.30.147:17277] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a7.php"] [unique_id "admb-RbT92P038CGZ1X5CgAAARU"]
[Sat Apr 11 08:55:22.304425 2026] [:error] [pid 11486:tid 11503] [client 72.146.30.147:26057] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a7.php"] [unique_id "admb-gsQ40bbATFzuxpYNwAAAA0"]
[Sat Apr 11 08:55:23.050624 2026] [:error] [pid 11399:tid 11456] [client 72.146.30.147:61039] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a7.php"] [unique_id "admb-9aHvF2FBq_rdYVJMAAAAYE"]
[Sat Apr 11 08:55:23.745586 2026] [:error] [pid 11398:tid 11433] [client 72.146.30.147:2901] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bgymj.php"] [unique_id "admb-1ZwnV-c1dIvw1R54wAAAUU"]
[Sat Apr 11 08:55:24.446009 2026] [:error] [pid 11486:tid 11507] [client 72.146.30.147:58476] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bgymj.php"] [unique_id "admb_AsQ40bbATFzuxpYQQAAABE"]
[Sat Apr 11 08:55:25.329070 2026] [:error] [pid 11399:tid 11476] [client 72.146.30.147:15984] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bgymj.php"] [unique_id "admb_daHvF2FBq_rdYVJNAAAAZU"]
[Sat Apr 11 08:55:26.101932 2026] [:error] [pid 11486:tid 11499] [client 72.146.30.147:42232] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bgymj.php"] [unique_id "admb_gsQ40bbATFzuxpYTgAAAAk"]
[Sat Apr 11 08:55:26.913784 2026] [:error] [pid 11398:tid 11451] [client 72.146.30.147:15960] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lib.php"] [unique_id "admb_lZwnV-c1dIvw1R55QAAAVc"]
[Sat Apr 11 08:55:27.652317 2026] [:error] [pid 11397:tid 11404] [client 72.146.30.147:15995] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lib.php"] [unique_id "admb_xbT92P038CGZ1X5FwAAAQM"]
[Sat Apr 11 08:55:28.379347 2026] [:error] [pid 11398:tid 11450] [client 72.146.30.147:17989] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lib.php"] [unique_id "admcAFZwnV-c1dIvw1R56AAAAVY"]
[Sat Apr 11 08:55:29.027472 2026] [:error] [pid 11399:tid 11458] [client 72.146.30.147:58434] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lib.php"] [unique_id "admcAdaHvF2FBq_rdYVJOQAAAYM"]
[Sat Apr 11 08:55:29.881908 2026] [:error] [pid 11399:tid 11461] [client 72.146.30.147:44090] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bolt.php"] [unique_id "admcAdaHvF2FBq_rdYVJPQAAAYY"]
[Sat Apr 11 08:55:30.393779 2026] [:error] [pid 11398:tid 11449] [client 72.146.30.147:17220] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bolt.php"] [unique_id "admcAlZwnV-c1dIvw1R57QAAAVU"]
[Sat Apr 11 08:55:31.209157 2026] [:error] [pid 11397:tid 11407] [client 72.146.30.147:15939] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bolt.php"] [unique_id "admcAxbT92P038CGZ1X5IgAAAQY"]
[Sat Apr 11 08:55:31.953472 2026] [:error] [pid 11398:tid 11432] [client 72.146.30.147:17698] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bolt.php"] [unique_id "admcA1ZwnV-c1dIvw1R58AAAAUQ"]
[Sat Apr 11 08:55:32.801827 2026] [:error] [pid 11398:tid 11436] [client 72.146.30.147:58427] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file61.php"] [unique_id "admcBFZwnV-c1dIvw1R5-AAAAUg"]
[Sat Apr 11 08:55:34.135900 2026] [:error] [pid 11399:tid 11463] [client 72.146.30.147:2907] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file61.php"] [unique_id "admcBtaHvF2FBq_rdYVJSgAAAYg"]
[Sat Apr 11 08:55:34.824771 2026] [:error] [pid 11486:tid 11490] [client 72.146.30.147:42184] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file61.php"] [unique_id "admcBgsQ40bbATFzuxpYcwAAAAA"]
[Sat Apr 11 08:55:35.850278 2026] [:error] [pid 11486:tid 11490] [client 72.146.30.147:58486] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file61.php"] [unique_id "admcBwsQ40bbATFzuxpYtAAAAAA"]
[Sat Apr 11 08:55:36.814745 2026] [:error] [pid 11398:tid 11441] [client 72.146.30.147:2940] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/uuu.php"] [unique_id "admcCFZwnV-c1dIvw1R6GQAAAU0"]
[Sat Apr 11 08:55:37.630201 2026] [:error] [pid 11399:tid 11469] [client 72.146.30.147:45329] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/uuu.php"] [unique_id "admcCdaHvF2FBq_rdYVJWgAAAY4"]
[Sat Apr 11 08:55:39.997796 2026] [:error] [pid 11398:tid 11430] [client 72.146.30.147:2913] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/uuu.php"] [unique_id "admcC1ZwnV-c1dIvw1R6MwAAAUI"]
[Sat Apr 11 08:55:42.148314 2026] [:error] [pid 11399:tid 11455] [client 72.146.30.147:2637] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/uuu.php"] [unique_id "admcDtaHvF2FBq_rdYVJbwAAAYA"]
[Sat Apr 11 08:55:43.580828 2026] [:error] [pid 11399:tid 11472] [client 72.146.30.147:42194] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gptsh.php"] [unique_id "admcD9aHvF2FBq_rdYVJdwAAAZE"]
[Sat Apr 11 08:55:45.099636 2026] [:error] [pid 11399:tid 11465] [client 72.146.30.147:2883] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gptsh.php"] [unique_id "admcEdaHvF2FBq_rdYVJfQAAAYo"]
[Sat Apr 11 08:55:46.492344 2026] [:error] [pid 11399:tid 11459] [client 72.146.30.147:60198] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gptsh.php"] [unique_id "admcEtaHvF2FBq_rdYVJggAAAYQ"]
[Sat Apr 11 08:55:47.921809 2026] [:error] [pid 11486:tid 11510] [client 72.146.30.147:17667] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gptsh.php"] [unique_id "admcEwsQ40bbATFzuxpZBAAAABQ"]
[Sat Apr 11 08:55:49.238675 2026] [:error] [pid 11486:tid 11512] [client 72.146.30.147:16743] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "admcFQsQ40bbATFzuxpZDgAAABY"]
[Sat Apr 11 08:55:50.057700 2026] [:error] [pid 11397:tid 11422] [client 72.146.30.147:61023] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "admcFhbT92P038CGZ1X5gwAAARU"]
[Sat Apr 11 08:55:50.749636 2026] [:error] [pid 11486:tid 11510] [client 72.146.30.147:2896] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "admcFgsQ40bbATFzuxpZFwAAABQ"]
[Sat Apr 11 08:55:51.589003 2026] [:error] [pid 11486:tid 11511] [client 72.146.30.147:51973] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "admcFwsQ40bbATFzuxpZHAAAABU"]
[Sat Apr 11 08:55:52.165052 2026] [:error] [pid 11399:tid 11466] [client 72.146.30.147:15989] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sid3.php"] [unique_id "admcGNaHvF2FBq_rdYVJmwAAAYs"]
[Sat Apr 11 08:55:52.880597 2026] [:error] [pid 11399:tid 11471] [client 72.146.30.147:44067] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sid3.php"] [unique_id "admcGNaHvF2FBq_rdYVJoAAAAZA"]
[Sat Apr 11 08:55:53.913407 2026] [:error] [pid 11399:tid 11460] [client 72.146.30.147:51992] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sid3.php"] [unique_id "admcGdaHvF2FBq_rdYVJowAAAYU"]
[Sat Apr 11 08:55:54.814219 2026] [:error] [pid 11397:tid 11413] [client 72.146.30.147:2928] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sid3.php"] [unique_id "admcGhbT92P038CGZ1X5kQAAAQw"]
[Sat Apr 11 08:55:55.491726 2026] [:error] [pid 11397:tid 11407] [client 72.146.30.147:2624] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "admcGxbT92P038CGZ1X5kwAAAQY"]
[Sat Apr 11 08:55:56.322122 2026] [:error] [pid 11398:tid 11450] [client 72.146.30.147:2934] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "admcHFZwnV-c1dIvw1R6YgAAAVY"]
[Sat Apr 11 08:55:56.933379 2026] [:error] [pid 11486:tid 11498] [client 72.146.30.147:2943] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "admcHAsQ40bbATFzuxpZKwAAAAg"]
[Sat Apr 11 08:55:57.516175 2026] [:error] [pid 11486:tid 11491] [client 72.146.30.147:45370] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "admcHQsQ40bbATFzuxpZMgAAAAE"]
[Sat Apr 11 08:55:58.338325 2026] [:error] [pid 11486:tid 11496] [client 72.146.30.147:49412] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Cap.php"] [unique_id "admcHgsQ40bbATFzuxpZOAAAAAY"]
[Sat Apr 11 08:55:59.750322 2026] [:error] [pid 11399:tid 11474] [client 72.146.30.147:17985] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Cap.php"] [unique_id "admcH9aHvF2FBq_rdYVJtwAAAZM"]
[Sat Apr 11 08:56:01.052835 2026] [:error] [pid 11399:tid 11459] [client 72.146.30.147:2669] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Cap.php"] [unique_id "admcIdaHvF2FBq_rdYVJuwAAAYQ"]
[Sat Apr 11 08:56:01.945083 2026] [:error] [pid 11399:tid 11476] [client 72.146.30.147:44036] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Cap.php"] [unique_id "admcIdaHvF2FBq_rdYVJwAAAAZU"]
[Sat Apr 11 08:56:02.636616 2026] [proxy_fcgi:error] [pid 11486:tid 11497] [client 72.146.30.147:61030] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 08:56:02.872448 2026] [proxy_fcgi:error] [pid 11486:tid 11504] [client 72.146.30.147:61030] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 08:56:03.105331 2026] [proxy_fcgi:error] [pid 11486:tid 11501] [client 72.146.30.147:61030] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 08:56:03.423468 2026] [proxy_fcgi:error] [pid 11486:tid 11508] [client 72.146.30.147:61030] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 08:56:03.689008 2026] [proxy_fcgi:error] [pid 11486:tid 11503] [client 72.146.30.147:61030] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 08:56:03.979196 2026] [proxy_fcgi:error] [pid 11486:tid 11495] [client 72.146.30.147:61030] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 08:56:04.212010 2026] [proxy_fcgi:error] [pid 11486:tid 11490] [client 72.146.30.147:61030] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 08:56:04.446336 2026] [proxy_fcgi:error] [pid 11486:tid 11498] [client 72.146.30.147:61030] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 08:56:04.797767 2026] [proxy_fcgi:error] [pid 11486:tid 11499] [client 72.146.30.147:61030] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 08:56:05.033376 2026] [proxy_fcgi:error] [pid 11486:tid 11491] [client 72.146.30.147:61030] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 08:56:05.373138 2026] [proxy_fcgi:error] [pid 11486:tid 11505] [client 72.146.30.147:61030] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 08:56:05.604879 2026] [:error] [pid 11486:tid 11511] [client 72.146.30.147:61030] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rithin.php"] [unique_id "admcJQsQ40bbATFzuxpZZgAAABU"]
[Sat Apr 11 08:56:06.231056 2026] [:error] [pid 11486:tid 11495] [client 72.146.30.147:45316] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rithin.php"] [unique_id "admcJgsQ40bbATFzuxpZZwAAAAU"]
[Sat Apr 11 08:56:06.840403 2026] [:error] [pid 11486:tid 11490] [client 72.146.30.147:28568] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rithin.php"] [unique_id "admcJgsQ40bbATFzuxpZaQAAAAA"]
[Sat Apr 11 08:56:07.409059 2026] [:error] [pid 11486:tid 11508] [client 72.146.30.147:15943] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rithin.php"] [unique_id "admcJwsQ40bbATFzuxpZcAAAABI"]
[Sat Apr 11 08:56:08.118018 2026] [:error] [pid 11486:tid 11513] [client 72.146.30.147:16731] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a4.php"] [unique_id "admcKAsQ40bbATFzuxpZdAAAABc"]
[Sat Apr 11 08:56:08.962614 2026] [:error] [pid 11486:tid 11497] [client 72.146.30.147:58473] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a4.php"] [unique_id "admcKAsQ40bbATFzuxpZfQAAAAc"]
[Sat Apr 11 08:56:09.781035 2026] [:error] [pid 11399:tid 11459] [client 72.146.30.147:58481] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a4.php"] [unique_id "admcKdaHvF2FBq_rdYVJ2AAAAYQ"]
[Sat Apr 11 08:56:10.791442 2026] [:error] [pid 11486:tid 11497] [client 72.146.30.147:49450] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a4.php"] [unique_id "admcKgsQ40bbATFzuxpZhQAAAAc"]
[Sat Apr 11 08:56:14.099880 2026] [:error] [pid 12949:tid 12964] [client 72.146.30.147:42190] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jlex.php"] [unique_id "admcLvuFR9dlT2JS6NkyOAAAAQs"]
[Sat Apr 11 08:56:14.762180 2026] [:error] [pid 13046:tid 13048] [client 72.146.30.147:2914] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jlex.php"] [unique_id "admcLou9_W3PDEP0A3i8eQAAAAA"]
[Sat Apr 11 08:56:15.705930 2026] [:error] [pid 12949:tid 12965] [client 72.146.30.147:42215] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jlex.php"] [unique_id "admcL_uFR9dlT2JS6NkyWAAAAQw"]
[Sat Apr 11 08:56:17.172825 2026] [:error] [pid 12949:tid 12957] [client 72.146.30.147:26110] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jlex.php"] [unique_id "admcMfuFR9dlT2JS6NkyZwAAAQQ"]
[Sat Apr 11 08:56:18.213324 2026] [:error] [pid 13046:tid 13072] [client 72.146.30.147:58416] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xsas.php"] [unique_id "admcMou9_W3PDEP0A3i8igAAABg"]
[Sat Apr 11 08:56:19.056629 2026] [:error] [pid 13046:tid 13063] [client 72.146.30.147:49419] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xsas.php"] [unique_id "admcM4u9_W3PDEP0A3i8lAAAAA8"]
[Sat Apr 11 08:56:19.848325 2026] [:error] [pid 12949:tid 12963] [client 72.146.30.147:16746] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xsas.php"] [unique_id "admcM_uFR9dlT2JS6NkydgAAAQo"]
[Sat Apr 11 08:56:20.349347 2026] [:error] [pid 12951:tid 13024] [client 72.146.30.147:18018] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xsas.php"] [unique_id "admcNHfRvDJ1rwwXKETT8AAAAY4"]
[Sat Apr 11 08:56:21.213936 2026] [:error] [pid 12950:tid 12981] [client 72.146.30.147:47603] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp/jp.php"] [unique_id "admcNS0QkAbEE1aMtbSJTgAAAUE"]
[Sat Apr 11 08:56:21.920968 2026] [:error] [pid 13046:tid 13060] [client 72.146.30.147:42237] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp/jp.php"] [unique_id "admcNYu9_W3PDEP0A3i8pAAAAAw"]
[Sat Apr 11 08:56:22.971733 2026] [:error] [pid 12949:tid 12953] [client 72.146.30.147:60998] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp/jp.php"] [unique_id "admcNvuFR9dlT2JS6NkyhQAAAQA"]
[Sat Apr 11 08:56:23.504968 2026] [:error] [pid 12950:tid 12985] [client 72.146.30.147:26076] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp/jp.php"] [unique_id "admcNy0QkAbEE1aMtbSJTwAAAUU"]
[Sat Apr 11 08:56:24.207810 2026] [:error] [pid 13046:tid 13062] [client 72.146.30.147:2845] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/8573.php"] [unique_id "admcOIu9_W3PDEP0A3i8vgAAAA4"]
[Sat Apr 11 08:56:24.939488 2026] [:error] [pid 13046:tid 13053] [client 72.146.30.147:16758] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/8573.php"] [unique_id "admcOIu9_W3PDEP0A3i8xwAAAAU"]
[Sat Apr 11 08:56:25.620573 2026] [:error] [pid 12951:tid 13016] [client 72.146.30.147:2893] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/8573.php"] [unique_id "admcOXfRvDJ1rwwXKETT-QAAAYY"]
[Sat Apr 11 08:56:26.184040 2026] [:error] [pid 12951:tid 13026] [client 72.146.30.147:61038] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/8573.php"] [unique_id "admcOnfRvDJ1rwwXKETUAgAAAZA"]
[Sat Apr 11 08:56:26.865140 2026] [:error] [pid 12949:tid 12955] [client 72.146.30.147:26093] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp5.php"] [unique_id "admcOvuFR9dlT2JS6NkykQAAAQI"]
[Sat Apr 11 08:56:27.606298 2026] [:error] [pid 12949:tid 12971] [client 72.146.30.147:16740] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp5.php"] [unique_id "admcO_uFR9dlT2JS6NkylwAAARI"]
[Sat Apr 11 08:56:28.186398 2026] [:error] [pid 12951:tid 13016] [client 72.146.30.147:21497] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp5.php"] [unique_id "admcPHfRvDJ1rwwXKETUCwAAAYY"]
[Sat Apr 11 08:56:28.693457 2026] [:error] [pid 12950:tid 13001] [client 72.146.30.147:44082] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp5.php"] [unique_id "admcPC0QkAbEE1aMtbSJZgAAAVU"]
[Sat Apr 11 08:56:29.362012 2026] [:error] [pid 12950:tid 12983] [client 72.146.30.147:17992] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp9.php"] [unique_id "admcPS0QkAbEE1aMtbSJawAAAUM"]
[Sat Apr 11 08:56:29.959602 2026] [:error] [pid 13046:tid 13050] [client 72.146.30.147:44057] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp9.php"] [unique_id "admcPYu9_W3PDEP0A3i81gAAAAI"]
[Sat Apr 11 08:56:30.485290 2026] [:error] [pid 12951:tid 13017] [client 72.146.30.147:58440] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp9.php"] [unique_id "admcPnfRvDJ1rwwXKETUGQAAAYc"]
[Sat Apr 11 08:56:31.046268 2026] [:error] [pid 13046:tid 13052] [client 72.146.30.147:2871] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp9.php"] [unique_id "admcP4u9_W3PDEP0A3i83wAAAAQ"]
[Sat Apr 11 08:56:31.658893 2026] [:error] [pid 12950:tid 12995] [client 72.146.30.147:26084] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws88.php"] [unique_id "admcPy0QkAbEE1aMtbSJdAAAAU8"]
[Sat Apr 11 08:56:32.175647 2026] [:error] [pid 12950:tid 12986] [client 72.146.30.147:2912] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws88.php"] [unique_id "admcQC0QkAbEE1aMtbSJdgAAAUY"]
[Sat Apr 11 08:56:32.859110 2026] [:error] [pid 12950:tid 12991] [client 72.146.30.147:2890] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws88.php"] [unique_id "admcQC0QkAbEE1aMtbSJeQAAAUs"]
[Sat Apr 11 08:56:33.786675 2026] [:error] [pid 12949:tid 12970] [client 72.146.30.147:17674] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws88.php"] [unique_id "admcQfuFR9dlT2JS6NkyrgAAARE"]
[Sat Apr 11 08:56:34.352109 2026] [:error] [pid 12949:tid 12972] [client 72.146.30.147:15971] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/motu.php"] [unique_id "admcQvuFR9dlT2JS6NkytAAAARM"]
[Sat Apr 11 08:56:35.094937 2026] [:error] [pid 13046:tid 13048] [client 72.146.30.147:2816] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/motu.php"] [unique_id "admcQ4u9_W3PDEP0A3i8-wAAAAA"]
[Sat Apr 11 08:56:35.611656 2026] [:error] [pid 13046:tid 13063] [client 72.146.30.147:44054] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/motu.php"] [unique_id "admcQ4u9_W3PDEP0A3i8_wAAAA8"]
[Sat Apr 11 08:56:36.240871 2026] [:error] [pid 12950:tid 12989] [client 72.146.30.147:26080] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/motu.php"] [unique_id "admcRC0QkAbEE1aMtbSJiAAAAUk"]
[Sat Apr 11 08:56:36.750631 2026] [:error] [pid 12949:tid 12956] [client 72.146.30.147:26054] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "admcRPuFR9dlT2JS6NkyuwAAAQM"]
[Sat Apr 11 08:56:37.397145 2026] [:error] [pid 13046:tid 13063] [client 72.146.30.147:26106] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "admcRYu9_W3PDEP0A3i9DgAAAA8"]
[Sat Apr 11 08:56:38.036195 2026] [:error] [pid 12949:tid 12960] [client 72.146.30.147:42192] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "admcRvuFR9dlT2JS6NkyvgAAAQc"]
[Sat Apr 11 08:56:38.604856 2026] [:error] [pid 13046:tid 13068] [client 72.146.30.147:17991] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "admcRou9_W3PDEP0A3i9EwAAABQ"]
[Sat Apr 11 09:04:13.996931 2026] [proxy_fcgi:error] [pid 13721:tid 13739] [client 72.146.8.12:16177] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 09:04:14.229111 2026] [proxy_fcgi:error] [pid 13721:tid 13736] [client 72.146.8.12:16177] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 09:04:14.462335 2026] [proxy_fcgi:error] [pid 13721:tid 13745] [client 72.146.8.12:16177] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 09:04:14.696078 2026] [proxy_fcgi:error] [pid 13721:tid 13724] [client 72.146.8.12:16177] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 09:04:14.929504 2026] [proxy_fcgi:error] [pid 13721:tid 13727] [client 72.146.8.12:16177] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 09:04:15.162671 2026] [proxy_fcgi:error] [pid 13721:tid 13733] [client 72.146.8.12:16177] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 09:04:15.396136 2026] [proxy_fcgi:error] [pid 13721:tid 13735] [client 72.146.8.12:16177] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 09:42:49.269505 2026] [:error] [pid 34822:tid 34831] [client 157.15.40.61:60508] [client 157.15.40.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/media/system/js/core.js"] [unique_id "admnGdoScBMkNZUKMZ3Z1QAAAQQ"]
[Sat Apr 11 14:11:36.288472 2026] [:error] [pid 11067:tid 11089] [client 157.15.40.61:55883] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/style.php"] [unique_id "adnmGMW3w7N67R04YCKQSAAAAFQ"]
[Sat Apr 11 14:11:36.539003 2026] [:error] [pid 2188:tid 2270] [client 157.15.40.61:55951] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-content/style.php"] [unique_id "adnmGIDhDA-Xtn2nRScJiQAAAM4"]
[Sat Apr 11 14:11:36.801467 2026] [:error] [pid 2187:tid 2239] [client 157.15.40.61:56040] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/style.php"] [unique_id "adnmGA4J29_qQi0FkjiH8QAAAAs"]
[Sat Apr 11 14:11:37.063019 2026] [:error] [pid 2188:tid 2277] [client 157.15.40.61:56116] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/style.php"] [unique_id "adnmGYDhDA-Xtn2nRScJmgAAANU"]
[Sat Apr 11 14:11:37.317761 2026] [:error] [pid 11067:tid 11072] [client 157.15.40.61:56182] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/style.php"] [unique_id "adnmGcW3w7N67R04YCKQdAAAAEM"]
[Sat Apr 11 14:11:37.580029 2026] [:error] [pid 11067:tid 11091] [client 157.15.40.61:56270] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/chosen.php"] [unique_id "adnmGcW3w7N67R04YCKQkQAAAFY"]
[Sat Apr 11 14:11:37.914717 2026] [:error] [pid 11067:tid 11077] [client 157.15.40.61:56391] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/file.php"] [unique_id "adnmGcW3w7N67R04YCKQsQAAAEg"]
[Sat Apr 11 14:11:38.193924 2026] [:error] [pid 11067:tid 11070] [client 157.15.40.61:56510] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/flower.php"] [unique_id "adnmGsW3w7N67R04YCKQxQAAAEE"]
[Sat Apr 11 14:11:40.696501 2026] [:error] [pid 11067:tid 11069] [client 157.15.40.61:56762] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/gifclass.php"] [unique_id "adnmHMW3w7N67R04YCKQ7wAAAEA"]
[Sat Apr 11 14:11:42.351367 2026] [:error] [pid 2186:tid 2208] [client 157.15.40.61:57068] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/bless.php"] [unique_id "adnmHsibnOEEvcO8wPL9ugAAAJI"]
[Sat Apr 11 14:11:42.642552 2026] [:error] [pid 2188:tid 2279] [client 157.15.40.61:57308] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/class-t.api.php"] [unique_id "adnmHoDhDA-Xtn2nRScJ6gAAANc"]
[Sat Apr 11 14:11:43.994764 2026] [:error] [pid 11067:tid 11069] [client 157.15.40.61:57549] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/blurbs.php"] [unique_id "adnmH8W3w7N67R04YCKRtwAAAEA"]
[Sat Apr 11 14:11:44.251499 2026] [:error] [pid 11067:tid 11090] [client 157.15.40.61:57608] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/akcc.php"] [unique_id "adnmIMW3w7N67R04YCKRygAAAFU"]
[Sat Apr 11 14:11:44.520933 2026] [:error] [pid 11067:tid 11070] [client 157.15.40.61:57666] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/abcd.php"] [unique_id "adnmIMW3w7N67R04YCKR3wAAAEE"]
[Sat Apr 11 14:11:45.567540 2026] [:error] [pid 2187:tid 2244] [client 157.15.40.61:57807] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/shelp.php"] [unique_id "adnmIQ4J29_qQi0FkjiInQAAABA"]
[Sat Apr 11 14:11:47.441189 2026] [:error] [pid 11067:tid 11077] [client 157.15.40.61:57985] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/cord.php"] [unique_id "adnmI8W3w7N67R04YCKSVQAAAEg"]
[Sat Apr 11 14:11:48.119797 2026] [:error] [pid 2188:tid 2279] [client 157.15.40.61:58228] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/dex.php"] [unique_id "adnmJIDhDA-Xtn2nRScKcwAAANc"]
[Sat Apr 11 14:11:50.472952 2026] [:error] [pid 2297:tid 2319] [client 157.15.40.61:58477] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/admin-ajax.php"] [unique_id "adnmJrXJS-Jji11jZk3bOwAAARI"]
[Sat Apr 11 14:11:51.593635 2026] [:error] [pid 11067:tid 11089] [client 157.15.40.61:58982] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/file2.php"] [unique_id "adnmJ8W3w7N67R04YCKTPgAAAFQ"]
[Sat Apr 11 14:11:51.849885 2026] [:error] [pid 2297:tid 2302] [client 157.15.40.61:59036] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/zwso.php"] [unique_id "adnmJ7XJS-Jji11jZk3bfQAAAQE"]
[Sat Apr 11 14:11:53.159047 2026] [:error] [pid 11067:tid 11084] [client 157.15.40.61:59278] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/zwso.php"] [unique_id "adnmKcW3w7N67R04YCKTfQAAAE8"]
[Sat Apr 11 14:11:54.459391 2026] [:error] [pid 11067:tid 11082] [client 157.15.40.61:59504] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_mna.php"] [unique_id "adnmKsW3w7N67R04YCKT-AAAAE0"]
[Sat Apr 11 14:11:56.580248 2026] [:error] [pid 11067:tid 11077] [client 157.15.40.61:60017] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/bolt.php"] [unique_id "adnmLMW3w7N67R04YCKU5wAAAEg"]
[Sat Apr 11 14:11:56.851962 2026] [:error] [pid 11067:tid 11087] [client 157.15.40.61:60065] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/shlo.php"] [unique_id "adnmLMW3w7N67R04YCKVDgAAAFI"]
[Sat Apr 11 14:11:57.112154 2026] [:error] [pid 2188:tid 2261] [client 157.15.40.61:60098] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/133.php"] [unique_id "adnmLYDhDA-Xtn2nRScLgAAAAMU"]
[Sat Apr 11 14:11:57.374199 2026] [:error] [pid 2187:tid 2249] [client 157.15.40.61:60159] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/ahax.php"] [unique_id "adnmLQ4J29_qQi0FkjiJfgAAABU"]
[Sat Apr 11 14:11:57.632892 2026] [:error] [pid 2186:tid 2198] [client 157.15.40.61:60229] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/php8.php"] [unique_id "adnmLcibnOEEvcO8wPL-5wAAAIg"]
[Sat Apr 11 14:11:57.895901 2026] [:error] [pid 2186:tid 2190] [client 157.15.40.61:60308] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/lufix1.php"] [unique_id "adnmLcibnOEEvcO8wPL--wAAAIA"]
[Sat Apr 11 14:11:58.155382 2026] [:error] [pid 11067:tid 11083] [client 157.15.40.61:60382] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/witmm.php"] [unique_id "adnmLsW3w7N67R04YCKVcAAAAE4"]
[Sat Apr 11 14:11:58.423817 2026] [:error] [pid 11067:tid 11078] [client 157.15.40.61:60467] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/index.php"] [unique_id "adnmLsW3w7N67R04YCKVqwAAAEk"]
[Sat Apr 11 14:12:11.028767 2026] [:error] [pid 11067:tid 11077] [client 157.15.40.61:50424] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "adnmO8W3w7N67R04YCKXbAAAAEg"]
[Sun Apr 12 00:31:57.526365 2026] [:error] [pid 42313:tid 42316] [client 20.100.186.147:38252] [client 20.100.186.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adp3fV2P8TxdbaN018KG7AAAAAA"]
[Sun Apr 12 00:31:58.055448 2026] [:error] [pid 42313:tid 42339] [client 20.100.186.147:50312] [client 20.100.186.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adp3fl2P8TxdbaN018KG7QAAABc"]
[Sun Apr 12 00:31:58.719022 2026] [:error] [pid 42313:tid 42330] [client 20.100.186.147:3625] [client 20.100.186.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adp3fl2P8TxdbaN018KG7wAAAA4"]
[Sun Apr 12 00:31:59.252650 2026] [:error] [pid 52608:tid 52633] [client 20.100.186.147:27003] [client 20.100.186.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adp3fyY5wH-BLt5QEKiryQAAARY"]
[Sun Apr 12 01:33:18.643075 2026] [:error] [pid 34152:tid 34174] [client 20.100.203.99:44340] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adqF3oFtE4RhFslT1Dq9oAAAABQ"]
[Sun Apr 12 01:33:22.207600 2026] [:error] [pid 36938:tid 36956] [client 20.100.203.99:32597] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adqF4oSWpa_VL1JPU6zcSgAAAZA"]
[Sun Apr 12 01:33:22.739583 2026] [:error] [pid 36938:tid 36945] [client 20.100.203.99:48557] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adqF4oSWpa_VL1JPU6zcTAAAAYU"]
[Sun Apr 12 01:33:23.512623 2026] [:error] [pid 36909:tid 36933] [client 20.100.203.99:47145] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adqF40Gk5GhxTCzHUOoW5wAAARY"]
[Sun Apr 12 01:33:24.224957 2026] [:error] [pid 36938:tid 36957] [client 20.100.203.99:47124] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adqF5ISWpa_VL1JPU6zcTwAAAZE"]
[Sun Apr 12 01:33:25.526088 2026] [:error] [pid 45064:tid 45115] [client 20.100.203.99:35227] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adqF5ZcHBvLyJ6EUhUr9sAAAAVY"]
[Sun Apr 12 01:33:28.420854 2026] [:error] [pid 45064:tid 45097] [client 20.100.203.99:47115] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adqF6JcHBvLyJ6EUhUr9tAAAAUU"]
[Sun Apr 12 01:33:29.880949 2026] [:error] [pid 44698:tid 44710] [client 20.100.203.99:48560] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adqF6RgoH9UWd-U3D55gXgAAAIc"]
[Sun Apr 12 05:54:46.887383 2026] [proxy_fcgi:error] [pid 25329:tid 25397] [client 62.197.152.86:46870] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 05:54:47.200518 2026] [proxy_fcgi:error] [pid 25329:tid 25384] [client 62.197.152.86:46870] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 05:54:47.526566 2026] [proxy_fcgi:error] [pid 25329:tid 25378] [client 62.197.152.86:46870] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 05:54:47.841291 2026] [proxy_fcgi:error] [pid 25329:tid 25414] [client 62.197.152.86:46870] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 05:54:48.155290 2026] [proxy_fcgi:error] [pid 25329:tid 25402] [client 62.197.152.86:46870] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 05:54:48.475300 2026] [proxy_fcgi:error] [pid 25329:tid 25386] [client 62.197.152.86:46870] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 05:54:50.786248 2026] [proxy_fcgi:error] [pid 25329:tid 25384] [client 62.197.152.86:46870] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 05:54:51.091943 2026] [:error] [pid 25329:tid 25382] [client 62.197.152.86:46870] [client 62.197.152.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mah.php"] [unique_id "adrDK2dcIYsS8Iyaj101EgAAAIQ"]
[Sun Apr 12 05:54:51.728307 2026] [:error] [pid 25328:tid 25379] [client 62.197.152.86:48836] [client 62.197.152.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mah.php"] [unique_id "adrDK8xUaQZxT-e0YsDoQAAAAEs"]
[Sun Apr 12 05:54:52.336289 2026] [:error] [pid 25328:tid 25365] [client 62.197.152.86:49012] [client 62.197.152.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mah.php"] [unique_id "adrDLMxUaQZxT-e0YsDoVQAAAEE"]
[Sun Apr 12 05:54:52.945580 2026] [:error] [pid 25328:tid 25373] [client 62.197.152.86:49270] [client 62.197.152.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mah.php"] [unique_id "adrDLMxUaQZxT-e0YsDoYAAAAEg"]
[Sun Apr 12 05:54:53.554836 2026] [:error] [pid 25328:tid 25398] [client 62.197.152.86:49500] [client 62.197.152.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mah.php"] [unique_id "adrDLcxUaQZxT-e0YsDobwAAAFQ"]
[Sun Apr 12 05:54:55.101077 2026] [:error] [pid 25328:tid 25387] [client 62.197.152.86:49720] [client 62.197.152.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/themes/zMousse/"] [unique_id "adrDL8xUaQZxT-e0YsDojAAAAE8"]
[Sun Apr 12 05:54:55.713818 2026] [:error] [pid 25328:tid 25368] [client 62.197.152.86:50346] [client 62.197.152.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/themes/zMousse/"] [unique_id "adrDL8xUaQZxT-e0YsDolgAAAEQ"]
[Sun Apr 12 05:54:56.325140 2026] [:error] [pid 25437:tid 25448] [client 62.197.152.86:50548] [client 62.197.152.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/themes/zMousse/"] [unique_id "adrDMHf97wYZje1ep_NXGgAAAMk"]
[Sun Apr 12 05:54:56.932664 2026] [:error] [pid 25329:tid 25382] [client 62.197.152.86:50776] [client 62.197.152.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/themes/zMousse/"] [unique_id "adrDMGdcIYsS8Iyaj101UQAAAIQ"]
[Sun Apr 12 05:54:57.541982 2026] [:error] [pid 25329:tid 25392] [client 62.197.152.86:51016] [client 62.197.152.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/themes/zMousse/"] [unique_id "adrDMWdcIYsS8Iyaj101WQAAAIk"]
[Sun Apr 12 07:36:26.895320 2026] [proxy_fcgi:error] [pid 26567:tid 26577] [client 172.213.233.8:45403] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 07:36:27.407998 2026] [proxy_fcgi:error] [pid 26567:tid 26578] [client 172.213.233.8:45403] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 07:36:27.640724 2026] [proxy_fcgi:error] [pid 26567:tid 26579] [client 172.213.233.8:45403] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 07:36:27.873414 2026] [proxy_fcgi:error] [pid 26567:tid 26589] [client 172.213.233.8:45403] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 07:36:28.114861 2026] [proxy_fcgi:error] [pid 26567:tid 26586] [client 172.213.233.8:45403] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 07:36:29.722727 2026] [proxy_fcgi:error] [pid 26567:tid 26587] [client 172.213.233.8:45403] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 07:36:29.956680 2026] [proxy_fcgi:error] [pid 26567:tid 26588] [client 172.213.233.8:45403] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 07:36:30.191487 2026] [proxy_fcgi:error] [pid 26567:tid 26573] [client 172.213.233.8:45403] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 07:36:30.424534 2026] [proxy_fcgi:error] [pid 26567:tid 26576] [client 172.213.233.8:45403] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 07:36:30.663581 2026] [proxy_fcgi:error] [pid 26567:tid 26585] [client 172.213.233.8:45403] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 07:36:30.899768 2026] [:error] [pid 26567:tid 26581] [client 172.213.233.8:45403] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/less.php"] [unique_id "adra_nhRpg6ptWFyFx0fCQAAAQw"]
[Sun Apr 12 07:36:32.502553 2026] [:error] [pid 25328:tid 25368] [client 172.213.233.8:55947] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/less.php"] [unique_id "adrbAMxUaQZxT-e0YsAPuQAAAEQ"]
[Sun Apr 12 07:36:34.697098 2026] [:error] [pid 25328:tid 25377] [client 172.213.233.8:36380] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/less.php"] [unique_id "adrbAsxUaQZxT-e0YsAPyQAAAEo"]
[Sun Apr 12 07:36:35.463369 2026] [:error] [pid 25437:tid 25453] [client 172.213.233.8:41309] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/less.php"] [unique_id "adrbA3f97wYZje1ep_N2uQAAAM4"]
[Sun Apr 12 07:36:36.406617 2026] [:error] [pid 26567:tid 26570] [client 172.213.233.8:50240] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x3x.php"] [unique_id "adrbBHhRpg6ptWFyFx0fDAAAAQE"]
[Sun Apr 12 07:36:39.413896 2026] [:error] [pid 25437:tid 25449] [client 172.213.233.8:50264] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x3x.php"] [unique_id "adrbB3f97wYZje1ep_N2wgAAAMo"]
[Sun Apr 12 07:36:41.880076 2026] [:error] [pid 60280:tid 60303] [client 172.213.233.8:36305] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x3x.php"] [unique_id "adrbCXBlLnDOYuIykkgMDQAAAdU"]
[Sun Apr 12 07:36:42.915972 2026] [:error] [pid 26600:tid 26636] [client 172.213.233.8:33039] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x3x.php"] [unique_id "adrbCu1YwAZiXhQKLYqT5AAAAYc"]
[Sun Apr 12 07:36:44.215216 2026] [:error] [pid 25328:tid 25408] [client 172.213.233.8:50269] [client 172.213.233.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Ipv6.php"] [unique_id "adrbDMxUaQZxT-e0YsAP1wAAAFg"]
[Sun Apr 12 07:36:45.060688 2026] [:error] [pid 25328:tid 25364] [client 172.213.233.8:41338] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/state.php"] [unique_id "adrbDcxUaQZxT-e0YsAP3wAAAEA"]
[Sun Apr 12 07:36:46.894274 2026] [:error] [pid 25329:tid 25376] [client 172.213.233.8:41327] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/state.php"] [unique_id "adrbDmdcIYsS8Iyaj11SQgAAAIE"]
[Sun Apr 12 07:36:47.892347 2026] [:error] [pid 25327:tid 25347] [client 172.213.233.8:5470] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/state.php"] [unique_id "adrbDy6h2tZEVJo9JFJY9gAAAAs"]
[Sun Apr 12 07:36:49.325738 2026] [:error] [pid 25329:tid 25413] [client 172.213.233.8:41301] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/state.php"] [unique_id "adrbEWdcIYsS8Iyaj11SSAAAAJY"]
[Sun Apr 12 07:36:50.054418 2026] [:error] [pid 25328:tid 25367] [client 172.213.233.8:41703] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xozx.php"] [unique_id "adrbEsxUaQZxT-e0YsAP7wAAAEM"]
[Sun Apr 12 07:36:51.523278 2026] [:error] [pid 25329:tid 25409] [client 172.213.233.8:52847] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xozx.php"] [unique_id "adrbE2dcIYsS8Iyaj11STQAAAJM"]
[Sun Apr 12 07:36:53.420676 2026] [:error] [pid 25328:tid 25398] [client 172.213.233.8:36321] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xozx.php"] [unique_id "adrbFcxUaQZxT-e0YsAP-AAAAFQ"]
[Sun Apr 12 07:36:54.081166 2026] [:error] [pid 25329:tid 25382] [client 172.213.233.8:61448] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xozx.php"] [unique_id "adrbFmdcIYsS8Iyaj11SUAAAAIQ"]
[Sun Apr 12 07:36:54.803250 2026] [:error] [pid 25329:tid 25407] [client 172.213.233.8:39927] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/1100.php"] [unique_id "adrbFmdcIYsS8Iyaj11SUgAAAJI"]
[Sun Apr 12 07:36:56.857231 2026] [:error] [pid 26600:tid 26651] [client 172.213.233.8:5503] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/1100.php"] [unique_id "adrbGO1YwAZiXhQKLYqT8QAAAZY"]
[Sun Apr 12 07:36:57.496523 2026] [:error] [pid 25329:tid 25414] [client 172.213.233.8:36347] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/1100.php"] [unique_id "adrbGWdcIYsS8Iyaj11SVAAAAJc"]
[Sun Apr 12 07:36:59.122218 2026] [:error] [pid 25329:tid 25402] [client 172.213.233.8:52818] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/1100.php"] [unique_id "adrbG2dcIYsS8Iyaj11SWQAAAI8"]
[Sun Apr 12 07:37:00.028196 2026] [:error] [pid 26600:tid 26645] [client 172.213.233.8:39872] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/8.php"] [unique_id "adrbHO1YwAZiXhQKLYqT9gAAAZA"]
[Sun Apr 12 07:37:02.640614 2026] [:error] [pid 25328:tid 25385] [client 172.213.233.8:42782] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/8.php"] [unique_id "adrbHsxUaQZxT-e0YsAQGAAAAE4"]
[Sun Apr 12 07:37:04.473962 2026] [:error] [pid 25328:tid 25375] [client 172.213.233.8:39916] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/8.php"] [unique_id "adrbIMxUaQZxT-e0YsAQJQAAAEk"]
[Sun Apr 12 07:37:05.339998 2026] [:error] [pid 26567:tid 26576] [client 172.213.233.8:61540] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/8.php"] [unique_id "adrbIXhRpg6ptWFyFx0fFwAAAQc"]
[Sun Apr 12 07:37:08.472107 2026] [:error] [pid 25328:tid 25401] [client 172.213.233.8:50293] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/97.php"] [unique_id "adrbJMxUaQZxT-e0YsAQLwAAAFU"]
[Sun Apr 12 07:37:10.726549 2026] [:error] [pid 60280:tid 60287] [client 172.213.233.8:50246] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/97.php"] [unique_id "adrbJnBlLnDOYuIykkgMRQAAAcU"]
[Sun Apr 12 07:37:12.966322 2026] [:error] [pid 60280:tid 60290] [client 172.213.233.8:41305] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/97.php"] [unique_id "adrbKHBlLnDOYuIykkgMVAAAAcg"]
[Sun Apr 12 07:37:13.701526 2026] [:error] [pid 25437:tid 25454] [client 172.213.233.8:42774] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/97.php"] [unique_id "adrbKXf97wYZje1ep_N23AAAAM8"]
[Sun Apr 12 07:37:15.015232 2026] [:error] [pid 26599:tid 26619] [client 172.213.233.8:50257] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file-gertdxz.php"] [unique_id "adrbK3G89LXoQbk_rwBdOwAAAVE"]
[Sun Apr 12 07:37:16.360148 2026] [:error] [pid 25329:tid 25381] [client 172.213.233.8:61467] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file-gertdxz.php"] [unique_id "adrbLGdcIYsS8Iyaj11SZwAAAIM"]
[Sun Apr 12 07:37:20.128918 2026] [:error] [pid 26599:tid 26611] [client 172.213.233.8:41716] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file-gertdxz.php"] [unique_id "adrbMHG89LXoQbk_rwBdUQAAAUk"]
[Sun Apr 12 07:37:21.072537 2026] [:error] [pid 60280:tid 60283] [client 172.213.233.8:39874] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file-gertdxz.php"] [unique_id "adrbMXBlLnDOYuIykkgMawAAAcE"]
[Sun Apr 12 07:37:22.765248 2026] [:error] [pid 26599:tid 26602] [client 172.213.233.8:61445] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aboute.php"] [unique_id "adrbMnG89LXoQbk_rwBdXQAAAUA"]
[Sun Apr 12 07:37:26.176784 2026] [:error] [pid 26599:tid 26613] [client 172.213.233.8:33053] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aboute.php"] [unique_id "adrbNnG89LXoQbk_rwBddQAAAUs"]
[Sun Apr 12 07:37:27.631728 2026] [:error] [pid 25329:tid 25392] [client 172.213.233.8:42773] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aboute.php"] [unique_id "adrbN2dcIYsS8Iyaj11SbAAAAIk"]
[Sun Apr 12 07:37:28.347863 2026] [:error] [pid 25327:tid 25348] [client 172.213.233.8:53983] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aboute.php"] [unique_id "adrbOC6h2tZEVJo9JFJZFAAAAAw"]
[Sun Apr 12 07:37:30.937555 2026] [proxy_fcgi:error] [pid 60280:tid 60298] [client 172.213.233.8:33537] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 07:37:31.171976 2026] [proxy_fcgi:error] [pid 60280:tid 60299] [client 172.213.233.8:33537] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 07:37:31.407083 2026] [proxy_fcgi:error] [pid 60280:tid 60285] [client 172.213.233.8:33537] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 07:37:31.646897 2026] [proxy_fcgi:error] [pid 60280:tid 60292] [client 172.213.233.8:33537] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 07:37:33.173682 2026] [proxy_fcgi:error] [pid 60280:tid 60290] [client 172.213.233.8:33537] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 07:37:33.407695 2026] [proxy_fcgi:error] [pid 60280:tid 60304] [client 172.213.233.8:33537] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 07:37:33.642089 2026] [proxy_fcgi:error] [pid 60280:tid 60299] [client 172.213.233.8:33537] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 07:37:33.965681 2026] [proxy_fcgi:error] [pid 60280:tid 60296] [client 172.213.233.8:33537] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 07:37:34.349417 2026] [proxy_fcgi:error] [pid 60280:tid 60285] [client 172.213.233.8:33537] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 07:37:34.584144 2026] [proxy_fcgi:error] [pid 60280:tid 60289] [client 172.213.233.8:33537] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 07:37:34.818253 2026] [proxy_fcgi:error] [pid 60280:tid 60295] [client 172.213.233.8:33537] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 07:37:35.048717 2026] [:error] [pid 60280:tid 60306] [client 172.213.233.8:33537] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-turn.php"] [unique_id "adrbP3BlLnDOYuIykkgMogAAAdg"]
[Sun Apr 12 07:37:37.413661 2026] [:error] [pid 25328:tid 25372] [client 172.213.233.8:43284] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-turn.php"] [unique_id "adrbQcxUaQZxT-e0YsAQTQAAAEc"]
[Sun Apr 12 07:37:38.899284 2026] [:error] [pid 25327:tid 25340] [client 172.213.233.8:53244] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-turn.php"] [unique_id "adrbQi6h2tZEVJo9JFJZHgAAAAQ"]
[Sun Apr 12 07:37:44.110635 2026] [:error] [pid 25328:tid 25367] [client 172.213.233.8:58712] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-turn.php"] [unique_id "adrbSMxUaQZxT-e0YsAQawAAAEM"]
[Sun Apr 12 07:37:45.742984 2026] [:error] [pid 25329:tid 25409] [client 172.213.233.8:46564] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ayk.php"] [unique_id "adrbSWdcIYsS8Iyaj11SfwAAAJM"]
[Sun Apr 12 07:37:47.160710 2026] [:error] [pid 26599:tid 26624] [client 172.213.233.8:46550] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ayk.php"] [unique_id "adrbS3G89LXoQbk_rwBdvgAAAVY"]
[Sun Apr 12 07:37:47.945911 2026] [:error] [pid 26599:tid 26622] [client 172.213.233.8:47688] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ayk.php"] [unique_id "adrbS3G89LXoQbk_rwBdvwAAAVQ"]
[Sun Apr 12 07:37:49.934133 2026] [:error] [pid 25437:tid 25458] [client 172.213.233.8:49107] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ayk.php"] [unique_id "adrbTXf97wYZje1ep_N2-wAAANM"]
[Sun Apr 12 07:37:51.778819 2026] [:error] [pid 26600:tid 26636] [client 172.213.233.8:5385] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/red.php"] [unique_id "adrbT-1YwAZiXhQKLYqUAwAAAYc"]
[Sun Apr 12 07:37:52.372689 2026] [:error] [pid 26599:tid 26606] [client 172.213.233.8:50201] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/red.php"] [unique_id "adrbUHG89LXoQbk_rwBdyAAAAUQ"]
[Sun Apr 12 07:37:53.169599 2026] [:error] [pid 26600:tid 26647] [client 172.213.233.8:56904] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/red.php"] [unique_id "adrbUe1YwAZiXhQKLYqUBQAAAZI"]
[Sun Apr 12 07:37:55.988097 2026] [:error] [pid 60280:tid 60303] [client 172.213.233.8:49829] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/red.php"] [unique_id "adrbU3BlLnDOYuIykkgMywAAAdU"]
[Sun Apr 12 07:37:59.254011 2026] [:error] [pid 25327:tid 25358] [client 172.213.233.8:38032] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ss.php"] [unique_id "adrbVy6h2tZEVJo9JFJZLgAAABY"]
[Sun Apr 12 07:38:00.681657 2026] [:error] [pid 25327:tid 25340] [client 172.213.233.8:50805] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ss.php"] [unique_id "adrbWC6h2tZEVJo9JFJZMgAAAAQ"]
[Sun Apr 12 07:38:01.666884 2026] [:error] [pid 26599:tid 26612] [client 172.213.233.8:56042] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ss.php"] [unique_id "adrbWXG89LXoQbk_rwBd2QAAAUo"]
[Sun Apr 12 07:38:03.654311 2026] [:error] [pid 26567:tid 26572] [client 172.213.233.8:56944] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ss.php"] [unique_id "adrbW3hRpg6ptWFyFx0fOAAAAQM"]
[Sun Apr 12 07:38:05.063838 2026] [:error] [pid 26567:tid 26573] [client 172.213.233.8:51687] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sadcut1.php"] [unique_id "adrbXXhRpg6ptWFyFx0fPQAAAQQ"]
[Sun Apr 12 07:38:07.632323 2026] [:error] [pid 60280:tid 60283] [client 172.213.233.8:5589] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sadcut1.php"] [unique_id "adrbX3BlLnDOYuIykkgM6AAAAcE"]
[Sun Apr 12 07:38:09.032575 2026] [:error] [pid 25327:tid 25337] [client 172.213.233.8:51133] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sadcut1.php"] [unique_id "adrbYS6h2tZEVJo9JFJZOQAAAAE"]
[Sun Apr 12 07:38:09.927898 2026] [:error] [pid 25327:tid 25347] [client 172.213.233.8:45133] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sadcut1.php"] [unique_id "adrbYS6h2tZEVJo9JFJZOwAAAAs"]
[Sun Apr 12 07:38:12.946728 2026] [:error] [pid 25328:tid 25365] [client 172.213.233.8:49800] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gecko.php"] [unique_id "adrbZMxUaQZxT-e0YsAQfgAAAEE"]
[Sun Apr 12 07:38:14.863345 2026] [:error] [pid 25329:tid 25400] [client 172.213.233.8:38065] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gecko.php"] [unique_id "adrbZmdcIYsS8Iyaj11SmwAAAI4"]
[Sun Apr 12 07:38:17.090404 2026] [:error] [pid 26600:tid 26645] [client 172.213.233.8:33954] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gecko.php"] [unique_id "adrbae1YwAZiXhQKLYqUJQAAAZA"]
[Sun Apr 12 07:38:19.009994 2026] [:error] [pid 60280:tid 60299] [client 172.213.233.8:33478] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gecko.php"] [unique_id "adrba3BlLnDOYuIykkgM9gAAAdE"]
[Sun Apr 12 07:38:20.734800 2026] [:error] [pid 60280:tid 60293] [client 172.213.233.8:44134] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wziar1.php"] [unique_id "adrbbHBlLnDOYuIykkgM-wAAAcs"]
[Sun Apr 12 07:38:23.899331 2026] [:error] [pid 25328:tid 25380] [client 172.213.233.8:33491] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wziar1.php"] [unique_id "adrbb8xUaQZxT-e0YsAQgwAAAEw"]
[Sun Apr 12 07:38:24.810655 2026] [:error] [pid 25328:tid 25403] [client 172.213.233.8:5544] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wziar1.php"] [unique_id "adrbcMxUaQZxT-e0YsAQiAAAAFY"]
[Sun Apr 12 07:38:26.020993 2026] [:error] [pid 25329:tid 25412] [client 172.213.233.8:44835] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wziar1.php"] [unique_id "adrbcmdcIYsS8Iyaj11SowAAAJU"]
[Sun Apr 12 07:38:26.729645 2026] [:error] [pid 25328:tid 25368] [client 172.213.233.8:5567] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xs.php"] [unique_id "adrbcsxUaQZxT-e0YsAQjAAAAEQ"]
[Sun Apr 12 07:38:28.984841 2026] [:error] [pid 25327:tid 25337] [client 172.213.233.8:49888] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xs.php"] [unique_id "adrbdC6h2tZEVJo9JFJZSAAAAAE"]
[Sun Apr 12 07:38:30.883151 2026] [:error] [pid 26600:tid 26639] [client 172.213.233.8:49884] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xs.php"] [unique_id "adrbdu1YwAZiXhQKLYqUKwAAAYo"]
[Sun Apr 12 07:38:32.826172 2026] [:error] [pid 60280:tid 60300] [client 172.213.233.8:43360] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xs.php"] [unique_id "adrbeHBlLnDOYuIykkgNCwAAAdI"]
[Sun Apr 12 07:38:34.700313 2026] [:error] [pid 25327:tid 25356] [client 172.213.233.8:33516] [client 172.213.233.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/theme-compat/wp-login.php"] [unique_id "adrbei6h2tZEVJo9JFJZTgAAABQ"]
[Sun Apr 12 07:38:35.804741 2026] [proxy_fcgi:error] [pid 26599:tid 26609] [client 172.213.233.8:5995] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 07:38:36.037760 2026] [proxy_fcgi:error] [pid 26599:tid 26617] [client 172.213.233.8:5995] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 07:38:36.271952 2026] [:error] [pid 26599:tid 26612] [client 172.213.233.8:5995] [client 172.213.233.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dwelectservices.com.au"] [uri "/tiny.php"] [unique_id "adrbfHG89LXoQbk_rwBeCgAAAUo"]
[Sun Apr 12 07:38:37.802788 2026] [proxy_fcgi:error] [pid 25327:tid 25344] [client 172.213.233.8:33528] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 07:38:38.036430 2026] [proxy_fcgi:error] [pid 25327:tid 25336] [client 172.213.233.8:33528] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 07:38:38.270228 2026] [proxy_fcgi:error] [pid 25327:tid 25340] [client 172.213.233.8:33528] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 07:38:38.505071 2026] [proxy_fcgi:error] [pid 25327:tid 25346] [client 172.213.233.8:33528] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 07:38:38.739350 2026] [proxy_fcgi:error] [pid 25327:tid 25337] [client 172.213.233.8:33528] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 07:38:38.973762 2026] [proxy_fcgi:error] [pid 25327:tid 25339] [client 172.213.233.8:33528] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 07:38:39.207842 2026] [proxy_fcgi:error] [pid 25327:tid 25353] [client 172.213.233.8:33528] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 07:38:39.446283 2026] [proxy_fcgi:error] [pid 25327:tid 25351] [client 172.213.233.8:33528] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 07:38:39.689499 2026] [proxy_fcgi:error] [pid 25327:tid 25347] [client 172.213.233.8:33528] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 07:38:39.920140 2026] [:error] [pid 25327:tid 25350] [client 172.213.233.8:33528] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class-wp-image.php"] [unique_id "adrbfy6h2tZEVJo9JFJZXQAAAA4"]
[Sun Apr 12 07:38:41.308586 2026] [:error] [pid 26600:tid 26648] [client 172.213.233.8:6001] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class-wp-image.php"] [unique_id "adrbge1YwAZiXhQKLYqUNAAAAZM"]
[Sun Apr 12 07:38:42.330475 2026] [:error] [pid 25327:tid 25358] [client 172.213.233.8:49862] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class-wp-image.php"] [unique_id "adrbgi6h2tZEVJo9JFJZYQAAABY"]
[Sun Apr 12 07:38:44.038179 2026] [:error] [pid 60280:tid 60285] [client 172.213.233.8:5529] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class-wp-image.php"] [unique_id "adrbhHBlLnDOYuIykkgNJQAAAcM"]
[Sun Apr 12 07:38:44.761252 2026] [:error] [pid 26599:tid 26615] [client 172.213.233.8:56668] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/riz.php"] [unique_id "adrbhHG89LXoQbk_rwBeEAAAAU0"]
[Sun Apr 12 07:38:45.902054 2026] [:error] [pid 26599:tid 26612] [client 172.213.233.8:5979] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/riz.php"] [unique_id "adrbhXG89LXoQbk_rwBeFwAAAUo"]
[Sun Apr 12 07:38:47.112452 2026] [:error] [pid 26599:tid 26619] [client 172.213.233.8:43627] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/riz.php"] [unique_id "adrbh3G89LXoQbk_rwBeGwAAAVE"]
[Sun Apr 12 07:38:48.351500 2026] [:error] [pid 26567:tid 26586] [client 172.213.233.8:49877] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/riz.php"] [unique_id "adrbiHhRpg6ptWFyFx0faAAAARE"]
[Sun Apr 12 07:38:49.473319 2026] [:error] [pid 25329:tid 25381] [client 172.213.233.8:33525] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/packsin1.php"] [unique_id "adrbiWdcIYsS8Iyaj11SswAAAIM"]
[Sun Apr 12 07:38:50.962765 2026] [:error] [pid 26600:tid 26633] [client 172.213.233.8:43630] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/packsin1.php"] [unique_id "adrbiu1YwAZiXhQKLYqUNgAAAYQ"]
[Sun Apr 12 07:38:52.179979 2026] [:error] [pid 25328:tid 25372] [client 172.213.233.8:56650] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/packsin1.php"] [unique_id "adrbjMxUaQZxT-e0YsAQtAAAAEc"]
[Sun Apr 12 07:38:53.620065 2026] [:error] [pid 60280:tid 60291] [client 172.213.233.8:38018] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/packsin1.php"] [unique_id "adrbjXBlLnDOYuIykkgNOgAAAck"]
[Sun Apr 12 07:38:54.844087 2026] [:error] [pid 60280:tid 60282] [client 172.213.233.8:5986] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/om.php"] [unique_id "adrbjnBlLnDOYuIykkgNPwAAAcA"]
[Sun Apr 12 07:38:55.631392 2026] [:error] [pid 26600:tid 26630] [client 172.213.233.8:32675] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/om.php"] [unique_id "adrbj-1YwAZiXhQKLYqUNwAAAYE"]
[Sun Apr 12 07:38:57.838773 2026] [:error] [pid 26600:tid 26644] [client 172.213.233.8:58315] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/om.php"] [unique_id "adrbke1YwAZiXhQKLYqUOgAAAY8"]
[Sun Apr 12 07:38:59.246102 2026] [:error] [pid 25437:tid 25441] [client 172.213.233.8:56620] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/om.php"] [unique_id "adrbk3f97wYZje1ep_N3JwAAAMI"]
[Sun Apr 12 07:39:01.832990 2026] [:error] [pid 25329:tid 25404] [client 172.213.233.8:32649] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/006.php"] [unique_id "adrblWdcIYsS8Iyaj11SuQAAAJA"]
[Sun Apr 12 07:39:02.704472 2026] [:error] [pid 25327:tid 25338] [client 172.213.233.8:43643] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/006.php"] [unique_id "adrbli6h2tZEVJo9JFJZfQAAAAI"]
[Sun Apr 12 07:39:04.299772 2026] [:error] [pid 25328:tid 25370] [client 172.213.233.8:43587] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/006.php"] [unique_id "adrbmMxUaQZxT-e0YsAQxwAAAEY"]
[Sun Apr 12 07:39:05.818905 2026] [:error] [pid 26567:tid 26577] [client 172.213.233.8:49915] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/006.php"] [unique_id "adrbmXhRpg6ptWFyFx0fdAAAAQg"]
[Sun Apr 12 07:39:07.559360 2026] [:error] [pid 25328:tid 25373] [client 172.213.233.8:44819] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lib.php"] [unique_id "adrbm8xUaQZxT-e0YsAQzQAAAEg"]
[Sun Apr 12 07:39:12.807275 2026] [:error] [pid 25437:tid 25439] [client 172.213.233.8:59079] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lib.php"] [unique_id "adrboHf97wYZje1ep_N3LQAAAMA"]
[Sun Apr 12 07:39:14.562742 2026] [:error] [pid 60280:tid 60282] [client 172.213.233.8:58326] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lib.php"] [unique_id "adrbonBlLnDOYuIykkgNSwAAAcA"]
[Sun Apr 12 07:39:18.074091 2026] [:error] [pid 26567:tid 26587] [client 172.213.233.8:59092] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lib.php"] [unique_id "adrbpnhRpg6ptWFyFx0fewAAARI"]
[Sun Apr 12 07:39:19.418129 2026] [:error] [pid 25329:tid 25382] [client 172.213.233.8:46493] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xda.php"] [unique_id "adrbp2dcIYsS8Iyaj11SyQAAAIQ"]
[Sun Apr 12 07:39:20.456828 2026] [:error] [pid 26599:tid 26606] [client 172.213.233.8:59086] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xda.php"] [unique_id "adrbqHG89LXoQbk_rwBeJwAAAUQ"]
[Sun Apr 12 07:39:22.198365 2026] [:error] [pid 26599:tid 26604] [client 172.213.233.8:5513] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xda.php"] [unique_id "adrbqnG89LXoQbk_rwBeKgAAAUI"]
[Sun Apr 12 07:39:23.325294 2026] [:error] [pid 60280:tid 60283] [client 172.213.233.8:59093] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xda.php"] [unique_id "adrbq3BlLnDOYuIykkgNWQAAAcE"]
[Sun Apr 12 07:39:24.641859 2026] [:error] [pid 25327:tid 25347] [client 172.213.233.8:47307] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wolf.php"] [unique_id "adrbrC6h2tZEVJo9JFJZjwAAAAs"]
[Sun Apr 12 07:39:25.832267 2026] [:error] [pid 26600:tid 26638] [client 172.213.233.8:34550] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wolf.php"] [unique_id "adrbre1YwAZiXhQKLYqUTAAAAYk"]
[Sun Apr 12 07:39:27.194135 2026] [:error] [pid 26599:tid 26625] [client 172.213.233.8:46499] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wolf.php"] [unique_id "adrbr3G89LXoQbk_rwBeMQAAAVc"]
[Sun Apr 12 07:39:27.881296 2026] [:error] [pid 26599:tid 26623] [client 172.213.233.8:34518] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wolf.php"] [unique_id "adrbr3G89LXoQbk_rwBeNwAAAVU"]
[Sun Apr 12 07:39:28.609766 2026] [:error] [pid 26600:tid 26647] [client 172.213.233.8:59102] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ww.php"] [unique_id "adrbsO1YwAZiXhQKLYqUTQAAAZI"]
[Sun Apr 12 07:39:30.066428 2026] [:error] [pid 26599:tid 26616] [client 172.213.233.8:5959] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ww.php"] [unique_id "adrbsnG89LXoQbk_rwBeOwAAAU4"]
[Sun Apr 12 07:39:30.766095 2026] [:error] [pid 26567:tid 26573] [client 172.213.233.8:43645] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ww.php"] [unique_id "adrbsnhRpg6ptWFyFx0ffQAAAQQ"]
[Sun Apr 12 07:39:31.625774 2026] [:error] [pid 25437:tid 25445] [client 172.213.233.8:49891] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ww.php"] [unique_id "adrbs3f97wYZje1ep_N3NQAAAMY"]
[Sun Apr 12 07:39:32.752755 2026] [:error] [pid 25437:tid 25453] [client 172.213.233.8:38810] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "adrbtHf97wYZje1ep_N3OQAAAM4"]
[Sun Apr 12 07:39:33.850861 2026] [:error] [pid 26600:tid 26635] [client 172.213.233.8:34536] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "adrbte1YwAZiXhQKLYqUUQAAAYY"]
[Sun Apr 12 07:39:34.588175 2026] [:error] [pid 26600:tid 26642] [client 172.213.233.8:38827] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "adrbtu1YwAZiXhQKLYqUUwAAAY0"]
[Sun Apr 12 07:39:35.375971 2026] [:error] [pid 25437:tid 25456] [client 172.213.233.8:5955] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "adrbt3f97wYZje1ep_N3QAAAANE"]
[Sun Apr 12 07:39:36.484629 2026] [:error] [pid 26599:tid 26605] [client 172.213.233.8:38842] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/1aa.php"] [unique_id "adrbuHG89LXoQbk_rwBeRwAAAUM"]
[Sun Apr 12 07:39:37.971737 2026] [:error] [pid 26600:tid 26651] [client 172.213.233.8:59099] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/1aa.php"] [unique_id "adrbue1YwAZiXhQKLYqUVwAAAZY"]
[Sun Apr 12 07:39:38.760759 2026] [:error] [pid 26600:tid 26652] [client 172.213.233.8:49876] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/1aa.php"] [unique_id "adrbuu1YwAZiXhQKLYqUWQAAAZc"]
[Sun Apr 12 07:39:40.104708 2026] [proxy_fcgi:error] [pid 25437:tid 25442] [client 172.213.233.8:5961] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 07:39:40.337687 2026] [proxy_fcgi:error] [pid 25437:tid 25461] [client 172.213.233.8:5961] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 07:39:40.571804 2026] [proxy_fcgi:error] [pid 25437:tid 25452] [client 172.213.233.8:5961] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 08:24:16.263281 2026] [:error] [pid 26567:tid 26570] [client 20.220.147.82:37847] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adrmMHhRpg6ptWFyFx0stAAAAQE"]
[Sun Apr 12 08:24:16.718176 2026] [:error] [pid 26599:tid 26602] [client 20.220.147.82:37761] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adrmMHG89LXoQbk_rwBzPwAAAUA"]
[Sun Apr 12 08:24:17.171386 2026] [:error] [pid 26599:tid 26614] [client 20.220.147.82:37774] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adrmMXG89LXoQbk_rwBzQQAAAUw"]
[Sun Apr 12 08:24:17.589319 2026] [:error] [pid 26599:tid 26612] [client 20.220.147.82:37852] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adrmMXG89LXoQbk_rwBzRAAAAUo"]
[Sun Apr 12 14:35:12.948581 2026] [:error] [pid 26600:tid 26636] [client 159.65.142.144:61820] [client 159.65.142.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/install.php"] [unique_id "ads9IO1YwAZiXhQKLYr41AAAAYc"]
[Mon Apr 13 03:10:34.539736 2026] [:error] [pid 31606:tid 31729] [client 20.151.218.28:23436] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "advuKj9vCsshNhLmCiCNvAAAAFc"]
[Mon Apr 13 03:10:36.354667 2026] [:error] [pid 54671:tid 54690] [client 20.151.218.28:23551] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "advuLGyJMmaONUqF0tCqTQAAAQ8"]
[Mon Apr 13 03:10:37.925910 2026] [:error] [pid 31607:tid 31753] [client 20.151.218.28:23494] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "advuLWjn_I-KYTWngjJNkQAAAJA"]
[Mon Apr 13 03:10:38.899874 2026] [:error] [pid 54671:tid 54680] [client 20.151.218.28:23541] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "advuLmyJMmaONUqF0tCqVgAAAQU"]
[Mon Apr 13 05:24:15.976578 2026] [:error] [pid 11325:tid 11338] [client 20.104.245.70:27631] [client 20.104.245.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adwNf-CGj3EEJtCwa0OE0AAAAQs"]
[Mon Apr 13 05:24:19.868362 2026] [:error] [pid 11325:tid 11337] [client 20.104.245.70:27604] [client 20.104.245.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adwNg-CGj3EEJtCwa0OE6QAAAQo"]
[Mon Apr 13 05:24:22.044762 2026] [:error] [pid 33942:tid 33984] [client 20.104.245.70:27536] [client 20.104.245.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adwNhhNHe8geO_lMeFaVIQAAAEU"]
[Mon Apr 13 05:24:27.509915 2026] [:error] [pid 33942:tid 33998] [client 20.104.245.70:27616] [client 20.104.245.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adwNixNHe8geO_lMeFaVKQAAAFM"]
[Mon Apr 13 06:38:12.611461 2026] [:error] [pid 33942:tid 33991] [client 20.151.248.149:45046] [client 20.151.248.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adwe1BNHe8geO_lMeFasBQAAAEw"]
[Mon Apr 13 06:38:13.023939 2026] [:error] [pid 34048:tid 34055] [client 20.151.248.149:45038] [client 20.151.248.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adwe1fSiQ_PJjlY5EhwC8gAAAMU"]
[Mon Apr 13 06:38:13.439149 2026] [:error] [pid 34048:tid 34064] [client 20.151.248.149:45002] [client 20.151.248.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adwe1fSiQ_PJjlY5EhwC9AAAAM4"]
[Mon Apr 13 06:38:13.853139 2026] [:error] [pid 33943:tid 34006] [client 20.151.248.149:45001] [client 20.151.248.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adwe1ayoXuZjocnxM5F-_QAAAIA"]
[Mon Apr 13 12:09:03.648826 2026] [proxy_fcgi:error] [pid 57183:tid 57188] [client 172.213.12.6:58397] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 12:09:03.885989 2026] [proxy_fcgi:error] [pid 57183:tid 57207] [client 172.213.12.6:58397] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 12:09:04.121611 2026] [proxy_fcgi:error] [pid 57183:tid 57191] [client 172.213.12.6:58397] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 12:09:04.356494 2026] [proxy_fcgi:error] [pid 57183:tid 57200] [client 172.213.12.6:58397] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 12:09:04.881314 2026] [proxy_fcgi:error] [pid 57183:tid 57198] [client 172.213.12.6:58397] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 12:09:05.138739 2026] [proxy_fcgi:error] [pid 57183:tid 57194] [client 172.213.12.6:58397] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 12:09:05.439438 2026] [proxy_fcgi:error] [pid 57183:tid 57189] [client 172.213.12.6:58397] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 12:09:05.832029 2026] [proxy_fcgi:error] [pid 57183:tid 57203] [client 172.213.12.6:58397] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 12:09:06.776030 2026] [proxy_fcgi:error] [pid 57183:tid 57206] [client 172.213.12.6:58397] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 12:09:07.350869 2026] [proxy_fcgi:error] [pid 57183:tid 57190] [client 172.213.12.6:58397] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 12:09:07.606451 2026] [:error] [pid 57183:tid 57197] [client 172.213.12.6:58397] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws60.php"] [unique_id "adxsYzDO3t8R5NaxzYQmugAAAUw"]
[Mon Apr 13 12:09:08.596498 2026] [:error] [pid 7228:tid 7241] [client 172.213.12.6:62943] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws60.php"] [unique_id "adxsZAEnn1dQrOSHHNWZUQAAAQs"]
[Mon Apr 13 12:09:09.865729 2026] [:error] [pid 63406:tid 63427] [client 172.213.12.6:32480] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws60.php"] [unique_id "adxsZbHZEIkQ0Zmgp5p0mgAAANA"]
[Mon Apr 13 12:09:11.224825 2026] [:error] [pid 63406:tid 63430] [client 172.213.12.6:2402] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws60.php"] [unique_id "adxsZ7HZEIkQ0Zmgp5p0oAAAANM"]
[Mon Apr 13 12:09:15.273877 2026] [:error] [pid 63406:tid 63424] [client 172.213.12.6:27585] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vanda.php"] [unique_id "adxsa7HZEIkQ0Zmgp5p0qwAAAM0"]
[Mon Apr 13 12:09:25.909962 2026] [:error] [pid 63310:tid 63358] [client 172.213.12.6:25039] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vanda.php"] [unique_id "adxsdXoXpRU5ztmwPjLtXgAAAE4"]
[Mon Apr 13 12:09:28.403626 2026] [:error] [pid 63309:tid 63332] [client 172.213.12.6:24277] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/domains.php"] [unique_id "adxseEpIKZ10weXpf0XNJQAAABM"]
[Mon Apr 13 12:09:39.783694 2026] [:error] [pid 7228:tid 7240] [client 172.213.12.6:24281] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/domains.php"] [unique_id "adxsgwEnn1dQrOSHHNWZdgAAAQo"]
[Mon Apr 13 12:09:41.101781 2026] [:error] [pid 63309:tid 63324] [client 172.213.12.6:34882] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/domains.php"] [unique_id "adxshUpIKZ10weXpf0XNKwAAAAs"]
[Mon Apr 13 12:09:49.884298 2026] [:error] [pid 57183:tid 57189] [client 172.213.12.6:20066] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/144.php"] [unique_id "adxsjTDO3t8R5NaxzYQm_wAAAUQ"]
[Mon Apr 13 12:09:51.515117 2026] [:error] [pid 57183:tid 57209] [client 172.213.12.6:29557] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/144.php"] [unique_id "adxsjzDO3t8R5NaxzYQnAwAAAVg"]
[Mon Apr 13 12:09:52.267316 2026] [:error] [pid 57183:tid 57202] [client 172.213.12.6:2309] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/144.php"] [unique_id "adxskDDO3t8R5NaxzYQnBQAAAVE"]
[Mon Apr 13 12:09:53.487165 2026] [:error] [pid 63311:tid 63375] [client 172.213.12.6:32413] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/144.php"] [unique_id "adxskaHjrGN1MqBCVFl8IAAAAIQ"]
[Mon Apr 13 12:09:55.238103 2026] [:error] [pid 57183:tid 57204] [client 172.213.12.6:29513] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/asd.php"] [unique_id "adxskzDO3t8R5NaxzYQnCgAAAVM"]
[Mon Apr 13 12:09:57.835817 2026] [:error] [pid 63406:tid 63411] [client 172.213.12.6:24989] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/asd.php"] [unique_id "adxslbHZEIkQ0Zmgp5p02AAAAMA"]
[Mon Apr 13 12:09:59.585915 2026] [:error] [pid 63406:tid 63414] [client 172.213.12.6:2094] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/asd.php"] [unique_id "adxsl7HZEIkQ0Zmgp5p03gAAAMM"]
[Mon Apr 13 12:10:00.822062 2026] [:error] [pid 63406:tid 63432] [client 172.213.12.6:57144] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/asd.php"] [unique_id "adxsmLHZEIkQ0Zmgp5p03wAAANU"]
[Mon Apr 13 12:10:01.529187 2026] [:error] [pid 63311:tid 63389] [client 172.213.12.6:2104] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zc-104.php"] [unique_id "adxsmaHjrGN1MqBCVFl8LAAAAJI"]
[Mon Apr 13 12:10:02.477811 2026] [:error] [pid 63406:tid 63434] [client 172.213.12.6:36702] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zc-104.php"] [unique_id "adxsmrHZEIkQ0Zmgp5p05QAAANc"]
[Mon Apr 13 12:10:06.391082 2026] [:error] [pid 7228:tid 7245] [client 172.213.12.6:2088] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zc-104.php"] [unique_id "adxsngEnn1dQrOSHHNWZogAAAQ8"]
[Mon Apr 13 12:10:09.383055 2026] [proxy_fcgi:error] [pid 7228:tid 7234] [client 172.213.12.6:59665] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 12:10:09.618939 2026] [proxy_fcgi:error] [pid 7228:tid 7240] [client 172.213.12.6:59665] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 12:10:09.852170 2026] [proxy_fcgi:error] [pid 7228:tid 7236] [client 172.213.12.6:59665] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 12:10:10.105333 2026] [proxy_fcgi:error] [pid 7228:tid 7239] [client 172.213.12.6:59665] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 12:10:10.360873 2026] [proxy_fcgi:error] [pid 7228:tid 7235] [client 172.213.12.6:59665] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 12:10:10.621392 2026] [proxy_fcgi:error] [pid 7228:tid 7250] [client 172.213.12.6:59665] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 12:10:11.411058 2026] [proxy_fcgi:error] [pid 7228:tid 7249] [client 172.213.12.6:59665] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 12:10:11.843320 2026] [proxy_fcgi:error] [pid 7228:tid 7237] [client 172.213.12.6:59665] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 12:10:12.325697 2026] [proxy_fcgi:error] [pid 7228:tid 7232] [client 172.213.12.6:59665] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 12:10:12.559873 2026] [proxy_fcgi:error] [pid 7228:tid 7244] [client 172.213.12.6:59665] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 12:10:12.808806 2026] [:error] [pid 7228:tid 7239] [client 172.213.12.6:59665] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "adxspAEnn1dQrOSHHNWZvQAAAQk"]
[Mon Apr 13 12:10:14.661474 2026] [:error] [pid 63406:tid 63425] [client 172.213.12.6:56725] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "adxsprHZEIkQ0Zmgp5p07wAAAM4"]
[Mon Apr 13 12:10:15.387784 2026] [:error] [pid 7228:tid 7249] [client 172.213.12.6:63622] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "adxspwEnn1dQrOSHHNWZvwAAARM"]
[Mon Apr 13 12:10:22.801678 2026] [:error] [pid 7228:tid 7248] [client 172.213.12.6:57816] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "adxsrgEnn1dQrOSHHNWZywAAARI"]
[Mon Apr 13 12:10:40.784320 2026] [:error] [pid 57183:tid 57187] [client 172.213.12.6:54178] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lm15.php"] [unique_id "adxswDDO3t8R5NaxzYQnUgAAAUI"]
[Mon Apr 13 12:10:42.836669 2026] [:error] [pid 63309:tid 63316] [client 172.213.12.6:2470] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lm15.php"] [unique_id "adxswkpIKZ10weXpf0XNWQAAAAM"]
[Mon Apr 13 12:10:44.668965 2026] [:error] [pid 63311:tid 63389] [client 172.213.12.6:21893] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lm15.php"] [unique_id "adxsxKHjrGN1MqBCVFl8SgAAAJI"]
[Mon Apr 13 12:10:45.798439 2026] [:error] [pid 57183:tid 57191] [client 172.213.12.6:54198] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lm15.php"] [unique_id "adxsxTDO3t8R5NaxzYQnWgAAAUY"]
[Mon Apr 13 12:11:01.138940 2026] [:error] [pid 7228:tid 7243] [client 172.213.12.6:18303] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/clss.php"] [unique_id "adxs1QEnn1dQrOSHHNWaHAAAAQ0"]
[Mon Apr 13 12:11:09.055233 2026] [:error] [pid 63309:tid 63325] [client 172.213.12.6:28872] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/44.php"] [unique_id "adxs3UpIKZ10weXpf0XNZQAAAAw"]
[Mon Apr 13 12:11:10.460344 2026] [:error] [pid 63406:tid 63434] [client 172.213.12.6:23703] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/44.php"] [unique_id "adxs3rHZEIkQ0Zmgp5p1QAAAANc"]
[Mon Apr 13 12:11:11.979155 2026] [:error] [pid 7228:tid 7238] [client 172.213.12.6:64070] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/44.php"] [unique_id "adxs3wEnn1dQrOSHHNWaLQAAAQg"]
[Mon Apr 13 12:11:15.112138 2026] [proxy_fcgi:error] [pid 57183:tid 57193] [client 172.213.12.6:28852] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 12:11:15.347448 2026] [proxy_fcgi:error] [pid 57183:tid 57206] [client 172.213.12.6:28852] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 12:11:15.615647 2026] [proxy_fcgi:error] [pid 57183:tid 57207] [client 172.213.12.6:28852] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 12:11:15.849933 2026] [proxy_fcgi:error] [pid 57183:tid 57204] [client 172.213.12.6:28852] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 12:11:16.085199 2026] [proxy_fcgi:error] [pid 57183:tid 57188] [client 172.213.12.6:28852] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 12:11:16.323588 2026] [proxy_fcgi:error] [pid 57183:tid 57196] [client 172.213.12.6:28852] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 12:11:16.802906 2026] [proxy_fcgi:error] [pid 57183:tid 57192] [client 172.213.12.6:28852] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 12:11:17.035332 2026] [proxy_fcgi:error] [pid 57183:tid 57205] [client 172.213.12.6:28852] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 12:11:17.269996 2026] [proxy_fcgi:error] [pid 57183:tid 57199] [client 172.213.12.6:28852] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 12:11:17.626878 2026] [proxy_fcgi:error] [pid 57183:tid 57209] [client 172.213.12.6:28852] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 12:11:17.881788 2026] [proxy_fcgi:error] [pid 57183:tid 57187] [client 172.213.12.6:28852] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 12:11:18.412779 2026] [:error] [pid 57183:tid 57201] [client 172.213.12.6:28852] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-blog-header.php"] [unique_id "adxs5jDO3t8R5NaxzYQnlgAAAVA"]
[Mon Apr 13 12:11:20.632598 2026] [:error] [pid 63406:tid 63421] [client 172.213.12.6:64081] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-blog-header.php"] [unique_id "adxs6LHZEIkQ0Zmgp5p1RwAAAMo"]
[Mon Apr 13 12:11:24.600410 2026] [:error] [pid 57183:tid 57194] [client 172.213.12.6:64637] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-blog-header.php"] [unique_id "adxs7DDO3t8R5NaxzYQnmwAAAUk"]
[Mon Apr 13 12:11:26.067338 2026] [:error] [pid 63406:tid 63434] [client 172.213.12.6:63572] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-blog-header.php"] [unique_id "adxs7rHZEIkQ0Zmgp5p1VgAAANc"]
[Mon Apr 13 12:11:27.432472 2026] [:error] [pid 63311:tid 63395] [client 172.213.12.6:54161] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bgymj.php"] [unique_id "adxs76HjrGN1MqBCVFl8eAAAAJg"]
[Mon Apr 13 12:11:28.935181 2026] [:error] [pid 63406:tid 63413] [client 172.213.12.6:28845] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bgymj.php"] [unique_id "adxs8LHZEIkQ0Zmgp5p1XAAAAMI"]
[Mon Apr 13 12:11:29.966743 2026] [:error] [pid 63311:tid 63372] [client 172.213.12.6:28856] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bgymj.php"] [unique_id "adxs8aHjrGN1MqBCVFl8gAAAAIE"]
[Mon Apr 13 12:11:31.820499 2026] [:error] [pid 7228:tid 7247] [client 172.213.12.6:52920] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bgymj.php"] [unique_id "adxs8wEnn1dQrOSHHNWaUAAAARE"]
[Mon Apr 13 12:11:36.274961 2026] [:error] [pid 7228:tid 7244] [client 172.213.12.6:52870] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gfd.php"] [unique_id "adxs-AEnn1dQrOSHHNWaYQAAAQ4"]
[Mon Apr 13 12:11:37.856663 2026] [:error] [pid 57183:tid 57196] [client 172.213.12.6:2492] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gfd.php"] [unique_id "adxs-TDO3t8R5NaxzYQnuwAAAUs"]
[Mon Apr 13 12:11:38.677527 2026] [:error] [pid 57183:tid 57202] [client 172.213.12.6:59585] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gfd.php"] [unique_id "adxs-jDO3t8R5NaxzYQnwAAAAVE"]
[Mon Apr 13 12:11:40.429561 2026] [:error] [pid 63309:tid 63335] [client 172.213.12.6:25849] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gfd.php"] [unique_id "adxs_EpIKZ10weXpf0XNfQAAABY"]
[Mon Apr 13 12:11:41.843461 2026] [:error] [pid 63406:tid 63419] [client 172.213.12.6:65172] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/callback.php"] [unique_id "adxs_bHZEIkQ0Zmgp5p1awAAAMg"]
[Mon Apr 13 12:11:42.762398 2026] [:error] [pid 57183:tid 57208] [client 172.213.12.6:59592] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/callback.php"] [unique_id "adxs_jDO3t8R5NaxzYQnzAAAAVc"]
[Mon Apr 13 12:11:45.568343 2026] [:error] [pid 63406:tid 63432] [client 172.213.12.6:28811] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/callback.php"] [unique_id "adxtAbHZEIkQ0Zmgp5p1cgAAANU"]
[Mon Apr 13 12:11:46.789770 2026] [:error] [pid 7228:tid 7231] [client 172.213.12.6:28800] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/callback.php"] [unique_id "adxtAgEnn1dQrOSHHNWaeAAAAQE"]
[Mon Apr 13 12:11:48.207821 2026] [:error] [pid 57183:tid 57205] [client 172.213.12.6:63567] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file.php"] [unique_id "adxtBDDO3t8R5NaxzYQn5QAAAVQ"]
[Mon Apr 13 12:11:49.062445 2026] [:error] [pid 63406:tid 63416] [client 172.213.12.6:64092] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file.php"] [unique_id "adxtBbHZEIkQ0Zmgp5p1eAAAAMU"]
[Mon Apr 13 12:11:50.598005 2026] [:error] [pid 57183:tid 57196] [client 172.213.12.6:58419] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file.php"] [unique_id "adxtBjDO3t8R5NaxzYQn7wAAAUs"]
[Mon Apr 13 12:11:56.058739 2026] [:error] [pid 63406:tid 63420] [client 172.213.12.6:65170] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file.php"] [unique_id "adxtDLHZEIkQ0Zmgp5p1hgAAAMk"]
[Mon Apr 13 12:12:00.068918 2026] [:error] [pid 63311:tid 63394] [client 172.213.12.6:44168] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bolt.php"] [unique_id "adxtEKHjrGN1MqBCVFl8kwAAAJc"]
[Mon Apr 13 12:12:03.273388 2026] [:error] [pid 57183:tid 57191] [client 172.213.12.6:63555] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bolt.php"] [unique_id "adxtEzDO3t8R5NaxzYQoEgAAAUY"]
[Mon Apr 13 12:12:04.422851 2026] [:error] [pid 63310:tid 63366] [client 172.213.12.6:44212] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bolt.php"] [unique_id "adxtFHoXpRU5ztmwPjLuDQAAAFY"]
[Mon Apr 13 12:12:05.907886 2026] [:error] [pid 57183:tid 57202] [client 172.213.12.6:28814] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bolt.php"] [unique_id "adxtFTDO3t8R5NaxzYQoHQAAAVE"]
[Mon Apr 13 12:12:07.002944 2026] [:error] [pid 63309:tid 63330] [client 172.213.12.6:58373] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-blogs.php"] [unique_id "adxtF0pIKZ10weXpf0XNgwAAABE"]
[Mon Apr 13 12:12:08.027840 2026] [:error] [pid 63311:tid 63373] [client 172.213.12.6:58401] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-blogs.php"] [unique_id "adxtGKHjrGN1MqBCVFl8mwAAAII"]
[Mon Apr 13 12:12:08.961932 2026] [:error] [pid 63406:tid 63421] [client 172.213.12.6:23707] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-blogs.php"] [unique_id "adxtGLHZEIkQ0Zmgp5p1oQAAAMo"]
[Mon Apr 13 12:12:10.949424 2026] [:error] [pid 63406:tid 63433] [client 172.213.12.6:28806] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-blogs.php"] [unique_id "adxtGrHZEIkQ0Zmgp5p1pAAAANY"]
[Mon Apr 13 12:12:11.826740 2026] [:error] [pid 7228:tid 7243] [client 172.213.12.6:25803] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zlnckdxn.php"] [unique_id "adxtGwEnn1dQrOSHHNWaqQAAAQ0"]
[Mon Apr 13 12:12:13.186728 2026] [:error] [pid 57183:tid 57209] [client 172.213.12.6:25801] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zlnckdxn.php"] [unique_id "adxtHTDO3t8R5NaxzYQoKQAAAVg"]
[Mon Apr 13 12:12:14.065440 2026] [:error] [pid 63406:tid 63417] [client 172.213.12.6:44207] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zlnckdxn.php"] [unique_id "adxtHrHZEIkQ0Zmgp5p1qQAAAMY"]
[Mon Apr 13 12:12:15.423902 2026] [:error] [pid 63406:tid 63413] [client 172.213.12.6:43714] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zlnckdxn.php"] [unique_id "adxtH7HZEIkQ0Zmgp5p1rwAAAMI"]
[Mon Apr 13 12:12:18.812072 2026] [proxy_fcgi:error] [pid 57183:tid 57206] [client 172.213.12.6:58431] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 12:12:19.044997 2026] [proxy_fcgi:error] [pid 57183:tid 57198] [client 172.213.12.6:58431] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 12:12:19.519577 2026] [proxy_fcgi:error] [pid 57183:tid 57197] [client 172.213.12.6:58431] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 12:12:19.752848 2026] [proxy_fcgi:error] [pid 57183:tid 57188] [client 172.213.12.6:58431] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 12:12:20.005603 2026] [proxy_fcgi:error] [pid 57183:tid 57209] [client 172.213.12.6:58431] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 12:12:20.328379 2026] [proxy_fcgi:error] [pid 57183:tid 57196] [client 172.213.12.6:58431] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 12:12:20.563821 2026] [proxy_fcgi:error] [pid 57183:tid 57205] [client 172.213.12.6:58431] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 12:12:20.801505 2026] [proxy_fcgi:error] [pid 57183:tid 57187] [client 172.213.12.6:58431] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 12:12:21.056251 2026] [proxy_fcgi:error] [pid 57183:tid 57194] [client 172.213.12.6:58431] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 12:12:21.290719 2026] [proxy_fcgi:error] [pid 57183:tid 57190] [client 172.213.12.6:58431] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 12:12:21.521015 2026] [:error] [pid 57183:tid 57193] [client 172.213.12.6:58431] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/redixsx.php"] [unique_id "adxtJTDO3t8R5NaxzYQoQQAAAUg"]
[Mon Apr 13 12:12:23.785180 2026] [:error] [pid 7228:tid 7232] [client 172.213.12.6:25853] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/redixsx.php"] [unique_id "adxtJwEnn1dQrOSHHNWazQAAAQI"]
[Mon Apr 13 12:12:26.028422 2026] [:error] [pid 7228:tid 7243] [client 172.213.12.6:58424] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/redixsx.php"] [unique_id "adxtKgEnn1dQrOSHHNWa1wAAAQ0"]
[Mon Apr 13 12:12:31.847312 2026] [:error] [pid 63311:tid 63373] [client 172.213.12.6:21965] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/redixsx.php"] [unique_id "adxtL6HjrGN1MqBCVFl8qgAAAII"]
[Mon Apr 13 12:12:37.571845 2026] [:error] [pid 63309:tid 63331] [client 172.213.12.6:44188] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cpp2.php"] [unique_id "adxtNUpIKZ10weXpf0XNiwAAABI"]
[Mon Apr 13 12:12:41.597091 2026] [:error] [pid 63309:tid 63326] [client 172.213.12.6:49121] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cpp2.php"] [unique_id "adxtOUpIKZ10weXpf0XNjQAAAA0"]
[Mon Apr 13 12:12:43.221612 2026] [:error] [pid 7228:tid 7245] [client 172.213.12.6:49106] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cpp2.php"] [unique_id "adxtOwEnn1dQrOSHHNWbGAAAAQ8"]
[Mon Apr 13 12:12:46.148429 2026] [:error] [pid 57183:tid 57194] [client 172.213.12.6:43734] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cpp2.php"] [unique_id "adxtPjDO3t8R5NaxzYQoVgAAAUk"]
[Mon Apr 13 12:12:48.315326 2026] [:error] [pid 57183:tid 57186] [client 172.213.12.6:48467] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admlo.php"] [unique_id "adxtQDDO3t8R5NaxzYQoWgAAAUE"]
[Mon Apr 13 12:12:50.168041 2026] [:error] [pid 57183:tid 57204] [client 172.213.12.6:23710] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admlo.php"] [unique_id "adxtQjDO3t8R5NaxzYQoXQAAAVM"]
[Mon Apr 13 12:12:51.645027 2026] [:error] [pid 63311:tid 63378] [client 172.213.12.6:62581] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admlo.php"] [unique_id "adxtQ6HjrGN1MqBCVFl8tgAAAIc"]
[Mon Apr 13 12:12:53.428916 2026] [:error] [pid 7228:tid 7251] [client 172.213.12.6:2942] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admlo.php"] [unique_id "adxtRQEnn1dQrOSHHNWbkAAAARU"]
[Mon Apr 13 12:12:55.577409 2026] [:error] [pid 7228:tid 7230] [client 172.213.12.6:48451] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin-ajax.php"] [unique_id "adxtRwEnn1dQrOSHHNWblgAAAQA"]
[Mon Apr 13 12:12:57.052402 2026] [:error] [pid 7228:tid 7244] [client 172.213.12.6:2888] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin-ajax.php"] [unique_id "adxtSQEnn1dQrOSHHNWbmQAAAQ4"]
[Mon Apr 13 12:12:59.543798 2026] [:error] [pid 7228:tid 7251] [client 172.213.12.6:30303] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin-ajax.php"] [unique_id "adxtSwEnn1dQrOSHHNWbnwAAARU"]
[Mon Apr 13 12:13:01.092868 2026] [:error] [pid 7228:tid 7233] [client 172.213.12.6:36625] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin-ajax.php"] [unique_id "adxtTQEnn1dQrOSHHNWbpwAAAQM"]
[Mon Apr 13 12:13:02.445027 2026] [:error] [pid 7228:tid 7251] [client 172.213.12.6:32961] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/amthd.php"] [unique_id "adxtTgEnn1dQrOSHHNWbqgAAARU"]
[Mon Apr 13 12:13:03.622076 2026] [:error] [pid 63310:tid 63364] [client 172.213.12.6:50319] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/amthd.php"] [unique_id "adxtT3oXpRU5ztmwPjLuKAAAAFQ"]
[Mon Apr 13 12:13:16.958934 2026] [:error] [pid 7228:tid 7242] [client 172.213.12.6:31133] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/amthd.php"] [unique_id "adxtXAEnn1dQrOSHHNWcJQAAAQw"]
[Mon Apr 13 12:13:20.477964 2026] [:error] [pid 63311:tid 63371] [client 172.213.12.6:45960] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/8xyz.php"] [unique_id "adxtYKHjrGN1MqBCVFl8zgAAAIA"]
[Mon Apr 13 12:13:21.744503 2026] [proxy_fcgi:error] [pid 63311:tid 63395] [client 172.213.12.6:56688] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 12:13:22.310356 2026] [proxy_fcgi:error] [pid 63311:tid 63375] [client 172.213.12.6:56688] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 12:13:22.543032 2026] [proxy_fcgi:error] [pid 63311:tid 63382] [client 172.213.12.6:56688] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 12:13:22.870904 2026] [proxy_fcgi:error] [pid 63311:tid 63391] [client 172.213.12.6:56688] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 12:13:23.104252 2026] [proxy_fcgi:error] [pid 63311:tid 63378] [client 172.213.12.6:56688] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 12:13:23.338077 2026] [proxy_fcgi:error] [pid 63311:tid 63389] [client 172.213.12.6:56688] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 12:13:23.592702 2026] [proxy_fcgi:error] [pid 63311:tid 63385] [client 172.213.12.6:56688] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 12:13:23.859608 2026] [proxy_fcgi:error] [pid 63311:tid 63393] [client 172.213.12.6:56688] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 12:13:24.112565 2026] [proxy_fcgi:error] [pid 63311:tid 63387] [client 172.213.12.6:56688] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 12:13:24.511670 2026] [proxy_fcgi:error] [pid 63311:tid 63386] [client 172.213.12.6:56688] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 12:13:24.743737 2026] [proxy_fcgi:error] [pid 63311:tid 63380] [client 172.213.12.6:56688] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 12:13:24.972569 2026] [:error] [pid 63311:tid 63388] [client 172.213.12.6:56688] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/autoxxi.php"] [unique_id "adxtZKHjrGN1MqBCVFl83wAAAJE"]
[Mon Apr 13 12:13:26.687732 2026] [:error] [pid 63311:tid 63383] [client 172.213.12.6:24221] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/autoxxi.php"] [unique_id "adxtZqHjrGN1MqBCVFl84gAAAIw"]
[Mon Apr 13 12:13:27.403367 2026] [:error] [pid 63310:tid 63368] [client 172.213.12.6:54831] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/autoxxi.php"] [unique_id "adxtZ3oXpRU5ztmwPjLuMwAAAFg"]
[Mon Apr 13 12:13:29.948996 2026] [:error] [pid 57183:tid 57185] [client 172.213.12.6:20949] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/autoxxi.php"] [unique_id "adxtaTDO3t8R5NaxzYQoqAAAAUA"]
[Mon Apr 13 12:13:32.021815 2026] [:error] [pid 63406:tid 63434] [client 172.213.12.6:51671] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/1144452145_error_log.php"] [unique_id "adxtbLHZEIkQ0Zmgp5p18AAAANc"]
[Mon Apr 13 12:13:32.881589 2026] [:error] [pid 7228:tid 7230] [client 172.213.12.6:17941] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/1144452145_error_log.php"] [unique_id "adxtbAEnn1dQrOSHHNWcPgAAAQA"]
[Mon Apr 13 12:13:34.953535 2026] [:error] [pid 57183:tid 57197] [client 172.213.12.6:58316] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/1144452145_error_log.php"] [unique_id "adxtbjDO3t8R5NaxzYQouAAAAUw"]
[Mon Apr 13 12:13:35.815662 2026] [:error] [pid 7228:tid 7240] [client 172.213.12.6:57869] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/1144452145_error_log.php"] [unique_id "adxtbwEnn1dQrOSHHNWcRQAAAQo"]
[Mon Apr 13 12:13:37.230684 2026] [:error] [pid 63310:tid 63368] [client 172.213.12.6:58344] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws48.php"] [unique_id "adxtcXoXpRU5ztmwPjLuPQAAAFg"]
[Mon Apr 13 12:13:56.095717 2026] [:error] [pid 57183:tid 57186] [client 172.213.12.6:35342] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-asyn-upload.php"] [unique_id "adxthDDO3t8R5NaxzYQo2gAAAUE"]
[Mon Apr 13 12:13:58.855324 2026] [:error] [pid 7228:tid 7234] [client 172.213.12.6:17990] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-asyn-upload.php"] [unique_id "adxthgEnn1dQrOSHHNWcjQAAAQQ"]
[Mon Apr 13 12:14:01.766828 2026] [:error] [pid 63406:tid 63417] [client 172.213.12.6:18652] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-asyn-upload.php"] [unique_id "adxtibHZEIkQ0Zmgp5p2DAAAAMY"]
[Mon Apr 13 12:14:03.500200 2026] [:error] [pid 63311:tid 63374] [client 172.213.12.6:33609] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-asyn-upload.php"] [unique_id "adxti6HjrGN1MqBCVFl8_gAAAIM"]
[Mon Apr 13 12:14:06.521043 2026] [:error] [pid 63311:tid 63390] [client 172.213.12.6:33537] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/schallfuns.php"] [unique_id "adxtjqHjrGN1MqBCVFl9AQAAAJM"]
[Mon Apr 13 12:14:09.538905 2026] [:error] [pid 63406:tid 63417] [client 172.213.12.6:64690] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/schallfuns.php"] [unique_id "adxtkbHZEIkQ0Zmgp5p2MQAAAMY"]
[Mon Apr 13 12:14:12.247943 2026] [:error] [pid 7228:tid 7240] [client 172.213.12.6:2232] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/schallfuns.php"] [unique_id "adxtlAEnn1dQrOSHHNWc5gAAAQo"]
[Mon Apr 13 12:14:14.481761 2026] [:error] [pid 57183:tid 57185] [client 172.213.12.6:48528] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/schallfuns.php"] [unique_id "adxtljDO3t8R5NaxzYQpAwAAAUA"]
[Mon Apr 13 12:14:15.664300 2026] [:error] [pid 63309:tid 63318] [client 172.213.12.6:52077] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/CDX1.php"] [unique_id "adxtl0pIKZ10weXpf0XN3gAAAAU"]
[Mon Apr 13 12:14:17.143992 2026] [:error] [pid 57183:tid 57187] [client 172.213.12.6:36726] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/CDX1.php"] [unique_id "adxtmTDO3t8R5NaxzYQpCAAAAUI"]
[Mon Apr 13 12:14:19.948962 2026] [:error] [pid 57183:tid 57198] [client 172.213.12.6:36707] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/CDX1.php"] [unique_id "adxtmzDO3t8R5NaxzYQpEwAAAU0"]
[Mon Apr 13 12:14:21.373338 2026] [:error] [pid 7228:tid 7238] [client 172.213.12.6:36022] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/CDX1.php"] [unique_id "adxtnQEnn1dQrOSHHNWc7wAAAQg"]
[Mon Apr 13 12:14:22.715629 2026] [:error] [pid 7228:tid 7231] [client 172.213.12.6:32415] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/clasa99.php"] [unique_id "adxtngEnn1dQrOSHHNWc9QAAAQE"]
[Mon Apr 13 12:14:24.316432 2026] [proxy_fcgi:error] [pid 63311:tid 63386] [client 172.213.12.6:19264] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 12:14:24.578687 2026] [proxy_fcgi:error] [pid 63311:tid 63380] [client 172.213.12.6:19264] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 12:14:24.809968 2026] [proxy_fcgi:error] [pid 63311:tid 63382] [client 172.213.12.6:19264] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 12:14:25.153636 2026] [proxy_fcgi:error] [pid 63311:tid 63379] [client 172.213.12.6:19264] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 12:14:25.407773 2026] [proxy_fcgi:error] [pid 63311:tid 63371] [client 172.213.12.6:19264] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 12:14:25.639988 2026] [proxy_fcgi:error] [pid 63311:tid 63391] [client 172.213.12.6:19264] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 12:14:25.883510 2026] [proxy_fcgi:error] [pid 63311:tid 63373] [client 172.213.12.6:19264] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 12:14:26.138013 2026] [proxy_fcgi:error] [pid 63311:tid 63394] [client 172.213.12.6:19264] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 12:14:26.371990 2026] [proxy_fcgi:error] [pid 63311:tid 63374] [client 172.213.12.6:19264] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 12:14:27.138014 2026] [proxy_fcgi:error] [pid 63311:tid 63381] [client 172.213.12.6:19264] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 12:14:27.373061 2026] [:error] [pid 63311:tid 63375] [client 172.213.12.6:19264] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/new.php"] [unique_id "adxto6HjrGN1MqBCVFl9GwAAAIQ"]
[Mon Apr 13 12:14:31.472607 2026] [:error] [pid 7228:tid 7249] [client 172.213.12.6:2424] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/new.php"] [unique_id "adxtpwEnn1dQrOSHHNWdAwAAARM"]
[Mon Apr 13 12:14:33.196936 2026] [:error] [pid 7228:tid 7243] [client 172.213.12.6:52234] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/new.php"] [unique_id "adxtqQEnn1dQrOSHHNWdDgAAAQ0"]
[Mon Apr 13 12:14:37.034775 2026] [:error] [pid 63309:tid 63322] [client 172.213.12.6:29539] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/new.php"] [unique_id "adxtrUpIKZ10weXpf0XODAAAAAk"]
[Mon Apr 13 12:14:38.394643 2026] [:error] [pid 63310:tid 63362] [client 172.213.12.6:20087] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/press.php"] [unique_id "adxtrnoXpRU5ztmwPjLuZQAAAFI"]
[Mon Apr 13 12:14:40.599794 2026] [:error] [pid 7228:tid 7236] [client 172.213.12.6:20092] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/press.php"] [unique_id "adxtsAEnn1dQrOSHHNWdFAAAAQY"]
[Mon Apr 13 12:14:43.249789 2026] [:error] [pid 63310:tid 63351] [client 172.213.12.6:47992] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/press.php"] [unique_id "adxts3oXpRU5ztmwPjLubAAAAEc"]
[Mon Apr 13 12:14:47.086253 2026] [:error] [pid 57183:tid 57196] [client 172.213.12.6:49654] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/press.php"] [unique_id "adxttzDO3t8R5NaxzYQpagAAAUs"]
[Mon Apr 13 12:14:49.016882 2026] [:error] [pid 7228:tid 7251] [client 172.213.12.6:26320] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file-mancvgertdxz.php"] [unique_id "adxtuQEnn1dQrOSHHNWdJgAAARU"]
[Mon Apr 13 12:14:52.680358 2026] [:error] [pid 63406:tid 63414] [client 172.213.12.6:49651] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file-mancvgertdxz.php"] [unique_id "adxtvLHZEIkQ0Zmgp5p2ugAAAMM"]
[Mon Apr 13 12:14:54.292359 2026] [:error] [pid 7228:tid 7234] [client 172.213.12.6:20070] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file-mancvgertdxz.php"] [unique_id "adxtvgEnn1dQrOSHHNWdMgAAAQQ"]
[Mon Apr 13 12:14:56.307443 2026] [:error] [pid 63406:tid 63435] [client 172.213.12.6:47953] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file-mancvgertdxz.php"] [unique_id "adxtwLHZEIkQ0Zmgp5p2vgAAANg"]
[Mon Apr 13 12:15:03.994587 2026] [:error] [pid 57183:tid 57188] [client 172.213.12.6:20085] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "adxtxzDO3t8R5NaxzYQphAAAAUM"]
[Mon Apr 13 12:15:05.978163 2026] [:error] [pid 63311:tid 63376] [client 172.213.12.6:26331] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "adxtyaHjrGN1MqBCVFl9QQAAAIU"]
[Mon Apr 13 12:15:11.634248 2026] [:error] [pid 63310:tid 63349] [client 172.213.12.6:60334] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "adxtz3oXpRU5ztmwPjLukwAAAEU"]
[Mon Apr 13 12:15:15.027148 2026] [:error] [pid 63406:tid 63417] [client 172.213.12.6:64166] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws57.php"] [unique_id "adxt07HZEIkQ0Zmgp5p3AgAAAMY"]
[Mon Apr 13 12:15:16.483941 2026] [:error] [pid 57183:tid 57196] [client 172.213.12.6:64171] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws57.php"] [unique_id "adxt1DDO3t8R5NaxzYQpqgAAAUs"]
[Mon Apr 13 12:15:17.868361 2026] [:error] [pid 63311:tid 63392] [client 172.213.12.6:60315] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws57.php"] [unique_id "adxt1aHjrGN1MqBCVFl9XQAAAJU"]
[Mon Apr 13 12:15:20.652579 2026] [:error] [pid 63406:tid 63421] [client 172.213.12.6:29531] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws57.php"] [unique_id "adxt2LHZEIkQ0Zmgp5p3FAAAAMo"]
[Mon Apr 13 12:15:22.477029 2026] [:error] [pid 57183:tid 57187] [client 172.213.12.6:47406] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.qiodetme.php"] [unique_id "adxt2jDO3t8R5NaxzYQpyQAAAUI"]
[Mon Apr 13 12:15:28.043903 2026] [proxy_fcgi:error] [pid 63311:tid 63371] [client 172.213.12.6:47417] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 12:15:28.795907 2026] [proxy_fcgi:error] [pid 63311:tid 63376] [client 172.213.12.6:47417] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 12:15:29.078623 2026] [proxy_fcgi:error] [pid 63311:tid 63386] [client 172.213.12.6:47417] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 12:15:30.654512 2026] [proxy_fcgi:error] [pid 63311:tid 63387] [client 172.213.12.6:47417] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 12:15:31.234797 2026] [proxy_fcgi:error] [pid 63311:tid 63385] [client 172.213.12.6:47417] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 12:15:31.470451 2026] [proxy_fcgi:error] [pid 63311:tid 63380] [client 172.213.12.6:47417] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 12:15:31.705558 2026] [proxy_fcgi:error] [pid 63311:tid 63379] [client 172.213.12.6:47417] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 12:15:32.147970 2026] [proxy_fcgi:error] [pid 63311:tid 63384] [client 172.213.12.6:47417] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 12:15:32.641425 2026] [proxy_fcgi:error] [pid 63311:tid 63394] [client 172.213.12.6:47417] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 12:15:32.877294 2026] [proxy_fcgi:error] [pid 63311:tid 63395] [client 172.213.12.6:47417] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 12:15:33.112973 2026] [proxy_fcgi:error] [pid 63311:tid 63378] [client 172.213.12.6:47417] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 12:15:33.353862 2026] [:error] [pid 63311:tid 63392] [client 172.213.12.6:47417] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws83.php"] [unique_id "adxt5aHjrGN1MqBCVFl9bgAAAJU"]
[Mon Apr 13 12:15:34.992173 2026] [:error] [pid 7228:tid 7235] [client 172.213.12.6:18229] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws83.php"] [unique_id "adxt5gEnn1dQrOSHHNWd2wAAAQU"]
[Mon Apr 13 12:15:36.230134 2026] [:error] [pid 63310:tid 63364] [client 172.213.12.6:2425] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws83.php"] [unique_id "adxt6HoXpRU5ztmwPjLuqQAAAFQ"]
[Mon Apr 13 12:15:44.199857 2026] [:error] [pid 63309:tid 63337] [client 172.213.12.6:26357] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws83.php"] [unique_id "adxt8EpIKZ10weXpf0XOWQAAABg"]
[Mon Apr 13 12:15:46.234275 2026] [:error] [pid 57183:tid 57207] [client 172.213.12.6:2363] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws75.php"] [unique_id "adxt8jDO3t8R5NaxzYQp_QAAAVY"]
[Mon Apr 13 12:15:50.277908 2026] [:error] [pid 7228:tid 7237] [client 172.213.12.6:2336] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws75.php"] [unique_id "adxt9gEnn1dQrOSHHNWd_gAAAQc"]
[Mon Apr 13 12:15:51.608465 2026] [:error] [pid 63406:tid 63422] [client 172.213.12.6:49616] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws75.php"] [unique_id "adxt97HZEIkQ0Zmgp5p3TQAAAMs"]
[Mon Apr 13 12:15:53.804526 2026] [:error] [pid 57183:tid 57187] [client 172.213.12.6:2539] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws75.php"] [unique_id "adxt-TDO3t8R5NaxzYQqFwAAAUI"]
[Mon Apr 13 12:15:55.197572 2026] [:error] [pid 57183:tid 57193] [client 172.213.12.6:2978] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ms-edit.php"] [unique_id "adxt-zDO3t8R5NaxzYQqHgAAAUg"]
[Mon Apr 13 12:15:56.492655 2026] [:error] [pid 57183:tid 57185] [client 172.213.12.6:18217] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ms-edit.php"] [unique_id "adxt_DDO3t8R5NaxzYQqJQAAAUA"]
[Mon Apr 13 12:15:58.861764 2026] [:error] [pid 57183:tid 57200] [client 172.213.12.6:21890] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ms-edit.php"] [unique_id "adxt_jDO3t8R5NaxzYQqLwAAAU8"]
[Mon Apr 13 12:16:02.039706 2026] [:error] [pid 7228:tid 7240] [client 172.213.12.6:38009] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ms-edit.php"] [unique_id "adxuAgEnn1dQrOSHHNWeEgAAAQo"]
[Mon Apr 13 12:16:04.075039 2026] [:error] [pid 63309:tid 63325] [client 172.213.12.6:61342] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/abc.php"] [unique_id "adxuBEpIKZ10weXpf0XOZAAAAAw"]
[Mon Apr 13 12:16:07.837427 2026] [:error] [pid 57183:tid 57195] [client 172.213.12.6:2102] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/abc.php"] [unique_id "adxuBzDO3t8R5NaxzYQqPQAAAUo"]
[Mon Apr 13 12:16:09.172318 2026] [:error] [pid 63310:tid 63346] [client 172.213.12.6:21905] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/abc.php"] [unique_id "adxuCXoXpRU5ztmwPjLuuAAAAEI"]
[Mon Apr 13 12:16:11.310149 2026] [:error] [pid 63309:tid 63313] [client 172.213.12.6:2068] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/abc.php"] [unique_id "adxuC0pIKZ10weXpf0XOdwAAAAA"]
[Mon Apr 13 12:16:13.751617 2026] [:error] [pid 7228:tid 7251] [client 172.213.12.6:37249] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/motu.php"] [unique_id "adxuDQEnn1dQrOSHHNWeVwAAARU"]
[Mon Apr 13 12:16:19.089996 2026] [:error] [pid 7228:tid 7250] [client 172.213.12.6:61366] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/motu.php"] [unique_id "adxuEwEnn1dQrOSHHNWeaAAAARQ"]
[Mon Apr 13 12:16:26.079345 2026] [:error] [pid 63406:tid 63429] [client 172.213.12.6:56720] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/motu.php"] [unique_id "adxuGrHZEIkQ0Zmgp5p3hAAAANI"]
[Mon Apr 13 12:16:29.062669 2026] [:error] [pid 63406:tid 63428] [client 172.213.12.6:18274] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/inputs.php"] [unique_id "adxuHbHZEIkQ0Zmgp5p3hgAAANE"]
[Mon Apr 13 12:16:33.707617 2026] [proxy_fcgi:error] [pid 63406:tid 63428] [client 172.213.12.6:18258] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 12:16:33.962292 2026] [proxy_fcgi:error] [pid 63406:tid 63418] [client 172.213.12.6:18258] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 12:16:35.776391 2026] [proxy_fcgi:error] [pid 63406:tid 63421] [client 172.213.12.6:18258] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 12:16:36.010150 2026] [proxy_fcgi:error] [pid 63406:tid 63414] [client 172.213.12.6:18258] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 12:16:36.244824 2026] [proxy_fcgi:error] [pid 63406:tid 63415] [client 172.213.12.6:18258] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 12:16:36.492420 2026] [proxy_fcgi:error] [pid 63406:tid 63426] [client 172.213.12.6:18258] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 12:16:36.985321 2026] [proxy_fcgi:error] [pid 63406:tid 63431] [client 172.213.12.6:18258] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 12:16:37.475213 2026] [proxy_fcgi:error] [pid 63406:tid 63412] [client 172.213.12.6:18258] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 12:16:37.707857 2026] [:error] [pid 63406:tid 63432] [client 172.213.12.6:18258] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-good.php"] [unique_id "adxuJbHZEIkQ0Zmgp5p3pwAAANU"]
[Mon Apr 13 12:16:42.589031 2026] [:error] [pid 7228:tid 7240] [client 172.213.12.6:27555] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-good.php"] [unique_id "adxuKgEnn1dQrOSHHNWezQAAAQo"]
[Mon Apr 13 12:16:45.147066 2026] [:error] [pid 7228:tid 7250] [client 172.213.12.6:60841] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-good.php"] [unique_id "adxuLQEnn1dQrOSHHNWe1gAAARQ"]
[Mon Apr 13 12:16:48.241910 2026] [:error] [pid 57183:tid 57201] [client 172.213.12.6:60815] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-good.php"] [unique_id "adxuMDDO3t8R5NaxzYQqhgAAAVA"]
[Mon Apr 13 12:16:53.785991 2026] [:error] [pid 63406:tid 63419] [client 172.213.12.6:27538] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a5.php"] [unique_id "adxuNbHZEIkQ0Zmgp5p3xAAAAMg"]
[Mon Apr 13 12:16:57.519354 2026] [:error] [pid 63311:tid 63390] [client 172.213.12.6:60837] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a5.php"] [unique_id "adxuOaHjrGN1MqBCVFl94wAAAJM"]
[Mon Apr 13 12:16:58.692273 2026] [:error] [pid 63311:tid 63376] [client 172.213.12.6:29458] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a5.php"] [unique_id "adxuOqHjrGN1MqBCVFl96AAAAIU"]
[Mon Apr 13 12:17:00.607350 2026] [:error] [pid 63311:tid 63395] [client 172.213.12.6:63569] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a5.php"] [unique_id "adxuPKHjrGN1MqBCVFl96wAAAJg"]
[Mon Apr 13 12:17:02.356314 2026] [:error] [pid 7228:tid 7248] [client 172.213.12.6:64599] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/amp.php"] [unique_id "adxuPgEnn1dQrOSHHNWe5AAAARI"]
[Mon Apr 13 12:17:03.380761 2026] [:error] [pid 63310:tid 63346] [client 172.213.12.6:25745] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/amp.php"] [unique_id "adxuP3oXpRU5ztmwPjLuywAAAEI"]
[Mon Apr 13 12:17:05.394784 2026] [:error] [pid 63309:tid 63318] [client 172.213.12.6:48015] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/amp.php"] [unique_id "adxuQUpIKZ10weXpf0XOrAAAAAU"]
[Mon Apr 13 12:17:08.442243 2026] [:error] [pid 63311:tid 63395] [client 172.213.12.6:62576] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/amp.php"] [unique_id "adxuRKHjrGN1MqBCVFl-BAAAAJg"]
[Mon Apr 13 12:17:10.671294 2026] [:error] [pid 63406:tid 63434] [client 172.213.12.6:48038] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/abrand.php"] [unique_id "adxuRrHZEIkQ0Zmgp5p30QAAANc"]
[Mon Apr 13 12:17:11.484222 2026] [:error] [pid 63310:tid 63366] [client 172.213.12.6:48049] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/abrand.php"] [unique_id "adxuR3oXpRU5ztmwPjLu3gAAAFY"]
[Mon Apr 13 12:17:12.596769 2026] [:error] [pid 63311:tid 63386] [client 172.213.12.6:22500] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/abrand.php"] [unique_id "adxuSKHjrGN1MqBCVFl-CAAAAI8"]
[Mon Apr 13 12:17:14.455564 2026] [:error] [pid 57183:tid 57194] [client 172.213.12.6:50341] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/abrand.php"] [unique_id "adxuSjDO3t8R5NaxzYQq0QAAAUk"]
[Mon Apr 13 12:17:18.387729 2026] [:error] [pid 7228:tid 7238] [client 172.213.12.6:46725] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/init.php"] [unique_id "adxuTgEnn1dQrOSHHNWfiAAAAQg"]
[Mon Apr 13 12:17:20.765682 2026] [:error] [pid 63311:tid 63383] [client 172.213.12.6:23145] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/init.php"] [unique_id "adxuUKHjrGN1MqBCVFl-FgAAAIw"]
[Mon Apr 13 12:17:22.316600 2026] [:error] [pid 7228:tid 7240] [client 172.213.12.6:46296] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/init.php"] [unique_id "adxuUgEnn1dQrOSHHNWfkQAAAQo"]
[Mon Apr 13 12:17:28.207314 2026] [:error] [pid 7228:tid 7230] [client 172.213.12.6:20009] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/init.php"] [unique_id "adxuWAEnn1dQrOSHHNWfnAAAAQA"]
[Mon Apr 13 12:17:29.990434 2026] [:error] [pid 63309:tid 63334] [client 172.213.12.6:2849] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gettest.php"] [unique_id "adxuWUpIKZ10weXpf0XOvgAAABU"]
[Mon Apr 13 12:17:41.586324 2026] [proxy_fcgi:error] [pid 7228:tid 7242] [client 172.213.12.6:56643] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 12:17:41.956649 2026] [proxy_fcgi:error] [pid 7228:tid 7254] [client 172.213.12.6:56643] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 12:17:42.190907 2026] [proxy_fcgi:error] [pid 7228:tid 7247] [client 172.213.12.6:56643] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 12:17:42.446105 2026] [proxy_fcgi:error] [pid 7228:tid 7231] [client 172.213.12.6:56643] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 12:17:42.694007 2026] [proxy_fcgi:error] [pid 7228:tid 7237] [client 172.213.12.6:56643] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 12:17:42.926913 2026] [proxy_fcgi:error] [pid 7228:tid 7232] [client 172.213.12.6:56643] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 12:17:43.171480 2026] [proxy_fcgi:error] [pid 7228:tid 7235] [client 172.213.12.6:56643] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 12:17:43.419016 2026] [proxy_fcgi:error] [pid 7228:tid 7234] [client 172.213.12.6:56643] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 12:17:43.897879 2026] [proxy_fcgi:error] [pid 7228:tid 7241] [client 172.213.12.6:56643] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 12:17:44.148591 2026] [proxy_fcgi:error] [pid 7228:tid 7231] [client 172.213.12.6:56643] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 12:17:44.398983 2026] [:error] [pid 7228:tid 7237] [client 172.213.12.6:56643] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ioxi-o.php"] [unique_id "adxuaAEnn1dQrOSHHNWgPwAAAQc"]
[Mon Apr 13 12:17:47.841083 2026] [:error] [pid 7228:tid 7247] [client 172.213.12.6:44213] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ioxi-o.php"] [unique_id "adxuawEnn1dQrOSHHNWgbgAAARE"]
[Mon Apr 13 12:17:53.162426 2026] [:error] [pid 63406:tid 63422] [client 172.213.12.6:45960] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ioxi-o.php"] [unique_id "adxucbHZEIkQ0Zmgp5p4DQAAAMs"]
[Mon Apr 13 12:17:54.290179 2026] [:error] [pid 63309:tid 63329] [client 172.213.12.6:43718] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ioxi-o.php"] [unique_id "adxuckpIKZ10weXpf0XOxQAAABA"]
[Mon Apr 13 12:17:55.475423 2026] [:error] [pid 63311:tid 63373] [client 172.213.12.6:49184] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ajax.php"] [unique_id "adxuc6HjrGN1MqBCVFl-KgAAAII"]
[Mon Apr 13 12:17:56.371032 2026] [:error] [pid 57183:tid 57199] [client 172.213.12.6:49160] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ajax.php"] [unique_id "adxudDDO3t8R5NaxzYQrGQAAAU4"]
[Mon Apr 13 12:17:57.156078 2026] [:error] [pid 63406:tid 63425] [client 172.213.12.6:54151] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ajax.php"] [unique_id "adxudbHZEIkQ0Zmgp5p4EQAAAM4"]
[Mon Apr 13 12:17:58.671660 2026] [:error] [pid 63406:tid 63435] [client 172.213.12.6:54205] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ajax.php"] [unique_id "adxudrHZEIkQ0Zmgp5p4FAAAANg"]
[Mon Apr 13 12:18:00.272905 2026] [:error] [pid 57183:tid 57188] [client 172.213.12.6:45993] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/install.php"] [unique_id "adxueDDO3t8R5NaxzYQrIwAAAUM"]
[Mon Apr 13 12:18:01.966711 2026] [:error] [pid 63406:tid 63423] [client 172.213.12.6:43753] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/install.php"] [unique_id "adxuebHZEIkQ0Zmgp5p4IQAAAMw"]
[Mon Apr 13 12:18:04.301943 2026] [:error] [pid 7228:tid 7239] [client 172.213.12.6:22412] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/install.php"] [unique_id "adxufAEnn1dQrOSHHNWglAAAAQk"]
[Mon Apr 13 12:18:05.935312 2026] [:error] [pid 63311:tid 63388] [client 172.213.12.6:32486] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/install.php"] [unique_id "adxufaHjrGN1MqBCVFl-MAAAAJE"]
[Mon Apr 13 12:18:11.850484 2026] [:error] [pid 63406:tid 63425] [client 172.213.12.6:56077] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/public/wp-blog.php"] [unique_id "adxug7HZEIkQ0Zmgp5p4KQAAAM4"]
[Mon Apr 13 12:18:12.987628 2026] [:error] [pid 63309:tid 63314] [client 172.213.12.6:60228] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/public/wp-blog.php"] [unique_id "adxuhEpIKZ10weXpf0XO2AAAAAE"]
[Mon Apr 13 12:18:20.879470 2026] [:error] [pid 7228:tid 7231] [client 172.213.12.6:18612] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/public/wp-blog.php"] [unique_id "adxujAEnn1dQrOSHHNWgvQAAAQE"]
[Mon Apr 13 12:18:25.478798 2026] [:error] [pid 7228:tid 7243] [client 172.213.12.6:50342] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nw.php"] [unique_id "adxukQEnn1dQrOSHHNWg1QAAAQ0"]
[Mon Apr 13 12:18:26.814835 2026] [:error] [pid 7228:tid 7251] [client 172.213.12.6:28207] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nw.php"] [unique_id "adxukgEnn1dQrOSHHNWg2wAAARU"]
[Mon Apr 13 12:18:27.520586 2026] [:error] [pid 63309:tid 63313] [client 172.213.12.6:18581] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nw.php"] [unique_id "adxuk0pIKZ10weXpf0XO6AAAAAA"]
[Mon Apr 13 12:18:29.985317 2026] [:error] [pid 7228:tid 7243] [client 172.213.12.6:25087] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nw.php"] [unique_id "adxulQEnn1dQrOSHHNWg6AAAAQ0"]
[Mon Apr 13 12:18:31.358415 2026] [:error] [pid 7228:tid 7254] [client 172.213.12.6:31807] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tool.php"] [unique_id "adxulwEnn1dQrOSHHNWg7gAAARg"]
[Mon Apr 13 12:18:34.920309 2026] [:error] [pid 7228:tid 7233] [client 172.213.12.6:24232] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tool.php"] [unique_id "adxumgEnn1dQrOSHHNWhDgAAAQM"]
[Mon Apr 13 12:18:35.671562 2026] [:error] [pid 7228:tid 7248] [client 172.213.12.6:33581] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tool.php"] [unique_id "adxumwEnn1dQrOSHHNWhFgAAARI"]
[Mon Apr 13 12:18:39.276552 2026] [:error] [pid 63406:tid 63411] [client 172.213.12.6:31792] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tool.php"] [unique_id "adxun7HZEIkQ0Zmgp5p4RgAAAMA"]
[Mon Apr 13 12:18:41.359599 2026] [:error] [pid 63310:tid 63352] [client 172.213.12.6:47406] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/drhunthq.php"] [unique_id "adxuoXoXpRU5ztmwPjLvPAAAAEg"]
[Mon Apr 13 12:18:45.482571 2026] [proxy_fcgi:error] [pid 7228:tid 7232] [client 172.213.12.6:52170] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 12:18:45.986264 2026] [proxy_fcgi:error] [pid 7228:tid 7242] [client 172.213.12.6:52170] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 12:18:46.226894 2026] [proxy_fcgi:error] [pid 7228:tid 7238] [client 172.213.12.6:52170] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 12:18:46.470105 2026] [proxy_fcgi:error] [pid 7228:tid 7249] [client 172.213.12.6:52170] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 12:18:46.709513 2026] [proxy_fcgi:error] [pid 7228:tid 7231] [client 172.213.12.6:52170] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 12:18:46.943624 2026] [proxy_fcgi:error] [pid 7228:tid 7243] [client 172.213.12.6:52170] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 12:18:47.185994 2026] [proxy_fcgi:error] [pid 7228:tid 7251] [client 172.213.12.6:52170] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 12:18:47.439607 2026] [proxy_fcgi:error] [pid 7228:tid 7246] [client 172.213.12.6:52170] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 12:18:47.673532 2026] [proxy_fcgi:error] [pid 7228:tid 7248] [client 172.213.12.6:52170] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 12:18:47.908440 2026] [proxy_fcgi:error] [pid 7228:tid 7236] [client 172.213.12.6:52170] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 12:18:48.139764 2026] [:error] [pid 7228:tid 7237] [client 172.213.12.6:52170] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/radio.php"] [unique_id "adxuqAEnn1dQrOSHHNWhRAAAAQc"]
[Mon Apr 13 12:18:51.457266 2026] [:error] [pid 7228:tid 7238] [client 172.213.12.6:24206] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/radio.php"] [unique_id "adxuqwEnn1dQrOSHHNWhSwAAAQg"]
[Mon Apr 13 12:18:55.446276 2026] [:error] [pid 63310:tid 63368] [client 172.213.12.6:54117] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/radio.php"] [unique_id "adxur3oXpRU5ztmwPjLvTgAAAFg"]
[Mon Apr 13 12:18:58.339339 2026] [:error] [pid 7228:tid 7234] [client 172.213.12.6:33639] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/radio.php"] [unique_id "adxusgEnn1dQrOSHHNWhYgAAAQQ"]
[Mon Apr 13 12:19:00.242637 2026] [:error] [pid 63311:tid 63392] [client 172.213.12.6:54105] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/155.php"] [unique_id "adxutKHjrGN1MqBCVFl-YQAAAJU"]
[Mon Apr 13 12:19:01.368082 2026] [:error] [pid 63311:tid 63380] [client 172.213.12.6:24249] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/155.php"] [unique_id "adxutaHjrGN1MqBCVFl-ZQAAAIk"]
[Mon Apr 13 12:19:02.922288 2026] [:error] [pid 63311:tid 63387] [client 172.213.12.6:2731] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/155.php"] [unique_id "adxutqHjrGN1MqBCVFl-aAAAAJA"]
[Mon Apr 13 12:19:04.578910 2026] [:error] [pid 57183:tid 57197] [client 172.213.12.6:28223] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/155.php"] [unique_id "adxuuDDO3t8R5NaxzYQrhQAAAUw"]
[Mon Apr 13 12:19:06.222863 2026] [:error] [pid 63309:tid 63314] [client 172.213.12.6:20409] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-the.php"] [unique_id "adxuukpIKZ10weXpf0XO-AAAAAE"]
[Mon Apr 13 12:19:08.221977 2026] [:error] [pid 63310:tid 63366] [client 172.213.12.6:54138] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-the.php"] [unique_id "adxuvHoXpRU5ztmwPjLvUAAAAFY"]
[Mon Apr 13 12:19:09.093294 2026] [:error] [pid 63311:tid 63382] [client 172.213.12.6:28812] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-the.php"] [unique_id "adxuvaHjrGN1MqBCVFl-awAAAIs"]
[Mon Apr 13 12:19:10.781599 2026] [:error] [pid 7228:tid 7236] [client 172.213.12.6:23782] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-the.php"] [unique_id "adxuvgEnn1dQrOSHHNWhhQAAAQY"]
[Mon Apr 13 12:19:12.617482 2026] [:error] [pid 63406:tid 63423] [client 172.213.12.6:2618] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp5.php"] [unique_id "adxuwLHZEIkQ0Zmgp5p4YQAAAMw"]
[Mon Apr 13 12:19:18.193372 2026] [:error] [pid 63309:tid 63323] [client 172.213.12.6:48572] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp5.php"] [unique_id "adxuxkpIKZ10weXpf0XPAwAAAAo"]
[Mon Apr 13 12:19:28.737131 2026] [:error] [pid 63310:tid 63352] [client 172.213.12.6:56061] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-access.php"] [unique_id "adxu0HoXpRU5ztmwPjLvYgAAAEg"]
[Mon Apr 13 12:19:32.537630 2026] [:error] [pid 7228:tid 7235] [client 172.213.12.6:17990] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-access.php"] [unique_id "adxu1AEnn1dQrOSHHNWhxQAAAQU"]
[Mon Apr 13 12:19:34.412155 2026] [:error] [pid 7228:tid 7230] [client 172.213.12.6:20366] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-access.php"] [unique_id "adxu1gEnn1dQrOSHHNWh1QAAAQA"]
[Mon Apr 13 12:19:37.837378 2026] [:error] [pid 57183:tid 57198] [client 172.213.12.6:21499] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-access.php"] [unique_id "adxu2TDO3t8R5NaxzYQrvgAAAU0"]
[Mon Apr 13 12:19:41.108033 2026] [:error] [pid 63406:tid 63431] [client 172.213.12.6:61258] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hots.php"] [unique_id "adxu3bHZEIkQ0Zmgp5p4ewAAANQ"]
[Mon Apr 13 12:19:43.617254 2026] [:error] [pid 63406:tid 63427] [client 172.213.12.6:28808] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hots.php"] [unique_id "adxu37HZEIkQ0Zmgp5p4fwAAANA"]
[Mon Apr 13 12:19:45.566832 2026] [:error] [pid 63406:tid 63413] [client 172.213.12.6:21464] [client 172.213.12.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hots.php"] [unique_id "adxu4bHZEIkQ0Zmgp5p4gQAAAMI"]
[Mon Apr 13 12:19:47.146649 2026] [proxy_fcgi:error] [pid 63310:tid 63362] [client 172.213.12.6:2603] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 12:19:47.378682 2026] [proxy_fcgi:error] [pid 63310:tid 63363] [client 172.213.12.6:2603] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 12:19:47.610890 2026] [proxy_fcgi:error] [pid 63310:tid 63355] [client 172.213.12.6:2603] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 12:19:47.957314 2026] [proxy_fcgi:error] [pid 63310:tid 63368] [client 172.213.12.6:2603] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 12:19:48.191052 2026] [proxy_fcgi:error] [pid 63310:tid 63349] [client 172.213.12.6:2603] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 12:19:48.434063 2026] [proxy_fcgi:error] [pid 63310:tid 63354] [client 172.213.12.6:2603] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 12:19:48.907147 2026] [proxy_fcgi:error] [pid 63310:tid 63366] [client 172.213.12.6:2603] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 12:19:49.139945 2026] [proxy_fcgi:error] [pid 63310:tid 63351] [client 172.213.12.6:2603] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 15:13:01.926706 2026] [:error] [pid 63406:tid 63424] [client 34.23.10.95:62253] [client 34.23.10.95] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.23.10.95, incrementing ddos counter"] [hostname "dwelectservices.com.au"] [uri "/xmlrpc.php"] [unique_id "adyXfbHZEIkQ0Zmgp5q_fAAAAM0"]
[Mon Apr 13 15:13:01.936531 2026] [proxy_fcgi:error] [pid 63406:tid 63424] [client 34.23.10.95:62253] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 15:13:04.779245 2026] [:error] [pid 63406:tid 63425] [client 34.23.10.95:62253] [client 34.23.10.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "adyXgLHZEIkQ0Zmgp5q_hwAAAM4"]
[Mon Apr 13 15:13:05.440391 2026] [:error] [pid 57183:tid 57194] [client 34.23.10.95:58441] [client 34.23.10.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "adyXgTDO3t8R5NaxzYSHxAAAAUk"]
[Mon Apr 13 15:13:06.282813 2026] [:error] [pid 7228:tid 7249] [client 34.23.10.95:62136] [client 34.23.10.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "adyXggEnn1dQrOSHHNUm3AAAARM"]
[Mon Apr 13 15:13:06.898191 2026] [:error] [pid 63309:tid 63327] [client 34.23.10.95:62077] [client 34.23.10.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "adyXgkpIKZ10weXpf0Xu0gAAAA4"]
[Mon Apr 13 15:13:07.469716 2026] [:error] [pid 7228:tid 7242] [client 34.23.10.95:61472] [client 34.23.10.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "adyXgwEnn1dQrOSHHNUm3gAAAQw"]
[Mon Apr 13 15:13:08.083391 2026] [:error] [pid 7228:tid 7253] [client 34.23.10.95:53759] [client 34.23.10.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "adyXhAEnn1dQrOSHHNUm3wAAARc"]
[Mon Apr 13 15:13:08.774926 2026] [:error] [pid 57183:tid 57207] [client 34.23.10.95:53313] [client 34.23.10.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "adyXhDDO3t8R5NaxzYSH1AAAAVY"]
[Mon Apr 13 17:34:17.111929 2026] [:error] [pid 63406:tid 63416] [client 35.197.45.245:54155] [client 35.197.45.245] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.197.45.245, incrementing ddos counter"] [hostname "dwelectservices.com.au"] [uri "/xmlrpc.php"] [unique_id "ady4mbHZEIkQ0Zmgp5oszwAAAMU"]
[Mon Apr 13 17:34:17.121881 2026] [proxy_fcgi:error] [pid 63406:tid 63416] [client 35.197.45.245:54155] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 17:34:19.393596 2026] [:error] [pid 63406:tid 63414] [client 35.197.45.245:54155] [client 35.197.45.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "ady4m7HZEIkQ0Zmgp5os3AAAAMM"]
[Mon Apr 13 17:34:20.591181 2026] [:error] [pid 9314:tid 9335] [client 35.197.45.245:59666] [client 35.197.45.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "ady4nG_r4W8fX2GWyGTSowAAAZM"]
[Mon Apr 13 17:34:21.902693 2026] [:error] [pid 9314:tid 9316] [client 35.197.45.245:57290] [client 35.197.45.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "ady4nW_r4W8fX2GWyGTSqwAAAYA"]
[Mon Apr 13 17:34:22.974276 2026] [:error] [pid 57183:tid 57201] [client 35.197.45.245:53558] [client 35.197.45.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "ady4njDO3t8R5NaxzYTdyAAAAVA"]
[Mon Apr 13 17:34:24.194306 2026] [:error] [pid 9314:tid 9336] [client 35.197.45.245:49419] [client 35.197.45.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "ady4oG_r4W8fX2GWyGTSvQAAAZQ"]
[Mon Apr 13 17:34:25.167544 2026] [:error] [pid 63406:tid 63424] [client 35.197.45.245:63193] [client 35.197.45.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "ady4obHZEIkQ0Zmgp5os3wAAAM0"]
[Mon Apr 13 17:34:26.221956 2026] [:error] [pid 57183:tid 57190] [client 35.197.45.245:56952] [client 35.197.45.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "ady4ojDO3t8R5NaxzYTd0QAAAUU"]
[Mon Apr 13 20:38:13.685387 2026] [:error] [pid 9314:tid 9331] [client 103.77.107.178:53665] [client 103.77.107.178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/sftp-config.json"] [unique_id "adzjtW_r4W8fX2GWyGQXxAAAAY8"]
[Mon Apr 13 20:38:13.886775 2026] [:error] [pid 63406:tid 63430] [client 103.77.107.178:53677] [client 103.77.107.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.vscode/sftp.json"] [unique_id "adzjtbHZEIkQ0Zmgp5qo_QAAANM"]
[Tue Apr 14 06:26:12.507005 2026] [proxy_fcgi:error] [pid 19689:tid 19768] [client 40.89.166.87:42894] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 06:26:12.745312 2026] [proxy_fcgi:error] [pid 19689:tid 19767] [client 40.89.166.87:42894] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 06:26:13.211933 2026] [proxy_fcgi:error] [pid 19689:tid 19760] [client 40.89.166.87:42894] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 06:26:13.478566 2026] [proxy_fcgi:error] [pid 19689:tid 19777] [client 40.89.166.87:42894] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 06:26:13.715674 2026] [proxy_fcgi:error] [pid 19689:tid 19761] [client 40.89.166.87:42894] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 06:26:13.963914 2026] [proxy_fcgi:error] [pid 19689:tid 19763] [client 40.89.166.87:42894] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 06:26:14.217694 2026] [proxy_fcgi:error] [pid 19689:tid 19770] [client 40.89.166.87:42894] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 06:26:14.572656 2026] [proxy_fcgi:error] [pid 19689:tid 19764] [client 40.89.166.87:42894] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 06:26:15.016172 2026] [:error] [pid 19689:tid 19765] [client 40.89.166.87:42894] [client 40.89.166.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/theme-compat/wp-login.php"] [unique_id "ad1th5WU15arjG3aJyRpKwAAAIo"]
[Tue Apr 14 06:26:16.402306 2026] [proxy_fcgi:error] [pid 64393:tid 64407] [client 40.89.166.87:42911] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 06:26:16.647638 2026] [proxy_fcgi:error] [pid 64393:tid 64402] [client 40.89.166.87:42911] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 06:26:16.884783 2026] [:error] [pid 64393:tid 64411] [client 40.89.166.87:42911] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ng.php"] [unique_id "ad1tiOClKltJhW50hKPpoQAAARA"]
[Tue Apr 14 06:26:19.416736 2026] [:error] [pid 19689:tid 19771] [client 40.89.166.87:42923] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ng.php"] [unique_id "ad1ti5WU15arjG3aJyRpMAAAAJA"]
[Tue Apr 14 06:26:20.191987 2026] [:error] [pid 64393:tid 64412] [client 40.89.166.87:42921] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ng.php"] [unique_id "ad1tjOClKltJhW50hKPpowAAARE"]
[Tue Apr 14 06:26:21.126564 2026] [:error] [pid 19793:tid 19818] [client 40.89.166.87:42942] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ng.php"] [unique_id "ad1tjQGEQsZw9TkmIA4yJwAAANc"]
[Tue Apr 14 06:26:21.809350 2026] [:error] [pid 19688:tid 19743] [client 40.89.166.87:23634] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/tiny2.php"] [unique_id "ad1tjYHoi57o76xPstLLkgAAAE8"]
[Tue Apr 14 06:26:22.656993 2026] [:error] [pid 19689:tid 19777] [client 40.89.166.87:42914] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/tiny2.php"] [unique_id "ad1tjpWU15arjG3aJyRpPgAAAJY"]
[Tue Apr 14 06:26:23.426783 2026] [:error] [pid 19793:tid 19804] [client 40.89.166.87:23638] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/tiny2.php"] [unique_id "ad1tjwGEQsZw9TkmIA4yKgAAAMk"]
[Tue Apr 14 06:26:24.513594 2026] [:error] [pid 19687:tid 19701] [client 40.89.166.87:42935] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/tiny2.php"] [unique_id "ad1tkGBZImnR12CCWFpBnAAAAAU"]
[Tue Apr 14 06:26:25.384686 2026] [:error] [pid 19793:tid 19800] [client 40.89.166.87:42898] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/state.php"] [unique_id "ad1tkQGEQsZw9TkmIA4yMAAAAMU"]
[Tue Apr 14 06:26:26.950384 2026] [:error] [pid 19689:tid 19755] [client 40.89.166.87:42916] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/state.php"] [unique_id "ad1tkpWU15arjG3aJyRpRAAAAIA"]
[Tue Apr 14 06:26:28.058681 2026] [:error] [pid 19688:tid 19751] [client 40.89.166.87:42930] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/state.php"] [unique_id "ad1tlIHoi57o76xPstLLnAAAAFc"]
[Tue Apr 14 06:26:29.434427 2026] [:error] [pid 64393:tid 64401] [client 40.89.166.87:42932] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/state.php"] [unique_id "ad1tleClKltJhW50hKPpsgAAAQY"]
[Tue Apr 14 06:26:32.209086 2026] [:error] [pid 19793:tid 19814] [client 40.89.166.87:23621] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/2.php"] [unique_id "ad1tmAGEQsZw9TkmIA4yPQAAANM"]
[Tue Apr 14 06:26:33.145727 2026] [:error] [pid 19689:tid 19757] [client 40.89.166.87:42941] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/2.php"] [unique_id "ad1tmZWU15arjG3aJyRpUAAAAII"]
[Tue Apr 14 06:26:34.542854 2026] [:error] [pid 19687:tid 19701] [client 40.89.166.87:42907] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/2.php"] [unique_id "ad1tmmBZImnR12CCWFpBoQAAAAU"]
[Tue Apr 14 06:26:35.413946 2026] [:error] [pid 19793:tid 19811] [client 40.89.166.87:5072] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/2.php"] [unique_id "ad1tmwGEQsZw9TkmIA4yRwAAANA"]
[Tue Apr 14 06:26:36.822955 2026] [:error] [pid 19793:tid 19805] [client 40.89.166.87:42912] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wps.php"] [unique_id "ad1tnAGEQsZw9TkmIA4yXwAAAMo"]
[Tue Apr 14 06:26:38.174590 2026] [:error] [pid 19793:tid 19813] [client 40.89.166.87:23633] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wps.php"] [unique_id "ad1tngGEQsZw9TkmIA4yawAAANI"]
[Tue Apr 14 06:26:39.447265 2026] [:error] [pid 64393:tid 64411] [client 40.89.166.87:42922] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wps.php"] [unique_id "ad1tn-ClKltJhW50hKPp7wAAARA"]
[Tue Apr 14 06:26:40.221463 2026] [:error] [pid 19687:tid 19712] [client 40.89.166.87:42903] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wps.php"] [unique_id "ad1toGBZImnR12CCWFpBowAAABA"]
[Tue Apr 14 06:26:41.239682 2026] [:error] [pid 19793:tid 19798] [client 40.89.166.87:42933] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ayk.php"] [unique_id "ad1toQGEQsZw9TkmIA4ycQAAAMM"]
[Tue Apr 14 06:26:42.025702 2026] [:error] [pid 19689:tid 19772] [client 40.89.166.87:42920] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ayk.php"] [unique_id "ad1topWU15arjG3aJyRpVwAAAJE"]
[Tue Apr 14 06:26:42.754072 2026] [:error] [pid 64393:tid 64417] [client 40.89.166.87:23627] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ayk.php"] [unique_id "ad1touClKltJhW50hKPp9QAAARY"]
[Tue Apr 14 06:26:43.312696 2026] [:error] [pid 64393:tid 64406] [client 40.89.166.87:23662] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ayk.php"] [unique_id "ad1to-ClKltJhW50hKPp9gAAAQs"]
[Tue Apr 14 06:26:43.961840 2026] [:error] [pid 64393:tid 64418] [client 40.89.166.87:23629] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wgift1.php"] [unique_id "ad1to-ClKltJhW50hKPp_AAAARc"]
[Tue Apr 14 06:26:44.682170 2026] [:error] [pid 64393:tid 64408] [client 40.89.166.87:5073] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wgift1.php"] [unique_id "ad1tpOClKltJhW50hKPqAAAAAQ0"]
[Tue Apr 14 06:26:45.191339 2026] [:error] [pid 64393:tid 64410] [client 40.89.166.87:23635] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wgift1.php"] [unique_id "ad1tpeClKltJhW50hKPqBAAAAQ8"]
[Tue Apr 14 06:26:45.821916 2026] [:error] [pid 19688:tid 19735] [client 40.89.166.87:23626] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wgift1.php"] [unique_id "ad1tpYHoi57o76xPstLLpwAAAEc"]
[Tue Apr 14 06:26:46.758507 2026] [:error] [pid 19689:tid 19777] [client 40.89.166.87:42900] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ss.php"] [unique_id "ad1tppWU15arjG3aJyRpWwAAAJY"]
[Tue Apr 14 06:26:47.340443 2026] [:error] [pid 19687:tid 19716] [client 40.89.166.87:5069] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ss.php"] [unique_id "ad1tp2BZImnR12CCWFpBpwAAABQ"]
[Tue Apr 14 06:26:47.956864 2026] [:error] [pid 19793:tid 19817] [client 40.89.166.87:23660] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ss.php"] [unique_id "ad1tpwGEQsZw9TkmIA4yfAAAANY"]
[Tue Apr 14 06:26:48.515923 2026] [:error] [pid 19793:tid 19803] [client 40.89.166.87:23645] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ss.php"] [unique_id "ad1tqAGEQsZw9TkmIA4yfwAAAMg"]
[Tue Apr 14 06:26:49.156491 2026] [:error] [pid 19793:tid 19807] [client 40.89.166.87:42929] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/tx79.php"] [unique_id "ad1tqQGEQsZw9TkmIA4ygAAAAMw"]
[Tue Apr 14 06:26:50.492873 2026] [:error] [pid 64393:tid 64402] [client 40.89.166.87:42919] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/tx79.php"] [unique_id "ad1tquClKltJhW50hKPqEgAAAQc"]
[Tue Apr 14 06:26:52.046950 2026] [:error] [pid 64393:tid 64413] [client 40.89.166.87:23616] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/tx79.php"] [unique_id "ad1trOClKltJhW50hKPqGAAAARI"]
[Tue Apr 14 06:26:53.010165 2026] [:error] [pid 19687:tid 19714] [client 40.89.166.87:42893] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/tx79.php"] [unique_id "ad1trWBZImnR12CCWFpBqAAAABI"]
[Tue Apr 14 06:26:53.886403 2026] [:error] [pid 19687:tid 19717] [client 40.89.166.87:23665] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/7.php"] [unique_id "ad1trWBZImnR12CCWFpBqwAAABU"]
[Tue Apr 14 06:26:55.122225 2026] [:error] [pid 19793:tid 19810] [client 40.89.166.87:23636] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/7.php"] [unique_id "ad1trwGEQsZw9TkmIA4yhAAAAM8"]
[Tue Apr 14 06:26:56.521514 2026] [:error] [pid 19793:tid 19811] [client 40.89.166.87:23644] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/7.php"] [unique_id "ad1tsAGEQsZw9TkmIA4yiAAAANA"]
[Tue Apr 14 06:26:58.162767 2026] [:error] [pid 19689:tid 19779] [client 40.89.166.87:42887] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/7.php"] [unique_id "ad1tspWU15arjG3aJyRpZgAAAJg"]
[Tue Apr 14 06:26:59.503371 2026] [:error] [pid 19687:tid 19706] [client 40.89.166.87:5076] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "ad1ts2BZImnR12CCWFpBrAAAAAo"]
[Tue Apr 14 06:27:00.286498 2026] [:error] [pid 19689:tid 19773] [client 40.89.166.87:23641] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "ad1ttJWU15arjG3aJyRpaAAAAJI"]
[Tue Apr 14 06:27:01.286527 2026] [:error] [pid 64393:tid 64398] [client 40.89.166.87:42931] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "ad1tteClKltJhW50hKPqIwAAAQM"]
[Tue Apr 14 06:27:02.944711 2026] [:error] [pid 64393:tid 64416] [client 40.89.166.87:23640] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "ad1ttuClKltJhW50hKPqKQAAARU"]
[Tue Apr 14 06:27:05.009938 2026] [:error] [pid 19687:tid 19720] [client 40.89.166.87:23647] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/config.php"] [unique_id "ad1tuWBZImnR12CCWFpBrgAAABg"]
[Tue Apr 14 06:27:06.651679 2026] [:error] [pid 19689:tid 19762] [client 40.89.166.87:23657] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/config.php"] [unique_id "ad1tupWU15arjG3aJyRpawAAAIc"]
[Tue Apr 14 06:27:08.471188 2026] [:error] [pid 19793:tid 19813] [client 40.89.166.87:42926] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/config.php"] [unique_id "ad1tvAGEQsZw9TkmIA4ykAAAANI"]
[Tue Apr 14 06:27:13.449467 2026] [:error] [pid 32941:tid 32947] [client 40.89.166.87:5064] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/config.php"] [unique_id "ad1twaAX0ubdpP7Z66y4tgAAAAE"]
[Tue Apr 14 06:27:14.519441 2026] [:error] [pid 32943:tid 33004] [client 40.89.166.87:5104] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/gecko.php"] [unique_id "ad1twgtqsULtpZz5NS15VwAAAIM"]
[Tue Apr 14 06:27:15.409367 2026] [:error] [pid 32942:tid 32983] [client 40.89.166.87:5098] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/gecko.php"] [unique_id "ad1tw0LPfTkkAwENPeqIogAAAEk"]
[Tue Apr 14 06:27:16.087315 2026] [proxy_fcgi:error] [pid 32943:tid 33014] [client 40.89.166.87:23625] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 06:27:16.564478 2026] [:error] [pid 32943:tid 33020] [client 40.89.166.87:23625] [client 40.89.166.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.dwelectservices.com.au"] [uri "/tiny.php"] [unique_id "ad1txAtqsULtpZz5NS15ZAAAAJM"]
[Tue Apr 14 06:27:17.154914 2026] [proxy_fcgi:error] [pid 32943:tid 33023] [client 40.89.166.87:42924] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 06:27:17.417137 2026] [proxy_fcgi:error] [pid 32943:tid 33024] [client 40.89.166.87:42924] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 06:27:17.673553 2026] [proxy_fcgi:error] [pid 32943:tid 33002] [client 40.89.166.87:42924] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 06:27:17.911725 2026] [proxy_fcgi:error] [pid 32943:tid 33003] [client 40.89.166.87:42924] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 06:27:18.155604 2026] [proxy_fcgi:error] [pid 32943:tid 33004] [client 40.89.166.87:42924] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 06:27:18.393574 2026] [proxy_fcgi:error] [pid 32943:tid 33006] [client 40.89.166.87:42924] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 06:27:18.644640 2026] [proxy_fcgi:error] [pid 32943:tid 33007] [client 40.89.166.87:42924] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 06:27:20.271710 2026] [proxy_fcgi:error] [pid 32943:tid 33012] [client 40.89.166.87:42924] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 06:27:20.581644 2026] [proxy_fcgi:error] [pid 32943:tid 33014] [client 40.89.166.87:42924] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 06:27:20.996155 2026] [:error] [pid 32943:tid 33015] [client 40.89.166.87:42924] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/lib.php"] [unique_id "ad1tyAtqsULtpZz5NS15cwAAAI4"]
[Tue Apr 14 06:27:21.834629 2026] [:error] [pid 33031:tid 33039] [client 40.89.166.87:42906] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/lib.php"] [unique_id "ad1tyf4d7_j9IbSJ_rwAqwAAAQU"]
[Tue Apr 14 06:27:22.461784 2026] [:error] [pid 33031:tid 33050] [client 40.89.166.87:23646] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/lib.php"] [unique_id "ad1tyv4d7_j9IbSJ_rwAsQAAARA"]
[Tue Apr 14 06:27:23.175976 2026] [:error] [pid 32942:tid 32997] [client 40.89.166.87:23631] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/lib.php"] [unique_id "ad1ty0LPfTkkAwENPeqIqwAAAFc"]
[Tue Apr 14 06:27:24.036347 2026] [:error] [pid 32941:tid 32957] [client 40.89.166.87:5085] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/roksad1.php"] [unique_id "ad1tzKAX0ubdpP7Z66y5DAAAAAs"]
[Tue Apr 14 06:27:24.716591 2026] [:error] [pid 32941:tid 32961] [client 40.89.166.87:23624] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/roksad1.php"] [unique_id "ad1tzKAX0ubdpP7Z66y5DwAAAA8"]
[Tue Apr 14 06:27:25.350147 2026] [:error] [pid 32943:tid 33003] [client 40.89.166.87:42908] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/roksad1.php"] [unique_id "ad1tzQtqsULtpZz5NS15dQAAAII"]
[Tue Apr 14 06:27:25.998397 2026] [:error] [pid 32941:tid 32951] [client 40.89.166.87:42889] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/roksad1.php"] [unique_id "ad1tzaAX0ubdpP7Z66y5EQAAAAU"]
[Tue Apr 14 06:27:26.597835 2026] [:error] [pid 33031:tid 33044] [client 40.89.166.87:42888] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wmore1.php"] [unique_id "ad1tzv4d7_j9IbSJ_rwAvgAAAQo"]
[Tue Apr 14 06:27:27.257570 2026] [:error] [pid 32942:tid 32986] [client 40.89.166.87:5093] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wmore1.php"] [unique_id "ad1tz0LPfTkkAwENPeqIsgAAAEw"]
[Tue Apr 14 06:27:28.083546 2026] [:error] [pid 32943:tid 33011] [client 40.89.166.87:23632] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wmore1.php"] [unique_id "ad1t0AtqsULtpZz5NS15egAAAIo"]
[Tue Apr 14 06:27:28.778011 2026] [:error] [pid 32942:tid 32994] [client 40.89.166.87:23637] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wmore1.php"] [unique_id "ad1t0ELPfTkkAwENPeqItgAAAFQ"]
[Tue Apr 14 06:27:29.543652 2026] [:error] [pid 33031:tid 33037] [client 40.89.166.87:42883] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/adminfuns.php"] [unique_id "ad1t0f4d7_j9IbSJ_rwAyAAAAQM"]
[Tue Apr 14 06:27:30.240964 2026] [:error] [pid 33031:tid 33043] [client 40.89.166.87:23653] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/adminfuns.php"] [unique_id "ad1t0v4d7_j9IbSJ_rwAzAAAAQk"]
[Tue Apr 14 06:27:30.940117 2026] [:error] [pid 33031:tid 33047] [client 40.89.166.87:23671] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/adminfuns.php"] [unique_id "ad1t0v4d7_j9IbSJ_rwA0AAAAQ0"]
[Tue Apr 14 06:27:31.486852 2026] [:error] [pid 32941:tid 32957] [client 40.89.166.87:5099] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/adminfuns.php"] [unique_id "ad1t06AX0ubdpP7Z66y5FwAAAAs"]
[Tue Apr 14 06:27:32.209586 2026] [:error] [pid 32941:tid 32963] [client 40.89.166.87:42927] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/chosen.php"] [unique_id "ad1t1KAX0ubdpP7Z66y5GwAAABE"]
[Tue Apr 14 06:27:33.091039 2026] [:error] [pid 32943:tid 33018] [client 40.89.166.87:42910] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/chosen.php"] [unique_id "ad1t1QtqsULtpZz5NS15hwAAAJE"]
[Tue Apr 14 06:27:33.956404 2026] [:error] [pid 32943:tid 33024] [client 40.89.166.87:5018] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/chosen.php"] [unique_id "ad1t1QtqsULtpZz5NS15iQAAAJc"]
[Tue Apr 14 06:27:34.898817 2026] [:error] [pid 32943:tid 33004] [client 40.89.166.87:23617] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/chosen.php"] [unique_id "ad1t1gtqsULtpZz5NS15jAAAAIM"]
[Tue Apr 14 06:27:35.548035 2026] [:error] [pid 32941:tid 32966] [client 40.89.166.87:42937] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/dass.php"] [unique_id "ad1t16AX0ubdpP7Z66y5HwAAABQ"]
[Tue Apr 14 06:27:36.299263 2026] [:error] [pid 32941:tid 32958] [client 40.89.166.87:23628] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/dass.php"] [unique_id "ad1t2KAX0ubdpP7Z66y5IQAAAAw"]
[Tue Apr 14 06:27:37.161041 2026] [:error] [pid 33031:tid 33034] [client 40.89.166.87:42915] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/dass.php"] [unique_id "ad1t2f4d7_j9IbSJ_rwA2AAAAQA"]
[Tue Apr 14 06:27:37.781906 2026] [:error] [pid 32941:tid 32957] [client 40.89.166.87:5062] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/dass.php"] [unique_id "ad1t2aAX0ubdpP7Z66y5IwAAAAs"]
[Tue Apr 14 06:27:38.315300 2026] [:error] [pid 33031:tid 33051] [client 40.89.166.87:23655] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/db.php"] [unique_id "ad1t2v4d7_j9IbSJ_rwA3QAAARE"]
[Tue Apr 14 06:27:39.626697 2026] [:error] [pid 33031:tid 33048] [client 40.89.166.87:5090] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/db.php"] [unique_id "ad1t2_4d7_j9IbSJ_rwA4AAAAQ4"]
[Tue Apr 14 06:27:40.234543 2026] [:error] [pid 32941:tid 32948] [client 40.89.166.87:42934] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/db.php"] [unique_id "ad1t3KAX0ubdpP7Z66y5JgAAAAI"]
[Tue Apr 14 06:27:41.015157 2026] [:error] [pid 32941:tid 32953] [client 40.89.166.87:42909] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/db.php"] [unique_id "ad1t3aAX0ubdpP7Z66y5KAAAAAc"]
[Tue Apr 14 06:27:41.546440 2026] [:error] [pid 32941:tid 32966] [client 40.89.166.87:23672] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/less.php"] [unique_id "ad1t3aAX0ubdpP7Z66y5KQAAABQ"]
[Tue Apr 14 06:27:42.139332 2026] [:error] [pid 32941:tid 32956] [client 40.89.166.87:23623] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/less.php"] [unique_id "ad1t3qAX0ubdpP7Z66y5KgAAAAo"]
[Tue Apr 14 06:27:43.321397 2026] [:error] [pid 33031:tid 33050] [client 40.89.166.87:42925] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/less.php"] [unique_id "ad1t3_4d7_j9IbSJ_rwA5wAAARA"]
[Tue Apr 14 06:27:44.442016 2026] [:error] [pid 32942:tid 32998] [client 40.89.166.87:4997] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/less.php"] [unique_id "ad1t4ELPfTkkAwENPeqIzAAAAFg"]
[Tue Apr 14 06:27:45.349735 2026] [:error] [pid 32941:tid 32959] [client 40.89.166.87:5022] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws86.php"] [unique_id "ad1t4aAX0ubdpP7Z66y5LgAAAA0"]
[Tue Apr 14 06:27:47.336979 2026] [:error] [pid 33031:tid 33057] [client 40.89.166.87:23659] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws86.php"] [unique_id "ad1t4_4d7_j9IbSJ_rwA7QAAARc"]
[Tue Apr 14 06:27:48.218686 2026] [:error] [pid 32941:tid 32968] [client 40.89.166.87:42880] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws86.php"] [unique_id "ad1t5KAX0ubdpP7Z66y5MAAAABY"]
[Tue Apr 14 06:27:48.963012 2026] [:error] [pid 32943:tid 33014] [client 40.89.166.87:23674] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws86.php"] [unique_id "ad1t5AtqsULtpZz5NS15oAAAAI0"]
[Tue Apr 14 06:27:49.996552 2026] [:error] [pid 32942:tid 32996] [client 40.89.166.87:42891] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/maxro.php"] [unique_id "ad1t5ULPfTkkAwENPeqI1AAAAFY"]
[Tue Apr 14 06:27:50.999682 2026] [:error] [pid 33031:tid 33049] [client 40.89.166.87:42928] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/maxro.php"] [unique_id "ad1t5v4d7_j9IbSJ_rwA8AAAAQ8"]
[Tue Apr 14 06:27:51.600649 2026] [:error] [pid 32943:tid 33009] [client 40.89.166.87:5094] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/maxro.php"] [unique_id "ad1t5wtqsULtpZz5NS15pwAAAIg"]
[Tue Apr 14 06:27:52.217435 2026] [:error] [pid 32943:tid 33013] [client 40.89.166.87:23667] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/maxro.php"] [unique_id "ad1t6AtqsULtpZz5NS15qgAAAIw"]
[Tue Apr 14 06:27:52.942051 2026] [:error] [pid 32943:tid 33018] [client 40.89.166.87:42936] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/classwithtostring.php"] [unique_id "ad1t6AtqsULtpZz5NS15rQAAAJE"]
[Tue Apr 14 06:27:53.900633 2026] [:error] [pid 32942:tid 32985] [client 40.89.166.87:5056] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/classwithtostring.php"] [unique_id "ad1t6ULPfTkkAwENPeqI3AAAAEs"]
[Tue Apr 14 06:27:55.331391 2026] [:error] [pid 32941:tid 32949] [client 40.89.166.87:5057] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/classwithtostring.php"] [unique_id "ad1t66AX0ubdpP7Z66y5NAAAAAM"]
[Tue Apr 14 06:27:56.420431 2026] [:error] [pid 32943:tid 33022] [client 40.89.166.87:5089] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/classwithtostring.php"] [unique_id "ad1t7AtqsULtpZz5NS15swAAAJU"]
[Tue Apr 14 06:27:57.108498 2026] [:error] [pid 32943:tid 33015] [client 40.89.166.87:5002] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/1s7y8wt9dz.php"] [unique_id "ad1t7QtqsULtpZz5NS15uAAAAI4"]
[Tue Apr 14 06:27:58.690868 2026] [:error] [pid 33031:tid 33057] [client 40.89.166.87:5101] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/1s7y8wt9dz.php"] [unique_id "ad1t7v4d7_j9IbSJ_rwBCgAAARc"]
[Tue Apr 14 06:27:59.873315 2026] [:error] [pid 33031:tid 33036] [client 40.89.166.87:23649] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/1s7y8wt9dz.php"] [unique_id "ad1t7_4d7_j9IbSJ_rwBDgAAAQI"]
[Tue Apr 14 06:28:00.692207 2026] [:error] [pid 32941:tid 32954] [client 40.89.166.87:42917] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/1s7y8wt9dz.php"] [unique_id "ad1t8KAX0ubdpP7Z66y5OAAAAAg"]
[Tue Apr 14 06:28:02.291916 2026] [:error] [pid 32943:tid 33024] [client 40.89.166.87:23639] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bdktk.php"] [unique_id "ad1t8gtqsULtpZz5NS15wAAAAJc"]
[Tue Apr 14 06:28:04.315786 2026] [:error] [pid 32943:tid 33017] [client 40.89.166.87:5060] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bdktk.php"] [unique_id "ad1t9AtqsULtpZz5NS15xwAAAJA"]
[Tue Apr 14 06:28:05.788548 2026] [:error] [pid 32941:tid 32949] [client 40.89.166.87:5088] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bdktk.php"] [unique_id "ad1t9aAX0ubdpP7Z66y5QAAAAAM"]
[Tue Apr 14 06:28:07.926384 2026] [:error] [pid 33031:tid 33057] [client 40.89.166.87:23651] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bdktk.php"] [unique_id "ad1t9_4d7_j9IbSJ_rwBGAAAARc"]
[Tue Apr 14 06:28:08.730988 2026] [:error] [pid 32943:tid 33014] [client 40.89.166.87:23643] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/v5.php"] [unique_id "ad1t-AtqsULtpZz5NS15zAAAAI0"]
[Tue Apr 14 06:28:09.705400 2026] [:error] [pid 32943:tid 33020] [client 40.89.166.87:23664] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/v5.php"] [unique_id "ad1t-QtqsULtpZz5NS15zgAAAJM"]
[Tue Apr 14 06:28:11.588573 2026] [:error] [pid 33031:tid 33036] [client 40.89.166.87:23619] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/v5.php"] [unique_id "ad1t-_4d7_j9IbSJ_rwBIgAAAQI"]
[Tue Apr 14 06:28:13.226489 2026] [:error] [pid 32943:tid 33007] [client 40.89.166.87:5075] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/v5.php"] [unique_id "ad1t_QtqsULtpZz5NS150QAAAIY"]
[Tue Apr 14 06:28:13.885355 2026] [:error] [pid 32943:tid 33014] [client 40.89.166.87:4996] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws85.php"] [unique_id "ad1t_QtqsULtpZz5NS151AAAAI0"]
[Tue Apr 14 06:28:14.616036 2026] [:error] [pid 32942:tid 32993] [client 40.89.166.87:5100] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws85.php"] [unique_id "ad1t_kLPfTkkAwENPeqI6QAAAFM"]
[Tue Apr 14 06:28:15.287011 2026] [:error] [pid 32942:tid 32996] [client 40.89.166.87:5063] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws85.php"] [unique_id "ad1t_0LPfTkkAwENPeqI7AAAAFY"]
[Tue Apr 14 06:28:15.986013 2026] [:error] [pid 32942:tid 32974] [client 40.89.166.87:4967] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws85.php"] [unique_id "ad1t_0LPfTkkAwENPeqI7wAAAEA"]
[Tue Apr 14 06:28:16.544610 2026] [:error] [pid 33031:tid 33036] [client 40.89.166.87:5080] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws87.php"] [unique_id "ad1uAP4d7_j9IbSJ_rwBKQAAAQI"]
[Tue Apr 14 06:28:17.115176 2026] [:error] [pid 32941:tid 32969] [client 40.89.166.87:23676] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws87.php"] [unique_id "ad1uAaAX0ubdpP7Z66y5UQAAABc"]
[Tue Apr 14 06:28:17.977650 2026] [:error] [pid 33031:tid 33053] [client 40.89.166.87:5117] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws87.php"] [unique_id "ad1uAf4d7_j9IbSJ_rwBLwAAARM"]
[Tue Apr 14 06:28:18.471579 2026] [:error] [pid 33031:tid 33052] [client 40.89.166.87:5058] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws87.php"] [unique_id "ad1uAv4d7_j9IbSJ_rwBMgAAARI"]
[Tue Apr 14 06:28:18.999318 2026] [:error] [pid 33031:tid 33034] [client 40.89.166.87:42892] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/layout.php"] [unique_id "ad1uAv4d7_j9IbSJ_rwBNQAAAQA"]
[Tue Apr 14 06:28:19.531064 2026] [:error] [pid 33031:tid 33043] [client 40.89.166.87:5091] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/layout.php"] [unique_id "ad1uA_4d7_j9IbSJ_rwBOwAAAQk"]
[Tue Apr 14 06:28:20.234125 2026] [proxy_fcgi:error] [pid 32943:tid 33012] [client 40.89.166.87:23630] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 06:28:20.489569 2026] [proxy_fcgi:error] [pid 32943:tid 33007] [client 40.89.166.87:23630] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 06:28:20.726665 2026] [proxy_fcgi:error] [pid 32943:tid 33013] [client 40.89.166.87:23630] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 06:28:20.966112 2026] [proxy_fcgi:error] [pid 32943:tid 33006] [client 40.89.166.87:23630] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 06:28:22.534863 2026] [proxy_fcgi:error] [pid 32943:tid 33001] [client 40.89.166.87:23630] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 06:28:22.774423 2026] [proxy_fcgi:error] [pid 32943:tid 33008] [client 40.89.166.87:23630] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 06:28:23.053413 2026] [proxy_fcgi:error] [pid 32943:tid 33005] [client 40.89.166.87:23630] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 06:28:23.291278 2026] [proxy_fcgi:error] [pid 32943:tid 33025] [client 40.89.166.87:23630] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 06:28:23.530061 2026] [proxy_fcgi:error] [pid 32943:tid 33017] [client 40.89.166.87:23630] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 06:28:23.826415 2026] [proxy_fcgi:error] [pid 32943:tid 33020] [client 40.89.166.87:23630] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 06:28:24.082414 2026] [proxy_fcgi:error] [pid 32943:tid 33009] [client 40.89.166.87:23630] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 06:28:24.316506 2026] [:error] [pid 32943:tid 33021] [client 40.89.166.87:23630] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/qqa.php"] [unique_id "ad1uCAtqsULtpZz5NS155wAAAJQ"]
[Tue Apr 14 06:28:25.197020 2026] [:error] [pid 32942:tid 32988] [client 40.89.166.87:5009] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/qqa.php"] [unique_id "ad1uCULPfTkkAwENPeqJCQAAAE4"]
[Tue Apr 14 06:28:25.859078 2026] [:error] [pid 33031:tid 33039] [client 40.89.166.87:23650] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/qqa.php"] [unique_id "ad1uCf4d7_j9IbSJ_rwBTgAAAQU"]
[Tue Apr 14 06:28:26.865333 2026] [:error] [pid 32943:tid 33016] [client 40.89.166.87:42918] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/qqa.php"] [unique_id "ad1uCgtqsULtpZz5NS157AAAAI8"]
[Tue Apr 14 06:28:27.679845 2026] [:error] [pid 32943:tid 33014] [client 40.89.166.87:23668] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/dx.php"] [unique_id "ad1uCwtqsULtpZz5NS158QAAAI0"]
[Tue Apr 14 06:28:28.376345 2026] [:error] [pid 32943:tid 33005] [client 40.89.166.87:5071] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/dx.php"] [unique_id "ad1uDAtqsULtpZz5NS159AAAAIQ"]
[Tue Apr 14 06:28:29.224489 2026] [:error] [pid 32943:tid 33023] [client 40.89.166.87:23675] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/dx.php"] [unique_id "ad1uDQtqsULtpZz5NS15-QAAAJY"]
[Tue Apr 14 06:28:30.031436 2026] [:error] [pid 32941:tid 32946] [client 40.89.166.87:23648] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/dx.php"] [unique_id "ad1uDqAX0ubdpP7Z66y5ZgAAAAA"]
[Tue Apr 14 06:28:30.566015 2026] [:error] [pid 32942:tid 32993] [client 40.89.166.87:5086] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ga.php"] [unique_id "ad1uDkLPfTkkAwENPeqJEwAAAFM"]
[Tue Apr 14 06:28:31.211481 2026] [:error] [pid 33031:tid 33043] [client 40.89.166.87:42886] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ga.php"] [unique_id "ad1uD_4d7_j9IbSJ_rwBWwAAAQk"]
[Tue Apr 14 06:28:31.720532 2026] [:error] [pid 32942:tid 32988] [client 40.89.166.87:23679] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ga.php"] [unique_id "ad1uD0LPfTkkAwENPeqJGAAAAE4"]
[Tue Apr 14 06:28:32.455846 2026] [:error] [pid 33031:tid 33058] [client 40.89.166.87:5112] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ga.php"] [unique_id "ad1uEP4d7_j9IbSJ_rwBYgAAARg"]
[Tue Apr 14 06:28:33.034472 2026] [:error] [pid 33031:tid 33034] [client 40.89.166.87:42902] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xozx.php"] [unique_id "ad1uEf4d7_j9IbSJ_rwBZAAAAQA"]
[Tue Apr 14 06:28:33.578473 2026] [:error] [pid 32943:tid 33023] [client 40.89.166.87:5065] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xozx.php"] [unique_id "ad1uEQtqsULtpZz5NS15_wAAAJY"]
[Tue Apr 14 06:28:34.073002 2026] [:error] [pid 32941:tid 32961] [client 40.89.166.87:4994] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xozx.php"] [unique_id "ad1uEqAX0ubdpP7Z66y5aQAAAA8"]
[Tue Apr 14 06:28:35.004482 2026] [:error] [pid 32941:tid 32962] [client 40.89.166.87:4995] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xozx.php"] [unique_id "ad1uE6AX0ubdpP7Z66y5agAAABA"]
[Tue Apr 14 06:28:35.745510 2026] [:error] [pid 32942:tid 32980] [client 40.89.166.87:5001] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/1100.php"] [unique_id "ad1uE0LPfTkkAwENPeqJHQAAAEY"]
[Tue Apr 14 06:28:36.243667 2026] [:error] [pid 32941:tid 32958] [client 40.89.166.87:5114] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/1100.php"] [unique_id "ad1uFKAX0ubdpP7Z66y5bAAAAAw"]
[Tue Apr 14 06:28:36.844147 2026] [:error] [pid 32941:tid 32953] [client 40.89.166.87:5074] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/1100.php"] [unique_id "ad1uFKAX0ubdpP7Z66y5bgAAAAc"]
[Tue Apr 14 06:28:37.335501 2026] [:error] [pid 32941:tid 32946] [client 40.89.166.87:5014] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/1100.php"] [unique_id "ad1uFaAX0ubdpP7Z66y5cAAAAAA"]
[Tue Apr 14 06:28:38.035755 2026] [:error] [pid 33031:tid 33053] [client 40.89.166.87:5105] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/press.php"] [unique_id "ad1uFv4d7_j9IbSJ_rwBbAAAARM"]
[Tue Apr 14 06:28:38.739428 2026] [:error] [pid 32942:tid 32996] [client 40.89.166.87:42943] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/press.php"] [unique_id "ad1uFkLPfTkkAwENPeqJJgAAAFY"]
[Tue Apr 14 06:28:39.269718 2026] [:error] [pid 32943:tid 33003] [client 40.89.166.87:23630] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/press.php"] [unique_id "ad1uFwtqsULtpZz5NS16EQAAAII"]
[Tue Apr 14 06:28:39.740819 2026] [:error] [pid 32942:tid 32979] [client 40.89.166.87:23670] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/press.php"] [unique_id "ad1uF0LPfTkkAwENPeqJKQAAAEU"]
[Tue Apr 14 06:28:40.266728 2026] [:error] [pid 32941:tid 32970] [client 40.89.166.87:5049] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/f35.php"] [unique_id "ad1uGKAX0ubdpP7Z66y5dAAAABg"]
[Tue Apr 14 06:28:40.829503 2026] [:error] [pid 32942:tid 32985] [client 40.89.166.87:23669] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/f35.php"] [unique_id "ad1uGELPfTkkAwENPeqJKgAAAEs"]
[Tue Apr 14 06:28:41.589379 2026] [:error] [pid 32942:tid 32982] [client 40.89.166.87:5108] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/f35.php"] [unique_id "ad1uGULPfTkkAwENPeqJKwAAAEg"]
[Tue Apr 14 06:28:42.143168 2026] [:error] [pid 32943:tid 33008] [client 40.89.166.87:5041] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/f35.php"] [unique_id "ad1uGgtqsULtpZz5NS16HAAAAIc"]
[Tue Apr 14 06:28:42.675970 2026] [:error] [pid 32942:tid 32986] [client 40.89.166.87:5082] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-kz.php"] [unique_id "ad1uGkLPfTkkAwENPeqJLgAAAEw"]
[Tue Apr 14 06:28:43.151701 2026] [:error] [pid 32942:tid 32987] [client 40.89.166.87:23678] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-kz.php"] [unique_id "ad1uG0LPfTkkAwENPeqJMAAAAE0"]
[Tue Apr 14 06:28:43.790011 2026] [:error] [pid 32942:tid 32980] [client 40.89.166.87:23663] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-kz.php"] [unique_id "ad1uG0LPfTkkAwENPeqJMwAAAEY"]
[Tue Apr 14 06:28:44.588803 2026] [:error] [pid 32943:tid 33017] [client 40.89.166.87:5096] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-kz.php"] [unique_id "ad1uHAtqsULtpZz5NS16HgAAAJA"]
[Tue Apr 14 06:28:45.256395 2026] [:error] [pid 33031:tid 33043] [client 40.89.166.87:5059] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-lo.php"] [unique_id "ad1uHf4d7_j9IbSJ_rwBfgAAAQk"]
[Tue Apr 14 06:28:45.974777 2026] [:error] [pid 32941:tid 32951] [client 40.89.166.87:5044] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-lo.php"] [unique_id "ad1uHaAX0ubdpP7Z66y5eQAAAAU"]
[Tue Apr 14 06:28:46.535426 2026] [:error] [pid 32943:tid 33015] [client 40.89.166.87:4948] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-lo.php"] [unique_id "ad1uHgtqsULtpZz5NS16IAAAAI4"]
[Tue Apr 14 06:28:47.256511 2026] [:error] [pid 33031:tid 33050] [client 40.89.166.87:5083] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-lo.php"] [unique_id "ad1uH_4d7_j9IbSJ_rwBgQAAARA"]
[Tue Apr 14 06:28:48.178290 2026] [:error] [pid 32942:tid 32993] [client 40.89.166.87:5102] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/fone1.php"] [unique_id "ad1uIELPfTkkAwENPeqJOgAAAFM"]
[Tue Apr 14 06:28:49.059824 2026] [:error] [pid 32941:tid 32949] [client 40.89.166.87:42899] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/fone1.php"] [unique_id "ad1uIaAX0ubdpP7Z66y5fAAAAAM"]
[Tue Apr 14 06:28:49.738062 2026] [:error] [pid 32942:tid 32979] [client 40.89.166.87:5107] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/fone1.php"] [unique_id "ad1uIULPfTkkAwENPeqJPAAAAEU"]
[Tue Apr 14 06:28:50.500631 2026] [:error] [pid 32941:tid 32946] [client 40.89.166.87:42940] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/fone1.php"] [unique_id "ad1uIqAX0ubdpP7Z66y5gAAAAAA"]
[Tue Apr 14 06:28:51.317326 2026] [:error] [pid 32942:tid 32996] [client 40.89.166.87:4993] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/Ipv6.php"] [unique_id "ad1uI0LPfTkkAwENPeqJQAAAAFY"]
[Tue Apr 14 06:28:51.822685 2026] [:error] [pid 32943:tid 33021] [client 40.89.166.87:23673] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/Ipv6.php"] [unique_id "ad1uIwtqsULtpZz5NS16KAAAAJQ"]
[Tue Apr 14 06:28:52.339824 2026] [:error] [pid 33031:tid 33045] [client 40.89.166.87:5106] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/Ipv6.php"] [unique_id "ad1uJP4d7_j9IbSJ_rwBhAAAAQs"]
[Tue Apr 14 06:28:53.251171 2026] [:error] [pid 33031:tid 33058] [client 40.89.166.87:23654] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/Ipv6.php"] [unique_id "ad1uJf4d7_j9IbSJ_rwBhwAAARg"]
[Tue Apr 14 06:28:54.241198 2026] [:error] [pid 32943:tid 33008] [client 40.89.166.87:42882] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/file-gertdxz.php"] [unique_id "ad1uJgtqsULtpZz5NS16LAAAAIc"]
[Tue Apr 14 06:28:55.390777 2026] [:error] [pid 32943:tid 33005] [client 40.89.166.87:42890] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/file-gertdxz.php"] [unique_id "ad1uJwtqsULtpZz5NS16NAAAAIQ"]
[Tue Apr 14 06:28:56.350657 2026] [:error] [pid 32941:tid 32955] [client 40.89.166.87:23652] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/file-gertdxz.php"] [unique_id "ad1uKKAX0ubdpP7Z66y5iQAAAAk"]
[Tue Apr 14 06:28:58.076168 2026] [:error] [pid 32942:tid 32998] [client 40.89.166.87:23642] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/file-gertdxz.php"] [unique_id "ad1uKkLPfTkkAwENPeqJSgAAAFg"]
[Tue Apr 14 06:28:58.906500 2026] [:error] [pid 32943:tid 33005] [client 40.89.166.87:4936] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xper1.php"] [unique_id "ad1uKgtqsULtpZz5NS16QQAAAIQ"]
[Tue Apr 14 06:28:59.725426 2026] [:error] [pid 32943:tid 33011] [client 40.89.166.87:5020] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xper1.php"] [unique_id "ad1uKwtqsULtpZz5NS16QwAAAIo"]
[Tue Apr 14 06:29:00.322432 2026] [:error] [pid 32943:tid 33020] [client 40.89.166.87:42913] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xper1.php"] [unique_id "ad1uLAtqsULtpZz5NS16SQAAAJM"]
[Tue Apr 14 06:29:01.298968 2026] [:error] [pid 32941:tid 32965] [client 40.89.166.87:5070] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xper1.php"] [unique_id "ad1uLaAX0ubdpP7Z66y5jQAAABM"]
[Tue Apr 14 06:29:02.708439 2026] [:error] [pid 33031:tid 33043] [client 40.89.166.87:5016] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/yuzuru1.php"] [unique_id "ad1uLv4d7_j9IbSJ_rwBkgAAAQk"]
[Tue Apr 14 06:29:03.731309 2026] [:error] [pid 33031:tid 33037] [client 40.89.166.87:5077] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/yuzuru1.php"] [unique_id "ad1uL_4d7_j9IbSJ_rwBlAAAAQM"]
[Tue Apr 14 06:29:04.304998 2026] [:error] [pid 32942:tid 32998] [client 40.89.166.87:4992] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/yuzuru1.php"] [unique_id "ad1uMELPfTkkAwENPeqJUgAAAFg"]
[Tue Apr 14 06:29:04.871442 2026] [:error] [pid 33031:tid 33044] [client 40.89.166.87:5066] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/yuzuru1.php"] [unique_id "ad1uMP4d7_j9IbSJ_rwBmQAAAQo"]
[Tue Apr 14 06:29:05.733517 2026] [:error] [pid 33031:tid 33042] [client 40.89.166.87:23656] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wglum1.php"] [unique_id "ad1uMf4d7_j9IbSJ_rwBnAAAAQg"]
[Tue Apr 14 06:29:06.642701 2026] [:error] [pid 32943:tid 33018] [client 40.89.166.87:5081] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wglum1.php"] [unique_id "ad1uMgtqsULtpZz5NS16VgAAAJE"]
[Tue Apr 14 06:29:07.740945 2026] [:error] [pid 32943:tid 33005] [client 40.89.166.87:23661] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wglum1.php"] [unique_id "ad1uMwtqsULtpZz5NS16WgAAAIQ"]
[Tue Apr 14 06:29:08.302881 2026] [:error] [pid 33031:tid 33035] [client 40.89.166.87:4979] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wglum1.php"] [unique_id "ad1uNP4d7_j9IbSJ_rwBpAAAAQE"]
[Tue Apr 14 06:29:08.940163 2026] [:error] [pid 32941:tid 32963] [client 40.89.166.87:5006] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/saorix1.php"] [unique_id "ad1uNKAX0ubdpP7Z66y5kgAAABE"]
[Tue Apr 14 06:29:09.664511 2026] [:error] [pid 33031:tid 33049] [client 40.89.166.87:5012] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/saorix1.php"] [unique_id "ad1uNf4d7_j9IbSJ_rwBpgAAAQ8"]
[Tue Apr 14 06:29:10.213790 2026] [:error] [pid 33031:tid 33048] [client 40.89.166.87:5078] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/saorix1.php"] [unique_id "ad1uNv4d7_j9IbSJ_rwBqAAAAQ4"]
[Tue Apr 14 06:29:10.950814 2026] [:error] [pid 32943:tid 33024] [client 40.89.166.87:5000] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/saorix1.php"] [unique_id "ad1uNgtqsULtpZz5NS16YAAAAJc"]
[Tue Apr 14 06:29:11.662969 2026] [:error] [pid 32943:tid 33018] [client 40.89.166.87:5097] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xper.php"] [unique_id "ad1uNwtqsULtpZz5NS16YwAAAJE"]
[Tue Apr 14 06:29:12.315512 2026] [:error] [pid 33031:tid 33046] [client 40.89.166.87:23666] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xper.php"] [unique_id "ad1uOP4d7_j9IbSJ_rwBrQAAAQw"]
[Tue Apr 14 06:29:12.896702 2026] [:error] [pid 32942:tid 32996] [client 40.89.166.87:5050] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xper.php"] [unique_id "ad1uOELPfTkkAwENPeqJXAAAAFY"]
[Tue Apr 14 06:29:13.964602 2026] [:error] [pid 32943:tid 33021] [client 40.89.166.87:5118] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xper.php"] [unique_id "ad1uOQtqsULtpZz5NS16ZgAAAJQ"]
[Tue Apr 14 06:29:14.550426 2026] [:error] [pid 32943:tid 33013] [client 40.89.166.87:4964] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wxpass.php"] [unique_id "ad1uOgtqsULtpZz5NS16ZwAAAIw"]
[Tue Apr 14 06:29:15.267027 2026] [:error] [pid 32941:tid 32947] [client 40.89.166.87:23620] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wxpass.php"] [unique_id "ad1uO6AX0ubdpP7Z66y5mAAAAAE"]
[Tue Apr 14 06:29:16.045550 2026] [:error] [pid 33031:tid 33043] [client 40.89.166.87:5079] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wxpass.php"] [unique_id "ad1uPP4d7_j9IbSJ_rwBuQAAAQk"]
[Tue Apr 14 06:29:16.558419 2026] [:error] [pid 33031:tid 33036] [client 40.89.166.87:5084] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wxpass.php"] [unique_id "ad1uPP4d7_j9IbSJ_rwBvAAAAQI"]
[Tue Apr 14 06:29:17.307379 2026] [:error] [pid 33031:tid 33051] [client 40.89.166.87:5025] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/000.php"] [unique_id "ad1uPf4d7_j9IbSJ_rwBwwAAARE"]
[Tue Apr 14 06:29:17.833370 2026] [:error] [pid 32943:tid 33007] [client 40.89.166.87:4879] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/000.php"] [unique_id "ad1uPQtqsULtpZz5NS16bwAAAIY"]
[Tue Apr 14 06:29:18.554585 2026] [:error] [pid 33031:tid 33054] [client 40.89.166.87:4959] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/000.php"] [unique_id "ad1uPv4d7_j9IbSJ_rwByAAAARQ"]
[Tue Apr 14 06:29:19.154089 2026] [:error] [pid 32943:tid 33022] [client 40.89.166.87:5115] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/000.php"] [unique_id "ad1uPwtqsULtpZz5NS16cgAAAJU"]
[Tue Apr 14 06:29:20.240432 2026] [:error] [pid 33031:tid 33046] [client 40.89.166.87:4937] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/config.php"] [unique_id "ad1uQP4d7_j9IbSJ_rwBzQAAAQw"]
[Tue Apr 14 06:29:20.806289 2026] [:error] [pid 33031:tid 33058] [client 40.89.166.87:5095] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/config.php"] [unique_id "ad1uQP4d7_j9IbSJ_rwBzgAAARg"]
[Tue Apr 14 06:29:22.414185 2026] [:error] [pid 33031:tid 33046] [client 40.89.166.87:5111] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/config.php"] [unique_id "ad1uQv4d7_j9IbSJ_rwB0gAAAQw"]
[Tue Apr 14 06:29:22.982328 2026] [:error] [pid 32943:tid 33014] [client 40.89.166.87:42938] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/config.php"] [unique_id "ad1uQgtqsULtpZz5NS16eQAAAI0"]
[Tue Apr 14 06:29:24.379599 2026] [proxy_fcgi:error] [pid 33031:tid 33043] [client 40.89.166.87:5004] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 06:29:24.644804 2026] [proxy_fcgi:error] [pid 33031:tid 33054] [client 40.89.166.87:5004] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 06:29:24.880790 2026] [proxy_fcgi:error] [pid 33031:tid 33058] [client 40.89.166.87:5004] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 06:29:25.119464 2026] [proxy_fcgi:error] [pid 33031:tid 33039] [client 40.89.166.87:5004] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 06:29:25.369001 2026] [proxy_fcgi:error] [pid 33031:tid 33053] [client 40.89.166.87:5004] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 06:29:25.780103 2026] [proxy_fcgi:error] [pid 33031:tid 33049] [client 40.89.166.87:5004] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 06:29:26.114902 2026] [proxy_fcgi:error] [pid 33031:tid 33051] [client 40.89.166.87:5004] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 06:29:26.421735 2026] [:error] [pid 33031:tid 33057] [client 40.89.166.87:5004] [client 40.89.166.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/wincust.php"] [unique_id "ad1uRv4d7_j9IbSJ_rwB8gAAARc"]
[Tue Apr 14 06:29:27.674906 2026] [proxy_fcgi:error] [pid 32943:tid 33014] [client 40.89.166.87:4999] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 06:29:27.912353 2026] [proxy_fcgi:error] [pid 32943:tid 33020] [client 40.89.166.87:4999] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 06:29:28.149068 2026] [proxy_fcgi:error] [pid 32943:tid 33016] [client 40.89.166.87:4999] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 06:29:28.392949 2026] [proxy_fcgi:error] [pid 32943:tid 33021] [client 40.89.166.87:4999] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 06:29:28.626508 2026] [:error] [pid 32943:tid 33002] [client 40.89.166.87:4999] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws61.php"] [unique_id "ad1uSAtqsULtpZz5NS16jAAAAIE"]
[Tue Apr 14 06:29:30.183566 2026] [:error] [pid 33031:tid 33043] [client 40.89.166.87:42897] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws61.php"] [unique_id "ad1uSv4d7_j9IbSJ_rwB-AAAAQk"]
[Tue Apr 14 06:29:31.374072 2026] [:error] [pid 32942:tid 32994] [client 40.89.166.87:23618] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws61.php"] [unique_id "ad1uS0LPfTkkAwENPeqJbAAAAFQ"]
[Tue Apr 14 06:29:34.547512 2026] [:error] [pid 32942:tid 32981] [client 40.89.166.87:42881] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws61.php"] [unique_id "ad1uTkLPfTkkAwENPeqJbwAAAEc"]
[Tue Apr 14 06:29:35.377017 2026] [:error] [pid 32942:tid 32996] [client 40.89.166.87:4941] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws66.php"] [unique_id "ad1uT0LPfTkkAwENPeqJcQAAAFY"]
[Tue Apr 14 06:29:36.650559 2026] [:error] [pid 32943:tid 33005] [client 40.89.166.87:5013] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws66.php"] [unique_id "ad1uUAtqsULtpZz5NS16nwAAAIQ"]
[Tue Apr 14 06:29:37.341870 2026] [:error] [pid 32943:tid 33002] [client 40.89.166.87:42904] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws66.php"] [unique_id "ad1uUQtqsULtpZz5NS16oAAAAIE"]
[Tue Apr 14 06:29:38.159552 2026] [:error] [pid 32941:tid 32950] [client 40.89.166.87:5054] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws66.php"] [unique_id "ad1uUqAX0ubdpP7Z66y5oAAAAAQ"]
[Tue Apr 14 06:29:38.728972 2026] [:error] [pid 32942:tid 32988] [client 40.89.166.87:5043] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws80.php"] [unique_id "ad1uUkLPfTkkAwENPeqJdQAAAE4"]
[Tue Apr 14 06:29:39.585523 2026] [:error] [pid 33031:tid 33051] [client 40.89.166.87:4881] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws80.php"] [unique_id "ad1uU_4d7_j9IbSJ_rwCCwAAARE"]
[Tue Apr 14 06:29:40.380437 2026] [:error] [pid 33031:tid 33037] [client 40.89.166.87:5039] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws80.php"] [unique_id "ad1uVP4d7_j9IbSJ_rwCDQAAAQM"]
[Tue Apr 14 06:29:40.970409 2026] [:error] [pid 33031:tid 33045] [client 40.89.166.87:4958] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws80.php"] [unique_id "ad1uVP4d7_j9IbSJ_rwCEAAAAQs"]
[Tue Apr 14 06:29:41.771999 2026] [:error] [pid 32942:tid 32979] [client 40.89.166.87:5026] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xynz.php"] [unique_id "ad1uVULPfTkkAwENPeqJewAAAEU"]
[Tue Apr 14 06:29:42.913607 2026] [:error] [pid 32941:tid 32963] [client 40.89.166.87:5042] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xynz.php"] [unique_id "ad1uVqAX0ubdpP7Z66y5pQAAABE"]
[Tue Apr 14 06:29:46.028948 2026] [:error] [pid 32943:tid 33012] [client 40.89.166.87:5051] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xynz.php"] [unique_id "ad1uWgtqsULtpZz5NS16rgAAAIs"]
[Tue Apr 14 06:29:48.266039 2026] [:error] [pid 32943:tid 33013] [client 40.89.166.87:5007] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xynz.php"] [unique_id "ad1uXAtqsULtpZz5NS16sQAAAIw"]
[Tue Apr 14 06:29:49.101865 2026] [:error] [pid 32942:tid 32995] [client 40.89.166.87:42884] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-01ul.php"] [unique_id "ad1uXULPfTkkAwENPeqJjAAAAFU"]
[Tue Apr 14 06:29:52.182442 2026] [:error] [pid 32942:tid 32991] [client 40.89.166.87:5068] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-01ul.php"] [unique_id "ad1uYELPfTkkAwENPeqJkAAAAFE"]
[Tue Apr 14 06:29:54.392998 2026] [:error] [pid 32941:tid 32962] [client 40.89.166.87:23658] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-01ul.php"] [unique_id "ad1uYqAX0ubdpP7Z66y5swAAABA"]
[Tue Apr 14 06:29:56.549181 2026] [:error] [pid 32943:tid 33018] [client 40.89.166.87:4930] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-01ul.php"] [unique_id "ad1uZAtqsULtpZz5NS16wwAAAJE"]
[Tue Apr 14 06:29:59.066140 2026] [:error] [pid 32943:tid 33017] [client 40.89.166.87:5028] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/e7.php"] [unique_id "ad1uZwtqsULtpZz5NS16yAAAAJA"]
[Tue Apr 14 06:30:01.600215 2026] [:error] [pid 32943:tid 33023] [client 40.89.166.87:4869] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/e7.php"] [unique_id "ad1uaQtqsULtpZz5NS16zgAAAJY"]
[Tue Apr 14 06:30:02.588691 2026] [:error] [pid 33031:tid 33049] [client 40.89.166.87:5037] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/e7.php"] [unique_id "ad1uav4d7_j9IbSJ_rwCNAAAAQ8"]
[Tue Apr 14 06:30:04.061513 2026] [:error] [pid 32941:tid 32946] [client 40.89.166.87:23622] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/e7.php"] [unique_id "ad1ubKAX0ubdpP7Z66y5xgAAAAA"]
[Tue Apr 14 06:30:05.631155 2026] [:error] [pid 32941:tid 32970] [client 40.89.166.87:5019] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/e3.php"] [unique_id "ad1ubaAX0ubdpP7Z66y5yQAAABg"]
[Tue Apr 14 06:30:06.840796 2026] [:error] [pid 32943:tid 33016] [client 40.89.166.87:4918] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/e3.php"] [unique_id "ad1ubgtqsULtpZz5NS162QAAAI8"]
[Tue Apr 14 06:30:08.221953 2026] [:error] [pid 32942:tid 32983] [client 40.89.166.87:5032] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/e3.php"] [unique_id "ad1ucELPfTkkAwENPeqJowAAAEk"]
[Tue Apr 14 06:30:09.918329 2026] [:error] [pid 32943:tid 33004] [client 40.89.166.87:5103] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/e3.php"] [unique_id "ad1ucQtqsULtpZz5NS162wAAAIM"]
[Tue Apr 14 06:30:11.596368 2026] [:error] [pid 32943:tid 33023] [client 40.89.166.87:4942] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/aevly.php"] [unique_id "ad1ucwtqsULtpZz5NS164QAAAJY"]
[Tue Apr 14 06:30:12.359552 2026] [:error] [pid 33031:tid 33038] [client 40.89.166.87:4931] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/aevly.php"] [unique_id "ad1udP4d7_j9IbSJ_rwCQwAAAQQ"]
[Tue Apr 14 06:30:14.796633 2026] [:error] [pid 33031:tid 33054] [client 40.89.166.87:5024] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/aevly.php"] [unique_id "ad1udv4d7_j9IbSJ_rwCSQAAARQ"]
[Tue Apr 14 06:30:16.964311 2026] [:error] [pid 32942:tid 32997] [client 40.89.166.87:42895] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/aevly.php"] [unique_id "ad1ueELPfTkkAwENPeqJqAAAAFc"]
[Tue Apr 14 06:30:19.089490 2026] [:error] [pid 32942:tid 32989] [client 40.89.166.87:23677] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bthil.php"] [unique_id "ad1ue0LPfTkkAwENPeqJqwAAAE8"]
[Tue Apr 14 06:30:20.560299 2026] [:error] [pid 32943:tid 33024] [client 40.89.166.87:5092] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bthil.php"] [unique_id "ad1ufAtqsULtpZz5NS166gAAAJc"]
[Tue Apr 14 06:30:21.148935 2026] [:error] [pid 33031:tid 33050] [client 40.89.166.87:4963] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bthil.php"] [unique_id "ad1uff4d7_j9IbSJ_rwCXQAAARA"]
[Tue Apr 14 06:30:22.031458 2026] [:error] [pid 32942:tid 32981] [client 40.89.166.87:4947] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bthil.php"] [unique_id "ad1ufkLPfTkkAwENPeqJtgAAAEc"]
[Tue Apr 14 06:30:23.278333 2026] [:error] [pid 32941:tid 32947] [client 40.89.166.87:5033] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-class.php"] [unique_id "ad1uf6AX0ubdpP7Z66y51QAAAAE"]
[Tue Apr 14 06:30:24.198139 2026] [:error] [pid 33031:tid 33034] [client 40.89.166.87:42939] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-class.php"] [unique_id "ad1ugP4d7_j9IbSJ_rwCXgAAAQA"]
[Tue Apr 14 06:30:25.363798 2026] [:error] [pid 32943:tid 33010] [client 40.89.166.87:5036] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-class.php"] [unique_id "ad1ugQtqsULtpZz5NS168AAAAIk"]
[Tue Apr 14 06:30:26.427476 2026] [:error] [pid 32943:tid 33022] [client 40.89.166.87:4950] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-class.php"] [unique_id "ad1uggtqsULtpZz5NS168gAAAJU"]
[Tue Apr 14 06:30:27.234278 2026] [:error] [pid 33031:tid 33036] [client 40.89.166.87:4929] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/cilus.php"] [unique_id "ad1ug_4d7_j9IbSJ_rwCZAAAAQI"]
[Tue Apr 14 06:30:28.218100 2026] [proxy_fcgi:error] [pid 32941:tid 32946] [client 40.89.166.87:5053] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 06:30:28.466869 2026] [proxy_fcgi:error] [pid 32941:tid 32952] [client 40.89.166.87:5053] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 06:30:28.702609 2026] [proxy_fcgi:error] [pid 32941:tid 32953] [client 40.89.166.87:5053] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 06:30:28.938729 2026] [proxy_fcgi:error] [pid 32941:tid 32957] [client 40.89.166.87:5053] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 06:30:29.182388 2026] [proxy_fcgi:error] [pid 32941:tid 32969] [client 40.89.166.87:5053] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 06:30:29.419491 2026] [proxy_fcgi:error] [pid 32941:tid 32949] [client 40.89.166.87:5053] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 06:30:29.654779 2026] [proxy_fcgi:error] [pid 32941:tid 32961] [client 40.89.166.87:5053] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 06:30:29.903775 2026] [proxy_fcgi:error] [pid 32941:tid 32970] [client 40.89.166.87:5053] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 06:30:30.139733 2026] [proxy_fcgi:error] [pid 32941:tid 32959] [client 40.89.166.87:5053] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 06:30:30.389837 2026] [proxy_fcgi:error] [pid 32941:tid 32966] [client 40.89.166.87:5053] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 06:30:30.630676 2026] [proxy_fcgi:error] [pid 32941:tid 32950] [client 40.89.166.87:5053] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 06:37:55.242299 2026] [proxy_fcgi:error] [pid 35628:tid 35635] [client 185.82.72.191:59845] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 06:37:55.524927 2026] [proxy_fcgi:error] [pid 35628:tid 35637] [client 185.82.72.191:59845] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 06:37:55.815808 2026] [proxy_fcgi:error] [pid 35628:tid 35656] [client 185.82.72.191:59845] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 06:37:56.092311 2026] [proxy_fcgi:error] [pid 35628:tid 35656] [client 185.82.72.191:59845] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 06:37:56.375309 2026] [proxy_fcgi:error] [pid 35628:tid 35644] [client 185.82.72.191:59845] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 06:37:56.655320 2026] [proxy_fcgi:error] [pid 35628:tid 35651] [client 185.82.72.191:59845] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 06:37:56.969375 2026] [proxy_fcgi:error] [pid 35628:tid 35644] [client 185.82.72.191:59845] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 06:37:57.251517 2026] [proxy_fcgi:error] [pid 35628:tid 35633] [client 185.82.72.191:59845] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 06:37:57.831311 2026] [proxy_fcgi:error] [pid 35628:tid 35638] [client 185.82.72.191:59845] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 06:37:58.115551 2026] [proxy_fcgi:error] [pid 35628:tid 35651] [client 185.82.72.191:59845] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 06:37:58.387295 2026] [proxy_fcgi:error] [pid 35628:tid 35644] [client 185.82.72.191:59845] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 06:37:58.666310 2026] [proxy_fcgi:error] [pid 35628:tid 35645] [client 185.82.72.191:59845] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 06:37:58.941456 2026] [proxy_fcgi:error] [pid 35628:tid 35638] [client 185.82.72.191:59845] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 06:37:59.229301 2026] [proxy_fcgi:error] [pid 35628:tid 35644] [client 185.82.72.191:59845] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 06:37:59.515303 2026] [proxy_fcgi:error] [pid 35628:tid 35645] [client 185.82.72.191:59845] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 06:37:59.801294 2026] [proxy_fcgi:error] [pid 35628:tid 35648] [client 185.82.72.191:59845] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 06:38:00.104332 2026] [proxy_fcgi:error] [pid 35628:tid 35641] [client 185.82.72.191:59845] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 06:38:00.400143 2026] [proxy_fcgi:error] [pid 35628:tid 35656] [client 185.82.72.191:59845] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 06:38:04.480906 2026] [:error] [pid 35628:tid 35655] [client 185.82.72.191:59845] [client 185.82.72.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "ad1wTOfPm-ozGuwCWXKLiwAAABc"]
[Tue Apr 14 06:38:05.884797 2026] [:error] [pid 35713:tid 35720] [client 185.82.72.133:36777] [client 185.82.72.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "ad1wTa6-hhx6ZepqOSlltQAAAMQ"]
[Tue Apr 14 06:38:08.471494 2026] [proxy_fcgi:error] [pid 35628:tid 35648] [client 185.82.72.151:50601] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 06:38:09.366124 2026] [:error] [pid 35628:tid 35647] [client 185.82.72.151:50601] [client 185.82.72.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dwelectservices.com.au"] [uri "/tinyfilemanager.php"] [unique_id "ad1wUefPm-ozGuwCWXKL5QAAAA8"]
[Tue Apr 14 06:38:10.648320 2026] [proxy_fcgi:error] [pid 35713:tid 35733] [client 185.82.72.146:24635] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 06:38:10.932398 2026] [:error] [pid 35713:tid 35728] [client 185.82.72.146:24635] [client 185.82.72.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "ad1wUq6-hhx6ZepqOSlmCgAAAMw"]
[Tue Apr 14 06:38:11.790319 2026] [proxy_fcgi:error] [pid 35713:tid 35726] [client 185.82.72.153:31967] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 06:38:13.213612 2026] [:error] [pid 35713:tid 35726] [client 185.82.72.153:31967] [client 185.82.72.153] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "ad1wVa6-hhx6ZepqOSlmNQAAAMo"]
[Tue Apr 14 06:38:14.058450 2026] [:error] [pid 35713:tid 35739] [client 185.82.72.120:21061] [client 185.82.72.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "ad1wVq6-hhx6ZepqOSlmPgAAANc"]
[Tue Apr 14 06:38:14.620102 2026] [:error] [pid 35628:tid 35639] [client 185.82.72.167:54067] [client 185.82.72.167] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "ad1wVufPm-ozGuwCWXKMOwAAAAc"]
[Tue Apr 14 06:38:15.171675 2026] [:error] [pid 35713:tid 35721] [client 185.82.72.160:21865] [client 185.82.72.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "ad1wV66-hhx6ZepqOSlmYAAAAMU"]
[Tue Apr 14 06:38:15.744844 2026] [:error] [pid 35713:tid 35733] [client 185.82.72.166:40959] [client 185.82.72.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "ad1wV66-hhx6ZepqOSlmbAAAANE"]
[Tue Apr 14 06:38:16.308512 2026] [:error] [pid 35629:tid 35665] [client 185.82.72.155:35881] [client 185.82.72.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "ad1wWDY8VahzC1YJBSiX3AAAAEY"]
[Tue Apr 14 06:38:17.130689 2026] [:error] [pid 35713:tid 35722] [client 185.82.72.172:49481] [client 185.82.72.172] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "ad1wWa6-hhx6ZepqOSlmgQAAAMY"]
[Tue Apr 14 06:38:43.508414 2026] [autoindex:error] [pid 37226:tid 37248] [client 185.82.72.140:26869] AH01276: Cannot serve directory /home/dwelects/public_html/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 14 06:38:52.632803 2026] [autoindex:error] [pid 37226:tid 37248] [client 185.82.72.140:26869] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 14 07:27:57.880542 2026] [:error] [pid 37048:tid 37056] [client 216.73.216.41:4946] [client 216.73.216.41] ModSecurity: Warning. Pattern match "^$" at REQUEST_HEADERS:user-agent. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "120"] [id "217240"] [rev "3"] [msg "COMODO WAF: Empty User Agent Header||www.dwelectservices.com.au|F|5"] [data "REQUEST_HEADERS:user-agent="] [severity "NOTICE"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dwelectservices.com.au"] [uri "/robots.txt"] [unique_id "ad17_Z52Bo1OyzeXo_yAaAAAAQY"]
[Tue Apr 14 14:46:02.127206 2026] [:error] [pid 35628:tid 35646] [client 13.232.86.219:49878] [client 13.232.86.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.git/config"] [unique_id "ad3iqufPm-ozGuwCWXLwtQAAAA4"]
[Tue Apr 14 14:46:02.981697 2026] [:error] [pid 35628:tid 35652] [client 13.232.86.219:49892] [client 13.232.86.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env"] [unique_id "ad3iqufPm-ozGuwCWXLwuAAAABQ"]
[Tue Apr 14 14:46:03.773269 2026] [:error] [pid 4902:tid 4904] [client 13.232.86.219:59188] [client 13.232.86.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.local"] [unique_id "ad3iq4v8vJvl9lGy39hpnAAAAYA"]
[Tue Apr 14 14:46:04.608299 2026] [:error] [pid 35713:tid 35718] [client 13.232.86.219:59200] [client 13.232.86.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.production"] [unique_id "ad3irK6-hhx6ZepqOSlkIgAAAMI"]
[Tue Apr 14 14:46:05.385185 2026] [:error] [pid 35629:tid 35673] [client 13.232.86.219:59216] [client 13.232.86.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.staging"] [unique_id "ad3irTY8VahzC1YJBSgLJQAAAE4"]
[Tue Apr 14 14:46:06.081658 2026] [:error] [pid 4902:tid 4916] [client 13.232.86.219:59218] [client 13.232.86.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.development"] [unique_id "ad3irov8vJvl9lGy39hpnQAAAYw"]
[Tue Apr 14 14:46:06.783928 2026] [:error] [pid 35630:tid 35701] [client 13.232.86.219:59228] [client 13.232.86.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.test"] [unique_id "ad3irjer0pVFxOiOauUmCAAAAI8"]
[Tue Apr 14 14:46:07.506429 2026] [:error] [pid 37226:tid 37247] [client 13.232.86.219:59244] [client 13.232.86.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.remote"] [unique_id "ad3ir5OA5-IQ0IVmQCoywAAAAVM"]
[Tue Apr 14 14:46:08.254833 2026] [:error] [pid 35630:tid 35691] [client 13.232.86.219:59252] [client 13.232.86.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.bak"] [unique_id "ad3isDer0pVFxOiOauUmDQAAAIU"]
[Tue Apr 14 14:46:08.980682 2026] [:error] [pid 18776:tid 18784] [client 13.232.86.219:59268] [client 13.232.86.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.backup"] [unique_id "ad3isMIjIcAYZxezzAWxoQAAAcY"]
[Tue Apr 14 14:46:09.762938 2026] [:error] [pid 18776:tid 18793] [client 13.232.86.219:59276] [client 13.232.86.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.save"] [unique_id "ad3iscIjIcAYZxezzAWxpAAAAc8"]
[Tue Apr 14 14:46:10.499837 2026] [:error] [pid 35629:tid 35662] [client 13.232.86.219:59284] [client 13.232.86.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.old"] [unique_id "ad3isjY8VahzC1YJBSgLKAAAAEM"]
[Tue Apr 14 14:46:11.207920 2026] [:error] [pid 35629:tid 35681] [client 13.232.86.219:59298] [client 13.232.86.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.sample"] [unique_id "ad3iszY8VahzC1YJBSgLKgAAAFY"]
[Tue Apr 14 14:46:11.891655 2026] [:error] [pid 35629:tid 35660] [client 13.232.86.219:59308] [client 13.232.86.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.example"] [unique_id "ad3iszY8VahzC1YJBSgLLwAAAEE"]
[Tue Apr 14 14:46:12.720105 2026] [:error] [pid 35628:tid 35651] [client 13.232.86.219:59324] [client 13.232.86.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.dev"] [unique_id "ad3itOfPm-ozGuwCWXLwwwAAABM"]
[Tue Apr 14 14:46:13.473070 2026] [:error] [pid 37226:tid 37228] [client 13.232.86.219:59328] [client 13.232.86.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.prod"] [unique_id "ad3itZOA5-IQ0IVmQCoyxAAAAUA"]
[Tue Apr 14 14:46:14.212446 2026] [:error] [pid 35713:tid 35736] [client 13.232.86.219:43430] [client 13.232.86.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.stage"] [unique_id "ad3itq6-hhx6ZepqOSlkIwAAANQ"]
[Tue Apr 14 14:46:14.988831 2026] [:error] [pid 35629:tid 35672] [client 13.232.86.219:43442] [client 13.232.86.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.ci"] [unique_id "ad3itjY8VahzC1YJBSgLNQAAAE0"]
[Tue Apr 14 14:46:15.712765 2026] [:error] [pid 35713:tid 35723] [client 13.232.86.219:43450] [client 13.232.86.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.docker"] [unique_id "ad3it66-hhx6ZepqOSlkJAAAAMc"]
[Tue Apr 14 14:46:16.481582 2026] [:error] [pid 35713:tid 35721] [client 13.232.86.219:43456] [client 13.232.86.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.live"] [unique_id "ad3iuK6-hhx6ZepqOSlkJQAAAMU"]
[Tue Apr 14 14:46:17.259774 2026] [:error] [pid 35628:tid 35655] [client 13.232.86.219:43466] [client 13.232.86.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.preprod"] [unique_id "ad3iuefPm-ozGuwCWXLwygAAABc"]
[Tue Apr 14 14:46:18.018168 2026] [:error] [pid 35630:tid 35691] [client 13.232.86.219:43476] [client 13.232.86.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.uat"] [unique_id "ad3iujer0pVFxOiOauUmEAAAAIU"]
[Tue Apr 14 14:46:18.782159 2026] [:error] [pid 35630:tid 35696] [client 13.232.86.219:43490] [client 13.232.86.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.dist"] [unique_id "ad3iujer0pVFxOiOauUmEwAAAIo"]
[Tue Apr 14 14:46:19.451619 2026] [:error] [pid 35713:tid 35729] [client 13.232.86.219:43500] [client 13.232.86.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.swp"] [unique_id "ad3iu66-hhx6ZepqOSlkJwAAAM0"]
[Tue Apr 14 14:46:20.135531 2026] [:error] [pid 35630:tid 35690] [client 13.232.86.219:43512] [client 13.232.86.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env~"] [unique_id "ad3ivDer0pVFxOiOauUmFwAAAIQ"]
[Tue Apr 14 14:46:20.860959 2026] [:error] [pid 35630:tid 35707] [client 13.232.86.219:43518] [client 13.232.86.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/app/.env"] [unique_id "ad3ivDer0pVFxOiOauUmGQAAAJU"]
[Tue Apr 14 14:46:21.591900 2026] [:error] [pid 35628:tid 35641] [client 13.232.86.219:43524] [client 13.232.86.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/apps/.env"] [unique_id "ad3ivefPm-ozGuwCWXLw1AAAAAk"]
[Tue Apr 14 14:46:22.300588 2026] [:error] [pid 35628:tid 35654] [client 13.232.86.219:43538] [client 13.232.86.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/api/.env"] [unique_id "ad3ivufPm-ozGuwCWXLw1wAAABY"]
[Tue Apr 14 14:46:23.091535 2026] [:error] [pid 35629:tid 35671] [client 13.232.86.219:43550] [client 13.232.86.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/web/.env"] [unique_id "ad3ivzY8VahzC1YJBSgLOAAAAEw"]
[Tue Apr 14 14:46:23.786660 2026] [:error] [pid 35630:tid 35709] [client 13.232.86.219:43882] [client 13.232.86.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/site/.env"] [unique_id "ad3ivzer0pVFxOiOauUmHwAAAJc"]
[Tue Apr 14 14:46:24.471112 2026] [:error] [pid 35629:tid 35679] [client 13.232.86.219:43898] [client 13.232.86.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/public/.env"] [unique_id "ad3iwDY8VahzC1YJBSgLOgAAAFQ"]
[Tue Apr 14 16:35:06.521691 2026] [:error] [pid 59987:tid 60071] [client 34.85.144.184:54196] [client 34.85.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 34.85.144.184, counter = 8"] [hostname "dwelectservices.com.au"] [uri "/"] [unique_id "ad38OlWpk-Tfi6_vLKrK7AAAAJg"]
[Tue Apr 14 16:35:06.955400 2026] [:error] [pid 59987:tid 60069] [client 34.85.144.184:65468] [client 34.85.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 34.85.144.184, counter = 8"] [hostname "dwelectservices.com.au"] [uri "/"] [unique_id "ad38OlWpk-Tfi6_vLKrK7QAAAJY"]
[Tue Apr 14 16:35:07.387050 2026] [:error] [pid 59986:tid 60030] [client 34.85.144.184:62441] [client 34.85.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 34.85.144.184, counter = 8"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "ad38O56axKeW6bX4H7cHCgAAAEo"]
[Tue Apr 14 18:47:22.163450 2026] [:error] [pid 59987:tid 60067] [client 161.142.139.118:5619] [client 161.142.139.118] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 161.142.139.118, incrementing ddos counter"] [hostname "dwelectservices.com.au"] [uri "/xmlrpc.php"] [unique_id "ad4bOlWpk-Tfi6_vLKr8pgAAAJQ"]
[Tue Apr 14 18:47:22.173808 2026] [proxy_fcgi:error] [pid 59987:tid 60067] [client 161.142.139.118:5619] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 20:38:40.347968 2026] [proxy_fcgi:error] [pid 59986:tid 60035] [client 172.213.137.79:28932] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 20:38:40.600395 2026] [proxy_fcgi:error] [pid 59986:tid 60029] [client 172.213.137.79:28932] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 20:38:40.849311 2026] [proxy_fcgi:error] [pid 59986:tid 60040] [client 172.213.137.79:28932] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 20:38:41.091783 2026] [proxy_fcgi:error] [pid 59986:tid 60026] [client 172.213.137.79:28932] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 20:38:41.335477 2026] [proxy_fcgi:error] [pid 59986:tid 60042] [client 172.213.137.79:28932] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 20:38:41.592488 2026] [proxy_fcgi:error] [pid 59986:tid 60041] [client 172.213.137.79:28932] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 20:38:41.848657 2026] [proxy_fcgi:error] [pid 59986:tid 60020] [client 172.213.137.79:28932] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 20:38:42.083154 2026] [proxy_fcgi:error] [pid 59986:tid 60039] [client 172.213.137.79:28932] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 20:38:42.322754 2026] [:error] [pid 59986:tid 60033] [client 172.213.137.79:28932] [client 172.213.137.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/theme-compat/wp-login.php"] [unique_id "ad41Up6axKeW6bX4H7dgvAAAAE0"]
[Tue Apr 14 20:38:42.978791 2026] [proxy_fcgi:error] [pid 59985:tid 60015] [client 172.213.137.79:16912] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 20:38:43.227436 2026] [proxy_fcgi:error] [pid 59985:tid 60009] [client 172.213.137.79:16912] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 20:38:43.459990 2026] [:error] [pid 59985:tid 60008] [client 172.213.137.79:16912] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ng.php"] [unique_id "ad41U-gHaxkvLE6V1klcoQAAAA8"]
[Tue Apr 14 20:38:44.031363 2026] [:error] [pid 59985:tid 59996] [client 172.213.137.79:9575] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ng.php"] [unique_id "ad41VOgHaxkvLE6V1klcogAAAAM"]
[Tue Apr 14 20:38:44.653563 2026] [:error] [pid 3778:tid 3802] [client 172.213.137.79:13866] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ng.php"] [unique_id "ad41VBx5DfpNmYF_PaHbhQAAAVY"]
[Tue Apr 14 20:38:45.286673 2026] [:error] [pid 59986:tid 60039] [client 172.213.137.79:15080] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ng.php"] [unique_id "ad41VZ6axKeW6bX4H7dgwAAAAFM"]
[Tue Apr 14 20:38:45.841037 2026] [:error] [pid 59986:tid 60036] [client 172.213.137.79:42158] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tiny2.php"] [unique_id "ad41VZ6axKeW6bX4H7dgwwAAAFA"]
[Tue Apr 14 20:38:46.447613 2026] [:error] [pid 59986:tid 60040] [client 172.213.137.79:36336] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tiny2.php"] [unique_id "ad41Vp6axKeW6bX4H7dgxwAAAFQ"]
[Tue Apr 14 20:38:46.968070 2026] [:error] [pid 3810:tid 3835] [client 172.213.137.79:13832] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tiny2.php"] [unique_id "ad41Vsqc5XaYZhFXVGePvAAAAZY"]
[Tue Apr 14 20:38:47.523817 2026] [:error] [pid 3778:tid 3782] [client 172.213.137.79:16896] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tiny2.php"] [unique_id "ad41Vxx5DfpNmYF_PaHbiQAAAUI"]
[Tue Apr 14 20:38:48.037662 2026] [:error] [pid 3778:tid 3790] [client 172.213.137.79:16933] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/state.php"] [unique_id "ad41WBx5DfpNmYF_PaHbjAAAAUo"]
[Tue Apr 14 20:38:48.622817 2026] [:error] [pid 59985:tid 59998] [client 172.213.137.79:15049] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/state.php"] [unique_id "ad41WOgHaxkvLE6V1klcqAAAAAU"]
[Tue Apr 14 20:38:49.235781 2026] [:error] [pid 22177:tid 22201] [client 172.213.137.79:47442] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/state.php"] [unique_id "ad41WYTVeJSXHDIlEDt_IgAAARY"]
[Tue Apr 14 20:38:49.838034 2026] [:error] [pid 60074:tid 60079] [client 172.213.137.79:16957] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/state.php"] [unique_id "ad41WetqnEmNU9vpHCmVZQAAAMM"]
[Tue Apr 14 20:38:50.364051 2026] [:error] [pid 60074:tid 60084] [client 172.213.137.79:13942] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2.php"] [unique_id "ad41WutqnEmNU9vpHCmVaQAAAMg"]
[Tue Apr 14 20:38:51.068278 2026] [:error] [pid 59986:tid 60042] [client 172.213.137.79:16911] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2.php"] [unique_id "ad41W56axKeW6bX4H7dgygAAAFY"]
[Tue Apr 14 20:38:51.608125 2026] [:error] [pid 59986:tid 60020] [client 172.213.137.79:28995] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2.php"] [unique_id "ad41W56axKeW6bX4H7dgzAAAAEA"]
[Tue Apr 14 20:38:52.361287 2026] [:error] [pid 3778:tid 3782] [client 172.213.137.79:29022] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2.php"] [unique_id "ad41XBx5DfpNmYF_PaHblAAAAUI"]
[Tue Apr 14 20:38:53.259076 2026] [:error] [pid 60074:tid 60085] [client 172.213.137.79:17321] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wps.php"] [unique_id "ad41XetqnEmNU9vpHCmVeQAAAMk"]
[Tue Apr 14 20:38:54.022110 2026] [:error] [pid 22177:tid 22182] [client 172.213.137.79:12246] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wps.php"] [unique_id "ad41XoTVeJSXHDIlEDt_IwAAAQM"]
[Tue Apr 14 20:38:54.557139 2026] [:error] [pid 59986:tid 60025] [client 172.213.137.79:25508] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wps.php"] [unique_id "ad41Xp6axKeW6bX4H7dgzgAAAEU"]
[Tue Apr 14 20:38:55.157043 2026] [:error] [pid 3810:tid 3821] [client 172.213.137.79:14435] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wps.php"] [unique_id "ad41X8qc5XaYZhFXVGePxQAAAYg"]
[Tue Apr 14 20:38:55.650533 2026] [:error] [pid 59986:tid 60024] [client 172.213.137.79:17313] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ayk.php"] [unique_id "ad41X56axKeW6bX4H7dg0AAAAEQ"]
[Tue Apr 14 20:38:56.208975 2026] [:error] [pid 59987:tid 60050] [client 172.213.137.79:1321] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ayk.php"] [unique_id "ad41YFWpk-Tfi6_vLKos1wAAAIM"]
[Tue Apr 14 20:38:56.788057 2026] [:error] [pid 59987:tid 60062] [client 172.213.137.79:22950] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ayk.php"] [unique_id "ad41YFWpk-Tfi6_vLKos2QAAAI8"]
[Tue Apr 14 20:38:57.399680 2026] [:error] [pid 59986:tid 60027] [client 172.213.137.79:9323] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ayk.php"] [unique_id "ad41YZ6axKeW6bX4H7dg0gAAAEc"]
[Tue Apr 14 20:38:58.019378 2026] [:error] [pid 3810:tid 3832] [client 172.213.137.79:25886] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wgift1.php"] [unique_id "ad41Ysqc5XaYZhFXVGePygAAAZM"]
[Tue Apr 14 20:38:58.570967 2026] [:error] [pid 3810:tid 3823] [client 172.213.137.79:25532] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wgift1.php"] [unique_id "ad41Ysqc5XaYZhFXVGePzQAAAYo"]
[Tue Apr 14 20:38:59.208249 2026] [:error] [pid 22177:tid 22194] [client 172.213.137.79:25495] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wgift1.php"] [unique_id "ad41Y4TVeJSXHDIlEDt_KAAAAQ8"]
[Tue Apr 14 20:38:59.830104 2026] [:error] [pid 3810:tid 3815] [client 172.213.137.79:17316] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wgift1.php"] [unique_id "ad41Y8qc5XaYZhFXVGeP0AAAAYI"]
[Tue Apr 14 20:39:00.348478 2026] [:error] [pid 3778:tid 3783] [client 172.213.137.79:9244] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ss.php"] [unique_id "ad41ZBx5DfpNmYF_PaHbmQAAAUM"]
[Tue Apr 14 20:39:00.859005 2026] [:error] [pid 3810:tid 3827] [client 172.213.137.79:15056] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ss.php"] [unique_id "ad41ZMqc5XaYZhFXVGeP1QAAAY4"]
[Tue Apr 14 20:39:01.571216 2026] [:error] [pid 3810:tid 3823] [client 172.213.137.79:14461] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ss.php"] [unique_id "ad41Zcqc5XaYZhFXVGeP2gAAAYo"]
[Tue Apr 14 20:39:02.086532 2026] [:error] [pid 59987:tid 60067] [client 172.213.137.79:25903] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ss.php"] [unique_id "ad41ZlWpk-Tfi6_vLKos5gAAAJQ"]
[Tue Apr 14 20:39:02.672654 2026] [:error] [pid 59987:tid 60069] [client 172.213.137.79:49260] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tx79.php"] [unique_id "ad41ZlWpk-Tfi6_vLKos5wAAAJY"]
[Tue Apr 14 20:39:03.187986 2026] [:error] [pid 3810:tid 3818] [client 172.213.137.79:29017] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tx79.php"] [unique_id "ad41Z8qc5XaYZhFXVGeP3wAAAYU"]
[Tue Apr 14 20:39:03.731645 2026] [:error] [pid 59987:tid 60064] [client 172.213.137.79:22946] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tx79.php"] [unique_id "ad41Z1Wpk-Tfi6_vLKos6QAAAJE"]
[Tue Apr 14 20:39:04.290486 2026] [:error] [pid 3778:tid 3804] [client 172.213.137.79:41555] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tx79.php"] [unique_id "ad41aBx5DfpNmYF_PaHboQAAAVg"]
[Tue Apr 14 20:39:04.763962 2026] [:error] [pid 59985:tid 60006] [client 172.213.137.79:17318] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/7.php"] [unique_id "ad41aOgHaxkvLE6V1klcwAAAAA0"]
[Tue Apr 14 20:39:05.347383 2026] [:error] [pid 3810:tid 3829] [client 172.213.137.79:13289] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/7.php"] [unique_id "ad41acqc5XaYZhFXVGeP5gAAAZA"]
[Tue Apr 14 20:39:05.887443 2026] [:error] [pid 3810:tid 3825] [client 172.213.137.79:1328] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/7.php"] [unique_id "ad41acqc5XaYZhFXVGeP6QAAAYw"]
[Tue Apr 14 20:39:06.437585 2026] [:error] [pid 60074:tid 60079] [client 172.213.137.79:28209] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/7.php"] [unique_id "ad41autqnEmNU9vpHCmVjgAAAMM"]
[Tue Apr 14 20:39:06.970720 2026] [:error] [pid 3810:tid 3833] [client 172.213.137.79:41584] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "ad41asqc5XaYZhFXVGeP7gAAAZQ"]
[Tue Apr 14 20:39:07.544637 2026] [:error] [pid 3810:tid 3821] [client 172.213.137.79:27680] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "ad41a8qc5XaYZhFXVGeP8AAAAYg"]
[Tue Apr 14 20:39:08.128498 2026] [:error] [pid 59987:tid 60065] [client 172.213.137.79:27693] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "ad41bFWpk-Tfi6_vLKos7gAAAJI"]
[Tue Apr 14 20:39:08.664039 2026] [:error] [pid 3810:tid 3823] [client 172.213.137.79:25901] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "ad41bMqc5XaYZhFXVGeP8wAAAYo"]
[Tue Apr 14 20:39:09.163236 2026] [:error] [pid 3810:tid 3825] [client 172.213.137.79:49261] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/config.php"] [unique_id "ad41bcqc5XaYZhFXVGeP9AAAAYw"]
[Tue Apr 14 20:39:09.722977 2026] [:error] [pid 59987:tid 60067] [client 172.213.137.79:9310] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/config.php"] [unique_id "ad41bVWpk-Tfi6_vLKos8wAAAJQ"]
[Tue Apr 14 20:39:10.277736 2026] [:error] [pid 3810:tid 3817] [client 172.213.137.79:25913] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/config.php"] [unique_id "ad41bsqc5XaYZhFXVGeP9gAAAYQ"]
[Tue Apr 14 20:39:10.849630 2026] [:error] [pid 59987:tid 60062] [client 172.213.137.79:9293] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/config.php"] [unique_id "ad41blWpk-Tfi6_vLKos-gAAAI8"]
[Tue Apr 14 20:39:11.332284 2026] [:error] [pid 3810:tid 3824] [client 172.213.137.79:22743] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gecko.php"] [unique_id "ad41b8qc5XaYZhFXVGeP-AAAAYs"]
[Tue Apr 14 20:39:11.878567 2026] [:error] [pid 59987:tid 60071] [client 172.213.137.79:28174] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gecko.php"] [unique_id "ad41b1Wpk-Tfi6_vLKotAAAAAJg"]
[Tue Apr 14 20:39:12.379307 2026] [:error] [pid 59987:tid 60067] [client 172.213.137.79:9240] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gecko.php"] [unique_id "ad41cFWpk-Tfi6_vLKotBQAAAJQ"]
[Tue Apr 14 20:39:12.968216 2026] [:error] [pid 59986:tid 60024] [client 172.213.137.79:1312] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gecko.php"] [unique_id "ad41cJ6axKeW6bX4H7dg2wAAAEQ"]
[Tue Apr 14 20:39:13.506578 2026] [:error] [pid 59985:tid 60009] [client 172.213.137.79:1314] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tiny"] [unique_id "ad41cegHaxkvLE6V1klcyQAAABA"]
[Tue Apr 14 20:39:14.120556 2026] [:error] [pid 59986:tid 60040] [client 172.213.137.79:14438] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tiny"] [unique_id "ad41cp6axKeW6bX4H7dg4wAAAFQ"]
[Tue Apr 14 20:39:14.656680 2026] [:error] [pid 3810:tid 3817] [client 172.213.137.79:22938] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tiny"] [unique_id "ad41csqc5XaYZhFXVGeQAAAAAYQ"]
[Tue Apr 14 20:39:15.222818 2026] [:error] [pid 3778:tid 3793] [client 172.213.137.79:28197] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tiny"] [unique_id "ad41cxx5DfpNmYF_PaHbqgAAAU0"]
[Tue Apr 14 20:39:15.870358 2026] [:error] [pid 3810:tid 3827] [client 172.213.137.79:9320] [client 172.213.137.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dwelectservices.com.au"] [uri "/tiny.php"] [unique_id "ad41c8qc5XaYZhFXVGeQCAAAAY4"]
[Tue Apr 14 20:39:16.369431 2026] [:error] [pid 3810:tid 3837] [client 172.213.137.79:13769] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "ad41dMqc5XaYZhFXVGeQDAAAAZg"]
[Tue Apr 14 20:39:16.919354 2026] [:error] [pid 3810:tid 3818] [client 172.213.137.79:49229] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "ad41dMqc5XaYZhFXVGeQEwAAAYU"]
[Tue Apr 14 20:39:17.438125 2026] [:error] [pid 3810:tid 3836] [client 172.213.137.79:41568] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "ad41dcqc5XaYZhFXVGeQFQAAAZc"]
[Tue Apr 14 20:39:17.924004 2026] [:error] [pid 3810:tid 3830] [client 172.213.137.79:22970] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class-wp-image.php"] [unique_id "ad41dcqc5XaYZhFXVGeQGgAAAZE"]
[Tue Apr 14 20:39:18.393284 2026] [:error] [pid 3810:tid 3837] [client 172.213.137.79:16557] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class-wp-image.php"] [unique_id "ad41dsqc5XaYZhFXVGeQHQAAAZg"]
[Tue Apr 14 20:39:18.921520 2026] [:error] [pid 60074:tid 60087] [client 172.213.137.79:25907] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class-wp-image.php"] [unique_id "ad41dutqnEmNU9vpHCmVkQAAAMs"]
[Tue Apr 14 20:39:19.388386 2026] [:error] [pid 59986:tid 60040] [client 172.213.137.79:9218] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class-wp-image.php"] [unique_id "ad41d56axKeW6bX4H7dg8QAAAFQ"]
[Tue Apr 14 20:39:19.879928 2026] [:error] [pid 59986:tid 60042] [client 172.213.137.79:1340] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/8.php"] [unique_id "ad41d56axKeW6bX4H7dg8gAAAFY"]
[Tue Apr 14 20:39:20.373169 2026] [:error] [pid 59986:tid 60039] [client 172.213.137.79:41538] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/8.php"] [unique_id "ad41eJ6axKeW6bX4H7dg9QAAAFM"]
[Tue Apr 14 20:39:20.877228 2026] [:error] [pid 59986:tid 60037] [client 172.213.137.79:22721] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/8.php"] [unique_id "ad41eJ6axKeW6bX4H7dg-AAAAFE"]
[Tue Apr 14 20:39:21.348241 2026] [:error] [pid 3810:tid 3814] [client 172.213.137.79:25875] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/8.php"] [unique_id "ad41ecqc5XaYZhFXVGeQJwAAAYE"]
[Tue Apr 14 20:39:21.860274 2026] [:error] [pid 3810:tid 3837] [client 172.213.137.79:22734] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sadcut1.php"] [unique_id "ad41ecqc5XaYZhFXVGeQKQAAAZg"]
[Tue Apr 14 20:39:22.336300 2026] [:error] [pid 3810:tid 3826] [client 172.213.137.79:19278] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sadcut1.php"] [unique_id "ad41esqc5XaYZhFXVGeQLAAAAY0"]
[Tue Apr 14 20:39:22.858499 2026] [:error] [pid 59986:tid 60032] [client 172.213.137.79:27658] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sadcut1.php"] [unique_id "ad41ep6axKeW6bX4H7dg_gAAAEw"]
[Tue Apr 14 20:39:23.338314 2026] [:error] [pid 59986:tid 60039] [client 172.213.137.79:49217] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sadcut1.php"] [unique_id "ad41e56axKeW6bX4H7dhAAAAAFM"]
[Tue Apr 14 20:39:23.825722 2026] [:error] [pid 3810:tid 3814] [client 172.213.137.79:41562] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/footer.php"] [unique_id "ad41e8qc5XaYZhFXVGeQMwAAAYE"]
[Tue Apr 14 20:39:24.306334 2026] [:error] [pid 59986:tid 60040] [client 172.213.137.79:13812] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/footer.php"] [unique_id "ad41fJ6axKeW6bX4H7dhBwAAAFQ"]
[Tue Apr 14 20:39:24.786805 2026] [:error] [pid 3810:tid 3831] [client 172.213.137.79:41593] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/footer.php"] [unique_id "ad41fMqc5XaYZhFXVGeQPQAAAZI"]
[Tue Apr 14 20:39:25.262137 2026] [:error] [pid 59986:tid 60030] [client 172.213.137.79:13770] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/footer.php"] [unique_id "ad41fZ6axKeW6bX4H7dhCQAAAEo"]
[Tue Apr 14 20:39:25.738008 2026] [:error] [pid 60074:tid 60091] [client 172.213.137.79:12293] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/img.php"] [unique_id "ad41fetqnEmNU9vpHCmVlQAAAM8"]
[Tue Apr 14 20:39:26.224435 2026] [:error] [pid 59986:tid 60027] [client 172.213.137.79:49272] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/img.php"] [unique_id "ad41fp6axKeW6bX4H7dhDQAAAEc"]
[Tue Apr 14 20:39:26.720733 2026] [:error] [pid 59986:tid 60043] [client 172.213.137.79:9282] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/img.php"] [unique_id "ad41fp6axKeW6bX4H7dhDwAAAFc"]
[Tue Apr 14 20:39:27.218351 2026] [:error] [pid 3810:tid 3818] [client 172.213.137.79:16532] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/img.php"] [unique_id "ad41f8qc5XaYZhFXVGeQSQAAAYU"]
[Tue Apr 14 20:39:27.789694 2026] [:error] [pid 59986:tid 60030] [client 172.213.137.79:15067] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/12.php"] [unique_id "ad41f56axKeW6bX4H7dhEgAAAEo"]
[Tue Apr 14 20:39:28.371117 2026] [:error] [pid 60074:tid 60080] [client 172.213.137.79:9329] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/12.php"] [unique_id "ad41gOtqnEmNU9vpHCmVmgAAAMQ"]
[Tue Apr 14 20:39:28.910305 2026] [:error] [pid 22177:tid 22183] [client 172.213.137.79:13789] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/12.php"] [unique_id "ad41gITVeJSXHDIlEDt_OAAAAQQ"]
[Tue Apr 14 20:39:29.695026 2026] [:error] [pid 59986:tid 60024] [client 172.213.137.79:22742] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/12.php"] [unique_id "ad41gZ6axKeW6bX4H7dhHgAAAEQ"]
[Tue Apr 14 20:39:30.347788 2026] [:error] [pid 3810:tid 3827] [client 172.213.137.79:19325] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xwx1.php"] [unique_id "ad41gsqc5XaYZhFXVGeQWQAAAY4"]
[Tue Apr 14 20:39:30.893728 2026] [:error] [pid 3810:tid 3829] [client 172.213.137.79:19266] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xwx1.php"] [unique_id "ad41gsqc5XaYZhFXVGeQYAAAAZA"]
[Tue Apr 14 20:39:31.368410 2026] [:error] [pid 59986:tid 60038] [client 172.213.137.79:16534] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xwx1.php"] [unique_id "ad41g56axKeW6bX4H7dhJwAAAFI"]
[Tue Apr 14 20:39:31.941260 2026] [:error] [pid 22177:tid 22203] [client 172.213.137.79:12363] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xwx1.php"] [unique_id "ad41g4TVeJSXHDIlEDt_OQAAARg"]
[Tue Apr 14 20:39:32.485461 2026] [:error] [pid 59985:tid 59994] [client 172.213.137.79:22733] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xff.php"] [unique_id "ad41hOgHaxkvLE6V1klc1gAAAAE"]
[Tue Apr 14 20:39:33.080501 2026] [:error] [pid 59986:tid 60044] [client 172.213.137.79:41542] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xff.php"] [unique_id "ad41hZ6axKeW6bX4H7dhLQAAAFg"]
[Tue Apr 14 20:39:33.723951 2026] [:error] [pid 22177:tid 22193] [client 172.213.137.79:28166] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xff.php"] [unique_id "ad41hYTVeJSXHDIlEDt_PQAAAQ4"]
[Tue Apr 14 20:39:34.368664 2026] [:error] [pid 59987:tid 60063] [client 172.213.137.79:1309] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xff.php"] [unique_id "ad41hlWpk-Tfi6_vLKotGQAAAJA"]
[Tue Apr 14 20:39:34.904142 2026] [:error] [pid 59986:tid 60032] [client 172.213.137.79:14844] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lib.php"] [unique_id "ad41hp6axKeW6bX4H7dhLgAAAEw"]
[Tue Apr 14 20:39:35.422068 2026] [:error] [pid 59987:tid 60056] [client 172.213.137.79:14847] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lib.php"] [unique_id "ad41h1Wpk-Tfi6_vLKotGgAAAIk"]
[Tue Apr 14 20:39:36.093231 2026] [:error] [pid 59986:tid 60043] [client 172.213.137.79:16529] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lib.php"] [unique_id "ad41iJ6axKeW6bX4H7dhNgAAAFc"]
[Tue Apr 14 20:39:36.657073 2026] [:error] [pid 59986:tid 60028] [client 172.213.137.79:41550] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lib.php"] [unique_id "ad41iJ6axKeW6bX4H7dhOAAAAEg"]
[Tue Apr 14 20:39:37.255326 2026] [:error] [pid 59986:tid 60032] [client 172.213.137.79:27006] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/roksad1.php"] [unique_id "ad41iZ6axKeW6bX4H7dhPAAAAEw"]
[Tue Apr 14 20:39:37.773360 2026] [:error] [pid 3778:tid 3790] [client 172.213.137.79:12295] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/roksad1.php"] [unique_id "ad41iRx5DfpNmYF_PaHbsAAAAUo"]
[Tue Apr 14 20:39:38.398391 2026] [:error] [pid 59986:tid 60043] [client 172.213.137.79:25888] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/roksad1.php"] [unique_id "ad41ip6axKeW6bX4H7dhQQAAAFc"]
[Tue Apr 14 20:39:38.877451 2026] [:error] [pid 59986:tid 60020] [client 172.213.137.79:13822] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/roksad1.php"] [unique_id "ad41ip6axKeW6bX4H7dhRQAAAEA"]
[Tue Apr 14 20:39:39.406508 2026] [:error] [pid 22177:tid 22200] [client 172.213.137.79:28183] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wmore1.php"] [unique_id "ad41i4TVeJSXHDIlEDt_QwAAARU"]
[Tue Apr 14 20:39:39.940800 2026] [:error] [pid 3810:tid 3833] [client 172.213.137.79:1305] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wmore1.php"] [unique_id "ad41i8qc5XaYZhFXVGeQaAAAAZQ"]
[Tue Apr 14 20:39:40.450005 2026] [:error] [pid 59986:tid 60034] [client 172.213.137.79:1280] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wmore1.php"] [unique_id "ad41jJ6axKeW6bX4H7dhSgAAAE4"]
[Tue Apr 14 20:39:40.979480 2026] [:error] [pid 59987:tid 60059] [client 172.213.137.79:9253] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wmore1.php"] [unique_id "ad41jFWpk-Tfi6_vLKotIAAAAIw"]
[Tue Apr 14 20:39:41.592880 2026] [:error] [pid 59986:tid 60038] [client 172.213.137.79:14787] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/adminfuns.php"] [unique_id "ad41jZ6axKeW6bX4H7dhUQAAAFI"]
[Tue Apr 14 20:39:42.224829 2026] [:error] [pid 59986:tid 60037] [client 172.213.137.79:1333] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/adminfuns.php"] [unique_id "ad41jp6axKeW6bX4H7dhUgAAAFE"]
[Tue Apr 14 20:39:42.957799 2026] [:error] [pid 59987:tid 60071] [client 172.213.137.79:25861] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/adminfuns.php"] [unique_id "ad41jlWpk-Tfi6_vLKotJAAAAJg"]
[Tue Apr 14 20:39:43.512263 2026] [proxy_fcgi:error] [pid 59986:tid 60042] [client 172.213.137.79:15058] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 20:39:43.750818 2026] [proxy_fcgi:error] [pid 59986:tid 60022] [client 172.213.137.79:15058] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 20:39:43.992305 2026] [proxy_fcgi:error] [pid 59986:tid 60021] [client 172.213.137.79:15058] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 20:39:44.229883 2026] [proxy_fcgi:error] [pid 59986:tid 60038] [client 172.213.137.79:15058] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 20:39:44.496002 2026] [proxy_fcgi:error] [pid 59986:tid 60043] [client 172.213.137.79:15058] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 20:39:44.735069 2026] [proxy_fcgi:error] [pid 59986:tid 60020] [client 172.213.137.79:15058] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 20:39:44.971368 2026] [proxy_fcgi:error] [pid 59986:tid 60042] [client 172.213.137.79:15058] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 20:39:46.337134 2026] [proxy_fcgi:error] [pid 59986:tid 60028] [client 172.213.137.79:15058] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 20:39:46.583152 2026] [proxy_fcgi:error] [pid 59986:tid 60025] [client 172.213.137.79:15058] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 20:39:46.819724 2026] [proxy_fcgi:error] [pid 59986:tid 60029] [client 172.213.137.79:15058] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 20:39:47.117698 2026] [proxy_fcgi:error] [pid 59986:tid 60021] [client 172.213.137.79:15058] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 20:39:47.360377 2026] [:error] [pid 59986:tid 60026] [client 172.213.137.79:15058] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws85.php"] [unique_id "ad41k56axKeW6bX4H7dhewAAAEY"]
[Tue Apr 14 20:39:47.927442 2026] [:error] [pid 3810:tid 3821] [client 172.213.137.79:22951] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws85.php"] [unique_id "ad41k8qc5XaYZhFXVGeQcgAAAYg"]
[Tue Apr 14 20:39:48.623978 2026] [:error] [pid 3810:tid 3814] [client 172.213.137.79:26981] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws85.php"] [unique_id "ad41lMqc5XaYZhFXVGeQdQAAAYE"]
[Tue Apr 14 20:39:49.202321 2026] [:error] [pid 3810:tid 3817] [client 172.213.137.79:28191] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws85.php"] [unique_id "ad41lcqc5XaYZhFXVGeQegAAAYQ"]
[Tue Apr 14 20:39:49.823117 2026] [:error] [pid 3778:tid 3790] [client 172.213.137.79:15051] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws87.php"] [unique_id "ad41lRx5DfpNmYF_PaHbuwAAAUo"]
[Tue Apr 14 20:39:50.389876 2026] [:error] [pid 59986:tid 60043] [client 172.213.137.79:13808] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws87.php"] [unique_id "ad41lp6axKeW6bX4H7dhgQAAAFc"]
[Tue Apr 14 20:39:50.968749 2026] [:error] [pid 3810:tid 3828] [client 172.213.137.79:1281] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws87.php"] [unique_id "ad41lsqc5XaYZhFXVGeQfwAAAY8"]
[Tue Apr 14 20:39:51.512938 2026] [:error] [pid 3778:tid 3803] [client 172.213.137.79:13084] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws87.php"] [unique_id "ad41lxx5DfpNmYF_PaHbvAAAAVc"]
[Tue Apr 14 20:39:52.045590 2026] [:error] [pid 60074:tid 60090] [client 172.213.137.79:28175] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/layout.php"] [unique_id "ad41mOtqnEmNU9vpHCmVtAAAAM4"]
[Tue Apr 14 20:39:52.697074 2026] [:error] [pid 3778:tid 3784] [client 172.213.137.79:15079] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/layout.php"] [unique_id "ad41mBx5DfpNmYF_PaHbvgAAAUQ"]
[Tue Apr 14 20:39:53.299515 2026] [:error] [pid 59986:tid 60028] [client 172.213.137.79:15099] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/layout.php"] [unique_id "ad41mZ6axKeW6bX4H7dhlAAAAEg"]
[Tue Apr 14 20:39:53.851498 2026] [:error] [pid 59986:tid 60044] [client 172.213.137.79:31299] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/layout.php"] [unique_id "ad41mZ6axKeW6bX4H7dhmgAAAFg"]
[Tue Apr 14 20:39:54.433021 2026] [:error] [pid 59987:tid 60050] [client 172.213.137.79:1297] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/r2.php"] [unique_id "ad41mlWpk-Tfi6_vLKotKQAAAIM"]
[Tue Apr 14 20:39:54.951343 2026] [:error] [pid 59987:tid 60063] [client 172.213.137.79:13066] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/r2.php"] [unique_id "ad41mlWpk-Tfi6_vLKotLQAAAJA"]
[Tue Apr 14 20:39:55.467853 2026] [:error] [pid 59987:tid 60056] [client 172.213.137.79:9271] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/r2.php"] [unique_id "ad41m1Wpk-Tfi6_vLKotMAAAAIk"]
[Tue Apr 14 20:39:56.125316 2026] [:error] [pid 59985:tid 59995] [client 172.213.137.79:19286] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/r2.php"] [unique_id "ad41nOgHaxkvLE6V1kldAQAAAAI"]
[Tue Apr 14 20:39:56.661276 2026] [:error] [pid 22177:tid 22193] [client 172.213.137.79:14794] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ah25.php"] [unique_id "ad41nITVeJSXHDIlEDt_TAAAAQ4"]
[Tue Apr 14 20:39:57.276147 2026] [:error] [pid 60074:tid 60082] [client 172.213.137.79:15075] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ah25.php"] [unique_id "ad41netqnEmNU9vpHCmVuQAAAMY"]
[Tue Apr 14 20:39:57.868754 2026] [:error] [pid 59986:tid 60036] [client 172.213.137.79:22723] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ah25.php"] [unique_id "ad41nZ6axKeW6bX4H7dhrwAAAFA"]
[Tue Apr 14 20:39:58.456529 2026] [:error] [pid 22177:tid 22189] [client 172.213.137.79:13785] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ah25.php"] [unique_id "ad41noTVeJSXHDIlEDt_TgAAAQo"]
[Tue Apr 14 20:39:59.222101 2026] [:error] [pid 3778:tid 3801] [client 172.213.137.79:15101] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/006.php"] [unique_id "ad41nxx5DfpNmYF_PaHbyQAAAVU"]
[Tue Apr 14 20:39:59.745168 2026] [:error] [pid 59987:tid 60069] [client 172.213.137.79:13328] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/006.php"] [unique_id "ad41n1Wpk-Tfi6_vLKotNQAAAJY"]
[Tue Apr 14 20:40:00.659926 2026] [:error] [pid 22177:tid 22191] [client 172.213.137.79:9249] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/006.php"] [unique_id "ad41oITVeJSXHDIlEDt_UgAAAQw"]
[Tue Apr 14 20:40:01.347891 2026] [:error] [pid 60074:tid 60077] [client 172.213.137.79:1327] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/006.php"] [unique_id "ad41oetqnEmNU9vpHCmVwAAAAME"]
[Tue Apr 14 20:40:02.173665 2026] [:error] [pid 59987:tid 60053] [client 172.213.137.79:26951] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/samll.php"] [unique_id "ad41olWpk-Tfi6_vLKotPAAAAIY"]
[Tue Apr 14 20:40:02.824830 2026] [:error] [pid 3778:tid 3786] [client 172.213.137.79:19312] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/samll.php"] [unique_id "ad41ohx5DfpNmYF_PaHb0AAAAUY"]
[Tue Apr 14 20:40:03.388649 2026] [:error] [pid 60074:tid 60094] [client 172.213.137.79:25908] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/samll.php"] [unique_id "ad41o-tqnEmNU9vpHCmVxQAAANI"]
[Tue Apr 14 20:40:03.994843 2026] [:error] [pid 59985:tid 60003] [client 172.213.137.79:1334] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/samll.php"] [unique_id "ad41o-gHaxkvLE6V1kldDQAAAAo"]
[Tue Apr 14 20:40:04.728288 2026] [:error] [pid 59987:tid 60048] [client 172.213.137.79:13786] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zogy1.php"] [unique_id "ad41pFWpk-Tfi6_vLKotQAAAAIE"]
[Tue Apr 14 20:40:05.308527 2026] [:error] [pid 59985:tid 60004] [client 172.213.137.79:12312] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zogy1.php"] [unique_id "ad41pegHaxkvLE6V1kldFQAAAAs"]
[Tue Apr 14 20:40:06.105052 2026] [:error] [pid 59987:tid 60050] [client 172.213.137.79:19579] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zogy1.php"] [unique_id "ad41plWpk-Tfi6_vLKotRAAAAIM"]
[Tue Apr 14 20:40:06.648536 2026] [:error] [pid 3810:tid 3834] [client 172.213.137.79:13342] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zogy1.php"] [unique_id "ad41psqc5XaYZhFXVGeQigAAAZU"]
[Tue Apr 14 20:40:07.270434 2026] [:error] [pid 59986:tid 60030] [client 172.213.137.79:13063] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aios-bootstrap.php"] [unique_id "ad41p56axKeW6bX4H7dhtQAAAEo"]
[Tue Apr 14 20:40:07.851427 2026] [:error] [pid 22177:tid 22191] [client 172.213.137.79:8388] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aios-bootstrap.php"] [unique_id "ad41p4TVeJSXHDIlEDt_ZQAAAQw"]
[Tue Apr 14 20:40:08.469799 2026] [:error] [pid 3810:tid 3823] [client 172.213.137.79:19265] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aios-bootstrap.php"] [unique_id "ad41qMqc5XaYZhFXVGeQjQAAAYo"]
[Tue Apr 14 20:40:09.069499 2026] [:error] [pid 59986:tid 60024] [client 172.213.137.79:9239] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aios-bootstrap.php"] [unique_id "ad41qZ6axKeW6bX4H7dhugAAAEQ"]
[Tue Apr 14 20:40:09.603019 2026] [:error] [pid 59986:tid 60044] [client 172.213.137.79:26988] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rh.php"] [unique_id "ad41qZ6axKeW6bX4H7dhvgAAAFg"]
[Tue Apr 14 20:40:10.253795 2026] [:error] [pid 59986:tid 60033] [client 172.213.137.79:13346] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rh.php"] [unique_id "ad41qp6axKeW6bX4H7dhxAAAAE0"]
[Tue Apr 14 20:40:10.795081 2026] [:error] [pid 59986:tid 60041] [client 172.213.137.79:13105] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rh.php"] [unique_id "ad41qp6axKeW6bX4H7dhyAAAAFU"]
[Tue Apr 14 20:40:11.340299 2026] [:error] [pid 60074:tid 60091] [client 172.213.137.79:8420] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rh.php"] [unique_id "ad41q-tqnEmNU9vpHCmVyQAAAM8"]
[Tue Apr 14 20:40:11.839369 2026] [:error] [pid 3778:tid 3783] [client 172.213.137.79:9259] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gz.php"] [unique_id "ad41qxx5DfpNmYF_PaHb3gAAAUM"]
[Tue Apr 14 20:40:12.329944 2026] [:error] [pid 60074:tid 60083] [client 172.213.137.79:12290] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gz.php"] [unique_id "ad41rOtqnEmNU9vpHCmVygAAAMc"]
[Tue Apr 14 20:40:12.965787 2026] [:error] [pid 22177:tid 22189] [client 172.213.137.79:1301] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gz.php"] [unique_id "ad41rITVeJSXHDIlEDt_agAAAQo"]
[Tue Apr 14 20:40:13.526437 2026] [:error] [pid 22177:tid 22200] [client 172.213.137.79:13354] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gz.php"] [unique_id "ad41rYTVeJSXHDIlEDt_bgAAARU"]
[Tue Apr 14 20:40:14.054397 2026] [:error] [pid 3810:tid 3818] [client 172.213.137.79:31304] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gelio1.php"] [unique_id "ad41rsqc5XaYZhFXVGeQlAAAAYU"]
[Tue Apr 14 20:40:14.585593 2026] [:error] [pid 3810:tid 3828] [client 172.213.137.79:14823] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gelio1.php"] [unique_id "ad41rsqc5XaYZhFXVGeQmwAAAY8"]
[Tue Apr 14 20:40:15.339097 2026] [:error] [pid 59986:tid 60038] [client 172.213.137.79:9267] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gelio1.php"] [unique_id "ad41r56axKeW6bX4H7dh1AAAAFI"]
[Tue Apr 14 20:40:15.996870 2026] [:error] [pid 59986:tid 60020] [client 172.213.137.79:9278] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gelio1.php"] [unique_id "ad41r56axKeW6bX4H7dh2AAAAEA"]
[Tue Apr 14 20:40:16.839492 2026] [:error] [pid 60074:tid 60090] [client 172.213.137.79:19526] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/areak1.php"] [unique_id "ad41sOtqnEmNU9vpHCmV0gAAAM4"]
[Tue Apr 14 20:40:17.373432 2026] [:error] [pid 59986:tid 60028] [client 172.213.137.79:19527] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/areak1.php"] [unique_id "ad41sZ6axKeW6bX4H7dh3gAAAEg"]
[Tue Apr 14 20:40:17.945449 2026] [:error] [pid 59986:tid 60033] [client 172.213.137.79:14925] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/areak1.php"] [unique_id "ad41sZ6axKeW6bX4H7dh4AAAAE0"]
[Tue Apr 14 20:40:18.603158 2026] [:error] [pid 59986:tid 60037] [client 172.213.137.79:31326] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/areak1.php"] [unique_id "ad41sp6axKeW6bX4H7dh5gAAAFE"]
[Tue Apr 14 20:40:19.121124 2026] [:error] [pid 59986:tid 60034] [client 172.213.137.79:49331] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/qqa.php"] [unique_id "ad41s56axKeW6bX4H7dh6gAAAE4"]
[Tue Apr 14 20:40:19.670024 2026] [:error] [pid 3778:tid 3799] [client 172.213.137.79:12369] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/qqa.php"] [unique_id "ad41sxx5DfpNmYF_PaHb9QAAAVM"]
[Tue Apr 14 20:40:20.441736 2026] [:error] [pid 59986:tid 60042] [client 172.213.137.79:49328] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/qqa.php"] [unique_id "ad41tJ6axKeW6bX4H7dh8AAAAFY"]
[Tue Apr 14 20:40:21.092569 2026] [:error] [pid 59986:tid 60040] [client 172.213.137.79:12354] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/qqa.php"] [unique_id "ad41tZ6axKeW6bX4H7dh-AAAAFQ"]
[Tue Apr 14 20:40:21.754512 2026] [:error] [pid 60074:tid 60079] [client 172.213.137.79:12346] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dx.php"] [unique_id "ad41tetqnEmNU9vpHCmV3AAAAMM"]
[Tue Apr 14 20:40:22.319825 2026] [:error] [pid 59987:tid 60066] [client 172.213.137.79:14919] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dx.php"] [unique_id "ad41tlWpk-Tfi6_vLKotTgAAAJM"]
[Tue Apr 14 20:40:22.999538 2026] [:error] [pid 60074:tid 60077] [client 172.213.137.79:31316] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dx.php"] [unique_id "ad41tutqnEmNU9vpHCmV4gAAAME"]
[Tue Apr 14 20:40:23.961207 2026] [:error] [pid 60074:tid 60082] [client 172.213.137.79:22762] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dx.php"] [unique_id "ad41t-tqnEmNU9vpHCmV6AAAAMY"]
[Tue Apr 14 20:40:24.507648 2026] [:error] [pid 3778:tid 3791] [client 172.213.137.79:26994] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ga.php"] [unique_id "ad41uBx5DfpNmYF_PaHb-QAAAUs"]
[Tue Apr 14 20:40:25.172304 2026] [:error] [pid 60074:tid 60080] [client 172.213.137.79:12310] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ga.php"] [unique_id "ad41uetqnEmNU9vpHCmV9QAAAMQ"]
[Tue Apr 14 20:40:25.809614 2026] [:error] [pid 3778:tid 3788] [client 172.213.137.79:18431] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ga.php"] [unique_id "ad41uRx5DfpNmYF_PaHb_gAAAUg"]
[Tue Apr 14 20:40:26.329025 2026] [:error] [pid 3810:tid 3816] [client 172.213.137.79:13085] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ga.php"] [unique_id "ad41usqc5XaYZhFXVGeQogAAAYM"]
[Tue Apr 14 20:40:26.918130 2026] [:error] [pid 59986:tid 60033] [client 172.213.137.79:14950] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xozx.php"] [unique_id "ad41up6axKeW6bX4H7diIQAAAE0"]
[Tue Apr 14 20:40:27.474898 2026] [:error] [pid 59986:tid 60025] [client 172.213.137.79:14817] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xozx.php"] [unique_id "ad41u56axKeW6bX4H7diJwAAAEU"]
[Tue Apr 14 20:40:28.101014 2026] [:error] [pid 60074:tid 60084] [client 172.213.137.79:14917] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xozx.php"] [unique_id "ad41vOtqnEmNU9vpHCmWBAAAAMg"]
[Tue Apr 14 20:40:28.698788 2026] [:error] [pid 59986:tid 60039] [client 172.213.137.79:49296] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xozx.php"] [unique_id "ad41vJ6axKeW6bX4H7diMQAAAFM"]
[Tue Apr 14 20:40:29.283343 2026] [:error] [pid 59986:tid 60034] [client 172.213.137.79:49330] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/1100.php"] [unique_id "ad41vZ6axKeW6bX4H7diNwAAAE4"]
[Tue Apr 14 20:40:30.087283 2026] [:error] [pid 3810:tid 3823] [client 172.213.137.79:31346] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/1100.php"] [unique_id "ad41vsqc5XaYZhFXVGeQqwAAAYo"]
[Tue Apr 14 20:40:30.598066 2026] [:error] [pid 3810:tid 3829] [client 172.213.137.79:14029] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/1100.php"] [unique_id "ad41vsqc5XaYZhFXVGeQrAAAAZA"]
[Tue Apr 14 20:40:31.188662 2026] [:error] [pid 59987:tid 60060] [client 172.213.137.79:26957] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/1100.php"] [unique_id "ad41v1Wpk-Tfi6_vLKotVQAAAI0"]
[Tue Apr 14 20:40:31.725069 2026] [:error] [pid 60074:tid 60083] [client 172.213.137.79:1799] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/press.php"] [unique_id "ad41v-tqnEmNU9vpHCmWDAAAAMc"]
[Tue Apr 14 20:40:32.243094 2026] [:error] [pid 59987:tid 60063] [client 172.213.137.79:2043] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/press.php"] [unique_id "ad41wFWpk-Tfi6_vLKotVgAAAJA"]
[Tue Apr 14 20:40:32.903614 2026] [:error] [pid 3778:tid 3801] [client 172.213.137.79:19538] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/press.php"] [unique_id "ad41wBx5DfpNmYF_PaHcAwAAAVU"]
[Tue Apr 14 20:40:33.584314 2026] [:error] [pid 22177:tid 22201] [client 172.213.137.79:13757] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/press.php"] [unique_id "ad41wYTVeJSXHDIlEDt_egAAARY"]
[Tue Apr 14 20:40:34.233176 2026] [:error] [pid 59985:tid 60011] [client 172.213.137.79:13723] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f35.php"] [unique_id "ad41wugHaxkvLE6V1kldIwAAABI"]
[Tue Apr 14 20:40:34.762717 2026] [:error] [pid 22177:tid 22195] [client 172.213.137.79:45301] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f35.php"] [unique_id "ad41woTVeJSXHDIlEDt_gAAAARA"]
[Tue Apr 14 20:40:35.308032 2026] [:error] [pid 59987:tid 60049] [client 172.213.137.79:2008] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f35.php"] [unique_id "ad41w1Wpk-Tfi6_vLKotWQAAAII"]
[Tue Apr 14 20:40:36.204300 2026] [:error] [pid 3810:tid 3821] [client 172.213.137.79:12093] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f35.php"] [unique_id "ad41xMqc5XaYZhFXVGeQvgAAAYg"]
[Tue Apr 14 20:40:36.895800 2026] [:error] [pid 3810:tid 3814] [client 172.213.137.79:49281] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-kz.php"] [unique_id "ad41xMqc5XaYZhFXVGeQvwAAAYE"]
[Tue Apr 14 20:40:37.711213 2026] [:error] [pid 59985:tid 60014] [client 172.213.137.79:13676] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-kz.php"] [unique_id "ad41xegHaxkvLE6V1kldJQAAABU"]
[Tue Apr 14 20:40:38.494949 2026] [:error] [pid 60074:tid 60093] [client 172.213.137.79:13338] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-kz.php"] [unique_id "ad41xutqnEmNU9vpHCmWFQAAANE"]
[Tue Apr 14 20:40:39.364015 2026] [:error] [pid 60074:tid 60097] [client 172.213.137.79:2040] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-kz.php"] [unique_id "ad41x-tqnEmNU9vpHCmWGAAAANU"]
[Tue Apr 14 20:40:40.057603 2026] [:error] [pid 3810:tid 3836] [client 172.213.137.79:45297] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-lo.php"] [unique_id "ad41yMqc5XaYZhFXVGeQzAAAAZc"]
[Tue Apr 14 20:40:40.921303 2026] [:error] [pid 3810:tid 3833] [client 172.213.137.79:1645] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-lo.php"] [unique_id "ad41yMqc5XaYZhFXVGeQ0wAAAZQ"]
[Tue Apr 14 20:40:41.466330 2026] [:error] [pid 22177:tid 22190] [client 172.213.137.79:12037] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-lo.php"] [unique_id "ad41yYTVeJSXHDIlEDt_hQAAAQs"]
[Tue Apr 14 20:40:42.043088 2026] [:error] [pid 22177:tid 22191] [client 172.213.137.79:14059] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-lo.php"] [unique_id "ad41yoTVeJSXHDIlEDt_iAAAAQw"]
[Tue Apr 14 20:40:43.078740 2026] [:error] [pid 59987:tid 60049] [client 172.213.137.79:41478] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fone1.php"] [unique_id "ad41y1Wpk-Tfi6_vLKotaQAAAII"]
[Tue Apr 14 20:40:43.787130 2026] [:error] [pid 3778:tid 3799] [client 172.213.137.79:1646] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fone1.php"] [unique_id "ad41yxx5DfpNmYF_PaHcCwAAAVM"]
[Tue Apr 14 20:40:44.748213 2026] [:error] [pid 59987:tid 60051] [client 172.213.137.79:45289] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fone1.php"] [unique_id "ad41zFWpk-Tfi6_vLKotcAAAAIQ"]
[Tue Apr 14 20:40:45.716327 2026] [:error] [pid 3778:tid 3785] [client 172.213.137.79:11406] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fone1.php"] [unique_id "ad41zRx5DfpNmYF_PaHcFQAAAUU"]
[Tue Apr 14 20:40:46.415939 2026] [:error] [pid 59987:tid 60055] [client 172.213.137.79:9531] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Ipv6.php"] [unique_id "ad41zlWpk-Tfi6_vLKotcwAAAIg"]
[Tue Apr 14 20:40:47.198817 2026] [proxy_fcgi:error] [pid 3810:tid 3814] [client 172.213.137.79:13131] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 20:40:47.435996 2026] [proxy_fcgi:error] [pid 3810:tid 3822] [client 172.213.137.79:13131] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 20:40:47.681934 2026] [proxy_fcgi:error] [pid 3810:tid 3816] [client 172.213.137.79:13131] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 20:40:47.918957 2026] [proxy_fcgi:error] [pid 3810:tid 3817] [client 172.213.137.79:13131] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 20:40:48.155732 2026] [proxy_fcgi:error] [pid 3810:tid 3831] [client 172.213.137.79:13131] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 20:40:48.391887 2026] [proxy_fcgi:error] [pid 3810:tid 3826] [client 172.213.137.79:13131] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 20:40:48.629262 2026] [proxy_fcgi:error] [pid 3810:tid 3821] [client 172.213.137.79:13131] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 20:40:48.898932 2026] [proxy_fcgi:error] [pid 3810:tid 3825] [client 172.213.137.79:13131] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 20:40:49.135765 2026] [proxy_fcgi:error] [pid 3810:tid 3837] [client 172.213.137.79:13131] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 20:40:49.372718 2026] [proxy_fcgi:error] [pid 3810:tid 3818] [client 172.213.137.79:13131] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 20:40:49.609212 2026] [proxy_fcgi:error] [pid 3810:tid 3820] [client 172.213.137.79:13131] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 20:40:49.841839 2026] [:error] [pid 3810:tid 3827] [client 172.213.137.79:13131] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xy.php"] [unique_id "ad410cqc5XaYZhFXVGeQ-gAAAY4"]
[Tue Apr 14 20:40:50.586972 2026] [:error] [pid 59987:tid 60062] [client 172.213.137.79:11369] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xy.php"] [unique_id "ad410lWpk-Tfi6_vLKotgAAAAI8"]
[Tue Apr 14 20:40:51.188061 2026] [:error] [pid 59987:tid 60059] [client 172.213.137.79:21016] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xy.php"] [unique_id "ad4101Wpk-Tfi6_vLKotggAAAIw"]
[Tue Apr 14 20:40:51.949513 2026] [:error] [pid 59987:tid 60058] [client 172.213.137.79:15412] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xy.php"] [unique_id "ad4101Wpk-Tfi6_vLKothAAAAIs"]
[Tue Apr 14 20:40:52.553867 2026] [:error] [pid 3778:tid 3801] [client 172.213.137.79:11449] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/global.php"] [unique_id "ad411Bx5DfpNmYF_PaHcHgAAAVU"]
[Tue Apr 14 20:40:53.553058 2026] [:error] [pid 59987:tid 60066] [client 172.213.137.79:15023] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/global.php"] [unique_id "ad411VWpk-Tfi6_vLKotjgAAAJM"]
[Tue Apr 14 20:40:54.043733 2026] [:error] [pid 59987:tid 60058] [client 172.213.137.79:20698] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/global.php"] [unique_id "ad411lWpk-Tfi6_vLKotkQAAAIs"]
[Tue Apr 14 20:40:54.709726 2026] [:error] [pid 59986:tid 60032] [client 172.213.137.79:32864] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/global.php"] [unique_id "ad411p6axKeW6bX4H7diWwAAAEw"]
[Tue Apr 14 20:40:55.379513 2026] [:error] [pid 59987:tid 60064] [client 172.213.137.79:24971] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/themes.php"] [unique_id "ad4111Wpk-Tfi6_vLKotlAAAAJE"]
[Tue Apr 14 20:40:56.009181 2026] [:error] [pid 59987:tid 60071] [client 172.213.137.79:13971] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/themes.php"] [unique_id "ad412FWpk-Tfi6_vLKotlgAAAJg"]
[Tue Apr 14 20:40:56.687021 2026] [:error] [pid 3778:tid 3784] [client 172.213.137.79:21047] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/themes.php"] [unique_id "ad412Bx5DfpNmYF_PaHcJAAAAUQ"]
[Tue Apr 14 20:40:57.192413 2026] [:error] [pid 3778:tid 3788] [client 172.213.137.79:17003] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/themes.php"] [unique_id "ad412Rx5DfpNmYF_PaHcJwAAAUg"]
[Tue Apr 14 20:40:57.683682 2026] [:error] [pid 59987:tid 60060] [client 172.213.137.79:17002] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/link.php"] [unique_id "ad412VWpk-Tfi6_vLKotmgAAAI0"]
[Tue Apr 14 20:40:58.350177 2026] [:error] [pid 3810:tid 3830] [client 172.213.137.79:32839] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/link.php"] [unique_id "ad412sqc5XaYZhFXVGeRFAAAAZE"]
[Tue Apr 14 20:40:58.965848 2026] [:error] [pid 22177:tid 22194] [client 172.213.137.79:17014] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/link.php"] [unique_id "ad412oTVeJSXHDIlEDt_qgAAAQ8"]
[Tue Apr 14 20:40:59.576928 2026] [:error] [pid 22177:tid 22197] [client 172.213.137.79:10429] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/link.php"] [unique_id "ad4124TVeJSXHDIlEDt_qwAAARI"]
[Tue Apr 14 20:41:00.193480 2026] [:error] [pid 3778:tid 3785] [client 172.213.137.79:12037] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ortasekerli1.php"] [unique_id "ad413Bx5DfpNmYF_PaHcMQAAAUU"]
[Tue Apr 14 20:41:00.967397 2026] [:error] [pid 59986:tid 60043] [client 172.213.137.79:15015] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ortasekerli1.php"] [unique_id "ad413J6axKeW6bX4H7dicQAAAFc"]
[Tue Apr 14 20:41:01.761253 2026] [:error] [pid 3810:tid 3826] [client 172.213.137.79:15031] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ortasekerli1.php"] [unique_id "ad413cqc5XaYZhFXVGeRIAAAAY0"]
[Tue Apr 14 20:41:02.312867 2026] [:error] [pid 60074:tid 60081] [client 172.213.137.79:11360] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ortasekerli1.php"] [unique_id "ad413utqnEmNU9vpHCmWMwAAAMU"]
[Tue Apr 14 20:41:03.052310 2026] [:error] [pid 22177:tid 22179] [client 172.213.137.79:14685] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-block.php"] [unique_id "ad4134TVeJSXHDIlEDt_sQAAAQA"]
[Tue Apr 14 20:41:03.986920 2026] [:error] [pid 59987:tid 60058] [client 172.213.137.79:1881] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-block.php"] [unique_id "ad4131Wpk-Tfi6_vLKotqwAAAIs"]
[Tue Apr 14 20:41:04.593361 2026] [:error] [pid 60074:tid 60098] [client 172.213.137.79:19846] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-block.php"] [unique_id "ad414OtqnEmNU9vpHCmWOAAAANY"]
[Tue Apr 14 20:41:05.274181 2026] [:error] [pid 60074:tid 60084] [client 172.213.137.79:11415] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-block.php"] [unique_id "ad414etqnEmNU9vpHCmWPQAAAMg"]
[Tue Apr 14 20:41:05.891606 2026] [:error] [pid 60074:tid 60076] [client 172.213.137.79:11417] [client 172.213.137.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/wincust.php"] [unique_id "ad414etqnEmNU9vpHCmWQwAAAMA"]
[Tue Apr 14 20:41:06.636597 2026] [:error] [pid 59986:tid 60023] [client 172.213.137.79:31278] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/acp.php"] [unique_id "ad414p6axKeW6bX4H7dihwAAAEM"]
[Tue Apr 14 20:41:07.186578 2026] [:error] [pid 60074:tid 60079] [client 172.213.137.79:1859] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/acp.php"] [unique_id "ad414-tqnEmNU9vpHCmWTwAAAMM"]
[Tue Apr 14 20:41:07.974616 2026] [:error] [pid 59986:tid 60026] [client 172.213.137.79:11419] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/acp.php"] [unique_id "ad41456axKeW6bX4H7dijAAAAEY"]
[Tue Apr 14 20:41:08.630112 2026] [:error] [pid 60074:tid 60083] [client 172.213.137.79:31291] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fs.php"] [unique_id "ad415OtqnEmNU9vpHCmWWgAAAMc"]
[Tue Apr 14 20:41:09.387641 2026] [:error] [pid 60074:tid 60098] [client 172.213.137.79:1556] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fs.php"] [unique_id "ad415etqnEmNU9vpHCmWYgAAANY"]
[Tue Apr 14 20:41:10.030991 2026] [:error] [pid 60074:tid 60094] [client 172.213.137.79:11365] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fs.php"] [unique_id "ad415utqnEmNU9vpHCmWawAAANI"]
[Tue Apr 14 20:41:10.769175 2026] [:error] [pid 59986:tid 60043] [client 172.213.137.79:14675] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fs.php"] [unique_id "ad415p6axKeW6bX4H7dilwAAAFc"]
[Tue Apr 14 20:41:11.337039 2026] [:error] [pid 22177:tid 22186] [client 172.213.137.79:11412] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xltt.php"] [unique_id "ad4154TVeJSXHDIlEDt_vQAAAQc"]
[Tue Apr 14 20:41:11.852033 2026] [:error] [pid 60074:tid 60076] [client 172.213.137.79:14681] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xltt.php"] [unique_id "ad415-tqnEmNU9vpHCmWcAAAAMA"]
[Tue Apr 14 20:41:12.451057 2026] [:error] [pid 60074:tid 60089] [client 172.213.137.79:25044] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xltt.php"] [unique_id "ad416OtqnEmNU9vpHCmWdQAAAM0"]
[Tue Apr 14 20:41:13.120806 2026] [:error] [pid 60074:tid 60082] [client 172.213.137.79:32875] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xltt.php"] [unique_id "ad416etqnEmNU9vpHCmWeQAAAMY"]
[Tue Apr 14 20:41:13.644090 2026] [:error] [pid 60074:tid 60076] [client 172.213.137.79:14661] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws57.php"] [unique_id "ad416etqnEmNU9vpHCmWewAAAMA"]
[Tue Apr 14 20:41:14.193725 2026] [:error] [pid 59986:tid 60043] [client 172.213.137.79:17687] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws57.php"] [unique_id "ad416p6axKeW6bX4H7diowAAAFc"]
[Tue Apr 14 20:41:14.797472 2026] [:error] [pid 3810:tid 3817] [client 172.213.137.79:48264] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws57.php"] [unique_id "ad416sqc5XaYZhFXVGeRLQAAAYQ"]
[Tue Apr 14 20:41:15.374749 2026] [:error] [pid 59986:tid 60032] [client 172.213.137.79:17687] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws57.php"] [unique_id "ad41656axKeW6bX4H7dipwAAAEw"]
[Tue Apr 14 20:41:16.175798 2026] [:error] [pid 22177:tid 22196] [client 172.213.137.79:21033] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws61.php"] [unique_id "ad417ITVeJSXHDIlEDt_wwAAARE"]
[Tue Apr 14 20:41:16.738161 2026] [:error] [pid 22177:tid 22179] [client 172.213.137.79:21050] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws61.php"] [unique_id "ad417ITVeJSXHDIlEDt_xwAAAQA"]
[Tue Apr 14 20:41:17.481167 2026] [:error] [pid 3810:tid 3821] [client 172.213.137.79:14665] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws61.php"] [unique_id "ad417cqc5XaYZhFXVGeRLwAAAYg"]
[Tue Apr 14 20:41:18.056808 2026] [:error] [pid 59985:tid 60012] [client 172.213.137.79:21028] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws61.php"] [unique_id "ad417ugHaxkvLE6V1kldPwAAABM"]
[Tue Apr 14 20:41:18.636306 2026] [:error] [pid 59986:tid 60024] [client 172.213.137.79:21415] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws66.php"] [unique_id "ad417p6axKeW6bX4H7ditQAAAEQ"]
[Tue Apr 14 20:41:19.227616 2026] [:error] [pid 59986:tid 60034] [client 172.213.137.79:24144] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws66.php"] [unique_id "ad41756axKeW6bX4H7diugAAAE4"]
[Tue Apr 14 20:41:20.051107 2026] [:error] [pid 59986:tid 60023] [client 172.213.137.79:1118] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws66.php"] [unique_id "ad418J6axKeW6bX4H7diwwAAAEM"]
[Tue Apr 14 20:41:20.597585 2026] [:error] [pid 3778:tid 3784] [client 172.213.137.79:14389] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws66.php"] [unique_id "ad418Bx5DfpNmYF_PaHcSwAAAUQ"]
[Tue Apr 14 20:41:21.186485 2026] [:error] [pid 59985:tid 60002] [client 172.213.137.79:13025] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws80.php"] [unique_id "ad418egHaxkvLE6V1kldRgAAAAk"]
[Tue Apr 14 20:41:21.742799 2026] [:error] [pid 59986:tid 60023] [client 172.213.137.79:35800] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws80.php"] [unique_id "ad418Z6axKeW6bX4H7di0AAAAEM"]
[Tue Apr 14 20:41:22.334770 2026] [:error] [pid 59986:tid 60043] [client 172.213.137.79:13515] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws80.php"] [unique_id "ad418p6axKeW6bX4H7di0wAAAFc"]
[Tue Apr 14 20:41:23.135473 2026] [:error] [pid 59986:tid 60039] [client 172.213.137.79:32308] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws80.php"] [unique_id "ad41856axKeW6bX4H7di2QAAAFM"]
[Tue Apr 14 20:41:23.705744 2026] [:error] [pid 59986:tid 60031] [client 172.213.137.79:12996] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xynz.php"] [unique_id "ad41856axKeW6bX4H7di3QAAAEs"]
[Tue Apr 14 20:41:24.310953 2026] [:error] [pid 3810:tid 3827] [client 172.213.137.79:8342] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xynz.php"] [unique_id "ad419Mqc5XaYZhFXVGeRMwAAAY4"]
[Tue Apr 14 20:41:24.944824 2026] [:error] [pid 3810:tid 3813] [client 172.213.137.79:23712] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xynz.php"] [unique_id "ad419Mqc5XaYZhFXVGeROAAAAYA"]
[Tue Apr 14 20:41:25.810113 2026] [:error] [pid 3778:tid 3789] [client 172.213.137.79:11811] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xynz.php"] [unique_id "ad419Rx5DfpNmYF_PaHcTgAAAUk"]
[Tue Apr 14 20:41:26.485678 2026] [:error] [pid 3778:tid 3797] [client 172.213.137.79:24504] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-01ul.php"] [unique_id "ad419hx5DfpNmYF_PaHcVAAAAVE"]
[Tue Apr 14 20:41:27.148781 2026] [:error] [pid 59986:tid 60033] [client 172.213.137.79:32298] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-01ul.php"] [unique_id "ad41956axKeW6bX4H7di5wAAAE0"]
[Tue Apr 14 20:41:27.899379 2026] [:error] [pid 59986:tid 60025] [client 172.213.137.79:13030] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-01ul.php"] [unique_id "ad41956axKeW6bX4H7di7gAAAEU"]
[Tue Apr 14 20:41:28.459767 2026] [:error] [pid 3810:tid 3817] [client 172.213.137.79:23732] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-01ul.php"] [unique_id "ad41-Mqc5XaYZhFXVGeRPwAAAYQ"]
[Tue Apr 14 20:41:28.997251 2026] [:error] [pid 59987:tid 60059] [client 172.213.137.79:32317] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/e7.php"] [unique_id "ad41-FWpk-Tfi6_vLKot0QAAAIw"]
[Tue Apr 14 20:41:29.832146 2026] [:error] [pid 59987:tid 60065] [client 172.213.137.79:1434] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/e7.php"] [unique_id "ad41-VWpk-Tfi6_vLKot0wAAAJI"]
[Tue Apr 14 20:41:30.810756 2026] [:error] [pid 3778:tid 3782] [client 172.213.137.79:35813] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/e7.php"] [unique_id "ad41-hx5DfpNmYF_PaHcYAAAAUI"]
[Tue Apr 14 20:41:31.526555 2026] [:error] [pid 3810:tid 3826] [client 172.213.137.79:13544] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/e7.php"] [unique_id "ad41-8qc5XaYZhFXVGeRQAAAAY0"]
[Tue Apr 14 20:41:32.145577 2026] [:error] [pid 3810:tid 3816] [client 172.213.137.79:35788] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/e3.php"] [unique_id "ad41_Mqc5XaYZhFXVGeRQQAAAYM"]
[Tue Apr 14 20:41:32.678884 2026] [:error] [pid 22177:tid 22193] [client 172.213.137.79:24175] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/e3.php"] [unique_id "ad41_ITVeJSXHDIlEDt_1AAAAQ4"]
[Tue Apr 14 20:41:33.386392 2026] [:error] [pid 59985:tid 60011] [client 172.213.137.79:23733] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/e3.php"] [unique_id "ad41_egHaxkvLE6V1kldVwAAABI"]
[Tue Apr 14 20:41:33.962259 2026] [:error] [pid 3810:tid 3822] [client 172.213.137.79:1461] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/e3.php"] [unique_id "ad41_cqc5XaYZhFXVGeRRwAAAYk"]
[Tue Apr 14 20:41:34.496150 2026] [:error] [pid 22177:tid 22202] [client 172.213.137.79:19201] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aevly.php"] [unique_id "ad41_oTVeJSXHDIlEDt_3AAAARc"]
[Tue Apr 14 20:41:35.337734 2026] [:error] [pid 59985:tid 60003] [client 172.213.137.79:48638] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aevly.php"] [unique_id "ad41_-gHaxkvLE6V1kldXAAAAAo"]
[Tue Apr 14 20:41:35.842044 2026] [:error] [pid 59985:tid 60004] [client 172.213.137.79:9366] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aevly.php"] [unique_id "ad41_-gHaxkvLE6V1kldXQAAAAs"]
[Tue Apr 14 20:41:36.585655 2026] [:error] [pid 3810:tid 3830] [client 172.213.137.79:14390] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aevly.php"] [unique_id "ad42AMqc5XaYZhFXVGeRTgAAAZE"]
[Tue Apr 14 20:41:37.434134 2026] [:error] [pid 60074:tid 60079] [client 172.213.137.79:14338] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bthil.php"] [unique_id "ad42AetqnEmNU9vpHCmWkgAAAMM"]
[Tue Apr 14 20:41:38.361022 2026] [:error] [pid 59986:tid 60025] [client 172.213.137.79:14632] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bthil.php"] [unique_id "ad42Ap6axKeW6bX4H7djAgAAAEU"]
[Tue Apr 14 20:41:39.426897 2026] [:error] [pid 59986:tid 60040] [client 172.213.137.79:26493] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bthil.php"] [unique_id "ad42A56axKeW6bX4H7djBwAAAFQ"]
[Tue Apr 14 20:41:40.535400 2026] [:error] [pid 3778:tid 3792] [client 172.213.137.79:12960] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bthil.php"] [unique_id "ad42BBx5DfpNmYF_PaHcagAAAUw"]
[Tue Apr 14 20:41:41.331036 2026] [:error] [pid 59985:tid 59999] [client 172.213.137.79:24523] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-class.php"] [unique_id "ad42BegHaxkvLE6V1kldZQAAAAY"]
[Tue Apr 14 20:41:42.048722 2026] [:error] [pid 59986:tid 60043] [client 172.213.137.79:28237] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-class.php"] [unique_id "ad42Bp6axKeW6bX4H7djDQAAAFc"]
[Tue Apr 14 20:41:42.629838 2026] [:error] [pid 59986:tid 60033] [client 172.213.137.79:13424] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-class.php"] [unique_id "ad42Bp6axKeW6bX4H7djEQAAAE0"]
[Tue Apr 14 20:41:43.266672 2026] [:error] [pid 59986:tid 60025] [client 172.213.137.79:13388] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-class.php"] [unique_id "ad42B56axKeW6bX4H7djFgAAAEU"]
[Tue Apr 14 20:41:43.967122 2026] [:error] [pid 3810:tid 3820] [client 172.213.137.79:14585] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cilus.php"] [unique_id "ad42B8qc5XaYZhFXVGeRYAAAAYc"]
[Tue Apr 14 20:41:44.552638 2026] [:error] [pid 59986:tid 60032] [client 172.213.137.79:11513] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cilus.php"] [unique_id "ad42CJ6axKeW6bX4H7djGwAAAEw"]
[Tue Apr 14 20:41:45.291903 2026] [:error] [pid 60074:tid 60081] [client 172.213.137.79:8283] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cilus.php"] [unique_id "ad42CetqnEmNU9vpHCmWngAAAMU"]
[Tue Apr 14 20:41:46.065099 2026] [:error] [pid 59986:tid 60035] [client 172.213.137.79:15458] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cilus.php"] [unique_id "ad42Cp6axKeW6bX4H7djHgAAAE8"]
[Tue Apr 14 20:41:47.050110 2026] [:error] [pid 59986:tid 60040] [client 172.213.137.79:12957] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/d.php"] [unique_id "ad42C56axKeW6bX4H7djIwAAAFQ"]
[Tue Apr 14 20:41:47.653380 2026] [:error] [pid 3810:tid 3822] [client 172.213.137.79:16152] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/d.php"] [unique_id "ad42C8qc5XaYZhFXVGeRZAAAAYk"]
[Tue Apr 14 20:41:48.286224 2026] [:error] [pid 59985:tid 59999] [client 172.213.137.79:26426] [client 172.213.137.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/d.php"] [unique_id "ad42DOgHaxkvLE6V1kldcgAAAAY"]
[Tue Apr 14 20:41:49.032500 2026] [proxy_fcgi:error] [pid 59985:tid 59995] [client 172.213.137.79:26375] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 20:41:49.356170 2026] [proxy_fcgi:error] [pid 59985:tid 60004] [client 172.213.137.79:26375] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 20:41:49.597517 2026] [proxy_fcgi:error] [pid 59985:tid 60015] [client 172.213.137.79:26375] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 20:41:49.833673 2026] [proxy_fcgi:error] [pid 59985:tid 60016] [client 172.213.137.79:26375] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 20:41:50.075122 2026] [proxy_fcgi:error] [pid 59985:tid 60013] [client 172.213.137.79:26375] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 20:41:50.311684 2026] [proxy_fcgi:error] [pid 59985:tid 59994] [client 172.213.137.79:26375] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 20:41:50.668419 2026] [proxy_fcgi:error] [pid 59985:tid 59996] [client 172.213.137.79:26375] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 20:41:50.905673 2026] [proxy_fcgi:error] [pid 59985:tid 60001] [client 172.213.137.79:26375] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 20:41:51.143358 2026] [proxy_fcgi:error] [pid 59985:tid 60000] [client 172.213.137.79:26375] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 20:41:51.381508 2026] [proxy_fcgi:error] [pid 59985:tid 60017] [client 172.213.137.79:26375] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 22:02:33.191010 2026] [:error] [pid 22177:tid 22184] [client 136.117.171.246:56716] [client 136.117.171.246] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.117.171.246, incrementing ddos counter"] [hostname "dwelectservices.com.au"] [uri "/xmlrpc.php"] [unique_id "ad5I-YTVeJSXHDIlEDuRvwAAAQU"]
[Tue Apr 14 22:02:33.201430 2026] [proxy_fcgi:error] [pid 22177:tid 22184] [client 136.117.171.246:56716] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 22:02:36.058616 2026] [:error] [pid 22177:tid 22193] [client 136.117.171.246:56716] [client 136.117.171.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "ad5I_ITVeJSXHDIlEDuRywAAAQ4"]
[Tue Apr 14 22:02:36.608856 2026] [:error] [pid 59985:tid 59995] [client 136.117.171.246:54313] [client 136.117.171.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "ad5I_OgHaxkvLE6V1klscgAAAAI"]
[Tue Apr 14 22:02:37.073471 2026] [:error] [pid 22177:tid 22183] [client 136.117.171.246:56420] [client 136.117.171.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "ad5I_YTVeJSXHDIlEDuRzwAAAQQ"]
[Tue Apr 14 22:02:37.675167 2026] [:error] [pid 60074:tid 60089] [client 136.117.171.246:58345] [client 136.117.171.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "ad5I_etqnEmNU9vpHCm1AwAAAM0"]
[Tue Apr 14 22:02:38.482978 2026] [:error] [pid 59987:tid 60054] [client 136.117.171.246:53998] [client 136.117.171.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "ad5I_lWpk-Tfi6_vLKpB8wAAAIc"]
[Tue Apr 14 22:02:39.301319 2026] [:error] [pid 59987:tid 60056] [client 136.117.171.246:54758] [client 136.117.171.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "ad5I_1Wpk-Tfi6_vLKpB9QAAAIk"]
[Tue Apr 14 22:02:39.650530 2026] [:error] [pid 22177:tid 22185] [client 136.117.171.246:61544] [client 136.117.171.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "ad5I_4TVeJSXHDIlEDuR0gAAAQY"]
[Tue Apr 14 23:39:11.062522 2026] [:error] [pid 60074:tid 60082] [client 154.54.100.171:53544] [client 154.54.100.171] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dwelectservices.com.au"] [uri "/.git/config"] [unique_id "ad5fn-tqnEmNU9vpHCnXqwAAAMY"]
[Wed Apr 15 03:14:09.604372 2026] [proxy_fcgi:error] [pid 62295:tid 62317] [client 59.126.168.24:61350] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 03:14:15.816177 2026] [proxy_fcgi:error] [pid 62296:tid 62327] [client 59.126.168.24:61433] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 03:52:24.468523 2026] [proxy_fcgi:error] [pid 37240:tid 37264] [client 45.131.195.160:59027] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 03:52:24.702530 2026] [proxy_fcgi:error] [pid 37240:tid 37270] [client 45.131.195.160:59027] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 03:52:24.925536 2026] [proxy_fcgi:error] [pid 37240:tid 37269] [client 45.131.195.160:59027] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 03:52:25.145024 2026] [proxy_fcgi:error] [pid 37240:tid 37280] [client 45.131.195.160:59027] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 03:52:25.381430 2026] [proxy_fcgi:error] [pid 37240:tid 37281] [client 45.131.195.160:59027] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 03:52:25.598541 2026] [proxy_fcgi:error] [pid 37240:tid 37265] [client 45.131.195.160:59027] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 03:52:25.820112 2026] [proxy_fcgi:error] [pid 37240:tid 37273] [client 45.131.195.160:59027] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 03:52:26.072681 2026] [proxy_fcgi:error] [pid 37240:tid 37268] [client 45.131.195.160:59027] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 03:52:26.522326 2026] [proxy_fcgi:error] [pid 37240:tid 37278] [client 45.131.195.160:59027] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 03:52:26.762700 2026] [proxy_fcgi:error] [pid 37240:tid 37259] [client 45.131.195.160:59027] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 03:52:26.995218 2026] [proxy_fcgi:error] [pid 37240:tid 37261] [client 45.131.195.160:59027] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 03:52:27.220142 2026] [proxy_fcgi:error] [pid 37240:tid 37275] [client 45.131.195.160:59027] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 03:52:27.447846 2026] [proxy_fcgi:error] [pid 37240:tid 37257] [client 45.131.195.160:59027] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 03:52:27.677682 2026] [proxy_fcgi:error] [pid 37240:tid 37266] [client 45.131.195.160:59027] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 03:52:27.902351 2026] [proxy_fcgi:error] [pid 37240:tid 37256] [client 45.131.195.160:59027] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 03:52:28.136825 2026] [proxy_fcgi:error] [pid 37240:tid 37282] [client 45.131.195.160:59027] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 03:52:28.367903 2026] [proxy_fcgi:error] [pid 37240:tid 37277] [client 45.131.195.160:59027] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 03:52:28.591905 2026] [proxy_fcgi:error] [pid 37240:tid 37264] [client 45.131.195.160:59027] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 03:52:32.343323 2026] [:error] [pid 37240:tid 37274] [client 45.131.195.160:59027] [client 45.131.195.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "ad6bAHs4QRdSGV9qPjiX5QAAABA"]
[Wed Apr 15 03:52:33.473739 2026] [:error] [pid 37241:tid 37301] [client 45.131.195.149:42119] [client 45.131.195.149] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "ad6bAQrNIniBmb0wDhf8vgAAAE0"]
[Wed Apr 15 03:52:34.603979 2026] [proxy_fcgi:error] [pid 37352:tid 37368] [client 45.131.195.184:52081] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 03:52:35.260962 2026] [:error] [pid 37352:tid 37363] [client 45.131.195.184:52081] [client 45.131.195.184] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dwelectservices.com.au"] [uri "/tinyfilemanager.php"] [unique_id "ad6bA_WatDNWJ5qARjf4MwAAAMk"]
[Wed Apr 15 03:52:36.126054 2026] [proxy_fcgi:error] [pid 37352:tid 37378] [client 45.131.195.250:43811] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 03:52:36.339195 2026] [:error] [pid 37352:tid 37367] [client 45.131.195.250:43811] [client 45.131.195.250] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "ad6bBPWatDNWJ5qARjf4OQAAAM0"]
[Wed Apr 15 03:52:36.997780 2026] [proxy_fcgi:error] [pid 37240:tid 37256] [client 45.131.195.191:41735] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 03:52:38.109176 2026] [:error] [pid 37240:tid 37264] [client 45.131.195.191:41735] [client 45.131.195.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "ad6bBns4QRdSGV9qPjiX7gAAAAY"]
[Wed Apr 15 03:52:38.771055 2026] [:error] [pid 37352:tid 37356] [client 45.131.195.174:39741] [client 45.131.195.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "ad6bBvWatDNWJ5qARjf4QwAAAMI"]
[Wed Apr 15 03:52:39.345362 2026] [:error] [pid 37240:tid 37276] [client 45.131.195.154:46031] [client 45.131.195.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "ad6bB3s4QRdSGV9qPjiX7wAAABI"]
[Wed Apr 15 03:52:39.774489 2026] [:error] [pid 37241:tid 37288] [client 45.131.195.134:24049] [client 45.131.195.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "ad6bBwrNIniBmb0wDhf8wwAAAEE"]
[Wed Apr 15 03:52:40.304908 2026] [:error] [pid 37244:tid 37324] [client 45.131.195.134:35619] [client 45.131.195.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "ad6bCImfE0_5oAAxpSnn8wAAAIY"]
[Wed Apr 15 03:52:40.739311 2026] [:error] [pid 37244:tid 37328] [client 45.131.195.174:60373] [client 45.131.195.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "ad6bCImfE0_5oAAxpSnn9AAAAIo"]
[Wed Apr 15 03:52:41.397219 2026] [:error] [pid 37240:tid 37268] [client 45.131.195.251:49859] [client 45.131.195.251] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "ad6bCXs4QRdSGV9qPjiX9AAAAAo"]
[Wed Apr 15 03:52:41.820629 2026] [proxy_fcgi:error] [pid 37244:tid 37336] [client 45.131.195.119:31105] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 03:52:42.255448 2026] [:error] [pid 37244:tid 37340] [client 45.131.195.119:31105] [client 45.131.195.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dwelectservices.com.au"] [uri "/filemanager.php"] [unique_id "ad6bComfE0_5oAAxpSnn-gAAAJY"]
[Wed Apr 15 03:52:43.124810 2026] [:error] [pid 37244:tid 37328] [client 45.131.195.165:41903] [client 45.131.195.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "ad6bC4mfE0_5oAAxpSnn_wAAAIo"]
[Wed Apr 15 03:52:43.769082 2026] [:error] [pid 37241:tid 37295] [client 45.131.195.136:30389] [client 45.131.195.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "ad6bCwrNIniBmb0wDhf8yAAAAEc"]
[Wed Apr 15 03:52:44.229315 2026] [proxy_fcgi:error] [pid 37240:tid 37257] [client 45.131.195.151:47209] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 03:52:44.449426 2026] [:error] [pid 37240:tid 37256] [client 45.131.195.151:47209] [client 45.131.195.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "ad6bDHs4QRdSGV9qPjiX-gAAAAA"]
[Wed Apr 15 03:52:44.890158 2026] [proxy_fcgi:error] [pid 37241:tid 37306] [client 45.131.195.150:59775] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 03:52:45.540869 2026] [proxy_fcgi:error] [pid 37241:tid 37291] [client 45.131.195.150:59775] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 03:52:46.862709 2026] [:error] [pid 37241:tid 37285] [client 45.131.195.150:59775] [client 45.131.195.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "ad6bDgrNIniBmb0wDhf80wAAAEA"]
[Wed Apr 15 03:52:47.309535 2026] [proxy_fcgi:error] [pid 37244:tid 37318] [client 45.131.195.161:62453] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 03:52:47.524851 2026] [:error] [pid 37244:tid 37332] [client 45.131.195.161:62453] [client 45.131.195.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "ad6bD4mfE0_5oAAxpSnoCgAAAI4"]
[Wed Apr 15 03:52:48.163630 2026] [proxy_fcgi:error] [pid 37352:tid 37376] [client 45.131.195.125:32749] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 03:52:48.629329 2026] [:error] [pid 37352:tid 37360] [client 45.131.195.125:32749] [client 45.131.195.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "ad6bEPWatDNWJ5qARjf4VQAAAMY"]
[Wed Apr 15 03:52:49.371482 2026] [:error] [pid 37244:tid 37335] [client 45.131.195.126:31961] [client 45.131.195.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "ad6bEYmfE0_5oAAxpSnoDwAAAJE"]
[Wed Apr 15 03:52:50.115861 2026] [proxy_fcgi:error] [pid 37352:tid 37371] [client 45.131.195.121:27665] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 03:52:50.348995 2026] [proxy_fcgi:error] [pid 37352:tid 37378] [client 45.131.195.121:27665] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 03:52:50.850983 2026] [:error] [pid 37352:tid 37360] [client 45.131.195.121:27665] [client 45.131.195.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "ad6bEvWatDNWJ5qARjf4XQAAAMY"]
[Wed Apr 15 03:52:52.672217 2026] [:error] [pid 37352:tid 37374] [client 45.131.195.139:31887] [client 45.131.195.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "ad6bFPWatDNWJ5qARjf4YQAAANQ"]
[Wed Apr 15 03:52:53.338571 2026] [:error] [pid 37352:tid 37366] [client 45.131.195.166:60223] [client 45.131.195.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "ad6bFfWatDNWJ5qARjf4YwAAAMw"]
[Wed Apr 15 03:52:53.785044 2026] [:error] [pid 37241:tid 37301] [client 45.131.195.134:38125] [client 45.131.195.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "ad6bFQrNIniBmb0wDhf82QAAAE0"]
[Wed Apr 15 03:52:54.224164 2026] [:error] [pid 37352:tid 37355] [client 45.131.195.116:48217] [client 45.131.195.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "ad6bFvWatDNWJ5qARjf4ZQAAAME"]
[Wed Apr 15 03:52:55.103061 2026] [proxy_fcgi:error] [pid 37241:tid 37296] [client 45.131.195.120:60931] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 03:52:55.367795 2026] [:error] [pid 37241:tid 37299] [client 45.131.195.120:60931] [client 45.131.195.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "ad6bFwrNIniBmb0wDhf83wAAAEs"]
[Wed Apr 15 03:52:55.794090 2026] [:error] [pid 37241:tid 37308] [client 45.131.195.174:48599] [client 45.131.195.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "ad6bFwrNIniBmb0wDhf84AAAAFQ"]
[Wed Apr 15 03:52:56.241922 2026] [:error] [pid 37352:tid 37368] [client 45.131.195.250:27787] [client 45.131.195.250] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "ad6bGPWatDNWJ5qARjf4agAAAM4"]
[Wed Apr 15 03:52:57.198123 2026] [proxy_fcgi:error] [pid 37352:tid 37360] [client 45.131.195.171:60575] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 03:52:57.643538 2026] [proxy_fcgi:error] [pid 37352:tid 37357] [client 45.131.195.171:60575] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 03:52:58.551090 2026] [:error] [pid 37352:tid 37365] [client 45.131.195.171:60575] [client 45.131.195.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/admin.php"] [unique_id "ad6bGvWatDNWJ5qARjf4egAAAMs"]
[Wed Apr 15 03:52:59.722158 2026] [:error] [pid 37352:tid 37369] [client 45.131.195.181:60025] [client 45.131.195.181] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.181, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "ad6bG_WatDNWJ5qARjf4hwAAAM8"]
[Wed Apr 15 03:52:59.946423 2026] [proxy_fcgi:error] [pid 37352:tid 37370] [client 45.131.195.181:60025] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 03:53:01.190378 2026] [proxy_fcgi:error] [pid 37352:tid 37376] [client 45.131.195.181:60025] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 03:53:01.417709 2026] [proxy_fcgi:error] [pid 37352:tid 37374] [client 45.131.195.181:60025] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 03:53:02.604954 2026] [:error] [pid 37352:tid 37362] [client 45.131.195.181:60025] [client 45.131.195.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "ad6bHvWatDNWJ5qARjf4nAAAAMg"]
[Wed Apr 15 03:53:03.035674 2026] [proxy_fcgi:error] [pid 37352:tid 37360] [client 45.131.195.129:26515] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 03:53:03.263117 2026] [proxy_fcgi:error] [pid 37352:tid 37373] [client 45.131.195.129:26515] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 03:53:03.486612 2026] [:error] [pid 37352:tid 37375] [client 45.131.195.129:26515] [client 45.131.195.129] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.129, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "ad6bH_WatDNWJ5qARjf4pAAAANU"]
[Wed Apr 15 03:53:04.048903 2026] [:error] [pid 37352:tid 37376] [client 45.131.195.129:26515] [client 45.131.195.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/item.php"] [unique_id "ad6bIPWatDNWJ5qARjf4qQAAANY"]
[Wed Apr 15 03:53:05.192813 2026] [proxy_fcgi:error] [pid 37241:tid 37288] [client 45.131.195.126:34721] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 03:53:05.428577 2026] [proxy_fcgi:error] [pid 37241:tid 37304] [client 45.131.195.126:34721] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 03:53:05.867291 2026] [proxy_fcgi:error] [pid 37241:tid 37307] [client 45.131.195.126:34721] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 03:53:06.303891 2026] [:error] [pid 37241:tid 37295] [client 45.131.195.126:34721] [client 45.131.195.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "ad6bIgrNIniBmb0wDhf88gAAAEc"]
[Wed Apr 15 03:53:06.735672 2026] [proxy_fcgi:error] [pid 37241:tid 37309] [client 45.131.195.140:32805] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 03:53:07.411388 2026] [proxy_fcgi:error] [pid 37241:tid 37312] [client 45.131.195.140:32805] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 03:53:07.947335 2026] [proxy_fcgi:error] [pid 37241:tid 37310] [client 45.131.195.140:32805] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 03:53:08.429373 2026] [proxy_fcgi:error] [pid 37241:tid 37299] [client 45.131.195.140:32805] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 03:53:08.647907 2026] [:error] [pid 37241:tid 37308] [client 45.131.195.140:32805] [client 45.131.195.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "ad6bJArNIniBmb0wDhf8_QAAAFQ"]
[Wed Apr 15 03:53:09.108111 2026] [proxy_fcgi:error] [pid 37352:tid 37364] [client 45.131.195.190:61635] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 03:53:09.338729 2026] [proxy_fcgi:error] [pid 37352:tid 37363] [client 45.131.195.190:61635] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 03:53:09.565917 2026] [:error] [pid 37352:tid 37358] [client 45.131.195.190:61635] [client 45.131.195.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "ad6bJfWatDNWJ5qARjf4wgAAAMQ"]
[Wed Apr 15 03:53:10.302693 2026] [proxy_fcgi:error] [pid 37240:tid 37279] [client 45.131.195.181:27945] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 03:53:10.770067 2026] [:error] [pid 37240:tid 37276] [client 45.131.195.181:27945] [client 45.131.195.181] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.181, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "ad6bJns4QRdSGV9qPjiYDAAAABI"]
[Wed Apr 15 03:53:10.997761 2026] [:error] [pid 37240:tid 37280] [client 45.131.195.181:27945] [client 45.131.195.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "ad6bJns4QRdSGV9qPjiYDQAAABY"]
[Wed Apr 15 03:53:14.109762 2026] [proxy_fcgi:error] [pid 37244:tid 37326] [client 45.131.195.124:51713] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 03:53:15.605120 2026] [proxy_fcgi:error] [pid 37244:tid 37323] [client 45.131.195.124:51713] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 03:53:15.822676 2026] [:error] [pid 37244:tid 37335] [client 45.131.195.124:51713] [client 45.131.195.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "ad6bK4mfE0_5oAAxpSnoQwAAAJE"]
[Wed Apr 15 03:53:17.787520 2026] [proxy_fcgi:error] [pid 37240:tid 37273] [client 45.131.195.174:29513] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 03:53:18.602014 2026] [:error] [pid 37240:tid 37259] [client 45.131.195.174:29513] [client 45.131.195.174] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.174, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "ad6bLns4QRdSGV9qPjiYHQAAAAI"]
[Wed Apr 15 03:53:18.854381 2026] [proxy_fcgi:error] [pid 37240:tid 37275] [client 45.131.195.174:29513] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 03:53:19.120574 2026] [proxy_fcgi:error] [pid 37240:tid 37278] [client 45.131.195.174:29513] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 03:53:19.338182 2026] [proxy_fcgi:error] [pid 37240:tid 37265] [client 45.131.195.174:29513] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 03:53:19.557288 2026] [:error] [pid 37240:tid 37271] [client 45.131.195.174:29513] [client 45.131.195.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "ad6bL3s4QRdSGV9qPjiYIgAAAA0"]
[Wed Apr 15 03:53:20.019919 2026] [proxy_fcgi:error] [pid 37352:tid 37376] [client 45.131.195.150:25617] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 03:53:20.236066 2026] [:error] [pid 37352:tid 37355] [client 45.131.195.150:25617] [client 45.131.195.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/infi.php"] [unique_id "ad6bMPWatDNWJ5qARjf46gAAAME"]
[Wed Apr 15 03:53:20.895922 2026] [proxy_fcgi:error] [pid 37352:tid 37366] [client 45.131.195.184:46661] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 03:53:21.119368 2026] [:error] [pid 37352:tid 37363] [client 45.131.195.184:46661] [client 45.131.195.184] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "ad6bMfWatDNWJ5qARjf47wAAAMk"]
[Wed Apr 15 03:53:21.542694 2026] [proxy_fcgi:error] [pid 37244:tid 37315] [client 45.131.195.150:29401] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 03:53:22.128743 2026] [proxy_fcgi:error] [pid 37244:tid 37335] [client 45.131.195.150:29401] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 03:53:22.342419 2026] [:error] [pid 37244:tid 37325] [client 45.131.195.150:29401] [client 45.131.195.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "ad6bMomfE0_5oAAxpSnoTwAAAIc"]
[Wed Apr 15 03:53:22.785271 2026] [:error] [pid 37240:tid 37276] [client 45.131.195.204:48481] [client 45.131.195.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "ad6bMns4QRdSGV9qPjiYJAAAABI"]
[Wed Apr 15 03:53:23.263283 2026] [proxy_fcgi:error] [pid 37352:tid 37360] [client 45.131.195.126:52363] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 03:53:23.497011 2026] [proxy_fcgi:error] [pid 37352:tid 37372] [client 45.131.195.126:52363] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 03:53:24.372881 2026] [:error] [pid 37352:tid 37354] [client 45.131.195.126:52363] [client 45.131.195.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "ad6bNPWatDNWJ5qARjf5BgAAAMA"]
[Wed Apr 15 03:53:25.039373 2026] [:error] [pid 37244:tid 37320] [client 45.131.195.134:58453] [client 45.131.195.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "ad6bNYmfE0_5oAAxpSnoVgAAAIQ"]
[Wed Apr 15 03:53:26.137246 2026] [:error] [pid 37240:tid 37262] [client 45.131.195.250:38761] [client 45.131.195.250] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/edit.php"] [unique_id "ad6bNns4QRdSGV9qPjiYLAAAAAQ"]
[Wed Apr 15 03:53:28.163153 2026] [proxy_fcgi:error] [pid 37241:tid 37307] [client 45.131.195.141:55595] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 03:53:28.601194 2026] [proxy_fcgi:error] [pid 37241:tid 37309] [client 45.131.195.141:55595] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 03:53:28.823776 2026] [:error] [pid 37241:tid 37306] [client 45.131.195.141:55595] [client 45.131.195.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "ad6bOArNIniBmb0wDhf9EwAAAFI"]
[Wed Apr 15 03:53:29.256101 2026] [proxy_fcgi:error] [pid 37352:tid 37378] [client 45.131.195.197:45877] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 03:53:29.704956 2026] [:error] [pid 37352:tid 37354] [client 45.131.195.197:45877] [client 45.131.195.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/click.php"] [unique_id "ad6bOfWatDNWJ5qARjf5HAAAAMA"]
[Wed Apr 15 03:53:30.959904 2026] [:error] [pid 37352:tid 37368] [client 45.131.195.146:24077] [client 45.131.195.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "ad6bOvWatDNWJ5qARjf5JgAAAM4"]
[Wed Apr 15 03:53:31.640466 2026] [proxy_fcgi:error] [pid 37352:tid 37367] [client 45.131.195.161:60195] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 03:53:32.301870 2026] [proxy_fcgi:error] [pid 37352:tid 37366] [client 45.131.195.161:60195] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 03:53:32.741376 2026] [proxy_fcgi:error] [pid 37352:tid 37376] [client 45.131.195.161:60195] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 03:53:32.964551 2026] [:error] [pid 37352:tid 37367] [client 45.131.195.161:60195] [client 45.131.195.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "ad6bPPWatDNWJ5qARjf5NwAAAM0"]
[Wed Apr 15 03:53:33.507903 2026] [:error] [pid 37244:tid 37335] [client 45.131.195.120:53519] [client 45.131.195.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/xl2023.php"] [unique_id "ad6bPYmfE0_5oAAxpSnoZgAAAJE"]
[Wed Apr 15 03:53:34.076671 2026] [:error] [pid 37352:tid 37368] [client 45.131.195.161:39351] [client 45.131.195.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/certificates/admin.php"] [unique_id "ad6bPvWatDNWJ5qARjf5PAAAAM4"]
[Wed Apr 15 03:53:34.524855 2026] [:error] [pid 37240:tid 37278] [client 45.131.195.185:63407] [client 45.131.195.185] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/media/dog.php"] [unique_id "ad6bPns4QRdSGV9qPjiYNQAAABQ"]
[Wed Apr 15 03:53:35.003277 2026] [proxy_fcgi:error] [pid 37241:tid 37293] [client 45.131.195.169:21153] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 03:53:35.237693 2026] [:error] [pid 37241:tid 37310] [client 45.131.195.169:21153] [client 45.131.195.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "ad6bPwrNIniBmb0wDhf9GgAAAFY"]
[Wed Apr 15 03:53:35.776954 2026] [:error] [pid 37244:tid 37320] [client 45.131.195.124:25925] [client 45.131.195.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "ad6bP4mfE0_5oAAxpSnobwAAAIQ"]
[Wed Apr 15 03:53:37.727411 2026] [proxy_fcgi:error] [pid 37352:tid 37355] [client 45.131.195.135:39249] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 03:53:38.173087 2026] [:error] [pid 37352:tid 37367] [client 45.131.195.135:39249] [client 45.131.195.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "ad6bQvWatDNWJ5qARjf5UgAAAM0"]
[Wed Apr 15 03:53:38.615405 2026] [:error] [pid 37352:tid 37372] [client 45.131.195.191:30691] [client 45.131.195.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "ad6bQvWatDNWJ5qARjf5VgAAANI"]
[Wed Apr 15 03:53:39.036088 2026] [:error] [pid 37352:tid 37377] [client 45.131.195.139:44721] [client 45.131.195.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/pomo/admin.php"] [unique_id "ad6bQ_WatDNWJ5qARjf5WwAAANc"]
[Wed Apr 15 03:53:39.520689 2026] [:error] [pid 37352:tid 37373] [client 45.131.195.130:29641] [client 45.131.195.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/IXR/security.php"] [unique_id "ad6bQ_WatDNWJ5qARjf5XAAAANM"]
[Wed Apr 15 03:53:40.194929 2026] [:error] [pid 37352:tid 37364] [client 45.131.195.151:53021] [client 45.131.195.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "ad6bRPWatDNWJ5qARjf5ZAAAAMo"]
[Wed Apr 15 03:53:41.094192 2026] [:error] [pid 37352:tid 37369] [client 45.131.195.125:49363] [client 45.131.195.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/fonts/about.php"] [unique_id "ad6bRfWatDNWJ5qARjf5bAAAAM8"]
[Wed Apr 15 03:53:41.602370 2026] [proxy_fcgi:error] [pid 37352:tid 37362] [client 45.131.195.181:40817] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 03:53:42.268371 2026] [proxy_fcgi:error] [pid 37352:tid 37361] [client 45.131.195.181:40817] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 03:53:42.487866 2026] [:error] [pid 37352:tid 37368] [client 45.131.195.181:40817] [client 45.131.195.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "ad6bRvWatDNWJ5qARjf5dwAAAM4"]
[Wed Apr 15 03:53:43.157739 2026] [proxy_fcgi:error] [pid 37244:tid 37331] [client 45.131.195.189:41143] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 03:53:43.377191 2026] [proxy_fcgi:error] [pid 37244:tid 37327] [client 45.131.195.189:41143] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 03:53:45.665902 2026] [:error] [pid 37244:tid 37329] [client 45.131.195.189:41143] [client 45.131.195.189] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/file.php"] [unique_id "ad6bSYmfE0_5oAAxpSnofgAAAIs"]
[Wed Apr 15 03:53:46.741993 2026] [:error] [pid 37352:tid 37358] [client 45.131.195.140:50165] [client 45.131.195.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "ad6bSvWatDNWJ5qARjf5iQAAAMQ"]
[Wed Apr 15 03:53:47.159158 2026] [:error] [pid 37241:tid 37285] [client 45.131.195.140:50089] [client 45.131.195.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "ad6bSwrNIniBmb0wDhf9IgAAAEA"]
[Wed Apr 15 03:53:48.727277 2026] [:error] [pid 37240:tid 37256] [client 45.131.195.154:60269] [client 45.131.195.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "ad6bTHs4QRdSGV9qPjiYRQAAAAA"]
[Wed Apr 15 03:53:49.657015 2026] [proxy_fcgi:error] [pid 37241:tid 37303] [client 45.131.195.169:59499] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 03:53:49.870100 2026] [proxy_fcgi:error] [pid 37241:tid 37301] [client 45.131.195.169:59499] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 03:53:50.088614 2026] [proxy_fcgi:error] [pid 37241:tid 37300] [client 45.131.195.169:59499] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 03:53:50.307812 2026] [proxy_fcgi:error] [pid 37241:tid 37294] [client 45.131.195.169:59499] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 03:53:51.477383 2026] [:error] [pid 37241:tid 37312] [client 45.131.195.169:59499] [client 45.131.195.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "ad6bTwrNIniBmb0wDhf9LwAAAFg"]
[Wed Apr 15 03:53:51.966351 2026] [:error] [pid 37240:tid 37259] [client 45.131.195.149:30467] [client 45.131.195.149] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "ad6bT3s4QRdSGV9qPjiYSQAAAAI"]
[Wed Apr 15 03:53:52.423622 2026] [:error] [pid 37240:tid 37266] [client 45.131.195.134:26043] [client 45.131.195.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "ad6bUHs4QRdSGV9qPjiYTAAAAAg"]
[Wed Apr 15 03:53:52.865973 2026] [:error] [pid 37240:tid 37280] [client 45.131.195.145:33991] [client 45.131.195.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "ad6bUHs4QRdSGV9qPjiYTwAAABY"]
[Wed Apr 15 03:53:53.367286 2026] [:error] [pid 37244:tid 37330] [client 45.131.195.197:39927] [client 45.131.195.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "ad6bUYmfE0_5oAAxpSnojAAAAIw"]
[Wed Apr 15 03:53:53.812723 2026] [:error] [pid 37352:tid 37372] [client 45.131.195.161:48171] [client 45.131.195.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "ad6bUfWatDNWJ5qARjf5lAAAANI"]
[Wed Apr 15 03:53:54.449301 2026] [:error] [pid 37241:tid 37285] [client 45.131.195.251:57083] [client 45.131.195.251] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/media/index.php"] [unique_id "ad6bUgrNIniBmb0wDhf9MgAAAEA"]
[Wed Apr 15 03:53:54.913954 2026] [:error] [pid 37244:tid 37333] [client 45.131.195.176:61403] [client 45.131.195.176] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "ad6bUomfE0_5oAAxpSnokQAAAI8"]
[Wed Apr 15 03:53:55.395156 2026] [:error] [pid 37240:tid 37262] [client 45.131.195.150:39273] [client 45.131.195.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "ad6bU3s4QRdSGV9qPjiYVQAAAAQ"]
[Wed Apr 15 03:53:56.053914 2026] [:error] [pid 37240:tid 37270] [client 45.131.195.179:45755] [client 45.131.195.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "ad6bVHs4QRdSGV9qPjiYVwAAAAw"]
[Wed Apr 15 03:53:57.040544 2026] [:error] [pid 37244:tid 37327] [client 45.131.195.159:33929] [client 45.131.195.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/fonts/themes.php"] [unique_id "ad6bVYmfE0_5oAAxpSnolgAAAIk"]
[Wed Apr 15 03:53:58.043532 2026] [:error] [pid 37240:tid 37259] [client 45.131.195.140:63475] [client 45.131.195.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/certificates/index.php"] [unique_id "ad6bVns4QRdSGV9qPjiYWgAAAAI"]
[Wed Apr 15 03:53:58.558204 2026] [proxy_fcgi:error] [pid 37241:tid 37295] [client 45.131.195.134:28621] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 03:53:59.008897 2026] [:error] [pid 37241:tid 37298] [client 45.131.195.134:28621] [client 45.131.195.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "ad6bVwrNIniBmb0wDhf9PQAAAEo"]
[Wed Apr 15 03:53:59.961820 2026] [:error] [pid 37244:tid 37328] [client 45.131.195.169:37541] [client 45.131.195.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "ad6bV4mfE0_5oAAxpSnonAAAAIo"]
[Wed Apr 15 03:54:00.963434 2026] [proxy_fcgi:error] [pid 37241:tid 37288] [client 45.131.195.171:20681] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 03:54:01.190661 2026] [:error] [pid 37241:tid 37293] [client 45.131.195.171:20681] [client 45.131.195.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "ad6bWQrNIniBmb0wDhf9QwAAAEU"]
[Wed Apr 15 03:54:01.879065 2026] [proxy_fcgi:error] [pid 37352:tid 37356] [client 45.131.195.134:58705] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 03:54:02.114766 2026] [proxy_fcgi:error] [pid 37352:tid 37366] [client 45.131.195.134:58705] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 03:54:02.335622 2026] [proxy_fcgi:error] [pid 37352:tid 37376] [client 45.131.195.134:58705] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 03:54:02.561897 2026] [:error] [pid 37352:tid 37375] [client 45.131.195.134:58705] [client 45.131.195.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "ad6bWvWatDNWJ5qARjf5qQAAANU"]
[Wed Apr 15 03:54:03.003557 2026] [proxy_fcgi:error] [pid 37241:tid 37306] [client 45.131.195.166:22531] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 03:54:03.262065 2026] [:error] [pid 37241:tid 37297] [client 45.131.195.166:22531] [client 45.131.195.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "ad6bWwrNIniBmb0wDhf9SAAAAEk"]
[Wed Apr 15 03:54:04.148163 2026] [proxy_fcgi:error] [pid 37352:tid 37368] [client 45.131.195.197:21397] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 03:54:04.368202 2026] [proxy_fcgi:error] [pid 37352:tid 37356] [client 45.131.195.197:21397] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 03:54:04.597117 2026] [proxy_fcgi:error] [pid 37352:tid 37366] [client 45.131.195.197:21397] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 03:54:05.691360 2026] [proxy_fcgi:error] [pid 37352:tid 37368] [client 45.131.195.197:21397] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 03:54:05.955408 2026] [proxy_fcgi:error] [pid 37352:tid 37370] [client 45.131.195.197:21397] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 03:54:06.389760 2026] [proxy_fcgi:error] [pid 37352:tid 37378] [client 45.131.195.197:21397] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 03:54:07.734348 2026] [proxy_fcgi:error] [pid 37352:tid 37371] [client 45.131.195.197:21397] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 03:54:07.949546 2026] [:error] [pid 37352:tid 37363] [client 45.131.195.197:21397] [client 45.131.195.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "ad6bX_WatDNWJ5qARjf51QAAAMk"]
[Wed Apr 15 03:54:08.384982 2026] [:error] [pid 37244:tid 37325] [client 45.131.195.190:52667] [client 45.131.195.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "ad6bYImfE0_5oAAxpSnopgAAAIc"]
[Wed Apr 15 03:54:08.816701 2026] [proxy_fcgi:error] [pid 37352:tid 37368] [client 45.131.195.179:36663] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 03:54:09.051330 2026] [:error] [pid 37352:tid 37370] [client 45.131.195.179:36663] [client 45.131.195.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "ad6bYfWatDNWJ5qARjf52AAAANA"]
[Wed Apr 15 03:54:10.813769 2026] [proxy_fcgi:error] [pid 37240:tid 37282] [client 45.131.195.120:29243] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 03:54:11.078430 2026] [:error] [pid 37240:tid 37267] [client 45.131.195.120:29243] [client 45.131.195.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "ad6bY3s4QRdSGV9qPjiYcQAAAAk"]
[Wed Apr 15 03:54:11.516394 2026] [:error] [pid 37240:tid 37274] [client 45.131.195.130:57853] [client 45.131.195.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "ad6bY3s4QRdSGV9qPjiYdAAAABA"]
[Wed Apr 15 03:54:12.856969 2026] [:error] [pid 37240:tid 37265] [client 45.131.195.195:32067] [client 45.131.195.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "ad6bZHs4QRdSGV9qPjiYfAAAAAc"]
[Wed Apr 15 03:54:13.279325 2026] [:error] [pid 37352:tid 37377] [client 45.131.195.181:39697] [client 45.131.195.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dwelectservices.com.au"] [uri "/fm.php"] [unique_id "ad6bZfWatDNWJ5qARjf53gAAANc"]
[Wed Apr 15 03:54:14.980109 2026] [proxy_fcgi:error] [pid 37241:tid 37288] [client 45.131.195.141:47743] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 03:54:15.401001 2026] [:error] [pid 37241:tid 37312] [client 45.131.195.141:47743] [client 45.131.195.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "ad6bZwrNIniBmb0wDhf9WAAAAFg"]
[Wed Apr 15 03:54:16.381286 2026] [proxy_fcgi:error] [pid 37240:tid 37278] [client 45.131.195.179:23445] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 03:54:16.812823 2026] [:error] [pid 37240:tid 37266] [client 45.131.195.179:23445] [client 45.131.195.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/function.php"] [unique_id "ad6baHs4QRdSGV9qPjiYhQAAAAg"]
[Wed Apr 15 03:54:17.232161 2026] [:error] [pid 37352:tid 37363] [client 45.131.195.250:64351] [client 45.131.195.250] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/plugins.php"] [unique_id "ad6bafWatDNWJ5qARjf56QAAAMk"]
[Wed Apr 15 03:54:17.950557 2026] [proxy_fcgi:error] [pid 37241:tid 37295] [client 45.131.195.116:52557] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 03:54:18.179137 2026] [:error] [pid 37241:tid 37310] [client 45.131.195.116:52557] [client 45.131.195.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/chosen.php"] [unique_id "ad6bagrNIniBmb0wDhf9WwAAAFY"]
[Wed Apr 15 03:54:18.695970 2026] [:error] [pid 37240:tid 37264] [client 45.131.195.191:61945] [client 45.131.195.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "ad6bans4QRdSGV9qPjiYiAAAAAY"]
[Wed Apr 15 03:54:20.665727 2026] [proxy_fcgi:error] [pid 37352:tid 37367] [client 45.131.195.197:60551] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 03:54:20.907920 2026] [proxy_fcgi:error] [pid 37352:tid 37374] [client 45.131.195.197:60551] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 03:54:21.388409 2026] [proxy_fcgi:error] [pid 37352:tid 37361] [client 45.131.195.197:60551] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 03:54:21.866316 2026] [:error] [pid 37352:tid 37368] [client 45.131.195.197:60551] [client 45.131.195.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/atomlib.php"] [unique_id "ad6bbfWatDNWJ5qARjf5-wAAAM4"]
[Wed Apr 15 03:54:22.295063 2026] [:error] [pid 37352:tid 37378] [client 45.131.195.156:55971] [client 45.131.195.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/rest-api/index.php"] [unique_id "ad6bbvWatDNWJ5qARjf5_gAAANg"]
[Wed Apr 15 03:54:23.395496 2026] [proxy_fcgi:error] [pid 37352:tid 37371] [client 45.131.195.161:26527] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 03:54:23.618223 2026] [:error] [pid 37352:tid 37354] [client 45.131.195.161:26527] [client 45.131.195.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/index.php"] [unique_id "ad6bb_WatDNWJ5qARjf6CQAAAMA"]
[Wed Apr 15 03:54:24.044351 2026] [:error] [pid 37240:tid 37271] [client 45.131.195.195:38681] [client 45.131.195.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "ad6bcHs4QRdSGV9qPjiYjAAAAA0"]
[Wed Apr 15 03:54:24.467079 2026] [:error] [pid 37240:tid 37266] [client 45.131.195.179:29493] [client 45.131.195.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "ad6bcHs4QRdSGV9qPjiYjgAAAAg"]
[Wed Apr 15 03:54:26.608910 2026] [proxy_fcgi:error] [pid 37352:tid 37363] [client 45.131.195.189:35107] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 03:54:26.843542 2026] [:error] [pid 37352:tid 37361] [client 45.131.195.189:35107] [client 45.131.195.189] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/Exception-wp.php"] [unique_id "ad6bcvWatDNWJ5qARjf6FQAAAMc"]
[Wed Apr 15 03:54:27.556140 2026] [:error] [pid 37352:tid 37355] [client 45.131.195.176:20915] [client 45.131.195.176] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "ad6bc_WatDNWJ5qARjf6GgAAAME"]
[Wed Apr 15 03:54:28.008482 2026] [proxy_fcgi:error] [pid 37240:tid 37259] [client 45.131.195.124:42849] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 03:54:28.240054 2026] [proxy_fcgi:error] [pid 37240:tid 37279] [client 45.131.195.124:42849] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 03:54:28.686167 2026] [proxy_fcgi:error] [pid 37240:tid 37270] [client 45.131.195.124:42849] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 03:54:29.558011 2026] [:error] [pid 37240:tid 37261] [client 45.131.195.124:42849] [client 45.131.195.124] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.124, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/js/wp-login.php"] [unique_id "ad6bdXs4QRdSGV9qPjiYmgAAAAM"]
[Wed Apr 15 03:54:30.010055 2026] [:error] [pid 37240:tid 37267] [client 45.131.195.124:42849] File does not exist: /home/dwelects/public_html/worm.PhP
[Wed Apr 15 03:54:30.227588 2026] [proxy_fcgi:error] [pid 37240:tid 37275] [client 45.131.195.124:42849] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 03:54:30.440610 2026] [proxy_fcgi:error] [pid 37240:tid 37264] [client 45.131.195.124:42849] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 03:54:30.937427 2026] [:error] [pid 37240:tid 37276] [client 45.131.195.124:42849] [client 45.131.195.124] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.124, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "ad6bdns4QRdSGV9qPjiYowAAABI"]
[Wed Apr 15 03:54:31.596872 2026] [proxy_fcgi:error] [pid 37240:tid 37263] [client 45.131.195.124:42849] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 03:54:31.830214 2026] [proxy_fcgi:error] [pid 37240:tid 37277] [client 45.131.195.124:42849] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 03:54:33.039356 2026] [proxy_fcgi:error] [pid 37240:tid 37262] [client 45.131.195.124:42849] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 03:54:34.079602 2026] [proxy_fcgi:error] [pid 37240:tid 37264] [client 45.131.195.124:42849] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 03:54:35.762849 2026] [proxy_fcgi:error] [pid 37240:tid 37280] [client 45.131.195.124:42849] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 03:54:41.007803 2026] [proxy_fcgi:error] [pid 37240:tid 37265] [client 45.131.195.124:42849] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 03:54:41.252962 2026] [proxy_fcgi:error] [pid 37240:tid 37264] [client 45.131.195.124:42849] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 03:54:43.284077 2026] [proxy_fcgi:error] [pid 37240:tid 37268] [client 45.131.195.124:42849] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 03:54:43.708528 2026] [:error] [pid 37240:tid 37270] [client 45.131.195.124:42849] [client 45.131.195.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "ad6bg3s4QRdSGV9qPjiYwgAAAAw"]
[Wed Apr 15 03:54:44.685791 2026] [proxy_fcgi:error] [pid 37352:tid 37362] [client 45.131.195.186:60825] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 03:54:44.955562 2026] [:error] [pid 37352:tid 37354] [client 45.131.195.186:60825] [client 45.131.195.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "ad6bhPWatDNWJ5qARjf6NAAAAMA"]
[Wed Apr 15 03:54:45.384575 2026] [proxy_fcgi:error] [pid 37241:tid 37293] [client 45.131.195.179:29673] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 03:54:45.622498 2026] [proxy_fcgi:error] [pid 37241:tid 37303] [client 45.131.195.179:29673] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 03:54:45.838908 2026] [:error] [pid 37241:tid 37302] [client 45.131.195.179:29673] [client 45.131.195.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/atomlib.php"] [unique_id "ad6bhQrNIniBmb0wDhf9nAAAAE4"]
[Wed Apr 15 03:54:48.013807 2026] [proxy_fcgi:error] [pid 37244:tid 37319] [client 45.131.195.149:33469] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 03:54:48.451299 2026] [proxy_fcgi:error] [pid 37244:tid 37332] [client 45.131.195.149:33469] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 03:54:48.898749 2026] [proxy_fcgi:error] [pid 37244:tid 37315] [client 45.131.195.149:33469] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 03:54:49.111304 2026] [proxy_fcgi:error] [pid 37244:tid 37325] [client 45.131.195.149:33469] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 03:54:49.531511 2026] [:error] [pid 37244:tid 37342] [client 45.131.195.149:33469] [client 45.131.195.149] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "ad6biYmfE0_5oAAxpSno7AAAAJg"]
[Wed Apr 15 03:54:49.965130 2026] [proxy_fcgi:error] [pid 37244:tid 37332] [client 45.131.195.189:47363] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 03:54:50.183874 2026] [proxy_fcgi:error] [pid 37244:tid 37339] [client 45.131.195.189:47363] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 03:54:50.394787 2026] [:error] [pid 37244:tid 37323] [client 45.131.195.189:47363] [client 45.131.195.189] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "ad6biomfE0_5oAAxpSno8AAAAIU"]
[Wed Apr 15 03:54:51.066501 2026] [:error] [pid 37240:tid 37264] [client 45.131.195.186:41441] [client 45.131.195.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "ad6bi3s4QRdSGV9qPjiYywAAAAY"]
[Wed Apr 15 03:54:51.799424 2026] [proxy_fcgi:error] [pid 37241:tid 37297] [client 45.131.195.161:28621] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 03:54:52.568910 2026] [proxy_fcgi:error] [pid 37241:tid 37288] [client 45.131.195.161:28621] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 03:54:52.806194 2026] [proxy_fcgi:error] [pid 37241:tid 37304] [client 45.131.195.161:28621] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 03:54:53.025604 2026] [:error] [pid 37241:tid 37307] [client 45.131.195.161:28621] [client 45.131.195.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "ad6bjQrNIniBmb0wDhf9sgAAAFM"]
[Wed Apr 15 03:54:53.456428 2026] [:error] [pid 37241:tid 37293] [client 45.131.195.181:48781] [client 45.131.195.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "ad6bjQrNIniBmb0wDhf9swAAAEU"]
[Wed Apr 15 03:54:55.199809 2026] [proxy_fcgi:error] [pid 37352:tid 37354] [client 45.131.195.186:48057] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 03:54:55.662128 2026] [:error] [pid 37352:tid 37366] [client 45.131.195.186:48057] [client 45.131.195.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/dist/default.php"] [unique_id "ad6bj_WatDNWJ5qARjf6QQAAAMw"]
[Wed Apr 15 03:55:20.148035 2026] [autoindex:error] [pid 37240:tid 37281] [client 45.131.195.190:29055] AH01276: Cannot serve directory /home/dwelects/public_html/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 03:55:27.614748 2026] [autoindex:error] [pid 37240:tid 37264] [client 45.131.195.190:29055] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 04:27:50.610580 2026] [:error] [pid 4169:tid 4182] [client 45.131.195.166:28659] [client 45.131.195.166] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.166, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-login.php"] [unique_id "ad6jRh15U5D-N99n_jJRwwAAAMo"]
[Wed Apr 15 04:27:50.621800 2026] [proxy_fcgi:error] [pid 4169:tid 4182] [client 45.131.195.166:28659] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 17:09:44.233310 2026] [:error] [pid 11385:tid 11460] [client 216.73.216.101:23771] [client 216.73.216.101] ModSecurity: Warning. Pattern match "^$" at REQUEST_HEADERS:user-agent. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "120"] [id "217240"] [rev "3"] [msg "COMODO WAF: Empty User Agent Header||www.dwelectservices.com.au|F|5"] [data "REQUEST_HEADERS:user-agent="] [severity "NOTICE"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dwelectservices.com.au"] [uri "/robots.txt"] [unique_id "ad9V2B_mZoXMMCiUoKVMFAAAAMs"]
[Wed Apr 15 20:29:31.077696 2026] [:error] [pid 37370:tid 37386] [client 34.136.166.243:58465] [client 34.136.166.243] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.136.166.243, incrementing ddos counter"] [hostname "dwelectservices.com.au"] [uri "/xmlrpc.php"] [unique_id "ad-Eq3g-gnM2Ga0cGAA1FQAAAQ4"]
[Wed Apr 15 20:29:31.087429 2026] [proxy_fcgi:error] [pid 37370:tid 37386] [client 34.136.166.243:58465] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 20:29:33.685072 2026] [:error] [pid 37370:tid 37376] [client 34.136.166.243:58465] [client 34.136.166.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "ad-ErXg-gnM2Ga0cGAA1JgAAAQQ"]
[Wed Apr 15 20:29:34.086722 2026] [:error] [pid 30957:tid 31008] [client 34.136.166.243:63607] [client 34.136.166.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "ad-Ern5gwVEVXHfVSiqDmAAAAFM"]
[Wed Apr 15 20:29:34.482922 2026] [:error] [pid 37370:tid 37391] [client 34.136.166.243:58564] [client 34.136.166.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "ad-Erng-gnM2Ga0cGAA1KwAAARM"]
[Wed Apr 15 20:29:34.934453 2026] [:error] [pid 37370:tid 37377] [client 34.136.166.243:58063] [client 34.136.166.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "ad-Erng-gnM2Ga0cGAA1LwAAAQU"]
[Wed Apr 15 20:29:35.333006 2026] [:error] [pid 30956:tid 30979] [client 34.136.166.243:57374] [client 34.136.166.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "ad-Er0BGUpjaWntNYq1xBQAAABM"]
[Wed Apr 15 20:29:35.744622 2026] [:error] [pid 30957:tid 31013] [client 34.136.166.243:58002] [client 34.136.166.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "ad-Er35gwVEVXHfVSiqDoAAAAFg"]
[Wed Apr 15 20:29:36.139057 2026] [:error] [pid 31053:tid 31071] [client 34.136.166.243:53897] [client 34.136.166.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "ad-EsBcEkLCmvF0fjDfOfQAAAI8"]
[Thu Apr 16 02:43:11.479326 2026] [:error] [pid 792:tid 876] [client 91.200.101.138:57738] [client 91.200.101.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/graphql"] [unique_id "ad_cP93PZ8z30TezIkZobwAAAMc"]
[Thu Apr 16 05:43:02.587550 2026] [proxy_fcgi:error] [pid 57639:tid 57650] [client 45.86.202.59:50375] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 05:43:02.993979 2026] [proxy_fcgi:error] [pid 57639:tid 57653] [client 45.86.202.59:50375] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 05:43:03.308496 2026] [proxy_fcgi:error] [pid 57639:tid 57648] [client 45.86.202.59:50375] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 05:43:03.623162 2026] [proxy_fcgi:error] [pid 57639:tid 57661] [client 45.86.202.59:50375] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 05:43:04.122796 2026] [proxy_fcgi:error] [pid 57639:tid 57665] [client 45.86.202.59:50375] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 05:43:04.460514 2026] [proxy_fcgi:error] [pid 57639:tid 57659] [client 45.86.202.59:50375] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 05:43:04.800678 2026] [proxy_fcgi:error] [pid 57639:tid 57649] [client 45.86.202.59:50375] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 05:43:05.138997 2026] [proxy_fcgi:error] [pid 57639:tid 57662] [client 45.86.202.59:50375] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 05:43:05.819687 2026] [proxy_fcgi:error] [pid 57639:tid 57660] [client 45.86.202.59:50375] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 05:43:06.233087 2026] [proxy_fcgi:error] [pid 57639:tid 57670] [client 45.86.202.59:50375] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 05:43:06.611548 2026] [proxy_fcgi:error] [pid 57639:tid 57653] [client 45.86.202.59:50375] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 05:43:06.959355 2026] [proxy_fcgi:error] [pid 57639:tid 57669] [client 45.86.202.59:50375] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 05:43:07.275904 2026] [proxy_fcgi:error] [pid 57639:tid 57657] [client 45.86.202.59:50375] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 05:43:07.688308 2026] [proxy_fcgi:error] [pid 57639:tid 57661] [client 45.86.202.59:50375] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 05:43:07.989274 2026] [proxy_fcgi:error] [pid 57639:tid 57666] [client 45.86.202.59:50375] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 05:43:08.593095 2026] [proxy_fcgi:error] [pid 57639:tid 57667] [client 45.86.202.59:50375] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 05:43:08.931579 2026] [proxy_fcgi:error] [pid 57639:tid 57649] [client 45.86.202.59:50375] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 05:43:09.251727 2026] [proxy_fcgi:error] [pid 57639:tid 57646] [client 45.86.202.59:50375] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 05:43:14.789078 2026] [:error] [pid 57639:tid 57652] [client 45.86.202.59:50375] [client 45.86.202.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aeAGcqMCQoTw7TsxWum_dQAAAMY"]
[Thu Apr 16 05:43:17.059949 2026] [:error] [pid 49094:tid 49098] [client 45.86.202.87:24745] [client 45.86.202.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aeAGdTbDwvcXorHR_Mx3UwAAAUI"]
[Thu Apr 16 05:43:18.689596 2026] [proxy_fcgi:error] [pid 29603:tid 29607] [client 45.86.202.70:43379] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 05:43:19.907864 2026] [:error] [pid 29603:tid 29626] [client 45.86.202.70:43379] [client 45.86.202.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dwelectservices.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aeAGd1fGOR6fpTWUAzqz0gAAARU"]
[Thu Apr 16 05:43:21.102797 2026] [proxy_fcgi:error] [pid 57639:tid 57669] [client 45.86.202.87:28359] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 05:43:21.549780 2026] [:error] [pid 57639:tid 57657] [client 45.86.202.87:28359] [client 45.86.202.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aeAGeaMCQoTw7TsxWum_fQAAAMs"]
[Thu Apr 16 05:43:22.851803 2026] [proxy_fcgi:error] [pid 29603:tid 29613] [client 45.86.202.61:28281] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 05:43:25.834529 2026] [:error] [pid 29603:tid 29615] [client 45.86.202.61:28281] [client 45.86.202.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aeAGfVfGOR6fpTWUAzqz7gAAAQo"]
[Thu Apr 16 05:43:26.985430 2026] [:error] [pid 57538:tid 57625] [client 45.86.202.69:62543] [client 45.86.202.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aeAGfsuMaiEF5SVR2BcpwwAAAJc"]
[Thu Apr 16 05:43:27.840417 2026] [:error] [pid 29603:tid 29622] [client 45.86.202.92:33109] [client 45.86.202.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aeAGf1fGOR6fpTWUAzqz-gAAARE"]
[Thu Apr 16 05:43:28.549728 2026] [:error] [pid 29603:tid 29626] [client 45.86.202.93:59505] [client 45.86.202.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aeAGgFfGOR6fpTWUAzq0AwAAARU"]
[Thu Apr 16 05:43:29.149170 2026] [:error] [pid 57536:tid 57570] [client 45.86.202.82:36941] [client 45.86.202.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aeAGgSQU4faGja6jpDt6bgAAABY"]
[Thu Apr 16 05:43:29.781524 2026] [:error] [pid 57538:tid 57624] [client 45.86.202.85:59557] [client 45.86.202.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aeAGgcuMaiEF5SVR2BcpyAAAAJY"]
[Thu Apr 16 05:43:30.855655 2026] [:error] [pid 57536:tid 57549] [client 45.86.202.56:64119] [client 45.86.202.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aeAGgiQU4faGja6jpDt6cgAAAAE"]
[Thu Apr 16 05:43:31.613981 2026] [proxy_fcgi:error] [pid 57536:tid 57554] [client 45.86.202.98:56761] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 05:43:32.354549 2026] [:error] [pid 57536:tid 57564] [client 45.86.202.98:56761] [client 45.86.202.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dwelectservices.com.au"] [uri "/filemanager.php"] [unique_id "aeAGhCQU4faGja6jpDt6dwAAABA"]
[Thu Apr 16 05:43:33.824657 2026] [:error] [pid 57538:tid 57617] [client 45.86.202.63:38143] [client 45.86.202.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aeAGhcuMaiEF5SVR2Bcp2AAAAI8"]
[Thu Apr 16 05:43:35.840765 2026] [:error] [pid 57537:tid 57577] [client 45.86.202.54:56013] [client 45.86.202.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aeAGh1VQRS8nm73ENAkrhwAAAEI"]
[Thu Apr 16 05:43:36.480460 2026] [proxy_fcgi:error] [pid 49094:tid 49120] [client 45.86.202.82:57243] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 05:43:36.770887 2026] [:error] [pid 49094:tid 49103] [client 45.86.202.82:57243] [client 45.86.202.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aeAGiDbDwvcXorHR_Mx3dQAAAUc"]
[Thu Apr 16 05:43:37.467714 2026] [proxy_fcgi:error] [pid 57537:tid 57581] [client 45.86.202.53:36583] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 05:43:38.845033 2026] [proxy_fcgi:error] [pid 57537:tid 57599] [client 45.86.202.53:36583] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 05:43:39.843564 2026] [:error] [pid 57537:tid 57583] [client 45.86.202.53:36583] [client 45.86.202.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aeAGi1VQRS8nm73ENAkrpQAAAEg"]
[Thu Apr 16 05:43:40.512363 2026] [proxy_fcgi:error] [pid 29603:tid 29614] [client 45.86.202.65:34261] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 05:43:40.866710 2026] [:error] [pid 29603:tid 29623] [client 45.86.202.65:34261] [client 45.86.202.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aeAGjFfGOR6fpTWUAzq0TgAAARI"]
[Thu Apr 16 05:43:41.503486 2026] [proxy_fcgi:error] [pid 29603:tid 29627] [client 45.86.202.81:50611] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 05:43:42.086506 2026] [:error] [pid 29603:tid 29612] [client 45.86.202.81:50611] [client 45.86.202.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "aeAGjlfGOR6fpTWUAzq0VgAAAQc"]
[Thu Apr 16 05:43:43.079050 2026] [:error] [pid 49094:tid 49098] [client 45.86.202.51:54979] [client 45.86.202.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aeAGjzbDwvcXorHR_Mx3iQAAAUI"]
[Thu Apr 16 05:43:44.204290 2026] [proxy_fcgi:error] [pid 49094:tid 49106] [client 45.86.202.56:48867] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 05:43:44.537633 2026] [proxy_fcgi:error] [pid 49094:tid 49109] [client 45.86.202.56:48867] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 05:43:45.386955 2026] [:error] [pid 49094:tid 49115] [client 45.86.202.56:48867] [client 45.86.202.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aeAGkTbDwvcXorHR_Mx3lQAAAVM"]
[Thu Apr 16 05:43:46.545877 2026] [:error] [pid 57639:tid 57656] [client 45.86.202.81:37435] [client 45.86.202.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aeAGkqMCQoTw7TsxWum_rgAAAMo"]
[Thu Apr 16 05:43:47.385566 2026] [:error] [pid 29603:tid 29611] [client 45.86.202.96:28421] [client 45.86.202.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aeAGk1fGOR6fpTWUAzq0aAAAAQY"]
[Thu Apr 16 05:43:47.975678 2026] [:error] [pid 57537:tid 57593] [client 45.86.202.69:55189] [client 45.86.202.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aeAGk1VQRS8nm73ENAkrqgAAAFI"]
[Thu Apr 16 05:43:48.596847 2026] [:error] [pid 29603:tid 29623] [client 45.86.202.85:27259] [client 45.86.202.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aeAGlFfGOR6fpTWUAzq0cQAAARI"]
[Thu Apr 16 05:43:49.986678 2026] [proxy_fcgi:error] [pid 29603:tid 29613] [client 45.86.202.76:25575] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 05:43:50.335270 2026] [:error] [pid 29603:tid 29606] [client 45.86.202.76:25575] [client 45.86.202.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "aeAGllfGOR6fpTWUAzq0fwAAAQE"]
[Thu Apr 16 05:43:50.964564 2026] [:error] [pid 49094:tid 49115] [client 45.86.202.221:58989] [client 45.86.202.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "aeAGljbDwvcXorHR_Mx3sAAAAVM"]
[Thu Apr 16 05:43:51.521804 2026] [:error] [pid 57538:tid 57621] [client 45.86.202.63:24841] [client 45.86.202.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aeAGl8uMaiEF5SVR2BcqCAAAAJM"]
[Thu Apr 16 05:43:52.712583 2026] [proxy_fcgi:error] [pid 57538:tid 57610] [client 45.86.202.81:58279] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 05:43:53.302904 2026] [proxy_fcgi:error] [pid 57538:tid 57602] [client 45.86.202.81:58279] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 05:43:54.548911 2026] [:error] [pid 57538:tid 57606] [client 45.86.202.81:58279] [client 45.86.202.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/admin.php"] [unique_id "aeAGmsuMaiEF5SVR2BcqJQAAAIQ"]
[Thu Apr 16 05:43:56.296482 2026] [:error] [pid 49094:tid 49101] [client 45.86.202.84:42311] [client 45.86.202.84] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.202.84, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aeAGnDbDwvcXorHR_Mx3wAAAAUU"]
[Thu Apr 16 05:43:56.717683 2026] [proxy_fcgi:error] [pid 49094:tid 49098] [client 45.86.202.84:42311] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 05:43:58.222357 2026] [proxy_fcgi:error] [pid 49094:tid 49107] [client 45.86.202.84:42311] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 05:43:58.519493 2026] [proxy_fcgi:error] [pid 49094:tid 49101] [client 45.86.202.84:42311] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 05:44:00.086701 2026] [:error] [pid 49094:tid 49096] [client 45.86.202.84:42311] [client 45.86.202.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aeAGoDbDwvcXorHR_Mx34AAAAUA"]
[Thu Apr 16 05:44:00.849455 2026] [proxy_fcgi:error] [pid 57537:tid 57589] [client 45.86.202.79:31765] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 05:44:01.196397 2026] [proxy_fcgi:error] [pid 57537:tid 57579] [client 45.86.202.79:31765] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 05:44:01.536000 2026] [:error] [pid 57537:tid 57587] [client 45.86.202.79:31765] [client 45.86.202.79] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.202.79, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aeAGoVVQRS8nm73ENAkrsgAAAEw"]
[Thu Apr 16 05:44:02.276306 2026] [:error] [pid 57537:tid 57583] [client 45.86.202.79:31765] [client 45.86.202.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/item.php"] [unique_id "aeAGolVQRS8nm73ENAkrtQAAAEg"]
[Thu Apr 16 05:44:03.945439 2026] [proxy_fcgi:error] [pid 57536:tid 57562] [client 45.86.202.93:41753] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 05:44:04.272026 2026] [proxy_fcgi:error] [pid 57536:tid 57571] [client 45.86.202.93:41753] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 05:44:04.922836 2026] [proxy_fcgi:error] [pid 57536:tid 57560] [client 45.86.202.93:41753] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 05:44:05.517579 2026] [:error] [pid 57536:tid 57567] [client 45.86.202.93:41753] [client 45.86.202.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aeAGpSQU4faGja6jpDt6lQAAABM"]
[Thu Apr 16 05:44:06.179550 2026] [proxy_fcgi:error] [pid 57537:tid 57590] [client 45.86.202.77:21419] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 05:44:07.171200 2026] [proxy_fcgi:error] [pid 57537:tid 57592] [client 45.86.202.77:21419] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 05:44:07.757366 2026] [proxy_fcgi:error] [pid 57537:tid 57584] [client 45.86.202.77:21419] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 05:44:08.362174 2026] [proxy_fcgi:error] [pid 57537:tid 57594] [client 45.86.202.77:21419] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 05:44:08.721981 2026] [:error] [pid 57537:tid 57578] [client 45.86.202.77:21419] [client 45.86.202.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aeAGqFVQRS8nm73ENAkrvwAAAEM"]
[Thu Apr 16 05:44:09.353934 2026] [proxy_fcgi:error] [pid 29603:tid 29625] [client 45.86.202.59:52141] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 05:44:09.652292 2026] [proxy_fcgi:error] [pid 29603:tid 29626] [client 45.86.202.59:52141] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 05:44:09.963144 2026] [:error] [pid 29603:tid 29607] [client 45.86.202.59:52141] [client 45.86.202.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aeAGqVfGOR6fpTWUAzq0pQAAAQI"]
[Thu Apr 16 05:44:10.907135 2026] [proxy_fcgi:error] [pid 57537:tid 57599] [client 45.86.202.63:50185] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 05:44:11.523669 2026] [:error] [pid 57537:tid 57579] [client 45.86.202.63:50185] [client 45.86.202.63] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.202.63, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "aeAGq1VQRS8nm73ENAkrwwAAAEQ"]
[Thu Apr 16 05:44:11.809927 2026] [:error] [pid 57537:tid 57587] [client 45.86.202.63:50185] [client 45.86.202.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aeAGq1VQRS8nm73ENAkrxQAAAEw"]
[Thu Apr 16 05:44:15.482795 2026] [proxy_fcgi:error] [pid 29603:tid 29616] [client 45.86.202.88:43933] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 05:44:17.436278 2026] [proxy_fcgi:error] [pid 29603:tid 29628] [client 45.86.202.88:43933] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 05:44:17.735137 2026] [:error] [pid 29603:tid 29608] [client 45.86.202.88:43933] [client 45.86.202.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aeAGsVfGOR6fpTWUAzq0zwAAAQM"]
[Thu Apr 16 05:44:18.389408 2026] [proxy_fcgi:error] [pid 49094:tid 49105] [client 45.86.202.61:27977] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 05:44:19.363558 2026] [:error] [pid 49094:tid 49114] [client 45.86.202.61:27977] [client 45.86.202.61] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.202.61, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aeAGszbDwvcXorHR_Mx4CQAAAVI"]
[Thu Apr 16 05:44:19.672118 2026] [proxy_fcgi:error] [pid 49094:tid 49096] [client 45.86.202.61:27977] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 05:44:19.960159 2026] [proxy_fcgi:error] [pid 49094:tid 49103] [client 45.86.202.61:27977] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 05:44:20.276925 2026] [proxy_fcgi:error] [pid 49094:tid 49116] [client 45.86.202.61:27977] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 05:44:20.582371 2026] [:error] [pid 49094:tid 49120] [client 45.86.202.61:27977] [client 45.86.202.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aeAGtDbDwvcXorHR_Mx4FQAAAVg"]
[Thu Apr 16 05:44:21.155762 2026] [proxy_fcgi:error] [pid 49094:tid 49096] [client 45.86.202.54:55985] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 05:44:21.456117 2026] [:error] [pid 49094:tid 49111] [client 45.86.202.54:55985] [client 45.86.202.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/infi.php"] [unique_id "aeAGtTbDwvcXorHR_Mx4IAAAAU8"]
[Thu Apr 16 05:44:22.355877 2026] [proxy_fcgi:error] [pid 29603:tid 29618] [client 45.86.202.67:64679] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 05:44:22.659842 2026] [:error] [pid 29603:tid 29612] [client 45.86.202.67:64679] [client 45.86.202.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aeAGtlfGOR6fpTWUAzq05QAAAQc"]
[Thu Apr 16 05:44:23.412530 2026] [proxy_fcgi:error] [pid 57536:tid 57569] [client 45.86.202.57:42673] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 05:44:24.134495 2026] [proxy_fcgi:error] [pid 57536:tid 57557] [client 45.86.202.57:42673] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 05:44:24.462111 2026] [:error] [pid 57536:tid 57553] [client 45.86.202.57:42673] [client 45.86.202.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "aeAGuCQU4faGja6jpDt6pAAAAAU"]
[Thu Apr 16 05:44:25.024670 2026] [:error] [pid 49094:tid 49105] [client 45.86.202.57:41615] [client 45.86.202.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "aeAGuTbDwvcXorHR_Mx4RgAAAUk"]
[Thu Apr 16 05:44:25.628252 2026] [proxy_fcgi:error] [pid 57538:tid 57618] [client 45.86.202.89:21091] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 05:44:25.947307 2026] [proxy_fcgi:error] [pid 57538:tid 57619] [client 45.86.202.89:21091] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 05:44:27.208392 2026] [:error] [pid 57538:tid 57611] [client 45.86.202.89:21091] [client 45.86.202.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aeAGu8uMaiEF5SVR2BcqcgAAAIk"]
[Thu Apr 16 05:44:28.095072 2026] [:error] [pid 49094:tid 49118] [client 45.86.202.99:20115] [client 45.86.202.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "aeAGvDbDwvcXorHR_Mx4TwAAAVY"]
[Thu Apr 16 05:44:29.772309 2026] [:error] [pid 49094:tid 49118] [client 45.86.202.93:31629] [client 45.86.202.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/edit.php"] [unique_id "aeAGvTbDwvcXorHR_Mx4WQAAAVY"]
[Thu Apr 16 05:44:30.523286 2026] [proxy_fcgi:error] [pid 29603:tid 29607] [client 45.86.202.53:29651] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 05:44:31.496063 2026] [proxy_fcgi:error] [pid 29603:tid 29615] [client 45.86.202.53:29651] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 05:44:31.861603 2026] [:error] [pid 29603:tid 29626] [client 45.86.202.53:29651] [client 45.86.202.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "aeAGv1fGOR6fpTWUAzq1DgAAARU"]
[Thu Apr 16 05:44:32.632402 2026] [proxy_fcgi:error] [pid 49094:tid 49103] [client 45.86.202.56:29387] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 05:44:33.382303 2026] [:error] [pid 49094:tid 49097] [client 45.86.202.56:29387] [client 45.86.202.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/click.php"] [unique_id "aeAGwTbDwvcXorHR_Mx4YgAAAUE"]
[Thu Apr 16 05:44:35.034410 2026] [:error] [pid 49094:tid 49098] [client 45.86.202.63:64275] [client 45.86.202.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "aeAGwzbDwvcXorHR_Mx4aAAAAUI"]
[Thu Apr 16 05:44:35.986481 2026] [proxy_fcgi:error] [pid 29603:tid 29608] [client 45.86.202.77:57113] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 05:44:36.965564 2026] [proxy_fcgi:error] [pid 29603:tid 29614] [client 45.86.202.77:57113] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 05:44:37.616005 2026] [proxy_fcgi:error] [pid 29603:tid 29612] [client 45.86.202.77:57113] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 05:44:37.920754 2026] [:error] [pid 29603:tid 29624] [client 45.86.202.77:57113] [client 45.86.202.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "aeAGxVfGOR6fpTWUAzq1KwAAARM"]
[Thu Apr 16 05:44:38.561506 2026] [:error] [pid 57538:tid 57615] [client 45.86.202.78:31979] [client 45.86.202.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/xl2023.php"] [unique_id "aeAGxsuMaiEF5SVR2BcqiAAAAI0"]
[Thu Apr 16 05:44:39.160004 2026] [:error] [pid 57537:tid 57577] [client 45.86.202.53:51775] [client 45.86.202.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/certificates/admin.php"] [unique_id "aeAGx1VQRS8nm73ENAkr9QAAAEI"]
[Thu Apr 16 05:44:39.803076 2026] [:error] [pid 49094:tid 49112] [client 45.86.202.94:52071] [client 45.86.202.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/media/dog.php"] [unique_id "aeAGxzbDwvcXorHR_Mx4cgAAAVA"]
[Thu Apr 16 05:44:40.413049 2026] [proxy_fcgi:error] [pid 29603:tid 29621] [client 45.86.202.83:51933] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 05:44:40.829619 2026] [:error] [pid 29603:tid 29608] [client 45.86.202.83:51933] [client 45.86.202.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "aeAGyFfGOR6fpTWUAzq1MwAAAQM"]
[Thu Apr 16 05:44:41.423382 2026] [:error] [pid 29603:tid 29624] [client 45.86.202.71:52301] [client 45.86.202.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aeAGyVfGOR6fpTWUAzq1OwAAARM"]
[Thu Apr 16 05:44:42.020864 2026] [proxy_fcgi:error] [pid 49094:tid 49115] [client 45.86.202.81:40211] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 05:44:42.651847 2026] [:error] [pid 49094:tid 49111] [client 45.86.202.81:40211] [client 45.86.202.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aeAGyjbDwvcXorHR_Mx4fAAAAU8"]
[Thu Apr 16 05:44:43.238587 2026] [:error] [pid 49094:tid 49112] [client 45.86.202.60:62803] [client 45.86.202.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aeAGyzbDwvcXorHR_Mx4gwAAAVA"]
[Thu Apr 16 05:44:43.878189 2026] [:error] [pid 57639:tid 57661] [client 45.86.202.75:46771] [client 45.86.202.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/pomo/admin.php"] [unique_id "aeAGy6MCQoTw7TsxWum_5QAAAM8"]
[Thu Apr 16 05:44:44.519412 2026] [:error] [pid 57538:tid 57623] [client 45.86.202.69:60783] [client 45.86.202.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/IXR/security.php"] [unique_id "aeAGzMuMaiEF5SVR2BcqlQAAAJU"]
[Thu Apr 16 05:44:45.447883 2026] [:error] [pid 57538:tid 57608] [client 45.86.202.60:48121] [client 45.86.202.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aeAGzcuMaiEF5SVR2BcqmwAAAIY"]
[Thu Apr 16 05:44:46.772194 2026] [:error] [pid 57639:tid 57658] [client 45.86.202.53:23455] [client 45.86.202.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/fonts/about.php"] [unique_id "aeAGzqMCQoTw7TsxWum_8wAAAMw"]
[Thu Apr 16 05:44:47.378695 2026] [proxy_fcgi:error] [pid 49094:tid 49112] [client 45.86.202.62:29345] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 05:44:48.370564 2026] [proxy_fcgi:error] [pid 49094:tid 49109] [client 45.86.202.62:29345] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 05:44:48.678615 2026] [:error] [pid 49094:tid 49098] [client 45.86.202.62:29345] [client 45.86.202.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "aeAG0DbDwvcXorHR_Mx4ngAAAUI"]
[Thu Apr 16 05:44:49.614910 2026] [proxy_fcgi:error] [pid 29603:tid 29605] [client 45.86.202.77:61785] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 05:44:49.897758 2026] [proxy_fcgi:error] [pid 29603:tid 29628] [client 45.86.202.77:61785] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 05:44:51.620895 2026] [:error] [pid 29603:tid 29624] [client 45.86.202.77:61785] [client 45.86.202.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/file.php"] [unique_id "aeAG01fGOR6fpTWUAzq1SgAAARM"]
[Thu Apr 16 05:44:53.165672 2026] [:error] [pid 57639:tid 57660] [client 45.86.202.98:46193] [client 45.86.202.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "aeAG1aMCQoTw7TsxWunADQAAAM4"]
[Thu Apr 16 05:44:55.511152 2026] [:error] [pid 57536:tid 57551] [client 45.86.202.76:29445] [client 45.86.202.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "aeAG1yQU4faGja6jpDt6uQAAAAM"]
[Thu Apr 16 05:44:57.515777 2026] [:error] [pid 57537:tid 57580] [client 45.86.202.91:23693] [client 45.86.202.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aeAG2VVQRS8nm73ENAksEAAAAEU"]
[Thu Apr 16 05:44:59.106008 2026] [proxy_fcgi:error] [pid 57538:tid 57623] [client 45.86.202.221:59259] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 05:44:59.486627 2026] [proxy_fcgi:error] [pid 57538:tid 57616] [client 45.86.202.221:59259] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 05:44:59.875509 2026] [proxy_fcgi:error] [pid 57538:tid 57605] [client 45.86.202.221:59259] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 05:45:00.283142 2026] [proxy_fcgi:error] [pid 57538:tid 57613] [client 45.86.202.221:59259] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 05:45:03.466720 2026] [:error] [pid 57538:tid 57618] [client 45.86.202.221:59259] [client 45.86.202.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aeAG38uMaiEF5SVR2BcqzQAAAJA"]
[Thu Apr 16 05:45:04.215971 2026] [:error] [pid 49094:tid 49111] [client 45.86.202.221:26813] [client 45.86.202.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "aeAG4DbDwvcXorHR_Mx42QAAAU8"]
[Thu Apr 16 05:45:04.910342 2026] [:error] [pid 49094:tid 49120] [client 45.86.202.88:61727] [client 45.86.202.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "aeAG4DbDwvcXorHR_Mx46AAAAVg"]
[Thu Apr 16 05:45:06.614841 2026] [:error] [pid 57538:tid 57606] [client 45.86.202.52:20257] [client 45.86.202.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "aeAG4suMaiEF5SVR2Bcq1gAAAIQ"]
[Thu Apr 16 05:45:07.301074 2026] [:error] [pid 49094:tid 49114] [client 45.86.202.74:44833] [client 45.86.202.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aeAG4zbDwvcXorHR_Mx4-gAAAVI"]
[Thu Apr 16 05:45:07.970409 2026] [:error] [pid 49094:tid 49117] [client 45.86.202.82:45621] [client 45.86.202.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aeAG4zbDwvcXorHR_Mx5AAAAAVU"]
[Thu Apr 16 05:45:09.017628 2026] [:error] [pid 29603:tid 29607] [client 45.86.202.96:36459] [client 45.86.202.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/media/index.php"] [unique_id "aeAG5VfGOR6fpTWUAzq1VAAAAQI"]
[Thu Apr 16 05:45:09.789746 2026] [:error] [pid 57536:tid 57571] [client 45.86.202.72:39677] [client 45.86.202.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "aeAG5SQU4faGja6jpDt6xQAAABc"]
[Thu Apr 16 05:45:10.559923 2026] [:error] [pid 29603:tid 29623] [client 45.86.202.76:38553] [client 45.86.202.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "aeAG5lfGOR6fpTWUAzq1VQAAARI"]
[Thu Apr 16 05:45:11.216967 2026] [:error] [pid 57538:tid 57608] [client 45.86.202.70:64833] [client 45.86.202.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "aeAG58uMaiEF5SVR2Bcq4AAAAIY"]
[Thu Apr 16 05:45:12.514076 2026] [:error] [pid 57538:tid 57618] [client 45.86.202.78:21229] [client 45.86.202.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/fonts/themes.php"] [unique_id "aeAG6MuMaiEF5SVR2Bcq6gAAAJA"]
[Thu Apr 16 05:45:14.655900 2026] [:error] [pid 29603:tid 29618] [client 45.86.202.79:22901] [client 45.86.202.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/certificates/index.php"] [unique_id "aeAG6lfGOR6fpTWUAzq1XQAAAQ0"]
[Thu Apr 16 05:45:15.296908 2026] [proxy_fcgi:error] [pid 57536:tid 57565] [client 45.86.202.221:23137] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 05:45:16.001501 2026] [:error] [pid 57536:tid 57559] [client 45.86.202.221:23137] [client 45.86.202.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "aeAG7CQU4faGja6jpDt6ygAAAAs"]
[Thu Apr 16 05:45:17.418279 2026] [:error] [pid 49094:tid 49100] [client 45.86.202.72:58889] [client 45.86.202.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "aeAG7TbDwvcXorHR_Mx5MAAAAUQ"]
[Thu Apr 16 05:45:18.807815 2026] [proxy_fcgi:error] [pid 49094:tid 49114] [client 45.86.202.100:63221] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 05:45:19.212654 2026] [:error] [pid 49094:tid 49109] [client 45.86.202.100:63221] [client 45.86.202.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aeAG7zbDwvcXorHR_Mx5PAAAAU0"]
[Thu Apr 16 05:45:20.299341 2026] [proxy_fcgi:error] [pid 57537:tid 57595] [client 45.86.202.56:29651] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 05:45:20.643590 2026] [proxy_fcgi:error] [pid 57537:tid 57591] [client 45.86.202.56:29651] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 05:45:20.979334 2026] [proxy_fcgi:error] [pid 57537:tid 57597] [client 45.86.202.56:29651] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 05:45:21.328058 2026] [:error] [pid 57537:tid 57576] [client 45.86.202.56:29651] [client 45.86.202.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "aeAG8VVQRS8nm73ENAksLAAAAEE"]
[Thu Apr 16 05:45:22.111575 2026] [proxy_fcgi:error] [pid 49094:tid 49102] [client 45.86.202.96:63111] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 05:45:22.483919 2026] [:error] [pid 49094:tid 49115] [client 45.86.202.96:63111] [client 45.86.202.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "aeAG8jbDwvcXorHR_Mx5RAAAAVM"]
[Thu Apr 16 05:45:23.838324 2026] [proxy_fcgi:error] [pid 49094:tid 49105] [client 45.86.202.55:62357] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 05:45:24.172176 2026] [proxy_fcgi:error] [pid 49094:tid 49108] [client 45.86.202.55:62357] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 05:45:24.588524 2026] [proxy_fcgi:error] [pid 49094:tid 49116] [client 45.86.202.55:62357] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 05:45:26.433976 2026] [proxy_fcgi:error] [pid 49094:tid 49100] [client 45.86.202.55:62357] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 05:45:26.841788 2026] [proxy_fcgi:error] [pid 49094:tid 49115] [client 45.86.202.55:62357] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 05:45:27.603788 2026] [proxy_fcgi:error] [pid 49094:tid 49108] [client 45.86.202.55:62357] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 05:45:29.914118 2026] [proxy_fcgi:error] [pid 49094:tid 49105] [client 45.86.202.55:62357] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 05:45:30.250417 2026] [:error] [pid 49094:tid 49101] [client 45.86.202.55:62357] [client 45.86.202.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "aeAG-jbDwvcXorHR_Mx5fAAAAUU"]
[Thu Apr 16 05:45:32.140113 2026] [:error] [pid 57538:tid 57622] [client 45.86.202.68:25777] [client 45.86.202.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aeAG_MuMaiEF5SVR2BcrCgAAAJQ"]
[Thu Apr 16 05:45:32.914067 2026] [proxy_fcgi:error] [pid 49094:tid 49098] [client 45.86.202.92:49985] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 05:45:34.434576 2026] [:error] [pid 49094:tid 49115] [client 45.86.202.92:49985] [client 45.86.202.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "aeAG_jbDwvcXorHR_Mx5jAAAAVM"]
[Thu Apr 16 05:45:35.588517 2026] [proxy_fcgi:error] [pid 57536:tid 57571] [client 45.86.202.56:21441] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 05:45:35.922584 2026] [:error] [pid 57536:tid 57558] [client 45.86.202.56:21441] [client 45.86.202.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aeAG_yQU4faGja6jpDt62AAAAAo"]
[Thu Apr 16 05:45:37.762128 2026] [:error] [pid 57538:tid 57621] [client 45.86.202.92:36071] [client 45.86.202.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aeAHAcuMaiEF5SVR2BcrHwAAAJM"]
[Thu Apr 16 05:45:40.026104 2026] [:error] [pid 57639:tid 57669] [client 45.86.202.70:42897] [client 45.86.202.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aeAHBKMCQoTw7TsxWunAfwAAANc"]
[Thu Apr 16 05:45:40.738380 2026] [:error] [pid 29603:tid 29608] [client 45.86.202.80:48649] [client 45.86.202.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dwelectservices.com.au"] [uri "/fm.php"] [unique_id "aeAHBFfGOR6fpTWUAzq1pQAAAQM"]
[Thu Apr 16 05:45:42.550299 2026] [proxy_fcgi:error] [pid 29603:tid 29606] [client 45.86.202.96:62043] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 05:45:43.298506 2026] [:error] [pid 29603:tid 29620] [client 45.86.202.96:62043] [client 45.86.202.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "aeAHB1fGOR6fpTWUAzq1ugAAAQ8"]
[Thu Apr 16 05:45:44.508110 2026] [proxy_fcgi:error] [pid 57536:tid 57565] [client 45.86.202.92:27413] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 05:45:45.208329 2026] [:error] [pid 57536:tid 57554] [client 45.86.202.92:27413] [client 45.86.202.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/function.php"] [unique_id "aeAHCSQU4faGja6jpDt68wAAAAY"]
[Thu Apr 16 05:45:46.036612 2026] [:error] [pid 49094:tid 49105] [client 45.86.202.81:37535] [client 45.86.202.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/plugins.php"] [unique_id "aeAHCjbDwvcXorHR_Mx5qgAAAUk"]
[Thu Apr 16 05:45:47.190140 2026] [proxy_fcgi:error] [pid 49094:tid 49103] [client 45.86.202.68:22959] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 05:45:47.670053 2026] [:error] [pid 49094:tid 49098] [client 45.86.202.68:22959] [client 45.86.202.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/chosen.php"] [unique_id "aeAHCzbDwvcXorHR_Mx5tgAAAUI"]
[Thu Apr 16 05:45:48.632752 2026] [:error] [pid 57537:tid 57578] [client 45.86.202.72:62467] [client 45.86.202.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "aeAHDFVQRS8nm73ENAksQQAAAEM"]
[Thu Apr 16 05:45:49.959911 2026] [proxy_fcgi:error] [pid 57536:tid 57549] [client 45.86.202.81:39025] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 05:45:50.334122 2026] [proxy_fcgi:error] [pid 57536:tid 57572] [client 45.86.202.81:39025] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 05:45:51.061029 2026] [proxy_fcgi:error] [pid 57536:tid 57548] [client 45.86.202.81:39025] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 05:45:51.921196 2026] [:error] [pid 57536:tid 57568] [client 45.86.202.81:39025] [client 45.86.202.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/atomlib.php"] [unique_id "aeAHDyQU4faGja6jpDt7DgAAABQ"]
[Thu Apr 16 05:45:52.693454 2026] [:error] [pid 57536:tid 57570] [client 45.86.202.71:23011] [client 45.86.202.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/rest-api/index.php"] [unique_id "aeAHECQU4faGja6jpDt7FAAAABY"]
[Thu Apr 16 05:45:54.516162 2026] [proxy_fcgi:error] [pid 29603:tid 29608] [client 45.86.202.220:36973] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 05:45:54.855658 2026] [:error] [pid 29603:tid 29617] [client 45.86.202.220:36973] [client 45.86.202.220] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/index.php"] [unique_id "aeAHElfGOR6fpTWUAzq11QAAAQw"]
[Thu Apr 16 05:45:55.608767 2026] [:error] [pid 57538:tid 57613] [client 45.86.202.66:53095] [client 45.86.202.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aeAHE8uMaiEF5SVR2BcrPgAAAIs"]
[Thu Apr 16 05:45:56.366133 2026] [:error] [pid 57639:tid 57659] [client 45.86.202.55:49609] [client 45.86.202.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aeAHFKMCQoTw7TsxWunAjgAAAM0"]
[Thu Apr 16 05:45:58.999027 2026] [proxy_fcgi:error] [pid 29603:tid 29614] [client 45.86.202.66:21855] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 05:45:59.326799 2026] [:error] [pid 29603:tid 29605] [client 45.86.202.66:21855] [client 45.86.202.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/Exception-wp.php"] [unique_id "aeAHF1fGOR6fpTWUAzq16AAAAQA"]
[Thu Apr 16 05:46:00.338478 2026] [:error] [pid 57538:tid 57621] [client 45.86.202.60:27825] [client 45.86.202.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aeAHGMuMaiEF5SVR2BcrUAAAAJM"]
[Thu Apr 16 05:46:01.416933 2026] [proxy_fcgi:error] [pid 29603:tid 29623] [client 45.86.202.97:32617] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 05:46:01.841345 2026] [proxy_fcgi:error] [pid 29603:tid 29615] [client 45.86.202.97:32617] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 05:46:02.621124 2026] [proxy_fcgi:error] [pid 29603:tid 29620] [client 45.86.202.97:32617] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 05:46:05.330500 2026] [:error] [pid 29603:tid 29619] [client 45.86.202.97:32617] [client 45.86.202.97] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.202.97, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/js/wp-login.php"] [unique_id "aeAHHVfGOR6fpTWUAzq1_gAAAQ4"]
[Thu Apr 16 05:46:06.078626 2026] [:error] [pid 29603:tid 29615] [client 45.86.202.97:32617] File does not exist: /home/dwelects/public_html/worm.PhP
[Thu Apr 16 05:46:06.430740 2026] [proxy_fcgi:error] [pid 29603:tid 29608] [client 45.86.202.97:32617] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 05:46:06.925223 2026] [proxy_fcgi:error] [pid 29603:tid 29607] [client 45.86.202.97:32617] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 05:46:07.746060 2026] [:error] [pid 29603:tid 29624] [client 45.86.202.97:32617] [client 45.86.202.97] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.202.97, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "aeAHH1fGOR6fpTWUAzq2DAAAARM"]
[Thu Apr 16 05:46:08.851319 2026] [proxy_fcgi:error] [pid 29603:tid 29627] [client 45.86.202.97:32617] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 05:46:09.262419 2026] [proxy_fcgi:error] [pid 29603:tid 29618] [client 45.86.202.97:32617] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 05:46:10.064826 2026] [proxy_fcgi:error] [pid 29603:tid 29610] [client 45.86.202.97:32617] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 05:46:10.780336 2026] [proxy_fcgi:error] [pid 29603:tid 29611] [client 45.86.202.97:32617] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 05:46:11.890674 2026] [proxy_fcgi:error] [pid 29603:tid 29621] [client 45.86.202.97:32617] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 05:46:14.649808 2026] [proxy_fcgi:error] [pid 29603:tid 29605] [client 45.86.202.97:32617] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 05:46:16.195593 2026] [proxy_fcgi:error] [pid 29603:tid 29612] [client 45.86.202.97:32617] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 05:46:17.897447 2026] [proxy_fcgi:error] [pid 29603:tid 29613] [client 45.86.202.97:32617] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 05:46:18.625664 2026] [:error] [pid 29603:tid 29609] [client 45.86.202.97:32617] [client 45.86.202.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "aeAHKlfGOR6fpTWUAzq2NgAAAQQ"]
[Thu Apr 16 05:46:49.400622 2026] [autoindex:error] [pid 57639:tid 57649] [client 45.86.202.96:36591] AH01276: Cannot serve directory /home/dwelects/public_html/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 16 05:47:01.626165 2026] [autoindex:error] [pid 57639:tid 57650] [client 45.86.202.96:36591] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 16 09:48:58.815564 2026] [:error] [pid 57538:tid 57616] [client 98.93.160.221:50516] [client 98.93.160.221] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.git/config"] [unique_id "aeBACsuMaiEF5SVR2BdsTgAAAI4"]
[Thu Apr 16 12:26:55.928481 2026] [proxy_fcgi:error] [pid 7880:tid 7900] [client 172.213.241.216:61848] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 14:26:48.062028 2026] [:error] [pid 29603:tid 29624] [client 98.93.160.221:42156] [client 98.93.160.221] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dwelectservices.com.au"] [uri "/.git/config"] [unique_id "aeCBKFfGOR6fpTWUAzpAqQAAARM"]
[Thu Apr 16 18:04:56.909584 2026] [:error] [pid 49094:tid 49116] [client 157.230.208.145:61751] [client 157.230.208.145] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 157.230.208.145, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-login.php"] [unique_id "aeC0SDbDwvcXorHR_MxvlQAAAVQ"]
[Thu Apr 16 18:04:56.918884 2026] [proxy_fcgi:error] [pid 49094:tid 49116] [client 157.230.208.145:61751] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 18:42:14.446860 2026] [proxy_fcgi:error] [pid 7880:tid 7903] [client 4.211.248.24:24505] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 18:42:14.687182 2026] [proxy_fcgi:error] [pid 7880:tid 7905] [client 4.211.248.24:24505] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 18:42:14.985327 2026] [proxy_fcgi:error] [pid 7880:tid 7898] [client 4.211.248.24:24505] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 18:42:15.243688 2026] [proxy_fcgi:error] [pid 7880:tid 7886] [client 4.211.248.24:24505] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 18:42:15.557942 2026] [proxy_fcgi:error] [pid 7880:tid 7908] [client 4.211.248.24:24505] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 18:42:15.826896 2026] [proxy_fcgi:error] [pid 7880:tid 7894] [client 4.211.248.24:24505] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 18:42:16.067149 2026] [proxy_fcgi:error] [pid 7880:tid 7895] [client 4.211.248.24:24505] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 18:42:16.306148 2026] [proxy_fcgi:error] [pid 7880:tid 7897] [client 4.211.248.24:24505] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 18:42:16.607623 2026] [:error] [pid 7880:tid 7909] [client 4.211.248.24:24505] [client 4.211.248.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/theme-compat/wp-login.php"] [unique_id "aeC9CKaezm4fSGc0yUJ0PgAAAZg"]
[Thu Apr 16 18:42:17.688106 2026] [proxy_fcgi:error] [pid 7880:tid 7899] [client 4.211.248.24:24477] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 18:42:17.926745 2026] [proxy_fcgi:error] [pid 7880:tid 7908] [client 4.211.248.24:24477] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 18:42:18.171138 2026] [:error] [pid 7880:tid 7906] [client 4.211.248.24:24477] [client 4.211.248.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ng.php"] [unique_id "aeC9Cqaezm4fSGc0yUJ0RwAAAZU"]
[Thu Apr 16 18:42:23.633554 2026] [:error] [pid 57538:tid 57622] [client 4.211.248.24:45379] [client 4.211.248.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ng.php"] [unique_id "aeC9D8uMaiEF5SVR2Be8twAAAJQ"]
[Thu Apr 16 18:42:25.852101 2026] [:error] [pid 57537:tid 57579] [client 4.211.248.24:21485] [client 4.211.248.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ng.php"] [unique_id "aeC9EVVQRS8nm73ENAmcbQAAAEQ"]
[Thu Apr 16 18:42:28.246125 2026] [:error] [pid 49094:tid 49102] [client 4.211.248.24:25081] [client 4.211.248.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ng.php"] [unique_id "aeC9FDbDwvcXorHR_MyCgAAAAUY"]
[Thu Apr 16 18:42:55.256392 2026] [:error] [pid 7880:tid 7899] [client 4.211.248.24:23494] [client 4.211.248.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/state.php"] [unique_id "aeC9L6aezm4fSGc0yUJ0aAAAAY4"]
[Thu Apr 16 18:42:56.421044 2026] [:error] [pid 57536:tid 57562] [client 4.211.248.24:26687] [client 4.211.248.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/state.php"] [unique_id "aeC9MCQU4faGja6jpDs4kwAAAA4"]
[Thu Apr 16 18:43:06.073991 2026] [:error] [pid 49094:tid 49106] [client 4.211.248.24:25306] [client 4.211.248.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/state.php"] [unique_id "aeC9OjbDwvcXorHR_MyCtQAAAUo"]
[Thu Apr 16 18:43:07.568851 2026] [:error] [pid 29603:tid 29617] [client 4.211.248.24:34672] [client 4.211.248.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/state.php"] [unique_id "aeC9O1fGOR6fpTWUAzptDgAAAQw"]
[Thu Apr 16 18:43:09.138737 2026] [:error] [pid 57639:tid 57666] [client 4.211.248.24:27262] [client 4.211.248.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2.php"] [unique_id "aeC9PaMCQoTw7TsxWukr0AAAANQ"]
[Thu Apr 16 18:43:10.660769 2026] [:error] [pid 57639:tid 57653] [client 4.211.248.24:21647] [client 4.211.248.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2.php"] [unique_id "aeC9PqMCQoTw7TsxWukr1AAAAMc"]
[Thu Apr 16 18:43:11.802554 2026] [:error] [pid 57639:tid 57652] [client 4.211.248.24:39180] [client 4.211.248.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2.php"] [unique_id "aeC9P6MCQoTw7TsxWukr1wAAAMY"]
[Thu Apr 16 18:43:15.194787 2026] [:error] [pid 57639:tid 57657] [client 4.211.248.24:33567] [client 4.211.248.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2.php"] [unique_id "aeC9Q6MCQoTw7TsxWukr6AAAAMs"]
[Thu Apr 16 18:43:16.373425 2026] [:error] [pid 57536:tid 57554] [client 4.211.248.24:27230] [client 4.211.248.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wps.php"] [unique_id "aeC9RCQU4faGja6jpDs4rQAAAAY"]
[Thu Apr 16 18:43:18.446049 2026] [proxy_fcgi:error] [pid 49094:tid 49099] [client 4.211.248.24:33549] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 18:43:18.801606 2026] [proxy_fcgi:error] [pid 49094:tid 49110] [client 4.211.248.24:33549] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 18:43:19.081608 2026] [proxy_fcgi:error] [pid 49094:tid 49105] [client 4.211.248.24:33549] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 18:43:19.547832 2026] [proxy_fcgi:error] [pid 49094:tid 49112] [client 4.211.248.24:33549] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 18:43:19.811065 2026] [proxy_fcgi:error] [pid 49094:tid 49109] [client 4.211.248.24:33549] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 18:43:20.116433 2026] [proxy_fcgi:error] [pid 49094:tid 49118] [client 4.211.248.24:33549] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 18:43:20.675175 2026] [proxy_fcgi:error] [pid 49094:tid 49103] [client 4.211.248.24:33549] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 18:43:21.031808 2026] [proxy_fcgi:error] [pid 49094:tid 49115] [client 4.211.248.24:33549] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 18:43:21.626194 2026] [:error] [pid 49094:tid 49099] [client 4.211.248.24:33549] [client 4.211.248.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dwelectservices.com.au"] [uri "/tiny.php"] [unique_id "aeC9STbDwvcXorHR_MyC4AAAAUM"]
[Thu Apr 16 18:43:22.473600 2026] [proxy_fcgi:error] [pid 49094:tid 49111] [client 4.211.248.24:26651] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 18:43:22.782057 2026] [:error] [pid 49094:tid 49112] [client 4.211.248.24:26651] [client 4.211.248.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class-wp-image.php"] [unique_id "aeC9SjbDwvcXorHR_MyC4wAAAVA"]
[Thu Apr 16 18:43:42.101426 2026] [:error] [pid 57639:tid 57649] [client 4.211.248.24:40457] [client 4.211.248.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/8.php"] [unique_id "aeC9XqMCQoTw7TsxWuksCAAAAMM"]
[Thu Apr 16 18:43:44.073586 2026] [:error] [pid 57536:tid 57565] [client 4.211.248.24:34139] [client 4.211.248.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/8.php"] [unique_id "aeC9YCQU4faGja6jpDs44gAAABE"]
[Thu Apr 16 18:43:46.285560 2026] [:error] [pid 7880:tid 7908] [client 4.211.248.24:36098] [client 4.211.248.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/8.php"] [unique_id "aeC9Yqaezm4fSGc0yUJ0wgAAAZc"]
[Thu Apr 16 18:43:47.562313 2026] [:error] [pid 29603:tid 29616] [client 4.211.248.24:41105] [client 4.211.248.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/8.php"] [unique_id "aeC9Y1fGOR6fpTWUAzptJAAAAQs"]
[Thu Apr 16 18:43:50.243170 2026] [:error] [pid 57536:tid 57570] [client 4.211.248.24:41097] [client 4.211.248.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sadcut1.php"] [unique_id "aeC9ZiQU4faGja6jpDs49QAAABY"]
[Thu Apr 16 18:43:52.759319 2026] [:error] [pid 49094:tid 49117] [client 4.211.248.24:36101] [client 4.211.248.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sadcut1.php"] [unique_id "aeC9aDbDwvcXorHR_MyDEgAAAVU"]
[Thu Apr 16 18:43:58.944996 2026] [:error] [pid 49094:tid 49097] [client 4.211.248.24:34120] [client 4.211.248.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sadcut1.php"] [unique_id "aeC9bjbDwvcXorHR_MyDHwAAAUE"]
[Thu Apr 16 18:44:04.164441 2026] [:error] [pid 57538:tid 57610] [client 4.211.248.24:37936] [client 4.211.248.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/footer.php"] [unique_id "aeC9dMuMaiEF5SVR2Be9MgAAAIg"]
[Thu Apr 16 18:44:05.309302 2026] [:error] [pid 49094:tid 49107] [client 4.211.248.24:34707] [client 4.211.248.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/footer.php"] [unique_id "aeC9dTbDwvcXorHR_MyDOAAAAUs"]
[Thu Apr 16 18:44:10.831690 2026] [:error] [pid 57538:tid 57607] [client 4.211.248.24:34704] [client 4.211.248.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/footer.php"] [unique_id "aeC9esuMaiEF5SVR2Be9OwAAAIU"]
[Thu Apr 16 18:44:11.570539 2026] [:error] [pid 57537:tid 57596] [client 4.211.248.24:32263] [client 4.211.248.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/footer.php"] [unique_id "aeC9e1VQRS8nm73ENAmcxgAAAFU"]
[Thu Apr 16 18:44:15.423003 2026] [:error] [pid 57536:tid 57565] [client 4.211.248.24:37875] [client 4.211.248.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/img.php"] [unique_id "aeC9fyQU4faGja6jpDs5IAAAABE"]
[Thu Apr 16 18:44:17.289116 2026] [:error] [pid 57537:tid 57580] [client 4.211.248.24:37317] [client 4.211.248.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/img.php"] [unique_id "aeC9gVVQRS8nm73ENAmczgAAAEU"]
[Thu Apr 16 18:44:18.864289 2026] [:error] [pid 57639:tid 57646] [client 4.211.248.24:34204] [client 4.211.248.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/img.php"] [unique_id "aeC9gqMCQoTw7TsxWuksQQAAAMA"]
[Thu Apr 16 18:44:20.056409 2026] [:error] [pid 49094:tid 49096] [client 4.211.248.24:32264] [client 4.211.248.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/img.php"] [unique_id "aeC9hDbDwvcXorHR_MyDUgAAAUA"]
[Thu Apr 16 18:44:20.836856 2026] [:error] [pid 7880:tid 7891] [client 4.211.248.24:35518] [client 4.211.248.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/12.php"] [unique_id "aeC9hKaezm4fSGc0yUJ09gAAAYY"]
[Thu Apr 16 18:44:22.526591 2026] [proxy_fcgi:error] [pid 57639:tid 57647] [client 4.211.248.24:34703] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 18:44:22.767286 2026] [proxy_fcgi:error] [pid 57639:tid 57651] [client 4.211.248.24:34703] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 18:44:23.008657 2026] [proxy_fcgi:error] [pid 57639:tid 57657] [client 4.211.248.24:34703] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 18:44:23.391586 2026] [proxy_fcgi:error] [pid 57639:tid 57665] [client 4.211.248.24:34703] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 18:44:23.635182 2026] [proxy_fcgi:error] [pid 57639:tid 57659] [client 4.211.248.24:34703] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 18:44:23.911624 2026] [proxy_fcgi:error] [pid 57639:tid 57662] [client 4.211.248.24:34703] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 18:44:24.236956 2026] [proxy_fcgi:error] [pid 57639:tid 57668] [client 4.211.248.24:34703] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 18:44:24.476733 2026] [proxy_fcgi:error] [pid 57639:tid 57647] [client 4.211.248.24:34703] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 18:44:24.872654 2026] [proxy_fcgi:error] [pid 57639:tid 57661] [client 4.211.248.24:34703] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 18:44:25.112421 2026] [proxy_fcgi:error] [pid 57639:tid 57656] [client 4.211.248.24:34703] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 18:44:25.351876 2026] [proxy_fcgi:error] [pid 57639:tid 57651] [client 4.211.248.24:34703] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 18:44:25.602046 2026] [:error] [pid 57639:tid 57670] [client 4.211.248.24:34703] [client 4.211.248.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws86.php"] [unique_id "aeC9iaMCQoTw7TsxWuksaAAAANg"]
[Thu Apr 16 18:44:29.320548 2026] [:error] [pid 49094:tid 49100] [client 4.211.248.24:17158] [client 4.211.248.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws86.php"] [unique_id "aeC9jTbDwvcXorHR_MyDZgAAAUQ"]
[Thu Apr 16 18:44:30.283072 2026] [:error] [pid 57639:tid 57658] [client 4.211.248.24:19087] [client 4.211.248.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws86.php"] [unique_id "aeC9jqMCQoTw7TsxWuksfAAAAMw"]
[Thu Apr 16 18:44:32.124084 2026] [:error] [pid 57639:tid 57658] [client 4.211.248.24:18336] [client 4.211.248.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws86.php"] [unique_id "aeC9kKMCQoTw7TsxWuksjQAAAMw"]
[Thu Apr 16 18:44:33.354182 2026] [:error] [pid 49094:tid 49098] [client 4.211.248.24:42209] [client 4.211.248.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/maxro.php"] [unique_id "aeC9kTbDwvcXorHR_MyDeQAAAUI"]
[Thu Apr 16 18:44:38.885815 2026] [:error] [pid 49094:tid 49118] [client 4.211.248.24:2359] [client 4.211.248.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/maxro.php"] [unique_id "aeC9ljbDwvcXorHR_MyDhQAAAVY"]
[Thu Apr 16 18:44:55.655670 2026] [:error] [pid 7880:tid 7890] [client 4.211.248.24:32336] [client 4.211.248.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aeC9p6aezm4fSGc0yUJ1IQAAAYU"]
[Thu Apr 16 18:44:57.229071 2026] [:error] [pid 57536:tid 57564] [client 4.211.248.24:2419] [client 4.211.248.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aeC9qSQU4faGja6jpDs5dAAAABA"]
[Thu Apr 16 18:44:59.716114 2026] [:error] [pid 29603:tid 29622] [client 4.211.248.24:30155] [client 4.211.248.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aeC9q1fGOR6fpTWUAzptVwAAARE"]
[Thu Apr 16 18:45:01.727305 2026] [:error] [pid 29603:tid 29618] [client 4.211.248.24:2541] [client 4.211.248.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aeC9rVfGOR6fpTWUAzptXAAAAQ0"]
[Thu Apr 16 18:45:02.734118 2026] [:error] [pid 57538:tid 57623] [client 4.211.248.24:38698] [client 4.211.248.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/1s7y8wt9dz.php"] [unique_id "aeC9rsuMaiEF5SVR2Be9WQAAAJU"]
[Thu Apr 16 18:45:04.346276 2026] [:error] [pid 57537:tid 57585] [client 4.211.248.24:38644] [client 4.211.248.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/1s7y8wt9dz.php"] [unique_id "aeC9sFVQRS8nm73ENAmc_gAAAEo"]
[Thu Apr 16 18:45:05.601820 2026] [:error] [pid 57639:tid 57666] [client 4.211.248.24:22144] [client 4.211.248.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/1s7y8wt9dz.php"] [unique_id "aeC9saMCQoTw7TsxWuks8wAAANQ"]
[Thu Apr 16 18:45:21.801504 2026] [:error] [pid 57639:tid 57664] [client 4.211.248.24:2390] [client 4.211.248.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bdktk.php"] [unique_id "aeC9waMCQoTw7TsxWuktFwAAANI"]
[Thu Apr 16 18:45:29.706567 2026] [proxy_fcgi:error] [pid 57639:tid 57657] [client 4.211.248.24:2555] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 18:45:30.131160 2026] [proxy_fcgi:error] [pid 57639:tid 57667] [client 4.211.248.24:2555] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 18:45:30.369529 2026] [proxy_fcgi:error] [pid 57639:tid 57653] [client 4.211.248.24:2555] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 18:45:30.611771 2026] [proxy_fcgi:error] [pid 57639:tid 57656] [client 4.211.248.24:2555] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 18:45:30.850740 2026] [proxy_fcgi:error] [pid 57639:tid 57670] [client 4.211.248.24:2555] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 18:45:31.092142 2026] [proxy_fcgi:error] [pid 57639:tid 57662] [client 4.211.248.24:2555] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 18:45:31.331480 2026] [proxy_fcgi:error] [pid 57639:tid 57668] [client 4.211.248.24:2555] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 18:45:31.569791 2026] [proxy_fcgi:error] [pid 57639:tid 57652] [client 4.211.248.24:2555] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 18:45:31.930515 2026] [proxy_fcgi:error] [pid 57639:tid 57648] [client 4.211.248.24:2555] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 18:45:32.298150 2026] [proxy_fcgi:error] [pid 57639:tid 57666] [client 4.211.248.24:2555] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 18:45:32.540855 2026] [proxy_fcgi:error] [pid 57639:tid 57670] [client 4.211.248.24:2555] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 18:45:32.777246 2026] [:error] [pid 57639:tid 57649] [client 4.211.248.24:2555] [client 4.211.248.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rh.php"] [unique_id "aeC9zKMCQoTw7TsxWuktUwAAAMM"]
[Thu Apr 16 18:45:34.384699 2026] [:error] [pid 57639:tid 57658] [client 4.211.248.24:2818] [client 4.211.248.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rh.php"] [unique_id "aeC9zqMCQoTw7TsxWuktVAAAAMw"]
[Thu Apr 16 18:45:36.386774 2026] [:error] [pid 57639:tid 57649] [client 4.211.248.24:16846] [client 4.211.248.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rh.php"] [unique_id "aeC90KMCQoTw7TsxWuktVgAAAMM"]
[Thu Apr 16 18:45:39.297748 2026] [:error] [pid 49094:tid 49102] [client 4.211.248.24:2821] [client 4.211.248.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rh.php"] [unique_id "aeC90zbDwvcXorHR_MyD7AAAAUY"]
[Thu Apr 16 18:45:42.857498 2026] [:error] [pid 57537:tid 57598] [client 4.211.248.24:18580] [client 4.211.248.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gz.php"] [unique_id "aeC91lVQRS8nm73ENAmdDwAAAFc"]
[Thu Apr 16 18:45:43.939249 2026] [:error] [pid 49094:tid 49098] [client 4.211.248.24:20638] [client 4.211.248.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gz.php"] [unique_id "aeC91zbDwvcXorHR_MyD-wAAAUI"]
[Thu Apr 16 18:45:44.696971 2026] [:error] [pid 49094:tid 49102] [client 4.211.248.24:17771] [client 4.211.248.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gz.php"] [unique_id "aeC92DbDwvcXorHR_MyD_QAAAUY"]
[Thu Apr 16 18:45:49.068877 2026] [:error] [pid 49094:tid 49099] [client 4.211.248.24:2229] [client 4.211.248.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gz.php"] [unique_id "aeC93TbDwvcXorHR_MyEEQAAAUM"]
[Thu Apr 16 18:45:51.128578 2026] [:error] [pid 57639:tid 57647] [client 4.211.248.24:22914] [client 4.211.248.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gelio1.php"] [unique_id "aeC936MCQoTw7TsxWuktYwAAAME"]
[Thu Apr 16 18:45:55.853044 2026] [:error] [pid 57639:tid 57653] [client 4.211.248.24:20623] [client 4.211.248.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gelio1.php"] [unique_id "aeC946MCQoTw7TsxWuktbAAAAMc"]
[Thu Apr 16 18:46:06.642222 2026] [:error] [pid 49094:tid 49102] [client 4.211.248.24:3070] [client 4.211.248.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/areak1.php"] [unique_id "aeC97jbDwvcXorHR_MyENgAAAUY"]
[Thu Apr 16 18:46:07.830357 2026] [:error] [pid 57639:tid 57660] [client 4.211.248.24:3038] [client 4.211.248.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/areak1.php"] [unique_id "aeC976MCQoTw7TsxWuktiwAAAM4"]
[Thu Apr 16 18:46:10.363457 2026] [:error] [pid 57639:tid 57668] [client 4.211.248.24:16793] [client 4.211.248.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/areak1.php"] [unique_id "aeC98qMCQoTw7TsxWuktmgAAANY"]
[Thu Apr 16 18:46:12.901530 2026] [:error] [pid 7880:tid 7891] [client 4.211.248.24:20966] [client 4.211.248.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/areak1.php"] [unique_id "aeC99Kaezm4fSGc0yUJ1jwAAAYY"]
[Thu Apr 16 18:46:15.281975 2026] [:error] [pid 57639:tid 57660] [client 4.211.248.24:2078] [client 4.211.248.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/qqa.php"] [unique_id "aeC996MCQoTw7TsxWuktrwAAAM4"]
[Thu Apr 16 18:46:38.563838 2026] [proxy_fcgi:error] [pid 57639:tid 57657] [client 4.211.248.24:44678] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 18:46:38.804106 2026] [proxy_fcgi:error] [pid 57639:tid 57670] [client 4.211.248.24:44678] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 18:46:39.184835 2026] [proxy_fcgi:error] [pid 57639:tid 57646] [client 4.211.248.24:44678] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 18:46:39.468163 2026] [proxy_fcgi:error] [pid 57639:tid 57650] [client 4.211.248.24:44678] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 18:46:39.708493 2026] [proxy_fcgi:error] [pid 57639:tid 57666] [client 4.211.248.24:44678] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 18:46:39.986255 2026] [proxy_fcgi:error] [pid 57639:tid 57660] [client 4.211.248.24:44678] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 18:46:40.331472 2026] [proxy_fcgi:error] [pid 57639:tid 57657] [client 4.211.248.24:44678] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 18:46:40.670246 2026] [proxy_fcgi:error] [pid 57639:tid 57670] [client 4.211.248.24:44678] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 18:46:41.095801 2026] [proxy_fcgi:error] [pid 57639:tid 57654] [client 4.211.248.24:44678] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 18:46:41.336650 2026] [proxy_fcgi:error] [pid 57639:tid 57651] [client 4.211.248.24:44678] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 18:46:41.596781 2026] [proxy_fcgi:error] [pid 57639:tid 57665] [client 4.211.248.24:44678] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 18:46:41.951740 2026] [:error] [pid 57639:tid 57669] [client 4.211.248.24:44678] [client 4.211.248.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xper1.php"] [unique_id "aeC-EaMCQoTw7TsxWukuegAAANc"]
[Thu Apr 16 18:46:44.121564 2026] [:error] [pid 57538:tid 57613] [client 4.211.248.24:25722] [client 4.211.248.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xper1.php"] [unique_id "aeC-FMuMaiEF5SVR2Be9twAAAIs"]
[Thu Apr 16 18:46:45.686071 2026] [:error] [pid 49094:tid 49106] [client 4.211.248.24:24004] [client 4.211.248.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xper1.php"] [unique_id "aeC-FTbDwvcXorHR_MyEcwAAAUo"]
[Thu Apr 16 18:46:47.595405 2026] [:error] [pid 57536:tid 57564] [client 4.211.248.24:22001] [client 4.211.248.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xper1.php"] [unique_id "aeC-FyQU4faGja6jpDs6JAAAABA"]
[Thu Apr 16 18:47:32.313173 2026] [:error] [pid 49094:tid 49111] [client 4.211.248.24:42761] [client 4.211.248.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/saorix1.php"] [unique_id "aeC-RDbDwvcXorHR_MyE2gAAAU8"]
[Thu Apr 16 18:47:37.761500 2026] [:error] [pid 57536:tid 57563] [client 4.211.248.24:19944] [client 4.211.248.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/saorix1.php"] [unique_id "aeC-SSQU4faGja6jpDs6iAAAAA8"]
[Thu Apr 16 18:47:39.736186 2026] [:error] [pid 57639:tid 57659] [client 4.211.248.24:42770] [client 4.211.248.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/saorix1.php"] [unique_id "aeC-S6MCQoTw7TsxWukvAwAAAM0"]
[Thu Apr 16 18:47:41.279551 2026] [proxy_fcgi:error] [pid 29603:tid 29617] [client 4.211.248.24:19409] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 18:47:41.539822 2026] [proxy_fcgi:error] [pid 29603:tid 29613] [client 4.211.248.24:19409] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 18:47:41.800932 2026] [proxy_fcgi:error] [pid 29603:tid 29615] [client 4.211.248.24:19409] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 18:47:42.066589 2026] [proxy_fcgi:error] [pid 29603:tid 29619] [client 4.211.248.24:19409] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 18:47:42.365373 2026] [proxy_fcgi:error] [pid 29603:tid 29622] [client 4.211.248.24:19409] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 18:47:42.626321 2026] [proxy_fcgi:error] [pid 29603:tid 29614] [client 4.211.248.24:19409] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 18:47:42.971597 2026] [proxy_fcgi:error] [pid 29603:tid 29611] [client 4.211.248.24:19409] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 18:47:43.233412 2026] [proxy_fcgi:error] [pid 29603:tid 29610] [client 4.211.248.24:19409] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 18:47:44.733437 2026] [proxy_fcgi:error] [pid 29603:tid 29608] [client 4.211.248.24:19409] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 18:47:45.020678 2026] [proxy_fcgi:error] [pid 29603:tid 29624] [client 4.211.248.24:19409] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 18:47:45.285942 2026] [proxy_fcgi:error] [pid 29603:tid 29607] [client 4.211.248.24:19409] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 18:47:45.546936 2026] [:error] [pid 29603:tid 29620] [client 4.211.248.24:19409] [client 4.211.248.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-block.php"] [unique_id "aeC-UVfGOR6fpTWUAzpuOQAAAQ8"]
[Thu Apr 16 18:47:57.625562 2026] [:error] [pid 49094:tid 49114] [client 4.211.248.24:22004] [client 4.211.248.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-block.php"] [unique_id "aeC-XTbDwvcXorHR_MyFRQAAAVI"]
[Thu Apr 16 18:47:58.831956 2026] [:error] [pid 57639:tid 57646] [client 4.211.248.24:29599] [client 4.211.248.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-block.php"] [unique_id "aeC-XqMCQoTw7TsxWukvRQAAAMA"]
[Thu Apr 16 18:48:23.497038 2026] [:error] [pid 57538:tid 57626] [client 4.211.248.24:17437] [client 4.211.248.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/acp.php"] [unique_id "aeC-d8uMaiEF5SVR2Be-PAAAAJg"]
[Thu Apr 16 18:48:24.587608 2026] [:error] [pid 57536:tid 57551] [client 4.211.248.24:17435] [client 4.211.248.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/acp.php"] [unique_id "aeC-eCQU4faGja6jpDs6_wAAAAM"]
[Thu Apr 16 18:48:25.672962 2026] [:error] [pid 57537:tid 57576] [client 4.211.248.24:19441] [client 4.211.248.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/acp.php"] [unique_id "aeC-eVVQRS8nm73ENAmdywAAAEE"]
[Thu Apr 16 18:48:28.586402 2026] [:error] [pid 57538:tid 57610] [client 4.211.248.24:17451] [client 4.211.248.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/acp.php"] [unique_id "aeC-fMuMaiEF5SVR2Be-RAAAAIg"]
[Thu Apr 16 18:48:31.757988 2026] [:error] [pid 49094:tid 49113] [client 4.211.248.24:42834] [client 4.211.248.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fs.php"] [unique_id "aeC-fzbDwvcXorHR_MyF2gAAAVE"]
[Thu Apr 16 18:48:35.211176 2026] [:error] [pid 57639:tid 57654] [client 4.211.248.24:19162] [client 4.211.248.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fs.php"] [unique_id "aeC-g6MCQoTw7TsxWukv7wAAAMg"]
[Thu Apr 16 18:48:35.832955 2026] [:error] [pid 57536:tid 57564] [client 4.211.248.24:29593] [client 4.211.248.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fs.php"] [unique_id "aeC-gyQU4faGja6jpDs7FwAAABA"]
[Thu Apr 16 18:48:45.381301 2026] [proxy_fcgi:error] [pid 57639:tid 57655] [client 4.211.248.24:29625] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 18:48:45.640991 2026] [proxy_fcgi:error] [pid 57639:tid 57653] [client 4.211.248.24:29625] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 18:48:45.880495 2026] [proxy_fcgi:error] [pid 57639:tid 57663] [client 4.211.248.24:29625] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 18:48:46.132323 2026] [proxy_fcgi:error] [pid 57639:tid 57659] [client 4.211.248.24:29625] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 18:48:46.474607 2026] [proxy_fcgi:error] [pid 57639:tid 57661] [client 4.211.248.24:29625] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 18:48:46.715151 2026] [proxy_fcgi:error] [pid 57639:tid 57649] [client 4.211.248.24:29625] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 18:48:46.954807 2026] [proxy_fcgi:error] [pid 57639:tid 57669] [client 4.211.248.24:29625] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 18:48:47.232815 2026] [proxy_fcgi:error] [pid 57639:tid 57665] [client 4.211.248.24:29625] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 18:48:47.477540 2026] [proxy_fcgi:error] [pid 57639:tid 57646] [client 4.211.248.24:29625] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 18:48:48.948739 2026] [proxy_fcgi:error] [pid 57639:tid 57649] [client 4.211.248.24:29625] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 18:48:49.187808 2026] [proxy_fcgi:error] [pid 57639:tid 57669] [client 4.211.248.24:29625] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 18:48:49.422950 2026] [:error] [pid 57639:tid 57655] [client 4.211.248.24:29625] [client 4.211.248.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-class.php"] [unique_id "aeC-kaMCQoTw7TsxWukwiQAAAMk"]
[Thu Apr 16 18:48:51.525768 2026] [:error] [pid 29603:tid 29606] [client 4.211.248.24:2132] [client 4.211.248.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-class.php"] [unique_id "aeC-k1fGOR6fpTWUAzpugwAAAQE"]
[Thu Apr 16 18:48:52.605978 2026] [:error] [pid 57538:tid 57613] [client 4.211.248.24:29597] [client 4.211.248.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-class.php"] [unique_id "aeC-lMuMaiEF5SVR2Be-dAAAAIs"]
[Thu Apr 16 18:48:53.775696 2026] [:error] [pid 57536:tid 57559] [client 4.211.248.24:21967] [client 4.211.248.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-class.php"] [unique_id "aeC-lSQU4faGja6jpDs7tgAAAAs"]
[Thu Apr 16 18:48:54.879781 2026] [:error] [pid 49094:tid 49107] [client 4.211.248.24:2165] [client 4.211.248.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cilus.php"] [unique_id "aeC-ljbDwvcXorHR_MyGQAAAAUs"]
[Thu Apr 16 18:48:55.857715 2026] [:error] [pid 57537:tid 57594] [client 4.211.248.24:2120] [client 4.211.248.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cilus.php"] [unique_id "aeC-l1VQRS8nm73ENAmd7wAAAFM"]
[Thu Apr 16 18:49:02.158402 2026] [:error] [pid 57538:tid 57615] [client 4.211.248.24:2122] [client 4.211.248.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cilus.php"] [unique_id "aeC-nsuMaiEF5SVR2Be-fgAAAI0"]
[Thu Apr 16 18:49:07.074436 2026] [:error] [pid 49094:tid 49097] [client 4.211.248.24:17694] [client 4.211.248.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cilus.php"] [unique_id "aeC-ozbDwvcXorHR_MyGZQAAAUE"]
[Thu Apr 16 18:49:08.872684 2026] [:error] [pid 57639:tid 57656] [client 4.211.248.24:23971] [client 4.211.248.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/d.php"] [unique_id "aeC-pKMCQoTw7TsxWukwywAAAMo"]
[Thu Apr 16 18:49:13.312902 2026] [:error] [pid 57639:tid 57646] [client 4.211.248.24:21193] [client 4.211.248.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/d.php"] [unique_id "aeC-qaMCQoTw7TsxWukw3AAAAMA"]
[Thu Apr 16 18:49:14.939122 2026] [:error] [pid 57536:tid 57564] [client 4.211.248.24:22402] [client 4.211.248.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/d.php"] [unique_id "aeC-qiQU4faGja6jpDs70QAAABA"]
[Thu Apr 16 18:49:20.058656 2026] [:error] [pid 57639:tid 57657] [client 4.211.248.24:2159] [client 4.211.248.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/d.php"] [unique_id "aeC-sKMCQoTw7TsxWukw-wAAAMs"]
[Thu Apr 16 18:49:27.878969 2026] [:error] [pid 7880:tid 7905] [client 4.211.248.24:2460] [client 4.211.248.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/error_log.php"] [unique_id "aeC-t6aezm4fSGc0yUJ2swAAAZQ"]
[Thu Apr 16 18:49:33.278746 2026] [:error] [pid 57536:tid 57571] [client 4.211.248.24:45431] [client 4.211.248.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/error_log.php"] [unique_id "aeC-vSQU4faGja6jpDs77AAAABc"]
[Thu Apr 16 18:49:36.534932 2026] [:error] [pid 57536:tid 57568] [client 4.211.248.24:22454] [client 4.211.248.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Ov-Simple1.php"] [unique_id "aeC-wCQU4faGja6jpDs7_AAAABQ"]
[Thu Apr 16 18:49:38.489612 2026] [:error] [pid 57538:tid 57610] [client 4.211.248.24:21230] [client 4.211.248.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Ov-Simple1.php"] [unique_id "aeC-wsuMaiEF5SVR2Be-mAAAAIg"]
[Thu Apr 16 18:49:40.118196 2026] [:error] [pid 57538:tid 57617] [client 4.211.248.24:19863] [client 4.211.248.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Ov-Simple1.php"] [unique_id "aeC-xMuMaiEF5SVR2Be-nAAAAI8"]
[Thu Apr 16 18:49:41.631501 2026] [:error] [pid 7880:tid 7897] [client 4.211.248.24:19670] [client 4.211.248.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Ov-Simple1.php"] [unique_id "aeC-xaaezm4fSGc0yUJ22QAAAYw"]
[Thu Apr 16 18:49:43.163970 2026] [:error] [pid 57639:tid 57649] [client 4.211.248.24:19674] [client 4.211.248.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/curl.php"] [unique_id "aeC-x6MCQoTw7TsxWukxPgAAAMM"]
[Thu Apr 16 18:49:44.403848 2026] [:error] [pid 29603:tid 29628] [client 4.211.248.24:2474] [client 4.211.248.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/curl.php"] [unique_id "aeC-yFfGOR6fpTWUAzpunQAAARc"]
[Thu Apr 16 18:49:48.857926 2026] [:error] [pid 57639:tid 57667] [client 4.211.248.24:2948] [client 4.211.248.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/curl.php"] [unique_id "aeC-zKMCQoTw7TsxWukxUgAAANU"]
[Thu Apr 16 18:49:51.356795 2026] [proxy_fcgi:error] [pid 7880:tid 7886] [client 4.211.248.24:25041] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 18:49:51.787377 2026] [proxy_fcgi:error] [pid 7880:tid 7908] [client 4.211.248.24:25041] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 18:49:52.074482 2026] [proxy_fcgi:error] [pid 7880:tid 7897] [client 4.211.248.24:25041] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 18:49:52.339710 2026] [proxy_fcgi:error] [pid 7880:tid 7896] [client 4.211.248.24:25041] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 18:49:52.605290 2026] [proxy_fcgi:error] [pid 7880:tid 7890] [client 4.211.248.24:25041] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 18:49:52.870797 2026] [proxy_fcgi:error] [pid 7880:tid 7903] [client 4.211.248.24:25041] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 18:49:53.136555 2026] [proxy_fcgi:error] [pid 7880:tid 7900] [client 4.211.248.24:25041] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 20:43:53.281568 2026] [:error] [pid 57537:tid 57576] [client 164.90.186.62:61055] [client 164.90.186.62] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 164.90.186.62, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-login.php"] [unique_id "aeDZiVVQRS8nm73ENAmyFwAAAEE"]
[Thu Apr 16 20:43:53.292917 2026] [proxy_fcgi:error] [pid 57537:tid 57576] [client 164.90.186.62:61055] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 20:59:05.990952 2026] [:error] [pid 57639:tid 57665] [client 4.211.174.217:30913] [client 4.211.174.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeDdGaMCQoTw7TsxWumXAQAAANM"]
[Thu Apr 16 20:59:06.489246 2026] [:error] [pid 57639:tid 57670] [client 4.211.174.217:18138] [client 4.211.174.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeDdGqMCQoTw7TsxWumXBQAAANg"]
[Thu Apr 16 20:59:07.069637 2026] [:error] [pid 57639:tid 57667] [client 4.211.174.217:18413] [client 4.211.174.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeDdG6MCQoTw7TsxWumXCgAAANU"]
[Thu Apr 16 20:59:07.698407 2026] [:error] [pid 57536:tid 57566] [client 4.211.174.217:13481] [client 4.211.174.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeDdGyQU4faGja6jpDtyUwAAABI"]
[Thu Apr 16 21:25:06.060676 2026] [:error] [pid 7880:tid 7898] [client 158.158.73.200:52307] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeDjMqaezm4fSGc0yUKucAAAAY0"]
[Thu Apr 16 21:25:06.868068 2026] [:error] [pid 57639:tid 57657] [client 158.158.73.200:53911] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeDjMqMCQoTw7TsxWumznwAAAMs"]
[Thu Apr 16 21:25:07.522933 2026] [:error] [pid 57639:tid 57662] [client 158.158.73.200:56189] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeDjM6MCQoTw7TsxWumzqQAAANA"]
[Thu Apr 16 21:25:08.154710 2026] [:error] [pid 49094:tid 49118] [client 158.158.73.200:53872] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeDjNDbDwvcXorHR_MzkzAAAAVY"]
[Thu Apr 16 22:45:32.599499 2026] [:error] [pid 49094:tid 49107] [client 35.222.93.220:56961] [client 35.222.93.220] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.222.93.220, incrementing ddos counter"] [hostname "dwelectservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aeD2DDbDwvcXorHR_MwR2QAAAUs"]
[Thu Apr 16 22:45:32.613249 2026] [proxy_fcgi:error] [pid 49094:tid 49107] [client 35.222.93.220:56961] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 22:45:35.013443 2026] [:error] [pid 49094:tid 49101] [client 35.222.93.220:56961] [client 35.222.93.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aeD2DzbDwvcXorHR_MwR6wAAAUU"]
[Thu Apr 16 22:45:35.576713 2026] [:error] [pid 49094:tid 49109] [client 35.222.93.220:56056] [client 35.222.93.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aeD2DzbDwvcXorHR_MwR7QAAAU0"]
[Thu Apr 16 22:45:36.165709 2026] [:error] [pid 49094:tid 49113] [client 35.222.93.220:58190] [client 35.222.93.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aeD2EDbDwvcXorHR_MwR7wAAAVE"]
[Thu Apr 16 22:45:36.769841 2026] [:error] [pid 57536:tid 57568] [client 35.222.93.220:53379] [client 35.222.93.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aeD2ECQU4faGja6jpDumLAAAABQ"]
[Thu Apr 16 22:45:37.369907 2026] [:error] [pid 57639:tid 57660] [client 35.222.93.220:65312] [client 35.222.93.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aeD2EaMCQoTw7TsxWunwwAAAAM4"]
[Thu Apr 16 22:45:37.828487 2026] [:error] [pid 57639:tid 57649] [client 35.222.93.220:62900] [client 35.222.93.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aeD2EaMCQoTw7TsxWunwwwAAAMM"]
[Thu Apr 16 22:45:38.304681 2026] [:error] [pid 57639:tid 57668] [client 35.222.93.220:54572] [client 35.222.93.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aeD2EqMCQoTw7TsxWunwyAAAANY"]
[Thu Apr 16 23:06:39.215562 2026] [:error] [pid 57537:tid 57588] [client 45.130.203.146:43633] [client 45.130.203.146] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.git/HEAD"] [unique_id "aeD6_1VQRS8nm73ENAnNmgAAAE0"]
[Thu Apr 16 23:06:39.982387 2026] [:error] [pid 57536:tid 57569] [client 45.130.203.170:53169] [client 45.130.203.170] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dwelectservices.com.au"] [uri "/.git/HEAD"] [unique_id "aeD6_yQU4faGja6jpDuv3gAAABU"]
[Fri Apr 17 02:45:12.288055 2026] [proxy_fcgi:error] [pid 43387:tid 43461] [client 51.107.222.225:64370] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 02:45:12.550352 2026] [proxy_fcgi:error] [pid 43387:tid 43471] [client 51.107.222.225:64370] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 02:45:12.887089 2026] [proxy_fcgi:error] [pid 43387:tid 43470] [client 51.107.222.225:64370] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 02:45:13.149711 2026] [proxy_fcgi:error] [pid 43387:tid 43477] [client 51.107.222.225:64370] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 02:45:13.414493 2026] [proxy_fcgi:error] [pid 43387:tid 43457] [client 51.107.222.225:64370] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 02:45:13.731691 2026] [proxy_fcgi:error] [pid 43387:tid 43460] [client 51.107.222.225:64370] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 02:45:14.115749 2026] [proxy_fcgi:error] [pid 43387:tid 43462] [client 51.107.222.225:64370] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 02:45:14.377498 2026] [proxy_fcgi:error] [pid 43387:tid 43474] [client 51.107.222.225:64370] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 02:45:14.647575 2026] [proxy_fcgi:error] [pid 43387:tid 43468] [client 51.107.222.225:64370] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 02:45:15.141190 2026] [proxy_fcgi:error] [pid 43387:tid 43449] [client 51.107.222.225:64370] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 02:45:15.399481 2026] [:error] [pid 43387:tid 43473] [client 51.107.222.225:64370] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/BhqKs28Cw94.php"] [unique_id "aeEuOyBNsONqHxWTakVUzAAAAJQ"]
[Fri Apr 17 02:45:16.369295 2026] [:error] [pid 26480:tid 26505] [client 51.107.222.225:64951] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/BhqKs28Cw94.php"] [unique_id "aeEuPAwLDJKTQNfarA2SNQAAAdc"]
[Fri Apr 17 02:45:17.406267 2026] [:error] [pid 26480:tid 26501] [client 51.107.222.225:64937] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/BhqKs28Cw94.php"] [unique_id "aeEuPQwLDJKTQNfarA2SOAAAAdM"]
[Fri Apr 17 02:45:18.641262 2026] [:error] [pid 26480:tid 26494] [client 51.107.222.225:64922] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/BhqKs28Cw94.php"] [unique_id "aeEuPgwLDJKTQNfarA2SPQAAAcw"]
[Fri Apr 17 02:45:19.661620 2026] [:error] [pid 26480:tid 26500] [client 51.107.222.225:65003] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cdn3.php"] [unique_id "aeEuPwwLDJKTQNfarA2SQQAAAdI"]
[Fri Apr 17 02:45:20.647318 2026] [:error] [pid 4086:tid 4101] [client 51.107.222.225:64940] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cdn3.php"] [unique_id "aeEuQFlz7gxl_exM0FpSQgAAAU0"]
[Fri Apr 17 02:45:21.673182 2026] [:error] [pid 43482:tid 43496] [client 51.107.222.225:64285] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cdn3.php"] [unique_id "aeEuQT9SZnuKxlHrct299gAAAMw"]
[Fri Apr 17 02:45:23.121377 2026] [:error] [pid 3245:tid 3281] [client 51.107.222.225:64264] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cdn3.php"] [unique_id "aeEuQ6ESOMTHVLs-uFDffwAAARM"]
[Fri Apr 17 02:45:23.813672 2026] [:error] [pid 43387:tid 43469] [client 51.107.222.225:64944] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/3Cr1w6dfjTK.php"] [unique_id "aeEuQyBNsONqHxWTakVU4wAAAJA"]
[Fri Apr 17 02:45:24.430001 2026] [:error] [pid 43386:tid 43426] [client 51.107.222.225:64265] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/3Cr1w6dfjTK.php"] [unique_id "aeEuRO91GAVgUfhPVDHqTAAAAEY"]
[Fri Apr 17 02:45:25.625753 2026] [:error] [pid 43387:tid 43449] [client 51.107.222.225:64923] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/3Cr1w6dfjTK.php"] [unique_id "aeEuRSBNsONqHxWTakVU7QAAAIE"]
[Fri Apr 17 02:45:26.323041 2026] [:error] [pid 43386:tid 43421] [client 51.107.222.225:64291] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/3Cr1w6dfjTK.php"] [unique_id "aeEuRu91GAVgUfhPVDHqTwAAAEE"]
[Fri Apr 17 02:45:27.689028 2026] [:error] [pid 43386:tid 43439] [client 51.107.222.225:64990] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/beerd.php"] [unique_id "aeEuR-91GAVgUfhPVDHqVAAAAFM"]
[Fri Apr 17 02:45:28.740809 2026] [:error] [pid 11692:tid 11708] [client 51.107.222.225:64960] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/beerd.php"] [unique_id "aeEuSM1AYuhm4BZwKNopdwAAAgs"]
[Fri Apr 17 02:45:29.529289 2026] [:error] [pid 26480:tid 26486] [client 51.107.222.225:65006] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/beerd.php"] [unique_id "aeEuSQwLDJKTQNfarA2SUAAAAcQ"]
[Fri Apr 17 02:45:30.633906 2026] [:error] [pid 43386:tid 43426] [client 51.107.222.225:64380] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/beerd.php"] [unique_id "aeEuSu91GAVgUfhPVDHqXAAAAEY"]
[Fri Apr 17 02:45:32.002618 2026] [:error] [pid 26102:tid 26116] [client 51.107.222.225:64934] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hhxc.php"] [unique_id "aeEuTP127aFqw6ALdngi2AAAAYs"]
[Fri Apr 17 02:45:32.943088 2026] [:error] [pid 3245:tid 3279] [client 51.107.222.225:64340] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hhxc.php"] [unique_id "aeEuTKESOMTHVLs-uFDfhQAAARE"]
[Fri Apr 17 02:45:33.714939 2026] [:error] [pid 43482:tid 43489] [client 51.107.222.225:64364] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hhxc.php"] [unique_id "aeEuTT9SZnuKxlHrct2-FgAAAMU"]
[Fri Apr 17 02:45:34.667139 2026] [:error] [pid 43482:tid 43496] [client 51.107.222.225:64904] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hhxc.php"] [unique_id "aeEuTj9SZnuKxlHrct2-IAAAAMw"]
[Fri Apr 17 02:45:35.477231 2026] [:error] [pid 3245:tid 3278] [client 51.107.222.225:65022] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/161dfd072f.php"] [unique_id "aeEuT6ESOMTHVLs-uFDfjgAAARA"]
[Fri Apr 17 02:45:36.202722 2026] [:error] [pid 26480:tid 26496] [client 51.107.222.225:64280] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/161dfd072f.php"] [unique_id "aeEuUAwLDJKTQNfarA2SVgAAAc4"]
[Fri Apr 17 02:45:37.103448 2026] [:error] [pid 11692:tid 11713] [client 51.107.222.225:64975] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/161dfd072f.php"] [unique_id "aeEuUc1AYuhm4BZwKNophQAAAhA"]
[Fri Apr 17 02:45:37.888710 2026] [:error] [pid 43482:tid 43494] [client 51.107.222.225:64360] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/161dfd072f.php"] [unique_id "aeEuUT9SZnuKxlHrct2-LgAAAMo"]
[Fri Apr 17 02:45:38.718206 2026] [:error] [pid 4086:tid 4096] [client 51.107.222.225:64279] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws80.php"] [unique_id "aeEuUllz7gxl_exM0FpSSQAAAUg"]
[Fri Apr 17 02:45:39.518170 2026] [:error] [pid 4086:tid 4106] [client 51.107.222.225:64950] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws80.php"] [unique_id "aeEuU1lz7gxl_exM0FpSSgAAAVI"]
[Fri Apr 17 02:45:40.351026 2026] [:error] [pid 43482:tid 43488] [client 51.107.222.225:63688] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws80.php"] [unique_id "aeEuVD9SZnuKxlHrct2-PgAAAMQ"]
[Fri Apr 17 02:45:41.197115 2026] [:error] [pid 43482:tid 43502] [client 51.107.222.225:64939] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws80.php"] [unique_id "aeEuVT9SZnuKxlHrct2-RAAAANI"]
[Fri Apr 17 02:45:42.279641 2026] [:error] [pid 11854:tid 11869] [client 51.107.222.225:64916] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ylzed0twj8l9drdbchc1oocfCdefault.php"] [unique_id "aeEuVtxJCSIaqP1XSdalxgAAAkw"]
[Fri Apr 17 02:45:43.348810 2026] [:error] [pid 26102:tid 26122] [client 51.107.222.225:64336] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ylzed0twj8l9drdbchc1oocfCdefault.php"] [unique_id "aeEuV_127aFqw6ALdngi5gAAAZE"]
[Fri Apr 17 02:45:44.402158 2026] [:error] [pid 3245:tid 3267] [client 51.107.222.225:62789] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ylzed0twj8l9drdbchc1oocfCdefault.php"] [unique_id "aeEuWKESOMTHVLs-uFDfmgAAAQU"]
[Fri Apr 17 02:45:45.285121 2026] [:error] [pid 11692:tid 11699] [client 51.107.222.225:65011] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ylzed0twj8l9drdbchc1oocfCdefault.php"] [unique_id "aeEuWc1AYuhm4BZwKNopigAAAgI"]
[Fri Apr 17 02:45:46.556899 2026] [:error] [pid 43386:tid 43425] [client 51.107.222.225:64957] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/RIP.php"] [unique_id "aeEuWu91GAVgUfhPVDHqagAAAEU"]
[Fri Apr 17 02:45:48.061369 2026] [:error] [pid 26480:tid 26486] [client 51.107.222.225:64974] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/RIP.php"] [unique_id "aeEuXAwLDJKTQNfarA2SXgAAAcQ"]
[Fri Apr 17 02:45:48.749315 2026] [:error] [pid 3245:tid 3273] [client 51.107.222.225:63641] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/RIP.php"] [unique_id "aeEuXKESOMTHVLs-uFDfoQAAAQs"]
[Fri Apr 17 02:45:49.431004 2026] [:error] [pid 43386:tid 43442] [client 51.107.222.225:64354] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/RIP.php"] [unique_id "aeEuXe91GAVgUfhPVDHqdAAAAFU"]
[Fri Apr 17 02:45:50.210293 2026] [:error] [pid 11692:tid 11716] [client 51.107.222.225:64368] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/no18.php"] [unique_id "aeEuXs1AYuhm4BZwKNopkgAAAhM"]
[Fri Apr 17 02:45:51.062013 2026] [:error] [pid 43386:tid 43424] [client 51.107.222.225:64920] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/no18.php"] [unique_id "aeEuX-91GAVgUfhPVDHqgAAAAEQ"]
[Fri Apr 17 02:45:51.861752 2026] [:error] [pid 11854:tid 11881] [client 51.107.222.225:65013] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/no18.php"] [unique_id "aeEuX9xJCSIaqP1XSdal0gAAAlg"]
[Fri Apr 17 02:45:52.541314 2026] [:error] [pid 3245:tid 3276] [client 51.107.222.225:64925] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/no18.php"] [unique_id "aeEuYKESOMTHVLs-uFDfrAAAAQ4"]
[Fri Apr 17 02:45:53.309839 2026] [:error] [pid 11692:tid 11697] [client 51.107.222.225:65021] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/blqjs.php"] [unique_id "aeEuYc1AYuhm4BZwKNopmAAAAgA"]
[Fri Apr 17 02:45:53.891203 2026] [:error] [pid 43482:tid 43496] [client 51.107.222.225:64907] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/blqjs.php"] [unique_id "aeEuYT9SZnuKxlHrct2-XAAAAMw"]
[Fri Apr 17 02:45:54.684106 2026] [:error] [pid 43482:tid 43491] [client 51.107.222.225:63673] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/blqjs.php"] [unique_id "aeEuYj9SZnuKxlHrct2-XgAAAMc"]
[Fri Apr 17 02:45:55.467248 2026] [:error] [pid 11854:tid 11860] [client 51.107.222.225:64353] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/blqjs.php"] [unique_id "aeEuY9xJCSIaqP1XSdal3QAAAkM"]
[Fri Apr 17 02:45:56.106619 2026] [:error] [pid 11854:tid 11877] [client 51.107.222.225:64361] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sk25_1.php"] [unique_id "aeEuZNxJCSIaqP1XSdal5AAAAlQ"]
[Fri Apr 17 02:45:56.822040 2026] [:error] [pid 11692:tid 11701] [client 51.107.222.225:64259] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sk25_1.php"] [unique_id "aeEuZM1AYuhm4BZwKNopmwAAAgQ"]
[Fri Apr 17 02:45:57.444996 2026] [:error] [pid 26102:tid 26124] [client 51.107.222.225:64289] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sk25_1.php"] [unique_id "aeEuZf127aFqw6ALdngi9QAAAZM"]
[Fri Apr 17 02:45:58.032609 2026] [:error] [pid 43386:tid 43431] [client 51.107.222.225:64902] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sk25_1.php"] [unique_id "aeEuZu91GAVgUfhPVDHqjgAAAEs"]
[Fri Apr 17 02:45:58.590372 2026] [:error] [pid 43482:tid 43484] [client 51.107.222.225:64968] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fetch.php"] [unique_id "aeEuZj9SZnuKxlHrct2-ZwAAAMA"]
[Fri Apr 17 02:45:59.346809 2026] [:error] [pid 43387:tid 43459] [client 51.107.222.225:64269] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fetch.php"] [unique_id "aeEuZyBNsONqHxWTakVVCAAAAIg"]
[Fri Apr 17 02:45:59.947802 2026] [:error] [pid 43482:tid 43493] [client 51.107.222.225:64261] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fetch.php"] [unique_id "aeEuZz9SZnuKxlHrct2-awAAAMk"]
[Fri Apr 17 02:46:00.614254 2026] [:error] [pid 26480:tid 26483] [client 51.107.222.225:64917] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fetch.php"] [unique_id "aeEuaAwLDJKTQNfarA2SbAAAAcE"]
[Fri Apr 17 02:46:01.529802 2026] [:error] [pid 43387:tid 43468] [client 51.107.222.225:63709] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "aeEuaSBNsONqHxWTakVVDAAAAI8"]
[Fri Apr 17 02:46:02.091156 2026] [:error] [pid 43482:tid 43502] [client 51.107.222.225:64277] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "aeEuaj9SZnuKxlHrct2-dAAAANI"]
[Fri Apr 17 02:46:03.198125 2026] [:error] [pid 43387:tid 43450] [client 51.107.222.225:64983] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "aeEuayBNsONqHxWTakVVEAAAAII"]
[Fri Apr 17 02:46:04.137776 2026] [:error] [pid 43385:tid 43408] [client 51.107.222.225:64303] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "aeEubMnIxkJaUI8KNs405wAAABM"]
[Fri Apr 17 02:46:04.852661 2026] [:error] [pid 43386:tid 43430] [client 51.107.222.225:64294] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2nzyHnOkEg.php"] [unique_id "aeEubO91GAVgUfhPVDHqogAAAEo"]
[Fri Apr 17 02:46:05.669848 2026] [:error] [pid 4086:tid 4112] [client 51.107.222.225:64326] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2nzyHnOkEg.php"] [unique_id "aeEubVlz7gxl_exM0FpSWQAAAVc"]
[Fri Apr 17 02:46:06.416465 2026] [:error] [pid 26480:tid 26492] [client 51.107.222.225:64963] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2nzyHnOkEg.php"] [unique_id "aeEubgwLDJKTQNfarA2ScwAAAco"]
[Fri Apr 17 02:46:07.079991 2026] [:error] [pid 43386:tid 43428] [client 51.107.222.225:64959] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2nzyHnOkEg.php"] [unique_id "aeEub-91GAVgUfhPVDHqowAAAEg"]
[Fri Apr 17 02:46:07.677648 2026] [:error] [pid 43386:tid 43438] [client 51.107.222.225:64321] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/oircv.php"] [unique_id "aeEub-91GAVgUfhPVDHqpQAAAFI"]
[Fri Apr 17 02:46:08.502892 2026] [:error] [pid 43482:tid 43492] [client 51.107.222.225:64371] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/oircv.php"] [unique_id "aeEucD9SZnuKxlHrct2-gAAAAMg"]
[Fri Apr 17 02:46:09.315032 2026] [:error] [pid 43386:tid 43429] [client 51.107.222.225:65017] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/oircv.php"] [unique_id "aeEuce91GAVgUfhPVDHqpwAAAEk"]
[Fri Apr 17 02:46:09.917440 2026] [:error] [pid 43386:tid 43420] [client 51.107.222.225:64325] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/oircv.php"] [unique_id "aeEuce91GAVgUfhPVDHqqAAAAEA"]
[Fri Apr 17 02:46:10.477101 2026] [:error] [pid 43385:tid 43406] [client 51.107.222.225:64258] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/blnux.php"] [unique_id "aeEucsnIxkJaUI8KNs41CAAAABE"]
[Fri Apr 17 02:46:11.397274 2026] [:error] [pid 43386:tid 43423] [client 51.107.222.225:64348] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/blnux.php"] [unique_id "aeEuc-91GAVgUfhPVDHqrQAAAEM"]
[Fri Apr 17 02:46:12.131326 2026] [:error] [pid 43386:tid 43424] [client 51.107.222.225:64343] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/blnux.php"] [unique_id "aeEudO91GAVgUfhPVDHqsgAAAEQ"]
[Fri Apr 17 02:46:12.866140 2026] [:error] [pid 43387:tid 43450] [client 51.107.222.225:64383] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/blnux.php"] [unique_id "aeEudCBNsONqHxWTakVVHwAAAII"]
[Fri Apr 17 02:46:13.485982 2026] [:error] [pid 43386:tid 43438] [client 51.107.222.225:64965] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "aeEude91GAVgUfhPVDHquAAAAFI"]
[Fri Apr 17 02:46:14.121294 2026] [:error] [pid 4086:tid 4105] [client 51.107.222.225:64276] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "aeEudllz7gxl_exM0FpSXAAAAVE"]
[Fri Apr 17 02:46:14.803149 2026] [:error] [pid 43386:tid 43423] [client 51.107.222.225:64970] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "aeEudu91GAVgUfhPVDHqvgAAAEM"]
[Fri Apr 17 02:46:15.589771 2026] [proxy_fcgi:error] [pid 11692:tid 11709] [client 51.107.222.225:65000] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 02:46:15.852869 2026] [proxy_fcgi:error] [pid 11692:tid 11710] [client 51.107.222.225:65000] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 02:46:16.117350 2026] [proxy_fcgi:error] [pid 11692:tid 11705] [client 51.107.222.225:65000] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 02:46:16.460232 2026] [proxy_fcgi:error] [pid 11692:tid 11703] [client 51.107.222.225:65000] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 02:46:16.722516 2026] [proxy_fcgi:error] [pid 11692:tid 11707] [client 51.107.222.225:65000] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 02:46:16.985046 2026] [proxy_fcgi:error] [pid 11692:tid 11702] [client 51.107.222.225:65000] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 02:46:17.254800 2026] [proxy_fcgi:error] [pid 11692:tid 11718] [client 51.107.222.225:65000] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 02:46:17.517778 2026] [proxy_fcgi:error] [pid 11692:tid 11697] [client 51.107.222.225:65000] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 02:46:17.798229 2026] [proxy_fcgi:error] [pid 11692:tid 11714] [client 51.107.222.225:65000] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 02:46:18.061165 2026] [proxy_fcgi:error] [pid 11692:tid 11708] [client 51.107.222.225:65000] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 02:46:18.549019 2026] [proxy_fcgi:error] [pid 11692:tid 11715] [client 51.107.222.225:65000] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 02:46:18.816881 2026] [:error] [pid 11692:tid 11719] [client 51.107.222.225:65000] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sde.php"] [unique_id "aeEues1AYuhm4BZwKNopuwAAAhY"]
[Fri Apr 17 02:46:19.508837 2026] [:error] [pid 11692:tid 11720] [client 51.107.222.225:64356] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sde.php"] [unique_id "aeEue81AYuhm4BZwKNopvAAAAhc"]
[Fri Apr 17 02:46:20.729121 2026] [:error] [pid 43482:tid 43487] [client 51.107.222.225:64926] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sde.php"] [unique_id "aeEufD9SZnuKxlHrct2-iAAAAMM"]
[Fri Apr 17 02:46:21.809504 2026] [:error] [pid 11854:tid 11878] [client 51.107.222.225:64274] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sde.php"] [unique_id "aeEufdxJCSIaqP1XSdal8wAAAlU"]
[Fri Apr 17 02:46:23.207337 2026] [:error] [pid 11692:tid 11699] [client 51.107.222.225:64986] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wpb.php"] [unique_id "aeEuf81AYuhm4BZwKNopvgAAAgI"]
[Fri Apr 17 02:46:23.960859 2026] [:error] [pid 43387:tid 43448] [client 51.107.222.225:64366] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wpb.php"] [unique_id "aeEufyBNsONqHxWTakVVOAAAAIA"]
[Fri Apr 17 02:46:24.649963 2026] [:error] [pid 43387:tid 43476] [client 51.107.222.225:63691] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wpb.php"] [unique_id "aeEugCBNsONqHxWTakVVPAAAAJc"]
[Fri Apr 17 02:46:25.502244 2026] [:error] [pid 4086:tid 4099] [client 51.107.222.225:64936] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wpb.php"] [unique_id "aeEugVlz7gxl_exM0FpSYwAAAUs"]
[Fri Apr 17 02:46:27.372854 2026] [:error] [pid 43387:tid 43461] [client 51.107.222.225:62793] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Geforce.php"] [unique_id "aeEugyBNsONqHxWTakVVQgAAAIo"]
[Fri Apr 17 02:46:28.776083 2026] [:error] [pid 26480:tid 26483] [client 51.107.222.225:64372] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Geforce.php"] [unique_id "aeEuhAwLDJKTQNfarA2SmgAAAcE"]
[Fri Apr 17 02:46:31.467131 2026] [:error] [pid 26102:tid 26115] [client 51.107.222.225:64905] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Geforce.php"] [unique_id "aeEuh_127aFqw6ALdngjAgAAAYo"]
[Fri Apr 17 02:46:33.372150 2026] [:error] [pid 43482:tid 43491] [client 51.107.222.225:63737] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Geforce.php"] [unique_id "aeEuiT9SZnuKxlHrct2-ngAAAMc"]
[Fri Apr 17 02:46:34.883082 2026] [:error] [pid 43482:tid 43485] [client 51.107.222.225:64918] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/9EaklzMysJ.php"] [unique_id "aeEuij9SZnuKxlHrct2-ogAAAME"]
[Fri Apr 17 02:46:39.482803 2026] [:error] [pid 43482:tid 43485] [client 51.107.222.225:64929] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/9EaklzMysJ.php"] [unique_id "aeEujz9SZnuKxlHrct2-sQAAAME"]
[Fri Apr 17 02:46:40.392895 2026] [:error] [pid 11854:tid 11874] [client 51.107.222.225:64263] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/9EaklzMysJ.php"] [unique_id "aeEukNxJCSIaqP1XSdamBAAAAlE"]
[Fri Apr 17 02:46:41.143157 2026] [:error] [pid 43385:tid 43389] [client 51.107.222.225:63698] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/9EaklzMysJ.php"] [unique_id "aeEukcnIxkJaUI8KNs41bgAAAAA"]
[Fri Apr 17 02:46:42.333966 2026] [:error] [pid 43387:tid 43465] [client 51.107.222.225:64296] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wpxl.php"] [unique_id "aeEukiBNsONqHxWTakVVYgAAAIw"]
[Fri Apr 17 02:46:43.235028 2026] [:error] [pid 43387:tid 43462] [client 51.107.222.225:64256] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wpxl.php"] [unique_id "aeEukyBNsONqHxWTakVVZwAAAIs"]
[Fri Apr 17 02:46:44.171091 2026] [:error] [pid 11854:tid 11871] [client 51.107.222.225:65008] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wpxl.php"] [unique_id "aeEulNxJCSIaqP1XSdamBwAAAk4"]
[Fri Apr 17 02:46:44.787918 2026] [:error] [pid 11692:tid 11704] [client 51.107.222.225:64333] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wpxl.php"] [unique_id "aeEulM1AYuhm4BZwKNoqAAAAAgc"]
[Fri Apr 17 02:46:45.653152 2026] [:error] [pid 26102:tid 26117] [client 51.107.222.225:64344] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/s3FiyJ2WGCnF0p1default.php"] [unique_id "aeEulf127aFqw6ALdngjCgAAAYw"]
[Fri Apr 17 02:46:46.942009 2026] [:error] [pid 43387:tid 43449] [client 51.107.222.225:64903] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/s3FiyJ2WGCnF0p1default.php"] [unique_id "aeEuliBNsONqHxWTakVVbQAAAIE"]
[Fri Apr 17 02:46:47.905490 2026] [:error] [pid 11692:tid 11700] [client 51.107.222.225:63662] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/s3FiyJ2WGCnF0p1default.php"] [unique_id "aeEul81AYuhm4BZwKNoqCQAAAgM"]
[Fri Apr 17 02:46:48.784109 2026] [:error] [pid 26480:tid 26500] [client 51.107.222.225:63740] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/s3FiyJ2WGCnF0p1default.php"] [unique_id "aeEumAwLDJKTQNfarA2SrQAAAdI"]
[Fri Apr 17 02:46:49.636321 2026] [:error] [pid 43387:tid 43459] [client 51.107.222.225:64956] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bfil.php"] [unique_id "aeEumSBNsONqHxWTakVVegAAAIg"]
[Fri Apr 17 02:46:50.326670 2026] [:error] [pid 3245:tid 3270] [client 51.107.222.225:64896] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bfil.php"] [unique_id "aeEumqESOMTHVLs-uFDf2AAAAQg"]
[Fri Apr 17 02:46:51.199911 2026] [:error] [pid 43385:tid 43415] [client 51.107.222.225:63732] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bfil.php"] [unique_id "aeEum8nIxkJaUI8KNs41eAAAABg"]
[Fri Apr 17 02:46:52.214394 2026] [:error] [pid 43386:tid 43442] [client 51.107.222.225:64323] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bfil.php"] [unique_id "aeEunO91GAVgUfhPVDHrFgAAAFU"]
[Fri Apr 17 02:46:52.817075 2026] [:error] [pid 11854:tid 11878] [client 51.107.222.225:64352] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lb.php"] [unique_id "aeEunNxJCSIaqP1XSdamFgAAAlU"]
[Fri Apr 17 02:46:53.670941 2026] [:error] [pid 11854:tid 11875] [client 51.107.222.225:62827] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lb.php"] [unique_id "aeEundxJCSIaqP1XSdamGQAAAlI"]
[Fri Apr 17 02:46:54.564404 2026] [:error] [pid 11854:tid 11871] [client 51.107.222.225:62785] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lb.php"] [unique_id "aeEuntxJCSIaqP1XSdamHAAAAk4"]
[Fri Apr 17 02:46:55.288481 2026] [:error] [pid 43386:tid 43441] [client 51.107.222.225:64979] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lb.php"] [unique_id "aeEun-91GAVgUfhPVDHrHgAAAFQ"]
[Fri Apr 17 02:46:56.201496 2026] [:error] [pid 43386:tid 43444] [client 51.107.222.225:64941] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dx.php"] [unique_id "aeEuoO91GAVgUfhPVDHrJAAAAFc"]
[Fri Apr 17 02:46:56.931000 2026] [:error] [pid 43386:tid 43445] [client 51.107.222.225:64373] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dx.php"] [unique_id "aeEuoO91GAVgUfhPVDHrKgAAAFg"]
[Fri Apr 17 02:46:57.809796 2026] [:error] [pid 3245:tid 3279] [client 51.107.222.225:64351] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dx.php"] [unique_id "aeEuoaESOMTHVLs-uFDf2wAAARE"]
[Fri Apr 17 02:46:58.871828 2026] [:error] [pid 43386:tid 43433] [client 51.107.222.225:64281] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dx.php"] [unique_id "aeEuou91GAVgUfhPVDHrMwAAAE0"]
[Fri Apr 17 02:46:59.644448 2026] [:error] [pid 43482:tid 43487] [client 51.107.222.225:64349] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/menu.php"] [unique_id "aeEuoz9SZnuKxlHrct2-xgAAAMM"]
[Fri Apr 17 02:47:00.358694 2026] [:error] [pid 43387:tid 43456] [client 51.107.222.225:64988] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/menu.php"] [unique_id "aeEupCBNsONqHxWTakVViQAAAIU"]
[Fri Apr 17 02:47:01.233180 2026] [:error] [pid 43387:tid 43459] [client 51.107.222.225:64985] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/menu.php"] [unique_id "aeEupSBNsONqHxWTakVViwAAAIg"]
[Fri Apr 17 02:47:02.598788 2026] [:error] [pid 26480:tid 26488] [client 51.107.222.225:63703] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/menu.php"] [unique_id "aeEupgwLDJKTQNfarA2SugAAAcY"]
[Fri Apr 17 02:47:03.217338 2026] [:error] [pid 43386:tid 43422] [client 51.107.222.225:64278] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/p14rAeWytPdH5hZcscCFdefault.php"] [unique_id "aeEup-91GAVgUfhPVDHrNwAAAEI"]
[Fri Apr 17 02:47:03.954596 2026] [:error] [pid 43386:tid 43427] [client 51.107.222.225:63685] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/p14rAeWytPdH5hZcscCFdefault.php"] [unique_id "aeEup-91GAVgUfhPVDHrPwAAAEc"]
[Fri Apr 17 02:47:05.677657 2026] [:error] [pid 43386:tid 43423] [client 51.107.222.225:64932] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/p14rAeWytPdH5hZcscCFdefault.php"] [unique_id "aeEuqe91GAVgUfhPVDHrUAAAAEM"]
[Fri Apr 17 02:47:07.283101 2026] [:error] [pid 43386:tid 43436] [client 51.107.222.225:63676] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/p14rAeWytPdH5hZcscCFdefault.php"] [unique_id "aeEuq-91GAVgUfhPVDHrYQAAAFA"]
[Fri Apr 17 02:47:08.205982 2026] [:error] [pid 43386:tid 43427] [client 51.107.222.225:62164] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/iindv.php"] [unique_id "aeEurO91GAVgUfhPVDHrYwAAAEc"]
[Fri Apr 17 02:47:09.297838 2026] [:error] [pid 43386:tid 43430] [client 51.107.222.225:62739] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/iindv.php"] [unique_id "aeEure91GAVgUfhPVDHrcAAAAEo"]
[Fri Apr 17 02:47:10.140799 2026] [:error] [pid 26102:tid 26111] [client 51.107.222.225:65023] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/iindv.php"] [unique_id "aeEurv127aFqw6ALdngjHQAAAYY"]
[Fri Apr 17 02:47:10.812899 2026] [:error] [pid 26102:tid 26120] [client 51.107.222.225:64262] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/iindv.php"] [unique_id "aeEurv127aFqw6ALdngjHwAAAY8"]
[Fri Apr 17 02:47:11.535030 2026] [:error] [pid 43385:tid 43400] [client 51.107.222.225:63642] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/maintura.php"] [unique_id "aeEur8nIxkJaUI8KNs41fAAAAAs"]
[Fri Apr 17 02:47:12.758355 2026] [:error] [pid 43387:tid 43453] [client 51.107.222.225:64927] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/maintura.php"] [unique_id "aeEusCBNsONqHxWTakVVnAAAAIM"]
[Fri Apr 17 02:47:13.732062 2026] [:error] [pid 43386:tid 43443] [client 51.107.222.225:64381] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/maintura.php"] [unique_id "aeEuse91GAVgUfhPVDHriAAAAFY"]
[Fri Apr 17 02:47:14.718409 2026] [:error] [pid 43386:tid 43424] [client 51.107.222.225:64275] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/maintura.php"] [unique_id "aeEusu91GAVgUfhPVDHrjgAAAEQ"]
[Fri Apr 17 02:47:15.806078 2026] [:error] [pid 43482:tid 43497] [client 51.107.222.225:62816] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/iee52ruz0s81ndrdefault.php"] [unique_id "aeEusz9SZnuKxlHrct2-0QAAAM0"]
[Fri Apr 17 02:47:17.250143 2026] [:error] [pid 26102:tid 26124] [client 51.107.222.225:64908] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/iee52ruz0s81ndrdefault.php"] [unique_id "aeEutf127aFqw6ALdngjJQAAAZM"]
[Fri Apr 17 02:47:17.974761 2026] [:error] [pid 43387:tid 43474] [client 51.107.222.225:64993] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/iee52ruz0s81ndrdefault.php"] [unique_id "aeEutSBNsONqHxWTakVVpAAAAJU"]
[Fri Apr 17 02:47:19.005631 2026] [proxy_fcgi:error] [pid 43386:tid 43426] [client 51.107.222.225:64335] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 02:47:19.268885 2026] [proxy_fcgi:error] [pid 43386:tid 43423] [client 51.107.222.225:64335] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 02:47:19.685385 2026] [proxy_fcgi:error] [pid 43386:tid 43443] [client 51.107.222.225:64335] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 02:47:19.948631 2026] [proxy_fcgi:error] [pid 43386:tid 43422] [client 51.107.222.225:64335] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 02:47:20.257584 2026] [proxy_fcgi:error] [pid 43386:tid 43420] [client 51.107.222.225:64335] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 02:47:20.520355 2026] [proxy_fcgi:error] [pid 43386:tid 43421] [client 51.107.222.225:64335] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 02:47:20.808550 2026] [proxy_fcgi:error] [pid 43386:tid 43424] [client 51.107.222.225:64335] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 02:47:21.071150 2026] [proxy_fcgi:error] [pid 43386:tid 43441] [client 51.107.222.225:64335] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 02:47:21.352245 2026] [proxy_fcgi:error] [pid 43386:tid 43437] [client 51.107.222.225:64335] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 02:47:21.615442 2026] [proxy_fcgi:error] [pid 43386:tid 43444] [client 51.107.222.225:64335] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 02:47:21.878212 2026] [proxy_fcgi:error] [pid 43386:tid 43425] [client 51.107.222.225:64335] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 02:47:22.153220 2026] [:error] [pid 43386:tid 43430] [client 51.107.222.225:64335] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zc-243.php"] [unique_id "aeEuuu91GAVgUfhPVDHrowAAAEo"]
[Fri Apr 17 02:47:23.563008 2026] [:error] [pid 26480:tid 26486] [client 51.107.222.225:64966] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zc-243.php"] [unique_id "aeEuuwwLDJKTQNfarA2SxwAAAcQ"]
[Fri Apr 17 02:47:24.862125 2026] [:error] [pid 26480:tid 26495] [client 51.107.222.225:64935] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zc-243.php"] [unique_id "aeEuvAwLDJKTQNfarA2SygAAAc0"]
[Fri Apr 17 02:47:26.497167 2026] [:error] [pid 4086:tid 4100] [client 51.107.222.225:64958] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zc-243.php"] [unique_id "aeEuvllz7gxl_exM0FpSkgAAAUw"]
[Fri Apr 17 02:47:27.719507 2026] [:error] [pid 26480:tid 26496] [client 51.107.222.225:64319] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/pm90apbv3v5fvgkbguyiCdefault.php"] [unique_id "aeEuvwwLDJKTQNfarA2S0AAAAc4"]
[Fri Apr 17 02:47:29.373999 2026] [:error] [pid 43386:tid 43428] [client 51.107.222.225:63637] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/pm90apbv3v5fvgkbguyiCdefault.php"] [unique_id "aeEuwe91GAVgUfhPVDHrrgAAAEg"]
[Fri Apr 17 02:47:31.117325 2026] [:error] [pid 11854:tid 11859] [client 51.107.222.225:64931] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/pm90apbv3v5fvgkbguyiCdefault.php"] [unique_id "aeEuw9xJCSIaqP1XSdamOQAAAkI"]
[Fri Apr 17 02:47:31.982401 2026] [:error] [pid 43386:tid 43422] [client 51.107.222.225:64283] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/pm90apbv3v5fvgkbguyiCdefault.php"] [unique_id "aeEuw-91GAVgUfhPVDHrtQAAAEI"]
[Fri Apr 17 02:47:32.788210 2026] [:error] [pid 43387:tid 43461] [client 51.107.222.225:64919] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/CDX1.php"] [unique_id "aeEuxCBNsONqHxWTakVVtQAAAIo"]
[Fri Apr 17 02:47:33.357136 2026] [:error] [pid 43386:tid 43424] [client 51.107.222.225:64980] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/CDX1.php"] [unique_id "aeEuxe91GAVgUfhPVDHruAAAAEQ"]
[Fri Apr 17 02:47:33.961002 2026] [:error] [pid 43387:tid 43470] [client 51.107.222.225:63684] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/CDX1.php"] [unique_id "aeEuxSBNsONqHxWTakVVtwAAAJE"]
[Fri Apr 17 02:47:34.630748 2026] [:error] [pid 43387:tid 43477] [client 51.107.222.225:63671] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/CDX1.php"] [unique_id "aeEuxiBNsONqHxWTakVVuAAAAJg"]
[Fri Apr 17 02:47:35.340807 2026] [:error] [pid 43387:tid 43469] [client 51.107.222.225:64315] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "aeEuxyBNsONqHxWTakVVuwAAAJA"]
[Fri Apr 17 02:47:36.315968 2026] [:error] [pid 43386:tid 43445] [client 51.107.222.225:64382] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "aeEuyO91GAVgUfhPVDHrvAAAAFg"]
[Fri Apr 17 02:47:37.073839 2026] [:error] [pid 43387:tid 43467] [client 51.107.222.225:64964] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "aeEuySBNsONqHxWTakVVwQAAAI4"]
[Fri Apr 17 02:47:38.354520 2026] [:error] [pid 43482:tid 43488] [client 51.107.222.225:64358] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "aeEuyj9SZnuKxlHrct2-5wAAAMQ"]
[Fri Apr 17 02:47:39.612942 2026] [:error] [pid 43482:tid 43504] [client 51.107.222.225:63694] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "aeEuyz9SZnuKxlHrct2-8AAAANQ"]
[Fri Apr 17 02:47:41.200640 2026] [:error] [pid 26480:tid 26482] [client 51.107.222.225:64359] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "aeEuzQwLDJKTQNfarA2S4AAAAcA"]
[Fri Apr 17 02:47:41.840454 2026] [:error] [pid 43482:tid 43490] [client 51.107.222.225:62750] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "aeEuzT9SZnuKxlHrct2-9AAAAMY"]
[Fri Apr 17 02:47:42.842836 2026] [:error] [pid 43387:tid 43459] [client 51.107.222.225:62826] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "aeEuziBNsONqHxWTakVVyAAAAIg"]
[Fri Apr 17 02:47:43.968510 2026] [:error] [pid 43482:tid 43487] [client 51.107.222.225:63720] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aligk.php"] [unique_id "aeEuzz9SZnuKxlHrct2--AAAAMM"]
[Fri Apr 17 02:47:44.578717 2026] [:error] [pid 43387:tid 43449] [client 51.107.222.225:64272] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aligk.php"] [unique_id "aeEu0CBNsONqHxWTakVVzwAAAIE"]
[Fri Apr 17 02:47:45.267773 2026] [:error] [pid 43386:tid 43427] [client 51.107.222.225:63647] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aligk.php"] [unique_id "aeEu0e91GAVgUfhPVDHr0QAAAEc"]
[Fri Apr 17 02:47:46.028618 2026] [:error] [pid 43385:tid 43415] [client 51.107.222.225:64282] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aligk.php"] [unique_id "aeEu0snIxkJaUI8KNs416AAAABg"]
[Fri Apr 17 02:47:47.044556 2026] [:error] [pid 26480:tid 26493] [client 51.107.222.225:64327] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file61.php"] [unique_id "aeEu0wwLDJKTQNfarA2S5wAAAcs"]
[Fri Apr 17 02:47:48.160425 2026] [:error] [pid 43387:tid 43461] [client 51.107.222.225:64999] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file61.php"] [unique_id "aeEu1CBNsONqHxWTakVV0QAAAIo"]
[Fri Apr 17 02:47:49.125029 2026] [:error] [pid 43387:tid 43472] [client 51.107.222.225:63680] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file61.php"] [unique_id "aeEu1SBNsONqHxWTakVV1QAAAJM"]
[Fri Apr 17 02:47:49.761304 2026] [:error] [pid 43387:tid 43462] [client 51.107.222.225:63623] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file61.php"] [unique_id "aeEu1SBNsONqHxWTakVV1wAAAIs"]
[Fri Apr 17 02:47:50.475880 2026] [:error] [pid 43385:tid 43402] [client 51.107.222.225:64377] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xwx1.php"] [unique_id "aeEu1snIxkJaUI8KNs418wAAAA0"]
[Fri Apr 17 02:47:51.036545 2026] [:error] [pid 43386:tid 43434] [client 51.107.222.225:64299] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xwx1.php"] [unique_id "aeEu1-91GAVgUfhPVDHr1QAAAE4"]
[Fri Apr 17 02:47:51.691651 2026] [:error] [pid 43386:tid 43439] [client 51.107.222.225:65019] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xwx1.php"] [unique_id "aeEu1-91GAVgUfhPVDHr2AAAAFM"]
[Fri Apr 17 02:47:52.213461 2026] [:error] [pid 43386:tid 43428] [client 51.107.222.225:64345] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xwx1.php"] [unique_id "aeEu2O91GAVgUfhPVDHr2wAAAEg"]
[Fri Apr 17 02:47:52.842936 2026] [:error] [pid 3245:tid 3265] [client 51.107.222.225:64933] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tx79.php"] [unique_id "aeEu2KESOMTHVLs-uFDf_QAAAQM"]
[Fri Apr 17 02:47:53.410983 2026] [:error] [pid 43385:tid 43403] [client 51.107.222.225:64955] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tx79.php"] [unique_id "aeEu2cnIxkJaUI8KNs419QAAAA4"]
[Fri Apr 17 02:47:54.052719 2026] [:error] [pid 43386:tid 43425] [client 51.107.222.225:64301] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tx79.php"] [unique_id "aeEu2u91GAVgUfhPVDHr4QAAAEU"]
[Fri Apr 17 02:47:54.603988 2026] [:error] [pid 43386:tid 43444] [client 51.107.222.225:64901] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tx79.php"] [unique_id "aeEu2u91GAVgUfhPVDHr5AAAAFc"]
[Fri Apr 17 02:47:55.200246 2026] [:error] [pid 43386:tid 43422] [client 51.107.222.225:63710] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/CDX2.php"] [unique_id "aeEu2-91GAVgUfhPVDHr5gAAAEI"]
[Fri Apr 17 02:47:55.747367 2026] [:error] [pid 43386:tid 43424] [client 51.107.222.225:64310] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/CDX2.php"] [unique_id "aeEu2-91GAVgUfhPVDHr6AAAAEQ"]
[Fri Apr 17 02:47:56.334203 2026] [:error] [pid 26480:tid 26499] [client 51.107.222.225:64967] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/CDX2.php"] [unique_id "aeEu3AwLDJKTQNfarA2S6gAAAdE"]
[Fri Apr 17 02:47:57.095259 2026] [:error] [pid 43385:tid 43395] [client 51.107.222.225:65007] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/CDX2.php"] [unique_id "aeEu3cnIxkJaUI8KNs419gAAAAY"]
[Fri Apr 17 02:47:57.697869 2026] [:error] [pid 43386:tid 43439] [client 51.107.222.225:64910] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/666.php"] [unique_id "aeEu3e91GAVgUfhPVDHr6QAAAFM"]
[Fri Apr 17 02:47:58.423959 2026] [:error] [pid 43482:tid 43508] [client 51.107.222.225:64369] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/666.php"] [unique_id "aeEu3j9SZnuKxlHrct2_BwAAANg"]
[Fri Apr 17 02:47:59.122441 2026] [:error] [pid 43386:tid 43445] [client 51.107.222.225:64942] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/666.php"] [unique_id "aeEu3-91GAVgUfhPVDHr6wAAAFg"]
[Fri Apr 17 02:47:59.757552 2026] [:error] [pid 43386:tid 43431] [client 51.107.222.225:63626] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/666.php"] [unique_id "aeEu3-91GAVgUfhPVDHr7gAAAEs"]
[Fri Apr 17 02:48:00.332889 2026] [:error] [pid 43387:tid 43462] [client 51.107.222.225:64949] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wtiiy.php"] [unique_id "aeEu4CBNsONqHxWTakVV4AAAAIs"]
[Fri Apr 17 02:48:00.943511 2026] [:error] [pid 43482:tid 43500] [client 51.107.222.225:63619] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wtiiy.php"] [unique_id "aeEu4D9SZnuKxlHrct2_DQAAANA"]
[Fri Apr 17 02:48:01.585408 2026] [:error] [pid 26102:tid 26110] [client 51.107.222.225:64976] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wtiiy.php"] [unique_id "aeEu4f127aFqw6ALdngjLAAAAYU"]
[Fri Apr 17 02:48:02.582505 2026] [:error] [pid 11692:tid 11715] [client 51.107.222.225:63701] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wtiiy.php"] [unique_id "aeEu4s1AYuhm4BZwKNoqJAAAAhI"]
[Fri Apr 17 02:48:03.279568 2026] [:error] [pid 43482:tid 43487] [client 51.107.222.225:64978] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Sanskrit.php"] [unique_id "aeEu4z9SZnuKxlHrct2_EwAAAMM"]
[Fri Apr 17 02:48:03.962289 2026] [:error] [pid 43387:tid 43468] [client 51.107.222.225:64328] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Sanskrit.php"] [unique_id "aeEu4yBNsONqHxWTakVV5QAAAI8"]
[Fri Apr 17 02:48:04.527079 2026] [:error] [pid 43387:tid 43448] [client 51.107.222.225:64304] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Sanskrit.php"] [unique_id "aeEu5CBNsONqHxWTakVV6AAAAIA"]
[Fri Apr 17 02:48:05.077619 2026] [:error] [pid 43387:tid 43454] [client 51.107.222.225:63724] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Sanskrit.php"] [unique_id "aeEu5SBNsONqHxWTakVV7AAAAIQ"]
[Fri Apr 17 02:48:05.652944 2026] [:error] [pid 26102:tid 26125] [client 51.107.222.225:65016] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/motu.php"] [unique_id "aeEu5f127aFqw6ALdngjMQAAAZQ"]
[Fri Apr 17 02:48:06.288122 2026] [:error] [pid 26102:tid 26107] [client 51.107.222.225:64972] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/motu.php"] [unique_id "aeEu5v127aFqw6ALdngjMwAAAYI"]
[Fri Apr 17 02:48:07.193663 2026] [:error] [pid 11854:tid 11864] [client 51.107.222.225:64899] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/motu.php"] [unique_id "aeEu59xJCSIaqP1XSdambwAAAkc"]
[Fri Apr 17 02:48:07.881737 2026] [:error] [pid 43386:tid 43427] [client 51.107.222.225:63728] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/motu.php"] [unique_id "aeEu5-91GAVgUfhPVDHr-AAAAEc"]
[Fri Apr 17 02:48:08.428712 2026] [:error] [pid 43387:tid 43456] [client 51.107.222.225:64953] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/amax.php"] [unique_id "aeEu6CBNsONqHxWTakVV8QAAAIU"]
[Fri Apr 17 02:48:09.035991 2026] [:error] [pid 43386:tid 43421] [client 51.107.222.225:64290] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/amax.php"] [unique_id "aeEu6e91GAVgUfhPVDHr_wAAAEE"]
[Fri Apr 17 02:48:09.791322 2026] [:error] [pid 11692:tid 11713] [client 51.107.222.225:64928] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/amax.php"] [unique_id "aeEu6c1AYuhm4BZwKNoqKAAAAhA"]
[Fri Apr 17 02:48:10.414170 2026] [:error] [pid 43387:tid 43449] [client 51.107.222.225:64952] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/amax.php"] [unique_id "aeEu6iBNsONqHxWTakVV9wAAAIE"]
[Fri Apr 17 02:48:11.007567 2026] [:error] [pid 43387:tid 43453] [client 51.107.222.225:64266] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "aeEu6yBNsONqHxWTakVV-AAAAIM"]
[Fri Apr 17 02:48:11.819810 2026] [:error] [pid 43385:tid 43401] [client 51.107.222.225:62726] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "aeEu68nIxkJaUI8KNs41_gAAAAw"]
[Fri Apr 17 02:48:12.449251 2026] [:error] [pid 43385:tid 43399] [client 51.107.222.225:64322] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "aeEu7MnIxkJaUI8KNs41_wAAAAo"]
[Fri Apr 17 02:48:13.100871 2026] [:error] [pid 43482:tid 43505] [client 51.107.222.225:64367] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "aeEu7T9SZnuKxlHrct2_HwAAANU"]
[Fri Apr 17 02:48:13.743685 2026] [:error] [pid 43386:tid 43424] [client 51.107.222.225:65015] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gifclass.php"] [unique_id "aeEu7e91GAVgUfhPVDHsBwAAAEQ"]
[Fri Apr 17 02:48:14.280148 2026] [:error] [pid 43387:tid 43477] [client 51.107.222.225:64271] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gifclass.php"] [unique_id "aeEu7iBNsONqHxWTakVV_gAAAJg"]
[Fri Apr 17 02:48:14.884566 2026] [:error] [pid 43387:tid 43459] [client 51.107.222.225:64374] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gifclass.php"] [unique_id "aeEu7iBNsONqHxWTakVWAwAAAIg"]
[Fri Apr 17 02:48:15.514037 2026] [:error] [pid 43386:tid 43420] [client 51.107.222.225:64376] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gifclass.php"] [unique_id "aeEu7-91GAVgUfhPVDHsCwAAAEA"]
[Fri Apr 17 02:48:16.139601 2026] [:error] [pid 43386:tid 43428] [client 51.107.222.225:65014] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-the.php"] [unique_id "aeEu8O91GAVgUfhPVDHsDQAAAEg"]
[Fri Apr 17 02:48:16.774813 2026] [:error] [pid 43386:tid 43444] [client 51.107.222.225:64331] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-the.php"] [unique_id "aeEu8O91GAVgUfhPVDHsDwAAAFc"]
[Fri Apr 17 02:48:17.941565 2026] [:error] [pid 11692:tid 11717] [client 51.107.222.225:64334] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-the.php"] [unique_id "aeEu8c1AYuhm4BZwKNoqKgAAAhQ"]
[Fri Apr 17 02:48:18.825682 2026] [:error] [pid 43386:tid 43424] [client 51.107.222.225:64991] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-the.php"] [unique_id "aeEu8u91GAVgUfhPVDHsFAAAAEQ"]
[Fri Apr 17 02:48:19.653427 2026] [:error] [pid 43387:tid 43461] [client 51.107.222.225:63711] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jga.php"] [unique_id "aeEu8yBNsONqHxWTakVWDgAAAIo"]
[Fri Apr 17 02:48:20.360776 2026] [:error] [pid 43387:tid 43467] [client 51.107.222.225:63628] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jga.php"] [unique_id "aeEu9CBNsONqHxWTakVWFAAAAI4"]
[Fri Apr 17 02:48:21.299029 2026] [proxy_fcgi:error] [pid 43385:tid 43406] [client 51.107.222.225:62824] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 02:48:21.671640 2026] [proxy_fcgi:error] [pid 43385:tid 43404] [client 51.107.222.225:62824] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 02:48:21.938012 2026] [proxy_fcgi:error] [pid 43385:tid 43398] [client 51.107.222.225:62824] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 02:48:22.206832 2026] [proxy_fcgi:error] [pid 43385:tid 43410] [client 51.107.222.225:62824] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 02:48:22.561956 2026] [proxy_fcgi:error] [pid 43385:tid 43413] [client 51.107.222.225:62824] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 02:48:22.836535 2026] [proxy_fcgi:error] [pid 43385:tid 43393] [client 51.107.222.225:62824] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 02:48:23.180023 2026] [proxy_fcgi:error] [pid 43385:tid 43400] [client 51.107.222.225:62824] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 02:48:23.453921 2026] [proxy_fcgi:error] [pid 43385:tid 43390] [client 51.107.222.225:62824] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 02:48:23.870848 2026] [proxy_fcgi:error] [pid 43385:tid 43389] [client 51.107.222.225:62824] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 02:48:24.216250 2026] [proxy_fcgi:error] [pid 43385:tid 43401] [client 51.107.222.225:62824] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 02:48:24.479335 2026] [proxy_fcgi:error] [pid 43385:tid 43407] [client 51.107.222.225:62824] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 02:48:24.740961 2026] [:error] [pid 43385:tid 43399] [client 51.107.222.225:62824] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a7.php"] [unique_id "aeEu-MnIxkJaUI8KNs42EgAAAAo"]
[Fri Apr 17 02:48:25.446769 2026] [:error] [pid 43387:tid 43453] [client 51.107.222.225:63681] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a7.php"] [unique_id "aeEu-SBNsONqHxWTakVWHwAAAIM"]
[Fri Apr 17 02:48:26.085793 2026] [:error] [pid 43387:tid 43474] [client 51.107.222.225:63654] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a7.php"] [unique_id "aeEu-iBNsONqHxWTakVWIwAAAJU"]
[Fri Apr 17 02:48:26.842227 2026] [:error] [pid 43482:tid 43505] [client 51.107.222.225:64257] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a7.php"] [unique_id "aeEu-j9SZnuKxlHrct2_LgAAANU"]
[Fri Apr 17 02:48:27.568353 2026] [:error] [pid 26480:tid 26483] [client 51.107.222.225:64945] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bgymj.php"] [unique_id "aeEu-wwLDJKTQNfarA2S7gAAAcE"]
[Fri Apr 17 02:48:28.942643 2026] [:error] [pid 43386:tid 43420] [client 51.107.222.225:64273] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bgymj.php"] [unique_id "aeEu_O91GAVgUfhPVDHsGwAAAEA"]
[Fri Apr 17 02:48:29.893986 2026] [:error] [pid 11854:tid 11875] [client 51.107.222.225:64924] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bgymj.php"] [unique_id "aeEu_dxJCSIaqP1XSdamcgAAAlI"]
[Fri Apr 17 02:48:30.729782 2026] [:error] [pid 26480:tid 26501] [client 51.107.222.225:64308] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bgymj.php"] [unique_id "aeEu_gwLDJKTQNfarA2S7wAAAdM"]
[Fri Apr 17 02:48:31.526673 2026] [:error] [pid 26480:tid 26506] [client 51.107.222.225:62820] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lib.php"] [unique_id "aeEu_wwLDJKTQNfarA2S8gAAAdg"]
[Fri Apr 17 02:48:32.166960 2026] [:error] [pid 26480:tid 26493] [client 51.107.222.225:62821] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lib.php"] [unique_id "aeEvAAwLDJKTQNfarA2S8wAAAcs"]
[Fri Apr 17 02:48:32.911630 2026] [:error] [pid 43387:tid 43449] [client 51.107.222.225:64284] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lib.php"] [unique_id "aeEvACBNsONqHxWTakVWLwAAAIE"]
[Fri Apr 17 02:48:34.362352 2026] [:error] [pid 43387:tid 43461] [client 51.107.222.225:64994] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lib.php"] [unique_id "aeEvAiBNsONqHxWTakVWOQAAAIo"]
[Fri Apr 17 02:48:35.205004 2026] [:error] [pid 43387:tid 43477] [client 51.107.222.225:64286] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bolt.php"] [unique_id "aeEvAyBNsONqHxWTakVWPgAAAJg"]
[Fri Apr 17 02:48:35.845895 2026] [:error] [pid 11854:tid 11859] [client 51.107.222.225:63633] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bolt.php"] [unique_id "aeEvA9xJCSIaqP1XSdamdAAAAkI"]
[Fri Apr 17 02:48:36.469844 2026] [:error] [pid 43387:tid 43462] [client 51.107.222.225:63713] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bolt.php"] [unique_id "aeEvBCBNsONqHxWTakVWRQAAAIs"]
[Fri Apr 17 02:48:37.098054 2026] [:error] [pid 11692:tid 11701] [client 51.107.222.225:63722] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bolt.php"] [unique_id "aeEvBc1AYuhm4BZwKNoqLwAAAgQ"]
[Fri Apr 17 02:48:37.796197 2026] [:error] [pid 43386:tid 43424] [client 51.107.222.225:64287] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file61.php"] [unique_id "aeEvBe91GAVgUfhPVDHsIAAAAEQ"]
[Fri Apr 17 02:48:38.521634 2026] [:error] [pid 11692:tid 11720] [client 51.107.222.225:64943] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file61.php"] [unique_id "aeEvBs1AYuhm4BZwKNoqMAAAAhc"]
[Fri Apr 17 02:48:39.344153 2026] [:error] [pid 43387:tid 43474] [client 51.107.222.225:64347] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file61.php"] [unique_id "aeEvByBNsONqHxWTakVWUwAAAJU"]
[Fri Apr 17 02:48:40.049664 2026] [:error] [pid 43387:tid 43454] [client 51.107.222.225:63730] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file61.php"] [unique_id "aeEvCCBNsONqHxWTakVWVQAAAIQ"]
[Fri Apr 17 02:48:40.617356 2026] [:error] [pid 43386:tid 43443] [client 51.107.222.225:65009] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/uuu.php"] [unique_id "aeEvCO91GAVgUfhPVDHsIwAAAFY"]
[Fri Apr 17 02:48:41.254838 2026] [:error] [pid 43387:tid 43473] [client 51.107.222.225:62829] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/uuu.php"] [unique_id "aeEvCSBNsONqHxWTakVWVwAAAJQ"]
[Fri Apr 17 02:48:41.896548 2026] [:error] [pid 43482:tid 43507] [client 51.107.222.225:63666] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/uuu.php"] [unique_id "aeEvCT9SZnuKxlHrct2_MwAAANc"]
[Fri Apr 17 02:48:42.504019 2026] [:error] [pid 43482:tid 43487] [client 51.107.222.225:63734] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/uuu.php"] [unique_id "aeEvCj9SZnuKxlHrct2_NgAAAMM"]
[Fri Apr 17 02:48:43.259540 2026] [:error] [pid 43387:tid 43456] [client 51.107.222.225:63640] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gptsh.php"] [unique_id "aeEvCyBNsONqHxWTakVWXAAAAIU"]
[Fri Apr 17 02:48:43.958563 2026] [:error] [pid 43387:tid 43461] [client 51.107.222.225:64329] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gptsh.php"] [unique_id "aeEvCyBNsONqHxWTakVWXwAAAIo"]
[Fri Apr 17 02:48:44.737424 2026] [:error] [pid 43386:tid 43423] [client 51.107.222.225:64982] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gptsh.php"] [unique_id "aeEvDO91GAVgUfhPVDHsJgAAAEM"]
[Fri Apr 17 02:48:45.414060 2026] [:error] [pid 43482:tid 43503] [client 51.107.222.225:64341] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gptsh.php"] [unique_id "aeEvDT9SZnuKxlHrct2_QQAAANM"]
[Fri Apr 17 02:48:46.068876 2026] [:error] [pid 26480:tid 26486] [client 51.107.222.225:62772] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "aeEvDgwLDJKTQNfarA2S9wAAAcQ"]
[Fri Apr 17 02:48:46.665176 2026] [:error] [pid 43386:tid 43439] [client 51.107.222.225:62843] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "aeEvDu91GAVgUfhPVDHsKAAAAFM"]
[Fri Apr 17 02:48:47.312998 2026] [:error] [pid 4086:tid 4105] [client 51.107.222.225:63630] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "aeEvD1lz7gxl_exM0FpSmgAAAVE"]
[Fri Apr 17 02:48:47.893300 2026] [:error] [pid 43387:tid 43456] [client 51.107.222.225:63636] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "aeEvDyBNsONqHxWTakVWZgAAAIU"]
[Fri Apr 17 02:48:48.498492 2026] [:error] [pid 43387:tid 43448] [client 51.107.222.225:65001] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sid3.php"] [unique_id "aeEvECBNsONqHxWTakVWZwAAAIA"]
[Fri Apr 17 02:48:49.182738 2026] [:error] [pid 43387:tid 43457] [client 51.107.222.225:63690] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sid3.php"] [unique_id "aeEvESBNsONqHxWTakVWawAAAIY"]
[Fri Apr 17 02:48:50.217899 2026] [:error] [pid 43387:tid 43475] [client 51.107.222.225:64267] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sid3.php"] [unique_id "aeEvEiBNsONqHxWTakVWcwAAAJY"]
[Fri Apr 17 02:48:51.581242 2026] [:error] [pid 43387:tid 43462] [client 51.107.222.225:64346] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sid3.php"] [unique_id "aeEvEyBNsONqHxWTakVWfwAAAIs"]
[Fri Apr 17 02:48:52.995992 2026] [:error] [pid 11854:tid 11877] [client 51.107.222.225:62723] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "aeEvFNxJCSIaqP1XSdamhAAAAlQ"]
[Fri Apr 17 02:48:54.788610 2026] [:error] [pid 11692:tid 11712] [client 51.107.222.225:63669] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "aeEvFs1AYuhm4BZwKNoqMwAAAg8"]
[Fri Apr 17 02:48:55.601280 2026] [:error] [pid 11692:tid 11710] [client 51.107.222.225:63645] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "aeEvF81AYuhm4BZwKNoqNgAAAg0"]
[Fri Apr 17 02:48:56.641823 2026] [:error] [pid 43386:tid 43423] [client 51.107.222.225:64909] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "aeEvGO91GAVgUfhPVDHsRQAAAEM"]
[Fri Apr 17 02:48:58.179550 2026] [:error] [pid 4086:tid 4107] [client 51.107.222.225:62810] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Cap.php"] [unique_id "aeEvGllz7gxl_exM0FpSnAAAAVM"]
[Fri Apr 17 02:48:58.976936 2026] [:error] [pid 43482:tid 43486] [client 51.107.222.225:63692] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Cap.php"] [unique_id "aeEvGj9SZnuKxlHrct2_VQAAAMI"]
[Fri Apr 17 02:48:59.687127 2026] [:error] [pid 43482:tid 43497] [client 51.107.222.225:62801] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Cap.php"] [unique_id "aeEvGz9SZnuKxlHrct2_VwAAAM0"]
[Fri Apr 17 02:49:00.251523 2026] [:error] [pid 43385:tid 43396] [client 51.107.222.225:62164] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Cap.php"] [unique_id "aeEvHMnIxkJaUI8KNs42IwAAAAc"]
[Fri Apr 17 02:49:00.943170 2026] [:error] [pid 26480:tid 26492] [client 51.107.222.225:63702] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "aeEvHAwLDJKTQNfarA2S_AAAAco"]
[Fri Apr 17 02:49:01.635414 2026] [:error] [pid 43387:tid 43466] [client 51.107.222.225:64318] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "aeEvHSBNsONqHxWTakVWpQAAAI0"]
[Fri Apr 17 02:49:02.263009 2026] [:error] [pid 43386:tid 43428] [client 51.107.222.225:63620] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "aeEvHu91GAVgUfhPVDHsSgAAAEg"]
[Fri Apr 17 02:49:03.026756 2026] [:error] [pid 43385:tid 43411] [client 51.107.222.225:63677] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "aeEvH8nIxkJaUI8KNs42JwAAABU"]
[Fri Apr 17 02:49:03.787512 2026] [:error] [pid 43482:tid 43493] [client 51.107.222.225:63632] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/torsa1.php"] [unique_id "aeEvHz9SZnuKxlHrct2_WwAAAMk"]
[Fri Apr 17 02:49:04.414107 2026] [:error] [pid 43482:tid 43499] [client 51.107.222.225:62829] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/torsa1.php"] [unique_id "aeEvID9SZnuKxlHrct2_XgAAAM8"]
[Fri Apr 17 02:49:05.125823 2026] [:error] [pid 43482:tid 43494] [client 51.107.222.225:63660] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/torsa1.php"] [unique_id "aeEvIT9SZnuKxlHrct2_ZAAAAMo"]
[Fri Apr 17 02:49:05.951471 2026] [:error] [pid 43482:tid 43487] [client 51.107.222.225:64339] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/torsa1.php"] [unique_id "aeEvIT9SZnuKxlHrct2_ZgAAAMM"]
[Fri Apr 17 02:49:07.382669 2026] [:error] [pid 43386:tid 43422] [client 51.107.222.225:64379] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sadcut1.php"] [unique_id "aeEvI-91GAVgUfhPVDHsYQAAAEI"]
[Fri Apr 17 02:49:08.126821 2026] [:error] [pid 43386:tid 43443] [client 51.107.222.225:62836] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sadcut1.php"] [unique_id "aeEvJO91GAVgUfhPVDHsaQAAAFY"]
[Fri Apr 17 02:49:09.636896 2026] [:error] [pid 43386:tid 43428] [client 51.107.222.225:63696] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sadcut1.php"] [unique_id "aeEvJe91GAVgUfhPVDHsbgAAAEg"]
[Fri Apr 17 02:49:10.857163 2026] [:error] [pid 43482:tid 43485] [client 51.107.222.225:63658] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sadcut1.php"] [unique_id "aeEvJj9SZnuKxlHrct2_dQAAAME"]
[Fri Apr 17 02:49:12.054631 2026] [:error] [pid 26102:tid 26125] [client 51.107.222.225:63706] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zoper1.php"] [unique_id "aeEvKP127aFqw6ALdngjRwAAAZQ"]
[Fri Apr 17 02:49:13.713639 2026] [:error] [pid 43386:tid 43427] [client 51.107.222.225:62791] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zoper1.php"] [unique_id "aeEvKe91GAVgUfhPVDHsdwAAAEc"]
[Fri Apr 17 02:49:15.372820 2026] [:error] [pid 43385:tid 43399] [client 51.107.222.225:62815] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zoper1.php"] [unique_id "aeEvK8nIxkJaUI8KNs42NAAAAAo"]
[Fri Apr 17 02:49:16.265750 2026] [:error] [pid 43482:tid 43494] [client 51.107.222.225:63659] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zoper1.php"] [unique_id "aeEvLD9SZnuKxlHrct2_hQAAAMo"]
[Fri Apr 17 02:49:16.958918 2026] [:error] [pid 43482:tid 43488] [client 51.107.222.225:63718] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ortasekerli1.php"] [unique_id "aeEvLD9SZnuKxlHrct2_hwAAAMQ"]
[Fri Apr 17 02:49:18.882583 2026] [:error] [pid 26102:tid 26119] [client 51.107.222.225:63653] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ortasekerli1.php"] [unique_id "aeEvLv127aFqw6ALdngjUgAAAY4"]
[Fri Apr 17 02:49:19.679639 2026] [:error] [pid 43386:tid 43427] [client 51.107.222.225:62757] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ortasekerli1.php"] [unique_id "aeEvL-91GAVgUfhPVDHshQAAAEc"]
[Fri Apr 17 02:49:21.085317 2026] [:error] [pid 43385:tid 43392] [client 51.107.222.225:63634] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ortasekerli1.php"] [unique_id "aeEvMcnIxkJaUI8KNs42QQAAAAM"]
[Fri Apr 17 02:49:22.063805 2026] [:error] [pid 43387:tid 43475] [client 51.107.222.225:64898] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-good.php"] [unique_id "aeEvMiBNsONqHxWTakVWuQAAAJY"]
[Fri Apr 17 02:49:23.029933 2026] [:error] [pid 26102:tid 26120] [client 51.107.222.225:62753] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-good.php"] [unique_id "aeEvM_127aFqw6ALdngjWQAAAY8"]
[Fri Apr 17 02:49:24.448441 2026] [proxy_fcgi:error] [pid 43387:tid 43471] [client 51.107.222.225:63687] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 02:49:24.715921 2026] [proxy_fcgi:error] [pid 43387:tid 43468] [client 51.107.222.225:63687] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 02:49:25.065315 2026] [proxy_fcgi:error] [pid 43387:tid 43469] [client 51.107.222.225:63687] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 02:49:25.333049 2026] [proxy_fcgi:error] [pid 43387:tid 43477] [client 51.107.222.225:63687] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 02:49:25.602747 2026] [proxy_fcgi:error] [pid 43387:tid 43465] [client 51.107.222.225:63687] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 02:49:25.866390 2026] [proxy_fcgi:error] [pid 43387:tid 43467] [client 51.107.222.225:63687] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 02:49:26.131663 2026] [proxy_fcgi:error] [pid 43387:tid 43466] [client 51.107.222.225:63687] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 02:49:26.395672 2026] [proxy_fcgi:error] [pid 43387:tid 43476] [client 51.107.222.225:63687] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 02:49:26.659610 2026] [proxy_fcgi:error] [pid 43387:tid 43473] [client 51.107.222.225:63687] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 02:49:27.189870 2026] [proxy_fcgi:error] [pid 43387:tid 43462] [client 51.107.222.225:63687] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 02:49:27.449350 2026] [:error] [pid 43387:tid 43458] [client 51.107.222.225:63687] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp5.php"] [unique_id "aeEvNyBNsONqHxWTakVW1AAAAIc"]
[Fri Apr 17 02:49:28.261166 2026] [:error] [pid 3245:tid 3277] [client 51.107.222.225:63739] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp5.php"] [unique_id "aeEvOKESOMTHVLs-uFDgGQAAAQ8"]
[Fri Apr 17 02:49:28.957300 2026] [:error] [pid 43386:tid 43427] [client 51.107.222.225:64350] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp5.php"] [unique_id "aeEvOO91GAVgUfhPVDHsjgAAAEc"]
[Fri Apr 17 02:49:29.733795 2026] [:error] [pid 26480:tid 26497] [client 51.107.222.225:64268] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp5.php"] [unique_id "aeEvOQwLDJKTQNfarA2TGQAAAc8"]
[Fri Apr 17 02:49:30.378868 2026] [:error] [pid 43387:tid 43468] [client 51.107.222.225:64989] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp9.php"] [unique_id "aeEvOiBNsONqHxWTakVW1QAAAI8"]
[Fri Apr 17 02:49:31.138804 2026] [:error] [pid 43386:tid 43445] [client 51.107.222.225:62804] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp9.php"] [unique_id "aeEvO-91GAVgUfhPVDHskAAAAFg"]
[Fri Apr 17 02:49:31.812458 2026] [:error] [pid 43386:tid 43428] [client 51.107.222.225:63712] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp9.php"] [unique_id "aeEvO-91GAVgUfhPVDHskgAAAEg"]
[Fri Apr 17 02:49:32.654173 2026] [:error] [pid 11692:tid 11700] [client 51.107.222.225:65005] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp9.php"] [unique_id "aeEvPM1AYuhm4BZwKNoqRAAAAgM"]
[Fri Apr 17 02:49:33.405177 2026] [:error] [pid 11692:tid 11705] [client 51.107.222.225:62812] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws88.php"] [unique_id "aeEvPc1AYuhm4BZwKNoqRgAAAgg"]
[Fri Apr 17 02:49:34.246999 2026] [:error] [pid 43386:tid 43420] [client 51.107.222.225:63646] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws88.php"] [unique_id "aeEvPu91GAVgUfhPVDHsmQAAAEA"]
[Fri Apr 17 02:49:35.386118 2026] [:error] [pid 43386:tid 43441] [client 51.107.222.225:63617] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws88.php"] [unique_id "aeEvP-91GAVgUfhPVDHsnQAAAFQ"]
[Fri Apr 17 02:49:36.220990 2026] [:error] [pid 11854:tid 11859] [client 51.107.222.225:64337] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws88.php"] [unique_id "aeEvQNxJCSIaqP1XSdamtAAAAkI"]
[Fri Apr 17 02:49:37.208546 2026] [:error] [pid 43387:tid 43465] [client 51.107.222.225:64332] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/motu.php"] [unique_id "aeEvQSBNsONqHxWTakVW2wAAAIw"]
[Fri Apr 17 02:49:38.703896 2026] [:error] [pid 3245:tid 3270] [client 51.107.222.225:62189] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/motu.php"] [unique_id "aeEvQqESOMTHVLs-uFDgJAAAAQg"]
[Fri Apr 17 02:49:40.118208 2026] [:error] [pid 43386:tid 43432] [client 51.107.222.225:62758] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/motu.php"] [unique_id "aeEvRO91GAVgUfhPVDHsrQAAAEw"]
[Fri Apr 17 02:49:41.767623 2026] [:error] [pid 11692:tid 11717] [client 51.107.222.225:64992] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/motu.php"] [unique_id "aeEvRc1AYuhm4BZwKNoqSwAAAhQ"]
[Fri Apr 17 02:49:42.663812 2026] [:error] [pid 43387:tid 43450] [client 51.107.222.225:63624] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "aeEvRiBNsONqHxWTakVW6QAAAII"]
[Fri Apr 17 02:49:43.585725 2026] [:error] [pid 43387:tid 43453] [client 51.107.222.225:63657] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "aeEvRyBNsONqHxWTakVW7QAAAIM"]
[Fri Apr 17 02:49:44.951531 2026] [:error] [pid 43387:tid 43475] [client 51.107.222.225:64320] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "aeEvSCBNsONqHxWTakVW7gAAAJY"]
[Fri Apr 17 02:49:46.754122 2026] [:error] [pid 4086:tid 4106] [client 51.107.222.225:62823] [client 51.107.222.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "aeEvSllz7gxl_exM0FpSqAAAAVI"]
[Fri Apr 17 04:13:24.645199 2026] [:error] [pid 9263:tid 9278] [client 209.38.89.62:40928] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/install.php"] [unique_id "aeFC5BP68VyHNvj1e56WMQAAAM0"]
[Fri Apr 17 04:13:24.717967 2026] [:error] [pid 9263:tid 9266] [client 209.38.89.62:40930] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp/wp-admin/install.php"] [unique_id "aeFC5BP68VyHNvj1e56WMgAAAME"]
[Fri Apr 17 04:13:24.797902 2026] [:error] [pid 9263:tid 9277] [client 209.38.89.62:40942] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/new/wp-admin/install.php"] [unique_id "aeFC5BP68VyHNvj1e56WMwAAAMw"]
[Fri Apr 17 04:13:24.870595 2026] [:error] [pid 9152:tid 9194] [client 209.38.89.62:40958] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/old/wp-admin/install.php"] [unique_id "aeFC5JJYca8I3TNCwIfTdAAAAEQ"]
[Fri Apr 17 04:13:25.017379 2026] [:error] [pid 9152:tid 9212] [client 209.38.89.62:40966] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wordpress/wp-admin/install.php"] [unique_id "aeFC5ZJYca8I3TNCwIfTdgAAAFY"]
[Fri Apr 17 04:13:25.271140 2026] [:error] [pid 9152:tid 9199] [client 209.38.89.62:40978] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/test/wp-admin/install.php"] [unique_id "aeFC5ZJYca8I3TNCwIfTeQAAAEk"]
[Fri Apr 17 04:13:25.316594 2026] [:error] [pid 9152:tid 9193] [client 209.38.89.62:40994] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/blog/wp-admin/install.php"] [unique_id "aeFC5ZJYca8I3TNCwIfTegAAAEM"]
[Fri Apr 17 04:13:25.354722 2026] [:error] [pid 9152:tid 9197] [client 209.38.89.62:40998] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cms/wp-admin/install.php"] [unique_id "aeFC5ZJYca8I3TNCwIfTewAAAEc"]
[Fri Apr 17 04:13:25.405268 2026] [:error] [pid 9152:tid 9204] [client 209.38.89.62:41014] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/web/wp-admin/install.php"] [unique_id "aeFC5ZJYca8I3TNCwIfTfAAAAE4"]
[Fri Apr 17 04:13:25.470688 2026] [:error] [pid 9152:tid 9213] [client 209.38.89.62:41030] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/backup/wp-admin/install.php"] [unique_id "aeFC5ZJYca8I3TNCwIfTfQAAAFc"]
[Fri Apr 17 04:13:25.503708 2026] [:error] [pid 9152:tid 9211] [client 209.38.89.62:41046] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/site/wp-admin/install.php"] [unique_id "aeFC5ZJYca8I3TNCwIfTfwAAAFU"]
[Fri Apr 17 04:13:25.548782 2026] [:error] [pid 9152:tid 9209] [client 209.38.89.62:41058] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/oldsite/wp-admin/install.php"] [unique_id "aeFC5ZJYca8I3TNCwIfTgQAAAFM"]
[Fri Apr 17 04:13:25.591689 2026] [:error] [pid 9152:tid 9214] [client 209.38.89.62:41064] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/shop/wp-admin/install.php"] [unique_id "aeFC5ZJYca8I3TNCwIfTggAAAFg"]
[Fri Apr 17 06:32:07.617949 2026] [proxy_fcgi:error] [pid 9151:tid 9173] [client 172.213.152.251:38638] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:32:07.859339 2026] [proxy_fcgi:error] [pid 9151:tid 9174] [client 172.213.152.251:38638] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:32:08.128677 2026] [proxy_fcgi:error] [pid 9151:tid 9175] [client 172.213.152.251:38638] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:32:08.382395 2026] [proxy_fcgi:error] [pid 9151:tid 9164] [client 172.213.152.251:38638] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:32:08.630474 2026] [proxy_fcgi:error] [pid 9151:tid 9180] [client 172.213.152.251:38638] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:32:08.892044 2026] [proxy_fcgi:error] [pid 9151:tid 9184] [client 172.213.152.251:38638] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:32:09.129891 2026] [proxy_fcgi:error] [pid 9151:tid 9183] [client 172.213.152.251:38638] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:32:09.366939 2026] [proxy_fcgi:error] [pid 9151:tid 9162] [client 172.213.152.251:38638] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:32:09.603241 2026] [proxy_fcgi:error] [pid 9151:tid 9176] [client 172.213.152.251:38638] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:32:09.851590 2026] [proxy_fcgi:error] [pid 9151:tid 9182] [client 172.213.152.251:38638] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:32:10.085246 2026] [:error] [pid 9151:tid 9181] [client 172.213.152.251:38638] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/nwflm.php"] [unique_id "aeFjashTVuRPkua22vSvjwAAABQ"]
[Fri Apr 17 06:32:14.604091 2026] [:error] [pid 9263:tid 9285] [client 172.213.152.251:64290] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/nwflm.php"] [unique_id "aeFjbhP68VyHNvj1e54eZgAAANQ"]
[Fri Apr 17 06:32:16.584895 2026] [:error] [pid 51878:tid 51884] [client 172.213.152.251:55142] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/nwflm.php"] [unique_id "aeFjcEnQhUtMbw9EsgafqgAAAQQ"]
[Fri Apr 17 06:32:19.592805 2026] [:error] [pid 51878:tid 51896] [client 172.213.152.251:50791] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/nwflm.php"] [unique_id "aeFjc0nQhUtMbw9EsgafvAAAARA"]
[Fri Apr 17 06:32:22.068686 2026] [:error] [pid 9152:tid 9213] [client 172.213.152.251:4216] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/dx.php"] [unique_id "aeFjdpJYca8I3TNCwIcmUgAAAFc"]
[Fri Apr 17 06:32:23.634580 2026] [:error] [pid 9152:tid 9194] [client 172.213.152.251:48570] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/dx.php"] [unique_id "aeFjd5JYca8I3TNCwIcmYAAAAEQ"]
[Fri Apr 17 06:32:27.081355 2026] [:error] [pid 51878:tid 51898] [client 172.213.152.251:53801] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/dx.php"] [unique_id "aeFje0nQhUtMbw9Esgaf_QAAARI"]
[Fri Apr 17 06:32:31.245819 2026] [:error] [pid 9152:tid 9197] [client 172.213.152.251:64586] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/dx.php"] [unique_id "aeFjf5JYca8I3TNCwIcmcgAAAEc"]
[Fri Apr 17 06:32:34.340666 2026] [:error] [pid 9152:tid 9204] [client 172.213.152.251:40669] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xff.php"] [unique_id "aeFjgpJYca8I3TNCwIcmfAAAAE4"]
[Fri Apr 17 06:32:38.499049 2026] [:error] [pid 9263:tid 9287] [client 172.213.152.251:33353] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xff.php"] [unique_id "aeFjhhP68VyHNvj1e54e9gAAANY"]
[Fri Apr 17 06:32:40.463839 2026] [:error] [pid 51878:tid 51888] [client 172.213.152.251:36642] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xff.php"] [unique_id "aeFjiEnQhUtMbw9EsgagTwAAAQg"]
[Fri Apr 17 06:32:45.921370 2026] [:error] [pid 9263:tid 9266] [client 172.213.152.251:55983] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xff.php"] [unique_id "aeFjjRP68VyHNvj1e54fHAAAAME"]
[Fri Apr 17 06:32:55.596807 2026] [:error] [pid 9263:tid 9289] [client 172.213.152.251:48074] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/lupo.php"] [unique_id "aeFjlxP68VyHNvj1e54fTQAAANg"]
[Fri Apr 17 06:33:33.277040 2026] [proxy_fcgi:error] [pid 9152:tid 9200] [client 172.213.152.251:56213] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:33:33.518316 2026] [proxy_fcgi:error] [pid 9152:tid 9207] [client 172.213.152.251:56213] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:33:33.763059 2026] [:error] [pid 9152:tid 9212] [client 172.213.152.251:56213] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/popo.php"] [unique_id "aeFjvZJYca8I3TNCwIcnjAAAAFY"]
[Fri Apr 17 06:33:46.279376 2026] [:error] [pid 9152:tid 9190] [client 172.213.152.251:39146] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/popo.php"] [unique_id "aeFjypJYca8I3TNCwIcnswAAAEA"]
[Fri Apr 17 06:34:18.215901 2026] [:error] [pid 51878:tid 51897] [client 172.213.152.251:35181] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ggb.php"] [unique_id "aeFj6knQhUtMbw9EsgajaAAAARE"]
[Fri Apr 17 06:35:50.946845 2026] [:error] [pid 9152:tid 9210] [client 172.213.152.251:41460] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/11.php"] [unique_id "aeFkRpJYca8I3TNCwIcpuwAAAFQ"]
[Fri Apr 17 06:35:55.580562 2026] [:error] [pid 9263:tid 9277] [client 172.213.152.251:35736] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/11.php"] [unique_id "aeFkSxP68VyHNvj1e54i_AAAAMw"]
[Fri Apr 17 06:35:58.993685 2026] [proxy_fcgi:error] [pid 9153:tid 9219] [client 172.213.152.251:4395] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:35:59.276728 2026] [proxy_fcgi:error] [pid 9153:tid 9241] [client 172.213.152.251:4395] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:35:59.550538 2026] [proxy_fcgi:error] [pid 9153:tid 9221] [client 172.213.152.251:4395] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:35:59.817721 2026] [proxy_fcgi:error] [pid 9153:tid 9222] [client 172.213.152.251:4395] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:36:00.502119 2026] [proxy_fcgi:error] [pid 9153:tid 9231] [client 172.213.152.251:4395] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:36:01.065274 2026] [proxy_fcgi:error] [pid 9153:tid 9226] [client 172.213.152.251:4395] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:36:01.313293 2026] [proxy_fcgi:error] [pid 9153:tid 9228] [client 172.213.152.251:4395] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:36:01.587193 2026] [proxy_fcgi:error] [pid 9153:tid 9230] [client 172.213.152.251:4395] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:36:02.540712 2026] [proxy_fcgi:error] [pid 9153:tid 9227] [client 172.213.152.251:4395] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:36:02.773288 2026] [:error] [pid 9153:tid 9226] [client 172.213.152.251:4395] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/2.php"] [unique_id "aeFkUuMHGxkTZX3c45cjpQAAAIg"]
[Fri Apr 17 06:36:05.046651 2026] [:error] [pid 9152:tid 9207] [client 172.213.152.251:41865] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/2.php"] [unique_id "aeFkVZJYca8I3TNCwIcp7gAAAFE"]
[Fri Apr 17 06:36:07.692786 2026] [:error] [pid 51878:tid 51890] [client 172.213.152.251:4447] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/2.php"] [unique_id "aeFkV0nQhUtMbw9EsganFAAAAQo"]
[Fri Apr 17 06:36:12.193337 2026] [:error] [pid 9152:tid 9208] [client 172.213.152.251:4459] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/2.php"] [unique_id "aeFkXJJYca8I3TNCwIcqHgAAAFI"]
[Fri Apr 17 06:36:17.477066 2026] [:error] [pid 9153:tid 9218] [client 172.213.152.251:51398] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/3.php"] [unique_id "aeFkYeMHGxkTZX3c45ckAAAAAIA"]
[Fri Apr 17 06:36:21.843053 2026] [:error] [pid 9263:tid 9272] [client 172.213.152.251:57156] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/3.php"] [unique_id "aeFkZRP68VyHNvj1e54j5QAAAMc"]
[Fri Apr 17 06:36:28.192146 2026] [:error] [pid 9153:tid 9234] [client 172.213.152.251:51430] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/3.php"] [unique_id "aeFkbOMHGxkTZX3c45ckVQAAAJA"]
[Fri Apr 17 06:36:37.458439 2026] [:error] [pid 51878:tid 51898] [client 172.213.152.251:37093] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/4.php"] [unique_id "aeFkdUnQhUtMbw9EsganrQAAARI"]
[Fri Apr 17 06:36:45.449509 2026] [:error] [pid 9153:tid 9231] [client 172.213.152.251:36243] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/5.php"] [unique_id "aeFkfeMHGxkTZX3c45ck6gAAAI0"]
[Fri Apr 17 06:36:48.654337 2026] [:error] [pid 9263:tid 9279] [client 172.213.152.251:34190] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/5.php"] [unique_id "aeFkgBP68VyHNvj1e54kegAAAM4"]
[Fri Apr 17 06:36:51.097097 2026] [:error] [pid 9151:tid 9171] [client 172.213.152.251:47293] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/5.php"] [unique_id "aeFkg8hTVuRPkua22vSzWwAAAAo"]
[Fri Apr 17 06:36:53.715428 2026] [:error] [pid 9153:tid 9229] [client 172.213.152.251:40713] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/5.php"] [unique_id "aeFkheMHGxkTZX3c45clGAAAAIs"]
[Fri Apr 17 06:36:57.211636 2026] [:error] [pid 9153:tid 9226] [client 172.213.152.251:43426] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/6.php"] [unique_id "aeFkieMHGxkTZX3c45clTQAAAIg"]
[Fri Apr 17 06:37:00.036888 2026] [:error] [pid 51878:tid 51884] [client 172.213.152.251:35093] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/6.php"] [unique_id "aeFkjEnQhUtMbw9EsgaoHAAAAQQ"]
[Fri Apr 17 06:37:03.415253 2026] [proxy_fcgi:error] [pid 51878:tid 51888] [client 172.213.152.251:4117] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:37:03.687564 2026] [proxy_fcgi:error] [pid 51878:tid 51898] [client 172.213.152.251:4117] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:37:03.938954 2026] [proxy_fcgi:error] [pid 51878:tid 51896] [client 172.213.152.251:4117] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:37:04.182741 2026] [proxy_fcgi:error] [pid 51878:tid 51897] [client 172.213.152.251:4117] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:37:04.418776 2026] [proxy_fcgi:error] [pid 51878:tid 51891] [client 172.213.152.251:4117] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:37:04.675431 2026] [proxy_fcgi:error] [pid 51878:tid 51901] [client 172.213.152.251:4117] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:37:04.911034 2026] [proxy_fcgi:error] [pid 51878:tid 51900] [client 172.213.152.251:4117] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:37:05.950725 2026] [proxy_fcgi:error] [pid 51878:tid 51886] [client 172.213.152.251:4117] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:37:06.213632 2026] [proxy_fcgi:error] [pid 51878:tid 51887] [client 172.213.152.251:4117] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:37:06.450594 2026] [proxy_fcgi:error] [pid 51878:tid 51890] [client 172.213.152.251:4117] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:37:06.988980 2026] [proxy_fcgi:error] [pid 51878:tid 51895] [client 172.213.152.251:4117] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:37:07.224893 2026] [:error] [pid 51878:tid 51886] [client 172.213.152.251:4117] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/byrgo.php"] [unique_id "aeFkk0nQhUtMbw9EsgaoXwAAAQY"]
[Fri Apr 17 06:37:09.383331 2026] [:error] [pid 9153:tid 9242] [client 172.213.152.251:40358] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/byrgo.php"] [unique_id "aeFkleMHGxkTZX3c45cltAAAAJg"]
[Fri Apr 17 06:37:10.889063 2026] [:error] [pid 51878:tid 51902] [client 172.213.152.251:37845] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/byrgo.php"] [unique_id "aeFklknQhUtMbw9EsgaoegAAARY"]
[Fri Apr 17 06:37:12.230101 2026] [:error] [pid 51878:tid 51885] [client 172.213.152.251:65197] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/byrgo.php"] [unique_id "aeFkmEnQhUtMbw9EsgaojQAAAQU"]
[Fri Apr 17 06:37:13.418167 2026] [:error] [pid 51878:tid 51885] [client 172.213.152.251:4126] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xwpg.php"] [unique_id "aeFkmUnQhUtMbw9EsgaooAAAAQU"]
[Fri Apr 17 06:37:15.919809 2026] [:error] [pid 9263:tid 9275] [client 172.213.152.251:40753] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xwpg.php"] [unique_id "aeFkmxP68VyHNvj1e54lHQAAAMo"]
[Fri Apr 17 06:37:17.548544 2026] [:error] [pid 9152:tid 9214] [client 172.213.152.251:4148] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xwpg.php"] [unique_id "aeFknZJYca8I3TNCwIcrYAAAAFg"]
[Fri Apr 17 06:37:19.100049 2026] [:error] [pid 51878:tid 51902] [client 172.213.152.251:40381] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xwpg.php"] [unique_id "aeFkn0nQhUtMbw9Esgao4gAAARY"]
[Fri Apr 17 06:37:20.951381 2026] [:error] [pid 9263:tid 9286] [client 172.213.152.251:37487] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ass.php"] [unique_id "aeFkoBP68VyHNvj1e54lSQAAANU"]
[Fri Apr 17 06:37:23.155355 2026] [:error] [pid 9152:tid 9190] [client 172.213.152.251:34225] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ass.php"] [unique_id "aeFko5JYca8I3TNCwIcrfgAAAEA"]
[Fri Apr 17 06:37:24.631348 2026] [:error] [pid 9152:tid 9199] [client 172.213.152.251:56399] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ass.php"] [unique_id "aeFkpJJYca8I3TNCwIcrigAAAEk"]
[Fri Apr 17 06:37:27.435317 2026] [:error] [pid 9153:tid 9241] [client 172.213.152.251:34178] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ass.php"] [unique_id "aeFkp-MHGxkTZX3c45cmKwAAAJc"]
[Fri Apr 17 06:37:28.929128 2026] [:error] [pid 9263:tid 9265] [client 172.213.152.251:4149] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/about.php"] [unique_id "aeFkqBP68VyHNvj1e54lcAAAAMA"]
[Fri Apr 17 06:37:30.258420 2026] [:error] [pid 9153:tid 9227] [client 172.213.152.251:43437] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/about.php"] [unique_id "aeFkquMHGxkTZX3c45cmPwAAAIk"]
[Fri Apr 17 06:37:31.268648 2026] [:error] [pid 9151:tid 9169] [client 172.213.152.251:40373] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/about.php"] [unique_id "aeFkq8hTVuRPkua22vSz6wAAAAg"]
[Fri Apr 17 06:37:32.049493 2026] [:error] [pid 9263:tid 9265] [client 172.213.152.251:40327] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/about.php"] [unique_id "aeFkrBP68VyHNvj1e54lfwAAAMA"]
[Fri Apr 17 06:37:33.357639 2026] [:error] [pid 9263:tid 9286] [client 172.213.152.251:4129] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/no18.php"] [unique_id "aeFkrRP68VyHNvj1e54llgAAANU"]
[Fri Apr 17 06:37:34.619559 2026] [:error] [pid 51878:tid 51894] [client 172.213.152.251:37075] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/no18.php"] [unique_id "aeFkrknQhUtMbw9EsgapRgAAAQ4"]
[Fri Apr 17 06:37:35.646192 2026] [:error] [pid 51878:tid 51894] [client 172.213.152.251:40733] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/no18.php"] [unique_id "aeFkr0nQhUtMbw9EsgapVgAAAQ4"]
[Fri Apr 17 06:37:36.828901 2026] [:error] [pid 51878:tid 51886] [client 172.213.152.251:36284] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/no18.php"] [unique_id "aeFksEnQhUtMbw9EsgapYgAAAQY"]
[Fri Apr 17 06:37:37.895166 2026] [:error] [pid 9152:tid 9191] [client 172.213.152.251:4116] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/fine.php"] [unique_id "aeFksZJYca8I3TNCwIcrwAAAAEE"]
[Fri Apr 17 06:37:43.914739 2026] [:error] [pid 51878:tid 51885] [client 172.213.152.251:37081] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/fine.php"] [unique_id "aeFkt0nQhUtMbw9EsgapmgAAAQU"]
[Fri Apr 17 06:37:44.760144 2026] [:error] [pid 9263:tid 9289] [client 172.213.152.251:36266] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/fine.php"] [unique_id "aeFkuBP68VyHNvj1e54lxgAAANg"]
[Fri Apr 17 06:39:26.593070 2026] [proxy_fcgi:error] [pid 9151:tid 9171] [client 172.213.152.251:60031] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:39:40.801590 2026] [proxy_fcgi:error] [pid 9151:tid 9175] [client 172.213.152.251:40734] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:39:41.038961 2026] [proxy_fcgi:error] [pid 9151:tid 9180] [client 172.213.152.251:40734] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:39:41.294087 2026] [proxy_fcgi:error] [pid 9151:tid 9183] [client 172.213.152.251:40734] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:39:41.571174 2026] [proxy_fcgi:error] [pid 9151:tid 9181] [client 172.213.152.251:40734] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:39:41.829175 2026] [proxy_fcgi:error] [pid 9151:tid 9164] [client 172.213.152.251:40734] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:39:42.065854 2026] [proxy_fcgi:error] [pid 9151:tid 9174] [client 172.213.152.251:40734] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:39:42.323383 2026] [proxy_fcgi:error] [pid 9151:tid 9177] [client 172.213.152.251:40734] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:39:42.559784 2026] [proxy_fcgi:error] [pid 9151:tid 9178] [client 172.213.152.251:40734] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:39:42.822964 2026] [proxy_fcgi:error] [pid 9151:tid 9182] [client 172.213.152.251:40734] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:39:43.061611 2026] [proxy_fcgi:error] [pid 9151:tid 9179] [client 172.213.152.251:40734] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:39:43.312013 2026] [:error] [pid 9151:tid 9161] [client 172.213.152.251:40734] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aeFlL8hTVuRPkua22vS2HAAAAAA"]
[Fri Apr 17 06:40:19.509240 2026] [:error] [pid 51878:tid 51889] [client 172.213.152.251:40335] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeFlU0nQhUtMbw9EsgasswAAAQk"]
[Fri Apr 17 06:40:22.880288 2026] [:error] [pid 9152:tid 9210] [client 172.213.152.251:4452] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeFlVpJYca8I3TNCwIcukgAAAFQ"]
[Fri Apr 17 06:40:25.544099 2026] [:error] [pid 9263:tid 9273] [client 172.213.152.251:4498] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeFlWRP68VyHNvj1e54ooQAAAMg"]
[Fri Apr 17 06:40:27.832756 2026] [:error] [pid 9263:tid 9288] [client 172.213.152.251:41424] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/66.php"] [unique_id "aeFlWxP68VyHNvj1e54ouQAAANc"]
[Fri Apr 17 06:40:32.570082 2026] [:error] [pid 9153:tid 9237] [client 172.213.152.251:44296] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/66.php"] [unique_id "aeFlYOMHGxkTZX3c45crEwAAAJM"]
[Fri Apr 17 06:40:38.652517 2026] [:error] [pid 51878:tid 51893] [client 172.213.152.251:55217] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/66.php"] [unique_id "aeFlZknQhUtMbw9EsgatRgAAAQ0"]
[Fri Apr 17 06:40:41.681050 2026] [:error] [pid 9151:tid 9177] [client 172.213.152.251:42061] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/66.php"] [unique_id "aeFlachTVuRPkua22vS2_wAAABA"]
[Fri Apr 17 06:40:44.977884 2026] [proxy_fcgi:error] [pid 51878:tid 51883] [client 172.213.152.251:42051] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:40:45.218583 2026] [proxy_fcgi:error] [pid 51878:tid 51897] [client 172.213.152.251:42051] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:40:45.459553 2026] [proxy_fcgi:error] [pid 51878:tid 51887] [client 172.213.152.251:42051] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:40:45.711356 2026] [proxy_fcgi:error] [pid 51878:tid 51884] [client 172.213.152.251:42051] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:40:45.948749 2026] [proxy_fcgi:error] [pid 51878:tid 51896] [client 172.213.152.251:42051] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:40:46.184565 2026] [proxy_fcgi:error] [pid 51878:tid 51882] [client 172.213.152.251:42051] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:40:46.447918 2026] [proxy_fcgi:error] [pid 51878:tid 51904] [client 172.213.152.251:42051] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:40:46.921456 2026] [proxy_fcgi:error] [pid 51878:tid 51885] [client 172.213.152.251:42051] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:40:47.188022 2026] [proxy_fcgi:error] [pid 51878:tid 51899] [client 172.213.152.251:42051] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:40:47.425098 2026] [proxy_fcgi:error] [pid 51878:tid 51881] [client 172.213.152.251:42051] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:40:47.658506 2026] [:error] [pid 51878:tid 51880] [client 172.213.152.251:42051] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/plss3.php"] [unique_id "aeFlb0nQhUtMbw9EsgatnQAAAQA"]
[Fri Apr 17 06:40:54.265961 2026] [:error] [pid 9153:tid 9219] [client 172.213.152.251:52252] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/plss3.php"] [unique_id "aeFlduMHGxkTZX3c45cr0AAAAIE"]
[Fri Apr 17 06:41:08.898620 2026] [:error] [pid 9151:tid 9170] [client 172.213.152.251:35572] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/aaa.php"] [unique_id "aeFlhMhTVuRPkua22vS3NwAAAAk"]
[Fri Apr 17 06:41:11.808686 2026] [:error] [pid 51878:tid 51890] [client 172.213.152.251:42085] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/aaa.php"] [unique_id "aeFlh0nQhUtMbw9EsgauCAAAAQo"]
[Fri Apr 17 06:41:17.778839 2026] [:error] [pid 9151:tid 9165] [client 172.213.152.251:51410] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/aaa.php"] [unique_id "aeFljchTVuRPkua22vS3PAAAAAQ"]
[Fri Apr 17 06:41:27.744664 2026] [:error] [pid 9263:tid 9268] [client 172.213.152.251:51405] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aeFllxP68VyHNvj1e54pVQAAAMM"]
[Fri Apr 17 06:41:33.547784 2026] [:error] [pid 9152:tid 9193] [client 172.213.152.251:54869] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aeFlnZJYca8I3TNCwIcvOAAAAEM"]
[Fri Apr 17 06:41:46.622766 2026] [:error] [pid 9263:tid 9272] [client 172.213.152.251:36324] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aeFlqhP68VyHNvj1e54pkwAAAMc"]
[Fri Apr 17 06:41:54.428362 2026] [proxy_fcgi:error] [pid 9151:tid 9164] [client 172.213.152.251:65039] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:41:54.665012 2026] [proxy_fcgi:error] [pid 9151:tid 9163] [client 172.213.152.251:65039] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:41:54.901071 2026] [proxy_fcgi:error] [pid 9151:tid 9173] [client 172.213.152.251:65039] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:41:55.137903 2026] [proxy_fcgi:error] [pid 9151:tid 9168] [client 172.213.152.251:65039] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:41:55.847387 2026] [proxy_fcgi:error] [pid 9151:tid 9180] [client 172.213.152.251:65039] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:41:56.111109 2026] [proxy_fcgi:error] [pid 9151:tid 9181] [client 172.213.152.251:65039] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:41:56.347283 2026] [proxy_fcgi:error] [pid 9151:tid 9176] [client 172.213.152.251:65039] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:41:56.608410 2026] [proxy_fcgi:error] [pid 9151:tid 9170] [client 172.213.152.251:65039] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:41:57.503195 2026] [:error] [pid 9151:tid 9169] [client 172.213.152.251:65039] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/222.php"] [unique_id "aeFltchTVuRPkua22vS3fAAAAAg"]
[Fri Apr 17 06:41:59.934700 2026] [:error] [pid 9153:tid 9222] [client 172.213.152.251:4397] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/222.php"] [unique_id "aeFlt-MHGxkTZX3c45cs2wAAAIQ"]
[Fri Apr 17 06:42:02.080661 2026] [:error] [pid 9263:tid 9285] [client 172.213.152.251:56429] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/222.php"] [unique_id "aeFluhP68VyHNvj1e54pnwAAANQ"]
[Fri Apr 17 06:42:04.309651 2026] [:error] [pid 51878:tid 51903] [client 172.213.152.251:44392] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/222.php"] [unique_id "aeFlvEnQhUtMbw9EsgauiwAAARc"]
[Fri Apr 17 06:42:05.546676 2026] [:error] [pid 9153:tid 9240] [client 172.213.152.251:64252] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aeFlveMHGxkTZX3c45cs7wAAAJY"]
[Fri Apr 17 06:42:07.430492 2026] [:error] [pid 9153:tid 9239] [client 172.213.152.251:35809] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aeFlv-MHGxkTZX3c45ctAAAAAJU"]
[Fri Apr 17 06:42:09.065582 2026] [:error] [pid 9263:tid 9271] [client 172.213.152.251:49793] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aeFlwRP68VyHNvj1e54ppwAAAMY"]
[Fri Apr 17 06:42:10.858693 2026] [:error] [pid 51878:tid 51895] [client 172.213.152.251:54143] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aeFlwknQhUtMbw9EsgaumgAAAQ8"]
[Fri Apr 17 06:42:15.120006 2026] [:error] [pid 9153:tid 9218] [client 172.213.152.251:33407] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/fff.php"] [unique_id "aeFlx-MHGxkTZX3c45ctGgAAAIA"]
[Fri Apr 17 06:42:27.093031 2026] [:error] [pid 9263:tid 9270] [client 172.213.152.251:36663] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/fff.php"] [unique_id "aeFl0xP68VyHNvj1e54p1gAAAMU"]
[Fri Apr 17 06:43:02.835252 2026] [proxy_fcgi:error] [pid 9153:tid 9230] [client 172.213.152.251:52514] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:43:03.094927 2026] [proxy_fcgi:error] [pid 9153:tid 9228] [client 172.213.152.251:52514] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:43:03.370529 2026] [proxy_fcgi:error] [pid 9153:tid 9231] [client 172.213.152.251:52514] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:43:03.645343 2026] [proxy_fcgi:error] [pid 9153:tid 9222] [client 172.213.152.251:52514] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:43:03.930421 2026] [proxy_fcgi:error] [pid 9153:tid 9226] [client 172.213.152.251:52514] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:43:04.447977 2026] [proxy_fcgi:error] [pid 9153:tid 9237] [client 172.213.152.251:52514] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:43:04.999016 2026] [proxy_fcgi:error] [pid 9153:tid 9239] [client 172.213.152.251:52514] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:43:05.235969 2026] [proxy_fcgi:error] [pid 9153:tid 9226] [client 172.213.152.251:52514] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:43:05.778722 2026] [:error] [pid 9153:tid 9225] [client 172.213.152.251:52514] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/fe5.php"] [unique_id "aeFl-eMHGxkTZX3c45cuRAAAAIc"]
[Fri Apr 17 06:43:25.375817 2026] [:error] [pid 9263:tid 9275] [client 172.213.152.251:38184] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/fe5.php"] [unique_id "aeFmDRP68VyHNvj1e54qwwAAAMo"]
[Fri Apr 17 06:43:45.618879 2026] [:error] [pid 51878:tid 51885] [client 172.213.152.251:33147] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aeFmIUnQhUtMbw9EsgawWwAAAQU"]
[Fri Apr 17 06:45:35.879975 2026] [proxy_fcgi:error] [pid 9263:tid 9281] [client 172.213.152.251:44414] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:45:36.116649 2026] [proxy_fcgi:error] [pid 9263:tid 9280] [client 172.213.152.251:44414] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:45:36.670629 2026] [:error] [pid 9263:tid 9272] [client 172.213.152.251:44414] [client 172.213.152.251] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aeFmkBP68VyHNvj1e54tTQAAAMc"]
[Fri Apr 17 06:45:41.314585 2026] [proxy_fcgi:error] [pid 9153:tid 9221] [client 172.213.152.251:44357] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:45:42.050719 2026] [proxy_fcgi:error] [pid 9153:tid 9227] [client 172.213.152.251:44357] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:45:42.323696 2026] [proxy_fcgi:error] [pid 9153:tid 9228] [client 172.213.152.251:44357] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:45:42.595195 2026] [proxy_fcgi:error] [pid 9153:tid 9241] [client 172.213.152.251:44357] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:45:42.880052 2026] [proxy_fcgi:error] [pid 9153:tid 9235] [client 172.213.152.251:44357] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:45:43.116167 2026] [proxy_fcgi:error] [pid 9153:tid 9222] [client 172.213.152.251:44357] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:45:43.357695 2026] [:error] [pid 9153:tid 9232] [client 172.213.152.251:44357] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/gssdd.php"] [unique_id "aeFml-MHGxkTZX3c45cyvwAAAI4"]
[Fri Apr 17 06:45:48.714309 2026] [:error] [pid 9263:tid 9272] [client 172.213.152.251:4417] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/gssdd.php"] [unique_id "aeFmnBP68VyHNvj1e54tqgAAAMc"]
[Fri Apr 17 06:45:51.664404 2026] [:error] [pid 9153:tid 9225] [client 172.213.152.251:46884] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/gssdd.php"] [unique_id "aeFmn-MHGxkTZX3c45czDQAAAIc"]
[Fri Apr 17 06:45:55.050509 2026] [:error] [pid 9153:tid 9242] [client 172.213.152.251:45910] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/gssdd.php"] [unique_id "aeFmo-MHGxkTZX3c45czOAAAAJg"]
[Fri Apr 17 06:46:00.181341 2026] [:error] [pid 9263:tid 9282] [client 172.213.152.251:56333] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/motu.php"] [unique_id "aeFmqBP68VyHNvj1e54t3gAAANE"]
[Fri Apr 17 06:46:04.541335 2026] [:error] [pid 9263:tid 9266] [client 172.213.152.251:4499] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/motu.php"] [unique_id "aeFmrBP68VyHNvj1e54t-AAAAME"]
[Fri Apr 17 06:46:09.421099 2026] [:error] [pid 9152:tid 9208] [client 172.213.152.251:48987] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/motu.php"] [unique_id "aeFmsZJYca8I3TNCwIcylwAAAFI"]
[Fri Apr 17 06:46:13.634533 2026] [:error] [pid 9263:tid 9282] [client 172.213.152.251:48973] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bs1.php"] [unique_id "aeFmtRP68VyHNvj1e54uFgAAANE"]
[Fri Apr 17 06:46:17.307501 2026] [:error] [pid 9151:tid 9168] [client 172.213.152.251:48089] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bs1.php"] [unique_id "aeFmuchTVuRPkua22vS57AAAAAc"]
[Fri Apr 17 06:46:20.199652 2026] [:error] [pid 9153:tid 9221] [client 172.213.152.251:4496] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bs1.php"] [unique_id "aeFmvOMHGxkTZX3c45czvgAAAIM"]
[Fri Apr 17 06:46:22.306654 2026] [:error] [pid 9153:tid 9234] [client 172.213.152.251:35772] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bs1.php"] [unique_id "aeFmvuMHGxkTZX3c45czxgAAAJA"]
[Fri Apr 17 06:46:25.279975 2026] [:error] [pid 9151:tid 9176] [client 172.213.152.251:48088] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bengi.php"] [unique_id "aeFmwchTVuRPkua22vS58wAAAA8"]
[Fri Apr 17 06:46:27.175538 2026] [:error] [pid 9263:tid 9276] [client 172.213.152.251:57108] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bengi.php"] [unique_id "aeFmwxP68VyHNvj1e54uQAAAAMs"]
[Fri Apr 17 06:46:29.720729 2026] [:error] [pid 9263:tid 9280] [client 172.213.152.251:57692] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bengi.php"] [unique_id "aeFmxRP68VyHNvj1e54uUQAAAM8"]
[Fri Apr 17 06:46:31.449460 2026] [:error] [pid 51878:tid 51883] [client 172.213.152.251:40351] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bengi.php"] [unique_id "aeFmx0nQhUtMbw9EsgazYAAAAQM"]
[Fri Apr 17 06:46:33.123351 2026] [:error] [pid 9153:tid 9220] [client 172.213.152.251:40693] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aeFmyeMHGxkTZX3c45c0IAAAAII"]
[Fri Apr 17 06:46:36.242306 2026] [:error] [pid 51878:tid 51890] [client 172.213.152.251:48072] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aeFmzEnQhUtMbw9EsgazeAAAAQo"]
[Fri Apr 17 06:46:47.163394 2026] [proxy_fcgi:error] [pid 9151:tid 9173] [client 172.213.152.251:51028] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:46:47.436867 2026] [proxy_fcgi:error] [pid 9151:tid 9161] [client 172.213.152.251:51028] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:46:47.694713 2026] [proxy_fcgi:error] [pid 9151:tid 9183] [client 172.213.152.251:51028] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:46:47.931444 2026] [proxy_fcgi:error] [pid 9151:tid 9172] [client 172.213.152.251:51028] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:46:48.189977 2026] [proxy_fcgi:error] [pid 9151:tid 9165] [client 172.213.152.251:51028] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:46:48.442648 2026] [proxy_fcgi:error] [pid 9151:tid 9166] [client 172.213.152.251:51028] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:46:48.968424 2026] [proxy_fcgi:error] [pid 9151:tid 9162] [client 172.213.152.251:51028] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:46:49.207002 2026] [proxy_fcgi:error] [pid 9151:tid 9171] [client 172.213.152.251:51028] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:46:49.452493 2026] [proxy_fcgi:error] [pid 9151:tid 9163] [client 172.213.152.251:51028] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:46:49.699694 2026] [:error] [pid 9151:tid 9177] [client 172.213.152.251:51028] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/class19.php"] [unique_id "aeFm2chTVuRPkua22vS6UgAAABA"]
[Fri Apr 17 06:47:00.546828 2026] [:error] [pid 9263:tid 9275] [client 172.213.152.251:36660] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/class19.php"] [unique_id "aeFm5BP68VyHNvj1e54u-gAAAMo"]
[Fri Apr 17 06:47:02.271886 2026] [:error] [pid 9153:tid 9226] [client 172.213.152.251:52175] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/class19.php"] [unique_id "aeFm5uMHGxkTZX3c45c1KwAAAIg"]
[Fri Apr 17 06:47:05.370704 2026] [:error] [pid 9153:tid 9221] [client 172.213.152.251:33030] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/class19.php"] [unique_id "aeFm6eMHGxkTZX3c45c1SgAAAIM"]
[Fri Apr 17 06:47:06.890682 2026] [:error] [pid 51878:tid 51895] [client 172.213.152.251:64150] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/class20.php"] [unique_id "aeFm6knQhUtMbw9Esga0UAAAAQ8"]
[Fri Apr 17 06:47:13.401018 2026] [:error] [pid 9151:tid 9174] [client 172.213.152.251:50798] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/class20.php"] [unique_id "aeFm8chTVuRPkua22vS6mwAAAA0"]
[Fri Apr 17 06:47:18.217348 2026] [:error] [pid 9263:tid 9288] [client 172.213.152.251:43872] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/class20.php"] [unique_id "aeFm9hP68VyHNvj1e54vYAAAANc"]
[Fri Apr 17 06:47:22.056392 2026] [:error] [pid 9152:tid 9191] [client 172.213.152.251:48596] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/file18.php"] [unique_id "aeFm-pJYca8I3TNCwIcz8wAAAEE"]
[Fri Apr 17 06:47:27.892212 2026] [:error] [pid 51878:tid 51896] [client 172.213.152.251:48514] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/file18.php"] [unique_id "aeFm_0nQhUtMbw9Esga0nwAAARA"]
[Fri Apr 17 06:47:38.204852 2026] [:error] [pid 9151:tid 9179] [client 172.213.152.251:33680] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/file18.php"] [unique_id "aeFnCshTVuRPkua22vS68QAAABI"]
[Fri Apr 17 06:48:09.654247 2026] [proxy_fcgi:error] [pid 9152:tid 9190] [client 172.213.152.251:46506] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:48:09.893083 2026] [proxy_fcgi:error] [pid 9152:tid 9192] [client 172.213.152.251:46506] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:48:10.181344 2026] [proxy_fcgi:error] [pid 9152:tid 9207] [client 172.213.152.251:46506] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:48:10.466454 2026] [proxy_fcgi:error] [pid 9152:tid 9195] [client 172.213.152.251:46506] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:48:10.739477 2026] [proxy_fcgi:error] [pid 9152:tid 9201] [client 172.213.152.251:46506] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:48:10.986545 2026] [proxy_fcgi:error] [pid 9152:tid 9193] [client 172.213.152.251:46506] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 07:05:01.331686 2026] [proxy_fcgi:error] [pid 25010:tid 25022] [client 74.248.157.73:65496] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 07:05:01.591468 2026] [proxy_fcgi:error] [pid 25010:tid 25035] [client 74.248.157.73:65496] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 07:05:02.186370 2026] [proxy_fcgi:error] [pid 25010:tid 25028] [client 74.248.157.73:65496] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 07:05:02.456773 2026] [proxy_fcgi:error] [pid 25010:tid 25037] [client 74.248.157.73:65496] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 07:05:02.715847 2026] [proxy_fcgi:error] [pid 25010:tid 25020] [client 74.248.157.73:65496] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 07:05:03.569856 2026] [proxy_fcgi:error] [pid 25010:tid 25023] [client 74.248.157.73:65496] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 07:05:03.829681 2026] [proxy_fcgi:error] [pid 25010:tid 25035] [client 74.248.157.73:65496] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 07:05:04.205651 2026] [proxy_fcgi:error] [pid 25010:tid 25015] [client 74.248.157.73:65496] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 07:05:04.746268 2026] [:error] [pid 25010:tid 25026] [client 74.248.157.73:65496] [client 74.248.157.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/theme-compat/wp-login.php"] [unique_id "aeFrII-7kkf42RarqQ3eyAAAAU0"]
[Fri Apr 17 07:05:06.610523 2026] [proxy_fcgi:error] [pid 25010:tid 25017] [client 74.248.157.73:57331] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 07:05:06.868734 2026] [proxy_fcgi:error] [pid 25010:tid 25031] [client 74.248.157.73:57331] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 07:05:07.374830 2026] [:error] [pid 25010:tid 25014] [client 74.248.157.73:57331] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ng.php"] [unique_id "aeFrI4-7kkf42RarqQ3e2QAAAUE"]
[Fri Apr 17 07:05:08.590462 2026] [:error] [pid 25010:tid 25035] [client 74.248.157.73:65432] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ng.php"] [unique_id "aeFrJI-7kkf42RarqQ3e4QAAAVY"]
[Fri Apr 17 07:05:10.371505 2026] [:error] [pid 25010:tid 25037] [client 74.248.157.73:52310] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ng.php"] [unique_id "aeFrJo-7kkf42RarqQ3e6gAAAVg"]
[Fri Apr 17 07:05:11.614970 2026] [:error] [pid 25010:tid 25035] [client 74.248.157.73:7315] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ng.php"] [unique_id "aeFrJ4-7kkf42RarqQ3e9QAAAVY"]
[Fri Apr 17 07:05:13.615136 2026] [:error] [pid 25010:tid 25032] [client 74.248.157.73:65450] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tiny2.php"] [unique_id "aeFrKY-7kkf42RarqQ3fAAAAAVM"]
[Fri Apr 17 07:05:15.088068 2026] [:error] [pid 9263:tid 9278] [client 74.248.157.73:31149] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tiny2.php"] [unique_id "aeFrKxP68VyHNvj1e549wAAAAM0"]
[Fri Apr 17 07:05:16.110970 2026] [:error] [pid 9153:tid 9237] [client 74.248.157.73:57314] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tiny2.php"] [unique_id "aeFrLOMHGxkTZX3c45dRCgAAAJM"]
[Fri Apr 17 07:05:16.956499 2026] [:error] [pid 9263:tid 9270] [client 74.248.157.73:31159] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tiny2.php"] [unique_id "aeFrLBP68VyHNvj1e549wwAAAMU"]
[Fri Apr 17 07:05:18.528323 2026] [:error] [pid 9153:tid 9236] [client 74.248.157.73:53755] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/state.php"] [unique_id "aeFrLuMHGxkTZX3c45dRFQAAAJI"]
[Fri Apr 17 07:05:19.747096 2026] [:error] [pid 9153:tid 9229] [client 74.248.157.73:31157] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/state.php"] [unique_id "aeFrL-MHGxkTZX3c45dRGgAAAIs"]
[Fri Apr 17 07:05:20.862210 2026] [:error] [pid 25010:tid 25018] [client 74.248.157.73:62283] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/state.php"] [unique_id "aeFrMI-7kkf42RarqQ3fIAAAAUU"]
[Fri Apr 17 07:05:21.516931 2026] [:error] [pid 25010:tid 25035] [client 74.248.157.73:7357] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/state.php"] [unique_id "aeFrMY-7kkf42RarqQ3fIgAAAVY"]
[Fri Apr 17 07:05:23.473175 2026] [:error] [pid 9152:tid 9204] [client 74.248.157.73:7178] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2.php"] [unique_id "aeFrM5JYca8I3TNCwIdAlgAAAE4"]
[Fri Apr 17 07:05:24.823547 2026] [:error] [pid 9263:tid 9286] [client 74.248.157.73:31107] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2.php"] [unique_id "aeFrNBP68VyHNvj1e549ygAAANU"]
[Fri Apr 17 07:05:26.397228 2026] [:error] [pid 9152:tid 9206] [client 74.248.157.73:42818] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2.php"] [unique_id "aeFrNpJYca8I3TNCwIdAmQAAAFA"]
[Fri Apr 17 07:05:28.522107 2026] [:error] [pid 9152:tid 9213] [client 74.248.157.73:31162] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2.php"] [unique_id "aeFrOJJYca8I3TNCwIdAnAAAAFc"]
[Fri Apr 17 07:05:30.011526 2026] [:error] [pid 9263:tid 9274] [client 74.248.157.73:62851] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wps.php"] [unique_id "aeFrOhP68VyHNvj1e5490gAAAMk"]
[Fri Apr 17 07:05:31.738366 2026] [:error] [pid 25010:tid 25026] [client 74.248.157.73:62864] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wps.php"] [unique_id "aeFrO4-7kkf42RarqQ3fQAAAAU0"]
[Fri Apr 17 07:05:33.645098 2026] [:error] [pid 25010:tid 25035] [client 74.248.157.73:30445] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wps.php"] [unique_id "aeFrPY-7kkf42RarqQ3fTAAAAVY"]
[Fri Apr 17 07:05:35.229500 2026] [:error] [pid 25010:tid 25019] [client 74.248.157.73:30415] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wps.php"] [unique_id "aeFrP4-7kkf42RarqQ3fWgAAAUY"]
[Fri Apr 17 07:05:35.925107 2026] [:error] [pid 25010:tid 25027] [client 74.248.157.73:55259] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ayk.php"] [unique_id "aeFrP4-7kkf42RarqQ3fXwAAAU4"]
[Fri Apr 17 07:05:37.088156 2026] [:error] [pid 25010:tid 25019] [client 74.248.157.73:50863] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ayk.php"] [unique_id "aeFrQY-7kkf42RarqQ3faQAAAUY"]
[Fri Apr 17 07:05:38.667792 2026] [:error] [pid 51878:tid 51885] [client 74.248.157.73:34119] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ayk.php"] [unique_id "aeFrQknQhUtMbw9EsgbG1AAAAQU"]
[Fri Apr 17 07:05:39.941201 2026] [:error] [pid 25010:tid 25025] [client 74.248.157.73:50818] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ayk.php"] [unique_id "aeFrQ4-7kkf42RarqQ3fewAAAUw"]
[Fri Apr 17 07:05:41.267957 2026] [:error] [pid 9153:tid 9237] [client 74.248.157.73:62275] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wgift1.php"] [unique_id "aeFrReMHGxkTZX3c45dRLQAAAJM"]
[Fri Apr 17 07:05:42.521209 2026] [:error] [pid 51878:tid 51903] [client 74.248.157.73:41611] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wgift1.php"] [unique_id "aeFrRknQhUtMbw9EsgbG2QAAARc"]
[Fri Apr 17 07:05:44.418157 2026] [:error] [pid 9153:tid 9222] [client 74.248.157.73:50807] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wgift1.php"] [unique_id "aeFrSOMHGxkTZX3c45dRNAAAAIQ"]
[Fri Apr 17 07:05:45.161870 2026] [:error] [pid 9263:tid 9284] [client 74.248.157.73:30471] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wgift1.php"] [unique_id "aeFrSRP68VyHNvj1e5493AAAANM"]
[Fri Apr 17 07:05:46.118754 2026] [:error] [pid 51878:tid 51880] [client 74.248.157.73:41663] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ss.php"] [unique_id "aeFrSknQhUtMbw9EsgbG4AAAAQA"]
[Fri Apr 17 07:05:46.796742 2026] [:error] [pid 51878:tid 51885] [client 74.248.157.73:37305] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ss.php"] [unique_id "aeFrSknQhUtMbw9EsgbG5AAAAQU"]
[Fri Apr 17 07:05:47.443522 2026] [:error] [pid 51878:tid 51884] [client 74.248.157.73:64865] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ss.php"] [unique_id "aeFrS0nQhUtMbw9EsgbG5gAAAQQ"]
[Fri Apr 17 07:05:48.485472 2026] [:error] [pid 9153:tid 9224] [client 74.248.157.73:64847] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ss.php"] [unique_id "aeFrTOMHGxkTZX3c45dRNQAAAIY"]
[Fri Apr 17 07:05:49.601784 2026] [:error] [pid 9153:tid 9241] [client 74.248.157.73:50778] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tx79.php"] [unique_id "aeFrTeMHGxkTZX3c45dROQAAAJc"]
[Fri Apr 17 07:05:50.385496 2026] [:error] [pid 25010:tid 25014] [client 74.248.157.73:62480] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tx79.php"] [unique_id "aeFrTo-7kkf42RarqQ3fkQAAAUE"]
[Fri Apr 17 07:05:51.647967 2026] [:error] [pid 51878:tid 51881] [client 74.248.157.73:50804] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tx79.php"] [unique_id "aeFrT0nQhUtMbw9EsgbG6wAAAQE"]
[Fri Apr 17 07:05:52.501871 2026] [:error] [pid 25010:tid 25017] [client 74.248.157.73:50787] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tx79.php"] [unique_id "aeFrUI-7kkf42RarqQ3fmAAAAUQ"]
[Fri Apr 17 07:05:53.776721 2026] [:error] [pid 25010:tid 25030] [client 74.248.157.73:56221] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/7.php"] [unique_id "aeFrUY-7kkf42RarqQ3fnQAAAVE"]
[Fri Apr 17 07:05:54.735278 2026] [:error] [pid 25010:tid 25019] [client 74.248.157.73:41600] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/7.php"] [unique_id "aeFrUo-7kkf42RarqQ3fpgAAAUY"]
[Fri Apr 17 07:05:56.410995 2026] [:error] [pid 9151:tid 9168] [client 74.248.157.73:50769] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/7.php"] [unique_id "aeFrVMhTVuRPkua22vTF2wAAAAc"]
[Fri Apr 17 07:05:57.723484 2026] [:error] [pid 25010:tid 25019] [client 74.248.157.73:56785] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/7.php"] [unique_id "aeFrVY-7kkf42RarqQ3frgAAAUY"]
[Fri Apr 17 07:05:58.987116 2026] [:error] [pid 51878:tid 51890] [client 74.248.157.73:45612] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "aeFrVknQhUtMbw9EsgbG9QAAAQo"]
[Fri Apr 17 07:06:00.012173 2026] [:error] [pid 25010:tid 25034] [client 74.248.157.73:64848] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "aeFrWI-7kkf42RarqQ3ftwAAAVU"]
[Fri Apr 17 07:06:01.148041 2026] [:error] [pid 9151:tid 9179] [client 74.248.157.73:45610] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "aeFrWchTVuRPkua22vTF5QAAABI"]
[Fri Apr 17 07:06:02.066156 2026] [:error] [pid 9152:tid 9201] [client 74.248.157.73:7847] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "aeFrWpJYca8I3TNCwIdAqQAAAEs"]
[Fri Apr 17 07:06:02.716930 2026] [:error] [pid 9151:tid 9174] [client 74.248.157.73:45616] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/config.php"] [unique_id "aeFrWshTVuRPkua22vTF7AAAAA0"]
[Fri Apr 17 07:06:03.823895 2026] [:error] [pid 25010:tid 25026] [client 74.248.157.73:35918] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/config.php"] [unique_id "aeFrW4-7kkf42RarqQ3fwAAAAU0"]
[Fri Apr 17 07:06:04.701991 2026] [:error] [pid 9263:tid 9268] [client 74.248.157.73:45623] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/config.php"] [unique_id "aeFrXBP68VyHNvj1e5495wAAAMM"]
[Fri Apr 17 07:06:05.797923 2026] [:error] [pid 51878:tid 51897] [client 74.248.157.73:56211] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/config.php"] [unique_id "aeFrXUnQhUtMbw9EsgbHAwAAARE"]
[Fri Apr 17 07:06:06.843384 2026] [proxy_fcgi:error] [pid 9153:tid 9236] [client 74.248.157.73:39621] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 07:06:07.357888 2026] [:error] [pid 9153:tid 9238] [client 74.248.157.73:39621] [client 74.248.157.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dwelectservices.com.au"] [uri "/tiny.php"] [unique_id "aeFrX-MHGxkTZX3c45dRSgAAAJQ"]
[Fri Apr 17 07:06:09.642008 2026] [proxy_fcgi:error] [pid 51878:tid 51891] [client 74.248.157.73:39644] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 07:06:09.936861 2026] [proxy_fcgi:error] [pid 51878:tid 51882] [client 74.248.157.73:39644] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 07:06:10.224811 2026] [proxy_fcgi:error] [pid 51878:tid 51904] [client 74.248.157.73:39644] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 07:06:10.515406 2026] [proxy_fcgi:error] [pid 51878:tid 51900] [client 74.248.157.73:39644] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 07:06:10.805665 2026] [proxy_fcgi:error] [pid 51878:tid 51895] [client 74.248.157.73:39644] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 07:06:11.099170 2026] [proxy_fcgi:error] [pid 51878:tid 51886] [client 74.248.157.73:39644] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 07:06:11.388497 2026] [proxy_fcgi:error] [pid 51878:tid 51902] [client 74.248.157.73:39644] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 07:06:11.676713 2026] [proxy_fcgi:error] [pid 51878:tid 51888] [client 74.248.157.73:39644] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 07:06:12.322315 2026] [proxy_fcgi:error] [pid 51878:tid 51893] [client 74.248.157.73:39644] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 07:06:12.606808 2026] [:error] [pid 51878:tid 51896] [client 74.248.157.73:39644] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lib.php"] [unique_id "aeFrZEnQhUtMbw9EsgbHEQAAARA"]
[Fri Apr 17 07:06:14.607650 2026] [:error] [pid 9153:tid 9231] [client 74.248.157.73:63574] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lib.php"] [unique_id "aeFrZuMHGxkTZX3c45dRawAAAI0"]
[Fri Apr 17 07:06:17.902610 2026] [:error] [pid 9152:tid 9198] [client 74.248.157.73:61658] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lib.php"] [unique_id "aeFraZJYca8I3TNCwIdArgAAAEg"]
[Fri Apr 17 07:06:22.312940 2026] [:error] [pid 51878:tid 51890] [client 74.248.157.73:47374] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lib.php"] [unique_id "aeFrbknQhUtMbw9EsgbHFgAAAQo"]
[Fri Apr 17 07:06:24.467883 2026] [:error] [pid 51878:tid 51892] [client 74.248.157.73:34982] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/roksad1.php"] [unique_id "aeFrcEnQhUtMbw9EsgbHGwAAAQw"]
[Fri Apr 17 07:06:26.250704 2026] [:error] [pid 9263:tid 9281] [client 74.248.157.73:47415] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/roksad1.php"] [unique_id "aeFrchP68VyHNvj1e549-QAAANA"]
[Fri Apr 17 07:06:28.489854 2026] [:error] [pid 9153:tid 9223] [client 74.248.157.73:60931] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/roksad1.php"] [unique_id "aeFrdOMHGxkTZX3c45dRoQAAAIU"]
[Fri Apr 17 07:06:33.472148 2026] [:error] [pid 25010:tid 25034] [client 74.248.157.73:35584] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/roksad1.php"] [unique_id "aeFreY-7kkf42RarqQ3f7AAAAVU"]
[Fri Apr 17 07:06:34.580931 2026] [:error] [pid 9263:tid 9286] [client 74.248.157.73:35598] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wmore1.php"] [unique_id "aeFrehP68VyHNvj1e54-BQAAANU"]
[Fri Apr 17 07:06:35.804731 2026] [:error] [pid 9153:tid 9225] [client 74.248.157.73:59680] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wmore1.php"] [unique_id "aeFre-MHGxkTZX3c45dRtgAAAIc"]
[Fri Apr 17 07:06:36.782504 2026] [:error] [pid 25010:tid 25033] [client 74.248.157.73:48153] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wmore1.php"] [unique_id "aeFrfI-7kkf42RarqQ3f7gAAAVQ"]
[Fri Apr 17 07:06:39.046358 2026] [:error] [pid 9153:tid 9232] [client 74.248.157.73:43792] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wmore1.php"] [unique_id "aeFrf-MHGxkTZX3c45dRuwAAAI4"]
[Fri Apr 17 07:06:41.623601 2026] [:error] [pid 9153:tid 9219] [client 74.248.157.73:37840] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/adminfuns.php"] [unique_id "aeFrgeMHGxkTZX3c45dRxQAAAIE"]
[Fri Apr 17 07:06:42.803352 2026] [:error] [pid 9263:tid 9289] [client 74.248.157.73:60980] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/adminfuns.php"] [unique_id "aeFrghP68VyHNvj1e54-CwAAANg"]
[Fri Apr 17 07:06:44.443959 2026] [:error] [pid 51878:tid 51881] [client 74.248.157.73:35567] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/adminfuns.php"] [unique_id "aeFrhEnQhUtMbw9EsgbHNQAAAQE"]
[Fri Apr 17 07:06:45.658972 2026] [:error] [pid 9152:tid 9201] [client 74.248.157.73:7876] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/adminfuns.php"] [unique_id "aeFrhZJYca8I3TNCwIdAvQAAAEs"]
[Fri Apr 17 07:06:46.484897 2026] [:error] [pid 25010:tid 25018] [client 74.248.157.73:38557] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/chosen.php"] [unique_id "aeFrho-7kkf42RarqQ3f9wAAAUU"]
[Fri Apr 17 07:06:48.393607 2026] [:error] [pid 51878:tid 51890] [client 74.248.157.73:61617] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/chosen.php"] [unique_id "aeFriEnQhUtMbw9EsgbHPQAAAQo"]
[Fri Apr 17 07:06:49.413917 2026] [:error] [pid 51878:tid 51894] [client 74.248.157.73:7553] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/chosen.php"] [unique_id "aeFriUnQhUtMbw9EsgbHPwAAAQ4"]
[Fri Apr 17 07:06:51.192867 2026] [:error] [pid 9263:tid 9270] [client 74.248.157.73:40982] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/chosen.php"] [unique_id "aeFrixP68VyHNvj1e54-HwAAAMU"]
[Fri Apr 17 07:06:53.367762 2026] [:error] [pid 9151:tid 9161] [client 74.248.157.73:62271] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dass.php"] [unique_id "aeFrjchTVuRPkua22vTGBgAAAAA"]
[Fri Apr 17 07:06:55.291990 2026] [:error] [pid 51878:tid 51892] [client 74.248.157.73:55871] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dass.php"] [unique_id "aeFrj0nQhUtMbw9EsgbHUgAAAQw"]
[Fri Apr 17 07:06:56.059546 2026] [:error] [pid 9151:tid 9173] [client 74.248.157.73:41004] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dass.php"] [unique_id "aeFrkMhTVuRPkua22vTGCAAAAAw"]
[Fri Apr 17 07:06:57.269633 2026] [:error] [pid 9263:tid 9288] [client 74.248.157.73:61049] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dass.php"] [unique_id "aeFrkRP68VyHNvj1e54-JAAAANc"]
[Fri Apr 17 07:06:58.510547 2026] [:error] [pid 51878:tid 51890] [client 74.248.157.73:40988] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/db.php"] [unique_id "aeFrkknQhUtMbw9EsgbHWwAAAQo"]
[Fri Apr 17 07:06:59.646471 2026] [:error] [pid 9153:tid 9223] [client 74.248.157.73:61620] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/db.php"] [unique_id "aeFrk-MHGxkTZX3c45dR2AAAAIU"]
[Fri Apr 17 07:07:00.678568 2026] [:error] [pid 25010:tid 25025] [client 74.248.157.73:40984] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/db.php"] [unique_id "aeFrlI-7kkf42RarqQ3gEgAAAUw"]
[Fri Apr 17 07:07:02.920381 2026] [:error] [pid 51878:tid 51889] [client 74.248.157.73:61051] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/db.php"] [unique_id "aeFrlknQhUtMbw9EsgbHbQAAAQk"]
[Fri Apr 17 07:07:04.072972 2026] [:error] [pid 51878:tid 51899] [client 74.248.157.73:40975] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/less.php"] [unique_id "aeFrmEnQhUtMbw9EsgbHcQAAARM"]
[Fri Apr 17 07:07:05.565618 2026] [:error] [pid 9151:tid 9179] [client 74.248.157.73:60998] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/less.php"] [unique_id "aeFrmchTVuRPkua22vTGHQAAABI"]
[Fri Apr 17 07:07:06.365082 2026] [:error] [pid 9151:tid 9173] [client 74.248.157.73:39742] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/less.php"] [unique_id "aeFrmshTVuRPkua22vTGIAAAAAw"]
[Fri Apr 17 07:07:07.323961 2026] [:error] [pid 25010:tid 25028] [client 74.248.157.73:62181] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/less.php"] [unique_id "aeFrm4-7kkf42RarqQ3gJAAAAU8"]
[Fri Apr 17 07:07:08.029943 2026] [:error] [pid 9153:tid 9225] [client 74.248.157.73:60361] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws86.php"] [unique_id "aeFrnOMHGxkTZX3c45dR5wAAAIc"]
[Fri Apr 17 07:07:09.524357 2026] [:error] [pid 51878:tid 51899] [client 74.248.157.73:31036] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws86.php"] [unique_id "aeFrnUnQhUtMbw9EsgbHfAAAARM"]
[Fri Apr 17 07:07:10.247011 2026] [:error] [pid 9151:tid 9176] [client 74.248.157.73:40997] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws86.php"] [unique_id "aeFrnshTVuRPkua22vTGLAAAAA8"]
[Fri Apr 17 07:07:11.027817 2026] [:error] [pid 9153:tid 9228] [client 74.248.157.73:42245] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws86.php"] [unique_id "aeFrn-MHGxkTZX3c45dR6gAAAIo"]
[Fri Apr 17 07:07:12.128437 2026] [proxy_fcgi:error] [pid 25010:tid 25023] [client 74.248.157.73:60376] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 07:07:12.517851 2026] [proxy_fcgi:error] [pid 25010:tid 25027] [client 74.248.157.73:60376] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 07:07:12.776745 2026] [proxy_fcgi:error] [pid 25010:tid 25030] [client 74.248.157.73:60376] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 07:07:13.038437 2026] [proxy_fcgi:error] [pid 25010:tid 25020] [client 74.248.157.73:60376] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 07:07:13.297168 2026] [proxy_fcgi:error] [pid 25010:tid 25019] [client 74.248.157.73:60376] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 07:07:13.732063 2026] [proxy_fcgi:error] [pid 25010:tid 25021] [client 74.248.157.73:60376] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 07:07:14.189121 2026] [proxy_fcgi:error] [pid 25010:tid 25013] [client 74.248.157.73:60376] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 07:07:14.450820 2026] [proxy_fcgi:error] [pid 25010:tid 25026] [client 74.248.157.73:60376] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 07:07:14.709812 2026] [proxy_fcgi:error] [pid 25010:tid 25027] [client 74.248.157.73:60376] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 07:07:14.992075 2026] [proxy_fcgi:error] [pid 25010:tid 25033] [client 74.248.157.73:60376] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 07:07:15.250874 2026] [proxy_fcgi:error] [pid 25010:tid 25025] [client 74.248.157.73:60376] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 07:07:15.514842 2026] [:error] [pid 25010:tid 25016] [client 74.248.157.73:60376] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/samll.php"] [unique_id "aeFro4-7kkf42RarqQ3gSgAAAUM"]
[Fri Apr 17 07:07:16.680860 2026] [:error] [pid 9153:tid 9236] [client 74.248.157.73:16257] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/samll.php"] [unique_id "aeFrpOMHGxkTZX3c45dR9QAAAJI"]
[Fri Apr 17 07:07:17.482134 2026] [:error] [pid 9153:tid 9222] [client 74.248.157.73:42280] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/samll.php"] [unique_id "aeFrpeMHGxkTZX3c45dR-wAAAIQ"]
[Fri Apr 17 07:07:18.742140 2026] [:error] [pid 9263:tid 9278] [client 74.248.157.73:31309] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/samll.php"] [unique_id "aeFrphP68VyHNvj1e54-NgAAAM0"]
[Fri Apr 17 07:07:20.764627 2026] [:error] [pid 9153:tid 9231] [client 74.248.157.73:60398] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zogy1.php"] [unique_id "aeFrqOMHGxkTZX3c45dSDwAAAI0"]
[Fri Apr 17 07:07:22.282217 2026] [:error] [pid 9152:tid 9212] [client 74.248.157.73:16298] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zogy1.php"] [unique_id "aeFrqpJYca8I3TNCwIdAzQAAAFY"]
[Fri Apr 17 07:07:23.852179 2026] [:error] [pid 9153:tid 9232] [client 74.248.157.73:31014] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zogy1.php"] [unique_id "aeFrq-MHGxkTZX3c45dSGQAAAI4"]
[Fri Apr 17 07:07:24.837489 2026] [:error] [pid 9153:tid 9235] [client 74.248.157.73:32854] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zogy1.php"] [unique_id "aeFrrOMHGxkTZX3c45dSHAAAAJE"]
[Fri Apr 17 07:07:25.531441 2026] [:error] [pid 9263:tid 9271] [client 74.248.157.73:28451] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aios-bootstrap.php"] [unique_id "aeFrrRP68VyHNvj1e54-OAAAAMY"]
[Fri Apr 17 07:07:26.560601 2026] [:error] [pid 9152:tid 9196] [client 74.248.157.73:38500] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aios-bootstrap.php"] [unique_id "aeFrrpJYca8I3TNCwIdA1AAAAEY"]
[Fri Apr 17 07:07:27.429178 2026] [:error] [pid 9153:tid 9240] [client 74.248.157.73:64796] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aios-bootstrap.php"] [unique_id "aeFrr-MHGxkTZX3c45dSHwAAAJY"]
[Fri Apr 17 07:07:28.327870 2026] [:error] [pid 25010:tid 25022] [client 74.248.157.73:55732] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aios-bootstrap.php"] [unique_id "aeFrsI-7kkf42RarqQ3gaAAAAUk"]
[Fri Apr 17 07:07:29.305319 2026] [:error] [pid 25010:tid 25028] [client 74.248.157.73:32869] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rh.php"] [unique_id "aeFrsY-7kkf42RarqQ3gbQAAAU8"]
[Fri Apr 17 07:07:30.499129 2026] [:error] [pid 9152:tid 9208] [client 74.248.157.73:31555] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rh.php"] [unique_id "aeFrspJYca8I3TNCwIdA1wAAAFI"]
[Fri Apr 17 07:07:31.497469 2026] [:error] [pid 9153:tid 9230] [client 74.248.157.73:28464] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rh.php"] [unique_id "aeFrs-MHGxkTZX3c45dSJAAAAIw"]
[Fri Apr 17 07:07:32.761686 2026] [:error] [pid 51878:tid 51885] [client 74.248.157.73:28465] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rh.php"] [unique_id "aeFrtEnQhUtMbw9EsgbHngAAAQU"]
[Fri Apr 17 07:07:33.883314 2026] [:error] [pid 9152:tid 9212] [client 74.248.157.73:8099] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gz.php"] [unique_id "aeFrtZJYca8I3TNCwIdA3wAAAFY"]
[Fri Apr 17 07:07:35.078571 2026] [:error] [pid 25010:tid 25021] [client 74.248.157.73:48075] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gz.php"] [unique_id "aeFrt4-7kkf42RarqQ3gdQAAAUg"]
[Fri Apr 17 07:07:36.540997 2026] [:error] [pid 9151:tid 9173] [client 74.248.157.73:8151] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gz.php"] [unique_id "aeFruMhTVuRPkua22vTGOwAAAAw"]
[Fri Apr 17 07:07:38.960751 2026] [:error] [pid 9151:tid 9175] [client 74.248.157.73:31557] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gz.php"] [unique_id "aeFrushTVuRPkua22vTGPAAAAA4"]
[Fri Apr 17 07:07:41.106225 2026] [:error] [pid 25010:tid 25024] [client 74.248.157.73:37944] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gelio1.php"] [unique_id "aeFrvY-7kkf42RarqQ3gggAAAUs"]
[Fri Apr 17 07:07:43.045951 2026] [:error] [pid 9263:tid 9267] [client 74.248.157.73:64823] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gelio1.php"] [unique_id "aeFrvxP68VyHNvj1e54-QQAAAMI"]
[Fri Apr 17 07:07:44.942588 2026] [:error] [pid 9151:tid 9178] [client 74.248.157.73:48897] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gelio1.php"] [unique_id "aeFrwMhTVuRPkua22vTGRQAAABE"]
[Fri Apr 17 07:07:46.368501 2026] [:error] [pid 9153:tid 9223] [client 74.248.157.73:64814] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gelio1.php"] [unique_id "aeFrwuMHGxkTZX3c45dSQwAAAIU"]
[Fri Apr 17 07:07:48.981337 2026] [:error] [pid 9151:tid 9176] [client 74.248.157.73:46667] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/areak1.php"] [unique_id "aeFrxMhTVuRPkua22vTGTQAAAA8"]
[Fri Apr 17 07:07:50.626390 2026] [:error] [pid 25010:tid 25018] [client 74.248.157.73:62259] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/areak1.php"] [unique_id "aeFrxo-7kkf42RarqQ3gkAAAAUU"]
[Fri Apr 17 07:07:52.406585 2026] [:error] [pid 9263:tid 9280] [client 74.248.157.73:37839] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/areak1.php"] [unique_id "aeFryBP68VyHNvj1e54-TAAAAM8"]
[Fri Apr 17 07:07:53.833170 2026] [:error] [pid 9263:tid 9272] [client 74.248.157.73:55867] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/areak1.php"] [unique_id "aeFryRP68VyHNvj1e54-TwAAAMc"]
[Fri Apr 17 07:07:55.518425 2026] [:error] [pid 51878:tid 51904] [client 74.248.157.73:7437] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/qqa.php"] [unique_id "aeFry0nQhUtMbw9EsgbHywAAARg"]
[Fri Apr 17 07:07:56.897155 2026] [:error] [pid 9263:tid 9268] [client 74.248.157.73:35564] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/qqa.php"] [unique_id "aeFrzBP68VyHNvj1e54-UgAAAMM"]
[Fri Apr 17 07:07:57.984616 2026] [:error] [pid 9153:tid 9230] [client 74.248.157.73:37831] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/qqa.php"] [unique_id "aeFrzeMHGxkTZX3c45dSSgAAAIw"]
[Fri Apr 17 07:07:58.943814 2026] [:error] [pid 9151:tid 9182] [client 74.248.157.73:42935] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/qqa.php"] [unique_id "aeFrzshTVuRPkua22vTGWAAAABU"]
[Fri Apr 17 07:07:59.670971 2026] [:error] [pid 9263:tid 9277] [client 74.248.157.73:25258] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dx.php"] [unique_id "aeFrzxP68VyHNvj1e54-WwAAAMw"]
[Fri Apr 17 07:08:00.356645 2026] [:error] [pid 51878:tid 51893] [client 74.248.157.73:54215] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dx.php"] [unique_id "aeFr0EnQhUtMbw9EsgbH1QAAAQ0"]
[Fri Apr 17 07:08:01.008137 2026] [:error] [pid 9153:tid 9242] [client 74.248.157.73:60983] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dx.php"] [unique_id "aeFr0eMHGxkTZX3c45dSYQAAAJg"]
[Fri Apr 17 07:08:01.585532 2026] [:error] [pid 9153:tid 9220] [client 74.248.157.73:50792] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dx.php"] [unique_id "aeFr0eMHGxkTZX3c45dSawAAAII"]
[Fri Apr 17 07:08:02.286672 2026] [:error] [pid 9151:tid 9163] [client 74.248.157.73:41661] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ga.php"] [unique_id "aeFr0shTVuRPkua22vTGXgAAAAI"]
[Fri Apr 17 07:08:03.026970 2026] [:error] [pid 25010:tid 25037] [client 74.248.157.73:50838] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ga.php"] [unique_id "aeFr04-7kkf42RarqQ3gugAAAVg"]
[Fri Apr 17 07:08:03.955618 2026] [:error] [pid 9151:tid 9180] [client 74.248.157.73:31156] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ga.php"] [unique_id "aeFr08hTVuRPkua22vTGawAAABM"]
[Fri Apr 17 07:08:05.508764 2026] [:error] [pid 9153:tid 9239] [client 74.248.157.73:35442] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ga.php"] [unique_id "aeFr1eMHGxkTZX3c45dSeAAAAJU"]
[Fri Apr 17 07:08:07.018290 2026] [:error] [pid 9263:tid 9288] [client 74.248.157.73:36640] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xozx.php"] [unique_id "aeFr1xP68VyHNvj1e54-ZwAAANc"]
[Fri Apr 17 07:08:08.000851 2026] [:error] [pid 9153:tid 9236] [client 74.248.157.73:57428] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xozx.php"] [unique_id "aeFr1-MHGxkTZX3c45dSgQAAAJI"]
[Fri Apr 17 07:08:09.397314 2026] [:error] [pid 25010:tid 25032] [client 74.248.157.73:31142] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xozx.php"] [unique_id "aeFr2Y-7kkf42RarqQ3gygAAAVM"]
[Fri Apr 17 07:08:11.418486 2026] [:error] [pid 9152:tid 9193] [client 74.248.157.73:31128] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xozx.php"] [unique_id "aeFr25JYca8I3TNCwIdBBgAAAEM"]
[Fri Apr 17 07:08:12.090703 2026] [:error] [pid 9152:tid 9200] [client 74.248.157.73:52344] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/1100.php"] [unique_id "aeFr3JJYca8I3TNCwIdBBwAAAEo"]
[Fri Apr 17 07:08:12.684300 2026] [:error] [pid 9263:tid 9269] [client 74.248.157.73:42863] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/1100.php"] [unique_id "aeFr3BP68VyHNvj1e54-dgAAAMQ"]
[Fri Apr 17 07:08:13.785481 2026] [:error] [pid 9153:tid 9224] [client 74.248.157.73:36650] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/1100.php"] [unique_id "aeFr3eMHGxkTZX3c45dSkQAAAIY"]
[Fri Apr 17 07:08:16.551286 2026] [proxy_fcgi:error] [pid 25010:tid 25027] [client 74.248.157.73:34213] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 07:08:16.877662 2026] [proxy_fcgi:error] [pid 25010:tid 25031] [client 74.248.157.73:34213] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 07:08:17.135961 2026] [proxy_fcgi:error] [pid 25010:tid 25020] [client 74.248.157.73:34213] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 07:08:17.395720 2026] [proxy_fcgi:error] [pid 25010:tid 25014] [client 74.248.157.73:34213] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 07:08:17.654301 2026] [proxy_fcgi:error] [pid 25010:tid 25024] [client 74.248.157.73:34213] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 07:08:17.913647 2026] [proxy_fcgi:error] [pid 25010:tid 25017] [client 74.248.157.73:34213] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 07:08:18.172588 2026] [proxy_fcgi:error] [pid 25010:tid 25013] [client 74.248.157.73:34213] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 07:08:18.432451 2026] [proxy_fcgi:error] [pid 25010:tid 25026] [client 74.248.157.73:34213] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 07:08:18.691332 2026] [proxy_fcgi:error] [pid 25010:tid 25015] [client 74.248.157.73:34213] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 07:08:18.949552 2026] [proxy_fcgi:error] [pid 25010:tid 25033] [client 74.248.157.73:34213] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 07:08:19.534411 2026] [proxy_fcgi:error] [pid 25010:tid 25035] [client 74.248.157.73:34213] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 07:08:19.802504 2026] [:error] [pid 25010:tid 25014] [client 74.248.157.73:34213] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/saorix1.php"] [unique_id "aeFr44-7kkf42RarqQ3g9AAAAUE"]
[Fri Apr 17 07:08:20.926896 2026] [:error] [pid 51878:tid 51904] [client 74.248.157.73:52300] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/saorix1.php"] [unique_id "aeFr5EnQhUtMbw9EsgbH6wAAARg"]
[Fri Apr 17 07:08:22.729571 2026] [:error] [pid 9263:tid 9267] [client 74.248.157.73:58515] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/saorix1.php"] [unique_id "aeFr5hP68VyHNvj1e54-ewAAAMI"]
[Fri Apr 17 07:08:24.053053 2026] [:error] [pid 51878:tid 51888] [client 74.248.157.73:34216] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/saorix1.php"] [unique_id "aeFr6EnQhUtMbw9EsgbH7wAAAQg"]
[Fri Apr 17 07:08:26.172294 2026] [:error] [pid 25010:tid 25031] [client 74.248.157.73:35422] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xper.php"] [unique_id "aeFr6o-7kkf42RarqQ3hFgAAAVI"]
[Fri Apr 17 07:08:27.835188 2026] [:error] [pid 25010:tid 25019] [client 74.248.157.73:63557] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xper.php"] [unique_id "aeFr64-7kkf42RarqQ3hIQAAAUY"]
[Fri Apr 17 07:08:29.301705 2026] [:error] [pid 25010:tid 25023] [client 74.248.157.73:36024] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xper.php"] [unique_id "aeFr7Y-7kkf42RarqQ3hMQAAAUo"]
[Fri Apr 17 07:08:30.188681 2026] [:error] [pid 9152:tid 9212] [client 74.248.157.73:59764] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xper.php"] [unique_id "aeFr7pJYca8I3TNCwIdBEQAAAFY"]
[Fri Apr 17 07:08:30.986010 2026] [:error] [pid 51878:tid 51896] [client 74.248.157.73:36662] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wxpass.php"] [unique_id "aeFr7knQhUtMbw9EsgbH-AAAARA"]
[Fri Apr 17 07:08:31.656347 2026] [:error] [pid 9263:tid 9285] [client 74.248.157.73:57318] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wxpass.php"] [unique_id "aeFr7xP68VyHNvj1e54-hwAAANQ"]
[Fri Apr 17 07:08:32.922185 2026] [:error] [pid 51878:tid 51902] [client 74.248.157.73:46117] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wxpass.php"] [unique_id "aeFr8EnQhUtMbw9EsgbIBAAAARY"]
[Fri Apr 17 07:08:34.499889 2026] [:error] [pid 9152:tid 9191] [client 74.248.157.73:7389] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wxpass.php"] [unique_id "aeFr8pJYca8I3TNCwIdBHQAAAEE"]
[Fri Apr 17 07:08:35.803065 2026] [:error] [pid 25010:tid 25018] [client 74.248.157.73:46141] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/000.php"] [unique_id "aeFr84-7kkf42RarqQ3hQgAAAUU"]
[Fri Apr 17 07:08:37.128572 2026] [:error] [pid 9152:tid 9194] [client 74.248.157.73:63565] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/000.php"] [unique_id "aeFr9ZJYca8I3TNCwIdBIgAAAEQ"]
[Fri Apr 17 07:08:38.219616 2026] [:error] [pid 51878:tid 51902] [client 74.248.157.73:57316] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/000.php"] [unique_id "aeFr9knQhUtMbw9EsgbIGgAAARY"]
[Fri Apr 17 07:08:39.250559 2026] [:error] [pid 51878:tid 51885] [client 74.248.157.73:59765] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/000.php"] [unique_id "aeFr90nQhUtMbw9EsgbIHwAAAQU"]
[Fri Apr 17 07:08:40.649480 2026] [:error] [pid 51878:tid 51891] [client 74.248.157.73:63554] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/config.php"] [unique_id "aeFr-EnQhUtMbw9EsgbIIQAAAQs"]
[Fri Apr 17 07:08:42.084436 2026] [:error] [pid 51878:tid 51900] [client 74.248.157.73:34179] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/config.php"] [unique_id "aeFr-knQhUtMbw9EsgbIIwAAARQ"]
[Fri Apr 17 07:08:44.742257 2026] [:error] [pid 9152:tid 9211] [client 74.248.157.73:59757] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/config.php"] [unique_id "aeFr_JJYca8I3TNCwIdBPgAAAFU"]
[Fri Apr 17 07:08:46.961376 2026] [:error] [pid 9153:tid 9227] [client 74.248.157.73:35399] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/config.php"] [unique_id "aeFr_uMHGxkTZX3c45dS0QAAAIk"]
[Fri Apr 17 07:08:47.990573 2026] [:error] [pid 51878:tid 51885] [client 74.248.157.73:58531] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x3x.php"] [unique_id "aeFr_0nQhUtMbw9EsgbINQAAAQU"]
[Fri Apr 17 07:08:48.946509 2026] [:error] [pid 25010:tid 25013] [client 74.248.157.73:63615] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x3x.php"] [unique_id "aeFsAI-7kkf42RarqQ3hYgAAAUA"]
[Fri Apr 17 07:08:50.008644 2026] [:error] [pid 9153:tid 9233] [client 74.248.157.73:57452] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x3x.php"] [unique_id "aeFsAuMHGxkTZX3c45dS2QAAAI8"]
[Fri Apr 17 07:08:51.019006 2026] [:error] [pid 9153:tid 9229] [client 74.248.157.73:44465] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x3x.php"] [unique_id "aeFsA-MHGxkTZX3c45dS2wAAAIs"]
[Fri Apr 17 07:08:52.261101 2026] [:error] [pid 9153:tid 9235] [client 74.248.157.73:46095] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xy.php"] [unique_id "aeFsBOMHGxkTZX3c45dS3QAAAJE"]
[Fri Apr 17 07:08:53.275510 2026] [:error] [pid 9152:tid 9197] [client 74.248.157.73:35572] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xy.php"] [unique_id "aeFsBZJYca8I3TNCwIdBaQAAAEc"]
[Fri Apr 17 07:08:54.983535 2026] [:error] [pid 9153:tid 9233] [client 74.248.157.73:39035] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xy.php"] [unique_id "aeFsBuMHGxkTZX3c45dS6wAAAI8"]
[Fri Apr 17 07:08:56.772427 2026] [:error] [pid 9152:tid 9206] [client 74.248.157.73:32468] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xy.php"] [unique_id "aeFsCJJYca8I3TNCwIdBgAAAAFA"]
[Fri Apr 17 07:08:57.956069 2026] [:error] [pid 9153:tid 9240] [client 74.248.157.73:56267] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/global.php"] [unique_id "aeFsCeMHGxkTZX3c45dS9QAAAJY"]
[Fri Apr 17 07:08:58.697200 2026] [:error] [pid 25010:tid 25037] [client 74.248.157.73:46550] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/global.php"] [unique_id "aeFsCo-7kkf42RarqQ3hhgAAAVg"]
[Fri Apr 17 07:08:59.425405 2026] [:error] [pid 9263:tid 9269] [client 74.248.157.73:33677] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/global.php"] [unique_id "aeFsCxP68VyHNvj1e54-mgAAAMQ"]
[Fri Apr 17 07:09:00.029571 2026] [:error] [pid 9263:tid 9272] [client 74.248.157.73:41552] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/global.php"] [unique_id "aeFsDBP68VyHNvj1e54-nQAAAMc"]
[Fri Apr 17 07:09:01.236516 2026] [:error] [pid 25010:tid 25029] [client 74.248.157.73:62954] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/themes.php"] [unique_id "aeFsDY-7kkf42RarqQ3hjwAAAVA"]
[Fri Apr 17 07:09:02.741004 2026] [:error] [pid 25010:tid 25030] [client 74.248.157.73:41544] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/themes.php"] [unique_id "aeFsDo-7kkf42RarqQ3hlgAAAVE"]
[Fri Apr 17 07:09:03.938999 2026] [:error] [pid 9153:tid 9242] [client 74.248.157.73:62968] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/themes.php"] [unique_id "aeFsD-MHGxkTZX3c45dTGwAAAJg"]
[Fri Apr 17 07:09:05.390653 2026] [:error] [pid 9153:tid 9222] [client 74.248.157.73:46568] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/themes.php"] [unique_id "aeFsEeMHGxkTZX3c45dTJAAAAIQ"]
[Fri Apr 17 07:09:06.850125 2026] [:error] [pid 25010:tid 25034] [client 74.248.157.73:32950] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/link.php"] [unique_id "aeFsEo-7kkf42RarqQ3howAAAVU"]
[Fri Apr 17 07:09:07.930676 2026] [:error] [pid 51878:tid 51904] [client 74.248.157.73:62952] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/link.php"] [unique_id "aeFsE0nQhUtMbw9EsgbISwAAARg"]
[Fri Apr 17 07:09:08.829501 2026] [:error] [pid 25010:tid 25030] [client 74.248.157.73:52412] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/link.php"] [unique_id "aeFsFI-7kkf42RarqQ3hpwAAAVE"]
[Fri Apr 17 07:09:09.934689 2026] [:error] [pid 25010:tid 25017] [client 74.248.157.73:41588] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/link.php"] [unique_id "aeFsFY-7kkf42RarqQ3hqgAAAUQ"]
[Fri Apr 17 07:09:11.119455 2026] [:error] [pid 25010:tid 25033] [client 74.248.157.73:58105] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ortasekerli1.php"] [unique_id "aeFsF4-7kkf42RarqQ3hrgAAAVQ"]
[Fri Apr 17 07:09:13.012502 2026] [:error] [pid 25010:tid 25019] [client 74.248.157.73:46613] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ortasekerli1.php"] [unique_id "aeFsGY-7kkf42RarqQ3huQAAAUY"]
[Fri Apr 17 07:09:15.367146 2026] [:error] [pid 9263:tid 9286] [client 74.248.157.73:58101] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ortasekerli1.php"] [unique_id "aeFsGxP68VyHNvj1e54-qAAAANU"]
[Fri Apr 17 07:09:18.780653 2026] [:error] [pid 25010:tid 25031] [client 74.248.157.73:46601] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ortasekerli1.php"] [unique_id "aeFsHo-7kkf42RarqQ3h0AAAAVI"]
[Fri Apr 17 07:09:21.233074 2026] [proxy_fcgi:error] [pid 9153:tid 9236] [client 74.248.157.73:57386] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 07:09:21.515036 2026] [:error] [pid 9153:tid 9239] [client 74.248.157.73:57386] [client 74.248.157.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/wincust.php"] [unique_id "aeFsIeMHGxkTZX3c45dTRwAAAJU"]
[Fri Apr 17 07:09:23.871858 2026] [proxy_fcgi:error] [pid 9263:tid 9276] [client 74.248.157.73:46596] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 07:09:24.131460 2026] [proxy_fcgi:error] [pid 9263:tid 9265] [client 74.248.157.73:46596] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 07:09:24.396270 2026] [proxy_fcgi:error] [pid 9263:tid 9278] [client 74.248.157.73:46596] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 07:09:24.655024 2026] [proxy_fcgi:error] [pid 9263:tid 9288] [client 74.248.157.73:46596] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 07:09:24.934277 2026] [proxy_fcgi:error] [pid 9263:tid 9267] [client 74.248.157.73:46596] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 07:09:26.484002 2026] [proxy_fcgi:error] [pid 9263:tid 9273] [client 74.248.157.73:46596] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 07:09:26.955634 2026] [proxy_fcgi:error] [pid 9263:tid 9280] [client 74.248.157.73:46596] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 07:09:27.214430 2026] [proxy_fcgi:error] [pid 9263:tid 9272] [client 74.248.157.73:46596] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 07:09:27.481501 2026] [proxy_fcgi:error] [pid 9263:tid 9266] [client 74.248.157.73:46596] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 07:09:27.745450 2026] [proxy_fcgi:error] [pid 9263:tid 9276] [client 74.248.157.73:46596] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 07:09:28.154114 2026] [:error] [pid 9263:tid 9278] [client 74.248.157.73:46596] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/e3.php"] [unique_id "aeFsKBP68VyHNvj1e54-1QAAAM0"]
[Fri Apr 17 07:09:29.020141 2026] [:error] [pid 9151:tid 9170] [client 74.248.157.73:56725] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/e3.php"] [unique_id "aeFsKchTVuRPkua22vTGsAAAAAk"]
[Fri Apr 17 07:09:29.986604 2026] [:error] [pid 9263:tid 9281] [client 74.248.157.73:32557] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/e3.php"] [unique_id "aeFsKRP68VyHNvj1e54-1wAAANA"]
[Fri Apr 17 07:09:30.710475 2026] [:error] [pid 9263:tid 9275] [client 74.248.157.73:7243] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/e3.php"] [unique_id "aeFsKhP68VyHNvj1e54-2gAAAMo"]
[Fri Apr 17 07:09:31.529903 2026] [:error] [pid 9152:tid 9214] [client 74.248.157.73:32527] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aevly.php"] [unique_id "aeFsK5JYca8I3TNCwIdCBAAAAFg"]
[Fri Apr 17 07:09:32.204800 2026] [:error] [pid 9152:tid 9211] [client 74.248.157.73:51236] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aevly.php"] [unique_id "aeFsLJJYca8I3TNCwIdCCAAAAFU"]
[Fri Apr 17 07:09:32.923662 2026] [:error] [pid 9263:tid 9274] [client 74.248.157.73:7711] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aevly.php"] [unique_id "aeFsLBP68VyHNvj1e54-2wAAAMk"]
[Fri Apr 17 07:09:33.693997 2026] [:error] [pid 9152:tid 9195] [client 74.248.157.73:60314] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aevly.php"] [unique_id "aeFsLZJYca8I3TNCwIdCEQAAAEU"]
[Fri Apr 17 07:09:34.379547 2026] [:error] [pid 9151:tid 9169] [client 74.248.157.73:64204] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bthil.php"] [unique_id "aeFsLshTVuRPkua22vTGtwAAAAg"]
[Fri Apr 17 07:09:35.739754 2026] [:error] [pid 51878:tid 51903] [client 74.248.157.73:46647] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bthil.php"] [unique_id "aeFsL0nQhUtMbw9EsgbIbwAAARc"]
[Fri Apr 17 07:09:37.928925 2026] [:error] [pid 9153:tid 9222] [client 74.248.157.73:42205] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bthil.php"] [unique_id "aeFsMeMHGxkTZX3c45dTWwAAAIQ"]
[Fri Apr 17 07:09:39.436490 2026] [:error] [pid 9152:tid 9203] [client 74.248.157.73:65483] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bthil.php"] [unique_id "aeFsM5JYca8I3TNCwIdCJQAAAE0"]
[Fri Apr 17 07:09:40.927110 2026] [:error] [pid 51878:tid 51904] [client 74.248.157.73:25060] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-class.php"] [unique_id "aeFsNEnQhUtMbw9EsgbIcwAAARg"]
[Fri Apr 17 07:09:43.710455 2026] [:error] [pid 9152:tid 9200] [client 74.248.157.73:25024] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-class.php"] [unique_id "aeFsN5JYca8I3TNCwIdCLAAAAEo"]
[Fri Apr 17 07:09:46.528408 2026] [:error] [pid 9152:tid 9193] [client 74.248.157.73:54727] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-class.php"] [unique_id "aeFsOpJYca8I3TNCwIdCMgAAAEM"]
[Fri Apr 17 07:09:47.843092 2026] [:error] [pid 9152:tid 9206] [client 74.248.157.73:57911] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-class.php"] [unique_id "aeFsO5JYca8I3TNCwIdCNwAAAFA"]
[Fri Apr 17 07:09:48.658827 2026] [:error] [pid 9151:tid 9170] [client 74.248.157.73:7255] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cilus.php"] [unique_id "aeFsPMhTVuRPkua22vTGywAAAAk"]
[Fri Apr 17 07:09:49.677116 2026] [:error] [pid 51878:tid 51884] [client 74.248.157.73:54776] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cilus.php"] [unique_id "aeFsPUnQhUtMbw9EsgbIdgAAAQQ"]
[Fri Apr 17 07:09:50.268742 2026] [:error] [pid 25010:tid 25023] [client 74.248.157.73:32570] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cilus.php"] [unique_id "aeFsPo-7kkf42RarqQ3iPQAAAUo"]
[Fri Apr 17 07:09:50.964716 2026] [:error] [pid 25010:tid 25016] [client 74.248.157.73:60315] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cilus.php"] [unique_id "aeFsPo-7kkf42RarqQ3iQgAAAUM"]
[Fri Apr 17 07:09:51.570098 2026] [:error] [pid 9263:tid 9279] [client 74.248.157.73:44954] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/d.php"] [unique_id "aeFsPxP68VyHNvj1e54_AAAAAM4"]
[Fri Apr 17 07:09:52.339468 2026] [:error] [pid 9153:tid 9233] [client 74.248.157.73:51202] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/d.php"] [unique_id "aeFsQOMHGxkTZX3c45dTYgAAAI8"]
[Fri Apr 17 07:09:53.165184 2026] [:error] [pid 9151:tid 9178] [client 74.248.157.73:40292] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/d.php"] [unique_id "aeFsQchTVuRPkua22vTG0QAAABE"]
[Fri Apr 17 07:09:54.111971 2026] [:error] [pid 25010:tid 25024] [client 74.248.157.73:48856] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/d.php"] [unique_id "aeFsQo-7kkf42RarqQ3iSgAAAUs"]
[Fri Apr 17 07:09:54.952249 2026] [:error] [pid 9153:tid 9236] [client 74.248.157.73:40256] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/error_log.php"] [unique_id "aeFsQuMHGxkTZX3c45dTZwAAAJI"]
[Fri Apr 17 07:09:55.685677 2026] [:error] [pid 9151:tid 9176] [client 74.248.157.73:56720] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/error_log.php"] [unique_id "aeFsQ8hTVuRPkua22vTG2AAAAA8"]
[Fri Apr 17 07:09:56.309751 2026] [:error] [pid 9152:tid 9206] [client 74.248.157.73:44935] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/error_log.php"] [unique_id "aeFsRJJYca8I3TNCwIdCRwAAAFA"]
[Fri Apr 17 07:09:56.901958 2026] [:error] [pid 9151:tid 9175] [client 74.248.157.73:43737] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/error_log.php"] [unique_id "aeFsRMhTVuRPkua22vTG3QAAAA4"]
[Fri Apr 17 07:09:57.499420 2026] [:error] [pid 25010:tid 25029] [client 74.248.157.73:43739] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Ov-Simple1.php"] [unique_id "aeFsRY-7kkf42RarqQ3iXQAAAVA"]
[Fri Apr 17 07:09:58.473714 2026] [:error] [pid 9151:tid 9170] [client 74.248.157.73:51246] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Ov-Simple1.php"] [unique_id "aeFsRshTVuRPkua22vTG3gAAAAk"]
[Fri Apr 17 07:09:59.109437 2026] [:error] [pid 25010:tid 25014] [client 74.248.157.73:44971] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Ov-Simple1.php"] [unique_id "aeFsR4-7kkf42RarqQ3ibQAAAUE"]
[Fri Apr 17 07:09:59.935509 2026] [:error] [pid 9263:tid 9273] [client 74.248.157.73:51248] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Ov-Simple1.php"] [unique_id "aeFsRxP68VyHNvj1e54_FQAAAMg"]
[Fri Apr 17 07:10:00.497854 2026] [:error] [pid 51878:tid 51896] [client 74.248.157.73:57885] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/curl.php"] [unique_id "aeFsSEnQhUtMbw9EsgbIgQAAARA"]
[Fri Apr 17 07:10:01.019982 2026] [:error] [pid 9153:tid 9223] [client 74.248.157.73:62473] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/curl.php"] [unique_id "aeFsSeMHGxkTZX3c45dTawAAAIU"]
[Fri Apr 17 07:10:01.900174 2026] [:error] [pid 51878:tid 51882] [client 74.248.157.73:49487] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/curl.php"] [unique_id "aeFsSUnQhUtMbw9EsgbIggAAAQI"]
[Fri Apr 17 07:10:03.469303 2026] [:error] [pid 9152:tid 9191] [client 74.248.157.73:48852] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/curl.php"] [unique_id "aeFsS5JYca8I3TNCwIdCTQAAAEE"]
[Fri Apr 17 07:10:04.646925 2026] [:error] [pid 9153:tid 9232] [client 74.248.157.73:62494] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sallu.php"] [unique_id "aeFsTOMHGxkTZX3c45dTeQAAAI4"]
[Fri Apr 17 07:10:05.543774 2026] [:error] [pid 25010:tid 25018] [client 74.248.157.73:34125] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sallu.php"] [unique_id "aeFsTY-7kkf42RarqQ3ilAAAAUU"]
[Fri Apr 17 07:10:06.876462 2026] [:error] [pid 9153:tid 9220] [client 74.248.157.73:28372] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sallu.php"] [unique_id "aeFsTuMHGxkTZX3c45dTgAAAAII"]
[Fri Apr 17 07:10:08.092833 2026] [:error] [pid 25010:tid 25016] [client 74.248.157.73:62318] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sallu.php"] [unique_id "aeFsUI-7kkf42RarqQ3ilwAAAUM"]
[Fri Apr 17 07:10:09.832737 2026] [:error] [pid 9152:tid 9202] [client 74.248.157.73:62297] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f6.php"] [unique_id "aeFsUZJYca8I3TNCwIdCYQAAAEw"]
[Fri Apr 17 07:10:11.114577 2026] [:error] [pid 9263:tid 9280] [client 74.248.157.73:62893] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f6.php"] [unique_id "aeFsUxP68VyHNvj1e54_OAAAAM8"]
[Fri Apr 17 07:10:11.959057 2026] [:error] [pid 9152:tid 9204] [client 74.248.157.73:49500] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f6.php"] [unique_id "aeFsU5JYca8I3TNCwIdCYwAAAE4"]
[Fri Apr 17 07:10:13.647011 2026] [:error] [pid 9152:tid 9200] [client 74.248.157.73:62323] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f6.php"] [unique_id "aeFsVZJYca8I3TNCwIdCZgAAAEo"]
[Fri Apr 17 07:10:14.292664 2026] [:error] [pid 9263:tid 9287] [client 74.248.157.73:34116] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/edit.php"] [unique_id "aeFsVhP68VyHNvj1e54_SwAAANY"]
[Fri Apr 17 07:10:15.707838 2026] [:error] [pid 51878:tid 51880] [client 74.248.157.73:52859] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/edit.php"] [unique_id "aeFsV0nQhUtMbw9EsgbInAAAAQA"]
[Fri Apr 17 07:10:16.580494 2026] [:error] [pid 9263:tid 9288] [client 74.248.157.73:62316] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/edit.php"] [unique_id "aeFsWBP68VyHNvj1e54_WgAAANc"]
[Fri Apr 17 07:10:17.662084 2026] [:error] [pid 9153:tid 9240] [client 74.248.157.73:30436] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/edit.php"] [unique_id "aeFsWeMHGxkTZX3c45dTlwAAAJY"]
[Fri Apr 17 07:10:18.746879 2026] [:error] [pid 9153:tid 9231] [client 74.248.157.73:62335] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aa.php"] [unique_id "aeFsWuMHGxkTZX3c45dTnQAAAI0"]
[Fri Apr 17 07:10:20.939340 2026] [:error] [pid 9151:tid 9177] [client 74.248.157.73:50788] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aa.php"] [unique_id "aeFsXMhTVuRPkua22vTG5gAAABA"]
[Fri Apr 17 07:10:23.645899 2026] [:error] [pid 9153:tid 9219] [client 74.248.157.73:50797] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aa.php"] [unique_id "aeFsX-MHGxkTZX3c45dTqAAAAIE"]
[Fri Apr 17 07:10:26.100529 2026] [:error] [pid 25010:tid 25031] [client 74.248.157.73:37240] [client 74.248.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aa.php"] [unique_id "aeFsYo-7kkf42RarqQ3iqAAAAVI"]
[Fri Apr 17 07:10:27.144788 2026] [proxy_fcgi:error] [pid 9263:tid 9288] [client 74.248.157.73:64857] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 07:10:27.404454 2026] [proxy_fcgi:error] [pid 9263:tid 9268] [client 74.248.157.73:64857] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 07:15:07.024793 2026] [proxy_fcgi:error] [pid 9151:tid 9180] [client 51.120.77.25:4206] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 07:15:07.286917 2026] [proxy_fcgi:error] [pid 9151:tid 9182] [client 51.120.77.25:4206] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 07:15:07.549208 2026] [proxy_fcgi:error] [pid 9151:tid 9167] [client 51.120.77.25:4206] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 07:15:07.813473 2026] [proxy_fcgi:error] [pid 9151:tid 9178] [client 51.120.77.25:4206] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 07:15:08.083073 2026] [proxy_fcgi:error] [pid 9151:tid 9177] [client 51.120.77.25:4206] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 07:15:08.347864 2026] [proxy_fcgi:error] [pid 9151:tid 9171] [client 51.120.77.25:4206] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 07:15:08.610571 2026] [proxy_fcgi:error] [pid 9151:tid 9174] [client 51.120.77.25:4206] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 07:15:08.872468 2026] [proxy_fcgi:error] [pid 9151:tid 9185] [client 51.120.77.25:4206] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 07:15:09.142150 2026] [proxy_fcgi:error] [pid 9151:tid 9163] [client 51.120.77.25:4206] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 07:15:09.411047 2026] [proxy_fcgi:error] [pid 9151:tid 9181] [client 51.120.77.25:4206] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 07:15:09.682334 2026] [:error] [pid 9151:tid 9173] [client 51.120.77.25:4206] [client 51.120.77.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/yellow.php"] [unique_id "aeFtfchTVuRPkua22vTIIwAAAAw"]
[Fri Apr 17 07:15:10.242669 2026] [:error] [pid 9152:tid 9190] [client 51.120.77.25:35992] [client 51.120.77.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/yellow.php"] [unique_id "aeFtfpJYca8I3TNCwIdD5QAAAEA"]
[Fri Apr 17 07:15:11.250095 2026] [:error] [pid 9263:tid 9286] [client 51.120.77.25:25537] [client 51.120.77.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/yellow.php"] [unique_id "aeFtfxP68VyHNvj1e55A8wAAANU"]
[Fri Apr 17 07:15:11.978097 2026] [:error] [pid 9263:tid 9273] [client 51.120.77.25:25552] [client 51.120.77.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/yellow.php"] [unique_id "aeFtfxP68VyHNvj1e55A-AAAAMg"]
[Fri Apr 17 07:15:14.240486 2026] [:error] [pid 51878:tid 51890] [client 51.120.77.25:34112] [client 51.120.77.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/block-template-utils.php"] [unique_id "aeFtgknQhUtMbw9EsgbKzwAAAQo"]
[Fri Apr 17 07:15:15.913079 2026] [:error] [pid 25010:tid 25016] [client 51.120.77.25:27906] [client 51.120.77.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/block-template-utils.php"] [unique_id "aeFtg4-7kkf42RarqQ3lXAAAAUM"]
[Fri Apr 17 07:15:16.600676 2026] [:error] [pid 51878:tid 51893] [client 51.120.77.25:33248] [client 51.120.77.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/block-template-utils.php"] [unique_id "aeFthEnQhUtMbw9EsgbK0wAAAQ0"]
[Fri Apr 17 07:15:17.341319 2026] [:error] [pid 9153:tid 9241] [client 51.120.77.25:37018] [client 51.120.77.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/block-template-utils.php"] [unique_id "aeFtheMHGxkTZX3c45dWrQAAAJc"]
[Fri Apr 17 07:15:18.384832 2026] [:error] [pid 51878:tid 51881] [client 51.120.77.25:27471] [client 51.120.77.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/14.php"] [unique_id "aeFthknQhUtMbw9EsgbK3QAAAQE"]
[Fri Apr 17 07:15:19.187863 2026] [:error] [pid 51878:tid 51884] [client 51.120.77.25:34090] [client 51.120.77.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/14.php"] [unique_id "aeFth0nQhUtMbw9EsgbK3gAAAQQ"]
[Fri Apr 17 07:15:19.737470 2026] [:error] [pid 9153:tid 9222] [client 51.120.77.25:34164] [client 51.120.77.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/14.php"] [unique_id "aeFth-MHGxkTZX3c45dWugAAAIQ"]
[Fri Apr 17 07:15:20.591469 2026] [:error] [pid 25010:tid 25020] [client 51.120.77.25:33228] [client 51.120.77.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/14.php"] [unique_id "aeFtiI-7kkf42RarqQ3lYAAAAUc"]
[Fri Apr 17 07:15:21.311177 2026] [:error] [pid 51878:tid 51902] [client 51.120.77.25:33621] [client 51.120.77.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/update_with_pics.php"] [unique_id "aeFtiUnQhUtMbw9EsgbK4QAAARY"]
[Fri Apr 17 07:15:21.932771 2026] [:error] [pid 9153:tid 9229] [client 51.120.77.25:33223] [client 51.120.77.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/update_with_pics.php"] [unique_id "aeFtieMHGxkTZX3c45dWxAAAAIs"]
[Fri Apr 17 07:15:22.873841 2026] [:error] [pid 9153:tid 9230] [client 51.120.77.25:26542] [client 51.120.77.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/update_with_pics.php"] [unique_id "aeFtiuMHGxkTZX3c45dWzAAAAIw"]
[Fri Apr 17 07:15:23.682698 2026] [:error] [pid 51878:tid 51893] [client 51.120.77.25:34165] [client 51.120.77.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/update_with_pics.php"] [unique_id "aeFti0nQhUtMbw9EsgbK5gAAAQ0"]
[Fri Apr 17 07:15:24.242687 2026] [:error] [pid 9152:tid 9198] [client 51.120.77.25:33249] [client 51.120.77.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/date-object.php"] [unique_id "aeFtjJJYca8I3TNCwIdD9wAAAEg"]
[Fri Apr 17 07:15:24.970286 2026] [:error] [pid 9152:tid 9214] [client 51.120.77.25:26504] [client 51.120.77.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/date-object.php"] [unique_id "aeFtjJJYca8I3TNCwIdD-wAAAFg"]
[Fri Apr 17 07:15:25.672143 2026] [:error] [pid 9152:tid 9192] [client 51.120.77.25:22364] [client 51.120.77.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/date-object.php"] [unique_id "aeFtjZJYca8I3TNCwIdD_gAAAEI"]
[Fri Apr 17 07:15:26.357694 2026] [:error] [pid 9152:tid 9199] [client 51.120.77.25:53989] [client 51.120.77.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/date-object.php"] [unique_id "aeFtjpJYca8I3TNCwIdEAQAAAEk"]
[Fri Apr 17 07:15:27.017668 2026] [:error] [pid 9153:tid 9219] [client 51.120.77.25:34150] [client 51.120.77.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/w-1.php"] [unique_id "aeFtj-MHGxkTZX3c45dW3gAAAIE"]
[Fri Apr 17 07:15:27.666155 2026] [:error] [pid 9153:tid 9236] [client 51.120.77.25:23807] [client 51.120.77.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/w-1.php"] [unique_id "aeFtj-MHGxkTZX3c45dW4wAAAJI"]
[Fri Apr 17 07:15:28.294061 2026] [:error] [pid 9153:tid 9242] [client 51.120.77.25:26808] [client 51.120.77.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/w-1.php"] [unique_id "aeFtkOMHGxkTZX3c45dW5QAAAJg"]
[Fri Apr 17 07:15:28.912391 2026] [:error] [pid 9153:tid 9227] [client 51.120.77.25:41264] [client 51.120.77.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/w-1.php"] [unique_id "aeFtkOMHGxkTZX3c45dW6AAAAIk"]
[Fri Apr 17 07:15:29.739434 2026] [:error] [pid 9152:tid 9208] [client 51.120.77.25:36347] [client 51.120.77.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zwso.php"] [unique_id "aeFtkZJYca8I3TNCwIdEBwAAAFI"]
[Fri Apr 17 07:15:30.413416 2026] [:error] [pid 9151:tid 9164] [client 51.120.77.25:26558] [client 51.120.77.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zwso.php"] [unique_id "aeFtkshTVuRPkua22vTIKQAAAAM"]
[Fri Apr 17 07:15:30.977754 2026] [:error] [pid 51878:tid 51898] [client 51.120.77.25:41218] [client 51.120.77.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zwso.php"] [unique_id "aeFtkknQhUtMbw9EsgbK9wAAARI"]
[Fri Apr 17 07:15:31.690460 2026] [:error] [pid 9153:tid 9219] [client 51.120.77.25:23166] [client 51.120.77.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zwso.php"] [unique_id "aeFtk-MHGxkTZX3c45dW8AAAAIE"]
[Fri Apr 17 07:15:32.253822 2026] [:error] [pid 9153:tid 9235] [client 51.120.77.25:33630] [client 51.120.77.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bbh.php"] [unique_id "aeFtlOMHGxkTZX3c45dW8wAAAJE"]
[Fri Apr 17 07:15:32.955023 2026] [:error] [pid 9153:tid 9233] [client 51.120.77.25:26800] [client 51.120.77.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bbh.php"] [unique_id "aeFtlOMHGxkTZX3c45dW9wAAAI8"]
[Fri Apr 17 07:15:33.660190 2026] [:error] [pid 9153:tid 9228] [client 51.120.77.25:26797] [client 51.120.77.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bbh.php"] [unique_id "aeFtleMHGxkTZX3c45dW-QAAAIo"]
[Fri Apr 17 07:15:34.234712 2026] [:error] [pid 9153:tid 9232] [client 51.120.77.25:51959] [client 51.120.77.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bbh.php"] [unique_id "aeFtluMHGxkTZX3c45dW_wAAAI4"]
[Fri Apr 17 07:15:34.894793 2026] [:error] [pid 9153:tid 9230] [client 51.120.77.25:26982] [client 51.120.77.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gool.php"] [unique_id "aeFtluMHGxkTZX3c45dXCQAAAIw"]
[Fri Apr 17 07:15:35.535259 2026] [:error] [pid 25010:tid 25022] [client 51.120.77.25:34115] [client 51.120.77.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gool.php"] [unique_id "aeFtl4-7kkf42RarqQ3laQAAAUk"]
[Fri Apr 17 07:15:36.082285 2026] [:error] [pid 9263:tid 9282] [client 51.120.77.25:53973] [client 51.120.77.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gool.php"] [unique_id "aeFtmBP68VyHNvj1e55BBAAAANE"]
[Fri Apr 17 07:15:36.617654 2026] [:error] [pid 51878:tid 51894] [client 51.120.77.25:23151] [client 51.120.77.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gool.php"] [unique_id "aeFtmEnQhUtMbw9EsgbK-wAAAQ4"]
[Fri Apr 17 07:15:37.302408 2026] [:error] [pid 9153:tid 9230] [client 51.120.77.25:23054] [client 51.120.77.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class-wp-pagebuilders-BDsjLk.php"] [unique_id "aeFtmeMHGxkTZX3c45dXGAAAAIw"]
[Fri Apr 17 07:15:37.979961 2026] [:error] [pid 25010:tid 25027] [client 51.120.77.25:23095] [client 51.120.77.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class-wp-pagebuilders-BDsjLk.php"] [unique_id "aeFtmY-7kkf42RarqQ3lbQAAAU4"]
[Fri Apr 17 07:15:38.883791 2026] [:error] [pid 9152:tid 9202] [client 51.120.77.25:4702] [client 51.120.77.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class-wp-pagebuilders-BDsjLk.php"] [unique_id "aeFtmpJYca8I3TNCwIdEDQAAAEw"]
[Fri Apr 17 07:15:39.609200 2026] [:error] [pid 9153:tid 9241] [client 51.120.77.25:33275] [client 51.120.77.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class-wp-pagebuilders-BDsjLk.php"] [unique_id "aeFtm-MHGxkTZX3c45dXIgAAAJc"]
[Fri Apr 17 07:15:40.202156 2026] [:error] [pid 9263:tid 9274] [client 51.120.77.25:26950] [client 51.120.77.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/iiiihjwn.php"] [unique_id "aeFtnBP68VyHNvj1e55BCgAAAMk"]
[Fri Apr 17 07:15:40.752141 2026] [:error] [pid 9263:tid 9281] [client 51.120.77.25:53999] [client 51.120.77.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/iiiihjwn.php"] [unique_id "aeFtnBP68VyHNvj1e55BDwAAANA"]
[Fri Apr 17 07:15:41.304080 2026] [:error] [pid 9153:tid 9220] [client 51.120.77.25:33631] [client 51.120.77.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/iiiihjwn.php"] [unique_id "aeFtneMHGxkTZX3c45dXKQAAAII"]
[Fri Apr 17 07:15:41.856903 2026] [:error] [pid 9152:tid 9194] [client 51.120.77.25:34765] [client 51.120.77.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/iiiihjwn.php"] [unique_id "aeFtnZJYca8I3TNCwIdEEAAAAEQ"]
[Fri Apr 17 07:15:42.435832 2026] [:error] [pid 9151:tid 9183] [client 51.120.77.25:20886] [client 51.120.77.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ru_RU_lite.mo.php"] [unique_id "aeFtnshTVuRPkua22vTINgAAABY"]
[Fri Apr 17 07:15:42.997853 2026] [:error] [pid 9152:tid 9200] [client 51.120.77.25:26995] [client 51.120.77.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ru_RU_lite.mo.php"] [unique_id "aeFtnpJYca8I3TNCwIdEFQAAAEo"]
[Fri Apr 17 07:15:43.643172 2026] [:error] [pid 9153:tid 9238] [client 51.120.77.25:20007] [client 51.120.77.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ru_RU_lite.mo.php"] [unique_id "aeFtn-MHGxkTZX3c45dXLAAAAJQ"]
[Fri Apr 17 07:15:44.252790 2026] [:error] [pid 9153:tid 9240] [client 51.120.77.25:26956] [client 51.120.77.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ru_RU_lite.mo.php"] [unique_id "aeFtoOMHGxkTZX3c45dXMQAAAJY"]
[Fri Apr 17 07:15:44.816066 2026] [:error] [pid 51878:tid 51898] [client 51.120.77.25:34081] [client 51.120.77.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wpputty.php"] [unique_id "aeFtoEnQhUtMbw9EsgbLCwAAARI"]
[Fri Apr 17 07:15:45.379806 2026] [:error] [pid 9263:tid 9289] [client 51.120.77.25:33624] [client 51.120.77.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wpputty.php"] [unique_id "aeFtoRP68VyHNvj1e55BEwAAANg"]
[Fri Apr 17 07:15:45.966176 2026] [:error] [pid 9263:tid 9283] [client 51.120.77.25:37444] [client 51.120.77.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wpputty.php"] [unique_id "aeFtoRP68VyHNvj1e55BFgAAANI"]
[Fri Apr 17 07:15:46.483885 2026] [:error] [pid 9152:tid 9205] [client 51.120.77.25:34168] [client 51.120.77.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wpputty.php"] [unique_id "aeFtopJYca8I3TNCwIdEFwAAAE8"]
[Fri Apr 17 07:15:47.016947 2026] [:error] [pid 9152:tid 9198] [client 51.120.77.25:34782] [client 51.120.77.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dodo.php"] [unique_id "aeFto5JYca8I3TNCwIdEGwAAAEg"]
[Fri Apr 17 07:15:47.535662 2026] [:error] [pid 9152:tid 9206] [client 51.120.77.25:26961] [client 51.120.77.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dodo.php"] [unique_id "aeFto5JYca8I3TNCwIdEHQAAAFA"]
[Fri Apr 17 07:15:48.061529 2026] [:error] [pid 9153:tid 9221] [client 51.120.77.25:26774] [client 51.120.77.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dodo.php"] [unique_id "aeFtpOMHGxkTZX3c45dXRwAAAIM"]
[Fri Apr 17 07:15:48.619210 2026] [:error] [pid 9153:tid 9223] [client 51.120.77.25:35910] [client 51.120.77.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dodo.php"] [unique_id "aeFtpOMHGxkTZX3c45dXSAAAAIU"]
[Fri Apr 17 07:15:49.181106 2026] [:error] [pid 9153:tid 9219] [client 51.120.77.25:25036] [client 51.120.77.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-post-data.php"] [unique_id "aeFtpeMHGxkTZX3c45dXSwAAAIE"]
[Fri Apr 17 07:15:49.725229 2026] [:error] [pid 25010:tid 25021] [client 51.120.77.25:25059] [client 51.120.77.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-post-data.php"] [unique_id "aeFtpY-7kkf42RarqQ3leQAAAUg"]
[Fri Apr 17 07:15:50.278977 2026] [:error] [pid 25010:tid 25014] [client 51.120.77.25:48915] [client 51.120.77.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-post-data.php"] [unique_id "aeFtpo-7kkf42RarqQ3lewAAAUE"]
[Fri Apr 17 07:15:50.816541 2026] [:error] [pid 9263:tid 9288] [client 51.120.77.25:26769] [client 51.120.77.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-post-data.php"] [unique_id "aeFtphP68VyHNvj1e55BIAAAANc"]
[Fri Apr 17 07:15:51.363753 2026] [:error] [pid 9153:tid 9232] [client 51.120.77.25:41245] [client 51.120.77.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class-wp-recovery-mode-key-service-add.php"] [unique_id "aeFtp-MHGxkTZX3c45dXWQAAAI4"]
[Fri Apr 17 07:15:51.891585 2026] [:error] [pid 9151:tid 9184] [client 51.120.77.25:41218] [client 51.120.77.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class-wp-recovery-mode-key-service-add.php"] [unique_id "aeFtp8hTVuRPkua22vTIPwAAABc"]
[Fri Apr 17 07:15:52.479352 2026] [:error] [pid 9152:tid 9204] [client 51.120.77.25:33630] [client 51.120.77.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class-wp-recovery-mode-key-service-add.php"] [unique_id "aeFtqJJYca8I3TNCwIdEIAAAAE4"]
[Fri Apr 17 07:15:53.047376 2026] [:error] [pid 25010:tid 25016] [client 51.120.77.25:35323] [client 51.120.77.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class-wp-recovery-mode-key-service-add.php"] [unique_id "aeFtqY-7kkf42RarqQ3lhQAAAUM"]
[Fri Apr 17 07:15:53.613025 2026] [:error] [pid 25010:tid 25030] [client 51.120.77.25:41275] [client 51.120.77.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Marvins.php"] [unique_id "aeFtqY-7kkf42RarqQ3liAAAAVE"]
[Fri Apr 17 07:15:54.165582 2026] [:error] [pid 25010:tid 25031] [client 51.120.77.25:34803] [client 51.120.77.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Marvins.php"] [unique_id "aeFtqo-7kkf42RarqQ3liwAAAVI"]
[Fri Apr 17 07:15:54.748496 2026] [:error] [pid 9151:tid 9185] [client 51.120.77.25:26757] [client 51.120.77.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Marvins.php"] [unique_id "aeFtqshTVuRPkua22vTIRQAAABg"]
[Fri Apr 17 07:15:55.310848 2026] [:error] [pid 25010:tid 25021] [client 51.120.77.25:51912] [client 51.120.77.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Marvins.php"] [unique_id "aeFtq4-7kkf42RarqQ3ljQAAAUg"]
[Fri Apr 17 07:15:55.863489 2026] [:error] [pid 25010:tid 25022] [client 51.120.77.25:35933] [client 51.120.77.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/astab.php"] [unique_id "aeFtq4-7kkf42RarqQ3lkgAAAUk"]
[Fri Apr 17 07:15:56.383530 2026] [:error] [pid 9151:tid 9169] [client 51.120.77.25:34777] [client 51.120.77.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/astab.php"] [unique_id "aeFtrMhTVuRPkua22vTIRgAAAAg"]
[Fri Apr 17 07:15:56.906086 2026] [:error] [pid 51878:tid 51903] [client 51.120.77.25:20519] [client 51.120.77.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/astab.php"] [unique_id "aeFtrEnQhUtMbw9EsgbLEwAAARc"]
[Fri Apr 17 07:15:57.440343 2026] [:error] [pid 25010:tid 25035] [client 51.120.77.25:26617] [client 51.120.77.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/astab.php"] [unique_id "aeFtrY-7kkf42RarqQ3lmAAAAVY"]
[Fri Apr 17 08:48:29.746434 2026] [:error] [pid 51878:tid 51882] [client 172.70.240.85:11578] [client 172.70.240.85] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.dwelectservices.com.au"] [uri "/"] [unique_id "aeGDXUnQhUtMbw9EsgbjrQAAAQI"]
[Fri Apr 17 17:26:34.456092 2026] [proxy_fcgi:error] [pid 9263:tid 9281] [client 20.215.250.20:11137] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 17:26:34.714774 2026] [proxy_fcgi:error] [pid 9263:tid 9282] [client 20.215.250.20:11137] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 17:26:34.973661 2026] [proxy_fcgi:error] [pid 9263:tid 9286] [client 20.215.250.20:11137] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 17:26:35.233630 2026] [proxy_fcgi:error] [pid 9263:tid 9283] [client 20.215.250.20:11137] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 17:26:35.492414 2026] [proxy_fcgi:error] [pid 9263:tid 9268] [client 20.215.250.20:11137] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 17:26:35.750569 2026] [proxy_fcgi:error] [pid 9263:tid 9287] [client 20.215.250.20:11137] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 17:26:36.009974 2026] [proxy_fcgi:error] [pid 9263:tid 9270] [client 20.215.250.20:11137] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 17:26:36.269539 2026] [proxy_fcgi:error] [pid 9263:tid 9275] [client 20.215.250.20:11137] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 17:26:36.529047 2026] [proxy_fcgi:error] [pid 9263:tid 9272] [client 20.215.250.20:11137] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 17:26:36.789799 2026] [proxy_fcgi:error] [pid 9263:tid 9273] [client 20.215.250.20:11137] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 17:26:37.059381 2026] [:error] [pid 9263:tid 9280] [client 20.215.250.20:11137] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/eetu.php"] [unique_id "aeH8zRP68VyHNvj1e572VAAAAM8"]
[Fri Apr 17 17:26:39.566172 2026] [:error] [pid 9151:tid 9175] [client 20.215.250.20:11252] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/eetu.php"] [unique_id "aeH8z8hTVuRPkua22vQmTgAAAA4"]
[Fri Apr 17 17:26:41.362154 2026] [:error] [pid 34273:tid 34281] [client 20.215.250.20:11141] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/eetu.php"] [unique_id "aeH80WuQDW686mK3dgHf8gAAAYY"]
[Fri Apr 17 17:26:43.711621 2026] [:error] [pid 34273:tid 34283] [client 20.215.250.20:11226] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/eetu.php"] [unique_id "aeH802uQDW686mK3dgHf9QAAAYg"]
[Fri Apr 17 17:26:45.992495 2026] [:error] [pid 9263:tid 9289] [client 20.215.250.20:11227] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/C1.php"] [unique_id "aeH81RP68VyHNvj1e572WgAAANg"]
[Fri Apr 17 17:26:48.640592 2026] [:error] [pid 9263:tid 9276] [client 20.215.250.20:11249] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/C1.php"] [unique_id "aeH82BP68VyHNvj1e572XwAAAMs"]
[Fri Apr 17 17:26:50.011401 2026] [:error] [pid 9263:tid 9286] [client 20.215.250.20:11210] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/C1.php"] [unique_id "aeH82hP68VyHNvj1e572ZQAAANU"]
[Fri Apr 17 17:26:51.751551 2026] [:error] [pid 34273:tid 34290] [client 20.215.250.20:11260] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/C1.php"] [unique_id "aeH822uQDW686mK3dgHf-AAAAY8"]
[Fri Apr 17 17:26:54.338425 2026] [:error] [pid 25010:tid 25030] [client 20.215.250.20:11085] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/b35.php"] [unique_id "aeH83o-7kkf42RarqQ1aaAAAAVE"]
[Fri Apr 17 17:26:55.713423 2026] [:error] [pid 9263:tid 9280] [client 20.215.250.20:11144] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/b35.php"] [unique_id "aeH83xP68VyHNvj1e572cgAAAM8"]
[Fri Apr 17 17:26:56.894127 2026] [:error] [pid 51878:tid 51895] [client 20.215.250.20:11203] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/b35.php"] [unique_id "aeH84EnQhUtMbw9EsgZCWAAAAQ8"]
[Fri Apr 17 17:26:59.731495 2026] [:error] [pid 61523:tid 61545] [client 20.215.250.20:11202] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/b35.php"] [unique_id "aeH848OaH-Pgc7WEf4OA9gAAAcM"]
[Fri Apr 17 17:27:03.060775 2026] [:error] [pid 9263:tid 9283] [client 20.215.250.20:11232] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Xx.php"] [unique_id "aeH85xP68VyHNvj1e572dQAAANI"]
[Fri Apr 17 17:27:06.488491 2026] [:error] [pid 9153:tid 9240] [client 20.215.250.20:11154] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Xx.php"] [unique_id "aeH86uMHGxkTZX3c45foPAAAAJY"]
[Fri Apr 17 17:27:08.013562 2026] [:error] [pid 9152:tid 9214] [client 20.215.250.20:11254] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Xx.php"] [unique_id "aeH87JJYca8I3TNCwIcr_QAAAFg"]
[Fri Apr 17 17:27:09.513577 2026] [:error] [pid 25010:tid 25034] [client 20.215.250.20:11233] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Xx.php"] [unique_id "aeH87Y-7kkf42RarqQ1abgAAAVU"]
[Fri Apr 17 17:27:11.967933 2026] [:error] [pid 9152:tid 9211] [client 20.215.250.20:11224] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-un.php"] [unique_id "aeH875JYca8I3TNCwIcsBAAAAFU"]
[Fri Apr 17 17:27:14.168933 2026] [:error] [pid 51878:tid 51886] [client 20.215.250.20:11200] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-un.php"] [unique_id "aeH88knQhUtMbw9EsgZCXwAAAQY"]
[Fri Apr 17 17:27:15.864516 2026] [:error] [pid 51878:tid 51883] [client 20.215.250.20:11185] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-un.php"] [unique_id "aeH880nQhUtMbw9EsgZCYwAAAQM"]
[Fri Apr 17 17:27:17.273733 2026] [:error] [pid 34273:tid 34294] [client 20.215.250.20:11216] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-un.php"] [unique_id "aeH89WuQDW686mK3dgHgBQAAAZM"]
[Fri Apr 17 17:27:18.700188 2026] [:error] [pid 61523:tid 61546] [client 20.215.250.20:11149] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xroot.php"] [unique_id "aeH89sOaH-Pgc7WEf4OBAwAAAcQ"]
[Fri Apr 17 17:27:20.246602 2026] [:error] [pid 9152:tid 9201] [client 20.215.250.20:11206] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xroot.php"] [unique_id "aeH8-JJYca8I3TNCwIcsCgAAAEs"]
[Fri Apr 17 17:27:22.457714 2026] [:error] [pid 9263:tid 9286] [client 20.215.250.20:11245] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xroot.php"] [unique_id "aeH8-hP68VyHNvj1e572gAAAANU"]
[Fri Apr 17 17:27:24.017169 2026] [:error] [pid 51878:tid 51886] [client 20.215.250.20:11255] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xroot.php"] [unique_id "aeH8_EnQhUtMbw9EsgZCZgAAAQY"]
[Fri Apr 17 17:27:25.838594 2026] [:error] [pid 9152:tid 9212] [client 20.215.250.20:11256] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xmini.php"] [unique_id "aeH8_ZJYca8I3TNCwIcsEgAAAFY"]
[Fri Apr 17 17:27:26.600545 2026] [:error] [pid 61523:tid 61549] [client 20.215.250.20:11241] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xmini.php"] [unique_id "aeH8_sOaH-Pgc7WEf4OBDAAAAcc"]
[Fri Apr 17 17:27:27.665938 2026] [:error] [pid 9152:tid 9210] [client 20.215.250.20:11243] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xmini.php"] [unique_id "aeH8_5JYca8I3TNCwIcsGAAAAFQ"]
[Fri Apr 17 17:27:28.396143 2026] [:error] [pid 61523:tid 61556] [client 20.215.250.20:11146] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xmini.php"] [unique_id "aeH9AMOaH-Pgc7WEf4OBDgAAAc4"]
[Fri Apr 17 17:27:29.281961 2026] [:error] [pid 9263:tid 9267] [client 20.215.250.20:11140] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/index.php"] [unique_id "aeH9ARP68VyHNvj1e572igAAAMI"]
[Fri Apr 17 17:27:30.217019 2026] [:error] [pid 34273:tid 34298] [client 20.215.250.20:11166] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/index.php"] [unique_id "aeH9AmuQDW686mK3dgHgCAAAAZc"]
[Fri Apr 17 17:27:31.671939 2026] [:error] [pid 9153:tid 9220] [client 20.215.250.20:11221] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/index.php"] [unique_id "aeH9A-MHGxkTZX3c45foRQAAAII"]
[Fri Apr 17 17:27:33.402137 2026] [:error] [pid 51878:tid 51899] [client 20.215.250.20:11211] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/index.php"] [unique_id "aeH9BUnQhUtMbw9EsgZCagAAARM"]
[Fri Apr 17 17:27:34.988449 2026] [:error] [pid 51878:tid 51885] [client 20.215.250.20:11195] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2468.php"] [unique_id "aeH9BknQhUtMbw9EsgZCbAAAAQU"]
[Fri Apr 17 17:27:37.732783 2026] [proxy_fcgi:error] [pid 9263:tid 9283] [client 20.215.250.20:11152] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 17:27:38.003974 2026] [proxy_fcgi:error] [pid 9263:tid 9266] [client 20.215.250.20:11152] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 17:27:38.519649 2026] [proxy_fcgi:error] [pid 9263:tid 9284] [client 20.215.250.20:11152] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 17:27:38.777935 2026] [proxy_fcgi:error] [pid 9263:tid 9285] [client 20.215.250.20:11152] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 17:27:39.085642 2026] [proxy_fcgi:error] [pid 9263:tid 9278] [client 20.215.250.20:11152] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 17:27:39.344652 2026] [proxy_fcgi:error] [pid 9263:tid 9286] [client 20.215.250.20:11152] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 17:27:39.849859 2026] [proxy_fcgi:error] [pid 9263:tid 9283] [client 20.215.250.20:11152] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 17:27:40.119084 2026] [proxy_fcgi:error] [pid 9263:tid 9274] [client 20.215.250.20:11152] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 17:27:40.578032 2026] [proxy_fcgi:error] [pid 9263:tid 9287] [client 20.215.250.20:11152] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 17:27:40.836313 2026] [proxy_fcgi:error] [pid 9263:tid 9284] [client 20.215.250.20:11152] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 17:27:41.090759 2026] [:error] [pid 9263:tid 9273] [client 20.215.250.20:11152] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dx.php"] [unique_id "aeH9DRP68VyHNvj1e5722gAAAMg"]
[Fri Apr 17 17:27:42.590763 2026] [:error] [pid 9263:tid 9284] [client 20.215.250.20:11156] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dx.php"] [unique_id "aeH9DhP68VyHNvj1e5724AAAANM"]
[Fri Apr 17 17:27:44.377149 2026] [:error] [pid 9151:tid 9168] [client 20.215.250.20:11170] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dx.php"] [unique_id "aeH9EMhTVuRPkua22vQmYQAAAAc"]
[Fri Apr 17 17:27:45.802780 2026] [:error] [pid 9152:tid 9207] [client 20.215.250.20:11257] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dx.php"] [unique_id "aeH9EZJYca8I3TNCwIcsLwAAAFE"]
[Fri Apr 17 17:27:47.118702 2026] [:error] [pid 9263:tid 9283] [client 20.215.250.20:11151] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xff.php"] [unique_id "aeH9ExP68VyHNvj1e5725AAAANI"]
[Fri Apr 17 17:27:49.376124 2026] [:error] [pid 9152:tid 9196] [client 20.215.250.20:11215] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xff.php"] [unique_id "aeH9FZJYca8I3TNCwIcsMAAAAEY"]
[Fri Apr 17 17:27:50.447980 2026] [:error] [pid 9152:tid 9190] [client 20.215.250.20:11234] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xff.php"] [unique_id "aeH9FpJYca8I3TNCwIcsMgAAAEA"]
[Fri Apr 17 17:27:51.730479 2026] [:error] [pid 9152:tid 9213] [client 20.215.250.20:11218] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xff.php"] [unique_id "aeH9F5JYca8I3TNCwIcsNAAAAFc"]
[Fri Apr 17 17:27:52.603174 2026] [:error] [pid 9151:tid 9175] [client 20.215.250.20:11193] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lupo.php"] [unique_id "aeH9GMhTVuRPkua22vQmZAAAAA4"]
[Fri Apr 17 17:27:53.879864 2026] [:error] [pid 25010:tid 25025] [client 20.215.250.20:11176] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lupo.php"] [unique_id "aeH9GY-7kkf42RarqQ1aeAAAAUw"]
[Fri Apr 17 17:27:54.915094 2026] [:error] [pid 9263:tid 9281] [client 20.215.250.20:11228] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lupo.php"] [unique_id "aeH9GhP68VyHNvj1e5728wAAANA"]
[Fri Apr 17 17:27:55.877829 2026] [:error] [pid 9263:tid 9281] [client 20.215.250.20:11247] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lupo.php"] [unique_id "aeH9GxP68VyHNvj1e572_QAAANA"]
[Fri Apr 17 17:27:57.088792 2026] [:error] [pid 9263:tid 9272] [client 20.215.250.20:11239] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/awa.php"] [unique_id "aeH9HRP68VyHNvj1e573DAAAAMc"]
[Fri Apr 17 17:27:58.339053 2026] [:error] [pid 51878:tid 51883] [client 20.215.250.20:11236] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/awa.php"] [unique_id "aeH9HknQhUtMbw9EsgZCggAAAQM"]
[Fri Apr 17 17:28:00.520582 2026] [:error] [pid 51878:tid 51901] [client 20.215.250.20:11157] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/awa.php"] [unique_id "aeH9IEnQhUtMbw9EsgZChAAAARU"]
[Fri Apr 17 17:28:05.493744 2026] [:error] [pid 25010:tid 25030] [client 20.215.250.20:11077] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/awa.php"] [unique_id "aeH9JY-7kkf42RarqQ1afAAAAVE"]
[Fri Apr 17 17:28:09.584543 2026] [:error] [pid 9151:tid 9164] [client 20.215.250.20:11187] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/popo.php"] [unique_id "aeH9KchTVuRPkua22vQmaQAAAAM"]
[Fri Apr 17 17:28:14.002089 2026] [:error] [pid 9152:tid 9200] [client 20.215.250.20:11191] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/popo.php"] [unique_id "aeH9LpJYca8I3TNCwIcsQQAAAEo"]
[Fri Apr 17 17:28:16.714026 2026] [:error] [pid 61523:tid 61564] [client 20.215.250.20:11078] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/popo.php"] [unique_id "aeH9MMOaH-Pgc7WEf4OBRQAAAdY"]
[Fri Apr 17 17:28:25.412743 2026] [:error] [pid 51878:tid 51897] [client 20.215.250.20:11159] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/13.php"] [unique_id "aeH9OUnQhUtMbw9EsgZCsQAAARE"]
[Fri Apr 17 17:28:27.269820 2026] [:error] [pid 61523:tid 61557] [client 20.215.250.20:11222] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/13.php"] [unique_id "aeH9O8OaH-Pgc7WEf4OBUQAAAc8"]
[Fri Apr 17 17:28:29.014614 2026] [:error] [pid 34273:tid 34297] [client 20.215.250.20:11095] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/13.php"] [unique_id "aeH9PWuQDW686mK3dgHgJwAAAZY"]
[Fri Apr 17 17:28:30.390877 2026] [:error] [pid 9151:tid 9171] [client 20.215.250.20:11223] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/13.php"] [unique_id "aeH9PshTVuRPkua22vQmcAAAAAo"]
[Fri Apr 17 17:28:31.487635 2026] [:error] [pid 9152:tid 9207] [client 20.215.250.20:11230] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/11.php"] [unique_id "aeH9P5JYca8I3TNCwIcscQAAAFE"]
[Fri Apr 17 17:28:32.848927 2026] [:error] [pid 61523:tid 61555] [client 20.215.250.20:11258] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/11.php"] [unique_id "aeH9QMOaH-Pgc7WEf4OBZgAAAc0"]
[Fri Apr 17 17:28:33.780071 2026] [:error] [pid 9152:tid 9214] [client 20.215.250.20:11242] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/11.php"] [unique_id "aeH9QZJYca8I3TNCwIcsewAAAFg"]
[Fri Apr 17 17:28:34.496330 2026] [:error] [pid 9152:tid 9203] [client 20.215.250.20:11186] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/11.php"] [unique_id "aeH9QpJYca8I3TNCwIcsgAAAAE0"]
[Fri Apr 17 17:28:35.610081 2026] [:error] [pid 9151:tid 9179] [client 20.215.250.20:11148] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/p.php"] [unique_id "aeH9Q8hTVuRPkua22vQmcgAAABI"]
[Fri Apr 17 17:28:36.563680 2026] [:error] [pid 61523:tid 61558] [client 20.215.250.20:11225] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/p.php"] [unique_id "aeH9RMOaH-Pgc7WEf4OBbQAAAdA"]
[Fri Apr 17 17:28:37.792313 2026] [:error] [pid 34273:tid 34281] [client 20.215.250.20:11136] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/p.php"] [unique_id "aeH9RWuQDW686mK3dgHgKgAAAYY"]
[Fri Apr 17 17:28:39.137163 2026] [:error] [pid 51878:tid 51898] [client 20.215.250.20:11237] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/p.php"] [unique_id "aeH9R0nQhUtMbw9EsgZCuAAAARI"]
[Fri Apr 17 17:28:40.453889 2026] [proxy_fcgi:error] [pid 9263:tid 9275] [client 20.215.250.20:11231] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 17:28:40.712183 2026] [proxy_fcgi:error] [pid 9263:tid 9272] [client 20.215.250.20:11231] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 17:28:40.973282 2026] [proxy_fcgi:error] [pid 9263:tid 9287] [client 20.215.250.20:11231] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 17:28:42.203221 2026] [proxy_fcgi:error] [pid 9263:tid 9287] [client 20.215.250.20:11231] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 17:28:42.461372 2026] [proxy_fcgi:error] [pid 9263:tid 9278] [client 20.215.250.20:11231] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 17:28:42.722814 2026] [proxy_fcgi:error] [pid 9263:tid 9267] [client 20.215.250.20:11231] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 17:28:42.981530 2026] [proxy_fcgi:error] [pid 9263:tid 9270] [client 20.215.250.20:11231] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 17:28:43.267826 2026] [proxy_fcgi:error] [pid 9263:tid 9276] [client 20.215.250.20:11231] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 17:28:43.525675 2026] [proxy_fcgi:error] [pid 9263:tid 9265] [client 20.215.250.20:11231] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 17:28:43.825703 2026] [proxy_fcgi:error] [pid 9263:tid 9282] [client 20.215.250.20:11231] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 17:28:44.096573 2026] [:error] [pid 9263:tid 9289] [client 20.215.250.20:11231] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/5.php"] [unique_id "aeH9TBP68VyHNvj1e5730QAAANg"]
[Fri Apr 17 17:28:46.477890 2026] [:error] [pid 61523:tid 61551] [client 20.215.250.20:11214] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/5.php"] [unique_id "aeH9TsOaH-Pgc7WEf4OBdgAAAck"]
[Fri Apr 17 17:28:49.189073 2026] [:error] [pid 9263:tid 9282] [client 20.215.250.20:11158] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/5.php"] [unique_id "aeH9URP68VyHNvj1e5731wAAANE"]
[Fri Apr 17 17:28:50.955394 2026] [:error] [pid 9151:tid 9183] [client 20.215.250.20:11106] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/5.php"] [unique_id "aeH9UshTVuRPkua22vQmdAAAABY"]
[Fri Apr 17 17:28:52.632708 2026] [:error] [pid 61523:tid 61554] [client 20.215.250.20:11142] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/6.php"] [unique_id "aeH9VMOaH-Pgc7WEf4OBjQAAAcw"]
[Fri Apr 17 17:28:53.706563 2026] [:error] [pid 34273:tid 34289] [client 20.215.250.20:11261] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/6.php"] [unique_id "aeH9VWuQDW686mK3dgHgNgAAAY4"]
[Fri Apr 17 17:28:56.047555 2026] [:error] [pid 51878:tid 51896] [client 20.215.250.20:11167] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/6.php"] [unique_id "aeH9WEnQhUtMbw9EsgZCvAAAARA"]
[Fri Apr 17 17:28:58.591268 2026] [:error] [pid 9263:tid 9283] [client 20.215.250.20:11080] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/6.php"] [unique_id "aeH9WhP68VyHNvj1e5733wAAANI"]
[Fri Apr 17 17:29:02.104086 2026] [:error] [pid 61523:tid 61561] [client 20.215.250.20:11153] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/9.php"] [unique_id "aeH9XsOaH-Pgc7WEf4OBngAAAdM"]
[Fri Apr 17 17:29:03.880474 2026] [:error] [pid 25010:tid 25030] [client 20.215.250.20:11181] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/9.php"] [unique_id "aeH9X4-7kkf42RarqQ1amQAAAVE"]
[Fri Apr 17 17:29:05.492636 2026] [:error] [pid 9263:tid 9280] [client 20.215.250.20:11219] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/9.php"] [unique_id "aeH9YRP68VyHNvj1e5735AAAAM8"]
[Fri Apr 17 17:29:07.164947 2026] [:error] [pid 9153:tid 9222] [client 20.215.250.20:11084] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/9.php"] [unique_id "aeH9Y-MHGxkTZX3c45focwAAAIQ"]
[Fri Apr 17 17:29:08.198644 2026] [:error] [pid 9263:tid 9278] [client 20.215.250.20:11171] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/10.php"] [unique_id "aeH9ZBP68VyHNvj1e5735wAAAM0"]
[Fri Apr 17 17:29:09.494709 2026] [:error] [pid 9263:tid 9274] [client 20.215.250.20:11133] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/10.php"] [unique_id "aeH9ZRP68VyHNvj1e5737AAAAMk"]
[Fri Apr 17 17:29:10.519107 2026] [:error] [pid 9263:tid 9280] [client 20.215.250.20:11107] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/10.php"] [unique_id "aeH9ZhP68VyHNvj1e5738gAAAM8"]
[Fri Apr 17 17:29:12.903432 2026] [:error] [pid 9153:tid 9220] [client 20.215.250.20:11138] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/10.php"] [unique_id "aeH9aOMHGxkTZX3c45fodAAAAII"]
[Fri Apr 17 17:29:15.045856 2026] [:error] [pid 9263:tid 9286] [client 20.215.250.20:11204] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/100.php"] [unique_id "aeH9axP68VyHNvj1e5739QAAANU"]
[Fri Apr 17 17:29:17.702700 2026] [:error] [pid 9263:tid 9278] [client 20.215.250.20:11108] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/100.php"] [unique_id "aeH9bRP68VyHNvj1e573-gAAAM0"]
[Fri Apr 17 17:29:20.374565 2026] [:error] [pid 9263:tid 9288] [client 20.215.250.20:11174] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/100.php"] [unique_id "aeH9cBP68VyHNvj1e573_wAAANc"]
[Fri Apr 17 17:29:22.858887 2026] [:error] [pid 34273:tid 34277] [client 20.215.250.20:11150] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/100.php"] [unique_id "aeH9cmuQDW686mK3dgHgRQAAAYI"]
[Fri Apr 17 17:29:24.241008 2026] [:error] [pid 9263:tid 9281] [client 20.215.250.20:11251] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/nastar.php"] [unique_id "aeH9dBP68VyHNvj1e574BQAAANA"]
[Fri Apr 17 17:29:26.114797 2026] [:error] [pid 25010:tid 25024] [client 20.215.250.20:11121] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/nastar.php"] [unique_id "aeH9do-7kkf42RarqQ1anQAAAUs"]
[Fri Apr 17 17:29:28.406016 2026] [:error] [pid 9153:tid 9218] [client 20.215.250.20:11180] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/nastar.php"] [unique_id "aeH9eOMHGxkTZX3c45foeAAAAIA"]
[Fri Apr 17 17:29:30.197301 2026] [:error] [pid 9152:tid 9198] [client 20.215.250.20:11199] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/nastar.php"] [unique_id "aeH9epJYca8I3TNCwIcstwAAAEg"]
[Fri Apr 17 17:29:31.876499 2026] [:error] [pid 9153:tid 9232] [client 20.215.250.20:11155] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f35_S.php"] [unique_id "aeH9e-MHGxkTZX3c45fogQAAAI4"]
[Fri Apr 17 17:29:35.082331 2026] [:error] [pid 9152:tid 9193] [client 20.215.250.20:11145] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f35_S.php"] [unique_id "aeH9f5JYca8I3TNCwIcsvAAAAEM"]
[Fri Apr 17 17:29:37.079640 2026] [:error] [pid 34273:tid 34280] [client 20.215.250.20:11172] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f35_S.php"] [unique_id "aeH9gWuQDW686mK3dgHgZAAAAYU"]
[Fri Apr 17 17:29:39.498193 2026] [:error] [pid 9263:tid 9288] [client 20.215.250.20:11116] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f35_S.php"] [unique_id "aeH9gxP68VyHNvj1e574HAAAANc"]
[Fri Apr 17 17:29:40.205405 2026] [:error] [pid 61523:tid 61552] [client 20.215.250.20:11188] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2026w.php"] [unique_id "aeH9hMOaH-Pgc7WEf4OByAAAAco"]
[Fri Apr 17 17:29:41.918169 2026] [:error] [pid 25010:tid 25013] [client 20.215.250.20:11173] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2026w.php"] [unique_id "aeH9hY-7kkf42RarqQ1aogAAAUA"]
[Fri Apr 17 17:29:43.681651 2026] [proxy_fcgi:error] [pid 51878:tid 51897] [client 20.215.250.20:11263] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 17:29:44.311868 2026] [proxy_fcgi:error] [pid 51878:tid 51891] [client 20.215.250.20:11263] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 17:29:44.572801 2026] [proxy_fcgi:error] [pid 51878:tid 51888] [client 20.215.250.20:11263] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 17:29:44.832151 2026] [proxy_fcgi:error] [pid 51878:tid 51887] [client 20.215.250.20:11263] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 17:29:45.090917 2026] [proxy_fcgi:error] [pid 51878:tid 51893] [client 20.215.250.20:11263] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 17:29:45.363436 2026] [proxy_fcgi:error] [pid 51878:tid 51881] [client 20.215.250.20:11263] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 17:29:45.628521 2026] [proxy_fcgi:error] [pid 51878:tid 51894] [client 20.215.250.20:11263] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 17:29:45.886778 2026] [proxy_fcgi:error] [pid 51878:tid 51903] [client 20.215.250.20:11263] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 17:29:46.145996 2026] [proxy_fcgi:error] [pid 51878:tid 51886] [client 20.215.250.20:11263] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 17:29:46.413208 2026] [proxy_fcgi:error] [pid 51878:tid 51900] [client 20.215.250.20:11263] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 17:29:46.685462 2026] [proxy_fcgi:error] [pid 51878:tid 51883] [client 20.215.250.20:11263] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 17:29:46.940670 2026] [:error] [pid 51878:tid 51882] [client 20.215.250.20:11263] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xa.php"] [unique_id "aeH9iknQhUtMbw9EsgZC3wAAAQI"]
[Fri Apr 17 17:29:47.994800 2026] [:error] [pid 9152:tid 9197] [client 20.215.250.20:11196] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xa.php"] [unique_id "aeH9i5JYca8I3TNCwIcsxAAAAEc"]
[Fri Apr 17 17:29:49.241554 2026] [:error] [pid 9151:tid 9185] [client 20.215.250.20:11105] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xa.php"] [unique_id "aeH9jchTVuRPkua22vQmqQAAABg"]
[Fri Apr 17 17:29:50.260827 2026] [:error] [pid 61523:tid 61563] [client 20.215.250.20:11073] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xa.php"] [unique_id "aeH9jsOaH-Pgc7WEf4OBzQAAAdU"]
[Fri Apr 17 17:29:51.410452 2026] [:error] [pid 61523:tid 61543] [client 20.215.250.20:11118] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin.php"] [unique_id "aeH9j8OaH-Pgc7WEf4OB0AAAAcE"]
[Fri Apr 17 17:29:52.107457 2026] [:error] [pid 9151:tid 9170] [client 20.215.250.20:11079] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin.php"] [unique_id "aeH9kMhTVuRPkua22vQmqgAAAAk"]
[Fri Apr 17 17:29:52.738584 2026] [:error] [pid 25010:tid 25027] [client 20.215.250.20:10950] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin.php"] [unique_id "aeH9kI-7kkf42RarqQ1apQAAAU4"]
[Fri Apr 17 17:29:53.525339 2026] [:error] [pid 9263:tid 9270] [client 20.215.250.20:11209] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin.php"] [unique_id "aeH9kRP68VyHNvj1e574IgAAAMU"]
[Fri Apr 17 17:29:54.273203 2026] [:error] [pid 9263:tid 9267] [client 20.215.250.20:11081] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/inege.php"] [unique_id "aeH9khP68VyHNvj1e574JgAAAMI"]
[Fri Apr 17 17:29:55.002967 2026] [:error] [pid 61523:tid 61549] [client 20.215.250.20:11197] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/inege.php"] [unique_id "aeH9k8OaH-Pgc7WEf4OB1AAAAcc"]
[Fri Apr 17 17:29:56.398167 2026] [:error] [pid 51878:tid 51889] [client 20.215.250.20:11205] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/inege.php"] [unique_id "aeH9lEnQhUtMbw9EsgZC4QAAAQk"]
[Fri Apr 17 17:29:57.660706 2026] [:error] [pid 34273:tid 34296] [client 20.215.250.20:11175] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/inege.php"] [unique_id "aeH9lWuQDW686mK3dgHgaQAAAZU"]
[Fri Apr 17 17:29:59.901964 2026] [:error] [pid 9263:tid 9282] [client 20.215.250.20:11100] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fe5.php"] [unique_id "aeH9lxP68VyHNvj1e574MAAAANE"]
[Fri Apr 17 17:30:01.830110 2026] [:error] [pid 9263:tid 9281] [client 20.215.250.20:11125] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fe5.php"] [unique_id "aeH9mRP68VyHNvj1e574NwAAANA"]
[Fri Apr 17 17:30:03.244247 2026] [:error] [pid 9152:tid 9199] [client 20.215.250.20:11117] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fe5.php"] [unique_id "aeH9m5JYca8I3TNCwIcszgAAAEk"]
[Fri Apr 17 17:30:04.773020 2026] [:error] [pid 9263:tid 9272] [client 20.215.250.20:11253] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fe5.php"] [unique_id "aeH9nBP68VyHNvj1e574PQAAAMc"]
[Fri Apr 17 17:30:06.994459 2026] [:error] [pid 9153:tid 9242] [client 20.215.250.20:11161] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/uuu.php"] [unique_id "aeH9nuMHGxkTZX3c45fokgAAAJg"]
[Fri Apr 17 17:30:09.550420 2026] [:error] [pid 61523:tid 61545] [client 20.215.250.20:11162] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/uuu.php"] [unique_id "aeH9ocOaH-Pgc7WEf4OB3AAAAcM"]
[Fri Apr 17 17:30:12.670756 2026] [:error] [pid 9152:tid 9199] [client 20.215.250.20:11246] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/uuu.php"] [unique_id "aeH9pJJYca8I3TNCwIcs2AAAAEk"]
[Fri Apr 17 17:30:16.456294 2026] [:error] [pid 34273:tid 34296] [client 20.215.250.20:11139] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/uuu.php"] [unique_id "aeH9qGuQDW686mK3dgHgcQAAAZU"]
[Fri Apr 17 17:30:19.895453 2026] [:error] [pid 61523:tid 61541] [client 20.215.250.20:11184] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/no1.php"] [unique_id "aeH9q8OaH-Pgc7WEf4OB4wAAAcA"]
[Fri Apr 17 17:30:22.129391 2026] [:error] [pid 9152:tid 9196] [client 20.215.250.20:11213] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/no1.php"] [unique_id "aeH9rpJYca8I3TNCwIcs3QAAAEY"]
[Fri Apr 17 17:30:24.347135 2026] [:error] [pid 61523:tid 61552] [client 20.215.250.20:11076] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/no1.php"] [unique_id "aeH9sMOaH-Pgc7WEf4OB6gAAAco"]
[Fri Apr 17 17:30:25.766989 2026] [:error] [pid 9263:tid 9265] [client 20.215.250.20:10944] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/no1.php"] [unique_id "aeH9sRP68VyHNvj1e574SgAAAMA"]
[Fri Apr 17 17:30:27.063015 2026] [:error] [pid 9152:tid 9206] [client 20.215.250.20:11102] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/w2025.php"] [unique_id "aeH9s5JYca8I3TNCwIcs4AAAAFA"]
[Fri Apr 17 17:30:29.579320 2026] [:error] [pid 9263:tid 9269] [client 20.215.250.20:11096] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/w2025.php"] [unique_id "aeH9tRP68VyHNvj1e574UQAAAMQ"]
[Fri Apr 17 17:30:30.939173 2026] [:error] [pid 51878:tid 51888] [client 20.215.250.20:11259] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/w2025.php"] [unique_id "aeH9tknQhUtMbw9EsgZC5wAAAQg"]
[Fri Apr 17 17:30:33.833226 2026] [:error] [pid 51878:tid 51893] [client 20.215.250.20:11147] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/w2025.php"] [unique_id "aeH9uUnQhUtMbw9EsgZC6QAAAQ0"]
[Fri Apr 17 17:30:36.291912 2026] [:error] [pid 61523:tid 61559] [client 20.215.250.20:11244] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fvvff.php"] [unique_id "aeH9vMOaH-Pgc7WEf4OB7wAAAdE"]
[Fri Apr 17 17:30:38.102110 2026] [:error] [pid 9152:tid 9195] [client 20.215.250.20:10979] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fvvff.php"] [unique_id "aeH9vpJYca8I3TNCwIcs6AAAAEU"]
[Fri Apr 17 17:30:40.709676 2026] [:error] [pid 9151:tid 9171] [client 20.215.250.20:11212] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fvvff.php"] [unique_id "aeH9wMhTVuRPkua22vQmwAAAAAo"]
[Fri Apr 17 17:30:43.244060 2026] [:error] [pid 9153:tid 9220] [client 20.215.250.20:11120] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fvvff.php"] [unique_id "aeH9w-MHGxkTZX3c45fongAAAII"]
[Fri Apr 17 17:30:44.530039 2026] [:error] [pid 9263:tid 9268] [client 20.215.250.20:11094] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a2.php"] [unique_id "aeH9xBP68VyHNvj1e574YQAAAMM"]
[Fri Apr 17 17:30:45.992561 2026] [:error] [pid 51878:tid 51891] [client 20.215.250.20:11135] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a2.php"] [unique_id "aeH9xUnQhUtMbw9EsgZC7wAAAQs"]
[Fri Apr 17 17:30:47.574631 2026] [proxy_fcgi:error] [pid 51878:tid 51904] [client 20.215.250.20:11104] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 17:30:47.832657 2026] [proxy_fcgi:error] [pid 51878:tid 51893] [client 20.215.250.20:11104] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 17:30:49.059829 2026] [proxy_fcgi:error] [pid 51878:tid 51885] [client 20.215.250.20:11104] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 17:30:49.620734 2026] [proxy_fcgi:error] [pid 51878:tid 51894] [client 20.215.250.20:11104] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 17:30:49.878202 2026] [proxy_fcgi:error] [pid 51878:tid 51881] [client 20.215.250.20:11104] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 17:30:50.137319 2026] [proxy_fcgi:error] [pid 51878:tid 51898] [client 20.215.250.20:11104] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 17:30:50.395518 2026] [proxy_fcgi:error] [pid 51878:tid 51889] [client 20.215.250.20:11104] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 17:30:50.675390 2026] [proxy_fcgi:error] [pid 51878:tid 51903] [client 20.215.250.20:11104] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 17:30:50.933633 2026] [proxy_fcgi:error] [pid 51878:tid 51890] [client 20.215.250.20:11104] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 17:30:51.204468 2026] [proxy_fcgi:error] [pid 51878:tid 51886] [client 20.215.250.20:11104] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 17:30:51.477854 2026] [:error] [pid 51878:tid 51900] [client 20.215.250.20:11104] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/av.php"] [unique_id "aeH9y0nQhUtMbw9EsgZC_AAAARQ"]
[Fri Apr 17 17:30:53.877199 2026] [:error] [pid 34273:tid 34295] [client 20.215.250.20:11086] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/av.php"] [unique_id "aeH9zWuQDW686mK3dgHgiAAAAZQ"]
[Fri Apr 17 17:30:55.759440 2026] [:error] [pid 9263:tid 9267] [client 20.215.250.20:11099] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/av.php"] [unique_id "aeH9zxP68VyHNvj1e574cQAAAMI"]
[Fri Apr 17 17:30:57.518153 2026] [:error] [pid 9263:tid 9283] [client 20.215.250.20:11208] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/av.php"] [unique_id "aeH90RP68VyHNvj1e574dQAAANI"]
[Fri Apr 17 17:30:58.562693 2026] [:error] [pid 9263:tid 9282] [client 20.215.250.20:10949] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeH90hP68VyHNvj1e574egAAANE"]
[Fri Apr 17 17:31:01.895458 2026] [:error] [pid 51878:tid 51904] [client 20.215.250.20:11229] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeH91UnQhUtMbw9EsgZDAgAAARg"]
[Fri Apr 17 17:31:04.855672 2026] [:error] [pid 61523:tid 61564] [client 20.215.250.20:11082] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeH92MOaH-Pgc7WEf4OCCwAAAdY"]
[Fri Apr 17 17:31:07.422542 2026] [:error] [pid 9263:tid 9275] [client 20.215.250.20:11160] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeH92xP68VyHNvj1e574iQAAAMo"]
[Fri Apr 17 17:31:10.095930 2026] [:error] [pid 34273:tid 34290] [client 20.215.250.20:11165] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-act.php"] [unique_id "aeH93muQDW686mK3dgHglQAAAY8"]
[Fri Apr 17 17:31:11.902998 2026] [:error] [pid 51878:tid 51884] [client 20.215.250.20:11075] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-act.php"] [unique_id "aeH930nQhUtMbw9EsgZDCwAAAQQ"]
[Fri Apr 17 17:31:13.335694 2026] [:error] [pid 34273:tid 34276] [client 20.215.250.20:11262] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-act.php"] [unique_id "aeH94WuQDW686mK3dgHgnAAAAYE"]
[Fri Apr 17 17:31:16.466338 2026] [:error] [pid 51878:tid 51893] [client 20.215.250.20:11182] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-act.php"] [unique_id "aeH95EnQhUtMbw9EsgZDDgAAAQ0"]
[Fri Apr 17 17:31:18.142021 2026] [:error] [pid 9153:tid 9223] [client 20.215.250.20:10945] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xqq.php"] [unique_id "aeH95uMHGxkTZX3c45foqQAAAIU"]
[Fri Apr 17 17:31:19.891340 2026] [:error] [pid 9153:tid 9219] [client 20.215.250.20:10966] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xqq.php"] [unique_id "aeH95-MHGxkTZX3c45foqgAAAIE"]
[Fri Apr 17 17:31:22.786487 2026] [:error] [pid 61523:tid 61556] [client 20.215.250.20:10998] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xqq.php"] [unique_id "aeH96sOaH-Pgc7WEf4OCMgAAAc4"]
[Fri Apr 17 17:31:25.283141 2026] [:error] [pid 34273:tid 34284] [client 20.215.250.20:11224] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xqq.php"] [unique_id "aeH97WuQDW686mK3dgHgpgAAAYk"]
[Fri Apr 17 17:31:30.566120 2026] [:error] [pid 61523:tid 61541] [client 20.215.250.20:11201] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/plss3.php"] [unique_id "aeH98sOaH-Pgc7WEf4OCPQAAAcA"]
[Fri Apr 17 17:31:35.307891 2026] [:error] [pid 9263:tid 9286] [client 20.215.250.20:11143] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/plss3.php"] [unique_id "aeH99xP68VyHNvj1e574ogAAANU"]
[Fri Apr 17 17:31:36.786305 2026] [:error] [pid 61523:tid 61552] [client 20.215.250.20:11248] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/plss3.php"] [unique_id "aeH9-MOaH-Pgc7WEf4OCSAAAAco"]
[Fri Apr 17 17:31:38.522847 2026] [:error] [pid 9152:tid 9214] [client 20.215.250.20:11154] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/plss3.php"] [unique_id "aeH9-pJYca8I3TNCwIctFQAAAFg"]
[Fri Apr 17 17:31:39.906157 2026] [:error] [pid 9263:tid 9272] [client 20.215.250.20:10953] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aaa.php"] [unique_id "aeH9-xP68VyHNvj1e574pQAAAMc"]
[Fri Apr 17 17:31:43.345025 2026] [:error] [pid 9151:tid 9182] [client 20.215.250.20:10971] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aaa.php"] [unique_id "aeH9_8hTVuRPkua22vQmzgAAABU"]
[Fri Apr 17 17:32:02.142410 2026] [proxy_fcgi:error] [pid 9263:tid 9288] [client 20.215.250.20:11091] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 17:32:02.658308 2026] [proxy_fcgi:error] [pid 9263:tid 9278] [client 20.215.250.20:11091] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 17:32:02.941831 2026] [proxy_fcgi:error] [pid 9263:tid 9276] [client 20.215.250.20:11091] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 17:32:03.218608 2026] [proxy_fcgi:error] [pid 9263:tid 9275] [client 20.215.250.20:11091] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 17:32:03.497888 2026] [proxy_fcgi:error] [pid 9263:tid 9277] [client 20.215.250.20:11091] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 17:32:04.303427 2026] [proxy_fcgi:error] [pid 9263:tid 9288] [client 20.215.250.20:11091] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 17:32:04.581515 2026] [proxy_fcgi:error] [pid 9263:tid 9278] [client 20.215.250.20:11091] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 17:32:04.863672 2026] [proxy_fcgi:error] [pid 9263:tid 9270] [client 20.215.250.20:11091] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 17:32:05.118596 2026] [:error] [pid 9263:tid 9267] [client 20.215.250.20:11091] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ms-edit.php"] [unique_id "aeH-FRP68VyHNvj1e5743AAAAMI"]
[Fri Apr 17 17:32:08.462052 2026] [:error] [pid 9263:tid 9275] [client 20.215.250.20:11137] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ms-edit.php"] [unique_id "aeH-GBP68VyHNvj1e5744gAAAMo"]
[Fri Apr 17 17:32:11.593525 2026] [:error] [pid 34273:tid 34283] [client 20.215.250.20:11254] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ms-edit.php"] [unique_id "aeH-G2uQDW686mK3dgHg_gAAAYg"]
[Fri Apr 17 17:32:12.435612 2026] [:error] [pid 51878:tid 51888] [client 20.215.250.20:11169] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ms-edit.php"] [unique_id "aeH-HEnQhUtMbw9EsgZDRgAAAQg"]
[Fri Apr 17 17:32:13.593157 2026] [:error] [pid 9263:tid 9274] [client 20.215.250.20:11152] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/222.php"] [unique_id "aeH-HRP68VyHNvj1e5747QAAAMk"]
[Fri Apr 17 17:32:15.230396 2026] [:error] [pid 9153:tid 9221] [client 20.215.250.20:11176] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/222.php"] [unique_id "aeH-H-MHGxkTZX3c45fowQAAAIM"]
[Fri Apr 17 17:32:16.944472 2026] [:error] [pid 9153:tid 9234] [client 20.215.250.20:11130] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/222.php"] [unique_id "aeH-IOMHGxkTZX3c45fowgAAAJA"]
[Fri Apr 17 17:32:17.849379 2026] [:error] [pid 9151:tid 9184] [client 20.215.250.20:11236] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/222.php"] [unique_id "aeH-IchTVuRPkua22vQm1AAAABc"]
[Fri Apr 17 17:32:19.273225 2026] [:error] [pid 9151:tid 9175] [client 20.215.250.20:11112] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aeH-I8hTVuRPkua22vQm1QAAAA4"]
[Fri Apr 17 17:32:19.976073 2026] [:error] [pid 34273:tid 34297] [client 20.215.250.20:11216] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aeH-I2uQDW686mK3dgHhBwAAAZY"]
[Fri Apr 17 17:32:21.149917 2026] [:error] [pid 61523:tid 61549] [client 20.215.250.20:11141] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aeH-JcOaH-Pgc7WEf4OCZAAAAcc"]
[Fri Apr 17 17:32:22.395691 2026] [:error] [pid 9153:tid 9241] [client 20.215.250.20:11202] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aeH-JuMHGxkTZX3c45foxQAAAJc"]
[Fri Apr 17 17:32:23.233533 2026] [:error] [pid 61523:tid 61553] [client 20.215.250.20:11193] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fff.php"] [unique_id "aeH-J8OaH-Pgc7WEf4OCaAAAAcs"]
[Fri Apr 17 17:32:24.272168 2026] [:error] [pid 61523:tid 61565] [client 20.215.250.20:10959] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fff.php"] [unique_id "aeH-KMOaH-Pgc7WEf4OCawAAAdc"]
[Fri Apr 17 17:32:25.133034 2026] [:error] [pid 9263:tid 9277] [client 20.215.250.20:11203] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fff.php"] [unique_id "aeH-KRP68VyHNvj1e5748AAAAMw"]
[Fri Apr 17 17:32:26.571052 2026] [:error] [pid 9153:tid 9235] [client 20.215.250.20:11088] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fff.php"] [unique_id "aeH-KuMHGxkTZX3c45foxwAAAJE"]
[Fri Apr 17 17:32:27.223661 2026] [:error] [pid 61523:tid 61565] [client 20.215.250.20:11215] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/"] [unique_id "aeH-K8OaH-Pgc7WEf4OCeQAAAdc"]
[Fri Apr 17 17:32:28.393511 2026] [:error] [pid 51878:tid 51889] [client 20.215.250.20:11240] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/"] [unique_id "aeH-LEnQhUtMbw9EsgZDWgAAAQk"]
[Fri Apr 17 17:32:29.507829 2026] [:error] [pid 51878:tid 51899] [client 20.215.250.20:11239] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/"] [unique_id "aeH-LUnQhUtMbw9EsgZDXwAAARM"]
[Fri Apr 17 17:32:30.853385 2026] [:error] [pid 9263:tid 9287] [client 20.215.250.20:11101] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/"] [unique_id "aeH-LhP68VyHNvj1e5749wAAANY"]
[Fri Apr 17 17:32:31.728695 2026] [:error] [pid 34273:tid 34292] [client 20.215.250.20:11164] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/we.php"] [unique_id "aeH-L2uQDW686mK3dgHhDQAAAZE"]
[Fri Apr 17 17:32:32.464475 2026] [:error] [pid 9263:tid 9282] [client 20.215.250.20:11151] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/we.php"] [unique_id "aeH-MBP68VyHNvj1e574-QAAANE"]
[Fri Apr 17 17:32:34.486472 2026] [:error] [pid 9263:tid 9273] [client 20.215.250.20:11132] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/we.php"] [unique_id "aeH-MhP68VyHNvj1e575AQAAAMg"]
[Fri Apr 17 17:32:35.869174 2026] [:error] [pid 9152:tid 9214] [client 20.215.250.20:11194] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/we.php"] [unique_id "aeH-M5JYca8I3TNCwIctVgAAAFg"]
[Fri Apr 17 17:32:37.013968 2026] [:error] [pid 51878:tid 51887] [client 20.215.250.20:11222] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/alpha.php"] [unique_id "aeH-NUnQhUtMbw9EsgZDaQAAAQc"]
[Fri Apr 17 17:32:38.472159 2026] [:error] [pid 9263:tid 9268] [client 20.215.250.20:11210] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/alpha.php"] [unique_id "aeH-NhP68VyHNvj1e575EAAAAMM"]
[Fri Apr 17 17:32:39.901776 2026] [:error] [pid 61523:tid 61545] [client 20.215.250.20:11144] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/alpha.php"] [unique_id "aeH-N8OaH-Pgc7WEf4OChwAAAcM"]
[Fri Apr 17 17:32:41.293524 2026] [:error] [pid 61523:tid 61547] [client 20.215.250.20:11177] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/alpha.php"] [unique_id "aeH-OcOaH-Pgc7WEf4OCigAAAcU"]
[Fri Apr 17 17:32:42.736344 2026] [:error] [pid 9263:tid 9272] [client 20.215.250.20:11223] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/makeasmtp.php"] [unique_id "aeH-OhP68VyHNvj1e575HgAAAMc"]
[Fri Apr 17 17:32:44.462470 2026] [:error] [pid 9152:tid 9197] [client 20.215.250.20:10988] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/makeasmtp.php"] [unique_id "aeH-PJJYca8I3TNCwIctYgAAAEc"]
[Fri Apr 17 17:32:46.002847 2026] [:error] [pid 61523:tid 61558] [client 20.215.250.20:11242] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/makeasmtp.php"] [unique_id "aeH-PsOaH-Pgc7WEf4OCjQAAAdA"]
[Fri Apr 17 17:32:46.981092 2026] [:error] [pid 61523:tid 61565] [client 20.215.250.20:11260] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/makeasmtp.php"] [unique_id "aeH-PsOaH-Pgc7WEf4OCjgAAAdc"]
[Fri Apr 17 17:32:47.951724 2026] [:error] [pid 9263:tid 9281] [client 20.215.250.20:11148] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-michan.php"] [unique_id "aeH-PxP68VyHNvj1e575MgAAANA"]
[Fri Apr 17 17:32:49.302100 2026] [:error] [pid 61523:tid 61559] [client 20.215.250.20:10985] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-michan.php"] [unique_id "aeH-QcOaH-Pgc7WEf4OCkQAAAdE"]
[Fri Apr 17 17:32:50.917110 2026] [:error] [pid 61523:tid 61566] [client 20.215.250.20:10969] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-michan.php"] [unique_id "aeH-QsOaH-Pgc7WEf4OClAAAAdg"]
[Fri Apr 17 17:32:51.821984 2026] [:error] [pid 9263:tid 9270] [client 20.215.250.20:11230] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-michan.php"] [unique_id "aeH-QxP68VyHNvj1e575OwAAAMU"]
[Fri Apr 17 17:32:52.991185 2026] [:error] [pid 9263:tid 9269] [client 20.215.250.20:11227] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin1.php"] [unique_id "aeH-RBP68VyHNvj1e575PAAAAMQ"]
[Fri Apr 17 17:32:54.681390 2026] [:error] [pid 9263:tid 9272] [client 20.215.250.20:10957] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin1.php"] [unique_id "aeH-RhP68VyHNvj1e575QQAAAMc"]
[Fri Apr 17 17:32:56.490196 2026] [:error] [pid 9263:tid 9271] [client 20.215.250.20:11166] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin1.php"] [unique_id "aeH-SBP68VyHNvj1e575RAAAAMY"]
[Fri Apr 17 17:32:58.433778 2026] [:error] [pid 61523:tid 61564] [client 20.215.250.20:11026] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin1.php"] [unique_id "aeH-SsOaH-Pgc7WEf4OCnQAAAdY"]
[Fri Apr 17 17:33:00.457726 2026] [:error] [pid 51878:tid 51884] [client 20.215.250.20:10962] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aeH-TEnQhUtMbw9EsgZDbgAAAQQ"]
[Fri Apr 17 17:33:05.991905 2026] [proxy_fcgi:error] [pid 9151:tid 9176] [client 20.215.250.20:11217] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 17:33:06.548528 2026] [proxy_fcgi:error] [pid 9151:tid 9181] [client 20.215.250.20:11217] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 17:33:06.810739 2026] [proxy_fcgi:error] [pid 9151:tid 9185] [client 20.215.250.20:11217] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 17:33:07.339743 2026] [proxy_fcgi:error] [pid 9151:tid 9165] [client 20.215.250.20:11217] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 17:33:07.874310 2026] [proxy_fcgi:error] [pid 9151:tid 9183] [client 20.215.250.20:11217] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 17:33:08.132172 2026] [proxy_fcgi:error] [pid 9151:tid 9168] [client 20.215.250.20:11217] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 17:33:08.403383 2026] [proxy_fcgi:error] [pid 9151:tid 9162] [client 20.215.250.20:11217] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 17:33:08.680747 2026] [:error] [pid 9151:tid 9166] [client 20.215.250.20:11217] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a1.php"] [unique_id "aeH-VMhTVuRPkua22vQm8AAAAAU"]
[Fri Apr 17 17:33:11.870325 2026] [:error] [pid 9153:tid 9233] [client 20.215.250.20:11220] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a1.php"] [unique_id "aeH-V-MHGxkTZX3c45foywAAAI8"]
[Fri Apr 17 17:33:13.404314 2026] [:error] [pid 34273:tid 34290] [client 20.215.250.20:11186] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a1.php"] [unique_id "aeH-WWuQDW686mK3dgHhIwAAAY8"]
[Fri Apr 17 17:33:14.381796 2026] [:error] [pid 9152:tid 9199] [client 20.215.250.20:11250] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a1.php"] [unique_id "aeH-WpJYca8I3TNCwIctkgAAAEk"]
[Fri Apr 17 17:33:15.648059 2026] [:error] [pid 9151:tid 9164] [client 20.215.250.20:11261] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/update/f35.php"] [unique_id "aeH-W8hTVuRPkua22vQm8QAAAAM"]
[Fri Apr 17 17:33:16.877847 2026] [:error] [pid 34273:tid 34279] [client 20.215.250.20:11235] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/update/f35.php"] [unique_id "aeH-XGuQDW686mK3dgHhLgAAAYQ"]
[Fri Apr 17 17:33:18.045518 2026] [:error] [pid 51878:tid 51892] [client 20.215.250.20:11182] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/update/f35.php"] [unique_id "aeH-XknQhUtMbw9EsgZDfAAAAQw"]
[Fri Apr 17 17:33:18.851413 2026] [:error] [pid 61523:tid 61549] [client 20.215.250.20:11231] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/update/f35.php"] [unique_id "aeH-XsOaH-Pgc7WEf4OCrAAAAcc"]
[Fri Apr 17 17:33:20.533871 2026] [:error] [pid 9263:tid 9289] [client 20.215.250.20:11146] [client 20.215.250.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aeH-YBP68VyHNvj1e575jQAAANg"]
[Fri Apr 17 17:33:21.469837 2026] [:error] [pid 61523:tid 61547] [client 20.215.250.20:11258] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f35.php"] [unique_id "aeH-YcOaH-Pgc7WEf4OCsAAAAcU"]
[Fri Apr 17 17:33:23.249612 2026] [:error] [pid 9263:tid 9279] [client 20.215.250.20:10963] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f35.php"] [unique_id "aeH-YxP68VyHNvj1e575mgAAAM4"]
[Fri Apr 17 17:33:24.411505 2026] [:error] [pid 9152:tid 9190] [client 20.215.250.20:11153] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f35.php"] [unique_id "aeH-ZJJYca8I3TNCwIctogAAAEA"]
[Fri Apr 17 17:33:25.307438 2026] [:error] [pid 61523:tid 61548] [client 20.215.250.20:11142] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f35.php"] [unique_id "aeH-ZcOaH-Pgc7WEf4OCvgAAAcY"]
[Fri Apr 17 17:33:26.130626 2026] [:error] [pid 9263:tid 9276] [client 20.215.250.20:11097] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aeH-ZhP68VyHNvj1e575ogAAAMs"]
[Fri Apr 17 17:33:28.067891 2026] [:error] [pid 9263:tid 9288] [client 20.215.250.20:11241] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aeH-aBP68VyHNvj1e575qgAAANc"]
[Fri Apr 17 17:33:28.994849 2026] [:error] [pid 9152:tid 9204] [client 20.215.250.20:11168] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aeH-aJJYca8I3TNCwIctqQAAAE4"]
[Fri Apr 17 17:33:30.887599 2026] [:error] [pid 61523:tid 61551] [client 20.215.250.20:10981] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aeH-asOaH-Pgc7WEf4OCzwAAAck"]
[Fri Apr 17 17:33:33.009939 2026] [:error] [pid 9263:tid 9283] [client 20.215.250.20:11083] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aeH-bRP68VyHNvj1e575vAAAANI"]
[Fri Apr 17 17:33:35.468076 2026] [:error] [pid 34273:tid 34275] [client 20.215.250.20:11200] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aeH-b2uQDW686mK3dgHhNgAAAYA"]
[Fri Apr 17 17:33:36.983177 2026] [:error] [pid 51878:tid 51882] [client 20.215.250.20:11108] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aeH-cEnQhUtMbw9EsgZDjAAAAQI"]
[Fri Apr 17 17:33:38.819285 2026] [:error] [pid 9151:tid 9165] [client 20.215.250.20:11178] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aeH-cshTVuRPkua22vQm-AAAAAQ"]
[Fri Apr 17 17:33:40.837434 2026] [:error] [pid 61523:tid 61561] [client 20.215.250.20:11228] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/wp-file-manager/admin/"] [unique_id "aeH-dMOaH-Pgc7WEf4OC3AAAAdM"]
[Fri Apr 17 17:33:42.241174 2026] [:error] [pid 51878:tid 51897] [client 20.215.250.20:11134] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/wp-file-manager/admin/"] [unique_id "aeH-dknQhUtMbw9EsgZDjQAAARE"]
[Fri Apr 17 17:33:43.288674 2026] [:error] [pid 51878:tid 51886] [client 20.215.250.20:11171] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/wp-file-manager/admin/"] [unique_id "aeH-d0nQhUtMbw9EsgZDkQAAAQY"]
[Fri Apr 17 17:33:44.535899 2026] [:error] [pid 61523:tid 61543] [client 20.215.250.20:11219] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/wp-file-manager/admin/"] [unique_id "aeH-eMOaH-Pgc7WEf4OC5AAAAcE"]
[Fri Apr 17 17:33:45.511770 2026] [:error] [pid 9151:tid 9167] [client 20.215.250.20:11255] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/k.php"] [unique_id "aeH-echTVuRPkua22vQm-wAAAAY"]
[Fri Apr 17 17:33:47.346069 2026] [:error] [pid 61523:tid 61557] [client 20.215.250.20:11192] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/k.php"] [unique_id "aeH-e8OaH-Pgc7WEf4OC5gAAAc8"]
[Fri Apr 17 17:33:49.070512 2026] [:error] [pid 61523:tid 61557] [client 20.215.250.20:11198] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/k.php"] [unique_id "aeH-fcOaH-Pgc7WEf4OC8AAAAc8"]
[Fri Apr 17 17:33:51.229980 2026] [:error] [pid 61523:tid 61548] [client 20.215.250.20:11156] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/k.php"] [unique_id "aeH-f8OaH-Pgc7WEf4OC9wAAAcY"]
[Fri Apr 17 17:33:55.280628 2026] [:error] [pid 34273:tid 34293] [client 20.215.250.20:11234] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dev.php"] [unique_id "aeH-g2uQDW686mK3dgHhRwAAAZI"]
[Fri Apr 17 17:33:57.977637 2026] [:error] [pid 34273:tid 34298] [client 20.215.250.20:11150] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dev.php"] [unique_id "aeH-hWuQDW686mK3dgHhUgAAAZc"]
[Fri Apr 17 17:34:03.505277 2026] [:error] [pid 34273:tid 34275] [client 20.215.250.20:11251] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dev.php"] [unique_id "aeH-i2uQDW686mK3dgHhWAAAAYA"]
[Fri Apr 17 17:34:05.317797 2026] [:error] [pid 9263:tid 9286] [client 20.215.250.20:11249] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dev.php"] [unique_id "aeH-jRP68VyHNvj1e5755QAAANU"]
[Fri Apr 17 17:34:06.550213 2026] [:error] [pid 25010:tid 25026] [client 20.215.250.20:11081] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bal.php"] [unique_id "aeH-jo-7kkf42RarqQ1a_wAAAU0"]
[Fri Apr 17 17:34:08.385615 2026] [proxy_fcgi:error] [pid 9263:tid 9281] [client 20.215.250.20:11140] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 17:34:08.659963 2026] [proxy_fcgi:error] [pid 9263:tid 9265] [client 20.215.250.20:11140] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 17:34:08.918476 2026] [proxy_fcgi:error] [pid 9263:tid 9271] [client 20.215.250.20:11140] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 17:34:09.845524 2026] [proxy_fcgi:error] [pid 9263:tid 9273] [client 20.215.250.20:11140] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 17:34:10.500947 2026] [proxy_fcgi:error] [pid 9263:tid 9282] [client 20.215.250.20:11140] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 17:34:13.836910 2026] [proxy_fcgi:error] [pid 9263:tid 9286] [client 20.215.250.20:11140] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 17:34:14.095887 2026] [proxy_fcgi:error] [pid 9263:tid 9289] [client 20.215.250.20:11140] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 17:34:14.355564 2026] [proxy_fcgi:error] [pid 9263:tid 9283] [client 20.215.250.20:11140] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 17:34:14.615494 2026] [proxy_fcgi:error] [pid 9263:tid 9277] [client 20.215.250.20:11140] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 17:34:14.870749 2026] [:error] [pid 9263:tid 9267] [client 20.215.250.20:11140] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/g.php"] [unique_id "aeH-lhP68VyHNvj1e575_wAAAMI"]
[Fri Apr 17 17:34:16.206453 2026] [:error] [pid 34273:tid 34295] [client 20.215.250.20:10954] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/g.php"] [unique_id "aeH-mGuQDW686mK3dgHhYQAAAZQ"]
[Fri Apr 17 17:34:17.597709 2026] [:error] [pid 9152:tid 9192] [client 20.215.250.20:11204] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/g.php"] [unique_id "aeH-mZJYca8I3TNCwIct-AAAAEI"]
[Fri Apr 17 17:34:20.195268 2026] [:error] [pid 9152:tid 9198] [client 20.215.250.20:11152] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/g.php"] [unique_id "aeH-nJJYca8I3TNCwIct-gAAAEg"]
[Fri Apr 17 17:34:24.014268 2026] [:error] [pid 51878:tid 51887] [client 20.215.250.20:11256] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/"] [unique_id "aeH-oEnQhUtMbw9EsgZDrwAAAQc"]
[Fri Apr 17 17:34:25.652552 2026] [:error] [pid 61523:tid 61558] [client 20.215.250.20:11074] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/"] [unique_id "aeH-ocOaH-Pgc7WEf4ODCQAAAdA"]
[Fri Apr 17 17:34:27.367160 2026] [:error] [pid 61523:tid 61560] [client 20.215.250.20:11162] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/"] [unique_id "aeH-o8OaH-Pgc7WEf4ODDQAAAdI"]
[Fri Apr 17 17:34:29.654069 2026] [:error] [pid 9151:tid 9179] [client 20.215.250.20:11161] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/"] [unique_id "aeH-pchTVuRPkua22vQnBgAAABI"]
[Fri Apr 17 17:34:32.359283 2026] [:error] [pid 9263:tid 9277] [client 20.215.250.20:11115] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/simple.php"] [unique_id "aeH-qBP68VyHNvj1e576DgAAAMw"]
[Fri Apr 17 17:34:34.396152 2026] [:error] [pid 9263:tid 9278] [client 20.215.250.20:11139] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/simple.php"] [unique_id "aeH-qhP68VyHNvj1e576FQAAAM0"]
[Fri Apr 17 17:34:36.789530 2026] [:error] [pid 9153:tid 9239] [client 20.215.250.20:11189] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/simple.php"] [unique_id "aeH-rOMHGxkTZX3c45fpCAAAAJU"]
[Fri Apr 17 17:34:38.605101 2026] [:error] [pid 9151:tid 9185] [client 20.215.250.20:11084] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/simple.php"] [unique_id "aeH-rshTVuRPkua22vQnCgAAABg"]
[Fri Apr 17 17:34:39.631032 2026] [:error] [pid 9263:tid 9289] [client 20.215.250.20:11214] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ew.php"] [unique_id "aeH-rxP68VyHNvj1e576IwAAANg"]
[Fri Apr 17 17:34:41.345495 2026] [:error] [pid 34273:tid 34288] [client 20.215.250.20:11103] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ew.php"] [unique_id "aeH-sWuQDW686mK3dgHhewAAAY0"]
[Fri Apr 17 17:34:43.932660 2026] [:error] [pid 9263:tid 9275] [client 20.215.250.20:11118] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ew.php"] [unique_id "aeH-sxP68VyHNvj1e576NAAAAMo"]
[Fri Apr 17 17:34:47.605501 2026] [:error] [pid 9263:tid 9279] [client 20.215.250.20:11145] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ew.php"] [unique_id "aeH-txP68VyHNvj1e576QgAAAM4"]
[Fri Apr 17 17:34:49.970796 2026] [:error] [pid 9263:tid 9278] [client 20.215.250.20:11206] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file21.php"] [unique_id "aeH-uRP68VyHNvj1e576WgAAAM0"]
[Fri Apr 17 17:34:52.686812 2026] [:error] [pid 9151:tid 9170] [client 20.215.250.20:11213] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file21.php"] [unique_id "aeH-vMhTVuRPkua22vQnIAAAAAk"]
[Fri Apr 17 17:34:54.060029 2026] [:error] [pid 61523:tid 61554] [client 20.215.250.20:11113] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file21.php"] [unique_id "aeH-vsOaH-Pgc7WEf4ODIgAAAcw"]
[Fri Apr 17 17:34:55.005695 2026] [:error] [pid 9152:tid 9191] [client 20.215.250.20:11167] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file21.php"] [unique_id "aeH-v5JYca8I3TNCwIcuFAAAAEE"]
[Fri Apr 17 17:34:56.978408 2026] [:error] [pid 61523:tid 61557] [client 20.215.250.20:11245] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hypo.php"] [unique_id "aeH-wMOaH-Pgc7WEf4ODLAAAAc8"]
[Fri Apr 17 17:34:58.001899 2026] [:error] [pid 9263:tid 9286] [client 20.215.250.20:11147] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hypo.php"] [unique_id "aeH-whP68VyHNvj1e576aQAAANU"]
[Fri Apr 17 17:34:59.411025 2026] [:error] [pid 9153:tid 9232] [client 20.215.250.20:11104] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hypo.php"] [unique_id "aeH-w-MHGxkTZX3c45fpRAAAAI4"]
[Fri Apr 17 17:35:00.832191 2026] [:error] [pid 9152:tid 9193] [client 20.215.250.20:11073] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hypo.php"] [unique_id "aeH-xJJYca8I3TNCwIcuHAAAAEM"]
[Fri Apr 17 17:35:02.406305 2026] [:error] [pid 25010:tid 25017] [client 20.215.250.20:11257] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file18.php"] [unique_id "aeH-xo-7kkf42RarqQ1bdQAAAUQ"]
[Fri Apr 17 17:35:04.761398 2026] [:error] [pid 25010:tid 25026] [client 20.215.250.20:11119] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file18.php"] [unique_id "aeH-yI-7kkf42RarqQ1bdgAAAU0"]
[Fri Apr 17 17:35:05.902674 2026] [:error] [pid 61523:tid 61558] [client 20.215.250.20:11155] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file18.php"] [unique_id "aeH-ycOaH-Pgc7WEf4ODMwAAAdA"]
[Fri Apr 17 17:35:07.213608 2026] [:error] [pid 61523:tid 61561] [client 20.215.250.20:11191] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file18.php"] [unique_id "aeH-y8OaH-Pgc7WEf4ODNAAAAdM"]
[Fri Apr 17 17:35:09.519620 2026] [:error] [pid 61523:tid 61555] [client 20.215.250.20:11238] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vee.php"] [unique_id "aeH-zcOaH-Pgc7WEf4ODOgAAAc0"]
[Fri Apr 17 17:35:11.407921 2026] [:error] [pid 9152:tid 9207] [client 20.215.250.20:11080] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vee.php"] [unique_id "aeH-z5JYca8I3TNCwIcuLgAAAFE"]
[Fri Apr 17 17:35:12.123330 2026] [:error] [pid 9151:tid 9162] [client 20.215.250.20:11184] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vee.php"] [unique_id "aeH-0MhTVuRPkua22vQnKAAAAAE"]
[Fri Apr 17 17:35:13.004005 2026] [:error] [pid 9151:tid 9161] [client 20.215.250.20:10948] [client 20.215.250.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vee.php"] [unique_id "aeH-0chTVuRPkua22vQnKQAAAAA"]
[Fri Apr 17 17:35:14.632578 2026] [proxy_fcgi:error] [pid 61523:tid 61549] [client 20.215.250.20:10979] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 17:35:14.896277 2026] [proxy_fcgi:error] [pid 61523:tid 61551] [client 20.215.250.20:10979] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 17:35:15.161978 2026] [proxy_fcgi:error] [pid 61523:tid 61548] [client 20.215.250.20:10979] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 17:35:15.439243 2026] [proxy_fcgi:error] [pid 61523:tid 61541] [client 20.215.250.20:10979] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 00:50:51.495402 2026] [proxy_fcgi:error] [pid 59043:tid 59078] [client 51.103.133.91:39765] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 00:50:51.734132 2026] [proxy_fcgi:error] [pid 59043:tid 59098] [client 51.103.133.91:39765] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 00:50:51.971912 2026] [proxy_fcgi:error] [pid 59043:tid 59083] [client 51.103.133.91:39765] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 00:50:52.209733 2026] [proxy_fcgi:error] [pid 59043:tid 59095] [client 51.103.133.91:39765] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 00:50:52.450191 2026] [proxy_fcgi:error] [pid 59043:tid 59081] [client 51.103.133.91:39765] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 00:50:52.688631 2026] [proxy_fcgi:error] [pid 59043:tid 59096] [client 51.103.133.91:39765] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 00:50:54.219308 2026] [proxy_fcgi:error] [pid 59043:tid 59087] [client 51.103.133.91:39765] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 00:50:54.461030 2026] [proxy_fcgi:error] [pid 59043:tid 59074] [client 51.103.133.91:39765] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 00:50:54.699047 2026] [proxy_fcgi:error] [pid 59043:tid 59076] [client 51.103.133.91:39765] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 00:50:54.937726 2026] [proxy_fcgi:error] [pid 59043:tid 59075] [client 51.103.133.91:39765] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 00:50:55.172875 2026] [:error] [pid 59043:tid 59094] [client 51.103.133.91:39765] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nwflm.php"] [unique_id "aeJk74RtUGE9SfUh2wwL2QAAAFQ"]
[Sat Apr 18 00:50:55.642642 2026] [:error] [pid 59042:tid 59050] [client 51.103.133.91:14077] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nwflm.php"] [unique_id "aeJk756p5oql0UklEBI-aQAAAAM"]
[Sat Apr 18 00:50:56.112075 2026] [:error] [pid 59042:tid 59056] [client 51.103.133.91:14061] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nwflm.php"] [unique_id "aeJk8J6p5oql0UklEBI-bwAAAAk"]
[Sat Apr 18 00:50:56.612548 2026] [:error] [pid 42442:tid 42462] [client 51.103.133.91:12999] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nwflm.php"] [unique_id "aeJk8D4PBGqL_yqPJ8kV8gAAARI"]
[Sat Apr 18 00:50:57.113997 2026] [:error] [pid 59044:tid 59123] [client 51.103.133.91:14044] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dx.php"] [unique_id "aeJk8QFamkFyEtD_SMG1igAAAJY"]
[Sat Apr 18 00:50:57.588090 2026] [:error] [pid 59044:tid 59102] [client 51.103.133.91:13035] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dx.php"] [unique_id "aeJk8QFamkFyEtD_SMG1jAAAAIE"]
[Sat Apr 18 00:50:58.058320 2026] [:error] [pid 42442:tid 42463] [client 51.103.133.91:39749] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dx.php"] [unique_id "aeJk8j4PBGqL_yqPJ8kV9wAAARM"]
[Sat Apr 18 00:50:58.735694 2026] [:error] [pid 59042:tid 59055] [client 51.103.133.91:12992] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dx.php"] [unique_id "aeJk8p6p5oql0UklEBI-fQAAAAg"]
[Sat Apr 18 00:50:59.263975 2026] [:error] [pid 59042:tid 59054] [client 51.103.133.91:39764] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xff.php"] [unique_id "aeJk856p5oql0UklEBI-gQAAAAc"]
[Sat Apr 18 00:50:59.941360 2026] [:error] [pid 42442:tid 42453] [client 51.103.133.91:12998] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xff.php"] [unique_id "aeJk8z4PBGqL_yqPJ8kV-gAAAQk"]
[Sat Apr 18 00:51:00.440885 2026] [:error] [pid 59042:tid 59057] [client 51.103.133.91:13030] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xff.php"] [unique_id "aeJk9J6p5oql0UklEBI-hwAAAAo"]
[Sat Apr 18 00:51:00.940923 2026] [:error] [pid 59042:tid 59055] [client 51.103.133.91:13038] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xff.php"] [unique_id "aeJk9J6p5oql0UklEBI-igAAAAg"]
[Sat Apr 18 00:51:01.442183 2026] [:error] [pid 42442:tid 42460] [client 51.103.133.91:13055] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lupo.php"] [unique_id "aeJk9T4PBGqL_yqPJ8kV_QAAARA"]
[Sat Apr 18 00:51:01.943367 2026] [:error] [pid 59136:tid 59149] [client 51.103.133.91:14035] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lupo.php"] [unique_id "aeJk9SaoiUyiIR3EhLWwbgAAAMo"]
[Sat Apr 18 00:51:02.445376 2026] [:error] [pid 59042:tid 59071] [client 51.103.133.91:13012] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lupo.php"] [unique_id "aeJk9p6p5oql0UklEBI-lAAAABg"]
[Sat Apr 18 00:51:02.974304 2026] [:error] [pid 59042:tid 59055] [client 51.103.133.91:39761] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lupo.php"] [unique_id "aeJk9p6p5oql0UklEBI-mAAAAAg"]
[Sat Apr 18 00:51:03.474365 2026] [:error] [pid 59042:tid 59054] [client 51.103.133.91:34927] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/awa.php"] [unique_id "aeJk956p5oql0UklEBI-nAAAAAc"]
[Sat Apr 18 00:51:03.985333 2026] [:error] [pid 59042:tid 59067] [client 51.103.133.91:39770] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/awa.php"] [unique_id "aeJk956p5oql0UklEBI-oAAAABQ"]
[Sat Apr 18 00:51:04.486428 2026] [:error] [pid 59042:tid 59070] [client 51.103.133.91:14054] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/awa.php"] [unique_id "aeJk-J6p5oql0UklEBI-pgAAABc"]
[Sat Apr 18 00:51:04.994278 2026] [:error] [pid 42442:tid 42451] [client 51.103.133.91:14064] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/awa.php"] [unique_id "aeJk-D4PBGqL_yqPJ8kWBAAAAQc"]
[Sat Apr 18 00:51:05.494084 2026] [:error] [pid 59042:tid 59056] [client 51.103.133.91:13047] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sadcut1.php"] [unique_id "aeJk-Z6p5oql0UklEBI-rwAAAAk"]
[Sat Apr 18 00:51:05.963910 2026] [:error] [pid 59136:tid 59157] [client 51.103.133.91:39751] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sadcut1.php"] [unique_id "aeJk-SaoiUyiIR3EhLWwcQAAANI"]
[Sat Apr 18 00:51:06.435528 2026] [:error] [pid 59042:tid 59063] [client 51.103.133.91:14052] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sadcut1.php"] [unique_id "aeJk-p6p5oql0UklEBI-tQAAABA"]
[Sat Apr 18 00:51:06.942828 2026] [:error] [pid 59042:tid 59061] [client 51.103.133.91:39759] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sadcut1.php"] [unique_id "aeJk-p6p5oql0UklEBI-uAAAAA4"]
[Sat Apr 18 00:51:07.452121 2026] [:error] [pid 59042:tid 59071] [client 51.103.133.91:12995] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/popo.php"] [unique_id "aeJk-56p5oql0UklEBI-vQAAABg"]
[Sat Apr 18 00:51:08.139548 2026] [:error] [pid 59042:tid 59053] [client 51.103.133.91:13002] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/popo.php"] [unique_id "aeJk_J6p5oql0UklEBI-xAAAAAY"]
[Sat Apr 18 00:51:08.640537 2026] [:error] [pid 59044:tid 59118] [client 51.103.133.91:13033] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/popo.php"] [unique_id "aeJk_AFamkFyEtD_SMG1lAAAAJE"]
[Sat Apr 18 00:51:09.110211 2026] [:error] [pid 59044:tid 59122] [client 51.103.133.91:14048] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/popo.php"] [unique_id "aeJk_QFamkFyEtD_SMG1lQAAAJU"]
[Sat Apr 18 00:51:09.612475 2026] [:error] [pid 59042:tid 59047] [client 51.103.133.91:39775] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/water.php"] [unique_id "aeJk_Z6p5oql0UklEBI-1AAAAAA"]
[Sat Apr 18 00:51:10.116504 2026] [:error] [pid 59043:tid 59097] [client 51.103.133.91:13048] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/water.php"] [unique_id "aeJk_oRtUGE9SfUh2wwL3wAAAFc"]
[Sat Apr 18 00:51:10.589349 2026] [:error] [pid 59044:tid 59121] [client 51.103.133.91:12993] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/water.php"] [unique_id "aeJk_gFamkFyEtD_SMG1mQAAAJQ"]
[Sat Apr 18 00:51:11.059604 2026] [:error] [pid 42442:tid 42453] [client 51.103.133.91:34893] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/water.php"] [unique_id "aeJk_z4PBGqL_yqPJ8kWDwAAAQk"]
[Sat Apr 18 00:51:11.560223 2026] [:error] [pid 42442:tid 42445] [client 51.103.133.91:14033] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ggb.php"] [unique_id "aeJk_z4PBGqL_yqPJ8kWEgAAAQE"]
[Sat Apr 18 00:51:12.067229 2026] [:error] [pid 59042:tid 59054] [client 51.103.133.91:39758] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ggb.php"] [unique_id "aeJlAJ6p5oql0UklEBI-4QAAAAc"]
[Sat Apr 18 00:51:12.568666 2026] [:error] [pid 59043:tid 59085] [client 51.103.133.91:14037] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ggb.php"] [unique_id "aeJlAIRtUGE9SfUh2wwL4gAAAEs"]
[Sat Apr 18 00:51:13.100015 2026] [:error] [pid 59042:tid 59055] [client 51.103.133.91:14022] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ggb.php"] [unique_id "aeJlAZ6p5oql0UklEBI-5gAAAAg"]
[Sat Apr 18 00:51:13.599412 2026] [:error] [pid 59042:tid 59056] [client 51.103.133.91:13016] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/13.php"] [unique_id "aeJlAZ6p5oql0UklEBI-7AAAAAk"]
[Sat Apr 18 00:51:14.067034 2026] [:error] [pid 59042:tid 59071] [client 51.103.133.91:39762] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/13.php"] [unique_id "aeJlAp6p5oql0UklEBI-8wAAABg"]
[Sat Apr 18 00:51:14.568549 2026] [:error] [pid 59136:tid 59148] [client 51.103.133.91:14053] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/13.php"] [unique_id "aeJlAiaoiUyiIR3EhLWwdQAAAMk"]
[Sat Apr 18 00:51:15.104143 2026] [:error] [pid 59136:tid 59139] [client 51.103.133.91:13004] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/13.php"] [unique_id "aeJlAyaoiUyiIR3EhLWwdgAAAMA"]
[Sat Apr 18 00:51:15.635214 2026] [:error] [pid 59042:tid 59071] [client 51.103.133.91:14049] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wert.php"] [unique_id "aeJlA56p5oql0UklEBI_AgAAABg"]
[Sat Apr 18 00:51:16.135796 2026] [:error] [pid 59042:tid 59050] [client 51.103.133.91:14029] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wert.php"] [unique_id "aeJlBJ6p5oql0UklEBI_BgAAAAM"]
[Sat Apr 18 00:51:16.611295 2026] [:error] [pid 59042:tid 59063] [client 51.103.133.91:14026] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wert.php"] [unique_id "aeJlBJ6p5oql0UklEBI_CAAAABA"]
[Sat Apr 18 00:51:17.082098 2026] [:error] [pid 42442:tid 42444] [client 51.103.133.91:13020] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wert.php"] [unique_id "aeJlBT4PBGqL_yqPJ8kWJAAAAQA"]
[Sat Apr 18 00:51:17.552869 2026] [:error] [pid 59043:tid 59098] [client 51.103.133.91:14031] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/11.php"] [unique_id "aeJlBYRtUGE9SfUh2wwL5wAAAFg"]
[Sat Apr 18 00:51:18.021594 2026] [:error] [pid 59136:tid 59145] [client 51.103.133.91:14038] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/11.php"] [unique_id "aeJlBiaoiUyiIR3EhLWweAAAAMY"]
[Sat Apr 18 00:51:18.492666 2026] [:error] [pid 59136:tid 59157] [client 51.103.133.91:14042] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/11.php"] [unique_id "aeJlBiaoiUyiIR3EhLWweQAAANI"]
[Sat Apr 18 00:51:19.137655 2026] [:error] [pid 59044:tid 59122] [client 51.103.133.91:39776] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/11.php"] [unique_id "aeJlBwFamkFyEtD_SMG1ngAAAJU"]
[Sat Apr 18 00:51:19.612084 2026] [:error] [pid 59136:tid 59158] [client 51.103.133.91:39757] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/p.php"] [unique_id "aeJlByaoiUyiIR3EhLWwfwAAANM"]
[Sat Apr 18 00:51:20.081734 2026] [:error] [pid 42442:tid 42466] [client 51.103.133.91:13045] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/p.php"] [unique_id "aeJlCD4PBGqL_yqPJ8kWJgAAARY"]
[Sat Apr 18 00:51:20.554548 2026] [:error] [pid 59043:tid 59089] [client 51.103.133.91:12994] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/p.php"] [unique_id "aeJlCIRtUGE9SfUh2wwL6wAAAE8"]
[Sat Apr 18 00:51:21.033031 2026] [:error] [pid 42442:tid 42446] [client 51.103.133.91:39767] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/p.php"] [unique_id "aeJlCT4PBGqL_yqPJ8kWKwAAAQI"]
[Sat Apr 18 00:51:21.533287 2026] [:error] [pid 42442:tid 42468] [client 51.103.133.91:34883] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/oij98gy.php"] [unique_id "aeJlCT4PBGqL_yqPJ8kWLAAAARg"]
[Sat Apr 18 00:51:22.066712 2026] [:error] [pid 42442:tid 42463] [client 51.103.133.91:14070] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/oij98gy.php"] [unique_id "aeJlCj4PBGqL_yqPJ8kWLgAAARM"]
[Sat Apr 18 00:51:22.569586 2026] [:error] [pid 59043:tid 59097] [client 51.103.133.91:39769] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/oij98gy.php"] [unique_id "aeJlCoRtUGE9SfUh2wwL8QAAAFc"]
[Sat Apr 18 00:51:23.038786 2026] [:error] [pid 59043:tid 59078] [client 51.103.133.91:14071] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/oij98gy.php"] [unique_id "aeJlC4RtUGE9SfUh2wwL8gAAAEQ"]
[Sat Apr 18 00:51:23.510048 2026] [:error] [pid 59043:tid 59090] [client 51.103.133.91:14062] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bthil.php"] [unique_id "aeJlC4RtUGE9SfUh2wwL9wAAAFA"]
[Sat Apr 18 00:51:23.980079 2026] [:error] [pid 42442:tid 42448] [client 51.103.133.91:13010] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bthil.php"] [unique_id "aeJlCz4PBGqL_yqPJ8kWMQAAAQQ"]
[Sat Apr 18 00:51:24.450171 2026] [:error] [pid 59136:tid 59141] [client 51.103.133.91:14063] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bthil.php"] [unique_id "aeJlDCaoiUyiIR3EhLWwhwAAAMI"]
[Sat Apr 18 00:51:24.949878 2026] [:error] [pid 59043:tid 59092] [client 51.103.133.91:39779] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bthil.php"] [unique_id "aeJlDIRtUGE9SfUh2wwL-gAAAFI"]
[Sat Apr 18 00:51:25.450166 2026] [:error] [pid 59043:tid 59095] [client 51.103.133.91:13011] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/turkshell.php"] [unique_id "aeJlDYRtUGE9SfUh2wwL_AAAAFU"]
[Sat Apr 18 00:51:26.125766 2026] [:error] [pid 59043:tid 59077] [client 51.103.133.91:12997] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/turkshell.php"] [unique_id "aeJlDoRtUGE9SfUh2wwL_QAAAEM"]
[Sat Apr 18 00:51:26.624811 2026] [:error] [pid 59136:tid 59160] [client 51.103.133.91:39774] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/turkshell.php"] [unique_id "aeJlDiaoiUyiIR3EhLWwjQAAANU"]
[Sat Apr 18 00:51:27.127857 2026] [:error] [pid 59136:tid 59147] [client 51.103.133.91:13003] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/turkshell.php"] [unique_id "aeJlDyaoiUyiIR3EhLWwjgAAAMg"]
[Sat Apr 18 00:51:27.628529 2026] [:error] [pid 59136:tid 59141] [client 51.103.133.91:13036] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tea.php"] [unique_id "aeJlDyaoiUyiIR3EhLWwkQAAAMI"]
[Sat Apr 18 00:51:28.097825 2026] [:error] [pid 59042:tid 59048] [client 51.103.133.91:14028] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tea.php"] [unique_id "aeJlEJ6p5oql0UklEBI_DQAAAAE"]
[Sat Apr 18 00:51:28.568192 2026] [:error] [pid 59043:tid 59086] [client 51.103.133.91:13039] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tea.php"] [unique_id "aeJlEIRtUGE9SfUh2wwMAAAAAEw"]
[Sat Apr 18 00:51:29.067652 2026] [:error] [pid 42442:tid 42467] [client 51.103.133.91:34894] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tea.php"] [unique_id "aeJlET4PBGqL_yqPJ8kWNwAAARc"]
[Sat Apr 18 00:51:29.604020 2026] [:error] [pid 59136:tid 59142] [client 51.103.133.91:14072] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/seo.php"] [unique_id "aeJlESaoiUyiIR3EhLWwkwAAAMM"]
[Sat Apr 18 00:51:30.074606 2026] [:error] [pid 59042:tid 59055] [client 51.103.133.91:39795] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/seo.php"] [unique_id "aeJlEp6p5oql0UklEBI_EgAAAAg"]
[Sat Apr 18 00:51:30.574696 2026] [:error] [pid 59043:tid 59095] [client 51.103.133.91:14058] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/seo.php"] [unique_id "aeJlEoRtUGE9SfUh2wwMBAAAAFU"]
[Sat Apr 18 00:51:31.077791 2026] [:error] [pid 59136:tid 59144] [client 51.103.133.91:14063] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/seo.php"] [unique_id "aeJlEyaoiUyiIR3EhLWwlwAAAMU"]
[Sat Apr 18 00:51:31.547175 2026] [:error] [pid 42442:tid 42454] [client 51.103.133.91:34925] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/7.php"] [unique_id "aeJlEz4PBGqL_yqPJ8kWOQAAAQo"]
[Sat Apr 18 00:51:32.016582 2026] [:error] [pid 42442:tid 42450] [client 51.103.133.91:34900] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/7.php"] [unique_id "aeJlFD4PBGqL_yqPJ8kWOwAAAQY"]
[Sat Apr 18 00:51:32.487268 2026] [:error] [pid 59042:tid 59061] [client 51.103.133.91:13025] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/7.php"] [unique_id "aeJlFJ6p5oql0UklEBI_GgAAAA4"]
[Sat Apr 18 00:51:32.973476 2026] [:error] [pid 59042:tid 59071] [client 51.103.133.91:13053] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/7.php"] [unique_id "aeJlFJ6p5oql0UklEBI_HAAAABg"]
[Sat Apr 18 00:51:33.474454 2026] [:error] [pid 59136:tid 59147] [client 51.103.133.91:14079] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/8.php"] [unique_id "aeJlFSaoiUyiIR3EhLWwnAAAAMg"]
[Sat Apr 18 00:51:34.017876 2026] [:error] [pid 59136:tid 59156] [client 51.103.133.91:34907] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/8.php"] [unique_id "aeJlFiaoiUyiIR3EhLWwoAAAANE"]
[Sat Apr 18 00:51:34.516884 2026] [:error] [pid 59043:tid 59092] [client 51.103.133.91:14046] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/8.php"] [unique_id "aeJlFoRtUGE9SfUh2wwMEwAAAFI"]
[Sat Apr 18 00:51:35.018429 2026] [:error] [pid 59136:tid 59155] [client 51.103.133.91:65495] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/8.php"] [unique_id "aeJlFyaoiUyiIR3EhLWwpgAAANA"]
[Sat Apr 18 00:51:35.548126 2026] [:error] [pid 59042:tid 59048] [client 51.103.133.91:13040] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/1.php"] [unique_id "aeJlF56p5oql0UklEBI_HwAAAAE"]
[Sat Apr 18 00:51:36.047827 2026] [:error] [pid 59042:tid 59062] [client 51.103.133.91:13015] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/1.php"] [unique_id "aeJlGJ6p5oql0UklEBI_IQAAAA8"]
[Sat Apr 18 00:51:36.519500 2026] [:error] [pid 42442:tid 42462] [client 51.103.133.91:14019] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/1.php"] [unique_id "aeJlGD4PBGqL_yqPJ8kWRgAAARI"]
[Sat Apr 18 00:51:37.200589 2026] [:error] [pid 59044:tid 59117] [client 51.103.133.91:34902] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/1.php"] [unique_id "aeJlGQFamkFyEtD_SMG12wAAAJA"]
[Sat Apr 18 00:51:37.712037 2026] [:error] [pid 59042:tid 59049] [client 51.103.133.91:39793] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2.php"] [unique_id "aeJlGZ6p5oql0UklEBI_JwAAAAI"]
[Sat Apr 18 00:51:38.227397 2026] [:error] [pid 59043:tid 59075] [client 51.103.133.91:39787] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2.php"] [unique_id "aeJlGoRtUGE9SfUh2wwMIAAAAEE"]
[Sat Apr 18 00:51:38.726832 2026] [:error] [pid 42442:tid 42455] [client 51.103.133.91:34929] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2.php"] [unique_id "aeJlGj4PBGqL_yqPJ8kWTwAAAQs"]
[Sat Apr 18 00:51:39.210681 2026] [:error] [pid 42442:tid 42449] [client 51.103.133.91:39748] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2.php"] [unique_id "aeJlGz4PBGqL_yqPJ8kWUgAAAQU"]
[Sat Apr 18 00:51:39.689463 2026] [:error] [pid 59042:tid 59066] [client 51.103.133.91:14057] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/3.php"] [unique_id "aeJlG56p5oql0UklEBI_KQAAABM"]
[Sat Apr 18 00:51:40.158847 2026] [:error] [pid 42442:tid 42459] [client 51.103.133.91:39772] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/3.php"] [unique_id "aeJlHD4PBGqL_yqPJ8kWVQAAAQ8"]
[Sat Apr 18 00:51:40.636383 2026] [:error] [pid 42442:tid 42463] [client 51.103.133.91:13013] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/3.php"] [unique_id "aeJlHD4PBGqL_yqPJ8kWVwAAARM"]
[Sat Apr 18 00:51:41.105303 2026] [:error] [pid 42442:tid 42446] [client 51.103.133.91:13026] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/3.php"] [unique_id "aeJlHT4PBGqL_yqPJ8kWWQAAAQI"]
[Sat Apr 18 00:51:41.576745 2026] [:error] [pid 59136:tid 59152] [client 51.103.133.91:13052] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/4.php"] [unique_id "aeJlHSaoiUyiIR3EhLWwrwAAAM0"]
[Sat Apr 18 00:51:42.054706 2026] [:error] [pid 59043:tid 59093] [client 51.103.133.91:34942] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/4.php"] [unique_id "aeJlHoRtUGE9SfUh2wwMLQAAAFM"]
[Sat Apr 18 00:51:42.563656 2026] [:error] [pid 59043:tid 59081] [client 51.103.133.91:39746] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/4.php"] [unique_id "aeJlHoRtUGE9SfUh2wwMMAAAAEc"]
[Sat Apr 18 00:51:43.097613 2026] [:error] [pid 42442:tid 42449] [client 51.103.133.91:39778] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/4.php"] [unique_id "aeJlHz4PBGqL_yqPJ8kWXgAAAQU"]
[Sat Apr 18 00:51:43.629389 2026] [:error] [pid 42442:tid 42453] [client 51.103.133.91:39752] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/5.php"] [unique_id "aeJlHz4PBGqL_yqPJ8kWXwAAAQk"]
[Sat Apr 18 00:51:44.132281 2026] [:error] [pid 59043:tid 59084] [client 51.103.133.91:13044] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/5.php"] [unique_id "aeJlIIRtUGE9SfUh2wwMOAAAAEo"]
[Sat Apr 18 00:51:44.603702 2026] [:error] [pid 59042:tid 59058] [client 51.103.133.91:65510] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/5.php"] [unique_id "aeJlIJ6p5oql0UklEBI_LgAAAAs"]
[Sat Apr 18 00:51:45.075055 2026] [:error] [pid 59042:tid 59053] [client 51.103.133.91:13051] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/5.php"] [unique_id "aeJlIZ6p5oql0UklEBI_MQAAAAY"]
[Sat Apr 18 00:51:45.575623 2026] [:error] [pid 59042:tid 59050] [client 51.103.133.91:13034] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/6.php"] [unique_id "aeJlIZ6p5oql0UklEBI_MwAAAAM"]
[Sat Apr 18 00:51:46.075815 2026] [:error] [pid 59042:tid 59055] [client 51.103.133.91:13023] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/6.php"] [unique_id "aeJlIp6p5oql0UklEBI_NwAAAAg"]
[Sat Apr 18 00:51:46.545866 2026] [:error] [pid 42442:tid 42461] [client 51.103.133.91:14034] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/6.php"] [unique_id "aeJlIj4PBGqL_yqPJ8kWaAAAARE"]
[Sat Apr 18 00:51:47.047163 2026] [:error] [pid 59042:tid 59070] [client 51.103.133.91:39771] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/6.php"] [unique_id "aeJlI56p5oql0UklEBI_OgAAABc"]
[Sat Apr 18 00:51:47.548230 2026] [:error] [pid 42442:tid 42466] [client 51.103.133.91:14060] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/9.php"] [unique_id "aeJlIz4PBGqL_yqPJ8kWaQAAARY"]
[Sat Apr 18 00:51:48.023816 2026] [:error] [pid 59042:tid 59063] [client 51.103.133.91:13017] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/9.php"] [unique_id "aeJlJJ6p5oql0UklEBI_PAAAABA"]
[Sat Apr 18 00:51:48.523771 2026] [:error] [pid 42442:tid 42456] [client 51.103.133.91:13001] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/9.php"] [unique_id "aeJlJD4PBGqL_yqPJ8kWbQAAAQw"]
[Sat Apr 18 00:51:49.023929 2026] [:error] [pid 59042:tid 59053] [client 51.103.133.91:65493] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/9.php"] [unique_id "aeJlJZ6p5oql0UklEBI_PgAAAAY"]
[Sat Apr 18 00:51:49.493567 2026] [:error] [pid 59043:tid 59086] [client 51.103.133.91:34938] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/10.php"] [unique_id "aeJlJYRtUGE9SfUh2wwMOQAAAEw"]
[Sat Apr 18 00:51:49.993949 2026] [:error] [pid 59136:tid 59150] [client 51.103.133.91:34913] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/10.php"] [unique_id "aeJlJSaoiUyiIR3EhLWwvwAAAMs"]
[Sat Apr 18 00:51:50.495085 2026] [:error] [pid 42442:tid 42463] [client 51.103.133.91:34912] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/10.php"] [unique_id "aeJlJj4PBGqL_yqPJ8kWcAAAARM"]
[Sat Apr 18 00:51:50.966972 2026] [:error] [pid 59042:tid 59070] [client 51.103.133.91:65442] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/10.php"] [unique_id "aeJlJp6p5oql0UklEBI_QgAAABc"]
[Sat Apr 18 00:51:51.437080 2026] [:error] [pid 42442:tid 42445] [client 51.103.133.91:13010] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.mopj.php"] [unique_id "aeJlJz4PBGqL_yqPJ8kWcwAAAQE"]
[Sat Apr 18 00:51:51.906094 2026] [:error] [pid 42442:tid 42453] [client 51.103.133.91:13049] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.mopj.php"] [unique_id "aeJlJz4PBGqL_yqPJ8kWdAAAAQk"]
[Sat Apr 18 00:51:52.404907 2026] [:error] [pid 59136:tid 59157] [client 51.103.133.91:39802] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.mopj.php"] [unique_id "aeJlKCaoiUyiIR3EhLWwwQAAANI"]
[Sat Apr 18 00:51:52.943917 2026] [:error] [pid 59042:tid 59069] [client 51.103.133.91:39763] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.mopj.php"] [unique_id "aeJlKJ6p5oql0UklEBI_SAAAABY"]
[Sat Apr 18 00:51:53.445669 2026] [:error] [pid 59042:tid 59065] [client 51.103.133.91:14047] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/100.php"] [unique_id "aeJlKZ6p5oql0UklEBI_TAAAABI"]
[Sat Apr 18 00:51:54.129639 2026] [proxy_fcgi:error] [pid 59042:tid 59071] [client 51.103.133.91:34914] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 00:51:54.486223 2026] [proxy_fcgi:error] [pid 59042:tid 59059] [client 51.103.133.91:34914] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 00:51:54.843456 2026] [proxy_fcgi:error] [pid 59042:tid 59060] [client 51.103.133.91:34914] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 00:51:55.200990 2026] [proxy_fcgi:error] [pid 59042:tid 59057] [client 51.103.133.91:34914] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 00:51:55.558741 2026] [proxy_fcgi:error] [pid 59042:tid 59068] [client 51.103.133.91:34914] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 00:51:55.918764 2026] [proxy_fcgi:error] [pid 59042:tid 59061] [client 51.103.133.91:34914] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 00:51:56.274963 2026] [proxy_fcgi:error] [pid 59042:tid 59047] [client 51.103.133.91:34914] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 00:51:56.630455 2026] [proxy_fcgi:error] [pid 59042:tid 59065] [client 51.103.133.91:34914] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 00:51:58.183193 2026] [proxy_fcgi:error] [pid 59042:tid 59065] [client 51.103.133.91:34914] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 00:51:58.540074 2026] [proxy_fcgi:error] [pid 59042:tid 59047] [client 51.103.133.91:34914] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 00:51:58.896892 2026] [proxy_fcgi:error] [pid 59042:tid 59060] [client 51.103.133.91:34914] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 00:51:59.250059 2026] [:error] [pid 59042:tid 59058] [client 51.103.133.91:34914] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/no18.php"] [unique_id "aeJlL56p5oql0UklEBI_bQAAAAs"]
[Sat Apr 18 00:51:59.750614 2026] [:error] [pid 59042:tid 59067] [client 51.103.133.91:13041] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/no18.php"] [unique_id "aeJlL56p5oql0UklEBI_bwAAABQ"]
[Sat Apr 18 00:52:00.221613 2026] [:error] [pid 59043:tid 59096] [client 51.103.133.91:13042] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/no18.php"] [unique_id "aeJlMIRtUGE9SfUh2wwMPQAAAFY"]
[Sat Apr 18 00:52:00.721968 2026] [:error] [pid 42442:tid 42463] [client 51.103.133.91:39753] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/no18.php"] [unique_id "aeJlMD4PBGqL_yqPJ8kWiQAAARM"]
[Sat Apr 18 00:52:01.403657 2026] [:error] [pid 59042:tid 59049] [client 51.103.133.91:14041] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fine.php"] [unique_id "aeJlMZ6p5oql0UklEBI_ewAAAAI"]
[Sat Apr 18 00:52:01.904936 2026] [:error] [pid 59042:tid 59054] [client 51.103.133.91:65506] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fine.php"] [unique_id "aeJlMZ6p5oql0UklEBI_gQAAAAc"]
[Sat Apr 18 00:52:02.408964 2026] [:error] [pid 59042:tid 59064] [client 51.103.133.91:39805] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fine.php"] [unique_id "aeJlMp6p5oql0UklEBI_igAAABE"]
[Sat Apr 18 00:52:02.908399 2026] [:error] [pid 59042:tid 59056] [client 51.103.133.91:13054] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fine.php"] [unique_id "aeJlMp6p5oql0UklEBI_jQAAAAk"]
[Sat Apr 18 00:52:03.438189 2026] [:error] [pid 59044:tid 59106] [client 51.103.133.91:39755] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zample.php"] [unique_id "aeJlMwFamkFyEtD_SMG2MwAAAIU"]
[Sat Apr 18 00:52:03.940338 2026] [:error] [pid 59042:tid 59066] [client 51.103.133.91:34899] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zample.php"] [unique_id "aeJlM56p5oql0UklEBI_kwAAABM"]
[Sat Apr 18 00:52:04.440424 2026] [:error] [pid 42442:tid 42457] [client 51.103.133.91:65491] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zample.php"] [unique_id "aeJlND4PBGqL_yqPJ8kWnQAAAQ0"]
[Sat Apr 18 00:52:04.972046 2026] [:error] [pid 59044:tid 59120] [client 51.103.133.91:39760] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zample.php"] [unique_id "aeJlNAFamkFyEtD_SMG2NQAAAJM"]
[Sat Apr 18 00:52:05.502153 2026] [:error] [pid 59136:tid 59147] [client 51.103.133.91:13005] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hplfuns.php"] [unique_id "aeJlNSaoiUyiIR3EhLWwzwAAAMg"]
[Sat Apr 18 00:52:06.001858 2026] [:error] [pid 42442:tid 42447] [client 51.103.133.91:13032] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hplfuns.php"] [unique_id "aeJlNj4PBGqL_yqPJ8kWoAAAAQM"]
[Sat Apr 18 00:52:06.470445 2026] [:error] [pid 59136:tid 59146] [client 51.103.133.91:39801] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hplfuns.php"] [unique_id "aeJlNiaoiUyiIR3EhLWw0gAAAMc"]
[Sat Apr 18 00:52:07.116480 2026] [:error] [pid 42442:tid 42448] [client 51.103.133.91:13031] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hplfuns.php"] [unique_id "aeJlNz4PBGqL_yqPJ8kWpAAAAQQ"]
[Sat Apr 18 00:52:07.587280 2026] [:error] [pid 59044:tid 59105] [client 51.103.133.91:61039] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xa.php"] [unique_id "aeJlNwFamkFyEtD_SMG2OAAAAIQ"]
[Sat Apr 18 00:52:08.088661 2026] [:error] [pid 59042:tid 59071] [client 51.103.133.91:34917] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xa.php"] [unique_id "aeJlOJ6p5oql0UklEBI_pgAAABg"]
[Sat Apr 18 00:52:08.589321 2026] [:error] [pid 59042:tid 59062] [client 51.103.133.91:39788] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xa.php"] [unique_id "aeJlOJ6p5oql0UklEBI_qwAAAA8"]
[Sat Apr 18 00:52:09.089250 2026] [:error] [pid 59042:tid 59060] [client 51.103.133.91:14018] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xa.php"] [unique_id "aeJlOZ6p5oql0UklEBI_rgAAAA0"]
[Sat Apr 18 00:52:09.618663 2026] [:error] [pid 59044:tid 59102] [client 51.103.133.91:13029] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin.php"] [unique_id "aeJlOQFamkFyEtD_SMG2PAAAAIE"]
[Sat Apr 18 00:52:10.124394 2026] [:error] [pid 59136:tid 59159] [client 51.103.133.91:39777] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin.php"] [unique_id "aeJlOiaoiUyiIR3EhLWw1gAAANQ"]
[Sat Apr 18 00:52:10.605651 2026] [:error] [pid 42442:tid 42445] [client 51.103.133.91:14055] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin.php"] [unique_id "aeJlOj4PBGqL_yqPJ8kWpwAAAQE"]
[Sat Apr 18 00:52:11.076384 2026] [:error] [pid 59044:tid 59101] [client 51.103.133.91:65513] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin.php"] [unique_id "aeJlOwFamkFyEtD_SMG2PgAAAIA"]
[Sat Apr 18 00:52:11.546764 2026] [:error] [pid 42442:tid 42463] [client 51.103.133.91:65481] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/inege.php"] [unique_id "aeJlOz4PBGqL_yqPJ8kWqgAAARM"]
[Sat Apr 18 00:52:12.191625 2026] [:error] [pid 42442:tid 42447] [client 51.103.133.91:13018] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/inege.php"] [unique_id "aeJlPD4PBGqL_yqPJ8kWqwAAAQM"]
[Sat Apr 18 00:52:12.660956 2026] [:error] [pid 59136:tid 59157] [client 51.103.133.91:34941] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/inege.php"] [unique_id "aeJlPCaoiUyiIR3EhLWw1wAAANI"]
[Sat Apr 18 00:52:13.136022 2026] [:error] [pid 59042:tid 59055] [client 51.103.133.91:34921] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/inege.php"] [unique_id "aeJlPZ6p5oql0UklEBI_wwAAAAg"]
[Sat Apr 18 00:52:13.635266 2026] [:error] [pid 42442:tid 42466] [client 51.103.133.91:14025] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fe5.php"] [unique_id "aeJlPT4PBGqL_yqPJ8kWrQAAARY"]
[Sat Apr 18 00:52:14.168919 2026] [:error] [pid 59136:tid 59151] [client 51.103.133.91:13008] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fe5.php"] [unique_id "aeJlPiaoiUyiIR3EhLWw2QAAAMw"]
[Sat Apr 18 00:52:14.669282 2026] [:error] [pid 42442:tid 42451] [client 51.103.133.91:14024] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fe5.php"] [unique_id "aeJlPj4PBGqL_yqPJ8kWrwAAAQc"]
[Sat Apr 18 00:52:15.320438 2026] [:error] [pid 59042:tid 59055] [client 51.103.133.91:13022] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fe5.php"] [unique_id "aeJlP56p5oql0UklEBI_zAAAAAg"]
[Sat Apr 18 00:52:15.788859 2026] [:error] [pid 59042:tid 59054] [client 51.103.133.91:34892] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/uuu.php"] [unique_id "aeJlP56p5oql0UklEBI_zQAAAAc"]
[Sat Apr 18 00:52:16.287945 2026] [:error] [pid 59042:tid 59061] [client 51.103.133.91:34919] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/uuu.php"] [unique_id "aeJlQJ6p5oql0UklEBI_0AAAAA4"]
[Sat Apr 18 00:52:16.788162 2026] [:error] [pid 59044:tid 59110] [client 51.103.133.91:39745] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/uuu.php"] [unique_id "aeJlQAFamkFyEtD_SMG2QAAAAIk"]
[Sat Apr 18 00:52:17.289485 2026] [:error] [pid 42442:tid 42457] [client 51.103.133.91:34939] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/uuu.php"] [unique_id "aeJlQT4PBGqL_yqPJ8kWtQAAAQ0"]
[Sat Apr 18 00:52:17.789905 2026] [:error] [pid 59136:tid 59145] [client 51.103.133.91:13028] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sf.php"] [unique_id "aeJlQSaoiUyiIR3EhLWw3QAAAMY"]
[Sat Apr 18 00:52:18.259642 2026] [:error] [pid 42442:tid 42463] [client 51.103.133.91:34886] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sf.php"] [unique_id "aeJlQj4PBGqL_yqPJ8kWtwAAARM"]
[Sat Apr 18 00:52:18.729321 2026] [:error] [pid 59043:tid 59090] [client 51.103.133.91:39804] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sf.php"] [unique_id "aeJlQoRtUGE9SfUh2wwMRQAAAFA"]
[Sat Apr 18 00:52:19.230182 2026] [:error] [pid 59042:tid 59070] [client 51.103.133.91:34922] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sf.php"] [unique_id "aeJlQ56p5oql0UklEBI_1AAAABc"]
[Sat Apr 18 00:52:19.730874 2026] [:error] [pid 59042:tid 59054] [client 51.103.133.91:13046] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/no1.php"] [unique_id "aeJlQ56p5oql0UklEBI_1gAAAAc"]
[Sat Apr 18 00:52:20.379165 2026] [:error] [pid 59042:tid 59056] [client 51.103.133.91:14078] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/no1.php"] [unique_id "aeJlRJ6p5oql0UklEBI_2QAAAAk"]
[Sat Apr 18 00:52:21.024744 2026] [:error] [pid 42442:tid 42456] [client 51.103.133.91:13024] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/no1.php"] [unique_id "aeJlRT4PBGqL_yqPJ8kWugAAAQw"]
[Sat Apr 18 00:52:21.524232 2026] [:error] [pid 59136:tid 59155] [client 51.103.133.91:34904] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/no1.php"] [unique_id "aeJlRSaoiUyiIR3EhLWw4gAAANA"]
[Sat Apr 18 00:52:22.055866 2026] [:error] [pid 59044:tid 59107] [client 51.103.133.91:39766] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/w2025.php"] [unique_id "aeJlRgFamkFyEtD_SMG2RwAAAIY"]
[Sat Apr 18 00:52:22.585866 2026] [:error] [pid 42442:tid 42455] [client 51.103.133.91:65503] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/w2025.php"] [unique_id "aeJlRj4PBGqL_yqPJ8kWvgAAAQs"]
[Sat Apr 18 00:52:23.086328 2026] [:error] [pid 42442:tid 42463] [client 51.103.133.91:34880] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/w2025.php"] [unique_id "aeJlRz4PBGqL_yqPJ8kWwAAAARM"]
[Sat Apr 18 00:52:23.556150 2026] [:error] [pid 59044:tid 59101] [client 51.103.133.91:34935] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/w2025.php"] [unique_id "aeJlRwFamkFyEtD_SMG2SgAAAIA"]
[Sat Apr 18 00:52:24.026498 2026] [:error] [pid 42442:tid 42452] [client 51.103.133.91:34912] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fvvff.php"] [unique_id "aeJlSD4PBGqL_yqPJ8kWxAAAAQg"]
[Sat Apr 18 00:52:24.527016 2026] [:error] [pid 42442:tid 42448] [client 51.103.133.91:65515] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fvvff.php"] [unique_id "aeJlSD4PBGqL_yqPJ8kWxwAAAQQ"]
[Sat Apr 18 00:52:25.233120 2026] [:error] [pid 59044:tid 59120] [client 51.103.133.91:34887] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fvvff.php"] [unique_id "aeJlSQFamkFyEtD_SMG2TAAAAJM"]
[Sat Apr 18 00:52:25.911272 2026] [:error] [pid 59136:tid 59151] [client 51.103.133.91:65496] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fvvff.php"] [unique_id "aeJlSSaoiUyiIR3EhLWw6AAAAMw"]
[Sat Apr 18 00:52:26.380696 2026] [:error] [pid 42442:tid 42463] [client 51.103.133.91:34884] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a2.php"] [unique_id "aeJlSj4PBGqL_yqPJ8kW0gAAARM"]
[Sat Apr 18 00:52:26.851245 2026] [:error] [pid 42442:tid 42454] [client 51.103.133.91:65494] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a2.php"] [unique_id "aeJlSj4PBGqL_yqPJ8kW1QAAAQo"]
[Sat Apr 18 00:52:27.321565 2026] [:error] [pid 59136:tid 59155] [client 51.103.133.91:14027] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a2.php"] [unique_id "aeJlSyaoiUyiIR3EhLWw6wAAANA"]
[Sat Apr 18 00:52:27.969976 2026] [:error] [pid 59043:tid 59078] [client 51.103.133.91:13009] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a2.php"] [unique_id "aeJlS4RtUGE9SfUh2wwMTgAAAEQ"]
[Sat Apr 18 00:52:28.439085 2026] [:error] [pid 42442:tid 42445] [client 51.103.133.91:14073] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/edit.php"] [unique_id "aeJlTD4PBGqL_yqPJ8kW1wAAAQE"]
[Sat Apr 18 00:52:28.907520 2026] [:error] [pid 42442:tid 42452] [client 51.103.133.91:61024] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/edit.php"] [unique_id "aeJlTD4PBGqL_yqPJ8kW4gAAAQg"]
[Sat Apr 18 00:52:29.377450 2026] [:error] [pid 42442:tid 42451] [client 51.103.133.91:34931] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/edit.php"] [unique_id "aeJlTT4PBGqL_yqPJ8kW8AAAAQc"]
[Sat Apr 18 00:52:29.877427 2026] [:error] [pid 59042:tid 59061] [client 51.103.133.91:34933] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/edit.php"] [unique_id "aeJlTZ6p5oql0UklEBI_3wAAAA4"]
[Sat Apr 18 00:52:30.381323 2026] [:error] [pid 59043:tid 59085] [client 51.103.133.91:14051] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aeJlToRtUGE9SfUh2wwMTwAAAEs"]
[Sat Apr 18 00:52:30.851465 2026] [:error] [pid 42442:tid 42464] [client 51.103.133.91:39756] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aeJlTj4PBGqL_yqPJ8kW-AAAARQ"]
[Sat Apr 18 00:52:31.320011 2026] [:error] [pid 59136:tid 59153] [client 51.103.133.91:65427] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aeJlTyaoiUyiIR3EhLWw8AAAAM4"]
[Sat Apr 18 00:52:31.789916 2026] [:error] [pid 59042:tid 59047] [client 51.103.133.91:39796] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aeJlT56p5oql0UklEBI_5AAAAAA"]
[Sat Apr 18 00:52:32.468282 2026] [:error] [pid 59043:tid 59086] [client 51.103.133.91:14068] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeJlUIRtUGE9SfUh2wwMUAAAAEw"]
[Sat Apr 18 00:52:32.971785 2026] [:error] [pid 59042:tid 59070] [client 51.103.133.91:14069] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeJlUJ6p5oql0UklEBI_6AAAABc"]
[Sat Apr 18 00:52:33.471675 2026] [:error] [pid 59043:tid 59076] [client 51.103.133.91:34896] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeJlUYRtUGE9SfUh2wwMUwAAAEI"]
[Sat Apr 18 00:52:33.970525 2026] [:error] [pid 59136:tid 59140] [client 51.103.133.91:61002] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeJlUSaoiUyiIR3EhLWw8gAAAME"]
[Sat Apr 18 00:52:34.445263 2026] [:error] [pid 59136:tid 59158] [client 51.103.133.91:65486] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/66.php"] [unique_id "aeJlUiaoiUyiIR3EhLWw8wAAANM"]
[Sat Apr 18 00:52:34.915770 2026] [:error] [pid 59044:tid 59101] [client 51.103.133.91:65485] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/66.php"] [unique_id "aeJlUgFamkFyEtD_SMG2UwAAAIA"]
[Sat Apr 18 00:52:35.564029 2026] [:error] [pid 59044:tid 59111] [client 51.103.133.91:39783] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/66.php"] [unique_id "aeJlUwFamkFyEtD_SMG2VgAAAIo"]
[Sat Apr 18 00:52:36.033750 2026] [:error] [pid 59044:tid 59104] [client 51.103.133.91:39784] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/66.php"] [unique_id "aeJlVAFamkFyEtD_SMG2WAAAAIM"]
[Sat Apr 18 00:52:36.505605 2026] [:error] [pid 59136:tid 59148] [client 51.103.133.91:39780] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a5.php"] [unique_id "aeJlVCaoiUyiIR3EhLWw9gAAAMk"]
[Sat Apr 18 00:52:36.974821 2026] [:error] [pid 59044:tid 59119] [client 51.103.133.91:65487] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a5.php"] [unique_id "aeJlVAFamkFyEtD_SMG2WgAAAJI"]
[Sat Apr 18 00:52:37.474719 2026] [:error] [pid 59044:tid 59105] [client 51.103.133.91:61000] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a5.php"] [unique_id "aeJlVQFamkFyEtD_SMG2XQAAAIQ"]
[Sat Apr 18 00:52:38.015110 2026] [:error] [pid 59136:tid 59152] [client 51.103.133.91:13019] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a5.php"] [unique_id "aeJlViaoiUyiIR3EhLWw9wAAAM0"]
[Sat Apr 18 00:52:38.513940 2026] [:error] [pid 42442:tid 42446] [client 51.103.133.91:13050] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ol.php"] [unique_id "aeJlVj4PBGqL_yqPJ8kXDAAAAQI"]
[Sat Apr 18 00:52:38.984174 2026] [:error] [pid 42442:tid 42448] [client 51.103.133.91:61022] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ol.php"] [unique_id "aeJlVj4PBGqL_yqPJ8kXDwAAAQQ"]
[Sat Apr 18 00:52:39.490032 2026] [:error] [pid 59042:tid 59064] [client 51.103.133.91:65507] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ol.php"] [unique_id "aeJlV56p5oql0UklEBI_7wAAABE"]
[Sat Apr 18 00:52:39.990222 2026] [:error] [pid 59042:tid 59068] [client 51.103.133.91:34936] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ol.php"] [unique_id "aeJlV56p5oql0UklEBI_8AAAABU"]
[Sat Apr 18 00:52:40.491172 2026] [:error] [pid 59044:tid 59117] [client 51.103.133.91:34895] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f6.php"] [unique_id "aeJlWAFamkFyEtD_SMG2XwAAAJA"]
[Sat Apr 18 00:52:41.020317 2026] [:error] [pid 59044:tid 59115] [client 51.103.133.91:14059] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f6.php"] [unique_id "aeJlWQFamkFyEtD_SMG2YAAAAI4"]
[Sat Apr 18 00:52:41.522441 2026] [:error] [pid 59042:tid 59055] [client 51.103.133.91:39768] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f6.php"] [unique_id "aeJlWZ6p5oql0UklEBI_-AAAAAg"]
[Sat Apr 18 00:52:42.169948 2026] [:error] [pid 59042:tid 59071] [client 51.103.133.91:65489] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f6.php"] [unique_id "aeJlWp6p5oql0UklEBI__AAAABg"]
[Sat Apr 18 00:52:42.656744 2026] [:error] [pid 59042:tid 59051] [client 51.103.133.91:65486] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/inputs.php"] [unique_id "aeJlWp6p5oql0UklEBI__wAAAAQ"]
[Sat Apr 18 00:52:43.128111 2026] [:error] [pid 59042:tid 59064] [client 51.103.133.91:34926] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/inputs.php"] [unique_id "aeJlW56p5oql0UklEBJAAwAAABE"]
[Sat Apr 18 00:52:43.636340 2026] [:error] [pid 42442:tid 42452] [client 51.103.133.91:61020] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/inputs.php"] [unique_id "aeJlWz4PBGqL_yqPJ8kXGwAAAQg"]
[Sat Apr 18 00:52:44.166950 2026] [:error] [pid 42442:tid 42444] [client 51.103.133.91:65484] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/inputs.php"] [unique_id "aeJlXD4PBGqL_yqPJ8kXHgAAAQA"]
[Sat Apr 18 00:52:44.696826 2026] [:error] [pid 42442:tid 42459] [client 51.103.133.91:60996] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/style.php"] [unique_id "aeJlXD4PBGqL_yqPJ8kXJQAAAQ8"]
[Sat Apr 18 00:52:45.228296 2026] [:error] [pid 59042:tid 59065] [client 51.103.133.91:14076] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/style.php"] [unique_id "aeJlXZ6p5oql0UklEBJAFwAAABI"]
[Sat Apr 18 00:52:45.757989 2026] [:error] [pid 59136:tid 59155] [client 51.103.133.91:65492] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/style.php"] [unique_id "aeJlXSaoiUyiIR3EhLWxAQAAANA"]
[Sat Apr 18 00:52:46.264894 2026] [:error] [pid 59044:tid 59111] [client 51.103.133.91:14050] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/style.php"] [unique_id "aeJlXgFamkFyEtD_SMG2ZQAAAIo"]
[Sat Apr 18 00:52:46.764501 2026] [:error] [pid 59042:tid 59069] [client 51.103.133.91:39794] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aa.php"] [unique_id "aeJlXp6p5oql0UklEBJAMAAAABY"]
[Sat Apr 18 00:52:47.297134 2026] [:error] [pid 59044:tid 59121] [client 51.103.133.91:65514] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aa.php"] [unique_id "aeJlXwFamkFyEtD_SMG2ZwAAAJQ"]
[Sat Apr 18 00:52:47.796472 2026] [:error] [pid 59042:tid 59059] [client 51.103.133.91:60998] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aa.php"] [unique_id "aeJlX56p5oql0UklEBJARAAAAAw"]
[Sat Apr 18 00:52:48.267605 2026] [:error] [pid 59042:tid 59047] [client 51.103.133.91:14039] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aa.php"] [unique_id "aeJlYJ6p5oql0UklEBJATAAAAAA"]
[Sat Apr 18 00:52:48.736158 2026] [:error] [pid 59042:tid 59065] [client 51.103.133.91:34934] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/av.php"] [unique_id "aeJlYJ6p5oql0UklEBJAVwAAABI"]
[Sat Apr 18 00:52:49.205776 2026] [:error] [pid 59043:tid 59081] [client 51.103.133.91:65472] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/av.php"] [unique_id "aeJlYYRtUGE9SfUh2wwMVQAAAEc"]
[Sat Apr 18 00:52:49.677992 2026] [:error] [pid 59042:tid 59050] [client 51.103.133.91:65504] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/av.php"] [unique_id "aeJlYZ6p5oql0UklEBJAaAAAAAM"]
[Sat Apr 18 00:52:50.178642 2026] [:error] [pid 59042:tid 59063] [client 51.103.133.91:13021] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/av.php"] [unique_id "aeJlYp6p5oql0UklEBJAbAAAABA"]
[Sat Apr 18 00:52:50.678286 2026] [:error] [pid 59042:tid 59053] [client 51.103.133.91:61002] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeJlYp6p5oql0UklEBJAcAAAAAY"]
[Sat Apr 18 00:52:51.148162 2026] [:error] [pid 59042:tid 59049] [client 51.103.133.91:34897] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeJlY56p5oql0UklEBJAcwAAAAI"]
[Sat Apr 18 00:52:51.648737 2026] [:error] [pid 59042:tid 59069] [client 51.103.133.91:13008] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeJlY56p5oql0UklEBJAdgAAABY"]
[Sat Apr 18 00:52:52.182123 2026] [:error] [pid 59044:tid 59123] [client 51.103.133.91:60992] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeJlZAFamkFyEtD_SMG2awAAAJY"]
[Sat Apr 18 00:52:52.712279 2026] [:error] [pid 59136:tid 59149] [client 51.103.133.91:39786] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bless4.php"] [unique_id "aeJlZCaoiUyiIR3EhLWxCwAAAMo"]
[Sat Apr 18 00:52:53.214137 2026] [:error] [pid 42442:tid 42463] [client 51.103.133.91:34885] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bless4.php"] [unique_id "aeJlZT4PBGqL_yqPJ8kXewAAARM"]
[Sat Apr 18 00:52:53.862515 2026] [:error] [pid 59044:tid 59117] [client 51.103.133.91:65478] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bless4.php"] [unique_id "aeJlZQFamkFyEtD_SMG2bgAAAJA"]
[Sat Apr 18 00:52:54.333249 2026] [:error] [pid 59042:tid 59047] [client 51.103.133.91:34906] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bless4.php"] [unique_id "aeJlZp6p5oql0UklEBJAfgAAAAA"]
[Sat Apr 18 00:52:54.980765 2026] [:error] [pid 59042:tid 59054] [client 51.103.133.91:65512] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-act.php"] [unique_id "aeJlZp6p5oql0UklEBJAfwAAAAc"]
[Sat Apr 18 00:52:55.453652 2026] [:error] [pid 59043:tid 59084] [client 51.103.133.91:14045] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-act.php"] [unique_id "aeJlZ4RtUGE9SfUh2wwMWgAAAEo"]
[Sat Apr 18 00:52:55.952826 2026] [:error] [pid 59136:tid 59162] [client 51.103.133.91:39754] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-act.php"] [unique_id "aeJlZyaoiUyiIR3EhLWxEQAAANc"]
[Sat Apr 18 00:52:56.451420 2026] [:error] [pid 59042:tid 59064] [client 51.103.133.91:61017] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-act.php"] [unique_id "aeJlaJ6p5oql0UklEBJAggAAABE"]
[Sat Apr 18 00:52:57.098964 2026] [:error] [pid 59043:tid 59097] [client 51.103.133.91:65433] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xqq.php"] [unique_id "aeJlaYRtUGE9SfUh2wwMXAAAAFc"]
[Sat Apr 18 00:52:57.571708 2026] [:error] [pid 59043:tid 59088] [client 51.103.133.91:61005] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xqq.php"] [unique_id "aeJlaYRtUGE9SfUh2wwMXgAAAE4"]
[Sat Apr 18 00:52:58.257443 2026] [proxy_fcgi:error] [pid 59042:tid 59049] [client 51.103.133.91:34943] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 00:52:58.612688 2026] [proxy_fcgi:error] [pid 59042:tid 59068] [client 51.103.133.91:34943] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 00:52:58.969522 2026] [proxy_fcgi:error] [pid 59042:tid 59070] [client 51.103.133.91:34943] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 00:52:59.327404 2026] [proxy_fcgi:error] [pid 59042:tid 59048] [client 51.103.133.91:34943] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 00:53:00.044943 2026] [proxy_fcgi:error] [pid 59042:tid 59064] [client 51.103.133.91:34943] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 00:53:00.401182 2026] [proxy_fcgi:error] [pid 59042:tid 59067] [client 51.103.133.91:34943] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 00:53:00.757303 2026] [proxy_fcgi:error] [pid 59042:tid 59071] [client 51.103.133.91:34943] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 00:53:01.113103 2026] [proxy_fcgi:error] [pid 59042:tid 59063] [client 51.103.133.91:34943] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 00:53:02.177388 2026] [:error] [pid 59042:tid 59051] [client 51.103.133.91:34943] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ms-edit.php"] [unique_id "aeJlbp6p5oql0UklEBJAlgAAAAQ"]
[Sat Apr 18 00:53:02.676643 2026] [:error] [pid 59043:tid 59088] [client 51.103.133.91:65474] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ms-edit.php"] [unique_id "aeJlboRtUGE9SfUh2wwMbgAAAE4"]
[Sat Apr 18 00:53:03.322450 2026] [:error] [pid 59043:tid 59090] [client 51.103.133.91:34882] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ms-edit.php"] [unique_id "aeJlb4RtUGE9SfUh2wwMcAAAAFA"]
[Sat Apr 18 00:53:03.830983 2026] [:error] [pid 42442:tid 42447] [client 51.103.133.91:65520] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ms-edit.php"] [unique_id "aeJlbz4PBGqL_yqPJ8kXhQAAAQM"]
[Sat Apr 18 00:53:04.332904 2026] [:error] [pid 59042:tid 59047] [client 51.103.133.91:34928] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/adminfuns.php"] [unique_id "aeJlcJ6p5oql0UklEBJAmAAAAAA"]
[Sat Apr 18 00:53:04.832701 2026] [:error] [pid 59044:tid 59107] [client 51.103.133.91:14016] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/adminfuns.php"] [unique_id "aeJlcAFamkFyEtD_SMG2dgAAAIY"]
[Sat Apr 18 00:53:05.332244 2026] [:error] [pid 59136:tid 59145] [client 51.103.133.91:65477] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/adminfuns.php"] [unique_id "aeJlcSaoiUyiIR3EhLWxGwAAAMY"]
[Sat Apr 18 00:53:05.801877 2026] [:error] [pid 59042:tid 59064] [client 51.103.133.91:39792] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/adminfuns.php"] [unique_id "aeJlcZ6p5oql0UklEBJAmwAAABE"]
[Sat Apr 18 00:53:06.303729 2026] [:error] [pid 59136:tid 59155] [client 51.103.133.91:61030] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/goods.php"] [unique_id "aeJlciaoiUyiIR3EhLWxIAAAANA"]
[Sat Apr 18 00:53:06.980154 2026] [:error] [pid 42442:tid 42454] [client 51.103.133.91:61013] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/goods.php"] [unique_id "aeJlcj4PBGqL_yqPJ8kXigAAAQo"]
[Sat Apr 18 00:53:07.481003 2026] [:error] [pid 59044:tid 59109] [client 51.103.133.91:39781] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/goods.php"] [unique_id "aeJlcwFamkFyEtD_SMG2eQAAAIg"]
[Sat Apr 18 00:53:07.981083 2026] [:error] [pid 59044:tid 59102] [client 51.103.133.91:61034] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/goods.php"] [unique_id "aeJlcwFamkFyEtD_SMG2ewAAAIE"]
[Sat Apr 18 00:53:08.453840 2026] [:error] [pid 59136:tid 59141] [client 51.103.133.91:65480] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ms-edit.php"] [unique_id "aeJldCaoiUyiIR3EhLWxJwAAAMI"]
[Sat Apr 18 00:53:08.954274 2026] [:error] [pid 59042:tid 59071] [client 51.103.133.91:61015] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ms-edit.php"] [unique_id "aeJldJ6p5oql0UklEBJAnAAAABg"]
[Sat Apr 18 00:53:09.453589 2026] [:error] [pid 59136:tid 59161] [client 51.103.133.91:34916] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ms-edit.php"] [unique_id "aeJldSaoiUyiIR3EhLWxKgAAANY"]
[Sat Apr 18 00:53:09.924902 2026] [:error] [pid 59042:tid 59056] [client 51.103.133.91:13027] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ms-edit.php"] [unique_id "aeJldZ6p5oql0UklEBJAoQAAAAk"]
[Sat Apr 18 00:53:10.395359 2026] [:error] [pid 59043:tid 59077] [client 51.103.133.91:65521] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/222.php"] [unique_id "aeJldoRtUGE9SfUh2wwMewAAAEM"]
[Sat Apr 18 00:53:10.895024 2026] [:error] [pid 42442:tid 42468] [client 51.103.133.91:65430] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/222.php"] [unique_id "aeJldj4PBGqL_yqPJ8kXlgAAARg"]
[Sat Apr 18 00:53:11.395408 2026] [:error] [pid 59136:tid 59159] [client 51.103.133.91:14030] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/222.php"] [unique_id "aeJldyaoiUyiIR3EhLWxLAAAANQ"]
[Sat Apr 18 00:53:12.043932 2026] [:error] [pid 42442:tid 42453] [client 51.103.133.91:65431] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/222.php"] [unique_id "aeJleD4PBGqL_yqPJ8kXmwAAAQk"]
[Sat Apr 18 00:53:12.546294 2026] [:error] [pid 59136:tid 59157] [client 51.103.133.91:39782] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aeJleCaoiUyiIR3EhLWxLQAAANI"]
[Sat Apr 18 00:53:13.077644 2026] [:error] [pid 59136:tid 59153] [client 51.103.133.91:34905] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aeJleSaoiUyiIR3EhLWxLwAAAM4"]
[Sat Apr 18 00:53:13.577711 2026] [:error] [pid 59043:tid 59090] [client 51.103.133.91:14057] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aeJleYRtUGE9SfUh2wwMgQAAAFA"]
[Sat Apr 18 00:53:14.077528 2026] [:error] [pid 42442:tid 42451] [client 51.103.133.91:14021] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aeJlej4PBGqL_yqPJ8kXogAAAQc"]
[Sat Apr 18 00:53:14.782210 2026] [:error] [pid 59042:tid 59058] [client 51.103.133.91:39799] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fff.php"] [unique_id "aeJlep6p5oql0UklEBJApwAAAAs"]
[Sat Apr 18 00:53:15.311197 2026] [:error] [pid 59042:tid 59056] [client 51.103.133.91:34898] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fff.php"] [unique_id "aeJle56p5oql0UklEBJAqwAAAAk"]
[Sat Apr 18 00:53:15.841126 2026] [:error] [pid 59042:tid 59061] [client 51.103.133.91:34891] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fff.php"] [unique_id "aeJle56p5oql0UklEBJArgAAAA4"]
[Sat Apr 18 00:53:16.340973 2026] [:error] [pid 59044:tid 59107] [client 51.103.133.91:34909] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fff.php"] [unique_id "aeJlfAFamkFyEtD_SMG2gwAAAIY"]
[Sat Apr 18 00:53:16.809278 2026] [:error] [pid 59042:tid 59057] [client 51.103.133.91:34910] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/"] [unique_id "aeJlfJ6p5oql0UklEBJAsAAAAAo"]
[Sat Apr 18 00:53:17.310072 2026] [:error] [pid 59044:tid 59112] [client 51.103.133.91:65482] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/"] [unique_id "aeJlfQFamkFyEtD_SMG2hQAAAIs"]
[Sat Apr 18 00:53:17.811637 2026] [:error] [pid 59042:tid 59048] [client 51.103.133.91:61026] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/"] [unique_id "aeJlfZ6p5oql0UklEBJAtQAAAAE"]
[Sat Apr 18 00:53:18.315462 2026] [:error] [pid 59044:tid 59108] [client 51.103.133.91:34903] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/"] [unique_id "aeJlfgFamkFyEtD_SMG2hgAAAIc"]
[Sat Apr 18 00:53:18.847920 2026] [:error] [pid 42442:tid 42456] [client 51.103.133.91:61050] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/we.php"] [unique_id "aeJlfj4PBGqL_yqPJ8kXpQAAAQw"]
[Sat Apr 18 00:53:19.360316 2026] [:error] [pid 59044:tid 59124] [client 51.103.133.91:65423] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/we.php"] [unique_id "aeJlfwFamkFyEtD_SMG2iAAAAJc"]
[Sat Apr 18 00:53:19.859483 2026] [:error] [pid 59042:tid 59059] [client 51.103.133.91:34937] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/we.php"] [unique_id "aeJlf56p5oql0UklEBJAugAAAAw"]
[Sat Apr 18 00:53:20.360568 2026] [:error] [pid 59042:tid 59061] [client 51.103.133.91:34881] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/we.php"] [unique_id "aeJlgJ6p5oql0UklEBJAvAAAAA4"]
[Sat Apr 18 00:53:20.863821 2026] [:error] [pid 59042:tid 59049] [client 51.103.133.91:34911] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/alpha.php"] [unique_id "aeJlgJ6p5oql0UklEBJAvQAAAAI"]
[Sat Apr 18 00:53:21.400152 2026] [:error] [pid 59042:tid 59048] [client 51.103.133.91:39744] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/alpha.php"] [unique_id "aeJlgZ6p5oql0UklEBJAwgAAAAE"]
[Sat Apr 18 00:53:21.901369 2026] [:error] [pid 42442:tid 42448] [client 51.103.133.91:34888] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/alpha.php"] [unique_id "aeJlgT4PBGqL_yqPJ8kXpwAAAQQ"]
[Sat Apr 18 00:53:22.373103 2026] [:error] [pid 59044:tid 59116] [client 51.103.133.91:13014] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/alpha.php"] [unique_id "aeJlggFamkFyEtD_SMG2jQAAAI8"]
[Sat Apr 18 00:53:22.873715 2026] [:error] [pid 59044:tid 59119] [client 51.103.133.91:65499] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/makeasmtp.php"] [unique_id "aeJlggFamkFyEtD_SMG2jgAAAJI"]
[Sat Apr 18 00:53:23.373614 2026] [:error] [pid 42442:tid 42446] [client 51.103.133.91:14020] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/makeasmtp.php"] [unique_id "aeJlgz4PBGqL_yqPJ8kXqgAAAQI"]
[Sat Apr 18 00:53:23.845677 2026] [:error] [pid 42442:tid 42453] [client 51.103.133.91:34890] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/makeasmtp.php"] [unique_id "aeJlgz4PBGqL_yqPJ8kXrQAAAQk"]
[Sat Apr 18 00:53:24.317324 2026] [:error] [pid 42442:tid 42449] [client 51.103.133.91:65519] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/makeasmtp.php"] [unique_id "aeJlhD4PBGqL_yqPJ8kXrwAAAQU"]
[Sat Apr 18 00:53:24.816019 2026] [:error] [pid 42442:tid 42467] [client 51.103.133.91:65366] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-michan.php"] [unique_id "aeJlhD4PBGqL_yqPJ8kXtAAAARc"]
[Sat Apr 18 00:53:25.315733 2026] [:error] [pid 59042:tid 59051] [client 51.103.133.91:14023] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-michan.php"] [unique_id "aeJlhZ6p5oql0UklEBJAxwAAAAQ"]
[Sat Apr 18 00:53:25.814281 2026] [:error] [pid 59043:tid 59091] [client 51.103.133.91:61001] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-michan.php"] [unique_id "aeJlhYRtUGE9SfUh2wwMjwAAAFE"]
[Sat Apr 18 00:53:26.313107 2026] [:error] [pid 59044:tid 59102] [client 51.103.133.91:34923] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-michan.php"] [unique_id "aeJlhgFamkFyEtD_SMG2lwAAAIE"]
[Sat Apr 18 00:53:26.824227 2026] [:error] [pid 59042:tid 59071] [client 51.103.133.91:61036] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-the.php"] [unique_id "aeJlhp6p5oql0UklEBJA1QAAABg"]
[Sat Apr 18 00:53:27.357997 2026] [:error] [pid 59042:tid 59053] [client 51.103.133.91:14075] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-the.php"] [unique_id "aeJlh56p5oql0UklEBJA1wAAAAY"]
[Sat Apr 18 00:53:27.888051 2026] [:error] [pid 59044:tid 59120] [client 51.103.133.91:65163] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-the.php"] [unique_id "aeJlhwFamkFyEtD_SMG2mgAAAJM"]
[Sat Apr 18 00:53:28.386950 2026] [:error] [pid 59044:tid 59110] [client 51.103.133.91:39756] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-the.php"] [unique_id "aeJliAFamkFyEtD_SMG2nAAAAIk"]
[Sat Apr 18 00:53:28.888015 2026] [:error] [pid 59044:tid 59115] [client 51.103.133.91:13000] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aeJliAFamkFyEtD_SMG2ngAAAI4"]
[Sat Apr 18 00:53:29.424572 2026] [:error] [pid 59044:tid 59114] [client 51.103.133.91:39806] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aeJliQFamkFyEtD_SMG2ogAAAI0"]
[Sat Apr 18 00:53:29.925389 2026] [:error] [pid 59043:tid 59089] [client 51.103.133.91:61011] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aeJliYRtUGE9SfUh2wwMlAAAAE8"]
[Sat Apr 18 00:53:30.396019 2026] [:error] [pid 59136:tid 59157] [client 51.103.133.91:61021] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aeJliiaoiUyiIR3EhLWxNQAAANI"]
[Sat Apr 18 00:53:30.865675 2026] [:error] [pid 59042:tid 59059] [client 51.103.133.91:65425] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/BDKR28WP.php"] [unique_id "aeJlip6p5oql0UklEBJA2gAAAAw"]
[Sat Apr 18 00:53:31.336472 2026] [:error] [pid 59136:tid 59163] [client 51.103.133.91:14074] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/BDKR28WP.php"] [unique_id "aeJliyaoiUyiIR3EhLWxNgAAANg"]
[Sat Apr 18 00:53:31.835599 2026] [:error] [pid 59136:tid 59150] [client 51.103.133.91:61003] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/BDKR28WP.php"] [unique_id "aeJliyaoiUyiIR3EhLWxOAAAAMs"]
[Sat Apr 18 00:53:32.337918 2026] [:error] [pid 59042:tid 59050] [client 51.103.133.91:65428] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/BDKR28WP.php"] [unique_id "aeJljJ6p5oql0UklEBJA4QAAAAM"]
[Sat Apr 18 00:53:32.807454 2026] [:error] [pid 59044:tid 59112] [client 51.103.133.91:61023] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aeJljAFamkFyEtD_SMG2sAAAAIs"]
[Sat Apr 18 00:53:33.309188 2026] [:error] [pid 59042:tid 59059] [client 51.103.133.91:65468] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aeJljZ6p5oql0UklEBJA5QAAAAw"]
[Sat Apr 18 00:53:33.809575 2026] [:error] [pid 42442:tid 42445] [client 51.103.133.91:65429] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aeJljT4PBGqL_yqPJ8kXvAAAAQE"]
[Sat Apr 18 00:53:34.278964 2026] [:error] [pid 59136:tid 59161] [client 51.103.133.91:34940] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aeJljiaoiUyiIR3EhLWxPAAAANY"]
[Sat Apr 18 00:53:34.849528 2026] [:error] [pid 59042:tid 59061] [client 51.103.133.91:65164] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wen.php"] [unique_id "aeJljp6p5oql0UklEBJA7AAAAA4"]
[Sat Apr 18 00:53:35.351905 2026] [:error] [pid 59136:tid 59149] [client 51.103.133.91:39785] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wen.php"] [unique_id "aeJljyaoiUyiIR3EhLWxQAAAAMo"]
[Sat Apr 18 00:53:35.823076 2026] [:error] [pid 59043:tid 59076] [client 51.103.133.91:65413] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wen.php"] [unique_id "aeJlj4RtUGE9SfUh2wwMlgAAAEI"]
[Sat Apr 18 00:53:36.324744 2026] [:error] [pid 42442:tid 42455] [client 51.103.133.91:39797] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wen.php"] [unique_id "aeJlkD4PBGqL_yqPJ8kXwgAAAQs"]
[Sat Apr 18 00:53:36.824400 2026] [:error] [pid 42442:tid 42451] [client 51.103.133.91:34918] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp.php"] [unique_id "aeJlkD4PBGqL_yqPJ8kXwwAAAQc"]
[Sat Apr 18 00:53:37.293333 2026] [:error] [pid 59136:tid 59140] [client 51.103.133.91:14065] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp.php"] [unique_id "aeJlkSaoiUyiIR3EhLWxRAAAAME"]
[Sat Apr 18 00:53:37.763726 2026] [:error] [pid 59044:tid 59120] [client 51.103.133.91:39791] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp.php"] [unique_id "aeJlkQFamkFyEtD_SMG2uQAAAJM"]
[Sat Apr 18 00:53:38.240051 2026] [:error] [pid 59042:tid 59059] [client 51.103.133.91:39750] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp.php"] [unique_id "aeJlkp6p5oql0UklEBJA8AAAAAw"]
[Sat Apr 18 00:53:38.710637 2026] [:error] [pid 59042:tid 59047] [client 51.103.133.91:14066] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aeJlkp6p5oql0UklEBJA8wAAAAA"]
[Sat Apr 18 00:53:39.180416 2026] [:error] [pid 59136:tid 59163] [client 51.103.133.91:65526] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aeJlkyaoiUyiIR3EhLWxRwAAANg"]
[Sat Apr 18 00:53:39.651122 2026] [:error] [pid 59044:tid 59104] [client 51.103.133.91:60994] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aeJlkwFamkFyEtD_SMG2vAAAAIM"]
[Sat Apr 18 00:53:40.121747 2026] [:error] [pid 59044:tid 59114] [client 51.103.133.91:39800] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aeJllAFamkFyEtD_SMG2vQAAAI0"]
[Sat Apr 18 00:53:40.593340 2026] [:error] [pid 59042:tid 59053] [client 51.103.133.91:65445] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fe5.php"] [unique_id "aeJllJ6p5oql0UklEBJA9gAAAAY"]
[Sat Apr 18 00:53:41.096137 2026] [:error] [pid 59043:tid 59077] [client 51.103.133.91:61032] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fe5.php"] [unique_id "aeJllYRtUGE9SfUh2wwMlwAAAEM"]
[Sat Apr 18 00:53:41.635666 2026] [:error] [pid 59136:tid 59156] [client 51.103.133.91:34915] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fe5.php"] [unique_id "aeJllSaoiUyiIR3EhLWxSwAAANE"]
[Sat Apr 18 00:53:42.135708 2026] [:error] [pid 59042:tid 59064] [client 51.103.133.91:65479] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fe5.php"] [unique_id "aeJllp6p5oql0UklEBJA-QAAABE"]
[Sat Apr 18 00:53:42.637852 2026] [:error] [pid 59044:tid 59118] [client 51.103.133.91:61049] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aeJllgFamkFyEtD_SMG2wAAAAJE"]
[Sat Apr 18 00:53:43.171052 2026] [:error] [pid 59044:tid 59124] [client 51.103.133.91:14017] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aeJllwFamkFyEtD_SMG2wwAAAJc"]
[Sat Apr 18 00:53:43.672210 2026] [:error] [pid 42442:tid 42458] [client 51.103.133.91:65409] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aeJllz4PBGqL_yqPJ8kX0wAAAQ4"]
[Sat Apr 18 00:53:44.141614 2026] [:error] [pid 59042:tid 59060] [client 51.103.133.91:39747] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aeJlmJ6p5oql0UklEBJA-wAAAA0"]
[Sat Apr 18 00:53:44.611343 2026] [:error] [pid 59044:tid 59109] [client 51.103.133.91:65497] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/av.php"] [unique_id "aeJlmAFamkFyEtD_SMG2xQAAAIg"]
[Sat Apr 18 00:53:45.083650 2026] [:error] [pid 42442:tid 42449] [client 51.103.133.91:65459] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/av.php"] [unique_id "aeJlmT4PBGqL_yqPJ8kX1wAAAQU"]
[Sat Apr 18 00:53:45.555018 2026] [:error] [pid 59044:tid 59111] [client 51.103.133.91:65523] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/av.php"] [unique_id "aeJlmQFamkFyEtD_SMG2ywAAAIo"]
[Sat Apr 18 00:53:46.026017 2026] [:error] [pid 59042:tid 59062] [client 51.103.133.91:65385] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/av.php"] [unique_id "aeJlmp6p5oql0UklEBJA_gAAAA8"]
[Sat Apr 18 00:53:46.526117 2026] [:error] [pid 59136:tid 59153] [client 51.103.133.91:65525] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/abcd.php"] [unique_id "aeJlmiaoiUyiIR3EhLWxUgAAAM4"]
[Sat Apr 18 00:53:47.025364 2026] [:error] [pid 42442:tid 42467] [client 51.103.133.91:34932] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/abcd.php"] [unique_id "aeJlmz4PBGqL_yqPJ8kX2wAAARc"]
[Sat Apr 18 00:53:47.496309 2026] [:error] [pid 42442:tid 42446] [client 51.103.133.91:65392] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/abcd.php"] [unique_id "aeJlmz4PBGqL_yqPJ8kX3QAAAQI"]
[Sat Apr 18 00:53:47.997175 2026] [:error] [pid 59043:tid 59090] [client 51.103.133.91:61042] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/abcd.php"] [unique_id "aeJlm4RtUGE9SfUh2wwMnwAAAFA"]
[Sat Apr 18 00:53:48.606637 2026] [:error] [pid 42442:tid 42464] [client 51.103.133.91:61007] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fi.php"] [unique_id "aeJlnD4PBGqL_yqPJ8kX3wAAARQ"]
[Sat Apr 18 00:53:49.136526 2026] [:error] [pid 59044:tid 59103] [client 51.103.133.91:65467] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fi.php"] [unique_id "aeJlnQFamkFyEtD_SMG20AAAAII"]
[Sat Apr 18 00:53:49.672416 2026] [:error] [pid 59042:tid 59071] [client 51.103.133.91:65491] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fi.php"] [unique_id "aeJlnZ6p5oql0UklEBJBAQAAABg"]
[Sat Apr 18 00:53:50.203179 2026] [:error] [pid 42442:tid 42449] [client 51.103.133.91:65527] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fi.php"] [unique_id "aeJlnj4PBGqL_yqPJ8kX4QAAAQU"]
[Sat Apr 18 00:53:50.733972 2026] [:error] [pid 42442:tid 42465] [client 51.103.133.91:65443] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a1.php"] [unique_id "aeJlnj4PBGqL_yqPJ8kX4gAAARU"]
[Sat Apr 18 00:53:51.239809 2026] [:error] [pid 59043:tid 59086] [client 51.103.133.91:60993] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a1.php"] [unique_id "aeJln4RtUGE9SfUh2wwMpAAAAEw"]
[Sat Apr 18 00:53:51.741984 2026] [:error] [pid 59044:tid 59108] [client 51.103.133.91:65369] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a1.php"] [unique_id "aeJlnwFamkFyEtD_SMG21QAAAIc"]
[Sat Apr 18 00:53:52.248805 2026] [:error] [pid 59044:tid 59121] [client 51.103.133.91:65422] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a1.php"] [unique_id "aeJloAFamkFyEtD_SMG21wAAAJQ"]
[Sat Apr 18 00:53:52.748545 2026] [:error] [pid 59044:tid 59114] [client 51.103.133.91:65500] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/update/f35.php"] [unique_id "aeJloAFamkFyEtD_SMG22QAAAI0"]
[Sat Apr 18 00:53:53.277075 2026] [:error] [pid 59042:tid 59057] [client 51.103.133.91:65451] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/update/f35.php"] [unique_id "aeJloZ6p5oql0UklEBJBCwAAAAo"]
[Sat Apr 18 00:53:53.783468 2026] [:error] [pid 59044:tid 59118] [client 51.103.133.91:60995] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/update/f35.php"] [unique_id "aeJloQFamkFyEtD_SMG23AAAAJE"]
[Sat Apr 18 00:53:54.344812 2026] [:error] [pid 59136:tid 59162] [client 51.103.133.91:61018] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/update/f35.php"] [unique_id "aeJloiaoiUyiIR3EhLWxVQAAANc"]
[Sat Apr 18 00:53:54.844029 2026] [:error] [pid 59044:tid 59124] [client 51.103.133.91:39789] [client 51.103.133.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aeJlogFamkFyEtD_SMG24QAAAJc"]
[Sat Apr 18 00:53:55.418649 2026] [:error] [pid 42442:tid 42464] [client 51.103.133.91:65438] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f35.php"] [unique_id "aeJloz4PBGqL_yqPJ8kX5AAAARQ"]
[Sat Apr 18 00:53:55.919271 2026] [:error] [pid 59043:tid 59090] [client 51.103.133.91:61035] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f35.php"] [unique_id "aeJlo4RtUGE9SfUh2wwMqAAAAFA"]
[Sat Apr 18 00:53:56.387928 2026] [:error] [pid 59136:tid 59144] [client 51.103.133.91:65439] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f35.php"] [unique_id "aeJlpCaoiUyiIR3EhLWxWgAAAMU"]
[Sat Apr 18 00:53:56.887604 2026] [:error] [pid 59043:tid 59093] [client 51.103.133.91:65518] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f35.php"] [unique_id "aeJlpIRtUGE9SfUh2wwMqgAAAFM"]
[Sat Apr 18 00:53:57.386550 2026] [:error] [pid 59136:tid 59147] [client 51.103.133.91:65471] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aeJlpSaoiUyiIR3EhLWxXAAAAMg"]
[Sat Apr 18 00:53:57.854936 2026] [:error] [pid 59043:tid 59077] [client 51.103.133.91:65436] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aeJlpYRtUGE9SfUh2wwMswAAAEM"]
[Sat Apr 18 00:53:58.356414 2026] [:error] [pid 59042:tid 59049] [client 51.103.133.91:65414] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aeJlpp6p5oql0UklEBJBFAAAAAI"]
[Sat Apr 18 00:53:58.918689 2026] [:error] [pid 59042:tid 59048] [client 51.103.133.91:65517] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aeJlpp6p5oql0UklEBJBFgAAAAE"]
[Sat Apr 18 00:53:59.418548 2026] [:error] [pid 59136:tid 59161] [client 51.103.133.91:61004] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aeJlpyaoiUyiIR3EhLWxXgAAANY"]
[Sat Apr 18 00:53:59.948762 2026] [:error] [pid 59136:tid 59152] [client 51.103.133.91:65453] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aeJlpyaoiUyiIR3EhLWxXwAAAM0"]
[Sat Apr 18 00:54:00.454457 2026] [:error] [pid 59043:tid 59098] [client 51.103.133.91:12996] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aeJlqIRtUGE9SfUh2wwMxwAAAFg"]
[Sat Apr 18 00:54:00.955627 2026] [:error] [pid 42442:tid 42459] [client 51.103.133.91:14040] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aeJlqD4PBGqL_yqPJ8kYEAAAAQ8"]
[Sat Apr 18 00:54:01.472675 2026] [proxy_fcgi:error] [pid 59042:tid 59051] [client 51.103.133.91:65454] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 00:54:01.713924 2026] [proxy_fcgi:error] [pid 59042:tid 59054] [client 51.103.133.91:65454] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 00:54:01.955213 2026] [proxy_fcgi:error] [pid 59042:tid 59069] [client 51.103.133.91:65454] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 00:54:02.193668 2026] [proxy_fcgi:error] [pid 59042:tid 59070] [client 51.103.133.91:65454] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 00:54:02.434370 2026] [proxy_fcgi:error] [pid 59042:tid 59056] [client 51.103.133.91:65454] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 00:54:02.759951 2026] [proxy_fcgi:error] [pid 59042:tid 59067] [client 51.103.133.91:65454] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 00:54:02.999881 2026] [proxy_fcgi:error] [pid 59042:tid 59052] [client 51.103.133.91:65454] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 00:54:03.238884 2026] [proxy_fcgi:error] [pid 59042:tid 59047] [client 51.103.133.91:65454] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 00:54:03.476018 2026] [proxy_fcgi:error] [pid 59042:tid 59062] [client 51.103.133.91:65454] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 00:54:03.955188 2026] [proxy_fcgi:error] [pid 59042:tid 59059] [client 51.103.133.91:65454] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 00:54:04.190813 2026] [:error] [pid 59042:tid 59064] [client 51.103.133.91:65454] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/alfashell.php"] [unique_id "aeJlrJ6p5oql0UklEBJBPwAAABE"]
[Sat Apr 18 00:54:04.664364 2026] [:error] [pid 59136:tid 59140] [client 51.103.133.91:65355] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/alfashell.php"] [unique_id "aeJlrCaoiUyiIR3EhLWxYgAAAME"]
[Sat Apr 18 00:54:05.164993 2026] [:error] [pid 59042:tid 59052] [client 51.103.133.91:65463] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/alfashell.php"] [unique_id "aeJlrZ6p5oql0UklEBJBQgAAAAU"]
[Sat Apr 18 00:54:05.665081 2026] [:error] [pid 59042:tid 59057] [client 51.103.133.91:65176] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/alfashell.php"] [unique_id "aeJlrZ6p5oql0UklEBJBQwAAAAo"]
[Sat Apr 18 00:54:06.134078 2026] [:error] [pid 59044:tid 59122] [client 51.103.133.91:61009] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gettest.php"] [unique_id "aeJlrgFamkFyEtD_SMG3AwAAAJU"]
[Sat Apr 18 00:54:06.635942 2026] [:error] [pid 59136:tid 59150] [client 51.103.133.91:65396] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gettest.php"] [unique_id "aeJlriaoiUyiIR3EhLWxZQAAAMs"]
[Sat Apr 18 00:54:07.167107 2026] [:error] [pid 59042:tid 59061] [client 51.103.133.91:65505] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gettest.php"] [unique_id "aeJlr56p5oql0UklEBJBSQAAAA4"]
[Sat Apr 18 00:54:07.698272 2026] [:error] [pid 59042:tid 59048] [client 51.103.133.91:65475] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gettest.php"] [unique_id "aeJlr56p5oql0UklEBJBTQAAAAE"]
[Sat Apr 18 00:54:08.248015 2026] [:error] [pid 59044:tid 59101] [client 51.103.133.91:39770] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/acp.php"] [unique_id "aeJlsAFamkFyEtD_SMG3BQAAAIA"]
[Sat Apr 18 00:54:08.778348 2026] [:error] [pid 59042:tid 59070] [client 51.103.133.91:65410] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/acp.php"] [unique_id "aeJlsJ6p5oql0UklEBJBUwAAABc"]
[Sat Apr 18 00:54:09.309352 2026] [:error] [pid 42442:tid 42462] [client 51.103.133.91:14056] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/acp.php"] [unique_id "aeJlsT4PBGqL_yqPJ8kYHwAAARI"]
[Sat Apr 18 00:54:09.839901 2026] [:error] [pid 59043:tid 59097] [client 51.103.133.91:65511] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/acp.php"] [unique_id "aeJlsYRtUGE9SfUh2wwM2AAAAFc"]
[Sat Apr 18 00:54:10.338007 2026] [:error] [pid 42442:tid 42453] [client 51.103.133.91:65420] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file48.php"] [unique_id "aeJlsj4PBGqL_yqPJ8kYIQAAAQk"]
[Sat Apr 18 00:54:10.869078 2026] [:error] [pid 42442:tid 42457] [client 51.103.133.91:60999] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file48.php"] [unique_id "aeJlsj4PBGqL_yqPJ8kYIgAAAQ0"]
[Sat Apr 18 00:54:11.399751 2026] [:error] [pid 42442:tid 42450] [client 51.103.133.91:14067] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file48.php"] [unique_id "aeJlsz4PBGqL_yqPJ8kYKAAAAQY"]
[Sat Apr 18 00:54:11.869815 2026] [:error] [pid 59044:tid 59120] [client 51.103.133.91:65350] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file48.php"] [unique_id "aeJlswFamkFyEtD_SMG3DQAAAJM"]
[Sat Apr 18 00:54:12.340331 2026] [:error] [pid 59136:tid 59151] [client 51.103.133.91:65412] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/g.php"] [unique_id "aeJltCaoiUyiIR3EhLWxawAAAMw"]
[Sat Apr 18 00:54:12.838469 2026] [:error] [pid 42442:tid 42447] [client 51.103.133.91:61054] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/g.php"] [unique_id "aeJltD4PBGqL_yqPJ8kYKwAAAQM"]
[Sat Apr 18 00:54:13.338596 2026] [:error] [pid 42442:tid 42456] [client 51.103.133.91:65416] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/g.php"] [unique_id "aeJltT4PBGqL_yqPJ8kYLgAAAQw"]
[Sat Apr 18 00:54:13.843681 2026] [:error] [pid 59042:tid 59064] [client 51.103.133.91:61052] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/g.php"] [unique_id "aeJltZ6p5oql0UklEBJBWAAAABE"]
[Sat Apr 18 00:54:14.342913 2026] [:error] [pid 59043:tid 59081] [client 51.103.133.91:65370] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/"] [unique_id "aeJltoRtUGE9SfUh2wwM2gAAAEc"]
[Sat Apr 18 00:54:14.811709 2026] [:error] [pid 59042:tid 59060] [client 51.103.133.91:65344] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/"] [unique_id "aeJltp6p5oql0UklEBJBXAAAAA0"]
[Sat Apr 18 00:54:15.282257 2026] [:error] [pid 42442:tid 42449] [client 51.103.133.91:61006] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/"] [unique_id "aeJltz4PBGqL_yqPJ8kYMwAAAQU"]
[Sat Apr 18 00:54:15.784742 2026] [:error] [pid 59043:tid 59087] [client 51.103.133.91:65426] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/"] [unique_id "aeJlt4RtUGE9SfUh2wwM2wAAAE0"]
[Sat Apr 18 00:54:16.286551 2026] [:error] [pid 42442:tid 42468] [client 51.103.133.91:61014] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/simple.php"] [unique_id "aeJluD4PBGqL_yqPJ8kYNwAAARg"]
[Sat Apr 18 00:54:16.787717 2026] [:error] [pid 59042:tid 59067] [client 51.103.133.91:65476] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/simple.php"] [unique_id "aeJluJ6p5oql0UklEBJBXwAAABQ"]
[Sat Apr 18 00:54:17.318974 2026] [:error] [pid 59042:tid 59061] [client 51.103.133.91:65354] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/simple.php"] [unique_id "aeJluZ6p5oql0UklEBJBYQAAAA4"]
[Sat Apr 18 00:54:17.881645 2026] [:error] [pid 59044:tid 59105] [client 51.103.133.91:14036] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/simple.php"] [unique_id "aeJluQFamkFyEtD_SMG3DwAAAIQ"]
[Sat Apr 18 00:54:18.354074 2026] [:error] [pid 59043:tid 59080] [client 51.103.133.91:61040] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ew.php"] [unique_id "aeJluoRtUGE9SfUh2wwM3AAAAEY"]
[Sat Apr 18 00:54:18.824914 2026] [:error] [pid 59042:tid 59054] [client 51.103.133.91:65418] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ew.php"] [unique_id "aeJlup6p5oql0UklEBJBaAAAAAc"]
[Sat Apr 18 00:54:19.324950 2026] [:error] [pid 42442:tid 42448] [client 51.103.133.91:65173] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ew.php"] [unique_id "aeJluz4PBGqL_yqPJ8kYPgAAAQQ"]
[Sat Apr 18 00:54:19.829419 2026] [:error] [pid 42442:tid 42457] [client 51.103.133.91:65374] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ew.php"] [unique_id "aeJluz4PBGqL_yqPJ8kYPwAAAQ0"]
[Sat Apr 18 00:54:20.330561 2026] [:error] [pid 42442:tid 42463] [client 51.103.133.91:34930] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file21.php"] [unique_id "aeJlvD4PBGqL_yqPJ8kYRQAAARM"]
[Sat Apr 18 00:54:20.892980 2026] [:error] [pid 59044:tid 59114] [client 51.103.133.91:61016] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file21.php"] [unique_id "aeJlvAFamkFyEtD_SMG3EQAAAI0"]
[Sat Apr 18 00:54:21.393849 2026] [:error] [pid 42442:tid 42445] [client 51.103.133.91:61008] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file21.php"] [unique_id "aeJlvT4PBGqL_yqPJ8kYSQAAAQE"]
[Sat Apr 18 00:54:21.923888 2026] [:error] [pid 59042:tid 59067] [client 51.103.133.91:61019] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file21.php"] [unique_id "aeJlvZ6p5oql0UklEBJBagAAABQ"]
[Sat Apr 18 00:54:22.453677 2026] [:error] [pid 59043:tid 59082] [client 51.103.133.91:65154] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class19.php"] [unique_id "aeJlvoRtUGE9SfUh2wwM4QAAAEg"]
[Sat Apr 18 00:54:22.984606 2026] [:error] [pid 59044:tid 59104] [client 51.103.133.91:65419] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class19.php"] [unique_id "aeJlvgFamkFyEtD_SMG3EwAAAIM"]
[Sat Apr 18 00:54:23.484250 2026] [:error] [pid 42442:tid 42465] [client 51.103.133.91:65359] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class19.php"] [unique_id "aeJlvz4PBGqL_yqPJ8kYVgAAARU"]
[Sat Apr 18 00:54:23.954145 2026] [:error] [pid 59042:tid 59064] [client 51.103.133.91:65444] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class19.php"] [unique_id "aeJlv56p5oql0UklEBJBbgAAABE"]
[Sat Apr 18 00:54:24.455495 2026] [:error] [pid 42442:tid 42455] [client 51.103.133.91:65440] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class20.php"] [unique_id "aeJlwD4PBGqL_yqPJ8kYWQAAAQs"]
[Sat Apr 18 00:54:24.987071 2026] [:error] [pid 59043:tid 59097] [client 51.103.133.91:65182] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class20.php"] [unique_id "aeJlwIRtUGE9SfUh2wwM4wAAAFc"]
[Sat Apr 18 00:54:25.518632 2026] [:error] [pid 42442:tid 42452] [client 51.103.133.91:39803] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class20.php"] [unique_id "aeJlwT4PBGqL_yqPJ8kYXgAAAQg"]
[Sat Apr 18 00:54:26.048969 2026] [:error] [pid 42442:tid 42464] [client 51.103.133.91:65407] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class20.php"] [unique_id "aeJlwj4PBGqL_yqPJ8kYXwAAARQ"]
[Sat Apr 18 00:54:26.579460 2026] [:error] [pid 42442:tid 42456] [client 51.103.133.91:65353] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file18.php"] [unique_id "aeJlwj4PBGqL_yqPJ8kYYQAAAQw"]
[Sat Apr 18 00:54:27.080145 2026] [:error] [pid 42442:tid 42447] [client 51.103.133.91:65400] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file18.php"] [unique_id "aeJlwz4PBGqL_yqPJ8kYZAAAAQM"]
[Sat Apr 18 00:54:27.554026 2026] [:error] [pid 59042:tid 59067] [client 51.103.133.91:61012] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file18.php"] [unique_id "aeJlw56p5oql0UklEBJBcwAAABQ"]
[Sat Apr 18 00:54:28.024740 2026] [:error] [pid 42442:tid 42459] [client 51.103.133.91:61055] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file18.php"] [unique_id "aeJlxD4PBGqL_yqPJ8kYZwAAAQ8"]
[Sat Apr 18 00:54:28.495125 2026] [:error] [pid 59042:tid 59051] [client 51.103.133.91:13011] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vee.php"] [unique_id "aeJlxJ6p5oql0UklEBJBeAAAAAQ"]
[Sat Apr 18 00:54:28.995897 2026] [:error] [pid 59042:tid 59063] [client 51.103.133.91:65473] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vee.php"] [unique_id "aeJlxJ6p5oql0UklEBJBewAAABA"]
[Sat Apr 18 00:54:29.500710 2026] [:error] [pid 59044:tid 59124] [client 51.103.133.91:65508] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vee.php"] [unique_id "aeJlxQFamkFyEtD_SMG3FwAAAJc"]
[Sat Apr 18 00:54:29.970225 2026] [:error] [pid 59042:tid 59068] [client 51.103.133.91:61046] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vee.php"] [unique_id "aeJlxZ6p5oql0UklEBJBfQAAABU"]
[Sat Apr 18 00:54:30.473840 2026] [:error] [pid 42442:tid 42456] [client 51.103.133.91:13007] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cabs.php"] [unique_id "aeJlxj4PBGqL_yqPJ8kYagAAAQw"]
[Sat Apr 18 00:54:30.979493 2026] [:error] [pid 59044:tid 59122] [client 51.103.133.91:61043] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cabs.php"] [unique_id "aeJlxgFamkFyEtD_SMG3GgAAAJU"]
[Sat Apr 18 00:54:31.450563 2026] [:error] [pid 59042:tid 59049] [client 51.103.133.91:13006] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cabs.php"] [unique_id "aeJlx56p5oql0UklEBJBggAAAAI"]
[Sat Apr 18 00:54:31.952739 2026] [:error] [pid 59044:tid 59121] [client 51.103.133.91:60997] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cabs.php"] [unique_id "aeJlxwFamkFyEtD_SMG3HwAAAJQ"]
[Sat Apr 18 00:54:32.459968 2026] [:error] [pid 59136:tid 59159] [client 51.103.133.91:14066] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xwx1.php"] [unique_id "aeJlyCaoiUyiIR3EhLWxegAAANQ"]
[Sat Apr 18 00:54:32.928640 2026] [:error] [pid 59042:tid 59068] [client 51.103.133.91:65351] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xwx1.php"] [unique_id "aeJlyJ6p5oql0UklEBJBhwAAABU"]
[Sat Apr 18 00:54:33.460952 2026] [:error] [pid 59042:tid 59067] [client 51.103.133.91:65490] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xwx1.php"] [unique_id "aeJlyZ6p5oql0UklEBJBiwAAABQ"]
[Sat Apr 18 00:54:33.965612 2026] [:error] [pid 59042:tid 59050] [client 51.103.133.91:65165] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xwx1.php"] [unique_id "aeJlyZ6p5oql0UklEBJBjAAAAAM"]
[Sat Apr 18 00:54:34.494410 2026] [:error] [pid 59043:tid 59096] [client 51.103.133.91:65421] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x1da.php"] [unique_id "aeJlyoRtUGE9SfUh2wwM7AAAAFY"]
[Sat Apr 18 00:54:34.994491 2026] [:error] [pid 59136:tid 59152] [client 51.103.133.91:65516] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x1da.php"] [unique_id "aeJlyiaoiUyiIR3EhLWxgQAAAM0"]
[Sat Apr 18 00:54:35.526573 2026] [:error] [pid 59043:tid 59085] [client 51.103.133.91:65206] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x1da.php"] [unique_id "aeJly4RtUGE9SfUh2wwM7wAAAEs"]
[Sat Apr 18 00:54:35.997129 2026] [:error] [pid 59043:tid 59076] [client 51.103.133.91:65096] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x1da.php"] [unique_id "aeJly4RtUGE9SfUh2wwM8AAAAEI"]
[Sat Apr 18 00:54:36.467008 2026] [:error] [pid 59043:tid 59078] [client 51.103.133.91:65180] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jp.php"] [unique_id "aeJlzIRtUGE9SfUh2wwM8QAAAEQ"]
[Sat Apr 18 00:54:36.936608 2026] [:error] [pid 42442:tid 42462] [client 51.103.133.91:65371] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jp.php"] [unique_id "aeJlzD4PBGqL_yqPJ8kYbAAAARI"]
[Sat Apr 18 00:54:37.406068 2026] [:error] [pid 59044:tid 59111] [client 51.103.133.91:39807] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jp.php"] [unique_id "aeJlzQFamkFyEtD_SMG3JQAAAIo"]
[Sat Apr 18 00:54:37.904735 2026] [:error] [pid 59043:tid 59094] [client 51.103.133.91:61028] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jp.php"] [unique_id "aeJlzYRtUGE9SfUh2wwM8gAAAFQ"]
[Sat Apr 18 00:54:38.403116 2026] [:error] [pid 42442:tid 42457] [client 51.103.133.91:65095] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/chosen.php"] [unique_id "aeJlzj4PBGqL_yqPJ8kYbwAAAQ0"]
[Sat Apr 18 00:54:38.874271 2026] [:error] [pid 59043:tid 59091] [client 51.103.133.91:65502] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/chosen.php"] [unique_id "aeJlzoRtUGE9SfUh2wwM9AAAAFE"]
[Sat Apr 18 00:54:39.374801 2026] [:error] [pid 42442:tid 42445] [client 51.103.133.91:65464] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/chosen.php"] [unique_id "aeJlzz4PBGqL_yqPJ8kYcAAAAQE"]
[Sat Apr 18 00:54:39.876636 2026] [:error] [pid 59042:tid 59051] [client 51.103.133.91:65441] [client 51.103.133.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/chosen.php"] [unique_id "aeJlz56p5oql0UklEBJBlgAAAAQ"]
[Sat Apr 18 03:39:25.295679 2026] [:error] [pid 9970:tid 9998] [client 20.63.32.193:28658] [client 20.63.32.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeKMbSYdRLRhVmaIMx1gWgAAANg"]
[Sat Apr 18 03:39:25.974149 2026] [:error] [pid 9863:tid 9883] [client 20.63.32.193:28552] [client 20.63.32.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeKMbTjjiypiFrTucbLdtQAAAAo"]
[Sat Apr 18 03:39:26.787456 2026] [:error] [pid 9970:tid 9990] [client 20.63.32.193:28562] [client 20.63.32.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeKMbiYdRLRhVmaIMx1gXgAAANA"]
[Sat Apr 18 03:39:27.477490 2026] [:error] [pid 9970:tid 9977] [client 20.63.32.193:28616] [client 20.63.32.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeKMbyYdRLRhVmaIMx1gXwAAAMM"]
[Sat Apr 18 10:36:17.110686 2026] [proxy_fcgi:error] [pid 9970:tid 9986] [client 20.166.51.62:13059] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 10:36:17.371771 2026] [proxy_fcgi:error] [pid 9970:tid 9996] [client 20.166.51.62:13059] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 10:36:17.626613 2026] [proxy_fcgi:error] [pid 9970:tid 9987] [client 20.166.51.62:13059] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 10:36:17.918054 2026] [proxy_fcgi:error] [pid 9970:tid 9993] [client 20.166.51.62:13059] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 10:36:18.171635 2026] [proxy_fcgi:error] [pid 9970:tid 9984] [client 20.166.51.62:13059] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 10:36:18.705948 2026] [proxy_fcgi:error] [pid 9970:tid 9994] [client 20.166.51.62:13059] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 10:36:18.960772 2026] [proxy_fcgi:error] [pid 9970:tid 9990] [client 20.166.51.62:13059] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 10:36:19.214525 2026] [proxy_fcgi:error] [pid 9970:tid 9975] [client 20.166.51.62:13059] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 10:36:19.467794 2026] [proxy_fcgi:error] [pid 9970:tid 9989] [client 20.166.51.62:13059] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 10:36:19.917149 2026] [:error] [pid 9970:tid 9976] [client 20.166.51.62:13059] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/t.php"] [unique_id "aeLuIyYdRLRhVmaIMx0vUAAAAMI"]
[Sat Apr 18 10:36:20.844249 2026] [:error] [pid 13023:tid 13049] [client 20.166.51.62:14348] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/t.php"] [unique_id "aeLuJP1e7hG8DAeABB93oQAAARg"]
[Sat Apr 18 10:36:22.780224 2026] [:error] [pid 34288:tid 34294] [client 20.166.51.62:17985] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/t.php"] [unique_id "aeLuJuTIiy__PtiLmpl6hwAAAYI"]
[Sat Apr 18 10:36:24.995768 2026] [:error] [pid 34237:tid 34256] [client 20.166.51.62:14245] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/t.php"] [unique_id "aeLuKBBmX4Wq5a6rxfYYigAAAVE"]
[Sat Apr 18 10:36:27.420778 2026] [:error] [pid 34288:tid 34309] [client 20.166.51.62:8544] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lib.php"] [unique_id "aeLuK-TIiy__PtiLmpl6jgAAAZE"]
[Sat Apr 18 10:36:29.433425 2026] [:error] [pid 34290:tid 34330] [client 20.166.51.62:8760] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lib.php"] [unique_id "aeLuLRqX6WpmmAXOBi-SAwAAAcs"]
[Sat Apr 18 10:36:33.393119 2026] [:error] [pid 34290:tid 34337] [client 20.166.51.62:8735] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lib.php"] [unique_id "aeLuMRqX6WpmmAXOBi-SHAAAAdI"]
[Sat Apr 18 10:36:35.461922 2026] [:error] [pid 9863:tid 9894] [client 20.166.51.62:14257] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lib.php"] [unique_id "aeLuMzjjiypiFrTucbJaxAAAABU"]
[Sat Apr 18 10:36:37.171294 2026] [:error] [pid 9863:tid 9887] [client 20.166.51.62:13257] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kj.php"] [unique_id "aeLuNTjjiypiFrTucbJaxgAAAA4"]
[Sat Apr 18 10:36:38.411001 2026] [:error] [pid 9865:tid 9943] [client 20.166.51.62:8738] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kj.php"] [unique_id "aeLuNqzb5knECIY-C-j8QAAAAIY"]
[Sat Apr 18 10:36:39.350320 2026] [:error] [pid 34288:tid 34305] [client 20.166.51.62:28493] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kj.php"] [unique_id "aeLuN-TIiy__PtiLmpl6mgAAAY0"]
[Sat Apr 18 10:36:40.415473 2026] [:error] [pid 34288:tid 34306] [client 20.166.51.62:15247] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kj.php"] [unique_id "aeLuOOTIiy__PtiLmpl6nQAAAY4"]
[Sat Apr 18 10:36:41.546013 2026] [:error] [pid 34288:tid 34313] [client 20.166.51.62:13310] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/new.php"] [unique_id "aeLuOeTIiy__PtiLmpl6nwAAAZU"]
[Sat Apr 18 10:36:42.665135 2026] [:error] [pid 9863:tid 9880] [client 20.166.51.62:15280] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/new.php"] [unique_id "aeLuOjjjiypiFrTucbJazAAAAAc"]
[Sat Apr 18 10:36:43.672971 2026] [:error] [pid 9970:tid 9997] [client 20.166.51.62:28485] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/new.php"] [unique_id "aeLuOyYdRLRhVmaIMx0vYQAAANc"]
[Sat Apr 18 10:36:45.169253 2026] [:error] [pid 34290:tid 34324] [client 20.166.51.62:21006] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/new.php"] [unique_id "aeLuPRqX6WpmmAXOBi-SMAAAAcU"]
[Sat Apr 18 10:36:46.475025 2026] [:error] [pid 13023:tid 13032] [client 20.166.51.62:13271] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/edit.php"] [unique_id "aeLuPv1e7hG8DAeABB931QAAAQc"]
[Sat Apr 18 10:36:47.199921 2026] [:error] [pid 9970:tid 9981] [client 20.166.51.62:8556] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/edit.php"] [unique_id "aeLuPyYdRLRhVmaIMx0vYgAAAMc"]
[Sat Apr 18 10:36:48.044582 2026] [:error] [pid 9970:tid 9983] [client 20.166.51.62:14366] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/edit.php"] [unique_id "aeLuQCYdRLRhVmaIMx0vZAAAAMk"]
[Sat Apr 18 10:36:49.009798 2026] [:error] [pid 34237:tid 34242] [client 20.166.51.62:14363] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/edit.php"] [unique_id "aeLuQRBmX4Wq5a6rxfYYkwAAAUM"]
[Sat Apr 18 10:36:49.826691 2026] [:error] [pid 34290:tid 34328] [client 20.166.51.62:18011] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gettest.php"] [unique_id "aeLuQRqX6WpmmAXOBi-SOQAAAck"]
[Sat Apr 18 10:36:50.958899 2026] [:error] [pid 34290:tid 34322] [client 20.166.51.62:15424] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gettest.php"] [unique_id "aeLuQhqX6WpmmAXOBi-SOgAAAcM"]
[Sat Apr 18 10:36:51.641364 2026] [:error] [pid 13023:tid 13040] [client 20.166.51.62:28547] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gettest.php"] [unique_id "aeLuQ_1e7hG8DAeABB936AAAAQ8"]
[Sat Apr 18 10:36:52.361501 2026] [:error] [pid 13023:tid 13034] [client 20.166.51.62:28562] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gettest.php"] [unique_id "aeLuRP1e7hG8DAeABB936QAAAQk"]
[Sat Apr 18 10:36:53.326781 2026] [:error] [pid 9970:tid 9990] [client 20.166.51.62:14234] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/666.php"] [unique_id "aeLuRSYdRLRhVmaIMx0vbwAAANA"]
[Sat Apr 18 10:36:54.109473 2026] [:error] [pid 9970:tid 9975] [client 20.166.51.62:17992] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/666.php"] [unique_id "aeLuRiYdRLRhVmaIMx0vcQAAAME"]
[Sat Apr 18 10:36:54.995192 2026] [:error] [pid 9970:tid 9976] [client 20.166.51.62:14388] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/666.php"] [unique_id "aeLuRiYdRLRhVmaIMx0vcgAAAMI"]
[Sat Apr 18 10:36:55.665706 2026] [:error] [pid 9970:tid 9997] [client 20.166.51.62:17803] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/666.php"] [unique_id "aeLuRyYdRLRhVmaIMx0vdQAAANc"]
[Sat Apr 18 10:36:57.382879 2026] [:error] [pid 9970:tid 9980] [client 20.166.51.62:11016] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tool.php"] [unique_id "aeLuSSYdRLRhVmaIMx0veAAAAMY"]
[Sat Apr 18 10:36:58.711424 2026] [:error] [pid 9970:tid 9984] [client 20.166.51.62:10784] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tool.php"] [unique_id "aeLuSiYdRLRhVmaIMx0vfQAAAMo"]
[Sat Apr 18 10:36:59.714128 2026] [:error] [pid 13023:tid 13049] [client 20.166.51.62:12702] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tool.php"] [unique_id "aeLuS_1e7hG8DAeABB938QAAARg"]
[Sat Apr 18 10:37:00.449148 2026] [:error] [pid 13023:tid 13027] [client 20.166.51.62:32224] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tool.php"] [unique_id "aeLuTP1e7hG8DAeABB939QAAAQI"]
[Sat Apr 18 10:37:01.431898 2026] [:error] [pid 34290:tid 34321] [client 20.166.51.62:14180] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-blogs.php"] [unique_id "aeLuTRqX6WpmmAXOBi-SRQAAAcI"]
[Sat Apr 18 10:37:02.082447 2026] [:error] [pid 34290:tid 34322] [client 20.166.51.62:11038] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-blogs.php"] [unique_id "aeLuThqX6WpmmAXOBi-SRwAAAcM"]
[Sat Apr 18 10:37:02.823735 2026] [:error] [pid 34290:tid 34337] [client 20.166.51.62:17957] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-blogs.php"] [unique_id "aeLuThqX6WpmmAXOBi-SSgAAAdI"]
[Sat Apr 18 10:37:04.138560 2026] [:error] [pid 34290:tid 34342] [client 20.166.51.62:19867] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-blogs.php"] [unique_id "aeLuUBqX6WpmmAXOBi-SUQAAAdc"]
[Sat Apr 18 10:37:05.693846 2026] [:error] [pid 34290:tid 34330] [client 20.166.51.62:35610] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bgymj.php"] [unique_id "aeLuURqX6WpmmAXOBi-SVAAAAcs"]
[Sat Apr 18 10:37:06.597424 2026] [:error] [pid 34288:tid 34295] [client 20.166.51.62:17162] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bgymj.php"] [unique_id "aeLuUuTIiy__PtiLmpl6vgAAAYM"]
[Sat Apr 18 10:37:07.527503 2026] [:error] [pid 34237:tid 34245] [client 20.166.51.62:35588] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bgymj.php"] [unique_id "aeLuUxBmX4Wq5a6rxfYYoQAAAUY"]
[Sat Apr 18 10:37:08.398384 2026] [:error] [pid 13023:tid 13035] [client 20.166.51.62:1858] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bgymj.php"] [unique_id "aeLuVP1e7hG8DAeABB93-QAAAQo"]
[Sat Apr 18 10:37:09.114354 2026] [:error] [pid 34290:tid 34332] [client 20.166.51.62:19885] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mini.php"] [unique_id "aeLuVRqX6WpmmAXOBi-SWQAAAc0"]
[Sat Apr 18 10:37:09.773392 2026] [:error] [pid 34290:tid 34329] [client 20.166.51.62:32240] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mini.php"] [unique_id "aeLuVRqX6WpmmAXOBi-SWwAAAco"]
[Sat Apr 18 10:37:10.426211 2026] [:error] [pid 34290:tid 34324] [client 20.166.51.62:19902] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mini.php"] [unique_id "aeLuVhqX6WpmmAXOBi-SXwAAAcU"]
[Sat Apr 18 10:37:11.760853 2026] [:error] [pid 34290:tid 34337] [client 20.166.51.62:35090] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mini.php"] [unique_id "aeLuVxqX6WpmmAXOBi-SYwAAAdI"]
[Sat Apr 18 10:37:12.901934 2026] [:error] [pid 34290:tid 34327] [client 20.166.51.62:14170] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/amax.php"] [unique_id "aeLuWBqX6WpmmAXOBi-SZAAAAcg"]
[Sat Apr 18 10:37:14.312169 2026] [:error] [pid 9970:tid 9985] [client 20.166.51.62:10811] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/amax.php"] [unique_id "aeLuWiYdRLRhVmaIMx0vqAAAAMs"]
[Sat Apr 18 10:37:16.213427 2026] [:error] [pid 34290:tid 34325] [client 20.166.51.62:32763] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/amax.php"] [unique_id "aeLuXBqX6WpmmAXOBi-SbAAAAcY"]
[Sat Apr 18 10:37:17.813841 2026] [:error] [pid 9864:tid 9918] [client 20.166.51.62:1933] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/amax.php"] [unique_id "aeLuXYCFeowknfXHM7lukwAAAEw"]
[Sat Apr 18 10:37:18.483059 2026] [:error] [pid 34290:tid 34322] [client 20.166.51.62:20729] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mh.php"] [unique_id "aeLuXhqX6WpmmAXOBi-ScQAAAcM"]
[Sat Apr 18 10:37:19.311686 2026] [proxy_fcgi:error] [pid 9864:tid 9926] [client 20.166.51.62:24146] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 10:37:19.590841 2026] [proxy_fcgi:error] [pid 9864:tid 9928] [client 20.166.51.62:24146] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 10:37:19.863803 2026] [proxy_fcgi:error] [pid 9864:tid 9906] [client 20.166.51.62:24146] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 10:37:20.121930 2026] [proxy_fcgi:error] [pid 9864:tid 9907] [client 20.166.51.62:24146] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 10:37:20.377645 2026] [proxy_fcgi:error] [pid 9864:tid 9930] [client 20.166.51.62:24146] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 10:37:20.660751 2026] [proxy_fcgi:error] [pid 9864:tid 9910] [client 20.166.51.62:24146] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 10:37:20.924734 2026] [proxy_fcgi:error] [pid 9864:tid 9919] [client 20.166.51.62:24146] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 10:37:21.368690 2026] [proxy_fcgi:error] [pid 9864:tid 9929] [client 20.166.51.62:24146] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 10:37:21.666593 2026] [proxy_fcgi:error] [pid 9864:tid 9909] [client 20.166.51.62:24146] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 10:37:22.071495 2026] [proxy_fcgi:error] [pid 9864:tid 9905] [client 20.166.51.62:24146] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 10:37:22.326608 2026] [proxy_fcgi:error] [pid 9864:tid 9912] [client 20.166.51.62:24146] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 10:37:22.579950 2026] [:error] [pid 9864:tid 9922] [client 20.166.51.62:24146] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/first.php"] [unique_id "aeLuYoCFeowknfXHM7luogAAAFA"]
[Sat Apr 18 10:37:23.150406 2026] [:error] [pid 34288:tid 34313] [client 20.166.51.62:8665] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/first.php"] [unique_id "aeLuY-TIiy__PtiLmpl6xgAAAZU"]
[Sat Apr 18 10:37:24.372831 2026] [:error] [pid 9863:tid 9875] [client 20.166.51.62:13187] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/first.php"] [unique_id "aeLuZDjjiypiFrTucbJa7wAAAAI"]
[Sat Apr 18 10:37:25.380141 2026] [:error] [pid 9970:tid 9996] [client 20.166.51.62:1646] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/first.php"] [unique_id "aeLuZSYdRLRhVmaIMx0vuQAAANY"]
[Sat Apr 18 10:37:26.069345 2026] [:error] [pid 13023:tid 13047] [client 20.166.51.62:17565] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-links-opml.php"] [unique_id "aeLuZv1e7hG8DAeABB94AQAAARY"]
[Sat Apr 18 10:37:26.868669 2026] [:error] [pid 34288:tid 34311] [client 20.166.51.62:15739] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-links-opml.php"] [unique_id "aeLuZuTIiy__PtiLmpl6yQAAAZM"]
[Sat Apr 18 10:37:27.925299 2026] [:error] [pid 34288:tid 34292] [client 20.166.51.62:13236] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-links-opml.php"] [unique_id "aeLuZ-TIiy__PtiLmpl6zgAAAYA"]
[Sat Apr 18 10:37:28.775944 2026] [:error] [pid 9864:tid 9917] [client 20.166.51.62:24188] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-links-opml.php"] [unique_id "aeLuaICFeowknfXHM7luowAAAEs"]
[Sat Apr 18 10:37:29.975445 2026] [:error] [pid 9864:tid 9924] [client 20.166.51.62:15721] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ms-edit.php"] [unique_id "aeLuaYCFeowknfXHM7lupAAAAFI"]
[Sat Apr 18 10:37:30.961342 2026] [:error] [pid 34288:tid 34309] [client 20.166.51.62:12277] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ms-edit.php"] [unique_id "aeLuauTIiy__PtiLmpl61AAAAZE"]
[Sat Apr 18 10:37:32.098788 2026] [:error] [pid 34290:tid 34335] [client 20.166.51.62:24140] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ms-edit.php"] [unique_id "aeLubBqX6WpmmAXOBi-ShAAAAdA"]
[Sat Apr 18 10:37:33.040557 2026] [:error] [pid 34290:tid 34327] [client 20.166.51.62:15693] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ms-edit.php"] [unique_id "aeLubRqX6WpmmAXOBi-SjAAAAcg"]
[Sat Apr 18 10:37:33.705281 2026] [:error] [pid 34290:tid 34332] [client 20.166.51.62:27088] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/asd.php"] [unique_id "aeLubRqX6WpmmAXOBi-SkAAAAc0"]
[Sat Apr 18 10:37:34.511304 2026] [:error] [pid 34290:tid 34320] [client 20.166.51.62:9805] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/asd.php"] [unique_id "aeLubhqX6WpmmAXOBi-SkwAAAcE"]
[Sat Apr 18 10:37:36.414476 2026] [:error] [pid 9970:tid 9996] [client 20.166.51.62:37310] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/asd.php"] [unique_id "aeLucCYdRLRhVmaIMx0v4QAAANY"]
[Sat Apr 18 10:37:37.317591 2026] [:error] [pid 34290:tid 34333] [client 20.166.51.62:13212] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/asd.php"] [unique_id "aeLucRqX6WpmmAXOBi-SlgAAAc4"]
[Sat Apr 18 10:37:40.671904 2026] [:error] [pid 9970:tid 9992] [client 20.166.51.62:9833] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/public/vx.php"] [unique_id "aeLudCYdRLRhVmaIMx0v7AAAANI"]
[Sat Apr 18 10:37:41.474031 2026] [:error] [pid 34290:tid 34333] [client 20.166.51.62:15731] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/public/vx.php"] [unique_id "aeLudRqX6WpmmAXOBi-SpAAAAc4"]
[Sat Apr 18 10:37:42.079338 2026] [:error] [pid 9865:tid 9949] [client 20.166.51.62:6188] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/public/vx.php"] [unique_id "aeLudqzb5knECIY-C-j8TwAAAIw"]
[Sat Apr 18 10:37:42.809416 2026] [:error] [pid 34290:tid 34327] [client 20.166.51.62:17596] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/public/vx.php"] [unique_id "aeLudhqX6WpmmAXOBi-SpgAAAcg"]
[Sat Apr 18 10:37:44.098993 2026] [:error] [pid 34290:tid 34331] [client 20.166.51.62:9812] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/radio.php"] [unique_id "aeLueBqX6WpmmAXOBi-SrQAAAcw"]
[Sat Apr 18 10:37:44.863073 2026] [:error] [pid 9865:tid 9941] [client 20.166.51.62:5342] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/radio.php"] [unique_id "aeLueKzb5knECIY-C-j8UQAAAIQ"]
[Sat Apr 18 10:37:45.567434 2026] [:error] [pid 34288:tid 34298] [client 20.166.51.62:37293] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/radio.php"] [unique_id "aeLueeTIiy__PtiLmpl64AAAAYY"]
[Sat Apr 18 10:37:47.254169 2026] [:error] [pid 34290:tid 34323] [client 20.166.51.62:10315] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/radio.php"] [unique_id "aeLuexqX6WpmmAXOBi-SsgAAAcQ"]
[Sat Apr 18 10:37:49.245111 2026] [:error] [pid 9863:tid 9874] [client 20.166.51.62:35570] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-access.php"] [unique_id "aeLufTjjiypiFrTucbJbAwAAAAE"]
[Sat Apr 18 10:37:53.066636 2026] [:error] [pid 34290:tid 34335] [client 20.166.51.62:15696] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-access.php"] [unique_id "aeLugRqX6WpmmAXOBi-S0wAAAdA"]
[Sat Apr 18 10:37:56.143995 2026] [:error] [pid 34290:tid 34321] [client 20.166.51.62:18904] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-access.php"] [unique_id "aeLuhBqX6WpmmAXOBi-S8AAAAcI"]
[Sat Apr 18 10:37:57.808754 2026] [:error] [pid 34290:tid 34337] [client 20.166.51.62:37052] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-access.php"] [unique_id "aeLuhRqX6WpmmAXOBi-TAAAAAdI"]
[Sat Apr 18 10:38:00.211554 2026] [:error] [pid 34290:tid 34340] [client 20.166.51.62:17778] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeLuiBqX6WpmmAXOBi-TEgAAAdU"]
[Sat Apr 18 10:38:02.150160 2026] [:error] [pid 9863:tid 9883] [client 20.166.51.62:21247] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeLuijjjiypiFrTucbJbCAAAAAo"]
[Sat Apr 18 10:38:05.136643 2026] [:error] [pid 9970:tid 9978] [client 20.166.51.62:10751] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeLujSYdRLRhVmaIMx0wFAAAAMQ"]
[Sat Apr 18 10:38:11.290850 2026] [:error] [pid 34290:tid 34322] [client 20.166.51.62:14452] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeLukxqX6WpmmAXOBi-TKAAAAcM"]
[Sat Apr 18 10:38:13.262424 2026] [:error] [pid 34290:tid 34327] [client 20.166.51.62:8395] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cu.php"] [unique_id "aeLulRqX6WpmmAXOBi-TMgAAAcg"]
[Sat Apr 18 10:38:14.347410 2026] [:error] [pid 9865:tid 9957] [client 20.166.51.62:12383] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cu.php"] [unique_id "aeLulqzb5knECIY-C-j8ngAAAJQ"]
[Sat Apr 18 10:38:15.758162 2026] [:error] [pid 13023:tid 13043] [client 20.166.51.62:12387] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cu.php"] [unique_id "aeLul_1e7hG8DAeABB94OwAAARI"]
[Sat Apr 18 10:38:17.138048 2026] [:error] [pid 34290:tid 34320] [client 20.166.51.62:20779] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cu.php"] [unique_id "aeLumRqX6WpmmAXOBi-TOAAAAcE"]
[Sat Apr 18 10:38:17.910125 2026] [:error] [pid 13023:tid 13025] [client 20.166.51.62:18960] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bolt.php"] [unique_id "aeLumf1e7hG8DAeABB94RwAAAQA"]
[Sat Apr 18 10:38:18.830712 2026] [:error] [pid 9970:tid 9982] [client 20.166.51.62:10215] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bolt.php"] [unique_id "aeLumiYdRLRhVmaIMx0wOAAAAMg"]
[Sat Apr 18 10:38:20.044555 2026] [:error] [pid 13023:tid 13038] [client 20.166.51.62:18964] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bolt.php"] [unique_id "aeLunP1e7hG8DAeABB94UQAAAQ0"]
[Sat Apr 18 10:38:21.156399 2026] [:error] [pid 9970:tid 9979] [client 20.166.51.62:19678] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bolt.php"] [unique_id "aeLunSYdRLRhVmaIMx0wPwAAAMU"]
[Sat Apr 18 10:38:22.124618 2026] [proxy_fcgi:error] [pid 13023:tid 13049] [client 20.166.51.62:10593] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 10:38:22.379416 2026] [proxy_fcgi:error] [pid 13023:tid 13026] [client 20.166.51.62:10593] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 10:38:22.930819 2026] [proxy_fcgi:error] [pid 13023:tid 13030] [client 20.166.51.62:10593] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 10:38:23.189070 2026] [proxy_fcgi:error] [pid 13023:tid 13045] [client 20.166.51.62:10593] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 10:38:23.444611 2026] [proxy_fcgi:error] [pid 13023:tid 13038] [client 20.166.51.62:10593] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 10:38:23.715840 2026] [proxy_fcgi:error] [pid 13023:tid 13037] [client 20.166.51.62:10593] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 10:38:24.015344 2026] [proxy_fcgi:error] [pid 13023:tid 13031] [client 20.166.51.62:10593] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 10:38:24.280801 2026] [proxy_fcgi:error] [pid 13023:tid 13035] [client 20.166.51.62:10593] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 10:38:24.535363 2026] [proxy_fcgi:error] [pid 13023:tid 13044] [client 20.166.51.62:10593] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 10:38:25.169639 2026] [proxy_fcgi:error] [pid 13023:tid 13047] [client 20.166.51.62:10593] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 10:38:25.443251 2026] [:error] [pid 13023:tid 13048] [client 20.166.51.62:10593] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-the.php"] [unique_id "aeLuof1e7hG8DAeABB94YgAAARc"]
[Sat Apr 18 10:38:26.398161 2026] [:error] [pid 9970:tid 9991] [client 20.166.51.62:21705] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-the.php"] [unique_id "aeLuoiYdRLRhVmaIMx0wTAAAANE"]
[Sat Apr 18 10:38:27.186916 2026] [:error] [pid 34290:tid 34323] [client 20.166.51.62:1491] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-the.php"] [unique_id "aeLuoxqX6WpmmAXOBi-TUAAAAcQ"]
[Sat Apr 18 10:38:27.934696 2026] [:error] [pid 34290:tid 34325] [client 20.166.51.62:1513] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-the.php"] [unique_id "aeLuoxqX6WpmmAXOBi-TVgAAAcY"]
[Sat Apr 18 10:38:29.325694 2026] [:error] [pid 34237:tid 34243] [client 20.166.51.62:19990] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp5.php"] [unique_id "aeLupRBmX4Wq5a6rxfYY7AAAAUQ"]
[Sat Apr 18 10:38:30.613287 2026] [:error] [pid 9863:tid 9880] [client 20.166.51.62:2012] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp5.php"] [unique_id "aeLupjjjiypiFrTucbJbMQAAAAc"]
[Sat Apr 18 10:38:31.979252 2026] [:error] [pid 34290:tid 34321] [client 20.166.51.62:21737] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp5.php"] [unique_id "aeLupxqX6WpmmAXOBi-TagAAAcI"]
[Sat Apr 18 10:38:32.978862 2026] [:error] [pid 34288:tid 34315] [client 20.166.51.62:19000] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp5.php"] [unique_id "aeLuqOTIiy__PtiLmpl7DAAAAZc"]
[Sat Apr 18 10:38:33.726667 2026] [:error] [pid 34290:tid 34332] [client 20.166.51.62:19707] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xxx.php"] [unique_id "aeLuqRqX6WpmmAXOBi-TcAAAAc0"]
[Sat Apr 18 10:38:34.750267 2026] [:error] [pid 34290:tid 34324] [client 20.166.51.62:10233] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xxx.php"] [unique_id "aeLuqhqX6WpmmAXOBi-TeQAAAcU"]
[Sat Apr 18 10:38:35.566320 2026] [:error] [pid 34290:tid 34329] [client 20.166.51.62:19968] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xxx.php"] [unique_id "aeLuqxqX6WpmmAXOBi-TgAAAAco"]
[Sat Apr 18 10:38:36.361167 2026] [:error] [pid 13023:tid 13049] [client 20.166.51.62:20486] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xxx.php"] [unique_id "aeLurP1e7hG8DAeABB94bQAAARg"]
[Sat Apr 18 10:38:37.327876 2026] [:error] [pid 13023:tid 13026] [client 20.166.51.62:1442] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wen.php"] [unique_id "aeLurf1e7hG8DAeABB94cAAAAQE"]
[Sat Apr 18 10:38:38.417965 2026] [:error] [pid 9863:tid 9888] [client 20.166.51.62:19970] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wen.php"] [unique_id "aeLurjjjiypiFrTucbJbNAAAAA8"]
[Sat Apr 18 10:38:40.159610 2026] [:error] [pid 9865:tid 9939] [client 20.166.51.62:18955] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wen.php"] [unique_id "aeLusKzb5knECIY-C-j8sAAAAII"]
[Sat Apr 18 10:38:41.233695 2026] [:error] [pid 13023:tid 13045] [client 20.166.51.62:19575] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wen.php"] [unique_id "aeLusf1e7hG8DAeABB94dwAAARQ"]
[Sat Apr 18 10:38:42.093162 2026] [:error] [pid 34288:tid 34313] [client 20.166.51.62:19975] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bnm.php"] [unique_id "aeLusuTIiy__PtiLmpl7IQAAAZU"]
[Sat Apr 18 10:38:42.899820 2026] [:error] [pid 34290:tid 34326] [client 20.166.51.62:17140] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bnm.php"] [unique_id "aeLushqX6WpmmAXOBi-TqAAAAcc"]
[Sat Apr 18 10:38:44.213353 2026] [:error] [pid 34290:tid 34321] [client 20.166.51.62:18992] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bnm.php"] [unique_id "aeLutBqX6WpmmAXOBi-TrgAAAcI"]
[Sat Apr 18 10:38:45.277250 2026] [:error] [pid 9970:tid 9981] [client 20.166.51.62:17111] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bnm.php"] [unique_id "aeLutSYdRLRhVmaIMx0wVQAAAMc"]
[Sat Apr 18 10:38:46.217351 2026] [:error] [pid 9865:tid 9938] [client 20.166.51.62:10503] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeLutqzb5knECIY-C-j8sgAAAIE"]
[Sat Apr 18 10:38:47.132393 2026] [:error] [pid 13023:tid 13035] [client 20.166.51.62:19520] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeLut_1e7hG8DAeABB94eQAAAQo"]
[Sat Apr 18 10:38:47.841778 2026] [:error] [pid 34288:tid 34298] [client 20.166.51.62:19573] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeLut-TIiy__PtiLmpl7LQAAAYY"]
[Sat Apr 18 10:38:48.779529 2026] [:error] [pid 9864:tid 9917] [client 20.166.51.62:19991] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeLuuICFeowknfXHM7luzgAAAEs"]
[Sat Apr 18 10:38:49.708423 2026] [:error] [pid 34290:tid 34336] [client 20.166.51.62:37522] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/byypas.php"] [unique_id "aeLuuRqX6WpmmAXOBi-TwQAAAdE"]
[Sat Apr 18 10:38:50.667996 2026] [:error] [pid 9970:tid 9980] [client 20.166.51.62:10584] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/byypas.php"] [unique_id "aeLuuiYdRLRhVmaIMx0wWQAAAMY"]
[Sat Apr 18 10:38:52.132802 2026] [:error] [pid 9970:tid 9996] [client 20.166.51.62:20013] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/byypas.php"] [unique_id "aeLuvCYdRLRhVmaIMx0wWgAAANY"]
[Sat Apr 18 10:38:53.639392 2026] [:error] [pid 9863:tid 9873] [client 20.166.51.62:28343] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/byypas.php"] [unique_id "aeLuvTjjiypiFrTucbJbQwAAAAA"]
[Sat Apr 18 10:38:54.953456 2026] [:error] [pid 34290:tid 34343] [client 20.166.51.62:5174] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hplfuns.php"] [unique_id "aeLuvhqX6WpmmAXOBi-T2gAAAdg"]
[Sat Apr 18 10:38:56.209124 2026] [:error] [pid 9863:tid 9886] [client 20.166.51.62:21159] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hplfuns.php"] [unique_id "aeLuwDjjiypiFrTucbJbRgAAAA0"]
[Sat Apr 18 10:38:57.775546 2026] [:error] [pid 13023:tid 13025] [client 20.166.51.62:37520] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hplfuns.php"] [unique_id "aeLuwf1e7hG8DAeABB94hQAAAQA"]
[Sat Apr 18 10:39:01.787906 2026] [:error] [pid 9970:tid 9991] [client 20.166.51.62:20496] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hplfuns.php"] [unique_id "aeLuxSYdRLRhVmaIMx0wZgAAANE"]
[Sat Apr 18 10:39:03.412793 2026] [:error] [pid 9864:tid 9908] [client 20.166.51.62:1441] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/grsiuk.php"] [unique_id "aeLux4CFeowknfXHM7lu0QAAAEM"]
[Sat Apr 18 10:39:05.036279 2026] [:error] [pid 9865:tid 9955] [client 20.166.51.62:17397] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/grsiuk.php"] [unique_id "aeLuyazb5knECIY-C-j8uAAAAJI"]
[Sat Apr 18 10:39:07.809159 2026] [:error] [pid 9970:tid 9979] [client 20.166.51.62:17380] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/grsiuk.php"] [unique_id "aeLuyyYdRLRhVmaIMx0wcgAAAMU"]
[Sat Apr 18 10:39:10.571934 2026] [:error] [pid 9863:tid 9895] [client 20.166.51.62:9734] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/grsiuk.php"] [unique_id "aeLuzjjjiypiFrTucbJbTgAAABY"]
[Sat Apr 18 10:39:14.563588 2026] [:error] [pid 9865:tid 9956] [client 20.166.51.62:17381] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gifclass.php"] [unique_id "aeLu0qzb5knECIY-C-j8wQAAAJM"]
[Sat Apr 18 10:39:16.842763 2026] [:error] [pid 9864:tid 9923] [client 20.166.51.62:20945] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gifclass.php"] [unique_id "aeLu1ICFeowknfXHM7lu2wAAAFE"]
[Sat Apr 18 10:39:18.306710 2026] [:error] [pid 9970:tid 9978] [client 20.166.51.62:21161] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gifclass.php"] [unique_id "aeLu1iYdRLRhVmaIMx0wjQAAAMQ"]
[Sat Apr 18 10:39:19.550019 2026] [:error] [pid 9970:tid 9976] [client 20.166.51.62:17401] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gifclass.php"] [unique_id "aeLu1yYdRLRhVmaIMx0wjgAAAMI"]
[Sat Apr 18 10:39:21.102338 2026] [:error] [pid 34290:tid 34337] [client 20.166.51.62:10673] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a4.php"] [unique_id "aeLu2RqX6WpmmAXOBi-UGgAAAdI"]
[Sat Apr 18 10:39:22.686185 2026] [:error] [pid 9863:tid 9893] [client 20.166.51.62:32033] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a4.php"] [unique_id "aeLu2jjjiypiFrTucbJbWgAAABQ"]
[Sat Apr 18 10:39:23.939175 2026] [:error] [pid 34290:tid 34330] [client 20.166.51.62:1334] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a4.php"] [unique_id "aeLu2xqX6WpmmAXOBi-UNgAAAcs"]
[Sat Apr 18 10:39:25.251411 2026] [proxy_fcgi:error] [pid 34290:tid 34332] [client 20.166.51.62:7359] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 10:39:25.515853 2026] [proxy_fcgi:error] [pid 34290:tid 34341] [client 20.166.51.62:7359] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 10:39:25.783828 2026] [proxy_fcgi:error] [pid 34290:tid 34335] [client 20.166.51.62:7359] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 10:39:26.037686 2026] [proxy_fcgi:error] [pid 34290:tid 34323] [client 20.166.51.62:7359] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 10:39:26.299587 2026] [proxy_fcgi:error] [pid 34290:tid 34343] [client 20.166.51.62:7359] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 10:39:27.511396 2026] [proxy_fcgi:error] [pid 34290:tid 34334] [client 20.166.51.62:7359] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 10:39:27.791635 2026] [proxy_fcgi:error] [pid 34290:tid 34333] [client 20.166.51.62:7359] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 10:39:28.047688 2026] [proxy_fcgi:error] [pid 34290:tid 34320] [client 20.166.51.62:7359] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 10:39:28.302014 2026] [proxy_fcgi:error] [pid 34290:tid 34342] [client 20.166.51.62:7359] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 10:39:28.555894 2026] [proxy_fcgi:error] [pid 34290:tid 34325] [client 20.166.51.62:7359] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 10:39:28.809483 2026] [proxy_fcgi:error] [pid 34290:tid 34321] [client 20.166.51.62:7359] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 10:39:29.058787 2026] [:error] [pid 34290:tid 34328] [client 20.166.51.62:7359] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws88.php"] [unique_id "aeLu4RqX6WpmmAXOBi-UUgAAAck"]
[Sat Apr 18 10:39:29.929525 2026] [:error] [pid 34290:tid 34326] [client 20.166.51.62:17406] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws88.php"] [unique_id "aeLu4RqX6WpmmAXOBi-UVAAAAcc"]
[Sat Apr 18 10:39:30.852644 2026] [:error] [pid 34290:tid 34333] [client 20.166.51.62:35514] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws88.php"] [unique_id "aeLu4hqX6WpmmAXOBi-UWgAAAc4"]
[Sat Apr 18 10:39:31.831846 2026] [:error] [pid 9863:tid 9889] [client 20.166.51.62:20950] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws88.php"] [unique_id "aeLu4zjjiypiFrTucbJbaAAAABA"]
[Sat Apr 18 10:39:32.645464 2026] [:error] [pid 9863:tid 9881] [client 20.166.51.62:10624] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mode.php"] [unique_id "aeLu5DjjiypiFrTucbJbaQAAAAg"]
[Sat Apr 18 10:39:33.511122 2026] [:error] [pid 9865:tid 9941] [client 20.166.51.62:36912] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mode.php"] [unique_id "aeLu5azb5knECIY-C-j80wAAAIQ"]
[Sat Apr 18 10:39:34.289579 2026] [:error] [pid 9863:tid 9875] [client 20.166.51.62:10671] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mode.php"] [unique_id "aeLu5jjjiypiFrTucbJbeQAAAAI"]
[Sat Apr 18 10:39:35.027979 2026] [:error] [pid 34290:tid 34325] [client 20.166.51.62:6222] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mode.php"] [unique_id "aeLu5xqX6WpmmAXOBi-UaQAAAcY"]
[Sat Apr 18 10:39:35.694802 2026] [:error] [pid 34290:tid 34330] [client 20.166.51.62:35188] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/set.php"] [unique_id "aeLu5xqX6WpmmAXOBi-UcQAAAcs"]
[Sat Apr 18 10:39:36.940163 2026] [:error] [pid 9970:tid 9989] [client 20.166.51.62:6308] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/set.php"] [unique_id "aeLu6CYdRLRhVmaIMx0wqQAAAM8"]
[Sat Apr 18 10:39:39.502323 2026] [:error] [pid 9970:tid 9975] [client 20.166.51.62:24497] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/set.php"] [unique_id "aeLu6yYdRLRhVmaIMx0wuwAAAME"]
[Sat Apr 18 10:39:41.030022 2026] [:error] [pid 34237:tid 34254] [client 20.166.51.62:15531] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/set.php"] [unique_id "aeLu7RBmX4Wq5a6rxfYZIgAAAU8"]
[Sat Apr 18 10:39:43.848546 2026] [:error] [pid 34288:tid 34315] [client 20.166.51.62:6227] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hroxw.php"] [unique_id "aeLu7-TIiy__PtiLmpl7ZwAAAZc"]
[Sat Apr 18 10:39:45.248638 2026] [:error] [pid 34288:tid 34294] [client 20.166.51.62:35467] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hroxw.php"] [unique_id "aeLu8eTIiy__PtiLmpl7awAAAYI"]
[Sat Apr 18 10:39:46.532942 2026] [:error] [pid 9970:tid 9995] [client 20.166.51.62:1794] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hroxw.php"] [unique_id "aeLu8iYdRLRhVmaIMx0w0gAAANU"]
[Sat Apr 18 10:39:47.750993 2026] [:error] [pid 9970:tid 9975] [client 20.166.51.62:15498] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hroxw.php"] [unique_id "aeLu8yYdRLRhVmaIMx0w1gAAAME"]
[Sat Apr 18 10:39:48.535164 2026] [:error] [pid 13023:tid 13040] [client 20.166.51.62:18247] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ok.php"] [unique_id "aeLu9P1e7hG8DAeABB94xAAAAQ8"]
[Sat Apr 18 10:39:49.347826 2026] [:error] [pid 9864:tid 9916] [client 20.166.51.62:21297] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ok.php"] [unique_id "aeLu9YCFeowknfXHM7lvBwAAAEo"]
[Sat Apr 18 10:39:50.201257 2026] [:error] [pid 13023:tid 13035] [client 20.166.51.62:24476] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ok.php"] [unique_id "aeLu9v1e7hG8DAeABB94zQAAAQo"]
[Sat Apr 18 10:39:50.966861 2026] [:error] [pid 34290:tid 34342] [client 20.166.51.62:35501] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ok.php"] [unique_id "aeLu9hqX6WpmmAXOBi-UngAAAdc"]
[Sat Apr 18 10:39:51.608961 2026] [:error] [pid 34237:tid 34252] [client 20.166.51.62:18285] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zoo.php"] [unique_id "aeLu9xBmX4Wq5a6rxfYZKwAAAU0"]
[Sat Apr 18 10:39:52.495430 2026] [:error] [pid 34237:tid 34256] [client 20.166.51.62:6208] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zoo.php"] [unique_id "aeLu-BBmX4Wq5a6rxfYZLQAAAVE"]
[Sat Apr 18 10:39:53.487848 2026] [:error] [pid 34237:tid 34243] [client 20.166.51.62:24481] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zoo.php"] [unique_id "aeLu-RBmX4Wq5a6rxfYZLgAAAUQ"]
[Sat Apr 18 10:39:54.305268 2026] [:error] [pid 9865:tid 9958] [client 20.166.51.62:36951] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zoo.php"] [unique_id "aeLu-qzb5knECIY-C-j89gAAAJU"]
[Sat Apr 18 10:39:55.144894 2026] [:error] [pid 34290:tid 34321] [client 20.166.51.62:10400] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gaza.php"] [unique_id "aeLu-xqX6WpmmAXOBi-UpQAAAcI"]
[Sat Apr 18 10:39:56.205444 2026] [:error] [pid 9970:tid 9998] [client 20.166.51.62:7296] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gaza.php"] [unique_id "aeLu_CYdRLRhVmaIMx0w5QAAANg"]
[Sat Apr 18 10:39:57.394298 2026] [:error] [pid 34290:tid 34327] [client 20.166.51.62:37329] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gaza.php"] [unique_id "aeLu_RqX6WpmmAXOBi-UqQAAAcg"]
[Sat Apr 18 10:39:58.052920 2026] [:error] [pid 34237:tid 34248] [client 20.166.51.62:18280] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gaza.php"] [unique_id "aeLu_hBmX4Wq5a6rxfYZNwAAAUk"]
[Sat Apr 18 10:39:59.648962 2026] [:error] [pid 34288:tid 34315] [client 20.166.51.62:19101] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/retu11.PhP7"] [unique_id "aeLu_-TIiy__PtiLmpl7ggAAAZc"]
[Sat Apr 18 10:40:01.388617 2026] [:error] [pid 9970:tid 9994] [client 20.166.51.62:37422] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/retu11.PhP7"] [unique_id "aeLvASYdRLRhVmaIMx0w-QAAANQ"]
[Sat Apr 18 10:40:02.603164 2026] [:error] [pid 9863:tid 9894] [client 20.166.51.62:36950] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/retu11.PhP7"] [unique_id "aeLvAjjjiypiFrTucbJbzAAAABU"]
[Sat Apr 18 10:40:03.819956 2026] [:error] [pid 34290:tid 34338] [client 20.166.51.62:6236] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/retu11.PhP7"] [unique_id "aeLvAxqX6WpmmAXOBi-UxQAAAdM"]
[Sat Apr 18 10:40:04.726732 2026] [:error] [pid 34290:tid 34319] [client 20.166.51.62:36962] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ioxi001.PhP7"] [unique_id "aeLvBBqX6WpmmAXOBi-UzAAAAcA"]
[Sat Apr 18 10:40:05.559754 2026] [:error] [pid 34290:tid 34337] [client 20.166.51.62:19068] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ioxi001.PhP7"] [unique_id "aeLvBRqX6WpmmAXOBi-U0AAAAdI"]
[Sat Apr 18 10:40:06.598729 2026] [:error] [pid 34290:tid 34341] [client 20.166.51.62:10398] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ioxi001.PhP7"] [unique_id "aeLvBhqX6WpmmAXOBi-U1QAAAdY"]
[Sat Apr 18 10:40:07.628536 2026] [:error] [pid 34290:tid 34337] [client 20.166.51.62:36956] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ioxi001.PhP7"] [unique_id "aeLvBxqX6WpmmAXOBi-U2QAAAdI"]
[Sat Apr 18 10:40:09.722141 2026] [:error] [pid 9865:tid 9942] [client 20.166.51.62:24448] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mk.php"] [unique_id "aeLvCazb5knECIY-C-j8_AAAAIU"]
[Sat Apr 18 10:40:13.547345 2026] [:error] [pid 34290:tid 34336] [client 20.166.51.62:1801] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mk.php"] [unique_id "aeLvDRqX6WpmmAXOBi-U-wAAAdE"]
[Sat Apr 18 10:40:17.073099 2026] [:error] [pid 34290:tid 34337] [client 20.166.51.62:37331] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mk.php"] [unique_id "aeLvERqX6WpmmAXOBi-VFQAAAdI"]
[Sat Apr 18 10:40:18.860103 2026] [:error] [pid 13023:tid 13025] [client 20.166.51.62:1091] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mk.php"] [unique_id "aeLvEv1e7hG8DAeABB945AAAAQA"]
[Sat Apr 18 10:40:20.491279 2026] [:error] [pid 34288:tid 34306] [client 20.166.51.62:10368] [client 20.166.51.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dwelectservices.com.au"] [uri "/fm.php"] [unique_id "aeLvFOTIiy__PtiLmpl7kwAAAY4"]
[Sat Apr 18 16:09:39.624582 2026] [:error] [pid 34290:tid 34341] [client 136.117.61.90:52094] [client 136.117.61.90] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.117.61.90, incrementing ddos counter"] [hostname "dwelectservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aeM8QxqX6WpmmAXOBi_WpAAAAdY"]
[Sat Apr 18 16:09:39.635756 2026] [proxy_fcgi:error] [pid 34290:tid 34341] [client 136.117.61.90:52094] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 16:09:41.645857 2026] [:error] [pid 34290:tid 34331] [client 136.117.61.90:52094] [client 136.117.61.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aeM8RRqX6WpmmAXOBi_WrwAAAcw"]
[Sat Apr 18 16:09:42.440800 2026] [:error] [pid 13023:tid 13036] [client 136.117.61.90:53131] [client 136.117.61.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aeM8Rv1e7hG8DAeABB_LywAAAQs"]
[Sat Apr 18 16:09:43.219605 2026] [:error] [pid 13023:tid 13045] [client 136.117.61.90:53121] [client 136.117.61.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aeM8R_1e7hG8DAeABB_LzwAAARQ"]
[Sat Apr 18 16:09:43.948259 2026] [:error] [pid 34288:tid 34312] [client 136.117.61.90:56356] [client 136.117.61.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aeM8R-TIiy__PtiLmpm1bwAAAZQ"]
[Sat Apr 18 16:09:44.526833 2026] [:error] [pid 34288:tid 34306] [client 136.117.61.90:53130] [client 136.117.61.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aeM8SOTIiy__PtiLmpm1cAAAAY4"]
[Sat Apr 18 16:09:45.072219 2026] [:error] [pid 34288:tid 34303] [client 136.117.61.90:53678] [client 136.117.61.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aeM8SeTIiy__PtiLmpm1cgAAAYs"]
[Sat Apr 18 16:09:45.449706 2026] [:error] [pid 9863:tid 9885] [client 136.117.61.90:64052] [client 136.117.61.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aeM8STjjiypiFrTucbKp7wAAAAw"]
[Sat Apr 18 17:18:38.982482 2026] [proxy_fcgi:error] [pid 13023:tid 13045] [client 52.236.80.95:62595] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:18:39.253730 2026] [proxy_fcgi:error] [pid 13023:tid 13027] [client 52.236.80.95:62595] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:18:39.542620 2026] [proxy_fcgi:error] [pid 13023:tid 13049] [client 52.236.80.95:62595] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:18:39.813969 2026] [proxy_fcgi:error] [pid 13023:tid 13033] [client 52.236.80.95:62595] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:18:40.085103 2026] [proxy_fcgi:error] [pid 13023:tid 13040] [client 52.236.80.95:62595] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:18:40.401449 2026] [proxy_fcgi:error] [pid 13023:tid 13048] [client 52.236.80.95:62595] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:18:40.675426 2026] [proxy_fcgi:error] [pid 13023:tid 13044] [client 52.236.80.95:62595] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:18:40.947331 2026] [proxy_fcgi:error] [pid 13023:tid 13046] [client 52.236.80.95:62595] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:18:41.217832 2026] [proxy_fcgi:error] [pid 13023:tid 13029] [client 52.236.80.95:62595] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:18:41.487850 2026] [proxy_fcgi:error] [pid 13023:tid 13037] [client 52.236.80.95:62595] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:18:41.810911 2026] [:error] [pid 13023:tid 13042] [client 52.236.80.95:62595] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/eursi.php"] [unique_id "aeNMcf1e7hG8DAeABB_ZggAAARE"]
[Sat Apr 18 17:18:47.606807 2026] [:error] [pid 34237:tid 34256] [client 52.236.80.95:64031] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/eursi.php"] [unique_id "aeNMdxBmX4Wq5a6rxfZYmwAAAVE"]
[Sat Apr 18 17:18:54.677886 2026] [:error] [pid 9970:tid 9980] [client 52.236.80.95:63158] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/eursi.php"] [unique_id "aeNMfiYdRLRhVmaIMx2NAgAAAMY"]
[Sat Apr 18 17:20:01.672217 2026] [proxy_fcgi:error] [pid 13023:tid 13035] [client 52.236.80.95:64675] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:20:01.927660 2026] [proxy_fcgi:error] [pid 13023:tid 13040] [client 52.236.80.95:64675] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:20:02.215967 2026] [proxy_fcgi:error] [pid 13023:tid 13049] [client 52.236.80.95:64675] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:20:02.470144 2026] [proxy_fcgi:error] [pid 13023:tid 13030] [client 52.236.80.95:64675] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:20:02.722319 2026] [proxy_fcgi:error] [pid 13023:tid 13041] [client 52.236.80.95:64675] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:20:03.058963 2026] [proxy_fcgi:error] [pid 13023:tid 13032] [client 52.236.80.95:64675] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:20:03.318405 2026] [proxy_fcgi:error] [pid 13023:tid 13027] [client 52.236.80.95:64675] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:20:03.584992 2026] [proxy_fcgi:error] [pid 13023:tid 13046] [client 52.236.80.95:64675] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:20:04.859820 2026] [proxy_fcgi:error] [pid 13023:tid 13033] [client 52.236.80.95:64675] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:20:05.133143 2026] [proxy_fcgi:error] [pid 13023:tid 13025] [client 52.236.80.95:64675] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:20:05.429647 2026] [proxy_fcgi:error] [pid 13023:tid 13042] [client 52.236.80.95:64675] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:20:05.693873 2026] [:error] [pid 13023:tid 13039] [client 52.236.80.95:64675] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ww.php"] [unique_id "aeNMxf1e7hG8DAeABB_Z-AAAAQ4"]
[Sat Apr 18 17:20:06.301363 2026] [:error] [pid 9864:tid 9915] [client 52.236.80.95:64587] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ww.php"] [unique_id "aeNMxoCFeowknfXHM7nZBwAAAEk"]
[Sat Apr 18 17:20:06.883496 2026] [:error] [pid 9864:tid 9909] [client 52.236.80.95:63580] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ww.php"] [unique_id "aeNMxoCFeowknfXHM7nZCQAAAEQ"]
[Sat Apr 18 17:20:07.452947 2026] [:error] [pid 9864:tid 9905] [client 52.236.80.95:65157] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ww.php"] [unique_id "aeNMx4CFeowknfXHM7nZCwAAAEA"]
[Sat Apr 18 17:20:08.183706 2026] [:error] [pid 34237:tid 34251] [client 52.236.80.95:64632] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/motu.php"] [unique_id "aeNMyBBmX4Wq5a6rxfZZtQAAAUw"]
[Sat Apr 18 17:20:08.739016 2026] [:error] [pid 34237:tid 34255] [client 52.236.80.95:64576] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/motu.php"] [unique_id "aeNMyBBmX4Wq5a6rxfZZuwAAAVA"]
[Sat Apr 18 17:20:09.344573 2026] [:error] [pid 34237:tid 34258] [client 52.236.80.95:65117] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/motu.php"] [unique_id "aeNMyRBmX4Wq5a6rxfZZwAAAAVM"]
[Sat Apr 18 17:20:09.882922 2026] [:error] [pid 13023:tid 13027] [client 52.236.80.95:63978] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/motu.php"] [unique_id "aeNMyf1e7hG8DAeABB_Z_AAAAQI"]
[Sat Apr 18 17:20:10.426343 2026] [:error] [pid 9864:tid 9926] [client 52.236.80.95:63629] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/elp.php"] [unique_id "aeNMyoCFeowknfXHM7nZDwAAAFQ"]
[Sat Apr 18 17:20:11.048944 2026] [:error] [pid 9864:tid 9916] [client 52.236.80.95:63989] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/elp.php"] [unique_id "aeNMy4CFeowknfXHM7nZEQAAAEo"]
[Sat Apr 18 17:20:11.603547 2026] [:error] [pid 34237:tid 34246] [client 52.236.80.95:65135] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/elp.php"] [unique_id "aeNMyxBmX4Wq5a6rxfZZygAAAUc"]
[Sat Apr 18 17:20:12.151828 2026] [:error] [pid 9863:tid 9889] [client 52.236.80.95:63051] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/elp.php"] [unique_id "aeNMzDjjiypiFrTucbKz0AAAABA"]
[Sat Apr 18 17:20:12.743469 2026] [:error] [pid 9863:tid 9885] [client 52.236.80.95:63138] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mjq.php"] [unique_id "aeNMzDjjiypiFrTucbKz0gAAAAw"]
[Sat Apr 18 17:20:13.317558 2026] [:error] [pid 34288:tid 34309] [client 52.236.80.95:64590] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mjq.php"] [unique_id "aeNMzeTIiy__PtiLmpm9wQAAAZE"]
[Sat Apr 18 17:20:13.901955 2026] [:error] [pid 34237:tid 34249] [client 52.236.80.95:63977] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mjq.php"] [unique_id "aeNMzRBmX4Wq5a6rxfZZzQAAAUo"]
[Sat Apr 18 17:20:14.425322 2026] [:error] [pid 13023:tid 13044] [client 52.236.80.95:64656] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mjq.php"] [unique_id "aeNMzv1e7hG8DAeABB_Z_gAAARM"]
[Sat Apr 18 17:20:14.952955 2026] [:error] [pid 9865:tid 9946] [client 52.236.80.95:63599] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zu.php"] [unique_id "aeNMzqzb5knECIY-C-hj-gAAAIk"]
[Sat Apr 18 17:20:15.471232 2026] [:error] [pid 34237:tid 34248] [client 52.236.80.95:64661] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zu.php"] [unique_id "aeNMzxBmX4Wq5a6rxfZZ0AAAAUk"]
[Sat Apr 18 17:20:16.056410 2026] [:error] [pid 34290:tid 34327] [client 52.236.80.95:64628] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zu.php"] [unique_id "aeNM0BqX6WpmmAXOBi_nRAAAAcg"]
[Sat Apr 18 17:20:16.599487 2026] [:error] [pid 9970:tid 9992] [client 52.236.80.95:64607] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zu.php"] [unique_id "aeNM0CYdRLRhVmaIMx2NhAAAANI"]
[Sat Apr 18 17:20:17.150165 2026] [:error] [pid 34290:tid 34329] [client 52.236.80.95:65115] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws53.php"] [unique_id "aeNM0RqX6WpmmAXOBi_nRwAAAco"]
[Sat Apr 18 17:20:17.691521 2026] [:error] [pid 9863:tid 9878] [client 52.236.80.95:63150] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws53.php"] [unique_id "aeNM0TjjiypiFrTucbKz1gAAAAU"]
[Sat Apr 18 17:20:18.325096 2026] [:error] [pid 34288:tid 34312] [client 52.236.80.95:65158] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws53.php"] [unique_id "aeNM0uTIiy__PtiLmpm9wgAAAZQ"]
[Sat Apr 18 17:20:19.014736 2026] [:error] [pid 34290:tid 34337] [client 52.236.80.95:63149] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws53.php"] [unique_id "aeNM0xqX6WpmmAXOBi_nSQAAAdI"]
[Sat Apr 18 17:20:19.569585 2026] [:error] [pid 34237:tid 34244] [client 52.236.80.95:65099] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws56.php"] [unique_id "aeNM0xBmX4Wq5a6rxfZaAQAAAUU"]
[Sat Apr 18 17:20:20.167828 2026] [:error] [pid 34237:tid 34257] [client 52.236.80.95:63572] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws56.php"] [unique_id "aeNM1BBmX4Wq5a6rxfZaAwAAAVI"]
[Sat Apr 18 17:20:20.689199 2026] [:error] [pid 9863:tid 9892] [client 52.236.80.95:62593] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws56.php"] [unique_id "aeNM1DjjiypiFrTucbKz1wAAABM"]
[Sat Apr 18 17:20:21.237979 2026] [:error] [pid 34237:tid 34259] [client 52.236.80.95:65103] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws56.php"] [unique_id "aeNM1RBmX4Wq5a6rxfZaBwAAAVQ"]
[Sat Apr 18 17:20:21.805466 2026] [:error] [pid 13023:tid 13025] [client 52.236.80.95:63131] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws58.php"] [unique_id "aeNM1f1e7hG8DAeABB_aAAAAAQA"]
[Sat Apr 18 17:20:22.373648 2026] [:error] [pid 9970:tid 9977] [client 52.236.80.95:64600] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws58.php"] [unique_id "aeNM1iYdRLRhVmaIMx2NhwAAAMM"]
[Sat Apr 18 17:20:22.900718 2026] [:error] [pid 34288:tid 34299] [client 52.236.80.95:63042] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws58.php"] [unique_id "aeNM1uTIiy__PtiLmpm9xgAAAYc"]
[Sat Apr 18 17:20:23.448063 2026] [:error] [pid 34237:tid 34247] [client 52.236.80.95:63084] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws58.php"] [unique_id "aeNM1xBmX4Wq5a6rxfZaCAAAAUg"]
[Sat Apr 18 17:20:24.031468 2026] [:error] [pid 9863:tid 9896] [client 52.236.80.95:63675] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws59.php"] [unique_id "aeNM2DjjiypiFrTucbKz2gAAABc"]
[Sat Apr 18 17:20:24.576178 2026] [:error] [pid 34288:tid 34294] [client 52.236.80.95:63562] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws59.php"] [unique_id "aeNM2OTIiy__PtiLmpm9yAAAAYI"]
[Sat Apr 18 17:20:25.145361 2026] [:error] [pid 9863:tid 9883] [client 52.236.80.95:63596] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws59.php"] [unique_id "aeNM2TjjiypiFrTucbKz2wAAAAo"]
[Sat Apr 18 17:20:25.689493 2026] [:error] [pid 34290:tid 34331] [client 52.236.80.95:63068] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws59.php"] [unique_id "aeNM2RqX6WpmmAXOBi_nSwAAAcw"]
[Sat Apr 18 17:20:26.278364 2026] [:error] [pid 34237:tid 34243] [client 52.236.80.95:64055] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/utchiha_O1JFaUaF.php"] [unique_id "aeNM2hBmX4Wq5a6rxfZaDgAAAUQ"]
[Sat Apr 18 17:20:26.837504 2026] [:error] [pid 9864:tid 9928] [client 52.236.80.95:65193] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/utchiha_O1JFaUaF.php"] [unique_id "aeNM2oCFeowknfXHM7nZLAAAAFY"]
[Sat Apr 18 17:20:27.412611 2026] [:error] [pid 34237:tid 34262] [client 52.236.80.95:63155] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/utchiha_O1JFaUaF.php"] [unique_id "aeNM2xBmX4Wq5a6rxfZaEQAAAVc"]
[Sat Apr 18 17:20:27.951651 2026] [:error] [pid 9970:tid 9989] [client 52.236.80.95:63940] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/utchiha_O1JFaUaF.php"] [unique_id "aeNM2yYdRLRhVmaIMx2NjgAAAM8"]
[Sat Apr 18 17:20:28.449690 2026] [:error] [pid 13023:tid 13049] [client 52.236.80.95:64010] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mga.php"] [unique_id "aeNM3P1e7hG8DAeABB_aCQAAARg"]
[Sat Apr 18 17:20:28.974079 2026] [:error] [pid 13023:tid 13027] [client 52.236.80.95:63640] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mga.php"] [unique_id "aeNM3P1e7hG8DAeABB_aCgAAAQI"]
[Sat Apr 18 17:20:29.496441 2026] [:error] [pid 9864:tid 9914] [client 52.236.80.95:64611] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mga.php"] [unique_id "aeNM3YCFeowknfXHM7nZLQAAAEg"]
[Sat Apr 18 17:20:30.342167 2026] [:error] [pid 9863:tid 9880] [client 52.236.80.95:63058] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mga.php"] [unique_id "aeNM3jjjiypiFrTucbKz3wAAAAc"]
[Sat Apr 18 17:20:30.935365 2026] [:error] [pid 34237:tid 34261] [client 52.236.80.95:63979] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mds.php"] [unique_id "aeNM3hBmX4Wq5a6rxfZaEwAAAVY"]
[Sat Apr 18 17:20:31.555875 2026] [:error] [pid 9864:tid 9929] [client 52.236.80.95:64600] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mds.php"] [unique_id "aeNM34CFeowknfXHM7nZLwAAAFc"]
[Sat Apr 18 17:20:32.058435 2026] [:error] [pid 9865:tid 9961] [client 52.236.80.95:63958] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mds.php"] [unique_id "aeNM4Kzb5knECIY-C-hkBQAAAJg"]
[Sat Apr 18 17:20:32.630498 2026] [:error] [pid 9864:tid 9924] [client 52.236.80.95:63620] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mds.php"] [unique_id "aeNM4ICFeowknfXHM7nZMAAAAFI"]
[Sat Apr 18 17:20:33.225875 2026] [:error] [pid 9864:tid 9912] [client 52.236.80.95:63988] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/auth.php"] [unique_id "aeNM4YCFeowknfXHM7nZMwAAAEY"]
[Sat Apr 18 17:20:33.818433 2026] [:error] [pid 9864:tid 9918] [client 52.236.80.95:62604] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/auth.php"] [unique_id "aeNM4YCFeowknfXHM7nZNgAAAEw"]
[Sat Apr 18 17:20:34.425897 2026] [:error] [pid 9864:tid 9920] [client 52.236.80.95:63644] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/auth.php"] [unique_id "aeNM4oCFeowknfXHM7nZOAAAAE4"]
[Sat Apr 18 17:20:34.975974 2026] [:error] [pid 9864:tid 9907] [client 52.236.80.95:60167] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/auth.php"] [unique_id "aeNM4oCFeowknfXHM7nZOQAAAEI"]
[Sat Apr 18 17:20:35.516349 2026] [:error] [pid 13023:tid 13044] [client 52.236.80.95:62603] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/iov.php"] [unique_id "aeNM4_1e7hG8DAeABB_aDwAAARM"]
[Sat Apr 18 17:20:36.061637 2026] [:error] [pid 34237:tid 34239] [client 52.236.80.95:63111] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/iov.php"] [unique_id "aeNM5BBmX4Wq5a6rxfZaFwAAAUA"]
[Sat Apr 18 17:20:36.583636 2026] [:error] [pid 34237:tid 34246] [client 52.236.80.95:64701] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/iov.php"] [unique_id "aeNM5BBmX4Wq5a6rxfZaGAAAAUc"]
[Sat Apr 18 17:20:37.117692 2026] [:error] [pid 9970:tid 9991] [client 52.236.80.95:63671] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/iov.php"] [unique_id "aeNM5SYdRLRhVmaIMx2NmwAAANE"]
[Sat Apr 18 17:20:37.652736 2026] [:error] [pid 9864:tid 9927] [client 52.236.80.95:63076] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jodohghi.php"] [unique_id "aeNM5YCFeowknfXHM7nZPAAAAFU"]
[Sat Apr 18 17:20:38.285165 2026] [:error] [pid 9864:tid 9917] [client 52.236.80.95:65106] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jodohghi.php"] [unique_id "aeNM5oCFeowknfXHM7nZQAAAAEs"]
[Sat Apr 18 17:20:38.907125 2026] [:error] [pid 9970:tid 9976] [client 52.236.80.95:63630] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jodohghi.php"] [unique_id "aeNM5iYdRLRhVmaIMx2NnAAAAMI"]
[Sat Apr 18 17:20:39.464514 2026] [:error] [pid 9864:tid 9914] [client 52.236.80.95:64631] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jodohghi.php"] [unique_id "aeNM54CFeowknfXHM7nZQgAAAEg"]
[Sat Apr 18 17:20:40.005942 2026] [:error] [pid 13023:tid 13035] [client 52.236.80.95:64682] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lmlwpbmm.php"] [unique_id "aeNM6P1e7hG8DAeABB_aGgAAAQo"]
[Sat Apr 18 17:20:40.517254 2026] [:error] [pid 34288:tid 34310] [client 52.236.80.95:63972] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lmlwpbmm.php"] [unique_id "aeNM6OTIiy__PtiLmpm9zwAAAZI"]
[Sat Apr 18 17:20:41.066220 2026] [:error] [pid 13023:tid 13027] [client 52.236.80.95:63621] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lmlwpbmm.php"] [unique_id "aeNM6f1e7hG8DAeABB_aHAAAAQI"]
[Sat Apr 18 17:20:41.747515 2026] [:error] [pid 9864:tid 9926] [client 52.236.80.95:64658] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lmlwpbmm.php"] [unique_id "aeNM6YCFeowknfXHM7nZQwAAAFQ"]
[Sat Apr 18 17:20:42.513829 2026] [:error] [pid 9970:tid 9994] [client 52.236.80.95:65164] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/users.php"] [unique_id "aeNM6iYdRLRhVmaIMx2NnwAAANQ"]
[Sat Apr 18 17:20:43.152706 2026] [:error] [pid 9864:tid 9925] [client 52.236.80.95:65094] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/users.php"] [unique_id "aeNM64CFeowknfXHM7nZRwAAAFM"]
[Sat Apr 18 17:20:43.896756 2026] [:error] [pid 9865:tid 9942] [client 52.236.80.95:63614] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/users.php"] [unique_id "aeNM66zb5knECIY-C-hkBgAAAIU"]
[Sat Apr 18 17:20:44.721335 2026] [:error] [pid 9864:tid 9919] [client 52.236.80.95:62548] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/users.php"] [unique_id "aeNM7ICFeowknfXHM7nZSgAAAE0"]
[Sat Apr 18 17:20:45.269907 2026] [:error] [pid 9864:tid 9913] [client 52.236.80.95:65132] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ftde.php"] [unique_id "aeNM7YCFeowknfXHM7nZTAAAAEc"]
[Sat Apr 18 17:20:45.864685 2026] [:error] [pid 9970:tid 9995] [client 52.236.80.95:63570] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ftde.php"] [unique_id "aeNM7SYdRLRhVmaIMx2NpAAAANU"]
[Sat Apr 18 17:20:46.625006 2026] [:error] [pid 9865:tid 9950] [client 52.236.80.95:64644] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ftde.php"] [unique_id "aeNM7qzb5knECIY-C-hkCwAAAI0"]
[Sat Apr 18 17:20:47.244208 2026] [:error] [pid 9864:tid 9922] [client 52.236.80.95:65149] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ftde.php"] [unique_id "aeNM74CFeowknfXHM7nZUwAAAFA"]
[Sat Apr 18 17:20:48.118253 2026] [:error] [pid 9863:tid 9876] [client 52.236.80.95:65172] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kbfr.php"] [unique_id "aeNM8DjjiypiFrTucbKz6wAAAAM"]
[Sat Apr 18 17:20:48.888548 2026] [:error] [pid 34290:tid 34327] [client 52.236.80.95:63608] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kbfr.php"] [unique_id "aeNM8BqX6WpmmAXOBi_nUgAAAcg"]
[Sat Apr 18 17:20:49.573110 2026] [:error] [pid 9864:tid 9912] [client 52.236.80.95:63110] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kbfr.php"] [unique_id "aeNM8YCFeowknfXHM7nZWAAAAEY"]
[Sat Apr 18 17:20:51.035069 2026] [:error] [pid 9864:tid 9910] [client 52.236.80.95:63996] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kbfr.php"] [unique_id "aeNM84CFeowknfXHM7nZWQAAAEU"]
[Sat Apr 18 17:20:51.873905 2026] [:error] [pid 9865:tid 9956] [client 52.236.80.95:64063] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/abhjr.php"] [unique_id "aeNM86zb5knECIY-C-hkDgAAAJM"]
[Sat Apr 18 17:20:52.626652 2026] [:error] [pid 9864:tid 9913] [client 52.236.80.95:64012] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/abhjr.php"] [unique_id "aeNM9ICFeowknfXHM7nZXAAAAEc"]
[Sat Apr 18 17:20:53.365614 2026] [:error] [pid 34290:tid 34328] [client 52.236.80.95:64668] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/abhjr.php"] [unique_id "aeNM9RqX6WpmmAXOBi_nUwAAAck"]
[Sat Apr 18 17:20:54.063609 2026] [:error] [pid 34237:tid 34247] [client 52.236.80.95:64643] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/abhjr.php"] [unique_id "aeNM9hBmX4Wq5a6rxfZaNwAAAUg"]
[Sat Apr 18 17:20:54.762499 2026] [:error] [pid 34290:tid 34338] [client 52.236.80.95:63604] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/anczg.php"] [unique_id "aeNM9hqX6WpmmAXOBi_nVgAAAdM"]
[Sat Apr 18 17:20:55.347335 2026] [:error] [pid 34237:tid 34251] [client 52.236.80.95:62610] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/anczg.php"] [unique_id "aeNM9xBmX4Wq5a6rxfZaOwAAAUw"]
[Sat Apr 18 17:20:56.075723 2026] [:error] [pid 34290:tid 34330] [client 52.236.80.95:63663] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/anczg.php"] [unique_id "aeNM-BqX6WpmmAXOBi_nWwAAAcs"]
[Sat Apr 18 17:20:56.802817 2026] [:error] [pid 34237:tid 34249] [client 52.236.80.95:62605] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/anczg.php"] [unique_id "aeNM-BBmX4Wq5a6rxfZaQAAAAUo"]
[Sat Apr 18 17:20:57.412848 2026] [:error] [pid 34290:tid 34323] [client 52.236.80.95:63607] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ardsw.php"] [unique_id "aeNM-RqX6WpmmAXOBi_nXQAAAcQ"]
[Sat Apr 18 17:20:58.249967 2026] [:error] [pid 34237:tid 34242] [client 52.236.80.95:63668] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ardsw.php"] [unique_id "aeNM-hBmX4Wq5a6rxfZaRgAAAUM"]
[Sat Apr 18 17:20:58.962474 2026] [:error] [pid 34237:tid 34247] [client 52.236.80.95:64032] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ardsw.php"] [unique_id "aeNM-hBmX4Wq5a6rxfZaSwAAAUg"]
[Sat Apr 18 17:20:59.840146 2026] [:error] [pid 34237:tid 34262] [client 52.236.80.95:62048] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ardsw.php"] [unique_id "aeNM-xBmX4Wq5a6rxfZaTAAAAVc"]
[Sat Apr 18 17:21:00.658939 2026] [:error] [pid 34237:tid 34251] [client 52.236.80.95:62098] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/atfis.php"] [unique_id "aeNM_BBmX4Wq5a6rxfZaTwAAAUw"]
[Sat Apr 18 17:21:01.812696 2026] [:error] [pid 34237:tid 34244] [client 52.236.80.95:64586] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/atfis.php"] [unique_id "aeNM_RBmX4Wq5a6rxfZaUAAAAUU"]
[Sat Apr 18 17:21:02.571322 2026] [:error] [pid 34290:tid 34328] [client 52.236.80.95:63098] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/atfis.php"] [unique_id "aeNM_hqX6WpmmAXOBi_nZAAAAck"]
[Sat Apr 18 17:21:03.763954 2026] [:error] [pid 13023:tid 13029] [client 52.236.80.95:64007] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/atfis.php"] [unique_id "aeNM__1e7hG8DAeABB_aKQAAAQQ"]
[Sat Apr 18 17:21:04.452991 2026] [:error] [pid 34237:tid 34254] [client 52.236.80.95:65134] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/azpaq.php"] [unique_id "aeNNABBmX4Wq5a6rxfZaWQAAAU8"]
[Sat Apr 18 17:21:05.469227 2026] [proxy_fcgi:error] [pid 34237:tid 34253] [client 52.236.80.95:63062] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:21:05.793981 2026] [proxy_fcgi:error] [pid 34237:tid 34263] [client 52.236.80.95:63062] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:21:06.477226 2026] [proxy_fcgi:error] [pid 34237:tid 34262] [client 52.236.80.95:63062] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:21:06.746347 2026] [proxy_fcgi:error] [pid 34237:tid 34258] [client 52.236.80.95:63062] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:21:07.191036 2026] [proxy_fcgi:error] [pid 34237:tid 34246] [client 52.236.80.95:63062] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:21:07.461054 2026] [proxy_fcgi:error] [pid 34237:tid 34251] [client 52.236.80.95:63062] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:21:07.779232 2026] [proxy_fcgi:error] [pid 34237:tid 34256] [client 52.236.80.95:63062] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:21:08.127676 2026] [proxy_fcgi:error] [pid 34237:tid 34260] [client 52.236.80.95:63062] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:21:08.501753 2026] [proxy_fcgi:error] [pid 34237:tid 34252] [client 52.236.80.95:63062] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:21:08.784875 2026] [proxy_fcgi:error] [pid 34237:tid 34244] [client 52.236.80.95:63062] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:21:09.076127 2026] [proxy_fcgi:error] [pid 34237:tid 34255] [client 52.236.80.95:63062] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:21:09.608928 2026] [:error] [pid 34237:tid 34259] [client 52.236.80.95:63062] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dhjqs.php"] [unique_id "aeNNBRBmX4Wq5a6rxfZaZwAAAVQ"]
[Sat Apr 18 17:21:10.624364 2026] [:error] [pid 34288:tid 34314] [client 52.236.80.95:63648] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dhjqs.php"] [unique_id "aeNNBuTIiy__PtiLmpm93gAAAZY"]
[Sat Apr 18 17:21:12.434205 2026] [:error] [pid 9864:tid 9918] [client 52.236.80.95:62124] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dhjqs.php"] [unique_id "aeNNCICFeowknfXHM7nZYgAAAEw"]
[Sat Apr 18 17:21:13.404786 2026] [:error] [pid 34237:tid 34250] [client 52.236.80.95:65171] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dhjqs.php"] [unique_id "aeNNCRBmX4Wq5a6rxfZabAAAAUs"]
[Sat Apr 18 17:21:14.585037 2026] [:error] [pid 34237:tid 34253] [client 52.236.80.95:63052] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/diayd.php"] [unique_id "aeNNChBmX4Wq5a6rxfZabgAAAU4"]
[Sat Apr 18 17:21:15.391513 2026] [:error] [pid 13023:tid 13045] [client 52.236.80.95:65133] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/diayd.php"] [unique_id "aeNNC_1e7hG8DAeABB_aNQAAARQ"]
[Sat Apr 18 17:21:15.939291 2026] [:error] [pid 9863:tid 9876] [client 52.236.80.95:65179] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/diayd.php"] [unique_id "aeNNCzjjiypiFrTucbKz-wAAAAM"]
[Sat Apr 18 17:21:16.971071 2026] [:error] [pid 34237:tid 34262] [client 52.236.80.95:63951] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/diayd.php"] [unique_id "aeNNDBBmX4Wq5a6rxfZacAAAAVc"]
[Sat Apr 18 17:21:18.494200 2026] [:error] [pid 34237:tid 34256] [client 52.236.80.95:63982] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dljpy.php"] [unique_id "aeNNDhBmX4Wq5a6rxfZadAAAAVE"]
[Sat Apr 18 17:21:19.454892 2026] [:error] [pid 34237:tid 34241] [client 52.236.80.95:64695] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dljpy.php"] [unique_id "aeNNDxBmX4Wq5a6rxfZaewAAAUI"]
[Sat Apr 18 17:21:20.742105 2026] [:error] [pid 9864:tid 9910] [client 52.236.80.95:63619] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dljpy.php"] [unique_id "aeNNEICFeowknfXHM7nZZAAAAEU"]
[Sat Apr 18 17:21:21.898255 2026] [:error] [pid 34237:tid 34239] [client 52.236.80.95:64021] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dljpy.php"] [unique_id "aeNNERBmX4Wq5a6rxfZahwAAAUA"]
[Sat Apr 18 17:21:22.905022 2026] [:error] [pid 9970:tid 9984] [client 52.236.80.95:63976] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dqagu.php"] [unique_id "aeNNEiYdRLRhVmaIMx2NrgAAAMo"]
[Sat Apr 18 17:21:23.732107 2026] [:error] [pid 9970:tid 9994] [client 52.236.80.95:64638] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dqagu.php"] [unique_id "aeNNEyYdRLRhVmaIMx2NsQAAANQ"]
[Sat Apr 18 17:21:24.402274 2026] [:error] [pid 34237:tid 34255] [client 52.236.80.95:64647] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dqagu.php"] [unique_id "aeNNFBBmX4Wq5a6rxfZajAAAAVA"]
[Sat Apr 18 17:21:25.292610 2026] [:error] [pid 34237:tid 34241] [client 52.236.80.95:62608] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dqagu.php"] [unique_id "aeNNFRBmX4Wq5a6rxfZakAAAAUI"]
[Sat Apr 18 17:21:26.578712 2026] [:error] [pid 34237:tid 34254] [client 52.236.80.95:65109] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/druqr.php"] [unique_id "aeNNFhBmX4Wq5a6rxfZalwAAAU8"]
[Sat Apr 18 17:21:27.925404 2026] [:error] [pid 34237:tid 34251] [client 52.236.80.95:63102] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/druqr.php"] [unique_id "aeNNFxBmX4Wq5a6rxfZamQAAAUw"]
[Sat Apr 18 17:21:28.608915 2026] [:error] [pid 9970:tid 9984] [client 52.236.80.95:63621] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/druqr.php"] [unique_id "aeNNGCYdRLRhVmaIMx2NvwAAAMo"]
[Sat Apr 18 17:21:29.307451 2026] [:error] [pid 34290:tid 34341] [client 52.236.80.95:65205] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/druqr.php"] [unique_id "aeNNGRqX6WpmmAXOBi_nfwAAAdY"]
[Sat Apr 18 17:21:30.143056 2026] [:error] [pid 9970:tid 9979] [client 52.236.80.95:63104] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dyxbc.php"] [unique_id "aeNNGiYdRLRhVmaIMx2NwgAAAMU"]
[Sat Apr 18 17:21:31.161159 2026] [:error] [pid 9864:tid 9927] [client 52.236.80.95:63606] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dyxbc.php"] [unique_id "aeNNG4CFeowknfXHM7nZZgAAAFU"]
[Sat Apr 18 17:21:31.919164 2026] [:error] [pid 34290:tid 34329] [client 52.236.80.95:65142] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dyxbc.php"] [unique_id "aeNNGxqX6WpmmAXOBi_nggAAAco"]
[Sat Apr 18 17:21:32.697897 2026] [:error] [pid 9970:tid 9978] [client 52.236.80.95:63653] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dyxbc.php"] [unique_id "aeNNHCYdRLRhVmaIMx2NyQAAAMQ"]
[Sat Apr 18 17:21:33.786329 2026] [:error] [pid 9970:tid 9983] [client 52.236.80.95:63592] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/eapjf.php"] [unique_id "aeNNHSYdRLRhVmaIMx2NygAAAMk"]
[Sat Apr 18 17:21:34.608670 2026] [:error] [pid 34288:tid 34298] [client 52.236.80.95:63633] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/eapjf.php"] [unique_id "aeNNHuTIiy__PtiLmpm9_wAAAYY"]
[Sat Apr 18 17:21:35.252080 2026] [:error] [pid 9970:tid 9981] [client 52.236.80.95:62606] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/eapjf.php"] [unique_id "aeNNHyYdRLRhVmaIMx2NzQAAAMc"]
[Sat Apr 18 17:21:36.696443 2026] [:error] [pid 9864:tid 9905] [client 52.236.80.95:63582] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/eapjf.php"] [unique_id "aeNNIICFeowknfXHM7nZagAAAEA"]
[Sat Apr 18 17:21:37.851884 2026] [:error] [pid 9865:tid 9959] [client 52.236.80.95:63113] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ebuom.php"] [unique_id "aeNNIazb5knECIY-C-hkGwAAAJY"]
[Sat Apr 18 17:21:39.103449 2026] [:error] [pid 34288:tid 34310] [client 52.236.80.95:64001] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ebuom.php"] [unique_id "aeNNI-TIiy__PtiLmpm-BQAAAZI"]
[Sat Apr 18 17:21:41.172087 2026] [:error] [pid 9864:tid 9922] [client 52.236.80.95:60732] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ebuom.php"] [unique_id "aeNNJYCFeowknfXHM7nZbgAAAFA"]
[Sat Apr 18 17:21:42.803794 2026] [:error] [pid 9864:tid 9921] [client 52.236.80.95:64054] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ebuom.php"] [unique_id "aeNNJoCFeowknfXHM7nZcAAAAE8"]
[Sat Apr 18 17:21:44.277728 2026] [:error] [pid 34237:tid 34253] [client 52.236.80.95:63096] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/emcgm.php"] [unique_id "aeNNKBBmX4Wq5a6rxfZapAAAAU4"]
[Sat Apr 18 17:21:45.002231 2026] [:error] [pid 9970:tid 9980] [client 52.236.80.95:63093] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/emcgm.php"] [unique_id "aeNNKSYdRLRhVmaIMx2N2AAAAMY"]
[Sat Apr 18 17:21:45.876920 2026] [:error] [pid 34237:tid 34246] [client 52.236.80.95:63636] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/emcgm.php"] [unique_id "aeNNKRBmX4Wq5a6rxfZapgAAAUc"]
[Sat Apr 18 17:21:46.784535 2026] [:error] [pid 34290:tid 34338] [client 52.236.80.95:60206] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/emcgm.php"] [unique_id "aeNNKhqX6WpmmAXOBi_nkAAAAdM"]
[Sat Apr 18 17:21:47.385630 2026] [:error] [pid 34237:tid 34240] [client 52.236.80.95:63667] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/euocu.php"] [unique_id "aeNNKxBmX4Wq5a6rxfZaqQAAAUE"]
[Sat Apr 18 17:21:48.344642 2026] [:error] [pid 9864:tid 9923] [client 52.236.80.95:64694] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/euocu.php"] [unique_id "aeNNLICFeowknfXHM7nZegAAAFE"]
[Sat Apr 18 17:21:49.094885 2026] [:error] [pid 34237:tid 34253] [client 52.236.80.95:63071] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/euocu.php"] [unique_id "aeNNLRBmX4Wq5a6rxfZaswAAAU4"]
[Sat Apr 18 17:21:49.984499 2026] [:error] [pid 34237:tid 34262] [client 52.236.80.95:63634] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/euocu.php"] [unique_id "aeNNLRBmX4Wq5a6rxfZauQAAAVc"]
[Sat Apr 18 17:21:51.342919 2026] [:error] [pid 34237:tid 34256] [client 52.236.80.95:63586] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f35.php"] [unique_id "aeNNLxBmX4Wq5a6rxfZaxQAAAVE"]
[Sat Apr 18 17:21:52.230767 2026] [:error] [pid 34290:tid 34326] [client 52.236.80.95:63578] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f35.php"] [unique_id "aeNNMBqX6WpmmAXOBi_nkQAAAcc"]
[Sat Apr 18 17:21:52.917801 2026] [:error] [pid 9863:tid 9879] [client 52.236.80.95:63083] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f35.php"] [unique_id "aeNNMDjjiypiFrTucbK0BAAAAAY"]
[Sat Apr 18 17:21:54.653806 2026] [:error] [pid 9864:tid 9910] [client 52.236.80.95:63074] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f35.php"] [unique_id "aeNNMoCFeowknfXHM7nZgQAAAEU"]
[Sat Apr 18 17:21:55.691242 2026] [:error] [pid 34237:tid 34251] [client 52.236.80.95:64048] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/frdyx.php"] [unique_id "aeNNMxBmX4Wq5a6rxfZa2wAAAUw"]
[Sat Apr 18 17:21:56.557966 2026] [:error] [pid 34237:tid 34262] [client 52.236.80.95:63043] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/frdyx.php"] [unique_id "aeNNNBBmX4Wq5a6rxfZa4QAAAVc"]
[Sat Apr 18 17:21:57.919279 2026] [:error] [pid 13023:tid 13028] [client 52.236.80.95:65137] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/frdyx.php"] [unique_id "aeNNNf1e7hG8DAeABB_aTQAAAQM"]
[Sat Apr 18 17:21:59.168335 2026] [:error] [pid 34237:tid 34259] [client 52.236.80.95:60714] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/frdyx.php"] [unique_id "aeNNNxBmX4Wq5a6rxfZa5QAAAVQ"]
[Sat Apr 18 17:22:00.067923 2026] [:error] [pid 34237:tid 34262] [client 52.236.80.95:63639] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fsjzs.php"] [unique_id "aeNNOBBmX4Wq5a6rxfZa5wAAAVc"]
[Sat Apr 18 17:22:18.836597 2026] [proxy_fcgi:error] [pid 34288:tid 34303] [client 52.236.80.95:65121] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:22:19.170522 2026] [proxy_fcgi:error] [pid 34288:tid 34310] [client 52.236.80.95:65121] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:22:19.497466 2026] [proxy_fcgi:error] [pid 34288:tid 34313] [client 52.236.80.95:65121] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:22:19.758827 2026] [proxy_fcgi:error] [pid 34288:tid 34311] [client 52.236.80.95:65121] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:22:21.146831 2026] [proxy_fcgi:error] [pid 34288:tid 34297] [client 52.236.80.95:65121] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:22:21.405358 2026] [proxy_fcgi:error] [pid 34288:tid 34316] [client 52.236.80.95:65121] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:22:21.656289 2026] [proxy_fcgi:error] [pid 34288:tid 34300] [client 52.236.80.95:65121] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:22:21.908527 2026] [proxy_fcgi:error] [pid 34288:tid 34301] [client 52.236.80.95:65121] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:22:22.166745 2026] [proxy_fcgi:error] [pid 34288:tid 34315] [client 52.236.80.95:65121] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:22:22.435077 2026] [proxy_fcgi:error] [pid 34288:tid 34293] [client 52.236.80.95:65121] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:22:22.788808 2026] [proxy_fcgi:error] [pid 34288:tid 34294] [client 52.236.80.95:65121] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:22:23.038736 2026] [:error] [pid 34288:tid 34295] [client 52.236.80.95:65121] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kagug.php"] [unique_id "aeNNT-TIiy__PtiLmpm-MwAAAYM"]
[Sat Apr 18 17:22:24.038953 2026] [:error] [pid 9970:tid 9985] [client 52.236.80.95:64581] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kagug.php"] [unique_id "aeNNUCYdRLRhVmaIMx2N_AAAAMs"]
[Sat Apr 18 17:22:24.931422 2026] [:error] [pid 34237:tid 34256] [client 52.236.80.95:63676] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kagug.php"] [unique_id "aeNNUBBmX4Wq5a6rxfZbEwAAAVE"]
[Sat Apr 18 17:22:25.855418 2026] [:error] [pid 9863:tid 9886] [client 52.236.80.95:63605] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kagug.php"] [unique_id "aeNNUTjjiypiFrTucbK0HwAAAA0"]
[Sat Apr 18 17:22:26.909914 2026] [:error] [pid 34237:tid 34249] [client 52.236.80.95:63959] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kandw.php"] [unique_id "aeNNUhBmX4Wq5a6rxfZbIAAAAUo"]
[Sat Apr 18 17:22:27.680456 2026] [:error] [pid 34237:tid 34251] [client 52.236.80.95:63100] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kandw.php"] [unique_id "aeNNUxBmX4Wq5a6rxfZbJgAAAUw"]
[Sat Apr 18 17:22:28.543007 2026] [:error] [pid 13023:tid 13032] [client 52.236.80.95:64609] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kandw.php"] [unique_id "aeNNVP1e7hG8DAeABB_abgAAAQc"]
[Sat Apr 18 17:22:29.372110 2026] [:error] [pid 34237:tid 34249] [client 52.236.80.95:62611] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kandw.php"] [unique_id "aeNNVRBmX4Wq5a6rxfZbPwAAAUo"]
[Sat Apr 18 17:22:29.923786 2026] [:error] [pid 34237:tid 34249] [client 52.236.80.95:64696] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kduhq.php"] [unique_id "aeNNVRBmX4Wq5a6rxfZbVAAAAUo"]
[Sat Apr 18 17:22:30.556686 2026] [:error] [pid 34237:tid 34246] [client 52.236.80.95:62068] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kduhq.php"] [unique_id "aeNNVhBmX4Wq5a6rxfZbWQAAAUc"]
[Sat Apr 18 17:22:31.400062 2026] [:error] [pid 34290:tid 34338] [client 52.236.80.95:64667] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kduhq.php"] [unique_id "aeNNVxqX6WpmmAXOBi_nvQAAAdM"]
[Sat Apr 18 17:22:32.359290 2026] [:error] [pid 34290:tid 34339] [client 52.236.80.95:65168] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kduhq.php"] [unique_id "aeNNWBqX6WpmmAXOBi_nwgAAAdQ"]
[Sat Apr 18 17:22:33.325485 2026] [:error] [pid 34290:tid 34331] [client 52.236.80.95:62612] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rgjrq.php"] [unique_id "aeNNWRqX6WpmmAXOBi_nxgAAAcw"]
[Sat Apr 18 17:22:34.182831 2026] [:error] [pid 9863:tid 9880] [client 52.236.80.95:63103] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rgjrq.php"] [unique_id "aeNNWjjjiypiFrTucbK0NwAAAAc"]
[Sat Apr 18 17:22:35.166420 2026] [:error] [pid 9864:tid 9928] [client 52.236.80.95:63961] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rgjrq.php"] [unique_id "aeNNW4CFeowknfXHM7nZsQAAAFY"]
[Sat Apr 18 17:22:36.222184 2026] [:error] [pid 9864:tid 9915] [client 52.236.80.95:64623] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rgjrq.php"] [unique_id "aeNNXICFeowknfXHM7nZtwAAAEk"]
[Sat Apr 18 17:22:36.913818 2026] [:error] [pid 9970:tid 9993] [client 52.236.80.95:63575] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vopxx.php"] [unique_id "aeNNXCYdRLRhVmaIMx2OBAAAANM"]
[Sat Apr 18 17:22:37.606185 2026] [:error] [pid 9970:tid 9986] [client 52.236.80.95:63953] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vopxx.php"] [unique_id "aeNNXSYdRLRhVmaIMx2OBwAAAMw"]
[Sat Apr 18 17:22:38.180071 2026] [:error] [pid 9864:tid 9907] [client 52.236.80.95:62133] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vopxx.php"] [unique_id "aeNNXoCFeowknfXHM7nZvQAAAEI"]
[Sat Apr 18 17:22:39.345677 2026] [:error] [pid 34290:tid 34343] [client 52.236.80.95:64602] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vopxx.php"] [unique_id "aeNNXxqX6WpmmAXOBi_n0wAAAdg"]
[Sat Apr 18 17:22:39.933308 2026] [:error] [pid 9864:tid 9923] [client 52.236.80.95:63600] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wcoiw.php"] [unique_id "aeNNX4CFeowknfXHM7nZwgAAAFE"]
[Sat Apr 18 17:22:40.517509 2026] [:error] [pid 9863:tid 9892] [client 52.236.80.95:62100] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wcoiw.php"] [unique_id "aeNNYDjjiypiFrTucbK0OgAAABM"]
[Sat Apr 18 17:22:41.068989 2026] [:error] [pid 9864:tid 9918] [client 52.236.80.95:63938] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wcoiw.php"] [unique_id "aeNNYYCFeowknfXHM7nZxgAAAEw"]
[Sat Apr 18 17:22:41.713726 2026] [:error] [pid 9864:tid 9906] [client 52.236.80.95:62106] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wcoiw.php"] [unique_id "aeNNYYCFeowknfXHM7nZyQAAAEE"]
[Sat Apr 18 17:22:42.295440 2026] [:error] [pid 34288:tid 34308] [client 52.236.80.95:63962] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wtogs.php"] [unique_id "aeNNYuTIiy__PtiLmpm-TQAAAZA"]
[Sat Apr 18 17:22:42.822185 2026] [:error] [pid 9970:tid 9977] [client 52.236.80.95:65212] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wtogs.php"] [unique_id "aeNNYiYdRLRhVmaIMx2OCwAAAMM"]
[Sat Apr 18 17:22:43.356165 2026] [:error] [pid 34290:tid 34320] [client 52.236.80.95:65214] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wtogs.php"] [unique_id "aeNNYxqX6WpmmAXOBi_n1gAAAcE"]
[Sat Apr 18 17:22:43.975325 2026] [:error] [pid 9863:tid 9896] [client 52.236.80.95:64040] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wtogs.php"] [unique_id "aeNNYzjjiypiFrTucbK0QQAAABc"]
[Sat Apr 18 17:22:44.557397 2026] [:error] [pid 9970:tid 9995] [client 52.236.80.95:64701] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xbbih.php"] [unique_id "aeNNZCYdRLRhVmaIMx2ODQAAANU"]
[Sat Apr 18 17:22:45.089212 2026] [:error] [pid 34288:tid 34314] [client 52.236.80.95:64004] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xbbih.php"] [unique_id "aeNNZeTIiy__PtiLmpm-UQAAAZY"]
[Sat Apr 18 17:22:45.632376 2026] [:error] [pid 13023:tid 13048] [client 52.236.80.95:63558] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xbbih.php"] [unique_id "aeNNZf1e7hG8DAeABB_afgAAARc"]
[Sat Apr 18 17:22:46.250200 2026] [:error] [pid 34288:tid 34316] [client 52.236.80.95:63130] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xbbih.php"] [unique_id "aeNNZuTIiy__PtiLmpm-UgAAAZg"]
[Sat Apr 18 17:22:46.947732 2026] [:error] [pid 9864:tid 9922] [client 52.236.80.95:65177] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xcakx.php"] [unique_id "aeNNZoCFeowknfXHM7nZzQAAAFA"]
[Sat Apr 18 17:22:47.633658 2026] [:error] [pid 9970:tid 9979] [client 52.236.80.95:62094] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xcakx.php"] [unique_id "aeNNZyYdRLRhVmaIMx2OEAAAAMU"]
[Sat Apr 18 17:22:48.216891 2026] [:error] [pid 9970:tid 9986] [client 52.236.80.95:63937] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xcakx.php"] [unique_id "aeNNaCYdRLRhVmaIMx2OFAAAAMw"]
[Sat Apr 18 17:22:48.810269 2026] [:error] [pid 13023:tid 13042] [client 52.236.80.95:63991] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xcakx.php"] [unique_id "aeNNaP1e7hG8DAeABB_ahQAAARE"]
[Sat Apr 18 17:22:49.540801 2026] [:error] [pid 9864:tid 9921] [client 52.236.80.95:62077] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xjgdw.php"] [unique_id "aeNNaYCFeowknfXHM7nZ0wAAAE8"]
[Sat Apr 18 17:22:50.123651 2026] [:error] [pid 9864:tid 9907] [client 52.236.80.95:64603] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xjgdw.php"] [unique_id "aeNNaoCFeowknfXHM7nZ1QAAAEI"]
[Sat Apr 18 17:22:50.673135 2026] [:error] [pid 9864:tid 9905] [client 52.236.80.95:63166] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xjgdw.php"] [unique_id "aeNNaoCFeowknfXHM7nZ2AAAAEA"]
[Sat Apr 18 17:22:51.271078 2026] [:error] [pid 9864:tid 9927] [client 52.236.80.95:64620] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xjgdw.php"] [unique_id "aeNNa4CFeowknfXHM7nZ3AAAAFU"]
[Sat Apr 18 17:22:51.985228 2026] [:error] [pid 9864:tid 9918] [client 52.236.80.95:63118] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xopgt.php"] [unique_id "aeNNa4CFeowknfXHM7nZ3wAAAEw"]
[Sat Apr 18 17:22:52.949250 2026] [:error] [pid 13023:tid 13045] [client 52.236.80.95:60216] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xopgt.php"] [unique_id "aeNNbP1e7hG8DAeABB_aiwAAARQ"]
[Sat Apr 18 17:22:53.541793 2026] [:error] [pid 9865:tid 9956] [client 52.236.80.95:63127] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xopgt.php"] [unique_id "aeNNbazb5knECIY-C-hkSAAAAJM"]
[Sat Apr 18 17:22:54.168801 2026] [:error] [pid 13023:tid 13032] [client 52.236.80.95:62601] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xopgt.php"] [unique_id "aeNNbv1e7hG8DAeABB_alAAAAQc"]
[Sat Apr 18 17:22:54.735733 2026] [:error] [pid 34290:tid 34322] [client 52.236.80.95:63657] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xsjtz.php"] [unique_id "aeNNbhqX6WpmmAXOBi_n3QAAAcM"]
[Sat Apr 18 17:22:55.294935 2026] [:error] [pid 34237:tid 34248] [client 52.236.80.95:63114] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xsjtz.php"] [unique_id "aeNNbxBmX4Wq5a6rxfZbdgAAAUk"]
[Sat Apr 18 17:22:55.884539 2026] [:error] [pid 34288:tid 34295] [client 52.236.80.95:64030] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xsjtz.php"] [unique_id "aeNNb-TIiy__PtiLmpm-VQAAAYM"]
[Sat Apr 18 17:22:56.556852 2026] [:error] [pid 9864:tid 9922] [client 52.236.80.95:62062] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xsjtz.php"] [unique_id "aeNNcICFeowknfXHM7nZ6gAAAFA"]
[Sat Apr 18 17:22:57.183354 2026] [:error] [pid 9864:tid 9924] [client 52.236.80.95:64604] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zvinn.php"] [unique_id "aeNNcYCFeowknfXHM7nZ7QAAAFI"]
[Sat Apr 18 17:22:57.880138 2026] [:error] [pid 34288:tid 34298] [client 52.236.80.95:64617] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zvinn.php"] [unique_id "aeNNceTIiy__PtiLmpm-VgAAAYY"]
[Sat Apr 18 17:22:58.566209 2026] [:error] [pid 9864:tid 9923] [client 52.236.80.95:64026] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zvinn.php"] [unique_id "aeNNcoCFeowknfXHM7nZ9AAAAFE"]
[Sat Apr 18 17:22:59.099188 2026] [:error] [pid 9864:tid 9929] [client 52.236.80.95:63060] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zvinn.php"] [unique_id "aeNNc4CFeowknfXHM7nZ9gAAAFc"]
[Sat Apr 18 17:22:59.663093 2026] [:error] [pid 34237:tid 34261] [client 52.236.80.95:64599] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/balin.php"] [unique_id "aeNNcxBmX4Wq5a6rxfZbgQAAAVY"]
[Sat Apr 18 17:23:00.221524 2026] [:error] [pid 34288:tid 34310] [client 52.236.80.95:63132] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/balin.php"] [unique_id "aeNNdOTIiy__PtiLmpm-WAAAAZI"]
[Sat Apr 18 17:23:00.887413 2026] [:error] [pid 9864:tid 9907] [client 52.236.80.95:65101] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/balin.php"] [unique_id "aeNNdICFeowknfXHM7nZ_QAAAEI"]
[Sat Apr 18 17:23:01.420971 2026] [:error] [pid 9864:tid 9917] [client 52.236.80.95:64594] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/balin.php"] [unique_id "aeNNdYCFeowknfXHM7naAgAAAEs"]
[Sat Apr 18 17:23:01.951117 2026] [:error] [pid 9864:tid 9914] [client 52.236.80.95:65116] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/0x19493QU8ZQ.php"] [unique_id "aeNNdYCFeowknfXHM7naAwAAAEg"]
[Sat Apr 18 17:23:02.583600 2026] [:error] [pid 34237:tid 34242] [client 52.236.80.95:63125] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/0x19493QU8ZQ.php"] [unique_id "aeNNdhBmX4Wq5a6rxfZbhAAAAUM"]
[Sat Apr 18 17:23:03.120218 2026] [:error] [pid 34237:tid 34240] [client 52.236.80.95:61461] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/0x19493QU8ZQ.php"] [unique_id "aeNNdxBmX4Wq5a6rxfZbiAAAAUE"]
[Sat Apr 18 17:23:03.673147 2026] [:error] [pid 34237:tid 34239] [client 52.236.80.95:65136] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/0x19493QU8ZQ.php"] [unique_id "aeNNdxBmX4Wq5a6rxfZbjQAAAUA"]
[Sat Apr 18 17:23:04.171852 2026] [:error] [pid 9865:tid 9944] [client 52.236.80.95:61405] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/13ede.php"] [unique_id "aeNNeKzb5knECIY-C-hkUQAAAIc"]
[Sat Apr 18 17:23:04.681858 2026] [:error] [pid 34290:tid 34324] [client 52.236.80.95:61417] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/13ede.php"] [unique_id "aeNNeBqX6WpmmAXOBi_n5wAAAcU"]
[Sat Apr 18 17:23:05.639588 2026] [:error] [pid 34290:tid 34323] [client 52.236.80.95:64660] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/13ede.php"] [unique_id "aeNNeRqX6WpmmAXOBi_n6AAAAcQ"]
[Sat Apr 18 17:23:06.147105 2026] [:error] [pid 34290:tid 34328] [client 52.236.80.95:63164] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/13ede.php"] [unique_id "aeNNehqX6WpmmAXOBi_n6wAAAck"]
[Sat Apr 18 17:23:06.699912 2026] [:error] [pid 34288:tid 34313] [client 52.236.80.95:64612] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/akhvg.php"] [unique_id "aeNNeuTIiy__PtiLmpm-WgAAAZU"]
[Sat Apr 18 17:23:07.239425 2026] [:error] [pid 34237:tid 34260] [client 52.236.80.95:63067] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/akhvg.php"] [unique_id "aeNNexBmX4Wq5a6rxfZbkwAAAVU"]
[Sat Apr 18 17:23:08.183384 2026] [:error] [pid 34290:tid 34332] [client 52.236.80.95:63568] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/akhvg.php"] [unique_id "aeNNfBqX6WpmmAXOBi_n8QAAAc0"]
[Sat Apr 18 17:23:08.772716 2026] [:error] [pid 34290:tid 34333] [client 52.236.80.95:64640] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/akhvg.php"] [unique_id "aeNNfBqX6WpmmAXOBi_n8wAAAc4"]
[Sat Apr 18 17:23:09.852796 2026] [:error] [pid 13023:tid 13046] [client 52.236.80.95:63095] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/assacc.php"] [unique_id "aeNNff1e7hG8DAeABB_apgAAARU"]
[Sat Apr 18 17:23:10.458744 2026] [:error] [pid 34237:tid 34262] [client 52.236.80.95:63072] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/assacc.php"] [unique_id "aeNNfhBmX4Wq5a6rxfZbmAAAAVc"]
[Sat Apr 18 17:23:11.097220 2026] [:error] [pid 34288:tid 34296] [client 52.236.80.95:63109] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/assacc.php"] [unique_id "aeNNf-TIiy__PtiLmpm-WwAAAYQ"]
[Sat Apr 18 17:23:11.657914 2026] [:error] [pid 34290:tid 34324] [client 52.236.80.95:63627] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/assacc.php"] [unique_id "aeNNfxqX6WpmmAXOBi_n-AAAAcU"]
[Sat Apr 18 17:23:12.314635 2026] [:error] [pid 9970:tid 9991] [client 52.236.80.95:65195] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/t00l.php"] [unique_id "aeNNgCYdRLRhVmaIMx2OIgAAANE"]
[Sat Apr 18 17:23:12.943182 2026] [:error] [pid 9970:tid 9987] [client 52.236.80.95:61458] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/t00l.php"] [unique_id "aeNNgCYdRLRhVmaIMx2OJQAAAM0"]
[Sat Apr 18 17:23:13.667217 2026] [:error] [pid 9970:tid 9992] [client 52.236.80.95:63056] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/t00l.php"] [unique_id "aeNNgSYdRLRhVmaIMx2OKgAAANI"]
[Sat Apr 18 17:23:14.280566 2026] [:error] [pid 9970:tid 9978] [client 52.236.80.95:63048] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/t00l.php"] [unique_id "aeNNgiYdRLRhVmaIMx2OLgAAAMQ"]
[Sat Apr 18 17:23:14.822399 2026] [:error] [pid 9863:tid 9886] [client 52.236.80.95:61496] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xy.php"] [unique_id "aeNNgjjjiypiFrTucbK0UQAAAA0"]
[Sat Apr 18 17:23:15.436044 2026] [:error] [pid 9863:tid 9896] [client 52.236.80.95:64674] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xy.php"] [unique_id "aeNNgzjjiypiFrTucbK0UwAAABc"]
[Sat Apr 18 17:23:16.063917 2026] [:error] [pid 9970:tid 9984] [client 52.236.80.95:63088] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xy.php"] [unique_id "aeNNhCYdRLRhVmaIMx2OMQAAAMo"]
[Sat Apr 18 17:23:16.778981 2026] [:error] [pid 13023:tid 13049] [client 52.236.80.95:65155] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xy.php"] [unique_id "aeNNhP1e7hG8DAeABB_aqgAAARg"]
[Sat Apr 18 17:23:17.352114 2026] [:error] [pid 13023:tid 13036] [client 52.236.80.95:64020] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/atomlib.php"] [unique_id "aeNNhf1e7hG8DAeABB_arQAAAQs"]
[Sat Apr 18 17:23:17.952945 2026] [:error] [pid 34237:tid 34248] [client 52.236.80.95:63077] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/atomlib.php"] [unique_id "aeNNhRBmX4Wq5a6rxfZbpAAAAUk"]
[Sat Apr 18 17:23:18.500207 2026] [:error] [pid 34237:tid 34259] [client 52.236.80.95:64625] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/atomlib.php"] [unique_id "aeNNhhBmX4Wq5a6rxfZbpgAAAVQ"]
[Sat Apr 18 17:23:19.112395 2026] [:error] [pid 34237:tid 34250] [client 52.236.80.95:65113] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/atomlib.php"] [unique_id "aeNNhxBmX4Wq5a6rxfZbqQAAAUs"]
[Sat Apr 18 17:23:19.700397 2026] [:error] [pid 13023:tid 13035] [client 52.236.80.95:63973] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fetch.php"] [unique_id "aeNNh_1e7hG8DAeABB_asAAAAQo"]
[Sat Apr 18 17:23:20.271489 2026] [:error] [pid 13023:tid 13028] [client 52.236.80.95:63106] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fetch.php"] [unique_id "aeNNiP1e7hG8DAeABB_asQAAAQM"]
[Sat Apr 18 17:23:21.194635 2026] [:error] [pid 13023:tid 13031] [client 52.236.80.95:62558] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fetch.php"] [unique_id "aeNNif1e7hG8DAeABB_atAAAAQY"]
[Sat Apr 18 17:23:21.845311 2026] [:error] [pid 34290:tid 34322] [client 52.236.80.95:64626] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fetch.php"] [unique_id "aeNNiRqX6WpmmAXOBi_n_wAAAcM"]
[Sat Apr 18 17:23:22.436276 2026] [proxy_fcgi:error] [pid 9865:tid 9941] [client 52.236.80.95:63674] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:23:22.698997 2026] [proxy_fcgi:error] [pid 9865:tid 9961] [client 52.236.80.95:63674] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:23:22.955962 2026] [proxy_fcgi:error] [pid 9865:tid 9960] [client 52.236.80.95:63674] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:23:23.217195 2026] [proxy_fcgi:error] [pid 9865:tid 9949] [client 52.236.80.95:63674] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:23:23.467529 2026] [proxy_fcgi:error] [pid 9865:tid 9945] [client 52.236.80.95:63674] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:23:23.796248 2026] [proxy_fcgi:error] [pid 9865:tid 9955] [client 52.236.80.95:63674] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:23:24.177546 2026] [proxy_fcgi:error] [pid 9865:tid 9944] [client 52.236.80.95:63674] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:23:24.428636 2026] [proxy_fcgi:error] [pid 9865:tid 9947] [client 52.236.80.95:63674] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:23:24.740872 2026] [proxy_fcgi:error] [pid 9865:tid 9946] [client 52.236.80.95:63674] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:23:25.028577 2026] [proxy_fcgi:error] [pid 9865:tid 9937] [client 52.236.80.95:63674] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:23:25.359964 2026] [proxy_fcgi:error] [pid 9865:tid 9943] [client 52.236.80.95:63674] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:23:25.608319 2026] [:error] [pid 9865:tid 9959] [client 52.236.80.95:63674] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ovajckrrj.php"] [unique_id "aeNNjazb5knECIY-C-hkZgAAAJY"]
[Sat Apr 18 17:23:26.174103 2026] [:error] [pid 9970:tid 9986] [client 52.236.80.95:62591] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ovajckrrj.php"] [unique_id "aeNNjiYdRLRhVmaIMx2OOwAAAMw"]
[Sat Apr 18 17:23:26.744745 2026] [:error] [pid 9864:tid 9913] [client 52.236.80.95:65140] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ovajckrrj.php"] [unique_id "aeNNjoCFeowknfXHM7naLQAAAEc"]
[Sat Apr 18 17:23:27.388112 2026] [:error] [pid 34290:tid 34332] [client 52.236.80.95:62073] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ovajckrrj.php"] [unique_id "aeNNjxqX6WpmmAXOBi_oDgAAAc0"]
[Sat Apr 18 17:23:27.909677 2026] [:error] [pid 34290:tid 34329] [client 52.236.80.95:61411] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ovajelmxf.php"] [unique_id "aeNNjxqX6WpmmAXOBi_oEQAAAco"]
[Sat Apr 18 17:23:28.476620 2026] [:error] [pid 34290:tid 34340] [client 52.236.80.95:63638] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ovajelmxf.php"] [unique_id "aeNNkBqX6WpmmAXOBi_oFgAAAdU"]
[Sat Apr 18 17:23:29.009199 2026] [:error] [pid 34290:tid 34324] [client 52.236.80.95:63588] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ovajelmxf.php"] [unique_id "aeNNkRqX6WpmmAXOBi_oFwAAAcU"]
[Sat Apr 18 17:23:29.596926 2026] [:error] [pid 34237:tid 34255] [client 52.236.80.95:63659] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ovajelmxf.php"] [unique_id "aeNNkRBmX4Wq5a6rxfZbyQAAAVA"]
[Sat Apr 18 17:23:30.100698 2026] [:error] [pid 34290:tid 34332] [client 52.236.80.95:65198] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ovajkgsbb.php"] [unique_id "aeNNkhqX6WpmmAXOBi_oHAAAAc0"]
[Sat Apr 18 17:23:30.608545 2026] [:error] [pid 9864:tid 9926] [client 52.236.80.95:64699] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ovajkgsbb.php"] [unique_id "aeNNkoCFeowknfXHM7naOgAAAFQ"]
[Sat Apr 18 17:23:31.128347 2026] [:error] [pid 34237:tid 34242] [client 52.236.80.95:64058] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ovajkgsbb.php"] [unique_id "aeNNkxBmX4Wq5a6rxfZbzgAAAUM"]
[Sat Apr 18 17:23:31.630774 2026] [:error] [pid 34290:tid 34330] [client 52.236.80.95:65197] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ovajkgsbb.php"] [unique_id "aeNNkxqX6WpmmAXOBi_oHwAAAcs"]
[Sat Apr 18 17:23:32.169160 2026] [:error] [pid 34237:tid 34244] [client 52.236.80.95:62561] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/erty.php"] [unique_id "aeNNlBBmX4Wq5a6rxfZb1gAAAUU"]
[Sat Apr 18 17:23:32.814712 2026] [:error] [pid 34290:tid 34340] [client 52.236.80.95:62549] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/erty.php"] [unique_id "aeNNlBqX6WpmmAXOBi_oJgAAAdU"]
[Sat Apr 18 17:23:33.445551 2026] [:error] [pid 9863:tid 9891] [client 52.236.80.95:64045] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/erty.php"] [unique_id "aeNNlTjjiypiFrTucbK0YgAAABI"]
[Sat Apr 18 17:23:33.975837 2026] [:error] [pid 34290:tid 34321] [client 52.236.80.95:63965] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/erty.php"] [unique_id "aeNNlRqX6WpmmAXOBi_oKgAAAcI"]
[Sat Apr 18 17:23:34.515167 2026] [:error] [pid 9970:tid 9974] [client 52.236.80.95:60099] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/shop.php"] [unique_id "aeNNliYdRLRhVmaIMx2ORwAAAMA"]
[Sat Apr 18 17:23:35.045193 2026] [:error] [pid 13023:tid 13039] [client 52.236.80.95:65095] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/shop.php"] [unique_id "aeNNl_1e7hG8DAeABB_avAAAAQ4"]
[Sat Apr 18 17:23:35.577952 2026] [:error] [pid 9864:tid 9921] [client 52.236.80.95:64614] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/shop.php"] [unique_id "aeNNl4CFeowknfXHM7naRwAAAE8"]
[Sat Apr 18 17:23:36.106994 2026] [:error] [pid 9864:tid 9913] [client 52.236.80.95:64591] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/shop.php"] [unique_id "aeNNmICFeowknfXHM7naSQAAAEc"]
[Sat Apr 18 17:23:36.671554 2026] [:error] [pid 9864:tid 9912] [client 52.236.80.95:63980] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/public/vx.php"] [unique_id "aeNNmICFeowknfXHM7naSwAAAEY"]
[Sat Apr 18 17:23:37.217564 2026] [:error] [pid 9970:tid 9990] [client 52.236.80.95:62600] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/public/vx.php"] [unique_id "aeNNmSYdRLRhVmaIMx2OVAAAANA"]
[Sat Apr 18 17:23:37.736348 2026] [:error] [pid 9864:tid 9916] [client 52.236.80.95:62097] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/public/vx.php"] [unique_id "aeNNmYCFeowknfXHM7naTQAAAEo"]
[Sat Apr 18 17:23:38.315002 2026] [:error] [pid 9863:tid 9885] [client 52.236.80.95:62112] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/public/vx.php"] [unique_id "aeNNmjjjiypiFrTucbK0ZQAAAAw"]
[Sat Apr 18 17:23:38.855016 2026] [:error] [pid 34237:tid 34262] [client 52.236.80.95:63151] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/0xD.php"] [unique_id "aeNNmhBmX4Wq5a6rxfZb4AAAAVc"]
[Sat Apr 18 17:23:39.674846 2026] [:error] [pid 34237:tid 34247] [client 52.236.80.95:65166] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/0xD.php"] [unique_id "aeNNmxBmX4Wq5a6rxfZb4QAAAUg"]
[Sat Apr 18 17:23:40.208318 2026] [:error] [pid 34288:tid 34310] [client 52.236.80.95:64637] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/0xD.php"] [unique_id "aeNNnOTIiy__PtiLmpm-ZQAAAZI"]
[Sat Apr 18 17:23:40.899332 2026] [:error] [pid 34290:tid 34319] [client 52.236.80.95:63128] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/0xD.php"] [unique_id "aeNNnBqX6WpmmAXOBi_oLAAAAcA"]
[Sat Apr 18 17:23:41.529334 2026] [:error] [pid 34237:tid 34252] [client 52.236.80.95:63042] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gh.php"] [unique_id "aeNNnRBmX4Wq5a6rxfZb6AAAAU0"]
[Sat Apr 18 17:23:42.158465 2026] [:error] [pid 34237:tid 34241] [client 52.236.80.95:63156] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gh.php"] [unique_id "aeNNnhBmX4Wq5a6rxfZb7wAAAUI"]
[Sat Apr 18 17:23:42.874125 2026] [:error] [pid 9864:tid 9930] [client 52.236.80.95:63954] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gh.php"] [unique_id "aeNNnoCFeowknfXHM7naWgAAAFg"]
[Sat Apr 18 17:23:43.489663 2026] [:error] [pid 9864:tid 9926] [client 52.236.80.95:63642] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gh.php"] [unique_id "aeNNn4CFeowknfXHM7naXgAAAFQ"]
[Sat Apr 18 17:23:44.173062 2026] [:error] [pid 9970:tid 9977] [client 52.236.80.95:63073] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lupo.php"] [unique_id "aeNNoCYdRLRhVmaIMx2OXgAAAMM"]
[Sat Apr 18 17:23:44.806728 2026] [:error] [pid 9865:tid 9937] [client 52.236.80.95:64577] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lupo.php"] [unique_id "aeNNoKzb5knECIY-C-hkeQAAAIA"]
[Sat Apr 18 17:23:45.409736 2026] [:error] [pid 9863:tid 9879] [client 52.236.80.95:64676] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lupo.php"] [unique_id "aeNNoTjjiypiFrTucbK0bwAAAAY"]
[Sat Apr 18 17:23:45.943800 2026] [:error] [pid 34237:tid 34256] [client 52.236.80.95:63645] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lupo.php"] [unique_id "aeNNoRBmX4Wq5a6rxfZb_wAAAVE"]
[Sat Apr 18 17:23:46.598169 2026] [:error] [pid 34237:tid 34241] [client 52.236.80.95:63955] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sa.php7"] [unique_id "aeNNohBmX4Wq5a6rxfZcBQAAAUI"]
[Sat Apr 18 17:23:47.111563 2026] [:error] [pid 34237:tid 34246] [client 52.236.80.95:63087] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sa.php7"] [unique_id "aeNNoxBmX4Wq5a6rxfZcCAAAAUc"]
[Sat Apr 18 17:23:47.718627 2026] [:error] [pid 9970:tid 9974] [client 52.236.80.95:61432] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sa.php7"] [unique_id "aeNNoyYdRLRhVmaIMx2OXwAAAMA"]
[Sat Apr 18 17:23:48.466556 2026] [:error] [pid 13023:tid 13031] [client 52.236.80.95:63631] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sa.php7"] [unique_id "aeNNpP1e7hG8DAeABB_ayAAAAQY"]
[Sat Apr 18 17:23:49.122534 2026] [:error] [pid 9864:tid 9930] [client 52.236.80.95:63146] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xigmltad.php"] [unique_id "aeNNpYCFeowknfXHM7naagAAAFg"]
[Sat Apr 18 17:23:49.678044 2026] [:error] [pid 34288:tid 34300] [client 52.236.80.95:64693] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xigmltad.php"] [unique_id "aeNNpeTIiy__PtiLmpm-bAAAAYg"]
[Sat Apr 18 17:23:50.309939 2026] [:error] [pid 34237:tid 34261] [client 52.236.80.95:64684] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xigmltad.php"] [unique_id "aeNNphBmX4Wq5a6rxfZcCQAAAVY"]
[Sat Apr 18 17:23:51.249025 2026] [:error] [pid 34237:tid 34263] [client 52.236.80.95:64041] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xigmltad.php"] [unique_id "aeNNpxBmX4Wq5a6rxfZcEQAAAVg"]
[Sat Apr 18 17:23:52.771755 2026] [:error] [pid 9864:tid 9913] [client 52.236.80.95:63107] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lb.php"] [unique_id "aeNNqICFeowknfXHM7nacwAAAEc"]
[Sat Apr 18 17:23:53.625566 2026] [:error] [pid 34237:tid 34255] [client 52.236.80.95:64003] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lb.php"] [unique_id "aeNNqRBmX4Wq5a6rxfZcGwAAAVA"]
[Sat Apr 18 17:23:55.080693 2026] [:error] [pid 9970:tid 9994] [client 52.236.80.95:61419] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lb.php"] [unique_id "aeNNqyYdRLRhVmaIMx2OZwAAANQ"]
[Sat Apr 18 17:23:55.641042 2026] [:error] [pid 9970:tid 9996] [client 52.236.80.95:63678] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lb.php"] [unique_id "aeNNqyYdRLRhVmaIMx2OaQAAANY"]
[Sat Apr 18 17:23:56.168455 2026] [:error] [pid 34290:tid 34327] [client 52.236.80.95:64654] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hplfuns.php"] [unique_id "aeNNrBqX6WpmmAXOBi_oQQAAAcg"]
[Sat Apr 18 17:23:57.056422 2026] [:error] [pid 34237:tid 34256] [client 52.236.80.95:60672] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hplfuns.php"] [unique_id "aeNNrRBmX4Wq5a6rxfZcJgAAAVE"]
[Sat Apr 18 17:23:58.203928 2026] [:error] [pid 34237:tid 34257] [client 52.236.80.95:63161] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hplfuns.php"] [unique_id "aeNNrhBmX4Wq5a6rxfZcKAAAAVI"]
[Sat Apr 18 17:23:58.814363 2026] [:error] [pid 34288:tid 34309] [client 52.236.80.95:63598] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hplfuns.php"] [unique_id "aeNNruTIiy__PtiLmpm-cQAAAZE"]
[Sat Apr 18 17:23:59.881297 2026] [:error] [pid 9864:tid 9905] [client 52.236.80.95:65120] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sad.php"] [unique_id "aeNNr4CFeowknfXHM7naigAAAEA"]
[Sat Apr 18 17:24:00.927697 2026] [:error] [pid 9864:tid 9920] [client 52.236.80.95:65126] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sad.php"] [unique_id "aeNNsICFeowknfXHM7naiwAAAE4"]
[Sat Apr 18 17:24:01.852988 2026] [:error] [pid 34237:tid 34255] [client 52.236.80.95:63571] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sad.php"] [unique_id "aeNNsRBmX4Wq5a6rxfZcNwAAAVA"]
[Sat Apr 18 17:24:02.507129 2026] [:error] [pid 34290:tid 34323] [client 52.236.80.95:65183] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sad.php"] [unique_id "aeNNshqX6WpmmAXOBi_oUQAAAcQ"]
[Sat Apr 18 17:24:03.109028 2026] [:error] [pid 13023:tid 13044] [client 52.236.80.95:65186] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws77.php"] [unique_id "aeNNs_1e7hG8DAeABB_a9AAAARM"]
[Sat Apr 18 17:24:03.658397 2026] [:error] [pid 9864:tid 9912] [client 52.236.80.95:64020] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws77.php"] [unique_id "aeNNs4CFeowknfXHM7nanQAAAEY"]
[Sat Apr 18 17:24:04.199350 2026] [:error] [pid 34290:tid 34341] [client 52.236.80.95:61444] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws77.php"] [unique_id "aeNNtBqX6WpmmAXOBi_oZAAAAdY"]
[Sat Apr 18 17:24:05.167476 2026] [:error] [pid 34237:tid 34249] [client 52.236.80.95:64669] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws77.php"] [unique_id "aeNNtRBmX4Wq5a6rxfZcUwAAAUo"]
[Sat Apr 18 17:24:05.766921 2026] [:error] [pid 34237:tid 34255] [client 52.236.80.95:63611] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gi.php"] [unique_id "aeNNtRBmX4Wq5a6rxfZcVwAAAVA"]
[Sat Apr 18 17:24:06.264733 2026] [:error] [pid 9970:tid 9998] [client 52.236.80.95:63132] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gi.php"] [unique_id "aeNNtiYdRLRhVmaIMx2ObwAAANg"]
[Sat Apr 18 17:24:06.891425 2026] [:error] [pid 34237:tid 34250] [client 52.236.80.95:63593] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gi.php"] [unique_id "aeNNthBmX4Wq5a6rxfZcYAAAAUs"]
[Sat Apr 18 17:24:07.465585 2026] [:error] [pid 13023:tid 13041] [client 52.236.80.95:62090] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gi.php"] [unique_id "aeNNt_1e7hG8DAeABB_bFAAAARA"]
[Sat Apr 18 17:24:08.031509 2026] [:error] [pid 9970:tid 9988] [client 52.236.80.95:65144] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-the.php"] [unique_id "aeNNuCYdRLRhVmaIMx2OcgAAAM4"]
[Sat Apr 18 17:24:08.605103 2026] [:error] [pid 13023:tid 13048] [client 52.236.80.95:63165] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-the.php"] [unique_id "aeNNuP1e7hG8DAeABB_bFgAAARc"]
[Sat Apr 18 17:24:09.463866 2026] [:error] [pid 9864:tid 9905] [client 52.236.80.95:63665] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-the.php"] [unique_id "aeNNuYCFeowknfXHM7naqgAAAEA"]
[Sat Apr 18 17:24:10.029746 2026] [:error] [pid 9864:tid 9925] [client 52.236.80.95:63990] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-the.php"] [unique_id "aeNNuoCFeowknfXHM7narAAAAFM"]
[Sat Apr 18 17:24:10.863366 2026] [:error] [pid 34237:tid 34253] [client 52.236.80.95:63974] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lp6.php"] [unique_id "aeNNuhBmX4Wq5a6rxfZccgAAAU4"]
[Sat Apr 18 17:24:11.427660 2026] [:error] [pid 9970:tid 9981] [client 52.236.80.95:63158] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lp6.php"] [unique_id "aeNNuyYdRLRhVmaIMx2OeQAAAMc"]
[Sat Apr 18 17:24:12.310006 2026] [:error] [pid 34237:tid 34247] [client 52.236.80.95:63141] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lp6.php"] [unique_id "aeNNvBBmX4Wq5a6rxfZcggAAAUg"]
[Sat Apr 18 17:24:13.093801 2026] [:error] [pid 34288:tid 34301] [client 52.236.80.95:64057] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lp6.php"] [unique_id "aeNNveTIiy__PtiLmpm-dgAAAYk"]
[Sat Apr 18 17:24:13.719712 2026] [:error] [pid 9865:tid 9953] [client 52.236.80.95:65152] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/pass4.php"] [unique_id "aeNNvazb5knECIY-C-hkkAAAAJA"]
[Sat Apr 18 17:24:14.578102 2026] [:error] [pid 34288:tid 34293] [client 52.236.80.95:62539] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/pass4.php"] [unique_id "aeNNvuTIiy__PtiLmpm-eQAAAYE"]
[Sat Apr 18 17:24:15.186012 2026] [:error] [pid 34290:tid 34331] [client 52.236.80.95:62528] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/pass4.php"] [unique_id "aeNNvxqX6WpmmAXOBi_ocgAAAcw"]
[Sat Apr 18 17:24:15.691897 2026] [:error] [pid 34237:tid 34254] [client 52.236.80.95:62137] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/pass4.php"] [unique_id "aeNNvxBmX4Wq5a6rxfZclgAAAU8"]
[Sat Apr 18 17:24:16.331110 2026] [:error] [pid 34290:tid 34319] [client 52.236.80.95:65151] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gifclass.php"] [unique_id "aeNNwBqX6WpmmAXOBi_odAAAAcA"]
[Sat Apr 18 17:24:16.855292 2026] [:error] [pid 34237:tid 34252] [client 52.236.80.95:62654] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gifclass.php"] [unique_id "aeNNwBBmX4Wq5a6rxfZcoAAAAU0"]
[Sat Apr 18 17:24:17.398619 2026] [:error] [pid 34237:tid 34253] [client 52.236.80.95:64615] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gifclass.php"] [unique_id "aeNNwRBmX4Wq5a6rxfZcpwAAAU4"]
[Sat Apr 18 17:24:17.939502 2026] [:error] [pid 34290:tid 34330] [client 52.236.80.95:63160] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gifclass.php"] [unique_id "aeNNwRqX6WpmmAXOBi_odwAAAcs"]
[Sat Apr 18 17:24:18.467642 2026] [:error] [pid 9864:tid 9925] [client 52.236.80.95:63615] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sh.php"] [unique_id "aeNNwoCFeowknfXHM7naswAAAFM"]
[Sat Apr 18 17:24:21.219134 2026] [:error] [pid 34237:tid 34250] [client 52.236.80.95:63553] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sh.php"] [unique_id "aeNNxRBmX4Wq5a6rxfZcrwAAAUs"]
[Sat Apr 18 17:24:21.785106 2026] [:error] [pid 34237:tid 34249] [client 52.236.80.95:63994] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sh.php"] [unique_id "aeNNxRBmX4Wq5a6rxfZcsgAAAUo"]
[Sat Apr 18 17:24:22.310094 2026] [:error] [pid 9970:tid 9997] [client 52.236.80.95:65153] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sh.php"] [unique_id "aeNNxiYdRLRhVmaIMx2OfwAAANc"]
[Sat Apr 18 17:24:22.883892 2026] [:error] [pid 9863:tid 9880] [client 52.236.80.95:63666] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/uujuu.php"] [unique_id "aeNNxjjjiypiFrTucbK0ewAAAAc"]
[Sat Apr 18 17:24:23.547893 2026] [:error] [pid 34290:tid 34339] [client 52.236.80.95:63949] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/uujuu.php"] [unique_id "aeNNxxqX6WpmmAXOBi_ofwAAAdQ"]
[Sat Apr 18 17:24:24.181461 2026] [:error] [pid 9864:tid 9914] [client 52.236.80.95:65159] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/uujuu.php"] [unique_id "aeNNyICFeowknfXHM7naugAAAEg"]
[Sat Apr 18 17:24:25.188907 2026] [proxy_fcgi:error] [pid 34288:tid 34296] [client 52.236.80.95:64683] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:24:25.762488 2026] [proxy_fcgi:error] [pid 34288:tid 34303] [client 52.236.80.95:64683] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:24:26.033826 2026] [proxy_fcgi:error] [pid 34288:tid 34311] [client 52.236.80.95:64683] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:24:26.298486 2026] [proxy_fcgi:error] [pid 34288:tid 34314] [client 52.236.80.95:64683] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:24:26.552356 2026] [proxy_fcgi:error] [pid 34288:tid 34316] [client 52.236.80.95:64683] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:24:26.815557 2026] [proxy_fcgi:error] [pid 34288:tid 34300] [client 52.236.80.95:64683] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:24:27.069326 2026] [proxy_fcgi:error] [pid 34288:tid 34301] [client 52.236.80.95:64683] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:24:27.326061 2026] [proxy_fcgi:error] [pid 34288:tid 34292] [client 52.236.80.95:64683] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:24:27.603351 2026] [proxy_fcgi:error] [pid 34288:tid 34299] [client 52.236.80.95:64683] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:24:27.857024 2026] [proxy_fcgi:error] [pid 34288:tid 34312] [client 52.236.80.95:64683] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:24:28.110293 2026] [proxy_fcgi:error] [pid 34288:tid 34293] [client 52.236.80.95:64683] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:24:28.424408 2026] [:error] [pid 34288:tid 34315] [client 52.236.80.95:64683] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-png.php"] [unique_id "aeNNzOTIiy__PtiLmpm-igAAAZc"]
[Sat Apr 18 17:24:28.985198 2026] [:error] [pid 9864:tid 9920] [client 52.236.80.95:63057] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-png.php"] [unique_id "aeNNzICFeowknfXHM7nawAAAAE4"]
[Sat Apr 18 17:24:29.512127 2026] [:error] [pid 9970:tid 9992] [client 52.236.80.95:60675] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-png.php"] [unique_id "aeNNzSYdRLRhVmaIMx2OiAAAANI"]
[Sat Apr 18 17:24:30.041285 2026] [:error] [pid 34290:tid 34328] [client 52.236.80.95:63078] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-png.php"] [unique_id "aeNNzhqX6WpmmAXOBi_okAAAAck"]
[Sat Apr 18 17:24:30.612159 2026] [:error] [pid 34290:tid 34332] [client 52.236.80.95:63559] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wpc2.php"] [unique_id "aeNNzhqX6WpmmAXOBi_olAAAAc0"]
[Sat Apr 18 17:24:31.180293 2026] [:error] [pid 9864:tid 9930] [client 52.236.80.95:64675] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wpc2.php"] [unique_id "aeNNz4CFeowknfXHM7naxQAAAFg"]
[Sat Apr 18 17:24:31.702559 2026] [:error] [pid 34237:tid 34257] [client 52.236.80.95:64034] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wpc2.php"] [unique_id "aeNNzxBmX4Wq5a6rxfZc0gAAAVI"]
[Sat Apr 18 17:24:32.248169 2026] [:error] [pid 9864:tid 9909] [client 52.236.80.95:63590] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wpc2.php"] [unique_id "aeNN0ICFeowknfXHM7nayAAAAEQ"]
[Sat Apr 18 17:24:32.837877 2026] [:error] [pid 34237:tid 34240] [client 52.236.80.95:63564] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/intall.php"] [unique_id "aeNN0BBmX4Wq5a6rxfZc2wAAAUE"]
[Sat Apr 18 17:24:33.364449 2026] [:error] [pid 9864:tid 9913] [client 52.236.80.95:60710] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/intall.php"] [unique_id "aeNN0YCFeowknfXHM7naygAAAEc"]
[Sat Apr 18 17:24:33.862746 2026] [:error] [pid 34237:tid 34241] [client 52.236.80.95:64019] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/intall.php"] [unique_id "aeNN0RBmX4Wq5a6rxfZc3QAAAUI"]
[Sat Apr 18 17:24:34.524900 2026] [:error] [pid 9864:tid 9920] [client 52.236.80.95:63137] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/intall.php"] [unique_id "aeNN0oCFeowknfXHM7na0QAAAE4"]
[Sat Apr 18 17:24:35.072372 2026] [:error] [pid 34237:tid 34244] [client 52.236.80.95:62584] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cu.php"] [unique_id "aeNN0xBmX4Wq5a6rxfZc4gAAAUU"]
[Sat Apr 18 17:24:35.577980 2026] [:error] [pid 9864:tid 9928] [client 52.236.80.95:63983] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cu.php"] [unique_id "aeNN04CFeowknfXHM7na0gAAAFY"]
[Sat Apr 18 17:24:36.099897 2026] [:error] [pid 34237:tid 34262] [client 52.236.80.95:60696] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cu.php"] [unique_id "aeNN1BBmX4Wq5a6rxfZc5wAAAVc"]
[Sat Apr 18 17:24:36.614916 2026] [:error] [pid 13023:tid 13037] [client 52.236.80.95:60214] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cu.php"] [unique_id "aeNN1P1e7hG8DAeABB_bKgAAAQw"]
[Sat Apr 18 17:24:37.136499 2026] [:error] [pid 9864:tid 9923] [client 52.236.80.95:64583] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/callback.php"] [unique_id "aeNN1YCFeowknfXHM7na1AAAAFE"]
[Sat Apr 18 17:24:37.743803 2026] [:error] [pid 9864:tid 9913] [client 52.236.80.95:65207] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/callback.php"] [unique_id "aeNN1YCFeowknfXHM7na2QAAAEc"]
[Sat Apr 18 17:24:38.313608 2026] [:error] [pid 9863:tid 9885] [client 52.236.80.95:65178] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/callback.php"] [unique_id "aeNN1jjjiypiFrTucbK0gAAAAAw"]
[Sat Apr 18 17:24:38.817731 2026] [:error] [pid 9863:tid 9884] [client 52.236.80.95:61395] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/callback.php"] [unique_id "aeNN1jjjiypiFrTucbK0gQAAAAs"]
[Sat Apr 18 17:24:39.788837 2026] [:error] [pid 9864:tid 9919] [client 52.236.80.95:64662] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/byypas.php"] [unique_id "aeNN14CFeowknfXHM7na3gAAAE0"]
[Sat Apr 18 17:24:40.411278 2026] [:error] [pid 34237:tid 34243] [client 52.236.80.95:64690] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/byypas.php"] [unique_id "aeNN2BBmX4Wq5a6rxfZc9AAAAUQ"]
[Sat Apr 18 17:24:40.970521 2026] [:error] [pid 34237:tid 34248] [client 52.236.80.95:65211] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/byypas.php"] [unique_id "aeNN2BBmX4Wq5a6rxfZc9wAAAUk"]
[Sat Apr 18 17:24:41.516707 2026] [:error] [pid 34237:tid 34252] [client 52.236.80.95:65123] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/byypas.php"] [unique_id "aeNN2RBmX4Wq5a6rxfZc_QAAAU0"]
[Sat Apr 18 17:24:42.104986 2026] [:error] [pid 9865:tid 9945] [client 52.236.80.95:63094] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/abrand.php"] [unique_id "aeNN2qzb5knECIY-C-hknwAAAIg"]
[Sat Apr 18 17:24:42.631581 2026] [:error] [pid 13023:tid 13040] [client 52.236.80.95:64606] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/abrand.php"] [unique_id "aeNN2v1e7hG8DAeABB_bMAAAAQ8"]
[Sat Apr 18 17:24:43.188188 2026] [:error] [pid 13023:tid 13042] [client 52.236.80.95:63145] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/abrand.php"] [unique_id "aeNN2_1e7hG8DAeABB_bMgAAARE"]
[Sat Apr 18 17:24:43.712054 2026] [:error] [pid 9865:tid 9953] [client 52.236.80.95:64579] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/abrand.php"] [unique_id "aeNN26zb5knECIY-C-hkoQAAAJA"]
[Sat Apr 18 17:24:44.303893 2026] [:error] [pid 9865:tid 9952] [client 52.236.80.95:62602] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/camara.php"] [unique_id "aeNN3Kzb5knECIY-C-hkowAAAI8"]
[Sat Apr 18 17:24:44.840616 2026] [:error] [pid 9865:tid 9946] [client 52.236.80.95:63082] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/camara.php"] [unique_id "aeNN3Kzb5knECIY-C-hkpQAAAIk"]
[Sat Apr 18 17:24:45.394634 2026] [:error] [pid 34288:tid 34311] [client 52.236.80.95:65174] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/camara.php"] [unique_id "aeNN3eTIiy__PtiLmpm-lQAAAZM"]
[Sat Apr 18 17:24:45.967881 2026] [:error] [pid 34237:tid 34261] [client 52.236.80.95:60698] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/camara.php"] [unique_id "aeNN3RBmX4Wq5a6rxfZdAQAAAVY"]
[Sat Apr 18 17:24:46.565812 2026] [:error] [pid 34237:tid 34253] [client 52.236.80.95:63579] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/assacc.php"] [unique_id "aeNN3hBmX4Wq5a6rxfZdBAAAAU4"]
[Sat Apr 18 17:24:47.302762 2026] [:error] [pid 9864:tid 9921] [client 52.236.80.95:65143] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/assacc.php"] [unique_id "aeNN34CFeowknfXHM7na6AAAAE8"]
[Sat Apr 18 17:24:47.872712 2026] [:error] [pid 9864:tid 9928] [client 52.236.80.95:61376] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/assacc.php"] [unique_id "aeNN34CFeowknfXHM7na7gAAAFY"]
[Sat Apr 18 17:24:48.807160 2026] [:error] [pid 34237:tid 34260] [client 52.236.80.95:64691] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/assacc.php"] [unique_id "aeNN4BBmX4Wq5a6rxfZdCAAAAVU"]
[Sat Apr 18 17:24:49.347153 2026] [:error] [pid 9864:tid 9927] [client 52.236.80.95:63152] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws83.php"] [unique_id "aeNN4YCFeowknfXHM7na8AAAAFU"]
[Sat Apr 18 17:24:50.079734 2026] [:error] [pid 34237:tid 34250] [client 52.236.80.95:63944] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws83.php"] [unique_id "aeNN4hBmX4Wq5a6rxfZdDwAAAUs"]
[Sat Apr 18 17:24:51.021528 2026] [:error] [pid 34237:tid 34257] [client 52.236.80.95:63942] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws83.php"] [unique_id "aeNN4xBmX4Wq5a6rxfZdFQAAAVI"]
[Sat Apr 18 17:24:51.901600 2026] [:error] [pid 9970:tid 9983] [client 52.236.80.95:64664] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws83.php"] [unique_id "aeNN4yYdRLRhVmaIMx2OiwAAAMk"]
[Sat Apr 18 17:24:52.725088 2026] [:error] [pid 34288:tid 34315] [client 52.236.80.95:61422] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-good.php"] [unique_id "aeNN5OTIiy__PtiLmpm-mwAAAZc"]
[Sat Apr 18 17:24:53.361297 2026] [:error] [pid 9865:tid 9953] [client 52.236.80.95:65112] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-good.php"] [unique_id "aeNN5azb5knECIY-C-hkrAAAAJA"]
[Sat Apr 18 17:24:55.637929 2026] [:error] [pid 34290:tid 34342] [client 52.236.80.95:63163] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-good.php"] [unique_id "aeNN5xqX6WpmmAXOBi_osAAAAdc"]
[Sat Apr 18 17:24:57.776564 2026] [:error] [pid 34237:tid 34240] [client 52.236.80.95:62559] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-good.php"] [unique_id "aeNN6RBmX4Wq5a6rxfZdJwAAAUE"]
[Sat Apr 18 17:24:58.774668 2026] [:error] [pid 34237:tid 34254] [client 52.236.80.95:63116] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/%E3%81%AE.php"] [unique_id "aeNN6hBmX4Wq5a6rxfZdLQAAAU8"]
[Sat Apr 18 17:24:59.641838 2026] [:error] [pid 9864:tid 9920] [client 52.236.80.95:63616] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/%E3%81%AE.php"] [unique_id "aeNN64CFeowknfXHM7na9AAAAE4"]
[Sat Apr 18 17:25:00.242519 2026] [:error] [pid 9970:tid 9982] [client 52.236.80.95:63577] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/%E3%81%AE.php"] [unique_id "aeNN7CYdRLRhVmaIMx2OmAAAAMg"]
[Sat Apr 18 17:25:00.824582 2026] [:error] [pid 34237:tid 34247] [client 52.236.80.95:63981] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/%E3%81%AE.php"] [unique_id "aeNN7BBmX4Wq5a6rxfZdNgAAAUg"]
[Sat Apr 18 17:25:01.478629 2026] [:error] [pid 34237:tid 34258] [client 52.236.80.95:63108] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xtsr.php"] [unique_id "aeNN7RBmX4Wq5a6rxfZdOwAAAVM"]
[Sat Apr 18 17:25:02.192710 2026] [:error] [pid 13023:tid 13031] [client 52.236.80.95:61497] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xtsr.php"] [unique_id "aeNN7v1e7hG8DAeABB_bSAAAAQY"]
[Sat Apr 18 17:25:02.769936 2026] [:error] [pid 13023:tid 13030] [client 52.236.80.95:63557] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xtsr.php"] [unique_id "aeNN7v1e7hG8DAeABB_bTQAAAQU"]
[Sat Apr 18 17:25:03.302653 2026] [:error] [pid 34237:tid 34261] [client 52.236.80.95:63069] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xtsr.php"] [unique_id "aeNN7xBmX4Wq5a6rxfZdPwAAAVY"]
[Sat Apr 18 17:25:03.978948 2026] [:error] [pid 13023:tid 13039] [client 52.236.80.95:63134] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zz8.php"] [unique_id "aeNN7_1e7hG8DAeABB_bUgAAAQ4"]
[Sat Apr 18 17:25:04.560693 2026] [:error] [pid 13023:tid 13044] [client 52.236.80.95:63147] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zz8.php"] [unique_id "aeNN8P1e7hG8DAeABB_bVAAAARM"]
[Sat Apr 18 17:25:05.466029 2026] [:error] [pid 13023:tid 13049] [client 52.236.80.95:63081] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zz8.php"] [unique_id "aeNN8f1e7hG8DAeABB_bVQAAARg"]
[Sat Apr 18 17:25:05.983276 2026] [:error] [pid 9970:tid 9983] [client 52.236.80.95:64002] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zz8.php"] [unique_id "aeNN8SYdRLRhVmaIMx2OnwAAAMk"]
[Sat Apr 18 17:25:06.531604 2026] [:error] [pid 34237:tid 34258] [client 52.236.80.95:63131] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mh.php"] [unique_id "aeNN8hBmX4Wq5a6rxfZdRQAAAVM"]
[Sat Apr 18 17:25:07.045801 2026] [:error] [pid 34237:tid 34261] [client 52.236.80.95:65127] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mh.php"] [unique_id "aeNN8xBmX4Wq5a6rxfZdSQAAAVY"]
[Sat Apr 18 17:25:07.591662 2026] [:error] [pid 9970:tid 9979] [client 52.236.80.95:65145] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mh.php"] [unique_id "aeNN8yYdRLRhVmaIMx2OowAAAMU"]
[Sat Apr 18 17:25:08.109482 2026] [:error] [pid 34237:tid 34241] [client 52.236.80.95:62545] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mh.php"] [unique_id "aeNN9BBmX4Wq5a6rxfZdTgAAAUI"]
[Sat Apr 18 17:25:08.630283 2026] [:error] [pid 34237:tid 34239] [client 52.236.80.95:65172] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a5.php"] [unique_id "aeNN9BBmX4Wq5a6rxfZdWAAAAUA"]
[Sat Apr 18 17:25:09.193677 2026] [:error] [pid 9970:tid 9993] [client 52.236.80.95:61463] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a5.php"] [unique_id "aeNN9SYdRLRhVmaIMx2OpgAAANM"]
[Sat Apr 18 17:25:09.866752 2026] [:error] [pid 34237:tid 34241] [client 52.236.80.95:63945] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a5.php"] [unique_id "aeNN9RBmX4Wq5a6rxfZdYgAAAUI"]
[Sat Apr 18 17:25:10.468374 2026] [:error] [pid 9864:tid 9917] [client 52.236.80.95:63595] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a5.php"] [unique_id "aeNN9oCFeowknfXHM7nbAAAAAEs"]
[Sat Apr 18 17:25:11.188379 2026] [:error] [pid 34237:tid 34255] [client 52.236.80.95:62578] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ai.php"] [unique_id "aeNN9xBmX4Wq5a6rxfZdagAAAVA"]
[Sat Apr 18 17:25:11.762548 2026] [:error] [pid 34237:tid 34261] [client 52.236.80.95:63625] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ai.php"] [unique_id "aeNN9xBmX4Wq5a6rxfZdbAAAAVY"]
[Sat Apr 18 17:25:12.438620 2026] [:error] [pid 9864:tid 9922] [client 52.236.80.95:64063] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ai.php"] [unique_id "aeNN-ICFeowknfXHM7nbCAAAAFA"]
[Sat Apr 18 17:25:13.132591 2026] [:error] [pid 13023:tid 13033] [client 52.236.80.95:62135] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ai.php"] [unique_id "aeNN-f1e7hG8DAeABB_bWAAAAQg"]
[Sat Apr 18 17:25:13.807513 2026] [:error] [pid 9970:tid 9994] [client 52.236.80.95:64018] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/amwxl.php"] [unique_id "aeNN-SYdRLRhVmaIMx2OsAAAANQ"]
[Sat Apr 18 17:25:14.709619 2026] [:error] [pid 9970:tid 9984] [client 52.236.80.95:63115] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/amwxl.php"] [unique_id "aeNN-iYdRLRhVmaIMx2OsgAAAMo"]
[Sat Apr 18 17:25:15.356137 2026] [:error] [pid 9970:tid 9990] [client 52.236.80.95:62625] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/amwxl.php"] [unique_id "aeNN-yYdRLRhVmaIMx2OuAAAANA"]
[Sat Apr 18 17:25:15.913051 2026] [:error] [pid 9970:tid 9991] [client 52.236.80.95:64049] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/amwxl.php"] [unique_id "aeNN-yYdRLRhVmaIMx2OvQAAANE"]
[Sat Apr 18 17:25:16.522998 2026] [:error] [pid 9863:tid 9887] [client 52.236.80.95:63561] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/awdld.php"] [unique_id "aeNN_DjjiypiFrTucbK0igAAAA4"]
[Sat Apr 18 17:25:17.141350 2026] [:error] [pid 9864:tid 9915] [client 52.236.80.95:63607] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/awdld.php"] [unique_id "aeNN_YCFeowknfXHM7nbHgAAAEk"]
[Sat Apr 18 17:25:17.680724 2026] [:error] [pid 34288:tid 34316] [client 52.236.80.95:63585] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/awdld.php"] [unique_id "aeNN_eTIiy__PtiLmpm-sAAAAZg"]
[Sat Apr 18 17:25:18.250268 2026] [:error] [pid 34288:tid 34314] [client 52.236.80.95:63599] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/awdld.php"] [unique_id "aeNN_uTIiy__PtiLmpm-sQAAAZY"]
[Sat Apr 18 17:25:19.093449 2026] [:error] [pid 34288:tid 34292] [client 52.236.80.95:65104] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bkyac.php"] [unique_id "aeNN_-TIiy__PtiLmpm-sgAAAYA"]
[Sat Apr 18 17:25:19.722614 2026] [:error] [pid 13023:tid 13029] [client 52.236.80.95:63066] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bkyac.php"] [unique_id "aeNN__1e7hG8DAeABB_bZQAAAQQ"]
[Sat Apr 18 17:25:20.361899 2026] [:error] [pid 13023:tid 13042] [client 52.236.80.95:62604] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bkyac.php"] [unique_id "aeNOAP1e7hG8DAeABB_baAAAARE"]
[Sat Apr 18 17:25:21.032154 2026] [:error] [pid 13023:tid 13041] [client 52.236.80.95:63053] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bkyac.php"] [unique_id "aeNOAf1e7hG8DAeABB_bbQAAARA"]
[Sat Apr 18 17:25:21.614779 2026] [:error] [pid 13023:tid 13040] [client 52.236.80.95:63640] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/krntz.php"] [unique_id "aeNOAf1e7hG8DAeABB_bcAAAAQ8"]
[Sat Apr 18 17:25:22.237877 2026] [:error] [pid 9970:tid 9984] [client 52.236.80.95:63097] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/krntz.php"] [unique_id "aeNOAiYdRLRhVmaIMx2OxAAAAMo"]
[Sat Apr 18 17:25:22.804601 2026] [:error] [pid 34237:tid 34253] [client 52.236.80.95:65173] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/krntz.php"] [unique_id "aeNOAhBmX4Wq5a6rxfZdeAAAAU4"]
[Sat Apr 18 17:25:23.508175 2026] [:error] [pid 9970:tid 9976] [client 52.236.80.95:63139] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/krntz.php"] [unique_id "aeNOAyYdRLRhVmaIMx2OxQAAAMI"]
[Sat Apr 18 17:25:24.319648 2026] [:error] [pid 9970:tid 9988] [client 52.236.80.95:63144] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vhwwnrnmqc.php"] [unique_id "aeNOBCYdRLRhVmaIMx2OxwAAAM4"]
[Sat Apr 18 17:25:24.493753 2026] [proxy_fcgi:error] [pid 9863:tid 9881] [client 91.230.225.170:31217] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:25:24.767362 2026] [proxy_fcgi:error] [pid 9863:tid 9896] [client 91.230.225.170:31217] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:25:25.062106 2026] [:error] [pid 9863:tid 9883] [client 52.236.80.95:65139] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vhwwnrnmqc.php"] [unique_id "aeNOBTjjiypiFrTucbK0mAAAAAo"]
[Sat Apr 18 17:25:25.063356 2026] [proxy_fcgi:error] [pid 9863:tid 9888] [client 91.230.225.170:31217] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:25:25.367637 2026] [proxy_fcgi:error] [pid 9863:tid 9891] [client 91.230.225.170:31217] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:25:25.658931 2026] [proxy_fcgi:error] [pid 9863:tid 9875] [client 91.230.225.170:31217] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:25:25.682978 2026] [:error] [pid 9863:tid 9880] [client 52.236.80.95:64635] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vhwwnrnmqc.php"] [unique_id "aeNOBTjjiypiFrTucbK0nAAAAAc"]
[Sat Apr 18 17:25:25.940676 2026] [proxy_fcgi:error] [pid 9863:tid 9876] [client 91.230.225.170:31217] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:25:26.222054 2026] [proxy_fcgi:error] [pid 9863:tid 9877] [client 91.230.225.170:31217] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:25:26.406564 2026] [:error] [pid 9863:tid 9890] [client 52.236.80.95:63984] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vhwwnrnmqc.php"] [unique_id "aeNOBjjjiypiFrTucbK0ogAAABE"]
[Sat Apr 18 17:25:26.511602 2026] [proxy_fcgi:error] [pid 9863:tid 9884] [client 91.230.225.170:31217] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:25:26.958135 2026] [:error] [pid 9865:tid 9948] [client 52.236.80.95:63975] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xenium4.php"] [unique_id "aeNOBqzb5knECIY-C-hkxQAAAIs"]
[Sat Apr 18 17:25:27.091054 2026] [proxy_fcgi:error] [pid 9863:tid 9873] [client 91.230.225.170:31217] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:25:27.388121 2026] [proxy_fcgi:error] [pid 9863:tid 9896] [client 91.230.225.170:31217] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:25:27.500826 2026] [:error] [pid 9863:tid 9879] [client 52.236.80.95:62065] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xenium4.php"] [unique_id "aeNOBzjjiypiFrTucbK0qgAAAAY"]
[Sat Apr 18 17:25:27.660925 2026] [proxy_fcgi:error] [pid 9863:tid 9891] [client 91.230.225.170:31217] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:25:27.943630 2026] [proxy_fcgi:error] [pid 9863:tid 9880] [client 91.230.225.170:31217] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:25:28.141248 2026] [proxy_fcgi:error] [pid 34237:tid 34256] [client 52.236.80.95:65108] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:25:28.221635 2026] [proxy_fcgi:error] [pid 9863:tid 9889] [client 91.230.225.170:31217] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:25:28.407462 2026] [proxy_fcgi:error] [pid 34237:tid 34245] [client 52.236.80.95:65108] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:25:29.559973 2026] [proxy_fcgi:error] [pid 34237:tid 34243] [client 52.236.80.95:65108] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:25:29.702545 2026] [proxy_fcgi:error] [pid 9863:tid 9895] [client 91.230.225.170:31217] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:25:30.016093 2026] [proxy_fcgi:error] [pid 9863:tid 9884] [client 91.230.225.170:31217] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:25:30.101092 2026] [proxy_fcgi:error] [pid 34237:tid 34247] [client 52.236.80.95:65108] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:25:30.325761 2026] [proxy_fcgi:error] [pid 9863:tid 9885] [client 91.230.225.170:31217] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:25:30.428744 2026] [proxy_fcgi:error] [pid 34237:tid 34246] [client 52.236.80.95:65108] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:25:30.608853 2026] [proxy_fcgi:error] [pid 9863:tid 9873] [client 91.230.225.170:31217] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:25:30.773830 2026] [proxy_fcgi:error] [pid 34237:tid 34241] [client 52.236.80.95:65108] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:25:30.888129 2026] [proxy_fcgi:error] [pid 9863:tid 9881] [client 91.230.225.170:31217] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:25:31.156598 2026] [proxy_fcgi:error] [pid 34237:tid 34257] [client 52.236.80.95:65108] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:25:32.446314 2026] [proxy_fcgi:error] [pid 34237:tid 34257] [client 52.236.80.95:65108] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:25:32.721872 2026] [proxy_fcgi:error] [pid 34237:tid 34249] [client 52.236.80.95:65108] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:25:32.987260 2026] [proxy_fcgi:error] [pid 34237:tid 34260] [client 52.236.80.95:65108] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:25:33.251883 2026] [proxy_fcgi:error] [pid 34237:tid 34263] [client 52.236.80.95:65108] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:25:33.592030 2026] [:error] [pid 34237:tid 34255] [client 52.236.80.95:65108] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/goat.php"] [unique_id "aeNODRBmX4Wq5a6rxfZdiQAAAVA"]
[Sat Apr 18 17:25:38.019310 2026] [:error] [pid 9970:tid 9995] [client 52.236.80.95:64013] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/goat.php"] [unique_id "aeNOEiYdRLRhVmaIMx2O2gAAANU"]
[Sat Apr 18 17:25:38.764460 2026] [:error] [pid 9863:tid 9890] [client 91.230.225.170:31217] [client 91.230.225.170] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aeNOEjjjiypiFrTucbK0xQAAABE"]
[Sat Apr 18 17:25:40.460317 2026] [:error] [pid 34288:tid 34297] [client 185.92.25.102:53033] [client 185.92.25.102] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aeNOFOTIiy__PtiLmpm-xQAAAYU"]
[Sat Apr 18 17:25:42.090684 2026] [:error] [pid 34237:tid 34247] [client 52.236.80.95:64668] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/goat.php"] [unique_id "aeNOFhBmX4Wq5a6rxfZdnAAAAUg"]
[Sat Apr 18 17:25:43.542804 2026] [proxy_fcgi:error] [pid 34290:tid 34329] [client 91.230.225.176:60885] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:25:44.508856 2026] [:error] [pid 34288:tid 34303] [client 52.236.80.95:63626] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/goat.php"] [unique_id "aeNOGOTIiy__PtiLmpm-ygAAAYs"]
[Sat Apr 18 17:25:45.730843 2026] [:error] [pid 34290:tid 34327] [client 91.230.225.176:60885] [client 91.230.225.176] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dwelectservices.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aeNOGRqX6WpmmAXOBi_o9QAAAcg"]
[Sat Apr 18 17:25:46.071837 2026] [:error] [pid 9864:tid 9918] [client 52.236.80.95:62593] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-tot.php"] [unique_id "aeNOGoCFeowknfXHM7nbQQAAAEw"]
[Sat Apr 18 17:25:46.675853 2026] [:error] [pid 9865:tid 9949] [client 52.236.80.95:63098] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-tot.php"] [unique_id "aeNOGqzb5knECIY-C-hk2gAAAIw"]
[Sat Apr 18 17:25:47.475743 2026] [proxy_fcgi:error] [pid 9865:tid 9948] [client 185.92.25.100:37871] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:25:47.652943 2026] [:error] [pid 9970:tid 9976] [client 52.236.80.95:62541] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-tot.php"] [unique_id "aeNOGyYdRLRhVmaIMx2O9AAAAMI"]
[Sat Apr 18 17:25:47.756948 2026] [:error] [pid 9865:tid 9951] [client 185.92.25.100:37871] [client 185.92.25.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aeNOG6zb5knECIY-C-hk4QAAAI4"]
[Sat Apr 18 17:25:48.213009 2026] [:error] [pid 9863:tid 9878] [client 52.236.80.95:62091] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-tot.php"] [unique_id "aeNOHDjjiypiFrTucbK0zAAAAAU"]
[Sat Apr 18 17:25:48.586703 2026] [proxy_fcgi:error] [pid 9863:tid 9897] [client 185.92.25.104:33707] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:25:48.910937 2026] [:error] [pid 9970:tid 9980] [client 52.236.80.95:63592] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-tap.php"] [unique_id "aeNOHCYdRLRhVmaIMx2O_AAAAMY"]
[Sat Apr 18 17:25:49.422749 2026] [:error] [pid 34290:tid 34335] [client 52.236.80.95:62143] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-tap.php"] [unique_id "aeNOHRqX6WpmmAXOBi_o-wAAAdA"]
[Sat Apr 18 17:25:50.095116 2026] [:error] [pid 34237:tid 34241] [client 52.236.80.95:62030] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-tap.php"] [unique_id "aeNOHhBmX4Wq5a6rxfZdqwAAAUI"]
[Sat Apr 18 17:25:50.272539 2026] [:error] [pid 9863:tid 9885] [client 185.92.25.104:33707] [client 185.92.25.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aeNOHjjjiypiFrTucbK01AAAAAw"]
[Sat Apr 18 17:25:50.711504 2026] [:error] [pid 9865:tid 9940] [client 52.236.80.95:62605] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-tap.php"] [unique_id "aeNOHqzb5knECIY-C-hk5AAAAIM"]
[Sat Apr 18 17:25:51.553521 2026] [:error] [pid 13023:tid 13037] [client 52.236.80.95:63996] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vrhiw.php"] [unique_id "aeNOH_1e7hG8DAeABB_blQAAAQw"]
[Sat Apr 18 17:25:52.113033 2026] [:error] [pid 34237:tid 34262] [client 52.236.80.95:60661] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vrhiw.php"] [unique_id "aeNOIBBmX4Wq5a6rxfZdsAAAAVc"]
[Sat Apr 18 17:25:52.316344 2026] [:error] [pid 13023:tid 13026] [client 185.92.25.96:24331] [client 185.92.25.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aeNOIP1e7hG8DAeABB_bmAAAAQE"]
[Sat Apr 18 17:25:52.672546 2026] [:error] [pid 34290:tid 34328] [client 52.236.80.95:62049] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vrhiw.php"] [unique_id "aeNOIBqX6WpmmAXOBi_o_wAAAck"]
[Sat Apr 18 17:25:52.950826 2026] [:error] [pid 34237:tid 34250] [client 185.92.25.106:28531] [client 185.92.25.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aeNOIBBmX4Wq5a6rxfZdtQAAAUs"]
[Sat Apr 18 17:25:53.233955 2026] [:error] [pid 34290:tid 34338] [client 52.236.80.95:63622] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vrhiw.php"] [unique_id "aeNOIRqX6WpmmAXOBi_pAgAAAdM"]
[Sat Apr 18 17:25:53.519097 2026] [:error] [pid 9970:tid 9974] [client 91.230.225.169:39313] [client 91.230.225.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aeNOISYdRLRhVmaIMx2PBwAAAMA"]
[Sat Apr 18 17:25:53.743957 2026] [:error] [pid 13023:tid 13044] [client 52.236.80.95:65133] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/qqjki.php"] [unique_id "aeNOIf1e7hG8DAeABB_bmgAAARM"]
[Sat Apr 18 17:25:54.079642 2026] [:error] [pid 34237:tid 34241] [client 185.192.71.242:21821] [client 185.192.71.242] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aeNOIhBmX4Wq5a6rxfZduQAAAUI"]
[Sat Apr 18 17:25:54.337182 2026] [:error] [pid 34237:tid 34262] [client 52.236.80.95:63620] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/qqjki.php"] [unique_id "aeNOIhBmX4Wq5a6rxfZdvQAAAVc"]
[Sat Apr 18 17:25:54.638492 2026] [:error] [pid 34237:tid 34259] [client 185.92.25.99:44331] [client 185.92.25.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aeNOIhBmX4Wq5a6rxfZdwQAAAVQ"]
[Sat Apr 18 17:25:55.072130 2026] [:error] [pid 34290:tid 34319] [client 52.236.80.95:60193] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/qqjki.php"] [unique_id "aeNOIxqX6WpmmAXOBi_pBAAAAcA"]
[Sat Apr 18 17:25:55.460399 2026] [:error] [pid 34290:tid 34320] [client 91.230.225.172:20455] [client 91.230.225.172] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aeNOIxqX6WpmmAXOBi_pCAAAAcE"]
[Sat Apr 18 17:25:55.864272 2026] [:error] [pid 13023:tid 13042] [client 52.236.80.95:64700] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/qqjki.php"] [unique_id "aeNOI_1e7hG8DAeABB_boQAAARE"]
[Sat Apr 18 17:25:56.031504 2026] [proxy_fcgi:error] [pid 13023:tid 13036] [client 91.230.225.166:54923] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:25:56.601567 2026] [:error] [pid 13023:tid 13040] [client 91.230.225.166:54923] [client 91.230.225.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dwelectservices.com.au"] [uri "/filemanager.php"] [unique_id "aeNOJP1e7hG8DAeABB_bpgAAAQ8"]
[Sat Apr 18 17:25:56.732825 2026] [:error] [pid 13023:tid 13037] [client 52.236.80.95:63086] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/koiy.php"] [unique_id "aeNOJP1e7hG8DAeABB_bqgAAAQw"]
[Sat Apr 18 17:25:57.376852 2026] [:error] [pid 9970:tid 9989] [client 52.236.80.95:63982] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/koiy.php"] [unique_id "aeNOJSYdRLRhVmaIMx2PDAAAAM8"]
[Sat Apr 18 17:25:57.869847 2026] [:error] [pid 9970:tid 9994] [client 185.92.25.94:44103] [client 185.92.25.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aeNOJSYdRLRhVmaIMx2PEQAAANQ"]
[Sat Apr 18 17:25:58.394365 2026] [:error] [pid 34237:tid 34259] [client 52.236.80.95:62603] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/koiy.php"] [unique_id "aeNOJhBmX4Wq5a6rxfZdywAAAVQ"]
[Sat Apr 18 17:25:58.770100 2026] [:error] [pid 34237:tid 34250] [client 185.192.71.240:54977] [client 185.192.71.240] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aeNOJhBmX4Wq5a6rxfZdzgAAAUs"]
[Sat Apr 18 17:25:59.025758 2026] [:error] [pid 34290:tid 34335] [client 52.236.80.95:63562] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/koiy.php"] [unique_id "aeNOJxqX6WpmmAXOBi_pCgAAAdA"]
[Sat Apr 18 17:25:59.344944 2026] [proxy_fcgi:error] [pid 34290:tid 34343] [client 185.192.71.232:37021] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:25:59.619114 2026] [:error] [pid 34237:tid 34254] [client 52.236.80.95:62535] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/baixy.php"] [unique_id "aeNOJxBmX4Wq5a6rxfZd0wAAAU8"]
[Sat Apr 18 17:25:59.651072 2026] [:error] [pid 34290:tid 34338] [client 185.192.71.232:37021] [client 185.192.71.232] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aeNOJxqX6WpmmAXOBi_pDgAAAdM"]
[Sat Apr 18 17:26:00.174775 2026] [:error] [pid 34237:tid 34245] [client 52.236.80.95:61425] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/baixy.php"] [unique_id "aeNOKBBmX4Wq5a6rxfZd2AAAAUY"]
[Sat Apr 18 17:26:00.444806 2026] [proxy_fcgi:error] [pid 34237:tid 34260] [client 91.230.225.178:51997] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:26:00.773615 2026] [:error] [pid 34290:tid 34323] [client 52.236.80.95:62597] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/baixy.php"] [unique_id "aeNOKBqX6WpmmAXOBi_pFwAAAcQ"]
[Sat Apr 18 17:26:01.343570 2026] [proxy_fcgi:error] [pid 34237:tid 34254] [client 91.230.225.178:51997] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:26:01.386497 2026] [:error] [pid 34237:tid 34246] [client 52.236.80.95:62136] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/baixy.php"] [unique_id "aeNOKRBmX4Wq5a6rxfZd5QAAAUc"]
[Sat Apr 18 17:26:02.109374 2026] [:error] [pid 34290:tid 34331] [client 52.236.80.95:63554] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/uuu.php"] [unique_id "aeNOKhqX6WpmmAXOBi_pHgAAAcw"]
[Sat Apr 18 17:26:02.479643 2026] [:error] [pid 34237:tid 34255] [client 91.230.225.178:51997] [client 91.230.225.178] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aeNOKhBmX4Wq5a6rxfZd8AAAAVA"]
[Sat Apr 18 17:26:03.075688 2026] [:error] [pid 9864:tid 9913] [client 52.236.80.95:64647] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/uuu.php"] [unique_id "aeNOK4CFeowknfXHM7nbSQAAAEc"]
[Sat Apr 18 17:26:03.153407 2026] [proxy_fcgi:error] [pid 9864:tid 9928] [client 91.230.225.165:38971] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:26:03.440874 2026] [:error] [pid 9864:tid 9926] [client 91.230.225.165:38971] [client 91.230.225.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aeNOK4CFeowknfXHM7nbSwAAAFQ"]
[Sat Apr 18 17:26:03.619813 2026] [:error] [pid 9970:tid 9996] [client 52.236.80.95:63090] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/uuu.php"] [unique_id "aeNOKyYdRLRhVmaIMx2PGQAAANY"]
[Sat Apr 18 17:26:04.060695 2026] [proxy_fcgi:error] [pid 9970:tid 9981] [client 185.192.71.235:56365] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:26:04.232946 2026] [:error] [pid 9863:tid 9883] [client 52.236.80.95:63045] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/uuu.php"] [unique_id "aeNOLDjjiypiFrTucbK02gAAAAo"]
[Sat Apr 18 17:26:04.685184 2026] [:error] [pid 9970:tid 9997] [client 185.192.71.235:56365] [client 185.192.71.235] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "aeNOLCYdRLRhVmaIMx2PHwAAANc"]
[Sat Apr 18 17:26:04.892367 2026] [:error] [pid 9865:tid 9941] [client 52.236.80.95:64632] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/torsa1.php"] [unique_id "aeNOLKzb5knECIY-C-hk8QAAAIQ"]
[Sat Apr 18 17:26:05.534881 2026] [:error] [pid 9863:tid 9880] [client 91.230.225.176:26571] [client 91.230.225.176] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aeNOLTjjiypiFrTucbK03wAAAAc"]
[Sat Apr 18 17:26:05.595730 2026] [:error] [pid 9863:tid 9876] [client 52.236.80.95:62573] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/torsa1.php"] [unique_id "aeNOLTjjiypiFrTucbK04AAAAAM"]
[Sat Apr 18 17:26:06.357184 2026] [:error] [pid 9970:tid 9991] [client 52.236.80.95:63061] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/torsa1.php"] [unique_id "aeNOLiYdRLRhVmaIMx2PIQAAANE"]
[Sat Apr 18 17:26:06.473073 2026] [proxy_fcgi:error] [pid 34288:tid 34309] [client 185.192.71.237:45501] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:26:06.765566 2026] [proxy_fcgi:error] [pid 34288:tid 34297] [client 185.192.71.237:45501] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:26:07.090501 2026] [:error] [pid 9863:tid 9895] [client 52.236.80.95:65141] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/torsa1.php"] [unique_id "aeNOLzjjiypiFrTucbK05QAAABY"]
[Sat Apr 18 17:26:07.348138 2026] [:error] [pid 34288:tid 34307] [client 185.192.71.237:45501] [client 185.192.71.237] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aeNOL-TIiy__PtiLmpm-2gAAAY8"]
[Sat Apr 18 17:26:07.598830 2026] [:error] [pid 34237:tid 34248] [client 52.236.80.95:64033] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bjfl.php"] [unique_id "aeNOLxBmX4Wq5a6rxfZd-AAAAUk"]
[Sat Apr 18 17:26:08.265637 2026] [:error] [pid 34288:tid 34306] [client 52.236.80.95:63623] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bjfl.php"] [unique_id "aeNOMOTIiy__PtiLmpm-2wAAAY4"]
[Sat Apr 18 17:26:08.273031 2026] [:error] [pid 9864:tid 9927] [client 91.230.225.165:51379] [client 91.230.225.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aeNOMICFeowknfXHM7nbTwAAAFU"]
[Sat Apr 18 17:26:09.174013 2026] [:error] [pid 9865:tid 9938] [client 91.230.225.171:41421] [client 91.230.225.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aeNOMazb5knECIY-C-hk-QAAAIE"]
[Sat Apr 18 17:26:09.288786 2026] [:error] [pid 9864:tid 9923] [client 52.236.80.95:64006] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bjfl.php"] [unique_id "aeNOMYCFeowknfXHM7nbUgAAAFE"]
[Sat Apr 18 17:26:09.926994 2026] [:error] [pid 34237:tid 34262] [client 52.236.80.95:61468] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bjfl.php"] [unique_id "aeNOMRBmX4Wq5a6rxfZd_gAAAVc"]
[Sat Apr 18 17:26:09.941607 2026] [:error] [pid 34237:tid 34256] [client 185.192.71.236:44487] [client 185.192.71.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aeNOMRBmX4Wq5a6rxfZd_wAAAVE"]
[Sat Apr 18 17:26:10.537381 2026] [:error] [pid 13023:tid 13032] [client 185.192.71.241:42347] [client 185.192.71.241] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aeNOMv1e7hG8DAeABB_bwgAAAQc"]
[Sat Apr 18 17:26:10.680392 2026] [:error] [pid 13023:tid 13026] [client 52.236.80.95:64688] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/buc.php"] [unique_id "aeNOMv1e7hG8DAeABB_bxQAAAQE"]
[Sat Apr 18 17:26:11.645160 2026] [:error] [pid 9863:tid 9881] [client 52.236.80.95:65199] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/buc.php"] [unique_id "aeNOMzjjiypiFrTucbK07QAAAAg"]
[Sat Apr 18 17:26:11.718383 2026] [proxy_fcgi:error] [pid 13023:tid 13025] [client 185.92.25.108:49903] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:26:12.001765 2026] [:error] [pid 13023:tid 13043] [client 185.92.25.108:49903] [client 185.92.25.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "aeNONP1e7hG8DAeABB_bywAAARI"]
[Sat Apr 18 17:26:12.238020 2026] [:error] [pid 34237:tid 34239] [client 52.236.80.95:63940] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/buc.php"] [unique_id "aeNONBBmX4Wq5a6rxfZeBAAAAUA"]
[Sat Apr 18 17:26:12.994907 2026] [:error] [pid 9864:tid 9925] [client 52.236.80.95:64673] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/buc.php"] [unique_id "aeNONICFeowknfXHM7nbWAAAAFM"]
[Sat Apr 18 17:26:13.257947 2026] [:error] [pid 34288:tid 34299] [client 185.92.25.106:37407] [client 185.92.25.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "aeNONeTIiy__PtiLmpm-4QAAAYc"]
[Sat Apr 18 17:26:13.678735 2026] [:error] [pid 9864:tid 9919] [client 52.236.80.95:64636] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rithin.php"] [unique_id "aeNONYCFeowknfXHM7nbWQAAAE0"]
[Sat Apr 18 17:26:14.369046 2026] [:error] [pid 13023:tid 13040] [client 52.236.80.95:63669] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rithin.php"] [unique_id "aeNONv1e7hG8DAeABB_bzgAAAQ8"]
[Sat Apr 18 17:26:14.439824 2026] [:error] [pid 34290:tid 34341] [client 91.230.225.178:40227] [client 91.230.225.178] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aeNONhqX6WpmmAXOBi_pJwAAAdY"]
[Sat Apr 18 17:26:15.016280 2026] [:error] [pid 34237:tid 34251] [client 52.236.80.95:64056] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rithin.php"] [unique_id "aeNONxBmX4Wq5a6rxfZeCQAAAUw"]
[Sat Apr 18 17:26:15.782977 2026] [:error] [pid 9970:tid 9976] [client 52.236.80.95:65169] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rithin.php"] [unique_id "aeNONyYdRLRhVmaIMx2PLgAAAMI"]
[Sat Apr 18 17:26:16.107687 2026] [proxy_fcgi:error] [pid 34237:tid 34257] [client 185.92.25.103:33481] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:26:16.516672 2026] [:error] [pid 9970:tid 9975] [client 52.236.80.95:63586] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/as.php"] [unique_id "aeNOOCYdRLRhVmaIMx2PMQAAAME"]
[Sat Apr 18 17:26:16.937110 2026] [proxy_fcgi:error] [pid 34237:tid 34256] [client 185.92.25.103:33481] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:26:17.417194 2026] [:error] [pid 9864:tid 9913] [client 52.236.80.95:60613] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/as.php"] [unique_id "aeNOOYCFeowknfXHM7nbbwAAAEc"]
[Sat Apr 18 17:26:18.096091 2026] [:error] [pid 34237:tid 34253] [client 185.92.25.103:33481] [client 185.92.25.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/admin.php"] [unique_id "aeNOOhBmX4Wq5a6rxfZeFwAAAU4"]
[Sat Apr 18 17:26:18.109141 2026] [:error] [pid 34237:tid 34263] [client 52.236.80.95:65138] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/as.php"] [unique_id "aeNOOhBmX4Wq5a6rxfZeGAAAAVg"]
[Sat Apr 18 17:26:19.014987 2026] [:error] [pid 9864:tid 9922] [client 52.236.80.95:62142] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/as.php"] [unique_id "aeNOO4CFeowknfXHM7nbcgAAAFA"]
[Sat Apr 18 17:26:19.808664 2026] [:error] [pid 34290:tid 34336] [client 185.92.25.106:31717] [client 185.92.25.106] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.92.25.106, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aeNOOxqX6WpmmAXOBi_peQAAAdE"]
[Sat Apr 18 17:26:19.825751 2026] [:error] [pid 9864:tid 9908] [client 52.236.80.95:64651] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xfun.php"] [unique_id "aeNOO4CFeowknfXHM7nbcwAAAEM"]
[Sat Apr 18 17:26:20.109147 2026] [proxy_fcgi:error] [pid 34290:tid 34324] [client 185.92.25.106:31717] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:26:20.391648 2026] [:error] [pid 9864:tid 9916] [client 52.236.80.95:62613] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xfun.php"] [unique_id "aeNOPICFeowknfXHM7nbdAAAAEo"]
[Sat Apr 18 17:26:21.005459 2026] [:error] [pid 9970:tid 9995] [client 52.236.80.95:65090] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xfun.php"] [unique_id "aeNOPSYdRLRhVmaIMx2POwAAANU"]
[Sat Apr 18 17:26:21.529916 2026] [proxy_fcgi:error] [pid 34290:tid 34343] [client 185.92.25.106:31717] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:26:21.821795 2026] [proxy_fcgi:error] [pid 34290:tid 34336] [client 185.92.25.106:31717] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:26:23.262561 2026] [:error] [pid 34290:tid 34338] [client 185.92.25.106:31717] [client 185.92.25.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aeNOPxqX6WpmmAXOBi_pjQAAAdM"]
[Sat Apr 18 17:26:24.388016 2026] [proxy_fcgi:error] [pid 34290:tid 34320] [client 185.92.25.136:41525] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:26:24.669344 2026] [proxy_fcgi:error] [pid 34290:tid 34329] [client 185.92.25.136:41525] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:26:24.956529 2026] [:error] [pid 34290:tid 34321] [client 185.92.25.136:41525] [client 185.92.25.136] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.92.25.136, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aeNOQBqX6WpmmAXOBi_pkAAAAcI"]
[Sat Apr 18 17:26:25.583839 2026] [:error] [pid 34290:tid 34343] [client 185.92.25.136:41525] [client 185.92.25.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/item.php"] [unique_id "aeNOQRqX6WpmmAXOBi_pkgAAAdg"]
[Sat Apr 18 17:26:26.214147 2026] [:error] [pid 34237:tid 34254] [client 52.236.80.95:63947] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xfun.php"] [unique_id "aeNOQhBmX4Wq5a6rxfZeMgAAAU8"]
[Sat Apr 18 17:26:27.713291 2026] [:error] [pid 9864:tid 9921] [client 52.236.80.95:65204] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws88.php"] [unique_id "aeNOQ4CFeowknfXHM7nbvgAAAE8"]
[Sat Apr 18 17:26:28.684485 2026] [:error] [pid 34237:tid 34248] [client 52.236.80.95:65180] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws88.php"] [unique_id "aeNORBBmX4Wq5a6rxfZegwAAAUk"]
[Sat Apr 18 17:26:29.545571 2026] [:error] [pid 9864:tid 9905] [client 52.236.80.95:62629] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws88.php"] [unique_id "aeNORYCFeowknfXHM7nb9gAAAEA"]
[Sat Apr 18 17:26:29.673926 2026] [proxy_fcgi:error] [pid 9864:tid 9913] [client 91.230.225.167:38321] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:26:29.956421 2026] [proxy_fcgi:error] [pid 9864:tid 9907] [client 91.230.225.167:38321] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:26:30.405133 2026] [:error] [pid 9864:tid 9915] [client 52.236.80.95:63612] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws88.php"] [unique_id "aeNORoCFeowknfXHM7nb_QAAAEk"]
[Sat Apr 18 17:26:30.669494 2026] [proxy_fcgi:error] [pid 9864:tid 9918] [client 91.230.225.167:38321] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:26:31.291082 2026] [:error] [pid 9864:tid 9910] [client 91.230.225.167:38321] [client 91.230.225.167] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aeNOR4CFeowknfXHM7ncBAAAAEU"]
[Sat Apr 18 17:26:31.350652 2026] [:error] [pid 34290:tid 34341] [client 52.236.80.95:62596] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws86.php"] [unique_id "aeNORxqX6WpmmAXOBi_ptQAAAdY"]
[Sat Apr 18 17:26:32.157060 2026] [proxy_fcgi:error] [pid 34290:tid 34338] [client 185.92.25.96:32337] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:26:32.192459 2026] [:error] [pid 9863:tid 9878] [client 52.236.80.95:64671] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws86.php"] [unique_id "aeNOSDjjiypiFrTucbK1HgAAAAU"]
[Sat Apr 18 17:26:32.770630 2026] [:error] [pid 9970:tid 9995] [client 52.236.80.95:62570] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws86.php"] [unique_id "aeNOSCYdRLRhVmaIMx2PbAAAANU"]
[Sat Apr 18 17:26:33.426700 2026] [proxy_fcgi:error] [pid 9863:tid 9880] [client 52.236.80.95:61420] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:26:33.913770 2026] [proxy_fcgi:error] [pid 9863:tid 9876] [client 52.236.80.95:61420] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:26:34.188943 2026] [proxy_fcgi:error] [pid 9863:tid 9892] [client 52.236.80.95:61420] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:26:34.282397 2026] [proxy_fcgi:error] [pid 34290:tid 34320] [client 185.92.25.96:32337] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:26:34.463640 2026] [proxy_fcgi:error] [pid 9863:tid 9887] [client 52.236.80.95:61420] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:26:34.732344 2026] [proxy_fcgi:error] [pid 9863:tid 9890] [client 52.236.80.95:61420] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:26:34.834839 2026] [proxy_fcgi:error] [pid 34290:tid 34326] [client 185.92.25.96:32337] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:26:35.011767 2026] [proxy_fcgi:error] [pid 9863:tid 9895] [client 52.236.80.95:61420] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:26:35.377606 2026] [proxy_fcgi:error] [pid 9863:tid 9886] [client 52.236.80.95:61420] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:26:35.558411 2026] [proxy_fcgi:error] [pid 34290:tid 34321] [client 185.92.25.96:32337] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:26:35.793098 2026] [proxy_fcgi:error] [pid 9863:tid 9873] [client 52.236.80.95:61420] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:26:35.833923 2026] [:error] [pid 34290:tid 34322] [client 185.92.25.96:32337] [client 185.92.25.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aeNOSxqX6WpmmAXOBi_pxwAAAcM"]
[Sat Apr 18 17:26:36.212168 2026] [proxy_fcgi:error] [pid 9863:tid 9889] [client 52.236.80.95:61420] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:26:36.627873 2026] [proxy_fcgi:error] [pid 9863:tid 9893] [client 52.236.80.95:61420] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:26:36.789460 2026] [proxy_fcgi:error] [pid 13023:tid 13042] [client 185.192.71.245:23475] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:26:36.897755 2026] [proxy_fcgi:error] [pid 9863:tid 9881] [client 52.236.80.95:61420] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:26:37.158594 2026] [:error] [pid 9863:tid 9896] [client 52.236.80.95:61420] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/csv.php"] [unique_id "aeNOTTjjiypiFrTucbK1LwAAABc"]
[Sat Apr 18 17:26:37.175941 2026] [proxy_fcgi:error] [pid 13023:tid 13029] [client 185.192.71.245:23475] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:26:37.452175 2026] [:error] [pid 13023:tid 13027] [client 185.192.71.245:23475] [client 185.192.71.245] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aeNOTf1e7hG8DAeABB_cBAAAAQI"]
[Sat Apr 18 17:26:38.016047 2026] [:error] [pid 34290:tid 34324] [client 52.236.80.95:61381] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/csv.php"] [unique_id "aeNOThqX6WpmmAXOBi_pygAAAcU"]
[Sat Apr 18 17:26:38.631875 2026] [:error] [pid 13023:tid 13045] [client 52.236.80.95:61404] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/csv.php"] [unique_id "aeNOTv1e7hG8DAeABB_cCQAAARQ"]
[Sat Apr 18 17:26:38.772377 2026] [proxy_fcgi:error] [pid 9863:tid 9879] [client 91.230.225.178:50245] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:26:39.203929 2026] [:error] [pid 9865:tid 9948] [client 52.236.80.95:61396] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/csv.php"] [unique_id "aeNOT6zb5knECIY-C-hlQwAAAIs"]
[Sat Apr 18 17:26:39.367735 2026] [:error] [pid 9863:tid 9883] [client 91.230.225.178:50245] [client 91.230.225.178] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.230.225.178, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "aeNOTzjjiypiFrTucbK1NQAAAAo"]
[Sat Apr 18 17:26:39.640272 2026] [:error] [pid 9863:tid 9878] [client 91.230.225.178:50245] [client 91.230.225.178] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aeNOTzjjiypiFrTucbK1NgAAAAU"]
[Sat Apr 18 17:26:39.868821 2026] [:error] [pid 13023:tid 13034] [client 52.236.80.95:63624] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sale.php"] [unique_id "aeNOT_1e7hG8DAeABB_cCgAAAQk"]
[Sat Apr 18 17:26:41.371278 2026] [:error] [pid 9865:tid 9947] [client 52.236.80.95:63606] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sale.php"] [unique_id "aeNOUazb5knECIY-C-hlSAAAAIo"]
[Sat Apr 18 17:26:42.665090 2026] [:error] [pid 9864:tid 9908] [client 52.236.80.95:64024] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sale.php"] [unique_id "aeNOUoCFeowknfXHM7ncFAAAAEM"]
[Sat Apr 18 17:26:43.906770 2026] [proxy_fcgi:error] [pid 13023:tid 13037] [client 185.192.71.244:30473] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:26:44.296384 2026] [:error] [pid 34290:tid 34327] [client 52.236.80.95:63578] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sale.php"] [unique_id "aeNOVBqX6WpmmAXOBi_p0wAAAcg"]
[Sat Apr 18 17:26:45.054623 2026] [:error] [pid 9863:tid 9896] [client 52.236.80.95:63993] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aa21.php"] [unique_id "aeNOVTjjiypiFrTucbK1PAAAABc"]
[Sat Apr 18 17:26:45.992292 2026] [proxy_fcgi:error] [pid 13023:tid 13044] [client 185.192.71.244:30473] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:26:46.075286 2026] [:error] [pid 9863:tid 9891] [client 52.236.80.95:60218] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aa21.php"] [unique_id "aeNOVjjjiypiFrTucbK1QQAAABI"]
[Sat Apr 18 17:26:46.295317 2026] [:error] [pid 13023:tid 13028] [client 185.192.71.244:30473] [client 185.192.71.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aeNOVv1e7hG8DAeABB_cHwAAAQM"]
[Sat Apr 18 17:26:46.881511 2026] [proxy_fcgi:error] [pid 13023:tid 13027] [client 91.230.225.169:63333] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:26:47.704755 2026] [:error] [pid 34237:tid 34250] [client 52.236.80.95:65165] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aa21.php"] [unique_id "aeNOVxBmX4Wq5a6rxfZeuQAAAUs"]
[Sat Apr 18 17:26:47.828822 2026] [:error] [pid 13023:tid 13039] [client 91.230.225.169:63333] [client 91.230.225.169] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.230.225.169, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aeNOV_1e7hG8DAeABB_cKAAAAQ4"]
[Sat Apr 18 17:26:48.117250 2026] [proxy_fcgi:error] [pid 13023:tid 13038] [client 91.230.225.169:63333] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:26:48.398575 2026] [proxy_fcgi:error] [pid 13023:tid 13049] [client 91.230.225.169:63333] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:26:48.680854 2026] [proxy_fcgi:error] [pid 13023:tid 13032] [client 91.230.225.169:63333] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:26:48.863965 2026] [:error] [pid 9864:tid 9928] [client 52.236.80.95:62609] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aa21.php"] [unique_id "aeNOWICFeowknfXHM7ncHQAAAFY"]
[Sat Apr 18 17:26:48.969132 2026] [:error] [pid 13023:tid 13026] [client 91.230.225.169:63333] [client 91.230.225.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aeNOWP1e7hG8DAeABB_cLQAAAQE"]
[Sat Apr 18 17:26:49.485807 2026] [:error] [pid 34290:tid 34339] [client 52.236.80.95:63988] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws73.php"] [unique_id "aeNOWRqX6WpmmAXOBi_p2wAAAdQ"]
[Sat Apr 18 17:26:50.081725 2026] [proxy_fcgi:error] [pid 13023:tid 13041] [client 91.230.225.169:60515] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:26:50.175437 2026] [:error] [pid 9970:tid 9984] [client 52.236.80.95:62594] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws73.php"] [unique_id "aeNOWiYdRLRhVmaIMx2PdwAAAMo"]
[Sat Apr 18 17:26:50.362447 2026] [:error] [pid 13023:tid 13048] [client 91.230.225.169:60515] [client 91.230.225.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/infi.php"] [unique_id "aeNOWv1e7hG8DAeABB_cLwAAARc"]
[Sat Apr 18 17:26:50.868488 2026] [:error] [pid 9863:tid 9887] [client 52.236.80.95:60728] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws73.php"] [unique_id "aeNOWjjjiypiFrTucbK1RwAAAA4"]
[Sat Apr 18 17:26:51.632200 2026] [proxy_fcgi:error] [pid 13023:tid 13044] [client 91.230.225.170:29053] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:26:51.674679 2026] [:error] [pid 13023:tid 13028] [client 52.236.80.95:64043] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws73.php"] [unique_id "aeNOW_1e7hG8DAeABB_cMgAAAQM"]
[Sat Apr 18 17:26:51.935452 2026] [:error] [pid 13023:tid 13042] [client 91.230.225.170:29053] [client 91.230.225.170] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aeNOW_1e7hG8DAeABB_cMwAAARE"]
[Sat Apr 18 17:26:52.373605 2026] [:error] [pid 9865:tid 9953] [client 52.236.80.95:63102] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bootstrap.php"] [unique_id "aeNOXKzb5knECIY-C-hlTAAAAJA"]
[Sat Apr 18 17:26:52.972174 2026] [:error] [pid 9864:tid 9916] [client 52.236.80.95:64698] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bootstrap.php"] [unique_id "aeNOXICFeowknfXHM7ncJgAAAEo"]
[Sat Apr 18 17:26:53.079789 2026] [proxy_fcgi:error] [pid 34290:tid 34333] [client 185.192.71.243:40545] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:26:53.539419 2026] [:error] [pid 13023:tid 13039] [client 52.236.80.95:64014] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bootstrap.php"] [unique_id "aeNOXf1e7hG8DAeABB_cNAAAAQ4"]
[Sat Apr 18 17:26:53.660203 2026] [proxy_fcgi:error] [pid 34290:tid 34327] [client 185.192.71.243:40545] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:26:53.963088 2026] [:error] [pid 34290:tid 34332] [client 185.192.71.243:40545] [client 185.192.71.243] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "aeNOXRqX6WpmmAXOBi_p5AAAAc0"]
[Sat Apr 18 17:26:54.172838 2026] [:error] [pid 9970:tid 9989] [client 52.236.80.95:57823] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bootstrap.php"] [unique_id "aeNOXiYdRLRhVmaIMx2PggAAAM8"]
[Sat Apr 18 17:26:54.740372 2026] [:error] [pid 34290:tid 34329] [client 52.236.80.95:63112] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/asasx.php"] [unique_id "aeNOXhqX6WpmmAXOBi_p6AAAAco"]
[Sat Apr 18 17:26:54.949745 2026] [:error] [pid 34290:tid 34325] [client 185.192.71.245:25315] [client 185.192.71.245] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "aeNOXhqX6WpmmAXOBi_p6wAAAcY"]
[Sat Apr 18 17:26:55.409442 2026] [:error] [pid 34288:tid 34315] [client 52.236.80.95:63670] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/asasx.php"] [unique_id "aeNOX-TIiy__PtiLmpm_CgAAAZc"]
[Sat Apr 18 17:26:55.996287 2026] [:error] [pid 34237:tid 34261] [client 52.236.80.95:65187] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/asasx.php"] [unique_id "aeNOXxBmX4Wq5a6rxfZezQAAAVY"]
[Sat Apr 18 17:26:56.155815 2026] [proxy_fcgi:error] [pid 34237:tid 34253] [client 185.192.71.242:44549] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:26:56.450718 2026] [proxy_fcgi:error] [pid 34237:tid 34243] [client 185.192.71.242:44549] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:26:57.577320 2026] [:error] [pid 9864:tid 9919] [client 52.236.80.95:63162] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/asasx.php"] [unique_id "aeNOYYCFeowknfXHM7ncLQAAAE0"]
[Sat Apr 18 17:26:57.670182 2026] [:error] [pid 34237:tid 34263] [client 185.192.71.242:44549] [client 185.192.71.242] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aeNOYRBmX4Wq5a6rxfZe3AAAAVg"]
[Sat Apr 18 17:26:58.156106 2026] [:error] [pid 9864:tid 9927] [client 52.236.80.95:63569] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Sanskrit.php"] [unique_id "aeNOYoCFeowknfXHM7ncMAAAAFU"]
[Sat Apr 18 17:26:58.683294 2026] [:error] [pid 34288:tid 34303] [client 52.236.80.95:63989] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Sanskrit.php"] [unique_id "aeNOYuTIiy__PtiLmpm_DgAAAYs"]
[Sat Apr 18 17:26:59.218093 2026] [:error] [pid 9864:tid 9910] [client 52.236.80.95:64059] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Sanskrit.php"] [unique_id "aeNOY4CFeowknfXHM7ncOQAAAEU"]
[Sat Apr 18 17:26:59.242925 2026] [:error] [pid 9864:tid 9912] [client 91.230.225.171:27429] [client 91.230.225.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "aeNOY4CFeowknfXHM7ncOgAAAEY"]
[Sat Apr 18 17:26:59.778005 2026] [:error] [pid 9864:tid 9907] [client 52.236.80.95:62032] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Sanskrit.php"] [unique_id "aeNOY4CFeowknfXHM7ncQQAAAEI"]
[Sat Apr 18 17:27:00.445642 2026] [:error] [pid 9864:tid 9908] [client 52.236.80.95:63977] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/green.php"] [unique_id "aeNOZICFeowknfXHM7ncSQAAAEM"]
[Sat Apr 18 17:27:01.001967 2026] [:error] [pid 9865:tid 9954] [client 52.236.80.95:65109] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/green.php"] [unique_id "aeNOZazb5knECIY-C-hlUAAAAJE"]
[Sat Apr 18 17:27:01.156061 2026] [:error] [pid 9864:tid 9920] [client 91.230.225.166:40277] [client 91.230.225.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/edit.php"] [unique_id "aeNOZYCFeowknfXHM7ncTwAAAE4"]
[Sat Apr 18 17:27:01.722883 2026] [proxy_fcgi:error] [pid 9865:tid 9946] [client 185.192.71.230:65403] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:27:01.835039 2026] [:error] [pid 13023:tid 13045] [client 52.236.80.95:63142] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/green.php"] [unique_id "aeNOZf1e7hG8DAeABB_cOQAAARQ"]
[Sat Apr 18 17:27:02.367892 2026] [proxy_fcgi:error] [pid 9865:tid 9951] [client 185.192.71.230:65403] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:27:02.723180 2026] [:error] [pid 9865:tid 9939] [client 185.192.71.230:65403] [client 185.192.71.230] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "aeNOZqzb5knECIY-C-hlVwAAAII"]
[Sat Apr 18 17:27:02.961819 2026] [:error] [pid 13023:tid 13028] [client 52.236.80.95:64590] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/green.php"] [unique_id "aeNOZv1e7hG8DAeABB_cOwAAAQM"]
[Sat Apr 18 17:27:03.497836 2026] [proxy_fcgi:error] [pid 9864:tid 9908] [client 185.192.71.245:45085] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:27:03.626117 2026] [:error] [pid 34237:tid 34251] [client 52.236.80.95:65190] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws87.php"] [unique_id "aeNOZxBmX4Wq5a6rxfZe5QAAAUw"]
[Sat Apr 18 17:27:04.070472 2026] [:error] [pid 9864:tid 9930] [client 185.192.71.245:45085] [client 185.192.71.245] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/click.php"] [unique_id "aeNOaICFeowknfXHM7ncXAAAAFg"]
[Sat Apr 18 17:27:04.213250 2026] [:error] [pid 13023:tid 13030] [client 52.236.80.95:63655] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws87.php"] [unique_id "aeNOaP1e7hG8DAeABB_cPgAAAQU"]
[Sat Apr 18 17:27:04.797231 2026] [:error] [pid 9865:tid 9942] [client 52.236.80.95:61466] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws87.php"] [unique_id "aeNOaKzb5knECIY-C-hlWAAAAIU"]
[Sat Apr 18 17:27:05.725942 2026] [:error] [pid 34237:tid 34254] [client 185.92.25.105:46983] [client 185.92.25.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "aeNOaRBmX4Wq5a6rxfZe8QAAAU8"]
[Sat Apr 18 17:27:06.510168 2026] [:error] [pid 34237:tid 34255] [client 52.236.80.95:62080] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws87.php"] [unique_id "aeNOahBmX4Wq5a6rxfZe-wAAAVA"]
[Sat Apr 18 17:27:06.623225 2026] [proxy_fcgi:error] [pid 34237:tid 34248] [client 91.230.225.177:62647] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:27:07.462288 2026] [:error] [pid 34290:tid 34329] [client 52.236.80.95:64048] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wxfyf.php"] [unique_id "aeNOaxqX6WpmmAXOBi_p8QAAAco"]
[Sat Apr 18 17:27:07.537870 2026] [proxy_fcgi:error] [pid 34237:tid 34253] [client 91.230.225.177:62647] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:27:08.083905 2026] [:error] [pid 34290:tid 34325] [client 52.236.80.95:63961] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wxfyf.php"] [unique_id "aeNObBqX6WpmmAXOBi_p9AAAAcY"]
[Sat Apr 18 17:27:08.096713 2026] [proxy_fcgi:error] [pid 34237:tid 34260] [client 91.230.225.177:62647] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:27:08.389158 2026] [:error] [pid 34237:tid 34240] [client 91.230.225.177:62647] [client 91.230.225.177] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "aeNObBBmX4Wq5a6rxfZfCAAAAUE"]
[Sat Apr 18 17:27:08.698272 2026] [:error] [pid 9865:tid 9940] [client 52.236.80.95:62558] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wxfyf.php"] [unique_id "aeNObKzb5knECIY-C-hlWgAAAIM"]
[Sat Apr 18 17:27:09.001114 2026] [:error] [pid 13023:tid 13049] [client 185.192.71.232:43551] [client 185.192.71.232] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/xl2023.php"] [unique_id "aeNObf1e7hG8DAeABB_cQQAAARg"]
[Sat Apr 18 17:27:09.273539 2026] [:error] [pid 9970:tid 9975] [client 52.236.80.95:63648] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wxfyf.php"] [unique_id "aeNObSYdRLRhVmaIMx2PiQAAAME"]
[Sat Apr 18 17:27:09.563664 2026] [:error] [pid 9864:tid 9918] [client 185.192.71.229:21205] [client 185.192.71.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/certificates/admin.php"] [unique_id "aeNObYCFeowknfXHM7ncaQAAAEw"]
[Sat Apr 18 17:27:10.136749 2026] [:error] [pid 34290:tid 34339] [client 185.192.71.227:29433] [client 185.192.71.227] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/media/dog.php"] [unique_id "aeNObhqX6WpmmAXOBi_p9wAAAdQ"]
[Sat Apr 18 17:27:10.279802 2026] [:error] [pid 34237:tid 34262] [client 52.236.80.95:64679] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/about.php"] [unique_id "aeNObhBmX4Wq5a6rxfZfCgAAAVc"]
[Sat Apr 18 17:27:10.755346 2026] [proxy_fcgi:error] [pid 9863:tid 9887] [client 185.192.71.238:54691] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:27:11.026771 2026] [:error] [pid 9863:tid 9886] [client 185.192.71.238:54691] [client 185.192.71.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "aeNObzjjiypiFrTucbK1UQAAAA0"]
[Sat Apr 18 17:27:11.087458 2026] [:error] [pid 9864:tid 9905] [client 52.236.80.95:62141] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/about.php"] [unique_id "aeNOb4CFeowknfXHM7ncbgAAAEA"]
[Sat Apr 18 17:27:11.730979 2026] [:error] [pid 13023:tid 13041] [client 52.236.80.95:63064] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/about.php"] [unique_id "aeNOb_1e7hG8DAeABB_cRAAAARA"]
[Sat Apr 18 17:27:12.042662 2026] [:error] [pid 9865:tid 9944] [client 185.192.71.240:54313] [client 185.192.71.240] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aeNOcKzb5knECIY-C-hlYQAAAIc"]
[Sat Apr 18 17:27:12.272925 2026] [:error] [pid 9865:tid 9947] [client 52.236.80.95:64008] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/about.php"] [unique_id "aeNOcKzb5knECIY-C-hlYgAAAIo"]
[Sat Apr 18 17:27:12.617062 2026] [proxy_fcgi:error] [pid 9863:tid 9889] [client 185.192.71.239:62397] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:27:13.172393 2026] [:error] [pid 9864:tid 9929] [client 52.236.80.95:61384] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gpt-sh.php"] [unique_id "aeNOcYCFeowknfXHM7nccwAAAFc"]
[Sat Apr 18 17:27:13.323672 2026] [:error] [pid 9863:tid 9874] [client 185.192.71.239:62397] [client 185.192.71.239] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aeNOcTjjiypiFrTucbK1VwAAAAE"]
[Sat Apr 18 17:27:13.890716 2026] [:error] [pid 9864:tid 9923] [client 185.192.71.229:30811] [client 185.192.71.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aeNOcYCFeowknfXHM7ncfAAAAFE"]
[Sat Apr 18 17:27:13.894156 2026] [:error] [pid 9864:tid 9914] [client 52.236.80.95:61429] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gpt-sh.php"] [unique_id "aeNOcYCFeowknfXHM7ncfQAAAEg"]
[Sat Apr 18 17:27:14.449896 2026] [:error] [pid 34288:tid 34308] [client 185.92.25.101:36861] [client 185.92.25.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/pomo/admin.php"] [unique_id "aeNOcuTIiy__PtiLmpm_FgAAAZA"]
[Sat Apr 18 17:27:14.905275 2026] [:error] [pid 34288:tid 34309] [client 52.236.80.95:61457] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gpt-sh.php"] [unique_id "aeNOcuTIiy__PtiLmpm_FwAAAZE"]
[Sat Apr 18 17:27:15.088521 2026] [:error] [pid 9864:tid 9929] [client 185.192.71.235:33525] [client 185.192.71.235] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/IXR/security.php"] [unique_id "aeNOc4CFeowknfXHM7ncgwAAAFc"]
[Sat Apr 18 17:27:15.459703 2026] [:error] [pid 13023:tid 13044] [client 52.236.80.95:65148] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gpt-sh.php"] [unique_id "aeNOc_1e7hG8DAeABB_cSAAAARM"]
[Sat Apr 18 17:27:16.007536 2026] [:error] [pid 9865:tid 9953] [client 185.92.25.97:36381] [client 185.92.25.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aeNOdKzb5knECIY-C-hlZgAAAJA"]
[Sat Apr 18 17:27:16.348759 2026] [:error] [pid 9970:tid 9982] [client 52.236.80.95:63617] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ne2026.php"] [unique_id "aeNOdCYdRLRhVmaIMx2PjAAAAMg"]
[Sat Apr 18 17:27:16.912777 2026] [:error] [pid 34290:tid 34339] [client 52.236.80.95:63970] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ne2026.php"] [unique_id "aeNOdBqX6WpmmAXOBi_qAAAAAdQ"]
[Sat Apr 18 17:27:17.150414 2026] [:error] [pid 9970:tid 9976] [client 91.230.225.174:43587] [client 91.230.225.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/fonts/about.php"] [unique_id "aeNOdSYdRLRhVmaIMx2PkAAAAMI"]
[Sat Apr 18 17:27:17.542764 2026] [:error] [pid 9970:tid 9992] [client 52.236.80.95:63140] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ne2026.php"] [unique_id "aeNOdSYdRLRhVmaIMx2PkgAAANI"]
[Sat Apr 18 17:27:17.697289 2026] [proxy_fcgi:error] [pid 9865:tid 9943] [client 185.92.25.94:44473] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:27:18.173959 2026] [:error] [pid 9864:tid 9918] [client 52.236.80.95:61482] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ne2026.php"] [unique_id "aeNOdoCFeowknfXHM7nchwAAAEw"]
[Sat Apr 18 17:27:18.592252 2026] [proxy_fcgi:error] [pid 9865:tid 9937] [client 185.92.25.94:44473] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:27:18.858465 2026] [:error] [pid 34237:tid 34240] [client 52.236.80.95:63070] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2ksm17n.php"] [unique_id "aeNOdhBmX4Wq5a6rxfZfCwAAAUE"]
[Sat Apr 18 17:27:18.882478 2026] [:error] [pid 9865:tid 9939] [client 185.92.25.94:44473] [client 185.92.25.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "aeNOdqzb5knECIY-C-hlcQAAAII"]
[Sat Apr 18 17:27:19.528214 2026] [:error] [pid 13023:tid 13039] [client 52.236.80.95:63060] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2ksm17n.php"] [unique_id "aeNOd_1e7hG8DAeABB_cUAAAAQ4"]
[Sat Apr 18 17:27:19.766830 2026] [proxy_fcgi:error] [pid 9864:tid 9926] [client 185.192.71.236:39913] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:27:20.067828 2026] [proxy_fcgi:error] [pid 9864:tid 9921] [client 185.192.71.236:39913] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:27:20.113965 2026] [:error] [pid 34290:tid 34342] [client 52.236.80.95:63124] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2ksm17n.php"] [unique_id "aeNOeBqX6WpmmAXOBi_qBwAAAdc"]
[Sat Apr 18 17:27:20.637079 2026] [:error] [pid 13023:tid 13037] [client 52.236.80.95:64640] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2ksm17n.php"] [unique_id "aeNOeP1e7hG8DAeABB_cUwAAAQw"]
[Sat Apr 18 17:27:21.267667 2026] [:error] [pid 9863:tid 9880] [client 52.236.80.95:65118] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/less.php"] [unique_id "aeNOeTjjiypiFrTucbK1XAAAAAc"]
[Sat Apr 18 17:27:21.498169 2026] [:error] [pid 9864:tid 9920] [client 185.192.71.236:39913] [client 185.192.71.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/file.php"] [unique_id "aeNOeYCFeowknfXHM7nclgAAAE4"]
[Sat Apr 18 17:27:22.039314 2026] [:error] [pid 34290:tid 34338] [client 52.236.80.95:64026] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/less.php"] [unique_id "aeNOehqX6WpmmAXOBi_qCgAAAdM"]
[Sat Apr 18 17:27:22.989149 2026] [:error] [pid 9864:tid 9925] [client 52.236.80.95:60177] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/less.php"] [unique_id "aeNOeoCFeowknfXHM7ncmAAAAFM"]
[Sat Apr 18 17:27:23.218323 2026] [:error] [pid 9863:tid 9882] [client 185.192.71.233:25399] [client 185.192.71.233] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "aeNOezjjiypiFrTucbK1ZAAAAAk"]
[Sat Apr 18 17:27:23.724566 2026] [:error] [pid 9863:tid 9896] [client 52.236.80.95:64594] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/less.php"] [unique_id "aeNOezjjiypiFrTucbK1ZgAAABc"]
[Sat Apr 18 17:27:23.830765 2026] [:error] [pid 9864:tid 9930] [client 185.92.25.94:35583] [client 185.92.25.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "aeNOe4CFeowknfXHM7ncmgAAAFg"]
[Sat Apr 18 17:27:24.551151 2026] [:error] [pid 9864:tid 9908] [client 52.236.80.95:64659] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp.php"] [unique_id "aeNOfICFeowknfXHM7ncngAAAEM"]
[Sat Apr 18 17:27:25.312367 2026] [:error] [pid 34290:tid 34342] [client 52.236.80.95:63987] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp.php"] [unique_id "aeNOfRqX6WpmmAXOBi_qEwAAAdc"]
[Sat Apr 18 17:27:26.127288 2026] [:error] [pid 9864:tid 9914] [client 52.236.80.95:64062] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp.php"] [unique_id "aeNOfoCFeowknfXHM7ncpwAAAEg"]
[Sat Apr 18 17:27:26.743426 2026] [:error] [pid 9864:tid 9907] [client 52.236.80.95:60658] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp.php"] [unique_id "aeNOfoCFeowknfXHM7ncrQAAAEI"]
[Sat Apr 18 17:27:27.411814 2026] [:error] [pid 9863:tid 9893] [client 52.236.80.95:63998] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xwx1.php"] [unique_id "aeNOfzjjiypiFrTucbK1aQAAABQ"]
[Sat Apr 18 17:27:27.693548 2026] [:error] [pid 9864:tid 9916] [client 185.92.25.105:35015] [client 185.92.25.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aeNOf4CFeowknfXHM7ncsQAAAEo"]
[Sat Apr 18 17:27:28.003618 2026] [:error] [pid 9863:tid 9878] [client 52.236.80.95:64035] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xwx1.php"] [unique_id "aeNOgDjjiypiFrTucbK1bgAAAAU"]
[Sat Apr 18 17:27:28.653691 2026] [:error] [pid 9863:tid 9881] [client 52.236.80.95:62612] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xwx1.php"] [unique_id "aeNOgDjjiypiFrTucbK1cAAAAAg"]
[Sat Apr 18 17:27:29.220748 2026] [:error] [pid 9864:tid 9915] [client 52.236.80.95:63120] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xwx1.php"] [unique_id "aeNOgYCFeowknfXHM7nctQAAAEk"]
[Sat Apr 18 17:27:29.735995 2026] [:error] [pid 9863:tid 9877] [client 52.236.80.95:64604] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fsgdjkl.php"] [unique_id "aeNOgTjjiypiFrTucbK1cgAAAAQ"]
[Sat Apr 18 17:27:30.326978 2026] [:error] [pid 13023:tid 13041] [client 52.236.80.95:64054] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fsgdjkl.php"] [unique_id "aeNOgv1e7hG8DAeABB_cWAAAARA"]
[Sat Apr 18 17:27:30.951973 2026] [:error] [pid 9864:tid 9919] [client 52.236.80.95:63652] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fsgdjkl.php"] [unique_id "aeNOgoCFeowknfXHM7ncuQAAAE0"]
[Sat Apr 18 17:27:31.467664 2026] [:error] [pid 34237:tid 34257] [client 52.236.80.95:63629] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fsgdjkl.php"] [unique_id "aeNOgxBmX4Wq5a6rxfZfEQAAAVI"]
[Sat Apr 18 17:27:32.012170 2026] [proxy_fcgi:error] [pid 34290:tid 34340] [client 185.192.71.232:54453] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:27:32.123093 2026] [:error] [pid 9970:tid 9997] [client 52.236.80.95:62098] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bless.php"] [unique_id "aeNOhCYdRLRhVmaIMx2PnQAAANc"]
[Sat Apr 18 17:27:32.579187 2026] [proxy_fcgi:error] [pid 34290:tid 34333] [client 185.192.71.232:54453] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:27:32.698971 2026] [:error] [pid 9863:tid 9885] [client 52.236.80.95:59230] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bless.php"] [unique_id "aeNOhDjjiypiFrTucbK1fgAAAAw"]
[Sat Apr 18 17:27:33.174983 2026] [proxy_fcgi:error] [pid 34290:tid 34343] [client 185.192.71.232:54453] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:27:33.394193 2026] [:error] [pid 9864:tid 9912] [client 52.236.80.95:63646] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bless.php"] [unique_id "aeNOhYCFeowknfXHM7ncwwAAAEY"]
[Sat Apr 18 17:27:33.969178 2026] [:error] [pid 34290:tid 34339] [client 52.236.80.95:64674] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bless.php"] [unique_id "aeNOhRqX6WpmmAXOBi_qLQAAAdQ"]
[Sat Apr 18 17:27:34.511941 2026] [:error] [pid 9864:tid 9914] [client 52.236.80.95:61439] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jlex.php"] [unique_id "aeNOhoCFeowknfXHM7ncxAAAAEg"]
[Sat Apr 18 17:27:34.760499 2026] [proxy_fcgi:error] [pid 34290:tid 34329] [client 185.192.71.232:54453] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:27:35.102210 2026] [:error] [pid 34290:tid 34324] [client 52.236.80.95:65116] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jlex.php"] [unique_id "aeNOhxqX6WpmmAXOBi_qMQAAAcU"]
[Sat Apr 18 17:27:35.651561 2026] [:error] [pid 9864:tid 9908] [client 52.236.80.95:64599] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jlex.php"] [unique_id "aeNOh4CFeowknfXHM7ncyQAAAEM"]
[Sat Apr 18 17:27:36.266829 2026] [:error] [pid 34290:tid 34338] [client 185.192.71.232:54453] [client 185.192.71.232] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aeNOiBqX6WpmmAXOBi_qNwAAAdM"]
[Sat Apr 18 17:27:36.335551 2026] [proxy_fcgi:error] [pid 9864:tid 9918] [client 52.236.80.95:65202] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:27:36.586666 2026] [proxy_fcgi:error] [pid 9864:tid 9924] [client 52.236.80.95:65202] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:27:36.850178 2026] [proxy_fcgi:error] [pid 9864:tid 9927] [client 52.236.80.95:65202] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:27:37.112526 2026] [proxy_fcgi:error] [pid 9864:tid 9920] [client 52.236.80.95:65202] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:27:37.310583 2026] [:error] [pid 34237:tid 34244] [client 185.92.25.103:43001] [client 185.92.25.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "aeNOiRBmX4Wq5a6rxfZfIwAAAUU"]
[Sat Apr 18 17:27:37.394565 2026] [proxy_fcgi:error] [pid 9864:tid 9908] [client 52.236.80.95:65202] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:27:37.668783 2026] [proxy_fcgi:error] [pid 9864:tid 9918] [client 52.236.80.95:65202] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:27:38.257205 2026] [:error] [pid 34290:tid 34334] [client 185.192.71.236:58685] [client 185.192.71.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "aeNOihqX6WpmmAXOBi_qOQAAAc8"]
[Sat Apr 18 17:27:39.090995 2026] [:error] [pid 9865:tid 9941] [client 185.192.71.245:55761] [client 185.192.71.245] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "aeNOi6zb5knECIY-C-hlewAAAIQ"]
[Sat Apr 18 17:27:39.350363 2026] [proxy_fcgi:error] [pid 9864:tid 9921] [client 52.236.80.95:65202] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:27:39.603927 2026] [proxy_fcgi:error] [pid 9864:tid 9919] [client 52.236.80.95:65202] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:27:39.864870 2026] [proxy_fcgi:error] [pid 9864:tid 9929] [client 52.236.80.95:65202] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:27:40.115924 2026] [proxy_fcgi:error] [pid 9864:tid 9909] [client 52.236.80.95:65202] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:27:40.149317 2026] [:error] [pid 34237:tid 34250] [client 185.92.25.100:64577] [client 185.92.25.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aeNOjBBmX4Wq5a6rxfZfMgAAAUs"]
[Sat Apr 18 17:27:40.404974 2026] [proxy_fcgi:error] [pid 9864:tid 9915] [client 52.236.80.95:65202] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:27:40.652560 2026] [:error] [pid 9864:tid 9907] [client 52.236.80.95:65202] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/only.php"] [unique_id "aeNOjICFeowknfXHM7nc6AAAAEI"]
[Sat Apr 18 17:27:40.841797 2026] [:error] [pid 34237:tid 34247] [client 185.192.71.232:44621] [client 185.192.71.232] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aeNOjBBmX4Wq5a6rxfZfNwAAAUg"]
[Sat Apr 18 17:27:41.238358 2026] [:error] [pid 34237:tid 34256] [client 52.236.80.95:62081] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/only.php"] [unique_id "aeNOjRBmX4Wq5a6rxfZfPAAAAVE"]
[Sat Apr 18 17:27:41.919181 2026] [:error] [pid 9864:tid 9924] [client 52.236.80.95:64004] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/only.php"] [unique_id "aeNOjYCFeowknfXHM7nc6wAAAFI"]
[Sat Apr 18 17:27:41.977366 2026] [:error] [pid 34237:tid 34249] [client 185.192.71.231:33847] [client 185.192.71.231] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/media/index.php"] [unique_id "aeNOjRBmX4Wq5a6rxfZfPgAAAUo"]
[Sat Apr 18 17:27:42.459800 2026] [:error] [pid 9864:tid 9909] [client 52.236.80.95:63091] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/only.php"] [unique_id "aeNOjoCFeowknfXHM7nc8AAAAEQ"]
[Sat Apr 18 17:27:43.021379 2026] [:error] [pid 13023:tid 13027] [client 52.236.80.95:63565] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sts.php"] [unique_id "aeNOj_1e7hG8DAeABB_cXQAAAQI"]
[Sat Apr 18 17:27:43.143672 2026] [:error] [pid 34237:tid 34243] [client 185.92.25.94:47213] [client 185.92.25.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "aeNOjxBmX4Wq5a6rxfZfPwAAAUQ"]
[Sat Apr 18 17:27:43.867061 2026] [:error] [pid 34290:tid 34338] [client 52.236.80.95:62016] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sts.php"] [unique_id "aeNOjxqX6WpmmAXOBi_qRgAAAdM"]
[Sat Apr 18 17:27:44.192874 2026] [:error] [pid 9863:tid 9880] [client 185.192.71.231:48377] [client 185.192.71.231] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "aeNOkDjjiypiFrTucbK1hQAAAAc"]
[Sat Apr 18 17:27:44.417337 2026] [:error] [pid 34290:tid 34341] [client 52.236.80.95:64638] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sts.php"] [unique_id "aeNOkBqX6WpmmAXOBi_qSAAAAdY"]
[Sat Apr 18 17:27:44.738707 2026] [:error] [pid 34290:tid 34319] [client 91.230.225.173:55411] [client 91.230.225.173] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "aeNOkBqX6WpmmAXOBi_qTAAAAcA"]
[Sat Apr 18 17:27:45.264969 2026] [:error] [pid 9863:tid 9896] [client 52.236.80.95:63965] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sts.php"] [unique_id "aeNOkTjjiypiFrTucbK1hgAAABc"]
[Sat Apr 18 17:27:45.943824 2026] [:error] [pid 34290:tid 34335] [client 52.236.80.95:64038] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Geforce.php"] [unique_id "aeNOkRqX6WpmmAXOBi_qUwAAAdA"]
[Sat Apr 18 17:27:46.076735 2026] [:error] [pid 9865:tid 9940] [client 185.192.71.235:49535] [client 185.192.71.235] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/fonts/themes.php"] [unique_id "aeNOkqzb5knECIY-C-hlgAAAAIM"]
[Sat Apr 18 17:27:46.481227 2026] [:error] [pid 34237:tid 34252] [client 52.236.80.95:63591] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Geforce.php"] [unique_id "aeNOkhBmX4Wq5a6rxfZfSwAAAU0"]
[Sat Apr 18 17:27:47.096491 2026] [:error] [pid 13023:tid 13030] [client 52.236.80.95:63618] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Geforce.php"] [unique_id "aeNOk_1e7hG8DAeABB_cXgAAAQU"]
[Sat Apr 18 17:27:47.289129 2026] [:error] [pid 9863:tid 9873] [client 185.192.71.229:55661] [client 185.192.71.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/certificates/index.php"] [unique_id "aeNOkzjjiypiFrTucbK1iwAAAAA"]
[Sat Apr 18 17:27:47.750084 2026] [:error] [pid 9863:tid 9875] [client 52.236.80.95:63110] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Geforce.php"] [unique_id "aeNOkzjjiypiFrTucbK1jQAAAAI"]
[Sat Apr 18 17:27:48.010147 2026] [proxy_fcgi:error] [pid 34237:tid 34249] [client 91.230.225.165:37895] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:27:48.334838 2026] [:error] [pid 9863:tid 9878] [client 52.236.80.95:62082] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dichku.php"] [unique_id "aeNOlDjjiypiFrTucbK1jgAAAAU"]
[Sat Apr 18 17:27:48.556948 2026] [:error] [pid 34237:tid 34251] [client 91.230.225.165:37895] [client 91.230.225.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "aeNOlBBmX4Wq5a6rxfZfVQAAAUw"]
[Sat Apr 18 17:27:48.916088 2026] [:error] [pid 9863:tid 9895] [client 52.236.80.95:65092] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dichku.php"] [unique_id "aeNOlDjjiypiFrTucbK1kgAAABY"]
[Sat Apr 18 17:27:49.480806 2026] [:error] [pid 34290:tid 34342] [client 52.236.80.95:62617] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dichku.php"] [unique_id "aeNOlRqX6WpmmAXOBi_qWQAAAdc"]
[Sat Apr 18 17:27:50.029735 2026] [:error] [pid 9863:tid 9874] [client 185.92.25.98:25563] [client 185.92.25.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "aeNOljjjiypiFrTucbK1nAAAAAE"]
[Sat Apr 18 17:27:50.148038 2026] [:error] [pid 34237:tid 34250] [client 52.236.80.95:65097] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dichku.php"] [unique_id "aeNOlhBmX4Wq5a6rxfZfWAAAAUs"]
[Sat Apr 18 17:27:50.888159 2026] [:error] [pid 13023:tid 13038] [client 52.236.80.95:64603] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Okxob.php"] [unique_id "aeNOlv1e7hG8DAeABB_cYAAAAQ0"]
[Sat Apr 18 17:27:51.333387 2026] [proxy_fcgi:error] [pid 9863:tid 9881] [client 185.92.25.102:34541] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:27:51.437490 2026] [:error] [pid 9865:tid 9950] [client 52.236.80.95:62621] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Okxob.php"] [unique_id "aeNOl6zb5knECIY-C-hlgwAAAI0"]
[Sat Apr 18 17:27:51.619961 2026] [:error] [pid 9863:tid 9877] [client 185.92.25.102:34541] [client 185.92.25.102] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aeNOlzjjiypiFrTucbK1pQAAAAQ"]
[Sat Apr 18 17:27:52.112651 2026] [:error] [pid 9865:tid 9955] [client 52.236.80.95:64644] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Okxob.php"] [unique_id "aeNOmKzb5knECIY-C-hlhwAAAJI"]
[Sat Apr 18 17:27:52.636756 2026] [:error] [pid 34288:tid 34293] [client 52.236.80.95:63664] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Okxob.php"] [unique_id "aeNOmOTIiy__PtiLmpm_IAAAAYE"]
[Sat Apr 18 17:27:52.747353 2026] [proxy_fcgi:error] [pid 9863:tid 9896] [client 185.92.25.108:31779] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:27:53.049944 2026] [proxy_fcgi:error] [pid 9863:tid 9883] [client 185.92.25.108:31779] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:27:53.188261 2026] [:error] [pid 34290:tid 34322] [client 52.236.80.95:62577] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/htto.php"] [unique_id "aeNOmRqX6WpmmAXOBi_qWgAAAcM"]
[Sat Apr 18 17:27:53.346474 2026] [proxy_fcgi:error] [pid 9863:tid 9888] [client 185.92.25.108:31779] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:27:53.623141 2026] [:error] [pid 9863:tid 9892] [client 185.92.25.108:31779] [client 185.92.25.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "aeNOmTjjiypiFrTucbK1qwAAABM"]
[Sat Apr 18 17:27:53.719277 2026] [:error] [pid 34290:tid 34341] [client 52.236.80.95:60667] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/htto.php"] [unique_id "aeNOmRqX6WpmmAXOBi_qXgAAAdY"]
[Sat Apr 18 17:27:54.249681 2026] [proxy_fcgi:error] [pid 13023:tid 13033] [client 91.230.225.171:41139] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:27:54.254694 2026] [:error] [pid 34237:tid 34259] [client 52.236.80.95:64686] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/htto.php"] [unique_id "aeNOmhBmX4Wq5a6rxfZfXwAAAVQ"]
[Sat Apr 18 17:27:54.584403 2026] [:error] [pid 13023:tid 13025] [client 91.230.225.171:41139] [client 91.230.225.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "aeNOmv1e7hG8DAeABB_cYwAAAQA"]
[Sat Apr 18 17:27:54.839695 2026] [:error] [pid 13023:tid 13049] [client 52.236.80.95:64598] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/htto.php"] [unique_id "aeNOmv1e7hG8DAeABB_cZQAAARg"]
[Sat Apr 18 17:27:55.444719 2026] [:error] [pid 34237:tid 34263] [client 52.236.80.95:65117] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-ccv.php"] [unique_id "aeNOmxBmX4Wq5a6rxfZfYgAAAVg"]
[Sat Apr 18 17:27:55.736385 2026] [proxy_fcgi:error] [pid 9864:tid 9908] [client 185.192.71.237:60437] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:27:56.012746 2026] [proxy_fcgi:error] [pid 9864:tid 9930] [client 185.192.71.237:60437] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:27:56.055020 2026] [:error] [pid 34237:tid 34244] [client 52.236.80.95:63062] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-ccv.php"] [unique_id "aeNOnBBmX4Wq5a6rxfZfZAAAAUU"]
[Sat Apr 18 17:27:56.341913 2026] [proxy_fcgi:error] [pid 9864:tid 9906] [client 185.192.71.237:60437] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:27:56.652862 2026] [:error] [pid 9864:tid 9916] [client 52.236.80.95:62595] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-ccv.php"] [unique_id "aeNOnICFeowknfXHM7ndBAAAAEo"]
[Sat Apr 18 17:27:57.167100 2026] [:error] [pid 34237:tid 34262] [client 52.236.80.95:63953] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-ccv.php"] [unique_id "aeNOnRBmX4Wq5a6rxfZfZgAAAVc"]
[Sat Apr 18 17:27:57.737832 2026] [:error] [pid 9864:tid 9915] [client 52.236.80.95:63637] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hfles.php"] [unique_id "aeNOnYCFeowknfXHM7ndDgAAAEk"]
[Sat Apr 18 17:27:57.817662 2026] [proxy_fcgi:error] [pid 9864:tid 9912] [client 185.192.71.237:60437] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:27:58.102055 2026] [proxy_fcgi:error] [pid 9864:tid 9930] [client 185.192.71.237:60437] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:27:58.415535 2026] [:error] [pid 9864:tid 9917] [client 52.236.80.95:63101] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hfles.php"] [unique_id "aeNOnoCFeowknfXHM7ndGQAAAEs"]
[Sat Apr 18 17:27:58.659884 2026] [proxy_fcgi:error] [pid 9864:tid 9916] [client 185.192.71.237:60437] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:27:59.065667 2026] [:error] [pid 9864:tid 9914] [client 52.236.80.95:65195] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hfles.php"] [unique_id "aeNOn4CFeowknfXHM7ndHgAAAEg"]
[Sat Apr 18 17:27:59.603803 2026] [:error] [pid 9864:tid 9908] [client 52.236.80.95:64040] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hfles.php"] [unique_id "aeNOn4CFeowknfXHM7ndJAAAAEM"]
[Sat Apr 18 17:27:59.604298 2026] [proxy_fcgi:error] [pid 9864:tid 9929] [client 185.192.71.237:60437] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:27:59.883277 2026] [:error] [pid 9864:tid 9930] [client 185.192.71.237:60437] [client 185.192.71.237] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "aeNOn4CFeowknfXHM7ndJQAAAFg"]
[Sat Apr 18 17:28:00.172871 2026] [:error] [pid 9864:tid 9922] [client 52.236.80.95:63080] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tx79.php"] [unique_id "aeNOoICFeowknfXHM7ndJwAAAFA"]
[Sat Apr 18 17:28:00.697214 2026] [:error] [pid 9970:tid 9974] [client 52.236.80.95:63085] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tx79.php"] [unique_id "aeNOoCYdRLRhVmaIMx2PrQAAAMA"]
[Sat Apr 18 17:28:00.767780 2026] [:error] [pid 34237:tid 34252] [client 185.92.25.99:61791] [client 185.92.25.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aeNOoBBmX4Wq5a6rxfZfbwAAAU0"]
[Sat Apr 18 17:28:01.383675 2026] [proxy_fcgi:error] [pid 9970:tid 9981] [client 185.192.71.229:24873] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:28:01.503820 2026] [:error] [pid 9864:tid 9917] [client 52.236.80.95:63046] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tx79.php"] [unique_id "aeNOoYCFeowknfXHM7ndKQAAAEs"]
[Sat Apr 18 17:28:01.664183 2026] [:error] [pid 9970:tid 9985] [client 185.192.71.229:24873] [client 185.192.71.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "aeNOoSYdRLRhVmaIMx2PsgAAAMs"]
[Sat Apr 18 17:28:02.164693 2026] [:error] [pid 9864:tid 9916] [client 52.236.80.95:65150] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tx79.php"] [unique_id "aeNOooCFeowknfXHM7ndKwAAAEo"]
[Sat Apr 18 17:28:02.741793 2026] [proxy_fcgi:error] [pid 34237:tid 34246] [client 185.92.25.103:46013] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:28:02.841312 2026] [:error] [pid 9864:tid 9915] [client 52.236.80.95:63588] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aligk.php"] [unique_id "aeNOooCFeowknfXHM7ndLQAAAEk"]
[Sat Apr 18 17:28:03.019610 2026] [:error] [pid 34237:tid 34241] [client 185.92.25.103:46013] [client 185.92.25.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aeNOoxBmX4Wq5a6rxfZffgAAAUI"]
[Sat Apr 18 17:28:03.358306 2026] [:error] [pid 9864:tid 9909] [client 52.236.80.95:65155] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aligk.php"] [unique_id "aeNOo4CFeowknfXHM7ndMQAAAEQ"]
[Sat Apr 18 17:28:03.783438 2026] [:error] [pid 9864:tid 9917] [client 185.92.25.136:32639] [client 185.92.25.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aeNOo4CFeowknfXHM7ndNAAAAEs"]
[Sat Apr 18 17:28:03.869208 2026] [:error] [pid 9864:tid 9907] [client 52.236.80.95:63943] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aligk.php"] [unique_id "aeNOo4CFeowknfXHM7ndNQAAAEI"]
[Sat Apr 18 17:28:04.441562 2026] [:error] [pid 34237:tid 34255] [client 52.236.80.95:64591] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aligk.php"] [unique_id "aeNOpBBmX4Wq5a6rxfZfiAAAAVA"]
[Sat Apr 18 17:28:05.033595 2026] [:error] [pid 34290:tid 34343] [client 52.236.80.95:62626] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/byrgo.php"] [unique_id "aeNOpRqX6WpmmAXOBi_qZgAAAdg"]
[Sat Apr 18 17:28:05.598150 2026] [:error] [pid 34290:tid 34328] [client 185.192.71.240:53281] [client 185.192.71.240] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aeNOpRqX6WpmmAXOBi_qaQAAAck"]
[Sat Apr 18 17:28:05.607973 2026] [:error] [pid 34290:tid 34324] [client 52.236.80.95:63644] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/byrgo.php"] [unique_id "aeNOpRqX6WpmmAXOBi_qagAAAcU"]
[Sat Apr 18 17:28:06.149163 2026] [:error] [pid 13023:tid 13046] [client 91.230.225.173:23957] [client 91.230.225.173] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dwelectservices.com.au"] [uri "/fm.php"] [unique_id "aeNOpv1e7hG8DAeABB_cbgAAARU"]
[Sat Apr 18 17:28:06.258613 2026] [:error] [pid 34237:tid 34243] [client 52.236.80.95:63605] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/byrgo.php"] [unique_id "aeNOphBmX4Wq5a6rxfZfjgAAAUQ"]
[Sat Apr 18 17:28:06.791663 2026] [:error] [pid 9970:tid 9995] [client 52.236.80.95:65147] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/byrgo.php"] [unique_id "aeNOpiYdRLRhVmaIMx2PtAAAANU"]
[Sat Apr 18 17:28:07.346602 2026] [:error] [pid 9864:tid 9907] [client 52.236.80.95:63667] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/press.php"] [unique_id "aeNOp4CFeowknfXHM7ndPgAAAEI"]
[Sat Apr 18 17:28:07.602914 2026] [proxy_fcgi:error] [pid 9970:tid 9998] [client 185.92.25.96:55411] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:28:07.937454 2026] [:error] [pid 34290:tid 34341] [client 52.236.80.95:64685] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/press.php"] [unique_id "aeNOpxqX6WpmmAXOBi_qbwAAAdY"]
[Sat Apr 18 17:28:08.156964 2026] [:error] [pid 9970:tid 9997] [client 185.92.25.96:55411] [client 185.92.25.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "aeNOqCYdRLRhVmaIMx2PuQAAANc"]
[Sat Apr 18 17:28:08.585832 2026] [:error] [pid 9863:tid 9876] [client 52.236.80.95:63960] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/press.php"] [unique_id "aeNOqDjjiypiFrTucbK1sQAAAAM"]
[Sat Apr 18 17:28:09.016466 2026] [proxy_fcgi:error] [pid 9863:tid 9873] [client 185.192.71.242:35619] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:28:09.144141 2026] [:error] [pid 13023:tid 13027] [client 52.236.80.95:63088] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/press.php"] [unique_id "aeNOqf1e7hG8DAeABB_cfAAAAQI"]
[Sat Apr 18 17:28:09.588077 2026] [:error] [pid 9863:tid 9882] [client 185.192.71.242:35619] [client 185.192.71.242] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/function.php"] [unique_id "aeNOqTjjiypiFrTucbK1twAAAAk"]
[Sat Apr 18 17:28:09.769938 2026] [:error] [pid 9864:tid 9921] [client 52.236.80.95:61479] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file61.php"] [unique_id "aeNOqYCFeowknfXHM7ndQQAAAE8"]
[Sat Apr 18 17:28:10.284021 2026] [:error] [pid 9864:tid 9929] [client 52.236.80.95:63941] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file61.php"] [unique_id "aeNOqoCFeowknfXHM7ndQwAAAFc"]
[Sat Apr 18 17:28:10.791038 2026] [:error] [pid 9865:tid 9956] [client 52.236.80.95:65170] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file61.php"] [unique_id "aeNOqqzb5knECIY-C-hlkgAAAJM"]
[Sat Apr 18 17:28:11.355705 2026] [:error] [pid 34237:tid 34252] [client 185.92.25.102:24327] [client 185.92.25.102] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/plugins.php"] [unique_id "aeNOqxBmX4Wq5a6rxfZflAAAAU0"]
[Sat Apr 18 17:28:11.419377 2026] [:error] [pid 9864:tid 9906] [client 52.236.80.95:63040] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file61.php"] [unique_id "aeNOq4CFeowknfXHM7ndSwAAAEE"]
[Sat Apr 18 17:28:12.302783 2026] [:error] [pid 9864:tid 9926] [client 52.236.80.95:60202] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tdsaz.php"] [unique_id "aeNOrICFeowknfXHM7ndUAAAAFQ"]
[Sat Apr 18 17:28:12.395858 2026] [proxy_fcgi:error] [pid 9865:tid 9937] [client 185.92.25.97:54353] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:28:12.688803 2026] [:error] [pid 9865:tid 9939] [client 185.92.25.97:54353] [client 185.92.25.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/chosen.php"] [unique_id "aeNOrKzb5knECIY-C-hllwAAAII"]
[Sat Apr 18 17:28:12.876591 2026] [:error] [pid 9864:tid 9929] [client 52.236.80.95:63982] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tdsaz.php"] [unique_id "aeNOrICFeowknfXHM7ndUwAAAFc"]
[Sat Apr 18 17:28:13.235862 2026] [:error] [pid 9864:tid 9922] [client 185.192.71.244:52387] [client 185.192.71.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "aeNOrYCFeowknfXHM7ndVQAAAFA"]
[Sat Apr 18 17:28:13.432701 2026] [:error] [pid 9864:tid 9923] [client 52.236.80.95:63973] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tdsaz.php"] [unique_id "aeNOrYCFeowknfXHM7ndWQAAAFE"]
[Sat Apr 18 17:28:13.998722 2026] [:error] [pid 34288:tid 34315] [client 52.236.80.95:63674] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tdsaz.php"] [unique_id "aeNOreTIiy__PtiLmpm_IwAAAZc"]
[Sat Apr 18 17:28:14.365350 2026] [proxy_fcgi:error] [pid 9864:tid 9921] [client 185.92.25.96:38195] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:28:14.555654 2026] [:error] [pid 9864:tid 9922] [client 52.236.80.95:62598] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ynjli.php"] [unique_id "aeNOroCFeowknfXHM7ndZQAAAFA"]
[Sat Apr 18 17:28:14.655448 2026] [proxy_fcgi:error] [pid 9864:tid 9928] [client 185.92.25.96:38195] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:28:15.135326 2026] [:error] [pid 34237:tid 34260] [client 52.236.80.95:63118] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ynjli.php"] [unique_id "aeNOrxBmX4Wq5a6rxfZfmAAAAVU"]
[Sat Apr 18 17:28:15.246760 2026] [proxy_fcgi:error] [pid 9864:tid 9918] [client 185.92.25.96:38195] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:28:15.761805 2026] [:error] [pid 9864:tid 9912] [client 52.236.80.95:62642] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ynjli.php"] [unique_id "aeNOr4CFeowknfXHM7ndcQAAAEY"]
[Sat Apr 18 17:28:15.797016 2026] [:error] [pid 9864:tid 9925] [client 185.92.25.96:38195] [client 185.92.25.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/atomlib.php"] [unique_id "aeNOr4CFeowknfXHM7ndcgAAAFM"]
[Sat Apr 18 17:28:16.346221 2026] [:error] [pid 34237:tid 34258] [client 91.230.225.171:39401] [client 91.230.225.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/rest-api/index.php"] [unique_id "aeNOsBBmX4Wq5a6rxfZfmQAAAVM"]
[Sat Apr 18 17:28:16.356784 2026] [:error] [pid 34237:tid 34254] [client 52.236.80.95:65196] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ynjli.php"] [unique_id "aeNOsBBmX4Wq5a6rxfZfmgAAAU8"]
[Sat Apr 18 17:28:16.913411 2026] [:error] [pid 9863:tid 9889] [client 52.236.80.95:65096] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sadcut1.php"] [unique_id "aeNOsDjjiypiFrTucbK1ugAAABA"]
[Sat Apr 18 17:28:17.529538 2026] [:error] [pid 9864:tid 9907] [client 52.236.80.95:61413] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sadcut1.php"] [unique_id "aeNOsYCFeowknfXHM7ndfQAAAEI"]
[Sat Apr 18 17:28:18.237330 2026] [:error] [pid 13023:tid 13046] [client 52.236.80.95:63677] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sadcut1.php"] [unique_id "aeNOsv1e7hG8DAeABB_cgQAAARU"]
[Sat Apr 18 17:28:18.773305 2026] [:error] [pid 34288:tid 34296] [client 52.236.80.95:63106] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sadcut1.php"] [unique_id "aeNOsuTIiy__PtiLmpm_KwAAAYQ"]
[Sat Apr 18 17:28:19.151750 2026] [proxy_fcgi:error] [pid 34288:tid 34314] [client 185.192.71.243:27319] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:28:19.396302 2026] [:error] [pid 9864:tid 9913] [client 52.236.80.95:65110] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rogsa.php"] [unique_id "aeNOs4CFeowknfXHM7ndhwAAAEc"]
[Sat Apr 18 17:28:19.437370 2026] [:error] [pid 34288:tid 34316] [client 185.192.71.243:27319] [client 185.192.71.243] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/index.php"] [unique_id "aeNOs-TIiy__PtiLmpm_LgAAAZg"]
[Sat Apr 18 17:28:20.005784 2026] [:error] [pid 9864:tid 9920] [client 91.230.225.172:20621] [client 91.230.225.172] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aeNOtICFeowknfXHM7ndjAAAAE4"]
[Sat Apr 18 17:28:20.149531 2026] [:error] [pid 9864:tid 9923] [client 52.236.80.95:64051] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rogsa.php"] [unique_id "aeNOtICFeowknfXHM7ndkAAAAFE"]
[Sat Apr 18 17:28:20.555620 2026] [:error] [pid 34290:tid 34320] [client 185.92.25.96:40599] [client 185.92.25.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aeNOtBqX6WpmmAXOBi_qigAAAcE"]
[Sat Apr 18 17:28:20.765043 2026] [:error] [pid 34290:tid 34335] [client 52.236.80.95:63095] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rogsa.php"] [unique_id "aeNOtBqX6WpmmAXOBi_qjAAAAdA"]
[Sat Apr 18 17:28:21.293068 2026] [:error] [pid 9864:tid 9921] [client 52.236.80.95:63638] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rogsa.php"] [unique_id "aeNOtYCFeowknfXHM7ndkgAAAE8"]
[Sat Apr 18 17:28:21.900916 2026] [:error] [pid 9865:tid 9961] [client 52.236.80.95:64589] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zoper1.php"] [unique_id "aeNOtazb5knECIY-C-hloAAAAJg"]
[Sat Apr 18 17:28:22.269972 2026] [proxy_fcgi:error] [pid 34290:tid 34328] [client 185.192.71.232:52719] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:28:22.448706 2026] [:error] [pid 9864:tid 9928] [client 52.236.80.95:62063] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zoper1.php"] [unique_id "aeNOtoCFeowknfXHM7ndlQAAAFY"]
[Sat Apr 18 17:28:22.540499 2026] [:error] [pid 34290:tid 34333] [client 185.192.71.232:52719] [client 185.192.71.232] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/Exception-wp.php"] [unique_id "aeNOthqX6WpmmAXOBi_qmgAAAc4"]
[Sat Apr 18 17:28:23.191345 2026] [:error] [pid 9970:tid 9994] [client 52.236.80.95:65115] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zoper1.php"] [unique_id "aeNOtyYdRLRhVmaIMx2PxwAAANQ"]
[Sat Apr 18 17:28:23.440095 2026] [:error] [pid 9970:tid 9983] [client 185.192.71.235:33233] [client 185.192.71.235] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aeNOtyYdRLRhVmaIMx2PyAAAAMk"]
[Sat Apr 18 17:28:23.794896 2026] [:error] [pid 9970:tid 9975] [client 52.236.80.95:62623] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zoper1.php"] [unique_id "aeNOtyYdRLRhVmaIMx2PygAAAME"]
[Sat Apr 18 17:28:24.090424 2026] [proxy_fcgi:error] [pid 9864:tid 9914] [client 185.192.71.243:65101] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:28:24.348409 2026] [:error] [pid 34237:tid 34244] [client 52.236.80.95:64592] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/new3.php"] [unique_id "aeNOuBBmX4Wq5a6rxfZfoQAAAUU"]
[Sat Apr 18 17:28:24.368369 2026] [proxy_fcgi:error] [pid 9864:tid 9929] [client 185.192.71.243:65101] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:28:24.935500 2026] [:error] [pid 9865:tid 9937] [client 52.236.80.95:64587] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/new3.php"] [unique_id "aeNOuKzb5knECIY-C-hlowAAAIA"]
[Sat Apr 18 17:28:24.939731 2026] [proxy_fcgi:error] [pid 9864:tid 9921] [client 185.192.71.243:65101] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:28:25.661460 2026] [:error] [pid 9865:tid 9941] [client 52.236.80.95:63971] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/new3.php"] [unique_id "aeNOuazb5knECIY-C-hlpgAAAIQ"]
[Sat Apr 18 17:28:26.176696 2026] [:error] [pid 9864:tid 9927] [client 185.192.71.243:65101] [client 185.192.71.243] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.192.71.243, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/js/wp-login.php"] [unique_id "aeNOuoCFeowknfXHM7ndpQAAAFU"]
[Sat Apr 18 17:28:26.336302 2026] [:error] [pid 34237:tid 34245] [client 52.236.80.95:65162] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/new3.php"] [unique_id "aeNOuhBmX4Wq5a6rxfZfqAAAAUY"]
[Sat Apr 18 17:28:26.755034 2026] [:error] [pid 9864:tid 9922] [client 185.192.71.243:65101] File does not exist: /home/dwelects/public_html/worm.PhP
[Sat Apr 18 17:28:27.046552 2026] [proxy_fcgi:error] [pid 9864:tid 9914] [client 185.192.71.243:65101] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:28:27.335975 2026] [proxy_fcgi:error] [pid 9864:tid 9929] [client 185.192.71.243:65101] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:28:27.908730 2026] [:error] [pid 9864:tid 9926] [client 185.192.71.243:65101] [client 185.192.71.243] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.192.71.243, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "aeNOu4CFeowknfXHM7ndqwAAAFQ"]
[Sat Apr 18 17:28:28.600032 2026] [:error] [pid 9864:tid 9925] [client 52.236.80.95:63630] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/0yellow.php"] [unique_id "aeNOvICFeowknfXHM7ndrwAAAFM"]
[Sat Apr 18 17:28:28.761945 2026] [proxy_fcgi:error] [pid 9864:tid 9907] [client 185.192.71.243:65101] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:28:29.066031 2026] [proxy_fcgi:error] [pid 9864:tid 9928] [client 185.192.71.243:65101] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:28:29.615097 2026] [proxy_fcgi:error] [pid 9864:tid 9927] [client 185.192.71.243:65101] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:28:30.208541 2026] [proxy_fcgi:error] [pid 9864:tid 9906] [client 185.192.71.243:65101] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:28:31.063165 2026] [proxy_fcgi:error] [pid 9864:tid 9917] [client 185.192.71.243:65101] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:28:33.056287 2026] [proxy_fcgi:error] [pid 9864:tid 9906] [client 185.192.71.243:65101] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:28:33.334375 2026] [proxy_fcgi:error] [pid 9864:tid 9929] [client 185.192.71.243:65101] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:28:34.774202 2026] [proxy_fcgi:error] [pid 9864:tid 9918] [client 185.192.71.243:65101] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:28:34.778931 2026] [:error] [pid 34237:tid 34251] [client 52.236.80.95:65192] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/0yellow.php"] [unique_id "aeNOwhBmX4Wq5a6rxfZfvAAAAUw"]
[Sat Apr 18 17:28:35.334198 2026] [:error] [pid 9864:tid 9927] [client 185.192.71.243:65101] [client 185.192.71.243] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "aeNOw4CFeowknfXHM7nd3gAAAFU"]
[Sat Apr 18 17:28:36.604820 2026] [proxy_fcgi:error] [pid 9865:tid 9941] [client 185.192.71.234:52175] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:28:36.902453 2026] [:error] [pid 9865:tid 9954] [client 185.192.71.234:52175] [client 185.192.71.234] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aeNOxKzb5knECIY-C-hlsgAAAJE"]
[Sat Apr 18 17:28:37.450219 2026] [proxy_fcgi:error] [pid 9864:tid 9907] [client 185.92.25.94:31937] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:28:37.731858 2026] [proxy_fcgi:error] [pid 9864:tid 9928] [client 185.92.25.94:31937] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:28:38.018661 2026] [:error] [pid 9864:tid 9915] [client 185.92.25.94:31937] [client 185.92.25.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/atomlib.php"] [unique_id "aeNOxoCFeowknfXHM7nd6AAAAEk"]
[Sat Apr 18 17:28:39.121746 2026] [proxy_fcgi:error] [pid 34290:tid 34324] [client 185.192.71.241:52695] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:28:39.741877 2026] [proxy_fcgi:error] [pid 34290:tid 34330] [client 185.192.71.241:52695] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:28:40.294531 2026] [proxy_fcgi:error] [pid 34290:tid 34327] [client 185.192.71.241:52695] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:28:40.578663 2026] [proxy_fcgi:error] [pid 34290:tid 34335] [client 185.192.71.241:52695] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:28:41.114428 2026] [:error] [pid 34290:tid 34326] [client 185.192.71.241:52695] [client 185.192.71.241] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aeNOyRqX6WpmmAXOBi_qvAAAAcc"]
[Sat Apr 18 17:28:41.691749 2026] [proxy_fcgi:error] [pid 34288:tid 34297] [client 185.92.25.95:60031] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:28:41.969909 2026] [proxy_fcgi:error] [pid 34288:tid 34310] [client 185.92.25.95:60031] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:28:42.243898 2026] [:error] [pid 34288:tid 34294] [client 185.92.25.95:60031] [client 185.92.25.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aeNOyuTIiy__PtiLmpm_QgAAAYI"]
[Sat Apr 18 17:28:44.173699 2026] [:error] [pid 34290:tid 34329] [client 185.192.71.242:53549] [client 185.192.71.242] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aeNOzBqX6WpmmAXOBi_qwQAAAco"]
[Sat Apr 18 17:28:45.029670 2026] [proxy_fcgi:error] [pid 34237:tid 34252] [client 185.192.71.238:62733] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:28:45.888984 2026] [proxy_fcgi:error] [pid 34237:tid 34253] [client 185.192.71.238:62733] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:28:46.164392 2026] [proxy_fcgi:error] [pid 34237:tid 34260] [client 185.192.71.238:62733] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:28:46.435564 2026] [:error] [pid 34237:tid 34263] [client 185.192.71.238:62733] [client 185.192.71.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "aeNOzhBmX4Wq5a6rxfZf0gAAAVg"]
[Sat Apr 18 17:28:47.022420 2026] [:error] [pid 34237:tid 34244] [client 185.192.71.238:64529] [client 185.192.71.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "aeNOzxBmX4Wq5a6rxfZf2AAAAUU"]
[Sat Apr 18 17:28:50.572942 2026] [proxy_fcgi:error] [pid 9970:tid 9989] [client 91.230.225.169:64349] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:28:51.129958 2026] [:error] [pid 9970:tid 9977] [client 91.230.225.169:64349] [client 91.230.225.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/dist/default.php"] [unique_id "aeNO0yYdRLRhVmaIMx2P5wAAAMM"]
[Sat Apr 18 17:28:51.977039 2026] [:error] [pid 34237:tid 34257] [client 91.230.225.173:38279] [client 91.230.225.173] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dwelectservices.com.au"] [uri "/tiny.php"] [unique_id "aeNO0xBmX4Wq5a6rxfZf7QAAAVI"]
[Sat Apr 18 17:28:53.928342 2026] [proxy_fcgi:error] [pid 9864:tid 9923] [client 185.92.25.99:36569] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:28:54.212665 2026] [proxy_fcgi:error] [pid 9864:tid 9917] [client 185.92.25.99:36569] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:28:55.690666 2026] [:error] [pid 9864:tid 9915] [client 185.92.25.99:36569] [client 185.92.25.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "aeNO14CFeowknfXHM7neGwAAAEk"]
[Sat Apr 18 17:28:57.025275 2026] [proxy_fcgi:error] [pid 34288:tid 34300] [client 185.92.25.98:24037] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:28:57.323444 2026] [proxy_fcgi:error] [pid 34288:tid 34314] [client 185.92.25.98:24037] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:28:57.889398 2026] [proxy_fcgi:error] [pid 34288:tid 34308] [client 185.92.25.98:24037] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:28:58.741951 2026] [:error] [pid 34288:tid 34299] [client 185.92.25.98:24037] [client 185.92.25.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/Parse/about.php"] [unique_id "aeNO2uTIiy__PtiLmpm_TQAAAYc"]
[Sat Apr 18 17:28:59.300456 2026] [proxy_fcgi:error] [pid 9864:tid 9909] [client 185.192.71.243:61305] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:29:00.129780 2026] [:error] [pid 9864:tid 9906] [client 185.192.71.243:61305] [client 185.192.71.243] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "aeNO3ICFeowknfXHM7neLgAAAEE"]
[Sat Apr 18 17:29:00.954117 2026] [proxy_fcgi:error] [pid 9864:tid 9927] [client 91.230.225.178:41909] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:29:01.779368 2026] [proxy_fcgi:error] [pid 9864:tid 9917] [client 91.230.225.178:41909] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:29:02.059743 2026] [proxy_fcgi:error] [pid 9864:tid 9913] [client 91.230.225.178:41909] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:29:02.615489 2026] [:error] [pid 9864:tid 9929] [client 91.230.225.178:41909] [client 91.230.225.178] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.230.225.178, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/colors/ocean/wp-login.php"] [unique_id "aeNO3oCFeowknfXHM7nePAAAAFc"]
[Sat Apr 18 17:29:03.449288 2026] [proxy_fcgi:error] [pid 9864:tid 9912] [client 91.230.225.178:41909] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:29:04.042262 2026] [:error] [pid 9864:tid 9914] [client 91.230.225.178:41909] [client 91.230.225.178] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/Cache/upfile.php"] [unique_id "aeNO4ICFeowknfXHM7neQgAAAEg"]
[Sat Apr 18 17:29:04.666291 2026] [proxy_fcgi:error] [pid 9970:tid 9990] [client 185.92.25.105:50897] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:29:04.950111 2026] [:error] [pid 9970:tid 9985] [client 185.92.25.105:50897] [client 185.92.25.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "aeNO4CYdRLRhVmaIMx2P8AAAAMs"]
[Sat Apr 18 17:29:05.513644 2026] [proxy_fcgi:error] [pid 34290:tid 34342] [client 185.192.71.243:40907] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:29:06.105461 2026] [proxy_fcgi:error] [pid 34290:tid 34332] [client 185.192.71.243:40907] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:29:06.678277 2026] [:error] [pid 34290:tid 34321] [client 185.192.71.243:40907] [client 185.192.71.243] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/widgets/class-wp-widget-search-function.php"] [unique_id "aeNO4hqX6WpmmAXOBi_q4wAAAcI"]
[Sat Apr 18 17:29:07.501394 2026] [proxy_fcgi:error] [pid 34290:tid 34335] [client 91.230.225.178:37559] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:29:07.776856 2026] [proxy_fcgi:error] [pid 34290:tid 34340] [client 91.230.225.178:37559] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:29:08.051566 2026] [:error] [pid 34290:tid 34337] [client 91.230.225.178:37559] [client 91.230.225.178] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/Canonical.php"] [unique_id "aeNO5BqX6WpmmAXOBi_q5wAAAdI"]
[Sat Apr 18 17:29:08.614564 2026] [:error] [pid 9864:tid 9909] [client 185.192.71.244:30579] [client 185.192.71.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "aeNO5ICFeowknfXHM7neTAAAAEQ"]
[Sat Apr 18 17:29:09.169558 2026] [proxy_fcgi:error] [pid 9864:tid 9912] [client 185.92.25.106:41735] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:29:09.487668 2026] [proxy_fcgi:error] [pid 9864:tid 9922] [client 185.92.25.106:41735] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:29:10.043691 2026] [:error] [pid 9864:tid 9905] [client 185.92.25.106:41735] [client 185.92.25.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/class-feed-index.php"] [unique_id "aeNO5oCFeowknfXHM7neWwAAAEA"]
[Sat Apr 18 17:29:10.604372 2026] [proxy_fcgi:error] [pid 34290:tid 34329] [client 91.230.225.177:51271] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:29:11.175358 2026] [proxy_fcgi:error] [pid 34290:tid 34330] [client 91.230.225.177:51271] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:29:11.472995 2026] [:error] [pid 34290:tid 34322] [client 91.230.225.177:51271] [client 91.230.225.177] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php"] [unique_id "aeNO5xqX6WpmmAXOBi_q8QAAAcM"]
[Sat Apr 18 17:29:12.301983 2026] [:error] [pid 9865:tid 9946] [client 185.92.25.106:40081] [client 185.92.25.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/db.php"] [unique_id "aeNO6Kzb5knECIY-C-hl0QAAAIk"]
[Sat Apr 18 17:29:12.851168 2026] [:error] [pid 13023:tid 13030] [client 185.92.25.101:50467] [client 185.92.25.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/class-wp-dependency-float.php"] [unique_id "aeNO6P1e7hG8DAeABB_cmAAAAQU"]
[Sat Apr 18 17:29:13.411584 2026] [:error] [pid 9865:tid 9951] [client 91.230.225.167:65155] [client 91.230.225.167] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "aeNO6azb5knECIY-C-hl1gAAAI4"]
[Sat Apr 18 17:29:13.977097 2026] [:error] [pid 9864:tid 9919] [client 185.192.71.237:29205] [client 185.192.71.237] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/PHPMailer/purna.php"] [unique_id "aeNO6YCFeowknfXHM7neYAAAAE0"]
[Sat Apr 18 17:29:14.708860 2026] [:error] [pid 9970:tid 9975] [client 91.230.225.179:63601] [client 91.230.225.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/interactivity-api/interactivity-api-class.php"] [unique_id "aeNO6iYdRLRhVmaIMx2P-QAAAME"]
[Sat Apr 18 17:29:15.244958 2026] [:error] [pid 34290:tid 34325] [client 185.192.71.227:46183] [client 185.192.71.227] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/l10n/class-wp-widddget-pages.php"] [unique_id "aeNO6xqX6WpmmAXOBi_q-QAAAcY"]
[Sat Apr 18 17:29:17.394756 2026] [:error] [pid 34237:tid 34242] [client 91.230.225.173:39873] [client 91.230.225.173] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php"] [unique_id "aeNO7RBmX4Wq5a6rxfZgJAAAAUM"]
[Sat Apr 18 17:29:17.947912 2026] [:error] [pid 9970:tid 9977] [client 91.230.225.178:31885] [client 91.230.225.178] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php"] [unique_id "aeNO7SYdRLRhVmaIMx2P-wAAAMM"]
[Sat Apr 18 17:29:18.506461 2026] [:error] [pid 13023:tid 13035] [client 185.92.25.100:22551] [client 185.92.25.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/ID3/module.audio-video.riff-set.php"] [unique_id "aeNO7v1e7hG8DAeABB_cnQAAAQo"]
[Sat Apr 18 17:29:19.090145 2026] [:error] [pid 9863:tid 9888] [client 91.230.225.166:41863] [client 91.230.225.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/tinymce/utils/license.php"] [unique_id "aeNO7zjjiypiFrTucbK11QAAAA8"]
[Sat Apr 18 17:29:19.630403 2026] [:error] [pid 34290:tid 34327] [client 91.230.225.174:21789] [client 91.230.225.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Text/options.php"] [unique_id "aeNO7xqX6WpmmAXOBi_q-gAAAcg"]
[Sat Apr 18 17:29:20.204897 2026] [proxy_fcgi:error] [pid 34290:tid 34340] [client 185.192.71.226:44877] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:29:21.056515 2026] [:error] [pid 34290:tid 34323] [client 185.192.71.226:44877] [client 185.192.71.226] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.192.71.226, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "aeNO8RqX6WpmmAXOBi_rAAAAAcQ"]
[Sat Apr 18 17:29:22.459401 2026] [:error] [pid 34290:tid 34328] [client 185.192.71.226:44877] [client 185.192.71.226] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/IXR/goto.php"] [unique_id "aeNO8hqX6WpmmAXOBi_rBQAAAck"]
[Sat Apr 18 17:29:24.003747 2026] [proxy_fcgi:error] [pid 34288:tid 34292] [client 185.92.25.94:31675] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:29:24.279192 2026] [proxy_fcgi:error] [pid 34288:tid 34311] [client 185.92.25.94:31675] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:29:25.477156 2026] [proxy_fcgi:error] [pid 34288:tid 34314] [client 185.92.25.94:31675] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:29:25.768035 2026] [proxy_fcgi:error] [pid 34288:tid 34296] [client 185.92.25.94:31675] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:29:26.901921 2026] [proxy_fcgi:error] [pid 34288:tid 34297] [client 185.92.25.94:31675] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:29:27.195170 2026] [proxy_fcgi:error] [pid 34288:tid 34310] [client 185.92.25.94:31675] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:29:27.471669 2026] [proxy_fcgi:error] [pid 34288:tid 34315] [client 185.92.25.94:31675] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:29:27.755608 2026] [proxy_fcgi:error] [pid 34288:tid 34302] [client 185.92.25.94:31675] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:29:28.057606 2026] [:error] [pid 34288:tid 34313] [client 185.92.25.94:31675] [client 185.92.25.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aeNO-OTIiy__PtiLmpm_bQAAAZU"]
[Sat Apr 18 17:29:28.616008 2026] [:error] [pid 9864:tid 9915] [client 185.192.71.234:32981] [client 185.192.71.234] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/wp_class_datlib.php"] [unique_id "aeNO-ICFeowknfXHM7necQAAAEk"]
[Sat Apr 18 17:29:29.237960 2026] [:error] [pid 34290:tid 34328] [client 185.92.25.137:30283] [client 185.92.25.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "aeNO-RqX6WpmmAXOBi_rFgAAAck"]
[Sat Apr 18 17:29:30.085326 2026] [proxy_fcgi:error] [pid 34290:tid 34330] [client 185.92.25.96:20049] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:29:30.362108 2026] [proxy_fcgi:error] [pid 34290:tid 34322] [client 185.92.25.96:20049] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:29:30.941977 2026] [proxy_fcgi:error] [pid 34290:tid 34320] [client 185.92.25.96:20049] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:29:31.507510 2026] [:error] [pid 34290:tid 34338] [client 185.92.25.96:20049] [client 185.92.25.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/Registry-private.php"] [unique_id "aeNO-xqX6WpmmAXOBi_rIAAAAdM"]
[Sat Apr 18 17:29:32.057205 2026] [:error] [pid 34237:tid 34241] [client 185.92.25.108:28483] [client 185.92.25.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-meta.php"] [unique_id "aeNO_BBmX4Wq5a6rxfZgNQAAAUI"]
[Sat Apr 18 17:29:32.611096 2026] [:error] [pid 9865:tid 9961] [client 91.230.225.178:22621] [client 91.230.225.178] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/widgets/bypass.php"] [unique_id "aeNO_Kzb5knECIY-C-hl5gAAAJg"]
[Sat Apr 18 17:29:36.433557 2026] [:error] [pid 13023:tid 13033] [client 185.92.25.94:29887] [client 185.92.25.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/style-engine/adminfus.php"] [unique_id "aeNPAP1e7hG8DAeABB_cuAAAAQg"]
[Sat Apr 18 17:29:37.048671 2026] [proxy_fcgi:error] [pid 9970:tid 9974] [client 185.192.71.237:53193] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:29:37.347758 2026] [:error] [pid 9970:tid 9997] [client 185.192.71.237:53193] [client 185.192.71.237] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/group/wp-style.php"] [unique_id "aeNPASYdRLRhVmaIMx2QEwAAANc"]
[Sat Apr 18 17:29:38.471075 2026] [:error] [pid 34290:tid 34326] [client 185.192.71.241:20195] [client 185.192.71.241] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/widgets/class-wp-wolf-widget.php"] [unique_id "aeNPAhqX6WpmmAXOBi_rKgAAAcc"]
[Sat Apr 18 17:29:42.118217 2026] [:error] [pid 9864:tid 9920] [client 185.92.25.106:57101] [client 185.92.25.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Text/index.php"] [unique_id "aeNPBoCFeowknfXHM7nemgAAAE4"]
[Sat Apr 18 17:29:42.672761 2026] [proxy_fcgi:error] [pid 9863:tid 9892] [client 185.192.71.244:40607] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:29:42.968664 2026] [:error] [pid 9863:tid 9893] [client 185.192.71.244:40607] [client 185.192.71.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/about.php"] [unique_id "aeNPBjjjiypiFrTucbK15AAAABQ"]
[Sat Apr 18 17:29:44.088700 2026] [proxy_fcgi:error] [pid 34290:tid 34338] [client 185.192.71.242:26623] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:29:44.961839 2026] [proxy_fcgi:error] [pid 34290:tid 34327] [client 185.192.71.242:26623] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:29:45.247049 2026] [:error] [pid 34290:tid 34341] [client 185.192.71.242:26623] [client 185.192.71.242] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/wp-sup.php"] [unique_id "aeNPCRqX6WpmmAXOBi_rNAAAAdY"]
[Sat Apr 18 17:29:46.379328 2026] [:error] [pid 9865:tid 9959] [client 91.230.225.176:21701] [client 91.230.225.176] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/widgets/class-t.api.php"] [unique_id "aeNPCqzb5knECIY-C-hl_AAAAJY"]
[Sat Apr 18 17:29:48.026633 2026] [:error] [pid 9970:tid 9981] [client 185.92.25.96:55991] [client 185.92.25.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/dist/require-dynamic-blocks.php"] [unique_id "aeNPDCYdRLRhVmaIMx2QKwAAAMc"]
[Sat Apr 18 17:29:49.531616 2026] [proxy_fcgi:error] [pid 9864:tid 9926] [client 52.236.80.95:63555] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:29:49.820370 2026] [:error] [pid 34290:tid 34333] [client 185.92.25.103:59881] [client 185.92.25.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/widgets/class-wp-widget-rss-database.php"] [unique_id "aeNPDRqX6WpmmAXOBi_rOgAAAc4"]
[Sat Apr 18 17:29:49.830210 2026] [proxy_fcgi:error] [pid 9864:tid 9914] [client 52.236.80.95:63555] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:29:50.113529 2026] [proxy_fcgi:error] [pid 9864:tid 9919] [client 52.236.80.95:63555] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:29:50.424785 2026] [proxy_fcgi:error] [pid 9864:tid 9923] [client 52.236.80.95:63555] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:29:50.698553 2026] [proxy_fcgi:error] [pid 34290:tid 34320] [client 185.92.25.108:33827] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:29:50.739918 2026] [proxy_fcgi:error] [pid 9864:tid 9922] [client 52.236.80.95:63555] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:29:50.984734 2026] [:error] [pid 34290:tid 34337] [client 185.92.25.108:33827] [client 185.92.25.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/class-wp-customize-manager-client.php"] [unique_id "aeNPDhqX6WpmmAXOBi_rQAAAAdI"]
[Sat Apr 18 17:29:51.061461 2026] [proxy_fcgi:error] [pid 9864:tid 9905] [client 52.236.80.95:63555] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:29:51.369143 2026] [proxy_fcgi:error] [pid 9864:tid 9928] [client 52.236.80.95:63555] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:29:51.606451 2026] [:error] [pid 34288:tid 34315] [client 185.92.25.105:30211] [client 185.92.25.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-boolean.php"] [unique_id "aeNPD-TIiy__PtiLmpm_hQAAAZc"]
[Sat Apr 18 17:29:51.697444 2026] [proxy_fcgi:error] [pid 9864:tid 9907] [client 52.236.80.95:63555] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:29:52.009975 2026] [proxy_fcgi:error] [pid 9864:tid 9920] [client 52.236.80.95:63555] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:29:52.260668 2026] [proxy_fcgi:error] [pid 9864:tid 9917] [client 52.236.80.95:63555] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:29:52.572671 2026] [proxy_fcgi:error] [pid 9864:tid 9929] [client 52.236.80.95:63555] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:29:52.867441 2026] [:error] [pid 9864:tid 9909] [client 52.236.80.95:63555] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zc-243.php"] [unique_id "aeNPEICFeowknfXHM7neswAAAEQ"]
[Sat Apr 18 17:29:53.528088 2026] [:error] [pid 34288:tid 34299] [client 91.230.225.173:50607] [client 91.230.225.173] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/smilies/simi.php"] [unique_id "aeNPEeTIiy__PtiLmpm_kQAAAYc"]
[Sat Apr 18 17:29:54.130329 2026] [proxy_fcgi:error] [pid 34290:tid 34333] [client 91.230.225.174:40855] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:29:55.280030 2026] [proxy_fcgi:error] [pid 34290:tid 34320] [client 91.230.225.174:40855] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:29:55.577749 2026] [:error] [pid 34290:tid 34340] [client 91.230.225.174:40855] [client 91.230.225.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/style-engine-session.php"] [unique_id "aeNPExqX6WpmmAXOBi_rVwAAAdU"]
[Sat Apr 18 17:29:56.742316 2026] [proxy_fcgi:error] [pid 34290:tid 34325] [client 185.92.25.97:28711] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:29:57.289709 2026] [:error] [pid 34290:tid 34341] [client 185.92.25.97:28711] [client 185.92.25.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aeNPFRqX6WpmmAXOBi_rXgAAAdY"]
[Sat Apr 18 17:29:57.848451 2026] [:error] [pid 9863:tid 9895] [client 185.192.71.230:33075] [client 185.192.71.230] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/file/wp-style.php"] [unique_id "aeNPFTjjiypiFrTucbK18QAAABY"]
[Sat Apr 18 17:29:58.689691 2026] [:error] [pid 34290:tid 34338] [client 91.230.225.172:61535] [client 91.230.225.172] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/IXR/class-IXR-cilent.php"] [unique_id "aeNPFhqX6WpmmAXOBi_rZQAAAdM"]
[Sat Apr 18 17:29:59.812340 2026] [:error] [pid 34290:tid 34341] [client 185.192.71.231:46781] [client 185.192.71.231] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/install.php"] [unique_id "aeNPFxqX6WpmmAXOBi_raAAAAdY"]
[Sat Apr 18 17:30:00.359941 2026] [:error] [pid 9863:tid 9879] [client 185.92.25.106:57755] [client 185.92.25.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/PHPMailer/xleet.php"] [unique_id "aeNPGDjjiypiFrTucbK1-AAAAAY"]
[Sat Apr 18 17:30:01.210917 2026] [proxy_fcgi:error] [pid 34288:tid 34307] [client 185.192.71.230:47717] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:30:03.015022 2026] [:error] [pid 34288:tid 34312] [client 185.192.71.230:47717] [client 185.192.71.230] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/category-double.php"] [unique_id "aeNPG-TIiy__PtiLmpm_pQAAAZQ"]
[Sat Apr 18 17:30:04.194809 2026] [:error] [pid 34290:tid 34322] [client 91.230.225.172:56873] [client 91.230.225.172] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/db.php"] [unique_id "aeNPHBqX6WpmmAXOBi_rbgAAAcM"]
[Sat Apr 18 17:30:04.735606 2026] [:error] [pid 9970:tid 9985] [client 185.92.25.98:35887] [client 185.92.25.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/widgets/security.php"] [unique_id "aeNPHCYdRLRhVmaIMx2QNAAAAMs"]
[Sat Apr 18 17:30:05.684689 2026] [proxy_fcgi:error] [pid 9864:tid 9916] [client 185.92.25.95:51085] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:30:05.978781 2026] [:error] [pid 9864:tid 9907] [client 185.92.25.95:51085] [client 185.92.25.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/class-wp-language-pack.php"] [unique_id "aeNPHYCFeowknfXHM7nezAAAAEI"]
[Sat Apr 18 17:30:06.789827 2026] [:error] [pid 9864:tid 9925] [client 185.92.25.103:40527] [client 185.92.25.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/class-walker-comment-client.php"] [unique_id "aeNPHoCFeowknfXHM7ne0QAAAFM"]
[Sat Apr 18 17:30:08.813507 2026] [:error] [pid 9864:tid 9920] [client 185.192.71.232:65031] [client 185.192.71.232] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/class-wp-network-query-stat.php"] [unique_id "aeNPIICFeowknfXHM7ne3wAAAE4"]
[Sat Apr 18 17:30:09.681019 2026] [proxy_fcgi:error] [pid 13023:tid 13033] [client 185.92.25.104:36597] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:30:09.958871 2026] [:error] [pid 13023:tid 13035] [client 185.92.25.104:36597] [client 185.92.25.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/class-wp-session-tokens-https.php"] [unique_id "aeNPIf1e7hG8DAeABB_cywAAAQo"]
[Sat Apr 18 17:30:11.126399 2026] [:error] [pid 9970:tid 9990] [client 185.192.71.231:42571] [client 185.192.71.231] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/crystal/lrs_dage.php"] [unique_id "aeNPIyYdRLRhVmaIMx2QQwAAANA"]
[Sat Apr 18 17:30:39.105651 2026] [autoindex:error] [pid 34290:tid 34339] [client 185.92.25.108:64943] AH01276: Cannot serve directory /home/dwelects/public_html/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 18 17:30:50.190941 2026] [autoindex:error] [pid 34290:tid 34340] [client 185.92.25.108:64943] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 18 17:31:34.274683 2026] [proxy_fcgi:error] [pid 9865:tid 9940] [client 52.236.80.95:64576] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:31:34.566360 2026] [proxy_fcgi:error] [pid 9865:tid 9951] [client 52.236.80.95:64576] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:31:34.872132 2026] [proxy_fcgi:error] [pid 9865:tid 9957] [client 52.236.80.95:64576] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:31:35.170566 2026] [proxy_fcgi:error] [pid 9865:tid 9961] [client 52.236.80.95:64576] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:31:35.463505 2026] [proxy_fcgi:error] [pid 9865:tid 9948] [client 52.236.80.95:64576] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:31:35.759497 2026] [proxy_fcgi:error] [pid 9865:tid 9946] [client 52.236.80.95:64576] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:31:36.013048 2026] [proxy_fcgi:error] [pid 9865:tid 9959] [client 52.236.80.95:64576] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:31:36.323647 2026] [proxy_fcgi:error] [pid 9865:tid 9955] [client 52.236.80.95:64576] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:31:36.608281 2026] [proxy_fcgi:error] [pid 9865:tid 9937] [client 52.236.80.95:64576] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:31:36.861062 2026] [proxy_fcgi:error] [pid 9865:tid 9947] [client 52.236.80.95:64576] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:31:37.146345 2026] [proxy_fcgi:error] [pid 9865:tid 9956] [client 52.236.80.95:64576] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:31:37.422786 2026] [:error] [pid 9865:tid 9953] [client 52.236.80.95:64576] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xltt.php"] [unique_id "aeNPeazb5knECIY-C-hmXgAAAJA"]
[Sat Apr 18 17:32:48.053013 2026] [proxy_fcgi:error] [pid 34290:tid 34327] [client 52.236.80.95:64055] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:32:48.344447 2026] [proxy_fcgi:error] [pid 34290:tid 34326] [client 52.236.80.95:64055] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:32:48.597324 2026] [proxy_fcgi:error] [pid 34290:tid 34336] [client 52.236.80.95:64055] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:32:48.855224 2026] [proxy_fcgi:error] [pid 34290:tid 34334] [client 52.236.80.95:64055] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:32:49.145211 2026] [proxy_fcgi:error] [pid 34290:tid 34322] [client 52.236.80.95:64055] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:32:49.448113 2026] [proxy_fcgi:error] [pid 34290:tid 34342] [client 52.236.80.95:64055] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:32:49.751615 2026] [proxy_fcgi:error] [pid 34290:tid 34321] [client 52.236.80.95:64055] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:32:50.034924 2026] [proxy_fcgi:error] [pid 34290:tid 34324] [client 52.236.80.95:64055] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:32:50.316497 2026] [proxy_fcgi:error] [pid 34290:tid 34329] [client 52.236.80.95:64055] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:32:50.628655 2026] [proxy_fcgi:error] [pid 34290:tid 34341] [client 52.236.80.95:64055] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:32:50.884788 2026] [proxy_fcgi:error] [pid 34290:tid 34320] [client 52.236.80.95:64055] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:32:51.179886 2026] [:error] [pid 34290:tid 34343] [client 52.236.80.95:64055] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fyflv.php"] [unique_id "aeNPwxqX6WpmmAXOBi_sjwAAAdg"]
[Sat Apr 18 17:33:40.522051 2026] [:error] [pid 9970:tid 9986] [client 52.236.80.95:63142] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/iindv.php"] [unique_id "aeNP9CYdRLRhVmaIMx2RgQAAAMw"]
[Sat Apr 18 17:34:27.642108 2026] [proxy_fcgi:error] [pid 9970:tid 9989] [client 52.236.80.95:64031] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:34:27.972184 2026] [proxy_fcgi:error] [pid 9970:tid 9988] [client 52.236.80.95:64031] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:34:28.271705 2026] [proxy_fcgi:error] [pid 9970:tid 9985] [client 52.236.80.95:64031] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:34:28.529800 2026] [proxy_fcgi:error] [pid 9970:tid 9990] [client 52.236.80.95:64031] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:34:28.825846 2026] [proxy_fcgi:error] [pid 9970:tid 9993] [client 52.236.80.95:64031] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:34:29.131758 2026] [proxy_fcgi:error] [pid 9970:tid 9974] [client 52.236.80.95:64031] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:34:29.454103 2026] [proxy_fcgi:error] [pid 9970:tid 9980] [client 52.236.80.95:64031] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:34:30.875274 2026] [proxy_fcgi:error] [pid 9970:tid 9998] [client 52.236.80.95:64031] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:34:31.192052 2026] [proxy_fcgi:error] [pid 9970:tid 9979] [client 52.236.80.95:64031] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:34:31.506106 2026] [proxy_fcgi:error] [pid 9970:tid 9983] [client 52.236.80.95:64031] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:34:31.758174 2026] [proxy_fcgi:error] [pid 9970:tid 9987] [client 52.236.80.95:64031] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:34:32.034605 2026] [:error] [pid 9970:tid 9996] [client 52.236.80.95:64031] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/saorix1.php"] [unique_id "aeNQKCYdRLRhVmaIMx2R8gAAANY"]
[Sat Apr 18 17:36:03.505615 2026] [proxy_fcgi:error] [pid 13023:tid 13033] [client 52.236.80.95:63676] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:36:03.765318 2026] [proxy_fcgi:error] [pid 13023:tid 13042] [client 52.236.80.95:63676] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:36:04.089733 2026] [proxy_fcgi:error] [pid 13023:tid 13049] [client 52.236.80.95:63676] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:36:04.344483 2026] [proxy_fcgi:error] [pid 13023:tid 13032] [client 52.236.80.95:63676] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:36:04.632988 2026] [proxy_fcgi:error] [pid 13023:tid 13028] [client 52.236.80.95:63676] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:36:04.905821 2026] [proxy_fcgi:error] [pid 13023:tid 13039] [client 52.236.80.95:63676] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:36:05.173105 2026] [proxy_fcgi:error] [pid 13023:tid 13040] [client 52.236.80.95:63676] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:36:05.491402 2026] [proxy_fcgi:error] [pid 13023:tid 13031] [client 52.236.80.95:63676] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:36:05.745123 2026] [proxy_fcgi:error] [pid 13023:tid 13036] [client 52.236.80.95:63676] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:36:06.011489 2026] [proxy_fcgi:error] [pid 13023:tid 13029] [client 52.236.80.95:63676] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:36:06.265795 2026] [proxy_fcgi:error] [pid 13023:tid 13037] [client 52.236.80.95:63676] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:36:06.526742 2026] [:error] [pid 13023:tid 13030] [client 52.236.80.95:63676] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wpls.php"] [unique_id "aeNQhv1e7hG8DAeABB_eigAAAQU"]
[Sat Apr 18 17:36:08.040515 2026] [:error] [pid 9970:tid 9979] [client 52.236.80.95:64647] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wpls.php"] [unique_id "aeNQiCYdRLRhVmaIMx2SoAAAAMU"]
[Sat Apr 18 17:36:09.225967 2026] [:error] [pid 13023:tid 13031] [client 52.236.80.95:64644] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wpls.php"] [unique_id "aeNQif1e7hG8DAeABB_ekQAAAQY"]
[Sat Apr 18 17:36:10.346610 2026] [:error] [pid 9864:tid 9927] [client 52.236.80.95:63042] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wpls.php"] [unique_id "aeNQioCFeowknfXHM7nh8gAAAFU"]
[Sat Apr 18 17:36:11.377273 2026] [:error] [pid 9970:tid 9980] [client 52.236.80.95:65143] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/casp1.php"] [unique_id "aeNQiyYdRLRhVmaIMx2SqAAAAMY"]
[Sat Apr 18 17:36:12.135904 2026] [:error] [pid 34237:tid 34249] [client 52.236.80.95:63078] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/casp1.php"] [unique_id "aeNQjBBmX4Wq5a6rxfZiJwAAAUo"]
[Sat Apr 18 17:36:12.957090 2026] [:error] [pid 9970:tid 9991] [client 52.236.80.95:64655] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/casp1.php"] [unique_id "aeNQjCYdRLRhVmaIMx2SrQAAANE"]
[Sat Apr 18 17:36:13.729923 2026] [:error] [pid 9863:tid 9892] [client 52.236.80.95:65104] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/casp1.php"] [unique_id "aeNQjTjjiypiFrTucbK22QAAABM"]
[Sat Apr 18 17:36:14.363928 2026] [:error] [pid 9970:tid 9998] [client 52.236.80.95:65169] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xa.php"] [unique_id "aeNQjiYdRLRhVmaIMx2SrwAAANg"]
[Sat Apr 18 17:36:15.126389 2026] [:error] [pid 34290:tid 34339] [client 52.236.80.95:63605] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xa.php"] [unique_id "aeNQjxqX6WpmmAXOBi_tvAAAAdQ"]
[Sat Apr 18 17:36:15.741830 2026] [:error] [pid 9970:tid 9975] [client 52.236.80.95:62607] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xa.php"] [unique_id "aeNQjyYdRLRhVmaIMx2SsgAAAME"]
[Sat Apr 18 17:36:16.430659 2026] [:error] [pid 9864:tid 9920] [client 52.236.80.95:65210] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xa.php"] [unique_id "aeNQkICFeowknfXHM7nh-QAAAE4"]
[Sat Apr 18 17:36:17.213944 2026] [:error] [pid 9864:tid 9907] [client 52.236.80.95:63588] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fss.php"] [unique_id "aeNQkYCFeowknfXHM7nh_QAAAEI"]
[Sat Apr 18 17:36:18.241490 2026] [:error] [pid 9864:tid 9930] [client 52.236.80.95:63053] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fss.php"] [unique_id "aeNQkoCFeowknfXHM7nh_wAAAFg"]
[Sat Apr 18 17:36:19.200724 2026] [:error] [pid 9970:tid 9983] [client 52.236.80.95:63167] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fss.php"] [unique_id "aeNQkyYdRLRhVmaIMx2SuQAAAMk"]
[Sat Apr 18 17:36:20.063712 2026] [:error] [pid 9970:tid 9989] [client 52.236.80.95:64043] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fss.php"] [unique_id "aeNQlCYdRLRhVmaIMx2SvAAAAM8"]
[Sat Apr 18 17:36:22.070876 2026] [:error] [pid 13023:tid 13031] [client 52.236.80.95:63574] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ctex1.php"] [unique_id "aeNQlv1e7hG8DAeABB_engAAAQY"]
[Sat Apr 18 17:36:23.379604 2026] [:error] [pid 34290:tid 34334] [client 52.236.80.95:64674] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ctex1.php"] [unique_id "aeNQlxqX6WpmmAXOBi_txAAAAc8"]
[Sat Apr 18 17:36:25.221999 2026] [:error] [pid 9864:tid 9929] [client 52.236.80.95:63959] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ctex1.php"] [unique_id "aeNQmYCFeowknfXHM7niBAAAAFc"]
[Sat Apr 18 17:36:26.169958 2026] [:error] [pid 9865:tid 9960] [client 52.236.80.95:64028] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ctex1.php"] [unique_id "aeNQmqzb5knECIY-C-hnSQAAAJc"]
[Sat Apr 18 17:36:28.034796 2026] [:error] [pid 9970:tid 9990] [client 52.236.80.95:64679] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/011i.php"] [unique_id "aeNQnCYdRLRhVmaIMx2SyAAAANA"]
[Sat Apr 18 17:36:29.049396 2026] [:error] [pid 13023:tid 13046] [client 52.236.80.95:62624] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/011i.php"] [unique_id "aeNQnf1e7hG8DAeABB_eoQAAARU"]
[Sat Apr 18 17:36:30.803009 2026] [:error] [pid 34237:tid 34251] [client 52.236.80.95:63954] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/011i.php"] [unique_id "aeNQnhBmX4Wq5a6rxfZiMQAAAUw"]
[Sat Apr 18 17:36:31.723038 2026] [:error] [pid 13023:tid 13037] [client 52.236.80.95:64625] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/011i.php"] [unique_id "aeNQn_1e7hG8DAeABB_eowAAAQw"]
[Sat Apr 18 17:36:32.837396 2026] [:error] [pid 9863:tid 9875] [client 52.236.80.95:63056] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gk.php"] [unique_id "aeNQoDjjiypiFrTucbK24QAAAAI"]
[Sat Apr 18 17:36:34.197804 2026] [:error] [pid 9970:tid 9981] [client 52.236.80.95:63095] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gk.php"] [unique_id "aeNQoiYdRLRhVmaIMx2S0gAAAMc"]
[Sat Apr 18 17:36:35.576862 2026] [:error] [pid 13023:tid 13032] [client 52.236.80.95:63123] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gk.php"] [unique_id "aeNQo_1e7hG8DAeABB_eqAAAAQc"]
[Sat Apr 18 17:36:36.763192 2026] [:error] [pid 34237:tid 34255] [client 52.236.80.95:63666] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gk.php"] [unique_id "aeNQpBBmX4Wq5a6rxfZiNgAAAVA"]
[Sat Apr 18 17:36:37.722170 2026] [:error] [pid 9864:tid 9927] [client 52.236.80.95:63624] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aevly.php"] [unique_id "aeNQpYCFeowknfXHM7niCAAAAFU"]
[Sat Apr 18 17:36:38.441823 2026] [:error] [pid 34237:tid 34239] [client 52.236.80.95:63984] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aevly.php"] [unique_id "aeNQphBmX4Wq5a6rxfZiOgAAAUA"]
[Sat Apr 18 17:36:39.280654 2026] [:error] [pid 9970:tid 9984] [client 52.236.80.95:63642] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aevly.php"] [unique_id "aeNQpyYdRLRhVmaIMx2S3QAAAMo"]
[Sat Apr 18 17:36:40.108011 2026] [:error] [pid 9970:tid 9987] [client 52.236.80.95:63143] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aevly.php"] [unique_id "aeNQqCYdRLRhVmaIMx2S4gAAAM0"]
[Sat Apr 18 17:36:40.840115 2026] [:error] [pid 34237:tid 34248] [client 52.236.80.95:63947] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fssxwoyh.php"] [unique_id "aeNQqBBmX4Wq5a6rxfZiPAAAAUk"]
[Sat Apr 18 17:36:41.546794 2026] [:error] [pid 34237:tid 34241] [client 52.236.80.95:63125] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fssxwoyh.php"] [unique_id "aeNQqRBmX4Wq5a6rxfZiQAAAAUI"]
[Sat Apr 18 17:36:42.274140 2026] [:error] [pid 13023:tid 13048] [client 52.236.80.95:63675] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fssxwoyh.php"] [unique_id "aeNQqv1e7hG8DAeABB_eqgAAARc"]
[Sat Apr 18 17:36:43.146256 2026] [:error] [pid 9970:tid 9976] [client 52.236.80.95:65141] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fssxwoyh.php"] [unique_id "aeNQqyYdRLRhVmaIMx2S6AAAAMI"]
[Sat Apr 18 17:36:43.712965 2026] [:error] [pid 9970:tid 9995] [client 52.236.80.95:64048] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wcvejtpr.php"] [unique_id "aeNQqyYdRLRhVmaIMx2S7gAAANU"]
[Sat Apr 18 17:36:44.551563 2026] [:error] [pid 9863:tid 9877] [client 52.236.80.95:63974] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wcvejtpr.php"] [unique_id "aeNQrDjjiypiFrTucbK26wAAAAQ"]
[Sat Apr 18 17:36:45.418841 2026] [:error] [pid 9865:tid 9947] [client 52.236.80.95:64012] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wcvejtpr.php"] [unique_id "aeNQrazb5knECIY-C-hnVwAAAIo"]
[Sat Apr 18 17:36:46.174364 2026] [:error] [pid 9865:tid 9951] [client 52.236.80.95:64589] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wcvejtpr.php"] [unique_id "aeNQrqzb5knECIY-C-hnWQAAAI4"]
[Sat Apr 18 17:36:46.781476 2026] [:error] [pid 9970:tid 9996] [client 52.236.80.95:64619] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/home.php"] [unique_id "aeNQriYdRLRhVmaIMx2S_QAAANY"]
[Sat Apr 18 17:36:47.582844 2026] [:error] [pid 9970:tid 9976] [client 52.236.80.95:64615] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/home.php"] [unique_id "aeNQryYdRLRhVmaIMx2TAgAAAMI"]
[Sat Apr 18 17:36:48.310669 2026] [:error] [pid 9970:tid 9991] [client 52.236.80.95:64057] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/home.php"] [unique_id "aeNQsCYdRLRhVmaIMx2TBgAAANE"]
[Sat Apr 18 17:36:49.173563 2026] [:error] [pid 9970:tid 9977] [client 52.236.80.95:63598] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/home.php"] [unique_id "aeNQsSYdRLRhVmaIMx2TDQAAAMM"]
[Sat Apr 18 23:31:16.833874 2026] [proxy_fcgi:error] [pid 9970:tid 9991] [client 20.216.184.3:6547] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:31:17.344328 2026] [proxy_fcgi:error] [pid 9970:tid 9998] [client 20.216.184.3:6547] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:31:17.620036 2026] [proxy_fcgi:error] [pid 9970:tid 9978] [client 20.216.184.3:6547] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:31:18.310010 2026] [proxy_fcgi:error] [pid 9970:tid 9985] [client 20.216.184.3:6547] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:31:18.729821 2026] [proxy_fcgi:error] [pid 9970:tid 9982] [client 20.216.184.3:6547] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:31:18.994583 2026] [proxy_fcgi:error] [pid 9970:tid 9977] [client 20.216.184.3:6547] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:31:19.305005 2026] [proxy_fcgi:error] [pid 9970:tid 9974] [client 20.216.184.3:6547] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:31:20.519529 2026] [proxy_fcgi:error] [pid 9970:tid 9997] [client 20.216.184.3:6547] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:31:20.957967 2026] [proxy_fcgi:error] [pid 9970:tid 9989] [client 20.216.184.3:6547] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:31:21.974669 2026] [proxy_fcgi:error] [pid 9970:tid 9980] [client 20.216.184.3:6547] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:31:22.248583 2026] [:error] [pid 9970:tid 9975] [client 20.216.184.3:6547] [client 20.216.184.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/man.php"] [unique_id "aeOjyiYdRLRhVmaIMx3y4wAAAME"]
[Sat Apr 18 23:31:24.586230 2026] [:error] [pid 9970:tid 9994] [client 20.216.184.3:22011] [client 20.216.184.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/man.php"] [unique_id "aeOjzCYdRLRhVmaIMx3y6AAAANQ"]
[Sat Apr 18 23:31:29.822551 2026] [:error] [pid 9970:tid 9995] [client 20.216.184.3:27968] [client 20.216.184.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/man.php"] [unique_id "aeOj0SYdRLRhVmaIMx3y_wAAANU"]
[Sat Apr 18 23:31:33.448128 2026] [:error] [pid 13023:tid 13045] [client 20.216.184.3:64657] [client 20.216.184.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/man.php"] [unique_id "aeOj1f1e7hG8DAeABB9PQgAAARQ"]
[Sat Apr 18 23:31:35.283760 2026] [:error] [pid 9865:tid 9939] [client 20.216.184.3:56475] [client 20.216.184.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aboute.php"] [unique_id "aeOj16zb5knECIY-C-it8AAAAII"]
[Sat Apr 18 23:31:37.259502 2026] [:error] [pid 32677:tid 32699] [client 20.216.184.3:53338] [client 20.216.184.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aboute.php"] [unique_id "aeOj2RngmUE3LdC-wP73cAAAAlM"]
[Sat Apr 18 23:31:40.616866 2026] [:error] [pid 32677:tid 32689] [client 20.216.184.3:55819] [client 20.216.184.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aboute.php"] [unique_id "aeOj3BngmUE3LdC-wP73dQAAAkk"]
[Sat Apr 18 23:31:42.508194 2026] [:error] [pid 13023:tid 13031] [client 20.216.184.3:22491] [client 20.216.184.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aboute.php"] [unique_id "aeOj3v1e7hG8DAeABB9PXgAAAQY"]
[Sat Apr 18 23:31:45.507373 2026] [:error] [pid 9863:tid 9876] [client 20.216.184.3:43020] [client 20.216.184.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ayk.php"] [unique_id "aeOj4TjjiypiFrTucbLc8wAAAAM"]
[Sat Apr 18 23:31:49.825967 2026] [:error] [pid 13023:tid 13049] [client 20.216.184.3:29495] [client 20.216.184.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ayk.php"] [unique_id "aeOj5f1e7hG8DAeABB9PZAAAARg"]
[Sat Apr 18 23:31:52.645947 2026] [:error] [pid 34290:tid 34341] [client 20.216.184.3:40737] [client 20.216.184.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ayk.php"] [unique_id "aeOj6BqX6WpmmAXOBi8wiwAAAdY"]
[Sat Apr 18 23:31:53.944736 2026] [:error] [pid 13023:tid 13037] [client 20.216.184.3:59381] [client 20.216.184.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ayk.php"] [unique_id "aeOj6f1e7hG8DAeABB9PcgAAAQw"]
[Sat Apr 18 23:31:57.125698 2026] [:error] [pid 9865:tid 9943] [client 20.216.184.3:31115] [client 20.216.184.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wps.php"] [unique_id "aeOj7azb5knECIY-C-iuDgAAAIY"]
[Sat Apr 18 23:31:58.908637 2026] [:error] [pid 32647:tid 32664] [client 20.216.184.3:25005] [client 20.216.184.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wps.php"] [unique_id "aeOj7kkxooM0iRo6e542vwAAAg4"]
[Sat Apr 18 23:32:08.883454 2026] [:error] [pid 9865:tid 9945] [client 20.216.184.3:34834] [client 20.216.184.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wps.php"] [unique_id "aeOj-Kzb5knECIY-C-iuJQAAAIg"]
[Sat Apr 18 23:32:11.880494 2026] [:error] [pid 9865:tid 9950] [client 20.216.184.3:34851] [client 20.216.184.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f35.php"] [unique_id "aeOj-6zb5knECIY-C-iuLgAAAI0"]
[Sat Apr 18 23:32:12.728065 2026] [:error] [pid 9865:tid 9943] [client 20.216.184.3:6655] [client 20.216.184.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f35.php"] [unique_id "aeOj_Kzb5knECIY-C-iuLwAAAIY"]
[Sat Apr 18 23:32:13.353441 2026] [:error] [pid 13023:tid 13030] [client 20.216.184.3:24499] [client 20.216.184.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f35.php"] [unique_id "aeOj_f1e7hG8DAeABB9PgAAAAQU"]
[Sat Apr 18 23:32:15.736925 2026] [:error] [pid 9970:tid 9985] [client 20.216.184.3:34263] [client 20.216.184.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f35.php"] [unique_id "aeOj_yYdRLRhVmaIMx3ziAAAAMs"]
[Sat Apr 18 23:32:17.103560 2026] [:error] [pid 9970:tid 9984] [client 20.216.184.3:54489] [client 20.216.184.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/12.php"] [unique_id "aeOkASYdRLRhVmaIMx3zmQAAAMo"]
[Sat Apr 18 23:32:21.860412 2026] [proxy_fcgi:error] [pid 9863:tid 9882] [client 20.216.184.3:24511] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:32:22.116136 2026] [proxy_fcgi:error] [pid 9863:tid 9896] [client 20.216.184.3:24511] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:32:22.375352 2026] [proxy_fcgi:error] [pid 9863:tid 9895] [client 20.216.184.3:24511] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:32:22.621299 2026] [proxy_fcgi:error] [pid 9863:tid 9892] [client 20.216.184.3:24511] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:32:22.876116 2026] [proxy_fcgi:error] [pid 9863:tid 9885] [client 20.216.184.3:24511] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:32:23.117680 2026] [proxy_fcgi:error] [pid 9863:tid 9884] [client 20.216.184.3:24511] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:32:23.357777 2026] [proxy_fcgi:error] [pid 9863:tid 9877] [client 20.216.184.3:24511] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:32:23.597073 2026] [proxy_fcgi:error] [pid 9863:tid 9883] [client 20.216.184.3:24511] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:32:23.839271 2026] [:error] [pid 9863:tid 9879] [client 20.216.184.3:24511] [client 20.216.184.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dwelectservices.com.au"] [uri "/tiny.php"] [unique_id "aeOkBzjjiypiFrTucbLdGAAAAAY"]
[Sat Apr 18 23:32:26.428898 2026] [proxy_fcgi:error] [pid 9865:tid 9938] [client 20.216.184.3:46247] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:32:26.700133 2026] [proxy_fcgi:error] [pid 9865:tid 9942] [client 20.216.184.3:46247] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:32:27.033858 2026] [:error] [pid 9865:tid 9941] [client 20.216.184.3:46247] [client 20.216.184.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f6.php"] [unique_id "aeOkC6zb5knECIY-C-iuQAAAAIQ"]
[Sat Apr 18 23:32:30.797507 2026] [:error] [pid 9865:tid 9947] [client 20.216.184.3:30492] [client 20.216.184.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f6.php"] [unique_id "aeOkDqzb5knECIY-C-iuRQAAAIo"]
[Sat Apr 18 23:32:32.188873 2026] [:error] [pid 9865:tid 9937] [client 20.216.184.3:34250] [client 20.216.184.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f6.php"] [unique_id "aeOkEKzb5knECIY-C-iuTAAAAIA"]
[Sat Apr 18 23:32:33.968759 2026] [:error] [pid 9970:tid 9990] [client 20.216.184.3:52042] [client 20.216.184.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f6.php"] [unique_id "aeOkESYdRLRhVmaIMx3zvAAAANA"]
[Sat Apr 18 23:32:35.076468 2026] [:error] [pid 32677:tid 32689] [client 20.216.184.3:44558] [client 20.216.184.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/roksad1.php"] [unique_id "aeOkExngmUE3LdC-wP73jwAAAkk"]
[Sat Apr 18 23:32:35.872249 2026] [:error] [pid 34290:tid 34338] [client 20.216.184.3:24510] [client 20.216.184.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/roksad1.php"] [unique_id "aeOkExqX6WpmmAXOBi8wqgAAAdM"]
[Sat Apr 18 23:32:37.730744 2026] [:error] [pid 34290:tid 34323] [client 20.216.184.3:54535] [client 20.216.184.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/roksad1.php"] [unique_id "aeOkFRqX6WpmmAXOBi8wrgAAAcQ"]
[Sat Apr 18 23:32:40.841949 2026] [:error] [pid 32677:tid 32687] [client 20.216.184.3:49070] [client 20.216.184.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/roksad1.php"] [unique_id "aeOkGBngmUE3LdC-wP73lQAAAkc"]
[Sat Apr 18 23:32:45.794678 2026] [:error] [pid 9864:tid 9930] [client 20.216.184.3:34242] [client 20.216.184.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fone1.php"] [unique_id "aeOkHYCFeowknfXHM7k5JgAAAFg"]
[Sat Apr 18 23:32:47.812636 2026] [:error] [pid 34290:tid 34333] [client 20.216.184.3:22418] [client 20.216.184.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fone1.php"] [unique_id "aeOkHxqX6WpmmAXOBi8wtgAAAc4"]
[Sat Apr 18 23:32:54.571400 2026] [:error] [pid 32677:tid 32691] [client 20.216.184.3:7061] [client 20.216.184.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fone1.php"] [unique_id "aeOkJhngmUE3LdC-wP73pgAAAks"]
[Sat Apr 18 23:32:55.456585 2026] [:error] [pid 9970:tid 9983] [client 20.216.184.3:54559] [client 20.216.184.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fone1.php"] [unique_id "aeOkJyYdRLRhVmaIMx3zxwAAAMk"]
[Sat Apr 18 23:32:57.060002 2026] [:error] [pid 9863:tid 9874] [client 20.216.184.3:32392] [client 20.216.184.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/config.php"] [unique_id "aeOkKTjjiypiFrTucbLdQAAAAAE"]
[Sat Apr 18 23:32:58.308562 2026] [:error] [pid 32677:tid 32699] [client 20.216.184.3:55231] [client 20.216.184.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/config.php"] [unique_id "aeOkKhngmUE3LdC-wP73rQAAAlM"]
[Sat Apr 18 23:32:59.145438 2026] [:error] [pid 32677:tid 32704] [client 20.216.184.3:24229] [client 20.216.184.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/config.php"] [unique_id "aeOkKxngmUE3LdC-wP73sQAAAlg"]
[Sat Apr 18 23:33:01.102612 2026] [:error] [pid 32678:tid 32725] [client 20.216.184.3:6613] [client 20.216.184.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/config.php"] [unique_id "aeOkLRUlAXU_ZWUu5y8a1AAAApI"]
[Sat Apr 18 23:33:04.035690 2026] [:error] [pid 32677:tid 32698] [client 20.216.184.3:57124] [client 20.216.184.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xltt.php"] [unique_id "aeOkMBngmUE3LdC-wP73wwAAAlI"]
[Sat Apr 18 23:33:05.928888 2026] [:error] [pid 13023:tid 13029] [client 20.216.184.3:57093] [client 20.216.184.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xltt.php"] [unique_id "aeOkMf1e7hG8DAeABB9PnAAAAQQ"]
[Sat Apr 18 23:33:07.224449 2026] [:error] [pid 9865:tid 9947] [client 20.216.184.3:55227] [client 20.216.184.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xltt.php"] [unique_id "aeOkM6zb5knECIY-C-iuZQAAAIo"]
[Sat Apr 18 23:33:08.236510 2026] [:error] [pid 32677:tid 32681] [client 20.216.184.3:23809] [client 20.216.184.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xltt.php"] [unique_id "aeOkNBngmUE3LdC-wP73ywAAAkE"]
[Sat Apr 18 23:33:17.968984 2026] [:error] [pid 34288:tid 34304] [client 20.216.184.3:49010] [client 20.216.184.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sadcut1.php"] [unique_id "aeOkPeTIiy__PtiLmpnhUwAAAYw"]
[Sat Apr 18 23:33:20.645297 2026] [:error] [pid 9865:tid 9952] [client 20.216.184.3:49655] [client 20.216.184.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sadcut1.php"] [unique_id "aeOkQKzb5knECIY-C-iugAAAAI8"]
[Sat Apr 18 23:33:21.973892 2026] [:error] [pid 9863:tid 9888] [client 20.216.184.3:53401] [client 20.216.184.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sadcut1.php"] [unique_id "aeOkQTjjiypiFrTucbLdSwAAAA8"]
[Sat Apr 18 23:33:25.187313 2026] [:error] [pid 9970:tid 9985] [client 20.216.184.3:26605] [client 20.216.184.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dx.php"] [unique_id "aeOkRSYdRLRhVmaIMx3z7gAAAMs"]
[Sat Apr 18 23:33:34.907033 2026] [proxy_fcgi:error] [pid 9863:tid 9886] [client 20.216.184.3:25505] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:33:35.184092 2026] [proxy_fcgi:error] [pid 9863:tid 9880] [client 20.216.184.3:25505] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:33:35.457034 2026] [proxy_fcgi:error] [pid 9863:tid 9894] [client 20.216.184.3:25505] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:33:35.746904 2026] [proxy_fcgi:error] [pid 9863:tid 9889] [client 20.216.184.3:25505] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:33:36.018654 2026] [proxy_fcgi:error] [pid 9863:tid 9888] [client 20.216.184.3:25505] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:33:36.291294 2026] [proxy_fcgi:error] [pid 9863:tid 9881] [client 20.216.184.3:25505] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:33:36.949744 2026] [proxy_fcgi:error] [pid 9863:tid 9877] [client 20.216.184.3:25505] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:33:37.279347 2026] [proxy_fcgi:error] [pid 9863:tid 9891] [client 20.216.184.3:25505] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:33:37.550713 2026] [proxy_fcgi:error] [pid 9863:tid 9879] [client 20.216.184.3:25505] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:33:37.822575 2026] [proxy_fcgi:error] [pid 9863:tid 9878] [client 20.216.184.3:25505] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:33:38.102507 2026] [:error] [pid 9863:tid 9876] [client 20.216.184.3:25505] [client 20.216.184.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aeOkUjjjiypiFrTucbLdYQAAAAM"]
[Sat Apr 18 23:33:43.253248 2026] [:error] [pid 32678:tid 32730] [client 20.216.184.3:25589] [client 20.216.184.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aeOkVxUlAXU_ZWUu5y8a5wAAApc"]
[Sat Apr 18 23:33:48.801609 2026] [:error] [pid 9970:tid 9994] [client 20.216.184.3:51566] [client 20.216.184.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aeOkXCYdRLRhVmaIMx30cgAAANQ"]
[Sat Apr 18 23:33:50.584202 2026] [:error] [pid 34290:tid 34341] [client 20.216.184.3:33121] [client 20.216.184.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aeOkXhqX6WpmmAXOBi8w9wAAAdY"]
[Sat Apr 18 23:33:52.368767 2026] [:error] [pid 13023:tid 13042] [client 20.216.184.3:29095] [client 20.216.184.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-kz.php"] [unique_id "aeOkYP1e7hG8DAeABB9QPAAAARE"]
[Sat Apr 18 23:33:54.922056 2026] [:error] [pid 34290:tid 34324] [client 20.216.184.3:35467] [client 20.216.184.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-kz.php"] [unique_id "aeOkYhqX6WpmmAXOBi8w-gAAAcU"]
[Sat Apr 18 23:33:57.187494 2026] [:error] [pid 13023:tid 13034] [client 20.216.184.3:6385] [client 20.216.184.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-kz.php"] [unique_id "aeOkZf1e7hG8DAeABB9QQQAAAQk"]
[Sat Apr 18 23:34:01.143809 2026] [:error] [pid 13023:tid 13032] [client 20.216.184.3:6750] [client 20.216.184.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-kz.php"] [unique_id "aeOkaf1e7hG8DAeABB9QSQAAAQc"]
[Sat Apr 18 23:34:05.028618 2026] [:error] [pid 9864:tid 9916] [client 20.216.184.3:34898] [client 20.216.184.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/view.php"] [unique_id "aeOkbYCFeowknfXHM7k5awAAAEo"]
[Sat Apr 18 23:34:09.885209 2026] [:error] [pid 9865:tid 9937] [client 20.216.184.3:6511] [client 20.216.184.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/view.php"] [unique_id "aeOkcazb5knECIY-C-iuwAAAAIA"]
[Sat Apr 18 23:34:18.565289 2026] [:error] [pid 32677:tid 32696] [client 20.216.184.3:46811] [client 20.216.184.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cilus.php"] [unique_id "aeOkehngmUE3LdC-wP74AAAAAlA"]
[Sat Apr 18 23:34:29.917772 2026] [:error] [pid 9970:tid 9992] [client 20.216.184.3:40672] [client 20.216.184.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cilus.php"] [unique_id "aeOkhSYdRLRhVmaIMx30_QAAANI"]
[Sat Apr 18 23:34:31.411257 2026] [:error] [pid 34290:tid 34342] [client 20.216.184.3:46877] [client 20.216.184.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cilus.php"] [unique_id "aeOkhxqX6WpmmAXOBi8xCwAAAdc"]
[Sat Apr 18 23:34:32.488789 2026] [:error] [pid 13023:tid 13049] [client 20.216.184.3:65169] [client 20.216.184.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/adminfuns.php"] [unique_id "aeOkiP1e7hG8DAeABB9QeQAAARg"]
[Sat Apr 18 23:34:33.731192 2026] [:error] [pid 9864:tid 9926] [client 20.216.184.3:30018] [client 20.216.184.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/adminfuns.php"] [unique_id "aeOkiYCFeowknfXHM7k5jgAAAFQ"]
[Sat Apr 18 23:34:35.126528 2026] [:error] [pid 32647:tid 32671] [client 20.216.184.3:41988] [client 20.216.184.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/adminfuns.php"] [unique_id "aeOki0kxooM0iRo6e543GgAAAhU"]
[Sat Apr 18 23:34:37.070727 2026] [proxy_fcgi:error] [pid 9970:tid 9987] [client 20.216.184.3:39465] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:34:37.309501 2026] [proxy_fcgi:error] [pid 9970:tid 9998] [client 20.216.184.3:39465] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:34:37.548201 2026] [proxy_fcgi:error] [pid 9970:tid 9977] [client 20.216.184.3:39465] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:34:37.801392 2026] [proxy_fcgi:error] [pid 9970:tid 9997] [client 20.216.184.3:39465] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:34:38.055031 2026] [proxy_fcgi:error] [pid 9970:tid 9975] [client 20.216.184.3:39465] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:34:38.293929 2026] [proxy_fcgi:error] [pid 9970:tid 9978] [client 20.216.184.3:39465] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:34:38.541418 2026] [:error] [pid 9970:tid 9991] [client 20.216.184.3:39465] [client 20.216.184.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/theme-compat/wp-login.php"] [unique_id "aeOkjiYdRLRhVmaIMx31DgAAANE"]
[Sat Apr 18 23:34:39.767450 2026] [proxy_fcgi:error] [pid 32677:tid 32694] [client 20.216.184.3:30061] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:34:40.040439 2026] [proxy_fcgi:error] [pid 32677:tid 32692] [client 20.216.184.3:30061] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:34:40.328578 2026] [proxy_fcgi:error] [pid 32677:tid 32699] [client 20.216.184.3:30061] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:34:40.615636 2026] [proxy_fcgi:error] [pid 32677:tid 32703] [client 20.216.184.3:30061] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:34:40.888034 2026] [proxy_fcgi:error] [pid 32677:tid 32695] [client 20.216.184.3:30061] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:34:41.449575 2026] [:error] [pid 32677:tid 32701] [client 20.216.184.3:30061] [client 20.216.184.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ss.php"] [unique_id "aeOkkRngmUE3LdC-wP74IQAAAlU"]
[Sat Apr 18 23:34:45.375604 2026] [:error] [pid 13023:tid 13032] [client 20.216.184.3:51644] [client 20.216.184.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ss.php"] [unique_id "aeOklf1e7hG8DAeABB9QlwAAAQc"]
[Sat Apr 18 23:34:47.865937 2026] [:error] [pid 32677:tid 32680] [client 20.216.184.3:21929] [client 20.216.184.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ss.php"] [unique_id "aeOklxngmUE3LdC-wP74IwAAAkA"]
[Sat Apr 18 23:34:55.290993 2026] [:error] [pid 13023:tid 13048] [client 20.216.184.3:53857] [client 20.216.184.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ss.php"] [unique_id "aeOkn_1e7hG8DAeABB9QrwAAARc"]
[Sat Apr 18 23:34:58.940527 2026] [:error] [pid 9863:tid 9874] [client 20.216.184.3:24263] [client 20.216.184.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bthil.php"] [unique_id "aeOkojjjiypiFrTucbLdjQAAAAE"]
[Sat Apr 18 23:35:06.648867 2026] [:error] [pid 9970:tid 9981] [client 20.216.184.3:44073] [client 20.216.184.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bthil.php"] [unique_id "aeOkqiYdRLRhVmaIMx31IAAAAMc"]
[Sat Apr 18 23:35:13.245454 2026] [:error] [pid 13023:tid 13030] [client 20.216.184.3:29978] [client 20.216.184.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/error_log.php"] [unique_id "aeOksf1e7hG8DAeABB9QzAAAAQU"]
[Sat Apr 18 23:35:21.979460 2026] [:error] [pid 32678:tid 32731] [client 20.216.184.3:50903] [client 20.216.184.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/error_log.php"] [unique_id "aeOkuRUlAXU_ZWUu5y8bSAAAApg"]
[Sat Apr 18 23:35:24.296995 2026] [:error] [pid 32678:tid 32717] [client 20.216.184.3:50929] [client 20.216.184.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/error_log.php"] [unique_id "aeOkvBUlAXU_ZWUu5y8bTAAAAoo"]
[Sat Apr 18 23:35:25.604800 2026] [:error] [pid 9865:tid 9952] [client 20.216.184.3:37326] [client 20.216.184.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/error_log.php"] [unique_id "aeOkvazb5knECIY-C-iu-wAAAI8"]
[Sat Apr 18 23:35:28.633953 2026] [:error] [pid 32677:tid 32703] [client 20.216.184.3:6816] [client 20.216.184.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mifta.php"] [unique_id "aeOkwBngmUE3LdC-wP74jQAAAlc"]
[Sat Apr 18 23:35:32.142306 2026] [:error] [pid 9865:tid 9958] [client 20.216.184.3:37348] [client 20.216.184.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mifta.php"] [unique_id "aeOkxKzb5knECIY-C-ivBgAAAJU"]
[Sat Apr 18 23:35:33.151664 2026] [:error] [pid 9865:tid 9953] [client 20.216.184.3:23489] [client 20.216.184.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mifta.php"] [unique_id "aeOkxazb5knECIY-C-ivCAAAAJA"]
[Sat Apr 18 23:35:35.352356 2026] [:error] [pid 34288:tid 34294] [client 20.216.184.3:6548] [client 20.216.184.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mifta.php"] [unique_id "aeOkx-TIiy__PtiLmpnhiQAAAYI"]
[Sat Apr 18 23:35:36.380420 2026] [:error] [pid 9865:tid 9946] [client 20.216.184.3:29968] [client 20.216.184.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws57.php"] [unique_id "aeOkyKzb5knECIY-C-ivEgAAAIk"]
[Sat Apr 18 23:35:37.852326 2026] [:error] [pid 13023:tid 13045] [client 20.216.184.3:64624] [client 20.216.184.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws57.php"] [unique_id "aeOkyf1e7hG8DAeABB9REQAAARQ"]
[Sat Apr 18 23:35:38.742848 2026] [:error] [pid 32677:tid 32683] [client 20.216.184.3:34209] [client 20.216.184.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws57.php"] [unique_id "aeOkyhngmUE3LdC-wP74mAAAAkM"]
[Sat Apr 18 23:35:39.662742 2026] [:error] [pid 32647:tid 32657] [client 20.216.184.3:37345] [client 20.216.184.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws57.php"] [unique_id "aeOky0kxooM0iRo6e543UQAAAgc"]
[Sat Apr 18 23:35:40.626015 2026] [proxy_fcgi:error] [pid 9864:tid 9919] [client 20.216.184.3:52698] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:35:40.888377 2026] [proxy_fcgi:error] [pid 9864:tid 9905] [client 20.216.184.3:52698] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:35:41.149095 2026] [proxy_fcgi:error] [pid 9864:tid 9910] [client 20.216.184.3:52698] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:35:41.409790 2026] [proxy_fcgi:error] [pid 9864:tid 9921] [client 20.216.184.3:52698] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:35:41.680615 2026] [proxy_fcgi:error] [pid 9864:tid 9918] [client 20.216.184.3:52698] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:35:41.941874 2026] [proxy_fcgi:error] [pid 9864:tid 9929] [client 20.216.184.3:52698] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:35:42.250539 2026] [proxy_fcgi:error] [pid 9864:tid 9915] [client 20.216.184.3:52698] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:35:42.844499 2026] [proxy_fcgi:error] [pid 9864:tid 9924] [client 20.216.184.3:52698] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:35:43.114998 2026] [proxy_fcgi:error] [pid 9864:tid 9912] [client 20.216.184.3:52698] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:35:43.379265 2026] [proxy_fcgi:error] [pid 9864:tid 9908] [client 20.216.184.3:52698] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:35:43.641250 2026] [proxy_fcgi:error] [pid 9864:tid 9907] [client 20.216.184.3:52698] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:35:43.994261 2026] [:error] [pid 9864:tid 9913] [client 20.216.184.3:52698] [client 20.216.184.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/areak1.php"] [unique_id "aeOkz4CFeowknfXHM7k5wwAAAEc"]
[Sat Apr 18 23:35:46.493898 2026] [:error] [pid 34290:tid 34319] [client 20.216.184.3:21982] [client 20.216.184.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/areak1.php"] [unique_id "aeOk0hqX6WpmmAXOBi8xKAAAAcA"]
[Sat Apr 18 23:35:49.262977 2026] [:error] [pid 34288:tid 34308] [client 20.216.184.3:50284] [client 20.216.184.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/areak1.php"] [unique_id "aeOk1eTIiy__PtiLmpnhlQAAAZA"]
[Sat Apr 18 23:35:50.819594 2026] [:error] [pid 9865:tid 9949] [client 20.216.184.3:50300] [client 20.216.184.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/areak1.php"] [unique_id "aeOk1qzb5knECIY-C-ivKAAAAIw"]
[Sat Apr 18 23:35:52.679330 2026] [:error] [pid 9864:tid 9908] [client 20.216.184.3:42945] [client 20.216.184.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sallu.php"] [unique_id "aeOk2ICFeowknfXHM7k5zgAAAEM"]
[Sat Apr 18 23:35:53.894176 2026] [:error] [pid 9864:tid 9917] [client 20.216.184.3:26076] [client 20.216.184.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sallu.php"] [unique_id "aeOk2YCFeowknfXHM7k50QAAAEs"]
[Sat Apr 18 23:36:04.846376 2026] [:error] [pid 13023:tid 13042] [client 20.216.184.3:62122] [client 20.216.184.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sallu.php"] [unique_id "aeOk5P1e7hG8DAeABB9RNgAAARE"]
[Sat Apr 18 23:36:07.195319 2026] [:error] [pid 9970:tid 9991] [client 20.216.184.3:26072] [client 20.216.184.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tiny2.php"] [unique_id "aeOk5yYdRLRhVmaIMx31ngAAANE"]
[Sat Apr 18 23:36:11.856742 2026] [:error] [pid 9865:tid 9943] [client 20.216.184.3:37294] [client 20.216.184.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tiny2.php"] [unique_id "aeOk66zb5knECIY-C-ivVwAAAIY"]
[Sat Apr 18 23:36:14.517061 2026] [:error] [pid 9863:tid 9889] [client 20.216.184.3:41947] [client 20.216.184.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tiny2.php"] [unique_id "aeOk7jjjiypiFrTucbLdvQAAABA"]
[Sat Apr 18 23:36:15.162822 2026] [:error] [pid 9970:tid 9980] [client 20.216.184.3:29466] [client 20.216.184.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tiny2.php"] [unique_id "aeOk7yYdRLRhVmaIMx31tAAAAMY"]
[Sat Apr 18 23:36:16.296198 2026] [:error] [pid 9970:tid 9998] [client 20.216.184.3:31752] [client 20.216.184.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/7.php"] [unique_id "aeOk8CYdRLRhVmaIMx31twAAANg"]
[Sat Apr 18 23:36:18.307760 2026] [:error] [pid 9970:tid 9994] [client 20.216.184.3:7035] [client 20.216.184.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/7.php"] [unique_id "aeOk8iYdRLRhVmaIMx31wQAAANQ"]
[Sat Apr 18 23:36:19.620293 2026] [:error] [pid 9970:tid 9980] [client 20.216.184.3:22493] [client 20.216.184.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/7.php"] [unique_id "aeOk8yYdRLRhVmaIMx31ywAAAMY"]
[Sat Apr 18 23:36:23.126154 2026] [:error] [pid 9970:tid 9992] [client 20.216.184.3:31772] [client 20.216.184.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/7.php"] [unique_id "aeOk9yYdRLRhVmaIMx312QAAANI"]
[Sat Apr 18 23:36:25.810128 2026] [:error] [pid 34290:tid 34336] [client 20.216.184.3:22506] [client 20.216.184.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gz.php"] [unique_id "aeOk-RqX6WpmmAXOBi8xQgAAAdE"]
[Sat Apr 18 23:36:31.478364 2026] [:error] [pid 32677:tid 32696] [client 20.216.184.3:29516] [client 20.216.184.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gz.php"] [unique_id "aeOk_xngmUE3LdC-wP74vgAAAlA"]
[Sat Apr 18 23:36:33.685584 2026] [:error] [pid 32677:tid 32694] [client 20.216.184.3:29487] [client 20.216.184.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gz.php"] [unique_id "aeOlARngmUE3LdC-wP74xQAAAk4"]
[Sat Apr 18 23:36:35.700711 2026] [:error] [pid 13023:tid 13035] [client 20.216.184.3:40710] [client 20.216.184.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gz.php"] [unique_id "aeOlA_1e7hG8DAeABB9RSQAAAQo"]
[Sat Apr 18 23:36:44.741542 2026] [proxy_fcgi:error] [pid 9970:tid 9984] [client 20.216.184.3:59346] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:36:45.312563 2026] [proxy_fcgi:error] [pid 9970:tid 9994] [client 20.216.184.3:59346] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:36:45.551031 2026] [proxy_fcgi:error] [pid 9970:tid 9986] [client 20.216.184.3:59346] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:36:45.803248 2026] [proxy_fcgi:error] [pid 9970:tid 9992] [client 20.216.184.3:59346] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:36:46.045267 2026] [proxy_fcgi:error] [pid 9970:tid 9997] [client 20.216.184.3:59346] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:36:46.284394 2026] [proxy_fcgi:error] [pid 9970:tid 9998] [client 20.216.184.3:59346] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:36:46.523378 2026] [proxy_fcgi:error] [pid 9970:tid 9987] [client 20.216.184.3:59346] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:36:46.779967 2026] [proxy_fcgi:error] [pid 9970:tid 9990] [client 20.216.184.3:59346] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:36:47.019420 2026] [proxy_fcgi:error] [pid 9970:tid 9981] [client 20.216.184.3:59346] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:36:47.266593 2026] [proxy_fcgi:error] [pid 9970:tid 9979] [client 20.216.184.3:59346] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:36:47.506058 2026] [proxy_fcgi:error] [pid 9970:tid 9993] [client 20.216.184.3:59346] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:36:47.741947 2026] [:error] [pid 9970:tid 9988] [client 20.216.184.3:59346] [client 20.216.184.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws61.php"] [unique_id "aeOlDyYdRLRhVmaIMx32BAAAAM4"]
[Sat Apr 18 23:36:49.313881 2026] [:error] [pid 9970:tid 9978] [client 20.216.184.3:7014] [client 20.216.184.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws61.php"] [unique_id "aeOlESYdRLRhVmaIMx32BQAAAMQ"]
[Sat Apr 18 23:36:50.459350 2026] [:error] [pid 9865:tid 9951] [client 20.216.184.3:36202] [client 20.216.184.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws61.php"] [unique_id "aeOlEqzb5knECIY-C-ivjgAAAI4"]
[Sat Apr 18 23:36:55.006253 2026] [:error] [pid 32678:tid 32730] [client 20.216.184.3:62018] [client 20.216.184.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws61.php"] [unique_id "aeOlFxUlAXU_ZWUu5y8bnAAAApc"]
[Sat Apr 18 23:36:56.191088 2026] [:error] [pid 32678:tid 32707] [client 20.216.184.3:34858] [client 20.216.184.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class-wp-image.php"] [unique_id "aeOlGBUlAXU_ZWUu5y8bngAAAoA"]
[Sat Apr 18 23:37:03.236018 2026] [:error] [pid 9865:tid 9956] [client 20.216.184.3:34822] [client 20.216.184.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class-wp-image.php"] [unique_id "aeOlH6zb5knECIY-C-ivuQAAAJM"]
[Sat Apr 18 23:37:04.988732 2026] [:error] [pid 13023:tid 13039] [client 20.216.184.3:24986] [client 20.216.184.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class-wp-image.php"] [unique_id "aeOlIP1e7hG8DAeABB9RewAAAQ4"]
[Sat Apr 18 23:37:08.788061 2026] [:error] [pid 9864:tid 9927] [client 20.216.184.3:25018] [client 20.216.184.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class-wp-image.php"] [unique_id "aeOlJICFeowknfXHM7k5_AAAAFU"]
[Sun Apr 19 03:17:03.612057 2026] [:error] [pid 32165:tid 32185] [client 45.132.115.82:22147] [client 45.132.115.82] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.132.115.82, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-login.php"] [unique_id "aePYr6e2vKwEk_N0BrYFAwAAABA"]
[Sun Apr 19 03:17:03.673963 2026] [proxy_fcgi:error] [pid 32165:tid 32185] [client 45.132.115.82:22147] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 12:20:39.138742 2026] [:error] [pid 47772:tid 47808] [client 18.88.35.225:56428] [client 18.88.35.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env"] [unique_id "aeRYF4c0L16cb4smAz8sfAAAABM"]
[Sun Apr 19 12:20:39.626621 2026] [:error] [pid 15764:tid 15833] [client 18.88.35.225:56460] [client 18.88.35.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.example"] [unique_id "aeRYF2LL_sqdSHoVp-RhpwAAAkc"]
[Sun Apr 19 22:01:41.923686 2026] [proxy_fcgi:error] [pid 15764:tid 15826] [client 20.203.188.128:27698] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 22:01:42.165528 2026] [proxy_fcgi:error] [pid 15764:tid 15850] [client 20.203.188.128:27698] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 22:01:42.421300 2026] [proxy_fcgi:error] [pid 15764:tid 15831] [client 20.203.188.128:27698] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 22:01:42.662405 2026] [proxy_fcgi:error] [pid 15764:tid 15832] [client 20.203.188.128:27698] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 22:01:43.637116 2026] [proxy_fcgi:error] [pid 15764:tid 15829] [client 20.203.188.128:27698] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 22:01:45.277023 2026] [proxy_fcgi:error] [pid 15764:tid 15844] [client 20.203.188.128:27698] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 22:01:45.519416 2026] [proxy_fcgi:error] [pid 15764:tid 15842] [client 20.203.188.128:27698] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 22:01:45.770196 2026] [proxy_fcgi:error] [pid 15764:tid 15840] [client 20.203.188.128:27698] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 22:01:46.014422 2026] [proxy_fcgi:error] [pid 15764:tid 15837] [client 20.203.188.128:27698] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 22:01:46.250743 2026] [:error] [pid 15764:tid 15832] [client 20.203.188.128:27698] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/t.php"] [unique_id "aeTgSmLL_sqdSHoVp-QnoAAAAkY"]
[Sun Apr 19 22:01:49.647106 2026] [:error] [pid 47772:tid 47796] [client 20.203.188.128:24249] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/t.php"] [unique_id "aeTgTYc0L16cb4smAz_KRwAAAAc"]
[Sun Apr 19 22:01:52.722926 2026] [:error] [pid 47773:tid 47834] [client 20.203.188.128:32348] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/t.php"] [unique_id "aeTgUOiBHdnCJDuPq9BMaQAAAFI"]
[Sun Apr 19 22:01:57.055809 2026] [:error] [pid 47775:tid 47866] [client 20.203.188.128:34330] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/t.php"] [unique_id "aeTgVbmztjlk9tsmoewddAAAAJc"]
[Sun Apr 19 22:01:59.535646 2026] [:error] [pid 47772:tid 47797] [client 20.203.188.128:32814] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lib.php"] [unique_id "aeTgV4c0L16cb4smAz_KWQAAAAg"]
[Sun Apr 19 22:02:01.939652 2026] [:error] [pid 47773:tid 47826] [client 20.203.188.128:3528] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lib.php"] [unique_id "aeTgWeiBHdnCJDuPq9BMiwAAAEo"]
[Sun Apr 19 22:02:03.522874 2026] [:error] [pid 15763:tid 15815] [client 20.203.188.128:28070] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lib.php"] [unique_id "aeTgW7MXv1Y1THOoxaAFpAAAAhM"]
[Sun Apr 19 22:02:04.646026 2026] [:error] [pid 15764:tid 15845] [client 20.203.188.128:27687] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lib.php"] [unique_id "aeTgXGLL_sqdSHoVp-Qn5wAAAlM"]
[Sun Apr 19 22:02:05.927945 2026] [:error] [pid 47886:tid 47899] [client 20.203.188.128:35706] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kj.php"] [unique_id "aeTgXUSe8yiyuPrD7yN-kgAAAMs"]
[Sun Apr 19 22:02:07.471851 2026] [:error] [pid 15763:tid 15817] [client 20.203.188.128:3523] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kj.php"] [unique_id "aeTgX7MXv1Y1THOoxaAFpwAAAhU"]
[Sun Apr 19 22:02:08.230388 2026] [:error] [pid 15760:tid 15792] [client 20.203.188.128:24203] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kj.php"] [unique_id "aeTgYPSdD_XHQMJ_IStGJgAAAdg"]
[Sun Apr 19 22:02:09.169057 2026] [:error] [pid 15760:tid 15771] [client 20.203.188.128:34333] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kj.php"] [unique_id "aeTgYfSdD_XHQMJ_IStGKgAAAcM"]
[Sun Apr 19 22:02:10.173287 2026] [:error] [pid 15764:tid 15845] [client 20.203.188.128:35672] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/new.php"] [unique_id "aeTgYmLL_sqdSHoVp-Qn7QAAAlM"]
[Sun Apr 19 22:02:11.265860 2026] [:error] [pid 47775:tid 47865] [client 20.203.188.128:35709] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/new.php"] [unique_id "aeTgY7mztjlk9tsmoewdlgAAAJY"]
[Sun Apr 19 22:02:12.599217 2026] [:error] [pid 47772:tid 47809] [client 20.203.188.128:27681] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/new.php"] [unique_id "aeTgZIc0L16cb4smAz_KaAAAABQ"]
[Sun Apr 19 22:02:13.922982 2026] [:error] [pid 47772:tid 47805] [client 20.203.188.128:35697] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/new.php"] [unique_id "aeTgZYc0L16cb4smAz_KbgAAABA"]
[Sun Apr 19 22:02:15.075562 2026] [:error] [pid 15764:tid 15829] [client 20.203.188.128:26165] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/edit.php"] [unique_id "aeTgZ2LL_sqdSHoVp-Qn_AAAAkM"]
[Sun Apr 19 22:02:17.036670 2026] [:error] [pid 47773:tid 47838] [client 20.203.188.128:28094] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/edit.php"] [unique_id "aeTgaeiBHdnCJDuPq9BMrgAAAFY"]
[Sun Apr 19 22:02:18.334784 2026] [:error] [pid 47773:tid 47832] [client 20.203.188.128:26148] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/edit.php"] [unique_id "aeTgauiBHdnCJDuPq9BMsAAAAFA"]
[Sun Apr 19 22:02:19.849403 2026] [:error] [pid 15763:tid 15820] [client 20.203.188.128:35693] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/edit.php"] [unique_id "aeTga7MXv1Y1THOoxaAFtwAAAhg"]
[Sun Apr 19 22:02:21.652347 2026] [:error] [pid 15764:tid 15828] [client 20.203.188.128:28057] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gettest.php"] [unique_id "aeTgbWLL_sqdSHoVp-QoBwAAAkI"]
[Sun Apr 19 22:02:23.166570 2026] [:error] [pid 47772:tid 47790] [client 20.203.188.128:28089] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gettest.php"] [unique_id "aeTgb4c0L16cb4smAz_KegAAAAE"]
[Sun Apr 19 22:02:24.356689 2026] [:error] [pid 15760:tid 15779] [client 20.203.188.128:28052] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gettest.php"] [unique_id "aeTgcPSdD_XHQMJ_IStGRwAAAcs"]
[Sun Apr 19 22:02:25.399085 2026] [:error] [pid 15764:tid 15839] [client 20.203.188.128:24232] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gettest.php"] [unique_id "aeTgcWLL_sqdSHoVp-QoEAAAAk0"]
[Sun Apr 19 22:02:27.655024 2026] [:error] [pid 15763:tid 15807] [client 20.203.188.128:34335] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/666.php"] [unique_id "aeTgc7MXv1Y1THOoxaAFuwAAAgs"]
[Sun Apr 19 22:02:28.790882 2026] [:error] [pid 47773:tid 47818] [client 20.203.188.128:34355] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/666.php"] [unique_id "aeTgdOiBHdnCJDuPq9BMuAAAAEI"]
[Sun Apr 19 22:02:30.089622 2026] [:error] [pid 47886:tid 47890] [client 20.203.188.128:28087] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/666.php"] [unique_id "aeTgdkSe8yiyuPrD7yN-pQAAAMI"]
[Sun Apr 19 22:02:31.032584 2026] [:error] [pid 47772:tid 47807] [client 20.203.188.128:34321] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/666.php"] [unique_id "aeTgd4c0L16cb4smAz_KhQAAABI"]
[Sun Apr 19 22:02:31.753718 2026] [:error] [pid 15694:tid 15741] [client 20.203.188.128:28039] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tool.php"] [unique_id "aeTgd7imB-jol1fwqAoS7gAAAY8"]
[Sun Apr 19 22:02:32.902607 2026] [:error] [pid 47773:tid 47827] [client 20.203.188.128:26142] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tool.php"] [unique_id "aeTgeOiBHdnCJDuPq9BMvAAAAEs"]
[Sun Apr 19 22:02:34.010636 2026] [:error] [pid 15760:tid 15774] [client 20.203.188.128:24248] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tool.php"] [unique_id "aeTgevSdD_XHQMJ_IStGUgAAAcY"]
[Sun Apr 19 22:02:35.323557 2026] [:error] [pid 15760:tid 15783] [client 20.203.188.128:32355] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tool.php"] [unique_id "aeTge_SdD_XHQMJ_IStGVQAAAc8"]
[Sun Apr 19 22:02:36.414492 2026] [:error] [pid 15760:tid 15777] [client 20.203.188.128:3534] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-blogs.php"] [unique_id "aeTgfPSdD_XHQMJ_IStGXQAAAck"]
[Sun Apr 19 22:02:37.711281 2026] [:error] [pid 15763:tid 15820] [client 20.203.188.128:25731] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-blogs.php"] [unique_id "aeTgfbMXv1Y1THOoxaAFxQAAAhg"]
[Sun Apr 19 22:02:39.300518 2026] [:error] [pid 15763:tid 15811] [client 20.203.188.128:32770] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-blogs.php"] [unique_id "aeTgf7MXv1Y1THOoxaAFzAAAAg8"]
[Sun Apr 19 22:02:41.447783 2026] [:error] [pid 15760:tid 15788] [client 20.203.188.128:28092] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-blogs.php"] [unique_id "aeTggfSdD_XHQMJ_IStGYwAAAdQ"]
[Sun Apr 19 22:02:43.236092 2026] [:error] [pid 15694:tid 15748] [client 20.203.188.128:35664] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bgymj.php"] [unique_id "aeTgg7imB-jol1fwqAoS9AAAAZY"]
[Sun Apr 19 22:02:44.899434 2026] [:error] [pid 15764:tid 15831] [client 20.203.188.128:24229] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bgymj.php"] [unique_id "aeTghGLL_sqdSHoVp-QoJwAAAkU"]
[Sun Apr 19 22:02:46.286920 2026] [proxy_fcgi:error] [pid 15763:tid 15802] [client 20.203.188.128:32377] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 22:02:46.525825 2026] [proxy_fcgi:error] [pid 15763:tid 15805] [client 20.203.188.128:32377] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 22:02:46.773990 2026] [proxy_fcgi:error] [pid 15763:tid 15812] [client 20.203.188.128:32377] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 22:02:47.013580 2026] [proxy_fcgi:error] [pid 15763:tid 15799] [client 20.203.188.128:32377] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 22:02:47.253529 2026] [proxy_fcgi:error] [pid 15763:tid 15819] [client 20.203.188.128:32377] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 22:02:47.491676 2026] [proxy_fcgi:error] [pid 15763:tid 15809] [client 20.203.188.128:32377] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 22:02:47.757883 2026] [proxy_fcgi:error] [pid 15763:tid 15798] [client 20.203.188.128:32377] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 22:02:47.996058 2026] [proxy_fcgi:error] [pid 15763:tid 15813] [client 20.203.188.128:32377] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 22:02:48.246489 2026] [proxy_fcgi:error] [pid 15763:tid 15814] [client 20.203.188.128:32377] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 22:02:48.494353 2026] [proxy_fcgi:error] [pid 15763:tid 15801] [client 20.203.188.128:32377] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 22:02:48.746078 2026] [proxy_fcgi:error] [pid 15763:tid 15817] [client 20.203.188.128:32377] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 22:02:48.982899 2026] [:error] [pid 15763:tid 15797] [client 20.203.188.128:32377] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/press.php"] [unique_id "aeTgiLMXv1Y1THOoxaAF4gAAAgE"]
[Sun Apr 19 22:02:51.677333 2026] [:error] [pid 15764:tid 15829] [client 20.203.188.128:24231] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/press.php"] [unique_id "aeTgi2LL_sqdSHoVp-QoOQAAAkM"]
[Sun Apr 19 22:02:55.691144 2026] [:error] [pid 47773:tid 47817] [client 20.203.188.128:3551] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/press.php"] [unique_id "aeTgj-iBHdnCJDuPq9BM1gAAAEE"]
[Sun Apr 19 22:02:58.770263 2026] [:error] [pid 15765:tid 15856] [client 20.203.188.128:32379] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/press.php"] [unique_id "aeTgkvRqinw-W5EwQ74BlwAAAoM"]
[Sun Apr 19 22:03:01.462533 2026] [:error] [pid 15760:tid 15782] [client 20.203.188.128:32821] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-png.php"] [unique_id "aeTglfSdD_XHQMJ_IStGiwAAAc4"]
[Sun Apr 19 22:03:02.923536 2026] [:error] [pid 15765:tid 15866] [client 20.203.188.128:35699] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-png.php"] [unique_id "aeTglvRqinw-W5EwQ74BmAAAAo0"]
[Sun Apr 19 22:03:04.243323 2026] [:error] [pid 15764:tid 15833] [client 20.203.188.128:34364] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-png.php"] [unique_id "aeTgmGLL_sqdSHoVp-QoYQAAAkc"]
[Sun Apr 19 22:03:05.573766 2026] [:error] [pid 15760:tid 15790] [client 20.203.188.128:32325] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-png.php"] [unique_id "aeTgmfSdD_XHQMJ_IStGlgAAAdY"]
[Sun Apr 19 22:03:07.280628 2026] [:error] [pid 15764:tid 15830] [client 20.203.188.128:34346] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/s.php"] [unique_id "aeTgm2LL_sqdSHoVp-QoaAAAAkQ"]
[Sun Apr 19 22:03:08.212791 2026] [:error] [pid 15693:tid 15717] [client 20.203.188.128:24202] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/s.php"] [unique_id "aeTgnMNMD-ccazQlTslfOAAAAVU"]
[Sun Apr 19 22:03:08.983204 2026] [:error] [pid 15760:tid 15790] [client 20.203.188.128:32372] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/s.php"] [unique_id "aeTgnPSdD_XHQMJ_IStGpQAAAdY"]
[Sun Apr 19 22:03:10.003928 2026] [:error] [pid 15764:tid 15842] [client 20.203.188.128:26162] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/s.php"] [unique_id "aeTgnmLL_sqdSHoVp-QoawAAAlA"]
[Sun Apr 19 22:03:10.817154 2026] [:error] [pid 15764:tid 15837] [client 20.203.188.128:34337] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/first.php"] [unique_id "aeTgnmLL_sqdSHoVp-QobAAAAks"]
[Sun Apr 19 22:03:12.099565 2026] [:error] [pid 47775:tid 47854] [client 20.203.188.128:34334] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/first.php"] [unique_id "aeTgoLmztjlk9tsmoewdvQAAAIs"]
[Sun Apr 19 22:03:12.924522 2026] [:error] [pid 15764:tid 15844] [client 20.203.188.128:35653] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/first.php"] [unique_id "aeTgoGLL_sqdSHoVp-QocAAAAlI"]
[Sun Apr 19 22:03:14.609738 2026] [:error] [pid 15765:tid 15877] [client 20.203.188.128:26115] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/first.php"] [unique_id "aeTgovRqinw-W5EwQ74BmwAAApg"]
[Sun Apr 19 22:03:16.016012 2026] [:error] [pid 15764:tid 15834] [client 20.203.188.128:34352] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-links-opml.php"] [unique_id "aeTgpGLL_sqdSHoVp-QoeAAAAkg"]
[Sun Apr 19 22:03:17.147112 2026] [:error] [pid 15764:tid 15844] [client 20.203.188.128:28076] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-links-opml.php"] [unique_id "aeTgpWLL_sqdSHoVp-QogAAAAlI"]
[Sun Apr 19 22:03:18.303548 2026] [:error] [pid 47886:tid 47912] [client 20.203.188.128:26124] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-links-opml.php"] [unique_id "aeTgpkSe8yiyuPrD7yN-uAAAANg"]
[Sun Apr 19 22:03:19.428736 2026] [:error] [pid 15764:tid 15831] [client 20.203.188.128:32782] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-links-opml.php"] [unique_id "aeTgp2LL_sqdSHoVp-QojQAAAkU"]
[Sun Apr 19 22:03:20.793641 2026] [:error] [pid 47772:tid 47792] [client 20.203.188.128:32812] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ms-edit.php"] [unique_id "aeTgqIc0L16cb4smAz_KlQAAAAM"]
[Sun Apr 19 22:03:21.948407 2026] [:error] [pid 15694:tid 15748] [client 20.203.188.128:34347] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ms-edit.php"] [unique_id "aeTgqbimB-jol1fwqAoS_wAAAZY"]
[Sun Apr 19 22:03:22.980811 2026] [:error] [pid 15760:tid 15785] [client 20.203.188.128:35682] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ms-edit.php"] [unique_id "aeTgqvSdD_XHQMJ_IStGygAAAdE"]
[Sun Apr 19 22:03:24.102505 2026] [:error] [pid 15763:tid 15802] [client 20.203.188.128:26174] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ms-edit.php"] [unique_id "aeTgrLMXv1Y1THOoxaAGCwAAAgY"]
[Sun Apr 19 22:03:25.480154 2026] [:error] [pid 15760:tid 15790] [client 20.203.188.128:24237] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/asd.php"] [unique_id "aeTgrfSdD_XHQMJ_IStG0QAAAdY"]
[Sun Apr 19 22:03:26.253713 2026] [:error] [pid 15763:tid 15800] [client 20.203.188.128:35667] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/asd.php"] [unique_id "aeTgrrMXv1Y1THOoxaAGEQAAAgQ"]
[Sun Apr 19 22:03:27.200289 2026] [:error] [pid 15765:tid 15864] [client 20.203.188.128:32831] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/asd.php"] [unique_id "aeTgr_Rqinw-W5EwQ74BngAAAos"]
[Sun Apr 19 22:03:28.315490 2026] [:error] [pid 15763:tid 15808] [client 20.203.188.128:35695] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/asd.php"] [unique_id "aeTgsLMXv1Y1THOoxaAGFAAAAgw"]
[Sun Apr 19 22:03:29.895777 2026] [:error] [pid 47886:tid 47892] [client 20.203.188.128:3524] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/public/vx.php"] [unique_id "aeTgsUSe8yiyuPrD7yN-zwAAAMQ"]
[Sun Apr 19 22:03:32.053110 2026] [:error] [pid 47775:tid 47857] [client 20.203.188.128:29299] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/public/vx.php"] [unique_id "aeTgtLmztjlk9tsmoewd2AAAAI4"]
[Sun Apr 19 22:03:36.373353 2026] [:error] [pid 15764:tid 15832] [client 20.203.188.128:24233] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/public/vx.php"] [unique_id "aeTguGLL_sqdSHoVp-QotwAAAkY"]
[Sun Apr 19 22:03:40.267846 2026] [:error] [pid 15764:tid 15841] [client 20.203.188.128:26113] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/public/vx.php"] [unique_id "aeTgvGLL_sqdSHoVp-QouQAAAk8"]
[Sun Apr 19 22:03:42.439266 2026] [:error] [pid 47772:tid 47797] [client 20.203.188.128:32790] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/radio.php"] [unique_id "aeTgvoc0L16cb4smAz_KqQAAAAg"]
[Sun Apr 19 22:03:43.452228 2026] [:error] [pid 15693:tid 15697] [client 20.203.188.128:34319] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/radio.php"] [unique_id "aeTgv8NMD-ccazQlTslfTAAAAUE"]
[Sun Apr 19 22:03:44.951061 2026] [:error] [pid 15765:tid 15869] [client 20.203.188.128:24195] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/radio.php"] [unique_id "aeTgwPRqinw-W5EwQ74BrgAAApA"]
[Sun Apr 19 22:03:46.400290 2026] [:error] [pid 15760:tid 15768] [client 20.203.188.128:32818] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/radio.php"] [unique_id "aeTgwvSdD_XHQMJ_IStG3QAAAcA"]
[Sun Apr 19 22:03:48.333351 2026] [proxy_fcgi:error] [pid 15694:tid 15739] [client 20.203.188.128:35679] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 22:03:48.813299 2026] [proxy_fcgi:error] [pid 15694:tid 15744] [client 20.203.188.128:35679] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 22:03:49.247865 2026] [proxy_fcgi:error] [pid 15694:tid 15737] [client 20.203.188.128:35679] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 22:03:49.487490 2026] [proxy_fcgi:error] [pid 15694:tid 15723] [client 20.203.188.128:35679] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 22:03:49.757993 2026] [proxy_fcgi:error] [pid 15694:tid 15725] [client 20.203.188.128:35679] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 22:03:50.214942 2026] [proxy_fcgi:error] [pid 15694:tid 15741] [client 20.203.188.128:35679] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 22:03:50.602566 2026] [proxy_fcgi:error] [pid 15694:tid 15735] [client 20.203.188.128:35679] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 22:03:53.229326 2026] [proxy_fcgi:error] [pid 15694:tid 15733] [client 20.203.188.128:35679] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 22:03:53.471159 2026] [proxy_fcgi:error] [pid 15694:tid 15732] [client 20.203.188.128:35679] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 22:03:53.849869 2026] [proxy_fcgi:error] [pid 15694:tid 15742] [client 20.203.188.128:35679] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 22:03:54.296876 2026] [:error] [pid 15694:tid 15724] [client 20.203.188.128:35679] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fs.php"] [unique_id "aeTgyrimB-jol1fwqAoTMgAAAYE"]
[Sun Apr 19 22:03:55.233632 2026] [:error] [pid 47773:tid 47830] [client 20.203.188.128:26163] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fs.php"] [unique_id "aeTgy-iBHdnCJDuPq9BM7wAAAE4"]
[Sun Apr 19 22:03:56.116634 2026] [:error] [pid 15764:tid 15850] [client 20.203.188.128:32829] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fs.php"] [unique_id "aeTgzGLL_sqdSHoVp-Qo0gAAAlc"]
[Sun Apr 19 22:03:57.265802 2026] [:error] [pid 47772:tid 47810] [client 20.203.188.128:24216] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fs.php"] [unique_id "aeTgzYc0L16cb4smAz_KvgAAABU"]
[Sun Apr 19 22:03:58.589730 2026] [:error] [pid 47886:tid 47909] [client 20.203.188.128:26129] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws82.php"] [unique_id "aeTgzkSe8yiyuPrD7yN-2QAAANU"]
[Sun Apr 19 22:04:00.009273 2026] [:error] [pid 15764:tid 15838] [client 20.203.188.128:32771] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws82.php"] [unique_id "aeTg0GLL_sqdSHoVp-Qo2gAAAkw"]
[Sun Apr 19 22:04:01.513104 2026] [:error] [pid 15693:tid 15717] [client 20.203.188.128:3522] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws82.php"] [unique_id "aeTg0cNMD-ccazQlTslfWgAAAVU"]
[Sun Apr 19 22:04:04.623592 2026] [:error] [pid 15764:tid 15850] [client 20.203.188.128:24192] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws82.php"] [unique_id "aeTg1GLL_sqdSHoVp-Qo5QAAAlc"]
[Sun Apr 19 22:04:06.519432 2026] [:error] [pid 47773:tid 47838] [client 20.203.188.128:3546] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aeTg1uiBHdnCJDuPq9BM-AAAAFY"]
[Sun Apr 19 22:04:09.495990 2026] [:error] [pid 15765:tid 15867] [client 20.203.188.128:26152] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aeTg2fRqinw-W5EwQ74BugAAAo4"]
[Sun Apr 19 22:04:12.752261 2026] [:error] [pid 15760:tid 15776] [client 20.203.188.128:3561] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aeTg3PSdD_XHQMJ_IStHIwAAAcg"]
[Sun Apr 19 22:04:15.625801 2026] [:error] [pid 47772:tid 47813] [client 20.203.188.128:32793] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aeTg34c0L16cb4smAz_LBgAAABg"]
[Sun Apr 19 22:04:18.648206 2026] [:error] [pid 47773:tid 47832] [client 20.203.188.128:34304] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws48.php"] [unique_id "aeTg4uiBHdnCJDuPq9BNDwAAAFA"]
[Sun Apr 19 22:04:21.408645 2026] [:error] [pid 47775:tid 47860] [client 20.203.188.128:32806] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws48.php"] [unique_id "aeTg5bmztjlk9tsmoewd9gAAAJE"]
[Sun Apr 19 22:04:22.526451 2026] [:error] [pid 15760:tid 15770] [client 20.203.188.128:34325] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws48.php"] [unique_id "aeTg5vSdD_XHQMJ_IStHMwAAAcI"]
[Sun Apr 19 22:04:24.241094 2026] [:error] [pid 15760:tid 15778] [client 20.203.188.128:37377] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws48.php"] [unique_id "aeTg6PSdD_XHQMJ_IStHOAAAAco"]
[Sun Apr 19 22:04:25.466757 2026] [:error] [pid 15764:tid 15832] [client 20.203.188.128:36963] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-the.php"] [unique_id "aeTg6WLL_sqdSHoVp-QpEQAAAkY"]
[Sun Apr 19 22:04:26.830579 2026] [:error] [pid 15760:tid 15770] [client 20.203.188.128:29276] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-the.php"] [unique_id "aeTg6vSdD_XHQMJ_IStHPQAAAcI"]
[Sun Apr 19 22:04:27.744019 2026] [:error] [pid 15760:tid 15774] [client 20.203.188.128:27976] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-the.php"] [unique_id "aeTg6_SdD_XHQMJ_IStHPwAAAcY"]
[Sun Apr 19 22:04:28.771498 2026] [:error] [pid 15764:tid 15829] [client 20.203.188.128:27979] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-the.php"] [unique_id "aeTg7GLL_sqdSHoVp-QpGAAAAkM"]
[Sun Apr 19 22:04:29.978568 2026] [:error] [pid 15694:tid 15741] [client 20.203.188.128:23892] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp5.php"] [unique_id "aeTg7bimB-jol1fwqAoTagAAAY8"]
[Sun Apr 19 22:04:30.928498 2026] [:error] [pid 15764:tid 15838] [client 20.203.188.128:34625] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp5.php"] [unique_id "aeTg7mLL_sqdSHoVp-QpHwAAAkw"]
[Sun Apr 19 22:04:32.028391 2026] [:error] [pid 15760:tid 15778] [client 20.203.188.128:34674] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp5.php"] [unique_id "aeTg8PSdD_XHQMJ_IStHSwAAAco"]
[Sun Apr 19 22:04:32.811880 2026] [:error] [pid 15760:tid 15769] [client 20.203.188.128:33623] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp5.php"] [unique_id "aeTg8PSdD_XHQMJ_IStHTwAAAcE"]
[Sun Apr 19 22:04:33.527960 2026] [:error] [pid 15760:tid 15786] [client 20.203.188.128:3970] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xxx.php"] [unique_id "aeTg8fSdD_XHQMJ_IStHVAAAAdI"]
[Sun Apr 19 22:04:34.415460 2026] [:error] [pid 15760:tid 15784] [client 20.203.188.128:34919] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xxx.php"] [unique_id "aeTg8vSdD_XHQMJ_IStHWwAAAdA"]
[Sun Apr 19 22:04:35.427496 2026] [:error] [pid 15760:tid 15781] [client 20.203.188.128:24681] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xxx.php"] [unique_id "aeTg8_SdD_XHQMJ_IStHXwAAAc0"]
[Sun Apr 19 22:04:36.188223 2026] [:error] [pid 15760:tid 15775] [client 20.203.188.128:29816] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xxx.php"] [unique_id "aeTg9PSdD_XHQMJ_IStHYAAAAcc"]
[Sun Apr 19 22:04:37.426937 2026] [:error] [pid 15765:tid 15873] [client 20.203.188.128:30033] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wen.php"] [unique_id "aeTg9fRqinw-W5EwQ74BzwAAApQ"]
[Sun Apr 19 22:04:38.317397 2026] [:error] [pid 47773:tid 47816] [client 20.203.188.128:31748] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wen.php"] [unique_id "aeTg9uiBHdnCJDuPq9BNKQAAAEA"]
[Sun Apr 19 22:04:39.290149 2026] [:error] [pid 47773:tid 47818] [client 20.203.188.128:33312] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wen.php"] [unique_id "aeTg9-iBHdnCJDuPq9BNKgAAAEI"]
[Sun Apr 19 22:04:40.160411 2026] [:error] [pid 15763:tid 15800] [client 20.203.188.128:24314] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wen.php"] [unique_id "aeTg-LMXv1Y1THOoxaAGVQAAAgQ"]
[Sun Apr 19 22:04:41.263646 2026] [:error] [pid 47772:tid 47813] [client 20.203.188.128:33097] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bnm.php"] [unique_id "aeTg-Yc0L16cb4smAz_LLwAAABg"]
[Sun Apr 19 22:04:42.663864 2026] [:error] [pid 15694:tid 15751] [client 20.203.188.128:22751] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bnm.php"] [unique_id "aeTg-rimB-jol1fwqAoTbwAAAZg"]
[Sun Apr 19 22:04:43.943243 2026] [:error] [pid 15764:tid 15850] [client 20.203.188.128:32537] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bnm.php"] [unique_id "aeTg-2LL_sqdSHoVp-QpMgAAAlc"]
[Sun Apr 19 22:04:44.772201 2026] [:error] [pid 15764:tid 15830] [client 20.203.188.128:37676] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bnm.php"] [unique_id "aeTg_GLL_sqdSHoVp-QpNAAAAkQ"]
[Sun Apr 19 22:04:45.456129 2026] [:error] [pid 47773:tid 47833] [client 20.203.188.128:30811] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeTg_eiBHdnCJDuPq9BNLgAAAFE"]
[Sun Apr 19 22:04:46.404985 2026] [:error] [pid 15763:tid 15815] [client 20.203.188.128:3589] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeTg_rMXv1Y1THOoxaAGZAAAAhM"]
[Sun Apr 19 22:04:47.197171 2026] [:error] [pid 15764:tid 15836] [client 20.203.188.128:33809] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeTg_2LL_sqdSHoVp-QpNgAAAko"]
[Sun Apr 19 22:04:48.203629 2026] [:error] [pid 15763:tid 15803] [client 20.203.188.128:3603] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeThALMXv1Y1THOoxaAGaQAAAgc"]
[Sun Apr 19 22:04:49.125565 2026] [:error] [pid 47772:tid 47811] [client 20.203.188.128:31041] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/byypas.php"] [unique_id "aeThAYc0L16cb4smAz_LNQAAABY"]
[Sun Apr 19 22:04:49.965300 2026] [:error] [pid 47775:tid 47845] [client 20.203.188.128:37130] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/byypas.php"] [unique_id "aeThAbmztjlk9tsmoeweAwAAAII"]
[Sun Apr 19 22:04:50.892345 2026] [:error] [pid 15763:tid 15807] [client 20.203.188.128:34381] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/byypas.php"] [unique_id "aeThArMXv1Y1THOoxaAGcQAAAgs"]
[Sun Apr 19 22:04:51.804529 2026] [:error] [pid 15764:tid 15831] [client 20.203.188.128:37128] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/byypas.php"] [unique_id "aeThA2LL_sqdSHoVp-QpQAAAAkU"]
[Sun Apr 19 22:04:52.885261 2026] [:error] [pid 15763:tid 15801] [client 20.203.188.128:29954] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hplfuns.php"] [unique_id "aeThBLMXv1Y1THOoxaAGdAAAAgU"]
[Sun Apr 19 22:04:53.995932 2026] [proxy_fcgi:error] [pid 15764:tid 15842] [client 20.203.188.128:22496] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 22:04:54.236692 2026] [proxy_fcgi:error] [pid 15764:tid 15845] [client 20.203.188.128:22496] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 22:04:54.762618 2026] [proxy_fcgi:error] [pid 15764:tid 15835] [client 20.203.188.128:22496] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 22:04:55.001447 2026] [proxy_fcgi:error] [pid 15764:tid 15840] [client 20.203.188.128:22496] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 22:04:55.276185 2026] [proxy_fcgi:error] [pid 15764:tid 15846] [client 20.203.188.128:22496] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 22:04:55.546155 2026] [proxy_fcgi:error] [pid 15764:tid 15831] [client 20.203.188.128:22496] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 22:04:55.785283 2026] [proxy_fcgi:error] [pid 15764:tid 15850] [client 20.203.188.128:22496] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 22:04:56.026709 2026] [proxy_fcgi:error] [pid 15764:tid 15829] [client 20.203.188.128:22496] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 22:04:56.266560 2026] [proxy_fcgi:error] [pid 15764:tid 15847] [client 20.203.188.128:22496] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 22:04:56.506077 2026] [proxy_fcgi:error] [pid 15764:tid 15833] [client 20.203.188.128:22496] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 22:04:57.346198 2026] [proxy_fcgi:error] [pid 15764:tid 15836] [client 20.203.188.128:22496] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 22:04:57.581980 2026] [:error] [pid 15764:tid 15839] [client 20.203.188.128:22496] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws66.php"] [unique_id "aeThCWLL_sqdSHoVp-QpVgAAAk0"]
[Sun Apr 19 22:04:59.338679 2026] [:error] [pid 15764:tid 15843] [client 20.203.188.128:3954] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws66.php"] [unique_id "aeThC2LL_sqdSHoVp-QpWQAAAlE"]
[Sun Apr 19 22:05:00.482142 2026] [:error] [pid 15764:tid 15831] [client 20.203.188.128:23134] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws66.php"] [unique_id "aeThDGLL_sqdSHoVp-QpYAAAAkU"]
[Sun Apr 19 22:05:01.987959 2026] [:error] [pid 47775:tid 47860] [client 20.203.188.128:34844] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws66.php"] [unique_id "aeThDbmztjlk9tsmoeweEAAAAJE"]
[Sun Apr 19 22:05:03.009754 2026] [:error] [pid 47775:tid 47845] [client 20.203.188.128:3928] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/66.php"] [unique_id "aeThD7mztjlk9tsmoeweEwAAAII"]
[Sun Apr 19 22:05:03.819166 2026] [:error] [pid 15764:tid 15831] [client 20.203.188.128:35901] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/66.php"] [unique_id "aeThD2LL_sqdSHoVp-QpcgAAAkU"]
[Sun Apr 19 22:05:04.856983 2026] [:error] [pid 47775:tid 47853] [client 20.203.188.128:27417] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/66.php"] [unique_id "aeThELmztjlk9tsmoeweFgAAAIo"]
[Sun Apr 19 22:05:07.910934 2026] [:error] [pid 15694:tid 15723] [client 20.203.188.128:31036] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/66.php"] [unique_id "aeThE7imB-jol1fwqAoTcwAAAYA"]
[Sun Apr 19 22:05:09.220969 2026] [:error] [pid 15760:tid 15772] [client 20.203.188.128:23112] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "aeThFfSdD_XHQMJ_IStHkgAAAcQ"]
[Sun Apr 19 22:05:10.611113 2026] [:error] [pid 15763:tid 15808] [client 20.203.188.128:34874] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "aeThFrMXv1Y1THOoxaAGhAAAAgw"]
[Sun Apr 19 22:05:11.834576 2026] [:error] [pid 47773:tid 47824] [client 20.203.188.128:37195] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "aeThF-iBHdnCJDuPq9BNVgAAAEg"]
[Sun Apr 19 22:05:13.176945 2026] [:error] [pid 15760:tid 15786] [client 20.203.188.128:3297] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "aeThGfSdD_XHQMJ_IStHmwAAAdI"]
[Sun Apr 19 22:05:15.148291 2026] [:error] [pid 15764:tid 15843] [client 20.203.188.128:31009] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws88.php"] [unique_id "aeThG2LL_sqdSHoVp-QpfwAAAlE"]
[Sun Apr 19 22:05:16.357724 2026] [:error] [pid 15760:tid 15778] [client 20.203.188.128:25441] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws88.php"] [unique_id "aeThHPSdD_XHQMJ_IStHpwAAAco"]
[Sun Apr 19 22:05:18.063037 2026] [:error] [pid 15765:tid 15875] [client 20.203.188.128:32024] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws88.php"] [unique_id "aeThHvRqinw-W5EwQ74B3gAAApY"]
[Sun Apr 19 22:05:19.551868 2026] [:error] [pid 47886:tid 47906] [client 20.203.188.128:32589] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws88.php"] [unique_id "aeThH0Se8yiyuPrD7yN-7AAAANI"]
[Sun Apr 19 22:05:20.484118 2026] [:error] [pid 47773:tid 47822] [client 20.203.188.128:35394] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mode.php"] [unique_id "aeThIOiBHdnCJDuPq9BNWQAAAEY"]
[Sun Apr 19 22:05:21.622151 2026] [:error] [pid 47772:tid 47808] [client 20.203.188.128:31007] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mode.php"] [unique_id "aeThIYc0L16cb4smAz_LTAAAABM"]
[Sun Apr 19 22:05:22.541298 2026] [:error] [pid 15764:tid 15829] [client 20.203.188.128:32583] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mode.php"] [unique_id "aeThImLL_sqdSHoVp-QphwAAAkM"]
[Sun Apr 19 22:05:23.735035 2026] [:error] [pid 47773:tid 47816] [client 20.203.188.128:25352] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mode.php"] [unique_id "aeThI-iBHdnCJDuPq9BNXQAAAEA"]
[Sun Apr 19 22:05:25.635550 2026] [:error] [pid 15765:tid 15868] [client 20.203.188.128:32877] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/set.php"] [unique_id "aeThJfRqinw-W5EwQ74B4wAAAo8"]
[Sun Apr 19 22:05:26.709071 2026] [:error] [pid 47775:tid 47861] [client 20.203.188.128:35881] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/set.php"] [unique_id "aeThJrmztjlk9tsmoeweLAAAAJI"]
[Sun Apr 19 22:05:28.111395 2026] [:error] [pid 47773:tid 47828] [client 20.203.188.128:28421] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/set.php"] [unique_id "aeThKOiBHdnCJDuPq9BNZwAAAEw"]
[Sun Apr 19 22:05:29.585010 2026] [:error] [pid 47775:tid 47851] [client 20.203.188.128:3861] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/set.php"] [unique_id "aeThKbmztjlk9tsmoeweNQAAAIg"]
[Sun Apr 19 22:05:30.810517 2026] [:error] [pid 47772:tid 47803] [client 20.203.188.128:31010] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hroxw.php"] [unique_id "aeThKoc0L16cb4smAz_LWAAAAA4"]
[Sun Apr 19 22:05:33.711826 2026] [:error] [pid 47773:tid 47837] [client 20.203.188.128:34841] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hroxw.php"] [unique_id "aeThLeiBHdnCJDuPq9BNagAAAFU"]
[Sun Apr 19 22:05:36.019692 2026] [:error] [pid 47773:tid 47824] [client 20.203.188.128:25462] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hroxw.php"] [unique_id "aeThMOiBHdnCJDuPq9BNbAAAAEg"]
[Sun Apr 19 22:05:38.892537 2026] [:error] [pid 15760:tid 15769] [client 20.203.188.128:30982] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hroxw.php"] [unique_id "aeThMvSdD_XHQMJ_IStHzQAAAcE"]
[Sun Apr 19 22:05:41.749433 2026] [:error] [pid 47772:tid 47801] [client 20.203.188.128:25406] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ok.php"] [unique_id "aeThNYc0L16cb4smAz_LYwAAAAw"]
[Sun Apr 19 22:05:43.752740 2026] [:error] [pid 15760:tid 15780] [client 20.203.188.128:36152] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ok.php"] [unique_id "aeThN_SdD_XHQMJ_IStH4gAAAcw"]
[Sun Apr 19 22:05:45.675502 2026] [:error] [pid 15763:tid 15798] [client 20.203.188.128:30307] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ok.php"] [unique_id "aeThObMXv1Y1THOoxaAGnwAAAgI"]
[Sun Apr 19 22:05:47.478196 2026] [:error] [pid 15760:tid 15792] [client 20.203.188.128:34862] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ok.php"] [unique_id "aeThO_SdD_XHQMJ_IStH8wAAAdg"]
[Sun Apr 19 22:05:49.098332 2026] [:error] [pid 47773:tid 47830] [client 20.203.188.128:28430] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zoo.php"] [unique_id "aeThPeiBHdnCJDuPq9BNcAAAAE4"]
[Sun Apr 19 22:05:49.818828 2026] [:error] [pid 47772:tid 47807] [client 20.203.188.128:35137] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zoo.php"] [unique_id "aeThPYc0L16cb4smAz_LaAAAABI"]
[Sun Apr 19 22:05:50.708318 2026] [:error] [pid 15763:tid 15814] [client 20.203.188.128:36098] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zoo.php"] [unique_id "aeThPrMXv1Y1THOoxaAGpAAAAhI"]
[Sun Apr 19 22:05:51.324511 2026] [:error] [pid 47773:tid 47829] [client 20.203.188.128:30747] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zoo.php"] [unique_id "aeThP-iBHdnCJDuPq9BNcwAAAE0"]
[Sun Apr 19 22:05:52.471320 2026] [:error] [pid 15763:tid 15806] [client 20.203.188.128:30734] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gaza.php"] [unique_id "aeThQLMXv1Y1THOoxaAGqQAAAgo"]
[Sun Apr 19 22:05:53.259391 2026] [:error] [pid 47772:tid 47804] [client 20.203.188.128:22406] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gaza.php"] [unique_id "aeThQYc0L16cb4smAz_LawAAAA8"]
[Sun Apr 19 22:05:55.313904 2026] [:error] [pid 47775:tid 47852] [client 20.203.188.128:30752] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gaza.php"] [unique_id "aeThQ7mztjlk9tsmoeweWAAAAIk"]
[Sun Apr 19 22:05:56.769248 2026] [:error] [pid 15764:tid 15826] [client 20.203.188.128:36113] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gaza.php"] [unique_id "aeThRGLL_sqdSHoVp-QpsgAAAkA"]
[Sun Apr 19 22:05:58.753088 2026] [proxy_fcgi:error] [pid 15764:tid 15843] [client 20.203.188.128:28140] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 22:05:58.992960 2026] [:error] [pid 15764:tid 15848] [client 20.203.188.128:28140] [client 20.203.188.128] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dwelectservices.com.au"] [uri "/fm.php"] [unique_id "aeThRmLL_sqdSHoVp-QpwgAAAlY"]
[Sun Apr 19 22:50:47.598508 2026] [:error] [pid 15764:tid 15830] [client 146.70.194.222:43274] [client 146.70.194.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aeTrx2LL_sqdSHoVp-Q6LQAAAkQ"]
[Sun Apr 19 22:50:48.127444 2026] [:error] [pid 47775:tid 47844] [client 146.70.194.222:43724] [client 146.70.194.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/"] [unique_id "aeTryLmztjlk9tsmoewnaQAAAIE"]
[Sun Apr 19 22:50:48.656009 2026] [:error] [pid 47773:tid 47817] [client 146.70.194.222:44122] [client 146.70.194.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/blog/wp-includes/wlwmanifest.xml"] [unique_id "aeTryOiBHdnCJDuPq9BWwQAAAEE"]
[Sun Apr 19 22:50:49.178218 2026] [:error] [pid 15693:tid 15704] [client 146.70.194.222:44666] [client 146.70.194.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "aeTrycNMD-ccazQlTslkDwAAAUg"]
[Sun Apr 19 22:50:49.695601 2026] [:error] [pid 15693:tid 15696] [client 146.70.194.222:45302] [client 146.70.194.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "aeTrycNMD-ccazQlTslkEQAAAUA"]
[Sun Apr 19 22:50:50.218290 2026] [:error] [pid 15760:tid 15773] [client 146.70.194.222:46074] [client 146.70.194.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "aeTryvSdD_XHQMJ_IStf0QAAAcU"]
[Sun Apr 19 22:50:50.748188 2026] [:error] [pid 47772:tid 47789] [client 146.70.194.222:46910] [client 146.70.194.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "aeTryoc0L16cb4smAz_aVwAAAAA"]
[Sun Apr 19 22:50:51.266126 2026] [:error] [pid 47773:tid 47835] [client 146.70.194.222:47648] [client 146.70.194.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "aeTry-iBHdnCJDuPq9BW3gAAAFM"]
[Mon Apr 20 06:51:08.872067 2026] [proxy_fcgi:error] [pid 64333:tid 64393] [client 20.203.252.230:59767] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 06:51:09.113587 2026] [proxy_fcgi:error] [pid 64333:tid 64394] [client 20.203.252.230:59767] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 06:51:09.355201 2026] [proxy_fcgi:error] [pid 64333:tid 64392] [client 20.203.252.230:59767] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 06:51:09.595272 2026] [proxy_fcgi:error] [pid 64333:tid 64390] [client 20.203.252.230:59767] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 06:51:09.837096 2026] [proxy_fcgi:error] [pid 64333:tid 64382] [client 20.203.252.230:59767] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 06:51:10.077866 2026] [proxy_fcgi:error] [pid 64333:tid 64384] [client 20.203.252.230:59767] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 06:51:10.319742 2026] [proxy_fcgi:error] [pid 64333:tid 64398] [client 20.203.252.230:59767] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 06:51:10.560834 2026] [proxy_fcgi:error] [pid 64333:tid 64399] [client 20.203.252.230:59767] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 12:05:14.160965 2026] [:error] [pid 11351:tid 11392] [client 82.66.180.86:42046] [client 82.66.180.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 82.66.180.86, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-login.php"] [unique_id "aeWl-gN8Z1-vktaI_tNyFwAAAEU"]
[Mon Apr 20 12:05:14.171167 2026] [proxy_fcgi:error] [pid 11351:tid 11392] [client 82.66.180.86:42046] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 12:05:15.192352 2026] [proxy_fcgi:error] [pid 11352:tid 11424] [client 82.66.180.86:42048] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 13:32:45.237899 2026] [:error] [pid 42014:tid 42032] [client 103.65.237.216:56523] [client 103.65.237.216] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/sftp-config.json"] [unique_id "aeW6fcek-00-ZI0f1NrutgAAARA"]
[Mon Apr 20 18:53:41.244961 2026] [proxy_fcgi:error] [pid 11441:tid 11466] [client 89.251.0.42:45809] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 18:53:41.556195 2026] [proxy_fcgi:error] [pid 11441:tid 11454] [client 89.251.0.42:45809] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 18:53:41.877980 2026] [proxy_fcgi:error] [pid 11441:tid 11446] [client 89.251.0.42:45809] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 18:53:42.107749 2026] [proxy_fcgi:error] [pid 11441:tid 11460] [client 89.251.0.42:45809] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 18:53:42.453542 2026] [proxy_fcgi:error] [pid 11441:tid 11465] [client 89.251.0.42:45809] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 18:53:42.687857 2026] [proxy_fcgi:error] [pid 11441:tid 11461] [client 89.251.0.42:45809] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 18:53:43.017863 2026] [proxy_fcgi:error] [pid 11441:tid 11449] [client 89.251.0.42:45809] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 18:53:43.326460 2026] [proxy_fcgi:error] [pid 11441:tid 11464] [client 89.251.0.42:45809] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 18:53:43.882018 2026] [proxy_fcgi:error] [pid 11441:tid 11448] [client 89.251.0.42:45809] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 18:53:44.195682 2026] [proxy_fcgi:error] [pid 11441:tid 11457] [client 89.251.0.42:45809] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 18:53:44.426145 2026] [proxy_fcgi:error] [pid 11441:tid 11456] [client 89.251.0.42:45809] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 18:53:44.716679 2026] [proxy_fcgi:error] [pid 11441:tid 11450] [client 89.251.0.42:45809] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 18:53:45.015128 2026] [proxy_fcgi:error] [pid 11441:tid 11445] [client 89.251.0.42:45809] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 18:53:45.243510 2026] [proxy_fcgi:error] [pid 11441:tid 11455] [client 89.251.0.42:45809] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 18:53:45.562193 2026] [proxy_fcgi:error] [pid 11441:tid 11463] [client 89.251.0.42:45809] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 18:53:45.821504 2026] [proxy_fcgi:error] [pid 11441:tid 11443] [client 89.251.0.42:45809] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 18:53:46.222090 2026] [proxy_fcgi:error] [pid 11441:tid 11462] [client 89.251.0.42:45809] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 18:53:46.500251 2026] [proxy_fcgi:error] [pid 11441:tid 11467] [client 89.251.0.42:45809] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 18:53:50.424033 2026] [:error] [pid 11441:tid 11445] [client 89.251.0.42:45809] [client 89.251.0.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aeYFvsixByFUvmh319B_PQAAAMI"]
[Mon Apr 20 18:53:51.864723 2026] [:error] [pid 11351:tid 11394] [client 89.251.0.58:23275] [client 89.251.0.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aeYFvwN8Z1-vktaI_tPMzQAAAEc"]
[Mon Apr 20 18:53:53.317468 2026] [proxy_fcgi:error] [pid 11350:tid 11366] [client 89.251.0.48:47511] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 18:53:54.434960 2026] [:error] [pid 11350:tid 11376] [client 89.251.0.48:47511] [client 89.251.0.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dwelectservices.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aeYFwv4EoMBgOJuJnT1r3AAAABE"]
[Mon Apr 20 18:53:55.408046 2026] [proxy_fcgi:error] [pid 6928:tid 6944] [client 89.251.0.63:28547] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 18:53:55.672826 2026] [:error] [pid 6928:tid 6939] [client 89.251.0.63:28547] [client 89.251.0.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aeYFwx3y7MHq1iB0qYqX_AAAAUk"]
[Mon Apr 20 18:53:56.429250 2026] [proxy_fcgi:error] [pid 11350:tid 11368] [client 89.251.0.55:30143] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 18:53:57.776041 2026] [:error] [pid 11350:tid 11373] [client 89.251.0.55:30143] [client 89.251.0.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aeYFxf4EoMBgOJuJnT1r6gAAAA4"]
[Mon Apr 20 18:53:58.670079 2026] [:error] [pid 11352:tid 11420] [client 89.251.0.69:48095] [client 89.251.0.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aeYFxml10mhMSfJ7ir_GZQAAAIY"]
[Mon Apr 20 18:53:59.159044 2026] [:error] [pid 11351:tid 11388] [client 89.251.0.41:31541] [client 89.251.0.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aeYFxwN8Z1-vktaI_tPM0wAAAEE"]
[Mon Apr 20 18:54:00.045833 2026] [:error] [pid 11441:tid 11449] [client 89.251.0.47:64821] [client 89.251.0.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aeYFyMixByFUvmh319B_RQAAAMY"]
[Mon Apr 20 18:54:34.033298 2026] [autoindex:error] [pid 11350:tid 11370] [client 89.251.0.47:63631] AH01276: Cannot serve directory /home/dwelects/public_html/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 18:54:43.264715 2026] [autoindex:error] [pid 11350:tid 11377] [client 89.251.0.47:63631] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 21 00:51:52.682608 2026] [:error] [pid 11351:tid 11392] [client 202.124.204.254:40414] [client 202.124.204.254] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 202.124.204.254, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-login.php"] [unique_id "aeZZqAN8Z1-vktaI_tN8cwAAAEU"]
[Tue Apr 21 00:51:52.692390 2026] [proxy_fcgi:error] [pid 11351:tid 11392] [client 202.124.204.254:40414] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 00:51:53.006918 2026] [:error] [pid 11351:tid 11395] [client 202.124.204.254:40526] [client 202.124.204.254] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 202.124.204.254, incrementing ddos counter"] [hostname "dwelectservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aeZZqQN8Z1-vktaI_tN8dQAAAEg"]
[Tue Apr 21 00:51:53.012169 2026] [proxy_fcgi:error] [pid 11351:tid 11395] [client 202.124.204.254:40526] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 02:04:20.051595 2026] [proxy_fcgi:error] [pid 11441:tid 11450] [client 20.216.130.159:31093] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 02:04:20.297633 2026] [proxy_fcgi:error] [pid 11441:tid 11454] [client 20.216.130.159:31093] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 02:04:20.535982 2026] [proxy_fcgi:error] [pid 11441:tid 11456] [client 20.216.130.159:31093] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 02:04:20.795492 2026] [proxy_fcgi:error] [pid 11441:tid 11455] [client 20.216.130.159:31093] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 02:04:21.284434 2026] [proxy_fcgi:error] [pid 11441:tid 11461] [client 20.216.130.159:31093] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 02:04:21.524418 2026] [proxy_fcgi:error] [pid 11441:tid 11443] [client 20.216.130.159:31093] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 02:04:22.009525 2026] [proxy_fcgi:error] [pid 11441:tid 11449] [client 20.216.130.159:31093] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 02:04:22.251356 2026] [proxy_fcgi:error] [pid 11441:tid 11467] [client 20.216.130.159:31093] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 02:04:22.491349 2026] [proxy_fcgi:error] [pid 11441:tid 11460] [client 20.216.130.159:31093] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 02:04:22.727360 2026] [:error] [pid 11441:tid 11459] [client 20.216.130.159:31093] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/166.php"] [unique_id "aeZqpsixByFUvmh319DoQwAAANA"]
[Tue Apr 21 02:04:24.027788 2026] [:error] [pid 11351:tid 11391] [client 20.216.130.159:7624] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/166.php"] [unique_id "aeZqqAN8Z1-vktaI_tOpKwAAAEQ"]
[Tue Apr 21 02:04:26.576514 2026] [:error] [pid 42014:tid 42017] [client 20.216.130.159:31060] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/166.php"] [unique_id "aeZqqsek-00-ZI0f1Nq0CAAAAQE"]
[Tue Apr 21 02:04:27.436592 2026] [:error] [pid 6928:tid 6940] [client 20.216.130.159:7617] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/166.php"] [unique_id "aeZqqx3y7MHq1iB0qYrx4AAAAUo"]
[Tue Apr 21 02:04:28.145956 2026] [:error] [pid 11351:tid 11400] [client 20.216.130.159:13895] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/term.php"] [unique_id "aeZqrAN8Z1-vktaI_tOpMAAAAE0"]
[Tue Apr 21 02:04:29.051491 2026] [:error] [pid 11441:tid 11450] [client 20.216.130.159:9145] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/term.php"] [unique_id "aeZqrcixByFUvmh319DoSQAAAMc"]
[Tue Apr 21 02:04:29.707198 2026] [:error] [pid 11351:tid 11402] [client 20.216.130.159:10077] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/term.php"] [unique_id "aeZqrQN8Z1-vktaI_tOpMQAAAE8"]
[Tue Apr 21 02:04:30.739850 2026] [:error] [pid 11351:tid 11401] [client 20.216.130.159:31094] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/term.php"] [unique_id "aeZqrgN8Z1-vktaI_tOpMwAAAE4"]
[Tue Apr 21 02:04:31.737722 2026] [:error] [pid 11441:tid 11460] [client 20.216.130.159:31075] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/666.php"] [unique_id "aeZqr8ixByFUvmh319DoVAAAANE"]
[Tue Apr 21 02:04:32.760764 2026] [:error] [pid 11441:tid 11458] [client 20.216.130.159:10103] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/666.php"] [unique_id "aeZqsMixByFUvmh319DoVgAAAM8"]
[Tue Apr 21 02:04:33.333415 2026] [:error] [pid 11351:tid 11409] [client 20.216.130.159:4102] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/666.php"] [unique_id "aeZqsQN8Z1-vktaI_tOpPQAAAFY"]
[Tue Apr 21 02:04:34.232007 2026] [:error] [pid 11350:tid 11382] [client 20.216.130.159:41550] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/666.php"] [unique_id "aeZqsv4EoMBgOJuJnT00uAAAABc"]
[Tue Apr 21 02:04:34.865192 2026] [:error] [pid 11441:tid 11466] [client 20.216.130.159:41571] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/tt.php"] [unique_id "aeZqssixByFUvmh319DoWgAAANc"]
[Tue Apr 21 02:04:35.479924 2026] [:error] [pid 11494:tid 11514] [client 20.216.130.159:31056] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/tt.php"] [unique_id "aeZqs8gko5iFiE8YoyRDIwAAAZI"]
[Tue Apr 21 02:04:36.016533 2026] [:error] [pid 11494:tid 11513] [client 20.216.130.159:14192] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/tt.php"] [unique_id "aeZqtMgko5iFiE8YoyRDJwAAAZE"]
[Tue Apr 21 02:04:36.705389 2026] [:error] [pid 11351:tid 11394] [client 20.216.130.159:26930] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/tt.php"] [unique_id "aeZqtAN8Z1-vktaI_tOpSgAAAEc"]
[Tue Apr 21 02:04:37.605497 2026] [:error] [pid 11351:tid 11409] [client 20.216.130.159:10069] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/sid3.php"] [unique_id "aeZqtQN8Z1-vktaI_tOpTgAAAFY"]
[Tue Apr 21 02:04:38.747653 2026] [:error] [pid 11351:tid 11411] [client 20.216.130.159:7246] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/sid3.php"] [unique_id "aeZqtgN8Z1-vktaI_tOpUgAAAFg"]
[Tue Apr 21 02:04:39.872464 2026] [:error] [pid 11351:tid 11399] [client 20.216.130.159:12998] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/sid3.php"] [unique_id "aeZqtwN8Z1-vktaI_tOpVgAAAEw"]
[Tue Apr 21 02:04:40.850839 2026] [:error] [pid 11494:tid 11515] [client 20.216.130.159:22540] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/sid3.php"] [unique_id "aeZquMgko5iFiE8YoyRDKwAAAZM"]
[Tue Apr 21 02:04:42.702475 2026] [:error] [pid 11441:tid 11462] [client 20.216.130.159:19721] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/66.php"] [unique_id "aeZqusixByFUvmh319DoYAAAANM"]
[Tue Apr 21 02:04:44.119177 2026] [:error] [pid 42014:tid 42016] [client 20.216.130.159:13011] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/66.php"] [unique_id "aeZqvMek-00-ZI0f1Nq0GAAAAQA"]
[Tue Apr 21 02:04:45.485812 2026] [:error] [pid 11351:tid 11397] [client 20.216.130.159:7355] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/66.php"] [unique_id "aeZqvQN8Z1-vktaI_tOpawAAAEo"]
[Tue Apr 21 02:04:46.182517 2026] [:error] [pid 11351:tid 11393] [client 20.216.130.159:4232] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/66.php"] [unique_id "aeZqvgN8Z1-vktaI_tOpdgAAAEY"]
[Tue Apr 21 02:04:46.926195 2026] [:error] [pid 11351:tid 11388] [client 20.216.130.159:20491] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-the.php"] [unique_id "aeZqvgN8Z1-vktaI_tOpfwAAAEE"]
[Tue Apr 21 02:04:47.496167 2026] [:error] [pid 11351:tid 11398] [client 20.216.130.159:7301] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-the.php"] [unique_id "aeZqvwN8Z1-vktaI_tOpggAAAEs"]
[Tue Apr 21 02:04:48.307378 2026] [:error] [pid 11350:tid 11363] [client 20.216.130.159:22736] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-the.php"] [unique_id "aeZqwP4EoMBgOJuJnT009AAAAAQ"]
[Tue Apr 21 02:04:49.144783 2026] [:error] [pid 11494:tid 11514] [client 20.216.130.159:30292] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-the.php"] [unique_id "aeZqwcgko5iFiE8YoyRDQAAAAZI"]
[Tue Apr 21 02:04:50.084017 2026] [:error] [pid 11494:tid 11520] [client 20.216.130.159:20516] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/jga.php"] [unique_id "aeZqwsgko5iFiE8YoyRDSQAAAZg"]
[Tue Apr 21 02:04:50.809733 2026] [:error] [pid 6928:tid 6944] [client 20.216.130.159:1753] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/jga.php"] [unique_id "aeZqwh3y7MHq1iB0qYryFwAAAU4"]
[Tue Apr 21 02:04:51.575771 2026] [:error] [pid 11494:tid 11505] [client 20.216.130.159:30331] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/jga.php"] [unique_id "aeZqw8gko5iFiE8YoyRDYAAAAYk"]
[Tue Apr 21 02:04:52.175901 2026] [:error] [pid 11351:tid 11402] [client 20.216.130.159:30316] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/jga.php"] [unique_id "aeZqxAN8Z1-vktaI_tOplAAAAE8"]
[Tue Apr 21 02:04:52.699333 2026] [:error] [pid 11351:tid 11408] [client 20.216.130.159:25802] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-blog-header.php"] [unique_id "aeZqxAN8Z1-vktaI_tOpnAAAAFU"]
[Tue Apr 21 02:04:53.345013 2026] [:error] [pid 11350:tid 11369] [client 20.216.130.159:6439] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-blog-header.php"] [unique_id "aeZqxf4EoMBgOJuJnT00_gAAAAo"]
[Tue Apr 21 02:04:53.994376 2026] [:error] [pid 11351:tid 11387] [client 20.216.130.159:1734] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-blog-header.php"] [unique_id "aeZqxQN8Z1-vktaI_tOpqAAAAEA"]
[Tue Apr 21 02:04:54.899649 2026] [:error] [pid 11494:tid 11510] [client 20.216.130.159:9688] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-blog-header.php"] [unique_id "aeZqxsgko5iFiE8YoyRDiAAAAY4"]
[Tue Apr 21 02:04:55.481890 2026] [:error] [pid 11351:tid 11407] [client 20.216.130.159:8852] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bmi.php"] [unique_id "aeZqxwN8Z1-vktaI_tOptwAAAFQ"]
[Tue Apr 21 02:04:56.267302 2026] [:error] [pid 11441:tid 11461] [client 20.216.130.159:8849] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bmi.php"] [unique_id "aeZqyMixByFUvmh319DoeQAAANI"]
[Tue Apr 21 02:04:58.017810 2026] [:error] [pid 42014:tid 42039] [client 20.216.130.159:21866] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bmi.php"] [unique_id "aeZqysek-00-ZI0f1Nq0MwAAARc"]
[Tue Apr 21 02:04:59.958603 2026] [:error] [pid 11352:tid 11423] [client 20.216.130.159:25851] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bmi.php"] [unique_id "aeZqy2l10mhMSfJ7ir8HNwAAAIk"]
[Tue Apr 21 02:05:01.311209 2026] [:error] [pid 11350:tid 11376] [client 20.216.130.159:59294] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/byypas.php"] [unique_id "aeZqzf4EoMBgOJuJnT01BQAAABE"]
[Tue Apr 21 02:05:02.195143 2026] [:error] [pid 11352:tid 11422] [client 20.216.130.159:6412] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/byypas.php"] [unique_id "aeZqzml10mhMSfJ7ir8HPQAAAIg"]
[Tue Apr 21 02:05:02.778501 2026] [:error] [pid 11352:tid 11437] [client 20.216.130.159:8858] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/byypas.php"] [unique_id "aeZqzml10mhMSfJ7ir8HQAAAAJc"]
[Tue Apr 21 02:05:03.609499 2026] [:error] [pid 11441:tid 11465] [client 20.216.130.159:25847] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/byypas.php"] [unique_id "aeZqz8ixByFUvmh319DopgAAANY"]
[Tue Apr 21 02:05:04.880489 2026] [:error] [pid 11351:tid 11395] [client 20.216.130.159:29850] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/radio.php"] [unique_id "aeZq0AN8Z1-vktaI_tOp5AAAAEg"]
[Tue Apr 21 02:05:05.482365 2026] [:error] [pid 11351:tid 11407] [client 20.216.130.159:1609] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/radio.php"] [unique_id "aeZq0QN8Z1-vktaI_tOp7QAAAFQ"]
[Tue Apr 21 02:05:06.208517 2026] [:error] [pid 11494:tid 11508] [client 20.216.130.159:29846] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/radio.php"] [unique_id "aeZq0sgko5iFiE8YoyRDpgAAAYw"]
[Tue Apr 21 02:05:06.944658 2026] [:error] [pid 6928:tid 6952] [client 20.216.130.159:41475] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/radio.php"] [unique_id "aeZq0h3y7MHq1iB0qYryKwAAAVY"]
[Tue Apr 21 02:05:07.489525 2026] [:error] [pid 6928:tid 6938] [client 20.216.130.159:41492] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-png.php"] [unique_id "aeZq0x3y7MHq1iB0qYryMgAAAUg"]
[Tue Apr 21 02:05:08.096976 2026] [:error] [pid 42014:tid 42024] [client 20.216.130.159:29832] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-png.php"] [unique_id "aeZq1Mek-00-ZI0f1Nq0RgAAAQg"]
[Tue Apr 21 02:05:08.710884 2026] [:error] [pid 11351:tid 11397] [client 20.216.130.159:9698] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-png.php"] [unique_id "aeZq1AN8Z1-vktaI_tOp-wAAAEo"]
[Tue Apr 21 02:05:09.717042 2026] [:error] [pid 6928:tid 6936] [client 20.216.130.159:1662] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-png.php"] [unique_id "aeZq1R3y7MHq1iB0qYryPAAAAUY"]
[Tue Apr 21 02:05:10.905254 2026] [:error] [pid 11350:tid 11382] [client 20.216.130.159:29840] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wen.php"] [unique_id "aeZq1v4EoMBgOJuJnT01GAAAABc"]
[Tue Apr 21 02:05:11.784790 2026] [:error] [pid 11441:tid 11454] [client 20.216.130.159:22262] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wen.php"] [unique_id "aeZq18ixByFUvmh319DotQAAAMs"]
[Tue Apr 21 02:05:12.816077 2026] [:error] [pid 11494:tid 11501] [client 20.216.130.159:1653] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wen.php"] [unique_id "aeZq2Mgko5iFiE8YoyRDtwAAAYU"]
[Tue Apr 21 02:05:13.685048 2026] [:error] [pid 11351:tid 11401] [client 20.216.130.159:1653] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wen.php"] [unique_id "aeZq2QN8Z1-vktaI_tOqJgAAAE4"]
[Tue Apr 21 02:05:14.419648 2026] [:error] [pid 11351:tid 11391] [client 20.216.130.159:58850] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/plugin-install.php"] [unique_id "aeZq2gN8Z1-vktaI_tOqMwAAAEQ"]
[Tue Apr 21 02:05:15.003132 2026] [:error] [pid 11351:tid 11399] [client 20.216.130.159:13289] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/plugin-install.php"] [unique_id "aeZq2wN8Z1-vktaI_tOqQQAAAEw"]
[Tue Apr 21 02:05:15.637844 2026] [:error] [pid 11494:tid 11507] [client 20.216.130.159:27442] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/plugin-install.php"] [unique_id "aeZq28gko5iFiE8YoyRDxQAAAYs"]
[Tue Apr 21 02:05:16.198523 2026] [:error] [pid 42014:tid 42021] [client 20.216.130.159:7421] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/plugin-install.php"] [unique_id "aeZq3Mek-00-ZI0f1Nq0VAAAAQU"]
[Tue Apr 21 02:05:16.992432 2026] [:error] [pid 11441:tid 11443] [client 20.216.130.159:13655] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ioxi001.PhP7"] [unique_id "aeZq3MixByFUvmh319DowwAAAMA"]
[Tue Apr 21 02:05:18.242160 2026] [:error] [pid 11441:tid 11452] [client 20.216.130.159:12974] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ioxi001.PhP7"] [unique_id "aeZq3sixByFUvmh319DoxgAAAMk"]
[Tue Apr 21 02:05:18.873169 2026] [:error] [pid 11441:tid 11467] [client 20.216.130.159:22221] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ioxi001.PhP7"] [unique_id "aeZq3sixByFUvmh319DoyAAAANg"]
[Tue Apr 21 02:05:20.375032 2026] [:error] [pid 11494:tid 11515] [client 20.216.130.159:31607] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ioxi001.PhP7"] [unique_id "aeZq4Mgko5iFiE8YoyRD0gAAAZM"]
[Tue Apr 21 02:05:21.724835 2026] [:error] [pid 11494:tid 11517] [client 20.216.130.159:60794] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-kikikoko.php"] [unique_id "aeZq4cgko5iFiE8YoyRD1gAAAZU"]
[Tue Apr 21 02:05:22.564101 2026] [proxy_fcgi:error] [pid 11351:tid 11408] [client 20.216.130.159:21901] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 02:05:22.804140 2026] [proxy_fcgi:error] [pid 11351:tid 11397] [client 20.216.130.159:21901] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 02:05:23.049435 2026] [proxy_fcgi:error] [pid 11351:tid 11392] [client 20.216.130.159:21901] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 02:05:23.289642 2026] [proxy_fcgi:error] [pid 11351:tid 11401] [client 20.216.130.159:21901] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 02:05:25.061799 2026] [proxy_fcgi:error] [pid 11351:tid 11389] [client 20.216.130.159:21901] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 02:05:25.304380 2026] [proxy_fcgi:error] [pid 11351:tid 11409] [client 20.216.130.159:21901] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 02:05:25.544532 2026] [proxy_fcgi:error] [pid 11351:tid 11404] [client 20.216.130.159:21901] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 02:05:25.783167 2026] [proxy_fcgi:error] [pid 11351:tid 11393] [client 20.216.130.159:21901] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 02:05:26.028851 2026] [proxy_fcgi:error] [pid 11351:tid 11391] [client 20.216.130.159:21901] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 02:05:26.269065 2026] [proxy_fcgi:error] [pid 11351:tid 11396] [client 20.216.130.159:21901] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 02:05:26.505744 2026] [:error] [pid 11351:tid 11400] [client 20.216.130.159:21901] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws66.php"] [unique_id "aeZq5gN8Z1-vktaI_tOqogAAAE0"]
[Tue Apr 21 02:05:27.337518 2026] [:error] [pid 11350:tid 11372] [client 20.216.130.159:13860] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws66.php"] [unique_id "aeZq5_4EoMBgOJuJnT01SwAAAA0"]
[Tue Apr 21 02:05:27.944765 2026] [:error] [pid 11441:tid 11447] [client 20.216.130.159:9871] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws66.php"] [unique_id "aeZq58ixByFUvmh319Do3AAAAMQ"]
[Tue Apr 21 02:05:28.612790 2026] [:error] [pid 6928:tid 6952] [client 20.216.130.159:27436] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws66.php"] [unique_id "aeZq6B3y7MHq1iB0qYrycwAAAVY"]
[Tue Apr 21 02:05:29.202047 2026] [:error] [pid 11351:tid 11387] [client 20.216.130.159:31588] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/file61.php"] [unique_id "aeZq6QN8Z1-vktaI_tOqxgAAAEA"]
[Tue Apr 21 02:05:30.017994 2026] [:error] [pid 42014:tid 42019] [client 20.216.130.159:13279] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/file61.php"] [unique_id "aeZq6sek-00-ZI0f1Nq0dQAAAQM"]
[Tue Apr 21 02:05:30.788598 2026] [:error] [pid 11351:tid 11406] [client 20.216.130.159:16580] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/file61.php"] [unique_id "aeZq6gN8Z1-vktaI_tOq0AAAAFM"]
[Tue Apr 21 02:05:31.925572 2026] [:error] [pid 11350:tid 11377] [client 20.216.130.159:9608] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/file61.php"] [unique_id "aeZq6_4EoMBgOJuJnT01WwAAABI"]
[Tue Apr 21 02:05:33.117725 2026] [:error] [pid 11350:tid 11363] [client 20.216.130.159:13276] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/asd.php"] [unique_id "aeZq7f4EoMBgOJuJnT01ZAAAAAQ"]
[Tue Apr 21 02:05:33.723359 2026] [:error] [pid 11494:tid 11516] [client 20.216.130.159:9910] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/asd.php"] [unique_id "aeZq7cgko5iFiE8YoyRD3wAAAZQ"]
[Tue Apr 21 02:05:34.547300 2026] [:error] [pid 11352:tid 11418] [client 20.216.130.159:9886] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/asd.php"] [unique_id "aeZq7ml10mhMSfJ7ir8HiwAAAIQ"]
[Tue Apr 21 02:05:35.435501 2026] [:error] [pid 11350:tid 11369] [client 20.216.130.159:10286] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/asd.php"] [unique_id "aeZq7_4EoMBgOJuJnT01gQAAAAo"]
[Tue Apr 21 02:05:37.061631 2026] [:error] [pid 11352:tid 11422] [client 20.216.130.159:21894] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xx.php"] [unique_id "aeZq8Wl10mhMSfJ7ir8HjAAAAIg"]
[Tue Apr 21 02:05:38.778656 2026] [:error] [pid 11352:tid 11430] [client 20.216.130.159:21950] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xx.php"] [unique_id "aeZq8ml10mhMSfJ7ir8HpAAAAJA"]
[Tue Apr 21 02:05:40.119643 2026] [:error] [pid 11350:tid 11361] [client 20.216.130.159:11499] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xx.php"] [unique_id "aeZq9P4EoMBgOJuJnT01ogAAAAI"]
[Tue Apr 21 02:05:40.762868 2026] [:error] [pid 11494:tid 11514] [client 20.216.130.159:31562] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xx.php"] [unique_id "aeZq9Mgko5iFiE8YoyRD6QAAAZI"]
[Tue Apr 21 02:05:41.688250 2026] [:error] [pid 11494:tid 11509] [client 20.216.130.159:30217] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/a5.php"] [unique_id "aeZq9cgko5iFiE8YoyRD7AAAAY0"]
[Tue Apr 21 02:05:42.696072 2026] [:error] [pid 11494:tid 11503] [client 20.216.130.159:60762] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/a5.php"] [unique_id "aeZq9sgko5iFiE8YoyRD8gAAAYc"]
[Tue Apr 21 02:05:43.540978 2026] [:error] [pid 11351:tid 11400] [client 20.216.130.159:31573] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/a5.php"] [unique_id "aeZq9wN8Z1-vktaI_tOrFQAAAE0"]
[Tue Apr 21 02:05:45.462412 2026] [:error] [pid 11351:tid 11393] [client 20.216.130.159:9641] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/a5.php"] [unique_id "aeZq-QN8Z1-vktaI_tOrIwAAAEY"]
[Tue Apr 21 02:05:46.215601 2026] [:error] [pid 11441:tid 11461] [client 20.216.130.159:60741] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/cu.php"] [unique_id "aeZq-sixByFUvmh319DpEQAAANI"]
[Tue Apr 21 02:05:47.968978 2026] [:error] [pid 11350:tid 11359] [client 20.216.130.159:31565] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/cu.php"] [unique_id "aeZq-_4EoMBgOJuJnT010wAAAAA"]
[Tue Apr 21 02:05:50.039835 2026] [:error] [pid 11352:tid 11421] [client 20.216.130.159:21912] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/cu.php"] [unique_id "aeZq_ml10mhMSfJ7ir8HuwAAAIc"]
[Tue Apr 21 02:05:51.001406 2026] [:error] [pid 11350:tid 11365] [client 20.216.130.159:16616] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/cu.php"] [unique_id "aeZq__4EoMBgOJuJnT013AAAAAY"]
[Tue Apr 21 02:05:52.612024 2026] [:error] [pid 11350:tid 11372] [client 20.216.130.159:9632] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/amax.php"] [unique_id "aeZrAP4EoMBgOJuJnT015wAAAA0"]
[Tue Apr 21 02:05:54.029066 2026] [:error] [pid 6928:tid 6945] [client 20.216.130.159:1692] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/amax.php"] [unique_id "aeZrAh3y7MHq1iB0qYrymgAAAU8"]
[Tue Apr 21 02:05:55.888206 2026] [:error] [pid 6928:tid 6949] [client 20.216.130.159:1689] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/amax.php"] [unique_id "aeZrAx3y7MHq1iB0qYrypQAAAVM"]
[Tue Apr 21 02:05:57.758357 2026] [:error] [pid 11352:tid 11431] [client 20.216.130.159:22756] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/amax.php"] [unique_id "aeZrBWl10mhMSfJ7ir8HyQAAAJE"]
[Tue Apr 21 02:05:59.220947 2026] [:error] [pid 11494:tid 11497] [client 20.216.130.159:9906] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/mh.php"] [unique_id "aeZrB8gko5iFiE8YoyRECQAAAYE"]
[Tue Apr 21 02:06:00.128584 2026] [:error] [pid 11351:tid 11405] [client 20.216.130.159:10291] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/mh.php"] [unique_id "aeZrCAN8Z1-vktaI_tOrSgAAAFI"]
[Tue Apr 21 02:06:00.852467 2026] [:error] [pid 11441:tid 11454] [client 20.216.130.159:1685] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/mh.php"] [unique_id "aeZrCMixByFUvmh319DpLwAAAMs"]
[Tue Apr 21 02:06:02.234586 2026] [:error] [pid 11351:tid 11391] [client 20.216.130.159:4226] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/mh.php"] [unique_id "aeZrCgN8Z1-vktaI_tOrTwAAAEQ"]
[Tue Apr 21 02:06:04.388373 2026] [:error] [pid 11494:tid 11509] [client 20.216.130.159:22728] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/Jcrop.php"] [unique_id "aeZrDMgko5iFiE8YoyREFAAAAY0"]
[Tue Apr 21 02:06:06.242170 2026] [:error] [pid 11494:tid 11511] [client 20.216.130.159:26958] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/Jcrop.php"] [unique_id "aeZrDsgko5iFiE8YoyREGgAAAY8"]
[Tue Apr 21 02:06:07.771507 2026] [:error] [pid 11352:tid 11425] [client 20.216.130.159:9648] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/Jcrop.php"] [unique_id "aeZrD2l10mhMSfJ7ir8H2QAAAIs"]
[Tue Apr 21 02:06:09.505826 2026] [:error] [pid 11350:tid 11380] [client 20.216.130.159:8956] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/Jcrop.php"] [unique_id "aeZrEf4EoMBgOJuJnT02EAAAABU"]
[Tue Apr 21 02:06:10.767758 2026] [:error] [pid 42014:tid 42030] [client 20.216.130.159:8912] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/abc.php"] [unique_id "aeZrEsek-00-ZI0f1Nq0rQAAAQ4"]
[Tue Apr 21 02:06:12.298785 2026] [:error] [pid 6928:tid 6947] [client 20.216.130.159:30257] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/abc.php"] [unique_id "aeZrFB3y7MHq1iB0qYryuwAAAVE"]
[Tue Apr 21 02:06:13.516671 2026] [:error] [pid 11352:tid 11432] [client 20.216.130.159:9829] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/abc.php"] [unique_id "aeZrFWl10mhMSfJ7ir8H3wAAAJI"]
[Tue Apr 21 02:06:14.833148 2026] [:error] [pid 11352:tid 11419] [client 20.216.130.159:16611] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/abc.php"] [unique_id "aeZrFml10mhMSfJ7ir8H6wAAAIU"]
[Tue Apr 21 02:06:15.553071 2026] [:error] [pid 11494:tid 11511] [client 20.216.130.159:13036] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/inputs.php"] [unique_id "aeZrF8gko5iFiE8YoyREJwAAAY8"]
[Tue Apr 21 02:06:16.292808 2026] [:error] [pid 11350:tid 11377] [client 20.216.130.159:9824] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/inputs.php"] [unique_id "aeZrGP4EoMBgOJuJnT02EwAAABI"]
[Tue Apr 21 02:06:17.002901 2026] [:error] [pid 6928:tid 6945] [client 20.216.130.159:8933] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/inputs.php"] [unique_id "aeZrGR3y7MHq1iB0qYrywwAAAU8"]
[Tue Apr 21 02:06:17.669344 2026] [:error] [pid 11352:tid 11435] [client 20.216.130.159:1678] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/inputs.php"] [unique_id "aeZrGWl10mhMSfJ7ir8H8QAAAJU"]
[Tue Apr 21 02:06:18.381744 2026] [:error] [pid 11441:tid 11451] [client 20.216.130.159:30270] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bnm.php"] [unique_id "aeZrGsixByFUvmh319DpQgAAAMg"]
[Tue Apr 21 02:06:19.151609 2026] [:error] [pid 11350:tid 11360] [client 20.216.130.159:30260] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bnm.php"] [unique_id "aeZrG_4EoMBgOJuJnT02GQAAAAE"]
[Tue Apr 21 02:06:19.925113 2026] [:error] [pid 11494:tid 11517] [client 20.216.130.159:13004] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bnm.php"] [unique_id "aeZrG8gko5iFiE8YoyRELQAAAZU"]
[Tue Apr 21 02:06:20.855003 2026] [:error] [pid 11494:tid 11508] [client 20.216.130.159:22738] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bnm.php"] [unique_id "aeZrHMgko5iFiE8YoyREMgAAAYw"]
[Tue Apr 21 02:06:21.714079 2026] [:error] [pid 11350:tid 11375] [client 20.216.130.159:9834] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws80.php"] [unique_id "aeZrHf4EoMBgOJuJnT02HQAAABA"]
[Tue Apr 21 02:06:22.611121 2026] [:error] [pid 11350:tid 11382] [client 20.216.130.159:8947] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws80.php"] [unique_id "aeZrHv4EoMBgOJuJnT02HwAAABc"]
[Tue Apr 21 02:06:23.205708 2026] [:error] [pid 11350:tid 11381] [client 20.216.130.159:9849] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws80.php"] [unique_id "aeZrH_4EoMBgOJuJnT02IQAAABY"]
[Tue Apr 21 02:06:23.944227 2026] [:error] [pid 11351:tid 11393] [client 20.216.130.159:20420] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws80.php"] [unique_id "aeZrHwN8Z1-vktaI_tOrcAAAAEY"]
[Tue Apr 21 02:06:25.139559 2026] [:error] [pid 11351:tid 11403] [client 20.216.130.159:9049] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/network/users.php"] [unique_id "aeZrIQN8Z1-vktaI_tOrdAAAAFA"]
[Tue Apr 21 02:06:26.730711 2026] [proxy_fcgi:error] [pid 11352:tid 11418] [client 20.216.130.159:29937] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 02:06:26.970312 2026] [proxy_fcgi:error] [pid 11352:tid 11427] [client 20.216.130.159:29937] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 02:06:27.210183 2026] [proxy_fcgi:error] [pid 11352:tid 11429] [client 20.216.130.159:29937] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 02:06:27.480883 2026] [proxy_fcgi:error] [pid 11352:tid 11433] [client 20.216.130.159:29937] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 02:06:27.728843 2026] [proxy_fcgi:error] [pid 11352:tid 11425] [client 20.216.130.159:29937] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 02:06:27.971799 2026] [proxy_fcgi:error] [pid 11352:tid 11421] [client 20.216.130.159:29937] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 02:06:28.211687 2026] [proxy_fcgi:error] [pid 11352:tid 11423] [client 20.216.130.159:29937] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 02:06:28.449761 2026] [proxy_fcgi:error] [pid 11352:tid 11437] [client 20.216.130.159:29937] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 02:06:28.689012 2026] [proxy_fcgi:error] [pid 11352:tid 11436] [client 20.216.130.159:29937] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 02:06:28.935087 2026] [proxy_fcgi:error] [pid 11352:tid 11419] [client 20.216.130.159:29937] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 02:06:29.170675 2026] [:error] [pid 11352:tid 11430] [client 20.216.130.159:29937] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-links-opml.php"] [unique_id "aeZrJWl10mhMSfJ7ir8IBgAAAJA"]
[Tue Apr 21 02:06:30.045039 2026] [:error] [pid 11351:tid 11392] [client 20.216.130.159:9805] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-links-opml.php"] [unique_id "aeZrJgN8Z1-vktaI_tOrfgAAAEU"]
[Tue Apr 21 02:06:30.910942 2026] [:error] [pid 11441:tid 11467] [client 20.216.130.159:1163] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-links-opml.php"] [unique_id "aeZrJsixByFUvmh319DpTgAAANg"]
[Tue Apr 21 02:06:31.679511 2026] [:error] [pid 11441:tid 11451] [client 20.216.130.159:9796] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-links-opml.php"] [unique_id "aeZrJ8ixByFUvmh319DpUAAAAMg"]
[Tue Apr 21 02:06:32.348497 2026] [:error] [pid 6928:tid 6946] [client 20.216.130.159:9028] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/jk.php"] [unique_id "aeZrKB3y7MHq1iB0qYry0QAAAVA"]
[Tue Apr 21 02:06:33.112886 2026] [:error] [pid 11351:tid 11409] [client 20.216.130.159:16317] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/jk.php"] [unique_id "aeZrKQN8Z1-vktaI_tOrigAAAFY"]
[Tue Apr 21 02:06:33.768171 2026] [:error] [pid 11351:tid 11392] [client 20.216.130.159:58787] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/jk.php"] [unique_id "aeZrKQN8Z1-vktaI_tOrkQAAAEU"]
[Tue Apr 21 02:06:35.182964 2026] [:error] [pid 11351:tid 11405] [client 20.216.130.159:29946] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/jk.php"] [unique_id "aeZrKwN8Z1-vktaI_tOrmgAAAFI"]
[Tue Apr 21 02:06:36.469584 2026] [:error] [pid 6928:tid 6931] [client 20.216.130.159:1189] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/dx.php"] [unique_id "aeZrLB3y7MHq1iB0qYry1QAAAUE"]
[Tue Apr 21 02:06:37.162304 2026] [:error] [pid 42014:tid 42020] [client 20.216.130.159:20469] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/dx.php"] [unique_id "aeZrLcek-00-ZI0f1Nq0ygAAAQQ"]
[Tue Apr 21 02:06:38.089902 2026] [:error] [pid 11350:tid 11364] [client 20.216.130.159:4357] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/dx.php"] [unique_id "aeZrLv4EoMBgOJuJnT02bQAAAAU"]
[Tue Apr 21 02:06:39.841203 2026] [:error] [pid 11441:tid 11465] [client 20.216.130.159:10020] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/dx.php"] [unique_id "aeZrL8ixByFUvmh319DpVAAAANY"]
[Tue Apr 21 02:06:41.278828 2026] [:error] [pid 11351:tid 11408] [client 20.216.130.159:1815] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/aa.php"] [unique_id "aeZrMQN8Z1-vktaI_tOruAAAAFU"]
[Tue Apr 21 02:06:42.157164 2026] [:error] [pid 6928:tid 6935] [client 20.216.130.159:9995] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/aa.php"] [unique_id "aeZrMh3y7MHq1iB0qYry3gAAAUU"]
[Tue Apr 21 02:06:43.336086 2026] [:error] [pid 11351:tid 11393] [client 20.216.130.159:40977] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/aa.php"] [unique_id "aeZrMwN8Z1-vktaI_tOrwAAAAEY"]
[Tue Apr 21 02:06:44.683100 2026] [:error] [pid 11351:tid 11410] [client 20.216.130.159:19942] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/aa.php"] [unique_id "aeZrNAN8Z1-vktaI_tOrxgAAAFc"]
[Tue Apr 21 02:06:46.215829 2026] [:error] [pid 11441:tid 11448] [client 20.216.130.159:10028] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/mini.php"] [unique_id "aeZrNsixByFUvmh319DpYgAAAMU"]
[Tue Apr 21 02:06:46.934708 2026] [:error] [pid 11494:tid 11510] [client 20.216.130.159:11418] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/mini.php"] [unique_id "aeZrNsgko5iFiE8YoyREbQAAAY4"]
[Tue Apr 21 02:06:47.656909 2026] [:error] [pid 11350:tid 11380] [client 20.216.130.159:20358] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/mini.php"] [unique_id "aeZrN_4EoMBgOJuJnT02gAAAABU"]
[Tue Apr 21 02:06:48.574936 2026] [:error] [pid 11350:tid 11364] [client 20.216.130.159:41009] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/mini.php"] [unique_id "aeZrOP4EoMBgOJuJnT02iQAAAAU"]
[Tue Apr 21 02:06:49.593159 2026] [:error] [pid 11351:tid 11411] [client 20.216.130.159:19923] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/fs.php"] [unique_id "aeZrOQN8Z1-vktaI_tOr1AAAAFg"]
[Tue Apr 21 02:06:50.180133 2026] [:error] [pid 11441:tid 11447] [client 20.216.130.159:1986] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/fs.php"] [unique_id "aeZrOsixByFUvmh319DpaAAAAMQ"]
[Tue Apr 21 02:06:50.901333 2026] [:error] [pid 11350:tid 11372] [client 20.216.130.159:2018] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/fs.php"] [unique_id "aeZrOv4EoMBgOJuJnT02jAAAAA0"]
[Tue Apr 21 02:06:51.722762 2026] [:error] [pid 6928:tid 6936] [client 20.216.130.159:19958] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/fs.php"] [unique_id "aeZrOx3y7MHq1iB0qYry6QAAAUY"]
[Tue Apr 21 02:06:53.402213 2026] [:error] [pid 6928:tid 6939] [client 20.216.130.159:1824] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/mode.php"] [unique_id "aeZrPR3y7MHq1iB0qYry7AAAAUk"]
[Tue Apr 21 02:06:54.356212 2026] [:error] [pid 6928:tid 6941] [client 20.216.130.159:19917] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/mode.php"] [unique_id "aeZrPh3y7MHq1iB0qYry7gAAAUs"]
[Tue Apr 21 02:06:55.338486 2026] [:error] [pid 11494:tid 11512] [client 20.216.130.159:40967] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/mode.php"] [unique_id "aeZrP8gko5iFiE8YoyREdgAAAZA"]
[Tue Apr 21 02:06:55.940473 2026] [:error] [pid 11441:tid 11462] [client 20.216.130.159:26514] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/mode.php"] [unique_id "aeZrP8ixByFUvmh319DpaQAAANM"]
[Tue Apr 21 02:06:56.852084 2026] [:error] [pid 6928:tid 6950] [client 20.216.130.159:19928] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/1.php"] [unique_id "aeZrQB3y7MHq1iB0qYry8wAAAVQ"]
[Tue Apr 21 02:06:57.923951 2026] [:error] [pid 11350:tid 11373] [client 20.216.130.159:9997] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/1.php"] [unique_id "aeZrQf4EoMBgOJuJnT02xgAAAA4"]
[Tue Apr 21 02:06:58.641587 2026] [:error] [pid 11494:tid 11496] [client 20.216.130.159:10037] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/1.php"] [unique_id "aeZrQsgko5iFiE8YoyREfQAAAYA"]
[Tue Apr 21 02:06:59.683895 2026] [:error] [pid 11351:tid 11397] [client 20.216.130.159:4161] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/1.php"] [unique_id "aeZrQwN8Z1-vktaI_tOsDAAAAEo"]
[Tue Apr 21 02:07:01.622442 2026] [:error] [pid 11352:tid 11423] [client 20.216.130.159:9012] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-block.php"] [unique_id "aeZrRWl10mhMSfJ7ir8IDwAAAIk"]
[Tue Apr 21 02:07:02.965590 2026] [:error] [pid 11351:tid 11390] [client 20.216.130.159:13582] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-block.php"] [unique_id "aeZrRgN8Z1-vktaI_tOsIwAAAEM"]
[Tue Apr 21 02:07:04.195852 2026] [:error] [pid 11494:tid 11520] [client 20.216.130.159:9169] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-block.php"] [unique_id "aeZrSMgko5iFiE8YoyREigAAAZg"]
[Tue Apr 21 02:07:05.895498 2026] [:error] [pid 11350:tid 11372] [client 20.216.130.159:26529] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-block.php"] [unique_id "aeZrSf4EoMBgOJuJnT03HAAAAA0"]
[Tue Apr 21 02:07:08.255605 2026] [:error] [pid 11494:tid 11512] [client 20.216.130.159:31006] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws88.php"] [unique_id "aeZrTMgko5iFiE8YoyREkwAAAZA"]
[Tue Apr 21 02:07:09.680598 2026] [:error] [pid 11350:tid 11366] [client 20.216.130.159:31019] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws88.php"] [unique_id "aeZrTf4EoMBgOJuJnT03KQAAAAc"]
[Tue Apr 21 02:07:10.737846 2026] [:error] [pid 11441:tid 11458] [client 20.216.130.159:22522] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws88.php"] [unique_id "aeZrTsixByFUvmh319DpfgAAAM8"]
[Tue Apr 21 02:07:11.745133 2026] [:error] [pid 11441:tid 11465] [client 20.216.130.159:19423] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws88.php"] [unique_id "aeZrT8ixByFUvmh319DpfwAAANY"]
[Tue Apr 21 02:07:12.817900 2026] [:error] [pid 6928:tid 6949] [client 20.216.130.159:19497] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/adoms.php"] [unique_id "aeZrUB3y7MHq1iB0qYrzAAAAAVM"]
[Tue Apr 21 02:07:14.084484 2026] [:error] [pid 11352:tid 11426] [client 20.216.130.159:19430] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/adoms.php"] [unique_id "aeZrUml10mhMSfJ7ir8IHAAAAIw"]
[Tue Apr 21 02:07:14.979847 2026] [:error] [pid 11350:tid 11376] [client 20.216.130.159:26149] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/adoms.php"] [unique_id "aeZrUv4EoMBgOJuJnT03LgAAABE"]
[Tue Apr 21 02:07:16.219721 2026] [:error] [pid 11350:tid 11364] [client 20.216.130.159:12750] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/adoms.php"] [unique_id "aeZrVP4EoMBgOJuJnT03MQAAAAU"]
[Tue Apr 21 02:07:18.796861 2026] [:error] [pid 11350:tid 11359] [client 20.216.130.159:12708] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/plugin-editor.php"] [unique_id "aeZrVv4EoMBgOJuJnT03NAAAAAA"]
[Tue Apr 21 02:07:21.663570 2026] [:error] [pid 11351:tid 11405] [client 20.216.130.159:11258] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/plugin-editor.php"] [unique_id "aeZrWQN8Z1-vktaI_tOsTwAAAFI"]
[Tue Apr 21 02:07:23.378989 2026] [:error] [pid 11351:tid 11403] [client 20.216.130.159:12728] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/plugin-editor.php"] [unique_id "aeZrWwN8Z1-vktaI_tOsVgAAAFA"]
[Tue Apr 21 02:07:25.014992 2026] [:error] [pid 42014:tid 42032] [client 20.216.130.159:7603] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/plugin-editor.php"] [unique_id "aeZrXcek-00-ZI0f1Nq04wAAARA"]
[Tue Apr 21 02:07:26.616401 2026] [:error] [pid 11494:tid 11498] [client 20.216.130.159:41025] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/8573.php"] [unique_id "aeZrXsgko5iFiE8YoyRE0QAAAYI"]
[Tue Apr 21 02:07:28.433749 2026] [proxy_fcgi:error] [pid 11494:tid 11517] [client 20.216.130.159:7747] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 02:07:28.672553 2026] [proxy_fcgi:error] [pid 11494:tid 11516] [client 20.216.130.159:7747] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 02:07:28.917799 2026] [proxy_fcgi:error] [pid 11494:tid 11520] [client 20.216.130.159:7747] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 02:07:29.395343 2026] [proxy_fcgi:error] [pid 11494:tid 11504] [client 20.216.130.159:7747] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 02:07:29.638722 2026] [proxy_fcgi:error] [pid 11494:tid 11518] [client 20.216.130.159:7747] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 02:07:29.877515 2026] [proxy_fcgi:error] [pid 11494:tid 11514] [client 20.216.130.159:7747] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 02:07:30.130479 2026] [proxy_fcgi:error] [pid 11494:tid 11507] [client 20.216.130.159:7747] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 02:07:30.374336 2026] [proxy_fcgi:error] [pid 11494:tid 11506] [client 20.216.130.159:7747] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 02:07:30.614993 2026] [proxy_fcgi:error] [pid 11494:tid 11511] [client 20.216.130.159:7747] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 02:07:30.853387 2026] [proxy_fcgi:error] [pid 11494:tid 11501] [client 20.216.130.159:7747] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 02:07:31.917115 2026] [:error] [pid 11494:tid 11515] [client 20.216.130.159:7747] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/tool.php"] [unique_id "aeZrY8gko5iFiE8YoyRE6gAAAZM"]
[Tue Apr 21 02:07:33.023728 2026] [:error] [pid 11494:tid 11509] [client 20.216.130.159:7569] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/tool.php"] [unique_id "aeZrZcgko5iFiE8YoyRE7AAAAY0"]
[Tue Apr 21 02:07:34.118701 2026] [:error] [pid 11351:tid 11409] [client 20.216.130.159:1247] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/tool.php"] [unique_id "aeZrZgN8Z1-vktaI_tOsfgAAAFY"]
[Tue Apr 21 02:07:34.756664 2026] [:error] [pid 11351:tid 11394] [client 20.216.130.159:22262] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/tool.php"] [unique_id "aeZrZgN8Z1-vktaI_tOsgwAAAEc"]
[Tue Apr 21 02:07:35.459963 2026] [:error] [pid 11350:tid 11360] [client 20.216.130.159:12682] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bgymj.php"] [unique_id "aeZrZ_4EoMBgOJuJnT03UQAAAAE"]
[Tue Apr 21 02:07:37.516556 2026] [:error] [pid 11351:tid 11394] [client 20.216.130.159:12798] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bgymj.php"] [unique_id "aeZraQN8Z1-vktaI_tOskQAAAEc"]
[Tue Apr 21 02:07:39.273443 2026] [:error] [pid 42014:tid 42026] [client 20.216.130.159:5264] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bgymj.php"] [unique_id "aeZra8ek-00-ZI0f1Nq07AAAAQo"]
[Tue Apr 21 02:07:40.182031 2026] [:error] [pid 42014:tid 42020] [client 20.216.130.159:41024] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bgymj.php"] [unique_id "aeZrbMek-00-ZI0f1Nq07QAAAQQ"]
[Tue Apr 21 02:07:41.632613 2026] [:error] [pid 11350:tid 11368] [client 20.216.130.159:7596] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-good.php"] [unique_id "aeZrbf4EoMBgOJuJnT03VwAAAAk"]
[Tue Apr 21 02:07:42.674114 2026] [:error] [pid 42014:tid 42032] [client 20.216.130.159:26125] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-good.php"] [unique_id "aeZrbsek-00-ZI0f1Nq08QAAARA"]
[Tue Apr 21 02:07:43.794703 2026] [:error] [pid 42014:tid 42029] [client 20.216.130.159:10308] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-good.php"] [unique_id "aeZrb8ek-00-ZI0f1Nq08wAAAQ0"]
[Tue Apr 21 02:07:46.216153 2026] [:error] [pid 11352:tid 11415] [client 20.216.130.159:7782] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-good.php"] [unique_id "aeZrcml10mhMSfJ7ir8ILwAAAIE"]
[Tue Apr 21 02:07:48.117153 2026] [:error] [pid 42014:tid 42017] [client 20.216.130.159:12692] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/class-t.api.php"] [unique_id "aeZrdMek-00-ZI0f1Nq0_QAAAQE"]
[Tue Apr 21 02:07:51.148729 2026] [:error] [pid 11351:tid 11387] [client 20.216.130.159:26128] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/class-t.api.php"] [unique_id "aeZrdwN8Z1-vktaI_tOsrAAAAEA"]
[Tue Apr 21 02:07:51.670027 2026] [:error] [pid 11351:tid 11399] [client 20.216.130.159:1228] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/class-t.api.php"] [unique_id "aeZrdwN8Z1-vktaI_tOsrgAAAEw"]
[Tue Apr 21 02:07:52.982683 2026] [:error] [pid 11441:tid 11463] [client 20.216.130.159:41046] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/class-t.api.php"] [unique_id "aeZreMixByFUvmh319DpugAAANQ"]
[Tue Apr 21 02:07:54.035179 2026] [:error] [pid 42014:tid 42025] [client 20.216.130.159:9937] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/mk.php"] [unique_id "aeZresek-00-ZI0f1Nq1EAAAAQk"]
[Tue Apr 21 02:07:54.670155 2026] [:error] [pid 11494:tid 11499] [client 20.216.130.159:41047] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/mk.php"] [unique_id "aeZresgko5iFiE8YoyRFCAAAAYM"]
[Tue Apr 21 02:07:55.508787 2026] [:error] [pid 11351:tid 11409] [client 20.216.130.159:7478] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/mk.php"] [unique_id "aeZrewN8Z1-vktaI_tOstAAAAFY"]
[Tue Apr 21 02:07:57.295978 2026] [:error] [pid 11350:tid 11371] [client 20.216.130.159:1497] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/mk.php"] [unique_id "aeZrff4EoMBgOJuJnT03aQAAAAw"]
[Tue Apr 21 02:07:57.910813 2026] [:error] [pid 11350:tid 11361] [client 20.216.130.159:9929] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/gettest.php"] [unique_id "aeZrff4EoMBgOJuJnT03bgAAAAI"]
[Tue Apr 21 02:07:58.968851 2026] [:error] [pid 11494:tid 11497] [client 20.216.130.159:1503] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/gettest.php"] [unique_id "aeZrfsgko5iFiE8YoyRFEgAAAYE"]
[Tue Apr 21 02:07:59.810456 2026] [:error] [pid 11350:tid 11374] [client 20.216.130.159:41036] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/gettest.php"] [unique_id "aeZrf_4EoMBgOJuJnT03dgAAAA8"]
[Tue Apr 21 02:08:00.825315 2026] [:error] [pid 11441:tid 11458] [client 20.216.130.159:57768] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/gettest.php"] [unique_id "aeZrgMixByFUvmh319DpzgAAAM8"]
[Tue Apr 21 02:08:01.405160 2026] [:error] [pid 11352:tid 11428] [client 20.216.130.159:5270] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/a4.php"] [unique_id "aeZrgWl10mhMSfJ7ir8IOgAAAI4"]
[Tue Apr 21 02:08:02.903205 2026] [:error] [pid 11494:tid 11499] [client 20.216.130.159:1237] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/a4.php"] [unique_id "aeZrgsgko5iFiE8YoyRFFQAAAYM"]
[Tue Apr 21 02:08:04.483559 2026] [:error] [pid 6928:tid 6954] [client 20.216.130.159:7608] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/a4.php"] [unique_id "aeZrhB3y7MHq1iB0qYrzLQAAAVg"]
[Tue Apr 21 02:08:06.264928 2026] [:error] [pid 11494:tid 11501] [client 20.216.130.159:7467] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/a4.php"] [unique_id "aeZrhsgko5iFiE8YoyRFGwAAAYU"]
[Tue Apr 21 02:08:07.182330 2026] [:error] [pid 6928:tid 6943] [client 20.216.130.159:57775] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/retu11.PhP7"] [unique_id "aeZrhx3y7MHq1iB0qYrzLwAAAU0"]
[Tue Apr 21 02:08:08.242559 2026] [:error] [pid 11351:tid 11391] [client 20.216.130.159:5263] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/retu11.PhP7"] [unique_id "aeZriAN8Z1-vktaI_tOszAAAAEQ"]
[Tue Apr 21 02:08:11.017001 2026] [:error] [pid 11351:tid 11397] [client 20.216.130.159:9958] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/retu11.PhP7"] [unique_id "aeZriwN8Z1-vktaI_tOs1gAAAEo"]
[Tue Apr 21 02:08:12.912540 2026] [:error] [pid 11351:tid 11410] [client 20.216.130.159:12681] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/retu11.PhP7"] [unique_id "aeZrjAN8Z1-vktaI_tOs3AAAAFc"]
[Tue Apr 21 02:08:14.616643 2026] [:error] [pid 11350:tid 11378] [client 20.216.130.159:1265] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/rip.php"] [unique_id "aeZrjv4EoMBgOJuJnT03mAAAABM"]
[Tue Apr 21 02:08:16.028329 2026] [:error] [pid 42014:tid 42022] [client 20.216.130.159:7564] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/rip.php"] [unique_id "aeZrkMek-00-ZI0f1Nq1JQAAAQY"]
[Tue Apr 21 02:08:17.520194 2026] [:error] [pid 11350:tid 11362] [client 20.216.130.159:57780] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/rip.php"] [unique_id "aeZrkf4EoMBgOJuJnT03pQAAAAM"]
[Tue Apr 21 02:08:18.285877 2026] [:error] [pid 11441:tid 11447] [client 20.216.130.159:1537] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/rip.php"] [unique_id "aeZrksixByFUvmh319Dp1AAAAMQ"]
[Tue Apr 21 02:08:19.028739 2026] [:error] [pid 42014:tid 42026] [client 20.216.130.159:57736] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aeZrk8ek-00-ZI0f1Nq1JwAAAQo"]
[Tue Apr 21 02:08:20.355149 2026] [:error] [pid 11350:tid 11382] [client 20.216.130.159:41051] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aeZrlP4EoMBgOJuJnT03sAAAABc"]
[Tue Apr 21 02:08:22.001987 2026] [:error] [pid 11350:tid 11362] [client 20.216.130.159:26154] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aeZrlv4EoMBgOJuJnT03tAAAAAM"]
[Tue Apr 21 02:08:23.274484 2026] [:error] [pid 6928:tid 6946] [client 20.216.130.159:26145] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aeZrlx3y7MHq1iB0qYrzPwAAAVA"]
[Tue Apr 21 02:08:24.823312 2026] [:error] [pid 42014:tid 42016] [client 20.216.130.159:9955] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/zoo.php"] [unique_id "aeZrmMek-00-ZI0f1Nq1LQAAAQA"]
[Tue Apr 21 02:08:26.079822 2026] [:error] [pid 42014:tid 42039] [client 20.216.130.159:5256] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/zoo.php"] [unique_id "aeZrmsek-00-ZI0f1Nq1MAAAARc"]
[Tue Apr 21 02:08:27.752355 2026] [:error] [pid 11351:tid 11401] [client 20.216.130.159:7753] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/zoo.php"] [unique_id "aeZrmwN8Z1-vktaI_tOtHQAAAE4"]
[Tue Apr 21 02:08:29.048513 2026] [:error] [pid 11351:tid 11395] [client 20.216.130.159:12716] [client 20.216.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/zoo.php"] [unique_id "aeZrnQN8Z1-vktaI_tOtIAAAAEg"]
[Tue Apr 21 02:08:30.405911 2026] [proxy_fcgi:error] [pid 11441:tid 11456] [client 20.216.130.159:7608] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 02:08:30.649299 2026] [proxy_fcgi:error] [pid 11441:tid 11466] [client 20.216.130.159:7608] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 02:08:31.186874 2026] [proxy_fcgi:error] [pid 11441:tid 11463] [client 20.216.130.159:7608] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 02:08:31.427470 2026] [proxy_fcgi:error] [pid 11441:tid 11446] [client 20.216.130.159:7608] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 02:08:31.666447 2026] [proxy_fcgi:error] [pid 11441:tid 11465] [client 20.216.130.159:7608] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 02:08:31.921798 2026] [proxy_fcgi:error] [pid 11441:tid 11453] [client 20.216.130.159:7608] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 02:08:32.163310 2026] [proxy_fcgi:error] [pid 11441:tid 11447] [client 20.216.130.159:7608] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 02:08:32.412219 2026] [proxy_fcgi:error] [pid 11441:tid 11454] [client 20.216.130.159:7608] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 02:08:32.651466 2026] [proxy_fcgi:error] [pid 11441:tid 11458] [client 20.216.130.159:7608] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 02:08:32.890290 2026] [proxy_fcgi:error] [pid 11441:tid 11444] [client 20.216.130.159:7608] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 04:00:21.918017 2026] [:error] [pid 35415:tid 35437] [client 185.194.178.30:26093] [client 185.194.178.30] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.194.178.30, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-login.php"] [unique_id "aeaF1UiqDinI4_22zzjjoAAAAMo"]
[Tue Apr 21 04:00:21.950294 2026] [proxy_fcgi:error] [pid 35415:tid 35437] [client 185.194.178.30:26093] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 08:26:03.234188 2026] [proxy_fcgi:error] [pid 4822:tid 4840] [client 216.24.210.5:41237] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 08:26:03.493835 2026] [proxy_fcgi:error] [pid 4822:tid 4837] [client 216.24.210.5:41237] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 08:26:03.688922 2026] [proxy_fcgi:error] [pid 4822:tid 4844] [client 216.24.210.5:41237] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 08:26:03.890729 2026] [proxy_fcgi:error] [pid 4822:tid 4842] [client 216.24.210.5:41237] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 08:26:04.108308 2026] [proxy_fcgi:error] [pid 4822:tid 4845] [client 216.24.210.5:41237] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 08:26:04.303177 2026] [proxy_fcgi:error] [pid 4822:tid 4846] [client 216.24.210.5:41237] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 08:26:04.542307 2026] [proxy_fcgi:error] [pid 4822:tid 4838] [client 216.24.210.5:41237] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 08:26:04.705244 2026] [proxy_fcgi:error] [pid 4822:tid 4833] [client 216.24.210.5:41237] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 08:26:05.038334 2026] [proxy_fcgi:error] [pid 4822:tid 4849] [client 216.24.210.5:41237] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 08:26:05.202861 2026] [proxy_fcgi:error] [pid 4822:tid 4831] [client 216.24.210.5:41237] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 08:26:05.372832 2026] [proxy_fcgi:error] [pid 4822:tid 4847] [client 216.24.210.5:41237] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 08:26:05.539965 2026] [proxy_fcgi:error] [pid 4822:tid 4841] [client 216.24.210.5:41237] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 08:26:05.756706 2026] [proxy_fcgi:error] [pid 4822:tid 4832] [client 216.24.210.5:41237] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 08:26:05.939539 2026] [proxy_fcgi:error] [pid 4822:tid 4834] [client 216.24.210.5:41237] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 08:26:06.109849 2026] [proxy_fcgi:error] [pid 4822:tid 4839] [client 216.24.210.5:41237] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 08:26:06.284296 2026] [proxy_fcgi:error] [pid 4822:tid 4850] [client 216.24.210.5:41237] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 08:26:06.466939 2026] [proxy_fcgi:error] [pid 4822:tid 4826] [client 216.24.210.5:41237] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 08:26:06.634140 2026] [proxy_fcgi:error] [pid 4822:tid 4840] [client 216.24.210.5:41237] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 08:26:09.195492 2026] [:error] [pid 4822:tid 4832] [client 216.24.210.5:41237] [client 216.24.210.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aebEISAteFQFwS_23Jm32gAAAUY"]
[Tue Apr 21 08:26:10.168493 2026] [:error] [pid 4823:tid 4859] [client 173.239.218.18:41187] [client 173.239.218.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aebEIvc8mke3PfHqsxHPgQAAAYY"]
[Tue Apr 21 08:26:11.089457 2026] [proxy_fcgi:error] [pid 4823:tid 4853] [client 216.24.210.32:56577] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 08:26:11.626390 2026] [:error] [pid 4823:tid 4877] [client 216.24.210.32:56577] [client 216.24.210.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dwelectservices.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aebEI_c8mke3PfHqsxHPjAAAAZg"]
[Tue Apr 21 08:26:12.314307 2026] [proxy_fcgi:error] [pid 35415:tid 35429] [client 216.24.210.12:64537] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 08:26:12.475184 2026] [:error] [pid 35415:tid 35441] [client 216.24.210.12:64537] [client 216.24.210.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aebEJEiqDinI4_22zzgLOgAAAM4"]
[Tue Apr 21 08:26:13.049596 2026] [proxy_fcgi:error] [pid 4777:tid 4804] [client 173.239.218.21:52435] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 08:26:13.873196 2026] [:error] [pid 4777:tid 4808] [client 173.239.218.21:52435] [client 173.239.218.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aebEJaxXur6bykKyLZQqKwAAARQ"]
[Tue Apr 21 08:26:15.520698 2026] [:error] [pid 4823:tid 4853] [client 216.24.210.9:54277] [client 216.24.210.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aebEJ_c8mke3PfHqsxHPkwAAAYA"]
[Tue Apr 21 08:26:15.913622 2026] [:error] [pid 4823:tid 4872] [client 216.24.210.40:31127] [client 216.24.210.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aebEJ_c8mke3PfHqsxHPlAAAAZM"]
[Tue Apr 21 08:26:16.306022 2026] [:error] [pid 4822:tid 4843] [client 173.239.218.18:38525] [client 173.239.218.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aebEKCAteFQFwS_23Jm33QAAAVE"]
[Tue Apr 21 08:26:16.647677 2026] [:error] [pid 4823:tid 4859] [client 216.24.210.23:31025] [client 216.24.210.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aebEKPc8mke3PfHqsxHPlwAAAYY"]
[Tue Apr 21 08:26:16.988590 2026] [:error] [pid 4823:tid 4860] [client 216.24.210.36:47157] [client 216.24.210.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aebEKPc8mke3PfHqsxHPmAAAAYc"]
[Tue Apr 21 08:26:17.543002 2026] [:error] [pid 4823:tid 4872] [client 216.24.210.40:28275] [client 216.24.210.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aebEKfc8mke3PfHqsxHPnAAAAZM"]
[Tue Apr 21 08:26:17.944598 2026] [proxy_fcgi:error] [pid 35320:tid 35334] [client 216.24.210.6:55709] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 08:26:18.293671 2026] [:error] [pid 35320:tid 35354] [client 216.24.210.6:55709] [client 216.24.210.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dwelectservices.com.au"] [uri "/filemanager.php"] [unique_id "aebEKoJW6fdXWO6agMGmPQAAABg"]
[Tue Apr 21 08:26:19.049186 2026] [:error] [pid 5377:tid 5408] [client 216.24.210.26:32153] [client 216.24.210.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aebEK7BKychFlrHBdvs-WgAAAdY"]
[Tue Apr 21 08:26:19.575071 2026] [:error] [pid 4823:tid 4863] [client 173.239.218.19:54867] [client 173.239.218.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aebEK_c8mke3PfHqsxHPoAAAAYo"]
[Tue Apr 21 08:26:21.519989 2026] [proxy_fcgi:error] [pid 4823:tid 4855] [client 216.24.210.21:42987] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 08:26:21.679303 2026] [:error] [pid 4823:tid 4853] [client 216.24.210.21:42987] [client 216.24.210.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aebELfc8mke3PfHqsxHPpgAAAYA"]
[Tue Apr 21 08:26:22.060606 2026] [proxy_fcgi:error] [pid 4823:tid 4866] [client 216.24.210.66:32107] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 08:26:22.557116 2026] [proxy_fcgi:error] [pid 4823:tid 4859] [client 216.24.210.66:32107] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 08:26:23.063014 2026] [:error] [pid 4823:tid 4873] [client 216.24.210.66:32107] [client 216.24.210.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aebEL_c8mke3PfHqsxHPsgAAAZQ"]
[Tue Apr 21 08:26:23.445309 2026] [proxy_fcgi:error] [pid 4823:tid 4866] [client 216.24.210.40:30739] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 08:26:23.617596 2026] [:error] [pid 4823:tid 4856] [client 216.24.210.40:30739] [client 216.24.210.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aebEL_c8mke3PfHqsxHPtgAAAYM"]
[Tue Apr 21 08:26:23.994615 2026] [proxy_fcgi:error] [pid 4823:tid 4870] [client 216.24.210.24:59907] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 08:26:24.352998 2026] [:error] [pid 4823:tid 4864] [client 216.24.210.24:59907] [client 216.24.210.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "aebEMPc8mke3PfHqsxHPvAAAAYs"]
[Tue Apr 21 08:26:24.837472 2026] [:error] [pid 35321:tid 35389] [client 216.24.210.36:49927] [client 216.24.210.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aebEMDeHLhVUuu8cVXxY7QAAAEU"]
[Tue Apr 21 08:26:25.350708 2026] [proxy_fcgi:error] [pid 4823:tid 4875] [client 173.239.218.20:47533] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 08:26:25.574047 2026] [proxy_fcgi:error] [pid 4823:tid 4862] [client 173.239.218.20:47533] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 08:26:25.933603 2026] [:error] [pid 4823:tid 4877] [client 173.239.218.20:47533] [client 173.239.218.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aebEMfc8mke3PfHqsxHPxgAAAZg"]
[Tue Apr 21 08:26:26.524537 2026] [:error] [pid 5377:tid 5410] [client 216.24.210.41:39651] [client 216.24.210.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aebEMrBKychFlrHBdvs-YAAAAdg"]
[Tue Apr 21 08:26:27.138342 2026] [:error] [pid 4823:tid 4855] [client 216.24.210.23:38449] [client 216.24.210.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aebEM_c8mke3PfHqsxHPywAAAYI"]
[Tue Apr 21 08:26:27.475141 2026] [:error] [pid 4823:tid 4871] [client 216.24.210.34:29401] [client 216.24.210.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aebEM_c8mke3PfHqsxHPzAAAAZI"]
[Tue Apr 21 08:26:27.795936 2026] [:error] [pid 5377:tid 5397] [client 216.24.210.15:23149] [client 216.24.210.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aebEM7BKychFlrHBdvs-YwAAAcs"]
[Tue Apr 21 08:26:28.494060 2026] [proxy_fcgi:error] [pid 4777:tid 4792] [client 216.24.210.4:52827] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 08:26:28.662568 2026] [:error] [pid 4777:tid 4791] [client 216.24.210.4:52827] [client 216.24.210.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "aebENKxXur6bykKyLZQqLwAAAQM"]
[Tue Apr 21 08:26:29.001103 2026] [:error] [pid 4823:tid 4864] [client 216.24.210.25:29923] [client 216.24.210.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "aebENfc8mke3PfHqsxHP0wAAAYs"]
[Tue Apr 21 08:26:29.415582 2026] [:error] [pid 4823:tid 4866] [client 216.24.210.42:52499] [client 216.24.210.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aebENfc8mke3PfHqsxHP1QAAAY0"]
[Tue Apr 21 08:26:30.118506 2026] [proxy_fcgi:error] [pid 4822:tid 4830] [client 216.24.210.3:62413] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 08:26:30.488229 2026] [proxy_fcgi:error] [pid 4822:tid 4831] [client 216.24.210.3:62413] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 08:26:31.429622 2026] [:error] [pid 4822:tid 4834] [client 216.24.210.3:62413] [client 216.24.210.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/admin.php"] [unique_id "aebENyAteFQFwS_23Jm36AAAAUg"]
[Tue Apr 21 08:26:32.282930 2026] [:error] [pid 35321:tid 35407] [client 173.239.218.22:61401] [client 173.239.218.22] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.22, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aebEODeHLhVUuu8cVXxY8gAAAFc"]
[Tue Apr 21 08:26:32.490055 2026] [proxy_fcgi:error] [pid 35321:tid 35400] [client 173.239.218.22:61401] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 08:26:33.384943 2026] [proxy_fcgi:error] [pid 35321:tid 35390] [client 173.239.218.22:61401] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 08:26:33.549910 2026] [proxy_fcgi:error] [pid 35321:tid 35396] [client 173.239.218.22:61401] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 08:26:34.399991 2026] [:error] [pid 35321:tid 35406] [client 173.239.218.22:61401] [client 173.239.218.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aebEOjeHLhVUuu8cVXxY_gAAAFY"]
[Tue Apr 21 08:26:34.833012 2026] [proxy_fcgi:error] [pid 35322:tid 35358] [client 216.24.210.34:34433] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 08:26:36.078251 2026] [proxy_fcgi:error] [pid 35322:tid 35373] [client 216.24.210.34:34433] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 08:26:36.278066 2026] [:error] [pid 35322:tid 35377] [client 216.24.210.34:34433] [client 216.24.210.34] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.210.34, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aebEPKPoAfV40BTfVKyFZwAAAJQ"]
[Tue Apr 21 08:26:36.650748 2026] [:error] [pid 35322:tid 35378] [client 216.24.210.34:34433] [client 216.24.210.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/item.php"] [unique_id "aebEPKPoAfV40BTfVKyFaQAAAJU"]
[Tue Apr 21 08:26:39.098563 2026] [proxy_fcgi:error] [pid 5377:tid 5395] [client 216.24.210.18:24941] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 08:26:39.263794 2026] [proxy_fcgi:error] [pid 5377:tid 5387] [client 216.24.210.18:24941] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 08:26:39.606142 2026] [proxy_fcgi:error] [pid 5377:tid 5393] [client 216.24.210.18:24941] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 08:26:39.932334 2026] [:error] [pid 5377:tid 5405] [client 216.24.210.18:24941] [client 216.24.210.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aebEP7BKychFlrHBdvs-dAAAAdM"]
[Tue Apr 21 08:26:40.265987 2026] [proxy_fcgi:error] [pid 4777:tid 4793] [client 216.24.210.5:23377] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 08:26:40.797881 2026] [proxy_fcgi:error] [pid 4777:tid 4802] [client 216.24.210.5:23377] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 08:26:41.151959 2026] [proxy_fcgi:error] [pid 4777:tid 4811] [client 216.24.210.5:23377] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 08:26:41.476912 2026] [proxy_fcgi:error] [pid 4777:tid 4792] [client 216.24.210.5:23377] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 08:26:41.656445 2026] [:error] [pid 4777:tid 4791] [client 216.24.210.5:23377] [client 216.24.210.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aebEQaxXur6bykKyLZQqPQAAAQM"]
[Tue Apr 21 08:26:42.037964 2026] [proxy_fcgi:error] [pid 5377:tid 5401] [client 173.239.218.19:49669] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 08:26:42.207600 2026] [proxy_fcgi:error] [pid 5377:tid 5391] [client 173.239.218.19:49669] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 08:26:42.420022 2026] [:error] [pid 5377:tid 5387] [client 173.239.218.19:49669] [client 173.239.218.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aebEQrBKychFlrHBdvs-fwAAAcE"]
[Tue Apr 21 08:26:42.968428 2026] [proxy_fcgi:error] [pid 5377:tid 5389] [client 216.24.210.43:58507] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 08:26:43.313117 2026] [:error] [pid 5377:tid 5403] [client 216.24.210.43:58507] [client 216.24.210.43] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.210.43, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "aebEQ7BKychFlrHBdvs-hQAAAdE"]
[Tue Apr 21 08:26:43.494249 2026] [:error] [pid 5377:tid 5399] [client 216.24.210.43:58507] [client 216.24.210.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aebEQ7BKychFlrHBdvs-hgAAAc0"]
[Tue Apr 21 08:26:45.816257 2026] [proxy_fcgi:error] [pid 4823:tid 4867] [client 216.24.210.32:40077] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 08:26:46.931781 2026] [proxy_fcgi:error] [pid 4823:tid 4872] [client 216.24.210.32:40077] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 08:26:47.149108 2026] [:error] [pid 4823:tid 4864] [client 216.24.210.32:40077] [client 216.24.210.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aebER_c8mke3PfHqsxHQEQAAAYs"]
[Tue Apr 21 08:26:47.496861 2026] [proxy_fcgi:error] [pid 35322:tid 35376] [client 216.24.210.7:34691] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 08:26:48.032165 2026] [:error] [pid 35322:tid 35375] [client 216.24.210.7:34691] [client 216.24.210.7] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.210.7, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aebESKPoAfV40BTfVKyFbQAAAJI"]
[Tue Apr 21 08:26:48.206477 2026] [proxy_fcgi:error] [pid 35322:tid 35370] [client 216.24.210.7:34691] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 08:26:48.377291 2026] [proxy_fcgi:error] [pid 35322:tid 35362] [client 216.24.210.7:34691] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 08:26:48.553469 2026] [proxy_fcgi:error] [pid 35322:tid 35374] [client 216.24.210.7:34691] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 08:26:50.076405 2026] [:error] [pid 35322:tid 35364] [client 216.24.210.7:34691] [client 216.24.210.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aebESqPoAfV40BTfVKyFcQAAAIc"]
[Tue Apr 21 08:26:50.413647 2026] [proxy_fcgi:error] [pid 4777:tid 4801] [client 216.24.210.2:35867] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 08:26:50.598086 2026] [:error] [pid 4777:tid 4807] [client 216.24.210.2:35867] [client 216.24.210.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/infi.php"] [unique_id "aebESqxXur6bykKyLZQqQgAAARM"]
[Tue Apr 21 08:26:51.136573 2026] [proxy_fcgi:error] [pid 5377:tid 5386] [client 216.24.210.44:62013] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 08:26:51.298359 2026] [:error] [pid 5377:tid 5408] [client 216.24.210.44:62013] [client 216.24.210.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aebES7BKychFlrHBdvs-kAAAAdY"]
[Tue Apr 21 08:26:51.666740 2026] [proxy_fcgi:error] [pid 4777:tid 4808] [client 216.24.210.12:56417] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 08:26:52.041525 2026] [proxy_fcgi:error] [pid 4777:tid 4793] [client 216.24.210.12:56417] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 08:26:52.200132 2026] [:error] [pid 4777:tid 4800] [client 216.24.210.12:56417] [client 216.24.210.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "aebETKxXur6bykKyLZQqRwAAAQw"]
[Tue Apr 21 08:26:52.677552 2026] [:error] [pid 35415:tid 35447] [client 173.239.218.150:36241] [client 173.239.218.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "aebETEiqDinI4_22zzgLSQAAANQ"]
[Tue Apr 21 08:26:53.116506 2026] [proxy_fcgi:error] [pid 35320:tid 35352] [client 216.24.210.2:58763] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 08:26:53.295604 2026] [proxy_fcgi:error] [pid 35320:tid 35335] [client 216.24.210.2:58763] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 08:26:54.012341 2026] [:error] [pid 35320:tid 35336] [client 216.24.210.2:58763] [client 216.24.210.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aebEToJW6fdXWO6agMGmVwAAAAY"]
[Tue Apr 21 08:26:54.669161 2026] [:error] [pid 5377:tid 5407] [client 216.24.210.22:32431] [client 216.24.210.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "aebETrBKychFlrHBdvs-lQAAAdU"]
[Tue Apr 21 08:26:55.636610 2026] [:error] [pid 35322:tid 35366] [client 216.24.210.29:35287] [client 216.24.210.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/edit.php"] [unique_id "aebET6PoAfV40BTfVKyFdQAAAIk"]
[Tue Apr 21 08:26:56.049509 2026] [proxy_fcgi:error] [pid 35322:tid 35369] [client 216.24.210.21:26103] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 08:26:56.401859 2026] [proxy_fcgi:error] [pid 35322:tid 35363] [client 216.24.210.21:26103] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 08:26:56.561917 2026] [:error] [pid 35322:tid 35368] [client 216.24.210.21:26103] [client 216.24.210.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "aebEUKPoAfV40BTfVKyFeQAAAIs"]
[Tue Apr 21 08:26:56.905568 2026] [proxy_fcgi:error] [pid 35415:tid 35442] [client 216.24.210.44:26343] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 08:26:57.246023 2026] [:error] [pid 35415:tid 35445] [client 216.24.210.44:26343] [client 216.24.210.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/click.php"] [unique_id "aebEUUiqDinI4_22zzgLUAAAANI"]
[Tue Apr 21 08:26:58.144182 2026] [:error] [pid 35321:tid 35403] [client 216.24.210.23:27631] [client 216.24.210.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "aebEUjeHLhVUuu8cVXxZDAAAAFM"]
[Tue Apr 21 08:26:58.894173 2026] [proxy_fcgi:error] [pid 4822:tid 4832] [client 216.24.210.2:50585] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 08:26:59.422673 2026] [proxy_fcgi:error] [pid 4822:tid 4850] [client 216.24.210.2:50585] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 08:26:59.762603 2026] [proxy_fcgi:error] [pid 4822:tid 4828] [client 216.24.210.2:50585] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 08:26:59.923503 2026] [:error] [pid 4822:tid 4843] [client 216.24.210.2:50585] [client 216.24.210.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "aebEUyAteFQFwS_23Jm3-wAAAVE"]
[Tue Apr 21 08:27:00.280195 2026] [:error] [pid 35322:tid 35377] [client 216.24.210.23:20485] [client 216.24.210.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/xl2023.php"] [unique_id "aebEVKPoAfV40BTfVKyFfAAAAJQ"]
[Tue Apr 21 08:27:00.935841 2026] [:error] [pid 35321:tid 35407] [client 216.24.210.35:31713] [client 216.24.210.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/certificates/admin.php"] [unique_id "aebEVDeHLhVUuu8cVXxZDwAAAFc"]
[Tue Apr 21 08:27:01.316908 2026] [:error] [pid 5377:tid 5391] [client 216.24.210.11:61455] [client 216.24.210.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/media/dog.php"] [unique_id "aebEVbBKychFlrHBdvs-mQAAAcU"]
[Tue Apr 21 08:27:02.688061 2026] [proxy_fcgi:error] [pid 5377:tid 5397] [client 216.24.210.31:45985] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 08:27:02.862594 2026] [:error] [pid 5377:tid 5402] [client 216.24.210.31:45985] [client 216.24.210.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "aebEVrBKychFlrHBdvs-mwAAAdA"]
[Tue Apr 21 08:27:03.279396 2026] [:error] [pid 35415:tid 35428] [client 216.24.210.42:40045] [client 216.24.210.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aebEV0iqDinI4_22zzgLUwAAAME"]
[Tue Apr 21 08:27:03.602649 2026] [proxy_fcgi:error] [pid 35322:tid 35367] [client 216.24.210.36:42501] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 08:27:03.949087 2026] [:error] [pid 35322:tid 35362] [client 216.24.210.36:42501] [client 216.24.210.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aebEV6PoAfV40BTfVKyFgAAAAIU"]
[Tue Apr 21 08:27:04.283978 2026] [:error] [pid 4822:tid 4838] [client 216.24.210.43:56511] [client 216.24.210.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aebEWCAteFQFwS_23Jm3_gAAAUw"]
[Tue Apr 21 08:27:04.620105 2026] [:error] [pid 35415:tid 35434] [client 216.24.210.5:33053] [client 216.24.210.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/pomo/admin.php"] [unique_id "aebEWEiqDinI4_22zzgLVgAAAMc"]
[Tue Apr 21 08:27:04.947164 2026] [:error] [pid 5377:tid 5406] [client 216.24.210.25:58765] [client 216.24.210.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/IXR/security.php"] [unique_id "aebEWLBKychFlrHBdvs-nwAAAdQ"]
[Tue Apr 21 08:27:05.458552 2026] [:error] [pid 4822:tid 4849] [client 216.24.210.42:55263] [client 216.24.210.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aebEWSAteFQFwS_23Jm4AAAAAVc"]
[Tue Apr 21 08:27:06.123203 2026] [:error] [pid 4777:tid 4790] [client 216.24.210.30:23359] [client 216.24.210.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/fonts/about.php"] [unique_id "aebEWqxXur6bykKyLZQqTgAAAQI"]
[Tue Apr 21 08:27:06.549696 2026] [proxy_fcgi:error] [pid 4823:tid 4859] [client 216.24.210.4:24693] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 08:27:07.093787 2026] [proxy_fcgi:error] [pid 4823:tid 4858] [client 216.24.210.4:24693] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 08:27:07.296311 2026] [:error] [pid 4823:tid 4861] [client 216.24.210.4:24693] [client 216.24.210.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "aebEW_c8mke3PfHqsxHQIwAAAYg"]
[Tue Apr 21 08:27:07.893029 2026] [proxy_fcgi:error] [pid 35321:tid 35393] [client 216.24.210.21:58151] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 08:27:08.067430 2026] [proxy_fcgi:error] [pid 35321:tid 35403] [client 216.24.210.21:58151] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 08:27:08.976152 2026] [:error] [pid 35321:tid 35392] [client 216.24.210.21:58151] [client 216.24.210.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/file.php"] [unique_id "aebEXDeHLhVUuu8cVXxZGgAAAEg"]
[Tue Apr 21 08:27:09.796052 2026] [:error] [pid 4777:tid 4802] [client 216.24.210.45:42881] [client 216.24.210.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "aebEXaxXur6bykKyLZQqUwAAAQ4"]
[Tue Apr 21 08:27:10.119051 2026] [:error] [pid 5377:tid 5398] [client 216.24.210.35:38237] [client 216.24.210.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "aebEXrBKychFlrHBdvs-oQAAAcw"]
[Tue Apr 21 08:27:11.201318 2026] [:error] [pid 4823:tid 4874] [client 216.24.210.3:34343] [client 216.24.210.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aebEX_c8mke3PfHqsxHQLQAAAZU"]
[Tue Apr 21 08:27:11.939695 2026] [proxy_fcgi:error] [pid 4823:tid 4863] [client 216.24.210.19:41789] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 08:27:12.111274 2026] [proxy_fcgi:error] [pid 4823:tid 4871] [client 216.24.210.19:41789] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 08:27:12.283018 2026] [proxy_fcgi:error] [pid 4823:tid 4868] [client 216.24.210.19:41789] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 08:27:12.479550 2026] [proxy_fcgi:error] [pid 4823:tid 4855] [client 216.24.210.19:41789] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 08:27:13.351776 2026] [:error] [pid 4823:tid 4854] [client 216.24.210.19:41789] [client 216.24.210.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aebEYfc8mke3PfHqsxHQPgAAAYE"]
[Tue Apr 21 08:27:13.681223 2026] [:error] [pid 4823:tid 4871] [client 216.24.210.32:47765] [client 216.24.210.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "aebEYfc8mke3PfHqsxHQQAAAAZI"]
[Tue Apr 21 08:27:14.053072 2026] [:error] [pid 35321:tid 35391] [client 173.239.218.17:54799] [client 173.239.218.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "aebEYjeHLhVUuu8cVXxZHQAAAEc"]
[Tue Apr 21 08:27:14.381212 2026] [:error] [pid 35415:tid 35444] [client 216.24.210.2:59851] [client 216.24.210.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "aebEYkiqDinI4_22zzgLWQAAANE"]
[Tue Apr 21 08:27:14.709485 2026] [:error] [pid 4823:tid 4864] [client 216.24.210.29:27931] [client 216.24.210.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aebEYvc8mke3PfHqsxHQQgAAAYs"]
[Tue Apr 21 08:27:15.031850 2026] [:error] [pid 4823:tid 4865] [client 216.24.210.39:57693] [client 216.24.210.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aebEY_c8mke3PfHqsxHQQwAAAYw"]
[Tue Apr 21 08:27:15.533646 2026] [:error] [pid 4823:tid 4877] [client 216.24.210.5:55533] [client 216.24.210.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/media/index.php"] [unique_id "aebEY_c8mke3PfHqsxHQRQAAAZg"]
[Tue Apr 21 08:27:15.861140 2026] [:error] [pid 4823:tid 4854] [client 216.24.210.43:59527] [client 216.24.210.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "aebEY_c8mke3PfHqsxHQRwAAAYE"]
[Tue Apr 21 08:27:16.186633 2026] [:error] [pid 4823:tid 4874] [client 216.24.210.38:65251] [client 216.24.210.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "aebEZPc8mke3PfHqsxHQSgAAAZU"]
[Tue Apr 21 08:27:16.514026 2026] [:error] [pid 4823:tid 4868] [client 216.24.210.32:65125] [client 216.24.210.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "aebEZPc8mke3PfHqsxHQTAAAAY8"]
[Tue Apr 21 08:27:17.209939 2026] [:error] [pid 4823:tid 4862] [client 216.24.210.23:34503] [client 216.24.210.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/fonts/themes.php"] [unique_id "aebEZfc8mke3PfHqsxHQUAAAAYk"]
[Tue Apr 21 08:27:17.705133 2026] [:error] [pid 4823:tid 4870] [client 216.24.210.26:43405] [client 216.24.210.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/certificates/index.php"] [unique_id "aebEZfc8mke3PfHqsxHQVAAAAZE"]
[Tue Apr 21 08:27:18.053718 2026] [proxy_fcgi:error] [pid 4823:tid 4873] [client 216.24.210.26:49883] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 08:27:18.403038 2026] [:error] [pid 4823:tid 4856] [client 216.24.210.26:49883] [client 216.24.210.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "aebEZvc8mke3PfHqsxHQWgAAAYM"]
[Tue Apr 21 08:27:19.071453 2026] [:error] [pid 35415:tid 35434] [client 216.24.210.43:31279] [client 216.24.210.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "aebEZ0iqDinI4_22zzgLXgAAAMc"]
[Tue Apr 21 08:27:19.738703 2026] [proxy_fcgi:error] [pid 5377:tid 5393] [client 216.24.210.22:52773] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 08:27:19.986445 2026] [:error] [pid 5377:tid 5405] [client 216.24.210.22:52773] [client 216.24.210.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aebEZ7BKychFlrHBdvs-qAAAAdM"]
[Tue Apr 21 08:27:20.551023 2026] [proxy_fcgi:error] [pid 4823:tid 4875] [client 216.24.210.30:28091] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 08:27:20.755583 2026] [proxy_fcgi:error] [pid 4823:tid 4857] [client 216.24.210.30:28091] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 08:27:20.935357 2026] [proxy_fcgi:error] [pid 4823:tid 4861] [client 216.24.210.30:28091] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 08:27:21.147729 2026] [:error] [pid 4823:tid 4865] [client 216.24.210.30:28091] [client 216.24.210.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "aebEafc8mke3PfHqsxHQcQAAAYw"]
[Tue Apr 21 08:27:21.524510 2026] [proxy_fcgi:error] [pid 4823:tid 4872] [client 216.24.210.31:28203] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 08:27:21.684308 2026] [:error] [pid 4823:tid 4866] [client 216.24.210.31:28203] [client 216.24.210.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "aebEafc8mke3PfHqsxHQdAAAAY0"]
[Tue Apr 21 08:27:22.352649 2026] [proxy_fcgi:error] [pid 4822:tid 4846] [client 216.24.210.29:32355] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 08:27:22.516805 2026] [proxy_fcgi:error] [pid 4822:tid 4845] [client 216.24.210.29:32355] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 08:27:22.686807 2026] [proxy_fcgi:error] [pid 4822:tid 4838] [client 216.24.210.29:32355] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 08:27:23.668756 2026] [proxy_fcgi:error] [pid 4822:tid 4832] [client 216.24.210.29:32355] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 08:27:23.889815 2026] [proxy_fcgi:error] [pid 4822:tid 4839] [client 216.24.210.29:32355] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 08:27:24.271823 2026] [proxy_fcgi:error] [pid 4822:tid 4840] [client 216.24.210.29:32355] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 08:27:24.844172 2026] [proxy_fcgi:error] [pid 4822:tid 4827] [client 216.24.210.29:32355] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 08:27:25.021284 2026] [:error] [pid 4822:tid 4828] [client 216.24.210.29:32355] [client 216.24.210.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "aebEbSAteFQFwS_23Jm4GgAAAUI"]
[Tue Apr 21 08:27:26.438869 2026] [:error] [pid 35322:tid 35369] [client 216.24.210.14:55501] [client 216.24.210.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aebEbqPoAfV40BTfVKyFkwAAAIw"]
[Tue Apr 21 08:27:26.764033 2026] [proxy_fcgi:error] [pid 4823:tid 4860] [client 216.24.210.35:61813] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 08:27:26.934898 2026] [:error] [pid 4823:tid 4873] [client 216.24.210.35:61813] [client 216.24.210.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "aebEbvc8mke3PfHqsxHQjwAAAZQ"]
[Tue Apr 21 08:27:27.498822 2026] [proxy_fcgi:error] [pid 35321:tid 35395] [client 216.24.210.4:37025] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 08:27:27.660136 2026] [:error] [pid 35321:tid 35388] [client 216.24.210.4:37025] [client 216.24.210.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aebEbzeHLhVUuu8cVXxZMgAAAEQ"]
[Tue Apr 21 08:27:28.030212 2026] [:error] [pid 4823:tid 4877] [client 216.24.210.67:55271] [client 216.24.210.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aebEcPc8mke3PfHqsxHQkgAAAZg"]
[Tue Apr 21 08:27:29.053279 2026] [:error] [pid 4823:tid 4875] [client 216.24.210.8:50213] [client 216.24.210.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aebEcfc8mke3PfHqsxHQmgAAAZY"]
[Tue Apr 21 08:27:29.396722 2026] [:error] [pid 4823:tid 4858] [client 216.24.210.35:60779] [client 216.24.210.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dwelectservices.com.au"] [uri "/fm.php"] [unique_id "aebEcfc8mke3PfHqsxHQmwAAAYU"]
[Tue Apr 21 08:27:30.303355 2026] [proxy_fcgi:error] [pid 4823:tid 4871] [client 216.24.210.8:36625] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 08:27:30.775537 2026] [:error] [pid 4823:tid 4853] [client 216.24.210.8:36625] [client 216.24.210.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "aebEcvc8mke3PfHqsxHQpgAAAYA"]
[Tue Apr 21 08:27:32.885747 2026] [proxy_fcgi:error] [pid 35321:tid 35398] [client 216.24.210.15:22039] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 08:27:33.259417 2026] [:error] [pid 35321:tid 35399] [client 216.24.210.15:22039] [client 216.24.210.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/function.php"] [unique_id "aebEdTeHLhVUuu8cVXxZNgAAAE8"]
[Tue Apr 21 08:27:33.586520 2026] [:error] [pid 4823:tid 4863] [client 216.24.210.43:56943] [client 216.24.210.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/plugins.php"] [unique_id "aebEdfc8mke3PfHqsxHQsgAAAYo"]
[Tue Apr 21 08:27:34.092224 2026] [proxy_fcgi:error] [pid 35415:tid 35436] [client 216.24.210.7:57581] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 08:27:34.255101 2026] [:error] [pid 35415:tid 35428] [client 216.24.210.7:57581] [client 216.24.210.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/chosen.php"] [unique_id "aebEdkiqDinI4_22zzgLbgAAAME"]
[Tue Apr 21 08:27:34.577367 2026] [:error] [pid 4822:tid 4843] [client 216.24.210.4:50441] [client 216.24.210.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "aebEdiAteFQFwS_23Jm4HwAAAVE"]
[Tue Apr 21 08:27:35.478455 2026] [proxy_fcgi:error] [pid 35415:tid 35433] [client 216.24.210.9:24415] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 08:27:35.650193 2026] [proxy_fcgi:error] [pid 35415:tid 35429] [client 216.24.210.9:24415] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 08:27:36.033357 2026] [proxy_fcgi:error] [pid 35415:tid 35431] [client 216.24.210.9:24415] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 08:27:36.361768 2026] [:error] [pid 35415:tid 35445] [client 216.24.210.9:24415] [client 216.24.210.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/atomlib.php"] [unique_id "aebEeEiqDinI4_22zzgLeAAAANI"]
[Tue Apr 21 08:27:36.711963 2026] [:error] [pid 5377:tid 5393] [client 216.24.210.42:37395] [client 216.24.210.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/rest-api/index.php"] [unique_id "aebEeLBKychFlrHBdvs-2QAAAcc"]
[Tue Apr 21 08:27:37.655599 2026] [proxy_fcgi:error] [pid 5377:tid 5395] [client 216.24.210.20:57071] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 08:27:37.812315 2026] [:error] [pid 5377:tid 5402] [client 216.24.210.20:57071] [client 216.24.210.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/index.php"] [unique_id "aebEebBKychFlrHBdvs-3wAAAdA"]
[Tue Apr 21 08:27:38.155735 2026] [:error] [pid 35321:tid 35386] [client 216.24.210.44:26475] [client 216.24.210.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aebEejeHLhVUuu8cVXxZOAAAAEI"]
[Tue Apr 21 08:27:38.511759 2026] [:error] [pid 4823:tid 4853] [client 216.24.210.39:49379] [client 216.24.210.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aebEevc8mke3PfHqsxHQugAAAYA"]
[Tue Apr 21 08:27:39.540077 2026] [proxy_fcgi:error] [pid 4823:tid 4876] [client 216.24.210.19:57611] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 08:27:39.732245 2026] [:error] [pid 4823:tid 4869] [client 216.24.210.19:57611] [client 216.24.210.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/Exception-wp.php"] [unique_id "aebEe_c8mke3PfHqsxHQwwAAAZA"]
[Tue Apr 21 08:27:40.268184 2026] [:error] [pid 35320:tid 35335] [client 216.24.210.15:29491] [client 216.24.210.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aebEfIJW6fdXWO6agMGmfwAAAAU"]
[Tue Apr 21 08:27:40.629325 2026] [proxy_fcgi:error] [pid 4822:tid 4835] [client 216.24.210.35:62553] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 08:27:40.801067 2026] [proxy_fcgi:error] [pid 4822:tid 4846] [client 216.24.210.35:62553] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 08:27:41.154135 2026] [proxy_fcgi:error] [pid 4822:tid 4830] [client 216.24.210.35:62553] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 08:27:41.868436 2026] [:error] [pid 4822:tid 4832] [client 216.24.210.35:62553] [client 216.24.210.35] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.210.35, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/js/wp-login.php"] [unique_id "aebEfSAteFQFwS_23Jm4LAAAAUY"]
[Tue Apr 21 08:27:42.252908 2026] [:error] [pid 4822:tid 4840] [client 216.24.210.35:62553] File does not exist: /home/dwelects/public_html/worm.PhP
[Tue Apr 21 08:27:42.417154 2026] [proxy_fcgi:error] [pid 4822:tid 4843] [client 216.24.210.35:62553] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 08:27:42.585615 2026] [proxy_fcgi:error] [pid 4822:tid 4827] [client 216.24.210.35:62553] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 08:27:42.957857 2026] [:error] [pid 4822:tid 4834] [client 216.24.210.35:62553] [client 216.24.210.35] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.210.35, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "aebEfiAteFQFwS_23Jm4MgAAAUg"]
[Tue Apr 21 08:27:43.484734 2026] [proxy_fcgi:error] [pid 4822:tid 4846] [client 216.24.210.35:62553] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 08:27:43.739804 2026] [proxy_fcgi:error] [pid 4822:tid 4829] [client 216.24.210.35:62553] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 08:27:44.103618 2026] [proxy_fcgi:error] [pid 4822:tid 4836] [client 216.24.210.35:62553] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 08:27:44.860779 2026] [proxy_fcgi:error] [pid 4822:tid 4833] [client 216.24.210.35:62553] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 08:27:45.405112 2026] [proxy_fcgi:error] [pid 4822:tid 4849] [client 216.24.210.35:62553] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 08:27:46.621174 2026] [proxy_fcgi:error] [pid 4822:tid 4843] [client 216.24.210.35:62553] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 08:27:46.865306 2026] [proxy_fcgi:error] [pid 4822:tid 4827] [client 216.24.210.35:62553] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 08:27:47.758494 2026] [proxy_fcgi:error] [pid 4822:tid 4829] [client 216.24.210.35:62553] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 08:27:48.132794 2026] [:error] [pid 4822:tid 4838] [client 216.24.210.35:62553] [client 216.24.210.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "aebEhCAteFQFwS_23Jm4TQAAAUw"]
[Tue Apr 21 08:27:48.882499 2026] [proxy_fcgi:error] [pid 4777:tid 4798] [client 216.24.210.36:34151] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 08:27:49.043420 2026] [:error] [pid 4777:tid 4809] [client 216.24.210.36:34151] [client 216.24.210.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aebEhaxXur6bykKyLZQqfwAAARU"]
[Tue Apr 21 08:27:49.370856 2026] [proxy_fcgi:error] [pid 4777:tid 4794] [client 216.24.210.66:37257] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 08:27:49.533012 2026] [proxy_fcgi:error] [pid 4777:tid 4810] [client 216.24.210.66:37257] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 08:27:49.767620 2026] [:error] [pid 4777:tid 4807] [client 216.24.210.66:37257] [client 216.24.210.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/atomlib.php"] [unique_id "aebEhaxXur6bykKyLZQqgwAAARM"]
[Tue Apr 21 08:27:50.440142 2026] [proxy_fcgi:error] [pid 4823:tid 4858] [client 216.24.210.35:51267] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 08:27:50.804376 2026] [proxy_fcgi:error] [pid 4823:tid 4869] [client 216.24.210.35:51267] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 08:27:51.200296 2026] [proxy_fcgi:error] [pid 4823:tid 4856] [client 216.24.210.35:51267] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 08:27:51.393271 2026] [proxy_fcgi:error] [pid 4823:tid 4853] [client 216.24.210.35:51267] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 08:27:51.719718 2026] [:error] [pid 4823:tid 4868] [client 216.24.210.35:51267] [client 216.24.210.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aebEh_c8mke3PfHqsxHQ6gAAAY8"]
[Tue Apr 21 08:27:52.055270 2026] [proxy_fcgi:error] [pid 5377:tid 5387] [client 216.24.210.34:61249] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 08:27:52.230337 2026] [proxy_fcgi:error] [pid 5377:tid 5390] [client 216.24.210.34:61249] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 08:27:52.391043 2026] [:error] [pid 5377:tid 5402] [client 216.24.210.34:61249] [client 216.24.210.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aebEiLBKychFlrHBdvs-5wAAAdA"]
[Tue Apr 21 08:27:53.958673 2026] [:error] [pid 35320:tid 35335] [client 216.24.210.23:61955] [client 216.24.210.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aebEiYJW6fdXWO6agMGmkwAAAAU"]
[Tue Apr 21 08:27:54.462903 2026] [proxy_fcgi:error] [pid 4822:tid 4847] [client 173.239.218.22:24381] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 08:27:54.985139 2026] [proxy_fcgi:error] [pid 4822:tid 4831] [client 173.239.218.22:24381] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 08:27:55.153802 2026] [proxy_fcgi:error] [pid 4822:tid 4839] [client 173.239.218.22:24381] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 08:27:55.323341 2026] [:error] [pid 4822:tid 4840] [client 173.239.218.22:24381] [client 173.239.218.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "aebEiyAteFQFwS_23Jm4VgAAAU4"]
[Tue Apr 21 08:27:55.643602 2026] [:error] [pid 4823:tid 4866] [client 216.24.210.28:61475] [client 216.24.210.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "aebEi_c8mke3PfHqsxHQ9QAAAY0"]
[Tue Apr 21 08:28:17.937935 2026] [autoindex:error] [pid 35320:tid 35354] [client 216.24.210.29:26777] AH01276: Cannot serve directory /home/dwelects/public_html/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 21 08:28:29.847575 2026] [autoindex:error] [pid 35320:tid 35331] [client 216.24.210.29:26777] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 21 13:47:11.288725 2026] [:error] [pid 35320:tid 35334] [client 63.178.230.145:47028] [client 63.178.230.145] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.git/config"] [unique_id "aecPX4JW6fdXWO6agMHpaQAAAAQ"]
[Tue Apr 21 13:47:12.551780 2026] [:error] [pid 4822:tid 4841] [client 63.178.230.145:47038] [client 63.178.230.145] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env"] [unique_id "aecPYCAteFQFwS_23JlMogAAAU8"]
[Tue Apr 21 13:47:13.549650 2026] [:error] [pid 4777:tid 4794] [client 63.178.230.145:41860] [client 63.178.230.145] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.local"] [unique_id "aecPYaxXur6bykKyLZRfKwAAAQY"]
[Tue Apr 21 13:47:14.536920 2026] [:error] [pid 4822:tid 4828] [client 63.178.230.145:41876] [client 63.178.230.145] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.production"] [unique_id "aecPYiAteFQFwS_23JlMrAAAAUI"]
[Tue Apr 21 13:47:15.491999 2026] [:error] [pid 4823:tid 4860] [client 63.178.230.145:41878] [client 63.178.230.145] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.staging"] [unique_id "aecPY_c8mke3PfHqsxFfhQAAAYc"]
[Tue Apr 21 13:47:16.479575 2026] [:error] [pid 5377:tid 5390] [client 63.178.230.145:41880] [client 63.178.230.145] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.development"] [unique_id "aecPZLBKychFlrHBdvuhlQAAAcQ"]
[Tue Apr 21 13:47:17.464555 2026] [:error] [pid 4822:tid 4835] [client 63.178.230.145:41886] [client 63.178.230.145] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.test"] [unique_id "aecPZSAteFQFwS_23JlMuQAAAUk"]
[Tue Apr 21 13:47:18.465041 2026] [:error] [pid 35320:tid 35340] [client 63.178.230.145:41888] [client 63.178.230.145] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.remote"] [unique_id "aecPZoJW6fdXWO6agMHpbQAAAAo"]
[Tue Apr 21 13:47:19.439775 2026] [:error] [pid 5377:tid 5405] [client 63.178.230.145:41890] [client 63.178.230.145] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.bak"] [unique_id "aecPZ7BKychFlrHBdvuhmgAAAdM"]
[Tue Apr 21 13:47:20.401331 2026] [:error] [pid 5377:tid 5402] [client 63.178.230.145:41900] [client 63.178.230.145] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.backup"] [unique_id "aecPaLBKychFlrHBdvuhnAAAAdA"]
[Tue Apr 21 13:47:21.357215 2026] [:error] [pid 4823:tid 4862] [client 63.178.230.145:41912] [client 63.178.230.145] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.save"] [unique_id "aecPafc8mke3PfHqsxFfiQAAAYk"]
[Tue Apr 21 13:47:22.341968 2026] [:error] [pid 35322:tid 35359] [client 63.178.230.145:41926] [client 63.178.230.145] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.old"] [unique_id "aecPaqPoAfV40BTfVKyj9gAAAII"]
[Tue Apr 21 13:47:23.311026 2026] [:error] [pid 4823:tid 4853] [client 63.178.230.145:59480] [client 63.178.230.145] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.sample"] [unique_id "aecPa_c8mke3PfHqsxFfjAAAAYA"]
[Tue Apr 21 13:47:24.267743 2026] [:error] [pid 4822:tid 4844] [client 63.178.230.145:59492] [client 63.178.230.145] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.example"] [unique_id "aecPbCAteFQFwS_23JlMwwAAAVI"]
[Tue Apr 21 13:47:25.223607 2026] [:error] [pid 4823:tid 4863] [client 63.178.230.145:59494] [client 63.178.230.145] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.dev"] [unique_id "aecPbfc8mke3PfHqsxFfjwAAAYo"]
[Tue Apr 21 13:47:26.185466 2026] [:error] [pid 5377:tid 5399] [client 63.178.230.145:59506] [client 63.178.230.145] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.prod"] [unique_id "aecPbrBKychFlrHBdvuhtQAAAc0"]
[Tue Apr 21 13:47:27.142442 2026] [:error] [pid 35320:tid 35346] [client 63.178.230.145:59518] [client 63.178.230.145] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.stage"] [unique_id "aecPb4JW6fdXWO6agMHpbgAAABA"]
[Tue Apr 21 13:47:28.105177 2026] [:error] [pid 35320:tid 35349] [client 63.178.230.145:59532] [client 63.178.230.145] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.ci"] [unique_id "aecPcIJW6fdXWO6agMHpcAAAABM"]
[Tue Apr 21 13:47:29.068717 2026] [:error] [pid 4822:tid 4834] [client 63.178.230.145:59534] [client 63.178.230.145] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.docker"] [unique_id "aecPcSAteFQFwS_23JlMzQAAAUg"]
[Tue Apr 21 13:47:30.023656 2026] [:error] [pid 35415:tid 35446] [client 63.178.230.145:59544] [client 63.178.230.145] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.live"] [unique_id "aecPckiqDinI4_22zzgzLwAAANM"]
[Tue Apr 21 13:47:30.979398 2026] [:error] [pid 4822:tid 4839] [client 63.178.230.145:59550] [client 63.178.230.145] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.preprod"] [unique_id "aecPciAteFQFwS_23JlM1AAAAU0"]
[Tue Apr 21 13:47:31.942574 2026] [:error] [pid 4822:tid 4832] [client 63.178.230.145:59560] [client 63.178.230.145] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.uat"] [unique_id "aecPcyAteFQFwS_23JlM2QAAAUY"]
[Tue Apr 21 13:47:32.899648 2026] [:error] [pid 4823:tid 4853] [client 63.178.230.145:51838] [client 63.178.230.145] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.dist"] [unique_id "aecPdPc8mke3PfHqsxFfkwAAAYA"]
[Tue Apr 21 13:47:33.868213 2026] [:error] [pid 4822:tid 4837] [client 63.178.230.145:51846] [client 63.178.230.145] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.swp"] [unique_id "aecPdSAteFQFwS_23JlM3gAAAUs"]
[Tue Apr 21 13:47:34.828590 2026] [:error] [pid 35320:tid 35350] [client 63.178.230.145:51850] [client 63.178.230.145] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env~"] [unique_id "aecPdoJW6fdXWO6agMHpjgAAABQ"]
[Tue Apr 21 13:47:35.798082 2026] [:error] [pid 4823:tid 4857] [client 63.178.230.145:51864] [client 63.178.230.145] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/app/.env"] [unique_id "aecPd_c8mke3PfHqsxFfsgAAAYQ"]
[Tue Apr 21 13:47:36.750765 2026] [:error] [pid 5377:tid 5400] [client 63.178.230.145:51880] [client 63.178.230.145] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/apps/.env"] [unique_id "aecPeLBKychFlrHBdvuh0AAAAc4"]
[Tue Apr 21 13:47:37.711566 2026] [:error] [pid 4822:tid 4847] [client 63.178.230.145:51896] [client 63.178.230.145] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/api/.env"] [unique_id "aecPeSAteFQFwS_23JlM5gAAAVU"]
[Tue Apr 21 13:47:38.670608 2026] [:error] [pid 35322:tid 35369] [client 63.178.230.145:51900] [client 63.178.230.145] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/web/.env"] [unique_id "aecPeqPoAfV40BTfVKyj-gAAAIw"]
[Tue Apr 21 13:47:39.619124 2026] [:error] [pid 4823:tid 4867] [client 63.178.230.145:51916] [client 63.178.230.145] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/site/.env"] [unique_id "aecPe_c8mke3PfHqsxFfuwAAAY4"]
[Tue Apr 21 13:47:40.574819 2026] [:error] [pid 4822:tid 4827] [client 63.178.230.145:51918] [client 63.178.230.145] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/public/.env"] [unique_id "aecPfCAteFQFwS_23JlM8AAAAUE"]
[Tue Apr 21 14:38:49.868509 2026] [:error] [pid 4822:tid 4842] [client 3.75.182.108:52456] [client 3.75.182.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dwelectservices.com.au"] [uri "/.git/config"] [unique_id "aecbeSAteFQFwS_23Jl76AAAAVA"]
[Tue Apr 21 14:38:51.063910 2026] [:error] [pid 35320:tid 35342] [client 3.75.182.108:52464] [client 3.75.182.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dwelectservices.com.au"] [uri "/.env"] [unique_id "aecbe4JW6fdXWO6agMH8ZgAAAAw"]
[Tue Apr 21 14:38:52.013878 2026] [:error] [pid 4822:tid 4830] [client 3.75.182.108:52474] [client 3.75.182.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dwelectservices.com.au"] [uri "/.env.local"] [unique_id "aecbfCAteFQFwS_23Jl77gAAAUQ"]
[Tue Apr 21 14:38:52.973886 2026] [:error] [pid 4822:tid 4839] [client 3.75.182.108:52480] [client 3.75.182.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dwelectservices.com.au"] [uri "/.env.production"] [unique_id "aecbfCAteFQFwS_23Jl78wAAAU0"]
[Tue Apr 21 14:38:53.933064 2026] [:error] [pid 4822:tid 4829] [client 3.75.182.108:52482] [client 3.75.182.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dwelectservices.com.au"] [uri "/.env.staging"] [unique_id "aecbfSAteFQFwS_23Jl8AAAAAUM"]
[Tue Apr 21 14:38:54.890302 2026] [:error] [pid 4822:tid 4831] [client 3.75.182.108:52486] [client 3.75.182.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dwelectservices.com.au"] [uri "/.env.development"] [unique_id "aecbfiAteFQFwS_23Jl8DQAAAUU"]
[Tue Apr 21 14:38:55.846279 2026] [:error] [pid 35415:tid 35449] [client 3.75.182.108:52492] [client 3.75.182.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dwelectservices.com.au"] [uri "/.env.test"] [unique_id "aecbf0iqDinI4_22zzhCbgAAANY"]
[Tue Apr 21 14:38:56.802304 2026] [:error] [pid 35320:tid 35341] [client 3.75.182.108:52500] [client 3.75.182.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dwelectservices.com.au"] [uri "/.env.remote"] [unique_id "aecbgIJW6fdXWO6agMH8dgAAAAs"]
[Tue Apr 21 14:38:57.754318 2026] [:error] [pid 4822:tid 4840] [client 3.75.182.108:52510] [client 3.75.182.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dwelectservices.com.au"] [uri "/.env.bak"] [unique_id "aecbgSAteFQFwS_23Jl8GQAAAU4"]
[Tue Apr 21 14:38:58.715171 2026] [:error] [pid 5377:tid 5403] [client 3.75.182.108:44214] [client 3.75.182.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dwelectservices.com.au"] [uri "/.env.backup"] [unique_id "aecbgrBKychFlrHBdvu4pwAAAdE"]
[Tue Apr 21 14:38:59.670138 2026] [:error] [pid 5377:tid 5407] [client 3.75.182.108:44220] [client 3.75.182.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dwelectservices.com.au"] [uri "/.env.save"] [unique_id "aecbg7BKychFlrHBdvu4rAAAAdU"]
[Tue Apr 21 14:39:00.619887 2026] [:error] [pid 4777:tid 4799] [client 3.75.182.108:44228] [client 3.75.182.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dwelectservices.com.au"] [uri "/.env.old"] [unique_id "aecbhKxXur6bykKyLZRvawAAAQs"]
[Tue Apr 21 14:39:01.566907 2026] [:error] [pid 4777:tid 4807] [client 3.75.182.108:44236] [client 3.75.182.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dwelectservices.com.au"] [uri "/.env.sample"] [unique_id "aecbhaxXur6bykKyLZRvbAAAARM"]
[Tue Apr 21 14:39:02.522045 2026] [:error] [pid 35415:tid 35435] [client 3.75.182.108:44250] [client 3.75.182.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dwelectservices.com.au"] [uri "/.env.example"] [unique_id "aecbhkiqDinI4_22zzhCdwAAAMg"]
[Tue Apr 21 14:39:03.474984 2026] [:error] [pid 4823:tid 4866] [client 3.75.182.108:44262] [client 3.75.182.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dwelectservices.com.au"] [uri "/.env.dev"] [unique_id "aecbh_c8mke3PfHqsxGBpwAAAY0"]
[Tue Apr 21 14:39:04.424264 2026] [:error] [pid 35322:tid 35377] [client 3.75.182.108:44266] [client 3.75.182.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dwelectservices.com.au"] [uri "/.env.prod"] [unique_id "aecbiKPoAfV40BTfVKyvKwAAAJQ"]
[Tue Apr 21 14:39:05.382385 2026] [:error] [pid 35320:tid 35352] [client 3.75.182.108:44272] [client 3.75.182.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dwelectservices.com.au"] [uri "/.env.stage"] [unique_id "aecbiYJW6fdXWO6agMH8gAAAABY"]
[Tue Apr 21 14:39:06.332909 2026] [:error] [pid 35321:tid 35387] [client 3.75.182.108:44288] [client 3.75.182.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dwelectservices.com.au"] [uri "/.env.ci"] [unique_id "aecbijeHLhVUuu8cVXyIXAAAAEM"]
[Tue Apr 21 14:39:07.283162 2026] [:error] [pid 4823:tid 4875] [client 3.75.182.108:44300] [client 3.75.182.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dwelectservices.com.au"] [uri "/.env.docker"] [unique_id "aecbi_c8mke3PfHqsxGBuQAAAZY"]
[Tue Apr 21 14:39:08.243072 2026] [:error] [pid 35320:tid 35334] [client 3.75.182.108:44316] [client 3.75.182.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dwelectservices.com.au"] [uri "/.env.live"] [unique_id "aecbjIJW6fdXWO6agMH8gwAAAAQ"]
[Tue Apr 21 14:39:09.194178 2026] [:error] [pid 4777:tid 4799] [client 3.75.182.108:40946] [client 3.75.182.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dwelectservices.com.au"] [uri "/.env.preprod"] [unique_id "aecbjaxXur6bykKyLZRvdwAAAQs"]
[Tue Apr 21 14:39:10.145534 2026] [:error] [pid 35321:tid 35386] [client 3.75.182.108:40952] [client 3.75.182.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dwelectservices.com.au"] [uri "/.env.uat"] [unique_id "aecbjjeHLhVUuu8cVXyIZQAAAEI"]
[Tue Apr 21 14:39:11.107984 2026] [:error] [pid 35320:tid 35330] [client 3.75.182.108:40954] [client 3.75.182.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dwelectservices.com.au"] [uri "/.env.dist"] [unique_id "aecbj4JW6fdXWO6agMH8hwAAAAA"]
[Tue Apr 21 14:39:12.062441 2026] [:error] [pid 4777:tid 4805] [client 3.75.182.108:40960] [client 3.75.182.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dwelectservices.com.au"] [uri "/.env.swp"] [unique_id "aecbkKxXur6bykKyLZRvggAAARE"]
[Tue Apr 21 14:39:13.021396 2026] [:error] [pid 35322:tid 35380] [client 3.75.182.108:40974] [client 3.75.182.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dwelectservices.com.au"] [uri "/.env~"] [unique_id "aecbkaPoAfV40BTfVKyvPgAAAJc"]
[Tue Apr 21 14:39:13.972994 2026] [:error] [pid 4822:tid 4834] [client 3.75.182.108:40982] [client 3.75.182.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dwelectservices.com.au"] [uri "/app/.env"] [unique_id "aecbkSAteFQFwS_23Jl8TgAAAUg"]
[Tue Apr 21 14:39:14.924441 2026] [:error] [pid 4823:tid 4864] [client 3.75.182.108:40984] [client 3.75.182.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dwelectservices.com.au"] [uri "/apps/.env"] [unique_id "aecbkvc8mke3PfHqsxGB1gAAAYs"]
[Tue Apr 21 14:39:15.884792 2026] [:error] [pid 35415:tid 35438] [client 3.75.182.108:40998] [client 3.75.182.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dwelectservices.com.au"] [uri "/api/.env"] [unique_id "aecbk0iqDinI4_22zzhCiAAAAMs"]
[Tue Apr 21 14:39:16.843124 2026] [:error] [pid 4822:tid 4828] [client 3.75.182.108:41000] [client 3.75.182.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dwelectservices.com.au"] [uri "/web/.env"] [unique_id "aecblCAteFQFwS_23Jl8VQAAAUI"]
[Tue Apr 21 14:39:17.802202 2026] [:error] [pid 4823:tid 4858] [client 3.75.182.108:41004] [client 3.75.182.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dwelectservices.com.au"] [uri "/site/.env"] [unique_id "aecblfc8mke3PfHqsxGB5wAAAYU"]
[Tue Apr 21 14:39:18.759712 2026] [:error] [pid 4822:tid 4847] [client 3.75.182.108:34910] [client 3.75.182.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dwelectservices.com.au"] [uri "/public/.env"] [unique_id "aecbliAteFQFwS_23Jl8agAAAVU"]
[Tue Apr 21 14:39:19.705179 2026] [:error] [pid 4822:tid 4847] [client 3.75.182.108:34912] [client 3.75.182.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dwelectservices.com.au"] [uri "/admin/.env"] [unique_id "aecblyAteFQFwS_23Jl8eAAAAVU"]
[Tue Apr 21 14:39:20.655080 2026] [:error] [pid 4823:tid 4859] [client 3.75.182.108:34926] [client 3.75.182.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dwelectservices.com.au"] [uri "/backend/.env"] [unique_id "aecbmPc8mke3PfHqsxGB-wAAAYY"]
[Tue Apr 21 14:57:51.607621 2026] [proxy_fcgi:error] [pid 5377:tid 5409] [client 172.213.137.0:63431] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 14:57:51.854483 2026] [proxy_fcgi:error] [pid 5377:tid 5389] [client 172.213.137.0:63431] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 14:57:52.092198 2026] [proxy_fcgi:error] [pid 5377:tid 5406] [client 172.213.137.0:63431] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 14:57:52.337680 2026] [proxy_fcgi:error] [pid 5377:tid 5387] [client 172.213.137.0:63431] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 14:57:52.608389 2026] [proxy_fcgi:error] [pid 5377:tid 5403] [client 172.213.137.0:63431] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 14:57:52.857635 2026] [proxy_fcgi:error] [pid 5377:tid 5388] [client 172.213.137.0:63431] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 14:57:53.095567 2026] [proxy_fcgi:error] [pid 5377:tid 5394] [client 172.213.137.0:63431] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 14:57:53.333178 2026] [proxy_fcgi:error] [pid 5377:tid 5400] [client 172.213.137.0:63431] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 14:57:53.590872 2026] [proxy_fcgi:error] [pid 5377:tid 5397] [client 172.213.137.0:63431] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 14:57:54.061785 2026] [:error] [pid 5377:tid 5401] [client 172.213.137.0:63431] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.dj/index.php"] [unique_id "aecf8rBKychFlrHBdvvEeAAAAc8"]
[Tue Apr 21 14:57:54.683321 2026] [:error] [pid 5377:tid 5392] [client 172.213.137.0:63537] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.dj/index.php"] [unique_id "aecf8rBKychFlrHBdvvEegAAAcY"]
[Tue Apr 21 14:57:55.259088 2026] [:error] [pid 4822:tid 4848] [client 172.213.137.0:62238] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.dj/index.php"] [unique_id "aecf8yAteFQFwS_23JmUDgAAAVY"]
[Tue Apr 21 14:57:55.756591 2026] [:error] [pid 4822:tid 4843] [client 172.213.137.0:63480] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.dj/index.php"] [unique_id "aecf8yAteFQFwS_23JmUEwAAAVE"]
[Tue Apr 21 14:57:56.254061 2026] [:error] [pid 5377:tid 5393] [client 172.213.137.0:63530] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "aecf9LBKychFlrHBdvvEfQAAAcc"]
[Tue Apr 21 14:57:56.846050 2026] [:error] [pid 4823:tid 4856] [client 172.213.137.0:62276] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "aecf9Pc8mke3PfHqsxGR7wAAAYM"]
[Tue Apr 21 14:57:57.375603 2026] [:error] [pid 4823:tid 4861] [client 172.213.137.0:62243] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "aecf9fc8mke3PfHqsxGR8wAAAYg"]
[Tue Apr 21 14:57:57.937340 2026] [:error] [pid 5377:tid 5404] [client 172.213.137.0:64958] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "aecf9bBKychFlrHBdvvEfwAAAdI"]
[Tue Apr 21 14:57:58.669075 2026] [:error] [pid 35320:tid 35339] [client 172.213.137.0:65479] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.tmb/"] [unique_id "aecf9oJW6fdXWO6agMEEwgAAAAk"]
[Tue Apr 21 14:57:59.652711 2026] [:error] [pid 4823:tid 4853] [client 172.213.137.0:64934] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.tmb/"] [unique_id "aecf9_c8mke3PfHqsxGR-wAAAYA"]
[Tue Apr 21 14:58:00.743910 2026] [:error] [pid 4777:tid 4798] [client 172.213.137.0:64834] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.tmb/"] [unique_id "aecf-KxXur6bykKyLZR0AAAAAQo"]
[Tue Apr 21 14:58:01.958353 2026] [:error] [pid 35320:tid 35335] [client 172.213.137.0:63519] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.tmb/"] [unique_id "aecf-YJW6fdXWO6agMEExwAAAAU"]
[Tue Apr 21 14:58:02.755886 2026] [:error] [pid 4823:tid 4870] [client 172.213.137.0:63506] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.admin.php"] [unique_id "aecf-vc8mke3PfHqsxGSAAAAAZE"]
[Tue Apr 21 14:58:03.926745 2026] [:error] [pid 4822:tid 4848] [client 172.213.137.0:10877] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.admin.php"] [unique_id "aecf-yAteFQFwS_23JmULQAAAVY"]
[Tue Apr 21 14:58:04.598798 2026] [:error] [pid 4823:tid 4873] [client 172.213.137.0:65521] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.admin.php"] [unique_id "aecf_Pc8mke3PfHqsxGSBwAAAZQ"]
[Tue Apr 21 14:58:05.582633 2026] [:error] [pid 4823:tid 4860] [client 172.213.137.0:63505] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.admin.php"] [unique_id "aecf_fc8mke3PfHqsxGSDQAAAYc"]
[Tue Apr 21 14:58:06.816548 2026] [:error] [pid 4823:tid 4873] [client 172.213.137.0:10834] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sw.php"] [unique_id "aecf_vc8mke3PfHqsxGSEAAAAZQ"]
[Tue Apr 21 14:58:08.148391 2026] [:error] [pid 5377:tid 5406] [client 172.213.137.0:11548] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sw.php"] [unique_id "aecgALBKychFlrHBdvvEjQAAAdQ"]
[Tue Apr 21 14:58:09.417564 2026] [:error] [pid 4823:tid 4857] [client 172.213.137.0:11575] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sw.php"] [unique_id "aecgAfc8mke3PfHqsxGSEgAAAYQ"]
[Tue Apr 21 14:58:10.073824 2026] [:error] [pid 4823:tid 4864] [client 172.213.137.0:65518] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sw.php"] [unique_id "aecgAvc8mke3PfHqsxGSFAAAAYs"]
[Tue Apr 21 14:58:10.864170 2026] [:error] [pid 4823:tid 4869] [client 172.213.137.0:10892] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vuln.php"] [unique_id "aecgAvc8mke3PfHqsxGSGAAAAZA"]
[Tue Apr 21 14:58:11.625465 2026] [:error] [pid 4823:tid 4859] [client 172.213.137.0:11219] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vuln.php"] [unique_id "aecgA_c8mke3PfHqsxGSHAAAAYY"]
[Tue Apr 21 14:58:14.217323 2026] [:error] [pid 4823:tid 4858] [client 172.213.137.0:10508] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vuln.php"] [unique_id "aecgBvc8mke3PfHqsxGSJwAAAYU"]
[Tue Apr 21 14:58:15.290270 2026] [:error] [pid 4822:tid 4826] [client 172.213.137.0:10731] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vuln.php"] [unique_id "aecgByAteFQFwS_23JmUVgAAAUA"]
[Tue Apr 21 14:58:15.874302 2026] [:error] [pid 4822:tid 4849] [client 172.213.137.0:11241] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-temp.php"] [unique_id "aecgByAteFQFwS_23JmUWQAAAVc"]
[Tue Apr 21 14:58:16.605429 2026] [:error] [pid 35320:tid 35336] [client 172.213.137.0:10594] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-temp.php"] [unique_id "aecgCIJW6fdXWO6agMEEzQAAAAY"]
[Tue Apr 21 14:58:17.672272 2026] [:error] [pid 4823:tid 4871] [client 172.213.137.0:10503] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-temp.php"] [unique_id "aecgCfc8mke3PfHqsxGSLAAAAZI"]
[Tue Apr 21 14:58:18.416761 2026] [:error] [pid 4822:tid 4833] [client 172.213.137.0:10796] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-temp.php"] [unique_id "aecgCiAteFQFwS_23JmUYQAAAUc"]
[Tue Apr 21 14:58:19.407530 2026] [:error] [pid 4822:tid 4830] [client 172.213.137.0:11243] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sxdfrt.php"] [unique_id "aecgCyAteFQFwS_23JmUZAAAAUQ"]
[Tue Apr 21 14:58:20.147118 2026] [:error] [pid 4823:tid 4875] [client 172.213.137.0:11258] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sxdfrt.php"] [unique_id "aecgDPc8mke3PfHqsxGSNgAAAZY"]
[Tue Apr 21 14:58:20.783403 2026] [:error] [pid 4822:tid 4850] [client 172.213.137.0:10747] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sxdfrt.php"] [unique_id "aecgDCAteFQFwS_23JmUZwAAAVg"]
[Tue Apr 21 14:58:21.868961 2026] [:error] [pid 5377:tid 5401] [client 172.213.137.0:10626] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sxdfrt.php"] [unique_id "aecgDbBKychFlrHBdvvEpAAAAc8"]
[Tue Apr 21 14:58:22.628494 2026] [:error] [pid 5377:tid 5407] [client 172.213.137.0:10528] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "aecgDrBKychFlrHBdvvEqAAAAdU"]
[Tue Apr 21 14:58:23.428855 2026] [:error] [pid 35321:tid 35394] [client 172.213.137.0:33576] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "aecgDzeHLhVUuu8cVXyL7QAAAEo"]
[Tue Apr 21 14:58:24.472654 2026] [:error] [pid 5377:tid 5393] [client 172.213.137.0:10751] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "aecgELBKychFlrHBdvvEsQAAAcc"]
[Tue Apr 21 14:58:25.064181 2026] [:error] [pid 5377:tid 5387] [client 172.213.137.0:10612] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "aecgEbBKychFlrHBdvvEtQAAAcE"]
[Tue Apr 21 14:58:26.170310 2026] [:error] [pid 4822:tid 4840] [client 172.213.137.0:33569] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "aecgEiAteFQFwS_23JmUbgAAAU4"]
[Tue Apr 21 14:58:27.735918 2026] [:error] [pid 4822:tid 4844] [client 172.213.137.0:33540] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "aecgEyAteFQFwS_23JmUfgAAAVI"]
[Tue Apr 21 14:58:28.603587 2026] [:error] [pid 35415:tid 35436] [client 172.213.137.0:10574] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "aecgFEiqDinI4_22zzhGvwAAAMk"]
[Tue Apr 21 14:58:29.312279 2026] [:error] [pid 4822:tid 4835] [client 172.213.137.0:33543] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "aecgFSAteFQFwS_23JmUhwAAAUk"]
[Tue Apr 21 14:58:30.010567 2026] [:error] [pid 4822:tid 4838] [client 172.213.137.0:63537] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class-bda.php"] [unique_id "aecgFiAteFQFwS_23JmUiwAAAUw"]
[Tue Apr 21 14:58:30.601224 2026] [:error] [pid 4823:tid 4877] [client 172.213.137.0:10802] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class-bda.php"] [unique_id "aecgFvc8mke3PfHqsxGSTgAAAZg"]
[Tue Apr 21 14:58:31.259347 2026] [:error] [pid 4822:tid 4828] [client 172.213.137.0:10693] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class-bda.php"] [unique_id "aecgFyAteFQFwS_23JmUjwAAAUI"]
[Tue Apr 21 14:58:31.793474 2026] [:error] [pid 5377:tid 5387] [client 172.213.137.0:10758] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class-bda.php"] [unique_id "aecgF7BKychFlrHBdvvEvwAAAcE"]
[Tue Apr 21 14:58:33.255497 2026] [:error] [pid 4823:tid 4876] [client 172.213.137.0:11443] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bhm.php"] [unique_id "aecgGfc8mke3PfHqsxGSUgAAAZc"]
[Tue Apr 21 14:58:34.492696 2026] [:error] [pid 35320:tid 35341] [client 172.213.137.0:11412] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bhm.php"] [unique_id "aecgGoJW6fdXWO6agMEE3gAAAAs"]
[Tue Apr 21 14:58:35.427976 2026] [:error] [pid 4822:tid 4844] [client 172.213.137.0:33564] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bhm.php"] [unique_id "aecgGyAteFQFwS_23JmUpQAAAVI"]
[Tue Apr 21 14:58:36.262823 2026] [:error] [pid 4822:tid 4831] [client 172.213.137.0:33567] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bhm.php"] [unique_id "aecgHCAteFQFwS_23JmUqwAAAUU"]
[Tue Apr 21 14:58:37.020871 2026] [:error] [pid 4822:tid 4839] [client 172.213.137.0:10726] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xmu.php"] [unique_id "aecgHSAteFQFwS_23JmUrQAAAU0"]
[Tue Apr 21 14:58:38.077323 2026] [:error] [pid 4822:tid 4840] [client 172.213.137.0:10772] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xmu.php"] [unique_id "aecgHiAteFQFwS_23JmUtwAAAU4"]
[Tue Apr 21 14:58:39.548909 2026] [:error] [pid 4777:tid 4806] [client 172.213.137.0:10779] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xmu.php"] [unique_id "aecgH6xXur6bykKyLZR0EAAAARI"]
[Tue Apr 21 14:58:40.335747 2026] [:error] [pid 4777:tid 4796] [client 172.213.137.0:10509] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xmu.php"] [unique_id "aecgIKxXur6bykKyLZR0EQAAAQg"]
[Tue Apr 21 14:58:41.242639 2026] [:error] [pid 4823:tid 4857] [client 172.213.137.0:10699] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ref.php"] [unique_id "aecgIfc8mke3PfHqsxGSZwAAAYQ"]
[Tue Apr 21 14:58:41.941368 2026] [:error] [pid 5377:tid 5402] [client 172.213.137.0:10749] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ref.php"] [unique_id "aecgIbBKychFlrHBdvvEygAAAdA"]
[Tue Apr 21 14:58:42.845395 2026] [:error] [pid 35415:tid 35439] [client 172.213.137.0:10558] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ref.php"] [unique_id "aecgIkiqDinI4_22zzhGwgAAAMw"]
[Tue Apr 21 14:58:43.915879 2026] [:error] [pid 4822:tid 4846] [client 172.213.137.0:11396] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ref.php"] [unique_id "aecgIyAteFQFwS_23JmUzgAAAVQ"]
[Tue Apr 21 14:58:44.698626 2026] [:error] [pid 4823:tid 4868] [client 172.213.137.0:10507] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-xme.php"] [unique_id "aecgJPc8mke3PfHqsxGSbgAAAY8"]
[Tue Apr 21 14:58:45.489453 2026] [:error] [pid 4822:tid 4848] [client 172.213.137.0:10746] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-xme.php"] [unique_id "aecgJSAteFQFwS_23JmU0wAAAVY"]
[Tue Apr 21 14:58:46.349100 2026] [:error] [pid 5377:tid 5397] [client 172.213.137.0:10519] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-xme.php"] [unique_id "aecgJrBKychFlrHBdvvE0wAAAcs"]
[Tue Apr 21 14:58:47.128055 2026] [:error] [pid 4822:tid 4832] [client 172.213.137.0:30784] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-xme.php"] [unique_id "aecgJyAteFQFwS_23JmU2wAAAUY"]
[Tue Apr 21 14:58:48.099120 2026] [:error] [pid 4822:tid 4833] [client 172.213.137.0:30846] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/adminer.php"] [unique_id "aecgKCAteFQFwS_23JmU4AAAAUc"]
[Tue Apr 21 14:58:49.311819 2026] [:error] [pid 4822:tid 4834] [client 172.213.137.0:10700] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/adminer.php"] [unique_id "aecgKSAteFQFwS_23JmU5wAAAUg"]
[Tue Apr 21 14:58:50.173826 2026] [:error] [pid 35320:tid 35352] [client 172.213.137.0:11453] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/adminer.php"] [unique_id "aecgKoJW6fdXWO6agMEE6wAAABY"]
[Tue Apr 21 14:58:51.214570 2026] [:error] [pid 4822:tid 4842] [client 172.213.137.0:10709] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/adminer.php"] [unique_id "aecgKyAteFQFwS_23JmU7AAAAVA"]
[Tue Apr 21 14:58:52.276146 2026] [:error] [pid 4822:tid 4831] [client 172.213.137.0:11394] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ktfow.php"] [unique_id "aecgLCAteFQFwS_23JmU8wAAAUU"]
[Tue Apr 21 14:58:53.072069 2026] [proxy_fcgi:error] [pid 4822:tid 4829] [client 172.213.137.0:10700] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 14:58:53.310341 2026] [proxy_fcgi:error] [pid 4822:tid 4833] [client 172.213.137.0:10700] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 14:58:53.548463 2026] [proxy_fcgi:error] [pid 4822:tid 4837] [client 172.213.137.0:10700] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 14:58:53.785712 2026] [proxy_fcgi:error] [pid 4822:tid 4832] [client 172.213.137.0:10700] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 14:58:54.117764 2026] [proxy_fcgi:error] [pid 4822:tid 4834] [client 172.213.137.0:10700] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 14:58:54.823230 2026] [proxy_fcgi:error] [pid 4822:tid 4826] [client 172.213.137.0:10700] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 14:58:55.176880 2026] [proxy_fcgi:error] [pid 4822:tid 4834] [client 172.213.137.0:10700] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 14:58:55.415969 2026] [proxy_fcgi:error] [pid 4822:tid 4848] [client 172.213.137.0:10700] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 14:58:55.748283 2026] [proxy_fcgi:error] [pid 4822:tid 4829] [client 172.213.137.0:10700] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 14:58:55.989603 2026] [proxy_fcgi:error] [pid 4822:tid 4847] [client 172.213.137.0:10700] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 14:58:56.245434 2026] [:error] [pid 4822:tid 4833] [client 172.213.137.0:10700] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ewp.php"] [unique_id "aecgMCAteFQFwS_23JmVEAAAAUc"]
[Tue Apr 21 14:58:57.249553 2026] [:error] [pid 4823:tid 4876] [client 172.213.137.0:33568] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ewp.php"] [unique_id "aecgMfc8mke3PfHqsxGSdAAAAZc"]
[Tue Apr 21 14:58:58.060545 2026] [:error] [pid 5377:tid 5404] [client 172.213.137.0:32883] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ewp.php"] [unique_id "aecgMrBKychFlrHBdvvE7wAAAdI"]
[Tue Apr 21 14:58:59.009969 2026] [:error] [pid 5377:tid 5391] [client 172.213.137.0:32880] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ewp.php"] [unique_id "aecgM7BKychFlrHBdvvE8gAAAcU"]
[Tue Apr 21 14:59:00.799120 2026] [:error] [pid 4823:tid 4865] [client 172.213.137.0:32842] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kikikoko.php"] [unique_id "aecgNPc8mke3PfHqsxGSfwAAAYw"]
[Tue Apr 21 14:59:01.749640 2026] [:error] [pid 35320:tid 35347] [client 172.213.137.0:32854] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kikikoko.php"] [unique_id "aecgNYJW6fdXWO6agMEE8AAAABE"]
[Tue Apr 21 14:59:02.639882 2026] [:error] [pid 5377:tid 5408] [client 172.213.137.0:11421] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kikikoko.php"] [unique_id "aecgNrBKychFlrHBdvvE9gAAAdY"]
[Tue Apr 21 14:59:03.269394 2026] [:error] [pid 4822:tid 4831] [client 172.213.137.0:30841] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kikikoko.php"] [unique_id "aecgNyAteFQFwS_23JmVFAAAAUU"]
[Tue Apr 21 14:59:04.559664 2026] [:error] [pid 5377:tid 5386] [client 172.213.137.0:31459] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dx.php"] [unique_id "aecgOLBKychFlrHBdvvE-gAAAcA"]
[Tue Apr 21 14:59:05.259641 2026] [:error] [pid 4823:tid 4862] [client 172.213.137.0:11639] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dx.php"] [unique_id "aecgOfc8mke3PfHqsxGSjgAAAYk"]
[Tue Apr 21 14:59:05.907726 2026] [:error] [pid 35320:tid 35353] [client 172.213.137.0:32020] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dx.php"] [unique_id "aecgOYJW6fdXWO6agMEE-AAAABc"]
[Tue Apr 21 14:59:06.829417 2026] [:error] [pid 35321:tid 35384] [client 172.213.137.0:30740] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dx.php"] [unique_id "aecgOjeHLhVUuu8cVXyL8wAAAEA"]
[Tue Apr 21 14:59:07.897974 2026] [:error] [pid 35322:tid 35381] [client 172.213.137.0:11597] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xff.php"] [unique_id "aecgO6PoAfV40BTfVKyysQAAAJg"]
[Tue Apr 21 14:59:08.534472 2026] [:error] [pid 4822:tid 4833] [client 172.213.137.0:11590] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xff.php"] [unique_id "aecgPCAteFQFwS_23JmVGQAAAUc"]
[Tue Apr 21 14:59:09.082615 2026] [:error] [pid 4823:tid 4862] [client 172.213.137.0:31435] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xff.php"] [unique_id "aecgPfc8mke3PfHqsxGSlgAAAYk"]
[Tue Apr 21 14:59:10.278066 2026] [:error] [pid 35415:tid 35446] [client 172.213.137.0:31470] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xff.php"] [unique_id "aecgPkiqDinI4_22zzhGywAAANM"]
[Tue Apr 21 14:59:11.025425 2026] [:error] [pid 5377:tid 5405] [client 172.213.137.0:11436] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lupo.php"] [unique_id "aecgP7BKychFlrHBdvvFCQAAAdM"]
[Tue Apr 21 14:59:12.031403 2026] [:error] [pid 4822:tid 4834] [client 172.213.137.0:30798] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lupo.php"] [unique_id "aecgQCAteFQFwS_23JmVIQAAAUg"]
[Tue Apr 21 14:59:12.654859 2026] [:error] [pid 4777:tid 4794] [client 172.213.137.0:11452] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lupo.php"] [unique_id "aecgQKxXur6bykKyLZR0IAAAAQY"]
[Tue Apr 21 14:59:13.291618 2026] [:error] [pid 4822:tid 4839] [client 172.213.137.0:30821] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lupo.php"] [unique_id "aecgQSAteFQFwS_23JmVKgAAAU0"]
[Tue Apr 21 14:59:13.994993 2026] [:error] [pid 35415:tid 35441] [client 172.213.137.0:11138] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/awa.php"] [unique_id "aecgQUiqDinI4_22zzhG1QAAAM4"]
[Tue Apr 21 14:59:14.607497 2026] [:error] [pid 4822:tid 4829] [client 172.213.137.0:30781] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/awa.php"] [unique_id "aecgQiAteFQFwS_23JmVMwAAAUM"]
[Tue Apr 21 14:59:15.251492 2026] [:error] [pid 5377:tid 5389] [client 172.213.137.0:11062] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/awa.php"] [unique_id "aecgQ7BKychFlrHBdvvFEAAAAcM"]
[Tue Apr 21 14:59:16.339024 2026] [:error] [pid 4822:tid 4833] [client 172.213.137.0:30830] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/awa.php"] [unique_id "aecgRCAteFQFwS_23JmVPQAAAUc"]
[Tue Apr 21 14:59:18.470989 2026] [:error] [pid 5377:tid 5403] [client 172.213.137.0:30822] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/popo.php"] [unique_id "aecgRrBKychFlrHBdvvFHwAAAdE"]
[Tue Apr 21 14:59:19.966175 2026] [:error] [pid 35415:tid 35450] [client 172.213.137.0:30818] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/popo.php"] [unique_id "aecgR0iqDinI4_22zzhG4AAAANc"]
[Tue Apr 21 14:59:21.897121 2026] [:error] [pid 4777:tid 4807] [client 172.213.137.0:11625] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/popo.php"] [unique_id "aecgSaxXur6bykKyLZR0KQAAARM"]
[Tue Apr 21 14:59:22.862158 2026] [:error] [pid 4823:tid 4859] [client 172.213.137.0:11012] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/popo.php"] [unique_id "aecgSvc8mke3PfHqsxGSpAAAAYY"]
[Tue Apr 21 14:59:23.677386 2026] [:error] [pid 4822:tid 4833] [client 172.213.137.0:11196] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/13.php"] [unique_id "aecgSyAteFQFwS_23JmVUwAAAUc"]
[Tue Apr 21 14:59:24.840406 2026] [:error] [pid 35415:tid 35448] [client 172.213.137.0:31462] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/13.php"] [unique_id "aecgTEiqDinI4_22zzhG5gAAANU"]
[Tue Apr 21 14:59:25.923035 2026] [:error] [pid 4822:tid 4842] [client 172.213.137.0:30825] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/13.php"] [unique_id "aecgTSAteFQFwS_23JmVXQAAAVA"]
[Tue Apr 21 14:59:26.720417 2026] [:error] [pid 4823:tid 4856] [client 172.213.137.0:11429] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/13.php"] [unique_id "aecgTvc8mke3PfHqsxGSpQAAAYM"]
[Tue Apr 21 14:59:27.344794 2026] [:error] [pid 5377:tid 5402] [client 172.213.137.0:11632] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/11.php"] [unique_id "aecgT7BKychFlrHBdvvFKwAAAdA"]
[Tue Apr 21 14:59:28.377956 2026] [:error] [pid 4823:tid 4867] [client 172.213.137.0:11635] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/11.php"] [unique_id "aecgUPc8mke3PfHqsxGSrQAAAY4"]
[Tue Apr 21 14:59:29.311276 2026] [:error] [pid 4822:tid 4828] [client 172.213.137.0:11183] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/11.php"] [unique_id "aecgUSAteFQFwS_23JmVZwAAAUI"]
[Tue Apr 21 14:59:30.750749 2026] [:error] [pid 4822:tid 4841] [client 172.213.137.0:11634] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/11.php"] [unique_id "aecgUiAteFQFwS_23JmVbAAAAU8"]
[Tue Apr 21 14:59:31.455874 2026] [:error] [pid 35415:tid 35429] [client 172.213.137.0:11184] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/p.php"] [unique_id "aecgU0iqDinI4_22zzhG6AAAAMI"]
[Tue Apr 21 14:59:32.699394 2026] [:error] [pid 5377:tid 5392] [client 172.213.137.0:30743] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/p.php"] [unique_id "aecgVLBKychFlrHBdvvFOQAAAcY"]
[Tue Apr 21 14:59:33.868526 2026] [:error] [pid 4822:tid 4850] [client 172.213.137.0:11420] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/p.php"] [unique_id "aecgVSAteFQFwS_23JmVcAAAAVg"]
[Tue Apr 21 14:59:35.523748 2026] [:error] [pid 35320:tid 35339] [client 172.213.137.0:31427] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/p.php"] [unique_id "aecgV4JW6fdXWO6agMEFEgAAAAk"]
[Tue Apr 21 14:59:36.862868 2026] [:error] [pid 4822:tid 4828] [client 172.213.137.0:30787] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Requests/"] [unique_id "aecgWCAteFQFwS_23JmVdgAAAUI"]
[Tue Apr 21 14:59:37.734615 2026] [:error] [pid 4822:tid 4839] [client 172.213.137.0:11607] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Requests/"] [unique_id "aecgWSAteFQFwS_23JmVfAAAAU0"]
[Tue Apr 21 14:59:39.778043 2026] [:error] [pid 5377:tid 5390] [client 172.213.137.0:30826] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Requests/"] [unique_id "aecgW7BKychFlrHBdvvFTQAAAcQ"]
[Tue Apr 21 14:59:40.326321 2026] [:error] [pid 4822:tid 4831] [client 172.213.137.0:11014] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Requests/"] [unique_id "aecgXCAteFQFwS_23JmVlgAAAUU"]
[Tue Apr 21 14:59:41.177297 2026] [:error] [pid 4822:tid 4830] [client 172.213.137.0:11154] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bthil.php"] [unique_id "aecgXSAteFQFwS_23JmVngAAAUQ"]
[Tue Apr 21 14:59:41.890477 2026] [:error] [pid 35321:tid 35386] [client 172.213.137.0:11414] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bthil.php"] [unique_id "aecgXTeHLhVUuu8cVXyL_QAAAEI"]
[Tue Apr 21 14:59:42.520253 2026] [:error] [pid 4822:tid 4828] [client 172.213.137.0:11197] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bthil.php"] [unique_id "aecgXiAteFQFwS_23JmVpAAAAUI"]
[Tue Apr 21 14:59:43.176683 2026] [:error] [pid 4822:tid 4839] [client 172.213.137.0:30753] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bthil.php"] [unique_id "aecgXyAteFQFwS_23JmVpQAAAU0"]
[Tue Apr 21 14:59:43.787807 2026] [:error] [pid 5377:tid 5409] [client 172.213.137.0:30722] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/shell.php"] [unique_id "aecgX7BKychFlrHBdvvFWQAAAdc"]
[Tue Apr 21 14:59:44.532556 2026] [:error] [pid 4822:tid 4848] [client 172.213.137.0:32852] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/shell.php"] [unique_id "aecgYCAteFQFwS_23JmVqwAAAVY"]
[Tue Apr 21 14:59:45.074546 2026] [:error] [pid 5377:tid 5388] [client 172.213.137.0:30745] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/shell.php"] [unique_id "aecgYbBKychFlrHBdvvFXwAAAcI"]
[Tue Apr 21 14:59:45.607684 2026] [:error] [pid 5377:tid 5399] [client 172.213.137.0:30739] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/shell.php"] [unique_id "aecgYbBKychFlrHBdvvFYQAAAc0"]
[Tue Apr 21 14:59:46.371197 2026] [:error] [pid 5377:tid 5395] [client 172.213.137.0:11148] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tea.php"] [unique_id "aecgYrBKychFlrHBdvvFZQAAAck"]
[Tue Apr 21 14:59:47.070404 2026] [:error] [pid 35320:tid 35339] [client 172.213.137.0:30765] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tea.php"] [unique_id "aecgY4JW6fdXWO6agMEFGAAAAAk"]
[Tue Apr 21 14:59:48.641132 2026] [:error] [pid 4823:tid 4864] [client 172.213.137.0:11592] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tea.php"] [unique_id "aecgZPc8mke3PfHqsxGSvgAAAYs"]
[Tue Apr 21 14:59:49.179674 2026] [:error] [pid 4823:tid 4858] [client 172.213.137.0:11616] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tea.php"] [unique_id "aecgZfc8mke3PfHqsxGSwAAAAYU"]
[Tue Apr 21 14:59:49.739780 2026] [:error] [pid 4822:tid 4837] [client 172.213.137.0:30725] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/seo.php"] [unique_id "aecgZSAteFQFwS_23JmVsAAAAUs"]
[Tue Apr 21 14:59:50.341453 2026] [:error] [pid 4822:tid 4845] [client 172.213.137.0:30813] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/seo.php"] [unique_id "aecgZiAteFQFwS_23JmVtQAAAVM"]
[Tue Apr 21 14:59:50.905127 2026] [:error] [pid 4823:tid 4876] [client 172.213.137.0:30807] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/seo.php"] [unique_id "aecgZvc8mke3PfHqsxGSxQAAAZc"]
[Tue Apr 21 14:59:51.492972 2026] [:error] [pid 5377:tid 5386] [client 172.213.137.0:11162] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/seo.php"] [unique_id "aecgZ7BKychFlrHBdvvFbQAAAcA"]
[Tue Apr 21 14:59:52.188739 2026] [:error] [pid 4777:tid 4793] [client 172.213.137.0:11049] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/7.php"] [unique_id "aecgaKxXur6bykKyLZR0OgAAAQU"]
[Tue Apr 21 14:59:52.913917 2026] [:error] [pid 35415:tid 35446] [client 172.213.137.0:11434] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/7.php"] [unique_id "aecgaEiqDinI4_22zzhG8AAAANM"]
[Tue Apr 21 14:59:53.472343 2026] [:error] [pid 5377:tid 5404] [client 172.213.137.0:11180] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/7.php"] [unique_id "aecgabBKychFlrHBdvvFcwAAAdI"]
[Tue Apr 21 14:59:54.096809 2026] [:error] [pid 5377:tid 5405] [client 172.213.137.0:30721] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/7.php"] [unique_id "aecgarBKychFlrHBdvvFdwAAAdM"]
[Tue Apr 21 14:59:55.414582 2026] [proxy_fcgi:error] [pid 4823:tid 4862] [client 172.213.137.0:11019] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 14:59:55.825470 2026] [proxy_fcgi:error] [pid 4823:tid 4876] [client 172.213.137.0:11019] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 14:59:56.075158 2026] [proxy_fcgi:error] [pid 4823:tid 4873] [client 172.213.137.0:11019] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 14:59:56.335476 2026] [proxy_fcgi:error] [pid 4823:tid 4855] [client 172.213.137.0:11019] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 14:59:56.616099 2026] [proxy_fcgi:error] [pid 4823:tid 4874] [client 172.213.137.0:11019] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 14:59:56.934928 2026] [proxy_fcgi:error] [pid 4823:tid 4857] [client 172.213.137.0:11019] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 14:59:57.172506 2026] [proxy_fcgi:error] [pid 4823:tid 4865] [client 172.213.137.0:11019] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 14:59:57.408161 2026] [proxy_fcgi:error] [pid 4823:tid 4867] [client 172.213.137.0:11019] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 14:59:57.647485 2026] [proxy_fcgi:error] [pid 4823:tid 4875] [client 172.213.137.0:11019] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 14:59:57.895112 2026] [proxy_fcgi:error] [pid 4823:tid 4856] [client 172.213.137.0:11019] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 14:59:58.529108 2026] [:error] [pid 4823:tid 4855] [client 172.213.137.0:11019] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f35_S.php"] [unique_id "aecgbvc8mke3PfHqsxGS3gAAAYI"]
[Tue Apr 21 14:59:59.166384 2026] [:error] [pid 4823:tid 4853] [client 172.213.137.0:31471] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f35_S.php"] [unique_id "aecgb_c8mke3PfHqsxGS3wAAAYA"]
[Tue Apr 21 14:59:59.684420 2026] [:error] [pid 4823:tid 4866] [client 172.213.137.0:11029] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f35_S.php"] [unique_id "aecgb_c8mke3PfHqsxGS4gAAAY0"]
[Tue Apr 21 15:00:00.251329 2026] [:error] [pid 35321:tid 35386] [client 172.213.137.0:11166] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f35_S.php"] [unique_id "aecgcDeHLhVUuu8cVXyMFAAAAEI"]
[Tue Apr 21 15:00:00.977935 2026] [:error] [pid 4822:tid 4830] [client 172.213.137.0:11035] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2026w.php"] [unique_id "aecgcCAteFQFwS_23JmVxgAAAUQ"]
[Tue Apr 21 15:00:01.677943 2026] [:error] [pid 4822:tid 4828] [client 172.213.137.0:31487] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2026w.php"] [unique_id "aecgcSAteFQFwS_23JmVxwAAAUI"]
[Tue Apr 21 15:00:02.410603 2026] [:error] [pid 4822:tid 4835] [client 172.213.137.0:11398] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2026w.php"] [unique_id "aecgciAteFQFwS_23JmVyQAAAUk"]
[Tue Apr 21 15:00:03.010383 2026] [:error] [pid 4822:tid 4837] [client 172.213.137.0:11182] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2026w.php"] [unique_id "aecgcyAteFQFwS_23JmVzAAAAUs"]
[Tue Apr 21 15:00:03.684214 2026] [:error] [pid 4822:tid 4847] [client 172.213.137.0:30808] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/111.php"] [unique_id "aecgcyAteFQFwS_23JmV0AAAAVU"]
[Tue Apr 21 15:00:04.305183 2026] [:error] [pid 4822:tid 4836] [client 172.213.137.0:30842] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/111.php"] [unique_id "aecgdCAteFQFwS_23JmV1AAAAUo"]
[Tue Apr 21 15:00:05.032889 2026] [:error] [pid 4822:tid 4846] [client 172.213.137.0:11038] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/111.php"] [unique_id "aecgdSAteFQFwS_23JmV1wAAAVQ"]
[Tue Apr 21 15:00:05.683280 2026] [:error] [pid 4777:tid 4797] [client 172.213.137.0:30751] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/111.php"] [unique_id "aecgdaxXur6bykKyLZR0RgAAAQk"]
[Tue Apr 21 15:00:06.374429 2026] [:error] [pid 5377:tid 5397] [client 172.213.137.0:11155] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp1.php"] [unique_id "aecgdrBKychFlrHBdvvFkQAAAcs"]
[Tue Apr 21 15:00:07.140306 2026] [:error] [pid 4823:tid 4868] [client 172.213.137.0:11431] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp1.php"] [unique_id "aecgd_c8mke3PfHqsxGS8wAAAY8"]
[Tue Apr 21 15:00:07.651884 2026] [:error] [pid 4777:tid 4812] [client 172.213.137.0:11408] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp1.php"] [unique_id "aecgd6xXur6bykKyLZR0RwAAARg"]
[Tue Apr 21 15:00:08.376771 2026] [:error] [pid 5377:tid 5406] [client 172.213.137.0:11599] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp1.php"] [unique_id "aecgeLBKychFlrHBdvvFlwAAAdQ"]
[Tue Apr 21 15:00:09.965824 2026] [:error] [pid 4777:tid 4796] [client 172.213.137.0:30727] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aligk.php"] [unique_id "aecgeaxXur6bykKyLZR0TwAAAQg"]
[Tue Apr 21 15:00:11.204877 2026] [:error] [pid 4822:tid 4841] [client 172.213.137.0:11596] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aligk.php"] [unique_id "aecgeyAteFQFwS_23JmV5gAAAU8"]
[Tue Apr 21 15:00:12.123693 2026] [:error] [pid 35320:tid 35350] [client 172.213.137.0:30819] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aligk.php"] [unique_id "aecgfIJW6fdXWO6agMEFLAAAABQ"]
[Tue Apr 21 15:00:13.312095 2026] [:error] [pid 5377:tid 5396] [client 172.213.137.0:31449] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aligk.php"] [unique_id "aecgfbBKychFlrHBdvvFnwAAAco"]
[Tue Apr 21 15:00:13.943338 2026] [:error] [pid 4822:tid 4849] [client 172.213.137.0:31481] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/byrgo.php"] [unique_id "aecgfSAteFQFwS_23JmV7QAAAVc"]
[Tue Apr 21 15:00:14.520485 2026] [:error] [pid 4823:tid 4868] [client 172.213.137.0:11185] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/byrgo.php"] [unique_id "aecgfvc8mke3PfHqsxGS_AAAAY8"]
[Tue Apr 21 15:00:15.305049 2026] [:error] [pid 35415:tid 35448] [client 172.213.137.0:30833] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/byrgo.php"] [unique_id "aecgf0iqDinI4_22zzhG_AAAANU"]
[Tue Apr 21 15:00:15.872424 2026] [:error] [pid 5377:tid 5388] [client 172.213.137.0:33580] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/byrgo.php"] [unique_id "aecgf7BKychFlrHBdvvFqAAAAcI"]
[Tue Apr 21 15:00:16.715881 2026] [:error] [pid 4822:tid 4832] [client 172.213.137.0:30816] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xwpg.php"] [unique_id "aecggCAteFQFwS_23JmV9AAAAUY"]
[Tue Apr 21 15:00:17.658285 2026] [:error] [pid 4822:tid 4846] [client 172.213.137.0:10777] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xwpg.php"] [unique_id "aecggSAteFQFwS_23JmV_AAAAVQ"]
[Tue Apr 21 15:00:18.350290 2026] [:error] [pid 35322:tid 35377] [client 172.213.137.0:30758] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xwpg.php"] [unique_id "aecggqPoAfV40BTfVKyy8gAAAJQ"]
[Tue Apr 21 15:00:18.971530 2026] [:error] [pid 4823:tid 4867] [client 172.213.137.0:11605] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xwpg.php"] [unique_id "aecggvc8mke3PfHqsxGTAgAAAY4"]
[Tue Apr 21 15:00:19.658660 2026] [:error] [pid 4823:tid 4854] [client 172.213.137.0:32000] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ass.php"] [unique_id "aecgg_c8mke3PfHqsxGTBQAAAYE"]
[Tue Apr 21 15:00:20.408195 2026] [:error] [pid 4823:tid 4868] [client 172.213.137.0:11455] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ass.php"] [unique_id "aecghPc8mke3PfHqsxGTCQAAAY8"]
[Tue Apr 21 15:00:20.956379 2026] [:error] [pid 4823:tid 4862] [client 172.213.137.0:31455] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ass.php"] [unique_id "aecghPc8mke3PfHqsxGTDQAAAYk"]
[Tue Apr 21 15:00:21.689537 2026] [:error] [pid 5377:tid 5388] [client 172.213.137.0:11422] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ass.php"] [unique_id "aecghbBKychFlrHBdvvFtQAAAcI"]
[Tue Apr 21 15:00:22.620836 2026] [:error] [pid 35415:tid 35432] [client 172.213.137.0:11601] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/about.php"] [unique_id "aecghkiqDinI4_22zzhG_QAAAMU"]
[Tue Apr 21 15:00:24.073476 2026] [:error] [pid 4823:tid 4860] [client 172.213.137.0:31476] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/about.php"] [unique_id "aecgiPc8mke3PfHqsxGTGwAAAYc"]
[Tue Apr 21 15:00:24.856250 2026] [:error] [pid 4823:tid 4861] [client 172.213.137.0:30738] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/about.php"] [unique_id "aecgiPc8mke3PfHqsxGTIQAAAYg"]
[Tue Apr 21 15:00:25.468634 2026] [:error] [pid 5377:tid 5389] [client 172.213.137.0:11056] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/about.php"] [unique_id "aecgibBKychFlrHBdvvFugAAAcM"]
[Tue Apr 21 15:00:26.343692 2026] [:error] [pid 35321:tid 35387] [client 172.213.137.0:11055] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/no18.php"] [unique_id "aecgijeHLhVUuu8cVXyMHAAAAEM"]
[Tue Apr 21 15:00:26.940766 2026] [:error] [pid 35321:tid 35393] [client 172.213.137.0:11630] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/no18.php"] [unique_id "aecgijeHLhVUuu8cVXyMHQAAAEk"]
[Tue Apr 21 15:00:27.503136 2026] [:error] [pid 5377:tid 5387] [client 172.213.137.0:30789] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/no18.php"] [unique_id "aecgi7BKychFlrHBdvvFvwAAAcE"]
[Tue Apr 21 15:00:28.117451 2026] [:error] [pid 35415:tid 35442] [client 172.213.137.0:30726] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/no18.php"] [unique_id "aecgjEiqDinI4_22zzhHBAAAAM8"]
[Tue Apr 21 15:00:28.651559 2026] [:error] [pid 4822:tid 4830] [client 172.213.137.0:31430] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fine.php"] [unique_id "aecgjCAteFQFwS_23JmWJQAAAUQ"]
[Tue Apr 21 15:00:29.674665 2026] [:error] [pid 4822:tid 4849] [client 172.213.137.0:31475] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fine.php"] [unique_id "aecgjSAteFQFwS_23JmWKwAAAVc"]
[Tue Apr 21 15:00:30.397607 2026] [:error] [pid 5377:tid 5403] [client 172.213.137.0:32015] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fine.php"] [unique_id "aecgjrBKychFlrHBdvvFxgAAAdE"]
[Tue Apr 21 15:00:32.044042 2026] [:error] [pid 4822:tid 4834] [client 172.213.137.0:11199] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fine.php"] [unique_id "aecgkCAteFQFwS_23JmWNAAAAUg"]
[Tue Apr 21 15:00:34.360439 2026] [:error] [pid 4822:tid 4847] [client 172.213.137.0:11163] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hplfuns.php"] [unique_id "aecgkiAteFQFwS_23JmWPQAAAVU"]
[Tue Apr 21 15:00:35.159284 2026] [:error] [pid 4823:tid 4867] [client 172.213.137.0:10763] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hplfuns.php"] [unique_id "aecgk_c8mke3PfHqsxGTKgAAAY4"]
[Tue Apr 21 15:00:35.732097 2026] [:error] [pid 4822:tid 4844] [client 172.213.137.0:31451] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hplfuns.php"] [unique_id "aecgkyAteFQFwS_23JmWSgAAAVI"]
[Tue Apr 21 15:00:36.403957 2026] [:error] [pid 35415:tid 35435] [client 172.213.137.0:30737] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hplfuns.php"] [unique_id "aecglEiqDinI4_22zzhHBwAAAMg"]
[Tue Apr 21 15:00:37.005997 2026] [:error] [pid 35415:tid 35451] [client 172.213.137.0:31463] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xa.php"] [unique_id "aecglUiqDinI4_22zzhHCAAAANg"]
[Tue Apr 21 15:00:37.819103 2026] [:error] [pid 5377:tid 5392] [client 172.213.137.0:33567] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xa.php"] [unique_id "aecglbBKychFlrHBdvvF0wAAAcY"]
[Tue Apr 21 15:00:38.383210 2026] [:error] [pid 35415:tid 35437] [client 172.213.137.0:10703] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xa.php"] [unique_id "aecglkiqDinI4_22zzhHCwAAAMo"]
[Tue Apr 21 15:00:39.006629 2026] [:error] [pid 5377:tid 5393] [client 172.213.137.0:11614] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xa.php"] [unique_id "aecgl7BKychFlrHBdvvF1wAAAcc"]
[Tue Apr 21 15:00:39.515028 2026] [:error] [pid 4777:tid 4798] [client 172.213.137.0:11441] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin.php"] [unique_id "aecgl6xXur6bykKyLZR0XgAAAQo"]
[Tue Apr 21 15:00:40.211909 2026] [:error] [pid 4823:tid 4857] [client 172.213.137.0:11143] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin.php"] [unique_id "aecgmPc8mke3PfHqsxGTNwAAAYQ"]
[Tue Apr 21 15:00:40.741423 2026] [:error] [pid 4822:tid 4828] [client 172.213.137.0:31433] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin.php"] [unique_id "aecgmCAteFQFwS_23JmWUQAAAUI"]
[Tue Apr 21 15:00:41.218625 2026] [:error] [pid 4822:tid 4841] [client 172.213.137.0:11642] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin.php"] [unique_id "aecgmSAteFQFwS_23JmWUwAAAU8"]
[Tue Apr 21 15:00:41.880644 2026] [:error] [pid 4822:tid 4839] [client 172.213.137.0:30752] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/inege.php"] [unique_id "aecgmSAteFQFwS_23JmWVwAAAU0"]
[Tue Apr 21 15:00:42.559748 2026] [:error] [pid 5377:tid 5396] [client 172.213.137.0:11406] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/inege.php"] [unique_id "aecgmrBKychFlrHBdvvF3gAAAco"]
[Tue Apr 21 15:00:43.095033 2026] [:error] [pid 4822:tid 4836] [client 172.213.137.0:32029] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/inege.php"] [unique_id "aecgmyAteFQFwS_23JmWXAAAAUo"]
[Tue Apr 21 15:00:43.632501 2026] [:error] [pid 4823:tid 4868] [client 172.213.137.0:30791] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/inege.php"] [unique_id "aecgm_c8mke3PfHqsxGTRAAAAY8"]
[Tue Apr 21 15:00:44.230576 2026] [:error] [pid 4823:tid 4875] [client 172.213.137.0:32057] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fe5.php"] [unique_id "aecgnPc8mke3PfHqsxGTSwAAAZY"]
[Tue Apr 21 15:00:45.292543 2026] [:error] [pid 5377:tid 5394] [client 172.213.137.0:11399] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fe5.php"] [unique_id "aecgnbBKychFlrHBdvvF4wAAAcg"]
[Tue Apr 21 15:00:46.252634 2026] [:error] [pid 35320:tid 35351] [client 172.213.137.0:11646] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fe5.php"] [unique_id "aecgnoJW6fdXWO6agMEFUQAAABU"]
[Tue Apr 21 15:00:47.306547 2026] [:error] [pid 4822:tid 4835] [client 172.213.137.0:11044] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fe5.php"] [unique_id "aecgnyAteFQFwS_23JmWaQAAAUk"]
[Tue Apr 21 15:00:48.090742 2026] [:error] [pid 4822:tid 4826] [client 172.213.137.0:30815] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/uuu.php"] [unique_id "aecgoCAteFQFwS_23JmWbQAAAUA"]
[Tue Apr 21 15:00:49.324433 2026] [:error] [pid 35415:tid 35428] [client 172.213.137.0:30845] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/uuu.php"] [unique_id "aecgoUiqDinI4_22zzhHDgAAAME"]
[Tue Apr 21 15:00:50.643636 2026] [:error] [pid 4822:tid 4831] [client 172.213.137.0:11231] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/uuu.php"] [unique_id "aecgoiAteFQFwS_23JmWeQAAAUU"]
[Tue Apr 21 15:00:51.695644 2026] [:error] [pid 35320:tid 35337] [client 172.213.137.0:11415] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/uuu.php"] [unique_id "aecgo4JW6fdXWO6agMEFWAAAAAc"]
[Tue Apr 21 15:00:53.064660 2026] [:error] [pid 35322:tid 35373] [client 172.213.137.0:30802] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/no1.php"] [unique_id "aecgpaPoAfV40BTfVKyy-wAAAJA"]
[Tue Apr 21 15:00:54.351369 2026] [:error] [pid 35321:tid 35405] [client 172.213.137.0:32022] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/no1.php"] [unique_id "aecgpjeHLhVUuu8cVXyMJQAAAFU"]
[Tue Apr 21 15:00:55.195649 2026] [:error] [pid 4822:tid 4834] [client 172.213.137.0:11147] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/no1.php"] [unique_id "aecgpyAteFQFwS_23JmWgwAAAUg"]
[Tue Apr 21 15:00:56.537630 2026] [:error] [pid 35321:tid 35401] [client 172.213.137.0:30733] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/no1.php"] [unique_id "aecgqDeHLhVUuu8cVXyMKAAAAFE"]
[Tue Apr 21 15:00:57.510663 2026] [:error] [pid 4777:tid 4803] [client 172.213.137.0:11623] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/w2025.php"] [unique_id "aecgqaxXur6bykKyLZR0ZAAAAQ8"]
[Tue Apr 21 15:00:58.423707 2026] [proxy_fcgi:error] [pid 4777:tid 4801] [client 172.213.137.0:31444] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:00:58.661049 2026] [proxy_fcgi:error] [pid 4777:tid 4789] [client 172.213.137.0:31444] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:00:58.899052 2026] [proxy_fcgi:error] [pid 4777:tid 4809] [client 172.213.137.0:31444] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:00:59.139626 2026] [proxy_fcgi:error] [pid 4777:tid 4804] [client 172.213.137.0:31444] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:00:59.443925 2026] [proxy_fcgi:error] [pid 4777:tid 4788] [client 172.213.137.0:31444] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:01:00.033739 2026] [proxy_fcgi:error] [pid 4777:tid 4798] [client 172.213.137.0:31444] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:01:00.274510 2026] [proxy_fcgi:error] [pid 4777:tid 4790] [client 172.213.137.0:31444] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:01:00.512305 2026] [proxy_fcgi:error] [pid 4777:tid 4793] [client 172.213.137.0:31444] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:01:00.751497 2026] [proxy_fcgi:error] [pid 4777:tid 4808] [client 172.213.137.0:31444] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:01:00.988354 2026] [proxy_fcgi:error] [pid 4777:tid 4794] [client 172.213.137.0:31444] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:01:01.221905 2026] [:error] [pid 4777:tid 4807] [client 172.213.137.0:31444] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/style.php"] [unique_id "aecgraxXur6bykKyLZR0cgAAARM"]
[Tue Apr 21 15:01:02.815329 2026] [:error] [pid 4823:tid 4877] [client 172.213.137.0:30790] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/style.php"] [unique_id "aecgrvc8mke3PfHqsxGTVwAAAZg"]
[Tue Apr 21 15:01:03.902921 2026] [:error] [pid 4823:tid 4876] [client 172.213.137.0:11400] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/style.php"] [unique_id "aecgr_c8mke3PfHqsxGTWwAAAZc"]
[Tue Apr 21 15:01:04.494985 2026] [:error] [pid 4777:tid 4802] [client 172.213.137.0:33557] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/style.php"] [unique_id "aecgsKxXur6bykKyLZR0dQAAAQ4"]
[Tue Apr 21 15:01:05.762584 2026] [:error] [pid 35415:tid 35438] [client 172.213.137.0:11198] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/av.php"] [unique_id "aecgsUiqDinI4_22zzhHFAAAAMs"]
[Tue Apr 21 15:01:06.512173 2026] [:error] [pid 4777:tid 4791] [client 172.213.137.0:31452] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/av.php"] [unique_id "aecgsqxXur6bykKyLZR0dgAAAQM"]
[Tue Apr 21 15:01:07.313674 2026] [:error] [pid 4822:tid 4849] [client 172.213.137.0:31473] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/av.php"] [unique_id "aecgsyAteFQFwS_23JmWnQAAAVc"]
[Tue Apr 21 15:01:08.120110 2026] [:error] [pid 5377:tid 5400] [client 172.213.137.0:30839] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/av.php"] [unique_id "aecgtLBKychFlrHBdvvGDQAAAc4"]
[Tue Apr 21 15:01:08.925896 2026] [:error] [pid 5377:tid 5391] [client 172.213.137.0:31472] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aecgtLBKychFlrHBdvvGEQAAAcU"]
[Tue Apr 21 15:01:09.845855 2026] [:error] [pid 4823:tid 4860] [client 172.213.137.0:11139] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aecgtfc8mke3PfHqsxGTawAAAYc"]
[Tue Apr 21 15:01:10.707021 2026] [:error] [pid 35415:tid 35436] [client 172.213.137.0:30748] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aecgtkiqDinI4_22zzhHGQAAAMk"]
[Tue Apr 21 15:01:11.318408 2026] [:error] [pid 35415:tid 35434] [client 172.213.137.0:31467] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aecgt0iqDinI4_22zzhHGgAAAMc"]
[Tue Apr 21 15:01:12.357317 2026] [:error] [pid 35320:tid 35342] [client 172.213.137.0:30805] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-act.php"] [unique_id "aecguIJW6fdXWO6agMEFdQAAAAw"]
[Tue Apr 21 15:01:12.939380 2026] [:error] [pid 35322:tid 35370] [client 172.213.137.0:11144] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-act.php"] [unique_id "aecguKPoAfV40BTfVKyzAQAAAI0"]
[Tue Apr 21 15:01:13.874023 2026] [:error] [pid 35320:tid 35331] [client 172.213.137.0:30762] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-act.php"] [unique_id "aecguYJW6fdXWO6agMEFfQAAAAE"]
[Tue Apr 21 15:01:14.413810 2026] [:error] [pid 4823:tid 4869] [client 172.213.137.0:11418] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-act.php"] [unique_id "aecguvc8mke3PfHqsxGTeAAAAZA"]
[Tue Apr 21 15:01:14.969732 2026] [:error] [pid 4823:tid 4877] [client 172.213.137.0:11057] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aaa.php"] [unique_id "aecguvc8mke3PfHqsxGTfQAAAZg"]
[Tue Apr 21 15:01:15.581675 2026] [:error] [pid 35322:tid 35374] [client 172.213.137.0:33551] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aaa.php"] [unique_id "aecgu6PoAfV40BTfVKyzCgAAAJE"]
[Tue Apr 21 15:01:16.213879 2026] [:error] [pid 4823:tid 4870] [client 172.213.137.0:32060] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aaa.php"] [unique_id "aecgvPc8mke3PfHqsxGTgwAAAZE"]
[Tue Apr 21 15:01:16.898302 2026] [:error] [pid 35415:tid 35446] [client 172.213.137.0:11643] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aaa.php"] [unique_id "aecgvEiqDinI4_22zzhHIAAAANM"]
[Tue Apr 21 15:01:17.624330 2026] [:error] [pid 35322:tid 35363] [client 172.213.137.0:11609] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aecgvaPoAfV40BTfVKyzCwAAAIY"]
[Tue Apr 21 15:01:18.156252 2026] [:error] [pid 35415:tid 35442] [client 172.213.137.0:11397] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aecgvkiqDinI4_22zzhHJgAAAM8"]
[Tue Apr 21 15:01:18.749308 2026] [:error] [pid 35415:tid 35434] [client 172.213.137.0:11037] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aecgvkiqDinI4_22zzhHKgAAAMc"]
[Tue Apr 21 15:01:19.550245 2026] [:error] [pid 5377:tid 5402] [client 172.213.137.0:11190] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aecgv7BKychFlrHBdvvGKwAAAdA"]
[Tue Apr 21 15:01:20.720274 2026] [:error] [pid 4777:tid 4791] [client 172.213.137.0:31452] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aecgwKxXur6bykKyLZR0ggAAAQM"]
[Tue Apr 21 15:01:21.555824 2026] [:error] [pid 4777:tid 4788] [client 172.213.137.0:11150] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aecgwaxXur6bykKyLZR0hgAAAQA"]
[Tue Apr 21 15:01:22.108656 2026] [:error] [pid 4823:tid 4859] [client 172.213.137.0:11410] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aecgwvc8mke3PfHqsxGThQAAAYY"]
[Tue Apr 21 15:01:22.822584 2026] [:error] [pid 35415:tid 35430] [client 172.213.137.0:11028] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aecgwkiqDinI4_22zzhHMgAAAMM"]
[Tue Apr 21 15:01:23.394739 2026] [:error] [pid 4823:tid 4874] [client 172.213.137.0:30780] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sbhu.php"] [unique_id "aecgw_c8mke3PfHqsxGTigAAAZU"]
[Tue Apr 21 15:01:24.124161 2026] [:error] [pid 35415:tid 35432] [client 172.213.137.0:31448] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sbhu.php"] [unique_id "aecgxEiqDinI4_22zzhHMwAAAMU"]
[Tue Apr 21 15:01:24.878966 2026] [:error] [pid 5377:tid 5402] [client 172.213.137.0:31477] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sbhu.php"] [unique_id "aecgxLBKychFlrHBdvvGOAAAAdA"]
[Tue Apr 21 15:01:25.541990 2026] [:error] [pid 4777:tid 4804] [client 172.213.137.0:11624] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sbhu.php"] [unique_id "aecgxaxXur6bykKyLZR0jwAAARA"]
[Tue Apr 21 15:01:26.066966 2026] [:error] [pid 4777:tid 4808] [client 172.213.137.0:11020] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-blog.php"] [unique_id "aecgxqxXur6bykKyLZR0kAAAARQ"]
[Tue Apr 21 15:01:26.746312 2026] [:error] [pid 4777:tid 4809] [client 172.213.137.0:11423] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-blog.php"] [unique_id "aecgxqxXur6bykKyLZR0lAAAARU"]
[Tue Apr 21 15:01:27.395722 2026] [:error] [pid 4822:tid 4830] [client 172.213.137.0:30763] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-blog.php"] [unique_id "aecgxyAteFQFwS_23JmWrgAAAUQ"]
[Tue Apr 21 15:01:28.064710 2026] [:error] [pid 4822:tid 4849] [client 172.213.137.0:31439] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-blog.php"] [unique_id "aecgyCAteFQFwS_23JmWsgAAAVc"]
[Tue Apr 21 15:01:28.788137 2026] [:error] [pid 5377:tid 5407] [client 172.213.137.0:31469] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aecgyLBKychFlrHBdvvGPgAAAdU"]
[Tue Apr 21 15:01:29.717327 2026] [:error] [pid 5377:tid 5406] [client 172.213.137.0:11193] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aecgybBKychFlrHBdvvGQAAAAdQ"]
[Tue Apr 21 15:01:30.497412 2026] [:error] [pid 35320:tid 35339] [client 172.213.137.0:30731] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aecgyoJW6fdXWO6agMEFiQAAAAk"]
[Tue Apr 21 15:01:31.172737 2026] [:error] [pid 4823:tid 4873] [client 172.213.137.0:11405] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aecgy_c8mke3PfHqsxGTjAAAAZQ"]
[Tue Apr 21 15:01:31.889395 2026] [:error] [pid 4823:tid 4872] [client 172.213.137.0:30728] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "aecgy_c8mke3PfHqsxGTjgAAAZM"]
[Tue Apr 21 15:01:32.635963 2026] [:error] [pid 4822:tid 4843] [client 172.213.137.0:11023] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "aecgzCAteFQFwS_23JmWwQAAAVE"]
[Tue Apr 21 15:01:33.262041 2026] [:error] [pid 4823:tid 4865] [client 172.213.137.0:30838] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "aecgzfc8mke3PfHqsxGTkwAAAYw"]
[Tue Apr 21 15:01:33.864718 2026] [:error] [pid 5377:tid 5394] [client 172.213.137.0:32846] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "aecgzbBKychFlrHBdvvGSwAAAcg"]
[Tue Apr 21 15:01:34.543733 2026] [:error] [pid 5377:tid 5403] [client 172.213.137.0:11407] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ms-edit.php"] [unique_id "aecgzrBKychFlrHBdvvGTwAAAdE"]
[Tue Apr 21 15:01:35.328254 2026] [:error] [pid 4823:tid 4863] [client 172.213.137.0:11008] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ms-edit.php"] [unique_id "aecgz_c8mke3PfHqsxGTmAAAAYo"]
[Tue Apr 21 15:01:36.221460 2026] [:error] [pid 4823:tid 4877] [client 172.213.137.0:10644] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ms-edit.php"] [unique_id "aecg0Pc8mke3PfHqsxGTmgAAAZg"]
[Tue Apr 21 15:01:36.938418 2026] [:error] [pid 4823:tid 4868] [client 172.213.137.0:11169] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ms-edit.php"] [unique_id "aecg0Pc8mke3PfHqsxGTnQAAAY8"]
[Tue Apr 21 15:01:37.756844 2026] [:error] [pid 5377:tid 5402] [client 172.213.137.0:33583] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/adminfuns.php"] [unique_id "aecg0bBKychFlrHBdvvGWwAAAdA"]
[Tue Apr 21 15:01:39.553634 2026] [:error] [pid 4823:tid 4864] [client 172.213.137.0:33552] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/adminfuns.php"] [unique_id "aecg0_c8mke3PfHqsxGToQAAAYs"]
[Tue Apr 21 15:01:40.465446 2026] [:error] [pid 35415:tid 35446] [client 172.213.137.0:31428] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/adminfuns.php"] [unique_id "aecg1EiqDinI4_22zzhHQwAAANM"]
[Tue Apr 21 15:01:41.622409 2026] [:error] [pid 4823:tid 4856] [client 172.213.137.0:10688] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/adminfuns.php"] [unique_id "aecg1fc8mke3PfHqsxGTqwAAAYM"]
[Tue Apr 21 15:01:43.473295 2026] [:error] [pid 35321:tid 35401] [client 172.213.137.0:11140] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/goods.php"] [unique_id "aecg1zeHLhVUuu8cVXyMRgAAAFE"]
[Tue Apr 21 15:01:45.452338 2026] [:error] [pid 4777:tid 4794] [client 172.213.137.0:30800] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/goods.php"] [unique_id "aecg2axXur6bykKyLZR0oQAAAQY"]
[Tue Apr 21 15:01:45.998403 2026] [:error] [pid 5377:tid 5401] [client 172.213.137.0:10498] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/goods.php"] [unique_id "aecg2bBKychFlrHBdvvGagAAAc8"]
[Tue Apr 21 15:01:46.887069 2026] [:error] [pid 4822:tid 4839] [client 172.213.137.0:30840] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/goods.php"] [unique_id "aecg2iAteFQFwS_23JmW0gAAAU0"]
[Tue Apr 21 15:01:47.797802 2026] [:error] [pid 35320:tid 35343] [client 172.213.137.0:31469] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ms-edit.php"] [unique_id "aecg24JW6fdXWO6agMEFowAAAA0"]
[Tue Apr 21 15:01:48.873670 2026] [:error] [pid 4823:tid 4859] [client 172.213.137.0:11192] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ms-edit.php"] [unique_id "aecg3Pc8mke3PfHqsxGTvwAAAYY"]
[Tue Apr 21 15:01:49.513828 2026] [:error] [pid 4823:tid 4858] [client 172.213.137.0:11413] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ms-edit.php"] [unique_id "aecg3fc8mke3PfHqsxGTwwAAAYU"]
[Tue Apr 21 15:01:50.482068 2026] [:error] [pid 5377:tid 5406] [client 172.213.137.0:32891] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ms-edit.php"] [unique_id "aecg3rBKychFlrHBdvvGcgAAAdQ"]
[Tue Apr 21 15:01:51.223735 2026] [:error] [pid 35415:tid 35449] [client 172.213.137.0:30770] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/222.php"] [unique_id "aecg30iqDinI4_22zzhHRAAAANY"]
[Tue Apr 21 15:01:51.853104 2026] [:error] [pid 35321:tid 35387] [client 172.213.137.0:11395] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/222.php"] [unique_id "aecg3zeHLhVUuu8cVXyMRwAAAEM"]
[Tue Apr 21 15:01:52.668073 2026] [:error] [pid 4822:tid 4850] [client 172.213.137.0:11153] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/222.php"] [unique_id "aecg4CAteFQFwS_23JmW5QAAAVg"]
[Tue Apr 21 15:01:53.273907 2026] [:error] [pid 35320:tid 35338] [client 172.213.137.0:11392] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/222.php"] [unique_id "aecg4YJW6fdXWO6agMEFrgAAAAg"]
[Tue Apr 21 15:01:53.892737 2026] [:error] [pid 5377:tid 5395] [client 172.213.137.0:30736] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aecg4bBKychFlrHBdvvGgAAAAck"]
[Tue Apr 21 15:01:55.106251 2026] [:error] [pid 5377:tid 5400] [client 172.213.137.0:30734] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aecg47BKychFlrHBdvvGgwAAAc4"]
[Tue Apr 21 15:01:55.807464 2026] [:error] [pid 5377:tid 5392] [client 172.213.137.0:11204] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aecg47BKychFlrHBdvvGhwAAAcY"]
[Tue Apr 21 15:01:56.510888 2026] [:error] [pid 4823:tid 4860] [client 172.213.137.0:11045] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aecg5Pc8mke3PfHqsxGT7AAAAYc"]
[Tue Apr 21 15:01:57.049056 2026] [:error] [pid 4822:tid 4846] [client 172.213.137.0:32030] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fff.php"] [unique_id "aecg5SAteFQFwS_23JmW8gAAAVQ"]
[Tue Apr 21 15:01:57.594726 2026] [:error] [pid 4822:tid 4839] [client 172.213.137.0:11450] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fff.php"] [unique_id "aecg5SAteFQFwS_23JmW9QAAAU0"]
[Tue Apr 21 15:01:58.170601 2026] [:error] [pid 4822:tid 4841] [client 172.213.137.0:30732] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fff.php"] [unique_id "aecg5iAteFQFwS_23JmW-QAAAU8"]
[Tue Apr 21 15:01:58.821353 2026] [:error] [pid 35415:tid 35450] [client 172.213.137.0:11595] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fff.php"] [unique_id "aecg5kiqDinI4_22zzhHRwAAANc"]
[Tue Apr 21 15:01:59.342901 2026] [:error] [pid 5377:tid 5402] [client 172.213.137.0:30720] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/"] [unique_id "aecg57BKychFlrHBdvvGkgAAAdA"]
[Tue Apr 21 15:01:59.912052 2026] [:error] [pid 35322:tid 35371] [client 172.213.137.0:32002] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/"] [unique_id "aecg56PoAfV40BTfVKyzHQAAAI4"]
[Tue Apr 21 15:02:00.732668 2026] [proxy_fcgi:error] [pid 4822:tid 4844] [client 172.213.137.0:10790] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:02:00.972651 2026] [proxy_fcgi:error] [pid 4822:tid 4835] [client 172.213.137.0:10790] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:02:01.212780 2026] [proxy_fcgi:error] [pid 4822:tid 4846] [client 172.213.137.0:10790] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:02:02.040330 2026] [proxy_fcgi:error] [pid 4822:tid 4828] [client 172.213.137.0:10790] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:02:04.096213 2026] [proxy_fcgi:error] [pid 4822:tid 4828] [client 172.213.137.0:10790] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:02:04.765281 2026] [proxy_fcgi:error] [pid 4822:tid 4838] [client 172.213.137.0:10790] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:02:04.998612 2026] [:error] [pid 4822:tid 4846] [client 172.213.137.0:10790] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aecg7CAteFQFwS_23JmXIQAAAVQ"]
[Tue Apr 21 15:02:05.628952 2026] [:error] [pid 35322:tid 35361] [client 172.213.137.0:11189] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aecg7aPoAfV40BTfVKyzLwAAAIQ"]
[Tue Apr 21 15:02:06.186490 2026] [:error] [pid 4777:tid 4799] [client 172.213.137.0:30778] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aecg7qxXur6bykKyLZR0swAAAQs"]
[Tue Apr 21 15:02:06.879913 2026] [:error] [pid 35320:tid 35350] [client 172.213.137.0:30803] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aecg7oJW6fdXWO6agMEFxAAAABQ"]
[Tue Apr 21 15:02:07.491103 2026] [:error] [pid 5377:tid 5402] [client 172.213.137.0:11586] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/av.php"] [unique_id "aecg77BKychFlrHBdvvGuQAAAdA"]
[Tue Apr 21 15:02:08.557169 2026] [:error] [pid 4822:tid 4846] [client 172.213.137.0:31447] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/av.php"] [unique_id "aecg8CAteFQFwS_23JmXJAAAAVQ"]
[Tue Apr 21 15:02:09.431844 2026] [:error] [pid 4823:tid 4857] [client 172.213.137.0:33578] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/av.php"] [unique_id "aecg8fc8mke3PfHqsxGUOgAAAYQ"]
[Tue Apr 21 15:02:11.185933 2026] [:error] [pid 4822:tid 4830] [client 172.213.137.0:30795] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/av.php"] [unique_id "aecg8yAteFQFwS_23JmXPAAAAUQ"]
[Tue Apr 21 15:02:12.143319 2026] [:error] [pid 5377:tid 5402] [client 172.213.137.0:11175] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/abcd.php"] [unique_id "aecg9LBKychFlrHBdvvGwwAAAdA"]
[Tue Apr 21 15:02:12.872212 2026] [:error] [pid 4822:tid 4833] [client 172.213.137.0:30832] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/abcd.php"] [unique_id "aecg9CAteFQFwS_23JmXSgAAAUc"]
[Tue Apr 21 15:02:14.376479 2026] [:error] [pid 35320:tid 35341] [client 172.213.137.0:11016] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/abcd.php"] [unique_id "aecg9oJW6fdXWO6agMEF0AAAAAs"]
[Tue Apr 21 15:02:15.606308 2026] [:error] [pid 4822:tid 4840] [client 172.213.137.0:11034] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/abcd.php"] [unique_id "aecg9yAteFQFwS_23JmXWwAAAU4"]
[Tue Apr 21 15:02:17.423161 2026] [:error] [pid 5377:tid 5397] [client 172.213.137.0:11411] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fi.php"] [unique_id "aecg-bBKychFlrHBdvvG0AAAAcs"]
[Tue Apr 21 15:02:19.546610 2026] [:error] [pid 35415:tid 35440] [client 172.213.137.0:11426] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fi.php"] [unique_id "aecg-0iqDinI4_22zzhHZAAAAM0"]
[Tue Apr 21 15:02:20.527183 2026] [:error] [pid 35415:tid 35431] [client 172.213.137.0:33545] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fi.php"] [unique_id "aecg_EiqDinI4_22zzhHagAAAMQ"]
[Tue Apr 21 15:02:21.675790 2026] [:error] [pid 5377:tid 5392] [client 172.213.137.0:11174] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fi.php"] [unique_id "aecg_bBKychFlrHBdvvG1QAAAcY"]
[Tue Apr 21 15:02:22.721211 2026] [:error] [pid 4822:tid 4845] [client 172.213.137.0:11438] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a1.php"] [unique_id "aecg_iAteFQFwS_23JmXhAAAAVM"]
[Tue Apr 21 15:02:23.291350 2026] [:error] [pid 4822:tid 4834] [client 172.213.137.0:30723] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a1.php"] [unique_id "aecg_yAteFQFwS_23JmXiAAAAUg"]
[Tue Apr 21 15:02:23.843406 2026] [:error] [pid 35321:tid 35402] [client 172.213.137.0:11070] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a1.php"] [unique_id "aecg_zeHLhVUuu8cVXyMWQAAAFI"]
[Tue Apr 21 15:02:24.553368 2026] [:error] [pid 5377:tid 5399] [client 172.213.137.0:11593] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a1.php"] [unique_id "aechALBKychFlrHBdvvG2QAAAc0"]
[Tue Apr 21 15:02:25.360577 2026] [:error] [pid 35320:tid 35351] [client 172.213.137.0:10791] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/update/f35.php"] [unique_id "aechAYJW6fdXWO6agMEF2gAAABU"]
[Tue Apr 21 15:02:25.953890 2026] [:error] [pid 35322:tid 35379] [client 172.213.137.0:31484] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/update/f35.php"] [unique_id "aechAaPoAfV40BTfVKyzQwAAAJY"]
[Tue Apr 21 15:02:26.774359 2026] [:error] [pid 35321:tid 35399] [client 172.213.137.0:11626] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/update/f35.php"] [unique_id "aechAjeHLhVUuu8cVXyMXQAAAE8"]
[Tue Apr 21 15:02:27.364644 2026] [:error] [pid 5377:tid 5387] [client 172.213.137.0:30775] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/update/f35.php"] [unique_id "aechA7BKychFlrHBdvvG3AAAAcE"]
[Tue Apr 21 15:02:27.993557 2026] [:error] [pid 4822:tid 4842] [client 172.213.137.0:33598] [client 172.213.137.0] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aechAyAteFQFwS_23JmXkwAAAVA"]
[Tue Apr 21 15:02:28.545948 2026] [:error] [pid 35321:tid 35384] [client 172.213.137.0:10745] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f35.php"] [unique_id "aechBDeHLhVUuu8cVXyMYQAAAEA"]
[Tue Apr 21 15:02:29.261133 2026] [:error] [pid 35321:tid 35403] [client 172.213.137.0:33541] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f35.php"] [unique_id "aechBTeHLhVUuu8cVXyMZAAAAFM"]
[Tue Apr 21 15:02:29.790899 2026] [:error] [pid 35320:tid 35333] [client 172.213.137.0:11032] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f35.php"] [unique_id "aechBYJW6fdXWO6agMEF4QAAAAM"]
[Tue Apr 21 15:02:30.415265 2026] [:error] [pid 35415:tid 35444] [client 172.213.137.0:11600] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f35.php"] [unique_id "aechBkiqDinI4_22zzhHdQAAANE"]
[Tue Apr 21 15:02:31.075436 2026] [:error] [pid 4777:tid 4804] [client 172.213.137.0:11186] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aechB6xXur6bykKyLZR0xwAAARA"]
[Tue Apr 21 15:02:31.620591 2026] [:error] [pid 35321:tid 35406] [client 172.213.137.0:30788] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aechBzeHLhVUuu8cVXyMaAAAAFY"]
[Tue Apr 21 15:02:32.118355 2026] [:error] [pid 35320:tid 35335] [client 172.213.137.0:10769] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aechCIJW6fdXWO6agMEF5QAAAAU"]
[Tue Apr 21 15:02:32.903081 2026] [:error] [pid 35320:tid 35354] [client 172.213.137.0:30754] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aechCIJW6fdXWO6agMEF6QAAABg"]
[Tue Apr 21 15:02:33.560857 2026] [:error] [pid 35320:tid 35350] [client 172.213.137.0:10774] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aechCYJW6fdXWO6agMEF6wAAABQ"]
[Tue Apr 21 15:02:34.195876 2026] [:error] [pid 4823:tid 4857] [client 172.213.137.0:11636] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aechCvc8mke3PfHqsxGUVAAAAYQ"]
[Tue Apr 21 15:02:34.956547 2026] [:error] [pid 35415:tid 35439] [client 172.213.137.0:33542] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aechCkiqDinI4_22zzhHfAAAAMw"]
[Tue Apr 21 15:02:35.498598 2026] [:error] [pid 4823:tid 4865] [client 172.213.137.0:11060] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aechC_c8mke3PfHqsxGUWQAAAYw"]
[Tue Apr 21 15:02:36.188565 2026] [:error] [pid 4822:tid 4830] [client 172.213.137.0:30767] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/k.php"] [unique_id "aechDCAteFQFwS_23JmXnAAAAUQ"]
[Tue Apr 21 15:02:36.900418 2026] [:error] [pid 4777:tid 4808] [client 172.213.137.0:30827] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/k.php"] [unique_id "aechDKxXur6bykKyLZR0yQAAARQ"]
[Tue Apr 21 15:02:37.835579 2026] [:error] [pid 4777:tid 4800] [client 172.213.137.0:11620] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/k.php"] [unique_id "aechDaxXur6bykKyLZR0ywAAAQw"]
[Tue Apr 21 15:02:38.327708 2026] [:error] [pid 4777:tid 4791] [client 172.213.137.0:10729] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/k.php"] [unique_id "aechDqxXur6bykKyLZR0zAAAAQM"]
[Tue Apr 21 15:02:38.853087 2026] [:error] [pid 4823:tid 4868] [client 172.213.137.0:11069] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dev.php"] [unique_id "aechDvc8mke3PfHqsxGUaAAAAY8"]
[Tue Apr 21 15:02:39.552365 2026] [:error] [pid 4822:tid 4826] [client 172.213.137.0:32845] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dev.php"] [unique_id "aechDyAteFQFwS_23JmXoAAAAUA"]
[Tue Apr 21 15:02:40.281614 2026] [:error] [pid 4822:tid 4829] [client 172.213.137.0:10734] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dev.php"] [unique_id "aechECAteFQFwS_23JmXoQAAAUM"]
[Tue Apr 21 15:02:41.349407 2026] [:error] [pid 4822:tid 4834] [client 172.213.137.0:11440] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dev.php"] [unique_id "aechESAteFQFwS_23JmXpwAAAUg"]
[Tue Apr 21 15:02:42.045689 2026] [:error] [pid 4777:tid 4804] [client 172.213.137.0:30746] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bal.php"] [unique_id "aechEqxXur6bykKyLZR00QAAARA"]
[Tue Apr 21 15:02:42.844250 2026] [:error] [pid 4823:tid 4861] [client 172.213.137.0:32016] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bal.php"] [unique_id "aechEvc8mke3PfHqsxGUgAAAAYg"]
[Tue Apr 21 15:02:43.367411 2026] [:error] [pid 4823:tid 4874] [client 172.213.137.0:11149] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bal.php"] [unique_id "aechE_c8mke3PfHqsxGUgQAAAZU"]
[Tue Apr 21 15:02:43.926192 2026] [:error] [pid 35321:tid 35389] [client 172.213.137.0:31454] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bal.php"] [unique_id "aechEzeHLhVUuu8cVXyMegAAAEU"]
[Tue Apr 21 15:02:44.620930 2026] [:error] [pid 35320:tid 35346] [client 172.213.137.0:10502] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/in.php"] [unique_id "aechFIJW6fdXWO6agMEF9wAAABA"]
[Tue Apr 21 15:02:45.155412 2026] [:error] [pid 35321:tid 35384] [client 172.213.137.0:30757] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/in.php"] [unique_id "aechFTeHLhVUuu8cVXyMfwAAAEA"]
[Tue Apr 21 15:02:45.822598 2026] [:error] [pid 4823:tid 4859] [client 172.213.137.0:31466] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/in.php"] [unique_id "aechFfc8mke3PfHqsxGUhgAAAYY"]
[Tue Apr 21 15:02:46.357427 2026] [:error] [pid 5377:tid 5392] [client 172.213.137.0:11433] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/in.php"] [unique_id "aechFrBKychFlrHBdvvG8AAAAcY"]
[Tue Apr 21 15:02:46.978666 2026] [:error] [pid 5377:tid 5398] [client 172.213.137.0:10732] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gssdd.php"] [unique_id "aechFrBKychFlrHBdvvG9AAAAcw"]
[Tue Apr 21 15:02:47.586571 2026] [:error] [pid 4822:tid 4838] [client 172.213.137.0:11584] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gssdd.php"] [unique_id "aechFyAteFQFwS_23JmXuwAAAUw"]
[Tue Apr 21 15:02:48.111250 2026] [:error] [pid 5377:tid 5404] [client 172.213.137.0:31426] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gssdd.php"] [unique_id "aechGLBKychFlrHBdvvG-gAAAdI"]
[Tue Apr 21 15:02:48.626960 2026] [:error] [pid 5377:tid 5401] [client 172.213.137.0:11428] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gssdd.php"] [unique_id "aechGLBKychFlrHBdvvG_QAAAc8"]
[Tue Apr 21 15:02:49.320511 2026] [:error] [pid 4777:tid 4790] [client 172.213.137.0:11165] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "aechGaxXur6bykKyLZR02QAAAQI"]
[Tue Apr 21 15:02:50.338609 2026] [:error] [pid 35320:tid 35337] [client 172.213.137.0:30820] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "aechGoJW6fdXWO6agMEF_QAAAAc"]
[Tue Apr 21 15:02:51.113642 2026] [:error] [pid 5377:tid 5390] [client 172.213.137.0:31464] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "aechG7BKychFlrHBdvvHBAAAAcQ"]
[Tue Apr 21 15:02:51.733966 2026] [:error] [pid 4823:tid 4859] [client 172.213.137.0:11448] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "aechG_c8mke3PfHqsxGUiQAAAYY"]
[Tue Apr 21 15:02:52.260363 2026] [:error] [pid 35321:tid 35402] [client 172.213.137.0:11638] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bs1.php"] [unique_id "aechHDeHLhVUuu8cVXyMhAAAAFI"]
[Tue Apr 21 15:02:52.877875 2026] [:error] [pid 35322:tid 35378] [client 172.213.137.0:32004] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bs1.php"] [unique_id "aechHKPoAfV40BTfVKyzWAAAAJU"]
[Tue Apr 21 15:02:53.589675 2026] [:error] [pid 35321:tid 35392] [client 172.213.137.0:11047] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bs1.php"] [unique_id "aechHTeHLhVUuu8cVXyMhwAAAEg"]
[Tue Apr 21 15:02:54.086774 2026] [:error] [pid 4777:tid 4806] [client 172.213.137.0:32892] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bs1.php"] [unique_id "aechHqxXur6bykKyLZR03wAAARI"]
[Tue Apr 21 15:02:54.584948 2026] [:error] [pid 35321:tid 35393] [client 172.213.137.0:30776] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aechHjeHLhVUuu8cVXyMiQAAAEk"]
[Tue Apr 21 15:02:55.335559 2026] [:error] [pid 35320:tid 35340] [client 172.213.137.0:11636] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aechH4JW6fdXWO6agMEGDQAAAAo"]
[Tue Apr 21 15:02:55.977668 2026] [:error] [pid 35320:tid 35343] [client 172.213.137.0:11031] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aechH4JW6fdXWO6agMEGEQAAAA0"]
[Tue Apr 21 15:02:56.489471 2026] [:error] [pid 5377:tid 5404] [client 172.213.137.0:31474] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aechILBKychFlrHBdvvHDwAAAdI"]
[Tue Apr 21 15:02:56.985802 2026] [:error] [pid 5377:tid 5409] [client 172.213.137.0:11446] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/axx.php"] [unique_id "aechILBKychFlrHBdvvHEAAAAdc"]
[Tue Apr 21 15:02:57.581695 2026] [:error] [pid 4777:tid 4807] [client 172.213.137.0:11628] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/axx.php"] [unique_id "aechIaxXur6bykKyLZR05gAAARM"]
[Tue Apr 21 15:02:58.062703 2026] [:error] [pid 4823:tid 4865] [client 172.213.137.0:10741] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/axx.php"] [unique_id "aechIvc8mke3PfHqsxGUngAAAYw"]
[Tue Apr 21 15:02:58.760214 2026] [:error] [pid 35321:tid 35394] [client 172.213.137.0:31484] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/axx.php"] [unique_id "aechIjeHLhVUuu8cVXyMkQAAAEo"]
[Tue Apr 21 15:02:59.554925 2026] [:error] [pid 4777:tid 4811] [client 172.213.137.0:11235] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/alfashell.php"] [unique_id "aechI6xXur6bykKyLZR06AAAARc"]
[Tue Apr 21 15:03:00.095439 2026] [:error] [pid 4822:tid 4826] [client 172.213.137.0:33579] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/alfashell.php"] [unique_id "aechJCAteFQFwS_23JmXywAAAUA"]
[Tue Apr 21 15:03:00.956758 2026] [:error] [pid 35321:tid 35402] [client 172.213.137.0:30785] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/alfashell.php"] [unique_id "aechJDeHLhVUuu8cVXyMlAAAAFI"]
[Tue Apr 21 15:03:01.737969 2026] [:error] [pid 35320:tid 35335] [client 172.213.137.0:33558] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/alfashell.php"] [unique_id "aechJYJW6fdXWO6agMEGGAAAAAU"]
[Tue Apr 21 15:03:02.298040 2026] [:error] [pid 35321:tid 35385] [client 172.213.137.0:10780] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gettest.php"] [unique_id "aechJjeHLhVUuu8cVXyMlwAAAEE"]
[Tue Apr 21 15:03:03.355078 2026] [:error] [pid 5377:tid 5390] [client 172.213.137.0:32048] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gettest.php"] [unique_id "aechJ7BKychFlrHBdvvHHwAAAcQ"]
[Tue Apr 21 15:03:03.932022 2026] [:error] [pid 35321:tid 35395] [client 172.213.137.0:30846] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gettest.php"] [unique_id "aechJzeHLhVUuu8cVXyMmQAAAEs"]
[Tue Apr 21 15:03:04.729454 2026] [proxy_fcgi:error] [pid 5377:tid 5401] [client 172.213.137.0:32857] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:03:04.968953 2026] [proxy_fcgi:error] [pid 5377:tid 5403] [client 172.213.137.0:32857] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:03:05.206625 2026] [proxy_fcgi:error] [pid 5377:tid 5395] [client 172.213.137.0:32857] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:03:05.447287 2026] [proxy_fcgi:error] [pid 5377:tid 5410] [client 172.213.137.0:32857] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:03:05.938939 2026] [proxy_fcgi:error] [pid 5377:tid 5404] [client 172.213.137.0:32857] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:03:06.260013 2026] [proxy_fcgi:error] [pid 5377:tid 5388] [client 172.213.137.0:32857] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:03:06.526004 2026] [proxy_fcgi:error] [pid 5377:tid 5405] [client 172.213.137.0:32857] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:03:06.764402 2026] [proxy_fcgi:error] [pid 5377:tid 5394] [client 172.213.137.0:32857] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:03:07.000689 2026] [proxy_fcgi:error] [pid 5377:tid 5408] [client 172.213.137.0:32857] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:03:07.253767 2026] [proxy_fcgi:error] [pid 5377:tid 5390] [client 172.213.137.0:32857] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:03:07.500680 2026] [:error] [pid 5377:tid 5399] [client 172.213.137.0:32857] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "aechK7BKychFlrHBdvvHQAAAAc0"]
[Tue Apr 21 15:03:08.197653 2026] [:error] [pid 4777:tid 4800] [client 172.213.137.0:10634] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "aechLKxXur6bykKyLZR08AAAAQw"]
[Tue Apr 21 15:03:08.932703 2026] [:error] [pid 35320:tid 35333] [client 172.213.137.0:11065] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "aechLIJW6fdXWO6agMEGGwAAAAM"]
[Tue Apr 21 15:03:09.826897 2026] [:error] [pid 4823:tid 4863] [client 172.213.137.0:10533] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "aechLfc8mke3PfHqsxGUsQAAAYo"]
[Tue Apr 21 15:03:10.559133 2026] [:error] [pid 4822:tid 4849] [client 172.213.137.0:32038] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/chosen.php"] [unique_id "aechLiAteFQFwS_23JmX7AAAAVc"]
[Tue Apr 21 15:03:11.322138 2026] [:error] [pid 5377:tid 5405] [client 172.213.137.0:11610] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/chosen.php"] [unique_id "aechL7BKychFlrHBdvvHRwAAAdM"]
[Tue Apr 21 15:03:11.936311 2026] [:error] [pid 35320:tid 35335] [client 172.213.137.0:30836] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/chosen.php"] [unique_id "aechL4JW6fdXWO6agMEGIAAAAAU"]
[Tue Apr 21 15:03:12.637764 2026] [:error] [pid 35321:tid 35396] [client 172.213.137.0:30784] [client 172.213.137.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/chosen.php"] [unique_id "aechMDeHLhVUuu8cVXyMoQAAAEw"]
[Tue Apr 21 15:33:49.028329 2026] [proxy_fcgi:error] [pid 35415:tid 35440] [client 185.82.72.109:52351] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:33:49.340172 2026] [proxy_fcgi:error] [pid 35415:tid 35449] [client 185.82.72.109:52351] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:33:57.463285 2026] [proxy_fcgi:error] [pid 35415:tid 35433] [client 185.82.72.109:52351] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:33:57.746283 2026] [proxy_fcgi:error] [pid 35415:tid 35429] [client 185.82.72.109:52351] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:33:58.050299 2026] [proxy_fcgi:error] [pid 35415:tid 35446] [client 185.82.72.109:52351] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:33:58.342351 2026] [proxy_fcgi:error] [pid 35415:tid 35444] [client 185.82.72.109:52351] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:33:58.620343 2026] [proxy_fcgi:error] [pid 35415:tid 35435] [client 185.82.72.109:52351] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:33:58.905294 2026] [proxy_fcgi:error] [pid 35415:tid 35438] [client 185.82.72.109:52351] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:33:59.177856 2026] [proxy_fcgi:error] [pid 35415:tid 35430] [client 185.82.72.109:52351] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:33:59.451548 2026] [:error] [pid 35415:tid 35432] [client 185.82.72.109:52351] [client 185.82.72.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dwelectservices.com.au"] [uri "/tiny.php"] [unique_id "aecoZ0iqDinI4_22zzhRYwAAAMU"]
[Tue Apr 21 15:34:00.059301 2026] [proxy_fcgi:error] [pid 53832:tid 53859] [client 185.82.72.108:56751] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:34:00.329471 2026] [:error] [pid 53832:tid 53835] [client 185.82.72.108:56751] [client 185.82.72.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dwelectservices.com.au"] [uri "/fm.php"] [unique_id "aecoaNzkuxsE_OhM9UIMzAAAAkA"]
[Tue Apr 21 15:34:00.947297 2026] [proxy_fcgi:error] [pid 35321:tid 35388] [client 45.86.200.231:63839] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:34:01.218835 2026] [proxy_fcgi:error] [pid 35321:tid 35384] [client 45.86.200.231:63839] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:34:01.508294 2026] [proxy_fcgi:error] [pid 35321:tid 35388] [client 45.86.200.231:63839] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:34:01.792301 2026] [proxy_fcgi:error] [pid 35321:tid 35403] [client 45.86.200.231:63839] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:34:02.082653 2026] [proxy_fcgi:error] [pid 35321:tid 35404] [client 45.86.200.231:63839] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:34:02.352559 2026] [:error] [pid 35321:tid 35391] [client 45.86.200.231:63839] [client 45.86.200.231] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dwelectservices.com.au"] [uri "/filemanager.php"] [unique_id "aecoajeHLhVUuu8cVXyZSgAAAEc"]
[Tue Apr 21 15:34:02.895308 2026] [proxy_fcgi:error] [pid 35415:tid 35442] [client 45.86.200.225:54879] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:34:03.175146 2026] [proxy_fcgi:error] [pid 35415:tid 35448] [client 45.86.200.225:54879] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:34:03.463328 2026] [proxy_fcgi:error] [pid 35415:tid 35441] [client 45.86.200.225:54879] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:34:03.744306 2026] [proxy_fcgi:error] [pid 35415:tid 35439] [client 45.86.200.225:54879] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:34:04.019922 2026] [proxy_fcgi:error] [pid 35415:tid 35438] [client 45.86.200.225:54879] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:34:04.318389 2026] [proxy_fcgi:error] [pid 35415:tid 35432] [client 45.86.200.225:54879] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:34:04.607427 2026] [proxy_fcgi:error] [pid 35415:tid 35446] [client 45.86.200.225:54879] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:34:04.883406 2026] [:error] [pid 35415:tid 35435] [client 45.86.200.225:54879] [client 45.86.200.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dwelectservices.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aecobEiqDinI4_22zzhRkAAAAMg"]
[Tue Apr 21 15:34:05.450293 2026] [proxy_fcgi:error] [pid 35322:tid 35364] [client 185.82.72.108:40105] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:34:05.735289 2026] [proxy_fcgi:error] [pid 35322:tid 35370] [client 185.82.72.108:40105] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:34:06.012694 2026] [proxy_fcgi:error] [pid 35322:tid 35358] [client 185.82.72.108:40105] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:34:06.315290 2026] [proxy_fcgi:error] [pid 35322:tid 35367] [client 185.82.72.108:40105] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:34:06.605289 2026] [proxy_fcgi:error] [pid 35322:tid 35380] [client 185.82.72.108:40105] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:34:06.902323 2026] [proxy_fcgi:error] [pid 35322:tid 35360] [client 185.82.72.108:40105] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:34:07.175517 2026] [proxy_fcgi:error] [pid 35322:tid 35372] [client 185.82.72.108:40105] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:34:07.453285 2026] [proxy_fcgi:error] [pid 35322:tid 35370] [client 185.82.72.108:40105] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:34:07.736291 2026] [proxy_fcgi:error] [pid 35322:tid 35375] [client 185.82.72.108:40105] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:34:08.030302 2026] [proxy_fcgi:error] [pid 35322:tid 35359] [client 185.82.72.108:40105] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:34:08.325570 2026] [proxy_fcgi:error] [pid 35322:tid 35380] [client 185.82.72.108:40105] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:34:08.609551 2026] [proxy_fcgi:error] [pid 35322:tid 35360] [client 185.82.72.108:40105] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:34:08.892508 2026] [proxy_fcgi:error] [pid 35322:tid 35368] [client 185.82.72.108:40105] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:34:09.181339 2026] [proxy_fcgi:error] [pid 35322:tid 35372] [client 185.82.72.108:40105] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:34:09.464284 2026] [proxy_fcgi:error] [pid 35322:tid 35370] [client 185.82.72.108:40105] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:34:09.758563 2026] [proxy_fcgi:error] [pid 35322:tid 35375] [client 185.82.72.108:40105] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:34:10.037293 2026] [proxy_fcgi:error] [pid 35322:tid 35376] [client 185.82.72.108:40105] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:34:10.319808 2026] [proxy_fcgi:error] [pid 35322:tid 35367] [client 185.82.72.108:40105] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:34:10.602319 2026] [proxy_fcgi:error] [pid 35322:tid 35377] [client 185.82.72.108:40105] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:34:10.895358 2026] [proxy_fcgi:error] [pid 35322:tid 35364] [client 185.82.72.108:40105] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:34:11.186311 2026] [proxy_fcgi:error] [pid 35322:tid 35370] [client 185.82.72.108:40105] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:34:11.492304 2026] [proxy_fcgi:error] [pid 35322:tid 35375] [client 185.82.72.108:40105] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:34:11.774283 2026] [proxy_fcgi:error] [pid 35322:tid 35376] [client 185.82.72.108:40105] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:34:12.073361 2026] [proxy_fcgi:error] [pid 35322:tid 35367] [client 185.82.72.108:40105] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:34:12.355066 2026] [proxy_fcgi:error] [pid 35322:tid 35366] [client 185.82.72.108:40105] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:34:12.640326 2026] [proxy_fcgi:error] [pid 35322:tid 35373] [client 185.82.72.108:40105] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:34:12.922341 2026] [proxy_fcgi:error] [pid 35322:tid 35368] [client 185.82.72.108:40105] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:34:13.203309 2026] [proxy_fcgi:error] [pid 35322:tid 35361] [client 185.82.72.108:40105] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:34:13.484298 2026] [proxy_fcgi:error] [pid 35322:tid 35369] [client 185.82.72.108:40105] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:34:13.759301 2026] [proxy_fcgi:error] [pid 35322:tid 35375] [client 185.82.72.108:40105] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:34:14.038286 2026] [proxy_fcgi:error] [pid 35322:tid 35366] [client 185.82.72.108:40105] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:34:14.319767 2026] [proxy_fcgi:error] [pid 35322:tid 35360] [client 185.82.72.108:40105] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:34:14.603295 2026] [proxy_fcgi:error] [pid 35322:tid 35361] [client 185.82.72.108:40105] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:34:14.880941 2026] [proxy_fcgi:error] [pid 35322:tid 35369] [client 185.82.72.108:40105] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:34:15.161301 2026] [proxy_fcgi:error] [pid 35322:tid 35358] [client 185.82.72.108:40105] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:34:15.438293 2026] [proxy_fcgi:error] [pid 35322:tid 35374] [client 185.82.72.108:40105] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:34:15.713322 2026] [proxy_fcgi:error] [pid 35322:tid 35359] [client 185.82.72.108:40105] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:34:15.992300 2026] [proxy_fcgi:error] [pid 35322:tid 35365] [client 185.82.72.108:40105] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:34:16.265286 2026] [proxy_fcgi:error] [pid 35322:tid 35360] [client 185.82.72.108:40105] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:34:16.537283 2026] [proxy_fcgi:error] [pid 35322:tid 35380] [client 185.82.72.108:40105] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:34:16.830908 2026] [proxy_fcgi:error] [pid 35322:tid 35369] [client 185.82.72.108:40105] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:34:17.120309 2026] [proxy_fcgi:error] [pid 35322:tid 35379] [client 185.82.72.108:40105] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:34:17.410590 2026] [proxy_fcgi:error] [pid 35322:tid 35374] [client 185.82.72.108:40105] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:34:17.687291 2026] [proxy_fcgi:error] [pid 35322:tid 35362] [client 185.82.72.108:40105] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:34:17.963306 2026] [proxy_fcgi:error] [pid 35322:tid 35381] [client 185.82.72.108:40105] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:34:18.259305 2026] [proxy_fcgi:error] [pid 35322:tid 35360] [client 185.82.72.108:40105] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:34:18.540290 2026] [proxy_fcgi:error] [pid 35322:tid 35372] [client 185.82.72.108:40105] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:34:18.817934 2026] [proxy_fcgi:error] [pid 35322:tid 35369] [client 185.82.72.108:40105] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:34:19.105809 2026] [proxy_fcgi:error] [pid 35322:tid 35368] [client 185.82.72.108:40105] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:34:19.379326 2026] [proxy_fcgi:error] [pid 35322:tid 35358] [client 185.82.72.108:40105] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:34:19.663038 2026] [proxy_fcgi:error] [pid 35322:tid 35362] [client 185.82.72.108:40105] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:34:19.940721 2026] [proxy_fcgi:error] [pid 35322:tid 35366] [client 185.82.72.108:40105] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:34:20.232331 2026] [proxy_fcgi:error] [pid 35322:tid 35381] [client 185.82.72.108:40105] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:34:20.505188 2026] [proxy_fcgi:error] [pid 35322:tid 35376] [client 185.82.72.108:40105] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:34:20.780288 2026] [proxy_fcgi:error] [pid 35322:tid 35380] [client 185.82.72.108:40105] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:34:21.056346 2026] [proxy_fcgi:error] [pid 35322:tid 35371] [client 185.82.72.108:40105] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:34:21.335465 2026] [proxy_fcgi:error] [pid 35322:tid 35370] [client 185.82.72.108:40105] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:34:21.636336 2026] [proxy_fcgi:error] [pid 35322:tid 35377] [client 185.82.72.108:40105] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:34:21.911200 2026] [proxy_fcgi:error] [pid 35322:tid 35358] [client 185.82.72.108:40105] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:34:22.196661 2026] [proxy_fcgi:error] [pid 35322:tid 35379] [client 185.82.72.108:40105] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:34:22.475288 2026] [proxy_fcgi:error] [pid 35322:tid 35376] [client 185.82.72.108:40105] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:34:22.755308 2026] [proxy_fcgi:error] [pid 35322:tid 35374] [client 185.82.72.108:40105] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:34:23.035287 2026] [proxy_fcgi:error] [pid 35322:tid 35357] [client 185.82.72.108:40105] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:34:23.332630 2026] [proxy_fcgi:error] [pid 35322:tid 35362] [client 185.82.72.108:40105] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:34:23.608306 2026] [proxy_fcgi:error] [pid 35322:tid 35381] [client 185.82.72.108:40105] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:34:23.895336 2026] [proxy_fcgi:error] [pid 35322:tid 35364] [client 185.82.72.108:40105] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:34:24.175507 2026] [proxy_fcgi:error] [pid 35322:tid 35376] [client 185.82.72.108:40105] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:34:24.459295 2026] [proxy_fcgi:error] [pid 35322:tid 35377] [client 185.82.72.108:40105] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:34:24.741753 2026] [proxy_fcgi:error] [pid 35322:tid 35358] [client 185.82.72.108:40105] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:34:25.026304 2026] [proxy_fcgi:error] [pid 35322:tid 35362] [client 185.82.72.108:40105] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:34:25.307083 2026] [proxy_fcgi:error] [pid 35322:tid 35379] [client 185.82.72.108:40105] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:34:25.577638 2026] [proxy_fcgi:error] [pid 35322:tid 35364] [client 185.82.72.108:40105] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:34:25.864684 2026] [proxy_fcgi:error] [pid 35322:tid 35380] [client 185.82.72.108:40105] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:34:26.144295 2026] [proxy_fcgi:error] [pid 35322:tid 35374] [client 185.82.72.108:40105] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:34:26.427289 2026] [proxy_fcgi:error] [pid 35322:tid 35377] [client 185.82.72.108:40105] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:34:26.703286 2026] [proxy_fcgi:error] [pid 35322:tid 35357] [client 185.82.72.108:40105] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:34:26.989321 2026] [proxy_fcgi:error] [pid 35322:tid 35362] [client 185.82.72.108:40105] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:34:27.563288 2026] [proxy_fcgi:error] [pid 35322:tid 35360] [client 185.82.72.108:40105] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:34:27.856279 2026] [proxy_fcgi:error] [pid 35322:tid 35357] [client 185.82.72.108:40105] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:34:28.143301 2026] [proxy_fcgi:error] [pid 35322:tid 35381] [client 185.82.72.108:40105] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:34:28.415669 2026] [proxy_fcgi:error] [pid 35322:tid 35371] [client 185.82.72.108:40105] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:34:28.708401 2026] [proxy_fcgi:error] [pid 35322:tid 35373] [client 185.82.72.108:40105] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:34:29.003299 2026] [proxy_fcgi:error] [pid 35322:tid 35360] [client 185.82.72.108:40105] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:34:29.310308 2026] [proxy_fcgi:error] [pid 35322:tid 35357] [client 185.82.72.108:40105] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:34:29.606421 2026] [proxy_fcgi:error] [pid 35322:tid 35381] [client 185.82.72.108:40105] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:34:29.888307 2026] [proxy_fcgi:error] [pid 35322:tid 35371] [client 185.82.72.108:40105] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:34:30.192312 2026] [proxy_fcgi:error] [pid 35322:tid 35376] [client 185.82.72.108:40105] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:34:30.835291 2026] [proxy_fcgi:error] [pid 35322:tid 35357] [client 185.82.72.108:40105] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:34:31.125313 2026] [proxy_fcgi:error] [pid 35322:tid 35375] [client 185.82.72.108:40105] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:34:31.681777 2026] [proxy_fcgi:error] [pid 35322:tid 35379] [client 185.82.72.108:40105] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:34:31.968522 2026] [proxy_fcgi:error] [pid 35322:tid 35363] [client 185.82.72.108:40105] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:34:32.248310 2026] [proxy_fcgi:error] [pid 35322:tid 35364] [client 185.82.72.108:40105] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:34:32.558314 2026] [proxy_fcgi:error] [pid 35322:tid 35365] [client 185.82.72.108:40105] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:34:32.843310 2026] [proxy_fcgi:error] [pid 35322:tid 35361] [client 185.82.72.108:40105] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:34:33.130289 2026] [proxy_fcgi:error] [pid 35322:tid 35373] [client 185.82.72.108:40105] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:34:33.422332 2026] [proxy_fcgi:error] [pid 35322:tid 35370] [client 185.82.72.108:40105] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:34:33.726315 2026] [proxy_fcgi:error] [pid 35322:tid 35368] [client 185.82.72.108:40105] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:34:34.013581 2026] [proxy_fcgi:error] [pid 35322:tid 35362] [client 185.82.72.108:40105] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:34:50.765709 2026] [:error] [pid 4823:tid 4854] [client 185.82.72.103:63481] [client 185.82.72.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/jquery/ui/"] [unique_id "aecomvc8mke3PfHqsxG09QAAAYE"]
[Tue Apr 21 15:34:54.157323 2026] [proxy_fcgi:error] [pid 4777:tid 4802] [client 45.86.200.235:61137] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:35:54.301297 2026] [proxy_fcgi:error] [pid 53978:tid 53995] [client 45.86.200.247:45099] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:35:54.597341 2026] [proxy_fcgi:error] [pid 53978:tid 53987] [client 45.86.200.247:45099] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:35:54.924908 2026] [proxy_fcgi:error] [pid 53978:tid 53996] [client 45.86.200.247:45099] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:35:55.216841 2026] [proxy_fcgi:error] [pid 53978:tid 53980] [client 45.86.200.247:45099] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:35:55.511281 2026] [proxy_fcgi:error] [pid 53978:tid 53985] [client 45.86.200.247:45099] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:35:55.786867 2026] [proxy_fcgi:error] [pid 53978:tid 53999] [client 45.86.200.247:45099] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:35:56.060671 2026] [proxy_fcgi:error] [pid 53978:tid 53982] [client 45.86.200.247:45099] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:35:56.352128 2026] [:error] [pid 53978:tid 54000] [client 45.86.200.247:45099] [client 45.86.200.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/doc.php"] [unique_id "aeco3J1ivsR4hcOSQbat4AAAApQ"]
[Tue Apr 21 15:35:56.928313 2026] [proxy_fcgi:error] [pid 35321:tid 35386] [client 45.86.200.215:29235] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:35:57.231340 2026] [proxy_fcgi:error] [pid 35321:tid 35384] [client 45.86.200.215:29235] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:35:57.539530 2026] [:error] [pid 35321:tid 35399] [client 45.86.200.215:29235] [client 45.86.200.215] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dwelectservices.com.au"] [uri "/tiny.php"] [unique_id "aeco3TeHLhVUuu8cVXyjYQAAAE8"]
[Tue Apr 21 15:35:58.087366 2026] [proxy_fcgi:error] [pid 35320:tid 35341] [client 185.82.72.103:35539] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:36:16.603909 2026] [:error] [pid 35320:tid 35333] [client 185.82.72.103:35539] [client 185.82.72.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dwelectservices.com.au"] [uri "/fm.php"] [unique_id "aeco8IJW6fdXWO6agMEaPgAAAAM"]
[Tue Apr 21 16:13:28.783379 2026] [proxy_fcgi:error] [pid 54080:tid 54092] [client 20.251.37.211:64714] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 16:13:29.045872 2026] [proxy_fcgi:error] [pid 54080:tid 54089] [client 20.251.37.211:64714] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 16:13:29.317333 2026] [proxy_fcgi:error] [pid 54080:tid 54106] [client 20.251.37.211:64714] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 16:13:29.580426 2026] [proxy_fcgi:error] [pid 54080:tid 54084] [client 20.251.37.211:64714] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 16:13:29.858729 2026] [proxy_fcgi:error] [pid 54080:tid 54093] [client 20.251.37.211:64714] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 16:13:30.130878 2026] [proxy_fcgi:error] [pid 54080:tid 54095] [client 20.251.37.211:64714] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 16:13:30.668222 2026] [proxy_fcgi:error] [pid 54080:tid 54101] [client 20.251.37.211:64714] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 16:13:30.961922 2026] [proxy_fcgi:error] [pid 54080:tid 54099] [client 20.251.37.211:64714] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 16:13:31.241870 2026] [proxy_fcgi:error] [pid 54080:tid 54087] [client 20.251.37.211:64714] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 16:13:31.519181 2026] [:error] [pid 54080:tid 54098] [client 20.251.37.211:64714] [client 20.251.37.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wziar1.php"] [unique_id "aecxq4zEbQHHxtmWbaZpMgAAAtA"]
[Tue Apr 21 16:13:33.512339 2026] [:error] [pid 35320:tid 35341] [client 20.251.37.211:65192] [client 20.251.37.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wziar1.php"] [unique_id "aecxrYJW6fdXWO6agMEtbAAAAAs"]
[Tue Apr 21 16:13:34.414811 2026] [:error] [pid 35320:tid 35347] [client 20.251.37.211:65262] [client 20.251.37.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wziar1.php"] [unique_id "aecxroJW6fdXWO6agMEtbQAAABE"]
[Tue Apr 21 16:13:35.803505 2026] [:error] [pid 53978:tid 53988] [client 20.251.37.211:64723] [client 20.251.37.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wziar1.php"] [unique_id "aecxr51ivsR4hcOSQba-ewAAAog"]
[Tue Apr 21 16:13:37.406398 2026] [:error] [pid 35320:tid 35340] [client 20.251.37.211:65198] [client 20.251.37.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/public/oLEzRVqmJJPFSucdefault.php"] [unique_id "aecxsYJW6fdXWO6agMEthAAAAAo"]
[Tue Apr 21 16:13:39.369501 2026] [:error] [pid 35320:tid 35345] [client 20.251.37.211:65159] [client 20.251.37.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/public/oLEzRVqmJJPFSucdefault.php"] [unique_id "aecxs4JW6fdXWO6agMEtjgAAAA8"]
[Tue Apr 21 16:13:41.014696 2026] [:error] [pid 54080:tid 54106] [client 20.251.37.211:65228] [client 20.251.37.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/public/oLEzRVqmJJPFSucdefault.php"] [unique_id "aecxtYzEbQHHxtmWbaZpPAAAAtg"]
[Tue Apr 21 16:13:59.408764 2026] [:error] [pid 53832:tid 53853] [client 20.251.37.211:65172] [client 20.251.37.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/7logs.php"] [unique_id "aecxx9zkuxsE_OhM9UI3lwAAAlI"]
[Tue Apr 21 16:14:00.374299 2026] [:error] [pid 53832:tid 53844] [client 20.251.37.211:65170] [client 20.251.37.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/7logs.php"] [unique_id "aecxyNzkuxsE_OhM9UI3mgAAAkk"]
[Tue Apr 21 16:14:02.215872 2026] [:error] [pid 35320:tid 35337] [client 20.251.37.211:65224] [client 20.251.37.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/7logs.php"] [unique_id "aecxyoJW6fdXWO6agMEtlgAAAAc"]
[Tue Apr 21 16:14:03.187101 2026] [:error] [pid 35321:tid 35397] [client 20.251.37.211:64742] [client 20.251.37.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/7logs.php"] [unique_id "aecxyzeHLhVUuu8cVXzXeAAAAE0"]
[Tue Apr 21 16:14:04.315711 2026] [:error] [pid 54080:tid 54088] [client 20.251.37.211:65273] [client 20.251.37.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "aecxzIzEbQHHxtmWbaZpWAAAAsY"]
[Tue Apr 21 16:14:05.571381 2026] [:error] [pid 35321:tid 35389] [client 20.251.37.211:65173] [client 20.251.37.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "aecxzTeHLhVUuu8cVXzXewAAAEU"]
[Tue Apr 21 16:14:08.480748 2026] [:error] [pid 53832:tid 53841] [client 20.251.37.211:65210] [client 20.251.37.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "aecx0NzkuxsE_OhM9UI3nwAAAkY"]
[Tue Apr 21 16:14:10.734356 2026] [:error] [pid 4777:tid 4802] [client 20.251.37.211:65244] [client 20.251.37.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "aecx0qxXur6bykKyLZSNwQAAAQ4"]
[Tue Apr 21 16:14:11.425909 2026] [:error] [pid 4823:tid 4862] [client 20.251.37.211:64741] [client 20.251.37.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/as.php"] [unique_id "aecx0_c8mke3PfHqsxHUPgAAAYk"]
[Tue Apr 21 16:14:13.888973 2026] [:error] [pid 35322:tid 35358] [client 20.251.37.211:65229] [client 20.251.37.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/as.php"] [unique_id "aecx1aPoAfV40BTfVKzJpAAAAIE"]
[Tue Apr 21 16:14:20.965642 2026] [:error] [pid 53832:tid 53852] [client 20.251.37.211:65218] [client 20.251.37.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/as.php"] [unique_id "aecx3NzkuxsE_OhM9UI3rgAAAlE"]
[Tue Apr 21 16:14:24.369954 2026] [:error] [pid 53832:tid 53846] [client 20.251.37.211:64737] [client 20.251.37.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/as.php"] [unique_id "aecx4NzkuxsE_OhM9UI3sAAAAks"]
[Tue Apr 21 16:14:30.948437 2026] [:error] [pid 35320:tid 35342] [client 20.251.37.211:65197] [client 20.251.37.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ctex1.php"] [unique_id "aecx5oJW6fdXWO6agMEtvgAAAAw"]
[Tue Apr 21 16:14:32.183969 2026] [proxy_fcgi:error] [pid 35320:tid 35340] [client 20.251.37.211:65181] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 16:14:32.449281 2026] [proxy_fcgi:error] [pid 35320:tid 35354] [client 20.251.37.211:65181] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 16:14:32.906021 2026] [proxy_fcgi:error] [pid 35320:tid 35349] [client 20.251.37.211:65181] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 16:14:33.171104 2026] [proxy_fcgi:error] [pid 35320:tid 35334] [client 20.251.37.211:65181] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 16:14:33.436575 2026] [proxy_fcgi:error] [pid 35320:tid 35345] [client 20.251.37.211:65181] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 16:14:33.706276 2026] [proxy_fcgi:error] [pid 35320:tid 35335] [client 20.251.37.211:65181] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 16:14:33.971283 2026] [proxy_fcgi:error] [pid 35320:tid 35342] [client 20.251.37.211:65181] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 16:14:34.257956 2026] [proxy_fcgi:error] [pid 35320:tid 35331] [client 20.251.37.211:65181] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 16:14:34.527018 2026] [proxy_fcgi:error] [pid 35320:tid 35336] [client 20.251.37.211:65181] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 16:14:34.790570 2026] [proxy_fcgi:error] [pid 35320:tid 35332] [client 20.251.37.211:65181] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 16:14:35.055259 2026] [proxy_fcgi:error] [pid 35320:tid 35350] [client 20.251.37.211:65181] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 16:14:35.316984 2026] [:error] [pid 35320:tid 35352] [client 20.251.37.211:65181] [client 20.251.37.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/tx79.php"] [unique_id "aecx64JW6fdXWO6agMEt1QAAABY"]
[Tue Apr 21 16:14:37.925662 2026] [:error] [pid 53832:tid 53853] [client 20.251.37.211:65230] [client 20.251.37.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/tx79.php"] [unique_id "aecx7dzkuxsE_OhM9UI3tgAAAlI"]
[Tue Apr 21 16:14:39.915622 2026] [:error] [pid 53832:tid 53844] [client 20.251.37.211:64719] [client 20.251.37.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/tx79.php"] [unique_id "aecx79zkuxsE_OhM9UI3ugAAAkk"]
[Tue Apr 21 16:14:42.373943 2026] [:error] [pid 35320:tid 35349] [client 20.251.37.211:64716] [client 20.251.37.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/tx79.php"] [unique_id "aecx8oJW6fdXWO6agMEt5QAAABM"]
[Tue Apr 21 16:14:43.099413 2026] [:error] [pid 4777:tid 4789] [client 20.251.37.211:65201] [client 20.251.37.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/8.php"] [unique_id "aecx86xXur6bykKyLZSNyQAAAQE"]
[Tue Apr 21 16:14:44.484610 2026] [:error] [pid 53731:tid 53756] [client 20.251.37.211:64724] [client 20.251.37.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/8.php"] [unique_id "aecx9F2I9THUR-bRVGzkqwAAAhQ"]
[Tue Apr 21 16:14:45.320513 2026] [:error] [pid 35320:tid 35350] [client 20.251.37.211:65250] [client 20.251.37.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/8.php"] [unique_id "aecx9YJW6fdXWO6agMEt9AAAABQ"]
[Tue Apr 21 16:14:46.125988 2026] [:error] [pid 4823:tid 4875] [client 20.251.37.211:65248] [client 20.251.37.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/8.php"] [unique_id "aecx9vc8mke3PfHqsxHUYAAAAZY"]
[Tue Apr 21 16:14:47.350100 2026] [:error] [pid 4823:tid 4865] [client 20.251.37.211:65166] [client 20.251.37.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "aecx9_c8mke3PfHqsxHUYgAAAYw"]
[Tue Apr 21 16:14:48.928322 2026] [:error] [pid 53832:tid 53848] [client 20.251.37.211:65184] [client 20.251.37.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "aecx-NzkuxsE_OhM9UI3xwAAAk0"]
[Tue Apr 21 16:14:52.609270 2026] [:error] [pid 35320:tid 35352] [client 20.251.37.211:65274] [client 20.251.37.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "aecx_IJW6fdXWO6agMEuAAAAABY"]
[Tue Apr 21 16:14:53.754225 2026] [:error] [pid 35320:tid 35333] [client 20.251.37.211:65231] [client 20.251.37.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "aecx_YJW6fdXWO6agMEuAwAAAAM"]
[Tue Apr 21 16:14:54.848999 2026] [:error] [pid 53731:tid 53735] [client 20.251.37.211:65177] [client 20.251.37.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bfil.php"] [unique_id "aecx_l2I9THUR-bRVGzkrwAAAgA"]
[Tue Apr 21 16:14:56.389111 2026] [:error] [pid 53978:tid 53990] [client 20.251.37.211:65211] [client 20.251.37.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bfil.php"] [unique_id "aecyAJ1ivsR4hcOSQba-rgAAAoo"]
[Tue Apr 21 16:14:57.978183 2026] [:error] [pid 54080:tid 54091] [client 20.251.37.211:65158] [client 20.251.37.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bfil.php"] [unique_id "aecyAYzEbQHHxtmWbaZpmQAAAsk"]
[Tue Apr 21 16:14:59.773362 2026] [:error] [pid 54080:tid 54083] [client 20.251.37.211:65206] [client 20.251.37.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bfil.php"] [unique_id "aecyA4zEbQHHxtmWbaZpowAAAsE"]
[Tue Apr 21 16:15:02.850972 2026] [:error] [pid 4823:tid 4872] [client 20.251.37.211:64740] [client 20.251.37.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/abrand.php"] [unique_id "aecyBvc8mke3PfHqsxHUcgAAAZM"]
[Tue Apr 21 16:15:04.230470 2026] [:error] [pid 53731:tid 53750] [client 20.251.37.211:65155] [client 20.251.37.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/abrand.php"] [unique_id "aecyCF2I9THUR-bRVGzktAAAAg8"]
[Tue Apr 21 16:15:05.923229 2026] [:error] [pid 53978:tid 54004] [client 20.251.37.211:65222] [client 20.251.37.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/abrand.php"] [unique_id "aecyCZ1ivsR4hcOSQba-tQAAApg"]
[Tue Apr 21 16:15:07.214348 2026] [:error] [pid 35321:tid 35404] [client 20.251.37.211:64706] [client 20.251.37.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/abrand.php"] [unique_id "aecyCzeHLhVUuu8cVXzXoQAAAFQ"]
[Tue Apr 21 16:15:08.711482 2026] [:error] [pid 53832:tid 53841] [client 20.251.37.211:65156] [client 20.251.37.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/amax.php"] [unique_id "aecyDNzkuxsE_OhM9UI30gAAAkY"]
[Tue Apr 21 16:15:10.479456 2026] [:error] [pid 35322:tid 35358] [client 20.251.37.211:65152] [client 20.251.37.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/amax.php"] [unique_id "aecyDqPoAfV40BTfVKzJrQAAAIE"]
[Tue Apr 21 16:15:12.150943 2026] [:error] [pid 35320:tid 35330] [client 20.251.37.211:64722] [client 20.251.37.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/amax.php"] [unique_id "aecyEIJW6fdXWO6agMEuZQAAAAA"]
[Tue Apr 21 16:15:13.041578 2026] [:error] [pid 53731:tid 53752] [client 20.251.37.211:65277] [client 20.251.37.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/amax.php"] [unique_id "aecyEV2I9THUR-bRVGzktQAAAhA"]
[Tue Apr 21 16:15:15.199730 2026] [:error] [pid 35320:tid 35332] [client 20.251.37.211:65265] [client 20.251.37.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aecyE4JW6fdXWO6agMEugAAAAAI"]
[Tue Apr 21 16:15:39.190839 2026] [proxy_fcgi:error] [pid 35320:tid 35332] [client 20.251.37.211:65187] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 16:15:39.470681 2026] [proxy_fcgi:error] [pid 35320:tid 35347] [client 20.251.37.211:65187] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 16:15:39.785016 2026] [proxy_fcgi:error] [pid 35320:tid 35336] [client 20.251.37.211:65187] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 16:15:40.053602 2026] [proxy_fcgi:error] [pid 35320:tid 35342] [client 20.251.37.211:65187] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 16:15:40.316629 2026] [proxy_fcgi:error] [pid 35320:tid 35354] [client 20.251.37.211:65187] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 16:15:40.579378 2026] [proxy_fcgi:error] [pid 35320:tid 35353] [client 20.251.37.211:65187] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 16:15:40.843368 2026] [proxy_fcgi:error] [pid 35320:tid 35347] [client 20.251.37.211:65187] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 16:15:41.109468 2026] [proxy_fcgi:error] [pid 35320:tid 35330] [client 20.251.37.211:65187] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 16:15:41.372609 2026] [proxy_fcgi:error] [pid 35320:tid 35339] [client 20.251.37.211:65187] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 16:15:41.637387 2026] [proxy_fcgi:error] [pid 35320:tid 35354] [client 20.251.37.211:65187] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 16:15:41.901651 2026] [proxy_fcgi:error] [pid 35320:tid 35349] [client 20.251.37.211:65187] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 16:15:42.194309 2026] [:error] [pid 35320:tid 35332] [client 20.251.37.211:65187] [client 20.251.37.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/100.php"] [unique_id "aecyLoJW6fdXWO6agMEu_QAAAAI"]
[Tue Apr 21 16:15:44.265454 2026] [:error] [pid 54080:tid 54083] [client 20.251.37.211:65276] [client 20.251.37.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/100.php"] [unique_id "aecyMIzEbQHHxtmWbaZp1wAAAsE"]
[Tue Apr 21 16:15:45.657974 2026] [:error] [pid 35320:tid 35336] [client 20.251.37.211:64699] [client 20.251.37.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/100.php"] [unique_id "aecyMYJW6fdXWO6agMEvGAAAAAY"]
[Tue Apr 21 16:15:47.997323 2026] [:error] [pid 53832:tid 53843] [client 20.251.37.211:65253] [client 20.251.37.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/100.php"] [unique_id "aecyM9zkuxsE_OhM9UI4JgAAAkg"]
[Tue Apr 21 16:15:49.987959 2026] [:error] [pid 35320:tid 35351] [client 20.251.37.211:65169] [client 20.251.37.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bolt.php"] [unique_id "aecyNYJW6fdXWO6agMEvJgAAABU"]
[Tue Apr 21 16:15:53.235224 2026] [:error] [pid 53832:tid 53848] [client 20.251.37.211:65208] [client 20.251.37.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bolt.php"] [unique_id "aecyOdzkuxsE_OhM9UI4LgAAAk0"]
[Tue Apr 21 16:15:54.458445 2026] [:error] [pid 53832:tid 53845] [client 20.251.37.211:65217] [client 20.251.37.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bolt.php"] [unique_id "aecyOtzkuxsE_OhM9UI4MgAAAko"]
[Tue Apr 21 16:15:57.319754 2026] [:error] [pid 53731:tid 53739] [client 20.251.37.211:65182] [client 20.251.37.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bolt.php"] [unique_id "aecyPV2I9THUR-bRVGzk4gAAAgQ"]
[Tue Apr 21 16:15:58.599561 2026] [:error] [pid 35321:tid 35394] [client 20.251.37.211:65202] [client 20.251.37.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bless.php"] [unique_id "aecyPjeHLhVUuu8cVXzX1QAAAEo"]
[Tue Apr 21 16:16:01.234893 2026] [:error] [pid 35320:tid 35350] [client 20.251.37.211:65236] [client 20.251.37.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bless.php"] [unique_id "aecyQYJW6fdXWO6agMEvVgAAABQ"]
[Tue Apr 21 16:16:02.435754 2026] [:error] [pid 35320:tid 35335] [client 20.251.37.211:65278] [client 20.251.37.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bless.php"] [unique_id "aecyQoJW6fdXWO6agMEvWgAAAAU"]
[Tue Apr 21 16:16:03.822438 2026] [:error] [pid 35320:tid 35350] [client 20.251.37.211:65242] [client 20.251.37.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bless.php"] [unique_id "aecyQ4JW6fdXWO6agMEvZAAAABQ"]
[Tue Apr 21 16:16:07.514263 2026] [:error] [pid 4823:tid 4866] [client 20.251.37.211:65209] [client 20.251.37.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/albin.php"] [unique_id "aecyR_c8mke3PfHqsxHUpQAAAY0"]
[Tue Apr 21 16:16:08.453196 2026] [:error] [pid 53731:tid 53744] [client 20.251.37.211:65251] [client 20.251.37.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/albin.php"] [unique_id "aecySF2I9THUR-bRVGzk5QAAAgk"]
[Tue Apr 21 16:16:09.136970 2026] [:error] [pid 4823:tid 4855] [client 20.251.37.211:65237] [client 20.251.37.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/albin.php"] [unique_id "aecySfc8mke3PfHqsxHUqAAAAYI"]
[Tue Apr 21 16:16:10.133734 2026] [:error] [pid 4777:tid 4801] [client 20.251.37.211:64687] [client 20.251.37.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/albin.php"] [unique_id "aecySqxXur6bykKyLZSN1wAAAQ0"]
[Tue Apr 21 16:16:11.902512 2026] [:error] [pid 35320:tid 35349] [client 20.251.37.211:64676] [client 20.251.37.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-the.php"] [unique_id "aecyS4JW6fdXWO6agMEvagAAABM"]
[Tue Apr 21 16:16:13.339680 2026] [:error] [pid 35321:tid 35394] [client 20.251.37.211:65258] [client 20.251.37.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-the.php"] [unique_id "aecyTTeHLhVUuu8cVXzX6wAAAEo"]
[Tue Apr 21 16:16:14.853668 2026] [:error] [pid 53832:tid 53838] [client 20.251.37.211:64726] [client 20.251.37.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-the.php"] [unique_id "aecyTtzkuxsE_OhM9UI4SgAAAkM"]
[Tue Apr 21 16:16:19.182601 2026] [:error] [pid 35321:tid 35394] [client 20.251.37.211:64720] [client 20.251.37.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-the.php"] [unique_id "aecyUzeHLhVUuu8cVXzX9gAAAEo"]
[Tue Apr 21 16:16:19.935296 2026] [:error] [pid 54080:tid 54087] [client 20.251.37.211:65188] [client 20.251.37.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/sa.php7"] [unique_id "aecyU4zEbQHHxtmWbaZp6wAAAsU"]
[Tue Apr 21 16:16:21.648540 2026] [:error] [pid 35321:tid 35401] [client 20.251.37.211:65205] [client 20.251.37.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/sa.php7"] [unique_id "aecyVTeHLhVUuu8cVXzYAAAAAFE"]
[Tue Apr 21 16:16:23.188299 2026] [:error] [pid 35415:tid 35431] [client 20.251.37.211:65255] [client 20.251.37.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/sa.php7"] [unique_id "aecyV0iqDinI4_22zzhdrwAAAMQ"]
[Tue Apr 21 16:16:25.134882 2026] [:error] [pid 35320:tid 35348] [client 20.251.37.211:64732] [client 20.251.37.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/sa.php7"] [unique_id "aecyWYJW6fdXWO6agMEvgQAAABI"]
[Tue Apr 21 16:16:26.379299 2026] [:error] [pid 35320:tid 35337] [client 20.251.37.211:64745] [client 20.251.37.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/a7.php"] [unique_id "aecyWoJW6fdXWO6agMEvhwAAAAc"]
[Tue Apr 21 16:16:27.621429 2026] [:error] [pid 54080:tid 54099] [client 20.251.37.211:64223] [client 20.251.37.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/a7.php"] [unique_id "aecyW4zEbQHHxtmWbaZp8QAAAtE"]
[Tue Apr 21 16:16:30.591672 2026] [:error] [pid 35320:tid 35339] [client 20.251.37.211:65214] [client 20.251.37.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/a7.php"] [unique_id "aecyXoJW6fdXWO6agMEvlQAAAAk"]
[Tue Apr 21 16:16:31.519714 2026] [:error] [pid 35320:tid 35346] [client 20.251.37.211:65179] [client 20.251.37.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/a7.php"] [unique_id "aecyX4JW6fdXWO6agMEvmAAAABA"]
[Tue Apr 21 16:16:34.647138 2026] [:error] [pid 53832:tid 53845] [client 20.251.37.211:65252] [client 20.251.37.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp9.php"] [unique_id "aecyYtzkuxsE_OhM9UI4ZgAAAko"]
[Tue Apr 21 16:16:37.063467 2026] [:error] [pid 54080:tid 54103] [client 20.251.37.211:64735] [client 20.251.37.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp9.php"] [unique_id "aecyZYzEbQHHxtmWbaZqBwAAAtU"]
[Tue Apr 21 16:16:39.569341 2026] [:error] [pid 54080:tid 54101] [client 20.251.37.211:64643] [client 20.251.37.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp9.php"] [unique_id "aecyZ4zEbQHHxtmWbaZqCgAAAtM"]
[Tue Apr 21 16:16:41.931068 2026] [proxy_fcgi:error] [pid 35320:tid 35344] [client 20.251.37.211:65196] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 16:16:42.194609 2026] [proxy_fcgi:error] [pid 35320:tid 35336] [client 20.251.37.211:65196] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 16:16:42.477510 2026] [proxy_fcgi:error] [pid 35320:tid 35332] [client 20.251.37.211:65196] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 16:16:42.765219 2026] [proxy_fcgi:error] [pid 35320:tid 35335] [client 20.251.37.211:65196] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 16:16:43.040361 2026] [proxy_fcgi:error] [pid 35320:tid 35350] [client 20.251.37.211:65196] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 16:16:43.368326 2026] [proxy_fcgi:error] [pid 35320:tid 35330] [client 20.251.37.211:65196] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 16:16:43.633545 2026] [proxy_fcgi:error] [pid 35320:tid 35349] [client 20.251.37.211:65196] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 16:16:43.903575 2026] [proxy_fcgi:error] [pid 35320:tid 35339] [client 20.251.37.211:65196] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 16:16:44.167306 2026] [proxy_fcgi:error] [pid 35320:tid 35353] [client 20.251.37.211:65196] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 16:16:44.661519 2026] [proxy_fcgi:error] [pid 35320:tid 35340] [client 20.251.37.211:65196] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 16:16:45.036806 2026] [proxy_fcgi:error] [pid 35320:tid 35352] [client 20.251.37.211:65196] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 16:16:45.296945 2026] [:error] [pid 35320:tid 35331] [client 20.251.37.211:65196] [client 20.251.37.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/asasx.php"] [unique_id "aecybYJW6fdXWO6agMEvvQAAAAE"]
[Tue Apr 21 16:16:50.072141 2026] [:error] [pid 53832:tid 53849] [client 20.251.37.211:65267] [client 20.251.37.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/asasx.php"] [unique_id "aecyctzkuxsE_OhM9UI4dAAAAk4"]
[Tue Apr 21 16:16:50.853528 2026] [:error] [pid 54080:tid 54102] [client 20.251.37.211:64210] [client 20.251.37.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/asasx.php"] [unique_id "aecycozEbQHHxtmWbaZqJgAAAtQ"]
[Tue Apr 21 16:16:52.089865 2026] [:error] [pid 54080:tid 54106] [client 20.251.37.211:65246] [client 20.251.37.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/asasx.php"] [unique_id "aecydIzEbQHHxtmWbaZqKQAAAtg"]
[Tue Apr 21 16:16:53.686781 2026] [:error] [pid 35320:tid 35337] [client 20.251.37.211:65279] [client 20.251.37.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xltt.php"] [unique_id "aecydYJW6fdXWO6agMEv1gAAAAc"]
[Tue Apr 21 16:17:00.506815 2026] [:error] [pid 54080:tid 54082] [client 20.251.37.211:65153] [client 20.251.37.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xltt.php"] [unique_id "aecyfIzEbQHHxtmWbaZqPwAAAsA"]
[Tue Apr 21 16:17:01.561303 2026] [:error] [pid 54080:tid 54103] [client 20.251.37.211:64707] [client 20.251.37.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xltt.php"] [unique_id "aecyfYzEbQHHxtmWbaZqRAAAAtU"]
[Tue Apr 21 16:17:08.517161 2026] [:error] [pid 53731:tid 53756] [client 20.251.37.211:65213] [client 20.251.37.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/packsin1.php"] [unique_id "aecyhF2I9THUR-bRVGzk-gAAAhQ"]
[Tue Apr 21 16:17:12.561191 2026] [:error] [pid 4777:tid 4798] [client 20.251.37.211:64652] [client 20.251.37.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/packsin1.php"] [unique_id "aecyiKxXur6bykKyLZSN5AAAAQo"]
[Tue Apr 21 16:17:21.459882 2026] [:error] [pid 35320:tid 35341] [client 20.251.37.211:64744] [client 20.251.37.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/packsin1.php"] [unique_id "aecykYJW6fdXWO6agMEwOwAAAAs"]
[Tue Apr 21 16:17:24.540091 2026] [:error] [pid 35321:tid 35388] [client 20.251.37.211:64663] [client 20.251.37.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/press.php"] [unique_id "aecylDeHLhVUuu8cVXzYUAAAAEQ"]
[Tue Apr 21 16:17:27.378401 2026] [:error] [pid 35322:tid 35371] [client 20.251.37.211:64654] [client 20.251.37.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/press.php"] [unique_id "aecyl6PoAfV40BTfVKzJvQAAAI4"]
[Tue Apr 21 16:17:36.893986 2026] [:error] [pid 4823:tid 4855] [client 20.251.37.211:65235] [client 20.251.37.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/press.php"] [unique_id "aecyoPc8mke3PfHqsxHU2AAAAYI"]
[Tue Apr 21 16:17:41.161899 2026] [:error] [pid 53731:tid 53757] [client 20.251.37.211:65275] [client 20.251.37.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/press.php"] [unique_id "aecypV2I9THUR-bRVGzlCAAAAhU"]
[Tue Apr 21 16:17:52.547731 2026] [proxy_fcgi:error] [pid 35320:tid 35335] [client 20.251.37.211:65220] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 16:17:52.820923 2026] [proxy_fcgi:error] [pid 35320:tid 35336] [client 20.251.37.211:65220] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 16:17:53.097158 2026] [proxy_fcgi:error] [pid 35320:tid 35343] [client 20.251.37.211:65220] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 16:17:53.360389 2026] [proxy_fcgi:error] [pid 35320:tid 35338] [client 20.251.37.211:65220] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 16:17:53.849860 2026] [proxy_fcgi:error] [pid 35320:tid 35354] [client 20.251.37.211:65220] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 16:17:54.121724 2026] [proxy_fcgi:error] [pid 35320:tid 35341] [client 20.251.37.211:65220] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 16:17:54.390290 2026] [proxy_fcgi:error] [pid 35320:tid 35349] [client 20.251.37.211:65220] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 16:17:54.653896 2026] [proxy_fcgi:error] [pid 35320:tid 35352] [client 20.251.37.211:65220] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 16:17:54.916462 2026] [proxy_fcgi:error] [pid 35320:tid 35339] [client 20.251.37.211:65220] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 16:17:55.268255 2026] [proxy_fcgi:error] [pid 35320:tid 35354] [client 20.251.37.211:65220] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 16:17:55.745945 2026] [proxy_fcgi:error] [pid 35320:tid 35342] [client 20.251.37.211:65220] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 16:17:56.283459 2026] [:error] [pid 35320:tid 35338] [client 20.251.37.211:65220] [client 20.251.37.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/fsjzs.php"] [unique_id "aecytIJW6fdXWO6agMExVQAAAAg"]
[Tue Apr 21 16:18:02.552556 2026] [:error] [pid 35320:tid 35330] [client 20.251.37.211:64644] [client 20.251.37.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/fsjzs.php"] [unique_id "aecyuoJW6fdXWO6agMExaQAAAAA"]
[Tue Apr 21 16:18:03.453942 2026] [:error] [pid 35321:tid 35405] [client 20.251.37.211:64749] [client 20.251.37.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/fsjzs.php"] [unique_id "aecyuzeHLhVUuu8cVXzYwwAAAFU"]
[Tue Apr 21 16:18:05.021066 2026] [:error] [pid 54080:tid 54087] [client 20.251.37.211:65162] [client 20.251.37.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/fsjzs.php"] [unique_id "aecyvYzEbQHHxtmWbaZq7wAAAsU"]
[Tue Apr 21 16:18:06.921832 2026] [:error] [pid 35320:tid 35351] [client 20.251.37.211:65216] [client 20.251.37.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/cwclass.php"] [unique_id "aecyvoJW6fdXWO6agMExdgAAABU"]
[Tue Apr 21 16:18:08.592062 2026] [:error] [pid 54080:tid 54093] [client 20.251.37.211:65160] [client 20.251.37.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/cwclass.php"] [unique_id "aecywIzEbQHHxtmWbaZq_AAAAss"]
[Tue Apr 21 16:18:10.679332 2026] [:error] [pid 35321:tid 35384] [client 20.251.37.211:64753] [client 20.251.37.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/cwclass.php"] [unique_id "aecywjeHLhVUuu8cVXzYyAAAAEA"]
[Tue Apr 21 16:18:12.464152 2026] [:error] [pid 53832:tid 53837] [client 20.251.37.211:65192] [client 20.251.37.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/cwclass.php"] [unique_id "aecyxNzkuxsE_OhM9UI4-AAAAkI"]
[Tue Apr 21 16:18:14.030959 2026] [:error] [pid 35320:tid 35332] [client 20.251.37.211:65268] [client 20.251.37.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/edit-tags.php"] [unique_id "aecyxoJW6fdXWO6agMEx_wAAAAI"]
[Tue Apr 21 16:18:19.695286 2026] [:error] [pid 54080:tid 54102] [client 20.251.37.211:64659] [client 20.251.37.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/edit-tags.php"] [unique_id "aecyy4zEbQHHxtmWbaZrKwAAAtQ"]
[Tue Apr 21 16:18:30.272441 2026] [:error] [pid 54080:tid 54087] [client 20.251.37.211:64748] [client 20.251.37.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/atomlib.php"] [unique_id "aecy1ozEbQHHxtmWbaZrWgAAAsU"]
[Tue Apr 21 16:18:32.055535 2026] [:error] [pid 35321:tid 35408] [client 20.251.37.211:64734] [client 20.251.37.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/atomlib.php"] [unique_id "aecy2DeHLhVUuu8cVXzY_QAAAFg"]
[Tue Apr 21 16:18:33.395576 2026] [:error] [pid 35320:tid 35334] [client 20.251.37.211:65159] [client 20.251.37.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/atomlib.php"] [unique_id "aecy2YJW6fdXWO6agMEymwAAAAQ"]
[Tue Apr 21 16:18:34.513388 2026] [:error] [pid 35415:tid 35431] [client 20.251.37.211:64192] [client 20.251.37.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/atomlib.php"] [unique_id "aecy2kiqDinI4_22zzhdxgAAAMQ"]
[Tue Apr 21 16:18:36.202393 2026] [:error] [pid 54080:tid 54084] [client 20.251.37.211:64725] [client 20.251.37.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/zoper1.php"] [unique_id "aecy3IzEbQHHxtmWbaZrcAAAAsI"]
[Tue Apr 21 16:18:38.451144 2026] [:error] [pid 4777:tid 4791] [client 20.251.37.211:65204] [client 20.251.37.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/zoper1.php"] [unique_id "aecy3qxXur6bykKyLZSN9wAAAQM"]
[Tue Apr 21 16:18:40.095966 2026] [:error] [pid 35415:tid 35428] [client 20.251.37.211:65270] [client 20.251.37.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/zoper1.php"] [unique_id "aecy4EiqDinI4_22zzhdzAAAAME"]
[Tue Apr 21 16:18:41.040896 2026] [:error] [pid 4777:tid 4807] [client 20.251.37.211:64227] [client 20.251.37.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/zoper1.php"] [unique_id "aecy4axXur6bykKyLZSN-QAAARM"]
[Tue Apr 21 16:18:42.191813 2026] [:error] [pid 35320:tid 35346] [client 20.251.37.211:64731] [client 20.251.37.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/a5.php"] [unique_id "aecy4oJW6fdXWO6agMEyqgAAABA"]
[Tue Apr 21 16:18:43.771835 2026] [:error] [pid 35320:tid 35350] [client 20.251.37.211:64757] [client 20.251.37.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/a5.php"] [unique_id "aecy44JW6fdXWO6agMEytAAAABQ"]
[Tue Apr 21 16:18:45.120931 2026] [:error] [pid 35320:tid 35354] [client 20.251.37.211:64132] [client 20.251.37.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/a5.php"] [unique_id "aecy5YJW6fdXWO6agMEyvQAAABg"]
[Tue Apr 21 16:18:48.463639 2026] [:error] [pid 35321:tid 35393] [client 20.251.37.211:65257] [client 20.251.37.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/a5.php"] [unique_id "aecy6DeHLhVUuu8cVXzZCgAAAEk"]
[Tue Apr 21 16:18:55.496765 2026] [proxy_fcgi:error] [pid 54080:tid 54098] [client 20.251.37.211:65230] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 16:18:55.767868 2026] [proxy_fcgi:error] [pid 54080:tid 54093] [client 20.251.37.211:65230] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 17:26:07.699284 2026] [:error] [pid 53731:tid 53736] [client 206.189.99.18:62640] [client 206.189.99.18] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 206.189.99.18, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-login.php"] [unique_id "aedCr12I9THUR-bRVGwNnQAAAgE"]
[Tue Apr 21 17:26:07.709379 2026] [proxy_fcgi:error] [pid 53731:tid 53736] [client 206.189.99.18:62640] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 17:33:07.989147 2026] [:error] [pid 4823:tid 4869] [client 34.187.243.187:60845] [client 34.187.243.187] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.187.243.187, incrementing ddos counter"] [hostname "dwelectservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aedEU_c8mke3PfHqsxHiewAAAZA"]
[Tue Apr 21 17:33:08.000912 2026] [proxy_fcgi:error] [pid 4823:tid 4869] [client 34.187.243.187:60845] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 17:33:10.155112 2026] [:error] [pid 4823:tid 4874] [client 34.187.243.187:60845] [client 34.187.243.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aedEVvc8mke3PfHqsxHiiQAAAZU"]
[Tue Apr 21 17:33:10.809305 2026] [:error] [pid 54080:tid 54106] [client 34.187.243.187:50423] [client 34.187.243.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aedEVozEbQHHxtmWbaaGygAAAtg"]
[Tue Apr 21 17:33:11.540660 2026] [:error] [pid 35321:tid 35394] [client 34.187.243.187:52288] [client 34.187.243.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aedEVzeHLhVUuu8cVXz7uwAAAEo"]
[Tue Apr 21 17:33:12.287317 2026] [:error] [pid 53731:tid 53745] [client 34.187.243.187:59569] [client 34.187.243.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aedEWF2I9THUR-bRVGwVEQAAAgo"]
[Tue Apr 21 17:33:12.720578 2026] [:error] [pid 53731:tid 53760] [client 34.187.243.187:51707] [client 34.187.243.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aedEWF2I9THUR-bRVGwVEwAAAhg"]
[Tue Apr 21 17:33:13.172759 2026] [:error] [pid 53731:tid 53754] [client 34.187.243.187:56497] [client 34.187.243.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aedEWV2I9THUR-bRVGwVFgAAAhI"]
[Tue Apr 21 17:33:13.695160 2026] [:error] [pid 53731:tid 53744] [client 34.187.243.187:65429] [client 34.187.243.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aedEWV2I9THUR-bRVGwVGwAAAgk"]
[Tue Apr 21 19:13:59.383252 2026] [:error] [pid 35321:tid 35385] [client 64.23.188.98:51994] [client 64.23.188.98] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.23.188.98, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-login.php"] [unique_id "aedb9zeHLhVUuu8cVXxKVwAAAEE"]
[Tue Apr 21 19:13:59.397015 2026] [proxy_fcgi:error] [pid 35321:tid 35385] [client 64.23.188.98:51994] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:34:14.920318 2026] [proxy_fcgi:error] [pid 21788:tid 21793] [client 45.137.126.11:55421] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:34:15.408763 2026] [proxy_fcgi:error] [pid 21788:tid 21800] [client 45.137.126.11:55421] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:34:15.898304 2026] [proxy_fcgi:error] [pid 21788:tid 21794] [client 45.137.126.11:55421] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:34:16.388965 2026] [proxy_fcgi:error] [pid 21788:tid 21795] [client 45.137.126.11:55421] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:34:16.881373 2026] [proxy_fcgi:error] [pid 21788:tid 21811] [client 45.137.126.11:55421] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:34:17.374024 2026] [proxy_fcgi:error] [pid 21788:tid 21812] [client 45.137.126.11:55421] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:34:17.872142 2026] [proxy_fcgi:error] [pid 21788:tid 21795] [client 45.137.126.11:55421] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:34:18.373091 2026] [proxy_fcgi:error] [pid 21788:tid 21792] [client 45.137.126.11:55421] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:34:19.356796 2026] [proxy_fcgi:error] [pid 21788:tid 21799] [client 45.137.126.11:55421] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:34:19.855188 2026] [proxy_fcgi:error] [pid 21788:tid 21805] [client 45.137.126.11:55421] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:34:20.346947 2026] [proxy_fcgi:error] [pid 21788:tid 21800] [client 45.137.126.11:55421] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:34:20.836973 2026] [proxy_fcgi:error] [pid 21788:tid 21805] [client 45.137.126.11:55421] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:34:21.327531 2026] [proxy_fcgi:error] [pid 21788:tid 21812] [client 45.137.126.11:55421] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:34:21.818479 2026] [proxy_fcgi:error] [pid 21788:tid 21791] [client 45.137.126.11:55421] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:34:22.308581 2026] [proxy_fcgi:error] [pid 21788:tid 21803] [client 45.137.126.11:55421] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:34:22.799518 2026] [proxy_fcgi:error] [pid 21788:tid 21798] [client 45.137.126.11:55421] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:34:23.295982 2026] [proxy_fcgi:error] [pid 21788:tid 21800] [client 45.137.126.11:55421] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:34:23.785958 2026] [proxy_fcgi:error] [pid 21788:tid 21790] [client 45.137.126.11:55421] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:34:30.785166 2026] [:error] [pid 21788:tid 21792] [client 45.137.126.11:55421] [client 45.137.126.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aeftZn7OM27rzVpef259KgAAAMI"]
[Wed Apr 22 05:34:33.235573 2026] [:error] [pid 21683:tid 21752] [client 45.137.126.42:39567] [client 45.137.126.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aeftaVZBWT-0diZyYyZ83AAAAII"]
[Wed Apr 22 05:34:35.681807 2026] [proxy_fcgi:error] [pid 23041:tid 23049] [client 45.137.126.19:50651] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:34:37.148427 2026] [:error] [pid 23041:tid 23046] [client 45.137.126.19:50651] [client 45.137.126.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dwelectservices.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aeftbUTXx_lUa7xwAb61jgAAAQI"]
[Wed Apr 22 05:34:39.106819 2026] [proxy_fcgi:error] [pid 21788:tid 21801] [client 45.137.126.50:32769] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:34:39.593415 2026] [:error] [pid 21788:tid 21791] [client 45.137.126.50:32769] [client 45.137.126.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aeftb37OM27rzVpef259QwAAAME"]
[Wed Apr 22 05:34:41.065327 2026] [proxy_fcgi:error] [pid 21682:tid 21738] [client 45.137.126.26:31855] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:34:43.514329 2026] [:error] [pid 21682:tid 21730] [client 45.137.126.26:31855] [client 45.137.126.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aeftc5lXWQZUlmPHS3ruLwAAAEc"]
[Wed Apr 22 05:34:44.984509 2026] [:error] [pid 21683:tid 21774] [client 45.137.126.27:50143] [client 45.137.126.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aeftdFZBWT-0diZyYyZ87QAAAJg"]
[Wed Apr 22 05:34:45.958687 2026] [:error] [pid 21788:tid 21795] [client 45.137.126.36:43369] [client 45.137.126.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aeftdX7OM27rzVpef259SgAAAMU"]
[Wed Apr 22 05:34:46.942507 2026] [:error] [pid 21682:tid 21739] [client 45.137.126.35:57665] [client 45.137.126.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aeftdplXWQZUlmPHS3ruMgAAAFA"]
[Wed Apr 22 05:34:47.928346 2026] [:error] [pid 21788:tid 21808] [client 45.137.126.17:22151] [client 45.137.126.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aeftd37OM27rzVpef259SwAAANI"]
[Wed Apr 22 05:34:48.904976 2026] [:error] [pid 21788:tid 21794] [client 45.137.126.9:21593] [client 45.137.126.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aefteH7OM27rzVpef259eQAAAMQ"]
[Wed Apr 22 05:34:50.374400 2026] [:error] [pid 21683:tid 21764] [client 45.137.126.25:44275] [client 45.137.126.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aeftelZBWT-0diZyYyZ9OgAAAI4"]
[Wed Apr 22 05:34:51.347361 2026] [proxy_fcgi:error] [pid 21683:tid 21753] [client 45.137.126.27:54907] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:34:52.319048 2026] [:error] [pid 21683:tid 21751] [client 45.137.126.27:54907] [client 45.137.126.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dwelectservices.com.au"] [uri "/filemanager.php"] [unique_id "aeftfFZBWT-0diZyYyZ9RwAAAIE"]
[Wed Apr 22 05:34:54.266348 2026] [:error] [pid 21788:tid 21808] [client 45.137.126.19:41251] [client 45.137.126.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aeftfn7OM27rzVpef259sQAAANI"]
[Wed Apr 22 05:34:55.731550 2026] [:error] [pid 21683:tid 21754] [client 45.137.126.13:36811] [client 45.137.126.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aeftf1ZBWT-0diZyYyZ9UAAAAIQ"]
[Wed Apr 22 05:34:56.708895 2026] [proxy_fcgi:error] [pid 21682:tid 21743] [client 45.137.126.35:21849] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:34:57.194004 2026] [:error] [pid 21682:tid 21730] [client 45.137.126.35:21849] [client 45.137.126.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aeftgZlXWQZUlmPHS3ruOAAAAEc"]
[Wed Apr 22 05:34:59.688764 2026] [proxy_fcgi:error] [pid 21683:tid 21771] [client 45.137.126.30:47507] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:35:01.332408 2026] [proxy_fcgi:error] [pid 21683:tid 21750] [client 45.137.126.30:47507] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:35:02.798051 2026] [:error] [pid 21683:tid 21768] [client 45.137.126.30:47507] [client 45.137.126.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aefthlZBWT-0diZyYyZ9YQAAAJI"]
[Wed Apr 22 05:35:03.773528 2026] [proxy_fcgi:error] [pid 21788:tid 21812] [client 45.137.126.30:45341] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:35:04.265917 2026] [:error] [pid 21788:tid 21793] [client 45.137.126.30:45341] [client 45.137.126.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aeftiH7OM27rzVpef2591QAAAMM"]
[Wed Apr 22 05:35:05.246989 2026] [proxy_fcgi:error] [pid 21788:tid 21798] [client 45.137.126.39:28561] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:35:06.227560 2026] [:error] [pid 21788:tid 21807] [client 45.137.126.39:28561] [client 45.137.126.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "aeftin7OM27rzVpef2594wAAANE"]
[Wed Apr 22 05:35:07.704849 2026] [:error] [pid 21788:tid 21790] [client 45.137.126.34:46629] [client 45.137.126.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aefti37OM27rzVpef2596QAAAMA"]
[Wed Apr 22 05:35:09.167778 2026] [proxy_fcgi:error] [pid 23041:tid 23047] [client 45.137.126.23:20813] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:35:09.661794 2026] [proxy_fcgi:error] [pid 23041:tid 23063] [client 45.137.126.23:20813] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:35:10.636174 2026] [:error] [pid 23041:tid 23051] [client 45.137.126.23:20813] [client 45.137.126.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aeftjkTXx_lUa7xwAb618QAAAQc"]
[Wed Apr 22 05:35:12.096447 2026] [:error] [pid 23041:tid 23059] [client 45.137.126.53:51917] [client 45.137.126.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aeftkETXx_lUa7xwAb619wAAAQ8"]
[Wed Apr 22 05:35:13.558148 2026] [:error] [pid 23041:tid 23046] [client 45.137.126.23:31111] [client 45.137.126.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aeftkUTXx_lUa7xwAb61-wAAAQI"]
[Wed Apr 22 05:35:14.533526 2026] [:error] [pid 21681:tid 21705] [client 45.137.126.14:49881] [client 45.137.126.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aeftkt5LmJziq-yZYawnzgAAAA8"]
[Wed Apr 22 05:35:15.507282 2026] [:error] [pid 23041:tid 23056] [client 45.137.126.5:51545] [client 45.137.126.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aeftk0TXx_lUa7xwAb62AQAAAQw"]
[Wed Apr 22 05:35:17.464544 2026] [proxy_fcgi:error] [pid 21788:tid 21802] [client 45.137.126.23:30497] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:35:17.949984 2026] [:error] [pid 21788:tid 21800] [client 45.137.126.23:30497] [client 45.137.126.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "aeftlX7OM27rzVpef25-GgAAAMo"]
[Wed Apr 22 05:35:18.921755 2026] [:error] [pid 21788:tid 21807] [client 45.137.126.10:30323] [client 45.137.126.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "aeftln7OM27rzVpef25-HwAAANE"]
[Wed Apr 22 05:35:19.900158 2026] [:error] [pid 21788:tid 21800] [client 45.137.126.48:57673] [client 45.137.126.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aeftl37OM27rzVpef25-JAAAAMo"]
[Wed Apr 22 05:35:21.858644 2026] [proxy_fcgi:error] [pid 21788:tid 21793] [client 45.137.126.42:47589] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:35:22.839577 2026] [proxy_fcgi:error] [pid 21788:tid 21811] [client 45.137.126.42:47589] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:35:24.805395 2026] [:error] [pid 21788:tid 21803] [client 45.137.126.42:47589] [client 45.137.126.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/admin.php"] [unique_id "aeftnH7OM27rzVpef25-QQAAAM0"]
[Wed Apr 22 05:35:27.240109 2026] [:error] [pid 21788:tid 21795] [client 45.137.126.16:33423] [client 45.137.126.16] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.137.126.16, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aeftn37OM27rzVpef25-TwAAAMU"]
[Wed Apr 22 05:35:27.732119 2026] [proxy_fcgi:error] [pid 21788:tid 21794] [client 45.137.126.16:33423] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:35:30.177222 2026] [proxy_fcgi:error] [pid 21788:tid 21801] [client 45.137.126.16:33423] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:35:30.745540 2026] [proxy_fcgi:error] [pid 21788:tid 21810] [client 45.137.126.16:33423] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:35:34.225119 2026] [:error] [pid 21788:tid 21790] [client 45.137.126.16:33423] [client 45.137.126.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aeftpn7OM27rzVpef25-cAAAAMA"]
[Wed Apr 22 05:35:35.200583 2026] [proxy_fcgi:error] [pid 21682:tid 21746] [client 45.137.126.25:59241] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:35:35.689923 2026] [proxy_fcgi:error] [pid 21682:tid 21734] [client 45.137.126.25:59241] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:35:36.175784 2026] [:error] [pid 21682:tid 21737] [client 45.137.126.25:59241] [client 45.137.126.25] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.137.126.25, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aeftqJlXWQZUlmPHS3rubQAAAE4"]
[Wed Apr 22 05:35:37.152479 2026] [:error] [pid 21682:tid 21736] [client 45.137.126.25:59241] [client 45.137.126.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/item.php"] [unique_id "aeftqZlXWQZUlmPHS3rucAAAAE0"]
[Wed Apr 22 05:35:39.604300 2026] [proxy_fcgi:error] [pid 21788:tid 21800] [client 45.137.126.47:37723] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:35:40.096409 2026] [proxy_fcgi:error] [pid 21788:tid 21808] [client 45.137.126.47:37723] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:35:41.077020 2026] [proxy_fcgi:error] [pid 21788:tid 21793] [client 45.137.126.47:37723] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:35:42.054077 2026] [:error] [pid 21788:tid 21792] [client 45.137.126.47:37723] [client 45.137.126.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aeftrn7OM27rzVpef25-jAAAAMI"]
[Wed Apr 22 05:35:43.033114 2026] [proxy_fcgi:error] [pid 21683:tid 21768] [client 45.137.126.33:32401] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:35:44.507691 2026] [proxy_fcgi:error] [pid 21683:tid 21755] [client 45.137.126.33:32401] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:35:45.492094 2026] [proxy_fcgi:error] [pid 21683:tid 21758] [client 45.137.126.33:32401] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:35:46.473163 2026] [proxy_fcgi:error] [pid 21683:tid 21768] [client 45.137.126.33:32401] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:35:46.960024 2026] [:error] [pid 21683:tid 21757] [client 45.137.126.33:32401] [client 45.137.126.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aeftslZBWT-0diZyYyZ9xgAAAIc"]
[Wed Apr 22 05:35:47.935700 2026] [proxy_fcgi:error] [pid 23041:tid 23048] [client 45.137.126.49:36759] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:35:48.429524 2026] [proxy_fcgi:error] [pid 23041:tid 23059] [client 45.137.126.49:36759] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:35:48.914492 2026] [:error] [pid 23041:tid 23057] [client 45.137.126.49:36759] [client 45.137.126.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aefttETXx_lUa7xwAb62XAAAAQ0"]
[Wed Apr 22 05:35:50.378769 2026] [proxy_fcgi:error] [pid 21788:tid 21793] [client 45.137.126.27:62849] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:35:51.352125 2026] [:error] [pid 21788:tid 21806] [client 45.137.126.27:62849] [client 45.137.126.27] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.137.126.27, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "aeftt37OM27rzVpef25-rAAAANA"]
[Wed Apr 22 05:35:51.842276 2026] [:error] [pid 21788:tid 21804] [client 45.137.126.27:62849] [client 45.137.126.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aeftt37OM27rzVpef25-rwAAAM4"]
[Wed Apr 22 05:35:57.754848 2026] [proxy_fcgi:error] [pid 21788:tid 21794] [client 45.137.126.43:33299] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:36:00.750549 2026] [proxy_fcgi:error] [pid 21788:tid 21811] [client 45.137.126.43:33299] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:36:01.289739 2026] [:error] [pid 21788:tid 21809] [client 45.137.126.43:33299] [client 45.137.126.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aeftwX7OM27rzVpef25-zwAAANM"]
[Wed Apr 22 05:36:02.269594 2026] [proxy_fcgi:error] [pid 21788:tid 21800] [client 45.137.126.23:56037] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:36:03.733997 2026] [:error] [pid 21788:tid 21795] [client 45.137.126.23:56037] [client 45.137.126.23] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.137.126.23, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aeftw37OM27rzVpef25-3AAAAMU"]
[Wed Apr 22 05:36:04.228008 2026] [proxy_fcgi:error] [pid 21788:tid 21802] [client 45.137.126.23:56037] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:36:04.716847 2026] [proxy_fcgi:error] [pid 21788:tid 21808] [client 45.137.126.23:56037] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:36:05.222542 2026] [proxy_fcgi:error] [pid 21788:tid 21800] [client 45.137.126.23:56037] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:36:05.707991 2026] [:error] [pid 21788:tid 21798] [client 45.137.126.23:56037] [client 45.137.126.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aeftxX7OM27rzVpef25-6QAAAMg"]
[Wed Apr 22 05:36:06.692739 2026] [proxy_fcgi:error] [pid 23041:tid 23059] [client 45.137.126.17:60563] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:36:07.190956 2026] [:error] [pid 23041:tid 23058] [client 45.137.126.17:60563] [client 45.137.126.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/infi.php"] [unique_id "aeftx0TXx_lUa7xwAb62jAAAAQ4"]
[Wed Apr 22 05:36:08.653574 2026] [proxy_fcgi:error] [pid 21683:tid 21767] [client 45.137.126.28:24773] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:36:09.137568 2026] [:error] [pid 21683:tid 21751] [client 45.137.126.28:24773] [client 45.137.126.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aeftyVZBWT-0diZyYyZ91AAAAIE"]
[Wed Apr 22 05:36:10.118555 2026] [proxy_fcgi:error] [pid 21683:tid 21755] [client 45.137.126.52:54249] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:36:11.099694 2026] [proxy_fcgi:error] [pid 21683:tid 21756] [client 45.137.126.52:54249] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:36:11.587246 2026] [:error] [pid 21683:tid 21760] [client 45.137.126.52:54249] [client 45.137.126.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "aefty1ZBWT-0diZyYyZ92gAAAIo"]
[Wed Apr 22 05:36:12.563558 2026] [:error] [pid 21788:tid 21795] [client 45.137.126.48:36961] [client 45.137.126.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "aeftzH7OM27rzVpef25-_wAAAMU"]
[Wed Apr 22 05:36:13.544972 2026] [proxy_fcgi:error] [pid 21788:tid 21796] [client 45.137.126.21:56513] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:36:14.035795 2026] [proxy_fcgi:error] [pid 21788:tid 21811] [client 45.137.126.21:56513] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:36:16.006603 2026] [:error] [pid 21788:tid 21797] [client 45.137.126.21:56513] [client 45.137.126.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aeft0H7OM27rzVpef25_DAAAAMc"]
[Wed Apr 22 05:36:17.491639 2026] [:error] [pid 23041:tid 23062] [client 45.137.126.14:50555] [client 45.137.126.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "aeft0UTXx_lUa7xwAb62vAAAARI"]
[Wed Apr 22 05:36:19.942290 2026] [:error] [pid 21788:tid 21813] [client 45.137.126.11:60941] [client 45.137.126.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/edit.php"] [unique_id "aeft037OM27rzVpef25_GwAAANc"]
[Wed Apr 22 05:36:20.920833 2026] [proxy_fcgi:error] [pid 23041:tid 23067] [client 45.137.126.22:54305] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:36:21.901198 2026] [proxy_fcgi:error] [pid 23041:tid 23056] [client 45.137.126.22:54305] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:36:22.398096 2026] [:error] [pid 23041:tid 23047] [client 45.137.126.22:54305] [client 45.137.126.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "aeft1kTXx_lUa7xwAb621QAAAQM"]
[Wed Apr 22 05:36:23.378153 2026] [proxy_fcgi:error] [pid 21681:tid 21692] [client 45.137.126.35:59159] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:36:24.352367 2026] [:error] [pid 21681:tid 21704] [client 45.137.126.35:59159] [client 45.137.126.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/click.php"] [unique_id "aeft2N5LmJziq-yZYawoIwAAAA4"]
[Wed Apr 22 05:36:26.800300 2026] [:error] [pid 21682:tid 21738] [client 45.137.126.40:40325] [client 45.137.126.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "aeft2plXWQZUlmPHS3rusQAAAE8"]
[Wed Apr 22 05:36:28.267596 2026] [proxy_fcgi:error] [pid 21788:tid 21814] [client 45.137.126.30:64875] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:36:29.737822 2026] [proxy_fcgi:error] [pid 21788:tid 21794] [client 45.137.126.30:64875] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:36:30.786108 2026] [proxy_fcgi:error] [pid 21788:tid 21810] [client 45.137.126.30:64875] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:36:31.287511 2026] [:error] [pid 21788:tid 21796] [client 45.137.126.30:64875] [client 45.137.126.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "aeft337OM27rzVpef25_QQAAAMY"]
[Wed Apr 22 05:36:32.263564 2026] [:error] [pid 21788:tid 21794] [client 45.137.126.27:60581] [client 45.137.126.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/xl2023.php"] [unique_id "aeft4H7OM27rzVpef25_SAAAAMQ"]
[Wed Apr 22 05:36:33.236568 2026] [:error] [pid 21682:tid 21728] [client 45.137.126.7:59447] [client 45.137.126.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/certificates/admin.php"] [unique_id "aeft4ZlXWQZUlmPHS3ruuQAAAEU"]
[Wed Apr 22 05:36:34.216075 2026] [:error] [pid 21682:tid 21747] [client 45.137.126.35:45083] [client 45.137.126.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/media/dog.php"] [unique_id "aeft4plXWQZUlmPHS3ruvQAAAFg"]
[Wed Apr 22 05:36:35.197864 2026] [proxy_fcgi:error] [pid 23041:tid 23045] [client 45.137.126.13:21857] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:36:35.683721 2026] [:error] [pid 23041:tid 23061] [client 45.137.126.13:21857] [client 45.137.126.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "aeft40TXx_lUa7xwAb62-gAAARE"]
[Wed Apr 22 05:36:36.654451 2026] [:error] [pid 21683:tid 21757] [client 45.137.126.43:39079] [client 45.137.126.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aeft5FZBWT-0diZyYyZ-CQAAAIc"]
[Wed Apr 22 05:36:37.630420 2026] [proxy_fcgi:error] [pid 21682:tid 21727] [client 45.137.126.50:20395] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:36:38.607679 2026] [:error] [pid 21682:tid 21726] [client 45.137.126.50:20395] [client 45.137.126.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aeft5plXWQZUlmPHS3ruxgAAAEM"]
[Wed Apr 22 05:36:39.581679 2026] [:error] [pid 21788:tid 21811] [client 45.137.126.19:41447] [client 45.137.126.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aeft537OM27rzVpef25_ZAAAANU"]
[Wed Apr 22 05:36:40.551406 2026] [:error] [pid 21788:tid 21792] [client 45.137.126.29:27115] [client 45.137.126.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/pomo/admin.php"] [unique_id "aeft6H7OM27rzVpef25_ZwAAAMI"]
[Wed Apr 22 05:36:41.523978 2026] [:error] [pid 21683:tid 21759] [client 45.137.126.23:42999] [client 45.137.126.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/IXR/security.php"] [unique_id "aeft6VZBWT-0diZyYyZ-EgAAAIk"]
[Wed Apr 22 05:36:42.985798 2026] [:error] [pid 23041:tid 23049] [client 45.137.126.38:60617] [client 45.137.126.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aeft6kTXx_lUa7xwAb63AgAAAQU"]
[Wed Apr 22 05:36:44.941653 2026] [:error] [pid 21788:tid 21800] [client 45.137.126.42:43651] [client 45.137.126.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/fonts/about.php"] [unique_id "aeft7H7OM27rzVpef25_fwAAAMo"]
[Wed Apr 22 05:36:45.915594 2026] [proxy_fcgi:error] [pid 23041:tid 23045] [client 45.137.126.15:53169] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:36:47.385085 2026] [proxy_fcgi:error] [pid 23041:tid 23064] [client 45.137.126.15:53169] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:36:47.874460 2026] [:error] [pid 23041:tid 23052] [client 45.137.126.15:53169] [client 45.137.126.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "aeft70TXx_lUa7xwAb63CgAAAQg"]
[Wed Apr 22 05:36:49.345957 2026] [proxy_fcgi:error] [pid 21682:tid 21738] [client 45.137.126.23:34779] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:36:49.837346 2026] [proxy_fcgi:error] [pid 21682:tid 21740] [client 45.137.126.23:34779] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:36:52.286463 2026] [:error] [pid 21682:tid 21737] [client 45.137.126.23:34779] [client 45.137.126.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/file.php"] [unique_id "aeft9JlXWQZUlmPHS3ru7gAAAE4"]
[Wed Apr 22 05:36:54.731518 2026] [:error] [pid 23041:tid 23048] [client 45.137.126.27:61749] [client 45.137.126.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "aeft9kTXx_lUa7xwAb63HgAAAQQ"]
[Wed Apr 22 05:36:55.699877 2026] [:error] [pid 23041:tid 23067] [client 45.137.126.39:61573] [client 45.137.126.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "aeft90TXx_lUa7xwAb63IQAAARc"]
[Wed Apr 22 05:36:58.640003 2026] [:error] [pid 21788:tid 21814] [client 45.137.126.30:24181] [client 45.137.126.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aeft-n7OM27rzVpef25_rwAAANg"]
[Wed Apr 22 05:37:00.611344 2026] [proxy_fcgi:error] [pid 21788:tid 21806] [client 45.137.126.27:26633] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:37:02.135684 2026] [proxy_fcgi:error] [pid 21788:tid 21806] [client 45.137.126.27:26633] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:37:02.630356 2026] [proxy_fcgi:error] [pid 21788:tid 21803] [client 45.137.126.27:26633] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:37:03.126048 2026] [proxy_fcgi:error] [pid 21788:tid 21792] [client 45.137.126.27:26633] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:37:05.592930 2026] [:error] [pid 21788:tid 21795] [client 45.137.126.27:26633] [client 45.137.126.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aefuAX7OM27rzVpef25_3gAAAMU"]
[Wed Apr 22 05:37:06.568874 2026] [:error] [pid 23041:tid 23052] [client 45.137.126.50:47683] [client 45.137.126.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "aefuAkTXx_lUa7xwAb63MQAAAQg"]
[Wed Apr 22 05:37:07.544968 2026] [:error] [pid 21682:tid 21734] [client 45.137.126.53:43425] [client 45.137.126.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "aefuA5lXWQZUlmPHS3ru_QAAAEs"]
[Wed Apr 22 05:37:08.525781 2026] [:error] [pid 21682:tid 21723] [client 45.137.126.26:58393] [client 45.137.126.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "aefuBJlXWQZUlmPHS3rvAgAAAEA"]
[Wed Apr 22 05:37:09.498656 2026] [:error] [pid 21681:tid 21708] [client 45.137.126.51:48657] [client 45.137.126.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aefuBd5LmJziq-yZYawoRwAAABI"]
[Wed Apr 22 05:37:10.473555 2026] [:error] [pid 21683:tid 21759] [client 45.137.126.2:28385] [client 45.137.126.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aefuBlZBWT-0diZyYyZ-PQAAAIk"]
[Wed Apr 22 05:37:11.942874 2026] [:error] [pid 21788:tid 21790] [client 45.137.126.12:26343] [client 45.137.126.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/media/index.php"] [unique_id "aefuB37OM27rzVpef25_9AAAAMA"]
[Wed Apr 22 05:37:12.917492 2026] [:error] [pid 21788:tid 21806] [client 45.137.126.41:54211] [client 45.137.126.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "aefuCH7OM27rzVpef25_9gAAANA"]
[Wed Apr 22 05:37:13.894323 2026] [:error] [pid 21682:tid 21737] [client 45.137.126.10:22299] [client 45.137.126.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "aefuCZlXWQZUlmPHS3rvBwAAAE4"]
[Wed Apr 22 05:37:14.866764 2026] [:error] [pid 21788:tid 21795] [client 45.137.126.25:45633] [client 45.137.126.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "aefuCn7OM27rzVpef25__QAAAMU"]
[Wed Apr 22 05:37:16.822105 2026] [:error] [pid 21788:tid 21799] [client 45.137.126.45:50591] [client 45.137.126.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/fonts/themes.php"] [unique_id "aefuDH7OM27rzVpef26ADAAAAMk"]
[Wed Apr 22 05:37:18.291846 2026] [:error] [pid 21788:tid 21801] [client 45.137.126.12:59061] [client 45.137.126.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/certificates/index.php"] [unique_id "aefuDn7OM27rzVpef26AGAAAAMs"]
[Wed Apr 22 05:37:19.278767 2026] [proxy_fcgi:error] [pid 23041:tid 23056] [client 45.137.126.5:31145] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:37:20.255174 2026] [:error] [pid 23041:tid 23051] [client 45.137.126.5:31145] [client 45.137.126.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "aefuEETXx_lUa7xwAb63UwAAAQc"]
[Wed Apr 22 05:37:22.217185 2026] [:error] [pid 21683:tid 21760] [client 45.137.126.37:46783] [client 45.137.126.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "aefuElZBWT-0diZyYyZ-UgAAAIo"]
[Wed Apr 22 05:37:24.176698 2026] [proxy_fcgi:error] [pid 21683:tid 21773] [client 45.137.126.43:40923] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:37:24.665085 2026] [:error] [pid 21683:tid 21751] [client 45.137.126.43:40923] [client 45.137.126.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aefuFFZBWT-0diZyYyZ-YAAAAIE"]
[Wed Apr 22 05:37:26.134778 2026] [proxy_fcgi:error] [pid 21683:tid 21757] [client 45.137.126.50:57041] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:37:26.628019 2026] [proxy_fcgi:error] [pid 21683:tid 21752] [client 45.137.126.50:57041] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:37:27.116918 2026] [proxy_fcgi:error] [pid 21683:tid 21750] [client 45.137.126.50:57041] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:37:27.601522 2026] [:error] [pid 21683:tid 21771] [client 45.137.126.50:57041] [client 45.137.126.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "aefuF1ZBWT-0diZyYyZ-cwAAAJU"]
[Wed Apr 22 05:37:28.578262 2026] [proxy_fcgi:error] [pid 21788:tid 21807] [client 45.137.126.38:53231] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:37:29.064033 2026] [:error] [pid 21788:tid 21798] [client 45.137.126.38:53231] [client 45.137.126.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "aefuGX7OM27rzVpef26AJgAAAMg"]
[Wed Apr 22 05:37:31.028325 2026] [proxy_fcgi:error] [pid 23041:tid 23050] [client 45.137.126.42:44831] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:37:31.517247 2026] [proxy_fcgi:error] [pid 23041:tid 23056] [client 45.137.126.42:44831] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:37:33.131028 2026] [proxy_fcgi:error] [pid 23041:tid 23057] [client 45.137.126.42:44831] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:37:35.585453 2026] [proxy_fcgi:error] [pid 23041:tid 23059] [client 45.137.126.42:44831] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:37:36.076631 2026] [proxy_fcgi:error] [pid 23041:tid 23055] [client 45.137.126.42:44831] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:37:37.054611 2026] [proxy_fcgi:error] [pid 23041:tid 23068] [client 45.137.126.42:44831] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:37:38.535276 2026] [proxy_fcgi:error] [pid 23041:tid 23059] [client 45.137.126.42:44831] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:37:39.020810 2026] [:error] [pid 23041:tid 23044] [client 45.137.126.42:44831] [client 45.137.126.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "aefuI0TXx_lUa7xwAb63jQAAAQA"]
[Wed Apr 22 05:37:39.995610 2026] [:error] [pid 21683:tid 21752] [client 45.137.126.7:48051] [client 45.137.126.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aefuI1ZBWT-0diZyYyZ-hAAAAII"]
[Wed Apr 22 05:37:40.971404 2026] [proxy_fcgi:error] [pid 21788:tid 21813] [client 45.137.126.26:27839] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:37:41.460148 2026] [:error] [pid 21788:tid 21790] [client 45.137.126.26:27839] [client 45.137.126.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "aefuJX7OM27rzVpef26ARwAAAMA"]
[Wed Apr 22 05:37:42.937791 2026] [proxy_fcgi:error] [pid 21788:tid 21804] [client 45.137.126.6:54275] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:37:43.423338 2026] [:error] [pid 21788:tid 21793] [client 45.137.126.6:54275] [client 45.137.126.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aefuJ37OM27rzVpef26AUwAAAMM"]
[Wed Apr 22 05:37:44.398758 2026] [:error] [pid 21788:tid 21808] [client 45.137.126.3:48713] [client 45.137.126.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aefuKH7OM27rzVpef26AWgAAANI"]
[Wed Apr 22 05:37:47.332615 2026] [:error] [pid 23041:tid 23061] [client 45.137.126.21:56641] [client 45.137.126.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aefuK0TXx_lUa7xwAb63nwAAARE"]
[Wed Apr 22 05:37:48.306032 2026] [:error] [pid 21683:tid 21765] [client 45.137.126.32:21811] [client 45.137.126.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dwelectservices.com.au"] [uri "/fm.php"] [unique_id "aefuLFZBWT-0diZyYyZ-iQAAAI8"]
[Wed Apr 22 05:37:50.764075 2026] [proxy_fcgi:error] [pid 21682:tid 21737] [client 45.137.126.12:25489] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:37:51.743666 2026] [:error] [pid 21682:tid 21743] [client 45.137.126.12:25489] [client 45.137.126.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "aefuL5lXWQZUlmPHS3rvUwAAAFQ"]
[Wed Apr 22 05:37:53.217629 2026] [proxy_fcgi:error] [pid 21682:tid 21739] [client 45.137.126.31:20865] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:37:54.207125 2026] [:error] [pid 21682:tid 21741] [client 45.137.126.31:20865] [client 45.137.126.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/function.php"] [unique_id "aefuMplXWQZUlmPHS3rvWgAAAFI"]
[Wed Apr 22 05:37:55.183361 2026] [:error] [pid 23041:tid 23050] [client 45.137.126.25:37765] [client 45.137.126.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/plugins.php"] [unique_id "aefuM0TXx_lUa7xwAb63rgAAAQY"]
[Wed Apr 22 05:37:56.651839 2026] [proxy_fcgi:error] [pid 21683:tid 21758] [client 45.137.126.49:50721] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:37:57.138972 2026] [:error] [pid 21683:tid 21773] [client 45.137.126.49:50721] [client 45.137.126.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/chosen.php"] [unique_id "aefuNVZBWT-0diZyYyZ-qgAAAJc"]
[Wed Apr 22 05:37:58.115784 2026] [:error] [pid 21682:tid 21723] [client 45.137.126.29:57595] [client 45.137.126.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "aefuNplXWQZUlmPHS3rvYAAAAEA"]
[Wed Apr 22 05:38:01.113296 2026] [proxy_fcgi:error] [pid 21683:tid 21753] [client 45.137.126.10:60223] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:38:01.601493 2026] [proxy_fcgi:error] [pid 21683:tid 21750] [client 45.137.126.10:60223] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:38:02.576647 2026] [proxy_fcgi:error] [pid 21683:tid 21770] [client 45.137.126.10:60223] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:38:03.553560 2026] [:error] [pid 21683:tid 21766] [client 45.137.126.10:60223] [client 45.137.126.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/atomlib.php"] [unique_id "aefuO1ZBWT-0diZyYyZ-xwAAAJA"]
[Wed Apr 22 05:38:04.527653 2026] [:error] [pid 21681:tid 21707] [client 45.137.126.45:44167] [client 45.137.126.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/rest-api/index.php"] [unique_id "aefuPN5LmJziq-yZYawoYwAAABE"]
[Wed Apr 22 05:38:06.974056 2026] [proxy_fcgi:error] [pid 23041:tid 23051] [client 45.137.126.36:56767] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:38:07.466979 2026] [:error] [pid 23041:tid 23066] [client 45.137.126.36:56767] [client 45.137.126.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/index.php"] [unique_id "aefuP0TXx_lUa7xwAb63xAAAARY"]
[Wed Apr 22 05:38:08.438477 2026] [:error] [pid 21683:tid 21762] [client 45.137.126.17:21011] [client 45.137.126.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aefuQFZBWT-0diZyYyZ-zAAAAIw"]
[Wed Apr 22 05:38:09.418121 2026] [:error] [pid 21683:tid 21758] [client 45.137.126.47:45501] [client 45.137.126.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aefuQVZBWT-0diZyYyZ-zwAAAIg"]
[Wed Apr 22 05:38:12.696649 2026] [proxy_fcgi:error] [pid 21683:tid 21768] [client 45.137.126.47:41397] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:38:13.181782 2026] [:error] [pid 21683:tid 21764] [client 45.137.126.47:41397] [client 45.137.126.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/Exception-wp.php"] [unique_id "aefuRVZBWT-0diZyYyZ-2wAAAI4"]
[Wed Apr 22 05:38:14.644930 2026] [:error] [pid 21788:tid 21794] [client 45.137.126.46:25175] [client 45.137.126.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aefuRn7OM27rzVpef26ArwAAAMQ"]
[Wed Apr 22 05:38:15.623561 2026] [proxy_fcgi:error] [pid 21788:tid 21801] [client 45.137.126.52:32367] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:38:16.114374 2026] [proxy_fcgi:error] [pid 21788:tid 21800] [client 45.137.126.52:32367] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:38:17.096619 2026] [proxy_fcgi:error] [pid 21788:tid 21798] [client 45.137.126.52:32367] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:38:19.065848 2026] [:error] [pid 21788:tid 21800] [client 45.137.126.52:32367] [client 45.137.126.52] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.137.126.52, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/js/wp-login.php"] [unique_id "aefuS37OM27rzVpef26AxQAAAMo"]
[Wed Apr 22 05:38:20.052816 2026] [:error] [pid 21788:tid 21808] [client 45.137.126.52:32367] File does not exist: /home/dwelects/public_html/worm.PhP
[Wed Apr 22 05:38:20.543839 2026] [proxy_fcgi:error] [pid 21788:tid 21804] [client 45.137.126.52:32367] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:38:21.035892 2026] [proxy_fcgi:error] [pid 21788:tid 21811] [client 45.137.126.52:32367] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:38:22.014266 2026] [:error] [pid 21788:tid 21797] [client 45.137.126.52:32367] [client 45.137.126.52] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.137.126.52, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "aefuTn7OM27rzVpef26AzwAAAMc"]
[Wed Apr 22 05:38:23.489483 2026] [proxy_fcgi:error] [pid 21788:tid 21813] [client 45.137.126.52:32367] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:38:23.980704 2026] [proxy_fcgi:error] [pid 21788:tid 21814] [client 45.137.126.52:32367] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:38:24.968354 2026] [proxy_fcgi:error] [pid 21788:tid 21804] [client 45.137.126.52:32367] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:38:25.950145 2026] [proxy_fcgi:error] [pid 21788:tid 21811] [client 45.137.126.52:32367] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:38:27.420740 2026] [proxy_fcgi:error] [pid 21788:tid 21794] [client 45.137.126.52:32367] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:38:30.914596 2026] [proxy_fcgi:error] [pid 21788:tid 21797] [client 45.137.126.52:32367] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:38:31.406014 2026] [proxy_fcgi:error] [pid 21788:tid 21800] [client 45.137.126.52:32367] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:38:34.795020 2026] [proxy_fcgi:error] [pid 21788:tid 21811] [client 45.137.126.52:32367] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:38:35.775153 2026] [:error] [pid 21788:tid 21800] [client 45.137.126.52:32367] [client 45.137.126.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "aefuW37OM27rzVpef26BBwAAAMo"]
[Wed Apr 22 05:38:37.749714 2026] [proxy_fcgi:error] [pid 21683:tid 21757] [client 45.137.126.30:25581] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:38:38.236769 2026] [:error] [pid 21683:tid 21769] [client 45.137.126.30:25581] [client 45.137.126.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aefuXlZBWT-0diZyYyZ_EAAAAJM"]
[Wed Apr 22 05:38:39.210923 2026] [proxy_fcgi:error] [pid 21683:tid 21751] [client 45.137.126.8:37693] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:38:39.709717 2026] [proxy_fcgi:error] [pid 21683:tid 21770] [client 45.137.126.8:37693] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:38:40.195003 2026] [:error] [pid 21683:tid 21763] [client 45.137.126.8:37693] [client 45.137.126.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/atomlib.php"] [unique_id "aefuYFZBWT-0diZyYyZ_GwAAAI0"]
[Wed Apr 22 05:38:42.170069 2026] [proxy_fcgi:error] [pid 23041:tid 23066] [client 45.137.126.8:26291] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:38:43.149745 2026] [proxy_fcgi:error] [pid 23041:tid 23065] [client 45.137.126.8:26291] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:38:44.128032 2026] [proxy_fcgi:error] [pid 23041:tid 23048] [client 45.137.126.8:26291] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:38:44.625393 2026] [proxy_fcgi:error] [pid 23041:tid 23063] [client 45.137.126.8:26291] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:38:45.600364 2026] [:error] [pid 23041:tid 23058] [client 45.137.126.8:26291] [client 45.137.126.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aefuZUTXx_lUa7xwAb63_gAAAQ4"]
[Wed Apr 22 05:38:46.576117 2026] [proxy_fcgi:error] [pid 21788:tid 21793] [client 45.137.126.6:63647] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:38:47.067377 2026] [proxy_fcgi:error] [pid 21788:tid 21805] [client 45.137.126.6:63647] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:38:47.553847 2026] [:error] [pid 21788:tid 21800] [client 45.137.126.6:63647] [client 45.137.126.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aefuZ37OM27rzVpef26BOAAAAMo"]
[Wed Apr 22 05:38:49.009314 2026] [:error] [pid 21788:tid 21797] [client 45.137.126.7:35523] [client 45.137.126.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aefuaX7OM27rzVpef26BPgAAAMc"]
[Wed Apr 22 05:38:50.472503 2026] [proxy_fcgi:error] [pid 21788:tid 21810] [client 45.137.126.42:26619] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:38:51.940170 2026] [proxy_fcgi:error] [pid 21788:tid 21814] [client 45.137.126.42:26619] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:38:52.429291 2026] [proxy_fcgi:error] [pid 21788:tid 21802] [client 45.137.126.42:26619] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:38:52.915117 2026] [:error] [pid 21788:tid 21808] [client 45.137.126.42:26619] [client 45.137.126.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "aefubH7OM27rzVpef26BVQAAANI"]
[Wed Apr 22 05:38:53.891833 2026] [:error] [pid 21683:tid 21755] [client 45.137.126.4:21863] [client 45.137.126.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "aefubVZBWT-0diZyYyZ_NgAAAIU"]
[Wed Apr 22 05:38:58.202383 2026] [proxy_fcgi:error] [pid 21788:tid 21804] [client 45.137.126.10:29151] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:38:59.179911 2026] [:error] [pid 21788:tid 21795] [client 45.137.126.10:29151] [client 45.137.126.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/dist/default.php"] [unique_id "aefuc37OM27rzVpef26BcgAAAMU"]
[Wed Apr 22 05:39:00.651581 2026] [:error] [pid 21683:tid 21760] [client 45.137.126.36:41907] [client 45.137.126.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dwelectservices.com.au"] [uri "/tiny.php"] [unique_id "aefudFZBWT-0diZyYyZ_QwAAAIo"]
[Wed Apr 22 05:39:02.120355 2026] [proxy_fcgi:error] [pid 21681:tid 21698] [client 45.137.126.26:45487] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:39:02.620811 2026] [proxy_fcgi:error] [pid 21681:tid 21710] [client 45.137.126.26:45487] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:39:03.108808 2026] [:error] [pid 21681:tid 21713] [client 45.137.126.26:45487] [client 45.137.126.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "aefud95LmJziq-yZYawovQAAABc"]
[Wed Apr 22 05:39:04.581564 2026] [proxy_fcgi:error] [pid 21788:tid 21807] [client 45.137.126.35:39013] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:39:05.073078 2026] [proxy_fcgi:error] [pid 21788:tid 21805] [client 45.137.126.35:39013] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:39:06.060582 2026] [proxy_fcgi:error] [pid 21788:tid 21801] [client 45.137.126.35:39013] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:39:07.533157 2026] [:error] [pid 21788:tid 21798] [client 45.137.126.35:39013] [client 45.137.126.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/Parse/about.php"] [unique_id "aefue37OM27rzVpef26BiwAAAMg"]
[Wed Apr 22 05:39:08.513306 2026] [proxy_fcgi:error] [pid 21683:tid 21750] [client 45.137.126.4:52447] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:39:09.981093 2026] [:error] [pid 21683:tid 21755] [client 45.137.126.4:52447] [client 45.137.126.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "aefufVZBWT-0diZyYyZ_XwAAAIU"]
[Wed Apr 22 05:39:12.486716 2026] [proxy_fcgi:error] [pid 23041:tid 23050] [client 45.137.126.46:23069] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:39:15.245750 2026] [proxy_fcgi:error] [pid 23041:tid 23064] [client 45.137.126.46:23069] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:39:15.737539 2026] [proxy_fcgi:error] [pid 23041:tid 23065] [client 45.137.126.46:23069] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:39:16.712123 2026] [:error] [pid 23041:tid 23051] [client 45.137.126.46:23069] [client 45.137.126.46] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.137.126.46, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/colors/ocean/wp-login.php"] [unique_id "aefuhETXx_lUa7xwAb64aQAAAQc"]
[Wed Apr 22 05:39:18.187957 2026] [proxy_fcgi:error] [pid 23041:tid 23055] [client 45.137.126.46:23069] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:39:19.163957 2026] [:error] [pid 23041:tid 23067] [client 45.137.126.46:23069] [client 45.137.126.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/Cache/upfile.php"] [unique_id "aefuh0TXx_lUa7xwAb64dgAAARc"]
[Wed Apr 22 05:39:20.146456 2026] [proxy_fcgi:error] [pid 21682:tid 21733] [client 45.137.126.27:47463] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:39:20.632740 2026] [:error] [pid 21682:tid 21732] [client 45.137.126.27:47463] [client 45.137.126.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "aefuiJlXWQZUlmPHS3rv0AAAAEk"]
[Wed Apr 22 05:39:21.612673 2026] [proxy_fcgi:error] [pid 23041:tid 23065] [client 45.137.126.39:57271] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:39:22.594497 2026] [proxy_fcgi:error] [pid 23041:tid 23066] [client 45.137.126.39:57271] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:39:23.574217 2026] [:error] [pid 23041:tid 23050] [client 45.137.126.39:57271] [client 45.137.126.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/widgets/class-wp-widget-search-function.php"] [unique_id "aefui0TXx_lUa7xwAb64jgAAAQY"]
[Wed Apr 22 05:39:25.039569 2026] [proxy_fcgi:error] [pid 21682:tid 21742] [client 45.137.126.8:63105] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:39:25.529876 2026] [proxy_fcgi:error] [pid 21682:tid 21744] [client 45.137.126.8:63105] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:39:26.020480 2026] [:error] [pid 21682:tid 21727] [client 45.137.126.8:63105] [client 45.137.126.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/Canonical.php"] [unique_id "aefujplXWQZUlmPHS3rv2AAAAEQ"]
[Wed Apr 22 05:39:26.993299 2026] [:error] [pid 23041:tid 23045] [client 45.137.126.24:46681] [client 45.137.126.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "aefujkTXx_lUa7xwAb64nwAAAQE"]
[Wed Apr 22 05:39:27.989346 2026] [proxy_fcgi:error] [pid 21682:tid 21726] [client 45.137.126.19:41759] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:39:28.485443 2026] [proxy_fcgi:error] [pid 21682:tid 21743] [client 45.137.126.19:41759] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:39:29.456487 2026] [:error] [pid 21682:tid 21747] [client 45.137.126.19:41759] [client 45.137.126.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/class-feed-index.php"] [unique_id "aefukZlXWQZUlmPHS3rv5QAAAFg"]
[Wed Apr 22 05:39:30.436618 2026] [proxy_fcgi:error] [pid 21683:tid 21754] [client 45.137.126.16:52961] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:39:31.477697 2026] [proxy_fcgi:error] [pid 21683:tid 21762] [client 45.137.126.16:52961] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:39:31.963108 2026] [:error] [pid 21683:tid 21773] [client 45.137.126.16:52961] [client 45.137.126.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php"] [unique_id "aefuk1ZBWT-0diZyYyZ_pwAAAJc"]
[Wed Apr 22 05:39:33.451219 2026] [:error] [pid 23041:tid 23044] [client 45.137.126.40:32093] [client 45.137.126.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/db.php"] [unique_id "aefulUTXx_lUa7xwAb64tgAAAQA"]
[Wed Apr 22 05:39:34.432816 2026] [:error] [pid 21681:tid 21711] [client 45.137.126.10:43399] [client 45.137.126.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/class-wp-dependency-float.php"] [unique_id "aefult5LmJziq-yZYawo1gAAABU"]
[Wed Apr 22 05:39:35.407453 2026] [:error] [pid 21788:tid 21809] [client 45.137.126.49:29525] [client 45.137.126.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "aeful37OM27rzVpef26CHwAAANM"]
[Wed Apr 22 05:39:36.377461 2026] [:error] [pid 23041:tid 23050] [client 45.137.126.29:40289] [client 45.137.126.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/PHPMailer/purna.php"] [unique_id "aefumETXx_lUa7xwAb64vgAAAQY"]
[Wed Apr 22 05:39:37.350994 2026] [:error] [pid 21788:tid 21797] [client 45.137.126.39:62537] [client 45.137.126.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/interactivity-api/interactivity-api-class.php"] [unique_id "aefumX7OM27rzVpef26CLQAAAMc"]
[Wed Apr 22 05:39:38.333877 2026] [:error] [pid 23041:tid 23048] [client 45.137.126.15:51305] [client 45.137.126.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/l10n/class-wp-widddget-pages.php"] [unique_id "aefumkTXx_lUa7xwAb64wAAAAQQ"]
[Wed Apr 22 05:39:40.304563 2026] [:error] [pid 21788:tid 21791] [client 45.137.126.44:22561] [client 45.137.126.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php"] [unique_id "aefunH7OM27rzVpef26CRwAAAME"]
[Wed Apr 22 05:39:41.278640 2026] [:error] [pid 21788:tid 21806] [client 45.137.126.46:32677] [client 45.137.126.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php"] [unique_id "aefunX7OM27rzVpef26CTQAAANA"]
[Wed Apr 22 05:39:42.257444 2026] [:error] [pid 23041:tid 23044] [client 45.137.126.20:39977] [client 45.137.126.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/ID3/module.audio-video.riff-set.php"] [unique_id "aefunkTXx_lUa7xwAb64yQAAAQA"]
[Wed Apr 22 05:39:43.234916 2026] [:error] [pid 21788:tid 21810] [client 45.137.126.42:48711] [client 45.137.126.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/tinymce/utils/license.php"] [unique_id "aefun37OM27rzVpef26CVQAAANQ"]
[Wed Apr 22 05:39:44.205616 2026] [:error] [pid 23041:tid 23066] [client 45.137.126.34:22719] [client 45.137.126.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Text/options.php"] [unique_id "aefuoETXx_lUa7xwAb640gAAARY"]
[Wed Apr 22 05:39:45.253246 2026] [proxy_fcgi:error] [pid 21683:tid 21753] [client 45.137.126.30:48235] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:39:46.713214 2026] [:error] [pid 21683:tid 21768] [client 45.137.126.30:48235] [client 45.137.126.30] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.137.126.30, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "aefuolZBWT-0diZyYyZ_ywAAAJI"]
[Wed Apr 22 05:39:49.172295 2026] [:error] [pid 21683:tid 21774] [client 45.137.126.30:48235] [client 45.137.126.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/IXR/goto.php"] [unique_id "aefupVZBWT-0diZyYyZ_2QAAAJg"]
[Wed Apr 22 05:39:51.134763 2026] [proxy_fcgi:error] [pid 21681:tid 21698] [client 45.137.126.15:22935] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:39:51.630706 2026] [proxy_fcgi:error] [pid 21681:tid 21696] [client 45.137.126.15:22935] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:39:53.608656 2026] [proxy_fcgi:error] [pid 21681:tid 21697] [client 45.137.126.15:22935] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:39:54.099926 2026] [proxy_fcgi:error] [pid 21681:tid 21691] [client 45.137.126.15:22935] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:39:56.062167 2026] [proxy_fcgi:error] [pid 21681:tid 21711] [client 45.137.126.15:22935] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:39:56.554519 2026] [proxy_fcgi:error] [pid 21681:tid 21698] [client 45.137.126.15:22935] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:39:57.054505 2026] [proxy_fcgi:error] [pid 21681:tid 21709] [client 45.137.126.15:22935] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:39:57.547674 2026] [proxy_fcgi:error] [pid 21681:tid 21690] [client 45.137.126.15:22935] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:39:58.035661 2026] [:error] [pid 21681:tid 21706] [client 45.137.126.15:22935] [client 45.137.126.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aefurt5LmJziq-yZYawpAAAAABA"]
[Wed Apr 22 05:39:59.013123 2026] [:error] [pid 21788:tid 21796] [client 45.137.126.31:26093] [client 45.137.126.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/wp_class_datlib.php"] [unique_id "aefur37OM27rzVpef26CkwAAAMY"]
[Wed Apr 22 05:39:59.983143 2026] [:error] [pid 21681:tid 21714] [client 45.137.126.16:51951] [client 45.137.126.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "aefur95LmJziq-yZYawpAQAAABg"]
[Wed Apr 22 05:40:01.563182 2026] [proxy_fcgi:error] [pid 21682:tid 21736] [client 45.137.126.17:58873] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:40:02.055683 2026] [proxy_fcgi:error] [pid 21682:tid 21743] [client 45.137.126.17:58873] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:40:03.039523 2026] [proxy_fcgi:error] [pid 21682:tid 21725] [client 45.137.126.17:58873] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:40:04.021494 2026] [:error] [pid 21682:tid 21732] [client 45.137.126.17:58873] [client 45.137.126.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/Registry-private.php"] [unique_id "aefutJlXWQZUlmPHS3rwOQAAAEk"]
[Wed Apr 22 05:40:05.002976 2026] [:error] [pid 23041:tid 23047] [client 45.137.126.13:64719] [client 45.137.126.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-meta.php"] [unique_id "aefutUTXx_lUa7xwAb65EQAAAQM"]
[Wed Apr 22 05:40:05.983334 2026] [:error] [pid 21683:tid 21752] [client 45.137.126.11:57271] [client 45.137.126.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/widgets/bypass.php"] [unique_id "aefutVZBWT-0diZyYyaAEAAAAII"]
[Wed Apr 22 05:40:08.934110 2026] [:error] [pid 21682:tid 21747] [client 45.137.126.49:28839] [client 45.137.126.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/style-engine/adminfus.php"] [unique_id "aefuuJlXWQZUlmPHS3rwRAAAAFg"]
[Wed Apr 22 05:40:09.913479 2026] [proxy_fcgi:error] [pid 21682:tid 21745] [client 45.137.126.14:54775] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:40:10.400750 2026] [:error] [pid 21682:tid 21742] [client 45.137.126.14:54775] [client 45.137.126.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/group/wp-style.php"] [unique_id "aefuuplXWQZUlmPHS3rwRgAAAFM"]
[Wed Apr 22 05:40:12.388333 2026] [:error] [pid 21788:tid 21797] [client 45.137.126.23:53953] [client 45.137.126.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/widgets/class-wp-wolf-widget.php"] [unique_id "aefuvH7OM27rzVpef26C1wAAAMc"]
[Wed Apr 22 05:40:19.540053 2026] [:error] [pid 23041:tid 23053] [client 45.137.126.31:61681] [client 45.137.126.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Text/index.php"] [unique_id "aefuw0TXx_lUa7xwAb65PAAAAQk"]
[Wed Apr 22 05:40:20.518641 2026] [proxy_fcgi:error] [pid 21788:tid 21814] [client 45.137.126.53:54547] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:40:21.005634 2026] [:error] [pid 21788:tid 21812] [client 45.137.126.53:54547] [client 45.137.126.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/about.php"] [unique_id "aefuxX7OM27rzVpef26DBgAAANY"]
[Wed Apr 22 05:40:22.966794 2026] [proxy_fcgi:error] [pid 21683:tid 21763] [client 45.137.126.11:59865] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:40:25.619673 2026] [proxy_fcgi:error] [pid 21683:tid 21758] [client 45.137.126.11:59865] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:40:26.111860 2026] [:error] [pid 21683:tid 21766] [client 45.137.126.11:59865] [client 45.137.126.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/wp-sup.php"] [unique_id "aefuylZBWT-0diZyYyaAMwAAAJA"]
[Wed Apr 22 05:40:28.072785 2026] [:error] [pid 21683:tid 21772] [client 45.137.126.41:61113] [client 45.137.126.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/widgets/class-t.api.php"] [unique_id "aefuzFZBWT-0diZyYyaAOQAAAJY"]
[Wed Apr 22 05:40:31.017508 2026] [:error] [pid 21683:tid 21751] [client 45.137.126.3:20353] [client 45.137.126.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/dist/require-dynamic-blocks.php"] [unique_id "aefuz1ZBWT-0diZyYyaARQAAAIE"]
[Wed Apr 22 05:40:33.962262 2026] [:error] [pid 23041:tid 23063] [client 45.137.126.18:43205] [client 45.137.126.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/widgets/class-wp-widget-rss-database.php"] [unique_id "aefu0UTXx_lUa7xwAb65awAAARM"]
[Wed Apr 22 05:40:35.430699 2026] [proxy_fcgi:error] [pid 21788:tid 21793] [client 45.137.126.23:64731] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:40:35.918138 2026] [:error] [pid 21788:tid 21809] [client 45.137.126.23:64731] [client 45.137.126.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/class-wp-customize-manager-client.php"] [unique_id "aefu037OM27rzVpef26DXAAAANM"]
[Wed Apr 22 05:40:36.891969 2026] [:error] [pid 21683:tid 21768] [client 45.137.126.37:31909] [client 45.137.126.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-boolean.php"] [unique_id "aefu1FZBWT-0diZyYyaATgAAAJI"]
[Wed Apr 22 05:40:40.305019 2026] [:error] [pid 21683:tid 21774] [client 45.137.126.27:34421] [client 45.137.126.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/smilies/simi.php"] [unique_id "aefu2FZBWT-0diZyYyaAXAAAAJg"]
[Wed Apr 22 05:40:41.289317 2026] [proxy_fcgi:error] [pid 21788:tid 21813] [client 45.137.126.42:45145] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:40:43.253451 2026] [proxy_fcgi:error] [pid 21788:tid 21806] [client 45.137.126.42:45145] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:40:43.741665 2026] [:error] [pid 21788:tid 21794] [client 45.137.126.42:45145] [client 45.137.126.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/style-engine-session.php"] [unique_id "aefu237OM27rzVpef26DdwAAAMQ"]
[Wed Apr 22 05:40:45.694682 2026] [proxy_fcgi:error] [pid 21682:tid 21735] [client 45.137.126.23:58429] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:40:46.668683 2026] [:error] [pid 21682:tid 21746] [client 45.137.126.23:58429] [client 45.137.126.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aefu3plXWQZUlmPHS3rwcgAAAFc"]
[Wed Apr 22 05:40:47.639310 2026] [:error] [pid 21788:tid 21801] [client 45.137.126.45:57675] [client 45.137.126.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/file/wp-style.php"] [unique_id "aefu337OM27rzVpef26DfwAAAMs"]
[Wed Apr 22 05:40:49.100512 2026] [:error] [pid 21683:tid 21758] [client 45.137.126.14:57145] [client 45.137.126.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/IXR/class-IXR-cilent.php"] [unique_id "aefu4VZBWT-0diZyYyaAeQAAAIg"]
[Wed Apr 22 05:40:51.056871 2026] [:error] [pid 23041:tid 23067] [client 45.137.126.22:63401] [client 45.137.126.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/install.php"] [unique_id "aefu40TXx_lUa7xwAb65nQAAARc"]
[Wed Apr 22 05:40:52.029548 2026] [:error] [pid 23041:tid 23059] [client 45.137.126.22:45649] [client 45.137.126.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/PHPMailer/xleet.php"] [unique_id "aefu5ETXx_lUa7xwAb65oQAAAQ8"]
[Wed Apr 22 05:40:53.498622 2026] [proxy_fcgi:error] [pid 23041:tid 23056] [client 45.137.126.14:34317] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:40:55.949601 2026] [:error] [pid 23041:tid 23062] [client 45.137.126.14:34317] [client 45.137.126.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/category-double.php"] [unique_id "aefu50TXx_lUa7xwAb65xgAAARI"]
[Wed Apr 22 05:40:57.899923 2026] [:error] [pid 21682:tid 21727] [client 45.137.126.13:23079] [client 45.137.126.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/db.php"] [unique_id "aefu6ZlXWQZUlmPHS3rwfQAAAEQ"]
[Wed Apr 22 05:40:58.873205 2026] [:error] [pid 21683:tid 21765] [client 45.137.126.32:55081] [client 45.137.126.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/widgets/security.php"] [unique_id "aefu6lZBWT-0diZyYyaAmwAAAI8"]
[Wed Apr 22 05:41:00.343687 2026] [proxy_fcgi:error] [pid 21681:tid 21693] [client 45.137.126.25:51503] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:41:00.831027 2026] [:error] [pid 21681:tid 21707] [client 45.137.126.25:51503] [client 45.137.126.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/class-wp-language-pack.php"] [unique_id "aefu7N5LmJziq-yZYawpWwAAABE"]
[Wed Apr 22 05:41:02.299005 2026] [:error] [pid 21788:tid 21804] [client 45.137.126.39:47453] [client 45.137.126.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/class-walker-comment-client.php"] [unique_id "aefu7n7OM27rzVpef26DtgAAAM4"]
[Wed Apr 22 05:41:05.727930 2026] [:error] [pid 21683:tid 21766] [client 45.137.126.18:22553] [client 45.137.126.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/class-wp-network-query-stat.php"] [unique_id "aefu8VZBWT-0diZyYyaA1AAAAJA"]
[Wed Apr 22 05:41:07.194446 2026] [proxy_fcgi:error] [pid 21682:tid 21732] [client 45.137.126.15:47773] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:41:07.679958 2026] [:error] [pid 21682:tid 21747] [client 45.137.126.15:47773] [client 45.137.126.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/class-wp-session-tokens-https.php"] [unique_id "aefu85lXWQZUlmPHS3rwiQAAAFg"]
[Wed Apr 22 05:41:09.630337 2026] [:error] [pid 21683:tid 21750] [client 45.137.126.36:42275] [client 45.137.126.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/crystal/lrs_dage.php"] [unique_id "aefu9VZBWT-0diZyYyaA4wAAAIA"]
[Wed Apr 22 05:41:11.097154 2026] [:error] [pid 21788:tid 21797] [client 45.137.126.9:55951] [client 45.137.126.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/as.php"] [unique_id "aefu937OM27rzVpef26D6AAAAMc"]
[Wed Apr 22 05:41:12.561273 2026] [:error] [pid 21788:tid 21808] [client 45.137.126.8:52631] [client 45.137.126.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/certificates/wp-conflg.php"] [unique_id "aefu-H7OM27rzVpef26D8gAAANI"]
[Wed Apr 22 05:41:13.537517 2026] [:error] [pid 21683:tid 21773] [client 45.137.126.51:32661] [client 45.137.126.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/install.php"] [unique_id "aefu-VZBWT-0diZyYyaA8QAAAJc"]
[Wed Apr 22 05:41:14.511658 2026] [:error] [pid 21681:tid 21702] [client 45.137.126.2:62755] [client 45.137.126.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/customize/db.php"] [unique_id "aefu-t5LmJziq-yZYawpdAAAAAw"]
[Wed Apr 22 05:41:15.492538 2026] [proxy_fcgi:error] [pid 21788:tid 21793] [client 45.137.126.21:58323] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:41:18.429948 2026] [:error] [pid 21788:tid 21797] [client 45.137.126.21:58323] [client 45.137.126.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/thickbox/about.php"] [unique_id "aefu_n7OM27rzVpef26EFQAAAMc"]
[Wed Apr 22 05:41:20.880997 2026] [:error] [pid 21683:tid 21763] [client 45.137.126.36:29601] [client 45.137.126.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/rk2.php"] [unique_id "aefvAFZBWT-0diZyYyaBEwAAAI0"]
[Wed Apr 22 05:41:22.345497 2026] [proxy_fcgi:error] [pid 23041:tid 23047] [client 45.137.126.35:57971] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:41:22.829104 2026] [:error] [pid 23041:tid 23045] [client 45.137.126.35:57971] [client 45.137.126.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/certificates/past.php"] [unique_id "aefvAkTXx_lUa7xwAb66dQAAAQE"]
[Wed Apr 22 05:41:23.807097 2026] [proxy_fcgi:error] [pid 21683:tid 21759] [client 45.137.126.7:20671] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:41:24.795838 2026] [:error] [pid 21683:tid 21760] [client 45.137.126.7:20671] [client 45.137.126.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/edit-tags.php"] [unique_id "aefvBFZBWT-0diZyYyaBKgAAAIo"]
[Wed Apr 22 05:41:27.419281 2026] [proxy_fcgi:error] [pid 21681:tid 21696] [client 45.137.126.36:22313] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:41:29.881680 2026] [:error] [pid 21681:tid 21699] [client 45.137.126.36:22313] [client 45.137.126.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/dist/footer-default.php"] [unique_id "aefvCd5LmJziq-yZYawpjwAAAAk"]
[Wed Apr 22 05:41:31.351373 2026] [:error] [pid 21681:tid 21713] [client 45.137.126.53:38945] [client 45.137.126.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/widgets/class-wp-widget-meta-request.php"] [unique_id "aefvC95LmJziq-yZYawplwAAABc"]
[Wed Apr 22 05:41:32.815159 2026] [:error] [pid 21683:tid 21760] [client 45.137.126.28:50445] [client 45.137.126.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/dist/edit-widgets/bypass.php"] [unique_id "aefvDFZBWT-0diZyYyaBRwAAAIo"]
[Wed Apr 22 05:41:34.759115 2026] [:error] [pid 21681:tid 21708] [client 45.137.126.29:53471] [client 45.137.126.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/l10n/wp-login.php"] [unique_id "aefvDt5LmJziq-yZYawpngAAABI"]
[Wed Apr 22 05:41:39.653706 2026] [:error] [pid 21683:tid 21765] [client 45.137.126.19:29815] [client 45.137.126.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/widgets/wp-ss.php"] [unique_id "aefvE1ZBWT-0diZyYyaBXQAAAI8"]
[Wed Apr 22 05:41:40.624337 2026] [:error] [pid 21681:tid 21705] [client 45.137.126.43:21539] [client 45.137.126.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/IXR/xsec1.php"] [unique_id "aefvFN5LmJziq-yZYawpqQAAAA8"]
[Wed Apr 22 05:41:43.071646 2026] [:error] [pid 21682:tid 21730] [client 45.137.126.25:57249] [client 45.137.126.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/crystal/sad.php"] [unique_id "aefvF5lXWQZUlmPHS3rwzAAAAEc"]
[Wed Apr 22 05:41:44.052461 2026] [:error] [pid 21683:tid 21773] [client 45.137.126.52:39979] [client 45.137.126.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aefvGFZBWT-0diZyYyaBXgAAAJc"]
[Wed Apr 22 05:41:46.008375 2026] [:error] [pid 21788:tid 21807] [client 45.137.126.40:38979] [client 45.137.126.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/class-phpmailer-beta.php"] [unique_id "aefvGn7OM27rzVpef26EVAAAANE"]
[Wed Apr 22 05:41:46.982690 2026] [:error] [pid 21682:tid 21744] [client 45.137.126.52:60027] [client 45.137.126.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/ms-file.php"] [unique_id "aefvGplXWQZUlmPHS3rw0QAAAFU"]
[Wed Apr 22 05:41:47.961284 2026] [:error] [pid 21681:tid 21714] [client 45.137.126.22:57933] [client 45.137.126.22] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.137.126.22, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aefvG95LmJziq-yZYawprwAAABg"]
[Wed Apr 22 05:41:47.973109 2026] [proxy_fcgi:error] [pid 21681:tid 21714] [client 45.137.126.22:57933] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:41:48.461058 2026] [:error] [pid 21681:tid 21690] [client 45.137.126.22:57933] [client 45.137.126.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/widgets/av.php"] [unique_id "aefvHN5LmJziq-yZYawpsAAAAAA"]
[Wed Apr 22 05:41:51.167433 2026] [proxy_fcgi:error] [pid 21682:tid 21726] [client 45.137.126.15:33995] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:41:51.653972 2026] [:error] [pid 21682:tid 21729] [client 45.137.126.15:33995] [client 45.137.126.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aefvH5lXWQZUlmPHS3rw4AAAAEY"]
[Wed Apr 22 05:41:52.632951 2026] [:error] [pid 21681:tid 21698] [client 45.137.126.49:38441] [client 45.137.126.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/network.php"] [unique_id "aefvIN5LmJziq-yZYawpvAAAAAg"]
[Wed Apr 22 05:41:53.615804 2026] [proxy_fcgi:error] [pid 23041:tid 23047] [client 45.137.126.37:31439] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:41:57.062572 2026] [:error] [pid 23041:tid 23062] [client 45.137.126.37:31439] [client 45.137.126.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/XML/content.php"] [unique_id "aefvJUTXx_lUa7xwAb67QwAAARI"]
[Wed Apr 22 05:41:58.033744 2026] [:error] [pid 21788:tid 21799] [client 45.137.126.22:35735] [client 45.137.126.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/pomo/item.php"] [unique_id "aefvJn7OM27rzVpef26EowAAAMk"]
[Wed Apr 22 05:41:59.980824 2026] [:error] [pid 21788:tid 21799] [client 45.137.126.23:28909] [client 45.137.126.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/pomo/plugins.php"] [unique_id "aefvJ37OM27rzVpef26EvAAAAMk"]
[Wed Apr 22 05:42:01.012090 2026] [:error] [pid 21788:tid 21801] [client 45.137.126.5:37129] [client 45.137.126.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/install.php"] [unique_id "aefvKX7OM27rzVpef26ExgAAAMs"]
[Wed Apr 22 05:42:01.989813 2026] [proxy_fcgi:error] [pid 23041:tid 23061] [client 45.137.126.51:27847] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:42:02.478512 2026] [:error] [pid 23041:tid 23063] [client 45.137.126.51:27847] [client 45.137.126.51] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.137.126.51, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/wp-login.php"] [unique_id "aefvKkTXx_lUa7xwAb67WAAAARM"]
[Wed Apr 22 05:42:03.461722 2026] [:error] [pid 23041:tid 23064] [client 45.137.126.51:27847] [client 45.137.126.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/widgets/class-wp-nav-widgets.php"] [unique_id "aefvK0TXx_lUa7xwAb67XgAAARQ"]
[Wed Apr 22 05:42:05.913962 2026] [:error] [pid 23041:tid 23049] [client 45.137.126.19:42247] [client 45.137.126.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/sitemaps/providers/doc.php"] [unique_id "aefvLUTXx_lUa7xwAb67bAAAAQU"]
[Wed Apr 22 05:42:06.889417 2026] [proxy_fcgi:error] [pid 21683:tid 21755] [client 45.137.126.31:42135] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:42:07.373615 2026] [:error] [pid 21683:tid 21769] [client 45.137.126.31:42135] [client 45.137.126.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/rest-api/1.php"] [unique_id "aefvL1ZBWT-0diZyYyaBagAAAJM"]
[Wed Apr 22 05:42:08.349351 2026] [:error] [pid 21682:tid 21741] [client 45.137.126.37:57449] [client 45.137.126.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/fonts/class_api.php"] [unique_id "aefvMJlXWQZUlmPHS3rxAAAAAFI"]
[Wed Apr 22 05:42:09.327922 2026] [proxy_fcgi:error] [pid 21788:tid 21797] [client 45.137.126.41:55645] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:42:10.802962 2026] [:error] [pid 21788:tid 21812] [client 45.137.126.41:55645] [client 45.137.126.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/smilies/admin.php"] [unique_id "aefvMn7OM27rzVpef26E_AAAANY"]
[Wed Apr 22 05:42:12.768170 2026] [:error] [pid 21788:tid 21805] [client 45.137.126.3:39405] [client 45.137.126.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/IXR/about.php"] [unique_id "aefvNH7OM27rzVpef26FGAAAAM8"]
[Wed Apr 22 05:42:13.745498 2026] [proxy_fcgi:error] [pid 21682:tid 21745] [client 45.137.126.22:29949] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:42:14.726054 2026] [proxy_fcgi:error] [pid 21682:tid 21737] [client 45.137.126.22:29949] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:42:15.700742 2026] [:error] [pid 21682:tid 21724] [client 45.137.126.22:29949] [client 45.137.126.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/class-wp-customize-manager-interpreter.php"] [unique_id "aefvN5lXWQZUlmPHS3rxHgAAAEE"]
[Wed Apr 22 05:42:16.677064 2026] [:error] [pid 21683:tid 21758] [client 45.137.126.35:48975] [client 45.137.126.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/bypass.php"] [unique_id "aefvOFZBWT-0diZyYyaBiAAAAIg"]
[Wed Apr 22 05:42:18.146309 2026] [:error] [pid 21681:tid 21713] [client 45.137.126.27:50285] [client 45.137.126.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/count.php"] [unique_id "aefvOt5LmJziq-yZYawp0AAAABc"]
[Wed Apr 22 05:42:19.122642 2026] [proxy_fcgi:error] [pid 23041:tid 23045] [client 45.137.126.28:64921] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:42:22.073779 2026] [:error] [pid 23041:tid 23053] [client 45.137.126.28:64921] [client 45.137.126.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "aefvPkTXx_lUa7xwAb67rgAAAQk"]
[Wed Apr 22 05:42:24.036122 2026] [:error] [pid 21681:tid 21700] [client 45.137.126.34:49883] [client 45.137.126.34] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/usr/local/apache/modsecurity-cwaf/rules/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder||dwelectservices.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "dwelectservices.com.au"] [uri "/images/stories/themes.php"] [unique_id "aefvQN5LmJziq-yZYawp7gAAAAo"]
[Wed Apr 22 05:42:24.526404 2026] [:error] [pid 21681:tid 21692] [client 45.137.126.34:49883] [client 45.137.126.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/theme-compat/footer-embed-function.php"] [unique_id "aefvQN5LmJziq-yZYawp8QAAAAI"]
[Wed Apr 22 05:42:26.506541 2026] [:error] [pid 21682:tid 21724] [client 45.137.126.16:63427] [client 45.137.126.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/l10n/class-wp-translation-file-mo-event.php"] [unique_id "aefvQplXWQZUlmPHS3rxMAAAAEE"]
[Wed Apr 22 05:42:27.480420 2026] [:error] [pid 21788:tid 21796] [client 45.137.126.17:33987] [client 45.137.126.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/vars-soap.php"] [unique_id "aefvQ37OM27rzVpef26FdQAAAMY"]
[Wed Apr 22 05:42:29.455938 2026] [proxy_fcgi:error] [pid 21681:tid 21696] [client 45.137.126.19:48969] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:42:31.449466 2026] [:error] [pid 21681:tid 21713] [client 45.137.126.19:48969] [client 45.137.126.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/id3/wp-work.php"] [unique_id "aefvR95LmJziq-yZYawqEQAAABc"]
[Wed Apr 22 05:42:33.417177 2026] [:error] [pid 21788:tid 21803] [client 45.137.126.31:49029] [client 45.137.126.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/class-wp-taxonomy.editor.php"] [unique_id "aefvSX7OM27rzVpef26FhgAAAM0"]
[Wed Apr 22 05:42:34.897186 2026] [:error] [pid 21788:tid 21810] [client 45.137.126.30:65227] [client 45.137.126.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/wp-conflg.php"] [unique_id "aefvSn7OM27rzVpef26FkwAAANQ"]
[Wed Apr 22 05:42:35.871076 2026] [proxy_fcgi:error] [pid 21788:tid 21791] [client 45.137.126.48:25125] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:42:39.164545 2026] [:error] [pid 21788:tid 21799] [client 45.137.126.48:25125] [client 45.137.126.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/interactivity-api/interactivity-api-xml.php"] [unique_id "aefvT37OM27rzVpef26FtQAAAMk"]
[Wed Apr 22 05:42:40.135282 2026] [:error] [pid 21682:tid 21728] [client 45.137.126.26:24133] [client 45.137.126.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/colour.php"] [unique_id "aefvUJlXWQZUlmPHS3rxOQAAAEU"]
[Wed Apr 22 05:42:41.115905 2026] [proxy_fcgi:error] [pid 21788:tid 21799] [client 45.137.126.29:59537] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:42:41.602224 2026] [:error] [pid 21788:tid 21803] [client 45.137.126.29:59537] [client 45.137.126.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/customize/class-wp-customize-background-position-control-variable.php"] [unique_id "aefvUX7OM27rzVpef26FxQAAAM0"]
[Wed Apr 22 05:42:42.576155 2026] [:error] [pid 21788:tid 21790] [client 45.137.126.5:38655] [client 45.137.126.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/include.php"] [unique_id "aefvUn7OM27rzVpef26FzAAAAMA"]
[Wed Apr 22 05:42:44.521999 2026] [:error] [pid 21788:tid 21793] [client 45.137.126.4:33843] [client 45.137.126.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/imgareaselect/wp-login.php"] [unique_id "aefvVH7OM27rzVpef26F3gAAAMM"]
[Wed Apr 22 05:42:46.480130 2026] [:error] [pid 23041:tid 23050] [client 45.137.126.53:40411] [client 45.137.126.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/l10n/class-wp-translations-interface.php"] [unique_id "aefvVkTXx_lUa7xwAb676gAAAQY"]
[Wed Apr 22 05:42:47.451069 2026] [:error] [pid 21683:tid 21767] [client 45.137.126.23:20143] [client 45.137.126.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/about5.php"] [unique_id "aefvV1ZBWT-0diZyYyaBwQAAAJE"]
[Wed Apr 22 05:42:50.396376 2026] [:error] [pid 21788:tid 21795] [client 45.137.126.28:46989] [client 45.137.126.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/ID3/db.php"] [unique_id "aefvWn7OM27rzVpef26F-wAAAMU"]
[Wed Apr 22 05:42:52.340610 2026] [:error] [pid 21683:tid 21770] [client 45.137.126.50:58021] [client 45.137.126.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/dist/bypass.php"] [unique_id "aefvXFZBWT-0diZyYyaB0QAAAJQ"]
[Wed Apr 22 05:42:53.316669 2026] [proxy_fcgi:error] [pid 21682:tid 21739] [client 45.137.126.26:28473] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:42:54.782620 2026] [:error] [pid 21682:tid 21731] [client 45.137.126.26:28473] [client 45.137.126.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/sitemaps/wp-conflg.php"] [unique_id "aefvXplXWQZUlmPHS3rxVQAAAEg"]
[Wed Apr 22 05:42:55.754493 2026] [:error] [pid 21683:tid 21763] [client 45.137.126.48:57299] [client 45.137.126.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.php"] [unique_id "aefvX1ZBWT-0diZyYyaB2wAAAI0"]
[Wed Apr 22 05:42:56.729052 2026] [:error] [pid 21683:tid 21770] [client 45.137.126.5:41871] [client 45.137.126.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/login.php"] [unique_id "aefvYFZBWT-0diZyYyaB3gAAAJQ"]
[Wed Apr 22 05:42:57.705043 2026] [proxy_fcgi:error] [pid 21681:tid 21708] [client 45.137.126.17:36681] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:42:58.684646 2026] [:error] [pid 21681:tid 21713] [client 45.137.126.17:36681] [client 45.137.126.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/sitemaps/chosen.php"] [unique_id "aefvYt5LmJziq-yZYawqSwAAABc"]
[Wed Apr 22 05:42:59.664035 2026] [proxy_fcgi:error] [pid 21683:tid 21765] [client 45.137.126.31:32193] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:43:00.779022 2026] [:error] [pid 21683:tid 21766] [client 45.137.126.31:32193] [client 45.137.126.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/Cache/index.php"] [unique_id "aefvZFZBWT-0diZyYyaB6AAAAJA"]
[Wed Apr 22 05:43:01.760155 2026] [:error] [pid 21788:tid 21814] [client 45.137.126.4:37873] [client 45.137.126.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/dist/about.php"] [unique_id "aefvZX7OM27rzVpef26GDgAAANg"]
[Wed Apr 22 05:43:03.225988 2026] [:error] [pid 21788:tid 21791] [client 45.137.126.50:42109] [client 45.137.126.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aefvZ37OM27rzVpef26GFQAAAME"]
[Wed Apr 22 05:43:04.201388 2026] [:error] [pid 21788:tid 21801] [client 45.137.126.19:32565] [client 45.137.126.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/simi.php"] [unique_id "aefvaH7OM27rzVpef26GGAAAAMs"]
[Wed Apr 22 05:43:06.151908 2026] [:error] [pid 23041:tid 23056] [client 45.137.126.25:31673] [client 45.137.126.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Requests/Text/index.php"] [unique_id "aefvakTXx_lUa7xwAb68KAAAAQw"]
[Wed Apr 22 05:43:07.620113 2026] [:error] [pid 21788:tid 21812] [client 45.137.126.33:58315] [client 45.137.126.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/sitemaps/abcd.php"] [unique_id "aefva37OM27rzVpef26GIgAAANY"]
[Wed Apr 22 05:43:08.588600 2026] [:error] [pid 21682:tid 21723] [client 45.137.126.32:28745] [client 45.137.126.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/ID3/rk2.php"] [unique_id "aefvbJlXWQZUlmPHS3rxZgAAAEA"]
[Wed Apr 22 05:43:09.565516 2026] [:error] [pid 23041:tid 23045] [client 45.137.126.2:48295] [client 45.137.126.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/widgets/class-wp-widget-search-interpreter.php"] [unique_id "aefvbUTXx_lUa7xwAb68MAAAAQE"]
[Wed Apr 22 05:43:11.517813 2026] [:error] [pid 21788:tid 21812] [client 45.137.126.49:52941] [client 45.137.126.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/block-template-utils-other.php"] [unique_id "aefvb37OM27rzVpef26GNAAAANY"]
[Wed Apr 22 05:43:12.983042 2026] [proxy_fcgi:error] [pid 21788:tid 21796] [client 45.137.126.33:22171] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:43:13.467558 2026] [:error] [pid 21788:tid 21794] [client 45.137.126.33:22171] [client 45.137.126.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/sodium_compat/lib/widget-group.php"] [unique_id "aefvcX7OM27rzVpef26GPQAAAMQ"]
[Wed Apr 22 05:43:14.927214 2026] [:error] [pid 21788:tid 21803] [client 45.137.126.23:61395] [client 45.137.126.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/jcrop/about.php"] [unique_id "aefvcn7OM27rzVpef26GQgAAAM0"]
[Wed Apr 22 05:43:16.413534 2026] [:error] [pid 21788:tid 21811] [client 45.137.126.36:37243] [client 45.137.126.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/customize/chosen.php"] [unique_id "aefvdH7OM27rzVpef26GSwAAANU"]
[Wed Apr 22 05:43:18.386224 2026] [proxy_fcgi:error] [pid 21788:tid 21803] [client 45.137.126.48:54755] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:43:20.347782 2026] [:error] [pid 21788:tid 21805] [client 45.137.126.48:54755] [client 45.137.126.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/plugin.php"] [unique_id "aefveH7OM27rzVpef26GXgAAAM8"]
[Wed Apr 22 05:43:21.326476 2026] [:error] [pid 21788:tid 21793] [client 45.137.126.52:63763] [client 45.137.126.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/class-wp-scripts-query.php"] [unique_id "aefveX7OM27rzVpef26GZwAAAMM"]
[Wed Apr 22 05:43:22.793110 2026] [proxy_fcgi:error] [pid 23041:tid 23049] [client 45.137.126.17:53405] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:43:23.278982 2026] [:error] [pid 23041:tid 23058] [client 45.137.126.17:53405] [client 45.137.126.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/ID3/module.audio-license.php"] [unique_id "aefve0TXx_lUa7xwAb68TQAAAQ4"]
[Wed Apr 22 05:43:26.218504 2026] [:error] [pid 21681:tid 21698] [client 45.137.126.12:52467] [client 45.137.126.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/class-wp-error-module.php"] [unique_id "aefvft5LmJziq-yZYawqXAAAAAg"]
[Wed Apr 22 05:43:27.197130 2026] [proxy_fcgi:error] [pid 21683:tid 21770] [client 45.137.126.26:57763] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:43:27.689370 2026] [proxy_fcgi:error] [pid 21683:tid 21755] [client 45.137.126.26:57763] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:43:28.173036 2026] [:error] [pid 21683:tid 21757] [client 45.137.126.26:57763] [client 45.137.126.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/litespeed.php"] [unique_id "aefvgFZBWT-0diZyYyaCGwAAAIc"]
[Wed Apr 22 05:43:30.134496 2026] [:error] [pid 21681:tid 21702] [client 45.137.126.24:36065] [client 45.137.126.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/dist/alam.php"] [unique_id "aefvgt5LmJziq-yZYawqYwAAAAw"]
[Wed Apr 22 05:43:31.172847 2026] [proxy_fcgi:error] [pid 21681:tid 21708] [client 45.137.126.8:49167] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:43:31.659092 2026] [:error] [pid 21681:tid 21709] [client 45.137.126.8:49167] [client 45.137.126.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/block-bindings/imagess.php"] [unique_id "aefvg95LmJziq-yZYawqZQAAABM"]
[Wed Apr 22 05:43:33.123775 2026] [:error] [pid 21788:tid 21790] [client 45.137.126.6:35971] [client 45.137.126.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/default-filters-edit.php"] [unique_id "aefvhX7OM27rzVpef26GgAAAAMA"]
[Wed Apr 22 05:43:34.105947 2026] [proxy_fcgi:error] [pid 21682:tid 21729] [client 45.137.126.31:24427] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:43:35.577522 2026] [proxy_fcgi:error] [pid 21682:tid 21725] [client 45.137.126.31:24427] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:43:36.064611 2026] [:error] [pid 21682:tid 21740] [client 45.137.126.31:24427] [client 45.137.126.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Requests/Auth/index.php"] [unique_id "aefviJlXWQZUlmPHS3rxnQAAAFE"]
[Wed Apr 22 05:43:38.512139 2026] [:error] [pid 21683:tid 21766] [client 45.137.126.49:62399] [client 45.137.126.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Text/Diff/Engine/theme.php"] [unique_id "aefvilZBWT-0diZyYyaCQAAAAJA"]
[Wed Apr 22 05:43:39.497340 2026] [proxy_fcgi:error] [pid 21788:tid 21802] [client 45.137.126.23:60943] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:43:39.984113 2026] [:error] [pid 21788:tid 21800] [client 45.137.126.23:60943] [client 45.137.126.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/ID3/shell.php"] [unique_id "aefvi37OM27rzVpef26GswAAAMo"]
[Wed Apr 22 05:43:40.956487 2026] [:error] [pid 21682:tid 21729] [client 45.137.126.36:22445] [client 45.137.126.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/customize/class-wp-customize-selective-refresh-library.php"] [unique_id "aefvjJlXWQZUlmPHS3rxoAAAAEY"]
[Wed Apr 22 05:43:41.933094 2026] [proxy_fcgi:error] [pid 21681:tid 21710] [client 45.137.126.36:22703] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:43:42.908193 2026] [:error] [pid 21681:tid 21696] [client 45.137.126.36:22703] [client 45.137.126.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Requests/library/wp-login.php"] [unique_id "aefvjt5LmJziq-yZYawqbAAAAAY"]
[Wed Apr 22 05:43:43.886796 2026] [:error] [pid 23041:tid 23045] [client 45.137.126.25:58083] [client 45.137.126.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/interactivity-api/about.php"] [unique_id "aefvj0TXx_lUa7xwAb68uAAAAQE"]
[Wed Apr 22 05:43:44.865019 2026] [proxy_fcgi:error] [pid 21788:tid 21806] [client 45.137.126.27:48891] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:43:47.804310 2026] [:error] [pid 21788:tid 21791] [client 45.137.126.27:48891] [client 45.137.126.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/wp-2019.php"] [unique_id "aefvk37OM27rzVpef26G0wAAAME"]
[Wed Apr 22 05:43:48.785094 2026] [:error] [pid 21683:tid 21763] [client 45.137.126.6:64455] [client 45.137.126.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/info.php"] [unique_id "aefvlFZBWT-0diZyYyaCUQAAAI0"]
[Wed Apr 22 05:43:50.251835 2026] [:error] [pid 21788:tid 21797] [client 45.137.126.50:58723] [client 45.137.126.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/log.php"] [unique_id "aefvln7OM27rzVpef26G5QAAAMc"]
[Wed Apr 22 05:43:51.229010 2026] [:error] [pid 21683:tid 21768] [client 45.137.126.7:56217] [client 45.137.126.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime-num.php"] [unique_id "aefvl1ZBWT-0diZyYyaCVAAAAJI"]
[Wed Apr 22 05:43:52.202526 2026] [:error] [pid 21788:tid 21791] [client 45.137.126.9:34079] [client 45.137.126.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-entry.min-object.php"] [unique_id "aefvmH7OM27rzVpef26G9QAAAME"]
[Wed Apr 22 05:43:53.171997 2026] [:error] [pid 21682:tid 21732] [client 45.137.126.29:49387] [client 45.137.126.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/aw.php"] [unique_id "aefvmZlXWQZUlmPHS3rxpwAAAEk"]
[Wed Apr 22 05:43:56.108306 2026] [:error] [pid 21683:tid 21768] [client 45.137.126.8:41805] [client 45.137.126.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/IXR/db.php"] [unique_id "aefvnFZBWT-0diZyYyaCYgAAAJI"]
[Wed Apr 22 05:43:57.077785 2026] [:error] [pid 21788:tid 21796] [client 45.137.126.2:28241] [client 45.137.126.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/install.php"] [unique_id "aefvnX7OM27rzVpef26HEgAAAMY"]
[Wed Apr 22 05:43:58.544993 2026] [proxy_fcgi:error] [pid 21788:tid 21800] [client 45.137.126.41:63099] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:43:59.031666 2026] [:error] [pid 21788:tid 21811] [client 45.137.126.41:63099] [client 45.137.126.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/dist/install.php"] [unique_id "aefvn37OM27rzVpef26HIAAAANU"]
[Wed Apr 22 05:44:00.013302 2026] [:error] [pid 21788:tid 21798] [client 45.137.126.15:22745] [client 45.137.126.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/style-engine/dedi1.php"] [unique_id "aefvoH7OM27rzVpef26HKAAAAMg"]
[Wed Apr 22 05:44:02.026152 2026] [:error] [pid 21682:tid 21741] [client 45.137.126.49:28615] [client 45.137.126.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/template-less.php"] [unique_id "aefvoplXWQZUlmPHS3rxtwAAAFI"]
[Wed Apr 22 05:44:03.001756 2026] [:error] [pid 21788:tid 21797] [client 45.137.126.4:62893] [client 45.137.126.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/pomo/alfa-rex.php"] [unique_id "aefvo37OM27rzVpef26HQwAAAMc"]
[Wed Apr 22 05:44:07.409498 2026] [:error] [pid 21683:tid 21762] [client 45.137.126.19:64409] [client 45.137.126.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/min.php"] [unique_id "aefvp1ZBWT-0diZyYyaCeQAAAIw"]
[Wed Apr 22 05:44:08.390219 2026] [:error] [pid 23041:tid 23067] [client 45.137.126.8:22351] [client 45.137.126.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/wp-conflg.php"] [unique_id "aefvqETXx_lUa7xwAb69BQAAARc"]
[Wed Apr 22 05:44:10.351794 2026] [:error] [pid 21788:tid 21811] [client 45.137.126.35:48567] [client 45.137.126.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/file.php"] [unique_id "aefvqn7OM27rzVpef26HgAAAANU"]
[Wed Apr 22 05:44:11.815696 2026] [:error] [pid 21788:tid 21794] [client 45.137.126.45:50267] [client 45.137.126.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/block-patterns/about.php"] [unique_id "aefvq37OM27rzVpef26HigAAAMQ"]
[Wed Apr 22 05:44:13.279201 2026] [:error] [pid 23041:tid 23045] [client 45.137.126.34:31823] [client 45.137.126.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/load.php"] [unique_id "aefvrUTXx_lUa7xwAb69HAAAAQE"]
[Wed Apr 22 05:44:14.254850 2026] [:error] [pid 21683:tid 21773] [client 45.137.126.52:49541] [client 45.137.126.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/ID3/chosen.php"] [unique_id "aefvrlZBWT-0diZyYyaCggAAAJc"]
[Wed Apr 22 05:44:15.230655 2026] [:error] [pid 23041:tid 23053] [client 45.137.126.22:62651] [client 45.137.126.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/class-wp-theme-float.php"] [unique_id "aefvr0TXx_lUa7xwAb69KwAAAQk"]
[Wed Apr 22 05:44:17.673281 2026] [:error] [pid 21788:tid 21794] [client 45.137.126.17:30111] [client 45.137.126.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/widgets/wp-style.php"] [unique_id "aefvsX7OM27rzVpef26H-gAAAMQ"]
[Wed Apr 22 05:44:18.656667 2026] [proxy_fcgi:error] [pid 21682:tid 21732] [client 45.137.126.19:57887] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:44:19.142924 2026] [:error] [pid 21682:tid 21725] [client 45.137.126.19:57887] [client 45.137.126.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/widgets/autoload_classmap.php"] [unique_id "aefvs5lXWQZUlmPHS3rxxQAAAEI"]
[Wed Apr 22 05:44:20.615735 2026] [proxy_fcgi:error] [pid 21788:tid 21791] [client 45.137.126.17:29067] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:44:21.101847 2026] [:error] [pid 21788:tid 21802] [client 45.137.126.17:29067] [client 45.137.126.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/block-bindings/admin.php"] [unique_id "aefvtX7OM27rzVpef26IEwAAAMw"]
[Wed Apr 22 05:44:22.082327 2026] [:error] [pid 21788:tid 21813] [client 45.137.126.16:36457] [client 45.137.126.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/PHPMailer/autoload_classmap.php"] [unique_id "aefvtn7OM27rzVpef26IHQAAANc"]
[Wed Apr 22 05:44:23.052486 2026] [:error] [pid 21788:tid 21810] [client 45.137.126.22:35159] [client 45.137.126.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/theme-compat/db.php"] [unique_id "aefvt37OM27rzVpef26IJQAAANQ"]
[Wed Apr 22 05:44:24.525006 2026] [proxy_fcgi:error] [pid 21788:tid 21813] [client 45.137.126.44:65373] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:44:26.001498 2026] [proxy_fcgi:error] [pid 21788:tid 21809] [client 45.137.126.44:65373] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:44:27.965448 2026] [:error] [pid 21788:tid 21800] [client 45.137.126.44:65373] [client 45.137.126.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/system.php"] [unique_id "aefvu37OM27rzVpef26IPAAAAMo"]
[Wed Apr 22 05:44:29.439707 2026] [:error] [pid 21682:tid 21746] [client 45.137.126.11:56175] [client 45.137.126.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/block-bindings/about.php"] [unique_id "aefvvZlXWQZUlmPHS3rx5AAAAFc"]
[Wed Apr 22 05:44:31.451093 2026] [:error] [pid 21681:tid 21697] [client 45.137.126.26:45939] [client 45.137.126.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/customize/class-wp-customize-upload-control-cookie.php"] [unique_id "aefvv95LmJziq-yZYawqpAAAAAc"]
[Wed Apr 22 05:44:32.421739 2026] [:error] [pid 21788:tid 21810] [client 45.137.126.30:49535] [client 45.137.126.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/ID3/simi.php"] [unique_id "aefvwH7OM27rzVpef26IRQAAANQ"]
[Wed Apr 22 05:44:33.392901 2026] [:error] [pid 21788:tid 21811] [client 45.137.126.19:58627] [client 45.137.126.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/class-wp-taxonomy-sample.php"] [unique_id "aefvwX7OM27rzVpef26ITAAAANU"]
[Wed Apr 22 05:44:35.358820 2026] [:error] [pid 18698:tid 18713] [client 45.137.126.23:59053] [client 45.137.126.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Requests/src/Response/about.php"] [unique_id "aefvw8HDGrKprtci7-HY6gAAAU0"]
[Wed Apr 22 05:44:39.778248 2026] [:error] [pid 21788:tid 21796] [client 45.137.126.32:41807] [client 45.137.126.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/ms-pie.php"] [unique_id "aefvx37OM27rzVpef26IcwAAAMY"]
[Wed Apr 22 05:44:42.714836 2026] [:error] [pid 18698:tid 18702] [client 45.137.126.12:28195] [client 45.137.126.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/html-api/index.php"] [unique_id "aefvysHDGrKprtci7-HY8wAAAUI"]
[Wed Apr 22 05:44:44.668043 2026] [:error] [pid 23041:tid 23059] [client 45.137.126.44:22723] [client 45.137.126.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/nav-menu.php"] [unique_id "aefvzETXx_lUa7xwAb69kQAAAQ8"]
[Wed Apr 22 05:44:45.643888 2026] [:error] [pid 18698:tid 18721] [client 45.137.126.46:60837] [client 45.137.126.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/dist/user.php"] [unique_id "aefvzcHDGrKprtci7-HY_AAAAVU"]
[Wed Apr 22 05:44:53.125686 2026] [:error] [pid 23041:tid 23049] [client 45.137.126.24:60997] [client 45.137.126.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/dist/script-modules/block-library/search/about.php"] [unique_id "aefv1UTXx_lUa7xwAb693gAAAQU"]
[Wed Apr 22 05:44:54.099839 2026] [:error] [pid 23041:tid 23045] [client 45.137.126.33:38555] [client 45.137.126.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/customize/class-wp-customize-cropped-image-control.php"] [unique_id "aefv1kTXx_lUa7xwAb694QAAAQE"]
[Wed Apr 22 05:44:55.074157 2026] [:error] [pid 21788:tid 21796] [client 45.137.126.48:20917] [client 45.137.126.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/sitemaps/providers/ultra.php"] [unique_id "aefv137OM27rzVpef26IyQAAAMY"]
[Wed Apr 22 05:44:56.541837 2026] [:error] [pid 21788:tid 21795] [client 45.137.126.11:30613] [client 45.137.126.11] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.137.126.11, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/classic-editor/wp-login.php"] [unique_id "aefv2H7OM27rzVpef26I0AAAAMU"]
[Wed Apr 22 05:44:57.519816 2026] [:error] [pid 21788:tid 21811] [client 45.137.126.11:30613] [client 45.137.126.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/dist/preferences/wp-login.php"] [unique_id "aefv2X7OM27rzVpef26I1QAAANU"]
[Wed Apr 22 05:44:58.494346 2026] [:error] [pid 21788:tid 21811] [client 45.137.126.22:60387] [client 45.137.126.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/media-text/index.php"] [unique_id "aefv2n7OM27rzVpef26I2gAAANU"]
[Wed Apr 22 05:44:59.471263 2026] [:error] [pid 21788:tid 21790] [client 45.137.126.12:26711] [client 45.137.126.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/phpmailer/phpmailer.php"] [unique_id "aefv237OM27rzVpef26I4AAAAMA"]
[Wed Apr 22 05:45:04.827939 2026] [:error] [pid 21788:tid 21797] [client 45.137.126.53:62169] [client 45.137.126.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/latest-comments/template-loader.php"] [unique_id "aefv4H7OM27rzVpef26I7QAAAMc"]
[Wed Apr 22 05:45:09.245993 2026] [:error] [pid 23041:tid 23052] [client 45.137.126.35:29819] [client 45.137.126.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/nextpage/index.php"] [unique_id "aefv5UTXx_lUa7xwAb6-BgAAAQg"]
[Wed Apr 22 05:45:11.200414 2026] [:error] [pid 18698:tid 18718] [client 45.137.126.46:42921] [client 45.137.126.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/link-template-firewall.php"] [unique_id "aefv58HDGrKprtci7-HZPgAAAVI"]
[Wed Apr 22 05:45:17.084889 2026] [proxy_fcgi:error] [pid 21683:tid 21754] [client 45.137.126.6:28825] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 05:45:18.079594 2026] [:error] [pid 21683:tid 21752] [client 45.137.126.6:28825] [client 45.137.126.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/customize/wp-conflg.php"] [unique_id "aefv7lZBWT-0diZyYyaDNQAAAII"]
[Wed Apr 22 05:45:19.054752 2026] [:error] [pid 21788:tid 21800] [client 45.137.126.6:53407] [client 45.137.126.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/src/Decode/HTML/sitemaps.php"] [unique_id "aefv737OM27rzVpef26JDwAAAMo"]
[Wed Apr 22 05:45:20.033622 2026] [:error] [pid 21788:tid 21808] [client 45.137.126.48:40391] [client 45.137.126.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/mer_gagal.php"] [unique_id "aefv8H7OM27rzVpef26JEwAAANI"]
[Wed Apr 22 05:45:21.007947 2026] [:error] [pid 18698:tid 18711] [client 45.137.126.14:24155] [client 45.137.126.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/html-api/wp-login.php"] [unique_id "aefv8cHDGrKprtci7-HZSAAAAUs"]
[Wed Apr 22 05:45:23.448788 2026] [:error] [pid 18698:tid 18710] [client 45.137.126.27:33511] [client 45.137.126.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/rest-api/alfa-rex.php"] [unique_id "aefv88HDGrKprtci7-HZVgAAAUo"]
[Wed Apr 22 05:45:24.417874 2026] [:error] [pid 18698:tid 18713] [client 45.137.126.37:47917] [client 45.137.126.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/ID3/Core32.php"] [unique_id "aefv9MHDGrKprtci7-HZWQAAAU0"]
[Wed Apr 22 05:45:27.854741 2026] [:error] [pid 18698:tid 18721] [client 45.137.126.51:26673] [client 45.137.126.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/theme-compat/wp-conflg.php"] [unique_id "aefv98HDGrKprtci7-HZawAAAVU"]
[Wed Apr 22 05:45:30.899693 2026] [:error] [pid 18698:tid 18706] [client 45.137.126.30:62439] [client 45.137.126.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/tinymce/skins/wordpress/images/index.php"] [unique_id "aefv-sHDGrKprtci7-HZdgAAAUY"]
[Wed Apr 22 05:45:31.876449 2026] [:error] [pid 18698:tid 18709] [client 45.137.126.26:62077] [client 45.137.126.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Requests/library/index.php"] [unique_id "aefv-8HDGrKprtci7-HZeAAAAUk"]
[Wed Apr 22 05:46:03.386826 2026] [autoindex:error] [pid 18698:tid 18711] [client 45.137.126.49:35241] AH01276: Cannot serve directory /home/dwelects/public_html/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 05:46:20.144104 2026] [autoindex:error] [pid 18698:tid 18712] [client 45.137.126.49:35241] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 22:17:12.716686 2026] [:error] [pid 9085:tid 9111] [client 107.170.38.20:58851] [client 107.170.38.20] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 107.170.38.20, incrementing ddos counter"] [hostname "dwelectservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aejYaN-_-or9vQnlWnq2GAAAAVg"]
[Wed Apr 22 22:17:12.727275 2026] [proxy_fcgi:error] [pid 9085:tid 9111] [client 107.170.38.20:58851] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 22:17:15.064692 2026] [:error] [pid 9085:tid 9088] [client 107.170.38.20:58851] [client 107.170.38.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aejYa9-_-or9vQnlWnq2LQAAAUE"]
[Wed Apr 22 22:17:15.477357 2026] [:error] [pid 6252:tid 6331] [client 107.170.38.20:60292] [client 107.170.38.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aejYa-tGYuiYb1nWBpRf9AAAARM"]
[Wed Apr 22 22:17:15.887914 2026] [:error] [pid 6250:tid 6271] [client 107.170.38.20:60471] [client 107.170.38.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aejYaw-iZeQkqmQVfj4jLgAAAFE"]
[Wed Apr 22 23:01:57.338825 2026] [:error] [pid 6250:tid 6263] [client 68.221.203.118:9211] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeji5Q-iZeQkqmQVfj4sBQAAAEk"]
[Wed Apr 22 23:01:57.899213 2026] [:error] [pid 6252:tid 6335] [client 68.221.203.118:23488] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeji5etGYuiYb1nWBpRmlQAAARc"]
[Wed Apr 22 23:01:58.379096 2026] [:error] [pid 6252:tid 6326] [client 68.221.203.118:23190] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeji5utGYuiYb1nWBpRmmQAAAQ4"]
[Wed Apr 22 23:01:58.951315 2026] [:error] [pid 6344:tid 6361] [client 68.221.203.118:9159] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeji5kDOTF-pkQnDeUkWeAAAAAw"]
[Thu Apr 23 07:18:16.266338 2026] [proxy_fcgi:error] [pid 42973:tid 43058] [client 89.251.0.121:32113] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:18:16.635875 2026] [proxy_fcgi:error] [pid 42973:tid 43063] [client 89.251.0.121:32113] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:18:16.985378 2026] [proxy_fcgi:error] [pid 42973:tid 43056] [client 89.251.0.121:32113] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:18:17.284297 2026] [proxy_fcgi:error] [pid 42973:tid 43045] [client 89.251.0.121:32113] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:18:17.610360 2026] [proxy_fcgi:error] [pid 42973:tid 43044] [client 89.251.0.121:32113] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:18:17.924023 2026] [proxy_fcgi:error] [pid 42973:tid 43046] [client 89.251.0.121:32113] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:18:18.246292 2026] [proxy_fcgi:error] [pid 42973:tid 43060] [client 89.251.0.121:32113] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:18:18.571319 2026] [proxy_fcgi:error] [pid 42973:tid 43064] [client 89.251.0.121:32113] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:18:19.421649 2026] [proxy_fcgi:error] [pid 42973:tid 43047] [client 89.251.0.121:32113] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:18:19.844282 2026] [proxy_fcgi:error] [pid 42973:tid 43060] [client 89.251.0.121:32113] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:18:20.604289 2026] [proxy_fcgi:error] [pid 42973:tid 43062] [client 89.251.0.121:32113] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:18:20.893327 2026] [proxy_fcgi:error] [pid 42973:tid 43052] [client 89.251.0.121:32113] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:18:21.198349 2026] [proxy_fcgi:error] [pid 42973:tid 43044] [client 89.251.0.121:32113] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:18:21.495459 2026] [:error] [pid 42973:tid 43058] [client 89.251.0.121:32113] [client 89.251.0.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file5.php"] [unique_id "aelXPW6I0QqmmmLTHE3IhQAAAI8"]
[Thu Apr 23 07:18:22.130003 2026] [proxy_fcgi:error] [pid 43083:tid 43089] [client 89.251.0.134:44953] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:18:22.425854 2026] [proxy_fcgi:error] [pid 43083:tid 43100] [client 89.251.0.134:44953] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:18:22.761312 2026] [proxy_fcgi:error] [pid 43083:tid 43102] [client 89.251.0.134:44953] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:18:23.086567 2026] [proxy_fcgi:error] [pid 43083:tid 43098] [client 89.251.0.134:44953] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:18:23.469320 2026] [proxy_fcgi:error] [pid 43083:tid 43089] [client 89.251.0.134:44953] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:18:28.540410 2026] [:error] [pid 43083:tid 43107] [client 89.251.0.134:44953] [client 89.251.0.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aelXRDC5hrvNXosL83K1hgAAANY"]
[Thu Apr 23 07:18:30.358042 2026] [:error] [pid 42971:tid 42999] [client 89.251.0.143:39413] [client 89.251.0.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aelXRjEP2_5RswrH8bGUpAAAAA0"]
[Thu Apr 23 07:18:32.808349 2026] [proxy_fcgi:error] [pid 65000:tid 65031] [client 89.251.0.146:53313] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:18:33.831040 2026] [:error] [pid 65000:tid 65047] [client 89.251.0.146:53313] [client 89.251.0.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dwelectservices.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aelXSb6vRb9j6psK2ZZwEQAAAg4"]
[Thu Apr 23 07:18:35.297306 2026] [proxy_fcgi:error] [pid 42973:tid 43064] [client 89.251.0.123:53235] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:18:35.646832 2026] [:error] [pid 42973:tid 43054] [client 89.251.0.123:53235] [client 89.251.0.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aelXS26I0QqmmmLTHE3JJQAAAIs"]
[Thu Apr 23 07:18:36.772673 2026] [proxy_fcgi:error] [pid 64998:tid 65017] [client 89.251.0.114:39323] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:18:38.434163 2026] [:error] [pid 64998:tid 65011] [client 89.251.0.114:39323] [client 89.251.0.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aelXToV5EysYcTLjmwjeFwAAAck"]
[Thu Apr 23 07:18:39.553441 2026] [:error] [pid 42971:tid 43002] [client 89.251.0.148:46401] [client 89.251.0.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aelXTzEP2_5RswrH8bGVPQAAABA"]
[Thu Apr 23 07:18:41.320744 2026] [:error] [pid 59700:tid 59722] [client 89.251.0.127:21689] [client 89.251.0.127] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aelXUZXyGZJFeAIDWtlGQAAAAVQ"]
[Thu Apr 23 07:18:42.181976 2026] [:error] [pid 64967:tid 64984] [client 89.251.0.134:46449] [client 89.251.0.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aelXUoAV4GfOOdX8Qzr_egAAAY8"]
[Thu Apr 23 07:18:43.019123 2026] [:error] [pid 64998:tid 65023] [client 89.251.0.121:38397] [client 89.251.0.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aelXU4V5EysYcTLjmwjeUwAAAdU"]
[Thu Apr 23 07:18:43.797685 2026] [:error] [pid 43083:tid 43101] [client 89.251.0.131:41763] [client 89.251.0.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aelXUzC5hrvNXosL83K15gAAANA"]
[Thu Apr 23 07:18:45.090091 2026] [:error] [pid 43083:tid 43092] [client 89.251.0.131:23175] [client 89.251.0.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aelXVTC5hrvNXosL83K19AAAAMc"]
[Thu Apr 23 07:18:46.822249 2026] [proxy_fcgi:error] [pid 64998:tid 65009] [client 89.251.0.113:49809] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:18:47.609474 2026] [:error] [pid 64998:tid 65010] [client 89.251.0.113:49809] [client 89.251.0.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dwelectservices.com.au"] [uri "/filemanager.php"] [unique_id "aelXV4V5EysYcTLjmwjejgAAAcg"]
[Thu Apr 23 07:18:49.073601 2026] [:error] [pid 64967:tid 64983] [client 89.251.0.132:50617] [client 89.251.0.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aelXWYAV4GfOOdX8Qzr_vQAAAY4"]
[Thu Apr 23 07:18:50.564827 2026] [:error] [pid 42973:tid 43065] [client 89.251.0.144:29989] [client 89.251.0.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aelXWm6I0QqmmmLTHE3JnAAAAJY"]
[Thu Apr 23 07:18:51.233296 2026] [proxy_fcgi:error] [pid 25635:tid 25646] [client 89.251.0.146:29755] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:18:51.573389 2026] [:error] [pid 25635:tid 25641] [client 89.251.0.146:29755] [client 89.251.0.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aelXW8Rxv6UsgRGKB3LRPgAAAQI"]
[Thu Apr 23 07:18:52.275621 2026] [proxy_fcgi:error] [pid 25635:tid 25652] [client 89.251.0.129:47715] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:18:53.284447 2026] [proxy_fcgi:error] [pid 25635:tid 25651] [client 89.251.0.129:47715] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:18:54.411538 2026] [:error] [pid 25635:tid 25656] [client 89.251.0.129:47715] [client 89.251.0.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aelXXsRxv6UsgRGKB3LRcQAAARE"]
[Thu Apr 23 07:18:55.167340 2026] [proxy_fcgi:error] [pid 42971:tid 43001] [client 89.251.0.138:28943] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:18:55.489784 2026] [:error] [pid 42971:tid 43006] [client 89.251.0.138:28943] [client 89.251.0.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aelXXzEP2_5RswrH8bGV-AAAABQ"]
[Thu Apr 23 07:18:56.115267 2026] [proxy_fcgi:error] [pid 42972:tid 43027] [client 89.251.0.117:53243] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:18:56.860357 2026] [:error] [pid 42972:tid 43033] [client 89.251.0.117:53243] [client 89.251.0.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "aelXYMOAb-3sOknsk4cNlQAAAFE"]
[Thu Apr 23 07:18:57.942838 2026] [:error] [pid 25635:tid 25646] [client 89.251.0.150:40575] [client 89.251.0.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aelXYcRxv6UsgRGKB3LRmwAAAQc"]
[Thu Apr 23 07:18:59.343778 2026] [proxy_fcgi:error] [pid 65000:tid 65051] [client 89.251.0.121:61311] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:18:59.689656 2026] [proxy_fcgi:error] [pid 65000:tid 65054] [client 89.251.0.121:61311] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:19:00.539737 2026] [:error] [pid 65000:tid 65046] [client 89.251.0.121:61311] [client 89.251.0.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aelXZL6vRb9j6psK2ZZzBQAAAg0"]
[Thu Apr 23 07:19:32.324800 2026] [:error] [pid 42971:tid 43002] [client 89.251.0.116:35283] [client 89.251.0.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/css/"] [unique_id "aelXhDEP2_5RswrH8bGXSwAAABA"]
[Thu Apr 23 07:19:32.991207 2026] [autoindex:error] [pid 42972:tid 43033] [client 89.251.0.141:52301] AH01276: Cannot serve directory /home/dwelects/public_html/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 07:19:45.055252 2026] [autoindex:error] [pid 42972:tid 43035] [client 89.251.0.141:52301] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 07:21:50.152481 2026] [proxy_fcgi:error] [pid 65000:tid 65044] [client 89.251.0.150:32161] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:21:50.967816 2026] [:error] [pid 65000:tid 65051] [client 89.251.0.150:32161] [client 89.251.0.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/O-Simple.php"] [unique_id "aelYDr6vRb9j6psK2ZaA_QAAAhI"]
[Thu Apr 23 07:21:52.426044 2026] [proxy_fcgi:error] [pid 64998:tid 65017] [client 89.251.0.141:28117] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:21:53.495666 2026] [proxy_fcgi:error] [pid 64998:tid 65024] [client 89.251.0.141:28117] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:21:54.319319 2026] [proxy_fcgi:error] [pid 64998:tid 65025] [client 89.251.0.141:28117] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:21:55.053394 2026] [proxy_fcgi:error] [pid 64998:tid 65017] [client 89.251.0.141:28117] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:21:55.928461 2026] [proxy_fcgi:error] [pid 64998:tid 65021] [client 89.251.0.141:28117] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:21:57.568304 2026] [proxy_fcgi:error] [pid 64998:tid 65019] [client 89.251.0.141:28117] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:21:58.373493 2026] [proxy_fcgi:error] [pid 64998:tid 65011] [client 89.251.0.141:28117] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:22:00.145056 2026] [proxy_fcgi:error] [pid 64998:tid 65017] [client 89.251.0.141:28117] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:22:00.450342 2026] [proxy_fcgi:error] [pid 64998:tid 65016] [client 89.251.0.141:28117] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:22:01.012794 2026] [proxy_fcgi:error] [pid 64998:tid 65025] [client 89.251.0.141:28117] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:22:01.326312 2026] [proxy_fcgi:error] [pid 64998:tid 65013] [client 89.251.0.141:28117] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:22:01.702500 2026] [proxy_fcgi:error] [pid 64998:tid 65020] [client 89.251.0.141:28117] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:22:02.090620 2026] [proxy_fcgi:error] [pid 64998:tid 65017] [client 89.251.0.141:28117] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:22:02.806506 2026] [proxy_fcgi:error] [pid 64998:tid 65016] [client 89.251.0.141:28117] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:22:03.113785 2026] [proxy_fcgi:error] [pid 64998:tid 65025] [client 89.251.0.141:28117] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:22:03.401311 2026] [proxy_fcgi:error] [pid 64998:tid 65009] [client 89.251.0.141:28117] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:22:03.760343 2026] [proxy_fcgi:error] [pid 64998:tid 65005] [client 89.251.0.141:28117] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:22:08.865816 2026] [:error] [pid 64998:tid 65019] [client 89.251.0.141:28117] [client 89.251.0.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aelYIIV5EysYcTLjmwjn1AAAAdE"]
[Thu Apr 23 07:22:10.411536 2026] [:error] [pid 42971:tid 42998] [client 89.251.0.147:50999] [client 89.251.0.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aelYIjEP2_5RswrH8bGdkAAAAAw"]
[Thu Apr 23 07:22:12.057327 2026] [proxy_fcgi:error] [pid 43083:tid 43085] [client 89.251.0.144:23627] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:22:12.970459 2026] [:error] [pid 43083:tid 43100] [client 89.251.0.144:23627] [client 89.251.0.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.dwelectservices.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aelYJDC5hrvNXosL83K-vgAAAM8"]
[Thu Apr 23 07:22:14.751852 2026] [proxy_fcgi:error] [pid 65000:tid 65054] [client 89.251.0.140:33967] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:22:15.079812 2026] [:error] [pid 65000:tid 65050] [client 89.251.0.140:33967] [client 89.251.0.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aelYJ76vRb9j6psK2ZaCxgAAAhE"]
[Thu Apr 23 07:22:16.054637 2026] [proxy_fcgi:error] [pid 25635:tid 25651] [client 89.251.0.125:50311] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:22:17.698721 2026] [:error] [pid 25635:tid 25643] [client 89.251.0.125:50311] [client 89.251.0.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aelYKcRxv6UsgRGKB3LYDQAAAQQ"]
[Thu Apr 23 07:22:19.202074 2026] [:error] [pid 65000:tid 65039] [client 89.251.0.151:49689] [client 89.251.0.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aelYK76vRb9j6psK2ZaDJAAAAgY"]
[Thu Apr 23 07:22:19.820102 2026] [:error] [pid 65000:tid 65040] [client 89.251.0.125:21479] [client 89.251.0.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aelYK76vRb9j6psK2ZaDMAAAAgc"]
[Thu Apr 23 07:22:20.470874 2026] [:error] [pid 42972:tid 43034] [client 89.251.0.141:61155] [client 89.251.0.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aelYLMOAb-3sOknsk4cUqgAAAFI"]
[Thu Apr 23 07:22:21.100701 2026] [:error] [pid 64998:tid 65003] [client 89.251.0.144:46591] [client 89.251.0.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aelYLYV5EysYcTLjmwjocAAAAcE"]
[Thu Apr 23 07:22:21.731243 2026] [:error] [pid 42971:tid 43001] [client 89.251.0.143:46859] [client 89.251.0.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aelYLTEP2_5RswrH8bGeHQAAAA8"]
[Thu Apr 23 07:22:22.647516 2026] [:error] [pid 42972:tid 43038] [client 89.251.0.124:58665] [client 89.251.0.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aelYLsOAb-3sOknsk4cUwgAAAFY"]
[Thu Apr 23 07:22:23.235405 2026] [proxy_fcgi:error] [pid 25635:tid 25655] [client 89.251.0.143:27275] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:22:23.942706 2026] [:error] [pid 25635:tid 25645] [client 89.251.0.143:27275] [client 89.251.0.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.dwelectservices.com.au"] [uri "/filemanager.php"] [unique_id "aelYL8Rxv6UsgRGKB3LYVwAAAQY"]
[Thu Apr 23 07:22:26.548518 2026] [:error] [pid 64967:tid 64971] [client 89.251.0.114:65463] [client 89.251.0.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aelYMoAV4GfOOdX8QzoH9AAAAYI"]
[Thu Apr 23 07:22:27.551411 2026] [:error] [pid 64967:tid 64969] [client 89.251.0.147:28747] [client 89.251.0.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aelYM4AV4GfOOdX8QzoIAwAAAYA"]
[Thu Apr 23 07:22:28.177830 2026] [proxy_fcgi:error] [pid 42973:tid 43047] [client 89.251.0.135:29625] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:22:28.555674 2026] [:error] [pid 42973:tid 43050] [client 89.251.0.135:29625] [client 89.251.0.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aelYNG6I0QqmmmLTHE3SHgAAAIc"]
[Thu Apr 23 07:22:29.436324 2026] [proxy_fcgi:error] [pid 25635:tid 25641] [client 89.251.0.147:32661] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:22:30.585307 2026] [proxy_fcgi:error] [pid 25635:tid 25659] [client 89.251.0.147:32661] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:22:31.863576 2026] [:error] [pid 25635:tid 25647] [client 89.251.0.147:32661] [client 89.251.0.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aelYN8Rxv6UsgRGKB3LYkwAAAQg"]
[Thu Apr 23 07:22:32.517353 2026] [proxy_fcgi:error] [pid 64998:tid 65024] [client 89.251.0.138:23577] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:22:32.841570 2026] [:error] [pid 64998:tid 65019] [client 89.251.0.138:23577] [client 89.251.0.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aelYOIV5EysYcTLjmwjo_wAAAdE"]
[Thu Apr 23 07:22:33.464615 2026] [proxy_fcgi:error] [pid 65000:tid 65055] [client 89.251.0.120:41727] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:22:34.194784 2026] [:error] [pid 65000:tid 65044] [client 89.251.0.120:41727] [client 89.251.0.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "aelYOr6vRb9j6psK2ZaEIQAAAgs"]
[Thu Apr 23 07:22:35.118644 2026] [:error] [pid 65000:tid 65055] [client 89.251.0.117:47681] [client 89.251.0.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aelYO76vRb9j6psK2ZaEPgAAAhY"]
[Thu Apr 23 07:22:36.082332 2026] [proxy_fcgi:error] [pid 65000:tid 65030] [client 89.251.0.128:44921] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:22:36.394325 2026] [proxy_fcgi:error] [pid 65000:tid 65054] [client 89.251.0.128:44921] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:22:37.113637 2026] [:error] [pid 65000:tid 65042] [client 89.251.0.128:44921] [client 89.251.0.128] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aelYPb6vRb9j6psK2ZaEcQAAAgk"]
[Thu Apr 23 07:22:38.116776 2026] [:error] [pid 59700:tid 59719] [client 89.251.0.137:58565] [client 89.251.0.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aelYPpXyGZJFeAIDWtlPhQAAAVE"]
[Thu Apr 23 07:22:39.667631 2026] [:error] [pid 64998:tid 65004] [client 89.251.0.121:20569] [client 89.251.0.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aelYP4V5EysYcTLjmwjpSQAAAcI"]
[Thu Apr 23 07:22:40.330805 2026] [:error] [pid 42971:tid 43004] [client 89.251.0.151:43871] [client 89.251.0.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aelYQDEP2_5RswrH8bGewQAAABI"]
[Thu Apr 23 07:22:40.952039 2026] [:error] [pid 64998:tid 65016] [client 89.251.0.145:59289] [client 89.251.0.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aelYQIV5EysYcTLjmwjpXwAAAc4"]
[Thu Apr 23 07:22:42.283316 2026] [proxy_fcgi:error] [pid 59700:tid 59705] [client 89.251.0.144:42139] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:22:42.580165 2026] [:error] [pid 59700:tid 59713] [client 89.251.0.144:42139] [client 89.251.0.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "aelYQpXyGZJFeAIDWtlPrQAAAUs"]
[Thu Apr 23 07:22:43.187350 2026] [:error] [pid 65000:tid 65049] [client 89.251.0.113:22343] [client 89.251.0.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "aelYQ76vRb9j6psK2ZaE5QAAAhA"]
[Thu Apr 23 07:22:43.799805 2026] [:error] [pid 42971:tid 43001] [client 89.251.0.137:57947] [client 89.251.0.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aelYQzEP2_5RswrH8bGe7QAAAA8"]
[Thu Apr 23 07:22:45.081301 2026] [proxy_fcgi:error] [pid 42972:tid 43033] [client 89.251.0.116:35821] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:22:45.731506 2026] [proxy_fcgi:error] [pid 42972:tid 43037] [client 89.251.0.116:35821] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:22:47.150032 2026] [:error] [pid 42972:tid 43017] [client 89.251.0.116:35821] [client 89.251.0.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/admin.php"] [unique_id "aelYR8OAb-3sOknsk4cVsQAAAEE"]
[Thu Apr 23 07:22:48.778930 2026] [:error] [pid 25635:tid 25660] [client 89.251.0.142:23955] [client 89.251.0.142] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.251.0.142, incrementing brute counter"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aelYSMRxv6UsgRGKB3LZUgAAARU"]
[Thu Apr 23 07:22:49.209300 2026] [proxy_fcgi:error] [pid 25635:tid 25651] [client 89.251.0.142:23955] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:22:51.260790 2026] [proxy_fcgi:error] [pid 25635:tid 25663] [client 89.251.0.142:23955] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:22:51.596343 2026] [proxy_fcgi:error] [pid 25635:tid 25644] [client 89.251.0.142:23955] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:22:53.309566 2026] [:error] [pid 25635:tid 25650] [client 89.251.0.142:23955] [client 89.251.0.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aelYTcRxv6UsgRGKB3LZfwAAAQs"]
[Thu Apr 23 07:22:53.930292 2026] [proxy_fcgi:error] [pid 59700:tid 59704] [client 89.251.0.121:41043] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:22:54.236445 2026] [proxy_fcgi:error] [pid 59700:tid 59713] [client 89.251.0.121:41043] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:22:54.551122 2026] [:error] [pid 59700:tid 59714] [client 89.251.0.121:41043] [client 89.251.0.121] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.251.0.121, incrementing brute counter"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aelYTpXyGZJFeAIDWtlQLQAAAUw"]
[Thu Apr 23 07:22:55.243423 2026] [:error] [pid 59700:tid 59720] [client 89.251.0.121:41043] [client 89.251.0.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/item.php"] [unique_id "aelYT5XyGZJFeAIDWtlQPAAAAVI"]
[Thu Apr 23 07:22:56.826916 2026] [proxy_fcgi:error] [pid 65000:tid 65041] [client 89.251.0.136:26741] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:22:57.139551 2026] [proxy_fcgi:error] [pid 65000:tid 65050] [client 89.251.0.136:26741] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:22:58.315312 2026] [proxy_fcgi:error] [pid 64998:tid 65026] [client 89.251.0.145:58987] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:22:59.014133 2026] [:error] [pid 64998:tid 65003] [client 89.251.0.145:58987] [client 89.251.0.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aelYU4V5EysYcTLjmwjqewAAAcE"]
[Thu Apr 23 07:22:59.625316 2026] [proxy_fcgi:error] [pid 42973:tid 43061] [client 89.251.0.126:30429] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:23:00.661292 2026] [proxy_fcgi:error] [pid 42973:tid 43060] [client 89.251.0.126:30429] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:23:01.426660 2026] [proxy_fcgi:error] [pid 42973:tid 43046] [client 89.251.0.126:30429] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:23:02.114337 2026] [proxy_fcgi:error] [pid 42973:tid 43061] [client 89.251.0.126:30429] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:23:02.475177 2026] [:error] [pid 42973:tid 43044] [client 89.251.0.126:30429] [client 89.251.0.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aelYVm6I0QqmmmLTHE3T8QAAAIE"]
[Thu Apr 23 07:23:03.062316 2026] [proxy_fcgi:error] [pid 25635:tid 25660] [client 89.251.0.135:46415] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:23:03.377570 2026] [proxy_fcgi:error] [pid 25635:tid 25661] [client 89.251.0.135:46415] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:23:03.675703 2026] [:error] [pid 25635:tid 25648] [client 89.251.0.135:46415] [client 89.251.0.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aelYV8Rxv6UsgRGKB3LZ6gAAAQk"]
[Thu Apr 23 07:23:04.718304 2026] [proxy_fcgi:error] [pid 64967:tid 64990] [client 89.251.0.135:45187] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:23:05.384350 2026] [:error] [pid 64967:tid 64981] [client 89.251.0.135:45187] [client 89.251.0.135] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.251.0.135, incrementing brute counter"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "aelYWYAV4GfOOdX8QzoJoQAAAYw"]
[Thu Apr 23 07:23:05.713420 2026] [:error] [pid 64967:tid 64973] [client 89.251.0.135:45187] [client 89.251.0.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aelYWYAV4GfOOdX8QzoJpQAAAYQ"]
[Thu Apr 23 07:23:09.648848 2026] [proxy_fcgi:error] [pid 65000:tid 65042] [client 89.251.0.136:61573] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:23:11.617313 2026] [proxy_fcgi:error] [pid 65000:tid 65050] [client 89.251.0.136:61573] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:23:11.988016 2026] [:error] [pid 65000:tid 65048] [client 89.251.0.136:61573] [client 89.251.0.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aelYX76vRb9j6psK2ZaHcAAAAg8"]
[Thu Apr 23 07:23:12.828310 2026] [proxy_fcgi:error] [pid 25635:tid 25642] [client 89.251.0.137:23847] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:23:13.735275 2026] [:error] [pid 25635:tid 25643] [client 89.251.0.137:23847] [client 89.251.0.137] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.251.0.137, incrementing brute counter"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aelYYcRxv6UsgRGKB3LahQAAAQQ"]
[Thu Apr 23 07:23:14.055351 2026] [proxy_fcgi:error] [pid 25635:tid 25653] [client 89.251.0.137:23847] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:23:14.401252 2026] [proxy_fcgi:error] [pid 25635:tid 25639] [client 89.251.0.137:23847] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:23:14.788310 2026] [proxy_fcgi:error] [pid 25635:tid 25648] [client 89.251.0.137:23847] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:23:15.085108 2026] [:error] [pid 25635:tid 25650] [client 89.251.0.137:23847] [client 89.251.0.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aelYY8Rxv6UsgRGKB3LanwAAAQs"]
[Thu Apr 23 07:23:15.800318 2026] [proxy_fcgi:error] [pid 25635:tid 25648] [client 89.251.0.151:42599] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:23:16.117426 2026] [:error] [pid 25635:tid 25651] [client 89.251.0.151:42599] [client 89.251.0.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/infi.php"] [unique_id "aelYZMRxv6UsgRGKB3LaqwAAAQw"]
[Thu Apr 23 07:23:17.110292 2026] [proxy_fcgi:error] [pid 43083:tid 43096] [client 89.251.0.137:30217] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:23:17.421796 2026] [:error] [pid 43083:tid 43104] [client 89.251.0.137:30217] [client 89.251.0.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aelYZTC5hrvNXosL83LBBQAAANM"]
[Thu Apr 23 07:23:18.014308 2026] [proxy_fcgi:error] [pid 64967:tid 64977] [client 89.251.0.151:43029] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:23:18.651078 2026] [proxy_fcgi:error] [pid 64967:tid 64985] [client 89.251.0.151:43029] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:23:19.003134 2026] [:error] [pid 64967:tid 64975] [client 89.251.0.151:43029] [client 89.251.0.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "aelYZ4AV4GfOOdX8QzoJ8gAAAYY"]
[Thu Apr 23 07:23:20.657590 2026] [:error] [pid 65000:tid 65039] [client 89.251.0.132:43463] [client 89.251.0.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "aelYaL6vRb9j6psK2ZaIJwAAAgY"]
[Thu Apr 23 07:23:21.276171 2026] [proxy_fcgi:error] [pid 59700:tid 59712] [client 89.251.0.124:35589] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:23:21.635818 2026] [proxy_fcgi:error] [pid 59700:tid 59706] [client 89.251.0.124:35589] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:23:22.918186 2026] [:error] [pid 59700:tid 59703] [client 89.251.0.124:35589] [client 89.251.0.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aelYapXyGZJFeAIDWtlRNgAAAUE"]
[Thu Apr 23 07:23:23.849207 2026] [:error] [pid 42972:tid 43026] [client 89.251.0.123:28769] [client 89.251.0.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "aelYa8OAb-3sOknsk4cXHgAAAEo"]
[Thu Apr 23 07:23:25.130322 2026] [:error] [pid 42971:tid 42987] [client 89.251.0.143:41057] [client 89.251.0.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/css/colors/blue/file.php"] [unique_id "aelYbTEP2_5RswrH8bGgGwAAAAE"]
[Thu Apr 23 07:23:26.882600 2026] [:error] [pid 64967:tid 64982] [client 89.251.0.132:64927] [client 89.251.0.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/edit.php"] [unique_id "aelYboAV4GfOOdX8QzoKKgAAAY0"]
[Thu Apr 23 07:23:27.526408 2026] [proxy_fcgi:error] [pid 64998:tid 65013] [client 89.251.0.137:41049] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:23:28.170291 2026] [proxy_fcgi:error] [pid 64998:tid 65022] [client 89.251.0.137:41049] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:23:28.508618 2026] [:error] [pid 64998:tid 65007] [client 89.251.0.137:41049] [client 89.251.0.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "aelYcIV5EysYcTLjmwjrmAAAAcU"]
[Thu Apr 23 07:23:29.152068 2026] [proxy_fcgi:error] [pid 65000:tid 65056] [client 89.251.0.141:45339] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:23:29.787847 2026] [:error] [pid 65000:tid 65040] [client 89.251.0.141:45339] [client 89.251.0.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/click.php"] [unique_id "aelYcb6vRb9j6psK2ZaI6QAAAgc"]
[Thu Apr 23 07:23:31.901595 2026] [:error] [pid 64998:tid 65017] [client 89.251.0.136:51471] [client 89.251.0.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "aelYc4V5EysYcTLjmwjrtQAAAc8"]
[Thu Apr 23 07:23:32.879325 2026] [proxy_fcgi:error] [pid 42971:tid 42993] [client 89.251.0.147:40377] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:23:33.943302 2026] [proxy_fcgi:error] [pid 42971:tid 42992] [client 89.251.0.147:40377] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:23:34.556902 2026] [proxy_fcgi:error] [pid 42971:tid 42986] [client 89.251.0.147:40377] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:23:34.958029 2026] [:error] [pid 42971:tid 43006] [client 89.251.0.147:40377] [client 89.251.0.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "aelYdjEP2_5RswrH8bGgOgAAABQ"]
[Thu Apr 23 07:23:35.549470 2026] [:error] [pid 42972:tid 43021] [client 89.251.0.129:52481] [client 89.251.0.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/xl2023.php"] [unique_id "aelYd8OAb-3sOknsk4cXgwAAAEU"]
[Thu Apr 23 07:23:36.215349 2026] [:error] [pid 64998:tid 65012] [client 89.251.0.114:43973] [client 89.251.0.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/certificates/admin.php"] [unique_id "aelYeIV5EysYcTLjmwjrzwAAAco"]
[Thu Apr 23 07:23:36.839549 2026] [:error] [pid 25635:tid 25659] [client 89.251.0.143:46529] [client 89.251.0.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/images/media/dog.php"] [unique_id "aelYeMRxv6UsgRGKB3LbaQAAARQ"]
[Thu Apr 23 07:23:38.197296 2026] [proxy_fcgi:error] [pid 65000:tid 65050] [client 89.251.0.126:25171] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:23:38.527303 2026] [:error] [pid 65000:tid 65045] [client 89.251.0.126:25171] [client 89.251.0.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "aelYer6vRb9j6psK2ZaJ6AAAAgw"]
[Thu Apr 23 07:23:39.131674 2026] [:error] [pid 42971:tid 42999] [client 89.251.0.127:35491] [client 89.251.0.127] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aelYezEP2_5RswrH8bGgRQAAAA0"]
[Thu Apr 23 07:23:39.752995 2026] [proxy_fcgi:error] [pid 25635:tid 25639] [client 89.251.0.125:26635] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:23:40.417746 2026] [:error] [pid 25635:tid 25663] [client 89.251.0.125:26635] [client 89.251.0.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aelYfMRxv6UsgRGKB3LbqAAAARg"]
[Thu Apr 23 07:23:41.108903 2026] [:error] [pid 43083:tid 43099] [client 89.251.0.140:38069] [client 89.251.0.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aelYfTC5hrvNXosL83LB5AAAAM4"]
[Thu Apr 23 07:23:41.729384 2026] [:error] [pid 64967:tid 64989] [client 89.251.0.114:24823] [client 89.251.0.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/pomo/admin.php"] [unique_id "aelYfYAV4GfOOdX8QzoKhAAAAZQ"]
[Thu Apr 23 07:23:42.394369 2026] [:error] [pid 64998:tid 65020] [client 89.251.0.137:26105] [client 89.251.0.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/IXR/security.php"] [unique_id "aelYfoV5EysYcTLjmwjsMAAAAdI"]
[Thu Apr 23 07:23:44.332369 2026] [:error] [pid 25635:tid 25640] [client 89.251.0.141:58617] [client 89.251.0.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aelYgMRxv6UsgRGKB3Lb0gAAAQE"]
[Thu Apr 23 07:23:45.608085 2026] [:error] [pid 59700:tid 59705] [client 89.251.0.133:26125] [client 89.251.0.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/fonts/about.php"] [unique_id "aelYgZXyGZJFeAIDWtlRygAAAUM"]
[Thu Apr 23 07:23:46.274144 2026] [proxy_fcgi:error] [pid 42971:tid 42990] [client 89.251.0.120:20373] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:23:47.366339 2026] [proxy_fcgi:error] [pid 42971:tid 42987] [client 89.251.0.120:20373] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:23:47.776737 2026] [:error] [pid 42971:tid 42991] [client 89.251.0.120:20373] [client 89.251.0.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "aelYgzEP2_5RswrH8bGgYwAAAAU"]
[Thu Apr 23 07:23:48.710322 2026] [proxy_fcgi:error] [pid 65000:tid 65047] [client 89.251.0.128:45919] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:23:49.031845 2026] [proxy_fcgi:error] [pid 65000:tid 65029] [client 89.251.0.128:45919] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:23:50.585278 2026] [:error] [pid 65000:tid 65050] [client 89.251.0.128:45919] [client 89.251.0.128] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/assets/file.php"] [unique_id "aelYhr6vRb9j6psK2ZaLggAAAhE"]
[Thu Apr 23 07:23:52.185329 2026] [:error] [pid 65000:tid 65029] [client 89.251.0.136:52901] [client 89.251.0.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "aelYiL6vRb9j6psK2ZaLsgAAAgA"]
[Thu Apr 23 07:23:53.929210 2026] [:error] [pid 65000:tid 65038] [client 89.251.0.126:46673] [client 89.251.0.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "aelYib6vRb9j6psK2ZaL5gAAAgU"]
[Thu Apr 23 07:23:56.029465 2026] [:error] [pid 65000:tid 65039] [client 89.251.0.120:47747] [client 89.251.0.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aelYjL6vRb9j6psK2ZaMJwAAAgY"]
[Thu Apr 23 07:23:57.363297 2026] [proxy_fcgi:error] [pid 65000:tid 65038] [client 89.251.0.139:34787] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:23:57.694306 2026] [proxy_fcgi:error] [pid 65000:tid 65041] [client 89.251.0.139:34787] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:23:58.011314 2026] [proxy_fcgi:error] [pid 65000:tid 65039] [client 89.251.0.139:34787] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:23:58.337284 2026] [proxy_fcgi:error] [pid 65000:tid 65046] [client 89.251.0.139:34787] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:24:00.263793 2026] [:error] [pid 65000:tid 65031] [client 89.251.0.139:34787] [client 89.251.0.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/themes/astra/inc/fm.php"] [unique_id "aelYkL6vRb9j6psK2ZaMmQAAAgI"]
[Thu Apr 23 07:24:02.017412 2026] [:error] [pid 43083:tid 43094] [client 89.251.0.144:53979] [client 89.251.0.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aelYkjC5hrvNXosL83LCrgAAAMk"]
[Thu Apr 23 07:24:02.748196 2026] [:error] [pid 42973:tid 43062] [client 89.251.0.146:31625] [client 89.251.0.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "aelYkm6I0QqmmmLTHE3VlwAAAJM"]
[Thu Apr 23 07:24:03.332353 2026] [:error] [pid 65000:tid 65052] [client 89.251.0.142:57519] [client 89.251.0.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "aelYk76vRb9j6psK2ZaM1QAAAhM"]
[Thu Apr 23 07:24:03.926536 2026] [:error] [pid 42973:tid 43056] [client 89.251.0.136:62693] [client 89.251.0.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "aelYk26I0QqmmmLTHE3VpgAAAI0"]
[Thu Apr 23 07:24:04.474991 2026] [:error] [pid 65000:tid 65038] [client 89.251.0.138:56445] [client 89.251.0.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aelYlL6vRb9j6psK2ZaM9wAAAgU"]
[Thu Apr 23 07:24:05.090065 2026] [:error] [pid 65000:tid 65050] [client 89.251.0.127:21085] [client 89.251.0.127] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aelYlb6vRb9j6psK2ZaNEwAAAhE"]
[Thu Apr 23 07:24:07.110777 2026] [:error] [pid 42973:tid 43049] [client 89.251.0.127:30165] [client 89.251.0.127] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/images/media/index.php"] [unique_id "aelYl26I0QqmmmLTHE3VwwAAAIY"]
[Thu Apr 23 07:24:07.834731 2026] [:error] [pid 25635:tid 25655] [client 89.251.0.133:59749] [client 89.251.0.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "aelYl8Rxv6UsgRGKB3LcsgAAARA"]
[Thu Apr 23 07:24:08.453561 2026] [:error] [pid 43083:tid 43092] [client 89.251.0.150:26957] [client 89.251.0.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "aelYmDC5hrvNXosL83LCzgAAAMc"]
[Thu Apr 23 07:24:09.062183 2026] [:error] [pid 64998:tid 65010] [client 89.251.0.135:49469] [client 89.251.0.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "aelYmYV5EysYcTLjmwjt0gAAAcg"]
[Thu Apr 23 07:24:10.759564 2026] [:error] [pid 64998:tid 65020] [client 89.251.0.126:42435] [client 89.251.0.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/fonts/themes.php"] [unique_id "aelYmoV5EysYcTLjmwjt8AAAAdI"]
[Thu Apr 23 07:24:11.649496 2026] [:error] [pid 43083:tid 43106] [client 89.251.0.142:35187] [client 89.251.0.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/certificates/index.php"] [unique_id "aelYmzC5hrvNXosL83LC2gAAANU"]
[Thu Apr 23 07:24:12.332337 2026] [proxy_fcgi:error] [pid 65000:tid 65042] [client 89.251.0.138:22911] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:24:12.945247 2026] [:error] [pid 65000:tid 65052] [client 89.251.0.138:22911] [client 89.251.0.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "aelYnL6vRb9j6psK2ZaN3AAAAhM"]
[Thu Apr 23 07:24:14.709012 2026] [:error] [pid 65000:tid 65043] [client 89.251.0.144:35427] [client 89.251.0.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "aelYnr6vRb9j6psK2ZaOCgAAAgo"]
[Thu Apr 23 07:24:15.979318 2026] [proxy_fcgi:error] [pid 65000:tid 65031] [client 89.251.0.144:62689] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:24:16.274945 2026] [:error] [pid 65000:tid 65043] [client 89.251.0.144:62689] [client 89.251.0.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aelYoL6vRb9j6psK2ZaOOwAAAgo"]
[Thu Apr 23 07:24:17.286296 2026] [proxy_fcgi:error] [pid 42971:tid 42994] [client 89.251.0.138:42305] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:24:17.646312 2026] [proxy_fcgi:error] [pid 42971:tid 42998] [client 89.251.0.138:42305] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:24:18.149298 2026] [proxy_fcgi:error] [pid 42971:tid 43002] [client 89.251.0.138:42305] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:24:18.553668 2026] [:error] [pid 42971:tid 42994] [client 89.251.0.138:42305] [client 89.251.0.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "aelYojEP2_5RswrH8bGhPgAAAAg"]
[Thu Apr 23 07:24:19.174311 2026] [proxy_fcgi:error] [pid 43083:tid 43096] [client 89.251.0.117:39705] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:24:19.491730 2026] [:error] [pid 43083:tid 43093] [client 89.251.0.117:39705] [client 89.251.0.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "aelYozC5hrvNXosL83LDAgAAAMg"]
[Thu Apr 23 07:24:20.443302 2026] [:error] [pid 25635:tid 25643] [client 89.251.0.116:29135] [client 89.251.0.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/1.php"] [unique_id "aelYpMRxv6UsgRGKB3LdKgAAAQQ"]
[Thu Apr 23 07:24:21.400154 2026] [proxy_fcgi:error] [pid 42971:tid 42994] [client 89.251.0.148:25847] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:24:21.736389 2026] [proxy_fcgi:error] [pid 42971:tid 42997] [client 89.251.0.148:25847] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:24:22.073301 2026] [proxy_fcgi:error] [pid 42971:tid 42994] [client 89.251.0.148:25847] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:24:23.868373 2026] [proxy_fcgi:error] [pid 42971:tid 43006] [client 89.251.0.148:25847] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:24:24.247764 2026] [proxy_fcgi:error] [pid 42971:tid 42990] [client 89.251.0.148:25847] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:24:24.961328 2026] [proxy_fcgi:error] [pid 42971:tid 42996] [client 89.251.0.148:25847] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:24:25.932823 2026] [proxy_fcgi:error] [pid 42971:tid 43002] [client 89.251.0.148:25847] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:24:26.220809 2026] [:error] [pid 42971:tid 43008] [client 89.251.0.148:25847] [client 89.251.0.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "aelYqjEP2_5RswrH8bGhhwAAABY"]
[Thu Apr 23 07:24:26.883020 2026] [:error] [pid 59700:tid 59720] [client 89.251.0.144:23209] [client 89.251.0.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aelYqpXyGZJFeAIDWtlTEQAAAVI"]
[Thu Apr 23 07:24:27.503306 2026] [proxy_fcgi:error] [pid 64967:tid 64992] [client 89.251.0.143:63741] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:24:27.855611 2026] [:error] [pid 64967:tid 64973] [client 89.251.0.143:63741] [client 89.251.0.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "aelYq4AV4GfOOdX8QzoMZAAAAYQ"]
[Thu Apr 23 07:24:28.880307 2026] [proxy_fcgi:error] [pid 42971:tid 42990] [client 89.251.0.142:48371] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:24:29.205624 2026] [:error] [pid 42971:tid 42995] [client 89.251.0.142:48371] [client 89.251.0.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aelYrTEP2_5RswrH8bGhmQAAAAk"]
[Thu Apr 23 07:24:29.841185 2026] [:error] [pid 42971:tid 42991] [client 89.251.0.148:51103] [client 89.251.0.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aelYrTEP2_5RswrH8bGhoQAAAAU"]
[Thu Apr 23 07:24:31.935140 2026] [:error] [pid 43083:tid 43106] [client 89.251.0.140:44455] [client 89.251.0.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aelYrzC5hrvNXosL83LDsgAAANU"]
[Thu Apr 23 07:24:32.574709 2026] [:error] [pid 59700:tid 59713] [client 89.251.0.138:31029] [client 89.251.0.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.dwelectservices.com.au"] [uri "/fm.php"] [unique_id "aelYsJXyGZJFeAIDWtlTMAAAAUs"]
[Thu Apr 23 07:24:34.517743 2026] [proxy_fcgi:error] [pid 42972:tid 43019] [client 89.251.0.131:65497] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:24:35.118381 2026] [:error] [pid 42972:tid 43039] [client 89.251.0.131:65497] [client 89.251.0.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "aelYs8OAb-3sOknsk4cZowAAAFc"]
[Thu Apr 23 07:24:36.170552 2026] [proxy_fcgi:error] [pid 64967:tid 64971] [client 89.251.0.148:36345] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:24:36.881016 2026] [:error] [pid 64967:tid 64976] [client 89.251.0.148:36345] [client 89.251.0.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/function.php"] [unique_id "aelYtIAV4GfOOdX8QzoNFAAAAYc"]
[Thu Apr 23 07:24:37.438474 2026] [:error] [pid 65000:tid 65047] [client 89.251.0.142:20665] [client 89.251.0.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/plugins.php"] [unique_id "aelYtb6vRb9j6psK2ZaP0AAAAg4"]
[Thu Apr 23 07:24:38.417360 2026] [proxy_fcgi:error] [pid 64967:tid 64979] [client 89.251.0.119:44321] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:24:38.711255 2026] [:error] [pid 64967:tid 64971] [client 89.251.0.119:44321] [client 89.251.0.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/css/chosen.php"] [unique_id "aelYtoAV4GfOOdX8QzoNQQAAAYI"]
[Thu Apr 23 07:24:39.290066 2026] [:error] [pid 25635:tid 25648] [client 89.251.0.125:45447] [client 89.251.0.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "aelYt8Rxv6UsgRGKB3Ld4wAAAQk"]
[Thu Apr 23 07:24:40.634714 2026] [proxy_fcgi:error] [pid 42971:tid 43002] [client 89.251.0.142:29301] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:24:40.953810 2026] [proxy_fcgi:error] [pid 42971:tid 42992] [client 89.251.0.142:29301] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:24:41.566612 2026] [proxy_fcgi:error] [pid 42971:tid 43007] [client 89.251.0.142:29301] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:24:42.262657 2026] [:error] [pid 42971:tid 42993] [client 89.251.0.142:29301] [client 89.251.0.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/atomlib.php"] [unique_id "aelYujEP2_5RswrH8bGiHAAAAAc"]
[Thu Apr 23 07:24:43.912074 2026] [:error] [pid 64967:tid 64970] [client 89.251.0.117:31471] [client 89.251.0.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/rest-api/index.php"] [unique_id "aelYu4AV4GfOOdX8QzoNhgAAAYE"]
[Thu Apr 23 07:24:45.488317 2026] [proxy_fcgi:error] [pid 59700:tid 59719] [client 89.251.0.120:43725] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:24:45.812871 2026] [:error] [pid 59700:tid 59704] [client 89.251.0.120:43725] [client 89.251.0.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/index.php"] [unique_id "aelYvZXyGZJFeAIDWtlTiAAAAUI"]
[Thu Apr 23 07:24:46.405394 2026] [:error] [pid 64967:tid 64983] [client 89.251.0.138:57915] [client 89.251.0.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aelYvoAV4GfOOdX8QzoNmgAAAY4"]
[Thu Apr 23 07:24:47.039569 2026] [:error] [pid 42972:tid 43034] [client 89.251.0.123:20527] [client 89.251.0.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aelYv8OAb-3sOknsk4caDAAAAFI"]
[Thu Apr 23 07:24:49.074781 2026] [proxy_fcgi:error] [pid 64998:tid 65023] [client 89.251.0.135:25689] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:24:49.437178 2026] [:error] [pid 64998:tid 65018] [client 89.251.0.135:25689] [client 89.251.0.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/SimplePie/Exception-wp.php"] [unique_id "aelYwYV5EysYcTLjmwjv0QAAAdA"]
[Thu Apr 23 07:24:50.410449 2026] [:error] [pid 42972:tid 43017] [client 89.251.0.128:59285] [client 89.251.0.128] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aelYwsOAb-3sOknsk4caRgAAAEE"]
[Thu Apr 23 07:24:51.050304 2026] [proxy_fcgi:error] [pid 65000:tid 65049] [client 89.251.0.131:25751] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:24:51.379527 2026] [proxy_fcgi:error] [pid 65000:tid 65051] [client 89.251.0.131:25751] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:24:51.936333 2026] [:error] [pid 65000:tid 65050] [client 89.251.0.131:25751] [client 89.251.0.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/up.php"] [unique_id "aelYw76vRb9j6psK2ZaRTAAAAhE"]
[Thu Apr 23 07:24:52.539308 2026] [proxy_fcgi:error] [pid 43083:tid 43097] [client 89.251.0.150:47903] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:24:53.806825 2026] [:error] [pid 43083:tid 43099] [client 89.251.0.150:47903] [client 89.251.0.150] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.251.0.150, incrementing brute counter"] [hostname "www.dwelectservices.com.au"] [uri "/js/wp-login.php"] [unique_id "aelYxTC5hrvNXosL83LEjwAAAM4"]
[Thu Apr 23 07:24:54.553327 2026] [:error] [pid 43083:tid 43087] [client 89.251.0.150:47903] File does not exist: /home/dwelects/public_html/worm.PhP
[Thu Apr 23 07:24:54.865598 2026] [proxy_fcgi:error] [pid 43083:tid 43085] [client 89.251.0.150:47903] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:24:55.181319 2026] [proxy_fcgi:error] [pid 43083:tid 43105] [client 89.251.0.150:47903] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:24:56.106968 2026] [:error] [pid 43083:tid 43098] [client 89.251.0.150:47903] [client 89.251.0.150] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.251.0.150, incrementing brute counter"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "aelYyDC5hrvNXosL83LErAAAAM0"]
[Thu Apr 23 07:24:57.045524 2026] [proxy_fcgi:error] [pid 43083:tid 43107] [client 89.251.0.150:47903] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:24:57.383395 2026] [proxy_fcgi:error] [pid 43083:tid 43094] [client 89.251.0.150:47903] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:24:57.970307 2026] [proxy_fcgi:error] [pid 43083:tid 43087] [client 89.251.0.150:47903] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:24:58.587323 2026] [proxy_fcgi:error] [pid 43083:tid 43088] [client 89.251.0.150:47903] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:24:59.794359 2026] [proxy_fcgi:error] [pid 43083:tid 43103] [client 89.251.0.150:47903] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:25:03.518305 2026] [proxy_fcgi:error] [pid 43083:tid 43096] [client 89.251.0.150:47903] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:25:04.382650 2026] [proxy_fcgi:error] [pid 43083:tid 43094] [client 89.251.0.150:47903] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:25:06.172308 2026] [proxy_fcgi:error] [pid 43083:tid 43101] [client 89.251.0.150:47903] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:25:06.788953 2026] [:error] [pid 43083:tid 43092] [client 89.251.0.150:47903] [client 89.251.0.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "aelY0jC5hrvNXosL83LFGAAAAMc"]
[Thu Apr 23 07:25:08.712859 2026] [proxy_fcgi:error] [pid 64967:tid 64979] [client 89.251.0.128:52147] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:25:09.118529 2026] [:error] [pid 64967:tid 64987] [client 89.251.0.128:52147] [client 89.251.0.128] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aelY1YAV4GfOOdX8QzoOcwAAAZI"]
[Thu Apr 23 07:25:09.792391 2026] [proxy_fcgi:error] [pid 65000:tid 65041] [client 89.251.0.113:37147] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:25:10.144626 2026] [proxy_fcgi:error] [pid 65000:tid 65040] [client 89.251.0.113:37147] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:25:10.467342 2026] [:error] [pid 65000:tid 65041] [client 89.251.0.113:37147] [client 89.251.0.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/css/atomlib.php"] [unique_id "aelY1r6vRb9j6psK2ZaS0wAAAgg"]
[Thu Apr 23 07:25:11.838309 2026] [proxy_fcgi:error] [pid 64998:tid 65016] [client 89.251.0.137:49759] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:25:12.498312 2026] [proxy_fcgi:error] [pid 64998:tid 65014] [client 89.251.0.137:49759] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:25:13.535290 2026] [proxy_fcgi:error] [pid 64998:tid 65009] [client 89.251.0.137:49759] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:25:13.857302 2026] [proxy_fcgi:error] [pid 64998:tid 65012] [client 89.251.0.137:49759] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:25:14.511209 2026] [:error] [pid 64998:tid 65015] [client 89.251.0.137:49759] [client 89.251.0.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aelY2oV5EysYcTLjmwjw5gAAAc0"]
[Thu Apr 23 07:25:15.207313 2026] [proxy_fcgi:error] [pid 59700:tid 59709] [client 89.251.0.113:44753] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:25:16.125317 2026] [proxy_fcgi:error] [pid 59700:tid 59715] [client 89.251.0.113:44753] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:25:16.614637 2026] [:error] [pid 59700:tid 59718] [client 89.251.0.113:44753] [client 89.251.0.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aelY3JXyGZJFeAIDWtlU3QAAAVA"]
[Thu Apr 23 07:25:17.546285 2026] [:error] [pid 65000:tid 65056] [client 89.251.0.113:49123] [client 89.251.0.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aelY3b6vRb9j6psK2ZaTWwAAAhc"]
[Thu Apr 23 07:25:18.677306 2026] [proxy_fcgi:error] [pid 43083:tid 43103] [client 89.251.0.140:49865] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:25:19.896133 2026] [proxy_fcgi:error] [pid 43083:tid 43102] [client 89.251.0.140:49865] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:25:20.199673 2026] [proxy_fcgi:error] [pid 43083:tid 43103] [client 89.251.0.140:49865] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:25:20.581690 2026] [:error] [pid 43083:tid 43101] [client 89.251.0.140:49865] [client 89.251.0.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "aelY4DC5hrvNXosL83LFwwAAANA"]
[Thu Apr 23 07:25:21.190292 2026] [:error] [pid 64998:tid 65009] [client 89.251.0.132:29765] [client 89.251.0.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "aelY4YV5EysYcTLjmwjxIQAAAcc"]
[Thu Apr 23 07:25:23.531290 2026] [proxy_fcgi:error] [pid 43083:tid 43092] [client 89.251.0.140:53437] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:25:24.147509 2026] [:error] [pid 43083:tid 43087] [client 89.251.0.140:53437] [client 89.251.0.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/js/dist/default.php"] [unique_id "aelY5DC5hrvNXosL83LF_wAAAMI"]
[Thu Apr 23 07:25:25.166498 2026] [:error] [pid 42971:tid 43010] [client 89.251.0.142:42289] [client 89.251.0.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.dwelectservices.com.au"] [uri "/tiny.php"] [unique_id "aelY5TEP2_5RswrH8bGkJwAAABg"]
[Thu Apr 23 07:25:26.252724 2026] [proxy_fcgi:error] [pid 59700:tid 59723] [client 89.251.0.124:46729] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:25:26.639306 2026] [proxy_fcgi:error] [pid 59700:tid 59711] [client 89.251.0.124:46729] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:25:26.966774 2026] [:error] [pid 59700:tid 59717] [client 89.251.0.124:46729] [client 89.251.0.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "aelY5pXyGZJFeAIDWtlVXwAAAU8"]
[Thu Apr 23 07:25:27.902310 2026] [proxy_fcgi:error] [pid 65000:tid 65047] [client 89.251.0.115:21287] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:25:28.240892 2026] [proxy_fcgi:error] [pid 65000:tid 65038] [client 89.251.0.115:21287] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:25:28.906351 2026] [proxy_fcgi:error] [pid 65000:tid 65044] [client 89.251.0.115:21287] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:25:33.674500 2026] [:error] [pid 65000:tid 65038] [client 89.251.0.115:21287] [client 89.251.0.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/SimplePie/Parse/about.php"] [unique_id "aelY7b6vRb9j6psK2ZaUMwAAAgU"]
[Thu Apr 23 07:25:34.369340 2026] [proxy_fcgi:error] [pid 42972:tid 43029] [client 89.251.0.113:47863] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:25:35.335460 2026] [:error] [pid 42972:tid 43026] [client 89.251.0.113:47863] [client 89.251.0.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "aelY78OAb-3sOknsk4cckQAAAEo"]
[Thu Apr 23 07:25:36.837309 2026] [proxy_fcgi:error] [pid 64998:tid 65016] [client 89.251.0.115:61063] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:25:37.807689 2026] [proxy_fcgi:error] [pid 64998:tid 65006] [client 89.251.0.115:61063] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:25:38.186747 2026] [proxy_fcgi:error] [pid 64998:tid 65024] [client 89.251.0.115:61063] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:25:39.045680 2026] [:error] [pid 64998:tid 65003] [client 89.251.0.115:61063] [client 89.251.0.115] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.251.0.115, incrementing brute counter"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/css/colors/ocean/wp-login.php"] [unique_id "aelY84V5EysYcTLjmwjyggAAAcE"]
[Thu Apr 23 07:25:40.435312 2026] [proxy_fcgi:error] [pid 64998:tid 65002] [client 89.251.0.115:61063] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:25:41.114859 2026] [:error] [pid 64998:tid 65008] [client 89.251.0.115:61063] [client 89.251.0.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/SimplePie/Cache/upfile.php"] [unique_id "aelY9YV5EysYcTLjmwjyrAAAAcY"]
[Thu Apr 23 07:25:41.887327 2026] [proxy_fcgi:error] [pid 42971:tid 42996] [client 89.251.0.150:20811] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:25:42.206719 2026] [:error] [pid 42971:tid 42986] [client 89.251.0.150:20811] [client 89.251.0.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "aelY9jEP2_5RswrH8bGlHAAAAAA"]
[Thu Apr 23 07:25:42.827572 2026] [proxy_fcgi:error] [pid 42971:tid 42993] [client 89.251.0.136:63563] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:25:43.463321 2026] [proxy_fcgi:error] [pid 42971:tid 43001] [client 89.251.0.136:63563] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:25:44.102973 2026] [:error] [pid 42971:tid 42995] [client 89.251.0.136:63563] [client 89.251.0.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/widgets/class-wp-widget-search-function.php"] [unique_id "aelY-DEP2_5RswrH8bGlXQAAAAk"]
[Thu Apr 23 07:25:45.078439 2026] [:error] [pid 42972:tid 43018] [client 89.251.0.124:22717] [client 89.251.0.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-files.php"] [unique_id "aelY-cOAb-3sOknsk4cc8gAAAEI"]
[Thu Apr 23 07:25:45.684287 2026] [proxy_fcgi:error] [pid 65000:tid 65044] [client 89.251.0.151:56045] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:25:46.026311 2026] [proxy_fcgi:error] [pid 65000:tid 65053] [client 89.251.0.151:56045] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:25:47.507496 2026] [:error] [pid 65000:tid 65031] [client 89.251.0.151:56045] [client 89.251.0.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/SimplePie/Canonical.php"] [unique_id "aelY-76vRb9j6psK2ZaUsQAAAgI"]
[Thu Apr 23 07:25:48.176107 2026] [:error] [pid 25635:tid 25655] [client 89.251.0.151:26153] [client 89.251.0.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "aelY_MRxv6UsgRGKB3LfzQAAARA"]
[Thu Apr 23 07:25:48.836445 2026] [proxy_fcgi:error] [pid 64967:tid 64978] [client 89.251.0.142:44463] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:25:49.178318 2026] [proxy_fcgi:error] [pid 64967:tid 64979] [client 89.251.0.142:44463] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:25:49.852364 2026] [:error] [pid 64967:tid 64977] [client 89.251.0.142:44463] [client 89.251.0.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/class-feed-index.php"] [unique_id "aelY_YAV4GfOOdX8QzoP9wAAAYg"]
[Thu Apr 23 07:25:50.518311 2026] [proxy_fcgi:error] [pid 64967:tid 64973] [client 89.251.0.123:40867] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:25:51.216302 2026] [proxy_fcgi:error] [pid 64967:tid 64969] [client 89.251.0.123:40867] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:25:51.640281 2026] [:error] [pid 64967:tid 64981] [client 89.251.0.123:40867] [client 89.251.0.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php"] [unique_id "aelY_4AV4GfOOdX8QzoQAAAAAYw"]
[Thu Apr 23 07:25:52.575082 2026] [:error] [pid 64998:tid 65015] [client 89.251.0.129:43173] [client 89.251.0.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/db.php"] [unique_id "aelZAIV5EysYcTLjmwjzDgAAAc0"]
[Thu Apr 23 07:25:53.195938 2026] [:error] [pid 59700:tid 59702] [client 89.251.0.132:46475] [client 89.251.0.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/class-wp-dependency-float.php"] [unique_id "aelZAZXyGZJFeAIDWtlV-QAAAUA"]
[Thu Apr 23 07:25:53.911693 2026] [:error] [pid 64967:tid 64991] [client 89.251.0.114:24695] [client 89.251.0.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "aelZAYAV4GfOOdX8QzoQCQAAAZY"]
[Thu Apr 23 07:25:54.591730 2026] [:error] [pid 42972:tid 43020] [client 89.251.0.142:30325] [client 89.251.0.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/PHPMailer/purna.php"] [unique_id "aelZAsOAb-3sOknsk4cdRgAAAEQ"]
[Thu Apr 23 07:25:55.129854 2026] [:error] [pid 42972:tid 43034] [client 89.251.0.143:45667] [client 89.251.0.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/interactivity-api/interactivity-api-class.php"] [unique_id "aelZA8OAb-3sOknsk4cdUQAAAFI"]
[Thu Apr 23 07:25:55.774085 2026] [:error] [pid 42972:tid 43035] [client 89.251.0.120:53891] [client 89.251.0.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/l10n/class-wp-widddget-pages.php"] [unique_id "aelZA8OAb-3sOknsk4cdZQAAAFM"]
[Thu Apr 23 07:25:57.202998 2026] [:error] [pid 42971:tid 42987] [client 89.251.0.148:56483] [client 89.251.0.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php"] [unique_id "aelZBTEP2_5RswrH8bGl3QAAAAE"]
[Thu Apr 23 07:25:58.163802 2026] [:error] [pid 25635:tid 25647] [client 89.251.0.147:57203] [client 89.251.0.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php"] [unique_id "aelZBsRxv6UsgRGKB3LgAQAAAQg"]
[Thu Apr 23 07:25:58.776069 2026] [:error] [pid 65000:tid 65037] [client 89.251.0.139:32967] [client 89.251.0.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/ID3/module.audio-video.riff-set.php"] [unique_id "aelZBr6vRb9j6psK2ZaVSAAAAgQ"]
[Thu Apr 23 07:25:59.393670 2026] [:error] [pid 59700:tid 59710] [client 89.251.0.151:59985] [client 89.251.0.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/js/tinymce/utils/license.php"] [unique_id "aelZB5XyGZJFeAIDWtlWNgAAAUg"]
[Thu Apr 23 07:25:59.950637 2026] [:error] [pid 43083:tid 43095] [client 89.251.0.141:25323] [client 89.251.0.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/Text/options.php"] [unique_id "aelZBzC5hrvNXosL83LHSgAAAMo"]
[Thu Apr 23 07:26:00.761312 2026] [proxy_fcgi:error] [pid 43083:tid 43109] [client 89.251.0.123:49431] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:26:01.849110 2026] [:error] [pid 43083:tid 43094] [client 89.251.0.123:49431] [client 89.251.0.123] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.251.0.123, incrementing brute counter"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "aelZCTC5hrvNXosL83LHXQAAAMk"]
[Thu Apr 23 07:26:03.548120 2026] [:error] [pid 43083:tid 43102] [client 89.251.0.123:49431] [client 89.251.0.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/IXR/goto.php"] [unique_id "aelZCzC5hrvNXosL83LHcwAAANE"]
[Thu Apr 23 07:26:04.846291 2026] [proxy_fcgi:error] [pid 42972:tid 43036] [client 89.251.0.140:28177] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:26:05.162989 2026] [proxy_fcgi:error] [pid 42972:tid 43033] [client 89.251.0.140:28177] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:26:06.463850 2026] [proxy_fcgi:error] [pid 42972:tid 43028] [client 89.251.0.140:28177] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:26:06.806296 2026] [proxy_fcgi:error] [pid 42972:tid 43027] [client 89.251.0.140:28177] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:26:08.109971 2026] [:error] [pid 42972:tid 43038] [client 89.251.0.140:28177] [client 89.251.0.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/options-writing.php"] [unique_id "aelZEMOAb-3sOknsk4cdyQAAAFY"]
[Thu Apr 23 07:26:08.711295 2026] [proxy_fcgi:error] [pid 25635:tid 25662] [client 89.251.0.143:27175] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:26:09.033515 2026] [proxy_fcgi:error] [pid 25635:tid 25663] [client 89.251.0.143:27175] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:26:09.343284 2026] [proxy_fcgi:error] [pid 25635:tid 25642] [client 89.251.0.143:27175] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:26:09.639308 2026] [proxy_fcgi:error] [pid 25635:tid 25640] [client 89.251.0.143:27175] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:26:09.983668 2026] [:error] [pid 25635:tid 25651] [client 89.251.0.143:27175] [client 89.251.0.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aelZEcRxv6UsgRGKB3LgXwAAAQw"]
[Thu Apr 23 07:26:10.583726 2026] [:error] [pid 43083:tid 43099] [client 89.251.0.128:53277] [client 89.251.0.128] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/wp_class_datlib.php"] [unique_id "aelZEjC5hrvNXosL83LHsQAAAM4"]
[Thu Apr 23 07:26:11.190339 2026] [:error] [pid 42971:tid 43005] [client 89.251.0.114:28071] [client 89.251.0.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "aelZEzEP2_5RswrH8bGmUwAAABM"]
[Thu Apr 23 07:26:13.164304 2026] [proxy_fcgi:error] [pid 43083:tid 43108] [client 89.251.0.150:57147] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:26:13.489304 2026] [proxy_fcgi:error] [pid 43083:tid 43106] [client 89.251.0.150:57147] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:26:14.164303 2026] [proxy_fcgi:error] [pid 43083:tid 43087] [client 89.251.0.150:57147] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:26:14.769908 2026] [:error] [pid 43083:tid 43090] [client 89.251.0.150:57147] [client 89.251.0.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/SimplePie/Registry-private.php"] [unique_id "aelZFjC5hrvNXosL83LH8AAAAMU"]
[Thu Apr 23 07:26:15.408106 2026] [:error] [pid 59700:tid 59713] [client 89.251.0.132:38535] [client 89.251.0.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-meta.php"] [unique_id "aelZF5XyGZJFeAIDWtlXDwAAAUs"]
[Thu Apr 23 07:26:16.202207 2026] [:error] [pid 42971:tid 43008] [client 89.251.0.139:58293] [client 89.251.0.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/widgets/bypass.php"] [unique_id "aelZGDEP2_5RswrH8bGmtAAAABY"]
[Thu Apr 23 07:26:21.119124 2026] [:error] [pid 65000:tid 65041] [client 89.251.0.139:61633] [client 89.251.0.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/style-engine/adminfus.php"] [unique_id "aelZHb6vRb9j6psK2ZaWQwAAAgg"]
[Thu Apr 23 07:26:21.674575 2026] [proxy_fcgi:error] [pid 65000:tid 65056] [client 89.251.0.144:52083] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:26:22.059600 2026] [:error] [pid 65000:tid 65052] [client 89.251.0.144:52083] [client 89.251.0.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/blocks/group/wp-style.php"] [unique_id "aelZHr6vRb9j6psK2ZaWUAAAAhM"]
[Thu Apr 23 07:26:23.337311 2026] [:error] [pid 65000:tid 65044] [client 89.251.0.151:40527] [client 89.251.0.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/widgets/class-wp-wolf-widget.php"] [unique_id "aelZH76vRb9j6psK2ZaWWwAAAgs"]
[Thu Apr 23 07:26:28.023355 2026] [:error] [pid 42973:tid 43060] [client 89.251.0.144:59141] [client 89.251.0.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/Text/index.php"] [unique_id "aelZJG6I0QqmmmLTHE3ZiwAAAJE"]
[Thu Apr 23 07:26:28.678311 2026] [proxy_fcgi:error] [pid 42971:tid 43000] [client 89.251.0.119:55487] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:26:29.022245 2026] [:error] [pid 42971:tid 42987] [client 89.251.0.119:55487] [client 89.251.0.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/about.php"] [unique_id "aelZJTEP2_5RswrH8bGnnQAAAAE"]
[Thu Apr 23 07:26:30.341590 2026] [proxy_fcgi:error] [pid 42971:tid 42990] [client 89.251.0.136:53995] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:26:31.384646 2026] [proxy_fcgi:error] [pid 42971:tid 42995] [client 89.251.0.136:53995] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:26:31.800351 2026] [:error] [pid 42971:tid 42986] [client 89.251.0.136:53995] [client 89.251.0.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/wp-sup.php"] [unique_id "aelZJzEP2_5RswrH8bGn3gAAAAA"]
[Thu Apr 23 07:26:32.967992 2026] [:error] [pid 59700:tid 59718] [client 89.251.0.114:27761] [client 89.251.0.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/widgets/class-t.api.php"] [unique_id "aelZKJXyGZJFeAIDWtlX-QAAAVA"]
[Thu Apr 23 07:26:35.233161 2026] [:error] [pid 59700:tid 59716] [client 89.251.0.143:28011] [client 89.251.0.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/css/dist/require-dynamic-blocks.php"] [unique_id "aelZK5XyGZJFeAIDWtlYGAAAAU4"]
[Thu Apr 23 07:26:37.235185 2026] [:error] [pid 59700:tid 59721] [client 89.251.0.148:45961] [client 89.251.0.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/widgets/class-wp-widget-rss-database.php"] [unique_id "aelZLZXyGZJFeAIDWtlYKQAAAVM"]
[Thu Apr 23 07:26:38.258291 2026] [proxy_fcgi:error] [pid 42973:tid 43066] [client 89.251.0.123:45723] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:26:38.549815 2026] [:error] [pid 42973:tid 43055] [client 89.251.0.123:45723] [client 89.251.0.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/class-wp-customize-manager-client.php"] [unique_id "aelZLm6I0QqmmmLTHE3Z5QAAAIw"]
[Thu Apr 23 07:26:39.188610 2026] [:error] [pid 64967:tid 64974] [client 89.251.0.137:42467] [client 89.251.0.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-boolean.php"] [unique_id "aelZL4AV4GfOOdX8QzoRsAAAAYU"]
[Thu Apr 23 07:26:41.626686 2026] [:error] [pid 64967:tid 64990] [client 89.251.0.136:59663] [client 89.251.0.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/images/smilies/simi.php"] [unique_id "aelZMYAV4GfOOdX8QzoRzQAAAZU"]
[Thu Apr 23 07:26:42.242316 2026] [proxy_fcgi:error] [pid 59700:tid 59712] [client 89.251.0.147:33501] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:26:43.991001 2026] [proxy_fcgi:error] [pid 59700:tid 59704] [client 89.251.0.147:33501] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:26:44.303976 2026] [:error] [pid 59700:tid 59707] [client 89.251.0.147:33501] [client 89.251.0.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/style-engine-session.php"] [unique_id "aelZNJXyGZJFeAIDWtlYgwAAAUU"]
[Thu Apr 23 07:26:45.702295 2026] [proxy_fcgi:error] [pid 64998:tid 65021] [client 89.251.0.114:46359] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:26:46.378096 2026] [:error] [pid 64998:tid 65018] [client 89.251.0.114:46359] [client 89.251.0.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aelZNoV5EysYcTLjmwj0zwAAAdA"]
[Thu Apr 23 07:26:47.063311 2026] [:error] [pid 64998:tid 65005] [client 89.251.0.128:47925] [client 89.251.0.128] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/blocks/file/wp-style.php"] [unique_id "aelZN4V5EysYcTLjmwj04wAAAcM"]
[Thu Apr 23 07:26:47.984067 2026] [:error] [pid 64967:tid 64977] [client 89.251.0.127:37761] [client 89.251.0.127] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/IXR/class-IXR-cilent.php"] [unique_id "aelZN4AV4GfOOdX8QzoR8AAAAYg"]
[Thu Apr 23 07:26:49.723047 2026] [:error] [pid 43083:tid 43089] [client 89.251.0.114:54367] [client 89.251.0.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/images/install.php"] [unique_id "aelZOTC5hrvNXosL83LI6QAAAMQ"]
[Thu Apr 23 07:26:50.360996 2026] [:error] [pid 42971:tid 42997] [client 89.251.0.131:43835] [client 89.251.0.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/PHPMailer/xleet.php"] [unique_id "aelZOjEP2_5RswrH8bGoywAAAAs"]
[Thu Apr 23 07:26:51.266874 2026] [:error] [pid 42971:tid 42988] [client 89.251.0.140:59085] [client 89.251.0.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/f35_SpaceTn.php"] [unique_id "aelZOzEP2_5RswrH8bGo7AAAAAI"]
[Thu Apr 23 07:26:51.852314 2026] [proxy_fcgi:error] [pid 43083:tid 43104] [client 89.251.0.120:60603] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:26:53.532990 2026] [:error] [pid 43083:tid 43102] [client 89.251.0.120:60603] [client 89.251.0.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/category-double.php"] [unique_id "aelZPTC5hrvNXosL83LJBQAAANE"]
[Thu Apr 23 07:26:54.901809 2026] [:error] [pid 59700:tid 59721] [client 89.251.0.115:40265] [client 89.251.0.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/assets/db.php"] [unique_id "aelZPpXyGZJFeAIDWtlYuwAAAVM"]
[Thu Apr 23 07:26:55.594996 2026] [:error] [pid 65000:tid 65055] [client 89.251.0.123:36575] [client 89.251.0.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/widgets/security.php"] [unique_id "aelZP76vRb9j6psK2ZaXYgAAAhY"]
[Thu Apr 23 07:26:56.568613 2026] [proxy_fcgi:error] [pid 65000:tid 65030] [client 89.251.0.116:46471] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:26:56.864810 2026] [:error] [pid 65000:tid 65038] [client 89.251.0.116:46471] [client 89.251.0.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/class-wp-language-pack.php"] [unique_id "aelZQL6vRb9j6psK2ZaXegAAAgU"]
[Thu Apr 23 07:26:57.823078 2026] [:error] [pid 43083:tid 43099] [client 89.251.0.123:44021] [client 89.251.0.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/class-walker-comment-client.php"] [unique_id "aelZQTC5hrvNXosL83LJNgAAAM4"]
[Thu Apr 23 07:27:00.207067 2026] [:error] [pid 64998:tid 65017] [client 89.251.0.119:64827] [client 89.251.0.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/class-wp-network-query-stat.php"] [unique_id "aelZRIV5EysYcTLjmwj1mwAAAc8"]
[Thu Apr 23 07:27:01.257325 2026] [proxy_fcgi:error] [pid 59700:tid 59725] [client 89.251.0.145:50307] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:27:01.574328 2026] [:error] [pid 59700:tid 59722] [client 89.251.0.145:50307] [client 89.251.0.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/class-wp-session-tokens-https.php"] [unique_id "aelZRZXyGZJFeAIDWtlY1QAAAVQ"]
[Thu Apr 23 07:27:03.080905 2026] [:error] [pid 59700:tid 59726] [client 89.251.0.132:21715] [client 89.251.0.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/images/crystal/lrs_dage.php"] [unique_id "aelZR5XyGZJFeAIDWtlY4AAAAVg"]
[Thu Apr 23 07:27:03.997517 2026] [:error] [pid 43083:tid 43095] [client 89.251.0.128:54801] [client 89.251.0.128] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/as.php"] [unique_id "aelZRzC5hrvNXosL83LJuAAAAMo"]
[Thu Apr 23 07:27:05.377340 2026] [:error] [pid 64998:tid 65016] [client 89.251.0.126:63013] [client 89.251.0.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/certificates/wp-conflg.php"] [unique_id "aelZSYV5EysYcTLjmwj1twAAAc4"]
[Thu Apr 23 07:27:05.991798 2026] [:error] [pid 64998:tid 65012] [client 89.251.0.132:64199] [client 89.251.0.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/install.php"] [unique_id "aelZSYV5EysYcTLjmwj1vAAAAco"]
[Thu Apr 23 07:27:06.662155 2026] [:error] [pid 64998:tid 65023] [client 89.251.0.133:45027] [client 89.251.0.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/customize/db.php"] [unique_id "aelZSoV5EysYcTLjmwj1xgAAAdU"]
[Thu Apr 23 07:27:07.272305 2026] [proxy_fcgi:error] [pid 65000:tid 65050] [client 89.251.0.133:46823] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:27:09.156012 2026] [:error] [pid 65000:tid 65055] [client 89.251.0.133:46823] [client 89.251.0.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/js/thickbox/about.php"] [unique_id "aelZTb6vRb9j6psK2ZaYEAAAAhY"]
[Thu Apr 23 07:27:11.333958 2026] [:error] [pid 59700:tid 59703] [client 89.251.0.146:44059] [client 89.251.0.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/rk2.php"] [unique_id "aelZT5XyGZJFeAIDWtlZBQAAAUE"]
[Thu Apr 23 07:27:12.355765 2026] [proxy_fcgi:error] [pid 64967:tid 64974] [client 89.251.0.124:55817] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:27:12.704025 2026] [:error] [pid 64967:tid 64979] [client 89.251.0.124:55817] [client 89.251.0.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/certificates/past.php"] [unique_id "aelZUIAV4GfOOdX8QzoSowAAAYo"]
[Thu Apr 23 07:27:13.577668 2026] [:error] [pid 43083:tid 43087] [client 89.251.0.124:64653] [client 89.251.0.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/css/as.php"] [unique_id "aelZUTC5hrvNXosL83LKMgAAAMI"]
[Thu Apr 23 07:27:14.321954 2026] [proxy_fcgi:error] [pid 43083:tid 43100] [client 89.251.0.128:34385] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:27:14.914011 2026] [:error] [pid 43083:tid 43109] [client 89.251.0.128:34385] [client 89.251.0.128] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/edit-tags.php"] [unique_id "aelZUjC5hrvNXosL83LKSwAAANg"]
[Thu Apr 23 07:27:15.569304 2026] [proxy_fcgi:error] [pid 65000:tid 65047] [client 89.251.0.117:44975] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:27:15.855613 2026] [:error] [pid 65000:tid 65039] [client 89.251.0.117:44975] [client 89.251.0.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bless.php%20"] [unique_id "aelZU76vRb9j6psK2ZaYLwAAAgY"]
[Thu Apr 23 07:27:17.839810 2026] [:error] [pid 42971:tid 43000] [client 89.251.0.145:45891] [client 89.251.0.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/css/dist/footer-default.php"] [unique_id "aelZVTEP2_5RswrH8bGp_wAAAA4"]
[Thu Apr 23 07:27:19.250913 2026] [:error] [pid 25635:tid 25654] [client 89.251.0.142:58493] [client 89.251.0.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/widgets/class-wp-widget-meta-request.php"] [unique_id "aelZV8Rxv6UsgRGKB3LhsgAAAQ8"]
[Thu Apr 23 07:27:20.150163 2026] [:error] [pid 64967:tid 64984] [client 89.251.0.133:29611] [client 89.251.0.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/css/dist/edit-widgets/bypass.php"] [unique_id "aelZWIAV4GfOOdX8QzoS_gAAAY8"]
[Thu Apr 23 07:27:21.355721 2026] [:error] [pid 59700:tid 59714] [client 89.251.0.120:56857] [client 89.251.0.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/l10n/wp-login.php"] [unique_id "aelZWZXyGZJFeAIDWtlZSAAAAUw"]
[Thu Apr 23 07:27:24.946837 2026] [:error] [pid 65000:tid 65048] [client 89.251.0.119:28447] [client 89.251.0.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/widgets/wp-ss.php"] [unique_id "aelZXL6vRb9j6psK2ZaYugAAAg8"]
[Thu Apr 23 07:27:25.959973 2026] [:error] [pid 42973:tid 43059] [client 89.251.0.137:42881] [client 89.251.0.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/IXR/xsec1.php"] [unique_id "aelZXW6I0QqmmmLTHE3awAAAAJA"]
[Thu Apr 23 07:27:27.602702 2026] [:error] [pid 25635:tid 25653] [client 89.251.0.125:22341] [client 89.251.0.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/images/crystal/sad.php"] [unique_id "aelZX8Rxv6UsgRGKB3Lh3QAAAQ4"]
[Thu Apr 23 07:27:28.147741 2026] [:error] [pid 65000:tid 65029] [client 89.251.0.144:44523] [client 89.251.0.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aelZYL6vRb9j6psK2ZaY4QAAAgA"]
[Thu Apr 23 07:27:29.486685 2026] [:error] [pid 42972:tid 43018] [client 89.251.0.114:23235] [client 89.251.0.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/class-phpmailer-beta.php"] [unique_id "aelZYcOAb-3sOknsk4cgvwAAAEI"]
[Thu Apr 23 07:27:30.095652 2026] [:error] [pid 25635:tid 25652] [client 89.251.0.123:47993] [client 89.251.0.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/ms-file.php"] [unique_id "aelZYsRxv6UsgRGKB3Lh7AAAAQ0"]
[Thu Apr 23 07:27:30.721783 2026] [:error] [pid 65000:tid 65044] [client 89.251.0.136:47081] [client 89.251.0.136] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.251.0.136, incrementing brute counter"] [hostname "www.dwelectservices.com.au"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aelZYr6vRb9j6psK2ZaZCwAAAgs"]
[Thu Apr 23 07:27:30.738308 2026] [proxy_fcgi:error] [pid 65000:tid 65044] [client 89.251.0.136:47081] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:27:31.087636 2026] [:error] [pid 65000:tid 65032] [client 89.251.0.136:47081] [client 89.251.0.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/widgets/av.php"] [unique_id "aelZY76vRb9j6psK2ZaZEgAAAgM"]
[Thu Apr 23 07:27:32.147307 2026] [proxy_fcgi:error] [pid 43083:tid 43106] [client 89.251.0.140:64441] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:27:32.424993 2026] [:error] [pid 43083:tid 43099] [client 89.251.0.140:64441] [client 89.251.0.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aelZZDC5hrvNXosL83LLKQAAAM4"]
[Thu Apr 23 07:27:33.136445 2026] [:error] [pid 64967:tid 64989] [client 89.251.0.141:32711] [client 89.251.0.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/network.php"] [unique_id "aelZZYAV4GfOOdX8QzoTgAAAAZQ"]
[Thu Apr 23 07:27:33.844288 2026] [proxy_fcgi:error] [pid 42971:tid 42989] [client 89.251.0.137:24193] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:27:36.093727 2026] [:error] [pid 42971:tid 42994] [client 89.251.0.137:24193] [client 89.251.0.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/SimplePie/XML/content.php"] [unique_id "aelZaDEP2_5RswrH8bGqnQAAAAg"]
[Thu Apr 23 07:27:36.710324 2026] [:error] [pid 64998:tid 65024] [client 89.251.0.143:30189] [client 89.251.0.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/pomo/item.php"] [unique_id "aelZaIV5EysYcTLjmwj27gAAAdY"]
[Thu Apr 23 07:27:39.229328 2026] [:error] [pid 64998:tid 65004] [client 89.251.0.114:62415] [client 89.251.0.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/pomo/plugins.php"] [unique_id "aelZa4V5EysYcTLjmwj3FwAAAcI"]
[Thu Apr 23 07:27:40.032103 2026] [:error] [pid 43083:tid 43100] [client 89.251.0.123:48081] [client 89.251.0.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/assets/install.php"] [unique_id "aelZbDC5hrvNXosL83LLYwAAAM8"]
[Thu Apr 23 07:27:40.739302 2026] [proxy_fcgi:error] [pid 43083:tid 43106] [client 89.251.0.143:40351] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:27:41.089339 2026] [:error] [pid 43083:tid 43105] [client 89.251.0.143:40351] [client 89.251.0.143] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.251.0.143, incrementing brute counter"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/css/wp-login.php"] [unique_id "aelZbTC5hrvNXosL83LLagAAANQ"]
[Thu Apr 23 07:27:41.679857 2026] [:error] [pid 43083:tid 43102] [client 89.251.0.143:40351] [client 89.251.0.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/widgets/class-wp-nav-widgets.php"] [unique_id "aelZbTC5hrvNXosL83LLbwAAANE"]
[Thu Apr 23 07:27:44.614125 2026] [:error] [pid 25635:tid 25641] [client 89.251.0.146:47465] [client 89.251.0.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/sitemaps/providers/doc.php"] [unique_id "aelZcMRxv6UsgRGKB3LiOAAAAQI"]
[Thu Apr 23 07:27:45.292319 2026] [proxy_fcgi:error] [pid 64967:tid 64988] [client 89.251.0.131:54763] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:27:45.603785 2026] [:error] [pid 64967:tid 64972] [client 89.251.0.131:54763] [client 89.251.0.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/rest-api/1.php"] [unique_id "aelZcYAV4GfOOdX8QzoT2wAAAYM"]
[Thu Apr 23 07:27:46.211990 2026] [:error] [pid 25635:tid 25655] [client 89.251.0.148:27555] [client 89.251.0.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/fonts/class_api.php"] [unique_id "aelZcsRxv6UsgRGKB3LiPwAAARA"]
[Thu Apr 23 07:27:46.828349 2026] [proxy_fcgi:error] [pid 59700:tid 59702] [client 89.251.0.137:24951] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:27:47.955302 2026] [:error] [pid 59700:tid 59712] [client 89.251.0.137:24951] [client 89.251.0.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/images/smilies/admin.php"] [unique_id "aelZc5XyGZJFeAIDWtlaMgAAAUo"]
[Thu Apr 23 07:27:49.102799 2026] [:error] [pid 59700:tid 59710] [client 89.251.0.145:24909] [client 89.251.0.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/IXR/about.php"] [unique_id "aelZdZXyGZJFeAIDWtlaOgAAAUg"]
[Thu Apr 23 07:27:50.031707 2026] [proxy_fcgi:error] [pid 43083:tid 43098] [client 89.251.0.145:44563] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:27:50.740305 2026] [proxy_fcgi:error] [pid 43083:tid 43103] [client 89.251.0.145:44563] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:27:51.464972 2026] [:error] [pid 43083:tid 43094] [client 89.251.0.145:44563] [client 89.251.0.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/class-wp-customize-manager-interpreter.php"] [unique_id "aelZdzC5hrvNXosL83LLzQAAAMk"]
[Thu Apr 23 07:27:52.211347 2026] [:error] [pid 65000:tid 65056] [client 89.251.0.131:34043] [client 89.251.0.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/bypass.php"] [unique_id "aelZeL6vRb9j6psK2ZaaLgAAAhc"]
[Thu Apr 23 07:27:53.640309 2026] [:error] [pid 64967:tid 64983] [client 89.251.0.144:59405] [client 89.251.0.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/count.php"] [unique_id "aelZeYAV4GfOOdX8QzoUGAAAAY4"]
[Thu Apr 23 07:27:55.381659 2026] [proxy_fcgi:error] [pid 64998:tid 65005] [client 89.251.0.132:49015] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:27:57.977351 2026] [:error] [pid 64998:tid 65021] [client 89.251.0.132:49015] [client 89.251.0.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "aelZfYV5EysYcTLjmwj3wQAAAdM"]
[Thu Apr 23 07:27:59.161996 2026] [:error] [pid 65000:tid 65046] [client 89.251.0.116:64073] [client 89.251.0.116] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/usr/local/apache/modsecurity-cwaf/rules/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder||www.dwelectservices.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "www.dwelectservices.com.au"] [uri "/images/stories/themes.php"] [unique_id "aelZf76vRb9j6psK2ZaaoAAAAg0"]
[Thu Apr 23 07:27:59.465164 2026] [:error] [pid 65000:tid 65037] [client 89.251.0.116:64073] [client 89.251.0.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/theme-compat/footer-embed-function.php"] [unique_id "aelZf76vRb9j6psK2ZaapgAAAgQ"]
[Thu Apr 23 07:28:00.758341 2026] [:error] [pid 64967:tid 64971] [client 89.251.0.146:21393] [client 89.251.0.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/l10n/class-wp-translation-file-mo-event.php"] [unique_id "aelZgIAV4GfOOdX8QzoUMQAAAYI"]
[Thu Apr 23 07:28:01.628526 2026] [:error] [pid 25635:tid 25639] [client 89.251.0.135:51841] [client 89.251.0.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/vars-soap.php"] [unique_id "aelZgcRxv6UsgRGKB3LirQAAAQA"]
[Thu Apr 23 07:28:02.902302 2026] [proxy_fcgi:error] [pid 65000:tid 65037] [client 89.251.0.128:34723] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:28:04.624187 2026] [:error] [pid 65000:tid 65053] [client 89.251.0.128:34723] [client 89.251.0.128] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/id3/wp-work.php"] [unique_id "aelZhL6vRb9j6psK2ZabAwAAAhQ"]
[Thu Apr 23 07:28:06.004662 2026] [:error] [pid 64998:tid 65002] [client 89.251.0.151:29165] [client 89.251.0.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/class-wp-taxonomy.editor.php"] [unique_id "aelZhoV5EysYcTLjmwj39AAAAcA"]
[Thu Apr 23 07:28:07.020197 2026] [:error] [pid 64967:tid 64985] [client 89.251.0.138:53599] [client 89.251.0.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/js/wp-conflg.php"] [unique_id "aelZh4AV4GfOOdX8QzoUVAAAAZA"]
[Thu Apr 23 07:28:07.815286 2026] [proxy_fcgi:error] [pid 59700:tid 59722] [client 89.251.0.115:38803] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:28:09.930496 2026] [:error] [pid 59700:tid 59718] [client 89.251.0.115:38803] [client 89.251.0.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/interactivity-api/interactivity-api-xml.php"] [unique_id "aelZiZXyGZJFeAIDWtla7wAAAVA"]
[Thu Apr 23 07:28:10.591284 2026] [:error] [pid 59700:tid 59717] [client 89.251.0.150:62977] [client 89.251.0.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/colour.php"] [unique_id "aelZipXyGZJFeAIDWtla9gAAAU8"]
[Thu Apr 23 07:28:11.417801 2026] [proxy_fcgi:error] [pid 64967:tid 64970] [client 89.251.0.123:22617] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:28:11.823297 2026] [:error] [pid 64967:tid 64973] [client 89.251.0.123:22617] [client 89.251.0.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/customize/class-wp-customize-background-position-control-variable.php"] [unique_id "aelZi4AV4GfOOdX8QzoUggAAAYQ"]
[Thu Apr 23 07:28:12.519864 2026] [:error] [pid 65000:tid 65047] [client 89.251.0.114:36189] [client 89.251.0.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/images/include.php"] [unique_id "aelZjL6vRb9j6psK2ZabUAAAAg4"]
[Thu Apr 23 07:28:13.764961 2026] [:error] [pid 42973:tid 43045] [client 89.251.0.126:64713] [client 89.251.0.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/js/imgareaselect/wp-login.php"] [unique_id "aelZjW6I0QqmmmLTHE3b3gAAAII"]
[Thu Apr 23 07:28:16.014288 2026] [:error] [pid 65000:tid 65048] [client 89.251.0.116:39599] [client 89.251.0.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/l10n/class-wp-translations-interface.php"] [unique_id "aelZkL6vRb9j6psK2ZabnAAAAg8"]
[Thu Apr 23 07:28:16.673114 2026] [:error] [pid 42971:tid 43001] [client 89.251.0.119:35237] [client 89.251.0.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/assets/about5.php"] [unique_id "aelZkDEP2_5RswrH8bGr1wAAAA8"]
[Thu Apr 23 07:28:18.541548 2026] [:error] [pid 42972:tid 43020] [client 89.251.0.126:62619] [client 89.251.0.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/ID3/db.php"] [unique_id "aelZksOAb-3sOknsk4ciHwAAAEQ"]
[Thu Apr 23 07:28:19.768115 2026] [:error] [pid 42971:tid 42989] [client 89.251.0.143:30727] [client 89.251.0.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/js/dist/bypass.php"] [unique_id "aelZkzEP2_5RswrH8bGr_AAAAAM"]
[Thu Apr 23 07:28:20.441056 2026] [proxy_fcgi:error] [pid 43083:tid 43085] [client 89.251.0.133:63951] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:28:21.351677 2026] [:error] [pid 43083:tid 43102] [client 89.251.0.133:63951] [client 89.251.0.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/sitemaps/wp-conflg.php"] [unique_id "aelZlTC5hrvNXosL83LNjAAAANE"]
[Thu Apr 23 07:28:22.577938 2026] [:error] [pid 43083:tid 43103] [client 89.251.0.126:46129] [client 89.251.0.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.php"] [unique_id "aelZljC5hrvNXosL83LNrwAAANI"]
[Thu Apr 23 07:28:23.199924 2026] [:error] [pid 25635:tid 25642] [client 89.251.0.131:37601] [client 89.251.0.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/SimplePie/login.php"] [unique_id "aelZl8Rxv6UsgRGKB3LjCAAAAQM"]
[Thu Apr 23 07:28:23.786391 2026] [proxy_fcgi:error] [pid 65000:tid 65032] [client 89.251.0.137:32507] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:28:24.378556 2026] [:error] [pid 65000:tid 65037] [client 89.251.0.137:32507] [client 89.251.0.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/sitemaps/chosen.php"] [unique_id "aelZmL6vRb9j6psK2ZacEQAAAgQ"]
[Thu Apr 23 07:28:25.024294 2026] [proxy_fcgi:error] [pid 65000:tid 65041] [client 89.251.0.138:37175] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:28:25.657194 2026] [:error] [pid 65000:tid 65041] [client 89.251.0.138:37175] [client 89.251.0.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/SimplePie/Cache/index.php"] [unique_id "aelZmb6vRb9j6psK2ZacKwAAAgg"]
[Thu Apr 23 07:28:26.320860 2026] [:error] [pid 42971:tid 43003] [client 89.251.0.147:42711] [client 89.251.0.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/css/dist/about.php"] [unique_id "aelZmjEP2_5RswrH8bGsHQAAABE"]
[Thu Apr 23 07:28:27.406136 2026] [:error] [pid 42973:tid 43045] [client 89.251.0.135:30933] [client 89.251.0.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aelZm26I0QqmmmLTHE3cJgAAAII"]
[Thu Apr 23 07:28:27.987471 2026] [:error] [pid 43083:tid 43101] [client 89.251.0.123:21857] [client 89.251.0.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/js/simi.php"] [unique_id "aelZmzC5hrvNXosL83LOCAAAANA"]
[Thu Apr 23 07:28:29.286364 2026] [:error] [pid 65000:tid 65052] [client 89.251.0.136:50723] [client 89.251.0.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/Requests/Text/index.php"] [unique_id "aelZnb6vRb9j6psK2ZacSgAAAhM"]
[Thu Apr 23 07:28:30.507119 2026] [:error] [pid 65000:tid 65030] [client 89.251.0.113:30083] [client 89.251.0.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/sitemaps/abcd.php"] [unique_id "aelZnr6vRb9j6psK2ZacZAAAAgE"]
[Thu Apr 23 07:28:31.592413 2026] [:error] [pid 42971:tid 43005] [client 89.251.0.121:49137] [client 89.251.0.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/ID3/rk2.php"] [unique_id "aelZnzEP2_5RswrH8bGsQgAAABM"]
[Thu Apr 23 07:28:32.311671 2026] [:error] [pid 59700:tid 59706] [client 89.251.0.144:30733] [client 89.251.0.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/widgets/class-wp-widget-search-interpreter.php"] [unique_id "aelZoJXyGZJFeAIDWtlbhgAAAUQ"]
[Thu Apr 23 07:28:33.548023 2026] [:error] [pid 64998:tid 65018] [client 89.251.0.145:36973] [client 89.251.0.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/block-template-utils-other.php"] [unique_id "aelZoYV5EysYcTLjmwj5HwAAAdA"]
[Thu Apr 23 07:28:34.838756 2026] [proxy_fcgi:error] [pid 59700:tid 59723] [client 89.251.0.142:27795] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:28:35.163100 2026] [:error] [pid 59700:tid 59717] [client 89.251.0.142:27795] [client 89.251.0.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/sodium_compat/lib/widget-group.php"] [unique_id "aelZo5XyGZJFeAIDWtlbrwAAAU8"]
[Thu Apr 23 07:28:36.267323 2026] [:error] [pid 64998:tid 65025] [client 89.251.0.148:49589] [client 89.251.0.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/js/jcrop/about.php"] [unique_id "aelZpIV5EysYcTLjmwj5MQAAAdc"]
[Thu Apr 23 07:28:37.229694 2026] [:error] [pid 64967:tid 64974] [client 89.251.0.127:59555] [client 89.251.0.127] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/customize/chosen.php"] [unique_id "aelZpYAV4GfOOdX8QzoViwAAAYU"]
[Thu Apr 23 07:28:38.614712 2026] [proxy_fcgi:error] [pid 65000:tid 65046] [client 89.251.0.126:60669] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:28:39.967938 2026] [:error] [pid 65000:tid 65048] [client 89.251.0.126:60669] [client 89.251.0.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/plugin.php"] [unique_id "aelZp76vRb9j6psK2ZacygAAAg8"]
[Thu Apr 23 07:28:40.598158 2026] [:error] [pid 25635:tid 25658] [client 89.251.0.141:45799] [client 89.251.0.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/class-wp-scripts-query.php"] [unique_id "aelZqMRxv6UsgRGKB3LjZQAAARM"]
[Thu Apr 23 07:28:41.626428 2026] [proxy_fcgi:error] [pid 64998:tid 65006] [client 89.251.0.116:26205] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:28:42.061250 2026] [:error] [pid 64998:tid 65026] [client 89.251.0.116:26205] [client 89.251.0.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/ID3/module.audio-license.php"] [unique_id "aelZqoV5EysYcTLjmwj5dAAAAdg"]
[Thu Apr 23 07:28:44.292949 2026] [:error] [pid 59700:tid 59706] [client 89.251.0.146:64409] [client 89.251.0.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/class-wp-error-module.php"] [unique_id "aelZrJXyGZJFeAIDWtlcHAAAAUQ"]
[Thu Apr 23 07:28:44.957569 2026] [proxy_fcgi:error] [pid 43083:tid 43088] [client 89.251.0.123:44093] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:28:45.298884 2026] [proxy_fcgi:error] [pid 43083:tid 43085] [client 89.251.0.123:44093] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:28:45.623870 2026] [:error] [pid 43083:tid 43106] [client 89.251.0.123:44093] [client 89.251.0.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/css/litespeed.php"] [unique_id "aelZrTC5hrvNXosL83LOwQAAANU"]
[Thu Apr 23 07:28:46.973080 2026] [:error] [pid 64998:tid 65017] [client 89.251.0.132:56191] [client 89.251.0.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/css/dist/alam.php"] [unique_id "aelZroV5EysYcTLjmwj5wwAAAc8"]
[Thu Apr 23 07:28:47.746334 2026] [proxy_fcgi:error] [pid 43083:tid 43093] [client 89.251.0.117:21077] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:28:48.111465 2026] [:error] [pid 43083:tid 43088] [client 89.251.0.117:21077] [client 89.251.0.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/block-bindings/imagess.php"] [unique_id "aelZsDC5hrvNXosL83LOzgAAAMM"]
[Thu Apr 23 07:28:49.069889 2026] [:error] [pid 42972:tid 43025] [client 89.251.0.116:24059] [client 89.251.0.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/default-filters-edit.php"] [unique_id "aelZscOAb-3sOknsk4ci2gAAAEk"]
[Thu Apr 23 07:28:49.776652 2026] [proxy_fcgi:error] [pid 42972:tid 43035] [client 89.251.0.120:21873] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:28:50.869285 2026] [proxy_fcgi:error] [pid 42972:tid 43033] [client 89.251.0.120:21873] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:28:51.193328 2026] [:error] [pid 42972:tid 43021] [client 89.251.0.120:21873] [client 89.251.0.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/Requests/Auth/index.php"] [unique_id "aelZs8OAb-3sOknsk4cjCgAAAEU"]
[Thu Apr 23 07:28:52.957332 2026] [:error] [pid 42973:tid 43056] [client 89.251.0.145:42665] [client 89.251.0.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/Text/Diff/Engine/theme.php"] [unique_id "aelZtG6I0QqmmmLTHE3cqQAAAI0"]
[Thu Apr 23 07:28:54.195585 2026] [proxy_fcgi:error] [pid 43083:tid 43090] [client 89.251.0.150:38415] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:28:54.494725 2026] [:error] [pid 43083:tid 43105] [client 89.251.0.150:38415] [client 89.251.0.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/ID3/shell.php"] [unique_id "aelZtjC5hrvNXosL83LPIgAAANQ"]
[Thu Apr 23 07:28:55.102971 2026] [:error] [pid 42971:tid 42994] [client 89.251.0.137:40901] [client 89.251.0.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/customize/class-wp-customize-selective-refresh-library.php"] [unique_id "aelZtzEP2_5RswrH8bGs9gAAAAg"]
[Thu Apr 23 07:28:55.867307 2026] [proxy_fcgi:error] [pid 59700:tid 59702] [client 89.251.0.116:61415] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:28:56.545080 2026] [:error] [pid 59700:tid 59724] [client 89.251.0.116:61415] [client 89.251.0.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/Requests/library/wp-login.php"] [unique_id "aelZuJXyGZJFeAIDWtlcdwAAAVY"]
[Thu Apr 23 07:28:57.197355 2026] [:error] [pid 42973:tid 43063] [client 89.251.0.145:37029] [client 89.251.0.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/interactivity-api/about.php"] [unique_id "aelZuW6I0QqmmmLTHE3cwQAAAJQ"]
[Thu Apr 23 07:28:57.912179 2026] [proxy_fcgi:error] [pid 25635:tid 25658] [client 89.251.0.143:33727] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:29:00.016225 2026] [:error] [pid 25635:tid 25639] [client 89.251.0.143:33727] [client 89.251.0.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/wp-2019.php"] [unique_id "aelZvMRxv6UsgRGKB3LjxgAAAQA"]
[Thu Apr 23 07:29:00.746453 2026] [:error] [pid 43083:tid 43108] [client 89.251.0.116:32235] [client 89.251.0.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/SimplePie/info.php"] [unique_id "aelZvDC5hrvNXosL83LPWAAAANc"]
[Thu Apr 23 07:29:01.937993 2026] [:error] [pid 59700:tid 59718] [client 89.251.0.134:46205] [client 89.251.0.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/log.php"] [unique_id "aelZvZXyGZJFeAIDWtlcrgAAAVA"]
[Thu Apr 23 07:29:02.660162 2026] [:error] [pid 43083:tid 43109] [client 89.251.0.145:27703] [client 89.251.0.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime-num.php"] [unique_id "aelZvjC5hrvNXosL83LPawAAANg"]
[Thu Apr 23 07:29:03.251840 2026] [:error] [pid 43083:tid 43097] [client 89.251.0.124:29459] [client 89.251.0.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-entry.min-object.php"] [unique_id "aelZvzC5hrvNXosL83LPdgAAAMw"]
[Thu Apr 23 07:29:04.001971 2026] [:error] [pid 43083:tid 43100] [client 89.251.0.142:40553] [client 89.251.0.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/aw.php"] [unique_id "aelZwDC5hrvNXosL83LPhAAAAM8"]
[Thu Apr 23 07:29:06.200276 2026] [:error] [pid 43083:tid 43087] [client 89.251.0.114:29087] [client 89.251.0.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/IXR/db.php"] [unique_id "aelZwjC5hrvNXosL83LPpgAAAMI"]
[Thu Apr 23 07:29:06.812562 2026] [:error] [pid 42971:tid 43002] [client 89.251.0.128:53971] [client 89.251.0.128] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/css/install.php"] [unique_id "aelZwjEP2_5RswrH8bGtbQAAABA"]
[Thu Apr 23 07:29:07.852300 2026] [proxy_fcgi:error] [pid 43083:tid 43094] [client 89.251.0.128:37337] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:29:08.176118 2026] [:error] [pid 43083:tid 43097] [client 89.251.0.128:37337] [client 89.251.0.128] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/css/dist/install.php"] [unique_id "aelZxDC5hrvNXosL83LPuAAAAMw"]
[Thu Apr 23 07:29:08.765158 2026] [:error] [pid 42972:tid 43027] [client 89.251.0.135:40445] [client 89.251.0.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/style-engine/dedi1.php"] [unique_id "aelZxMOAb-3sOknsk4cjZgAAAEs"]
[Thu Apr 23 07:29:11.076451 2026] [:error] [pid 59700:tid 59719] [client 89.251.0.136:25539] [client 89.251.0.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/template-less.php"] [unique_id "aelZx5XyGZJFeAIDWtlc5wAAAVE"]
[Thu Apr 23 07:29:11.754555 2026] [:error] [pid 42972:tid 43019] [client 89.251.0.116:21871] [client 89.251.0.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/pomo/alfa-rex.php"] [unique_id "aelZx8OAb-3sOknsk4cjlwAAAEM"]
[Thu Apr 23 07:29:14.746606 2026] [:error] [pid 59700:tid 59718] [client 89.251.0.148:34059] [client 89.251.0.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/assets/min.php"] [unique_id "aelZypXyGZJFeAIDWtldCQAAAVA"]
[Thu Apr 23 07:29:15.371371 2026] [:error] [pid 43083:tid 43096] [client 89.251.0.127:40989] [client 89.251.0.127] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/wp-conflg.php"] [unique_id "aelZyzC5hrvNXosL83LP9gAAAMs"]
[Thu Apr 23 07:29:17.677764 2026] [:error] [pid 59700:tid 59705] [client 89.251.0.128:59691] [client 89.251.0.128] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/file.php"] [unique_id "aelZzZXyGZJFeAIDWtldMAAAAUM"]
[Thu Apr 23 07:29:18.694667 2026] [:error] [pid 42973:tid 43049] [client 89.251.0.136:30841] [client 89.251.0.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/block-patterns/about.php"] [unique_id "aelZzm6I0QqmmmLTHE3dQwAAAIY"]
[Thu Apr 23 07:29:19.664394 2026] [:error] [pid 42972:tid 43040] [client 89.251.0.117:20825] [client 89.251.0.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/load.php"] [unique_id "aelZz8OAb-3sOknsk4cj-AAAAFg"]
[Thu Apr 23 07:29:20.246163 2026] [:error] [pid 64998:tid 65007] [client 89.251.0.129:20639] [client 89.251.0.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/ID3/chosen.php"] [unique_id "aelZ0IV5EysYcTLjmwj6_AAAAcU"]
[Thu Apr 23 07:29:21.547165 2026] [:error] [pid 65000:tid 65042] [client 89.251.0.124:28683] [client 89.251.0.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/class-wp-theme-float.php"] [unique_id "aelZ0b6vRb9j6psK2ZaeYwAAAgk"]
[Thu Apr 23 07:29:23.242635 2026] [:error] [pid 42971:tid 43000] [client 89.251.0.146:38319] [client 89.251.0.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/widgets/wp-style.php"] [unique_id "aelZ0zEP2_5RswrH8bGuagAAAA4"]
[Thu Apr 23 07:29:23.919352 2026] [proxy_fcgi:error] [pid 65000:tid 65057] [client 89.251.0.129:35175] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:29:24.260058 2026] [:error] [pid 65000:tid 65055] [client 89.251.0.129:35175] [client 89.251.0.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/widgets/autoload_classmap.php"] [unique_id "aelZ1L6vRb9j6psK2ZaejQAAAhY"]
[Thu Apr 23 07:29:25.255307 2026] [proxy_fcgi:error] [pid 42973:tid 43043] [client 89.251.0.135:32437] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:29:25.608394 2026] [:error] [pid 42973:tid 43048] [client 89.251.0.135:32437] [client 89.251.0.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/block-bindings/admin.php"] [unique_id "aelZ1W6I0QqmmmLTHE3dcAAAAIU"]
[Thu Apr 23 07:29:26.242062 2026] [:error] [pid 64998:tid 65005] [client 89.251.0.126:39685] [client 89.251.0.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/PHPMailer/autoload_classmap.php"] [unique_id "aelZ1oV5EysYcTLjmwj7NwAAAcM"]
[Thu Apr 23 07:29:26.824690 2026] [:error] [pid 42972:tid 43024] [client 89.251.0.135:54573] [client 89.251.0.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/theme-compat/db.php"] [unique_id "aelZ1sOAb-3sOknsk4ckMgAAAEg"]
[Thu Apr 23 07:29:27.808063 2026] [proxy_fcgi:error] [pid 64998:tid 65008] [client 89.251.0.150:62701] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:29:28.881608 2026] [proxy_fcgi:error] [pid 64998:tid 65009] [client 89.251.0.150:62701] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:29:30.189335 2026] [:error] [pid 64998:tid 65021] [client 89.251.0.150:62701] [client 89.251.0.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/assets/system.php"] [unique_id "aelZ2oV5EysYcTLjmwj7hAAAAdM"]
[Thu Apr 23 07:29:31.189394 2026] [:error] [pid 42973:tid 43044] [client 89.251.0.139:27923] [client 89.251.0.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/block-bindings/about.php"] [unique_id "aelZ226I0QqmmmLTHE3dgQAAAIE"]
[Thu Apr 23 07:29:34.271333 2026] [:error] [pid 42972:tid 43019] [client 89.251.0.146:41009] [client 89.251.0.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/customize/class-wp-customize-upload-control-cookie.php"] [unique_id "aelZ3sOAb-3sOknsk4ckcgAAAEM"]
[Thu Apr 23 07:29:34.861133 2026] [:error] [pid 65000:tid 65045] [client 89.251.0.125:58131] [client 89.251.0.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/ID3/simi.php"] [unique_id "aelZ3r6vRb9j6psK2Zae1gAAAgw"]
[Thu Apr 23 07:29:35.551436 2026] [:error] [pid 59700:tid 59712] [client 89.251.0.127:62383] [client 89.251.0.127] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/class-wp-taxonomy-sample.php"] [unique_id "aelZ35XyGZJFeAIDWtlduAAAAUo"]
[Thu Apr 23 07:29:36.893730 2026] [:error] [pid 64967:tid 64970] [client 89.251.0.145:57945] [client 89.251.0.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/Requests/src/Response/about.php"] [unique_id "aelZ4IAV4GfOOdX8QzoWvgAAAYE"]
[Thu Apr 23 07:29:40.077079 2026] [:error] [pid 43083:tid 43085] [client 89.251.0.146:44951] [client 89.251.0.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/ms-pie.php"] [unique_id "aelZ5DC5hrvNXosL83LRggAAAMA"]
[Thu Apr 23 07:29:42.056966 2026] [:error] [pid 25635:tid 25642] [client 89.251.0.150:39169] [client 89.251.0.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/html-api/index.php"] [unique_id "aelZ5sRxv6UsgRGKB3LksAAAAQM"]
[Thu Apr 23 07:29:43.849473 2026] [:error] [pid 64998:tid 65008] [client 89.251.0.134:63729] [client 89.251.0.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/nav-menu.php"] [unique_id "aelZ54V5EysYcTLjmwj8EgAAAcY"]
[Thu Apr 23 07:29:44.437655 2026] [:error] [pid 65000:tid 65050] [client 89.251.0.124:52729] [client 89.251.0.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/css/dist/user.php"] [unique_id "aelZ6L6vRb9j6psK2ZafNAAAAhE"]
[Thu Apr 23 07:29:48.918506 2026] [:error] [pid 59700:tid 59718] [client 89.251.0.135:21657] [client 89.251.0.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/js/dist/script-modules/block-library/search/about.php"] [unique_id "aelZ7JXyGZJFeAIDWtleswAAAVA"]
[Thu Apr 23 07:29:49.560776 2026] [:error] [pid 64998:tid 65018] [client 89.251.0.113:23977] [client 89.251.0.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/customize/class-wp-customize-cropped-image-control.php"] [unique_id "aelZ7YV5EysYcTLjmwj8bgAAAdA"]
[Thu Apr 23 07:29:51.241055 2026] [:error] [pid 64998:tid 65020] [client 89.251.0.148:34493] [client 89.251.0.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/sitemaps/providers/ultra.php"] [unique_id "aelZ74V5EysYcTLjmwj8iwAAAdI"]
[Thu Apr 23 07:29:52.214444 2026] [:error] [pid 42971:tid 43006] [client 89.251.0.151:25421] [client 89.251.0.151] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.251.0.151, incrementing brute counter"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/plugins/classic-editor/wp-login.php"] [unique_id "aelZ8DEP2_5RswrH8bGvTQAAABQ"]
[Thu Apr 23 07:29:52.846172 2026] [:error] [pid 42971:tid 42991] [client 89.251.0.151:25421] [client 89.251.0.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/css/dist/preferences/wp-login.php"] [unique_id "aelZ8DEP2_5RswrH8bGvUwAAAAU"]
[Thu Apr 23 07:29:53.599409 2026] [:error] [pid 43083:tid 43100] [client 89.251.0.115:25115] [client 89.251.0.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/blocks/media-text/index.php"] [unique_id "aelZ8TC5hrvNXosL83LSQgAAAM8"]
[Thu Apr 23 07:29:54.301376 2026] [:error] [pid 42972:tid 43027] [client 89.251.0.127:57189] [client 89.251.0.127] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/phpmailer/phpmailer.php"] [unique_id "aelZ8sOAb-3sOknsk4ck3wAAAEs"]
[Thu Apr 23 07:29:57.107842 2026] [:error] [pid 42971:tid 43000] [client 89.251.0.135:32857] [client 89.251.0.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/blocks/latest-comments/template-loader.php"] [unique_id "aelZ9TEP2_5RswrH8bGvlwAAAA4"]
[Thu Apr 23 07:30:00.183380 2026] [:error] [pid 42972:tid 43030] [client 89.251.0.115:64041] [client 89.251.0.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/blocks/nextpage/index.php"] [unique_id "aelZ-MOAb-3sOknsk4clLQAAAE4"]
[Thu Apr 23 07:30:01.736791 2026] [:error] [pid 64967:tid 64992] [client 89.251.0.131:38935] [client 89.251.0.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/link-template-firewall.php"] [unique_id "aelZ-YAV4GfOOdX8QzoXGQAAAZc"]
[Thu Apr 23 07:30:06.877316 2026] [proxy_fcgi:error] [pid 43083:tid 43097] [client 89.251.0.147:34313] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:30:07.666274 2026] [:error] [pid 43083:tid 43100] [client 89.251.0.147:34313] [client 89.251.0.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/customize/wp-conflg.php"] [unique_id "aelZ_zC5hrvNXosL83LSrwAAAM8"]
[Thu Apr 23 07:30:08.388473 2026] [:error] [pid 43083:tid 43095] [client 89.251.0.116:54281] [client 89.251.0.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/SimplePie/src/Decode/HTML/sitemaps.php"] [unique_id "aelaADC5hrvNXosL83LSvQAAAMo"]
[Thu Apr 23 07:30:09.148967 2026] [:error] [pid 64998:tid 65009] [client 89.251.0.134:58157] [client 89.251.0.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/mer_gagal.php"] [unique_id "aelaAYV5EysYcTLjmwj9BQAAAcc"]
[Thu Apr 23 07:30:09.761555 2026] [:error] [pid 64998:tid 65020] [client 89.251.0.115:43939] [client 89.251.0.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/html-api/wp-login.php"] [unique_id "aelaAYV5EysYcTLjmwj9CQAAAdI"]
[Thu Apr 23 07:30:11.848019 2026] [:error] [pid 64967:tid 64987] [client 89.251.0.139:49801] [client 89.251.0.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/rest-api/alfa-rex.php"] [unique_id "aelaA4AV4GfOOdX8QzoXRwAAAZI"]
[Thu Apr 23 07:30:12.769926 2026] [:error] [pid 43083:tid 43105] [client 89.251.0.124:53619] [client 89.251.0.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/ID3/Core32.php"] [unique_id "aelaBDC5hrvNXosL83LS-AAAANQ"]
[Thu Apr 23 07:30:15.265369 2026] [:error] [pid 59700:tid 59719] [client 89.251.0.143:60715] [client 89.251.0.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/theme-compat/wp-conflg.php"] [unique_id "aelaB5XyGZJFeAIDWtlfXgAAAVE"]
[Thu Apr 23 07:30:17.421308 2026] [:error] [pid 42972:tid 43031] [client 89.251.0.141:28329] [client 89.251.0.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/js/tinymce/skins/wordpress/images/index.php"] [unique_id "aelaCcOAb-3sOknsk4clwAAAAE8"]
[Thu Apr 23 07:30:18.072249 2026] [:error] [pid 65000:tid 65032] [client 89.251.0.147:23025] [client 89.251.0.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/Requests/library/index.php"] [unique_id "aelaCr6vRb9j6psK2ZagfAAAAgM"]
[Thu Apr 23 07:30:40.196419 2026] [autoindex:error] [pid 65000:tid 65044] [client 89.251.0.142:40957] AH01276: Cannot serve directory /home/dwelects/public_html/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 07:30:52.658413 2026] [autoindex:error] [pid 65000:tid 65037] [client 89.251.0.142:40957] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 07:31:32.984562 2026] [:error] [pid 65000:tid 65044] [client 89.251.0.128:46881] [client 89.251.0.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/files/shares/"] [unique_id "aelaVL6vRb9j6psK2ZalewAAAgs"]
[Thu Apr 23 08:50:38.185312 2026] [:error] [pid 43083:tid 43091] [client 69.5.21.178:37292] [client 69.5.21.178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env"] [unique_id "aels3jC5hrvNXosL83L4XwAAAMY"]
[Thu Apr 23 08:52:02.352955 2026] [:error] [pid 25635:tid 25646] [client 69.5.21.178:46310] [client 69.5.21.178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.git/config"] [unique_id "aeltMsRxv6UsgRGKB3LuhQAAAQc"]
[Thu Apr 23 08:52:07.768004 2026] [:error] [pid 42971:tid 42987] [client 69.5.21.178:46318] [client 69.5.21.178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.git/HEAD"] [unique_id "aeltNzEP2_5RswrH8bHGTQAAAAE"]
[Thu Apr 23 08:54:57.152354 2026] [:error] [pid 25635:tid 25645] [client 69.5.21.178:33136] [client 69.5.21.178] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||dwelectservices.com.au|F|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "dwelectservices.com.au"] [uri "/logs/error.log"] [unique_id "aelt4cRxv6UsgRGKB3LuuwAAAQY"]
[Thu Apr 23 08:57:33.444814 2026] [:error] [pid 43083:tid 43096] [client 69.5.21.178:37602] [client 69.5.21.178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.py"] [unique_id "aelufTC5hrvNXosL83L56AAAAMs"]
[Thu Apr 23 09:51:07.263546 2026] [proxy_fcgi:error] [pid 64998:tid 65013] [client 91.230.225.206:30105] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:51:07.549525 2026] [proxy_fcgi:error] [pid 64998:tid 65007] [client 91.230.225.206:30105] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:51:07.938875 2026] [proxy_fcgi:error] [pid 64998:tid 65003] [client 91.230.225.206:30105] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:51:08.214400 2026] [proxy_fcgi:error] [pid 64998:tid 65025] [client 91.230.225.206:30105] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:51:08.490137 2026] [proxy_fcgi:error] [pid 64998:tid 65018] [client 91.230.225.206:30105] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:51:08.778349 2026] [proxy_fcgi:error] [pid 64998:tid 65013] [client 91.230.225.206:30105] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:51:09.071313 2026] [proxy_fcgi:error] [pid 64998:tid 65011] [client 91.230.225.206:30105] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:51:11.062298 2026] [proxy_fcgi:error] [pid 64998:tid 65003] [client 91.230.225.206:30105] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:51:12.009296 2026] [proxy_fcgi:error] [pid 64998:tid 65012] [client 91.230.225.206:30105] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:51:12.300997 2026] [proxy_fcgi:error] [pid 64998:tid 65017] [client 91.230.225.206:30105] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:51:12.587309 2026] [proxy_fcgi:error] [pid 64998:tid 65013] [client 91.230.225.206:30105] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:51:12.887085 2026] [proxy_fcgi:error] [pid 64998:tid 65009] [client 91.230.225.206:30105] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:51:13.164309 2026] [proxy_fcgi:error] [pid 64998:tid 65018] [client 91.230.225.206:30105] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:51:13.438130 2026] [proxy_fcgi:error] [pid 64998:tid 65012] [client 91.230.225.206:30105] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:51:13.711371 2026] [proxy_fcgi:error] [pid 64998:tid 65007] [client 91.230.225.206:30105] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:51:14.002316 2026] [proxy_fcgi:error] [pid 64998:tid 65023] [client 91.230.225.206:30105] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:51:14.308295 2026] [proxy_fcgi:error] [pid 64998:tid 65010] [client 91.230.225.206:30105] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:51:14.605277 2026] [proxy_fcgi:error] [pid 64998:tid 65004] [client 91.230.225.206:30105] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:51:18.999780 2026] [:error] [pid 64998:tid 65023] [client 91.230.225.206:30105] [client 91.230.225.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "ael7FoV5EysYcTLjmwhqlQAAAdU"]
[Thu Apr 23 09:51:20.389057 2026] [:error] [pid 65000:tid 65047] [client 91.230.225.14:34873] [client 91.230.225.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "ael7GL6vRb9j6psK2Zby2wAAAg4"]
[Thu Apr 23 09:51:21.782357 2026] [proxy_fcgi:error] [pid 64998:tid 65011] [client 91.230.225.208:28807] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:51:22.628058 2026] [:error] [pid 64998:tid 65021] [client 91.230.225.208:28807] [client 91.230.225.208] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dwelectservices.com.au"] [uri "/tinyfilemanager.php"] [unique_id "ael7GoV5EysYcTLjmwhqqgAAAdM"]
[Thu Apr 23 09:51:23.734518 2026] [proxy_fcgi:error] [pid 64998:tid 65024] [client 185.192.71.34:61957] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:51:24.007800 2026] [:error] [pid 64998:tid 65005] [client 185.192.71.34:61957] [client 185.192.71.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "ael7HIV5EysYcTLjmwhquQAAAcM"]
[Thu Apr 23 09:51:24.891923 2026] [proxy_fcgi:error] [pid 42971:tid 42997] [client 91.230.225.203:22687] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:51:26.330355 2026] [:error] [pid 42971:tid 43005] [client 91.230.225.203:22687] [client 91.230.225.203] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "ael7HjEP2_5RswrH8bHR1QAAABM"]
[Thu Apr 23 09:51:27.171066 2026] [:error] [pid 64967:tid 64974] [client 185.192.71.39:30799] [client 185.192.71.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "ael7H4AV4GfOOdX8QzoodQAAAYU"]
[Thu Apr 23 09:51:27.708760 2026] [:error] [pid 43083:tid 43090] [client 91.230.225.205:55809] [client 91.230.225.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "ael7HzC5hrvNXosL83IL8gAAAMU"]
[Thu Apr 23 09:51:28.246412 2026] [:error] [pid 59700:tid 59719] [client 91.230.225.10:22859] [client 91.230.225.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "ael7IJXyGZJFeAIDWtmJ-AAAAVE"]
[Thu Apr 23 09:51:28.799228 2026] [:error] [pid 64998:tid 65021] [client 185.192.71.39:54819] [client 185.192.71.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "ael7IIV5EysYcTLjmwhq_QAAAdM"]
[Thu Apr 23 09:51:29.370941 2026] [:error] [pid 42972:tid 43018] [client 91.230.225.12:22493] [client 91.230.225.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "ael7IcOAb-3sOknsk4c6oQAAAEI"]
[Thu Apr 23 09:51:30.196495 2026] [:error] [pid 42971:tid 43010] [client 91.230.225.197:46279] [client 91.230.225.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "ael7IjEP2_5RswrH8bHR-QAAABg"]
[Thu Apr 23 09:51:30.771249 2026] [proxy_fcgi:error] [pid 42971:tid 42996] [client 91.230.225.195:26493] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:51:31.331672 2026] [:error] [pid 42971:tid 42989] [client 91.230.225.195:26493] [client 91.230.225.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dwelectservices.com.au"] [uri "/filemanager.php"] [unique_id "ael7IzEP2_5RswrH8bHSBQAAAAM"]
[Thu Apr 23 09:51:33.582776 2026] [:error] [pid 42972:tid 43019] [client 185.192.71.29:40321] [client 185.192.71.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "ael7JcOAb-3sOknsk4c6qQAAAEM"]
[Thu Apr 23 09:51:34.471885 2026] [:error] [pid 65000:tid 65056] [client 91.230.225.12:63673] [client 91.230.225.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "ael7Jr6vRb9j6psK2ZbzXQAAAhc"]
[Thu Apr 23 09:51:35.051222 2026] [proxy_fcgi:error] [pid 64998:tid 65018] [client 91.230.225.209:53415] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:51:35.337889 2026] [:error] [pid 64998:tid 65024] [client 91.230.225.209:53415] [client 91.230.225.209] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "ael7J4V5EysYcTLjmwhrSgAAAdY"]
[Thu Apr 23 09:51:35.929586 2026] [proxy_fcgi:error] [pid 64998:tid 65011] [client 185.192.71.34:20451] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:51:36.753296 2026] [proxy_fcgi:error] [pid 64998:tid 65018] [client 185.192.71.34:20451] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:51:37.665522 2026] [:error] [pid 64998:tid 65014] [client 185.192.71.34:20451] [client 185.192.71.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "ael7KYV5EysYcTLjmwhrkQAAAcw"]
[Thu Apr 23 09:51:38.254720 2026] [proxy_fcgi:error] [pid 64998:tid 65020] [client 185.192.71.21:52765] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:51:38.524455 2026] [:error] [pid 64998:tid 65009] [client 185.192.71.21:52765] [client 185.192.71.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "ael7KoV5EysYcTLjmwhruAAAAcc"]
[Thu Apr 23 09:51:39.078303 2026] [proxy_fcgi:error] [pid 65000:tid 65047] [client 185.192.71.26:35763] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:51:39.632990 2026] [:error] [pid 65000:tid 65044] [client 185.192.71.26:35763] [client 185.192.71.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "ael7K76vRb9j6psK2ZbzmgAAAgs"]
[Thu Apr 23 09:51:40.502792 2026] [:error] [pid 64998:tid 65018] [client 185.192.71.23:52819] [client 185.192.71.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "ael7LIV5EysYcTLjmwhsAgAAAdA"]
[Thu Apr 23 09:51:41.356858 2026] [proxy_fcgi:error] [pid 64967:tid 64992] [client 185.192.71.27:43581] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:51:41.663302 2026] [proxy_fcgi:error] [pid 64967:tid 64991] [client 185.192.71.27:43581] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:51:42.227482 2026] [:error] [pid 64967:tid 64977] [client 185.192.71.27:43581] [client 185.192.71.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "ael7LoAV4GfOOdX8QzoorQAAAYg"]
[Thu Apr 23 09:51:43.065790 2026] [:error] [pid 42972:tid 43034] [client 91.230.225.207:58333] [client 91.230.225.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "ael7L8OAb-3sOknsk4c66gAAAFI"]
[Thu Apr 23 09:51:43.909061 2026] [:error] [pid 65000:tid 65044] [client 185.192.71.27:41653] [client 185.192.71.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "ael7L76vRb9j6psK2ZbzxAAAAgs"]
[Thu Apr 23 09:51:44.451426 2026] [:error] [pid 25635:tid 25658] [client 185.192.71.26:36759] [client 185.192.71.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "ael7MMRxv6UsgRGKB3LzmgAAARM"]
[Thu Apr 23 09:51:45.017719 2026] [:error] [pid 43083:tid 43101] [client 185.192.71.36:34435] [client 185.192.71.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "ael7MTC5hrvNXosL83IM5AAAANA"]
[Thu Apr 23 09:51:46.154366 2026] [proxy_fcgi:error] [pid 43083:tid 43085] [client 91.230.225.206:21269] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:51:46.425040 2026] [:error] [pid 43083:tid 43102] [client 91.230.225.206:21269] [client 91.230.225.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "ael7MjC5hrvNXosL83INBwAAANE"]
[Thu Apr 23 09:51:46.971570 2026] [:error] [pid 59700:tid 59721] [client 91.230.225.207:62413] [client 91.230.225.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "ael7MpXyGZJFeAIDWtmKvAAAAVM"]
[Thu Apr 23 09:51:47.785051 2026] [:error] [pid 64998:tid 65022] [client 185.192.71.33:54611] [client 185.192.71.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "ael7M4V5EysYcTLjmwhsjgAAAdQ"]
[Thu Apr 23 09:51:49.164333 2026] [proxy_fcgi:error] [pid 64998:tid 65019] [client 185.192.71.27:30663] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:51:49.739513 2026] [proxy_fcgi:error] [pid 64998:tid 65021] [client 185.192.71.27:30663] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:51:50.886054 2026] [:error] [pid 64998:tid 65013] [client 185.192.71.27:30663] [client 185.192.71.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/admin.php"] [unique_id "ael7NoV5EysYcTLjmwhswQAAAcs"]
[Thu Apr 23 09:51:52.327996 2026] [:error] [pid 64967:tid 64974] [client 91.230.225.11:49227] [client 91.230.225.11] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.230.225.11, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "ael7OIAV4GfOOdX8Qzoo3QAAAYU"]
[Thu Apr 23 09:51:52.655042 2026] [proxy_fcgi:error] [pid 64967:tid 64992] [client 91.230.225.11:49227] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:51:55.417334 2026] [proxy_fcgi:error] [pid 64967:tid 64974] [client 91.230.225.11:49227] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:51:55.754314 2026] [proxy_fcgi:error] [pid 64967:tid 64978] [client 91.230.225.11:49227] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:51:57.167280 2026] [:error] [pid 64967:tid 64972] [client 91.230.225.11:49227] [client 91.230.225.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "ael7PYAV4GfOOdX8QzopAQAAAYM"]
[Thu Apr 23 09:51:57.741286 2026] [proxy_fcgi:error] [pid 42973:tid 43065] [client 91.230.225.208:43685] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:51:58.021315 2026] [proxy_fcgi:error] [pid 42973:tid 43047] [client 91.230.225.208:43685] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:51:58.293053 2026] [:error] [pid 42973:tid 43063] [client 91.230.225.208:43685] [client 91.230.225.208] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.230.225.208, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "ael7Pm6I0QqmmmLTHE3qngAAAJQ"]
[Thu Apr 23 09:51:58.844886 2026] [:error] [pid 42973:tid 43054] [client 91.230.225.208:43685] [client 91.230.225.208] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/item.php"] [unique_id "ael7Pm6I0QqmmmLTHE3qpAAAAIs"]
[Thu Apr 23 09:52:00.319357 2026] [proxy_fcgi:error] [pid 59700:tid 59714] [client 91.230.225.22:41491] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:52:00.637299 2026] [proxy_fcgi:error] [pid 59700:tid 59708] [client 91.230.225.22:41491] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:52:01.245299 2026] [proxy_fcgi:error] [pid 59700:tid 59717] [client 91.230.225.22:41491] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:52:01.815138 2026] [:error] [pid 59700:tid 59725] [client 91.230.225.22:41491] [client 91.230.225.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "ael7QZXyGZJFeAIDWtmLgAAAAVc"]
[Thu Apr 23 09:52:02.461316 2026] [proxy_fcgi:error] [pid 59700:tid 59707] [client 91.230.225.206:55149] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:52:03.401337 2026] [proxy_fcgi:error] [pid 59700:tid 59723] [client 91.230.225.206:55149] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:52:04.070316 2026] [proxy_fcgi:error] [pid 59700:tid 59726] [client 91.230.225.206:55149] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:52:04.648334 2026] [proxy_fcgi:error] [pid 59700:tid 59707] [client 91.230.225.206:55149] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:52:04.980079 2026] [:error] [pid 59700:tid 59714] [client 91.230.225.206:55149] [client 91.230.225.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "ael7RJXyGZJFeAIDWtmLrwAAAUw"]
[Thu Apr 23 09:52:05.561368 2026] [proxy_fcgi:error] [pid 64998:tid 65022] [client 91.230.225.15:57711] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:52:05.993911 2026] [proxy_fcgi:error] [pid 64998:tid 65023] [client 91.230.225.15:57711] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:52:06.290946 2026] [:error] [pid 64998:tid 65014] [client 91.230.225.15:57711] [client 91.230.225.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "ael7RoV5EysYcTLjmwhtVQAAAcw"]
[Thu Apr 23 09:52:07.173637 2026] [proxy_fcgi:error] [pid 64998:tid 65003] [client 185.192.71.24:60635] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:52:07.758160 2026] [:error] [pid 64998:tid 65026] [client 185.192.71.24:60635] [client 185.192.71.24] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.192.71.24, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "ael7R4V5EysYcTLjmwhtZAAAAdg"]
[Thu Apr 23 09:52:08.060790 2026] [:error] [pid 64998:tid 65021] [client 185.192.71.24:60635] [client 185.192.71.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "ael7SIV5EysYcTLjmwhtaQAAAdM"]
[Thu Apr 23 09:52:16.986311 2026] [proxy_fcgi:error] [pid 64998:tid 65009] [client 185.192.71.27:37843] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:52:18.754438 2026] [proxy_fcgi:error] [pid 64998:tid 65002] [client 185.192.71.27:37843] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:52:19.047925 2026] [:error] [pid 64998:tid 65023] [client 185.192.71.27:37843] [client 185.192.71.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "ael7U4V5EysYcTLjmwhuBQAAAdU"]
[Thu Apr 23 09:52:19.638385 2026] [proxy_fcgi:error] [pid 42972:tid 43026] [client 185.192.71.28:21481] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:52:20.523292 2026] [:error] [pid 42972:tid 43025] [client 185.192.71.28:21481] [client 185.192.71.28] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.192.71.28, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "ael7VMOAb-3sOknsk4c8ggAAAEk"]
[Thu Apr 23 09:52:20.816291 2026] [proxy_fcgi:error] [pid 42972:tid 43022] [client 185.192.71.28:21481] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:52:21.111305 2026] [proxy_fcgi:error] [pid 42972:tid 43028] [client 185.192.71.28:21481] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:52:21.394300 2026] [proxy_fcgi:error] [pid 42972:tid 43031] [client 185.192.71.28:21481] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:52:21.765330 2026] [:error] [pid 42972:tid 43023] [client 185.192.71.28:21481] [client 185.192.71.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "ael7VcOAb-3sOknsk4c8kgAAAEc"]
[Thu Apr 23 09:52:22.367439 2026] [proxy_fcgi:error] [pid 42971:tid 42997] [client 185.192.71.38:62033] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:52:22.644717 2026] [:error] [pid 42971:tid 42998] [client 185.192.71.38:62033] [client 185.192.71.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/infi.php"] [unique_id "ael7VjEP2_5RswrH8bHTbQAAAAw"]
[Thu Apr 23 09:52:23.494289 2026] [proxy_fcgi:error] [pid 64967:tid 64993] [client 185.192.71.31:62943] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:52:23.946900 2026] [:error] [pid 64967:tid 64972] [client 185.192.71.31:62943] [client 185.192.71.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "ael7V4AV4GfOOdX8Qzop1gAAAYM"]
[Thu Apr 23 09:52:24.496301 2026] [proxy_fcgi:error] [pid 42971:tid 43004] [client 185.192.71.23:64927] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:52:25.057385 2026] [proxy_fcgi:error] [pid 42971:tid 42990] [client 185.192.71.23:64927] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:52:25.352411 2026] [:error] [pid 42971:tid 42998] [client 185.192.71.23:64927] [client 185.192.71.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "ael7WTEP2_5RswrH8bHTfAAAAAw"]
[Thu Apr 23 09:52:25.911364 2026] [:error] [pid 42973:tid 43050] [client 91.230.225.22:41725] [client 91.230.225.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "ael7WW6I0QqmmmLTHE3rZgAAAIc"]
[Thu Apr 23 09:52:26.504293 2026] [proxy_fcgi:error] [pid 64998:tid 65023] [client 185.192.71.34:35893] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:52:27.091317 2026] [proxy_fcgi:error] [pid 64998:tid 65025] [client 185.192.71.34:35893] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:52:28.279459 2026] [:error] [pid 64998:tid 65022] [client 185.192.71.34:35893] [client 185.192.71.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "ael7XIV5EysYcTLjmwhupwAAAdQ"]
[Thu Apr 23 09:52:29.179043 2026] [:error] [pid 42973:tid 43058] [client 91.230.225.12:61399] [client 91.230.225.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "ael7XW6I0QqmmmLTHE3rdgAAAI8"]
[Thu Apr 23 09:52:30.636247 2026] [:error] [pid 42971:tid 42989] [client 185.192.71.26:37389] [client 185.192.71.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/edit.php"] [unique_id "ael7XjEP2_5RswrH8bHTlAAAAAM"]
[Thu Apr 23 09:52:31.217292 2026] [proxy_fcgi:error] [pid 42973:tid 43054] [client 185.192.71.31:39169] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:52:31.773301 2026] [proxy_fcgi:error] [pid 42973:tid 43065] [client 185.192.71.31:39169] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:52:32.057144 2026] [:error] [pid 42973:tid 43044] [client 185.192.71.31:39169] [client 185.192.71.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "ael7YG6I0QqmmmLTHE3rjwAAAIE"]
[Thu Apr 23 09:52:32.639138 2026] [proxy_fcgi:error] [pid 42971:tid 43002] [client 185.192.71.24:62533] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:52:33.196126 2026] [:error] [pid 42971:tid 43004] [client 185.192.71.24:62533] [client 185.192.71.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/click.php"] [unique_id "ael7YTEP2_5RswrH8bHTvgAAABI"]
[Thu Apr 23 09:52:34.589373 2026] [:error] [pid 59700:tid 59714] [client 91.230.225.207:65281] [client 91.230.225.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "ael7YpXyGZJFeAIDWtmMxAAAAUw"]
[Thu Apr 23 09:52:35.458820 2026] [proxy_fcgi:error] [pid 65000:tid 65039] [client 91.230.225.198:26947] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:52:39.968305 2026] [proxy_fcgi:error] [pid 65000:tid 65039] [client 91.230.225.198:26947] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:52:40.617650 2026] [proxy_fcgi:error] [pid 65000:tid 65043] [client 91.230.225.198:26947] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:52:40.898107 2026] [:error] [pid 65000:tid 65029] [client 91.230.225.198:26947] [client 91.230.225.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "ael7aL6vRb9j6psK2Zb10gAAAgA"]
[Thu Apr 23 09:52:41.463394 2026] [:error] [pid 65000:tid 65038] [client 185.192.71.34:55657] [client 185.192.71.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/xl2023.php"] [unique_id "ael7ab6vRb9j6psK2Zb11gAAAgU"]
[Thu Apr 23 09:52:42.017249 2026] [:error] [pid 65000:tid 65040] [client 91.230.225.206:63243] [client 91.230.225.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/certificates/admin.php"] [unique_id "ael7ar6vRb9j6psK2Zb13gAAAgc"]
[Thu Apr 23 09:52:42.571387 2026] [:error] [pid 64967:tid 64976] [client 91.230.225.202:43559] [client 91.230.225.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/media/dog.php"] [unique_id "ael7aoAV4GfOOdX8QzoqcAAAAYc"]
[Thu Apr 23 09:52:43.197348 2026] [proxy_fcgi:error] [pid 59700:tid 59723] [client 91.230.225.17:38333] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:52:43.483324 2026] [:error] [pid 59700:tid 59726] [client 91.230.225.17:38333] [client 91.230.225.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "ael7a5XyGZJFeAIDWtmNBgAAAVg"]
[Thu Apr 23 09:52:44.027771 2026] [:error] [pid 59700:tid 59724] [client 91.230.225.21:30751] [client 91.230.225.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "ael7bJXyGZJFeAIDWtmNCwAAAVY"]
[Thu Apr 23 09:52:44.661695 2026] [proxy_fcgi:error] [pid 64998:tid 65016] [client 91.230.225.16:60621] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:52:45.216714 2026] [:error] [pid 64998:tid 65016] [client 91.230.225.16:60621] [client 91.230.225.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "ael7bYV5EysYcTLjmwhvzQAAAc4"]
[Thu Apr 23 09:52:45.805719 2026] [:error] [pid 65000:tid 65037] [client 185.192.71.32:62437] [client 185.192.71.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "ael7bb6vRb9j6psK2Zb2DgAAAgQ"]
[Thu Apr 23 09:52:46.370452 2026] [:error] [pid 42971:tid 43000] [client 185.192.71.40:48623] [client 185.192.71.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/pomo/admin.php"] [unique_id "ael7bjEP2_5RswrH8bHT_wAAAA4"]
[Thu Apr 23 09:52:46.911003 2026] [:error] [pid 42971:tid 42996] [client 91.230.225.204:27875] [client 91.230.225.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/IXR/security.php"] [unique_id "ael7bjEP2_5RswrH8bHUBQAAAAo"]
[Thu Apr 23 09:52:47.802210 2026] [:error] [pid 59700:tid 59716] [client 185.92.25.113:42171] [client 185.92.25.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "ael7b5XyGZJFeAIDWtmNOgAAAU4"]
[Thu Apr 23 09:52:48.970924 2026] [:error] [pid 42971:tid 43005] [client 185.192.71.21:43841] [client 185.192.71.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/fonts/about.php"] [unique_id "ael7cDEP2_5RswrH8bHUFgAAABM"]
[Thu Apr 23 09:52:49.542304 2026] [proxy_fcgi:error] [pid 64998:tid 65021] [client 91.230.225.204:51329] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:52:50.419573 2026] [proxy_fcgi:error] [pid 64998:tid 65017] [client 91.230.225.204:51329] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:52:50.691096 2026] [:error] [pid 64998:tid 65017] [client 91.230.225.204:51329] [client 91.230.225.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "ael7coV5EysYcTLjmwhwMQAAAc8"]
[Thu Apr 23 09:52:51.544286 2026] [proxy_fcgi:error] [pid 65000:tid 65052] [client 91.230.225.204:31329] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:52:51.826322 2026] [proxy_fcgi:error] [pid 65000:tid 65043] [client 91.230.225.204:31329] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:52:53.321336 2026] [:error] [pid 65000:tid 65038] [client 91.230.225.204:31329] [client 91.230.225.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/file.php"] [unique_id "ael7db6vRb9j6psK2Zb2UwAAAgU"]
[Thu Apr 23 09:52:58.313809 2026] [:error] [pid 59700:tid 59717] [client 91.230.225.203:34833] [client 91.230.225.203] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "ael7epXyGZJFeAIDWtmN6gAAAU8"]
[Thu Apr 23 09:52:58.866258 2026] [:error] [pid 25635:tid 25641] [client 91.230.225.199:29887] [client 91.230.225.199] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "ael7esRxv6UsgRGKB3L1MwAAAQI"]
[Thu Apr 23 09:53:00.924618 2026] [:error] [pid 64967:tid 64973] [client 91.230.225.18:28019] [client 91.230.225.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "ael7fIAV4GfOOdX8Qzoq1gAAAYQ"]
[Thu Apr 23 09:53:05.195327 2026] [proxy_fcgi:error] [pid 64998:tid 65012] [client 91.230.225.19:23857] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:53:05.496350 2026] [proxy_fcgi:error] [pid 64998:tid 65010] [client 91.230.225.19:23857] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:53:05.780298 2026] [proxy_fcgi:error] [pid 64998:tid 65004] [client 91.230.225.19:23857] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:53:06.073315 2026] [proxy_fcgi:error] [pid 64998:tid 65018] [client 91.230.225.19:23857] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:53:07.466845 2026] [:error] [pid 64998:tid 65013] [client 91.230.225.19:23857] [client 91.230.225.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "ael7g4V5EysYcTLjmwhxPAAAAcs"]
[Thu Apr 23 09:53:08.115788 2026] [:error] [pid 42972:tid 43020] [client 91.230.225.16:50901] [client 91.230.225.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "ael7hMOAb-3sOknsk4c-HAAAAEQ"]
[Thu Apr 23 09:53:08.728665 2026] [:error] [pid 64998:tid 65011] [client 91.230.225.17:58727] [client 91.230.225.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "ael7hIV5EysYcTLjmwhxSgAAAck"]
[Thu Apr 23 09:53:09.290223 2026] [:error] [pid 64967:tid 64987] [client 91.230.225.204:46805] [client 91.230.225.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "ael7hYAV4GfOOdX8QzorEwAAAZI"]
[Thu Apr 23 09:53:09.849156 2026] [:error] [pid 59700:tid 59710] [client 91.230.225.16:55633] [client 91.230.225.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "ael7hZXyGZJFeAIDWtmObAAAAUg"]
[Thu Apr 23 09:53:10.440020 2026] [:error] [pid 64998:tid 65006] [client 185.192.71.36:51755] [client 185.192.71.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "ael7hoV5EysYcTLjmwhxWAAAAcQ"]
[Thu Apr 23 09:53:15.979495 2026] [:error] [pid 64967:tid 64986] [client 91.230.225.15:35215] [client 91.230.225.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/media/index.php"] [unique_id "ael7i4AV4GfOOdX8QzorTgAAAZE"]
[Thu Apr 23 09:53:16.542909 2026] [:error] [pid 59700:tid 59716] [client 91.230.225.18:31441] [client 91.230.225.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "ael7jJXyGZJFeAIDWtmOlQAAAU4"]
[Thu Apr 23 09:53:17.100101 2026] [:error] [pid 42971:tid 43010] [client 91.230.225.203:34991] [client 91.230.225.203] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "ael7jTEP2_5RswrH8bHVigAAABg"]
[Thu Apr 23 09:53:17.669343 2026] [:error] [pid 25635:tid 25644] [client 185.192.71.26:62275] [client 185.192.71.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "ael7jcRxv6UsgRGKB3L1lQAAAQU"]
[Thu Apr 23 09:53:18.794540 2026] [:error] [pid 64998:tid 65004] [client 91.230.225.13:39763] [client 91.230.225.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/fonts/themes.php"] [unique_id "ael7joV5EysYcTLjmwhxnAAAAcI"]
[Thu Apr 23 09:53:19.645093 2026] [:error] [pid 59700:tid 59723] [client 91.230.225.197:27407] [client 91.230.225.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/certificates/index.php"] [unique_id "ael7j5XyGZJFeAIDWtmOqwAAAVU"]
[Thu Apr 23 09:53:20.186837 2026] [proxy_fcgi:error] [pid 65000:tid 65032] [client 91.230.225.21:21075] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:53:20.772940 2026] [:error] [pid 65000:tid 65044] [client 91.230.225.21:21075] [client 91.230.225.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "ael7kL6vRb9j6psK2Zb3zQAAAgs"]
[Thu Apr 23 09:53:21.918358 2026] [:error] [pid 43083:tid 43102] [client 91.230.225.14:44551] [client 91.230.225.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "ael7kTC5hrvNXosL83IQbgAAANE"]
[Thu Apr 23 09:53:23.047325 2026] [proxy_fcgi:error] [pid 65000:tid 65057] [client 91.230.225.17:58761] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:53:23.322506 2026] [:error] [pid 65000:tid 65052] [client 91.230.225.17:58761] [client 91.230.225.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "ael7k76vRb9j6psK2Zb3_AAAAhM"]
[Thu Apr 23 09:53:24.266336 2026] [proxy_fcgi:error] [pid 65000:tid 65046] [client 91.230.225.208:36525] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:53:24.570449 2026] [proxy_fcgi:error] [pid 65000:tid 65054] [client 91.230.225.208:36525] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:53:24.864330 2026] [proxy_fcgi:error] [pid 65000:tid 65052] [client 91.230.225.208:36525] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:53:25.137981 2026] [:error] [pid 65000:tid 65042] [client 91.230.225.208:36525] [client 91.230.225.208] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "ael7lb6vRb9j6psK2Zb4FwAAAgk"]
[Thu Apr 23 09:53:25.825316 2026] [proxy_fcgi:error] [pid 65000:tid 65037] [client 91.230.225.20:30873] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:53:26.139381 2026] [:error] [pid 65000:tid 65044] [client 91.230.225.20:30873] [client 91.230.225.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "ael7lr6vRb9j6psK2Zb4JgAAAgs"]
[Thu Apr 23 09:53:27.260776 2026] [proxy_fcgi:error] [pid 42973:tid 43054] [client 91.230.225.206:37927] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:53:27.543323 2026] [proxy_fcgi:error] [pid 42973:tid 43052] [client 91.230.225.206:37927] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:53:27.828505 2026] [proxy_fcgi:error] [pid 42973:tid 43060] [client 91.230.225.206:37927] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:53:29.318780 2026] [proxy_fcgi:error] [pid 42973:tid 43059] [client 91.230.225.206:37927] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:53:29.652349 2026] [proxy_fcgi:error] [pid 42973:tid 43061] [client 91.230.225.206:37927] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:53:30.211302 2026] [proxy_fcgi:error] [pid 42973:tid 43053] [client 91.230.225.206:37927] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:53:31.265302 2026] [proxy_fcgi:error] [pid 42973:tid 43044] [client 91.230.225.206:37927] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:53:31.539505 2026] [:error] [pid 42973:tid 43047] [client 91.230.225.206:37927] [client 91.230.225.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "ael7m26I0QqmmmLTHE3s1QAAAIQ"]
[Thu Apr 23 09:53:32.161183 2026] [:error] [pid 25635:tid 25639] [client 185.192.71.40:60097] [client 185.192.71.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "ael7nMRxv6UsgRGKB3L1_wAAAQA"]
[Thu Apr 23 09:53:32.706311 2026] [proxy_fcgi:error] [pid 64998:tid 65014] [client 91.230.225.22:57765] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:53:33.008551 2026] [:error] [pid 64998:tid 65013] [client 91.230.225.22:57765] [client 91.230.225.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "ael7nYV5EysYcTLjmwhyZwAAAcs"]
[Thu Apr 23 09:53:33.918137 2026] [proxy_fcgi:error] [pid 65000:tid 65049] [client 185.192.71.33:24855] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:53:34.208125 2026] [:error] [pid 65000:tid 65045] [client 185.192.71.33:24855] [client 185.192.71.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "ael7nr6vRb9j6psK2Zb4gAAAAgw"]
[Thu Apr 23 09:53:34.779128 2026] [:error] [pid 43083:tid 43095] [client 91.230.225.13:42753] [client 91.230.225.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "ael7njC5hrvNXosL83IRBwAAAMo"]
[Thu Apr 23 09:53:36.503708 2026] [:error] [pid 25635:tid 25647] [client 185.192.71.35:34347] [client 185.192.71.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "ael7oMRxv6UsgRGKB3L2FAAAAQg"]
[Thu Apr 23 09:53:37.093367 2026] [:error] [pid 59700:tid 59710] [client 91.230.225.13:27699] [client 91.230.225.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dwelectservices.com.au"] [uri "/fm.php"] [unique_id "ael7oZXyGZJFeAIDWtmPQQAAAUg"]
[Thu Apr 23 09:53:43.350305 2026] [proxy_fcgi:error] [pid 43083:tid 43088] [client 91.230.225.15:60325] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:53:43.937453 2026] [:error] [pid 43083:tid 43105] [client 91.230.225.15:60325] [client 91.230.225.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "ael7pzC5hrvNXosL83IRogAAANQ"]
[Thu Apr 23 09:53:44.834168 2026] [proxy_fcgi:error] [pid 42973:tid 43066] [client 91.230.225.13:50315] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:53:45.407056 2026] [:error] [pid 42973:tid 43067] [client 91.230.225.13:50315] [client 91.230.225.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/function.php"] [unique_id "ael7qW6I0QqmmmLTHE3tNAAAAJg"]
[Thu Apr 23 09:53:47.018070 2026] [:error] [pid 64967:tid 64986] [client 185.192.71.27:62763] [client 185.192.71.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/plugins.php"] [unique_id "ael7q4AV4GfOOdX8QzosRgAAAZE"]
[Thu Apr 23 09:53:47.910374 2026] [proxy_fcgi:error] [pid 42971:tid 42992] [client 91.230.225.205:44971] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:53:48.197428 2026] [:error] [pid 42971:tid 43003] [client 91.230.225.205:44971] [client 91.230.225.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/chosen.php"] [unique_id "ael7rDEP2_5RswrH8bHWnAAAABE"]
[Thu Apr 23 09:53:48.755479 2026] [:error] [pid 64967:tid 64982] [client 185.192.71.31:40117] [client 185.192.71.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "ael7rIAV4GfOOdX8QzoscgAAAY0"]
[Thu Apr 23 09:53:49.942317 2026] [proxy_fcgi:error] [pid 65000:tid 65032] [client 91.230.225.17:38547] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:53:50.262413 2026] [proxy_fcgi:error] [pid 65000:tid 65029] [client 91.230.225.17:38547] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:53:50.882727 2026] [proxy_fcgi:error] [pid 65000:tid 65040] [client 91.230.225.17:38547] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:53:51.508728 2026] [:error] [pid 65000:tid 65057] [client 91.230.225.17:38547] [client 91.230.225.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/atomlib.php"] [unique_id "ael7r76vRb9j6psK2Zb5IAAAAhg"]
[Thu Apr 23 09:53:52.063954 2026] [:error] [pid 43083:tid 43098] [client 185.192.71.37:60327] [client 185.192.71.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/rest-api/index.php"] [unique_id "ael7sDC5hrvNXosL83IR9gAAAM0"]
[Thu Apr 23 09:53:53.514324 2026] [proxy_fcgi:error] [pid 43083:tid 43086] [client 185.192.71.35:37693] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:53:53.817080 2026] [:error] [pid 43083:tid 43107] [client 185.192.71.35:37693] [client 185.192.71.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/index.php"] [unique_id "ael7sTC5hrvNXosL83ISIwAAANY"]
[Thu Apr 23 09:53:54.374600 2026] [:error] [pid 65000:tid 65053] [client 91.230.225.201:32207] [client 91.230.225.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "ael7sr6vRb9j6psK2Zb5PgAAAhQ"]
[Thu Apr 23 09:53:54.951914 2026] [:error] [pid 64967:tid 64986] [client 91.230.225.14:39475] [client 91.230.225.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "ael7soAV4GfOOdX8QzosxQAAAZE"]
[Thu Apr 23 09:53:56.868301 2026] [proxy_fcgi:error] [pid 25635:tid 25649] [client 91.230.225.197:36089] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:53:57.168407 2026] [:error] [pid 25635:tid 25654] [client 91.230.225.197:36089] [client 91.230.225.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/Exception-wp.php"] [unique_id "ael7tcRxv6UsgRGKB3L2xAAAAQ8"]
[Thu Apr 23 09:53:58.043218 2026] [:error] [pid 43083:tid 43096] [client 185.192.71.24:64253] [client 185.192.71.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "ael7tjC5hrvNXosL83ISXgAAAMs"]
[Thu Apr 23 09:53:58.650320 2026] [proxy_fcgi:error] [pid 42973:tid 43054] [client 91.230.225.209:29235] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:53:58.940409 2026] [proxy_fcgi:error] [pid 42973:tid 43051] [client 91.230.225.209:29235] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:53:59.553348 2026] [proxy_fcgi:error] [pid 42973:tid 43063] [client 91.230.225.209:29235] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:54:00.780766 2026] [:error] [pid 42973:tid 43046] [client 91.230.225.209:29235] [client 91.230.225.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.230.225.209, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/js/wp-login.php"] [unique_id "ael7uG6I0QqmmmLTHE3tuwAAAIM"]
[Thu Apr 23 09:54:01.366856 2026] [:error] [pid 42973:tid 43055] [client 91.230.225.209:29235] File does not exist: /home/dwelects/public_html/worm.PhP
[Thu Apr 23 09:54:01.676306 2026] [proxy_fcgi:error] [pid 42973:tid 43045] [client 91.230.225.209:29235] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:54:01.966311 2026] [proxy_fcgi:error] [pid 42973:tid 43046] [client 91.230.225.209:29235] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:54:02.542551 2026] [:error] [pid 42973:tid 43063] [client 91.230.225.209:29235] [client 91.230.225.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.230.225.209, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "ael7um6I0QqmmmLTHE3tzgAAAJQ"]
[Thu Apr 23 09:54:03.516299 2026] [proxy_fcgi:error] [pid 42973:tid 43050] [client 91.230.225.209:29235] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:54:03.823283 2026] [proxy_fcgi:error] [pid 42973:tid 43060] [client 91.230.225.209:29235] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:54:04.460316 2026] [proxy_fcgi:error] [pid 42973:tid 43058] [client 91.230.225.209:29235] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:54:06.361860 2026] [proxy_fcgi:error] [pid 42973:tid 43049] [client 91.230.225.209:29235] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:54:07.295286 2026] [proxy_fcgi:error] [pid 42973:tid 43048] [client 91.230.225.209:29235] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:54:09.439333 2026] [proxy_fcgi:error] [pid 42973:tid 43048] [client 91.230.225.209:29235] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:54:09.743919 2026] [proxy_fcgi:error] [pid 42973:tid 43044] [client 91.230.225.209:29235] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:54:11.260299 2026] [proxy_fcgi:error] [pid 42973:tid 43045] [client 91.230.225.209:29235] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:54:11.928314 2026] [:error] [pid 42973:tid 43044] [client 91.230.225.209:29235] [client 91.230.225.209] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "ael7w26I0QqmmmLTHE3uUQAAAIE"]
[Thu Apr 23 09:54:13.119498 2026] [proxy_fcgi:error] [pid 59700:tid 59713] [client 91.230.225.11:27601] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:54:13.416655 2026] [:error] [pid 59700:tid 59703] [client 91.230.225.11:27601] [client 91.230.225.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "ael7xZXyGZJFeAIDWtmQtwAAAUE"]
[Thu Apr 23 09:54:14.029030 2026] [proxy_fcgi:error] [pid 42972:tid 43031] [client 185.192.71.26:60053] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:54:14.342313 2026] [proxy_fcgi:error] [pid 42972:tid 43040] [client 185.192.71.26:60053] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:54:14.617784 2026] [:error] [pid 42972:tid 43020] [client 185.192.71.26:60053] [client 185.192.71.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/atomlib.php"] [unique_id "ael7xsOAb-3sOknsk4dA_wAAAEQ"]
[Thu Apr 23 09:54:15.786547 2026] [proxy_fcgi:error] [pid 59700:tid 59713] [client 185.192.71.28:28307] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:54:16.389320 2026] [proxy_fcgi:error] [pid 59700:tid 59708] [client 185.192.71.28:28307] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:54:16.978302 2026] [proxy_fcgi:error] [pid 59700:tid 59707] [client 185.192.71.28:28307] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:54:17.273295 2026] [proxy_fcgi:error] [pid 59700:tid 59709] [client 185.192.71.28:28307] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:54:24.211417 2026] [:error] [pid 59700:tid 59713] [client 185.192.71.28:28307] [client 185.192.71.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "ael70JXyGZJFeAIDWtmRGwAAAUs"]
[Thu Apr 23 09:54:24.786316 2026] [proxy_fcgi:error] [pid 43083:tid 43099] [client 91.230.225.202:36401] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:54:25.115300 2026] [proxy_fcgi:error] [pid 43083:tid 43094] [client 91.230.225.202:36401] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:54:25.399275 2026] [:error] [pid 43083:tid 43103] [client 91.230.225.202:36401] [client 91.230.225.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "ael70TC5hrvNXosL83ITrQAAANI"]
[Thu Apr 23 09:54:26.255281 2026] [:error] [pid 59700:tid 59711] [client 185.192.71.39:61293] [client 185.192.71.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "ael70pXyGZJFeAIDWtmRLAAAAUk"]
[Thu Apr 23 09:54:27.145310 2026] [proxy_fcgi:error] [pid 64998:tid 65018] [client 185.192.71.34:20807] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:54:28.007362 2026] [proxy_fcgi:error] [pid 64998:tid 65016] [client 185.192.71.34:20807] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:54:28.290634 2026] [proxy_fcgi:error] [pid 64998:tid 65017] [client 185.192.71.34:20807] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:54:28.569802 2026] [:error] [pid 64998:tid 65016] [client 185.192.71.34:20807] [client 185.192.71.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "ael71IV5EysYcTLjmwh1GQAAAc4"]
[Thu Apr 23 09:54:29.111295 2026] [:error] [pid 42972:tid 43034] [client 91.230.225.196:22227] [client 91.230.225.196] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "ael71cOAb-3sOknsk4dBjgAAAFI"]
[Thu Apr 23 09:54:31.092298 2026] [proxy_fcgi:error] [pid 42971:tid 43005] [client 91.230.225.197:48475] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:54:31.651468 2026] [:error] [pid 42971:tid 42986] [client 91.230.225.197:48475] [client 91.230.225.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/dist/default.php"] [unique_id "ael71zEP2_5RswrH8bHYRgAAAAA"]
[Thu Apr 23 09:54:32.494304 2026] [:error] [pid 64967:tid 64985] [client 185.192.71.24:48839] [client 185.192.71.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dwelectservices.com.au"] [uri "/tiny.php"] [unique_id "ael72IAV4GfOOdX8QzouWwAAAZA"]
[Thu Apr 23 09:54:33.314912 2026] [proxy_fcgi:error] [pid 59700:tid 59723] [client 91.230.225.17:61043] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:54:33.639869 2026] [proxy_fcgi:error] [pid 59700:tid 59717] [client 91.230.225.17:61043] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:54:33.908303 2026] [:error] [pid 59700:tid 59704] [client 91.230.225.17:61043] [client 91.230.225.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "ael72ZXyGZJFeAIDWtmRlwAAAUI"]
[Thu Apr 23 09:54:34.733290 2026] [proxy_fcgi:error] [pid 64998:tid 65017] [client 185.192.71.33:35311] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:54:35.005327 2026] [proxy_fcgi:error] [pid 64998:tid 65013] [client 185.192.71.33:35311] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:54:35.561334 2026] [proxy_fcgi:error] [pid 64998:tid 65017] [client 185.192.71.33:35311] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:54:36.439596 2026] [:error] [pid 64998:tid 65017] [client 185.192.71.33:35311] [client 185.192.71.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/Parse/about.php"] [unique_id "ael73IV5EysYcTLjmwh11AAAAc8"]
[Thu Apr 23 09:54:36.990653 2026] [proxy_fcgi:error] [pid 64998:tid 65006] [client 185.92.25.114:30853] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:54:37.849249 2026] [:error] [pid 64998:tid 65026] [client 185.92.25.114:30853] [client 185.92.25.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "ael73YV5EysYcTLjmwh16AAAAdg"]
[Thu Apr 23 09:54:38.699653 2026] [proxy_fcgi:error] [pid 59700:tid 59725] [client 91.230.225.10:43553] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:54:39.604296 2026] [proxy_fcgi:error] [pid 59700:tid 59707] [client 91.230.225.10:43553] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:54:39.901890 2026] [proxy_fcgi:error] [pid 59700:tid 59715] [client 91.230.225.10:43553] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:54:40.495030 2026] [:error] [pid 59700:tid 59707] [client 91.230.225.10:43553] [client 91.230.225.10] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.230.225.10, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/colors/ocean/wp-login.php"] [unique_id "ael74JXyGZJFeAIDWtmR1wAAAUU"]
[Thu Apr 23 09:54:41.357300 2026] [proxy_fcgi:error] [pid 59700:tid 59719] [client 91.230.225.10:43553] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:54:41.933943 2026] [:error] [pid 59700:tid 59726] [client 91.230.225.10:43553] [client 91.230.225.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/Cache/upfile.php"] [unique_id "ael74ZXyGZJFeAIDWtmR6AAAAVg"]
[Thu Apr 23 09:54:42.508315 2026] [proxy_fcgi:error] [pid 42971:tid 43010] [client 185.192.71.36:59827] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:54:42.787498 2026] [:error] [pid 42971:tid 43009] [client 185.192.71.36:59827] [client 185.192.71.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "ael74jEP2_5RswrH8bHYlAAAABc"]
[Thu Apr 23 09:54:43.340304 2026] [proxy_fcgi:error] [pid 64967:tid 64989] [client 185.192.71.37:25521] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:54:43.919330 2026] [proxy_fcgi:error] [pid 64967:tid 64984] [client 185.192.71.37:25521] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:54:44.475423 2026] [:error] [pid 64967:tid 64992] [client 185.192.71.37:25521] [client 185.192.71.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/widgets/class-wp-widget-search-function.php"] [unique_id "ael75IAV4GfOOdX8Qzou4gAAAZc"]
[Thu Apr 23 09:54:45.288993 2026] [proxy_fcgi:error] [pid 42973:tid 43055] [client 185.192.71.40:27179] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:54:45.577345 2026] [proxy_fcgi:error] [pid 42973:tid 43064] [client 185.192.71.40:27179] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:54:45.844980 2026] [:error] [pid 42973:tid 43060] [client 185.192.71.40:27179] [client 185.192.71.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/Canonical.php"] [unique_id "ael75W6I0QqmmmLTHE3v1gAAAJE"]
[Thu Apr 23 09:54:46.391812 2026] [:error] [pid 42973:tid 43058] [client 185.192.71.30:47741] [client 185.192.71.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "ael75m6I0QqmmmLTHE3v2gAAAI8"]
[Thu Apr 23 09:54:46.937295 2026] [proxy_fcgi:error] [pid 65000:tid 65031] [client 185.192.71.38:44509] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:54:47.227308 2026] [proxy_fcgi:error] [pid 65000:tid 65038] [client 185.192.71.38:44509] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:54:47.801283 2026] [:error] [pid 65000:tid 65052] [client 185.192.71.38:44509] [client 185.192.71.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/class-feed-index.php"] [unique_id "ael7576vRb9j6psK2Zb8bAAAAhM"]
[Thu Apr 23 09:54:48.351126 2026] [proxy_fcgi:error] [pid 64998:tid 65025] [client 185.192.71.23:22937] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:54:48.923324 2026] [proxy_fcgi:error] [pid 64998:tid 65008] [client 185.192.71.23:22937] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:54:49.199323 2026] [:error] [pid 64998:tid 65017] [client 185.192.71.23:22937] [client 185.192.71.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php"] [unique_id "ael76YV5EysYcTLjmwh22AAAAc8"]
[Thu Apr 23 09:54:50.061109 2026] [:error] [pid 42973:tid 43065] [client 185.192.71.25:55583] [client 185.192.71.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/db.php"] [unique_id "ael76m6I0QqmmmLTHE3v8QAAAJY"]
[Thu Apr 23 09:54:50.618003 2026] [:error] [pid 25635:tid 25648] [client 91.230.225.207:47351] [client 91.230.225.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/class-wp-dependency-float.php"] [unique_id "ael76sRxv6UsgRGKB3L4qAAAAQk"]
[Thu Apr 23 09:54:51.164058 2026] [:error] [pid 42973:tid 43067] [client 91.230.225.207:30089] [client 91.230.225.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "ael7626I0QqmmmLTHE3v_wAAAJg"]
[Thu Apr 23 09:54:52.777143 2026] [:error] [pid 42971:tid 43006] [client 91.230.225.208:36315] [client 91.230.225.208] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/PHPMailer/purna.php"] [unique_id "ael77DEP2_5RswrH8bHZCAAAABQ"]
[Thu Apr 23 09:54:53.317010 2026] [:error] [pid 65000:tid 65039] [client 91.230.225.11:34083] [client 91.230.225.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/interactivity-api/interactivity-api-class.php"] [unique_id "ael77b6vRb9j6psK2Zb8qQAAAgY"]
[Thu Apr 23 09:54:53.886671 2026] [:error] [pid 42972:tid 43038] [client 91.230.225.207:57565] [client 91.230.225.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/l10n/class-wp-widddget-pages.php"] [unique_id "ael77cOAb-3sOknsk4dCoAAAAFY"]
[Thu Apr 23 09:54:54.966015 2026] [:error] [pid 64967:tid 64973] [client 185.192.71.35:45313] [client 185.192.71.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php"] [unique_id "ael77oAV4GfOOdX8QzovNQAAAYQ"]
[Thu Apr 23 09:54:55.511156 2026] [:error] [pid 43083:tid 43109] [client 91.230.225.21:24241] [client 91.230.225.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php"] [unique_id "ael77zC5hrvNXosL83IVIgAAANg"]
[Thu Apr 23 09:54:56.040780 2026] [:error] [pid 65000:tid 65044] [client 185.192.71.37:54799] [client 185.192.71.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/ID3/module.audio-video.riff-set.php"] [unique_id "ael78L6vRb9j6psK2Zb89AAAAgs"]
[Thu Apr 23 09:54:56.581697 2026] [:error] [pid 65000:tid 65038] [client 91.230.225.11:44789] [client 91.230.225.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/tinymce/utils/license.php"] [unique_id "ael78L6vRb9j6psK2Zb9AQAAAgU"]
[Thu Apr 23 09:54:57.134039 2026] [:error] [pid 25635:tid 25656] [client 91.230.225.21:57631] [client 91.230.225.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Text/options.php"] [unique_id "ael78cRxv6UsgRGKB3L44wAAARE"]
[Thu Apr 23 09:54:57.700992 2026] [proxy_fcgi:error] [pid 42973:tid 43048] [client 185.192.71.38:29315] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:54:58.516083 2026] [:error] [pid 42973:tid 43058] [client 185.192.71.38:29315] [client 185.192.71.38] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.192.71.38, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "ael78m6I0QqmmmLTHE3wVgAAAI8"]
[Thu Apr 23 09:54:59.892375 2026] [:error] [pid 42973:tid 43043] [client 185.192.71.38:29315] [client 185.192.71.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/IXR/goto.php"] [unique_id "ael7826I0QqmmmLTHE3wagAAAIA"]
[Thu Apr 23 09:55:01.096601 2026] [proxy_fcgi:error] [pid 25635:tid 25656] [client 91.230.225.196:33063] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:55:01.405314 2026] [proxy_fcgi:error] [pid 25635:tid 25639] [client 91.230.225.196:33063] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:55:02.640352 2026] [proxy_fcgi:error] [pid 25635:tid 25663] [client 91.230.225.196:33063] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:55:02.977244 2026] [proxy_fcgi:error] [pid 25635:tid 25658] [client 91.230.225.196:33063] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:55:04.252306 2026] [proxy_fcgi:error] [pid 25635:tid 25661] [client 91.230.225.196:33063] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:55:04.542292 2026] [proxy_fcgi:error] [pid 25635:tid 25644] [client 91.230.225.196:33063] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:55:04.834279 2026] [proxy_fcgi:error] [pid 25635:tid 25656] [client 91.230.225.196:33063] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:55:05.124348 2026] [proxy_fcgi:error] [pid 25635:tid 25658] [client 91.230.225.196:33063] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:55:05.401934 2026] [:error] [pid 25635:tid 25651] [client 91.230.225.196:33063] [client 91.230.225.196] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "ael7-cRxv6UsgRGKB3L5CwAAAQw"]
[Thu Apr 23 09:55:05.958280 2026] [:error] [pid 64998:tid 65005] [client 91.230.225.198:60601] [client 91.230.225.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/wp_class_datlib.php"] [unique_id "ael7-YV5EysYcTLjmwh4TgAAAcM"]
[Thu Apr 23 09:55:06.502348 2026] [:error] [pid 65000:tid 65048] [client 185.192.71.38:26935] [client 185.192.71.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "ael7-r6vRb9j6psK2Zb9fQAAAg8"]
[Thu Apr 23 09:55:07.352317 2026] [proxy_fcgi:error] [pid 64998:tid 65005] [client 185.192.71.33:35333] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:55:07.648322 2026] [proxy_fcgi:error] [pid 64998:tid 65005] [client 185.192.71.33:35333] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:55:08.236327 2026] [proxy_fcgi:error] [pid 64998:tid 65023] [client 185.192.71.33:35333] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:55:08.917046 2026] [:error] [pid 64998:tid 65005] [client 185.192.71.33:35333] [client 185.192.71.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/Registry-private.php"] [unique_id "ael7_IV5EysYcTLjmwh4pgAAAcM"]
[Thu Apr 23 09:55:09.453089 2026] [:error] [pid 25635:tid 25646] [client 185.192.71.38:46513] [client 185.192.71.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-meta.php"] [unique_id "ael7_cRxv6UsgRGKB3L5TQAAAQc"]
[Thu Apr 23 09:55:10.014305 2026] [:error] [pid 64967:tid 64974] [client 91.230.225.23:28095] [client 91.230.225.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/widgets/bypass.php"] [unique_id "ael7_oAV4GfOOdX8Qzov2QAAAYU"]
[Thu Apr 23 09:55:11.731121 2026] [:error] [pid 64998:tid 65014] [client 185.192.71.28:36591] [client 185.192.71.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/style-engine/adminfus.php"] [unique_id "ael7_4V5EysYcTLjmwh49wAAAcw"]
[Thu Apr 23 09:55:12.305322 2026] [proxy_fcgi:error] [pid 64967:tid 64992] [client 91.230.225.197:43645] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:55:12.586350 2026] [:error] [pid 64967:tid 64993] [client 91.230.225.197:43645] [client 91.230.225.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/group/wp-style.php"] [unique_id "ael8AIAV4GfOOdX8QzowDgAAAZg"]
[Thu Apr 23 09:55:13.695253 2026] [:error] [pid 64967:tid 64980] [client 91.230.225.24:50073] [client 91.230.225.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/widgets/class-wp-wolf-widget.php"] [unique_id "ael8AYAV4GfOOdX8QzowKwAAAYs"]
[Thu Apr 23 09:55:21.927069 2026] [:error] [pid 43083:tid 43109] [client 91.230.225.22:22563] [client 91.230.225.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Text/index.php"] [unique_id "ael8CTC5hrvNXosL83IWggAAANg"]
[Thu Apr 23 09:55:22.487779 2026] [proxy_fcgi:error] [pid 42972:tid 43039] [client 185.192.71.37:37979] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:55:22.767122 2026] [:error] [pid 42972:tid 43023] [client 185.192.71.37:37979] [client 185.192.71.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/about.php"] [unique_id "ael8CsOAb-3sOknsk4dDsQAAAEc"]
[Thu Apr 23 09:55:23.871323 2026] [proxy_fcgi:error] [pid 42971:tid 43003] [client 185.192.71.28:40111] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:55:24.721302 2026] [proxy_fcgi:error] [pid 42971:tid 42992] [client 185.192.71.28:40111] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:55:24.994026 2026] [:error] [pid 42971:tid 42991] [client 185.192.71.28:40111] [client 185.192.71.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/wp-sup.php"] [unique_id "ael8DDEP2_5RswrH8bHaFAAAAAU"]
[Thu Apr 23 09:55:26.134275 2026] [:error] [pid 42972:tid 43037] [client 91.230.225.198:63317] [client 91.230.225.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/widgets/class-t.api.php"] [unique_id "ael8DsOAb-3sOknsk4dEBAAAAFU"]
[Thu Apr 23 09:55:57.357937 2026] [autoindex:error] [pid 64998:tid 65017] [client 185.192.71.32:45669] AH01276: Cannot serve directory /home/dwelects/public_html/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 09:56:06.288748 2026] [autoindex:error] [pid 64998:tid 65019] [client 185.192.71.32:45669] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 09:56:48.089626 2026] [:error] [pid 64998:tid 65007] [client 185.192.71.39:39231] [client 185.192.71.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/shell/"] [unique_id "ael8YIV5EysYcTLjmwiA6gAAAcU"]
[Thu Apr 23 15:49:29.709187 2026] [proxy_fcgi:error] [pid 42971:tid 42994] [client 20.251.36.110:60937] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 15:49:29.976505 2026] [proxy_fcgi:error] [pid 42971:tid 42988] [client 20.251.36.110:60937] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 15:49:30.258509 2026] [proxy_fcgi:error] [pid 42971:tid 43004] [client 20.251.36.110:60937] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 15:49:30.520066 2026] [proxy_fcgi:error] [pid 42971:tid 42991] [client 20.251.36.110:60937] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 15:49:30.780918 2026] [proxy_fcgi:error] [pid 42971:tid 42993] [client 20.251.36.110:60937] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 15:49:31.041468 2026] [proxy_fcgi:error] [pid 42971:tid 43002] [client 20.251.36.110:60937] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 15:49:31.317046 2026] [proxy_fcgi:error] [pid 42971:tid 43008] [client 20.251.36.110:60937] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 15:49:31.577754 2026] [proxy_fcgi:error] [pid 42971:tid 43003] [client 20.251.36.110:60937] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 15:49:31.838130 2026] [proxy_fcgi:error] [pid 42971:tid 43009] [client 20.251.36.110:60937] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 15:49:32.121572 2026] [proxy_fcgi:error] [pid 42971:tid 42999] [client 20.251.36.110:60937] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 15:49:32.379165 2026] [:error] [pid 42971:tid 42986] [client 20.251.36.110:60937] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xxa.php"] [unique_id "aenPDDEP2_5RswrH8bEIZAAAAAA"]
[Thu Apr 23 15:49:37.335921 2026] [:error] [pid 59700:tid 59709] [client 20.251.36.110:26715] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xxa.php"] [unique_id "aenPEZXyGZJFeAIDWtnkGAAAAUc"]
[Thu Apr 23 15:49:40.174966 2026] [:error] [pid 43083:tid 43091] [client 20.251.36.110:26704] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xxa.php"] [unique_id "aenPFDC5hrvNXosL83JPNQAAAMY"]
[Thu Apr 23 15:49:43.232902 2026] [:error] [pid 43083:tid 43086] [client 20.251.36.110:2049] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xxa.php"] [unique_id "aenPFzC5hrvNXosL83JPOQAAAME"]
[Thu Apr 23 15:49:44.165537 2026] [:error] [pid 42972:tid 43033] [client 20.251.36.110:26729] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/a1.php"] [unique_id "aenPGMOAb-3sOknsk4e7zwAAAFE"]
[Thu Apr 23 15:49:46.884002 2026] [:error] [pid 65000:tid 65057] [client 20.251.36.110:42703] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/a1.php"] [unique_id "aenPGr6vRb9j6psK2Za1ogAAAhg"]
[Thu Apr 23 15:49:48.498275 2026] [:error] [pid 43083:tid 43100] [client 20.251.36.110:48535] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/a1.php"] [unique_id "aenPHDC5hrvNXosL83JPOwAAAM8"]
[Thu Apr 23 15:49:49.097458 2026] [:error] [pid 46953:tid 46980] [client 20.251.36.110:43780] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/a1.php"] [unique_id "aenPHUnlpdHh-P6wKboCnAAAAlc"]
[Thu Apr 23 15:49:50.882181 2026] [:error] [pid 59700:tid 59726] [client 20.251.36.110:2059] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/zxcs.php"] [unique_id "aenPHpXyGZJFeAIDWtnkHQAAAVg"]
[Thu Apr 23 15:49:54.415907 2026] [:error] [pid 64998:tid 65003] [client 20.251.36.110:48537] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/zxcs.php"] [unique_id "aenPIoV5EysYcTLjmwjl1gAAAcE"]
[Thu Apr 23 15:49:56.636238 2026] [:error] [pid 64998:tid 65018] [client 20.251.36.110:25425] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/zxcs.php"] [unique_id "aenPJIV5EysYcTLjmwjl2QAAAdA"]
[Thu Apr 23 15:49:59.819887 2026] [:error] [pid 42973:tid 43049] [client 20.251.36.110:60935] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/zxcs.php"] [unique_id "aenPJ26I0QqmmmLTHE25RgAAAIY"]
[Thu Apr 23 15:50:02.985476 2026] [:error] [pid 46953:tid 46972] [client 20.251.36.110:43835] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/s1.php"] [unique_id "aenPKknlpdHh-P6wKboCoAAAAlA"]
[Thu Apr 23 15:50:07.066183 2026] [:error] [pid 42973:tid 43051] [client 20.251.36.110:60949] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/s1.php"] [unique_id "aenPL26I0QqmmmLTHE25SwAAAIg"]
[Thu Apr 23 15:50:09.197671 2026] [:error] [pid 42972:tid 43027] [client 20.251.36.110:2095] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/s1.php"] [unique_id "aenPMcOAb-3sOknsk4e74gAAAEs"]
[Thu Apr 23 15:50:10.025196 2026] [:error] [pid 42972:tid 43029] [client 20.251.36.110:2655] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/s1.php"] [unique_id "aenPMsOAb-3sOknsk4e76QAAAE0"]
[Thu Apr 23 15:50:13.265443 2026] [:error] [pid 42973:tid 43055] [client 20.251.36.110:39319] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-kz.php"] [unique_id "aenPNW6I0QqmmmLTHE25XQAAAIw"]
[Thu Apr 23 15:50:15.498757 2026] [:error] [pid 42973:tid 43067] [client 20.251.36.110:2078] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-kz.php"] [unique_id "aenPN26I0QqmmmLTHE25YwAAAJg"]
[Thu Apr 23 15:50:21.277865 2026] [:error] [pid 59700:tid 59713] [client 20.251.36.110:2657] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-kz.php"] [unique_id "aenPPZXyGZJFeAIDWtnkLAAAAUs"]
[Thu Apr 23 15:50:23.077358 2026] [:error] [pid 42971:tid 42999] [client 20.251.36.110:43829] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-kz.php"] [unique_id "aenPPzEP2_5RswrH8bEIdgAAAA0"]
[Thu Apr 23 15:50:24.060702 2026] [:error] [pid 42971:tid 42986] [client 20.251.36.110:48563] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wmore1.php"] [unique_id "aenPQDEP2_5RswrH8bEIdwAAAAA"]
[Thu Apr 23 15:50:25.296803 2026] [:error] [pid 42973:tid 43052] [client 20.251.36.110:60987] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wmore1.php"] [unique_id "aenPQW6I0QqmmmLTHE25awAAAIk"]
[Thu Apr 23 15:50:26.025620 2026] [:error] [pid 46953:tid 46958] [client 20.251.36.110:25452] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wmore1.php"] [unique_id "aenPQknlpdHh-P6wKboCpgAAAkI"]
[Thu Apr 23 15:50:27.734022 2026] [:error] [pid 46953:tid 46969] [client 20.251.36.110:39317] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wmore1.php"] [unique_id "aenPQ0nlpdHh-P6wKboCpwAAAk0"]
[Thu Apr 23 15:50:30.178517 2026] [:error] [pid 59700:tid 59719] [client 20.251.36.110:29238] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/saorix1.php"] [unique_id "aenPRpXyGZJFeAIDWtnkNgAAAVE"]
[Thu Apr 23 15:50:31.204099 2026] [:error] [pid 42973:tid 43047] [client 20.251.36.110:25419] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/saorix1.php"] [unique_id "aenPR26I0QqmmmLTHE25lAAAAIQ"]
[Thu Apr 23 15:50:32.292157 2026] [proxy_fcgi:error] [pid 43083:tid 43096] [client 20.251.36.110:27907] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 15:50:32.555885 2026] [proxy_fcgi:error] [pid 43083:tid 43092] [client 20.251.36.110:27907] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 15:50:32.817352 2026] [proxy_fcgi:error] [pid 43083:tid 43095] [client 20.251.36.110:27907] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 15:50:33.174738 2026] [proxy_fcgi:error] [pid 43083:tid 43094] [client 20.251.36.110:27907] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 15:50:33.437387 2026] [proxy_fcgi:error] [pid 43083:tid 43100] [client 20.251.36.110:27907] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 15:50:33.699129 2026] [proxy_fcgi:error] [pid 43083:tid 43087] [client 20.251.36.110:27907] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 15:50:33.972809 2026] [proxy_fcgi:error] [pid 43083:tid 43085] [client 20.251.36.110:27907] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 15:50:34.248483 2026] [proxy_fcgi:error] [pid 43083:tid 43106] [client 20.251.36.110:27907] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 15:50:34.513536 2026] [proxy_fcgi:error] [pid 43083:tid 43088] [client 20.251.36.110:27907] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 15:50:34.774756 2026] [proxy_fcgi:error] [pid 43083:tid 43102] [client 20.251.36.110:27907] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 15:50:35.040295 2026] [proxy_fcgi:error] [pid 43083:tid 43098] [client 20.251.36.110:27907] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 15:50:35.297700 2026] [:error] [pid 43083:tid 43109] [client 20.251.36.110:27907] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/aboute.php"] [unique_id "aenPSzC5hrvNXosL83JPTQAAANg"]
[Thu Apr 23 15:50:39.378803 2026] [:error] [pid 65000:tid 65032] [client 20.251.36.110:39326] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/aboute.php"] [unique_id "aenPT76vRb9j6psK2Za1wwAAAgM"]
[Thu Apr 23 15:50:40.306698 2026] [:error] [pid 42971:tid 43010] [client 20.251.36.110:2057] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/aboute.php"] [unique_id "aenPUDEP2_5RswrH8bEIggAAABg"]
[Thu Apr 23 15:50:42.495466 2026] [:error] [pid 42972:tid 43022] [client 20.251.36.110:28007] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/aboute.php"] [unique_id "aenPUsOAb-3sOknsk4e8LAAAAEY"]
[Thu Apr 23 15:50:44.946292 2026] [:error] [pid 43083:tid 43093] [client 20.251.36.110:60932] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ayk.php"] [unique_id "aenPVDC5hrvNXosL83JPTwAAAMg"]
[Thu Apr 23 15:50:47.803497 2026] [:error] [pid 43083:tid 43107] [client 20.251.36.110:27997] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ayk.php"] [unique_id "aenPVzC5hrvNXosL83JPUQAAANY"]
[Thu Apr 23 15:50:50.461562 2026] [:error] [pid 42973:tid 43048] [client 20.251.36.110:25450] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ayk.php"] [unique_id "aenPWm6I0QqmmmLTHE256wAAAIU"]
[Thu Apr 23 15:50:53.610283 2026] [:error] [pid 42973:tid 43055] [client 20.251.36.110:25417] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ayk.php"] [unique_id "aenPXW6I0QqmmmLTHE258QAAAIw"]
[Thu Apr 23 15:50:56.138074 2026] [:error] [pid 59700:tid 59714] [client 20.251.36.110:28005] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wps.php"] [unique_id "aenPYJXyGZJFeAIDWtnkTwAAAUw"]
[Thu Apr 23 15:50:58.934584 2026] [:error] [pid 42973:tid 43066] [client 20.251.36.110:48555] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wps.php"] [unique_id "aenPYm6I0QqmmmLTHE259wAAAJc"]
[Thu Apr 23 15:51:02.599454 2026] [:error] [pid 42973:tid 43050] [client 20.251.36.110:42718] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wps.php"] [unique_id "aenPZm6I0QqmmmLTHE26AAAAAIc"]
[Thu Apr 23 15:51:04.208543 2026] [:error] [pid 46953:tid 46957] [client 20.251.36.110:2097] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wps.php"] [unique_id "aenPaEnlpdHh-P6wKboC2QAAAkE"]
[Thu Apr 23 15:51:06.796484 2026] [:error] [pid 42972:tid 43038] [client 20.251.36.110:2639] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/f35.php"] [unique_id "aenPasOAb-3sOknsk4e8QQAAAFY"]
[Thu Apr 23 15:51:10.461798 2026] [:error] [pid 42973:tid 43047] [client 20.251.36.110:42732] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/f35.php"] [unique_id "aenPbm6I0QqmmmLTHE26EwAAAIQ"]
[Thu Apr 23 15:51:13.383841 2026] [:error] [pid 42972:tid 43037] [client 20.251.36.110:25436] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/f35.php"] [unique_id "aenPccOAb-3sOknsk4e8UQAAAFU"]
[Thu Apr 23 15:51:14.374341 2026] [:error] [pid 64998:tid 65021] [client 20.251.36.110:2106] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/f35.php"] [unique_id "aenPcoV5EysYcTLjmwjmBQAAAdM"]
[Thu Apr 23 15:51:15.260889 2026] [:error] [pid 42972:tid 43030] [client 20.251.36.110:48533] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/12.php"] [unique_id "aenPc8OAb-3sOknsk4e8WAAAAE4"]
[Thu Apr 23 15:51:16.264298 2026] [:error] [pid 42971:tid 42987] [client 20.251.36.110:2640] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/12.php"] [unique_id "aenPdDEP2_5RswrH8bEIiQAAAAE"]
[Thu Apr 23 15:51:17.390214 2026] [:error] [pid 42971:tid 43010] [client 20.251.36.110:45088] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/12.php"] [unique_id "aenPdTEP2_5RswrH8bEIigAAABg"]
[Thu Apr 23 15:51:17.981770 2026] [:error] [pid 59700:tid 59710] [client 20.251.36.110:29235] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/12.php"] [unique_id "aenPdZXyGZJFeAIDWtnkXwAAAUg"]
[Thu Apr 23 15:51:19.016418 2026] [:error] [pid 42972:tid 43033] [client 20.251.36.110:29243] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/acp.php"] [unique_id "aenPd8OAb-3sOknsk4e8YAAAAFE"]
[Thu Apr 23 15:51:19.672671 2026] [:error] [pid 64998:tid 65013] [client 20.251.36.110:29207] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/acp.php"] [unique_id "aenPd4V5EysYcTLjmwjmDgAAAcs"]
[Thu Apr 23 15:51:21.405181 2026] [:error] [pid 46953:tid 46967] [client 20.251.36.110:48553] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/acp.php"] [unique_id "aenPeUnlpdHh-P6wKboC4wAAAks"]
[Thu Apr 23 15:51:23.807934 2026] [:error] [pid 42973:tid 43050] [client 20.251.36.110:26698] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/acp.php"] [unique_id "aenPe26I0QqmmmLTHE26MwAAAIc"]
[Thu Apr 23 15:51:27.065662 2026] [:error] [pid 65000:tid 65052] [client 20.251.36.110:52903] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/link.php"] [unique_id "aenPf76vRb9j6psK2Za19gAAAhM"]
[Thu Apr 23 15:51:29.659285 2026] [:error] [pid 64998:tid 65005] [client 20.251.36.110:27913] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/link.php"] [unique_id "aenPgYV5EysYcTLjmwjmFQAAAcM"]
[Thu Apr 23 15:51:31.460761 2026] [:error] [pid 42973:tid 43054] [client 20.251.36.110:29199] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/link.php"] [unique_id "aenPg26I0QqmmmLTHE26RQAAAIs"]
[Thu Apr 23 15:51:37.700404 2026] [proxy_fcgi:error] [pid 65000:tid 65056] [client 20.251.36.110:39329] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 15:51:37.962943 2026] [proxy_fcgi:error] [pid 65000:tid 65051] [client 20.251.36.110:39329] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 15:51:38.228810 2026] [proxy_fcgi:error] [pid 65000:tid 65032] [client 20.251.36.110:39329] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 15:51:38.491334 2026] [proxy_fcgi:error] [pid 65000:tid 65048] [client 20.251.36.110:39329] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 15:51:38.761292 2026] [proxy_fcgi:error] [pid 65000:tid 65039] [client 20.251.36.110:39329] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 15:51:39.027752 2026] [proxy_fcgi:error] [pid 65000:tid 65044] [client 20.251.36.110:39329] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 15:51:39.286204 2026] [:error] [pid 65000:tid 65054] [client 20.251.36.110:39329] [client 20.251.36.110] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.dwelectservices.com.au"] [uri "/tiny.php"] [unique_id "aenPi76vRb9j6psK2Za2DgAAAhU"]
[Thu Apr 23 15:51:43.281412 2026] [proxy_fcgi:error] [pid 64998:tid 65007] [client 20.251.36.110:29192] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 15:51:43.544485 2026] [proxy_fcgi:error] [pid 64998:tid 65014] [client 20.251.36.110:29192] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 15:51:43.826029 2026] [proxy_fcgi:error] [pid 64998:tid 65012] [client 20.251.36.110:29192] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 15:51:44.100422 2026] [proxy_fcgi:error] [pid 64998:tid 65003] [client 20.251.36.110:29192] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 15:51:44.369357 2026] [proxy_fcgi:error] [pid 64998:tid 65020] [client 20.251.36.110:29192] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 15:51:44.632718 2026] [:error] [pid 64998:tid 65023] [client 20.251.36.110:29192] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/config.php"] [unique_id "aenPkIV5EysYcTLjmwjmKQAAAdU"]
[Thu Apr 23 15:51:46.826887 2026] [:error] [pid 64967:tid 64973] [client 20.251.36.110:39324] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/config.php"] [unique_id "aenPkoAV4GfOOdX8QzpWKQAAAYQ"]
[Thu Apr 23 15:51:50.307294 2026] [:error] [pid 42972:tid 43017] [client 20.251.36.110:2083] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/config.php"] [unique_id "aenPlsOAb-3sOknsk4e8lAAAAEE"]
[Thu Apr 23 15:51:51.166292 2026] [:error] [pid 42972:tid 43028] [client 20.251.36.110:55346] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/config.php"] [unique_id "aenPl8OAb-3sOknsk4e8lgAAAEw"]
[Thu Apr 23 15:51:56.125951 2026] [:error] [pid 42972:tid 43035] [client 20.251.36.110:2643] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xltt.php"] [unique_id "aenPnMOAb-3sOknsk4e8pgAAAFM"]
[Thu Apr 23 15:52:02.014835 2026] [:error] [pid 42973:tid 43058] [client 20.251.36.110:45095] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xltt.php"] [unique_id "aenPom6I0QqmmmLTHE26dgAAAI8"]
[Thu Apr 23 15:52:04.562855 2026] [:error] [pid 42973:tid 43050] [client 20.251.36.110:51635] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xltt.php"] [unique_id "aenPpG6I0QqmmmLTHE26fAAAAIc"]
[Thu Apr 23 15:52:08.904120 2026] [:error] [pid 42971:tid 43001] [client 20.251.36.110:2168] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/sadcut1.php"] [unique_id "aenPqDEP2_5RswrH8bEIlQAAAA8"]
[Thu Apr 23 15:52:09.988346 2026] [:error] [pid 42973:tid 43043] [client 20.251.36.110:24748] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/sadcut1.php"] [unique_id "aenPqW6I0QqmmmLTHE26igAAAIA"]
[Thu Apr 23 15:52:10.665813 2026] [:error] [pid 59700:tid 59718] [client 20.251.36.110:52939] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/sadcut1.php"] [unique_id "aenPqpXyGZJFeAIDWtnkeQAAAVA"]
[Thu Apr 23 15:52:11.327020 2026] [:error] [pid 59700:tid 59710] [client 20.251.36.110:49720] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/sadcut1.php"] [unique_id "aenPq5XyGZJFeAIDWtnkegAAAUg"]
[Thu Apr 23 15:52:13.377675 2026] [:error] [pid 46953:tid 46962] [client 20.251.36.110:3013] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/dx.php"] [unique_id "aenPrUnlpdHh-P6wKboC9gAAAkY"]
[Thu Apr 23 15:52:14.107962 2026] [:error] [pid 59700:tid 59708] [client 20.251.36.110:51655] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/dx.php"] [unique_id "aenPrpXyGZJFeAIDWtnkfQAAAUY"]
[Thu Apr 23 15:52:15.173395 2026] [:error] [pid 42972:tid 43033] [client 20.251.36.110:51680] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/dx.php"] [unique_id "aenPr8OAb-3sOknsk4e8vQAAAFE"]
[Thu Apr 23 15:52:15.839070 2026] [:error] [pid 64967:tid 64993] [client 20.251.36.110:51055] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/dx.php"] [unique_id "aenPr4AV4GfOOdX8QzpWKwAAAZg"]
[Thu Apr 23 15:52:16.876482 2026] [:error] [pid 64967:tid 64989] [client 20.251.36.110:51064] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xff.php"] [unique_id "aenPsIAV4GfOOdX8QzpWLAAAAZQ"]
[Thu Apr 23 15:52:18.468124 2026] [:error] [pid 46953:tid 46958] [client 20.251.36.110:21315] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xff.php"] [unique_id "aenPsknlpdHh-P6wKboDAgAAAkI"]
[Thu Apr 23 15:52:20.298406 2026] [:error] [pid 42972:tid 43025] [client 20.251.36.110:29257] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xff.php"] [unique_id "aenPtMOAb-3sOknsk4e8vwAAAEk"]
[Thu Apr 23 15:52:21.997822 2026] [:error] [pid 43083:tid 43095] [client 20.251.36.110:46428] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xff.php"] [unique_id "aenPtTC5hrvNXosL83JPcQAAAMo"]
[Thu Apr 23 15:52:23.091355 2026] [:error] [pid 43083:tid 43100] [client 20.251.36.110:62654] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wglum1.php"] [unique_id "aenPtzC5hrvNXosL83JPcwAAAM8"]
[Thu Apr 23 15:52:25.394453 2026] [:error] [pid 64998:tid 65012] [client 20.251.36.110:36940] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wglum1.php"] [unique_id "aenPuYV5EysYcTLjmwjmPQAAAco"]
[Thu Apr 23 15:52:27.392399 2026] [:error] [pid 64998:tid 65023] [client 20.251.36.110:44485] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wglum1.php"] [unique_id "aenPu4V5EysYcTLjmwjmPgAAAdU"]
[Thu Apr 23 15:52:30.163896 2026] [:error] [pid 43083:tid 43109] [client 20.251.36.110:36962] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wglum1.php"] [unique_id "aenPvjC5hrvNXosL83JPdgAAANg"]
[Thu Apr 23 15:52:32.010985 2026] [:error] [pid 64998:tid 65022] [client 20.251.36.110:54801] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ng.php"] [unique_id "aenPwIV5EysYcTLjmwjmRgAAAdQ"]
[Thu Apr 23 15:52:33.697744 2026] [:error] [pid 42972:tid 43029] [client 20.251.36.110:45145] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ng.php"] [unique_id "aenPwcOAb-3sOknsk4e8yAAAAE0"]
[Thu Apr 23 15:52:35.264597 2026] [:error] [pid 42972:tid 43032] [client 20.251.36.110:26040] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ng.php"] [unique_id "aenPw8OAb-3sOknsk4e8zwAAAFA"]
[Thu Apr 23 15:52:36.277490 2026] [:error] [pid 42972:tid 43024] [client 20.251.36.110:54786] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ng.php"] [unique_id "aenPxMOAb-3sOknsk4e80wAAAEg"]
[Thu Apr 23 15:52:37.085100 2026] [:error] [pid 42973:tid 43058] [client 20.251.36.110:26001] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wgift1.php"] [unique_id "aenPxW6I0QqmmmLTHE26tgAAAI8"]
[Thu Apr 23 15:52:40.090857 2026] [:error] [pid 42973:tid 43045] [client 20.251.36.110:45127] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wgift1.php"] [unique_id "aenPyG6I0QqmmmLTHE26uQAAAII"]
[Thu Apr 23 15:52:43.283636 2026] [:error] [pid 46953:tid 46973] [client 20.251.36.110:38219] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wgift1.php"] [unique_id "aenPy0nlpdHh-P6wKboDCAAAAlE"]
[Thu Apr 23 15:52:47.210942 2026] [proxy_fcgi:error] [pid 59700:tid 59707] [client 20.251.36.110:53566] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 15:52:47.473157 2026] [proxy_fcgi:error] [pid 59700:tid 59715] [client 20.251.36.110:53566] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 15:52:47.997935 2026] [proxy_fcgi:error] [pid 59700:tid 59703] [client 20.251.36.110:53566] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 15:52:48.259488 2026] [proxy_fcgi:error] [pid 59700:tid 59712] [client 20.251.36.110:53566] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 15:52:48.538184 2026] [proxy_fcgi:error] [pid 59700:tid 59714] [client 20.251.36.110:53566] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 15:52:48.799693 2026] [proxy_fcgi:error] [pid 59700:tid 59702] [client 20.251.36.110:53566] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 15:52:49.061655 2026] [proxy_fcgi:error] [pid 59700:tid 59719] [client 20.251.36.110:53566] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 15:52:49.325744 2026] [proxy_fcgi:error] [pid 59700:tid 59723] [client 20.251.36.110:53566] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 15:52:49.602940 2026] [proxy_fcgi:error] [pid 59700:tid 59725] [client 20.251.36.110:53566] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 15:52:49.864299 2026] [proxy_fcgi:error] [pid 59700:tid 59709] [client 20.251.36.110:53566] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 15:52:50.122565 2026] [:error] [pid 59700:tid 59718] [client 20.251.36.110:53566] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/doc.php"] [unique_id "aenP0pXyGZJFeAIDWtnkmwAAAVA"]
[Thu Apr 23 15:52:51.967637 2026] [:error] [pid 42972:tid 43034] [client 20.251.36.110:53551] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/doc.php"] [unique_id "aenP08OAb-3sOknsk4e85wAAAFI"]
[Thu Apr 23 15:52:55.040443 2026] [:error] [pid 42973:tid 43050] [client 20.251.36.110:65388] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/doc.php"] [unique_id "aenP126I0QqmmmLTHE26xwAAAIc"]
[Thu Apr 23 15:52:57.288739 2026] [:error] [pid 25635:tid 25647] [client 20.251.36.110:63105] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/doc.php"] [unique_id "aenP2cRxv6UsgRGKB3IbnQAAAQg"]
[Thu Apr 23 15:52:59.904720 2026] [:error] [pid 65000:tid 65048] [client 20.251.36.110:61966] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xper1.php"] [unique_id "aenP276vRb9j6psK2Za2MAAAAg8"]
[Thu Apr 23 15:53:04.029627 2026] [:error] [pid 42972:tid 43039] [client 20.251.36.110:63127] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xper1.php"] [unique_id "aenP4MOAb-3sOknsk4e9AwAAAFc"]
[Thu Apr 23 15:53:05.955520 2026] [:error] [pid 64998:tid 65024] [client 20.251.36.110:26660] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xper1.php"] [unique_id "aenP4YV5EysYcTLjmwjmYgAAAdY"]
[Thu Apr 23 15:53:07.773044 2026] [:error] [pid 64998:tid 65012] [client 20.251.36.110:63123] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xper1.php"] [unique_id "aenP44V5EysYcTLjmwjmaAAAAco"]
[Thu Apr 23 15:53:08.882053 2026] [:error] [pid 43083:tid 43103] [client 20.251.36.110:65380] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/2.php"] [unique_id "aenP5DC5hrvNXosL83JPgAAAANI"]
[Thu Apr 23 15:53:11.652028 2026] [:error] [pid 42973:tid 43053] [client 20.251.36.110:26666] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/2.php"] [unique_id "aenP526I0QqmmmLTHE261QAAAIo"]
[Thu Apr 23 15:53:14.876410 2026] [:error] [pid 42972:tid 43028] [client 20.251.36.110:55934] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/2.php"] [unique_id "aenP6sOAb-3sOknsk4e9DwAAAEw"]
[Thu Apr 23 15:53:16.596754 2026] [:error] [pid 42973:tid 43046] [client 20.251.36.110:41866] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/2.php"] [unique_id "aenP7G6I0QqmmmLTHE262wAAAIM"]
[Thu Apr 23 15:53:18.505585 2026] [:error] [pid 42973:tid 43047] [client 20.251.36.110:65334] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/gelio1.php"] [unique_id "aenP7m6I0QqmmmLTHE265QAAAIQ"]
[Thu Apr 23 15:53:24.837198 2026] [:error] [pid 42973:tid 43051] [client 20.251.36.110:24794] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/gelio1.php"] [unique_id "aenP9G6I0QqmmmLTHE26-QAAAIg"]
[Thu Apr 23 15:53:28.155582 2026] [:error] [pid 65000:tid 65043] [client 20.251.36.110:64716] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/gelio1.php"] [unique_id "aenP-L6vRb9j6psK2Za2QgAAAgo"]
[Thu Apr 23 15:53:30.724792 2026] [:error] [pid 43083:tid 43091] [client 20.251.36.110:55890] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/gelio1.php"] [unique_id "aenP-jC5hrvNXosL83JPhgAAAMY"]
[Thu Apr 23 15:53:32.112483 2026] [:error] [pid 64998:tid 65016] [client 20.251.36.110:65293] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws82.php"] [unique_id "aenP_IV5EysYcTLjmwjmfQAAAc4"]
[Thu Apr 23 15:53:34.307777 2026] [:error] [pid 64998:tid 65012] [client 20.251.36.110:46846] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws82.php"] [unique_id "aenP_oV5EysYcTLjmwjmgwAAAco"]
[Thu Apr 23 15:53:35.449695 2026] [:error] [pid 46953:tid 46968] [client 20.251.36.110:63110] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws82.php"] [unique_id "aenP_0nlpdHh-P6wKboDGAAAAkw"]
[Thu Apr 23 15:53:38.786409 2026] [:error] [pid 42973:tid 43062] [client 20.251.36.110:46818] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws82.php"] [unique_id "aenQAm6I0QqmmmLTHE27BQAAAJM"]
[Thu Apr 23 15:53:45.219213 2026] [:error] [pid 46953:tid 46970] [client 20.251.36.110:58119] [client 20.251.36.110] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/theme-compat/wp-login.php"] [unique_id "aenQCUnlpdHh-P6wKboDIgAAAk4"]
[Thu Apr 23 15:53:48.219045 2026] [:error] [pid 64967:tid 64974] [client 20.251.36.110:41907] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-class.php"] [unique_id "aenQDIAV4GfOOdX8QzpWQQAAAYU"]
[Thu Apr 23 15:53:50.502862 2026] [proxy_fcgi:error] [pid 59700:tid 59720] [client 20.251.36.110:24800] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 15:53:50.764720 2026] [proxy_fcgi:error] [pid 59700:tid 59703] [client 20.251.36.110:24800] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 15:53:51.027946 2026] [proxy_fcgi:error] [pid 59700:tid 59717] [client 20.251.36.110:24800] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 15:53:51.290484 2026] [proxy_fcgi:error] [pid 59700:tid 59709] [client 20.251.36.110:24800] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 15:53:51.552069 2026] [proxy_fcgi:error] [pid 59700:tid 59718] [client 20.251.36.110:24800] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 15:53:51.812619 2026] [proxy_fcgi:error] [pid 59700:tid 59706] [client 20.251.36.110:24800] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 15:53:52.081869 2026] [proxy_fcgi:error] [pid 59700:tid 59710] [client 20.251.36.110:24800] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 15:53:52.344203 2026] [proxy_fcgi:error] [pid 59700:tid 59726] [client 20.251.36.110:24800] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 15:53:52.607212 2026] [proxy_fcgi:error] [pid 59700:tid 59724] [client 20.251.36.110:24800] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 15:53:52.869692 2026] [proxy_fcgi:error] [pid 59700:tid 59708] [client 20.251.36.110:24800] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 15:53:53.131385 2026] [proxy_fcgi:error] [pid 59700:tid 59722] [client 20.251.36.110:24800] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 15:53:53.399343 2026] [:error] [pid 59700:tid 59704] [client 20.251.36.110:24800] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/packsin1.php"] [unique_id "aenQEZXyGZJFeAIDWtnkwQAAAUI"]
[Thu Apr 23 15:53:54.868956 2026] [:error] [pid 65000:tid 65049] [client 20.251.36.110:55849] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/packsin1.php"] [unique_id "aenQEr6vRb9j6psK2Za2WAAAAhA"]
[Thu Apr 23 15:53:58.017163 2026] [:error] [pid 64998:tid 65014] [client 20.251.36.110:26628] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/packsin1.php"] [unique_id "aenQFoV5EysYcTLjmwjmlgAAAcw"]
[Thu Apr 23 15:53:59.408806 2026] [:error] [pid 59700:tid 59723] [client 20.251.36.110:43879] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/packsin1.php"] [unique_id "aenQF5XyGZJFeAIDWtnkyQAAAVU"]
[Thu Apr 23 15:54:00.095305 2026] [:error] [pid 64998:tid 65025] [client 20.251.36.110:55886] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xs.php"] [unique_id "aenQGIV5EysYcTLjmwjmlwAAAdc"]
[Thu Apr 23 15:54:00.744981 2026] [:error] [pid 64998:tid 65003] [client 20.251.36.110:2478] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xs.php"] [unique_id "aenQGIV5EysYcTLjmwjmmQAAAcE"]
[Thu Apr 23 15:54:01.535094 2026] [:error] [pid 25635:tid 25652] [client 20.251.36.110:64724] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xs.php"] [unique_id "aenQGcRxv6UsgRGKB3IbuQAAAQ0"]
[Thu Apr 23 15:54:02.329098 2026] [:error] [pid 42973:tid 43056] [client 20.251.36.110:64668] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xs.php"] [unique_id "aenQGm6I0QqmmmLTHE27DgAAAI0"]
[Thu Apr 23 15:54:03.441034 2026] [:error] [pid 42973:tid 43067] [client 20.251.36.110:64759] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/img.php"] [unique_id "aenQG26I0QqmmmLTHE27FQAAAJg"]
[Thu Apr 23 15:54:07.166848 2026] [:error] [pid 25635:tid 25639] [client 20.251.36.110:2494] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/img.php"] [unique_id "aenQH8Rxv6UsgRGKB3IbwAAAAQA"]
[Thu Apr 23 15:54:10.109613 2026] [:error] [pid 65000:tid 65043] [client 20.251.36.110:58150] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/img.php"] [unique_id "aenQIr6vRb9j6psK2Za2XQAAAgo"]
[Thu Apr 23 15:54:12.079191 2026] [:error] [pid 25635:tid 25644] [client 20.251.36.110:58169] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/img.php"] [unique_id "aenQJMRxv6UsgRGKB3IbwQAAAQU"]
[Thu Apr 23 15:54:13.812961 2026] [:error] [pid 42973:tid 43061] [client 20.251.36.110:41875] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/chosen.php"] [unique_id "aenQJW6I0QqmmmLTHE27GwAAAJI"]
[Thu Apr 23 15:54:17.847843 2026] [:error] [pid 65000:tid 65044] [client 20.251.36.110:46818] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/chosen.php"] [unique_id "aenQKb6vRb9j6psK2Za2ZAAAAgs"]
[Thu Apr 23 15:54:21.681222 2026] [:error] [pid 42972:tid 43023] [client 20.251.36.110:58231] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/chosen.php"] [unique_id "aenQLcOAb-3sOknsk4e9LQAAAEc"]
[Thu Apr 23 15:54:23.214486 2026] [:error] [pid 42972:tid 43016] [client 20.251.36.110:41870] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/chosen.php"] [unique_id "aenQL8OAb-3sOknsk4e9MgAAAEA"]
[Thu Apr 23 15:54:24.138869 2026] [:error] [pid 42972:tid 43029] [client 20.251.36.110:58115] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/maxro.php"] [unique_id "aenQMMOAb-3sOknsk4e9NAAAAE0"]
[Thu Apr 23 15:54:25.038995 2026] [:error] [pid 43083:tid 43103] [client 20.251.36.110:55869] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/maxro.php"] [unique_id "aenQMTC5hrvNXosL83JPpwAAANI"]
[Thu Apr 23 15:54:26.550977 2026] [:error] [pid 25635:tid 25648] [client 20.251.36.110:64723] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/maxro.php"] [unique_id "aenQMsRxv6UsgRGKB3IbxgAAAQk"]
[Thu Apr 23 15:54:31.436437 2026] [:error] [pid 42973:tid 43043] [client 20.251.36.110:24817] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/maxro.php"] [unique_id "aenQN26I0QqmmmLTHE27LwAAAIA"]
[Thu Apr 23 15:54:34.255188 2026] [:error] [pid 42972:tid 43032] [client 20.251.36.110:58154] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/a7.php"] [unique_id "aenQOsOAb-3sOknsk4e9YQAAAFA"]
[Thu Apr 23 15:54:37.556407 2026] [:error] [pid 65000:tid 65056] [client 20.251.36.110:32438] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/a7.php"] [unique_id "aenQPb6vRb9j6psK2Za2awAAAhc"]
[Thu Apr 23 15:54:43.827262 2026] [:error] [pid 25635:tid 25658] [client 20.251.36.110:41918] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/a7.php"] [unique_id "aenQQ8Rxv6UsgRGKB3IbzwAAARM"]
[Thu Apr 23 15:54:45.648100 2026] [:error] [pid 42971:tid 42996] [client 20.251.36.110:57723] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/a7.php"] [unique_id "aenQRTEP2_5RswrH8bEJFQAAAAo"]
[Thu Apr 23 15:54:49.842065 2026] [:error] [pid 42971:tid 43010] [client 20.251.36.110:55855] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-block.php"] [unique_id "aenQSTEP2_5RswrH8bEJFwAAABg"]
[Thu Apr 23 15:54:55.990817 2026] [proxy_fcgi:error] [pid 42972:tid 43030] [client 20.251.36.110:58124] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 15:54:56.254149 2026] [proxy_fcgi:error] [pid 42972:tid 43032] [client 20.251.36.110:58124] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 15:54:56.516022 2026] [proxy_fcgi:error] [pid 42972:tid 43023] [client 20.251.36.110:58124] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 15:54:56.776943 2026] [proxy_fcgi:error] [pid 42972:tid 43026] [client 20.251.36.110:58124] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 15:54:57.047838 2026] [proxy_fcgi:error] [pid 42972:tid 43017] [client 20.251.36.110:58124] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 15:54:57.350419 2026] [proxy_fcgi:error] [pid 42972:tid 43040] [client 20.251.36.110:58124] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 15:54:57.625126 2026] [proxy_fcgi:error] [pid 42972:tid 43031] [client 20.251.36.110:58124] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 15:54:57.886766 2026] [proxy_fcgi:error] [pid 42972:tid 43037] [client 20.251.36.110:58124] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 15:54:58.150718 2026] [proxy_fcgi:error] [pid 42972:tid 43034] [client 20.251.36.110:58124] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 15:54:58.410782 2026] [proxy_fcgi:error] [pid 42972:tid 43022] [client 20.251.36.110:58124] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 15:54:58.682663 2026] [proxy_fcgi:error] [pid 42972:tid 43025] [client 20.251.36.110:58124] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 15:54:58.950099 2026] [:error] [pid 42972:tid 43030] [client 20.251.36.110:58124] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/pp.php"] [unique_id "aenQUsOAb-3sOknsk4e9pQAAAE4"]
[Thu Apr 23 15:55:02.356734 2026] [:error] [pid 59700:tid 59714] [client 20.251.36.110:24805] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/pp.php"] [unique_id "aenQVpXyGZJFeAIDWtnk7AAAAUw"]
[Thu Apr 23 15:55:07.989027 2026] [:error] [pid 42972:tid 43022] [client 20.251.36.110:64715] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/pp.php"] [unique_id "aenQW8OAb-3sOknsk4e9rQAAAEY"]
[Thu Apr 23 15:55:09.220323 2026] [:error] [pid 65000:tid 65049] [client 20.251.36.110:55865] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/pp.php"] [unique_id "aenQXb6vRb9j6psK2Za2fgAAAhA"]
[Thu Apr 23 15:55:10.783270 2026] [:error] [pid 59700:tid 59712] [client 20.251.36.110:2480] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/yuzuru1.php"] [unique_id "aenQXpXyGZJFeAIDWtnk9AAAAUo"]
[Thu Apr 23 15:55:13.607086 2026] [:error] [pid 64998:tid 65019] [client 20.251.36.110:2693] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/yuzuru1.php"] [unique_id "aenQYYV5EysYcTLjmwjmuwAAAdE"]
[Thu Apr 23 15:55:14.772624 2026] [:error] [pid 64998:tid 65014] [client 20.251.36.110:24774] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/yuzuru1.php"] [unique_id "aenQYoV5EysYcTLjmwjmvgAAAcw"]
[Thu Apr 23 15:55:18.358256 2026] [:error] [pid 65000:tid 65042] [client 20.251.36.110:2339] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/yuzuru1.php"] [unique_id "aenQZr6vRb9j6psK2Za2hQAAAgk"]
[Thu Apr 23 15:55:20.140746 2026] [:error] [pid 65000:tid 65053] [client 20.251.36.110:64710] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/son1.php"] [unique_id "aenQaL6vRb9j6psK2Za2hgAAAhQ"]
[Thu Apr 23 15:55:21.551343 2026] [:error] [pid 43083:tid 43106] [client 20.251.36.110:64659] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/son1.php"] [unique_id "aenQaTC5hrvNXosL83JP0gAAANU"]
[Thu Apr 23 15:55:26.904413 2026] [:error] [pid 64967:tid 64978] [client 20.251.36.110:23175] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/son1.php"] [unique_id "aenQboAV4GfOOdX8QzpWXgAAAYk"]
[Thu Apr 23 15:55:36.590661 2026] [:error] [pid 42971:tid 43010] [client 20.251.36.110:2747] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/tx79.php"] [unique_id "aenQeDEP2_5RswrH8bEJLgAAABg"]
[Thu Apr 23 15:55:47.841052 2026] [:error] [pid 42971:tid 43000] [client 20.251.36.110:45095] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/tx79.php"] [unique_id "aenQgzEP2_5RswrH8bEJRQAAAA4"]
[Thu Apr 23 15:55:52.849325 2026] [:error] [pid 59700:tid 59702] [client 20.251.36.110:59470] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws80.php"] [unique_id "aenQiJXyGZJFeAIDWtnlBQAAAUA"]
[Thu Apr 23 15:55:54.089841 2026] [:error] [pid 64998:tid 65004] [client 20.251.36.110:41307] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws80.php"] [unique_id "aenQioV5EysYcTLjmwjm8QAAAcI"]
[Thu Apr 23 15:55:56.786594 2026] [:error] [pid 64998:tid 65006] [client 20.251.36.110:19414] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws80.php"] [unique_id "aenQjIV5EysYcTLjmwjm9gAAAcQ"]
[Thu Apr 23 15:55:59.025696 2026] [proxy_fcgi:error] [pid 64998:tid 65022] [client 20.251.36.110:41309] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 15:55:59.288609 2026] [proxy_fcgi:error] [pid 64998:tid 65023] [client 20.251.36.110:41309] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 15:55:59.551505 2026] [proxy_fcgi:error] [pid 64998:tid 65002] [client 20.251.36.110:41309] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 15:55:59.813324 2026] [proxy_fcgi:error] [pid 64998:tid 65019] [client 20.251.36.110:41309] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 20:57:43.777663 2026] [proxy_fcgi:error] [pid 65000:tid 65031] [client 20.238.82.232:23603] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 20:57:44.049168 2026] [proxy_fcgi:error] [pid 65000:tid 65037] [client 20.238.82.232:23603] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 20:57:44.319712 2026] [proxy_fcgi:error] [pid 65000:tid 65049] [client 20.238.82.232:23603] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 20:57:44.590526 2026] [proxy_fcgi:error] [pid 65000:tid 65050] [client 20.238.82.232:23603] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 20:57:44.860609 2026] [proxy_fcgi:error] [pid 65000:tid 65041] [client 20.238.82.232:23603] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 20:57:45.131499 2026] [proxy_fcgi:error] [pid 65000:tid 65030] [client 20.238.82.232:23603] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 20:57:45.406727 2026] [proxy_fcgi:error] [pid 65000:tid 65029] [client 20.238.82.232:23603] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 20:57:45.679780 2026] [proxy_fcgi:error] [pid 65000:tid 65048] [client 20.238.82.232:23603] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 20:57:45.957301 2026] [proxy_fcgi:error] [pid 65000:tid 65047] [client 20.238.82.232:23603] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 20:57:46.263367 2026] [proxy_fcgi:error] [pid 65000:tid 65045] [client 20.238.82.232:23603] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 20:57:46.558849 2026] [:error] [pid 65000:tid 65044] [client 20.238.82.232:23603] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xxa.php"] [unique_id "aeoXSr6vRb9j6psK2ZZxbwAAAgs"]
[Thu Apr 23 20:57:49.396085 2026] [:error] [pid 65000:tid 65031] [client 20.238.82.232:23605] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xxa.php"] [unique_id "aeoXTb6vRb9j6psK2ZZxegAAAgI"]
[Thu Apr 23 20:57:50.893640 2026] [:error] [pid 65000:tid 65041] [client 20.238.82.232:54078] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xxa.php"] [unique_id "aeoXTr6vRb9j6psK2ZZxfgAAAgg"]
[Thu Apr 23 20:57:53.121865 2026] [:error] [pid 42973:tid 43061] [client 20.238.82.232:29353] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xxa.php"] [unique_id "aeoXUW6I0QqmmmLTHE0RwgAAAJI"]
[Thu Apr 23 20:57:55.801782 2026] [:error] [pid 64967:tid 64988] [client 20.238.82.232:40066] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a1.php"] [unique_id "aeoXU4AV4GfOOdX8Qzpy4QAAAZM"]
[Thu Apr 23 20:57:57.919541 2026] [:error] [pid 42973:tid 43047] [client 20.238.82.232:9052] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a1.php"] [unique_id "aeoXVW6I0QqmmmLTHE0RzAAAAIQ"]
[Thu Apr 23 20:57:59.545564 2026] [:error] [pid 64998:tid 65020] [client 20.238.82.232:22975] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a1.php"] [unique_id "aeoXV4V5EysYcTLjmwhsqQAAAdI"]
[Thu Apr 23 20:58:01.313399 2026] [:error] [pid 42973:tid 43047] [client 20.238.82.232:64867] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a1.php"] [unique_id "aeoXWW6I0QqmmmLTHE0R2gAAAIQ"]
[Thu Apr 23 20:58:03.920109 2026] [:error] [pid 65000:tid 65057] [client 20.238.82.232:9043] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zxcs.php"] [unique_id "aeoXW76vRb9j6psK2ZZxnQAAAhg"]
[Thu Apr 23 20:58:07.405658 2026] [:error] [pid 64998:tid 65007] [client 20.238.82.232:9083] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zxcs.php"] [unique_id "aeoXX4V5EysYcTLjmwhstgAAAcU"]
[Thu Apr 23 20:58:10.241400 2026] [:error] [pid 65000:tid 65047] [client 20.238.82.232:30035] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zxcs.php"] [unique_id "aeoXYr6vRb9j6psK2ZZxqgAAAg4"]
[Thu Apr 23 20:58:12.709615 2026] [:error] [pid 46953:tid 46974] [client 20.238.82.232:8032] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zxcs.php"] [unique_id "aeoXZEnlpdHh-P6wKboz8QAAAlI"]
[Thu Apr 23 20:58:14.092213 2026] [:error] [pid 42972:tid 43016] [client 20.238.82.232:65242] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/s1.php"] [unique_id "aeoXZsOAb-3sOknsk4cxPAAAAEA"]
[Thu Apr 23 20:58:15.894806 2026] [:error] [pid 43083:tid 43096] [client 20.238.82.232:3209] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/s1.php"] [unique_id "aeoXZzC5hrvNXosL83J0bwAAAMs"]
[Thu Apr 23 20:58:17.433787 2026] [:error] [pid 59700:tid 59725] [client 20.238.82.232:8006] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/s1.php"] [unique_id "aeoXaZXyGZJFeAIDWtkjqAAAAVc"]
[Thu Apr 23 20:58:19.023171 2026] [:error] [pid 64998:tid 65003] [client 20.238.82.232:32037] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/s1.php"] [unique_id "aeoXa4V5EysYcTLjmwhs0gAAAcE"]
[Thu Apr 23 20:58:20.782622 2026] [:error] [pid 59700:tid 59707] [client 20.238.82.232:3207] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-kz.php"] [unique_id "aeoXbJXyGZJFeAIDWtkjrQAAAUU"]
[Thu Apr 23 20:58:22.860472 2026] [:error] [pid 42972:tid 43029] [client 20.238.82.232:30069] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-kz.php"] [unique_id "aeoXbsOAb-3sOknsk4cxSAAAAE0"]
[Thu Apr 23 20:58:24.663266 2026] [:error] [pid 64998:tid 65005] [client 20.238.82.232:3149] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-kz.php"] [unique_id "aeoXcIV5EysYcTLjmwhs3wAAAcM"]
[Thu Apr 23 20:58:27.779478 2026] [:error] [pid 42973:tid 43053] [client 20.238.82.232:34642] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-kz.php"] [unique_id "aeoXc26I0QqmmmLTHE0R-gAAAIo"]
[Thu Apr 23 20:58:30.481138 2026] [:error] [pid 42972:tid 43020] [client 20.238.82.232:65279] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wmore1.php"] [unique_id "aeoXdsOAb-3sOknsk4cxVQAAAEQ"]
[Thu Apr 23 20:58:31.756513 2026] [:error] [pid 46953:tid 46973] [client 20.238.82.232:56398] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wmore1.php"] [unique_id "aeoXd0nlpdHh-P6wKbo0BgAAAlE"]
[Thu Apr 23 20:58:33.009089 2026] [:error] [pid 65000:tid 65054] [client 20.238.82.232:7942] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wmore1.php"] [unique_id "aeoXeb6vRb9j6psK2ZZx2gAAAhU"]
[Thu Apr 23 20:58:34.785176 2026] [:error] [pid 65000:tid 65052] [client 20.238.82.232:16713] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wmore1.php"] [unique_id "aeoXer6vRb9j6psK2ZZx4QAAAhM"]
[Thu Apr 23 20:58:37.467174 2026] [:error] [pid 59700:tid 59703] [client 20.238.82.232:55088] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/saorix1.php"] [unique_id "aeoXfZXyGZJFeAIDWtkjsgAAAUE"]
[Thu Apr 23 20:58:41.225931 2026] [:error] [pid 65000:tid 65031] [client 20.238.82.232:7497] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/saorix1.php"] [unique_id "aeoXgb6vRb9j6psK2ZZyBQAAAgI"]
[Thu Apr 23 20:58:43.431918 2026] [:error] [pid 65000:tid 65046] [client 20.238.82.232:53090] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/saorix1.php"] [unique_id "aeoXg76vRb9j6psK2ZZyEwAAAg0"]
[Thu Apr 23 20:58:44.995353 2026] [:error] [pid 42972:tid 43031] [client 20.238.82.232:28115] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/saorix1.php"] [unique_id "aeoXhMOAb-3sOknsk4cxfwAAAE8"]
[Thu Apr 23 20:58:46.459611 2026] [proxy_fcgi:error] [pid 43083:tid 43093] [client 20.238.82.232:64517] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 20:58:46.713723 2026] [proxy_fcgi:error] [pid 43083:tid 43085] [client 20.238.82.232:64517] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 20:58:47.487759 2026] [proxy_fcgi:error] [pid 43083:tid 43099] [client 20.238.82.232:64517] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 20:58:47.745849 2026] [proxy_fcgi:error] [pid 43083:tid 43105] [client 20.238.82.232:64517] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 20:58:48.007368 2026] [proxy_fcgi:error] [pid 43083:tid 43100] [client 20.238.82.232:64517] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 20:58:48.261780 2026] [proxy_fcgi:error] [pid 43083:tid 43086] [client 20.238.82.232:64517] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 20:58:48.517602 2026] [proxy_fcgi:error] [pid 43083:tid 43096] [client 20.238.82.232:64517] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 20:58:48.774297 2026] [proxy_fcgi:error] [pid 43083:tid 43103] [client 20.238.82.232:64517] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 20:58:49.028808 2026] [proxy_fcgi:error] [pid 43083:tid 43088] [client 20.238.82.232:64517] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 20:58:49.283384 2026] [proxy_fcgi:error] [pid 43083:tid 43104] [client 20.238.82.232:64517] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 20:58:49.537631 2026] [proxy_fcgi:error] [pid 43083:tid 43092] [client 20.238.82.232:64517] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 20:58:49.881581 2026] [:error] [pid 43083:tid 43091] [client 20.238.82.232:64517] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ayk.php"] [unique_id "aeoXiTC5hrvNXosL83J0jwAAAMY"]
[Thu Apr 23 20:58:52.404226 2026] [:error] [pid 65000:tid 65053] [client 20.238.82.232:9810] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ayk.php"] [unique_id "aeoXjL6vRb9j6psK2ZZyLQAAAhQ"]
[Thu Apr 23 20:58:53.916215 2026] [:error] [pid 46953:tid 46972] [client 20.238.82.232:26825] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ayk.php"] [unique_id "aeoXjUnlpdHh-P6wKbo0GwAAAlA"]
[Thu Apr 23 20:59:02.281931 2026] [:error] [pid 59700:tid 59717] [client 20.238.82.232:44310] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ayk.php"] [unique_id "aeoXlpXyGZJFeAIDWtkjxQAAAU8"]
[Thu Apr 23 20:59:04.358423 2026] [:error] [pid 64998:tid 65020] [client 20.238.82.232:35845] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wps.php"] [unique_id "aeoXmIV5EysYcTLjmwhtOAAAAdI"]
[Thu Apr 23 20:59:06.222734 2026] [:error] [pid 42972:tid 43029] [client 20.238.82.232:58159] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wps.php"] [unique_id "aeoXmsOAb-3sOknsk4cxpAAAAE0"]
[Thu Apr 23 20:59:08.763954 2026] [:error] [pid 65000:tid 65046] [client 20.238.82.232:33293] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wps.php"] [unique_id "aeoXnL6vRb9j6psK2ZZyXwAAAg0"]
[Thu Apr 23 20:59:11.506706 2026] [:error] [pid 64998:tid 65013] [client 20.238.82.232:14391] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wps.php"] [unique_id "aeoXn4V5EysYcTLjmwhtQAAAAcs"]
[Thu Apr 23 20:59:12.698705 2026] [:error] [pid 42973:tid 43060] [client 20.238.82.232:42127] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f35.php"] [unique_id "aeoXoG6I0QqmmmLTHE0SQwAAAJE"]
[Thu Apr 23 20:59:14.014579 2026] [:error] [pid 65000:tid 65031] [client 20.238.82.232:35843] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f35.php"] [unique_id "aeoXor6vRb9j6psK2ZZycQAAAgI"]
[Thu Apr 23 20:59:15.150500 2026] [:error] [pid 42972:tid 43024] [client 20.238.82.232:37150] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f35.php"] [unique_id "aeoXo8OAb-3sOknsk4cx8AAAAEg"]
[Thu Apr 23 20:59:16.585044 2026] [:error] [pid 65000:tid 65050] [client 20.238.82.232:54549] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f35.php"] [unique_id "aeoXpL6vRb9j6psK2ZZydgAAAhE"]
[Thu Apr 23 20:59:17.676278 2026] [:error] [pid 65000:tid 65047] [client 20.238.82.232:3741] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/12.php"] [unique_id "aeoXpb6vRb9j6psK2ZZyfAAAAg4"]
[Thu Apr 23 20:59:19.577763 2026] [:error] [pid 65000:tid 65032] [client 20.238.82.232:7887] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/12.php"] [unique_id "aeoXp76vRb9j6psK2ZZygwAAAgM"]
[Thu Apr 23 20:59:22.910728 2026] [:error] [pid 64998:tid 65022] [client 20.238.82.232:28721] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/12.php"] [unique_id "aeoXqoV5EysYcTLjmwhtUQAAAdQ"]
[Thu Apr 23 20:59:24.211182 2026] [:error] [pid 25635:tid 25648] [client 20.238.82.232:8086] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/12.php"] [unique_id "aeoXrMRxv6UsgRGKB3IxmgAAAQk"]
[Thu Apr 23 20:59:25.858775 2026] [:error] [pid 65000:tid 65055] [client 20.238.82.232:32730] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/acp.php"] [unique_id "aeoXrb6vRb9j6psK2ZZylwAAAhY"]
[Thu Apr 23 20:59:27.212539 2026] [:error] [pid 42972:tid 43021] [client 20.238.82.232:28766] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/acp.php"] [unique_id "aeoXr8OAb-3sOknsk4cyAgAAAEU"]
[Thu Apr 23 20:59:28.406289 2026] [:error] [pid 64998:tid 65018] [client 20.238.82.232:28729] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/acp.php"] [unique_id "aeoXsIV5EysYcTLjmwhtWgAAAdA"]
[Thu Apr 23 20:59:31.931143 2026] [:error] [pid 43083:tid 43103] [client 20.238.82.232:30710] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/acp.php"] [unique_id "aeoXszC5hrvNXosL83J0ogAAANI"]
[Thu Apr 23 20:59:33.203626 2026] [:error] [pid 65000:tid 65057] [client 20.238.82.232:8137] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/link.php"] [unique_id "aeoXtb6vRb9j6psK2ZZyrwAAAhg"]
[Thu Apr 23 20:59:34.855060 2026] [:error] [pid 42972:tid 43020] [client 20.238.82.232:9541] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/link.php"] [unique_id "aeoXtsOAb-3sOknsk4cyDgAAAEQ"]
[Thu Apr 23 20:59:36.538478 2026] [:error] [pid 42972:tid 43025] [client 20.238.82.232:62181] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/link.php"] [unique_id "aeoXuMOAb-3sOknsk4cyGQAAAEk"]
[Thu Apr 23 20:59:37.548502 2026] [:error] [pid 64998:tid 65022] [client 20.238.82.232:32708] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/link.php"] [unique_id "aeoXuYV5EysYcTLjmwhtYwAAAdQ"]
[Thu Apr 23 20:59:38.617324 2026] [:error] [pid 64998:tid 65024] [client 20.238.82.232:19839] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dass.php"] [unique_id "aeoXuoV5EysYcTLjmwhtawAAAdY"]
[Thu Apr 23 20:59:39.914222 2026] [:error] [pid 42972:tid 43017] [client 20.238.82.232:8574] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dass.php"] [unique_id "aeoXu8OAb-3sOknsk4cyHwAAAEE"]
[Thu Apr 23 20:59:41.645272 2026] [:error] [pid 64998:tid 65003] [client 20.238.82.232:37837] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dass.php"] [unique_id "aeoXvYV5EysYcTLjmwhteAAAAcE"]
[Thu Apr 23 20:59:43.379642 2026] [:error] [pid 25635:tid 25644] [client 20.238.82.232:32726] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dass.php"] [unique_id "aeoXv8Rxv6UsgRGKB3IxngAAAQU"]
[Thu Apr 23 20:59:46.199865 2026] [:error] [pid 64998:tid 65007] [client 20.238.82.232:7894] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws66.php"] [unique_id "aeoXwoV5EysYcTLjmwhtkQAAAcU"]
[Thu Apr 23 20:59:48.370357 2026] [:error] [pid 64998:tid 65019] [client 20.238.82.232:37872] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws66.php"] [unique_id "aeoXxIV5EysYcTLjmwhtmwAAAdE"]
[Thu Apr 23 20:59:51.591067 2026] [proxy_fcgi:error] [pid 64998:tid 65004] [client 20.238.82.232:38976] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 20:59:51.844305 2026] [proxy_fcgi:error] [pid 64998:tid 65016] [client 20.238.82.232:38976] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 20:59:52.103129 2026] [proxy_fcgi:error] [pid 64998:tid 65015] [client 20.238.82.232:38976] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 20:59:52.361188 2026] [proxy_fcgi:error] [pid 64998:tid 65024] [client 20.238.82.232:38976] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 20:59:52.618502 2026] [:error] [pid 64998:tid 65002] [client 20.238.82.232:38976] [client 20.238.82.232] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dwelectservices.com.au"] [uri "/tiny.php"] [unique_id "aeoXyIV5EysYcTLjmwhtpwAAAcA"]
[Thu Apr 23 20:59:54.396511 2026] [proxy_fcgi:error] [pid 59700:tid 59717] [client 20.238.82.232:38988] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 20:59:54.664213 2026] [proxy_fcgi:error] [pid 59700:tid 59714] [client 20.238.82.232:38988] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 20:59:54.935490 2026] [proxy_fcgi:error] [pid 59700:tid 59725] [client 20.238.82.232:38988] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 20:59:55.206945 2026] [proxy_fcgi:error] [pid 59700:tid 59720] [client 20.238.82.232:38988] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 20:59:55.476165 2026] [proxy_fcgi:error] [pid 59700:tid 59719] [client 20.238.82.232:38988] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 20:59:55.798453 2026] [proxy_fcgi:error] [pid 59700:tid 59718] [client 20.238.82.232:38988] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 20:59:56.070476 2026] [proxy_fcgi:error] [pid 59700:tid 59715] [client 20.238.82.232:38988] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 20:59:56.335654 2026] [:error] [pid 59700:tid 59712] [client 20.238.82.232:38988] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sadcut1.php"] [unique_id "aeoXzJXyGZJFeAIDWtkj9AAAAUo"]
[Thu Apr 23 20:59:58.110039 2026] [:error] [pid 64998:tid 65014] [client 20.238.82.232:9562] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sadcut1.php"] [unique_id "aeoXzoV5EysYcTLjmwhtrwAAAcw"]
[Thu Apr 23 20:59:59.745797 2026] [:error] [pid 65000:tid 65053] [client 20.238.82.232:42874] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sadcut1.php"] [unique_id "aeoXz76vRb9j6psK2ZZy8wAAAhQ"]
[Thu Apr 23 21:00:01.474961 2026] [:error] [pid 64998:tid 65006] [client 20.238.82.232:9575] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sadcut1.php"] [unique_id "aeoX0YV5EysYcTLjmwhtswAAAcQ"]
[Thu Apr 23 21:00:02.375664 2026] [:error] [pid 42973:tid 43065] [client 20.238.82.232:30667] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dx.php"] [unique_id "aeoX0m6I0QqmmmLTHE0SfgAAAJY"]
[Thu Apr 23 21:00:04.515952 2026] [:error] [pid 65000:tid 65049] [client 20.238.82.232:39011] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dx.php"] [unique_id "aeoX1L6vRb9j6psK2ZZzEAAAAhA"]
[Thu Apr 23 21:00:06.556916 2026] [:error] [pid 65000:tid 65045] [client 20.238.82.232:28700] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dx.php"] [unique_id "aeoX1r6vRb9j6psK2ZZzHAAAAgw"]
[Thu Apr 23 21:00:08.007657 2026] [:error] [pid 65000:tid 65039] [client 20.238.82.232:12836] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dx.php"] [unique_id "aeoX2L6vRb9j6psK2ZZzJwAAAgY"]
[Thu Apr 23 21:00:09.874344 2026] [:error] [pid 64998:tid 65002] [client 20.238.82.232:48481] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xff.php"] [unique_id "aeoX2YV5EysYcTLjmwhtvAAAAcA"]
[Thu Apr 23 21:00:11.585743 2026] [:error] [pid 42972:tid 43022] [client 20.238.82.232:13884] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xff.php"] [unique_id "aeoX28OAb-3sOknsk4cyQAAAAEY"]
[Thu Apr 23 21:00:12.310194 2026] [:error] [pid 42973:tid 43049] [client 20.238.82.232:8525] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xff.php"] [unique_id "aeoX3G6I0QqmmmLTHE0SiwAAAIY"]
[Thu Apr 23 21:00:14.310991 2026] [:error] [pid 43083:tid 43103] [client 20.238.82.232:12056] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xff.php"] [unique_id "aeoX3jC5hrvNXosL83J0xQAAANI"]
[Thu Apr 23 21:00:15.918297 2026] [:error] [pid 42973:tid 43063] [client 20.238.82.232:23647] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wglum1.php"] [unique_id "aeoX326I0QqmmmLTHE0SkgAAAJQ"]
[Thu Apr 23 21:00:17.199776 2026] [:error] [pid 43083:tid 43108] [client 20.238.82.232:48507] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wglum1.php"] [unique_id "aeoX4TC5hrvNXosL83J0yQAAANc"]
[Thu Apr 23 21:00:18.978983 2026] [:error] [pid 64998:tid 65005] [client 20.238.82.232:19790] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wglum1.php"] [unique_id "aeoX4oV5EysYcTLjmwhtxwAAAcM"]
[Thu Apr 23 21:00:22.400428 2026] [:error] [pid 42972:tid 43023] [client 20.238.82.232:62112] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wglum1.php"] [unique_id "aeoX5sOAb-3sOknsk4cyRwAAAEc"]
[Thu Apr 23 21:00:24.672996 2026] [:error] [pid 65000:tid 65051] [client 20.238.82.232:23666] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ng.php"] [unique_id "aeoX6L6vRb9j6psK2ZZzagAAAhI"]
[Thu Apr 23 21:00:26.050114 2026] [:error] [pid 64998:tid 65025] [client 20.238.82.232:48470] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ng.php"] [unique_id "aeoX6oV5EysYcTLjmwht1AAAAdc"]
[Thu Apr 23 21:00:26.930210 2026] [:error] [pid 42973:tid 43049] [client 20.238.82.232:13860] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ng.php"] [unique_id "aeoX6m6I0QqmmmLTHE0SqQAAAIY"]
[Thu Apr 23 21:00:28.823061 2026] [:error] [pid 46953:tid 46958] [client 20.238.82.232:48495] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ng.php"] [unique_id "aeoX7EnlpdHh-P6wKbo0VAAAAkI"]
[Thu Apr 23 21:00:29.723965 2026] [:error] [pid 59700:tid 59709] [client 20.238.82.232:8541] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wgift1.php"] [unique_id "aeoX7ZXyGZJFeAIDWtkkEQAAAUc"]
[Thu Apr 23 21:00:31.320334 2026] [:error] [pid 43083:tid 43093] [client 20.238.82.232:62116] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wgift1.php"] [unique_id "aeoX7zC5hrvNXosL83J0zQAAAMg"]
[Thu Apr 23 21:00:32.796503 2026] [:error] [pid 65000:tid 65037] [client 20.238.82.232:23668] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wgift1.php"] [unique_id "aeoX8L6vRb9j6psK2ZZzhAAAAgQ"]
[Thu Apr 23 21:00:33.575201 2026] [:error] [pid 46953:tid 46980] [client 20.238.82.232:8083] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wgift1.php"] [unique_id "aeoX8UnlpdHh-P6wKbo0XQAAAlc"]
[Thu Apr 23 21:00:34.762684 2026] [:error] [pid 64998:tid 65006] [client 20.238.82.232:39002] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xynz.php"] [unique_id "aeoX8oV5EysYcTLjmwht4gAAAcQ"]
[Thu Apr 23 21:00:36.432909 2026] [:error] [pid 64998:tid 65003] [client 20.238.82.232:62108] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xynz.php"] [unique_id "aeoX9IV5EysYcTLjmwht6AAAAcE"]
[Thu Apr 23 21:00:37.306606 2026] [:error] [pid 42973:tid 43064] [client 20.238.82.232:8080] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xynz.php"] [unique_id "aeoX9W6I0QqmmmLTHE0SxAAAAJU"]
[Thu Apr 23 21:00:38.424202 2026] [:error] [pid 65000:tid 65031] [client 20.238.82.232:12809] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xynz.php"] [unique_id "aeoX9r6vRb9j6psK2ZZzjAAAAgI"]
[Thu Apr 23 21:00:40.344074 2026] [:error] [pid 59700:tid 59719] [client 20.238.82.232:42869] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "aeoX-JXyGZJFeAIDWtkkFAAAAVE"]
[Thu Apr 23 21:00:44.973564 2026] [:error] [pid 64998:tid 65023] [client 20.238.82.232:37872] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "aeoX_IV5EysYcTLjmwht-AAAAdU"]
[Thu Apr 23 21:00:45.897769 2026] [:error] [pid 64998:tid 65002] [client 20.238.82.232:33939] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "aeoX_YV5EysYcTLjmwht_AAAAcA"]
[Thu Apr 23 21:00:47.394302 2026] [:error] [pid 64998:tid 65025] [client 20.238.82.232:11710] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "aeoX_4V5EysYcTLjmwhuAwAAAdc"]
[Thu Apr 23 21:00:48.752102 2026] [:error] [pid 42972:tid 43027] [client 20.238.82.232:43925] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/press.php"] [unique_id "aeoYAMOAb-3sOknsk4cyagAAAEs"]
[Thu Apr 23 21:00:50.676163 2026] [:error] [pid 59700:tid 59723] [client 20.238.82.232:3658] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/press.php"] [unique_id "aeoYApXyGZJFeAIDWtkkHAAAAVU"]
[Thu Apr 23 21:00:52.474523 2026] [:error] [pid 59700:tid 59705] [client 20.238.82.232:15424] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/press.php"] [unique_id "aeoYBJXyGZJFeAIDWtkkHgAAAUM"]
[Thu Apr 23 21:00:53.903675 2026] [:error] [pid 64998:tid 65021] [client 20.238.82.232:36546] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/press.php"] [unique_id "aeoYBYV5EysYcTLjmwhuEQAAAdM"]
[Thu Apr 23 21:00:55.119822 2026] [:error] [pid 25635:tid 25661] [client 20.238.82.232:3447] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xwx1.php"] [unique_id "aeoYB8Rxv6UsgRGKB3IxygAAARY"]
[Thu Apr 23 21:00:56.813339 2026] [proxy_fcgi:error] [pid 42971:tid 42990] [client 20.238.82.232:53023] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:00:57.085131 2026] [proxy_fcgi:error] [pid 42971:tid 42986] [client 20.238.82.232:53023] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:00:57.348038 2026] [proxy_fcgi:error] [pid 42971:tid 42996] [client 20.238.82.232:53023] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:00:57.601789 2026] [proxy_fcgi:error] [pid 42971:tid 43000] [client 20.238.82.232:53023] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:00:57.854538 2026] [proxy_fcgi:error] [pid 42971:tid 43006] [client 20.238.82.232:53023] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:00:58.110791 2026] [proxy_fcgi:error] [pid 42971:tid 42992] [client 20.238.82.232:53023] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:00:58.370479 2026] [proxy_fcgi:error] [pid 42971:tid 42987] [client 20.238.82.232:53023] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:00:58.625195 2026] [proxy_fcgi:error] [pid 42971:tid 42997] [client 20.238.82.232:53023] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:00:58.878373 2026] [proxy_fcgi:error] [pid 42971:tid 43007] [client 20.238.82.232:53023] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:00:59.137043 2026] [proxy_fcgi:error] [pid 42971:tid 43005] [client 20.238.82.232:53023] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:00:59.397526 2026] [proxy_fcgi:error] [pid 42971:tid 42999] [client 20.238.82.232:53023] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:00:59.646594 2026] [:error] [pid 42971:tid 42994] [client 20.238.82.232:53023] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws82.php"] [unique_id "aeoYCzEP2_5RswrH8bEnXAAAAAg"]
[Thu Apr 23 21:01:02.371844 2026] [:error] [pid 42972:tid 43019] [client 20.238.82.232:11379] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws82.php"] [unique_id "aeoYDsOAb-3sOknsk4cydwAAAEM"]
[Thu Apr 23 21:01:04.624597 2026] [:error] [pid 59700:tid 59719] [client 20.238.82.232:33996] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws82.php"] [unique_id "aeoYEJXyGZJFeAIDWtkkMQAAAVE"]
[Thu Apr 23 21:01:06.034453 2026] [:error] [pid 42972:tid 43021] [client 20.238.82.232:35251] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws82.php"] [unique_id "aeoYEsOAb-3sOknsk4cyggAAAEU"]
[Thu Apr 23 21:01:06.657429 2026] [:error] [pid 42972:tid 43027] [client 20.238.82.232:22280] [client 20.238.82.232] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/theme-compat/wp-login.php"] [unique_id "aeoYEsOAb-3sOknsk4cygwAAAEs"]
[Thu Apr 23 21:01:07.798459 2026] [:error] [pid 42972:tid 43019] [client 20.238.82.232:9516] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-class.php"] [unique_id "aeoYE8OAb-3sOknsk4cyhwAAAEM"]
[Thu Apr 23 21:01:09.015186 2026] [:error] [pid 42972:tid 43039] [client 20.238.82.232:43983] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-class.php"] [unique_id "aeoYFcOAb-3sOknsk4cyiwAAAFc"]
[Thu Apr 23 21:01:10.536061 2026] [:error] [pid 42972:tid 43019] [client 20.238.82.232:35209] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-class.php"] [unique_id "aeoYFsOAb-3sOknsk4cylQAAAEM"]
[Thu Apr 23 21:01:11.960955 2026] [:error] [pid 65000:tid 65042] [client 20.238.82.232:28060] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-class.php"] [unique_id "aeoYF76vRb9j6psK2ZZzsAAAAgk"]
[Thu Apr 23 21:01:13.589678 2026] [:error] [pid 43083:tid 43096] [client 20.238.82.232:22339] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/layout.php"] [unique_id "aeoYGTC5hrvNXosL83J09AAAAMs"]
[Thu Apr 23 21:01:15.076007 2026] [:error] [pid 42972:tid 43033] [client 20.238.82.232:44856] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/layout.php"] [unique_id "aeoYG8OAb-3sOknsk4cymwAAAFE"]
[Thu Apr 23 21:01:17.554915 2026] [:error] [pid 46953:tid 46972] [client 20.238.82.232:51123] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/layout.php"] [unique_id "aeoYHUnlpdHh-P6wKbo0ewAAAlA"]
[Thu Apr 23 21:01:18.977477 2026] [:error] [pid 42972:tid 43030] [client 20.238.82.232:42217] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/layout.php"] [unique_id "aeoYHsOAb-3sOknsk4cypAAAAE4"]
[Thu Apr 23 21:01:19.961448 2026] [:error] [pid 64998:tid 65017] [client 20.238.82.232:3356] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws85.php"] [unique_id "aeoYH4V5EysYcTLjmwhuJAAAAc8"]
[Thu Apr 23 21:01:21.431302 2026] [:error] [pid 42973:tid 43067] [client 20.238.82.232:13926] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws85.php"] [unique_id "aeoYIW6I0QqmmmLTHE0TGgAAAJg"]
[Thu Apr 23 21:01:22.388485 2026] [:error] [pid 65000:tid 65052] [client 20.238.82.232:3268] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws85.php"] [unique_id "aeoYIr6vRb9j6psK2ZZ0DwAAAhM"]
[Thu Apr 23 21:01:24.561038 2026] [:error] [pid 46953:tid 46976] [client 20.238.82.232:7391] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws85.php"] [unique_id "aeoYJEnlpdHh-P6wKbo0fQAAAlQ"]
[Thu Apr 23 21:01:25.761405 2026] [:error] [pid 59700:tid 59721] [client 20.238.82.232:7644] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zogy1.php"] [unique_id "aeoYJZXyGZJFeAIDWtkkOQAAAVM"]
[Thu Apr 23 21:01:27.120806 2026] [:error] [pid 46953:tid 46957] [client 20.238.82.232:3283] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zogy1.php"] [unique_id "aeoYJ0nlpdHh-P6wKbo0gQAAAkE"]
[Thu Apr 23 21:01:29.389762 2026] [:error] [pid 64998:tid 65024] [client 20.238.82.232:44841] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zogy1.php"] [unique_id "aeoYKYV5EysYcTLjmwhuKQAAAdY"]
[Thu Apr 23 21:01:30.555629 2026] [:error] [pid 64998:tid 65012] [client 20.238.82.232:14955] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zogy1.php"] [unique_id "aeoYKoV5EysYcTLjmwhuLQAAAco"]
[Thu Apr 23 21:01:31.632172 2026] [:error] [pid 59700:tid 59712] [client 20.238.82.232:28080] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/state.php"] [unique_id "aeoYK5XyGZJFeAIDWtkkOwAAAUo"]
[Thu Apr 23 21:01:33.068031 2026] [:error] [pid 43083:tid 43101] [client 20.238.82.232:13903] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/state.php"] [unique_id "aeoYLTC5hrvNXosL83J1IwAAANA"]
[Thu Apr 23 21:01:33.855110 2026] [:error] [pid 42973:tid 43066] [client 20.238.82.232:27467] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/state.php"] [unique_id "aeoYLW6I0QqmmmLTHE0TLAAAAJc"]
[Thu Apr 23 21:01:35.644427 2026] [:error] [pid 59700:tid 59715] [client 20.238.82.232:3381] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/state.php"] [unique_id "aeoYL5XyGZJFeAIDWtkkPgAAAU0"]
[Thu Apr 23 21:01:37.530869 2026] [:error] [pid 42973:tid 43065] [client 20.238.82.232:22398] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ss.php"] [unique_id "aeoYMW6I0QqmmmLTHE0TLwAAAJY"]
[Thu Apr 23 21:01:38.980916 2026] [:error] [pid 42971:tid 42999] [client 20.238.82.232:27506] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ss.php"] [unique_id "aeoYMjEP2_5RswrH8bEnZQAAAA0"]
[Thu Apr 23 21:01:40.491643 2026] [:error] [pid 64998:tid 65016] [client 20.238.82.232:28044] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ss.php"] [unique_id "aeoYNIV5EysYcTLjmwhuMwAAAc4"]
[Thu Apr 23 21:01:41.980671 2026] [:error] [pid 65000:tid 65051] [client 20.238.82.232:3368] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ss.php"] [unique_id "aeoYNb6vRb9j6psK2ZZ0ZAAAAhI"]
[Thu Apr 23 21:01:43.552006 2026] [:error] [pid 64998:tid 65025] [client 20.238.82.232:7401] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/error_log.php"] [unique_id "aeoYN4V5EysYcTLjmwhuNQAAAdc"]
[Thu Apr 23 21:01:47.704078 2026] [:error] [pid 65000:tid 65044] [client 20.238.82.232:51103] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/error_log.php"] [unique_id "aeoYO76vRb9j6psK2ZZ0fQAAAgs"]
[Thu Apr 23 21:01:49.009962 2026] [:error] [pid 59700:tid 59714] [client 20.238.82.232:26801] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/error_log.php"] [unique_id "aeoYPZXyGZJFeAIDWtkkRQAAAUw"]
[Thu Apr 23 21:01:50.140246 2026] [:error] [pid 43083:tid 43106] [client 20.238.82.232:22369] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/error_log.php"] [unique_id "aeoYPjC5hrvNXosL83J1NwAAANU"]
[Thu Apr 23 21:01:51.876605 2026] [:error] [pid 64998:tid 65007] [client 20.238.82.232:3337] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mifta.php"] [unique_id "aeoYP4V5EysYcTLjmwhuQQAAAcU"]
[Thu Apr 23 21:01:54.027922 2026] [:error] [pid 42973:tid 43043] [client 20.238.82.232:24276] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mifta.php"] [unique_id "aeoYQm6I0QqmmmLTHE0TQwAAAIA"]
[Thu Apr 23 21:01:55.687430 2026] [:error] [pid 42972:tid 43039] [client 20.238.82.232:48922] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mifta.php"] [unique_id "aeoYQ8OAb-3sOknsk4cyvgAAAFc"]
[Thu Apr 23 21:01:57.569957 2026] [:error] [pid 43083:tid 43107] [client 20.238.82.232:12514] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mifta.php"] [unique_id "aeoYRTC5hrvNXosL83J1OgAAANY"]
[Thu Apr 23 21:01:59.324176 2026] [proxy_fcgi:error] [pid 42973:tid 43060] [client 20.238.82.232:7388] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:01:59.594474 2026] [proxy_fcgi:error] [pid 42973:tid 43048] [client 20.238.82.232:7388] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:01:59.865210 2026] [proxy_fcgi:error] [pid 42973:tid 43045] [client 20.238.82.232:7388] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:02:00.138401 2026] [proxy_fcgi:error] [pid 42973:tid 43063] [client 20.238.82.232:7388] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:02:01.849743 2026] [proxy_fcgi:error] [pid 42973:tid 43056] [client 20.238.82.232:7388] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:02:02.120754 2026] [proxy_fcgi:error] [pid 42973:tid 43046] [client 20.238.82.232:7388] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:02:02.390936 2026] [proxy_fcgi:error] [pid 42973:tid 43050] [client 20.238.82.232:7388] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:02:02.658773 2026] [proxy_fcgi:error] [pid 42973:tid 43057] [client 20.238.82.232:7388] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:02:02.929863 2026] [proxy_fcgi:error] [pid 42973:tid 43066] [client 20.238.82.232:7388] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:02:03.199584 2026] [proxy_fcgi:error] [pid 42973:tid 43064] [client 20.238.82.232:7388] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:02:03.470839 2026] [proxy_fcgi:error] [pid 42973:tid 43048] [client 20.238.82.232:7388] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:02:03.738544 2026] [:error] [pid 42973:tid 43052] [client 20.238.82.232:7388] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/areak1.php"] [unique_id "aeoYS26I0QqmmmLTHE0TYAAAAIk"]
[Thu Apr 23 21:02:05.112706 2026] [:error] [pid 65000:tid 65052] [client 20.238.82.232:24319] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/areak1.php"] [unique_id "aeoYTb6vRb9j6psK2ZZ0tAAAAhM"]
[Thu Apr 23 21:02:06.455994 2026] [:error] [pid 42972:tid 43033] [client 20.238.82.232:42190] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/areak1.php"] [unique_id "aeoYTsOAb-3sOknsk4cy1AAAAFE"]
[Thu Apr 23 21:02:07.642552 2026] [:error] [pid 64967:tid 64971] [client 20.238.82.232:42812] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/areak1.php"] [unique_id "aeoYT4AV4GfOOdX8QzpzMwAAAYI"]
[Thu Apr 23 21:02:08.326708 2026] [:error] [pid 64998:tid 65007] [client 20.238.82.232:42778] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sallu.php"] [unique_id "aeoYUIV5EysYcTLjmwhuewAAAcU"]
[Thu Apr 23 21:02:10.387917 2026] [:error] [pid 43083:tid 43089] [client 20.238.82.232:42794] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sallu.php"] [unique_id "aeoYUjC5hrvNXosL83J1PgAAAMQ"]
[Thu Apr 23 21:02:11.690565 2026] [:error] [pid 43083:tid 43094] [client 20.238.82.232:42189] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sallu.php"] [unique_id "aeoYUzC5hrvNXosL83J1QAAAAMk"]
[Thu Apr 23 21:02:14.158707 2026] [:error] [pid 59700:tid 59706] [client 20.238.82.232:44917] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sallu.php"] [unique_id "aeoYVpXyGZJFeAIDWtkkXgAAAUQ"]
[Thu Apr 23 21:02:15.454841 2026] [:error] [pid 42971:tid 43007] [client 20.238.82.232:3274] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tiny2.php"] [unique_id "aeoYVzEP2_5RswrH8bEneAAAABU"]
[Thu Apr 23 21:02:16.220039 2026] [:error] [pid 46953:tid 46972] [client 20.238.82.232:22349] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tiny2.php"] [unique_id "aeoYWEnlpdHh-P6wKbo0ogAAAlA"]
[Thu Apr 23 21:02:18.458793 2026] [:error] [pid 43083:tid 43093] [client 20.238.82.232:22394] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tiny2.php"] [unique_id "aeoYWjC5hrvNXosL83J1RwAAAMg"]
[Thu Apr 23 21:02:20.314548 2026] [:error] [pid 42972:tid 43028] [client 20.238.82.232:29964] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tiny2.php"] [unique_id "aeoYXMOAb-3sOknsk4cy7gAAAEw"]
[Thu Apr 23 21:02:22.771760 2026] [:error] [pid 42973:tid 43052] [client 20.238.82.232:35220] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/7.php"] [unique_id "aeoYXm6I0QqmmmLTHE0TbgAAAIk"]
[Thu Apr 23 21:02:24.178654 2026] [:error] [pid 43083:tid 43107] [client 20.238.82.232:64799] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/7.php"] [unique_id "aeoYYDC5hrvNXosL83J1SAAAANY"]
[Thu Apr 23 21:02:25.269157 2026] [:error] [pid 65000:tid 65041] [client 20.238.82.232:42798] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/7.php"] [unique_id "aeoYYb6vRb9j6psK2ZZ08AAAAgg"]
[Thu Apr 23 21:02:26.639990 2026] [:error] [pid 42971:tid 43003] [client 20.238.82.232:13932] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/7.php"] [unique_id "aeoYYjEP2_5RswrH8bEnegAAABE"]
[Thu Apr 23 21:02:28.216305 2026] [:error] [pid 43083:tid 43092] [client 20.238.82.232:12529] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gz.php"] [unique_id "aeoYZDC5hrvNXosL83J1TQAAAMc"]
[Thu Apr 23 21:02:29.531334 2026] [:error] [pid 43083:tid 43108] [client 20.238.82.232:9515] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gz.php"] [unique_id "aeoYZTC5hrvNXosL83J1UAAAANc"]
[Thu Apr 23 21:02:31.381265 2026] [:error] [pid 25635:tid 25648] [client 20.238.82.232:13934] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gz.php"] [unique_id "aeoYZ8Rxv6UsgRGKB3Ix5QAAAQk"]
[Thu Apr 23 21:02:33.155064 2026] [:error] [pid 65000:tid 65055] [client 20.238.82.232:38474] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gz.php"] [unique_id "aeoYab6vRb9j6psK2ZZ1EgAAAhY"]
[Thu Apr 23 21:02:35.099927 2026] [:error] [pid 64998:tid 65012] [client 20.238.82.232:34012] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/8.php"] [unique_id "aeoYa4V5EysYcTLjmwhuogAAAco"]
[Thu Apr 23 21:02:36.945944 2026] [:error] [pid 43083:tid 43087] [client 20.238.82.232:10230] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/8.php"] [unique_id "aeoYbDC5hrvNXosL83J1VQAAAMI"]
[Thu Apr 23 21:02:38.132035 2026] [:error] [pid 64998:tid 65024] [client 20.238.82.232:26228] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/8.php"] [unique_id "aeoYboV5EysYcTLjmwhuqAAAAdY"]
[Thu Apr 23 21:02:39.263187 2026] [:error] [pid 64967:tid 64970] [client 20.238.82.232:11343] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/8.php"] [unique_id "aeoYb4AV4GfOOdX8QzpzOAAAAYE"]
[Thu Apr 23 21:02:40.153695 2026] [:error] [pid 65000:tid 65045] [client 20.238.82.232:33961] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gecko.php"] [unique_id "aeoYcL6vRb9j6psK2ZZ1IwAAAgw"]
[Thu Apr 23 21:02:41.666371 2026] [:error] [pid 64998:tid 65018] [client 20.238.82.232:43960] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gecko.php"] [unique_id "aeoYcYV5EysYcTLjmwhurAAAAdA"]
[Thu Apr 23 21:02:42.604118 2026] [:error] [pid 42973:tid 43054] [client 20.238.82.232:37217] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gecko.php"] [unique_id "aeoYcm6I0QqmmmLTHE0ThQAAAIs"]
[Thu Apr 23 21:02:44.382912 2026] [:error] [pid 25635:tid 25647] [client 20.238.82.232:13882] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gecko.php"] [unique_id "aeoYdMRxv6UsgRGKB3Ix5wAAAQg"]
[Thu Apr 23 21:02:46.221992 2026] [:error] [pid 46953:tid 46978] [client 20.238.82.232:8568] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aevly.php"] [unique_id "aeoYdknlpdHh-P6wKbo0sgAAAlU"]
[Thu Apr 23 21:02:47.310353 2026] [:error] [pid 65000:tid 65046] [client 20.238.82.232:28783] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aevly.php"] [unique_id "aeoYd76vRb9j6psK2ZZ1KgAAAg0"]
[Thu Apr 23 21:02:48.743006 2026] [:error] [pid 64998:tid 65026] [client 20.238.82.232:19836] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aevly.php"] [unique_id "aeoYeIV5EysYcTLjmwhuuAAAAdg"]
[Thu Apr 23 21:02:49.899981 2026] [:error] [pid 46953:tid 46965] [client 20.238.82.232:8760] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aevly.php"] [unique_id "aeoYeUnlpdHh-P6wKbo0uQAAAkk"]
[Thu Apr 23 21:02:51.185224 2026] [:error] [pid 65000:tid 65032] [client 20.238.82.232:40182] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws68.php"] [unique_id "aeoYe76vRb9j6psK2ZZ1PAAAAgM"]
[Thu Apr 23 21:02:52.903831 2026] [:error] [pid 42971:tid 43008] [client 20.238.82.232:10501] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws68.php"] [unique_id "aeoYfDEP2_5RswrH8bEnhgAAABY"]
[Thu Apr 23 21:02:54.829608 2026] [:error] [pid 65000:tid 65056] [client 20.238.82.232:35879] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws68.php"] [unique_id "aeoYfr6vRb9j6psK2ZZ1UAAAAhc"]
[Thu Apr 23 21:02:56.753023 2026] [:error] [pid 43083:tid 43089] [client 20.238.82.232:35858] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws68.php"] [unique_id "aeoYgDC5hrvNXosL83J1XwAAAMQ"]
[Thu Apr 23 21:02:57.810857 2026] [:error] [pid 59700:tid 59707] [client 20.238.82.232:10551] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/pp.php"] [unique_id "aeoYgZXyGZJFeAIDWtkkfwAAAUU"]
[Thu Apr 23 21:02:59.233047 2026] [:error] [pid 59700:tid 59712] [client 20.238.82.232:56972] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/pp.php"] [unique_id "aeoYg5XyGZJFeAIDWtkkgQAAAUo"]
[Thu Apr 23 21:02:59.906324 2026] [:error] [pid 65000:tid 65052] [client 20.238.82.232:9799] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/pp.php"] [unique_id "aeoYg76vRb9j6psK2ZZ1aAAAAhM"]
[Thu Apr 23 21:03:00.698043 2026] [:error] [pid 42972:tid 43019] [client 20.238.82.232:58231] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/pp.php"] [unique_id "aeoYhMOAb-3sOknsk4czDgAAAEM"]
[Thu Apr 23 21:03:02.001782 2026] [:error] [pid 42972:tid 43021] [client 20.238.82.232:53108] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/yuzuru1.php"] [unique_id "aeoYhsOAb-3sOknsk4czEAAAAEU"]
[Thu Apr 23 21:03:02.628811 2026] [:error] [pid 65000:tid 65029] [client 20.238.82.232:28121] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/yuzuru1.php"] [unique_id "aeoYhr6vRb9j6psK2ZZ1cwAAAgA"]
[Thu Apr 23 21:03:03.337639 2026] [proxy_fcgi:error] [pid 64998:tid 65004] [client 20.238.82.232:33345] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:03:03.610829 2026] [proxy_fcgi:error] [pid 64998:tid 65003] [client 20.238.82.232:33345] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:03:03.881426 2026] [proxy_fcgi:error] [pid 64998:tid 65019] [client 20.238.82.232:33345] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:03:04.152612 2026] [proxy_fcgi:error] [pid 64998:tid 65026] [client 20.238.82.232:33345] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:03:04.423957 2026] [proxy_fcgi:error] [pid 64998:tid 65021] [client 20.238.82.232:33345] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:03:04.695120 2026] [proxy_fcgi:error] [pid 64998:tid 65024] [client 20.238.82.232:33345] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:03:04.965457 2026] [proxy_fcgi:error] [pid 64998:tid 65005] [client 20.238.82.232:33345] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 02:18:22.557082 2026] [proxy_fcgi:error] [pid 65000:tid 65039] [client 172.161.0.169:41582] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 02:18:22.832116 2026] [proxy_fcgi:error] [pid 65000:tid 65048] [client 172.161.0.169:41582] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 02:18:23.114005 2026] [proxy_fcgi:error] [pid 65000:tid 65038] [client 172.161.0.169:41582] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 02:18:23.402397 2026] [proxy_fcgi:error] [pid 65000:tid 65049] [client 172.161.0.169:41582] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 02:18:23.845424 2026] [proxy_fcgi:error] [pid 65000:tid 65052] [client 172.161.0.169:41582] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 02:18:24.120314 2026] [proxy_fcgi:error] [pid 65000:tid 65057] [client 172.161.0.169:41582] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 02:18:24.399528 2026] [proxy_fcgi:error] [pid 65000:tid 65040] [client 172.161.0.169:41582] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 02:18:24.885656 2026] [proxy_fcgi:error] [pid 65000:tid 65056] [client 172.161.0.169:41582] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 02:18:25.161555 2026] [proxy_fcgi:error] [pid 65000:tid 65029] [client 172.161.0.169:41582] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 02:18:25.445744 2026] [proxy_fcgi:error] [pid 65000:tid 65055] [client 172.161.0.169:41582] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 02:18:25.717981 2026] [:error] [pid 65000:tid 65030] [client 172.161.0.169:41582] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xxa.php"] [unique_id "aepicb6vRb9j6psK2ZaNtgAAAgE"]
[Fri Apr 24 02:18:26.670001 2026] [:error] [pid 64998:tid 65024] [client 172.161.0.169:41059] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xxa.php"] [unique_id "aepicoV5EysYcTLjmwhA5AAAAdY"]
[Fri Apr 24 02:18:27.932638 2026] [:error] [pid 65000:tid 65029] [client 172.161.0.169:17478] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xxa.php"] [unique_id "aepic76vRb9j6psK2ZaNwAAAAgA"]
[Fri Apr 24 02:18:44.401736 2026] [:error] [pid 65000:tid 65051] [client 172.161.0.169:56288] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/a1.php"] [unique_id "aepihL6vRb9j6psK2ZaODQAAAhI"]
[Fri Apr 24 02:18:47.044922 2026] [:error] [pid 46953:tid 46968] [client 172.161.0.169:45335] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/a1.php"] [unique_id "aepih0nlpdHh-P6wKbp-8QAAAkw"]
[Fri Apr 24 02:18:48.346004 2026] [:error] [pid 43083:tid 43102] [client 172.161.0.169:41061] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/a1.php"] [unique_id "aepiiDC5hrvNXosL83KyNQAAANE"]
[Fri Apr 24 02:18:50.165834 2026] [:error] [pid 59700:tid 59720] [client 172.161.0.169:39233] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/a1.php"] [unique_id "aepiipXyGZJFeAIDWtl8wgAAAVI"]
[Fri Apr 24 02:18:53.084075 2026] [:error] [pid 59700:tid 59702] [client 172.161.0.169:37430] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/zxcs.php"] [unique_id "aepijZXyGZJFeAIDWtl8xQAAAUA"]
[Fri Apr 24 02:18:55.445858 2026] [:error] [pid 64998:tid 65016] [client 172.161.0.169:3050] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/zxcs.php"] [unique_id "aepij4V5EysYcTLjmwhBCgAAAc4"]
[Fri Apr 24 02:18:57.499141 2026] [:error] [pid 42971:tid 43001] [client 172.161.0.169:56294] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/zxcs.php"] [unique_id "aepikTEP2_5RswrH8bFUXQAAAA8"]
[Fri Apr 24 02:19:01.058126 2026] [:error] [pid 65000:tid 65047] [client 172.161.0.169:20029] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/zxcs.php"] [unique_id "aepilb6vRb9j6psK2ZaORwAAAg4"]
[Fri Apr 24 02:19:03.715803 2026] [:error] [pid 59700:tid 59725] [client 172.161.0.169:24982] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/s1.php"] [unique_id "aepil5XyGZJFeAIDWtl8yAAAAVc"]
[Fri Apr 24 02:19:06.823015 2026] [:error] [pid 65000:tid 65041] [client 172.161.0.169:3020] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/s1.php"] [unique_id "aepimr6vRb9j6psK2ZaOeAAAAgg"]
[Fri Apr 24 02:19:11.442138 2026] [:error] [pid 65000:tid 65048] [client 172.161.0.169:62392] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/s1.php"] [unique_id "aepin76vRb9j6psK2ZaOoAAAAg8"]
[Fri Apr 24 02:19:19.160420 2026] [:error] [pid 64998:tid 65021] [client 172.161.0.169:51653] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-kz.php"] [unique_id "aepip4V5EysYcTLjmwhBOgAAAdM"]
[Fri Apr 24 02:19:20.127752 2026] [:error] [pid 43083:tid 43102] [client 172.161.0.169:17517] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-kz.php"] [unique_id "aepiqDC5hrvNXosL83KySQAAANE"]
[Fri Apr 24 02:19:22.105709 2026] [:error] [pid 64998:tid 65022] [client 172.161.0.169:31041] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-kz.php"] [unique_id "aepiqoV5EysYcTLjmwhBQQAAAdQ"]
[Fri Apr 24 02:19:25.214791 2026] [proxy_fcgi:error] [pid 25635:tid 25658] [client 172.161.0.169:24968] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 02:19:25.491734 2026] [proxy_fcgi:error] [pid 25635:tid 25645] [client 172.161.0.169:24968] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 02:19:25.767936 2026] [proxy_fcgi:error] [pid 25635:tid 25659] [client 172.161.0.169:24968] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 02:19:26.050133 2026] [proxy_fcgi:error] [pid 25635:tid 25655] [client 172.161.0.169:24968] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 02:19:26.326496 2026] [proxy_fcgi:error] [pid 25635:tid 25646] [client 172.161.0.169:24968] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 02:19:26.604217 2026] [proxy_fcgi:error] [pid 25635:tid 25663] [client 172.161.0.169:24968] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 02:19:26.892573 2026] [proxy_fcgi:error] [pid 25635:tid 25651] [client 172.161.0.169:24968] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 02:19:27.172154 2026] [proxy_fcgi:error] [pid 25635:tid 25650] [client 172.161.0.169:24968] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 02:19:27.449640 2026] [proxy_fcgi:error] [pid 25635:tid 25647] [client 172.161.0.169:24968] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 02:19:27.725283 2026] [proxy_fcgi:error] [pid 25635:tid 25640] [client 172.161.0.169:24968] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 02:19:28.010039 2026] [proxy_fcgi:error] [pid 25635:tid 25654] [client 172.161.0.169:24968] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 02:19:28.289301 2026] [:error] [pid 25635:tid 25642] [client 172.161.0.169:24968] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/BDKR28WP.php"] [unique_id "aepisMRxv6UsgRGKB3JT5AAAAQM"]
[Fri Apr 24 02:19:33.057116 2026] [:error] [pid 65000:tid 65050] [client 172.161.0.169:24974] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/BDKR28WP.php"] [unique_id "aepitb6vRb9j6psK2ZaO3wAAAhE"]
[Fri Apr 24 02:19:35.190086 2026] [:error] [pid 64998:tid 65010] [client 172.161.0.169:39746] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/BDKR28WP.php"] [unique_id "aepit4V5EysYcTLjmwhBaAAAAcg"]
[Fri Apr 24 02:19:36.392817 2026] [:error] [pid 25635:tid 25656] [client 172.161.0.169:45380] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/BDKR28WP.php"] [unique_id "aepiuMRxv6UsgRGKB3JT6QAAARE"]
[Fri Apr 24 02:19:37.763804 2026] [:error] [pid 64967:tid 64978] [client 172.161.0.169:41051] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/man.php"] [unique_id "aepiuYAV4GfOOdX8QzqcMgAAAYk"]
[Fri Apr 24 02:19:40.582723 2026] [:error] [pid 65000:tid 65057] [client 172.161.0.169:62345] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/man.php"] [unique_id "aepivL6vRb9j6psK2ZaPBAAAAhg"]
[Fri Apr 24 02:19:42.875388 2026] [:error] [pid 64998:tid 65009] [client 172.161.0.169:24992] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/man.php"] [unique_id "aepivoV5EysYcTLjmwhBcAAAAcc"]
[Fri Apr 24 02:19:47.910994 2026] [:error] [pid 64998:tid 65003] [client 172.161.0.169:45322] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/man.php"] [unique_id "aepiw4V5EysYcTLjmwhBhQAAAcE"]
[Fri Apr 24 02:19:49.232301 2026] [:error] [pid 64967:tid 64971] [client 172.161.0.169:19498] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/aboute.php"] [unique_id "aepixYAV4GfOOdX8QzqcNQAAAYI"]
[Fri Apr 24 02:19:54.055987 2026] [:error] [pid 42973:tid 43044] [client 172.161.0.169:62356] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/aboute.php"] [unique_id "aepiym6I0QqmmmLTHE2LXQAAAIE"]
[Fri Apr 24 02:19:55.035955 2026] [:error] [pid 42972:tid 43036] [client 172.161.0.169:17519] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/aboute.php"] [unique_id "aepiy8OAb-3sOknsk4fOGgAAAFQ"]
[Fri Apr 24 02:19:57.594970 2026] [:error] [pid 64998:tid 65009] [client 172.161.0.169:20010] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/aboute.php"] [unique_id "aepizYV5EysYcTLjmwhBkAAAAcc"]
[Fri Apr 24 02:19:59.251560 2026] [:error] [pid 64967:tid 64977] [client 172.161.0.169:51686] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ayk.php"] [unique_id "aepiz4AV4GfOOdX8QzqcOAAAAYg"]
[Fri Apr 24 02:20:02.646827 2026] [:error] [pid 46953:tid 46969] [client 172.161.0.169:39245] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ayk.php"] [unique_id "aepi0knlpdHh-P6wKbp_QgAAAk0"]
[Fri Apr 24 02:20:07.377339 2026] [:error] [pid 46953:tid 46970] [client 172.161.0.169:17477] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ayk.php"] [unique_id "aepi10nlpdHh-P6wKbp_RwAAAk4"]
[Fri Apr 24 02:20:08.832407 2026] [:error] [pid 42972:tid 43040] [client 172.161.0.169:3042] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ayk.php"] [unique_id "aepi2MOAb-3sOknsk4fOJQAAAFg"]
[Fri Apr 24 02:20:23.919502 2026] [:error] [pid 65000:tid 65029] [client 172.161.0.169:39276] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wps.php"] [unique_id "aepi576vRb9j6psK2ZaPlAAAAgA"]
[Fri Apr 24 02:20:24.844576 2026] [:error] [pid 42972:tid 43026] [client 172.161.0.169:19991] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/f35.php"] [unique_id "aepi6MOAb-3sOknsk4fOSAAAAEo"]
[Fri Apr 24 02:20:25.583163 2026] [:error] [pid 65000:tid 65050] [client 172.161.0.169:17507] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/f35.php"] [unique_id "aepi6b6vRb9j6psK2ZaPmgAAAhE"]
[Fri Apr 24 02:20:26.395232 2026] [:error] [pid 42972:tid 43024] [client 172.161.0.169:64319] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/f35.php"] [unique_id "aepi6sOAb-3sOknsk4fOTAAAAEg"]
[Fri Apr 24 02:20:27.351313 2026] [:error] [pid 65000:tid 65053] [client 172.161.0.169:62338] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/f35.php"] [unique_id "aepi676vRb9j6psK2ZaPnQAAAhQ"]
[Fri Apr 24 02:20:29.688905 2026] [proxy_fcgi:error] [pid 65000:tid 65040] [client 172.161.0.169:39253] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 02:20:29.975185 2026] [proxy_fcgi:error] [pid 65000:tid 65043] [client 172.161.0.169:39253] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 02:20:30.269111 2026] [proxy_fcgi:error] [pid 65000:tid 65055] [client 172.161.0.169:39253] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 02:20:30.555252 2026] [proxy_fcgi:error] [pid 65000:tid 65050] [client 172.161.0.169:39253] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 02:20:30.842953 2026] [proxy_fcgi:error] [pid 65000:tid 65047] [client 172.161.0.169:39253] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 02:20:31.134269 2026] [proxy_fcgi:error] [pid 65000:tid 65048] [client 172.161.0.169:39253] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 02:20:31.417483 2026] [proxy_fcgi:error] [pid 65000:tid 65054] [client 172.161.0.169:39253] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 02:20:31.703875 2026] [proxy_fcgi:error] [pid 65000:tid 65031] [client 172.161.0.169:39253] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 02:20:31.991954 2026] [:error] [pid 65000:tid 65037] [client 172.161.0.169:39253] [client 172.161.0.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.dwelectservices.com.au"] [uri "/tiny.php"] [unique_id "aepi776vRb9j6psK2ZaPtQAAAgQ"]
[Fri Apr 24 02:20:39.840653 2026] [proxy_fcgi:error] [pid 42972:tid 43023] [client 172.161.0.169:41037] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 02:20:40.077366 2026] [proxy_fcgi:error] [pid 42972:tid 43027] [client 172.161.0.169:41037] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 02:20:40.317797 2026] [proxy_fcgi:error] [pid 42972:tid 43020] [client 172.161.0.169:41037] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 02:20:40.555324 2026] [:error] [pid 42972:tid 43038] [client 172.161.0.169:41037] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/roksad1.php"] [unique_id "aepi-MOAb-3sOknsk4fOXAAAAFY"]
[Fri Apr 24 02:20:43.359554 2026] [:error] [pid 64998:tid 65002] [client 172.161.0.169:62397] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/roksad1.php"] [unique_id "aepi-4V5EysYcTLjmwhB_QAAAcA"]
[Fri Apr 24 02:20:46.144905 2026] [:error] [pid 65000:tid 65032] [client 172.161.0.169:17535] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/roksad1.php"] [unique_id "aepi_r6vRb9j6psK2ZaP8AAAAgM"]
[Fri Apr 24 02:20:48.061315 2026] [:error] [pid 46953:tid 46960] [client 172.161.0.169:62381] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/roksad1.php"] [unique_id "aepjAEnlpdHh-P6wKbp_dQAAAkQ"]
[Fri Apr 24 02:20:48.915080 2026] [:error] [pid 46953:tid 46980] [client 172.161.0.169:45318] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/fone1.php"] [unique_id "aepjAEnlpdHh-P6wKbp_dwAAAlc"]
[Fri Apr 24 02:20:50.043346 2026] [:error] [pid 43083:tid 43105] [client 172.161.0.169:33139] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/fone1.php"] [unique_id "aepjAjC5hrvNXosL83KyggAAANQ"]
[Fri Apr 24 02:20:50.843165 2026] [:error] [pid 64998:tid 65005] [client 172.161.0.169:45348] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/fone1.php"] [unique_id "aepjAoV5EysYcTLjmwhCCQAAAcM"]
[Fri Apr 24 02:20:51.912890 2026] [:error] [pid 65000:tid 65041] [client 172.161.0.169:17493] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/fone1.php"] [unique_id "aepjA76vRb9j6psK2ZaP_QAAAgg"]
[Fri Apr 24 02:20:53.285697 2026] [:error] [pid 59700:tid 59720] [client 172.161.0.169:39267] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/config.php"] [unique_id "aepjBZXyGZJFeAIDWtl9EwAAAVI"]
[Fri Apr 24 02:20:54.891331 2026] [:error] [pid 64998:tid 65018] [client 172.161.0.169:56267] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/config.php"] [unique_id "aepjBoV5EysYcTLjmwhCEQAAAdA"]
[Fri Apr 24 02:20:55.842412 2026] [:error] [pid 65000:tid 65052] [client 172.161.0.169:53869] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/config.php"] [unique_id "aepjB76vRb9j6psK2ZaQFAAAAhM"]
[Fri Apr 24 02:20:59.708366 2026] [:error] [pid 64998:tid 65026] [client 172.161.0.169:45314] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/config.php"] [unique_id "aepjC4V5EysYcTLjmwhCHwAAAdg"]
[Fri Apr 24 02:21:02.424658 2026] [:error] [pid 65000:tid 65042] [client 172.161.0.169:45356] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xltt.php"] [unique_id "aepjDr6vRb9j6psK2ZaQJgAAAgk"]
[Fri Apr 24 02:21:03.451047 2026] [:error] [pid 46953:tid 46968] [client 172.161.0.169:56319] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xltt.php"] [unique_id "aepjD0nlpdHh-P6wKbp_iAAAAkw"]
[Fri Apr 24 02:21:05.021368 2026] [:error] [pid 65000:tid 65047] [client 172.161.0.169:51666] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xltt.php"] [unique_id "aepjEb6vRb9j6psK2ZaQLwAAAg4"]
[Fri Apr 24 02:21:07.600537 2026] [:error] [pid 46953:tid 46966] [client 172.161.0.169:45359] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xltt.php"] [unique_id "aepjE0nlpdHh-P6wKbp_jwAAAko"]
[Fri Apr 24 02:21:08.846889 2026] [:error] [pid 59700:tid 59722] [client 172.161.0.169:33115] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/sadcut1.php"] [unique_id "aepjFJXyGZJFeAIDWtl9HgAAAVQ"]
[Fri Apr 24 02:21:13.272213 2026] [:error] [pid 42972:tid 43016] [client 172.161.0.169:2779] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/sadcut1.php"] [unique_id "aepjGcOAb-3sOknsk4fOfwAAAEA"]
[Fri Apr 24 02:21:16.203766 2026] [:error] [pid 59700:tid 59718] [client 172.161.0.169:56292] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/sadcut1.php"] [unique_id "aepjHJXyGZJFeAIDWtl9KwAAAVA"]
[Fri Apr 24 02:21:17.348372 2026] [:error] [pid 25635:tid 25649] [client 172.161.0.169:3034] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/sadcut1.php"] [unique_id "aepjHcRxv6UsgRGKB3JUEgAAAQo"]
[Fri Apr 24 02:21:18.584113 2026] [:error] [pid 65000:tid 65051] [client 172.161.0.169:17523] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/dx.php"] [unique_id "aepjHr6vRb9j6psK2ZaQNwAAAhI"]
[Fri Apr 24 02:21:20.269898 2026] [:error] [pid 43083:tid 43097] [client 172.161.0.169:33136] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/dx.php"] [unique_id "aepjIDC5hrvNXosL83KymAAAAMw"]
[Fri Apr 24 02:21:20.963154 2026] [:error] [pid 25635:tid 25640] [client 172.161.0.169:3019] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/dx.php"] [unique_id "aepjIMRxv6UsgRGKB3JUGAAAAQE"]
[Fri Apr 24 02:21:21.900281 2026] [:error] [pid 64967:tid 64983] [client 172.161.0.169:3033] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/dx.php"] [unique_id "aepjIYAV4GfOOdX8QzqcYgAAAY4"]
[Fri Apr 24 02:21:24.139394 2026] [:error] [pid 42973:tid 43058] [client 172.161.0.169:56287] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xff.php"] [unique_id "aepjJG6I0QqmmmLTHE2LpAAAAI8"]
[Fri Apr 24 02:21:25.600124 2026] [:error] [pid 64998:tid 65010] [client 172.161.0.169:39295] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xff.php"] [unique_id "aepjJYV5EysYcTLjmwhCKQAAAcg"]
[Fri Apr 24 02:21:28.228228 2026] [:error] [pid 46953:tid 46959] [client 172.161.0.169:41028] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xff.php"] [unique_id "aepjKEnlpdHh-P6wKbp_mgAAAkM"]
[Fri Apr 24 02:21:30.441354 2026] [:error] [pid 65000:tid 65046] [client 172.161.0.169:15738] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xff.php"] [unique_id "aepjKr6vRb9j6psK2ZaQRAAAAg0"]
[Fri Apr 24 02:21:32.228157 2026] [:error] [pid 59700:tid 59713] [client 172.161.0.169:53843] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wglum1.php"] [unique_id "aepjLJXyGZJFeAIDWtl9NwAAAUs"]
[Fri Apr 24 02:21:33.033802 2026] [:error] [pid 42973:tid 43055] [client 172.161.0.169:62363] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wglum1.php"] [unique_id "aepjLW6I0QqmmmLTHE2LqwAAAIw"]
[Fri Apr 24 02:21:33.959136 2026] [:error] [pid 59700:tid 59704] [client 172.161.0.169:25010] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wglum1.php"] [unique_id "aepjLZXyGZJFeAIDWtl9PAAAAUI"]
[Fri Apr 24 02:21:35.819632 2026] [:error] [pid 43083:tid 43100] [client 172.161.0.169:39271] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wglum1.php"] [unique_id "aepjLzC5hrvNXosL83KynAAAAM8"]
[Fri Apr 24 02:21:36.722775 2026] [:error] [pid 64967:tid 64972] [client 172.161.0.169:56301] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ng.php"] [unique_id "aepjMIAV4GfOOdX8QzqcawAAAYM"]
[Fri Apr 24 02:21:37.718578 2026] [:error] [pid 42973:tid 43047] [client 172.161.0.169:51707] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ng.php"] [unique_id "aepjMW6I0QqmmmLTHE2LtwAAAIQ"]
[Fri Apr 24 02:21:39.718008 2026] [:error] [pid 25635:tid 25658] [client 172.161.0.169:33125] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ng.php"] [unique_id "aepjM8Rxv6UsgRGKB3JUQgAAARM"]
[Fri Apr 24 02:21:41.737749 2026] [proxy_fcgi:error] [pid 65000:tid 65043] [client 172.161.0.169:17488] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 02:21:41.976486 2026] [proxy_fcgi:error] [pid 65000:tid 65031] [client 172.161.0.169:17488] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 02:21:42.216287 2026] [proxy_fcgi:error] [pid 65000:tid 65048] [client 172.161.0.169:17488] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 02:21:43.759188 2026] [proxy_fcgi:error] [pid 65000:tid 65046] [client 172.161.0.169:17488] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 02:21:44.000571 2026] [proxy_fcgi:error] [pid 65000:tid 65052] [client 172.161.0.169:17488] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 02:21:44.268221 2026] [proxy_fcgi:error] [pid 65000:tid 65049] [client 172.161.0.169:17488] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 02:21:44.521461 2026] [proxy_fcgi:error] [pid 65000:tid 65041] [client 172.161.0.169:17488] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 02:21:44.761992 2026] [proxy_fcgi:error] [pid 65000:tid 65030] [client 172.161.0.169:17488] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 02:21:45.018718 2026] [proxy_fcgi:error] [pid 65000:tid 65051] [client 172.161.0.169:17488] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 02:21:45.280511 2026] [proxy_fcgi:error] [pid 65000:tid 65042] [client 172.161.0.169:17488] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 02:21:45.515508 2026] [:error] [pid 65000:tid 65038] [client 172.161.0.169:17488] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/adminfuns.php"] [unique_id "aepjOb6vRb9j6psK2ZaQXgAAAgU"]
[Fri Apr 24 02:21:48.202105 2026] [:error] [pid 59700:tid 59722] [client 172.161.0.169:39258] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/adminfuns.php"] [unique_id "aepjPJXyGZJFeAIDWtl9SQAAAVQ"]
[Fri Apr 24 02:21:49.706766 2026] [:error] [pid 65000:tid 65054] [client 172.161.0.169:53828] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/adminfuns.php"] [unique_id "aepjPb6vRb9j6psK2ZaQagAAAhU"]
[Fri Apr 24 02:21:51.248741 2026] [:error] [pid 46953:tid 46974] [client 172.161.0.169:15684] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/adminfuns.php"] [unique_id "aepjP0nlpdHh-P6wKbp_pQAAAlI"]
[Fri Apr 24 02:21:55.498274 2026] [:error] [pid 64967:tid 64982] [client 172.161.0.169:25016] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/doc.php"] [unique_id "aepjQ4AV4GfOOdX8QzqccQAAAY0"]
[Fri Apr 24 02:21:57.448048 2026] [:error] [pid 65000:tid 65057] [client 172.161.0.169:56304] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/doc.php"] [unique_id "aepjRb6vRb9j6psK2ZaQewAAAhg"]
[Fri Apr 24 02:22:00.377929 2026] [:error] [pid 42972:tid 43024] [client 172.161.0.169:31097] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/doc.php"] [unique_id "aepjSMOAb-3sOknsk4fOqQAAAEg"]
[Fri Apr 24 02:22:04.521096 2026] [:error] [pid 65000:tid 65029] [client 172.161.0.169:53872] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/doc.php"] [unique_id "aepjTL6vRb9j6psK2ZaQjgAAAgA"]
[Fri Apr 24 02:22:06.148503 2026] [:error] [pid 46953:tid 46970] [client 172.161.0.169:39249] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xper1.php"] [unique_id "aepjTknlpdHh-P6wKbp_pwAAAk4"]
[Fri Apr 24 02:22:08.202543 2026] [:error] [pid 42973:tid 43060] [client 172.161.0.169:19998] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xper1.php"] [unique_id "aepjUG6I0QqmmmLTHE2L0wAAAJE"]
[Fri Apr 24 02:22:11.517562 2026] [:error] [pid 42973:tid 43067] [client 172.161.0.169:3017] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xper1.php"] [unique_id "aepjU26I0QqmmmLTHE2L2AAAAJg"]
[Fri Apr 24 02:22:12.853691 2026] [:error] [pid 64967:tid 64971] [client 172.161.0.169:51690] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xper1.php"] [unique_id "aepjVIAV4GfOOdX8QzqcdQAAAYI"]
[Fri Apr 24 02:22:14.635729 2026] [:error] [pid 59700:tid 59720] [client 172.161.0.169:51684] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/2.php"] [unique_id "aepjVpXyGZJFeAIDWtl9YwAAAVI"]
[Fri Apr 24 02:22:15.349847 2026] [:error] [pid 42973:tid 43060] [client 172.161.0.169:45344] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/2.php"] [unique_id "aepjV26I0QqmmmLTHE2L5gAAAJE"]
[Fri Apr 24 02:22:20.421977 2026] [:error] [pid 65000:tid 65029] [client 172.161.0.169:20023] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/2.php"] [unique_id "aepjXL6vRb9j6psK2ZaQrQAAAgA"]
[Fri Apr 24 02:22:24.600036 2026] [:error] [pid 43083:tid 43103] [client 172.161.0.169:3023] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/2.php"] [unique_id "aepjYDC5hrvNXosL83KysAAAANI"]
[Fri Apr 24 02:22:27.463303 2026] [:error] [pid 43083:tid 43092] [client 172.161.0.169:20030] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/gelio1.php"] [unique_id "aepjYzC5hrvNXosL83KysgAAAMc"]
[Fri Apr 24 02:22:30.535331 2026] [:error] [pid 46953:tid 46966] [client 172.161.0.169:3013] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/gelio1.php"] [unique_id "aepjZknlpdHh-P6wKbp_sQAAAko"]
[Fri Apr 24 02:22:33.170533 2026] [:error] [pid 46953:tid 46975] [client 172.161.0.169:62378] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/gelio1.php"] [unique_id "aepjaUnlpdHh-P6wKbp_tQAAAlM"]
[Fri Apr 24 02:22:35.162803 2026] [:error] [pid 65000:tid 65030] [client 172.161.0.169:33129] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/gelio1.php"] [unique_id "aepja76vRb9j6psK2ZaQ0QAAAgE"]
[Fri Apr 24 02:22:36.786861 2026] [:error] [pid 65000:tid 65047] [client 172.161.0.169:51655] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws82.php"] [unique_id "aepjbL6vRb9j6psK2ZaQ2AAAAg4"]
[Fri Apr 24 02:22:39.300090 2026] [:error] [pid 65000:tid 65047] [client 172.161.0.169:53832] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws82.php"] [unique_id "aepjb76vRb9j6psK2ZaQ5gAAAg4"]
[Fri Apr 24 02:22:41.034341 2026] [:error] [pid 42971:tid 43006] [client 172.161.0.169:3046] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws82.php"] [unique_id "aepjcTEP2_5RswrH8bFUzgAAABQ"]
[Fri Apr 24 02:22:42.724440 2026] [:error] [pid 42971:tid 42986] [client 172.161.0.169:19975] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws82.php"] [unique_id "aepjcjEP2_5RswrH8bFU0wAAAAA"]
[Fri Apr 24 02:22:43.960872 2026] [:error] [pid 64998:tid 65018] [client 172.161.0.169:53868] [client 172.161.0.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/theme-compat/wp-login.php"] [unique_id "aepjc4V5EysYcTLjmwhCiwAAAdA"]
[Fri Apr 24 02:22:46.957183 2026] [proxy_fcgi:error] [pid 64998:tid 65005] [client 172.161.0.169:24977] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 02:22:47.199284 2026] [proxy_fcgi:error] [pid 64998:tid 65007] [client 172.161.0.169:24977] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 02:22:47.439248 2026] [proxy_fcgi:error] [pid 64998:tid 65006] [client 172.161.0.169:24977] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 02:22:47.677911 2026] [proxy_fcgi:error] [pid 64998:tid 65020] [client 172.161.0.169:24977] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 02:22:47.916773 2026] [proxy_fcgi:error] [pid 64998:tid 65011] [client 172.161.0.169:24977] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 02:22:48.166505 2026] [proxy_fcgi:error] [pid 64998:tid 65003] [client 172.161.0.169:24977] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 02:22:48.428294 2026] [proxy_fcgi:error] [pid 64998:tid 65008] [client 172.161.0.169:24977] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 02:22:48.673498 2026] [proxy_fcgi:error] [pid 64998:tid 65023] [client 172.161.0.169:24977] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 02:22:48.911569 2026] [proxy_fcgi:error] [pid 64998:tid 65014] [client 172.161.0.169:24977] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 02:22:49.379792 2026] [proxy_fcgi:error] [pid 64998:tid 65022] [client 172.161.0.169:24977] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 02:22:49.617079 2026] [proxy_fcgi:error] [pid 64998:tid 65021] [client 172.161.0.169:24977] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 02:22:49.851822 2026] [:error] [pid 64998:tid 65025] [client 172.161.0.169:24977] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/packsin1.php"] [unique_id "aepjeYV5EysYcTLjmwhCpAAAAdc"]
[Fri Apr 24 02:22:51.026972 2026] [:error] [pid 42972:tid 43018] [client 172.161.0.169:64317] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/packsin1.php"] [unique_id "aepje8OAb-3sOknsk4fO6AAAAEI"]
[Fri Apr 24 02:22:51.849510 2026] [:error] [pid 42973:tid 43049] [client 172.161.0.169:27961] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/packsin1.php"] [unique_id "aepje26I0QqmmmLTHE2MIAAAAIY"]
[Fri Apr 24 02:22:53.627423 2026] [:error] [pid 42972:tid 43028] [client 172.161.0.169:3054] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/packsin1.php"] [unique_id "aepjfcOAb-3sOknsk4fO8wAAAEw"]
[Fri Apr 24 02:23:13.925149 2026] [:error] [pid 46953:tid 46958] [client 172.161.0.169:17526] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/img.php"] [unique_id "aepjkUnlpdHh-P6wKbp_3AAAAkI"]
[Fri Apr 24 02:23:20.884045 2026] [:error] [pid 65000:tid 65055] [client 172.161.0.169:53840] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/img.php"] [unique_id "aepjmL6vRb9j6psK2ZaRjgAAAhY"]
[Fri Apr 24 02:23:22.641097 2026] [:error] [pid 65000:tid 65029] [client 172.161.0.169:64273] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/img.php"] [unique_id "aepjmr6vRb9j6psK2ZaRlgAAAgA"]
[Fri Apr 24 02:23:33.827309 2026] [:error] [pid 64998:tid 65024] [client 172.161.0.169:56268] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/chosen.php"] [unique_id "aepjpYV5EysYcTLjmwhCywAAAdY"]
[Fri Apr 24 02:23:39.938640 2026] [:error] [pid 64998:tid 65003] [client 172.161.0.169:64299] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/chosen.php"] [unique_id "aepjq4V5EysYcTLjmwhC9wAAAcE"]
[Fri Apr 24 02:23:41.613548 2026] [:error] [pid 65000:tid 65040] [client 172.161.0.169:62395] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/chosen.php"] [unique_id "aepjrb6vRb9j6psK2ZaRvwAAAgc"]
[Fri Apr 24 02:23:43.410662 2026] [:error] [pid 65000:tid 65057] [client 172.161.0.169:33094] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/chosen.php"] [unique_id "aepjr76vRb9j6psK2ZaRygAAAhg"]
[Fri Apr 24 02:23:45.081347 2026] [:error] [pid 65000:tid 65045] [client 172.161.0.169:56266] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/maxro.php"] [unique_id "aepjsb6vRb9j6psK2ZaR0gAAAgw"]
[Fri Apr 24 02:23:48.774655 2026] [:error] [pid 42973:tid 43061] [client 172.161.0.169:45315] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/maxro.php"] [unique_id "aepjtG6I0QqmmmLTHE2MYwAAAJI"]
[Fri Apr 24 02:23:54.215840 2026] [proxy_fcgi:error] [pid 64967:tid 64991] [client 172.161.0.169:15739] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 02:23:54.463123 2026] [proxy_fcgi:error] [pid 64967:tid 64977] [client 172.161.0.169:15739] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 02:23:54.700880 2026] [proxy_fcgi:error] [pid 64967:tid 64972] [client 172.161.0.169:15739] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 02:23:54.939473 2026] [proxy_fcgi:error] [pid 64967:tid 64992] [client 172.161.0.169:15739] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 02:23:55.185925 2026] [proxy_fcgi:error] [pid 64967:tid 64983] [client 172.161.0.169:15739] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 02:23:55.427092 2026] [proxy_fcgi:error] [pid 64967:tid 64973] [client 172.161.0.169:15739] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 02:23:55.667167 2026] [proxy_fcgi:error] [pid 64967:tid 64974] [client 172.161.0.169:15739] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 02:23:55.916299 2026] [proxy_fcgi:error] [pid 64967:tid 64982] [client 172.161.0.169:15739] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 02:23:56.382296 2026] [proxy_fcgi:error] [pid 64967:tid 64984] [client 172.161.0.169:15739] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 02:23:56.647636 2026] [proxy_fcgi:error] [pid 64967:tid 64969] [client 172.161.0.169:15739] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 02:23:56.886624 2026] [proxy_fcgi:error] [pid 64967:tid 64981] [client 172.161.0.169:15739] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 02:23:57.194708 2026] [:error] [pid 64967:tid 64976] [client 172.161.0.169:15739] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/aevly.php"] [unique_id "aepjvYAV4GfOOdX8QzqcsAAAAYc"]
[Fri Apr 24 02:24:02.247047 2026] [:error] [pid 65000:tid 65039] [client 172.161.0.169:39237] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/aevly.php"] [unique_id "aepjwr6vRb9j6psK2ZaSAQAAAgY"]
[Fri Apr 24 02:24:08.158541 2026] [:error] [pid 64967:tid 64977] [client 172.161.0.169:19971] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/aevly.php"] [unique_id "aepjyIAV4GfOOdX8QzqcswAAAYg"]
[Fri Apr 24 02:24:10.388315 2026] [:error] [pid 42973:tid 43051] [client 172.161.0.169:51674] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/aevly.php"] [unique_id "aepjym6I0QqmmmLTHE2MgAAAAIg"]
[Fri Apr 24 02:24:12.962902 2026] [:error] [pid 46953:tid 46981] [client 172.161.0.169:33116] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws68.php"] [unique_id "aepjzEnlpdHh-P6wKbp_-AAAAlg"]
[Fri Apr 24 02:24:14.284979 2026] [:error] [pid 46953:tid 46961] [client 172.161.0.169:39286] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws68.php"] [unique_id "aepjzknlpdHh-P6wKbp_-QAAAkU"]
[Fri Apr 24 02:24:17.299857 2026] [:error] [pid 64998:tid 65017] [client 172.161.0.169:64294] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws68.php"] [unique_id "aepj0YV5EysYcTLjmwhDJwAAAc8"]
[Fri Apr 24 02:24:20.565997 2026] [:error] [pid 65000:tid 65039] [client 172.161.0.169:64289] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws68.php"] [unique_id "aepj1L6vRb9j6psK2ZaSawAAAgY"]
[Fri Apr 24 02:24:24.573212 2026] [:error] [pid 46953:tid 46958] [client 172.161.0.169:33124] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/pp.php"] [unique_id "aepj2EnlpdHh-P6wKbqAAgAAAkI"]
[Fri Apr 24 02:24:26.613702 2026] [:error] [pid 42972:tid 43016] [client 172.161.0.169:41030] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/pp.php"] [unique_id "aepj2sOAb-3sOknsk4fPygAAAEA"]
[Fri Apr 24 02:24:28.404622 2026] [:error] [pid 46953:tid 46960] [client 172.161.0.169:24983] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/pp.php"] [unique_id "aepj3EnlpdHh-P6wKbqABQAAAkQ"]
[Fri Apr 24 02:24:29.792522 2026] [:error] [pid 42972:tid 43036] [client 172.161.0.169:64271] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/pp.php"] [unique_id "aepj3cOAb-3sOknsk4fP1AAAAFQ"]
[Fri Apr 24 02:24:31.201774 2026] [:error] [pid 42973:tid 43056] [client 172.161.0.169:51656] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/yuzuru1.php"] [unique_id "aepj326I0QqmmmLTHE2MnAAAAI0"]
[Fri Apr 24 02:24:34.451570 2026] [:error] [pid 46953:tid 46957] [client 172.161.0.169:53859] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/yuzuru1.php"] [unique_id "aepj4knlpdHh-P6wKbqACwAAAkE"]
[Fri Apr 24 02:24:36.004036 2026] [:error] [pid 42971:tid 43007] [client 172.161.0.169:17527] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/yuzuru1.php"] [unique_id "aepj5DEP2_5RswrH8bFVFQAAABU"]
[Fri Apr 24 02:24:40.221181 2026] [:error] [pid 65000:tid 65045] [client 172.161.0.169:62386] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/yuzuru1.php"] [unique_id "aepj6L6vRb9j6psK2ZaSkgAAAgw"]
[Fri Apr 24 02:24:43.878465 2026] [:error] [pid 64998:tid 65020] [client 172.161.0.169:19462] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/son1.php"] [unique_id "aepj64V5EysYcTLjmwhDdQAAAdI"]
[Fri Apr 24 02:24:47.152049 2026] [:error] [pid 46953:tid 46964] [client 172.161.0.169:17487] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/son1.php"] [unique_id "aepj70nlpdHh-P6wKbqAIQAAAkg"]
[Fri Apr 24 02:24:48.203432 2026] [:error] [pid 43083:tid 43089] [client 172.161.0.169:24982] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/son1.php"] [unique_id "aepj8DC5hrvNXosL83KzDAAAAMQ"]
[Fri Apr 24 02:24:50.189971 2026] [:error] [pid 42973:tid 43050] [client 172.161.0.169:33102] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/son1.php"] [unique_id "aepj8m6I0QqmmmLTHE2MsAAAAIc"]
[Fri Apr 24 02:24:51.214677 2026] [:error] [pid 42972:tid 43020] [client 172.161.0.169:15681] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/tx79.php"] [unique_id "aepj88OAb-3sOknsk4fP8wAAAEQ"]
[Fri Apr 24 02:24:54.223477 2026] [:error] [pid 42972:tid 43040] [client 172.161.0.169:33119] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/tx79.php"] [unique_id "aepj9sOAb-3sOknsk4fQAQAAAFg"]
[Fri Apr 24 02:24:59.606184 2026] [proxy_fcgi:error] [pid 42972:tid 43020] [client 172.161.0.169:64270] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 02:24:59.841792 2026] [proxy_fcgi:error] [pid 42972:tid 43017] [client 172.161.0.169:64270] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 02:25:00.085366 2026] [proxy_fcgi:error] [pid 42972:tid 43028] [client 172.161.0.169:64270] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 02:25:00.342279 2026] [proxy_fcgi:error] [pid 42972:tid 43033] [client 172.161.0.169:64270] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 02:25:00.633136 2026] [proxy_fcgi:error] [pid 42972:tid 43032] [client 172.161.0.169:64270] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 03:27:18.162639 2026] [proxy_fcgi:error] [pid 64998:tid 65020] [client 23.100.50.155:17006] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 03:27:18.417188 2026] [proxy_fcgi:error] [pid 64998:tid 65026] [client 23.100.50.155:17006] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 03:27:18.670562 2026] [proxy_fcgi:error] [pid 64998:tid 65010] [client 23.100.50.155:17006] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 03:27:18.923847 2026] [proxy_fcgi:error] [pid 64998:tid 65009] [client 23.100.50.155:17006] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 03:27:19.184143 2026] [proxy_fcgi:error] [pid 64998:tid 65014] [client 23.100.50.155:17006] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 03:27:19.438657 2026] [proxy_fcgi:error] [pid 64998:tid 65013] [client 23.100.50.155:17006] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 03:27:19.691408 2026] [proxy_fcgi:error] [pid 64998:tid 65023] [client 23.100.50.155:17006] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 04:29:39.427615 2026] [proxy_fcgi:error] [pid 19200:tid 19223] [client 20.166.78.84:42950] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 04:29:39.706294 2026] [proxy_fcgi:error] [pid 19200:tid 19225] [client 20.166.78.84:42950] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 04:29:39.966711 2026] [proxy_fcgi:error] [pid 19200:tid 19220] [client 20.166.78.84:42950] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 04:29:40.228352 2026] [proxy_fcgi:error] [pid 19200:tid 19222] [client 20.166.78.84:42950] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 04:29:40.489039 2026] [proxy_fcgi:error] [pid 19200:tid 19230] [client 20.166.78.84:42950] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 04:29:40.743805 2026] [proxy_fcgi:error] [pid 19200:tid 19232] [client 20.166.78.84:42950] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 04:29:41.263163 2026] [proxy_fcgi:error] [pid 19200:tid 19215] [client 20.166.78.84:42950] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 04:29:41.526646 2026] [proxy_fcgi:error] [pid 19200:tid 19212] [client 20.166.78.84:42950] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 04:29:41.783538 2026] [proxy_fcgi:error] [pid 19200:tid 19208] [client 20.166.78.84:42950] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 04:29:42.036347 2026] [:error] [pid 19200:tid 19221] [client 20.166.78.84:42950] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wziar1.php"] [unique_id "aeqBNjQ--M3-tsKAnhFo1gAAAM0"]
[Fri Apr 24 04:29:42.796621 2026] [:error] [pid 19200:tid 19214] [client 20.166.78.84:42996] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wziar1.php"] [unique_id "aeqBNjQ--M3-tsKAnhFo2AAAAMY"]
[Fri Apr 24 04:29:43.801990 2026] [:error] [pid 19200:tid 19222] [client 20.166.78.84:42994] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wziar1.php"] [unique_id "aeqBNzQ--M3-tsKAnhFo3QAAAM4"]
[Fri Apr 24 04:29:44.405571 2026] [:error] [pid 19200:tid 19227] [client 20.166.78.84:42902] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wziar1.php"] [unique_id "aeqBODQ--M3-tsKAnhFo4AAAANM"]
[Fri Apr 24 04:29:44.948950 2026] [:error] [pid 19200:tid 19218] [client 20.166.78.84:42951] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/public/oLEzRVqmJJPFSucdefault.php"] [unique_id "aeqBODQ--M3-tsKAnhFo5AAAAMo"]
[Fri Apr 24 04:29:45.691893 2026] [:error] [pid 19200:tid 19212] [client 20.166.78.84:43003] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/public/oLEzRVqmJJPFSucdefault.php"] [unique_id "aeqBOTQ--M3-tsKAnhFo5gAAAMQ"]
[Fri Apr 24 04:29:46.289656 2026] [:error] [pid 19200:tid 19214] [client 20.166.78.84:42952] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/public/oLEzRVqmJJPFSucdefault.php"] [unique_id "aeqBOjQ--M3-tsKAnhFo6QAAAMY"]
[Fri Apr 24 04:29:46.975066 2026] [:error] [pid 19200:tid 19220] [client 20.166.78.84:42891] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/public/oLEzRVqmJJPFSucdefault.php"] [unique_id "aeqBOjQ--M3-tsKAnhFo7gAAAMw"]
[Fri Apr 24 04:29:47.607804 2026] [:error] [pid 19200:tid 19230] [client 20.166.78.84:42987] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/7logs.php"] [unique_id "aeqBOzQ--M3-tsKAnhFo8AAAANY"]
[Fri Apr 24 04:29:48.470715 2026] [:error] [pid 19102:tid 19178] [client 20.166.78.84:42980] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/7logs.php"] [unique_id "aeqBPADSgrbLEZbkqD6ZIwAAAI4"]
[Fri Apr 24 04:29:49.289662 2026] [:error] [pid 52129:tid 52147] [client 20.166.78.84:42980] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/7logs.php"] [unique_id "aeqBPeKCZKf8_u2LKiAYXAAAAQ4"]
[Fri Apr 24 04:29:49.946829 2026] [:error] [pid 52129:tid 52156] [client 20.166.78.84:42991] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/7logs.php"] [unique_id "aeqBPeKCZKf8_u2LKiAYXgAAARc"]
[Fri Apr 24 04:29:50.708279 2026] [:error] [pid 52129:tid 52135] [client 20.166.78.84:42953] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "aeqBPuKCZKf8_u2LKiAYYQAAAQI"]
[Fri Apr 24 04:29:51.520696 2026] [:error] [pid 19100:tid 19126] [client 20.166.78.84:42988] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "aeqBP7F_hzQs4CqbifftqQAAABA"]
[Fri Apr 24 04:29:52.377350 2026] [:error] [pid 19101:tid 19147] [client 20.166.78.84:42886] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "aeqBQGAHj9bEvrTgbO2wjwAAAEo"]
[Fri Apr 24 04:29:53.280956 2026] [:error] [pid 19100:tid 19119] [client 20.166.78.84:42965] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "aeqBQbF_hzQs4CqbifftrQAAAAk"]
[Fri Apr 24 04:29:54.009761 2026] [:error] [pid 19200:tid 19224] [client 20.166.78.84:42899] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/as.php"] [unique_id "aeqBQjQ--M3-tsKAnhFpAgAAANA"]
[Fri Apr 24 04:29:55.006050 2026] [:error] [pid 19200:tid 19228] [client 20.166.78.84:42968] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/as.php"] [unique_id "aeqBQzQ--M3-tsKAnhFpBgAAANQ"]
[Fri Apr 24 04:29:56.255113 2026] [:error] [pid 19102:tid 19176] [client 20.166.78.84:42966] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/as.php"] [unique_id "aeqBRADSgrbLEZbkqD6ZJwAAAIw"]
[Fri Apr 24 04:29:57.412171 2026] [:error] [pid 19200:tid 19216] [client 20.166.78.84:42964] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/as.php"] [unique_id "aeqBRTQ--M3-tsKAnhFpDgAAAMg"]
[Fri Apr 24 04:29:58.227433 2026] [:error] [pid 19102:tid 19187] [client 20.166.78.84:42909] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ctex1.php"] [unique_id "aeqBRgDSgrbLEZbkqD6ZKwAAAJc"]
[Fri Apr 24 04:29:59.329736 2026] [:error] [pid 52129:tid 52153] [client 20.166.78.84:43006] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ctex1.php"] [unique_id "aeqBR-KCZKf8_u2LKiAYcwAAARQ"]
[Fri Apr 24 04:30:00.136100 2026] [:error] [pid 52129:tid 52157] [client 20.166.78.84:42985] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ctex1.php"] [unique_id "aeqBSOKCZKf8_u2LKiAYeAAAARg"]
[Fri Apr 24 04:30:00.984343 2026] [:error] [pid 19200:tid 19222] [client 20.166.78.84:43001] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ctex1.php"] [unique_id "aeqBSDQ--M3-tsKAnhFpFQAAAM4"]
[Fri Apr 24 04:30:01.841052 2026] [:error] [pid 19200:tid 19229] [client 20.166.78.84:42967] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lb.php"] [unique_id "aeqBSTQ--M3-tsKAnhFpGAAAANU"]
[Fri Apr 24 04:30:02.948606 2026] [:error] [pid 19101:tid 19158] [client 20.166.78.84:14405] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lb.php"] [unique_id "aeqBSmAHj9bEvrTgbO2wnwAAAFU"]
[Fri Apr 24 04:30:04.088318 2026] [:error] [pid 19102:tid 19181] [client 20.166.78.84:42937] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lb.php"] [unique_id "aeqBTADSgrbLEZbkqD6ZNQAAAJE"]
[Fri Apr 24 04:30:05.207016 2026] [:error] [pid 19200:tid 19224] [client 20.166.78.84:42936] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lb.php"] [unique_id "aeqBTTQ--M3-tsKAnhFpIgAAANA"]
[Fri Apr 24 04:30:05.954512 2026] [:error] [pid 19102:tid 19180] [client 20.166.78.84:42960] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cilus.php"] [unique_id "aeqBTQDSgrbLEZbkqD6ZPQAAAJA"]
[Fri Apr 24 04:30:06.792686 2026] [:error] [pid 19200:tid 19215] [client 20.166.78.84:43004] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cilus.php"] [unique_id "aeqBTjQ--M3-tsKAnhFpLQAAAMc"]
[Fri Apr 24 04:30:07.412669 2026] [:error] [pid 19200:tid 19217] [client 20.166.78.84:42956] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cilus.php"] [unique_id "aeqBTzQ--M3-tsKAnhFpNQAAAMk"]
[Fri Apr 24 04:30:08.544120 2026] [:error] [pid 19100:tid 19112] [client 20.166.78.84:42897] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cilus.php"] [unique_id "aeqBULF_hzQs4CqbifftrgAAAAM"]
[Fri Apr 24 04:30:09.318939 2026] [:error] [pid 52129:tid 52136] [client 20.166.78.84:42984] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mh.php"] [unique_id "aeqBUeKCZKf8_u2LKiAYkwAAAQM"]
[Fri Apr 24 04:30:10.120312 2026] [:error] [pid 52129:tid 52150] [client 20.166.78.84:42935] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mh.php"] [unique_id "aeqBUuKCZKf8_u2LKiAYlgAAARE"]
[Fri Apr 24 04:30:10.982995 2026] [:error] [pid 19101:tid 19153] [client 20.166.78.84:42949] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mh.php"] [unique_id "aeqBUmAHj9bEvrTgbO2wpAAAAFA"]
[Fri Apr 24 04:30:11.695537 2026] [:error] [pid 52129:tid 52146] [client 20.166.78.84:42910] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mh.php"] [unique_id "aeqBU-KCZKf8_u2LKiAYnwAAAQ0"]
[Fri Apr 24 04:30:12.332954 2026] [:error] [pid 19102:tid 19187] [client 20.166.78.84:42993] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fone1.php"] [unique_id "aeqBVADSgrbLEZbkqD6ZQQAAAJc"]
[Fri Apr 24 04:30:13.135560 2026] [:error] [pid 19102:tid 19182] [client 20.166.78.84:42890] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fone1.php"] [unique_id "aeqBVQDSgrbLEZbkqD6ZQgAAAJI"]
[Fri Apr 24 04:30:13.994627 2026] [:error] [pid 19200:tid 19224] [client 20.166.78.84:42906] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fone1.php"] [unique_id "aeqBVTQ--M3-tsKAnhFpQgAAANA"]
[Fri Apr 24 04:30:14.944701 2026] [:error] [pid 19200:tid 19232] [client 20.166.78.84:42887] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fone1.php"] [unique_id "aeqBVjQ--M3-tsKAnhFpRgAAANg"]
[Fri Apr 24 04:30:15.521563 2026] [:error] [pid 52129:tid 52152] [client 20.166.78.84:42998] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/auth.php"] [unique_id "aeqBV-KCZKf8_u2LKiAYpwAAARM"]
[Fri Apr 24 04:30:16.163922 2026] [:error] [pid 19102:tid 19165] [client 20.166.78.84:42978] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/auth.php"] [unique_id "aeqBWADSgrbLEZbkqD6ZRgAAAIE"]
[Fri Apr 24 04:30:16.821085 2026] [:error] [pid 19101:tid 19137] [client 20.166.78.84:42901] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/auth.php"] [unique_id "aeqBWGAHj9bEvrTgbO2wqAAAAEA"]
[Fri Apr 24 04:30:17.580633 2026] [:error] [pid 52129:tid 52155] [client 20.166.78.84:42971] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/auth.php"] [unique_id "aeqBWeKCZKf8_u2LKiAYsAAAARY"]
[Fri Apr 24 04:30:18.248770 2026] [:error] [pid 19101:tid 19161] [client 20.166.78.84:42958] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ortasekerli1.php"] [unique_id "aeqBWmAHj9bEvrTgbO2wqQAAAFg"]
[Fri Apr 24 04:30:19.038059 2026] [:error] [pid 52129:tid 52137] [client 20.166.78.84:42972] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ortasekerli1.php"] [unique_id "aeqBW-KCZKf8_u2LKiAYtQAAAQQ"]
[Fri Apr 24 04:30:19.848167 2026] [:error] [pid 19101:tid 19140] [client 20.166.78.84:42885] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ortasekerli1.php"] [unique_id "aeqBW2AHj9bEvrTgbO2wqgAAAEM"]
[Fri Apr 24 04:30:20.583716 2026] [:error] [pid 19200:tid 19209] [client 20.166.78.84:14403] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ortasekerli1.php"] [unique_id "aeqBXDQ--M3-tsKAnhFpTgAAAME"]
[Fri Apr 24 04:30:21.193599 2026] [:error] [pid 19101:tid 19151] [client 20.166.78.84:42979] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/about.php"] [unique_id "aeqBXWAHj9bEvrTgbO2wrgAAAE4"]
[Fri Apr 24 04:30:21.872718 2026] [:error] [pid 19102:tid 19180] [client 20.166.78.84:42903] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/about.php"] [unique_id "aeqBXQDSgrbLEZbkqD6ZUwAAAJA"]
[Fri Apr 24 04:30:22.546916 2026] [:error] [pid 19200:tid 19210] [client 20.166.78.84:42995] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/about.php"] [unique_id "aeqBXjQ--M3-tsKAnhFpUQAAAMI"]
[Fri Apr 24 04:30:23.170937 2026] [:error] [pid 52129:tid 52137] [client 20.166.78.84:42922] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/about.php"] [unique_id "aeqBX-KCZKf8_u2LKiAYvgAAAQQ"]
[Fri Apr 24 04:30:23.966144 2026] [:error] [pid 52129:tid 52150] [client 20.166.78.84:42961] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-png.php"] [unique_id "aeqBX-KCZKf8_u2LKiAYwwAAARE"]
[Fri Apr 24 04:30:24.694875 2026] [:error] [pid 19102:tid 19167] [client 20.166.78.84:42882] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-png.php"] [unique_id "aeqBYADSgrbLEZbkqD6ZVgAAAIM"]
[Fri Apr 24 04:30:25.300277 2026] [:error] [pid 19101:tid 19154] [client 20.166.78.84:42970] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-png.php"] [unique_id "aeqBYWAHj9bEvrTgbO2wtgAAAFE"]
[Fri Apr 24 04:30:26.021663 2026] [:error] [pid 19200:tid 19211] [client 20.166.78.84:42973] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-png.php"] [unique_id "aeqBYjQ--M3-tsKAnhFpXAAAAMM"]
[Fri Apr 24 04:30:26.870568 2026] [:error] [pid 19100:tid 19116] [client 20.166.78.84:42894] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tx79.php"] [unique_id "aeqBYrF_hzQs4CqbifftxQAAAAc"]
[Fri Apr 24 04:30:27.501298 2026] [:error] [pid 19102:tid 19164] [client 20.166.78.84:42923] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tx79.php"] [unique_id "aeqBYwDSgrbLEZbkqD6ZWQAAAIA"]
[Fri Apr 24 04:30:28.311587 2026] [:error] [pid 19102:tid 19166] [client 20.166.78.84:42905] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tx79.php"] [unique_id "aeqBZADSgrbLEZbkqD6ZXQAAAII"]
[Fri Apr 24 04:30:29.372414 2026] [:error] [pid 19101:tid 19151] [client 20.166.78.84:14432] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tx79.php"] [unique_id "aeqBZWAHj9bEvrTgbO2wvgAAAE4"]
[Fri Apr 24 04:30:30.699487 2026] [:error] [pid 19200:tid 19213] [client 20.166.78.84:42898] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/8.php"] [unique_id "aeqBZjQ--M3-tsKAnhFpYwAAAMU"]
[Fri Apr 24 04:30:31.431859 2026] [:error] [pid 19101:tid 19150] [client 20.166.78.84:42919] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/8.php"] [unique_id "aeqBZ2AHj9bEvrTgbO2wxAAAAE0"]
[Fri Apr 24 04:30:32.416507 2026] [:error] [pid 19102:tid 19169] [client 20.166.78.84:14434] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/8.php"] [unique_id "aeqBaADSgrbLEZbkqD6ZaAAAAIU"]
[Fri Apr 24 04:30:33.274183 2026] [:error] [pid 19102:tid 19164] [client 20.166.78.84:42895] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/8.php"] [unique_id "aeqBaQDSgrbLEZbkqD6ZbAAAAIA"]
[Fri Apr 24 04:30:34.109063 2026] [:error] [pid 52129:tid 52144] [client 20.166.78.84:42884] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "aeqBauKCZKf8_u2LKiAYzgAAAQs"]
[Fri Apr 24 04:30:34.927645 2026] [:error] [pid 19100:tid 19115] [client 20.166.78.84:42962] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "aeqBarF_hzQs4Cqbifft1AAAAAY"]
[Fri Apr 24 04:30:35.682331 2026] [:error] [pid 19100:tid 19133] [client 20.166.78.84:42990] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "aeqBa7F_hzQs4Cqbifft1QAAABc"]
[Fri Apr 24 04:30:36.348403 2026] [:error] [pid 52129:tid 52155] [client 20.166.78.84:42933] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "aeqBbOKCZKf8_u2LKiAY0wAAARY"]
[Fri Apr 24 04:30:37.287709 2026] [:error] [pid 19100:tid 19130] [client 20.166.78.84:42997] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bfil.php"] [unique_id "aeqBbbF_hzQs4Cqbifft2AAAABQ"]
[Fri Apr 24 04:30:38.599914 2026] [:error] [pid 52129:tid 52146] [client 20.166.78.84:42931] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bfil.php"] [unique_id "aeqBbuKCZKf8_u2LKiAY4AAAAQ0"]
[Fri Apr 24 04:30:39.339765 2026] [:error] [pid 19102:tid 19177] [client 20.166.78.84:14400] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bfil.php"] [unique_id "aeqBbwDSgrbLEZbkqD6ZdQAAAI0"]
[Fri Apr 24 04:30:40.879169 2026] [:error] [pid 19200:tid 19229] [client 20.166.78.84:42981] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bfil.php"] [unique_id "aeqBcDQ--M3-tsKAnhFpfwAAANU"]
[Fri Apr 24 04:30:41.789292 2026] [proxy_fcgi:error] [pid 52129:tid 52138] [client 20.166.78.84:43002] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 04:30:42.084553 2026] [proxy_fcgi:error] [pid 52129:tid 52134] [client 20.166.78.84:43002] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 04:30:42.367937 2026] [proxy_fcgi:error] [pid 52129:tid 52156] [client 20.166.78.84:43002] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 04:30:42.634009 2026] [proxy_fcgi:error] [pid 52129:tid 52142] [client 20.166.78.84:43002] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 04:30:42.904811 2026] [proxy_fcgi:error] [pid 52129:tid 52149] [client 20.166.78.84:43002] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 04:30:43.165192 2026] [proxy_fcgi:error] [pid 52129:tid 52133] [client 20.166.78.84:43002] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 04:30:43.424727 2026] [proxy_fcgi:error] [pid 52129:tid 52140] [client 20.166.78.84:43002] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 04:30:43.773294 2026] [proxy_fcgi:error] [pid 52129:tid 52152] [client 20.166.78.84:43002] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 04:30:44.029213 2026] [proxy_fcgi:error] [pid 52129:tid 52134] [client 20.166.78.84:43002] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 04:30:44.298816 2026] [proxy_fcgi:error] [pid 52129:tid 52144] [client 20.166.78.84:43002] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 04:30:44.557103 2026] [proxy_fcgi:error] [pid 52129:tid 52142] [client 20.166.78.84:43002] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 04:30:44.818812 2026] [:error] [pid 52129:tid 52149] [client 20.166.78.84:43002] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gptsh.php"] [unique_id "aeqBdOKCZKf8_u2LKiAZBwAAARA"]
[Fri Apr 24 04:30:45.663314 2026] [:error] [pid 19101:tid 19154] [client 20.166.78.84:14420] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gptsh.php"] [unique_id "aeqBdWAHj9bEvrTgbO2wywAAAFE"]
[Fri Apr 24 04:30:46.352193 2026] [:error] [pid 19200:tid 19209] [client 20.166.78.84:42912] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gptsh.php"] [unique_id "aeqBdjQ--M3-tsKAnhFpjwAAAME"]
[Fri Apr 24 04:30:47.341002 2026] [:error] [pid 19101:tid 19141] [client 20.166.78.84:42926] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gptsh.php"] [unique_id "aeqBd2AHj9bEvrTgbO2wzgAAAEQ"]
[Fri Apr 24 04:30:48.067482 2026] [:error] [pid 19200:tid 19210] [client 20.166.78.84:42934] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/0x.php"] [unique_id "aeqBeDQ--M3-tsKAnhFplgAAAMI"]
[Fri Apr 24 04:30:48.674153 2026] [:error] [pid 19200:tid 19223] [client 20.166.78.84:42904] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/0x.php"] [unique_id "aeqBeDQ--M3-tsKAnhFpmQAAAM8"]
[Fri Apr 24 04:30:49.557051 2026] [:error] [pid 19200:tid 19212] [client 20.166.78.84:42974] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/0x.php"] [unique_id "aeqBeTQ--M3-tsKAnhFpnQAAAMQ"]
[Fri Apr 24 04:30:50.323585 2026] [:error] [pid 19200:tid 19221] [client 20.166.78.84:14447] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/0x.php"] [unique_id "aeqBejQ--M3-tsKAnhFpnwAAAM0"]
[Fri Apr 24 04:30:51.795660 2026] [:error] [pid 52129:tid 52151] [client 20.166.78.84:14339] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bgymj.php"] [unique_id "aeqBe-KCZKf8_u2LKiAZDwAAARI"]
[Fri Apr 24 04:30:52.747336 2026] [:error] [pid 52129:tid 52153] [client 20.166.78.84:14425] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bgymj.php"] [unique_id "aeqBfOKCZKf8_u2LKiAZFAAAARQ"]
[Fri Apr 24 04:30:53.619206 2026] [:error] [pid 52129:tid 52140] [client 20.166.78.84:14423] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bgymj.php"] [unique_id "aeqBfeKCZKf8_u2LKiAZGgAAAQc"]
[Fri Apr 24 04:30:54.588966 2026] [:error] [pid 19101:tid 19159] [client 20.166.78.84:42917] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bgymj.php"] [unique_id "aeqBfmAHj9bEvrTgbO2w1wAAAFY"]
[Fri Apr 24 04:30:55.199998 2026] [:error] [pid 19100:tid 19127] [client 20.166.78.84:42883] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/100.php"] [unique_id "aeqBf7F_hzQs4Cqbifft4QAAABE"]
[Fri Apr 24 04:30:56.153153 2026] [:error] [pid 19101:tid 19149] [client 20.166.78.84:42954] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/100.php"] [unique_id "aeqBgGAHj9bEvrTgbO2w2QAAAEw"]
[Fri Apr 24 04:30:57.019569 2026] [:error] [pid 19101:tid 19144] [client 20.166.78.84:14406] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/100.php"] [unique_id "aeqBgWAHj9bEvrTgbO2w3gAAAEc"]
[Fri Apr 24 04:30:57.962146 2026] [:error] [pid 19100:tid 19118] [client 20.166.78.84:42929] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/100.php"] [unique_id "aeqBgbF_hzQs4Cqbifft6AAAAAg"]
[Fri Apr 24 04:30:58.829743 2026] [:error] [pid 19102:tid 19179] [client 20.166.78.84:42945] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bolt.php"] [unique_id "aeqBggDSgrbLEZbkqD6ZjgAAAI8"]
[Fri Apr 24 04:30:59.967091 2026] [:error] [pid 19102:tid 19188] [client 20.166.78.84:42892] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bolt.php"] [unique_id "aeqBgwDSgrbLEZbkqD6ZlgAAAJg"]
[Fri Apr 24 04:31:00.682516 2026] [:error] [pid 19102:tid 19182] [client 20.166.78.84:14341] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bolt.php"] [unique_id "aeqBhADSgrbLEZbkqD6ZmQAAAJI"]
[Fri Apr 24 04:31:01.520992 2026] [:error] [pid 19100:tid 19122] [client 20.166.78.84:14438] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bolt.php"] [unique_id "aeqBhbF_hzQs4Cqbifft8wAAAAw"]
[Fri Apr 24 04:31:02.188867 2026] [:error] [pid 19100:tid 19115] [client 20.166.78.84:14416] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/koiy.php"] [unique_id "aeqBhrF_hzQs4Cqbifft9QAAAAY"]
[Fri Apr 24 04:31:03.101858 2026] [:error] [pid 19200:tid 19227] [client 20.166.78.84:42969] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/koiy.php"] [unique_id "aeqBhzQ--M3-tsKAnhFppgAAANM"]
[Fri Apr 24 04:31:04.318154 2026] [:error] [pid 52129:tid 52138] [client 20.166.78.84:42989] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/koiy.php"] [unique_id "aeqBiOKCZKf8_u2LKiAZMAAAAQU"]
[Fri Apr 24 04:31:05.063902 2026] [:error] [pid 19101:tid 19157] [client 20.166.78.84:42889] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/koiy.php"] [unique_id "aeqBiWAHj9bEvrTgbO2w6AAAAFQ"]
[Fri Apr 24 04:31:06.022252 2026] [:error] [pid 52129:tid 52146] [client 20.166.78.84:42927] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/albin.php"] [unique_id "aeqBiuKCZKf8_u2LKiAZPQAAAQ0"]
[Fri Apr 24 04:31:06.753860 2026] [:error] [pid 19200:tid 19225] [client 20.166.78.84:14413] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/albin.php"] [unique_id "aeqBijQ--M3-tsKAnhFprwAAANE"]
[Fri Apr 24 04:31:07.386579 2026] [:error] [pid 19200:tid 19213] [client 20.166.78.84:42913] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/albin.php"] [unique_id "aeqBizQ--M3-tsKAnhFpsgAAAMU"]
[Fri Apr 24 04:31:08.095755 2026] [:error] [pid 19100:tid 19127] [client 20.166.78.84:14421] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/albin.php"] [unique_id "aeqBjLF_hzQs4Cqbifft_AAAABE"]
[Fri Apr 24 04:31:08.794689 2026] [:error] [pid 52129:tid 52143] [client 20.166.78.84:42916] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-the.php"] [unique_id "aeqBjOKCZKf8_u2LKiAZQgAAAQo"]
[Fri Apr 24 04:31:09.646834 2026] [:error] [pid 19100:tid 19122] [client 20.166.78.84:43007] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-the.php"] [unique_id "aeqBjbF_hzQs4Cqbifft_gAAAAw"]
[Fri Apr 24 04:31:10.484082 2026] [:error] [pid 19100:tid 19121] [client 20.166.78.84:42975] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-the.php"] [unique_id "aeqBjrF_hzQs4Cqbifft_wAAAAs"]
[Fri Apr 24 04:31:11.500222 2026] [:error] [pid 19200:tid 19232] [client 20.166.78.84:42907] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-the.php"] [unique_id "aeqBjzQ--M3-tsKAnhFpvwAAANg"]
[Fri Apr 24 04:31:12.696113 2026] [:error] [pid 19200:tid 19220] [client 20.166.78.84:42939] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sa.php7"] [unique_id "aeqBkDQ--M3-tsKAnhFpwwAAAMw"]
[Fri Apr 24 04:31:13.557492 2026] [:error] [pid 19100:tid 19116] [client 20.166.78.84:42939] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sa.php7"] [unique_id "aeqBkbF_hzQs4CqbiffuAgAAAAc"]
[Fri Apr 24 04:31:14.529963 2026] [:error] [pid 19100:tid 19134] [client 20.166.78.84:14459] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sa.php7"] [unique_id "aeqBkrF_hzQs4CqbiffuBQAAABg"]
[Fri Apr 24 04:31:15.246829 2026] [:error] [pid 52129:tid 52140] [client 20.166.78.84:43000] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sa.php7"] [unique_id "aeqBk-KCZKf8_u2LKiAZRwAAAQc"]
[Fri Apr 24 04:31:15.957169 2026] [:error] [pid 52129:tid 52146] [client 20.166.78.84:42928] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a7.php"] [unique_id "aeqBk-KCZKf8_u2LKiAZSgAAAQ0"]
[Fri Apr 24 04:31:16.695821 2026] [:error] [pid 19200:tid 19226] [client 20.166.78.84:14414] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a7.php"] [unique_id "aeqBlDQ--M3-tsKAnhFp0QAAANI"]
[Fri Apr 24 04:31:17.598330 2026] [:error] [pid 19200:tid 19231] [client 20.166.78.84:42992] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a7.php"] [unique_id "aeqBlTQ--M3-tsKAnhFp1wAAANc"]
[Fri Apr 24 04:31:18.775280 2026] [:error] [pid 19200:tid 19222] [client 20.166.78.84:42896] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a7.php"] [unique_id "aeqBljQ--M3-tsKAnhFp3gAAAM4"]
[Fri Apr 24 04:31:20.254900 2026] [:error] [pid 19200:tid 19221] [client 20.166.78.84:42986] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp9.php"] [unique_id "aeqBmDQ--M3-tsKAnhFp6gAAAM0"]
[Fri Apr 24 04:31:21.114301 2026] [:error] [pid 19200:tid 19210] [client 20.166.78.84:42930] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp9.php"] [unique_id "aeqBmTQ--M3-tsKAnhFp7gAAAMI"]
[Fri Apr 24 04:31:21.961014 2026] [:error] [pid 19100:tid 19111] [client 20.166.78.84:42888] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp9.php"] [unique_id "aeqBmbF_hzQs4CqbiffuEQAAAAI"]
[Fri Apr 24 04:31:22.872167 2026] [:error] [pid 19101:tid 19148] [client 20.166.78.84:42946] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp9.php"] [unique_id "aeqBmmAHj9bEvrTgbO2w_wAAAEs"]
[Fri Apr 24 04:31:23.762973 2026] [:error] [pid 52129:tid 52152] [client 20.166.78.84:42938] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bthil.php"] [unique_id "aeqBm-KCZKf8_u2LKiAZZQAAARM"]
[Fri Apr 24 04:31:24.801196 2026] [:error] [pid 19100:tid 19112] [client 20.166.78.84:14428] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bthil.php"] [unique_id "aeqBnLF_hzQs4CqbiffuFwAAAAM"]
[Fri Apr 24 04:31:25.580470 2026] [:error] [pid 19102:tid 19180] [client 20.166.78.84:43005] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bthil.php"] [unique_id "aeqBnQDSgrbLEZbkqD6ZsQAAAJA"]
[Fri Apr 24 04:31:26.310933 2026] [:error] [pid 19102:tid 19188] [client 20.166.78.84:14436] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bthil.php"] [unique_id "aeqBngDSgrbLEZbkqD6ZtAAAAJg"]
[Fri Apr 24 04:31:26.924740 2026] [:error] [pid 52129:tid 52157] [client 20.166.78.84:42924] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp5.php"] [unique_id "aeqBnuKCZKf8_u2LKiAZawAAARg"]
[Fri Apr 24 04:31:27.672036 2026] [:error] [pid 19100:tid 19126] [client 20.166.78.84:14443] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp5.php"] [unique_id "aeqBn7F_hzQs4CqbiffuHAAAABA"]
[Fri Apr 24 04:31:28.684758 2026] [:error] [pid 19200:tid 19224] [client 20.166.78.84:42911] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp5.php"] [unique_id "aeqBoDQ--M3-tsKAnhFqAAAAANA"]
[Fri Apr 24 04:31:29.441327 2026] [:error] [pid 19101:tid 19145] [client 20.166.78.84:42977] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp5.php"] [unique_id "aeqBoWAHj9bEvrTgbO2xCAAAAEg"]
[Fri Apr 24 04:31:30.302013 2026] [:error] [pid 19200:tid 19224] [client 20.166.78.84:14419] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/yuzuru1.php"] [unique_id "aeqBojQ--M3-tsKAnhFqDwAAANA"]
[Fri Apr 24 04:31:30.868982 2026] [:error] [pid 19200:tid 19229] [client 20.166.78.84:42999] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/yuzuru1.php"] [unique_id "aeqBojQ--M3-tsKAnhFqFgAAANU"]
[Fri Apr 24 04:31:31.635573 2026] [:error] [pid 52129:tid 52152] [client 20.166.78.84:42915] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/yuzuru1.php"] [unique_id "aeqBo-KCZKf8_u2LKiAZeQAAARM"]
[Fri Apr 24 04:31:32.457496 2026] [:error] [pid 19102:tid 19176] [client 20.166.78.84:42914] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/yuzuru1.php"] [unique_id "aeqBpADSgrbLEZbkqD6ZvgAAAIw"]
[Fri Apr 24 04:31:33.126875 2026] [:error] [pid 19200:tid 19220] [client 20.166.78.84:14418] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file61.php"] [unique_id "aeqBpTQ--M3-tsKAnhFqIQAAAMw"]
[Fri Apr 24 04:31:33.838000 2026] [:error] [pid 19200:tid 19228] [client 20.166.78.84:14407] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file61.php"] [unique_id "aeqBpTQ--M3-tsKAnhFqJgAAANQ"]
[Fri Apr 24 04:31:34.411196 2026] [:error] [pid 52129:tid 52133] [client 20.166.78.84:14460] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file61.php"] [unique_id "aeqBpuKCZKf8_u2LKiAZgQAAAQA"]
[Fri Apr 24 04:31:35.063327 2026] [:error] [pid 52129:tid 52151] [client 20.166.78.84:14369] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file61.php"] [unique_id "aeqBp-KCZKf8_u2LKiAZhgAAARI"]
[Fri Apr 24 04:31:35.644344 2026] [:error] [pid 19200:tid 19209] [client 20.166.78.84:42881] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Cap.php"] [unique_id "aeqBpzQ--M3-tsKAnhFqLgAAAME"]
[Fri Apr 24 04:31:36.233074 2026] [:error] [pid 52129:tid 52156] [client 20.166.78.84:42976] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Cap.php"] [unique_id "aeqBqOKCZKf8_u2LKiAZjgAAARc"]
[Fri Apr 24 04:31:36.851595 2026] [:error] [pid 52129:tid 52134] [client 20.166.78.84:14454] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Cap.php"] [unique_id "aeqBqOKCZKf8_u2LKiAZnwAAAQE"]
[Fri Apr 24 04:31:37.445498 2026] [:error] [pid 52129:tid 52141] [client 20.166.78.84:14433] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Cap.php"] [unique_id "aeqBqeKCZKf8_u2LKiAZowAAAQg"]
[Fri Apr 24 04:31:38.320766 2026] [:error] [pid 52129:tid 52149] [client 20.166.78.84:14412] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tfm.php"] [unique_id "aeqBquKCZKf8_u2LKiAZrwAAARA"]
[Fri Apr 24 04:31:38.947994 2026] [:error] [pid 19200:tid 19212] [client 20.166.78.84:42880] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tfm.php"] [unique_id "aeqBqjQ--M3-tsKAnhFqSQAAAMQ"]
[Fri Apr 24 04:31:39.492108 2026] [:error] [pid 19101:tid 19152] [client 20.166.78.84:14363] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tfm.php"] [unique_id "aeqBq2AHj9bEvrTgbO2xFAAAAE8"]
[Fri Apr 24 04:31:40.172993 2026] [:error] [pid 19101:tid 19158] [client 20.166.78.84:42900] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tfm.php"] [unique_id "aeqBrGAHj9bEvrTgbO2xFQAAAFU"]
[Fri Apr 24 04:31:41.492608 2026] [:error] [pid 19200:tid 19221] [client 20.166.78.84:14410] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xper1.php"] [unique_id "aeqBrTQ--M3-tsKAnhFqUQAAAM0"]
[Fri Apr 24 04:31:42.353625 2026] [:error] [pid 19102:tid 19174] [client 20.166.78.84:14384] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xper1.php"] [unique_id "aeqBrgDSgrbLEZbkqD6ZzAAAAIo"]
[Fri Apr 24 04:31:43.072023 2026] [:error] [pid 19102:tid 19183] [client 20.166.78.84:42908] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xper1.php"] [unique_id "aeqBrwDSgrbLEZbkqD6Z0QAAAJM"]
[Fri Apr 24 04:31:43.857790 2026] [:error] [pid 52129:tid 52151] [client 20.166.78.84:14439] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xper1.php"] [unique_id "aeqBr-KCZKf8_u2LKiAZ1AAAARI"]
[Fri Apr 24 04:31:45.037092 2026] [proxy_fcgi:error] [pid 52129:tid 52156] [client 20.166.78.84:14437] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 04:31:45.310309 2026] [proxy_fcgi:error] [pid 52129:tid 52140] [client 20.166.78.84:14437] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 04:31:45.580486 2026] [proxy_fcgi:error] [pid 52129:tid 52150] [client 20.166.78.84:14437] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 04:31:45.854129 2026] [proxy_fcgi:error] [pid 52129:tid 52142] [client 20.166.78.84:14437] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 04:31:46.129215 2026] [proxy_fcgi:error] [pid 52129:tid 52137] [client 20.166.78.84:14437] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 04:31:46.399490 2026] [proxy_fcgi:error] [pid 52129:tid 52155] [client 20.166.78.84:14437] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 04:31:46.690954 2026] [proxy_fcgi:error] [pid 52129:tid 52139] [client 20.166.78.84:14437] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 04:31:46.970025 2026] [proxy_fcgi:error] [pid 52129:tid 52153] [client 20.166.78.84:14437] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 04:31:47.251647 2026] [proxy_fcgi:error] [pid 52129:tid 52142] [client 20.166.78.84:14437] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 04:31:47.523111 2026] [proxy_fcgi:error] [pid 52129:tid 52137] [client 20.166.78.84:14437] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 04:31:47.802682 2026] [proxy_fcgi:error] [pid 52129:tid 52156] [client 20.166.78.84:14437] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 04:31:48.120981 2026] [:error] [pid 52129:tid 52155] [client 20.166.78.84:14437] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/8573.php"] [unique_id "aeqBtOKCZKf8_u2LKiAZ9gAAARY"]
[Fri Apr 24 04:31:49.042443 2026] [:error] [pid 52129:tid 52140] [client 20.166.78.84:14441] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/8573.php"] [unique_id "aeqBteKCZKf8_u2LKiAZ-AAAAQc"]
[Fri Apr 24 04:31:49.713898 2026] [:error] [pid 19100:tid 19112] [client 20.166.78.84:14417] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/8573.php"] [unique_id "aeqBtbF_hzQs4CqbiffuJwAAAAM"]
[Fri Apr 24 04:31:50.406843 2026] [:error] [pid 52129:tid 52137] [client 20.166.78.84:14340] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/8573.php"] [unique_id "aeqBtuKCZKf8_u2LKiAZ_AAAAQQ"]
[Fri Apr 24 04:31:51.170949 2026] [:error] [pid 19200:tid 19208] [client 20.166.78.84:42957] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sadcut1.php"] [unique_id "aeqBtzQ--M3-tsKAnhFqZAAAAMA"]
[Fri Apr 24 04:31:52.031321 2026] [:error] [pid 19200:tid 19210] [client 20.166.78.84:14380] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sadcut1.php"] [unique_id "aeqBuDQ--M3-tsKAnhFqaAAAAMI"]
[Fri Apr 24 04:31:52.801961 2026] [:error] [pid 19101:tid 19158] [client 20.166.78.84:14442] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sadcut1.php"] [unique_id "aeqBuGAHj9bEvrTgbO2xIgAAAFU"]
[Fri Apr 24 04:31:53.576146 2026] [:error] [pid 19100:tid 19130] [client 20.166.78.84:42918] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sadcut1.php"] [unique_id "aeqBubF_hzQs4CqbiffuMAAAABQ"]
[Fri Apr 24 04:31:54.400801 2026] [:error] [pid 19200:tid 19225] [client 20.166.78.84:42955] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/666.php"] [unique_id "aeqBujQ--M3-tsKAnhFqawAAANE"]
[Fri Apr 24 04:31:55.066802 2026] [:error] [pid 19200:tid 19224] [client 20.166.78.84:14409] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/666.php"] [unique_id "aeqBuzQ--M3-tsKAnhFqcAAAANA"]
[Fri Apr 24 04:31:55.837172 2026] [:error] [pid 52129:tid 52146] [client 20.166.78.84:42941] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/666.php"] [unique_id "aeqBu-KCZKf8_u2LKiAaCQAAAQ0"]
[Fri Apr 24 04:31:56.382990 2026] [:error] [pid 19101:tid 19153] [client 20.166.78.84:42944] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/666.php"] [unique_id "aeqBvGAHj9bEvrTgbO2xKQAAAFA"]
[Fri Apr 24 04:31:57.233050 2026] [:error] [pid 19200:tid 19230] [client 20.166.78.84:14430] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xwx1.php"] [unique_id "aeqBvTQ--M3-tsKAnhFqdgAAANY"]
[Fri Apr 24 04:31:57.863162 2026] [:error] [pid 19200:tid 19229] [client 20.166.78.84:14415] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xwx1.php"] [unique_id "aeqBvTQ--M3-tsKAnhFqegAAANU"]
[Fri Apr 24 04:31:58.473594 2026] [:error] [pid 52129:tid 52140] [client 20.166.78.84:14281] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xwx1.php"] [unique_id "aeqBvuKCZKf8_u2LKiAaDgAAAQc"]
[Fri Apr 24 04:31:59.026344 2026] [:error] [pid 19200:tid 19223] [client 20.166.78.84:14390] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xwx1.php"] [unique_id "aeqBvzQ--M3-tsKAnhFqfwAAAM8"]
[Fri Apr 24 04:31:59.813454 2026] [:error] [pid 52129:tid 52138] [client 20.166.78.84:14365] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/prosellers8.php"] [unique_id "aeqBv-KCZKf8_u2LKiAaFAAAAQU"]
[Fri Apr 24 04:32:00.535429 2026] [:error] [pid 52129:tid 52152] [client 20.166.78.84:42959] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/prosellers8.php"] [unique_id "aeqBwOKCZKf8_u2LKiAaGgAAARM"]
[Fri Apr 24 04:32:01.205788 2026] [:error] [pid 19100:tid 19128] [client 20.166.78.84:14272] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/prosellers8.php"] [unique_id "aeqBwbF_hzQs4CqbiffuMgAAABI"]
[Fri Apr 24 04:32:01.795764 2026] [:error] [pid 19100:tid 19114] [client 20.166.78.84:14387] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/prosellers8.php"] [unique_id "aeqBwbF_hzQs4CqbiffuMwAAAAU"]
[Fri Apr 24 04:32:02.509497 2026] [:error] [pid 19102:tid 19186] [client 20.166.78.84:42893] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/shop.php"] [unique_id "aeqBwgDSgrbLEZbkqD6Z8wAAAJY"]
[Fri Apr 24 04:32:03.155778 2026] [:error] [pid 19102:tid 19175] [client 20.166.78.84:14374] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/shop.php"] [unique_id "aeqBwwDSgrbLEZbkqD6Z9QAAAIs"]
[Fri Apr 24 04:32:03.959706 2026] [:error] [pid 52129:tid 52146] [client 20.166.78.84:14338] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/shop.php"] [unique_id "aeqBw-KCZKf8_u2LKiAaIgAAAQ0"]
[Fri Apr 24 04:32:05.092285 2026] [:error] [pid 19200:tid 19227] [client 20.166.78.84:14383] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/shop.php"] [unique_id "aeqBxTQ--M3-tsKAnhFqjgAAANM"]
[Fri Apr 24 04:32:05.742637 2026] [:error] [pid 19101:tid 19152] [client 20.166.78.84:42985] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ww.php"] [unique_id "aeqBxWAHj9bEvrTgbO2xPwAAAE8"]
[Fri Apr 24 04:32:06.378632 2026] [:error] [pid 19102:tid 19187] [client 20.166.78.84:14411] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ww.php"] [unique_id "aeqBxgDSgrbLEZbkqD6Z-AAAAJc"]
[Fri Apr 24 04:32:07.354198 2026] [:error] [pid 19101:tid 19157] [client 20.166.78.84:14358] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ww.php"] [unique_id "aeqBx2AHj9bEvrTgbO2xQAAAAFQ"]
[Fri Apr 24 04:32:08.235375 2026] [:error] [pid 52129:tid 52146] [client 20.166.78.84:42943] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ww.php"] [unique_id "aeqByOKCZKf8_u2LKiAaOAAAAQ0"]
[Fri Apr 24 04:32:08.838303 2026] [:error] [pid 52129:tid 52140] [client 20.166.78.84:14426] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fsjzs.php"] [unique_id "aeqByOKCZKf8_u2LKiAaOwAAAQc"]
[Fri Apr 24 04:32:09.486640 2026] [:error] [pid 19200:tid 19226] [client 20.166.78.84:14367] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fsjzs.php"] [unique_id "aeqByTQ--M3-tsKAnhFqkQAAANI"]
[Fri Apr 24 04:32:10.245588 2026] [:error] [pid 19200:tid 19213] [client 20.166.78.84:14461] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fsjzs.php"] [unique_id "aeqByjQ--M3-tsKAnhFqlAAAAMU"]
[Fri Apr 24 04:32:11.189404 2026] [:error] [pid 19102:tid 19177] [client 20.166.78.84:14449] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fsjzs.php"] [unique_id "aeqBywDSgrbLEZbkqD6aAgAAAI0"]
[Fri Apr 24 04:32:12.281840 2026] [:error] [pid 19102:tid 19166] [client 20.166.78.84:14440] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cwclass.php"] [unique_id "aeqBzADSgrbLEZbkqD6aBQAAAII"]
[Fri Apr 24 04:32:13.281969 2026] [:error] [pid 52129:tid 52149] [client 20.166.78.84:14435] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cwclass.php"] [unique_id "aeqBzeKCZKf8_u2LKiAaRAAAARA"]
[Fri Apr 24 04:32:14.155053 2026] [:error] [pid 52129:tid 52153] [client 20.166.78.84:42947] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cwclass.php"] [unique_id "aeqBzuKCZKf8_u2LKiAaRwAAARQ"]
[Fri Apr 24 04:32:14.956846 2026] [:error] [pid 19100:tid 19122] [client 20.166.78.84:14344] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cwclass.php"] [unique_id "aeqBzrF_hzQs4CqbiffuQAAAAAw"]
[Fri Apr 24 04:32:15.948846 2026] [:error] [pid 19200:tid 19228] [client 20.166.78.84:14360] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/edit-tags.php"] [unique_id "aeqBzzQ--M3-tsKAnhFqoQAAANQ"]
[Fri Apr 24 04:32:16.759517 2026] [:error] [pid 52129:tid 52144] [client 20.166.78.84:14386] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/edit-tags.php"] [unique_id "aeqB0OKCZKf8_u2LKiAaUwAAAQs"]
[Fri Apr 24 04:32:17.435010 2026] [:error] [pid 19102:tid 19177] [client 20.166.78.84:14391] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/edit-tags.php"] [unique_id "aeqB0QDSgrbLEZbkqD6aCwAAAI0"]
[Fri Apr 24 04:32:18.188987 2026] [:error] [pid 52129:tid 52145] [client 20.166.78.84:42982] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/edit-tags.php"] [unique_id "aeqB0uKCZKf8_u2LKiAaWgAAAQw"]
[Fri Apr 24 04:32:18.867600 2026] [:error] [pid 19200:tid 19209] [client 20.166.78.84:14450] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/atomlib.php"] [unique_id "aeqB0jQ--M3-tsKAnhFqpQAAAME"]
[Fri Apr 24 04:32:19.426131 2026] [:error] [pid 52129:tid 52156] [client 20.166.78.84:14396] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/atomlib.php"] [unique_id "aeqB0-KCZKf8_u2LKiAaZwAAARc"]
[Fri Apr 24 04:32:20.821883 2026] [:error] [pid 52129:tid 52147] [client 20.166.78.84:14356] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/atomlib.php"] [unique_id "aeqB1OKCZKf8_u2LKiAadQAAAQ4"]
[Fri Apr 24 04:32:21.714510 2026] [:error] [pid 19200:tid 19221] [client 20.166.78.84:14457] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/atomlib.php"] [unique_id "aeqB1TQ--M3-tsKAnhFqqgAAAM0"]
[Fri Apr 24 04:32:22.973775 2026] [:error] [pid 52129:tid 52145] [client 20.166.78.84:14289] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zoper1.php"] [unique_id "aeqB1uKCZKf8_u2LKiAafQAAAQw"]
[Fri Apr 24 04:32:24.324032 2026] [:error] [pid 19102:tid 19171] [client 20.166.78.84:14364] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zoper1.php"] [unique_id "aeqB2ADSgrbLEZbkqD6aGgAAAIc"]
[Fri Apr 24 04:32:25.023179 2026] [:error] [pid 19102:tid 19168] [client 20.166.78.84:14349] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zoper1.php"] [unique_id "aeqB2QDSgrbLEZbkqD6aHgAAAIQ"]
[Fri Apr 24 04:32:26.420431 2026] [:error] [pid 52129:tid 52137] [client 20.166.78.84:42932] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zoper1.php"] [unique_id "aeqB2uKCZKf8_u2LKiAaigAAAQQ"]
[Fri Apr 24 04:32:27.555542 2026] [:error] [pid 52129:tid 52153] [client 20.166.78.84:14458] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a5.php"] [unique_id "aeqB2-KCZKf8_u2LKiAajgAAARQ"]
[Fri Apr 24 04:32:28.423934 2026] [:error] [pid 19100:tid 19110] [client 20.166.78.84:14336] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a5.php"] [unique_id "aeqB3LF_hzQs4CqbiffuUwAAAAE"]
[Fri Apr 24 04:32:29.525938 2026] [:error] [pid 19102:tid 19181] [client 20.166.78.84:14371] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a5.php"] [unique_id "aeqB3QDSgrbLEZbkqD6aKgAAAJE"]
[Fri Apr 24 04:32:30.488950 2026] [:error] [pid 52129:tid 52140] [client 20.166.78.84:14452] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a5.php"] [unique_id "aeqB3uKCZKf8_u2LKiAanQAAAQc"]
[Fri Apr 24 04:32:31.573811 2026] [:error] [pid 52129:tid 52143] [client 20.166.78.84:14352] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ai.php"] [unique_id "aeqB3-KCZKf8_u2LKiAaqAAAAQo"]
[Fri Apr 24 04:32:32.294098 2026] [:error] [pid 19200:tid 19231] [client 20.166.78.84:14462] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ai.php"] [unique_id "aeqB4DQ--M3-tsKAnhFquQAAANc"]
[Fri Apr 24 04:32:33.336171 2026] [:error] [pid 19200:tid 19219] [client 20.166.78.84:14273] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ai.php"] [unique_id "aeqB4TQ--M3-tsKAnhFqvgAAAMs"]
[Fri Apr 24 04:32:34.256446 2026] [:error] [pid 52129:tid 52136] [client 20.166.78.84:14279] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ai.php"] [unique_id "aeqB4uKCZKf8_u2LKiAatAAAAQM"]
[Fri Apr 24 04:32:35.036482 2026] [:error] [pid 19200:tid 19213] [client 20.166.78.84:14375] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jga.php"] [unique_id "aeqB4zQ--M3-tsKAnhFqxAAAAMU"]
[Fri Apr 24 04:32:35.959570 2026] [:error] [pid 19102:tid 19179] [client 20.166.78.84:14306] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jga.php"] [unique_id "aeqB4wDSgrbLEZbkqD6aNwAAAI8"]
[Fri Apr 24 04:32:36.971347 2026] [:error] [pid 19102:tid 19177] [client 20.166.78.84:14325] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jga.php"] [unique_id "aeqB5ADSgrbLEZbkqD6aOQAAAI0"]
[Fri Apr 24 04:32:37.843366 2026] [:error] [pid 19101:tid 19139] [client 20.166.78.84:14282] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jga.php"] [unique_id "aeqB5WAHj9bEvrTgbO2xTwAAAEI"]
[Fri Apr 24 13:53:14.397150 2026] [proxy_fcgi:error] [pid 17719:tid 17742] [client 178.239.198.95:47753] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 13:53:14.646759 2026] [proxy_fcgi:error] [pid 17719:tid 17729] [client 178.239.198.95:47753] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 13:53:14.915870 2026] [proxy_fcgi:error] [pid 17719:tid 17737] [client 178.239.198.95:47753] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 13:53:15.170701 2026] [proxy_fcgi:error] [pid 17719:tid 17749] [client 178.239.198.95:47753] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 13:53:15.423023 2026] [proxy_fcgi:error] [pid 17719:tid 17734] [client 178.239.198.95:47753] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 13:53:15.672168 2026] [proxy_fcgi:error] [pid 17719:tid 17733] [client 178.239.198.95:47753] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 13:53:15.948965 2026] [proxy_fcgi:error] [pid 17719:tid 17745] [client 178.239.198.95:47753] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 13:53:16.198889 2026] [proxy_fcgi:error] [pid 17719:tid 17727] [client 178.239.198.95:47753] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 13:53:16.711707 2026] [proxy_fcgi:error] [pid 17719:tid 17746] [client 178.239.198.95:47753] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 13:53:16.962506 2026] [proxy_fcgi:error] [pid 17719:tid 17735] [client 178.239.198.95:47753] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 13:53:17.215511 2026] [proxy_fcgi:error] [pid 17719:tid 17742] [client 178.239.198.95:47753] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 13:53:17.464793 2026] [proxy_fcgi:error] [pid 17719:tid 17741] [client 178.239.198.95:47753] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 13:53:17.724663 2026] [proxy_fcgi:error] [pid 17719:tid 17737] [client 178.239.198.95:47753] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 13:53:17.974942 2026] [proxy_fcgi:error] [pid 17719:tid 17734] [client 178.239.198.95:47753] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 13:53:18.225589 2026] [proxy_fcgi:error] [pid 17719:tid 17751] [client 178.239.198.95:47753] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 13:53:18.482308 2026] [proxy_fcgi:error] [pid 17719:tid 17733] [client 178.239.198.95:47753] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 13:53:18.748883 2026] [proxy_fcgi:error] [pid 17719:tid 17750] [client 178.239.198.95:47753] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 13:53:19.005589 2026] [proxy_fcgi:error] [pid 17719:tid 17740] [client 178.239.198.95:47753] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 13:53:22.532604 2026] [:error] [pid 17719:tid 17727] [client 178.239.198.95:47753] [client 178.239.198.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aesFUsTZ9gzEyL1BkPpDPAAAAIA"]
[Fri Apr 24 13:53:23.787250 2026] [:error] [pid 17721:tid 17785] [client 178.239.198.78:22335] [client 178.239.198.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aesFU-FXXkLeyDnfk__FrAAAAAQ"]
[Fri Apr 24 13:53:25.048310 2026] [proxy_fcgi:error] [pid 17808:tid 17822] [client 178.239.198.101:38151] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 13:53:25.804546 2026] [:error] [pid 17808:tid 17815] [client 178.239.198.101:38151] [client 178.239.198.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dwelectservices.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aesFVearbOEFI8qshvKZxwAAAEU"]
[Fri Apr 24 13:53:26.805731 2026] [proxy_fcgi:error] [pid 17719:tid 17749] [client 178.239.198.86:28691] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 13:53:27.050013 2026] [:error] [pid 17719:tid 17751] [client 178.239.198.86:28691] [client 178.239.198.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aesFV8TZ9gzEyL1BkPpDRAAAAJg"]
[Fri Apr 24 13:53:27.798111 2026] [proxy_fcgi:error] [pid 17720:tid 17770] [client 194.32.120.4:43549] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 13:53:29.114962 2026] [:error] [pid 17720:tid 17759] [client 194.32.120.4:43549] [client 194.32.120.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aesFWehlUs6BS3Ng7_XulQAAAMU"]
[Fri Apr 24 13:53:29.859730 2026] [:error] [pid 17719:tid 17737] [client 194.32.120.4:65071] [client 194.32.120.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aesFWcTZ9gzEyL1BkPpDTwAAAIo"]
[Fri Apr 24 13:53:30.355486 2026] [:error] [pid 17808:tid 17828] [client 178.239.198.101:26863] [client 178.239.198.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aesFWuarbOEFI8qshvKZywAAAFI"]
[Fri Apr 24 13:53:30.984881 2026] [:error] [pid 17719:tid 17744] [client 178.239.198.106:45239] [client 178.239.198.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aesFWsTZ9gzEyL1BkPpDVQAAAJE"]
[Fri Apr 24 13:53:31.486167 2026] [:error] [pid 17719:tid 17736] [client 178.239.198.82:52635] [client 178.239.198.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aesFW8TZ9gzEyL1BkPpDWQAAAIk"]
[Fri Apr 24 13:53:32.060971 2026] [:error] [pid 17719:tid 17739] [client 178.239.198.102:41555] [client 178.239.198.102] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aesFXMTZ9gzEyL1BkPpDWwAAAIw"]
[Fri Apr 24 13:53:33.861575 2026] [:error] [pid 17719:tid 17750] [client 178.239.198.105:39433] [client 178.239.198.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aesFXcTZ9gzEyL1BkPpDYgAAAJc"]
[Fri Apr 24 13:53:34.381416 2026] [proxy_fcgi:error] [pid 17808:tid 17821] [client 178.239.198.74:22331] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 13:53:34.921216 2026] [:error] [pid 17808:tid 17813] [client 178.239.198.74:22331] [client 178.239.198.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dwelectservices.com.au"] [uri "/filemanager.php"] [unique_id "aesFXuarbOEFI8qshvKZ0gAAAEM"]
[Fri Apr 24 13:53:35.913666 2026] [:error] [pid 17719:tid 17747] [client 178.239.198.93:53753] [client 178.239.198.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aesFX8TZ9gzEyL1BkPpDaQAAAJQ"]
[Fri Apr 24 13:53:36.654018 2026] [:error] [pid 17808:tid 17820] [client 178.239.198.104:48153] [client 178.239.198.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aesFYOarbOEFI8qshvKZ1gAAAEo"]
[Fri Apr 24 13:53:37.153345 2026] [proxy_fcgi:error] [pid 17721:tid 17783] [client 178.239.198.95:36575] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 13:53:37.398522 2026] [:error] [pid 17721:tid 17793] [client 178.239.198.95:36575] [client 178.239.198.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aesFYeFXXkLeyDnfk__FsgAAAAw"]
[Fri Apr 24 13:53:37.888889 2026] [proxy_fcgi:error] [pid 17719:tid 17745] [client 178.239.198.86:20249] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 13:53:38.661107 2026] [proxy_fcgi:error] [pid 17719:tid 17748] [client 178.239.198.86:20249] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 13:53:39.431099 2026] [:error] [pid 17719:tid 17747] [client 178.239.198.86:20249] [client 178.239.198.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aesFY8TZ9gzEyL1BkPpDewAAAJQ"]
[Fri Apr 24 13:53:39.925665 2026] [proxy_fcgi:error] [pid 17808:tid 17819] [client 178.239.198.81:58453] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 13:53:40.170874 2026] [:error] [pid 17808:tid 17820] [client 178.239.198.81:58453] [client 178.239.198.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aesFZOarbOEFI8qshvKZ3QAAAEo"]
[Fri Apr 24 13:53:40.679553 2026] [proxy_fcgi:error] [pid 17719:tid 17737] [client 178.239.198.78:54679] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 13:53:41.221487 2026] [:error] [pid 17719:tid 17738] [client 178.239.198.78:54679] [client 178.239.198.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "aesFZcTZ9gzEyL1BkPpDgwAAAIs"]
[Fri Apr 24 13:53:41.955475 2026] [:error] [pid 17808:tid 17821] [client 178.239.198.87:37807] [client 178.239.198.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aesFZearbOEFI8qshvKZ5AAAAEs"]
[Fri Apr 24 13:53:42.721021 2026] [proxy_fcgi:error] [pid 17808:tid 17830] [client 178.239.198.105:60177] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 13:53:42.967376 2026] [proxy_fcgi:error] [pid 17808:tid 17827] [client 178.239.198.105:60177] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 13:53:43.459406 2026] [:error] [pid 17808:tid 17810] [client 178.239.198.105:60177] [client 178.239.198.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aesFZ-arbOEFI8qshvKZ7AAAAEA"]
[Fri Apr 24 13:53:44.213921 2026] [:error] [pid 17808:tid 17828] [client 178.239.198.86:39227] [client 178.239.198.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aesFaOarbOEFI8qshvKZ8AAAAFI"]
[Fri Apr 24 13:53:44.957072 2026] [:error] [pid 17719:tid 17735] [client 178.239.198.87:51767] [client 178.239.198.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aesFaMTZ9gzEyL1BkPpDlAAAAIg"]
[Fri Apr 24 13:53:45.459183 2026] [:error] [pid 17808:tid 17817] [client 178.239.198.99:60809] [client 178.239.198.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aesFaearbOEFI8qshvKZ8QAAAEc"]
[Fri Apr 24 13:53:48.252154 2026] [:error] [pid 17808:tid 17817] [client 178.239.198.99:60809] [client 178.239.198.99] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "47.54.212.100_a59f95a8015e4271637162cf42ba0fb688b4d94a"): Internal error (specific information not available) [hostname "dwelectservices.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aesFaearbOEFI8qshvKZ8QAAAEc"]
[Fri Apr 24 13:53:48.742349 2026] [:error] [pid 17721:tid 17786] [client 178.239.198.101:33157] [client 178.239.198.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aesFbOFXXkLeyDnfk__FzgAAAAU"]
[Fri Apr 24 13:53:50.257166 2026] [proxy_fcgi:error] [pid 17719:tid 17741] [client 178.239.198.95:47399] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 13:53:50.537825 2026] [:error] [pid 17719:tid 17734] [client 178.239.198.95:47399] [client 178.239.198.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "aesFbsTZ9gzEyL1BkPpDuAAAAIc"]
[Fri Apr 24 13:53:51.030889 2026] [:error] [pid 22114:tid 22132] [client 178.239.198.79:25699] [client 178.239.198.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "aesFb4AuWGz3WlMQjoeiuwAAAQ8"]
[Fri Apr 24 13:53:51.520627 2026] [:error] [pid 22114:tid 22124] [client 178.239.198.90:55201] [client 178.239.198.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aesFb4AuWGz3WlMQjoeivwAAAQc"]
[Fri Apr 24 13:53:52.516874 2026] [proxy_fcgi:error] [pid 17808:tid 17830] [client 178.239.198.77:28319] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 13:53:53.043619 2026] [proxy_fcgi:error] [pid 17808:tid 17813] [client 178.239.198.77:28319] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 13:53:54.037465 2026] [:error] [pid 17808:tid 17832] [client 178.239.198.77:28319] [client 178.239.198.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/admin.php"] [unique_id "aesFcuarbOEFI8qshvKZ_wAAAFY"]
[Fri Apr 24 13:53:55.273996 2026] [:error] [pid 22114:tid 22129] [client 194.32.120.4:59355] [client 194.32.120.4] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.32.120.4, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aesFc4AuWGz3WlMQjoeixQAAAQw"]
[Fri Apr 24 13:53:55.527229 2026] [proxy_fcgi:error] [pid 22114:tid 22123] [client 194.32.120.4:59355] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 13:53:56.772912 2026] [proxy_fcgi:error] [pid 22114:tid 22122] [client 194.32.120.4:59355] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 13:53:57.019860 2026] [proxy_fcgi:error] [pid 22114:tid 22121] [client 194.32.120.4:59355] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 13:53:58.249526 2026] [:error] [pid 22114:tid 22138] [client 194.32.120.4:59355] [client 194.32.120.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aesFdoAuWGz3WlMQjoei0QAAARU"]
[Fri Apr 24 13:53:58.771172 2026] [proxy_fcgi:error] [pid 17808:tid 17820] [client 178.239.198.98:62237] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 13:53:59.093009 2026] [proxy_fcgi:error] [pid 17808:tid 17829] [client 178.239.198.98:62237] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 13:53:59.345986 2026] [:error] [pid 17808:tid 17823] [client 178.239.198.98:62237] [client 178.239.198.98] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 178.239.198.98, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aesFd-arbOEFI8qshvKaBwAAAE0"]
[Fri Apr 24 13:53:59.838041 2026] [:error] [pid 17808:tid 17831] [client 178.239.198.98:62237] [client 178.239.198.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/item.php"] [unique_id "aesFd-arbOEFI8qshvKaCgAAAFU"]
[Fri Apr 24 13:54:24.813563 2026] [autoindex:error] [pid 17721:tid 17785] [client 178.239.198.75:24507] AH01276: Cannot serve directory /home/dwelects/public_html/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Apr 24 13:54:32.983601 2026] [autoindex:error] [pid 17721:tid 17798] [client 178.239.198.75:24507] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Apr 24 17:58:37.870484 2026] [:error] [pid 22114:tid 22133] [client 34.58.239.158:52717] [client 34.58.239.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aes-zYAuWGz3WlMQjofReQAAARA"]
[Fri Apr 24 17:58:38.491384 2026] [:error] [pid 17719:tid 17734] [client 34.58.239.158:55341] [client 34.58.239.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/"] [unique_id "aes-zsTZ9gzEyL1BkPqHRQAAAIc"]
[Fri Apr 24 17:58:39.091423 2026] [:error] [pid 4177:tid 4202] [client 34.58.239.158:64162] [client 34.58.239.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/blog/wp-includes/wlwmanifest.xml"] [unique_id "aes-z32asKnvdrSe0x6mpAAAAZE"]
[Fri Apr 24 17:58:39.661760 2026] [:error] [pid 4177:tid 4197] [client 34.58.239.158:55940] [client 34.58.239.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "aes-z32asKnvdrSe0x6mtQAAAYw"]
[Fri Apr 24 17:58:40.468963 2026] [:error] [pid 17808:tid 17822] [client 34.58.239.158:63380] [client 34.58.239.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "aes-0OarbOEFI8qshvL7UwAAAEw"]
[Fri Apr 24 17:58:41.034187 2026] [:error] [pid 4177:tid 4208] [client 34.58.239.158:61955] [client 34.58.239.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "aes-0X2asKnvdrSe0x6mzgAAAZc"]
[Fri Apr 24 17:58:41.697783 2026] [:error] [pid 14531:tid 14555] [client 34.58.239.158:52291] [client 34.58.239.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "aes-0XfLU2gw-6KR-GaZnAAAAVY"]
[Fri Apr 24 19:13:34.468907 2026] [proxy_fcgi:error] [pid 14531:tid 14533] [client 4.235.80.198:42801] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 19:13:34.787426 2026] [proxy_fcgi:error] [pid 14531:tid 14553] [client 4.235.80.198:42801] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 19:13:35.054776 2026] [proxy_fcgi:error] [pid 14531:tid 14545] [client 4.235.80.198:42801] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 19:13:35.352382 2026] [proxy_fcgi:error] [pid 14531:tid 14535] [client 4.235.80.198:42801] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 19:13:35.685667 2026] [proxy_fcgi:error] [pid 14531:tid 14537] [client 4.235.80.198:42801] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 19:13:35.950400 2026] [proxy_fcgi:error] [pid 14531:tid 14536] [client 4.235.80.198:42801] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 19:13:36.469562 2026] [proxy_fcgi:error] [pid 14531:tid 14534] [client 4.235.80.198:42801] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 19:13:36.734520 2026] [proxy_fcgi:error] [pid 14531:tid 14555] [client 4.235.80.198:42801] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 19:13:36.999321 2026] [proxy_fcgi:error] [pid 14531:tid 14544] [client 4.235.80.198:42801] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 19:13:37.496143 2026] [proxy_fcgi:error] [pid 14531:tid 14546] [client 4.235.80.198:42801] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 19:13:37.757670 2026] [:error] [pid 14531:tid 14533] [client 4.235.80.198:42801] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/G-In.php"] [unique_id "aetQYXfLU2gw-6KR-Gav4QAAAUA"]
[Fri Apr 24 19:13:39.804486 2026] [:error] [pid 14531:tid 14540] [client 4.235.80.198:15273] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/G-In.php"] [unique_id "aetQY3fLU2gw-6KR-Gav5QAAAUc"]
[Fri Apr 24 19:13:41.393093 2026] [:error] [pid 4177:tid 4185] [client 4.235.80.198:20748] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/G-In.php"] [unique_id "aetQZX2asKnvdrSe0x7VCAAAAYA"]
[Fri Apr 24 19:13:42.408459 2026] [:error] [pid 4177:tid 4192] [client 4.235.80.198:20748] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/G-In.php"] [unique_id "aetQZn2asKnvdrSe0x7VCwAAAYc"]
[Fri Apr 24 19:13:44.856931 2026] [:error] [pid 17808:tid 17832] [client 4.235.80.198:24055] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aj11.php"] [unique_id "aetQaOarbOEFI8qshvIYGgAAAFY"]
[Fri Apr 24 19:13:46.056373 2026] [:error] [pid 17719:tid 17749] [client 4.235.80.198:7818] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aj11.php"] [unique_id "aetQasTZ9gzEyL1BkPqYOgAAAJY"]
[Fri Apr 24 19:13:51.596315 2026] [:error] [pid 4177:tid 4204] [client 4.235.80.198:7073] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aj11.php"] [unique_id "aetQb32asKnvdrSe0x7VIwAAAZM"]
[Fri Apr 24 19:14:33.612034 2026] [:error] [pid 14531:tid 14541] [client 4.235.80.198:11794] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xroot.php"] [unique_id "aetQmXfLU2gw-6KR-GawGAAAAUg"]
[Fri Apr 24 19:14:34.528666 2026] [:error] [pid 17808:tid 17822] [client 4.235.80.198:13395] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xroot.php"] [unique_id "aetQmuarbOEFI8qshvIYcwAAAEw"]
[Fri Apr 24 19:14:35.699722 2026] [:error] [pid 14531:tid 14554] [client 4.235.80.198:15664] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xroot.php"] [unique_id "aetQm3fLU2gw-6KR-GawHQAAAVU"]
[Fri Apr 24 19:14:36.755162 2026] [:error] [pid 14531:tid 14555] [client 4.235.80.198:6820] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xroot.php"] [unique_id "aetQnHfLU2gw-6KR-GawIQAAAVY"]
[Fri Apr 24 19:14:37.615536 2026] [proxy_fcgi:error] [pid 4177:tid 4204] [client 4.235.80.198:16086] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 19:14:37.956739 2026] [proxy_fcgi:error] [pid 4177:tid 4194] [client 4.235.80.198:16086] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 19:14:38.241842 2026] [proxy_fcgi:error] [pid 4177:tid 4198] [client 4.235.80.198:16086] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 19:14:38.624798 2026] [proxy_fcgi:error] [pid 4177:tid 4196] [client 4.235.80.198:16086] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 19:14:38.887972 2026] [proxy_fcgi:error] [pid 4177:tid 4189] [client 4.235.80.198:16086] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 19:14:39.237385 2026] [proxy_fcgi:error] [pid 4177:tid 4202] [client 4.235.80.198:16086] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 19:14:39.592053 2026] [proxy_fcgi:error] [pid 4177:tid 4208] [client 4.235.80.198:16086] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 19:14:39.855346 2026] [proxy_fcgi:error] [pid 4177:tid 4209] [client 4.235.80.198:16086] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 19:14:40.195845 2026] [proxy_fcgi:error] [pid 4177:tid 4201] [client 4.235.80.198:16086] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 19:14:40.527122 2026] [proxy_fcgi:error] [pid 4177:tid 4191] [client 4.235.80.198:16086] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 19:14:40.861485 2026] [proxy_fcgi:error] [pid 4177:tid 4197] [client 4.235.80.198:16086] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 19:14:41.207975 2026] [:error] [pid 4177:tid 4186] [client 4.235.80.198:16086] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fs.php"] [unique_id "aetQoX2asKnvdrSe0x7VpgAAAYE"]
[Fri Apr 24 19:14:42.083028 2026] [:error] [pid 17720:tid 17771] [client 4.235.80.198:14906] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fs.php"] [unique_id "aetQouhlUs6BS3Ng7_V9sgAAANE"]
[Fri Apr 24 19:14:42.824757 2026] [:error] [pid 17720:tid 17758] [client 4.235.80.198:20765] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fs.php"] [unique_id "aetQouhlUs6BS3Ng7_V9uAAAAMQ"]
[Fri Apr 24 19:14:43.539484 2026] [:error] [pid 4177:tid 4194] [client 4.235.80.198:15253] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fs.php"] [unique_id "aetQo32asKnvdrSe0x7VqwAAAYk"]
[Fri Apr 24 19:14:44.439789 2026] [:error] [pid 17808:tid 17824] [client 4.235.80.198:16472] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/6ap7e.php"] [unique_id "aetQpOarbOEFI8qshvIYmgAAAE4"]
[Fri Apr 24 19:14:45.213008 2026] [:error] [pid 17720:tid 17775] [client 4.235.80.198:20348] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/6ap7e.php"] [unique_id "aetQpehlUs6BS3Ng7_V9wAAAANU"]
[Fri Apr 24 19:14:46.845394 2026] [:error] [pid 17720:tid 17755] [client 4.235.80.198:15247] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/6ap7e.php"] [unique_id "aetQpuhlUs6BS3Ng7_V9yQAAAME"]
[Fri Apr 24 19:14:47.690076 2026] [:error] [pid 4177:tid 4186] [client 4.235.80.198:42773] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/6ap7e.php"] [unique_id "aetQp32asKnvdrSe0x7VsAAAAYE"]
[Fri Apr 24 19:14:48.390986 2026] [:error] [pid 17720:tid 17762] [client 4.235.80.198:42784] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cilus.php"] [unique_id "aetQqOhlUs6BS3Ng7_V90AAAAMg"]
[Fri Apr 24 19:14:49.200991 2026] [:error] [pid 14531:tid 14535] [client 4.235.80.198:50269] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cilus.php"] [unique_id "aetQqXfLU2gw-6KR-GawLgAAAUI"]
[Fri Apr 24 19:14:49.944740 2026] [:error] [pid 17808:tid 17823] [client 4.235.80.198:13104] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cilus.php"] [unique_id "aetQqearbOEFI8qshvIYqwAAAE0"]
[Fri Apr 24 19:14:51.172393 2026] [:error] [pid 17721:tid 17789] [client 4.235.80.198:14852] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cilus.php"] [unique_id "aetQq-FXXkLeyDnfk_8m3gAAAAg"]
[Fri Apr 24 19:14:52.731618 2026] [:error] [pid 4177:tid 4207] [client 4.235.80.198:11829] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/link.php"] [unique_id "aetQrH2asKnvdrSe0x7VuwAAAZY"]
[Fri Apr 24 19:14:53.558464 2026] [:error] [pid 17719:tid 17741] [client 4.235.80.198:42799] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/link.php"] [unique_id "aetQrcTZ9gzEyL1BkPqYbwAAAI4"]
[Fri Apr 24 19:14:56.037727 2026] [:error] [pid 4177:tid 4203] [client 4.235.80.198:50270] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/link.php"] [unique_id "aetQsH2asKnvdrSe0x7VzAAAAZI"]
[Fri Apr 24 19:14:57.000398 2026] [:error] [pid 4177:tid 4200] [client 4.235.80.198:31315] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/link.php"] [unique_id "aetQsH2asKnvdrSe0x7V0AAAAY8"]
[Fri Apr 24 19:14:57.765430 2026] [:error] [pid 17808:tid 17827] [client 4.235.80.198:34380] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fone1.php"] [unique_id "aetQsearbOEFI8qshvIYwgAAAFE"]
[Fri Apr 24 19:14:58.852098 2026] [:error] [pid 4177:tid 4188] [client 4.235.80.198:39855] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fone1.php"] [unique_id "aetQsn2asKnvdrSe0x7V1AAAAYM"]
[Fri Apr 24 19:14:59.882405 2026] [:error] [pid 17808:tid 17824] [client 4.235.80.198:13087] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fone1.php"] [unique_id "aetQs-arbOEFI8qshvIYxwAAAE4"]
[Fri Apr 24 19:15:02.674189 2026] [:error] [pid 17808:tid 17819] [client 4.235.80.198:44078] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fone1.php"] [unique_id "aetQtuarbOEFI8qshvIYzwAAAEk"]
[Fri Apr 24 19:15:03.584527 2026] [:error] [pid 17721:tid 17787] [client 4.235.80.198:19779] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zogy1.php"] [unique_id "aetQt-FXXkLeyDnfk_8m6QAAAAY"]
[Fri Apr 24 19:15:04.861945 2026] [:error] [pid 17720:tid 17774] [client 4.235.80.198:11812] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zogy1.php"] [unique_id "aetQuOhlUs6BS3Ng7_V97gAAANQ"]
[Fri Apr 24 19:15:06.744391 2026] [:error] [pid 17719:tid 17738] [client 4.235.80.198:10737] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zogy1.php"] [unique_id "aetQusTZ9gzEyL1BkPqYeQAAAIs"]
[Fri Apr 24 19:15:07.560383 2026] [:error] [pid 17720:tid 17763] [client 4.235.80.198:28920] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zogy1.php"] [unique_id "aetQu-hlUs6BS3Ng7_V9-AAAAMk"]
[Fri Apr 24 19:15:08.471306 2026] [:error] [pid 17721:tid 17792] [client 4.235.80.198:28906] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zoper1.php"] [unique_id "aetQvOFXXkLeyDnfk_8m7gAAAAs"]
[Fri Apr 24 19:15:09.354595 2026] [:error] [pid 17719:tid 17743] [client 4.235.80.198:25562] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zoper1.php"] [unique_id "aetQvcTZ9gzEyL1BkPqYegAAAJA"]
[Fri Apr 24 19:15:10.364171 2026] [:error] [pid 14531:tid 14534] [client 4.235.80.198:33388] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zoper1.php"] [unique_id "aetQvnfLU2gw-6KR-GawVAAAAUE"]
[Fri Apr 24 19:15:11.559474 2026] [:error] [pid 4177:tid 4203] [client 4.235.80.198:31337] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zoper1.php"] [unique_id "aetQv32asKnvdrSe0x7V6QAAAZI"]
[Fri Apr 24 19:15:12.603358 2026] [:error] [pid 4177:tid 4209] [client 4.235.80.198:15249] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/atkno.php"] [unique_id "aetQwH2asKnvdrSe0x7V7wAAAZg"]
[Fri Apr 24 19:15:13.855620 2026] [:error] [pid 17808:tid 17827] [client 4.235.80.198:42187] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/atkno.php"] [unique_id "aetQwearbOEFI8qshvIY1AAAAFE"]
[Fri Apr 24 19:15:14.597491 2026] [:error] [pid 4177:tid 4199] [client 4.235.80.198:2326] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/atkno.php"] [unique_id "aetQwn2asKnvdrSe0x7V9gAAAY4"]
[Fri Apr 24 19:15:15.354425 2026] [:error] [pid 17719:tid 17736] [client 4.235.80.198:15289] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/atkno.php"] [unique_id "aetQw8TZ9gzEyL1BkPqYgwAAAIk"]
[Fri Apr 24 19:15:16.259042 2026] [:error] [pid 4177:tid 4188] [client 4.235.80.198:13113] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/de.php"] [unique_id "aetQxH2asKnvdrSe0x7V-AAAAYM"]
[Fri Apr 24 19:15:17.311292 2026] [:error] [pid 17721:tid 17784] [client 4.235.80.198:42798] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/de.php"] [unique_id "aetQxeFXXkLeyDnfk_8m-wAAAAM"]
[Fri Apr 24 19:15:18.358857 2026] [:error] [pid 4177:tid 4185] [client 4.235.80.198:31350] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/de.php"] [unique_id "aetQxn2asKnvdrSe0x7V_wAAAYA"]
[Fri Apr 24 19:15:19.549196 2026] [:error] [pid 4177:tid 4192] [client 4.235.80.198:39868] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/de.php"] [unique_id "aetQx32asKnvdrSe0x7WAwAAAYc"]
[Fri Apr 24 19:15:20.456383 2026] [:error] [pid 22114:tid 22125] [client 4.235.80.198:6362] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/insta.php"] [unique_id "aetQyIAuWGz3WlMQjofeaAAAAQg"]
[Fri Apr 24 19:15:21.140718 2026] [:error] [pid 4177:tid 4200] [client 4.235.80.198:30342] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/insta.php"] [unique_id "aetQyX2asKnvdrSe0x7WDgAAAY8"]
[Fri Apr 24 19:15:21.916446 2026] [:error] [pid 17721:tid 17787] [client 4.235.80.198:13067] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/insta.php"] [unique_id "aetQyeFXXkLeyDnfk_8m_gAAAAY"]
[Fri Apr 24 19:15:22.771849 2026] [:error] [pid 17721:tid 17799] [client 4.235.80.198:15245] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/insta.php"] [unique_id "aetQyuFXXkLeyDnfk_8nAgAAABI"]
[Fri Apr 24 19:15:23.410487 2026] [:error] [pid 4177:tid 4205] [client 4.235.80.198:2361] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wpxl.php"] [unique_id "aetQy32asKnvdrSe0x7WFgAAAZQ"]
[Fri Apr 24 19:15:24.169282 2026] [:error] [pid 4177:tid 4202] [client 4.235.80.198:31343] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wpxl.php"] [unique_id "aetQzH2asKnvdrSe0x7WHAAAAZE"]
[Fri Apr 24 19:15:24.962723 2026] [:error] [pid 4177:tid 4199] [client 4.235.80.198:16107] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wpxl.php"] [unique_id "aetQzH2asKnvdrSe0x7WIAAAAY4"]
[Fri Apr 24 19:15:25.659285 2026] [:error] [pid 17808:tid 17831] [client 4.235.80.198:30383] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wpxl.php"] [unique_id "aetQzearbOEFI8qshvIY2QAAAFU"]
[Fri Apr 24 19:15:26.509107 2026] [:error] [pid 17808:tid 17811] [client 4.235.80.198:19784] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admlo.php"] [unique_id "aetQzuarbOEFI8qshvIY3QAAAEE"]
[Fri Apr 24 19:15:27.366067 2026] [:error] [pid 17721:tid 17805] [client 4.235.80.198:13062] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admlo.php"] [unique_id "aetQz-FXXkLeyDnfk_8nCAAAABg"]
[Fri Apr 24 19:15:29.292980 2026] [:error] [pid 17808:tid 17822] [client 4.235.80.198:13094] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admlo.php"] [unique_id "aetQ0earbOEFI8qshvIY5AAAAEw"]
[Fri Apr 24 19:15:30.008051 2026] [:error] [pid 4177:tid 4207] [client 4.235.80.198:39835] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admlo.php"] [unique_id "aetQ0n2asKnvdrSe0x7WQgAAAZY"]
[Fri Apr 24 19:15:31.163127 2026] [:error] [pid 17808:tid 17817] [client 4.235.80.198:13335] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f5.php"] [unique_id "aetQ0-arbOEFI8qshvIY6AAAAEc"]
[Fri Apr 24 19:15:32.060787 2026] [:error] [pid 17808:tid 17830] [client 4.235.80.198:6259] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f5.php"] [unique_id "aetQ1OarbOEFI8qshvIY6QAAAFQ"]
[Fri Apr 24 19:15:33.081254 2026] [:error] [pid 17720:tid 17766] [client 4.235.80.198:48496] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f5.php"] [unique_id "aetQ1ehlUs6BS3Ng7_V-GAAAAMw"]
[Fri Apr 24 19:15:33.959148 2026] [:error] [pid 17808:tid 17828] [client 4.235.80.198:48489] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f5.php"] [unique_id "aetQ1earbOEFI8qshvIY7QAAAFI"]
[Fri Apr 24 19:15:34.726288 2026] [:error] [pid 17720:tid 17778] [client 4.235.80.198:37918] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ptanf.php"] [unique_id "aetQ1uhlUs6BS3Ng7_V-HgAAANg"]
[Fri Apr 24 19:15:35.591845 2026] [:error] [pid 17721:tid 17796] [client 4.235.80.198:9564] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ptanf.php"] [unique_id "aetQ1-FXXkLeyDnfk_8nFwAAAA8"]
[Fri Apr 24 19:15:36.233681 2026] [:error] [pid 17808:tid 17815] [client 4.235.80.198:28528] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ptanf.php"] [unique_id "aetQ2OarbOEFI8qshvIY8gAAAEU"]
[Fri Apr 24 19:15:36.991028 2026] [:error] [pid 17808:tid 17829] [client 4.235.80.198:12176] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ptanf.php"] [unique_id "aetQ2OarbOEFI8qshvIY9gAAAFM"]
[Fri Apr 24 19:15:37.675396 2026] [:error] [pid 14531:tid 14557] [client 4.235.80.198:37937] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ctex1.php"] [unique_id "aetQ2XfLU2gw-6KR-GawaAAAAVg"]
[Fri Apr 24 19:15:38.366117 2026] [:error] [pid 4177:tid 4197] [client 4.235.80.198:13806] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ctex1.php"] [unique_id "aetQ2n2asKnvdrSe0x7WaAAAAYw"]
[Fri Apr 24 19:15:39.602560 2026] [:error] [pid 14531:tid 14553] [client 4.235.80.198:8088] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ctex1.php"] [unique_id "aetQ23fLU2gw-6KR-GawaQAAAVQ"]
[Fri Apr 24 19:15:40.630840 2026] [proxy_fcgi:error] [pid 17720:tid 17776] [client 4.235.80.198:48461] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 19:15:40.895296 2026] [proxy_fcgi:error] [pid 17720:tid 17764] [client 4.235.80.198:48461] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 19:15:41.161975 2026] [proxy_fcgi:error] [pid 17720:tid 17778] [client 4.235.80.198:48461] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 19:15:41.521063 2026] [proxy_fcgi:error] [pid 17720:tid 17770] [client 4.235.80.198:48461] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 19:15:41.785514 2026] [proxy_fcgi:error] [pid 17720:tid 17775] [client 4.235.80.198:48461] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 19:15:42.088569 2026] [proxy_fcgi:error] [pid 17720:tid 17757] [client 4.235.80.198:48461] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 19:15:42.503788 2026] [proxy_fcgi:error] [pid 17720:tid 17763] [client 4.235.80.198:48461] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 19:15:42.812185 2026] [proxy_fcgi:error] [pid 17720:tid 17762] [client 4.235.80.198:48461] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 19:15:43.296357 2026] [proxy_fcgi:error] [pid 17720:tid 17760] [client 4.235.80.198:48461] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 19:15:43.558463 2026] [proxy_fcgi:error] [pid 17720:tid 17766] [client 4.235.80.198:48461] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 19:15:43.941187 2026] [proxy_fcgi:error] [pid 17720:tid 17767] [client 4.235.80.198:48461] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 19:15:44.224855 2026] [:error] [pid 17720:tid 17777] [client 4.235.80.198:48461] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zo.php"] [unique_id "aetQ4OhlUs6BS3Ng7_V-NgAAANc"]
[Fri Apr 24 19:15:45.349885 2026] [:error] [pid 17720:tid 17764] [client 4.235.80.198:40902] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zo.php"] [unique_id "aetQ4ehlUs6BS3Ng7_V-OgAAAMo"]
[Fri Apr 24 19:15:46.437679 2026] [:error] [pid 17720:tid 17771] [client 4.235.80.198:40933] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zo.php"] [unique_id "aetQ4uhlUs6BS3Ng7_V-PwAAANE"]
[Fri Apr 24 19:15:47.556081 2026] [:error] [pid 17720:tid 17754] [client 4.235.80.198:48503] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zo.php"] [unique_id "aetQ4-hlUs6BS3Ng7_V-RgAAAMA"]
[Fri Apr 24 19:15:48.550911 2026] [:error] [pid 17721:tid 17787] [client 4.235.80.198:2109] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xy.php"] [unique_id "aetQ5OFXXkLeyDnfk_8nHQAAAAY"]
[Fri Apr 24 19:15:49.418425 2026] [:error] [pid 17721:tid 17803] [client 4.235.80.198:46004] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xy.php"] [unique_id "aetQ5eFXXkLeyDnfk_8nHwAAABY"]
[Fri Apr 24 19:15:50.128876 2026] [:error] [pid 22114:tid 22138] [client 4.235.80.198:28510] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xy.php"] [unique_id "aetQ5oAuWGz3WlMQjofebQAAARU"]
[Fri Apr 24 19:15:50.941545 2026] [:error] [pid 4177:tid 4202] [client 4.235.80.198:13808] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xy.php"] [unique_id "aetQ5n2asKnvdrSe0x7WhwAAAZE"]
[Fri Apr 24 19:15:51.623155 2026] [:error] [pid 17721:tid 17784] [client 4.235.80.198:14574] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/masks.php"] [unique_id "aetQ5-FXXkLeyDnfk_8nJAAAAAM"]
[Fri Apr 24 19:15:52.577862 2026] [:error] [pid 17719:tid 17730] [client 4.235.80.198:19372] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/masks.php"] [unique_id "aetQ6MTZ9gzEyL1BkPqYngAAAIM"]
[Fri Apr 24 19:15:53.548802 2026] [:error] [pid 22114:tid 22120] [client 4.235.80.198:7678] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/masks.php"] [unique_id "aetQ6YAuWGz3WlMQjofebgAAAQM"]
[Fri Apr 24 19:15:54.294852 2026] [:error] [pid 17720:tid 17755] [client 4.235.80.198:45973] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/masks.php"] [unique_id "aetQ6uhlUs6BS3Ng7_V-UAAAAME"]
[Fri Apr 24 19:15:55.095245 2026] [:error] [pid 22114:tid 22136] [client 4.235.80.198:48463] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/man.php"] [unique_id "aetQ64AuWGz3WlMQjofecAAAARM"]
[Fri Apr 24 19:15:55.770349 2026] [:error] [pid 17721:tid 17790] [client 4.235.80.198:7112] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/man.php"] [unique_id "aetQ6-FXXkLeyDnfk_8nKwAAAAk"]
[Fri Apr 24 19:15:57.198015 2026] [:error] [pid 14531:tid 14535] [client 4.235.80.198:21337] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/man.php"] [unique_id "aetQ7XfLU2gw-6KR-GawhQAAAUI"]
[Fri Apr 24 19:15:58.541658 2026] [:error] [pid 14531:tid 14546] [client 4.235.80.198:40930] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/man.php"] [unique_id "aetQ7nfLU2gw-6KR-GawjwAAAU0"]
[Fri Apr 24 19:15:59.481184 2026] [:error] [pid 17808:tid 17820] [client 4.235.80.198:19330] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xfun.php"] [unique_id "aetQ7-arbOEFI8qshvIZFAAAAEo"]
[Fri Apr 24 19:16:00.210805 2026] [:error] [pid 17719:tid 17741] [client 4.235.80.198:14534] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xfun.php"] [unique_id "aetQ8MTZ9gzEyL1BkPqYowAAAI4"]
[Fri Apr 24 19:16:01.201572 2026] [:error] [pid 22114:tid 22132] [client 4.235.80.198:13784] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xfun.php"] [unique_id "aetQ8YAuWGz3WlMQjofecwAAAQ8"]
[Fri Apr 24 19:16:02.272820 2026] [:error] [pid 17720:tid 17761] [client 4.235.80.198:21365] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xfun.php"] [unique_id "aetQ8uhlUs6BS3Ng7_V-WQAAAMc"]
[Fri Apr 24 19:16:03.186658 2026] [:error] [pid 17720:tid 17756] [client 4.235.80.198:2642] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xxx.php"] [unique_id "aetQ8-hlUs6BS3Ng7_V-XQAAAMI"]
[Fri Apr 24 19:16:04.195788 2026] [:error] [pid 17808:tid 17829] [client 4.235.80.198:33820] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xxx.php"] [unique_id "aetQ9OarbOEFI8qshvIZHgAAAFM"]
[Fri Apr 24 19:16:05.219539 2026] [:error] [pid 17721:tid 17787] [client 4.235.80.198:39895] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xxx.php"] [unique_id "aetQ9eFXXkLeyDnfk_8nTwAAAAY"]
[Fri Apr 24 19:16:06.426172 2026] [:error] [pid 17808:tid 17830] [client 4.235.80.198:14116] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xxx.php"] [unique_id "aetQ9uarbOEFI8qshvIZIQAAAFQ"]
[Fri Apr 24 19:16:07.201313 2026] [:error] [pid 17720:tid 17767] [client 4.235.80.198:6204] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vv.php"] [unique_id "aetQ9-hlUs6BS3Ng7_V-ZQAAAM0"]
[Fri Apr 24 19:16:08.012688 2026] [:error] [pid 17808:tid 17811] [client 4.235.80.198:14560] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vv.php"] [unique_id "aetQ-OarbOEFI8qshvIZJAAAAEE"]
[Fri Apr 24 19:16:09.030214 2026] [:error] [pid 17720:tid 17774] [client 4.235.80.198:43454] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vv.php"] [unique_id "aetQ-ehlUs6BS3Ng7_V-aAAAANQ"]
[Fri Apr 24 19:16:10.299115 2026] [:error] [pid 17808:tid 17827] [client 4.235.80.198:36973] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vv.php"] [unique_id "aetQ-uarbOEFI8qshvIZLwAAAFE"]
[Fri Apr 24 19:16:11.109119 2026] [:error] [pid 17720:tid 17771] [client 4.235.80.198:21283] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wpconf.php"] [unique_id "aetQ--hlUs6BS3Ng7_V-awAAANE"]
[Fri Apr 24 19:16:11.954986 2026] [:error] [pid 4177:tid 4185] [client 4.235.80.198:22922] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wpconf.php"] [unique_id "aetQ-32asKnvdrSe0x7W0gAAAYA"]
[Fri Apr 24 19:16:13.007649 2026] [:error] [pid 17721:tid 17796] [client 4.235.80.198:21251] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wpconf.php"] [unique_id "aetQ_eFXXkLeyDnfk_8nawAAAA8"]
[Fri Apr 24 19:16:14.677604 2026] [:error] [pid 17808:tid 17812] [client 4.235.80.198:63042] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wpconf.php"] [unique_id "aetQ_uarbOEFI8qshvIZawAAAEI"]
[Fri Apr 24 19:16:15.443131 2026] [:error] [pid 17721:tid 17792] [client 4.235.80.198:15335] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lib.php"] [unique_id "aetQ_-FXXkLeyDnfk_8ncAAAAAs"]
[Fri Apr 24 19:16:16.591160 2026] [:error] [pid 17721:tid 17797] [client 4.235.80.198:11840] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lib.php"] [unique_id "aetRAOFXXkLeyDnfk_8ndAAAABA"]
[Fri Apr 24 19:16:17.337079 2026] [:error] [pid 17808:tid 17826] [client 4.235.80.198:11866] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lib.php"] [unique_id "aetRAearbOEFI8qshvIZdwAAAFA"]
[Fri Apr 24 19:16:18.312019 2026] [:error] [pid 17808:tid 17832] [client 4.235.80.198:26541] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lib.php"] [unique_id "aetRAuarbOEFI8qshvIZgwAAAFY"]
[Fri Apr 24 19:16:19.017479 2026] [:error] [pid 17808:tid 17818] [client 4.235.80.198:43452] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-zx.php"] [unique_id "aetRA-arbOEFI8qshvIZhgAAAEg"]
[Fri Apr 24 19:16:19.986110 2026] [:error] [pid 17720:tid 17763] [client 4.235.80.198:26509] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-zx.php"] [unique_id "aetRA-hlUs6BS3Ng7_V-dQAAAMk"]
[Fri Apr 24 19:16:20.786343 2026] [:error] [pid 14531:tid 14546] [client 4.235.80.198:37986] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-zx.php"] [unique_id "aetRBHfLU2gw-6KR-Gaw1QAAAU0"]
[Fri Apr 24 19:16:21.589714 2026] [:error] [pid 4177:tid 4203] [client 4.235.80.198:9898] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-zx.php"] [unique_id "aetRBX2asKnvdrSe0x7W5gAAAZI"]
[Fri Apr 24 19:16:22.242026 2026] [:error] [pid 22114:tid 22128] [client 4.235.80.198:25530] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/000.php"] [unique_id "aetRBoAuWGz3WlMQjofefwAAAQs"]
[Fri Apr 24 19:16:22.873232 2026] [:error] [pid 17720:tid 17767] [client 4.235.80.198:34333] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/000.php"] [unique_id "aetRBuhlUs6BS3Ng7_V-ewAAAM0"]
[Fri Apr 24 19:16:23.652619 2026] [:error] [pid 17719:tid 17745] [client 4.235.80.198:2995] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/000.php"] [unique_id "aetRB8TZ9gzEyL1BkPqYrwAAAJI"]
[Fri Apr 24 19:16:24.595532 2026] [:error] [pid 4177:tid 4189] [client 4.235.80.198:3006] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/000.php"] [unique_id "aetRCH2asKnvdrSe0x7W9wAAAYQ"]
[Fri Apr 24 19:16:25.333981 2026] [:error] [pid 4177:tid 4201] [client 4.235.80.198:34312] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mar.php"] [unique_id "aetRCX2asKnvdrSe0x7W_AAAAZA"]
[Fri Apr 24 19:16:26.026569 2026] [:error] [pid 17808:tid 17822] [client 4.235.80.198:47211] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mar.php"] [unique_id "aetRCuarbOEFI8qshvIZjgAAAEw"]
[Fri Apr 24 19:16:26.895892 2026] [:error] [pid 14531:tid 14549] [client 4.235.80.198:21297] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mar.php"] [unique_id "aetRCnfLU2gw-6KR-Gaw3QAAAVA"]
[Fri Apr 24 19:16:27.751889 2026] [:error] [pid 17808:tid 17826] [client 4.235.80.198:8402] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mar.php"] [unique_id "aetRC-arbOEFI8qshvIZkgAAAFA"]
[Fri Apr 24 19:16:28.400683 2026] [:error] [pid 17808:tid 17812] [client 4.235.80.198:9915] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/iov.php"] [unique_id "aetRDOarbOEFI8qshvIZkwAAAEI"]
[Fri Apr 24 19:16:29.280056 2026] [:error] [pid 17721:tid 17787] [client 4.235.80.198:47208] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/iov.php"] [unique_id "aetRDeFXXkLeyDnfk_8nggAAAAY"]
[Fri Apr 24 19:16:30.019805 2026] [:error] [pid 17720:tid 17769] [client 4.235.80.198:8395] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/iov.php"] [unique_id "aetRDuhlUs6BS3Ng7_V-kAAAAM8"]
[Fri Apr 24 19:16:30.714202 2026] [:error] [pid 17720:tid 17757] [client 4.235.80.198:11897] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/iov.php"] [unique_id "aetRDuhlUs6BS3Ng7_V-lgAAAMM"]
[Fri Apr 24 19:16:34.518527 2026] [:error] [pid 4177:tid 4197] [client 4.235.80.198:47758] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jodohghi.php"] [unique_id "aetREn2asKnvdrSe0x7XGAAAAYw"]
[Fri Apr 24 19:16:35.472543 2026] [:error] [pid 4177:tid 4196] [client 4.235.80.198:11878] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jodohghi.php"] [unique_id "aetRE32asKnvdrSe0x7XHwAAAYs"]
[Fri Apr 24 19:16:39.612726 2026] [:error] [pid 17720:tid 17763] [client 4.235.80.198:6452] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jodohghi.php"] [unique_id "aetRF-hlUs6BS3Ng7_V-sgAAAMk"]
[Fri Apr 24 19:16:40.325605 2026] [:error] [pid 4177:tid 4199] [client 4.235.80.198:39328] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jodohghi.php"] [unique_id "aetRGH2asKnvdrSe0x7XLgAAAY4"]
[Fri Apr 24 19:16:41.019137 2026] [:error] [pid 4177:tid 4207] [client 4.235.80.198:20837] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rendi59.php"] [unique_id "aetRGX2asKnvdrSe0x7XNAAAAZY"]
[Fri Apr 24 19:16:41.944429 2026] [:error] [pid 14531:tid 14545] [client 4.235.80.198:47763] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rendi59.php"] [unique_id "aetRGXfLU2gw-6KR-Gaw_wAAAUw"]
[Fri Apr 24 19:16:42.900012 2026] [:error] [pid 17721:tid 17800] [client 4.235.80.198:11466] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rendi59.php"] [unique_id "aetRGuFXXkLeyDnfk_8niQAAABM"]
[Fri Apr 24 19:16:43.557481 2026] [proxy_fcgi:error] [pid 4177:tid 4207] [client 4.235.80.198:2619] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 19:16:43.835841 2026] [proxy_fcgi:error] [pid 4177:tid 4206] [client 4.235.80.198:2619] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 19:16:44.387381 2026] [proxy_fcgi:error] [pid 4177:tid 4192] [client 4.235.80.198:2619] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 19:16:44.654375 2026] [proxy_fcgi:error] [pid 4177:tid 4208] [client 4.235.80.198:2619] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 19:16:44.965402 2026] [proxy_fcgi:error] [pid 4177:tid 4203] [client 4.235.80.198:2619] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 19:16:45.339834 2026] [proxy_fcgi:error] [pid 4177:tid 4200] [client 4.235.80.198:2619] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 19:16:45.636667 2026] [proxy_fcgi:error] [pid 4177:tid 4191] [client 4.235.80.198:2619] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 19:16:45.983301 2026] [proxy_fcgi:error] [pid 4177:tid 4193] [client 4.235.80.198:2619] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 19:16:46.300728 2026] [proxy_fcgi:error] [pid 4177:tid 4204] [client 4.235.80.198:2619] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 19:16:46.619381 2026] [proxy_fcgi:error] [pid 4177:tid 4197] [client 4.235.80.198:2619] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 19:16:46.929034 2026] [proxy_fcgi:error] [pid 4177:tid 4199] [client 4.235.80.198:2619] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 19:16:47.193862 2026] [:error] [pid 4177:tid 4206] [client 4.235.80.198:2619] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zhw.php"] [unique_id "aetRH32asKnvdrSe0x7XUQAAAZU"]
[Fri Apr 24 19:16:48.367696 2026] [:error] [pid 4177:tid 4189] [client 4.235.80.198:10655] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zhw.php"] [unique_id "aetRIH2asKnvdrSe0x7XVwAAAYQ"]
[Fri Apr 24 19:16:49.176938 2026] [:error] [pid 17720:tid 17755] [client 4.235.80.198:2489] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zhw.php"] [unique_id "aetRIehlUs6BS3Ng7_V-zAAAAME"]
[Fri Apr 24 19:16:49.803054 2026] [:error] [pid 4177:tid 4197] [client 4.235.80.198:46492] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zhw.php"] [unique_id "aetRIX2asKnvdrSe0x7XYAAAAYw"]
[Fri Apr 24 19:16:50.478496 2026] [:error] [pid 4177:tid 4185] [client 4.235.80.198:38859] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/casp1.php"] [unique_id "aetRIn2asKnvdrSe0x7XYQAAAYA"]
[Fri Apr 24 19:16:51.440497 2026] [:error] [pid 17719:tid 17728] [client 4.235.80.198:39339] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/casp1.php"] [unique_id "aetRI8TZ9gzEyL1BkPqYygAAAIE"]
[Fri Apr 24 19:16:52.142946 2026] [:error] [pid 4177:tid 4189] [client 4.235.80.198:13747] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/casp1.php"] [unique_id "aetRJH2asKnvdrSe0x7XZQAAAYQ"]
[Fri Apr 24 19:16:52.726781 2026] [:error] [pid 4177:tid 4196] [client 4.235.80.198:17958] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/casp1.php"] [unique_id "aetRJH2asKnvdrSe0x7XZwAAAYs"]
[Fri Apr 24 19:16:53.402568 2026] [:error] [pid 14531:tid 14546] [client 4.235.80.198:2575] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ftde.php"] [unique_id "aetRJXfLU2gw-6KR-GaxAgAAAU0"]
[Fri Apr 24 19:16:54.391432 2026] [:error] [pid 17719:tid 17736] [client 4.235.80.198:13062] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ftde.php"] [unique_id "aetRJsTZ9gzEyL1BkPqY0QAAAIk"]
[Fri Apr 24 19:16:55.094651 2026] [:error] [pid 17719:tid 17746] [client 4.235.80.198:12633] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ftde.php"] [unique_id "aetRJ8TZ9gzEyL1BkPqY1AAAAJM"]
[Fri Apr 24 19:16:55.683622 2026] [:error] [pid 17720:tid 17757] [client 4.235.80.198:26896] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ftde.php"] [unique_id "aetRJ-hlUs6BS3Ng7_V-2QAAAMM"]
[Fri Apr 24 19:16:56.424838 2026] [:error] [pid 17808:tid 17812] [client 4.235.80.198:31262] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lov.php"] [unique_id "aetRKOarbOEFI8qshvIZvQAAAEI"]
[Fri Apr 24 19:16:57.278561 2026] [:error] [pid 22114:tid 22132] [client 4.235.80.198:39331] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lov.php"] [unique_id "aetRKYAuWGz3WlMQjofejAAAAQ8"]
[Fri Apr 24 19:16:58.088728 2026] [:error] [pid 22114:tid 22124] [client 4.235.80.198:42144] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lov.php"] [unique_id "aetRKoAuWGz3WlMQjofejwAAAQc"]
[Fri Apr 24 19:16:58.857173 2026] [:error] [pid 17719:tid 17741] [client 4.235.80.198:24497] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lov.php"] [unique_id "aetRKsTZ9gzEyL1BkPqY1wAAAI4"]
[Fri Apr 24 19:16:59.767732 2026] [:error] [pid 17808:tid 17815] [client 4.235.80.198:30868] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/knw.php"] [unique_id "aetRK-arbOEFI8qshvIZywAAAEU"]
[Fri Apr 24 19:17:00.509766 2026] [:error] [pid 17721:tid 17793] [client 4.235.80.198:42137] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/knw.php"] [unique_id "aetRLOFXXkLeyDnfk_8nmAAAAAw"]
[Fri Apr 24 19:17:01.396038 2026] [:error] [pid 17720:tid 17762] [client 4.235.80.198:2472] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/knw.php"] [unique_id "aetRLehlUs6BS3Ng7_V-8wAAAMg"]
[Fri Apr 24 19:17:02.064063 2026] [:error] [pid 17720:tid 17765] [client 4.235.80.198:50184] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/knw.php"] [unique_id "aetRLuhlUs6BS3Ng7_V-9QAAAMs"]
[Fri Apr 24 19:17:02.685612 2026] [:error] [pid 17719:tid 17727] [client 4.235.80.198:13710] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fi.php"] [unique_id "aetRLsTZ9gzEyL1BkPqY3wAAAIA"]
[Fri Apr 24 19:17:03.543948 2026] [:error] [pid 17720:tid 17760] [client 4.235.80.198:25043] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fi.php"] [unique_id "aetRL-hlUs6BS3Ng7_V--gAAAMY"]
[Fri Apr 24 19:17:04.486301 2026] [:error] [pid 17720:tid 17777] [client 4.235.80.198:31240] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fi.php"] [unique_id "aetRMOhlUs6BS3Ng7_V-_QAAANc"]
[Fri Apr 24 19:17:05.675636 2026] [:error] [pid 22114:tid 22117] [client 4.235.80.198:8135] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fi.php"] [unique_id "aetRMYAuWGz3WlMQjofenAAAAQA"]
[Fri Apr 24 19:17:06.458526 2026] [:error] [pid 17808:tid 17832] [client 4.235.80.198:19444] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jlex.php"] [unique_id "aetRMuarbOEFI8qshvIZ5QAAAFY"]
[Fri Apr 24 19:17:07.201526 2026] [:error] [pid 17720:tid 17768] [client 4.235.80.198:12644] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jlex.php"] [unique_id "aetRM-hlUs6BS3Ng7_V_AAAAAM4"]
[Fri Apr 24 19:17:08.053809 2026] [:error] [pid 17721:tid 17801] [client 4.235.80.198:63166] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jlex.php"] [unique_id "aetRNOFXXkLeyDnfk_8nrAAAABQ"]
[Fri Apr 24 19:17:08.811015 2026] [:error] [pid 17721:tid 17785] [client 4.235.80.198:27961] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jlex.php"] [unique_id "aetRNOFXXkLeyDnfk_8nrQAAAAQ"]
[Fri Apr 24 19:17:09.502867 2026] [:error] [pid 17721:tid 17787] [client 4.235.80.198:50196] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-k7djufwez2.php"] [unique_id "aetRNeFXXkLeyDnfk_8nrgAAAAY"]
[Fri Apr 24 19:17:10.155100 2026] [:error] [pid 17720:tid 17767] [client 4.235.80.198:50219] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-k7djufwez2.php"] [unique_id "aetRNuhlUs6BS3Ng7_V_CgAAAM0"]
[Fri Apr 24 19:17:10.840434 2026] [:error] [pid 17719:tid 17736] [client 4.235.80.198:25038] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-k7djufwez2.php"] [unique_id "aetRNsTZ9gzEyL1BkPqY7QAAAIk"]
[Fri Apr 24 19:17:12.188666 2026] [:error] [pid 14531:tid 14537] [client 4.235.80.198:19394] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-k7djufwez2.php"] [unique_id "aetROHfLU2gw-6KR-GaxIQAAAUQ"]
[Fri Apr 24 19:17:13.453003 2026] [:error] [pid 17720:tid 17774] [client 4.235.80.198:27909] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-tiroto.php"] [unique_id "aetROehlUs6BS3Ng7_V_GwAAANQ"]
[Fri Apr 24 19:17:14.167140 2026] [:error] [pid 17721:tid 17803] [client 4.235.80.198:40390] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-tiroto.php"] [unique_id "aetROuFXXkLeyDnfk_8nswAAABY"]
[Fri Apr 24 19:17:14.871343 2026] [:error] [pid 14531:tid 14539] [client 4.235.80.198:2758] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-tiroto.php"] [unique_id "aetROnfLU2gw-6KR-GaxLAAAAUY"]
[Fri Apr 24 19:17:16.308842 2026] [:error] [pid 17720:tid 17774] [client 4.235.80.198:2244] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-tiroto.php"] [unique_id "aetRPOhlUs6BS3Ng7_V_IgAAANQ"]
[Fri Apr 24 19:17:16.912057 2026] [:error] [pid 17719:tid 17750] [client 4.235.80.198:25028] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/son.php"] [unique_id "aetRPMTZ9gzEyL1BkPqY8QAAAJc"]
[Fri Apr 24 19:17:17.718453 2026] [:error] [pid 4177:tid 4202] [client 4.235.80.198:25087] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/son.php"] [unique_id "aetRPX2asKnvdrSe0x7XewAAAZE"]
[Fri Apr 24 19:17:18.364853 2026] [:error] [pid 17720:tid 17754] [client 4.235.80.198:40399] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/son.php"] [unique_id "aetRPuhlUs6BS3Ng7_V_LgAAAMA"]
[Fri Apr 24 19:17:19.456761 2026] [:error] [pid 4177:tid 4198] [client 4.235.80.198:46471] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/son.php"] [unique_id "aetRP32asKnvdrSe0x7XfwAAAY0"]
[Fri Apr 24 19:17:21.524553 2026] [:error] [pid 22114:tid 22139] [client 4.235.80.198:8156] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/99.php"] [unique_id "aetRQYAuWGz3WlMQjofesAAAARY"]
[Fri Apr 24 19:17:22.617262 2026] [:error] [pid 14531:tid 14553] [client 4.235.80.198:42152] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/99.php"] [unique_id "aetRQnfLU2gw-6KR-GaxOwAAAVQ"]
[Fri Apr 24 19:17:23.749410 2026] [:error] [pid 14531:tid 14544] [client 4.235.80.198:34919] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/99.php"] [unique_id "aetRQ3fLU2gw-6KR-GaxPwAAAUs"]
[Fri Apr 24 19:17:24.706921 2026] [:error] [pid 17720:tid 17764] [client 4.235.80.198:33329] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/99.php"] [unique_id "aetRROhlUs6BS3Ng7_V_QgAAAMo"]
[Fri Apr 24 19:17:25.640882 2026] [:error] [pid 17719:tid 17729] [client 4.235.80.198:2802] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bal.php"] [unique_id "aetRRcTZ9gzEyL1BkPqY9gAAAII"]
[Fri Apr 24 19:17:26.358159 2026] [:error] [pid 17720:tid 17764] [client 4.235.80.198:34893] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bal.php"] [unique_id "aetRRuhlUs6BS3Ng7_V_UAAAAMo"]
[Fri Apr 24 19:17:27.060280 2026] [:error] [pid 14531:tid 14545] [client 4.235.80.198:31255] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bal.php"] [unique_id "aetRR3fLU2gw-6KR-GaxRQAAAUw"]
[Fri Apr 24 19:17:28.095089 2026] [:error] [pid 4177:tid 4198] [client 4.235.80.198:31267] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bal.php"] [unique_id "aetRSH2asKnvdrSe0x7XpQAAAY0"]
[Fri Apr 24 19:17:29.128832 2026] [:error] [pid 14531:tid 14541] [client 4.235.80.198:7312] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/filefuns.php"] [unique_id "aetRSXfLU2gw-6KR-GaxSAAAAUg"]
[Fri Apr 24 19:17:30.049411 2026] [:error] [pid 4177:tid 4194] [client 4.235.80.198:38356] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/filefuns.php"] [unique_id "aetRSn2asKnvdrSe0x7XqwAAAYk"]
[Fri Apr 24 19:17:31.082687 2026] [:error] [pid 17808:tid 17818] [client 4.235.80.198:2764] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/filefuns.php"] [unique_id "aetRS-arbOEFI8qshvIaLwAAAEg"]
[Fri Apr 24 19:17:32.158136 2026] [:error] [pid 17720:tid 17757] [client 4.235.80.198:7914] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/filefuns.php"] [unique_id "aetRTOhlUs6BS3Ng7_V_XAAAAMM"]
[Fri Apr 24 19:17:33.020472 2026] [:error] [pid 14531:tid 14540] [client 4.235.80.198:24514] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ay.php"] [unique_id "aetRTXfLU2gw-6KR-GaxUAAAAUc"]
[Fri Apr 24 19:17:33.681939 2026] [:error] [pid 17721:tid 17790] [client 4.235.80.198:49224] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ay.php"] [unique_id "aetRTeFXXkLeyDnfk_8nuAAAAAk"]
[Fri Apr 24 19:17:34.582600 2026] [:error] [pid 14531:tid 14552] [client 4.235.80.198:7354] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ay.php"] [unique_id "aetRTnfLU2gw-6KR-GaxUwAAAVM"]
[Fri Apr 24 19:17:35.764379 2026] [:error] [pid 17720:tid 17761] [client 4.235.80.198:47821] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ay.php"] [unique_id "aetRT-hlUs6BS3Ng7_V_ZQAAAMc"]
[Fri Apr 24 19:17:36.848853 2026] [:error] [pid 17808:tid 17832] [client 4.235.80.198:7577] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/options.php"] [unique_id "aetRUOarbOEFI8qshvIaQQAAAFY"]
[Fri Apr 24 19:17:37.656889 2026] [:error] [pid 17720:tid 17773] [client 4.235.80.198:33342] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/options.php"] [unique_id "aetRUehlUs6BS3Ng7_V_agAAANM"]
[Fri Apr 24 19:17:38.335793 2026] [:error] [pid 17721:tid 17797] [client 4.235.80.198:28006] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/options.php"] [unique_id "aetRUuFXXkLeyDnfk_8nwgAAABA"]
[Fri Apr 24 19:17:39.300021 2026] [:error] [pid 4177:tid 4188] [client 4.235.80.198:2770] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/options.php"] [unique_id "aetRU32asKnvdrSe0x7XvgAAAYM"]
[Fri Apr 24 19:17:40.021270 2026] [:error] [pid 4177:tid 4192] [client 4.235.80.198:34900] [client 4.235.80.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/theme-compat/options.php"] [unique_id "aetRVH2asKnvdrSe0x7XwgAAAYc"]
[Fri Apr 24 19:17:41.000779 2026] [:error] [pid 17719:tid 17732] [client 4.235.80.198:13168] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/d.php"] [unique_id "aetRVMTZ9gzEyL1BkPqZBQAAAIU"]
[Fri Apr 24 19:17:41.836913 2026] [:error] [pid 17720:tid 17772] [client 4.235.80.198:35380] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/d.php"] [unique_id "aetRVehlUs6BS3Ng7_V_egAAANI"]
[Fri Apr 24 19:17:42.609901 2026] [:error] [pid 17720:tid 17759] [client 4.235.80.198:2789] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/d.php"] [unique_id "aetRVuhlUs6BS3Ng7_V_fwAAAMU"]
[Fri Apr 24 19:17:43.583356 2026] [:error] [pid 17720:tid 17758] [client 4.235.80.198:34889] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/d.php"] [unique_id "aetRV-hlUs6BS3Ng7_V_hAAAAMQ"]
[Fri Apr 24 19:17:44.291894 2026] [:error] [pid 17720:tid 17765] [client 4.235.80.198:7872] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/1a.php"] [unique_id "aetRWOhlUs6BS3Ng7_V_igAAAMs"]
[Fri Apr 24 19:17:45.016858 2026] [:error] [pid 17720:tid 17756] [client 4.235.80.198:35367] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/1a.php"] [unique_id "aetRWehlUs6BS3Ng7_V_jAAAAMI"]
[Fri Apr 24 19:17:45.725079 2026] [:error] [pid 17720:tid 17755] [client 4.235.80.198:28812] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/1a.php"] [unique_id "aetRWehlUs6BS3Ng7_V_kgAAAME"]
[Fri Apr 24 19:17:46.588825 2026] [proxy_fcgi:error] [pid 17720:tid 17756] [client 4.235.80.198:47842] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 19:17:46.872289 2026] [proxy_fcgi:error] [pid 17720:tid 17772] [client 4.235.80.198:47842] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 19:17:47.135782 2026] [proxy_fcgi:error] [pid 17720:tid 17763] [client 4.235.80.198:47842] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 19:17:47.399633 2026] [proxy_fcgi:error] [pid 17720:tid 17767] [client 4.235.80.198:47842] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 19:17:47.674846 2026] [proxy_fcgi:error] [pid 17720:tid 17761] [client 4.235.80.198:47842] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 19:17:47.939216 2026] [proxy_fcgi:error] [pid 17720:tid 17759] [client 4.235.80.198:47842] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 19:17:48.454070 2026] [proxy_fcgi:error] [pid 17720:tid 17757] [client 4.235.80.198:47842] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 19:17:48.717092 2026] [proxy_fcgi:error] [pid 17720:tid 17758] [client 4.235.80.198:47842] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 19:17:49.032003 2026] [proxy_fcgi:error] [pid 17720:tid 17768] [client 4.235.80.198:47842] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 19:17:49.484712 2026] [proxy_fcgi:error] [pid 17720:tid 17775] [client 4.235.80.198:47842] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 19:17:49.815040 2026] [proxy_fcgi:error] [pid 17720:tid 17766] [client 4.235.80.198:47842] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 19:17:50.173577 2026] [:error] [pid 17720:tid 17761] [client 4.235.80.198:47842] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bojcdooq.php"] [unique_id "aetRXuhlUs6BS3Ng7_V_tQAAAMc"]
[Fri Apr 24 19:17:51.005083 2026] [:error] [pid 14531:tid 14547] [client 4.235.80.198:7558] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bojcdooq.php"] [unique_id "aetRX3fLU2gw-6KR-GaxYgAAAU4"]
[Fri Apr 24 19:17:51.675129 2026] [:error] [pid 4177:tid 4205] [client 4.235.80.198:49226] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bojcdooq.php"] [unique_id "aetRX32asKnvdrSe0x7X4wAAAZQ"]
[Fri Apr 24 19:17:52.384030 2026] [:error] [pid 17720:tid 17765] [client 4.235.80.198:27984] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bojcdooq.php"] [unique_id "aetRYOhlUs6BS3Ng7_V_uQAAAMs"]
[Fri Apr 24 19:17:53.274857 2026] [:error] [pid 17721:tid 17800] [client 4.235.80.198:13177] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zdd.php"] [unique_id "aetRYeFXXkLeyDnfk_8nzAAAABM"]
[Fri Apr 24 19:17:54.218765 2026] [:error] [pid 17720:tid 17778] [client 4.235.80.198:34891] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zdd.php"] [unique_id "aetRYuhlUs6BS3Ng7_V_vQAAANg"]
[Fri Apr 24 19:17:55.100154 2026] [:error] [pid 17721:tid 17804] [client 4.235.80.198:49248] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zdd.php"] [unique_id "aetRY-FXXkLeyDnfk_8nzgAAABc"]
[Fri Apr 24 19:17:56.050734 2026] [:error] [pid 17720:tid 17763] [client 4.235.80.198:7574] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zdd.php"] [unique_id "aetRZOhlUs6BS3Ng7_V_xwAAAMk"]
[Fri Apr 24 19:17:56.804094 2026] [:error] [pid 17721:tid 17792] [client 4.235.80.198:32807] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/133.php"] [unique_id "aetRZOFXXkLeyDnfk_8n1AAAAAs"]
[Fri Apr 24 19:17:57.778009 2026] [:error] [pid 17720:tid 17778] [client 4.235.80.198:6894] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/133.php"] [unique_id "aetRZehlUs6BS3Ng7_V_zgAAANg"]
[Fri Apr 24 19:17:58.771947 2026] [:error] [pid 17720:tid 17764] [client 4.235.80.198:34895] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/133.php"] [unique_id "aetRZuhlUs6BS3Ng7_V_0AAAAMo"]
[Fri Apr 24 19:17:59.638336 2026] [:error] [pid 4177:tid 4186] [client 4.235.80.198:47838] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/133.php"] [unique_id "aetRZ32asKnvdrSe0x7X-wAAAYE"]
[Fri Apr 24 19:18:00.454593 2026] [:error] [pid 17808:tid 17831] [client 4.235.80.198:13127] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jq.php"] [unique_id "aetRaOarbOEFI8qshvIaVQAAAFU"]
[Fri Apr 24 19:18:01.508950 2026] [:error] [pid 17720:tid 17768] [client 4.235.80.198:38355] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jq.php"] [unique_id "aetRaehlUs6BS3Ng7_V_3gAAAM4"]
[Fri Apr 24 19:18:02.418629 2026] [:error] [pid 14531:tid 14548] [client 4.235.80.198:7324] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jq.php"] [unique_id "aetRanfLU2gw-6KR-GaxbwAAAU8"]
[Fri Apr 24 19:18:03.441594 2026] [:error] [pid 17808:tid 17815] [client 4.235.80.198:34906] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jq.php"] [unique_id "aetRa-arbOEFI8qshvIaWQAAAEU"]
[Fri Apr 24 19:18:04.388779 2026] [:error] [pid 17720:tid 17765] [client 4.235.80.198:6900] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cro.php"] [unique_id "aetRbOhlUs6BS3Ng7_V_-wAAAMs"]
[Fri Apr 24 19:18:05.456168 2026] [:error] [pid 22114:tid 22129] [client 4.235.80.198:47858] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cro.php"] [unique_id "aetRbYAuWGz3WlMQjofevAAAAQw"]
[Fri Apr 24 19:18:06.775094 2026] [:error] [pid 17808:tid 17811] [client 4.235.80.198:28014] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cro.php"] [unique_id "aetRbuarbOEFI8qshvIaYAAAAEE"]
[Fri Apr 24 19:18:07.876063 2026] [:error] [pid 17721:tid 17782] [client 4.235.80.198:29430] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cro.php"] [unique_id "aetRb-FXXkLeyDnfk_8n3wAAAAE"]
[Fri Apr 24 19:18:08.818560 2026] [:error] [pid 17808:tid 17828] [client 4.235.80.198:7607] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wwx.php"] [unique_id "aetRcOarbOEFI8qshvIaZgAAAFI"]
[Fri Apr 24 19:18:09.667428 2026] [:error] [pid 17721:tid 17795] [client 4.235.80.198:64171] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wwx.php"] [unique_id "aetRceFXXkLeyDnfk_8n4wAAAA4"]
[Fri Apr 24 19:18:10.268039 2026] [:error] [pid 17808:tid 17825] [client 4.235.80.198:6896] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wwx.php"] [unique_id "aetRcuarbOEFI8qshvIaawAAAE8"]
[Fri Apr 24 19:18:10.949522 2026] [:error] [pid 4177:tid 4199] [client 4.235.80.198:47834] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wwx.php"] [unique_id "aetRcn2asKnvdrSe0x7YIQAAAY4"]
[Fri Apr 24 19:18:11.665300 2026] [:error] [pid 4177:tid 4203] [client 4.235.80.198:7562] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/trx24.php"] [unique_id "aetRc32asKnvdrSe0x7YJAAAAZI"]
[Fri Apr 24 19:18:12.324190 2026] [:error] [pid 17720:tid 17754] [client 4.235.80.198:37461] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/trx24.php"] [unique_id "aetRdOhlUs6BS3Ng7_WALwAAAMA"]
[Fri Apr 24 19:18:13.338914 2026] [:error] [pid 14531:tid 14540] [client 4.235.80.198:28826] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/trx24.php"] [unique_id "aetRdXfLU2gw-6KR-GaxgAAAAUc"]
[Fri Apr 24 19:18:13.893170 2026] [:error] [pid 17808:tid 17816] [client 4.235.80.198:64181] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/trx24.php"] [unique_id "aetRdearbOEFI8qshvIacQAAAEY"]
[Fri Apr 24 19:18:14.521900 2026] [:error] [pid 4177:tid 4189] [client 4.235.80.198:7417] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/blox.php"] [unique_id "aetRdn2asKnvdrSe0x7YLQAAAYQ"]
[Fri Apr 24 19:18:15.249941 2026] [:error] [pid 17808:tid 17821] [client 4.235.80.198:64175] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/blox.php"] [unique_id "aetRd-arbOEFI8qshvIaeAAAAEs"]
[Fri Apr 24 19:18:16.006063 2026] [:error] [pid 4177:tid 4200] [client 4.235.80.198:13121] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/blox.php"] [unique_id "aetReH2asKnvdrSe0x7YMgAAAY8"]
[Fri Apr 24 19:18:16.646508 2026] [:error] [pid 17808:tid 17814] [client 4.235.80.198:33326] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/blox.php"] [unique_id "aetReOarbOEFI8qshvIafQAAAEQ"]
[Fri Apr 24 19:18:17.343432 2026] [:error] [pid 4177:tid 4204] [client 4.235.80.198:37455] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/berax.php"] [unique_id "aetReX2asKnvdrSe0x7YOgAAAZM"]
[Fri Apr 24 19:18:18.015028 2026] [:error] [pid 4177:tid 4197] [client 4.235.80.198:7572] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/berax.php"] [unique_id "aetRen2asKnvdrSe0x7YPwAAAYw"]
[Fri Apr 24 19:18:18.639395 2026] [:error] [pid 4177:tid 4200] [client 4.235.80.198:47808] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/berax.php"] [unique_id "aetRen2asKnvdrSe0x7YRAAAAY8"]
[Fri Apr 24 19:18:19.374678 2026] [:error] [pid 22114:tid 22128] [client 4.235.80.198:33326] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/berax.php"] [unique_id "aetRe4AuWGz3WlMQjofexAAAAQs"]
[Fri Apr 24 19:18:19.961131 2026] [:error] [pid 17808:tid 17810] [client 4.235.80.198:6906] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bkxzo.php"] [unique_id "aetRe-arbOEFI8qshvIaiQAAAEA"]
[Fri Apr 24 19:18:20.598495 2026] [:error] [pid 17720:tid 17772] [client 4.235.80.198:49257] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bkxzo.php"] [unique_id "aetRfOhlUs6BS3Ng7_WAZAAAANI"]
[Fri Apr 24 19:18:21.421348 2026] [:error] [pid 4177:tid 4197] [client 4.235.80.198:13144] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bkxzo.php"] [unique_id "aetRfX2asKnvdrSe0x7YTgAAAYw"]
[Fri Apr 24 19:18:22.220297 2026] [:error] [pid 17721:tid 17796] [client 4.235.80.198:26064] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bkxzo.php"] [unique_id "aetRfuFXXkLeyDnfk_8n6gAAAA8"]
[Fri Apr 24 19:18:23.095860 2026] [:error] [pid 17721:tid 17788] [client 4.235.80.198:26093] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cdxadmin.php"] [unique_id "aetRf-FXXkLeyDnfk_8n8AAAAAc"]
[Fri Apr 24 19:18:24.021156 2026] [:error] [pid 17719:tid 17746] [client 4.235.80.198:33332] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cdxadmin.php"] [unique_id "aetRgMTZ9gzEyL1BkPqZKgAAAJM"]
[Fri Apr 24 19:18:26.432763 2026] [:error] [pid 14531:tid 14548] [client 4.235.80.198:38346] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cdxadmin.php"] [unique_id "aetRgnfLU2gw-6KR-GaxmwAAAU8"]
[Fri Apr 24 19:18:27.835949 2026] [:error] [pid 4177:tid 4207] [client 4.235.80.198:44722] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cdxadmin.php"] [unique_id "aetRg32asKnvdrSe0x7YcAAAAZY"]
[Fri Apr 24 19:18:28.650224 2026] [:error] [pid 17720:tid 17761] [client 4.235.80.198:12569] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dfre.php"] [unique_id "aetRhOhlUs6BS3Ng7_WAiQAAAMc"]
[Fri Apr 24 19:18:29.602190 2026] [:error] [pid 17721:tid 17791] [client 4.235.80.198:6863] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dfre.php"] [unique_id "aetRheFXXkLeyDnfk_8n_AAAAAo"]
[Fri Apr 24 19:18:30.969281 2026] [:error] [pid 17719:tid 17747] [client 4.235.80.198:37485] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dfre.php"] [unique_id "aetRhsTZ9gzEyL1BkPqZLgAAAJQ"]
[Fri Apr 24 19:18:31.660995 2026] [:error] [pid 17719:tid 17731] [client 4.235.80.198:23980] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dfre.php"] [unique_id "aetRh8TZ9gzEyL1BkPqZLwAAAIQ"]
[Fri Apr 24 19:18:32.298581 2026] [:error] [pid 14531:tid 14536] [client 4.235.80.198:33284] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sko.php"] [unique_id "aetRiHfLU2gw-6KR-GaxowAAAUM"]
[Fri Apr 24 19:18:33.863590 2026] [:error] [pid 17808:tid 17818] [client 4.235.80.198:44704] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sko.php"] [unique_id "aetRiearbOEFI8qshvIalAAAAEg"]
[Fri Apr 24 19:18:34.551887 2026] [:error] [pid 17720:tid 17771] [client 4.235.80.198:6864] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sko.php"] [unique_id "aetRiuhlUs6BS3Ng7_WApgAAANE"]
[Fri Apr 24 19:18:35.350919 2026] [:error] [pid 17720:tid 17770] [client 4.235.80.198:28023] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sko.php"] [unique_id "aetRi-hlUs6BS3Ng7_WAsQAAANA"]
[Fri Apr 24 19:18:36.422336 2026] [:error] [pid 22114:tid 22119] [client 4.235.80.198:27974] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/shorw.php"] [unique_id "aetRjIAuWGz3WlMQjofe0gAAAQI"]
[Fri Apr 24 19:18:37.191376 2026] [:error] [pid 14531:tid 14538] [client 4.235.80.198:49273] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/shorw.php"] [unique_id "aetRjXfLU2gw-6KR-GaxqgAAAUU"]
[Fri Apr 24 19:18:37.999492 2026] [:error] [pid 17720:tid 17757] [client 4.235.80.198:30424] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/shorw.php"] [unique_id "aetRjehlUs6BS3Ng7_WAuQAAAMM"]
[Fri Apr 24 19:18:38.821469 2026] [:error] [pid 17719:tid 17748] [client 4.235.80.198:33294] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/shorw.php"] [unique_id "aetRjsTZ9gzEyL1BkPqZPAAAAJU"]
[Fri Apr 24 19:18:39.361850 2026] [:error] [pid 14531:tid 14547] [client 4.235.80.198:64128] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/shelp.php"] [unique_id "aetRj3fLU2gw-6KR-GaxswAAAU4"]
[Fri Apr 24 19:18:40.055350 2026] [:error] [pid 17720:tid 17775] [client 4.235.80.198:24566] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/shelp.php"] [unique_id "aetRkOhlUs6BS3Ng7_WAwAAAANU"]
[Fri Apr 24 19:18:40.665140 2026] [:error] [pid 17720:tid 17760] [client 4.235.80.198:7583] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/shelp.php"] [unique_id "aetRkOhlUs6BS3Ng7_WAwQAAAMY"]
[Fri Apr 24 19:18:41.368824 2026] [:error] [pid 22114:tid 22122] [client 4.235.80.198:49279] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/shelp.php"] [unique_id "aetRkYAuWGz3WlMQjofe2QAAAQU"]
[Fri Apr 24 19:18:42.131898 2026] [:error] [pid 17720:tid 17755] [client 4.235.80.198:36387] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/seyv.php"] [unique_id "aetRkuhlUs6BS3Ng7_WAxwAAAME"]
[Fri Apr 24 19:18:42.989909 2026] [:error] [pid 17719:tid 17744] [client 4.235.80.198:13147] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/seyv.php"] [unique_id "aetRksTZ9gzEyL1BkPqZRQAAAJE"]
[Fri Apr 24 19:18:44.064220 2026] [:error] [pid 4177:tid 4199] [client 4.235.80.198:24537] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/seyv.php"] [unique_id "aetRlH2asKnvdrSe0x7YiQAAAY4"]
[Fri Apr 24 19:18:44.906428 2026] [:error] [pid 17720:tid 17773] [client 4.235.80.198:26099] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/seyv.php"] [unique_id "aetRlOhlUs6BS3Ng7_WA6AAAANM"]
[Fri Apr 24 19:18:45.861515 2026] [:error] [pid 17719:tid 17749] [client 4.235.80.198:30426] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sad821.php"] [unique_id "aetRlcTZ9gzEyL1BkPqZSgAAAJY"]
[Fri Apr 24 19:18:46.584251 2026] [:error] [pid 4177:tid 4195] [client 4.235.80.198:6865] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sad821.php"] [unique_id "aetRln2asKnvdrSe0x7YkQAAAYo"]
[Fri Apr 24 19:18:47.815643 2026] [:error] [pid 17720:tid 17775] [client 4.235.80.198:6898] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sad821.php"] [unique_id "aetRl-hlUs6BS3Ng7_WBDQAAANU"]
[Fri Apr 24 19:18:49.310356 2026] [proxy_fcgi:error] [pid 17808:tid 17810] [client 4.235.80.198:7930] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 19:18:49.576296 2026] [proxy_fcgi:error] [pid 17808:tid 17827] [client 4.235.80.198:7930] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 19:18:49.848731 2026] [proxy_fcgi:error] [pid 17808:tid 17821] [client 4.235.80.198:7930] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 19:18:50.112848 2026] [proxy_fcgi:error] [pid 17808:tid 17813] [client 4.235.80.198:7930] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 19:18:50.375966 2026] [proxy_fcgi:error] [pid 17808:tid 17814] [client 4.235.80.198:7930] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 19:18:50.639328 2026] [proxy_fcgi:error] [pid 17808:tid 17825] [client 4.235.80.198:7930] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 19:18:50.955372 2026] [proxy_fcgi:error] [pid 17808:tid 17819] [client 4.235.80.198:7930] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 19:18:51.219030 2026] [proxy_fcgi:error] [pid 17808:tid 17826] [client 4.235.80.198:7930] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 19:18:51.531141 2026] [proxy_fcgi:error] [pid 17808:tid 17817] [client 4.235.80.198:7930] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 19:18:51.870922 2026] [proxy_fcgi:error] [pid 17808:tid 17834] [client 4.235.80.198:7930] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 19:18:52.134599 2026] [proxy_fcgi:error] [pid 17808:tid 17828] [client 4.235.80.198:7930] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 19:18:52.394284 2026] [:error] [pid 17808:tid 17833] [client 4.235.80.198:7930] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fictioner.php"] [unique_id "aetRnOarbOEFI8qshvIauAAAAFc"]
[Fri Apr 24 19:18:53.251015 2026] [:error] [pid 4177:tid 4186] [client 4.235.80.198:28808] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fictioner.php"] [unique_id "aetRnX2asKnvdrSe0x7YnwAAAYE"]
[Fri Apr 24 19:18:53.939705 2026] [:error] [pid 4177:tid 4207] [client 4.235.80.198:36354] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fictioner.php"] [unique_id "aetRnX2asKnvdrSe0x7YowAAAZY"]
[Fri Apr 24 19:18:54.745018 2026] [:error] [pid 17719:tid 17748] [client 4.235.80.198:24530] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fictioner.php"] [unique_id "aetRnsTZ9gzEyL1BkPqZcQAAAJU"]
[Fri Apr 24 19:18:55.579286 2026] [:error] [pid 14531:tid 14534] [client 4.235.80.198:49227] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ortasekerli1.php"] [unique_id "aetRn3fLU2gw-6KR-GaxzgAAAUE"]
[Fri Apr 24 19:18:56.333289 2026] [:error] [pid 22114:tid 22122] [client 4.235.80.198:28021] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ortasekerli1.php"] [unique_id "aetRoIAuWGz3WlMQjofe5wAAAQU"]
[Fri Apr 24 19:18:57.057701 2026] [:error] [pid 22114:tid 22139] [client 4.235.80.198:13142] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ortasekerli1.php"] [unique_id "aetRoYAuWGz3WlMQjofe6QAAARY"]
[Fri Apr 24 19:18:57.676535 2026] [:error] [pid 17808:tid 17821] [client 4.235.80.198:36414] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ortasekerli1.php"] [unique_id "aetRoearbOEFI8qshvIauwAAAEs"]
[Fri Apr 24 19:18:58.648179 2026] [:error] [pid 17721:tid 17795] [client 4.235.80.198:39383] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xxa.php"] [unique_id "aetRouFXXkLeyDnfk_8oQwAAAA4"]
[Fri Apr 24 19:18:59.212024 2026] [:error] [pid 17720:tid 17765] [client 4.235.80.198:64153] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xxa.php"] [unique_id "aetRo-hlUs6BS3Ng7_WBKwAAAMs"]
[Fri Apr 24 19:19:00.007749 2026] [:error] [pid 4177:tid 4193] [client 4.235.80.198:13150] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xxa.php"] [unique_id "aetRpH2asKnvdrSe0x7YsAAAAYg"]
[Fri Apr 24 19:19:00.706882 2026] [:error] [pid 17808:tid 17819] [client 4.235.80.198:36368] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xxa.php"] [unique_id "aetRpOarbOEFI8qshvIawAAAAEk"]
[Fri Apr 24 19:19:01.324219 2026] [:error] [pid 4177:tid 4196] [client 4.235.80.198:26070] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file6.php"] [unique_id "aetRpX2asKnvdrSe0x7YtQAAAYs"]
[Fri Apr 24 19:19:02.026059 2026] [:error] [pid 22114:tid 22131] [client 4.235.80.198:26060] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file6.php"] [unique_id "aetRpoAuWGz3WlMQjofe7gAAAQ4"]
[Fri Apr 24 19:19:02.741253 2026] [:error] [pid 17721:tid 17804] [client 4.235.80.198:36406] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file6.php"] [unique_id "aetRpuFXXkLeyDnfk_8oSgAAABc"]
[Fri Apr 24 19:19:03.358780 2026] [:error] [pid 17721:tid 17796] [client 4.235.80.198:47815] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file6.php"] [unique_id "aetRp-FXXkLeyDnfk_8oTgAAAA8"]
[Fri Apr 24 19:19:04.071091 2026] [:error] [pid 4177:tid 4207] [client 4.235.80.198:13158] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-asyn-upload.php"] [unique_id "aetRqH2asKnvdrSe0x7YuAAAAZY"]
[Fri Apr 24 19:19:04.770938 2026] [:error] [pid 4177:tid 4188] [client 4.235.80.198:17484] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-asyn-upload.php"] [unique_id "aetRqH2asKnvdrSe0x7YvgAAAYM"]
[Fri Apr 24 19:19:05.751128 2026] [:error] [pid 17721:tid 17803] [client 4.235.80.198:64165] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-asyn-upload.php"] [unique_id "aetRqeFXXkLeyDnfk_8oVAAAABY"]
[Fri Apr 24 19:19:06.727118 2026] [:error] [pid 17808:tid 17813] [client 4.235.80.198:30463] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-asyn-upload.php"] [unique_id "aetRquarbOEFI8qshvIaygAAAEM"]
[Fri Apr 24 19:19:08.152673 2026] [:error] [pid 4177:tid 4190] [client 4.235.80.198:23937] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/redixsx.php"] [unique_id "aetRrH2asKnvdrSe0x7Y1wAAAYU"]
[Fri Apr 24 19:19:09.071054 2026] [:error] [pid 4177:tid 4187] [client 4.235.80.198:7609] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/redixsx.php"] [unique_id "aetRrX2asKnvdrSe0x7Y3QAAAYI"]
[Fri Apr 24 19:19:09.983303 2026] [:error] [pid 17808:tid 17812] [client 4.235.80.198:30455] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/redixsx.php"] [unique_id "aetRrearbOEFI8qshvIa0QAAAEI"]
[Fri Apr 24 19:19:12.290282 2026] [:error] [pid 17721:tid 17785] [client 4.235.80.198:24548] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/redixsx.php"] [unique_id "aetRsOFXXkLeyDnfk_8oXQAAAAQ"]
[Fri Apr 24 19:19:14.065919 2026] [:error] [pid 4177:tid 4189] [client 4.235.80.198:7557] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/alpha.php"] [unique_id "aetRsn2asKnvdrSe0x7Y7gAAAYQ"]
[Fri Apr 24 19:19:16.085735 2026] [:error] [pid 17721:tid 17797] [client 4.235.80.198:7054] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/alpha.php"] [unique_id "aetRtOFXXkLeyDnfk_8oYgAAABA"]
[Fri Apr 24 19:19:17.506333 2026] [:error] [pid 17720:tid 17769] [client 4.235.80.198:23972] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/alpha.php"] [unique_id "aetRtehlUs6BS3Ng7_WBOwAAAM8"]
[Fri Apr 24 19:19:18.277818 2026] [:error] [pid 17720:tid 17776] [client 4.235.80.198:12235] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/alpha.php"] [unique_id "aetRtuhlUs6BS3Ng7_WBPwAAANY"]
[Fri Apr 24 19:19:20.219413 2026] [:error] [pid 22114:tid 22117] [client 4.235.80.198:12276] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bc.php"] [unique_id "aetRuIAuWGz3WlMQjofe8gAAAQA"]
[Fri Apr 24 19:19:22.191226 2026] [:error] [pid 17720:tid 17774] [client 4.235.80.198:33374] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bc.php"] [unique_id "aetRuuhlUs6BS3Ng7_WBUAAAANQ"]
[Fri Apr 24 19:19:22.930756 2026] [:error] [pid 14531:tid 14548] [client 4.235.80.198:7566] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bc.php"] [unique_id "aetRunfLU2gw-6KR-Gax9gAAAU8"]
[Fri Apr 24 19:19:24.399921 2026] [:error] [pid 4177:tid 4194] [client 4.235.80.198:47847] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bc.php"] [unique_id "aetRvH2asKnvdrSe0x7ZAgAAAYk"]
[Fri Apr 24 19:19:25.176504 2026] [:error] [pid 17721:tid 17790] [client 4.235.80.198:26089] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/67.php"] [unique_id "aetRveFXXkLeyDnfk_8ocQAAAAk"]
[Fri Apr 24 19:19:26.220188 2026] [:error] [pid 17720:tid 17766] [client 4.235.80.198:23533] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/67.php"] [unique_id "aetRvuhlUs6BS3Ng7_WBWgAAAMw"]
[Fri Apr 24 19:19:27.780595 2026] [:error] [pid 17721:tid 17804] [client 4.235.80.198:2145] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/67.php"] [unique_id "aetRv-FXXkLeyDnfk_8oeQAAABc"]
[Fri Apr 24 19:19:29.352109 2026] [:error] [pid 17720:tid 17769] [client 4.235.80.198:39398] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/67.php"] [unique_id "aetRwehlUs6BS3Ng7_WBYgAAAM8"]
[Fri Apr 24 19:19:30.345275 2026] [:error] [pid 4177:tid 4194] [client 4.235.80.198:2117] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/1mrX.php"] [unique_id "aetRwn2asKnvdrSe0x7ZGQAAAYk"]
[Fri Apr 24 19:19:31.343712 2026] [:error] [pid 4177:tid 4188] [client 4.235.80.198:49264] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/1mrX.php"] [unique_id "aetRw32asKnvdrSe0x7ZIgAAAYM"]
[Fri Apr 24 19:19:33.250997 2026] [:error] [pid 17720:tid 17762] [client 4.235.80.198:13124] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/1mrX.php"] [unique_id "aetRxehlUs6BS3Ng7_WBbQAAAMg"]
[Fri Apr 24 19:19:35.115036 2026] [:error] [pid 4177:tid 4191] [client 4.235.80.198:17528] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/1mrX.php"] [unique_id "aetRx32asKnvdrSe0x7ZMgAAAYY"]
[Fri Apr 24 19:19:37.655333 2026] [:error] [pid 4177:tid 4202] [client 4.235.80.198:23008] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x402.php"] [unique_id "aetRyX2asKnvdrSe0x7ZNgAAAZE"]
[Fri Apr 24 19:19:38.644081 2026] [:error] [pid 17808:tid 17826] [client 4.235.80.198:13181] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x402.php"] [unique_id "aetRyuarbOEFI8qshvIa6AAAAFA"]
[Fri Apr 24 19:19:39.889806 2026] [:error] [pid 17808:tid 17829] [client 4.235.80.198:7921] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x402.php"] [unique_id "aetRy-arbOEFI8qshvIa6wAAAFM"]
[Fri Apr 24 19:19:40.964896 2026] [:error] [pid 14531:tid 14533] [client 4.235.80.198:28867] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x402.php"] [unique_id "aetRzHfLU2gw-6KR-GayJQAAAUA"]
[Fri Apr 24 19:19:42.321802 2026] [:error] [pid 17721:tid 17785] [client 4.235.80.198:2131] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/485.php"] [unique_id "aetRzuFXXkLeyDnfk_8o2QAAAAQ"]
[Fri Apr 24 19:19:43.774595 2026] [:error] [pid 4177:tid 4202] [client 4.235.80.198:44754] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/485.php"] [unique_id "aetRz32asKnvdrSe0x7ZVAAAAZE"]
[Fri Apr 24 19:19:44.862912 2026] [:error] [pid 4177:tid 4188] [client 4.235.80.198:7579] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/485.php"] [unique_id "aetR0H2asKnvdrSe0x7ZXAAAAYM"]
[Fri Apr 24 19:19:45.888741 2026] [:error] [pid 17720:tid 17755] [client 4.235.80.198:13138] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/485.php"] [unique_id "aetR0ehlUs6BS3Ng7_WBhQAAAME"]
[Fri Apr 24 19:19:49.909856 2026] [:error] [pid 17719:tid 17731] [client 4.235.80.198:7613] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/drykl.php"] [unique_id "aetR1cTZ9gzEyL1BkPqZjAAAAIQ"]
[Fri Apr 24 19:19:50.585963 2026] [:error] [pid 17808:tid 17811] [client 4.235.80.198:6298] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/drykl.php"] [unique_id "aetR1uarbOEFI8qshvIa9gAAAEE"]
[Fri Apr 24 19:19:51.342853 2026] [:error] [pid 17720:tid 17762] [client 4.235.80.198:30428] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/drykl.php"] [unique_id "aetR1-hlUs6BS3Ng7_WBkgAAAMg"]
[Fri Apr 24 19:19:52.039041 2026] [proxy_fcgi:error] [pid 17808:tid 17832] [client 4.235.80.198:13157] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 19:19:52.473919 2026] [proxy_fcgi:error] [pid 17808:tid 17823] [client 4.235.80.198:13157] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 02:30:32.339338 2026] [:error] [pid 14989:tid 14992] [client 154.58.229.82:45840] [client 154.58.229.82] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dwelectservices.com.au"] [uri "/.git/HEAD"] [unique_id "aeu2yHhRYjsAsZTO4EPDUQAAAAE"]
[Sat Apr 25 02:30:32.353962 2026] [:error] [pid 14989:tid 15006] [client 154.58.229.82:45834] [client 154.58.229.82] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dwelectservices.com.au"] [uri "/.git/config"] [unique_id "aeu2yHhRYjsAsZTO4EPDUgAAAA8"]
[Sat Apr 25 02:36:33.613338 2026] [proxy_fcgi:error] [pid 42792:tid 42827] [client 20.251.112.6:4664] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 02:36:33.875793 2026] [proxy_fcgi:error] [pid 42792:tid 42845] [client 20.251.112.6:4664] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 02:36:34.138784 2026] [proxy_fcgi:error] [pid 42792:tid 42846] [client 20.251.112.6:4664] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 02:36:34.423007 2026] [proxy_fcgi:error] [pid 42792:tid 42832] [client 20.251.112.6:4664] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 02:36:34.688494 2026] [proxy_fcgi:error] [pid 42792:tid 42828] [client 20.251.112.6:4664] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 02:36:34.964218 2026] [proxy_fcgi:error] [pid 42792:tid 42830] [client 20.251.112.6:4664] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 02:36:35.226028 2026] [proxy_fcgi:error] [pid 42792:tid 42835] [client 20.251.112.6:4664] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 02:36:35.491676 2026] [proxy_fcgi:error] [pid 42792:tid 42843] [client 20.251.112.6:4664] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 02:36:35.770118 2026] [proxy_fcgi:error] [pid 42792:tid 42826] [client 20.251.112.6:4664] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 02:36:36.032892 2026] [proxy_fcgi:error] [pid 42792:tid 42822] [client 20.251.112.6:4664] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 02:36:37.501151 2026] [:error] [pid 42792:tid 42846] [client 20.251.112.6:4664] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/pinfo.php"] [unique_id "aeu4NdNi9qR4GtafpfHzFwAAAhg"]
[Sat Apr 25 02:36:38.133512 2026] [:error] [pid 42791:tid 42812] [client 20.251.112.6:49725] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/pinfo.php"] [unique_id "aeu4NrKmN9doraCEWKUC9AAAAdE"]
[Sat Apr 25 02:36:38.666123 2026] [:error] [pid 14989:tid 15007] [client 20.251.112.6:33000] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/pinfo.php"] [unique_id "aeu4NnhRYjsAsZTO4EPHMgAAABA"]
[Sat Apr 25 02:36:39.310527 2026] [:error] [pid 14989:tid 14995] [client 20.251.112.6:37720] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/pinfo.php"] [unique_id "aeu4N3hRYjsAsZTO4EPHNgAAAAQ"]
[Sat Apr 25 02:36:39.902849 2026] [:error] [pid 14989:tid 15006] [client 20.251.112.6:49690] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/litespeed.php"] [unique_id "aeu4N3hRYjsAsZTO4EPHOQAAAA8"]
[Sat Apr 25 02:36:40.462637 2026] [:error] [pid 42852:tid 42861] [client 20.251.112.6:4667] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/litespeed.php"] [unique_id "aeu4ODMEwxhhak_EhMK2LgAAAkY"]
[Sat Apr 25 02:36:41.010129 2026] [:error] [pid 42852:tid 42871] [client 20.251.112.6:48107] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/litespeed.php"] [unique_id "aeu4OTMEwxhhak_EhMK2LwAAAlA"]
[Sat Apr 25 02:36:41.573459 2026] [:error] [pid 14989:tid 14995] [client 20.251.112.6:37709] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/litespeed.php"] [unique_id "aeu4OXhRYjsAsZTO4EPHPAAAAAQ"]
[Sat Apr 25 02:36:42.283030 2026] [:error] [pid 42852:tid 42872] [client 20.251.112.6:38109] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/environments.php"] [unique_id "aeu4OjMEwxhhak_EhMK2MwAAAlE"]
[Sat Apr 25 02:36:43.041343 2026] [:error] [pid 42852:tid 42857] [client 20.251.112.6:4670] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/environments.php"] [unique_id "aeu4OzMEwxhhak_EhMK2NQAAAkI"]
[Sat Apr 25 02:36:43.749282 2026] [:error] [pid 42792:tid 42838] [client 20.251.112.6:45599] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/environments.php"] [unique_id "aeu4O9Ni9qR4GtafpfHzHQAAAhA"]
[Sat Apr 25 02:36:44.409765 2026] [:error] [pid 42852:tid 42867] [client 20.251.112.6:4660] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/environments.php"] [unique_id "aeu4PDMEwxhhak_EhMK2OAAAAkw"]
[Sat Apr 25 02:36:45.186599 2026] [:error] [pid 42852:tid 42868] [client 20.251.112.6:38127] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/raf.php"] [unique_id "aeu4PTMEwxhhak_EhMK2OgAAAk0"]
[Sat Apr 25 02:36:46.098688 2026] [:error] [pid 14989:tid 15014] [client 20.251.112.6:41792] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/raf.php"] [unique_id "aeu4PnhRYjsAsZTO4EPHSwAAABc"]
[Sat Apr 25 02:36:46.720173 2026] [:error] [pid 42792:tid 42827] [client 20.251.112.6:49673] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/raf.php"] [unique_id "aeu4PtNi9qR4GtafpfHzIAAAAgU"]
[Sat Apr 25 02:36:47.310151 2026] [:error] [pid 42792:tid 42846] [client 20.251.112.6:4191] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/raf.php"] [unique_id "aeu4P9Ni9qR4GtafpfHzIwAAAhg"]
[Sat Apr 25 02:36:47.948993 2026] [:error] [pid 42791:tid 42796] [client 20.251.112.6:48121] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ayk.php"] [unique_id "aeu4P7KmN9doraCEWKUC-QAAAcE"]
[Sat Apr 25 02:36:48.533762 2026] [:error] [pid 42852:tid 42866] [client 20.251.112.6:49703] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ayk.php"] [unique_id "aeu4QDMEwxhhak_EhMK2QQAAAks"]
[Sat Apr 25 02:36:49.117160 2026] [:error] [pid 42791:tid 42800] [client 20.251.112.6:41796] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ayk.php"] [unique_id "aeu4QbKmN9doraCEWKUDAgAAAcU"]
[Sat Apr 25 02:36:49.683901 2026] [:error] [pid 14989:tid 15003] [client 20.251.112.6:4204] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ayk.php"] [unique_id "aeu4QXhRYjsAsZTO4EPHUwAAAAw"]
[Sat Apr 25 02:36:50.283335 2026] [:error] [pid 14989:tid 15008] [client 20.251.112.6:41835] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/infos.php"] [unique_id "aeu4QnhRYjsAsZTO4EPHWAAAABE"]
[Sat Apr 25 02:36:50.997464 2026] [:error] [pid 14989:tid 15013] [client 20.251.112.6:4620] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/infos.php"] [unique_id "aeu4QnhRYjsAsZTO4EPHXAAAABY"]
[Sat Apr 25 02:36:51.558651 2026] [:error] [pid 14989:tid 15004] [client 20.251.112.6:4201] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/infos.php"] [unique_id "aeu4Q3hRYjsAsZTO4EPHYAAAAA0"]
[Sat Apr 25 02:36:52.184502 2026] [:error] [pid 14989:tid 15006] [client 20.251.112.6:32979] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/infos.php"] [unique_id "aeu4RHhRYjsAsZTO4EPHZQAAAA8"]
[Sat Apr 25 02:36:52.773914 2026] [:error] [pid 42792:tid 42839] [client 20.251.112.6:4625] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aws.php"] [unique_id "aeu4RNNi9qR4GtafpfHzJQAAAhE"]
[Sat Apr 25 02:36:53.319975 2026] [:error] [pid 42792:tid 42832] [client 20.251.112.6:43814] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aws.php"] [unique_id "aeu4RdNi9qR4GtafpfHzJwAAAgo"]
[Sat Apr 25 02:36:53.852198 2026] [:error] [pid 42792:tid 42828] [client 20.251.112.6:4679] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aws.php"] [unique_id "aeu4RdNi9qR4GtafpfHzKQAAAgY"]
[Sat Apr 25 02:36:54.398107 2026] [:error] [pid 42852:tid 42862] [client 20.251.112.6:42316] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aws.php"] [unique_id "aeu4RjMEwxhhak_EhMK2UgAAAkc"]
[Sat Apr 25 02:36:54.947757 2026] [:error] [pid 42852:tid 42864] [client 20.251.112.6:37403] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/embed.php"] [unique_id "aeu4RjMEwxhhak_EhMK2VQAAAkk"]
[Sat Apr 25 02:36:55.473315 2026] [:error] [pid 42792:tid 42833] [client 20.251.112.6:38113] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/embed.php"] [unique_id "aeu4R9Ni9qR4GtafpfHzKgAAAgs"]
[Sat Apr 25 02:36:56.004519 2026] [:error] [pid 42792:tid 42834] [client 20.251.112.6:32975] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/embed.php"] [unique_id "aeu4SNNi9qR4GtafpfHzLAAAAgw"]
[Sat Apr 25 02:36:56.527625 2026] [:error] [pid 42852:tid 42863] [client 20.251.112.6:37702] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/embed.php"] [unique_id "aeu4SDMEwxhhak_EhMK2XQAAAkg"]
[Sat Apr 25 02:36:57.067444 2026] [:error] [pid 42792:tid 42838] [client 20.251.112.6:37698] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/stat.php"] [unique_id "aeu4SdNi9qR4GtafpfHzMAAAAhA"]
[Sat Apr 25 02:36:57.590440 2026] [:error] [pid 42792:tid 42823] [client 20.251.112.6:43091] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/stat.php"] [unique_id "aeu4SdNi9qR4GtafpfHzMwAAAgE"]
[Sat Apr 25 02:36:58.132088 2026] [:error] [pid 42852:tid 42862] [client 20.251.112.6:42306] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/stat.php"] [unique_id "aeu4SjMEwxhhak_EhMK2ZAAAAkc"]
[Sat Apr 25 02:36:58.659425 2026] [:error] [pid 42852:tid 42879] [client 20.251.112.6:4200] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/stat.php"] [unique_id "aeu4SjMEwxhhak_EhMK2ZwAAAlg"]
[Sat Apr 25 02:36:59.216397 2026] [:error] [pid 42852:tid 42871] [client 20.251.112.6:37752] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/setup.php"] [unique_id "aeu4SzMEwxhhak_EhMK2agAAAlA"]
[Sat Apr 25 02:36:59.741691 2026] [:error] [pid 42852:tid 42867] [client 20.251.112.6:4676] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/setup.php"] [unique_id "aeu4SzMEwxhhak_EhMK2bgAAAkw"]
[Sat Apr 25 02:37:00.313537 2026] [:error] [pid 42852:tid 42860] [client 20.251.112.6:36571] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/setup.php"] [unique_id "aeu4TDMEwxhhak_EhMK2cQAAAkU"]
[Sat Apr 25 02:37:00.868922 2026] [:error] [pid 42852:tid 42859] [client 20.251.112.6:42363] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/setup.php"] [unique_id "aeu4TDMEwxhhak_EhMK2dwAAAkQ"]
[Sat Apr 25 02:37:01.421632 2026] [:error] [pid 42852:tid 42865] [client 20.251.112.6:63067] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/development.php"] [unique_id "aeu4TTMEwxhhak_EhMK2egAAAko"]
[Sat Apr 25 02:37:01.942995 2026] [:error] [pid 42792:tid 42842] [client 20.251.112.6:33006] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/development.php"] [unique_id "aeu4TdNi9qR4GtafpfHzOQAAAhQ"]
[Sat Apr 25 02:37:02.488004 2026] [:error] [pid 42755:tid 42772] [client 20.251.112.6:38105] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/development.php"] [unique_id "aeu4TtH7__k0j6aa600XpwAAAI8"]
[Sat Apr 25 02:37:03.017103 2026] [:error] [pid 14989:tid 15005] [client 20.251.112.6:4181] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/development.php"] [unique_id "aeu4T3hRYjsAsZTO4EPHbAAAAA4"]
[Sat Apr 25 02:37:03.633042 2026] [:error] [pid 42755:tid 42758] [client 20.251.112.6:41840] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/environment.php"] [unique_id "aeu4T9H7__k0j6aa600XrAAAAIE"]
[Sat Apr 25 02:37:04.151427 2026] [:error] [pid 42792:tid 42845] [client 20.251.112.6:49686] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/environment.php"] [unique_id "aeu4UNNi9qR4GtafpfHzRwAAAhc"]
[Sat Apr 25 02:37:04.672829 2026] [:error] [pid 14989:tid 14992] [client 20.251.112.6:63089] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/environment.php"] [unique_id "aeu4UHhRYjsAsZTO4EPHcwAAAAE"]
[Sat Apr 25 02:37:05.191824 2026] [:error] [pid 42791:tid 42804] [client 20.251.112.6:43088] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/environment.php"] [unique_id "aeu4UbKmN9doraCEWKUDGQAAAck"]
[Sat Apr 25 02:37:05.878045 2026] [:error] [pid 14989:tid 14995] [client 20.251.112.6:42334] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/db_config.php"] [unique_id "aeu4UXhRYjsAsZTO4EPHeQAAAAQ"]
[Sat Apr 25 02:37:06.404253 2026] [:error] [pid 42791:tid 42802] [client 20.251.112.6:4658] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/db_config.php"] [unique_id "aeu4UrKmN9doraCEWKUDGwAAAcc"]
[Sat Apr 25 02:37:06.930662 2026] [:error] [pid 42755:tid 42781] [client 20.251.112.6:63091] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/db_config.php"] [unique_id "aeu4UtH7__k0j6aa600XtQAAAJg"]
[Sat Apr 25 02:37:07.489322 2026] [:error] [pid 42791:tid 42799] [client 20.251.112.6:42319] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/db_config.php"] [unique_id "aeu4U7KmN9doraCEWKUDHwAAAcQ"]
[Sat Apr 25 02:37:08.039165 2026] [:error] [pid 14989:tid 15013] [client 20.251.112.6:41834] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Get_Site_Info.php"] [unique_id "aeu4VHhRYjsAsZTO4EPHhQAAABY"]
[Sat Apr 25 02:37:08.677164 2026] [:error] [pid 42792:tid 42835] [client 20.251.112.6:42357] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Get_Site_Info.php"] [unique_id "aeu4VNNi9qR4GtafpfHzTwAAAg0"]
[Sat Apr 25 02:37:09.261787 2026] [:error] [pid 42755:tid 42768] [client 20.251.112.6:38118] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Get_Site_Info.php"] [unique_id "aeu4VdH7__k0j6aa600XuAAAAIs"]
[Sat Apr 25 02:37:09.849712 2026] [:error] [pid 14989:tid 15012] [client 20.251.112.6:4198] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Get_Site_Info.php"] [unique_id "aeu4VXhRYjsAsZTO4EPHkQAAABU"]
[Sat Apr 25 02:37:10.453676 2026] [:error] [pid 14989:tid 15004] [client 20.251.112.6:4691] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/deploy.php"] [unique_id "aeu4VnhRYjsAsZTO4EPHlQAAAA0"]
[Sat Apr 25 02:37:10.983979 2026] [:error] [pid 42755:tid 42760] [client 20.251.112.6:43124] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/deploy.php"] [unique_id "aeu4VtH7__k0j6aa600XuQAAAIM"]
[Sat Apr 25 02:37:11.513973 2026] [:error] [pid 42792:tid 42837] [client 20.251.112.6:4681] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/deploy.php"] [unique_id "aeu4V9Ni9qR4GtafpfHzVQAAAg8"]
[Sat Apr 25 02:37:12.158795 2026] [:error] [pid 42852:tid 42859] [client 20.251.112.6:48066] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/deploy.php"] [unique_id "aeu4WDMEwxhhak_EhMK2gAAAAkQ"]
[Sat Apr 25 02:37:12.761342 2026] [:error] [pid 42852:tid 42874] [client 20.251.112.6:4195] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/apis.php"] [unique_id "aeu4WDMEwxhhak_EhMK2hAAAAlM"]
[Sat Apr 25 02:37:13.340329 2026] [:error] [pid 14989:tid 15000] [client 20.251.112.6:4690] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/apis.php"] [unique_id "aeu4WXhRYjsAsZTO4EPHmgAAAAk"]
[Sat Apr 25 02:37:14.452093 2026] [:error] [pid 14989:tid 15011] [client 20.251.112.6:43084] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/apis.php"] [unique_id "aeu4WnhRYjsAsZTO4EPHowAAABQ"]
[Sat Apr 25 02:37:15.175084 2026] [:error] [pid 42755:tid 42769] [client 20.251.112.6:4183] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/apis.php"] [unique_id "aeu4W9H7__k0j6aa600XwgAAAIw"]
[Sat Apr 25 02:37:15.810750 2026] [:error] [pid 42755:tid 42764] [client 20.251.112.6:4196] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/asdf.php"] [unique_id "aeu4W9H7__k0j6aa600XyAAAAIc"]
[Sat Apr 25 02:37:16.420472 2026] [:error] [pid 14989:tid 15014] [client 20.251.112.6:43502] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/asdf.php"] [unique_id "aeu4XHhRYjsAsZTO4EPHpQAAABc"]
[Sat Apr 25 02:37:17.262139 2026] [:error] [pid 14989:tid 15008] [client 20.251.112.6:4644] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/asdf.php"] [unique_id "aeu4XXhRYjsAsZTO4EPHqQAAABE"]
[Sat Apr 25 02:37:17.886632 2026] [:error] [pid 42792:tid 42835] [client 20.251.112.6:4688] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/asdf.php"] [unique_id "aeu4XdNi9qR4GtafpfHzWwAAAg0"]
[Sat Apr 25 02:37:18.467352 2026] [:error] [pid 42755:tid 42771] [client 20.251.112.6:37703] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/1100.php"] [unique_id "aeu4XtH7__k0j6aa600X1QAAAI4"]
[Sat Apr 25 02:37:18.999355 2026] [:error] [pid 42791:tid 42802] [client 20.251.112.6:33008] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/1100.php"] [unique_id "aeu4XrKmN9doraCEWKUDJQAAAcc"]
[Sat Apr 25 02:37:19.613600 2026] [:error] [pid 42792:tid 42841] [client 20.251.112.6:41820] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/1100.php"] [unique_id "aeu4X9Ni9qR4GtafpfHzXQAAAhM"]
[Sat Apr 25 02:37:20.148599 2026] [:error] [pid 42792:tid 42823] [client 20.251.112.6:63050] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/1100.php"] [unique_id "aeu4YNNi9qR4GtafpfHzYAAAAgE"]
[Sat Apr 25 02:37:20.682086 2026] [:error] [pid 42852:tid 42878] [client 20.251.112.6:48124] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/._info.php"] [unique_id "aeu4YDMEwxhhak_EhMK2igAAAlc"]
[Sat Apr 25 02:37:21.237414 2026] [:error] [pid 42792:tid 42837] [client 20.251.112.6:4637] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/._info.php"] [unique_id "aeu4YdNi9qR4GtafpfHzYgAAAg8"]
[Sat Apr 25 02:37:21.773657 2026] [:error] [pid 42792:tid 42827] [client 20.251.112.6:43076] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/._info.php"] [unique_id "aeu4YdNi9qR4GtafpfHzYwAAAgU"]
[Sat Apr 25 02:37:22.293869 2026] [:error] [pid 42792:tid 42842] [client 20.251.112.6:4682] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/._info.php"] [unique_id "aeu4YtNi9qR4GtafpfHzZgAAAhQ"]
[Sat Apr 25 02:37:22.892941 2026] [:error] [pid 42792:tid 42844] [client 20.251.112.6:49680] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/php_flag.php"] [unique_id "aeu4YtNi9qR4GtafpfHzZwAAAhY"]
[Sat Apr 25 02:37:23.411620 2026] [:error] [pid 42791:tid 42818] [client 20.251.112.6:42317] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/php_flag.php"] [unique_id "aeu4Y7KmN9doraCEWKUDKwAAAdc"]
[Sat Apr 25 02:37:23.953451 2026] [:error] [pid 42791:tid 42810] [client 20.251.112.6:4833] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/php_flag.php"] [unique_id "aeu4Y7KmN9doraCEWKUDLgAAAc8"]
[Sat Apr 25 02:37:24.492331 2026] [:error] [pid 42791:tid 42807] [client 20.251.112.6:63098] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/php_flag.php"] [unique_id "aeu4ZLKmN9doraCEWKUDMAAAAcw"]
[Sat Apr 25 02:37:25.046603 2026] [:error] [pid 42791:tid 42808] [client 20.251.112.6:49713] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/test_info4.php"] [unique_id "aeu4ZbKmN9doraCEWKUDMwAAAc0"]
[Sat Apr 25 02:37:25.592858 2026] [:error] [pid 42791:tid 42795] [client 20.251.112.6:4718] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/test_info4.php"] [unique_id "aeu4ZbKmN9doraCEWKUDNgAAAcA"]
[Sat Apr 25 02:37:26.133097 2026] [:error] [pid 42792:tid 42843] [client 20.251.112.6:4167] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/test_info4.php"] [unique_id "aeu4ZtNi9qR4GtafpfHzcAAAAhU"]
[Sat Apr 25 02:37:26.671321 2026] [:error] [pid 42792:tid 42827] [client 20.251.112.6:33007] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/test_info4.php"] [unique_id "aeu4ZtNi9qR4GtafpfHzcgAAAgU"]
[Sat Apr 25 02:37:27.201277 2026] [:error] [pid 42791:tid 42811] [client 20.251.112.6:38137] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/test_phpinfo2.php"] [unique_id "aeu4Z7KmN9doraCEWKUDOQAAAdA"]
[Sat Apr 25 02:37:27.719699 2026] [:error] [pid 42755:tid 42769] [client 20.251.112.6:41808] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/test_phpinfo2.php"] [unique_id "aeu4Z9H7__k0j6aa600X6AAAAIw"]
[Sat Apr 25 02:37:28.300676 2026] [:error] [pid 42791:tid 42814] [client 20.251.112.6:32983] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/test_phpinfo2.php"] [unique_id "aeu4aLKmN9doraCEWKUDOgAAAdM"]
[Sat Apr 25 02:37:28.847101 2026] [:error] [pid 42791:tid 42809] [client 20.251.112.6:32999] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/test_phpinfo2.php"] [unique_id "aeu4aLKmN9doraCEWKUDOwAAAc4"]
[Sat Apr 25 02:37:29.432724 2026] [:error] [pid 42791:tid 42803] [client 20.251.112.6:37728] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/HsFPDcD.php"] [unique_id "aeu4abKmN9doraCEWKUDPAAAAcg"]
[Sat Apr 25 02:37:29.987653 2026] [:error] [pid 42792:tid 42839] [client 20.251.112.6:42364] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/HsFPDcD.php"] [unique_id "aeu4adNi9qR4GtafpfHzfQAAAhE"]
[Sat Apr 25 02:37:30.522478 2026] [:error] [pid 42755:tid 42773] [client 20.251.112.6:41813] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/HsFPDcD.php"] [unique_id "aeu4atH7__k0j6aa600X-gAAAJA"]
[Sat Apr 25 02:37:31.043030 2026] [:error] [pid 42792:tid 42826] [client 20.251.112.6:4621] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/HsFPDcD.php"] [unique_id "aeu4a9Ni9qR4GtafpfHzgwAAAgQ"]
[Sat Apr 25 02:37:31.659615 2026] [:error] [pid 42792:tid 42829] [client 20.251.112.6:43073] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/config.inc.php"] [unique_id "aeu4a9Ni9qR4GtafpfHzhQAAAgc"]
[Sat Apr 25 02:37:32.221816 2026] [:error] [pid 14989:tid 14998] [client 20.251.112.6:63045] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/config.inc.php"] [unique_id "aeu4bHhRYjsAsZTO4EPHsAAAAAc"]
[Sat Apr 25 02:37:32.817792 2026] [:error] [pid 42852:tid 42863] [client 20.251.112.6:63064] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/config.inc.php"] [unique_id "aeu4bDMEwxhhak_EhMK2kQAAAkg"]
[Sat Apr 25 02:37:33.432673 2026] [:error] [pid 42792:tid 42824] [client 20.251.112.6:4663] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/config.inc.php"] [unique_id "aeu4bdNi9qR4GtafpfHzigAAAgI"]
[Sat Apr 25 02:37:33.998914 2026] [:error] [pid 42792:tid 42833] [client 20.251.112.6:48069] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/phpversion.php"] [unique_id "aeu4bdNi9qR4GtafpfHzjQAAAgs"]
[Sat Apr 25 02:37:34.736899 2026] [:error] [pid 42792:tid 42825] [client 20.251.112.6:42367] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/phpversion.php"] [unique_id "aeu4btNi9qR4GtafpfHzkAAAAgM"]
[Sat Apr 25 02:37:35.338064 2026] [:error] [pid 42792:tid 42823] [client 20.251.112.6:32992] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/phpversion.php"] [unique_id "aeu4b9Ni9qR4GtafpfHzkgAAAgE"]
[Sat Apr 25 02:37:36.156309 2026] [proxy_fcgi:error] [pid 42792:tid 42845] [client 20.251.112.6:38133] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 02:37:36.418859 2026] [proxy_fcgi:error] [pid 42792:tid 42837] [client 20.251.112.6:38133] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 02:37:36.679565 2026] [proxy_fcgi:error] [pid 42792:tid 42831] [client 20.251.112.6:38133] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 02:37:36.940818 2026] [proxy_fcgi:error] [pid 42792:tid 42832] [client 20.251.112.6:38133] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 02:37:37.211160 2026] [proxy_fcgi:error] [pid 42792:tid 42830] [client 20.251.112.6:38133] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 02:37:37.473180 2026] [proxy_fcgi:error] [pid 42792:tid 42833] [client 20.251.112.6:38133] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 02:37:37.736215 2026] [proxy_fcgi:error] [pid 42792:tid 42838] [client 20.251.112.6:38133] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 02:37:37.997849 2026] [proxy_fcgi:error] [pid 42792:tid 42843] [client 20.251.112.6:38133] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 02:37:38.261212 2026] [proxy_fcgi:error] [pid 42792:tid 42835] [client 20.251.112.6:38133] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 02:37:38.554200 2026] [proxy_fcgi:error] [pid 42792:tid 42826] [client 20.251.112.6:38133] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 02:37:38.816654 2026] [proxy_fcgi:error] [pid 42792:tid 42827] [client 20.251.112.6:38133] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 02:37:39.074465 2026] [:error] [pid 42792:tid 42844] [client 20.251.112.6:38133] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/infoinfo.php"] [unique_id "aeu4c9Ni9qR4GtafpfHzpAAAAhY"]
[Sat Apr 25 02:37:39.604146 2026] [:error] [pid 42792:tid 42837] [client 20.251.112.6:45595] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/infoinfo.php"] [unique_id "aeu4c9Ni9qR4GtafpfHzpQAAAg8"]
[Sat Apr 25 02:37:40.142408 2026] [:error] [pid 42791:tid 42805] [client 20.251.112.6:32993] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/infoinfo.php"] [unique_id "aeu4dLKmN9doraCEWKUDQwAAAco"]
[Sat Apr 25 02:37:40.678300 2026] [:error] [pid 14989:tid 14993] [client 20.251.112.6:38080] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/infoinfo.php"] [unique_id "aeu4dHhRYjsAsZTO4EPHvgAAAAI"]
[Sat Apr 25 04:52:27.451147 2026] [proxy_fcgi:error] [pid 46083:tid 46092] [client 20.203.128.117:4504] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 04:52:27.727836 2026] [proxy_fcgi:error] [pid 46083:tid 46087] [client 20.203.128.117:4504] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 04:52:28.001839 2026] [proxy_fcgi:error] [pid 46083:tid 46090] [client 20.203.128.117:4504] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 04:52:28.279093 2026] [proxy_fcgi:error] [pid 46083:tid 46097] [client 20.203.128.117:4504] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 04:52:28.557138 2026] [proxy_fcgi:error] [pid 46083:tid 46096] [client 20.203.128.117:4504] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 04:52:28.835075 2026] [proxy_fcgi:error] [pid 46083:tid 46104] [client 20.203.128.117:4504] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 04:52:29.387975 2026] [proxy_fcgi:error] [pid 46083:tid 46101] [client 20.203.128.117:4504] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 04:52:29.684541 2026] [proxy_fcgi:error] [pid 46083:tid 46110] [client 20.203.128.117:4504] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 04:52:29.965592 2026] [proxy_fcgi:error] [pid 46083:tid 46103] [client 20.203.128.117:4504] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 04:52:30.240622 2026] [:error] [pid 46083:tid 46091] [client 20.203.128.117:4504] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/166.php"] [unique_id "aevYDjxw_Zq74vWdjmkH7QAAAQQ"]
[Sat Apr 25 04:52:31.302343 2026] [:error] [pid 46083:tid 46096] [client 20.203.128.117:32381] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/166.php"] [unique_id "aevYDzxw_Zq74vWdjmkH-AAAAQk"]
[Sat Apr 25 04:52:32.552154 2026] [:error] [pid 44319:tid 44341] [client 20.203.128.117:55457] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/166.php"] [unique_id "aevYEMzJPAVLUb2pWtJB0wAAAAw"]
[Sat Apr 25 04:52:33.114624 2026] [:error] [pid 44321:tid 44398] [client 20.203.128.117:55443] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/166.php"] [unique_id "aevYEY1b5lV-asWa_Y4T4AAAAI8"]
[Sat Apr 25 04:52:34.309035 2026] [:error] [pid 46083:tid 46098] [client 20.203.128.117:28934] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/term.php"] [unique_id "aevYEjxw_Zq74vWdjmkICAAAAQs"]
[Sat Apr 25 04:52:35.606839 2026] [:error] [pid 44425:tid 44448] [client 20.203.128.117:17378] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/term.php"] [unique_id "aevYEyUl-VlItvY2tR_m7wAAANU"]
[Sat Apr 25 04:52:36.616599 2026] [:error] [pid 44425:tid 44430] [client 20.203.128.117:19791] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/term.php"] [unique_id "aevYFCUl-VlItvY2tR_m8QAAAMM"]
[Sat Apr 25 04:52:37.598607 2026] [:error] [pid 46083:tid 46098] [client 20.203.128.117:32340] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/term.php"] [unique_id "aevYFTxw_Zq74vWdjmkIFQAAAQs"]
[Sat Apr 25 04:52:38.989297 2026] [:error] [pid 44319:tid 44337] [client 20.203.128.117:4500] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/666.php"] [unique_id "aevYFszJPAVLUb2pWtJB4wAAAAg"]
[Sat Apr 25 04:52:39.883334 2026] [:error] [pid 44320:tid 44371] [client 20.203.128.117:28985] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/666.php"] [unique_id "aevYFzmFqSpku_dij8hi8wAAAE8"]
[Sat Apr 25 04:52:40.590026 2026] [:error] [pid 46083:tid 46090] [client 20.203.128.117:32341] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/666.php"] [unique_id "aevYGDxw_Zq74vWdjmkIFwAAAQM"]
[Sat Apr 25 04:52:41.332158 2026] [:error] [pid 46083:tid 46102] [client 20.203.128.117:16901] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/666.php"] [unique_id "aevYGTxw_Zq74vWdjmkIGwAAAQ8"]
[Sat Apr 25 04:52:41.958595 2026] [:error] [pid 46083:tid 46098] [client 20.203.128.117:21946] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tt.php"] [unique_id "aevYGTxw_Zq74vWdjmkIHQAAAQs"]
[Sat Apr 25 04:52:42.774619 2026] [:error] [pid 44321:tid 44401] [client 20.203.128.117:16940] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tt.php"] [unique_id "aevYGo1b5lV-asWa_Y4T9wAAAJI"]
[Sat Apr 25 04:52:44.080387 2026] [:error] [pid 44425:tid 44427] [client 20.203.128.117:4493] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tt.php"] [unique_id "aevYHCUl-VlItvY2tR_nAQAAAMA"]
[Sat Apr 25 04:52:45.262887 2026] [:error] [pid 44321:tid 44385] [client 20.203.128.117:26606] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tt.php"] [unique_id "aevYHY1b5lV-asWa_Y4T_wAAAII"]
[Sat Apr 25 04:52:46.033661 2026] [:error] [pid 44320:tid 44360] [client 20.203.128.117:21893] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sid3.php"] [unique_id "aevYHjmFqSpku_dij8hi_wAAAEQ"]
[Sat Apr 25 04:52:46.978089 2026] [:error] [pid 46083:tid 46093] [client 20.203.128.117:17390] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sid3.php"] [unique_id "aevYHjxw_Zq74vWdjmkIKAAAAQY"]
[Sat Apr 25 04:52:48.026799 2026] [:error] [pid 46083:tid 46103] [client 20.203.128.117:16920] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sid3.php"] [unique_id "aevYIDxw_Zq74vWdjmkILQAAARA"]
[Sat Apr 25 04:52:49.167665 2026] [:error] [pid 46083:tid 46090] [client 20.203.128.117:55441] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sid3.php"] [unique_id "aevYITxw_Zq74vWdjmkINAAAAQM"]
[Sat Apr 25 04:52:50.155696 2026] [:error] [pid 46083:tid 46108] [client 20.203.128.117:32346] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/66.php"] [unique_id "aevYIjxw_Zq74vWdjmkINgAAARQ"]
[Sat Apr 25 04:52:50.848421 2026] [:error] [pid 46083:tid 46107] [client 20.203.128.117:55449] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/66.php"] [unique_id "aevYIjxw_Zq74vWdjmkINwAAARM"]
[Sat Apr 25 04:52:51.649086 2026] [:error] [pid 46083:tid 46109] [client 20.203.128.117:17402] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/66.php"] [unique_id "aevYIzxw_Zq74vWdjmkIOgAAARU"]
[Sat Apr 25 04:52:52.847316 2026] [:error] [pid 46083:tid 46090] [client 20.203.128.117:16909] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/66.php"] [unique_id "aevYJDxw_Zq74vWdjmkIPgAAAQM"]
[Sat Apr 25 04:52:53.831522 2026] [:error] [pid 46083:tid 46098] [client 20.203.128.117:55433] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-the.php"] [unique_id "aevYJTxw_Zq74vWdjmkIRQAAAQs"]
[Sat Apr 25 04:52:54.843941 2026] [:error] [pid 44320:tid 44361] [client 20.203.128.117:55486] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-the.php"] [unique_id "aevYJjmFqSpku_dij8hjCQAAAEU"]
[Sat Apr 25 04:52:55.457180 2026] [:error] [pid 44425:tid 44437] [client 20.203.128.117:21921] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-the.php"] [unique_id "aevYJyUl-VlItvY2tR_nBAAAAMo"]
[Sat Apr 25 04:52:57.043414 2026] [:error] [pid 46083:tid 46101] [client 20.203.128.117:26171] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-the.php"] [unique_id "aevYKTxw_Zq74vWdjmkIUQAAAQ4"]
[Sat Apr 25 04:52:58.356179 2026] [:error] [pid 46083:tid 46112] [client 20.203.128.117:32747] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jga.php"] [unique_id "aevYKjxw_Zq74vWdjmkIVQAAARg"]
[Sat Apr 25 04:53:00.311004 2026] [:error] [pid 44425:tid 44433] [client 20.203.128.117:17407] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jga.php"] [unique_id "aevYLCUl-VlItvY2tR_nEgAAAMY"]
[Sat Apr 25 04:53:01.913550 2026] [:error] [pid 44321:tid 44406] [client 20.203.128.117:19790] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jga.php"] [unique_id "aevYLY1b5lV-asWa_Y4UKgAAAJc"]
[Sat Apr 25 04:53:03.338895 2026] [:error] [pid 44319:tid 44332] [client 20.203.128.117:55430] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jga.php"] [unique_id "aevYL8zJPAVLUb2pWtJB-QAAAAM"]
[Sat Apr 25 04:53:05.917803 2026] [:error] [pid 44425:tid 44446] [client 20.203.128.117:4491] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-blog-header.php"] [unique_id "aevYMSUl-VlItvY2tR_nHgAAANM"]
[Sat Apr 25 04:53:08.306274 2026] [:error] [pid 44425:tid 44440] [client 20.203.128.117:4511] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-blog-header.php"] [unique_id "aevYNCUl-VlItvY2tR_nIQAAAM0"]
[Sat Apr 25 04:53:10.401885 2026] [:error] [pid 44320:tid 44378] [client 20.203.128.117:28940] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-blog-header.php"] [unique_id "aevYNjmFqSpku_dij8hjJQAAAFY"]
[Sat Apr 25 04:53:11.751523 2026] [:error] [pid 44425:tid 44437] [client 20.203.128.117:4520] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-blog-header.php"] [unique_id "aevYNyUl-VlItvY2tR_nJAAAAMo"]
[Sat Apr 25 04:53:14.128946 2026] [:error] [pid 44319:tid 44342] [client 20.203.128.117:45305] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bmi.php"] [unique_id "aevYOszJPAVLUb2pWtJCHQAAAA0"]
[Sat Apr 25 04:53:15.796349 2026] [:error] [pid 46083:tid 46110] [client 20.203.128.117:29185] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bmi.php"] [unique_id "aevYOzxw_Zq74vWdjmkIcwAAARY"]
[Sat Apr 25 04:53:17.080230 2026] [:error] [pid 46083:tid 46096] [client 20.203.128.117:32023] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bmi.php"] [unique_id "aevYPTxw_Zq74vWdjmkIfQAAAQk"]
[Sat Apr 25 04:53:18.592349 2026] [:error] [pid 44321:tid 44388] [client 20.203.128.117:23466] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bmi.php"] [unique_id "aevYPo1b5lV-asWa_Y4UPwAAAIU"]
[Sat Apr 25 04:53:19.484119 2026] [:error] [pid 44425:tid 44450] [client 20.203.128.117:32054] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/byypas.php"] [unique_id "aevYPyUl-VlItvY2tR_nOwAAANc"]
[Sat Apr 25 04:53:20.901723 2026] [:error] [pid 46083:tid 46108] [client 20.203.128.117:24645] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/byypas.php"] [unique_id "aevYQDxw_Zq74vWdjmkIhgAAARQ"]
[Sat Apr 25 04:53:21.735190 2026] [:error] [pid 46083:tid 46103] [client 20.203.128.117:64554] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/byypas.php"] [unique_id "aevYQTxw_Zq74vWdjmkIiQAAARA"]
[Sat Apr 25 04:53:22.332994 2026] [:error] [pid 44321:tid 44402] [client 20.203.128.117:27934] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/byypas.php"] [unique_id "aevYQo1b5lV-asWa_Y4URgAAAJM"]
[Sat Apr 25 04:53:23.012775 2026] [:error] [pid 46083:tid 46091] [client 20.203.128.117:26978] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/radio.php"] [unique_id "aevYQzxw_Zq74vWdjmkIjgAAAQQ"]
[Sat Apr 25 04:53:23.870645 2026] [:error] [pid 46083:tid 46093] [client 20.203.128.117:29148] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/radio.php"] [unique_id "aevYQzxw_Zq74vWdjmkIjwAAAQY"]
[Sat Apr 25 04:53:25.018550 2026] [:error] [pid 44425:tid 44446] [client 20.203.128.117:21245] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/radio.php"] [unique_id "aevYRSUl-VlItvY2tR_nVAAAANM"]
[Sat Apr 25 04:53:25.690503 2026] [:error] [pid 46083:tid 46094] [client 20.203.128.117:58412] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/radio.php"] [unique_id "aevYRTxw_Zq74vWdjmkImQAAAQc"]
[Sat Apr 25 04:53:26.270488 2026] [:error] [pid 46083:tid 46112] [client 20.203.128.117:28899] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-png.php"] [unique_id "aevYRjxw_Zq74vWdjmkIpQAAARg"]
[Sat Apr 25 04:53:27.154568 2026] [:error] [pid 44319:tid 44338] [client 20.203.128.117:29139] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-png.php"] [unique_id "aevYR8zJPAVLUb2pWtJCSAAAAAk"]
[Sat Apr 25 04:53:29.507197 2026] [proxy_fcgi:error] [pid 44319:tid 44347] [client 20.203.128.117:27942] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 04:53:29.806327 2026] [proxy_fcgi:error] [pid 44319:tid 44343] [client 20.203.128.117:27942] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 04:53:30.077371 2026] [proxy_fcgi:error] [pid 44319:tid 44340] [client 20.203.128.117:27942] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 04:53:30.617528 2026] [proxy_fcgi:error] [pid 44319:tid 44348] [client 20.203.128.117:27942] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 04:53:30.888393 2026] [proxy_fcgi:error] [pid 44319:tid 44330] [client 20.203.128.117:27942] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 04:53:31.242032 2026] [proxy_fcgi:error] [pid 44319:tid 44352] [client 20.203.128.117:27942] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 04:53:31.513936 2026] [proxy_fcgi:error] [pid 44319:tid 44339] [client 20.203.128.117:27942] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 04:53:32.067986 2026] [proxy_fcgi:error] [pid 44319:tid 44333] [client 20.203.128.117:27942] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 04:53:32.340927 2026] [proxy_fcgi:error] [pid 44319:tid 44350] [client 20.203.128.117:27942] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 04:53:32.607725 2026] [:error] [pid 44319:tid 44332] [client 20.203.128.117:27942] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dass.php"] [unique_id "aevYTMzJPAVLUb2pWtJCWwAAAAM"]
[Sat Apr 25 04:53:34.486430 2026] [:error] [pid 46083:tid 46107] [client 20.203.128.117:28387] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dass.php"] [unique_id "aevYTjxw_Zq74vWdjmkI0gAAARM"]
[Sat Apr 25 04:53:35.590130 2026] [:error] [pid 44320:tid 44359] [client 20.203.128.117:21134] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dass.php"] [unique_id "aevYTzmFqSpku_dij8hjRAAAAEM"]
[Sat Apr 25 04:53:37.279451 2026] [:error] [pid 44425:tid 44433] [client 20.203.128.117:58441] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dass.php"] [unique_id "aevYUSUl-VlItvY2tR_ngQAAAMY"]
[Sat Apr 25 04:53:38.139953 2026] [:error] [pid 44321:tid 44400] [client 20.203.128.117:60348] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "aevYUo1b5lV-asWa_Y4UWwAAAJE"]
[Sat Apr 25 04:53:39.375016 2026] [:error] [pid 44425:tid 44446] [client 20.203.128.117:21122] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "aevYUyUl-VlItvY2tR_niQAAANM"]
[Sat Apr 25 04:53:40.532800 2026] [:error] [pid 44425:tid 44432] [client 20.203.128.117:30488] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "aevYVCUl-VlItvY2tR_nkQAAAMU"]
[Sat Apr 25 04:53:43.058084 2026] [:error] [pid 44320:tid 44362] [client 20.203.128.117:28353] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "aevYVzmFqSpku_dij8hjSQAAAEY"]
[Sat Apr 25 04:53:44.785460 2026] [:error] [pid 44320:tid 44371] [client 20.203.128.117:63966] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ok.php"] [unique_id "aevYWDmFqSpku_dij8hjUAAAAE8"]
[Sat Apr 25 04:53:46.953462 2026] [:error] [pid 44319:tid 44330] [client 20.203.128.117:24968] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ok.php"] [unique_id "aevYWszJPAVLUb2pWtJCaAAAAAE"]
[Sat Apr 25 04:53:48.751151 2026] [:error] [pid 44320:tid 44364] [client 20.203.128.117:43503] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ok.php"] [unique_id "aevYXDmFqSpku_dij8hjWwAAAEg"]
[Sat Apr 25 04:53:52.168656 2026] [:error] [pid 44425:tid 44433] [client 20.203.128.117:21547] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ok.php"] [unique_id "aevYYCUl-VlItvY2tR_nogAAAMY"]
[Sat Apr 25 04:53:54.147403 2026] [:error] [pid 44319:tid 44350] [client 20.203.128.117:24288] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/eetu.php"] [unique_id "aevYYszJPAVLUb2pWtJCdwAAABU"]
[Sat Apr 25 04:53:55.198151 2026] [:error] [pid 46083:tid 46097] [client 20.203.128.117:25443] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/eetu.php"] [unique_id "aevYYzxw_Zq74vWdjmkJCQAAAQo"]
[Sat Apr 25 04:53:58.751194 2026] [:error] [pid 44425:tid 44438] [client 20.203.128.117:21536] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/eetu.php"] [unique_id "aevYZiUl-VlItvY2tR_nswAAAMs"]
[Sat Apr 25 04:54:00.206575 2026] [:error] [pid 44320:tid 44380] [client 20.203.128.117:25063] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/eetu.php"] [unique_id "aevYaDmFqSpku_dij8hjdAAAAFg"]
[Sat Apr 25 04:54:02.657743 2026] [:error] [pid 44425:tid 44445] [client 20.203.128.117:22295] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws66.php"] [unique_id "aevYaiUl-VlItvY2tR_nuQAAANI"]
[Sat Apr 25 04:54:03.724474 2026] [:error] [pid 44425:tid 44440] [client 20.203.128.117:22313] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws66.php"] [unique_id "aevYayUl-VlItvY2tR_nvwAAAM0"]
[Sat Apr 25 04:54:06.104577 2026] [:error] [pid 44320:tid 44376] [client 20.203.128.117:30973] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws66.php"] [unique_id "aevYbjmFqSpku_dij8hjegAAAFQ"]
[Sat Apr 25 04:54:08.916192 2026] [:error] [pid 44320:tid 44377] [client 20.203.128.117:18054] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws66.php"] [unique_id "aevYcDmFqSpku_dij8hjewAAAFU"]
[Sat Apr 25 04:54:11.216200 2026] [:error] [pid 46083:tid 46112] [client 20.203.128.117:30934] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file61.php"] [unique_id "aevYczxw_Zq74vWdjmkJNgAAARg"]
[Sat Apr 25 04:54:14.128343 2026] [:error] [pid 46083:tid 46110] [client 20.203.128.117:64584] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file61.php"] [unique_id "aevYdjxw_Zq74vWdjmkJQwAAARY"]
[Sat Apr 25 04:54:16.127983 2026] [:error] [pid 44425:tid 44435] [client 20.203.128.117:60830] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file61.php"] [unique_id "aevYeCUl-VlItvY2tR_n0AAAAMg"]
[Sat Apr 25 04:54:19.010548 2026] [:error] [pid 46083:tid 46104] [client 20.203.128.117:29897] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file61.php"] [unique_id "aevYezxw_Zq74vWdjmkJWgAAARE"]
[Sat Apr 25 04:54:23.495868 2026] [:error] [pid 44425:tid 44431] [client 20.203.128.117:4795] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/asd.php"] [unique_id "aevYfyUl-VlItvY2tR_n4AAAAMQ"]
[Sat Apr 25 04:54:25.460534 2026] [:error] [pid 44321:tid 44399] [client 20.203.128.117:5090] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/asd.php"] [unique_id "aevYgY1b5lV-asWa_Y4UlgAAAJA"]
[Sat Apr 25 04:54:26.806878 2026] [:error] [pid 44320:tid 44378] [client 20.203.128.117:24221] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/asd.php"] [unique_id "aevYgjmFqSpku_dij8hjlwAAAFY"]
[Sat Apr 25 04:54:30.715547 2026] [:error] [pid 46083:tid 46112] [client 20.203.128.117:65184] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/asd.php"] [unique_id "aevYhjxw_Zq74vWdjmkJeAAAARg"]
[Sat Apr 25 04:54:34.021284 2026] [proxy_fcgi:error] [pid 44425:tid 44442] [client 20.203.128.117:60807] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 04:54:34.302295 2026] [proxy_fcgi:error] [pid 44425:tid 44433] [client 20.203.128.117:60807] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 04:54:34.585351 2026] [proxy_fcgi:error] [pid 44425:tid 44448] [client 20.203.128.117:60807] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 04:54:35.333723 2026] [proxy_fcgi:error] [pid 44425:tid 44440] [client 20.203.128.117:60807] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 04:54:35.612722 2026] [proxy_fcgi:error] [pid 44425:tid 44436] [client 20.203.128.117:60807] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 04:54:35.906399 2026] [proxy_fcgi:error] [pid 44425:tid 44444] [client 20.203.128.117:60807] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 04:54:36.194168 2026] [proxy_fcgi:error] [pid 44425:tid 44434] [client 20.203.128.117:60807] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 04:54:36.474336 2026] [proxy_fcgi:error] [pid 44425:tid 44438] [client 20.203.128.117:60807] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 04:54:36.763664 2026] [proxy_fcgi:error] [pid 44425:tid 44433] [client 20.203.128.117:60807] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 04:54:37.043993 2026] [proxy_fcgi:error] [pid 44425:tid 44443] [client 20.203.128.117:60807] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 04:54:37.603535 2026] [:error] [pid 44425:tid 44437] [client 20.203.128.117:60807] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/s.php"] [unique_id "aevYjSUl-VlItvY2tR_oAwAAAMo"]
[Sat Apr 25 04:54:39.224664 2026] [:error] [pid 44321:tid 44390] [client 20.203.128.117:29745] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/s.php"] [unique_id "aevYj41b5lV-asWa_Y4UngAAAIc"]
[Sat Apr 25 04:54:42.050166 2026] [:error] [pid 44321:tid 44404] [client 20.203.128.117:4799] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/s.php"] [unique_id "aevYko1b5lV-asWa_Y4UpAAAAJU"]
[Sat Apr 25 04:54:43.649964 2026] [:error] [pid 44321:tid 44391] [client 20.203.128.117:59122] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/s.php"] [unique_id "aevYk41b5lV-asWa_Y4UpgAAAIg"]
[Sat Apr 25 04:54:44.728958 2026] [:error] [pid 46083:tid 46112] [client 20.203.128.117:44458] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tymn.php"] [unique_id "aevYlDxw_Zq74vWdjmkJqAAAARg"]
[Sat Apr 25 04:54:45.912676 2026] [:error] [pid 44320:tid 44358] [client 20.203.128.117:4748] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tymn.php"] [unique_id "aevYlTmFqSpku_dij8hjuwAAAEI"]
[Sat Apr 25 04:54:47.096571 2026] [:error] [pid 44321:tid 44397] [client 20.203.128.117:4629] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tymn.php"] [unique_id "aevYl41b5lV-asWa_Y4UsAAAAI4"]
[Sat Apr 25 04:54:47.986411 2026] [:error] [pid 44425:tid 44430] [client 20.203.128.117:59133] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tymn.php"] [unique_id "aevYlyUl-VlItvY2tR_oCwAAAMM"]
[Sat Apr 25 04:54:50.190967 2026] [:error] [pid 46083:tid 46096] [client 20.203.128.117:44466] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-links-opml.php"] [unique_id "aevYmjxw_Zq74vWdjmkJwQAAAQk"]
[Sat Apr 25 04:54:51.931923 2026] [:error] [pid 46083:tid 46090] [client 20.203.128.117:54306] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-links-opml.php"] [unique_id "aevYmzxw_Zq74vWdjmkJyAAAAQM"]
[Sat Apr 25 04:54:53.250521 2026] [:error] [pid 44320:tid 44360] [client 20.203.128.117:17685] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-links-opml.php"] [unique_id "aevYnTmFqSpku_dij8hjwAAAAEQ"]
[Sat Apr 25 04:54:57.026141 2026] [:error] [pid 46083:tid 46104] [client 20.203.128.117:27213] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-links-opml.php"] [unique_id "aevYoTxw_Zq74vWdjmkJ7QAAARE"]
[Sat Apr 25 04:54:59.102144 2026] [:error] [pid 44425:tid 44451] [client 20.203.128.117:59759] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp5.php"] [unique_id "aevYoyUl-VlItvY2tR_oJQAAANg"]
[Sat Apr 25 04:55:00.573146 2026] [:error] [pid 44321:tid 44407] [client 20.203.128.117:4627] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp5.php"] [unique_id "aevYpI1b5lV-asWa_Y4UtwAAAJg"]
[Sat Apr 25 04:55:01.731151 2026] [:error] [pid 44320:tid 44361] [client 20.203.128.117:27227] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp5.php"] [unique_id "aevYpTmFqSpku_dij8hjzAAAAEU"]
[Sat Apr 25 04:55:03.035753 2026] [:error] [pid 44320:tid 44378] [client 20.203.128.117:23934] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp5.php"] [unique_id "aevYpzmFqSpku_dij8hjzwAAAFY"]
[Sat Apr 25 04:55:04.556103 2026] [:error] [pid 44425:tid 44448] [client 20.203.128.117:54295] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ms.php"] [unique_id "aevYqCUl-VlItvY2tR_oMwAAANU"]
[Sat Apr 25 04:55:07.748619 2026] [:error] [pid 44425:tid 44444] [client 20.203.128.117:27232] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ms.php"] [unique_id "aevYqyUl-VlItvY2tR_oNwAAANE"]
[Sat Apr 25 04:55:09.214765 2026] [:error] [pid 46083:tid 46112] [client 20.203.128.117:56687] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ms.php"] [unique_id "aevYrTxw_Zq74vWdjmkKAgAAARg"]
[Sat Apr 25 04:55:10.567108 2026] [:error] [pid 46083:tid 46109] [client 20.203.128.117:59772] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ms.php"] [unique_id "aevYrjxw_Zq74vWdjmkKBQAAARU"]
[Sat Apr 25 04:55:11.485956 2026] [:error] [pid 44320:tid 44364] [client 20.203.128.117:60363] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-access.php"] [unique_id "aevYrzmFqSpku_dij8hj1wAAAEg"]
[Sat Apr 25 04:55:12.365401 2026] [:error] [pid 46083:tid 46097] [client 20.203.128.117:44440] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-access.php"] [unique_id "aevYsDxw_Zq74vWdjmkKCwAAAQo"]
[Sat Apr 25 04:55:13.419397 2026] [:error] [pid 46083:tid 46108] [client 20.203.128.117:17691] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-access.php"] [unique_id "aevYsTxw_Zq74vWdjmkKDwAAARQ"]
[Sat Apr 25 04:55:14.189735 2026] [:error] [pid 46083:tid 46096] [client 20.203.128.117:27235] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-access.php"] [unique_id "aevYsjxw_Zq74vWdjmkKEwAAAQk"]
[Sat Apr 25 04:55:15.631530 2026] [:error] [pid 44320:tid 44380] [client 20.203.128.117:20687] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-class-atom.php"] [unique_id "aevYszmFqSpku_dij8hj2wAAAFg"]
[Sat Apr 25 04:55:19.167599 2026] [:error] [pid 46083:tid 46093] [client 20.203.128.117:54322] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-class-atom.php"] [unique_id "aevYtzxw_Zq74vWdjmkKHwAAAQY"]
[Sat Apr 25 04:55:20.585657 2026] [:error] [pid 46083:tid 46104] [client 20.203.128.117:60410] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-class-atom.php"] [unique_id "aevYuDxw_Zq74vWdjmkKJAAAARE"]
[Sat Apr 25 04:55:23.037381 2026] [:error] [pid 46083:tid 46108] [client 20.203.128.117:20622] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-class-atom.php"] [unique_id "aevYuzxw_Zq74vWdjmkKLwAAARQ"]
[Sat Apr 25 04:55:24.687317 2026] [:error] [pid 44320:tid 44368] [client 20.203.128.117:20653] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ms-edit.php"] [unique_id "aevYvDmFqSpku_dij8hj5QAAAEw"]
[Sat Apr 25 04:55:27.040773 2026] [:error] [pid 46083:tid 46099] [client 20.203.128.117:20668] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ms-edit.php"] [unique_id "aevYvzxw_Zq74vWdjmkKQAAAAQw"]
[Sat Apr 25 04:55:28.293096 2026] [:error] [pid 46083:tid 46110] [client 20.203.128.117:56675] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ms-edit.php"] [unique_id "aevYwDxw_Zq74vWdjmkKRwAAARY"]
[Sat Apr 25 04:55:31.152019 2026] [:error] [pid 46083:tid 46110] [client 20.203.128.117:60864] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ms-edit.php"] [unique_id "aevYwzxw_Zq74vWdjmkKUAAAARY"]
[Sat Apr 25 04:55:33.221619 2026] [:error] [pid 44321:tid 44398] [client 20.203.128.117:17698] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/press.php"] [unique_id "aevYxY1b5lV-asWa_Y4U0AAAAI8"]
[Sat Apr 25 04:55:35.160584 2026] [:error] [pid 44320:tid 44376] [client 20.203.128.117:60372] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/press.php"] [unique_id "aevYxzmFqSpku_dij8hj8QAAAFQ"]
[Sat Apr 25 04:55:37.759811 2026] [proxy_fcgi:error] [pid 44425:tid 44445] [client 20.203.128.117:22724] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 04:55:38.767582 2026] [proxy_fcgi:error] [pid 44425:tid 44446] [client 20.203.128.117:22724] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 04:55:39.039492 2026] [proxy_fcgi:error] [pid 44425:tid 44428] [client 20.203.128.117:22724] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 04:55:39.334177 2026] [proxy_fcgi:error] [pid 44425:tid 44429] [client 20.203.128.117:22724] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 04:55:39.605361 2026] [proxy_fcgi:error] [pid 44425:tid 44441] [client 20.203.128.117:22724] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 04:55:39.887101 2026] [proxy_fcgi:error] [pid 44425:tid 44449] [client 20.203.128.117:22724] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 04:55:40.157377 2026] [proxy_fcgi:error] [pid 44425:tid 44434] [client 20.203.128.117:22724] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 04:55:40.431603 2026] [proxy_fcgi:error] [pid 44425:tid 44436] [client 20.203.128.117:22724] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 04:55:40.702492 2026] [proxy_fcgi:error] [pid 44425:tid 44439] [client 20.203.128.117:22724] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 04:55:40.972470 2026] [proxy_fcgi:error] [pid 44425:tid 44433] [client 20.203.128.117:22724] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 04:55:41.242691 2026] [proxy_fcgi:error] [pid 44425:tid 44445] [client 20.203.128.117:22724] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 04:55:41.510286 2026] [:error] [pid 44425:tid 44432] [client 20.203.128.117:22724] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws88.php"] [unique_id "aevYzSUl-VlItvY2tR_oXgAAAMU"]
[Sat Apr 25 04:55:43.688207 2026] [:error] [pid 46083:tid 46108] [client 20.203.128.117:29900] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws88.php"] [unique_id "aevYzzxw_Zq74vWdjmkKeAAAARQ"]
[Sat Apr 25 04:55:46.265406 2026] [:error] [pid 44425:tid 44444] [client 20.203.128.117:60864] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws88.php"] [unique_id "aevY0iUl-VlItvY2tR_oZwAAANE"]
[Sat Apr 25 04:55:48.616765 2026] [:error] [pid 44320:tid 44370] [client 20.203.128.117:18547] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws88.php"] [unique_id "aevY1DmFqSpku_dij8hkCQAAAE4"]
[Sat Apr 25 04:55:51.144677 2026] [:error] [pid 44321:tid 44406] [client 20.203.128.117:24292] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/adoms.php"] [unique_id "aevY141b5lV-asWa_Y4U4QAAAJc"]
[Sat Apr 25 04:55:52.857194 2026] [:error] [pid 44425:tid 44436] [client 20.203.128.117:30192] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/adoms.php"] [unique_id "aevY2CUl-VlItvY2tR_odwAAAMk"]
[Sat Apr 25 04:55:55.574959 2026] [:error] [pid 44425:tid 44427] [client 20.203.128.117:24285] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/adoms.php"] [unique_id "aevY2yUl-VlItvY2tR_ogAAAAMA"]
[Sat Apr 25 04:55:56.331345 2026] [:error] [pid 44425:tid 44429] [client 20.203.128.117:30968] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/adoms.php"] [unique_id "aevY3CUl-VlItvY2tR_ogwAAAMI"]
[Sat Apr 25 04:55:57.266552 2026] [:error] [pid 44319:tid 44340] [client 20.203.128.117:45475] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/plugin-editor.php"] [unique_id "aevY3czJPAVLUb2pWtJCzQAAAAs"]
[Sat Apr 25 04:55:58.091368 2026] [:error] [pid 46083:tid 46093] [client 20.203.128.117:25041] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/plugin-editor.php"] [unique_id "aevY3jxw_Zq74vWdjmkKiwAAAQY"]
[Sat Apr 25 04:55:58.872030 2026] [:error] [pid 44320:tid 44367] [client 20.203.128.117:30942] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/plugin-editor.php"] [unique_id "aevY3jmFqSpku_dij8hkDgAAAEs"]
[Sat Apr 25 04:55:59.564490 2026] [:error] [pid 44425:tid 44427] [client 20.203.128.117:22274] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/plugin-editor.php"] [unique_id "aevY3yUl-VlItvY2tR_oiAAAAMA"]
[Sat Apr 25 04:56:00.397961 2026] [:error] [pid 46083:tid 46089] [client 20.203.128.117:4928] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/8573.php"] [unique_id "aevY4Dxw_Zq74vWdjmkKlQAAAQI"]
[Sat Apr 25 04:56:01.091890 2026] [:error] [pid 46083:tid 46092] [client 20.203.128.117:65527] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/8573.php"] [unique_id "aevY4Txw_Zq74vWdjmkKnwAAAQU"]
[Sat Apr 25 04:56:01.833804 2026] [:error] [pid 46083:tid 46103] [client 20.203.128.117:5065] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/8573.php"] [unique_id "aevY4Txw_Zq74vWdjmkKpgAAARA"]
[Sat Apr 25 04:56:02.874871 2026] [:error] [pid 44319:tid 44335] [client 20.203.128.117:5098] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/8573.php"] [unique_id "aevY4szJPAVLUb2pWtJCzwAAAAY"]
[Sat Apr 25 04:56:03.747684 2026] [:error] [pid 46083:tid 46112] [client 20.203.128.117:65472] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/an.php"] [unique_id "aevY4zxw_Zq74vWdjmkKswAAARg"]
[Sat Apr 25 04:56:04.869315 2026] [:error] [pid 44321:tid 44391] [client 20.203.128.117:45476] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/an.php"] [unique_id "aevY5I1b5lV-asWa_Y4U8QAAAIg"]
[Sat Apr 25 04:56:05.465544 2026] [:error] [pid 44321:tid 44390] [client 20.203.128.117:30162] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/an.php"] [unique_id "aevY5Y1b5lV-asWa_Y4U9QAAAIc"]
[Sat Apr 25 04:56:06.430472 2026] [:error] [pid 44425:tid 44430] [client 20.203.128.117:4943] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/an.php"] [unique_id "aevY5iUl-VlItvY2tR_oigAAAMM"]
[Sat Apr 25 04:56:07.233885 2026] [:error] [pid 44321:tid 44387] [client 20.203.128.117:65487] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/t.php"] [unique_id "aevY541b5lV-asWa_Y4U9wAAAIQ"]
[Sat Apr 25 04:56:09.142081 2026] [:error] [pid 44425:tid 44444] [client 20.203.128.117:30960] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/t.php"] [unique_id "aevY6SUl-VlItvY2tR_ojgAAANE"]
[Sat Apr 25 04:56:10.133193 2026] [:error] [pid 44320:tid 44375] [client 20.203.128.117:30918] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/t.php"] [unique_id "aevY6jmFqSpku_dij8hkFAAAAFM"]
[Sat Apr 25 04:56:11.077315 2026] [:error] [pid 44425:tid 44431] [client 20.203.128.117:22320] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/t.php"] [unique_id "aevY6yUl-VlItvY2tR_omAAAAMQ"]
[Sat Apr 25 04:56:12.987929 2026] [:error] [pid 44425:tid 44442] [client 20.203.128.117:30971] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aevY7CUl-VlItvY2tR_onQAAAM8"]
[Sat Apr 25 04:56:14.134786 2026] [:error] [pid 44321:tid 44387] [client 20.203.128.117:22324] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aevY7o1b5lV-asWa_Y4VAAAAAIQ"]
[Sat Apr 25 04:56:15.687050 2026] [:error] [pid 44320:tid 44377] [client 20.203.128.117:45488] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aevY7zmFqSpku_dij8hkFwAAAFU"]
[Sat Apr 25 04:56:17.075869 2026] [:error] [pid 44425:tid 44437] [client 20.203.128.117:5106] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aevY8SUl-VlItvY2tR_opwAAAMo"]
[Sat Apr 25 04:56:18.593660 2026] [:error] [pid 44320:tid 44359] [client 20.203.128.117:25045] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/profile.php"] [unique_id "aevY8jmFqSpku_dij8hkGQAAAEM"]
[Sat Apr 25 04:56:19.852887 2026] [:error] [pid 46083:tid 46093] [client 20.203.128.117:53038] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/profile.php"] [unique_id "aevY8zxw_Zq74vWdjmkKzwAAAQY"]
[Sat Apr 25 04:56:22.188291 2026] [:error] [pid 44425:tid 44429] [client 20.203.128.117:25038] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/profile.php"] [unique_id "aevY9iUl-VlItvY2tR_orwAAAMI"]
[Sat Apr 25 04:56:23.633899 2026] [:error] [pid 46083:tid 46101] [client 20.203.128.117:24618] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/profile.php"] [unique_id "aevY9zxw_Zq74vWdjmkK2QAAAQ4"]
[Sat Apr 25 04:56:24.763953 2026] [:error] [pid 44321:tid 44387] [client 20.203.128.117:65501] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gaza.php"] [unique_id "aevY-I1b5lV-asWa_Y4VDAAAAIQ"]
[Sat Apr 25 04:56:26.726344 2026] [:error] [pid 44321:tid 44397] [client 20.203.128.117:4965] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gaza.php"] [unique_id "aevY-o1b5lV-asWa_Y4VEAAAAI4"]
[Sat Apr 25 04:56:28.423269 2026] [:error] [pid 44319:tid 44330] [client 20.203.128.117:65481] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gaza.php"] [unique_id "aevY_MzJPAVLUb2pWtJC3QAAAAE"]
[Sat Apr 25 04:56:31.064942 2026] [:error] [pid 46083:tid 46100] [client 20.203.128.117:25030] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gaza.php"] [unique_id "aevY_zxw_Zq74vWdjmkK3QAAAQ0"]
[Sat Apr 25 04:56:32.531778 2026] [:error] [pid 44425:tid 44447] [client 20.203.128.117:53019] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kj.php"] [unique_id "aevZACUl-VlItvY2tR_ovQAAANQ"]
[Sat Apr 25 04:56:33.235780 2026] [:error] [pid 44425:tid 44450] [client 20.203.128.117:4944] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kj.php"] [unique_id "aevZASUl-VlItvY2tR_ovgAAANc"]
[Sat Apr 25 04:56:34.705796 2026] [:error] [pid 46083:tid 46088] [client 20.203.128.117:30159] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kj.php"] [unique_id "aevZAjxw_Zq74vWdjmkK6QAAAQE"]
[Sat Apr 25 04:56:36.711926 2026] [:error] [pid 46083:tid 46103] [client 20.203.128.117:22318] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kj.php"] [unique_id "aevZBDxw_Zq74vWdjmkK8AAAARA"]
[Sat Apr 25 04:56:37.831503 2026] [:error] [pid 46083:tid 46109] [client 20.203.128.117:24638] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aboute.php"] [unique_id "aevZBTxw_Zq74vWdjmkK9gAAARU"]
[Sat Apr 25 04:56:38.911227 2026] [:error] [pid 46083:tid 46089] [client 20.203.128.117:65480] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aboute.php"] [unique_id "aevZBjxw_Zq74vWdjmkK-gAAAQI"]
[Sat Apr 25 04:56:40.369331 2026] [:error] [pid 46083:tid 46104] [client 20.203.128.117:45655] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aboute.php"] [unique_id "aevZCDxw_Zq74vWdjmkLBAAAARE"]
[Sat Apr 25 04:56:41.153770 2026] [proxy_fcgi:error] [pid 46083:tid 46091] [client 20.203.128.117:25461] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 04:56:41.395744 2026] [proxy_fcgi:error] [pid 46083:tid 46102] [client 20.203.128.117:25461] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 04:56:41.640579 2026] [proxy_fcgi:error] [pid 46083:tid 46096] [client 20.203.128.117:25461] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 04:56:41.880554 2026] [proxy_fcgi:error] [pid 46083:tid 46095] [client 20.203.128.117:25461] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 04:56:42.128341 2026] [proxy_fcgi:error] [pid 46083:tid 46093] [client 20.203.128.117:25461] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 04:56:42.373087 2026] [proxy_fcgi:error] [pid 46083:tid 46111] [client 20.203.128.117:25461] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 04:56:42.612247 2026] [proxy_fcgi:error] [pid 46083:tid 46107] [client 20.203.128.117:25461] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 04:56:42.863476 2026] [proxy_fcgi:error] [pid 46083:tid 46088] [client 20.203.128.117:25461] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 04:56:43.102680 2026] [proxy_fcgi:error] [pid 46083:tid 46102] [client 20.203.128.117:25461] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 04:56:43.342229 2026] [proxy_fcgi:error] [pid 46083:tid 46109] [client 20.203.128.117:25461] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 04:56:43.581557 2026] [proxy_fcgi:error] [pid 46083:tid 46093] [client 20.203.128.117:25461] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 04:56:43.817077 2026] [:error] [pid 46083:tid 46110] [client 20.203.128.117:25461] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/retu11.PhP7"] [unique_id "aevZCzxw_Zq74vWdjmkLFgAAARY"]
[Sat Apr 25 04:56:44.500212 2026] [:error] [pid 46083:tid 46098] [client 20.203.128.117:53010] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/retu11.PhP7"] [unique_id "aevZDDxw_Zq74vWdjmkLGQAAAQs"]
[Sat Apr 25 04:56:46.265382 2026] [:error] [pid 44425:tid 44433] [client 20.203.128.117:45635] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/retu11.PhP7"] [unique_id "aevZDiUl-VlItvY2tR_oyAAAAMY"]
[Sat Apr 25 04:56:46.873824 2026] [:error] [pid 46083:tid 46103] [client 20.203.128.117:30944] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/retu11.PhP7"] [unique_id "aevZDjxw_Zq74vWdjmkLIwAAARA"]
[Sat Apr 25 04:56:47.697702 2026] [:error] [pid 46083:tid 46092] [client 20.203.128.117:30170] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rip.php"] [unique_id "aevZDzxw_Zq74vWdjmkLJgAAAQU"]
[Sat Apr 25 04:56:48.369485 2026] [:error] [pid 46083:tid 46088] [client 20.203.128.117:65521] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rip.php"] [unique_id "aevZEDxw_Zq74vWdjmkLKQAAAQE"]
[Sat Apr 25 04:56:49.607378 2026] [:error] [pid 46083:tid 46096] [client 20.203.128.117:53039] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rip.php"] [unique_id "aevZETxw_Zq74vWdjmkLLAAAAQk"]
[Sat Apr 25 04:56:50.517511 2026] [:error] [pid 44320:tid 44363] [client 20.203.128.117:25061] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rip.php"] [unique_id "aevZEjmFqSpku_dij8hkKAAAAEc"]
[Sat Apr 25 04:56:51.358270 2026] [:error] [pid 44320:tid 44375] [client 20.203.128.117:22297] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aevZEzmFqSpku_dij8hkKgAAAFM"]
[Sat Apr 25 04:56:52.350996 2026] [:error] [pid 44425:tid 44441] [client 20.203.128.117:18557] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aevZFCUl-VlItvY2tR_o1QAAAM4"]
[Sat Apr 25 04:56:56.335315 2026] [:error] [pid 44425:tid 44429] [client 20.203.128.117:5077] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aevZGCUl-VlItvY2tR_o3wAAAMI"]
[Sat Apr 25 04:56:57.166205 2026] [:error] [pid 44425:tid 44432] [client 20.203.128.117:65482] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aevZGSUl-VlItvY2tR_o4wAAAMU"]
[Sat Apr 25 04:56:58.787491 2026] [:error] [pid 44425:tid 44439] [client 20.203.128.117:5071] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zoo.php"] [unique_id "aevZGiUl-VlItvY2tR_o6AAAAMw"]
[Sat Apr 25 04:57:01.111090 2026] [:error] [pid 44321:tid 44392] [client 20.203.128.117:45681] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zoo.php"] [unique_id "aevZHY1b5lV-asWa_Y4VKQAAAIk"]
[Sat Apr 25 04:57:02.879327 2026] [:error] [pid 44319:tid 44342] [client 20.203.128.117:25080] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zoo.php"] [unique_id "aevZHszJPAVLUb2pWtJC9AAAAA0"]
[Sat Apr 25 04:57:04.777728 2026] [:error] [pid 46083:tid 46098] [client 20.203.128.117:22276] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zoo.php"] [unique_id "aevZIDxw_Zq74vWdjmkLRQAAAQs"]
[Sat Apr 25 04:57:06.776023 2026] [:error] [pid 46083:tid 46100] [client 20.203.128.117:22298] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admlo.php"] [unique_id "aevZIjxw_Zq74vWdjmkLUwAAAQ0"]
[Sat Apr 25 04:57:08.195123 2026] [:error] [pid 46083:tid 46104] [client 20.203.128.117:5083] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admlo.php"] [unique_id "aevZJDxw_Zq74vWdjmkLXAAAARE"]
[Sat Apr 25 04:57:09.414608 2026] [:error] [pid 44321:tid 44383] [client 20.203.128.117:25451] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admlo.php"] [unique_id "aevZJY1b5lV-asWa_Y4VLwAAAIA"]
[Sat Apr 25 04:57:10.688159 2026] [:error] [pid 46083:tid 46109] [client 20.203.128.117:59077] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admlo.php"] [unique_id "aevZJjxw_Zq74vWdjmkLYAAAARU"]
[Sat Apr 25 04:57:12.250431 2026] [:error] [pid 44319:tid 44329] [client 20.203.128.117:22296] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gcqoa.php"] [unique_id "aevZKMzJPAVLUb2pWtJC-gAAAAA"]
[Sat Apr 25 04:57:13.153152 2026] [:error] [pid 44321:tid 44385] [client 20.203.128.117:5056] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gcqoa.php"] [unique_id "aevZKY1b5lV-asWa_Y4VMgAAAII"]
[Sat Apr 25 04:57:14.352197 2026] [:error] [pid 46083:tid 46095] [client 20.203.128.117:30919] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gcqoa.php"] [unique_id "aevZKjxw_Zq74vWdjmkLZAAAAQg"]
[Sat Apr 25 04:57:15.515064 2026] [:error] [pid 44425:tid 44448] [client 20.203.128.117:65523] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gcqoa.php"] [unique_id "aevZKyUl-VlItvY2tR_pCgAAANU"]
[Sat Apr 25 04:57:16.494145 2026] [:error] [pid 44425:tid 44440] [client 20.203.128.117:4938] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xxx.php"] [unique_id "aevZLCUl-VlItvY2tR_pDQAAAM0"]
[Sat Apr 25 04:57:19.151634 2026] [:error] [pid 44425:tid 44436] [client 20.203.128.117:5116] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xxx.php"] [unique_id "aevZLyUl-VlItvY2tR_pEwAAAMk"]
[Sat Apr 25 04:57:21.817591 2026] [:error] [pid 44425:tid 44433] [client 20.203.128.117:25437] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xxx.php"] [unique_id "aevZMSUl-VlItvY2tR_pFwAAAMY"]
[Sat Apr 25 04:57:23.661096 2026] [:error] [pid 44321:tid 44389] [client 20.203.128.117:4954] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xxx.php"] [unique_id "aevZM41b5lV-asWa_Y4VPwAAAIY"]
[Sat Apr 25 04:57:27.148566 2026] [:error] [pid 44425:tid 44429] [client 20.203.128.117:60817] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/b.php"] [unique_id "aevZNyUl-VlItvY2tR_pLAAAAMI"]
[Sat Apr 25 04:57:29.193302 2026] [:error] [pid 46083:tid 46104] [client 20.203.128.117:30924] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/b.php"] [unique_id "aevZOTxw_Zq74vWdjmkLhAAAARE"]
[Sat Apr 25 04:57:30.885966 2026] [:error] [pid 44319:tid 44340] [client 20.203.128.117:25444] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/b.php"] [unique_id "aevZOszJPAVLUb2pWtJC_wAAAAs"]
[Sat Apr 25 04:57:31.530421 2026] [:error] [pid 46083:tid 46109] [client 20.203.128.117:24603] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/b.php"] [unique_id "aevZOzxw_Zq74vWdjmkLjAAAARU"]
[Sat Apr 25 04:57:32.664880 2026] [:error] [pid 44319:tid 44348] [client 20.203.128.117:30206] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/grsiuk.php"] [unique_id "aevZPMzJPAVLUb2pWtJDBwAAABM"]
[Sat Apr 25 04:57:33.193269 2026] [:error] [pid 44320:tid 44361] [client 20.203.128.117:30975] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/grsiuk.php"] [unique_id "aevZPTmFqSpku_dij8hkVAAAAEU"]
[Sat Apr 25 04:57:33.898017 2026] [:error] [pid 44425:tid 44431] [client 20.203.128.117:30205] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/grsiuk.php"] [unique_id "aevZPSUl-VlItvY2tR_pNAAAAMQ"]
[Sat Apr 25 04:57:34.576411 2026] [:error] [pid 44320:tid 44380] [client 20.203.128.117:4946] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/grsiuk.php"] [unique_id "aevZPjmFqSpku_dij8hkWAAAAFg"]
[Sat Apr 25 04:57:35.450445 2026] [:error] [pid 44320:tid 44358] [client 20.203.128.117:24297] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-class-api.php"] [unique_id "aevZPzmFqSpku_dij8hkWwAAAEI"]
[Sat Apr 25 04:57:36.120845 2026] [:error] [pid 46083:tid 46088] [client 20.203.128.117:45452] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-class-api.php"] [unique_id "aevZQDxw_Zq74vWdjmkLmQAAAQE"]
[Sat Apr 25 04:57:36.969973 2026] [:error] [pid 44425:tid 44440] [client 20.203.128.117:4949] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-class-api.php"] [unique_id "aevZQCUl-VlItvY2tR_pOQAAAM0"]
[Sat Apr 25 04:57:38.087747 2026] [:error] [pid 44319:tid 44344] [client 20.203.128.117:53044] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-class-api.php"] [unique_id "aevZQszJPAVLUb2pWtJDEwAAAA8"]
[Sat Apr 25 04:57:41.164035 2026] [:error] [pid 44425:tid 44432] [client 20.203.128.117:24587] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bolt.php"] [unique_id "aevZRSUl-VlItvY2tR_pSgAAAMU"]
[Sat Apr 25 04:57:43.658014 2026] [proxy_fcgi:error] [pid 46083:tid 46109] [client 20.203.128.117:22319] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 04:57:43.927177 2026] [proxy_fcgi:error] [pid 46083:tid 46107] [client 20.203.128.117:22319] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 04:57:45.463827 2026] [proxy_fcgi:error] [pid 46083:tid 46093] [client 20.203.128.117:22319] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 04:57:45.732853 2026] [proxy_fcgi:error] [pid 46083:tid 46102] [client 20.203.128.117:22319] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 13:15:24.262729 2026] [proxy_fcgi:error] [pid 46083:tid 46095] [client 40.89.132.50:40224] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 13:15:24.528454 2026] [proxy_fcgi:error] [pid 46083:tid 46093] [client 40.89.132.50:40224] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 13:15:24.795375 2026] [proxy_fcgi:error] [pid 46083:tid 46092] [client 40.89.132.50:40224] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 13:15:25.061097 2026] [proxy_fcgi:error] [pid 46083:tid 46096] [client 40.89.132.50:40224] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 13:15:25.327896 2026] [proxy_fcgi:error] [pid 46083:tid 46111] [client 40.89.132.50:40224] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 13:15:25.593492 2026] [proxy_fcgi:error] [pid 46083:tid 46104] [client 40.89.132.50:40224] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 13:15:25.861514 2026] [proxy_fcgi:error] [pid 46083:tid 46088] [client 40.89.132.50:40224] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 13:15:26.127513 2026] [proxy_fcgi:error] [pid 46083:tid 46102] [client 40.89.132.50:40224] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 23:07:12.307297 2026] [proxy_fcgi:error] [pid 59897:tid 59938] [client 74.248.33.118:1235] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 23:07:12.566157 2026] [proxy_fcgi:error] [pid 59897:tid 59928] [client 74.248.33.118:1235] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 23:07:12.824726 2026] [proxy_fcgi:error] [pid 59897:tid 59933] [client 74.248.33.118:1235] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 23:07:14.462289 2026] [proxy_fcgi:error] [pid 59897:tid 59931] [client 74.248.33.118:1235] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 23:07:14.722148 2026] [proxy_fcgi:error] [pid 59897:tid 59932] [client 74.248.33.118:1235] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 23:07:14.981141 2026] [proxy_fcgi:error] [pid 59897:tid 59930] [client 74.248.33.118:1235] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 23:07:15.240277 2026] [proxy_fcgi:error] [pid 59897:tid 59929] [client 74.248.33.118:1235] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 23:07:15.499748 2026] [proxy_fcgi:error] [pid 59897:tid 59948] [client 74.248.33.118:1235] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 23:07:15.759851 2026] [proxy_fcgi:error] [pid 59897:tid 59947] [client 74.248.33.118:1235] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 23:07:16.018822 2026] [proxy_fcgi:error] [pid 59897:tid 59943] [client 74.248.33.118:1235] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 23:07:16.274654 2026] [:error] [pid 59897:tid 59950] [client 74.248.33.118:1235] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zoko.php"] [unique_id "aezYpPBrrkdzpEbmK4eb-AAAAJc"]
[Sat Apr 25 23:07:16.814941 2026] [:error] [pid 59898:tid 59975] [client 74.248.33.118:20841] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zoko.php"] [unique_id "aezYpB-4vImxb0kbdze97AAAANU"]
[Sat Apr 25 23:07:17.347500 2026] [:error] [pid 3212:tid 3224] [client 74.248.33.118:35676] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zoko.php"] [unique_id "aezYpfg-28TY8_YLtUdpugAAAQo"]
[Sat Apr 25 23:07:17.881593 2026] [:error] [pid 59898:tid 59968] [client 74.248.33.118:11180] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zoko.php"] [unique_id "aezYpR-4vImxb0kbdze97QAAAM4"]
[Sat Apr 25 23:07:18.421664 2026] [:error] [pid 59985:tid 59996] [client 74.248.33.118:26456] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/solo1.php"] [unique_id "aezYpgF_zDvEhKvyTH7ORwAAAAk"]
[Sat Apr 25 23:07:18.966555 2026] [:error] [pid 59985:tid 59989] [client 74.248.33.118:20800] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/solo1.php"] [unique_id "aezYpgF_zDvEhKvyTH7OSwAAAAI"]
[Sat Apr 25 23:07:19.509567 2026] [:error] [pid 59985:tid 59993] [client 74.248.33.118:10510] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/solo1.php"] [unique_id "aezYpwF_zDvEhKvyTH7OTQAAAAY"]
[Sat Apr 25 23:07:20.043048 2026] [:error] [pid 59985:tid 59992] [client 74.248.33.118:10503] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/solo1.php"] [unique_id "aezYqAF_zDvEhKvyTH7OTwAAAAU"]
[Sat Apr 25 23:07:20.576830 2026] [:error] [pid 59985:tid 60011] [client 74.248.33.118:1118] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/locales.php"] [unique_id "aezYqAF_zDvEhKvyTH7OUgAAABg"]
[Sat Apr 25 23:07:21.111053 2026] [:error] [pid 59985:tid 59987] [client 74.248.33.118:1109] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/locales.php"] [unique_id "aezYqQF_zDvEhKvyTH7OVAAAAAA"]
[Sat Apr 25 23:07:21.645970 2026] [:error] [pid 3212:tid 3229] [client 74.248.33.118:1561] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/locales.php"] [unique_id "aezYqfg-28TY8_YLtUdpvgAAAQ8"]
[Sat Apr 25 23:07:22.180319 2026] [:error] [pid 59898:tid 59962] [client 74.248.33.118:11142] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/locales.php"] [unique_id "aezYqh-4vImxb0kbdze99AAAAMg"]
[Sat Apr 25 23:07:22.740180 2026] [:error] [pid 59897:tid 59945] [client 74.248.33.118:11182] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bgymj.php"] [unique_id "aezYqvBrrkdzpEbmK4eb_AAAAJI"]
[Sat Apr 25 23:07:23.298064 2026] [:error] [pid 3212:tid 3214] [client 74.248.33.118:13957] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bgymj.php"] [unique_id "aezYq_g-28TY8_YLtUdpwAAAAQA"]
[Sat Apr 25 23:07:23.857635 2026] [:error] [pid 59896:tid 59922] [client 74.248.33.118:20832] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bgymj.php"] [unique_id "aezYq7LLzhtkd-OXUgAaHAAAAFY"]
[Sat Apr 25 23:07:24.416151 2026] [:error] [pid 59896:tid 59919] [client 74.248.33.118:13975] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bgymj.php"] [unique_id "aezYrLLLzhtkd-OXUgAaHwAAAFM"]
[Sat Apr 25 23:07:24.951073 2026] [:error] [pid 3212:tid 3232] [client 74.248.33.118:20851] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/pucci.php"] [unique_id "aezYrPg-28TY8_YLtUdpxAAAARI"]
[Sat Apr 25 23:07:25.486019 2026] [:error] [pid 3212:tid 3236] [client 74.248.33.118:26481] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/pucci.php"] [unique_id "aezYrfg-28TY8_YLtUdpxwAAARY"]
[Sat Apr 25 23:07:26.043172 2026] [:error] [pid 59896:tid 59902] [client 74.248.33.118:26457] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/pucci.php"] [unique_id "aezYrrLLzhtkd-OXUgAaIwAAAEI"]
[Sat Apr 25 23:07:26.601974 2026] [:error] [pid 59896:tid 59914] [client 74.248.33.118:20854] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/pucci.php"] [unique_id "aezYrrLLzhtkd-OXUgAaJAAAAE4"]
[Sat Apr 25 23:07:27.136229 2026] [:error] [pid 59897:tid 59933] [client 74.248.33.118:11164] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/details/"] [unique_id "aezYr_BrrkdzpEbmK4ecBAAAAIY"]
[Sat Apr 25 23:07:27.650852 2026] [:error] [pid 59896:tid 59917] [client 74.248.33.118:1576] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/details/"] [unique_id "aezYr7LLzhtkd-OXUgAaJgAAAFE"]
[Sat Apr 25 23:07:28.160408 2026] [:error] [pid 59985:tid 60005] [client 74.248.33.118:26483] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/details/"] [unique_id "aezYsAF_zDvEhKvyTH7OWAAAABI"]
[Sat Apr 25 23:07:28.670398 2026] [:error] [pid 59897:tid 59947] [client 74.248.33.118:1112] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/details/"] [unique_id "aezYsPBrrkdzpEbmK4ecBQAAAJQ"]
[Sat Apr 25 23:07:29.179295 2026] [:error] [pid 59897:tid 59946] [client 74.248.33.118:11187] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.dj/index.php"] [unique_id "aezYsfBrrkdzpEbmK4ecBwAAAJM"]
[Sat Apr 25 23:07:29.688630 2026] [:error] [pid 59985:tid 59998] [client 74.248.33.118:1277] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.dj/index.php"] [unique_id "aezYsQF_zDvEhKvyTH7OXAAAAAs"]
[Sat Apr 25 23:07:30.222426 2026] [:error] [pid 59896:tid 59919] [client 74.248.33.118:11161] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.dj/index.php"] [unique_id "aezYsrLLzhtkd-OXUgAaLgAAAFM"]
[Sat Apr 25 23:07:30.780659 2026] [:error] [pid 59897:tid 59934] [client 74.248.33.118:35664] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.dj/index.php"] [unique_id "aezYsvBrrkdzpEbmK4ecDgAAAIc"]
[Sat Apr 25 23:07:31.339003 2026] [:error] [pid 59897:tid 59942] [client 74.248.33.118:13985] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "aezYs_BrrkdzpEbmK4ecDwAAAI8"]
[Sat Apr 25 23:07:31.895895 2026] [:error] [pid 59985:tid 59992] [client 74.248.33.118:1264] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "aezYswF_zDvEhKvyTH7OXQAAAAU"]
[Sat Apr 25 23:07:32.430048 2026] [:error] [pid 3212:tid 3234] [client 74.248.33.118:33068] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "aezYtPg-28TY8_YLtUdp0AAAARQ"]
[Sat Apr 25 23:07:32.963106 2026] [:error] [pid 3212:tid 3232] [client 74.248.33.118:20853] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "aezYtPg-28TY8_YLtUdp1QAAARI"]
[Sat Apr 25 23:07:33.519447 2026] [:error] [pid 59898:tid 59978] [client 74.248.33.118:1574] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.tmb/"] [unique_id "aezYtR-4vImxb0kbdze9_AAAANg"]
[Sat Apr 25 23:07:34.052703 2026] [:error] [pid 59985:tid 59987] [client 74.248.33.118:20862] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.tmb/"] [unique_id "aezYtgF_zDvEhKvyTH7OXwAAAAA"]
[Sat Apr 25 23:07:34.561596 2026] [:error] [pid 59985:tid 59994] [client 74.248.33.118:1271] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.tmb/"] [unique_id "aezYtgF_zDvEhKvyTH7OYAAAAAc"]
[Sat Apr 25 23:07:35.093637 2026] [:error] [pid 3212:tid 3238] [client 74.248.33.118:1156] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.tmb/"] [unique_id "aezYt_g-28TY8_YLtUdp3QAAARg"]
[Sat Apr 25 23:07:35.626699 2026] [:error] [pid 3212:tid 3227] [client 74.248.33.118:1271] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/one.php"] [unique_id "aezYt_g-28TY8_YLtUdp3wAAAQ0"]
[Sat Apr 25 23:07:36.136391 2026] [:error] [pid 59896:tid 59904] [client 74.248.33.118:1204] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/one.php"] [unique_id "aezYuLLLzhtkd-OXUgAaPAAAAEQ"]
[Sat Apr 25 23:07:36.670197 2026] [:error] [pid 59896:tid 59916] [client 74.248.33.118:26472] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/one.php"] [unique_id "aezYuLLLzhtkd-OXUgAaPwAAAFA"]
[Sat Apr 25 23:07:37.215198 2026] [:error] [pid 59896:tid 59923] [client 74.248.33.118:11188] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/one.php"] [unique_id "aezYubLLzhtkd-OXUgAaQQAAAFc"]
[Sat Apr 25 23:07:37.724777 2026] [:error] [pid 3212:tid 3223] [client 74.248.33.118:1592] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/no20.php"] [unique_id "aezYufg-28TY8_YLtUdp4QAAAQk"]
[Sat Apr 25 23:07:38.234173 2026] [:error] [pid 3212:tid 3236] [client 74.248.33.118:11137] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/no20.php"] [unique_id "aezYuvg-28TY8_YLtUdp4gAAARY"]
[Sat Apr 25 23:07:38.768270 2026] [:error] [pid 3212:tid 3230] [client 74.248.33.118:33064] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/no20.php"] [unique_id "aezYuvg-28TY8_YLtUdp5AAAARA"]
[Sat Apr 25 23:07:39.324946 2026] [:error] [pid 3212:tid 3238] [client 74.248.33.118:26492] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/no20.php"] [unique_id "aezYu_g-28TY8_YLtUdp5QAAARg"]
[Sat Apr 25 23:07:39.857960 2026] [:error] [pid 3212:tid 3237] [client 74.248.33.118:33037] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-alone.php"] [unique_id "aezYu_g-28TY8_YLtUdp6wAAARc"]
[Sat Apr 25 23:07:40.367312 2026] [:error] [pid 59985:tid 59990] [client 74.248.33.118:26478] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-alone.php"] [unique_id "aezYvAF_zDvEhKvyTH7OawAAAAM"]
[Sat Apr 25 23:07:40.879187 2026] [:error] [pid 59985:tid 60010] [client 74.248.33.118:35657] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-alone.php"] [unique_id "aezYvAF_zDvEhKvyTH7ObQAAABc"]
[Sat Apr 25 23:07:41.411720 2026] [:error] [pid 59897:tid 59941] [client 74.248.33.118:1566] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-alone.php"] [unique_id "aezYvfBrrkdzpEbmK4ecEwAAAI4"]
[Sat Apr 25 23:07:41.969098 2026] [:error] [pid 59897:tid 59940] [client 74.248.33.118:11179] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/yasnu.php"] [unique_id "aezYvfBrrkdzpEbmK4ecFAAAAI0"]
[Sat Apr 25 23:07:42.502527 2026] [:error] [pid 59898:tid 59954] [client 74.248.33.118:10525] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/yasnu.php"] [unique_id "aezYvh-4vImxb0kbdze-AgAAAMA"]
[Sat Apr 25 23:07:43.010361 2026] [:error] [pid 59897:tid 59938] [client 74.248.33.118:26446] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/yasnu.php"] [unique_id "aezYv_BrrkdzpEbmK4ecGAAAAIs"]
[Sat Apr 25 23:07:43.523865 2026] [:error] [pid 3212:tid 3232] [client 74.248.33.118:26435] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/yasnu.php"] [unique_id "aezYv_g-28TY8_YLtUdp_QAAARI"]
[Sat Apr 25 23:07:44.033877 2026] [:error] [pid 3212:tid 3233] [client 74.248.33.118:14370] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sl.php"] [unique_id "aezYwPg-28TY8_YLtUdqAQAAARM"]
[Sat Apr 25 23:07:44.546104 2026] [:error] [pid 59898:tid 59957] [client 74.248.33.118:20820] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sl.php"] [unique_id "aezYwB-4vImxb0kbdze-BQAAAMM"]
[Sat Apr 25 23:07:45.081569 2026] [:error] [pid 59898:tid 59977] [client 74.248.33.118:13958] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sl.php"] [unique_id "aezYwR-4vImxb0kbdze-CAAAANc"]
[Sat Apr 25 23:07:45.618186 2026] [:error] [pid 59898:tid 59971] [client 74.248.33.118:1132] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sl.php"] [unique_id "aezYwR-4vImxb0kbdze-CwAAANE"]
[Sat Apr 25 23:07:46.131776 2026] [:error] [pid 59898:tid 59978] [client 74.248.33.118:26432] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vuln.php"] [unique_id "aezYwh-4vImxb0kbdze-DwAAANg"]
[Sat Apr 25 23:07:46.647250 2026] [:error] [pid 59896:tid 59917] [client 74.248.33.118:14342] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vuln.php"] [unique_id "aezYwrLLzhtkd-OXUgAaSQAAAFE"]
[Sat Apr 25 23:07:47.181351 2026] [:error] [pid 59898:tid 59955] [client 74.248.33.118:1275] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vuln.php"] [unique_id "aezYwx-4vImxb0kbdze-EwAAAME"]
[Sat Apr 25 23:07:47.751736 2026] [:error] [pid 59898:tid 59960] [client 74.248.33.118:14350] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vuln.php"] [unique_id "aezYwx-4vImxb0kbdze-FwAAAMY"]
[Sat Apr 25 23:07:48.311082 2026] [:error] [pid 59898:tid 59963] [client 74.248.33.118:26471] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-temp.php"] [unique_id "aezYxB-4vImxb0kbdze-GwAAAMk"]
[Sat Apr 25 23:07:48.870557 2026] [:error] [pid 59898:tid 59973] [client 74.248.33.118:1256] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-temp.php"] [unique_id "aezYxB-4vImxb0kbdze-HQAAANM"]
[Sat Apr 25 23:07:49.428316 2026] [:error] [pid 3212:tid 3217] [client 74.248.33.118:20145] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-temp.php"] [unique_id "aezYxfg-28TY8_YLtUdqCAAAAQM"]
[Sat Apr 25 23:07:49.961009 2026] [:error] [pid 59985:tid 60000] [client 74.248.33.118:1206] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-temp.php"] [unique_id "aezYxQF_zDvEhKvyTH7OfAAAAA0"]
[Sat Apr 25 23:07:50.494767 2026] [:error] [pid 3212:tid 3231] [client 74.248.33.118:1259] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "aezYxvg-28TY8_YLtUdqCwAAARE"]
[Sat Apr 25 23:07:51.029005 2026] [:error] [pid 3212:tid 3230] [client 74.248.33.118:1102] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "aezYx_g-28TY8_YLtUdqDgAAARA"]
[Sat Apr 25 23:07:51.564031 2026] [:error] [pid 3212:tid 3216] [client 74.248.33.118:20802] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "aezYx_g-28TY8_YLtUdqEQAAAQI"]
[Sat Apr 25 23:07:52.097811 2026] [:error] [pid 3212:tid 3227] [client 74.248.33.118:1191] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "aezYyPg-28TY8_YLtUdqFAAAAQ0"]
[Sat Apr 25 23:07:52.630888 2026] [:error] [pid 59985:tid 59996] [client 74.248.33.118:14392] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "aezYyAF_zDvEhKvyTH7OgQAAAAk"]
[Sat Apr 25 23:07:53.163447 2026] [:error] [pid 59985:tid 60007] [client 74.248.33.118:20840] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "aezYyQF_zDvEhKvyTH7OhQAAABQ"]
[Sat Apr 25 23:07:53.679494 2026] [:error] [pid 59897:tid 59941] [client 74.248.33.118:35690] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "aezYyfBrrkdzpEbmK4ecIgAAAI4"]
[Sat Apr 25 23:07:54.196166 2026] [:error] [pid 59897:tid 59936] [client 74.248.33.118:1101] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "aezYyvBrrkdzpEbmK4ecIwAAAIk"]
[Sat Apr 25 23:07:54.710752 2026] [:error] [pid 59985:tid 59987] [client 74.248.33.118:1221] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class-bda.php"] [unique_id "aezYygF_zDvEhKvyTH7OigAAAAA"]
[Sat Apr 25 23:07:55.274438 2026] [:error] [pid 59985:tid 60000] [client 74.248.33.118:47278] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class-bda.php"] [unique_id "aezYywF_zDvEhKvyTH7OjAAAAA0"]
[Sat Apr 25 23:07:55.813749 2026] [:error] [pid 59985:tid 59996] [client 74.248.33.118:1579] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class-bda.php"] [unique_id "aezYywF_zDvEhKvyTH7OkQAAAAk"]
[Sat Apr 25 23:07:56.344956 2026] [:error] [pid 3212:tid 3230] [client 74.248.33.118:35674] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class-bda.php"] [unique_id "aezYzPg-28TY8_YLtUdqIgAAARA"]
[Sat Apr 25 23:07:56.879146 2026] [:error] [pid 3212:tid 3238] [client 74.248.33.118:11159] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bhm.php"] [unique_id "aezYzPg-28TY8_YLtUdqIwAAARg"]
[Sat Apr 25 23:07:57.417183 2026] [:error] [pid 3212:tid 3235] [client 74.248.33.118:35704] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bhm.php"] [unique_id "aezYzfg-28TY8_YLtUdqKAAAARU"]
[Sat Apr 25 23:07:57.928169 2026] [:error] [pid 59898:tid 59954] [client 74.248.33.118:11189] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bhm.php"] [unique_id "aezYzR-4vImxb0kbdze-SAAAAMA"]
[Sat Apr 25 23:07:58.473367 2026] [:error] [pid 59896:tid 59908] [client 74.248.33.118:35682] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bhm.php"] [unique_id "aezYzrLLzhtkd-OXUgAaWQAAAEg"]
[Sat Apr 25 23:07:59.030949 2026] [:error] [pid 59897:tid 59933] [client 74.248.33.118:1552] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xmu.php"] [unique_id "aezYz_BrrkdzpEbmK4ecKgAAAIY"]
[Sat Apr 25 23:07:59.605657 2026] [:error] [pid 59896:tid 59917] [client 74.248.33.118:33040] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xmu.php"] [unique_id "aezYz7LLzhtkd-OXUgAaXAAAAFE"]
[Sat Apr 25 23:08:00.149523 2026] [:error] [pid 3212:tid 3237] [client 74.248.33.118:1157] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xmu.php"] [unique_id "aezY0Pg-28TY8_YLtUdqNwAAARc"]
[Sat Apr 25 23:08:00.670778 2026] [:error] [pid 3212:tid 3219] [client 74.248.33.118:1104] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xmu.php"] [unique_id "aezY0Pg-28TY8_YLtUdqOAAAAQU"]
[Sat Apr 25 23:08:01.185453 2026] [:error] [pid 59896:tid 59923] [client 74.248.33.118:35679] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ref.php"] [unique_id "aezY0bLLzhtkd-OXUgAaXwAAAFc"]
[Sat Apr 25 23:08:01.704057 2026] [:error] [pid 3212:tid 3215] [client 74.248.33.118:1170] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ref.php"] [unique_id "aezY0fg-28TY8_YLtUdqPAAAAQE"]
[Sat Apr 25 23:08:02.213337 2026] [:error] [pid 3212:tid 3217] [client 74.248.33.118:11173] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ref.php"] [unique_id "aezY0vg-28TY8_YLtUdqPgAAAQM"]
[Sat Apr 25 23:08:02.728205 2026] [:error] [pid 3212:tid 3230] [client 74.248.33.118:11138] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ref.php"] [unique_id "aezY0vg-28TY8_YLtUdqQwAAARA"]
[Sat Apr 25 23:08:03.244089 2026] [:error] [pid 3212:tid 3224] [client 74.248.33.118:1194] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-xme.php"] [unique_id "aezY0_g-28TY8_YLtUdqRAAAAQo"]
[Sat Apr 25 23:08:03.780625 2026] [:error] [pid 59898:tid 59971] [client 74.248.33.118:1541] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-xme.php"] [unique_id "aezY0x-4vImxb0kbdze-aAAAANE"]
[Sat Apr 25 23:08:04.348970 2026] [:error] [pid 3212:tid 3235] [client 74.248.33.118:14365] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-xme.php"] [unique_id "aezY1Pg-28TY8_YLtUdqSgAAARU"]
[Sat Apr 25 23:08:04.892396 2026] [:error] [pid 3212:tid 3221] [client 74.248.33.118:1095] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-xme.php"] [unique_id "aezY1Pg-28TY8_YLtUdqTQAAAQc"]
[Sat Apr 25 23:08:05.456851 2026] [:error] [pid 3212:tid 3233] [client 74.248.33.118:35686] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/adminer.php"] [unique_id "aezY1fg-28TY8_YLtUdqTwAAARM"]
[Sat Apr 25 23:08:06.004589 2026] [:error] [pid 59898:tid 59967] [client 74.248.33.118:33059] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/adminer.php"] [unique_id "aezY1h-4vImxb0kbdze-ewAAAM0"]
[Sat Apr 25 23:08:06.516920 2026] [:error] [pid 3212:tid 3224] [client 74.248.33.118:33084] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/adminer.php"] [unique_id "aezY1vg-28TY8_YLtUdqVQAAAQo"]
[Sat Apr 25 23:08:07.033548 2026] [:error] [pid 59896:tid 59919] [client 74.248.33.118:21668] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/adminer.php"] [unique_id "aezY17LLzhtkd-OXUgAaYgAAAFM"]
[Sat Apr 25 23:08:07.546177 2026] [:error] [pid 59897:tid 59927] [client 74.248.33.118:26494] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ktfow.php"] [unique_id "aezY1_BrrkdzpEbmK4ecSAAAAIA"]
[Sat Apr 25 23:08:08.055985 2026] [:error] [pid 59985:tid 60007] [client 74.248.33.118:37512] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ktfow.php"] [unique_id "aezY2AF_zDvEhKvyTH7OngAAABQ"]
[Sat Apr 25 23:08:08.614172 2026] [:error] [pid 3212:tid 3223] [client 74.248.33.118:33054] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ktfow.php"] [unique_id "aezY2Pg-28TY8_YLtUdqWwAAAQk"]
[Sat Apr 25 23:08:09.148095 2026] [:error] [pid 3212:tid 3221] [client 74.248.33.118:10526] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ktfow.php"] [unique_id "aezY2fg-28TY8_YLtUdqXQAAAQc"]
[Sat Apr 25 23:08:09.682432 2026] [:error] [pid 59985:tid 59998] [client 74.248.33.118:37544] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mode.php"] [unique_id "aezY2QF_zDvEhKvyTH7OogAAAAs"]
[Sat Apr 25 23:08:10.217057 2026] [:error] [pid 3212:tid 3225] [client 74.248.33.118:21684] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mode.php"] [unique_id "aezY2vg-28TY8_YLtUdqYgAAAQs"]
[Sat Apr 25 23:08:10.788088 2026] [:error] [pid 3212:tid 3229] [client 74.248.33.118:37282] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mode.php"] [unique_id "aezY2vg-28TY8_YLtUdqZQAAAQ8"]
[Sat Apr 25 23:08:11.322351 2026] [:error] [pid 59985:tid 60004] [client 74.248.33.118:21693] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mode.php"] [unique_id "aezY2wF_zDvEhKvyTH7OowAAABE"]
[Sat Apr 25 23:08:11.830399 2026] [:error] [pid 59896:tid 59918] [client 74.248.33.118:21640] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2468.php"] [unique_id "aezY27LLzhtkd-OXUgAaaQAAAFI"]
[Sat Apr 25 23:08:12.364851 2026] [:error] [pid 59896:tid 59917] [client 74.248.33.118:20813] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2468.php"] [unique_id "aezY3LLLzhtkd-OXUgAaawAAAFE"]
[Sat Apr 25 23:08:12.923982 2026] [:error] [pid 59896:tid 59914] [client 74.248.33.118:1241] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2468.php"] [unique_id "aezY3LLLzhtkd-OXUgAabgAAAE4"]
[Sat Apr 25 23:08:13.458265 2026] [:error] [pid 59896:tid 59910] [client 74.248.33.118:21639] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2468.php"] [unique_id "aezY3bLLzhtkd-OXUgAacAAAAEo"]
[Sat Apr 25 23:08:13.966093 2026] [:error] [pid 3212:tid 3219] [client 74.248.33.118:14389] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aezY3fg-28TY8_YLtUdqbgAAAQU"]
[Sat Apr 25 23:08:14.474736 2026] [:error] [pid 59985:tid 59999] [client 74.248.33.118:1218] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aezY3gF_zDvEhKvyTH7OpgAAAAw"]
[Sat Apr 25 23:08:15.009679 2026] [:error] [pid 59985:tid 60011] [client 74.248.33.118:21669] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aezY3wF_zDvEhKvyTH7OqgAAABg"]
[Sat Apr 25 23:08:15.578514 2026] [:error] [pid 3212:tid 3224] [client 74.248.33.118:37262] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aezY3_g-28TY8_YLtUdqcwAAAQo"]
[Sat Apr 25 23:08:16.134598 2026] [proxy_fcgi:error] [pid 59985:tid 59987] [client 74.248.33.118:37252] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 23:08:16.394843 2026] [proxy_fcgi:error] [pid 59985:tid 59988] [client 74.248.33.118:37252] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 23:08:16.652548 2026] [proxy_fcgi:error] [pid 59985:tid 59992] [client 74.248.33.118:37252] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 23:08:16.912492 2026] [proxy_fcgi:error] [pid 59985:tid 60002] [client 74.248.33.118:37252] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 23:08:17.766587 2026] [proxy_fcgi:error] [pid 59985:tid 59989] [client 74.248.33.118:37252] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 23:08:18.026770 2026] [proxy_fcgi:error] [pid 59985:tid 60003] [client 74.248.33.118:37252] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 23:08:18.288034 2026] [proxy_fcgi:error] [pid 59985:tid 59995] [client 74.248.33.118:37252] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 23:08:18.548867 2026] [proxy_fcgi:error] [pid 59985:tid 60004] [client 74.248.33.118:37252] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 23:08:18.809743 2026] [proxy_fcgi:error] [pid 59985:tid 59990] [client 74.248.33.118:37252] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 23:08:19.065942 2026] [proxy_fcgi:error] [pid 59985:tid 59999] [client 74.248.33.118:37252] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 23:08:19.326698 2026] [proxy_fcgi:error] [pid 59985:tid 59997] [client 74.248.33.118:37252] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 23:08:19.580840 2026] [:error] [pid 59985:tid 59994] [client 74.248.33.118:37252] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/popo.php"] [unique_id "aezY4wF_zDvEhKvyTH7OuQAAAAc"]
[Sat Apr 25 23:08:20.118344 2026] [:error] [pid 59898:tid 59967] [client 74.248.33.118:20838] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/popo.php"] [unique_id "aezY5B-4vImxb0kbdze-uwAAAM0"]
[Sat Apr 25 23:08:20.657231 2026] [:error] [pid 59896:tid 59918] [client 74.248.33.118:37270] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/popo.php"] [unique_id "aezY5LLLzhtkd-OXUgAaegAAAFI"]
[Sat Apr 25 23:08:21.167137 2026] [:error] [pid 3212:tid 3236] [client 74.248.33.118:37562] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/popo.php"] [unique_id "aezY5fg-28TY8_YLtUdqigAAARY"]
[Sat Apr 25 23:08:21.719968 2026] [:error] [pid 3212:tid 3235] [client 74.248.33.118:1171] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/13.php"] [unique_id "aezY5fg-28TY8_YLtUdqjQAAARU"]
[Sat Apr 25 23:08:22.260693 2026] [:error] [pid 59898:tid 59955] [client 74.248.33.118:33078] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/13.php"] [unique_id "aezY5h-4vImxb0kbdze-xgAAAME"]
[Sat Apr 25 23:08:22.778448 2026] [:error] [pid 59897:tid 59929] [client 74.248.33.118:1215] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/13.php"] [unique_id "aezY5vBrrkdzpEbmK4ecVAAAAII"]
[Sat Apr 25 23:08:23.314302 2026] [:error] [pid 59898:tid 59966] [client 74.248.33.118:1272] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/13.php"] [unique_id "aezY5x-4vImxb0kbdze-ywAAAMw"]
[Sat Apr 25 23:08:23.827432 2026] [:error] [pid 59898:tid 59971] [client 74.248.33.118:37546] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/11.php"] [unique_id "aezY5x-4vImxb0kbdze-0QAAANE"]
[Sat Apr 25 23:08:24.355794 2026] [:error] [pid 3212:tid 3231] [client 74.248.33.118:1189] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/11.php"] [unique_id "aezY6Pg-28TY8_YLtUdqlwAAARE"]
[Sat Apr 25 23:08:24.892804 2026] [:error] [pid 59985:tid 60002] [client 74.248.33.118:11171] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/11.php"] [unique_id "aezY6AF_zDvEhKvyTH7OvwAAAA8"]
[Sat Apr 25 23:08:25.539894 2026] [:error] [pid 59985:tid 59989] [client 74.248.33.118:21667] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/11.php"] [unique_id "aezY6QF_zDvEhKvyTH7OwAAAAAI"]
[Sat Apr 25 23:08:26.145808 2026] [:error] [pid 59985:tid 60005] [client 74.248.33.118:47127] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/p.php"] [unique_id "aezY6gF_zDvEhKvyTH7OwgAAABI"]
[Sat Apr 25 23:08:26.682148 2026] [:error] [pid 59897:tid 59934] [client 74.248.33.118:14397] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/p.php"] [unique_id "aezY6vBrrkdzpEbmK4ecXAAAAIc"]
[Sat Apr 25 23:08:27.230657 2026] [:error] [pid 3212:tid 3233] [client 74.248.33.118:49294] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/p.php"] [unique_id "aezY6_g-28TY8_YLtUdqnQAAARM"]
[Sat Apr 25 23:08:27.779687 2026] [:error] [pid 59896:tid 59924] [client 74.248.33.118:47104] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/p.php"] [unique_id "aezY67LLzhtkd-OXUgAahgAAAFg"]
[Sat Apr 25 23:08:28.308559 2026] [:error] [pid 59985:tid 59995] [client 74.248.33.118:37272] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Requests/"] [unique_id "aezY7AF_zDvEhKvyTH7OxQAAAAg"]
[Sat Apr 25 23:08:28.854185 2026] [:error] [pid 59985:tid 59990] [client 74.248.33.118:1208] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Requests/"] [unique_id "aezY7AF_zDvEhKvyTH7OyAAAAAM"]
[Sat Apr 25 23:08:29.426889 2026] [:error] [pid 3212:tid 3229] [client 74.248.33.118:37266] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Requests/"] [unique_id "aezY7fg-28TY8_YLtUdqoQAAAQ8"]
[Sat Apr 25 23:08:30.011161 2026] [:error] [pid 59985:tid 60011] [client 74.248.33.118:1032] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Requests/"] [unique_id "aezY7gF_zDvEhKvyTH7OzAAAABg"]
[Sat Apr 25 23:08:30.591998 2026] [:error] [pid 59985:tid 59988] [client 74.248.33.118:49299] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bthil.php"] [unique_id "aezY7gF_zDvEhKvyTH7OzwAAAAE"]
[Sat Apr 25 23:08:31.169803 2026] [:error] [pid 59897:tid 59949] [client 74.248.33.118:37543] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bthil.php"] [unique_id "aezY7_BrrkdzpEbmK4ecXwAAAJY"]
[Sat Apr 25 23:08:31.789727 2026] [:error] [pid 3212:tid 3232] [client 74.248.33.118:47167] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bthil.php"] [unique_id "aezY7_g-28TY8_YLtUdqrQAAARI"]
[Sat Apr 25 23:08:32.323980 2026] [:error] [pid 59897:tid 59935] [client 74.248.33.118:14387] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bthil.php"] [unique_id "aezY8PBrrkdzpEbmK4ecZAAAAIg"]
[Sat Apr 25 23:08:32.835848 2026] [:error] [pid 3212:tid 3236] [client 74.248.33.118:21634] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/shell.php"] [unique_id "aezY8Pg-28TY8_YLtUdqsAAAARY"]
[Sat Apr 25 23:08:33.369338 2026] [:error] [pid 59897:tid 59929] [client 74.248.33.118:1224] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/shell.php"] [unique_id "aezY8fBrrkdzpEbmK4ecZQAAAII"]
[Sat Apr 25 23:08:33.940231 2026] [:error] [pid 59897:tid 59951] [client 74.248.33.118:12745] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/shell.php"] [unique_id "aezY8fBrrkdzpEbmK4ecZgAAAJg"]
[Sat Apr 25 23:08:34.569516 2026] [:error] [pid 59896:tid 59911] [client 74.248.33.118:1053] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/shell.php"] [unique_id "aezY8rLLzhtkd-OXUgAamwAAAEs"]
[Sat Apr 25 23:08:35.131842 2026] [:error] [pid 3212:tid 3216] [client 74.248.33.118:1213] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/seo.php"] [unique_id "aezY8_g-28TY8_YLtUdqtQAAAQI"]
[Sat Apr 25 23:08:35.678187 2026] [:error] [pid 3212:tid 3229] [client 74.248.33.118:49293] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/seo.php"] [unique_id "aezY8_g-28TY8_YLtUdqtwAAAQ8"]
[Sat Apr 25 23:08:36.198144 2026] [:error] [pid 59897:tid 59945] [client 74.248.33.118:37251] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/seo.php"] [unique_id "aezY9PBrrkdzpEbmK4ecaAAAAJI"]
[Sat Apr 25 23:08:36.727442 2026] [:error] [pid 59896:tid 59901] [client 74.248.33.118:21651] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/seo.php"] [unique_id "aezY9LLLzhtkd-OXUgAanwAAAEE"]
[Sat Apr 25 23:08:37.303706 2026] [:error] [pid 3212:tid 3223] [client 74.248.33.118:16377] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/7.php"] [unique_id "aezY9fg-28TY8_YLtUdqwAAAAQk"]
[Sat Apr 25 23:08:37.863115 2026] [:error] [pid 3212:tid 3236] [client 74.248.33.118:14383] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/7.php"] [unique_id "aezY9fg-28TY8_YLtUdqwwAAARY"]
[Sat Apr 25 23:08:38.435823 2026] [:error] [pid 59896:tid 59912] [client 74.248.33.118:12782] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/7.php"] [unique_id "aezY9rLLzhtkd-OXUgAaoQAAAEw"]
[Sat Apr 25 23:08:38.994155 2026] [:error] [pid 3212:tid 3225] [client 74.248.33.118:12746] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/7.php"] [unique_id "aezY9vg-28TY8_YLtUdqxgAAAQs"]
[Sat Apr 25 23:08:39.560707 2026] [:error] [pid 59896:tid 59916] [client 74.248.33.118:37522] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/8.php"] [unique_id "aezY97LLzhtkd-OXUgAaogAAAFA"]
[Sat Apr 25 23:08:40.118722 2026] [:error] [pid 59896:tid 59918] [client 74.248.33.118:16366] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/8.php"] [unique_id "aezY-LLLzhtkd-OXUgAapQAAAFI"]
[Sat Apr 25 23:08:40.695051 2026] [:error] [pid 59898:tid 59964] [client 74.248.33.118:21655] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/8.php"] [unique_id "aezY-B-4vImxb0kbdze-8QAAAMo"]
[Sat Apr 25 23:08:41.270411 2026] [:error] [pid 59896:tid 59901] [client 74.248.33.118:21654] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/8.php"] [unique_id "aezY-bLLzhtkd-OXUgAaqwAAAEE"]
[Sat Apr 25 23:08:41.805489 2026] [:error] [pid 59897:tid 59931] [client 74.248.33.118:37565] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/1.php"] [unique_id "aezY-fBrrkdzpEbmK4ecbwAAAIQ"]
[Sat Apr 25 23:08:42.340401 2026] [:error] [pid 59898:tid 59960] [client 74.248.33.118:1037] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/1.php"] [unique_id "aezY-h-4vImxb0kbdze-8wAAAMY"]
[Sat Apr 25 23:08:42.898609 2026] [:error] [pid 59896:tid 59916] [client 74.248.33.118:1070] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/1.php"] [unique_id "aezY-rLLzhtkd-OXUgAargAAAFA"]
[Sat Apr 25 23:08:43.461021 2026] [:error] [pid 59897:tid 59944] [client 74.248.33.118:49315] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/1.php"] [unique_id "aezY-_BrrkdzpEbmK4eccQAAAJE"]
[Sat Apr 25 23:08:43.979009 2026] [:error] [pid 3212:tid 3227] [client 74.248.33.118:14399] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2.php"] [unique_id "aezY-_g-28TY8_YLtUdqzQAAAQ0"]
[Sat Apr 25 23:08:44.521783 2026] [:error] [pid 59896:tid 59900] [client 74.248.33.118:49311] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2.php"] [unique_id "aezY_LLLzhtkd-OXUgAarwAAAEA"]
[Sat Apr 25 23:08:45.060221 2026] [:error] [pid 59897:tid 59951] [client 74.248.33.118:12797] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2.php"] [unique_id "aezY_fBrrkdzpEbmK4ecdAAAAJg"]
[Sat Apr 25 23:08:45.608750 2026] [:error] [pid 59897:tid 59930] [client 74.248.33.118:1066] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2.php"] [unique_id "aezY_fBrrkdzpEbmK4ecdgAAAIM"]
[Sat Apr 25 23:08:46.174640 2026] [:error] [pid 59898:tid 59971] [client 74.248.33.118:21672] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/3.php"] [unique_id "aezY_h-4vImxb0kbdze-9wAAANE"]
[Sat Apr 25 23:08:46.685822 2026] [:error] [pid 3212:tid 3237] [client 74.248.33.118:47108] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/3.php"] [unique_id "aezY_vg-28TY8_YLtUdq0gAAARc"]
[Sat Apr 25 23:08:47.195432 2026] [:error] [pid 3212:tid 3219] [client 74.248.33.118:1587] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/3.php"] [unique_id "aezY__g-28TY8_YLtUdq1QAAAQU"]
[Sat Apr 25 23:08:47.709996 2026] [:error] [pid 3212:tid 3218] [client 74.248.33.118:1042] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/3.php"] [unique_id "aezY__g-28TY8_YLtUdq2gAAAQQ"]
[Sat Apr 25 23:08:48.219455 2026] [:error] [pid 59985:tid 59992] [client 74.248.33.118:14353] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/4.php"] [unique_id "aezZAAF_zDvEhKvyTH7O8QAAAAU"]
[Sat Apr 25 23:08:48.737959 2026] [:error] [pid 59896:tid 59922] [client 74.248.33.118:10551] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/4.php"] [unique_id "aezZALLLzhtkd-OXUgAatwAAAFY"]
[Sat Apr 25 23:08:49.248039 2026] [:error] [pid 59896:tid 59914] [client 74.248.33.118:37279] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/4.php"] [unique_id "aezZAbLLzhtkd-OXUgAauQAAAE4"]
[Sat Apr 25 23:08:49.802189 2026] [:error] [pid 3212:tid 3231] [client 74.248.33.118:12799] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/4.php"] [unique_id "aezZAfg-28TY8_YLtUdq5AAAARE"]
[Sat Apr 25 23:08:50.368451 2026] [:error] [pid 59897:tid 59934] [client 74.248.33.118:21644] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/5.php"] [unique_id "aezZAvBrrkdzpEbmK4ecfAAAAIc"]
[Sat Apr 25 23:08:50.927499 2026] [:error] [pid 59896:tid 59903] [client 74.248.33.118:16375] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/5.php"] [unique_id "aezZArLLzhtkd-OXUgAaugAAAEM"]
[Sat Apr 25 23:08:51.473194 2026] [:error] [pid 59896:tid 59905] [client 74.248.33.118:49342] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/5.php"] [unique_id "aezZA7LLzhtkd-OXUgAauwAAAEU"]
[Sat Apr 25 23:08:51.984912 2026] [:error] [pid 59896:tid 59924] [client 74.248.33.118:14337] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/5.php"] [unique_id "aezZA7LLzhtkd-OXUgAavwAAAFg"]
[Sat Apr 25 23:08:52.500811 2026] [:error] [pid 3212:tid 3214] [client 74.248.33.118:47111] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/6.php"] [unique_id "aezZBPg-28TY8_YLtUdq9QAAAQA"]
[Sat Apr 25 23:08:53.025199 2026] [:error] [pid 3212:tid 3218] [client 74.248.33.118:12774] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/6.php"] [unique_id "aezZBfg-28TY8_YLtUdq-wAAAQQ"]
[Sat Apr 25 23:08:53.568664 2026] [:error] [pid 59985:tid 60005] [client 74.248.33.118:37509] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/6.php"] [unique_id "aezZBQF_zDvEhKvyTH7O9QAAABI"]
[Sat Apr 25 23:08:54.107911 2026] [:error] [pid 59985:tid 60003] [client 74.248.33.118:21638] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/6.php"] [unique_id "aezZBgF_zDvEhKvyTH7O-QAAABA"]
[Sat Apr 25 23:08:54.671663 2026] [:error] [pid 3212:tid 3230] [client 74.248.33.118:47141] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/9.php"] [unique_id "aezZBvg-28TY8_YLtUdq_gAAARA"]
[Sat Apr 25 23:08:55.245594 2026] [:error] [pid 59897:tid 59935] [client 74.248.33.118:37256] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/9.php"] [unique_id "aezZB_BrrkdzpEbmK4ecgAAAAIg"]
[Sat Apr 25 23:08:55.792210 2026] [:error] [pid 3212:tid 3232] [client 74.248.33.118:37538] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/9.php"] [unique_id "aezZB_g-28TY8_YLtUdrAwAAARI"]
[Sat Apr 25 23:08:56.338059 2026] [:error] [pid 3212:tid 3219] [client 74.248.33.118:21662] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/9.php"] [unique_id "aezZCPg-28TY8_YLtUdrBwAAAQU"]
[Sat Apr 25 23:08:56.872139 2026] [:error] [pid 3212:tid 3229] [client 74.248.33.118:1052] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/10.php"] [unique_id "aezZCPg-28TY8_YLtUdrDwAAAQ8"]
[Sat Apr 25 23:08:57.391624 2026] [:error] [pid 59897:tid 59930] [client 74.248.33.118:21685] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/10.php"] [unique_id "aezZCfBrrkdzpEbmK4echQAAAIM"]
[Sat Apr 25 23:08:57.902011 2026] [:error] [pid 3212:tid 3235] [client 74.248.33.118:21679] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/10.php"] [unique_id "aezZCfg-28TY8_YLtUdrGAAAARU"]
[Sat Apr 25 23:08:58.426160 2026] [:error] [pid 3212:tid 3221] [client 74.248.33.118:37529] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/10.php"] [unique_id "aezZCvg-28TY8_YLtUdrGwAAAQc"]
[Sat Apr 25 23:08:58.943444 2026] [:error] [pid 3212:tid 3222] [client 74.248.33.118:12747] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/100.php"] [unique_id "aezZCvg-28TY8_YLtUdrHQAAAQg"]
[Sat Apr 25 23:08:59.485888 2026] [:error] [pid 3212:tid 3226] [client 74.248.33.118:35706] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/100.php"] [unique_id "aezZC_g-28TY8_YLtUdrJAAAAQw"]
[Sat Apr 25 23:09:00.033232 2026] [:error] [pid 59897:tid 59941] [client 74.248.33.118:49339] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/100.php"] [unique_id "aezZDPBrrkdzpEbmK4eciQAAAI4"]
[Sat Apr 25 23:09:00.562639 2026] [:error] [pid 3212:tid 3237] [client 74.248.33.118:37258] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/100.php"] [unique_id "aezZDPg-28TY8_YLtUdrJgAAARc"]
[Sat Apr 25 23:09:01.086650 2026] [:error] [pid 3212:tid 3234] [client 74.248.33.118:16350] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/nastar.php"] [unique_id "aezZDfg-28TY8_YLtUdrKgAAARQ"]
[Sat Apr 25 23:09:01.639582 2026] [:error] [pid 59897:tid 59936] [client 74.248.33.118:12760] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/nastar.php"] [unique_id "aezZDfBrrkdzpEbmK4ecigAAAIk"]
[Sat Apr 25 23:09:02.213773 2026] [:error] [pid 3212:tid 3225] [client 74.248.33.118:35659] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/nastar.php"] [unique_id "aezZDvg-28TY8_YLtUdrMQAAAQs"]
[Sat Apr 25 23:09:02.768512 2026] [:error] [pid 59896:tid 59914] [client 74.248.33.118:1257] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/nastar.php"] [unique_id "aezZDrLLzhtkd-OXUgAaxwAAAE4"]
[Sat Apr 25 23:09:03.280726 2026] [:error] [pid 3212:tid 3228] [client 74.248.33.118:1058] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2026w.php"] [unique_id "aezZD_g-28TY8_YLtUdrNwAAAQ4"]
[Sat Apr 25 23:09:03.805446 2026] [:error] [pid 59897:tid 59939] [client 74.248.33.118:37550] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2026w.php"] [unique_id "aezZD_BrrkdzpEbmK4eciwAAAIw"]
[Sat Apr 25 23:09:04.316326 2026] [:error] [pid 59897:tid 59931] [client 74.248.33.118:12771] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2026w.php"] [unique_id "aezZEPBrrkdzpEbmK4ecjAAAAIQ"]
[Sat Apr 25 23:09:04.825337 2026] [:error] [pid 3212:tid 3215] [client 74.248.33.118:37274] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2026w.php"] [unique_id "aezZEPg-28TY8_YLtUdrRwAAAQE"]
[Sat Apr 25 23:09:05.370646 2026] [:error] [pid 59897:tid 59928] [client 74.248.33.118:37296] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xwpg.php"] [unique_id "aezZEfBrrkdzpEbmK4ecjQAAAIE"]
[Sat Apr 25 23:09:05.950970 2026] [:error] [pid 59898:tid 59969] [client 74.248.33.118:37303] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xwpg.php"] [unique_id "aezZER-4vImxb0kbdze_AQAAAM8"]
[Sat Apr 25 23:09:06.513919 2026] [:error] [pid 59897:tid 59949] [client 74.248.33.118:47118] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xwpg.php"] [unique_id "aezZEvBrrkdzpEbmK4eckAAAAJY"]
[Sat Apr 25 23:09:07.083407 2026] [:error] [pid 59896:tid 59913] [client 74.248.33.118:49330] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xwpg.php"] [unique_id "aezZE7LLzhtkd-OXUgAa0QAAAE0"]
[Sat Apr 25 23:09:07.628575 2026] [:error] [pid 59896:tid 59911] [client 74.248.33.118:21660] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ass.php"] [unique_id "aezZE7LLzhtkd-OXUgAa1AAAAEs"]
[Sat Apr 25 23:09:08.168283 2026] [:error] [pid 59898:tid 59967] [client 74.248.33.118:21674] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ass.php"] [unique_id "aezZFB-4vImxb0kbdze_BQAAAM0"]
[Sat Apr 25 23:09:08.735539 2026] [:error] [pid 59896:tid 59914] [client 74.248.33.118:16353] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ass.php"] [unique_id "aezZFLLLzhtkd-OXUgAa2gAAAE4"]
[Sat Apr 25 23:09:09.260692 2026] [:error] [pid 59896:tid 59912] [client 74.248.33.118:37507] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ass.php"] [unique_id "aezZFbLLzhtkd-OXUgAa2wAAAEw"]
[Sat Apr 25 23:09:09.790697 2026] [:error] [pid 3212:tid 3214] [client 74.248.33.118:1211] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/about.php"] [unique_id "aezZFfg-28TY8_YLtUdrVQAAAQA"]
[Sat Apr 25 23:09:10.343812 2026] [:error] [pid 3212:tid 3235] [client 74.248.33.118:12781] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/about.php"] [unique_id "aezZFvg-28TY8_YLtUdrVwAAARU"]
[Sat Apr 25 23:09:10.888757 2026] [:error] [pid 3212:tid 3238] [client 74.248.33.118:37271] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/about.php"] [unique_id "aezZFvg-28TY8_YLtUdrXQAAARg"]
[Sat Apr 25 23:09:11.429167 2026] [:error] [pid 59898:tid 59970] [client 74.248.33.118:1233] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/about.php"] [unique_id "aezZFx-4vImxb0kbdze_BgAAANA"]
[Sat Apr 25 23:09:11.962888 2026] [:error] [pid 3212:tid 3226] [client 74.248.33.118:37269] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/no18.php"] [unique_id "aezZF_g-28TY8_YLtUdrYgAAAQw"]
[Sat Apr 25 23:09:12.497476 2026] [:error] [pid 59985:tid 59992] [client 74.248.33.118:37275] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/no18.php"] [unique_id "aezZGAF_zDvEhKvyTH7PFgAAAAU"]
[Sat Apr 25 23:09:13.014567 2026] [:error] [pid 3212:tid 3223] [client 74.248.33.118:21664] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/no18.php"] [unique_id "aezZGfg-28TY8_YLtUdragAAAQk"]
[Sat Apr 25 23:09:13.544027 2026] [:error] [pid 59896:tid 59913] [client 74.248.33.118:1155] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/no18.php"] [unique_id "aezZGbLLzhtkd-OXUgAa4AAAAE0"]
[Sat Apr 25 23:09:14.071560 2026] [:error] [pid 3212:tid 3232] [client 74.248.33.118:14375] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fine.php"] [unique_id "aezZGvg-28TY8_YLtUdrbAAAARI"]
[Sat Apr 25 23:09:14.638434 2026] [:error] [pid 59897:tid 59943] [client 74.248.33.118:1212] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fine.php"] [unique_id "aezZGvBrrkdzpEbmK4ecmQAAAJA"]
[Sat Apr 25 23:09:15.179000 2026] [:error] [pid 3212:tid 3228] [client 74.248.33.118:21695] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fine.php"] [unique_id "aezZG_g-28TY8_YLtUdrdwAAAQ4"]
[Sat Apr 25 23:09:15.742134 2026] [:error] [pid 3212:tid 3230] [client 74.248.33.118:37263] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fine.php"] [unique_id "aezZG_g-28TY8_YLtUdrewAAARA"]
[Sat Apr 25 23:09:16.307282 2026] [:error] [pid 3212:tid 3226] [client 74.248.33.118:33039] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hplfuns.php"] [unique_id "aezZHPg-28TY8_YLtUdrhQAAAQw"]
[Sat Apr 25 23:09:16.841176 2026] [:error] [pid 3212:tid 3215] [client 74.248.33.118:14373] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hplfuns.php"] [unique_id "aezZHPg-28TY8_YLtUdriQAAAQE"]
[Sat Apr 25 23:09:17.386444 2026] [:error] [pid 3212:tid 3230] [client 74.248.33.118:47166] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hplfuns.php"] [unique_id "aezZHfg-28TY8_YLtUdrjAAAARA"]
[Sat Apr 25 23:09:17.948845 2026] [:error] [pid 3212:tid 3224] [client 74.248.33.118:37504] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hplfuns.php"] [unique_id "aezZHfg-28TY8_YLtUdrkAAAAQo"]
[Sat Apr 25 23:09:18.523570 2026] [:error] [pid 3212:tid 3236] [client 74.248.33.118:47158] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xa.php"] [unique_id "aezZHvg-28TY8_YLtUdrkgAAARY"]
[Sat Apr 25 23:09:19.046172 2026] [proxy_fcgi:error] [pid 59985:tid 60010] [client 74.248.33.118:16370] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 23:09:19.306354 2026] [proxy_fcgi:error] [pid 59985:tid 59994] [client 74.248.33.118:16370] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 23:09:19.564926 2026] [proxy_fcgi:error] [pid 59985:tid 60006] [client 74.248.33.118:16370] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 23:09:19.824342 2026] [proxy_fcgi:error] [pid 59985:tid 59988] [client 74.248.33.118:16370] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 23:09:20.082761 2026] [proxy_fcgi:error] [pid 59985:tid 59991] [client 74.248.33.118:16370] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 23:09:20.341756 2026] [proxy_fcgi:error] [pid 59985:tid 60007] [client 74.248.33.118:16370] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 23:09:20.600640 2026] [proxy_fcgi:error] [pid 59985:tid 60001] [client 74.248.33.118:16370] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 23:09:20.859554 2026] [proxy_fcgi:error] [pid 59985:tid 60003] [client 74.248.33.118:16370] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 23:09:21.118797 2026] [proxy_fcgi:error] [pid 59985:tid 60005] [client 74.248.33.118:16370] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 23:09:21.377609 2026] [proxy_fcgi:error] [pid 59985:tid 60000] [client 74.248.33.118:16370] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 23:09:21.890631 2026] [:error] [pid 59985:tid 59993] [client 74.248.33.118:16370] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/66.php"] [unique_id "aezZIQF_zDvEhKvyTH7PLQAAAAY"]
[Sat Apr 25 23:09:22.448043 2026] [:error] [pid 59896:tid 59918] [client 74.248.33.118:37287] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/66.php"] [unique_id "aezZIrLLzhtkd-OXUgAa5wAAAFI"]
[Sat Apr 25 23:09:22.985609 2026] [:error] [pid 59985:tid 59995] [client 74.248.33.118:49337] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/66.php"] [unique_id "aezZIgF_zDvEhKvyTH7PMQAAAAg"]
[Sat Apr 25 23:09:23.500504 2026] [:error] [pid 59898:tid 59977] [client 74.248.33.118:1034] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/66.php"] [unique_id "aezZIx-4vImxb0kbdze_DAAAANc"]
[Sat Apr 25 23:09:24.046121 2026] [:error] [pid 59985:tid 60010] [client 74.248.33.118:12753] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a5.php"] [unique_id "aezZJAF_zDvEhKvyTH7PMgAAABc"]
[Sat Apr 25 23:09:24.604945 2026] [:error] [pid 59896:tid 59908] [client 74.248.33.118:14357] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a5.php"] [unique_id "aezZJLLLzhtkd-OXUgAa6QAAAEg"]
[Sat Apr 25 23:09:25.165256 2026] [:error] [pid 3212:tid 3234] [client 74.248.33.118:14361] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a5.php"] [unique_id "aezZJfg-28TY8_YLtUdrowAAARQ"]
[Sat Apr 25 23:09:25.713662 2026] [:error] [pid 3212:tid 3237] [client 74.248.33.118:14012] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a5.php"] [unique_id "aezZJfg-28TY8_YLtUdrqAAAARc"]
[Sat Apr 25 23:09:26.237450 2026] [:error] [pid 3212:tid 3228] [client 74.248.33.118:20805] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ol.php"] [unique_id "aezZJvg-28TY8_YLtUdrrAAAAQ4"]
[Sat Apr 25 23:09:26.766096 2026] [:error] [pid 3212:tid 3218] [client 74.248.33.118:1192] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ol.php"] [unique_id "aezZJvg-28TY8_YLtUdrrgAAAQQ"]
[Sat Apr 25 23:09:27.303691 2026] [:error] [pid 59896:tid 59905] [client 74.248.33.118:37506] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ol.php"] [unique_id "aezZJ7LLzhtkd-OXUgAa7AAAAEU"]
[Sat Apr 25 23:09:27.861331 2026] [:error] [pid 3212:tid 3235] [client 74.248.33.118:14394] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ol.php"] [unique_id "aezZJ_g-28TY8_YLtUdrtAAAARU"]
[Sat Apr 25 23:09:28.401618 2026] [:error] [pid 3212:tid 3234] [client 74.248.33.118:14368] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f6.php"] [unique_id "aezZKPg-28TY8_YLtUdruQAAARQ"]
[Sat Apr 25 23:09:28.936565 2026] [:error] [pid 3212:tid 3221] [client 74.248.33.118:14349] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f6.php"] [unique_id "aezZKPg-28TY8_YLtUdrvAAAAQc"]
[Sat Apr 25 23:09:29.481193 2026] [:error] [pid 59985:tid 59991] [client 74.248.33.118:21687] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f6.php"] [unique_id "aezZKQF_zDvEhKvyTH7PNQAAAAQ"]
[Sat Apr 25 23:09:29.991091 2026] [:error] [pid 59897:tid 59933] [client 74.248.33.118:14388] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f6.php"] [unique_id "aezZKfBrrkdzpEbmK4ecogAAAIY"]
[Sat Apr 25 23:09:30.529031 2026] [:error] [pid 59896:tid 59924] [client 74.248.33.118:21682] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/inputs.php"] [unique_id "aezZKrLLzhtkd-OXUgAa7QAAAFg"]
[Sat Apr 25 23:09:31.062576 2026] [:error] [pid 59897:tid 59929] [client 74.248.33.118:16322] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/inputs.php"] [unique_id "aezZK_BrrkdzpEbmK4ecpAAAAII"]
[Sat Apr 25 23:09:31.601360 2026] [:error] [pid 59896:tid 59909] [client 74.248.33.118:1051] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/inputs.php"] [unique_id "aezZK7LLzhtkd-OXUgAa7wAAAEk"]
[Sat Apr 25 23:09:32.135102 2026] [:error] [pid 3212:tid 3235] [client 74.248.33.118:12737] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/inputs.php"] [unique_id "aezZLPg-28TY8_YLtUdrxwAAARU"]
[Sat Apr 25 23:09:32.669926 2026] [:error] [pid 59896:tid 59916] [client 74.248.33.118:1178] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/style.php"] [unique_id "aezZLLLLzhtkd-OXUgAa8QAAAFA"]
[Sat Apr 25 23:09:33.230214 2026] [:error] [pid 59897:tid 59937] [client 74.248.33.118:14371] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/style.php"] [unique_id "aezZLfBrrkdzpEbmK4ecqAAAAIo"]
[Sat Apr 25 23:09:33.792067 2026] [:error] [pid 59896:tid 59902] [client 74.248.33.118:10498] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/style.php"] [unique_id "aezZLbLLzhtkd-OXUgAa8gAAAEI"]
[Sat Apr 25 23:09:34.326994 2026] [:error] [pid 59896:tid 59911] [client 74.248.33.118:33070] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/style.php"] [unique_id "aezZLrLLzhtkd-OXUgAa9AAAAEs"]
[Sat Apr 25 23:09:34.863573 2026] [:error] [pid 59896:tid 59907] [client 74.248.33.118:1597] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/av.php"] [unique_id "aezZLrLLzhtkd-OXUgAa9gAAAEc"]
[Sat Apr 25 23:09:35.401300 2026] [:error] [pid 3212:tid 3219] [client 74.248.33.118:14341] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/av.php"] [unique_id "aezZL_g-28TY8_YLtUdrzwAAAQU"]
[Sat Apr 25 23:09:35.955497 2026] [:error] [pid 59896:tid 59903] [client 74.248.33.118:12727] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/av.php"] [unique_id "aezZL7LLzhtkd-OXUgAa-gAAAEM"]
[Sat Apr 25 23:09:36.521881 2026] [:error] [pid 59896:tid 59912] [client 74.248.33.118:49287] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/av.php"] [unique_id "aezZMLLLzhtkd-OXUgAa_QAAAEw"]
[Sat Apr 25 23:09:37.068712 2026] [:error] [pid 59896:tid 59905] [client 74.248.33.118:1076] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aezZMbLLzhtkd-OXUgAa_wAAAEU"]
[Sat Apr 25 23:09:37.605810 2026] [:error] [pid 59985:tid 60004] [client 74.248.33.118:1036] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aezZMQF_zDvEhKvyTH7PQAAAABE"]
[Sat Apr 25 23:09:38.132308 2026] [:error] [pid 59985:tid 59995] [client 74.248.33.118:14395] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aezZMgF_zDvEhKvyTH7PQgAAAAg"]
[Sat Apr 25 23:09:38.696884 2026] [:error] [pid 59985:tid 60010] [client 74.248.33.118:14339] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aezZMgF_zDvEhKvyTH7PRAAAABc"]
[Sat Apr 25 23:09:39.290860 2026] [:error] [pid 59898:tid 59960] [client 74.248.33.118:35698] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-act.php"] [unique_id "aezZMx-4vImxb0kbdze_HgAAAMY"]
[Sat Apr 25 23:09:39.826186 2026] [:error] [pid 59898:tid 59970] [client 74.248.33.118:14014] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-act.php"] [unique_id "aezZMx-4vImxb0kbdze_IQAAANA"]
[Sat Apr 25 23:09:40.372643 2026] [:error] [pid 59985:tid 59988] [client 74.248.33.118:37302] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-act.php"] [unique_id "aezZNAF_zDvEhKvyTH7PRwAAAAE"]
[Sat Apr 25 23:09:40.908130 2026] [:error] [pid 59985:tid 60007] [client 74.248.33.118:12751] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-act.php"] [unique_id "aezZNAF_zDvEhKvyTH7PSAAAABQ"]
[Sat Apr 25 23:09:41.435161 2026] [:error] [pid 3212:tid 3228] [client 74.248.33.118:16351] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aezZNfg-28TY8_YLtUdr3AAAAQ4"]
[Sat Apr 25 23:09:41.991158 2026] [:error] [pid 59985:tid 60005] [client 74.248.33.118:26461] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aezZNQF_zDvEhKvyTH7PTAAAABI"]
[Sat Apr 25 23:09:42.549678 2026] [:error] [pid 59985:tid 60008] [client 74.248.33.118:1117] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aezZNgF_zDvEhKvyTH7PTQAAABU"]
[Sat Apr 25 23:09:43.089081 2026] [:error] [pid 59985:tid 59990] [client 74.248.33.118:1273] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aezZNwF_zDvEhKvyTH7PTwAAAAM"]
[Sat Apr 25 23:09:43.644330 2026] [:error] [pid 3212:tid 3237] [client 74.248.33.118:47128] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aezZN_g-28TY8_YLtUdr5wAAARc"]
[Sat Apr 25 23:09:44.178218 2026] [:error] [pid 59897:tid 59949] [client 74.248.33.118:1218] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aezZOPBrrkdzpEbmK4ecvQAAAJY"]
[Sat Apr 25 23:09:44.722300 2026] [:error] [pid 3212:tid 3238] [client 74.248.33.118:37264] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aezZOPg-28TY8_YLtUdr6wAAARg"]
[Sat Apr 25 23:09:45.275455 2026] [:error] [pid 59985:tid 59989] [client 74.248.33.118:11183] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aezZOQF_zDvEhKvyTH7PWwAAAAI"]
[Sat Apr 25 23:09:45.795925 2026] [:error] [pid 3212:tid 3217] [client 74.248.33.118:26435] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sbhu.php"] [unique_id "aezZOfg-28TY8_YLtUdr7wAAAQM"]
[Sat Apr 25 23:09:46.313522 2026] [:error] [pid 3212:tid 3220] [client 74.248.33.118:1166] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sbhu.php"] [unique_id "aezZOvg-28TY8_YLtUdr8gAAAQY"]
[Sat Apr 25 23:09:46.849757 2026] [:error] [pid 3212:tid 3234] [client 74.248.33.118:37559] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sbhu.php"] [unique_id "aezZOvg-28TY8_YLtUdr9QAAARQ"]
[Sat Apr 25 23:09:47.385954 2026] [:error] [pid 3212:tid 3237] [client 74.248.33.118:1162] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sbhu.php"] [unique_id "aezZO_g-28TY8_YLtUdr-QAAARc"]
[Sat Apr 25 23:09:47.905895 2026] [:error] [pid 3212:tid 3238] [client 74.248.33.118:12689] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-blog.php"] [unique_id "aezZO_g-28TY8_YLtUdr_QAAARg"]
[Sat Apr 25 23:09:48.430066 2026] [:error] [pid 3212:tid 3226] [client 74.248.33.118:21692] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-blog.php"] [unique_id "aezZPPg-28TY8_YLtUdr_gAAAQw"]
[Sat Apr 25 23:09:48.967307 2026] [:error] [pid 3212:tid 3229] [client 74.248.33.118:14348] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-blog.php"] [unique_id "aezZPPg-28TY8_YLtUdsAQAAAQ8"]
[Sat Apr 25 23:09:49.525310 2026] [:error] [pid 3212:tid 3227] [client 74.248.33.118:33035] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-blog.php"] [unique_id "aezZPfg-28TY8_YLtUdsBgAAAQ0"]
[Sat Apr 25 23:09:50.093105 2026] [:error] [pid 3212:tid 3238] [client 74.248.33.118:12722] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aezZPvg-28TY8_YLtUdsDAAAARg"]
[Sat Apr 25 23:09:50.640989 2026] [:error] [pid 3212:tid 3222] [client 74.248.33.118:1159] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aezZPvg-28TY8_YLtUdsDwAAAQg"]
[Sat Apr 25 23:09:51.150403 2026] [:error] [pid 3212:tid 3223] [client 74.248.33.118:12796] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aezZP_g-28TY8_YLtUdsEwAAAQk"]
[Sat Apr 25 23:09:51.692711 2026] [:error] [pid 59896:tid 59901] [client 74.248.33.118:37533] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aezZP7LLzhtkd-OXUgAbEwAAAEE"]
[Sat Apr 25 23:09:52.242544 2026] [:error] [pid 59898:tid 59971] [client 74.248.33.118:21666] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "aezZQB-4vImxb0kbdze_LAAAANE"]
[Sat Apr 25 23:09:52.784353 2026] [:error] [pid 3212:tid 3236] [client 74.248.33.118:1595] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "aezZQPg-28TY8_YLtUdsGwAAARY"]
[Sat Apr 25 23:09:53.323881 2026] [:error] [pid 3212:tid 3218] [client 74.248.33.118:12720] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "aezZQfg-28TY8_YLtUdsHAAAAQQ"]
[Sat Apr 25 23:09:53.833369 2026] [:error] [pid 3212:tid 3219] [client 74.248.33.118:14354] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "aezZQfg-28TY8_YLtUdsIgAAAQU"]
[Sat Apr 25 23:09:54.346358 2026] [:error] [pid 59896:tid 59920] [client 74.248.33.118:37521] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ms-edit.php"] [unique_id "aezZQrLLzhtkd-OXUgAbGgAAAFQ"]
[Sat Apr 25 23:09:54.855336 2026] [:error] [pid 59896:tid 59913] [client 74.248.33.118:49319] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ms-edit.php"] [unique_id "aezZQrLLzhtkd-OXUgAbHQAAAE0"]
[Sat Apr 25 23:09:55.378474 2026] [:error] [pid 59898:tid 59962] [client 74.248.33.118:47151] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ms-edit.php"] [unique_id "aezZQx-4vImxb0kbdze_LwAAAMg"]
[Sat Apr 25 23:09:55.890684 2026] [:error] [pid 3212:tid 3215] [client 74.248.33.118:12756] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ms-edit.php"] [unique_id "aezZQ_g-28TY8_YLtUdsLwAAAQE"]
[Sat Apr 25 23:09:56.419166 2026] [:error] [pid 59898:tid 59957] [client 74.248.33.118:37548] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/adminfuns.php"] [unique_id "aezZRB-4vImxb0kbdze_MQAAAMM"]
[Sat Apr 25 23:09:56.985688 2026] [:error] [pid 3212:tid 3234] [client 74.248.33.118:12762] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/adminfuns.php"] [unique_id "aezZRPg-28TY8_YLtUdsOgAAARQ"]
[Sat Apr 25 23:09:57.550867 2026] [:error] [pid 59985:tid 60010] [client 74.248.33.118:10509] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/adminfuns.php"] [unique_id "aezZRQF_zDvEhKvyTH7PZAAAABc"]
[Sat Apr 25 23:09:58.119011 2026] [:error] [pid 59985:tid 60011] [client 74.248.33.118:1026] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/adminfuns.php"] [unique_id "aezZRgF_zDvEhKvyTH7PZQAAABg"]
[Sat Apr 25 23:09:58.662648 2026] [:error] [pid 59985:tid 59991] [client 74.248.33.118:37309] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/goods.php"] [unique_id "aezZRgF_zDvEhKvyTH7PZwAAAAQ"]
[Sat Apr 25 23:09:59.204209 2026] [:error] [pid 3212:tid 3227] [client 74.248.33.118:37255] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/goods.php"] [unique_id "aezZR_g-28TY8_YLtUdsQAAAAQ0"]
[Sat Apr 25 23:09:59.753464 2026] [:error] [pid 59897:tid 59939] [client 74.248.33.118:47140] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/goods.php"] [unique_id "aezZR_BrrkdzpEbmK4ecxQAAAIw"]
[Sat Apr 25 23:10:00.334082 2026] [:error] [pid 59985:tid 59994] [client 74.248.33.118:1028] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/goods.php"] [unique_id "aezZSAF_zDvEhKvyTH7PawAAAAc"]
[Sat Apr 25 23:10:00.868810 2026] [:error] [pid 59897:tid 59949] [client 74.248.33.118:49331] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ms-edit.php"] [unique_id "aezZSPBrrkdzpEbmK4ecyAAAAJY"]
[Sat Apr 25 23:10:01.446897 2026] [:error] [pid 59985:tid 59995] [client 74.248.33.118:1079] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ms-edit.php"] [unique_id "aezZSQF_zDvEhKvyTH7PbQAAAAg"]
[Sat Apr 25 23:10:01.987415 2026] [:error] [pid 3212:tid 3220] [client 74.248.33.118:49341] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ms-edit.php"] [unique_id "aezZSfg-28TY8_YLtUdsRAAAAQY"]
[Sat Apr 25 23:10:02.502932 2026] [:error] [pid 3212:tid 3231] [client 74.248.33.118:16371] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ms-edit.php"] [unique_id "aezZSvg-28TY8_YLtUdsSwAAARE"]
[Sat Apr 25 23:10:03.041470 2026] [:error] [pid 3212:tid 3235] [client 74.248.33.118:1203] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/222.php"] [unique_id "aezZS_g-28TY8_YLtUdsTwAAARU"]
[Sat Apr 25 23:10:03.596241 2026] [:error] [pid 3212:tid 3238] [client 74.248.33.118:37259] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/222.php"] [unique_id "aezZS_g-28TY8_YLtUdsUAAAARg"]
[Sat Apr 25 23:10:04.124945 2026] [:error] [pid 3212:tid 3217] [client 74.248.33.118:47137] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/222.php"] [unique_id "aezZTPg-28TY8_YLtUdsUwAAAQM"]
[Sat Apr 25 23:10:04.644374 2026] [:error] [pid 59897:tid 59937] [client 74.248.33.118:49338] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/222.php"] [unique_id "aezZTPBrrkdzpEbmK4eczgAAAIo"]
[Sat Apr 25 23:10:05.161690 2026] [:error] [pid 3212:tid 3226] [client 74.248.33.118:37250] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aezZTfg-28TY8_YLtUdsVgAAAQw"]
[Sat Apr 25 23:10:05.731324 2026] [:error] [pid 3212:tid 3230] [client 74.248.33.118:49309] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aezZTfg-28TY8_YLtUdsVwAAARA"]
[Sat Apr 25 23:10:06.278709 2026] [:error] [pid 3212:tid 3237] [client 74.248.33.118:49333] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aezZTvg-28TY8_YLtUdsXQAAARc"]
[Sat Apr 25 23:10:06.815759 2026] [:error] [pid 59896:tid 59913] [client 74.248.33.118:11162] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aezZTrLLzhtkd-OXUgAbNAAAAE0"]
[Sat Apr 25 23:10:07.329856 2026] [:error] [pid 59896:tid 59908] [client 74.248.33.118:37300] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fff.php"] [unique_id "aezZT7LLzhtkd-OXUgAbOQAAAEg"]
[Sat Apr 25 23:10:07.863675 2026] [:error] [pid 3212:tid 3226] [client 74.248.33.118:1183] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fff.php"] [unique_id "aezZT_g-28TY8_YLtUdsYQAAAQw"]
[Sat Apr 25 23:10:08.430617 2026] [:error] [pid 59896:tid 59903] [client 74.248.33.118:47112] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fff.php"] [unique_id "aezZULLLzhtkd-OXUgAbPAAAAEM"]
[Sat Apr 25 23:10:08.964343 2026] [:error] [pid 3212:tid 3237] [client 74.248.33.118:13300] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fff.php"] [unique_id "aezZUPg-28TY8_YLtUdsZAAAARc"]
[Sat Apr 25 23:10:09.509723 2026] [:error] [pid 3212:tid 3232] [client 74.248.33.118:49305] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/"] [unique_id "aezZUfg-28TY8_YLtUdsaAAAARI"]
[Sat Apr 25 23:10:10.042648 2026] [:error] [pid 3212:tid 3235] [client 74.248.33.118:49304] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/"] [unique_id "aezZUvg-28TY8_YLtUdsbQAAARU"]
[Sat Apr 25 23:10:10.561336 2026] [:error] [pid 3212:tid 3221] [client 74.248.33.118:37534] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/"] [unique_id "aezZUvg-28TY8_YLtUdscQAAAQc"]
[Sat Apr 25 23:10:11.074536 2026] [:error] [pid 3212:tid 3229] [client 74.248.33.118:12683] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/"] [unique_id "aezZU_g-28TY8_YLtUdsdAAAAQ8"]
[Sat Apr 25 23:10:11.585452 2026] [:error] [pid 59896:tid 59913] [client 74.248.33.118:47139] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/makeasmtp.php"] [unique_id "aezZU7LLzhtkd-OXUgAbQwAAAE0"]
[Sat Apr 25 23:10:12.119379 2026] [:error] [pid 3212:tid 3216] [client 74.248.33.118:12769] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/makeasmtp.php"] [unique_id "aezZVPg-28TY8_YLtUdsewAAAQI"]
[Sat Apr 25 23:10:12.653034 2026] [:error] [pid 3212:tid 3229] [client 74.248.33.118:16376] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/makeasmtp.php"] [unique_id "aezZVPg-28TY8_YLtUdshgAAAQ8"]
[Sat Apr 25 23:10:13.199322 2026] [:error] [pid 59898:tid 59974] [client 74.248.33.118:12787] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/makeasmtp.php"] [unique_id "aezZVR-4vImxb0kbdze_PAAAANQ"]
[Sat Apr 25 23:10:13.761486 2026] [:error] [pid 59896:tid 59922] [client 74.248.33.118:47114] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin1.php"] [unique_id "aezZVbLLzhtkd-OXUgAbSAAAAFY"]
[Sat Apr 25 23:10:14.295882 2026] [:error] [pid 59896:tid 59911] [client 74.248.33.118:1187] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin1.php"] [unique_id "aezZVrLLzhtkd-OXUgAbSgAAAEs"]
[Sat Apr 25 23:10:14.807464 2026] [:error] [pid 3212:tid 3214] [client 74.248.33.118:49323] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin1.php"] [unique_id "aezZVvg-28TY8_YLtUdsjgAAAQA"]
[Sat Apr 25 23:10:15.342412 2026] [:error] [pid 59896:tid 59903] [client 74.248.33.118:14372] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin1.php"] [unique_id "aezZV7LLzhtkd-OXUgAbTAAAAEM"]
[Sat Apr 25 23:10:15.881415 2026] [:error] [pid 3212:tid 3229] [client 74.248.33.118:16372] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aezZV_g-28TY8_YLtUdskgAAAQ8"]
[Sat Apr 25 23:10:16.403513 2026] [:error] [pid 3212:tid 3236] [client 74.248.33.118:21653] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aezZWPg-28TY8_YLtUdslgAAARY"]
[Sat Apr 25 23:10:16.913264 2026] [:error] [pid 3212:tid 3219] [client 74.248.33.118:21635] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aezZWPg-28TY8_YLtUdsmQAAAQU"]
[Sat Apr 25 23:10:17.422399 2026] [:error] [pid 59897:tid 59929] [client 74.248.33.118:37511] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aezZWfBrrkdzpEbmK4ec0AAAAII"]
[Sat Apr 25 23:10:17.932739 2026] [:error] [pid 59896:tid 59902] [client 74.248.33.118:12726] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/BDKR28WP.php"] [unique_id "aezZWbLLzhtkd-OXUgAbUAAAAEI"]
[Sat Apr 25 23:10:18.445930 2026] [:error] [pid 59896:tid 59914] [client 74.248.33.118:37286] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/BDKR28WP.php"] [unique_id "aezZWrLLzhtkd-OXUgAbUgAAAE4"]
[Sat Apr 25 23:10:18.960588 2026] [:error] [pid 59985:tid 59994] [client 74.248.33.118:1164] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/BDKR28WP.php"] [unique_id "aezZWgF_zDvEhKvyTH7PdAAAAAc"]
[Sat Apr 25 23:10:19.513822 2026] [:error] [pid 59985:tid 59995] [client 74.248.33.118:1080] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/BDKR28WP.php"] [unique_id "aezZWwF_zDvEhKvyTH7PdwAAAAg"]
[Sat Apr 25 23:10:20.108032 2026] [:error] [pid 59985:tid 60005] [client 74.248.33.118:47154] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aezZXAF_zDvEhKvyTH7PeQAAABI"]
[Sat Apr 25 23:10:20.669671 2026] [:error] [pid 59896:tid 59921] [client 74.248.33.118:35669] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aezZXLLLzhtkd-OXUgAbVgAAAFU"]
[Sat Apr 25 23:10:21.708071 2026] [proxy_fcgi:error] [pid 59985:tid 59993] [client 74.248.33.118:12682] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 23:10:22.231015 2026] [proxy_fcgi:error] [pid 59985:tid 60004] [client 74.248.33.118:12682] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 23:10:22.751888 2026] [proxy_fcgi:error] [pid 59985:tid 60010] [client 74.248.33.118:12682] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 23:10:23.012159 2026] [proxy_fcgi:error] [pid 59985:tid 60011] [client 74.248.33.118:12682] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 23:10:23.274312 2026] [proxy_fcgi:error] [pid 59985:tid 59998] [client 74.248.33.118:12682] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 23:10:23.801200 2026] [:error] [pid 59985:tid 59994] [client 74.248.33.118:12682] [client 74.248.33.118] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aezZXwF_zDvEhKvyTH7PiwAAAAc"]
[Sat Apr 25 23:10:24.321512 2026] [proxy_fcgi:error] [pid 59896:tid 59903] [client 74.248.33.118:12701] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 23:10:24.575637 2026] [:error] [pid 59896:tid 59924] [client 74.248.33.118:12701] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aezZYLLLzhtkd-OXUgAbYQAAAFg"]
[Sat Apr 25 23:10:25.116996 2026] [:error] [pid 3212:tid 3220] [client 74.248.33.118:16347] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aezZYfg-28TY8_YLtUdsrQAAAQY"]
[Sat Apr 25 23:10:25.714526 2026] [:error] [pid 3212:tid 3229] [client 74.248.33.118:14369] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aezZYfg-28TY8_YLtUdsrwAAAQ8"]
[Sat Apr 25 23:10:26.297252 2026] [:error] [pid 59985:tid 60007] [client 74.248.33.118:1097] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aezZYgF_zDvEhKvyTH7PjwAAABQ"]
[Sat Apr 25 23:10:26.835489 2026] [:error] [pid 3212:tid 3225] [client 74.248.33.118:1029] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aezZYvg-28TY8_YLtUdssQAAAQs"]
[Sat Apr 25 23:10:27.374562 2026] [:error] [pid 3212:tid 3214] [client 74.248.33.118:26442] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aezZY_g-28TY8_YLtUdsuAAAAQA"]
[Sat Apr 25 23:10:27.916975 2026] [:error] [pid 59896:tid 59919] [client 74.248.33.118:47156] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aezZY7LLzhtkd-OXUgAbYwAAAFM"]
[Sat Apr 25 23:10:28.447606 2026] [:error] [pid 59898:tid 59957] [client 74.248.33.118:11169] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aezZZB-4vImxb0kbdze_PQAAAMM"]
[Sat Apr 25 23:10:29.008767 2026] [:error] [pid 59985:tid 60010] [client 74.248.33.118:47147] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/k.php"] [unique_id "aezZZQF_zDvEhKvyTH7PlwAAABc"]
[Sat Apr 25 23:10:29.574585 2026] [:error] [pid 59896:tid 59917] [client 74.248.33.118:21641] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/k.php"] [unique_id "aezZZbLLzhtkd-OXUgAbZgAAAFE"]
[Sat Apr 25 23:10:30.156165 2026] [:error] [pid 59896:tid 59901] [client 74.248.33.118:47129] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/k.php"] [unique_id "aezZZrLLzhtkd-OXUgAbaAAAAEE"]
[Sat Apr 25 23:10:30.695979 2026] [:error] [pid 59985:tid 59997] [client 74.248.33.118:14004] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/k.php"] [unique_id "aezZZgF_zDvEhKvyTH7PnQAAAAo"]
[Sat Apr 25 23:10:31.260950 2026] [:error] [pid 59896:tid 59924] [client 74.248.33.118:13993] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bal.php"] [unique_id "aezZZ7LLzhtkd-OXUgAbagAAAFg"]
[Sat Apr 25 23:10:31.857475 2026] [:error] [pid 59897:tid 59948] [client 74.248.33.118:1062] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bal.php"] [unique_id "aezZZ_BrrkdzpEbmK4ec2AAAAJU"]
[Sat Apr 25 23:10:32.433093 2026] [:error] [pid 59898:tid 59978] [client 74.248.33.118:12732] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bal.php"] [unique_id "aezZaB-4vImxb0kbdze_PwAAANg"]
[Sat Apr 25 23:10:32.984312 2026] [:error] [pid 3212:tid 3224] [client 74.248.33.118:12719] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bal.php"] [unique_id "aezZaPg-28TY8_YLtUdswAAAAQo"]
[Sat Apr 25 23:10:33.533584 2026] [:error] [pid 59896:tid 59916] [client 74.248.33.118:47123] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/in.php"] [unique_id "aezZabLLzhtkd-OXUgAbcAAAAFA"]
[Sat Apr 25 23:10:34.104819 2026] [:error] [pid 59896:tid 59913] [client 74.248.33.118:2039] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/in.php"] [unique_id "aezZarLLzhtkd-OXUgAbdAAAAE0"]
[Sat Apr 25 23:10:34.673905 2026] [:error] [pid 59896:tid 59918] [client 74.248.33.118:35694] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/in.php"] [unique_id "aezZarLLzhtkd-OXUgAbdgAAAFI"]
[Sat Apr 25 23:10:35.252438 2026] [:error] [pid 59896:tid 59917] [client 74.248.33.118:12784] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/in.php"] [unique_id "aezZa7LLzhtkd-OXUgAbdwAAAFE"]
[Sat Apr 25 23:10:35.830907 2026] [:error] [pid 59896:tid 59922] [client 74.248.33.118:12697] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gssdd.php"] [unique_id "aezZa7LLzhtkd-OXUgAbeAAAAFY"]
[Sat Apr 25 23:10:36.420812 2026] [:error] [pid 59897:tid 59949] [client 74.248.33.118:20825] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gssdd.php"] [unique_id "aezZbPBrrkdzpEbmK4ec4AAAAJY"]
[Sat Apr 25 23:10:36.956380 2026] [:error] [pid 3212:tid 3226] [client 74.248.33.118:12693] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gssdd.php"] [unique_id "aezZbPg-28TY8_YLtUdsxgAAAQw"]
[Sat Apr 25 23:10:37.518618 2026] [:error] [pid 59898:tid 59962] [client 74.248.33.118:1057] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gssdd.php"] [unique_id "aezZbR-4vImxb0kbdze_RgAAAMg"]
[Sat Apr 25 23:10:38.091270 2026] [:error] [pid 3212:tid 3230] [client 74.248.33.118:37276] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "aezZbvg-28TY8_YLtUdsywAAARA"]
[Sat Apr 25 23:10:38.683414 2026] [:error] [pid 3212:tid 3223] [client 74.248.33.118:47135] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "aezZbvg-28TY8_YLtUdszQAAAQk"]
[Sat Apr 25 23:10:39.245460 2026] [:error] [pid 59896:tid 59900] [client 74.248.33.118:1044] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "aezZb7LLzhtkd-OXUgAbfQAAAEA"]
[Sat Apr 25 23:10:39.816613 2026] [:error] [pid 59898:tid 59957] [client 74.248.33.118:12703] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "aezZbx-4vImxb0kbdze_RwAAAMM"]
[Sat Apr 25 23:10:40.365848 2026] [:error] [pid 59897:tid 59932] [client 74.248.33.118:37563] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bs1.php"] [unique_id "aezZcPBrrkdzpEbmK4ec4wAAAIU"]
[Sat Apr 25 23:10:40.911490 2026] [:error] [pid 59897:tid 59944] [client 74.248.33.118:37268] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bs1.php"] [unique_id "aezZcPBrrkdzpEbmK4ec5AAAAJE"]
[Sat Apr 25 23:10:41.441053 2026] [:error] [pid 59898:tid 59968] [client 74.248.33.118:1186] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bs1.php"] [unique_id "aezZcR-4vImxb0kbdze_SgAAAM4"]
[Sat Apr 25 23:10:41.977101 2026] [:error] [pid 59896:tid 59904] [client 74.248.33.118:37257] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bs1.php"] [unique_id "aezZcbLLzhtkd-OXUgAbgQAAAEQ"]
[Sat Apr 25 23:10:42.549336 2026] [:error] [pid 59898:tid 59960] [client 74.248.33.118:12748] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aezZch-4vImxb0kbdze_TAAAAMY"]
[Sat Apr 25 23:10:43.096499 2026] [:error] [pid 3212:tid 3228] [client 74.248.33.118:1047] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aezZc_g-28TY8_YLtUds1gAAAQ4"]
[Sat Apr 25 23:10:43.669500 2026] [:error] [pid 3212:tid 3224] [client 74.248.33.118:49325] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aezZc_g-28TY8_YLtUds1wAAAQo"]
[Sat Apr 25 23:10:44.258354 2026] [:error] [pid 59896:tid 59907] [client 74.248.33.118:1555] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aezZdLLLzhtkd-OXUgAbjAAAAEc"]
[Sat Apr 25 23:10:44.831095 2026] [:error] [pid 59898:tid 59974] [client 74.248.33.118:12677] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/axx.php"] [unique_id "aezZdB-4vImxb0kbdze_UQAAANQ"]
[Sat Apr 25 23:10:45.361992 2026] [:error] [pid 59898:tid 59957] [client 74.248.33.118:26473] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/axx.php"] [unique_id "aezZdR-4vImxb0kbdze_UgAAAMM"]
[Sat Apr 25 23:10:45.902410 2026] [:error] [pid 3212:tid 3232] [client 74.248.33.118:49332] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/axx.php"] [unique_id "aezZdfg-28TY8_YLtUds2QAAARI"]
[Sat Apr 25 23:10:46.471560 2026] [:error] [pid 3212:tid 3237] [client 74.248.33.118:47132] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/axx.php"] [unique_id "aezZdvg-28TY8_YLtUds2wAAARc"]
[Sat Apr 25 23:10:46.993944 2026] [:error] [pid 59896:tid 59923] [client 74.248.33.118:37530] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gettest.php"] [unique_id "aezZdrLLzhtkd-OXUgAblQAAAFc"]
[Sat Apr 25 23:10:47.504778 2026] [:error] [pid 59985:tid 59997] [client 74.248.33.118:1177] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gettest.php"] [unique_id "aezZdwF_zDvEhKvyTH7PrwAAAAo"]
[Sat Apr 25 23:10:48.064547 2026] [:error] [pid 59985:tid 60003] [client 74.248.33.118:12694] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gettest.php"] [unique_id "aezZeAF_zDvEhKvyTH7PsAAAABA"]
[Sat Apr 25 23:10:48.665072 2026] [:error] [pid 59985:tid 59988] [client 74.248.33.118:12780] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gettest.php"] [unique_id "aezZeAF_zDvEhKvyTH7PswAAAAE"]
[Sat Apr 25 23:10:49.243691 2026] [:error] [pid 3212:tid 3232] [client 74.248.33.118:37555] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/acp.php"] [unique_id "aezZefg-28TY8_YLtUds4QAAARI"]
[Sat Apr 25 23:10:49.763913 2026] [:error] [pid 59896:tid 59924] [client 74.248.33.118:1585] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/acp.php"] [unique_id "aezZebLLzhtkd-OXUgAbmAAAAFg"]
[Sat Apr 25 23:10:50.317598 2026] [:error] [pid 59898:tid 59968] [client 74.248.33.118:14358] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/acp.php"] [unique_id "aezZeh-4vImxb0kbdze_XgAAAM4"]
[Sat Apr 25 23:10:50.863246 2026] [:error] [pid 59898:tid 59965] [client 74.248.33.118:49303] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/acp.php"] [unique_id "aezZeh-4vImxb0kbdze_YAAAAMs"]
[Sat Apr 25 23:10:51.396629 2026] [:error] [pid 59898:tid 59960] [client 74.248.33.118:1246] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file48.php"] [unique_id "aezZex-4vImxb0kbdze_YQAAAMY"]
[Sat Apr 25 23:10:51.917836 2026] [:error] [pid 59897:tid 59944] [client 74.248.33.118:49312] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file48.php"] [unique_id "aezZe_BrrkdzpEbmK4ec7wAAAJE"]
[Sat Apr 25 23:10:52.473459 2026] [:error] [pid 59898:tid 59966] [client 74.248.33.118:49281] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file48.php"] [unique_id "aezZfB-4vImxb0kbdze_ZAAAAMw"]
[Sat Apr 25 23:10:52.996013 2026] [:error] [pid 3212:tid 3236] [client 74.248.33.118:37278] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file48.php"] [unique_id "aezZfPg-28TY8_YLtUds5gAAARY"]
[Sat Apr 25 23:10:53.561174 2026] [:error] [pid 59898:tid 59975] [client 74.248.33.118:16331] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/"] [unique_id "aezZfR-4vImxb0kbdze_ZwAAANU"]
[Sat Apr 25 23:10:54.140964 2026] [:error] [pid 59898:tid 59958] [client 74.248.33.118:47120] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/"] [unique_id "aezZfh-4vImxb0kbdze_aAAAAMQ"]
[Sat Apr 25 23:10:54.702403 2026] [:error] [pid 59985:tid 59991] [client 74.248.33.118:14364] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/"] [unique_id "aezZfgF_zDvEhKvyTH7PugAAAAQ"]
[Sat Apr 25 23:10:55.260344 2026] [:error] [pid 59985:tid 59999] [client 74.248.33.118:47124] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/"] [unique_id "aezZfwF_zDvEhKvyTH7PvQAAAAw"]
[Sat Apr 25 23:10:55.832985 2026] [:error] [pid 59985:tid 59989] [client 74.248.33.118:1589] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/simple.php"] [unique_id "aezZfwF_zDvEhKvyTH7PwAAAAAI"]
[Sat Apr 25 23:10:56.371855 2026] [:error] [pid 59897:tid 59945] [client 74.248.33.118:10508] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/simple.php"] [unique_id "aezZgPBrrkdzpEbmK4ec8wAAAJI"]
[Sat Apr 25 23:10:56.887496 2026] [:error] [pid 3212:tid 3215] [client 74.248.33.118:49326] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/simple.php"] [unique_id "aezZgPg-28TY8_YLtUds6gAAAQE"]
[Sat Apr 25 23:10:57.419700 2026] [:error] [pid 3212:tid 3230] [client 74.248.33.118:12724] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/simple.php"] [unique_id "aezZgfg-28TY8_YLtUds7gAAARA"]
[Sat Apr 25 23:10:57.980922 2026] [:error] [pid 3212:tid 3232] [client 74.248.33.118:49298] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/drykl.php"] [unique_id "aezZgfg-28TY8_YLtUds8QAAARI"]
[Sat Apr 25 23:10:58.520609 2026] [:error] [pid 3212:tid 3237] [client 74.248.33.118:1202] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/drykl.php"] [unique_id "aezZgvg-28TY8_YLtUds9AAAARc"]
[Sat Apr 25 23:10:59.069654 2026] [:error] [pid 59985:tid 60001] [client 74.248.33.118:1161] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/drykl.php"] [unique_id "aezZgwF_zDvEhKvyTH7PxQAAAA4"]
[Sat Apr 25 23:10:59.590302 2026] [:error] [pid 59897:tid 59936] [client 74.248.33.118:16343] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/drykl.php"] [unique_id "aezZg_BrrkdzpEbmK4ec9AAAAIk"]
[Sat Apr 25 23:11:00.139821 2026] [:error] [pid 3212:tid 3219] [client 74.248.33.118:1555] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xxx.php"] [unique_id "aezZhPg-28TY8_YLtUds-wAAAQU"]
[Sat Apr 25 23:11:00.686419 2026] [:error] [pid 59898:tid 59954] [client 74.248.33.118:14386] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xxx.php"] [unique_id "aezZhB-4vImxb0kbdze_bAAAAMA"]
[Sat Apr 25 23:11:01.197830 2026] [:error] [pid 59985:tid 60008] [client 74.248.33.118:47142] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xxx.php"] [unique_id "aezZhQF_zDvEhKvyTH7PxwAAABU"]
[Sat Apr 25 23:11:01.721920 2026] [:error] [pid 59985:tid 59996] [client 74.248.33.118:14377] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xxx.php"] [unique_id "aezZhQF_zDvEhKvyTH7PywAAAAk"]
[Sat Apr 25 23:11:02.298752 2026] [:error] [pid 59985:tid 60009] [client 74.248.33.118:37253] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hypo.php"] [unique_id "aezZhgF_zDvEhKvyTH7PzAAAABY"]
[Sat Apr 25 23:11:02.856606 2026] [:error] [pid 3212:tid 3224] [client 74.248.33.118:21690] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hypo.php"] [unique_id "aezZhvg-28TY8_YLtUdtAAAAAQo"]
[Sat Apr 25 23:11:03.395430 2026] [:error] [pid 59898:tid 59964] [client 74.248.33.118:37295] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hypo.php"] [unique_id "aezZhx-4vImxb0kbdze_cAAAAMo"]
[Sat Apr 25 23:11:03.953985 2026] [:error] [pid 59897:tid 59947] [client 74.248.33.118:1071] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hypo.php"] [unique_id "aezZh_BrrkdzpEbmK4ec-QAAAJQ"]
[Sat Apr 25 23:11:04.501072 2026] [:error] [pid 59898:tid 59959] [client 74.248.33.118:1081] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file18.php"] [unique_id "aezZiB-4vImxb0kbdze_cgAAAMU"]
[Sat Apr 25 23:11:05.025221 2026] [:error] [pid 3212:tid 3219] [client 74.248.33.118:1169] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file18.php"] [unique_id "aezZifg-28TY8_YLtUdtBQAAAQU"]
[Sat Apr 25 23:11:05.548326 2026] [:error] [pid 59896:tid 59912] [client 74.248.33.118:37547] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file18.php"] [unique_id "aezZibLLzhtkd-OXUgAbpAAAAEw"]
[Sat Apr 25 23:11:06.089676 2026] [:error] [pid 59896:tid 59901] [client 74.248.33.118:33045] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file18.php"] [unique_id "aezZirLLzhtkd-OXUgAbpwAAAEE"]
[Sat Apr 25 23:11:06.619970 2026] [:error] [pid 3212:tid 3218] [client 74.248.33.118:11157] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xwx1.php"] [unique_id "aezZivg-28TY8_YLtUdtBwAAAQQ"]
[Sat Apr 25 23:11:07.139566 2026] [:error] [pid 59896:tid 59916] [client 74.248.33.118:37518] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xwx1.php"] [unique_id "aezZi7LLzhtkd-OXUgAbqgAAAFA"]
[Sat Apr 25 23:11:07.684473 2026] [:error] [pid 59896:tid 59910] [client 74.248.33.118:13982] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xwx1.php"] [unique_id "aezZi7LLzhtkd-OXUgAbrAAAAEo"]
[Sat Apr 25 23:11:08.263245 2026] [:error] [pid 59897:tid 59944] [client 74.248.33.118:1190] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xwx1.php"] [unique_id "aezZjPBrrkdzpEbmK4ec_AAAAJE"]
[Sat Apr 25 23:11:08.821798 2026] [:error] [pid 59898:tid 59971] [client 74.248.33.118:37305] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "aezZjB-4vImxb0kbdze_eAAAANE"]
[Sat Apr 25 23:11:09.340499 2026] [:error] [pid 3212:tid 3215] [client 74.248.33.118:21678] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "aezZjfg-28TY8_YLtUdtCAAAAQE"]
[Sat Apr 25 23:11:09.873684 2026] [:error] [pid 59896:tid 59905] [client 74.248.33.118:1082] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "aezZjbLLzhtkd-OXUgAbsAAAAEU"]
[Sat Apr 25 23:11:10.439674 2026] [:error] [pid 3212:tid 3235] [client 74.248.33.118:33027] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "aezZjvg-28TY8_YLtUdtCgAAARU"]
[Sat Apr 25 23:11:10.963016 2026] [:error] [pid 59897:tid 59951] [client 74.248.33.118:1181] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/chosen.php"] [unique_id "aezZjvBrrkdzpEbmK4ec_gAAAJg"]
[Sat Apr 25 23:11:11.475677 2026] [:error] [pid 3212:tid 3216] [client 74.248.33.118:14359] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/chosen.php"] [unique_id "aezZj_g-28TY8_YLtUdtDAAAAQI"]
[Sat Apr 25 23:11:12.015835 2026] [:error] [pid 59897:tid 59938] [client 74.248.33.118:1217] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/chosen.php"] [unique_id "aezZkPBrrkdzpEbmK4ec_wAAAIs"]
[Sat Apr 25 23:11:12.584848 2026] [:error] [pid 3212:tid 3217] [client 74.248.33.118:37306] [client 74.248.33.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/chosen.php"] [unique_id "aezZkPg-28TY8_YLtUdtDgAAAQM"]
[Sun Apr 26 04:13:19.711173 2026] [:error] [pid 8383:tid 8398] [client 20.251.15.140:15583] [client 20.251.15.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ae0gX9Fa2S3EsATMdWOqNQAAAAE"]
[Sun Apr 26 04:13:20.911698 2026] [:error] [pid 8383:tid 8420] [client 20.251.15.140:15609] [client 20.251.15.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ae0gYNFa2S3EsATMdWOqRwAAABc"]
[Sun Apr 26 04:13:21.948147 2026] [:error] [pid 8383:tid 8405] [client 20.251.15.140:15610] [client 20.251.15.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ae0gYdFa2S3EsATMdWOqTQAAAAg"]
[Sun Apr 26 04:13:22.890209 2026] [:error] [pid 8383:tid 8407] [client 20.251.15.140:15499] [client 20.251.15.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ae0gYtFa2S3EsATMdWOqUQAAAAo"]
[Sun Apr 26 06:52:52.195592 2026] [proxy_fcgi:error] [pid 13197:tid 13246] [client 20.151.116.9:65211] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 06:52:52.746431 2026] [proxy_fcgi:error] [pid 13197:tid 13236] [client 20.151.116.9:65211] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 06:52:53.175301 2026] [proxy_fcgi:error] [pid 13197:tid 13253] [client 20.151.116.9:65211] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 06:52:53.405354 2026] [proxy_fcgi:error] [pid 13197:tid 13245] [client 20.151.116.9:65211] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 06:52:53.617973 2026] [proxy_fcgi:error] [pid 13197:tid 13244] [client 20.151.116.9:65211] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 06:52:53.831759 2026] [proxy_fcgi:error] [pid 13197:tid 13252] [client 20.151.116.9:65211] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 06:52:54.044300 2026] [proxy_fcgi:error] [pid 13197:tid 13242] [client 20.151.116.9:65211] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 06:52:54.470570 2026] [proxy_fcgi:error] [pid 13197:tid 13233] [client 20.151.116.9:65211] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 06:52:54.682471 2026] [:error] [pid 13197:tid 13246] [client 20.151.116.9:65211] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tx1.php"] [unique_id "ae1Fxt3kktFKdSxTrBuNSQAAAs4"]
[Sun Apr 26 06:52:55.904906 2026] [:error] [pid 8491:tid 8509] [client 20.151.116.9:62175] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tx1.php"] [unique_id "ae1Fxyq7I7e6CJooQM2jkgAAAMo"]
[Sun Apr 26 06:52:57.122861 2026] [:error] [pid 13197:tid 13234] [client 20.151.116.9:64345] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tx1.php"] [unique_id "ae1Fyd3kktFKdSxTrBuNTAAAAsM"]
[Sun Apr 26 06:52:58.054565 2026] [:error] [pid 13315:tid 13366] [client 20.151.116.9:65267] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tx1.php"] [unique_id "ae1Fyg2NnZnCaSNNhH3BiwAAA9Y"]
[Sun Apr 26 06:52:59.294017 2026] [:error] [pid 10315:tid 10328] [client 20.151.116.9:64351] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xv.php"] [unique_id "ae1Fy6JIw2vjkleLIaC-LwAAAQs"]
[Sun Apr 26 06:53:00.483151 2026] [:error] [pid 10315:tid 10339] [client 20.151.116.9:62092] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xv.php"] [unique_id "ae1FzKJIw2vjkleLIaC-MAAAARY"]
[Sun Apr 26 06:53:02.037580 2026] [:error] [pid 13315:tid 13362] [client 20.151.116.9:65250] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xv.php"] [unique_id "ae1Fzg2NnZnCaSNNhH3BlwAAA9I"]
[Sun Apr 26 06:53:03.372037 2026] [:error] [pid 13315:tid 13351] [client 20.151.116.9:62091] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xv.php"] [unique_id "ae1Fzw2NnZnCaSNNhH3BnAAAA8c"]
[Sun Apr 26 06:53:04.563747 2026] [:error] [pid 41906:tid 41925] [client 20.151.116.9:62207] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x56.php"] [unique_id "ae1F0D3-0A3lxw9OXoAz-gAAAZE"]
[Sun Apr 26 06:53:05.931344 2026] [:error] [pid 8383:tid 8404] [client 20.151.116.9:62098] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x56.php"] [unique_id "ae1F0dFa2S3EsATMdWPJ-wAAAAc"]
[Sun Apr 26 06:53:06.906095 2026] [:error] [pid 13196:tid 13212] [client 20.151.116.9:65167] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x56.php"] [unique_id "ae1F0sqUeXPgssvUw6CK4AAAAog"]
[Sun Apr 26 06:53:09.418129 2026] [:error] [pid 13137:tid 13161] [client 20.151.116.9:64273] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x56.php"] [unique_id "ae1F1d0RB4J0o4h5neHf9wAAAhQ"]
[Sun Apr 26 06:53:12.397100 2026] [:error] [pid 8383:tid 8421] [client 20.151.116.9:62172] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/htaccess.php"] [unique_id "ae1F2NFa2S3EsATMdWPKCQAAABg"]
[Sun Apr 26 06:53:13.668865 2026] [:error] [pid 8383:tid 8408] [client 20.151.116.9:64302] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/htaccess.php"] [unique_id "ae1F2dFa2S3EsATMdWPKCgAAAAs"]
[Sun Apr 26 06:53:15.154918 2026] [:error] [pid 13196:tid 13210] [client 20.151.116.9:65257] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/htaccess.php"] [unique_id "ae1F28qUeXPgssvUw6CK5gAAAoY"]
[Sun Apr 26 06:53:17.895053 2026] [:error] [pid 8383:tid 8411] [client 20.151.116.9:64303] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/htaccess.php"] [unique_id "ae1F3dFa2S3EsATMdWPKEgAAAA4"]
[Sun Apr 26 06:53:20.794741 2026] [:error] [pid 8383:tid 8403] [client 20.151.116.9:64282] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/readme.php"] [unique_id "ae1F4NFa2S3EsATMdWPKGgAAAAY"]
[Sun Apr 26 06:53:22.300775 2026] [:error] [pid 8491:tid 8501] [client 20.151.116.9:65230] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/readme.php"] [unique_id "ae1F4iq7I7e6CJooQM2jqQAAAMI"]
[Sun Apr 26 06:53:23.662463 2026] [:error] [pid 13315:tid 13365] [client 20.151.116.9:65247] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/readme.php"] [unique_id "ae1F4w2NnZnCaSNNhH3BwwAAA9U"]
[Sun Apr 26 06:53:24.516429 2026] [:error] [pid 13196:tid 13218] [client 20.151.116.9:64283] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/readme.php"] [unique_id "ae1F5MqUeXPgssvUw6CK9wAAAo4"]
[Sun Apr 26 06:53:25.974088 2026] [:error] [pid 13315:tid 13366] [client 20.151.116.9:64368] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x50.php"] [unique_id "ae1F5Q2NnZnCaSNNhH3BzAAAA9Y"]
[Sun Apr 26 06:53:26.941810 2026] [:error] [pid 13315:tid 13346] [client 20.151.116.9:65258] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x50.php"] [unique_id "ae1F5g2NnZnCaSNNhH3B0AAAA8I"]
[Sun Apr 26 06:53:29.238512 2026] [:error] [pid 8390:tid 8474] [client 20.151.116.9:64307] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x50.php"] [unique_id "ae1F6YGPtFK_i9p5yxQj4QAAAJc"]
[Sun Apr 26 06:53:30.825175 2026] [:error] [pid 13197:tid 13255] [client 20.151.116.9:62088] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x50.php"] [unique_id "ae1F6t3kktFKdSxTrBuNXwAAAtc"]
[Sun Apr 26 06:53:31.796165 2026] [:error] [pid 8390:tid 8453] [client 20.151.116.9:62178] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fv.php"] [unique_id "ae1F64GPtFK_i9p5yxQj4wAAAII"]
[Sun Apr 26 06:53:34.776723 2026] [:error] [pid 8383:tid 8417] [client 20.151.116.9:60099] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fv.php"] [unique_id "ae1F7tFa2S3EsATMdWPKLwAAABQ"]
[Sun Apr 26 06:53:37.012725 2026] [:error] [pid 13197:tid 13242] [client 20.151.116.9:62131] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fv.php"] [unique_id "ae1F8d3kktFKdSxTrBuNZgAAAss"]
[Sun Apr 26 06:53:38.173520 2026] [:error] [pid 8383:tid 8409] [client 20.151.116.9:65159] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fv.php"] [unique_id "ae1F8tFa2S3EsATMdWPKMAAAAAw"]
[Sun Apr 26 06:53:40.086657 2026] [:error] [pid 13197:tid 13235] [client 20.151.116.9:64381] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file.php"] [unique_id "ae1F9N3kktFKdSxTrBuNaAAAAsQ"]
[Sun Apr 26 06:53:41.817201 2026] [:error] [pid 13315:tid 13368] [client 20.151.116.9:65176] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file.php"] [unique_id "ae1F9Q2NnZnCaSNNhH3B3AAAA9g"]
[Sun Apr 26 06:53:44.675414 2026] [:error] [pid 10315:tid 10322] [client 20.151.116.9:62102] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file.php"] [unique_id "ae1F-KJIw2vjkleLIaC-OwAAAQU"]
[Sun Apr 26 06:53:47.568835 2026] [:error] [pid 13197:tid 13254] [client 20.151.116.9:62147] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file.php"] [unique_id "ae1F-93kktFKdSxTrBuNbQAAAtY"]
[Sun Apr 26 06:53:51.008881 2026] [:error] [pid 8491:tid 8501] [client 20.151.116.9:65200] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lsd.php"] [unique_id "ae1F_yq7I7e6CJooQM2jtwAAAMI"]
[Sun Apr 26 06:53:52.894139 2026] [:error] [pid 13197:tid 13252] [client 20.151.116.9:62082] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lsd.php"] [unique_id "ae1GAN3kktFKdSxTrBuNdwAAAtQ"]
[Sun Apr 26 06:53:54.061029 2026] [proxy_fcgi:error] [pid 8383:tid 8398] [client 20.151.116.9:62115] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 06:53:54.273798 2026] [proxy_fcgi:error] [pid 8383:tid 8409] [client 20.151.116.9:62115] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 06:53:54.493277 2026] [proxy_fcgi:error] [pid 8383:tid 8403] [client 20.151.116.9:62115] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 06:53:54.705534 2026] [proxy_fcgi:error] [pid 8383:tid 8414] [client 20.151.116.9:62115] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 06:53:54.958182 2026] [proxy_fcgi:error] [pid 8383:tid 8412] [client 20.151.116.9:62115] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 06:53:55.739874 2026] [proxy_fcgi:error] [pid 8383:tid 8405] [client 20.151.116.9:62115] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 06:53:55.960290 2026] [proxy_fcgi:error] [pid 8383:tid 8407] [client 20.151.116.9:62115] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 06:53:56.247985 2026] [proxy_fcgi:error] [pid 8383:tid 8419] [client 20.151.116.9:62115] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 06:53:56.460172 2026] [proxy_fcgi:error] [pid 8383:tid 8418] [client 20.151.116.9:62115] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 06:53:57.390026 2026] [:error] [pid 8383:tid 8399] [client 20.151.116.9:62115] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/click.php"] [unique_id "ae1GBdFa2S3EsATMdWPKSQAAAAI"]
[Sun Apr 26 06:53:58.509120 2026] [:error] [pid 8390:tid 8470] [client 20.151.116.9:62156] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/click.php"] [unique_id "ae1GBoGPtFK_i9p5yxQj8wAAAJM"]
[Sun Apr 26 06:53:59.868392 2026] [:error] [pid 13197:tid 13246] [client 20.151.116.9:65213] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/click.php"] [unique_id "ae1GB93kktFKdSxTrBuNfAAAAs4"]
[Sun Apr 26 06:54:01.212363 2026] [:error] [pid 13315:tid 13368] [client 20.151.116.9:60647] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/click.php"] [unique_id "ae1GCQ2NnZnCaSNNhH3B-AAAA9g"]
[Sun Apr 26 06:54:02.517905 2026] [:error] [pid 41906:tid 41914] [client 20.151.116.9:64333] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/install.php"] [unique_id "ae1GCj3-0A3lxw9OXoA0EAAAAYY"]
[Sun Apr 26 06:54:04.391032 2026] [:error] [pid 13197:tid 13234] [client 20.151.116.9:65276] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/install.php"] [unique_id "ae1GDN3kktFKdSxTrBuNfQAAAsM"]
[Sun Apr 26 06:54:06.503052 2026] [:error] [pid 8390:tid 8472] [client 20.151.116.9:65242] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/install.php"] [unique_id "ae1GDoGPtFK_i9p5yxQj9wAAAJU"]
[Sun Apr 26 06:54:07.415992 2026] [:error] [pid 13315:tid 13347] [client 20.151.116.9:64358] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/install.php"] [unique_id "ae1GDw2NnZnCaSNNhH3CIAAAA8M"]
[Sun Apr 26 06:54:08.427021 2026] [:error] [pid 13137:tid 13145] [client 20.151.116.9:64380] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lv.php"] [unique_id "ae1GEN0RB4J0o4h5neHgRwAAAgU"]
[Sun Apr 26 06:54:09.587223 2026] [:error] [pid 13315:tid 13352] [client 20.151.116.9:65201] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lv.php"] [unique_id "ae1GEQ2NnZnCaSNNhH3CJwAAA8g"]
[Sun Apr 26 06:54:11.237892 2026] [:error] [pid 13197:tid 13239] [client 20.151.116.9:62151] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lv.php"] [unique_id "ae1GE93kktFKdSxTrBuNggAAAsg"]
[Sun Apr 26 06:54:13.328570 2026] [:error] [pid 13315:tid 13350] [client 20.151.116.9:64294] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lv.php"] [unique_id "ae1GFQ2NnZnCaSNNhH3CLQAAA8Y"]
[Sun Apr 26 06:54:15.254781 2026] [:error] [pid 13315:tid 13345] [client 20.151.116.9:62160] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/simple.php"] [unique_id "ae1GFw2NnZnCaSNNhH3CMAAAA8E"]
[Sun Apr 26 06:54:16.128018 2026] [:error] [pid 13315:tid 13356] [client 20.151.116.9:64349] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/simple.php"] [unique_id "ae1GGA2NnZnCaSNNhH3CNQAAA8w"]
[Sun Apr 26 06:54:17.062895 2026] [:error] [pid 13197:tid 13231] [client 20.151.116.9:65231] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/simple.php"] [unique_id "ae1GGd3kktFKdSxTrBuNmAAAAsA"]
[Sun Apr 26 06:54:17.794949 2026] [:error] [pid 13197:tid 13242] [client 20.151.116.9:65155] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/simple.php"] [unique_id "ae1GGd3kktFKdSxTrBuNmwAAAss"]
[Sun Apr 26 06:54:19.363873 2026] [:error] [pid 8385:tid 8434] [client 20.151.116.9:65243] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/css.php"] [unique_id "ae1GGzOy7_J84Wx3-oxtMwAAAEo"]
[Sun Apr 26 06:54:20.635734 2026] [:error] [pid 8390:tid 8461] [client 20.151.116.9:64322] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/css.php"] [unique_id "ae1GHIGPtFK_i9p5yxQkDAAAAIo"]
[Sun Apr 26 06:54:21.980173 2026] [:error] [pid 13315:tid 13345] [client 20.151.116.9:62120] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/css.php"] [unique_id "ae1GHQ2NnZnCaSNNhH3CQQAAA8E"]
[Sun Apr 26 06:54:23.093874 2026] [:error] [pid 13197:tid 13254] [client 20.151.116.9:64355] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/css.php"] [unique_id "ae1GH93kktFKdSxTrBuNpwAAAtY"]
[Sun Apr 26 06:54:23.770498 2026] [:error] [pid 13197:tid 13239] [client 20.151.116.9:65199] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cong.php"] [unique_id "ae1GH93kktFKdSxTrBuNqQAAAsg"]
[Sun Apr 26 06:54:24.305287 2026] [:error] [pid 13197:tid 13231] [client 20.151.116.9:65228] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cong.php"] [unique_id "ae1GIN3kktFKdSxTrBuNqwAAAsA"]
[Sun Apr 26 06:54:25.042220 2026] [:error] [pid 10315:tid 10326] [client 20.151.116.9:65246] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cong.php"] [unique_id "ae1GIaJIw2vjkleLIaC-RgAAAQk"]
[Sun Apr 26 06:54:25.755143 2026] [:error] [pid 13137:tid 13156] [client 20.151.116.9:64310] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cong.php"] [unique_id "ae1GId0RB4J0o4h5neHgSgAAAg8"]
[Sun Apr 26 06:54:26.777571 2026] [:error] [pid 8383:tid 8412] [client 20.151.116.9:62199] [client 20.151.116.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "ae1GItFa2S3EsATMdWPKVgAAAA8"]
[Sun Apr 26 06:54:27.524795 2026] [:error] [pid 41906:tid 41926] [client 20.151.116.9:65245] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cong.php"] [unique_id "ae1GIz3-0A3lxw9OXoA0GQAAAZI"]
[Sun Apr 26 06:54:28.374095 2026] [:error] [pid 13137:tid 13148] [client 20.151.116.9:62197] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cong.php"] [unique_id "ae1GJN0RB4J0o4h5neHgSwAAAgg"]
[Sun Apr 26 06:54:29.332983 2026] [:error] [pid 8383:tid 8413] [client 20.151.116.9:64270] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cong.php"] [unique_id "ae1GJdFa2S3EsATMdWPKYAAAABA"]
[Sun Apr 26 06:54:30.142775 2026] [:error] [pid 8383:tid 8408] [client 20.151.116.9:64289] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/w.php"] [unique_id "ae1GJtFa2S3EsATMdWPKZAAAAAs"]
[Sun Apr 26 06:54:30.769100 2026] [:error] [pid 8383:tid 8409] [client 20.151.116.9:65184] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/w.php"] [unique_id "ae1GJtFa2S3EsATMdWPKZgAAAAw"]
[Sun Apr 26 06:54:31.361328 2026] [:error] [pid 8383:tid 8402] [client 20.151.116.9:62095] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/w.php"] [unique_id "ae1GJ9Fa2S3EsATMdWPKaAAAAAU"]
[Sun Apr 26 06:54:31.941842 2026] [:error] [pid 8383:tid 8412] [client 20.151.116.9:65154] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/w.php"] [unique_id "ae1GJ9Fa2S3EsATMdWPKagAAAA8"]
[Sun Apr 26 06:54:32.593977 2026] [:error] [pid 13137:tid 13151] [client 20.151.116.9:60142] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/404.php"] [unique_id "ae1GKN0RB4J0o4h5neHgTAAAAgo"]
[Sun Apr 26 06:54:34.168285 2026] [:error] [pid 13137:tid 13159] [client 20.151.116.9:64319] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/404.php"] [unique_id "ae1GKt0RB4J0o4h5neHgUgAAAhI"]
[Sun Apr 26 06:54:35.169147 2026] [:error] [pid 13137:tid 13141] [client 20.151.116.9:65204] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/404.php"] [unique_id "ae1GK90RB4J0o4h5neHgVwAAAgE"]
[Sun Apr 26 06:54:37.541105 2026] [:error] [pid 8385:tid 8427] [client 20.151.116.9:64257] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/404.php"] [unique_id "ae1GLTOy7_J84Wx3-oxtVgAAAEM"]
[Sun Apr 26 06:54:38.368520 2026] [:error] [pid 8390:tid 8460] [client 20.151.116.9:62087] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ioxi-o.php"] [unique_id "ae1GLoGPtFK_i9p5yxQkFgAAAIk"]
[Sun Apr 26 06:54:39.042571 2026] [:error] [pid 8390:tid 8475] [client 20.151.116.9:62150] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ioxi-o.php"] [unique_id "ae1GL4GPtFK_i9p5yxQkGAAAAJg"]
[Sun Apr 26 06:54:40.022511 2026] [:error] [pid 13315:tid 13355] [client 20.151.116.9:65279] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ioxi-o.php"] [unique_id "ae1GMA2NnZnCaSNNhH3CSgAAA8s"]
[Sun Apr 26 06:54:40.744127 2026] [:error] [pid 13315:tid 13351] [client 20.151.116.9:64274] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ioxi-o.php"] [unique_id "ae1GMA2NnZnCaSNNhH3CTQAAA8c"]
[Sun Apr 26 06:54:41.760369 2026] [:error] [pid 8383:tid 8415] [client 20.151.116.9:64287] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/0x.php"] [unique_id "ae1GMdFa2S3EsATMdWPKdwAAABI"]
[Sun Apr 26 06:54:42.797395 2026] [:error] [pid 13315:tid 13368] [client 20.151.116.9:62200] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/0x.php"] [unique_id "ae1GMg2NnZnCaSNNhH3CUQAAA9g"]
[Sun Apr 26 06:54:43.935127 2026] [:error] [pid 13315:tid 13365] [client 20.151.116.9:62168] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/0x.php"] [unique_id "ae1GMw2NnZnCaSNNhH3CUwAAA9U"]
[Sun Apr 26 06:54:45.050455 2026] [:error] [pid 13197:tid 13255] [client 20.151.116.9:62167] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/0x.php"] [unique_id "ae1GNd3kktFKdSxTrBuNtAAAAtc"]
[Sun Apr 26 06:54:45.859550 2026] [:error] [pid 13197:tid 13237] [client 20.151.116.9:62184] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/css.php"] [unique_id "ae1GNd3kktFKdSxTrBuNtQAAAsY"]
[Sun Apr 26 06:54:47.486753 2026] [:error] [pid 8383:tid 8399] [client 20.151.116.9:65254] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/css.php"] [unique_id "ae1GN9Fa2S3EsATMdWPKggAAAAI"]
[Sun Apr 26 06:54:49.559182 2026] [:error] [pid 13197:tid 13253] [client 20.151.116.9:62157] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/css.php"] [unique_id "ae1GOd3kktFKdSxTrBuNuAAAAtU"]
[Sun Apr 26 06:54:51.908683 2026] [:error] [pid 8491:tid 8524] [client 20.151.116.9:64367] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/css.php"] [unique_id "ae1GOyq7I7e6CJooQM2jxwAAANg"]
[Sun Apr 26 06:54:53.410555 2026] [:error] [pid 13315:tid 13363] [client 20.151.116.9:60134] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/222.php"] [unique_id "ae1GPQ2NnZnCaSNNhH3CXgAAA9M"]
[Sun Apr 26 06:54:54.459949 2026] [:error] [pid 13197:tid 13231] [client 20.151.116.9:64285] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/222.php"] [unique_id "ae1GPt3kktFKdSxTrBuNvAAAAsA"]
[Sun Apr 26 06:54:55.855853 2026] [:error] [pid 41906:tid 41919] [client 20.151.116.9:65227] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/222.php"] [unique_id "ae1GPz3-0A3lxw9OXoA0KAAAAYs"]
[Sun Apr 26 06:54:57.051363 2026] [proxy_fcgi:error] [pid 13315:tid 13352] [client 20.151.116.9:62203] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 06:54:57.472183 2026] [proxy_fcgi:error] [pid 13315:tid 13364] [client 20.151.116.9:62203] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 06:54:58.364937 2026] [proxy_fcgi:error] [pid 13315:tid 13354] [client 20.151.116.9:62203] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 06:54:58.592959 2026] [proxy_fcgi:error] [pid 13315:tid 13367] [client 20.151.116.9:62203] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 06:54:58.901254 2026] [proxy_fcgi:error] [pid 13315:tid 13344] [client 20.151.116.9:62203] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 06:54:59.110751 2026] [proxy_fcgi:error] [pid 13315:tid 13351] [client 20.151.116.9:62203] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 06:54:59.320499 2026] [proxy_fcgi:error] [pid 13315:tid 13356] [client 20.151.116.9:62203] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 06:54:59.529049 2026] [proxy_fcgi:error] [pid 13315:tid 13346] [client 20.151.116.9:62203] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 06:55:00.130025 2026] [:error] [pid 13315:tid 13363] [client 20.151.116.9:62203] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "ae1GRA2NnZnCaSNNhH3CfgAAA9M"]
[Sun Apr 26 06:55:01.954958 2026] [:error] [pid 8491:tid 8510] [client 20.151.116.9:65277] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "ae1GRSq7I7e6CJooQM2jzQAAAMs"]
[Sun Apr 26 06:55:03.585534 2026] [:error] [pid 13197:tid 13246] [client 20.151.116.9:56908] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "ae1GR93kktFKdSxTrBuNvgAAAs4"]
[Sun Apr 26 06:55:05.074538 2026] [:error] [pid 13315:tid 13355] [client 20.151.116.9:65268] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "ae1GSQ2NnZnCaSNNhH3CnQAAA8s"]
[Sun Apr 26 06:55:06.654451 2026] [:error] [pid 13197:tid 13238] [client 20.151.116.9:64354] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "ae1GSt3kktFKdSxTrBuNvwAAAsc"]
[Sun Apr 26 06:55:07.695521 2026] [:error] [pid 41906:tid 41925] [client 20.151.116.9:64261] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "ae1GSz3-0A3lxw9OXoA0KgAAAZE"]
[Sun Apr 26 06:55:08.986303 2026] [:error] [pid 8383:tid 8407] [client 20.151.116.9:64331] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "ae1GTNFa2S3EsATMdWPKiwAAAAo"]
[Sun Apr 26 06:55:10.289407 2026] [:error] [pid 13315:tid 13362] [client 20.151.116.9:62109] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "ae1GTg2NnZnCaSNNhH3CpAAAA9I"]
[Sun Apr 26 06:55:11.778423 2026] [:error] [pid 13315:tid 13355] [client 20.151.116.9:60630] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "ae1GTw2NnZnCaSNNhH3CqgAAA8s"]
[Sun Apr 26 06:55:14.466811 2026] [:error] [pid 13197:tid 13248] [client 20.151.116.9:62181] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "ae1GUt3kktFKdSxTrBuNyQAAAtA"]
[Sun Apr 26 06:55:15.088630 2026] [:error] [pid 13315:tid 13364] [client 20.151.116.9:62162] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "ae1GUw2NnZnCaSNNhH3CrgAAA9Q"]
[Sun Apr 26 06:55:16.085208 2026] [:error] [pid 13197:tid 13246] [client 20.151.116.9:62100] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "ae1GVN3kktFKdSxTrBuN0AAAAs4"]
[Sun Apr 26 06:55:17.121359 2026] [:error] [pid 8385:tid 8440] [client 20.151.116.9:65273] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/manager.php"] [unique_id "ae1GVTOy7_J84Wx3-oxtYwAAAFA"]
[Sun Apr 26 06:55:18.378744 2026] [:error] [pid 8390:tid 8474] [client 20.151.116.9:64347] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/manager.php"] [unique_id "ae1GVoGPtFK_i9p5yxQkKQAAAJc"]
[Sun Apr 26 06:55:19.220908 2026] [:error] [pid 8491:tid 8509] [client 20.151.116.9:62083] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/manager.php"] [unique_id "ae1GVyq7I7e6CJooQM2j1AAAAMo"]
[Sun Apr 26 06:55:20.820395 2026] [:error] [pid 8491:tid 8506] [client 20.151.116.9:60132] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/manager.php"] [unique_id "ae1GWCq7I7e6CJooQM2j1gAAAMc"]
[Sun Apr 26 06:55:22.378222 2026] [:error] [pid 8491:tid 8501] [client 20.151.116.9:65191] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/item.php"] [unique_id "ae1GWiq7I7e6CJooQM2j2QAAAMI"]
[Sun Apr 26 06:55:23.586459 2026] [:error] [pid 13315:tid 13367] [client 20.151.116.9:60620] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/item.php"] [unique_id "ae1GWw2NnZnCaSNNhH3CsAAAA9c"]
[Sun Apr 26 06:55:24.826509 2026] [:error] [pid 8491:tid 8505] [client 20.151.116.9:64314] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/item.php"] [unique_id "ae1GXCq7I7e6CJooQM2j2wAAAMY"]
[Sun Apr 26 06:55:25.883013 2026] [:error] [pid 8491:tid 8514] [client 20.151.116.9:62117] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/item.php"] [unique_id "ae1GXSq7I7e6CJooQM2j3QAAAM8"]
[Sun Apr 26 06:55:26.772474 2026] [:error] [pid 8491:tid 8519] [client 20.151.116.9:62143] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "ae1GXiq7I7e6CJooQM2j3gAAANQ"]
[Sun Apr 26 06:55:27.913908 2026] [:error] [pid 10315:tid 10328] [client 20.151.116.9:64297] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "ae1GX6JIw2vjkleLIaC-UwAAAQs"]
[Sun Apr 26 06:55:28.682653 2026] [:error] [pid 8383:tid 8411] [client 20.151.116.9:62129] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "ae1GYNFa2S3EsATMdWPKkgAAAA4"]
[Sun Apr 26 06:55:29.443328 2026] [:error] [pid 8491:tid 8500] [client 20.151.116.9:64288] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "ae1GYSq7I7e6CJooQM2j4AAAAME"]
[Sun Apr 26 06:55:30.754683 2026] [:error] [pid 8491:tid 8521] [client 20.151.116.9:64275] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/404.php"] [unique_id "ae1GYiq7I7e6CJooQM2j4gAAANY"]
[Sun Apr 26 06:55:31.386321 2026] [:error] [pid 13315:tid 13356] [client 20.151.116.9:65219] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/404.php"] [unique_id "ae1GYw2NnZnCaSNNhH3CtQAAA8w"]
[Sun Apr 26 06:55:32.257194 2026] [:error] [pid 8390:tid 8463] [client 20.151.116.9:64338] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/404.php"] [unique_id "ae1GZIGPtFK_i9p5yxQkMgAAAIw"]
[Sun Apr 26 06:55:33.347751 2026] [:error] [pid 13315:tid 13368] [client 20.151.116.9:64282] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/404.php"] [unique_id "ae1GZQ2NnZnCaSNNhH3CuwAAA9g"]
[Sun Apr 26 06:55:34.865612 2026] [:error] [pid 13197:tid 13253] [client 20.151.116.9:64335] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mail.php"] [unique_id "ae1GZt3kktFKdSxTrBuN1gAAAtU"]
[Sun Apr 26 06:55:36.327529 2026] [:error] [pid 8383:tid 8408] [client 20.151.116.9:65181] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mail.php"] [unique_id "ae1GaNFa2S3EsATMdWPKoQAAAAs"]
[Sun Apr 26 06:55:38.229127 2026] [:error] [pid 13315:tid 13360] [client 20.151.116.9:60658] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mail.php"] [unique_id "ae1Gag2NnZnCaSNNhH3CygAAA9A"]
[Sun Apr 26 06:55:39.327825 2026] [:error] [pid 10315:tid 10330] [client 20.151.116.9:62155] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mail.php"] [unique_id "ae1Ga6JIw2vjkleLIaC-VwAAAQ0"]
[Sun Apr 26 06:55:40.217802 2026] [:error] [pid 13315:tid 13367] [client 20.151.116.9:64353] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "ae1GbA2NnZnCaSNNhH3C0wAAA9c"]
[Sun Apr 26 06:55:41.781564 2026] [:error] [pid 13315:tid 13344] [client 20.151.116.9:65174] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "ae1GbQ2NnZnCaSNNhH3C2QAAA8A"]
[Sun Apr 26 06:55:43.844294 2026] [:error] [pid 8383:tid 8420] [client 20.151.116.9:60032] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "ae1Gb9Fa2S3EsATMdWPKowAAABc"]
[Sun Apr 26 06:55:45.191777 2026] [:error] [pid 8491:tid 8509] [client 20.151.116.9:62123] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "ae1GcSq7I7e6CJooQM2j5wAAAMo"]
[Sun Apr 26 06:55:46.989839 2026] [:error] [pid 13137:tid 13165] [client 20.151.116.9:62190] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sx.php"] [unique_id "ae1Gct0RB4J0o4h5neHgiwAAAhg"]
[Sun Apr 26 06:55:49.022544 2026] [:error] [pid 8383:tid 8413] [client 20.151.116.9:65269] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sx.php"] [unique_id "ae1GddFa2S3EsATMdWPKpQAAABA"]
[Sun Apr 26 06:55:51.008857 2026] [:error] [pid 13315:tid 13355] [client 20.151.116.9:60066] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sx.php"] [unique_id "ae1Gdw2NnZnCaSNNhH3C4QAAA8s"]
[Sun Apr 26 06:55:53.140069 2026] [:error] [pid 13137:tid 13159] [client 20.151.116.9:65171] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sx.php"] [unique_id "ae1Ged0RB4J0o4h5neHgjQAAAhI"]
[Sun Apr 26 06:55:55.334069 2026] [:error] [pid 13315:tid 13344] [client 20.151.116.9:65217] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "ae1Gew2NnZnCaSNNhH3C5gAAA8A"]
[Sun Apr 26 06:55:56.666269 2026] [:error] [pid 13315:tid 13351] [client 20.151.116.9:65272] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "ae1GfA2NnZnCaSNNhH3C5wAAA8c"]
[Sun Apr 26 06:55:58.415539 2026] [:error] [pid 13315:tid 13349] [client 20.151.116.9:62204] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "ae1Gfg2NnZnCaSNNhH3DAAAAA8U"]
[Sun Apr 26 06:55:59.793418 2026] [proxy_fcgi:error] [pid 10315:tid 10340] [client 20.151.116.9:62187] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 06:56:00.004080 2026] [proxy_fcgi:error] [pid 10315:tid 10325] [client 20.151.116.9:62187] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 06:56:00.215690 2026] [proxy_fcgi:error] [pid 10315:tid 10319] [client 20.151.116.9:62187] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 06:56:00.490782 2026] [proxy_fcgi:error] [pid 10315:tid 10332] [client 20.151.116.9:62187] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 06:56:01.954655 2026] [proxy_fcgi:error] [pid 10315:tid 10341] [client 20.151.116.9:62187] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 06:56:02.183487 2026] [:error] [pid 10315:tid 10317] [client 20.151.116.9:62187] [client 20.151.116.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "ae1GgqJIw2vjkleLIaC-ngAAAQA"]
[Sun Apr 26 06:56:03.521897 2026] [proxy_fcgi:error] [pid 15001:tid 15016] [client 20.151.116.9:64337] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 06:56:04.295678 2026] [:error] [pid 15001:tid 15022] [client 20.151.116.9:64337] [client 20.151.116.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "ae1GhPW5sb7QMhwb3GdyogAAAVM"]
[Sun Apr 26 06:56:06.274904 2026] [:error] [pid 15001:tid 15010] [client 20.151.116.9:64329] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/filemanager/dialog.php"] [unique_id "ae1GhvW5sb7QMhwb3GdyqwAAAUc"]
[Sun Apr 26 06:56:06.917329 2026] [:error] [pid 15001:tid 15015] [client 20.151.116.9:62089] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/filemanager/dialog.php"] [unique_id "ae1GhvW5sb7QMhwb3GdysAAAAUw"]
[Sun Apr 26 06:56:08.176575 2026] [:error] [pid 13315:tid 13359] [client 20.151.116.9:60655] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/filemanager/dialog.php"] [unique_id "ae1GiA2NnZnCaSNNhH3DHwAAA88"]
[Sun Apr 26 06:56:10.892679 2026] [:error] [pid 13315:tid 13349] [client 20.151.116.9:65264] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/filemanager/dialog.php"] [unique_id "ae1Gig2NnZnCaSNNhH3DJAAAA8U"]
[Sun Apr 26 06:56:12.481811 2026] [:error] [pid 10315:tid 10331] [client 20.151.116.9:62145] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "ae1GjKJIw2vjkleLIaC-oAAAAQ4"]
[Sun Apr 26 06:56:15.410880 2026] [:error] [pid 15001:tid 15005] [client 20.151.116.9:62104] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "ae1Gj_W5sb7QMhwb3Gdy0AAAAUI"]
[Sun Apr 26 06:56:18.606580 2026] [:error] [pid 15001:tid 15025] [client 20.151.116.9:64305] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "ae1GkvW5sb7QMhwb3Gdy4gAAAVY"]
[Sun Apr 26 06:56:20.413010 2026] [:error] [pid 13315:tid 13360] [client 20.151.116.9:64265] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "ae1GlA2NnZnCaSNNhH3DLQAAA9A"]
[Sun Apr 26 06:56:22.259444 2026] [:error] [pid 10315:tid 10335] [client 20.151.116.9:65173] [client 20.151.116.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "ae1GlqJIw2vjkleLIaC-pAAAARI"]
[Sun Apr 26 06:56:23.836288 2026] [:error] [pid 10315:tid 10319] [client 20.151.116.9:65259] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/index/function.php"] [unique_id "ae1Gl6JIw2vjkleLIaC-pQAAAQI"]
[Sun Apr 26 06:56:25.950276 2026] [:error] [pid 10315:tid 10317] [client 20.151.116.9:65210] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/index/function.php"] [unique_id "ae1GmaJIw2vjkleLIaC-qgAAAQA"]
[Sun Apr 26 06:56:27.106028 2026] [:error] [pid 13137:tid 13141] [client 20.151.116.9:62112] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/index/function.php"] [unique_id "ae1Gm90RB4J0o4h5neHgwQAAAgE"]
[Sun Apr 26 06:56:28.221707 2026] [:error] [pid 13197:tid 13241] [client 20.151.116.9:56907] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "ae1GnN3kktFKdSxTrBuOFwAAAso"]
[Sun Apr 26 06:56:29.777864 2026] [:error] [pid 8390:tid 8461] [client 20.151.116.9:62165] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "ae1GnYGPtFK_i9p5yxQkrAAAAIo"]
[Sun Apr 26 06:56:32.151944 2026] [:error] [pid 13197:tid 13238] [client 20.151.116.9:62116] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "ae1GoN3kktFKdSxTrBuOHQAAAsc"]
[Sun Apr 26 06:56:33.974787 2026] [:error] [pid 13197:tid 13236] [client 20.151.116.9:64316] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "ae1God3kktFKdSxTrBuOIQAAAsU"]
[Sun Apr 26 06:56:37.461169 2026] [:error] [pid 13197:tid 13233] [client 20.151.116.9:60044] [client 20.151.116.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "ae1Gpd3kktFKdSxTrBuOJwAAAsI"]
[Sun Apr 26 06:56:39.163570 2026] [:error] [pid 13197:tid 13245] [client 20.151.116.9:65237] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ww1.php"] [unique_id "ae1Gp93kktFKdSxTrBuOLAAAAs0"]
[Sun Apr 26 06:56:41.084856 2026] [:error] [pid 8383:tid 8399] [client 20.151.116.9:65221] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ww1.php"] [unique_id "ae1GqdFa2S3EsATMdWPK2wAAAAI"]
[Sun Apr 26 06:56:43.186995 2026] [:error] [pid 15001:tid 15015] [client 20.151.116.9:60041] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ww1.php"] [unique_id "ae1Gq_W5sb7QMhwb3GdzAwAAAUw"]
[Sun Apr 26 06:56:45.831620 2026] [:error] [pid 15001:tid 15017] [client 20.151.116.9:64318] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/about/function.php"] [unique_id "ae1GrfW5sb7QMhwb3GdzBAAAAU4"]
[Sun Apr 26 06:56:47.769589 2026] [:error] [pid 15001:tid 15016] [client 20.151.116.9:65271] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/about/function.php"] [unique_id "ae1Gr_W5sb7QMhwb3GdzBgAAAU0"]
[Sun Apr 26 06:56:49.088505 2026] [:error] [pid 10315:tid 10324] [client 20.151.116.9:64256] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/about/function.php"] [unique_id "ae1GsaJIw2vjkleLIaC-rwAAAQc"]
[Sun Apr 26 06:56:51.338995 2026] [:error] [pid 13197:tid 13253] [client 20.151.116.9:65209] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/about/function.php"] [unique_id "ae1Gs93kktFKdSxTrBuOSgAAAtU"]
[Sun Apr 26 06:56:52.582279 2026] [:error] [pid 10315:tid 10329] [client 20.151.116.9:62099] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin/function.php"] [unique_id "ae1GtKJIw2vjkleLIaC-sgAAAQw"]
[Sun Apr 26 06:56:53.956753 2026] [:error] [pid 8385:tid 8432] [client 20.151.116.9:62105] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin/function.php"] [unique_id "ae1GtTOy7_J84Wx3-oxtowAAAEg"]
[Sun Apr 26 06:56:54.798780 2026] [:error] [pid 13197:tid 13237] [client 20.151.116.9:62201] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin/function.php"] [unique_id "ae1Gtt3kktFKdSxTrBuOTgAAAsY"]
[Sun Apr 26 06:56:55.580376 2026] [:error] [pid 10315:tid 10321] [client 20.151.116.9:64369] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin/function.php"] [unique_id "ae1Gt6JIw2vjkleLIaC-twAAAQQ"]
[Sun Apr 26 06:56:56.389730 2026] [:error] [pid 10315:tid 10336] [client 20.151.116.9:60651] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "ae1GuKJIw2vjkleLIaC-uQAAARM"]
[Sun Apr 26 06:56:57.326351 2026] [:error] [pid 8385:tid 8448] [client 20.151.116.9:62152] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "ae1GuTOy7_J84Wx3-oxtpAAAAFg"]
[Sun Apr 26 06:56:58.219114 2026] [:error] [pid 13137:tid 13159] [client 20.151.116.9:65163] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "ae1Gut0RB4J0o4h5neHgywAAAhI"]
[Sun Apr 26 06:56:59.543579 2026] [:error] [pid 8390:tid 8459] [client 20.151.116.9:64317] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "ae1Gu4GPtFK_i9p5yxQkrgAAAIg"]
[Sun Apr 26 06:57:01.051316 2026] [:error] [pid 13137:tid 13163] [client 20.151.116.9:62106] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "ae1Gvd0RB4J0o4h5neHgzgAAAhY"]
[Sun Apr 26 06:57:02.729674 2026] [:error] [pid 8390:tid 8460] [client 20.151.116.9:64379] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "ae1GvoGPtFK_i9p5yxQksQAAAIk"]
[Sun Apr 26 06:57:04.042932 2026] [:error] [pid 13315:tid 13362] [client 20.151.116.9:60599] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "ae1GwA2NnZnCaSNNhH3DOAAAA9I"]
[Sun Apr 26 06:57:05.456677 2026] [:error] [pid 13197:tid 13244] [client 20.151.116.9:65175] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "ae1Gwd3kktFKdSxTrBuOUgAAAsw"]
[Sun Apr 26 06:57:07.867556 2026] [proxy_fcgi:error] [pid 41906:tid 41932] [client 20.151.116.9:60646] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 06:57:09.054535 2026] [:error] [pid 41906:tid 41925] [client 20.151.116.9:60646] [client 20.151.116.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "ae1GxT3-0A3lxw9OXoA0fQAAAZE"]
[Sun Apr 26 06:57:12.548047 2026] [:error] [pid 8383:tid 8414] [client 20.151.116.9:62174] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class.php"] [unique_id "ae1GyNFa2S3EsATMdWPK5gAAABE"]
[Sun Apr 26 06:57:13.334604 2026] [:error] [pid 15001:tid 15026] [client 20.151.116.9:62126] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class.php"] [unique_id "ae1GyfW5sb7QMhwb3GdzHQAAAVc"]
[Sun Apr 26 06:57:14.131699 2026] [:error] [pid 10315:tid 10329] [client 20.151.116.9:60597] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class.php"] [unique_id "ae1GyqJIw2vjkleLIaC-xQAAAQw"]
[Sun Apr 26 06:57:14.966059 2026] [:error] [pid 10315:tid 10318] [client 20.151.116.9:65193] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class.php"] [unique_id "ae1GyqJIw2vjkleLIaC-xwAAAQE"]
[Sun Apr 26 06:57:16.399576 2026] [:error] [pid 13197:tid 13244] [client 20.151.116.9:60561] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bless5.php"] [unique_id "ae1GzN3kktFKdSxTrBuOZAAAAsw"]
[Sun Apr 26 06:57:17.273730 2026] [:error] [pid 13137:tid 13156] [client 20.151.116.9:64281] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bless5.php"] [unique_id "ae1Gzd0RB4J0o4h5neHg0gAAAg8"]
[Sun Apr 26 06:57:17.988276 2026] [:error] [pid 8491:tid 8505] [client 20.151.116.9:62149] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bless5.php"] [unique_id "ae1GzSq7I7e6CJooQM2kOgAAAMY"]
[Sun Apr 26 06:57:18.618307 2026] [:error] [pid 13137:tid 13152] [client 20.151.116.9:65195] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bless5.php"] [unique_id "ae1Gzt0RB4J0o4h5neHg0wAAAgs"]
[Sun Apr 26 06:57:19.619676 2026] [:error] [pid 8385:tid 8434] [client 20.151.116.9:60609] [client 20.151.116.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "ae1GzzOy7_J84Wx3-oxtrwAAAEo"]
[Sun Apr 26 06:57:20.460011 2026] [:error] [pid 8491:tid 8524] [client 20.151.116.9:60059] [client 20.151.116.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/block-patterns/index.php"] [unique_id "ae1G0Cq7I7e6CJooQM2kPAAAANg"]
[Sun Apr 26 06:57:21.691121 2026] [:error] [pid 8385:tid 8440] [client 20.151.116.9:62121] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lock360.php"] [unique_id "ae1G0TOy7_J84Wx3-oxtswAAAFA"]
[Sun Apr 26 06:57:23.914085 2026] [:error] [pid 13197:tid 13238] [client 20.151.116.9:62159] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lock360.php"] [unique_id "ae1G093kktFKdSxTrBuOgQAAAsc"]
[Sun Apr 26 06:57:28.366286 2026] [:error] [pid 15001:tid 15011] [client 20.151.116.9:65249] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lock360.php"] [unique_id "ae1G2PW5sb7QMhwb3GdzKgAAAUg"]
[Sun Apr 26 06:57:30.516049 2026] [:error] [pid 15001:tid 15022] [client 20.151.116.9:64370] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lock360.php"] [unique_id "ae1G2vW5sb7QMhwb3GdzMAAAAVM"]
[Sun Apr 26 06:57:32.330031 2026] [:error] [pid 8383:tid 8399] [client 20.151.116.9:60552] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f35.php"] [unique_id "ae1G3NFa2S3EsATMdWPK7AAAAAI"]
[Sun Apr 26 06:57:34.326302 2026] [:error] [pid 13197:tid 13234] [client 20.151.116.9:62163] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f35.php"] [unique_id "ae1G3t3kktFKdSxTrBuOrAAAAsM"]
[Sun Apr 26 06:57:36.650899 2026] [:error] [pid 15001:tid 15027] [client 20.151.116.9:64284] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f35.php"] [unique_id "ae1G4PW5sb7QMhwb3GdzOwAAAVg"]
[Sun Apr 26 06:57:38.505761 2026] [:error] [pid 15001:tid 15023] [client 20.151.116.9:65164] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f35.php"] [unique_id "ae1G4vW5sb7QMhwb3GdzQAAAAVQ"]
[Sun Apr 26 06:57:40.514042 2026] [:error] [pid 15001:tid 15021] [client 20.151.116.9:62141] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ioxi-o1.php"] [unique_id "ae1G5PW5sb7QMhwb3GdzTAAAAVI"]
[Sun Apr 26 06:57:42.145358 2026] [:error] [pid 10315:tid 10337] [client 20.151.116.9:62092] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ioxi-o1.php"] [unique_id "ae1G5qJIw2vjkleLIaC-1AAAARQ"]
[Sun Apr 26 06:57:43.549317 2026] [:error] [pid 10315:tid 10321] [client 20.151.116.9:62189] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ioxi-o1.php"] [unique_id "ae1G56JIw2vjkleLIaC-1wAAAQQ"]
[Sun Apr 26 06:57:45.707471 2026] [:error] [pid 10315:tid 10324] [client 20.151.116.9:62101] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ioxi-o1.php"] [unique_id "ae1G6aJIw2vjkleLIaC-4gAAAQc"]
[Sun Apr 26 06:57:47.341690 2026] [:error] [pid 15001:tid 15015] [client 20.151.116.9:62125] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/juuuu.php"] [unique_id "ae1G6_W5sb7QMhwb3GdzdAAAAUw"]
[Sun Apr 26 06:57:48.695910 2026] [:error] [pid 15001:tid 15019] [client 20.151.116.9:65183] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/juuuu.php"] [unique_id "ae1G7PW5sb7QMhwb3GdzfwAAAVA"]
[Sun Apr 26 06:57:50.497492 2026] [:error] [pid 15001:tid 15017] [client 20.151.116.9:65265] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/juuuu.php"] [unique_id "ae1G7vW5sb7QMhwb3GdziQAAAU4"]
[Sun Apr 26 06:57:51.720403 2026] [:error] [pid 15001:tid 15008] [client 20.151.116.9:65252] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/juuuu.php"] [unique_id "ae1G7_W5sb7QMhwb3GdzigAAAUU"]
[Sun Apr 26 06:57:52.731343 2026] [:error] [pid 15001:tid 15003] [client 20.151.116.9:65196] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ha.php"] [unique_id "ae1G8PW5sb7QMhwb3GdzjAAAAUA"]
[Sun Apr 26 06:57:54.139451 2026] [:error] [pid 15001:tid 15007] [client 20.151.116.9:56946] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ha.php"] [unique_id "ae1G8vW5sb7QMhwb3GdzkQAAAUQ"]
[Sun Apr 26 06:57:55.403338 2026] [:error] [pid 15001:tid 15017] [client 20.151.116.9:65166] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ha.php"] [unique_id "ae1G8_W5sb7QMhwb3GdzlAAAAU4"]
[Sun Apr 26 06:57:56.796465 2026] [:error] [pid 41906:tid 41911] [client 20.151.116.9:65209] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ha.php"] [unique_id "ae1G9D3-0A3lxw9OXoA0jAAAAYM"]
[Sun Apr 26 06:57:58.430968 2026] [:error] [pid 13137:tid 13155] [client 20.151.116.9:62146] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gg.php"] [unique_id "ae1G9t0RB4J0o4h5neHg1wAAAg4"]
[Sun Apr 26 06:57:59.354809 2026] [:error] [pid 15001:tid 15013] [client 20.151.116.9:64351] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gg.php"] [unique_id "ae1G9_W5sb7QMhwb3GdznwAAAUo"]
[Sun Apr 26 06:58:00.473464 2026] [:error] [pid 41906:tid 41924] [client 20.151.116.9:64326] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gg.php"] [unique_id "ae1G-D3-0A3lxw9OXoA0jgAAAZA"]
[Sun Apr 26 06:58:01.330688 2026] [:error] [pid 15001:tid 15012] [client 20.151.116.9:60558] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gg.php"] [unique_id "ae1G-fW5sb7QMhwb3GdzowAAAUk"]
[Sun Apr 26 06:58:03.143567 2026] [:error] [pid 15001:tid 15005] [client 20.151.116.9:62102] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/we2.php"] [unique_id "ae1G-_W5sb7QMhwb3GdzpgAAAUI"]
[Sun Apr 26 06:58:03.783857 2026] [:error] [pid 13137:tid 13162] [client 20.151.116.9:62110] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/we2.php"] [unique_id "ae1G-90RB4J0o4h5neHg3AAAAhU"]
[Sun Apr 26 06:58:05.387357 2026] [:error] [pid 13197:tid 13251] [client 20.151.116.9:65258] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/we2.php"] [unique_id "ae1G_d3kktFKdSxTrBuO0QAAAtM"]
[Sun Apr 26 06:58:06.454202 2026] [:error] [pid 15001:tid 15016] [client 20.151.116.9:65253] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/we2.php"] [unique_id "ae1G_vW5sb7QMhwb3GdzrAAAAU0"]
[Sun Apr 26 06:58:07.252304 2026] [:error] [pid 41906:tid 41918] [client 20.151.116.9:65189] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/04.php"] [unique_id "ae1G_z3-0A3lxw9OXoA0lQAAAYo"]
[Sun Apr 26 06:58:08.296074 2026] [:error] [pid 8390:tid 8463] [client 20.151.116.9:60622] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/04.php"] [unique_id "ae1HAIGPtFK_i9p5yxQkvgAAAIw"]
[Sun Apr 26 06:58:11.079994 2026] [:error] [pid 8385:tid 8441] [client 20.151.116.9:64298] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/04.php"] [unique_id "ae1HAzOy7_J84Wx3-oxtwgAAAFE"]
[Sun Apr 26 06:58:14.169762 2026] [proxy_fcgi:error] [pid 8491:tid 8509] [client 20.151.116.9:62177] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 06:58:14.708941 2026] [proxy_fcgi:error] [pid 8491:tid 8515] [client 20.151.116.9:62177] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 06:58:14.927554 2026] [proxy_fcgi:error] [pid 8491:tid 8503] [client 20.151.116.9:62177] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 06:58:15.199264 2026] [proxy_fcgi:error] [pid 8491:tid 8514] [client 20.151.116.9:62177] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 06:58:15.432745 2026] [proxy_fcgi:error] [pid 8491:tid 8504] [client 20.151.116.9:62177] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 06:58:15.696431 2026] [proxy_fcgi:error] [pid 8491:tid 8499] [client 20.151.116.9:62177] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 06:58:17.274173 2026] [proxy_fcgi:error] [pid 8491:tid 8501] [client 20.151.116.9:62177] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 06:58:18.824142 2026] [proxy_fcgi:error] [pid 8491:tid 8511] [client 20.151.116.9:62177] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 06:58:19.040034 2026] [proxy_fcgi:error] [pid 8491:tid 8518] [client 20.151.116.9:62177] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 06:58:19.286888 2026] [proxy_fcgi:error] [pid 8491:tid 8506] [client 20.151.116.9:62177] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 06:58:19.499706 2026] [proxy_fcgi:error] [pid 8491:tid 8502] [client 20.151.116.9:62177] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 06:58:19.718903 2026] [:error] [pid 8491:tid 8521] [client 20.151.116.9:62177] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/radio.php"] [unique_id "ae1HCyq7I7e6CJooQM2kWQAAANY"]
[Sun Apr 26 06:58:22.336636 2026] [:error] [pid 13315:tid 13356] [client 20.151.116.9:60644] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/radio.php"] [unique_id "ae1HDg2NnZnCaSNNhH3DUgAAA8w"]
[Sun Apr 26 06:58:23.717459 2026] [:error] [pid 8383:tid 8403] [client 20.151.116.9:64295] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/radio.php"] [unique_id "ae1HD9Fa2S3EsATMdWPK-AAAAAY"]
[Sun Apr 26 06:58:24.599666 2026] [:error] [pid 8385:tid 8434] [client 20.151.116.9:64356] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/radio.php"] [unique_id "ae1HEDOy7_J84Wx3-oxtygAAAEo"]
[Sun Apr 26 06:58:25.760709 2026] [:error] [pid 8385:tid 8448] [client 20.151.116.9:65208] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/files.php"] [unique_id "ae1HETOy7_J84Wx3-oxtzAAAAFg"]
[Sun Apr 26 06:58:27.101556 2026] [:error] [pid 8383:tid 8420] [client 20.151.116.9:60603] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/files.php"] [unique_id "ae1HE9Fa2S3EsATMdWPK_QAAABc"]
[Sun Apr 26 06:58:27.924299 2026] [:error] [pid 13137:tid 13154] [client 20.151.116.9:62180] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/files.php"] [unique_id "ae1HE90RB4J0o4h5neHg3gAAAg0"]
[Sun Apr 26 06:58:29.304376 2026] [:error] [pid 13197:tid 13234] [client 20.151.116.9:62205] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/files.php"] [unique_id "ae1HFd3kktFKdSxTrBuO3gAAAsM"]
[Sun Apr 26 06:58:30.675765 2026] [:error] [pid 13197:tid 13255] [client 20.151.116.9:60585] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file7.php"] [unique_id "ae1HFt3kktFKdSxTrBuO4AAAAtc"]
[Sun Apr 26 06:58:32.729930 2026] [:error] [pid 10315:tid 10330] [client 20.151.116.9:64262] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file7.php"] [unique_id "ae1HGKJIw2vjkleLIaC_LAAAAQ0"]
[Sun Apr 26 06:58:34.335705 2026] [:error] [pid 8390:tid 8474] [client 20.151.116.9:60571] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file7.php"] [unique_id "ae1HGoGPtFK_i9p5yxQkwQAAAJc"]
[Sun Apr 26 06:58:37.143361 2026] [:error] [pid 8385:tid 8441] [client 20.151.116.9:62107] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file7.php"] [unique_id "ae1HHTOy7_J84Wx3-oxt0QAAAFE"]
[Sun Apr 26 06:58:38.661411 2026] [:error] [pid 13137:tid 13152] [client 20.151.116.9:65252] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gifclass.php"] [unique_id "ae1HHt0RB4J0o4h5neHg4AAAAgs"]
[Sun Apr 26 06:58:41.699217 2026] [:error] [pid 8383:tid 8405] [client 20.151.116.9:64259] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gifclass.php"] [unique_id "ae1HIdFa2S3EsATMdWPLBAAAAAg"]
[Sun Apr 26 06:58:44.277453 2026] [:error] [pid 8383:tid 8413] [client 20.151.116.9:62082] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gifclass.php"] [unique_id "ae1HJNFa2S3EsATMdWPLDQAAABA"]
[Sun Apr 26 06:58:45.826467 2026] [:error] [pid 8390:tid 8454] [client 20.151.116.9:60598] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gifclass.php"] [unique_id "ae1HJYGPtFK_i9p5yxQkxwAAAIM"]
[Sun Apr 26 06:58:47.387910 2026] [:error] [pid 8383:tid 8412] [client 20.151.116.9:60068] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "ae1HJ9Fa2S3EsATMdWPLFAAAAA8"]
[Sun Apr 26 06:58:48.828562 2026] [:error] [pid 8383:tid 8408] [client 20.151.116.9:60548] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "ae1HKNFa2S3EsATMdWPLFgAAAAs"]
[Sun Apr 26 06:58:49.930008 2026] [:error] [pid 13137:tid 13164] [client 20.151.116.9:65260] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "ae1HKd0RB4J0o4h5neHg6wAAAhc"]
[Sun Apr 26 06:58:51.216407 2026] [:error] [pid 15001:tid 15016] [client 20.151.116.9:65263] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "ae1HK_W5sb7QMhwb3GdzwQAAAU0"]
[Sun Apr 26 06:58:52.196497 2026] [:error] [pid 8491:tid 8513] [client 20.151.116.9:65168] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nox.php"] [unique_id "ae1HLCq7I7e6CJooQM2kZQAAAM4"]
[Sun Apr 26 06:58:53.041046 2026] [:error] [pid 10315:tid 10326] [client 20.151.116.9:62124] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nox.php"] [unique_id "ae1HLaJIw2vjkleLIaC_PwAAAQk"]
[Sun Apr 26 06:58:54.647756 2026] [:error] [pid 8383:tid 8404] [client 20.151.116.9:65187] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nox.php"] [unique_id "ae1HLtFa2S3EsATMdWPLGQAAAAc"]
[Sun Apr 26 06:58:55.938178 2026] [:error] [pid 8491:tid 8511] [client 20.151.116.9:60668] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nox.php"] [unique_id "ae1HLyq7I7e6CJooQM2kbgAAAMw"]
[Sun Apr 26 06:58:56.774565 2026] [:error] [pid 8491:tid 8523] [client 20.151.116.9:64359] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file48.php"] [unique_id "ae1HMCq7I7e6CJooQM2kcQAAANc"]
[Sun Apr 26 06:58:58.085770 2026] [:error] [pid 8385:tid 8437] [client 20.151.116.9:64312] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file48.php"] [unique_id "ae1HMjOy7_J84Wx3-oxt0wAAAE0"]
[Sun Apr 26 06:59:00.084693 2026] [:error] [pid 8491:tid 8512] [client 20.151.116.9:64313] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file48.php"] [unique_id "ae1HNCq7I7e6CJooQM2kdwAAAM0"]
[Sun Apr 26 06:59:01.221775 2026] [:error] [pid 13197:tid 13253] [client 20.151.116.9:65158] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file48.php"] [unique_id "ae1HNd3kktFKdSxTrBuO6gAAAtU"]
[Sun Apr 26 06:59:03.000822 2026] [:error] [pid 10315:tid 10338] [client 20.151.116.9:60622] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/info.php"] [unique_id "ae1HN6JIw2vjkleLIaC_TgAAARU"]
[Sun Apr 26 06:59:04.580537 2026] [:error] [pid 8383:tid 8397] [client 20.151.116.9:65245] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/info.php"] [unique_id "ae1HONFa2S3EsATMdWPLOQAAAAA"]
[Sun Apr 26 06:59:05.408192 2026] [:error] [pid 8385:tid 8434] [client 20.151.116.9:65250] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/info.php"] [unique_id "ae1HOTOy7_J84Wx3-oxt1wAAAEo"]
[Sun Apr 26 06:59:06.674528 2026] [:error] [pid 15001:tid 15021] [client 20.151.116.9:62122] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/info.php"] [unique_id "ae1HOvW5sb7QMhwb3Gd0CQAAAVI"]
[Sun Apr 26 06:59:07.732640 2026] [:error] [pid 8491:tid 8500] [client 20.151.116.9:62158] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class9.php"] [unique_id "ae1HOyq7I7e6CJooQM2keQAAAME"]
[Sun Apr 26 06:59:09.077966 2026] [:error] [pid 15001:tid 15004] [client 20.151.116.9:65256] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class9.php"] [unique_id "ae1HPfW5sb7QMhwb3Gd0FwAAAUE"]
[Sun Apr 26 06:59:11.131686 2026] [:error] [pid 13197:tid 13240] [client 20.151.116.9:62172] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class9.php"] [unique_id "ae1HP93kktFKdSxTrBuO8AAAAsk"]
[Sun Apr 26 06:59:11.992403 2026] [:error] [pid 10315:tid 10337] [client 20.151.116.9:62144] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class9.php"] [unique_id "ae1HP6JIw2vjkleLIaC_UQAAARQ"]
[Sun Apr 26 06:59:13.064597 2026] [:error] [pid 15001:tid 15006] [client 20.151.116.9:65227] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/la.php"] [unique_id "ae1HQfW5sb7QMhwb3Gd0KwAAAUM"]
[Sun Apr 26 06:59:14.738309 2026] [:error] [pid 10315:tid 10321] [client 20.151.116.9:62132] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/la.php"] [unique_id "ae1HQqJIw2vjkleLIaC_WQAAAQQ"]
[Sun Apr 26 06:59:15.420172 2026] [:error] [pid 8383:tid 8412] [client 20.151.116.9:62199] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/la.php"] [unique_id "ae1HQ9Fa2S3EsATMdWPLZgAAAA8"]
[Sun Apr 26 06:59:16.483881 2026] [:error] [pid 15001:tid 15006] [client 20.151.116.9:64294] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/la.php"] [unique_id "ae1HRPW5sb7QMhwb3Gd0PgAAAUM"]
[Sun Apr 26 06:59:18.944730 2026] [:error] [pid 10315:tid 10333] [client 20.151.116.9:65172] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bless11.php"] [unique_id "ae1HRqJIw2vjkleLIaC_YQAAARA"]
[Sun Apr 26 06:59:19.566611 2026] [proxy_fcgi:error] [pid 13197:tid 13250] [client 20.151.116.9:64320] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 06:59:20.115060 2026] [proxy_fcgi:error] [pid 13197:tid 13256] [client 20.151.116.9:64320] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 06:59:20.325410 2026] [proxy_fcgi:error] [pid 13197:tid 13247] [client 20.151.116.9:64320] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 06:59:20.569566 2026] [proxy_fcgi:error] [pid 13197:tid 13242] [client 20.151.116.9:64320] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 06:59:20.778073 2026] [proxy_fcgi:error] [pid 13197:tid 13238] [client 20.151.116.9:64320] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 06:59:21.019358 2026] [proxy_fcgi:error] [pid 13197:tid 13231] [client 20.151.116.9:64320] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 06:59:21.231621 2026] [proxy_fcgi:error] [pid 13197:tid 13251] [client 20.151.116.9:64320] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 06:59:21.456291 2026] [proxy_fcgi:error] [pid 13197:tid 13234] [client 20.151.116.9:64320] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 06:59:21.744126 2026] [proxy_fcgi:error] [pid 13197:tid 13245] [client 20.151.116.9:64320] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 06:59:21.986983 2026] [proxy_fcgi:error] [pid 13197:tid 13236] [client 20.151.116.9:64320] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 06:59:22.461815 2026] [proxy_fcgi:error] [pid 13197:tid 13255] [client 20.151.116.9:64320] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 06:59:22.689990 2026] [:error] [pid 13197:tid 13241] [client 20.151.116.9:64320] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/1aa.php"] [unique_id "ae1HSt3kktFKdSxTrBuO_QAAAso"]
[Sun Apr 26 06:59:23.499859 2026] [:error] [pid 8385:tid 8437] [client 20.151.116.9:64366] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/1aa.php"] [unique_id "ae1HSzOy7_J84Wx3-oxt-gAAAE0"]
[Sun Apr 26 06:59:24.772587 2026] [:error] [pid 15001:tid 15010] [client 20.151.116.9:60158] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/1aa.php"] [unique_id "ae1HTPW5sb7QMhwb3Gd0awAAAUc"]
[Sun Apr 26 06:59:26.083123 2026] [:error] [pid 41906:tid 41922] [client 20.151.116.9:64285] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/1aa.php"] [unique_id "ae1HTj3-0A3lxw9OXoA0pQAAAY4"]
[Sun Apr 26 06:59:26.948875 2026] [:error] [pid 13137:tid 13151] [client 20.151.116.9:64299] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/elp.php"] [unique_id "ae1HTt0RB4J0o4h5neHg9QAAAgo"]
[Sun Apr 26 06:59:28.128516 2026] [:error] [pid 41906:tid 41928] [client 20.151.116.9:62095] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/elp.php"] [unique_id "ae1HUD3-0A3lxw9OXoA0rAAAAZQ"]
[Sun Apr 26 06:59:29.144982 2026] [:error] [pid 8491:tid 8523] [client 20.151.116.9:62171] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/elp.php"] [unique_id "ae1HUSq7I7e6CJooQM2kgAAAANc"]
[Sun Apr 26 06:59:30.808629 2026] [:error] [pid 8385:tid 8427] [client 20.151.116.9:62085] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/elp.php"] [unique_id "ae1HUjOy7_J84Wx3-oxuBgAAAEM"]
[Sun Apr 26 06:59:32.827651 2026] [:error] [pid 41906:tid 41917] [client 20.151.116.9:62113] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wtz.php"] [unique_id "ae1HVD3-0A3lxw9OXoA0ugAAAYk"]
[Sun Apr 26 06:59:33.431201 2026] [:error] [pid 10315:tid 10332] [client 20.151.116.9:64349] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wtz.php"] [unique_id "ae1HVaJIw2vjkleLIaC_fQAAAQ8"]
[Sun Apr 26 06:59:34.954549 2026] [:error] [pid 8383:tid 8397] [client 20.151.116.9:62194] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wtz.php"] [unique_id "ae1HVtFa2S3EsATMdWPLkQAAAAA"]
[Sun Apr 26 06:59:36.462385 2026] [:error] [pid 8390:tid 8468] [client 20.151.116.9:62118] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wtz.php"] [unique_id "ae1HWIGPtFK_i9p5yxQlBgAAAJE"]
[Sun Apr 26 06:59:38.136791 2026] [:error] [pid 13137:tid 13146] [client 20.151.116.9:60649] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/galex.php"] [unique_id "ae1HWt0RB4J0o4h5neHhDQAAAgY"]
[Sun Apr 26 06:59:39.608024 2026] [:error] [pid 13197:tid 13235] [client 20.151.116.9:64283] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/galex.php"] [unique_id "ae1HW93kktFKdSxTrBuPBgAAAsQ"]
[Sun Apr 26 06:59:41.626209 2026] [:error] [pid 13315:tid 13363] [client 20.151.116.9:65178] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/galex.php"] [unique_id "ae1HXQ2NnZnCaSNNhH3DYwAAA9M"]
[Sun Apr 26 06:59:42.519153 2026] [:error] [pid 10315:tid 10333] [client 20.151.116.9:62153] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/galex.php"] [unique_id "ae1HXqJIw2vjkleLIaC_kAAAARA"]
[Sun Apr 26 06:59:44.420917 2026] [:error] [pid 13197:tid 13255] [client 20.151.116.9:64334] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xb.php"] [unique_id "ae1HYN3kktFKdSxTrBuPDgAAAtc"]
[Sun Apr 26 06:59:47.561173 2026] [:error] [pid 13197:tid 13250] [client 20.151.116.9:65247] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xb.php"] [unique_id "ae1HY93kktFKdSxTrBuPGgAAAtI"]
[Sun Apr 26 06:59:50.231578 2026] [:error] [pid 13137:tid 13152] [client 20.151.116.9:60645] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xb.php"] [unique_id "ae1HZt0RB4J0o4h5neHhEAAAAgs"]
[Sun Apr 26 06:59:54.107013 2026] [:error] [pid 8385:tid 8437] [client 20.151.116.9:64304] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xb.php"] [unique_id "ae1HajOy7_J84Wx3-oxuDQAAAE0"]
[Sun Apr 26 06:59:57.408021 2026] [:error] [pid 15001:tid 15015] [client 20.151.116.9:64355] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ova.php"] [unique_id "ae1HbfW5sb7QMhwb3Gd0ggAAAUw"]
[Sun Apr 26 07:00:00.183946 2026] [:error] [pid 13315:tid 13359] [client 20.151.116.9:65238] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ova.php"] [unique_id "ae1HcA2NnZnCaSNNhH3DdQAAA88"]
[Sun Apr 26 07:00:02.321772 2026] [:error] [pid 8383:tid 8397] [client 20.151.116.9:62130] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ova.php"] [unique_id "ae1HctFa2S3EsATMdWPLnQAAAAA"]
[Sun Apr 26 07:00:03.850954 2026] [:error] [pid 10315:tid 10335] [client 20.151.116.9:60070] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ova.php"] [unique_id "ae1Hc6JIw2vjkleLIaC_pgAAARI"]
[Sun Apr 26 07:00:05.258894 2026] [:error] [pid 15001:tid 15009] [client 20.151.116.9:65179] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vx.php"] [unique_id "ae1HdfW5sb7QMhwb3Gd0jAAAAUY"]
[Sun Apr 26 07:00:06.759151 2026] [:error] [pid 13137:tid 13147] [client 20.151.116.9:62093] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vx.php"] [unique_id "ae1Hdt0RB4J0o4h5neHhFAAAAgc"]
[Sun Apr 26 07:00:07.626676 2026] [:error] [pid 41906:tid 41910] [client 20.151.116.9:64297] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vx.php"] [unique_id "ae1Hdz3-0A3lxw9OXoA01wAAAYI"]
[Sun Apr 26 07:00:09.448741 2026] [:error] [pid 15001:tid 15010] [client 20.151.116.9:62086] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vx.php"] [unique_id "ae1HefW5sb7QMhwb3Gd0kAAAAUc"]
[Sun Apr 26 07:00:10.818103 2026] [:error] [pid 8390:tid 8468] [client 20.151.116.9:65156] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rh.php"] [unique_id "ae1HeoGPtFK_i9p5yxQlRgAAAJE"]
[Sun Apr 26 07:00:11.947113 2026] [:error] [pid 13315:tid 13346] [client 20.151.116.9:64342] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rh.php"] [unique_id "ae1Hew2NnZnCaSNNhH3DfwAAA8I"]
[Sun Apr 26 07:00:13.046163 2026] [:error] [pid 13315:tid 13351] [client 20.151.116.9:65236] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rh.php"] [unique_id "ae1HfQ2NnZnCaSNNhH3DgAAAA8c"]
[Sun Apr 26 07:00:14.359316 2026] [:error] [pid 13137:tid 13159] [client 20.151.116.9:64300] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rh.php"] [unique_id "ae1Hft0RB4J0o4h5neHhFwAAAhI"]
[Sun Apr 26 07:00:15.303183 2026] [:error] [pid 13137:tid 13161] [client 20.151.116.9:64343] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/plugins.php"] [unique_id "ae1Hf90RB4J0o4h5neHhGAAAAhQ"]
[Sun Apr 26 07:00:16.920311 2026] [:error] [pid 13315:tid 13347] [client 20.151.116.9:64337] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/plugins.php"] [unique_id "ae1HgA2NnZnCaSNNhH3DgwAAA8M"]
[Sun Apr 26 07:00:17.800839 2026] [:error] [pid 13197:tid 13239] [client 20.151.116.9:64278] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/plugins.php"] [unique_id "ae1Hgd3kktFKdSxTrBuPVQAAAsg"]
[Sun Apr 26 07:00:19.592896 2026] [:error] [pid 13197:tid 13256] [client 20.151.116.9:62198] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/plugins.php"] [unique_id "ae1Hg93kktFKdSxTrBuPXwAAAtg"]
[Sun Apr 26 07:00:20.978460 2026] [:error] [pid 8383:tid 8403] [client 20.151.116.9:62114] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/users.php"] [unique_id "ae1HhNFa2S3EsATMdWPLpAAAAAY"]
[Sun Apr 26 07:00:21.907722 2026] [:error] [pid 15001:tid 15007] [client 20.151.116.9:60141] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/users.php"] [unique_id "ae1HhfW5sb7QMhwb3Gd0mAAAAUQ"]
[Sun Apr 26 07:00:22.691989 2026] [proxy_fcgi:error] [pid 13315:tid 13359] [client 20.151.116.9:60142] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 07:00:23.013555 2026] [proxy_fcgi:error] [pid 13315:tid 13361] [client 20.151.116.9:60142] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 07:00:23.225105 2026] [proxy_fcgi:error] [pid 13315:tid 13362] [client 20.151.116.9:60142] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 07:00:23.433270 2026] [proxy_fcgi:error] [pid 13315:tid 13348] [client 20.151.116.9:60142] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 07:00:23.670883 2026] [proxy_fcgi:error] [pid 13315:tid 13353] [client 20.151.116.9:60142] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 07:00:23.905764 2026] [proxy_fcgi:error] [pid 13315:tid 13346] [client 20.151.116.9:60142] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 07:00:24.278178 2026] [proxy_fcgi:error] [pid 13315:tid 13358] [client 20.151.116.9:60142] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 07:00:24.487108 2026] [proxy_fcgi:error] [pid 13315:tid 13355] [client 20.151.116.9:60142] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 08:37:04.824066 2026] [:error] [pid 8491:tid 8507] [client 151.241.100.57:51356] [client 151.241.100.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env"] [unique_id "ae1eMCq7I7e6CJooQM2zXwAAAMg"]
[Sun Apr 26 08:37:04.957973 2026] [:error] [pid 22573:tid 22609] [client 151.241.100.57:51392] [client 151.241.100.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.bak"] [unique_id "ae1eMHB3EmQlD4yKUt816AAAAYM"]
[Sun Apr 26 08:37:04.959767 2026] [:error] [pid 8385:tid 8443] [client 151.241.100.57:51378] [client 151.241.100.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.old"] [unique_id "ae1eMDOy7_J84Wx3-ox6zQAAAFM"]
[Sun Apr 26 08:37:04.962759 2026] [:error] [pid 13137:tid 13145] [client 151.241.100.57:51422] [client 151.241.100.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.production"] [unique_id "ae1eMN0RB4J0o4h5neHynAAAAgU"]
[Sun Apr 26 08:37:04.965145 2026] [:error] [pid 8385:tid 8441] [client 151.241.100.57:51442] [client 151.241.100.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.local"] [unique_id "ae1eMDOy7_J84Wx3-ox6zwAAAFE"]
[Sun Apr 26 08:37:04.966802 2026] [:error] [pid 8385:tid 8430] [client 151.241.100.57:51434] [client 151.241.100.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/wp-config.php.bak"] [unique_id "ae1eMDOy7_J84Wx3-ox60AAAAEY"]
[Sun Apr 26 08:37:05.130096 2026] [:error] [pid 8385:tid 8425] [client 151.241.100.57:51468] [client 151.241.100.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/settings.py"] [unique_id "ae1eMTOy7_J84Wx3-ox60gAAAEE"]
[Sun Apr 26 08:37:05.138104 2026] [:error] [pid 8390:tid 8474] [client 151.241.100.57:51466] [client 151.241.100.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/package.json"] [unique_id "ae1eMYGPtFK_i9p5yxREZgAAAJc"]
[Sun Apr 26 08:37:05.272772 2026] [:error] [pid 22573:tid 22620] [client 151.241.100.57:51406] [client 151.241.100.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/wp-config.php"] [unique_id "ae1eMXB3EmQlD4yKUt817wAAAY0"]
[Sun Apr 26 08:37:05.272797 2026] [:error] [pid 22573:tid 22626] [client 151.241.100.57:51458] [client 151.241.100.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/amplify/team-provider-info.json"] [unique_id "ae1eMXB3EmQlD4yKUt817gAAAZM"]
[Sun Apr 26 08:37:05.272966 2026] [:error] [pid 16574:tid 16631] [client 151.241.100.57:51372] [client 151.241.100.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.git/config"] [unique_id "ae1eMX5MsX8wRQr99nYCfAAAA1I"]
[Sun Apr 26 08:37:05.275410 2026] [:error] [pid 8385:tid 8434] [client 151.241.100.57:51456] [client 151.241.100.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.npmrc"] [unique_id "ae1eMTOy7_J84Wx3-ox60wAAAEo"]
[Sun Apr 26 08:37:05.638936 2026] [:error] [pid 22573:tid 22617] [client 151.241.100.57:51472] [client 151.241.100.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/amplify/team-provider-info.json"] [unique_id "ae1eMXB3EmQlD4yKUt818QAAAYo"]
[Sun Apr 26 08:37:05.638936 2026] [:error] [pid 22573:tid 22625] [client 151.241.100.57:51484] [client 151.241.100.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/package.json"] [unique_id "ae1eMXB3EmQlD4yKUt818AAAAZI"]
[Sun Apr 26 08:37:05.639587 2026] [:error] [pid 22573:tid 22616] [client 151.241.100.57:51498] [client 151.241.100.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/settings.py"] [unique_id "ae1eMXB3EmQlD4yKUt818gAAAYk"]
[Sun Apr 26 08:37:05.639993 2026] [:error] [pid 13197:tid 13233] [client 151.241.100.57:51494] [client 151.241.100.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/api/config"] [unique_id "ae1eMd3kktFKdSxTrBuaNQAAAsI"]
[Sun Apr 26 08:37:05.640670 2026] [:error] [pid 22573:tid 22608] [client 151.241.100.57:51556] [client 151.241.100.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.npmrc"] [unique_id "ae1eMXB3EmQlD4yKUt818wAAAYI"]
[Sun Apr 26 08:37:05.792813 2026] [:error] [pid 8385:tid 8442] [client 151.241.100.57:51644] [client 151.241.100.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/amplify/team-provider-info.json"] [unique_id "ae1eMTOy7_J84Wx3-ox61wAAAFI"]
[Sun Apr 26 08:37:05.792813 2026] [:error] [pid 13137:tid 13164] [client 151.241.100.57:51646] [client 151.241.100.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/package.json"] [unique_id "ae1eMd0RB4J0o4h5neHynQAAAhc"]
[Sun Apr 26 08:37:05.794794 2026] [:error] [pid 13137:tid 13161] [client 151.241.100.57:51632] [client 151.241.100.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/settings.py"] [unique_id "ae1eMd0RB4J0o4h5neHyngAAAhQ"]
[Sun Apr 26 08:37:05.795582 2026] [:error] [pid 22573:tid 22621] [client 151.241.100.57:51568] [client 151.241.100.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/api/config"] [unique_id "ae1eMXB3EmQlD4yKUt819AAAAY4"]
[Sun Apr 26 08:37:05.795969 2026] [:error] [pid 13197:tid 13242] [client 151.241.100.57:51588] [client 151.241.100.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.npmrc"] [unique_id "ae1eMd3kktFKdSxTrBuaNgAAAss"]
[Sun Apr 26 08:37:05.947629 2026] [:error] [pid 8491:tid 8520] [client 151.241.100.57:51602] [client 151.241.100.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/amplify/team-provider-info.json"] [unique_id "ae1eMSq7I7e6CJooQM2zYAAAANU"]
[Sun Apr 26 08:37:05.947901 2026] [:error] [pid 8390:tid 8454] [client 151.241.100.57:51542] [client 151.241.100.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/package.json"] [unique_id "ae1eMYGPtFK_i9p5yxREZwAAAIM"]
[Sun Apr 26 08:37:05.948350 2026] [:error] [pid 13197:tid 13252] [client 151.241.100.57:51584] [client 151.241.100.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/settings.py"] [unique_id "ae1eMd3kktFKdSxTrBuaNwAAAtQ"]
[Sun Apr 26 08:37:05.949135 2026] [:error] [pid 13197:tid 13232] [client 151.241.100.57:51582] [client 151.241.100.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/api/config"] [unique_id "ae1eMd3kktFKdSxTrBuaOAAAAsE"]
[Sun Apr 26 08:37:05.949800 2026] [:error] [pid 8491:tid 8519] [client 151.241.100.57:51622] [client 151.241.100.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.npmrc"] [unique_id "ae1eMSq7I7e6CJooQM2zYQAAANQ"]
[Sun Apr 26 08:37:06.101798 2026] [:error] [pid 13197:tid 13231] [client 151.241.100.57:51510] [client 151.241.100.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/amplify/team-provider-info.json"] [unique_id "ae1eMt3kktFKdSxTrBuaOQAAAsA"]
[Sun Apr 26 08:37:06.102366 2026] [:error] [pid 8385:tid 8436] [client 151.241.100.57:51600] [client 151.241.100.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/package.json"] [unique_id "ae1eMjOy7_J84Wx3-ox62AAAAEw"]
[Sun Apr 26 08:37:06.102869 2026] [:error] [pid 8385:tid 8431] [client 151.241.100.57:51526] [client 151.241.100.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/settings.py"] [unique_id "ae1eMjOy7_J84Wx3-ox62QAAAEc"]
[Sun Apr 26 08:37:06.257655 2026] [:error] [pid 22572:tid 22587] [client 151.241.100.57:51648] [client 151.241.100.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/api/config"] [unique_id "ae1eMtXOViWCFU-pZzCEMQAAAUk"]
[Sun Apr 26 08:37:06.259422 2026] [:error] [pid 22573:tid 22610] [client 151.241.100.57:51652] [client 151.241.100.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/amplify/team-provider-info.json"] [unique_id "ae1eMnB3EmQlD4yKUt81-AAAAYQ"]
[Sun Apr 26 08:37:06.259482 2026] [:error] [pid 8390:tid 8457] [client 151.241.100.57:51660] [client 151.241.100.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.npmrc"] [unique_id "ae1eMoGPtFK_i9p5yxREaAAAAIY"]
[Sun Apr 26 08:37:06.260389 2026] [:error] [pid 8390:tid 8460] [client 151.241.100.57:51672] [client 151.241.100.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/package.json"] [unique_id "ae1eMoGPtFK_i9p5yxREaQAAAIk"]
[Sun Apr 26 08:37:06.900948 2026] [:error] [pid 22572:tid 22599] [client 151.241.100.57:51696] [client 151.241.100.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/package.json"] [unique_id "ae1eMtXOViWCFU-pZzCENQAAAVU"]
[Sun Apr 26 08:37:06.901536 2026] [:error] [pid 13137:tid 13146] [client 151.241.100.57:51710] [client 151.241.100.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/settings.py"] [unique_id "ae1eMt0RB4J0o4h5neHyogAAAgY"]
[Sun Apr 26 08:37:06.902126 2026] [:error] [pid 13137:tid 13160] [client 151.241.100.57:51738] [client 151.241.100.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/api/config"] [unique_id "ae1eMt0RB4J0o4h5neHyowAAAhM"]
[Sun Apr 26 08:37:06.902626 2026] [:error] [pid 8383:tid 8404] [client 151.241.100.57:51724] [client 151.241.100.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.npmrc"] [unique_id "ae1eMtFa2S3EsATMdWPT9wAAAAc"]
[Sun Apr 26 08:37:06.903000 2026] [:error] [pid 22572:tid 22584] [client 151.241.100.57:51740] [client 151.241.100.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/amplify/team-provider-info.json"] [unique_id "ae1eMtXOViWCFU-pZzCENgAAAUY"]
[Sun Apr 26 08:37:07.056170 2026] [:error] [pid 13137:tid 13149] [client 151.241.100.57:51774] [client 151.241.100.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/settings.py"] [unique_id "ae1eM90RB4J0o4h5neHypAAAAgk"]
[Sun Apr 26 08:37:07.056968 2026] [:error] [pid 16515:tid 16540] [client 151.241.100.57:51762] [client 151.241.100.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/api/config"] [unique_id "ae1eM1tDrUmgHSvpuLzWNAAAAlY"]
[Sun Apr 26 08:37:07.058011 2026] [:error] [pid 22572:tid 22595] [client 151.241.100.57:51752] [client 151.241.100.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.npmrc"] [unique_id "ae1eM9XOViWCFU-pZzCEOQAAAVE"]
[Sun Apr 26 08:37:07.058953 2026] [:error] [pid 8390:tid 8467] [client 151.241.100.57:51784] [client 151.241.100.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/amplify/team-provider-info.json"] [unique_id "ae1eM4GPtFK_i9p5yxREawAAAJA"]
[Sun Apr 26 08:37:07.703084 2026] [:error] [pid 8383:tid 8399] [client 151.241.100.57:45576] [client 151.241.100.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/amplify/team-provider-info.json"] [unique_id "ae1eM9Fa2S3EsATMdWPT-QAAAAI"]
[Sun Apr 26 08:37:07.703353 2026] [:error] [pid 8390:tid 8470] [client 151.241.100.57:45592] [client 151.241.100.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/settings.py"] [unique_id "ae1eM4GPtFK_i9p5yxREbQAAAJM"]
[Sun Apr 26 08:37:07.703668 2026] [:error] [pid 8385:tid 8446] [client 151.241.100.57:45588] [client 151.241.100.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.npmrc"] [unique_id "ae1eMzOy7_J84Wx3-ox62gAAAFY"]
[Sun Apr 26 08:37:07.727434 2026] [:error] [pid 8390:tid 8475] [client 151.241.100.57:45586] [client 151.241.100.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/api/config"] [unique_id "ae1eM4GPtFK_i9p5yxREbgAAAJg"]
[Sun Apr 26 09:16:03.976687 2026] [:error] [pid 22573:tid 22617] [client 4.232.187.202:2766] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ae1nU3B3EmQlD4yKUt9ElAAAAYo"]
[Sun Apr 26 09:16:04.829585 2026] [:error] [pid 8491:tid 8501] [client 4.232.187.202:32908] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ae1nVCq7I7e6CJooQM240QAAAMI"]
[Sun Apr 26 09:16:05.759338 2026] [:error] [pid 8383:tid 8421] [client 4.232.187.202:13562] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ae1nVdFa2S3EsATMdWPX_AAAABg"]
[Sun Apr 26 09:16:06.483054 2026] [:error] [pid 8385:tid 8429] [client 4.232.187.202:26237] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ae1nVjOy7_J84Wx3-oyBIQAAAEU"]
[Sun Apr 26 09:36:02.939557 2026] [proxy_fcgi:error] [pid 13137:tid 13159] [client 158.158.52.225:53001] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 09:36:03.197673 2026] [proxy_fcgi:error] [pid 13137:tid 13160] [client 158.158.52.225:53001] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 09:36:03.463163 2026] [proxy_fcgi:error] [pid 13137:tid 13165] [client 158.158.52.225:53001] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 09:36:03.728601 2026] [proxy_fcgi:error] [pid 13137:tid 13146] [client 158.158.52.225:53001] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 09:36:03.986493 2026] [proxy_fcgi:error] [pid 13137:tid 13157] [client 158.158.52.225:53001] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 09:36:04.248787 2026] [proxy_fcgi:error] [pid 13137:tid 13162] [client 158.158.52.225:53001] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 09:36:04.506858 2026] [proxy_fcgi:error] [pid 13137:tid 13164] [client 158.158.52.225:53001] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 09:36:04.768074 2026] [proxy_fcgi:error] [pid 13137:tid 13142] [client 158.158.52.225:53001] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 09:36:05.037368 2026] [proxy_fcgi:error] [pid 13137:tid 13161] [client 158.158.52.225:53001] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 09:36:05.300970 2026] [proxy_fcgi:error] [pid 13137:tid 13159] [client 158.158.52.225:53001] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 09:36:05.572527 2026] [:error] [pid 13137:tid 13154] [client 158.158.52.225:53001] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/zoko.php"] [unique_id "ae1sBd0RB4J0o4h5neEC-gAAAg0"]
[Sun Apr 26 09:36:06.563534 2026] [:error] [pid 13197:tid 13237] [client 158.158.52.225:9024] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/zoko.php"] [unique_id "ae1sBt3kktFKdSxTrBuhFQAAAsY"]
[Sun Apr 26 09:36:08.179697 2026] [:error] [pid 16574:tid 16610] [client 158.158.52.225:23785] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/zoko.php"] [unique_id "ae1sCH5MsX8wRQr99nYIxwAAA0Y"]
[Sun Apr 26 09:36:10.043911 2026] [:error] [pid 8385:tid 8431] [client 158.158.52.225:1056] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/zoko.php"] [unique_id "ae1sCjOy7_J84Wx3-oyEgwAAAEc"]
[Sun Apr 26 09:36:12.288036 2026] [:error] [pid 16515:tid 16534] [client 158.158.52.225:33594] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/solo1.php"] [unique_id "ae1sDFtDrUmgHSvpuLziHQAAAlA"]
[Sun Apr 26 09:36:13.722433 2026] [:error] [pid 8385:tid 8439] [client 158.158.52.225:1025] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/solo1.php"] [unique_id "ae1sDTOy7_J84Wx3-oyEhwAAAE8"]
[Sun Apr 26 09:36:14.965282 2026] [:error] [pid 22573:tid 22616] [client 158.158.52.225:46774] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/solo1.php"] [unique_id "ae1sDnB3EmQlD4yKUt9L1QAAAYk"]
[Sun Apr 26 09:36:17.250574 2026] [:error] [pid 22573:tid 22609] [client 158.158.52.225:7340] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/solo1.php"] [unique_id "ae1sEXB3EmQlD4yKUt9L1wAAAYM"]
[Sun Apr 26 09:36:18.540667 2026] [:error] [pid 8390:tid 8468] [client 158.158.52.225:33559] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/locales.php"] [unique_id "ae1sEoGPtFK_i9p5yxRi8wAAAJE"]
[Sun Apr 26 09:36:19.457706 2026] [:error] [pid 8390:tid 8473] [client 158.158.52.225:13640] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/locales.php"] [unique_id "ae1sE4GPtFK_i9p5yxRi_AAAAJY"]
[Sun Apr 26 09:36:21.116916 2026] [:error] [pid 22573:tid 22623] [client 158.158.52.225:13675] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/locales.php"] [unique_id "ae1sFXB3EmQlD4yKUt9L2AAAAZA"]
[Sun Apr 26 09:36:22.697198 2026] [:error] [pid 13197:tid 13234] [client 158.158.52.225:25706] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/locales.php"] [unique_id "ae1sFt3kktFKdSxTrBuhGwAAAsM"]
[Sun Apr 26 09:36:24.500423 2026] [:error] [pid 13197:tid 13244] [client 158.158.52.225:16213] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bgymj.php"] [unique_id "ae1sGN3kktFKdSxTrBuhHgAAAsw"]
[Sun Apr 26 09:36:26.830973 2026] [:error] [pid 22573:tid 22631] [client 158.158.52.225:48711] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bgymj.php"] [unique_id "ae1sGnB3EmQlD4yKUt9L4wAAAZg"]
[Sun Apr 26 09:36:27.960469 2026] [:error] [pid 8385:tid 8439] [client 158.158.52.225:7347] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bgymj.php"] [unique_id "ae1sGzOy7_J84Wx3-oyElQAAAE8"]
[Sun Apr 26 09:36:28.861544 2026] [:error] [pid 22573:tid 22623] [client 158.158.52.225:29423] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bgymj.php"] [unique_id "ae1sHHB3EmQlD4yKUt9L6AAAAZA"]
[Sun Apr 26 09:36:31.953430 2026] [:error] [pid 16515:tid 16520] [client 158.158.52.225:25700] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/pucci.php"] [unique_id "ae1sH1tDrUmgHSvpuLziLgAAAkI"]
[Sun Apr 26 09:36:32.777736 2026] [:error] [pid 16515:tid 16519] [client 158.158.52.225:39091] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/pucci.php"] [unique_id "ae1sIFtDrUmgHSvpuLziMAAAAkE"]
[Sun Apr 26 09:36:34.036931 2026] [:error] [pid 8390:tid 8474] [client 158.158.52.225:28076] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/pucci.php"] [unique_id "ae1sIoGPtFK_i9p5yxRjFQAAAJc"]
[Sun Apr 26 09:36:35.132145 2026] [:error] [pid 8390:tid 8475] [client 158.158.52.225:19403] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/pucci.php"] [unique_id "ae1sI4GPtFK_i9p5yxRjGAAAAJg"]
[Sun Apr 26 09:36:36.512429 2026] [:error] [pid 22573:tid 22629] [client 158.158.52.225:28791] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/blocks/details/"] [unique_id "ae1sJHB3EmQlD4yKUt9L7gAAAZY"]
[Sun Apr 26 09:36:38.327093 2026] [:error] [pid 8390:tid 8455] [client 158.158.52.225:25690] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/blocks/details/"] [unique_id "ae1sJoGPtFK_i9p5yxRjJgAAAIQ"]
[Sun Apr 26 09:36:40.102013 2026] [:error] [pid 8390:tid 8468] [client 158.158.52.225:30012] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/blocks/details/"] [unique_id "ae1sKIGPtFK_i9p5yxRjLwAAAJE"]
[Sun Apr 26 09:36:41.830009 2026] [:error] [pid 13137:tid 13146] [client 158.158.52.225:46759] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/blocks/details/"] [unique_id "ae1sKd0RB4J0o4h5neEDAAAAAgY"]
[Sun Apr 26 09:36:44.229154 2026] [:error] [pid 13137:tid 13163] [client 158.158.52.225:22665] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/.dj/index.php"] [unique_id "ae1sLN0RB4J0o4h5neEDBAAAAhY"]
[Sun Apr 26 09:36:45.143956 2026] [:error] [pid 8383:tid 8406] [client 158.158.52.225:33568] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/.dj/index.php"] [unique_id "ae1sLdFa2S3EsATMdWPaBwAAAAk"]
[Sun Apr 26 09:36:46.503872 2026] [:error] [pid 22573:tid 22606] [client 158.158.52.225:25339] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/.dj/index.php"] [unique_id "ae1sLnB3EmQlD4yKUt9L8gAAAYA"]
[Sun Apr 26 09:36:48.714577 2026] [:error] [pid 13137:tid 13143] [client 158.158.52.225:25328] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/.dj/index.php"] [unique_id "ae1sMN0RB4J0o4h5neEDCgAAAgM"]
[Sun Apr 26 09:36:50.931621 2026] [:error] [pid 13197:tid 13246] [client 158.158.52.225:19413] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "ae1sMt3kktFKdSxTrBuhKAAAAs4"]
[Sun Apr 26 09:36:52.974885 2026] [:error] [pid 8383:tid 8409] [client 158.158.52.225:7302] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "ae1sNNFa2S3EsATMdWPaCQAAAAw"]
[Sun Apr 26 09:36:55.477657 2026] [:error] [pid 22573:tid 22627] [client 158.158.52.225:46730] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "ae1sN3B3EmQlD4yKUt9MCAAAAZQ"]
[Sun Apr 26 09:36:57.435058 2026] [:error] [pid 22573:tid 22621] [client 158.158.52.225:34275] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "ae1sOXB3EmQlD4yKUt9MDQAAAY4"]
[Sun Apr 26 09:36:59.066361 2026] [:error] [pid 22573:tid 22624] [client 158.158.52.225:38497] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/.tmb/"] [unique_id "ae1sO3B3EmQlD4yKUt9MJAAAAZE"]
[Sun Apr 26 09:36:59.881643 2026] [:error] [pid 22572:tid 22578] [client 158.158.52.225:1264] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/.tmb/"] [unique_id "ae1sO9XOViWCFU-pZzCWoQAAAUA"]
[Sun Apr 26 09:37:01.134715 2026] [:error] [pid 8390:tid 8461] [client 158.158.52.225:8778] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/.tmb/"] [unique_id "ae1sPYGPtFK_i9p5yxRjPQAAAIo"]
[Sun Apr 26 09:37:03.575728 2026] [:error] [pid 8491:tid 8508] [client 158.158.52.225:33556] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/.tmb/"] [unique_id "ae1sPyq7I7e6CJooQM27qAAAAMk"]
[Sun Apr 26 09:37:06.224216 2026] [proxy_fcgi:error] [pid 16515:tid 16536] [client 158.158.52.225:8838] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 09:37:06.542069 2026] [proxy_fcgi:error] [pid 16515:tid 16525] [client 158.158.52.225:8838] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 09:37:06.885388 2026] [proxy_fcgi:error] [pid 16515:tid 16533] [client 158.158.52.225:8838] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 09:37:07.165377 2026] [proxy_fcgi:error] [pid 16515:tid 16526] [client 158.158.52.225:8838] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 09:37:07.408038 2026] [proxy_fcgi:error] [pid 16515:tid 16518] [client 158.158.52.225:8838] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 09:37:07.704182 2026] [proxy_fcgi:error] [pid 16515:tid 16521] [client 158.158.52.225:8838] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 09:37:07.962611 2026] [proxy_fcgi:error] [pid 16515:tid 16528] [client 158.158.52.225:8838] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 09:37:08.725299 2026] [proxy_fcgi:error] [pid 16515:tid 16519] [client 158.158.52.225:8838] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 09:37:08.969098 2026] [proxy_fcgi:error] [pid 16515:tid 16536] [client 158.158.52.225:8838] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 09:37:09.209864 2026] [:error] [pid 16515:tid 16530] [client 158.158.52.225:8838] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xmu.php"] [unique_id "ae1sRVtDrUmgHSvpuLziXgAAAkw"]
[Sun Apr 26 09:37:10.898153 2026] [:error] [pid 8385:tid 8440] [client 158.158.52.225:23805] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xmu.php"] [unique_id "ae1sRjOy7_J84Wx3-oyErwAAAFA"]
[Sun Apr 26 09:37:11.717563 2026] [:error] [pid 8385:tid 8439] [client 158.158.52.225:34234] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xmu.php"] [unique_id "ae1sRzOy7_J84Wx3-oyEsgAAAE8"]
[Sun Apr 26 09:37:12.495437 2026] [:error] [pid 8390:tid 8474] [client 158.158.52.225:15494] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xmu.php"] [unique_id "ae1sSIGPtFK_i9p5yxRjTAAAAJc"]
[Sun Apr 26 09:37:13.964448 2026] [:error] [pid 8390:tid 8467] [client 158.158.52.225:27146] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ref.php"] [unique_id "ae1sSYGPtFK_i9p5yxRjWQAAAJA"]
[Sun Apr 26 09:37:15.047772 2026] [:error] [pid 22572:tid 22592] [client 158.158.52.225:42914] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ref.php"] [unique_id "ae1sS9XOViWCFU-pZzCWtgAAAU4"]
[Sun Apr 26 09:37:15.825860 2026] [:error] [pid 8385:tid 8430] [client 158.158.52.225:16795] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ref.php"] [unique_id "ae1sSzOy7_J84Wx3-oyEtAAAAEY"]
[Sun Apr 26 09:37:16.721524 2026] [:error] [pid 8390:tid 8453] [client 158.158.52.225:8410] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ref.php"] [unique_id "ae1sTIGPtFK_i9p5yxRjZQAAAII"]
[Sun Apr 26 09:37:17.726307 2026] [:error] [pid 8390:tid 8451] [client 158.158.52.225:7693] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-xme.php"] [unique_id "ae1sTYGPtFK_i9p5yxRjawAAAIA"]
[Sun Apr 26 09:37:18.951075 2026] [:error] [pid 16515:tid 16541] [client 158.158.52.225:7415] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-xme.php"] [unique_id "ae1sTltDrUmgHSvpuLziYQAAAlc"]
[Sun Apr 26 09:37:22.290625 2026] [:error] [pid 8383:tid 8405] [client 158.158.52.225:16795] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-xme.php"] [unique_id "ae1sUtFa2S3EsATMdWPaEAAAAAg"]
[Sun Apr 26 09:37:25.465190 2026] [:error] [pid 16515:tid 16530] [client 158.158.52.225:46124] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-xme.php"] [unique_id "ae1sVVtDrUmgHSvpuLziZQAAAkw"]
[Sun Apr 26 09:37:28.510077 2026] [:error] [pid 22573:tid 22607] [client 158.158.52.225:11156] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/adminer.php"] [unique_id "ae1sWHB3EmQlD4yKUt9MLAAAAYE"]
[Sun Apr 26 09:37:30.548720 2026] [:error] [pid 22572:tid 22598] [client 158.158.52.225:65284] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/adminer.php"] [unique_id "ae1sWtXOViWCFU-pZzCWyQAAAVQ"]
[Sun Apr 26 09:37:31.533462 2026] [:error] [pid 22573:tid 22615] [client 158.158.52.225:32348] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/adminer.php"] [unique_id "ae1sW3B3EmQlD4yKUt9MNQAAAYg"]
[Sun Apr 26 09:37:32.547967 2026] [:error] [pid 13137:tid 13142] [client 158.158.52.225:35521] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/adminer.php"] [unique_id "ae1sXN0RB4J0o4h5neEDHwAAAgI"]
[Sun Apr 26 09:37:34.501446 2026] [:error] [pid 22573:tid 22613] [client 158.158.52.225:20613] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ktfow.php"] [unique_id "ae1sXnB3EmQlD4yKUt9MPAAAAYc"]
[Sun Apr 26 09:37:35.870903 2026] [:error] [pid 22572:tid 22596] [client 158.158.52.225:8053] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ktfow.php"] [unique_id "ae1sX9XOViWCFU-pZzCWygAAAVI"]
[Sun Apr 26 09:37:38.060006 2026] [:error] [pid 22573:tid 22618] [client 158.158.52.225:1322] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ktfow.php"] [unique_id "ae1sYnB3EmQlD4yKUt9MTAAAAYs"]
[Sun Apr 26 09:37:38.921367 2026] [:error] [pid 22573:tid 22611] [client 158.158.52.225:1543] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ktfow.php"] [unique_id "ae1sYnB3EmQlD4yKUt9MUAAAAYU"]
[Sun Apr 26 09:37:40.080342 2026] [:error] [pid 8385:tid 8437] [client 158.158.52.225:1597] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/mode.php"] [unique_id "ae1sZDOy7_J84Wx3-oyEvQAAAE0"]
[Sun Apr 26 09:37:41.251451 2026] [:error] [pid 8385:tid 8444] [client 158.158.52.225:1539] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/mode.php"] [unique_id "ae1sZTOy7_J84Wx3-oyEwAAAAFQ"]
[Sun Apr 26 09:37:42.496468 2026] [:error] [pid 13137:tid 13162] [client 158.158.52.225:29027] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/mode.php"] [unique_id "ae1sZt0RB4J0o4h5neEDJQAAAhU"]
[Sun Apr 26 09:37:43.536224 2026] [:error] [pid 22573:tid 22628] [client 158.158.52.225:25045] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/mode.php"] [unique_id "ae1sZ3B3EmQlD4yKUt9MVAAAAZU"]
[Sun Apr 26 09:37:44.408953 2026] [:error] [pid 8390:tid 8472] [client 158.158.52.225:29014] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/2468.php"] [unique_id "ae1saIGPtFK_i9p5yxRjiQAAAJU"]
[Sun Apr 26 09:37:45.097165 2026] [:error] [pid 13137:tid 13142] [client 158.158.52.225:32559] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/2468.php"] [unique_id "ae1sad0RB4J0o4h5neEDKQAAAgI"]
[Sun Apr 26 09:37:46.005150 2026] [:error] [pid 16515:tid 16520] [client 158.158.52.225:1337] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/2468.php"] [unique_id "ae1saltDrUmgHSvpuLzieQAAAkI"]
[Sun Apr 26 09:37:47.026693 2026] [:error] [pid 16515:tid 16524] [client 158.158.52.225:32543] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/2468.php"] [unique_id "ae1sa1tDrUmgHSvpuLziegAAAkY"]
[Sun Apr 26 09:37:48.859503 2026] [:error] [pid 13137:tid 13153] [client 158.158.52.225:32508] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "ae1sbN0RB4J0o4h5neEDLgAAAgw"]
[Sun Apr 26 09:37:50.181084 2026] [:error] [pid 16515:tid 16532] [client 158.158.52.225:7218] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "ae1sbltDrUmgHSvpuLzifQAAAk4"]
[Sun Apr 26 09:37:53.825560 2026] [:error] [pid 8390:tid 8465] [client 158.158.52.225:1311] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "ae1scYGPtFK_i9p5yxRjjgAAAI4"]
[Sun Apr 26 09:37:54.952562 2026] [:error] [pid 8491:tid 8516] [client 158.158.52.225:33556] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "ae1sciq7I7e6CJooQM27wgAAANE"]
[Sun Apr 26 09:37:55.746723 2026] [:error] [pid 22572:tid 22589] [client 158.158.52.225:51166] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/dx.php"] [unique_id "ae1sc9XOViWCFU-pZzCWzgAAAUs"]
[Sun Apr 26 09:37:58.437584 2026] [:error] [pid 8491:tid 8512] [client 158.158.52.225:37871] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/dx.php"] [unique_id "ae1sdiq7I7e6CJooQM27xQAAAM0"]
[Sun Apr 26 09:38:00.545117 2026] [:error] [pid 8385:tid 8442] [client 158.158.52.225:8631] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/dx.php"] [unique_id "ae1seDOy7_J84Wx3-oyEzQAAAFI"]
[Sun Apr 26 09:38:01.647078 2026] [:error] [pid 13137:tid 13160] [client 158.158.52.225:32492] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/dx.php"] [unique_id "ae1sed0RB4J0o4h5neEDOwAAAhM"]
[Sun Apr 26 09:38:06.128365 2026] [:error] [pid 8383:tid 8404] [client 158.158.52.225:7622] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/amdin.php"] [unique_id "ae1sftFa2S3EsATMdWPaGAAAAAc"]
[Sun Apr 26 09:38:07.883895 2026] [:error] [pid 8385:tid 8430] [client 158.158.52.225:7227] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/amdin.php"] [unique_id "ae1sfzOy7_J84Wx3-oyE0QAAAEY"]
[Sun Apr 26 09:38:09.246499 2026] [proxy_fcgi:error] [pid 22572:tid 22586] [client 158.158.52.225:12491] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 09:38:09.489086 2026] [proxy_fcgi:error] [pid 22572:tid 22593] [client 158.158.52.225:12491] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 09:38:09.731554 2026] [proxy_fcgi:error] [pid 22572:tid 22602] [client 158.158.52.225:12491] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 09:38:09.974685 2026] [proxy_fcgi:error] [pid 22572:tid 22588] [client 158.158.52.225:12491] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 09:38:10.229085 2026] [proxy_fcgi:error] [pid 22572:tid 22598] [client 158.158.52.225:12491] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 09:38:10.636466 2026] [proxy_fcgi:error] [pid 22572:tid 22590] [client 158.158.52.225:12491] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 09:38:10.880108 2026] [proxy_fcgi:error] [pid 22572:tid 22599] [client 158.158.52.225:12491] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 09:38:11.143130 2026] [proxy_fcgi:error] [pid 22572:tid 22578] [client 158.158.52.225:12491] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 09:38:11.407855 2026] [proxy_fcgi:error] [pid 22572:tid 22595] [client 158.158.52.225:12491] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 09:38:11.649114 2026] [proxy_fcgi:error] [pid 22572:tid 22596] [client 158.158.52.225:12491] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 09:38:11.891493 2026] [proxy_fcgi:error] [pid 22572:tid 22583] [client 158.158.52.225:12491] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 09:38:12.130622 2026] [:error] [pid 22572:tid 22582] [client 158.158.52.225:12491] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/13.php"] [unique_id "ae1shNXOViWCFU-pZzCW6QAAAUQ"]
[Sun Apr 26 09:38:13.440473 2026] [:error] [pid 22572:tid 22589] [client 158.158.52.225:21365] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/13.php"] [unique_id "ae1shdXOViWCFU-pZzCW6gAAAUs"]
[Sun Apr 26 09:38:14.203464 2026] [:error] [pid 13137:tid 13157] [client 158.158.52.225:25628] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/13.php"] [unique_id "ae1sht0RB4J0o4h5neEDQQAAAhA"]
[Sun Apr 26 09:38:16.267970 2026] [:error] [pid 13137:tid 13156] [client 158.158.52.225:53133] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/13.php"] [unique_id "ae1siN0RB4J0o4h5neEDRQAAAg8"]
[Sun Apr 26 09:38:19.000960 2026] [:error] [pid 13197:tid 13240] [client 158.158.52.225:1915] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/11.php"] [unique_id "ae1sit3kktFKdSxTrBuhQAAAAsk"]
[Sun Apr 26 09:38:20.640958 2026] [:error] [pid 16515:tid 16525] [client 158.158.52.225:23698] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/11.php"] [unique_id "ae1sjFtDrUmgHSvpuLzipQAAAkc"]
[Sun Apr 26 09:38:21.716612 2026] [:error] [pid 8390:tid 8469] [client 158.158.52.225:21462] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/11.php"] [unique_id "ae1sjYGPtFK_i9p5yxRjvgAAAJI"]
[Sun Apr 26 09:38:22.635272 2026] [:error] [pid 13137:tid 13165] [client 158.158.52.225:37470] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/11.php"] [unique_id "ae1sjt0RB4J0o4h5neEDSAAAAhg"]
[Sun Apr 26 09:38:23.471754 2026] [:error] [pid 16515:tid 16524] [client 158.158.52.225:8587] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/p.php"] [unique_id "ae1sj1tDrUmgHSvpuLziqQAAAkY"]
[Sun Apr 26 09:38:24.788671 2026] [:error] [pid 22573:tid 22619] [client 158.158.52.225:45456] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/p.php"] [unique_id "ae1skHB3EmQlD4yKUt9MXAAAAYw"]
[Sun Apr 26 09:38:27.299139 2026] [:error] [pid 8390:tid 8452] [client 158.158.52.225:37481] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/p.php"] [unique_id "ae1sk4GPtFK_i9p5yxRjyAAAAIE"]
[Sun Apr 26 09:38:28.672444 2026] [:error] [pid 8390:tid 8453] [client 158.158.52.225:15573] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/p.php"] [unique_id "ae1slIGPtFK_i9p5yxRj0AAAAII"]
[Sun Apr 26 09:38:29.296803 2026] [:error] [pid 8491:tid 8500] [client 158.158.52.225:35504] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/Requests/"] [unique_id "ae1slSq7I7e6CJooQM274AAAAME"]
[Sun Apr 26 09:38:30.084212 2026] [:error] [pid 8491:tid 8501] [client 158.158.52.225:49337] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/Requests/"] [unique_id "ae1sliq7I7e6CJooQM274gAAAMI"]
[Sun Apr 26 09:38:31.057077 2026] [:error] [pid 8491:tid 8523] [client 158.158.52.225:8232] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/Requests/"] [unique_id "ae1slyq7I7e6CJooQM276AAAANc"]
[Sun Apr 26 09:38:32.708484 2026] [:error] [pid 13137:tid 13159] [client 158.158.52.225:8311] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/Requests/"] [unique_id "ae1smN0RB4J0o4h5neEDUAAAAhI"]
[Sun Apr 26 09:38:34.325522 2026] [:error] [pid 13137:tid 13157] [client 158.158.52.225:35469] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bthil.php"] [unique_id "ae1smt0RB4J0o4h5neEDXAAAAhA"]
[Sun Apr 26 09:38:35.336078 2026] [:error] [pid 8383:tid 8412] [client 158.158.52.225:19341] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bthil.php"] [unique_id "ae1sm9Fa2S3EsATMdWPaLgAAAA8"]
[Sun Apr 26 09:38:35.960153 2026] [:error] [pid 8491:tid 8510] [client 158.158.52.225:24364] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bthil.php"] [unique_id "ae1smyq7I7e6CJooQM278AAAAMs"]
[Sun Apr 26 09:38:36.966561 2026] [:error] [pid 13197:tid 13246] [client 158.158.52.225:24989] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bthil.php"] [unique_id "ae1snN3kktFKdSxTrBuhRQAAAs4"]
[Sun Apr 26 09:38:38.396960 2026] [:error] [pid 22573:tid 22615] [client 158.158.52.225:11207] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/shell.php"] [unique_id "ae1snnB3EmQlD4yKUt9MYQAAAYg"]
[Sun Apr 26 09:38:39.210493 2026] [:error] [pid 22572:tid 22583] [client 158.158.52.225:30031] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/shell.php"] [unique_id "ae1sn9XOViWCFU-pZzCW7AAAAUU"]
[Sun Apr 26 09:38:40.050881 2026] [:error] [pid 8491:tid 8520] [client 158.158.52.225:7899] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/shell.php"] [unique_id "ae1soCq7I7e6CJooQM279gAAANU"]
[Sun Apr 26 09:38:41.052374 2026] [:error] [pid 8491:tid 8501] [client 158.158.52.225:44221] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/shell.php"] [unique_id "ae1soSq7I7e6CJooQM27-wAAAMI"]
[Sun Apr 26 09:38:42.258727 2026] [:error] [pid 8491:tid 8512] [client 158.158.52.225:24981] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/seo.php"] [unique_id "ae1soiq7I7e6CJooQM28AAAAAM0"]
[Sun Apr 26 09:38:43.225090 2026] [:error] [pid 22573:tid 22630] [client 158.158.52.225:31819] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/seo.php"] [unique_id "ae1so3B3EmQlD4yKUt9MaQAAAZc"]
[Sun Apr 26 09:38:44.139226 2026] [:error] [pid 13197:tid 13239] [client 158.158.52.225:44193] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/seo.php"] [unique_id "ae1spN3kktFKdSxTrBuhRwAAAsg"]
[Sun Apr 26 09:38:44.902009 2026] [:error] [pid 8491:tid 8503] [client 158.158.52.225:8764] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/seo.php"] [unique_id "ae1spCq7I7e6CJooQM28BQAAAMQ"]
[Sun Apr 26 09:38:45.768572 2026] [:error] [pid 8491:tid 8501] [client 158.158.52.225:24374] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/7.php"] [unique_id "ae1spSq7I7e6CJooQM28CQAAAMI"]
[Sun Apr 26 09:38:46.999991 2026] [:error] [pid 8491:tid 8499] [client 158.158.52.225:7872] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/7.php"] [unique_id "ae1spiq7I7e6CJooQM28DQAAAMA"]
[Sun Apr 26 09:38:48.148361 2026] [:error] [pid 13197:tid 13241] [client 158.158.52.225:26970] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/7.php"] [unique_id "ae1sqN3kktFKdSxTrBuhUwAAAso"]
[Sun Apr 26 09:38:49.475702 2026] [:error] [pid 8390:tid 8460] [client 158.158.52.225:23192] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/7.php"] [unique_id "ae1sqYGPtFK_i9p5yxRj1gAAAIk"]
[Sun Apr 26 09:38:51.533828 2026] [:error] [pid 8390:tid 8471] [client 158.158.52.225:24960] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/8.php"] [unique_id "ae1sq4GPtFK_i9p5yxRj3AAAAJQ"]
[Sun Apr 26 09:38:52.748655 2026] [:error] [pid 8491:tid 8511] [client 158.158.52.225:1443] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/8.php"] [unique_id "ae1srCq7I7e6CJooQM28EgAAAMw"]
[Sun Apr 26 09:38:54.498437 2026] [:error] [pid 8383:tid 8403] [client 158.158.52.225:31752] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/8.php"] [unique_id "ae1srtFa2S3EsATMdWPaOAAAAAY"]
[Sun Apr 26 09:38:55.228002 2026] [:error] [pid 22573:tid 22619] [client 158.158.52.225:55004] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/8.php"] [unique_id "ae1sr3B3EmQlD4yKUt9MdQAAAYw"]
[Sun Apr 26 09:38:56.077612 2026] [:error] [pid 22573:tid 22618] [client 158.158.52.225:62348] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/1.php"] [unique_id "ae1ssHB3EmQlD4yKUt9MfAAAAYs"]
[Sun Apr 26 09:38:57.466909 2026] [:error] [pid 8390:tid 8469] [client 158.158.52.225:27205] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/1.php"] [unique_id "ae1ssYGPtFK_i9p5yxRj7AAAAJI"]
[Sun Apr 26 09:38:58.650484 2026] [:error] [pid 8390:tid 8454] [client 158.158.52.225:26344] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/1.php"] [unique_id "ae1ssoGPtFK_i9p5yxRj7wAAAIM"]
[Sun Apr 26 09:39:00.050765 2026] [:error] [pid 8491:tid 8512] [client 158.158.52.225:23872] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/1.php"] [unique_id "ae1stCq7I7e6CJooQM28HQAAAM0"]
[Sun Apr 26 09:39:01.659572 2026] [:error] [pid 16515:tid 16541] [client 158.158.52.225:38408] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/2.php"] [unique_id "ae1stVtDrUmgHSvpuLzisgAAAlc"]
[Sun Apr 26 09:39:02.540876 2026] [:error] [pid 13197:tid 13232] [client 158.158.52.225:26330] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/2.php"] [unique_id "ae1stt3kktFKdSxTrBuhYAAAAsE"]
[Sun Apr 26 09:39:03.563149 2026] [:error] [pid 22573:tid 22610] [client 158.158.52.225:21962] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/2.php"] [unique_id "ae1st3B3EmQlD4yKUt9MigAAAYQ"]
[Sun Apr 26 09:39:04.933570 2026] [:error] [pid 8385:tid 8446] [client 158.158.52.225:26955] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/2.php"] [unique_id "ae1suDOy7_J84Wx3-oyE6gAAAFY"]
[Sun Apr 26 09:39:06.358691 2026] [:error] [pid 8385:tid 8445] [client 158.158.52.225:54988] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/3.php"] [unique_id "ae1sujOy7_J84Wx3-oyE8AAAAFU"]
[Sun Apr 26 09:39:07.420612 2026] [:error] [pid 13197:tid 13247] [client 158.158.52.225:18748] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/3.php"] [unique_id "ae1su93kktFKdSxTrBuhbQAAAs8"]
[Sun Apr 26 09:39:08.241366 2026] [:error] [pid 16515:tid 16527] [client 158.158.52.225:21923] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/3.php"] [unique_id "ae1svFtDrUmgHSvpuLzitgAAAkk"]
[Sun Apr 26 09:39:08.903618 2026] [:error] [pid 8390:tid 8459] [client 158.158.52.225:27207] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/3.php"] [unique_id "ae1svIGPtFK_i9p5yxRkCQAAAIg"]
[Sun Apr 26 09:39:09.823174 2026] [:error] [pid 8390:tid 8474] [client 158.158.52.225:55010] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/4.php"] [unique_id "ae1svYGPtFK_i9p5yxRkDQAAAJc"]
[Sun Apr 26 09:39:10.482782 2026] [:error] [pid 22573:tid 22617] [client 158.158.52.225:31747] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/4.php"] [unique_id "ae1svnB3EmQlD4yKUt9MkwAAAYo"]
[Sun Apr 26 09:39:11.103951 2026] [proxy_fcgi:error] [pid 8390:tid 8466] [client 158.158.52.225:18699] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 09:39:11.387016 2026] [proxy_fcgi:error] [pid 8390:tid 8456] [client 158.158.52.225:18699] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 09:39:11.630635 2026] [proxy_fcgi:error] [pid 8390:tid 8465] [client 158.158.52.225:18699] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 09:39:11.918484 2026] [proxy_fcgi:error] [pid 8390:tid 8458] [client 158.158.52.225:18699] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 09:39:12.161996 2026] [proxy_fcgi:error] [pid 8390:tid 8468] [client 158.158.52.225:18699] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 09:39:12.474636 2026] [proxy_fcgi:error] [pid 8390:tid 8451] [client 158.158.52.225:18699] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 09:39:13.027189 2026] [proxy_fcgi:error] [pid 8390:tid 8469] [client 158.158.52.225:18699] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 09:39:13.342335 2026] [proxy_fcgi:error] [pid 8390:tid 8459] [client 158.158.52.225:18699] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 09:39:13.734978 2026] [proxy_fcgi:error] [pid 8390:tid 8471] [client 158.158.52.225:18699] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 09:39:13.979062 2026] [proxy_fcgi:error] [pid 8390:tid 8473] [client 158.158.52.225:18699] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 09:39:14.219733 2026] [:error] [pid 8390:tid 8463] [client 158.158.52.225:18699] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/no18.php"] [unique_id "ae1swoGPtFK_i9p5yxRkLgAAAIw"]
[Sun Apr 26 09:39:15.104347 2026] [:error] [pid 16515:tid 16530] [client 158.158.52.225:38432] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/no18.php"] [unique_id "ae1sw1tDrUmgHSvpuLziuAAAAkw"]
[Sun Apr 26 09:39:16.583144 2026] [:error] [pid 22573:tid 22624] [client 158.158.52.225:18689] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/no18.php"] [unique_id "ae1sxHB3EmQlD4yKUt9MmwAAAZE"]
[Sun Apr 26 09:39:17.376803 2026] [:error] [pid 22572:tid 22601] [client 158.158.52.225:48025] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/no18.php"] [unique_id "ae1sxdXOViWCFU-pZzCXAgAAAVc"]
[Sun Apr 26 09:39:18.499382 2026] [:error] [pid 8385:tid 8430] [client 158.158.52.225:43284] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/fine.php"] [unique_id "ae1sxjOy7_J84Wx3-oyE9QAAAEY"]
[Sun Apr 26 09:39:19.610472 2026] [:error] [pid 13137:tid 13151] [client 158.158.52.225:43272] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/fine.php"] [unique_id "ae1sx90RB4J0o4h5neEDagAAAgo"]
[Sun Apr 26 09:39:21.432982 2026] [:error] [pid 22573:tid 22616] [client 158.158.52.225:43201] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/fine.php"] [unique_id "ae1syXB3EmQlD4yKUt9MqAAAAYk"]
[Sun Apr 26 09:39:22.575353 2026] [:error] [pid 8390:tid 8454] [client 158.158.52.225:43304] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/fine.php"] [unique_id "ae1syoGPtFK_i9p5yxRkPQAAAIM"]
[Sun Apr 26 09:39:23.479756 2026] [:error] [pid 22572:tid 22596] [client 158.158.52.225:8321] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/hplfuns.php"] [unique_id "ae1sy9XOViWCFU-pZzCXDwAAAVI"]
[Sun Apr 26 09:39:24.666030 2026] [:error] [pid 22572:tid 22582] [client 158.158.52.225:63227] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/hplfuns.php"] [unique_id "ae1szNXOViWCFU-pZzCXEgAAAUQ"]
[Sun Apr 26 09:39:25.690477 2026] [:error] [pid 8385:tid 8435] [client 158.158.52.225:60444] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/hplfuns.php"] [unique_id "ae1szTOy7_J84Wx3-oyE_QAAAEs"]
[Sun Apr 26 09:39:26.737863 2026] [:error] [pid 13137:tid 13157] [client 158.158.52.225:43243] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/hplfuns.php"] [unique_id "ae1szt0RB4J0o4h5neEDbwAAAhA"]
[Sun Apr 26 09:39:28.972382 2026] [:error] [pid 8383:tid 8410] [client 158.158.52.225:7811] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xa.php"] [unique_id "ae1s0NFa2S3EsATMdWPaQQAAAA0"]
[Sun Apr 26 09:39:29.967049 2026] [:error] [pid 22572:tid 22596] [client 158.158.52.225:24433] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xa.php"] [unique_id "ae1s0dXOViWCFU-pZzCXGgAAAVI"]
[Sun Apr 26 09:39:31.411892 2026] [:error] [pid 22573:tid 22627] [client 158.158.52.225:23288] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xa.php"] [unique_id "ae1s03B3EmQlD4yKUt9MsQAAAZQ"]
[Sun Apr 26 09:39:32.346274 2026] [:error] [pid 22572:tid 22586] [client 158.158.52.225:21898] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xa.php"] [unique_id "ae1s1NXOViWCFU-pZzCXHQAAAUg"]
[Sun Apr 26 09:39:34.358212 2026] [:error] [pid 8390:tid 8465] [client 158.158.52.225:31195] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/admin.php"] [unique_id "ae1s1oGPtFK_i9p5yxRkSgAAAI4"]
[Sun Apr 26 09:39:36.560251 2026] [:error] [pid 8390:tid 8453] [client 158.158.52.225:39690] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/admin.php"] [unique_id "ae1s2IGPtFK_i9p5yxRkUQAAAII"]
[Sun Apr 26 09:39:49.462384 2026] [:error] [pid 22572:tid 22582] [client 158.158.52.225:33960] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/inege.php"] [unique_id "ae1s5dXOViWCFU-pZzCXMgAAAUQ"]
[Sun Apr 26 09:39:51.398205 2026] [:error] [pid 8390:tid 8471] [client 158.158.52.225:50645] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/inege.php"] [unique_id "ae1s54GPtFK_i9p5yxRkbAAAAJQ"]
[Sun Apr 26 09:39:52.863433 2026] [:error] [pid 8383:tid 8397] [client 158.158.52.225:1754] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/inege.php"] [unique_id "ae1s6NFa2S3EsATMdWPaSQAAAAA"]
[Sun Apr 26 09:39:58.694344 2026] [:error] [pid 8390:tid 8456] [client 158.158.52.225:7973] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/inege.php"] [unique_id "ae1s7oGPtFK_i9p5yxRkgAAAAIU"]
[Sun Apr 26 09:40:00.203668 2026] [:error] [pid 8383:tid 8407] [client 158.158.52.225:7992] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/uuu.php"] [unique_id "ae1s8NFa2S3EsATMdWPaSwAAAAo"]
[Sun Apr 26 09:40:04.612706 2026] [:error] [pid 13197:tid 13250] [client 158.158.52.225:37545] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/uuu.php"] [unique_id "ae1s9N3kktFKdSxTrBuhgAAAAtI"]
[Sun Apr 26 09:40:10.144894 2026] [:error] [pid 8390:tid 8472] [client 158.158.52.225:38898] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/uuu.php"] [unique_id "ae1s-oGPtFK_i9p5yxRkoAAAAJU"]
[Sun Apr 26 09:40:13.126592 2026] [proxy_fcgi:error] [pid 22573:tid 22618] [client 158.158.52.225:22644] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 09:40:13.371193 2026] [proxy_fcgi:error] [pid 22573:tid 22628] [client 158.158.52.225:22644] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 09:40:13.615919 2026] [proxy_fcgi:error] [pid 22573:tid 22615] [client 158.158.52.225:22644] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 09:40:13.859140 2026] [proxy_fcgi:error] [pid 22573:tid 22631] [client 158.158.52.225:22644] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 09:40:14.105310 2026] [proxy_fcgi:error] [pid 22573:tid 22609] [client 158.158.52.225:22644] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 09:40:14.359482 2026] [proxy_fcgi:error] [pid 22573:tid 22630] [client 158.158.52.225:22644] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 09:40:14.610984 2026] [proxy_fcgi:error] [pid 22573:tid 22621] [client 158.158.52.225:22644] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 09:40:15.118710 2026] [proxy_fcgi:error] [pid 22573:tid 22606] [client 158.158.52.225:22644] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 09:40:15.387607 2026] [proxy_fcgi:error] [pid 22573:tid 22611] [client 158.158.52.225:22644] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 09:40:15.645389 2026] [proxy_fcgi:error] [pid 22573:tid 22620] [client 158.158.52.225:22644] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 09:40:15.885697 2026] [:error] [pid 22573:tid 22613] [client 158.158.52.225:22644] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/f6.php"] [unique_id "ae1s_3B3EmQlD4yKUt9M3wAAAYc"]
[Sun Apr 26 09:40:27.301782 2026] [:error] [pid 8383:tid 8409] [client 158.158.52.225:47854] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/f6.php"] [unique_id "ae1tC9Fa2S3EsATMdWPaVQAAAAw"]
[Sun Apr 26 09:40:28.342414 2026] [:error] [pid 13197:tid 13238] [client 158.158.52.225:33981] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/f6.php"] [unique_id "ae1tDN3kktFKdSxTrBuhjgAAAsc"]
[Sun Apr 26 09:40:29.670301 2026] [:error] [pid 22573:tid 22617] [client 158.158.52.225:11812] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/f6.php"] [unique_id "ae1tDXB3EmQlD4yKUt9M6QAAAYo"]
[Sun Apr 26 09:40:30.921947 2026] [:error] [pid 13137:tid 13159] [client 158.158.52.225:7945] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/inputs.php"] [unique_id "ae1tDt0RB4J0o4h5neEDnAAAAhI"]
[Sun Apr 26 09:40:32.235812 2026] [:error] [pid 16515:tid 16531] [client 158.158.52.225:12459] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/inputs.php"] [unique_id "ae1tEFtDrUmgHSvpuLzi2wAAAk0"]
[Sun Apr 26 09:40:33.899528 2026] [:error] [pid 22573:tid 22612] [client 158.158.52.225:47821] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/inputs.php"] [unique_id "ae1tEXB3EmQlD4yKUt9M7AAAAYY"]
[Sun Apr 26 09:40:35.209759 2026] [:error] [pid 8390:tid 8473] [client 158.158.52.225:38901] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/inputs.php"] [unique_id "ae1tE4GPtFK_i9p5yxRlEgAAAJY"]
[Sun Apr 26 09:40:36.848876 2026] [:error] [pid 22573:tid 22624] [client 158.158.52.225:33937] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/style.php"] [unique_id "ae1tFHB3EmQlD4yKUt9M8wAAAZE"]
[Sun Apr 26 09:40:39.027873 2026] [:error] [pid 8390:tid 8473] [client 158.158.52.225:1769] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/style.php"] [unique_id "ae1tF4GPtFK_i9p5yxRlIQAAAJY"]
[Sun Apr 26 09:40:40.322301 2026] [:error] [pid 8390:tid 8464] [client 158.158.52.225:33953] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/style.php"] [unique_id "ae1tGIGPtFK_i9p5yxRlJgAAAI0"]
[Sun Apr 26 09:40:42.514735 2026] [:error] [pid 22573:tid 22631] [client 158.158.52.225:50830] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/style.php"] [unique_id "ae1tGnB3EmQlD4yKUt9NBwAAAZg"]
[Sun Apr 26 09:40:43.493737 2026] [:error] [pid 8385:tid 8432] [client 158.158.52.225:43563] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/av.php"] [unique_id "ae1tGzOy7_J84Wx3-oyFHgAAAEg"]
[Sun Apr 26 09:40:45.026726 2026] [:error] [pid 16515:tid 16523] [client 158.158.52.225:29403] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/av.php"] [unique_id "ae1tHVtDrUmgHSvpuLzi3AAAAkU"]
[Sun Apr 26 09:40:46.708134 2026] [:error] [pid 22573:tid 22629] [client 158.158.52.225:37552] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/av.php"] [unique_id "ae1tHnB3EmQlD4yKUt9NFQAAAZY"]
[Sun Apr 26 09:40:48.142215 2026] [:error] [pid 8390:tid 8465] [client 158.158.52.225:12469] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/av.php"] [unique_id "ae1tIIGPtFK_i9p5yxRlNQAAAI4"]
[Sun Apr 26 09:40:49.919488 2026] [:error] [pid 8383:tid 8401] [client 158.158.52.225:50838] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "ae1tIdFa2S3EsATMdWPaXgAAAAQ"]
[Sun Apr 26 09:40:51.614271 2026] [:error] [pid 16574:tid 16613] [client 158.158.52.225:37560] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "ae1tI35MsX8wRQr99nYJDwAAA0k"]
[Sun Apr 26 09:40:54.115160 2026] [:error] [pid 13197:tid 13254] [client 158.158.52.225:41654] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "ae1tJt3kktFKdSxTrBuhmgAAAtY"]
[Sun Apr 26 09:40:54.910103 2026] [:error] [pid 8383:tid 8419] [client 158.158.52.225:29414] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "ae1tJtFa2S3EsATMdWPaXwAAABY"]
[Sun Apr 26 09:40:56.608047 2026] [:error] [pid 16515:tid 16532] [client 158.158.52.225:29376] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-act.php"] [unique_id "ae1tKFtDrUmgHSvpuLzi5wAAAk4"]
[Sun Apr 26 09:40:58.203743 2026] [:error] [pid 8383:tid 8410] [client 158.158.52.225:17460] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-act.php"] [unique_id "ae1tKtFa2S3EsATMdWPaZAAAAA0"]
[Sun Apr 26 09:40:59.635042 2026] [:error] [pid 13137:tid 13155] [client 158.158.52.225:20707] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-act.php"] [unique_id "ae1tK90RB4J0o4h5neEDuAAAAg4"]
[Sun Apr 26 09:41:01.832659 2026] [:error] [pid 16515:tid 16521] [client 158.158.52.225:14210] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-act.php"] [unique_id "ae1tLVtDrUmgHSvpuLzi8wAAAkM"]
[Sun Apr 26 09:41:03.200091 2026] [:error] [pid 8385:tid 8442] [client 158.158.52.225:37555] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/classwithtostring.php"] [unique_id "ae1tLzOy7_J84Wx3-oyFPQAAAFI"]
[Sun Apr 26 09:41:04.838444 2026] [:error] [pid 8491:tid 8519] [client 158.158.52.225:29436] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/classwithtostring.php"] [unique_id "ae1tMCq7I7e6CJooQM28RwAAANQ"]
[Sun Apr 26 09:41:07.185327 2026] [:error] [pid 22572:tid 22591] [client 158.158.52.225:7485] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/classwithtostring.php"] [unique_id "ae1tM9XOViWCFU-pZzCXXAAAAU0"]
[Sun Apr 26 09:41:08.942438 2026] [:error] [pid 16515:tid 16518] [client 158.158.52.225:25298] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/classwithtostring.php"] [unique_id "ae1tNFtDrUmgHSvpuLzi_gAAAkA"]
[Sun Apr 26 09:41:09.776620 2026] [:error] [pid 22573:tid 22625] [client 158.158.52.225:49346] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "ae1tNXB3EmQlD4yKUt9NKQAAAZI"]
[Sun Apr 26 09:41:10.516849 2026] [:error] [pid 8385:tid 8429] [client 158.158.52.225:50624] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "ae1tNjOy7_J84Wx3-oyFPwAAAEU"]
[Sun Apr 26 09:41:11.737715 2026] [:error] [pid 16515:tid 16541] [client 158.158.52.225:7424] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "ae1tN1tDrUmgHSvpuLzjAgAAAlc"]
[Sun Apr 26 09:41:13.038215 2026] [:error] [pid 13137:tid 13155] [client 158.158.52.225:28785] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "ae1tOd0RB4J0o4h5neEDwwAAAg4"]
[Sun Apr 26 09:41:14.024150 2026] [:error] [pid 8383:tid 8418] [client 158.158.52.225:8120] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/sbhu.php"] [unique_id "ae1tOtFa2S3EsATMdWPabAAAABU"]
[Sun Apr 26 09:41:15.530082 2026] [proxy_fcgi:error] [pid 8383:tid 8413] [client 158.158.52.225:48737] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 09:41:15.805939 2026] [proxy_fcgi:error] [pid 8383:tid 8399] [client 158.158.52.225:48737] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 09:41:16.680526 2026] [proxy_fcgi:error] [pid 8383:tid 8403] [client 158.158.52.225:48737] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 09:41:16.937714 2026] [proxy_fcgi:error] [pid 8383:tid 8406] [client 158.158.52.225:48737] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 09:41:17.182833 2026] [proxy_fcgi:error] [pid 8383:tid 8402] [client 158.158.52.225:48737] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 09:41:17.576184 2026] [proxy_fcgi:error] [pid 8383:tid 8421] [client 158.158.52.225:48737] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 09:41:17.877711 2026] [proxy_fcgi:error] [pid 8383:tid 8412] [client 158.158.52.225:48737] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 09:41:18.368050 2026] [proxy_fcgi:error] [pid 8383:tid 8419] [client 158.158.52.225:48737] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 09:41:18.624198 2026] [:error] [pid 8383:tid 8415] [client 158.158.52.225:48737] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/"] [unique_id "ae1tPtFa2S3EsATMdWPafwAAABI"]
[Sun Apr 26 09:41:19.989983 2026] [:error] [pid 8491:tid 8507] [client 158.158.52.225:59841] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/"] [unique_id "ae1tPyq7I7e6CJooQM28YQAAAMg"]
[Sun Apr 26 09:41:22.939144 2026] [:error] [pid 16574:tid 16641] [client 158.158.52.225:8878] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/"] [unique_id "ae1tQn5MsX8wRQr99nYJGgAAA1c"]
[Sun Apr 26 09:41:24.231553 2026] [:error] [pid 16574:tid 16613] [client 158.158.52.225:32417] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/"] [unique_id "ae1tRH5MsX8wRQr99nYJHwAAA0k"]
[Sun Apr 26 09:41:25.401036 2026] [:error] [pid 22573:tid 22610] [client 158.158.52.225:58127] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/makeasmtp.php"] [unique_id "ae1tRXB3EmQlD4yKUt9NWAAAAYQ"]
[Sun Apr 26 09:41:26.196403 2026] [:error] [pid 13197:tid 13252] [client 158.158.52.225:27563] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/makeasmtp.php"] [unique_id "ae1tRt3kktFKdSxTrBuhsgAAAtQ"]
[Sun Apr 26 09:41:27.176109 2026] [:error] [pid 8383:tid 8409] [client 158.158.52.225:25679] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/makeasmtp.php"] [unique_id "ae1tR9Fa2S3EsATMdWPaigAAAAw"]
[Sun Apr 26 09:41:28.358156 2026] [:error] [pid 13197:tid 13248] [client 158.158.52.225:7732] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/makeasmtp.php"] [unique_id "ae1tSN3kktFKdSxTrBuhtgAAAtA"]
[Sun Apr 26 09:41:29.357209 2026] [:error] [pid 8385:tid 8426] [client 158.158.52.225:10761] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/admin1.php"] [unique_id "ae1tSTOy7_J84Wx3-oyFQwAAAEI"]
[Sun Apr 26 09:41:31.170019 2026] [:error] [pid 13197:tid 13234] [client 158.158.52.225:26903] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/admin1.php"] [unique_id "ae1tS93kktFKdSxTrBuhuQAAAsM"]
[Sun Apr 26 09:41:32.347318 2026] [:error] [pid 22573:tid 22606] [client 158.158.52.225:7592] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/admin1.php"] [unique_id "ae1tTHB3EmQlD4yKUt9NbAAAAYA"]
[Sun Apr 26 09:41:33.572776 2026] [:error] [pid 8385:tid 8436] [client 158.158.52.225:1513] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/admin1.php"] [unique_id "ae1tTTOy7_J84Wx3-oyFRQAAAEw"]
[Sun Apr 26 09:41:35.039757 2026] [:error] [pid 8390:tid 8470] [client 158.158.52.225:20045] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "ae1tT4GPtFK_i9p5yxRlWgAAAJM"]
[Sun Apr 26 09:41:36.721158 2026] [:error] [pid 8390:tid 8453] [client 158.158.52.225:20890] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "ae1tUIGPtFK_i9p5yxRlZAAAAII"]
[Sun Apr 26 09:41:38.623470 2026] [:error] [pid 8491:tid 8524] [client 158.158.52.225:20074] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "ae1tUiq7I7e6CJooQM28hAAAANg"]
[Sun Apr 26 09:41:39.593930 2026] [:error] [pid 13197:tid 13233] [client 158.158.52.225:1107] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "ae1tU93kktFKdSxTrBuhyAAAAsI"]
[Sun Apr 26 09:41:41.767881 2026] [:error] [pid 16515:tid 16539] [client 158.158.52.225:35693] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/BDKR28WP.php"] [unique_id "ae1tVVtDrUmgHSvpuLzjCwAAAlU"]
[Sun Apr 26 09:41:42.978115 2026] [:error] [pid 8385:tid 8439] [client 158.158.52.225:20912] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/BDKR28WP.php"] [unique_id "ae1tVjOy7_J84Wx3-oyFSgAAAE8"]
[Sun Apr 26 09:41:44.626520 2026] [:error] [pid 8491:tid 8515] [client 158.158.52.225:20921] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/BDKR28WP.php"] [unique_id "ae1tWCq7I7e6CJooQM28jwAAANA"]
[Sun Apr 26 09:41:46.491119 2026] [:error] [pid 8385:tid 8433] [client 158.158.52.225:44244] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/BDKR28WP.php"] [unique_id "ae1tWjOy7_J84Wx3-oyFWAAAAEk"]
[Sun Apr 26 09:41:52.137843 2026] [:error] [pid 8390:tid 8462] [client 158.158.52.225:42924] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/l10n/"] [unique_id "ae1tYIGPtFK_i9p5yxRlewAAAIs"]
[Sun Apr 26 09:41:58.093666 2026] [:error] [pid 22573:tid 22611] [client 158.158.52.225:63127] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/l10n/"] [unique_id "ae1tZnB3EmQlD4yKUt9NewAAAYU"]
[Sun Apr 26 09:42:11.854424 2026] [:error] [pid 22573:tid 22629] [client 158.158.52.225:12946] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/uploads/"] [unique_id "ae1tc3B3EmQlD4yKUt9NmwAAAZY"]
[Sun Apr 26 09:42:12.771191 2026] [:error] [pid 22572:tid 22598] [client 158.158.52.225:22768] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/uploads/"] [unique_id "ae1tdNXOViWCFU-pZzCXfQAAAVQ"]
[Sun Apr 26 09:42:16.147991 2026] [:error] [pid 22572:tid 22590] [client 158.158.52.225:39338] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/uploads/"] [unique_id "ae1teNXOViWCFU-pZzCXhwAAAUw"]
[Sun Apr 26 09:42:16.938743 2026] [:error] [pid 13197:tid 13234] [client 158.158.52.225:20040] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/uploads/"] [unique_id "ae1teN3kktFKdSxTrBuh8AAAAsM"]
[Sun Apr 26 09:42:17.728208 2026] [:error] [pid 22572:tid 22596] [client 158.158.52.225:1379] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp.php"] [unique_id "ae1tedXOViWCFU-pZzCXigAAAVI"]
[Sun Apr 26 09:42:19.031528 2026] [proxy_fcgi:error] [pid 8385:tid 8443] [client 158.158.52.225:35694] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 09:42:19.584729 2026] [proxy_fcgi:error] [pid 8385:tid 8427] [client 158.158.52.225:35694] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 09:42:20.131103 2026] [proxy_fcgi:error] [pid 8385:tid 8446] [client 158.158.52.225:35694] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 09:42:20.427218 2026] [proxy_fcgi:error] [pid 8385:tid 8425] [client 158.158.52.225:35694] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 09:42:20.671702 2026] [proxy_fcgi:error] [pid 8385:tid 8437] [client 158.158.52.225:35694] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 09:42:21.230749 2026] [:error] [pid 8385:tid 8441] [client 158.158.52.225:35694] [client 158.158.52.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "ae1tfTOy7_J84Wx3-oyFdwAAAFE"]
[Sun Apr 26 09:42:24.553612 2026] [proxy_fcgi:error] [pid 13197:tid 13239] [client 158.158.52.225:46127] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 09:42:25.344320 2026] [:error] [pid 13197:tid 13246] [client 158.158.52.225:46127] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/k.php"] [unique_id "ae1tgd3kktFKdSxTrBuh_wAAAs4"]
[Sun Apr 26 09:42:26.166788 2026] [:error] [pid 13137:tid 13161] [client 158.158.52.225:29967] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/k.php"] [unique_id "ae1tgt0RB4J0o4h5neED5wAAAhQ"]
[Sun Apr 26 09:42:28.850465 2026] [:error] [pid 22573:tid 22628] [client 158.158.52.225:1376] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/k.php"] [unique_id "ae1thHB3EmQlD4yKUt9NrAAAAZU"]
[Sun Apr 26 09:42:30.580627 2026] [:error] [pid 16515:tid 16538] [client 158.158.52.225:29958] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/k.php"] [unique_id "ae1thltDrUmgHSvpuLzjLAAAAlQ"]
[Sun Apr 26 09:42:32.045635 2026] [:error] [pid 22573:tid 22617] [client 158.158.52.225:28946] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bal.php"] [unique_id "ae1tiHB3EmQlD4yKUt9NsgAAAYo"]
[Sun Apr 26 09:42:35.508730 2026] [:error] [pid 13197:tid 13231] [client 158.158.52.225:9043] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bal.php"] [unique_id "ae1ti93kktFKdSxTrBuiBQAAAsA"]
[Sun Apr 26 09:42:36.368308 2026] [:error] [pid 8383:tid 8413] [client 158.158.52.225:10778] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bal.php"] [unique_id "ae1tjNFa2S3EsATMdWPapgAAABA"]
[Sun Apr 26 09:42:38.558706 2026] [:error] [pid 22573:tid 22617] [client 158.158.52.225:41071] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bal.php"] [unique_id "ae1tjnB3EmQlD4yKUt9NugAAAYo"]
[Sun Apr 26 09:42:40.533245 2026] [:error] [pid 8383:tid 8416] [client 158.158.52.225:16237] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/in.php"] [unique_id "ae1tkNFa2S3EsATMdWPasAAAABM"]
[Sun Apr 26 09:42:44.306476 2026] [:error] [pid 8390:tid 8467] [client 158.158.52.225:7344] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/in.php"] [unique_id "ae1tlIGPtFK_i9p5yxRlwQAAAJA"]
[Sun Apr 26 09:42:48.092344 2026] [:error] [pid 22572:tid 22590] [client 158.158.52.225:46772] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/in.php"] [unique_id "ae1tmNXOViWCFU-pZzCXwwAAAUw"]
[Sun Apr 26 09:42:49.905838 2026] [:error] [pid 8390:tid 8463] [client 158.158.52.225:29370] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/in.php"] [unique_id "ae1tmYGPtFK_i9p5yxRlzQAAAIw"]
[Sun Apr 26 09:42:52.697298 2026] [:error] [pid 8390:tid 8467] [client 158.158.52.225:43562] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/gssdd.php"] [unique_id "ae1tnIGPtFK_i9p5yxRl2gAAAJA"]
[Sun Apr 26 09:42:53.531325 2026] [:error] [pid 22572:tid 22598] [client 158.158.52.225:24386] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/gssdd.php"] [unique_id "ae1tndXOViWCFU-pZzCX1QAAAVQ"]
[Sun Apr 26 09:42:55.693991 2026] [:error] [pid 16574:tid 16609] [client 158.158.52.225:10104] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/gssdd.php"] [unique_id "ae1tn35MsX8wRQr99nYJLAAAA0U"]
[Sun Apr 26 09:42:57.190073 2026] [:error] [pid 22573:tid 22612] [client 158.158.52.225:60424] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/gssdd.php"] [unique_id "ae1toXB3EmQlD4yKUt9NwAAAAYY"]
[Sun Apr 26 09:42:59.099504 2026] [:error] [pid 8390:tid 8461] [client 158.158.52.225:39704] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "ae1to4GPtFK_i9p5yxRl5QAAAIo"]
[Sun Apr 26 09:43:01.142803 2026] [:error] [pid 8383:tid 8406] [client 158.158.52.225:1814] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "ae1tpdFa2S3EsATMdWPaugAAAAk"]
[Sun Apr 26 09:43:02.271028 2026] [:error] [pid 8491:tid 8502] [client 158.158.52.225:38420] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "ae1tpiq7I7e6CJooQM28uQAAAMM"]
[Sun Apr 26 09:43:03.247546 2026] [:error] [pid 16515:tid 16529] [client 158.158.52.225:1848] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "ae1tp1tDrUmgHSvpuLzjMAAAAks"]
[Sun Apr 26 09:43:03.866045 2026] [:error] [pid 8491:tid 8517] [client 158.158.52.225:7851] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bs1.php"] [unique_id "ae1tpyq7I7e6CJooQM28ugAAANI"]
[Sun Apr 26 09:43:04.792159 2026] [:error] [pid 13197:tid 13232] [client 158.158.52.225:38456] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bs1.php"] [unique_id "ae1tqN3kktFKdSxTrBuiIwAAAsE"]
[Sun Apr 26 09:43:05.771609 2026] [:error] [pid 8385:tid 8442] [client 158.158.52.225:7813] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bs1.php"] [unique_id "ae1tqTOy7_J84Wx3-oyFqQAAAFI"]
[Sun Apr 26 09:43:06.652982 2026] [:error] [pid 22572:tid 22578] [client 158.158.52.225:21922] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bs1.php"] [unique_id "ae1tqtXOViWCFU-pZzCX4gAAAUA"]
[Sun Apr 26 09:43:08.482471 2026] [:error] [pid 8491:tid 8499] [client 158.158.52.225:39683] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "ae1trCq7I7e6CJooQM28vQAAAMA"]
[Sun Apr 26 09:43:09.899922 2026] [:error] [pid 8390:tid 8475] [client 158.158.52.225:43204] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "ae1trYGPtFK_i9p5yxRmEAAAAJg"]
[Sun Apr 26 09:43:12.242617 2026] [:error] [pid 8390:tid 8472] [client 158.158.52.225:35516] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "ae1tsIGPtFK_i9p5yxRmHAAAAJU"]
[Sun Apr 26 09:43:14.366297 2026] [:error] [pid 8383:tid 8407] [client 158.158.52.225:37473] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "ae1tstFa2S3EsATMdWPawAAAAAo"]
[Sun Apr 26 09:43:15.620313 2026] [:error] [pid 22572:tid 22596] [client 158.158.52.225:48042] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/axx.php"] [unique_id "ae1ts9XOViWCFU-pZzCX7AAAAVI"]
[Sun Apr 26 09:43:17.203644 2026] [:error] [pid 13137:tid 13162] [client 158.158.52.225:11224] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/axx.php"] [unique_id "ae1ttd0RB4J0o4h5neEEAAAAAhU"]
[Sun Apr 26 09:43:18.751331 2026] [:error] [pid 8491:tid 8516] [client 158.158.52.225:32456] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/axx.php"] [unique_id "ae1ttiq7I7e6CJooQM28yAAAANE"]
[Sun Apr 26 09:43:19.549494 2026] [:error] [pid 22573:tid 22606] [client 158.158.52.225:11229] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/axx.php"] [unique_id "ae1tt3B3EmQlD4yKUt9N2AAAAYA"]
[Sun Apr 26 09:43:20.365329 2026] [:error] [pid 13137:tid 13142] [client 158.158.52.225:54315] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/gettest.php"] [unique_id "ae1tuN0RB4J0o4h5neEECAAAAgI"]
[Sun Apr 26 09:43:21.706277 2026] [:error] [pid 13137:tid 13141] [client 158.158.52.225:2035] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/gettest.php"] [unique_id "ae1tud0RB4J0o4h5neEECgAAAgE"]
[Sun Apr 26 09:43:23.725438 2026] [:error] [pid 16515:tid 16520] [client 158.158.52.225:8130] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/gettest.php"] [unique_id "ae1tu1tDrUmgHSvpuLzjQQAAAkI"]
[Sun Apr 26 09:43:26.765209 2026] [proxy_fcgi:error] [pid 13137:tid 13142] [client 158.158.52.225:8133] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 09:43:27.014299 2026] [proxy_fcgi:error] [pid 13137:tid 13164] [client 158.158.52.225:8133] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 09:43:27.258365 2026] [proxy_fcgi:error] [pid 13137:tid 13140] [client 158.158.52.225:8133] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 09:43:27.759519 2026] [proxy_fcgi:error] [pid 13137:tid 13160] [client 158.158.52.225:8133] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 09:43:28.001724 2026] [proxy_fcgi:error] [pid 13137:tid 13163] [client 158.158.52.225:8133] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 09:43:28.245070 2026] [proxy_fcgi:error] [pid 13137:tid 13152] [client 158.158.52.225:8133] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 09:43:28.508927 2026] [proxy_fcgi:error] [pid 13137:tid 13151] [client 158.158.52.225:8133] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 09:43:29.894076 2026] [proxy_fcgi:error] [pid 13137:tid 13144] [client 158.158.52.225:8133] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 09:43:30.136111 2026] [proxy_fcgi:error] [pid 13137:tid 13162] [client 158.158.52.225:8133] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 09:43:30.672925 2026] [:error] [pid 13137:tid 13143] [client 158.158.52.225:8133] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/chosen.php"] [unique_id "ae1twt0RB4J0o4h5neEEMQAAAgM"]
[Sun Apr 26 09:43:35.909537 2026] [:error] [pid 8390:tid 8471] [client 158.158.52.225:1660] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/chosen.php"] [unique_id "ae1tx4GPtFK_i9p5yxRmLgAAAJQ"]
[Sun Apr 26 09:43:37.939334 2026] [:error] [pid 16515:tid 16537] [client 158.158.52.225:36182] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/chosen.php"] [unique_id "ae1tyVtDrUmgHSvpuLzjRwAAAlM"]
[Sun Apr 26 09:43:41.993248 2026] [:error] [pid 22573:tid 22622] [client 158.158.52.225:36179] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/chosen.php"] [unique_id "ae1tzXB3EmQlD4yKUt9N-AAAAY8"]
[Sun Apr 26 13:01:51.770041 2026] [:error] [pid 8390:tid 8466] [client 151.241.100.57:35716] [client 151.241.100.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.local"] [unique_id "ae2cP4GPtFK_i9p5yxTHlgAAAI8"]
[Sun Apr 26 13:01:52.559198 2026] [:error] [pid 8390:tid 8467] [client 151.241.100.57:35750] [client 151.241.100.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env"] [unique_id "ae2cQIGPtFK_i9p5yxTHnQAAAJA"]
[Sun Apr 26 13:01:52.559886 2026] [:error] [pid 8390:tid 8457] [client 151.241.100.57:35808] [client 151.241.100.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.git/config"] [unique_id "ae2cQIGPtFK_i9p5yxTHngAAAIY"]
[Sun Apr 26 13:01:52.561468 2026] [:error] [pid 22572:tid 22586] [client 151.241.100.57:35760] [client 151.241.100.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.old"] [unique_id "ae2cQNXOViWCFU-pZzDQuQAAAUg"]
[Sun Apr 26 13:01:52.561865 2026] [:error] [pid 8390:tid 8465] [client 151.241.100.57:35770] [client 151.241.100.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/wp-config.php.bak"] [unique_id "ae2cQIGPtFK_i9p5yxTHoAAAAI4"]
[Sun Apr 26 13:01:52.560843 2026] [:error] [pid 8390:tid 8461] [client 151.241.100.57:35802] [client 151.241.100.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.bak"] [unique_id "ae2cQIGPtFK_i9p5yxTHnwAAAIo"]
[Sun Apr 26 13:01:52.562959 2026] [:error] [pid 8390:tid 8455] [client 151.241.100.57:35786] [client 151.241.100.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/wp-config.php"] [unique_id "ae2cQIGPtFK_i9p5yxTHoQAAAIQ"]
[Sun Apr 26 13:01:53.031134 2026] [:error] [pid 8390:tid 8463] [client 151.241.100.57:35748] [client 151.241.100.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/settings.py"] [unique_id "ae2cQYGPtFK_i9p5yxTHrQAAAIw"]
[Sun Apr 26 13:01:53.031134 2026] [:error] [pid 8390:tid 8459] [client 151.241.100.57:35746] [client 151.241.100.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/api/config"] [unique_id "ae2cQYGPtFK_i9p5yxTHrgAAAIg"]
[Sun Apr 26 13:01:53.031798 2026] [:error] [pid 13197:tid 13237] [client 151.241.100.57:35724] [client 151.241.100.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.npmrc"] [unique_id "ae2cQd3kktFKdSxTrBu2GAAAAsY"]
[Sun Apr 26 13:01:53.187952 2026] [:error] [pid 8390:tid 8468] [client 151.241.100.57:35736] [client 151.241.100.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/api/config"] [unique_id "ae2cQYGPtFK_i9p5yxTHsAAAAJE"]
[Sun Apr 26 13:01:53.187952 2026] [:error] [pid 8390:tid 8457] [client 151.241.100.57:35782] [client 151.241.100.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.npmrc"] [unique_id "ae2cQYGPtFK_i9p5yxTHrwAAAIY"]
[Sun Apr 26 13:01:53.548952 2026] [:error] [pid 22573:tid 22609] [client 151.241.100.57:35832] [client 151.241.100.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/settings.py"] [unique_id "ae2cQXB3EmQlD4yKUt-TOQAAAYM"]
[Sun Apr 26 13:01:53.548977 2026] [:error] [pid 22573:tid 22615] [client 151.241.100.57:35840] [client 151.241.100.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/api/config"] [unique_id "ae2cQXB3EmQlD4yKUt-TOgAAAYg"]
[Sun Apr 26 13:01:53.549601 2026] [:error] [pid 22573:tid 22616] [client 151.241.100.57:35816] [client 151.241.100.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.npmrc"] [unique_id "ae2cQXB3EmQlD4yKUt-TOwAAAYk"]
[Sun Apr 26 13:01:53.704250 2026] [:error] [pid 22572:tid 22600] [client 151.241.100.57:35936] [client 151.241.100.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/settings.py"] [unique_id "ae2cQdXOViWCFU-pZzDQuwAAAVY"]
[Sun Apr 26 13:01:53.705164 2026] [:error] [pid 22572:tid 22585] [client 151.241.100.57:35902] [client 151.241.100.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/api/config"] [unique_id "ae2cQdXOViWCFU-pZzDQvAAAAUc"]
[Sun Apr 26 13:01:53.706028 2026] [:error] [pid 22572:tid 22578] [client 151.241.100.57:35914] [client 151.241.100.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.npmrc"] [unique_id "ae2cQdXOViWCFU-pZzDQvQAAAUA"]
[Sun Apr 26 13:01:53.858893 2026] [:error] [pid 22572:tid 22598] [client 151.241.100.57:35896] [client 151.241.100.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/settings.py"] [unique_id "ae2cQdXOViWCFU-pZzDQvgAAAVQ"]
[Sun Apr 26 13:01:53.859188 2026] [:error] [pid 22572:tid 22588] [client 151.241.100.57:35880] [client 151.241.100.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/api/config"] [unique_id "ae2cQdXOViWCFU-pZzDQvwAAAUo"]
[Sun Apr 26 13:01:53.859973 2026] [:error] [pid 22573:tid 22624] [client 151.241.100.57:35860] [client 151.241.100.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.npmrc"] [unique_id "ae2cQXB3EmQlD4yKUt-TPAAAAZE"]
[Sun Apr 26 13:01:54.013492 2026] [:error] [pid 16574:tid 16613] [client 151.241.100.57:35856] [client 151.241.100.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/settings.py"] [unique_id "ae2cQn5MsX8wRQr99nYXywAAA0k"]
[Sun Apr 26 13:01:54.014950 2026] [:error] [pid 16574:tid 16635] [client 151.241.100.57:35866] [client 151.241.100.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/api/config"] [unique_id "ae2cQn5MsX8wRQr99nYXzAAAA1Q"]
[Sun Apr 26 13:01:54.015796 2026] [:error] [pid 8385:tid 8439] [client 151.241.100.57:35836] [client 151.241.100.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.npmrc"] [unique_id "ae2cQjOy7_J84Wx3-oyivQAAAE8"]
[Sun Apr 26 13:01:54.168182 2026] [:error] [pid 22572:tid 22590] [client 151.241.100.57:35950] [client 151.241.100.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/settings.py"] [unique_id "ae2cQtXOViWCFU-pZzDQwQAAAUw"]
[Sun Apr 26 13:01:54.168527 2026] [:error] [pid 22572:tid 22593] [client 151.241.100.57:35940] [client 151.241.100.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/api/config"] [unique_id "ae2cQtXOViWCFU-pZzDQwgAAAU8"]
[Sun Apr 26 13:01:54.980371 2026] [:error] [pid 22573:tid 22631] [client 151.241.100.57:35966] [client 151.241.100.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/settings.py"] [unique_id "ae2cQnB3EmQlD4yKUt-TPwAAAZg"]
[Sun Apr 26 13:01:54.980371 2026] [:error] [pid 22572:tid 22582] [client 151.241.100.57:35972] [client 151.241.100.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.npmrc"] [unique_id "ae2cQtXOViWCFU-pZzDQwwAAAUQ"]
[Sun Apr 26 13:01:54.980579 2026] [:error] [pid 22572:tid 22595] [client 151.241.100.57:35968] [client 151.241.100.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.production"] [unique_id "ae2cQtXOViWCFU-pZzDQxAAAAVE"]
[Sun Apr 26 13:01:54.981970 2026] [:error] [pid 22573:tid 22617] [client 151.241.100.57:35982] [client 151.241.100.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/api/config"] [unique_id "ae2cQnB3EmQlD4yKUt-TQAAAAYo"]
[Sun Apr 26 17:16:20.466738 2026] [proxy_fcgi:error] [pid 8390:tid 8456] [client 20.111.17.80:18313] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 17:16:20.706007 2026] [proxy_fcgi:error] [pid 8390:tid 8469] [client 20.111.17.80:18313] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 17:16:20.855594 2026] [proxy_fcgi:error] [pid 8390:tid 8471] [client 20.111.17.80:18388] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 17:16:20.944941 2026] [proxy_fcgi:error] [pid 8390:tid 8467] [client 20.111.17.80:18313] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 17:16:21.342833 2026] [proxy_fcgi:error] [pid 8390:tid 8454] [client 20.111.17.80:18388] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 17:16:21.471909 2026] [proxy_fcgi:error] [pid 8390:tid 8474] [client 20.111.17.80:18313] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 17:16:21.593118 2026] [proxy_fcgi:error] [pid 8390:tid 8460] [client 20.111.17.80:18388] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 17:16:21.821592 2026] [proxy_fcgi:error] [pid 8390:tid 8473] [client 20.111.17.80:18313] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 17:16:21.829518 2026] [proxy_fcgi:error] [pid 8390:tid 8458] [client 20.111.17.80:18388] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 17:16:22.072168 2026] [:error] [pid 8390:tid 8463] [client 20.111.17.80:18313] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aevly.php"] [unique_id "ae3X5oGPtFK_i9p5yxQXqAAAAIw"]
[Sun Apr 26 17:16:22.078831 2026] [:error] [pid 8390:tid 8457] [client 20.111.17.80:18388] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jp.php"] [unique_id "ae3X5oGPtFK_i9p5yxQXqQAAAIY"]
[Sun Apr 26 17:16:24.778104 2026] [:error] [pid 22573:tid 22627] [client 20.111.17.80:18317] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jp.php"] [unique_id "ae3X6HB3EmQlD4yKUt_OMwAAAZQ"]
[Sun Apr 26 17:16:24.964811 2026] [:error] [pid 8385:tid 8436] [client 20.111.17.80:18307] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aevly.php"] [unique_id "ae3X6DOy7_J84Wx3-oy8VQAAAEw"]
[Sun Apr 26 17:16:26.580852 2026] [:error] [pid 16515:tid 16541] [client 20.111.17.80:18412] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aevly.php"] [unique_id "ae3X6ltDrUmgHSvpuLwmdwAAAlc"]
[Sun Apr 26 17:16:27.576926 2026] [:error] [pid 16574:tid 16639] [client 20.111.17.80:18410] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jp.php"] [unique_id "ae3X635MsX8wRQr99nYm4gAAA1Y"]
[Sun Apr 26 17:16:27.883803 2026] [:error] [pid 13197:tid 13232] [client 20.111.17.80:18394] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aevly.php"] [unique_id "ae3X693kktFKdSxTrBvHLgAAAsE"]
[Sun Apr 26 17:16:29.125657 2026] [:error] [pid 22572:tid 22599] [client 20.111.17.80:18400] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ta0ol.php"] [unique_id "ae3X7dXOViWCFU-pZzAAYgAAAVU"]
[Sun Apr 26 17:16:29.164513 2026] [:error] [pid 22573:tid 22623] [client 20.111.17.80:18382] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jp.php"] [unique_id "ae3X7XB3EmQlD4yKUt_ONQAAAZA"]
[Sun Apr 26 17:16:30.434163 2026] [:error] [pid 22573:tid 22626] [client 20.111.17.80:18339] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aevly.php"] [unique_id "ae3X7nB3EmQlD4yKUt_OOAAAAZM"]
[Sun Apr 26 17:16:30.469288 2026] [:error] [pid 13197:tid 13244] [client 20.111.17.80:18383] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ta0ol.php"] [unique_id "ae3X7t3kktFKdSxTrBvHMQAAAsw"]
[Sun Apr 26 17:16:31.497554 2026] [:error] [pid 22573:tid 22607] [client 20.111.17.80:18393] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aevly.php"] [unique_id "ae3X73B3EmQlD4yKUt_OPgAAAYE"]
[Sun Apr 26 17:16:32.434990 2026] [:error] [pid 22573:tid 22618] [client 20.111.17.80:18415] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aevly.php"] [unique_id "ae3X8HB3EmQlD4yKUt_OQgAAAYs"]
[Sun Apr 26 17:16:32.551499 2026] [:error] [pid 8383:tid 8421] [client 20.111.17.80:18321] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ta0ol.php"] [unique_id "ae3X8NFa2S3EsATMdWMWfQAAABg"]
[Sun Apr 26 17:16:34.445189 2026] [:error] [pid 22572:tid 22586] [client 20.111.17.80:18387] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ta0ol.php"] [unique_id "ae3X8tXOViWCFU-pZzAAZAAAAUg"]
[Sun Apr 26 17:16:34.565610 2026] [:error] [pid 22573:tid 22616] [client 20.111.17.80:18366] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aevly.php"] [unique_id "ae3X8nB3EmQlD4yKUt_OSQAAAYk"]
[Sun Apr 26 17:16:36.757507 2026] [:error] [pid 8390:tid 8459] [client 20.111.17.80:18306] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aligk.php"] [unique_id "ae3X9IGPtFK_i9p5yxQXrwAAAIg"]
[Sun Apr 26 17:16:37.531045 2026] [:error] [pid 8390:tid 8456] [client 20.111.17.80:18390] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ta0ol.php"] [unique_id "ae3X9YGPtFK_i9p5yxQXsAAAAIU"]
[Sun Apr 26 17:16:38.619170 2026] [:error] [pid 16574:tid 16611] [client 20.111.17.80:18392] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aligk.php"] [unique_id "ae3X9n5MsX8wRQr99nYm6AAAA0c"]
[Sun Apr 26 17:16:39.770967 2026] [:error] [pid 8390:tid 8467] [client 20.111.17.80:18341] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aligk.php"] [unique_id "ae3X94GPtFK_i9p5yxQXtAAAAJA"]
[Sun Apr 26 17:16:40.466522 2026] [:error] [pid 8383:tid 8419] [client 20.111.17.80:18380] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ta0ol.php"] [unique_id "ae3X-NFa2S3EsATMdWMWgQAAABY"]
[Sun Apr 26 17:16:41.884912 2026] [:error] [pid 8383:tid 8417] [client 20.111.17.80:18316] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aligk.php"] [unique_id "ae3X-dFa2S3EsATMdWMWhQAAABQ"]
[Sun Apr 26 17:16:42.597312 2026] [:error] [pid 8383:tid 8414] [client 20.111.17.80:18329] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ta0ol.php"] [unique_id "ae3X-tFa2S3EsATMdWMWiQAAABE"]
[Sun Apr 26 17:16:44.390654 2026] [:error] [pid 13137:tid 13155] [client 20.111.17.80:18310] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/users.php"] [unique_id "ae3X_N0RB4J0o4h5neFVkgAAAg4"]
[Sun Apr 26 17:16:45.475506 2026] [:error] [pid 22573:tid 22610] [client 20.111.17.80:18416] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/users.php"] [unique_id "ae3X_XB3EmQlD4yKUt_OUgAAAYQ"]
[Sun Apr 26 17:16:45.698426 2026] [:error] [pid 22572:tid 22593] [client 20.111.17.80:18314] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ta0ol.php"] [unique_id "ae3X_dXOViWCFU-pZzAAZgAAAU8"]
[Sun Apr 26 17:16:46.121824 2026] [:error] [pid 22572:tid 22600] [client 20.111.17.80:18389] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/users.php"] [unique_id "ae3X_tXOViWCFU-pZzAAZwAAAVY"]
[Sun Apr 26 17:16:47.882162 2026] [:error] [pid 8390:tid 8475] [client 20.111.17.80:18403] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/users.php"] [unique_id "ae3X_4GPtFK_i9p5yxQXwAAAAJg"]
[Sun Apr 26 17:16:48.603164 2026] [:error] [pid 8390:tid 8472] [client 20.111.17.80:18266] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aligk.php"] [unique_id "ae3YAIGPtFK_i9p5yxQXxAAAAJU"]
[Sun Apr 26 17:16:49.303511 2026] [:error] [pid 8383:tid 8420] [client 20.111.17.80:18397] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/public/vx.php"] [unique_id "ae3YAdFa2S3EsATMdWMWjQAAABc"]
[Sun Apr 26 17:16:50.283446 2026] [:error] [pid 8491:tid 8510] [client 20.111.17.80:18318] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/public/vx.php"] [unique_id "ae3YAiq7I7e6CJooQM3scAAAAMs"]
[Sun Apr 26 17:16:50.582662 2026] [:error] [pid 8383:tid 8403] [client 20.111.17.80:18376] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aligk.php"] [unique_id "ae3YAtFa2S3EsATMdWMWkAAAAAY"]
[Sun Apr 26 17:16:51.073246 2026] [:error] [pid 22572:tid 22602] [client 20.111.17.80:18371] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/public/vx.php"] [unique_id "ae3YA9XOViWCFU-pZzAAbAAAAVg"]
[Sun Apr 26 17:16:52.031717 2026] [:error] [pid 8491:tid 8524] [client 20.111.17.80:18322] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aligk.php"] [unique_id "ae3YBCq7I7e6CJooQM3scQAAANg"]
[Sun Apr 26 17:16:52.473228 2026] [:error] [pid 8383:tid 8413] [client 20.111.17.80:18401] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/public/vx.php"] [unique_id "ae3YBNFa2S3EsATMdWMWkwAAABA"]
[Sun Apr 26 17:16:53.322366 2026] [:error] [pid 8390:tid 8472] [client 20.111.17.80:18406] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/elp.php"] [unique_id "ae3YBYGPtFK_i9p5yxQX9gAAAJU"]
[Sun Apr 26 17:16:53.618771 2026] [:error] [pid 8390:tid 8469] [client 20.111.17.80:18362] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aligk.php"] [unique_id "ae3YBYGPtFK_i9p5yxQYDAAAAJI"]
[Sun Apr 26 17:16:54.120645 2026] [:error] [pid 8383:tid 8410] [client 20.111.17.80:18417] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/elp.php"] [unique_id "ae3YBtFa2S3EsATMdWMWswAAAA0"]
[Sun Apr 26 17:16:55.026745 2026] [:error] [pid 8383:tid 8417] [client 20.111.17.80:18428] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/elp.php"] [unique_id "ae3YB9Fa2S3EsATMdWMWuAAAABQ"]
[Sun Apr 26 17:16:55.513901 2026] [:error] [pid 8385:tid 8424] [client 20.111.17.80:18257] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/users.php"] [unique_id "ae3YBzOy7_J84Wx3-oy8WwAAAEA"]
[Sun Apr 26 17:16:56.799802 2026] [:error] [pid 8385:tid 8426] [client 20.111.17.80:18423] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/elp.php"] [unique_id "ae3YCDOy7_J84Wx3-oy8XAAAAEI"]
[Sun Apr 26 17:16:57.854715 2026] [:error] [pid 8390:tid 8471] [client 20.111.17.80:18338] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/users.php"] [unique_id "ae3YCYGPtFK_i9p5yxQYJAAAAJQ"]
[Sun Apr 26 17:16:58.051521 2026] [:error] [pid 22572:tid 22583] [client 20.111.17.80:18320] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zc-243.php"] [unique_id "ae3YCtXOViWCFU-pZzAArgAAAUU"]
[Sun Apr 26 17:16:58.844095 2026] [:error] [pid 8385:tid 8436] [client 20.111.17.80:18404] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zc-243.php"] [unique_id "ae3YCjOy7_J84Wx3-oy8XwAAAEw"]
[Sun Apr 26 17:16:58.880862 2026] [:error] [pid 8390:tid 8459] [client 20.111.17.80:18402] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/users.php"] [unique_id "ae3YCoGPtFK_i9p5yxQYKAAAAIg"]
[Sun Apr 26 17:16:59.574418 2026] [:error] [pid 8383:tid 8412] [client 20.111.17.80:18409] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zc-243.php"] [unique_id "ae3YC9Fa2S3EsATMdWMWwQAAAA8"]
[Sun Apr 26 17:17:00.229459 2026] [:error] [pid 22572:tid 22598] [client 20.111.17.80:18395] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zc-243.php"] [unique_id "ae3YDNXOViWCFU-pZzAArwAAAVQ"]
[Sun Apr 26 17:17:01.249020 2026] [:error] [pid 13137:tid 13158] [client 20.111.17.80:18370] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/users.php"] [unique_id "ae3YDd0RB4J0o4h5neFVmQAAAhE"]
[Sun Apr 26 17:17:01.404206 2026] [:error] [pid 13137:tid 13140] [client 20.111.17.80:18369] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bkyac.php"] [unique_id "ae3YDd0RB4J0o4h5neFVmgAAAgA"]
[Sun Apr 26 17:17:02.530215 2026] [:error] [pid 8383:tid 8412] [client 20.111.17.80:18374] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bkyac.php"] [unique_id "ae3YDtFa2S3EsATMdWMWxgAAAA8"]
[Sun Apr 26 17:17:03.052681 2026] [:error] [pid 16574:tid 16619] [client 20.111.17.80:18424] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/public/vx.php"] [unique_id "ae3YD35MsX8wRQr99nYm6wAAA0w"]
[Sun Apr 26 17:17:04.197848 2026] [:error] [pid 22572:tid 22579] [client 20.111.17.80:18398] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bkyac.php"] [unique_id "ae3YENXOViWCFU-pZzAAsQAAAUE"]
[Sun Apr 26 17:17:05.592794 2026] [:error] [pid 22572:tid 22584] [client 20.111.17.80:18251] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/public/vx.php"] [unique_id "ae3YEdXOViWCFU-pZzAAswAAAUY"]
[Sun Apr 26 17:17:06.131432 2026] [:error] [pid 16515:tid 16531] [client 20.111.17.80:18312] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bkyac.php"] [unique_id "ae3YEltDrUmgHSvpuLwmeQAAAk0"]
[Sun Apr 26 17:17:06.706945 2026] [:error] [pid 22572:tid 22594] [client 20.111.17.80:18381] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/public/vx.php"] [unique_id "ae3YEtXOViWCFU-pZzAAtAAAAVA"]
[Sun Apr 26 17:17:06.905836 2026] [:error] [pid 22573:tid 22617] [client 20.111.17.80:18398] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wziar1.php"] [unique_id "ae3YEnB3EmQlD4yKUt_OVAAAAYo"]
[Sun Apr 26 17:17:07.779671 2026] [:error] [pid 16515:tid 16534] [client 20.111.17.80:18241] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/public/vx.php"] [unique_id "ae3YE1tDrUmgHSvpuLwmfwAAAlA"]
[Sun Apr 26 17:17:08.036973 2026] [:error] [pid 22573:tid 22620] [client 20.111.17.80:18422] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wziar1.php"] [unique_id "ae3YFHB3EmQlD4yKUt_OVwAAAY0"]
[Sun Apr 26 17:17:09.517786 2026] [:error] [pid 8390:tid 8470] [client 20.111.17.80:18411] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wziar1.php"] [unique_id "ae3YFYGPtFK_i9p5yxQYKgAAAJM"]
[Sun Apr 26 17:17:09.532747 2026] [:error] [pid 13137:tid 13145] [client 20.111.17.80:18399] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/elp.php"] [unique_id "ae3YFd0RB4J0o4h5neFVnwAAAgU"]
[Sun Apr 26 17:17:10.715833 2026] [:error] [pid 22572:tid 22590] [client 20.111.17.80:18343] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/elp.php"] [unique_id "ae3YFtXOViWCFU-pZzAAtwAAAUw"]
[Sun Apr 26 17:17:11.120433 2026] [:error] [pid 16515:tid 16533] [client 20.111.17.80:18386] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wziar1.php"] [unique_id "ae3YF1tDrUmgHSvpuLwmggAAAk8"]
[Sun Apr 26 17:17:12.521068 2026] [:error] [pid 8385:tid 8431] [client 20.111.17.80:18280] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/elp.php"] [unique_id "ae3YGDOy7_J84Wx3-oy8YwAAAEc"]
[Sun Apr 26 17:17:13.691298 2026] [:error] [pid 8390:tid 8460] [client 20.111.17.80:18323] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/elp.php"] [unique_id "ae3YGYGPtFK_i9p5yxQYMAAAAIk"]
[Sun Apr 26 17:17:14.288749 2026] [:error] [pid 13137:tid 13155] [client 20.111.17.80:18324] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/public/oLEzRVqmJJPFSucdefault.php"] [unique_id "ae3YGt0RB4J0o4h5neFVoQAAAg4"]
[Sun Apr 26 17:17:17.033883 2026] [:error] [pid 22572:tid 22599] [client 20.111.17.80:18420] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/public/oLEzRVqmJJPFSucdefault.php"] [unique_id "ae3YHdXOViWCFU-pZzAAuQAAAVU"]
[Sun Apr 26 17:17:17.069518 2026] [:error] [pid 8385:tid 8428] [client 20.111.17.80:18426] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zc-243.php"] [unique_id "ae3YHTOy7_J84Wx3-oy8ZQAAAEQ"]
[Sun Apr 26 17:17:20.633546 2026] [:error] [pid 8491:tid 8508] [client 20.111.17.80:18319] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zc-243.php"] [unique_id "ae3YICq7I7e6CJooQM3sdgAAAMk"]
[Sun Apr 26 17:17:23.564365 2026] [proxy_fcgi:error] [pid 8383:tid 8415] [client 20.111.17.80:18337] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 17:17:23.837474 2026] [proxy_fcgi:error] [pid 8383:tid 8400] [client 20.111.17.80:18337] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 17:17:24.113948 2026] [proxy_fcgi:error] [pid 8383:tid 8397] [client 20.111.17.80:18337] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 17:17:24.398414 2026] [proxy_fcgi:error] [pid 8383:tid 8417] [client 20.111.17.80:18337] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 17:17:24.672471 2026] [proxy_fcgi:error] [pid 8383:tid 8419] [client 20.111.17.80:18337] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 17:17:25.064546 2026] [proxy_fcgi:error] [pid 8383:tid 8401] [client 20.111.17.80:18337] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 17:17:25.338405 2026] [proxy_fcgi:error] [pid 8383:tid 8413] [client 20.111.17.80:18337] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 17:17:25.610810 2026] [proxy_fcgi:error] [pid 8383:tid 8419] [client 20.111.17.80:18337] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 17:17:25.893856 2026] [proxy_fcgi:error] [pid 8383:tid 8409] [client 20.111.17.80:18337] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 17:17:26.166408 2026] [proxy_fcgi:error] [pid 8383:tid 8417] [client 20.111.17.80:18337] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 17:17:26.461601 2026] [:error] [pid 8383:tid 8401] [client 20.111.17.80:18337] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/about.php"] [unique_id "ae3YJtFa2S3EsATMdWMXBAAAAAQ"]
[Sun Apr 26 17:17:27.279192 2026] [:error] [pid 8383:tid 8400] [client 20.111.17.80:18405] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zc-243.php"] [unique_id "ae3YJ9Fa2S3EsATMdWMXEwAAAAM"]
[Sun Apr 26 17:17:29.894523 2026] [:error] [pid 16574:tid 16629] [client 20.111.17.80:18332] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zc-243.php"] [unique_id "ae3YKX5MsX8wRQr99nYm7wAAA1E"]
[Sun Apr 26 17:17:30.150396 2026] [:error] [pid 8385:tid 8430] [client 20.111.17.80:18340] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/about.php"] [unique_id "ae3YKjOy7_J84Wx3-oy8agAAAEY"]
[Sun Apr 26 17:17:31.423587 2026] [:error] [pid 8491:tid 8524] [client 20.111.17.80:18250] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bkyac.php"] [unique_id "ae3YKyq7I7e6CJooQM3sewAAANg"]
[Sun Apr 26 17:17:32.104864 2026] [:error] [pid 8491:tid 8501] [client 20.111.17.80:18378] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/about.php"] [unique_id "ae3YLCq7I7e6CJooQM3sfAAAAMI"]
[Sun Apr 26 17:17:33.947347 2026] [:error] [pid 16574:tid 16613] [client 20.111.17.80:18379] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bkyac.php"] [unique_id "ae3YLX5MsX8wRQr99nYm8QAAA0k"]
[Sun Apr 26 17:17:35.212517 2026] [:error] [pid 22573:tid 22620] [client 20.111.17.80:18359] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bkyac.php"] [unique_id "ae3YL3B3EmQlD4yKUt_OZwAAAY0"]
[Sun Apr 26 17:17:35.426533 2026] [:error] [pid 22573:tid 22613] [client 20.111.17.80:18377] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/about.php"] [unique_id "ae3YL3B3EmQlD4yKUt_OaAAAAYc"]
[Sun Apr 26 17:17:36.277607 2026] [:error] [pid 8383:tid 8411] [client 20.111.17.80:18391] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-png.php"] [unique_id "ae3YMNFa2S3EsATMdWMXMgAAAA4"]
[Sun Apr 26 17:17:36.569987 2026] [:error] [pid 8390:tid 8466] [client 20.111.17.80:18355] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bkyac.php"] [unique_id "ae3YMIGPtFK_i9p5yxQYNwAAAI8"]
[Sun Apr 26 17:17:37.118329 2026] [:error] [pid 8383:tid 8399] [client 20.111.17.80:18429] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-png.php"] [unique_id "ae3YMdFa2S3EsATMdWMXNgAAAAI"]
[Sun Apr 26 17:17:37.622067 2026] [:error] [pid 8383:tid 8407] [client 20.111.17.80:18384] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wziar1.php"] [unique_id "ae3YMdFa2S3EsATMdWMXOQAAAAo"]
[Sun Apr 26 17:17:37.999390 2026] [:error] [pid 8383:tid 8400] [client 20.111.17.80:18418] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-png.php"] [unique_id "ae3YMdFa2S3EsATMdWMXOwAAAAM"]
[Sun Apr 26 17:17:39.064764 2026] [:error] [pid 8383:tid 8410] [client 20.111.17.80:18309] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wziar1.php"] [unique_id "ae3YM9Fa2S3EsATMdWMXQgAAAA0"]
[Sun Apr 26 17:17:39.247501 2026] [:error] [pid 8383:tid 8416] [client 20.111.17.80:18328] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-png.php"] [unique_id "ae3YM9Fa2S3EsATMdWMXQwAAABM"]
[Sun Apr 26 17:17:39.732375 2026] [:error] [pid 8383:tid 8399] [client 20.111.17.80:18326] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wziar1.php"] [unique_id "ae3YM9Fa2S3EsATMdWMXRQAAAAI"]
[Sun Apr 26 17:17:40.607633 2026] [:error] [pid 8383:tid 8400] [client 20.111.17.80:18364] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tx79.php"] [unique_id "ae3YNNFa2S3EsATMdWMXSQAAAAM"]
[Sun Apr 26 17:17:40.632619 2026] [:error] [pid 8491:tid 8502] [client 20.111.17.80:18345] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wziar1.php"] [unique_id "ae3YNCq7I7e6CJooQM3sfwAAAMM"]
[Sun Apr 26 17:17:41.288460 2026] [:error] [pid 22573:tid 22608] [client 20.111.17.80:18311] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/public/oLEzRVqmJJPFSucdefault.php"] [unique_id "ae3YNXB3EmQlD4yKUt_OaQAAAYI"]
[Sun Apr 26 17:17:42.011952 2026] [:error] [pid 22572:tid 22596] [client 20.111.17.80:18375] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tx79.php"] [unique_id "ae3YNtXOViWCFU-pZzAAwwAAAVI"]
[Sun Apr 26 17:17:42.570388 2026] [:error] [pid 22572:tid 22579] [client 20.111.17.80:18396] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/public/oLEzRVqmJJPFSucdefault.php"] [unique_id "ae3YNtXOViWCFU-pZzAAxAAAAUE"]
[Sun Apr 26 17:17:42.810984 2026] [:error] [pid 13137:tid 13155] [client 20.111.17.80:18262] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tx79.php"] [unique_id "ae3YNt0RB4J0o4h5neFVqQAAAg4"]
[Sun Apr 26 17:17:43.290437 2026] [:error] [pid 22573:tid 22615] [client 20.111.17.80:18408] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/public/oLEzRVqmJJPFSucdefault.php"] [unique_id "ae3YN3B3EmQlD4yKUt_OawAAAYg"]
[Sun Apr 26 17:17:43.401066 2026] [:error] [pid 8385:tid 8432] [client 20.111.17.80:18242] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tx79.php"] [unique_id "ae3YNzOy7_J84Wx3-oy8bAAAAEg"]
[Sun Apr 26 17:17:44.096630 2026] [:error] [pid 8390:tid 8460] [client 20.111.17.80:18315] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/public/oLEzRVqmJJPFSucdefault.php"] [unique_id "ae3YOIGPtFK_i9p5yxQYQgAAAIk"]
[Sun Apr 26 17:17:44.321325 2026] [:error] [pid 22573:tid 22621] [client 20.111.17.80:18275] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/8.php"] [unique_id "ae3YOHB3EmQlD4yKUt_ObQAAAY4"]
[Sun Apr 26 17:17:45.058831 2026] [:error] [pid 22572:tid 22580] [client 20.111.17.80:18430] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/7logs.php"] [unique_id "ae3YOdXOViWCFU-pZzAAxQAAAUI"]
[Sun Apr 26 17:17:45.371596 2026] [:error] [pid 13137:tid 13140] [client 20.111.17.80:18421] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/8.php"] [unique_id "ae3YOd0RB4J0o4h5neFVrQAAAgA"]
[Sun Apr 26 17:17:45.860762 2026] [:error] [pid 13137:tid 13159] [client 20.111.17.80:18372] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/7logs.php"] [unique_id "ae3YOd0RB4J0o4h5neFVrgAAAhI"]
[Sun Apr 26 17:17:46.234860 2026] [:error] [pid 22572:tid 22584] [client 20.111.17.80:18333] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/8.php"] [unique_id "ae3YOtXOViWCFU-pZzAAxgAAAUY"]
[Sun Apr 26 17:17:47.064532 2026] [:error] [pid 16515:tid 16523] [client 20.111.17.80:18367] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/7logs.php"] [unique_id "ae3YO1tDrUmgHSvpuLwmkQAAAkU"]
[Sun Apr 26 17:17:47.843903 2026] [:error] [pid 8385:tid 8448] [client 20.111.17.80:18305] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/8.php"] [unique_id "ae3YOzOy7_J84Wx3-oy8cQAAAFg"]
[Sun Apr 26 17:17:47.951011 2026] [:error] [pid 22572:tid 22594] [client 20.111.17.80:18419] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/7logs.php"] [unique_id "ae3YO9XOViWCFU-pZzAAxwAAAVA"]
[Sun Apr 26 17:17:48.610192 2026] [:error] [pid 16574:tid 16639] [client 20.111.17.80:18304] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "ae3YPH5MsX8wRQr99nYm-gAAA1Y"]
[Sun Apr 26 17:17:50.601348 2026] [:error] [pid 22573:tid 22628] [client 20.111.17.80:18289] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "ae3YPnB3EmQlD4yKUt_OcAAAAZU"]
[Sun Apr 26 17:17:50.994097 2026] [:error] [pid 16574:tid 16643] [client 20.111.17.80:18413] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ae3YPn5MsX8wRQr99nYm_QAAA1g"]
[Sun Apr 26 17:17:52.003814 2026] [:error] [pid 8385:tid 8433] [client 20.111.17.80:18360] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "ae3YQDOy7_J84Wx3-oy8dgAAAEk"]
[Sun Apr 26 17:17:53.463770 2026] [:error] [pid 8491:tid 8524] [client 20.111.17.80:18256] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ae3YQSq7I7e6CJooQM3shAAAANg"]
[Sun Apr 26 17:17:53.950232 2026] [:error] [pid 22572:tid 22597] [client 20.111.17.80:18248] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "ae3YQdXOViWCFU-pZzAAzQAAAVM"]
[Sun Apr 26 17:17:55.612734 2026] [:error] [pid 22573:tid 22620] [client 20.111.17.80:18373] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/as.php"] [unique_id "ae3YQ3B3EmQlD4yKUt_OcQAAAY0"]
[Sun Apr 26 17:17:58.291611 2026] [:error] [pid 22572:tid 22583] [client 20.111.17.80:18407] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ae3YRtXOViWCFU-pZzAAzwAAAUU"]
[Sun Apr 26 17:17:59.113682 2026] [:error] [pid 8383:tid 8406] [client 20.111.17.80:18425] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/as.php"] [unique_id "ae3YR9Fa2S3EsATMdWMXTAAAAAk"]
[Sun Apr 26 17:18:05.398307 2026] [:error] [pid 8390:tid 8464] [client 20.111.17.80:18308] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ae3YTYGPtFK_i9p5yxQYTwAAAI0"]
[Sun Apr 26 17:18:08.369667 2026] [:error] [pid 8390:tid 8469] [client 20.111.17.80:18361] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/as.php"] [unique_id "ae3YUIGPtFK_i9p5yxQYUwAAAJI"]
[Sun Apr 26 17:18:09.469117 2026] [:error] [pid 8491:tid 8521] [client 20.111.17.80:18283] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bfil.php"] [unique_id "ae3YUSq7I7e6CJooQM3siAAAANY"]
[Sun Apr 26 17:18:13.500835 2026] [:error] [pid 13197:tid 13234] [client 20.111.17.80:18276] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bfil.php"] [unique_id "ae3YVd3kktFKdSxTrBvHQgAAAsM"]
[Sun Apr 26 17:18:13.934162 2026] [:error] [pid 8385:tid 8446] [client 20.111.17.80:18351] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ctex1.php"] [unique_id "ae3YVTOy7_J84Wx3-oy8gQAAAFY"]
[Sun Apr 26 17:18:20.463994 2026] [:error] [pid 22573:tid 22625] [client 20.111.17.80:18358] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bfil.php"] [unique_id "ae3YXHB3EmQlD4yKUt_OdwAAAZI"]
[Sun Apr 26 17:18:20.881827 2026] [:error] [pid 22573:tid 22621] [client 20.111.17.80:18385] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ctex1.php"] [unique_id "ae3YXHB3EmQlD4yKUt_OeAAAAY4"]
[Sun Apr 26 17:18:22.672630 2026] [:error] [pid 22573:tid 22617] [client 20.111.17.80:18259] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/abrand.php"] [unique_id "ae3YXnB3EmQlD4yKUt_OfgAAAYo"]
[Sun Apr 26 17:18:25.594428 2026] [:error] [pid 8491:tid 8501] [client 20.111.17.80:18258] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ctex1.php"] [unique_id "ae3YYSq7I7e6CJooQM3sjQAAAMI"]
[Sun Apr 26 17:18:27.297759 2026] [proxy_fcgi:error] [pid 13137:tid 13164] [client 20.111.17.80:18244] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 17:18:27.536298 2026] [proxy_fcgi:error] [pid 13137:tid 13143] [client 20.111.17.80:18244] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 17:18:27.774286 2026] [proxy_fcgi:error] [pid 13137:tid 13160] [client 20.111.17.80:18244] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 17:18:27.852416 2026] [proxy_fcgi:error] [pid 22573:tid 22607] [client 20.111.17.80:18330] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 17:18:28.012365 2026] [proxy_fcgi:error] [pid 13137:tid 13151] [client 20.111.17.80:18244] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 17:18:28.125823 2026] [proxy_fcgi:error] [pid 22573:tid 22627] [client 20.111.17.80:18330] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 17:18:28.250188 2026] [proxy_fcgi:error] [pid 13137:tid 13153] [client 20.111.17.80:18244] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 17:18:28.409500 2026] [proxy_fcgi:error] [pid 22573:tid 22613] [client 20.111.17.80:18330] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 17:18:28.488493 2026] [proxy_fcgi:error] [pid 13137:tid 13163] [client 20.111.17.80:18244] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 17:18:28.689865 2026] [proxy_fcgi:error] [pid 22573:tid 22623] [client 20.111.17.80:18330] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 17:18:28.867012 2026] [proxy_fcgi:error] [pid 13137:tid 13141] [client 20.111.17.80:18244] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 17:18:28.961516 2026] [:error] [pid 22573:tid 22620] [client 20.111.17.80:18330] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wmore1.php"] [unique_id "ae3YZHB3EmQlD4yKUt_OiAAAAY0"]
[Sun Apr 26 17:18:29.111843 2026] [:error] [pid 13137:tid 13149] [client 20.111.17.80:18244] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-png.php"] [unique_id "ae3YZd0RB4J0o4h5neFVxQAAAgk"]
[Sun Apr 26 17:18:29.705117 2026] [:error] [pid 8385:tid 8434] [client 20.111.17.80:18354] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-png.php"] [unique_id "ae3YZTOy7_J84Wx3-oy8hQAAAEo"]
[Sun Apr 26 17:18:30.372842 2026] [:error] [pid 8390:tid 8471] [client 20.111.17.80:18273] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-png.php"] [unique_id "ae3YZoGPtFK_i9p5yxQYXAAAAJQ"]
[Sun Apr 26 17:18:30.970566 2026] [:error] [pid 16515:tid 16523] [client 20.111.17.80:18246] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-png.php"] [unique_id "ae3YZltDrUmgHSvpuLwmmgAAAkU"]
[Sun Apr 26 17:18:31.897374 2026] [:error] [pid 13137:tid 13159] [client 20.111.17.80:18201] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tx79.php"] [unique_id "ae3YZ90RB4J0o4h5neFVxwAAAhI"]
[Sun Apr 26 17:18:32.497096 2026] [:error] [pid 8385:tid 8447] [client 20.111.17.80:18264] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wmore1.php"] [unique_id "ae3YaDOy7_J84Wx3-oy8iAAAAFc"]
[Sun Apr 26 17:18:32.697691 2026] [:error] [pid 22573:tid 22621] [client 20.111.17.80:18334] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tx79.php"] [unique_id "ae3YaHB3EmQlD4yKUt_OjAAAAY4"]
[Sun Apr 26 17:18:33.584555 2026] [:error] [pid 13137:tid 13160] [client 20.111.17.80:18282] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tx79.php"] [unique_id "ae3Yad0RB4J0o4h5neFVywAAAhM"]
[Sun Apr 26 17:18:33.799722 2026] [:error] [pid 13137:tid 13153] [client 20.111.17.80:18335] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wmore1.php"] [unique_id "ae3Yad0RB4J0o4h5neFVzAAAAgw"]
[Sun Apr 26 17:18:34.604080 2026] [:error] [pid 8383:tid 8411] [client 20.111.17.80:18348] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tx79.php"] [unique_id "ae3YatFa2S3EsATMdWMXawAAAA4"]
[Sun Apr 26 17:18:35.236369 2026] [:error] [pid 13137:tid 13145] [client 20.111.17.80:18252] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wmore1.php"] [unique_id "ae3Ya90RB4J0o4h5neFV0QAAAgU"]
[Sun Apr 26 17:18:36.141547 2026] [:error] [pid 8491:tid 8502] [client 20.111.17.80:18192] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/userfuns.php"] [unique_id "ae3YbCq7I7e6CJooQM3skAAAAMM"]
[Sun Apr 26 17:18:36.168178 2026] [:error] [pid 22572:tid 22602] [client 20.111.17.80:18344] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/8.php"] [unique_id "ae3YbNXOViWCFU-pZzAA2wAAAVg"]
[Sun Apr 26 17:18:36.938667 2026] [:error] [pid 13197:tid 13233] [client 20.111.17.80:18427] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/userfuns.php"] [unique_id "ae3YbN3kktFKdSxTrBvHTQAAAsI"]
[Sun Apr 26 17:18:37.166658 2026] [:error] [pid 22572:tid 22600] [client 20.111.17.80:18342] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/8.php"] [unique_id "ae3YbdXOViWCFU-pZzAA3QAAAVY"]
[Sun Apr 26 17:18:38.183489 2026] [:error] [pid 16574:tid 16621] [client 20.111.17.80:18255] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/userfuns.php"] [unique_id "ae3Ybn5MsX8wRQr99nYnBwAAA00"]
[Sun Apr 26 17:18:38.379513 2026] [:error] [pid 16574:tid 16610] [client 20.111.17.80:18296] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/8.php"] [unique_id "ae3Ybn5MsX8wRQr99nYnCAAAA0Y"]
[Sun Apr 26 17:18:39.476138 2026] [:error] [pid 13137:tid 13158] [client 20.111.17.80:18203] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/userfuns.php"] [unique_id "ae3Yb90RB4J0o4h5neFV1AAAAhE"]
[Sun Apr 26 17:18:39.709868 2026] [:error] [pid 8383:tid 8406] [client 20.111.17.80:18290] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/8.php"] [unique_id "ae3Yb9Fa2S3EsATMdWMXbwAAAAk"]
[Sun Apr 26 17:18:40.439376 2026] [:error] [pid 8383:tid 8418] [client 20.111.17.80:18292] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/menu.php"] [unique_id "ae3YcNFa2S3EsATMdWMXcwAAABU"]
[Sun Apr 26 17:18:41.094177 2026] [:error] [pid 16574:tid 16631] [client 20.111.17.80:18263] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ae3YcX5MsX8wRQr99nYnCgAAA1I"]
[Sun Apr 26 17:18:41.136064 2026] [:error] [pid 8383:tid 8416] [client 20.111.17.80:18196] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/menu.php"] [unique_id "ae3YcdFa2S3EsATMdWMXdQAAABM"]
[Sun Apr 26 17:18:42.610756 2026] [:error] [pid 13197:tid 13251] [client 20.111.17.80:18349] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ae3Yct3kktFKdSxTrBvHUAAAAtM"]
[Sun Apr 26 17:18:42.885208 2026] [:error] [pid 8383:tid 8411] [client 20.111.17.80:18240] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/menu.php"] [unique_id "ae3YctFa2S3EsATMdWMXdwAAAA4"]
[Sun Apr 26 17:18:43.870957 2026] [:error] [pid 16574:tid 16635] [client 20.111.17.80:18243] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ae3Yc35MsX8wRQr99nYnCwAAA1Q"]
[Sun Apr 26 17:18:44.216586 2026] [:error] [pid 22572:tid 22585] [client 20.111.17.80:18245] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/menu.php"] [unique_id "ae3YdNXOViWCFU-pZzAA5AAAAUc"]
[Sun Apr 26 17:18:45.044517 2026] [:error] [pid 8390:tid 8472] [client 20.111.17.80:18286] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-good.php"] [unique_id "ae3YdYGPtFK_i9p5yxQYXgAAAJU"]
[Sun Apr 26 17:18:45.385237 2026] [:error] [pid 8383:tid 8409] [client 20.111.17.80:18222] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ae3YddFa2S3EsATMdWMXegAAAAw"]
[Sun Apr 26 17:18:46.482306 2026] [:error] [pid 8383:tid 8408] [client 20.111.17.80:18357] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-good.php"] [unique_id "ae3YdtFa2S3EsATMdWMXfAAAAAs"]
[Sun Apr 26 17:18:46.725789 2026] [:error] [pid 8383:tid 8413] [client 20.111.17.80:18268] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bfil.php"] [unique_id "ae3YdtFa2S3EsATMdWMXfQAAABA"]
[Sun Apr 26 17:18:47.294127 2026] [:error] [pid 16515:tid 16533] [client 20.111.17.80:18281] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-good.php"] [unique_id "ae3Yd1tDrUmgHSvpuLwmoAAAAk8"]
[Sun Apr 26 17:18:47.924873 2026] [:error] [pid 13137:tid 13145] [client 20.111.17.80:18261] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bfil.php"] [unique_id "ae3Yd90RB4J0o4h5neFV1gAAAgU"]
[Sun Apr 26 17:18:48.157752 2026] [:error] [pid 22572:tid 22596] [client 20.111.17.80:18363] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-good.php"] [unique_id "ae3YeNXOViWCFU-pZzAA5gAAAVI"]
[Sun Apr 26 17:18:48.710083 2026] [:error] [pid 8491:tid 8510] [client 20.111.17.80:18223] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bfil.php"] [unique_id "ae3YeCq7I7e6CJooQM3slgAAAMs"]
[Sun Apr 26 17:18:49.406599 2026] [:error] [pid 22572:tid 22580] [client 20.111.17.80:18227] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bfil.php"] [unique_id "ae3YedXOViWCFU-pZzAA6AAAAUI"]
[Sun Apr 26 17:18:49.520572 2026] [:error] [pid 22572:tid 22579] [client 20.111.17.80:18194] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/saorix1.php"] [unique_id "ae3YedXOViWCFU-pZzAA6gAAAUE"]
[Sun Apr 26 17:18:50.340488 2026] [:error] [pid 8383:tid 8420] [client 20.111.17.80:18279] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/abrand.php"] [unique_id "ae3YetFa2S3EsATMdWMXgAAAABc"]
[Sun Apr 26 17:18:50.862710 2026] [:error] [pid 8385:tid 8433] [client 20.111.17.80:18271] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/saorix1.php"] [unique_id "ae3YejOy7_J84Wx3-oy8jAAAAEk"]
[Sun Apr 26 17:18:52.103641 2026] [:error] [pid 22573:tid 22610] [client 20.111.17.80:18414] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/saorix1.php"] [unique_id "ae3YfHB3EmQlD4yKUt_OkQAAAYQ"]
[Sun Apr 26 17:18:52.774316 2026] [:error] [pid 8383:tid 8399] [client 20.111.17.80:18365] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/abrand.php"] [unique_id "ae3YfNFa2S3EsATMdWMXhgAAAAI"]
[Sun Apr 26 17:18:53.159403 2026] [:error] [pid 8491:tid 8502] [client 20.111.17.80:18253] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/saorix1.php"] [unique_id "ae3YfSq7I7e6CJooQM3smgAAAMM"]
[Sun Apr 26 17:18:54.131986 2026] [:error] [pid 8383:tid 8406] [client 20.111.17.80:18191] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/byypas.php"] [unique_id "ae3YftFa2S3EsATMdWMXiAAAAAk"]
[Sun Apr 26 17:18:54.316420 2026] [:error] [pid 13197:tid 13256] [client 20.111.17.80:18350] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/abrand.php"] [unique_id "ae3Yft3kktFKdSxTrBvHVgAAAtg"]
[Sun Apr 26 17:18:55.275466 2026] [:error] [pid 8383:tid 8421] [client 20.111.17.80:18267] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/abrand.php"] [unique_id "ae3Yf9Fa2S3EsATMdWMXiwAAABg"]
[Sun Apr 26 17:18:55.291926 2026] [:error] [pid 8383:tid 8410] [client 20.111.17.80:18278] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/byypas.php"] [unique_id "ae3Yf9Fa2S3EsATMdWMXjAAAAA0"]
[Sun Apr 26 17:18:56.158455 2026] [:error] [pid 8383:tid 8420] [client 20.111.17.80:18265] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/byypas.php"] [unique_id "ae3YgNFa2S3EsATMdWMXjwAAABc"]
[Sun Apr 26 17:18:56.167493 2026] [:error] [pid 8383:tid 8401] [client 20.111.17.80:18353] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/amax.php"] [unique_id "ae3YgNFa2S3EsATMdWMXkAAAAAQ"]
[Sun Apr 26 17:18:56.859148 2026] [:error] [pid 8491:tid 8507] [client 20.111.17.80:18352] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/byypas.php"] [unique_id "ae3YgCq7I7e6CJooQM3sngAAAMg"]
[Sun Apr 26 17:18:57.299277 2026] [:error] [pid 8383:tid 8400] [client 20.111.17.80:18204] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/amax.php"] [unique_id "ae3YgdFa2S3EsATMdWMXkwAAAAM"]
[Sun Apr 26 17:18:57.803705 2026] [:error] [pid 13197:tid 13248] [client 20.111.17.80:18221] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rip.php"] [unique_id "ae3Ygd3kktFKdSxTrBvHVwAAAtA"]
[Sun Apr 26 17:18:58.435648 2026] [:error] [pid 8383:tid 8408] [client 20.111.17.80:18184] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/amax.php"] [unique_id "ae3YgtFa2S3EsATMdWMXlgAAAAs"]
[Sun Apr 26 17:18:58.993907 2026] [:error] [pid 8491:tid 8509] [client 20.111.17.80:18216] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rip.php"] [unique_id "ae3Ygiq7I7e6CJooQM3snwAAAMo"]
[Sun Apr 26 17:18:59.365315 2026] [:error] [pid 8383:tid 8398] [client 20.111.17.80:18346] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/amax.php"] [unique_id "ae3Yg9Fa2S3EsATMdWMXmQAAAAE"]
[Sun Apr 26 17:18:59.705201 2026] [:error] [pid 16574:tid 16605] [client 20.111.17.80:18137] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rip.php"] [unique_id "ae3Yg35MsX8wRQr99nYnDwAAA0E"]
[Sun Apr 26 17:19:00.119994 2026] [:error] [pid 22572:tid 22591] [client 20.111.17.80:18179] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/classwithtostring.php"] [unique_id "ae3YhNXOViWCFU-pZzAA7wAAAU0"]
[Sun Apr 26 17:19:00.662252 2026] [:error] [pid 16574:tid 16637] [client 20.111.17.80:18347] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/classwithtostring.php"] [unique_id "ae3YhH5MsX8wRQr99nYnEAAAA1U"]
[Sun Apr 26 17:19:00.964218 2026] [:error] [pid 8491:tid 8510] [client 20.111.17.80:18213] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rip.php"] [unique_id "ae3YhCq7I7e6CJooQM3soAAAAMs"]
[Sun Apr 26 17:19:01.343287 2026] [:error] [pid 22573:tid 22623] [client 20.111.17.80:18331] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/classwithtostring.php"] [unique_id "ae3YhXB3EmQlD4yKUt_OmAAAAZA"]
[Sun Apr 26 17:19:01.646104 2026] [:error] [pid 22573:tid 22620] [client 20.111.17.80:18181] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gptsh.php"] [unique_id "ae3YhXB3EmQlD4yKUt_OmwAAAY0"]
[Sun Apr 26 17:19:02.162669 2026] [:error] [pid 13137:tid 13165] [client 20.111.17.80:18210] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/classwithtostring.php"] [unique_id "ae3Yht0RB4J0o4h5neFV2QAAAhg"]
[Sun Apr 26 17:19:02.573305 2026] [:error] [pid 22572:tid 22578] [client 20.111.17.80:18287] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gptsh.php"] [unique_id "ae3YhtXOViWCFU-pZzAA8QAAAUA"]
[Sun Apr 26 17:19:03.175486 2026] [:error] [pid 22572:tid 22602] [client 20.111.17.80:18269] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/amwxl.php"] [unique_id "ae3Yh9XOViWCFU-pZzAA8gAAAVg"]
[Sun Apr 26 17:19:03.816711 2026] [:error] [pid 22572:tid 22596] [client 20.111.17.80:18247] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gptsh.php"] [unique_id "ae3Yh9XOViWCFU-pZzAA9AAAAVI"]
[Sun Apr 26 17:19:04.283437 2026] [:error] [pid 22572:tid 22595] [client 20.111.17.80:18327] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/amwxl.php"] [unique_id "ae3YiNXOViWCFU-pZzAA9gAAAVE"]
[Sun Apr 26 17:19:05.042352 2026] [:error] [pid 13197:tid 13231] [client 20.111.17.80:18295] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/amwxl.php"] [unique_id "ae3Yid3kktFKdSxTrBvHWgAAAsA"]
[Sun Apr 26 17:19:05.303179 2026] [:error] [pid 16574:tid 16621] [client 20.111.17.80:18270] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gptsh.php"] [unique_id "ae3YiX5MsX8wRQr99nYnFAAAA00"]
[Sun Apr 26 17:19:05.802515 2026] [:error] [pid 8383:tid 8415] [client 20.111.17.80:18189] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/amwxl.php"] [unique_id "ae3YidFa2S3EsATMdWMXnAAAABI"]
[Sun Apr 26 17:19:05.964180 2026] [:error] [pid 22573:tid 22629] [client 20.111.17.80:18291] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/0x.php"] [unique_id "ae3YiXB3EmQlD4yKUt_OnQAAAZY"]
[Sun Apr 26 17:19:06.674661 2026] [:error] [pid 22572:tid 22591] [client 20.111.17.80:18277] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wmore1.php"] [unique_id "ae3YitXOViWCFU-pZzAA_gAAAU0"]
[Sun Apr 26 17:19:06.773082 2026] [:error] [pid 22572:tid 22597] [client 20.111.17.80:18190] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/0x.php"] [unique_id "ae3YitXOViWCFU-pZzAA_wAAAVM"]
[Sun Apr 26 17:19:07.347861 2026] [:error] [pid 22572:tid 22578] [client 20.111.17.80:18249] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wmore1.php"] [unique_id "ae3Yi9XOViWCFU-pZzABAAAAAUA"]
[Sun Apr 26 17:19:07.824347 2026] [:error] [pid 8383:tid 8419] [client 20.111.17.80:18260] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/0x.php"] [unique_id "ae3Yi9Fa2S3EsATMdWMXoAAAABY"]
[Sun Apr 26 17:19:08.206094 2026] [:error] [pid 22572:tid 22590] [client 20.111.17.80:18212] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wmore1.php"] [unique_id "ae3YjNXOViWCFU-pZzABBAAAAUw"]
[Sun Apr 26 17:19:08.821244 2026] [:error] [pid 13137:tid 13140] [client 20.111.17.80:18302] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/0x.php"] [unique_id "ae3YjN0RB4J0o4h5neFV2wAAAgA"]
[Sun Apr 26 17:19:09.551812 2026] [:error] [pid 8383:tid 8411] [client 20.111.17.80:18294] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bgymj.php"] [unique_id "ae3YjdFa2S3EsATMdWMXowAAAA4"]
[Sun Apr 26 17:19:09.848313 2026] [:error] [pid 22572:tid 22586] [client 20.111.17.80:18226] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wmore1.php"] [unique_id "ae3YjdXOViWCFU-pZzABBwAAAUg"]
[Sun Apr 26 17:19:10.255933 2026] [:error] [pid 8383:tid 8409] [client 20.111.17.80:18228] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bgymj.php"] [unique_id "ae3YjtFa2S3EsATMdWMXpgAAAAw"]
[Sun Apr 26 17:19:11.049536 2026] [:error] [pid 8383:tid 8408] [client 20.111.17.80:18202] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bgymj.php"] [unique_id "ae3Yj9Fa2S3EsATMdWMXqQAAAAs"]
[Sun Apr 26 17:19:11.102762 2026] [:error] [pid 22572:tid 22592] [client 20.111.17.80:18293] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/userfuns.php"] [unique_id "ae3Yj9XOViWCFU-pZzABCQAAAU4"]
[Sun Apr 26 17:19:11.770170 2026] [:error] [pid 8383:tid 8421] [client 20.111.17.80:18208] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bgymj.php"] [unique_id "ae3Yj9Fa2S3EsATMdWMXrAAAABg"]
[Sun Apr 26 17:19:12.245871 2026] [:error] [pid 13137:tid 13151] [client 20.111.17.80:18300] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/userfuns.php"] [unique_id "ae3YkN0RB4J0o4h5neFV3QAAAgo"]
[Sun Apr 26 17:19:12.646273 2026] [:error] [pid 8491:tid 8501] [client 20.111.17.80:18140] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/100.php"] [unique_id "ae3YkCq7I7e6CJooQM3sogAAAMI"]
[Sun Apr 26 17:19:13.087429 2026] [:error] [pid 13137:tid 13152] [client 20.111.17.80:18272] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/userfuns.php"] [unique_id "ae3Ykd0RB4J0o4h5neFV4AAAAgs"]
[Sun Apr 26 17:19:13.285336 2026] [:error] [pid 16574:tid 16614] [client 20.111.17.80:18119] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/100.php"] [unique_id "ae3YkX5MsX8wRQr99nYnFQAAA0o"]
[Sun Apr 26 17:19:13.796024 2026] [:error] [pid 16574:tid 16629] [client 20.111.17.80:18187] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/userfuns.php"] [unique_id "ae3YkX5MsX8wRQr99nYnFgAAA1E"]
[Sun Apr 26 17:19:14.472315 2026] [:error] [pid 13137:tid 13146] [client 20.111.17.80:18206] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/100.php"] [unique_id "ae3Ykt0RB4J0o4h5neFV4QAAAgY"]
[Sun Apr 26 17:19:14.558527 2026] [:error] [pid 13137:tid 13163] [client 20.111.17.80:18205] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/menu.php"] [unique_id "ae3Ykt0RB4J0o4h5neFV4gAAAhY"]
[Sun Apr 26 17:19:15.190308 2026] [:error] [pid 16574:tid 16606] [client 20.111.17.80:18183] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/100.php"] [unique_id "ae3Yk35MsX8wRQr99nYnFwAAA0I"]
[Sun Apr 26 17:19:15.196116 2026] [:error] [pid 13137:tid 13142] [client 20.111.17.80:18199] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/menu.php"] [unique_id "ae3Yk90RB4J0o4h5neFV4wAAAgI"]
[Sun Apr 26 17:19:16.083595 2026] [:error] [pid 22572:tid 22600] [client 20.111.17.80:18185] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/menu.php"] [unique_id "ae3YlNXOViWCFU-pZzABDAAAAVY"]
[Sun Apr 26 17:19:16.220711 2026] [:error] [pid 8491:tid 8516] [client 20.111.17.80:18120] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bolt.php"] [unique_id "ae3YlCq7I7e6CJooQM3sowAAANE"]
[Sun Apr 26 17:19:16.909502 2026] [:error] [pid 22572:tid 22583] [client 20.111.17.80:18325] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/menu.php"] [unique_id "ae3YlNXOViWCFU-pZzABDgAAAUU"]
[Sun Apr 26 17:19:17.209938 2026] [:error] [pid 13137:tid 13144] [client 20.111.17.80:18177] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bolt.php"] [unique_id "ae3Yld0RB4J0o4h5neFV5AAAAgQ"]
[Sun Apr 26 17:19:17.753189 2026] [:error] [pid 22572:tid 22595] [client 20.111.17.80:18299] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-good.php"] [unique_id "ae3YldXOViWCFU-pZzABEQAAAVE"]
[Sun Apr 26 17:19:18.024706 2026] [:error] [pid 8383:tid 8406] [client 20.111.17.80:18209] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bolt.php"] [unique_id "ae3YltFa2S3EsATMdWMXrwAAAAk"]
[Sun Apr 26 17:19:18.768008 2026] [:error] [pid 8383:tid 8398] [client 20.111.17.80:18178] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-good.php"] [unique_id "ae3YltFa2S3EsATMdWMXsgAAAAE"]
[Sun Apr 26 17:19:19.289172 2026] [:error] [pid 8383:tid 8420] [client 20.111.17.80:18163] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bolt.php"] [unique_id "ae3Yl9Fa2S3EsATMdWMXtAAAABc"]
[Sun Apr 26 17:19:20.539570 2026] [:error] [pid 16574:tid 16623] [client 20.111.17.80:18238] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-good.php"] [unique_id "ae3YmH5MsX8wRQr99nYnHgAAA04"]
[Sun Apr 26 17:19:21.571824 2026] [:error] [pid 8383:tid 8399] [client 20.111.17.80:18225] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/koiy.php"] [unique_id "ae3YmdFa2S3EsATMdWMXuQAAAAI"]
[Sun Apr 26 17:19:21.976364 2026] [:error] [pid 8385:tid 8424] [client 20.111.17.80:18237] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-good.php"] [unique_id "ae3YmTOy7_J84Wx3-oy8kQAAAEA"]
[Sun Apr 26 17:19:23.184725 2026] [:error] [pid 13137:tid 13165] [client 20.111.17.80:18193] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/saorix1.php"] [unique_id "ae3Ym90RB4J0o4h5neFV5gAAAhg"]
[Sun Apr 26 17:19:23.669552 2026] [:error] [pid 22572:tid 22600] [client 20.111.17.80:18188] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/koiy.php"] [unique_id "ae3Ym9XOViWCFU-pZzABFwAAAVY"]
[Sun Apr 26 17:19:25.358180 2026] [:error] [pid 8491:tid 8520] [client 20.111.17.80:18218] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/saorix1.php"] [unique_id "ae3YnSq7I7e6CJooQM3spQAAANU"]
[Sun Apr 26 17:19:27.196532 2026] [:error] [pid 8383:tid 8402] [client 20.111.17.80:18113] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/koiy.php"] [unique_id "ae3Yn9Fa2S3EsATMdWMXxAAAAAU"]
[Sun Apr 26 17:19:29.675491 2026] [proxy_fcgi:error] [pid 16515:tid 16541] [client 20.111.17.80:18214] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 17:19:30.705914 2026] [proxy_fcgi:error] [pid 16515:tid 16542] [client 20.111.17.80:18214] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 17:19:30.911801 2026] [proxy_fcgi:error] [pid 16574:tid 16614] [client 20.111.17.80:18207] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 17:19:30.968342 2026] [proxy_fcgi:error] [pid 16515:tid 16538] [client 20.111.17.80:18214] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 17:19:31.464797 2026] [proxy_fcgi:error] [pid 16515:tid 16531] [client 20.111.17.80:18214] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 17:19:31.703988 2026] [proxy_fcgi:error] [pid 16515:tid 16537] [client 20.111.17.80:18214] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 17:19:31.943418 2026] [proxy_fcgi:error] [pid 16515:tid 16540] [client 20.111.17.80:18214] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 17:19:32.182269 2026] [proxy_fcgi:error] [pid 16515:tid 16534] [client 20.111.17.80:18214] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 17:19:32.379921 2026] [proxy_fcgi:error] [pid 16574:tid 16607] [client 20.111.17.80:18207] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 17:19:32.423579 2026] [proxy_fcgi:error] [pid 16515:tid 16522] [client 20.111.17.80:18214] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 17:19:32.649853 2026] [:error] [pid 16574:tid 16639] [client 20.111.17.80:18207] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rip.php"] [unique_id "ae3YpH5MsX8wRQr99nYnIwAAA1Y"]
[Sun Apr 26 17:19:32.658052 2026] [:error] [pid 16515:tid 16536] [client 20.111.17.80:18214] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file61.php"] [unique_id "ae3YpFtDrUmgHSvpuLwmtAAAAlI"]
[Sun Apr 26 17:19:33.921800 2026] [:error] [pid 16515:tid 16524] [client 20.111.17.80:18368] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rip.php"] [unique_id "ae3YpVtDrUmgHSvpuLwmtgAAAkY"]
[Sun Apr 26 17:19:34.714384 2026] [:error] [pid 13137:tid 13162] [client 20.111.17.80:18118] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file61.php"] [unique_id "ae3Ypt0RB4J0o4h5neFV8wAAAhU"]
[Sun Apr 26 17:19:35.569357 2026] [:error] [pid 22572:tid 22583] [client 20.111.17.80:18154] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rip.php"] [unique_id "ae3Yp9XOViWCFU-pZzABIQAAAUU"]
[Sun Apr 26 17:19:36.307376 2026] [:error] [pid 16574:tid 16643] [client 20.111.17.80:18274] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file61.php"] [unique_id "ae3YqH5MsX8wRQr99nYnJAAAA1g"]
[Sun Apr 26 17:19:37.428023 2026] [:error] [pid 22572:tid 22597] [client 20.111.17.80:18200] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rip.php"] [unique_id "ae3YqdXOViWCFU-pZzABKAAAAVM"]
[Sun Apr 26 17:19:37.590997 2026] [:error] [pid 22572:tid 22582] [client 20.111.17.80:18197] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file61.php"] [unique_id "ae3YqdXOViWCFU-pZzABKgAAAUQ"]
[Sun Apr 26 17:19:38.129160 2026] [:error] [pid 16574:tid 16613] [client 20.111.17.80:18114] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gptsh.php"] [unique_id "ae3Yqn5MsX8wRQr99nYnJQAAA0k"]
[Sun Apr 26 17:19:38.853418 2026] [:error] [pid 13137:tid 13151] [client 20.111.17.80:18132] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Cap.php"] [unique_id "ae3Yqt0RB4J0o4h5neFV9AAAAgo"]
[Sun Apr 26 17:19:39.185478 2026] [:error] [pid 22572:tid 22587] [client 20.111.17.80:18127] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gptsh.php"] [unique_id "ae3Yq9XOViWCFU-pZzABLQAAAUk"]
[Sun Apr 26 17:19:39.958318 2026] [:error] [pid 8385:tid 8429] [client 20.111.17.80:18133] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gptsh.php"] [unique_id "ae3YqzOy7_J84Wx3-oy8lgAAAEU"]
[Sun Apr 26 17:19:40.301933 2026] [:error] [pid 8383:tid 8409] [client 20.111.17.80:18356] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Cap.php"] [unique_id "ae3YrNFa2S3EsATMdWMXxwAAAAw"]
[Sun Apr 26 17:19:40.797961 2026] [:error] [pid 22573:tid 22630] [client 20.111.17.80:18072] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gptsh.php"] [unique_id "ae3YrHB3EmQlD4yKUt_OsAAAAZc"]
[Sun Apr 26 17:19:41.417289 2026] [:error] [pid 22573:tid 22608] [client 20.111.17.80:18219] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/0x.php"] [unique_id "ae3YrXB3EmQlD4yKUt_OswAAAYI"]
[Sun Apr 26 17:19:41.532991 2026] [:error] [pid 8390:tid 8467] [client 20.111.17.80:18149] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Cap.php"] [unique_id "ae3YrYGPtFK_i9p5yxQYbwAAAJA"]
[Sun Apr 26 17:19:41.975571 2026] [:error] [pid 8390:tid 8472] [client 20.111.17.80:18288] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/0x.php"] [unique_id "ae3YrYGPtFK_i9p5yxQYcAAAAJU"]
[Sun Apr 26 17:19:42.389822 2026] [:error] [pid 8390:tid 8451] [client 20.111.17.80:18224] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Cap.php"] [unique_id "ae3YroGPtFK_i9p5yxQYcgAAAIA"]
[Sun Apr 26 17:19:42.689755 2026] [:error] [pid 16574:tid 16637] [client 20.111.17.80:18134] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/0x.php"] [unique_id "ae3Yrn5MsX8wRQr99nYnJwAAA1U"]
[Sun Apr 26 17:19:43.411052 2026] [:error] [pid 8383:tid 8419] [client 20.111.17.80:18233] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/0x.php"] [unique_id "ae3Yr9Fa2S3EsATMdWMXzAAAABY"]
[Sun Apr 26 17:19:43.923944 2026] [:error] [pid 8390:tid 8474] [client 20.111.17.80:18150] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tfm.php"] [unique_id "ae3Yr4GPtFK_i9p5yxQYdQAAAJc"]
[Sun Apr 26 17:19:44.022030 2026] [:error] [pid 8491:tid 8518] [client 20.111.17.80:18145] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bgymj.php"] [unique_id "ae3YsCq7I7e6CJooQM3sqQAAANM"]
[Sun Apr 26 17:19:44.721577 2026] [:error] [pid 8491:tid 8511] [client 20.111.17.80:18051] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bgymj.php"] [unique_id "ae3YsCq7I7e6CJooQM3sqgAAAMw"]
[Sun Apr 26 17:19:45.407509 2026] [:error] [pid 8390:tid 8470] [client 20.111.17.80:18186] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bgymj.php"] [unique_id "ae3YsYGPtFK_i9p5yxQYeAAAAJM"]
[Sun Apr 26 17:19:46.517204 2026] [:error] [pid 8491:tid 8524] [client 20.111.17.80:18152] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tfm.php"] [unique_id "ae3Ysiq7I7e6CJooQM3srQAAANg"]
[Sun Apr 26 17:19:46.559390 2026] [:error] [pid 8390:tid 8461] [client 20.111.17.80:18067] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bgymj.php"] [unique_id "ae3YsoGPtFK_i9p5yxQYegAAAIo"]
[Sun Apr 26 17:19:47.368325 2026] [:error] [pid 8491:tid 8504] [client 20.111.17.80:18182] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/100.php"] [unique_id "ae3Ysyq7I7e6CJooQM3ssgAAAMU"]
[Sun Apr 26 17:19:47.420790 2026] [:error] [pid 8491:tid 8499] [client 20.111.17.80:18198] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tfm.php"] [unique_id "ae3Ysyq7I7e6CJooQM3sswAAAMA"]
[Sun Apr 26 17:19:47.921622 2026] [:error] [pid 8491:tid 8500] [client 20.111.17.80:18122] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/100.php"] [unique_id "ae3Ysyq7I7e6CJooQM3stgAAAME"]
[Sun Apr 26 17:19:48.325792 2026] [:error] [pid 22572:tid 22581] [client 20.111.17.80:18116] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tfm.php"] [unique_id "ae3YtNXOViWCFU-pZzABMQAAAUM"]
[Sun Apr 26 17:19:48.434071 2026] [:error] [pid 16574:tid 16610] [client 20.111.17.80:18211] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/100.php"] [unique_id "ae3YtH5MsX8wRQr99nYnKQAAA0Y"]
[Sun Apr 26 17:19:49.042875 2026] [:error] [pid 8390:tid 8455] [client 20.111.17.80:18142] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/100.php"] [unique_id "ae3YtYGPtFK_i9p5yxQYewAAAIQ"]
[Sun Apr 26 17:19:49.085379 2026] [:error] [pid 8390:tid 8454] [client 20.111.17.80:18301] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xper1.php"] [unique_id "ae3YtYGPtFK_i9p5yxQYfAAAAIM"]
[Sun Apr 26 17:19:49.582832 2026] [:error] [pid 8390:tid 8474] [client 20.111.17.80:18231] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bolt.php"] [unique_id "ae3YtYGPtFK_i9p5yxQYfQAAAJc"]
[Sun Apr 26 17:19:49.977818 2026] [:error] [pid 8390:tid 8470] [client 20.111.17.80:18235] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xper1.php"] [unique_id "ae3YtYGPtFK_i9p5yxQYfwAAAJM"]
[Sun Apr 26 17:19:50.226132 2026] [:error] [pid 8390:tid 8465] [client 20.111.17.80:18135] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bolt.php"] [unique_id "ae3YtoGPtFK_i9p5yxQYgwAAAI4"]
[Sun Apr 26 17:19:50.817615 2026] [:error] [pid 8390:tid 8453] [client 20.111.17.80:18125] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bolt.php"] [unique_id "ae3YtoGPtFK_i9p5yxQYiQAAAII"]
[Sun Apr 26 17:19:50.904813 2026] [:error] [pid 8383:tid 8412] [client 20.111.17.80:18156] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xper1.php"] [unique_id "ae3YttFa2S3EsATMdWMXzwAAAA8"]
[Sun Apr 26 17:19:51.351210 2026] [:error] [pid 8390:tid 8452] [client 20.111.17.80:18123] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bolt.php"] [unique_id "ae3Yt4GPtFK_i9p5yxQYigAAAIE"]
[Sun Apr 26 17:19:51.537715 2026] [:error] [pid 22572:tid 22599] [client 20.111.17.80:18147] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xper1.php"] [unique_id "ae3Yt9XOViWCFU-pZzABMgAAAVU"]
[Sun Apr 26 17:19:51.910534 2026] [:error] [pid 8383:tid 8410] [client 20.111.17.80:18239] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/koiy.php"] [unique_id "ae3Yt9Fa2S3EsATMdWMX0wAAAA0"]
[Sun Apr 26 17:19:52.595805 2026] [:error] [pid 16574:tid 16635] [client 20.111.17.80:18215] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/koiy.php"] [unique_id "ae3YuH5MsX8wRQr99nYnKgAAA1Q"]
[Sun Apr 26 17:19:52.804713 2026] [:error] [pid 13197:tid 13234] [client 20.111.17.80:18180] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/t00l.php"] [unique_id "ae3YuN3kktFKdSxTrBvHXgAAAsM"]
[Sun Apr 26 17:19:53.158069 2026] [:error] [pid 8385:tid 8438] [client 20.111.17.80:18153] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/koiy.php"] [unique_id "ae3YuTOy7_J84Wx3-oy8mQAAAE4"]
[Sun Apr 26 17:19:53.794589 2026] [:error] [pid 22572:tid 22586] [client 20.111.17.80:18164] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/t00l.php"] [unique_id "ae3YudXOViWCFU-pZzABNQAAAUg"]
[Sun Apr 26 17:19:53.814988 2026] [:error] [pid 8383:tid 8407] [client 20.111.17.80:18078] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/koiy.php"] [unique_id "ae3YudFa2S3EsATMdWMX1QAAAAo"]
[Sun Apr 26 17:19:54.792980 2026] [:error] [pid 8385:tid 8432] [client 20.111.17.80:18136] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/albin.php"] [unique_id "ae3YujOy7_J84Wx3-oy8nQAAAEg"]
[Sun Apr 26 17:19:54.822742 2026] [:error] [pid 8385:tid 8431] [client 20.111.17.80:18109] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/t00l.php"] [unique_id "ae3YujOy7_J84Wx3-oy8ngAAAEc"]
[Sun Apr 26 17:19:55.351677 2026] [:error] [pid 8491:tid 8515] [client 20.111.17.80:18175] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/albin.php"] [unique_id "ae3Yuyq7I7e6CJooQM3suQAAANA"]
[Sun Apr 26 17:19:55.478822 2026] [:error] [pid 8390:tid 8460] [client 20.111.17.80:18234] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/t00l.php"] [unique_id "ae3Yu4GPtFK_i9p5yxQYkQAAAIk"]
[Sun Apr 26 17:19:56.047769 2026] [:error] [pid 8491:tid 8500] [client 20.111.17.80:18064] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/albin.php"] [unique_id "ae3YvCq7I7e6CJooQM3sugAAAME"]
[Sun Apr 26 17:19:56.429280 2026] [:error] [pid 8390:tid 8452] [client 20.111.17.80:18095] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/casp1.php"] [unique_id "ae3YvIGPtFK_i9p5yxQYkgAAAIE"]
[Sun Apr 26 17:19:56.731214 2026] [:error] [pid 8383:tid 8419] [client 20.111.17.80:18112] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/albin.php"] [unique_id "ae3YvNFa2S3EsATMdWMX1gAAABY"]
[Sun Apr 26 17:19:57.103567 2026] [:error] [pid 16515:tid 16542] [client 20.111.17.80:18176] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/casp1.php"] [unique_id "ae3YvVtDrUmgHSvpuLwmtwAAAlg"]
[Sun Apr 26 17:19:57.359050 2026] [:error] [pid 8390:tid 8473] [client 20.111.17.80:18128] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-the.php"] [unique_id "ae3YvYGPtFK_i9p5yxQYkwAAAJY"]
[Sun Apr 26 17:19:57.714452 2026] [:error] [pid 8383:tid 8400] [client 20.111.17.80:18121] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/casp1.php"] [unique_id "ae3YvdFa2S3EsATMdWMX2AAAAAM"]
[Sun Apr 26 17:19:58.009553 2026] [:error] [pid 8383:tid 8404] [client 20.111.17.80:18102] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-the.php"] [unique_id "ae3YvtFa2S3EsATMdWMX2QAAAAc"]
[Sun Apr 26 17:19:58.503149 2026] [:error] [pid 16574:tid 16643] [client 20.111.17.80:18103] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/casp1.php"] [unique_id "ae3Yvn5MsX8wRQr99nYnMQAAA1g"]
[Sun Apr 26 17:19:58.743587 2026] [:error] [pid 16574:tid 16619] [client 20.111.17.80:18431] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-the.php"] [unique_id "ae3Yvn5MsX8wRQr99nYnMgAAA0w"]
[Sun Apr 26 17:19:59.292225 2026] [:error] [pid 8491:tid 8505] [client 20.111.17.80:18054] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/acc.php"] [unique_id "ae3Yvyq7I7e6CJooQM3svAAAAMY"]
[Sun Apr 26 17:19:59.333383 2026] [:error] [pid 8390:tid 8459] [client 20.111.17.80:18151] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-the.php"] [unique_id "ae3Yv4GPtFK_i9p5yxQYlQAAAIg"]
[Sun Apr 26 17:20:00.072899 2026] [:error] [pid 22572:tid 22585] [client 20.111.17.80:18129] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sa.php7"] [unique_id "ae3YwNXOViWCFU-pZzABOAAAAUc"]
[Sun Apr 26 17:20:00.254713 2026] [:error] [pid 8390:tid 8470] [client 20.111.17.80:18160] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/acc.php"] [unique_id "ae3YwIGPtFK_i9p5yxQYlwAAAJM"]
[Sun Apr 26 17:20:00.742768 2026] [:error] [pid 22572:tid 22594] [client 20.111.17.80:18159] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sa.php7"] [unique_id "ae3YwNXOViWCFU-pZzABOwAAAVA"]
[Sun Apr 26 17:20:00.929607 2026] [:error] [pid 13137:tid 13142] [client 20.111.17.80:18084] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/acc.php"] [unique_id "ae3YwN0RB4J0o4h5neFV-QAAAgI"]
[Sun Apr 26 17:20:01.517110 2026] [:error] [pid 8383:tid 8414] [client 20.111.17.80:18146] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/acc.php"] [unique_id "ae3YwdFa2S3EsATMdWMX3AAAABE"]
[Sun Apr 26 17:20:01.550484 2026] [:error] [pid 8390:tid 8462] [client 20.111.17.80:18166] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sa.php7"] [unique_id "ae3YwYGPtFK_i9p5yxQYmQAAAIs"]
[Sun Apr 26 17:20:02.110345 2026] [:error] [pid 8390:tid 8469] [client 20.111.17.80:17998] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/asasx.php"] [unique_id "ae3YwoGPtFK_i9p5yxQYmgAAAJI"]
[Sun Apr 26 17:20:02.220897 2026] [:error] [pid 8390:tid 8475] [client 20.111.17.80:18161] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sa.php7"] [unique_id "ae3YwoGPtFK_i9p5yxQYmwAAAJg"]
[Sun Apr 26 17:20:02.930028 2026] [:error] [pid 8390:tid 8456] [client 20.111.17.80:18130] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a7.php"] [unique_id "ae3YwoGPtFK_i9p5yxQYnQAAAIU"]
[Sun Apr 26 17:20:03.316962 2026] [:error] [pid 8390:tid 8464] [client 20.111.17.80:18297] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/asasx.php"] [unique_id "ae3Yw4GPtFK_i9p5yxQYnwAAAI0"]
[Sun Apr 26 17:20:03.613735 2026] [:error] [pid 16574:tid 16633] [client 20.111.17.80:18303] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a7.php"] [unique_id "ae3Yw35MsX8wRQr99nYnNgAAA1M"]
[Sun Apr 26 17:20:03.974890 2026] [:error] [pid 16574:tid 16614] [client 20.111.17.80:18171] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/asasx.php"] [unique_id "ae3Yw35MsX8wRQr99nYnNwAAA0o"]
[Sun Apr 26 17:20:04.201439 2026] [:error] [pid 8385:tid 8429] [client 20.111.17.80:18053] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a7.php"] [unique_id "ae3YxDOy7_J84Wx3-oy8oQAAAEU"]
[Sun Apr 26 17:20:04.767117 2026] [:error] [pid 8491:tid 8518] [client 20.111.17.80:18141] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/asasx.php"] [unique_id "ae3YxCq7I7e6CJooQM3svwAAANM"]
[Sun Apr 26 17:20:05.063805 2026] [:error] [pid 8390:tid 8473] [client 20.111.17.80:18232] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a7.php"] [unique_id "ae3YxYGPtFK_i9p5yxQYoQAAAJY"]
[Sun Apr 26 17:20:06.021941 2026] [:error] [pid 8390:tid 8471] [client 20.111.17.80:18230] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xltt.php"] [unique_id "ae3YxoGPtFK_i9p5yxQYowAAAJQ"]
[Sun Apr 26 17:20:06.356311 2026] [:error] [pid 8390:tid 8454] [client 20.111.17.80:18066] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp9.php"] [unique_id "ae3YxoGPtFK_i9p5yxQYpAAAAIM"]
[Sun Apr 26 17:20:07.035305 2026] [:error] [pid 22572:tid 22579] [client 20.111.17.80:18236] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xltt.php"] [unique_id "ae3Yx9XOViWCFU-pZzABQAAAAUE"]
[Sun Apr 26 17:20:07.776398 2026] [:error] [pid 22572:tid 22602] [client 20.111.17.80:18162] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp9.php"] [unique_id "ae3Yx9XOViWCFU-pZzABQwAAAVg"]
[Sun Apr 26 17:20:07.812690 2026] [:error] [pid 8383:tid 8401] [client 20.111.17.80:18071] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xltt.php"] [unique_id "ae3Yx9Fa2S3EsATMdWMX3QAAAAQ"]
[Sun Apr 26 17:20:08.895661 2026] [:error] [pid 8383:tid 8419] [client 20.111.17.80:18148] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xltt.php"] [unique_id "ae3YyNFa2S3EsATMdWMX3wAAABY"]
[Sun Apr 26 17:20:09.431280 2026] [:error] [pid 8383:tid 8413] [client 20.111.17.80:18220] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp9.php"] [unique_id "ae3YydFa2S3EsATMdWMX4QAAABA"]
[Sun Apr 26 17:20:11.564604 2026] [:error] [pid 8383:tid 8404] [client 20.111.17.80:18111] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/packsin1.php"] [unique_id "ae3Yy9Fa2S3EsATMdWMX5AAAAAc"]
[Sun Apr 26 17:20:13.585095 2026] [:error] [pid 13137:tid 13161] [client 20.111.17.80:18093] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp9.php"] [unique_id "ae3Yzd0RB4J0o4h5neFWAAAAAhQ"]
[Sun Apr 26 17:20:14.378380 2026] [:error] [pid 13197:tid 13249] [client 20.111.17.80:18115] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/packsin1.php"] [unique_id "ae3Yzt3kktFKdSxTrBvHXwAAAtE"]
[Sun Apr 26 17:20:15.891365 2026] [:error] [pid 8383:tid 8397] [client 20.111.17.80:18098] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/packsin1.php"] [unique_id "ae3Yz9Fa2S3EsATMdWMX8AAAAAA"]
[Sun Apr 26 17:20:15.922693 2026] [:error] [pid 8383:tid 8404] [client 20.111.17.80:18050] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bthil.php"] [unique_id "ae3Yz9Fa2S3EsATMdWMX8QAAAAc"]
[Sun Apr 26 17:20:17.076421 2026] [:error] [pid 8491:tid 8513] [client 20.111.17.80:18076] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bthil.php"] [unique_id "ae3Y0Sq7I7e6CJooQM3syQAAAM4"]
[Sun Apr 26 17:20:17.615321 2026] [:error] [pid 8385:tid 8440] [client 20.111.17.80:18013] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/packsin1.php"] [unique_id "ae3Y0TOy7_J84Wx3-oy8pQAAAFA"]
[Sun Apr 26 17:20:18.147045 2026] [:error] [pid 13137:tid 13153] [client 20.111.17.80:18079] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bthil.php"] [unique_id "ae3Y0t0RB4J0o4h5neFWAQAAAgw"]
[Sun Apr 26 17:20:19.411142 2026] [:error] [pid 8390:tid 8464] [client 20.111.17.80:18068] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/press.php"] [unique_id "ae3Y04GPtFK_i9p5yxQYqQAAAI0"]
[Sun Apr 26 17:20:19.977487 2026] [:error] [pid 8390:tid 8452] [client 20.111.17.80:17990] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bthil.php"] [unique_id "ae3Y04GPtFK_i9p5yxQYqwAAAIE"]
[Sun Apr 26 17:20:20.471216 2026] [:error] [pid 13137:tid 13157] [client 20.111.17.80:18060] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/press.php"] [unique_id "ae3Y1N0RB4J0o4h5neFWBAAAAhA"]
[Sun Apr 26 17:20:20.921487 2026] [:error] [pid 8385:tid 8439] [client 20.111.17.80:18298] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp5.php"] [unique_id "ae3Y1DOy7_J84Wx3-oy8qAAAAE8"]
[Sun Apr 26 17:20:21.695688 2026] [:error] [pid 16515:tid 16531] [client 20.111.17.80:18165] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/press.php"] [unique_id "ae3Y1VtDrUmgHSvpuLwmwwAAAk0"]
[Sun Apr 26 17:20:21.841077 2026] [:error] [pid 8383:tid 8406] [client 20.111.17.80:18048] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp5.php"] [unique_id "ae3Y1dFa2S3EsATMdWMX9QAAAAk"]
[Sun Apr 26 17:20:22.430115 2026] [:error] [pid 13137:tid 13163] [client 20.111.17.80:18285] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp5.php"] [unique_id "ae3Y1t0RB4J0o4h5neFWBQAAAhY"]
[Sun Apr 26 17:20:22.561577 2026] [:error] [pid 13137:tid 13149] [client 20.111.17.80:18092] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/press.php"] [unique_id "ae3Y1t0RB4J0o4h5neFWBgAAAgk"]
[Sun Apr 26 17:20:23.071553 2026] [:error] [pid 8491:tid 8501] [client 20.111.17.80:18195] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp5.php"] [unique_id "ae3Y1yq7I7e6CJooQM3s0wAAAMI"]
[Sun Apr 26 17:20:23.411779 2026] [:error] [pid 8491:tid 8504] [client 20.111.17.80:18106] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws78.php"] [unique_id "ae3Y1yq7I7e6CJooQM3s1AAAAMU"]
[Sun Apr 26 17:20:23.740356 2026] [:error] [pid 8491:tid 8523] [client 20.111.17.80:17997] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/yuzuru1.php"] [unique_id "ae3Y1yq7I7e6CJooQM3s1gAAANc"]
[Sun Apr 26 17:20:24.426938 2026] [:error] [pid 13137:tid 13158] [client 20.111.17.80:18172] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/yuzuru1.php"] [unique_id "ae3Y2N0RB4J0o4h5neFWCwAAAhE"]
[Sun Apr 26 17:20:25.052437 2026] [:error] [pid 16515:tid 16530] [client 20.111.17.80:18158] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws78.php"] [unique_id "ae3Y2VtDrUmgHSvpuLwmxgAAAkw"]
[Sun Apr 26 17:20:25.507843 2026] [:error] [pid 8385:tid 8437] [client 20.111.17.80:18062] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/yuzuru1.php"] [unique_id "ae3Y2TOy7_J84Wx3-oy8qwAAAE0"]
[Sun Apr 26 17:20:26.380092 2026] [:error] [pid 8491:tid 8515] [client 20.111.17.80:18124] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws78.php"] [unique_id "ae3Y2iq7I7e6CJooQM3s1wAAANA"]
[Sun Apr 26 17:20:27.385527 2026] [:error] [pid 13137:tid 13161] [client 20.111.17.80:18065] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/yuzuru1.php"] [unique_id "ae3Y290RB4J0o4h5neFWDQAAAhQ"]
[Sun Apr 26 17:20:28.038525 2026] [:error] [pid 13137:tid 13153] [client 20.111.17.80:18015] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws78.php"] [unique_id "ae3Y3N0RB4J0o4h5neFWDwAAAgw"]
[Sun Apr 26 17:20:29.107384 2026] [:error] [pid 8491:tid 8513] [client 20.111.17.80:18080] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file61.php"] [unique_id "ae3Y3Sq7I7e6CJooQM3s3gAAAM4"]
[Sun Apr 26 17:20:29.736250 2026] [:error] [pid 8491:tid 8503] [client 20.111.17.80:18063] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/motu.php"] [unique_id "ae3Y3Sq7I7e6CJooQM3s4AAAAMQ"]
[Sun Apr 26 17:20:30.142005 2026] [:error] [pid 13137:tid 13159] [client 20.111.17.80:18336] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file61.php"] [unique_id "ae3Y3t0RB4J0o4h5neFWFAAAAhI"]
[Sun Apr 26 17:20:31.646206 2026] [:error] [pid 8383:tid 8404] [client 20.111.17.80:18020] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/motu.php"] [unique_id "ae3Y39Fa2S3EsATMdWMX-QAAAAc"]
[Sun Apr 26 17:20:32.486945 2026] [proxy_fcgi:error] [pid 8383:tid 8418] [client 20.111.17.80:18089] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 17:20:32.725921 2026] [proxy_fcgi:error] [pid 8383:tid 8416] [client 20.111.17.80:18089] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 17:20:32.965129 2026] [proxy_fcgi:error] [pid 8383:tid 8421] [client 20.111.17.80:18089] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 17:20:33.115337 2026] [proxy_fcgi:error] [pid 8383:tid 8410] [client 20.111.17.80:18173] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 17:20:33.224327 2026] [proxy_fcgi:error] [pid 8383:tid 8411] [client 20.111.17.80:18089] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 17:20:33.506603 2026] [proxy_fcgi:error] [pid 8383:tid 8414] [client 20.111.17.80:18089] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 17:20:33.596748 2026] [proxy_fcgi:error] [pid 8383:tid 8409] [client 20.111.17.80:18173] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 17:20:33.745149 2026] [proxy_fcgi:error] [pid 8383:tid 8420] [client 20.111.17.80:18089] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 17:20:33.862479 2026] [proxy_fcgi:error] [pid 8383:tid 8415] [client 20.111.17.80:18173] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 17:20:33.983801 2026] [proxy_fcgi:error] [pid 8383:tid 8407] [client 20.111.17.80:18089] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 17:20:34.129922 2026] [proxy_fcgi:error] [pid 8383:tid 8403] [client 20.111.17.80:18173] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 17:20:34.219044 2026] [:error] [pid 8383:tid 8401] [client 20.111.17.80:18089] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/asasx.php"] [unique_id "ae3Y4tFa2S3EsATMdWMYCgAAAAQ"]
[Sun Apr 26 17:20:34.418906 2026] [:error] [pid 8383:tid 8402] [client 20.111.17.80:18173] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sadcut1.php"] [unique_id "ae3Y4tFa2S3EsATMdWMYCwAAAAU"]
[Sun Apr 26 17:20:34.988019 2026] [:error] [pid 8385:tid 8430] [client 20.111.17.80:18217] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/asasx.php"] [unique_id "ae3Y4jOy7_J84Wx3-oy8twAAAEY"]
[Sun Apr 26 17:20:35.439809 2026] [:error] [pid 8385:tid 8435] [client 20.111.17.80:18144] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sadcut1.php"] [unique_id "ae3Y4zOy7_J84Wx3-oy8ugAAAEs"]
[Sun Apr 26 17:20:36.089313 2026] [:error] [pid 8390:tid 8455] [client 20.111.17.80:18170] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/asasx.php"] [unique_id "ae3Y5IGPtFK_i9p5yxQYrAAAAIQ"]
[Sun Apr 26 17:20:37.124282 2026] [:error] [pid 22572:tid 22592] [client 20.111.17.80:18097] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/asasx.php"] [unique_id "ae3Y5dXOViWCFU-pZzABRQAAAU4"]
[Sun Apr 26 17:20:37.132314 2026] [:error] [pid 22572:tid 22584] [client 20.111.17.80:18126] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sadcut1.php"] [unique_id "ae3Y5dXOViWCFU-pZzABRgAAAUY"]
[Sun Apr 26 17:20:39.570468 2026] [:error] [pid 16515:tid 16524] [client 20.111.17.80:18005] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sadcut1.php"] [unique_id "ae3Y51tDrUmgHSvpuLwmzQAAAkY"]
[Sun Apr 26 17:20:39.916719 2026] [:error] [pid 8390:tid 8465] [client 20.111.17.80:17988] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xltt.php"] [unique_id "ae3Y54GPtFK_i9p5yxQYtQAAAI4"]
[Sun Apr 26 17:20:42.138523 2026] [:error] [pid 8390:tid 8466] [client 20.111.17.80:18117] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xltt.php"] [unique_id "ae3Y6oGPtFK_i9p5yxQYuwAAAI8"]
[Sun Apr 26 17:20:42.376738 2026] [:error] [pid 8390:tid 8467] [client 20.111.17.80:18055] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/666.php"] [unique_id "ae3Y6oGPtFK_i9p5yxQYvAAAAJA"]
[Sun Apr 26 17:20:43.615513 2026] [:error] [pid 22573:tid 22607] [client 20.111.17.80:18366] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xltt.php"] [unique_id "ae3Y63B3EmQlD4yKUt_OvQAAAYE"]
[Sun Apr 26 17:20:44.165071 2026] [:error] [pid 8390:tid 8460] [client 20.111.17.80:18229] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/666.php"] [unique_id "ae3Y7IGPtFK_i9p5yxQYwgAAAIk"]
[Sun Apr 26 17:20:44.767603 2026] [:error] [pid 13137:tid 13155] [client 20.111.17.80:18016] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xltt.php"] [unique_id "ae3Y7N0RB4J0o4h5neFWGwAAAg4"]
[Sun Apr 26 17:20:45.525200 2026] [:error] [pid 13137:tid 13151] [client 20.111.17.80:18317] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/packsin1.php"] [unique_id "ae3Y7d0RB4J0o4h5neFWHQAAAgo"]
[Sun Apr 26 17:20:45.704473 2026] [:error] [pid 22572:tid 22582] [client 20.111.17.80:18051] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/666.php"] [unique_id "ae3Y7dXOViWCFU-pZzABSgAAAUQ"]
[Sun Apr 26 17:20:46.460350 2026] [:error] [pid 13137:tid 13146] [client 20.111.17.80:18077] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/packsin1.php"] [unique_id "ae3Y7t0RB4J0o4h5neFWHgAAAgY"]
[Sun Apr 26 17:20:46.839680 2026] [:error] [pid 13137:tid 13145] [client 20.111.17.80:18254] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/666.php"] [unique_id "ae3Y7t0RB4J0o4h5neFWIAAAAgU"]
[Sun Apr 26 17:20:47.013001 2026] [:error] [pid 8491:tid 8523] [client 20.111.17.80:18069] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/packsin1.php"] [unique_id "ae3Y7yq7I7e6CJooQM3s5AAAANc"]
[Sun Apr 26 17:20:47.697926 2026] [:error] [pid 22572:tid 22583] [client 20.111.17.80:18415] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/packsin1.php"] [unique_id "ae3Y79XOViWCFU-pZzABTQAAAUU"]
[Sun Apr 26 17:20:48.058082 2026] [:error] [pid 8383:tid 8412] [client 20.111.17.80:17986] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xwx1.php"] [unique_id "ae3Y8NFa2S3EsATMdWMYGQAAAA8"]
[Sun Apr 26 17:20:48.325973 2026] [:error] [pid 8491:tid 8524] [client 20.111.17.80:18081] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/press.php"] [unique_id "ae3Y8Cq7I7e6CJooQM3s5QAAANg"]
[Sun Apr 26 17:20:48.920958 2026] [:error] [pid 13197:tid 13256] [client 20.111.17.80:18010] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/press.php"] [unique_id "ae3Y8N3kktFKdSxTrBvHYAAAAtg"]
[Sun Apr 26 17:20:49.202161 2026] [:error] [pid 8383:tid 8420] [client 20.111.17.80:18410] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xwx1.php"] [unique_id "ae3Y8dFa2S3EsATMdWMYHQAAABc"]
[Sun Apr 26 17:20:49.760804 2026] [:error] [pid 8383:tid 8407] [client 20.111.17.80:18316] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/press.php"] [unique_id "ae3Y8dFa2S3EsATMdWMYHgAAAAo"]
[Sun Apr 26 17:20:50.242315 2026] [:error] [pid 8383:tid 8402] [client 20.111.17.80:18382] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xwx1.php"] [unique_id "ae3Y8tFa2S3EsATMdWMYIQAAAAU"]
[Sun Apr 26 17:20:50.365049 2026] [:error] [pid 8390:tid 8473] [client 20.111.17.80:17948] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/press.php"] [unique_id "ae3Y8oGPtFK_i9p5yxQYxgAAAJY"]
[Sun Apr 26 17:20:51.081478 2026] [:error] [pid 8383:tid 8418] [client 20.111.17.80:18321] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws78.php"] [unique_id "ae3Y89Fa2S3EsATMdWMYIwAAABU"]
[Sun Apr 26 17:20:51.583737 2026] [:error] [pid 13137:tid 13148] [client 20.111.17.80:18310] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xwx1.php"] [unique_id "ae3Y890RB4J0o4h5neFWJwAAAgg"]
[Sun Apr 26 17:20:52.410813 2026] [:error] [pid 13137:tid 13146] [client 20.111.17.80:18009] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws78.php"] [unique_id "ae3Y9N0RB4J0o4h5neFWKgAAAgY"]
[Sun Apr 26 17:20:52.716226 2026] [:error] [pid 13137:tid 13145] [client 20.111.17.80:18087] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/prosellers8.php"] [unique_id "ae3Y9N0RB4J0o4h5neFWLAAAAgU"]
[Sun Apr 26 17:20:53.044287 2026] [:error] [pid 13137:tid 13141] [client 20.111.17.80:18094] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws78.php"] [unique_id "ae3Y9d0RB4J0o4h5neFWLgAAAgE"]
[Sun Apr 26 17:20:53.523392 2026] [:error] [pid 13137:tid 13142] [client 20.111.17.80:18314] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/prosellers8.php"] [unique_id "ae3Y9d0RB4J0o4h5neFWMQAAAgI"]
[Sun Apr 26 17:20:54.044777 2026] [:error] [pid 8390:tid 8457] [client 20.111.17.80:18090] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws78.php"] [unique_id "ae3Y9oGPtFK_i9p5yxQYyAAAAIY"]
[Sun Apr 26 17:20:54.544899 2026] [:error] [pid 8390:tid 8451] [client 20.111.17.80:18008] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/motu.php"] [unique_id "ae3Y9oGPtFK_i9p5yxQYygAAAIA"]
[Sun Apr 26 17:20:54.698087 2026] [:error] [pid 13137:tid 13148] [client 20.111.17.80:18059] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/prosellers8.php"] [unique_id "ae3Y9t0RB4J0o4h5neFWMwAAAgg"]
[Sun Apr 26 17:20:55.890727 2026] [:error] [pid 13137:tid 13164] [client 20.111.17.80:18070] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/motu.php"] [unique_id "ae3Y990RB4J0o4h5neFWNgAAAhc"]
[Sun Apr 26 17:20:56.593634 2026] [:error] [pid 8390:tid 8462] [client 20.111.17.80:18307] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/prosellers8.php"] [unique_id "ae3Y-IGPtFK_i9p5yxQYzQAAAIs"]
[Sun Apr 26 17:20:56.853775 2026] [:error] [pid 22572:tid 22586] [client 20.111.17.80:18019] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/motu.php"] [unique_id "ae3Y-NXOViWCFU-pZzABUgAAAUg"]
[Sun Apr 26 17:20:58.810605 2026] [:error] [pid 8383:tid 8416] [client 20.111.17.80:18031] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/shop.php"] [unique_id "ae3Y-tFa2S3EsATMdWMYLQAAABM"]
[Sun Apr 26 17:20:59.410799 2026] [:error] [pid 8383:tid 8407] [client 20.111.17.80:18416] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/motu.php"] [unique_id "ae3Y-9Fa2S3EsATMdWMYMQAAAAo"]
[Sun Apr 26 17:20:59.619718 2026] [:error] [pid 22573:tid 22619] [client 20.111.17.80:18023] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/shop.php"] [unique_id "ae3Y-3B3EmQlD4yKUt_OwQAAAYw"]
[Sun Apr 26 17:21:00.373081 2026] [:error] [pid 8390:tid 8464] [client 20.111.17.80:18322] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/shop.php"] [unique_id "ae3Y_IGPtFK_i9p5yxQYzgAAAI0"]
[Sun Apr 26 17:21:01.027852 2026] [:error] [pid 22573:tid 22611] [client 20.111.17.80:18388] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hplfuns.php"] [unique_id "ae3Y_XB3EmQlD4yKUt_OzgAAAYU"]
[Sun Apr 26 17:21:01.718144 2026] [:error] [pid 22573:tid 22609] [client 20.111.17.80:18000] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/shop.php"] [unique_id "ae3Y_XB3EmQlD4yKUt_O0QAAAYM"]
[Sun Apr 26 17:21:02.563134 2026] [:error] [pid 16515:tid 16536] [client 20.111.17.80:18052] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hplfuns.php"] [unique_id "ae3Y_ltDrUmgHSvpuLwm2AAAAlI"]
[Sun Apr 26 17:21:03.575098 2026] [:error] [pid 8383:tid 8421] [client 20.111.17.80:18073] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ww.php"] [unique_id "ae3Y_9Fa2S3EsATMdWMYNwAAABg"]
[Sun Apr 26 17:21:05.114950 2026] [:error] [pid 22572:tid 22599] [client 20.111.17.80:18393] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hplfuns.php"] [unique_id "ae3ZAdXOViWCFU-pZzABVwAAAVU"]
[Sun Apr 26 17:21:06.552481 2026] [:error] [pid 8390:tid 8455] [client 20.111.17.80:18404] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hplfuns.php"] [unique_id "ae3ZAoGPtFK_i9p5yxQY0gAAAIQ"]
[Sun Apr 26 17:21:06.684567 2026] [:error] [pid 22573:tid 22612] [client 20.111.17.80:17921] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ww.php"] [unique_id "ae3ZAnB3EmQlD4yKUt_O1wAAAYY"]
[Sun Apr 26 17:21:07.517326 2026] [:error] [pid 22572:tid 22595] [client 20.111.17.80:18402] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xa.php"] [unique_id "ae3ZA9XOViWCFU-pZzABcgAAAVE"]
[Sun Apr 26 17:21:08.336914 2026] [:error] [pid 8383:tid 8420] [client 20.111.17.80:18091] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xa.php"] [unique_id "ae3ZBNFa2S3EsATMdWMYVQAAABc"]
[Sun Apr 26 17:21:08.972774 2026] [:error] [pid 8491:tid 8514] [client 20.111.17.80:18105] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xa.php"] [unique_id "ae3ZBCq7I7e6CJooQM3s5wAAAM8"]
[Sun Apr 26 17:21:09.589098 2026] [:error] [pid 8383:tid 8401] [client 20.111.17.80:18169] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ww.php"] [unique_id "ae3ZBdFa2S3EsATMdWMYWAAAAAQ"]
[Sun Apr 26 17:21:09.843941 2026] [:error] [pid 8491:tid 8500] [client 20.111.17.80:18017] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xa.php"] [unique_id "ae3ZBSq7I7e6CJooQM3s6AAAAME"]
[Sun Apr 26 17:21:10.367309 2026] [:error] [pid 8390:tid 8465] [client 20.111.17.80:18088] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/8573.php"] [unique_id "ae3ZBoGPtFK_i9p5yxQY1QAAAI4"]
[Sun Apr 26 17:21:10.713358 2026] [:error] [pid 8383:tid 8419] [client 20.111.17.80:18030] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ww.php"] [unique_id "ae3ZBtFa2S3EsATMdWMYWgAAABY"]
[Sun Apr 26 17:21:10.906579 2026] [:error] [pid 8383:tid 8414] [client 20.111.17.80:18107] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/8573.php"] [unique_id "ae3ZBtFa2S3EsATMdWMYWwAAABE"]
[Sun Apr 26 17:21:11.553845 2026] [:error] [pid 8383:tid 8403] [client 20.111.17.80:18338] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/8573.php"] [unique_id "ae3ZB9Fa2S3EsATMdWMYXAAAAAY"]
[Sun Apr 26 17:21:11.572469 2026] [:error] [pid 16574:tid 16643] [client 20.111.17.80:18057] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fsjzs.php"] [unique_id "ae3ZB35MsX8wRQr99nYnPgAAA1g"]
[Sun Apr 26 17:21:12.474403 2026] [:error] [pid 8385:tid 8432] [client 20.111.17.80:18428] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fsjzs.php"] [unique_id "ae3ZCDOy7_J84Wx3-oy8zQAAAEg"]
[Sun Apr 26 17:21:12.480833 2026] [:error] [pid 22573:tid 22625] [client 20.111.17.80:18120] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/8573.php"] [unique_id "ae3ZCHB3EmQlD4yKUt_O3AAAAZI"]
[Sun Apr 26 17:21:13.363596 2026] [:error] [pid 13197:tid 13233] [client 20.111.17.80:17942] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fsjzs.php"] [unique_id "ae3ZCd3kktFKdSxTrBvHYwAAAsI"]
[Sun Apr 26 17:21:13.602962 2026] [:error] [pid 8383:tid 8414] [client 20.111.17.80:18339] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sadcut1.php"] [unique_id "ae3ZCdFa2S3EsATMdWMYcQAAABE"]
[Sun Apr 26 17:21:15.736103 2026] [:error] [pid 22572:tid 22585] [client 20.111.17.80:18033] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fsjzs.php"] [unique_id "ae3ZC9XOViWCFU-pZzABfQAAAUc"]
[Sun Apr 26 17:21:17.387911 2026] [:error] [pid 16515:tid 16526] [client 20.111.17.80:18424] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sadcut1.php"] [unique_id "ae3ZDVtDrUmgHSvpuLwm3gAAAkg"]
[Sun Apr 26 17:21:17.587807 2026] [:error] [pid 13197:tid 13251] [client 20.111.17.80:18383] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cwclass.php"] [unique_id "ae3ZDd3kktFKdSxTrBvHZAAAAtM"]
[Sun Apr 26 17:21:18.967531 2026] [:error] [pid 8390:tid 8462] [client 20.111.17.80:18371] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cwclass.php"] [unique_id "ae3ZDoGPtFK_i9p5yxQY4AAAAIs"]
[Sun Apr 26 17:21:21.385072 2026] [:error] [pid 8390:tid 8452] [client 20.111.17.80:18343] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cwclass.php"] [unique_id "ae3ZEYGPtFK_i9p5yxQY5AAAAIE"]
[Sun Apr 26 17:21:22.117732 2026] [:error] [pid 8390:tid 8473] [client 20.111.17.80:18341] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sadcut1.php"] [unique_id "ae3ZEoGPtFK_i9p5yxQY5wAAAJY"]
[Sun Apr 26 17:21:22.608623 2026] [:error] [pid 22573:tid 22620] [client 20.111.17.80:18409] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cwclass.php"] [unique_id "ae3ZEnB3EmQlD4yKUt_O3QAAAY0"]
[Sun Apr 26 17:21:22.904159 2026] [:error] [pid 8390:tid 8475] [client 20.111.17.80:18138] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sadcut1.php"] [unique_id "ae3ZEoGPtFK_i9p5yxQY6gAAAJg"]
[Sun Apr 26 17:21:23.363003 2026] [:error] [pid 16515:tid 16521] [client 20.111.17.80:18392] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/edit-tags.php"] [unique_id "ae3ZE1tDrUmgHSvpuLwm4wAAAkM"]
[Sun Apr 26 17:21:23.693219 2026] [:error] [pid 22572:tid 22578] [client 20.111.17.80:18004] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/666.php"] [unique_id "ae3ZE9XOViWCFU-pZzABgAAAAUA"]
[Sun Apr 26 17:21:24.283773 2026] [:error] [pid 8390:tid 8462] [client 20.111.17.80:18329] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/666.php"] [unique_id "ae3ZFIGPtFK_i9p5yxQY7AAAAIs"]
[Sun Apr 26 17:21:25.128181 2026] [:error] [pid 16574:tid 16612] [client 20.111.17.80:18376] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/666.php"] [unique_id "ae3ZFX5MsX8wRQr99nYnRAAAA0g"]
[Sun Apr 26 17:21:25.403893 2026] [:error] [pid 8385:tid 8438] [client 20.111.17.80:18324] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/edit-tags.php"] [unique_id "ae3ZFTOy7_J84Wx3-oy81AAAAE4"]
[Sun Apr 26 17:21:25.725676 2026] [:error] [pid 8385:tid 8435] [client 20.111.17.80:18403] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/666.php"] [unique_id "ae3ZFTOy7_J84Wx3-oy81QAAAEs"]
[Sun Apr 26 17:21:26.578158 2026] [:error] [pid 22572:tid 22585] [client 20.111.17.80:18380] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xwx1.php"] [unique_id "ae3ZFtXOViWCFU-pZzABgQAAAUc"]
[Sun Apr 26 17:21:29.131488 2026] [:error] [pid 16574:tid 16621] [client 20.111.17.80:17959] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/edit-tags.php"] [unique_id "ae3ZGX5MsX8wRQr99nYnRQAAA00"]
[Sun Apr 26 17:21:29.655718 2026] [:error] [pid 22573:tid 22625] [client 20.111.17.80:18306] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xwx1.php"] [unique_id "ae3ZGXB3EmQlD4yKUt_O5wAAAZI"]
[Sun Apr 26 17:21:31.467515 2026] [:error] [pid 13137:tid 13155] [client 20.111.17.80:17924] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xwx1.php"] [unique_id "ae3ZG90RB4J0o4h5neFWaQAAAg4"]
[Sun Apr 26 17:21:32.090035 2026] [:error] [pid 13197:tid 13239] [client 20.111.17.80:18369] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xwx1.php"] [unique_id "ae3ZHN3kktFKdSxTrBvHaAAAAsg"]
[Sun Apr 26 17:21:32.812921 2026] [:error] [pid 16515:tid 16522] [client 20.111.17.80:18021] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/prosellers8.php"] [unique_id "ae3ZHFtDrUmgHSvpuLwm6QAAAkQ"]
[Sun Apr 26 17:21:33.980901 2026] [:error] [pid 8390:tid 8452] [client 20.111.17.80:18014] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/prosellers8.php"] [unique_id "ae3ZHYGPtFK_i9p5yxQY-gAAAIE"]
[Sun Apr 26 17:21:35.190876 2026] [proxy_fcgi:error] [pid 22573:tid 22623] [client 20.111.17.80:18167] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 17:21:35.467401 2026] [proxy_fcgi:error] [pid 22573:tid 22619] [client 20.111.17.80:18167] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 17:21:35.730691 2026] [proxy_fcgi:error] [pid 22573:tid 22613] [client 20.111.17.80:18167] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 17:21:35.995360 2026] [proxy_fcgi:error] [pid 22573:tid 22631] [client 20.111.17.80:18167] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 17:21:36.268697 2026] [proxy_fcgi:error] [pid 22573:tid 22630] [client 20.111.17.80:18167] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 17:21:37.506271 2026] [proxy_fcgi:error] [pid 22573:tid 22611] [client 20.111.17.80:18167] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 17:21:37.780173 2026] [proxy_fcgi:error] [pid 22573:tid 22625] [client 20.111.17.80:18167] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 17:21:38.062907 2026] [proxy_fcgi:error] [pid 22573:tid 22629] [client 20.111.17.80:18167] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 17:21:38.334577 2026] [proxy_fcgi:error] [pid 22573:tid 22607] [client 20.111.17.80:18167] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 17:21:38.598931 2026] [proxy_fcgi:error] [pid 22573:tid 22609] [client 20.111.17.80:18167] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 17:21:38.863925 2026] [proxy_fcgi:error] [pid 22573:tid 22618] [client 20.111.17.80:18167] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 17:21:39.125544 2026] [:error] [pid 22573:tid 22623] [client 20.111.17.80:18167] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/term.php"] [unique_id "ae3ZI3B3EmQlD4yKUt_O-wAAAZA"]
[Sun Apr 26 17:21:39.398715 2026] [proxy_fcgi:error] [pid 22573:tid 22619] [client 20.215.250.178:64659] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 17:21:39.665075 2026] [proxy_fcgi:error] [pid 22573:tid 22627] [client 20.215.250.178:64659] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 17:21:39.936462 2026] [proxy_fcgi:error] [pid 22573:tid 22608] [client 20.215.250.178:64659] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 17:21:40.214527 2026] [proxy_fcgi:error] [pid 22573:tid 22628] [client 20.215.250.178:64659] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 17:21:40.488716 2026] [proxy_fcgi:error] [pid 22573:tid 22612] [client 20.215.250.178:64659] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 17:21:40.748563 2026] [proxy_fcgi:error] [pid 22573:tid 22606] [client 20.215.250.178:64659] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 17:21:41.007005 2026] [proxy_fcgi:error] [pid 22573:tid 22621] [client 20.215.250.178:64659] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 17:21:41.272654 2026] [proxy_fcgi:error] [pid 22573:tid 22616] [client 20.215.250.178:64659] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 17:21:41.358997 2026] [proxy_fcgi:error] [pid 22573:tid 22611] [client 20.215.250.178:64690] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 17:21:41.529287 2026] [:error] [pid 22573:tid 22615] [client 20.215.250.178:64659] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/users.php"] [unique_id "ae3ZJXB3EmQlD4yKUt_PBwAAAYg"]
[Sun Apr 26 17:21:41.614409 2026] [:error] [pid 22573:tid 22625] [client 20.215.250.178:64690] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ox.php"] [unique_id "ae3ZJXB3EmQlD4yKUt_PCAAAAZI"]
[Sun Apr 26 17:21:41.657113 2026] [:error] [pid 8491:tid 8513] [client 20.111.17.80:18405] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/atomlib.php"] [unique_id "ae3ZJSq7I7e6CJooQM3s9AAAAM4"]
[Sun Apr 26 17:21:43.250850 2026] [:error] [pid 8383:tid 8405] [client 20.111.17.80:18406] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/term.php"] [unique_id "ae3ZJ9Fa2S3EsATMdWMYiAAAAAg"]
[Sun Apr 26 17:21:44.336183 2026] [:error] [pid 8491:tid 8519] [client 20.111.17.80:18266] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/atomlib.php"] [unique_id "ae3ZKCq7I7e6CJooQM3s9wAAANQ"]
[Sun Apr 26 17:21:44.615965 2026] [:error] [pid 8491:tid 8523] [client 20.215.250.178:64742] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ox.php"] [unique_id "ae3ZKCq7I7e6CJooQM3s-AAAANc"]
[Sun Apr 26 17:21:44.989223 2026] [:error] [pid 16515:tid 16523] [client 20.215.250.178:64667] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/users.php"] [unique_id "ae3ZKFtDrUmgHSvpuLwm8AAAAkU"]
[Sun Apr 26 17:21:45.383698 2026] [:error] [pid 16515:tid 16533] [client 20.111.17.80:18318] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/atomlib.php"] [unique_id "ae3ZKVtDrUmgHSvpuLwm8QAAAk8"]
[Sun Apr 26 17:21:46.267585 2026] [:error] [pid 8383:tid 8408] [client 20.111.17.80:18049] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/term.php"] [unique_id "ae3ZKtFa2S3EsATMdWMYkgAAAAs"]
[Sun Apr 26 17:21:46.579390 2026] [:error] [pid 16574:tid 16639] [client 20.111.17.80:18100] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/atomlib.php"] [unique_id "ae3ZKn5MsX8wRQr99nYnSwAAA1Y"]
[Sun Apr 26 17:21:47.199636 2026] [:error] [pid 16515:tid 16519] [client 20.111.17.80:18040] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/term.php"] [unique_id "ae3ZK1tDrUmgHSvpuLwm9gAAAkE"]
[Sun Apr 26 17:21:47.648405 2026] [:error] [pid 22572:tid 22598] [client 20.111.17.80:18311] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zoper1.php"] [unique_id "ae3ZK9XOViWCFU-pZzABngAAAVQ"]
[Sun Apr 26 17:21:47.799230 2026] [:error] [pid 8491:tid 8499] [client 20.111.17.80:18085] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gk.php"] [unique_id "ae3ZKyq7I7e6CJooQM3s_QAAAMA"]
[Sun Apr 26 17:21:48.145173 2026] [:error] [pid 16515:tid 16538] [client 20.215.250.178:64665] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/users.php"] [unique_id "ae3ZLFtDrUmgHSvpuLwnAAAAAlQ"]
[Sun Apr 26 17:21:48.271740 2026] [:error] [pid 22572:tid 22585] [client 20.215.250.178:64655] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ox.php"] [unique_id "ae3ZLNXOViWCFU-pZzABoAAAAUc"]
[Sun Apr 26 17:21:48.308951 2026] [:error] [pid 16515:tid 16525] [client 20.111.17.80:18377] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zoper1.php"] [unique_id "ae3ZLFtDrUmgHSvpuLwnAgAAAkc"]
[Sun Apr 26 17:21:48.959913 2026] [:error] [pid 16515:tid 16521] [client 20.111.17.80:18374] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gk.php"] [unique_id "ae3ZLFtDrUmgHSvpuLwnBgAAAkM"]
[Sun Apr 26 17:21:49.136974 2026] [:error] [pid 8385:tid 8447] [client 20.111.17.80:18034] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zoper1.php"] [unique_id "ae3ZLTOy7_J84Wx3-oy84wAAAFc"]
[Sun Apr 26 17:21:49.955126 2026] [:error] [pid 8385:tid 8433] [client 20.215.250.178:64663] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/users.php"] [unique_id "ae3ZLTOy7_J84Wx3-oy85QAAAEk"]
[Sun Apr 26 17:21:50.110190 2026] [:error] [pid 13137:tid 13160] [client 20.111.17.80:18315] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gk.php"] [unique_id "ae3ZLt0RB4J0o4h5neFWbQAAAhM"]
[Sun Apr 26 17:21:50.365066 2026] [:error] [pid 22573:tid 22611] [client 20.215.250.178:64643] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ox.php"] [unique_id "ae3ZLnB3EmQlD4yKUt_PEAAAAYU"]
[Sun Apr 26 17:21:50.429021 2026] [:error] [pid 8390:tid 8464] [client 20.111.17.80:17977] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zoper1.php"] [unique_id "ae3ZLoGPtFK_i9p5yxQZBwAAAI0"]
[Sun Apr 26 17:21:50.980614 2026] [:error] [pid 16515:tid 16529] [client 20.111.17.80:17989] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gk.php"] [unique_id "ae3ZLltDrUmgHSvpuLwnDgAAAks"]
[Sun Apr 26 17:21:51.418765 2026] [:error] [pid 16515:tid 16541] [client 20.111.17.80:18131] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a5.php"] [unique_id "ae3ZL1tDrUmgHSvpuLwnEAAAAlc"]
[Sun Apr 26 17:21:51.930965 2026] [:error] [pid 8383:tid 8398] [client 20.111.17.80:18309] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xmu.php"] [unique_id "ae3ZL9Fa2S3EsATMdWMYnwAAAAE"]
[Sun Apr 26 17:21:51.983749 2026] [:error] [pid 16515:tid 16525] [client 20.215.250.178:64688] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/public/vx.php"] [unique_id "ae3ZL1tDrUmgHSvpuLwnFQAAAkc"]
[Sun Apr 26 17:21:52.530216 2026] [:error] [pid 16515:tid 16521] [client 20.215.250.178:64723] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/htto.php"] [unique_id "ae3ZMFtDrUmgHSvpuLwnGgAAAkM"]
[Sun Apr 26 17:21:52.804089 2026] [:error] [pid 22573:tid 22625] [client 20.111.17.80:18386] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xmu.php"] [unique_id "ae3ZMHB3EmQlD4yKUt_PEQAAAZI"]
[Sun Apr 26 17:21:52.917979 2026] [:error] [pid 8390:tid 8459] [client 20.111.17.80:18397] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a5.php"] [unique_id "ae3ZMIGPtFK_i9p5yxQZCAAAAIg"]
[Sun Apr 26 17:21:53.108477 2026] [:error] [pid 16515:tid 16529] [client 20.215.250.178:64747] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/public/vx.php"] [unique_id "ae3ZMVtDrUmgHSvpuLwnHgAAAks"]
[Sun Apr 26 17:21:53.585601 2026] [:error] [pid 8383:tid 8412] [client 20.111.17.80:18313] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a5.php"] [unique_id "ae3ZMdFa2S3EsATMdWMYpgAAAA8"]
[Sun Apr 26 17:21:54.201680 2026] [:error] [pid 8491:tid 8515] [client 20.111.17.80:18061] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xmu.php"] [unique_id "ae3ZMiq7I7e6CJooQM3tDgAAANA"]
[Sun Apr 26 17:21:54.362570 2026] [:error] [pid 8390:tid 8455] [client 20.215.250.178:64709] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/public/vx.php"] [unique_id "ae3ZMoGPtFK_i9p5yxQZCgAAAIQ"]
[Sun Apr 26 17:21:55.071030 2026] [:error] [pid 8390:tid 8463] [client 20.215.250.178:64678] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/htto.php"] [unique_id "ae3ZM4GPtFK_i9p5yxQZDQAAAIw"]
[Sun Apr 26 17:21:55.736769 2026] [:error] [pid 22573:tid 22626] [client 20.111.17.80:17958] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xmu.php"] [unique_id "ae3ZM3B3EmQlD4yKUt_PFAAAAZM"]
[Sun Apr 26 17:21:56.331962 2026] [:error] [pid 8390:tid 8454] [client 20.111.17.80:18419] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a5.php"] [unique_id "ae3ZNIGPtFK_i9p5yxQZFAAAAIM"]
[Sun Apr 26 17:21:56.634145 2026] [:error] [pid 8491:tid 8521] [client 20.215.250.178:64642] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/public/vx.php"] [unique_id "ae3ZNCq7I7e6CJooQM3tDwAAANY"]
[Sun Apr 26 17:21:57.553898 2026] [:error] [pid 8491:tid 8517] [client 20.111.17.80:18251] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ai.php"] [unique_id "ae3ZNSq7I7e6CJooQM3tEAAAANI"]
[Sun Apr 26 17:21:57.644591 2026] [:error] [pid 8491:tid 8508] [client 20.215.250.178:64695] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/htto.php"] [unique_id "ae3ZNSq7I7e6CJooQM3tEQAAAMk"]
[Sun Apr 26 17:21:58.148832 2026] [:error] [pid 22572:tid 22578] [client 20.111.17.80:18399] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sd.php"] [unique_id "ae3ZNtXOViWCFU-pZzABtQAAAUA"]
[Sun Apr 26 17:21:58.616718 2026] [:error] [pid 13137:tid 13140] [client 20.111.17.80:18364] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ai.php"] [unique_id "ae3ZNt0RB4J0o4h5neFWdAAAAgA"]
[Sun Apr 26 17:21:59.417720 2026] [:error] [pid 8383:tid 8417] [client 20.215.250.178:64764] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/htto.php"] [unique_id "ae3ZN9Fa2S3EsATMdWMYtQAAABQ"]
[Sun Apr 26 17:21:59.424796 2026] [:error] [pid 8390:tid 8464] [client 20.215.250.178:64702] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/elp.php"] [unique_id "ae3ZN4GPtFK_i9p5yxQZGQAAAI0"]
[Sun Apr 26 17:22:00.760467 2026] [:error] [pid 8491:tid 8512] [client 20.111.17.80:17920] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ai.php"] [unique_id "ae3ZOCq7I7e6CJooQM3tFAAAAM0"]
[Sun Apr 26 17:22:01.092593 2026] [:error] [pid 13197:tid 13246] [client 20.111.17.80:18139] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sd.php"] [unique_id "ae3ZOd3kktFKdSxTrBvHawAAAs4"]
[Sun Apr 26 17:22:01.290452 2026] [:error] [pid 22573:tid 22630] [client 20.215.250.178:64657] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gpt-sh.php"] [unique_id "ae3ZOXB3EmQlD4yKUt_PGAAAAZc"]
[Sun Apr 26 17:22:01.535879 2026] [:error] [pid 8390:tid 8451] [client 20.215.250.178:64681] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/elp.php"] [unique_id "ae3ZOYGPtFK_i9p5yxQZHwAAAIA"]
[Sun Apr 26 17:22:01.881804 2026] [:error] [pid 8390:tid 8469] [client 20.111.17.80:18394] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ai.php"] [unique_id "ae3ZOYGPtFK_i9p5yxQZIAAAAJI"]
[Sun Apr 26 17:22:02.979698 2026] [:error] [pid 8491:tid 8507] [client 20.111.17.80:18026] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sd.php"] [unique_id "ae3ZOiq7I7e6CJooQM3tFQAAAMg"]
[Sun Apr 26 17:22:03.486930 2026] [:error] [pid 13137:tid 13148] [client 20.215.250.178:64718] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/elp.php"] [unique_id "ae3ZO90RB4J0o4h5neFWfgAAAgg"]
[Sun Apr 26 17:22:03.685297 2026] [:error] [pid 22572:tid 22595] [client 20.111.17.80:18332] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jga.php"] [unique_id "ae3ZO9XOViWCFU-pZzABwAAAAVE"]
[Sun Apr 26 17:22:04.279067 2026] [:error] [pid 22572:tid 22593] [client 20.215.250.178:64675] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gpt-sh.php"] [unique_id "ae3ZPNXOViWCFU-pZzABxQAAAU8"]
[Sun Apr 26 17:22:05.064965 2026] [:error] [pid 8383:tid 8397] [client 20.111.17.80:18412] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sd.php"] [unique_id "ae3ZPdFa2S3EsATMdWMYvgAAAAA"]
[Sun Apr 26 17:22:05.817373 2026] [:error] [pid 22572:tid 22585] [client 20.215.250.178:64698] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gpt-sh.php"] [unique_id "ae3ZPdXOViWCFU-pZzAByAAAAUc"]
[Sun Apr 26 17:22:05.840961 2026] [:error] [pid 13197:tid 13239] [client 20.111.17.80:18038] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jga.php"] [unique_id "ae3ZPd3kktFKdSxTrBvHcQAAAsg"]
[Sun Apr 26 17:22:05.847364 2026] [:error] [pid 22572:tid 22594] [client 20.215.250.178:63461] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/elp.php"] [unique_id "ae3ZPdXOViWCFU-pZzAByQAAAVA"]
[Sun Apr 26 17:22:07.248107 2026] [:error] [pid 22572:tid 22583] [client 20.111.17.80:18028] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jga.php"] [unique_id "ae3ZP9XOViWCFU-pZzABywAAAUU"]
[Sun Apr 26 17:22:07.422143 2026] [:error] [pid 13137:tid 13141] [client 20.215.250.178:63474] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zc-243.php"] [unique_id "ae3ZP90RB4J0o4h5neFWgAAAAgE"]
[Sun Apr 26 17:22:09.106500 2026] [:error] [pid 22573:tid 22622] [client 20.111.17.80:18241] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jga.php"] [unique_id "ae3ZQXB3EmQlD4yKUt_PHAAAAY8"]
[Sun Apr 26 17:22:09.410361 2026] [:error] [pid 22572:tid 22595] [client 20.215.250.178:64714] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zc-243.php"] [unique_id "ae3ZQdXOViWCFU-pZzAB0AAAAVE"]
[Sun Apr 26 17:22:10.586964 2026] [:error] [pid 8491:tid 8510] [client 20.111.17.80:18395] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/term.php"] [unique_id "ae3ZQiq7I7e6CJooQM3tFwAAAMs"]
[Sun Apr 26 17:22:10.901853 2026] [:error] [pid 22572:tid 22591] [client 20.215.250.178:64720] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gpt-sh.php"] [unique_id "ae3ZQtXOViWCFU-pZzAB0QAAAU0"]
[Sun Apr 26 17:22:11.133746 2026] [:error] [pid 13137:tid 13158] [client 20.215.250.178:64730] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zc-243.php"] [unique_id "ae3ZQ90RB4J0o4h5neFWgQAAAhE"]
[Sun Apr 26 17:22:11.701997 2026] [:error] [pid 13137:tid 13147] [client 20.111.17.80:18429] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/term.php"] [unique_id "ae3ZQ90RB4J0o4h5neFWgwAAAgc"]
[Sun Apr 26 17:22:12.742919 2026] [:error] [pid 22572:tid 22585] [client 20.215.250.178:64706] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zc-243.php"] [unique_id "ae3ZRNXOViWCFU-pZzAB0wAAAUc"]
[Sun Apr 26 17:22:12.937164 2026] [:error] [pid 22573:tid 22612] [client 20.215.250.178:64748] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jp.php"] [unique_id "ae3ZRHB3EmQlD4yKUt_PIgAAAYY"]
[Sun Apr 26 17:22:13.878878 2026] [:error] [pid 13137:tid 13165] [client 20.215.250.178:64699] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bkyac.php"] [unique_id "ae3ZRd0RB4J0o4h5neFWhwAAAhg"]
[Sun Apr 26 17:22:13.968155 2026] [:error] [pid 22572:tid 22580] [client 20.111.17.80:18143] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/term.php"] [unique_id "ae3ZRdXOViWCFU-pZzAB1wAAAUI"]
[Sun Apr 26 17:22:14.327209 2026] [:error] [pid 22572:tid 22597] [client 20.215.250.178:64761] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jp.php"] [unique_id "ae3ZRtXOViWCFU-pZzAB2AAAAVM"]
[Sun Apr 26 17:22:14.972659 2026] [:error] [pid 8383:tid 8414] [client 20.215.250.178:64648] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bkyac.php"] [unique_id "ae3ZRtFa2S3EsATMdWMYzgAAABE"]
[Sun Apr 26 17:22:15.068074 2026] [:error] [pid 13137:tid 13149] [client 20.111.17.80:18006] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/term.php"] [unique_id "ae3ZR90RB4J0o4h5neFWiQAAAgk"]
[Sun Apr 26 17:22:16.248471 2026] [:error] [pid 22572:tid 22585] [client 20.111.17.80:18337] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gk.php"] [unique_id "ae3ZSNXOViWCFU-pZzAB3gAAAUc"]
[Sun Apr 26 17:22:16.431176 2026] [:error] [pid 8390:tid 8460] [client 20.215.250.178:64641] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jp.php"] [unique_id "ae3ZSIGPtFK_i9p5yxQZJgAAAIk"]
[Sun Apr 26 17:22:16.877181 2026] [:error] [pid 8385:tid 8444] [client 20.215.250.178:64656] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bkyac.php"] [unique_id "ae3ZSDOy7_J84Wx3-oy9BAAAAFQ"]
[Sun Apr 26 17:22:17.279531 2026] [:error] [pid 16574:tid 16633] [client 20.111.17.80:18250] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gk.php"] [unique_id "ae3ZSX5MsX8wRQr99nYnawAAA1M"]
[Sun Apr 26 17:22:18.065669 2026] [:error] [pid 8491:tid 8520] [client 20.111.17.80:18155] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gk.php"] [unique_id "ae3ZSiq7I7e6CJooQM3tGQAAANU"]
[Sun Apr 26 17:22:18.583379 2026] [:error] [pid 8491:tid 8500] [client 20.111.17.80:18251] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gk.php"] [unique_id "ae3ZSiq7I7e6CJooQM3tGgAAAME"]
[Sun Apr 26 17:22:18.632772 2026] [:error] [pid 13197:tid 13235] [client 20.215.250.178:64724] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bkyac.php"] [unique_id "ae3ZSt3kktFKdSxTrBvHcwAAAsQ"]
[Sun Apr 26 17:22:19.421668 2026] [:error] [pid 13137:tid 13161] [client 20.215.250.178:64693] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jp.php"] [unique_id "ae3ZS90RB4J0o4h5neFWjAAAAhQ"]
[Sun Apr 26 17:22:19.455989 2026] [:error] [pid 13137:tid 13145] [client 20.111.17.80:18058] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xmu.php"] [unique_id "ae3ZS90RB4J0o4h5neFWjgAAAgU"]
[Sun Apr 26 17:22:20.435728 2026] [:error] [pid 22573:tid 22609] [client 20.215.250.178:63427] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wziar1.php"] [unique_id "ae3ZTHB3EmQlD4yKUt_PJAAAAYM"]
[Sun Apr 26 17:22:21.199703 2026] [:error] [pid 16515:tid 16533] [client 20.111.17.80:18355] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xmu.php"] [unique_id "ae3ZTVtDrUmgHSvpuLwnbAAAAk8"]
[Sun Apr 26 17:22:21.682457 2026] [:error] [pid 8491:tid 8508] [client 20.215.250.178:64654] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aevly.php"] [unique_id "ae3ZTSq7I7e6CJooQM3tHQAAAMk"]
[Sun Apr 26 17:22:22.057302 2026] [:error] [pid 13137:tid 13147] [client 20.215.250.178:63445] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wziar1.php"] [unique_id "ae3ZTt0RB4J0o4h5neFWkgAAAgc"]
[Sun Apr 26 17:22:23.398495 2026] [:error] [pid 13137:tid 13153] [client 20.111.17.80:18420] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xmu.php"] [unique_id "ae3ZT90RB4J0o4h5neFWkwAAAgw"]
[Sun Apr 26 17:22:24.609900 2026] [:error] [pid 8390:tid 8453] [client 20.215.250.178:64734] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wziar1.php"] [unique_id "ae3ZUIGPtFK_i9p5yxQZLQAAAII"]
[Sun Apr 26 17:22:24.758848 2026] [:error] [pid 8390:tid 8456] [client 20.215.250.178:64668] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aevly.php"] [unique_id "ae3ZUIGPtFK_i9p5yxQZLgAAAIU"]
[Sun Apr 26 17:22:25.336003 2026] [:error] [pid 13137:tid 13155] [client 20.111.17.80:17999] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xmu.php"] [unique_id "ae3ZUd0RB4J0o4h5neFWlgAAAg4"]
[Sun Apr 26 17:22:26.961319 2026] [:error] [pid 8385:tid 8425] [client 20.111.17.80:18411] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sd.php"] [unique_id "ae3ZUjOy7_J84Wx3-oy9BwAAAEE"]
[Sun Apr 26 17:22:27.006213 2026] [:error] [pid 13197:tid 13256] [client 20.215.250.178:64673] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wziar1.php"] [unique_id "ae3ZU93kktFKdSxTrBvHdQAAAtg"]
[Sun Apr 26 17:22:28.695156 2026] [:error] [pid 8383:tid 8404] [client 20.215.250.178:63360] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aevly.php"] [unique_id "ae3ZVNFa2S3EsATMdWMY1wAAAAc"]
[Sun Apr 26 17:22:29.416473 2026] [:error] [pid 22573:tid 22615] [client 20.215.250.178:64646] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/public/oLEzRVqmJJPFSucdefault.php"] [unique_id "ae3ZVXB3EmQlD4yKUt_PLAAAAYg"]
[Sun Apr 26 17:22:30.051439 2026] [:error] [pid 22573:tid 22629] [client 20.111.17.80:18381] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sd.php"] [unique_id "ae3ZVnB3EmQlD4yKUt_PLQAAAZY"]
[Sun Apr 26 17:22:31.436089 2026] [:error] [pid 16515:tid 16520] [client 20.215.250.178:64679] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/public/oLEzRVqmJJPFSucdefault.php"] [unique_id "ae3ZV1tDrUmgHSvpuLwndAAAAkI"]
[Sun Apr 26 17:22:31.626133 2026] [:error] [pid 13197:tid 13246] [client 20.215.250.178:64752] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aevly.php"] [unique_id "ae3ZV93kktFKdSxTrBvHdgAAAs4"]
[Sun Apr 26 17:22:32.790960 2026] [:error] [pid 13137:tid 13142] [client 20.111.17.80:18333] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sd.php"] [unique_id "ae3ZWN0RB4J0o4h5neFWnAAAAgI"]
[Sun Apr 26 17:22:34.896280 2026] [:error] [pid 8491:tid 8523] [client 20.111.17.80:17996] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sd.php"] [unique_id "ae3ZWiq7I7e6CJooQM3tIAAAANc"]
[Sun Apr 26 17:22:36.933362 2026] [:error] [pid 8383:tid 8417] [client 20.215.250.178:64684] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/public/oLEzRVqmJJPFSucdefault.php"] [unique_id "ae3ZXNFa2S3EsATMdWMY4AAAABQ"]
[Sun Apr 26 17:22:38.457621 2026] [:error] [pid 8383:tid 8400] [client 20.215.250.178:64722] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ta0ol.php"] [unique_id "ae3ZXtFa2S3EsATMdWMY5wAAAAM"]
[Sun Apr 26 17:22:39.720009 2026] [:error] [pid 8390:tid 8464] [client 20.215.250.178:64732] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ta0ol.php"] [unique_id "ae3ZX4GPtFK_i9p5yxQZQAAAAI0"]
[Sun Apr 26 17:22:40.031646 2026] [:error] [pid 8390:tid 8455] [client 20.215.250.178:64716] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/public/oLEzRVqmJJPFSucdefault.php"] [unique_id "ae3ZYIGPtFK_i9p5yxQZQgAAAIQ"]
[Sun Apr 26 17:22:42.486591 2026] [proxy_fcgi:error] [pid 8390:tid 8459] [client 20.215.250.178:64653] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 17:22:42.538922 2026] [proxy_fcgi:error] [pid 8390:tid 8465] [client 20.215.250.178:64644] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 17:22:42.769166 2026] [proxy_fcgi:error] [pid 8390:tid 8468] [client 20.215.250.178:64653] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 17:22:42.795003 2026] [proxy_fcgi:error] [pid 8390:tid 8472] [client 20.215.250.178:64644] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 17:22:43.057081 2026] [proxy_fcgi:error] [pid 8390:tid 8460] [client 20.215.250.178:64644] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 17:22:43.063025 2026] [proxy_fcgi:error] [pid 8390:tid 8454] [client 20.215.250.178:64653] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 17:22:43.315957 2026] [proxy_fcgi:error] [pid 8390:tid 8471] [client 20.215.250.178:64644] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 17:22:43.579496 2026] [proxy_fcgi:error] [pid 8390:tid 8470] [client 20.215.250.178:64644] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 17:22:43.649572 2026] [proxy_fcgi:error] [pid 8390:tid 8467] [client 20.215.250.178:64653] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 17:22:43.947375 2026] [proxy_fcgi:error] [pid 8390:tid 8466] [client 20.215.250.178:64653] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 17:22:44.007885 2026] [:error] [pid 8390:tid 8453] [client 20.215.250.178:64644] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cilus.php"] [unique_id "ae3ZZIGPtFK_i9p5yxQZTwAAAII"]
[Sun Apr 26 17:22:44.229097 2026] [:error] [pid 8390:tid 8457] [client 20.215.250.178:64653] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bkyac.php"] [unique_id "ae3ZZIGPtFK_i9p5yxQZUAAAAIY"]
[Sun Apr 26 17:22:45.672361 2026] [:error] [pid 22573:tid 22623] [client 20.215.250.178:64697] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cilus.php"] [unique_id "ae3ZZXB3EmQlD4yKUt_PQwAAAZA"]
[Sun Apr 26 17:22:45.922296 2026] [:error] [pid 13137:tid 13142] [client 20.215.250.178:63447] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bkyac.php"] [unique_id "ae3ZZd0RB4J0o4h5neFWowAAAgI"]
[Sun Apr 26 17:22:47.208442 2026] [:error] [pid 22573:tid 22625] [client 20.215.250.178:64712] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bkyac.php"] [unique_id "ae3ZZ3B3EmQlD4yKUt_PSAAAAZI"]
[Sun Apr 26 17:22:47.597685 2026] [:error] [pid 22573:tid 22611] [client 20.215.250.178:64708] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cilus.php"] [unique_id "ae3ZZ3B3EmQlD4yKUt_PSgAAAYU"]
[Sun Apr 26 17:22:48.593551 2026] [:error] [pid 8390:tid 8469] [client 20.215.250.178:63478] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bkyac.php"] [unique_id "ae3ZaIGPtFK_i9p5yxQZVQAAAJI"]
[Sun Apr 26 17:22:48.754216 2026] [:error] [pid 22573:tid 22622] [client 20.215.250.178:64728] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cilus.php"] [unique_id "ae3ZaHB3EmQlD4yKUt_PTgAAAY8"]
[Sun Apr 26 17:22:50.249094 2026] [:error] [pid 8383:tid 8413] [client 20.215.250.178:63431] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mh.php"] [unique_id "ae3ZatFa2S3EsATMdWMY_AAAABA"]
[Sun Apr 26 17:22:50.420745 2026] [:error] [pid 8383:tid 8412] [client 20.215.250.178:64760] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wziar1.php"] [unique_id "ae3ZatFa2S3EsATMdWMY_QAAAA8"]
[Sun Apr 26 17:22:51.075431 2026] [:error] [pid 8383:tid 8401] [client 20.215.250.178:64674] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wziar1.php"] [unique_id "ae3Za9Fa2S3EsATMdWMZAAAAAAQ"]
[Sun Apr 26 17:22:51.974599 2026] [:error] [pid 8383:tid 8408] [client 20.215.250.178:64676] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wziar1.php"] [unique_id "ae3Za9Fa2S3EsATMdWMZAwAAAAs"]
[Sun Apr 26 17:22:52.007310 2026] [:error] [pid 8383:tid 8404] [client 20.215.250.178:64683] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mh.php"] [unique_id "ae3ZbNFa2S3EsATMdWMZBAAAAAc"]
[Sun Apr 26 17:22:52.990357 2026] [:error] [pid 8385:tid 8435] [client 20.215.250.178:64685] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mh.php"] [unique_id "ae3ZbDOy7_J84Wx3-oy9CwAAAEs"]
[Sun Apr 26 17:22:53.521122 2026] [:error] [pid 8390:tid 8473] [client 20.215.250.178:64765] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wziar1.php"] [unique_id "ae3ZbYGPtFK_i9p5yxQZXAAAAJY"]
[Sun Apr 26 17:22:54.615867 2026] [:error] [pid 13137:tid 13145] [client 20.215.250.178:63469] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mh.php"] [unique_id "ae3Zbt0RB4J0o4h5neFWqQAAAgU"]
[Sun Apr 26 17:22:54.745539 2026] [:error] [pid 8385:tid 8427] [client 20.215.250.178:64766] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/public/oLEzRVqmJJPFSucdefault.php"] [unique_id "ae3ZbjOy7_J84Wx3-oy9DQAAAEM"]
[Sun Apr 26 17:22:56.051968 2026] [:error] [pid 13137:tid 13158] [client 20.215.250.178:64658] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fone1.php"] [unique_id "ae3ZcN0RB4J0o4h5neFWqwAAAhE"]
[Sun Apr 26 17:22:57.421684 2026] [:error] [pid 22573:tid 22611] [client 20.215.250.178:64652] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/public/oLEzRVqmJJPFSucdefault.php"] [unique_id "ae3ZcXB3EmQlD4yKUt_PXwAAAYU"]
[Sun Apr 26 17:22:58.189561 2026] [:error] [pid 22573:tid 22610] [client 20.215.250.178:64711] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fone1.php"] [unique_id "ae3ZcnB3EmQlD4yKUt_PYwAAAYQ"]
[Sun Apr 26 17:22:58.424231 2026] [:error] [pid 22572:tid 22594] [client 20.215.250.178:63454] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/public/oLEzRVqmJJPFSucdefault.php"] [unique_id "ae3ZctXOViWCFU-pZzACBQAAAVA"]
[Sun Apr 26 17:23:00.211964 2026] [:error] [pid 8390:tid 8457] [client 20.215.250.178:64647] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fone1.php"] [unique_id "ae3ZdIGPtFK_i9p5yxQZZAAAAIY"]
[Sun Apr 26 17:23:00.432913 2026] [:error] [pid 22573:tid 22620] [client 20.215.250.178:63373] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/public/oLEzRVqmJJPFSucdefault.php"] [unique_id "ae3ZdHB3EmQlD4yKUt_PagAAAY0"]
[Sun Apr 26 17:23:02.129707 2026] [:error] [pid 16515:tid 16527] [client 20.215.250.178:64694] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fone1.php"] [unique_id "ae3ZdltDrUmgHSvpuLwnfQAAAkk"]
[Sun Apr 26 17:23:02.752797 2026] [:error] [pid 8383:tid 8416] [client 20.215.250.178:64650] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/auth.php"] [unique_id "ae3ZdtFa2S3EsATMdWMZDgAAABM"]
[Sun Apr 26 17:23:03.243308 2026] [:error] [pid 8390:tid 8461] [client 20.215.250.178:64757] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/7logs.php"] [unique_id "ae3Zd4GPtFK_i9p5yxQZaAAAAIo"]
[Sun Apr 26 17:23:04.448281 2026] [:error] [pid 8385:tid 8442] [client 20.215.250.178:64750] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/auth.php"] [unique_id "ae3ZeDOy7_J84Wx3-oy9DwAAAFI"]
[Sun Apr 26 17:23:04.765014 2026] [:error] [pid 8390:tid 8459] [client 20.215.250.178:64739] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/7logs.php"] [unique_id "ae3ZeIGPtFK_i9p5yxQZawAAAIg"]
[Sun Apr 26 17:23:05.347949 2026] [:error] [pid 13137:tid 13153] [client 20.215.250.178:64700] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/auth.php"] [unique_id "ae3Zed0RB4J0o4h5neFWsQAAAgw"]
[Sun Apr 26 17:23:06.940539 2026] [:error] [pid 8383:tid 8402] [client 20.215.250.178:64741] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/auth.php"] [unique_id "ae3ZetFa2S3EsATMdWMZEwAAAAU"]
[Sun Apr 26 17:23:07.720709 2026] [:error] [pid 8385:tid 8440] [client 20.215.250.178:64735] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/7logs.php"] [unique_id "ae3ZezOy7_J84Wx3-oy9EwAAAFA"]
[Sun Apr 26 17:23:09.176576 2026] [:error] [pid 8383:tid 8399] [client 20.215.250.178:64666] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ortasekerli1.php"] [unique_id "ae3ZfdFa2S3EsATMdWMZGgAAAAI"]
[Sun Apr 26 17:23:09.431000 2026] [:error] [pid 8390:tid 8462] [client 20.215.250.178:64701] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/7logs.php"] [unique_id "ae3ZfYGPtFK_i9p5yxQZbQAAAIs"]
[Sun Apr 26 17:23:10.544104 2026] [:error] [pid 8383:tid 8414] [client 20.215.250.178:64686] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ortasekerli1.php"] [unique_id "ae3ZftFa2S3EsATMdWMZHwAAABE"]
[Sun Apr 26 17:23:11.092048 2026] [:error] [pid 22573:tid 22630] [client 20.215.250.178:63376] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "ae3Zf3B3EmQlD4yKUt_PiwAAAZc"]
[Sun Apr 26 17:23:11.678965 2026] [:error] [pid 8390:tid 8475] [client 20.215.250.178:63389] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ortasekerli1.php"] [unique_id "ae3Zf4GPtFK_i9p5yxQZbwAAAJg"]
[Sun Apr 26 17:23:12.450067 2026] [:error] [pid 8385:tid 8424] [client 20.215.250.178:64651] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "ae3ZgDOy7_J84Wx3-oy9FAAAAEA"]
[Sun Apr 26 17:23:13.046098 2026] [:error] [pid 8383:tid 8408] [client 20.215.250.178:64745] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ortasekerli1.php"] [unique_id "ae3ZgdFa2S3EsATMdWMZKgAAAAs"]
[Sun Apr 26 17:23:14.422146 2026] [:error] [pid 8390:tid 8454] [client 20.215.250.178:63434] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "ae3ZgoGPtFK_i9p5yxQZdAAAAIM"]
[Sun Apr 26 17:23:16.322905 2026] [:error] [pid 22572:tid 22591] [client 20.215.250.178:63425] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/about.php"] [unique_id "ae3ZhNXOViWCFU-pZzACEwAAAU0"]
[Sun Apr 26 17:23:16.411987 2026] [:error] [pid 22572:tid 22594] [client 20.215.250.178:64687] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "ae3ZhNXOViWCFU-pZzACFAAAAVA"]
[Sun Apr 26 17:23:17.803564 2026] [:error] [pid 13137:tid 13156] [client 20.215.250.178:64704] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/as.php"] [unique_id "ae3Zhd0RB4J0o4h5neFWuQAAAg8"]
[Sun Apr 26 17:23:18.244005 2026] [:error] [pid 8491:tid 8521] [client 20.215.250.178:63422] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/about.php"] [unique_id "ae3Zhiq7I7e6CJooQM3tJAAAANY"]
[Sun Apr 26 17:23:18.912996 2026] [:error] [pid 8383:tid 8416] [client 20.215.250.178:63436] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/as.php"] [unique_id "ae3ZhtFa2S3EsATMdWMZMQAAABM"]
[Sun Apr 26 17:23:19.333069 2026] [:error] [pid 8390:tid 8458] [client 20.215.250.178:64731] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/about.php"] [unique_id "ae3Zh4GPtFK_i9p5yxQZggAAAIc"]
[Sun Apr 26 17:23:19.664553 2026] [:error] [pid 8383:tid 8417] [client 20.215.250.178:63487] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/as.php"] [unique_id "ae3Zh9Fa2S3EsATMdWMZMwAAABQ"]
[Sun Apr 26 17:23:20.992327 2026] [:error] [pid 8383:tid 8400] [client 20.215.250.178:63470] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/as.php"] [unique_id "ae3ZiNFa2S3EsATMdWMZOQAAAAM"]
[Sun Apr 26 17:23:21.288023 2026] [:error] [pid 8390:tid 8458] [client 20.215.250.178:63441] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/about.php"] [unique_id "ae3ZiYGPtFK_i9p5yxQZhwAAAIc"]
[Sun Apr 26 17:23:22.052384 2026] [:error] [pid 8383:tid 8409] [client 20.215.250.178:64677] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ctex1.php"] [unique_id "ae3ZitFa2S3EsATMdWMZPQAAAAw"]
[Sun Apr 26 17:23:23.322321 2026] [:error] [pid 22573:tid 22631] [client 20.215.250.178:64670] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-png.php"] [unique_id "ae3Zi3B3EmQlD4yKUt_PpAAAAZg"]
[Sun Apr 26 17:23:24.849810 2026] [:error] [pid 8491:tid 8517] [client 20.215.250.178:64749] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ctex1.php"] [unique_id "ae3ZjCq7I7e6CJooQM3tKAAAANI"]
[Sun Apr 26 17:23:25.732115 2026] [:error] [pid 8390:tid 8451] [client 20.215.250.178:63430] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-png.php"] [unique_id "ae3ZjYGPtFK_i9p5yxQZigAAAIA"]
[Sun Apr 26 17:23:29.084112 2026] [:error] [pid 8390:tid 8456] [client 20.215.250.178:61906] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-png.php"] [unique_id "ae3ZkYGPtFK_i9p5yxQZlgAAAIU"]
[Sun Apr 26 17:23:29.213182 2026] [:error] [pid 13137:tid 13143] [client 20.215.250.178:64715] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ctex1.php"] [unique_id "ae3Zkd0RB4J0o4h5neFWvgAAAgM"]
[Sun Apr 26 17:23:30.894353 2026] [:error] [pid 22573:tid 22611] [client 20.215.250.178:63412] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-png.php"] [unique_id "ae3ZknB3EmQlD4yKUt_PuQAAAYU"]
[Sun Apr 26 17:23:31.643025 2026] [:error] [pid 22572:tid 22582] [client 20.215.250.178:63442] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ctex1.php"] [unique_id "ae3Zk9XOViWCFU-pZzACIQAAAUQ"]
[Sun Apr 26 17:23:34.089748 2026] [:error] [pid 8383:tid 8402] [client 20.215.250.178:63390] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lb.php"] [unique_id "ae3ZltFa2S3EsATMdWMZTAAAAAU"]
[Sun Apr 26 17:23:35.554567 2026] [:error] [pid 16515:tid 16534] [client 20.215.250.178:64763] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tx79.php"] [unique_id "ae3Zl1tDrUmgHSvpuLwngAAAAlA"]
[Sun Apr 26 17:23:35.822206 2026] [:error] [pid 22573:tid 22610] [client 20.215.250.178:63463] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lb.php"] [unique_id "ae3Zl3B3EmQlD4yKUt_PygAAAYQ"]
[Sun Apr 26 17:23:39.045097 2026] [:error] [pid 13197:tid 13242] [client 20.215.250.178:63472] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tx79.php"] [unique_id "ae3Zm93kktFKdSxTrBvHgAAAAss"]
[Sun Apr 26 17:23:39.527983 2026] [:error] [pid 13197:tid 13252] [client 20.215.250.178:63476] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lb.php"] [unique_id "ae3Zm93kktFKdSxTrBvHgQAAAtQ"]
[Sun Apr 26 17:23:42.523892 2026] [:error] [pid 16574:tid 16607] [client 20.215.250.178:64691] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tx79.php"] [unique_id "ae3Znn5MsX8wRQr99nYndAAAA0M"]
[Sun Apr 26 17:23:45.939375 2026] [proxy_fcgi:error] [pid 22572:tid 22589] [client 20.215.250.178:64662] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 17:23:46.305923 2026] [proxy_fcgi:error] [pid 22572:tid 22578] [client 20.215.250.178:64756] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 17:23:46.589100 2026] [proxy_fcgi:error] [pid 22572:tid 22587] [client 20.215.250.178:64756] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 17:23:46.875963 2026] [proxy_fcgi:error] [pid 22572:tid 22597] [client 20.215.250.178:64756] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 17:23:47.172727 2026] [proxy_fcgi:error] [pid 22572:tid 22581] [client 20.215.250.178:64756] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 17:23:47.546098 2026] [proxy_fcgi:error] [pid 22572:tid 22585] [client 20.215.250.178:64662] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 17:23:48.078312 2026] [proxy_fcgi:error] [pid 22572:tid 22589] [client 20.215.250.178:64662] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 17:23:48.336560 2026] [proxy_fcgi:error] [pid 22572:tid 22602] [client 20.215.250.178:64662] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 17:23:48.596003 2026] [proxy_fcgi:error] [pid 22572:tid 22587] [client 20.215.250.178:64662] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 17:23:48.617442 2026] [proxy_fcgi:error] [pid 22572:tid 22581] [client 20.215.250.178:64756] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 17:23:48.850847 2026] [:error] [pid 22572:tid 22593] [client 20.215.250.178:64662] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/classwithtostring.php"] [unique_id "ae3ZpNXOViWCFU-pZzACSwAAAU8"]
[Sun Apr 26 17:23:48.897188 2026] [:error] [pid 22572:tid 22600] [client 20.215.250.178:64756] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ortasekerli1.php"] [unique_id "ae3ZpNXOViWCFU-pZzACTAAAAVY"]
[Sun Apr 26 17:23:52.309814 2026] [:error] [pid 8383:tid 8408] [client 20.215.250.178:64736] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ortasekerli1.php"] [unique_id "ae3ZqNFa2S3EsATMdWMZmAAAAAs"]
[Sun Apr 26 17:23:52.490056 2026] [:error] [pid 8383:tid 8399] [client 20.215.250.178:64682] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/classwithtostring.php"] [unique_id "ae3ZqNFa2S3EsATMdWMZmQAAAAI"]
[Sun Apr 26 17:23:55.240671 2026] [:error] [pid 8383:tid 8398] [client 20.215.250.178:63364] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ortasekerli1.php"] [unique_id "ae3Zq9Fa2S3EsATMdWMZpQAAAAE"]
[Sun Apr 26 17:23:58.609323 2026] [:error] [pid 8383:tid 8399] [client 20.215.250.178:64740] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/classwithtostring.php"] [unique_id "ae3ZrtFa2S3EsATMdWMZrgAAAAI"]
[Sun Apr 26 17:23:59.031779 2026] [:error] [pid 8385:tid 8429] [client 20.215.250.178:63370] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ortasekerli1.php"] [unique_id "ae3ZrzOy7_J84Wx3-oy9MgAAAEU"]
[Sun Apr 26 17:23:59.903437 2026] [:error] [pid 13137:tid 13155] [client 20.215.250.178:63444] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/classwithtostring.php"] [unique_id "ae3Zr90RB4J0o4h5neFWyQAAAg4"]
[Sun Apr 26 17:24:02.371090 2026] [:error] [pid 13137:tid 13146] [client 20.215.250.178:63391] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/about.php"] [unique_id "ae3Zst0RB4J0o4h5neFWygAAAgY"]
[Sun Apr 26 17:24:02.432781 2026] [:error] [pid 22573:tid 22612] [client 20.215.250.178:63402] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/amwxl.php"] [unique_id "ae3ZsnB3EmQlD4yKUt_QEwAAAYY"]
[Sun Apr 26 17:24:04.596156 2026] [:error] [pid 16515:tid 16542] [client 20.215.250.178:63365] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/amwxl.php"] [unique_id "ae3ZtFtDrUmgHSvpuLwnlAAAAlg"]
[Sun Apr 26 17:24:05.972869 2026] [:error] [pid 16515:tid 16538] [client 20.215.250.178:63375] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/about.php"] [unique_id "ae3ZtVtDrUmgHSvpuLwnmwAAAlQ"]
[Sun Apr 26 17:24:07.960081 2026] [:error] [pid 8383:tid 8416] [client 20.215.250.178:63437] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/amwxl.php"] [unique_id "ae3Zt9Fa2S3EsATMdWMZvgAAABM"]
[Sun Apr 26 17:24:09.240895 2026] [:error] [pid 13137:tid 13152] [client 20.215.250.178:64737] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/about.php"] [unique_id "ae3Zud0RB4J0o4h5neFW2gAAAgs"]
[Sun Apr 26 17:24:09.682004 2026] [:error] [pid 22573:tid 22606] [client 20.215.250.178:63440] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/amwxl.php"] [unique_id "ae3ZuXB3EmQlD4yKUt_QJQAAAYA"]
[Sun Apr 26 17:24:11.081156 2026] [:error] [pid 22573:tid 22612] [client 20.215.250.178:63465] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/about.php"] [unique_id "ae3Zu3B3EmQlD4yKUt_QNQAAAYY"]
[Sun Apr 26 17:24:13.193136 2026] [:error] [pid 8383:tid 8407] [client 20.215.250.178:64751] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-png.php"] [unique_id "ae3ZvdFa2S3EsATMdWMZ2QAAAAo"]
[Sun Apr 26 17:24:13.556756 2026] [:error] [pid 8390:tid 8463] [client 20.215.250.178:61940] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wmore1.php"] [unique_id "ae3ZvYGPtFK_i9p5yxQZtgAAAIw"]
[Sun Apr 26 17:24:15.789318 2026] [:error] [pid 8383:tid 8397] [client 20.215.250.178:63397] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-png.php"] [unique_id "ae3Zv9Fa2S3EsATMdWMZ5QAAAAA"]
[Sun Apr 26 17:24:16.483005 2026] [:error] [pid 8390:tid 8462] [client 20.215.250.178:63382] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wmore1.php"] [unique_id "ae3ZwIGPtFK_i9p5yxQZwAAAAIs"]
[Sun Apr 26 17:24:18.188085 2026] [:error] [pid 22573:tid 22609] [client 20.215.250.178:63393] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-png.php"] [unique_id "ae3ZwnB3EmQlD4yKUt_QVAAAAYM"]
[Sun Apr 26 17:24:20.662146 2026] [:error] [pid 22573:tid 22630] [client 20.215.250.178:63362] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wmore1.php"] [unique_id "ae3ZxHB3EmQlD4yKUt_QXgAAAZc"]
[Sun Apr 26 17:24:21.332091 2026] [:error] [pid 16574:tid 16614] [client 20.215.250.178:63480] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-png.php"] [unique_id "ae3ZxX5MsX8wRQr99nYnkgAAA0o"]
[Sun Apr 26 17:24:23.161789 2026] [:error] [pid 22573:tid 22631] [client 20.215.250.178:63466] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wmore1.php"] [unique_id "ae3Zx3B3EmQlD4yKUt_QbAAAAZg"]
[Sun Apr 26 17:24:24.717943 2026] [:error] [pid 8385:tid 8441] [client 20.215.250.178:64669] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tx79.php"] [unique_id "ae3ZyDOy7_J84Wx3-oy9VAAAAFE"]
[Sun Apr 26 17:24:28.160671 2026] [:error] [pid 16515:tid 16542] [client 20.215.250.178:64713] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/userfuns.php"] [unique_id "ae3ZzFtDrUmgHSvpuLwnuwAAAlg"]
[Sun Apr 26 17:24:29.258583 2026] [:error] [pid 22573:tid 22616] [client 20.215.250.178:64762] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tx79.php"] [unique_id "ae3ZzXB3EmQlD4yKUt_QhQAAAYk"]
[Sun Apr 26 17:24:31.211493 2026] [:error] [pid 16515:tid 16538] [client 20.215.250.178:63385] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tx79.php"] [unique_id "ae3Zz1tDrUmgHSvpuLwnwgAAAlQ"]
[Sun Apr 26 17:24:32.178689 2026] [:error] [pid 22573:tid 22621] [client 20.215.250.178:63428] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tx79.php"] [unique_id "ae3Z0HB3EmQlD4yKUt_QmwAAAY4"]
[Sun Apr 26 17:24:32.286041 2026] [:error] [pid 8390:tid 8472] [client 20.215.250.178:63483] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/userfuns.php"] [unique_id "ae3Z0IGPtFK_i9p5yxQZ9QAAAJU"]
[Sun Apr 26 17:24:33.443480 2026] [:error] [pid 8390:tid 8453] [client 20.215.250.178:63392] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/userfuns.php"] [unique_id "ae3Z0YGPtFK_i9p5yxQZ-AAAAII"]
[Sun Apr 26 17:24:34.224040 2026] [:error] [pid 8390:tid 8468] [client 20.215.250.178:61841] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/8.php"] [unique_id "ae3Z0oGPtFK_i9p5yxQZ_AAAAJE"]
[Sun Apr 26 17:24:34.859506 2026] [:error] [pid 16574:tid 16604] [client 20.215.250.178:64743] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/userfuns.php"] [unique_id "ae3Z0n5MsX8wRQr99nYnmwAAA0A"]
[Sun Apr 26 17:24:36.200326 2026] [:error] [pid 22573:tid 22610] [client 20.215.250.178:63374] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/menu.php"] [unique_id "ae3Z1HB3EmQlD4yKUt_QrQAAAYQ"]
[Sun Apr 26 17:24:37.503342 2026] [:error] [pid 8385:tid 8430] [client 20.215.250.178:64680] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/8.php"] [unique_id "ae3Z1TOy7_J84Wx3-oy9YQAAAEY"]
[Sun Apr 26 17:24:39.040807 2026] [:error] [pid 13137:tid 13157] [client 20.215.250.178:63419] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/menu.php"] [unique_id "ae3Z190RB4J0o4h5neFXGgAAAhA"]
[Sun Apr 26 17:24:41.058465 2026] [:error] [pid 22572:tid 22600] [client 20.215.250.178:63453] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/8.php"] [unique_id "ae3Z2dXOViWCFU-pZzAC1QAAAVY"]
[Sun Apr 26 17:24:42.366078 2026] [:error] [pid 22572:tid 22601] [client 20.215.250.178:64645] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/menu.php"] [unique_id "ae3Z2tXOViWCFU-pZzAC3QAAAVc"]
[Sun Apr 26 17:24:43.047860 2026] [:error] [pid 22572:tid 22594] [client 20.215.250.178:61845] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/8.php"] [unique_id "ae3Z29XOViWCFU-pZzAC4gAAAVA"]
[Sun Apr 26 17:24:46.477905 2026] [:error] [pid 22572:tid 22582] [client 20.215.250.178:64758] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ae3Z3tXOViWCFU-pZzAC6QAAAUQ"]
[Sun Apr 26 17:24:48.939762 2026] [proxy_fcgi:error] [pid 22573:tid 22609] [client 20.215.250.178:61904] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 17:24:49.224108 2026] [proxy_fcgi:error] [pid 22573:tid 22625] [client 20.215.250.178:61904] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 17:24:49.516113 2026] [proxy_fcgi:error] [pid 22573:tid 22613] [client 20.215.250.178:61904] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 17:24:49.810438 2026] [proxy_fcgi:error] [pid 22573:tid 22622] [client 20.215.250.178:61904] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 17:24:49.994050 2026] [proxy_fcgi:error] [pid 16515:tid 16540] [client 20.215.250.178:64707] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 17:24:50.099174 2026] [proxy_fcgi:error] [pid 22573:tid 22620] [client 20.215.250.178:61904] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 17:24:50.254074 2026] [proxy_fcgi:error] [pid 16515:tid 16531] [client 20.215.250.178:64707] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 17:24:50.388981 2026] [proxy_fcgi:error] [pid 22573:tid 22616] [client 20.215.250.178:61904] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 17:24:50.523369 2026] [proxy_fcgi:error] [pid 16515:tid 16533] [client 20.215.250.178:64707] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 17:24:50.724776 2026] [proxy_fcgi:error] [pid 22573:tid 22630] [client 20.215.250.178:61904] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 17:24:50.778044 2026] [:error] [pid 16515:tid 16522] [client 20.215.250.178:64707] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/classwithtostring.php"] [unique_id "ae3Z4ltDrUmgHSvpuLwn9gAAAkQ"]
[Sun Apr 26 17:24:51.003112 2026] [:error] [pid 22573:tid 22612] [client 20.215.250.178:61904] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bgymj.php"] [unique_id "ae3Z43B3EmQlD4yKUt_Q3QAAAYY"]
[Sun Apr 26 17:24:51.683953 2026] [:error] [pid 22573:tid 22631] [client 20.215.250.178:63416] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/classwithtostring.php"] [unique_id "ae3Z43B3EmQlD4yKUt_Q3gAAAZg"]
[Sun Apr 26 17:24:54.496118 2026] [:error] [pid 8390:tid 8454] [client 20.215.250.178:64759] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/classwithtostring.php"] [unique_id "ae3Z5oGPtFK_i9p5yxQaLQAAAIM"]
[Sun Apr 26 17:24:54.814295 2026] [:error] [pid 22573:tid 22631] [client 20.215.250.178:64725] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bgymj.php"] [unique_id "ae3Z5nB3EmQlD4yKUt_Q8gAAAZg"]
[Sun Apr 26 17:24:56.865860 2026] [:error] [pid 8491:tid 8506] [client 20.215.250.178:63420] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/classwithtostring.php"] [unique_id "ae3Z6Cq7I7e6CJooQM3tbgAAAMc"]
[Sun Apr 26 17:24:58.350265 2026] [:error] [pid 22572:tid 22589] [client 20.215.250.178:63456] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/amwxl.php"] [unique_id "ae3Z6tXOViWCFU-pZzAC_AAAAUs"]
[Sun Apr 26 17:24:59.195228 2026] [:error] [pid 16574:tid 16616] [client 20.215.250.178:61948] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bgymj.php"] [unique_id "ae3Z635MsX8wRQr99nYnsAAAA0s"]
[Sun Apr 26 17:24:59.295399 2026] [:error] [pid 22573:tid 22630] [client 20.215.250.178:63371] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/amwxl.php"] [unique_id "ae3Z63B3EmQlD4yKUt_RAgAAAZc"]
[Sun Apr 26 17:25:00.067940 2026] [:error] [pid 16574:tid 16608] [client 20.215.250.178:61918] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/amwxl.php"] [unique_id "ae3Z7H5MsX8wRQr99nYnswAAA0Q"]
[Sun Apr 26 17:25:00.973400 2026] [:error] [pid 8383:tid 8403] [client 20.215.250.178:63462] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/amwxl.php"] [unique_id "ae3Z7NFa2S3EsATMdWMaqQAAAAY"]
[Sun Apr 26 17:25:01.496423 2026] [:error] [pid 8383:tid 8419] [client 20.215.250.178:64640] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bgymj.php"] [unique_id "ae3Z7dFa2S3EsATMdWMaqwAAABY"]
[Sun Apr 26 17:25:03.401476 2026] [:error] [pid 8390:tid 8474] [client 20.215.250.178:63401] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/100.php"] [unique_id "ae3Z74GPtFK_i9p5yxQaPwAAAJc"]
[Sun Apr 26 17:25:05.334194 2026] [:error] [pid 16515:tid 16519] [client 20.215.250.178:64754] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wmore1.php"] [unique_id "ae3Z8VtDrUmgHSvpuLwoDAAAAkE"]
[Sun Apr 26 17:25:06.887437 2026] [:error] [pid 22572:tid 22580] [client 20.215.250.178:63377] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/100.php"] [unique_id "ae3Z8tXOViWCFU-pZzADDAAAAUI"]
[Sun Apr 26 17:25:08.916776 2026] [:error] [pid 22572:tid 22591] [client 20.215.250.178:63394] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wmore1.php"] [unique_id "ae3Z9NXOViWCFU-pZzADFgAAAU0"]
[Sun Apr 26 17:25:10.922900 2026] [:error] [pid 16515:tid 16524] [client 20.215.250.178:63406] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wmore1.php"] [unique_id "ae3Z9ltDrUmgHSvpuLwoGwAAAkY"]
[Sun Apr 26 17:25:12.187052 2026] [:error] [pid 8383:tid 8409] [client 20.215.250.178:61833] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/100.php"] [unique_id "ae3Z-NFa2S3EsATMdWMazAAAAAw"]
[Sun Apr 26 17:25:15.072223 2026] [:error] [pid 16515:tid 16525] [client 20.215.250.178:63361] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wmore1.php"] [unique_id "ae3Z-1tDrUmgHSvpuLwoJAAAAkc"]
[Sun Apr 26 17:25:15.460931 2026] [:error] [pid 8390:tid 8454] [client 20.215.250.178:63386] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/100.php"] [unique_id "ae3Z-4GPtFK_i9p5yxQaVgAAAIM"]
[Sun Apr 26 17:25:16.764111 2026] [:error] [pid 8491:tid 8511] [client 20.215.250.178:63363] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/userfuns.php"] [unique_id "ae3Z_Cq7I7e6CJooQM3teQAAAMw"]
[Sun Apr 26 17:25:18.492504 2026] [:error] [pid 16515:tid 16528] [client 20.215.250.178:61850] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/userfuns.php"] [unique_id "ae3Z_ltDrUmgHSvpuLwoKQAAAko"]
[Sun Apr 26 17:25:20.143670 2026] [:error] [pid 22572:tid 22586] [client 20.215.250.178:63424] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/userfuns.php"] [unique_id "ae3aANXOViWCFU-pZzADLgAAAUg"]
[Sun Apr 26 17:25:20.211908 2026] [:error] [pid 22572:tid 22595] [client 20.215.250.178:63473] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bolt.php"] [unique_id "ae3aANXOViWCFU-pZzADMAAAAVE"]
[Sun Apr 26 17:25:22.634104 2026] [:error] [pid 22573:tid 22628] [client 20.215.250.178:63455] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bolt.php"] [unique_id "ae3aAnB3EmQlD4yKUt_RbQAAAZU"]
[Sun Apr 26 17:25:24.127186 2026] [:error] [pid 16515:tid 16539] [client 20.215.250.178:63396] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/userfuns.php"] [unique_id "ae3aBFtDrUmgHSvpuLwoPwAAAlU"]
[Sun Apr 26 17:25:24.411213 2026] [:error] [pid 8491:tid 8505] [client 20.215.250.178:63446] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bolt.php"] [unique_id "ae3aBCq7I7e6CJooQM3tiwAAAMY"]
[Sun Apr 26 17:25:26.550046 2026] [:error] [pid 8383:tid 8411] [client 20.215.250.178:61922] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bolt.php"] [unique_id "ae3aBtFa2S3EsATMdWMa_wAAAA4"]
[Sun Apr 26 17:25:28.821931 2026] [:error] [pid 8390:tid 8457] [client 20.215.250.178:63410] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/menu.php"] [unique_id "ae3aCIGPtFK_i9p5yxQaZQAAAIY"]
[Sun Apr 26 17:25:29.511724 2026] [:error] [pid 13137:tid 13147] [client 20.215.250.178:64664] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/koiy.php"] [unique_id "ae3aCd0RB4J0o4h5neFXZAAAAgc"]
[Sun Apr 26 17:25:31.258589 2026] [:error] [pid 8385:tid 8439] [client 20.215.250.178:64727] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/menu.php"] [unique_id "ae3aCzOy7_J84Wx3-oy9jQAAAE8"]
[Sun Apr 26 17:25:34.038055 2026] [:error] [pid 8383:tid 8410] [client 20.215.250.178:64703] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/menu.php"] [unique_id "ae3aDtFa2S3EsATMdWMbLwAAAA0"]
[Sun Apr 26 17:25:34.257612 2026] [:error] [pid 13197:tid 13245] [client 20.215.250.178:63486] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/koiy.php"] [unique_id "ae3aDt3kktFKdSxTrBvHxAAAAs0"]
[Sun Apr 26 17:25:37.517180 2026] [:error] [pid 22573:tid 22629] [client 20.215.250.178:64696] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/koiy.php"] [unique_id "ae3aEXB3EmQlD4yKUt_RoAAAAZY"]
[Sun Apr 26 17:25:38.543433 2026] [:error] [pid 22573:tid 22626] [client 20.215.250.178:60227] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/menu.php"] [unique_id "ae3aEnB3EmQlD4yKUt_RpAAAAZM"]
[Sun Apr 26 17:25:41.072626 2026] [:error] [pid 8385:tid 8443] [client 20.215.250.178:64649] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-good.php"] [unique_id "ae3aFTOy7_J84Wx3-oy9ngAAAFM"]
[Sun Apr 26 17:25:47.920251 2026] [:error] [pid 8385:tid 8434] [client 20.215.250.178:61917] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-good.php"] [unique_id "ae3aGzOy7_J84Wx3-oy9pwAAAEo"]
[Sun Apr 26 17:25:48.742463 2026] [:error] [pid 16515:tid 16520] [client 20.215.250.178:63482] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/albin.php"] [unique_id "ae3aHFtDrUmgHSvpuLwoegAAAkI"]
[Sun Apr 26 17:25:50.071852 2026] [proxy_fcgi:error] [pid 22573:tid 22621] [client 20.215.250.178:63414] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 17:25:50.362483 2026] [proxy_fcgi:error] [pid 22573:tid 22628] [client 20.215.250.178:63414] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 17:25:50.933252 2026] [proxy_fcgi:error] [pid 22573:tid 22609] [client 20.215.250.178:63414] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 17:25:51.220853 2026] [proxy_fcgi:error] [pid 22573:tid 22631] [client 20.215.250.178:63414] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 17:25:51.505892 2026] [proxy_fcgi:error] [pid 22573:tid 22628] [client 20.215.250.178:63414] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 17:25:51.789657 2026] [proxy_fcgi:error] [pid 22573:tid 22610] [client 20.215.250.178:63414] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 17:25:52.086061 2026] [proxy_fcgi:error] [pid 22573:tid 22625] [client 20.215.250.178:63414] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 17:25:52.367833 2026] [proxy_fcgi:error] [pid 22573:tid 22628] [client 20.215.250.178:63414] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 17:25:52.655956 2026] [proxy_fcgi:error] [pid 22573:tid 22607] [client 20.215.250.178:63414] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 17:25:52.949491 2026] [proxy_fcgi:error] [pid 22573:tid 22610] [client 20.215.250.178:63414] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 17:25:53.229738 2026] [:error] [pid 22573:tid 22626] [client 20.215.250.178:63414] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xper1.php"] [unique_id "ae3aIXB3EmQlD4yKUt_SBgAAAZM"]
[Sun Apr 26 17:25:53.718699 2026] [:error] [pid 8383:tid 8411] [client 20.215.250.178:61899] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-good.php"] [unique_id "ae3aIdFa2S3EsATMdWMbhgAAAA4"]
[Sun Apr 26 17:25:54.723934 2026] [:error] [pid 13197:tid 13239] [client 20.215.250.178:64667] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xper1.php"] [unique_id "ae3aIt3kktFKdSxTrBvH3AAAAsg"]
[Sun Apr 26 17:25:56.515596 2026] [:error] [pid 22573:tid 22606] [client 20.215.250.178:63432] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/saorix1.php"] [unique_id "ae3aJHB3EmQlD4yKUt_SEQAAAYA"]
[Sun Apr 26 17:25:57.654152 2026] [:error] [pid 13137:tid 13151] [client 20.215.250.178:64692] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xper1.php"] [unique_id "ae3aJd0RB4J0o4h5neFXdwAAAgo"]
[Sun Apr 26 17:25:59.256682 2026] [:error] [pid 8390:tid 8453] [client 20.215.250.178:63484] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/saorix1.php"] [unique_id "ae3aJ4GPtFK_i9p5yxQawwAAAII"]
[Sun Apr 26 17:26:00.596205 2026] [:error] [pid 8383:tid 8411] [client 20.215.250.178:63399] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xper1.php"] [unique_id "ae3aKNFa2S3EsATMdWMbkwAAAA4"]
[Sun Apr 26 17:26:01.414416 2026] [:error] [pid 13137:tid 13143] [client 20.215.250.178:63369] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/saorix1.php"] [unique_id "ae3aKd0RB4J0o4h5neFXjAAAAgM"]
[Sun Apr 26 17:26:02.929585 2026] [:error] [pid 22572:tid 22587] [client 20.215.250.178:64767] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/t00l.php"] [unique_id "ae3aKtXOViWCFU-pZzADfgAAAUk"]
[Sun Apr 26 17:26:03.469814 2026] [:error] [pid 22572:tid 22601] [client 20.215.250.178:64702] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/saorix1.php"] [unique_id "ae3aK9XOViWCFU-pZzADgwAAAVc"]
[Sun Apr 26 17:26:04.712787 2026] [:error] [pid 8390:tid 8459] [client 20.215.250.178:64690] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/t00l.php"] [unique_id "ae3aLIGPtFK_i9p5yxQazwAAAIg"]
[Sun Apr 26 17:26:06.298217 2026] [:error] [pid 8390:tid 8457] [client 20.215.250.178:63404] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/byypas.php"] [unique_id "ae3aLoGPtFK_i9p5yxQa0wAAAIY"]
[Sun Apr 26 17:26:07.226760 2026] [:error] [pid 8390:tid 8471] [client 20.215.250.178:63411] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/t00l.php"] [unique_id "ae3aL4GPtFK_i9p5yxQa1gAAAJQ"]
[Sun Apr 26 17:26:07.686498 2026] [:error] [pid 13137:tid 13158] [client 20.215.250.178:61926] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/byypas.php"] [unique_id "ae3aL90RB4J0o4h5neFXmAAAAhE"]
[Sun Apr 26 17:26:10.845881 2026] [:error] [pid 22572:tid 22600] [client 20.215.250.178:63437] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/byypas.php"] [unique_id "ae3aMtXOViWCFU-pZzADjwAAAVY"]
[Sun Apr 26 17:26:11.491180 2026] [:error] [pid 8491:tid 8513] [client 20.215.250.178:61893] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/t00l.php"] [unique_id "ae3aMyq7I7e6CJooQM3tvgAAAM4"]
[Sun Apr 26 17:26:13.413222 2026] [:error] [pid 8383:tid 8410] [client 20.215.250.178:63446] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/casp1.php"] [unique_id "ae3aNdFa2S3EsATMdWMbtAAAAA0"]
[Sun Apr 26 17:26:14.580394 2026] [:error] [pid 22573:tid 22628] [client 20.215.250.178:63395] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/byypas.php"] [unique_id "ae3aNnB3EmQlD4yKUt_SOAAAAZU"]
[Sun Apr 26 17:26:16.426044 2026] [:error] [pid 22573:tid 22606] [client 20.215.250.178:63367] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/casp1.php"] [unique_id "ae3aOHB3EmQlD4yKUt_SPAAAAYA"]
[Sun Apr 26 17:26:16.466162 2026] [:error] [pid 16574:tid 16631] [client 20.215.250.178:64742] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rip.php"] [unique_id "ae3aOH5MsX8wRQr99nYoDAAAA1I"]
[Sun Apr 26 17:26:18.652385 2026] [:error] [pid 8383:tid 8400] [client 20.215.250.178:61916] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rip.php"] [unique_id "ae3aOtFa2S3EsATMdWMbwgAAAAM"]
[Sun Apr 26 17:26:19.364200 2026] [:error] [pid 8491:tid 8521] [client 20.215.250.178:63477] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/casp1.php"] [unique_id "ae3aOyq7I7e6CJooQM3t0gAAANY"]
[Sun Apr 26 17:26:22.524986 2026] [:error] [pid 22573:tid 22629] [client 20.215.250.178:63380] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rip.php"] [unique_id "ae3aPnB3EmQlD4yKUt_SUQAAAZY"]
[Sun Apr 26 17:26:23.590699 2026] [:error] [pid 8390:tid 8462] [client 20.215.250.178:63474] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/casp1.php"] [unique_id "ae3aP4GPtFK_i9p5yxQa7wAAAIs"]
[Sun Apr 26 17:26:25.192992 2026] [:error] [pid 8390:tid 8457] [client 20.215.250.178:64695] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rip.php"] [unique_id "ae3aQYGPtFK_i9p5yxQa-QAAAIY"]
[Sun Apr 26 17:26:25.339678 2026] [:error] [pid 16515:tid 16538] [client 20.215.250.178:64681] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/acc.php"] [unique_id "ae3aQVtDrUmgHSvpuLwopQAAAlQ"]
[Sun Apr 26 17:26:26.944054 2026] [:error] [pid 8390:tid 8452] [client 20.215.250.178:64678] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gptsh.php"] [unique_id "ae3aQoGPtFK_i9p5yxQbAAAAAIE"]
[Sun Apr 26 17:26:26.971019 2026] [:error] [pid 8390:tid 8466] [client 20.215.250.178:63384] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/acc.php"] [unique_id "ae3aQoGPtFK_i9p5yxQbAQAAAI8"]
[Sun Apr 26 17:26:31.402466 2026] [:error] [pid 16574:tid 16625] [client 20.215.250.178:64729] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gptsh.php"] [unique_id "ae3aR35MsX8wRQr99nYoFQAAA08"]
[Sun Apr 26 17:26:31.524891 2026] [:error] [pid 8491:tid 8501] [client 20.215.250.178:64654] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/acc.php"] [unique_id "ae3aRyq7I7e6CJooQM3t2wAAAMI"]
[Sun Apr 26 17:26:35.523652 2026] [:error] [pid 8385:tid 8441] [client 20.215.250.178:63429] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gptsh.php"] [unique_id "ae3aSzOy7_J84Wx3-oy92wAAAFE"]
[Sun Apr 26 17:26:35.720533 2026] [:error] [pid 8390:tid 8461] [client 20.215.250.178:64748] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/acc.php"] [unique_id "ae3aS4GPtFK_i9p5yxQbNwAAAIo"]
[Sun Apr 26 17:26:38.435171 2026] [:error] [pid 22573:tid 22609] [client 20.215.250.178:61827] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gptsh.php"] [unique_id "ae3aTnB3EmQlD4yKUt_SjAAAAYM"]
[Sun Apr 26 17:26:38.777293 2026] [:error] [pid 16574:tid 16623] [client 20.215.250.178:63464] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/asasx.php"] [unique_id "ae3aTn5MsX8wRQr99nYoKQAAA04"]
[Sun Apr 26 17:26:41.601253 2026] [:error] [pid 8383:tid 8405] [client 20.215.250.178:64671] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/0x.php"] [unique_id "ae3aUdFa2S3EsATMdWMb8gAAAAg"]
[Sun Apr 26 17:26:43.781955 2026] [:error] [pid 8385:tid 8445] [client 20.215.250.178:63398] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/asasx.php"] [unique_id "ae3aUzOy7_J84Wx3-oy9-AAAAFU"]
[Sun Apr 26 17:26:46.646537 2026] [:error] [pid 8390:tid 8451] [client 20.215.250.178:64714] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/0x.php"] [unique_id "ae3aVoGPtFK_i9p5yxQbYgAAAIA"]
[Sun Apr 26 17:26:49.369177 2026] [:error] [pid 8385:tid 8434] [client 20.215.250.178:64656] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/asasx.php"] [unique_id "ae3aWTOy7_J84Wx3-oy-DgAAAEo"]
[Sun Apr 26 17:26:49.969121 2026] [:error] [pid 8385:tid 8442] [client 20.215.250.178:64643] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/asasx.php"] [unique_id "ae3aWTOy7_J84Wx3-oy-DwAAAFI"]
[Sun Apr 26 17:26:50.615453 2026] [:error] [pid 13137:tid 13154] [client 20.215.250.178:63405] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/0x.php"] [unique_id "ae3aWt0RB4J0o4h5neFX3gAAAg0"]
[Sun Apr 26 17:26:51.474543 2026] [:error] [pid 16515:tid 16539] [client 20.215.250.178:64723] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xltt.php"] [unique_id "ae3aW1tDrUmgHSvpuLwo1gAAAlU"]
[Sun Apr 26 17:26:52.729196 2026] [proxy_fcgi:error] [pid 8390:tid 8475] [client 20.215.250.178:61897] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 17:26:52.785940 2026] [proxy_fcgi:error] [pid 8390:tid 8452] [client 20.215.250.178:63378] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 17:26:52.987299 2026] [proxy_fcgi:error] [pid 8390:tid 8454] [client 20.215.250.178:61897] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 17:26:53.081515 2026] [proxy_fcgi:error] [pid 8390:tid 8465] [client 20.215.250.178:63378] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 17:26:53.278383 2026] [proxy_fcgi:error] [pid 8390:tid 8456] [client 20.215.250.178:61897] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 17:26:53.379938 2026] [proxy_fcgi:error] [pid 8390:tid 8459] [client 20.215.250.178:63378] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 17:26:53.566203 2026] [proxy_fcgi:error] [pid 8390:tid 8455] [client 20.215.250.178:61897] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 17:26:53.684753 2026] [proxy_fcgi:error] [pid 8390:tid 8474] [client 20.215.250.178:63378] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 17:26:53.842327 2026] [proxy_fcgi:error] [pid 8390:tid 8454] [client 20.215.250.178:61897] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 17:26:53.970525 2026] [proxy_fcgi:error] [pid 8390:tid 8464] [client 20.215.250.178:63378] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 17:26:54.265778 2026] [proxy_fcgi:error] [pid 8390:tid 8456] [client 20.215.250.178:63378] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 17:26:54.502121 2026] [:error] [pid 8390:tid 8451] [client 20.215.250.178:61897] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hplfuns.php"] [unique_id "ae3aXoGPtFK_i9p5yxQbkQAAAIA"]
[Sun Apr 26 17:26:54.547122 2026] [:error] [pid 8390:tid 8459] [client 20.215.250.178:63378] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-the.php"] [unique_id "ae3aXoGPtFK_i9p5yxQbkgAAAIg"]
[Sun Apr 26 17:26:57.414945 2026] [:error] [pid 8390:tid 8468] [client 20.215.250.178:61895] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-the.php"] [unique_id "ae3aYYGPtFK_i9p5yxQblwAAAJE"]
[Sun Apr 26 17:26:58.757767 2026] [:error] [pid 16515:tid 16521] [client 20.215.250.178:64688] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hplfuns.php"] [unique_id "ae3aYltDrUmgHSvpuLwo6AAAAkM"]
[Sun Apr 26 17:27:01.815781 2026] [:error] [pid 22572:tid 22601] [client 20.215.250.178:61901] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-the.php"] [unique_id "ae3aZdXOViWCFU-pZzADzwAAAVc"]
[Sun Apr 26 17:27:02.517375 2026] [:error] [pid 13197:tid 13256] [client 20.215.250.178:64764] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hplfuns.php"] [unique_id "ae3aZt3kktFKdSxTrBvIDgAAAtg"]
[Sun Apr 26 17:27:04.604525 2026] [:error] [pid 8383:tid 8404] [client 20.215.250.178:64734] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hplfuns.php"] [unique_id "ae3aaNFa2S3EsATMdWMcIQAAAAc"]
[Sun Apr 26 17:27:05.805479 2026] [:error] [pid 8385:tid 8448] [client 20.215.250.178:64722] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-the.php"] [unique_id "ae3aaTOy7_J84Wx3-oy-IAAAAFg"]
[Sun Apr 26 17:27:08.671377 2026] [:error] [pid 8383:tid 8404] [client 20.215.250.178:64706] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xa.php"] [unique_id "ae3abNFa2S3EsATMdWMcMQAAAAc"]
[Sun Apr 26 17:27:09.746263 2026] [:error] [pid 8491:tid 8504] [client 20.215.250.178:64733] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sa.php7"] [unique_id "ae3abSq7I7e6CJooQM3uFQAAAMU"]
[Sun Apr 26 17:27:11.507389 2026] [:error] [pid 22572:tid 22588] [client 20.215.250.178:63427] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xa.php"] [unique_id "ae3ab9XOViWCFU-pZzAD4AAAAUo"]
[Sun Apr 26 17:27:11.837771 2026] [:error] [pid 13197:tid 13245] [client 20.215.250.178:64728] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sa.php7"] [unique_id "ae3ab93kktFKdSxTrBvIGwAAAs0"]
[Sun Apr 26 17:27:13.457048 2026] [:error] [pid 8491:tid 8509] [client 20.215.250.178:63438] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sa.php7"] [unique_id "ae3acSq7I7e6CJooQM3uFgAAAMo"]
[Sun Apr 26 17:27:13.975799 2026] [:error] [pid 8491:tid 8517] [client 20.215.250.178:64650] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xa.php"] [unique_id "ae3acSq7I7e6CJooQM3uFwAAANI"]
[Sun Apr 26 17:27:16.311812 2026] [:error] [pid 22572:tid 22581] [client 20.215.250.178:64698] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sa.php7"] [unique_id "ae3adNXOViWCFU-pZzAD9gAAAUM"]
[Sun Apr 26 17:27:16.368086 2026] [:error] [pid 8385:tid 8436] [client 20.215.250.178:64765] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xa.php"] [unique_id "ae3adDOy7_J84Wx3-oy-OwAAAEw"]
[Sun Apr 26 17:27:18.016074 2026] [:error] [pid 8385:tid 8434] [client 20.215.250.178:63448] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a7.php"] [unique_id "ae3adjOy7_J84Wx3-oy-PgAAAEo"]
[Sun Apr 26 17:27:20.238476 2026] [:error] [pid 8491:tid 8500] [client 20.215.250.178:63366] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a7.php"] [unique_id "ae3aeCq7I7e6CJooQM3uKgAAAME"]
[Sun Apr 26 17:27:20.423074 2026] [:error] [pid 8385:tid 8435] [client 20.215.250.178:64710] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/8573.php"] [unique_id "ae3aeDOy7_J84Wx3-oy-SQAAAEs"]
[Sun Apr 26 17:27:22.856209 2026] [:error] [pid 8390:tid 8465] [client 20.215.250.178:64646] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a7.php"] [unique_id "ae3aeoGPtFK_i9p5yxQbzwAAAI4"]
[Sun Apr 26 17:27:23.301559 2026] [:error] [pid 8390:tid 8457] [client 20.215.250.178:64724] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/8573.php"] [unique_id "ae3ae4GPtFK_i9p5yxQb0AAAAIY"]
[Sun Apr 26 17:27:25.417781 2026] [:error] [pid 13197:tid 13234] [client 20.215.250.178:64760] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/8573.php"] [unique_id "ae3afd3kktFKdSxTrBvIIwAAAsM"]
[Sun Apr 26 17:27:27.946826 2026] [:error] [pid 22572:tid 22579] [client 20.215.250.178:64720] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/8573.php"] [unique_id "ae3af9XOViWCFU-pZzAEBAAAAUE"]
[Sun Apr 26 17:27:28.090661 2026] [:error] [pid 16574:tid 16639] [client 20.215.250.178:63425] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a7.php"] [unique_id "ae3agH5MsX8wRQr99nYoZgAAA1Y"]
[Sun Apr 26 17:27:31.392451 2026] [:error] [pid 22572:tid 22601] [client 20.215.250.178:64659] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp9.php"] [unique_id "ae3ag9XOViWCFU-pZzAECwAAAVc"]
[Sun Apr 26 17:27:31.601225 2026] [:error] [pid 22573:tid 22615] [client 20.215.250.178:61915] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sadcut1.php"] [unique_id "ae3ag3B3EmQlD4yKUt_TCQAAAYg"]
[Sun Apr 26 17:27:32.113193 2026] [:error] [pid 8491:tid 8506] [client 20.215.250.178:64755] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp9.php"] [unique_id "ae3ahCq7I7e6CJooQM3uNAAAAMc"]
[Sun Apr 26 17:27:32.410771 2026] [:error] [pid 8491:tid 8508] [client 20.215.250.178:61831] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sadcut1.php"] [unique_id "ae3ahCq7I7e6CJooQM3uNQAAAMk"]
[Sun Apr 26 17:27:32.996606 2026] [:error] [pid 8491:tid 8500] [client 20.215.250.178:64670] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp9.php"] [unique_id "ae3ahCq7I7e6CJooQM3uNgAAAME"]
[Sun Apr 26 17:27:33.853236 2026] [:error] [pid 8383:tid 8405] [client 20.215.250.178:61919] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sadcut1.php"] [unique_id "ae3ahdFa2S3EsATMdWMccwAAAAg"]
[Sun Apr 26 17:27:34.523868 2026] [:error] [pid 22573:tid 22627] [client 20.215.250.178:64745] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp9.php"] [unique_id "ae3ahnB3EmQlD4yKUt_TEAAAAZQ"]
[Sun Apr 26 17:27:34.892774 2026] [:error] [pid 22573:tid 22631] [client 20.215.250.178:63372] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sadcut1.php"] [unique_id "ae3ahnB3EmQlD4yKUt_TEQAAAZg"]
[Sun Apr 26 17:27:35.580077 2026] [:error] [pid 8383:tid 8397] [client 20.215.250.178:64761] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bthil.php"] [unique_id "ae3ah9Fa2S3EsATMdWMcfgAAAAA"]
[Sun Apr 26 17:27:36.163003 2026] [:error] [pid 8383:tid 8416] [client 20.215.250.178:63423] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/666.php"] [unique_id "ae3aiNFa2S3EsATMdWMchgAAABM"]
[Sun Apr 26 17:27:36.668532 2026] [:error] [pid 8383:tid 8418] [client 20.215.250.178:64718] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bthil.php"] [unique_id "ae3aiNFa2S3EsATMdWMcjQAAABU"]
[Sun Apr 26 17:27:36.907960 2026] [:error] [pid 8383:tid 8406] [client 20.215.250.178:64697] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/666.php"] [unique_id "ae3aiNFa2S3EsATMdWMckAAAAAk"]
[Sun Apr 26 17:27:38.458515 2026] [:error] [pid 8383:tid 8412] [client 20.215.250.178:64676] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bthil.php"] [unique_id "ae3aitFa2S3EsATMdWMcogAAAA8"]
[Sun Apr 26 17:27:38.547149 2026] [:error] [pid 22573:tid 22611] [client 20.215.250.178:64657] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/666.php"] [unique_id "ae3ainB3EmQlD4yKUt_THQAAAYU"]
[Sun Apr 26 17:27:41.469665 2026] [:error] [pid 8390:tid 8459] [client 20.215.250.178:64675] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bthil.php"] [unique_id "ae3ajYGPtFK_i9p5yxQcAgAAAIg"]
[Sun Apr 26 17:27:41.520142 2026] [:error] [pid 8390:tid 8462] [client 20.215.250.178:64663] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/666.php"] [unique_id "ae3ajYGPtFK_i9p5yxQcAwAAAIs"]
[Sun Apr 26 17:27:44.075960 2026] [:error] [pid 8491:tid 8519] [client 20.215.250.178:64672] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp5.php"] [unique_id "ae3akCq7I7e6CJooQM3uQQAAANQ"]
[Sun Apr 26 17:27:44.527786 2026] [:error] [pid 8385:tid 8430] [client 20.215.250.178:64711] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xwx1.php"] [unique_id "ae3akDOy7_J84Wx3-oy-WAAAAEY"]
[Sun Apr 26 17:27:45.867146 2026] [:error] [pid 8491:tid 8517] [client 20.215.250.178:63445] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp5.php"] [unique_id "ae3akSq7I7e6CJooQM3uSwAAANI"]
[Sun Apr 26 17:27:47.382475 2026] [:error] [pid 16515:tid 16523] [client 20.215.250.178:64752] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp5.php"] [unique_id "ae3ak1tDrUmgHSvpuLwpkQAAAkU"]
[Sun Apr 26 17:27:49.286437 2026] [:error] [pid 16574:tid 16633] [client 20.215.250.178:64689] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp5.php"] [unique_id "ae3alX5MsX8wRQr99nYocwAAA1M"]
[Sun Apr 26 17:27:49.447525 2026] [:error] [pid 8390:tid 8456] [client 20.215.250.178:63433] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xwx1.php"] [unique_id "ae3alYGPtFK_i9p5yxQcGwAAAIU"]
[Sun Apr 26 17:27:50.611855 2026] [:error] [pid 13137:tid 13160] [client 20.215.250.178:64686] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/yuzuru1.php"] [unique_id "ae3alt0RB4J0o4h5neFYFQAAAhM"]
[Sun Apr 26 17:27:50.827112 2026] [:error] [pid 16515:tid 16522] [client 20.215.250.178:64653] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xwx1.php"] [unique_id "ae3alltDrUmgHSvpuLwplwAAAkQ"]
[Sun Apr 26 17:27:51.443286 2026] [:error] [pid 22572:tid 22583] [client 20.215.250.178:64709] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/yuzuru1.php"] [unique_id "ae3al9XOViWCFU-pZzAEKAAAAUU"]
[Sun Apr 26 17:27:53.201015 2026] [:error] [pid 8390:tid 8460] [client 20.215.250.178:61906] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/yuzuru1.php"] [unique_id "ae3amYGPtFK_i9p5yxQcJQAAAIk"]
[Sun Apr 26 17:27:54.482157 2026] [proxy_fcgi:error] [pid 22573:tid 22618] [client 20.215.250.178:64694] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 17:27:54.744165 2026] [proxy_fcgi:error] [pid 22573:tid 22608] [client 20.215.250.178:64694] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 17:27:55.003348 2026] [proxy_fcgi:error] [pid 22573:tid 22609] [client 20.215.250.178:64694] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 17:27:55.346335 2026] [proxy_fcgi:error] [pid 22573:tid 22628] [client 20.215.250.178:64694] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 17:27:55.683395 2026] [proxy_fcgi:error] [pid 22573:tid 22631] [client 20.215.250.178:64694] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 17:27:55.901710 2026] [proxy_fcgi:error] [pid 8390:tid 8452] [client 20.215.250.178:64662] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 17:27:55.940454 2026] [proxy_fcgi:error] [pid 22573:tid 22622] [client 20.215.250.178:64694] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 17:27:56.216950 2026] [proxy_fcgi:error] [pid 8390:tid 8464] [client 20.215.250.178:64662] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 17:27:56.478714 2026] [proxy_fcgi:error] [pid 8390:tid 8460] [client 20.215.250.178:64662] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 17:27:56.604143 2026] [proxy_fcgi:error] [pid 22573:tid 22616] [client 20.215.250.178:64694] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 17:27:56.749502 2026] [proxy_fcgi:error] [pid 8390:tid 8451] [client 20.215.250.178:64662] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 17:27:56.859314 2026] [:error] [pid 22573:tid 22619] [client 20.215.250.178:64694] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/atomlib.php"] [unique_id "ae3anHB3EmQlD4yKUt_TVwAAAYw"]
[Sun Apr 26 17:27:57.018834 2026] [:error] [pid 8390:tid 8468] [client 20.215.250.178:64662] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xper1.php"] [unique_id "ae3anYGPtFK_i9p5yxQcOgAAAJE"]
[Sun Apr 26 17:27:57.590620 2026] [:error] [pid 8383:tid 8420] [client 20.215.250.178:64700] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/atomlib.php"] [unique_id "ae3andFa2S3EsATMdWMc4gAAABc"]
[Sun Apr 26 17:27:58.096450 2026] [:error] [pid 22573:tid 22621] [client 20.215.250.178:61825] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xper1.php"] [unique_id "ae3annB3EmQlD4yKUt_TWQAAAY4"]
[Sun Apr 26 17:27:58.548218 2026] [:error] [pid 8383:tid 8401] [client 20.215.250.178:64661] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/atomlib.php"] [unique_id "ae3antFa2S3EsATMdWMc6gAAAAQ"]
[Sun Apr 26 17:27:59.332127 2026] [:error] [pid 8385:tid 8448] [client 20.215.250.178:63461] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/atomlib.php"] [unique_id "ae3anzOy7_J84Wx3-oy-aQAAAFg"]
[Sun Apr 26 17:27:59.450531 2026] [:error] [pid 8390:tid 8457] [client 20.215.250.178:61867] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xper1.php"] [unique_id "ae3an4GPtFK_i9p5yxQcPwAAAIY"]
[Sun Apr 26 17:28:00.171731 2026] [:error] [pid 16574:tid 16635] [client 20.215.250.178:63373] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zoper1.php"] [unique_id "ae3aoH5MsX8wRQr99nYodwAAA1Q"]
[Sun Apr 26 17:28:01.535252 2026] [:error] [pid 8383:tid 8397] [client 20.215.250.178:61886] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xper1.php"] [unique_id "ae3aodFa2S3EsATMdWMc-QAAAAA"]
[Sun Apr 26 17:28:01.986738 2026] [:error] [pid 16574:tid 16641] [client 20.215.250.178:64685] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zoper1.php"] [unique_id "ae3aoX5MsX8wRQr99nYoeQAAA1c"]
[Sun Apr 26 17:28:02.829401 2026] [:error] [pid 8491:tid 8521] [client 20.215.250.178:64735] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zoper1.php"] [unique_id "ae3aoiq7I7e6CJooQM3uXgAAANY"]
[Sun Apr 26 17:28:03.770828 2026] [:error] [pid 16574:tid 16625] [client 20.215.250.178:63412] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/t00l.php"] [unique_id "ae3ao35MsX8wRQr99nYofwAAA08"]
[Sun Apr 26 17:28:04.764645 2026] [:error] [pid 22572:tid 22591] [client 20.215.250.178:64749] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zoper1.php"] [unique_id "ae3apNXOViWCFU-pZzAERgAAAU0"]
[Sun Apr 26 17:28:05.444402 2026] [:error] [pid 22572:tid 22600] [client 20.215.250.178:64699] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/t00l.php"] [unique_id "ae3apdXOViWCFU-pZzAESAAAAVY"]
[Sun Apr 26 17:28:06.857373 2026] [:error] [pid 22573:tid 22610] [client 20.215.250.178:63435] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a5.php"] [unique_id "ae3apnB3EmQlD4yKUt_TaQAAAYQ"]
[Sun Apr 26 17:28:08.904430 2026] [:error] [pid 22572:tid 22585] [client 20.215.250.178:64704] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/t00l.php"] [unique_id "ae3aqNXOViWCFU-pZzAETgAAAUc"]
[Sun Apr 26 17:28:09.732388 2026] [:error] [pid 8383:tid 8408] [client 20.215.250.178:64644] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a5.php"] [unique_id "ae3aqdFa2S3EsATMdWMdEwAAAAs"]
[Sun Apr 26 17:28:11.383338 2026] [:error] [pid 8383:tid 8402] [client 20.215.250.178:64757] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a5.php"] [unique_id "ae3aq9Fa2S3EsATMdWMdFgAAAAU"]
[Sun Apr 26 17:28:14.328079 2026] [:error] [pid 8383:tid 8411] [client 20.215.250.178:60225] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a5.php"] [unique_id "ae3artFa2S3EsATMdWMdJAAAAA4"]
[Sun Apr 26 17:28:14.399820 2026] [:error] [pid 22572:tid 22596] [client 20.215.250.178:63487] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/t00l.php"] [unique_id "ae3artXOViWCFU-pZzAEVAAAAVI"]
[Sun Apr 26 17:28:15.835355 2026] [:error] [pid 16574:tid 16608] [client 20.215.250.178:64737] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ai.php"] [unique_id "ae3ar35MsX8wRQr99nYohQAAA0Q"]
[Sun Apr 26 17:28:16.485379 2026] [:error] [pid 8491:tid 8500] [client 20.215.250.178:63402] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/casp1.php"] [unique_id "ae3asCq7I7e6CJooQM3uZgAAAME"]
[Sun Apr 26 17:28:17.585027 2026] [:error] [pid 8383:tid 8417] [client 20.215.250.178:64719] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/casp1.php"] [unique_id "ae3asdFa2S3EsATMdWMdMwAAABQ"]
[Sun Apr 26 17:28:18.031901 2026] [:error] [pid 8385:tid 8433] [client 20.215.250.178:64674] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ai.php"] [unique_id "ae3asjOy7_J84Wx3-oy-iAAAAEk"]
[Sun Apr 26 17:28:20.398741 2026] [:error] [pid 8390:tid 8475] [client 20.215.250.178:64726] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/casp1.php"] [unique_id "ae3atIGPtFK_i9p5yxQcVgAAAJg"]
[Sun Apr 26 17:28:20.515671 2026] [:error] [pid 16574:tid 16609] [client 20.215.250.178:64751] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ai.php"] [unique_id "ae3atH5MsX8wRQr99nYojgAAA0U"]
[Sun Apr 26 17:28:22.938065 2026] [:error] [pid 22572:tid 22600] [client 20.215.250.178:64750] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/casp1.php"] [unique_id "ae3attXOViWCFU-pZzAEZwAAAVY"]
[Sun Apr 26 17:28:23.014890 2026] [:error] [pid 13137:tid 13158] [client 20.215.250.178:64716] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ai.php"] [unique_id "ae3at90RB4J0o4h5neFYKQAAAhE"]
[Sun Apr 26 17:28:25.783607 2026] [:error] [pid 22573:tid 22623] [client 20.215.250.178:64687] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/acc.php"] [unique_id "ae3auXB3EmQlD4yKUt_TnQAAAZA"]
[Sun Apr 26 17:28:25.801288 2026] [:error] [pid 22573:tid 22620] [client 20.215.250.178:61836] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jga.php"] [unique_id "ae3auXB3EmQlD4yKUt_TngAAAY0"]
[Sun Apr 26 17:28:30.140912 2026] [:error] [pid 8491:tid 8521] [client 20.215.250.178:64682] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/acc.php"] [unique_id "ae3aviq7I7e6CJooQM3ufwAAANY"]
[Sun Apr 26 17:28:30.430542 2026] [:error] [pid 16574:tid 16607] [client 20.215.250.178:61839] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jga.php"] [unique_id "ae3avn5MsX8wRQr99nYolgAAA0M"]
[Sun Apr 26 17:28:33.402923 2026] [:error] [pid 16515:tid 16527] [client 20.215.250.178:63443] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jga.php"] [unique_id "ae3awVtDrUmgHSvpuLwp0gAAAkk"]
[Sun Apr 26 17:28:36.492609 2026] [:error] [pid 8383:tid 8419] [client 20.215.250.178:64683] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jga.php"] [unique_id "ae3axNFa2S3EsATMdWMdbQAAABY"]
[Sun Apr 26 17:28:39.876048 2026] [:error] [pid 22572:tid 22594] [client 20.215.250.178:64732] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/term.php"] [unique_id "ae3ax9XOViWCFU-pZzAEbwAAAVA"]
[Sun Apr 26 17:28:41.498732 2026] [:error] [pid 22573:tid 22626] [client 20.215.250.178:64673] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/asasx.php"] [unique_id "ae3ayXB3EmQlD4yKUt_TuAAAAZM"]
[Sun Apr 26 17:28:43.600194 2026] [:error] [pid 13137:tid 13163] [client 20.215.250.178:63454] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/term.php"] [unique_id "ae3ay90RB4J0o4h5neFYbQAAAhY"]
[Sun Apr 26 17:28:44.488009 2026] [:error] [pid 16574:tid 16605] [client 20.215.250.178:64684] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/term.php"] [unique_id "ae3azH5MsX8wRQr99nYoqwAAA0E"]
[Sun Apr 26 17:28:45.984361 2026] [:error] [pid 8383:tid 8414] [client 20.215.250.178:64732] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/term.php"] [unique_id "ae3azdFa2S3EsATMdWMdqQAAABE"]
[Sun Apr 26 17:28:46.797541 2026] [:error] [pid 8390:tid 8472] [client 20.215.250.178:63485] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/asasx.php"] [unique_id "ae3azoGPtFK_i9p5yxQcvgAAAJU"]
[Sun Apr 26 17:28:47.695796 2026] [:error] [pid 8390:tid 8459] [client 20.215.250.178:63469] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gk.php"] [unique_id "ae3az4GPtFK_i9p5yxQczQAAAIg"]
[Sun Apr 26 17:28:48.950447 2026] [:error] [pid 8385:tid 8442] [client 20.215.250.178:63479] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/asasx.php"] [unique_id "ae3a0DOy7_J84Wx3-oy-ngAAAFI"]
[Sun Apr 26 17:28:49.568674 2026] [:error] [pid 8383:tid 8408] [client 20.215.250.178:63452] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gk.php"] [unique_id "ae3a0dFa2S3EsATMdWMdwgAAAAs"]
[Sun Apr 26 17:28:50.491574 2026] [:error] [pid 22572:tid 22590] [client 20.215.250.178:61903] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/asasx.php"] [unique_id "ae3a0tXOViWCFU-pZzAEhwAAAUw"]
[Sun Apr 26 17:28:51.418065 2026] [:error] [pid 8383:tid 8417] [client 20.215.250.178:61921] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gk.php"] [unique_id "ae3a09Fa2S3EsATMdWMd0QAAABQ"]
[Sun Apr 26 17:28:53.543322 2026] [:error] [pid 16574:tid 16610] [client 20.215.250.178:63470] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xltt.php"] [unique_id "ae3a1X5MsX8wRQr99nYoswAAA0Y"]
[Sun Apr 26 17:28:54.855817 2026] [:error] [pid 16515:tid 16540] [client 20.215.250.178:64717] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gk.php"] [unique_id "ae3a1ltDrUmgHSvpuLwp6wAAAlY"]
[Sun Apr 26 17:28:56.285686 2026] [proxy_fcgi:error] [pid 13137:tid 13145] [client 20.215.250.178:63434] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 17:28:57.696012 2026] [proxy_fcgi:error] [pid 13137:tid 13141] [client 20.215.250.178:63434] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 17:28:57.967679 2026] [proxy_fcgi:error] [pid 13137:tid 13151] [client 20.215.250.178:63434] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 17:28:58.043631 2026] [proxy_fcgi:error] [pid 8383:tid 8421] [client 20.215.250.178:61905] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 17:28:58.249471 2026] [proxy_fcgi:error] [pid 13137:tid 13154] [client 20.215.250.178:63434] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 17:28:58.341282 2026] [proxy_fcgi:error] [pid 8383:tid 8420] [client 20.215.250.178:61905] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 17:28:58.507593 2026] [proxy_fcgi:error] [pid 13137:tid 13152] [client 20.215.250.178:63434] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 17:28:58.765827 2026] [proxy_fcgi:error] [pid 13137:tid 13160] [client 20.215.250.178:63434] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 17:28:59.057812 2026] [proxy_fcgi:error] [pid 13137:tid 13163] [client 20.215.250.178:63434] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 17:28:59.316408 2026] [proxy_fcgi:error] [pid 13137:tid 13153] [client 20.215.250.178:63434] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 17:28:59.574997 2026] [proxy_fcgi:error] [pid 13137:tid 13162] [client 20.215.250.178:63434] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 17:29:03.315167 2026] [:error] [pid 13137:tid 13147] [client 20.215.250.178:63434] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/666.php"] [unique_id "ae3a390RB4J0o4h5neFYnwAAAgc"]
[Sun Apr 26 17:29:06.878707 2026] [:error] [pid 22573:tid 22617] [client 20.215.250.178:64708] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/666.php"] [unique_id "ae3a4nB3EmQlD4yKUt_UCgAAAYo"]
[Sun Apr 26 17:29:09.084298 2026] [:error] [pid 8390:tid 8462] [client 20.215.250.178:64701] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/666.php"] [unique_id "ae3a5YGPtFK_i9p5yxQc-gAAAIs"]
[Sun Apr 26 17:29:11.888178 2026] [:error] [pid 13137:tid 13142] [client 20.215.250.178:63463] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/666.php"] [unique_id "ae3a590RB4J0o4h5neFYqgAAAgI"]
[Sun Apr 26 17:29:13.612304 2026] [:error] [pid 22573:tid 22615] [client 20.215.250.178:63392] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xwx1.php"] [unique_id "ae3a6XB3EmQlD4yKUt_UHwAAAYg"]
[Sun Apr 26 17:29:16.846687 2026] [:error] [pid 16515:tid 16529] [client 20.215.250.178:64691] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xwx1.php"] [unique_id "ae3a7FtDrUmgHSvpuLwp9QAAAks"]
[Sun Apr 26 17:29:17.815459 2026] [:error] [pid 16515:tid 16524] [client 20.215.250.178:64730] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xwx1.php"] [unique_id "ae3a7VtDrUmgHSvpuLwp-AAAAkY"]
[Sun Apr 26 17:29:18.721518 2026] [:error] [pid 8390:tid 8473] [client 20.215.250.178:63374] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xwx1.php"] [unique_id "ae3a7oGPtFK_i9p5yxQdEQAAAJY"]
[Sun Apr 26 17:29:19.594406 2026] [:error] [pid 8390:tid 8475] [client 20.215.250.178:61847] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/prosellers8.php"] [unique_id "ae3a74GPtFK_i9p5yxQdGgAAAJg"]
[Sun Apr 26 17:29:20.207749 2026] [:error] [pid 8383:tid 8399] [client 20.215.250.178:63394] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/prosellers8.php"] [unique_id "ae3a8NFa2S3EsATMdWMeiAAAAAI"]
[Sun Apr 26 17:29:20.913754 2026] [:error] [pid 8383:tid 8400] [client 20.215.250.178:64739] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/prosellers8.php"] [unique_id "ae3a8NFa2S3EsATMdWMelgAAAAM"]
[Sun Apr 26 17:29:21.571414 2026] [:error] [pid 8383:tid 8417] [client 20.215.250.178:63442] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/prosellers8.php"] [unique_id "ae3a8dFa2S3EsATMdWMeoAAAABQ"]
[Sun Apr 26 17:29:23.232218 2026] [:error] [pid 8390:tid 8456] [client 20.215.250.178:64648] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/shop.php"] [unique_id "ae3a84GPtFK_i9p5yxQdHwAAAIU"]
[Sun Apr 26 17:29:23.972767 2026] [:error] [pid 8385:tid 8436] [client 20.215.250.178:64758] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/shop.php"] [unique_id "ae3a8zOy7_J84Wx3-oy-ugAAAEw"]
[Sun Apr 26 17:29:25.446972 2026] [:error] [pid 16574:tid 16637] [client 20.215.250.178:63440] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/shop.php"] [unique_id "ae3a9X5MsX8wRQr99nYo3wAAA1U"]
[Sun Apr 26 17:29:26.361950 2026] [:error] [pid 16574:tid 16609] [client 20.215.250.178:63390] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/shop.php"] [unique_id "ae3a9n5MsX8wRQr99nYo4AAAA0U"]
[Sun Apr 26 17:29:28.155362 2026] [:error] [pid 8390:tid 8458] [client 20.215.250.178:63444] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ww.php"] [unique_id "ae3a-IGPtFK_i9p5yxQdJQAAAIc"]
[Sun Apr 26 17:29:30.046010 2026] [:error] [pid 8383:tid 8416] [client 20.215.250.178:63383] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ww.php"] [unique_id "ae3a-tFa2S3EsATMdWMe0AAAABM"]
[Sun Apr 26 17:29:32.489831 2026] [:error] [pid 8383:tid 8421] [client 20.215.250.178:63417] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ww.php"] [unique_id "ae3a_NFa2S3EsATMdWMe4wAAABg"]
[Sun Apr 26 17:29:34.248676 2026] [:error] [pid 8390:tid 8459] [client 20.215.250.178:64721] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ww.php"] [unique_id "ae3a_oGPtFK_i9p5yxQdPAAAAIg"]
[Sun Apr 26 17:29:35.839840 2026] [:error] [pid 8383:tid 8404] [client 20.215.250.178:64740] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fsjzs.php"] [unique_id "ae3a_9Fa2S3EsATMdWMe9AAAAAc"]
[Sun Apr 26 17:29:37.410636 2026] [:error] [pid 8383:tid 8413] [client 20.215.250.178:64641] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fsjzs.php"] [unique_id "ae3bAdFa2S3EsATMdWMfBwAAABA"]
[Sun Apr 26 17:29:38.921921 2026] [:error] [pid 8390:tid 8451] [client 20.215.250.178:64746] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fsjzs.php"] [unique_id "ae3bAoGPtFK_i9p5yxQdWAAAAIA"]
[Sun Apr 26 17:29:40.420269 2026] [:error] [pid 8383:tid 8405] [client 20.215.250.178:64658] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fsjzs.php"] [unique_id "ae3bBNFa2S3EsATMdWMfDgAAAAg"]
[Sun Apr 26 17:29:41.344314 2026] [:error] [pid 13197:tid 13238] [client 20.215.250.178:63391] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cwclass.php"] [unique_id "ae3bBd3kktFKdSxTrBvIuQAAAsc"]
[Sun Apr 26 17:29:42.028298 2026] [:error] [pid 8383:tid 8413] [client 20.215.250.178:61853] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cwclass.php"] [unique_id "ae3bBtFa2S3EsATMdWMfFAAAABA"]
[Sun Apr 26 17:29:43.791711 2026] [:error] [pid 13137:tid 13141] [client 20.215.250.178:63456] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cwclass.php"] [unique_id "ae3bB90RB4J0o4h5neFY2wAAAgE"]
[Sun Apr 26 17:29:44.985520 2026] [:error] [pid 8383:tid 8415] [client 20.215.250.178:64741] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cwclass.php"] [unique_id "ae3bCNFa2S3EsATMdWMfKwAAABI"]
[Sun Apr 26 17:29:46.057521 2026] [:error] [pid 22573:tid 22630] [client 20.215.250.178:61924] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/edit-tags.php"] [unique_id "ae3bCnB3EmQlD4yKUt_UVQAAAZc"]
[Sun Apr 26 17:29:47.929258 2026] [:error] [pid 16515:tid 16536] [client 20.215.250.178:63397] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/edit-tags.php"] [unique_id "ae3bC1tDrUmgHSvpuLwqEgAAAlI"]
[Sun Apr 26 17:29:51.733984 2026] [:error] [pid 16515:tid 16540] [client 20.215.250.178:63472] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/edit-tags.php"] [unique_id "ae3bD1tDrUmgHSvpuLwqGgAAAlY"]
[Sun Apr 26 17:29:53.881959 2026] [:error] [pid 8385:tid 8425] [client 20.215.250.178:61830] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/edit-tags.php"] [unique_id "ae3bETOy7_J84Wx3-oy-5gAAAEE"]
[Sun Apr 26 17:29:56.004118 2026] [:error] [pid 13197:tid 13246] [client 20.215.250.178:61933] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/atomlib.php"] [unique_id "ae3bFN3kktFKdSxTrBvIyQAAAs4"]
[Sun Apr 26 17:29:57.783176 2026] [:error] [pid 8390:tid 8458] [client 20.215.250.178:64664] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/atomlib.php"] [unique_id "ae3bFYGPtFK_i9p5yxQdhAAAAIc"]
[Sun Apr 26 17:29:59.468282 2026] [proxy_fcgi:error] [pid 16515:tid 16522] [client 20.215.250.178:63418] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 17:29:59.746918 2026] [proxy_fcgi:error] [pid 16515:tid 16529] [client 20.215.250.178:63418] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 17:30:00.004883 2026] [proxy_fcgi:error] [pid 16515:tid 16530] [client 20.215.250.178:63418] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 17:30:00.270878 2026] [proxy_fcgi:error] [pid 16515:tid 16524] [client 20.215.250.178:63418] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 17:30:00.531254 2026] [proxy_fcgi:error] [pid 16515:tid 16539] [client 20.215.250.178:63418] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 17:30:00.796479 2026] [proxy_fcgi:error] [pid 16515:tid 16518] [client 20.215.250.178:63418] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 17:30:01.056610 2026] [proxy_fcgi:error] [pid 16515:tid 16540] [client 20.215.250.178:63418] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 17:30:01.315336 2026] [proxy_fcgi:error] [pid 16515:tid 16542] [client 20.215.250.178:63418] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 17:30:01.583798 2026] [proxy_fcgi:error] [pid 16515:tid 16531] [client 20.215.250.178:63418] AH01071: Got error 'Primary script unknown'
[Mon Apr 27 03:51:47.408486 2026] [proxy_fcgi:error] [pid 57639:tid 57665] [client 172.212.217.10:7723] AH01071: Got error 'Primary script unknown'
[Mon Apr 27 03:51:47.600283 2026] [proxy_fcgi:error] [pid 57639:tid 57668] [client 172.212.217.10:7723] AH01071: Got error 'Primary script unknown'
[Mon Apr 27 03:51:47.791614 2026] [proxy_fcgi:error] [pid 57639:tid 57664] [client 172.212.217.10:7723] AH01071: Got error 'Primary script unknown'
[Mon Apr 27 03:51:47.983061 2026] [proxy_fcgi:error] [pid 57639:tid 57651] [client 172.212.217.10:7723] AH01071: Got error 'Primary script unknown'
[Mon Apr 27 03:51:48.176141 2026] [proxy_fcgi:error] [pid 57639:tid 57669] [client 172.212.217.10:7723] AH01071: Got error 'Primary script unknown'
[Mon Apr 27 03:51:48.367880 2026] [proxy_fcgi:error] [pid 57639:tid 57671] [client 172.212.217.10:7723] AH01071: Got error 'Primary script unknown'
[Mon Apr 27 03:51:48.559945 2026] [proxy_fcgi:error] [pid 57639:tid 57655] [client 172.212.217.10:7723] AH01071: Got error 'Primary script unknown'
[Mon Apr 27 03:51:48.751474 2026] [proxy_fcgi:error] [pid 57639:tid 57674] [client 172.212.217.10:7723] AH01071: Got error 'Primary script unknown'
[Mon Apr 27 13:51:51.874083 2026] [:error] [pid 62511:tid 62590] [client 34.55.86.97:56847] [client 34.55.86.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/media/system/js/core.js"] [unique_id "ae75d7BjE-jhU4FY4HhzWgAAAVA"]
[Tue Apr 28 04:28:22.932136 2026] [proxy_fcgi:error] [pid 14686:tid 14709] [client 20.238.36.81:1864] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 04:28:23.185167 2026] [proxy_fcgi:error] [pid 14686:tid 14704] [client 20.238.36.81:1864] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 04:28:23.442286 2026] [proxy_fcgi:error] [pid 14686:tid 14693] [client 20.238.36.81:1864] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 05:16:13.416195 2026] [proxy_fcgi:error] [pid 14578:tid 14627] [client 20.203.141.82:53461] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 05:16:13.684388 2026] [proxy_fcgi:error] [pid 14578:tid 14631] [client 20.203.141.82:53461] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 05:16:13.954964 2026] [proxy_fcgi:error] [pid 14578:tid 14634] [client 20.203.141.82:53461] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 05:16:14.224343 2026] [proxy_fcgi:error] [pid 14578:tid 14614] [client 20.203.141.82:53461] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 05:16:14.536073 2026] [proxy_fcgi:error] [pid 14578:tid 14635] [client 20.203.141.82:53461] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 05:16:14.811459 2026] [proxy_fcgi:error] [pid 14578:tid 14632] [client 20.203.141.82:53461] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 05:16:15.081840 2026] [proxy_fcgi:error] [pid 14578:tid 14629] [client 20.203.141.82:53461] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 05:16:15.352498 2026] [proxy_fcgi:error] [pid 14578:tid 14630] [client 20.203.141.82:53461] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 05:16:15.621558 2026] [proxy_fcgi:error] [pid 14578:tid 14626] [client 20.203.141.82:53461] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 05:16:15.891728 2026] [proxy_fcgi:error] [pid 14578:tid 14623] [client 20.203.141.82:53461] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 05:16:16.159876 2026] [:error] [pid 14578:tid 14633] [client 20.203.141.82:53461] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-load.php"] [unique_id "ae_SIOngo3AwIJgfSHH3EgAAAFQ"]
[Tue Apr 28 05:16:16.760497 2026] [:error] [pid 14686:tid 14713] [client 20.203.141.82:45792] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-load.php"] [unique_id "ae_SIO-YPF1Xm7uiWQ4fzQAAANg"]
[Tue Apr 28 05:16:17.526146 2026] [:error] [pid 56602:tid 56612] [client 20.203.141.82:45789] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-load.php"] [unique_id "ae_SIfCwhMxzNW_lZSwfLQAAAQg"]
[Tue Apr 28 05:16:18.081067 2026] [:error] [pid 14686:tid 14699] [client 20.203.141.82:45791] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-load.php"] [unique_id "ae_SIu-YPF1Xm7uiWQ4fzwAAAMo"]
[Tue Apr 28 05:16:18.732734 2026] [:error] [pid 14579:tid 14659] [client 20.203.141.82:45805] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/77.php"] [unique_id "ae_SIhrUiOG83qKKuuDltgAAAJM"]
[Tue Apr 28 05:16:19.404739 2026] [:error] [pid 14686:tid 14693] [client 20.203.141.82:49713] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/77.php"] [unique_id "ae_SI--YPF1Xm7uiWQ4f0gAAAMQ"]
[Tue Apr 28 05:16:20.049083 2026] [:error] [pid 14686:tid 14701] [client 20.203.141.82:63717] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/77.php"] [unique_id "ae_SJO-YPF1Xm7uiWQ4f0wAAAMw"]
[Tue Apr 28 05:16:20.722394 2026] [:error] [pid 56602:tid 56625] [client 20.203.141.82:63683] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/77.php"] [unique_id "ae_SJPCwhMxzNW_lZSwfMQAAARU"]
[Tue Apr 28 05:16:21.452539 2026] [:error] [pid 14577:tid 14609] [client 20.203.141.82:7258] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.sghb.php"] [unique_id "ae_SJSzBH-jwzlgiBdGquAAAABc"]
[Tue Apr 28 05:16:22.178165 2026] [:error] [pid 14686:tid 14692] [client 20.203.141.82:39402] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.sghb.php"] [unique_id "ae_SJu-YPF1Xm7uiWQ4f2gAAAMM"]
[Tue Apr 28 05:16:22.903552 2026] [:error] [pid 14579:tid 14642] [client 20.203.141.82:45779] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.sghb.php"] [unique_id "ae_SJhrUiOG83qKKuuDltwAAAII"]
[Tue Apr 28 05:16:23.483381 2026] [:error] [pid 14686:tid 14695] [client 20.203.141.82:45817] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.sghb.php"] [unique_id "ae_SJ--YPF1Xm7uiWQ4f4AAAAMY"]
[Tue Apr 28 05:16:24.029501 2026] [:error] [pid 14686:tid 14701] [client 20.203.141.82:53445] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zoko.php"] [unique_id "ae_SKO-YPF1Xm7uiWQ4f4gAAAMw"]
[Tue Apr 28 05:16:24.668342 2026] [:error] [pid 14686:tid 14689] [client 20.203.141.82:49684] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zoko.php"] [unique_id "ae_SKO-YPF1Xm7uiWQ4f5gAAAMA"]
[Tue Apr 28 05:16:25.216482 2026] [:error] [pid 56602:tid 56618] [client 20.203.141.82:45813] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zoko.php"] [unique_id "ae_SKfCwhMxzNW_lZSwfPQAAAQ4"]
[Tue Apr 28 05:16:25.811355 2026] [:error] [pid 14579:tid 14656] [client 20.203.141.82:63733] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zoko.php"] [unique_id "ae_SKRrUiOG83qKKuuDluwAAAJA"]
[Tue Apr 28 05:16:26.426667 2026] [:error] [pid 14579:tid 14644] [client 20.203.141.82:63735] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/solo1.php"] [unique_id "ae_SKhrUiOG83qKKuuDlvAAAAIQ"]
[Tue Apr 28 05:16:27.063693 2026] [:error] [pid 14686:tid 14707] [client 20.203.141.82:53482] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/solo1.php"] [unique_id "ae_SK--YPF1Xm7uiWQ4f6AAAANI"]
[Tue Apr 28 05:16:27.664907 2026] [:error] [pid 14686:tid 14711] [client 20.203.141.82:49666] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/solo1.php"] [unique_id "ae_SK--YPF1Xm7uiWQ4f6gAAANY"]
[Tue Apr 28 05:16:28.289092 2026] [:error] [pid 14577:tid 14592] [client 20.203.141.82:63684] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/solo1.php"] [unique_id "ae_SLCzBH-jwzlgiBdGqwAAAAAY"]
[Tue Apr 28 05:16:28.866793 2026] [:error] [pid 14579:tid 14646] [client 20.203.141.82:49667] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/locales.php"] [unique_id "ae_SLBrUiOG83qKKuuDlvQAAAIY"]
[Tue Apr 28 05:16:29.481150 2026] [:error] [pid 14579:tid 14662] [client 20.203.141.82:63732] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/locales.php"] [unique_id "ae_SLRrUiOG83qKKuuDlvwAAAJY"]
[Tue Apr 28 05:16:30.208342 2026] [:error] [pid 14577:tid 14589] [client 20.203.141.82:49714] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/locales.php"] [unique_id "ae_SLizBH-jwzlgiBdGqwgAAAAM"]
[Tue Apr 28 05:16:30.812096 2026] [:error] [pid 14579:tid 14641] [client 20.203.141.82:39399] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/locales.php"] [unique_id "ae_SLhrUiOG83qKKuuDlwgAAAIE"]
[Tue Apr 28 05:16:31.468005 2026] [:error] [pid 14686:tid 14712] [client 20.203.141.82:53470] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bgymj.php"] [unique_id "ae_SL--YPF1Xm7uiWQ4f7AAAANc"]
[Tue Apr 28 05:16:32.072324 2026] [:error] [pid 14686:tid 14694] [client 20.203.141.82:39368] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bgymj.php"] [unique_id "ae_SMO-YPF1Xm7uiWQ4f7wAAAMU"]
[Tue Apr 28 05:16:32.814671 2026] [:error] [pid 14578:tid 14625] [client 20.203.141.82:45801] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bgymj.php"] [unique_id "ae_SMOngo3AwIJgfSHH3NwAAAEw"]
[Tue Apr 28 05:16:33.404439 2026] [:error] [pid 14578:tid 14616] [client 20.203.141.82:63725] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bgymj.php"] [unique_id "ae_SMengo3AwIJgfSHH3OAAAAEM"]
[Tue Apr 28 05:16:34.378616 2026] [:error] [pid 14579:tid 14664] [client 20.203.141.82:45781] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/pucci.php"] [unique_id "ae_SMhrUiOG83qKKuuDlyAAAAJg"]
[Tue Apr 28 05:16:35.217479 2026] [:error] [pid 14686:tid 14695] [client 20.203.141.82:7267] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/pucci.php"] [unique_id "ae_SM--YPF1Xm7uiWQ4f-gAAAMY"]
[Tue Apr 28 05:16:35.842190 2026] [:error] [pid 14579:tid 14646] [client 20.203.141.82:45782] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/pucci.php"] [unique_id "ae_SMxrUiOG83qKKuuDlzQAAAIY"]
[Tue Apr 28 05:16:36.591852 2026] [:error] [pid 14579:tid 14641] [client 20.203.141.82:7245] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/pucci.php"] [unique_id "ae_SNBrUiOG83qKKuuDl0gAAAIE"]
[Tue Apr 28 05:16:37.102833 2026] [:error] [pid 14578:tid 14626] [client 20.203.141.82:39361] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/details/"] [unique_id "ae_SNengo3AwIJgfSHH3OgAAAE0"]
[Tue Apr 28 05:16:37.720921 2026] [:error] [pid 14686:tid 14702] [client 20.203.141.82:53451] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/details/"] [unique_id "ae_SNe-YPF1Xm7uiWQ4gAAAAAM0"]
[Tue Apr 28 05:16:38.306062 2026] [:error] [pid 14578:tid 14623] [client 20.203.141.82:53462] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/details/"] [unique_id "ae_SNungo3AwIJgfSHH3PAAAAEo"]
[Tue Apr 28 05:16:38.983659 2026] [:error] [pid 56602:tid 56612] [client 20.203.141.82:45764] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/details/"] [unique_id "ae_SNvCwhMxzNW_lZSwfQgAAAQg"]
[Tue Apr 28 05:16:39.650730 2026] [:error] [pid 56602:tid 56604] [client 20.203.141.82:62540] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.dj/index.php"] [unique_id "ae_SN_CwhMxzNW_lZSwfRAAAAQA"]
[Tue Apr 28 05:16:40.319193 2026] [:error] [pid 14578:tid 14636] [client 20.203.141.82:62532] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.dj/index.php"] [unique_id "ae_SOOngo3AwIJgfSHH3PwAAAFc"]
[Tue Apr 28 05:16:41.107080 2026] [:error] [pid 14578:tid 14637] [client 20.203.141.82:45768] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.dj/index.php"] [unique_id "ae_SOengo3AwIJgfSHH3QAAAAFg"]
[Tue Apr 28 05:16:41.696428 2026] [:error] [pid 14686:tid 14690] [client 20.203.141.82:39389] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.dj/index.php"] [unique_id "ae_SOe-YPF1Xm7uiWQ4gAQAAAME"]
[Tue Apr 28 05:16:42.276906 2026] [:error] [pid 14686:tid 14706] [client 20.203.141.82:53454] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "ae_SOu-YPF1Xm7uiWQ4gAgAAANE"]
[Tue Apr 28 05:16:42.867016 2026] [:error] [pid 14578:tid 14620] [client 20.203.141.82:7247] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "ae_SOungo3AwIJgfSHH3QwAAAEc"]
[Tue Apr 28 05:16:43.551119 2026] [:error] [pid 14578:tid 14635] [client 20.203.141.82:53473] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "ae_SO-ngo3AwIJgfSHH3RQAAAFY"]
[Tue Apr 28 05:16:44.219885 2026] [:error] [pid 14577:tid 14599] [client 20.203.141.82:39386] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "ae_SPCzBH-jwzlgiBdGqygAAAA0"]
[Tue Apr 28 05:16:44.989457 2026] [:error] [pid 14579:tid 14651] [client 20.203.141.82:39387] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.tmb/"] [unique_id "ae_SPBrUiOG83qKKuuDl1gAAAIs"]
[Tue Apr 28 05:16:45.659625 2026] [:error] [pid 14578:tid 14632] [client 20.203.141.82:61608] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.tmb/"] [unique_id "ae_SPengo3AwIJgfSHH3SAAAAFM"]
[Tue Apr 28 05:16:46.199613 2026] [:error] [pid 14578:tid 14618] [client 20.203.141.82:39390] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.tmb/"] [unique_id "ae_SPungo3AwIJgfSHH3SQAAAEU"]
[Tue Apr 28 05:16:46.790042 2026] [:error] [pid 14579:tid 14645] [client 20.203.141.82:49701] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.tmb/"] [unique_id "ae_SPhrUiOG83qKKuuDl2AAAAIU"]
[Tue Apr 28 05:16:47.709834 2026] [:error] [pid 14686:tid 14712] [client 20.203.141.82:49677] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/one.php"] [unique_id "ae_SP--YPF1Xm7uiWQ4gCQAAANc"]
[Tue Apr 28 05:16:48.442209 2026] [:error] [pid 14577:tid 14597] [client 20.203.141.82:7266] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/one.php"] [unique_id "ae_SQCzBH-jwzlgiBdGqywAAAAs"]
[Tue Apr 28 05:16:49.189919 2026] [:error] [pid 14578:tid 14626] [client 20.203.141.82:49633] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/one.php"] [unique_id "ae_SQengo3AwIJgfSHH3TAAAAE0"]
[Tue Apr 28 05:16:50.202300 2026] [:error] [pid 14577:tid 14589] [client 20.203.141.82:7292] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/one.php"] [unique_id "ae_SQizBH-jwzlgiBdGqzgAAAAM"]
[Tue Apr 28 05:16:50.873007 2026] [:error] [pid 14686:tid 14705] [client 20.203.141.82:53455] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/no20.php"] [unique_id "ae_SQu-YPF1Xm7uiWQ4gCwAAANA"]
[Tue Apr 28 05:16:51.491711 2026] [:error] [pid 14686:tid 14694] [client 20.203.141.82:45808] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/no20.php"] [unique_id "ae_SQ--YPF1Xm7uiWQ4gDQAAAMU"]
[Tue Apr 28 05:16:52.064710 2026] [:error] [pid 56602:tid 56610] [client 20.203.141.82:45772] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/no20.php"] [unique_id "ae_SRPCwhMxzNW_lZSwfSwAAAQY"]
[Tue Apr 28 05:16:52.726684 2026] [:error] [pid 14686:tid 14708] [client 20.203.141.82:45794] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/no20.php"] [unique_id "ae_SRO-YPF1Xm7uiWQ4gFAAAANM"]
[Tue Apr 28 05:16:53.354505 2026] [:error] [pid 14579:tid 14656] [client 20.203.141.82:45763] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/yasnu.php"] [unique_id "ae_SRRrUiOG83qKKuuDl2QAAAJA"]
[Tue Apr 28 05:16:53.881994 2026] [:error] [pid 56602:tid 56609] [client 20.203.141.82:48986] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/yasnu.php"] [unique_id "ae_SRfCwhMxzNW_lZSwfTAAAAQU"]
[Tue Apr 28 05:16:54.519709 2026] [:error] [pid 14579:tid 14646] [client 20.203.141.82:61604] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/yasnu.php"] [unique_id "ae_SRhrUiOG83qKKuuDl2gAAAIY"]
[Tue Apr 28 05:16:55.193952 2026] [:error] [pid 56602:tid 56621] [client 20.203.141.82:53477] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/yasnu.php"] [unique_id "ae_SR_CwhMxzNW_lZSwfTQAAARE"]
[Tue Apr 28 05:16:55.909432 2026] [:error] [pid 56602:tid 56607] [client 20.203.141.82:62530] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sl.php"] [unique_id "ae_SR_CwhMxzNW_lZSwfTgAAAQM"]
[Tue Apr 28 05:16:56.502802 2026] [:error] [pid 56602:tid 56614] [client 20.203.141.82:63710] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sl.php"] [unique_id "ae_SSPCwhMxzNW_lZSwfUAAAAQo"]
[Tue Apr 28 05:16:57.114052 2026] [:error] [pid 14577:tid 14600] [client 20.203.141.82:45820] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sl.php"] [unique_id "ae_SSSzBH-jwzlgiBdGq0gAAAA4"]
[Tue Apr 28 05:16:57.627172 2026] [:error] [pid 56602:tid 56623] [client 20.203.141.82:62529] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sl.php"] [unique_id "ae_SSfCwhMxzNW_lZSwfUQAAARM"]
[Tue Apr 28 05:16:58.182289 2026] [:error] [pid 56602:tid 56617] [client 20.203.141.82:45760] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vuln.php"] [unique_id "ae_SSvCwhMxzNW_lZSwfUwAAAQ0"]
[Tue Apr 28 05:16:58.763134 2026] [:error] [pid 56602:tid 56606] [client 20.203.141.82:7232] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vuln.php"] [unique_id "ae_SSvCwhMxzNW_lZSwfVAAAAQI"]
[Tue Apr 28 05:16:59.271937 2026] [:error] [pid 56602:tid 56618] [client 20.203.141.82:62574] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vuln.php"] [unique_id "ae_SS_CwhMxzNW_lZSwfVQAAAQ4"]
[Tue Apr 28 05:16:59.789122 2026] [:error] [pid 56602:tid 56619] [client 20.203.141.82:39375] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vuln.php"] [unique_id "ae_SS_CwhMxzNW_lZSwfVgAAAQ8"]
[Tue Apr 28 05:17:00.448135 2026] [:error] [pid 14578:tid 14624] [client 20.203.141.82:45798] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-temp.php"] [unique_id "ae_STOngo3AwIJgfSHH3UQAAAEs"]
[Tue Apr 28 05:17:01.034857 2026] [:error] [pid 56602:tid 56608] [client 20.203.141.82:7236] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-temp.php"] [unique_id "ae_STfCwhMxzNW_lZSwfVwAAAQQ"]
[Tue Apr 28 05:17:01.675307 2026] [:error] [pid 14578:tid 14621] [client 20.203.141.82:53447] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-temp.php"] [unique_id "ae_STengo3AwIJgfSHH3VAAAAEg"]
[Tue Apr 28 05:17:02.337757 2026] [:error] [pid 14578:tid 14616] [client 20.203.141.82:7265] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-temp.php"] [unique_id "ae_STungo3AwIJgfSHH3VwAAAEM"]
[Tue Apr 28 05:17:02.979643 2026] [:error] [pid 56602:tid 56609] [client 20.203.141.82:62580] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "ae_STvCwhMxzNW_lZSwfXwAAAQU"]
[Tue Apr 28 05:17:03.912540 2026] [:error] [pid 14686:tid 14709] [client 20.203.141.82:63697] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "ae_ST--YPF1Xm7uiWQ4gIQAAANQ"]
[Tue Apr 28 05:17:04.505264 2026] [:error] [pid 56602:tid 56620] [client 20.203.141.82:48960] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "ae_SUPCwhMxzNW_lZSwfYQAAARA"]
[Tue Apr 28 05:17:05.040683 2026] [:error] [pid 56602:tid 56612] [client 20.203.141.82:53483] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "ae_SUfCwhMxzNW_lZSwfYgAAAQg"]
[Tue Apr 28 05:17:05.588319 2026] [:error] [pid 56602:tid 56623] [client 20.203.141.82:7271] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "ae_SUfCwhMxzNW_lZSwfYwAAARM"]
[Tue Apr 28 05:17:06.117565 2026] [:error] [pid 14579:tid 14659] [client 20.203.141.82:62586] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "ae_SUhrUiOG83qKKuuDl3QAAAJM"]
[Tue Apr 28 05:17:06.829068 2026] [:error] [pid 14579:tid 14653] [client 20.203.141.82:49705] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "ae_SUhrUiOG83qKKuuDl3gAAAI0"]
[Tue Apr 28 05:17:07.419623 2026] [:error] [pid 14577:tid 14605] [client 20.203.141.82:45790] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "ae_SUyzBH-jwzlgiBdGq0wAAABM"]
[Tue Apr 28 05:17:07.969809 2026] [:error] [pid 14577:tid 14602] [client 20.203.141.82:45793] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class-bda.php"] [unique_id "ae_SUyzBH-jwzlgiBdGq1QAAABA"]
[Tue Apr 28 05:17:08.488935 2026] [:error] [pid 14578:tid 14636] [client 20.203.141.82:62591] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class-bda.php"] [unique_id "ae_SVOngo3AwIJgfSHH3WQAAAFc"]
[Tue Apr 28 05:17:09.062364 2026] [:error] [pid 56602:tid 56608] [client 20.203.141.82:45812] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class-bda.php"] [unique_id "ae_SVfCwhMxzNW_lZSwfZgAAAQQ"]
[Tue Apr 28 05:17:09.596774 2026] [:error] [pid 56602:tid 56605] [client 20.203.141.82:7284] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class-bda.php"] [unique_id "ae_SVfCwhMxzNW_lZSwfZwAAAQE"]
[Tue Apr 28 05:17:10.159061 2026] [:error] [pid 14577:tid 14599] [client 20.203.141.82:39411] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bhm.php"] [unique_id "ae_SVizBH-jwzlgiBdGq1gAAAA0"]
[Tue Apr 28 05:17:10.806307 2026] [:error] [pid 14686:tid 14713] [client 20.203.141.82:45804] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bhm.php"] [unique_id "ae_SVu-YPF1Xm7uiWQ4gKQAAANg"]
[Tue Apr 28 05:17:11.364455 2026] [:error] [pid 14578:tid 14620] [client 20.203.141.82:39370] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bhm.php"] [unique_id "ae_SV-ngo3AwIJgfSHH3WgAAAEc"]
[Tue Apr 28 05:17:11.932352 2026] [:error] [pid 14578:tid 14631] [client 20.203.141.82:39367] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bhm.php"] [unique_id "ae_SV-ngo3AwIJgfSHH3XAAAAFI"]
[Tue Apr 28 05:17:12.536057 2026] [:error] [pid 14578:tid 14622] [client 20.203.141.82:49708] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xmu.php"] [unique_id "ae_SWOngo3AwIJgfSHH3XQAAAEk"]
[Tue Apr 28 05:17:13.246722 2026] [:error] [pid 56602:tid 56620] [client 20.203.141.82:49690] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xmu.php"] [unique_id "ae_SWfCwhMxzNW_lZSwfcAAAARA"]
[Tue Apr 28 05:17:14.213249 2026] [:error] [pid 56602:tid 56623] [client 20.203.141.82:45784] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xmu.php"] [unique_id "ae_SWvCwhMxzNW_lZSwfcwAAARM"]
[Tue Apr 28 05:17:14.800923 2026] [:error] [pid 56602:tid 56604] [client 20.203.141.82:63728] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xmu.php"] [unique_id "ae_SWvCwhMxzNW_lZSwfdAAAAQA"]
[Tue Apr 28 05:17:15.347891 2026] [proxy_fcgi:error] [pid 56602:tid 56618] [client 20.203.141.82:49716] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 05:17:15.587627 2026] [proxy_fcgi:error] [pid 56602:tid 56608] [client 20.203.141.82:49716] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 05:17:15.828691 2026] [proxy_fcgi:error] [pid 56602:tid 56605] [client 20.203.141.82:49716] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 05:17:16.073786 2026] [proxy_fcgi:error] [pid 56602:tid 56628] [client 20.203.141.82:49716] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 05:17:16.325461 2026] [proxy_fcgi:error] [pid 56602:tid 56611] [client 20.203.141.82:49716] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 05:17:16.566654 2026] [proxy_fcgi:error] [pid 56602:tid 56609] [client 20.203.141.82:49716] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 05:17:17.045568 2026] [proxy_fcgi:error] [pid 56602:tid 56625] [client 20.203.141.82:49716] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 05:17:17.287942 2026] [proxy_fcgi:error] [pid 56602:tid 56604] [client 20.203.141.82:49716] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 05:17:17.528467 2026] [proxy_fcgi:error] [pid 56602:tid 56617] [client 20.203.141.82:49716] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 05:17:17.768781 2026] [proxy_fcgi:error] [pid 56602:tid 56614] [client 20.203.141.82:49716] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 05:17:18.005863 2026] [:error] [pid 56602:tid 56627] [client 20.203.141.82:49716] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/themes.php"] [unique_id "ae_SXvCwhMxzNW_lZSwfjQAAARc"]
[Tue Apr 28 05:17:18.642054 2026] [:error] [pid 56602:tid 56609] [client 20.203.141.82:49676] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/themes.php"] [unique_id "ae_SXvCwhMxzNW_lZSwfkgAAAQU"]
[Tue Apr 28 05:17:19.225687 2026] [:error] [pid 56602:tid 56614] [client 20.203.141.82:53491] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/themes.php"] [unique_id "ae_SX_CwhMxzNW_lZSwflgAAAQo"]
[Tue Apr 28 05:17:19.805904 2026] [:error] [pid 14577:tid 14601] [client 20.203.141.82:61755] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/themes.php"] [unique_id "ae_SXyzBH-jwzlgiBdGq2QAAAA8"]
[Tue Apr 28 05:17:20.579170 2026] [:error] [pid 56602:tid 56621] [client 20.203.141.82:45814] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ewp.php"] [unique_id "ae_SYPCwhMxzNW_lZSwfoAAAARE"]
[Tue Apr 28 05:17:21.153967 2026] [:error] [pid 56602:tid 56607] [client 20.203.141.82:53503] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ewp.php"] [unique_id "ae_SYfCwhMxzNW_lZSwfowAAAQM"]
[Tue Apr 28 05:17:21.716078 2026] [:error] [pid 56602:tid 56615] [client 20.203.141.82:45761] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ewp.php"] [unique_id "ae_SYfCwhMxzNW_lZSwfqgAAAQs"]
[Tue Apr 28 05:17:22.269938 2026] [:error] [pid 56602:tid 56609] [client 20.203.141.82:49710] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ewp.php"] [unique_id "ae_SYvCwhMxzNW_lZSwfrgAAAQU"]
[Tue Apr 28 05:17:22.836014 2026] [:error] [pid 14686:tid 14709] [client 20.203.141.82:48972] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dx.php"] [unique_id "ae_SYu-YPF1Xm7uiWQ4gLAAAANQ"]
[Tue Apr 28 05:17:23.507899 2026] [:error] [pid 56602:tid 56616] [client 20.203.141.82:39397] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dx.php"] [unique_id "ae_SY_CwhMxzNW_lZSwftwAAAQw"]
[Tue Apr 28 05:17:24.053536 2026] [:error] [pid 56602:tid 56608] [client 20.203.141.82:62587] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dx.php"] [unique_id "ae_SZPCwhMxzNW_lZSwfugAAAQQ"]
[Tue Apr 28 05:17:24.620547 2026] [:error] [pid 14579:tid 14649] [client 20.203.141.82:53460] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dx.php"] [unique_id "ae_SZBrUiOG83qKKuuDl5wAAAIk"]
[Tue Apr 28 05:17:25.142104 2026] [:error] [pid 56602:tid 56618] [client 20.203.141.82:7746] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xff.php"] [unique_id "ae_SZfCwhMxzNW_lZSwfwAAAAQ4"]
[Tue Apr 28 05:17:25.724460 2026] [:error] [pid 14686:tid 14696] [client 20.203.141.82:53446] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xff.php"] [unique_id "ae_SZe-YPF1Xm7uiWQ4gLwAAAMc"]
[Tue Apr 28 05:17:26.266661 2026] [:error] [pid 14578:tid 14626] [client 20.203.141.82:62537] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xff.php"] [unique_id "ae_SZungo3AwIJgfSHH3YgAAAE0"]
[Tue Apr 28 05:17:26.749887 2026] [:error] [pid 56602:tid 56608] [client 20.203.141.82:49681] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xff.php"] [unique_id "ae_SZvCwhMxzNW_lZSwfyAAAAQQ"]
[Tue Apr 28 05:17:27.352826 2026] [:error] [pid 56602:tid 56613] [client 20.203.141.82:53456] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lupo.php"] [unique_id "ae_SZ_CwhMxzNW_lZSwfyQAAAQk"]
[Tue Apr 28 05:17:27.910936 2026] [:error] [pid 14578:tid 14633] [client 20.203.141.82:49704] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lupo.php"] [unique_id "ae_SZ-ngo3AwIJgfSHH3YwAAAFQ"]
[Tue Apr 28 05:17:28.507060 2026] [:error] [pid 14579:tid 14658] [client 20.203.141.82:61720] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lupo.php"] [unique_id "ae_SaBrUiOG83qKKuuDl7QAAAJI"]
[Tue Apr 28 05:17:29.143969 2026] [:error] [pid 14579:tid 14657] [client 20.203.141.82:45767] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lupo.php"] [unique_id "ae_SaRrUiOG83qKKuuDl7wAAAJE"]
[Tue Apr 28 05:17:29.807525 2026] [:error] [pid 14579:tid 14654] [client 20.203.141.82:49671] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/awa.php"] [unique_id "ae_SaRrUiOG83qKKuuDl8AAAAI4"]
[Tue Apr 28 05:17:30.364688 2026] [:error] [pid 14579:tid 14648] [client 20.203.141.82:7260] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/awa.php"] [unique_id "ae_SahrUiOG83qKKuuDl8QAAAIg"]
[Tue Apr 28 05:17:30.927705 2026] [:error] [pid 56602:tid 56610] [client 20.203.141.82:53463] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/awa.php"] [unique_id "ae_SavCwhMxzNW_lZSwf1gAAAQY"]
[Tue Apr 28 05:17:31.539335 2026] [:error] [pid 56602:tid 56606] [client 20.203.141.82:39374] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/awa.php"] [unique_id "ae_Sa_CwhMxzNW_lZSwf2AAAAQI"]
[Tue Apr 28 05:17:32.153464 2026] [:error] [pid 14686:tid 14691] [client 20.203.141.82:63703] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/popo.php"] [unique_id "ae_SbO-YPF1Xm7uiWQ4gMQAAAMI"]
[Tue Apr 28 05:17:32.701669 2026] [:error] [pid 14686:tid 14712] [client 20.203.141.82:62560] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/popo.php"] [unique_id "ae_SbO-YPF1Xm7uiWQ4gMwAAANc"]
[Tue Apr 28 05:17:33.303165 2026] [:error] [pid 56602:tid 56615] [client 20.203.141.82:49711] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/popo.php"] [unique_id "ae_SbfCwhMxzNW_lZSwf3AAAAQs"]
[Tue Apr 28 05:17:33.987020 2026] [:error] [pid 56602:tid 56614] [client 20.203.141.82:39381] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/popo.php"] [unique_id "ae_SbfCwhMxzNW_lZSwf3wAAAQo"]
[Tue Apr 28 05:17:34.632843 2026] [:error] [pid 56602:tid 56628] [client 20.203.141.82:62533] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/13.php"] [unique_id "ae_SbvCwhMxzNW_lZSwf4AAAARg"]
[Tue Apr 28 05:17:35.211476 2026] [:error] [pid 56602:tid 56609] [client 20.203.141.82:49694] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/13.php"] [unique_id "ae_Sb_CwhMxzNW_lZSwf4QAAAQU"]
[Tue Apr 28 05:17:35.800481 2026] [:error] [pid 14579:tid 14655] [client 20.203.141.82:53496] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/13.php"] [unique_id "ae_SbxrUiOG83qKKuuDl9AAAAI8"]
[Tue Apr 28 05:17:36.363345 2026] [:error] [pid 14579:tid 14644] [client 20.203.141.82:53488] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/13.php"] [unique_id "ae_ScBrUiOG83qKKuuDl9QAAAIQ"]
[Tue Apr 28 05:17:37.161006 2026] [:error] [pid 56602:tid 56626] [client 20.203.141.82:63729] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/11.php"] [unique_id "ae_ScfCwhMxzNW_lZSwf5AAAARY"]
[Tue Apr 28 05:17:37.683045 2026] [:error] [pid 56602:tid 56617] [client 20.203.141.82:49706] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/11.php"] [unique_id "ae_ScfCwhMxzNW_lZSwf5gAAAQ0"]
[Tue Apr 28 05:17:38.278593 2026] [:error] [pid 56602:tid 56607] [client 20.203.141.82:45765] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/11.php"] [unique_id "ae_ScvCwhMxzNW_lZSwf6gAAAQM"]
[Tue Apr 28 05:17:38.806185 2026] [:error] [pid 14579:tid 14662] [client 20.203.141.82:63711] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/11.php"] [unique_id "ae_SchrUiOG83qKKuuDl9wAAAJY"]
[Tue Apr 28 05:17:39.417260 2026] [:error] [pid 14686:tid 14693] [client 20.203.141.82:45785] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/p.php"] [unique_id "ae_Sc--YPF1Xm7uiWQ4gNgAAAMQ"]
[Tue Apr 28 05:17:39.958915 2026] [:error] [pid 14578:tid 14622] [client 20.203.141.82:55828] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/p.php"] [unique_id "ae_Sc-ngo3AwIJgfSHH3ZgAAAEk"]
[Tue Apr 28 05:17:40.465979 2026] [:error] [pid 14686:tid 14689] [client 20.203.141.82:63743] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/p.php"] [unique_id "ae_SdO-YPF1Xm7uiWQ4gOAAAAMA"]
[Tue Apr 28 05:17:41.077287 2026] [:error] [pid 14577:tid 14586] [client 20.203.141.82:63702] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/p.php"] [unique_id "ae_SdSzBH-jwzlgiBdGq4wAAAAA"]
[Tue Apr 28 05:17:41.644992 2026] [:error] [pid 14686:tid 14697] [client 20.203.141.82:55858] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Requests/"] [unique_id "ae_Sde-YPF1Xm7uiWQ4gOgAAAMg"]
[Tue Apr 28 05:17:42.137534 2026] [:error] [pid 14579:tid 14650] [client 20.203.141.82:48982] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Requests/"] [unique_id "ae_SdhrUiOG83qKKuuDl_AAAAIo"]
[Tue Apr 28 05:17:42.659696 2026] [:error] [pid 14579:tid 14657] [client 20.203.141.82:49681] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Requests/"] [unique_id "ae_SdhrUiOG83qKKuuDl_QAAAJE"]
[Tue Apr 28 05:17:43.179825 2026] [:error] [pid 14578:tid 14614] [client 20.203.141.82:55831] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Requests/"] [unique_id "ae_Sd-ngo3AwIJgfSHH3aQAAAEE"]
[Tue Apr 28 05:17:43.750210 2026] [:error] [pid 14578:tid 14627] [client 20.203.141.82:49664] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bthil.php"] [unique_id "ae_Sd-ngo3AwIJgfSHH3awAAAE4"]
[Tue Apr 28 05:17:44.264592 2026] [:error] [pid 14578:tid 14629] [client 20.203.141.82:48993] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bthil.php"] [unique_id "ae_SeOngo3AwIJgfSHH3bAAAAFA"]
[Tue Apr 28 05:17:44.813139 2026] [:error] [pid 14577:tid 14602] [client 20.203.141.82:45799] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bthil.php"] [unique_id "ae_SeCzBH-jwzlgiBdGq5AAAABA"]
[Tue Apr 28 05:17:45.365652 2026] [:error] [pid 14578:tid 14635] [client 20.203.141.82:55859] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bthil.php"] [unique_id "ae_Seengo3AwIJgfSHH3bQAAAFY"]
[Tue Apr 28 05:17:45.883206 2026] [:error] [pid 14577:tid 14603] [client 20.203.141.82:49601] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/shell.php"] [unique_id "ae_SeSzBH-jwzlgiBdGq5wAAABE"]
[Tue Apr 28 05:17:46.478678 2026] [:error] [pid 14577:tid 14607] [client 20.203.141.82:7264] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/shell.php"] [unique_id "ae_SeizBH-jwzlgiBdGq6QAAABU"]
[Tue Apr 28 05:17:47.082947 2026] [:error] [pid 14579:tid 14663] [client 20.203.141.82:53474] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/shell.php"] [unique_id "ae_SexrUiOG83qKKuuDl_wAAAJc"]
[Tue Apr 28 05:17:47.711849 2026] [:error] [pid 14577:tid 14592] [client 20.203.141.82:39410] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/shell.php"] [unique_id "ae_SeyzBH-jwzlgiBdGq6gAAAAY"]
[Tue Apr 28 05:17:48.242080 2026] [:error] [pid 14579:tid 14645] [client 20.203.141.82:39401] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/seo.php"] [unique_id "ae_SfBrUiOG83qKKuuDmAgAAAIU"]
[Tue Apr 28 05:17:48.812424 2026] [:error] [pid 14579:tid 14647] [client 20.203.141.82:49678] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/seo.php"] [unique_id "ae_SfBrUiOG83qKKuuDmAwAAAIc"]
[Tue Apr 28 05:17:49.452492 2026] [:error] [pid 14686:tid 14706] [client 20.203.141.82:49674] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/seo.php"] [unique_id "ae_Sfe-YPF1Xm7uiWQ4gQAAAANE"]
[Tue Apr 28 05:17:49.959964 2026] [:error] [pid 14579:tid 14649] [client 20.203.141.82:45774] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/seo.php"] [unique_id "ae_SfRrUiOG83qKKuuDmBAAAAIk"]
[Tue Apr 28 05:17:50.540861 2026] [:error] [pid 14577:tid 14595] [client 20.203.141.82:39372] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/7.php"] [unique_id "ae_SfizBH-jwzlgiBdGq6wAAAAk"]
[Tue Apr 28 05:17:51.084434 2026] [:error] [pid 14686:tid 14704] [client 20.203.141.82:55849] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/7.php"] [unique_id "ae_Sf--YPF1Xm7uiWQ4gQwAAAM8"]
[Tue Apr 28 05:17:51.710574 2026] [:error] [pid 14579:tid 14655] [client 20.203.141.82:55818] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/7.php"] [unique_id "ae_SfxrUiOG83qKKuuDmBQAAAI8"]
[Tue Apr 28 05:17:52.293854 2026] [:error] [pid 14577:tid 14593] [client 20.203.141.82:44879] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/7.php"] [unique_id "ae_SgCzBH-jwzlgiBdGq7gAAAAc"]
[Tue Apr 28 05:17:52.903422 2026] [:error] [pid 14579:tid 14644] [client 20.203.141.82:48968] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/8.php"] [unique_id "ae_SgBrUiOG83qKKuuDmBgAAAIQ"]
[Tue Apr 28 05:17:53.426773 2026] [:error] [pid 14579:tid 14659] [client 20.203.141.82:39415] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/8.php"] [unique_id "ae_SgRrUiOG83qKKuuDmBwAAAJM"]
[Tue Apr 28 05:17:54.049687 2026] [:error] [pid 14579:tid 14653] [client 20.203.141.82:62564] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/8.php"] [unique_id "ae_SghrUiOG83qKKuuDmCAAAAI0"]
[Tue Apr 28 05:17:54.655838 2026] [:error] [pid 14578:tid 14613] [client 20.203.141.82:63741] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/8.php"] [unique_id "ae_Sgungo3AwIJgfSHH3cgAAAEA"]
[Tue Apr 28 05:17:55.265563 2026] [:error] [pid 14578:tid 14633] [client 20.203.141.82:63740] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/1.php"] [unique_id "ae_Sg-ngo3AwIJgfSHH3cwAAAFQ"]
[Tue Apr 28 05:17:55.766357 2026] [:error] [pid 14686:tid 14700] [client 20.203.141.82:7282] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/1.php"] [unique_id "ae_Sg--YPF1Xm7uiWQ4gSAAAAMs"]
[Tue Apr 28 05:17:56.341857 2026] [:error] [pid 14577:tid 14591] [client 20.203.141.82:53457] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/1.php"] [unique_id "ae_ShCzBH-jwzlgiBdGq7wAAAAU"]
[Tue Apr 28 05:17:56.967454 2026] [:error] [pid 14579:tid 14641] [client 20.203.141.82:7240] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/1.php"] [unique_id "ae_ShBrUiOG83qKKuuDmCQAAAIE"]
[Tue Apr 28 05:17:57.587463 2026] [:error] [pid 14579:tid 14660] [client 20.203.141.82:44868] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2.php"] [unique_id "ae_ShRrUiOG83qKKuuDmCgAAAJQ"]
[Tue Apr 28 05:17:58.161948 2026] [:error] [pid 14686:tid 14698] [client 20.203.141.82:7251] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2.php"] [unique_id "ae_Shu-YPF1Xm7uiWQ4gWQAAAMk"]
[Tue Apr 28 05:17:58.721069 2026] [:error] [pid 14686:tid 14711] [client 20.203.141.82:61735] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2.php"] [unique_id "ae_Shu-YPF1Xm7uiWQ4gXQAAANY"]
[Tue Apr 28 05:17:59.227509 2026] [:error] [pid 14579:tid 14642] [client 20.203.141.82:39423] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2.php"] [unique_id "ae_ShxrUiOG83qKKuuDmCwAAAII"]
[Tue Apr 28 05:18:00.066929 2026] [:error] [pid 14686:tid 14689] [client 20.203.141.82:53441] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/3.php"] [unique_id "ae_SiO-YPF1Xm7uiWQ4gZQAAAMA"]
[Tue Apr 28 05:18:00.660658 2026] [:error] [pid 14579:tid 14658] [client 20.203.141.82:7571] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/3.php"] [unique_id "ae_SiBrUiOG83qKKuuDmDAAAAJI"]
[Tue Apr 28 05:18:01.175496 2026] [:error] [pid 14686:tid 14713] [client 20.203.141.82:63680] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/3.php"] [unique_id "ae_Sie-YPF1Xm7uiWQ4gaAAAANg"]
[Tue Apr 28 05:18:01.722420 2026] [:error] [pid 14686:tid 14702] [client 20.203.141.82:55863] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/3.php"] [unique_id "ae_Sie-YPF1Xm7uiWQ4gawAAAM0"]
[Tue Apr 28 05:18:02.303985 2026] [:error] [pid 14579:tid 14654] [client 20.203.141.82:39379] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/4.php"] [unique_id "ae_SihrUiOG83qKKuuDmDwAAAI4"]
[Tue Apr 28 05:18:02.867755 2026] [:error] [pid 14578:tid 14614] [client 20.203.141.82:48960] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/4.php"] [unique_id "ae_Siungo3AwIJgfSHH3dwAAAEE"]
[Tue Apr 28 05:18:03.406318 2026] [:error] [pid 14577:tid 14600] [client 20.203.141.82:39405] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/4.php"] [unique_id "ae_SiyzBH-jwzlgiBdGq8wAAAA4"]
[Tue Apr 28 05:18:03.981527 2026] [:error] [pid 14579:tid 14651] [client 20.203.141.82:61661] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/4.php"] [unique_id "ae_SixrUiOG83qKKuuDmFAAAAIs"]
[Tue Apr 28 05:18:04.798423 2026] [:error] [pid 14578:tid 14627] [client 20.203.141.82:53465] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/5.php"] [unique_id "ae_SjOngo3AwIJgfSHH3eQAAAE4"]
[Tue Apr 28 05:18:05.391757 2026] [:error] [pid 14579:tid 14648] [client 20.203.141.82:45797] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/5.php"] [unique_id "ae_SjRrUiOG83qKKuuDmFQAAAIg"]
[Tue Apr 28 05:18:06.070575 2026] [:error] [pid 14686:tid 14689] [client 20.203.141.82:53469] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/5.php"] [unique_id "ae_Sju-YPF1Xm7uiWQ4gcQAAAMA"]
[Tue Apr 28 05:18:06.797131 2026] [:error] [pid 14577:tid 14610] [client 20.203.141.82:39406] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/5.php"] [unique_id "ae_SjizBH-jwzlgiBdGq9AAAABg"]
[Tue Apr 28 05:18:07.507457 2026] [:error] [pid 56602:tid 56618] [client 20.203.141.82:55829] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/6.php"] [unique_id "ae_Sj_CwhMxzNW_lZSwf7wAAAQ4"]
[Tue Apr 28 05:18:08.143885 2026] [:error] [pid 56602:tid 56612] [client 20.203.141.82:7235] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/6.php"] [unique_id "ae_SkPCwhMxzNW_lZSwf8AAAAQg"]
[Tue Apr 28 05:18:08.663150 2026] [:error] [pid 56602:tid 56622] [client 20.203.141.82:61652] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/6.php"] [unique_id "ae_SkPCwhMxzNW_lZSwf8wAAARI"]
[Tue Apr 28 05:18:09.201898 2026] [:error] [pid 14578:tid 14629] [client 20.203.141.82:53492] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/6.php"] [unique_id "ae_Skengo3AwIJgfSHH3ewAAAFA"]
[Tue Apr 28 05:18:09.877208 2026] [:error] [pid 56602:tid 56619] [client 20.203.141.82:44888] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/9.php"] [unique_id "ae_SkfCwhMxzNW_lZSwf9AAAAQ8"]
[Tue Apr 28 05:18:10.470274 2026] [:error] [pid 56602:tid 56605] [client 20.203.141.82:61644] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/9.php"] [unique_id "ae_SkvCwhMxzNW_lZSwf9QAAAQE"]
[Tue Apr 28 05:18:10.993367 2026] [:error] [pid 56602:tid 56627] [client 20.203.141.82:53456] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/9.php"] [unique_id "ae_SkvCwhMxzNW_lZSwf9gAAARc"]
[Tue Apr 28 05:18:11.642815 2026] [:error] [pid 56602:tid 56616] [client 20.203.141.82:44906] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/9.php"] [unique_id "ae_Sk_CwhMxzNW_lZSwf-wAAAQw"]
[Tue Apr 28 05:18:12.213876 2026] [:error] [pid 14579:tid 14650] [client 20.203.141.82:55864] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/10.php"] [unique_id "ae_SlBrUiOG83qKKuuDmHQAAAIo"]
[Tue Apr 28 05:18:12.763827 2026] [:error] [pid 56602:tid 56621] [client 20.203.141.82:61649] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/10.php"] [unique_id "ae_SlPCwhMxzNW_lZSwf_AAAARE"]
[Tue Apr 28 05:18:13.302857 2026] [:error] [pid 14579:tid 14661] [client 20.203.141.82:62566] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/10.php"] [unique_id "ae_SlRrUiOG83qKKuuDmHgAAAJU"]
[Tue Apr 28 05:18:13.923523 2026] [:error] [pid 14579:tid 14652] [client 20.203.141.82:45803] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/10.php"] [unique_id "ae_SlRrUiOG83qKKuuDmIAAAAIw"]
[Tue Apr 28 05:18:14.596626 2026] [:error] [pid 56602:tid 56608] [client 20.203.141.82:62541] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/100.php"] [unique_id "ae_SlvCwhMxzNW_lZSwf_QAAAQQ"]
[Tue Apr 28 05:18:15.260728 2026] [:error] [pid 14579:tid 14648] [client 20.203.141.82:39409] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/100.php"] [unique_id "ae_SlxrUiOG83qKKuuDmIgAAAIg"]
[Tue Apr 28 05:18:15.756500 2026] [:error] [pid 56602:tid 56610] [client 20.203.141.82:61679] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/100.php"] [unique_id "ae_Sl_CwhMxzNW_lZSwf_wAAAQY"]
[Tue Apr 28 05:18:16.314673 2026] [:error] [pid 14579:tid 14656] [client 20.203.141.82:39385] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/100.php"] [unique_id "ae_SmBrUiOG83qKKuuDmIwAAAJA"]
[Tue Apr 28 05:18:16.842597 2026] [:error] [pid 14579:tid 14663] [client 20.203.141.82:7598] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/nastar.php"] [unique_id "ae_SmBrUiOG83qKKuuDmJQAAAJc"]
[Tue Apr 28 05:18:17.677631 2026] [proxy_fcgi:error] [pid 56602:tid 56627] [client 20.203.141.82:44924] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 05:18:18.003884 2026] [proxy_fcgi:error] [pid 56602:tid 56604] [client 20.203.141.82:44924] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 05:18:18.245299 2026] [proxy_fcgi:error] [pid 56602:tid 56614] [client 20.203.141.82:44924] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 05:18:18.498607 2026] [proxy_fcgi:error] [pid 56602:tid 56609] [client 20.203.141.82:44924] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 05:18:18.743822 2026] [proxy_fcgi:error] [pid 56602:tid 56611] [client 20.203.141.82:44924] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 05:18:18.984479 2026] [proxy_fcgi:error] [pid 56602:tid 56625] [client 20.203.141.82:44924] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 05:18:19.246458 2026] [proxy_fcgi:error] [pid 56602:tid 56621] [client 20.203.141.82:44924] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 05:18:19.486683 2026] [proxy_fcgi:error] [pid 56602:tid 56616] [client 20.203.141.82:44924] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 05:18:19.726727 2026] [proxy_fcgi:error] [pid 56602:tid 56626] [client 20.203.141.82:44924] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 05:18:19.966554 2026] [proxy_fcgi:error] [pid 56602:tid 56608] [client 20.203.141.82:44924] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 05:18:20.203047 2026] [:error] [pid 56602:tid 56617] [client 20.203.141.82:44924] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/uuu.php"] [unique_id "ae_SnPCwhMxzNW_lZSwgDwAAAQ0"]
[Tue Apr 28 05:18:20.691889 2026] [:error] [pid 14686:tid 14709] [client 20.203.141.82:7592] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/uuu.php"] [unique_id "ae_SnO-YPF1Xm7uiWQ4geAAAANQ"]
[Tue Apr 28 05:18:21.231713 2026] [:error] [pid 14686:tid 14691] [client 20.203.141.82:44914] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/uuu.php"] [unique_id "ae_Sne-YPF1Xm7uiWQ4gegAAAMI"]
[Tue Apr 28 05:18:21.727259 2026] [:error] [pid 56602:tid 56620] [client 20.203.141.82:53479] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/uuu.php"] [unique_id "ae_SnfCwhMxzNW_lZSwgEAAAARA"]
[Tue Apr 28 05:18:22.281981 2026] [:error] [pid 14578:tid 14616] [client 20.203.141.82:44896] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/no1.php"] [unique_id "ae_Snungo3AwIJgfSHH3fQAAAEM"]
[Tue Apr 28 05:18:22.847114 2026] [:error] [pid 14579:tid 14644] [client 20.203.141.82:7573] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/no1.php"] [unique_id "ae_SnhrUiOG83qKKuuDmKAAAAIQ"]
[Tue Apr 28 05:18:23.442490 2026] [:error] [pid 56602:tid 56613] [client 20.203.141.82:61692] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/no1.php"] [unique_id "ae_Sn_CwhMxzNW_lZSwgFAAAAQk"]
[Tue Apr 28 05:18:23.942929 2026] [:error] [pid 56602:tid 56624] [client 20.203.141.82:39415] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/no1.php"] [unique_id "ae_Sn_CwhMxzNW_lZSwgFwAAARQ"]
[Tue Apr 28 05:18:24.518683 2026] [:error] [pid 14579:tid 14641] [client 20.203.141.82:7589] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/w2025.php"] [unique_id "ae_SoBrUiOG83qKKuuDmKQAAAIE"]
[Tue Apr 28 05:18:25.094613 2026] [:error] [pid 14579:tid 14645] [client 20.203.141.82:55835] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/w2025.php"] [unique_id "ae_SoRrUiOG83qKKuuDmKgAAAIU"]
[Tue Apr 28 05:18:25.653206 2026] [:error] [pid 14579:tid 14640] [client 20.203.141.82:45741] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/w2025.php"] [unique_id "ae_SoRrUiOG83qKKuuDmLQAAAIA"]
[Tue Apr 28 05:18:26.161165 2026] [:error] [pid 14579:tid 14664] [client 20.203.141.82:45742] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/w2025.php"] [unique_id "ae_SohrUiOG83qKKuuDmLgAAAJg"]
[Tue Apr 28 05:18:26.641897 2026] [:error] [pid 14686:tid 14699] [client 20.203.141.82:45806] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fvvff.php"] [unique_id "ae_Sou-YPF1Xm7uiWQ4gfQAAAMo"]
[Tue Apr 28 05:18:27.171029 2026] [:error] [pid 14686:tid 14708] [client 20.203.141.82:7602] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fvvff.php"] [unique_id "ae_So--YPF1Xm7uiWQ4gfgAAANM"]
[Tue Apr 28 05:18:27.698099 2026] [:error] [pid 14579:tid 14654] [client 20.203.141.82:7600] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fvvff.php"] [unique_id "ae_SoxrUiOG83qKKuuDmMAAAAI4"]
[Tue Apr 28 05:18:28.268309 2026] [:error] [pid 14579:tid 14661] [client 20.203.141.82:61643] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fvvff.php"] [unique_id "ae_SpBrUiOG83qKKuuDmMgAAAJU"]
[Tue Apr 28 05:18:28.796163 2026] [:error] [pid 14686:tid 14710] [client 20.203.141.82:7565] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a2.php"] [unique_id "ae_SpO-YPF1Xm7uiWQ4ggAAAANU"]
[Tue Apr 28 05:18:29.500174 2026] [:error] [pid 14686:tid 14703] [client 20.203.141.82:45295] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a2.php"] [unique_id "ae_Spe-YPF1Xm7uiWQ4gggAAAM4"]
[Tue Apr 28 05:18:30.066082 2026] [:error] [pid 14686:tid 14693] [client 20.203.141.82:61646] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a2.php"] [unique_id "ae_Spu-YPF1Xm7uiWQ4ghQAAAMQ"]
[Tue Apr 28 05:18:30.697039 2026] [:error] [pid 14579:tid 14648] [client 20.203.141.82:45278] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a2.php"] [unique_id "ae_SphrUiOG83qKKuuDmNAAAAIg"]
[Tue Apr 28 05:18:31.207460 2026] [:error] [pid 56602:tid 56626] [client 20.203.141.82:45289] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/edit.php"] [unique_id "ae_Sp_CwhMxzNW_lZSwgHAAAARY"]
[Tue Apr 28 05:18:31.730443 2026] [:error] [pid 56602:tid 56608] [client 20.203.141.82:61664] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/edit.php"] [unique_id "ae_Sp_CwhMxzNW_lZSwgHQAAAQQ"]
[Tue Apr 28 05:18:32.232642 2026] [:error] [pid 56602:tid 56610] [client 20.203.141.82:55852] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/edit.php"] [unique_id "ae_SqPCwhMxzNW_lZSwgHgAAAQY"]
[Tue Apr 28 05:18:33.047115 2026] [:error] [pid 14686:tid 14692] [client 20.203.141.82:55819] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/edit.php"] [unique_id "ae_Sqe-YPF1Xm7uiWQ4giQAAAMM"]
[Tue Apr 28 05:18:33.676791 2026] [:error] [pid 14686:tid 14691] [client 20.203.141.82:64244] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ioxi-o.php"] [unique_id "ae_Sqe-YPF1Xm7uiWQ4gjAAAAMI"]
[Tue Apr 28 05:18:34.239912 2026] [:error] [pid 14579:tid 14647] [client 20.203.141.82:7577] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ioxi-o.php"] [unique_id "ae_SqhrUiOG83qKKuuDmOAAAAIc"]
[Tue Apr 28 05:18:34.832795 2026] [:error] [pid 14579:tid 14655] [client 20.203.141.82:61637] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ioxi-o.php"] [unique_id "ae_SqhrUiOG83qKKuuDmOQAAAI8"]
[Tue Apr 28 05:18:35.327554 2026] [:error] [pid 14579:tid 14653] [client 20.203.141.82:45290] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ioxi-o.php"] [unique_id "ae_SqxrUiOG83qKKuuDmOwAAAI0"]
[Tue Apr 28 05:18:35.900043 2026] [:error] [pid 14686:tid 14705] [client 20.203.141.82:51234] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "ae_Sq--YPF1Xm7uiWQ4gjwAAANA"]
[Tue Apr 28 05:18:36.527616 2026] [:error] [pid 14686:tid 14694] [client 20.203.141.82:51203] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "ae_SrO-YPF1Xm7uiWQ4gkQAAAMU"]
[Tue Apr 28 05:18:37.140305 2026] [:error] [pid 14579:tid 14641] [client 20.203.141.82:44886] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "ae_SrRrUiOG83qKKuuDmPQAAAIE"]
[Tue Apr 28 05:18:37.752915 2026] [:error] [pid 56602:tid 56605] [client 20.203.141.82:44915] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "ae_SrfCwhMxzNW_lZSwgJQAAAQE"]
[Tue Apr 28 05:18:38.311179 2026] [:error] [pid 14579:tid 14662] [client 20.203.141.82:7745] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/66.php"] [unique_id "ae_SrhrUiOG83qKKuuDmPwAAAJY"]
[Tue Apr 28 05:18:38.823803 2026] [:error] [pid 14686:tid 14711] [client 20.203.141.82:61671] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/66.php"] [unique_id "ae_Sru-YPF1Xm7uiWQ4glAAAANY"]
[Tue Apr 28 05:18:39.325706 2026] [:error] [pid 14686:tid 14697] [client 20.203.141.82:7581] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/66.php"] [unique_id "ae_Sr--YPF1Xm7uiWQ4glQAAAMg"]
[Tue Apr 28 05:18:39.892927 2026] [:error] [pid 14578:tid 14627] [client 20.203.141.82:45292] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/66.php"] [unique_id "ae_Sr-ngo3AwIJgfSHH3hQAAAE4"]
[Tue Apr 28 05:18:40.423883 2026] [:error] [pid 14579:tid 14664] [client 20.203.141.82:53442] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a5.php"] [unique_id "ae_SsBrUiOG83qKKuuDmQAAAAJg"]
[Tue Apr 28 05:18:40.941524 2026] [:error] [pid 14686:tid 14701] [client 20.203.141.82:7554] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a5.php"] [unique_id "ae_SsO-YPF1Xm7uiWQ4glwAAAMw"]
[Tue Apr 28 05:18:41.462370 2026] [:error] [pid 56602:tid 56623] [client 20.203.141.82:7841] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a5.php"] [unique_id "ae_SsfCwhMxzNW_lZSwgKAAAARM"]
[Tue Apr 28 05:18:42.069904 2026] [:error] [pid 56602:tid 56616] [client 20.203.141.82:61656] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a5.php"] [unique_id "ae_SsvCwhMxzNW_lZSwgKgAAAQw"]
[Tue Apr 28 05:18:42.589485 2026] [:error] [pid 14579:tid 14642] [client 20.203.141.82:7847] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f6.php"] [unique_id "ae_SshrUiOG83qKKuuDmQQAAAII"]
[Tue Apr 28 05:18:43.090017 2026] [:error] [pid 14579:tid 14654] [client 20.203.141.82:64218] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f6.php"] [unique_id "ae_SsxrUiOG83qKKuuDmQwAAAI4"]
[Tue Apr 28 05:18:43.686525 2026] [:error] [pid 14686:tid 14692] [client 20.203.141.82:7569] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f6.php"] [unique_id "ae_Ss--YPF1Xm7uiWQ4gmQAAAMM"]
[Tue Apr 28 05:18:44.225492 2026] [:error] [pid 14579:tid 14651] [client 20.203.141.82:7866] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f6.php"] [unique_id "ae_StBrUiOG83qKKuuDmRgAAAIs"]
[Tue Apr 28 05:18:45.286220 2026] [:error] [pid 56602:tid 56619] [client 20.203.141.82:63687] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/inputs.php"] [unique_id "ae_StfCwhMxzNW_lZSwgMAAAAQ8"]
[Tue Apr 28 05:18:45.964356 2026] [:error] [pid 14686:tid 14700] [client 20.203.141.82:64226] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/inputs.php"] [unique_id "ae_Ste-YPF1Xm7uiWQ4gmgAAAMs"]
[Tue Apr 28 05:18:46.673315 2026] [:error] [pid 14686:tid 14709] [client 20.203.141.82:7579] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/inputs.php"] [unique_id "ae_Stu-YPF1Xm7uiWQ4gmwAAANQ"]
[Tue Apr 28 05:18:47.157026 2026] [:error] [pid 56602:tid 56604] [client 20.203.141.82:7591] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/inputs.php"] [unique_id "ae_St_CwhMxzNW_lZSwgMgAAAQA"]
[Tue Apr 28 05:18:47.776176 2026] [:error] [pid 56602:tid 56627] [client 20.203.141.82:7609] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/style.php"] [unique_id "ae_St_CwhMxzNW_lZSwgNAAAARc"]
[Tue Apr 28 05:18:48.313567 2026] [:error] [pid 14578:tid 14619] [client 20.203.141.82:51263] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/style.php"] [unique_id "ae_SuOngo3AwIJgfSHH3hwAAAEY"]
[Tue Apr 28 05:18:48.883439 2026] [:error] [pid 56602:tid 56611] [client 20.203.141.82:44885] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/style.php"] [unique_id "ae_SuPCwhMxzNW_lZSwgNgAAAQc"]
[Tue Apr 28 05:18:49.535857 2026] [:error] [pid 56602:tid 56626] [client 20.203.141.82:45738] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/style.php"] [unique_id "ae_SufCwhMxzNW_lZSwgOAAAARY"]
[Tue Apr 28 05:18:50.203129 2026] [:error] [pid 14686:tid 14704] [client 20.203.141.82:51218] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/av.php"] [unique_id "ae_Suu-YPF1Xm7uiWQ4gnQAAAM8"]
[Tue Apr 28 05:18:50.785704 2026] [:error] [pid 14578:tid 14621] [client 20.203.141.82:64207] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/av.php"] [unique_id "ae_Suungo3AwIJgfSHH3iQAAAEg"]
[Tue Apr 28 05:18:51.338317 2026] [:error] [pid 56602:tid 56613] [client 20.203.141.82:45746] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/av.php"] [unique_id "ae_Su_CwhMxzNW_lZSwgPAAAAQk"]
[Tue Apr 28 05:18:51.892386 2026] [:error] [pid 14578:tid 14635] [client 20.203.141.82:51206] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/av.php"] [unique_id "ae_Su-ngo3AwIJgfSHH3iwAAAFY"]
[Tue Apr 28 05:18:52.436752 2026] [:error] [pid 14578:tid 14632] [client 20.203.141.82:39373] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "ae_SvOngo3AwIJgfSHH3jAAAAFM"]
[Tue Apr 28 05:18:53.013934 2026] [:error] [pid 56602:tid 56624] [client 20.203.141.82:64212] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "ae_SvfCwhMxzNW_lZSwgPwAAARQ"]
[Tue Apr 28 05:18:53.565173 2026] [:error] [pid 14578:tid 14616] [client 20.203.141.82:7827] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "ae_Svengo3AwIJgfSHH3jQAAAEM"]
[Tue Apr 28 05:18:54.067924 2026] [:error] [pid 56602:tid 56605] [client 20.203.141.82:64205] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "ae_SvvCwhMxzNW_lZSwgQQAAAQE"]
[Tue Apr 28 05:18:54.545549 2026] [:error] [pid 14686:tid 14690] [client 20.203.141.82:61640] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-act.php"] [unique_id "ae_Svu-YPF1Xm7uiWQ4gogAAAME"]
[Tue Apr 28 05:18:55.026952 2026] [:error] [pid 14686:tid 14694] [client 20.203.141.82:51245] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-act.php"] [unique_id "ae_Sv--YPF1Xm7uiWQ4gpAAAAMU"]
[Tue Apr 28 05:18:55.518530 2026] [:error] [pid 56602:tid 56615] [client 20.203.141.82:53474] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-act.php"] [unique_id "ae_Sv_CwhMxzNW_lZSwgQwAAAQs"]
[Tue Apr 28 05:18:55.998703 2026] [:error] [pid 14577:tid 14602] [client 20.203.141.82:7811] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-act.php"] [unique_id "ae_SvyzBH-jwzlgiBdGrCQAAABA"]
[Tue Apr 28 05:18:56.498811 2026] [:error] [pid 56602:tid 56625] [client 20.203.141.82:7601] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/classwithtostring.php"] [unique_id "ae_SwPCwhMxzNW_lZSwgRQAAARU"]
[Tue Apr 28 05:18:57.092571 2026] [:error] [pid 14577:tid 14599] [client 20.203.141.82:7865] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/classwithtostring.php"] [unique_id "ae_SwSzBH-jwzlgiBdGrCgAAAA0"]
[Tue Apr 28 05:18:57.605207 2026] [:error] [pid 14686:tid 14709] [client 20.203.141.82:45723] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/classwithtostring.php"] [unique_id "ae_Swe-YPF1Xm7uiWQ4gqgAAANQ"]
[Tue Apr 28 05:18:58.131345 2026] [:error] [pid 56602:tid 56606] [client 20.203.141.82:45749] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/classwithtostring.php"] [unique_id "ae_SwvCwhMxzNW_lZSwgRwAAAQI"]
[Tue Apr 28 05:18:58.684981 2026] [:error] [pid 14577:tid 14597] [client 20.203.141.82:7828] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "ae_SwizBH-jwzlgiBdGrCwAAAAs"]
[Tue Apr 28 05:18:59.232786 2026] [:error] [pid 56602:tid 56624] [client 20.203.141.82:7595] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "ae_Sw_CwhMxzNW_lZSwgTgAAARQ"]
[Tue Apr 28 05:18:59.739747 2026] [:error] [pid 56602:tid 56628] [client 20.203.141.82:7292] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "ae_Sw_CwhMxzNW_lZSwgUAAAARg"]
[Tue Apr 28 05:19:00.221232 2026] [:error] [pid 56602:tid 56614] [client 20.203.141.82:64227] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "ae_SxPCwhMxzNW_lZSwgVAAAAQo"]
[Tue Apr 28 05:19:00.744745 2026] [:error] [pid 56602:tid 56623] [client 20.203.141.82:45751] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sbhu.php"] [unique_id "ae_SxPCwhMxzNW_lZSwgXAAAARM"]
[Tue Apr 28 05:19:01.222868 2026] [:error] [pid 56602:tid 56617] [client 20.203.141.82:45701] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sbhu.php"] [unique_id "ae_SxfCwhMxzNW_lZSwgYAAAAQ0"]
[Tue Apr 28 05:19:01.710854 2026] [:error] [pid 56602:tid 56619] [client 20.203.141.82:45255] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sbhu.php"] [unique_id "ae_SxfCwhMxzNW_lZSwgaAAAAQ8"]
[Tue Apr 28 05:19:02.213045 2026] [:error] [pid 14577:tid 14589] [client 20.203.141.82:45285] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sbhu.php"] [unique_id "ae_SxizBH-jwzlgiBdGrDgAAAAM"]
[Tue Apr 28 05:19:02.709396 2026] [:error] [pid 14577:tid 14607] [client 20.203.141.82:7570] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-blog.php"] [unique_id "ae_SxizBH-jwzlgiBdGrDwAAABU"]
[Tue Apr 28 05:19:03.189468 2026] [:error] [pid 56602:tid 56621] [client 20.203.141.82:64252] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-blog.php"] [unique_id "ae_Sx_CwhMxzNW_lZSwgdgAAARE"]
[Tue Apr 28 05:19:03.713871 2026] [:error] [pid 56602:tid 56628] [client 20.203.141.82:45757] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-blog.php"] [unique_id "ae_Sx_CwhMxzNW_lZSwgfQAAARg"]
[Tue Apr 28 05:19:04.216965 2026] [:error] [pid 56602:tid 56625] [client 20.203.141.82:64240] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-blog.php"] [unique_id "ae_SyPCwhMxzNW_lZSwggwAAARU"]
[Tue Apr 28 05:19:04.784602 2026] [:error] [pid 14577:tid 14608] [client 20.203.141.82:64241] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "ae_SyCzBH-jwzlgiBdGrEwAAABY"]
[Tue Apr 28 05:19:05.261788 2026] [:error] [pid 14579:tid 14653] [client 20.203.141.82:45706] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "ae_SyRrUiOG83qKKuuDmTAAAAI0"]
[Tue Apr 28 05:19:05.781566 2026] [:error] [pid 14686:tid 14712] [client 20.203.141.82:7566] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "ae_Sye-YPF1Xm7uiWQ4gzwAAANc"]
[Tue Apr 28 05:19:06.256139 2026] [:error] [pid 14578:tid 14616] [client 20.203.141.82:45744] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "ae_Syungo3AwIJgfSHH3sgAAAEM"]
[Tue Apr 28 05:19:06.727961 2026] [:error] [pid 14577:tid 14591] [client 20.203.141.82:7808] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "ae_SyizBH-jwzlgiBdGrFQAAAAU"]
[Tue Apr 28 05:19:07.209115 2026] [:error] [pid 14578:tid 14619] [client 20.203.141.82:7274] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "ae_Sy-ngo3AwIJgfSHH3tAAAAEY"]
[Tue Apr 28 05:19:07.680773 2026] [:error] [pid 56602:tid 56627] [client 20.203.141.82:7562] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "ae_Sy_CwhMxzNW_lZSwgnQAAARc"]
[Tue Apr 28 05:19:08.154284 2026] [:error] [pid 14579:tid 14662] [client 20.203.141.82:7576] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "ae_SzBrUiOG83qKKuuDmTwAAAJY"]
[Tue Apr 28 05:19:08.629573 2026] [:error] [pid 56602:tid 56621] [client 20.203.141.82:44870] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ms-edit.php"] [unique_id "ae_SzPCwhMxzNW_lZSwgoQAAARE"]
[Tue Apr 28 05:19:09.104736 2026] [:error] [pid 14579:tid 14658] [client 20.203.141.82:64198] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ms-edit.php"] [unique_id "ae_SzRrUiOG83qKKuuDmUQAAAJI"]
[Tue Apr 28 05:19:09.583716 2026] [:error] [pid 56602:tid 56611] [client 20.203.141.82:44891] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ms-edit.php"] [unique_id "ae_SzfCwhMxzNW_lZSwgpgAAAQc"]
[Tue Apr 28 05:19:10.059621 2026] [:error] [pid 14578:tid 14634] [client 20.203.141.82:51242] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ms-edit.php"] [unique_id "ae_Szungo3AwIJgfSHH3uAAAAFU"]
[Tue Apr 28 05:19:10.546660 2026] [:error] [pid 14579:tid 14657] [client 20.203.141.82:64253] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/adminfuns.php"] [unique_id "ae_SzhrUiOG83qKKuuDmUgAAAJE"]
[Tue Apr 28 05:19:11.029466 2026] [:error] [pid 14686:tid 14696] [client 20.203.141.82:64224] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/adminfuns.php"] [unique_id "ae_Sz--YPF1Xm7uiWQ4g2AAAAMc"]
[Tue Apr 28 05:19:11.537666 2026] [:error] [pid 14686:tid 14697] [client 20.203.141.82:7584] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/adminfuns.php"] [unique_id "ae_Sz--YPF1Xm7uiWQ4g2gAAAMg"]
[Tue Apr 28 05:19:12.045589 2026] [:error] [pid 14686:tid 14689] [client 20.203.141.82:45743] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/adminfuns.php"] [unique_id "ae_S0O-YPF1Xm7uiWQ4g2wAAAMA"]
[Tue Apr 28 05:19:12.527154 2026] [:error] [pid 14579:tid 14650] [client 20.203.141.82:51248] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/goods.php"] [unique_id "ae_S0BrUiOG83qKKuuDmVAAAAIo"]
[Tue Apr 28 05:19:13.001801 2026] [:error] [pid 14579:tid 14656] [client 20.203.141.82:45291] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/goods.php"] [unique_id "ae_S0RrUiOG83qKKuuDmVQAAAJA"]
[Tue Apr 28 05:19:13.484053 2026] [:error] [pid 14579:tid 14648] [client 20.203.141.82:7848] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/goods.php"] [unique_id "ae_S0RrUiOG83qKKuuDmWAAAAIg"]
[Tue Apr 28 05:19:13.993036 2026] [:error] [pid 14579:tid 14649] [client 20.203.141.82:45252] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/goods.php"] [unique_id "ae_S0RrUiOG83qKKuuDmWQAAAIk"]
[Tue Apr 28 05:19:14.497420 2026] [:error] [pid 14579:tid 14647] [client 20.203.141.82:7556] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ms-edit.php"] [unique_id "ae_S0hrUiOG83qKKuuDmWwAAAIc"]
[Tue Apr 28 05:19:14.985252 2026] [:error] [pid 14579:tid 14659] [client 20.203.141.82:45269] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ms-edit.php"] [unique_id "ae_S0hrUiOG83qKKuuDmXAAAAJM"]
[Tue Apr 28 05:19:15.460832 2026] [:error] [pid 14579:tid 14662] [client 20.203.141.82:39362] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ms-edit.php"] [unique_id "ae_S0xrUiOG83qKKuuDmXgAAAJY"]
[Tue Apr 28 05:19:15.944377 2026] [:error] [pid 14686:tid 14694] [client 20.203.141.82:7819] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ms-edit.php"] [unique_id "ae_S0--YPF1Xm7uiWQ4g3QAAAMU"]
[Tue Apr 28 05:19:16.449084 2026] [:error] [pid 14686:tid 14698] [client 20.203.141.82:61670] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/222.php"] [unique_id "ae_S1O-YPF1Xm7uiWQ4g4AAAAMk"]
[Tue Apr 28 05:19:16.977092 2026] [:error] [pid 14686:tid 14693] [client 20.203.141.82:7607] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/222.php"] [unique_id "ae_S1O-YPF1Xm7uiWQ4g4QAAAMQ"]
[Tue Apr 28 05:19:17.471587 2026] [:error] [pid 14686:tid 14702] [client 20.203.141.82:7279] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/222.php"] [unique_id "ae_S1e-YPF1Xm7uiWQ4g4gAAAM0"]
[Tue Apr 28 05:19:17.964843 2026] [:error] [pid 56602:tid 56628] [client 20.203.141.82:7574] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/222.php"] [unique_id "ae_S1fCwhMxzNW_lZSwgrQAAARg"]
[Tue Apr 28 05:19:18.481677 2026] [:error] [pid 56602:tid 56606] [client 20.203.141.82:7855] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cgi-bin/index.php"] [unique_id "ae_S1vCwhMxzNW_lZSwgsQAAAQI"]
[Tue Apr 28 05:19:18.984991 2026] [:error] [pid 14578:tid 14615] [client 20.203.141.82:7864] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cgi-bin/index.php"] [unique_id "ae_S1ungo3AwIJgfSHH3ugAAAEI"]
[Tue Apr 28 05:19:19.720388 2026] [proxy_fcgi:error] [pid 56602:tid 56625] [client 20.203.141.82:7578] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 05:19:20.198995 2026] [proxy_fcgi:error] [pid 56602:tid 56616] [client 20.203.141.82:7578] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 05:19:20.438656 2026] [proxy_fcgi:error] [pid 56602:tid 56622] [client 20.203.141.82:7578] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 05:19:20.920324 2026] [proxy_fcgi:error] [pid 56602:tid 56611] [client 20.203.141.82:7578] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 05:19:21.640730 2026] [proxy_fcgi:error] [pid 56602:tid 56618] [client 20.203.141.82:7578] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 05:19:22.115218 2026] [:error] [pid 56602:tid 56606] [client 20.203.141.82:7578] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fe5.php"] [unique_id "ae_S2vCwhMxzNW_lZSwgwgAAAQI"]
[Tue Apr 28 05:19:22.596771 2026] [:error] [pid 14578:tid 14627] [client 20.203.141.82:64234] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fe5.php"] [unique_id "ae_S2ungo3AwIJgfSHH3vAAAAE4"]
[Tue Apr 28 05:19:23.075385 2026] [:error] [pid 14578:tid 14620] [client 20.203.141.82:51221] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fe5.php"] [unique_id "ae_S2-ngo3AwIJgfSHH3vQAAAEc"]
[Tue Apr 28 05:19:23.597301 2026] [:error] [pid 14686:tid 14692] [client 20.203.141.82:51223] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fe5.php"] [unique_id "ae_S2--YPF1Xm7uiWQ4g5gAAAMM"]
[Tue Apr 28 05:19:24.130525 2026] [:error] [pid 14578:tid 14624] [client 20.203.141.82:61666] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "ae_S3Ongo3AwIJgfSHH3vgAAAEs"]
[Tue Apr 28 05:19:24.670532 2026] [:error] [pid 14579:tid 14656] [client 20.203.141.82:64236] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "ae_S3BrUiOG83qKKuuDmZQAAAJA"]
[Tue Apr 28 05:19:25.175473 2026] [:error] [pid 14686:tid 14696] [client 20.203.141.82:61634] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "ae_S3e-YPF1Xm7uiWQ4g6QAAAMc"]
[Tue Apr 28 05:19:25.660417 2026] [:error] [pid 14686:tid 14701] [client 20.203.141.82:51209] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "ae_S3e-YPF1Xm7uiWQ4g7AAAAMw"]
[Tue Apr 28 05:19:26.163006 2026] [:error] [pid 14686:tid 14699] [client 20.203.141.82:7561] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/av.php"] [unique_id "ae_S3u-YPF1Xm7uiWQ4g7QAAAMo"]
[Tue Apr 28 05:19:26.682835 2026] [:error] [pid 56602:tid 56621] [client 20.203.141.82:64223] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/av.php"] [unique_id "ae_S3vCwhMxzNW_lZSwgyAAAARE"]
[Tue Apr 28 05:19:27.154571 2026] [:error] [pid 56602:tid 56611] [client 20.203.141.82:45750] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/av.php"] [unique_id "ae_S3_CwhMxzNW_lZSwgzQAAAQc"]
[Tue Apr 28 05:19:27.640270 2026] [:error] [pid 14578:tid 14621] [client 20.203.141.82:7568] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/av.php"] [unique_id "ae_S3-ngo3AwIJgfSHH3wAAAAEg"]
[Tue Apr 28 05:19:28.120015 2026] [:error] [pid 14686:tid 14698] [client 20.203.141.82:64193] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/abcd.php"] [unique_id "ae_S4O-YPF1Xm7uiWQ4g8AAAAMk"]
[Tue Apr 28 05:19:28.598776 2026] [:error] [pid 14686:tid 14693] [client 20.203.141.82:61657] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/abcd.php"] [unique_id "ae_S4O-YPF1Xm7uiWQ4g8QAAAMQ"]
[Tue Apr 28 05:19:29.074855 2026] [:error] [pid 14686:tid 14711] [client 20.203.141.82:51257] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/abcd.php"] [unique_id "ae_S4e-YPF1Xm7uiWQ4g9AAAANY"]
[Tue Apr 28 05:19:29.575104 2026] [:error] [pid 14577:tid 14607] [client 20.203.141.82:45758] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/abcd.php"] [unique_id "ae_S4SzBH-jwzlgiBdGrHAAAABU"]
[Tue Apr 28 05:19:30.066072 2026] [:error] [pid 14686:tid 14704] [client 20.203.141.82:45707] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a1.php"] [unique_id "ae_S4u-YPF1Xm7uiWQ4g-gAAAM8"]
[Tue Apr 28 05:19:30.567971 2026] [:error] [pid 56602:tid 56624] [client 20.203.141.82:7821] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a1.php"] [unique_id "ae_S4vCwhMxzNW_lZSwg3gAAARQ"]
[Tue Apr 28 05:19:31.079004 2026] [:error] [pid 14686:tid 14698] [client 20.203.141.82:61639] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a1.php"] [unique_id "ae_S4--YPF1Xm7uiWQ4hAQAAAMk"]
[Tue Apr 28 05:19:31.583061 2026] [:error] [pid 14579:tid 14662] [client 20.203.141.82:61677] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a1.php"] [unique_id "ae_S4xrUiOG83qKKuuDmbQAAAJY"]
[Tue Apr 28 05:19:32.106132 2026] [:error] [pid 14578:tid 14626] [client 20.203.141.82:7837] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/update/f35.php"] [unique_id "ae_S5Ongo3AwIJgfSHH3xAAAAE0"]
[Tue Apr 28 05:19:32.657785 2026] [:error] [pid 14579:tid 14644] [client 20.203.141.82:7594] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/update/f35.php"] [unique_id "ae_S5BrUiOG83qKKuuDmbwAAAIQ"]
[Tue Apr 28 05:19:33.165596 2026] [:error] [pid 56602:tid 56621] [client 20.203.141.82:64237] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/update/f35.php"] [unique_id "ae_S5fCwhMxzNW_lZSwg5QAAARE"]
[Tue Apr 28 05:19:33.687388 2026] [:error] [pid 56602:tid 56613] [client 20.203.141.82:7610] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/update/f35.php"] [unique_id "ae_S5fCwhMxzNW_lZSwg6gAAAQk"]
[Tue Apr 28 05:19:34.174202 2026] [:error] [pid 56602:tid 56612] [client 20.203.141.82:64202] [client 20.203.141.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "ae_S5vCwhMxzNW_lZSwg7gAAAQg"]
[Tue Apr 28 05:19:34.664188 2026] [:error] [pid 56602:tid 56622] [client 20.203.141.82:45286] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f35.php"] [unique_id "ae_S5vCwhMxzNW_lZSwg8AAAARI"]
[Tue Apr 28 05:19:35.138395 2026] [:error] [pid 14578:tid 14614] [client 20.203.141.82:7608] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f35.php"] [unique_id "ae_S5-ngo3AwIJgfSHH3ywAAAEE"]
[Tue Apr 28 05:19:35.659798 2026] [:error] [pid 14686:tid 14691] [client 20.203.141.82:61642] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f35.php"] [unique_id "ae_S5--YPF1Xm7uiWQ4hDAAAAMI"]
[Tue Apr 28 05:19:36.161703 2026] [:error] [pid 56602:tid 56624] [client 20.203.141.82:61648] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f35.php"] [unique_id "ae_S6PCwhMxzNW_lZSwg_AAAARQ"]
[Tue Apr 28 05:19:36.658871 2026] [:error] [pid 56602:tid 56605] [client 20.203.141.82:45253] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "ae_S6PCwhMxzNW_lZSwg_wAAAQE"]
[Tue Apr 28 05:19:37.159247 2026] [:error] [pid 56602:tid 56613] [client 20.203.141.82:7868] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "ae_S6fCwhMxzNW_lZSwhAgAAAQk"]
[Tue Apr 28 05:19:37.724849 2026] [:error] [pid 14686:tid 14703] [client 20.203.141.82:45754] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "ae_S6e-YPF1Xm7uiWQ4hEQAAAM4"]
[Tue Apr 28 05:19:38.243873 2026] [:error] [pid 56602:tid 56612] [client 20.203.141.82:61667] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "ae_S6vCwhMxzNW_lZSwhCAAAAQg"]
[Tue Apr 28 05:19:38.778859 2026] [:error] [pid 14577:tid 14605] [client 20.203.141.82:7816] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "ae_S6izBH-jwzlgiBdGrIwAAABM"]
[Tue Apr 28 05:19:39.297440 2026] [:error] [pid 14577:tid 14599] [client 20.203.141.82:64245] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "ae_S6yzBH-jwzlgiBdGrJAAAAA0"]
[Tue Apr 28 05:19:39.769322 2026] [:error] [pid 56602:tid 56613] [client 20.203.141.82:7586] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "ae_S6_CwhMxzNW_lZSwhDgAAAQk"]
[Tue Apr 28 05:19:40.250338 2026] [:error] [pid 56602:tid 56625] [client 20.203.141.82:7575] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "ae_S7PCwhMxzNW_lZSwhEQAAARU"]
[Tue Apr 28 05:19:40.725429 2026] [:error] [pid 14577:tid 14595] [client 20.203.141.82:45306] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/k.php"] [unique_id "ae_S7CzBH-jwzlgiBdGrKAAAAAk"]
[Tue Apr 28 05:19:41.199099 2026] [:error] [pid 56602:tid 56627] [client 20.203.141.82:51220] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/k.php"] [unique_id "ae_S7fCwhMxzNW_lZSwhFwAAARc"]
[Tue Apr 28 05:19:41.685224 2026] [:error] [pid 14578:tid 14624] [client 20.203.141.82:49676] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/k.php"] [unique_id "ae_S7engo3AwIJgfSHH3zgAAAEs"]
[Tue Apr 28 05:19:42.157891 2026] [:error] [pid 14686:tid 14700] [client 20.203.141.82:51241] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/k.php"] [unique_id "ae_S7u-YPF1Xm7uiWQ4hGAAAAMs"]
[Tue Apr 28 05:19:42.636580 2026] [:error] [pid 14686:tid 14709] [client 20.203.141.82:51252] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bal.php"] [unique_id "ae_S7u-YPF1Xm7uiWQ4hGwAAANQ"]
[Tue Apr 28 05:19:43.107806 2026] [:error] [pid 56602:tid 56625] [client 20.203.141.82:51258] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bal.php"] [unique_id "ae_S7_CwhMxzNW_lZSwhHAAAARU"]
[Tue Apr 28 05:19:43.604075 2026] [:error] [pid 56602:tid 56612] [client 20.203.141.82:7824] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bal.php"] [unique_id "ae_S7_CwhMxzNW_lZSwhHQAAAQg"]
[Tue Apr 28 05:19:44.092156 2026] [:error] [pid 14578:tid 14621] [client 20.203.141.82:7605] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bal.php"] [unique_id "ae_S8Ongo3AwIJgfSHH30AAAAEg"]
[Tue Apr 28 05:19:44.607285 2026] [:error] [pid 14579:tid 14656] [client 20.203.141.82:62548] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/in.php"] [unique_id "ae_S8BrUiOG83qKKuuDmcwAAAJA"]
[Tue Apr 28 05:19:45.082303 2026] [:error] [pid 14578:tid 14616] [client 20.203.141.82:44873] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/in.php"] [unique_id "ae_S8engo3AwIJgfSHH31AAAAEM"]
[Tue Apr 28 05:19:45.609055 2026] [:error] [pid 14578:tid 14613] [client 20.203.141.82:45293] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/in.php"] [unique_id "ae_S8engo3AwIJgfSHH31gAAAEA"]
[Tue Apr 28 05:19:46.097302 2026] [:error] [pid 14579:tid 14655] [client 20.203.141.82:53458] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/in.php"] [unique_id "ae_S8hrUiOG83qKKuuDmeQAAAI8"]
[Tue Apr 28 05:19:46.613195 2026] [:error] [pid 14579:tid 14641] [client 20.203.141.82:7596] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gssdd.php"] [unique_id "ae_S8hrUiOG83qKKuuDmewAAAIE"]
[Tue Apr 28 05:19:47.116444 2026] [:error] [pid 56602:tid 56613] [client 20.203.141.82:45726] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gssdd.php"] [unique_id "ae_S8_CwhMxzNW_lZSwhIgAAAQk"]
[Tue Apr 28 05:19:47.639433 2026] [:error] [pid 14579:tid 14640] [client 20.203.141.82:61654] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gssdd.php"] [unique_id "ae_S8xrUiOG83qKKuuDmfwAAAIA"]
[Tue Apr 28 05:19:48.131227 2026] [:error] [pid 14579:tid 14642] [client 20.203.141.82:51211] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gssdd.php"] [unique_id "ae_S9BrUiOG83qKKuuDmgQAAAII"]
[Tue Apr 28 05:19:48.625250 2026] [:error] [pid 14579:tid 14648] [client 20.203.141.82:7603] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "ae_S9BrUiOG83qKKuuDmhgAAAIg"]
[Tue Apr 28 05:19:49.105427 2026] [:error] [pid 14579:tid 14651] [client 20.203.141.82:61633] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "ae_S9RrUiOG83qKKuuDmiQAAAIs"]
[Tue Apr 28 05:19:49.615117 2026] [:error] [pid 14579:tid 14662] [client 20.203.141.82:45298] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "ae_S9RrUiOG83qKKuuDmjQAAAJY"]
[Tue Apr 28 05:19:50.140539 2026] [:error] [pid 56602:tid 56616] [client 20.203.141.82:51202] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "ae_S9vCwhMxzNW_lZSwhKAAAAQw"]
[Tue Apr 28 05:19:50.713889 2026] [:error] [pid 56602:tid 56618] [client 20.203.141.82:7557] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bs1.php"] [unique_id "ae_S9vCwhMxzNW_lZSwhLQAAAQ4"]
[Tue Apr 28 05:19:51.201532 2026] [:error] [pid 56602:tid 56606] [client 20.203.141.82:51239] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bs1.php"] [unique_id "ae_S9_CwhMxzNW_lZSwhMgAAAQI"]
[Tue Apr 28 05:19:51.691877 2026] [:error] [pid 14686:tid 14713] [client 20.203.141.82:45728] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bs1.php"] [unique_id "ae_S9--YPF1Xm7uiWQ4hJAAAANg"]
[Tue Apr 28 05:19:52.198141 2026] [:error] [pid 14686:tid 14709] [client 20.203.141.82:64221] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bs1.php"] [unique_id "ae_S-O-YPF1Xm7uiWQ4hJgAAANQ"]
[Tue Apr 28 05:19:52.737289 2026] [:error] [pid 14686:tid 14698] [client 20.203.141.82:7809] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "ae_S-O-YPF1Xm7uiWQ4hKgAAAMk"]
[Tue Apr 28 05:19:53.212192 2026] [:error] [pid 14577:tid 14592] [client 20.203.141.82:45778] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "ae_S-SzBH-jwzlgiBdGrLQAAAAY"]
[Tue Apr 28 05:19:53.710204 2026] [:error] [pid 56602:tid 56620] [client 20.203.141.82:45273] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "ae_S-fCwhMxzNW_lZSwhNQAAARA"]
[Tue Apr 28 05:19:54.182105 2026] [:error] [pid 14686:tid 14693] [client 20.203.141.82:7585] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "ae_S-u-YPF1Xm7uiWQ4hLAAAAMQ"]
[Tue Apr 28 05:19:54.660445 2026] [:error] [pid 14578:tid 14624] [client 20.203.141.82:45303] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/axx.php"] [unique_id "ae_S-ungo3AwIJgfSHH33AAAAEs"]
[Tue Apr 28 05:19:55.162516 2026] [:error] [pid 14578:tid 14632] [client 20.203.141.82:51227] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/axx.php"] [unique_id "ae_S--ngo3AwIJgfSHH34AAAAFM"]
[Tue Apr 28 05:19:55.677142 2026] [:error] [pid 14577:tid 14588] [client 20.203.141.82:64217] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/axx.php"] [unique_id "ae_S-yzBH-jwzlgiBdGrLwAAAAI"]
[Tue Apr 28 05:19:56.178620 2026] [:error] [pid 14686:tid 14705] [client 20.203.141.82:64209] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/axx.php"] [unique_id "ae_S_O-YPF1Xm7uiWQ4hMQAAANA"]
[Tue Apr 28 05:19:56.747150 2026] [:error] [pid 14578:tid 14629] [client 20.203.141.82:45310] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gettest.php"] [unique_id "ae_S_Ongo3AwIJgfSHH34QAAAFA"]
[Tue Apr 28 05:19:57.221205 2026] [:error] [pid 14686:tid 14712] [client 20.203.141.82:61660] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gettest.php"] [unique_id "ae_S_e-YPF1Xm7uiWQ4hMwAAANc"]
[Tue Apr 28 05:19:57.702072 2026] [:error] [pid 56602:tid 56626] [client 20.203.141.82:61674] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gettest.php"] [unique_id "ae_S_fCwhMxzNW_lZSwhRAAAARY"]
[Tue Apr 28 05:19:58.179521 2026] [:error] [pid 56602:tid 56615] [client 20.203.141.82:7850] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gettest.php"] [unique_id "ae_S_vCwhMxzNW_lZSwhRgAAAQs"]
[Tue Apr 28 05:19:58.653329 2026] [:error] [pid 56602:tid 56612] [client 20.203.141.82:45699] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/acp.php"] [unique_id "ae_S_vCwhMxzNW_lZSwhRwAAAQg"]
[Tue Apr 28 05:19:59.134452 2026] [:error] [pid 56602:tid 56608] [client 20.203.141.82:64250] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/acp.php"] [unique_id "ae_S__CwhMxzNW_lZSwhSgAAAQQ"]
[Tue Apr 28 05:19:59.610407 2026] [:error] [pid 14577:tid 14605] [client 20.203.141.82:55861] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/acp.php"] [unique_id "ae_S_yzBH-jwzlgiBdGrMQAAABM"]
[Tue Apr 28 05:20:00.111420 2026] [:error] [pid 14578:tid 14635] [client 20.203.141.82:45753] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/acp.php"] [unique_id "ae_TAOngo3AwIJgfSHH34gAAAFY"]
[Tue Apr 28 05:20:00.646284 2026] [:error] [pid 14579:tid 14651] [client 20.203.141.82:55867] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file48.php"] [unique_id "ae_TABrUiOG83qKKuuDmkgAAAIs"]
[Tue Apr 28 05:20:01.153552 2026] [:error] [pid 56602:tid 56606] [client 20.203.141.82:45251] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file48.php"] [unique_id "ae_TAfCwhMxzNW_lZSwhSwAAAQI"]
[Tue Apr 28 05:20:01.629834 2026] [:error] [pid 14686:tid 14693] [client 20.203.141.82:45276] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file48.php"] [unique_id "ae_TAe-YPF1Xm7uiWQ4hOwAAAMQ"]
[Tue Apr 28 05:20:02.133067 2026] [:error] [pid 14579:tid 14661] [client 20.203.141.82:53499] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file48.php"] [unique_id "ae_TAhrUiOG83qKKuuDmlgAAAJU"]
[Tue Apr 28 05:20:02.683301 2026] [:error] [pid 14579:tid 14641] [client 20.203.141.82:7860] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/"] [unique_id "ae_TAhrUiOG83qKKuuDmlwAAAIE"]
[Tue Apr 28 05:20:03.196553 2026] [:error] [pid 14686:tid 14695] [client 20.203.141.82:7835] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/"] [unique_id "ae_TA--YPF1Xm7uiWQ4hRQAAAMY"]
[Tue Apr 28 05:20:03.698814 2026] [:error] [pid 14686:tid 14709] [client 20.203.141.82:51237] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/"] [unique_id "ae_TA--YPF1Xm7uiWQ4hSAAAANQ"]
[Tue Apr 28 05:20:04.220684 2026] [:error] [pid 14579:tid 14645] [client 20.203.141.82:51254] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/"] [unique_id "ae_TBBrUiOG83qKKuuDmmwAAAIU"]
[Tue Apr 28 05:20:04.725852 2026] [:error] [pid 14578:tid 14616] [client 20.203.141.82:53472] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/simple.php"] [unique_id "ae_TBOngo3AwIJgfSHH34wAAAEM"]
[Tue Apr 28 05:20:05.206805 2026] [:error] [pid 14578:tid 14626] [client 20.203.141.82:44882] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/simple.php"] [unique_id "ae_TBengo3AwIJgfSHH35QAAAE0"]
[Tue Apr 28 05:20:05.700965 2026] [:error] [pid 14579:tid 14657] [client 20.203.141.82:42533] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/simple.php"] [unique_id "ae_TBRrUiOG83qKKuuDmnQAAAJE"]
[Tue Apr 28 05:20:06.173459 2026] [:error] [pid 14579:tid 14647] [client 20.203.141.82:61608] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/simple.php"] [unique_id "ae_TBhrUiOG83qKKuuDmnwAAAIc"]
[Tue Apr 28 05:20:06.690837 2026] [:error] [pid 14579:tid 14648] [client 20.203.141.82:53489] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/drykl.php"] [unique_id "ae_TBhrUiOG83qKKuuDmoQAAAIg"]
[Tue Apr 28 05:20:07.166080 2026] [:error] [pid 56602:tid 56604] [client 20.203.141.82:42550] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/drykl.php"] [unique_id "ae_TB_CwhMxzNW_lZSwhTgAAAQA"]
[Tue Apr 28 05:20:07.662437 2026] [:error] [pid 56602:tid 56607] [client 20.203.141.82:45758] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/drykl.php"] [unique_id "ae_TB_CwhMxzNW_lZSwhTwAAAQM"]
[Tue Apr 28 05:20:08.136218 2026] [:error] [pid 56602:tid 56610] [client 20.203.141.82:61576] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/drykl.php"] [unique_id "ae_TCPCwhMxzNW_lZSwhUAAAAQY"]
[Tue Apr 28 05:20:08.645076 2026] [:error] [pid 14686:tid 14694] [client 20.203.141.82:64200] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xxx.php"] [unique_id "ae_TCO-YPF1Xm7uiWQ4hTwAAAMU"]
[Tue Apr 28 05:20:09.119455 2026] [:error] [pid 14686:tid 14709] [client 20.203.141.82:55824] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xxx.php"] [unique_id "ae_TCe-YPF1Xm7uiWQ4hUAAAANQ"]
[Tue Apr 28 05:20:09.632392 2026] [:error] [pid 14577:tid 14603] [client 20.203.141.82:7553] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xxx.php"] [unique_id "ae_TCSzBH-jwzlgiBdGrNAAAABE"]
[Tue Apr 28 05:20:10.144007 2026] [:error] [pid 14686:tid 14698] [client 20.203.141.82:42542] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xxx.php"] [unique_id "ae_TCu-YPF1Xm7uiWQ4hUQAAAMk"]
[Tue Apr 28 05:20:10.695740 2026] [:error] [pid 14686:tid 14706] [client 20.203.141.82:45299] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hypo.php"] [unique_id "ae_TCu-YPF1Xm7uiWQ4hUgAAANE"]
[Tue Apr 28 05:20:11.225447 2026] [:error] [pid 14686:tid 14710] [client 20.203.141.82:61696] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hypo.php"] [unique_id "ae_TC--YPF1Xm7uiWQ4hVAAAANU"]
[Tue Apr 28 05:20:11.794209 2026] [:error] [pid 14577:tid 14607] [client 20.203.141.82:42512] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hypo.php"] [unique_id "ae_TCyzBH-jwzlgiBdGrNgAAABU"]
[Tue Apr 28 05:20:12.304046 2026] [:error] [pid 14577:tid 14595] [client 20.203.141.82:7849] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hypo.php"] [unique_id "ae_TDCzBH-jwzlgiBdGrOAAAAAk"]
[Tue Apr 28 05:20:12.814192 2026] [:error] [pid 56602:tid 56624] [client 20.203.141.82:61681] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file18.php"] [unique_id "ae_TDPCwhMxzNW_lZSwhUgAAARQ"]
[Tue Apr 28 05:20:13.347109 2026] [:error] [pid 56602:tid 56615] [client 20.203.141.82:45254] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file18.php"] [unique_id "ae_TDfCwhMxzNW_lZSwhUwAAAQs"]
[Tue Apr 28 05:20:13.821045 2026] [:error] [pid 56602:tid 56614] [client 20.203.141.82:51232] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file18.php"] [unique_id "ae_TDfCwhMxzNW_lZSwhVwAAAQo"]
[Tue Apr 28 05:20:14.415039 2026] [:error] [pid 56602:tid 56611] [client 20.203.141.82:45301] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file18.php"] [unique_id "ae_TDvCwhMxzNW_lZSwhWgAAAQc"]
[Tue Apr 28 05:20:14.996705 2026] [:error] [pid 14578:tid 14619] [client 20.203.141.82:42545] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xwx1.php"] [unique_id "ae_TDungo3AwIJgfSHH3-QAAAEY"]
[Tue Apr 28 05:20:15.479430 2026] [:error] [pid 14578:tid 14634] [client 20.203.141.82:45277] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xwx1.php"] [unique_id "ae_TD-ngo3AwIJgfSHH3-gAAAFU"]
[Tue Apr 28 05:20:16.027621 2026] [:error] [pid 14686:tid 14700] [client 20.203.141.82:45725] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xwx1.php"] [unique_id "ae_TEO-YPF1Xm7uiWQ4hWAAAAMs"]
[Tue Apr 28 05:20:16.539160 2026] [:error] [pid 14686:tid 14713] [client 20.203.141.82:64199] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xwx1.php"] [unique_id "ae_TEO-YPF1Xm7uiWQ4hWgAAANg"]
[Tue Apr 28 05:20:17.046624 2026] [:error] [pid 56602:tid 56607] [client 20.203.141.82:45714] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "ae_TEfCwhMxzNW_lZSwhXwAAAQM"]
[Tue Apr 28 05:20:17.604023 2026] [:error] [pid 14686:tid 14695] [client 20.203.141.82:51249] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "ae_TEe-YPF1Xm7uiWQ4hXQAAAMY"]
[Tue Apr 28 05:20:18.160704 2026] [:error] [pid 56602:tid 56610] [client 20.203.141.82:64201] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "ae_TEvCwhMxzNW_lZSwhYAAAAQY"]
[Tue Apr 28 05:20:18.780867 2026] [:error] [pid 56602:tid 56614] [client 20.203.141.82:44911] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "ae_TEvCwhMxzNW_lZSwhYgAAAQo"]
[Tue Apr 28 05:20:19.610510 2026] [:error] [pid 14686:tid 14709] [client 20.203.141.82:44921] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/chosen.php"] [unique_id "ae_TE--YPF1Xm7uiWQ4hXgAAANQ"]
[Tue Apr 28 05:20:20.233994 2026] [:error] [pid 56602:tid 56627] [client 20.203.141.82:64250] [client 20.203.141.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/chosen.php"] [unique_id "ae_TFPCwhMxzNW_lZSwhaAAAARc"]
[Tue Apr 28 05:20:21.239146 2026] [proxy_fcgi:error] [pid 56602:tid 56617] [client 20.203.141.82:7287] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 14:36:02.486726 2026] [proxy_fcgi:error] [pid 33777:tid 33849] [client 52.236.68.31:8036] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 14:36:02.759779 2026] [proxy_fcgi:error] [pid 33777:tid 33835] [client 52.236.68.31:8036] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 14:36:03.032828 2026] [proxy_fcgi:error] [pid 33777:tid 33852] [client 52.236.68.31:8036] AH01071: Got error 'Primary script unknown'
[Wed Apr 29 03:19:26.633452 2026] [proxy_fcgi:error] [pid 35256:tid 35275] [client 20.12.211.211:4495] AH01071: Got error 'Primary script unknown'
[Wed Apr 29 03:19:26.866689 2026] [proxy_fcgi:error] [pid 35256:tid 35282] [client 20.12.211.211:4495] AH01071: Got error 'Primary script unknown'
[Wed Apr 29 03:19:27.251022 2026] [proxy_fcgi:error] [pid 35256:tid 35277] [client 20.12.211.211:4495] AH01071: Got error 'Primary script unknown'
[Wed Apr 29 03:19:27.498397 2026] [proxy_fcgi:error] [pid 35256:tid 35265] [client 20.12.211.211:4495] AH01071: Got error 'Primary script unknown'
[Wed Apr 29 03:19:27.998065 2026] [proxy_fcgi:error] [pid 35256:tid 35280] [client 20.12.211.211:4495] AH01071: Got error 'Primary script unknown'
[Wed Apr 29 03:19:28.314757 2026] [proxy_fcgi:error] [pid 35256:tid 35259] [client 20.12.211.211:4495] AH01071: Got error 'Primary script unknown'
[Wed Apr 29 03:19:28.508098 2026] [proxy_fcgi:error] [pid 35256:tid 35258] [client 20.12.211.211:4495] AH01071: Got error 'Primary script unknown'
[Wed Apr 29 03:19:28.980590 2026] [:error] [pid 35256:tid 35274] [client 20.12.211.211:4495] [client 20.12.211.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/randkeyword.PhP7"] [unique_id "afEIQCoQkR5MuN9_tM52bQAAApA"]
[Wed Apr 29 03:19:31.821722 2026] [:error] [pid 33864:tid 33881] [client 20.12.211.211:4744] [client 20.12.211.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/randkeyword.PhP7"] [unique_id "afEIQzXchLGZ4QggCslg8wAAAI8"]
[Wed Apr 29 03:19:32.908387 2026] [:error] [pid 35342:tid 35362] [client 20.12.211.211:4519] [client 20.12.211.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/randkeyword.PhP7"] [unique_id "afEIRO7D5-OXGLQYxO4H8wAAAxI"]
[Wed Apr 29 03:19:34.271128 2026] [:error] [pid 33864:tid 33888] [client 20.12.211.211:4767] [client 20.12.211.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/randkeyword.PhP7"] [unique_id "afEIRjXchLGZ4QggCslg9gAAAJY"]
[Wed Apr 29 15:29:05.791610 2026] [:error] [pid 61628:tid 61654] [client 45.119.85.39:60834] [client 45.119.85.39] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.119.85.39, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp/wp-login.php"] [unique_id "afGzQfXzdLVcrP-YPZg_BQAAANU"], referer: https://www.google.com
[Wed Apr 29 15:29:05.791688 2026] [:error] [pid 61628:tid 61654] [client 45.119.85.39:60834] [client 45.119.85.39] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 45.119.85.39 on wp-login.php, counter = 73"] [hostname "dwelectservices.com.au"] [uri "/wp/wp-login.php"] [unique_id "afGzQfXzdLVcrP-YPZg_BQAAANU"], referer: https://www.google.com
[Wed Apr 29 15:49:02.421979 2026] [:error] [pid 44860:tid 44867] [client 45.119.85.39:58172] [client 45.119.85.39] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.119.85.39, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wordpress/wp-login.php"] [unique_id "afG37kQ82el2g7ESJ16JAAAAAkU"], referer: https://www.google.com
[Wed Apr 29 15:49:02.422074 2026] [:error] [pid 44860:tid 44867] [client 45.119.85.39:58172] [client 45.119.85.39] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 45.119.85.39 on wp-login.php, counter = 247"] [hostname "dwelectservices.com.au"] [uri "/wordpress/wp-login.php"] [unique_id "afG37kQ82el2g7ESJ16JAAAAAkU"], referer: https://www.google.com
[Thu Apr 30 20:40:23.908552 2026] [:error] [pid 5733:tid 5802] [client 80.241.213.248:53380] [client 80.241.213.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/admin/controller/extension/extension/"] [unique_id "afNNt_T55_Ioa9J2OpLuGwAAAQw"], referer: binance.com
[Thu Apr 30 20:40:30.258326 2026] [:error] [pid 6456:tid 6469] [client 80.241.213.248:63054] [client 80.241.213.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/uploads/"] [unique_id "afNNvkOBwsDodnkJK5xd9AAAAEs"], referer: binance.com
[Thu Apr 30 20:40:35.947649 2026] [:error] [pid 5732:tid 5775] [client 80.241.213.248:55244] [client 80.241.213.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/images/"] [unique_id "afNNw9uJ3iSd5GdjqlhCZwAAAMw"], referer: binance.com
[Thu Apr 30 20:40:41.082174 2026] [:error] [pid 5820:tid 5829] [client 80.241.213.248:60466] [client 80.241.213.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/files/"] [unique_id "afNNyQyrLh3-LgH3Xv9MywAAAAc"], referer: binance.com
[Thu Apr 30 22:44:39.241911 2026] [:error] [pid 5732:tid 5774] [client 34.53.208.105:56442] [client 34.53.208.105] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.git/config"] [unique_id "afNq19uJ3iSd5GdjqlhSmAAAAMs"]
[Fri May 01 01:07:27.796165 2026] [:error] [pid 5733:tid 5811] [client 104.28.214.115:42175] [client 104.28.214.115] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/style.php"] [unique_id "afOMT_T55_Ioa9J2OpIUJgAAARU"]
[Fri May 01 01:07:31.269464 2026] [:error] [pid 5820:tid 5831] [client 104.28.214.115:31272] [client 104.28.214.115] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-content/style.php"] [unique_id "afOMUwyrLh3-LgH3Xv9-NAAAAAk"]
[Fri May 01 04:56:40.496145 2026] [:error] [pid 38015:tid 38058] [client 92.53.64.155:58384] [client 92.53.64.155] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env"] [unique_id "afPCCMNJWoh41gYMCSVpUAAAAEc"]
[Fri May 01 15:00:50.489458 2026] [:error] [pid 24997:tid 25064] [client 34.130.140.201:35656] [client 34.130.140.201] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.git/config"] [unique_id "afRPovOkHa4ScY5oo8x5lAAAAMg"]
[Fri May 01 23:11:49.547409 2026] [:error] [pid 25320:tid 25323] [client 88.151.32.20:50696] [client 88.151.32.20] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dwelectservices.com.au"] [uri "/.env"] [unique_id "afTCtVc3wJ-3-XaXB3ooNgAAAQA"]
[Fri May 01 23:11:49.665841 2026] [:error] [pid 50214:tid 50239] [client 88.151.32.20:50632] [client 88.151.32.20] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dwelectservices.com.au"] [uri "/api/.env"] [unique_id "afTCtYs0pgrtfZkbhjN7hgAAAZU"]
[Fri May 01 23:11:49.665946 2026] [:error] [pid 25320:tid 25346] [client 88.151.32.20:50624] [client 88.151.32.20] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dwelectservices.com.au"] [uri "/app/.env"] [unique_id "afTCtVc3wJ-3-XaXB3ooNwAAARc"]
[Fri May 01 23:11:49.666954 2026] [:error] [pid 33791:tid 33798] [client 88.151.32.20:50604] [client 88.151.32.20] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dwelectservices.com.au"] [uri "/.env.local"] [unique_id "afTCtW9ixd-moLycM9A8UwAAAAQ"]
[Fri May 01 23:11:49.667945 2026] [:error] [pid 33791:tid 33797] [client 88.151.32.20:50648] [client 88.151.32.20] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dwelectservices.com.au"] [uri "/backend/.env"] [unique_id "afTCtW9ixd-moLycM9A8VQAAAAM"]
[Fri May 01 23:11:49.711660 2026] [:error] [pid 24997:tid 25072] [client 88.151.32.20:50592] [client 88.151.32.20] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dwelectservices.com.au"] [uri "/.env.production"] [unique_id "afTCtfOkHa4ScY5oo8zqOAAAANA"]
[Sat May 02 12:35:12.762812 2026] [:error] [pid 51950:tid 52002] [client 192.96.159.129:59875] [client 192.96.159.129] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env"] [unique_id "afV_AIoBJzYZ3RKUhdjwKwAAAlY"]
[Sun May 03 00:27:32.505833 2026] [:error] [pid 53435:tid 53491] [client 185.198.240.149:30363] [client 185.198.240.149] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/buttons.css"] [unique_id "afYl9IDmp7_z8QkjSzP9lQAAAFM"]
[Sun May 03 04:03:29.681421 2026] [proxy_fcgi:error] [pid 40639:tid 40720] [client 172.173.121.85:56289] AH01071: Got error 'Primary script unknown'
[Sun May 03 04:03:29.882733 2026] [proxy_fcgi:error] [pid 40639:tid 40721] [client 172.173.121.85:56289] AH01071: Got error 'Primary script unknown'
[Sun May 03 04:03:30.087494 2026] [proxy_fcgi:error] [pid 40639:tid 40722] [client 172.173.121.85:56289] AH01071: Got error 'Primary script unknown'
[Sun May 03 04:03:30.277268 2026] [proxy_fcgi:error] [pid 40639:tid 40708] [client 172.173.121.85:56289] AH01071: Got error 'Primary script unknown'
[Sun May 03 04:03:30.468176 2026] [proxy_fcgi:error] [pid 40639:tid 40715] [client 172.173.121.85:56289] AH01071: Got error 'Primary script unknown'
[Sun May 03 04:03:30.663834 2026] [proxy_fcgi:error] [pid 40639:tid 40719] [client 172.173.121.85:56289] AH01071: Got error 'Primary script unknown'
[Sun May 03 04:03:30.854688 2026] [proxy_fcgi:error] [pid 40639:tid 40725] [client 172.173.121.85:56289] AH01071: Got error 'Primary script unknown'
[Sun May 03 04:03:31.047872 2026] [proxy_fcgi:error] [pid 40639:tid 40714] [client 172.173.121.85:56289] AH01071: Got error 'Primary script unknown'
[Sun May 03 04:03:31.238020 2026] [proxy_fcgi:error] [pid 40639:tid 40716] [client 172.173.121.85:56289] AH01071: Got error 'Primary script unknown'
[Sun May 03 04:03:31.625858 2026] [:error] [pid 40639:tid 40720] [client 172.173.121.85:56289] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.dj/index.php"] [unique_id "afZYk69rkyoICq7qxvFB1AAAAJM"]
[Sun May 03 04:03:32.265123 2026] [:error] [pid 40639:tid 40721] [client 172.173.121.85:54480] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.dj/index.php"] [unique_id "afZYlK9rkyoICq7qxvFB1gAAAJQ"]
[Sun May 03 04:03:32.929232 2026] [:error] [pid 40732:tid 40751] [client 172.173.121.85:54470] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.dj/index.php"] [unique_id "afZYlP1lQrIvlEdzcVfmRAAAAMc"]
[Sun May 03 04:03:33.584580 2026] [:error] [pid 40732:tid 40757] [client 172.173.121.85:54510] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.dj/index.php"] [unique_id "afZYlf1lQrIvlEdzcVfmRgAAAM0"]
[Sun May 03 04:03:34.370728 2026] [:error] [pid 40639:tid 40701] [client 172.173.121.85:56285] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "afZYlq9rkyoICq7qxvFB2gAAAIA"]
[Sun May 03 04:03:34.977109 2026] [:error] [pid 40639:tid 40707] [client 172.173.121.85:56259] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "afZYlq9rkyoICq7qxvFB3gAAAIY"]
[Sun May 03 04:03:35.853754 2026] [:error] [pid 40732:tid 40754] [client 172.173.121.85:56316] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "afZYl_1lQrIvlEdzcVfmSgAAAMo"]
[Sun May 03 04:03:36.404505 2026] [:error] [pid 40732:tid 40762] [client 172.173.121.85:54513] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "afZYmP1lQrIvlEdzcVfmTgAAANI"]
[Sun May 03 04:03:37.220106 2026] [:error] [pid 40639:tid 40718] [client 172.173.121.85:54483] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.tmb/"] [unique_id "afZYma9rkyoICq7qxvFB4gAAAJE"]
[Sun May 03 04:03:38.115532 2026] [:error] [pid 40638:tid 40687] [client 172.173.121.85:56271] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.tmb/"] [unique_id "afZYmvh3VcFjJ7H1mBaM0QAAAE0"]
[Sun May 03 04:03:38.886244 2026] [:error] [pid 40638:tid 40686] [client 172.173.121.85:54475] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.tmb/"] [unique_id "afZYmvh3VcFjJ7H1mBaM0gAAAEw"]
[Sun May 03 04:03:39.359226 2026] [:error] [pid 40639:tid 40706] [client 172.173.121.85:54468] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.tmb/"] [unique_id "afZYm69rkyoICq7qxvFB6AAAAIU"]
[Sun May 03 04:03:39.891746 2026] [:error] [pid 40638:tid 40685] [client 172.173.121.85:45455] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.admin.php"] [unique_id "afZYm_h3VcFjJ7H1mBaM1AAAAEs"]
[Sun May 03 04:03:40.692636 2026] [:error] [pid 40639:tid 40721] [client 172.173.121.85:54503] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.admin.php"] [unique_id "afZYnK9rkyoICq7qxvFB7AAAAJQ"]
[Sun May 03 04:03:41.373066 2026] [:error] [pid 40639:tid 40705] [client 172.173.121.85:54472] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.admin.php"] [unique_id "afZYna9rkyoICq7qxvFB7gAAAIQ"]
[Sun May 03 04:03:41.899709 2026] [:error] [pid 40732:tid 40747] [client 172.173.121.85:56263] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.admin.php"] [unique_id "afZYnf1lQrIvlEdzcVfmVgAAAMM"]
[Sun May 03 04:03:42.606697 2026] [:error] [pid 40639:tid 40712] [client 172.173.121.85:56305] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sw.php"] [unique_id "afZYnq9rkyoICq7qxvFB8QAAAIs"]
[Sun May 03 04:03:43.574584 2026] [:error] [pid 40732:tid 40751] [client 172.173.121.85:54491] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sw.php"] [unique_id "afZYn_1lQrIvlEdzcVfmWgAAAMc"]
[Sun May 03 04:03:44.348350 2026] [:error] [pid 40732:tid 40748] [client 172.173.121.85:56298] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sw.php"] [unique_id "afZYoP1lQrIvlEdzcVfmXgAAAMQ"]
[Sun May 03 04:03:45.118510 2026] [:error] [pid 40732:tid 40762] [client 172.173.121.85:54499] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sw.php"] [unique_id "afZYof1lQrIvlEdzcVfmYAAAANI"]
[Sun May 03 04:03:46.002122 2026] [:error] [pid 40639:tid 40715] [client 172.173.121.85:54508] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vuln.php"] [unique_id "afZYoq9rkyoICq7qxvFB9gAAAI4"]
[Sun May 03 04:03:46.567112 2026] [:error] [pid 40732:tid 40750] [client 172.173.121.85:47178] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vuln.php"] [unique_id "afZYov1lQrIvlEdzcVfmYwAAAMY"]
[Sun May 03 04:03:47.035489 2026] [:error] [pid 40637:tid 40666] [client 172.173.121.85:56264] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vuln.php"] [unique_id "afZYo5B-U30YNJ6CyVgi6wAAABM"]
[Sun May 03 04:03:47.498704 2026] [:error] [pid 40732:tid 40745] [client 172.173.121.85:47192] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vuln.php"] [unique_id "afZYo_1lQrIvlEdzcVfmaAAAAME"]
[Sun May 03 04:03:48.168836 2026] [:error] [pid 40732:tid 40767] [client 172.173.121.85:56292] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-temp.php"] [unique_id "afZYpP1lQrIvlEdzcVfmbQAAANc"]
[Sun May 03 04:03:48.837982 2026] [:error] [pid 40639:tid 40713] [client 172.173.121.85:56312] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-temp.php"] [unique_id "afZYpK9rkyoICq7qxvFB-AAAAIw"]
[Sun May 03 04:03:49.485060 2026] [:error] [pid 40639:tid 40725] [client 172.173.121.85:56256] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-temp.php"] [unique_id "afZYpa9rkyoICq7qxvFB-wAAAJg"]
[Sun May 03 04:03:49.987939 2026] [:error] [pid 40732:tid 40744] [client 172.173.121.85:56309] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-temp.php"] [unique_id "afZYpf1lQrIvlEdzcVfmcgAAAMA"]
[Sun May 03 04:03:50.521943 2026] [:error] [pid 40639:tid 40716] [client 172.173.121.85:56291] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sxdfrt.php"] [unique_id "afZYpq9rkyoICq7qxvFCAAAAAI8"]
[Sun May 03 04:03:51.289634 2026] [:error] [pid 40639:tid 40714] [client 172.173.121.85:56307] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sxdfrt.php"] [unique_id "afZYp69rkyoICq7qxvFCAgAAAI0"]
[Sun May 03 04:03:51.960461 2026] [:error] [pid 40637:tid 40655] [client 172.173.121.85:54486] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sxdfrt.php"] [unique_id "afZYp5B-U30YNJ6CyVgi7wAAAAg"]
[Sun May 03 04:03:52.534331 2026] [:error] [pid 40732:tid 40746] [client 172.173.121.85:54465] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sxdfrt.php"] [unique_id "afZYqP1lQrIvlEdzcVfmdQAAAMI"]
[Sun May 03 04:03:53.021644 2026] [:error] [pid 40732:tid 40754] [client 172.173.121.85:54507] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "afZYqf1lQrIvlEdzcVfmdwAAAMo"]
[Sun May 03 04:03:53.571396 2026] [:error] [pid 40732:tid 40766] [client 172.173.121.85:56308] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "afZYqf1lQrIvlEdzcVfmewAAANY"]
[Sun May 03 04:03:54.222003 2026] [:error] [pid 40638:tid 40697] [client 172.173.121.85:54479] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "afZYqvh3VcFjJ7H1mBaM3QAAAFc"]
[Sun May 03 04:03:54.758318 2026] [:error] [pid 40732:tid 40758] [client 172.173.121.85:56299] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "afZYqv1lQrIvlEdzcVfmgQAAAM4"]
[Sun May 03 04:03:55.275493 2026] [:error] [pid 40732:tid 40752] [client 172.173.121.85:56319] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "afZYq_1lQrIvlEdzcVfmhAAAAMg"]
[Sun May 03 04:03:55.956478 2026] [:error] [pid 40638:tid 40676] [client 172.173.121.85:56301] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "afZYq_h3VcFjJ7H1mBaM3gAAAEI"]
[Sun May 03 04:03:56.442544 2026] [:error] [pid 40638:tid 40690] [client 172.173.121.85:56280] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "afZYrPh3VcFjJ7H1mBaM4gAAAFA"]
[Sun May 03 04:03:57.107491 2026] [:error] [pid 40638:tid 40693] [client 172.173.121.85:54484] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "afZYrfh3VcFjJ7H1mBaM6AAAAFM"]
[Sun May 03 04:03:57.679124 2026] [:error] [pid 40638:tid 40680] [client 172.173.121.85:54519] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class-bda.php"] [unique_id "afZYrfh3VcFjJ7H1mBaM7gAAAEY"]
[Sun May 03 04:03:58.066751 2026] [:error] [pid 40638:tid 40684] [client 172.173.121.85:56272] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class-bda.php"] [unique_id "afZYrvh3VcFjJ7H1mBaM8gAAAEo"]
[Sun May 03 04:03:58.468503 2026] [:error] [pid 40732:tid 40765] [client 172.173.121.85:47197] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class-bda.php"] [unique_id "afZYrv1lQrIvlEdzcVfmhwAAANU"]
[Sun May 03 04:03:58.932359 2026] [:error] [pid 40637:tid 40648] [client 172.173.121.85:47223] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class-bda.php"] [unique_id "afZYrpB-U30YNJ6CyVgi8wAAAAE"]
[Sun May 03 04:03:59.398852 2026] [:error] [pid 40638:tid 40689] [client 172.173.121.85:47229] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bhm.php"] [unique_id "afZYr_h3VcFjJ7H1mBaM-gAAAE8"]
[Sun May 03 04:03:59.888431 2026] [:error] [pid 40638:tid 40679] [client 172.173.121.85:56278] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bhm.php"] [unique_id "afZYr_h3VcFjJ7H1mBaM_AAAAEU"]
[Sun May 03 04:04:00.313385 2026] [:error] [pid 40639:tid 40719] [client 172.173.121.85:54466] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bhm.php"] [unique_id "afZYsK9rkyoICq7qxvFCDAAAAJI"]
[Sun May 03 04:04:00.852658 2026] [:error] [pid 40637:tid 40668] [client 172.173.121.85:56269] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bhm.php"] [unique_id "afZYsJB-U30YNJ6CyVgi9wAAABU"]
[Sun May 03 04:04:01.280414 2026] [:error] [pid 40639:tid 40709] [client 172.173.121.85:47170] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xmu.php"] [unique_id "afZYsa9rkyoICq7qxvFCEgAAAIg"]
[Sun May 03 04:04:01.753389 2026] [:error] [pid 40639:tid 40701] [client 172.173.121.85:54518] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xmu.php"] [unique_id "afZYsa9rkyoICq7qxvFCFgAAAIA"]
[Sun May 03 04:04:02.283098 2026] [:error] [pid 40639:tid 40714] [client 172.173.121.85:56276] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xmu.php"] [unique_id "afZYsq9rkyoICq7qxvFCGAAAAI0"]
[Sun May 03 04:04:02.800900 2026] [:error] [pid 40638:tid 40682] [client 172.173.121.85:47175] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xmu.php"] [unique_id "afZYsvh3VcFjJ7H1mBaM_QAAAEg"]
[Sun May 03 04:04:03.320576 2026] [:error] [pid 40637:tid 40669] [client 172.173.121.85:56318] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ref.php"] [unique_id "afZYs5B-U30YNJ6CyVgi-wAAABY"]
[Sun May 03 04:04:03.941850 2026] [:error] [pid 40639:tid 40723] [client 172.173.121.85:56293] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ref.php"] [unique_id "afZYs69rkyoICq7qxvFCIQAAAJY"]
[Sun May 03 04:04:04.704480 2026] [:error] [pid 40637:tid 40662] [client 172.173.121.85:47205] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ref.php"] [unique_id "afZYtJB-U30YNJ6CyVgi_gAAAA8"]
[Sun May 03 04:04:05.340894 2026] [:error] [pid 40638:tid 40696] [client 172.173.121.85:54477] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ref.php"] [unique_id "afZYtfh3VcFjJ7H1mBaNAAAAAFY"]
[Sun May 03 04:04:06.031422 2026] [:error] [pid 40638:tid 40679] [client 172.173.121.85:54505] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-xme.php"] [unique_id "afZYtvh3VcFjJ7H1mBaNAwAAAEU"]
[Sun May 03 04:04:06.611858 2026] [:error] [pid 40637:tid 40649] [client 172.173.121.85:47171] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-xme.php"] [unique_id "afZYtpB-U30YNJ6CyVgjAgAAAAI"]
[Sun May 03 04:04:07.092471 2026] [:error] [pid 40637:tid 40661] [client 172.173.121.85:54501] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-xme.php"] [unique_id "afZYt5B-U30YNJ6CyVgjBgAAAA4"]
[Sun May 03 04:04:07.807328 2026] [:error] [pid 40637:tid 40662] [client 172.173.121.85:54478] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-xme.php"] [unique_id "afZYt5B-U30YNJ6CyVgjDAAAAA8"]
[Sun May 03 04:04:08.230116 2026] [:error] [pid 40637:tid 40665] [client 172.173.121.85:56304] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/adminer.php"] [unique_id "afZYuJB-U30YNJ6CyVgjEAAAABI"]
[Sun May 03 04:04:08.940710 2026] [:error] [pid 40637:tid 40648] [client 172.173.121.85:56317] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/adminer.php"] [unique_id "afZYuJB-U30YNJ6CyVgjEgAAAAE"]
[Sun May 03 04:04:09.619623 2026] [:error] [pid 40638:tid 40682] [client 172.173.121.85:47190] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/adminer.php"] [unique_id "afZYufh3VcFjJ7H1mBaNCQAAAEg"]
[Sun May 03 04:04:10.182095 2026] [:error] [pid 40637:tid 40668] [client 172.173.121.85:54514] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/adminer.php"] [unique_id "afZYupB-U30YNJ6CyVgjFgAAABU"]
[Sun May 03 04:04:10.915604 2026] [:error] [pid 40732:tid 40747] [client 172.173.121.85:54496] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ktfow.php"] [unique_id "afZYuv1lQrIvlEdzcVfmjgAAAMM"]
[Sun May 03 04:04:11.418089 2026] [:error] [pid 40639:tid 40714] [client 172.173.121.85:47216] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ktfow.php"] [unique_id "afZYu69rkyoICq7qxvFCJwAAAI0"]
[Sun May 03 04:04:11.935845 2026] [:error] [pid 40639:tid 40716] [client 172.173.121.85:54485] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ktfow.php"] [unique_id "afZYu69rkyoICq7qxvFCKwAAAI8"]
[Sun May 03 04:04:12.510752 2026] [:error] [pid 40639:tid 40721] [client 172.173.121.85:47169] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ktfow.php"] [unique_id "afZYvK9rkyoICq7qxvFCLQAAAJQ"]
[Sun May 03 04:04:13.228942 2026] [:error] [pid 40732:tid 40763] [client 172.173.121.85:54517] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mode.php"] [unique_id "afZYvf1lQrIvlEdzcVfmkQAAANM"]
[Sun May 03 04:04:13.681014 2026] [:error] [pid 40637:tid 40665] [client 172.173.121.85:47206] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mode.php"] [unique_id "afZYvZB-U30YNJ6CyVgjHQAAABI"]
[Sun May 03 04:04:14.568427 2026] [:error] [pid 40638:tid 40686] [client 172.173.121.85:54502] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mode.php"] [unique_id "afZYvvh3VcFjJ7H1mBaNFgAAAEw"]
[Sun May 03 04:04:15.157066 2026] [:error] [pid 40638:tid 40678] [client 172.173.121.85:54495] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mode.php"] [unique_id "afZYv_h3VcFjJ7H1mBaNGAAAAEQ"]
[Sun May 03 04:04:15.724668 2026] [:error] [pid 40637:tid 40648] [client 172.173.121.85:47173] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Xx.php"] [unique_id "afZYv5B-U30YNJ6CyVgjHwAAAAE"]
[Sun May 03 04:04:16.215154 2026] [:error] [pid 40732:tid 40752] [client 172.173.121.85:54522] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Xx.php"] [unique_id "afZYwP1lQrIvlEdzcVfmlwAAAMg"]
[Sun May 03 04:04:17.317071 2026] [:error] [pid 40732:tid 40761] [client 172.173.121.85:56275] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Xx.php"] [unique_id "afZYwf1lQrIvlEdzcVfmmgAAANE"]
[Sun May 03 04:04:18.538815 2026] [:error] [pid 40637:tid 40656] [client 172.173.121.85:56270] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Xx.php"] [unique_id "afZYwpB-U30YNJ6CyVgjJwAAAAk"]
[Sun May 03 04:04:19.502433 2026] [:error] [pid 40638:tid 40687] [client 172.173.121.85:45466] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xmini.php"] [unique_id "afZYw_h3VcFjJ7H1mBaNHgAAAE0"]
[Sun May 03 04:04:20.259708 2026] [:error] [pid 40732:tid 40765] [client 172.173.121.85:56288] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xmini.php"] [unique_id "afZYxP1lQrIvlEdzcVfmogAAANU"]
[Sun May 03 04:04:20.859919 2026] [:error] [pid 40732:tid 40761] [client 172.173.121.85:54490] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xmini.php"] [unique_id "afZYxP1lQrIvlEdzcVfmpgAAANE"]
[Sun May 03 04:04:21.271104 2026] [:error] [pid 40637:tid 40657] [client 172.173.121.85:54511] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xmini.php"] [unique_id "afZYxZB-U30YNJ6CyVgjKAAAAAo"]
[Sun May 03 04:04:21.837581 2026] [:error] [pid 40732:tid 40750] [client 172.173.121.85:45451] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2468.php"] [unique_id "afZYxf1lQrIvlEdzcVfmqwAAAMY"]
[Sun May 03 04:04:22.448097 2026] [:error] [pid 40732:tid 40749] [client 172.173.121.85:56282] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2468.php"] [unique_id "afZYxv1lQrIvlEdzcVfmrgAAAMU"]
[Sun May 03 04:04:23.027180 2026] [:error] [pid 40732:tid 40761] [client 172.173.121.85:56261] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2468.php"] [unique_id "afZYx_1lQrIvlEdzcVfmtAAAANE"]
[Sun May 03 04:04:23.492826 2026] [:error] [pid 40732:tid 40766] [client 172.173.121.85:56303] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2468.php"] [unique_id "afZYx_1lQrIvlEdzcVfmuQAAANY"]
[Sun May 03 04:04:23.934932 2026] [:error] [pid 40732:tid 40767] [client 172.173.121.85:54497] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "afZYx_1lQrIvlEdzcVfmvAAAANc"]
[Sun May 03 04:04:24.467653 2026] [:error] [pid 40732:tid 40761] [client 172.173.121.85:54504] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "afZYyP1lQrIvlEdzcVfmwAAAANE"]
[Sun May 03 04:04:25.156729 2026] [:error] [pid 40637:tid 40650] [client 172.173.121.85:54506] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "afZYyZB-U30YNJ6CyVgjLAAAAAM"]
[Sun May 03 04:04:25.744755 2026] [:error] [pid 40637:tid 40667] [client 172.173.121.85:47203] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "afZYyZB-U30YNJ6CyVgjLQAAABQ"]
[Sun May 03 04:04:26.360328 2026] [:error] [pid 40732:tid 40744] [client 172.173.121.85:56314] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dx.php"] [unique_id "afZYyv1lQrIvlEdzcVfmyAAAAMA"]
[Sun May 03 04:04:26.945282 2026] [:error] [pid 40732:tid 40752] [client 172.173.121.85:54474] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dx.php"] [unique_id "afZYyv1lQrIvlEdzcVfmzAAAAMg"]
[Sun May 03 04:04:27.412400 2026] [:error] [pid 40637:tid 40656] [client 172.173.121.85:54471] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dx.php"] [unique_id "afZYy5B-U30YNJ6CyVgjMQAAAAk"]
[Sun May 03 04:04:28.077802 2026] [:error] [pid 40637:tid 40659] [client 172.173.121.85:54512] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dx.php"] [unique_id "afZYzJB-U30YNJ6CyVgjMwAAAAw"]
[Sun May 03 04:04:28.610484 2026] [:error] [pid 40637:tid 40660] [client 172.173.121.85:54492] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/amdin.php"] [unique_id "afZYzJB-U30YNJ6CyVgjNAAAAA0"]
[Sun May 03 04:04:29.120692 2026] [:error] [pid 40637:tid 40648] [client 172.173.121.85:54487] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/amdin.php"] [unique_id "afZYzZB-U30YNJ6CyVgjNQAAAAE"]
[Sun May 03 04:04:29.594970 2026] [:error] [pid 40637:tid 40671] [client 172.173.121.85:45482] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/amdin.php"] [unique_id "afZYzZB-U30YNJ6CyVgjOgAAABg"]
[Sun May 03 04:04:30.114427 2026] [:error] [pid 40637:tid 40664] [client 172.173.121.85:56294] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/amdin.php"] [unique_id "afZYzpB-U30YNJ6CyVgjPAAAABE"]
[Sun May 03 04:04:31.136480 2026] [proxy_fcgi:error] [pid 40732:tid 40760] [client 172.173.121.85:56296] AH01071: Got error 'Primary script unknown'
[Sun May 03 04:04:31.326007 2026] [proxy_fcgi:error] [pid 40732:tid 40751] [client 172.173.121.85:56296] AH01071: Got error 'Primary script unknown'
[Sun May 03 04:04:31.515533 2026] [proxy_fcgi:error] [pid 40732:tid 40768] [client 172.173.121.85:56296] AH01071: Got error 'Primary script unknown'
[Sun May 03 04:04:31.704690 2026] [proxy_fcgi:error] [pid 40732:tid 40747] [client 172.173.121.85:56296] AH01071: Got error 'Primary script unknown'
[Sun May 03 04:04:31.899611 2026] [proxy_fcgi:error] [pid 40732:tid 40766] [client 172.173.121.85:56296] AH01071: Got error 'Primary script unknown'
[Sun May 03 04:04:32.095733 2026] [proxy_fcgi:error] [pid 40732:tid 40767] [client 172.173.121.85:56296] AH01071: Got error 'Primary script unknown'
[Sun May 03 04:04:32.286459 2026] [proxy_fcgi:error] [pid 40732:tid 40749] [client 172.173.121.85:56296] AH01071: Got error 'Primary script unknown'
[Sun May 03 04:04:32.477644 2026] [proxy_fcgi:error] [pid 40732:tid 40755] [client 172.173.121.85:56296] AH01071: Got error 'Primary script unknown'
[Sun May 03 04:04:32.666616 2026] [proxy_fcgi:error] [pid 40732:tid 40745] [client 172.173.121.85:56296] AH01071: Got error 'Primary script unknown'
[Sun May 03 04:04:32.858931 2026] [proxy_fcgi:error] [pid 40732:tid 40754] [client 172.173.121.85:56296] AH01071: Got error 'Primary script unknown'
[Sun May 03 04:04:33.048591 2026] [proxy_fcgi:error] [pid 40732:tid 40759] [client 172.173.121.85:56296] AH01071: Got error 'Primary script unknown'
[Sun May 03 04:04:33.234721 2026] [:error] [pid 40732:tid 40760] [client 172.173.121.85:56296] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/11.php"] [unique_id "afZY0f1lQrIvlEdzcVfm6QAAANA"]
[Sun May 03 04:04:33.868813 2026] [:error] [pid 40637:tid 40661] [client 172.173.121.85:54524] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/11.php"] [unique_id "afZY0ZB-U30YNJ6CyVgjTgAAAA4"]
[Sun May 03 04:04:34.525313 2026] [:error] [pid 40638:tid 40697] [client 172.173.121.85:47172] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/11.php"] [unique_id "afZY0vh3VcFjJ7H1mBaNKgAAAFc"]
[Sun May 03 04:04:35.057662 2026] [:error] [pid 40638:tid 40694] [client 172.173.121.85:54500] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/11.php"] [unique_id "afZY0_h3VcFjJ7H1mBaNKwAAAFQ"]
[Sun May 03 04:04:35.553059 2026] [:error] [pid 40639:tid 40720] [client 172.173.121.85:45454] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/p.php"] [unique_id "afZY069rkyoICq7qxvFCPAAAAJM"]
[Sun May 03 04:04:36.302426 2026] [:error] [pid 40732:tid 40757] [client 172.173.121.85:54521] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/p.php"] [unique_id "afZY1P1lQrIvlEdzcVfm8QAAAM0"]
[Sun May 03 04:04:36.960213 2026] [:error] [pid 40732:tid 40765] [client 172.173.121.85:56310] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/p.php"] [unique_id "afZY1P1lQrIvlEdzcVfm8wAAANU"]
[Sun May 03 04:04:37.435850 2026] [:error] [pid 40638:tid 40696] [client 172.173.121.85:54493] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/p.php"] [unique_id "afZY1fh3VcFjJ7H1mBaNLgAAAFY"]
[Sun May 03 04:04:37.930460 2026] [:error] [pid 40637:tid 40661] [client 172.173.121.85:47210] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Requests/"] [unique_id "afZY1ZB-U30YNJ6CyVgjVwAAAA4"]
[Sun May 03 04:04:38.517904 2026] [:error] [pid 40638:tid 40689] [client 172.173.121.85:47191] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Requests/"] [unique_id "afZY1vh3VcFjJ7H1mBaNNAAAAE8"]
[Sun May 03 04:04:39.045494 2026] [:error] [pid 40637:tid 40670] [client 172.173.121.85:54516] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Requests/"] [unique_id "afZY15B-U30YNJ6CyVgjWwAAABc"]
[Sun May 03 04:04:39.552051 2026] [:error] [pid 40732:tid 40747] [client 172.173.121.85:45449] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Requests/"] [unique_id "afZY1_1lQrIvlEdzcVfm-AAAAMM"]
[Sun May 03 04:04:40.203162 2026] [:error] [pid 40732:tid 40764] [client 172.173.121.85:56279] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bthil.php"] [unique_id "afZY2P1lQrIvlEdzcVfm_AAAANQ"]
[Sun May 03 04:04:40.815168 2026] [:error] [pid 40639:tid 40706] [client 172.173.121.85:54476] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bthil.php"] [unique_id "afZY2K9rkyoICq7qxvFCRAAAAIU"]
[Sun May 03 04:04:41.570552 2026] [:error] [pid 40639:tid 40722] [client 172.173.121.85:45484] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bthil.php"] [unique_id "afZY2a9rkyoICq7qxvFCRwAAAJU"]
[Sun May 03 04:04:42.098933 2026] [:error] [pid 40637:tid 40651] [client 172.173.121.85:47215] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bthil.php"] [unique_id "afZY2pB-U30YNJ6CyVgjYAAAAAQ"]
[Sun May 03 04:04:42.742994 2026] [:error] [pid 40732:tid 40751] [client 172.173.121.85:56262] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/shell.php"] [unique_id "afZY2v1lQrIvlEdzcVfnAwAAAMc"]
[Sun May 03 04:04:43.313302 2026] [:error] [pid 40732:tid 40747] [client 172.173.121.85:56286] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/shell.php"] [unique_id "afZY2_1lQrIvlEdzcVfnCAAAAMM"]
[Sun May 03 04:04:43.803622 2026] [:error] [pid 40639:tid 40723] [client 172.173.121.85:56287] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/shell.php"] [unique_id "afZY269rkyoICq7qxvFCTgAAAJY"]
[Sun May 03 04:04:44.555930 2026] [:error] [pid 40639:tid 40725] [client 172.173.121.85:56266] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/shell.php"] [unique_id "afZY3K9rkyoICq7qxvFCUQAAAJg"]
[Sun May 03 04:04:45.046350 2026] [:error] [pid 40637:tid 40648] [client 172.173.121.85:54509] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tea.php"] [unique_id "afZY3ZB-U30YNJ6CyVgjZwAAAAE"]
[Sun May 03 04:04:45.525133 2026] [:error] [pid 40637:tid 40649] [client 172.173.121.85:45460] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tea.php"] [unique_id "afZY3ZB-U30YNJ6CyVgjagAAAAI"]
[Sun May 03 04:04:46.140150 2026] [:error] [pid 40637:tid 40671] [client 172.173.121.85:54473] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tea.php"] [unique_id "afZY3pB-U30YNJ6CyVgjbQAAABg"]
[Sun May 03 04:04:46.724064 2026] [:error] [pid 40637:tid 40647] [client 172.173.121.85:45499] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tea.php"] [unique_id "afZY3pB-U30YNJ6CyVgjcAAAAAA"]
[Sun May 03 04:04:47.189309 2026] [:error] [pid 40639:tid 40708] [client 172.173.121.85:56295] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/seo.php"] [unique_id "afZY369rkyoICq7qxvFCVwAAAIc"]
[Sun May 03 04:04:47.735095 2026] [:error] [pid 40638:tid 40687] [client 172.173.121.85:47185] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/seo.php"] [unique_id "afZY3_h3VcFjJ7H1mBaNSAAAAE0"]
[Sun May 03 04:04:48.412496 2026] [:error] [pid 40732:tid 40762] [client 172.173.121.85:54481] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/seo.php"] [unique_id "afZY4P1lQrIvlEdzcVfnEwAAANI"]
[Sun May 03 04:04:48.928746 2026] [:error] [pid 40638:tid 40690] [client 172.173.121.85:56284] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/seo.php"] [unique_id "afZY4Ph3VcFjJ7H1mBaNTgAAAFA"]
[Sun May 03 04:04:49.434474 2026] [:error] [pid 40638:tid 40681] [client 172.173.121.85:45469] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/7.php"] [unique_id "afZY4fh3VcFjJ7H1mBaNUQAAAEc"]
[Sun May 03 04:04:50.053060 2026] [:error] [pid 40638:tid 40679] [client 172.173.121.85:45464] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/7.php"] [unique_id "afZY4vh3VcFjJ7H1mBaNVAAAAEU"]
[Sun May 03 04:04:50.473432 2026] [:error] [pid 40732:tid 40757] [client 172.173.121.85:56313] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/7.php"] [unique_id "afZY4v1lQrIvlEdzcVfnGAAAAM0"]
[Sun May 03 04:04:51.013232 2026] [:error] [pid 40638:tid 40675] [client 172.173.121.85:39395] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/7.php"] [unique_id "afZY4_h3VcFjJ7H1mBaNWAAAAEE"]
[Sun May 03 04:04:51.417339 2026] [:error] [pid 40639:tid 40721] [client 172.173.121.85:56267] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/8.php"] [unique_id "afZY469rkyoICq7qxvFCZAAAAJQ"]
[Sun May 03 04:04:51.866209 2026] [:error] [pid 40732:tid 40763] [client 172.173.121.85:47226] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/8.php"] [unique_id "afZY4_1lQrIvlEdzcVfnHAAAANM"]
[Sun May 03 04:04:52.439324 2026] [:error] [pid 40732:tid 40748] [client 172.173.121.85:45485] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/8.php"] [unique_id "afZY5P1lQrIvlEdzcVfnIAAAAMQ"]
[Sun May 03 04:04:52.951191 2026] [:error] [pid 40732:tid 40750] [client 172.173.121.85:45444] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/8.php"] [unique_id "afZY5P1lQrIvlEdzcVfnJgAAAMY"]
[Sun May 03 04:04:53.433353 2026] [:error] [pid 40637:tid 40671] [client 172.173.121.85:47186] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/1.php"] [unique_id "afZY5ZB-U30YNJ6CyVgjdAAAABg"]
[Sun May 03 04:04:53.844179 2026] [:error] [pid 40638:tid 40696] [client 172.173.121.85:47200] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/1.php"] [unique_id "afZY5fh3VcFjJ7H1mBaNXQAAAFY"]
[Sun May 03 04:04:54.291840 2026] [:error] [pid 40638:tid 40692] [client 172.173.121.85:45503] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/1.php"] [unique_id "afZY5vh3VcFjJ7H1mBaNYAAAAFI"]
[Sun May 03 04:04:54.911348 2026] [:error] [pid 40639:tid 40715] [client 172.173.121.85:56283] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/1.php"] [unique_id "afZY5q9rkyoICq7qxvFCawAAAI4"]
[Sun May 03 04:04:55.595894 2026] [:error] [pid 40637:tid 40664] [client 172.173.121.85:47188] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2.php"] [unique_id "afZY55B-U30YNJ6CyVgjeQAAABE"]
[Sun May 03 04:04:56.202092 2026] [:error] [pid 40639:tid 40702] [client 172.173.121.85:47225] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2.php"] [unique_id "afZY6K9rkyoICq7qxvFCcQAAAIE"]
[Sun May 03 04:04:56.993842 2026] [:error] [pid 40638:tid 40678] [client 172.173.121.85:47213] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2.php"] [unique_id "afZY6Ph3VcFjJ7H1mBaNaAAAAEQ"]
[Sun May 03 04:04:57.459791 2026] [:error] [pid 40637:tid 40656] [client 172.173.121.85:54498] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2.php"] [unique_id "afZY6ZB-U30YNJ6CyVgjfwAAAAk"]
[Sun May 03 04:04:58.083471 2026] [:error] [pid 40637:tid 40654] [client 172.173.121.85:47181] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/3.php"] [unique_id "afZY6pB-U30YNJ6CyVgjgwAAAAc"]
[Sun May 03 04:04:58.797491 2026] [:error] [pid 40637:tid 40664] [client 172.173.121.85:45441] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/3.php"] [unique_id "afZY6pB-U30YNJ6CyVgjigAAABE"]
[Sun May 03 04:04:59.257935 2026] [:error] [pid 40637:tid 40663] [client 172.173.121.85:47184] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/3.php"] [unique_id "afZY65B-U30YNJ6CyVgjjwAAABA"]
[Sun May 03 04:04:59.802499 2026] [:error] [pid 40637:tid 40648] [client 172.173.121.85:47194] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/3.php"] [unique_id "afZY65B-U30YNJ6CyVgjlAAAAAE"]
[Sun May 03 04:05:00.520203 2026] [:error] [pid 40639:tid 40723] [client 172.173.121.85:47224] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/4.php"] [unique_id "afZY7K9rkyoICq7qxvFCgQAAAJY"]
[Sun May 03 04:05:01.092312 2026] [:error] [pid 40637:tid 40651] [client 172.173.121.85:39333] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/4.php"] [unique_id "afZY7ZB-U30YNJ6CyVgjnAAAAAQ"]
[Sun May 03 04:05:01.568543 2026] [:error] [pid 40639:tid 40709] [client 172.173.121.85:47174] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/4.php"] [unique_id "afZY7a9rkyoICq7qxvFCiAAAAIg"]
[Sun May 03 04:05:02.044582 2026] [:error] [pid 40639:tid 40722] [client 172.173.121.85:39396] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/4.php"] [unique_id "afZY7q9rkyoICq7qxvFCjAAAAJU"]
[Sun May 03 04:05:02.537776 2026] [:error] [pid 40732:tid 40757] [client 172.173.121.85:45442] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/5.php"] [unique_id "afZY7v1lQrIvlEdzcVfnNgAAAM0"]
[Sun May 03 04:05:02.935140 2026] [:error] [pid 40639:tid 40711] [client 172.173.121.85:45452] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/5.php"] [unique_id "afZY7q9rkyoICq7qxvFCjwAAAIo"]
[Sun May 03 04:05:03.386417 2026] [:error] [pid 40732:tid 40767] [client 172.173.121.85:45470] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/5.php"] [unique_id "afZY7_1lQrIvlEdzcVfnPAAAANc"]
[Sun May 03 04:05:03.934037 2026] [:error] [pid 40732:tid 40750] [client 172.173.121.85:54494] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/5.php"] [unique_id "afZY7_1lQrIvlEdzcVfnQAAAAMY"]
[Sun May 03 04:05:04.351407 2026] [:error] [pid 40639:tid 40712] [client 172.173.121.85:47182] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/6.php"] [unique_id "afZY8K9rkyoICq7qxvFCkQAAAIs"]
[Sun May 03 04:05:04.742938 2026] [:error] [pid 40639:tid 40718] [client 172.173.121.85:47199] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/6.php"] [unique_id "afZY8K9rkyoICq7qxvFCkgAAAJE"]
[Sun May 03 04:05:05.203879 2026] [:error] [pid 40637:tid 40666] [client 172.173.121.85:54520] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/6.php"] [unique_id "afZY8ZB-U30YNJ6CyVgjoQAAABM"]
[Sun May 03 04:05:05.697331 2026] [:error] [pid 40639:tid 40721] [client 172.173.121.85:47207] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/6.php"] [unique_id "afZY8a9rkyoICq7qxvFCmwAAAJQ"]
[Sun May 03 04:05:06.146079 2026] [:error] [pid 40638:tid 40688] [client 172.173.121.85:54523] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/9.php"] [unique_id "afZY8vh3VcFjJ7H1mBaNbQAAAE4"]
[Sun May 03 04:05:06.630720 2026] [:error] [pid 40639:tid 40720] [client 172.173.121.85:47212] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/9.php"] [unique_id "afZY8q9rkyoICq7qxvFCogAAAJM"]
[Sun May 03 04:05:07.079538 2026] [:error] [pid 40638:tid 40682] [client 172.173.121.85:54482] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/9.php"] [unique_id "afZY8_h3VcFjJ7H1mBaNcgAAAEg"]
[Sun May 03 04:05:07.597180 2026] [:error] [pid 40637:tid 40669] [client 172.173.121.85:47180] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/9.php"] [unique_id "afZY85B-U30YNJ6CyVgjpgAAABY"]
[Sun May 03 04:05:08.019274 2026] [:error] [pid 40639:tid 40725] [client 172.173.121.85:45450] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/10.php"] [unique_id "afZY9K9rkyoICq7qxvFCpQAAAJg"]
[Sun May 03 04:05:08.507752 2026] [:error] [pid 40638:tid 40695] [client 172.173.121.85:47214] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/10.php"] [unique_id "afZY9Ph3VcFjJ7H1mBaNeQAAAFU"]
[Sun May 03 04:05:09.035031 2026] [:error] [pid 40638:tid 40676] [client 172.173.121.85:47227] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/10.php"] [unique_id "afZY9fh3VcFjJ7H1mBaNfgAAAEI"]
[Sun May 03 04:05:09.466817 2026] [:error] [pid 40638:tid 40688] [client 172.173.121.85:54515] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/10.php"] [unique_id "afZY9fh3VcFjJ7H1mBaNggAAAE4"]
[Sun May 03 04:05:09.927224 2026] [:error] [pid 40638:tid 40674] [client 172.173.121.85:47204] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/100.php"] [unique_id "afZY9fh3VcFjJ7H1mBaNhgAAAEA"]
[Sun May 03 04:05:10.358029 2026] [:error] [pid 40732:tid 40764] [client 172.173.121.85:56257] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/100.php"] [unique_id "afZY9v1lQrIvlEdzcVfnRgAAANQ"]
[Sun May 03 04:05:10.900678 2026] [:error] [pid 40638:tid 40687] [client 172.173.121.85:39365] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/100.php"] [unique_id "afZY9vh3VcFjJ7H1mBaNiQAAAE0"]
[Sun May 03 04:05:11.348946 2026] [:error] [pid 40639:tid 40705] [client 172.173.121.85:56311] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/100.php"] [unique_id "afZY969rkyoICq7qxvFCqwAAAIQ"]
[Sun May 03 04:05:11.992197 2026] [:error] [pid 40638:tid 40683] [client 172.173.121.85:47208] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/nastar.php"] [unique_id "afZY9_h3VcFjJ7H1mBaNjQAAAEk"]
[Sun May 03 04:05:12.513763 2026] [:error] [pid 40638:tid 40697] [client 172.173.121.85:45479] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/nastar.php"] [unique_id "afZY-Ph3VcFjJ7H1mBaNkAAAAFc"]
[Sun May 03 04:05:13.068980 2026] [:error] [pid 40639:tid 40708] [client 172.173.121.85:39391] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/nastar.php"] [unique_id "afZY-a9rkyoICq7qxvFCsAAAAIc"]
[Sun May 03 04:05:13.521956 2026] [:error] [pid 40639:tid 40703] [client 172.173.121.85:45468] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/nastar.php"] [unique_id "afZY-a9rkyoICq7qxvFCtQAAAII"]
[Sun May 03 04:05:14.312157 2026] [:error] [pid 40732:tid 40756] [client 172.173.121.85:47201] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f35_S.php"] [unique_id "afZY-v1lQrIvlEdzcVfnSgAAAMw"]
[Sun May 03 04:05:14.734841 2026] [:error] [pid 40732:tid 40758] [client 172.173.121.85:45446] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f35_S.php"] [unique_id "afZY-v1lQrIvlEdzcVfnTQAAAM4"]
[Sun May 03 04:05:15.213414 2026] [:error] [pid 40639:tid 40702] [client 172.173.121.85:45497] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f35_S.php"] [unique_id "afZY-69rkyoICq7qxvFCvAAAAIE"]
[Sun May 03 04:05:15.668303 2026] [:error] [pid 40639:tid 40708] [client 172.173.121.85:56302] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f35_S.php"] [unique_id "afZY-69rkyoICq7qxvFCvgAAAIc"]
[Sun May 03 04:05:16.096941 2026] [:error] [pid 40732:tid 40765] [client 172.173.121.85:47193] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2026w.php"] [unique_id "afZY_P1lQrIvlEdzcVfnUQAAANU"]
[Sun May 03 04:05:16.600134 2026] [:error] [pid 40637:tid 40666] [client 172.173.121.85:45480] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2026w.php"] [unique_id "afZY_JB-U30YNJ6CyVgjrAAAABM"]
[Sun May 03 04:05:17.172208 2026] [:error] [pid 40732:tid 40754] [client 172.173.121.85:39300] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2026w.php"] [unique_id "afZY_f1lQrIvlEdzcVfnVAAAAMo"]
[Sun May 03 04:05:17.629180 2026] [:error] [pid 40637:tid 40649] [client 172.173.121.85:54526] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2026w.php"] [unique_id "afZY_ZB-U30YNJ6CyVgjrwAAAAI"]
[Sun May 03 04:05:18.166659 2026] [:error] [pid 40732:tid 40758] [client 172.173.121.85:45476] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/111.php"] [unique_id "afZY_v1lQrIvlEdzcVfnWQAAAM4"]
[Sun May 03 04:05:18.605773 2026] [:error] [pid 40732:tid 40753] [client 172.173.121.85:45473] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/111.php"] [unique_id "afZY_v1lQrIvlEdzcVfnWwAAAMk"]
[Sun May 03 04:05:19.267425 2026] [:error] [pid 40638:tid 40675] [client 172.173.121.85:39378] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/111.php"] [unique_id "afZY__h3VcFjJ7H1mBaNlgAAAEE"]
[Sun May 03 04:05:19.676626 2026] [:error] [pid 40639:tid 40704] [client 172.173.121.85:54527] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/111.php"] [unique_id "afZY_69rkyoICq7qxvFCyQAAAIM"]
[Sun May 03 04:05:20.261193 2026] [:error] [pid 40732:tid 40766] [client 172.173.121.85:39362] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp1.php"] [unique_id "afZZAP1lQrIvlEdzcVfnYwAAANY"]
[Sun May 03 04:05:20.874614 2026] [:error] [pid 40637:tid 40670] [client 172.173.121.85:39375] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp1.php"] [unique_id "afZZAJB-U30YNJ6CyVgjtQAAABc"]
[Sun May 03 04:05:21.357714 2026] [:error] [pid 40732:tid 40759] [client 172.173.121.85:45493] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp1.php"] [unique_id "afZZAf1lQrIvlEdzcVfnZwAAAM8"]
[Sun May 03 04:05:21.807011 2026] [:error] [pid 40732:tid 40756] [client 172.173.121.85:45445] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp1.php"] [unique_id "afZZAf1lQrIvlEdzcVfnagAAAMw"]
[Sun May 03 04:05:22.365978 2026] [:error] [pid 40732:tid 40753] [client 172.173.121.85:56300] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aligk.php"] [unique_id "afZZAv1lQrIvlEdzcVfnbQAAAMk"]
[Sun May 03 04:05:23.068872 2026] [:error] [pid 40732:tid 40767] [client 172.173.121.85:39327] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aligk.php"] [unique_id "afZZA_1lQrIvlEdzcVfncQAAANc"]
[Sun May 03 04:05:23.785138 2026] [:error] [pid 40638:tid 40694] [client 172.173.121.85:39371] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aligk.php"] [unique_id "afZZA_h3VcFjJ7H1mBaNoQAAAFQ"]
[Sun May 03 04:05:24.408005 2026] [:error] [pid 40732:tid 40757] [client 172.173.121.85:47219] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aligk.php"] [unique_id "afZZBP1lQrIvlEdzcVfndQAAAM0"]
[Sun May 03 04:05:25.035852 2026] [:error] [pid 40638:tid 40684] [client 172.173.121.85:39406] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/byrgo.php"] [unique_id "afZZBfh3VcFjJ7H1mBaNpQAAAEo"]
[Sun May 03 04:05:25.671812 2026] [:error] [pid 40637:tid 40650] [client 172.173.121.85:45467] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/byrgo.php"] [unique_id "afZZBZB-U30YNJ6CyVgjugAAAAM"]
[Sun May 03 04:05:26.130692 2026] [:error] [pid 40732:tid 40760] [client 172.173.121.85:56281] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/byrgo.php"] [unique_id "afZZBv1lQrIvlEdzcVfndwAAANA"]
[Sun May 03 04:05:26.757056 2026] [:error] [pid 40638:tid 40698] [client 172.173.121.85:45478] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/byrgo.php"] [unique_id "afZZBvh3VcFjJ7H1mBaNqwAAAFg"]
[Sun May 03 04:05:27.253024 2026] [:error] [pid 40637:tid 40659] [client 172.173.121.85:45483] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xwpg.php"] [unique_id "afZZB5B-U30YNJ6CyVgjvAAAAAw"]
[Sun May 03 04:05:27.677359 2026] [:error] [pid 40639:tid 40704] [client 172.173.121.85:47196] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xwpg.php"] [unique_id "afZZB69rkyoICq7qxvFC0AAAAIM"]
[Sun May 03 04:05:28.261616 2026] [:error] [pid 40732:tid 40754] [client 172.173.121.85:47217] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xwpg.php"] [unique_id "afZZCP1lQrIvlEdzcVfnewAAAMo"]
[Sun May 03 04:05:28.715705 2026] [:error] [pid 40732:tid 40761] [client 172.173.121.85:47183] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xwpg.php"] [unique_id "afZZCP1lQrIvlEdzcVfnfQAAANE"]
[Sun May 03 04:05:29.166422 2026] [:error] [pid 40637:tid 40649] [client 172.173.121.85:47211] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ass.php"] [unique_id "afZZCZB-U30YNJ6CyVgjvQAAAAI"]
[Sun May 03 04:05:29.558110 2026] [:error] [pid 40732:tid 40758] [client 172.173.121.85:54469] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ass.php"] [unique_id "afZZCf1lQrIvlEdzcVfngQAAAM4"]
[Sun May 03 04:05:30.102532 2026] [:error] [pid 40639:tid 40708] [client 172.173.121.85:45448] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ass.php"] [unique_id "afZZCq9rkyoICq7qxvFC1QAAAIc"]
[Sun May 03 04:05:30.613664 2026] [:error] [pid 40637:tid 40658] [client 172.173.121.85:47218] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ass.php"] [unique_id "afZZCpB-U30YNJ6CyVgjwQAAAAs"]
[Sun May 03 04:05:31.223093 2026] [:error] [pid 40639:tid 40723] [client 172.173.121.85:39398] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/about.php"] [unique_id "afZZC69rkyoICq7qxvFC2AAAAJY"]
[Sun May 03 04:05:31.651091 2026] [:error] [pid 40637:tid 40652] [client 172.173.121.85:47230] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/about.php"] [unique_id "afZZC5B-U30YNJ6CyVgjxQAAAAU"]
[Sun May 03 04:05:32.124326 2026] [:error] [pid 40732:tid 40751] [client 172.173.121.85:45453] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/about.php"] [unique_id "afZZDP1lQrIvlEdzcVfnhAAAAMc"]
[Sun May 03 04:05:32.849803 2026] [:error] [pid 40732:tid 40764] [client 172.173.121.85:47176] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/about.php"] [unique_id "afZZDP1lQrIvlEdzcVfnhwAAANQ"]
[Sun May 03 04:05:33.284726 2026] [proxy_fcgi:error] [pid 40732:tid 40755] [client 172.173.121.85:45458] AH01071: Got error 'Primary script unknown'
[Sun May 03 04:05:33.476159 2026] [proxy_fcgi:error] [pid 40732:tid 40753] [client 172.173.121.85:45458] AH01071: Got error 'Primary script unknown'
[Sun May 03 04:05:33.667959 2026] [proxy_fcgi:error] [pid 40732:tid 40752] [client 172.173.121.85:45458] AH01071: Got error 'Primary script unknown'
[Sun May 03 04:05:33.857689 2026] [proxy_fcgi:error] [pid 40732:tid 40768] [client 172.173.121.85:45458] AH01071: Got error 'Primary script unknown'
[Sun May 03 04:05:34.058443 2026] [proxy_fcgi:error] [pid 40732:tid 40760] [client 172.173.121.85:45458] AH01071: Got error 'Primary script unknown'
[Sun May 03 04:05:34.249130 2026] [proxy_fcgi:error] [pid 40732:tid 40763] [client 172.173.121.85:45458] AH01071: Got error 'Primary script unknown'
[Sun May 03 04:05:34.439455 2026] [proxy_fcgi:error] [pid 40732:tid 40748] [client 172.173.121.85:45458] AH01071: Got error 'Primary script unknown'
[Sun May 03 04:05:34.629730 2026] [proxy_fcgi:error] [pid 40732:tid 40764] [client 172.173.121.85:45458] AH01071: Got error 'Primary script unknown'
[Sun May 03 04:05:34.819426 2026] [proxy_fcgi:error] [pid 40732:tid 40759] [client 172.173.121.85:45458] AH01071: Got error 'Primary script unknown'
[Sun May 03 04:05:35.009678 2026] [proxy_fcgi:error] [pid 40732:tid 40754] [client 172.173.121.85:45458] AH01071: Got error 'Primary script unknown'
[Sun May 03 04:05:35.200230 2026] [proxy_fcgi:error] [pid 40732:tid 40757] [client 172.173.121.85:45458] AH01071: Got error 'Primary script unknown'
[Sun May 03 04:05:35.386596 2026] [:error] [pid 40732:tid 40747] [client 172.173.121.85:45458] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a2.php"] [unique_id "afZZD_1lQrIvlEdzcVfnnwAAAMM"]
[Sun May 03 04:05:35.884953 2026] [:error] [pid 40639:tid 40719] [client 172.173.121.85:45492] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a2.php"] [unique_id "afZZD69rkyoICq7qxvFC4gAAAJI"]
[Sun May 03 04:05:36.373806 2026] [:error] [pid 40639:tid 40707] [client 172.173.121.85:39400] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a2.php"] [unique_id "afZZEK9rkyoICq7qxvFC5QAAAIY"]
[Sun May 03 04:05:36.986549 2026] [:error] [pid 40637:tid 40659] [client 172.173.121.85:56306] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a2.php"] [unique_id "afZZEJB-U30YNJ6CyVgjyQAAAAw"]
[Sun May 03 04:05:37.541569 2026] [:error] [pid 40638:tid 40690] [client 172.173.121.85:45486] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/edit.php"] [unique_id "afZZEfh3VcFjJ7H1mBaNxgAAAFA"]
[Sun May 03 04:05:38.153930 2026] [:error] [pid 40732:tid 40768] [client 172.173.121.85:39386] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/edit.php"] [unique_id "afZZEv1lQrIvlEdzcVfnoAAAANg"]
[Sun May 03 04:05:38.724496 2026] [:error] [pid 40638:tid 40694] [client 172.173.121.85:39390] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/edit.php"] [unique_id "afZZEvh3VcFjJ7H1mBaNygAAAFQ"]
[Sun May 03 04:05:39.639954 2026] [:error] [pid 40637:tid 40653] [client 172.173.121.85:45443] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/edit.php"] [unique_id "afZZE5B-U30YNJ6CyVgjzQAAAAY"]
[Sun May 03 04:05:40.277517 2026] [:error] [pid 40639:tid 40718] [client 172.173.121.85:54467] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ioxi-o.php"] [unique_id "afZZFK9rkyoICq7qxvFC8wAAAJE"]
[Sun May 03 04:05:40.775041 2026] [:error] [pid 40639:tid 40705] [client 172.173.121.85:39342] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ioxi-o.php"] [unique_id "afZZFK9rkyoICq7qxvFC9QAAAIQ"]
[Sun May 03 04:05:41.438253 2026] [:error] [pid 40638:tid 40691] [client 172.173.121.85:39325] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ioxi-o.php"] [unique_id "afZZFfh3VcFjJ7H1mBaN1AAAAFE"]
[Sun May 03 04:05:41.922777 2026] [:error] [pid 40638:tid 40682] [client 172.173.121.85:45456] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ioxi-o.php"] [unique_id "afZZFfh3VcFjJ7H1mBaN1QAAAEg"]
[Sun May 03 04:05:42.431460 2026] [:error] [pid 40639:tid 40718] [client 172.173.121.85:47221] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "afZZFq9rkyoICq7qxvFC_QAAAJE"]
[Sun May 03 04:05:43.003279 2026] [:error] [pid 40637:tid 40650] [client 172.173.121.85:54489] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "afZZF5B-U30YNJ6CyVgj0gAAAAM"]
[Sun May 03 04:05:43.985986 2026] [:error] [pid 40638:tid 40696] [client 172.173.121.85:39387] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "afZZF_h3VcFjJ7H1mBaN2gAAAFY"]
[Sun May 03 04:05:44.520820 2026] [:error] [pid 40637:tid 40651] [client 172.173.121.85:56273] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "afZZGJB-U30YNJ6CyVgj2QAAAAQ"]
[Sun May 03 04:05:45.472672 2026] [:error] [pid 40638:tid 40680] [client 172.173.121.85:45477] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/66.php"] [unique_id "afZZGfh3VcFjJ7H1mBaN3wAAAEY"]
[Sun May 03 04:05:46.081897 2026] [:error] [pid 40639:tid 40707] [client 172.173.121.85:39348] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/66.php"] [unique_id "afZZGq9rkyoICq7qxvFDAgAAAIY"]
[Sun May 03 04:05:47.110191 2026] [:error] [pid 40639:tid 40714] [client 172.173.121.85:47220] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/66.php"] [unique_id "afZZG69rkyoICq7qxvFDBAAAAI0"]
[Sun May 03 04:05:48.613179 2026] [:error] [pid 40732:tid 40763] [client 172.173.121.85:54525] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/66.php"] [unique_id "afZZHP1lQrIvlEdzcVfnrAAAANM"]
[Sun May 03 04:05:49.443710 2026] [:error] [pid 40639:tid 40713] [client 172.173.121.85:45461] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a5.php"] [unique_id "afZZHa9rkyoICq7qxvFDBwAAAIw"]
[Sun May 03 04:05:51.194976 2026] [:error] [pid 40639:tid 40704] [client 172.173.121.85:39388] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a5.php"] [unique_id "afZZH69rkyoICq7qxvFDDgAAAIM"]
[Sun May 03 04:05:52.916186 2026] [:error] [pid 40637:tid 40661] [client 172.173.121.85:39416] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a5.php"] [unique_id "afZZIJB-U30YNJ6CyVgj6AAAAA4"]
[Sun May 03 04:05:54.414272 2026] [:error] [pid 40732:tid 40746] [client 172.173.121.85:39379] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a5.php"] [unique_id "afZZIv1lQrIvlEdzcVfntAAAAMI"]
[Sun May 03 04:05:55.730048 2026] [:error] [pid 40639:tid 40706] [client 172.173.121.85:39419] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ol.php"] [unique_id "afZZI69rkyoICq7qxvFDEwAAAIU"]
[Sun May 03 04:05:56.442558 2026] [:error] [pid 40637:tid 40667] [client 172.173.121.85:39369] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ol.php"] [unique_id "afZZJJB-U30YNJ6CyVgj9QAAABQ"]
[Sun May 03 04:05:57.112655 2026] [:error] [pid 40732:tid 40759] [client 172.173.121.85:39376] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ol.php"] [unique_id "afZZJf1lQrIvlEdzcVfnvgAAAM8"]
[Sun May 03 04:05:57.655843 2026] [:error] [pid 40732:tid 40746] [client 172.173.121.85:56265] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ol.php"] [unique_id "afZZJf1lQrIvlEdzcVfnwQAAAMI"]
[Sun May 03 04:05:58.156960 2026] [:error] [pid 40732:tid 40750] [client 172.173.121.85:45465] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f6.php"] [unique_id "afZZJv1lQrIvlEdzcVfnxQAAAMY"]
[Sun May 03 04:05:58.964221 2026] [:error] [pid 40639:tid 40701] [client 172.173.121.85:54488] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f6.php"] [unique_id "afZZJq9rkyoICq7qxvFDFQAAAIA"]
[Sun May 03 04:05:59.516205 2026] [:error] [pid 40638:tid 40674] [client 172.173.121.85:47177] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f6.php"] [unique_id "afZZJ_h3VcFjJ7H1mBaN_wAAAEA"]
[Sun May 03 04:06:00.091817 2026] [:error] [pid 40732:tid 40745] [client 172.173.121.85:39312] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f6.php"] [unique_id "afZZKP1lQrIvlEdzcVfnzgAAAME"]
[Sun May 03 04:06:00.796156 2026] [:error] [pid 40637:tid 40648] [client 172.173.121.85:45489] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/inputs.php"] [unique_id "afZZKJB-U30YNJ6CyVgj-AAAAAE"]
[Sun May 03 04:06:01.777189 2026] [:error] [pid 40732:tid 40764] [client 172.173.121.85:39408] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/inputs.php"] [unique_id "afZZKf1lQrIvlEdzcVfn2wAAANQ"]
[Sun May 03 04:06:02.307649 2026] [:error] [pid 40732:tid 40756] [client 172.173.121.85:47195] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/inputs.php"] [unique_id "afZZKv1lQrIvlEdzcVfn4gAAAMw"]
[Sun May 03 04:06:03.293269 2026] [:error] [pid 40732:tid 40744] [client 172.173.121.85:45457] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/inputs.php"] [unique_id "afZZK_1lQrIvlEdzcVfn7QAAAMA"]
[Sun May 03 04:06:03.995536 2026] [:error] [pid 40637:tid 40670] [client 172.173.121.85:39401] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/style.php"] [unique_id "afZZK5B-U30YNJ6CyVgj-gAAABc"]
[Sun May 03 04:06:04.499586 2026] [:error] [pid 40639:tid 40721] [client 172.173.121.85:45496] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/style.php"] [unique_id "afZZLK9rkyoICq7qxvFDHwAAAJQ"]
[Sun May 03 04:06:05.615655 2026] [:error] [pid 40732:tid 40744] [client 172.173.121.85:39381] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/style.php"] [unique_id "afZZLf1lQrIvlEdzcVfoBwAAAMA"]
[Sun May 03 04:06:06.499808 2026] [:error] [pid 40637:tid 40669] [client 172.173.121.85:39364] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/style.php"] [unique_id "afZZLpB-U30YNJ6CyVgj_wAAABY"]
[Sun May 03 04:06:07.011097 2026] [:error] [pid 40639:tid 40715] [client 172.173.121.85:47212] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/av.php"] [unique_id "afZZL69rkyoICq7qxvFDJQAAAI4"]
[Sun May 03 04:06:07.760654 2026] [:error] [pid 40639:tid 40709] [client 172.173.121.85:47179] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/av.php"] [unique_id "afZZL69rkyoICq7qxvFDJwAAAIg"]
[Sun May 03 04:06:08.385526 2026] [:error] [pid 40639:tid 40725] [client 172.173.121.85:39407] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/av.php"] [unique_id "afZZMK9rkyoICq7qxvFDKQAAAJg"]
[Sun May 03 04:06:09.791472 2026] [:error] [pid 40732:tid 40744] [client 172.173.121.85:39380] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/av.php"] [unique_id "afZZMf1lQrIvlEdzcVfoEwAAAMA"]
[Sun May 03 04:06:10.984923 2026] [:error] [pid 40732:tid 40757] [client 172.173.121.85:39402] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "afZZMv1lQrIvlEdzcVfoFQAAAM0"]
[Sun May 03 04:06:11.697917 2026] [:error] [pid 40639:tid 40716] [client 172.173.121.85:45471] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "afZZM69rkyoICq7qxvFDMQAAAI8"]
[Sun May 03 04:06:13.040806 2026] [:error] [pid 40732:tid 40744] [client 172.173.121.85:54464] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "afZZNf1lQrIvlEdzcVfoGQAAAMA"]
[Sun May 03 04:06:13.524510 2026] [:error] [pid 40639:tid 40701] [client 172.173.121.85:39305] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "afZZNa9rkyoICq7qxvFDOgAAAIA"]
[Sun May 03 04:06:13.994998 2026] [:error] [pid 40638:tid 40674] [client 172.173.121.85:12937] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-act.php"] [unique_id "afZZNfh3VcFjJ7H1mBaOFgAAAEA"]
[Sun May 03 04:06:14.642924 2026] [:error] [pid 40637:tid 40660] [client 172.173.121.85:45487] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-act.php"] [unique_id "afZZNpB-U30YNJ6CyVgkBQAAAA0"]
[Sun May 03 04:06:15.091151 2026] [:error] [pid 40638:tid 40688] [client 172.173.121.85:39349] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-act.php"] [unique_id "afZZN_h3VcFjJ7H1mBaOHQAAAE4"]
[Sun May 03 04:06:15.791141 2026] [:error] [pid 40637:tid 40651] [client 172.173.121.85:39413] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-act.php"] [unique_id "afZZN5B-U30YNJ6CyVgkBwAAAAQ"]
[Sun May 03 04:06:16.934167 2026] [:error] [pid 40732:tid 40764] [client 172.173.121.85:39324] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aaa.php"] [unique_id "afZZOP1lQrIvlEdzcVfoHwAAANQ"]
[Sun May 03 04:06:17.732868 2026] [:error] [pid 40638:tid 40686] [client 172.173.121.85:56274] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aaa.php"] [unique_id "afZZOfh3VcFjJ7H1mBaOKgAAAEw"]
[Sun May 03 04:06:18.546822 2026] [:error] [pid 40732:tid 40753] [client 172.173.121.85:45481] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aaa.php"] [unique_id "afZZOv1lQrIvlEdzcVfoJAAAAMk"]
[Sun May 03 04:06:19.265353 2026] [:error] [pid 40639:tid 40703] [client 172.173.121.85:39394] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aaa.php"] [unique_id "afZZO69rkyoICq7qxvFDPgAAAII"]
[Sun May 03 04:06:19.781515 2026] [:error] [pid 40638:tid 40689] [client 172.173.121.85:39410] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/classwithtostring.php"] [unique_id "afZZO_h3VcFjJ7H1mBaOMAAAAE8"]
[Sun May 03 04:06:20.197314 2026] [:error] [pid 40732:tid 40766] [client 172.173.121.85:39343] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/classwithtostring.php"] [unique_id "afZZPP1lQrIvlEdzcVfoKQAAANY"]
[Sun May 03 04:06:20.787978 2026] [:error] [pid 40732:tid 40750] [client 172.173.121.85:56315] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/classwithtostring.php"] [unique_id "afZZPP1lQrIvlEdzcVfoLgAAAMY"]
[Sun May 03 04:06:21.398121 2026] [:error] [pid 40732:tid 40752] [client 172.173.121.85:39347] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/classwithtostring.php"] [unique_id "afZZPf1lQrIvlEdzcVfoMAAAAMg"]
[Sun May 03 04:06:21.951370 2026] [:error] [pid 40638:tid 40695] [client 172.173.121.85:45498] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "afZZPfh3VcFjJ7H1mBaONQAAAFU"]
[Sun May 03 04:06:22.401368 2026] [:error] [pid 40638:tid 40678] [client 172.173.121.85:39358] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "afZZPvh3VcFjJ7H1mBaONgAAAEQ"]
[Sun May 03 04:06:22.910441 2026] [:error] [pid 40732:tid 40758] [client 172.173.121.85:12936] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "afZZPv1lQrIvlEdzcVfoNgAAAM4"]
[Sun May 03 04:06:23.625920 2026] [:error] [pid 40638:tid 40680] [client 172.173.121.85:47222] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "afZZP_h3VcFjJ7H1mBaOOQAAAEY"]
[Sun May 03 04:06:24.066487 2026] [:error] [pid 40637:tid 40662] [client 172.173.121.85:47187] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sbhu.php"] [unique_id "afZZQJB-U30YNJ6CyVgkDQAAAA8"]
[Sun May 03 04:06:24.955915 2026] [:error] [pid 40732:tid 40764] [client 172.173.121.85:39366] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sbhu.php"] [unique_id "afZZQP1lQrIvlEdzcVfoPAAAANQ"]
[Sun May 03 04:06:25.641472 2026] [:error] [pid 40732:tid 40747] [client 172.173.121.85:39389] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sbhu.php"] [unique_id "afZZQf1lQrIvlEdzcVfoQAAAAMM"]
[Sun May 03 04:06:26.555673 2026] [:error] [pid 40637:tid 40661] [client 172.173.121.85:39373] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sbhu.php"] [unique_id "afZZQpB-U30YNJ6CyVgkDwAAAA4"]
[Sun May 03 04:06:27.155806 2026] [:error] [pid 40732:tid 40746] [client 172.173.121.85:47172] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-blog.php"] [unique_id "afZZQ_1lQrIvlEdzcVfoQwAAAMI"]
[Sun May 03 04:06:27.633044 2026] [:error] [pid 40638:tid 40695] [client 172.173.121.85:47228] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-blog.php"] [unique_id "afZZQ_h3VcFjJ7H1mBaOQgAAAFU"]
[Sun May 03 04:06:28.481948 2026] [:error] [pid 40637:tid 40671] [client 172.173.121.85:39317] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-blog.php"] [unique_id "afZZRJB-U30YNJ6CyVgkFAAAABg"]
[Sun May 03 04:06:28.947605 2026] [:error] [pid 40637:tid 40668] [client 172.173.121.85:56268] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-blog.php"] [unique_id "afZZRJB-U30YNJ6CyVgkFgAAABU"]
[Sun May 03 04:06:29.550469 2026] [:error] [pid 40732:tid 40752] [client 172.173.121.85:45501] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "afZZRf1lQrIvlEdzcVfoRgAAAMg"]
[Sun May 03 04:06:30.304988 2026] [:error] [pid 40732:tid 40756] [client 172.173.121.85:39361] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "afZZRv1lQrIvlEdzcVfoSAAAAMw"]
[Sun May 03 04:06:31.008069 2026] [:error] [pid 40638:tid 40692] [client 172.173.121.85:47209] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "afZZR_h3VcFjJ7H1mBaOSQAAAFI"]
[Sun May 03 04:06:31.619766 2026] [:error] [pid 40638:tid 40687] [client 172.173.121.85:39302] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "afZZR_h3VcFjJ7H1mBaOSwAAAE0"]
[Sun May 03 04:06:32.279535 2026] [:error] [pid 40639:tid 40709] [client 172.173.121.85:56307] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "afZZSK9rkyoICq7qxvFDUwAAAIg"]
[Sun May 03 04:06:33.007561 2026] [:error] [pid 40637:tid 40669] [client 172.173.121.85:39393] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "afZZSZB-U30YNJ6CyVgkGwAAABY"]
[Sun May 03 04:06:33.413956 2026] [:error] [pid 40638:tid 40677] [client 172.173.121.85:12741] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "afZZSfh3VcFjJ7H1mBaOTQAAAEM"]
[Sun May 03 04:06:34.051197 2026] [:error] [pid 40637:tid 40665] [client 172.173.121.85:39301] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "afZZSpB-U30YNJ6CyVgkIQAAABI"]
[Sun May 03 04:06:34.597213 2026] [:error] [pid 40639:tid 40705] [client 172.173.121.85:39384] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ms-edit.php"] [unique_id "afZZSq9rkyoICq7qxvFDWgAAAIQ"]
[Sun May 03 04:06:35.223108 2026] [proxy_fcgi:error] [pid 40638:tid 40685] [client 172.173.121.85:39399] AH01071: Got error 'Primary script unknown'
[Sun May 03 04:06:35.413357 2026] [proxy_fcgi:error] [pid 40638:tid 40691] [client 172.173.121.85:39399] AH01071: Got error 'Primary script unknown'
[Sun May 03 04:06:35.602746 2026] [proxy_fcgi:error] [pid 40638:tid 40679] [client 172.173.121.85:39399] AH01071: Got error 'Primary script unknown'
[Sun May 03 04:06:35.808171 2026] [proxy_fcgi:error] [pid 40638:tid 40698] [client 172.173.121.85:39399] AH01071: Got error 'Primary script unknown'
[Sun May 03 04:06:36.205790 2026] [proxy_fcgi:error] [pid 40638:tid 40690] [client 172.173.121.85:39399] AH01071: Got error 'Primary script unknown'
[Sun May 03 04:06:36.598469 2026] [proxy_fcgi:error] [pid 40638:tid 40675] [client 172.173.121.85:39399] AH01071: Got error 'Primary script unknown'
[Sun May 03 04:06:36.793733 2026] [proxy_fcgi:error] [pid 40638:tid 40683] [client 172.173.121.85:39399] AH01071: Got error 'Primary script unknown'
[Sun May 03 04:06:36.989329 2026] [proxy_fcgi:error] [pid 40638:tid 40688] [client 172.173.121.85:39399] AH01071: Got error 'Primary script unknown'
[Sun May 03 04:06:37.368177 2026] [:error] [pid 40638:tid 40677] [client 172.173.121.85:39399] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/BDKR28WP.php"] [unique_id "afZZTfh3VcFjJ7H1mBaOYQAAAEM"]
[Sun May 03 04:06:37.994516 2026] [:error] [pid 40637:tid 40669] [client 172.173.121.85:45463] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/BDKR28WP.php"] [unique_id "afZZTZB-U30YNJ6CyVgkKQAAABY"]
[Sun May 03 04:06:38.577747 2026] [:error] [pid 40637:tid 40664] [client 172.173.121.85:39315] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/BDKR28WP.php"] [unique_id "afZZTpB-U30YNJ6CyVgkLQAAABE"]
[Sun May 03 04:06:39.065897 2026] [:error] [pid 40638:tid 40678] [client 172.173.121.85:39297] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/BDKR28WP.php"] [unique_id "afZZT_h3VcFjJ7H1mBaOZQAAAEQ"]
[Sun May 03 04:06:39.607607 2026] [:error] [pid 40638:tid 40681] [client 172.173.121.85:12943] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/l10n/"] [unique_id "afZZT_h3VcFjJ7H1mBaOaAAAAEc"]
[Sun May 03 04:06:40.166875 2026] [:error] [pid 40637:tid 40651] [client 172.173.121.85:39355] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/l10n/"] [unique_id "afZZUJB-U30YNJ6CyVgkNAAAAAQ"]
[Sun May 03 04:06:40.664034 2026] [:error] [pid 40637:tid 40657] [client 172.173.121.85:39303] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/l10n/"] [unique_id "afZZUJB-U30YNJ6CyVgkNQAAAAo"]
[Sun May 03 04:06:41.113145 2026] [:error] [pid 40637:tid 40669] [client 172.173.121.85:39370] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/l10n/"] [unique_id "afZZUZB-U30YNJ6CyVgkOQAAABY"]
[Sun May 03 04:06:41.902416 2026] [:error] [pid 40637:tid 40662] [client 172.173.121.85:45494] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/uploads/"] [unique_id "afZZUZB-U30YNJ6CyVgkPgAAAA8"]
[Sun May 03 04:06:42.417472 2026] [:error] [pid 40637:tid 40653] [client 172.173.121.85:39417] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/uploads/"] [unique_id "afZZUpB-U30YNJ6CyVgkQgAAAAY"]
[Sun May 03 04:06:42.948795 2026] [:error] [pid 40638:tid 40682] [client 172.173.121.85:47168] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/uploads/"] [unique_id "afZZUvh3VcFjJ7H1mBaOcwAAAEg"]
[Sun May 03 04:06:43.496792 2026] [:error] [pid 40732:tid 40751] [client 172.173.121.85:39309] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/uploads/"] [unique_id "afZZU_1lQrIvlEdzcVfoZwAAAMc"]
[Sun May 03 04:06:43.984830 2026] [:error] [pid 40637:tid 40652] [client 172.173.121.85:45500] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp.php"] [unique_id "afZZU5B-U30YNJ6CyVgkQwAAAAU"]
[Sun May 03 04:06:44.465290 2026] [:error] [pid 40637:tid 40657] [client 172.173.121.85:56258] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp.php"] [unique_id "afZZVJB-U30YNJ6CyVgkRQAAAAo"]
[Sun May 03 04:06:45.330344 2026] [:error] [pid 40732:tid 40759] [client 172.173.121.85:39397] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp.php"] [unique_id "afZZVf1lQrIvlEdzcVfoawAAAM8"]
[Sun May 03 04:06:45.953978 2026] [:error] [pid 40637:tid 40654] [client 172.173.121.85:47189] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp.php"] [unique_id "afZZVZB-U30YNJ6CyVgkRwAAAAc"]
[Sun May 03 04:06:46.479786 2026] [:error] [pid 40637:tid 40662] [client 172.173.121.85:39420] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "afZZVpB-U30YNJ6CyVgkSgAAAA8"]
[Sun May 03 04:06:47.087659 2026] [:error] [pid 40732:tid 40768] [client 172.173.121.85:39342] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "afZZV_1lQrIvlEdzcVfobwAAANg"]
[Sun May 03 04:06:47.988673 2026] [:error] [pid 40637:tid 40651] [client 172.173.121.85:39414] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "afZZV5B-U30YNJ6CyVgkUgAAAAQ"]
[Sun May 03 04:06:48.602998 2026] [:error] [pid 40639:tid 40715] [client 172.173.121.85:56277] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "afZZWK9rkyoICq7qxvFDbQAAAI4"]
[Sun May 03 04:06:49.209193 2026] [:error] [pid 40639:tid 40719] [client 172.173.121.85:39359] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fe5.php"] [unique_id "afZZWa9rkyoICq7qxvFDcQAAAJI"]
[Sun May 03 04:06:49.889487 2026] [:error] [pid 40639:tid 40702] [client 172.173.121.85:39405] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fe5.php"] [unique_id "afZZWa9rkyoICq7qxvFDdQAAAIE"]
[Sun May 03 04:06:50.469473 2026] [:error] [pid 40638:tid 40693] [client 172.173.121.85:39326] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fe5.php"] [unique_id "afZZWvh3VcFjJ7H1mBaOfwAAAFM"]
[Sun May 03 04:06:51.317496 2026] [:error] [pid 40638:tid 40691] [client 172.173.121.85:39307] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fe5.php"] [unique_id "afZZW_h3VcFjJ7H1mBaOggAAAFE"]
[Sun May 03 04:06:51.757113 2026] [:error] [pid 40732:tid 40744] [client 172.173.121.85:39329] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "afZZW_1lQrIvlEdzcVfoeQAAAMA"]
[Sun May 03 04:06:52.445765 2026] [:error] [pid 40732:tid 40745] [client 172.173.121.85:39330] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "afZZXP1lQrIvlEdzcVfofQAAAME"]
[Sun May 03 04:06:53.437908 2026] [:error] [pid 40639:tid 40711] [client 172.173.121.85:12933] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "afZZXa9rkyoICq7qxvFDeQAAAIo"]
[Sun May 03 04:06:54.377890 2026] [:error] [pid 40639:tid 40710] [client 172.173.121.85:39367] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "afZZXq9rkyoICq7qxvFDewAAAIk"]
[Sun May 03 04:06:54.932474 2026] [:error] [pid 40732:tid 40753] [client 172.173.121.85:39310] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/av.php"] [unique_id "afZZXv1lQrIvlEdzcVfohwAAAMk"]
[Sun May 03 04:06:55.628163 2026] [:error] [pid 40639:tid 40704] [client 172.173.121.85:12935] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/av.php"] [unique_id "afZZX69rkyoICq7qxvFDgAAAAIM"]
[Sun May 03 04:06:56.238466 2026] [:error] [pid 40637:tid 40663] [client 172.173.121.85:39360] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/av.php"] [unique_id "afZZYJB-U30YNJ6CyVgkXQAAABA"]
[Sun May 03 04:06:56.830138 2026] [:error] [pid 40639:tid 40718] [client 172.173.121.85:39337] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/av.php"] [unique_id "afZZYK9rkyoICq7qxvFDiQAAAJE"]
[Sun May 03 04:06:57.343036 2026] [:error] [pid 40732:tid 40747] [client 172.173.121.85:12960] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/abcd.php"] [unique_id "afZZYf1lQrIvlEdzcVfoiwAAAMM"]
[Sun May 03 04:06:57.844270 2026] [:error] [pid 40732:tid 40757] [client 172.173.121.85:39319] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/abcd.php"] [unique_id "afZZYf1lQrIvlEdzcVfojQAAAM0"]
[Sun May 03 04:06:58.315751 2026] [:error] [pid 40732:tid 40759] [client 172.173.121.85:39298] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/abcd.php"] [unique_id "afZZYv1lQrIvlEdzcVfokQAAAM8"]
[Sun May 03 04:06:58.713674 2026] [:error] [pid 40637:tid 40655] [client 172.173.121.85:12755] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/abcd.php"] [unique_id "afZZYpB-U30YNJ6CyVgkXgAAAAg"]
[Sun May 03 04:06:59.135564 2026] [:error] [pid 40637:tid 40662] [client 172.173.121.85:45474] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fi.php"] [unique_id "afZZY5B-U30YNJ6CyVgkYwAAAA8"]
[Sun May 03 04:06:59.583096 2026] [:error] [pid 40637:tid 40651] [client 172.173.121.85:12757] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fi.php"] [unique_id "afZZY5B-U30YNJ6CyVgkZQAAAAQ"]
[Sun May 03 04:07:00.025655 2026] [:error] [pid 40637:tid 40653] [client 172.173.121.85:39338] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fi.php"] [unique_id "afZZZJB-U30YNJ6CyVgkZwAAAAY"]
[Sun May 03 04:07:00.470314 2026] [:error] [pid 40639:tid 40705] [client 172.173.121.85:12769] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fi.php"] [unique_id "afZZZK9rkyoICq7qxvFDkgAAAIQ"]
[Sun May 03 04:07:00.987786 2026] [:error] [pid 40637:tid 40663] [client 172.173.121.85:39354] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a1.php"] [unique_id "afZZZJB-U30YNJ6CyVgkbgAAABA"]
[Sun May 03 04:07:01.522522 2026] [:error] [pid 40639:tid 40706] [client 172.173.121.85:45472] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a1.php"] [unique_id "afZZZa9rkyoICq7qxvFDmAAAAIU"]
[Sun May 03 04:07:02.090766 2026] [:error] [pid 40639:tid 40723] [client 172.173.121.85:12955] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a1.php"] [unique_id "afZZZq9rkyoICq7qxvFDmQAAAJY"]
[Sun May 03 04:07:02.496717 2026] [:error] [pid 40639:tid 40721] [client 172.173.121.85:39339] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a1.php"] [unique_id "afZZZq9rkyoICq7qxvFDngAAAJQ"]
[Sun May 03 04:07:02.965772 2026] [:error] [pid 40637:tid 40656] [client 172.173.121.85:39340] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/update/f35.php"] [unique_id "afZZZpB-U30YNJ6CyVgkdwAAAAk"]
[Sun May 03 04:07:03.381301 2026] [:error] [pid 40732:tid 40762] [client 172.173.121.85:12981] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/update/f35.php"] [unique_id "afZZZ_1lQrIvlEdzcVfomgAAANI"]
[Sun May 03 04:07:03.837586 2026] [:error] [pid 40638:tid 40675] [client 172.173.121.85:12954] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/update/f35.php"] [unique_id "afZZZ_h3VcFjJ7H1mBaOkgAAAEE"]
[Sun May 03 04:07:04.241281 2026] [:error] [pid 40638:tid 40697] [client 172.173.121.85:39383] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/update/f35.php"] [unique_id "afZZaPh3VcFjJ7H1mBaOlgAAAFc"]
[Sun May 03 04:07:04.757810 2026] [:error] [pid 40732:tid 40767] [client 172.173.121.85:12944] [client 172.173.121.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "afZZaP1lQrIvlEdzcVfonwAAANc"]
[Sun May 03 04:07:05.176394 2026] [:error] [pid 40732:tid 40753] [client 172.173.121.85:39392] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f35.php"] [unique_id "afZZaf1lQrIvlEdzcVfoowAAAMk"]
[Sun May 03 04:07:05.680977 2026] [:error] [pid 40732:tid 40747] [client 172.173.121.85:12756] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f35.php"] [unique_id "afZZaf1lQrIvlEdzcVfopQAAAMM"]
[Sun May 03 04:07:06.164583 2026] [:error] [pid 40638:tid 40691] [client 172.173.121.85:45491] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f35.php"] [unique_id "afZZavh3VcFjJ7H1mBaOnQAAAFE"]
[Sun May 03 04:07:06.548642 2026] [:error] [pid 40638:tid 40685] [client 172.173.121.85:39412] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f35.php"] [unique_id "afZZavh3VcFjJ7H1mBaOnwAAAEs"]
[Sun May 03 04:07:07.147464 2026] [:error] [pid 40639:tid 40716] [client 172.173.121.85:39368] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "afZZa69rkyoICq7qxvFDqQAAAI8"]
[Sun May 03 04:07:07.628042 2026] [:error] [pid 40637:tid 40664] [client 172.173.121.85:39335] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "afZZa5B-U30YNJ6CyVgkfgAAABE"]
[Sun May 03 04:07:08.054197 2026] [:error] [pid 40637:tid 40653] [client 172.173.121.85:39328] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "afZZbJB-U30YNJ6CyVgkggAAAAY"]
[Sun May 03 04:07:08.576217 2026] [:error] [pid 40637:tid 40650] [client 172.173.121.85:39382] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "afZZbJB-U30YNJ6CyVgkhgAAAAM"]
[Sun May 03 04:07:09.100865 2026] [:error] [pid 40732:tid 40761] [client 172.173.121.85:12963] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "afZZbf1lQrIvlEdzcVfoswAAANE"]
[Sun May 03 04:07:09.669919 2026] [:error] [pid 40639:tid 40704] [client 172.173.121.85:45502] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "afZZba9rkyoICq7qxvFDrwAAAIM"]
[Sun May 03 04:07:10.105730 2026] [:error] [pid 40637:tid 40659] [client 172.173.121.85:54479] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "afZZbpB-U30YNJ6CyVgkiwAAAAw"]
[Sun May 03 04:07:10.778843 2026] [:error] [pid 40639:tid 40708] [client 172.173.121.85:12988] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "afZZbq9rkyoICq7qxvFDtgAAAIc"]
[Sun May 03 04:07:11.356987 2026] [:error] [pid 40637:tid 40647] [client 172.173.121.85:39321] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/k.php"] [unique_id "afZZb5B-U30YNJ6CyVgklAAAAAA"]
[Sun May 03 04:07:11.805045 2026] [:error] [pid 40639:tid 40722] [client 172.173.121.85:39409] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/k.php"] [unique_id "afZZb69rkyoICq7qxvFDuQAAAJU"]
[Sun May 03 04:07:12.383794 2026] [:error] [pid 40732:tid 40766] [client 172.173.121.85:12971] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/k.php"] [unique_id "afZZcP1lQrIvlEdzcVfouwAAANY"]
[Sun May 03 04:07:13.040559 2026] [:error] [pid 40732:tid 40763] [client 172.173.121.85:12978] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/k.php"] [unique_id "afZZcf1lQrIvlEdzcVfowAAAANM"]
[Sun May 03 04:07:13.756474 2026] [:error] [pid 40732:tid 40747] [client 172.173.121.85:12938] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dev.php"] [unique_id "afZZcf1lQrIvlEdzcVfoxQAAAMM"]
[Sun May 03 04:07:14.282553 2026] [:error] [pid 40732:tid 40759] [client 172.173.121.85:56297] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dev.php"] [unique_id "afZZcv1lQrIvlEdzcVfoxwAAAM8"]
[Sun May 03 04:07:14.747878 2026] [:error] [pid 40639:tid 40707] [client 172.173.121.85:39346] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dev.php"] [unique_id "afZZcq9rkyoICq7qxvFDuwAAAIY"]
[Sun May 03 04:07:15.283734 2026] [:error] [pid 40732:tid 40754] [client 172.173.121.85:39415] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dev.php"] [unique_id "afZZc_1lQrIvlEdzcVfo0QAAAMo"]
[Sun May 03 04:07:15.790388 2026] [:error] [pid 40639:tid 40702] [client 172.173.121.85:12976] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bal.php"] [unique_id "afZZc69rkyoICq7qxvFDvgAAAIE"]
[Sun May 03 04:07:16.344079 2026] [:error] [pid 40637:tid 40656] [client 172.173.121.85:39316] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bal.php"] [unique_id "afZZdJB-U30YNJ6CyVgknwAAAAk"]
[Sun May 03 04:07:16.989931 2026] [:error] [pid 40637:tid 40659] [client 172.173.121.85:45440] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bal.php"] [unique_id "afZZdJB-U30YNJ6CyVgkpQAAAAw"]
[Sun May 03 04:07:17.508816 2026] [:error] [pid 40639:tid 40709] [client 172.173.121.85:39385] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bal.php"] [unique_id "afZZda9rkyoICq7qxvFDwAAAAIg"]
[Sun May 03 04:07:18.004489 2026] [:error] [pid 40638:tid 40694] [client 172.173.121.85:12934] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/in.php"] [unique_id "afZZdvh3VcFjJ7H1mBaOqwAAAFQ"]
[Sun May 03 04:07:18.404277 2026] [:error] [pid 40732:tid 40767] [client 172.173.121.85:39350] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/in.php"] [unique_id "afZZdv1lQrIvlEdzcVfo3AAAANc"]
[Sun May 03 04:07:18.841282 2026] [:error] [pid 40732:tid 40746] [client 172.173.121.85:12957] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/in.php"] [unique_id "afZZdv1lQrIvlEdzcVfo4AAAAMI"]
[Sun May 03 04:07:19.360465 2026] [:error] [pid 40732:tid 40757] [client 172.173.121.85:39411] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/in.php"] [unique_id "afZZd_1lQrIvlEdzcVfo5QAAAM0"]
[Sun May 03 04:07:19.806899 2026] [:error] [pid 40637:tid 40667] [client 172.173.121.85:39320] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gssdd.php"] [unique_id "afZZd5B-U30YNJ6CyVgkqAAAABQ"]
[Sun May 03 04:07:20.364198 2026] [:error] [pid 40637:tid 40657] [client 172.173.121.85:12975] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gssdd.php"] [unique_id "afZZeJB-U30YNJ6CyVgkrAAAAAo"]
[Sun May 03 04:07:20.898101 2026] [:error] [pid 40732:tid 40749] [client 172.173.121.85:45447] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gssdd.php"] [unique_id "afZZeP1lQrIvlEdzcVfo7gAAAMU"]
[Sun May 03 04:07:21.355619 2026] [:error] [pid 40637:tid 40665] [client 172.173.121.85:39363] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gssdd.php"] [unique_id "afZZeZB-U30YNJ6CyVgkrQAAABI"]
[Sun May 03 04:07:21.824626 2026] [:error] [pid 40639:tid 40704] [client 172.173.121.85:12953] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "afZZea9rkyoICq7qxvFDxgAAAIM"]
[Sun May 03 04:07:22.372967 2026] [:error] [pid 40637:tid 40654] [client 172.173.121.85:12951] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "afZZepB-U30YNJ6CyVgksAAAAAc"]
[Sun May 03 04:07:22.887709 2026] [:error] [pid 40732:tid 40746] [client 172.173.121.85:12630] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "afZZev1lQrIvlEdzcVfo9gAAAMI"]
[Sun May 03 04:07:23.684161 2026] [:error] [pid 40732:tid 40750] [client 172.173.121.85:12989] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "afZZe_1lQrIvlEdzcVfo_QAAAMY"]
[Sun May 03 04:07:24.162270 2026] [:error] [pid 40638:tid 40688] [client 172.173.121.85:12610] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bs1.php"] [unique_id "afZZfPh3VcFjJ7H1mBaOswAAAE4"]
[Sun May 03 04:07:24.715542 2026] [:error] [pid 40639:tid 40720] [client 172.173.121.85:12947] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bs1.php"] [unique_id "afZZfK9rkyoICq7qxvFD2AAAAJM"]
[Sun May 03 04:07:25.238270 2026] [:error] [pid 40732:tid 40751] [client 172.173.121.85:12798] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bs1.php"] [unique_id "afZZff1lQrIvlEdzcVfpAAAAAMc"]
[Sun May 03 04:07:25.696644 2026] [:error] [pid 40732:tid 40767] [client 172.173.121.85:39352] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bs1.php"] [unique_id "afZZff1lQrIvlEdzcVfpAgAAANc"]
[Sun May 03 04:07:26.233142 2026] [:error] [pid 40732:tid 40764] [client 172.173.121.85:12740] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "afZZfv1lQrIvlEdzcVfpBQAAANQ"]
[Sun May 03 04:07:26.867372 2026] [:error] [pid 40732:tid 40747] [client 172.173.121.85:12952] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "afZZfv1lQrIvlEdzcVfpCQAAAMM"]
[Sun May 03 04:07:27.467847 2026] [:error] [pid 40637:tid 40655] [client 172.173.121.85:12766] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "afZZf5B-U30YNJ6CyVgkuwAAAAg"]
[Sun May 03 04:07:28.040110 2026] [:error] [pid 40637:tid 40654] [client 172.173.121.85:39377] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "afZZgJB-U30YNJ6CyVgkvAAAAAc"]
[Sun May 03 04:07:28.521499 2026] [:error] [pid 40639:tid 40714] [client 172.173.121.85:47231] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/axx.php"] [unique_id "afZZgK9rkyoICq7qxvFD2wAAAI0"]
[Sun May 03 04:07:28.942097 2026] [:error] [pid 40732:tid 40765] [client 172.173.121.85:39304] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/axx.php"] [unique_id "afZZgP1lQrIvlEdzcVfpFQAAANU"]
[Sun May 03 04:07:29.514674 2026] [:error] [pid 40639:tid 40721] [client 172.173.121.85:12969] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/axx.php"] [unique_id "afZZga9rkyoICq7qxvFD3gAAAJQ"]
[Sun May 03 04:07:29.970409 2026] [:error] [pid 40639:tid 40701] [client 172.173.121.85:12965] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/axx.php"] [unique_id "afZZga9rkyoICq7qxvFD3wAAAIA"]
[Sun May 03 04:07:30.386286 2026] [:error] [pid 40732:tid 40759] [client 172.173.121.85:39374] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/alfashell.php"] [unique_id "afZZgv1lQrIvlEdzcVfpGQAAAM8"]
[Sun May 03 04:07:30.936495 2026] [:error] [pid 40732:tid 40768] [client 172.173.121.85:12948] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/alfashell.php"] [unique_id "afZZgv1lQrIvlEdzcVfpHAAAANg"]
[Sun May 03 04:07:31.453487 2026] [:error] [pid 40637:tid 40656] [client 172.173.121.85:39331] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/alfashell.php"] [unique_id "afZZg5B-U30YNJ6CyVgkwQAAAAk"]
[Sun May 03 04:07:31.912125 2026] [:error] [pid 40639:tid 40723] [client 172.173.121.85:12950] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/alfashell.php"] [unique_id "afZZg69rkyoICq7qxvFD5wAAAJY"]
[Sun May 03 04:07:32.457642 2026] [:error] [pid 40639:tid 40717] [client 172.173.121.85:12985] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gettest.php"] [unique_id "afZZhK9rkyoICq7qxvFD6QAAAJA"]
[Sun May 03 04:07:32.958065 2026] [:error] [pid 40638:tid 40674] [client 172.173.121.85:39299] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gettest.php"] [unique_id "afZZhPh3VcFjJ7H1mBaOvwAAAEA"]
[Sun May 03 04:07:33.779879 2026] [:error] [pid 40732:tid 40751] [client 172.173.121.85:12961] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gettest.php"] [unique_id "afZZhf1lQrIvlEdzcVfpJAAAAMc"]
[Sun May 03 04:07:34.429033 2026] [:error] [pid 40732:tid 40767] [client 172.173.121.85:39418] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gettest.php"] [unique_id "afZZhv1lQrIvlEdzcVfpJgAAANc"]
[Sun May 03 04:07:34.884791 2026] [:error] [pid 40637:tid 40652] [client 172.173.121.85:47198] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/acp.php"] [unique_id "afZZhpB-U30YNJ6CyVgkyAAAAAU"]
[Sun May 03 04:07:35.304432 2026] [:error] [pid 40637:tid 40651] [client 172.173.121.85:39403] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/acp.php"] [unique_id "afZZh5B-U30YNJ6CyVgkyQAAAAQ"]
[Sun May 03 04:07:35.832166 2026] [:error] [pid 40637:tid 40661] [client 172.173.121.85:12966] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/acp.php"] [unique_id "afZZh5B-U30YNJ6CyVgkygAAAA4"]
[Sun May 03 04:07:36.335769 2026] [:error] [pid 40639:tid 40718] [client 172.173.121.85:12749] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/acp.php"] [unique_id "afZZiK9rkyoICq7qxvFD9gAAAJE"]
[Sun May 03 04:07:36.782395 2026] [:error] [pid 40638:tid 40684] [client 172.173.121.85:39421] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file48.php"] [unique_id "afZZiPh3VcFjJ7H1mBaOwgAAAEo"]
[Sun May 03 04:07:37.261979 2026] [proxy_fcgi:error] [pid 40732:tid 40764] [client 172.173.121.85:12941] AH01071: Got error 'Primary script unknown'
[Sun May 03 04:07:37.452888 2026] [proxy_fcgi:error] [pid 40732:tid 40747] [client 172.173.121.85:12941] AH01071: Got error 'Primary script unknown'
[Sun May 03 04:07:37.836995 2026] [proxy_fcgi:error] [pid 40732:tid 40751] [client 172.173.121.85:12941] AH01071: Got error 'Primary script unknown'
[Sun May 03 04:07:38.029715 2026] [proxy_fcgi:error] [pid 40732:tid 40756] [client 172.173.121.85:12941] AH01071: Got error 'Primary script unknown'
[Sun May 03 04:07:38.227051 2026] [proxy_fcgi:error] [pid 40732:tid 40766] [client 172.173.121.85:12941] AH01071: Got error 'Primary script unknown'
[Sun May 03 04:07:38.418939 2026] [proxy_fcgi:error] [pid 40732:tid 40767] [client 172.173.121.85:12941] AH01071: Got error 'Primary script unknown'
[Sun May 03 04:07:38.608714 2026] [proxy_fcgi:error] [pid 40732:tid 40748] [client 172.173.121.85:12941] AH01071: Got error 'Primary script unknown'
[Sun May 03 04:07:38.803470 2026] [proxy_fcgi:error] [pid 40732:tid 40757] [client 172.173.121.85:12941] AH01071: Got error 'Primary script unknown'
[Sun May 03 04:07:39.182602 2026] [proxy_fcgi:error] [pid 40732:tid 40760] [client 172.173.121.85:12941] AH01071: Got error 'Primary script unknown'
[Sun May 03 04:30:23.674020 2026] [proxy_fcgi:error] [pid 40637:tid 40650] [client 20.151.130.38:43979] AH01071: Got error 'Primary script unknown'
[Sun May 03 04:30:23.893051 2026] [proxy_fcgi:error] [pid 40637:tid 40666] [client 20.151.130.38:43979] AH01071: Got error 'Primary script unknown'
[Sun May 03 04:30:24.111639 2026] [proxy_fcgi:error] [pid 40637:tid 40656] [client 20.151.130.38:43979] AH01071: Got error 'Primary script unknown'
[Sun May 03 04:30:24.321889 2026] [proxy_fcgi:error] [pid 40637:tid 40653] [client 20.151.130.38:43979] AH01071: Got error 'Primary script unknown'
[Sun May 03 04:30:24.541643 2026] [proxy_fcgi:error] [pid 40637:tid 40660] [client 20.151.130.38:43979] AH01071: Got error 'Primary script unknown'
[Sun May 03 04:30:24.954401 2026] [:error] [pid 40637:tid 40657] [client 20.151.130.38:43979] [client 20.151.130.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "afZe4JB-U30YNJ6CyVgr3wAAAAo"]
[Sun May 03 04:30:25.503254 2026] [proxy_fcgi:error] [pid 40732:tid 40745] [client 20.151.130.38:43271] AH01071: Got error 'Primary script unknown'
[Sun May 03 04:30:25.717890 2026] [proxy_fcgi:error] [pid 40732:tid 40744] [client 20.151.130.38:43271] AH01071: Got error 'Primary script unknown'
[Sun May 03 04:30:25.969955 2026] [proxy_fcgi:error] [pid 40732:tid 40757] [client 20.151.130.38:43271] AH01071: Got error 'Primary script unknown'
[Sun May 03 04:30:26.186327 2026] [proxy_fcgi:error] [pid 40732:tid 40761] [client 20.151.130.38:43271] AH01071: Got error 'Primary script unknown'
[Sun May 03 04:30:26.398975 2026] [:error] [pid 40732:tid 40751] [client 20.151.130.38:43271] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bob.php"] [unique_id "afZe4v1lQrIvlEdzcVf1UgAAAMc"]
[Sun May 03 04:30:26.940464 2026] [:error] [pid 40639:tid 40716] [client 20.151.130.38:43299] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bob.php"] [unique_id "afZe4q9rkyoICq7qxvFNqQAAAI8"]
[Sun May 03 04:30:27.419123 2026] [:error] [pid 40639:tid 40720] [client 20.151.130.38:43976] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bob.php"] [unique_id "afZe469rkyoICq7qxvFNrAAAAJM"]
[Sun May 03 04:30:27.858507 2026] [:error] [pid 40637:tid 40666] [client 20.151.130.38:43323] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bob.php"] [unique_id "afZe45B-U30YNJ6CyVgr4QAAABM"]
[Sun May 03 04:30:28.317782 2026] [:error] [pid 40637:tid 40653] [client 20.151.130.38:43968] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/spawns.php"] [unique_id "afZe5JB-U30YNJ6CyVgr4wAAAAY"]
[Sun May 03 04:30:28.842744 2026] [:error] [pid 40639:tid 40701] [client 20.151.130.38:43292] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/spawns.php"] [unique_id "afZe5K9rkyoICq7qxvFNswAAAIA"]
[Sun May 03 04:30:29.322412 2026] [:error] [pid 40638:tid 40688] [client 20.151.130.38:43985] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/spawns.php"] [unique_id "afZe5fh3VcFjJ7H1mBaXFQAAAE4"]
[Sun May 03 04:30:29.891324 2026] [:error] [pid 40732:tid 40755] [client 20.151.130.38:43313] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/spawns.php"] [unique_id "afZe5f1lQrIvlEdzcVf1VQAAAMs"]
[Sun May 03 04:30:30.440533 2026] [:error] [pid 40732:tid 40756] [client 20.151.130.38:43314] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/t3s.php"] [unique_id "afZe5v1lQrIvlEdzcVf1WQAAAMw"]
[Sun May 03 04:30:31.011416 2026] [:error] [pid 40638:tid 40689] [client 20.151.130.38:44005] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/t3s.php"] [unique_id "afZe5_h3VcFjJ7H1mBaXGAAAAE8"]
[Sun May 03 04:30:31.833493 2026] [:error] [pid 40732:tid 40766] [client 20.151.130.38:44010] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/t3s.php"] [unique_id "afZe5_1lQrIvlEdzcVf1WgAAANY"]
[Sun May 03 04:30:32.459225 2026] [:error] [pid 40639:tid 40715] [client 20.151.130.38:43321] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/t3s.php"] [unique_id "afZe6K9rkyoICq7qxvFNxAAAAI4"]
[Sun May 03 04:30:33.191703 2026] [:error] [pid 40639:tid 40708] [client 20.151.130.38:43978] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/css/"] [unique_id "afZe6a9rkyoICq7qxvFNyAAAAIc"]
[Sun May 03 04:30:33.699987 2026] [:error] [pid 40638:tid 40698] [client 20.151.130.38:43315] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/css/"] [unique_id "afZe6fh3VcFjJ7H1mBaXHQAAAFg"]
[Sun May 03 04:30:34.278631 2026] [:error] [pid 40638:tid 40694] [client 20.151.130.38:43317] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/css/"] [unique_id "afZe6vh3VcFjJ7H1mBaXHwAAAFQ"]
[Sun May 03 04:30:34.757570 2026] [:error] [pid 40639:tid 40702] [client 20.151.130.38:43316] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/css/"] [unique_id "afZe6q9rkyoICq7qxvFN0QAAAIE"]
[Sun May 03 04:30:35.238821 2026] [:error] [pid 40638:tid 40674] [client 20.151.130.38:43282] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/x/"] [unique_id "afZe6_h3VcFjJ7H1mBaXIQAAAEA"]
[Sun May 03 04:30:35.788767 2026] [:error] [pid 40639:tid 40723] [client 20.151.130.38:43971] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/x/"] [unique_id "afZe669rkyoICq7qxvFN1gAAAJY"]
[Sun May 03 04:30:36.311527 2026] [:error] [pid 40639:tid 40714] [client 20.151.130.38:43999] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/x/"] [unique_id "afZe7K9rkyoICq7qxvFN2gAAAI0"]
[Sun May 03 04:30:36.931419 2026] [:error] [pid 40639:tid 40702] [client 20.151.130.38:43987] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/x/"] [unique_id "afZe7K9rkyoICq7qxvFN3QAAAIE"]
[Sun May 03 04:30:37.454406 2026] [:error] [pid 40732:tid 40755] [client 20.151.130.38:43172] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/css/colors/modern/"] [unique_id "afZe7f1lQrIvlEdzcVf1ZAAAAMs"]
[Sun May 03 04:30:37.942924 2026] [:error] [pid 40638:tid 40684] [client 20.151.130.38:43977] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/css/colors/modern/"] [unique_id "afZe7fh3VcFjJ7H1mBaXIwAAAEo"]
[Sun May 03 04:30:38.506057 2026] [:error] [pid 40637:tid 40666] [client 20.151.130.38:43281] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/css/colors/modern/"] [unique_id "afZe7pB-U30YNJ6CyVgr5gAAABM"]
[Sun May 03 04:30:39.211718 2026] [:error] [pid 40639:tid 40722] [client 20.151.130.38:43294] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/css/colors/modern/"] [unique_id "afZe769rkyoICq7qxvFN5AAAAJU"]
[Sun May 03 04:30:39.900124 2026] [:error] [pid 40639:tid 40713] [client 20.151.130.38:43300] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/configuration.php"] [unique_id "afZe769rkyoICq7qxvFN5wAAAIw"]
[Sun May 03 04:30:40.474341 2026] [:error] [pid 40639:tid 40714] [client 20.151.130.38:43990] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/configuration.php"] [unique_id "afZe8K9rkyoICq7qxvFN6wAAAI0"]
[Sun May 03 04:30:41.042473 2026] [:error] [pid 40638:tid 40690] [client 20.151.130.38:43311] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/configuration.php"] [unique_id "afZe8fh3VcFjJ7H1mBaXKAAAAFA"]
[Sun May 03 04:30:41.673474 2026] [:error] [pid 40638:tid 40698] [client 20.151.130.38:43267] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/configuration.php"] [unique_id "afZe8fh3VcFjJ7H1mBaXKgAAAFg"]
[Sun May 03 04:30:42.312855 2026] [:error] [pid 40639:tid 40711] [client 20.151.130.38:43163] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/js/"] [unique_id "afZe8q9rkyoICq7qxvFN7gAAAIo"]
[Sun May 03 04:30:42.768164 2026] [:error] [pid 40639:tid 40713] [client 20.151.130.38:43287] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/js/"] [unique_id "afZe8q9rkyoICq7qxvFN8QAAAIw"]
[Sun May 03 04:30:43.292292 2026] [:error] [pid 40639:tid 40710] [client 20.151.130.38:43996] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/js/"] [unique_id "afZe869rkyoICq7qxvFN8wAAAIk"]
[Sun May 03 04:30:43.771793 2026] [:error] [pid 40637:tid 40656] [client 20.151.130.38:43988] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/js/"] [unique_id "afZe85B-U30YNJ6CyVgr7AAAAAk"]
[Sun May 03 04:30:44.311738 2026] [:error] [pid 40638:tid 40684] [client 20.151.130.38:44004] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/uwu.php"] [unique_id "afZe9Ph3VcFjJ7H1mBaXMQAAAEo"]
[Sun May 03 04:30:44.811468 2026] [:error] [pid 40638:tid 40689] [client 20.151.130.38:43302] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/uwu.php"] [unique_id "afZe9Ph3VcFjJ7H1mBaXNAAAAE8"]
[Sun May 03 04:30:45.386830 2026] [:error] [pid 40639:tid 40716] [client 20.151.130.38:43307] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/uwu.php"] [unique_id "afZe9a9rkyoICq7qxvFN-gAAAI8"]
[Sun May 03 04:30:45.853807 2026] [:error] [pid 40638:tid 40695] [client 20.151.130.38:43986] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/uwu.php"] [unique_id "afZe9fh3VcFjJ7H1mBaXOQAAAFU"]
[Sun May 03 04:30:46.630556 2026] [:error] [pid 40638:tid 40694] [client 20.151.130.38:43992] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/uwa.php"] [unique_id "afZe9vh3VcFjJ7H1mBaXPQAAAFQ"]
[Sun May 03 04:30:47.191440 2026] [:error] [pid 40637:tid 40654] [client 20.151.130.38:43306] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/uwa.php"] [unique_id "afZe95B-U30YNJ6CyVgr7gAAAAc"]
[Sun May 03 04:30:47.800876 2026] [:error] [pid 40638:tid 40692] [client 20.151.130.38:43275] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/uwa.php"] [unique_id "afZe9_h3VcFjJ7H1mBaXQwAAAFI"]
[Sun May 03 04:30:48.506136 2026] [:error] [pid 40638:tid 40675] [client 20.151.130.38:43975] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/uwa.php"] [unique_id "afZe-Ph3VcFjJ7H1mBaXRwAAAEE"]
[Sun May 03 04:30:49.006383 2026] [:error] [pid 40732:tid 40768] [client 20.151.130.38:43984] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/crgio.php"] [unique_id "afZe-f1lQrIvlEdzcVf1bwAAANg"]
[Sun May 03 04:30:49.643890 2026] [:error] [pid 40639:tid 40713] [client 20.151.130.38:43322] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/crgio.php"] [unique_id "afZe-a9rkyoICq7qxvFOAgAAAIw"]
[Sun May 03 04:30:50.263869 2026] [:error] [pid 40639:tid 40720] [client 20.151.130.38:43309] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/crgio.php"] [unique_id "afZe-q9rkyoICq7qxvFOBQAAAJM"]
[Sun May 03 04:30:50.990910 2026] [:error] [pid 40639:tid 40718] [client 20.151.130.38:43305] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/crgio.php"] [unique_id "afZe-q9rkyoICq7qxvFOCAAAAJE"]
[Sun May 03 04:30:51.719771 2026] [:error] [pid 40639:tid 40703] [client 20.151.130.38:44015] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/geforce.php"] [unique_id "afZe-69rkyoICq7qxvFOCwAAAII"]
[Sun May 03 04:30:52.298611 2026] [:error] [pid 40639:tid 40711] [client 20.151.130.38:43326] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/geforce.php"] [unique_id "afZe_K9rkyoICq7qxvFODwAAAIo"]
[Sun May 03 04:30:52.880154 2026] [:error] [pid 40639:tid 40713] [client 20.151.130.38:43290] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/geforce.php"] [unique_id "afZe_K9rkyoICq7qxvFOEgAAAIw"]
[Sun May 03 04:30:53.348291 2026] [:error] [pid 40732:tid 40761] [client 20.151.130.38:43279] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/geforce.php"] [unique_id "afZe_f1lQrIvlEdzcVf1eQAAANE"]
[Sun May 03 04:30:53.857844 2026] [:error] [pid 40639:tid 40723] [client 20.151.130.38:43981] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-load.php"] [unique_id "afZe_a9rkyoICq7qxvFOFwAAAJY"]
[Sun May 03 04:30:54.549011 2026] [:error] [pid 40637:tid 40657] [client 20.151.130.38:43295] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-load.php"] [unique_id "afZe_pB-U30YNJ6CyVgr9wAAAAo"]
[Sun May 03 04:30:55.219830 2026] [:error] [pid 40637:tid 40669] [client 20.151.130.38:44003] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-load.php"] [unique_id "afZe_5B-U30YNJ6CyVgr-gAAABY"]
[Sun May 03 04:30:55.879046 2026] [:error] [pid 40639:tid 40711] [client 20.151.130.38:43149] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-load.php"] [unique_id "afZe_69rkyoICq7qxvFOIAAAAIo"]
[Sun May 03 04:30:56.393977 2026] [:error] [pid 40732:tid 40758] [client 20.151.130.38:43142] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/77.php"] [unique_id "afZfAP1lQrIvlEdzcVf1fAAAAM4"]
[Sun May 03 04:30:56.903758 2026] [:error] [pid 40639:tid 40707] [client 20.151.130.38:43972] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/77.php"] [unique_id "afZfAK9rkyoICq7qxvFOJAAAAIY"]
[Sun May 03 04:30:57.404436 2026] [:error] [pid 40732:tid 40762] [client 20.151.130.38:43148] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/77.php"] [unique_id "afZfAf1lQrIvlEdzcVf1fgAAANI"]
[Sun May 03 04:30:58.129743 2026] [:error] [pid 40639:tid 40714] [client 20.151.130.38:44020] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/77.php"] [unique_id "afZfAq9rkyoICq7qxvFOKAAAAI0"]
[Sun May 03 04:30:58.746018 2026] [:error] [pid 40732:tid 40746] [client 20.151.130.38:43982] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/.sghb.php"] [unique_id "afZfAv1lQrIvlEdzcVf1hwAAAMI"]
[Sun May 03 04:30:59.285065 2026] [:error] [pid 40638:tid 40674] [client 20.151.130.38:43143] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/.sghb.php"] [unique_id "afZfA_h3VcFjJ7H1mBaXUQAAAEA"]
[Sun May 03 04:30:59.893723 2026] [:error] [pid 40637:tid 40658] [client 20.151.130.38:44027] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/.sghb.php"] [unique_id "afZfA5B-U30YNJ6CyVgsAAAAAAs"]
[Sun May 03 04:31:00.700387 2026] [:error] [pid 40732:tid 40763] [client 20.151.130.38:43284] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/.sghb.php"] [unique_id "afZfBP1lQrIvlEdzcVf1iQAAANM"]
[Sun May 03 04:31:01.158652 2026] [:error] [pid 40637:tid 40660] [client 20.151.130.38:44001] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/zoko.php"] [unique_id "afZfBZB-U30YNJ6CyVgsBwAAAA0"]
[Sun May 03 04:31:01.622545 2026] [:error] [pid 40732:tid 40748] [client 20.151.130.38:43138] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/zoko.php"] [unique_id "afZfBf1lQrIvlEdzcVf1jAAAAMQ"]
[Sun May 03 04:31:02.138410 2026] [:error] [pid 40732:tid 40762] [client 20.151.130.38:44023] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/zoko.php"] [unique_id "afZfBv1lQrIvlEdzcVf1kAAAANI"]
[Sun May 03 04:31:02.641121 2026] [:error] [pid 40732:tid 40764] [client 20.151.130.38:43310] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/zoko.php"] [unique_id "afZfBv1lQrIvlEdzcVf1lQAAANQ"]
[Sun May 03 04:31:03.323058 2026] [:error] [pid 40637:tid 40664] [client 20.151.130.38:43296] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/solo1.php"] [unique_id "afZfB5B-U30YNJ6CyVgsCQAAABE"]
[Sun May 03 04:31:03.854612 2026] [:error] [pid 40732:tid 40747] [client 20.151.130.38:43991] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/solo1.php"] [unique_id "afZfB_1lQrIvlEdzcVf1nQAAAMM"]
[Sun May 03 04:31:04.401449 2026] [:error] [pid 40638:tid 40691] [client 20.151.130.38:44014] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/solo1.php"] [unique_id "afZfCPh3VcFjJ7H1mBaXVgAAAFE"]
[Sun May 03 04:31:04.952270 2026] [:error] [pid 40637:tid 40671] [client 20.151.130.38:44016] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/solo1.php"] [unique_id "afZfCJB-U30YNJ6CyVgsDgAAABg"]
[Sun May 03 04:31:05.443690 2026] [:error] [pid 40732:tid 40755] [client 20.151.130.38:43264] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/locales.php"] [unique_id "afZfCf1lQrIvlEdzcVf1pAAAAMs"]
[Sun May 03 04:31:05.937827 2026] [:error] [pid 40732:tid 40758] [client 20.151.130.38:43291] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/locales.php"] [unique_id "afZfCf1lQrIvlEdzcVf1pgAAAM4"]
[Sun May 03 04:31:06.487071 2026] [:error] [pid 40732:tid 40749] [client 20.151.130.38:43269] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/locales.php"] [unique_id "afZfCv1lQrIvlEdzcVf1qAAAAMU"]
[Sun May 03 04:31:07.294584 2026] [:error] [pid 40637:tid 40659] [client 20.151.130.38:43298] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/locales.php"] [unique_id "afZfC5B-U30YNJ6CyVgsEgAAAAw"]
[Sun May 03 04:31:07.797179 2026] [:error] [pid 40732:tid 40765] [client 20.151.130.38:44008] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bgymj.php"] [unique_id "afZfC_1lQrIvlEdzcVf1qwAAANU"]
[Sun May 03 04:31:08.261697 2026] [:error] [pid 40637:tid 40647] [client 20.151.130.38:43993] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bgymj.php"] [unique_id "afZfDJB-U30YNJ6CyVgsFAAAAAA"]
[Sun May 03 04:31:08.806322 2026] [:error] [pid 40638:tid 40682] [client 20.151.130.38:43325] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bgymj.php"] [unique_id "afZfDPh3VcFjJ7H1mBaXYQAAAEg"]
[Sun May 03 04:31:09.351713 2026] [:error] [pid 40638:tid 40680] [client 20.151.130.38:43161] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bgymj.php"] [unique_id "afZfDfh3VcFjJ7H1mBaXYgAAAEY"]
[Sun May 03 04:31:09.854599 2026] [:error] [pid 40639:tid 40712] [client 20.151.130.38:43293] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/pucci.php"] [unique_id "afZfDa9rkyoICq7qxvFOOQAAAIs"]
[Sun May 03 04:31:10.344834 2026] [:error] [pid 40639:tid 40711] [client 20.151.130.38:43155] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/pucci.php"] [unique_id "afZfDq9rkyoICq7qxvFOPQAAAIo"]
[Sun May 03 04:31:10.876145 2026] [:error] [pid 40639:tid 40720] [client 20.151.130.38:43150] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/pucci.php"] [unique_id "afZfDq9rkyoICq7qxvFOQwAAAJM"]
[Sun May 03 04:31:11.364384 2026] [:error] [pid 40732:tid 40751] [client 20.151.130.38:43297] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/pucci.php"] [unique_id "afZfD_1lQrIvlEdzcVf1rgAAAMc"]
[Sun May 03 04:31:12.046112 2026] [:error] [pid 40639:tid 40715] [client 20.151.130.38:43312] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/blocks/details/"] [unique_id "afZfEK9rkyoICq7qxvFOSQAAAI4"]
[Sun May 03 04:31:12.627000 2026] [:error] [pid 40637:tid 40656] [client 20.151.130.38:43141] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/blocks/details/"] [unique_id "afZfEJB-U30YNJ6CyVgsGAAAAAk"]
[Sun May 03 04:31:13.364468 2026] [:error] [pid 40637:tid 40654] [client 20.151.130.38:43970] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/blocks/details/"] [unique_id "afZfEZB-U30YNJ6CyVgsHAAAAAc"]
[Sun May 03 04:31:14.003581 2026] [:error] [pid 40637:tid 40670] [client 20.151.130.38:44000] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/blocks/details/"] [unique_id "afZfEpB-U30YNJ6CyVgsHgAAABc"]
[Sun May 03 04:31:14.439960 2026] [:error] [pid 40639:tid 40712] [client 20.151.130.38:43280] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/.dj/index.php"] [unique_id "afZfEq9rkyoICq7qxvFOTgAAAIs"]
[Sun May 03 04:31:15.577094 2026] [:error] [pid 40639:tid 40713] [client 20.151.130.38:43152] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/.dj/index.php"] [unique_id "afZfE69rkyoICq7qxvFOUQAAAIw"]
[Sun May 03 04:31:16.088299 2026] [:error] [pid 40732:tid 40754] [client 20.151.130.38:43969] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/.dj/index.php"] [unique_id "afZfFP1lQrIvlEdzcVf1tQAAAMo"]
[Sun May 03 04:31:16.623841 2026] [:error] [pid 40732:tid 40746] [client 20.151.130.38:44024] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/.dj/index.php"] [unique_id "afZfFP1lQrIvlEdzcVf1twAAAMI"]
[Sun May 03 04:31:17.102304 2026] [:error] [pid 40732:tid 40756] [client 20.151.130.38:43324] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "afZfFf1lQrIvlEdzcVf1ugAAAMw"]
[Sun May 03 04:31:17.651544 2026] [:error] [pid 40732:tid 40757] [client 20.151.130.38:43320] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "afZfFf1lQrIvlEdzcVf1vQAAAM0"]
[Sun May 03 04:31:18.112975 2026] [:error] [pid 40637:tid 40656] [client 20.151.130.38:43327] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "afZfFpB-U30YNJ6CyVgsJQAAAAk"]
[Sun May 03 04:31:18.608372 2026] [:error] [pid 40637:tid 40651] [client 20.151.130.38:44002] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "afZfFpB-U30YNJ6CyVgsJwAAAAQ"]
[Sun May 03 04:31:19.336743 2026] [:error] [pid 40638:tid 40687] [client 20.151.130.38:44029] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/.tmb/"] [unique_id "afZfF_h3VcFjJ7H1mBaXcAAAAE0"]
[Sun May 03 04:31:20.285773 2026] [:error] [pid 40732:tid 40750] [client 20.151.130.38:43283] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/.tmb/"] [unique_id "afZfGP1lQrIvlEdzcVf1wAAAAMY"]
[Sun May 03 04:31:20.809327 2026] [:error] [pid 40638:tid 40675] [client 20.151.130.38:43270] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/.tmb/"] [unique_id "afZfGPh3VcFjJ7H1mBaXdgAAAEE"]
[Sun May 03 04:31:21.426778 2026] [:error] [pid 40639:tid 40717] [client 20.151.130.38:44012] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/.tmb/"] [unique_id "afZfGa9rkyoICq7qxvFOWAAAAJA"]
[Sun May 03 04:31:21.999636 2026] [:error] [pid 40638:tid 40674] [client 20.151.130.38:43177] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/one.php"] [unique_id "afZfGfh3VcFjJ7H1mBaXfgAAAEA"]
[Sun May 03 04:31:22.861953 2026] [:error] [pid 40638:tid 40682] [client 20.151.130.38:43140] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/one.php"] [unique_id "afZfGvh3VcFjJ7H1mBaXgwAAAEg"]
[Sun May 03 04:31:23.681642 2026] [:error] [pid 40637:tid 40654] [client 20.151.130.38:43974] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/one.php"] [unique_id "afZfG5B-U30YNJ6CyVgsMQAAAAc"]
[Sun May 03 04:31:24.345548 2026] [:error] [pid 40638:tid 40681] [client 20.151.130.38:43304] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/one.php"] [unique_id "afZfHPh3VcFjJ7H1mBaXiAAAAEc"]
[Sun May 03 04:31:24.891281 2026] [:error] [pid 40732:tid 40756] [client 20.151.130.38:43999] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/no20.php"] [unique_id "afZfHP1lQrIvlEdzcVf1wgAAAMw"]
[Sun May 03 04:31:25.651151 2026] [:error] [pid 40639:tid 40702] [client 20.151.130.38:43147] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/no20.php"] [unique_id "afZfHa9rkyoICq7qxvFOWwAAAIE"]
[Sun May 03 04:31:26.364076 2026] [proxy_fcgi:error] [pid 40732:tid 40745] [client 20.151.130.38:43151] AH01071: Got error 'Primary script unknown'
[Sun May 03 04:31:26.574072 2026] [proxy_fcgi:error] [pid 40732:tid 40757] [client 20.151.130.38:43151] AH01071: Got error 'Primary script unknown'
[Sun May 03 04:31:26.785988 2026] [proxy_fcgi:error] [pid 40732:tid 40747] [client 20.151.130.38:43151] AH01071: Got error 'Primary script unknown'
[Sun May 03 04:31:26.996221 2026] [proxy_fcgi:error] [pid 40732:tid 40749] [client 20.151.130.38:43151] AH01071: Got error 'Primary script unknown'
[Sun May 03 04:31:28.471480 2026] [proxy_fcgi:error] [pid 40732:tid 40767] [client 20.151.130.38:43151] AH01071: Got error 'Primary script unknown'
[Sun May 03 04:31:30.406946 2026] [proxy_fcgi:error] [pid 40732:tid 40752] [client 20.151.130.38:43151] AH01071: Got error 'Primary script unknown'
[Sun May 03 04:31:30.646512 2026] [proxy_fcgi:error] [pid 40732:tid 40745] [client 20.151.130.38:43151] AH01071: Got error 'Primary script unknown'
[Sun May 03 04:31:30.904023 2026] [proxy_fcgi:error] [pid 40732:tid 40768] [client 20.151.130.38:43151] AH01071: Got error 'Primary script unknown'
[Sun May 03 04:31:31.222181 2026] [proxy_fcgi:error] [pid 40732:tid 40753] [client 20.151.130.38:43151] AH01071: Got error 'Primary script unknown'
[Sun May 03 04:31:31.473759 2026] [:error] [pid 40732:tid 40764] [client 20.151.130.38:43151] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-xme.php"] [unique_id "afZfI_1lQrIvlEdzcVf12gAAANQ"]
[Sun May 03 04:31:32.071703 2026] [:error] [pid 40638:tid 40684] [client 20.151.130.38:44019] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-xme.php"] [unique_id "afZfJPh3VcFjJ7H1mBaXjQAAAEo"]
[Sun May 03 04:31:32.677279 2026] [:error] [pid 40732:tid 40749] [client 20.151.130.38:43136] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-xme.php"] [unique_id "afZfJP1lQrIvlEdzcVf13AAAAMU"]
[Sun May 03 04:31:33.362556 2026] [:error] [pid 40638:tid 40682] [client 20.151.130.38:44013] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-xme.php"] [unique_id "afZfJfh3VcFjJ7H1mBaXjgAAAEg"]
[Sun May 03 04:31:34.258229 2026] [:error] [pid 40639:tid 40717] [client 20.151.130.38:43272] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/adminer.php"] [unique_id "afZfJq9rkyoICq7qxvFOYgAAAJA"]
[Sun May 03 04:31:34.827369 2026] [:error] [pid 40732:tid 40756] [client 20.151.130.38:44031] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/adminer.php"] [unique_id "afZfJv1lQrIvlEdzcVf15AAAAMw"]
[Sun May 03 04:31:35.302798 2026] [:error] [pid 40732:tid 40753] [client 20.151.130.38:43980] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/adminer.php"] [unique_id "afZfJ_1lQrIvlEdzcVf15QAAAMk"]
[Sun May 03 04:31:35.857494 2026] [:error] [pid 40732:tid 40751] [client 20.151.130.38:43187] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/adminer.php"] [unique_id "afZfJ_1lQrIvlEdzcVf16AAAAMc"]
[Sun May 03 04:31:36.456498 2026] [:error] [pid 40732:tid 40746] [client 20.151.130.38:43908] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ktfow.php"] [unique_id "afZfKP1lQrIvlEdzcVf16wAAAMI"]
[Sun May 03 04:31:37.031667 2026] [:error] [pid 40732:tid 40759] [client 20.151.130.38:43181] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ktfow.php"] [unique_id "afZfKf1lQrIvlEdzcVf17AAAAM8"]
[Sun May 03 04:31:37.776641 2026] [:error] [pid 40638:tid 40688] [client 20.151.130.38:43160] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ktfow.php"] [unique_id "afZfKfh3VcFjJ7H1mBaXkQAAAE4"]
[Sun May 03 04:31:38.271382 2026] [:error] [pid 40732:tid 40760] [client 20.151.130.38:43994] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ktfow.php"] [unique_id "afZfKv1lQrIvlEdzcVf18QAAANA"]
[Sun May 03 04:31:38.790344 2026] [:error] [pid 40639:tid 40703] [client 20.151.130.38:43146] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/mode.php"] [unique_id "afZfKq9rkyoICq7qxvFOaQAAAII"]
[Sun May 03 04:31:39.509204 2026] [:error] [pid 40732:tid 40756] [client 20.151.130.38:43168] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/mode.php"] [unique_id "afZfK_1lQrIvlEdzcVf19QAAAMw"]
[Sun May 03 04:31:40.005927 2026] [:error] [pid 40732:tid 40744] [client 20.151.130.38:43289] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/mode.php"] [unique_id "afZfLP1lQrIvlEdzcVf19wAAAMA"]
[Sun May 03 04:31:40.764790 2026] [:error] [pid 40732:tid 40760] [client 20.151.130.38:44030] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/mode.php"] [unique_id "afZfLP1lQrIvlEdzcVf1-QAAANA"]
[Sun May 03 04:31:41.325730 2026] [:error] [pid 40637:tid 40665] [client 20.151.130.38:43904] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/2468.php"] [unique_id "afZfLZB-U30YNJ6CyVgsOQAAABI"]
[Sun May 03 04:31:41.861033 2026] [:error] [pid 40639:tid 40721] [client 20.151.130.38:43139] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/2468.php"] [unique_id "afZfLa9rkyoICq7qxvFObQAAAJQ"]
[Sun May 03 04:31:42.583650 2026] [:error] [pid 40639:tid 40704] [client 20.151.130.38:44017] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/2468.php"] [unique_id "afZfLq9rkyoICq7qxvFOcAAAAIM"]
[Sun May 03 04:31:43.440206 2026] [:error] [pid 40639:tid 40710] [client 20.151.130.38:43265] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/2468.php"] [unique_id "afZfL69rkyoICq7qxvFOdgAAAIk"]
[Sun May 03 04:31:44.002386 2026] [:error] [pid 40637:tid 40668] [client 20.151.130.38:43182] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "afZfMJB-U30YNJ6CyVgsPAAAABU"]
[Sun May 03 04:31:44.614155 2026] [:error] [pid 40639:tid 40705] [client 20.151.130.38:43153] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "afZfMK9rkyoICq7qxvFOeAAAAIQ"]
[Sun May 03 04:31:45.243522 2026] [:error] [pid 40732:tid 40764] [client 20.151.130.38:44018] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "afZfMf1lQrIvlEdzcVf1_wAAANQ"]
[Sun May 03 04:31:45.991956 2026] [:error] [pid 40637:tid 40659] [client 20.151.130.38:43158] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "afZfMZB-U30YNJ6CyVgsQQAAAAw"]
[Sun May 03 04:31:46.739565 2026] [:error] [pid 40732:tid 40757] [client 20.151.130.38:44006] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/dx.php"] [unique_id "afZfMv1lQrIvlEdzcVf2AAAAAM0"]
[Sun May 03 04:31:47.389859 2026] [:error] [pid 40638:tid 40686] [client 20.151.130.38:43197] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/dx.php"] [unique_id "afZfM_h3VcFjJ7H1mBaXlwAAAEw"]
[Sun May 03 04:31:48.011894 2026] [:error] [pid 40732:tid 40759] [client 20.151.130.38:43966] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/dx.php"] [unique_id "afZfNP1lQrIvlEdzcVf2BQAAAM8"]
[Sun May 03 04:31:48.815857 2026] [:error] [pid 40638:tid 40685] [client 20.151.130.38:43268] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/dx.php"] [unique_id "afZfNPh3VcFjJ7H1mBaXmQAAAEs"]
[Sun May 03 04:31:49.711218 2026] [:error] [pid 40638:tid 40687] [client 20.151.130.38:44007] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/amdin.php"] [unique_id "afZfNfh3VcFjJ7H1mBaXnAAAAE0"]
[Sun May 03 04:31:50.579474 2026] [:error] [pid 40637:tid 40660] [client 20.151.130.38:43156] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/amdin.php"] [unique_id "afZfNpB-U30YNJ6CyVgsSgAAAA0"]
[Sun May 03 04:31:51.324205 2026] [:error] [pid 40637:tid 40659] [client 20.151.130.38:44022] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/amdin.php"] [unique_id "afZfN5B-U30YNJ6CyVgsSwAAAAw"]
[Sun May 03 04:31:52.102584 2026] [:error] [pid 40732:tid 40757] [client 20.151.130.38:43922] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/amdin.php"] [unique_id "afZfOP1lQrIvlEdzcVf2CwAAAM0"]
[Sun May 03 04:31:52.911345 2026] [:error] [pid 40732:tid 40763] [client 20.151.130.38:43989] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/huya.php"] [unique_id "afZfOP1lQrIvlEdzcVf2DQAAANM"]
[Sun May 03 04:31:53.742251 2026] [:error] [pid 40732:tid 40762] [client 20.151.130.38:43303] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/huya.php"] [unique_id "afZfOf1lQrIvlEdzcVf2EAAAANI"]
[Sun May 03 04:31:54.435849 2026] [:error] [pid 40637:tid 40657] [client 20.151.130.38:43183] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/huya.php"] [unique_id "afZfOpB-U30YNJ6CyVgsUQAAAAo"]
[Sun May 03 04:31:54.961742 2026] [:error] [pid 40637:tid 40668] [client 20.151.130.38:43997] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/huya.php"] [unique_id "afZfOpB-U30YNJ6CyVgsUwAAABU"]
[Sun May 03 04:31:55.620550 2026] [:error] [pid 40637:tid 40658] [client 20.151.130.38:43276] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/puc.php"] [unique_id "afZfO5B-U30YNJ6CyVgsVQAAAAs"]
[Sun May 03 04:31:56.201858 2026] [:error] [pid 40637:tid 40650] [client 20.151.130.38:43144] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/puc.php"] [unique_id "afZfPJB-U30YNJ6CyVgsVwAAAAM"]
[Sun May 03 04:31:56.887387 2026] [:error] [pid 40637:tid 40656] [client 20.151.130.38:43179] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/puc.php"] [unique_id "afZfPJB-U30YNJ6CyVgsWwAAAAk"]
[Sun May 03 04:31:57.668861 2026] [:error] [pid 40637:tid 40653] [client 20.151.130.38:43910] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/puc.php"] [unique_id "afZfPZB-U30YNJ6CyVgsXwAAAAY"]
[Sun May 03 04:31:58.494581 2026] [:error] [pid 40732:tid 40758] [client 20.151.130.38:43905] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/themes.php"] [unique_id "afZfPv1lQrIvlEdzcVf2FwAAAM4"]
[Sun May 03 04:31:59.025956 2026] [:error] [pid 40732:tid 40745] [client 20.151.130.38:43162] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/themes.php"] [unique_id "afZfP_1lQrIvlEdzcVf2GQAAAME"]
[Sun May 03 04:31:59.665885 2026] [:error] [pid 40637:tid 40651] [client 20.151.130.38:43319] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/themes.php"] [unique_id "afZfP5B-U30YNJ6CyVgsYgAAAAQ"]
[Sun May 03 04:32:00.568308 2026] [:error] [pid 40637:tid 40658] [client 20.151.130.38:43950] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/themes.php"] [unique_id "afZfQJB-U30YNJ6CyVgsZQAAAAs"]
[Sun May 03 04:32:01.269827 2026] [:error] [pid 40637:tid 40655] [client 20.151.130.38:43196] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ewp.php"] [unique_id "afZfQZB-U30YNJ6CyVgsaAAAAAg"]
[Sun May 03 04:32:02.140708 2026] [:error] [pid 40637:tid 40652] [client 20.151.130.38:43159] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ewp.php"] [unique_id "afZfQpB-U30YNJ6CyVgsbAAAAAU"]
[Sun May 03 04:32:02.698251 2026] [:error] [pid 40732:tid 40745] [client 20.151.130.38:43137] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ewp.php"] [unique_id "afZfQv1lQrIvlEdzcVf2IwAAAME"]
[Sun May 03 04:32:04.015650 2026] [:error] [pid 40732:tid 40765] [client 20.151.130.38:43195] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ewp.php"] [unique_id "afZfRP1lQrIvlEdzcVf2KAAAANU"]
[Sun May 03 04:32:04.880533 2026] [:error] [pid 40639:tid 40720] [client 20.151.130.38:43953] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/dx.php"] [unique_id "afZfRK9rkyoICq7qxvFOfwAAAJM"]
[Sun May 03 04:32:05.461976 2026] [:error] [pid 40639:tid 40715] [client 20.151.130.38:43318] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/dx.php"] [unique_id "afZfRa9rkyoICq7qxvFOggAAAI4"]
[Sun May 03 04:32:06.018334 2026] [:error] [pid 40732:tid 40752] [client 20.151.130.38:43194] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/dx.php"] [unique_id "afZfRv1lQrIvlEdzcVf2MAAAAMg"]
[Sun May 03 04:32:06.774032 2026] [:error] [pid 40732:tid 40751] [client 20.151.130.38:43919] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/dx.php"] [unique_id "afZfRv1lQrIvlEdzcVf2NAAAAMc"]
[Sun May 03 04:32:07.396753 2026] [:error] [pid 40638:tid 40676] [client 20.151.130.38:43918] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xff.php"] [unique_id "afZfR_h3VcFjJ7H1mBaXqwAAAEI"]
[Sun May 03 04:32:07.994971 2026] [:error] [pid 40732:tid 40758] [client 20.151.130.38:43169] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xff.php"] [unique_id "afZfR_1lQrIvlEdzcVf2OAAAAM4"]
[Sun May 03 04:32:08.603002 2026] [:error] [pid 40639:tid 40719] [client 20.151.130.38:43277] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xff.php"] [unique_id "afZfSK9rkyoICq7qxvFOhgAAAJI"]
[Sun May 03 04:32:09.932182 2026] [:error] [pid 40638:tid 40682] [client 20.151.130.38:43932] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xff.php"] [unique_id "afZfSfh3VcFjJ7H1mBaXsQAAAEg"]
[Sun May 03 04:32:10.417738 2026] [:error] [pid 40639:tid 40721] [client 20.151.130.38:43273] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/lupo.php"] [unique_id "afZfSq9rkyoICq7qxvFOiAAAAJQ"]
[Sun May 03 04:32:11.306770 2026] [:error] [pid 40732:tid 40758] [client 20.151.130.38:43930] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/lupo.php"] [unique_id "afZfS_1lQrIvlEdzcVf2QQAAAM4"]
[Sun May 03 04:32:12.036448 2026] [:error] [pid 40637:tid 40665] [client 20.151.130.38:43909] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/lupo.php"] [unique_id "afZfTJB-U30YNJ6CyVgsdgAAABI"]
[Sun May 03 04:32:12.939443 2026] [:error] [pid 40732:tid 40759] [client 20.151.130.38:43188] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/lupo.php"] [unique_id "afZfTP1lQrIvlEdzcVf2RQAAAM8"]
[Sun May 03 04:32:13.642281 2026] [:error] [pid 40639:tid 40706] [client 20.151.130.38:43192] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/awa.php"] [unique_id "afZfTa9rkyoICq7qxvFOjwAAAIU"]
[Sun May 03 04:32:14.227137 2026] [:error] [pid 40639:tid 40722] [client 20.151.130.38:43174] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/awa.php"] [unique_id "afZfTq9rkyoICq7qxvFOkQAAAJU"]
[Sun May 03 04:32:15.009879 2026] [:error] [pid 40639:tid 40719] [client 20.151.130.38:43951] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/awa.php"] [unique_id "afZfT69rkyoICq7qxvFOlAAAAJI"]
[Sun May 03 04:32:15.750548 2026] [:error] [pid 40638:tid 40697] [client 20.151.130.38:44026] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/awa.php"] [unique_id "afZfT_h3VcFjJ7H1mBaXtAAAAFc"]
[Sun May 03 04:32:16.524044 2026] [:error] [pid 40639:tid 40701] [client 20.151.130.38:43961] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/popo.php"] [unique_id "afZfUK9rkyoICq7qxvFOmwAAAIA"]
[Sun May 03 04:32:17.103013 2026] [:error] [pid 40638:tid 40691] [client 20.151.130.38:43850] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/popo.php"] [unique_id "afZfUfh3VcFjJ7H1mBaXtwAAAFE"]
[Sun May 03 04:32:17.774385 2026] [:error] [pid 40732:tid 40749] [client 20.151.130.38:43956] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/popo.php"] [unique_id "afZfUf1lQrIvlEdzcVf2SwAAAMU"]
[Sun May 03 04:32:18.591858 2026] [:error] [pid 40732:tid 40766] [client 20.151.130.38:44011] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/popo.php"] [unique_id "afZfUv1lQrIvlEdzcVf2UgAAANY"]
[Sun May 03 04:32:19.597658 2026] [:error] [pid 40732:tid 40760] [client 20.151.130.38:43914] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/13.php"] [unique_id "afZfU_1lQrIvlEdzcVf2VgAAANA"]
[Sun May 03 04:32:20.144854 2026] [:error] [pid 40732:tid 40748] [client 20.151.130.38:43998] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/13.php"] [unique_id "afZfVP1lQrIvlEdzcVf2WQAAAMQ"]
[Sun May 03 04:32:20.772944 2026] [:error] [pid 40638:tid 40687] [client 20.151.130.38:43165] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/13.php"] [unique_id "afZfVPh3VcFjJ7H1mBaXuQAAAE0"]
[Sun May 03 04:32:21.650683 2026] [:error] [pid 40732:tid 40761] [client 20.151.130.38:43938] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/13.php"] [unique_id "afZfVf1lQrIvlEdzcVf2YgAAANE"]
[Sun May 03 04:32:22.448968 2026] [:error] [pid 40732:tid 40760] [client 20.151.130.38:43191] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/tews.php"] [unique_id "afZfVv1lQrIvlEdzcVf2ZgAAANA"]
[Sun May 03 04:32:23.024797 2026] [:error] [pid 40639:tid 40714] [client 20.151.130.38:43157] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/tews.php"] [unique_id "afZfV69rkyoICq7qxvFOoAAAAI0"]
[Sun May 03 04:32:23.589726 2026] [:error] [pid 40639:tid 40721] [client 20.151.130.38:43853] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/tews.php"] [unique_id "afZfV69rkyoICq7qxvFOoQAAAJQ"]
[Sun May 03 04:32:24.150703 2026] [:error] [pid 40637:tid 40662] [client 20.151.130.38:43964] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/tews.php"] [unique_id "afZfWJB-U30YNJ6CyVgsfAAAAA8"]
[Sun May 03 04:32:24.793477 2026] [:error] [pid 40732:tid 40749] [client 20.151.130.38:43867] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/moshou.php"] [unique_id "afZfWP1lQrIvlEdzcVf2bQAAAMU"]
[Sun May 03 04:32:25.598005 2026] [:error] [pid 40637:tid 40666] [client 20.151.130.38:43154] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/moshou.php"] [unique_id "afZfWZB-U30YNJ6CyVgsfgAAABM"]
[Sun May 03 04:32:26.392328 2026] [:error] [pid 40637:tid 40661] [client 20.151.130.38:43178] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/moshou.php"] [unique_id "afZfWpB-U30YNJ6CyVgsgAAAAA4"]
[Sun May 03 04:32:27.238802 2026] [:error] [pid 40637:tid 40669] [client 20.151.130.38:43166] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/moshou.php"] [unique_id "afZfW5B-U30YNJ6CyVgsggAAABY"]
[Sun May 03 04:32:27.888204 2026] [:error] [pid 40639:tid 40709] [client 20.151.130.38:43193] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xeaq.php"] [unique_id "afZfW69rkyoICq7qxvFOpQAAAIg"]
[Sun May 03 04:32:28.351918 2026] [:error] [pid 40637:tid 40652] [client 20.151.130.38:43145] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xeaq.php"] [unique_id "afZfXJB-U30YNJ6CyVgshwAAAAU"]
[Sun May 03 04:32:29.131015 2026] [:error] [pid 40732:tid 40755] [client 20.151.130.38:44021] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xeaq.php"] [unique_id "afZfXf1lQrIvlEdzcVf2dQAAAMs"]
[Sun May 03 04:32:30.109299 2026] [:error] [pid 40637:tid 40671] [client 20.151.130.38:43907] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xeaq.php"] [unique_id "afZfXpB-U30YNJ6CyVgsigAAABg"]
[Sun May 03 04:32:31.041921 2026] [proxy_fcgi:error] [pid 40637:tid 40666] [client 20.151.130.38:43917] AH01071: Got error 'Primary script unknown'
[Sun May 03 04:32:31.267377 2026] [proxy_fcgi:error] [pid 40637:tid 40655] [client 20.151.130.38:43917] AH01071: Got error 'Primary script unknown'
[Sun May 03 04:32:31.478018 2026] [proxy_fcgi:error] [pid 40637:tid 40664] [client 20.151.130.38:43917] AH01071: Got error 'Primary script unknown'
[Sun May 03 04:32:32.065584 2026] [proxy_fcgi:error] [pid 40637:tid 40656] [client 20.151.130.38:43917] AH01071: Got error 'Primary script unknown'
[Sun May 03 04:32:32.276926 2026] [proxy_fcgi:error] [pid 40637:tid 40647] [client 20.151.130.38:43917] AH01071: Got error 'Primary script unknown'
[Sun May 03 04:32:32.584673 2026] [proxy_fcgi:error] [pid 40637:tid 40652] [client 20.151.130.38:43917] AH01071: Got error 'Primary script unknown'
[Sun May 03 04:32:32.901646 2026] [proxy_fcgi:error] [pid 40637:tid 40667] [client 20.151.130.38:43917] AH01071: Got error 'Primary script unknown'
[Sun May 03 04:32:33.119893 2026] [proxy_fcgi:error] [pid 40637:tid 40663] [client 20.151.130.38:43917] AH01071: Got error 'Primary script unknown'
[Sun May 03 04:32:33.489939 2026] [proxy_fcgi:error] [pid 40637:tid 40671] [client 20.151.130.38:43917] AH01071: Got error 'Primary script unknown'
[Sun May 03 04:32:33.937621 2026] [proxy_fcgi:error] [pid 40637:tid 40655] [client 20.151.130.38:43917] AH01071: Got error 'Primary script unknown'
[Sun May 03 04:32:34.247682 2026] [:error] [pid 40637:tid 40660] [client 20.151.130.38:43917] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/3.php"] [unique_id "afZfYpB-U30YNJ6CyVgsogAAAA0"]
[Sun May 03 04:32:35.139882 2026] [:error] [pid 40638:tid 40686] [client 20.151.130.38:43924] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/3.php"] [unique_id "afZfY_h3VcFjJ7H1mBaXyQAAAEw"]
[Sun May 03 04:32:35.834777 2026] [:error] [pid 40637:tid 40663] [client 20.151.130.38:43186] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/3.php"] [unique_id "afZfY5B-U30YNJ6CyVgspAAAABA"]
[Sun May 03 04:32:36.515127 2026] [:error] [pid 40638:tid 40690] [client 20.151.130.38:43960] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/3.php"] [unique_id "afZfZPh3VcFjJ7H1mBaXzgAAAFA"]
[Sun May 03 04:32:37.281312 2026] [:error] [pid 40639:tid 40720] [client 20.151.130.38:43916] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/4.php"] [unique_id "afZfZa9rkyoICq7qxvFOqQAAAJM"]
[Sun May 03 04:32:37.816696 2026] [:error] [pid 40639:tid 40702] [client 20.151.130.38:43923] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/4.php"] [unique_id "afZfZa9rkyoICq7qxvFOqgAAAIE"]
[Sun May 03 04:32:38.638609 2026] [:error] [pid 40639:tid 40713] [client 20.151.130.38:43199] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/4.php"] [unique_id "afZfZq9rkyoICq7qxvFOrQAAAIw"]
[Sun May 03 04:32:39.266112 2026] [:error] [pid 40638:tid 40683] [client 20.151.130.38:43856] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/4.php"] [unique_id "afZfZ_h3VcFjJ7H1mBaX0wAAAEk"]
[Sun May 03 04:32:40.085374 2026] [:error] [pid 40732:tid 40767] [client 20.151.130.38:43967] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/5.php"] [unique_id "afZfaP1lQrIvlEdzcVf2fgAAANc"]
[Sun May 03 04:32:41.297885 2026] [:error] [pid 40638:tid 40687] [client 20.151.130.38:43920] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/5.php"] [unique_id "afZfafh3VcFjJ7H1mBaX1wAAAE0"]
[Sun May 03 04:32:41.920363 2026] [:error] [pid 40732:tid 40762] [client 20.151.130.38:43308] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/5.php"] [unique_id "afZfaf1lQrIvlEdzcVf2hgAAANI"]
[Sun May 03 04:32:42.817902 2026] [:error] [pid 40637:tid 40656] [client 20.151.130.38:43175] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/5.php"] [unique_id "afZfapB-U30YNJ6CyVgspgAAAAk"]
[Sun May 03 04:32:43.593596 2026] [:error] [pid 40732:tid 40754] [client 20.151.130.38:43911] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/6.php"] [unique_id "afZfa_1lQrIvlEdzcVf2jgAAAMo"]
[Sun May 03 04:32:44.163958 2026] [:error] [pid 40732:tid 40747] [client 20.151.130.38:43301] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/6.php"] [unique_id "afZfbP1lQrIvlEdzcVf2kAAAAMM"]
[Sun May 03 04:32:44.815413 2026] [:error] [pid 40637:tid 40647] [client 20.151.130.38:43957] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/6.php"] [unique_id "afZfbJB-U30YNJ6CyVgspwAAAAA"]
[Sun May 03 04:32:45.758014 2026] [:error] [pid 40637:tid 40667] [client 20.151.130.38:44001] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/6.php"] [unique_id "afZfbZB-U30YNJ6CyVgsqQAAABQ"]
[Sun May 03 04:32:46.462981 2026] [:error] [pid 40732:tid 40753] [client 20.151.130.38:43946] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/cjfuns.php"] [unique_id "afZfbv1lQrIvlEdzcVf2lgAAAMk"]
[Sun May 03 04:32:47.465590 2026] [:error] [pid 40732:tid 40755] [client 20.151.130.38:43286] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/cjfuns.php"] [unique_id "afZfb_1lQrIvlEdzcVf2mgAAAMs"]
[Sun May 03 04:32:48.147297 2026] [:error] [pid 40732:tid 40768] [client 20.151.130.38:43866] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/cjfuns.php"] [unique_id "afZfcP1lQrIvlEdzcVf2nwAAANg"]
[Sun May 03 04:32:48.652288 2026] [:error] [pid 40732:tid 40744] [client 20.151.130.38:43891] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/cjfuns.php"] [unique_id "afZfcP1lQrIvlEdzcVf2oAAAAMA"]
[Sun May 03 04:32:49.100951 2026] [:error] [pid 40638:tid 40677] [client 20.151.130.38:43274] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/class.php"] [unique_id "afZfcfh3VcFjJ7H1mBaX4AAAAEM"]
[Sun May 03 04:32:49.813183 2026] [:error] [pid 40732:tid 40748] [client 20.151.130.38:43945] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/class.php"] [unique_id "afZfcf1lQrIvlEdzcVf2owAAAMQ"]
[Sun May 03 04:32:50.350478 2026] [:error] [pid 40732:tid 40746] [client 20.151.130.38:43285] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/class.php"] [unique_id "afZfcv1lQrIvlEdzcVf2pQAAAMI"]
[Sun May 03 04:32:50.911475 2026] [:error] [pid 40638:tid 40676] [client 20.151.130.38:43173] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/class.php"] [unique_id "afZfcvh3VcFjJ7H1mBaX4wAAAEI"]
[Sun May 03 04:32:51.524797 2026] [:error] [pid 40732:tid 40754] [client 20.151.130.38:43847] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/100.php"] [unique_id "afZfc_1lQrIvlEdzcVf2qgAAAMo"]
[Sun May 03 04:32:52.005509 2026] [:error] [pid 40638:tid 40681] [client 20.151.130.38:43841] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/100.php"] [unique_id "afZfdPh3VcFjJ7H1mBaX5AAAAEc"]
[Sun May 03 04:32:52.616738 2026] [:error] [pid 40638:tid 40689] [client 20.151.130.38:43843] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/100.php"] [unique_id "afZfdPh3VcFjJ7H1mBaX5wAAAE8"]
[Sun May 03 04:32:53.405504 2026] [:error] [pid 40637:tid 40656] [client 20.151.130.38:43963] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/100.php"] [unique_id "afZfdZB-U30YNJ6CyVgsswAAAAk"]
[Sun May 03 04:32:53.934529 2026] [:error] [pid 40637:tid 40659] [client 20.151.130.38:43934] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/.well-known/nastar.php"] [unique_id "afZfdZB-U30YNJ6CyVgstQAAAAw"]
[Sun May 03 04:32:54.476702 2026] [:error] [pid 40637:tid 40667] [client 20.151.130.38:43939] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/.well-known/nastar.php"] [unique_id "afZfdpB-U30YNJ6CyVgstwAAABQ"]
[Sun May 03 04:32:55.054724 2026] [:error] [pid 40732:tid 40755] [client 20.151.130.38:43952] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/.well-known/nastar.php"] [unique_id "afZfd_1lQrIvlEdzcVf2sQAAAMs"]
[Sun May 03 04:32:56.113572 2026] [:error] [pid 40637:tid 40653] [client 20.151.130.38:43782] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/.well-known/nastar.php"] [unique_id "afZfeJB-U30YNJ6CyVgsvQAAAAY"]
[Sun May 03 04:32:56.731175 2026] [:error] [pid 40637:tid 40651] [client 20.151.130.38:43937] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/2026w.php"] [unique_id "afZfeJB-U30YNJ6CyVgsvgAAAAQ"]
[Sun May 03 04:32:57.429402 2026] [:error] [pid 40637:tid 40669] [client 20.151.130.38:43862] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/2026w.php"] [unique_id "afZfeZB-U30YNJ6CyVgswQAAABY"]
[Sun May 03 04:32:58.045573 2026] [:error] [pid 40638:tid 40678] [client 20.151.130.38:43944] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/2026w.php"] [unique_id "afZfevh3VcFjJ7H1mBaX7wAAAEQ"]
[Sun May 03 04:32:58.568072 2026] [:error] [pid 40637:tid 40667] [client 20.151.130.38:43846] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/2026w.php"] [unique_id "afZfepB-U30YNJ6CyVgsyQAAABQ"]
[Sun May 03 04:32:59.092415 2026] [:error] [pid 40637:tid 40658] [client 20.151.130.38:43789] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/about.php"] [unique_id "afZfe5B-U30YNJ6CyVgsygAAAAs"]
[Sun May 03 04:32:59.557817 2026] [:error] [pid 40639:tid 40710] [client 20.151.130.38:43995] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/about.php"] [unique_id "afZfe69rkyoICq7qxvFOtwAAAIk"]
[Sun May 03 04:33:00.177436 2026] [:error] [pid 40639:tid 40701] [client 20.151.130.38:43948] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/about.php"] [unique_id "afZffK9rkyoICq7qxvFOuwAAAIA"]
[Sun May 03 04:33:00.776095 2026] [:error] [pid 40639:tid 40720] [client 20.151.130.38:43983] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/about.php"] [unique_id "afZffK9rkyoICq7qxvFOvQAAAJM"]
[Sun May 03 04:33:01.359826 2026] [:error] [pid 40638:tid 40675] [client 20.151.130.38:44009] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/no18.php"] [unique_id "afZfffh3VcFjJ7H1mBaX8AAAAEE"]
[Sun May 03 04:33:01.938765 2026] [:error] [pid 40638:tid 40692] [client 20.151.130.38:43959] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/no18.php"] [unique_id "afZfffh3VcFjJ7H1mBaX8QAAAFI"]
[Sun May 03 04:33:02.560387 2026] [:error] [pid 40639:tid 40719] [client 20.151.130.38:43189] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/no18.php"] [unique_id "afZffq9rkyoICq7qxvFOwQAAAJI"]
[Sun May 03 04:33:03.024362 2026] [:error] [pid 40638:tid 40680] [client 20.151.130.38:43190] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/no18.php"] [unique_id "afZff_h3VcFjJ7H1mBaX8gAAAEY"]
[Sun May 03 04:33:03.680229 2026] [:error] [pid 40639:tid 40718] [client 20.151.130.38:43915] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/fine.php"] [unique_id "afZff69rkyoICq7qxvFOxwAAAJE"]
[Sun May 03 04:33:04.378401 2026] [:error] [pid 40732:tid 40767] [client 20.151.130.38:43180] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/fine.php"] [unique_id "afZfgP1lQrIvlEdzcVf2yAAAANc"]
[Sun May 03 04:33:05.493111 2026] [:error] [pid 40637:tid 40661] [client 20.151.130.38:43171] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/fine.php"] [unique_id "afZfgZB-U30YNJ6CyVgszwAAAA4"]
[Sun May 03 04:33:06.011727 2026] [:error] [pid 40638:tid 40691] [client 20.151.130.38:43875] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/fine.php"] [unique_id "afZfgvh3VcFjJ7H1mBaX9AAAAFE"]
[Sun May 03 04:33:06.527005 2026] [:error] [pid 40732:tid 40764] [client 20.151.130.38:43890] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/hplfuns.php"] [unique_id "afZfgv1lQrIvlEdzcVf2zAAAANQ"]
[Sun May 03 04:33:07.090917 2026] [:error] [pid 40639:tid 40713] [client 20.151.130.38:43896] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/hplfuns.php"] [unique_id "afZfg69rkyoICq7qxvFOzAAAAIw"]
[Sun May 03 04:33:07.974305 2026] [:error] [pid 40732:tid 40768] [client 20.151.130.38:43921] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/hplfuns.php"] [unique_id "afZfg_1lQrIvlEdzcVf2zwAAANg"]
[Sun May 03 04:33:08.526394 2026] [:error] [pid 40637:tid 40654] [client 20.151.130.38:44028] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/hplfuns.php"] [unique_id "afZfhJB-U30YNJ6CyVgs0gAAAAc"]
[Sun May 03 04:33:09.074500 2026] [:error] [pid 40732:tid 40753] [client 20.151.130.38:43164] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xa.php"] [unique_id "afZfhf1lQrIvlEdzcVf21gAAAMk"]
[Sun May 03 04:33:09.781381 2026] [:error] [pid 40639:tid 40707] [client 20.151.130.38:43844] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xa.php"] [unique_id "afZfha9rkyoICq7qxvFO0gAAAIY"]
[Sun May 03 04:33:10.252418 2026] [:error] [pid 40639:tid 40704] [client 20.151.130.38:43973] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xa.php"] [unique_id "afZfhq9rkyoICq7qxvFO1gAAAIM"]
[Sun May 03 04:33:10.748171 2026] [:error] [pid 40732:tid 40750] [client 20.151.130.38:43198] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xa.php"] [unique_id "afZfhv1lQrIvlEdzcVf22QAAAMY"]
[Sun May 03 04:33:11.248083 2026] [:error] [pid 40639:tid 40716] [client 20.151.130.38:43860] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/admin.php"] [unique_id "afZfh69rkyoICq7qxvFO2wAAAI8"]
[Sun May 03 04:33:11.807157 2026] [:error] [pid 40732:tid 40768] [client 20.151.130.38:43929] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/admin.php"] [unique_id "afZfh_1lQrIvlEdzcVf23AAAANg"]
[Sun May 03 04:33:12.370355 2026] [:error] [pid 40732:tid 40758] [client 20.151.130.38:43780] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/admin.php"] [unique_id "afZfiP1lQrIvlEdzcVf23gAAAM4"]
[Sun May 03 04:33:12.884943 2026] [:error] [pid 40732:tid 40745] [client 20.151.130.38:43892] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/admin.php"] [unique_id "afZfiP1lQrIvlEdzcVf24AAAAME"]
[Sun May 03 04:33:13.343746 2026] [:error] [pid 40732:tid 40759] [client 20.151.130.38:43284] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/inege.php"] [unique_id "afZfif1lQrIvlEdzcVf24QAAAM8"]
[Sun May 03 04:33:14.179521 2026] [:error] [pid 40639:tid 40703] [client 20.151.130.38:43800] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/inege.php"] [unique_id "afZfiq9rkyoICq7qxvFO4AAAAII"]
[Sun May 03 04:33:14.823159 2026] [:error] [pid 40732:tid 40757] [client 20.151.130.38:43864] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/inege.php"] [unique_id "afZfiv1lQrIvlEdzcVf25AAAAM0"]
[Sun May 03 04:33:15.667705 2026] [:error] [pid 40639:tid 40715] [client 20.151.130.38:43912] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/inege.php"] [unique_id "afZfi69rkyoICq7qxvFO4gAAAI4"]
[Sun May 03 04:33:16.114580 2026] [:error] [pid 40638:tid 40682] [client 20.151.130.38:43296] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/classgoto24.php"] [unique_id "afZfjPh3VcFjJ7H1mBaX_QAAAEg"]
[Sun May 03 04:33:16.628318 2026] [:error] [pid 40639:tid 40714] [client 20.151.130.38:43943] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/classgoto24.php"] [unique_id "afZfjK9rkyoICq7qxvFO4wAAAI0"]
[Sun May 03 04:33:17.208216 2026] [:error] [pid 40639:tid 40701] [client 20.151.130.38:43927] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/classgoto24.php"] [unique_id "afZfja9rkyoICq7qxvFO5QAAAIA"]
[Sun May 03 04:33:17.736972 2026] [:error] [pid 40732:tid 40750] [client 20.151.130.38:43803] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/classgoto24.php"] [unique_id "afZfjf1lQrIvlEdzcVf27AAAAMY"]
[Sun May 03 04:33:18.519307 2026] [:error] [pid 40639:tid 40719] [client 20.151.130.38:43184] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/no1.php"] [unique_id "afZfjq9rkyoICq7qxvFO5wAAAJI"]
[Sun May 03 04:33:19.026986 2026] [:error] [pid 40732:tid 40747] [client 20.151.130.38:43926] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/no1.php"] [unique_id "afZfj_1lQrIvlEdzcVf28QAAAMM"]
[Sun May 03 04:33:19.650325 2026] [:error] [pid 40639:tid 40709] [client 20.151.130.38:43958] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/no1.php"] [unique_id "afZfj69rkyoICq7qxvFO6AAAAIg"]
[Sun May 03 04:33:20.192051 2026] [:error] [pid 40637:tid 40658] [client 20.151.130.38:43941] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/no1.php"] [unique_id "afZfkJB-U30YNJ6CyVgs2wAAAAs"]
[Sun May 03 04:33:20.829867 2026] [:error] [pid 40732:tid 40752] [client 20.151.130.38:43874] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/w2025.php"] [unique_id "afZfkP1lQrIvlEdzcVf2-gAAAMg"]
[Sun May 03 04:33:21.373233 2026] [:error] [pid 40638:tid 40679] [client 20.151.130.38:43848] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/w2025.php"] [unique_id "afZfkfh3VcFjJ7H1mBaYAwAAAEU"]
[Sun May 03 04:33:22.176132 2026] [:error] [pid 40732:tid 40753] [client 20.151.130.38:43925] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/w2025.php"] [unique_id "afZfkv1lQrIvlEdzcVf3AAAAAMk"]
[Sun May 03 04:33:22.689526 2026] [:error] [pid 40638:tid 40683] [client 20.151.130.38:43791] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/w2025.php"] [unique_id "afZfkvh3VcFjJ7H1mBaYBgAAAEk"]
[Sun May 03 04:33:23.390877 2026] [:error] [pid 40732:tid 40754] [client 20.151.130.38:43936] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/fvvff.php"] [unique_id "afZfk_1lQrIvlEdzcVf3BQAAAMo"]
[Sun May 03 04:33:23.984145 2026] [:error] [pid 40637:tid 40652] [client 20.151.130.38:43931] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/fvvff.php"] [unique_id "afZfk5B-U30YNJ6CyVgs3wAAAAU"]
[Sun May 03 04:33:24.575318 2026] [:error] [pid 40637:tid 40648] [client 20.151.130.38:43857] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/fvvff.php"] [unique_id "afZflJB-U30YNJ6CyVgs4AAAAAE"]
[Sun May 03 04:33:25.305495 2026] [:error] [pid 40638:tid 40698] [client 20.151.130.38:43176] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/fvvff.php"] [unique_id "afZflfh3VcFjJ7H1mBaYCgAAAFg"]
[Sun May 03 04:33:25.984966 2026] [:error] [pid 40639:tid 40703] [client 20.151.130.38:43947] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/edit.php"] [unique_id "afZfla9rkyoICq7qxvFO8gAAAII"]
[Sun May 03 04:33:26.522759 2026] [:error] [pid 40638:tid 40681] [client 20.151.130.38:43858] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/edit.php"] [unique_id "afZflvh3VcFjJ7H1mBaYDQAAAEc"]
[Sun May 03 04:33:27.117777 2026] [:error] [pid 40732:tid 40751] [client 20.151.130.38:43813] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/edit.php"] [unique_id "afZfl_1lQrIvlEdzcVf3DgAAAMc"]
[Sun May 03 04:33:27.903932 2026] [:error] [pid 40732:tid 40759] [client 20.151.130.38:43851] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/edit.php"] [unique_id "afZfl_1lQrIvlEdzcVf3EAAAAM8"]
[Sun May 03 04:33:28.542607 2026] [:error] [pid 40639:tid 40706] [client 20.151.130.38:43167] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ioxi-o.php"] [unique_id "afZfmK9rkyoICq7qxvFO9AAAAIU"]
[Sun May 03 04:33:29.279915 2026] [:error] [pid 40639:tid 40714] [client 20.151.130.38:43870] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ioxi-o.php"] [unique_id "afZfma9rkyoICq7qxvFO9wAAAI0"]
[Sun May 03 04:33:29.982086 2026] [:error] [pid 40639:tid 40703] [client 20.151.130.38:43716] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ioxi-o.php"] [unique_id "afZfma9rkyoICq7qxvFO-QAAAII"]
[Sun May 03 04:33:30.715345 2026] [:error] [pid 40732:tid 40744] [client 20.151.130.38:43288] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ioxi-o.php"] [unique_id "afZfmv1lQrIvlEdzcVf3GgAAAMA"]
[Sun May 03 04:33:31.206493 2026] [:error] [pid 40639:tid 40709] [client 20.151.130.38:43873] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "afZfm69rkyoICq7qxvFO_AAAAIg"]
[Sun May 03 04:33:31.957599 2026] [:error] [pid 40732:tid 40767] [client 20.151.130.38:43842] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "afZfm_1lQrIvlEdzcVf3HwAAANc"]
[Sun May 03 04:33:32.578304 2026] [:error] [pid 40637:tid 40670] [client 20.151.130.38:43816] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "afZfnJB-U30YNJ6CyVgs6gAAABc"]
[Sun May 03 04:33:33.484212 2026] [proxy_fcgi:error] [pid 40639:tid 40722] [client 20.151.130.38:43894] AH01071: Got error 'Primary script unknown'
[Sun May 03 04:33:33.718938 2026] [proxy_fcgi:error] [pid 40639:tid 40715] [client 20.151.130.38:43894] AH01071: Got error 'Primary script unknown'
[Sun May 03 04:33:33.943596 2026] [proxy_fcgi:error] [pid 40639:tid 40704] [client 20.151.130.38:43894] AH01071: Got error 'Primary script unknown'
[Sun May 03 04:33:34.154299 2026] [proxy_fcgi:error] [pid 40639:tid 40706] [client 20.151.130.38:43894] AH01071: Got error 'Primary script unknown'
[Sun May 03 04:33:34.378713 2026] [proxy_fcgi:error] [pid 40639:tid 40710] [client 20.151.130.38:43894] AH01071: Got error 'Primary script unknown'
[Sun May 03 04:33:34.983489 2026] [proxy_fcgi:error] [pid 40639:tid 40705] [client 20.151.130.38:43894] AH01071: Got error 'Primary script unknown'
[Sun May 03 04:33:35.196666 2026] [proxy_fcgi:error] [pid 40639:tid 40721] [client 20.151.130.38:43894] AH01071: Got error 'Primary script unknown'
[Sun May 03 04:33:35.619288 2026] [proxy_fcgi:error] [pid 40639:tid 40712] [client 20.151.130.38:43894] AH01071: Got error 'Primary script unknown'
[Sun May 03 04:33:35.826581 2026] [:error] [pid 40639:tid 40722] [client 20.151.130.38:43894] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-blog.php"] [unique_id "afZfn69rkyoICq7qxvFPDgAAAJU"]
[Sun May 03 04:33:37.353711 2026] [:error] [pid 40732:tid 40762] [client 20.151.130.38:43935] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-blog.php"] [unique_id "afZfof1lQrIvlEdzcVf3LQAAANI"]
[Sun May 03 04:33:37.950433 2026] [:error] [pid 40732:tid 40760] [client 20.151.130.38:43901] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-blog.php"] [unique_id "afZfof1lQrIvlEdzcVf3MAAAANA"]
[Sun May 03 04:33:38.674685 2026] [:error] [pid 40637:tid 40647] [client 20.151.130.38:43942] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-blog.php"] [unique_id "afZfopB-U30YNJ6CyVgs8gAAAAA"]
[Sun May 03 04:33:39.498895 2026] [:error] [pid 40638:tid 40683] [client 20.151.130.38:43792] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "afZfo_h3VcFjJ7H1mBaYGQAAAEk"]
[Sun May 03 04:33:40.338125 2026] [:error] [pid 40639:tid 40705] [client 20.151.130.38:43793] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "afZfpK9rkyoICq7qxvFPEQAAAIQ"]
[Sun May 03 04:33:41.506524 2026] [:error] [pid 40732:tid 40744] [client 20.151.130.38:43954] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "afZfpf1lQrIvlEdzcVf3OwAAAMA"]
[Sun May 03 04:33:42.823326 2026] [:error] [pid 40732:tid 40757] [client 20.151.130.38:43788] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "afZfpv1lQrIvlEdzcVf3QQAAAM0"]
[Sun May 03 04:33:43.524245 2026] [:error] [pid 40732:tid 40750] [client 20.151.130.38:43821] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "afZfp_1lQrIvlEdzcVf3RAAAAMY"]
[Sun May 03 04:33:44.276308 2026] [:error] [pid 40732:tid 40763] [client 20.151.130.38:43777] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "afZfqP1lQrIvlEdzcVf3SAAAANM"]
[Sun May 03 04:33:45.077060 2026] [:error] [pid 40732:tid 40752] [client 20.151.130.38:43278] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "afZfqf1lQrIvlEdzcVf3TQAAAMg"]
[Sun May 03 04:33:45.594814 2026] [:error] [pid 40637:tid 40647] [client 20.151.130.38:43852] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "afZfqZB-U30YNJ6CyVgs_AAAAAA"]
[Sun May 03 04:33:46.251824 2026] [:error] [pid 40639:tid 40710] [client 20.151.130.38:43865] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/8xyz.php"] [unique_id "afZfqq9rkyoICq7qxvFPGAAAAIk"]
[Sun May 03 04:33:47.156556 2026] [:error] [pid 40732:tid 40765] [client 20.151.130.38:43900] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/8xyz.php"] [unique_id "afZfq_1lQrIvlEdzcVf3VwAAANU"]
[Sun May 03 04:33:47.793210 2026] [:error] [pid 40732:tid 40756] [client 20.151.130.38:43785] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/8xyz.php"] [unique_id "afZfq_1lQrIvlEdzcVf3WgAAAMw"]
[Sun May 03 04:33:48.390759 2026] [:error] [pid 40639:tid 40706] [client 20.151.130.38:43825] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/8xyz.php"] [unique_id "afZfrK9rkyoICq7qxvFPGwAAAIU"]
[Sun May 03 04:33:49.248776 2026] [:error] [pid 40639:tid 40714] [client 20.151.130.38:43886] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/adminfuns.php"] [unique_id "afZfra9rkyoICq7qxvFPHgAAAI0"]
[Sun May 03 04:33:49.706573 2026] [:error] [pid 40732:tid 40756] [client 20.151.130.38:44025] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/adminfuns.php"] [unique_id "afZfrf1lQrIvlEdzcVf3ZAAAAMw"]
[Sun May 03 04:33:50.215845 2026] [:error] [pid 40732:tid 40750] [client 20.151.130.38:43833] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/adminfuns.php"] [unique_id "afZfrv1lQrIvlEdzcVf3aAAAAMY"]
[Sun May 03 04:33:50.760533 2026] [:error] [pid 40732:tid 40755] [client 20.151.130.38:44008] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/adminfuns.php"] [unique_id "afZfrv1lQrIvlEdzcVf3awAAAMs"]
[Sun May 03 04:33:51.199736 2026] [:error] [pid 40639:tid 40716] [client 20.151.130.38:43949] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/goods.php"] [unique_id "afZfr69rkyoICq7qxvFPHwAAAI8"]
[Sun May 03 04:33:51.872707 2026] [:error] [pid 40639:tid 40722] [client 20.151.130.38:43877] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/goods.php"] [unique_id "afZfr69rkyoICq7qxvFPIAAAAJU"]
[Sun May 03 04:33:52.472321 2026] [:error] [pid 40732:tid 40751] [client 20.151.130.38:43781] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/goods.php"] [unique_id "afZfsP1lQrIvlEdzcVf3cwAAAMc"]
[Sun May 03 04:33:53.380121 2026] [:error] [pid 40639:tid 40711] [client 20.151.130.38:43863] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/goods.php"] [unique_id "afZfsa9rkyoICq7qxvFPKQAAAIo"]
[Sun May 03 04:33:54.033516 2026] [:error] [pid 40732:tid 40760] [client 20.151.130.38:43794] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ms-edit.php"] [unique_id "afZfsv1lQrIvlEdzcVf3dQAAANA"]
[Sun May 03 04:33:54.651151 2026] [:error] [pid 40732:tid 40758] [client 20.151.130.38:43804] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ms-edit.php"] [unique_id "afZfsv1lQrIvlEdzcVf3eAAAAM4"]
[Sun May 03 04:33:55.195120 2026] [:error] [pid 40639:tid 40703] [client 20.151.130.38:43776] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ms-edit.php"] [unique_id "afZfs69rkyoICq7qxvFPKwAAAII"]
[Sun May 03 04:33:55.759896 2026] [:error] [pid 40732:tid 40748] [client 20.151.130.38:43940] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ms-edit.php"] [unique_id "afZfs_1lQrIvlEdzcVf3fgAAAMQ"]
[Sun May 03 04:33:56.458994 2026] [:error] [pid 40732:tid 40749] [client 20.151.130.38:43746] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/222.php"] [unique_id "afZftP1lQrIvlEdzcVf3ggAAAMU"]
[Sun May 03 04:33:57.001595 2026] [:error] [pid 40732:tid 40757] [client 20.151.130.38:43906] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/222.php"] [unique_id "afZftf1lQrIvlEdzcVf3jAAAAM0"]
[Sun May 03 04:33:57.635118 2026] [:error] [pid 40732:tid 40762] [client 20.151.130.38:43933] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/222.php"] [unique_id "afZftf1lQrIvlEdzcVf3kQAAANI"]
[Sun May 03 04:33:58.905401 2026] [:error] [pid 40637:tid 40668] [client 20.151.130.38:43859] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/222.php"] [unique_id "afZftpB-U30YNJ6CyVgtCAAAABU"]
[Sun May 03 04:33:59.683145 2026] [:error] [pid 40638:tid 40686] [client 20.151.130.38:43801] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/cgi-bin/index.php"] [unique_id "afZft_h3VcFjJ7H1mBaYMQAAAEw"]
[Sun May 03 04:34:00.431383 2026] [:error] [pid 40639:tid 40722] [client 20.151.130.38:43955] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/cgi-bin/index.php"] [unique_id "afZfuK9rkyoICq7qxvFPOwAAAJU"]
[Sun May 03 04:34:01.194323 2026] [:error] [pid 40639:tid 40721] [client 20.151.130.38:43893] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/cgi-bin/index.php"] [unique_id "afZfua9rkyoICq7qxvFPPwAAAJQ"]
[Sun May 03 04:34:01.936081 2026] [:error] [pid 40639:tid 40718] [client 20.151.130.38:43811] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/cgi-bin/index.php"] [unique_id "afZfua9rkyoICq7qxvFPQwAAAJE"]
[Sun May 03 04:34:02.898589 2026] [:error] [pid 40637:tid 40653] [client 20.151.130.38:43723] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/fff.php"] [unique_id "afZfupB-U30YNJ6CyVgtDQAAAAY"]
[Sun May 03 04:34:03.695716 2026] [:error] [pid 40732:tid 40759] [client 20.151.130.38:43965] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/fff.php"] [unique_id "afZfu_1lQrIvlEdzcVf3owAAAM8"]
[Sun May 03 04:34:04.588300 2026] [:error] [pid 40732:tid 40747] [client 20.151.130.38:43783] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/fff.php"] [unique_id "afZfvP1lQrIvlEdzcVf3pgAAAMM"]
[Sun May 03 04:34:05.147169 2026] [:error] [pid 40732:tid 40758] [client 20.151.130.38:43778] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/fff.php"] [unique_id "afZfvf1lQrIvlEdzcVf3qwAAAM4"]
[Sun May 03 04:34:05.958467 2026] [:error] [pid 40638:tid 40686] [client 20.151.130.38:43715] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/"] [unique_id "afZfvfh3VcFjJ7H1mBaYOQAAAEw"]
[Sun May 03 04:34:06.925000 2026] [:error] [pid 40639:tid 40723] [client 20.151.130.38:43810] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/"] [unique_id "afZfvq9rkyoICq7qxvFPVgAAAJY"]
[Sun May 03 04:34:07.509678 2026] [:error] [pid 40732:tid 40758] [client 20.151.130.38:43826] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/"] [unique_id "afZfv_1lQrIvlEdzcVf3tQAAAM4"]
[Sun May 03 04:34:08.137669 2026] [:error] [pid 40732:tid 40768] [client 20.151.130.38:43882] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/"] [unique_id "afZfwP1lQrIvlEdzcVf3uQAAANg"]
[Sun May 03 04:34:08.753092 2026] [:error] [pid 40638:tid 40684] [client 20.151.130.38:43897] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/makeasmtp.php"] [unique_id "afZfwPh3VcFjJ7H1mBaYPwAAAEo"]
[Sun May 03 04:34:09.219063 2026] [:error] [pid 40637:tid 40654] [client 20.151.130.38:43714] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/makeasmtp.php"] [unique_id "afZfwZB-U30YNJ6CyVgtEQAAAAc"]
[Sun May 03 04:34:10.019604 2026] [:error] [pid 40639:tid 40717] [client 20.151.130.38:43872] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/makeasmtp.php"] [unique_id "afZfwq9rkyoICq7qxvFPXAAAAJA"]
[Sun May 03 04:34:10.910147 2026] [:error] [pid 40732:tid 40762] [client 20.151.130.38:43840] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/makeasmtp.php"] [unique_id "afZfwv1lQrIvlEdzcVf3xAAAANI"]
[Sun May 03 04:34:11.368961 2026] [:error] [pid 40732:tid 40752] [client 20.151.130.38:43845] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/admin1.php"] [unique_id "afZfw_1lQrIvlEdzcVf3yAAAAMg"]
[Sun May 03 04:34:11.997347 2026] [:error] [pid 40638:tid 40695] [client 20.151.130.38:43898] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/admin1.php"] [unique_id "afZfw_h3VcFjJ7H1mBaYQwAAAFU"]
[Sun May 03 04:34:12.528188 2026] [:error] [pid 40638:tid 40686] [client 20.151.130.38:43881] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/admin1.php"] [unique_id "afZfxPh3VcFjJ7H1mBaYRQAAAEw"]
[Sun May 03 04:34:13.176685 2026] [:error] [pid 40637:tid 40657] [client 20.151.130.38:43809] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/admin1.php"] [unique_id "afZfxZB-U30YNJ6CyVgtFAAAAAo"]
[Sun May 03 04:34:13.930621 2026] [:error] [pid 40637:tid 40656] [client 20.151.130.38:43962] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "afZfxZB-U30YNJ6CyVgtFgAAAAk"]
[Sun May 03 04:34:14.700917 2026] [:error] [pid 40732:tid 40752] [client 20.151.130.38:43170] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "afZfxv1lQrIvlEdzcVf30AAAAMg"]
[Sun May 03 04:34:15.412684 2026] [:error] [pid 40639:tid 40707] [client 20.151.130.38:43730] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "afZfx69rkyoICq7qxvFPZgAAAIY"]
[Sun May 03 04:34:16.069576 2026] [:error] [pid 40732:tid 40755] [client 20.151.130.38:43736] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "afZfyP1lQrIvlEdzcVf31wAAAMs"]
[Sun May 03 04:34:16.572700 2026] [:error] [pid 40639:tid 40710] [client 20.151.130.38:43880] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/BDKR28WP.php"] [unique_id "afZfyK9rkyoICq7qxvFPagAAAIk"]
[Sun May 03 04:34:17.044786 2026] [:error] [pid 40732:tid 40764] [client 20.151.130.38:43928] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/BDKR28WP.php"] [unique_id "afZfyf1lQrIvlEdzcVf32wAAANQ"]
[Sun May 03 04:34:17.716677 2026] [:error] [pid 40732:tid 40759] [client 20.151.130.38:43829] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/BDKR28WP.php"] [unique_id "afZfyf1lQrIvlEdzcVf33QAAAM8"]
[Sun May 03 04:34:18.371352 2026] [:error] [pid 40732:tid 40747] [client 20.151.130.38:43719] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/BDKR28WP.php"] [unique_id "afZfyv1lQrIvlEdzcVf34AAAAMM"]
[Sun May 03 04:34:18.975287 2026] [:error] [pid 40637:tid 40650] [client 20.151.130.38:43805] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/l10n/"] [unique_id "afZfypB-U30YNJ6CyVgtHgAAAAM"]
[Sun May 03 04:34:19.630973 2026] [:error] [pid 40638:tid 40676] [client 20.151.130.38:43861] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/l10n/"] [unique_id "afZfy_h3VcFjJ7H1mBaYTwAAAEI"]
[Sun May 03 04:34:20.273702 2026] [:error] [pid 40637:tid 40656] [client 20.151.130.38:43798] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/l10n/"] [unique_id "afZfzJB-U30YNJ6CyVgtIQAAAAk"]
[Sun May 03 04:34:21.015264 2026] [:error] [pid 40732:tid 40766] [client 20.151.130.38:43771] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/l10n/"] [unique_id "afZfzf1lQrIvlEdzcVf35wAAANY"]
[Sun May 03 04:34:21.551991 2026] [:error] [pid 40638:tid 40679] [client 20.151.130.38:43795] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/uploads/"] [unique_id "afZfzfh3VcFjJ7H1mBaYUAAAAEU"]
[Sun May 03 04:34:22.459532 2026] [:error] [pid 40639:tid 40716] [client 20.151.130.38:43884] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/uploads/"] [unique_id "afZfzq9rkyoICq7qxvFPdAAAAI8"]
[Sun May 03 04:34:23.142125 2026] [:error] [pid 40639:tid 40713] [client 20.151.130.38:43814] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/uploads/"] [unique_id "afZfz69rkyoICq7qxvFPdgAAAIw"]
[Sun May 03 04:34:24.097688 2026] [:error] [pid 40732:tid 40768] [client 20.151.130.38:43876] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/uploads/"] [unique_id "afZf0P1lQrIvlEdzcVf37gAAANg"]
[Sun May 03 04:34:24.750296 2026] [:error] [pid 40639:tid 40706] [client 20.151.130.38:43878] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp.php"] [unique_id "afZf0K9rkyoICq7qxvFPdwAAAIU"]
[Sun May 03 04:34:25.472702 2026] [:error] [pid 40732:tid 40751] [client 20.151.130.38:43758] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp.php"] [unique_id "afZf0f1lQrIvlEdzcVf39QAAAMc"]
[Sun May 03 04:34:26.155669 2026] [:error] [pid 40637:tid 40667] [client 20.151.130.38:43888] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp.php"] [unique_id "afZf0pB-U30YNJ6CyVgtJgAAABQ"]
[Sun May 03 04:34:26.649271 2026] [:error] [pid 40732:tid 40749] [client 20.151.130.38:43869] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp.php"] [unique_id "afZf0v1lQrIvlEdzcVf3-AAAAMU"]
[Sun May 03 04:34:27.460764 2026] [:error] [pid 40732:tid 40756] [client 20.151.130.38:43895] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "afZf0_1lQrIvlEdzcVf3-wAAAMw"]
[Sun May 03 04:34:28.291644 2026] [:error] [pid 40639:tid 40704] [client 20.151.130.38:43764] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "afZf1K9rkyoICq7qxvFPewAAAIM"]
[Sun May 03 04:34:28.806758 2026] [:error] [pid 40732:tid 40746] [client 20.151.130.38:43651] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "afZf1P1lQrIvlEdzcVf3_gAAAMI"]
[Sun May 03 04:34:29.494152 2026] [:error] [pid 40637:tid 40649] [client 20.151.130.38:43855] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "afZf1ZB-U30YNJ6CyVgtKgAAAAI"]
[Sun May 03 04:34:30.148895 2026] [:error] [pid 40732:tid 40749] [client 20.151.130.38:43902] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/fe5.php"] [unique_id "afZf1v1lQrIvlEdzcVf4AQAAAMU"]
[Sun May 03 04:34:30.935476 2026] [:error] [pid 40639:tid 40715] [client 20.151.130.38:43266] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/fe5.php"] [unique_id "afZf1q9rkyoICq7qxvFPgQAAAI4"]
[Sun May 03 04:34:31.510044 2026] [:error] [pid 40732:tid 40750] [client 20.151.130.38:43185] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/fe5.php"] [unique_id "afZf1_1lQrIvlEdzcVf4BgAAAMY"]
[Sun May 03 04:34:32.018591 2026] [:error] [pid 40637:tid 40648] [client 20.151.130.38:43802] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/fe5.php"] [unique_id "afZf2JB-U30YNJ6CyVgtLAAAAAE"]
[Sun May 03 04:34:32.873467 2026] [:error] [pid 40639:tid 40718] [client 20.151.130.38:43885] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "afZf2K9rkyoICq7qxvFPhAAAAJE"]
[Sun May 03 04:34:34.058294 2026] [:error] [pid 40638:tid 40676] [client 20.151.130.38:43854] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "afZf2vh3VcFjJ7H1mBaYWAAAAEI"]
[Sun May 03 04:34:34.565453 2026] [:error] [pid 40639:tid 40715] [client 20.151.130.38:43271] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "afZf2q9rkyoICq7qxvFPiwAAAI4"]
[Sun May 03 04:34:35.685891 2026] [proxy_fcgi:error] [pid 40732:tid 40750] [client 20.151.130.38:43913] AH01071: Got error 'Primary script unknown'
[Sun May 03 04:34:35.893180 2026] [proxy_fcgi:error] [pid 40732:tid 40761] [client 20.151.130.38:43913] AH01071: Got error 'Primary script unknown'
[Sun May 03 04:34:36.103390 2026] [proxy_fcgi:error] [pid 40732:tid 40746] [client 20.151.130.38:43913] AH01071: Got error 'Primary script unknown'
[Sun May 03 04:34:36.536530 2026] [:error] [pid 40732:tid 40758] [client 20.151.130.38:43913] [client 20.151.130.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "afZf3P1lQrIvlEdzcVf4EQAAAM4"]
[Sun May 03 04:34:37.657031 2026] [proxy_fcgi:error] [pid 40732:tid 40763] [client 20.151.130.38:43281] AH01071: Got error 'Primary script unknown'
[Sun May 03 04:34:38.348666 2026] [proxy_fcgi:error] [pid 40732:tid 40768] [client 20.151.130.38:43281] AH01071: Got error 'Primary script unknown'
[Sun May 03 04:34:38.561954 2026] [proxy_fcgi:error] [pid 40732:tid 40744] [client 20.151.130.38:43281] AH01071: Got error 'Primary script unknown'
[Sun May 03 04:34:38.774140 2026] [proxy_fcgi:error] [pid 40732:tid 40746] [client 20.151.130.38:43281] AH01071: Got error 'Primary script unknown'
[Sun May 03 04:34:38.983575 2026] [:error] [pid 40732:tid 40747] [client 20.151.130.38:43281] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "afZf3v1lQrIvlEdzcVf4GgAAAMM"]
[Sun May 03 04:34:39.581794 2026] [:error] [pid 40637:tid 40669] [client 20.151.130.38:43838] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "afZf35B-U30YNJ6CyVgtNAAAABY"]
[Sun May 03 04:34:40.096174 2026] [:error] [pid 40639:tid 40708] [client 20.151.130.38:43724] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "afZf4K9rkyoICq7qxvFPjwAAAIc"]
[Sun May 03 04:34:40.646286 2026] [:error] [pid 40639:tid 40706] [client 20.151.130.38:43763] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "afZf4K9rkyoICq7qxvFPkAAAAIU"]
[Sun May 03 04:34:41.262060 2026] [:error] [pid 40732:tid 40758] [client 20.151.130.38:43976] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bs1.php"] [unique_id "afZf4f1lQrIvlEdzcVf4HgAAAM4"]
[Sun May 03 04:34:41.787357 2026] [:error] [pid 40639:tid 40725] [client 20.151.130.38:43726] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bs1.php"] [unique_id "afZf4a9rkyoICq7qxvFPkgAAAJg"]
[Sun May 03 04:34:42.306714 2026] [:error] [pid 40639:tid 40703] [client 20.151.130.38:43732] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bs1.php"] [unique_id "afZf4q9rkyoICq7qxvFPlAAAAII"]
[Sun May 03 04:34:43.206972 2026] [:error] [pid 40732:tid 40766] [client 20.151.130.38:43682] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bs1.php"] [unique_id "afZf4_1lQrIvlEdzcVf4IgAAANY"]
[Sun May 03 04:34:43.804776 2026] [:error] [pid 40732:tid 40750] [client 20.151.130.38:43978] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "afZf4_1lQrIvlEdzcVf4JgAAAMY"]
[Sun May 03 04:34:44.332769 2026] [:error] [pid 40732:tid 40751] [client 20.151.130.38:43903] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "afZf5P1lQrIvlEdzcVf4KQAAAMc"]
[Sun May 03 04:34:44.796276 2026] [:error] [pid 40732:tid 40748] [client 20.151.130.38:43808] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "afZf5P1lQrIvlEdzcVf4KwAAAMQ"]
[Sun May 03 04:34:45.322903 2026] [:error] [pid 40732:tid 40754] [client 20.151.130.38:43712] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "afZf5f1lQrIvlEdzcVf4LgAAAMo"]
[Sun May 03 04:34:46.229151 2026] [:error] [pid 40638:tid 40676] [client 20.151.130.38:43739] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/gettest.php"] [unique_id "afZf5vh3VcFjJ7H1mBaYawAAAEI"]
[Sun May 03 04:34:46.942051 2026] [:error] [pid 40732:tid 40758] [client 20.151.130.38:43770] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/gettest.php"] [unique_id "afZf5v1lQrIvlEdzcVf4LwAAAM4"]
[Sun May 03 04:34:47.379911 2026] [:error] [pid 40732:tid 40756] [client 20.151.130.38:43685] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/gettest.php"] [unique_id "afZf5_1lQrIvlEdzcVf4MgAAAMw"]
[Sun May 03 04:34:47.842891 2026] [:error] [pid 40639:tid 40714] [client 20.151.130.38:43977] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/gettest.php"] [unique_id "afZf569rkyoICq7qxvFPmAAAAI0"]
[Sun May 03 04:34:48.685742 2026] [:error] [pid 40732:tid 40749] [client 20.151.130.38:43316] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/file48.php"] [unique_id "afZf6P1lQrIvlEdzcVf4MwAAAMU"]
[Sun May 03 04:34:49.154897 2026] [:error] [pid 40638:tid 40695] [client 20.151.130.38:43883] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/file48.php"] [unique_id "afZf6fh3VcFjJ7H1mBaYdQAAAFU"]
[Sun May 03 04:34:49.698274 2026] [:error] [pid 40637:tid 40659] [client 20.151.130.38:43717] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/file48.php"] [unique_id "afZf6ZB-U30YNJ6CyVgtOAAAAAw"]
[Sun May 03 04:34:50.311566 2026] [:error] [pid 40732:tid 40760] [client 20.151.130.38:43725] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/file48.php"] [unique_id "afZf6v1lQrIvlEdzcVf4NgAAANA"]
[Sun May 03 04:34:51.068916 2026] [:error] [pid 40732:tid 40767] [client 20.151.130.38:43979] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/"] [unique_id "afZf6_1lQrIvlEdzcVf4OQAAANc"]
[Sun May 03 04:34:51.718941 2026] [:error] [pid 40638:tid 40679] [client 20.151.130.38:43769] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/"] [unique_id "afZf6_h3VcFjJ7H1mBaYeAAAAEU"]
[Sun May 03 04:34:52.327889 2026] [:error] [pid 40732:tid 40751] [client 20.151.130.38:43658] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/"] [unique_id "afZf7P1lQrIvlEdzcVf4PAAAAMc"]
[Sun May 03 04:34:53.113489 2026] [:error] [pid 40732:tid 40764] [client 20.151.130.38:43985] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-content/"] [unique_id "afZf7f1lQrIvlEdzcVf4PwAAANQ"]
[Sun May 03 04:34:54.019867 2026] [:error] [pid 40732:tid 40752] [client 20.151.130.38:43827] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/simple.php"] [unique_id "afZf7v1lQrIvlEdzcVf4QgAAAMg"]
[Sun May 03 04:34:54.595874 2026] [:error] [pid 40732:tid 40761] [client 20.151.130.38:43996] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/simple.php"] [unique_id "afZf7v1lQrIvlEdzcVf4RQAAANE"]
[Sun May 03 04:34:55.189837 2026] [:error] [pid 40732:tid 40750] [client 20.151.130.38:43784] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/simple.php"] [unique_id "afZf7_1lQrIvlEdzcVf4RwAAAMY"]
[Sun May 03 04:34:55.687544 2026] [:error] [pid 40732:tid 40758] [client 20.151.130.38:43760] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/simple.php"] [unique_id "afZf7_1lQrIvlEdzcVf4SgAAAM4"]
[Sun May 03 04:34:56.378832 2026] [:error] [pid 40732:tid 40748] [client 20.151.130.38:44004] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/drykl.php"] [unique_id "afZf8P1lQrIvlEdzcVf4TgAAAMQ"]
[Sun May 03 04:34:57.019185 2026] [:error] [pid 40637:tid 40650] [client 20.151.130.38:43828] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/drykl.php"] [unique_id "afZf8ZB-U30YNJ6CyVgtOwAAAAM"]
[Sun May 03 04:34:57.489530 2026] [:error] [pid 40637:tid 40656] [client 20.151.130.38:43990] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/drykl.php"] [unique_id "afZf8ZB-U30YNJ6CyVgtPQAAAAk"]
[Sun May 03 04:34:58.321462 2026] [:error] [pid 40637:tid 40670] [client 20.151.130.38:43317] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/drykl.php"] [unique_id "afZf8pB-U30YNJ6CyVgtQwAAABc"]
[Sun May 03 04:34:59.050930 2026] [:error] [pid 40638:tid 40685] [client 20.151.130.38:43313] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xxx.php"] [unique_id "afZf8_h3VcFjJ7H1mBaYewAAAEs"]
[Sun May 03 04:34:59.865319 2026] [:error] [pid 40638:tid 40688] [client 20.151.130.38:43311] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xxx.php"] [unique_id "afZf8_h3VcFjJ7H1mBaYfgAAAE4"]
[Sun May 03 04:35:00.619882 2026] [:error] [pid 40637:tid 40667] [client 20.151.130.38:43282] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xxx.php"] [unique_id "afZf9JB-U30YNJ6CyVgtSAAAABQ"]
[Sun May 03 04:35:01.432182 2026] [:error] [pid 40638:tid 40698] [client 20.151.130.38:43871] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xxx.php"] [unique_id "afZf9fh3VcFjJ7H1mBaYgwAAAFg"]
[Sun May 03 04:35:02.065413 2026] [:error] [pid 40638:tid 40697] [client 20.151.130.38:43299] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/hypo.php"] [unique_id "afZf9vh3VcFjJ7H1mBaYhAAAAFc"]
[Sun May 03 04:35:02.686374 2026] [:error] [pid 40639:tid 40725] [client 20.151.130.38:43787] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/hypo.php"] [unique_id "afZf9q9rkyoICq7qxvFPnQAAAJg"]
[Sun May 03 04:35:03.371981 2026] [:error] [pid 40637:tid 40648] [client 20.151.130.38:43729] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/hypo.php"] [unique_id "afZf95B-U30YNJ6CyVgtTQAAAAE"]
[Sun May 03 04:35:04.136905 2026] [:error] [pid 40638:tid 40679] [client 20.151.130.38:43307] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/hypo.php"] [unique_id "afZf-Ph3VcFjJ7H1mBaYhwAAAEU"]
[Sun May 03 04:35:04.873415 2026] [:error] [pid 40637:tid 40664] [client 20.151.130.38:43747] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/file18.php"] [unique_id "afZf-JB-U30YNJ6CyVgtTwAAABE"]
[Sun May 03 04:35:05.512521 2026] [:error] [pid 40638:tid 40675] [client 20.151.130.38:43899] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/file18.php"] [unique_id "afZf-fh3VcFjJ7H1mBaYiwAAAEE"]
[Sun May 03 04:35:06.094081 2026] [:error] [pid 40638:tid 40690] [client 20.151.130.38:43799] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/file18.php"] [unique_id "afZf-vh3VcFjJ7H1mBaYjAAAAFA"]
[Sun May 03 04:35:06.784752 2026] [:error] [pid 40638:tid 40677] [client 20.151.130.38:43172] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/file18.php"] [unique_id "afZf-vh3VcFjJ7H1mBaYjQAAAEM"]
[Sun May 03 04:35:07.440743 2026] [:error] [pid 40639:tid 40705] [client 20.151.130.38:43300] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xwx1.php"] [unique_id "afZf-69rkyoICq7qxvFPpAAAAIQ"]
[Sun May 03 04:35:08.100645 2026] [:error] [pid 40639:tid 40717] [client 20.151.130.38:43817] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xwx1.php"] [unique_id "afZf_K9rkyoICq7qxvFPpwAAAJA"]
[Sun May 03 04:35:08.902917 2026] [:error] [pid 40637:tid 40669] [client 20.151.130.38:43292] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xwx1.php"] [unique_id "afZf_JB-U30YNJ6CyVgtUgAAABY"]
[Sun May 03 04:35:09.493684 2026] [:error] [pid 40732:tid 40746] [client 20.151.130.38:43968] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xwx1.php"] [unique_id "afZf_f1lQrIvlEdzcVf4VQAAAMI"]
[Sun May 03 04:35:10.252688 2026] [:error] [pid 40732:tid 40759] [client 20.151.130.38:43987] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "afZf_v1lQrIvlEdzcVf4VwAAAM8"]
[Sun May 03 04:35:10.841845 2026] [:error] [pid 40732:tid 40749] [client 20.151.130.38:43972] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "afZf_v1lQrIvlEdzcVf4WwAAAMU"]
[Sun May 03 04:35:11.406502 2026] [:error] [pid 40639:tid 40718] [client 20.151.130.38:43830] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "afZf_69rkyoICq7qxvFPqwAAAJE"]
[Sun May 03 04:35:12.052008 2026] [:error] [pid 40732:tid 40747] [client 20.151.130.38:43163] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "afZgAP1lQrIvlEdzcVf4XQAAAMM"]
[Sun May 03 04:35:12.632636 2026] [:error] [pid 40638:tid 40692] [client 20.151.130.38:43306] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/chosen.php"] [unique_id "afZgAPh3VcFjJ7H1mBaYkQAAAFI"]
[Sun May 03 04:35:13.272915 2026] [:error] [pid 40638:tid 40678] [client 20.151.130.38:43302] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/chosen.php"] [unique_id "afZgAfh3VcFjJ7H1mBaYkgAAAEQ"]
[Sun May 03 04:35:13.822556 2026] [:error] [pid 40639:tid 40713] [client 20.151.130.38:43766] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/chosen.php"] [unique_id "afZgAa9rkyoICq7qxvFPrgAAAIw"]
[Sun May 03 04:35:14.456897 2026] [:error] [pid 40637:tid 40664] [client 20.151.130.38:43868] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/chosen.php"] [unique_id "afZgApB-U30YNJ6CyVgtVAAAABE"]
[Sun May 03 04:35:14.956128 2026] [:error] [pid 40638:tid 40677] [client 20.151.130.38:43279] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/admin/admin.php"] [unique_id "afZgAvh3VcFjJ7H1mBaYlAAAAEM"]
[Sun May 03 04:35:15.513955 2026] [:error] [pid 40639:tid 40703] [client 20.151.130.38:43321] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/admin/admin.php"] [unique_id "afZgA69rkyoICq7qxvFPsQAAAII"]
[Sun May 03 04:35:16.220851 2026] [:error] [pid 40637:tid 40650] [client 20.151.130.38:43790] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/admin/admin.php"] [unique_id "afZgBJB-U30YNJ6CyVgtWAAAAAM"]
[Sun May 03 04:35:16.920213 2026] [:error] [pid 40732:tid 40758] [client 20.151.130.38:43786] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/admin/admin.php"] [unique_id "afZgBP1lQrIvlEdzcVf4XwAAAM4"]
[Sun May 03 07:31:59.246773 2026] [:error] [pid 40456:tid 40461] [client 20.151.130.38:10131] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "afaJbzSujTvwdzEkjSfOdgAAAYM"]
[Sun May 03 07:31:59.659096 2026] [:error] [pid 37126:tid 37167] [client 20.151.130.38:10204] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "afaJb_R_A42N-LtDyrvbSQAAAA4"]
[Sun May 03 07:32:00.085617 2026] [:error] [pid 40456:tid 40482] [client 20.151.130.38:10239] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "afaJcDSujTvwdzEkjSfOfQAAAZg"]
[Sun May 03 07:32:00.500726 2026] [:error] [pid 40386:tid 40408] [client 20.151.130.38:10200] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "afaJcFHJDYRXUf3IbRTXCAAAANQ"]
[Mon May 04 12:08:06.770902 2026] [proxy_fcgi:error] [pid 12022:tid 12045] [client 45.94.31.15:49983] AH01071: Got error 'Primary script unknown'
[Mon May 04 12:08:07.770599 2026] [:error] [pid 11958:tid 11985] [client 45.94.31.15:50179] [client 45.94.31.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/widgets/txets.php"] [unique_id "afgbpzAK_o2NLEdfAUlUwQAAAFg"]
[Mon May 04 12:08:08.272299 2026] [:error] [pid 12022:tid 12038] [client 45.94.31.15:50348] [client 45.94.31.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/rest-api/txets.php"] [unique_id "afgbqEVhgvCNKBWnaTJxqQAAAI4"]
[Mon May 04 12:08:08.762034 2026] [:error] [pid 11959:tid 12008] [client 45.94.31.15:50455] [client 45.94.31.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/post-template/txets.php"] [unique_id "afgbqAojk2nvxs7h5Kv8TgAAANQ"]
[Mon May 04 12:08:09.752643 2026] [:error] [pid 64610:tid 64633] [client 45.94.31.15:50690] [client 45.94.31.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/txets.php"] [unique_id "afgbqWhJ7aZW62UOoWg3ZgAAARU"]
[Mon May 04 12:08:10.253306 2026] [proxy_fcgi:error] [pid 12022:tid 12042] [client 45.94.31.15:50789] AH01071: Got error 'Primary script unknown'
[Mon May 04 12:08:10.754751 2026] [proxy_fcgi:error] [pid 64610:tid 64632] [client 45.94.31.15:50868] AH01071: Got error 'Primary script unknown'
[Mon May 04 14:46:27.912515 2026] [proxy_fcgi:error] [pid 53161:tid 53223] [client 20.9.82.33:8869] AH01071: Got error 'Primary script unknown'
[Mon May 04 14:46:28.132972 2026] [proxy_fcgi:error] [pid 53161:tid 53225] [client 20.9.82.33:8869] AH01071: Got error 'Primary script unknown'
[Mon May 04 14:46:28.365476 2026] [proxy_fcgi:error] [pid 53161:tid 53221] [client 20.9.82.33:8869] AH01071: Got error 'Primary script unknown'
[Mon May 04 14:46:28.585271 2026] [proxy_fcgi:error] [pid 53161:tid 53227] [client 20.9.82.33:8869] AH01071: Got error 'Primary script unknown'
[Mon May 04 14:46:28.898412 2026] [proxy_fcgi:error] [pid 53161:tid 53234] [client 20.9.82.33:8869] AH01071: Got error 'Primary script unknown'
[Mon May 04 14:46:29.119109 2026] [proxy_fcgi:error] [pid 53161:tid 53220] [client 20.9.82.33:8869] AH01071: Got error 'Primary script unknown'
[Mon May 04 14:46:29.349923 2026] [proxy_fcgi:error] [pid 53161:tid 53230] [client 20.9.82.33:8869] AH01071: Got error 'Primary script unknown'
[Mon May 04 14:46:29.575779 2026] [proxy_fcgi:error] [pid 53161:tid 53237] [client 20.9.82.33:8869] AH01071: Got error 'Primary script unknown'
[Mon May 04 14:46:29.869872 2026] [proxy_fcgi:error] [pid 53161:tid 53229] [client 20.9.82.33:8869] AH01071: Got error 'Primary script unknown'
[Mon May 04 14:46:30.155529 2026] [proxy_fcgi:error] [pid 53161:tid 53231] [client 20.9.82.33:8869] AH01071: Got error 'Primary script unknown'
[Mon May 04 14:46:30.445282 2026] [:error] [pid 53161:tid 53233] [client 20.9.82.33:8869] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/G-In.php"] [unique_id "afhAxk5l1qgo2JEi65l6wAAAAFA"]
[Mon May 04 14:46:31.249387 2026] [:error] [pid 53248:tid 53272] [client 20.9.82.33:8922] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/G-In.php"] [unique_id "afhAxwPqlCce9bsWu6i_BQAAABY"]
[Mon May 04 14:46:31.929386 2026] [:error] [pid 53159:tid 53173] [client 20.9.82.33:8850] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/G-In.php"] [unique_id "afhAx1Zg7pq4CfE3tM-c3gAAAMo"]
[Mon May 04 14:46:32.483204 2026] [:error] [pid 53248:tid 53265] [client 20.9.82.33:8898] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/G-In.php"] [unique_id "afhAyAPqlCce9bsWu6i_CAAAAA8"]
[Mon May 04 14:46:33.006970 2026] [:error] [pid 53248:tid 53267] [client 20.9.82.33:8864] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/aj11.php"] [unique_id "afhAyQPqlCce9bsWu6i_CQAAABE"]
[Mon May 04 14:46:33.556192 2026] [:error] [pid 53160:tid 53194] [client 20.9.82.33:8957] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/aj11.php"] [unique_id "afhAyaNFKJC8NNHHXb4-cQAAAQQ"]
[Mon May 04 14:46:34.042369 2026] [:error] [pid 53248:tid 53263] [client 20.9.82.33:8945] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/aj11.php"] [unique_id "afhAygPqlCce9bsWu6i_DgAAAA0"]
[Mon May 04 14:46:34.903353 2026] [:error] [pid 53248:tid 53250] [client 20.9.82.33:8848] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/aj11.php"] [unique_id "afhAygPqlCce9bsWu6i_EAAAAAA"]
[Mon May 04 14:46:35.532430 2026] [:error] [pid 53248:tid 53252] [client 20.9.82.33:8904] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/tires.php"] [unique_id "afhAywPqlCce9bsWu6i_EwAAAAI"]
[Mon May 04 14:46:36.185567 2026] [:error] [pid 53248:tid 53256] [client 20.9.82.33:8849] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/tires.php"] [unique_id "afhAzAPqlCce9bsWu6i_FQAAAAY"]
[Mon May 04 14:46:36.787149 2026] [:error] [pid 53159:tid 53167] [client 20.9.82.33:8905] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/tires.php"] [unique_id "afhAzFZg7pq4CfE3tM-c4QAAAMQ"]
[Mon May 04 14:46:37.463683 2026] [:error] [pid 53160:tid 53201] [client 20.9.82.33:8872] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/tires.php"] [unique_id "afhAzaNFKJC8NNHHXb4-dAAAAQs"]
[Mon May 04 14:46:38.223521 2026] [:error] [pid 53159:tid 53187] [client 20.9.82.33:8910] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xroot.php"] [unique_id "afhAzlZg7pq4CfE3tM-c4wAAANg"]
[Mon May 04 14:46:38.778082 2026] [:error] [pid 53159:tid 53182] [client 20.9.82.33:8959] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xroot.php"] [unique_id "afhAzlZg7pq4CfE3tM-c5QAAANM"]
[Mon May 04 14:46:39.459910 2026] [:error] [pid 53159:tid 53178] [client 20.9.82.33:8929] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xroot.php"] [unique_id "afhAz1Zg7pq4CfE3tM-c6wAAAM8"]
[Mon May 04 14:46:40.044712 2026] [:error] [pid 53160:tid 53202] [client 20.9.82.33:8931] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xroot.php"] [unique_id "afhA0KNFKJC8NNHHXb4-ewAAAQw"]
[Mon May 04 14:46:41.060095 2026] [:error] [pid 53248:tid 53271] [client 20.9.82.33:8934] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/tea.php"] [unique_id "afhA0QPqlCce9bsWu6i_HAAAABU"]
[Mon May 04 14:46:41.618131 2026] [:error] [pid 53160:tid 53199] [client 20.9.82.33:8930] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/tea.php"] [unique_id "afhA0aNFKJC8NNHHXb4-fAAAAQk"]
[Mon May 04 14:46:42.184135 2026] [:error] [pid 53248:tid 53250] [client 20.9.82.33:8927] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/tea.php"] [unique_id "afhA0gPqlCce9bsWu6i_HwAAAAA"]
[Mon May 04 14:46:42.753766 2026] [:error] [pid 53160:tid 53203] [client 20.9.82.33:42307] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/tea.php"] [unique_id "afhA0qNFKJC8NNHHXb4-fgAAAQ0"]
[Mon May 04 14:46:43.297019 2026] [:error] [pid 53159:tid 53170] [client 20.9.82.33:8901] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/uwu.php"] [unique_id "afhA01Zg7pq4CfE3tM-c8gAAAMc"]
[Mon May 04 14:46:43.841289 2026] [:error] [pid 53160:tid 53192] [client 20.9.82.33:8938] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/uwu.php"] [unique_id "afhA06NFKJC8NNHHXb4-fwAAAQI"]
[Mon May 04 14:46:44.338529 2026] [:error] [pid 53161:tid 53218] [client 20.9.82.33:8955] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/uwu.php"] [unique_id "afhA1E5l1qgo2JEi65l6xAAAAEE"]
[Mon May 04 14:46:44.809859 2026] [:error] [pid 53160:tid 53208] [client 20.9.82.33:8862] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/uwu.php"] [unique_id "afhA1KNFKJC8NNHHXb4-ggAAARI"]
[Mon May 04 14:46:45.457464 2026] [:error] [pid 53248:tid 53269] [client 20.9.82.33:8920] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/aios-bootstrap.php"] [unique_id "afhA1QPqlCce9bsWu6i_JAAAABM"]
[Mon May 04 14:46:45.905317 2026] [:error] [pid 53159:tid 53175] [client 20.9.82.33:8870] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/aios-bootstrap.php"] [unique_id "afhA1VZg7pq4CfE3tM-c9QAAAMw"]
[Mon May 04 14:46:46.367691 2026] [:error] [pid 53248:tid 53266] [client 20.9.82.33:8897] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/aios-bootstrap.php"] [unique_id "afhA1gPqlCce9bsWu6i_JQAAABA"]
[Mon May 04 14:46:46.872032 2026] [:error] [pid 53161:tid 53241] [client 20.9.82.33:8867] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/aios-bootstrap.php"] [unique_id "afhA1k5l1qgo2JEi65l6xwAAAFg"]
[Mon May 04 14:46:47.372006 2026] [:error] [pid 53159:tid 53182] [client 20.9.82.33:8846] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/one.php"] [unique_id "afhA11Zg7pq4CfE3tM-c9wAAANM"]
[Mon May 04 14:46:47.932516 2026] [:error] [pid 53161:tid 53228] [client 20.9.82.33:8958] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/one.php"] [unique_id "afhA105l1qgo2JEi65l6ywAAAEs"]
[Mon May 04 14:46:48.602012 2026] [:error] [pid 53160:tid 53197] [client 20.9.82.33:8903] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/one.php"] [unique_id "afhA2KNFKJC8NNHHXb4-hwAAAQc"]
[Mon May 04 14:46:49.367487 2026] [:error] [pid 53161:tid 53240] [client 20.9.82.33:8911] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/one.php"] [unique_id "afhA2U5l1qgo2JEi65l6zgAAAFc"]
[Mon May 04 14:46:49.990004 2026] [:error] [pid 53159:tid 53167] [client 20.9.82.33:8952] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/006.php"] [unique_id "afhA2VZg7pq4CfE3tM-dBAAAAMQ"]
[Mon May 04 14:46:50.656351 2026] [:error] [pid 53160:tid 53193] [client 20.9.82.33:8855] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/006.php"] [unique_id "afhA2qNFKJC8NNHHXb4-iwAAAQM"]
[Mon May 04 14:46:51.278401 2026] [:error] [pid 53159:tid 53172] [client 20.9.82.33:8879] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/006.php"] [unique_id "afhA21Zg7pq4CfE3tM-dCgAAAMk"]
[Mon May 04 14:46:51.821555 2026] [:error] [pid 53159:tid 53170] [client 20.9.82.33:8861] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/006.php"] [unique_id "afhA21Zg7pq4CfE3tM-dDQAAAMc"]
[Mon May 04 14:46:52.381417 2026] [:error] [pid 53159:tid 53181] [client 20.9.82.33:42340] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/kikikoko.php"] [unique_id "afhA3FZg7pq4CfE3tM-dEgAAANI"]
[Mon May 04 14:46:53.178870 2026] [:error] [pid 53248:tid 53272] [client 20.9.82.33:8928] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/kikikoko.php"] [unique_id "afhA3QPqlCce9bsWu6i_KAAAABY"]
[Mon May 04 14:46:53.667635 2026] [:error] [pid 53161:tid 53227] [client 20.9.82.33:8841] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/kikikoko.php"] [unique_id "afhA3U5l1qgo2JEi65l60gAAAEo"]
[Mon May 04 14:46:54.327604 2026] [:error] [pid 53160:tid 53204] [client 20.9.82.33:8858] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/kikikoko.php"] [unique_id "afhA3qNFKJC8NNHHXb4-kgAAAQ4"]
[Mon May 04 14:46:54.787239 2026] [:error] [pid 53160:tid 53199] [client 20.9.82.33:8837] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/2026w.php"] [unique_id "afhA3qNFKJC8NNHHXb4-kwAAAQk"]
[Mon May 04 14:46:55.552832 2026] [:error] [pid 53159:tid 53166] [client 20.9.82.33:8939] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/2026w.php"] [unique_id "afhA31Zg7pq4CfE3tM-dIwAAAMM"]
[Mon May 04 14:46:56.103270 2026] [:error] [pid 53159:tid 53175] [client 20.9.82.33:8857] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/2026w.php"] [unique_id "afhA4FZg7pq4CfE3tM-dJQAAAMw"]
[Mon May 04 14:46:56.728194 2026] [:error] [pid 53159:tid 53186] [client 20.9.82.33:8847] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/2026w.php"] [unique_id "afhA4FZg7pq4CfE3tM-dJwAAANc"]
[Mon May 04 14:46:57.402133 2026] [:error] [pid 53160:tid 53205] [client 20.9.82.33:8914] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/11.php"] [unique_id "afhA4aNFKJC8NNHHXb4-lgAAAQ8"]
[Mon May 04 14:46:57.923921 2026] [:error] [pid 53159:tid 53180] [client 20.9.82.33:42346] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/11.php"] [unique_id "afhA4VZg7pq4CfE3tM-dKQAAANE"]
[Mon May 04 14:46:58.638193 2026] [:error] [pid 53159:tid 53164] [client 20.9.82.33:8883] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/11.php"] [unique_id "afhA4lZg7pq4CfE3tM-dKgAAAME"]
[Mon May 04 14:46:59.188822 2026] [:error] [pid 53159:tid 53178] [client 20.9.82.33:42306] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/11.php"] [unique_id "afhA41Zg7pq4CfE3tM-dKwAAAM8"]
[Mon May 04 14:46:59.831867 2026] [:error] [pid 53248:tid 53256] [client 20.9.82.33:8844] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/amxloxxr.php"] [unique_id "afhA4wPqlCce9bsWu6i_KgAAAAY"]
[Mon May 04 14:47:00.483904 2026] [:error] [pid 53161:tid 53234] [client 20.9.82.33:8851] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/amxloxxr.php"] [unique_id "afhA5E5l1qgo2JEi65l61wAAAFE"]
[Mon May 04 14:47:01.146244 2026] [:error] [pid 53160:tid 53197] [client 20.9.82.33:8940] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/amxloxxr.php"] [unique_id "afhA5aNFKJC8NNHHXb4-nAAAAQc"]
[Mon May 04 14:47:01.739098 2026] [:error] [pid 53159:tid 53183] [client 20.9.82.33:8950] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/amxloxxr.php"] [unique_id "afhA5VZg7pq4CfE3tM-dLgAAANQ"]
[Mon May 04 14:47:02.383142 2026] [:error] [pid 53161:tid 53228] [client 20.9.82.33:8839] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/qhupyoon.php"] [unique_id "afhA5k5l1qgo2JEi65l63QAAAEs"]
[Mon May 04 14:47:02.854558 2026] [:error] [pid 53159:tid 53169] [client 20.9.82.33:8890] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/qhupyoon.php"] [unique_id "afhA5lZg7pq4CfE3tM-dLwAAAMY"]
[Mon May 04 14:47:03.382125 2026] [:error] [pid 53161:tid 53217] [client 20.9.82.33:42319] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/qhupyoon.php"] [unique_id "afhA505l1qgo2JEi65l63wAAAEA"]
[Mon May 04 14:47:03.884338 2026] [:error] [pid 53160:tid 53205] [client 20.9.82.33:42363] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/qhupyoon.php"] [unique_id "afhA56NFKJC8NNHHXb4-nQAAAQ8"]
[Mon May 04 14:47:04.465149 2026] [:error] [pid 53248:tid 53274] [client 20.9.82.33:8886] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/dx.php"] [unique_id "afhA6APqlCce9bsWu6i_LgAAABg"]
[Mon May 04 14:47:05.144741 2026] [:error] [pid 53248:tid 53250] [client 20.9.82.33:8868] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/dx.php"] [unique_id "afhA6QPqlCce9bsWu6i_LwAAAAA"]
[Mon May 04 14:47:05.766519 2026] [:error] [pid 53160:tid 53196] [client 20.9.82.33:42355] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/dx.php"] [unique_id "afhA6aNFKJC8NNHHXb4-nwAAAQY"]
[Mon May 04 14:47:06.317519 2026] [:error] [pid 53160:tid 53191] [client 20.9.82.33:8935] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/dx.php"] [unique_id "afhA6qNFKJC8NNHHXb4-oQAAAQE"]
[Mon May 04 14:47:06.769971 2026] [:error] [pid 53160:tid 53197] [client 20.9.82.33:8902] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/fs.php"] [unique_id "afhA6qNFKJC8NNHHXb4-owAAAQc"]
[Mon May 04 14:47:07.333571 2026] [:error] [pid 53160:tid 53190] [client 20.9.82.33:8918] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/fs.php"] [unique_id "afhA66NFKJC8NNHHXb4-pQAAAQA"]
[Mon May 04 14:47:07.896072 2026] [:error] [pid 53161:tid 53228] [client 20.9.82.33:42342] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/fs.php"] [unique_id "afhA605l1qgo2JEi65l64wAAAEs"]
[Mon May 04 14:47:08.319039 2026] [:error] [pid 53248:tid 53258] [client 20.9.82.33:8866] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/fs.php"] [unique_id "afhA7APqlCce9bsWu6i_MAAAAAg"]
[Mon May 04 14:47:08.869942 2026] [:error] [pid 53161:tid 53222] [client 20.9.82.33:8853] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/6ap7e.php"] [unique_id "afhA7E5l1qgo2JEi65l65QAAAEU"]
[Mon May 04 14:47:09.378467 2026] [:error] [pid 53159:tid 53167] [client 20.9.82.33:42322] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/6ap7e.php"] [unique_id "afhA7VZg7pq4CfE3tM-dNQAAAMQ"]
[Mon May 04 14:47:09.969180 2026] [:error] [pid 53248:tid 53262] [client 20.9.82.33:8954] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/6ap7e.php"] [unique_id "afhA7QPqlCce9bsWu6i_NAAAAAw"]
[Mon May 04 14:47:10.649347 2026] [:error] [pid 53160:tid 53194] [client 20.9.82.33:42317] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/6ap7e.php"] [unique_id "afhA7qNFKJC8NNHHXb4-pwAAAQQ"]
[Mon May 04 14:47:11.280017 2026] [:error] [pid 53248:tid 53269] [client 20.9.82.33:8933] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/cilus.php"] [unique_id "afhA7wPqlCce9bsWu6i_NQAAABM"]
[Mon May 04 14:47:11.953785 2026] [:error] [pid 53159:tid 53164] [client 20.9.82.33:8925] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/cilus.php"] [unique_id "afhA71Zg7pq4CfE3tM-dOgAAAME"]
[Mon May 04 14:47:12.533534 2026] [:error] [pid 53248:tid 53265] [client 20.9.82.33:42358] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/cilus.php"] [unique_id "afhA8APqlCce9bsWu6i_OQAAAA8"]
[Mon May 04 14:47:13.174916 2026] [:error] [pid 53248:tid 53268] [client 20.9.82.33:8921] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/cilus.php"] [unique_id "afhA8QPqlCce9bsWu6i_OwAAABI"]
[Mon May 04 14:47:13.675074 2026] [:error] [pid 53248:tid 53255] [client 20.9.82.33:8896] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/link.php"] [unique_id "afhA8QPqlCce9bsWu6i_PgAAAAU"]
[Mon May 04 14:47:14.198873 2026] [:error] [pid 53248:tid 53270] [client 20.9.82.33:8842] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/link.php"] [unique_id "afhA8gPqlCce9bsWu6i_QAAAABQ"]
[Mon May 04 14:47:14.677088 2026] [:error] [pid 53248:tid 53258] [client 20.9.82.33:8909] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/link.php"] [unique_id "afhA8gPqlCce9bsWu6i_QQAAAAg"]
[Mon May 04 14:47:15.475531 2026] [:error] [pid 53161:tid 53219] [client 20.9.82.33:42316] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/link.php"] [unique_id "afhA805l1qgo2JEi65l66AAAAEI"]
[Mon May 04 14:47:15.950047 2026] [:error] [pid 53248:tid 53255] [client 20.9.82.33:8871] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/fone1.php"] [unique_id "afhA8wPqlCce9bsWu6i_RgAAAAU"]
[Mon May 04 14:47:16.437732 2026] [:error] [pid 53248:tid 53274] [client 20.9.82.33:42336] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/fone1.php"] [unique_id "afhA9APqlCce9bsWu6i_SAAAABg"]
[Mon May 04 14:47:17.061678 2026] [:error] [pid 53161:tid 53235] [client 20.9.82.33:8892] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/fone1.php"] [unique_id "afhA9U5l1qgo2JEi65l66gAAAFI"]
[Mon May 04 14:47:17.680174 2026] [:error] [pid 53248:tid 53257] [client 20.9.82.33:8833] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/fone1.php"] [unique_id "afhA9QPqlCce9bsWu6i_SgAAAAc"]
[Mon May 04 14:47:18.157738 2026] [:error] [pid 53248:tid 53254] [client 20.9.82.33:8838] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/zogy1.php"] [unique_id "afhA9gPqlCce9bsWu6i_SwAAAAQ"]
[Mon May 04 14:47:18.784809 2026] [:error] [pid 53248:tid 53267] [client 20.9.82.33:8932] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/zogy1.php"] [unique_id "afhA9gPqlCce9bsWu6i_TQAAABE"]
[Mon May 04 14:47:19.423085 2026] [:error] [pid 53248:tid 53268] [client 20.9.82.33:8877] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/zogy1.php"] [unique_id "afhA9wPqlCce9bsWu6i_TwAAABI"]
[Mon May 04 14:47:19.898836 2026] [:error] [pid 53248:tid 53266] [client 20.9.82.33:8881] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/zogy1.php"] [unique_id "afhA9wPqlCce9bsWu6i_UAAAABA"]
[Mon May 04 14:47:20.447129 2026] [:error] [pid 53248:tid 53257] [client 20.9.82.33:8880] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/zoper1.php"] [unique_id "afhA-APqlCce9bsWu6i_UQAAAAc"]
[Mon May 04 14:47:21.004172 2026] [:error] [pid 53161:tid 53220] [client 20.9.82.33:8924] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/zoper1.php"] [unique_id "afhA-U5l1qgo2JEi65l68wAAAEM"]
[Mon May 04 14:47:21.574351 2026] [:error] [pid 53248:tid 53267] [client 20.9.82.33:42242] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/zoper1.php"] [unique_id "afhA-QPqlCce9bsWu6i_VwAAABE"]
[Mon May 04 14:47:22.140637 2026] [:error] [pid 53248:tid 53271] [client 20.9.82.33:8873] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/zoper1.php"] [unique_id "afhA-gPqlCce9bsWu6i_WQAAABU"]
[Mon May 04 14:47:22.753124 2026] [:error] [pid 53248:tid 53273] [client 20.9.82.33:8836] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/atkno.php"] [unique_id "afhA-gPqlCce9bsWu6i_XAAAABc"]
[Mon May 04 14:47:23.222956 2026] [:error] [pid 53161:tid 53232] [client 20.9.82.33:8884] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/atkno.php"] [unique_id "afhA-05l1qgo2JEi65l69AAAAE8"]
[Mon May 04 14:47:23.792108 2026] [:error] [pid 53161:tid 53235] [client 20.9.82.33:42244] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/atkno.php"] [unique_id "afhA-05l1qgo2JEi65l69QAAAFI"]
[Mon May 04 14:47:24.313999 2026] [:error] [pid 53159:tid 53165] [client 20.9.82.33:8832] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/atkno.php"] [unique_id "afhA_FZg7pq4CfE3tM-dPgAAAMI"]
[Mon May 04 14:47:24.988818 2026] [:error] [pid 53160:tid 53214] [client 20.9.82.33:8951] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/de.php"] [unique_id "afhA_KNFKJC8NNHHXb4-rAAAARg"]
[Mon May 04 14:47:25.708123 2026] [:error] [pid 53248:tid 53265] [client 20.9.82.33:8894] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/de.php"] [unique_id "afhA_QPqlCce9bsWu6i_YgAAAA8"]
[Mon May 04 14:47:26.183940 2026] [:error] [pid 53160:tid 53213] [client 20.9.82.33:42308] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/de.php"] [unique_id "afhA_qNFKJC8NNHHXb4-rwAAARc"]
[Mon May 04 14:47:26.839752 2026] [:error] [pid 53161:tid 53218] [client 20.9.82.33:8899] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/de.php"] [unique_id "afhA_k5l1qgo2JEi65l6-wAAAEE"]
[Mon May 04 14:47:27.494214 2026] [:error] [pid 53248:tid 53258] [client 20.9.82.33:8944] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/insta.php"] [unique_id "afhA_wPqlCce9bsWu6i_YwAAAAg"]
[Mon May 04 14:47:27.963965 2026] [:error] [pid 53161:tid 53237] [client 20.9.82.33:8859] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/insta.php"] [unique_id "afhA_05l1qgo2JEi65l6_gAAAFQ"]
[Mon May 04 14:47:28.601116 2026] [:error] [pid 53248:tid 53265] [client 20.9.82.33:42345] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/insta.php"] [unique_id "afhBAAPqlCce9bsWu6i_ZwAAAA8"]
[Mon May 04 14:47:29.435467 2026] [:error] [pid 53161:tid 53221] [client 20.9.82.33:8863] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/insta.php"] [unique_id "afhBAU5l1qgo2JEi65l7AgAAAEQ"]
[Mon May 04 14:47:30.082406 2026] [proxy_fcgi:error] [pid 53248:tid 53273] [client 20.9.82.33:8916] AH01071: Got error 'Primary script unknown'
[Mon May 04 14:47:30.275627 2026] [proxy_fcgi:error] [pid 53248:tid 53256] [client 20.9.82.33:8916] AH01071: Got error 'Primary script unknown'
[Mon May 04 14:47:30.471041 2026] [proxy_fcgi:error] [pid 53248:tid 53274] [client 20.9.82.33:8916] AH01071: Got error 'Primary script unknown'
[Mon May 04 14:47:30.675349 2026] [proxy_fcgi:error] [pid 53248:tid 53257] [client 20.9.82.33:8916] AH01071: Got error 'Primary script unknown'
[Mon May 04 14:47:30.867814 2026] [proxy_fcgi:error] [pid 53248:tid 53269] [client 20.9.82.33:8916] AH01071: Got error 'Primary script unknown'
[Mon May 04 14:47:31.066476 2026] [proxy_fcgi:error] [pid 53248:tid 53267] [client 20.9.82.33:8916] AH01071: Got error 'Primary script unknown'
[Mon May 04 14:47:31.297988 2026] [proxy_fcgi:error] [pid 53248:tid 53265] [client 20.9.82.33:8916] AH01071: Got error 'Primary script unknown'
[Mon May 04 14:47:31.490742 2026] [proxy_fcgi:error] [pid 53248:tid 53255] [client 20.9.82.33:8916] AH01071: Got error 'Primary script unknown'
[Mon May 04 14:47:31.684418 2026] [proxy_fcgi:error] [pid 53248:tid 53264] [client 20.9.82.33:8916] AH01071: Got error 'Primary script unknown'
[Mon May 04 14:47:31.883114 2026] [proxy_fcgi:error] [pid 53248:tid 53266] [client 20.9.82.33:8916] AH01071: Got error 'Primary script unknown'
[Mon May 04 14:47:32.075464 2026] [proxy_fcgi:error] [pid 53248:tid 53271] [client 20.9.82.33:8916] AH01071: Got error 'Primary script unknown'
[Mon May 04 14:47:32.284086 2026] [:error] [pid 53248:tid 53272] [client 20.9.82.33:8916] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/e3.php"] [unique_id "afhBBAPqlCce9bsWu6i_eAAAABY"]
[Mon May 04 14:47:33.180312 2026] [:error] [pid 53248:tid 53256] [client 20.9.82.33:8937] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/e3.php"] [unique_id "afhBBQPqlCce9bsWu6i_fQAAAAY"]
[Mon May 04 14:47:34.357496 2026] [:error] [pid 53248:tid 53267] [client 20.9.82.33:8852] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/e3.php"] [unique_id "afhBBgPqlCce9bsWu6i_hwAAABE"]
[Mon May 04 14:47:35.150221 2026] [:error] [pid 53248:tid 53271] [client 20.9.82.33:8845] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/e3.php"] [unique_id "afhBBwPqlCce9bsWu6i_iwAAABU"]
[Mon May 04 14:47:35.807227 2026] [:error] [pid 53161:tid 53225] [client 20.9.82.33:8876] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/fkohd.php"] [unique_id "afhBB05l1qgo2JEi65l7GwAAAEg"]
[Mon May 04 14:47:37.246260 2026] [:error] [pid 53159:tid 53167] [client 20.9.82.33:8900] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/fkohd.php"] [unique_id "afhBCVZg7pq4CfE3tM-dSQAAAMQ"]
[Mon May 04 14:47:38.088040 2026] [:error] [pid 53248:tid 53267] [client 20.9.82.33:42252] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/fkohd.php"] [unique_id "afhBCgPqlCce9bsWu6i_kwAAABE"]
[Mon May 04 14:47:39.073121 2026] [:error] [pid 53248:tid 53250] [client 20.9.82.33:42309] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/fkohd.php"] [unique_id "afhBCwPqlCce9bsWu6i_lgAAAAA"]
[Mon May 04 14:47:39.989891 2026] [:error] [pid 53248:tid 53260] [client 20.9.82.33:42304] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws78.php"] [unique_id "afhBCwPqlCce9bsWu6i_mQAAAAo"]
[Mon May 04 14:47:40.939471 2026] [:error] [pid 53161:tid 53237] [client 20.9.82.33:42312] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws78.php"] [unique_id "afhBDE5l1qgo2JEi65l7HgAAAFQ"]
[Mon May 04 14:47:42.308601 2026] [:error] [pid 53248:tid 53274] [client 20.9.82.33:8860] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws78.php"] [unique_id "afhBDgPqlCce9bsWu6i_oQAAABg"]
[Mon May 04 14:47:43.708799 2026] [:error] [pid 53159:tid 53180] [client 20.9.82.33:42332] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws78.php"] [unique_id "afhBD1Zg7pq4CfE3tM-dTAAAANE"]
[Mon May 04 14:47:44.562525 2026] [:error] [pid 53161:tid 53239] [client 20.9.82.33:8941] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws80.php"] [unique_id "afhBEE5l1qgo2JEi65l7IwAAAFY"]
[Mon May 04 14:47:45.416955 2026] [:error] [pid 53248:tid 53268] [client 20.9.82.33:42290] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws80.php"] [unique_id "afhBEQPqlCce9bsWu6i_qgAAABI"]
[Mon May 04 14:47:47.026980 2026] [:error] [pid 53248:tid 53266] [client 20.9.82.33:8917] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws80.php"] [unique_id "afhBEwPqlCce9bsWu6i_rgAAABA"]
[Mon May 04 14:47:47.924036 2026] [:error] [pid 53248:tid 53257] [client 20.9.82.33:8882] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws80.php"] [unique_id "afhBEwPqlCce9bsWu6i_sQAAAAc"]
[Mon May 04 14:47:48.620487 2026] [:error] [pid 53248:tid 53267] [client 20.9.82.33:8888] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/zo.php"] [unique_id "afhBFAPqlCce9bsWu6i_tQAAABE"]
[Mon May 04 14:47:49.097708 2026] [:error] [pid 53248:tid 53265] [client 20.9.82.33:8946] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/zo.php"] [unique_id "afhBFQPqlCce9bsWu6i_twAAAA8"]
[Mon May 04 14:47:49.620564 2026] [:error] [pid 53248:tid 53271] [client 20.9.82.33:8953] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/zo.php"] [unique_id "afhBFQPqlCce9bsWu6i_vAAAABU"]
[Mon May 04 14:47:50.434597 2026] [:error] [pid 53159:tid 53167] [client 20.9.82.33:42251] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/zo.php"] [unique_id "afhBFlZg7pq4CfE3tM-dUQAAAMQ"]
[Mon May 04 14:47:51.126249 2026] [:error] [pid 53161:tid 53225] [client 20.9.82.33:42329] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xy.php"] [unique_id "afhBF05l1qgo2JEi65l7KwAAAEg"]
[Mon May 04 14:47:51.799294 2026] [:error] [pid 53248:tid 53271] [client 20.9.82.33:42245] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xy.php"] [unique_id "afhBFwPqlCce9bsWu6i_ywAAABU"]
[Mon May 04 14:47:52.462939 2026] [:error] [pid 53248:tid 53251] [client 20.9.82.33:42258] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xy.php"] [unique_id "afhBGAPqlCce9bsWu6i_zgAAAAE"]
[Mon May 04 14:47:53.265524 2026] [:error] [pid 53161:tid 53234] [client 20.9.82.33:8956] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xy.php"] [unique_id "afhBGU5l1qgo2JEi65l7MAAAAFE"]
[Mon May 04 14:47:53.793382 2026] [:error] [pid 53160:tid 53200] [client 20.9.82.33:42318] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/masks.php"] [unique_id "afhBGaNFKJC8NNHHXb4-7QAAAQo"]
[Mon May 04 14:47:54.443610 2026] [:error] [pid 53161:tid 53236] [client 20.9.82.33:8908] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/masks.php"] [unique_id "afhBGk5l1qgo2JEi65l7UQAAAFM"]
[Mon May 04 14:47:54.951664 2026] [:error] [pid 53161:tid 53239] [client 20.9.82.33:8936] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/masks.php"] [unique_id "afhBGk5l1qgo2JEi65l7WgAAAFY"]
[Mon May 04 14:47:55.582119 2026] [:error] [pid 53161:tid 53225] [client 20.9.82.33:8915] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/masks.php"] [unique_id "afhBG05l1qgo2JEi65l7YgAAAEg"]
[Mon May 04 14:47:56.313463 2026] [:error] [pid 53248:tid 53271] [client 20.9.82.33:42315] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/man.php"] [unique_id "afhBHAPqlCce9bsWu6jACgAAABU"]
[Mon May 04 14:47:56.818043 2026] [:error] [pid 53159:tid 53164] [client 20.9.82.33:8885] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/man.php"] [unique_id "afhBHFZg7pq4CfE3tM-dVQAAAME"]
[Mon May 04 14:47:57.544560 2026] [:error] [pid 53160:tid 53194] [client 20.9.82.33:42331] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/man.php"] [unique_id "afhBHaNFKJC8NNHHXb4_AwAAAQQ"]
[Mon May 04 14:47:58.232969 2026] [:error] [pid 53161:tid 53233] [client 20.9.82.33:8949] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/man.php"] [unique_id "afhBHk5l1qgo2JEi65l7gQAAAFA"]
[Mon May 04 14:47:58.762055 2026] [:error] [pid 53161:tid 53220] [client 20.9.82.33:42305] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xfun.php"] [unique_id "afhBHk5l1qgo2JEi65l7gwAAAEM"]
[Mon May 04 14:47:59.314928 2026] [:error] [pid 53248:tid 53259] [client 20.9.82.33:8834] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xfun.php"] [unique_id "afhBHwPqlCce9bsWu6jAGAAAAAk"]
[Mon May 04 14:47:59.952394 2026] [:error] [pid 53159:tid 53169] [client 20.9.82.33:42287] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xfun.php"] [unique_id "afhBH1Zg7pq4CfE3tM-ddQAAAMY"]
[Mon May 04 14:48:00.556401 2026] [:error] [pid 53161:tid 53230] [client 20.9.82.33:42333] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xfun.php"] [unique_id "afhBIE5l1qgo2JEi65l7jwAAAE0"]
[Mon May 04 14:48:01.122047 2026] [:error] [pid 53161:tid 53224] [client 20.9.82.33:42285] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xxx.php"] [unique_id "afhBIU5l1qgo2JEi65l7kQAAAEc"]
[Mon May 04 14:48:01.922300 2026] [:error] [pid 53160:tid 53193] [client 20.9.82.33:8942] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xxx.php"] [unique_id "afhBIaNFKJC8NNHHXb4_HQAAAQM"]
[Mon May 04 14:48:02.491705 2026] [:error] [pid 53159:tid 53174] [client 20.9.82.33:42351] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xxx.php"] [unique_id "afhBIlZg7pq4CfE3tM-ddgAAAMs"]
[Mon May 04 14:48:03.119697 2026] [:error] [pid 53160:tid 53196] [client 20.9.82.33:8843] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xxx.php"] [unique_id "afhBI6NFKJC8NNHHXb4_IQAAAQY"]
[Mon May 04 14:48:03.957712 2026] [:error] [pid 53159:tid 53180] [client 20.9.82.33:8856] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/vv.php"] [unique_id "afhBI1Zg7pq4CfE3tM-deAAAANE"]
[Mon May 04 14:48:04.591022 2026] [:error] [pid 53161:tid 53221] [client 20.9.82.33:42348] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/vv.php"] [unique_id "afhBJE5l1qgo2JEi65l7mQAAAEQ"]
[Mon May 04 14:48:05.105822 2026] [:error] [pid 53161:tid 53223] [client 20.9.82.33:8865] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/vv.php"] [unique_id "afhBJU5l1qgo2JEi65l7mgAAAEY"]
[Mon May 04 14:48:05.684724 2026] [:error] [pid 53248:tid 53256] [client 20.9.82.33:42256] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/vv.php"] [unique_id "afhBJQPqlCce9bsWu6jAIAAAAAY"]
[Mon May 04 14:48:06.387936 2026] [:error] [pid 53159:tid 53184] [client 20.9.82.33:8919] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wpconf.php"] [unique_id "afhBJlZg7pq4CfE3tM-dkgAAANU"]
[Mon May 04 14:48:07.002969 2026] [:error] [pid 53161:tid 53237] [client 20.9.82.33:42270] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wpconf.php"] [unique_id "afhBJ05l1qgo2JEi65l7oAAAAFQ"]
[Mon May 04 14:48:07.657981 2026] [:error] [pid 53248:tid 53261] [client 20.9.82.33:42311] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wpconf.php"] [unique_id "afhBJwPqlCce9bsWu6jAJgAAAAs"]
[Mon May 04 14:48:08.818642 2026] [:error] [pid 53248:tid 53260] [client 20.9.82.33:42267] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wpconf.php"] [unique_id "afhBKAPqlCce9bsWu6jAKAAAAAo"]
[Mon May 04 14:48:09.634947 2026] [:error] [pid 53161:tid 53233] [client 20.9.82.33:8878] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/lib.php"] [unique_id "afhBKU5l1qgo2JEi65l7owAAAFA"]
[Mon May 04 14:48:10.202882 2026] [:error] [pid 53160:tid 53206] [client 20.9.82.33:8923] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/lib.php"] [unique_id "afhBKqNFKJC8NNHHXb4_KwAAARA"]
[Mon May 04 14:48:10.861342 2026] [:error] [pid 53161:tid 53228] [client 20.9.82.33:8913] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/lib.php"] [unique_id "afhBKk5l1qgo2JEi65l7pgAAAEs"]
[Mon May 04 14:48:11.362208 2026] [:error] [pid 53160:tid 53204] [client 20.9.82.33:42335] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/lib.php"] [unique_id "afhBK6NFKJC8NNHHXb4_LAAAAQ4"]
[Mon May 04 14:48:13.167260 2026] [:error] [pid 53161:tid 53238] [client 20.9.82.33:28635] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-zx.php"] [unique_id "afhBLU5l1qgo2JEi65l7qgAAAFU"]
[Mon May 04 14:48:13.999864 2026] [:error] [pid 53160:tid 53209] [client 20.9.82.33:42330] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-zx.php"] [unique_id "afhBLaNFKJC8NNHHXb4_LgAAARM"]
[Mon May 04 14:48:15.118714 2026] [:error] [pid 53248:tid 53260] [client 20.9.82.33:42246] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-zx.php"] [unique_id "afhBLwPqlCce9bsWu6jAMAAAAAo"]
[Mon May 04 14:48:15.897046 2026] [:error] [pid 53161:tid 53224] [client 20.9.82.33:42359] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-zx.php"] [unique_id "afhBL05l1qgo2JEi65l7rwAAAEc"]
[Mon May 04 14:48:17.383164 2026] [:error] [pid 53248:tid 53262] [client 20.9.82.33:42314] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/000.php"] [unique_id "afhBMQPqlCce9bsWu6jAOwAAAAw"]
[Mon May 04 14:48:18.430036 2026] [:error] [pid 53248:tid 53261] [client 20.9.82.33:8840] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/000.php"] [unique_id "afhBMgPqlCce9bsWu6jAQAAAAAs"]
[Mon May 04 14:48:19.250068 2026] [:error] [pid 53160:tid 53195] [client 20.9.82.33:42301] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/000.php"] [unique_id "afhBM6NFKJC8NNHHXb4_MAAAAQU"]
[Mon May 04 14:48:20.076711 2026] [:error] [pid 53248:tid 53260] [client 20.9.82.33:8943] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/000.php"] [unique_id "afhBNAPqlCce9bsWu6jASAAAAAo"]
[Mon May 04 14:48:20.671103 2026] [:error] [pid 53160:tid 53201] [client 20.9.82.33:42248] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/mar.php"] [unique_id "afhBNKNFKJC8NNHHXb4_MQAAAQs"]
[Mon May 04 14:48:21.330079 2026] [:error] [pid 53248:tid 53251] [client 20.9.82.33:28630] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/mar.php"] [unique_id "afhBNQPqlCce9bsWu6jATgAAAAE"]
[Mon May 04 14:48:22.059106 2026] [:error] [pid 53248:tid 53259] [client 20.9.82.33:28618] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/mar.php"] [unique_id "afhBNgPqlCce9bsWu6jAUAAAAAk"]
[Mon May 04 14:48:22.583553 2026] [:error] [pid 53159:tid 53185] [client 20.9.82.33:8906] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/mar.php"] [unique_id "afhBNlZg7pq4CfE3tM-dqwAAANY"]
[Mon May 04 14:48:23.260236 2026] [:error] [pid 53159:tid 53179] [client 20.9.82.33:42262] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/iov.php"] [unique_id "afhBN1Zg7pq4CfE3tM-drAAAANA"]
[Mon May 04 14:48:23.944127 2026] [:error] [pid 53161:tid 53241] [client 20.9.82.33:42276] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/iov.php"] [unique_id "afhBN05l1qgo2JEi65l7tAAAAFg"]
[Mon May 04 14:48:24.883725 2026] [:error] [pid 53160:tid 53192] [client 20.9.82.33:8874] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/iov.php"] [unique_id "afhBOKNFKJC8NNHHXb4_OQAAAQI"]
[Mon May 04 14:48:25.418222 2026] [:error] [pid 53161:tid 53238] [client 20.9.82.33:42310] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/iov.php"] [unique_id "afhBOU5l1qgo2JEi65l7tQAAAFU"]
[Mon May 04 14:48:25.881265 2026] [:error] [pid 53159:tid 53168] [client 20.9.82.33:42277] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/jodohghi.php"] [unique_id "afhBOVZg7pq4CfE3tM-drwAAAMU"]
[Mon May 04 14:48:26.427363 2026] [:error] [pid 53159:tid 53182] [client 20.9.82.33:8948] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/jodohghi.php"] [unique_id "afhBOlZg7pq4CfE3tM-dsQAAANM"]
[Mon May 04 14:48:26.995969 2026] [:error] [pid 53161:tid 53226] [client 20.9.82.33:8887] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/jodohghi.php"] [unique_id "afhBOk5l1qgo2JEi65l7twAAAEk"]
[Mon May 04 14:48:27.546693 2026] [:error] [pid 53161:tid 53239] [client 20.9.82.33:42323] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/jodohghi.php"] [unique_id "afhBO05l1qgo2JEi65l7uQAAAFY"]
[Mon May 04 14:48:28.232563 2026] [:error] [pid 53160:tid 53207] [client 20.9.82.33:8856] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/rendi59.php"] [unique_id "afhBPKNFKJC8NNHHXb4_QgAAARE"]
[Mon May 04 14:48:28.874818 2026] [:error] [pid 53248:tid 53257] [client 20.9.82.33:42339] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/rendi59.php"] [unique_id "afhBPAPqlCce9bsWu6jAWQAAAAc"]
[Mon May 04 14:48:29.383150 2026] [:error] [pid 53248:tid 53270] [client 20.9.82.33:42360] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/rendi59.php"] [unique_id "afhBPQPqlCce9bsWu6jAXQAAABQ"]
[Mon May 04 14:48:29.938014 2026] [:error] [pid 53161:tid 53227] [client 20.9.82.33:42347] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/rendi59.php"] [unique_id "afhBPU5l1qgo2JEi65l7vAAAAEo"]
[Mon May 04 14:48:30.442744 2026] [:error] [pid 53161:tid 53237] [client 20.9.82.33:42352] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/rivasqup.php"] [unique_id "afhBPk5l1qgo2JEi65l7vwAAAFQ"]
[Mon May 04 14:48:30.989283 2026] [:error] [pid 53160:tid 53195] [client 20.9.82.33:42328] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/rivasqup.php"] [unique_id "afhBPqNFKJC8NNHHXb4_RQAAAQU"]
[Mon May 04 14:48:31.502884 2026] [:error] [pid 53160:tid 53213] [client 20.9.82.33:28547] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/rivasqup.php"] [unique_id "afhBP6NFKJC8NNHHXb4_RgAAARc"]
[Mon May 04 14:48:32.338320 2026] [proxy_fcgi:error] [pid 53160:tid 53204] [client 20.9.82.33:8893] AH01071: Got error 'Primary script unknown'
[Mon May 04 14:48:32.587198 2026] [proxy_fcgi:error] [pid 53160:tid 53191] [client 20.9.82.33:8893] AH01071: Got error 'Primary script unknown'
[Mon May 04 14:48:32.789710 2026] [proxy_fcgi:error] [pid 53160:tid 53208] [client 20.9.82.33:8893] AH01071: Got error 'Primary script unknown'
[Mon May 04 14:48:32.990066 2026] [proxy_fcgi:error] [pid 53160:tid 53201] [client 20.9.82.33:8893] AH01071: Got error 'Primary script unknown'
[Mon May 04 14:48:33.224922 2026] [proxy_fcgi:error] [pid 53160:tid 53198] [client 20.9.82.33:8893] AH01071: Got error 'Primary script unknown'
[Mon May 04 14:48:33.435665 2026] [proxy_fcgi:error] [pid 53160:tid 53206] [client 20.9.82.33:8893] AH01071: Got error 'Primary script unknown'
[Mon May 04 14:48:33.627337 2026] [proxy_fcgi:error] [pid 53160:tid 53207] [client 20.9.82.33:8893] AH01071: Got error 'Primary script unknown'
[Mon May 04 14:48:33.832009 2026] [proxy_fcgi:error] [pid 53160:tid 53193] [client 20.9.82.33:8893] AH01071: Got error 'Primary script unknown'
[Mon May 04 14:48:34.024213 2026] [proxy_fcgi:error] [pid 53160:tid 53214] [client 20.9.82.33:8893] AH01071: Got error 'Primary script unknown'
[Mon May 04 14:48:34.218771 2026] [proxy_fcgi:error] [pid 53160:tid 53197] [client 20.9.82.33:8893] AH01071: Got error 'Primary script unknown'
[Mon May 04 14:48:34.461476 2026] [proxy_fcgi:error] [pid 53160:tid 53191] [client 20.9.82.33:8893] AH01071: Got error 'Primary script unknown'
[Mon May 04 14:48:34.650225 2026] [:error] [pid 53160:tid 53190] [client 20.9.82.33:8893] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/casp1.php"] [unique_id "afhBQqNFKJC8NNHHXb4_WQAAAQA"]
[Mon May 04 14:48:35.123998 2026] [:error] [pid 53248:tid 53269] [client 20.9.82.33:42273] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/casp1.php"] [unique_id "afhBQwPqlCce9bsWu6jAXwAAABM"]
[Mon May 04 14:48:35.768854 2026] [:error] [pid 53161:tid 53234] [client 20.9.82.33:42259] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/casp1.php"] [unique_id "afhBQ05l1qgo2JEi65l7yAAAAFE"]
[Mon May 04 14:48:36.334482 2026] [:error] [pid 53161:tid 53229] [client 20.9.82.33:42264] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/casp1.php"] [unique_id "afhBRE5l1qgo2JEi65l7yQAAAEw"]
[Mon May 04 14:48:36.926683 2026] [:error] [pid 53161:tid 53237] [client 20.9.82.33:42337] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ftde.php"] [unique_id "afhBRE5l1qgo2JEi65l7ywAAAFQ"]
[Mon May 04 14:48:37.499596 2026] [:error] [pid 53161:tid 53241] [client 20.9.82.33:42366] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ftde.php"] [unique_id "afhBRU5l1qgo2JEi65l7zgAAAFg"]
[Mon May 04 14:48:38.105385 2026] [:error] [pid 53248:tid 53268] [client 20.9.82.33:42344] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ftde.php"] [unique_id "afhBRgPqlCce9bsWu6jAZgAAABI"]
[Mon May 04 14:48:38.560398 2026] [:error] [pid 53248:tid 53271] [client 20.9.82.33:42325] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ftde.php"] [unique_id "afhBRgPqlCce9bsWu6jAaAAAABU"]
[Mon May 04 14:48:39.146547 2026] [:error] [pid 53248:tid 53267] [client 20.9.82.33:42341] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/lov.php"] [unique_id "afhBRwPqlCce9bsWu6jAawAAABE"]
[Mon May 04 14:48:39.672612 2026] [:error] [pid 53159:tid 53167] [client 20.9.82.33:28629] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/lov.php"] [unique_id "afhBR1Zg7pq4CfE3tM-duAAAAMQ"]
[Mon May 04 14:48:40.276731 2026] [:error] [pid 53248:tid 53256] [client 20.9.82.33:28648] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/lov.php"] [unique_id "afhBSAPqlCce9bsWu6jAbgAAAAY"]
[Mon May 04 14:48:40.784465 2026] [:error] [pid 53159:tid 53177] [client 20.9.82.33:42361] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/lov.php"] [unique_id "afhBSFZg7pq4CfE3tM-dugAAAM4"]
[Mon May 04 14:48:41.339928 2026] [:error] [pid 53248:tid 53265] [client 20.9.82.33:42313] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/knw.php"] [unique_id "afhBSQPqlCce9bsWu6jAcQAAAA8"]
[Mon May 04 14:48:41.813523 2026] [:error] [pid 53161:tid 53235] [client 20.9.82.33:42320] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/knw.php"] [unique_id "afhBSU5l1qgo2JEi65l71AAAAFI"]
[Mon May 04 14:48:42.269088 2026] [:error] [pid 53161:tid 53241] [client 20.9.82.33:42334] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/knw.php"] [unique_id "afhBSk5l1qgo2JEi65l71QAAAFg"]
[Mon May 04 14:48:42.778813 2026] [:error] [pid 53159:tid 53174] [client 20.9.82.33:42284] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/knw.php"] [unique_id "afhBSlZg7pq4CfE3tM-dvAAAAMs"]
[Mon May 04 14:48:43.349538 2026] [:error] [pid 53160:tid 53209] [client 20.9.82.33:42255] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/fi.php"] [unique_id "afhBS6NFKJC8NNHHXb4_XAAAARM"]
[Mon May 04 14:48:44.057630 2026] [:error] [pid 53248:tid 53257] [client 20.9.82.33:42289] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/fi.php"] [unique_id "afhBTAPqlCce9bsWu6jAdgAAAAc"]
[Mon May 04 14:48:44.670172 2026] [:error] [pid 53159:tid 53179] [client 20.9.82.33:28653] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/fi.php"] [unique_id "afhBTFZg7pq4CfE3tM-dvwAAANA"]
[Mon May 04 14:48:45.130187 2026] [:error] [pid 53160:tid 53208] [client 20.9.82.33:42286] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/fi.php"] [unique_id "afhBTaNFKJC8NNHHXb4_YgAAARI"]
[Mon May 04 14:48:45.876357 2026] [:error] [pid 53159:tid 53183] [client 20.9.82.33:42263] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/jlex.php"] [unique_id "afhBTVZg7pq4CfE3tM-dwwAAANQ"]
[Mon May 04 14:48:46.343271 2026] [:error] [pid 53160:tid 53200] [client 20.9.82.33:42265] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/jlex.php"] [unique_id "afhBTqNFKJC8NNHHXb4_ZwAAAQo"]
[Mon May 04 14:48:46.810812 2026] [:error] [pid 53160:tid 53203] [client 20.9.82.33:42302] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/jlex.php"] [unique_id "afhBTqNFKJC8NNHHXb4_agAAAQ0"]
[Mon May 04 14:48:47.514292 2026] [:error] [pid 53159:tid 53168] [client 20.9.82.33:42356] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/jlex.php"] [unique_id "afhBT1Zg7pq4CfE3tM-dxQAAAMU"]
[Mon May 04 14:48:48.021494 2026] [:error] [pid 53160:tid 53205] [client 20.9.82.33:28553] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-k7djufwez2.php"] [unique_id "afhBUKNFKJC8NNHHXb4_bgAAAQ8"]
[Mon May 04 14:48:48.503188 2026] [:error] [pid 53160:tid 53193] [client 20.9.82.33:28634] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-k7djufwez2.php"] [unique_id "afhBUKNFKJC8NNHHXb4_cAAAAQM"]
[Mon May 04 14:48:49.178793 2026] [:error] [pid 53159:tid 53182] [client 20.9.82.33:42250] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-k7djufwez2.php"] [unique_id "afhBUVZg7pq4CfE3tM-dygAAANM"]
[Mon May 04 14:48:49.723170 2026] [:error] [pid 53161:tid 53232] [client 20.9.82.33:8907] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-k7djufwez2.php"] [unique_id "afhBUU5l1qgo2JEi65l72wAAAE8"]
[Mon May 04 14:48:50.217710 2026] [:error] [pid 53160:tid 53198] [client 20.9.82.33:42261] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-tiroto.php"] [unique_id "afhBUqNFKJC8NNHHXb4_dAAAAQg"]
[Mon May 04 14:48:50.741032 2026] [:error] [pid 53161:tid 53226] [client 20.9.82.33:28622] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-tiroto.php"] [unique_id "afhBUk5l1qgo2JEi65l73QAAAEk"]
[Mon May 04 14:48:51.398778 2026] [:error] [pid 53248:tid 53258] [client 20.9.82.33:42293] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-tiroto.php"] [unique_id "afhBUwPqlCce9bsWu6jAfAAAAAg"]
[Mon May 04 14:48:52.052114 2026] [:error] [pid 53159:tid 53170] [client 20.9.82.33:42324] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-tiroto.php"] [unique_id "afhBVFZg7pq4CfE3tM-d2AAAAMc"]
[Mon May 04 14:48:52.545345 2026] [:error] [pid 53159:tid 53169] [client 20.9.82.33:42354] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/son.php"] [unique_id "afhBVFZg7pq4CfE3tM-d4QAAAMY"]
[Mon May 04 14:48:53.067488 2026] [:error] [pid 53248:tid 53251] [client 20.9.82.33:42243] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/son.php"] [unique_id "afhBVQPqlCce9bsWu6jArQAAAAE"]
[Mon May 04 14:48:53.654402 2026] [:error] [pid 53160:tid 53199] [client 20.9.82.33:42295] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/son.php"] [unique_id "afhBVaNFKJC8NNHHXb4_ewAAAQk"]
[Mon May 04 14:48:54.497114 2026] [:error] [pid 53160:tid 53193] [client 20.9.82.33:42364] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/son.php"] [unique_id "afhBVqNFKJC8NNHHXb4_fAAAAQM"]
[Mon May 04 14:48:55.004386 2026] [:error] [pid 53160:tid 53209] [client 20.9.82.33:28552] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/99.php"] [unique_id "afhBV6NFKJC8NNHHXb4_fQAAARM"]
[Mon May 04 14:48:55.480485 2026] [:error] [pid 53161:tid 53220] [client 20.9.82.33:28605] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/99.php"] [unique_id "afhBV05l1qgo2JEi65l74QAAAEM"]
[Mon May 04 14:48:56.083960 2026] [:error] [pid 53159:tid 53177] [client 20.9.82.33:42292] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/99.php"] [unique_id "afhBWFZg7pq4CfE3tM-d5gAAAM4"]
[Mon May 04 14:48:56.617548 2026] [:error] [pid 53159:tid 53164] [client 20.9.82.33:42247] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/99.php"] [unique_id "afhBWFZg7pq4CfE3tM-d6QAAAME"]
[Mon May 04 14:48:57.245918 2026] [:error] [pid 53248:tid 53265] [client 20.9.82.33:42349] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bal.php"] [unique_id "afhBWQPqlCce9bsWu6jAsQAAAA8"]
[Mon May 04 14:48:57.715463 2026] [:error] [pid 53161:tid 53218] [client 20.9.82.33:28660] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bal.php"] [unique_id "afhBWU5l1qgo2JEi65l76AAAAEE"]
[Mon May 04 14:48:58.365479 2026] [:error] [pid 53161:tid 53232] [client 20.9.82.33:28568] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bal.php"] [unique_id "afhBWk5l1qgo2JEi65l76QAAAE8"]
[Mon May 04 14:48:58.862522 2026] [:error] [pid 53248:tid 53257] [client 20.9.82.33:28651] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bal.php"] [unique_id "afhBWgPqlCce9bsWu6jAtgAAAAc"]
[Mon May 04 14:48:59.426550 2026] [:error] [pid 53161:tid 53224] [client 20.9.82.33:42343] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/filefuns.php"] [unique_id "afhBW05l1qgo2JEi65l76gAAAEc"]
[Mon May 04 14:48:59.897308 2026] [:error] [pid 53159:tid 53181] [client 20.9.82.33:28611] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/filefuns.php"] [unique_id "afhBW1Zg7pq4CfE3tM-d6wAAANI"]
[Mon May 04 14:49:00.624733 2026] [:error] [pid 53161:tid 53228] [client 20.9.82.33:28616] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/filefuns.php"] [unique_id "afhBXE5l1qgo2JEi65l77QAAAEs"]
[Mon May 04 14:49:01.140541 2026] [:error] [pid 53159:tid 53178] [client 20.9.82.33:28559] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/filefuns.php"] [unique_id "afhBXVZg7pq4CfE3tM-d7AAAAM8"]
[Mon May 04 14:49:01.775659 2026] [:error] [pid 53159:tid 53187] [client 20.9.82.33:8891] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ay.php"] [unique_id "afhBXVZg7pq4CfE3tM-d7QAAANg"]
[Mon May 04 14:49:02.498318 2026] [:error] [pid 53248:tid 53263] [client 20.9.82.33:8889] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ay.php"] [unique_id "afhBXgPqlCce9bsWu6jAwQAAAA0"]
[Mon May 04 14:49:03.408331 2026] [:error] [pid 53160:tid 53211] [client 20.9.82.33:8875] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ay.php"] [unique_id "afhBX6NFKJC8NNHHXb4_gQAAARU"]
[Mon May 04 14:49:04.093870 2026] [:error] [pid 53160:tid 53191] [client 20.9.82.33:28551] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ay.php"] [unique_id "afhBYKNFKJC8NNHHXb4_iAAAAQE"]
[Mon May 04 14:49:04.541841 2026] [:error] [pid 53248:tid 53266] [client 20.9.82.33:28590] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/options.php"] [unique_id "afhBYAPqlCce9bsWu6jAzgAAABA"]
[Mon May 04 14:49:05.115523 2026] [:error] [pid 53160:tid 53192] [client 20.9.82.33:28631] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/options.php"] [unique_id "afhBYaNFKJC8NNHHXb4_igAAAQI"]
[Mon May 04 14:49:05.615866 2026] [:error] [pid 53248:tid 53253] [client 20.9.82.33:42299] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/options.php"] [unique_id "afhBYQPqlCce9bsWu6jA0QAAAAM"]
[Mon May 04 14:49:06.067197 2026] [:error] [pid 53248:tid 53256] [client 20.9.82.33:28554] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/options.php"] [unique_id "afhBYgPqlCce9bsWu6jA0wAAAAY"]
[Mon May 04 14:49:06.639711 2026] [:error] [pid 53248:tid 53269] [client 20.9.82.33:28582] [client 20.9.82.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dwelectservices.com.au"] [uri "/wp-includes/theme-compat/options.php"] [unique_id "afhBYgPqlCce9bsWu6jA1AAAABM"]
[Mon May 04 14:49:07.199804 2026] [:error] [pid 53248:tid 53254] [client 20.9.82.33:28615] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/d.php"] [unique_id "afhBYwPqlCce9bsWu6jA1wAAAAQ"]
[Mon May 04 14:49:07.689898 2026] [:error] [pid 53248:tid 53260] [client 20.9.82.33:42353] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/d.php"] [unique_id "afhBYwPqlCce9bsWu6jA2AAAAAo"]
[Mon May 04 14:49:08.450293 2026] [:error] [pid 53159:tid 53184] [client 20.9.82.33:42257] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/d.php"] [unique_id "afhBZFZg7pq4CfE3tM-d7wAAANU"]
[Mon May 04 14:49:08.916581 2026] [:error] [pid 53161:tid 53238] [client 20.9.82.33:28609] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/d.php"] [unique_id "afhBZE5l1qgo2JEi65l78AAAAFU"]
[Mon May 04 14:49:09.526638 2026] [:error] [pid 53161:tid 53217] [client 20.9.82.33:28650] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/1a.php"] [unique_id "afhBZU5l1qgo2JEi65l78gAAAEA"]
[Mon May 04 14:49:10.156770 2026] [:error] [pid 53161:tid 53221] [client 20.9.82.33:42240] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/1a.php"] [unique_id "afhBZk5l1qgo2JEi65l78wAAAEQ"]
[Mon May 04 14:49:10.793647 2026] [:error] [pid 53161:tid 53241] [client 20.9.82.33:42241] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/1a.php"] [unique_id "afhBZk5l1qgo2JEi65l79QAAAFg"]
[Mon May 04 14:49:11.462205 2026] [:error] [pid 53161:tid 53225] [client 20.9.82.33:42254] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/1a.php"] [unique_id "afhBZ05l1qgo2JEi65l79wAAAEg"]
[Mon May 04 14:49:12.035606 2026] [:error] [pid 53248:tid 53254] [client 20.9.82.33:8919] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/rh.php"] [unique_id "afhBaAPqlCce9bsWu6jA3QAAAAQ"]
[Mon May 04 14:49:12.884222 2026] [:error] [pid 53248:tid 53259] [client 20.9.82.33:42367] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/rh.php"] [unique_id "afhBaAPqlCce9bsWu6jA3wAAAAk"]
[Mon May 04 14:49:13.500612 2026] [:error] [pid 53248:tid 53250] [client 20.9.82.33:28644] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/rh.php"] [unique_id "afhBaQPqlCce9bsWu6jA4AAAAAA"]
[Mon May 04 14:49:13.946734 2026] [:error] [pid 53161:tid 53231] [client 20.9.82.33:42357] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/rh.php"] [unique_id "afhBaU5l1qgo2JEi65l7-AAAAE4"]
[Mon May 04 14:49:14.527454 2026] [:error] [pid 53159:tid 53164] [client 20.9.82.33:42281] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/file-kikikoko.php"] [unique_id "afhBalZg7pq4CfE3tM-d-gAAAME"]
[Mon May 04 14:49:15.280741 2026] [:error] [pid 53160:tid 53206] [client 20.9.82.33:42338] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/file-kikikoko.php"] [unique_id "afhBa6NFKJC8NNHHXb4_kwAAARA"]
[Mon May 04 14:49:15.973157 2026] [:error] [pid 53161:tid 53227] [client 20.9.82.33:28642] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/file-kikikoko.php"] [unique_id "afhBa05l1qgo2JEi65l7-gAAAEo"]
[Mon May 04 14:49:16.606442 2026] [:error] [pid 53161:tid 53224] [client 20.9.82.33:28617] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/file-kikikoko.php"] [unique_id "afhBbE5l1qgo2JEi65l7_QAAAEc"]
[Mon May 04 14:49:17.278855 2026] [:error] [pid 53159:tid 53163] [client 20.9.82.33:28613] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/cu.php"] [unique_id "afhBbVZg7pq4CfE3tM-eAgAAAMA"]
[Mon May 04 14:49:17.730578 2026] [:error] [pid 53248:tid 53254] [client 20.9.82.33:28664] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/cu.php"] [unique_id "afhBbQPqlCce9bsWu6jA5QAAAAQ"]
[Mon May 04 14:49:18.259334 2026] [:error] [pid 53159:tid 53177] [client 20.9.82.33:8895] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/cu.php"] [unique_id "afhBblZg7pq4CfE3tM-eBQAAAM4"]
[Mon May 04 14:49:18.766889 2026] [:error] [pid 53161:tid 53217] [client 20.9.82.33:28628] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/cu.php"] [unique_id "afhBbk5l1qgo2JEi65l8AQAAAEA"]
[Mon May 04 14:49:19.406405 2026] [:error] [pid 53161:tid 53221] [client 20.9.82.33:28548] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/tramuibs.php"] [unique_id "afhBb05l1qgo2JEi65l8AwAAAEQ"]
[Mon May 04 14:49:20.037070 2026] [:error] [pid 53161:tid 53225] [client 20.9.82.33:42278] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/tramuibs.php"] [unique_id "afhBcE5l1qgo2JEi65l8BAAAAEg"]
[Mon May 04 14:49:20.667339 2026] [:error] [pid 53248:tid 53253] [client 20.9.82.33:28667] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/tramuibs.php"] [unique_id "afhBcAPqlCce9bsWu6jA6QAAAAM"]
[Mon May 04 14:49:21.263805 2026] [:error] [pid 53248:tid 53264] [client 20.9.82.33:42365] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/tramuibs.php"] [unique_id "afhBcQPqlCce9bsWu6jA7AAAAA4"]
[Mon May 04 14:49:21.797865 2026] [:error] [pid 53248:tid 53266] [client 20.9.82.33:28562] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/19.php"] [unique_id "afhBcQPqlCce9bsWu6jA8QAAABA"]
[Mon May 04 14:49:22.481401 2026] [:error] [pid 53159:tid 53163] [client 20.9.82.33:8947] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/19.php"] [unique_id "afhBclZg7pq4CfE3tM-eCgAAAMA"]
[Mon May 04 14:49:23.015719 2026] [:error] [pid 53159:tid 53177] [client 20.9.82.33:28623] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/19.php"] [unique_id "afhBc1Zg7pq4CfE3tM-eCwAAAM4"]
[Mon May 04 14:49:23.777379 2026] [:error] [pid 53248:tid 53261] [client 20.9.82.33:42350] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/19.php"] [unique_id "afhBcwPqlCce9bsWu6jA-QAAAAs"]
[Mon May 04 14:49:24.365916 2026] [:error] [pid 53160:tid 53193] [client 20.9.82.33:28639] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/test1.php"] [unique_id "afhBdKNFKJC8NNHHXb4_nQAAAQM"]
[Mon May 04 14:49:24.951368 2026] [:error] [pid 53160:tid 53194] [client 20.9.82.33:28550] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/test1.php"] [unique_id "afhBdKNFKJC8NNHHXb4_oQAAAQQ"]
[Mon May 04 14:49:25.510604 2026] [:error] [pid 53161:tid 53221] [client 20.9.82.33:28620] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/test1.php"] [unique_id "afhBdU5l1qgo2JEi65l8DgAAAEQ"]
[Mon May 04 14:49:26.206479 2026] [:error] [pid 53161:tid 53236] [client 20.9.82.33:42275] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/test1.php"] [unique_id "afhBdk5l1qgo2JEi65l8EAAAAFM"]
[Mon May 04 14:49:27.200674 2026] [:error] [pid 53161:tid 53226] [client 20.9.82.33:28574] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bpxrn.php"] [unique_id "afhBd05l1qgo2JEi65l8EgAAAEk"]
[Mon May 04 14:49:28.005776 2026] [:error] [pid 53160:tid 53199] [client 20.9.82.33:42362] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bpxrn.php"] [unique_id "afhBeKNFKJC8NNHHXb4_pAAAAQk"]
[Mon May 04 14:49:28.450128 2026] [:error] [pid 53160:tid 53191] [client 20.9.82.33:28592] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bpxrn.php"] [unique_id "afhBeKNFKJC8NNHHXb4_pQAAAQE"]
[Mon May 04 14:49:29.132762 2026] [:error] [pid 53161:tid 53239] [client 20.9.82.33:28588] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bpxrn.php"] [unique_id "afhBeU5l1qgo2JEi65l8GAAAAFY"]
[Mon May 04 14:49:31.135177 2026] [:error] [pid 53161:tid 53226] [client 20.9.82.33:28500] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/a1.php"] [unique_id "afhBe05l1qgo2JEi65l8IgAAAEk"]
[Mon May 04 14:49:31.794800 2026] [:error] [pid 53161:tid 53224] [client 20.9.82.33:28493] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/a1.php"] [unique_id "afhBe05l1qgo2JEi65l8JQAAAEc"]
[Mon May 04 14:49:32.482995 2026] [:error] [pid 53160:tid 53204] [client 20.9.82.33:42352] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/a1.php"] [unique_id "afhBfKNFKJC8NNHHXb4_rAAAAQ4"]
[Mon May 04 14:49:33.061860 2026] [:error] [pid 53248:tid 53263] [client 20.9.82.33:42274] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/a1.php"] [unique_id "afhBfQPqlCce9bsWu6jBAgAAAA0"]
[Mon May 04 14:49:33.701047 2026] [:error] [pid 53248:tid 53266] [client 20.9.82.33:28665] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ws37.php"] [unique_id "afhBfQPqlCce9bsWu6jBBAAAABA"]
[Mon May 04 14:49:34.478865 2026] [proxy_fcgi:error] [pid 53248:tid 53271] [client 20.9.82.33:28496] AH01071: Got error 'Primary script unknown'
[Mon May 04 14:49:34.676300 2026] [proxy_fcgi:error] [pid 53248:tid 53251] [client 20.9.82.33:28496] AH01071: Got error 'Primary script unknown'
[Mon May 04 14:49:34.868353 2026] [proxy_fcgi:error] [pid 53248:tid 53258] [client 20.9.82.33:28496] AH01071: Got error 'Primary script unknown'
[Mon May 04 14:49:35.073822 2026] [proxy_fcgi:error] [pid 53248:tid 53254] [client 20.9.82.33:28496] AH01071: Got error 'Primary script unknown'
[Mon May 04 14:49:35.313387 2026] [proxy_fcgi:error] [pid 53248:tid 53252] [client 20.9.82.33:28496] AH01071: Got error 'Primary script unknown'
[Mon May 04 14:49:35.510076 2026] [proxy_fcgi:error] [pid 53248:tid 53260] [client 20.9.82.33:28496] AH01071: Got error 'Primary script unknown'
[Mon May 04 14:49:35.752343 2026] [proxy_fcgi:error] [pid 53248:tid 53268] [client 20.9.82.33:28496] AH01071: Got error 'Primary script unknown'
[Mon May 04 14:49:35.954436 2026] [proxy_fcgi:error] [pid 53248:tid 53259] [client 20.9.82.33:28496] AH01071: Got error 'Primary script unknown'
[Mon May 04 14:49:36.146734 2026] [proxy_fcgi:error] [pid 53248:tid 53273] [client 20.9.82.33:28496] AH01071: Got error 'Primary script unknown'
[Mon May 04 14:49:36.344468 2026] [proxy_fcgi:error] [pid 53248:tid 53261] [client 20.9.82.33:28496] AH01071: Got error 'Primary script unknown'
[Mon May 04 14:49:36.536807 2026] [proxy_fcgi:error] [pid 53248:tid 53274] [client 20.9.82.33:28496] AH01071: Got error 'Primary script unknown'
[Mon May 04 14:49:36.725069 2026] [:error] [pid 53248:tid 53253] [client 20.9.82.33:28496] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bkxzo.php"] [unique_id "afhBgAPqlCce9bsWu6jBFgAAAAM"]
[Mon May 04 14:49:37.335559 2026] [:error] [pid 53248:tid 53264] [client 20.9.82.33:42272] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bkxzo.php"] [unique_id "afhBgQPqlCce9bsWu6jBFwAAAA4"]
[Mon May 04 14:49:37.766815 2026] [:error] [pid 53160:tid 53204] [client 20.9.82.33:8854] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bkxzo.php"] [unique_id "afhBgaNFKJC8NNHHXb4_sgAAAQ4"]
[Mon May 04 14:49:38.375012 2026] [:error] [pid 53248:tid 53255] [client 20.9.82.33:28581] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/bkxzo.php"] [unique_id "afhBggPqlCce9bsWu6jBHAAAAAU"]
[Mon May 04 14:49:38.994400 2026] [:error] [pid 53161:tid 53221] [client 20.9.82.33:42296] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/cdxadmin.php"] [unique_id "afhBgk5l1qgo2JEi65l8MgAAAEQ"]
[Mon May 04 14:49:39.500972 2026] [:error] [pid 53248:tid 53259] [client 20.9.82.33:42253] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/cdxadmin.php"] [unique_id "afhBgwPqlCce9bsWu6jBIgAAAAk"]
[Mon May 04 14:49:40.106200 2026] [:error] [pid 53248:tid 53270] [client 20.9.82.33:28587] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/cdxadmin.php"] [unique_id "afhBhAPqlCce9bsWu6jBJQAAABQ"]
[Mon May 04 14:49:40.822375 2026] [:error] [pid 53248:tid 53269] [client 20.9.82.33:28608] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/cdxadmin.php"] [unique_id "afhBhAPqlCce9bsWu6jBLQAAABM"]
[Mon May 04 14:49:41.385439 2026] [:error] [pid 53161:tid 53220] [client 20.9.82.33:28575] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/dfre.php"] [unique_id "afhBhU5l1qgo2JEi65l8OQAAAEM"]
[Mon May 04 14:49:41.839041 2026] [:error] [pid 53160:tid 53201] [client 20.9.82.33:28643] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/dfre.php"] [unique_id "afhBhaNFKJC8NNHHXb4_ugAAAQs"]
[Mon May 04 14:49:42.383930 2026] [:error] [pid 53161:tid 53234] [client 20.9.82.33:28661] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/dfre.php"] [unique_id "afhBhk5l1qgo2JEi65l8OwAAAFE"]
[Mon May 04 14:49:42.950568 2026] [:error] [pid 53161:tid 53218] [client 20.9.82.33:28645] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/dfre.php"] [unique_id "afhBhk5l1qgo2JEi65l8PQAAAEE"]
[Mon May 04 14:49:43.667127 2026] [:error] [pid 53160:tid 53211] [client 20.9.82.33:42303] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/sko.php"] [unique_id "afhBh6NFKJC8NNHHXb4_vgAAARU"]
[Mon May 04 14:49:44.357140 2026] [:error] [pid 53161:tid 53227] [client 20.9.82.33:42321] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/sko.php"] [unique_id "afhBiE5l1qgo2JEi65l8QAAAAEo"]
[Mon May 04 14:49:44.966584 2026] [:error] [pid 53161:tid 53224] [client 20.9.82.33:42271] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/sko.php"] [unique_id "afhBiE5l1qgo2JEi65l8QQAAAEc"]
[Mon May 04 14:49:45.667511 2026] [:error] [pid 53161:tid 53237] [client 20.9.82.33:42289] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/sko.php"] [unique_id "afhBiU5l1qgo2JEi65l8QwAAAFQ"]
[Mon May 04 14:49:46.357846 2026] [:error] [pid 53160:tid 53194] [client 20.9.82.33:42260] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/shorw.php"] [unique_id "afhBiqNFKJC8NNHHXb4_wgAAAQQ"]
[Mon May 04 14:49:47.010407 2026] [:error] [pid 53161:tid 53236] [client 20.9.82.33:28646] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/shorw.php"] [unique_id "afhBi05l1qgo2JEi65l8RQAAAFM"]
[Mon May 04 14:49:47.619224 2026] [:error] [pid 53159:tid 53186] [client 20.9.82.33:28669] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/shorw.php"] [unique_id "afhBi1Zg7pq4CfE3tM-eFwAAANc"]
[Mon May 04 14:49:48.270091 2026] [:error] [pid 53161:tid 53217] [client 20.9.82.33:42265] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/shorw.php"] [unique_id "afhBjE5l1qgo2JEi65l8RwAAAEA"]
[Mon May 04 14:49:49.207527 2026] [:error] [pid 53161:tid 53234] [client 20.9.82.33:28670] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/shelp.php"] [unique_id "afhBjU5l1qgo2JEi65l8SAAAAFE"]
[Mon May 04 14:49:49.866386 2026] [:error] [pid 53248:tid 53271] [client 20.9.82.33:28610] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/shelp.php"] [unique_id "afhBjQPqlCce9bsWu6jBLwAAABU"]
[Mon May 04 14:49:50.652576 2026] [:error] [pid 53161:tid 53227] [client 20.9.82.33:28586] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/shelp.php"] [unique_id "afhBjk5l1qgo2JEi65l8SgAAAEo"]
[Mon May 04 14:49:51.726618 2026] [:error] [pid 53248:tid 53273] [client 20.9.82.33:42297] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/shelp.php"] [unique_id "afhBjwPqlCce9bsWu6jBMQAAABc"]
[Mon May 04 14:49:52.921137 2026] [:error] [pid 53161:tid 53240] [client 20.9.82.33:28500] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/seyv.php"] [unique_id "afhBkE5l1qgo2JEi65l8SwAAAFc"]
[Mon May 04 14:49:53.649196 2026] [:error] [pid 53160:tid 53195] [client 20.9.82.33:28627] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/seyv.php"] [unique_id "afhBkaNFKJC8NNHHXb4_zAAAAQU"]
[Mon May 04 14:49:54.461150 2026] [:error] [pid 53160:tid 53200] [client 20.9.82.33:28621] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/seyv.php"] [unique_id "afhBkqNFKJC8NNHHXb4_0AAAAQo"]
[Mon May 04 14:49:55.266670 2026] [:error] [pid 53161:tid 53229] [client 20.9.82.33:28666] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/seyv.php"] [unique_id "afhBk05l1qgo2JEi65l8TQAAAEw"]
[Mon May 04 14:49:55.835250 2026] [:error] [pid 53248:tid 53257] [client 20.9.82.33:42326] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/sad821.php"] [unique_id "afhBkwPqlCce9bsWu6jBMwAAAAc"]
[Mon May 04 14:49:56.531624 2026] [:error] [pid 53248:tid 53274] [client 20.9.82.33:28566] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/sad821.php"] [unique_id "afhBlAPqlCce9bsWu6jBNAAAABg"]
[Mon May 04 14:49:57.287798 2026] [:error] [pid 53161:tid 53221] [client 20.9.82.33:28640] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/sad821.php"] [unique_id "afhBlU5l1qgo2JEi65l8UQAAAEQ"]
[Mon May 04 14:49:58.307594 2026] [:error] [pid 53248:tid 53269] [client 20.9.82.33:28632] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/sad821.php"] [unique_id "afhBlgPqlCce9bsWu6jBOgAAABM"]
[Mon May 04 14:49:58.864262 2026] [:error] [pid 53161:tid 53230] [client 20.9.82.33:28647] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/sad8210.php"] [unique_id "afhBlk5l1qgo2JEi65l8UwAAAE0"]
[Mon May 04 14:49:59.426028 2026] [:error] [pid 53161:tid 53227] [client 20.9.82.33:28489] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/sad8210.php"] [unique_id "afhBl05l1qgo2JEi65l8VAAAAEo"]
[Mon May 04 14:50:00.367627 2026] [:error] [pid 53161:tid 53238] [client 20.9.82.33:8835] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/sad8210.php"] [unique_id "afhBmE5l1qgo2JEi65l8VwAAAFU"]
[Mon May 04 14:50:01.335121 2026] [:error] [pid 53161:tid 53233] [client 20.9.82.33:28624] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/sad8210.php"] [unique_id "afhBmU5l1qgo2JEi65l8WwAAAFA"]
[Mon May 04 14:50:02.244839 2026] [:error] [pid 53159:tid 53176] [client 20.9.82.33:28636] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/sad8rd1.php"] [unique_id "afhBmlZg7pq4CfE3tM-eGgAAAM0"]
[Mon May 04 14:50:03.100718 2026] [:error] [pid 53159:tid 53175] [client 20.9.82.33:28563] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/sad8rd1.php"] [unique_id "afhBm1Zg7pq4CfE3tM-eGwAAAMw"]
[Mon May 04 14:50:03.678312 2026] [:error] [pid 53248:tid 53261] [client 20.9.82.33:28580] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/sad8rd1.php"] [unique_id "afhBmwPqlCce9bsWu6jBPgAAAAs"]
[Mon May 04 14:50:04.104756 2026] [:error] [pid 53160:tid 53190] [client 20.9.82.33:28523] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/sad8rd1.php"] [unique_id "afhBnKNFKJC8NNHHXb4_1QAAAQA"]
[Mon May 04 14:50:04.546276 2026] [:error] [pid 53248:tid 53268] [client 20.9.82.33:28572] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/saxzgf5.php"] [unique_id "afhBnAPqlCce9bsWu6jBQAAAABI"]
[Mon May 04 14:50:05.724519 2026] [:error] [pid 53248:tid 53269] [client 20.9.82.33:28540] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/saxzgf5.php"] [unique_id "afhBnQPqlCce9bsWu6jBQgAAABM"]
[Mon May 04 14:50:06.417536 2026] [:error] [pid 53248:tid 53250] [client 20.9.82.33:28633] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/saxzgf5.php"] [unique_id "afhBngPqlCce9bsWu6jBRQAAAAA"]
[Mon May 04 14:50:07.196914 2026] [:error] [pid 53161:tid 53237] [client 20.9.82.33:28662] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/saxzgf5.php"] [unique_id "afhBn05l1qgo2JEi65l8YwAAAFQ"]
[Mon May 04 14:50:07.782778 2026] [:error] [pid 53160:tid 53202] [client 20.9.82.33:42280] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/saxzw9t.php"] [unique_id "afhBn6NFKJC8NNHHXb4_2gAAAQw"]
[Mon May 04 14:50:08.937882 2026] [:error] [pid 53248:tid 53251] [client 20.9.82.33:42300] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/saxzw9t.php"] [unique_id "afhBoAPqlCce9bsWu6jBSgAAAAE"]
[Mon May 04 14:50:09.489550 2026] [:error] [pid 53161:tid 53217] [client 20.9.82.33:42268] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/saxzw9t.php"] [unique_id "afhBoU5l1qgo2JEi65l8ZwAAAEA"]
[Mon May 04 14:50:10.125103 2026] [:error] [pid 53160:tid 53201] [client 20.9.82.33:28490] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/saxzw9t.php"] [unique_id "afhBoqNFKJC8NNHHXb4_3QAAAQs"]
[Mon May 04 14:50:11.169124 2026] [:error] [pid 53161:tid 53241] [client 20.9.82.33:28485] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/sder5252u.php"] [unique_id "afhBo05l1qgo2JEi65l8aAAAAFg"]
[Mon May 04 14:50:12.010778 2026] [:error] [pid 53248:tid 53250] [client 20.9.82.33:28499] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/sder5252u.php"] [unique_id "afhBpAPqlCce9bsWu6jBTgAAAAA"]
[Mon May 04 14:50:12.725365 2026] [:error] [pid 53161:tid 53222] [client 20.9.82.33:28556] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/sder5252u.php"] [unique_id "afhBpE5l1qgo2JEi65l8awAAAEU"]
[Mon May 04 14:50:13.207470 2026] [:error] [pid 53161:tid 53228] [client 20.9.82.33:28498] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/sder5252u.php"] [unique_id "afhBpU5l1qgo2JEi65l8bAAAAEs"]
[Mon May 04 14:50:13.781159 2026] [:error] [pid 53161:tid 53223] [client 20.9.82.33:42327] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/sderty5u.php"] [unique_id "afhBpU5l1qgo2JEi65l8bQAAAEY"]
[Mon May 04 14:50:14.805572 2026] [:error] [pid 53160:tid 53209] [client 20.9.82.33:28494] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/sderty5u.php"] [unique_id "afhBpqNFKJC8NNHHXb4_3gAAARM"]
[Mon May 04 14:50:15.490133 2026] [:error] [pid 53160:tid 53202] [client 20.9.82.33:28513] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/sderty5u.php"] [unique_id "afhBp6NFKJC8NNHHXb4_4AAAAQw"]
[Mon May 04 14:50:16.100683 2026] [:error] [pid 53160:tid 53191] [client 20.9.82.33:28591] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/sderty5u.php"] [unique_id "afhBqKNFKJC8NNHHXb4_4gAAAQE"]
[Mon May 04 14:50:17.258797 2026] [:error] [pid 53161:tid 53229] [client 20.9.82.33:42294] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/hilk.php"] [unique_id "afhBqU5l1qgo2JEi65l8cgAAAEw"]
[Mon May 04 14:50:18.110295 2026] [:error] [pid 53161:tid 53225] [client 20.9.82.33:28544] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/hilk.php"] [unique_id "afhBqk5l1qgo2JEi65l8dAAAAEg"]
[Mon May 04 14:50:18.862435 2026] [:error] [pid 53160:tid 53205] [client 20.9.82.33:28614] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/hilk.php"] [unique_id "afhBqqNFKJC8NNHHXb4_4wAAAQ8"]
[Mon May 04 14:50:19.527923 2026] [:error] [pid 53161:tid 53228] [client 20.9.82.33:42266] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/hilk.php"] [unique_id "afhBq05l1qgo2JEi65l8dgAAAEs"]
[Mon May 04 14:50:20.834217 2026] [:error] [pid 53161:tid 53232] [client 20.9.82.33:28536] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/miso.php"] [unique_id "afhBrE5l1qgo2JEi65l8eQAAAE8"]
[Mon May 04 14:50:21.856762 2026] [:error] [pid 53161:tid 53239] [client 20.9.82.33:42279] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/miso.php"] [unique_id "afhBrU5l1qgo2JEi65l8fwAAAFY"]
[Mon May 04 14:50:22.575618 2026] [:error] [pid 53248:tid 53258] [client 20.9.82.33:28596] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/miso.php"] [unique_id "afhBrgPqlCce9bsWu6jBVQAAAAg"]
[Mon May 04 14:50:23.552348 2026] [:error] [pid 53248:tid 53272] [client 20.9.82.33:28595] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/miso.php"] [unique_id "afhBrwPqlCce9bsWu6jBWAAAABY"]
[Mon May 04 14:50:24.744522 2026] [:error] [pid 53160:tid 53200] [client 20.9.82.33:28424] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/yuzuru1.php"] [unique_id "afhBsKNFKJC8NNHHXb4_5gAAAQo"]
[Mon May 04 14:50:25.481005 2026] [:error] [pid 53160:tid 53194] [client 20.9.82.33:28658] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/yuzuru1.php"] [unique_id "afhBsaNFKJC8NNHHXb4_6gAAAQQ"]
[Mon May 04 14:50:26.393461 2026] [:error] [pid 53160:tid 53196] [client 20.9.82.33:28637] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/yuzuru1.php"] [unique_id "afhBsqNFKJC8NNHHXb4_7gAAAQY"]
[Mon May 04 14:50:27.073381 2026] [:error] [pid 53161:tid 53220] [client 20.9.82.33:28449] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/yuzuru1.php"] [unique_id "afhBs05l1qgo2JEi65l8lAAAAEM"]
[Mon May 04 14:50:28.256718 2026] [:error] [pid 53161:tid 53231] [client 20.9.82.33:28501] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/checkout.php"] [unique_id "afhBtE5l1qgo2JEi65l8lwAAAE4"]
[Mon May 04 14:50:28.952315 2026] [:error] [pid 53248:tid 53273] [client 20.9.82.33:28655] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/checkout.php"] [unique_id "afhBtAPqlCce9bsWu6jBYwAAABc"]
[Mon May 04 14:50:29.677720 2026] [:error] [pid 53248:tid 53270] [client 20.9.82.33:28480] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/checkout.php"] [unique_id "afhBtQPqlCce9bsWu6jBZQAAABQ"]
[Mon May 04 14:50:30.667202 2026] [:error] [pid 53248:tid 53259] [client 20.9.82.33:28549] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/checkout.php"] [unique_id "afhBtgPqlCce9bsWu6jBZwAAAAk"]
[Mon May 04 14:50:31.429159 2026] [:error] [pid 53248:tid 53254] [client 20.9.82.33:28557] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/fictioner.php"] [unique_id "afhBtwPqlCce9bsWu6jBagAAAAQ"]
[Mon May 04 14:50:32.158948 2026] [:error] [pid 53161:tid 53237] [client 20.9.82.33:28657] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/fictioner.php"] [unique_id "afhBuE5l1qgo2JEi65l8ngAAAFQ"]
[Mon May 04 14:50:33.255599 2026] [:error] [pid 53248:tid 53274] [client 20.9.82.33:28481] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/fictioner.php"] [unique_id "afhBuQPqlCce9bsWu6jBbgAAABg"]
[Mon May 04 14:50:34.010976 2026] [:error] [pid 53160:tid 53211] [client 20.9.82.33:28564] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/fictioner.php"] [unique_id "afhBuqNFKJC8NNHHXb4_8QAAARU"]
[Mon May 04 14:50:34.827922 2026] [:error] [pid 53160:tid 53193] [client 20.9.82.33:42291] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ortasekerli1.php"] [unique_id "afhBuqNFKJC8NNHHXb4_8gAAAQM"]
[Mon May 04 14:50:35.654886 2026] [:error] [pid 53248:tid 53265] [client 20.9.82.33:28652] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ortasekerli1.php"] [unique_id "afhBuwPqlCce9bsWu6jBdQAAAA8"]
[Mon May 04 14:50:36.568042 2026] [proxy_fcgi:error] [pid 53160:tid 53209] [client 20.9.82.33:8912] AH01071: Got error 'Primary script unknown'
[Mon May 04 14:50:36.854721 2026] [proxy_fcgi:error] [pid 53160:tid 53199] [client 20.9.82.33:8912] AH01071: Got error 'Primary script unknown'
[Mon May 04 14:50:37.099111 2026] [proxy_fcgi:error] [pid 53160:tid 53202] [client 20.9.82.33:8912] AH01071: Got error 'Primary script unknown'
[Mon May 04 14:50:37.362539 2026] [proxy_fcgi:error] [pid 53160:tid 53191] [client 20.9.82.33:8912] AH01071: Got error 'Primary script unknown'
[Mon May 04 14:50:37.609758 2026] [proxy_fcgi:error] [pid 53160:tid 53198] [client 20.9.82.33:8912] AH01071: Got error 'Primary script unknown'
[Mon May 04 14:50:37.853534 2026] [proxy_fcgi:error] [pid 53160:tid 53195] [client 20.9.82.33:8912] AH01071: Got error 'Primary script unknown'
[Mon May 04 14:50:38.121984 2026] [proxy_fcgi:error] [pid 53160:tid 53207] [client 20.9.82.33:8912] AH01071: Got error 'Primary script unknown'
[Mon May 04 14:50:38.371268 2026] [proxy_fcgi:error] [pid 53160:tid 53200] [client 20.9.82.33:8912] AH01071: Got error 'Primary script unknown'
[Mon May 04 14:50:38.656913 2026] [proxy_fcgi:error] [pid 53160:tid 53204] [client 20.9.82.33:8912] AH01071: Got error 'Primary script unknown'
[Mon May 04 14:50:38.917935 2026] [proxy_fcgi:error] [pid 53160:tid 53212] [client 20.9.82.33:8912] AH01071: Got error 'Primary script unknown'
[Mon May 04 14:50:39.175539 2026] [proxy_fcgi:error] [pid 53160:tid 53192] [client 20.9.82.33:8912] AH01071: Got error 'Primary script unknown'
[Mon May 04 14:50:39.421729 2026] [:error] [pid 53160:tid 53194] [client 20.9.82.33:8912] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/drykl.php"] [unique_id "afhBv6NFKJC8NNHHXb5ABAAAAQQ"]
[Mon May 04 14:50:41.011919 2026] [:error] [pid 53248:tid 53253] [client 20.9.82.33:42269] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/drykl.php"] [unique_id "afhBwQPqlCce9bsWu6jBgQAAAAM"]
[Mon May 04 14:50:41.947417 2026] [:error] [pid 53248:tid 53259] [client 20.9.82.33:28650] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/drykl.php"] [unique_id "afhBwQPqlCce9bsWu6jBhQAAAAk"]
[Mon May 04 14:50:42.968200 2026] [:error] [pid 53161:tid 53232] [client 20.9.82.33:28612] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/drykl.php"] [unique_id "afhBwk5l1qgo2JEi65l8rQAAAE8"]
[Mon May 04 14:50:43.798150 2026] [:error] [pid 53160:tid 53202] [client 20.9.82.33:28467] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xxx.php"] [unique_id "afhBw6NFKJC8NNHHXb5ABgAAAQw"]
[Mon May 04 14:50:44.383853 2026] [:error] [pid 53159:tid 53163] [client 20.9.82.33:28570] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xxx.php"] [unique_id "afhBxFZg7pq4CfE3tM-eLwAAAMA"]
[Mon May 04 14:50:45.232558 2026] [:error] [pid 53160:tid 53203] [client 20.9.82.33:28491] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xxx.php"] [unique_id "afhBxaNFKJC8NNHHXb5ACwAAAQ0"]
[Mon May 04 14:50:45.871886 2026] [:error] [pid 53160:tid 53207] [client 20.9.82.33:28495] [client 20.9.82.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/xxx.php"] [unique_id "afhBxaNFKJC8NNHHXb5ADgAAARE"]
[Mon May 04 15:45:06.375093 2026] [:error] [pid 61043:tid 61079] [client 136.107.232.91:64244] [client 136.107.232.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/"] [unique_id "afhOgp8-LwtfURjiAbBqbwAAAEQ"]
[Mon May 04 15:45:06.803099 2026] [:error] [pid 61150:tid 61166] [client 136.107.232.91:65397] [client 136.107.232.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/"] [unique_id "afhOgu8QXWVLiwIGVpc8UAAAAU0"]
[Mon May 04 15:45:07.229253 2026] [:error] [pid 3341:tid 3350] [client 136.107.232.91:50734] [client 136.107.232.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "afhOg09o3_LordU0wW7qegAAAIY"]
[Mon May 04 20:24:07.850056 2026] [:error] [pid 32471:tid 32495] [client 34.24.211.32:54336] [client 34.24.211.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "afiP53mjpb9EYq6AqhJVAAAAARU"]
[Tue May 05 03:10:31.651621 2026] [proxy_fcgi:error] [pid 61042:tid 61056] [client 20.29.119.89:16383] AH01071: Got error 'Primary script unknown'
[Tue May 05 03:10:31.842691 2026] [proxy_fcgi:error] [pid 61042:tid 61065] [client 20.29.119.89:16383] AH01071: Got error 'Primary script unknown'
[Tue May 05 03:10:32.032881 2026] [proxy_fcgi:error] [pid 61042:tid 61051] [client 20.29.119.89:16383] AH01071: Got error 'Primary script unknown'
[Tue May 05 03:10:32.223591 2026] [proxy_fcgi:error] [pid 61042:tid 61063] [client 20.29.119.89:16383] AH01071: Got error 'Primary script unknown'
[Tue May 05 03:10:32.414402 2026] [proxy_fcgi:error] [pid 61042:tid 61053] [client 20.29.119.89:16383] AH01071: Got error 'Primary script unknown'
[Tue May 05 03:10:32.608923 2026] [proxy_fcgi:error] [pid 61042:tid 61059] [client 20.29.119.89:16383] AH01071: Got error 'Primary script unknown'
[Tue May 05 03:10:32.799119 2026] [proxy_fcgi:error] [pid 61042:tid 61055] [client 20.29.119.89:16383] AH01071: Got error 'Primary script unknown'
[Tue May 05 03:10:32.990462 2026] [proxy_fcgi:error] [pid 61042:tid 61049] [client 20.29.119.89:16383] AH01071: Got error 'Primary script unknown'
[Tue May 05 03:10:33.180427 2026] [proxy_fcgi:error] [pid 61042:tid 61048] [client 20.29.119.89:16383] AH01071: Got error 'Primary script unknown'
[Tue May 05 03:10:33.370700 2026] [proxy_fcgi:error] [pid 61042:tid 61052] [client 20.29.119.89:16383] AH01071: Got error 'Primary script unknown'
[Tue May 05 03:10:33.559716 2026] [:error] [pid 61042:tid 61050] [client 20.29.119.89:16383] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/new.php"] [unique_id "afjvKUnAPPS1fjubA9SMXAAAAMQ"]
[Tue May 05 03:10:33.955134 2026] [:error] [pid 32471:tid 32480] [client 20.29.119.89:16382] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/new.php"] [unique_id "afjvKXmjpb9EYq6AqhLPSQAAAQY"]
[Tue May 05 03:10:34.380972 2026] [:error] [pid 61043:tid 61085] [client 20.29.119.89:16379] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/new.php"] [unique_id "afjvKp8-LwtfURjiAbAUdwAAAEo"]
[Tue May 05 03:10:34.845339 2026] [:error] [pid 61043:tid 61083] [client 20.29.119.89:16336] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/new.php"] [unique_id "afjvKp8-LwtfURjiAbAUeAAAAEg"]
[Tue May 05 03:10:35.267146 2026] [:error] [pid 3341:tid 3352] [client 20.29.119.89:16326] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aa.php"] [unique_id "afjvK09o3_LordU0wW7oHgAAAIg"]
[Tue May 05 03:10:35.725399 2026] [:error] [pid 61043:tid 61088] [client 20.29.119.89:16270] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aa.php"] [unique_id "afjvK58-LwtfURjiAbAUeQAAAE0"]
[Tue May 05 03:10:36.124194 2026] [:error] [pid 32471:tid 32476] [client 20.29.119.89:16260] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aa.php"] [unique_id "afjvLHmjpb9EYq6AqhLPSgAAAQI"]
[Tue May 05 03:10:36.526676 2026] [:error] [pid 61043:tid 61079] [client 20.29.119.89:16366] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aa.php"] [unique_id "afjvLJ8-LwtfURjiAbAUegAAAEQ"]
[Tue May 05 03:10:36.943685 2026] [:error] [pid 61043:tid 61080] [client 20.29.119.89:16348] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jk.php"] [unique_id "afjvLJ8-LwtfURjiAbAUewAAAEU"]
[Tue May 05 03:10:37.334310 2026] [:error] [pid 32471:tid 32475] [client 20.29.119.89:16333] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jk.php"] [unique_id "afjvLXmjpb9EYq6AqhLPSwAAAQE"]
[Tue May 05 03:10:37.787640 2026] [:error] [pid 61044:tid 61122] [client 20.29.119.89:16344] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jk.php"] [unique_id "afjvLUw8w2zZZXI6H1vXywAAABQ"]
[Tue May 05 03:10:38.184375 2026] [:error] [pid 32471:tid 32492] [client 20.29.119.89:16267] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jk.php"] [unique_id "afjvLnmjpb9EYq6AqhLPTQAAARI"]
[Tue May 05 03:10:38.575221 2026] [:error] [pid 32471:tid 32482] [client 20.29.119.89:16268] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gcqoa.php"] [unique_id "afjvLnmjpb9EYq6AqhLPTgAAAQg"]
[Tue May 05 03:10:38.965834 2026] [:error] [pid 32471:tid 32496] [client 20.29.119.89:16376] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gcqoa.php"] [unique_id "afjvLnmjpb9EYq6AqhLPTwAAARY"]
[Tue May 05 03:10:39.372314 2026] [:error] [pid 61042:tid 61070] [client 20.29.119.89:16358] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gcqoa.php"] [unique_id "afjvL0nAPPS1fjubA9SMXwAAANg"]
[Tue May 05 03:10:39.773031 2026] [:error] [pid 32471:tid 32489] [client 20.29.119.89:16342] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gcqoa.php"] [unique_id "afjvL3mjpb9EYq6AqhLPUAAAAQ8"]
[Tue May 05 03:10:40.161771 2026] [:error] [pid 32471:tid 32488] [client 20.29.119.89:16282] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/plugin-editor.php"] [unique_id "afjvMHmjpb9EYq6AqhLPUQAAAQ4"]
[Tue May 05 03:10:40.544586 2026] [:error] [pid 32471:tid 32477] [client 20.29.119.89:16276] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/plugin-editor.php"] [unique_id "afjvMHmjpb9EYq6AqhLPUgAAAQM"]
[Tue May 05 03:10:40.931411 2026] [:error] [pid 32471:tid 32493] [client 20.29.119.89:16332] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/plugin-editor.php"] [unique_id "afjvMHmjpb9EYq6AqhLPUwAAARM"]
[Tue May 05 03:10:41.331590 2026] [:error] [pid 32471:tid 32481] [client 20.29.119.89:16330] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/plugin-editor.php"] [unique_id "afjvMXmjpb9EYq6AqhLPVQAAAQc"]
[Tue May 05 03:10:41.728023 2026] [:error] [pid 3341:tid 3351] [client 20.29.119.89:16345] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/plugin-install.php"] [unique_id "afjvMU9o3_LordU0wW7oJAAAAIc"]
[Tue May 05 03:10:42.117787 2026] [:error] [pid 61044:tid 61105] [client 20.29.119.89:16373] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/plugin-install.php"] [unique_id "afjvMkw8w2zZZXI6H1vXzAAAAAM"]
[Tue May 05 03:10:42.510768 2026] [:error] [pid 32471:tid 32497] [client 20.29.119.89:16324] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/plugin-install.php"] [unique_id "afjvMnmjpb9EYq6AqhLPWQAAARc"]
[Tue May 05 03:10:42.915154 2026] [:error] [pid 32471:tid 32486] [client 20.29.119.89:16372] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/plugin-install.php"] [unique_id "afjvMnmjpb9EYq6AqhLPWgAAAQw"]
[Tue May 05 03:10:43.294793 2026] [:error] [pid 32471:tid 32476] [client 20.29.119.89:16325] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/profile.php"] [unique_id "afjvM3mjpb9EYq6AqhLPWwAAAQI"]
[Tue May 05 03:10:43.708421 2026] [:error] [pid 32471:tid 32475] [client 20.29.119.89:16353] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/profile.php"] [unique_id "afjvM3mjpb9EYq6AqhLPXAAAAQE"]
[Tue May 05 03:10:44.125894 2026] [:error] [pid 3341:tid 3346] [client 20.29.119.89:16377] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/profile.php"] [unique_id "afjvNE9o3_LordU0wW7oJgAAAII"]
[Tue May 05 03:10:44.538943 2026] [:error] [pid 61150:tid 61165] [client 20.29.119.89:16266] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/profile.php"] [unique_id "afjvNO8QXWVLiwIGVpfK3QAAAUw"]
[Tue May 05 03:10:44.968870 2026] [:error] [pid 32471:tid 32482] [client 20.29.119.89:16275] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class-t.api.php"] [unique_id "afjvNHmjpb9EYq6AqhLPXgAAAQg"]
[Tue May 05 03:10:45.366204 2026] [:error] [pid 61150:tid 61163] [client 20.29.119.89:16340] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class-t.api.php"] [unique_id "afjvNe8QXWVLiwIGVpfK3wAAAUo"]
[Tue May 05 03:10:45.763654 2026] [:error] [pid 3341:tid 3357] [client 20.29.119.89:16338] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class-t.api.php"] [unique_id "afjvNU9o3_LordU0wW7oKAAAAI0"]
[Tue May 05 03:10:46.157784 2026] [:error] [pid 61150:tid 61160] [client 20.29.119.89:16368] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class-t.api.php"] [unique_id "afjvNu8QXWVLiwIGVpfK4QAAAUc"]
[Tue May 05 03:10:46.547907 2026] [:error] [pid 3341:tid 3350] [client 20.29.119.89:16305] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-links-opml.php"] [unique_id "afjvNk9o3_LordU0wW7oKQAAAIY"]
[Tue May 05 03:10:46.957759 2026] [:error] [pid 3341:tid 3358] [client 20.29.119.89:16351] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-links-opml.php"] [unique_id "afjvNk9o3_LordU0wW7oKgAAAI4"]
[Tue May 05 03:10:47.340375 2026] [:error] [pid 61150:tid 61162] [client 20.29.119.89:16350] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-links-opml.php"] [unique_id "afjvN-8QXWVLiwIGVpfK4gAAAUk"]
[Tue May 05 03:10:47.732570 2026] [:error] [pid 3341:tid 3344] [client 20.29.119.89:16357] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-links-opml.php"] [unique_id "afjvN09o3_LordU0wW7oKwAAAIA"]
[Tue May 05 03:10:48.144018 2026] [:error] [pid 61150:tid 61157] [client 20.29.119.89:16322] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-class-api.php"] [unique_id "afjvOO8QXWVLiwIGVpfK5AAAAUQ"]
[Tue May 05 03:10:48.574499 2026] [:error] [pid 3341:tid 3355] [client 20.29.119.89:16264] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-class-api.php"] [unique_id "afjvOE9o3_LordU0wW7oLAAAAIs"]
[Tue May 05 03:10:49.014392 2026] [:error] [pid 32471:tid 32491] [client 20.29.119.89:16378] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-class-api.php"] [unique_id "afjvOXmjpb9EYq6AqhLPYQAAARE"]
[Tue May 05 03:10:49.399203 2026] [:error] [pid 61150:tid 61175] [client 20.29.119.89:16337] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-class-api.php"] [unique_id "afjvOe8QXWVLiwIGVpfK5QAAAVY"]
[Tue May 05 03:10:49.780835 2026] [:error] [pid 61042:tid 61058] [client 20.29.119.89:16374] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-class-atom.php"] [unique_id "afjvOUnAPPS1fjubA9SMYQAAAMw"]
[Tue May 05 03:10:50.176747 2026] [:error] [pid 3341:tid 3365] [client 20.29.119.89:16365] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-class-atom.php"] [unique_id "afjvOk9o3_LordU0wW7oLQAAAJU"]
[Tue May 05 03:10:50.570041 2026] [:error] [pid 3341:tid 3349] [client 20.29.119.89:16343] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-class-atom.php"] [unique_id "afjvOk9o3_LordU0wW7oLgAAAIU"]
[Tue May 05 03:10:50.993291 2026] [:error] [pid 3341:tid 3348] [client 20.29.119.89:16362] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-class-atom.php"] [unique_id "afjvOk9o3_LordU0wW7oLwAAAIQ"]
[Tue May 05 03:10:51.374544 2026] [:error] [pid 32471:tid 32490] [client 20.29.119.89:16375] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-block.php"] [unique_id "afjvO3mjpb9EYq6AqhLPYgAAARA"]
[Tue May 05 03:10:51.752293 2026] [:error] [pid 3341:tid 3360] [client 20.29.119.89:16364] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-block.php"] [unique_id "afjvO09o3_LordU0wW7oMAAAAJA"]
[Tue May 05 03:10:52.138311 2026] [:error] [pid 3341:tid 3367] [client 20.29.119.89:16318] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-block.php"] [unique_id "afjvPE9o3_LordU0wW7oMQAAAJc"]
[Tue May 05 03:10:52.529875 2026] [:error] [pid 3341:tid 3345] [client 20.29.119.89:16259] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-block.php"] [unique_id "afjvPE9o3_LordU0wW7oMgAAAIE"]
[Tue May 05 03:10:52.927318 2026] [:error] [pid 3341:tid 3351] [client 20.29.119.89:16205] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-signup.php"] [unique_id "afjvPE9o3_LordU0wW7oMwAAAIc"]
[Tue May 05 03:10:53.322112 2026] [:error] [pid 61150:tid 61166] [client 20.29.119.89:16371] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-signup.php"] [unique_id "afjvPe8QXWVLiwIGVpfK5gAAAU0"]
[Tue May 05 03:10:53.710590 2026] [:error] [pid 61150:tid 61170] [client 20.29.119.89:16257] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-signup.php"] [unique_id "afjvPe8QXWVLiwIGVpfK5wAAAVE"]
[Tue May 05 03:10:54.128438 2026] [:error] [pid 3341:tid 3354] [client 20.29.119.89:16283] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-signup.php"] [unique_id "afjvPk9o3_LordU0wW7oNQAAAIo"]
[Tue May 05 03:10:54.518233 2026] [:error] [pid 61150:tid 61154] [client 20.29.119.89:16354] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-xmlsia.php"] [unique_id "afjvPu8QXWVLiwIGVpfK6AAAAUE"]
[Tue May 05 03:10:54.928114 2026] [:error] [pid 32471:tid 32485] [client 20.29.119.89:16265] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-xmlsia.php"] [unique_id "afjvPnmjpb9EYq6AqhLPZAAAAQs"]
[Tue May 05 03:10:55.309003 2026] [:error] [pid 32471:tid 32497] [client 20.29.119.89:16323] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-xmlsia.php"] [unique_id "afjvP3mjpb9EYq6AqhLPZQAAARc"]
[Tue May 05 03:10:55.700744 2026] [:error] [pid 32471:tid 32498] [client 20.29.119.89:16359] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-xmlsia.php"] [unique_id "afjvP3mjpb9EYq6AqhLPZgAAARg"]
[Tue May 05 03:10:56.078707 2026] [:error] [pid 32471:tid 32484] [client 20.29.119.89:16281] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-inic3.php"] [unique_id "afjvQHmjpb9EYq6AqhLPZwAAAQo"]
[Tue May 05 03:10:56.462042 2026] [:error] [pid 32471:tid 32486] [client 20.29.119.89:16303] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-inic3.php"] [unique_id "afjvQHmjpb9EYq6AqhLPaQAAAQw"]
[Tue May 05 03:10:56.843053 2026] [:error] [pid 32471:tid 32479] [client 20.29.119.89:16278] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-inic3.php"] [unique_id "afjvQHmjpb9EYq6AqhLPagAAAQU"]
[Tue May 05 03:10:57.237877 2026] [:error] [pid 32471:tid 32494] [client 20.29.119.89:16369] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-inic3.php"] [unique_id "afjvQXmjpb9EYq6AqhLPawAAARQ"]
[Tue May 05 03:10:57.629427 2026] [:error] [pid 61044:tid 61111] [client 20.29.119.89:16243] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ftde.php"] [unique_id "afjvQUw8w2zZZXI6H1vXzwAAAAk"]
[Tue May 05 03:10:58.011632 2026] [:error] [pid 32471:tid 32476] [client 20.29.119.89:16311] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ftde.php"] [unique_id "afjvQnmjpb9EYq6AqhLPbAAAAQI"]
[Tue May 05 03:10:58.397204 2026] [:error] [pid 61150:tid 61161] [client 20.29.119.89:16144] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ftde.php"] [unique_id "afjvQu8QXWVLiwIGVpfK6QAAAUg"]
[Tue May 05 03:10:58.813293 2026] [:error] [pid 32471:tid 32483] [client 20.29.119.89:16263] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ftde.php"] [unique_id "afjvQnmjpb9EYq6AqhLPbQAAAQk"]
[Tue May 05 03:10:59.220427 2026] [:error] [pid 32471:tid 32492] [client 20.29.119.89:16274] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bthil.php"] [unique_id "afjvQ3mjpb9EYq6AqhLPbwAAARI"]
[Tue May 05 03:10:59.634147 2026] [:error] [pid 61044:tid 61114] [client 20.29.119.89:16299] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bthil.php"] [unique_id "afjvQ0w8w2zZZXI6H1vX0QAAAAw"]
[Tue May 05 03:11:00.035841 2026] [:error] [pid 61044:tid 61120] [client 20.29.119.89:16286] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bthil.php"] [unique_id "afjvREw8w2zZZXI6H1vX0gAAABI"]
[Tue May 05 03:11:00.439752 2026] [:error] [pid 61044:tid 61126] [client 20.29.119.89:16199] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bthil.php"] [unique_id "afjvREw8w2zZZXI6H1vX1QAAABg"]
[Tue May 05 03:11:00.824021 2026] [:error] [pid 32471:tid 32493] [client 20.29.119.89:16380] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/albin.php"] [unique_id "afjvRHmjpb9EYq6AqhLPcwAAARM"]
[Tue May 05 03:11:01.243365 2026] [:error] [pid 32471:tid 32490] [client 20.29.119.89:16272] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/albin.php"] [unique_id "afjvRXmjpb9EYq6AqhLPdAAAARA"]
[Tue May 05 03:11:01.630528 2026] [:error] [pid 61043:tid 61083] [client 20.29.119.89:16346] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/albin.php"] [unique_id "afjvRZ8-LwtfURjiAbAUgwAAAEg"]
[Tue May 05 03:11:02.015020 2026] [:error] [pid 32471:tid 32484] [client 20.29.119.89:16347] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/albin.php"] [unique_id "afjvRnmjpb9EYq6AqhLPeAAAAQo"]
[Tue May 05 03:11:02.415749 2026] [:error] [pid 61042:tid 61059] [client 20.29.119.89:16312] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-firewall.php"] [unique_id "afjvRknAPPS1fjubA9SMYgAAAM0"]
[Tue May 05 03:11:02.796171 2026] [:error] [pid 61042:tid 61055] [client 20.29.119.89:16256] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-firewall.php"] [unique_id "afjvRknAPPS1fjubA9SMYwAAAMk"]
[Tue May 05 03:11:03.175767 2026] [:error] [pid 61150:tid 61169] [client 20.29.119.89:16363] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-firewall.php"] [unique_id "afjvR-8QXWVLiwIGVpfK6gAAAVA"]
[Tue May 05 03:11:03.596216 2026] [:error] [pid 32471:tid 32475] [client 20.29.119.89:16349] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-firewall.php"] [unique_id "afjvR3mjpb9EYq6AqhLPewAAAQE"]
[Tue May 05 03:11:03.981934 2026] [:error] [pid 32471:tid 32495] [client 20.29.119.89:16317] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/samll.php"] [unique_id "afjvR3mjpb9EYq6AqhLPfQAAARU"]
[Tue May 05 03:11:04.374219 2026] [:error] [pid 32471:tid 32483] [client 20.29.119.89:16291] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/samll.php"] [unique_id "afjvSHmjpb9EYq6AqhLPfgAAAQk"]
[Tue May 05 03:11:04.821560 2026] [:error] [pid 32471:tid 32492] [client 20.29.119.89:16196] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/samll.php"] [unique_id "afjvSHmjpb9EYq6AqhLPfwAAARI"]
[Tue May 05 03:11:05.268064 2026] [:error] [pid 32471:tid 32488] [client 20.29.119.89:16321] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/samll.php"] [unique_id "afjvSXmjpb9EYq6AqhLPgAAAAQ4"]
[Tue May 05 03:11:05.719797 2026] [:error] [pid 61043:tid 61088] [client 20.29.119.89:16287] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ah25.php"] [unique_id "afjvSZ8-LwtfURjiAbAUhAAAAE0"]
[Tue May 05 03:11:06.161480 2026] [:error] [pid 61043:tid 61079] [client 20.29.119.89:16370] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ah25.php"] [unique_id "afjvSp8-LwtfURjiAbAUhQAAAEQ"]
[Tue May 05 03:11:06.578764 2026] [:error] [pid 61043:tid 61080] [client 20.29.119.89:16201] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ah25.php"] [unique_id "afjvSp8-LwtfURjiAbAUhgAAAEU"]
[Tue May 05 03:11:06.993221 2026] [:error] [pid 32471:tid 32479] [client 20.29.119.89:16227] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ah25.php"] [unique_id "afjvSnmjpb9EYq6AqhLPiQAAAQU"]
[Tue May 05 03:11:07.384102 2026] [:error] [pid 32471:tid 32485] [client 20.29.119.89:16327] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/txets.php"] [unique_id "afjvS3mjpb9EYq6AqhLPigAAAQs"]
[Tue May 05 03:11:07.803610 2026] [:error] [pid 32471:tid 32495] [client 20.29.119.89:16147] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/txets.php"] [unique_id "afjvS3mjpb9EYq6AqhLPjAAAARU"]
[Tue May 05 03:11:08.179621 2026] [:error] [pid 61042:tid 61049] [client 20.29.119.89:16258] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/txets.php"] [unique_id "afjvTEnAPPS1fjubA9SMZAAAAMM"]
[Tue May 05 03:11:08.618484 2026] [:error] [pid 61043:tid 61092] [client 20.29.119.89:16271] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/txets.php"] [unique_id "afjvTJ8-LwtfURjiAbAUhwAAAFE"]
[Tue May 05 03:11:09.041969 2026] [:error] [pid 61042:tid 61048] [client 20.29.119.89:16352] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aevly.php"] [unique_id "afjvTUnAPPS1fjubA9SMZQAAAMI"]
[Tue May 05 03:11:09.479181 2026] [:error] [pid 32471:tid 32496] [client 20.29.119.89:16309] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aevly.php"] [unique_id "afjvTXmjpb9EYq6AqhLPkAAAARY"]
[Tue May 05 03:11:09.872582 2026] [:error] [pid 32471:tid 32487] [client 20.29.119.89:16277] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aevly.php"] [unique_id "afjvTXmjpb9EYq6AqhLPkQAAAQ0"]
[Tue May 05 03:11:10.261006 2026] [:error] [pid 32471:tid 32491] [client 20.29.119.89:16233] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aevly.php"] [unique_id "afjvTnmjpb9EYq6AqhLPkwAAARE"]
[Tue May 05 03:11:10.643470 2026] [:error] [pid 32471:tid 32477] [client 20.29.119.89:16230] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tires.php"] [unique_id "afjvTnmjpb9EYq6AqhLPlAAAAQM"]
[Tue May 05 03:11:11.056806 2026] [:error] [pid 32471:tid 32493] [client 20.29.119.89:16284] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tires.php"] [unique_id "afjvT3mjpb9EYq6AqhLPlQAAARM"]
[Tue May 05 03:11:11.464381 2026] [:error] [pid 61150:tid 61158] [client 20.29.119.89:16209] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tires.php"] [unique_id "afjvT-8QXWVLiwIGVpfK7AAAAUU"]
[Tue May 05 03:11:11.883255 2026] [:error] [pid 32471:tid 32484] [client 20.29.119.89:16300] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tires.php"] [unique_id "afjvT3mjpb9EYq6AqhLPlgAAAQo"]
[Tue May 05 03:11:12.266660 2026] [:error] [pid 32471:tid 32482] [client 20.29.119.89:16279] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-slss.php"] [unique_id "afjvUHmjpb9EYq6AqhLPlwAAAQg"]
[Tue May 05 03:11:12.688269 2026] [:error] [pid 3341:tid 3355] [client 20.29.119.89:16210] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-slss.php"] [unique_id "afjvUE9o3_LordU0wW7oOwAAAIs"]
[Tue May 05 03:11:13.089963 2026] [:error] [pid 61043:tid 61097] [client 20.29.119.89:16250] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-slss.php"] [unique_id "afjvUZ8-LwtfURjiAbAUiAAAAFY"]
[Tue May 05 03:11:13.481554 2026] [:error] [pid 32471:tid 32489] [client 20.29.119.89:16223] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-slss.php"] [unique_id "afjvUXmjpb9EYq6AqhLPmAAAAQ8"]
[Tue May 05 03:11:14.036372 2026] [:error] [pid 32471:tid 32479] [client 20.29.119.89:16197] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file30.php"] [unique_id "afjvUnmjpb9EYq6AqhLPmgAAAQU"]
[Tue May 05 03:11:14.446058 2026] [:error] [pid 32471:tid 32475] [client 20.29.119.89:16150] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file30.php"] [unique_id "afjvUnmjpb9EYq6AqhLPmwAAAQE"]
[Tue May 05 03:11:14.863389 2026] [:error] [pid 32471:tid 32495] [client 20.29.119.89:16222] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file30.php"] [unique_id "afjvUnmjpb9EYq6AqhLPnAAAARU"]
[Tue May 05 03:11:15.288016 2026] [:error] [pid 32471:tid 32483] [client 20.29.119.89:16214] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file30.php"] [unique_id "afjvU3mjpb9EYq6AqhLPnQAAAQk"]
[Tue May 05 03:11:15.782792 2026] [:error] [pid 32471:tid 32478] [client 20.29.119.89:16293] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ccou.php"] [unique_id "afjvU3mjpb9EYq6AqhLPngAAAQQ"]
[Tue May 05 03:11:16.445469 2026] [:error] [pid 32471:tid 32487] [client 20.29.119.89:16301] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ccou.php"] [unique_id "afjvVHmjpb9EYq6AqhLPnwAAAQ0"]
[Tue May 05 03:11:16.879592 2026] [:error] [pid 32471:tid 32490] [client 20.29.119.89:16290] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ccou.php"] [unique_id "afjvVHmjpb9EYq6AqhLPoAAAARA"]
[Tue May 05 03:11:17.308509 2026] [:error] [pid 32471:tid 32497] [client 20.29.119.89:16273] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ccou.php"] [unique_id "afjvVXmjpb9EYq6AqhLPogAAARc"]
[Tue May 05 03:11:17.800550 2026] [:error] [pid 61044:tid 61118] [client 20.29.119.89:16194] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file59.php"] [unique_id "afjvVUw8w2zZZXI6H1vX2AAAABA"]
[Tue May 05 03:11:18.214823 2026] [:error] [pid 32471:tid 32474] [client 20.29.119.89:16212] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file59.php"] [unique_id "afjvVnmjpb9EYq6AqhLPpAAAAQA"]
[Tue May 05 03:11:18.631134 2026] [:error] [pid 61043:tid 61093] [client 20.29.119.89:16320] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file59.php"] [unique_id "afjvVp8-LwtfURjiAbAUiQAAAFI"]
[Tue May 05 03:11:19.029993 2026] [:error] [pid 32471:tid 32482] [client 20.29.119.89:16319] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file59.php"] [unique_id "afjvV3mjpb9EYq6AqhLPpgAAAQg"]
[Tue May 05 03:11:19.437616 2026] [:error] [pid 32471:tid 32489] [client 20.29.119.89:16200] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-at.php"] [unique_id "afjvV3mjpb9EYq6AqhLPqAAAAQ8"]
[Tue May 05 03:11:19.866390 2026] [:error] [pid 32471:tid 32486] [client 20.29.119.89:16339] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-at.php"] [unique_id "afjvV3mjpb9EYq6AqhLPqQAAAQw"]
[Tue May 05 03:11:20.262101 2026] [:error] [pid 32471:tid 32494] [client 20.29.119.89:16261] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-at.php"] [unique_id "afjvWHmjpb9EYq6AqhLPqgAAARQ"]
[Tue May 05 03:11:20.744267 2026] [:error] [pid 61043:tid 61098] [client 20.29.119.89:16193] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-at.php"] [unique_id "afjvWJ8-LwtfURjiAbAUiwAAAFc"]
[Tue May 05 03:11:21.145156 2026] [:error] [pid 32471:tid 32476] [client 20.29.119.89:16172] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/colors/blue/file.php"] [unique_id "afjvWXmjpb9EYq6AqhLPrAAAAQI"]
[Tue May 05 03:11:21.542359 2026] [:error] [pid 61043:tid 61077] [client 20.29.119.89:16314] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/colors/blue/file.php"] [unique_id "afjvWZ8-LwtfURjiAbAUjAAAAEI"]
[Tue May 05 03:11:21.944795 2026] [:error] [pid 61043:tid 61089] [client 20.29.119.89:16254] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/colors/blue/file.php"] [unique_id "afjvWZ8-LwtfURjiAbAUjQAAAE4"]
[Tue May 05 03:11:22.346043 2026] [:error] [pid 32471:tid 32492] [client 20.29.119.89:16211] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/colors/blue/file.php"] [unique_id "afjvWnmjpb9EYq6AqhLPsAAAARI"]
[Tue May 05 03:11:22.782305 2026] [:error] [pid 32471:tid 32491] [client 20.29.119.89:16145] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/333.php"] [unique_id "afjvWnmjpb9EYq6AqhLPsgAAARE"]
[Tue May 05 03:11:23.165785 2026] [:error] [pid 32471:tid 32493] [client 20.29.119.89:16231] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/333.php"] [unique_id "afjvW3mjpb9EYq6AqhLPtAAAARM"]
[Tue May 05 03:11:23.655115 2026] [:error] [pid 3341:tid 3365] [client 20.29.119.89:16149] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/333.php"] [unique_id "afjvW09o3_LordU0wW7oPAAAAJU"]
[Tue May 05 03:11:24.071613 2026] [:error] [pid 32471:tid 32484] [client 20.29.119.89:16294] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/333.php"] [unique_id "afjvXHmjpb9EYq6AqhLPtgAAAQo"]
[Tue May 05 03:11:24.450939 2026] [:error] [pid 32471:tid 32481] [client 20.29.119.89:16355] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/atomlib.php"] [unique_id "afjvXHmjpb9EYq6AqhLPtwAAAQc"]
[Tue May 05 03:11:24.870186 2026] [:error] [pid 32471:tid 32482] [client 20.29.119.89:16208] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/atomlib.php"] [unique_id "afjvXHmjpb9EYq6AqhLPuQAAAQg"]
[Tue May 05 03:11:25.249040 2026] [:error] [pid 32471:tid 32479] [client 20.29.119.89:16285] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/atomlib.php"] [unique_id "afjvXXmjpb9EYq6AqhLPugAAAQU"]
[Tue May 05 03:11:25.639992 2026] [:error] [pid 3341:tid 3351] [client 20.29.119.89:16288] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/atomlib.php"] [unique_id "afjvXU9o3_LordU0wW7oQAAAAIc"]
[Tue May 05 03:11:26.018738 2026] [:error] [pid 3341:tid 3354] [client 20.29.119.89:16321] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ff1.php"] [unique_id "afjvXk9o3_LordU0wW7oQQAAAIo"]
[Tue May 05 03:11:26.419987 2026] [:error] [pid 3341:tid 3359] [client 20.29.119.89:16280] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ff1.php"] [unique_id "afjvXk9o3_LordU0wW7oQgAAAI8"]
[Tue May 05 03:11:26.813281 2026] [:error] [pid 3341:tid 3363] [client 20.29.119.89:16217] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ff1.php"] [unique_id "afjvXk9o3_LordU0wW7oQwAAAJM"]
[Tue May 05 03:11:27.193165 2026] [:error] [pid 61150:tid 61160] [client 20.29.119.89:16203] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ff1.php"] [unique_id "afjvX-8QXWVLiwIGVpfK7gAAAUc"]
[Tue May 05 03:11:27.579677 2026] [:error] [pid 32471:tid 32483] [client 20.29.119.89:16296] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ton.php"] [unique_id "afjvX3mjpb9EYq6AqhLPuwAAAQk"]
[Tue May 05 03:11:27.960877 2026] [:error] [pid 32471:tid 32480] [client 20.29.119.89:16204] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ton.php"] [unique_id "afjvX3mjpb9EYq6AqhLPvAAAAQY"]
[Tue May 05 03:11:28.335368 2026] [:error] [pid 61150:tid 61156] [client 20.29.119.89:16207] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ton.php"] [unique_id "afjvYO8QXWVLiwIGVpfK8QAAAUM"]
[Tue May 05 03:11:28.718089 2026] [:error] [pid 61150:tid 61162] [client 20.29.119.89:16252] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ton.php"] [unique_id "afjvYO8QXWVLiwIGVpfK8gAAAUk"]
[Tue May 05 03:11:29.141611 2026] [:error] [pid 32471:tid 32478] [client 20.29.119.89:16167] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/asas.php"] [unique_id "afjvYXmjpb9EYq6AqhLPvQAAAQQ"]
[Tue May 05 03:11:29.522535 2026] [:error] [pid 32471:tid 32493] [client 20.29.119.89:16220] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/asas.php"] [unique_id "afjvYXmjpb9EYq6AqhLPvwAAARM"]
[Tue May 05 03:11:29.906437 2026] [:error] [pid 32471:tid 32490] [client 20.29.119.89:16138] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/asas.php"] [unique_id "afjvYXmjpb9EYq6AqhLPwQAAARA"]
[Tue May 05 03:11:30.314842 2026] [:error] [pid 32471:tid 32477] [client 20.29.119.89:16133] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/asas.php"] [unique_id "afjvYnmjpb9EYq6AqhLPwgAAAQM"]
[Tue May 05 03:11:30.688757 2026] [:error] [pid 32471:tid 32497] [client 20.29.119.89:16156] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kikikoko.php"] [unique_id "afjvYnmjpb9EYq6AqhLPwwAAARc"]
[Tue May 05 03:11:31.065412 2026] [:error] [pid 32471:tid 32486] [client 20.29.119.89:16360] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kikikoko.php"] [unique_id "afjvY3mjpb9EYq6AqhLPxAAAAQw"]
[Tue May 05 03:11:31.456970 2026] [:error] [pid 32471:tid 32494] [client 20.29.119.89:16297] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kikikoko.php"] [unique_id "afjvY3mjpb9EYq6AqhLPxQAAARQ"]
[Tue May 05 03:11:31.845090 2026] [:error] [pid 3341:tid 3361] [client 20.29.119.89:16269] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kikikoko.php"] [unique_id "afjvY09o3_LordU0wW7oRQAAAJE"]
[Tue May 05 03:11:32.234145 2026] [:error] [pid 3341:tid 3347] [client 20.29.119.89:16218] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/asasx.php"] [unique_id "afjvZE9o3_LordU0wW7oRwAAAIM"]
[Tue May 05 03:11:32.613482 2026] [:error] [pid 61043:tid 61076] [client 20.29.119.89:16221] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/asasx.php"] [unique_id "afjvZJ8-LwtfURjiAbAUjwAAAEE"]
[Tue May 05 03:11:33.063859 2026] [proxy_fcgi:error] [pid 61043:tid 61075] [client 20.29.119.89:16331] AH01071: Got error 'Primary script unknown'
[Tue May 05 03:11:33.261036 2026] [proxy_fcgi:error] [pid 61043:tid 61090] [client 20.29.119.89:16331] AH01071: Got error 'Primary script unknown'
[Tue May 05 03:11:33.453013 2026] [proxy_fcgi:error] [pid 61043:tid 61078] [client 20.29.119.89:16331] AH01071: Got error 'Primary script unknown'
[Tue May 05 03:11:35.030777 2026] [proxy_fcgi:error] [pid 61043:tid 61091] [client 20.29.119.89:16331] AH01071: Got error 'Primary script unknown'
[Tue May 05 03:11:35.221692 2026] [proxy_fcgi:error] [pid 61043:tid 61082] [client 20.29.119.89:16331] AH01071: Got error 'Primary script unknown'
[Tue May 05 03:11:35.417599 2026] [proxy_fcgi:error] [pid 61043:tid 61081] [client 20.29.119.89:16331] AH01071: Got error 'Primary script unknown'
[Tue May 05 03:11:35.610542 2026] [proxy_fcgi:error] [pid 61043:tid 61094] [client 20.29.119.89:16331] AH01071: Got error 'Primary script unknown'
[Tue May 05 03:11:35.802264 2026] [proxy_fcgi:error] [pid 61043:tid 61085] [client 20.29.119.89:16331] AH01071: Got error 'Primary script unknown'
[Tue May 05 03:11:35.995873 2026] [proxy_fcgi:error] [pid 61043:tid 61083] [client 20.29.119.89:16331] AH01071: Got error 'Primary script unknown'
[Tue May 05 03:11:36.188070 2026] [proxy_fcgi:error] [pid 61043:tid 61088] [client 20.29.119.89:16331] AH01071: Got error 'Primary script unknown'
[Tue May 05 03:11:36.381098 2026] [proxy_fcgi:error] [pid 61043:tid 61079] [client 20.29.119.89:16331] AH01071: Got error 'Primary script unknown'
[Tue May 05 03:11:36.572407 2026] [:error] [pid 61043:tid 61080] [client 20.29.119.89:16331] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Sanskrit.php"] [unique_id "afjvaJ8-LwtfURjiAbAUnAAAAEU"]
[Tue May 05 03:11:36.976761 2026] [:error] [pid 32471:tid 32475] [client 20.29.119.89:16292] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Sanskrit.php"] [unique_id "afjvaHmjpb9EYq6AqhLPygAAAQE"]
[Tue May 05 03:11:37.372913 2026] [:error] [pid 61043:tid 61097] [client 20.29.119.89:16143] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Sanskrit.php"] [unique_id "afjvaZ8-LwtfURjiAbAUnQAAAFY"]
[Tue May 05 03:11:37.754566 2026] [:error] [pid 3341:tid 3348] [client 20.29.119.89:16295] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Sanskrit.php"] [unique_id "afjvaU9o3_LordU0wW7oUQAAAIQ"]
[Tue May 05 03:11:38.167886 2026] [:error] [pid 32471:tid 32495] [client 20.29.119.89:16225] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ffile.php"] [unique_id "afjvanmjpb9EYq6AqhLPywAAARU"]
[Tue May 05 03:11:38.559710 2026] [:error] [pid 61042:tid 61057] [client 20.29.119.89:16313] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ffile.php"] [unique_id "afjvaknAPPS1fjubA9SMaAAAAMs"]
[Tue May 05 03:11:38.974164 2026] [:error] [pid 61042:tid 61068] [client 20.29.119.89:16130] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ffile.php"] [unique_id "afjvaknAPPS1fjubA9SMaQAAANY"]
[Tue May 05 03:11:39.360007 2026] [:error] [pid 61044:tid 61123] [client 20.29.119.89:16202] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ffile.php"] [unique_id "afjva0w8w2zZZXI6H1vX4AAAABU"]
[Tue May 05 03:11:39.795405 2026] [:error] [pid 3341:tid 3367] [client 20.29.119.89:16315] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/layout.php"] [unique_id "afjva09o3_LordU0wW7oUwAAAJc"]
[Tue May 05 03:11:40.199748 2026] [:error] [pid 3341:tid 3363] [client 20.29.119.89:16206] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/layout.php"] [unique_id "afjvbE9o3_LordU0wW7oVAAAAJM"]
[Tue May 05 03:11:40.608960 2026] [:error] [pid 61044:tid 61114] [client 20.29.119.89:16236] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/layout.php"] [unique_id "afjvbEw8w2zZZXI6H1vX4QAAAAw"]
[Tue May 05 03:11:41.014275 2026] [:error] [pid 3341:tid 3361] [client 20.29.119.89:16154] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/layout.php"] [unique_id "afjvbU9o3_LordU0wW7oVQAAAJE"]
[Tue May 05 03:11:41.402726 2026] [:error] [pid 61150:tid 61170] [client 20.29.119.89:16306] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/1index.php"] [unique_id "afjvbe8QXWVLiwIGVpfK9QAAAVE"]
[Tue May 05 03:11:41.789780 2026] [:error] [pid 3341:tid 3353] [client 20.29.119.89:16245] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/1index.php"] [unique_id "afjvbU9o3_LordU0wW7oWAAAAIk"]
[Tue May 05 03:11:42.188945 2026] [:error] [pid 3341:tid 3356] [client 20.29.119.89:16170] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/1index.php"] [unique_id "afjvbk9o3_LordU0wW7oWQAAAIw"]
[Tue May 05 03:11:42.576117 2026] [:error] [pid 32471:tid 32492] [client 20.29.119.89:16239] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/1index.php"] [unique_id "afjvbnmjpb9EYq6AqhLPzQAAARI"]
[Tue May 05 03:11:42.964020 2026] [:error] [pid 32471:tid 32487] [client 20.29.119.89:16298] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/yas.php"] [unique_id "afjvbnmjpb9EYq6AqhLPzgAAAQ0"]
[Tue May 05 03:11:43.391544 2026] [:error] [pid 61150:tid 61167] [client 20.29.119.89:16139] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/yas.php"] [unique_id "afjvb-8QXWVLiwIGVpfK9wAAAU4"]
[Tue May 05 03:11:43.800247 2026] [:error] [pid 61150:tid 61169] [client 20.29.119.89:16241] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/yas.php"] [unique_id "afjvb-8QXWVLiwIGVpfK-AAAAVA"]
[Tue May 05 03:11:44.288459 2026] [:error] [pid 61150:tid 61172] [client 20.29.119.89:16262] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/yas.php"] [unique_id "afjvcO8QXWVLiwIGVpfK-gAAAVM"]
[Tue May 05 03:11:44.678540 2026] [:error] [pid 32471:tid 32477] [client 20.29.119.89:16198] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xozx.php"] [unique_id "afjvcHmjpb9EYq6AqhLP0QAAAQM"]
[Tue May 05 03:11:45.065555 2026] [:error] [pid 61150:tid 61165] [client 20.29.119.89:16237] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xozx.php"] [unique_id "afjvce8QXWVLiwIGVpfK_AAAAUw"]
[Tue May 05 03:11:45.463949 2026] [:error] [pid 61150:tid 61158] [client 20.29.119.89:16072] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xozx.php"] [unique_id "afjvce8QXWVLiwIGVpfK_QAAAUU"]
[Tue May 05 03:11:45.876084 2026] [:error] [pid 61150:tid 61163] [client 20.29.119.89:16178] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xozx.php"] [unique_id "afjvce8QXWVLiwIGVpfK_gAAAUo"]
[Tue May 05 03:11:46.280993 2026] [:error] [pid 61150:tid 61156] [client 20.29.119.89:16141] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/less.php"] [unique_id "afjvcu8QXWVLiwIGVpfK_wAAAUM"]
[Tue May 05 03:11:46.684999 2026] [:error] [pid 61042:tid 61067] [client 20.29.119.89:16116] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/less.php"] [unique_id "afjvcknAPPS1fjubA9SMbAAAANU"]
[Tue May 05 03:11:47.077106 2026] [:error] [pid 3341:tid 3352] [client 20.29.119.89:16146] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/less.php"] [unique_id "afjvc09o3_LordU0wW7oWwAAAIg"]
[Tue May 05 03:11:47.570528 2026] [:error] [pid 3341:tid 3364] [client 20.29.119.89:16248] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/less.php"] [unique_id "afjvc09o3_LordU0wW7oXAAAAJQ"]
[Tue May 05 03:11:47.971397 2026] [:error] [pid 61044:tid 61120] [client 20.29.119.89:16160] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/acp.php"] [unique_id "afjvc0w8w2zZZXI6H1vX5AAAABI"]
[Tue May 05 03:11:48.611748 2026] [:error] [pid 61150:tid 61176] [client 20.29.119.89:16081] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/forbidals.php"] [unique_id "afjvdO8QXWVLiwIGVpfLAgAAAVc"]
[Tue May 05 03:11:49.040599 2026] [:error] [pid 61044:tid 61117] [client 20.29.119.89:16195] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/forbidals.php"] [unique_id "afjvdUw8w2zZZXI6H1vX5gAAAA8"]
[Tue May 05 03:11:49.418720 2026] [:error] [pid 32471:tid 32486] [client 20.29.119.89:16234] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/forbidals.php"] [unique_id "afjvdXmjpb9EYq6AqhLP1AAAAQw"]
[Tue May 05 03:11:49.798550 2026] [:error] [pid 3341:tid 3365] [client 20.29.119.89:16174] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/forbidals.php"] [unique_id "afjvdU9o3_LordU0wW7oXgAAAJU"]
[Tue May 05 03:11:50.182212 2026] [:error] [pid 32471:tid 32481] [client 20.29.119.89:16381] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/popo.php"] [unique_id "afjvdnmjpb9EYq6AqhLP1QAAAQc"]
[Tue May 05 03:11:50.563022 2026] [:error] [pid 32471:tid 32494] [client 20.29.119.89:16064] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/popo.php"] [unique_id "afjvdnmjpb9EYq6AqhLP1gAAARQ"]
[Tue May 05 03:11:50.943547 2026] [:error] [pid 32471:tid 32476] [client 20.29.119.89:16255] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/popo.php"] [unique_id "afjvdnmjpb9EYq6AqhLP1wAAAQI"]
[Tue May 05 03:11:51.347932 2026] [:error] [pid 61043:tid 61086] [client 20.29.119.89:16132] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/popo.php"] [unique_id "afjvd58-LwtfURjiAbAUnwAAAEs"]
[Tue May 05 03:11:51.747155 2026] [:error] [pid 3341:tid 3345] [client 20.29.119.89:16215] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wander.php"] [unique_id "afjvd09o3_LordU0wW7oYAAAAIE"]
[Tue May 05 03:11:52.149325 2026] [:error] [pid 61042:tid 61070] [client 20.29.119.89:16094] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wander.php"] [unique_id "afjveEnAPPS1fjubA9SMbQAAANg"]
[Tue May 05 03:11:52.529471 2026] [:error] [pid 61150:tid 61171] [client 20.29.119.89:16247] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wander.php"] [unique_id "afjveO8QXWVLiwIGVpfLBAAAAVI"]
[Tue May 05 03:11:52.929140 2026] [:error] [pid 32471:tid 32495] [client 20.29.119.89:16232] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wander.php"] [unique_id "afjveHmjpb9EYq6AqhLP2gAAARU"]
[Tue May 05 03:11:53.314602 2026] [:error] [pid 61042:tid 61046] [client 20.29.119.89:16302] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class-db.php"] [unique_id "afjveUnAPPS1fjubA9SMbgAAAMA"]
[Tue May 05 03:11:53.718696 2026] [:error] [pid 61043:tid 61089] [client 20.29.119.89:16095] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class-db.php"] [unique_id "afjveZ8-LwtfURjiAbAUoQAAAE4"]
[Tue May 05 03:11:54.113113 2026] [:error] [pid 61043:tid 61095] [client 20.29.119.89:16159] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class-db.php"] [unique_id "afjvep8-LwtfURjiAbAUogAAAFQ"]
[Tue May 05 03:11:54.501427 2026] [:error] [pid 61043:tid 61084] [client 20.29.119.89:16066] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class-db.php"] [unique_id "afjvep8-LwtfURjiAbAUowAAAEk"]
[Tue May 05 03:11:54.902442 2026] [:error] [pid 61150:tid 61166] [client 20.29.119.89:16128] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/domains.php"] [unique_id "afjveu8QXWVLiwIGVpfLBQAAAU0"]
[Tue May 05 03:11:55.297371 2026] [:error] [pid 61043:tid 61075] [client 20.29.119.89:16341] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/domains.php"] [unique_id "afjve58-LwtfURjiAbAUpAAAAEA"]
[Tue May 05 03:11:55.719871 2026] [:error] [pid 61043:tid 61096] [client 20.29.119.89:16177] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/domains.php"] [unique_id "afjve58-LwtfURjiAbAUqAAAAFU"]
[Tue May 05 03:11:56.124143 2026] [:error] [pid 61043:tid 61091] [client 20.29.119.89:16246] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/domains.php"] [unique_id "afjvfJ8-LwtfURjiAbAUqgAAAFA"]
[Tue May 05 03:11:56.558310 2026] [:error] [pid 61043:tid 61094] [client 20.29.119.89:16361] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-the.php"] [unique_id "afjvfJ8-LwtfURjiAbAUrAAAAFM"]
[Tue May 05 03:11:56.951868 2026] [:error] [pid 61150:tid 61161] [client 20.29.119.89:16304] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-the.php"] [unique_id "afjvfO8QXWVLiwIGVpfLCAAAAUg"]
[Tue May 05 03:11:57.359168 2026] [:error] [pid 61044:tid 61108] [client 20.29.119.89:16249] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-the.php"] [unique_id "afjvfUw8w2zZZXI6H1vX6AAAAAY"]
[Tue May 05 03:11:57.795567 2026] [:error] [pid 3341:tid 3367] [client 20.29.119.89:16235] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-the.php"] [unique_id "afjvfU9o3_LordU0wW7oYwAAAJc"]
[Tue May 05 03:11:58.291435 2026] [:error] [pid 3341:tid 3361] [client 20.29.119.89:16181] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ouh.php"] [unique_id "afjvfk9o3_LordU0wW7oZQAAAJE"]
[Tue May 05 03:11:58.701041 2026] [:error] [pid 3341:tid 3347] [client 20.29.119.89:16316] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ouh.php"] [unique_id "afjvfk9o3_LordU0wW7oZwAAAIM"]
[Tue May 05 03:11:59.195270 2026] [:error] [pid 3341:tid 3346] [client 20.29.119.89:16356] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ouh.php"] [unique_id "afjvf09o3_LordU0wW7oaQAAAII"]
[Tue May 05 03:11:59.609647 2026] [:error] [pid 61042:tid 61065] [client 20.29.119.89:16142] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ouh.php"] [unique_id "afjvf0nAPPS1fjubA9SMbwAAANM"]
[Tue May 05 03:12:00.007685 2026] [:error] [pid 61043:tid 61075] [client 20.29.119.89:16190] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fone1.php"] [unique_id "afjvgJ8-LwtfURjiAbAUswAAAEA"]
[Tue May 05 03:12:00.439028 2026] [:error] [pid 3341:tid 3357] [client 20.29.119.89:16152] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fone1.php"] [unique_id "afjvgE9o3_LordU0wW7oawAAAI0"]
[Tue May 05 03:12:00.847175 2026] [:error] [pid 3341:tid 3352] [client 20.29.119.89:16226] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fone1.php"] [unique_id "afjvgE9o3_LordU0wW7obAAAAIg"]
[Tue May 05 03:12:01.286801 2026] [:error] [pid 32471:tid 32492] [client 20.29.119.89:16171] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fone1.php"] [unique_id "afjvgXmjpb9EYq6AqhLP3AAAARI"]
[Tue May 05 03:12:01.682886 2026] [:error] [pid 32471:tid 32487] [client 20.29.119.89:16135] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sko.php"] [unique_id "afjvgXmjpb9EYq6AqhLP3QAAAQ0"]
[Tue May 05 03:12:02.069440 2026] [:error] [pid 61150:tid 61158] [client 20.29.119.89:16238] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sko.php"] [unique_id "afjvgu8QXWVLiwIGVpfLCgAAAUU"]
[Tue May 05 03:12:02.494191 2026] [:error] [pid 61044:tid 61118] [client 20.29.119.89:16228] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sko.php"] [unique_id "afjvgkw8w2zZZXI6H1vX6QAAABA"]
[Tue May 05 03:12:02.910423 2026] [:error] [pid 61150:tid 61163] [client 20.29.119.89:16164] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sko.php"] [unique_id "afjvgu8QXWVLiwIGVpfLCwAAAUo"]
[Tue May 05 03:12:03.300425 2026] [:error] [pid 61042:tid 61060] [client 20.29.119.89:16078] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cilus.php"] [unique_id "afjvg0nAPPS1fjubA9SMcgAAAM4"]
[Tue May 05 03:12:03.702387 2026] [:error] [pid 61044:tid 61124] [client 20.29.119.89:16189] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cilus.php"] [unique_id "afjvg0w8w2zZZXI6H1vX6wAAABY"]
[Tue May 05 03:12:04.080732 2026] [:error] [pid 3341:tid 3349] [client 20.29.119.89:16087] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cilus.php"] [unique_id "afjvhE9o3_LordU0wW7obQAAAIU"]
[Tue May 05 03:12:04.475176 2026] [:error] [pid 3341:tid 3348] [client 20.29.119.89:16168] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cilus.php"] [unique_id "afjvhE9o3_LordU0wW7obwAAAIQ"]
[Tue May 05 03:12:04.900710 2026] [:error] [pid 3341:tid 3359] [client 20.29.119.89:16129] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-cliner.php"] [unique_id "afjvhE9o3_LordU0wW7ocAAAAI8"]
[Tue May 05 03:12:05.360076 2026] [:error] [pid 3341:tid 3367] [client 20.29.119.89:16224] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-cliner.php"] [unique_id "afjvhU9o3_LordU0wW7ocQAAAJc"]
[Tue May 05 03:12:05.810903 2026] [:error] [pid 3341:tid 3361] [client 20.29.119.89:16090] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-cliner.php"] [unique_id "afjvhU9o3_LordU0wW7ocwAAAJE"]
[Tue May 05 03:12:06.233648 2026] [:error] [pid 3341:tid 3353] [client 20.29.119.89:16182] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-cliner.php"] [unique_id "afjvhk9o3_LordU0wW7odAAAAIk"]
[Tue May 05 03:12:06.707472 2026] [:error] [pid 3341:tid 3362] [client 20.29.119.89:16192] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-sx10.php"] [unique_id "afjvhk9o3_LordU0wW7odQAAAJI"]
[Tue May 05 03:12:07.130572 2026] [:error] [pid 61044:tid 61104] [client 20.29.119.89:16148] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-sx10.php"] [unique_id "afjvh0w8w2zZZXI6H1vX7wAAAAI"]
[Tue May 05 03:12:07.543362 2026] [:error] [pid 61044:tid 61116] [client 20.29.119.89:16334] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-sx10.php"] [unique_id "afjvh0w8w2zZZXI6H1vX8QAAAA4"]
[Tue May 05 03:12:07.948340 2026] [:error] [pid 32471:tid 32490] [client 20.29.119.89:16161] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-sx10.php"] [unique_id "afjvh3mjpb9EYq6AqhLP3wAAARA"]
[Tue May 05 03:12:08.381680 2026] [:error] [pid 61043:tid 61075] [client 20.29.119.89:16157] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/packed.php"] [unique_id "afjviJ8-LwtfURjiAbAUuQAAAEA"]
[Tue May 05 03:12:08.820162 2026] [:error] [pid 32471:tid 32486] [client 20.29.119.89:16155] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/packed.php"] [unique_id "afjviHmjpb9EYq6AqhLP4wAAAQw"]
[Tue May 05 03:12:09.230786 2026] [:error] [pid 61044:tid 61120] [client 20.29.119.89:16136] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/packed.php"] [unique_id "afjviUw8w2zZZXI6H1vX8gAAABI"]
[Tue May 05 03:12:09.694005 2026] [:error] [pid 3341:tid 3368] [client 20.29.119.89:16153] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/packed.php"] [unique_id "afjviU9o3_LordU0wW7oeAAAAJg"]
[Tue May 05 03:12:10.164611 2026] [:error] [pid 32471:tid 32482] [client 20.29.119.89:16100] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lib.php"] [unique_id "afjvinmjpb9EYq6AqhLP5QAAAQg"]
[Tue May 05 03:12:10.597812 2026] [:error] [pid 32471:tid 32476] [client 20.29.119.89:16071] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lib.php"] [unique_id "afjvinmjpb9EYq6AqhLP5gAAAQI"]
[Tue May 05 03:12:11.030246 2026] [:error] [pid 3341:tid 3349] [client 20.29.119.89:16131] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lib.php"] [unique_id "afjvi09o3_LordU0wW7oewAAAIU"]
[Tue May 05 03:12:11.518935 2026] [:error] [pid 3341:tid 3367] [client 20.29.119.89:16104] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lib.php"] [unique_id "afjvi09o3_LordU0wW7ofwAAAJc"]
[Tue May 05 03:12:11.916731 2026] [:error] [pid 61044:tid 61108] [client 20.29.119.89:16092] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cc13.php"] [unique_id "afjvi0w8w2zZZXI6H1vX9AAAAAY"]
[Tue May 05 03:12:12.352585 2026] [:error] [pid 61150:tid 61162] [client 20.29.119.89:16151] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cc13.php"] [unique_id "afjvjO8QXWVLiwIGVpfLDQAAAUk"]
[Tue May 05 03:12:12.804839 2026] [:error] [pid 61044:tid 61105] [client 20.29.119.89:16068] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cc13.php"] [unique_id "afjvjEw8w2zZZXI6H1vX9QAAAAM"]
[Tue May 05 03:12:13.199210 2026] [:error] [pid 32471:tid 32495] [client 20.29.119.89:16229] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cc13.php"] [unique_id "afjvjXmjpb9EYq6AqhLP6gAAARU"]
[Tue May 05 03:12:13.610874 2026] [:error] [pid 32471:tid 32488] [client 20.29.119.89:16173] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fileas.php"] [unique_id "afjvjXmjpb9EYq6AqhLP6wAAAQ4"]
[Tue May 05 03:12:14.061174 2026] [:error] [pid 32471:tid 32487] [client 20.29.119.89:16186] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fileas.php"] [unique_id "afjvjnmjpb9EYq6AqhLP7gAAAQ0"]
[Tue May 05 03:12:14.447852 2026] [:error] [pid 61044:tid 61112] [client 20.29.119.89:16242] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fileas.php"] [unique_id "afjvjkw8w2zZZXI6H1vX-AAAAAo"]
[Tue May 05 03:12:14.948723 2026] [:error] [pid 61044:tid 61109] [client 20.29.119.89:16080] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fileas.php"] [unique_id "afjvjkw8w2zZZXI6H1vX-QAAAAc"]
[Tue May 05 03:12:15.380517 2026] [:error] [pid 32471:tid 32491] [client 20.29.119.89:16112] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-load.php"] [unique_id "afjvj3mjpb9EYq6AqhLP8gAAARE"]
[Tue May 05 03:12:15.891794 2026] [:error] [pid 32471:tid 32494] [client 20.29.119.89:16335] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-load.php"] [unique_id "afjvj3mjpb9EYq6AqhLP9gAAARQ"]
[Tue May 05 03:12:16.489337 2026] [:error] [pid 32471:tid 32479] [client 20.29.119.89:16162] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-load.php"] [unique_id "afjvkHmjpb9EYq6AqhLP-AAAAQU"]
[Tue May 05 03:12:16.992173 2026] [:error] [pid 61042:tid 61064] [client 20.29.119.89:16075] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-load.php"] [unique_id "afjvkEnAPPS1fjubA9SMeAAAANI"]
[Tue May 05 03:12:17.524862 2026] [:error] [pid 32471:tid 32487] [client 20.29.119.89:16310] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/v3.php"] [unique_id "afjvkXmjpb9EYq6AqhLP_QAAAQ0"]
[Tue May 05 03:12:18.223701 2026] [:error] [pid 32471:tid 32483] [client 20.29.119.89:16101] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/v3.php"] [unique_id "afjvknmjpb9EYq6AqhLQAQAAAQk"]
[Tue May 05 03:12:18.839754 2026] [:error] [pid 61150:tid 61176] [client 20.29.119.89:16166] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/v3.php"] [unique_id "afjvku8QXWVLiwIGVpfLDgAAAVc"]
[Tue May 05 03:12:19.236610 2026] [:error] [pid 61150:tid 61157] [client 20.29.119.89:16083] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/v3.php"] [unique_id "afjvk-8QXWVLiwIGVpfLDwAAAUQ"]
[Tue May 05 03:12:19.655349 2026] [:error] [pid 3341:tid 3351] [client 20.29.119.89:16022] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/06.php"] [unique_id "afjvk09o3_LordU0wW7ohgAAAIc"]
[Tue May 05 03:12:20.234591 2026] [:error] [pid 3341:tid 3362] [client 20.29.119.89:16253] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/06.php"] [unique_id "afjvlE9o3_LordU0wW7oiQAAAJI"]
[Tue May 05 03:12:20.651137 2026] [:error] [pid 3341:tid 3357] [client 20.29.119.89:16074] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/06.php"] [unique_id "afjvlE9o3_LordU0wW7oiwAAAI0"]
[Tue May 05 03:12:21.192219 2026] [:error] [pid 32471:tid 32474] [client 20.29.119.89:16183] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/06.php"] [unique_id "afjvlXmjpb9EYq6AqhLQBQAAAQA"]
[Tue May 05 03:12:21.582595 2026] [:error] [pid 32471:tid 32482] [client 20.29.119.89:16073] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wkdec.php"] [unique_id "afjvlXmjpb9EYq6AqhLQBwAAAQg"]
[Tue May 05 03:12:21.995857 2026] [:error] [pid 32471:tid 32484] [client 20.29.119.89:16367] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wkdec.php"] [unique_id "afjvlXmjpb9EYq6AqhLQCAAAAQo"]
[Tue May 05 03:12:22.430192 2026] [:error] [pid 32471:tid 32479] [client 20.29.119.89:16175] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wkdec.php"] [unique_id "afjvlnmjpb9EYq6AqhLQCwAAAQU"]
[Tue May 05 03:12:22.824769 2026] [:error] [pid 61042:tid 61070] [client 20.29.119.89:16070] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wkdec.php"] [unique_id "afjvlknAPPS1fjubA9SMegAAANg"]
[Tue May 05 03:12:23.242318 2026] [:error] [pid 3341:tid 3366] [client 20.29.119.89:16067] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-blog.php"] [unique_id "afjvl09o3_LordU0wW7ojgAAAJY"]
[Tue May 05 03:12:23.651954 2026] [:error] [pid 61043:tid 61077] [client 20.29.119.89:16096] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-blog.php"] [unique_id "afjvl58-LwtfURjiAbAUvAAAAEI"]
[Tue May 05 03:12:24.168146 2026] [:error] [pid 3341:tid 3350] [client 20.29.119.89:16108] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-blog.php"] [unique_id "afjvmE9o3_LordU0wW7okAAAAIY"]
[Tue May 05 03:12:24.595486 2026] [:error] [pid 3341:tid 3356] [client 20.29.119.89:16329] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-blog.php"] [unique_id "afjvmE9o3_LordU0wW7okQAAAIw"]
[Tue May 05 03:12:25.075051 2026] [:error] [pid 3341:tid 3345] [client 20.29.119.89:16180] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sbhu.php"] [unique_id "afjvmU9o3_LordU0wW7okgAAAIE"]
[Tue May 05 03:12:25.459171 2026] [:error] [pid 32471:tid 32498] [client 20.29.119.89:16184] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sbhu.php"] [unique_id "afjvmXmjpb9EYq6AqhLQDQAAARg"]
[Tue May 05 03:12:26.000963 2026] [:error] [pid 32471:tid 32480] [client 20.29.119.89:16308] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sbhu.php"] [unique_id "afjvmnmjpb9EYq6AqhLQDgAAAQY"]
[Tue May 05 03:12:26.425772 2026] [:error] [pid 32471:tid 32483] [client 20.29.119.89:16188] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sbhu.php"] [unique_id "afjvmnmjpb9EYq6AqhLQEAAAAQk"]
[Tue May 05 03:12:26.902335 2026] [:error] [pid 61042:tid 61055] [client 20.29.119.89:16003] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xy.php"] [unique_id "afjvmknAPPS1fjubA9SMgAAAAMk"]
[Tue May 05 03:12:27.380856 2026] [:error] [pid 32471:tid 32475] [client 20.29.119.89:16289] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xy.php"] [unique_id "afjvm3mjpb9EYq6AqhLQEQAAAQE"]
[Tue May 05 03:12:27.856308 2026] [:error] [pid 61042:tid 61048] [client 20.29.119.89:16091] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xy.php"] [unique_id "afjvm0nAPPS1fjubA9SMgQAAAMI"]
[Tue May 05 03:12:28.382573 2026] [:error] [pid 61043:tid 61080] [client 20.29.119.89:16030] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xy.php"] [unique_id "afjvnJ8-LwtfURjiAbAUwgAAAEU"]
[Tue May 05 03:12:28.784987 2026] [:error] [pid 32471:tid 32487] [client 20.29.119.89:16240] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/opts.php"] [unique_id "afjvnHmjpb9EYq6AqhLQFgAAAQ0"]
[Tue May 05 03:12:29.235654 2026] [:error] [pid 3341:tid 3363] [client 20.29.119.89:16219] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/opts.php"] [unique_id "afjvnU9o3_LordU0wW7olQAAAJM"]
[Tue May 05 03:12:29.726359 2026] [:error] [pid 3341:tid 3353] [client 20.29.119.89:16082] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/opts.php"] [unique_id "afjvnU9o3_LordU0wW7olwAAAIk"]
[Tue May 05 03:12:30.163849 2026] [:error] [pid 61043:tid 61092] [client 20.29.119.89:16086] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/opts.php"] [unique_id "afjvnp8-LwtfURjiAbAUwwAAAFE"]
[Tue May 05 03:12:30.658500 2026] [:error] [pid 61043:tid 61095] [client 20.29.119.89:16191] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/yellow.php"] [unique_id "afjvnp8-LwtfURjiAbAUxAAAAFQ"]
[Tue May 05 03:12:31.103119 2026] [:error] [pid 61043:tid 61096] [client 20.29.119.89:16006] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/yellow.php"] [unique_id "afjvn58-LwtfURjiAbAUxgAAAFU"]
[Tue May 05 03:12:31.502266 2026] [:error] [pid 32471:tid 32486] [client 20.29.119.89:16118] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/yellow.php"] [unique_id "afjvn3mjpb9EYq6AqhLQGwAAAQw"]
[Tue May 05 03:12:31.996460 2026] [:error] [pid 61043:tid 61094] [client 20.29.119.89:16328] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/yellow.php"] [unique_id "afjvn58-LwtfURjiAbAUygAAAFM"]
[Tue May 05 03:12:32.442141 2026] [:error] [pid 3341:tid 3367] [client 20.29.119.89:16107] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hook.php"] [unique_id "afjvoE9o3_LordU0wW7onAAAAJc"]
[Tue May 05 03:12:32.928361 2026] [:error] [pid 3341:tid 3366] [client 20.29.119.89:16109] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hook.php"] [unique_id "afjvoE9o3_LordU0wW7ongAAAJY"]
[Tue May 05 03:12:33.407034 2026] [:error] [pid 61042:tid 61050] [client 20.29.119.89:16036] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hook.php"] [unique_id "afjvoUnAPPS1fjubA9SMggAAAMQ"]
[Tue May 05 03:12:33.949172 2026] [:error] [pid 3341:tid 3350] [client 20.29.119.89:16069] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hook.php"] [unique_id "afjvoU9o3_LordU0wW7onwAAAIY"]
[Tue May 05 03:12:34.853209 2026] [:error] [pid 3341:tid 3363] [client 20.29.119.89:16179] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/racs3.php"] [unique_id "afjvok9o3_LordU0wW7oowAAAJM"]
[Tue May 05 03:12:35.369521 2026] [:error] [pid 3341:tid 3358] [client 20.29.119.89:16169] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/racs3.php"] [unique_id "afjvo09o3_LordU0wW7opAAAAI4"]
[Tue May 05 03:12:35.876912 2026] [:error] [pid 61043:tid 61082] [client 20.29.119.89:16065] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/racs3.php"] [unique_id "afjvo58-LwtfURjiAbAUzwAAAEc"]
[Tue May 05 03:12:36.289727 2026] [proxy_fcgi:error] [pid 3341:tid 3346] [client 20.29.119.89:16099] AH01071: Got error 'Primary script unknown'
[Tue May 05 03:12:36.481632 2026] [proxy_fcgi:error] [pid 3341:tid 3364] [client 20.29.119.89:16099] AH01071: Got error 'Primary script unknown'
[Tue May 05 03:12:36.672164 2026] [proxy_fcgi:error] [pid 3341:tid 3345] [client 20.29.119.89:16099] AH01071: Got error 'Primary script unknown'
[Tue May 05 03:12:36.864180 2026] [proxy_fcgi:error] [pid 3341:tid 3349] [client 20.29.119.89:16099] AH01071: Got error 'Primary script unknown'
[Tue May 05 03:12:37.055646 2026] [proxy_fcgi:error] [pid 3341:tid 3363] [client 20.29.119.89:16099] AH01071: Got error 'Primary script unknown'
[Tue May 05 03:12:38.534418 2026] [proxy_fcgi:error] [pid 3341:tid 3351] [client 20.29.119.89:16099] AH01071: Got error 'Primary script unknown'
[Tue May 05 03:12:38.731393 2026] [proxy_fcgi:error] [pid 3341:tid 3346] [client 20.29.119.89:16099] AH01071: Got error 'Primary script unknown'
[Tue May 05 03:12:38.925279 2026] [proxy_fcgi:error] [pid 3341:tid 3364] [client 20.29.119.89:16099] AH01071: Got error 'Primary script unknown'
[Tue May 05 03:12:39.118152 2026] [proxy_fcgi:error] [pid 3341:tid 3345] [client 20.29.119.89:16099] AH01071: Got error 'Primary script unknown'
[Tue May 05 03:12:39.310965 2026] [proxy_fcgi:error] [pid 3341:tid 3352] [client 20.29.119.89:16099] AH01071: Got error 'Primary script unknown'
[Tue May 05 03:12:39.514444 2026] [proxy_fcgi:error] [pid 3341:tid 3365] [client 20.29.119.89:16099] AH01071: Got error 'Primary script unknown'
[Tue May 05 03:12:39.701952 2026] [:error] [pid 3341:tid 3358] [client 20.29.119.89:16099] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/do.php"] [unique_id "afjvp09o3_LordU0wW7o3AAAAI4"]
[Tue May 05 03:12:40.205957 2026] [:error] [pid 3341:tid 3344] [client 20.29.119.89:16134] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/do.php"] [unique_id "afjvqE9o3_LordU0wW7o3gAAAIA"]
[Tue May 05 03:12:40.757944 2026] [:error] [pid 61044:tid 61126] [client 20.29.119.89:16023] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/do.php"] [unique_id "afjvqEw8w2zZZXI6H1vX_gAAABg"]
[Tue May 05 03:12:41.244199 2026] [:error] [pid 61044:tid 61103] [client 20.29.119.89:16137] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/do.php"] [unique_id "afjvqUw8w2zZZXI6H1vX_wAAAAE"]
[Tue May 05 03:12:41.741453 2026] [:error] [pid 61044:tid 61106] [client 20.29.119.89:16244] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/myfile.php"] [unique_id "afjvqUw8w2zZZXI6H1vYAAAAAAQ"]
[Tue May 05 03:12:42.175555 2026] [:error] [pid 61043:tid 61077] [client 20.29.119.89:16176] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/myfile.php"] [unique_id "afjvqp8-LwtfURjiAbAU1wAAAEI"]
[Tue May 05 03:12:42.671114 2026] [:error] [pid 32471:tid 32496] [client 20.29.119.89:16009] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/myfile.php"] [unique_id "afjvqnmjpb9EYq6AqhLQQQAAARY"]
[Tue May 05 03:12:43.174495 2026] [:error] [pid 61044:tid 61112] [client 20.29.119.89:16216] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/myfile.php"] [unique_id "afjvq0w8w2zZZXI6H1vYAwAAAAo"]
[Tue May 05 03:12:43.626963 2026] [:error] [pid 32471:tid 32488] [client 20.29.119.89:15967] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/system.php"] [unique_id "afjvq3mjpb9EYq6AqhLQQgAAAQ4"]
[Tue May 05 03:12:44.038494 2026] [:error] [pid 32471:tid 32491] [client 20.29.119.89:16163] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/system.php"] [unique_id "afjvrHmjpb9EYq6AqhLQQwAAARE"]
[Tue May 05 03:12:44.481185 2026] [:error] [pid 61044:tid 61121] [client 20.29.119.89:16005] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/system.php"] [unique_id "afjvrEw8w2zZZXI6H1vYCAAAABM"]
[Tue May 05 03:12:44.899103 2026] [:error] [pid 61044:tid 61113] [client 20.29.119.89:16004] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/system.php"] [unique_id "afjvrEw8w2zZZXI6H1vYCgAAAAs"]
[Tue May 05 03:12:45.333766 2026] [:error] [pid 3341:tid 3356] [client 20.29.119.89:16120] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/yasfu.php"] [unique_id "afjvrU9o3_LordU0wW7o4gAAAIw"]
[Tue May 05 03:12:45.774394 2026] [:error] [pid 61043:tid 61086] [client 20.29.119.89:16185] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/yasfu.php"] [unique_id "afjvrZ8-LwtfURjiAbAU2gAAAEs"]
[Tue May 05 03:12:46.178656 2026] [:error] [pid 32471:tid 32492] [client 20.29.119.89:16079] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/yasfu.php"] [unique_id "afjvrnmjpb9EYq6AqhLQSQAAARI"]
[Tue May 05 03:12:46.612714 2026] [:error] [pid 61043:tid 61088] [client 20.29.119.89:16098] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/yasfu.php"] [unique_id "afjvrp8-LwtfURjiAbAU2wAAAE0"]
[Tue May 05 03:12:47.011207 2026] [:error] [pid 32471:tid 32480] [client 20.29.119.89:16122] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sid3.php"] [unique_id "afjvr3mjpb9EYq6AqhLQTQAAAQY"]
[Tue May 05 03:12:47.492109 2026] [:error] [pid 61043:tid 61085] [client 20.29.119.89:16049] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sid3.php"] [unique_id "afjvr58-LwtfURjiAbAU3gAAAEo"]
[Tue May 05 03:12:47.941224 2026] [:error] [pid 61043:tid 61099] [client 20.29.119.89:16010] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sid3.php"] [unique_id "afjvr58-LwtfURjiAbAU3wAAAFg"]
[Tue May 05 03:12:48.346097 2026] [:error] [pid 61043:tid 61092] [client 20.29.119.89:16102] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sid3.php"] [unique_id "afjvsJ8-LwtfURjiAbAU4gAAAFE"]
[Tue May 05 03:12:48.755340 2026] [:error] [pid 61150:tid 61166] [client 20.29.119.89:16097] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-update.php"] [unique_id "afjvsO8QXWVLiwIGVpfLJQAAAU0"]
[Tue May 05 03:12:49.134071 2026] [:error] [pid 61043:tid 61087] [client 20.29.119.89:16017] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-update.php"] [unique_id "afjvsZ8-LwtfURjiAbAU5gAAAEw"]
[Tue May 05 03:12:49.515345 2026] [:error] [pid 61043:tid 61090] [client 20.29.119.89:16089] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-update.php"] [unique_id "afjvsZ8-LwtfURjiAbAU5wAAAE8"]
[Tue May 05 03:12:49.911336 2026] [:error] [pid 61042:tid 61069] [client 20.29.119.89:16026] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-update.php"] [unique_id "afjvsUnAPPS1fjubA9SMnQAAANc"]
[Tue May 05 03:12:50.308922 2026] [:error] [pid 3341:tid 3360] [client 20.29.119.89:16028] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ok.php"] [unique_id "afjvsk9o3_LordU0wW7o5wAAAJA"]
[Tue May 05 03:12:50.714323 2026] [:error] [pid 32471:tid 32492] [client 20.29.119.89:16016] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ok.php"] [unique_id "afjvsnmjpb9EYq6AqhLQVAAAARI"]
[Tue May 05 03:12:51.114409 2026] [:error] [pid 61043:tid 61085] [client 20.29.119.89:16034] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ok.php"] [unique_id "afjvs58-LwtfURjiAbAU7QAAAEo"]
[Tue May 05 03:12:51.499662 2026] [:error] [pid 61043:tid 61099] [client 20.29.119.89:16012] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ok.php"] [unique_id "afjvs58-LwtfURjiAbAU7wAAAFg"]
[Tue May 05 03:12:51.901810 2026] [:error] [pid 61043:tid 61098] [client 20.29.119.89:16115] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lala.php"] [unique_id "afjvs58-LwtfURjiAbAU8AAAAFc"]
[Tue May 05 03:12:52.288835 2026] [:error] [pid 32471:tid 32496] [client 20.29.119.89:16001] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lala.php"] [unique_id "afjvtHmjpb9EYq6AqhLQWAAAARY"]
[Tue May 05 03:12:52.706063 2026] [:error] [pid 32471:tid 32474] [client 20.29.119.89:16124] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lala.php"] [unique_id "afjvtHmjpb9EYq6AqhLQWgAAAQA"]
[Tue May 05 03:12:53.103502 2026] [:error] [pid 3341:tid 3347] [client 20.29.119.89:16126] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lala.php"] [unique_id "afjvtU9o3_LordU0wW7o6gAAAIM"]
[Tue May 05 03:12:53.506078 2026] [:error] [pid 61042:tid 61059] [client 20.29.119.89:15946] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/shell20211028.php"] [unique_id "afjvtUnAPPS1fjubA9SMnwAAAM0"]
[Tue May 05 03:12:53.960795 2026] [:error] [pid 61150:tid 61158] [client 20.29.119.89:16007] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/shell20211028.php"] [unique_id "afjvte8QXWVLiwIGVpfLKgAAAUU"]
[Tue May 05 03:12:54.368700 2026] [:error] [pid 32471:tid 32492] [client 20.29.119.89:16058] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/shell20211028.php"] [unique_id "afjvtnmjpb9EYq6AqhLQXgAAARI"]
[Tue May 05 03:12:54.786299 2026] [:error] [pid 3341:tid 3360] [client 20.29.119.89:16119] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/shell20211028.php"] [unique_id "afjvtk9o3_LordU0wW7o8gAAAJA"]
[Tue May 05 03:12:55.174785 2026] [:error] [pid 61043:tid 61075] [client 20.29.119.89:16140] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/clirp.php"] [unique_id "afjvt58-LwtfURjiAbAU8wAAAEA"]
[Tue May 05 03:12:55.584521 2026] [:error] [pid 3341:tid 3361] [client 20.29.119.89:16032] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/clirp.php"] [unique_id "afjvt09o3_LordU0wW7o-QAAAJE"]
[Tue May 05 03:12:55.972377 2026] [:error] [pid 61150:tid 61176] [client 20.29.119.89:15949] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/clirp.php"] [unique_id "afjvt-8QXWVLiwIGVpfLLAAAAVc"]
[Tue May 05 03:12:56.352326 2026] [:error] [pid 32471:tid 32474] [client 20.29.119.89:16110] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/clirp.php"] [unique_id "afjvuHmjpb9EYq6AqhLQZAAAAQA"]
[Tue May 05 03:12:56.820364 2026] [:error] [pid 32471:tid 32495] [client 20.29.119.89:16035] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rendi59.php"] [unique_id "afjvuHmjpb9EYq6AqhLQZgAAARU"]
[Tue May 05 03:12:57.256413 2026] [:error] [pid 32471:tid 32486] [client 20.29.119.89:16103] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rendi59.php"] [unique_id "afjvuXmjpb9EYq6AqhLQaAAAAQw"]
[Tue May 05 03:12:57.647216 2026] [:error] [pid 32471:tid 32490] [client 20.29.119.89:16029] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rendi59.php"] [unique_id "afjvuXmjpb9EYq6AqhLQagAAARA"]
[Tue May 05 03:12:58.030611 2026] [:error] [pid 32471:tid 32498] [client 20.29.119.89:16307] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rendi59.php"] [unique_id "afjvunmjpb9EYq6AqhLQawAAARg"]
[Tue May 05 03:12:58.416131 2026] [:error] [pid 32471:tid 32489] [client 20.29.119.89:16060] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gptsh.php"] [unique_id "afjvunmjpb9EYq6AqhLQbAAAAQ8"]
[Tue May 05 03:12:58.807590 2026] [:error] [pid 32471:tid 32478] [client 20.29.119.89:15955] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gptsh.php"] [unique_id "afjvunmjpb9EYq6AqhLQbgAAAQQ"]
[Tue May 05 03:12:59.185613 2026] [:error] [pid 61042:tid 61062] [client 20.29.119.89:16013] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gptsh.php"] [unique_id "afjvu0nAPPS1fjubA9SMowAAANA"]
[Tue May 05 03:12:59.564582 2026] [:error] [pid 61043:tid 61098] [client 20.29.119.89:16038] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gptsh.php"] [unique_id "afjvu58-LwtfURjiAbAU9AAAAFc"]
[Tue May 05 03:13:00.038434 2026] [:error] [pid 32471:tid 32474] [client 20.29.119.89:16165] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tox.php"] [unique_id "afjvvHmjpb9EYq6AqhLQcAAAAQA"]
[Tue May 05 03:13:00.414795 2026] [:error] [pid 61043:tid 61076] [client 20.29.119.89:16187] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tox.php"] [unique_id "afjvvJ8-LwtfURjiAbAU9gAAAEE"]
[Tue May 05 03:13:00.801354 2026] [:error] [pid 32471:tid 32482] [client 20.29.119.89:16127] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tox.php"] [unique_id "afjvvHmjpb9EYq6AqhLQcgAAAQg"]
[Tue May 05 03:13:01.178273 2026] [:error] [pid 32471:tid 32477] [client 20.29.119.89:15975] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tox.php"] [unique_id "afjvvXmjpb9EYq6AqhLQdwAAAQM"]
[Tue May 05 03:13:01.587148 2026] [:error] [pid 61044:tid 61109] [client 20.29.119.89:16121] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file9.php"] [unique_id "afjvvUw8w2zZZXI6H1vYFQAAAAc"]
[Tue May 05 03:13:01.978061 2026] [:error] [pid 61044:tid 61108] [client 20.29.119.89:15941] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file9.php"] [unique_id "afjvvUw8w2zZZXI6H1vYFgAAAAY"]
[Tue May 05 03:13:02.371597 2026] [:error] [pid 61043:tid 61094] [client 20.29.119.89:16213] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file9.php"] [unique_id "afjvvp8-LwtfURjiAbAU-AAAAFM"]
[Tue May 05 03:13:02.758539 2026] [:error] [pid 61150:tid 61169] [client 20.29.119.89:15953] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file9.php"] [unique_id "afjvvu8QXWVLiwIGVpfLMgAAAVA"]
[Tue May 05 03:13:03.160859 2026] [:error] [pid 3341:tid 3347] [client 20.29.119.89:16093] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ccu.php"] [unique_id "afjvv09o3_LordU0wW7o_QAAAIM"]
[Tue May 05 03:13:03.544457 2026] [:error] [pid 61044:tid 61119] [client 20.29.119.89:15902] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ccu.php"] [unique_id "afjvv0w8w2zZZXI6H1vYGQAAABE"]
[Tue May 05 03:13:03.937567 2026] [:error] [pid 61042:tid 61056] [client 20.29.119.89:16123] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ccu.php"] [unique_id "afjvv0nAPPS1fjubA9SMpwAAAMo"]
[Tue May 05 03:13:04.348452 2026] [:error] [pid 61150:tid 61165] [client 20.29.119.89:15954] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ccu.php"] [unique_id "afjvwO8QXWVLiwIGVpfLMwAAAUw"]
[Tue May 05 03:13:04.724179 2026] [:error] [pid 61043:tid 61097] [client 20.29.119.89:16158] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-x7.php"] [unique_id "afjvwJ8-LwtfURjiAbAU-gAAAFY"]
[Tue May 05 03:13:05.116720 2026] [:error] [pid 61043:tid 61077] [client 20.29.119.89:16085] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-x7.php"] [unique_id "afjvwZ8-LwtfURjiAbAU_AAAAEI"]
[Tue May 05 03:13:05.493118 2026] [:error] [pid 3341:tid 3354] [client 20.29.119.89:16062] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-x7.php"] [unique_id "afjvwU9o3_LordU0wW7pAAAAAIo"]
[Tue May 05 03:13:05.883433 2026] [:error] [pid 61150:tid 61170] [client 20.29.119.89:16114] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-x7.php"] [unique_id "afjvwe8QXWVLiwIGVpfLNAAAAVE"]
[Tue May 05 03:13:06.281541 2026] [:error] [pid 61042:tid 61070] [client 20.29.119.89:16042] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-aaa.php"] [unique_id "afjvwknAPPS1fjubA9SMqQAAANg"]
[Tue May 05 03:13:06.674425 2026] [:error] [pid 61150:tid 61163] [client 20.29.119.89:15947] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-aaa.php"] [unique_id "afjvwu8QXWVLiwIGVpfLNwAAAUo"]
[Tue May 05 03:13:07.059911 2026] [:error] [pid 61043:tid 61075] [client 20.29.119.89:16041] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-aaa.php"] [unique_id "afjvw58-LwtfURjiAbAU_gAAAEA"]
[Tue May 05 03:13:07.442696 2026] [:error] [pid 61150:tid 61153] [client 20.29.119.89:16039] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-aaa.php"] [unique_id "afjvw-8QXWVLiwIGVpfLOQAAAUA"]
[Tue May 05 03:13:07.832566 2026] [:error] [pid 61150:tid 61160] [client 20.29.119.89:16024] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-kd4xalrg7m.php"] [unique_id "afjvw-8QXWVLiwIGVpfLPQAAAUc"]
[Tue May 05 03:13:08.226140 2026] [:error] [pid 61150:tid 61171] [client 20.29.119.89:16000] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-kd4xalrg7m.php"] [unique_id "afjvxO8QXWVLiwIGVpfLPgAAAVI"]
[Tue May 05 03:13:08.641285 2026] [:error] [pid 61150:tid 61167] [client 20.29.119.89:15968] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-kd4xalrg7m.php"] [unique_id "afjvxO8QXWVLiwIGVpfLQgAAAU4"]
[Tue May 05 03:13:09.034016 2026] [:error] [pid 61043:tid 61080] [client 20.29.119.89:16008] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-kd4xalrg7m.php"] [unique_id "afjvxZ8-LwtfURjiAbAVAgAAAEU"]
[Tue May 05 03:13:09.430183 2026] [:error] [pid 61150:tid 61155] [client 20.29.119.89:16033] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file5.php"] [unique_id "afjvxe8QXWVLiwIGVpfLQwAAAUI"]
[Tue May 05 03:13:09.818097 2026] [:error] [pid 61150:tid 61168] [client 20.29.119.89:16037] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file5.php"] [unique_id "afjvxe8QXWVLiwIGVpfLRAAAAU8"]
[Tue May 05 03:13:10.234145 2026] [:error] [pid 61044:tid 61121] [client 20.29.119.89:15906] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file5.php"] [unique_id "afjvxkw8w2zZZXI6H1vYHAAAABM"]
[Tue May 05 03:13:10.615141 2026] [:error] [pid 61150:tid 61165] [client 20.29.119.89:16076] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file5.php"] [unique_id "afjvxu8QXWVLiwIGVpfLRQAAAUw"]
[Tue May 05 03:13:10.993626 2026] [:error] [pid 61150:tid 61163] [client 20.29.119.89:15983] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-xrm.php"] [unique_id "afjvxu8QXWVLiwIGVpfLRgAAAUo"]
[Tue May 05 03:13:11.379473 2026] [:error] [pid 61044:tid 61104] [client 20.29.119.89:16031] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-xrm.php"] [unique_id "afjvx0w8w2zZZXI6H1vYHQAAAAI"]
[Tue May 05 03:13:11.763975 2026] [:error] [pid 61150:tid 61162] [client 20.29.119.89:16044] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-xrm.php"] [unique_id "afjvx-8QXWVLiwIGVpfLSQAAAUk"]
[Tue May 05 03:13:12.157160 2026] [:error] [pid 61150:tid 61160] [client 20.29.119.89:16059] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-xrm.php"] [unique_id "afjvyO8QXWVLiwIGVpfLSgAAAUc"]
[Tue May 05 03:13:12.579592 2026] [:error] [pid 61043:tid 61077] [client 20.29.119.89:15997] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-asudo.php"] [unique_id "afjvyJ8-LwtfURjiAbAVCAAAAEI"]
[Tue May 05 03:13:12.978008 2026] [:error] [pid 61150:tid 61175] [client 20.29.119.89:16106] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-asudo.php"] [unique_id "afjvyO8QXWVLiwIGVpfLSwAAAVY"]
[Tue May 05 03:13:13.360578 2026] [:error] [pid 61150:tid 61166] [client 20.29.119.89:16054] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-asudo.php"] [unique_id "afjvye8QXWVLiwIGVpfLTAAAAU0"]
[Tue May 05 03:13:13.748431 2026] [:error] [pid 61044:tid 61123] [client 20.29.119.89:16251] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-asudo.php"] [unique_id "afjvyUw8w2zZZXI6H1vYHgAAABU"]
[Tue May 05 03:13:14.173535 2026] [:error] [pid 61042:tid 61055] [client 20.29.119.89:15962] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file3.php"] [unique_id "afjvyknAPPS1fjubA9SMqwAAAMk"]
[Tue May 05 03:13:14.572871 2026] [:error] [pid 61042:tid 61052] [client 20.29.119.89:15965] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file3.php"] [unique_id "afjvyknAPPS1fjubA9SMrAAAAMY"]
[Tue May 05 03:13:15.022876 2026] [:error] [pid 61150:tid 61169] [client 20.29.119.89:15943] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file3.php"] [unique_id "afjvy-8QXWVLiwIGVpfLTwAAAVA"]
[Tue May 05 03:13:15.477553 2026] [:error] [pid 61043:tid 61084] [client 20.29.119.89:16002] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file3.php"] [unique_id "afjvy58-LwtfURjiAbAVCwAAAEk"]
[Tue May 05 03:13:15.931357 2026] [:error] [pid 61044:tid 61113] [client 20.29.119.89:15940] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/G-In.php"] [unique_id "afjvy0w8w2zZZXI6H1vYHwAAAAs"]
[Tue May 05 03:13:16.365188 2026] [:error] [pid 61150:tid 61163] [client 20.29.119.89:16047] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/G-In.php"] [unique_id "afjvzO8QXWVLiwIGVpfLUgAAAUo"]
[Tue May 05 03:13:16.779219 2026] [:error] [pid 61042:tid 61060] [client 20.29.119.89:16125] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/G-In.php"] [unique_id "afjvzEnAPPS1fjubA9SMrQAAAM4"]
[Tue May 05 03:13:17.246770 2026] [:error] [pid 61150:tid 61162] [client 20.29.119.89:15974] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/G-In.php"] [unique_id "afjvze8QXWVLiwIGVpfLVQAAAUk"]
[Tue May 05 03:13:17.672585 2026] [:error] [pid 32471:tid 32484] [client 20.29.119.89:16040] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-gr.php"] [unique_id "afjvzXmjpb9EYq6AqhLQfQAAAQo"]
[Tue May 05 03:13:18.066118 2026] [:error] [pid 3341:tid 3354] [client 20.29.119.89:16051] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-gr.php"] [unique_id "afjvzk9o3_LordU0wW7pCgAAAIo"]
[Tue May 05 03:13:18.470608 2026] [:error] [pid 3341:tid 3366] [client 20.29.119.89:15970] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-gr.php"] [unique_id "afjvzk9o3_LordU0wW7pCwAAAJY"]
[Tue May 05 03:13:18.867226 2026] [:error] [pid 61044:tid 61124] [client 20.29.119.89:16050] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-gr.php"] [unique_id "afjvzkw8w2zZZXI6H1vYIAAAABY"]
[Tue May 05 03:13:19.258754 2026] [:error] [pid 61150:tid 61176] [client 20.29.119.89:15939] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mans.php"] [unique_id "afjvz-8QXWVLiwIGVpfLVgAAAVc"]
[Tue May 05 03:13:19.639157 2026] [:error] [pid 61042:tid 61068] [client 20.29.119.89:15977] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mans.php"] [unique_id "afjvz0nAPPS1fjubA9SMrwAAANY"]
[Tue May 05 03:13:20.029964 2026] [:error] [pid 61044:tid 61116] [client 20.29.119.89:16043] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mans.php"] [unique_id "afjv0Ew8w2zZZXI6H1vYIQAAAA4"]
[Tue May 05 03:13:20.443024 2026] [:error] [pid 61044:tid 61117] [client 20.29.119.89:15966] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mans.php"] [unique_id "afjv0Ew8w2zZZXI6H1vYIgAAAA8"]
[Tue May 05 03:13:20.825762 2026] [:error] [pid 61044:tid 61125] [client 20.29.119.89:15987] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-2019.php"] [unique_id "afjv0Ew8w2zZZXI6H1vYIwAAABc"]
[Tue May 05 03:13:21.213238 2026] [:error] [pid 32471:tid 32476] [client 20.29.119.89:15876] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-2019.php"] [unique_id "afjv0Xmjpb9EYq6AqhLQggAAAQI"]
[Tue May 05 03:13:21.610633 2026] [:error] [pid 61150:tid 61163] [client 20.29.119.89:16053] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-2019.php"] [unique_id "afjv0e8QXWVLiwIGVpfLYQAAAUo"]
[Tue May 05 03:13:21.995188 2026] [:error] [pid 61150:tid 61158] [client 20.29.119.89:16105] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-2019.php"] [unique_id "afjv0e8QXWVLiwIGVpfLYwAAAUU"]
[Tue May 05 03:13:22.412966 2026] [:error] [pid 61150:tid 61162] [client 20.29.119.89:16057] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file4.php"] [unique_id "afjv0u8QXWVLiwIGVpfLZQAAAUk"]
[Tue May 05 03:13:22.803127 2026] [:error] [pid 61043:tid 61094] [client 20.29.119.89:15936] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file4.php"] [unique_id "afjv0p8-LwtfURjiAbAVDgAAAFM"]
[Tue May 05 03:13:23.214975 2026] [:error] [pid 3341:tid 3367] [client 20.29.119.89:15969] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file4.php"] [unique_id "afjv009o3_LordU0wW7pDgAAAJc"]
[Tue May 05 03:13:23.616180 2026] [:error] [pid 3341:tid 3355] [client 20.29.119.89:16111] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file4.php"] [unique_id "afjv009o3_LordU0wW7pEAAAAIs"]
[Tue May 05 03:13:24.012493 2026] [:error] [pid 61043:tid 61082] [client 20.29.119.89:16015] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-acc.php"] [unique_id "afjv1J8-LwtfURjiAbAVEAAAAEc"]
[Tue May 05 03:13:24.415182 2026] [:error] [pid 61042:tid 61047] [client 20.29.119.89:16046] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-acc.php"] [unique_id "afjv1EnAPPS1fjubA9SMygAAAME"]
[Tue May 05 03:13:24.826358 2026] [:error] [pid 61043:tid 61090] [client 20.29.119.89:16084] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-acc.php"] [unique_id "afjv1J8-LwtfURjiAbAVEgAAAE8"]
[Tue May 05 03:13:25.245378 2026] [:error] [pid 61042:tid 61066] [client 20.29.119.89:15980] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-acc.php"] [unique_id "afjv1UnAPPS1fjubA9SMzAAAANQ"]
[Tue May 05 03:13:25.637684 2026] [:error] [pid 61043:tid 61077] [client 20.29.119.89:15972] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-trackback.php"] [unique_id "afjv1Z8-LwtfURjiAbAVFAAAAEI"]
[Tue May 05 03:13:26.060145 2026] [:error] [pid 61150:tid 61173] [client 20.29.119.89:15909] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-trackback.php"] [unique_id "afjv1u8QXWVLiwIGVpfLbwAAAVQ"]
[Tue May 05 03:13:26.463293 2026] [:error] [pid 3341:tid 3356] [client 20.29.119.89:16011] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-trackback.php"] [unique_id "afjv1k9o3_LordU0wW7pFgAAAIw"]
[Tue May 05 03:13:26.852784 2026] [:error] [pid 3341:tid 3345] [client 20.29.119.89:15877] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-trackback.php"] [unique_id "afjv1k9o3_LordU0wW7pFwAAAIE"]
[Tue May 05 03:13:27.253547 2026] [:error] [pid 3341:tid 3347] [client 20.29.119.89:16045] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-xx.php"] [unique_id "afjv109o3_LordU0wW7pGAAAAIM"]
[Tue May 05 03:13:27.632193 2026] [:error] [pid 32471:tid 32491] [client 20.29.119.89:15879] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-xx.php"] [unique_id "afjv13mjpb9EYq6AqhLQiQAAARE"]
[Tue May 05 03:13:28.014772 2026] [:error] [pid 61150:tid 61158] [client 20.29.119.89:15976] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-xx.php"] [unique_id "afjv2O8QXWVLiwIGVpfLcwAAAUU"]
[Tue May 05 03:13:28.402574 2026] [:error] [pid 61150:tid 61162] [client 20.29.119.89:15964] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-xx.php"] [unique_id "afjv2O8QXWVLiwIGVpfLdAAAAUk"]
[Tue May 05 03:13:28.798798 2026] [:error] [pid 61150:tid 61176] [client 20.29.119.89:15958] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/555.php"] [unique_id "afjv2O8QXWVLiwIGVpfLdQAAAVc"]
[Tue May 05 03:13:29.185431 2026] [:error] [pid 32471:tid 32486] [client 20.29.119.89:15938] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/555.php"] [unique_id "afjv2Xmjpb9EYq6AqhLQjQAAAQw"]
[Tue May 05 03:13:29.592175 2026] [:error] [pid 32471:tid 32483] [client 20.29.119.89:15921] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/555.php"] [unique_id "afjv2Xmjpb9EYq6AqhLQjgAAAQk"]
[Tue May 05 03:13:29.971818 2026] [:error] [pid 61150:tid 61155] [client 20.29.119.89:16117] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/555.php"] [unique_id "afjv2e8QXWVLiwIGVpfLeAAAAUI"]
[Tue May 05 03:13:30.366453 2026] [:error] [pid 61150:tid 61167] [client 20.29.119.89:16056] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-conflg.php"] [unique_id "afjv2u8QXWVLiwIGVpfLegAAAU4"]
[Tue May 05 03:13:30.754488 2026] [:error] [pid 61150:tid 61156] [client 20.29.119.89:15991] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-conflg.php"] [unique_id "afjv2u8QXWVLiwIGVpfLfQAAAUM"]
[Tue May 05 03:13:31.142399 2026] [:error] [pid 32471:tid 32479] [client 20.29.119.89:15950] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-conflg.php"] [unique_id "afjv23mjpb9EYq6AqhLQjwAAAQU"]
[Tue May 05 03:13:31.527770 2026] [:error] [pid 61043:tid 61080] [client 20.29.119.89:15896] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-conflg.php"] [unique_id "afjv258-LwtfURjiAbAVFwAAAEU"]
[Tue May 05 03:13:31.917887 2026] [:error] [pid 61043:tid 61079] [client 20.29.119.89:15884] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-Blogs.php"] [unique_id "afjv258-LwtfURjiAbAVGAAAAEQ"]
[Tue May 05 03:13:32.290144 2026] [:error] [pid 61043:tid 61096] [client 20.29.119.89:16122] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-Blogs.php"] [unique_id "afjv3J8-LwtfURjiAbAVGQAAAFU"]
[Tue May 05 03:13:32.698566 2026] [:error] [pid 32471:tid 32481] [client 20.29.119.89:15942] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-Blogs.php"] [unique_id "afjv3Hmjpb9EYq6AqhLQkQAAAQc"]
[Tue May 05 03:13:33.072593 2026] [:error] [pid 3341:tid 3355] [client 20.29.119.89:15894] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-Blogs.php"] [unique_id "afjv3U9o3_LordU0wW7pGwAAAIs"]
[Tue May 05 03:13:33.446513 2026] [:error] [pid 61150:tid 61163] [client 20.29.119.89:16018] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp_ok.php"] [unique_id "afjv3e8QXWVLiwIGVpfLfgAAAUo"]
[Tue May 05 03:13:33.831461 2026] [:error] [pid 61043:tid 61090] [client 20.29.119.89:15883] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp_ok.php"] [unique_id "afjv3Z8-LwtfURjiAbAVHQAAAE8"]
[Tue May 05 03:13:34.221940 2026] [:error] [pid 3341:tid 3353] [client 20.29.119.89:16014] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp_ok.php"] [unique_id "afjv3k9o3_LordU0wW7pHAAAAIk"]
[Tue May 05 03:13:34.609926 2026] [:error] [pid 32471:tid 32490] [client 20.29.119.89:15840] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp_ok.php"] [unique_id "afjv3nmjpb9EYq6AqhLQkwAAARA"]
[Tue May 05 03:13:34.992825 2026] [:error] [pid 32471:tid 32489] [client 20.29.119.89:16027] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "afjv3nmjpb9EYq6AqhLQlAAAAQ8"]
[Tue May 05 03:13:35.375684 2026] [:error] [pid 32471:tid 32478] [client 20.29.119.89:15948] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "afjv33mjpb9EYq6AqhLQlgAAAQQ"]
[Tue May 05 03:13:35.774392 2026] [:error] [pid 32471:tid 32497] [client 20.29.119.89:15986] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "afjv33mjpb9EYq6AqhLQlwAAARc"]
[Tue May 05 03:13:36.147526 2026] [:error] [pid 32471:tid 32480] [client 20.29.119.89:15951] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "afjv4Hmjpb9EYq6AqhLQmQAAAQY"]
[Tue May 05 03:13:36.525336 2026] [:error] [pid 61043:tid 61087] [client 20.29.119.89:16113] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file88.php"] [unique_id "afjv4J8-LwtfURjiAbAVIQAAAEw"]
[Tue May 05 03:13:36.918472 2026] [:error] [pid 61043:tid 61077] [client 20.29.119.89:15885] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file88.php"] [unique_id "afjv4J8-LwtfURjiAbAVIgAAAEI"]
[Tue May 05 03:13:37.306745 2026] [:error] [pid 3341:tid 3352] [client 20.29.119.89:16055] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file88.php"] [unique_id "afjv4U9o3_LordU0wW7pHQAAAIg"]
[Tue May 05 03:13:37.703389 2026] [:error] [pid 61150:tid 61153] [client 20.29.119.89:15988] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file88.php"] [unique_id "afjv4e8QXWVLiwIGVpfLgAAAAUA"]
[Tue May 05 03:13:38.081684 2026] [:error] [pid 61042:tid 61059] [client 20.29.119.89:15922] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file32.php"] [unique_id "afjv4knAPPS1fjubA9SM0QAAAM0"]
[Tue May 05 03:13:38.464557 2026] [:error] [pid 61042:tid 61055] [client 20.29.119.89:15808] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file32.php"] [unique_id "afjv4knAPPS1fjubA9SM0gAAAMk"]
[Tue May 05 03:13:38.846228 2026] [:error] [pid 3341:tid 3365] [client 20.29.119.89:15904] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file32.php"] [unique_id "afjv4k9o3_LordU0wW7pHwAAAJU"]
[Tue May 05 03:13:39.240949 2026] [proxy_fcgi:error] [pid 61043:tid 61091] [client 20.29.119.89:15989] AH01071: Got error 'Primary script unknown'
[Tue May 05 03:13:39.431011 2026] [proxy_fcgi:error] [pid 61043:tid 61081] [client 20.29.119.89:15989] AH01071: Got error 'Primary script unknown'
[Tue May 05 03:13:39.633756 2026] [proxy_fcgi:error] [pid 61043:tid 61083] [client 20.29.119.89:15989] AH01071: Got error 'Primary script unknown'
[Tue May 05 03:45:49.455772 2026] [proxy_fcgi:error] [pid 32471:tid 32497] [client 108.181.184.100:61463] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "xman_291250564" in /home/dwelects/public_html/css/BDBQcss.php on line 147'
[Tue May 05 12:10:24.252125 2026] [:error] [pid 25743:tid 25755] [client 216.81.248.217:53342] [client 216.81.248.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.git/config"] [unique_id "afltsG-PCMRhF5DdUnN85QAAAAg"]
[Tue May 05 22:06:39.939189 2026] [:error] [pid 2324:tid 2329] [client 194.62.107.171:49971] [client 194.62.107.171] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env"] [unique_id "afn5b2qe2hrcI52A1HygzgAAAUM"]
[Tue May 05 23:02:32.563960 2026] [proxy_fcgi:error] [pid 25745:tid 25819] [client 45.154.98.197:65484] AH01071: Got error 'Primary script unknown'
[Tue May 05 23:02:33.578110 2026] [:error] [pid 25743:tid 25761] [client 45.154.98.197:49460] [client 45.154.98.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/widgets/txets.php"] [unique_id "afoGiW-PCMRhF5DdUnMNswAAAA4"]
[Tue May 05 23:02:34.081399 2026] [:error] [pid 25835:tid 25858] [client 45.154.98.197:49598] [client 45.154.98.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/rest-api/txets.php"] [unique_id "afoGilDT5nGJyh1439z3JwAAARU"]
[Tue May 05 23:02:34.583725 2026] [:error] [pid 2324:tid 2335] [client 45.154.98.197:49717] [client 45.154.98.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/post-template/txets.php"] [unique_id "afoGimqe2hrcI52A1HyyoQAAAUk"]
[Tue May 05 23:02:35.600815 2026] [:error] [pid 2324:tid 2334] [client 45.154.98.197:50199] [client 45.154.98.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/txets.php"] [unique_id "afoGi2qe2hrcI52A1HyypAAAAUg"]
[Tue May 05 23:02:36.130880 2026] [proxy_fcgi:error] [pid 2324:tid 2328] [client 45.154.98.197:50427] AH01071: Got error 'Primary script unknown'
[Tue May 05 23:02:36.634497 2026] [proxy_fcgi:error] [pid 2324:tid 2327] [client 45.154.98.197:50579] AH01071: Got error 'Primary script unknown'
[Wed May 06 10:06:42.540310 2026] [:error] [pid 9664:tid 9770] [client 104.248.197.185:56097] [client 104.248.197.185] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.248.197.185, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-login.php"] [unique_id "afqiMgH4OZbrg1SjsBPpFwAAAIg"]
[Wed May 06 10:06:42.552527 2026] [proxy_fcgi:error] [pid 9664:tid 9770] [client 104.248.197.185:56097] AH01071: Got error 'Primary script unknown'
[Wed May 06 10:56:34.404018 2026] [:error] [pid 482:tid 492] [client 147.182.191.194:50850] [client 147.182.191.194] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 147.182.191.194, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-login.php"] [unique_id "afqt4sxs8HOc_nWgOW67AQAAAcg"]
[Wed May 06 10:56:34.416108 2026] [proxy_fcgi:error] [pid 482:tid 492] [client 147.182.191.194:50850] AH01071: Got error 'Primary script unknown'
[Wed May 06 23:19:07.461557 2026] [:error] [pid 13443:tid 13451] [client 23.137.105.63:11530] [client 23.137.105.63] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env"] [unique_id "aftb6wCyfZallDmsQrel5wAAAUY"]
[Wed May 06 23:19:07.763025 2026] [:error] [pid 482:tid 510] [client 23.137.105.63:11558] [client 23.137.105.63] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.production"] [unique_id "aftb68xs8HOc_nWgOW5zegAAAdg"]
[Wed May 06 23:19:07.763422 2026] [:error] [pid 9659:tid 9749] [client 23.137.105.63:11572] [client 23.137.105.63] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/app/.env"] [unique_id "aftb6_wJnWjd8JHpBtuibwAAAM8"]
[Wed May 06 23:19:07.763486 2026] [:error] [pid 9659:tid 9754] [client 23.137.105.63:11586] [client 23.137.105.63] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/api/.env"] [unique_id "aftb6_wJnWjd8JHpBtuibgAAANQ"]
[Wed May 06 23:19:07.763741 2026] [:error] [pid 9659:tid 9741] [client 23.137.105.63:11556] [client 23.137.105.63] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.local"] [unique_id "aftb6_wJnWjd8JHpBtuicAAAAMc"]
[Wed May 06 23:19:07.767818 2026] [:error] [pid 13443:tid 13469] [client 23.137.105.63:11544] [client 23.137.105.63] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/backend/.env"] [unique_id "aftb6wCyfZallDmsQrel6AAAAVg"]
[Thu May 07 02:40:03.903861 2026] [proxy_fcgi:error] [pid 9659:tid 9737] [client 74.249.149.76:22477] AH01071: Got error 'Primary script unknown'
[Thu May 07 02:40:04.095340 2026] [proxy_fcgi:error] [pid 9659:tid 9740] [client 74.249.149.76:22477] AH01071: Got error 'Primary script unknown'
[Thu May 07 02:40:04.292620 2026] [proxy_fcgi:error] [pid 9659:tid 9743] [client 74.249.149.76:22477] AH01071: Got error 'Primary script unknown'
[Thu May 07 02:40:04.487953 2026] [proxy_fcgi:error] [pid 9659:tid 9734] [client 74.249.149.76:22477] AH01071: Got error 'Primary script unknown'
[Thu May 07 02:40:04.684666 2026] [proxy_fcgi:error] [pid 9659:tid 9742] [client 74.249.149.76:22477] AH01071: Got error 'Primary script unknown'
[Thu May 07 02:40:04.874491 2026] [proxy_fcgi:error] [pid 9659:tid 9750] [client 74.249.149.76:22477] AH01071: Got error 'Primary script unknown'
[Thu May 07 02:40:05.066873 2026] [proxy_fcgi:error] [pid 9659:tid 9753] [client 74.249.149.76:22477] AH01071: Got error 'Primary script unknown'
[Thu May 07 02:40:05.256921 2026] [proxy_fcgi:error] [pid 9659:tid 9746] [client 74.249.149.76:22477] AH01071: Got error 'Primary script unknown'
[Thu May 07 02:40:05.465416 2026] [proxy_fcgi:error] [pid 9659:tid 9752] [client 74.249.149.76:22477] AH01071: Got error 'Primary script unknown'
[Thu May 07 02:40:05.654479 2026] [proxy_fcgi:error] [pid 9659:tid 9741] [client 74.249.149.76:22477] AH01071: Got error 'Primary script unknown'
[Thu May 07 02:40:06.006678 2026] [:error] [pid 9659:tid 9735] [client 74.249.149.76:22477] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zoper1.php"] [unique_id "afuLBvwJnWjd8JHpBtu_mQAAAME"]
[Thu May 07 02:40:07.451887 2026] [:error] [pid 13414:tid 13424] [client 74.249.149.76:22408] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zoper1.php"] [unique_id "afuLB0uJQpWjVpJTu_lFmgAAAQg"]
[Thu May 07 02:40:08.707811 2026] [:error] [pid 592:tid 620] [client 74.249.149.76:22511] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zoper1.php"] [unique_id "afuLCJiX28mb6xLi2PzO9gAAApU"]
[Thu May 07 02:40:09.389101 2026] [:error] [pid 592:tid 609] [client 74.249.149.76:22467] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zoper1.php"] [unique_id "afuLCZiX28mb6xLi2PzO-AAAAo0"]
[Thu May 07 02:40:10.340543 2026] [:error] [pid 9659:tid 9754] [client 74.249.149.76:22480] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/index0.php"] [unique_id "afuLCvwJnWjd8JHpBtu_ngAAANQ"]
[Thu May 07 02:40:13.116878 2026] [:error] [pid 63810:tid 63827] [client 74.249.149.76:22517] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/index0.php"] [unique_id "afuLDXpnbsN9Zf6i5IFXlwAAAY0"]
[Thu May 07 02:40:14.399214 2026] [:error] [pid 9789:tid 9802] [client 74.249.149.76:22476] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/index0.php"] [unique_id "afuLDj_YStPJSCHPkUXeHwAAAEs"]
[Thu May 07 02:40:15.296117 2026] [:error] [pid 9664:tid 9770] [client 74.249.149.76:22492] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/index0.php"] [unique_id "afuLDwH4OZbrg1SjsBOMIQAAAIg"]
[Thu May 07 02:40:16.141798 2026] [:error] [pid 9653:tid 9703] [client 74.249.149.76:22504] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-kz.php"] [unique_id "afuLEKhJ49Xc4dqq0B6FBAAAAAU"]
[Thu May 07 02:40:17.001803 2026] [:error] [pid 9653:tid 9710] [client 74.249.149.76:22521] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-kz.php"] [unique_id "afuLEahJ49Xc4dqq0B6FBQAAAAw"]
[Thu May 07 02:41:12.289434 2026] [proxy_fcgi:error] [pid 9653:tid 9717] [client 74.249.149.76:22413] AH01071: Got error 'Primary script unknown'
[Thu May 07 02:41:12.489632 2026] [proxy_fcgi:error] [pid 9653:tid 9699] [client 74.249.149.76:22413] AH01071: Got error 'Primary script unknown'
[Thu May 07 02:41:12.688449 2026] [proxy_fcgi:error] [pid 9653:tid 9703] [client 74.249.149.76:22413] AH01071: Got error 'Primary script unknown'
[Thu May 07 02:41:12.896708 2026] [proxy_fcgi:error] [pid 9653:tid 9718] [client 74.249.149.76:22413] AH01071: Got error 'Primary script unknown'
[Thu May 07 02:41:13.087409 2026] [proxy_fcgi:error] [pid 9653:tid 9716] [client 74.249.149.76:22413] AH01071: Got error 'Primary script unknown'
[Thu May 07 02:41:13.283078 2026] [proxy_fcgi:error] [pid 9653:tid 9710] [client 74.249.149.76:22413] AH01071: Got error 'Primary script unknown'
[Thu May 07 02:41:13.473767 2026] [proxy_fcgi:error] [pid 9653:tid 9711] [client 74.249.149.76:22413] AH01071: Got error 'Primary script unknown'
[Thu May 07 02:41:13.664655 2026] [proxy_fcgi:error] [pid 9653:tid 9706] [client 74.249.149.76:22413] AH01071: Got error 'Primary script unknown'
[Thu May 07 02:41:13.855149 2026] [proxy_fcgi:error] [pid 9653:tid 9709] [client 74.249.149.76:22413] AH01071: Got error 'Primary script unknown'
[Thu May 07 02:41:14.050793 2026] [proxy_fcgi:error] [pid 9653:tid 9702] [client 74.249.149.76:22413] AH01071: Got error 'Primary script unknown'
[Thu May 07 02:41:14.277222 2026] [proxy_fcgi:error] [pid 9653:tid 9712] [client 74.249.149.76:22413] AH01071: Got error 'Primary script unknown'
[Thu May 07 02:41:14.637899 2026] [:error] [pid 9653:tid 9698] [client 74.249.149.76:22413] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-tiroto.php"] [unique_id "afuLSqhJ49Xc4dqq0B6FKQAAAAA"]
[Thu May 07 02:41:16.248804 2026] [:error] [pid 482:tid 489] [client 74.249.149.76:22401] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-tiroto.php"] [unique_id "afuLTMxs8HOc_nWgOW6sgwAAAcU"]
[Thu May 07 02:41:17.111269 2026] [:error] [pid 592:tid 611] [client 74.249.149.76:22416] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-tiroto.php"] [unique_id "afuLTZiX28mb6xLi2PzPDgAAAo8"]
[Thu May 07 02:41:17.608974 2026] [:error] [pid 592:tid 608] [client 74.249.149.76:22490] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-tiroto.php"] [unique_id "afuLTZiX28mb6xLi2PzPEAAAAow"]
[Thu May 07 02:41:19.703678 2026] [:error] [pid 9659:tid 9738] [client 74.249.149.76:22488] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a7.php"] [unique_id "afuLT_wJnWjd8JHpBtu_yAAAAMQ"]
[Thu May 07 02:41:21.720474 2026] [:error] [pid 63810:tid 63831] [client 74.249.149.76:22491] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a7.php"] [unique_id "afuLUXpnbsN9Zf6i5IFXrgAAAZE"]
[Thu May 07 02:41:23.079064 2026] [:error] [pid 13443:tid 13462] [client 74.249.149.76:22526] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a7.php"] [unique_id "afuLUwCyfZallDmsQre6ggAAAVE"]
[Thu May 07 02:41:23.754172 2026] [:error] [pid 557:tid 577] [client 74.249.149.76:22475] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a7.php"] [unique_id "afuLUzZjFR8Vd8ce80BFbwAAAlI"]
[Thu May 07 02:41:24.516681 2026] [:error] [pid 9664:tid 9769] [client 74.249.149.76:22434] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/1.php"] [unique_id "afuLVAH4OZbrg1SjsBOMUgAAAIc"]
[Thu May 07 02:41:26.249140 2026] [:error] [pid 9789:tid 9795] [client 74.249.149.76:22468] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/1.php"] [unique_id "afuLVj_YStPJSCHPkUXeaAAAAEQ"]
[Thu May 07 02:41:27.139989 2026] [:error] [pid 13443:tid 13454] [client 74.249.149.76:22500] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/1.php"] [unique_id "afuLVwCyfZallDmsQre6gwAAAUk"]
[Thu May 07 02:41:28.153566 2026] [:error] [pid 557:tid 569] [client 74.249.149.76:22494] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/1.php"] [unique_id "afuLWDZjFR8Vd8ce80BFcgAAAko"]
[Thu May 07 02:41:29.916247 2026] [:error] [pid 9789:tid 9804] [client 74.249.149.76:22483] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/drykl.php"] [unique_id "afuLWT_YStPJSCHPkUXebwAAAE0"]
[Thu May 07 02:41:30.903188 2026] [:error] [pid 592:tid 604] [client 74.249.149.76:22405] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/drykl.php"] [unique_id "afuLWpiX28mb6xLi2PzPFAAAAog"]
[Thu May 07 02:41:31.821183 2026] [:error] [pid 557:tid 577] [client 74.249.149.76:22515] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/drykl.php"] [unique_id "afuLWzZjFR8Vd8ce80BFeAAAAlI"]
[Thu May 07 02:41:32.592633 2026] [:error] [pid 557:tid 580] [client 74.249.149.76:22402] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/drykl.php"] [unique_id "afuLXDZjFR8Vd8ce80BFeQAAAlU"]
[Thu May 07 02:41:33.375160 2026] [:error] [pid 9789:tid 9806] [client 74.249.149.76:22410] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/BDKR28WP.php"] [unique_id "afuLXT_YStPJSCHPkUXecQAAAE8"]
[Thu May 07 02:41:34.519466 2026] [:error] [pid 9789:tid 9809] [client 74.249.149.76:22339] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/BDKR28WP.php"] [unique_id "afuLXj_YStPJSCHPkUXecgAAAFI"]
[Thu May 07 02:41:35.803333 2026] [:error] [pid 9789:tid 9799] [client 74.249.149.76:22497] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/BDKR28WP.php"] [unique_id "afuLXz_YStPJSCHPkUXecwAAAEg"]
[Thu May 07 02:41:36.993107 2026] [:error] [pid 592:tid 618] [client 74.249.149.76:22514] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/BDKR28WP.php"] [unique_id "afuLYJiX28mb6xLi2PzPFgAAApM"]
[Thu May 07 02:41:38.477098 2026] [:error] [pid 557:tid 569] [client 74.249.149.76:22481] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mifta.php"] [unique_id "afuLYjZjFR8Vd8ce80BFewAAAko"]
[Thu May 07 02:41:40.056924 2026] [:error] [pid 482:tid 490] [client 74.249.149.76:22484] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mifta.php"] [unique_id "afuLZMxs8HOc_nWgOW6siwAAAcY"]
[Thu May 07 02:41:40.696037 2026] [:error] [pid 9664:tid 9783] [client 74.249.149.76:22426] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mifta.php"] [unique_id "afuLZAH4OZbrg1SjsBOMWQAAAJU"]
[Thu May 07 02:41:41.953123 2026] [:error] [pid 63810:tid 63835] [client 74.249.149.76:22424] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mifta.php"] [unique_id "afuLZXpnbsN9Zf6i5IFXvgAAAZU"]
[Thu May 07 02:41:44.969559 2026] [:error] [pid 13414:tid 13430] [client 74.249.149.76:22414] [client 74.249.149.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/theme-compat/options.php"] [unique_id "afuLaEuJQpWjVpJTu_lF7gAAAQ4"]
[Thu May 07 02:41:46.571667 2026] [:error] [pid 9789:tid 9797] [client 74.249.149.76:22444] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xwx1.php"] [unique_id "afuLaj_YStPJSCHPkUXeeQAAAEY"]
[Thu May 07 02:41:47.366882 2026] [:error] [pid 482:tid 484] [client 74.249.149.76:22502] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xwx1.php"] [unique_id "afuLa8xs8HOc_nWgOW6sjwAAAcA"]
[Thu May 07 02:41:49.151882 2026] [:error] [pid 13443:tid 13461] [client 74.249.149.76:22485] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xwx1.php"] [unique_id "afuLbQCyfZallDmsQre6jwAAAVA"]
[Thu May 07 02:41:51.139861 2026] [:error] [pid 13443:tid 13448] [client 74.249.149.76:22473] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xwx1.php"] [unique_id "afuLbwCyfZallDmsQre6lQAAAUM"]
[Thu May 07 02:41:53.227469 2026] [:error] [pid 592:tid 602] [client 74.249.149.76:22458] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a1.php"] [unique_id "afuLcZiX28mb6xLi2PzPJwAAAoY"]
[Thu May 07 02:41:55.008512 2026] [:error] [pid 9789:tid 9808] [client 74.249.149.76:22337] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a1.php"] [unique_id "afuLcz_YStPJSCHPkUXefgAAAFE"]
[Thu May 07 02:41:57.049135 2026] [:error] [pid 557:tid 562] [client 74.249.149.76:22406] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a1.php"] [unique_id "afuLdTZjFR8Vd8ce80BFgQAAAkM"]
[Thu May 07 02:41:58.608417 2026] [:error] [pid 9664:tid 9766] [client 74.249.149.76:22442] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a1.php"] [unique_id "afuLdgH4OZbrg1SjsBOMagAAAIQ"]
[Thu May 07 02:41:59.617199 2026] [:error] [pid 557:tid 582] [client 74.249.149.76:22345] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/d.php"] [unique_id "afuLdzZjFR8Vd8ce80BFgwAAAlc"]
[Thu May 07 02:42:01.223507 2026] [:error] [pid 9653:tid 9708] [client 74.249.149.76:22403] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/d.php"] [unique_id "afuLeahJ49Xc4dqq0B6FOAAAAAo"]
[Thu May 07 02:42:03.263938 2026] [:error] [pid 9659:tid 9734] [client 74.249.149.76:22445] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/d.php"] [unique_id "afuLe_wJnWjd8JHpBtu_1gAAAMA"]
[Thu May 07 02:42:04.114732 2026] [:error] [pid 9659:tid 9747] [client 74.249.149.76:22527] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/d.php"] [unique_id "afuLfPwJnWjd8JHpBtu_2wAAAM0"]
[Thu May 07 02:42:04.798772 2026] [:error] [pid 9653:tid 9699] [client 74.249.149.76:22464] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/edit.php"] [unique_id "afuLfKhJ49Xc4dqq0B6FPgAAAAE"]
[Thu May 07 02:42:06.522358 2026] [:error] [pid 9664:tid 9778] [client 74.249.149.76:22463] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/edit.php"] [unique_id "afuLfgH4OZbrg1SjsBOMdAAAAJA"]
[Thu May 07 02:42:08.199538 2026] [:error] [pid 9789:tid 9809] [client 74.249.149.76:22459] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/edit.php"] [unique_id "afuLgD_YStPJSCHPkUXehAAAAFI"]
[Thu May 07 02:42:10.244172 2026] [:error] [pid 557:tid 563] [client 74.249.149.76:22428] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/edit.php"] [unique_id "afuLgjZjFR8Vd8ce80BFiAAAAkQ"]
[Thu May 07 02:42:11.070293 2026] [:error] [pid 592:tid 615] [client 74.249.149.76:22471] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xff.php"] [unique_id "afuLg5iX28mb6xLi2PzPKgAAApE"]
[Thu May 07 02:42:12.163489 2026] [:error] [pid 557:tid 578] [client 74.249.149.76:22512] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xff.php"] [unique_id "afuLhDZjFR8Vd8ce80BFjgAAAlM"]
[Thu May 07 02:42:13.238915 2026] [:error] [pid 557:tid 562] [client 74.249.149.76:22508] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xff.php"] [unique_id "afuLhTZjFR8Vd8ce80BFjwAAAkM"]
[Thu May 07 02:42:16.106121 2026] [proxy_fcgi:error] [pid 9664:tid 9783] [client 74.249.149.76:22506] AH01071: Got error 'Primary script unknown'
[Thu May 07 02:42:16.295486 2026] [proxy_fcgi:error] [pid 9664:tid 9776] [client 74.249.149.76:22506] AH01071: Got error 'Primary script unknown'
[Thu May 07 02:42:16.485088 2026] [proxy_fcgi:error] [pid 9664:tid 9774] [client 74.249.149.76:22506] AH01071: Got error 'Primary script unknown'
[Thu May 07 02:42:17.988839 2026] [proxy_fcgi:error] [pid 9664:tid 9773] [client 74.249.149.76:22506] AH01071: Got error 'Primary script unknown'
[Thu May 07 02:42:18.197075 2026] [proxy_fcgi:error] [pid 9664:tid 9775] [client 74.249.149.76:22506] AH01071: Got error 'Primary script unknown'
[Thu May 07 02:42:18.389123 2026] [proxy_fcgi:error] [pid 9664:tid 9769] [client 74.249.149.76:22506] AH01071: Got error 'Primary script unknown'
[Thu May 07 02:42:18.589385 2026] [proxy_fcgi:error] [pid 9664:tid 9786] [client 74.249.149.76:22506] AH01071: Got error 'Primary script unknown'
[Thu May 07 02:42:18.774380 2026] [:error] [pid 9664:tid 9767] [client 74.249.149.76:22506] [client 74.249.149.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dwelectservices.com.au"] [uri "/tiny.php"] [unique_id "afuLigH4OZbrg1SjsBOMkgAAAIU"]
[Thu May 07 02:42:19.803616 2026] [proxy_fcgi:error] [pid 9664:tid 9777] [client 74.249.149.76:22505] AH01071: Got error 'Primary script unknown'
[Thu May 07 02:42:19.994629 2026] [proxy_fcgi:error] [pid 9664:tid 9772] [client 74.249.149.76:22505] AH01071: Got error 'Primary script unknown'
[Thu May 07 02:42:20.185004 2026] [proxy_fcgi:error] [pid 9664:tid 9776] [client 74.249.149.76:22505] AH01071: Got error 'Primary script unknown'
[Thu May 07 02:42:20.379894 2026] [proxy_fcgi:error] [pid 9664:tid 9766] [client 74.249.149.76:22505] AH01071: Got error 'Primary script unknown'
[Thu May 07 02:42:20.567212 2026] [:error] [pid 9664:tid 9763] [client 74.249.149.76:22505] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/roksad1.php"] [unique_id "afuLjAH4OZbrg1SjsBOMngAAAIE"]
[Thu May 07 02:42:21.783844 2026] [:error] [pid 13414:tid 13437] [client 74.249.149.76:22516] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/roksad1.php"] [unique_id "afuLjUuJQpWjVpJTu_lF9QAAARU"]
[Thu May 07 02:42:23.590521 2026] [:error] [pid 13414:tid 13429] [client 74.249.149.76:22380] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/roksad1.php"] [unique_id "afuLj0uJQpWjVpJTu_lF9wAAAQ0"]
[Thu May 07 02:42:24.174767 2026] [:error] [pid 9653:tid 9721] [client 74.249.149.76:22453] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/roksad1.php"] [unique_id "afuLkKhJ49Xc4dqq0B6FUgAAABc"]
[Thu May 07 02:42:24.823557 2026] [:error] [pid 9664:tid 9773] [client 74.249.149.76:22474] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aj11.php"] [unique_id "afuLkAH4OZbrg1SjsBOMqwAAAIs"]
[Thu May 07 02:42:25.893740 2026] [:error] [pid 592:tid 597] [client 74.249.149.76:22523] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aj11.php"] [unique_id "afuLkZiX28mb6xLi2PzPPQAAAoE"]
[Thu May 07 02:42:27.003166 2026] [:error] [pid 13443:tid 13464] [client 74.249.149.76:22440] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aj11.php"] [unique_id "afuLkwCyfZallDmsQre6qQAAAVM"]
[Thu May 07 02:42:28.023542 2026] [:error] [pid 9659:tid 9744] [client 74.249.149.76:22418] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aj11.php"] [unique_id "afuLlPwJnWjd8JHpBtu_9QAAAMo"]
[Thu May 07 02:42:29.811851 2026] [:error] [pid 9664:tid 9786] [client 74.249.149.76:22478] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/yuzuru1.php"] [unique_id "afuLlQH4OZbrg1SjsBOMtgAAAJg"]
[Thu May 07 02:42:32.502009 2026] [:error] [pid 9653:tid 9716] [client 74.249.149.76:22415] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/yuzuru1.php"] [unique_id "afuLmKhJ49Xc4dqq0B6FXAAAABI"]
[Thu May 07 02:42:34.003194 2026] [:error] [pid 9653:tid 9713] [client 74.249.149.76:22427] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/yuzuru1.php"] [unique_id "afuLmqhJ49Xc4dqq0B6FYAAAAA8"]
[Thu May 07 02:42:35.473770 2026] [:error] [pid 482:tid 494] [client 74.249.149.76:22422] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/yuzuru1.php"] [unique_id "afuLm8xs8HOc_nWgOW6spQAAAco"]
[Thu May 07 02:42:36.825852 2026] [:error] [pid 9664:tid 9782] [client 74.249.149.76:22451] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/1a.php"] [unique_id "afuLnAH4OZbrg1SjsBOMwAAAAJQ"]
[Thu May 07 02:42:38.143837 2026] [:error] [pid 482:tid 496] [client 74.249.149.76:22501] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/1a.php"] [unique_id "afuLnsxs8HOc_nWgOW6sqAAAAcw"]
[Thu May 07 02:42:38.926386 2026] [:error] [pid 9664:tid 9777] [client 74.249.149.76:22429] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/1a.php"] [unique_id "afuLngH4OZbrg1SjsBOMxQAAAI8"]
[Thu May 07 02:42:40.206975 2026] [:error] [pid 9653:tid 9716] [client 74.249.149.76:22509] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/1a.php"] [unique_id "afuLoKhJ49Xc4dqq0B6FZQAAABI"]
[Thu May 07 02:42:41.083627 2026] [:error] [pid 9789:tid 9807] [client 74.249.149.76:22369] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gelio1.php"] [unique_id "afuLoT_YStPJSCHPkUXeoAAAAFA"]
[Thu May 07 02:42:42.173047 2026] [:error] [pid 482:tid 499] [client 74.249.149.76:22441] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gelio1.php"] [unique_id "afuLosxs8HOc_nWgOW6srgAAAc8"]
[Thu May 07 02:42:43.585510 2026] [:error] [pid 9789:tid 9795] [client 74.249.149.76:22518] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gelio1.php"] [unique_id "afuLoz_YStPJSCHPkUXeogAAAEQ"]
[Thu May 07 02:42:44.643038 2026] [:error] [pid 592:tid 620] [client 74.249.149.76:22417] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gelio1.php"] [unique_id "afuLpJiX28mb6xLi2PzPRgAAApU"]
[Thu May 07 02:42:45.405376 2026] [:error] [pid 9653:tid 9705] [client 74.249.149.76:22470] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2.php"] [unique_id "afuLpahJ49Xc4dqq0B6FawAAAAc"]
[Thu May 07 02:42:46.390631 2026] [:error] [pid 9659:tid 9742] [client 74.249.149.76:22448] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2.php"] [unique_id "afuLpvwJnWjd8JHpBtu__wAAAMg"]
[Thu May 07 02:42:47.326901 2026] [:error] [pid 9664:tid 9770] [client 74.249.149.76:22486] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2.php"] [unique_id "afuLpwH4OZbrg1SjsBOMygAAAIg"]
[Thu May 07 02:42:48.818355 2026] [:error] [pid 9659:tid 9735] [client 74.249.149.76:22437] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2.php"] [unique_id "afuLqPwJnWjd8JHpBtvABAAAAME"]
[Thu May 07 02:42:49.466527 2026] [:error] [pid 9653:tid 9717] [client 74.249.149.76:22479] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f35.php"] [unique_id "afuLqahJ49Xc4dqq0B6FdwAAABM"]
[Thu May 07 02:42:50.601387 2026] [:error] [pid 592:tid 606] [client 74.249.149.76:22495] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f35.php"] [unique_id "afuLqpiX28mb6xLi2PzPRwAAAoo"]
[Thu May 07 02:42:51.605979 2026] [:error] [pid 9653:tid 9704] [client 74.249.149.76:22357] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f35.php"] [unique_id "afuLq6hJ49Xc4dqq0B6FfAAAAAY"]
[Thu May 07 02:42:53.526425 2026] [:error] [pid 9653:tid 9699] [client 74.249.149.76:22421] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f35.php"] [unique_id "afuLrahJ49Xc4dqq0B6FgwAAAAE"]
[Thu May 07 02:42:55.169774 2026] [:error] [pid 482:tid 492] [client 74.249.149.76:22400] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sky.php"] [unique_id "afuLr8xs8HOc_nWgOW6ssgAAAcg"]
[Thu May 07 02:42:56.827429 2026] [:error] [pid 9653:tid 9719] [client 74.249.149.76:22404] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sky.php"] [unique_id "afuLsKhJ49Xc4dqq0B6FiwAAABU"]
[Thu May 07 02:42:58.103724 2026] [:error] [pid 9664:tid 9786] [client 74.249.149.76:22423] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sky.php"] [unique_id "afuLsgH4OZbrg1SjsBOM2QAAAJg"]
[Thu May 07 02:42:59.804013 2026] [:error] [pid 9653:tid 9714] [client 74.249.149.76:22469] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sky.php"] [unique_id "afuLs6hJ49Xc4dqq0B6FkAAAABA"]
[Thu May 07 02:43:00.680725 2026] [:error] [pid 9789:tid 9810] [client 74.249.149.76:22285] [client 74.249.149.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/theme-compat/wp-login.php"] [unique_id "afuLtD_YStPJSCHPkUXerAAAAFM"]
[Thu May 07 02:43:03.434097 2026] [:error] [pid 9664:tid 9779] [client 74.249.149.76:22425] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/man.php"] [unique_id "afuLtwH4OZbrg1SjsBOM7QAAAJE"]
[Thu May 07 02:43:05.186524 2026] [:error] [pid 9789:tid 9792] [client 74.249.149.76:22443] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/man.php"] [unique_id "afuLuT_YStPJSCHPkUXetQAAAEE"]
[Thu May 07 02:43:06.497828 2026] [:error] [pid 9789:tid 9803] [client 74.249.149.76:22368] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/man.php"] [unique_id "afuLuj_YStPJSCHPkUXeuwAAAEw"]
[Thu May 07 02:43:08.280068 2026] [:error] [pid 9659:tid 9745] [client 74.249.149.76:22353] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/man.php"] [unique_id "afuLvPwJnWjd8JHpBtvACgAAAMs"]
[Thu May 07 02:43:10.154649 2026] [:error] [pid 557:tid 560] [client 74.249.149.76:22341] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws85.php"] [unique_id "afuLvjZjFR8Vd8ce80BFrAAAAkE"]
[Thu May 07 02:43:12.029755 2026] [:error] [pid 9653:tid 9710] [client 74.249.149.76:22525] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws85.php"] [unique_id "afuLwKhJ49Xc4dqq0B6FnQAAAAw"]
[Thu May 07 02:43:14.452947 2026] [:error] [pid 482:tid 509] [client 74.249.149.76:22447] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws85.php"] [unique_id "afuLwsxs8HOc_nWgOW6suQAAAdc"]
[Thu May 07 02:43:16.090073 2026] [:error] [pid 9789:tid 9797] [client 74.249.149.76:22520] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws85.php"] [unique_id "afuLxD_YStPJSCHPkUXe0wAAAEY"]
[Thu May 07 02:43:17.050532 2026] [:error] [pid 9653:tid 9705] [client 74.249.149.76:22355] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Sanskrit.php"] [unique_id "afuLxahJ49Xc4dqq0B6FpgAAAAc"]
[Thu May 07 02:43:17.894187 2026] [:error] [pid 9789:tid 9813] [client 74.249.149.76:22498] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Sanskrit.php"] [unique_id "afuLxT_YStPJSCHPkUXe1QAAAFY"]
[Thu May 07 02:43:19.460820 2026] [:error] [pid 9664:tid 9767] [client 74.249.149.76:22362] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Sanskrit.php"] [unique_id "afuLxwH4OZbrg1SjsBOM-AAAAIU"]
[Thu May 07 02:43:20.677793 2026] [proxy_fcgi:error] [pid 9653:tid 9711] [client 74.249.149.76:22349] AH01071: Got error 'Primary script unknown'
[Thu May 07 02:43:20.875995 2026] [proxy_fcgi:error] [pid 9653:tid 9709] [client 74.249.149.76:22349] AH01071: Got error 'Primary script unknown'
[Thu May 07 02:43:21.071650 2026] [proxy_fcgi:error] [pid 9653:tid 9704] [client 74.249.149.76:22349] AH01071: Got error 'Primary script unknown'
[Thu May 07 02:43:21.288157 2026] [proxy_fcgi:error] [pid 9653:tid 9700] [client 74.249.149.76:22349] AH01071: Got error 'Primary script unknown'
[Thu May 07 02:43:21.492539 2026] [proxy_fcgi:error] [pid 9653:tid 9721] [client 74.249.149.76:22349] AH01071: Got error 'Primary script unknown'
[Thu May 07 02:43:21.685213 2026] [proxy_fcgi:error] [pid 9653:tid 9702] [client 74.249.149.76:22349] AH01071: Got error 'Primary script unknown'
[Thu May 07 02:43:21.875814 2026] [proxy_fcgi:error] [pid 9653:tid 9699] [client 74.249.149.76:22349] AH01071: Got error 'Primary script unknown'
[Thu May 07 02:43:22.404672 2026] [proxy_fcgi:error] [pid 9653:tid 9698] [client 74.249.149.76:22349] AH01071: Got error 'Primary script unknown'
[Thu May 07 02:43:22.596095 2026] [proxy_fcgi:error] [pid 9653:tid 9716] [client 74.249.149.76:22349] AH01071: Got error 'Primary script unknown'
[Thu May 07 02:43:22.785396 2026] [proxy_fcgi:error] [pid 9653:tid 9710] [client 74.249.149.76:22349] AH01071: Got error 'Primary script unknown'
[Thu May 07 02:43:22.981363 2026] [proxy_fcgi:error] [pid 9653:tid 9709] [client 74.249.149.76:22349] AH01071: Got error 'Primary script unknown'
[Thu May 07 02:43:23.175207 2026] [:error] [pid 9653:tid 9704] [client 74.249.149.76:22349] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wgift1.php"] [unique_id "afuLy6hJ49Xc4dqq0B6FvAAAAAY"]
[Thu May 07 02:43:25.528123 2026] [:error] [pid 9653:tid 9709] [client 74.249.149.76:22466] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wgift1.php"] [unique_id "afuLzahJ49Xc4dqq0B6FxAAAAAs"]
[Thu May 07 02:43:27.015616 2026] [:error] [pid 9789:tid 9813] [client 74.249.149.76:22493] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wgift1.php"] [unique_id "afuLzz_YStPJSCHPkUXe4gAAAFY"]
[Thu May 07 02:43:28.191821 2026] [:error] [pid 482:tid 491] [client 74.249.149.76:22432] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wgift1.php"] [unique_id "afuL0Mxs8HOc_nWgOW6sxwAAAcc"]
[Thu May 07 02:43:29.809201 2026] [:error] [pid 13414:tid 13433] [client 74.249.149.76:22436] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mar.php"] [unique_id "afuL0UuJQpWjVpJTu_lGCAAAARE"]
[Thu May 07 02:43:31.184564 2026] [:error] [pid 557:tid 567] [client 74.249.149.76:22513] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mar.php"] [unique_id "afuL0zZjFR8Vd8ce80BFxAAAAkg"]
[Thu May 07 02:43:32.590745 2026] [:error] [pid 13443:tid 13468] [client 74.249.149.76:22446] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mar.php"] [unique_id "afuL1ACyfZallDmsQre6ywAAAVc"]
[Thu May 07 02:43:33.743494 2026] [:error] [pid 9653:tid 9716] [client 74.249.149.76:22412] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mar.php"] [unique_id "afuL1ahJ49Xc4dqq0B6FzwAAABI"]
[Thu May 07 02:43:36.850309 2026] [:error] [pid 9789:tid 9800] [client 74.249.149.76:22389] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/img.php"] [unique_id "afuL2D_YStPJSCHPkUXe7QAAAEk"]
[Thu May 07 02:43:39.154934 2026] [:error] [pid 9789:tid 9795] [client 74.249.149.76:22419] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/img.php"] [unique_id "afuL2z_YStPJSCHPkUXe8QAAAEQ"]
[Thu May 07 02:43:41.417594 2026] [:error] [pid 9789:tid 9806] [client 74.249.149.76:22450] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/img.php"] [unique_id "afuL3T_YStPJSCHPkUXe-wAAAE8"]
[Thu May 07 02:43:42.218182 2026] [:error] [pid 9664:tid 9783] [client 74.249.149.76:22347] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/img.php"] [unique_id "afuL3gH4OZbrg1SjsBONEwAAAJU"]
[Thu May 07 02:43:43.708252 2026] [:error] [pid 13443:tid 13457] [client 74.249.149.76:22407] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/themes.php"] [unique_id "afuL3wCyfZallDmsQre60QAAAUw"]
[Thu May 07 02:43:44.625748 2026] [:error] [pid 13443:tid 13453] [client 74.249.149.76:22393] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/themes.php"] [unique_id "afuL4ACyfZallDmsQre60wAAAUg"]
[Thu May 07 02:43:45.426682 2026] [:error] [pid 63810:tid 63834] [client 74.249.149.76:22430] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/themes.php"] [unique_id "afuL4XpnbsN9Zf6i5IFYAgAAAZQ"]
[Thu May 07 02:43:46.528335 2026] [:error] [pid 9659:tid 9744] [client 74.249.149.76:22519] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/themes.php"] [unique_id "afuL4vwJnWjd8JHpBtvALAAAAMo"]
[Thu May 07 02:43:47.215753 2026] [:error] [pid 482:tid 509] [client 74.249.149.76:22438] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/acp.php"] [unique_id "afuL48xs8HOc_nWgOW6s0gAAAdc"]
[Thu May 07 02:43:48.278951 2026] [:error] [pid 9653:tid 9718] [client 74.249.149.76:22344] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/acp.php"] [unique_id "afuL5KhJ49Xc4dqq0B6F2gAAABQ"]
[Thu May 07 02:43:49.613227 2026] [:error] [pid 9664:tid 9771] [client 74.249.149.76:22390] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/acp.php"] [unique_id "afuL5QH4OZbrg1SjsBONIwAAAIk"]
[Thu May 07 02:43:50.575743 2026] [:error] [pid 9789:tid 9810] [client 74.249.149.76:22336] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/acp.php"] [unique_id "afuL5j_YStPJSCHPkUXfAwAAAFM"]
[Thu May 07 02:43:51.696430 2026] [:error] [pid 13414:tid 13436] [client 74.249.149.76:22364] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/error_log.php"] [unique_id "afuL50uJQpWjVpJTu_lGEgAAARQ"]
[Thu May 07 02:43:52.686912 2026] [:error] [pid 9789:tid 9808] [client 74.249.149.76:22351] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/error_log.php"] [unique_id "afuL6D_YStPJSCHPkUXfDAAAAFE"]
[Thu May 07 02:43:53.922736 2026] [:error] [pid 9664:tid 9775] [client 74.249.149.76:22455] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/error_log.php"] [unique_id "afuL6QH4OZbrg1SjsBONLgAAAI0"]
[Thu May 07 02:43:55.183693 2026] [:error] [pid 9789:tid 9814] [client 74.249.149.76:22439] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/error_log.php"] [unique_id "afuL6z_YStPJSCHPkUXfGwAAAFc"]
[Thu May 07 02:43:55.968791 2026] [:error] [pid 9653:tid 9710] [client 74.249.149.76:22409] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zdd.php"] [unique_id "afuL66hJ49Xc4dqq0B6F3QAAAAw"]
[Thu May 07 02:43:57.418703 2026] [:error] [pid 13443:tid 13469] [client 74.249.149.76:22354] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zdd.php"] [unique_id "afuL7QCyfZallDmsQre63gAAAVg"]
[Thu May 07 02:43:59.451198 2026] [:error] [pid 13443:tid 13449] [client 74.249.149.76:22348] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zdd.php"] [unique_id "afuL7wCyfZallDmsQre64gAAAUQ"]
[Thu May 07 02:44:00.839078 2026] [:error] [pid 63810:tid 63838] [client 74.249.149.76:22454] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zdd.php"] [unique_id "afuL8HpnbsN9Zf6i5IFYCwAAAZg"]
[Thu May 07 02:44:02.061596 2026] [:error] [pid 9653:tid 9702] [client 74.249.149.76:22275] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/link.php"] [unique_id "afuL8qhJ49Xc4dqq0B6F5wAAAAQ"]
[Thu May 07 02:44:03.652185 2026] [:error] [pid 63810:tid 63830] [client 74.249.149.76:22461] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/link.php"] [unique_id "afuL83pnbsN9Zf6i5IFYDQAAAZA"]
[Thu May 07 02:44:04.522766 2026] [:error] [pid 13414:tid 13420] [client 74.249.149.76:22487] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/link.php"] [unique_id "afuL9EuJQpWjVpJTu_lGGwAAAQQ"]
[Thu May 07 02:44:06.053204 2026] [:error] [pid 557:tid 566] [client 74.249.149.76:22456] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/link.php"] [unique_id "afuL9jZjFR8Vd8ce80BF5QAAAkc"]
[Thu May 07 02:44:07.691531 2026] [:error] [pid 482:tid 508] [client 74.249.149.76:22465] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sallu.php"] [unique_id "afuL98xs8HOc_nWgOW6s6QAAAdY"]
[Thu May 07 02:44:08.284297 2026] [:error] [pid 482:tid 510] [client 74.249.149.76:22286] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sallu.php"] [unique_id "afuL-Mxs8HOc_nWgOW6s7AAAAdg"]
[Thu May 07 02:44:09.309418 2026] [:error] [pid 13443:tid 13450] [client 74.249.149.76:22371] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sallu.php"] [unique_id "afuL-QCyfZallDmsQre65wAAAUU"]
[Thu May 07 02:44:10.017797 2026] [:error] [pid 9789:tid 9799] [client 74.249.149.76:22477] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sallu.php"] [unique_id "afuL-j_YStPJSCHPkUXfIQAAAEg"]
[Thu May 07 02:44:11.360102 2026] [:error] [pid 13443:tid 13465] [client 74.249.149.76:22379] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aboute.php"] [unique_id "afuL-wCyfZallDmsQre66AAAAVQ"]
[Thu May 07 02:44:11.927477 2026] [:error] [pid 9664:tid 9778] [client 74.249.149.76:22284] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aboute.php"] [unique_id "afuL-wH4OZbrg1SjsBONPwAAAJA"]
[Thu May 07 02:44:13.061643 2026] [:error] [pid 592:tid 619] [client 74.249.149.76:22507] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aboute.php"] [unique_id "afuL_ZiX28mb6xLi2PzPZAAAApQ"]
[Thu May 07 02:44:14.275622 2026] [:error] [pid 9653:tid 9707] [client 74.249.149.76:22294] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aboute.php"] [unique_id "afuL_qhJ49Xc4dqq0B6F6wAAAAk"]
[Thu May 07 02:44:14.700292 2026] [:error] [pid 9653:tid 9700] [client 74.249.149.76:22408] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ayk.php"] [unique_id "afuL_qhJ49Xc4dqq0B6F7QAAAAI"]
[Thu May 07 02:44:15.376006 2026] [:error] [pid 9659:tid 9734] [client 74.249.149.76:22360] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ayk.php"] [unique_id "afuL__wJnWjd8JHpBtvASAAAAMA"]
[Thu May 07 02:44:16.438280 2026] [:error] [pid 13443:tid 13462] [client 74.249.149.76:22399] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ayk.php"] [unique_id "afuMAACyfZallDmsQre66gAAAVE"]
[Thu May 07 02:44:18.219899 2026] [:error] [pid 482:tid 504] [client 74.249.149.76:22503] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ayk.php"] [unique_id "afuMAsxs8HOc_nWgOW6s9QAAAdQ"]
[Thu May 07 02:44:18.765714 2026] [:error] [pid 482:tid 509] [client 74.249.149.76:22367] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/one.php"] [unique_id "afuMAsxs8HOc_nWgOW6s-QAAAdc"]
[Thu May 07 02:44:19.221891 2026] [:error] [pid 13443:tid 13453] [client 74.249.149.76:22300] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/one.php"] [unique_id "afuMAwCyfZallDmsQre67QAAAUg"]
[Thu May 07 02:44:20.792582 2026] [:error] [pid 9664:tid 9779] [client 74.249.149.76:22242] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/one.php"] [unique_id "afuMBAH4OZbrg1SjsBONTAAAAJE"]
[Thu May 07 02:44:22.982571 2026] [proxy_fcgi:error] [pid 482:tid 484] [client 74.249.149.76:22472] AH01071: Got error 'Primary script unknown'
[Thu May 07 02:44:23.173375 2026] [proxy_fcgi:error] [pid 482:tid 501] [client 74.249.149.76:22472] AH01071: Got error 'Primary script unknown'
[Thu May 07 02:44:23.371314 2026] [proxy_fcgi:error] [pid 482:tid 496] [client 74.249.149.76:22472] AH01071: Got error 'Primary script unknown'
[Thu May 07 02:44:23.571668 2026] [proxy_fcgi:error] [pid 482:tid 490] [client 74.249.149.76:22472] AH01071: Got error 'Primary script unknown'
[Thu May 07 02:44:23.762452 2026] [proxy_fcgi:error] [pid 482:tid 489] [client 74.249.149.76:22472] AH01071: Got error 'Primary script unknown'
[Thu May 07 02:44:23.976020 2026] [proxy_fcgi:error] [pid 482:tid 500] [client 74.249.149.76:22472] AH01071: Got error 'Primary script unknown'
[Thu May 07 02:44:24.176815 2026] [proxy_fcgi:error] [pid 482:tid 497] [client 74.249.149.76:22472] AH01071: Got error 'Primary script unknown'
[Thu May 07 02:44:24.380547 2026] [proxy_fcgi:error] [pid 482:tid 495] [client 74.249.149.76:22472] AH01071: Got error 'Primary script unknown'
[Thu May 07 02:44:24.569553 2026] [proxy_fcgi:error] [pid 482:tid 504] [client 74.249.149.76:22472] AH01071: Got error 'Primary script unknown'
[Thu May 07 02:44:24.759904 2026] [proxy_fcgi:error] [pid 482:tid 488] [client 74.249.149.76:22472] AH01071: Got error 'Primary script unknown'
[Thu May 07 02:44:24.949926 2026] [proxy_fcgi:error] [pid 482:tid 498] [client 74.249.149.76:22472] AH01071: Got error 'Primary script unknown'
[Thu May 07 02:44:25.143105 2026] [:error] [pid 482:tid 502] [client 74.249.149.76:22472] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/view.php"] [unique_id "afuMCcxs8HOc_nWgOW6tDAAAAdI"]
[Thu May 07 02:44:26.333117 2026] [:error] [pid 9789:tid 9805] [client 74.249.149.76:22504] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/view.php"] [unique_id "afuMCj_YStPJSCHPkUXfOwAAAE4"]
[Thu May 07 02:44:27.380837 2026] [:error] [pid 13443:tid 13468] [client 74.249.149.76:22385] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/view.php"] [unique_id "afuMCwCyfZallDmsQre68wAAAVc"]
[Thu May 07 02:44:28.380721 2026] [:error] [pid 9664:tid 9776] [client 74.249.149.76:22388] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/view.php"] [unique_id "afuMDAH4OZbrg1SjsBONUgAAAI4"]
[Thu May 07 02:44:29.437259 2026] [:error] [pid 9664:tid 9772] [client 74.249.149.76:22398] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aa.php"] [unique_id "afuMDQH4OZbrg1SjsBONXwAAAIo"]
[Thu May 07 02:44:30.018821 2026] [:error] [pid 9664:tid 9768] [client 74.249.149.76:22375] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aa.php"] [unique_id "afuMDgH4OZbrg1SjsBONaAAAAIY"]
[Thu May 07 02:44:30.791367 2026] [:error] [pid 63810:tid 63823] [client 74.249.149.76:22499] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aa.php"] [unique_id "afuMDnpnbsN9Zf6i5IFYKwAAAYk"]
[Thu May 07 02:44:31.721937 2026] [:error] [pid 9653:tid 9718] [client 74.249.149.76:22411] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aa.php"] [unique_id "afuMD6hJ49Xc4dqq0B6F9wAAABQ"]
[Thu May 07 02:44:33.236347 2026] [:error] [pid 9664:tid 9765] [client 74.249.149.76:22304] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x402.php"] [unique_id "afuMEQH4OZbrg1SjsBONiQAAAIM"]
[Thu May 07 02:44:34.557101 2026] [:error] [pid 9664:tid 9771] [client 74.249.149.76:22420] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x402.php"] [unique_id "afuMEgH4OZbrg1SjsBONmQAAAIk"]
[Thu May 07 02:44:35.159867 2026] [:error] [pid 9653:tid 9717] [client 74.249.149.76:22302] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x402.php"] [unique_id "afuME6hJ49Xc4dqq0B6GDQAAABM"]
[Thu May 07 02:44:36.289479 2026] [:error] [pid 9789:tid 9797] [client 74.249.149.76:22280] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x402.php"] [unique_id "afuMFD_YStPJSCHPkUXfPwAAAEY"]
[Thu May 07 02:44:37.275791 2026] [:error] [pid 482:tid 488] [client 74.249.149.76:22276] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lib.php"] [unique_id "afuMFcxs8HOc_nWgOW6tEAAAAcQ"]
[Thu May 07 02:44:37.783428 2026] [:error] [pid 9664:tid 9785] [client 74.249.149.76:22392] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lib.php"] [unique_id "afuMFQH4OZbrg1SjsBONrgAAAJc"]
[Thu May 07 02:44:38.413528 2026] [:error] [pid 9653:tid 9716] [client 74.249.149.76:22320] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lib.php"] [unique_id "afuMFqhJ49Xc4dqq0B6GGAAAABI"]
[Thu May 07 02:44:38.891997 2026] [:error] [pid 482:tid 498] [client 74.249.149.76:22303] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lib.php"] [unique_id "afuMFsxs8HOc_nWgOW6tEgAAAc4"]
[Thu May 07 02:44:39.519907 2026] [:error] [pid 9789:tid 9812] [client 74.249.149.76:22356] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws78.php"] [unique_id "afuMFz_YStPJSCHPkUXfQgAAAFU"]
[Thu May 07 02:44:40.540627 2026] [:error] [pid 63810:tid 63825] [client 74.249.149.76:22340] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws78.php"] [unique_id "afuMGHpnbsN9Zf6i5IFYMAAAAYs"]
[Thu May 07 02:44:41.266411 2026] [:error] [pid 9664:tid 9763] [client 74.249.149.76:22307] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws78.php"] [unique_id "afuMGQH4OZbrg1SjsBONtAAAAIE"]
[Thu May 07 02:44:42.204863 2026] [:error] [pid 592:tid 611] [client 74.249.149.76:22510] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws78.php"] [unique_id "afuMGpiX28mb6xLi2PzPawAAAo8"]
[Thu May 07 02:44:43.290755 2026] [:error] [pid 9664:tid 9778] [client 74.249.149.76:22492] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f5.php"] [unique_id "afuMGwH4OZbrg1SjsBONtgAAAJA"]
[Thu May 07 02:44:43.799317 2026] [:error] [pid 9664:tid 9765] [client 74.249.149.76:22361] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f5.php"] [unique_id "afuMGwH4OZbrg1SjsBONtwAAAIM"]
[Thu May 07 02:44:44.438027 2026] [:error] [pid 63810:tid 63817] [client 74.249.149.76:22452] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f5.php"] [unique_id "afuMHHpnbsN9Zf6i5IFYMQAAAYM"]
[Thu May 07 02:44:45.290351 2026] [:error] [pid 9789:tid 9796] [client 74.249.149.76:22435] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f5.php"] [unique_id "afuMHT_YStPJSCHPkUXfTgAAAEU"]
[Thu May 07 02:44:45.901621 2026] [:error] [pid 9664:tid 9786] [client 74.249.149.76:22299] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/alpha.php"] [unique_id "afuMHQH4OZbrg1SjsBONuQAAAJg"]
[Thu May 07 02:44:47.826950 2026] [:error] [pid 557:tid 566] [client 74.249.149.76:22391] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/alpha.php"] [unique_id "afuMHzZjFR8Vd8ce80BF9QAAAkc"]
[Thu May 07 02:44:49.005329 2026] [:error] [pid 63810:tid 63836] [client 74.249.149.76:22342] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/alpha.php"] [unique_id "afuMIXpnbsN9Zf6i5IFYNAAAAZY"]
[Thu May 07 02:44:50.392346 2026] [:error] [pid 482:tid 510] [client 74.249.149.76:22283] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/alpha.php"] [unique_id "afuMIsxs8HOc_nWgOW6tHwAAAdg"]
[Thu May 07 02:44:51.335487 2026] [:error] [pid 9789:tid 9808] [client 74.249.149.76:22433] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/son1.php"] [unique_id "afuMIz_YStPJSCHPkUXfVgAAAFE"]
[Thu May 07 02:44:52.164987 2026] [:error] [pid 9664:tid 9776] [client 74.249.149.76:22314] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/son1.php"] [unique_id "afuMJAH4OZbrg1SjsBONvQAAAI4"]
[Thu May 07 02:44:53.081288 2026] [:error] [pid 482:tid 502] [client 74.249.149.76:22462] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/son1.php"] [unique_id "afuMJcxs8HOc_nWgOW6tJwAAAdI"]
[Thu May 07 02:44:53.609613 2026] [:error] [pid 9659:tid 9743] [client 74.249.149.76:22296] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/son1.php"] [unique_id "afuMJfwJnWjd8JHpBtvAyQAAAMk"]
[Thu May 07 02:44:54.249869 2026] [:error] [pid 13414:tid 13420] [client 74.249.149.76:22350] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ggb.php"] [unique_id "afuMJkuJQpWjVpJTu_lGLQAAAQQ"]
[Thu May 07 02:44:55.093493 2026] [:error] [pid 13443:tid 13450] [client 74.249.149.76:22496] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ggb.php"] [unique_id "afuMJwCyfZallDmsQre7BAAAAUU"]
[Thu May 07 02:44:55.930816 2026] [:error] [pid 9653:tid 9711] [client 74.249.149.76:22522] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ggb.php"] [unique_id "afuMJ6hJ49Xc4dqq0B6GOwAAAA0"]
[Thu May 07 02:44:56.670048 2026] [:error] [pid 482:tid 491] [client 74.249.149.76:22394] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ggb.php"] [unique_id "afuMKMxs8HOc_nWgOW6tKwAAAcc"]
[Thu May 07 02:44:57.090803 2026] [:error] [pid 13443:tid 13462] [client 74.249.149.76:22346] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/amxloxxr.php"] [unique_id "afuMKQCyfZallDmsQre7BQAAAVE"]
[Thu May 07 02:44:57.681659 2026] [:error] [pid 9659:tid 9741] [client 74.249.149.76:22378] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/amxloxxr.php"] [unique_id "afuMKfwJnWjd8JHpBtvA0wAAAMc"]
[Thu May 07 02:44:58.729572 2026] [:error] [pid 9653:tid 9713] [client 74.249.149.76:22366] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/amxloxxr.php"] [unique_id "afuMKqhJ49Xc4dqq0B6GQgAAAA8"]
[Thu May 07 02:44:59.260588 2026] [:error] [pid 482:tid 498] [client 74.249.149.76:22306] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/amxloxxr.php"] [unique_id "afuMK8xs8HOc_nWgOW6tLAAAAc4"]
[Thu May 07 02:45:00.073659 2026] [:error] [pid 557:tid 562] [client 74.249.149.76:22274] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ss.php"] [unique_id "afuMLDZjFR8Vd8ce80BF-wAAAkM"]
[Thu May 07 02:45:00.528282 2026] [:error] [pid 482:tid 507] [client 74.249.149.76:22210] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ss.php"] [unique_id "afuMLMxs8HOc_nWgOW6tMAAAAdU"]
[Thu May 07 02:45:01.011419 2026] [:error] [pid 557:tid 583] [client 74.249.149.76:22343] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ss.php"] [unique_id "afuMLTZjFR8Vd8ce80BF_QAAAlg"]
[Thu May 07 02:45:01.582066 2026] [:error] [pid 482:tid 500] [client 74.249.149.76:22381] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ss.php"] [unique_id "afuMLcxs8HOc_nWgOW6tNAAAAdA"]
[Thu May 07 02:45:02.118154 2026] [:error] [pid 9659:tid 9751] [client 74.249.149.76:22298] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sadcut1.php"] [unique_id "afuMLvwJnWjd8JHpBtvA2QAAANE"]
[Thu May 07 02:45:03.046042 2026] [:error] [pid 9659:tid 9738] [client 74.249.149.76:22374] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sadcut1.php"] [unique_id "afuML_wJnWjd8JHpBtvA3QAAAMQ"]
[Thu May 07 02:45:03.610334 2026] [:error] [pid 9653:tid 9720] [client 74.249.149.76:22338] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sadcut1.php"] [unique_id "afuML6hJ49Xc4dqq0B6GSAAAABY"]
[Thu May 07 02:45:04.467851 2026] [:error] [pid 482:tid 496] [client 74.249.149.76:22377] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sadcut1.php"] [unique_id "afuMMMxs8HOc_nWgOW6tOAAAAcw"]
[Thu May 07 02:45:05.190399 2026] [:error] [pid 13443:tid 13455] [client 74.249.149.76:22328] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rh.php"] [unique_id "afuMMQCyfZallDmsQre7CAAAAUo"]
[Thu May 07 02:45:06.172806 2026] [:error] [pid 13414:tid 13419] [client 74.249.149.76:22241] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rh.php"] [unique_id "afuMMkuJQpWjVpJTu_lGNQAAAQM"]
[Thu May 07 02:45:06.773804 2026] [:error] [pid 13414:tid 13424] [client 74.249.149.76:22279] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rh.php"] [unique_id "afuMMkuJQpWjVpJTu_lGOgAAAQg"]
[Thu May 07 02:45:07.364349 2026] [:error] [pid 482:tid 508] [client 74.249.149.76:22293] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rh.php"] [unique_id "afuMM8xs8HOc_nWgOW6tPQAAAdY"]
[Thu May 07 02:45:08.232595 2026] [:error] [pid 13414:tid 13430] [client 74.249.149.76:22273] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/99.php"] [unique_id "afuMNEuJQpWjVpJTu_lGPwAAAQ4"]
[Thu May 07 02:45:08.839365 2026] [:error] [pid 9664:tid 9770] [client 74.249.149.76:22524] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/99.php"] [unique_id "afuMNAH4OZbrg1SjsBONyQAAAIg"]
[Thu May 07 02:45:10.414503 2026] [:error] [pid 9659:tid 9742] [client 74.249.149.76:22397] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/99.php"] [unique_id "afuMNvwJnWjd8JHpBtvA6wAAAMg"]
[Thu May 07 02:45:11.709520 2026] [:error] [pid 9664:tid 9764] [client 74.249.149.76:22319] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/99.php"] [unique_id "afuMNwH4OZbrg1SjsBONzgAAAII"]
[Thu May 07 02:45:12.740197 2026] [:error] [pid 482:tid 494] [client 74.249.149.76:22222] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/layout.php"] [unique_id "afuMOMxs8HOc_nWgOW6tRgAAAco"]
[Thu May 07 02:45:13.675638 2026] [:error] [pid 9664:tid 9763] [client 74.249.149.76:22313] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/layout.php"] [unique_id "afuMOQH4OZbrg1SjsBON1wAAAIE"]
[Thu May 07 02:45:14.589908 2026] [:error] [pid 482:tid 491] [client 74.249.149.76:22329] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/layout.php"] [unique_id "afuMOsxs8HOc_nWgOW6tTQAAAcc"]
[Thu May 07 02:45:15.685317 2026] [:error] [pid 9664:tid 9772] [client 74.249.149.76:22311] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/layout.php"] [unique_id "afuMOwH4OZbrg1SjsBON3wAAAIo"]
[Thu May 07 02:45:16.767317 2026] [:error] [pid 13443:tid 13465] [client 74.249.149.76:22240] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/12.php"] [unique_id "afuMPACyfZallDmsQre7FgAAAVQ"]
[Thu May 07 02:45:18.124099 2026] [:error] [pid 482:tid 495] [client 74.249.149.76:22396] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/12.php"] [unique_id "afuMPsxs8HOc_nWgOW6tUwAAAcs"]
[Thu May 07 02:45:19.584447 2026] [:error] [pid 9659:tid 9734] [client 74.249.149.76:22223] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/12.php"] [unique_id "afuMP_wJnWjd8JHpBtvA7wAAAMA"]
[Thu May 07 02:45:20.332304 2026] [:error] [pid 9659:tid 9756] [client 74.249.149.76:22352] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/12.php"] [unique_id "afuMQPwJnWjd8JHpBtvA9wAAANY"]
[Thu May 07 02:45:21.533461 2026] [:error] [pid 9789:tid 9795] [client 74.249.149.76:22277] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fs.php"] [unique_id "afuMQT_YStPJSCHPkUXfZQAAAEQ"]
[Thu May 07 02:45:22.333774 2026] [:error] [pid 9789:tid 9806] [client 74.249.149.76:22376] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fs.php"] [unique_id "afuMQj_YStPJSCHPkUXfZgAAAE8"]
[Thu May 07 02:45:23.046758 2026] [:error] [pid 9789:tid 9808] [client 74.249.149.76:22231] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fs.php"] [unique_id "afuMQz_YStPJSCHPkUXfaQAAAFE"]
[Thu May 07 02:45:24.129282 2026] [proxy_fcgi:error] [pid 9659:tid 9746] [client 74.249.149.76:22287] AH01071: Got error 'Primary script unknown'
[Thu May 07 02:45:24.319792 2026] [proxy_fcgi:error] [pid 9659:tid 9745] [client 74.249.149.76:22287] AH01071: Got error 'Primary script unknown'
[Thu May 07 02:45:24.517909 2026] [proxy_fcgi:error] [pid 9659:tid 9750] [client 74.249.149.76:22287] AH01071: Got error 'Primary script unknown'
[Thu May 07 02:45:24.724065 2026] [proxy_fcgi:error] [pid 9659:tid 9756] [client 74.249.149.76:22287] AH01071: Got error 'Primary script unknown'
[Thu May 07 02:45:24.916915 2026] [proxy_fcgi:error] [pid 9659:tid 9742] [client 74.249.149.76:22287] AH01071: Got error 'Primary script unknown'
[Thu May 07 02:45:25.107186 2026] [proxy_fcgi:error] [pid 9659:tid 9747] [client 74.249.149.76:22287] AH01071: Got error 'Primary script unknown'
[Thu May 07 02:52:44.142402 2026] [proxy_fcgi:error] [pid 9653:tid 9698] [client 172.202.28.4:11401] AH01071: Got error 'Primary script unknown'
[Thu May 07 02:52:44.334614 2026] [proxy_fcgi:error] [pid 9653:tid 9719] [client 172.202.28.4:11401] AH01071: Got error 'Primary script unknown'
[Thu May 07 02:52:44.718924 2026] [proxy_fcgi:error] [pid 9653:tid 9711] [client 172.202.28.4:11401] AH01071: Got error 'Primary script unknown'
[Thu May 07 02:52:44.910966 2026] [proxy_fcgi:error] [pid 9653:tid 9712] [client 172.202.28.4:11401] AH01071: Got error 'Primary script unknown'
[Thu May 07 02:52:45.293607 2026] [proxy_fcgi:error] [pid 9653:tid 9721] [client 172.202.28.4:11401] AH01071: Got error 'Primary script unknown'
[Thu May 07 02:52:45.485870 2026] [proxy_fcgi:error] [pid 9653:tid 9702] [client 172.202.28.4:11401] AH01071: Got error 'Primary script unknown'
[Thu May 07 02:52:45.678027 2026] [proxy_fcgi:error] [pid 9653:tid 9704] [client 172.202.28.4:11401] AH01071: Got error 'Primary script unknown'
[Thu May 07 02:52:46.057778 2026] [:error] [pid 9653:tid 9718] [client 172.202.28.4:11401] [client 172.202.28.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/randkeyword.PhP7"] [unique_id "afuN_qhJ49Xc4dqq0B6IwgAAABQ"]
[Thu May 07 02:52:46.853460 2026] [:error] [pid 13443:tid 13462] [client 172.202.28.4:11489] [client 172.202.28.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/randkeyword.PhP7"] [unique_id "afuN_gCyfZallDmsQre7yQAAAVE"]
[Thu May 07 02:52:47.607807 2026] [:error] [pid 9664:tid 9776] [client 172.202.28.4:11483] [client 172.202.28.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/randkeyword.PhP7"] [unique_id "afuN_wH4OZbrg1SjsBOQNQAAAI4"]
[Thu May 07 02:52:48.376863 2026] [:error] [pid 482:tid 492] [client 172.202.28.4:11478] [client 172.202.28.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/randkeyword.PhP7"] [unique_id "afuOAMxs8HOc_nWgOW6vJAAAAcg"]
[Thu May 07 03:08:11.883224 2026] [proxy_fcgi:error] [pid 9789:tid 9794] [client 74.249.149.76:64742] AH01071: Got error 'Primary script unknown'
[Thu May 07 03:08:12.260488 2026] [proxy_fcgi:error] [pid 9789:tid 9802] [client 74.249.149.76:64742] AH01071: Got error 'Primary script unknown'
[Thu May 07 03:08:12.515753 2026] [proxy_fcgi:error] [pid 9789:tid 9814] [client 74.249.149.76:64742] AH01071: Got error 'Primary script unknown'
[Thu May 07 03:08:12.922388 2026] [proxy_fcgi:error] [pid 9789:tid 9805] [client 74.249.149.76:64742] AH01071: Got error 'Primary script unknown'
[Thu May 07 03:08:13.116701 2026] [proxy_fcgi:error] [pid 9789:tid 9803] [client 74.249.149.76:64742] AH01071: Got error 'Primary script unknown'
[Thu May 07 03:08:13.333482 2026] [proxy_fcgi:error] [pid 9789:tid 9808] [client 74.249.149.76:64742] AH01071: Got error 'Primary script unknown'
[Thu May 07 03:08:13.525321 2026] [proxy_fcgi:error] [pid 9789:tid 9801] [client 74.249.149.76:64742] AH01071: Got error 'Primary script unknown'
[Thu May 07 03:08:13.718102 2026] [proxy_fcgi:error] [pid 9789:tid 9800] [client 74.249.149.76:64742] AH01071: Got error 'Primary script unknown'
[Thu May 07 03:08:13.909004 2026] [proxy_fcgi:error] [pid 9789:tid 9796] [client 74.249.149.76:64742] AH01071: Got error 'Primary script unknown'
[Thu May 07 03:08:14.109786 2026] [proxy_fcgi:error] [pid 9789:tid 9793] [client 74.249.149.76:64742] AH01071: Got error 'Primary script unknown'
[Thu May 07 03:08:14.317628 2026] [:error] [pid 9789:tid 9812] [client 74.249.149.76:64742] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zoper1.php"] [unique_id "afuRnj_YStPJSCHPkUXjYgAAAFU"]
[Thu May 07 03:08:18.976487 2026] [:error] [pid 9653:tid 9703] [client 74.249.149.76:5734] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zoper1.php"] [unique_id "afuRoqhJ49Xc4dqq0B6MJAAAAAU"]
[Thu May 07 03:08:23.387974 2026] [:error] [pid 9789:tid 9813] [client 74.249.149.76:63468] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zoper1.php"] [unique_id "afuRpz_YStPJSCHPkUXjaQAAAFY"]
[Thu May 07 03:08:24.629445 2026] [:error] [pid 63810:tid 63837] [client 74.249.149.76:63453] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zoper1.php"] [unique_id "afuRqHpnbsN9Zf6i5IFawwAAAZc"]
[Thu May 07 03:08:25.408306 2026] [:error] [pid 482:tid 485] [client 74.249.149.76:64752] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/index0.php"] [unique_id "afuRqcxs8HOc_nWgOW6z3wAAAcE"]
[Thu May 07 03:08:29.299605 2026] [:error] [pid 9664:tid 9767] [client 74.249.149.76:5746] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/index0.php"] [unique_id "afuRrQH4OZbrg1SjsBOVrwAAAIU"]
[Thu May 07 03:08:31.479232 2026] [:error] [pid 9653:tid 9707] [client 74.249.149.76:63486] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/index0.php"] [unique_id "afuRr6hJ49Xc4dqq0B6MPAAAAAk"]
[Thu May 07 03:08:34.753686 2026] [:error] [pid 9664:tid 9764] [client 74.249.149.76:5722] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/index0.php"] [unique_id "afuRsgH4OZbrg1SjsBOVxAAAAII"]
[Thu May 07 03:08:40.798603 2026] [:error] [pid 9789:tid 9794] [client 74.249.149.76:64704] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-kz.php"] [unique_id "afuRuD_YStPJSCHPkUXjcwAAAEM"]
[Thu May 07 03:08:42.409593 2026] [:error] [pid 9664:tid 9783] [client 74.249.149.76:5741] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-kz.php"] [unique_id "afuRugH4OZbrg1SjsBOVygAAAJU"]
[Thu May 07 03:08:48.163672 2026] [:error] [pid 482:tid 504] [client 74.249.149.76:64750] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-kz.php"] [unique_id "afuRwMxs8HOc_nWgOW6z7QAAAdQ"]
[Thu May 07 03:08:50.238821 2026] [:error] [pid 9664:tid 9763] [client 74.249.149.76:63467] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file6.php"] [unique_id "afuRwgH4OZbrg1SjsBOV0wAAAIE"]
[Thu May 07 03:08:53.566726 2026] [:error] [pid 592:tid 601] [client 74.249.149.76:63438] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file6.php"] [unique_id "afuRxZiX28mb6xLi2PzSOwAAAoU"]
[Thu May 07 03:08:57.254726 2026] [:error] [pid 13443:tid 13448] [client 74.249.149.76:5698] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file6.php"] [unique_id "afuRyQCyfZallDmsQre9aQAAAUM"]
[Thu May 07 03:09:08.652181 2026] [:error] [pid 9789:tid 9801] [client 74.249.149.76:64734] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zogy1.php"] [unique_id "afuR1D_YStPJSCHPkUXjgQAAAEo"]
[Thu May 07 03:09:09.993515 2026] [:error] [pid 9789:tid 9811] [client 74.249.149.76:5753] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zogy1.php"] [unique_id "afuR1T_YStPJSCHPkUXjhgAAAFQ"]
[Thu May 07 03:09:13.664314 2026] [:error] [pid 9664:tid 9779] [client 74.249.149.76:63483] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zogy1.php"] [unique_id "afuR2QH4OZbrg1SjsBOV7gAAAJE"]
[Thu May 07 03:09:14.263575 2026] [proxy_fcgi:error] [pid 13414:tid 13421] [client 74.249.149.76:63432] AH01071: Got error 'Primary script unknown'
[Thu May 07 03:09:14.480975 2026] [proxy_fcgi:error] [pid 13414:tid 13420] [client 74.249.149.76:63432] AH01071: Got error 'Primary script unknown'
[Thu May 07 03:09:14.692654 2026] [proxy_fcgi:error] [pid 13414:tid 13435] [client 74.249.149.76:63432] AH01071: Got error 'Primary script unknown'
[Thu May 07 03:09:14.904480 2026] [proxy_fcgi:error] [pid 13414:tid 13439] [client 74.249.149.76:63432] AH01071: Got error 'Primary script unknown'
[Thu May 07 03:09:15.105042 2026] [proxy_fcgi:error] [pid 13414:tid 13417] [client 74.249.149.76:63432] AH01071: Got error 'Primary script unknown'
[Thu May 07 03:09:15.555195 2026] [proxy_fcgi:error] [pid 13414:tid 13437] [client 74.249.149.76:63432] AH01071: Got error 'Primary script unknown'
[Thu May 07 03:09:16.072456 2026] [proxy_fcgi:error] [pid 13414:tid 13425] [client 74.249.149.76:63432] AH01071: Got error 'Primary script unknown'
[Thu May 07 03:09:16.274682 2026] [proxy_fcgi:error] [pid 13414:tid 13422] [client 74.249.149.76:63432] AH01071: Got error 'Primary script unknown'
[Thu May 07 03:09:16.481367 2026] [proxy_fcgi:error] [pid 13414:tid 13429] [client 74.249.149.76:63432] AH01071: Got error 'Primary script unknown'
[Thu May 07 03:09:16.865356 2026] [proxy_fcgi:error] [pid 13414:tid 13430] [client 74.249.149.76:63432] AH01071: Got error 'Primary script unknown'
[Thu May 07 03:09:17.063199 2026] [proxy_fcgi:error] [pid 13414:tid 13427] [client 74.249.149.76:63432] AH01071: Got error 'Primary script unknown'
[Thu May 07 03:09:17.426063 2026] [:error] [pid 13414:tid 13438] [client 74.249.149.76:63432] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/adminfuns.php"] [unique_id "afuR3UuJQpWjVpJTu_lJdgAAARY"]
[Thu May 07 03:09:19.743319 2026] [:error] [pid 9664:tid 9772] [client 74.249.149.76:64736] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/adminfuns.php"] [unique_id "afuR3wH4OZbrg1SjsBOV9wAAAIo"]
[Thu May 07 03:09:21.081866 2026] [:error] [pid 9664:tid 9764] [client 74.249.149.76:64718] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/adminfuns.php"] [unique_id "afuR4QH4OZbrg1SjsBOV-QAAAII"]
[Thu May 07 03:09:21.874194 2026] [:error] [pid 9664:tid 9776] [client 74.249.149.76:64762] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/adminfuns.php"] [unique_id "afuR4QH4OZbrg1SjsBOV-wAAAI4"]
[Thu May 07 03:09:30.374033 2026] [:error] [pid 9664:tid 9774] [client 74.249.149.76:63433] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tires.php"] [unique_id "afuR6gH4OZbrg1SjsBOWCQAAAIw"]
[Thu May 07 03:09:31.279129 2026] [:error] [pid 9659:tid 9755] [client 74.249.149.76:5720] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tires.php"] [unique_id "afuR6_wJnWjd8JHpBtvEpAAAANU"]
[Thu May 07 03:09:36.679590 2026] [:error] [pid 592:tid 608] [client 74.249.149.76:64733] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tires.php"] [unique_id "afuR8JiX28mb6xLi2PzSSgAAAow"]
[Thu May 07 03:09:38.261599 2026] [:error] [pid 557:tid 567] [client 74.249.149.76:63472] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-tiroto.php"] [unique_id "afuR8jZjFR8Vd8ce80BIEQAAAkg"]
[Thu May 07 03:09:39.651783 2026] [:error] [pid 592:tid 619] [client 74.249.149.76:64757] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-tiroto.php"] [unique_id "afuR85iX28mb6xLi2PzSTAAAApQ"]
[Thu May 07 03:09:40.875054 2026] [:error] [pid 13414:tid 13429] [client 74.249.149.76:63454] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-tiroto.php"] [unique_id "afuR9EuJQpWjVpJTu_lJewAAAQ0"]
[Thu May 07 03:09:41.412686 2026] [:error] [pid 13414:tid 13430] [client 74.249.149.76:63463] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-tiroto.php"] [unique_id "afuR9UuJQpWjVpJTu_lJfQAAAQ4"]
[Thu May 07 03:09:42.063122 2026] [:error] [pid 557:tid 565] [client 74.249.149.76:5754] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a7.php"] [unique_id "afuR9jZjFR8Vd8ce80BIEgAAAkY"]
[Thu May 07 03:09:43.717732 2026] [:error] [pid 13414:tid 13438] [client 74.249.149.76:63484] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a7.php"] [unique_id "afuR90uJQpWjVpJTu_lJfwAAARY"]
[Thu May 07 03:09:46.487202 2026] [:error] [pid 9789:tid 9810] [client 74.249.149.76:5703] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a7.php"] [unique_id "afuR-j_YStPJSCHPkUXjlwAAAFM"]
[Thu May 07 03:09:49.797792 2026] [:error] [pid 13414:tid 13432] [client 74.249.149.76:64729] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a7.php"] [unique_id "afuR_UuJQpWjVpJTu_lJjAAAARA"]
[Thu May 07 03:09:52.566637 2026] [:error] [pid 13443:tid 13450] [client 74.249.149.76:63424] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/1.php"] [unique_id "afuSAACyfZallDmsQre9egAAAUU"]
[Thu May 07 03:09:53.831615 2026] [:error] [pid 9659:tid 9742] [client 74.249.149.76:5747] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/1.php"] [unique_id "afuSAfwJnWjd8JHpBtvErwAAAMg"]
[Thu May 07 03:09:55.814107 2026] [:error] [pid 13443:tid 13452] [client 74.249.149.76:63450] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/1.php"] [unique_id "afuSAwCyfZallDmsQre9gAAAAUc"]
[Thu May 07 03:09:59.077302 2026] [:error] [pid 482:tid 500] [client 74.249.149.76:5751] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/1.php"] [unique_id "afuSB8xs8HOc_nWgOW60BAAAAdA"]
[Thu May 07 03:10:01.691104 2026] [:error] [pid 482:tid 503] [client 74.249.149.76:63478] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/drykl.php"] [unique_id "afuSCcxs8HOc_nWgOW60CQAAAdM"]
[Thu May 07 03:10:04.394786 2026] [:error] [pid 592:tid 611] [client 74.249.149.76:64740] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/drykl.php"] [unique_id "afuSDJiX28mb6xLi2PzSVgAAAo8"]
[Thu May 07 03:10:06.843788 2026] [:error] [pid 63810:tid 63826] [client 74.249.149.76:5702] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/drykl.php"] [unique_id "afuSDnpnbsN9Zf6i5IFa1QAAAYw"]
[Thu May 07 03:10:08.272050 2026] [:error] [pid 63810:tid 63819] [client 74.249.149.76:63477] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/drykl.php"] [unique_id "afuSEHpnbsN9Zf6i5IFa1wAAAYU"]
[Thu May 07 03:10:24.730696 2026] [proxy_fcgi:error] [pid 482:tid 494] [client 74.249.149.76:64645] AH01071: Got error 'Primary script unknown'
[Thu May 07 03:10:24.919481 2026] [:error] [pid 482:tid 496] [client 74.249.149.76:64645] [client 74.249.149.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/theme-compat/options.php"] [unique_id "afuSIMxs8HOc_nWgOW60GQAAAcw"]
[Thu May 07 03:10:30.096340 2026] [proxy_fcgi:error] [pid 9653:tid 9714] [client 74.249.149.76:63473] AH01071: Got error 'Primary script unknown'
[Thu May 07 03:10:30.343365 2026] [proxy_fcgi:error] [pid 9653:tid 9705] [client 74.249.149.76:63473] AH01071: Got error 'Primary script unknown'
[Thu May 07 03:10:30.535783 2026] [proxy_fcgi:error] [pid 9653:tid 9704] [client 74.249.149.76:63473] AH01071: Got error 'Primary script unknown'
[Thu May 07 03:10:30.727819 2026] [proxy_fcgi:error] [pid 9653:tid 9718] [client 74.249.149.76:63473] AH01071: Got error 'Primary script unknown'
[Thu May 07 03:10:30.919359 2026] [proxy_fcgi:error] [pid 9653:tid 9698] [client 74.249.149.76:63473] AH01071: Got error 'Primary script unknown'
[Thu May 07 03:10:31.115134 2026] [proxy_fcgi:error] [pid 9653:tid 9721] [client 74.249.149.76:63473] AH01071: Got error 'Primary script unknown'
[Thu May 07 03:10:31.306816 2026] [proxy_fcgi:error] [pid 9653:tid 9702] [client 74.249.149.76:63473] AH01071: Got error 'Primary script unknown'
[Thu May 07 03:10:31.498631 2026] [proxy_fcgi:error] [pid 9653:tid 9717] [client 74.249.149.76:63473] AH01071: Got error 'Primary script unknown'
[Thu May 07 03:10:31.691926 2026] [proxy_fcgi:error] [pid 9653:tid 9703] [client 74.249.149.76:63473] AH01071: Got error 'Primary script unknown'
[Thu May 07 03:10:31.883604 2026] [proxy_fcgi:error] [pid 9653:tid 9719] [client 74.249.149.76:63473] AH01071: Got error 'Primary script unknown'
[Thu May 07 03:10:32.080987 2026] [:error] [pid 9653:tid 9701] [client 74.249.149.76:63473] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xper1.php"] [unique_id "afuSKKhJ49Xc4dqq0B6M7QAAAAM"]
[Thu May 07 03:10:36.019900 2026] [:error] [pid 482:tid 501] [client 74.249.149.76:64719] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xper1.php"] [unique_id "afuSLMxs8HOc_nWgOW60IgAAAdE"]
[Thu May 07 03:10:38.239748 2026] [:error] [pid 9664:tid 9780] [client 74.249.149.76:63435] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xper1.php"] [unique_id "afuSLgH4OZbrg1SjsBOWRAAAAJI"]
[Thu May 07 03:10:53.966087 2026] [:error] [pid 592:tid 617] [client 74.249.149.76:54735] [client 74.249.149.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dwelectservices.com.au"] [uri "/tiny.php"] [unique_id "afuSPZiX28mb6xLi2PzSowAAApI"]
[Thu May 07 03:10:55.729266 2026] [:error] [pid 9664:tid 9767] [client 74.249.149.76:64751] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bthil.php"] [unique_id "afuSPwH4OZbrg1SjsBOWXAAAAIU"]
[Thu May 07 03:10:57.655860 2026] [:error] [pid 13414:tid 13417] [client 74.249.149.76:64643] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bthil.php"] [unique_id "afuSQUuJQpWjVpJTu_lJqAAAAQE"]
[Thu May 07 03:10:59.131029 2026] [:error] [pid 13414:tid 13428] [client 74.249.149.76:63443] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bthil.php"] [unique_id "afuSQ0uJQpWjVpJTu_lJqQAAAQw"]
[Thu May 07 03:11:01.848058 2026] [:error] [pid 13414:tid 13439] [client 74.249.149.76:64712] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bthil.php"] [unique_id "afuSRUuJQpWjVpJTu_lJqgAAARc"]
[Thu May 07 03:11:04.394328 2026] [:error] [pid 63810:tid 63826] [client 74.249.149.76:5755] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/s1.php"] [unique_id "afuSSHpnbsN9Zf6i5IFa3gAAAYw"]
[Thu May 07 03:11:05.416495 2026] [:error] [pid 592:tid 603] [client 74.249.149.76:54775] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/s1.php"] [unique_id "afuSSZiX28mb6xLi2PzSqAAAAoc"]
[Thu May 07 03:11:07.803880 2026] [:error] [pid 13414:tid 13436] [client 74.249.149.76:5733] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/s1.php"] [unique_id "afuSS0uJQpWjVpJTu_lJrQAAARQ"]
[Thu May 07 03:11:14.098241 2026] [:error] [pid 592:tid 617] [client 74.249.149.76:5730] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/s1.php"] [unique_id "afuSUpiX28mb6xLi2PzSrAAAApI"]
[Thu May 07 03:11:16.035903 2026] [:error] [pid 592:tid 600] [client 74.249.149.76:64749] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/de.php"] [unique_id "afuSVJiX28mb6xLi2PzSrgAAAoQ"]
[Thu May 07 03:11:22.184106 2026] [:error] [pid 9653:tid 9705] [client 74.249.149.76:64713] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/de.php"] [unique_id "afuSWqhJ49Xc4dqq0B6NFgAAAAc"]
[Thu May 07 03:11:29.281224 2026] [:error] [pid 13414:tid 13440] [client 74.249.149.76:5717] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/de.php"] [unique_id "afuSYUuJQpWjVpJTu_lJtgAAARg"]
[Thu May 07 03:11:30.056714 2026] [:error] [pid 482:tid 495] [client 74.249.149.76:63449] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/axe.php"] [unique_id "afuSYsxs8HOc_nWgOW60XAAAAcs"]
[Thu May 07 03:11:39.263703 2026] [proxy_fcgi:error] [pid 482:tid 510] [client 74.249.149.76:5707] AH01071: Got error 'Primary script unknown'
[Thu May 07 03:11:39.482888 2026] [proxy_fcgi:error] [pid 482:tid 508] [client 74.249.149.76:5707] AH01071: Got error 'Primary script unknown'
[Thu May 07 03:11:39.686011 2026] [proxy_fcgi:error] [pid 482:tid 493] [client 74.249.149.76:5707] AH01071: Got error 'Primary script unknown'
[Thu May 07 03:11:39.876973 2026] [proxy_fcgi:error] [pid 482:tid 503] [client 74.249.149.76:5707] AH01071: Got error 'Primary script unknown'
[Thu May 07 03:11:40.348056 2026] [proxy_fcgi:error] [pid 482:tid 497] [client 74.249.149.76:5707] AH01071: Got error 'Primary script unknown'
[Thu May 07 03:11:40.548056 2026] [proxy_fcgi:error] [pid 482:tid 504] [client 74.249.149.76:5707] AH01071: Got error 'Primary script unknown'
[Thu May 07 03:11:40.739526 2026] [proxy_fcgi:error] [pid 482:tid 499] [client 74.249.149.76:5707] AH01071: Got error 'Primary script unknown'
[Thu May 07 03:11:40.930901 2026] [proxy_fcgi:error] [pid 482:tid 495] [client 74.249.149.76:5707] AH01071: Got error 'Primary script unknown'
[Thu May 07 03:11:41.125606 2026] [proxy_fcgi:error] [pid 482:tid 491] [client 74.249.149.76:5707] AH01071: Got error 'Primary script unknown'
[Thu May 07 03:11:41.318135 2026] [:error] [pid 482:tid 500] [client 74.249.149.76:5707] [client 74.249.149.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/theme-compat/wp-login.php"] [unique_id "afuSbcxs8HOc_nWgOW60dAAAAdA"]
[Thu May 07 03:11:42.526441 2026] [proxy_fcgi:error] [pid 9653:tid 9705] [client 74.249.149.76:63434] AH01071: Got error 'Primary script unknown'
[Thu May 07 03:11:42.718746 2026] [proxy_fcgi:error] [pid 9653:tid 9702] [client 74.249.149.76:63434] AH01071: Got error 'Primary script unknown'
[Thu May 07 03:11:42.906720 2026] [:error] [pid 9653:tid 9720] [client 74.249.149.76:63434] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Sanskrit.php"] [unique_id "afuSbqhJ49Xc4dqq0B6NSQAAABY"]
[Thu May 07 03:11:45.957095 2026] [:error] [pid 13414:tid 13437] [client 74.249.149.76:5704] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Sanskrit.php"] [unique_id "afuScUuJQpWjVpJTu_lJwQAAARU"]
[Thu May 07 03:11:47.536460 2026] [:error] [pid 9789:tid 9799] [client 74.249.149.76:64744] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Sanskrit.php"] [unique_id "afuScz_YStPJSCHPkUXkVAAAAEg"]
[Thu May 07 03:11:52.023879 2026] [:error] [pid 13443:tid 13464] [client 74.249.149.76:5728] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Sanskrit.php"] [unique_id "afuSeACyfZallDmsQre9uwAAAVM"]
[Thu May 07 03:11:58.774542 2026] [:error] [pid 9664:tid 9782] [client 74.249.149.76:54739] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/test1.php"] [unique_id "afuSfgH4OZbrg1SjsBOWdwAAAJQ"]
[Thu May 07 03:12:01.706630 2026] [:error] [pid 9664:tid 9776] [client 74.249.149.76:54666] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/test1.php"] [unique_id "afuSgQH4OZbrg1SjsBOWgQAAAI4"]
[Thu May 07 03:12:09.010794 2026] [:error] [pid 557:tid 571] [client 74.249.149.76:5758] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ms-edit.php"] [unique_id "afuSiTZjFR8Vd8ce80BIMQAAAkw"]
[Thu May 07 03:12:10.458523 2026] [:error] [pid 9659:tid 9753] [client 74.249.149.76:64717] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ms-edit.php"] [unique_id "afuSivwJnWjd8JHpBtvFEgAAANM"]
[Thu May 07 03:12:12.114195 2026] [:error] [pid 557:tid 564] [client 74.249.149.76:64756] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ms-edit.php"] [unique_id "afuSjDZjFR8Vd8ce80BINgAAAkU"]
[Thu May 07 03:12:17.422115 2026] [:error] [pid 482:tid 501] [client 74.249.149.76:64743] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ms-edit.php"] [unique_id "afuSkcxs8HOc_nWgOW60eQAAAdE"]
[Thu May 07 03:12:22.840667 2026] [:error] [pid 9653:tid 9714] [client 74.249.149.76:5756] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dass.php"] [unique_id "afuSlqhJ49Xc4dqq0B6NZQAAABA"]
[Thu May 07 03:12:26.526617 2026] [:error] [pid 9659:tid 9747] [client 74.249.149.76:64705] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dass.php"] [unique_id "afuSmvwJnWjd8JHpBtvFEwAAAM0"]
[Thu May 07 03:12:27.554139 2026] [:error] [pid 13414:tid 13435] [client 74.249.149.76:63437] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dass.php"] [unique_id "afuSm0uJQpWjVpJTu_lJ0wAAARM"]
[Thu May 07 03:12:29.249529 2026] [:error] [pid 63810:tid 63838] [client 74.249.149.76:5723] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dass.php"] [unique_id "afuSnXpnbsN9Zf6i5IFa_AAAAZg"]
[Thu May 07 03:12:30.354547 2026] [:error] [pid 482:tid 490] [client 74.249.149.76:54684] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/7.php"] [unique_id "afuSnsxs8HOc_nWgOW60gQAAAcY"]
[Thu May 07 03:12:31.892500 2026] [:error] [pid 592:tid 608] [client 74.249.149.76:64737] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/7.php"] [unique_id "afuSn5iX28mb6xLi2PzTCgAAAow"]
[Thu May 07 03:12:34.829048 2026] [:error] [pid 9653:tid 9720] [client 74.249.149.76:5725] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/7.php"] [unique_id "afuSoqhJ49Xc4dqq0B6NbgAAABY"]
[Thu May 07 03:12:35.651522 2026] [:error] [pid 9653:tid 9708] [client 74.249.149.76:63461] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/7.php"] [unique_id "afuSo6hJ49Xc4dqq0B6NcwAAAAo"]
[Thu May 07 03:12:36.853726 2026] [:error] [pid 9653:tid 9698] [client 74.249.149.76:54773] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cu.php"] [unique_id "afuSpKhJ49Xc4dqq0B6NdgAAAAA"]
[Thu May 07 03:12:38.611954 2026] [:error] [pid 9653:tid 9707] [client 74.249.149.76:63445] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cu.php"] [unique_id "afuSpqhJ49Xc4dqq0B6NeQAAAAk"]
[Thu May 07 03:12:40.952638 2026] [:error] [pid 9664:tid 9766] [client 74.249.149.76:5746] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cu.php"] [unique_id "afuSqAH4OZbrg1SjsBOWlQAAAIQ"]
[Thu May 07 03:12:41.715747 2026] [:error] [pid 9789:tid 9795] [client 74.249.149.76:54759] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cu.php"] [unique_id "afuSqT_YStPJSCHPkUXkgAAAAEQ"]
[Thu May 07 03:12:43.536338 2026] [proxy_fcgi:error] [pid 9789:tid 9811] [client 74.249.149.76:63475] AH01071: Got error 'Primary script unknown'
[Thu May 07 03:12:43.730056 2026] [proxy_fcgi:error] [pid 9789:tid 9808] [client 74.249.149.76:63475] AH01071: Got error 'Primary script unknown'
[Thu May 07 03:12:44.017008 2026] [proxy_fcgi:error] [pid 9789:tid 9812] [client 74.249.149.76:63475] AH01071: Got error 'Primary script unknown'
[Thu May 07 03:12:44.210741 2026] [proxy_fcgi:error] [pid 9789:tid 9793] [client 74.249.149.76:63475] AH01071: Got error 'Primary script unknown'
[Thu May 07 03:12:44.721841 2026] [proxy_fcgi:error] [pid 9789:tid 9800] [client 74.249.149.76:63475] AH01071: Got error 'Primary script unknown'
[Thu May 07 03:12:45.091313 2026] [proxy_fcgi:error] [pid 9789:tid 9798] [client 74.249.149.76:63475] AH01071: Got error 'Primary script unknown'
[Thu May 07 03:12:45.501331 2026] [proxy_fcgi:error] [pid 9789:tid 9797] [client 74.249.149.76:63475] AH01071: Got error 'Primary script unknown'
[Thu May 07 03:12:45.692625 2026] [proxy_fcgi:error] [pid 9789:tid 9803] [client 74.249.149.76:63475] AH01071: Got error 'Primary script unknown'
[Thu May 07 03:12:45.988699 2026] [proxy_fcgi:error] [pid 9789:tid 9796] [client 74.249.149.76:63475] AH01071: Got error 'Primary script unknown'
[Thu May 07 03:12:46.204888 2026] [proxy_fcgi:error] [pid 9789:tid 9809] [client 74.249.149.76:63475] AH01071: Got error 'Primary script unknown'
[Thu May 07 03:12:46.457700 2026] [proxy_fcgi:error] [pid 9789:tid 9814] [client 74.249.149.76:63475] AH01071: Got error 'Primary script unknown'
[Thu May 07 03:12:46.646192 2026] [:error] [pid 9789:tid 9806] [client 74.249.149.76:63475] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zdd.php"] [unique_id "afuSrj_YStPJSCHPkUXkkgAAAE8"]
[Thu May 07 03:12:48.552985 2026] [:error] [pid 9789:tid 9815] [client 74.249.149.76:54736] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zdd.php"] [unique_id "afuSsD_YStPJSCHPkUXklAAAAFg"]
[Thu May 07 03:12:49.490947 2026] [:error] [pid 9664:tid 9762] [client 74.249.149.76:5713] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zdd.php"] [unique_id "afuSsQH4OZbrg1SjsBOWmAAAAIA"]
[Thu May 07 03:12:52.554413 2026] [:error] [pid 13414:tid 13417] [client 74.249.149.76:54756] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zdd.php"] [unique_id "afuStEuJQpWjVpJTu_lJ3AAAAQE"]
[Thu May 07 03:12:54.985897 2026] [:error] [pid 9789:tid 9807] [client 74.249.149.76:44930] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/link.php"] [unique_id "afuStj_YStPJSCHPkUXkmQAAAFA"]
[Thu May 07 03:12:55.878441 2026] [:error] [pid 482:tid 484] [client 74.249.149.76:64742] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/link.php"] [unique_id "afuSt8xs8HOc_nWgOW60lwAAAcA"]
[Thu May 07 03:13:00.747456 2026] [:error] [pid 9653:tid 9721] [client 74.249.149.76:64678] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/link.php"] [unique_id "afuSvKhJ49Xc4dqq0B6NhAAAABc"]
[Thu May 07 03:13:05.480081 2026] [:error] [pid 9664:tid 9770] [client 74.249.149.76:63468] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/link.php"] [unique_id "afuSwQH4OZbrg1SjsBOWnwAAAIg"]
[Thu May 07 03:13:07.765431 2026] [:error] [pid 13414:tid 13438] [client 74.249.149.76:64722] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sallu.php"] [unique_id "afuSw0uJQpWjVpJTu_lJ6AAAARY"]
[Thu May 07 03:13:15.452337 2026] [:error] [pid 557:tid 580] [client 74.249.149.76:64640] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sallu.php"] [unique_id "afuSyzZjFR8Vd8ce80BIUQAAAlU"]
[Thu May 07 03:13:19.195690 2026] [:error] [pid 13414:tid 13432] [client 74.249.149.76:54762] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sallu.php"] [unique_id "afuSz0uJQpWjVpJTu_lJ7AAAARA"]
[Thu May 07 03:13:21.270420 2026] [:error] [pid 9789:tid 9798] [client 74.249.149.76:5743] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aboute.php"] [unique_id "afuS0T_YStPJSCHPkUXkrAAAAEc"]
[Thu May 07 03:13:23.926292 2026] [:error] [pid 482:tid 485] [client 74.249.149.76:5727] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aboute.php"] [unique_id "afuS08xs8HOc_nWgOW60rQAAAcE"]
[Thu May 07 03:13:27.094872 2026] [:error] [pid 9659:tid 9734] [client 74.249.149.76:5752] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aboute.php"] [unique_id "afuS1_wJnWjd8JHpBtvFKwAAAMA"]
[Thu May 07 03:13:38.032037 2026] [:error] [pid 482:tid 494] [client 74.249.149.76:64656] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ayk.php"] [unique_id "afuS4sxs8HOc_nWgOW60vQAAAco"]
[Thu May 07 03:13:42.095746 2026] [:error] [pid 63810:tid 63828] [client 74.249.149.76:54755] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ayk.php"] [unique_id "afuS5npnbsN9Zf6i5IFbGgAAAY4"]
[Thu May 07 03:13:44.011339 2026] [:error] [pid 13414:tid 13424] [client 74.249.149.76:64760] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ayk.php"] [unique_id "afuS6EuJQpWjVpJTu_lJ-wAAAQg"]
[Thu May 07 03:13:50.759666 2026] [proxy_fcgi:error] [pid 13414:tid 13418] [client 74.249.149.76:5738] AH01071: Got error 'Primary script unknown'
[Thu May 07 03:13:50.951084 2026] [proxy_fcgi:error] [pid 13414:tid 13434] [client 74.249.149.76:5738] AH01071: Got error 'Primary script unknown'
[Thu May 07 03:13:51.157390 2026] [proxy_fcgi:error] [pid 13414:tid 13437] [client 74.249.149.76:5738] AH01071: Got error 'Primary script unknown'
[Thu May 07 03:13:51.358596 2026] [proxy_fcgi:error] [pid 13414:tid 13417] [client 74.249.149.76:5738] AH01071: Got error 'Primary script unknown'
[Thu May 07 03:13:51.561700 2026] [proxy_fcgi:error] [pid 13414:tid 13425] [client 74.249.149.76:5738] AH01071: Got error 'Primary script unknown'
[Thu May 07 03:13:51.759088 2026] [proxy_fcgi:error] [pid 13414:tid 13428] [client 74.249.149.76:5738] AH01071: Got error 'Primary script unknown'
[Thu May 07 03:13:51.963369 2026] [proxy_fcgi:error] [pid 13414:tid 13438] [client 74.249.149.76:5738] AH01071: Got error 'Primary script unknown'
[Thu May 07 03:13:52.166651 2026] [proxy_fcgi:error] [pid 13414:tid 13436] [client 74.249.149.76:5738] AH01071: Got error 'Primary script unknown'
[Thu May 07 03:13:52.378397 2026] [proxy_fcgi:error] [pid 13414:tid 13424] [client 74.249.149.76:5738] AH01071: Got error 'Primary script unknown'
[Thu May 07 03:13:52.569882 2026] [proxy_fcgi:error] [pid 13414:tid 13430] [client 74.249.149.76:5738] AH01071: Got error 'Primary script unknown'
[Thu May 07 03:13:52.760740 2026] [proxy_fcgi:error] [pid 13414:tid 13439] [client 74.249.149.76:5738] AH01071: Got error 'Primary script unknown'
[Thu May 07 03:13:53.069851 2026] [:error] [pid 13414:tid 13416] [client 74.249.149.76:5738] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tramuibs.php"] [unique_id "afuS8UuJQpWjVpJTu_lKDQAAAQA"]
[Thu May 07 03:13:54.447794 2026] [:error] [pid 9653:tid 9704] [client 74.249.149.76:5759] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tramuibs.php"] [unique_id "afuS8qhJ49Xc4dqq0B6N7QAAAAY"]
[Thu May 07 03:13:58.161011 2026] [:error] [pid 9653:tid 9717] [client 74.249.149.76:63456] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tramuibs.php"] [unique_id "afuS9qhJ49Xc4dqq0B6N8QAAABM"]
[Thu May 07 03:14:21.985162 2026] [:error] [pid 13414:tid 13440] [client 74.249.149.76:63466] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/view.php"] [unique_id "afuTDUuJQpWjVpJTu_lKEgAAARg"]
[Thu May 07 03:14:25.626793 2026] [:error] [pid 592:tid 607] [client 74.249.149.76:54762] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/view.php"] [unique_id "afuTEZiX28mb6xLi2PzTJgAAAos"]
[Thu May 07 03:14:28.396030 2026] [:error] [pid 13414:tid 13430] [client 74.249.149.76:54750] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aa.php"] [unique_id "afuTFEuJQpWjVpJTu_lKFgAAAQ4"]
[Thu May 07 03:14:32.025888 2026] [:error] [pid 13414:tid 13426] [client 74.249.149.76:54753] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aa.php"] [unique_id "afuTGEuJQpWjVpJTu_lKGQAAAQo"]
[Thu May 07 03:14:35.013299 2026] [:error] [pid 9789:tid 9803] [client 74.249.149.76:63479] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aa.php"] [unique_id "afuTGz_YStPJSCHPkUXk2QAAAEw"]
[Thu May 07 03:14:42.945912 2026] [:error] [pid 9664:tid 9762] [client 74.249.149.76:63446] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x402.php"] [unique_id "afuTIgH4OZbrg1SjsBOW7wAAAIA"]
[Thu May 07 03:14:44.113232 2026] [:error] [pid 482:tid 486] [client 74.249.149.76:54673] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x402.php"] [unique_id "afuTJMxs8HOc_nWgOW61HgAAAcI"]
[Thu May 07 03:14:50.145644 2026] [:error] [pid 9664:tid 9770] [client 74.249.149.76:64725] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x402.php"] [unique_id "afuTKgH4OZbrg1SjsBOXBQAAAIg"]
[Thu May 07 03:14:51.235651 2026] [:error] [pid 9789:tid 9793] [client 74.249.149.76:64745] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x402.php"] [unique_id "afuTKz_YStPJSCHPkUXk3QAAAEI"]
[Thu May 07 03:14:54.342032 2026] [proxy_fcgi:error] [pid 9664:tid 9776] [client 74.249.149.76:5722] AH01071: Got error 'Primary script unknown'
[Thu May 07 03:14:54.559010 2026] [proxy_fcgi:error] [pid 9664:tid 9771] [client 74.249.149.76:5722] AH01071: Got error 'Primary script unknown'
[Thu May 07 03:14:54.753709 2026] [proxy_fcgi:error] [pid 9664:tid 9773] [client 74.249.149.76:5722] AH01071: Got error 'Primary script unknown'
[Thu May 07 03:14:54.944473 2026] [proxy_fcgi:error] [pid 9664:tid 9770] [client 74.249.149.76:5722] AH01071: Got error 'Primary script unknown'
[Thu May 07 03:14:55.141716 2026] [proxy_fcgi:error] [pid 9664:tid 9777] [client 74.249.149.76:5722] AH01071: Got error 'Primary script unknown'
[Thu May 07 03:14:55.332627 2026] [proxy_fcgi:error] [pid 9664:tid 9782] [client 74.249.149.76:5722] AH01071: Got error 'Primary script unknown'
[Thu May 07 03:14:55.546281 2026] [proxy_fcgi:error] [pid 9664:tid 9766] [client 74.249.149.76:5722] AH01071: Got error 'Primary script unknown'
[Thu May 07 03:14:55.736845 2026] [proxy_fcgi:error] [pid 9664:tid 9778] [client 74.249.149.76:5722] AH01071: Got error 'Primary script unknown'
[Thu May 07 03:14:56.013647 2026] [proxy_fcgi:error] [pid 9664:tid 9779] [client 74.249.149.76:5722] AH01071: Got error 'Primary script unknown'
[Thu May 07 03:14:56.204869 2026] [proxy_fcgi:error] [pid 9664:tid 9774] [client 74.249.149.76:5722] AH01071: Got error 'Primary script unknown'
[Thu May 07 03:14:56.413116 2026] [proxy_fcgi:error] [pid 9664:tid 9780] [client 74.249.149.76:5722] AH01071: Got error 'Primary script unknown'
[Thu May 07 03:14:56.600565 2026] [:error] [pid 9664:tid 9765] [client 74.249.149.76:5722] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/layout.php"] [unique_id "afuTMAH4OZbrg1SjsBOXFAAAAIM"]
[Thu May 07 03:15:00.780810 2026] [:error] [pid 9789:tid 9793] [client 74.249.149.76:63464] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/layout.php"] [unique_id "afuTND_YStPJSCHPkUXk5QAAAEI"]
[Thu May 07 03:15:02.513762 2026] [:error] [pid 482:tid 495] [client 74.249.149.76:64672] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/layout.php"] [unique_id "afuTNsxs8HOc_nWgOW61OwAAAcs"]
[Thu May 07 03:15:03.569278 2026] [:error] [pid 13443:tid 13446] [client 74.249.149.76:5749] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/layout.php"] [unique_id "afuTNwCyfZallDmsQre96AAAAUE"]
[Thu May 07 03:15:05.354520 2026] [:error] [pid 9664:tid 9776] [client 74.249.149.76:64758] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/12.php"] [unique_id "afuTOQH4OZbrg1SjsBOXLAAAAI4"]
[Thu May 07 03:15:06.986204 2026] [:error] [pid 9664:tid 9767] [client 74.249.149.76:64724] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/12.php"] [unique_id "afuTOgH4OZbrg1SjsBOXOgAAAIU"]
[Thu May 07 03:15:08.265207 2026] [:error] [pid 9664:tid 9786] [client 74.249.149.76:54733] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/12.php"] [unique_id "afuTPAH4OZbrg1SjsBOXOwAAAJg"]
[Thu May 07 03:15:22.166728 2026] [:error] [pid 9664:tid 9786] [client 74.249.149.76:64762] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fs.php"] [unique_id "afuTSgH4OZbrg1SjsBOXVgAAAJg"]
[Thu May 07 03:15:23.406716 2026] [:error] [pid 9789:tid 9792] [client 74.249.149.76:63481] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fs.php"] [unique_id "afuTSz_YStPJSCHPkUXlDAAAAEE"]
[Thu May 07 03:15:30.817743 2026] [:error] [pid 557:tid 563] [client 74.249.149.76:5710] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fs.php"] [unique_id "afuTUjZjFR8Vd8ce80BIigAAAkQ"]
[Thu May 07 03:15:32.394620 2026] [:error] [pid 13414:tid 13421] [client 74.249.149.76:5747] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fs.php"] [unique_id "afuTVEuJQpWjVpJTu_lKSgAAAQU"]
[Thu May 07 03:15:35.892858 2026] [:error] [pid 9664:tid 9768] [client 74.249.149.76:64766] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/insta.php"] [unique_id "afuTVwH4OZbrg1SjsBOXbgAAAIY"]
[Thu May 07 03:15:40.519300 2026] [:error] [pid 9659:tid 9734] [client 74.249.149.76:54664] [client 74.249.149.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/insta.php"] [unique_id "afuTXPwJnWjd8JHpBtvFmQAAAMA"]
[Thu May 07 03:15:57.372412 2026] [proxy_fcgi:error] [pid 557:tid 579] [client 74.249.149.76:63435] AH01071: Got error 'Primary script unknown'
[Thu May 07 03:15:57.568958 2026] [proxy_fcgi:error] [pid 557:tid 577] [client 74.249.149.76:63435] AH01071: Got error 'Primary script unknown'
[Thu May 07 03:15:57.787045 2026] [proxy_fcgi:error] [pid 557:tid 583] [client 74.249.149.76:63435] AH01071: Got error 'Primary script unknown'
[Thu May 07 03:15:57.977105 2026] [proxy_fcgi:error] [pid 557:tid 560] [client 74.249.149.76:63435] AH01071: Got error 'Primary script unknown'
[Thu May 07 05:21:33.122315 2026] [:error] [pid 29606:tid 29650] [client 172.202.74.222:7153] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "afuw3RR5HjZ1PlSAiKteOwAAAEk"]
[Thu May 07 05:21:33.501820 2026] [:error] [pid 29710:tid 29731] [client 172.202.74.222:7137] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "afuw3f0atTQld9Y2ht_V9AAAANM"]
[Thu May 07 05:21:33.888220 2026] [:error] [pid 4539:tid 4546] [client 172.202.74.222:7048] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "afuw3YPEZE1565sDGnwY0AAAAQU"]
[Thu May 07 05:21:34.259913 2026] [:error] [pid 29605:tid 29625] [client 172.202.74.222:7151] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "afuw3onxrTjETioEY0TbaAAAAAs"]
[Thu May 07 09:20:13.078947 2026] [proxy_fcgi:error] [pid 56066:tid 56145] [client 172.202.28.4:1039] AH01071: Got error 'Primary script unknown'
[Thu May 07 09:20:13.272174 2026] [proxy_fcgi:error] [pid 56066:tid 56146] [client 172.202.28.4:1039] AH01071: Got error 'Primary script unknown'
[Thu May 07 09:20:13.465621 2026] [proxy_fcgi:error] [pid 56066:tid 56127] [client 172.202.28.4:1039] AH01071: Got error 'Primary script unknown'
[Thu May 07 09:20:13.660835 2026] [proxy_fcgi:error] [pid 56066:tid 56131] [client 172.202.28.4:1039] AH01071: Got error 'Primary script unknown'
[Thu May 07 09:20:13.853667 2026] [proxy_fcgi:error] [pid 56066:tid 56147] [client 172.202.28.4:1039] AH01071: Got error 'Primary script unknown'
[Thu May 07 09:20:14.067277 2026] [proxy_fcgi:error] [pid 56066:tid 56140] [client 172.202.28.4:1039] AH01071: Got error 'Primary script unknown'
[Thu May 07 09:20:14.454059 2026] [proxy_fcgi:error] [pid 56066:tid 56125] [client 172.202.28.4:1039] AH01071: Got error 'Primary script unknown'
[Thu May 07 09:20:14.647736 2026] [proxy_fcgi:error] [pid 56066:tid 56133] [client 172.202.28.4:1039] AH01071: Got error 'Primary script unknown'
[Thu May 07 09:20:14.841596 2026] [proxy_fcgi:error] [pid 56066:tid 56124] [client 172.202.28.4:1039] AH01071: Got error 'Primary script unknown'
[Thu May 07 09:20:15.034099 2026] [proxy_fcgi:error] [pid 56066:tid 56128] [client 172.202.28.4:1039] AH01071: Got error 'Primary script unknown'
[Thu May 07 09:20:15.222836 2026] [:error] [pid 56066:tid 56142] [client 172.202.28.4:1039] [client 172.202.28.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/info.php"] [unique_id "afvoz0YS8DGwDvklLv6GJAAAANM"]
[Thu May 07 09:20:16.011483 2026] [:error] [pid 1143:tid 1167] [client 172.202.28.4:11421] [client 172.202.28.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/info.php"] [unique_id "afvo0Jb7qeI8X5VYRr4fEgAAARY"]
[Thu May 07 09:20:16.807759 2026] [:error] [pid 56150:tid 56174] [client 172.202.28.4:11440] [client 172.202.28.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/info.php"] [unique_id "afvo0Nu4duXJJeTigXT56wAAAFY"]
[Thu May 07 09:20:17.592934 2026] [:error] [pid 56065:tid 56102] [client 172.202.28.4:11416] [client 172.202.28.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/info.php"] [unique_id "afvo0XdV4hYThdnhfxC4YgAAAIY"]
[Thu May 07 14:25:22.553370 2026] [:error] [pid 15631:tid 15689] [client 34.21.117.124:49812] [client 34.21.117.124] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.21.117.124, incrementing ddos counter"] [hostname "dwelectservices.com.au"] [uri "/xmlrpc.php"] [unique_id "afwwUnvP1GkPUuuLfqX4UAAAAMI"]
[Thu May 07 14:25:22.563782 2026] [proxy_fcgi:error] [pid 15631:tid 15689] [client 34.21.117.124:49812] AH01071: Got error 'Primary script unknown'
[Thu May 07 14:25:25.275384 2026] [:error] [pid 15631:tid 15693] [client 34.21.117.124:49812] [client 34.21.117.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "afwwVXvP1GkPUuuLfqX4YAAAAMY"]
[Thu May 07 14:25:26.043555 2026] [:error] [pid 15630:tid 15669] [client 34.21.117.124:60202] [client 34.21.117.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "afwwVnTithRAi4821quAPQAAAIk"]
[Thu May 07 14:25:26.782962 2026] [:error] [pid 15631:tid 15700] [client 34.21.117.124:50538] [client 34.21.117.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "afwwVnvP1GkPUuuLfqX4ZQAAAM0"]
[Thu May 07 14:25:27.549968 2026] [:error] [pid 15715:tid 15736] [client 34.21.117.124:52010] [client 34.21.117.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "afwwVyY4dZsLOttMkcdA5QAAARA"]
[Thu May 07 14:25:29.049815 2026] [:error] [pid 15631:tid 15696] [client 34.21.117.124:56572] [client 34.21.117.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "afwwWXvP1GkPUuuLfqX4bAAAAMk"]
[Thu May 07 14:25:31.173152 2026] [:error] [pid 15631:tid 15693] [client 34.21.117.124:55739] [client 34.21.117.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "afwwW3vP1GkPUuuLfqX4cwAAAMY"]
[Thu May 07 14:25:32.426341 2026] [:error] [pid 15629:tid 15640] [client 34.21.117.124:61037] [client 34.21.117.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "afwwXPrIJCALdUrO43lKpAAAAAc"]
[Thu May 07 15:14:57.429196 2026] [:error] [pid 28098:tid 28104] [client 172.202.28.4:1436] [client 172.202.28.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/alfa.php"] [unique_id "afw78cvhwfljlt8trSqEvgAAAEQ"]
[Thu May 07 15:14:58.220776 2026] [:error] [pid 15630:tid 15683] [client 172.202.28.4:11402] [client 172.202.28.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/alfa.php"] [unique_id "afw78nTithRAi4821quNpgAAAJc"]
[Thu May 07 15:14:59.099386 2026] [:error] [pid 15629:tid 15654] [client 172.202.28.4:11401] [client 172.202.28.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/alfa.php"] [unique_id "afw78_rIJCALdUrO43lWBAAAABU"]
[Thu May 07 15:14:59.993161 2026] [:error] [pid 15629:tid 15645] [client 172.202.28.4:1024] [client 172.202.28.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/alfa.php"] [unique_id "afw78_rIJCALdUrO43lWBgAAAAw"]
[Thu May 07 17:56:04.388384 2026] [:error] [pid 15631:tid 15710] [client 34.182.179.139:52459] [client 34.182.179.139] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.182.179.139, incrementing ddos counter"] [hostname "dwelectservices.com.au"] [uri "/xmlrpc.php"] [unique_id "afxhtHvP1GkPUuuLfqUnRgAAANc"]
[Thu May 07 17:56:04.399951 2026] [proxy_fcgi:error] [pid 15631:tid 15710] [client 34.182.179.139:52459] AH01071: Got error 'Primary script unknown'
[Thu May 07 17:56:06.817074 2026] [:error] [pid 15631:tid 15687] [client 34.182.179.139:52459] [client 34.182.179.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "afxhtnvP1GkPUuuLfqUnUQAAAMA"]
[Thu May 07 17:56:07.248288 2026] [:error] [pid 28098:tid 28113] [client 34.182.179.139:53688] [client 34.182.179.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "afxht8vhwfljlt8trSrADgAAAE0"]
[Thu May 07 17:56:07.678715 2026] [:error] [pid 28098:tid 28107] [client 34.182.179.139:53813] [client 34.182.179.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "afxht8vhwfljlt8trSrAEAAAAEc"]
[Thu May 07 17:56:08.109890 2026] [:error] [pid 15630:tid 15668] [client 34.182.179.139:54020] [client 34.182.179.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "afxhuHTithRAi4821qujMgAAAIg"]
[Thu May 07 17:56:08.539554 2026] [:error] [pid 15629:tid 15652] [client 34.182.179.139:54176] [client 34.182.179.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "afxhuPrIJCALdUrO43lqBQAAABM"]
[Thu May 07 17:56:08.969235 2026] [:error] [pid 28098:tid 28106] [client 34.182.179.139:54347] [client 34.182.179.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "afxhuMvhwfljlt8trSrAFgAAAEY"]
[Thu May 07 17:56:09.410324 2026] [:error] [pid 28098:tid 28105] [client 34.182.179.139:54547] [client 34.182.179.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "afxhucvhwfljlt8trSrAGQAAAEU"]
[Thu May 07 18:03:24.806174 2026] [:error] [pid 28098:tid 28112] [client 34.86.88.108:64023] [client 34.86.88.108] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.86.88.108, incrementing ddos counter"] [hostname "dwelectservices.com.au"] [uri "/xmlrpc.php"] [unique_id "afxjbMvhwfljlt8trSrDsgAAAEw"]
[Thu May 07 18:03:24.817582 2026] [proxy_fcgi:error] [pid 28098:tid 28112] [client 34.86.88.108:64023] AH01071: Got error 'Primary script unknown'
[Thu May 07 18:03:28.516183 2026] [:error] [pid 28098:tid 28106] [client 34.86.88.108:64023] [client 34.86.88.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "afxjcMvhwfljlt8trSrDwQAAAEY"]
[Thu May 07 18:03:29.967379 2026] [:error] [pid 15630:tid 15675] [client 34.86.88.108:63529] [client 34.86.88.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "afxjcXTithRAi4821qukjgAAAI8"]
[Thu May 07 18:03:31.237518 2026] [:error] [pid 28098:tid 28115] [client 34.86.88.108:65168] [client 34.86.88.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "afxjc8vhwfljlt8trSrDygAAAE8"]
[Thu May 07 18:03:32.619908 2026] [:error] [pid 15715:tid 15721] [client 34.86.88.108:49182] [client 34.86.88.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "afxjdCY4dZsLOttMkceEwwAAAQQ"]
[Thu May 07 18:03:33.657511 2026] [:error] [pid 15715:tid 15740] [client 34.86.88.108:56144] [client 34.86.88.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "afxjdSY4dZsLOttMkceExQAAARQ"]
[Thu May 07 18:03:34.430624 2026] [:error] [pid 15630:tid 15678] [client 34.86.88.108:61967] [client 34.86.88.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "afxjdnTithRAi4821qukkAAAAJI"]
[Thu May 07 18:03:35.526106 2026] [:error] [pid 15630:tid 15661] [client 34.86.88.108:61466] [client 34.86.88.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "afxjd3TithRAi4821qukkgAAAIE"]
[Fri May 08 03:37:36.752583 2026] [:error] [pid 51009:tid 51096] [client 34.176.79.26:52054] [client 34.176.79.26] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dwelectservices.com.au"] [uri "/.git/config"] [unique_id "afzqAOB0GbUWhxgzX9Vz2wAAAJQ"]
[Fri May 08 05:17:15.291479 2026] [:error] [pid 51009:tid 51097] [client 35.228.65.144:44606] [client 35.228.65.144] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.git/config"] [unique_id "af0BW-B0GbUWhxgzX9WS-QAAAJU"]
[Fri May 08 15:28:56.768185 2026] [:error] [pid 61317:tid 61320] [client 34.122.144.100:62603] [client 34.122.144.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "af2QuM-fFk_CedOCOYuULQAAAUA"]
[Fri May 08 22:29:19.127309 2026] [:error] [pid 61356:tid 61410] [client 34.170.244.215:55581] [client 34.170.244.215] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.170.244.215, incrementing ddos counter"] [hostname "dwelectservices.com.au"] [uri "/xmlrpc.php"] [unique_id "af3zP4x3vpB8oWhUq2PijQAAAdY"]
[Fri May 08 22:29:19.137668 2026] [proxy_fcgi:error] [pid 61356:tid 61410] [client 34.170.244.215:55581] AH01071: Got error 'Primary script unknown'
[Fri May 08 22:29:22.048345 2026] [:error] [pid 61356:tid 61388] [client 34.170.244.215:55581] [client 34.170.244.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "af3zQox3vpB8oWhUq2PinwAAAcA"]
[Fri May 08 22:29:22.457164 2026] [:error] [pid 51009:tid 51079] [client 34.170.244.215:53012] [client 34.170.244.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "af3zQuB0GbUWhxgzX9VdSQAAAIM"]
[Fri May 08 22:29:22.961770 2026] [:error] [pid 51009:tid 51083] [client 34.170.244.215:49227] [client 34.170.244.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "af3zQuB0GbUWhxgzX9VdTQAAAIc"]
[Fri May 08 22:29:23.495558 2026] [:error] [pid 61317:tid 61343] [client 34.170.244.215:64539] [client 34.170.244.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "af3zQ8-fFk_CedOCOYvf5QAAAVc"]
[Fri May 08 22:29:23.942292 2026] [:error] [pid 51008:tid 51072] [client 34.170.244.215:53024] [client 34.170.244.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "af3zQ3B58C2Y1tgLtuK2lwAAAFc"]
[Fri May 08 22:29:24.324461 2026] [:error] [pid 51009:tid 51082] [client 34.170.244.215:65341] [client 34.170.244.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "af3zROB0GbUWhxgzX9VdTwAAAIY"]
[Fri May 08 22:29:24.798412 2026] [:error] [pid 51008:tid 51055] [client 34.170.244.215:49492] [client 34.170.244.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "af3zRHB58C2Y1tgLtuK2mAAAAEY"]
[Sat May 09 01:01:58.890620 2026] [:error] [pid 61317:tid 61335] [client 54.153.55.211:57128] [client 54.153.55.211] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.git/config"] [unique_id "af4XBs-fFk_CedOCOYv_ywAAAU8"]
[Sat May 09 01:01:59.728355 2026] [:error] [pid 34318:tid 34329] [client 54.153.55.211:57144] [client 54.153.55.211] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env/.env.local/.env.production/.env.staging/.env.development/.env.test/.env.remote/.env.bak/.env.backup/.env.save/.env.old/.env.sample/.env.example/.env.dev/.env.prod/.env.stage/.env.ci/.env.docker/.env.live/.env.preprod/.env.uat/.env.dist/.env.swp/.env~/.env1/.env2/.env_copy/.env.txt/.env.json/.env.yaml/.env.yml/app/.env/apps/.env/api/.env/web/.env/site/.env/public/.env/admin/.env/backend/.env/server/.env/frontend/.env/src/.env/core/.env/core/app/.env/config/.env/private/.env/application/.env/bootstrap/.env/database/.env/storage/.env/var/www/.env/var/www/html/.env/current/.env/release/.env/releases/.env/shared/.env/deploy/.env/build/.env/dist/.env/public_html/.env/htdocs/.env/www/.env/html/.env/live/.env/prod/.env/dev/.env/staging/.env/opt/.env/laravel/.env/symfony/.env/wordpress/.env/wp/.env/cms/.env/drupal/.env/joomla/.env/magento/.env/shopify/.env/prestashop/.env/codeigniter/.env/cakephp/.env/zend/.env/yii/.env/laravel5/.env/v1/.env/v2/.env/v3/.env/api/v1/.env/api/v2/.env/rest/.env/graphql/.env/gateway/.env/microservice/.env/service/.env/api/v3/.env/api/dev/.env/api/staging/.env/vendor/.env/lib/.env/resources/.env/assets/.env/uploads/.env/internal/.env/tools/.env/scripts/.env/bin/.env/sbin/.env/local/.env/portal/.env/dashboard/.env/panel/.env/crm/.env/erp/.env/shop/.env/store/.env/saas/.env/client/.env/project/.env/admin-panel/.env/control-panel/.env/user-panel/.env/node/.env/express/.env/next/.env/nuxt/.env/nest/.env/react/.env/vue/.env/angular/.env/svelte/.env/vite/.env/backup/.env/backups/.env/old/.env/tmp/.env/temp/.env/lab/.env/cronlab/.env/cron/.env/en/.env/administrator/.env/psnlink/.env/exapi/.env/sitemaps/.env/.env.backup1/.env.backup2/logs/.env/cache/.env/mailer/.env/mail/.env/email/.env/smtp/.env/mailing/.env/notifications/.env/notify/.env/sender/.env/campaign/.env/newsletter/.env/ses/.env/sendgrid/.env/sparkpost/.env/postmark/.env/mailgun/.env/mandrill/.env/mailjet/.env/brevo/.env/transactional/.env/bulk/.env/aws/.env/azure/.env/gcp/.env/cloud/.env/infrastructure/.env/docker/.env/k8s/.env/kubernetes/.env/terraform/.env/ansible/.env/.git/.env/ci/.env/cd/.env/jenkins/.env/gitlab/.env/github/.env/actions/.env/circleci/.env/travis/.env/buildkite/.env/mysql/.env/postgres/.env/mongodb/.env/redis/.env/elasticsearch/.env/rabbitmq/.env/kafka/.env/queue/.env/worker/.env/job/.env/test/.env/qa/.env/preview/.env/beta/.env/uat/.env/stage/.env/development/.env/production/.env/config/app/.env"] [unique_id "af4XB8r3guirgJiKhzD9YgAAAQk"]
[Sat May 09 01:02:00.395724 2026] [proxy_fcgi:error] [pid 51009:tid 51099] [client 54.153.55.211:57152] AH01071: Got error 'Primary script unknown'
[Sat May 09 01:02:00.646973 2026] [proxy_fcgi:error] [pid 51009:tid 51100] [client 54.153.55.211:57152] AH01071: Got error 'Primary script unknown'
[Sat May 09 01:02:00.817508 2026] [proxy_fcgi:error] [pid 51009:tid 51083] [client 54.153.55.211:57152] AH01071: Got error 'Primary script unknown'
[Sat May 09 01:02:00.990061 2026] [proxy_fcgi:error] [pid 51009:tid 51080] [client 54.153.55.211:57152] AH01071: Got error 'Primary script unknown'
[Sat May 09 01:02:01.158319 2026] [proxy_fcgi:error] [pid 51009:tid 51088] [client 54.153.55.211:57152] AH01071: Got error 'Primary script unknown'
[Sat May 09 01:02:01.326543 2026] [proxy_fcgi:error] [pid 51009:tid 51091] [client 54.153.55.211:57152] AH01071: Got error 'Primary script unknown'
[Sat May 09 01:02:01.495023 2026] [proxy_fcgi:error] [pid 51009:tid 51076] [client 54.153.55.211:57152] AH01071: Got error 'Primary script unknown'
[Sat May 09 01:02:01.830793 2026] [proxy_fcgi:error] [pid 51009:tid 51084] [client 54.153.55.211:57152] AH01071: Got error 'Primary script unknown'
[Sat May 09 01:02:02.001024 2026] [proxy_fcgi:error] [pid 51009:tid 51082] [client 54.153.55.211:57152] AH01071: Got error 'Primary script unknown'
[Sat May 09 01:02:02.332270 2026] [:error] [pid 51009:tid 51093] [client 54.153.55.211:57152] [client 54.153.55.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/test/phpinfo.php"] [unique_id "af4XCuB0GbUWhxgzX9WDLgAAAJE"]
[Sat May 09 01:02:02.988899 2026] [:error] [pid 34318:tid 34343] [client 54.153.55.211:57158] [client 54.153.55.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dev/phpinfo.php"] [unique_id "af4XCsr3guirgJiKhzD9aQAAARc"]
[Sat May 09 01:02:03.644711 2026] [:error] [pid 61355:tid 61380] [client 54.153.55.211:57170] [client 54.153.55.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/old/phpinfo.php"] [unique_id "af4XC_khJTi30CBXmMkW4wAAAZM"]
[Sat May 09 01:02:04.301154 2026] [:error] [pid 61355:tid 61367] [client 54.153.55.211:57182] [client 54.153.55.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tmp/phpinfo.php"] [unique_id "af4XDPkhJTi30CBXmMkW5AAAAYY"]
[Sat May 09 01:02:04.993405 2026] [:error] [pid 51113:tid 51129] [client 54.153.55.211:51392] [client 54.153.55.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/public/phpinfo.php"] [unique_id "af4XDEQfs7sWtqkpQIeWlQAAAM4"]
[Sat May 09 01:02:05.663116 2026] [:error] [pid 61355:tid 61372] [client 54.153.55.211:51402] [client 54.153.55.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/info"] [unique_id "af4XDfkhJTi30CBXmMkW5gAAAYs"]
[Sat May 09 01:02:06.314847 2026] [:error] [pid 61355:tid 61374] [client 54.153.55.211:51418] [client 54.153.55.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/php-info.php"] [unique_id "af4XDvkhJTi30CBXmMkW6AAAAY0"]
[Sat May 09 01:02:06.973604 2026] [:error] [pid 61355:tid 61383] [client 54.153.55.211:51428] [client 54.153.55.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/phpversion.php"] [unique_id "af4XDvkhJTi30CBXmMkW6gAAAZY"]
[Sat May 09 01:02:07.632249 2026] [:error] [pid 51007:tid 51024] [client 54.153.55.211:51438] [client 54.153.55.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/_phpinfo.php"] [unique_id "af4XD1MagSGstWKyzzUUBwAAAAI"]
[Sat May 09 01:02:08.291899 2026] [:error] [pid 34318:tid 34338] [client 54.153.55.211:51450] [client 54.153.55.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/old_phpinfo.php"] [unique_id "af4XEMr3guirgJiKhzD9bQAAARI"]
[Sat May 09 01:02:08.946469 2026] [:error] [pid 61355:tid 61382] [client 54.153.55.211:51454] [client 54.153.55.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/server-info.php"] [unique_id "af4XEPkhJTi30CBXmMkW7AAAAZU"]
[Sat May 09 01:02:09.604153 2026] [:error] [pid 51007:tid 51032] [client 54.153.55.211:51466] [client 54.153.55.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/server-status.php"] [unique_id "af4XEVMagSGstWKyzzUUCQAAAAo"]
[Sat May 09 01:02:10.266617 2026] [:error] [pid 61355:tid 61362] [client 54.153.55.211:51482] [client 54.153.55.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/_profiler/phpinfo"] [unique_id "af4XEvkhJTi30CBXmMkW8AAAAYE"]
[Sat May 09 01:02:10.938467 2026] [:error] [pid 34318:tid 34331] [client 54.153.55.211:51496] [client 54.153.55.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/_environment"] [unique_id "af4XEsr3guirgJiKhzD9bgAAAQs"]
[Sat May 09 01:02:11.618459 2026] [:error] [pid 51113:tid 51138] [client 54.153.55.211:51508] [client 54.153.55.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/webroot/index.php/_environment"] [unique_id "af4XE0Qfs7sWtqkpQIeWnQAAANc"]
[Sat May 09 01:02:12.313728 2026] [:error] [pid 61317:tid 61324] [client 54.153.55.211:51514] [client 54.153.55.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mail/phpinfo.php"] [unique_id "af4XFM-fFk_CedOCOYv_6gAAAUQ"]
[Sat May 09 01:02:12.998584 2026] [:error] [pid 61317:tid 61341] [client 54.153.55.211:51518] [client 54.153.55.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cpanel/phpinfo.php"] [unique_id "af4XFM-fFk_CedOCOYv_7wAAAVU"]
[Sat May 09 01:02:13.700943 2026] [:error] [pid 51008:tid 51049] [client 54.153.55.211:51526] [client 54.153.55.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hosting/phpinfo.php"] [unique_id "af4XFXB58C2Y1tgLtuLQRgAAAEA"]
[Sat May 09 01:02:14.378870 2026] [:error] [pid 61356:tid 61388] [client 54.153.55.211:51528] [client 54.153.55.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/webmail/phpinfo.php"] [unique_id "af4XFox3vpB8oWhUq2MWgQAAAcA"]
[Sat May 09 01:02:15.034180 2026] [:error] [pid 61355:tid 61366] [client 54.153.55.211:54592] [client 54.153.55.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/smtp/phpinfo.php"] [unique_id "af4XF_khJTi30CBXmMkW9wAAAYU"]
[Sat May 09 01:02:15.691202 2026] [:error] [pid 34318:tid 34342] [client 54.153.55.211:54616] [client 54.153.55.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/phpinfo.php.bak"] [unique_id "af4XF8r3guirgJiKhzD9cQAAARY"]
[Sat May 09 01:02:16.351512 2026] [:error] [pid 51008:tid 51064] [client 54.153.55.211:54632] [client 54.153.55.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/phpinfo.php.old"] [unique_id "af4XGHB58C2Y1tgLtuLQTAAAAE8"]
[Sat May 09 01:02:17.009135 2026] [:error] [pid 61355:tid 61364] [client 54.153.55.211:54648] [client 54.153.55.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/phpinfo.php~"] [unique_id "af4XGfkhJTi30CBXmMkW-gAAAYM"]
[Sat May 09 01:02:17.668695 2026] [:error] [pid 61355:tid 61361] [client 54.153.55.211:54650] [client 54.153.55.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/info.php.bak"] [unique_id "af4XGfkhJTi30CBXmMkW_AAAAYA"]
[Sat May 09 01:02:18.356542 2026] [:error] [pid 61355:tid 61381] [client 54.153.55.211:54664] [client 54.153.55.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/phpinfo.php.save"] [unique_id "af4XGvkhJTi30CBXmMkXAQAAAZQ"]
[Sat May 09 01:02:19.016366 2026] [:error] [pid 61355:tid 61369] [client 54.153.55.211:54666] [client 54.153.55.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/staging/phpinfo.php"] [unique_id "af4XG_khJTi30CBXmMkXCAAAAYg"]
[Sat May 09 01:02:19.681618 2026] [:error] [pid 61355:tid 61384] [client 54.153.55.211:54678] [client 54.153.55.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/beta/phpinfo.php"] [unique_id "af4XG_khJTi30CBXmMkXDQAAAZc"]
[Sat May 09 01:02:20.344616 2026] [:error] [pid 51009:tid 51089] [client 54.153.55.211:54680] [client 54.153.55.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/uat/phpinfo.php"] [unique_id "af4XHOB0GbUWhxgzX9WDRQAAAI0"]
[Sat May 09 01:02:20.993855 2026] [:error] [pid 51009:tid 51081] [client 54.153.55.211:54688] [client 54.153.55.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/qa/phpinfo.php"] [unique_id "af4XHOB0GbUWhxgzX9WDSQAAAIU"]
[Sat May 09 01:02:21.651352 2026] [:error] [pid 51009:tid 51098] [client 54.153.55.211:54696] [client 54.153.55.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/preview/phpinfo.php"] [unique_id "af4XHeB0GbUWhxgzX9WDTAAAAJY"]
[Sat May 09 01:02:22.312249 2026] [:error] [pid 51009:tid 51094] [client 54.153.55.211:54712] [client 54.153.55.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/www/phpinfo.php"] [unique_id "af4XHuB0GbUWhxgzX9WDTgAAAJI"]
[Sat May 09 01:02:22.971765 2026] [:error] [pid 61355:tid 61378] [client 54.153.55.211:54724] [client 54.153.55.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/htdocs/phpinfo.php"] [unique_id "af4XHvkhJTi30CBXmMkXHwAAAZE"]
[Sat May 09 01:02:23.631776 2026] [:error] [pid 51008:tid 51056] [client 54.153.55.211:54732] [client 54.153.55.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/public_html/phpinfo.php"] [unique_id "af4XH3B58C2Y1tgLtuLQUgAAAEc"]
[Sat May 09 01:02:24.290025 2026] [:error] [pid 51113:tid 51121] [client 54.153.55.211:54748] [client 54.153.55.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/site/phpinfo.php"] [unique_id "af4XIEQfs7sWtqkpQIeWngAAAMY"]
[Sat May 09 01:02:24.950547 2026] [:error] [pid 51008:tid 51072] [client 54.153.55.211:57010] [client 54.153.55.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/docs/phpinfo.php"] [unique_id "af4XIHB58C2Y1tgLtuLQUwAAAFc"]
[Sat May 09 01:02:25.607810 2026] [:error] [pid 51009:tid 51089] [client 54.153.55.211:57012] [client 54.153.55.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/phpinfo.php"] [unique_id "af4XIeB0GbUWhxgzX9WDUQAAAI0"]
[Sat May 09 01:02:26.263830 2026] [:error] [pid 34318:tid 34339] [client 54.153.55.211:57018] [client 54.153.55.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/administrator/phpinfo.php"] [unique_id "af4XIsr3guirgJiKhzD9ewAAARM"]
[Sat May 09 01:02:26.910713 2026] [:error] [pid 61355:tid 61373] [client 54.153.55.211:57022] [client 54.153.55.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/core/phpinfo.php"] [unique_id "af4XIvkhJTi30CBXmMkXMwAAAYw"]
[Sat May 09 01:02:27.573931 2026] [:error] [pid 51009:tid 51095] [client 54.153.55.211:57024] [client 54.153.55.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/includes/phpinfo.php"] [unique_id "af4XI-B0GbUWhxgzX9WDUwAAAJM"]
[Sat May 09 01:36:20.364134 2026] [:error] [pid 61355:tid 61365] [client 136.107.218.81:40704] [client 136.107.218.81] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dwelectservices.com.au"] [uri "/.git/config"] [unique_id "af4fFPkhJTi30CBXmMk0YQAAAYQ"]
[Sat May 09 02:11:18.954186 2026] [:error] [pid 51007:tid 51044] [client 47.129.215.133:48656] [client 47.129.215.133] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dwelectservices.com.au"] [uri "/.git/config"] [unique_id "af4nRlMagSGstWKyzzUjIQAAABY"]
[Sat May 09 02:11:19.502914 2026] [:error] [pid 51007:tid 51031] [client 47.129.215.133:48670] [client 47.129.215.133] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dwelectservices.com.au"] [uri "/.env/.env.local/.env.production/.env.staging/.env.development/.env.test/.env.remote/.env.bak/.env.backup/.env.save/.env.old/.env.sample/.env.example/.env.dev/.env.prod/.env.stage/.env.ci/.env.docker/.env.live/.env.preprod/.env.uat/.env.dist/.env.swp/.env~/.env1/.env2/.env_copy/.env.txt/.env.json/.env.yaml/.env.yml/app/.env/apps/.env/api/.env/web/.env/site/.env/public/.env/admin/.env/backend/.env/server/.env/frontend/.env/src/.env/core/.env/core/app/.env/config/.env/private/.env/application/.env/bootstrap/.env/database/.env/storage/.env/var/www/.env/var/www/html/.env/current/.env/release/.env/releases/.env/shared/.env/deploy/.env/build/.env/dist/.env/public_html/.env/htdocs/.env/www/.env/html/.env/live/.env/prod/.env/dev/.env/staging/.env/opt/.env/laravel/.env/symfony/.env/wordpress/.env/wp/.env/cms/.env/drupal/.env/joomla/.env/magento/.env/shopify/.env/prestashop/.env/codeigniter/.env/cakephp/.env/zend/.env/yii/.env/laravel5/.env/v1/.env/v2/.env/v3/.env/api/v1/.env/api/v2/.env/rest/.env/graphql/.env/gateway/.env/microservice/.env/service/.env/api/v3/.env/api/dev/.env/api/staging/.env/vendor/.env/lib/.env/resources/.env/assets/.env/uploads/.env/internal/.env/tools/.env/scripts/.env/bin/.env/sbin/.env/local/.env/portal/.env/dashboard/.env/panel/.env/crm/.env/erp/.env/shop/.env/store/.env/saas/.env/client/.env/project/.env/admin-panel/.env/control-panel/.env/user-panel/.env/node/.env/express/.env/next/.env/nuxt/.env/nest/.env/react/.env/vue/.env/angular/.env/svelte/.env/vite/.env/backup/.env/backups/.env/old/.env/tmp/.env/temp/.env/lab/.env/cronlab/.env/cron/.env/en/.env/administrator/.env/psnlink/.env/exapi/.env/sitemaps/.env/.env.backup1/.env.backup2/logs/.env/cache/.env/mailer/.env/mail/.env/email/.env/smtp/.env/mailing/.env/notifications/.env/notify/.env/sender/.env/campaign/.env/newsletter/.env/ses/.env/sendgrid/.env/sparkpost/.env/postmark/.env/mailgun/.env/mandrill/.env/mailjet/.env/brevo/.env/transactional/.env/bulk/.env/aws/.env/azure/.env/gcp/.env/cloud/.env/infrastructure/.env/docker/.env/k8s/.env/kubernetes/.env/terraform/.env/ansible/.env/.git/.env/ci/.env/cd/.env/jenkins/.env/gitlab/.env/github/.env/actions/.env/circleci/.env/travis/.env/buildkite/.env/mysql/.env/postgres/.env/mongodb/.env/redis/.env/elasticsearch/.env/rabbitmq/.env/kafka/.env/queue/.env/worker/.env/job/.env/test/.env/qa/.env/preview/.env/beta/.env/uat/.env/stage/.env/development/.env/production/.env/config/app/.env"] [unique_id "af4nR1MagSGstWKyzzUjJAAAAAk"]
[Sat May 09 02:11:22.614230 2026] [proxy_fcgi:error] [pid 61355:tid 61367] [client 47.129.215.133:48686] AH01071: Got error 'Primary script unknown'
[Sat May 09 02:11:22.726587 2026] [proxy_fcgi:error] [pid 61355:tid 61381] [client 47.129.215.133:48686] AH01071: Got error 'Primary script unknown'
[Sat May 09 02:11:22.838948 2026] [proxy_fcgi:error] [pid 61355:tid 61379] [client 47.129.215.133:48686] AH01071: Got error 'Primary script unknown'
[Sat May 09 02:11:22.951096 2026] [proxy_fcgi:error] [pid 61355:tid 61382] [client 47.129.215.133:48686] AH01071: Got error 'Primary script unknown'
[Sat May 09 02:11:23.063827 2026] [proxy_fcgi:error] [pid 61355:tid 61363] [client 47.129.215.133:48686] AH01071: Got error 'Primary script unknown'
[Sat May 09 02:11:23.176068 2026] [proxy_fcgi:error] [pid 61355:tid 61375] [client 47.129.215.133:48686] AH01071: Got error 'Primary script unknown'
[Sat May 09 02:11:23.399654 2026] [proxy_fcgi:error] [pid 61355:tid 61384] [client 47.129.215.133:48686] AH01071: Got error 'Primary script unknown'
[Sat May 09 02:11:23.513205 2026] [proxy_fcgi:error] [pid 61355:tid 61371] [client 47.129.215.133:48686] AH01071: Got error 'Primary script unknown'
[Sat May 09 02:11:23.848117 2026] [:error] [pid 61355:tid 61362] [client 47.129.215.133:48686] [client 47.129.215.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/dev/phpinfo.php"] [unique_id "af4nS_khJTi30CBXmMlR9QAAAYE"]
[Sat May 09 02:11:24.280915 2026] [:error] [pid 61356:tid 61388] [client 47.129.215.133:51146] [client 47.129.215.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/old/phpinfo.php"] [unique_id "af4nTIx3vpB8oWhUq2M-iAAAAcA"]
[Sat May 09 02:11:24.718387 2026] [:error] [pid 61355:tid 61365] [client 47.129.215.133:51164] [client 47.129.215.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/tmp/phpinfo.php"] [unique_id "af4nTPkhJTi30CBXmMlR-QAAAYQ"]
[Sat May 09 02:11:25.152020 2026] [:error] [pid 61355:tid 61381] [client 47.129.215.133:51176] [client 47.129.215.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/public/phpinfo.php"] [unique_id "af4nTfkhJTi30CBXmMlR_AAAAZQ"]
[Sat May 09 02:11:25.588411 2026] [:error] [pid 51008:tid 51060] [client 47.129.215.133:51188] [client 47.129.215.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/info"] [unique_id "af4nTXB58C2Y1tgLtuLl5wAAAEs"]
[Sat May 09 02:11:26.020665 2026] [:error] [pid 61355:tid 61364] [client 47.129.215.133:51216] [client 47.129.215.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/php-info.php"] [unique_id "af4nTvkhJTi30CBXmMlSBAAAAYM"]
[Sat May 09 02:11:26.454690 2026] [:error] [pid 61355:tid 61372] [client 47.129.215.133:51230] [client 47.129.215.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/phpversion.php"] [unique_id "af4nTvkhJTi30CBXmMlSCAAAAYs"]
[Sat May 09 02:11:26.888490 2026] [:error] [pid 61355:tid 61365] [client 47.129.215.133:51244] [client 47.129.215.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/_phpinfo.php"] [unique_id "af4nTvkhJTi30CBXmMlSCwAAAYQ"]
[Sat May 09 02:11:27.318991 2026] [:error] [pid 51008:tid 51055] [client 47.129.215.133:51258] [client 47.129.215.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/old_phpinfo.php"] [unique_id "af4nT3B58C2Y1tgLtuLl6AAAAEY"]
[Sat May 09 02:11:27.750202 2026] [:error] [pid 61355:tid 61370] [client 47.129.215.133:51272] [client 47.129.215.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/server-info.php"] [unique_id "af4nT_khJTi30CBXmMlSEgAAAYk"]
[Sat May 09 02:11:28.185569 2026] [:error] [pid 61355:tid 61375] [client 47.129.215.133:51280] [client 47.129.215.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/server-status.php"] [unique_id "af4nUPkhJTi30CBXmMlSFQAAAY4"]
[Sat May 09 02:11:28.618490 2026] [:error] [pid 61355:tid 61377] [client 47.129.215.133:51294] [client 47.129.215.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/_profiler/phpinfo"] [unique_id "af4nUPkhJTi30CBXmMlSGAAAAZA"]
[Sat May 09 02:11:29.049778 2026] [:error] [pid 61356:tid 61412] [client 47.129.215.133:51310] [client 47.129.215.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/_environment"] [unique_id "af4nUYx3vpB8oWhUq2M-iwAAAdg"]
[Sat May 09 02:11:29.480957 2026] [:error] [pid 61355:tid 61374] [client 47.129.215.133:51312] [client 47.129.215.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/webroot/index.php/_environment"] [unique_id "af4nUfkhJTi30CBXmMlSHQAAAY0"]
[Sat May 09 02:11:29.911171 2026] [:error] [pid 61317:tid 61322] [client 47.129.215.133:51316] [client 47.129.215.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/mail/phpinfo.php"] [unique_id "af4nUc-fFk_CedOCOYsYpwAAAUI"]
[Sat May 09 02:11:30.342565 2026] [:error] [pid 61355:tid 61381] [client 47.129.215.133:51318] [client 47.129.215.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/cpanel/phpinfo.php"] [unique_id "af4nUvkhJTi30CBXmMlSIQAAAZQ"]
[Sat May 09 02:11:30.785916 2026] [:error] [pid 61355:tid 61363] [client 47.129.215.133:51320] [client 47.129.215.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/hosting/phpinfo.php"] [unique_id "af4nUvkhJTi30CBXmMlSJAAAAYI"]
[Sat May 09 02:11:31.234151 2026] [:error] [pid 61355:tid 61364] [client 47.129.215.133:51326] [client 47.129.215.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/webmail/phpinfo.php"] [unique_id "af4nU_khJTi30CBXmMlSKQAAAYM"]
[Sat May 09 02:11:31.677599 2026] [:error] [pid 61355:tid 61373] [client 47.129.215.133:51342] [client 47.129.215.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/smtp/phpinfo.php"] [unique_id "af4nU_khJTi30CBXmMlSLAAAAYw"]
[Sat May 09 02:11:32.112759 2026] [:error] [pid 61355:tid 61369] [client 47.129.215.133:51370] [client 47.129.215.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/phpinfo.php.bak"] [unique_id "af4nVPkhJTi30CBXmMlSLgAAAYg"]
[Sat May 09 02:11:32.553839 2026] [:error] [pid 61355:tid 61365] [client 47.129.215.133:51396] [client 47.129.215.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/phpinfo.php.old"] [unique_id "af4nVPkhJTi30CBXmMlSMQAAAYQ"]
[Sat May 09 02:11:32.990677 2026] [:error] [pid 61356:tid 61390] [client 47.129.215.133:51410] [client 47.129.215.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/phpinfo.php~"] [unique_id "af4nVIx3vpB8oWhUq2M-jgAAAcI"]
[Sat May 09 02:11:33.432158 2026] [:error] [pid 51009:tid 51085] [client 47.129.215.133:51432] [client 47.129.215.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/info.php.bak"] [unique_id "af4nVeB0GbUWhxgzX9WjEwAAAIk"]
[Sat May 09 02:11:33.868678 2026] [:error] [pid 61356:tid 61405] [client 47.129.215.133:58232] [client 47.129.215.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/phpinfo.php.save"] [unique_id "af4nVYx3vpB8oWhUq2M-kQAAAdE"]
[Sat May 09 02:11:34.308034 2026] [:error] [pid 61356:tid 61408] [client 47.129.215.133:58242] [client 47.129.215.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/staging/phpinfo.php"] [unique_id "af4nVox3vpB8oWhUq2M-lAAAAdQ"]
[Sat May 09 02:11:34.741195 2026] [:error] [pid 61355:tid 61371] [client 47.129.215.133:58248] [client 47.129.215.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/beta/phpinfo.php"] [unique_id "af4nVvkhJTi30CBXmMlSOwAAAYo"]
[Sat May 09 02:11:35.173513 2026] [:error] [pid 51007:tid 51042] [client 47.129.215.133:58252] [client 47.129.215.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/uat/phpinfo.php"] [unique_id "af4nV1MagSGstWKyzzUjKAAAABQ"]
[Sat May 09 02:11:35.606445 2026] [:error] [pid 51008:tid 51050] [client 47.129.215.133:58276] [client 47.129.215.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/qa/phpinfo.php"] [unique_id "af4nV3B58C2Y1tgLtuLmBQAAAEE"]
[Sat May 09 02:11:36.041734 2026] [:error] [pid 61355:tid 61385] [client 47.129.215.133:58298] [client 47.129.215.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/preview/phpinfo.php"] [unique_id "af4nWPkhJTi30CBXmMlSPgAAAZg"]
[Sat May 09 02:11:36.479502 2026] [:error] [pid 51009:tid 51090] [client 47.129.215.133:58312] [client 47.129.215.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/www/phpinfo.php"] [unique_id "af4nWOB0GbUWhxgzX9WjGAAAAI4"]
[Sat May 09 02:11:36.925430 2026] [:error] [pid 61355:tid 61375] [client 47.129.215.133:58342] [client 47.129.215.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/htdocs/phpinfo.php"] [unique_id "af4nWPkhJTi30CBXmMlSQQAAAY4"]
[Sat May 09 02:11:37.364006 2026] [:error] [pid 61355:tid 61383] [client 47.129.215.133:58348] [client 47.129.215.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/public_html/phpinfo.php"] [unique_id "af4nWfkhJTi30CBXmMlSRgAAAZY"]
[Sat May 09 02:11:37.803578 2026] [:error] [pid 61355:tid 61382] [client 47.129.215.133:58376] [client 47.129.215.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/site/phpinfo.php"] [unique_id "af4nWfkhJTi30CBXmMlSSQAAAZU"]
[Sat May 09 02:11:38.239801 2026] [:error] [pid 51008:tid 51061] [client 47.129.215.133:58406] [client 47.129.215.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/docs/phpinfo.php"] [unique_id "af4nWnB58C2Y1tgLtuLmDwAAAEw"]
[Sat May 09 02:11:38.681199 2026] [:error] [pid 61355:tid 61384] [client 47.129.215.133:58436] [client 47.129.215.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/wp-admin/phpinfo.php"] [unique_id "af4nWvkhJTi30CBXmMlSSwAAAZc"]
[Sat May 09 02:11:39.115645 2026] [:error] [pid 61355:tid 61373] [client 47.129.215.133:58464] [client 47.129.215.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/administrator/phpinfo.php"] [unique_id "af4nW_khJTi30CBXmMlSTwAAAYw"]
[Sat May 09 02:11:39.552300 2026] [:error] [pid 61355:tid 61369] [client 47.129.215.133:58476] [client 47.129.215.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/core/phpinfo.php"] [unique_id "af4nW_khJTi30CBXmMlSUgAAAYg"]
[Sat May 09 02:11:39.990426 2026] [:error] [pid 61317:tid 61340] [client 47.129.215.133:58492] [client 47.129.215.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/includes/phpinfo.php"] [unique_id "af4nW8-fFk_CedOCOYsYqgAAAVQ"]
[Sat May 09 02:39:40.561928 2026] [proxy_fcgi:error] [pid 51008:tid 51057] [client 45.154.98.197:64199] AH01071: Got error 'Primary script unknown'
[Sat May 09 02:39:41.569552 2026] [:error] [pid 61355:tid 61371] [client 45.154.98.197:64540] [client 45.154.98.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/widgets/txets.php"] [unique_id "af4t7fkhJTi30CBXmMlg2wAAAYo"]
[Sat May 09 02:39:42.076868 2026] [:error] [pid 61356:tid 61399] [client 45.154.98.197:64721] [client 45.154.98.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/rest-api/txets.php"] [unique_id "af4t7ox3vpB8oWhUq2NKuQAAAcs"]
[Sat May 09 02:39:42.580115 2026] [:error] [pid 61356:tid 61395] [client 45.154.98.197:64895] [client 45.154.98.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/post-template/txets.php"] [unique_id "af4t7ox3vpB8oWhUq2NKugAAAcc"]
[Sat May 09 02:39:43.596556 2026] [:error] [pid 61355:tid 61361] [client 45.154.98.197:65161] [client 45.154.98.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/txets.php"] [unique_id "af4t7_khJTi30CBXmMlg5wAAAYA"]
[Sat May 09 02:39:44.106538 2026] [proxy_fcgi:error] [pid 61355:tid 61380] [client 45.154.98.197:65274] AH01071: Got error 'Primary script unknown'
[Sat May 09 02:39:44.610645 2026] [proxy_fcgi:error] [pid 61355:tid 61385] [client 45.154.98.197:65411] AH01071: Got error 'Primary script unknown'
[Sat May 09 03:19:42.020005 2026] [:error] [pid 51009:tid 51078] [client 54.153.55.211:53674] [client 54.153.55.211] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.git/config"] [unique_id "af43TuB0GbUWhxgzX9W-AgAAAII"]
[Sat May 09 03:19:42.839073 2026] [:error] [pid 61356:tid 61391] [client 54.153.55.211:53682] [client 54.153.55.211] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env"] [unique_id "af43Tox3vpB8oWhUq2NcKQAAAcM"]
[Sat May 09 03:19:43.496727 2026] [:error] [pid 51113:tid 51117] [client 54.153.55.211:53692] [client 54.153.55.211] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.local"] [unique_id "af43T0Qfs7sWtqkpQIereAAAAMI"]
[Sat May 09 03:19:44.161406 2026] [:error] [pid 61355:tid 61377] [client 54.153.55.211:53700] [client 54.153.55.211] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.production"] [unique_id "af43UPkhJTi30CBXmMl1AAAAAZA"]
[Sat May 09 03:19:44.855069 2026] [:error] [pid 51113:tid 51133] [client 54.153.55.211:54014] [client 54.153.55.211] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.staging"] [unique_id "af43UEQfs7sWtqkpQIerewAAANI"]
[Sat May 09 03:19:45.517363 2026] [:error] [pid 51007:tid 51036] [client 54.153.55.211:54018] [client 54.153.55.211] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.development"] [unique_id "af43UVMagSGstWKyzzUv9gAAAA4"]
[Sat May 09 03:19:46.187400 2026] [:error] [pid 51007:tid 51029] [client 54.153.55.211:54032] [client 54.153.55.211] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.test"] [unique_id "af43UlMagSGstWKyzzUv9wAAAAc"]
[Sat May 09 03:19:46.859104 2026] [:error] [pid 51007:tid 51030] [client 54.153.55.211:54048] [client 54.153.55.211] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.remote"] [unique_id "af43UlMagSGstWKyzzUv-gAAAAg"]
[Sat May 09 03:19:47.516429 2026] [:error] [pid 61317:tid 61337] [client 54.153.55.211:54054] [client 54.153.55.211] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.bak"] [unique_id "af43U8-fFk_CedOCOYspSQAAAVE"]
[Sat May 09 03:19:48.176562 2026] [:error] [pid 61317:tid 61328] [client 54.153.55.211:54070] [client 54.153.55.211] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.backup"] [unique_id "af43VM-fFk_CedOCOYspTAAAAUg"]
[Sat May 09 03:19:48.836858 2026] [:error] [pid 34318:tid 34338] [client 54.153.55.211:54076] [client 54.153.55.211] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.save"] [unique_id "af43VMr3guirgJiKhzAYMAAAARI"]
[Sat May 09 03:19:49.500995 2026] [:error] [pid 61356:tid 61395] [client 54.153.55.211:54078] [client 54.153.55.211] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.old"] [unique_id "af43VYx3vpB8oWhUq2NcLAAAAcc"]
[Sat May 09 03:19:50.168085 2026] [:error] [pid 61356:tid 61393] [client 54.153.55.211:54080] [client 54.153.55.211] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.sample"] [unique_id "af43Vox3vpB8oWhUq2NcLwAAAcU"]
[Sat May 09 03:19:50.831175 2026] [:error] [pid 61355:tid 61377] [client 54.153.55.211:54086] [client 54.153.55.211] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.example"] [unique_id "af43VvkhJTi30CBXmMl1BQAAAZA"]
[Sat May 09 03:19:51.483406 2026] [:error] [pid 51008:tid 51067] [client 54.153.55.211:54088] [client 54.153.55.211] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.dev"] [unique_id "af43V3B58C2Y1tgLtuL1QAAAAFI"]
[Sat May 09 03:19:52.138604 2026] [:error] [pid 61317:tid 61338] [client 54.153.55.211:54098] [client 54.153.55.211] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.prod"] [unique_id "af43WM-fFk_CedOCOYspUwAAAVI"]
[Sat May 09 03:19:52.811362 2026] [:error] [pid 34318:tid 34321] [client 54.153.55.211:54114] [client 54.153.55.211] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.stage"] [unique_id "af43WMr3guirgJiKhzAYMgAAAQE"]
[Sat May 09 03:19:53.472974 2026] [:error] [pid 51113:tid 51123] [client 54.153.55.211:54124] [client 54.153.55.211] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.ci"] [unique_id "af43WUQfs7sWtqkpQIergAAAAMg"]
[Sat May 09 03:19:54.158191 2026] [:error] [pid 51113:tid 51138] [client 54.153.55.211:54140] [client 54.153.55.211] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.docker"] [unique_id "af43WkQfs7sWtqkpQIergQAAANc"]
[Sat May 09 03:19:54.812547 2026] [:error] [pid 61317:tid 61339] [client 54.153.55.211:60420] [client 54.153.55.211] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.live"] [unique_id "af43Ws-fFk_CedOCOYspVQAAAVM"]
[Sat May 09 03:19:55.468455 2026] [:error] [pid 61356:tid 61404] [client 54.153.55.211:60424] [client 54.153.55.211] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.preprod"] [unique_id "af43W4x3vpB8oWhUq2NcNQAAAdA"]
[Sat May 09 03:19:56.127575 2026] [:error] [pid 34318:tid 34344] [client 54.153.55.211:60434] [client 54.153.55.211] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.uat"] [unique_id "af43XMr3guirgJiKhzAYNgAAARg"]
[Sat May 09 03:19:56.797058 2026] [:error] [pid 61317:tid 61343] [client 54.153.55.211:60448] [client 54.153.55.211] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.dist"] [unique_id "af43XM-fFk_CedOCOYspWAAAAVc"]
[Sat May 09 03:19:57.472116 2026] [:error] [pid 51009:tid 51095] [client 54.153.55.211:60454] [client 54.153.55.211] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.swp"] [unique_id "af43XeB0GbUWhxgzX9W-BgAAAJM"]
[Sat May 09 03:19:58.128493 2026] [:error] [pid 51009:tid 51093] [client 54.153.55.211:60462] [client 54.153.55.211] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env~"] [unique_id "af43XuB0GbUWhxgzX9W-CgAAAJE"]
[Sat May 09 03:19:58.784508 2026] [:error] [pid 51009:tid 51078] [client 54.153.55.211:60468] [client 54.153.55.211] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env1"] [unique_id "af43XuB0GbUWhxgzX9W-DQAAAII"]
[Sat May 09 03:19:59.433827 2026] [:error] [pid 51009:tid 51098] [client 54.153.55.211:60470] [client 54.153.55.211] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env2"] [unique_id "af43X-B0GbUWhxgzX9W-EQAAAJY"]
[Sat May 09 03:20:00.093198 2026] [:error] [pid 51009:tid 51085] [client 54.153.55.211:60476] [client 54.153.55.211] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env_copy"] [unique_id "af43YOB0GbUWhxgzX9W-EwAAAIk"]
[Sat May 09 03:20:00.757154 2026] [:error] [pid 51009:tid 51088] [client 54.153.55.211:60492] [client 54.153.55.211] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.txt"] [unique_id "af43YOB0GbUWhxgzX9W-FgAAAIw"]
[Sat May 09 03:20:01.418179 2026] [:error] [pid 51009:tid 51094] [client 54.153.55.211:60494] [client 54.153.55.211] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.json"] [unique_id "af43YeB0GbUWhxgzX9W-GwAAAJI"]
[Sat May 09 03:20:02.072107 2026] [:error] [pid 51008:tid 51054] [client 54.153.55.211:60506] [client 54.153.55.211] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.yaml"] [unique_id "af43YnB58C2Y1tgLtuL1RQAAAEU"]
[Sat May 09 03:20:02.729868 2026] [:error] [pid 61356:tid 61398] [client 54.153.55.211:60518] [client 54.153.55.211] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.yml"] [unique_id "af43Yox3vpB8oWhUq2NcOgAAAco"]
[Sat May 09 03:20:03.396307 2026] [:error] [pid 51009:tid 51084] [client 54.153.55.211:60528] [client 54.153.55.211] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/app/.env"] [unique_id "af43Y-B0GbUWhxgzX9W-IQAAAIg"]
[Sat May 09 03:20:04.052129 2026] [:error] [pid 61355:tid 61381] [client 54.153.55.211:60542] [client 54.153.55.211] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/apps/.env"] [unique_id "af43ZPkhJTi30CBXmMl1EwAAAZQ"]
[Sat May 09 03:20:04.706019 2026] [:error] [pid 51009:tid 51090] [client 54.153.55.211:45606] [client 54.153.55.211] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/api/.env"] [unique_id "af43ZOB0GbUWhxgzX9W-JwAAAI4"]
[Sat May 09 03:20:05.359404 2026] [:error] [pid 51009:tid 51083] [client 54.153.55.211:45608] [client 54.153.55.211] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/web/.env"] [unique_id "af43ZeB0GbUWhxgzX9W-KQAAAIc"]
[Sat May 09 03:20:06.015118 2026] [:error] [pid 61356:tid 61404] [client 54.153.55.211:45618] [client 54.153.55.211] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/site/.env"] [unique_id "af43Zox3vpB8oWhUq2NcPAAAAdA"]
[Sat May 09 03:20:06.674963 2026] [:error] [pid 61356:tid 61400] [client 54.153.55.211:45620] [client 54.153.55.211] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/public/.env"] [unique_id "af43Zox3vpB8oWhUq2NcPQAAAcw"]
[Sat May 09 03:20:07.349539 2026] [:error] [pid 61355:tid 61384] [client 54.153.55.211:45634] [client 54.153.55.211] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/admin/.env"] [unique_id "af43Z_khJTi30CBXmMl1FwAAAZc"]
[Sat May 09 03:20:07.998344 2026] [:error] [pid 61317:tid 61344] [client 54.153.55.211:45650] [client 54.153.55.211] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/backend/.env"] [unique_id "af43Z8-fFk_CedOCOYspXwAAAVg"]
[Sat May 09 03:20:08.655465 2026] [:error] [pid 61355:tid 61364] [client 54.153.55.211:45656] [client 54.153.55.211] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/server/.env"] [unique_id "af43aPkhJTi30CBXmMl1GwAAAYM"]
[Sat May 09 04:00:19.788617 2026] [:error] [pid 9663:tid 9675] [client 45.92.229.138:31875] [client 45.92.229.138] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.92.229.138, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-login.php"] [unique_id "af5A05cWIu01SCxbjwupuAAAAQk"]
[Sat May 09 04:00:19.827797 2026] [proxy_fcgi:error] [pid 9663:tid 9675] [client 45.92.229.138:31875] AH01071: Got error 'Primary script unknown'
[Sat May 09 04:33:19.414722 2026] [:error] [pid 9760:tid 9772] [client 34.106.70.156:38670] [client 34.106.70.156] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.git/config"] [unique_id "af5Ij2IkCp-C_fh0s7L7lQAAAUY"]
[Sat May 09 06:08:39.217276 2026] [proxy_fcgi:error] [pid 9663:tid 9690] [client 172.212.190.20:47235] AH01071: Got error 'Primary script unknown'
[Sat May 09 06:08:39.410010 2026] [proxy_fcgi:error] [pid 9663:tid 9675] [client 172.212.190.20:47235] AH01071: Got error 'Primary script unknown'
[Sat May 09 06:08:39.804782 2026] [proxy_fcgi:error] [pid 9663:tid 9686] [client 172.212.190.20:47235] AH01071: Got error 'Primary script unknown'
[Sat May 09 06:08:39.997367 2026] [proxy_fcgi:error] [pid 9663:tid 9672] [client 172.212.190.20:47235] AH01071: Got error 'Primary script unknown'
[Sat May 09 06:08:40.384921 2026] [proxy_fcgi:error] [pid 9663:tid 9671] [client 172.212.190.20:47235] AH01071: Got error 'Primary script unknown'
[Sat May 09 06:08:40.577722 2026] [proxy_fcgi:error] [pid 9663:tid 9688] [client 172.212.190.20:47235] AH01071: Got error 'Primary script unknown'
[Sat May 09 06:08:40.769369 2026] [proxy_fcgi:error] [pid 9663:tid 9685] [client 172.212.190.20:47235] AH01071: Got error 'Primary script unknown'
[Sat May 09 06:08:41.152734 2026] [:error] [pid 9663:tid 9680] [client 172.212.190.20:47235] [client 172.212.190.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/randkeyword.PhP7"] [unique_id "af5e6ZcWIu01SCxbjwvMjAAAAQ4"]
[Sat May 09 06:08:41.902929 2026] [:error] [pid 9187:tid 9269] [client 172.212.190.20:51273] [client 172.212.190.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/randkeyword.PhP7"] [unique_id "af5e6RC7An6gkXsRsaHtAQAAAJA"]
[Sat May 09 06:08:42.668203 2026] [:error] [pid 9293:tid 9315] [client 172.212.190.20:47274] [client 172.212.190.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/randkeyword.PhP7"] [unique_id "af5e6pR__qEzV5O6Z2PRLwAAANI"]
[Sat May 09 06:08:43.485215 2026] [:error] [pid 9186:tid 9246] [client 172.212.190.20:45783] [client 172.212.190.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/randkeyword.PhP7"] [unique_id "af5e6xW4eFOEw1mKOgJ8BgAAAFQ"]
[Sat May 09 11:01:25.724985 2026] [:error] [pid 9187:tid 9253] [client 45.154.98.198:54905] [client 45.154.98.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "af6jhRC7An6gkXsRsaFCkAAAAIA"], referer: www.google.com
[Sat May 09 11:01:25.725376 2026] [:error] [pid 9187:tid 9254] [client 45.154.98.198:54978] [client 45.154.98.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "af6jhRC7An6gkXsRsaFCkQAAAIE"], referer: www.google.com
[Sat May 09 11:01:25.726548 2026] [:error] [pid 9187:tid 9261] [client 45.154.98.198:54947] [client 45.154.98.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/"] [unique_id "af6jhRC7An6gkXsRsaFCkgAAAIg"]
[Sat May 09 11:01:25.737937 2026] [proxy_fcgi:error] [pid 9186:tid 9237] [client 45.154.98.198:54924] AH01071: Got error 'Primary script unknown', referer: www.google.com
[Sat May 09 11:01:25.993964 2026] [proxy_fcgi:error] [pid 9186:tid 9227] [client 45.154.98.198:55001] AH01071: Got error 'Primary script unknown', referer: www.google.com
[Sat May 09 11:01:26.225977 2026] [:error] [pid 9293:tid 9313] [client 45.154.98.198:58796] [client 45.154.98.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "af6jhpR__qEzV5O6Z2NMBwAAANA"], referer: www.google.com
[Sat May 09 11:01:26.226260 2026] [:error] [pid 9293:tid 9310] [client 45.154.98.198:58797] [client 45.154.98.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/"] [unique_id "af6jhpR__qEzV5O6Z2NMCAAAAM0"]
[Sat May 09 11:01:26.228966 2026] [:error] [pid 9293:tid 9304] [client 45.154.98.198:58801] [client 45.154.98.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "af6jhpR__qEzV5O6Z2NMCQAAAMc"], referer: www.google.com
[Sat May 09 11:01:26.479873 2026] [:error] [pid 9186:tid 9236] [client 45.154.98.198:55001] [client 45.154.98.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "af6jhhW4eFOEw1mKOgKrAAAAAEo"], referer: www.google.com
[Sat May 09 11:01:26.727703 2026] [:error] [pid 9293:tid 9317] [client 45.154.98.198:49282] [client 45.154.98.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "af6jhpR__qEzV5O6Z2NMEgAAANQ"], referer: www.google.com
[Sat May 09 11:01:26.978252 2026] [:error] [pid 9293:tid 9307] [client 45.154.98.198:52077] [client 45.154.98.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "af6jhpR__qEzV5O6Z2NMEwAAAMo"], referer: www.google.com
[Sat May 09 11:01:27.007880 2026] [proxy_fcgi:error] [pid 9293:tid 9303] [client 45.154.98.198:62774] AH01071: Got error 'Primary script unknown', referer: www.google.com
[Sat May 09 11:01:27.229689 2026] [:error] [pid 9833:tid 9850] [client 45.154.98.198:54905] [client 45.154.98.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "af6jhyM9JmxIS0KGZUBewwAAAYw"], referer: www.google.com
[Sat May 09 11:01:27.265434 2026] [proxy_fcgi:error] [pid 9293:tid 9310] [client 45.154.98.198:62774] AH01071: Got error 'Primary script unknown', referer: www.google.com
[Sat May 09 11:01:27.479531 2026] [:error] [pid 9920:tid 9927] [client 45.154.98.198:57685] [client 45.154.98.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "af6jh0xitGYhlzgZb5aorAAAAcU"], referer: www.google.com
[Sat May 09 11:01:27.500250 2026] [:error] [pid 9186:tid 9228] [client 45.154.98.198:54924] [client 45.154.98.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/"] [unique_id "af6jhxW4eFOEw1mKOgKrAQAAAEI"]
[Sat May 09 11:01:27.726200 2026] [:error] [pid 9186:tid 9235] [client 45.154.98.198:59510] [client 45.154.98.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "af6jhxW4eFOEw1mKOgKrBAAAAEk"], referer: www.google.com
[Sat May 09 11:01:27.729913 2026] [:error] [pid 9293:tid 9304] [client 45.154.98.198:62774] [client 45.154.98.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "af6jh5R__qEzV5O6Z2NMGgAAAMc"], referer: www.google.com
[Sat May 09 11:01:28.001097 2026] [:error] [pid 9663:tid 9686] [client 45.154.98.198:61676] [client 45.154.98.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/"] [unique_id "af6jiJcWIu01SCxbjwsHJwAAARQ"]
[Sat May 09 11:01:28.501414 2026] [:error] [pid 9187:tid 9273] [client 45.154.98.198:49411] [client 45.154.98.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/"] [unique_id "af6jiBC7An6gkXsRsaFClQAAAJQ"]
[Sat May 09 11:01:28.727518 2026] [:error] [pid 9187:tid 9264] [client 45.154.98.198:64400] [client 45.154.98.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "af6jiBC7An6gkXsRsaFCmAAAAIs"], referer: www.google.com
[Sat May 09 11:01:28.734028 2026] [:error] [pid 9293:tid 9312] [client 45.154.98.198:64402] [client 45.154.98.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "af6jiJR__qEzV5O6Z2NMHQAAAM8"], referer: www.google.com
[Sat May 09 11:01:29.738951 2026] [:error] [pid 9833:tid 9854] [client 45.154.98.198:56298] [client 45.154.98.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "af6jiSM9JmxIS0KGZUBexwAAAZA"], referer: www.google.com
[Sat May 09 11:01:29.742073 2026] [:error] [pid 9920:tid 9928] [client 45.154.98.198:56295] [client 45.154.98.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "af6jiUxitGYhlzgZb5aotgAAAcY"], referer: www.google.com
[Sat May 09 11:01:30.734643 2026] [:error] [pid 9187:tid 9258] [client 45.154.98.198:62377] [client 45.154.98.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "af6jihC7An6gkXsRsaFCmgAAAIU"], referer: www.google.com
[Sat May 09 11:01:30.737406 2026] [:error] [pid 9187:tid 9253] [client 45.154.98.198:62392] [client 45.154.98.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "af6jihC7An6gkXsRsaFCmwAAAIA"], referer: www.google.com
[Sat May 09 11:01:31.727632 2026] [:error] [pid 9187:tid 9270] [client 45.154.98.198:51109] [client 45.154.98.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "af6jixC7An6gkXsRsaFCoAAAAJE"], referer: www.google.com
[Sat May 09 11:01:31.745755 2026] [:error] [pid 9663:tid 9683] [client 45.154.98.198:51125] [client 45.154.98.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "af6ji5cWIu01SCxbjwsHLQAAARE"], referer: www.google.com
[Sat May 09 11:01:32.757909 2026] [:error] [pid 9186:tid 9239] [client 45.154.98.198:54274] [client 45.154.98.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "af6jjBW4eFOEw1mKOgKrBgAAAE0"], referer: www.google.com
[Mon May 11 11:54:11.846697 2026] [:error] [pid 65259:tid 65274] [client 160.30.179.145:60000] [client 160.30.179.145] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env"] [unique_id "agFS4wPsXLnMa32ma5BvtAAAAAY"]
[Mon May 11 15:09:27.926457 2026] [:error] [pid 4645:tid 4657] [client 34.186.239.78:49074] [client 34.186.239.78] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.git/config"] [unique_id "agGAp3y4dxn8-Cx5vOWDNAAAAEk"]
[Mon May 11 15:36:15.762400 2026] [:error] [pid 58616:tid 58668] [client 34.152.0.188:53368] [client 34.152.0.188] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dwelectservices.com.au"] [uri "/.git/config"] [unique_id "agGG79nsbeF5ioCAecjUswAAANY"]
[Mon May 11 18:46:33.834900 2026] [:error] [pid 58677:tid 58706] [client 57.151.137.129:6314] [client 57.151.137.129] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 57.151.137.129, incrementing ddos counter"] [hostname "dwelectservices.com.au"] [uri "/wp/xmlrpc.php"] [unique_id "agGziRasRhyteIXf1RVYwwAAAJI"]
[Tue May 12 00:13:50.111984 2026] [:error] [pid 58750:tid 58763] [client 34.88.124.243:44506] [client 34.88.124.243] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dwelectservices.com.au"] [uri "/.git/config"] [unique_id "agIAPjBVaNG3wJtPBU_DhQAAAUs"]
[Tue May 12 04:42:20.541438 2026] [:error] [pid 40061:tid 40075] [client 176.65.139.238:53668] [client 176.65.139.238] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/app/.env"] [unique_id "agI_LLycIKt8hxHMBYt5AwAAAMw"]
[Wed May 13 07:52:42.421672 2026] [:error] [pid 23887:tid 23913] [client 34.94.86.8:52884] [client 34.94.86.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.git/config"] [unique_id "agO9StSKmvZJZkXBFDAMDQAAANI"]
[Wed May 13 09:44:29.899529 2026] [proxy_fcgi:error] [pid 3259:tid 3268] [client 20.48.166.247:17092] AH01071: Got error 'Primary script unknown'
[Wed May 13 09:44:30.114877 2026] [proxy_fcgi:error] [pid 3259:tid 3266] [client 20.48.166.247:17092] AH01071: Got error 'Primary script unknown'
[Wed May 13 09:44:30.330052 2026] [proxy_fcgi:error] [pid 3259:tid 3285] [client 20.48.166.247:17092] AH01071: Got error 'Primary script unknown'
[Wed May 13 09:44:30.545685 2026] [proxy_fcgi:error] [pid 3259:tid 3275] [client 20.48.166.247:17092] AH01071: Got error 'Primary script unknown'
[Wed May 13 09:44:30.768184 2026] [proxy_fcgi:error] [pid 3259:tid 3276] [client 20.48.166.247:17092] AH01071: Got error 'Primary script unknown'
[Wed May 13 09:44:30.985428 2026] [proxy_fcgi:error] [pid 3259:tid 3277] [client 20.48.166.247:17092] AH01071: Got error 'Primary script unknown'
[Wed May 13 09:44:31.217311 2026] [proxy_fcgi:error] [pid 3259:tid 3280] [client 20.48.166.247:17092] AH01071: Got error 'Primary script unknown'
[Wed May 13 09:44:31.432632 2026] [proxy_fcgi:error] [pid 3259:tid 3265] [client 20.48.166.247:17092] AH01071: Got error 'Primary script unknown'
[Wed May 13 09:44:31.648460 2026] [proxy_fcgi:error] [pid 3259:tid 3264] [client 20.48.166.247:17092] AH01071: Got error 'Primary script unknown'
[Wed May 13 09:44:31.863763 2026] [proxy_fcgi:error] [pid 3259:tid 3270] [client 20.48.166.247:17092] AH01071: Got error 'Primary script unknown'
[Wed May 13 09:44:32.074851 2026] [:error] [pid 3259:tid 3261] [client 20.48.166.247:17092] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/casp3.php"] [unique_id "agPXgOWJB4YwcPVLeAq2-wAAAQA"]
[Wed May 13 09:44:32.548801 2026] [:error] [pid 3259:tid 3282] [client 20.48.166.247:17100] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/casp3.php"] [unique_id "agPXgOWJB4YwcPVLeAq2_gAAARU"]
[Wed May 13 09:44:33.045449 2026] [:error] [pid 23787:tid 23871] [client 20.48.166.247:17024] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/casp3.php"] [unique_id "agPXgR1cs5wE7VT6wirDaAAAAJc"]
[Wed May 13 09:44:33.541391 2026] [:error] [pid 3259:tid 3273] [client 20.48.166.247:17040] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/casp3.php"] [unique_id "agPXgeWJB4YwcPVLeAq3AwAAAQw"]
[Wed May 13 09:44:33.967591 2026] [:error] [pid 3259:tid 3277] [client 20.48.166.247:17064] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/birlingsless.php"] [unique_id "agPXgeWJB4YwcPVLeAq3CAAAARA"]
[Wed May 13 09:44:34.421501 2026] [:error] [pid 3259:tid 3265] [client 20.48.166.247:17086] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/birlingsless.php"] [unique_id "agPXguWJB4YwcPVLeAq3DQAAAQQ"]
[Wed May 13 09:44:34.901753 2026] [:error] [pid 23782:tid 23833] [client 20.48.166.247:17043] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/birlingsless.php"] [unique_id "agPXgiBrKFYHXUGnR-qU-wAAAEw"]
[Wed May 13 09:44:35.343047 2026] [:error] [pid 23887:tid 23919] [client 20.48.166.247:17057] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/birlingsless.php"] [unique_id "agPXg9SKmvZJZkXBFDAyDwAAANg"]
[Wed May 13 09:44:35.765944 2026] [:error] [pid 23887:tid 23911] [client 20.48.166.247:17108] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/unvouc.php"] [unique_id "agPXg9SKmvZJZkXBFDAyEAAAANA"]
[Wed May 13 09:44:36.261062 2026] [:error] [pid 3259:tid 3274] [client 20.48.166.247:17063] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/unvouc.php"] [unique_id "agPXhOWJB4YwcPVLeAq3FgAAAQ0"]
[Wed May 13 09:44:36.713414 2026] [:error] [pid 23887:tid 23900] [client 20.48.166.247:17076] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/unvouc.php"] [unique_id "agPXhNSKmvZJZkXBFDAyFAAAAMU"]
[Wed May 13 09:44:37.132309 2026] [:error] [pid 23887:tid 23916] [client 20.48.166.247:17356] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/unvouc.php"] [unique_id "agPXhdSKmvZJZkXBFDAyFwAAANU"]
[Wed May 13 09:44:37.556368 2026] [:error] [pid 23780:tid 23803] [client 20.48.166.247:17049] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-signin.php"] [unique_id "agPXhXXgOibPjrXgeTBXxQAAAAk"]
[Wed May 13 09:44:38.040661 2026] [:error] [pid 3259:tid 3265] [client 20.48.166.247:17032] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-signin.php"] [unique_id "agPXhuWJB4YwcPVLeAq3HQAAAQQ"]
[Wed May 13 09:44:38.503869 2026] [:error] [pid 3259:tid 3275] [client 20.48.166.247:17082] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-signin.php"] [unique_id "agPXhuWJB4YwcPVLeAq3IgAAAQ4"]
[Wed May 13 09:44:38.919553 2026] [:error] [pid 23887:tid 23903] [client 20.48.166.247:17072] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-signin.php"] [unique_id "agPXhtSKmvZJZkXBFDAyHwAAAMg"]
[Wed May 13 09:44:39.376204 2026] [:error] [pid 23887:tid 23919] [client 20.48.166.247:17118] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/post-comments-form/"] [unique_id "agPXh9SKmvZJZkXBFDAyJAAAANg"]
[Wed May 13 09:44:40.206931 2026] [:error] [pid 23887:tid 23905] [client 20.48.166.247:17056] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/post-comments-form/"] [unique_id "agPXiNSKmvZJZkXBFDAyLwAAAMo"]
[Wed May 13 09:44:41.279174 2026] [:error] [pid 23787:tid 23851] [client 20.48.166.247:17066] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/post-comments-form/"] [unique_id "agPXiR1cs5wE7VT6wirDgQAAAIM"]
[Wed May 13 09:44:41.996035 2026] [:error] [pid 23887:tid 23896] [client 20.48.166.247:17084] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/post-comments-form/"] [unique_id "agPXidSKmvZJZkXBFDAyNgAAAME"]
[Wed May 13 09:44:42.463764 2026] [:error] [pid 23887:tid 23912] [client 20.48.166.247:17029] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/js/"] [unique_id "agPXitSKmvZJZkXBFDAyOAAAANE"]
[Wed May 13 09:44:42.905864 2026] [:error] [pid 3259:tid 3277] [client 20.48.166.247:17104] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/js/"] [unique_id "agPXiuWJB4YwcPVLeAq3LgAAARA"]
[Wed May 13 09:44:43.334475 2026] [:error] [pid 23787:tid 23850] [client 20.48.166.247:17080] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/js/"] [unique_id "agPXix1cs5wE7VT6wirDhAAAAII"]
[Wed May 13 09:44:43.751421 2026] [:error] [pid 23787:tid 23868] [client 20.48.166.247:17085] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/js/"] [unique_id "agPXix1cs5wE7VT6wirDhQAAAJQ"]
[Wed May 13 09:44:44.182335 2026] [:error] [pid 23782:tid 23824] [client 20.48.166.247:17067] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-links.php"] [unique_id "agPXjCBrKFYHXUGnR-qVAgAAAEM"]
[Wed May 13 09:44:44.607494 2026] [:error] [pid 23782:tid 23840] [client 20.48.166.247:17142] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-links.php"] [unique_id "agPXjCBrKFYHXUGnR-qVBAAAAFM"]
[Wed May 13 09:44:45.813417 2026] [:error] [pid 3259:tid 3269] [client 20.48.166.247:17058] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-links.php"] [unique_id "agPXjeWJB4YwcPVLeAq3OgAAAQg"]
[Wed May 13 09:44:47.347122 2026] [:error] [pid 23782:tid 23825] [client 20.48.166.247:17054] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-links.php"] [unique_id "agPXjyBrKFYHXUGnR-qVBgAAAEQ"]
[Wed May 13 09:44:47.818370 2026] [:error] [pid 3259:tid 3265] [client 20.48.166.247:17120] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/upload/wp-info.php"] [unique_id "agPXj-WJB4YwcPVLeAq3RgAAAQQ"]
[Wed May 13 09:44:48.252405 2026] [:error] [pid 3259:tid 3261] [client 20.48.166.247:17116] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/upload/wp-info.php"] [unique_id "agPXkOWJB4YwcPVLeAq3SAAAAQA"]
[Wed May 13 09:44:48.692805 2026] [:error] [pid 23787:tid 23865] [client 20.48.166.247:17149] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/upload/wp-info.php"] [unique_id "agPXkB1cs5wE7VT6wirDjwAAAJE"]
[Wed May 13 09:44:49.115430 2026] [:error] [pid 23782:tid 23826] [client 20.48.166.247:17117] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/upload/wp-info.php"] [unique_id "agPXkSBrKFYHXUGnR-qVCAAAAEU"]
[Wed May 13 09:44:49.534776 2026] [:error] [pid 23887:tid 23907] [client 20.48.166.247:17134] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/colour.php"] [unique_id "agPXkdSKmvZJZkXBFDAyRQAAAMw"]
[Wed May 13 09:44:49.955283 2026] [:error] [pid 23887:tid 23904] [client 20.48.166.247:17047] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/colour.php"] [unique_id "agPXkdSKmvZJZkXBFDAyRgAAAMk"]
[Wed May 13 09:44:50.417553 2026] [:error] [pid 3259:tid 3278] [client 20.48.166.247:17026] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/colour.php"] [unique_id "agPXkuWJB4YwcPVLeAq3VQAAARE"]
[Wed May 13 09:44:50.859247 2026] [:error] [pid 23787:tid 23872] [client 20.48.166.247:17053] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/colour.php"] [unique_id "agPXkh1cs5wE7VT6wirDkwAAAJg"]
[Wed May 13 09:44:51.279005 2026] [:error] [pid 23887:tid 23898] [client 20.48.166.247:17071] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/half.php"] [unique_id "agPXk9SKmvZJZkXBFDAyUQAAAMM"]
[Wed May 13 09:44:51.903116 2026] [:error] [pid 23787:tid 23848] [client 20.48.166.247:17107] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/half.php"] [unique_id "agPXkx1cs5wE7VT6wirDlAAAAIA"]
[Wed May 13 09:44:52.516907 2026] [:error] [pid 3259:tid 3273] [client 20.48.166.247:17081] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/half.php"] [unique_id "agPXlOWJB4YwcPVLeAq3WQAAAQw"]
[Wed May 13 09:44:53.364125 2026] [:error] [pid 3259:tid 3264] [client 20.48.166.247:17088] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/half.php"] [unique_id "agPXleWJB4YwcPVLeAq3WgAAAQM"]
[Wed May 13 09:44:53.945340 2026] [:error] [pid 3259:tid 3278] [client 20.48.166.247:17344] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2P.php"] [unique_id "agPXleWJB4YwcPVLeAq3XQAAARE"]
[Wed May 13 09:44:54.415128 2026] [:error] [pid 23780:tid 23808] [client 20.48.166.247:17370] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2P.php"] [unique_id "agPXlnXgOibPjrXgeTBX0gAAAA4"]
[Wed May 13 09:44:54.846699 2026] [:error] [pid 23782:tid 23823] [client 20.48.166.247:17031] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2P.php"] [unique_id "agPXliBrKFYHXUGnR-qVDQAAAEI"]
[Wed May 13 09:44:55.272621 2026] [:error] [pid 3259:tid 3271] [client 20.48.166.247:17124] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2P.php"] [unique_id "agPXl-WJB4YwcPVLeAq3YgAAAQo"]
[Wed May 13 09:44:55.770100 2026] [:error] [pid 23787:tid 23861] [client 20.48.166.247:17068] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tires.php"] [unique_id "agPXlx1cs5wE7VT6wirDmAAAAI0"]
[Wed May 13 09:44:56.231978 2026] [:error] [pid 23787:tid 23868] [client 20.48.166.247:17059] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tires.php"] [unique_id "agPXmB1cs5wE7VT6wirDmgAAAJQ"]
[Wed May 13 09:44:56.660905 2026] [:error] [pid 23787:tid 23854] [client 20.48.166.247:17132] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tires.php"] [unique_id "agPXmB1cs5wE7VT6wirDnAAAAIY"]
[Wed May 13 09:44:57.165188 2026] [:error] [pid 3259:tid 3283] [client 20.48.166.247:17036] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tires.php"] [unique_id "agPXmeWJB4YwcPVLeAq3ZgAAARY"]
[Wed May 13 09:44:57.768508 2026] [:error] [pid 3259:tid 3273] [client 20.48.166.247:17045] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aevly.php"] [unique_id "agPXmeWJB4YwcPVLeAq3aAAAAQw"]
[Wed May 13 09:44:59.089020 2026] [:error] [pid 3259:tid 3278] [client 20.48.166.247:17037] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aevly.php"] [unique_id "agPXm-WJB4YwcPVLeAq3awAAARE"]
[Wed May 13 09:44:59.621195 2026] [:error] [pid 23780:tid 23809] [client 20.48.166.247:17075] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aevly.php"] [unique_id "agPXm3XgOibPjrXgeTBX3AAAAA8"]
[Wed May 13 09:45:00.037595 2026] [:error] [pid 23780:tid 23799] [client 20.48.166.247:17123] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aevly.php"] [unique_id "agPXnHXgOibPjrXgeTBX3QAAAAU"]
[Wed May 13 09:45:00.460409 2026] [:error] [pid 23780:tid 23796] [client 20.48.166.247:17090] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wordpress/wp-admin/maint/"] [unique_id "agPXnHXgOibPjrXgeTBX3wAAAAI"]
[Wed May 13 09:45:00.901277 2026] [:error] [pid 23787:tid 23872] [client 20.48.166.247:17098] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wordpress/wp-admin/maint/"] [unique_id "agPXnB1cs5wE7VT6wirDqAAAAJg"]
[Wed May 13 09:45:01.332892 2026] [:error] [pid 23887:tid 23917] [client 20.48.166.247:17062] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wordpress/wp-admin/maint/"] [unique_id "agPXndSKmvZJZkXBFDAyWwAAANY"]
[Wed May 13 09:45:02.079690 2026] [:error] [pid 3259:tid 3273] [client 20.48.166.247:17039] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wordpress/wp-admin/maint/"] [unique_id "agPXnuWJB4YwcPVLeAq3cQAAAQw"]
[Wed May 13 09:45:02.973950 2026] [:error] [pid 23787:tid 23863] [client 20.48.166.247:17060] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-block.php"] [unique_id "agPXnh1cs5wE7VT6wirDqwAAAI8"]
[Wed May 13 09:45:03.795584 2026] [:error] [pid 23782:tid 23838] [client 20.48.166.247:17070] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-block.php"] [unique_id "agPXnyBrKFYHXUGnR-qVDwAAAFE"]
[Wed May 13 09:45:04.250664 2026] [:error] [pid 3259:tid 3262] [client 20.48.166.247:17126] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-block.php"] [unique_id "agPXoOWJB4YwcPVLeAq3dwAAAQE"]
[Wed May 13 09:45:04.690309 2026] [:error] [pid 23887:tid 23900] [client 20.48.166.247:17073] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-block.php"] [unique_id "agPXoNSKmvZJZkXBFDAyXQAAAMU"]
[Wed May 13 09:45:05.148886 2026] [:error] [pid 23887:tid 23911] [client 20.48.166.247:17122] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/like.php"] [unique_id "agPXodSKmvZJZkXBFDAyXgAAANA"]
[Wed May 13 09:45:05.677336 2026] [:error] [pid 23887:tid 23913] [client 20.48.166.247:17112] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/like.php"] [unique_id "agPXodSKmvZJZkXBFDAyYQAAANI"]
[Wed May 13 09:45:06.135304 2026] [:error] [pid 23782:tid 23821] [client 20.48.166.247:17065] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/like.php"] [unique_id "agPXoiBrKFYHXUGnR-qVEQAAAEA"]
[Wed May 13 09:45:06.552993 2026] [:error] [pid 23787:tid 23869] [client 20.48.166.247:17345] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/like.php"] [unique_id "agPXoh1cs5wE7VT6wirDrgAAAJU"]
[Wed May 13 09:45:07.107290 2026] [:error] [pid 23787:tid 23864] [client 20.48.166.247:17091] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kj.php"] [unique_id "agPXox1cs5wE7VT6wirDrwAAAJA"]
[Wed May 13 09:45:07.553139 2026] [:error] [pid 3259:tid 3277] [client 20.48.166.247:17360] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kj.php"] [unique_id "agPXo-WJB4YwcPVLeAq3eAAAARA"]
[Wed May 13 09:45:08.006742 2026] [:error] [pid 23787:tid 23853] [client 20.48.166.247:17102] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kj.php"] [unique_id "agPXpB1cs5wE7VT6wirDsAAAAIU"]
[Wed May 13 09:45:08.540638 2026] [:error] [pid 23780:tid 23802] [client 20.48.166.247:17346] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kj.php"] [unique_id "agPXpHXgOibPjrXgeTBX6AAAAAg"]
[Wed May 13 09:45:08.971766 2026] [:error] [pid 23787:tid 23865] [client 20.48.166.247:17144] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/about.php"] [unique_id "agPXpB1cs5wE7VT6wirDsgAAAJE"]
[Wed May 13 09:45:09.390257 2026] [:error] [pid 23787:tid 23871] [client 20.48.166.247:17105] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/about.php"] [unique_id "agPXpR1cs5wE7VT6wirDswAAAJc"]
[Wed May 13 09:45:09.851779 2026] [:error] [pid 3259:tid 3269] [client 20.48.166.247:17035] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/about.php"] [unique_id "agPXpeWJB4YwcPVLeAq3egAAAQg"]
[Wed May 13 09:45:10.316350 2026] [:error] [pid 23887:tid 23917] [client 20.48.166.247:17042] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/about.php"] [unique_id "agPXptSKmvZJZkXBFDAyaAAAANY"]
[Wed May 13 09:45:10.787805 2026] [:error] [pid 3259:tid 3264] [client 20.48.166.247:17106] [client 20.48.166.247] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "agPXpuWJB4YwcPVLeAq3fQAAAQM"]
[Wed May 13 09:45:11.267428 2026] [:error] [pid 3259:tid 3263] [client 20.48.166.247:17128] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wpxml.php"] [unique_id "agPXp-WJB4YwcPVLeAq3fgAAAQI"]
[Wed May 13 09:45:11.700337 2026] [:error] [pid 23780:tid 23798] [client 20.48.166.247:17093] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wpxml.php"] [unique_id "agPXp3XgOibPjrXgeTBX7gAAAAQ"]
[Wed May 13 09:45:12.126532 2026] [:error] [pid 23787:tid 23860] [client 20.48.166.247:17078] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wpxml.php"] [unique_id "agPXqB1cs5wE7VT6wirDuQAAAIw"]
[Wed May 13 09:45:12.557370 2026] [:error] [pid 23787:tid 23857] [client 20.48.166.247:17388] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wpxml.php"] [unique_id "agPXqB1cs5wE7VT6wirDuwAAAIk"]
[Wed May 13 09:45:13.010927 2026] [:error] [pid 23887:tid 23899] [client 20.48.166.247:17115] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bob.php"] [unique_id "agPXqdSKmvZJZkXBFDAybwAAAMQ"]
[Wed May 13 09:45:13.450538 2026] [:error] [pid 23787:tid 23871] [client 20.48.166.247:17027] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bob.php"] [unique_id "agPXqR1cs5wE7VT6wirDvgAAAJc"]
[Wed May 13 09:45:13.872083 2026] [:error] [pid 3259:tid 3266] [client 20.48.166.247:17103] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bob.php"] [unique_id "agPXqeWJB4YwcPVLeAq3gQAAAQU"]
[Wed May 13 09:45:14.378910 2026] [:error] [pid 23787:tid 23872] [client 20.48.166.247:17030] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bob.php"] [unique_id "agPXqh1cs5wE7VT6wirDvwAAAJg"]
[Wed May 13 09:45:14.898116 2026] [:error] [pid 23787:tid 23848] [client 20.48.166.247:17384] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/spawns.php"] [unique_id "agPXqh1cs5wE7VT6wirDwAAAAIA"]
[Wed May 13 09:45:16.222831 2026] [:error] [pid 23782:tid 23824] [client 20.48.166.247:17114] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/spawns.php"] [unique_id "agPXrCBrKFYHXUGnR-qVJgAAAEM"]
[Wed May 13 09:45:18.743971 2026] [:error] [pid 23787:tid 23850] [client 20.48.166.247:17376] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/spawns.php"] [unique_id "agPXrh1cs5wE7VT6wirDxgAAAII"]
[Wed May 13 09:45:19.713511 2026] [:error] [pid 23787:tid 23867] [client 20.48.166.247:17140] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/spawns.php"] [unique_id "agPXrx1cs5wE7VT6wirDzQAAAJM"]
[Wed May 13 09:45:20.460508 2026] [:error] [pid 3259:tid 3277] [client 20.48.166.247:17371] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/t3s.php"] [unique_id "agPXsOWJB4YwcPVLeAq3pgAAARA"]
[Wed May 13 09:45:21.021872 2026] [:error] [pid 3259:tid 3270] [client 20.48.166.247:17348] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/t3s.php"] [unique_id "agPXseWJB4YwcPVLeAq3rQAAAQk"]
[Wed May 13 09:45:21.441539 2026] [:error] [pid 23782:tid 23832] [client 20.48.166.247:17151] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/t3s.php"] [unique_id "agPXsSBrKFYHXUGnR-qVLAAAAEs"]
[Wed May 13 09:45:21.892947 2026] [:error] [pid 3259:tid 3273] [client 20.48.166.247:17050] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/t3s.php"] [unique_id "agPXseWJB4YwcPVLeAq3swAAAQw"]
[Wed May 13 09:45:22.329620 2026] [:error] [pid 3259:tid 3262] [client 20.48.166.247:17096] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/"] [unique_id "agPXsuWJB4YwcPVLeAq3tgAAAQE"]
[Wed May 13 09:45:22.758058 2026] [:error] [pid 23787:tid 23858] [client 20.48.166.247:17119] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/"] [unique_id "agPXsh1cs5wE7VT6wirD1gAAAIo"]
[Wed May 13 09:45:23.218882 2026] [:error] [pid 23780:tid 23807] [client 20.48.166.247:17087] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/"] [unique_id "agPXs3XgOibPjrXgeTBX9QAAAA0"]
[Wed May 13 09:45:23.666086 2026] [:error] [pid 3259:tid 3277] [client 20.48.166.247:17288] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/"] [unique_id "agPXs-WJB4YwcPVLeAq3uQAAARA"]
[Wed May 13 09:45:24.106916 2026] [:error] [pid 23787:tid 23860] [client 20.48.166.247:17365] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x/"] [unique_id "agPXtB1cs5wE7VT6wirD3gAAAIw"]
[Wed May 13 09:45:24.683232 2026] [:error] [pid 23887:tid 23896] [client 20.48.166.247:17403] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x/"] [unique_id "agPXtNSKmvZJZkXBFDAycAAAAME"]
[Wed May 13 09:45:25.166227 2026] [:error] [pid 3259:tid 3270] [client 20.48.166.247:17141] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x/"] [unique_id "agPXteWJB4YwcPVLeAq3wQAAAQk"]
[Wed May 13 09:45:25.682370 2026] [:error] [pid 23787:tid 23858] [client 20.48.166.247:17139] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x/"] [unique_id "agPXtR1cs5wE7VT6wirD5gAAAIo"]
[Wed May 13 09:45:26.205472 2026] [:error] [pid 23787:tid 23859] [client 20.48.166.247:17099] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/colors/modern/"] [unique_id "agPXth1cs5wE7VT6wirD6AAAAIs"]
[Wed May 13 09:45:26.813256 2026] [:error] [pid 23787:tid 23860] [client 20.48.166.247:17061] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/colors/modern/"] [unique_id "agPXth1cs5wE7VT6wirD6gAAAIw"]
[Wed May 13 09:45:27.866774 2026] [:error] [pid 23887:tid 23919] [client 20.48.166.247:17379] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/colors/modern/"] [unique_id "agPXt9SKmvZJZkXBFDAycgAAANg"]
[Wed May 13 09:45:28.417142 2026] [:error] [pid 23782:tid 23827] [client 20.48.166.247:17131] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/colors/modern/"] [unique_id "agPXuCBrKFYHXUGnR-qVMwAAAEY"]
[Wed May 13 09:45:28.958546 2026] [:error] [pid 23782:tid 23829] [client 20.48.166.247:17373] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/js/"] [unique_id "agPXuCBrKFYHXUGnR-qVNQAAAEg"]
[Wed May 13 09:45:29.771046 2026] [:error] [pid 23782:tid 23825] [client 20.48.166.247:17069] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/js/"] [unique_id "agPXuSBrKFYHXUGnR-qVOQAAAEQ"]
[Wed May 13 09:45:30.467329 2026] [:error] [pid 23780:tid 23808] [client 20.48.166.247:17351] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/js/"] [unique_id "agPXunXgOibPjrXgeTBX_AAAAA4"]
[Wed May 13 09:45:31.425932 2026] [proxy_fcgi:error] [pid 23782:tid 23832] [client 20.48.166.247:17038] AH01071: Got error 'Primary script unknown'
[Wed May 13 09:45:31.659559 2026] [proxy_fcgi:error] [pid 23782:tid 23841] [client 20.48.166.247:17038] AH01071: Got error 'Primary script unknown'
[Wed May 13 09:45:31.875298 2026] [proxy_fcgi:error] [pid 23782:tid 23833] [client 20.48.166.247:17038] AH01071: Got error 'Primary script unknown'
[Wed May 13 09:45:32.102527 2026] [proxy_fcgi:error] [pid 23782:tid 23822] [client 20.48.166.247:17038] AH01071: Got error 'Primary script unknown'
[Wed May 13 09:45:32.316010 2026] [proxy_fcgi:error] [pid 23782:tid 23835] [client 20.48.166.247:17038] AH01071: Got error 'Primary script unknown'
[Wed May 13 09:45:32.526561 2026] [proxy_fcgi:error] [pid 23782:tid 23823] [client 20.48.166.247:17038] AH01071: Got error 'Primary script unknown'
[Wed May 13 09:45:32.737228 2026] [proxy_fcgi:error] [pid 23782:tid 23844] [client 20.48.166.247:17038] AH01071: Got error 'Primary script unknown'
[Wed May 13 09:45:32.962363 2026] [proxy_fcgi:error] [pid 23782:tid 23843] [client 20.48.166.247:17038] AH01071: Got error 'Primary script unknown'
[Wed May 13 09:45:33.172431 2026] [proxy_fcgi:error] [pid 23782:tid 23838] [client 20.48.166.247:17038] AH01071: Got error 'Primary script unknown'
[Wed May 13 09:45:33.382306 2026] [proxy_fcgi:error] [pid 23782:tid 23834] [client 20.48.166.247:17038] AH01071: Got error 'Primary script unknown'
[Wed May 13 09:45:33.732066 2026] [:error] [pid 23782:tid 23827] [client 20.48.166.247:17038] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/details/"] [unique_id "agPXvSBrKFYHXUGnR-qVRwAAAEY"]
[Wed May 13 09:45:34.574569 2026] [:error] [pid 23787:tid 23851] [client 20.48.166.247:17374] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/details/"] [unique_id "agPXvh1cs5wE7VT6wirD_QAAAIM"]
[Wed May 13 09:45:35.200888 2026] [:error] [pid 23782:tid 23836] [client 20.48.166.247:17028] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/details/"] [unique_id "agPXvyBrKFYHXUGnR-qVSgAAAE8"]
[Wed May 13 09:45:35.649383 2026] [:error] [pid 23780:tid 23810] [client 20.48.166.247:17113] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/details/"] [unique_id "agPXv3XgOibPjrXgeTBYAQAAABA"]
[Wed May 13 09:45:36.129207 2026] [:error] [pid 23780:tid 23807] [client 20.48.166.247:17312] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.dj/index.php"] [unique_id "agPXwHXgOibPjrXgeTBYAgAAAA0"]
[Wed May 13 09:45:36.573493 2026] [:error] [pid 23787:tid 23850] [client 20.48.166.247:17125] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.dj/index.php"] [unique_id "agPXwB1cs5wE7VT6wirEAwAAAII"]
[Wed May 13 09:45:37.012877 2026] [:error] [pid 23787:tid 23852] [client 20.48.166.247:17127] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.dj/index.php"] [unique_id "agPXwR1cs5wE7VT6wirEBAAAAIQ"]
[Wed May 13 09:45:37.434158 2026] [:error] [pid 23887:tid 23917] [client 20.48.166.247:17359] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.dj/index.php"] [unique_id "agPXwdSKmvZJZkXBFDAyfwAAANY"]
[Wed May 13 09:45:37.871379 2026] [:error] [pid 23787:tid 23862] [client 20.48.166.247:17308] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "agPXwR1cs5wE7VT6wirEBwAAAI4"]
[Wed May 13 09:45:38.310249 2026] [:error] [pid 23787:tid 23857] [client 20.48.166.247:17136] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "agPXwh1cs5wE7VT6wirECwAAAIk"]
[Wed May 13 09:45:38.749068 2026] [:error] [pid 23780:tid 23796] [client 20.48.166.247:17048] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "agPXwnXgOibPjrXgeTBYBAAAAAI"]
[Wed May 13 09:45:39.175101 2026] [:error] [pid 23782:tid 23825] [client 20.48.166.247:17129] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "agPXwyBrKFYHXUGnR-qVTgAAAEQ"]
[Wed May 13 09:45:39.606552 2026] [:error] [pid 23780:tid 23815] [client 20.48.166.247:17110] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.tmb/"] [unique_id "agPXw3XgOibPjrXgeTBYBgAAABU"]
[Wed May 13 09:45:40.091937 2026] [:error] [pid 23782:tid 23828] [client 20.48.166.247:17133] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.tmb/"] [unique_id "agPXxCBrKFYHXUGnR-qVUgAAAEc"]
[Wed May 13 09:45:40.511137 2026] [:error] [pid 3259:tid 3268] [client 20.48.166.247:17389] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.tmb/"] [unique_id "agPXxOWJB4YwcPVLeAq38gAAAQc"]
[Wed May 13 09:45:40.951017 2026] [:error] [pid 3259:tid 3277] [client 20.48.166.247:17361] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.tmb/"] [unique_id "agPXxOWJB4YwcPVLeAq39QAAARA"]
[Wed May 13 09:45:41.372029 2026] [:error] [pid 3259:tid 3276] [client 20.48.166.247:17101] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/one.php"] [unique_id "agPXxeWJB4YwcPVLeAq3-AAAAQ8"]
[Wed May 13 09:45:41.799250 2026] [:error] [pid 23887:tid 23904] [client 20.48.166.247:17044] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/one.php"] [unique_id "agPXxdSKmvZJZkXBFDAyhQAAAMk"]
[Wed May 13 09:45:42.311814 2026] [:error] [pid 23887:tid 23910] [client 20.48.166.247:17381] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/one.php"] [unique_id "agPXxtSKmvZJZkXBFDAyhwAAAM8"]
[Wed May 13 09:45:42.748186 2026] [:error] [pid 23780:tid 23804] [client 20.48.166.247:17380] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/one.php"] [unique_id "agPXxnXgOibPjrXgeTBYCgAAAAo"]
[Wed May 13 09:45:43.198604 2026] [:error] [pid 23780:tid 23813] [client 20.48.166.247:17077] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sl.php"] [unique_id "agPXx3XgOibPjrXgeTBYCwAAABM"]
[Wed May 13 09:45:43.663818 2026] [:error] [pid 23780:tid 23801] [client 20.48.166.247:17386] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sl.php"] [unique_id "agPXx3XgOibPjrXgeTBYDAAAAAc"]
[Wed May 13 09:45:44.120089 2026] [:error] [pid 23787:tid 23869] [client 20.48.166.247:17363] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sl.php"] [unique_id "agPXyB1cs5wE7VT6wirEFQAAAJU"]
[Wed May 13 09:45:44.555021 2026] [:error] [pid 23787:tid 23848] [client 20.48.166.247:17367] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sl.php"] [unique_id "agPXyB1cs5wE7VT6wirEFgAAAIA"]
[Wed May 13 09:45:44.973290 2026] [:error] [pid 23787:tid 23868] [client 20.48.166.247:17046] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-temp.php"] [unique_id "agPXyB1cs5wE7VT6wirEGgAAAJQ"]
[Wed May 13 09:45:45.495209 2026] [:error] [pid 23887:tid 23918] [client 20.48.166.247:17143] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-temp.php"] [unique_id "agPXydSKmvZJZkXBFDAyiQAAANc"]
[Wed May 13 09:45:45.943081 2026] [:error] [pid 23887:tid 23897] [client 20.48.166.247:17147] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-temp.php"] [unique_id "agPXydSKmvZJZkXBFDAyiwAAAMI"]
[Wed May 13 09:45:46.394472 2026] [:error] [pid 23780:tid 23794] [client 20.48.166.247:17097] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-temp.php"] [unique_id "agPXynXgOibPjrXgeTBYDgAAAAA"]
[Wed May 13 09:45:46.853296 2026] [:error] [pid 23782:tid 23821] [client 20.48.166.247:17290] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "agPXyiBrKFYHXUGnR-qVWgAAAEA"]
[Wed May 13 09:45:47.300030 2026] [:error] [pid 23887:tid 23911] [client 20.48.166.247:17377] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "agPXy9SKmvZJZkXBFDAyjQAAANA"]
[Wed May 13 09:45:47.732427 2026] [:error] [pid 23780:tid 23799] [client 20.48.166.247:17283] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "agPXy3XgOibPjrXgeTBYFAAAAAU"]
[Wed May 13 09:45:48.154729 2026] [:error] [pid 23782:tid 23827] [client 20.48.166.247:17378] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "agPXzCBrKFYHXUGnR-qVWwAAAEY"]
[Wed May 13 09:45:48.586094 2026] [:error] [pid 3259:tid 3269] [client 20.48.166.247:17025] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xmu.php"] [unique_id "agPXzOWJB4YwcPVLeAq4AgAAAQg"]
[Wed May 13 09:45:49.076441 2026] [:error] [pid 23887:tid 23910] [client 20.48.166.247:17089] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xmu.php"] [unique_id "agPXzdSKmvZJZkXBFDAykwAAAM8"]
[Wed May 13 09:45:49.552855 2026] [:error] [pid 23787:tid 23854] [client 20.48.166.247:17405] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xmu.php"] [unique_id "agPXzR1cs5wE7VT6wirEHgAAAIY"]
[Wed May 13 09:45:50.047910 2026] [:error] [pid 23887:tid 23917] [client 20.48.166.247:17148] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xmu.php"] [unique_id "agPXztSKmvZJZkXBFDAymQAAANY"]
[Wed May 13 09:45:50.534211 2026] [:error] [pid 3259:tid 3275] [client 20.48.166.247:17079] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mode.php"] [unique_id "agPXzuWJB4YwcPVLeAq4BAAAAQ4"]
[Wed May 13 09:45:51.021186 2026] [:error] [pid 23787:tid 23872] [client 20.48.166.247:17362] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mode.php"] [unique_id "agPXzx1cs5wE7VT6wirEHwAAAJg"]
[Wed May 13 09:45:51.438503 2026] [:error] [pid 23887:tid 23901] [client 20.48.166.247:17310] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mode.php"] [unique_id "agPXz9SKmvZJZkXBFDAynAAAAMY"]
[Wed May 13 09:45:51.875051 2026] [:error] [pid 23887:tid 23915] [client 20.48.166.247:17289] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mode.php"] [unique_id "agPXz9SKmvZJZkXBFDAyngAAANQ"]
[Wed May 13 09:45:52.311491 2026] [:error] [pid 23787:tid 23857] [client 20.48.166.247:17382] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "agPX0B1cs5wE7VT6wirEIwAAAIk"]
[Wed May 13 09:45:52.768813 2026] [:error] [pid 23887:tid 23909] [client 20.48.166.247:17094] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "agPX0NSKmvZJZkXBFDAyoAAAAM4"]
[Wed May 13 09:45:53.237910 2026] [:error] [pid 23887:tid 23898] [client 20.48.166.247:17347] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "agPX0dSKmvZJZkXBFDAypQAAAMM"]
[Wed May 13 09:45:53.716668 2026] [:error] [pid 23887:tid 23905] [client 20.48.166.247:17404] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "agPX0dSKmvZJZkXBFDAypgAAAMo"]
[Wed May 13 09:45:54.167957 2026] [:error] [pid 23887:tid 23916] [client 20.48.166.247:17285] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dx.php"] [unique_id "agPX0tSKmvZJZkXBFDAyqgAAANU"]
[Wed May 13 09:45:54.720915 2026] [:error] [pid 23887:tid 23904] [client 20.48.166.247:17121] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dx.php"] [unique_id "agPX0tSKmvZJZkXBFDAyrQAAAMk"]
[Wed May 13 09:45:55.522490 2026] [:error] [pid 3259:tid 3277] [client 20.48.166.247:17352] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dx.php"] [unique_id "agPX0-WJB4YwcPVLeAq4BwAAARA"]
[Wed May 13 09:45:56.604850 2026] [:error] [pid 3259:tid 3280] [client 20.48.166.247:17280] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dx.php"] [unique_id "agPX1OWJB4YwcPVLeAq4CQAAARM"]
[Wed May 13 09:45:59.151262 2026] [:error] [pid 23887:tid 23905] [client 20.48.166.247:17300] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/puc.php"] [unique_id "agPX19SKmvZJZkXBFDAyvgAAAMo"]
[Wed May 13 09:45:59.980088 2026] [:error] [pid 23887:tid 23900] [client 20.48.166.247:17406] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/puc.php"] [unique_id "agPX19SKmvZJZkXBFDAywQAAAMU"]
[Wed May 13 09:46:01.540551 2026] [:error] [pid 23887:tid 23899] [client 20.48.166.247:17387] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/puc.php"] [unique_id "agPX2dSKmvZJZkXBFDAyxwAAAMQ"]
[Wed May 13 09:46:02.050769 2026] [:error] [pid 23780:tid 23801] [client 20.48.166.247:17354] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/puc.php"] [unique_id "agPX2nXgOibPjrXgeTBYFgAAAAc"]
[Wed May 13 09:46:02.516761 2026] [:error] [pid 23887:tid 23916] [client 20.48.166.247:17055] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/themes.php"] [unique_id "agPX2tSKmvZJZkXBFDAyygAAANU"]
[Wed May 13 09:46:02.935025 2026] [:error] [pid 23887:tid 23919] [client 20.48.166.247:17318] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/themes.php"] [unique_id "agPX2tSKmvZJZkXBFDAyzAAAANg"]
[Wed May 13 09:46:03.401157 2026] [:error] [pid 23887:tid 23908] [client 20.48.166.247:17357] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/themes.php"] [unique_id "agPX29SKmvZJZkXBFDAyzgAAAM0"]
[Wed May 13 09:46:03.873978 2026] [:error] [pid 23780:tid 23816] [client 20.48.166.247:17083] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/themes.php"] [unique_id "agPX23XgOibPjrXgeTBYFwAAABY"]
[Wed May 13 09:46:04.312003 2026] [:error] [pid 23787:tid 23851] [client 20.48.166.247:17052] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dx.php"] [unique_id "agPX3B1cs5wE7VT6wirEMQAAAIM"]
[Wed May 13 09:46:04.730343 2026] [:error] [pid 23787:tid 23853] [client 20.48.166.247:17137] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dx.php"] [unique_id "agPX3B1cs5wE7VT6wirEMwAAAIU"]
[Wed May 13 09:46:05.152607 2026] [:error] [pid 23787:tid 23858] [client 20.48.166.247:17145] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dx.php"] [unique_id "agPX3R1cs5wE7VT6wirENAAAAIo"]
[Wed May 13 09:46:05.569097 2026] [:error] [pid 23787:tid 23867] [client 20.48.166.247:17400] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dx.php"] [unique_id "agPX3R1cs5wE7VT6wirENQAAAJM"]
[Wed May 13 09:46:05.982666 2026] [:error] [pid 23787:tid 23861] [client 20.48.166.247:17301] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/awa.php"] [unique_id "agPX3R1cs5wE7VT6wirEOAAAAI0"]
[Wed May 13 09:46:06.410881 2026] [:error] [pid 23787:tid 23857] [client 20.48.166.247:17309] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/awa.php"] [unique_id "agPX3h1cs5wE7VT6wirEOwAAAIk"]
[Wed May 13 09:46:06.833558 2026] [:error] [pid 23787:tid 23869] [client 20.48.166.247:17407] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/awa.php"] [unique_id "agPX3h1cs5wE7VT6wirEPgAAAJU"]
[Wed May 13 09:46:07.301758 2026] [:error] [pid 3259:tid 3278] [client 20.48.166.247:17111] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/awa.php"] [unique_id "agPX3-WJB4YwcPVLeAq4DAAAARE"]
[Wed May 13 09:46:07.718935 2026] [:error] [pid 23780:tid 23810] [client 20.48.166.247:17146] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/11.php"] [unique_id "agPX33XgOibPjrXgeTBYHQAAABA"]
[Wed May 13 09:46:08.149367 2026] [:error] [pid 23887:tid 23902] [client 20.48.166.247:17286] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/11.php"] [unique_id "agPX4NSKmvZJZkXBFDAy0AAAAMc"]
[Wed May 13 09:46:08.593629 2026] [:error] [pid 23887:tid 23904] [client 20.48.166.247:17399] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/11.php"] [unique_id "agPX4NSKmvZJZkXBFDAy0wAAAMk"]
[Wed May 13 09:46:09.020246 2026] [:error] [pid 3259:tid 3281] [client 20.48.166.247:17306] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/11.php"] [unique_id "agPX4eWJB4YwcPVLeAq4DQAAARQ"]
[Wed May 13 09:46:09.517419 2026] [:error] [pid 23887:tid 23896] [client 20.48.166.247:17369] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/p.php"] [unique_id "agPX4dSKmvZJZkXBFDAy1wAAAME"]
[Wed May 13 09:46:10.067892 2026] [:error] [pid 3259:tid 3284] [client 20.48.166.247:17282] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/p.php"] [unique_id "agPX4uWJB4YwcPVLeAq4DgAAARc"]
[Wed May 13 09:46:10.511912 2026] [:error] [pid 23787:tid 23863] [client 20.48.166.247:17333] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/p.php"] [unique_id "agPX4h1cs5wE7VT6wirEQgAAAI8"]
[Wed May 13 09:46:10.936692 2026] [:error] [pid 23887:tid 23913] [client 20.48.166.247:17392] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/p.php"] [unique_id "agPX4tSKmvZJZkXBFDAy3wAAANI"]
[Wed May 13 09:46:11.378651 2026] [:error] [pid 23887:tid 23897] [client 20.48.166.247:17315] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Requests/"] [unique_id "agPX49SKmvZJZkXBFDAy4QAAAMI"]
[Wed May 13 09:46:11.802033 2026] [:error] [pid 23887:tid 23904] [client 20.48.166.247:17340] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Requests/"] [unique_id "agPX49SKmvZJZkXBFDAy5AAAAMk"]
[Wed May 13 09:46:12.228318 2026] [:error] [pid 23782:tid 23822] [client 20.48.166.247:17358] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Requests/"] [unique_id "agPX5CBrKFYHXUGnR-qVawAAAEE"]
[Wed May 13 09:46:12.654821 2026] [:error] [pid 23782:tid 23845] [client 20.48.166.247:17287] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Requests/"] [unique_id "agPX5CBrKFYHXUGnR-qVbQAAAFg"]
[Wed May 13 09:46:13.099519 2026] [:error] [pid 23782:tid 23843] [client 20.48.166.247:17299] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bthil.php"] [unique_id "agPX5SBrKFYHXUGnR-qVbwAAAFY"]
[Wed May 13 09:46:13.527881 2026] [:error] [pid 3259:tid 3262] [client 20.48.166.247:17304] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bthil.php"] [unique_id "agPX5eWJB4YwcPVLeAq4EwAAAQE"]
[Wed May 13 09:46:13.948803 2026] [:error] [pid 23887:tid 23900] [client 20.48.166.247:17342] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bthil.php"] [unique_id "agPX5dSKmvZJZkXBFDAy5wAAAMU"]
[Wed May 13 09:46:14.373057 2026] [:error] [pid 23887:tid 23911] [client 20.48.166.247:17291] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bthil.php"] [unique_id "agPX5tSKmvZJZkXBFDAy6gAAANA"]
[Wed May 13 09:46:14.802394 2026] [:error] [pid 23887:tid 23908] [client 20.48.166.247:17396] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/shell.php"] [unique_id "agPX5tSKmvZJZkXBFDAy6wAAAM0"]
[Wed May 13 09:46:15.255949 2026] [:error] [pid 23887:tid 23909] [client 20.48.166.247:17355] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/shell.php"] [unique_id "agPX59SKmvZJZkXBFDAy7gAAAM4"]
[Wed May 13 09:46:15.683158 2026] [:error] [pid 23887:tid 23898] [client 20.48.166.247:17383] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/shell.php"] [unique_id "agPX59SKmvZJZkXBFDAy8gAAAMM"]
[Wed May 13 09:46:16.125137 2026] [:error] [pid 23887:tid 23917] [client 20.48.166.247:17281] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/shell.php"] [unique_id "agPX6NSKmvZJZkXBFDAy9QAAANY"]
[Wed May 13 09:46:16.565539 2026] [:error] [pid 23887:tid 23911] [client 20.48.166.247:17135] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/seo.php"] [unique_id "agPX6NSKmvZJZkXBFDAy-QAAANA"]
[Wed May 13 09:46:16.986850 2026] [:error] [pid 3259:tid 3282] [client 20.48.166.247:17334] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/seo.php"] [unique_id "agPX6OWJB4YwcPVLeAq4FAAAARU"]
[Wed May 13 09:46:17.450377 2026] [:error] [pid 3259:tid 3266] [client 20.48.166.247:17305] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/seo.php"] [unique_id "agPX6eWJB4YwcPVLeAq4FgAAAQU"]
[Wed May 13 09:46:17.865174 2026] [:error] [pid 23887:tid 23904] [client 20.48.166.247:17231] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/seo.php"] [unique_id "agPX6dSKmvZJZkXBFDAzAgAAAMk"]
[Wed May 13 09:46:18.294302 2026] [:error] [pid 23787:tid 23872] [client 20.48.166.247:17130] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/7.php"] [unique_id "agPX6h1cs5wE7VT6wirERgAAAJg"]
[Wed May 13 09:46:18.730485 2026] [:error] [pid 23887:tid 23917] [client 20.48.166.247:17094] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/7.php"] [unique_id "agPX6tSKmvZJZkXBFDAzCAAAANY"]
[Wed May 13 09:46:19.173483 2026] [:error] [pid 23887:tid 23895] [client 20.48.166.247:17353] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/7.php"] [unique_id "agPX69SKmvZJZkXBFDAzDQAAAMA"]
[Wed May 13 09:46:19.630866 2026] [:error] [pid 23887:tid 23913] [client 20.48.166.247:17317] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/7.php"] [unique_id "agPX69SKmvZJZkXBFDAzEgAAANI"]
[Wed May 13 09:46:20.066552 2026] [:error] [pid 23887:tid 23918] [client 20.48.166.247:17328] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/8.php"] [unique_id "agPX7NSKmvZJZkXBFDAzFAAAANc"]
[Wed May 13 09:46:20.486974 2026] [:error] [pid 23887:tid 23912] [client 20.48.166.247:17074] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/8.php"] [unique_id "agPX7NSKmvZJZkXBFDAzFgAAANE"]
[Wed May 13 09:46:20.908964 2026] [:error] [pid 23782:tid 23844] [client 20.48.166.247:17095] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/8.php"] [unique_id "agPX7CBrKFYHXUGnR-qVcQAAAFc"]
[Wed May 13 09:46:21.384058 2026] [:error] [pid 23887:tid 23916] [client 20.48.166.247:17311] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/8.php"] [unique_id "agPX7dSKmvZJZkXBFDAzGgAAANU"]
[Wed May 13 09:46:21.814766 2026] [:error] [pid 23887:tid 23918] [client 20.48.166.247:17338] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/1.php"] [unique_id "agPX7dSKmvZJZkXBFDAzHgAAANc"]
[Wed May 13 09:46:22.253457 2026] [:error] [pid 23787:tid 23866] [client 20.48.166.247:17266] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/1.php"] [unique_id "agPX7h1cs5wE7VT6wirESAAAAJI"]
[Wed May 13 09:46:22.710199 2026] [:error] [pid 23887:tid 23897] [client 20.48.166.247:17391] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/1.php"] [unique_id "agPX7tSKmvZJZkXBFDAzJAAAAMI"]
[Wed May 13 09:46:23.129173 2026] [:error] [pid 23887:tid 23915] [client 20.48.166.247:17332] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/1.php"] [unique_id "agPX79SKmvZJZkXBFDAzJwAAANQ"]
[Wed May 13 09:46:23.554841 2026] [:error] [pid 23782:tid 23831] [client 20.48.166.247:17397] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class.php"] [unique_id "agPX7yBrKFYHXUGnR-qVcgAAAEo"]
[Wed May 13 09:46:23.976121 2026] [:error] [pid 23787:tid 23868] [client 20.48.166.247:17368] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class.php"] [unique_id "agPX7x1cs5wE7VT6wirESwAAAJQ"]
[Wed May 13 09:46:24.409832 2026] [:error] [pid 23787:tid 23849] [client 20.48.166.247:17234] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class.php"] [unique_id "agPX8B1cs5wE7VT6wirETQAAAIE"]
[Wed May 13 09:46:24.874894 2026] [:error] [pid 23787:tid 23860] [client 20.48.166.247:17364] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class.php"] [unique_id "agPX8B1cs5wE7VT6wirETgAAAIw"]
[Wed May 13 09:46:25.314610 2026] [:error] [pid 23887:tid 23908] [client 20.48.166.247:17322] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/100.php"] [unique_id "agPX8dSKmvZJZkXBFDAzKAAAAM0"]
[Wed May 13 09:46:25.738831 2026] [:error] [pid 23887:tid 23906] [client 20.48.166.247:17252] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/100.php"] [unique_id "agPX8dSKmvZJZkXBFDAzKQAAAMs"]
[Wed May 13 09:46:26.183954 2026] [:error] [pid 23780:tid 23804] [client 20.48.166.247:17394] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/100.php"] [unique_id "agPX8nXgOibPjrXgeTBYIAAAAAo"]
[Wed May 13 09:46:26.636927 2026] [:error] [pid 3259:tid 3276] [client 20.48.166.247:17395] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/100.php"] [unique_id "agPX8uWJB4YwcPVLeAq4GwAAAQ8"]
[Wed May 13 09:46:27.060338 2026] [:error] [pid 3259:tid 3278] [client 20.48.166.247:17294] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2026w.php"] [unique_id "agPX8-WJB4YwcPVLeAq4HAAAARE"]
[Wed May 13 09:46:27.474116 2026] [:error] [pid 3259:tid 3281] [client 20.48.166.247:17297] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2026w.php"] [unique_id "agPX8-WJB4YwcPVLeAq4HwAAARQ"]
[Wed May 13 09:46:27.888866 2026] [:error] [pid 23780:tid 23817] [client 20.48.166.247:17258] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2026w.php"] [unique_id "agPX83XgOibPjrXgeTBYIQAAABc"]
[Wed May 13 09:46:28.312679 2026] [:error] [pid 3259:tid 3275] [client 20.48.166.247:17331] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2026w.php"] [unique_id "agPX9OWJB4YwcPVLeAq4IAAAAQ4"]
[Wed May 13 09:46:28.727031 2026] [:error] [pid 23787:tid 23855] [client 20.48.166.247:17314] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/about.php"] [unique_id "agPX9B1cs5wE7VT6wirETwAAAIc"]
[Wed May 13 09:46:29.149967 2026] [:error] [pid 23787:tid 23859] [client 20.48.166.247:17402] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/about.php"] [unique_id "agPX9R1cs5wE7VT6wirEUQAAAIs"]
[Wed May 13 09:46:29.640072 2026] [:error] [pid 23782:tid 23841] [client 20.48.166.247:17239] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/about.php"] [unique_id "agPX9SBrKFYHXUGnR-qVeQAAAFQ"]
[Wed May 13 09:46:30.081432 2026] [:error] [pid 3259:tid 3271] [client 20.48.166.247:17027] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/about.php"] [unique_id "agPX9uWJB4YwcPVLeAq4JQAAAQo"]
[Wed May 13 09:46:30.528932 2026] [:error] [pid 23782:tid 23833] [client 20.48.166.247:17292] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xa.php"] [unique_id "agPX9iBrKFYHXUGnR-qVewAAAEw"]
[Wed May 13 09:46:30.971846 2026] [:error] [pid 23787:tid 23867] [client 20.48.166.247:17303] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xa.php"] [unique_id "agPX9h1cs5wE7VT6wirEVAAAAJM"]
[Wed May 13 09:46:31.394820 2026] [:error] [pid 23787:tid 23850] [client 20.48.166.247:17261] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xa.php"] [unique_id "agPX9x1cs5wE7VT6wirEVgAAAII"]
[Wed May 13 09:46:31.823947 2026] [:error] [pid 23780:tid 23816] [client 20.48.166.247:17339] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xa.php"] [unique_id "agPX93XgOibPjrXgeTBYJAAAABY"]
[Wed May 13 09:46:32.255057 2026] [:error] [pid 3259:tid 3276] [client 20.48.166.247:17293] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin.php"] [unique_id "agPX-OWJB4YwcPVLeAq4KAAAAQ8"]
[Wed May 13 09:46:32.808656 2026] [:error] [pid 3259:tid 3278] [client 20.48.166.247:17329] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin.php"] [unique_id "agPX-OWJB4YwcPVLeAq4KQAAARE"]
[Wed May 13 09:46:33.532566 2026] [proxy_fcgi:error] [pid 23780:tid 23797] [client 20.48.166.247:17033] AH01071: Got error 'Primary script unknown'
[Wed May 13 09:46:34.009178 2026] [proxy_fcgi:error] [pid 23780:tid 23803] [client 20.48.166.247:17033] AH01071: Got error 'Primary script unknown'
[Wed May 13 09:46:34.223624 2026] [proxy_fcgi:error] [pid 23780:tid 23807] [client 20.48.166.247:17033] AH01071: Got error 'Primary script unknown'
[Wed May 13 09:46:34.448926 2026] [proxy_fcgi:error] [pid 23780:tid 23805] [client 20.48.166.247:17033] AH01071: Got error 'Primary script unknown'
[Wed May 13 09:46:34.660462 2026] [proxy_fcgi:error] [pid 23780:tid 23811] [client 20.48.166.247:17033] AH01071: Got error 'Primary script unknown'
[Wed May 13 09:46:35.091265 2026] [proxy_fcgi:error] [pid 23780:tid 23802] [client 20.48.166.247:17033] AH01071: Got error 'Primary script unknown'
[Wed May 13 09:46:35.305314 2026] [proxy_fcgi:error] [pid 23780:tid 23806] [client 20.48.166.247:17033] AH01071: Got error 'Primary script unknown'
[Wed May 13 09:46:35.516060 2026] [proxy_fcgi:error] [pid 23780:tid 23796] [client 20.48.166.247:17033] AH01071: Got error 'Primary script unknown'
[Wed May 13 09:46:35.938688 2026] [proxy_fcgi:error] [pid 23780:tid 23809] [client 20.48.166.247:17033] AH01071: Got error 'Primary script unknown'
[Wed May 13 09:46:36.164445 2026] [:error] [pid 23780:tid 23814] [client 20.48.166.247:17033] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/classwithtostring.php"] [unique_id "agPX_HXgOibPjrXgeTBYNQAAABQ"]
[Wed May 13 09:46:36.663816 2026] [:error] [pid 23780:tid 23804] [client 20.48.166.247:17262] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/classwithtostring.php"] [unique_id "agPX_HXgOibPjrXgeTBYNwAAAAo"]
[Wed May 13 09:46:37.097653 2026] [:error] [pid 23887:tid 23905] [client 20.48.166.247:17284] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/classwithtostring.php"] [unique_id "agPX_dSKmvZJZkXBFDAzOwAAAMo"]
[Wed May 13 09:46:37.564167 2026] [:error] [pid 23887:tid 23901] [client 20.48.166.247:17273] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/classwithtostring.php"] [unique_id "agPX_dSKmvZJZkXBFDAzSgAAAMY"]
[Wed May 13 09:46:38.003884 2026] [:error] [pid 23787:tid 23856] [client 20.48.166.247:17034] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "agPX_h1cs5wE7VT6wirEYgAAAIg"]
[Wed May 13 09:46:38.466213 2026] [:error] [pid 23787:tid 23867] [client 20.48.166.247:17051] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "agPX_h1cs5wE7VT6wirEYwAAAJM"]
[Wed May 13 09:46:38.892724 2026] [:error] [pid 23780:tid 23802] [client 20.48.166.247:17295] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "agPX_nXgOibPjrXgeTBYRQAAAAg"]
[Wed May 13 09:46:39.319982 2026] [:error] [pid 23780:tid 23806] [client 20.48.166.247:17246] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "agPX_3XgOibPjrXgeTBYRgAAAAw"]
[Wed May 13 09:46:39.774567 2026] [:error] [pid 3259:tid 3277] [client 20.48.166.247:17226] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-blog.php"] [unique_id "agPX_-WJB4YwcPVLeAq4MwAAARA"]
[Wed May 13 09:46:40.263950 2026] [:error] [pid 23887:tid 23909] [client 20.48.166.247:17375] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-blog.php"] [unique_id "agPYANSKmvZJZkXBFDAzWgAAAM4"]
[Wed May 13 09:46:40.774957 2026] [:error] [pid 23787:tid 23857] [client 20.48.166.247:17257] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-blog.php"] [unique_id "agPYAB1cs5wE7VT6wirEZwAAAIk"]
[Wed May 13 09:46:41.227976 2026] [:error] [pid 23887:tid 23918] [client 20.48.166.247:17150] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-blog.php"] [unique_id "agPYAdSKmvZJZkXBFDAzXwAAANc"]
[Wed May 13 09:46:41.662469 2026] [:error] [pid 23887:tid 23899] [client 20.48.166.247:17245] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "agPYAdSKmvZJZkXBFDAzYwAAAMQ"]
[Wed May 13 09:46:42.138656 2026] [:error] [pid 23782:tid 23825] [client 20.48.166.247:17320] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "agPYAiBrKFYHXUGnR-qVhQAAAEQ"]
[Wed May 13 09:46:42.582111 2026] [:error] [pid 23887:tid 23910] [client 20.48.166.247:17302] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "agPYAtSKmvZJZkXBFDAzZQAAAM8"]
[Wed May 13 09:46:43.015673 2026] [:error] [pid 23782:tid 23829] [client 20.48.166.247:17219] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "agPYAyBrKFYHXUGnR-qViAAAAEg"]
[Wed May 13 09:46:43.588765 2026] [:error] [pid 23787:tid 23863] [client 20.48.166.247:17174] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "agPYAx1cs5wE7VT6wirEawAAAI8"]
[Wed May 13 09:46:44.095399 2026] [:error] [pid 3259:tid 3264] [client 20.48.166.247:17263] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "agPYBOWJB4YwcPVLeAq4OAAAAQM"]
[Wed May 13 09:46:44.546119 2026] [:error] [pid 23887:tid 23911] [client 20.48.166.247:17336] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "agPYBNSKmvZJZkXBFDAzaQAAANA"]
[Wed May 13 09:46:44.996812 2026] [:error] [pid 23887:tid 23897] [client 20.48.166.247:17298] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "agPYBNSKmvZJZkXBFDAzawAAAMI"]
[Wed May 13 09:46:45.512156 2026] [:error] [pid 23887:tid 23906] [client 20.48.166.247:17327] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/adminfuns.php"] [unique_id "agPYBdSKmvZJZkXBFDAzcAAAAMs"]
[Wed May 13 09:46:45.986725 2026] [:error] [pid 3259:tid 3277] [client 20.48.166.247:17269] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/adminfuns.php"] [unique_id "agPYBeWJB4YwcPVLeAq4PgAAARA"]
[Wed May 13 09:46:46.418288 2026] [:error] [pid 23787:tid 23867] [client 20.48.166.247:17350] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/adminfuns.php"] [unique_id "agPYBh1cs5wE7VT6wirEcQAAAJM"]
[Wed May 13 09:46:46.886307 2026] [:error] [pid 23787:tid 23872] [client 20.48.166.247:17176] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/adminfuns.php"] [unique_id "agPYBh1cs5wE7VT6wirEdQAAAJg"]
[Wed May 13 09:46:47.340568 2026] [:error] [pid 23787:tid 23862] [client 20.48.166.247:17232] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/goods.php"] [unique_id "agPYBx1cs5wE7VT6wirEeAAAAI4"]
[Wed May 13 09:46:47.797449 2026] [:error] [pid 23787:tid 23868] [client 20.48.166.247:17227] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/goods.php"] [unique_id "agPYBx1cs5wE7VT6wirEegAAAJQ"]
[Wed May 13 09:46:48.239326 2026] [:error] [pid 23787:tid 23860] [client 20.48.166.247:17307] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/goods.php"] [unique_id "agPYCB1cs5wE7VT6wirEfAAAAIw"]
[Wed May 13 09:46:48.663222 2026] [:error] [pid 23787:tid 23858] [client 20.48.166.247:17349] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/goods.php"] [unique_id "agPYCB1cs5wE7VT6wirEfgAAAIo"]
[Wed May 13 09:46:49.144655 2026] [:error] [pid 23887:tid 23919] [client 20.48.166.247:17341] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ms-edit.php"] [unique_id "agPYCdSKmvZJZkXBFDAzcwAAANg"]
[Wed May 13 09:46:49.594764 2026] [:error] [pid 23887:tid 23908] [client 20.48.166.247:17401] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ms-edit.php"] [unique_id "agPYCdSKmvZJZkXBFDAzdQAAAM0"]
[Wed May 13 09:46:50.231037 2026] [:error] [pid 23887:tid 23901] [client 20.48.166.247:17158] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ms-edit.php"] [unique_id "agPYCtSKmvZJZkXBFDAzdgAAAMY"]
[Wed May 13 09:46:50.719879 2026] [:error] [pid 23887:tid 23911] [client 20.48.166.247:17316] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ms-edit.php"] [unique_id "agPYCtSKmvZJZkXBFDAzeAAAANA"]
[Wed May 13 09:46:51.146076 2026] [:error] [pid 23787:tid 23855] [client 20.48.166.247:17390] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/222.php"] [unique_id "agPYCx1cs5wE7VT6wirEgwAAAIc"]
[Wed May 13 09:46:51.664895 2026] [:error] [pid 23787:tid 23854] [client 20.48.166.247:17343] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/222.php"] [unique_id "agPYCx1cs5wE7VT6wirEhAAAAIY"]
[Wed May 13 09:46:52.134753 2026] [:error] [pid 23787:tid 23868] [client 20.48.166.247:17223] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/222.php"] [unique_id "agPYDB1cs5wE7VT6wirEhgAAAJQ"]
[Wed May 13 09:46:52.618714 2026] [:error] [pid 3259:tid 3269] [client 20.48.166.247:17229] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/222.php"] [unique_id "agPYDOWJB4YwcPVLeAq4QQAAAQg"]
[Wed May 13 09:46:53.058171 2026] [:error] [pid 23887:tid 23906] [client 20.48.166.247:16710] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cgi-bin/index.php"] [unique_id "agPYDdSKmvZJZkXBFDAzfAAAAMs"]
[Wed May 13 09:46:53.495008 2026] [:error] [pid 23780:tid 23812] [client 20.48.166.247:17181] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cgi-bin/index.php"] [unique_id "agPYDXXgOibPjrXgeTBYTgAAABI"]
[Wed May 13 09:46:53.984876 2026] [:error] [pid 3259:tid 3278] [client 20.48.166.247:17325] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cgi-bin/index.php"] [unique_id "agPYDeWJB4YwcPVLeAq4QwAAARE"]
[Wed May 13 09:46:54.429216 2026] [:error] [pid 23780:tid 23808] [client 20.48.166.247:17398] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cgi-bin/index.php"] [unique_id "agPYDnXgOibPjrXgeTBYTwAAAA4"]
[Wed May 13 09:46:54.944069 2026] [:error] [pid 23787:tid 23867] [client 20.48.166.247:17236] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "agPYDh1cs5wE7VT6wirEhwAAAJM"]
[Wed May 13 09:46:55.480278 2026] [:error] [pid 23887:tid 23904] [client 20.48.166.247:17235] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "agPYD9SKmvZJZkXBFDAzfwAAAMk"]
[Wed May 13 09:46:56.011549 2026] [:error] [pid 23780:tid 23800] [client 20.48.166.247:17393] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "agPYEHXgOibPjrXgeTBYUAAAAAY"]
[Wed May 13 09:46:56.604797 2026] [:error] [pid 23787:tid 23870] [client 20.48.166.247:17330] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "agPYEB1cs5wE7VT6wirEigAAAJY"]
[Wed May 13 09:46:57.072116 2026] [:error] [pid 23787:tid 23857] [client 20.48.166.247:17264] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/BDKR28WP.php"] [unique_id "agPYER1cs5wE7VT6wirEiwAAAIk"]
[Wed May 13 09:46:57.496554 2026] [:error] [pid 23787:tid 23850] [client 20.48.166.247:17041] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/BDKR28WP.php"] [unique_id "agPYER1cs5wE7VT6wirEjAAAAII"]
[Wed May 13 09:46:57.983852 2026] [:error] [pid 23787:tid 23861] [client 20.48.166.247:17335] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/BDKR28WP.php"] [unique_id "agPYER1cs5wE7VT6wirEjQAAAI0"]
[Wed May 13 09:46:58.495199 2026] [:error] [pid 23887:tid 23908] [client 20.48.166.247:17109] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/BDKR28WP.php"] [unique_id "agPYEtSKmvZJZkXBFDAzgQAAAM0"]
[Wed May 13 09:46:58.940163 2026] [:error] [pid 23782:tid 23829] [client 20.48.166.247:17230] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/l10n/"] [unique_id "agPYEiBrKFYHXUGnR-qVkgAAAEg"]
[Wed May 13 09:46:59.376868 2026] [:error] [pid 23780:tid 23803] [client 20.48.166.247:17175] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/l10n/"] [unique_id "agPYE3XgOibPjrXgeTBYVAAAAAk"]
[Wed May 13 09:46:59.911836 2026] [:error] [pid 23782:tid 23841] [client 20.48.166.247:17220] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/l10n/"] [unique_id "agPYEyBrKFYHXUGnR-qVkwAAAFQ"]
[Wed May 13 09:47:00.659690 2026] [:error] [pid 23780:tid 23811] [client 20.48.166.247:17366] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/l10n/"] [unique_id "agPYFHXgOibPjrXgeTBYVgAAABE"]
[Wed May 13 09:47:01.109231 2026] [:error] [pid 23787:tid 23855] [client 20.48.166.247:17221] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/uploads/"] [unique_id "agPYFR1cs5wE7VT6wirEkAAAAIc"]
[Wed May 13 09:47:01.814394 2026] [:error] [pid 23887:tid 23901] [client 20.48.166.247:17255] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/uploads/"] [unique_id "agPYFdSKmvZJZkXBFDAzhAAAAMY"]
[Wed May 13 09:47:02.376589 2026] [:error] [pid 23780:tid 23806] [client 20.48.166.247:17164] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/uploads/"] [unique_id "agPYFnXgOibPjrXgeTBYWAAAAAw"]
[Wed May 13 09:47:02.883810 2026] [:error] [pid 23780:tid 23810] [client 20.48.166.247:17250] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/uploads/"] [unique_id "agPYFnXgOibPjrXgeTBYWQAAABA"]
[Wed May 13 09:47:03.377921 2026] [:error] [pid 23780:tid 23809] [client 20.48.166.247:17254] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp.php"] [unique_id "agPYF3XgOibPjrXgeTBYWwAAAA8"]
[Wed May 13 09:47:03.804703 2026] [:error] [pid 23787:tid 23854] [client 20.48.166.247:17244] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp.php"] [unique_id "agPYFx1cs5wE7VT6wirEkQAAAIY"]
[Wed May 13 09:47:04.654781 2026] [:error] [pid 23787:tid 23851] [client 20.48.166.247:17161] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp.php"] [unique_id "agPYGB1cs5wE7VT6wirEkgAAAIM"]
[Wed May 13 09:47:05.197323 2026] [:error] [pid 23782:tid 23838] [client 20.48.166.247:17211] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp.php"] [unique_id "agPYGSBrKFYHXUGnR-qVlgAAAFE"]
[Wed May 13 09:47:06.502722 2026] [:error] [pid 23787:tid 23860] [client 20.48.166.247:17249] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "agPYGh1cs5wE7VT6wirElAAAAIw"]
[Wed May 13 09:47:07.162065 2026] [:error] [pid 23787:tid 23853] [client 20.48.166.247:17157] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "agPYGx1cs5wE7VT6wirElQAAAIU"]
[Wed May 13 09:47:07.999349 2026] [:error] [pid 3259:tid 3275] [client 20.48.166.247:17213] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "agPYG-WJB4YwcPVLeAq4RQAAAQ4"]
[Wed May 13 09:47:08.518833 2026] [:error] [pid 3259:tid 3274] [client 20.48.166.247:17251] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "agPYHOWJB4YwcPVLeAq4SgAAAQ0"]
[Wed May 13 09:47:09.029868 2026] [:error] [pid 3259:tid 3285] [client 20.48.166.247:17203] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/av.php"] [unique_id "agPYHeWJB4YwcPVLeAq4TgAAARg"]
[Wed May 13 09:47:09.511576 2026] [:error] [pid 23787:tid 23852] [client 20.48.166.247:17240] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/av.php"] [unique_id "agPYHR1cs5wE7VT6wirElwAAAIQ"]
[Wed May 13 09:47:10.010373 2026] [:error] [pid 23787:tid 23867] [client 20.48.166.247:17323] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/av.php"] [unique_id "agPYHh1cs5wE7VT6wirEmAAAAJM"]
[Wed May 13 09:47:10.533002 2026] [:error] [pid 3259:tid 3280] [client 20.48.166.247:17154] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/av.php"] [unique_id "agPYHuWJB4YwcPVLeAq4UwAAARM"]
[Wed May 13 09:47:11.127994 2026] [:error] [pid 3259:tid 3269] [client 20.48.166.247:17131] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/abcd.php"] [unique_id "agPYH-WJB4YwcPVLeAq4VAAAAQg"]
[Wed May 13 09:47:11.648558 2026] [:error] [pid 3259:tid 3276] [client 20.48.166.247:17209] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/abcd.php"] [unique_id "agPYH-WJB4YwcPVLeAq4VgAAAQ8"]
[Wed May 13 09:47:12.133773 2026] [:error] [pid 23887:tid 23913] [client 20.48.166.247:17268] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/abcd.php"] [unique_id "agPYINSKmvZJZkXBFDAziQAAANI"]
[Wed May 13 09:47:12.692628 2026] [:error] [pid 23887:tid 23905] [client 20.48.166.247:17260] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/abcd.php"] [unique_id "agPYINSKmvZJZkXBFDAzjAAAAMo"]
[Wed May 13 09:47:13.234472 2026] [:error] [pid 3259:tid 3284] [client 20.48.166.247:17277] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a1.php"] [unique_id "agPYIeWJB4YwcPVLeAq4WQAAARc"]
[Wed May 13 09:47:13.795025 2026] [:error] [pid 3259:tid 3275] [client 20.48.166.247:17321] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a1.php"] [unique_id "agPYIeWJB4YwcPVLeAq4WwAAAQ4"]
[Wed May 13 09:47:14.330609 2026] [:error] [pid 3259:tid 3263] [client 20.48.166.247:17324] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a1.php"] [unique_id "agPYIuWJB4YwcPVLeAq4XQAAAQI"]
[Wed May 13 09:47:14.874629 2026] [:error] [pid 3259:tid 3272] [client 20.48.166.247:16706] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a1.php"] [unique_id "agPYIuWJB4YwcPVLeAq4XgAAAQs"]
[Wed May 13 09:47:15.348120 2026] [:error] [pid 23887:tid 23919] [client 20.48.166.247:17160] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/update/f35.php"] [unique_id "agPYI9SKmvZJZkXBFDAzkAAAANg"]
[Wed May 13 09:47:15.810511 2026] [:error] [pid 23787:tid 23850] [client 20.48.166.247:17169] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/update/f35.php"] [unique_id "agPYIx1cs5wE7VT6wirEnAAAAII"]
[Wed May 13 09:47:16.314858 2026] [:error] [pid 23887:tid 23908] [client 20.48.166.247:17326] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/update/f35.php"] [unique_id "agPYJNSKmvZJZkXBFDAzkQAAAM0"]
[Wed May 13 09:47:16.863100 2026] [:error] [pid 23887:tid 23910] [client 20.48.166.247:17188] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/update/f35.php"] [unique_id "agPYJNSKmvZJZkXBFDAzkgAAAM8"]
[Wed May 13 09:47:17.329782 2026] [:error] [pid 23887:tid 23915] [client 20.48.166.247:16714] [client 20.48.166.247] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "agPYJdSKmvZJZkXBFDAzlAAAANQ"]
[Wed May 13 09:47:17.782976 2026] [:error] [pid 3259:tid 3266] [client 20.48.166.247:17253] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f35.php"] [unique_id "agPYJeWJB4YwcPVLeAq4YgAAAQU"]
[Wed May 13 09:47:18.248120 2026] [:error] [pid 23887:tid 23905] [client 20.48.166.247:17372] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f35.php"] [unique_id "agPYJtSKmvZJZkXBFDAzmgAAAMo"]
[Wed May 13 09:47:18.682432 2026] [:error] [pid 23887:tid 23899] [client 20.48.166.247:17385] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/f35.php"] [unique_id "agPYJtSKmvZJZkXBFDAzmwAAAMQ"]
[Wed May 13 09:47:19.166251 2026] [:error] [pid 23782:tid 23831] [client 20.48.166.247:17076] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "agPYJyBrKFYHXUGnR-qVmwAAAEo"]
[Wed May 13 09:47:19.750632 2026] [:error] [pid 23887:tid 23919] [client 20.48.166.247:17224] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "agPYJ9SKmvZJZkXBFDAzngAAANg"]
[Wed May 13 09:47:20.350986 2026] [:error] [pid 23887:tid 23915] [client 20.48.166.247:17228] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "agPYKNSKmvZJZkXBFDAzoAAAANQ"]
[Wed May 13 09:47:20.938227 2026] [:error] [pid 23887:tid 23903] [client 20.48.166.247:17159] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "agPYKNSKmvZJZkXBFDAzowAAAMg"]
[Wed May 13 09:47:21.578248 2026] [:error] [pid 23782:tid 23826] [client 20.48.166.247:17233] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bal.php"] [unique_id "agPYKSBrKFYHXUGnR-qVnAAAAEU"]
[Wed May 13 09:47:22.155496 2026] [:error] [pid 3259:tid 3281] [client 20.48.166.247:17180] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bal.php"] [unique_id "agPYKuWJB4YwcPVLeAq4ZQAAARQ"]
[Wed May 13 09:47:22.729352 2026] [:error] [pid 3259:tid 3274] [client 20.48.166.247:17237] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bal.php"] [unique_id "agPYKuWJB4YwcPVLeAq4ZwAAAQ0"]
[Wed May 13 09:47:23.166301 2026] [:error] [pid 3259:tid 3273] [client 20.48.166.247:16721] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bal.php"] [unique_id "agPYK-WJB4YwcPVLeAq4aAAAAQw"]
[Wed May 13 09:47:23.606203 2026] [:error] [pid 3259:tid 3267] [client 20.48.166.247:17395] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "agPYK-WJB4YwcPVLeAq4bAAAAQY"]
[Wed May 13 09:47:24.066786 2026] [:error] [pid 23782:tid 23840] [client 20.48.166.247:17274] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "agPYLCBrKFYHXUGnR-qVnQAAAFM"]
[Wed May 13 09:47:24.572212 2026] [:error] [pid 23787:tid 23855] [client 20.48.166.247:17243] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "agPYLB1cs5wE7VT6wirEoQAAAIc"]
[Wed May 13 09:47:25.111533 2026] [:error] [pid 23780:tid 23794] [client 20.48.166.247:17267] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "agPYLXXgOibPjrXgeTBYZAAAAAA"]
[Wed May 13 09:47:25.552064 2026] [:error] [pid 23887:tid 23903] [client 20.48.166.247:17210] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "agPYLdSKmvZJZkXBFDAztAAAAMg"]
[Wed May 13 09:47:26.069433 2026] [:error] [pid 23782:tid 23835] [client 20.48.166.247:17265] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "agPYLiBrKFYHXUGnR-qVoQAAAE4"]
[Wed May 13 09:47:26.504674 2026] [:error] [pid 3259:tid 3276] [client 20.48.166.247:17212] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "agPYLuWJB4YwcPVLeAq4cAAAAQ8"]
[Wed May 13 09:47:27.021433 2026] [:error] [pid 23787:tid 23866] [client 20.48.166.247:16722] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "agPYLx1cs5wE7VT6wirEqgAAAJI"]
[Wed May 13 09:47:27.546451 2026] [:error] [pid 23787:tid 23861] [client 20.48.166.247:16711] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gettest.php"] [unique_id "agPYLx1cs5wE7VT6wirErgAAAI0"]
[Wed May 13 09:47:27.991798 2026] [:error] [pid 23782:tid 23832] [client 20.48.166.247:17248] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gettest.php"] [unique_id "agPYLyBrKFYHXUGnR-qVpQAAAEs"]
[Wed May 13 09:47:28.466993 2026] [:error] [pid 23887:tid 23905] [client 20.48.166.247:17272] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gettest.php"] [unique_id "agPYMNSKmvZJZkXBFDAzuQAAAMo"]
[Wed May 13 09:47:28.958638 2026] [:error] [pid 23787:tid 23851] [client 20.48.166.247:17296] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gettest.php"] [unique_id "agPYMB1cs5wE7VT6wirEsAAAAIM"]
[Wed May 13 09:47:29.462794 2026] [:error] [pid 23887:tid 23914] [client 20.48.166.247:16712] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/BypassBest.php"] [unique_id "agPYMdSKmvZJZkXBFDAzuwAAANM"]
[Wed May 13 09:47:29.908973 2026] [:error] [pid 23887:tid 23904] [client 20.48.166.247:17185] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/BypassBest.php"] [unique_id "agPYMdSKmvZJZkXBFDAzvQAAAMk"]
[Wed May 13 09:47:30.407022 2026] [:error] [pid 23887:tid 23908] [client 20.48.166.247:16751] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/BypassBest.php"] [unique_id "agPYMtSKmvZJZkXBFDAzwAAAAM0"]
[Wed May 13 09:47:30.923458 2026] [:error] [pid 23887:tid 23895] [client 20.48.166.247:17222] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/BypassBest.php"] [unique_id "agPYMtSKmvZJZkXBFDAzwQAAAMA"]
[Wed May 13 09:47:31.391178 2026] [:error] [pid 23887:tid 23912] [client 20.48.166.247:16762] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/"] [unique_id "agPYM9SKmvZJZkXBFDAzwgAAANE"]
[Wed May 13 09:47:31.856358 2026] [:error] [pid 23787:tid 23867] [client 20.48.166.247:17190] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/"] [unique_id "agPYMx1cs5wE7VT6wirEtAAAAJM"]
[Wed May 13 09:47:32.378752 2026] [:error] [pid 23787:tid 23856] [client 20.48.166.247:16730] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/"] [unique_id "agPYNB1cs5wE7VT6wirEtgAAAIg"]
[Wed May 13 09:47:32.860865 2026] [:error] [pid 23887:tid 23909] [client 20.48.166.247:17337] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/"] [unique_id "agPYNNSKmvZJZkXBFDAzwwAAAM4"]
[Wed May 13 09:47:33.342556 2026] [:error] [pid 23782:tid 23845] [client 20.48.166.247:16729] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/simple.php"] [unique_id "agPYNSBrKFYHXUGnR-qVqQAAAFg"]
[Wed May 13 09:47:33.760301 2026] [:error] [pid 3259:tid 3279] [client 20.48.166.247:16734] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/simple.php"] [unique_id "agPYNeWJB4YwcPVLeAq4dwAAARI"]
[Wed May 13 09:47:34.310859 2026] [:error] [pid 3259:tid 3268] [client 20.48.166.247:17170] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/simple.php"] [unique_id "agPYNuWJB4YwcPVLeAq4eQAAAQc"]
[Wed May 13 09:47:34.739882 2026] [:error] [pid 3259:tid 3262] [client 20.48.166.247:17167] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/simple.php"] [unique_id "agPYNuWJB4YwcPVLeAq4egAAAQE"]
[Wed May 13 09:47:35.288975 2026] [proxy_fcgi:error] [pid 23887:tid 23898] [client 20.48.166.247:17178] AH01071: Got error 'Primary script unknown'
[Wed May 13 09:47:35.519970 2026] [proxy_fcgi:error] [pid 23887:tid 23905] [client 20.48.166.247:17178] AH01071: Got error 'Primary script unknown'
[Wed May 13 09:47:35.734069 2026] [proxy_fcgi:error] [pid 23887:tid 23914] [client 20.48.166.247:17178] AH01071: Got error 'Primary script unknown'
[Wed May 13 09:47:36.180335 2026] [proxy_fcgi:error] [pid 23887:tid 23917] [client 20.48.166.247:17178] AH01071: Got error 'Primary script unknown'
[Wed May 13 09:47:36.620443 2026] [proxy_fcgi:error] [pid 23887:tid 23908] [client 20.48.166.247:17178] AH01071: Got error 'Primary script unknown'
[Wed May 13 09:47:36.834473 2026] [proxy_fcgi:error] [pid 23887:tid 23915] [client 20.48.166.247:17178] AH01071: Got error 'Primary script unknown'
[Wed May 13 09:47:37.057789 2026] [proxy_fcgi:error] [pid 23887:tid 23900] [client 20.48.166.247:17178] AH01071: Got error 'Primary script unknown'
[Wed May 13 09:47:37.274093 2026] [proxy_fcgi:error] [pid 23887:tid 23912] [client 20.48.166.247:17178] AH01071: Got error 'Primary script unknown'
[Wed May 13 09:47:37.491621 2026] [proxy_fcgi:error] [pid 23887:tid 23916] [client 20.48.166.247:17178] AH01071: Got error 'Primary script unknown'
[Wed May 13 09:47:37.701010 2026] [:error] [pid 23887:tid 23909] [client 20.48.166.247:17178] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bypasbnget.php"] [unique_id "agPYOdSKmvZJZkXBFDAz1gAAAM4"]
[Wed May 13 09:47:38.129492 2026] [:error] [pid 3259:tid 3276] [client 20.48.166.247:17256] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bypasbnget.php"] [unique_id "agPYOuWJB4YwcPVLeAq4ewAAAQ8"]
[Wed May 13 09:47:38.588148 2026] [:error] [pid 23887:tid 23901] [client 20.48.166.247:17182] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bypasbnget.php"] [unique_id "agPYOtSKmvZJZkXBFDAz2AAAAMY"]
[Wed May 13 09:47:39.031625 2026] [:error] [pid 23887:tid 23898] [client 20.48.166.247:16960] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bypasbnget.php"] [unique_id "agPYO9SKmvZJZkXBFDAz2QAAAMM"]
[Wed May 13 09:47:39.530466 2026] [:error] [pid 23887:tid 23906] [client 20.48.166.247:17156] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sf.php"] [unique_id "agPYO9SKmvZJZkXBFDAz3AAAAMs"]
[Wed May 13 09:47:39.973168 2026] [:error] [pid 3259:tid 3266] [client 20.48.166.247:17238] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sf.php"] [unique_id "agPYO-WJB4YwcPVLeAq4fQAAAQU"]
[Wed May 13 09:47:40.416681 2026] [:error] [pid 23887:tid 23902] [client 20.48.166.247:17152] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sf.php"] [unique_id "agPYPNSKmvZJZkXBFDAz3QAAAMc"]
[Wed May 13 09:47:40.918930 2026] [:error] [pid 23780:tid 23802] [client 20.48.166.247:16718] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sf.php"] [unique_id "agPYPHXgOibPjrXgeTBYZwAAAAg"]
[Wed May 13 09:47:41.405200 2026] [:error] [pid 23887:tid 23915] [client 20.48.166.247:17172] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file5.php"] [unique_id "agPYPdSKmvZJZkXBFDAz4QAAANQ"]
[Wed May 13 09:47:41.868009 2026] [:error] [pid 23787:tid 23869] [client 20.48.166.247:17197] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file5.php"] [unique_id "agPYPR1cs5wE7VT6wirEuAAAAJU"]
[Wed May 13 09:47:42.350883 2026] [:error] [pid 23887:tid 23916] [client 20.48.166.247:16704] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file5.php"] [unique_id "agPYPtSKmvZJZkXBFDAz5QAAANU"]
[Wed May 13 09:47:42.820906 2026] [:error] [pid 23887:tid 23909] [client 20.48.166.247:17163] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file5.php"] [unique_id "agPYPtSKmvZJZkXBFDAz5gAAAM4"]
[Wed May 13 09:47:43.435783 2026] [:error] [pid 23782:tid 23825] [client 20.48.166.247:17216] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fs.php"] [unique_id "agPYPyBrKFYHXUGnR-qVrAAAAEQ"]
[Wed May 13 09:47:43.876759 2026] [:error] [pid 23887:tid 23898] [client 20.48.166.247:17271] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fs.php"] [unique_id "agPYP9SKmvZJZkXBFDA0EAAAAMM"]
[Wed May 13 09:47:44.451420 2026] [:error] [pid 3259:tid 3264] [client 20.48.166.247:17138] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fs.php"] [unique_id "agPYQOWJB4YwcPVLeAq40AAAAQM"]
[Wed May 13 09:47:44.891665 2026] [:error] [pid 23787:tid 23861] [client 20.48.166.247:17276] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fs.php"] [unique_id "agPYQB1cs5wE7VT6wirEugAAAI0"]
[Wed May 13 09:47:45.368421 2026] [:error] [pid 23887:tid 23915] [client 20.48.166.247:16727] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/4PJcpMFsD8B.php"] [unique_id "agPYQdSKmvZJZkXBFDA0GwAAANQ"]
[Wed May 13 09:47:45.856951 2026] [:error] [pid 23887:tid 23918] [client 20.48.166.247:16709] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/4PJcpMFsD8B.php"] [unique_id "agPYQdSKmvZJZkXBFDA0HQAAANc"]
[Wed May 13 09:47:46.302654 2026] [:error] [pid 23787:tid 23868] [client 20.48.166.247:17168] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/4PJcpMFsD8B.php"] [unique_id "agPYQh1cs5wE7VT6wirE0wAAAJQ"]
[Wed May 13 09:47:46.756306 2026] [:error] [pid 23782:tid 23822] [client 20.48.166.247:16741] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/4PJcpMFsD8B.php"] [unique_id "agPYQiBrKFYHXUGnR-qVsAAAAEE"]
[Wed May 13 09:47:47.195669 2026] [:error] [pid 23887:tid 23905] [client 20.48.166.247:17218] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file.php"] [unique_id "agPYQ9SKmvZJZkXBFDA0IQAAAMo"]
[Wed May 13 09:47:47.694665 2026] [:error] [pid 3259:tid 3273] [client 20.48.166.247:17206] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file.php"] [unique_id "agPYQ-WJB4YwcPVLeAq46gAAAQw"]
[Wed May 13 09:47:48.145028 2026] [:error] [pid 23782:tid 23824] [client 20.48.166.247:16719] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file.php"] [unique_id "agPYRCBrKFYHXUGnR-qVsQAAAEM"]
[Wed May 13 09:47:48.608817 2026] [:error] [pid 23782:tid 23828] [client 20.48.166.247:17155] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file.php"] [unique_id "agPYRCBrKFYHXUGnR-qVswAAAEc"]
[Wed May 13 09:47:49.041784 2026] [:error] [pid 23780:tid 23815] [client 20.48.166.247:17173] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class.1.php"] [unique_id "agPYRXXgOibPjrXgeTBYaQAAABU"]
[Wed May 13 09:47:49.470826 2026] [:error] [pid 23787:tid 23857] [client 20.48.166.247:17187] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class.1.php"] [unique_id "agPYRR1cs5wE7VT6wirE2wAAAIk"]
[Wed May 13 09:47:49.925229 2026] [:error] [pid 23787:tid 23848] [client 20.48.166.247:17319] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class.1.php"] [unique_id "agPYRR1cs5wE7VT6wirE3AAAAIA"]
[Wed May 13 09:47:50.366171 2026] [:error] [pid 23787:tid 23869] [client 20.48.166.247:16961] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class.1.php"] [unique_id "agPYRh1cs5wE7VT6wirE3QAAAJU"]
[Wed May 13 09:47:50.901871 2026] [:error] [pid 3259:tid 3267] [client 20.48.166.247:17279] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-gr.php"] [unique_id "agPYRuWJB4YwcPVLeAq48AAAAQY"]
[Wed May 13 09:47:51.376210 2026] [:error] [pid 3259:tid 3268] [client 20.48.166.247:17171] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-gr.php"] [unique_id "agPYR-WJB4YwcPVLeAq48gAAAQc"]
[Wed May 13 09:47:51.878115 2026] [:error] [pid 23782:tid 23834] [client 20.48.166.247:17179] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-gr.php"] [unique_id "agPYRyBrKFYHXUGnR-qVuAAAAE0"]
[Wed May 13 09:47:52.496356 2026] [:error] [pid 23887:tid 23914] [client 20.48.166.247:17205] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-gr.php"] [unique_id "agPYSNSKmvZJZkXBFDA0MAAAANM"]
[Wed May 13 09:47:53.007690 2026] [:error] [pid 23887:tid 23895] [client 20.48.166.247:17184] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cfile.php"] [unique_id "agPYSdSKmvZJZkXBFDA0NwAAAMA"]
[Wed May 13 09:47:53.579148 2026] [:error] [pid 23887:tid 23901] [client 20.48.166.247:16765] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cfile.php"] [unique_id "agPYSdSKmvZJZkXBFDA0OQAAAMY"]
[Wed May 13 09:47:54.348608 2026] [:error] [pid 23787:tid 23859] [client 20.48.166.247:17247] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cfile.php"] [unique_id "agPYSh1cs5wE7VT6wirE4gAAAIs"]
[Wed May 13 09:47:54.976611 2026] [:error] [pid 23782:tid 23840] [client 20.48.166.247:17200] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cfile.php"] [unique_id "agPYSiBrKFYHXUGnR-qVvgAAAFM"]
[Wed May 13 09:47:55.823898 2026] [:error] [pid 23782:tid 23830] [client 20.48.166.247:16705] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class-wp.php"] [unique_id "agPYSyBrKFYHXUGnR-qVwgAAAEk"]
[Wed May 13 09:47:56.446489 2026] [:error] [pid 23780:tid 23817] [client 20.48.166.247:16737] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class-wp.php"] [unique_id "agPYTHXgOibPjrXgeTBYbwAAABc"]
[Wed May 13 09:47:57.334579 2026] [:error] [pid 23782:tid 23841] [client 20.48.166.247:17198] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class-wp.php"] [unique_id "agPYTSBrKFYHXUGnR-qVxAAAAFQ"]
[Wed May 13 09:47:58.032584 2026] [:error] [pid 23782:tid 23832] [client 20.48.166.247:17195] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class-wp.php"] [unique_id "agPYTiBrKFYHXUGnR-qVxwAAAEs"]
[Wed May 13 09:47:58.643686 2026] [:error] [pid 23782:tid 23821] [client 20.48.166.247:16750] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ff2.php"] [unique_id "agPYTiBrKFYHXUGnR-qVyAAAAEA"]
[Wed May 13 09:47:59.178045 2026] [:error] [pid 23782:tid 23845] [client 20.48.166.247:17208] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ff2.php"] [unique_id "agPYTyBrKFYHXUGnR-qVygAAAFg"]
[Wed May 13 09:47:59.892223 2026] [:error] [pid 23887:tid 23907] [client 20.48.166.247:16748] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ff2.php"] [unique_id "agPYT9SKmvZJZkXBFDA0SgAAAMw"]
[Wed May 13 09:48:00.344290 2026] [:error] [pid 23887:tid 23906] [client 20.48.166.247:16973] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ff2.php"] [unique_id "agPYUNSKmvZJZkXBFDA0TQAAAMs"]
[Wed May 13 09:48:00.832005 2026] [:error] [pid 23782:tid 23822] [client 20.48.166.247:17270] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aa2.php"] [unique_id "agPYUCBrKFYHXUGnR-qV1wAAAEE"]
[Wed May 13 09:48:01.375654 2026] [:error] [pid 23782:tid 23838] [client 20.48.166.247:17183] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aa2.php"] [unique_id "agPYUSBrKFYHXUGnR-qV2AAAAFE"]
[Wed May 13 09:48:01.819220 2026] [:error] [pid 23782:tid 23841] [client 20.48.166.247:16897] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aa2.php"] [unique_id "agPYUSBrKFYHXUGnR-qV2QAAAFQ"]
[Wed May 13 09:48:02.362638 2026] [:error] [pid 3259:tid 3272] [client 20.48.166.247:17275] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aa2.php"] [unique_id "agPYUuWJB4YwcPVLeAq5EAAAAQs"]
[Wed May 13 09:48:02.848995 2026] [:error] [pid 23787:tid 23866] [client 20.48.166.247:16746] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/133.php"] [unique_id "agPYUh1cs5wE7VT6wirE6AAAAJI"]
[Wed May 13 09:48:03.298307 2026] [:error] [pid 23782:tid 23821] [client 20.48.166.247:17225] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/133.php"] [unique_id "agPYUyBrKFYHXUGnR-qV2wAAAEA"]
[Wed May 13 09:48:03.746182 2026] [:error] [pid 3259:tid 3267] [client 20.48.166.247:17313] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/133.php"] [unique_id "agPYU-WJB4YwcPVLeAq5EQAAAQY"]
[Wed May 13 09:48:04.264227 2026] [:error] [pid 23782:tid 23843] [client 20.48.166.247:17162] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/133.php"] [unique_id "agPYVCBrKFYHXUGnR-qV3QAAAFY"]
[Wed May 13 09:48:04.812712 2026] [:error] [pid 23787:tid 23852] [client 20.48.166.247:17191] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ccou.php"] [unique_id "agPYVB1cs5wE7VT6wirE6gAAAIQ"]
[Wed May 13 09:48:05.251550 2026] [:error] [pid 23887:tid 23913] [client 20.48.166.247:17193] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ccou.php"] [unique_id "agPYVdSKmvZJZkXBFDA0UwAAANI"]
[Wed May 13 09:48:05.741770 2026] [:error] [pid 3259:tid 3268] [client 20.48.166.247:17189] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ccou.php"] [unique_id "agPYVeWJB4YwcPVLeAq5EwAAAQc"]
[Wed May 13 09:48:06.160901 2026] [:error] [pid 3259:tid 3270] [client 20.48.166.247:17241] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ccou.php"] [unique_id "agPYVuWJB4YwcPVLeAq5FQAAAQk"]
[Wed May 13 09:48:06.612672 2026] [:error] [pid 23787:tid 23864] [client 20.48.166.247:16715] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/login8.php"] [unique_id "agPYVh1cs5wE7VT6wirE6wAAAJA"]
[Wed May 13 09:48:07.084614 2026] [:error] [pid 3259:tid 3266] [client 20.48.166.247:16713] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/login8.php"] [unique_id "agPYV-WJB4YwcPVLeAq5FgAAAQU"]
[Wed May 13 09:48:07.627120 2026] [:error] [pid 23782:tid 23844] [client 20.48.166.247:17186] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/login8.php"] [unique_id "agPYVyBrKFYHXUGnR-qV3wAAAFc"]
[Wed May 13 09:48:08.058689 2026] [:error] [pid 3259:tid 3281] [client 20.48.166.247:16743] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/login8.php"] [unique_id "agPYWOWJB4YwcPVLeAq5GAAAARQ"]
[Wed May 13 09:48:08.482387 2026] [:error] [pid 23887:tid 23907] [client 20.48.166.247:16977] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/3586%20b64.php"] [unique_id "agPYWNSKmvZJZkXBFDA0WgAAAMw"]
[Wed May 13 09:48:08.932047 2026] [:error] [pid 23887:tid 23906] [client 20.48.166.247:17207] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/3586%20b64.php"] [unique_id "agPYWNSKmvZJZkXBFDA0XAAAAMs"]
[Wed May 13 09:48:09.381013 2026] [:error] [pid 3259:tid 3275] [client 20.48.166.247:17214] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/3586%20b64.php"] [unique_id "agPYWeWJB4YwcPVLeAq5HAAAAQ4"]
[Wed May 13 09:48:09.829994 2026] [:error] [pid 3259:tid 3269] [client 20.48.166.247:17278] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/3586%20b64.php"] [unique_id "agPYWeWJB4YwcPVLeAq5HgAAAQg"]
[Wed May 13 09:48:10.323620 2026] [:error] [pid 23887:tid 23903] [client 20.48.166.247:16732] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/18299.php"] [unique_id "agPYWtSKmvZJZkXBFDA0XgAAAMg"]
[Wed May 13 09:48:10.760961 2026] [:error] [pid 23780:tid 23794] [client 20.48.166.247:16731] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/18299.php"] [unique_id "agPYWnXgOibPjrXgeTBYcgAAAAA"]
[Wed May 13 09:48:11.255847 2026] [:error] [pid 23780:tid 23807] [client 20.48.166.247:16733] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/18299.php"] [unique_id "agPYW3XgOibPjrXgeTBYcwAAAA0"]
[Wed May 13 09:48:11.680579 2026] [:error] [pid 23782:tid 23825] [client 20.48.166.247:16971] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/18299.php"] [unique_id "agPYWyBrKFYHXUGnR-qV4wAAAEQ"]
[Wed May 13 09:48:12.168322 2026] [:error] [pid 23887:tid 23896] [client 20.48.166.247:17374] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nx1.php"] [unique_id "agPYXNSKmvZJZkXBFDA0XwAAAME"]
[Wed May 13 09:48:12.649313 2026] [:error] [pid 23782:tid 23835] [client 20.48.166.247:16745] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nx1.php"] [unique_id "agPYXCBrKFYHXUGnR-qV5QAAAE4"]
[Wed May 13 09:48:13.075630 2026] [:error] [pid 23782:tid 23833] [client 20.48.166.247:16744] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nx1.php"] [unique_id "agPYXSBrKFYHXUGnR-qV5wAAAEw"]
[Wed May 13 09:48:13.510860 2026] [:error] [pid 23887:tid 23913] [client 20.48.166.247:16965] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/nx1.php"] [unique_id "agPYXdSKmvZJZkXBFDA0YQAAANI"]
[Wed May 13 09:48:13.967134 2026] [:error] [pid 23782:tid 23829] [client 20.48.166.247:16749] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Noname6.php"] [unique_id "agPYXSBrKFYHXUGnR-qV6AAAAEg"]
[Wed May 13 09:48:14.501950 2026] [:error] [pid 23787:tid 23859] [client 20.48.166.247:16723] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Noname6.php"] [unique_id "agPYXh1cs5wE7VT6wirE7wAAAIs"]
[Wed May 13 09:48:14.925655 2026] [:error] [pid 3259:tid 3274] [client 20.48.166.247:17204] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Noname6.php"] [unique_id "agPYXuWJB4YwcPVLeAq5IgAAAQ0"]
[Wed May 13 09:48:15.481134 2026] [:error] [pid 3259:tid 3268] [client 20.48.166.247:16720] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Noname6.php"] [unique_id "agPYX-WJB4YwcPVLeAq5JAAAAQc"]
[Wed May 13 09:48:15.994672 2026] [:error] [pid 23787:tid 23860] [client 20.48.166.247:16980] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tia.php"] [unique_id "agPYXx1cs5wE7VT6wirE8gAAAIw"]
[Wed May 13 09:48:16.566023 2026] [:error] [pid 23782:tid 23822] [client 20.48.166.247:16735] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tia.php"] [unique_id "agPYYCBrKFYHXUGnR-qV6wAAAEE"]
[Wed May 13 09:48:17.045727 2026] [:error] [pid 23780:tid 23806] [client 20.48.166.247:17201] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tia.php"] [unique_id "agPYYXXgOibPjrXgeTBYdgAAAAw"]
[Wed May 13 09:48:17.727090 2026] [:error] [pid 23787:tid 23866] [client 20.48.166.247:16724] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tia.php"] [unique_id "agPYYR1cs5wE7VT6wirE9gAAAJI"]
[Wed May 13 09:48:18.177899 2026] [:error] [pid 23782:tid 23832] [client 20.48.166.247:16963] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/coa.php"] [unique_id "agPYYiBrKFYHXUGnR-qV7QAAAEs"]
[Wed May 13 09:48:18.725429 2026] [:error] [pid 23780:tid 23809] [client 20.48.166.247:16764] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/coa.php"] [unique_id "agPYYnXgOibPjrXgeTBYeAAAAA8"]
[Wed May 13 09:48:19.285896 2026] [:error] [pid 23780:tid 23796] [client 20.48.166.247:17192] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/coa.php"] [unique_id "agPYY3XgOibPjrXgeTBYeQAAAAI"]
[Wed May 13 09:48:20.033165 2026] [:error] [pid 23780:tid 23804] [client 20.48.166.247:16752] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/coa.php"] [unique_id "agPYZHXgOibPjrXgeTBYfAAAAAo"]
[Wed May 13 09:48:20.512548 2026] [:error] [pid 23887:tid 23901] [client 20.48.166.247:16966] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dr.php"] [unique_id "agPYZNSKmvZJZkXBFDA0ZQAAAMY"]
[Wed May 13 09:48:21.128299 2026] [:error] [pid 23787:tid 23851] [client 20.48.166.247:16988] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dr.php"] [unique_id "agPYZR1cs5wE7VT6wirE_QAAAIM"]
[Wed May 13 09:48:21.578084 2026] [:error] [pid 23780:tid 23798] [client 20.48.166.247:16738] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dr.php"] [unique_id "agPYZXXgOibPjrXgeTBYfgAAAAQ"]
[Wed May 13 09:48:22.101716 2026] [:error] [pid 23887:tid 23911] [client 20.48.166.247:16914] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dr.php"] [unique_id "agPYZtSKmvZJZkXBFDA0aAAAANA"]
[Wed May 13 09:48:22.647605 2026] [:error] [pid 23787:tid 23870] [client 20.48.166.247:17019] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/let.php"] [unique_id "agPYZh1cs5wE7VT6wirE_wAAAJY"]
[Wed May 13 09:48:23.211643 2026] [:error] [pid 23887:tid 23902] [client 20.48.166.247:17021] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/let.php"] [unique_id "agPYZ9SKmvZJZkXBFDA0bAAAAMc"]
[Wed May 13 09:48:23.736388 2026] [:error] [pid 23787:tid 23855] [client 20.48.166.247:16726] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/let.php"] [unique_id "agPYZx1cs5wE7VT6wirFAgAAAIc"]
[Wed May 13 09:48:24.236047 2026] [:error] [pid 23887:tid 23917] [client 20.48.166.247:16969] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/let.php"] [unique_id "agPYaNSKmvZJZkXBFDA0bQAAANY"]
[Wed May 13 09:48:24.745603 2026] [:error] [pid 3259:tid 3272] [client 20.48.166.247:17166] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/w12.php"] [unique_id "agPYaOWJB4YwcPVLeAq5LAAAAQs"]
[Wed May 13 09:48:25.227356 2026] [:error] [pid 3259:tid 3274] [client 20.48.166.247:16740] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/w12.php"] [unique_id "agPYaeWJB4YwcPVLeAq5LQAAAQ0"]
[Wed May 13 09:48:25.840981 2026] [:error] [pid 23780:tid 23808] [client 20.48.166.247:16739] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/w12.php"] [unique_id "agPYaXXgOibPjrXgeTBYgQAAAA4"]
[Wed May 13 09:48:26.566002 2026] [:error] [pid 23887:tid 23904] [client 20.48.166.247:16761] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/w12.php"] [unique_id "agPYatSKmvZJZkXBFDA0bwAAAMk"]
[Wed May 13 09:48:27.068415 2026] [:error] [pid 23887:tid 23909] [client 20.48.166.247:17202] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/chati.php"] [unique_id "agPYa9SKmvZJZkXBFDA0cAAAAM4"]
[Wed May 13 09:48:27.622624 2026] [:error] [pid 23887:tid 23916] [client 20.48.166.247:16736] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/chati.php"] [unique_id "agPYa9SKmvZJZkXBFDA0cgAAANU"]
[Wed May 13 09:48:28.433049 2026] [:error] [pid 23782:tid 23845] [client 20.48.166.247:17196] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/chati.php"] [unique_id "agPYbCBrKFYHXUGnR-qV7wAAAFg"]
[Wed May 13 09:48:29.020632 2026] [:error] [pid 23787:tid 23851] [client 20.48.166.247:16981] [client 20.48.166.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/chati.php"] [unique_id "agPYbR1cs5wE7VT6wirFEQAAAIM"]
[Wed May 13 23:12:41.821822 2026] [:error] [pid 12426:tid 12436] [client 136.112.245.2:33554] [client 136.112.245.2] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.git/config"] [unique_id "agSU6bPw24RslX3LIcZIkAAAAMg"]
[Thu May 14 17:31:46.917937 2026] [:error] [pid 63033:tid 63039] [client 34.74.142.103:55407] [client 34.74.142.103] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.74.142.103, incrementing ddos counter"] [hostname "dwelectservices.com.au"] [uri "/xmlrpc.php"] [unique_id "agWWglMY49UWn5BpqVbqzgAAAQQ"]
[Thu May 14 17:31:46.927889 2026] [proxy_fcgi:error] [pid 63033:tid 63039] [client 34.74.142.103:55407] AH01071: Got error 'Primary script unknown'
[Thu May 14 17:31:49.932690 2026] [:error] [pid 63033:tid 63043] [client 34.74.142.103:55407] [client 34.74.142.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "agWWhVMY49UWn5BpqVbq2wAAAQg"]
[Thu May 14 17:31:50.386519 2026] [:error] [pid 47721:tid 47739] [client 34.74.142.103:54228] [client 34.74.142.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "agWWhnEmh7_G0hfOa6vxYwAAAZA"]
[Thu May 14 17:31:50.835397 2026] [:error] [pid 47721:tid 47730] [client 34.74.142.103:54402] [client 34.74.142.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "agWWhnEmh7_G0hfOa6vxZAAAAYc"]
[Thu May 14 17:31:51.371669 2026] [:error] [pid 11581:tid 11611] [client 34.74.142.103:59135] [client 34.74.142.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "agWWh_0vF48FbzpvQMXiTwAAAA4"]
[Thu May 14 17:31:51.900469 2026] [:error] [pid 47673:tid 47686] [client 34.74.142.103:51563] [client 34.74.142.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "agWWh_CGe4cIn3sh5k0Y5QAAAUs"]
[Thu May 14 17:31:52.498934 2026] [:error] [pid 63033:tid 63038] [client 34.74.142.103:50898] [client 34.74.142.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "agWWiFMY49UWn5BpqVbq3AAAAQM"]
[Thu May 14 17:31:53.017369 2026] [:error] [pid 47673:tid 47691] [client 34.74.142.103:49799] [client 34.74.142.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "agWWifCGe4cIn3sh5k0Y5wAAAVA"]
[Fri May 15 00:30:11.735505 2026] [:error] [pid 11581:tid 11609] [client 146.148.24.141:43286] [client 146.148.24.141] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dwelectservices.com.au"] [uri "/.git/config"] [unique_id "agX4k_0vF48FbzpvQMVdmgAAAAw"]
[Fri May 15 00:57:21.412133 2026] [:error] [pid 47721:tid 47724] [client 35.186.164.185:37450] [client 35.186.164.185] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dwelectservices.com.au"] [uri "/.git/config"] [unique_id "agX-8XEmh7_G0hfOa6tHFAAAAYE"]
[Fri May 15 04:08:08.825188 2026] [proxy_fcgi:error] [pid 1188:tid 1200] [client 20.63.85.2:37497] AH01071: Got error 'Primary script unknown'
[Fri May 15 04:08:10.594003 2026] [proxy_fcgi:error] [pid 1188:tid 1213] [client 20.63.85.2:37497] AH01071: Got error 'Primary script unknown'
[Fri May 15 04:08:10.825880 2026] [proxy_fcgi:error] [pid 1188:tid 1211] [client 20.63.85.2:37497] AH01071: Got error 'Primary script unknown'
[Fri May 15 04:08:11.050820 2026] [proxy_fcgi:error] [pid 1188:tid 1212] [client 20.63.85.2:37497] AH01071: Got error 'Primary script unknown'
[Fri May 15 04:08:11.325249 2026] [proxy_fcgi:error] [pid 1188:tid 1202] [client 20.63.85.2:37497] AH01071: Got error 'Primary script unknown'
[Fri May 15 04:08:11.549598 2026] [proxy_fcgi:error] [pid 1188:tid 1198] [client 20.63.85.2:37497] AH01071: Got error 'Primary script unknown'
[Fri May 15 04:08:11.773527 2026] [proxy_fcgi:error] [pid 1188:tid 1209] [client 20.63.85.2:37497] AH01071: Got error 'Primary script unknown'
[Fri May 15 04:08:12.014047 2026] [proxy_fcgi:error] [pid 1188:tid 1210] [client 20.63.85.2:37497] AH01071: Got error 'Primary script unknown'
[Fri May 15 04:08:12.267102 2026] [proxy_fcgi:error] [pid 1188:tid 1208] [client 20.63.85.2:37497] AH01071: Got error 'Primary script unknown'
[Fri May 15 04:08:12.647366 2026] [proxy_fcgi:error] [pid 1188:tid 1219] [client 20.63.85.2:37497] AH01071: Got error 'Primary script unknown'
[Fri May 15 04:08:12.869243 2026] [:error] [pid 1188:tid 1206] [client 20.63.85.2:37497] [client 20.63.85.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/albin.php"] [unique_id "agYrrNY68iW8yuNkNzO_LwAAAAk"]
[Fri May 15 04:08:16.447160 2026] [:error] [pid 1190:tid 1271] [client 20.63.85.2:37476] [client 20.63.85.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/albin.php"] [unique_id "agYrsNqiXrD7hne4gFaJeAAAAJM"]
[Fri May 15 04:08:19.586065 2026] [:error] [pid 1295:tid 1319] [client 20.63.85.2:8522] [client 20.63.85.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/albin.php"] [unique_id "agYrs9mMhqLvs0GYixnAiAAAANU"]
[Fri May 15 04:08:23.486640 2026] [:error] [pid 1295:tid 1304] [client 20.63.85.2:56897] [client 20.63.85.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/albin.php"] [unique_id "agYrt9mMhqLvs0GYixnAkQAAAMY"]
[Fri May 15 04:08:32.427294 2026] [:error] [pid 1189:tid 1236] [client 20.63.85.2:4067] [client 20.63.85.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sbhu.php"] [unique_id "agYrwAe36qIGegR4kck7VQAAAEs"]
[Fri May 15 04:08:46.541209 2026] [:error] [pid 1295:tid 1307] [client 20.63.85.2:3345] [client 20.63.85.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xda.php"] [unique_id "agYrztmMhqLvs0GYixnAuwAAAMk"]
[Fri May 15 04:08:48.261005 2026] [:error] [pid 1295:tid 1298] [client 20.63.85.2:55862] [client 20.63.85.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xda.php"] [unique_id "agYr0NmMhqLvs0GYixnAvwAAAMA"]
[Fri May 15 04:08:49.987736 2026] [:error] [pid 1190:tid 1275] [client 20.63.85.2:54305] [client 20.63.85.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xda.php"] [unique_id "agYr0dqiXrD7hne4gFaJmAAAAJc"]
[Fri May 15 04:08:59.849883 2026] [:error] [pid 1295:tid 1321] [client 20.63.85.2:3542] [client 20.63.85.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/yellow.php"] [unique_id "agYr29mMhqLvs0GYixnAyQAAANc"]
[Fri May 15 04:09:17.114456 2026] [proxy_fcgi:error] [pid 1189:tid 1235] [client 20.63.85.2:64271] AH01071: Got error 'Primary script unknown'
[Fri May 15 04:09:17.348345 2026] [proxy_fcgi:error] [pid 1189:tid 1243] [client 20.63.85.2:64271] AH01071: Got error 'Primary script unknown'
[Fri May 15 04:09:17.583436 2026] [proxy_fcgi:error] [pid 1189:tid 1237] [client 20.63.85.2:64271] AH01071: Got error 'Primary script unknown'
[Fri May 15 04:09:17.827698 2026] [proxy_fcgi:error] [pid 1189:tid 1233] [client 20.63.85.2:64271] AH01071: Got error 'Primary script unknown'
[Fri May 15 04:09:18.076658 2026] [proxy_fcgi:error] [pid 1189:tid 1249] [client 20.63.85.2:64271] AH01071: Got error 'Primary script unknown'
[Fri May 15 04:09:18.309494 2026] [proxy_fcgi:error] [pid 1189:tid 1239] [client 20.63.85.2:64271] AH01071: Got error 'Primary script unknown'
[Fri May 15 04:09:18.543420 2026] [proxy_fcgi:error] [pid 1189:tid 1234] [client 20.63.85.2:64271] AH01071: Got error 'Primary script unknown'
[Fri May 15 04:09:18.806633 2026] [proxy_fcgi:error] [pid 1189:tid 1227] [client 20.63.85.2:64271] AH01071: Got error 'Primary script unknown'
[Fri May 15 04:09:19.057664 2026] [proxy_fcgi:error] [pid 1189:tid 1247] [client 20.63.85.2:64271] AH01071: Got error 'Primary script unknown'
[Fri May 15 04:09:19.291111 2026] [proxy_fcgi:error] [pid 1189:tid 1225] [client 20.63.85.2:64271] AH01071: Got error 'Primary script unknown'
[Fri May 15 04:09:19.856015 2026] [proxy_fcgi:error] [pid 1189:tid 1228] [client 20.63.85.2:64271] AH01071: Got error 'Primary script unknown'
[Fri May 15 04:09:20.083960 2026] [:error] [pid 1189:tid 1238] [client 20.63.85.2:64271] [client 20.63.85.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/png.php"] [unique_id "agYr8Ae36qIGegR4kck7egAAAE0"]
[Fri May 15 04:09:24.655265 2026] [:error] [pid 1295:tid 1298] [client 20.63.85.2:52119] [client 20.63.85.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/png.php"] [unique_id "agYr9NmMhqLvs0GYixnA_wAAAMA"]
[Fri May 15 04:09:29.097110 2026] [:error] [pid 1190:tid 1266] [client 20.63.85.2:65402] [client 20.63.85.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/png.php"] [unique_id "agYr-dqiXrD7hne4gFaJuAAAAI4"]
[Fri May 15 04:09:33.692567 2026] [:error] [pid 1190:tid 1262] [client 20.63.85.2:3883] [client 20.63.85.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/png.php"] [unique_id "agYr_dqiXrD7hne4gFaJvwAAAIo"]
[Fri May 15 04:09:45.402187 2026] [:error] [pid 1189:tid 1231] [client 20.63.85.2:3872] [client 20.63.85.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x.php"] [unique_id "agYsCQe36qIGegR4kck7iwAAAEY"]
[Fri May 15 04:09:53.582274 2026] [:error] [pid 1295:tid 1299] [client 20.63.85.2:58687] [client 20.63.85.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/yas.php"] [unique_id "agYsEdmMhqLvs0GYixnBHgAAAME"]
[Fri May 15 04:09:59.944366 2026] [:error] [pid 1189:tid 1229] [client 20.63.85.2:22210] [client 20.63.85.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/yas.php"] [unique_id "agYsFwe36qIGegR4kck7lAAAAEQ"]
[Fri May 15 04:10:02.839846 2026] [:error] [pid 1295:tid 1319] [client 20.63.85.2:58625] [client 20.63.85.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/yas.php"] [unique_id "agYsGtmMhqLvs0GYixnBKwAAANU"]
[Fri May 15 04:10:04.223624 2026] [:error] [pid 1295:tid 1303] [client 20.63.85.2:3180] [client 20.63.85.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/yas.php"] [unique_id "agYsHNmMhqLvs0GYixnBLQAAAMU"]
[Fri May 15 04:10:08.118796 2026] [:error] [pid 1295:tid 1318] [client 20.63.85.2:3164] [client 20.63.85.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dropdown.php"] [unique_id "agYsINmMhqLvs0GYixnBMQAAANQ"]
[Fri May 15 04:10:15.195270 2026] [:error] [pid 1190:tid 1252] [client 20.63.85.2:8871] [client 20.63.85.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dropdown.php"] [unique_id "agYsJ9qiXrD7hne4gFaJ1gAAAIA"]
[Fri May 15 04:10:17.996967 2026] [:error] [pid 1295:tid 1301] [client 20.63.85.2:61408] [client 20.63.85.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dropdown.php"] [unique_id "agYsKdmMhqLvs0GYixnBPwAAAMM"]
[Fri May 15 04:10:20.249069 2026] [proxy_fcgi:error] [pid 1190:tid 1269] [client 20.63.85.2:39959] AH01071: Got error 'Primary script unknown'
[Fri May 15 04:10:20.507198 2026] [proxy_fcgi:error] [pid 1190:tid 1273] [client 20.63.85.2:39959] AH01071: Got error 'Primary script unknown'
[Fri May 15 04:10:20.718813 2026] [proxy_fcgi:error] [pid 1190:tid 1263] [client 20.63.85.2:39959] AH01071: Got error 'Primary script unknown'
[Fri May 15 04:10:21.147436 2026] [proxy_fcgi:error] [pid 1190:tid 1270] [client 20.63.85.2:39959] AH01071: Got error 'Primary script unknown'
[Fri May 15 04:10:21.582686 2026] [proxy_fcgi:error] [pid 1190:tid 1265] [client 20.63.85.2:39959] AH01071: Got error 'Primary script unknown'
[Fri May 15 04:10:21.808120 2026] [proxy_fcgi:error] [pid 1190:tid 1267] [client 20.63.85.2:39959] AH01071: Got error 'Primary script unknown'
[Fri May 15 04:10:22.020927 2026] [proxy_fcgi:error] [pid 1190:tid 1274] [client 20.63.85.2:39959] AH01071: Got error 'Primary script unknown'
[Fri May 15 04:10:22.233639 2026] [proxy_fcgi:error] [pid 1190:tid 1264] [client 20.63.85.2:39959] AH01071: Got error 'Primary script unknown'
[Fri May 15 04:10:22.444586 2026] [proxy_fcgi:error] [pid 1190:tid 1266] [client 20.63.85.2:39959] AH01071: Got error 'Primary script unknown'
[Fri May 15 04:10:22.651074 2026] [:error] [pid 1190:tid 1254] [client 20.63.85.2:39959] [client 20.63.85.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lala.php"] [unique_id "agYsLtqiXrD7hne4gFaJ4gAAAII"]
[Fri May 15 04:10:25.705429 2026] [:error] [pid 1295:tid 1302] [client 20.63.85.2:31033] [client 20.63.85.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lala.php"] [unique_id "agYsMdmMhqLvs0GYixnBRQAAAMQ"]
[Fri May 15 04:10:28.373331 2026] [:error] [pid 1295:tid 1307] [client 20.63.85.2:52168] [client 20.63.85.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lala.php"] [unique_id "agYsNNmMhqLvs0GYixnBTgAAAMk"]
[Fri May 15 04:10:29.509167 2026] [:error] [pid 1295:tid 1306] [client 20.63.85.2:21468] [client 20.63.85.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lala.php"] [unique_id "agYsNdmMhqLvs0GYixnBVQAAAMg"]
[Fri May 15 04:10:34.578949 2026] [:error] [pid 1188:tid 1208] [client 20.63.85.2:8807] [client 20.63.85.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-at.php"] [unique_id "agYsOtY68iW8yuNkNzO_aQAAAAs"]
[Fri May 15 04:10:56.918779 2026] [:error] [pid 1295:tid 1306] [client 20.63.85.2:3719] [client 20.63.85.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp.php"] [unique_id "agYsUNmMhqLvs0GYixnBbgAAAMg"]
[Fri May 15 04:10:59.798916 2026] [:error] [pid 1188:tid 1212] [client 20.63.85.2:3748] [client 20.63.85.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp.php"] [unique_id "agYsU9Y68iW8yuNkNzO_fgAAAA8"]
[Fri May 15 04:11:04.121757 2026] [:error] [pid 1188:tid 1199] [client 20.63.85.2:50919] [client 20.63.85.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sys.php"] [unique_id "agYsWNY68iW8yuNkNzO_gAAAAAI"]
[Fri May 15 04:11:29.402250 2026] [proxy_fcgi:error] [pid 1295:tid 1310] [client 20.63.85.2:55425] AH01071: Got error 'Primary script unknown'
[Fri May 15 04:11:29.815011 2026] [proxy_fcgi:error] [pid 1295:tid 1321] [client 20.63.85.2:55425] AH01071: Got error 'Primary script unknown'
[Fri May 15 04:11:31.447567 2026] [proxy_fcgi:error] [pid 1295:tid 1301] [client 20.63.85.2:55425] AH01071: Got error 'Primary script unknown'
[Fri May 15 04:11:31.679609 2026] [proxy_fcgi:error] [pid 1295:tid 1311] [client 20.63.85.2:55425] AH01071: Got error 'Primary script unknown'
[Fri May 15 04:11:31.906590 2026] [proxy_fcgi:error] [pid 1295:tid 1317] [client 20.63.85.2:55425] AH01071: Got error 'Primary script unknown'
[Fri May 15 04:11:32.123324 2026] [proxy_fcgi:error] [pid 1295:tid 1315] [client 20.63.85.2:55425] AH01071: Got error 'Primary script unknown'
[Fri May 15 04:11:32.366025 2026] [proxy_fcgi:error] [pid 1295:tid 1314] [client 20.63.85.2:55425] AH01071: Got error 'Primary script unknown'
[Fri May 15 04:11:32.591154 2026] [proxy_fcgi:error] [pid 1295:tid 1312] [client 20.63.85.2:55425] AH01071: Got error 'Primary script unknown'
[Fri May 15 23:14:34.007268 2026] [:error] [pid 9392:tid 9394] [client 191.234.164.241:18373] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "agc4WtBWJIjH1U9zGfbroQAAAQA"]
[Fri May 15 23:14:35.273863 2026] [:error] [pid 9305:tid 9361] [client 191.234.164.241:18396] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "agc4W95FZyBmdCM8GsGYugAAAFc"]
[Fri May 15 23:14:37.230289 2026] [:error] [pid 30272:tid 30286] [client 191.234.164.241:18410] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "agc4XXvc_jSFaQ_7_wcMdQAAAYw"]
[Fri May 15 23:14:39.385692 2026] [:error] [pid 30240:tid 30264] [client 191.234.164.241:18338] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "agc4X68ckHvaA6bpewt3ZwAAAVY"]
[Sat May 16 14:06:57.855979 2026] [:error] [pid 62341:tid 62364] [client 34.181.207.157:55702] [client 34.181.207.157] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.181.207.157, incrementing ddos counter"] [hostname "dwelectservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aggJganvQ59ep-XG78igqQAAApI"]
[Sat May 16 14:06:57.865398 2026] [proxy_fcgi:error] [pid 62341:tid 62364] [client 34.181.207.157:55702] AH01071: Got error 'Primary script unknown'
[Sat May 16 14:07:00.353071 2026] [:error] [pid 62341:tid 62369] [client 34.181.207.157:55702] [client 34.181.207.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aggJhKnvQ59ep-XG78igtQAAApc"]
[Sat May 16 14:07:00.801335 2026] [:error] [pid 24979:tid 25005] [client 34.181.207.157:52120] [client 34.181.207.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aggJhLvSFUQiwLaOL2p_ogAAANg"]
[Sat May 16 14:07:01.243810 2026] [:error] [pid 5602:tid 5623] [client 34.181.207.157:53418] [client 34.181.207.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aggJhdzTTsu77r3UIskepQAAARM"]
[Sat May 16 14:07:01.672648 2026] [:error] [pid 61411:tid 61437] [client 34.181.207.157:58169] [client 34.181.207.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aggJhWVkiEwGnPL_dvHoxQAAAZg"]
[Sat May 16 14:07:02.099641 2026] [:error] [pid 61463:tid 61479] [client 34.181.207.157:51561] [client 34.181.207.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aggJhjXdL1WU7nYXPmTnVQAAAc4"]
[Sat May 16 14:07:02.538485 2026] [:error] [pid 61411:tid 61414] [client 34.181.207.157:60473] [client 34.181.207.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aggJhmVkiEwGnPL_dvHoyAAAAYE"]
[Sat May 16 14:07:02.963623 2026] [:error] [pid 5602:tid 5605] [client 34.181.207.157:56900] [client 34.181.207.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aggJhtzTTsu77r3UIskeqgAAAQE"]
[Sun May 17 10:51:01.262559 2026] [:error] [pid 36652:tid 36655] [client 45.45.237.206:49108] [client 45.45.237.206] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.git/HEAD"] [unique_id "agktFTZrzQadnZADvj83TQAAAQE"]
[Sun May 17 10:51:01.262609 2026] [:error] [pid 36652:tid 36676] [client 45.45.237.206:49092] [client 45.45.237.206] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.git/config"] [unique_id "agktFTZrzQadnZADvj83TgAAARY"]
[Sun May 17 10:51:01.524897 2026] [:error] [pid 17234:tid 17247] [client 45.45.237.206:49094] [client 45.45.237.206] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env"] [unique_id "agktFdJ4QOrYRCeDR2gj-gAAAUs"]
[Sun May 17 10:51:02.731920 2026] [:error] [pid 36652:tid 36673] [client 45.45.237.206:39550] [client 45.45.237.206] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.development"] [unique_id "agktFjZrzQadnZADvj83UgAAARM"]
[Sun May 17 10:51:02.737631 2026] [:error] [pid 36652:tid 36656] [client 45.45.237.206:39572] [client 45.45.237.206] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.bak"] [unique_id "agktFjZrzQadnZADvj83UwAAAQI"]
[Sun May 17 10:51:02.742021 2026] [:error] [pid 59166:tid 59179] [client 45.45.237.206:39588] [client 45.45.237.206] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.backup"] [unique_id "agktFk_puQ1I47_0UrjMRAAAAMs"]
[Sun May 17 10:51:02.773478 2026] [:error] [pid 59060:tid 59080] [client 45.45.237.206:39534] [client 45.45.237.206] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.local"] [unique_id "agktFvvwvq3bndkPE4nVSQAAAAs"]
[Sun May 17 10:51:02.773589 2026] [:error] [pid 59061:tid 59101] [client 45.45.237.206:39524] [client 45.45.237.206] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.production"] [unique_id "agktFoYS410zAmsYkoIIyAAAAEU"]
[Sun May 17 13:03:23.429180 2026] [:error] [pid 36652:tid 36657] [client 192.96.159.129:63897] [client 192.96.159.129] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env"] [unique_id "aglMGzZrzQadnZADvj9JoAAAAQM"]
[Sun May 17 15:22:06.437554 2026] [:error] [pid 10834:tid 10870] [client 92.118.39.29:35802] [client 92.118.39.29] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dwelectservices.com.au"] [uri "/.git/config"] [unique_id "aglsnhISNQ_Nf83-VpqPygAAAdg"]
[Sun May 17 20:52:12.552039 2026] [:error] [pid 59061:tid 59103] [client 18.204.203.77:55802] [client 18.204.203.77] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||dwelectservices.com.au|F|4"] [data "Web Downloader"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "dwelectservices.com.au"] [uri "/"] [unique_id "agm5_IYS410zAmsYkoItxwAAAEc"]
[Mon May 18 13:51:23.961517 2026] [proxy_fcgi:error] [pid 36492:tid 36533] [client 20.226.33.48:14405] AH01071: Got error 'Primary script unknown'
[Mon May 18 13:51:24.332376 2026] [proxy_fcgi:error] [pid 36492:tid 36541] [client 20.226.33.48:14405] AH01071: Got error 'Primary script unknown'
[Mon May 18 13:51:24.700392 2026] [proxy_fcgi:error] [pid 36492:tid 36537] [client 20.226.33.48:14405] AH01071: Got error 'Primary script unknown'
[Mon May 18 13:51:25.070410 2026] [proxy_fcgi:error] [pid 36492:tid 36534] [client 20.226.33.48:14405] AH01071: Got error 'Primary script unknown'
[Mon May 18 13:51:25.436362 2026] [proxy_fcgi:error] [pid 36492:tid 36543] [client 20.226.33.48:14405] AH01071: Got error 'Primary script unknown'
[Mon May 18 13:51:25.807625 2026] [proxy_fcgi:error] [pid 36492:tid 36544] [client 20.226.33.48:14405] AH01071: Got error 'Primary script unknown'
[Mon May 18 13:51:26.174929 2026] [proxy_fcgi:error] [pid 36492:tid 36535] [client 20.226.33.48:14405] AH01071: Got error 'Primary script unknown'
[Mon May 18 13:51:26.976608 2026] [proxy_fcgi:error] [pid 36492:tid 36523] [client 20.226.33.48:14405] AH01071: Got error 'Primary script unknown'
[Mon May 18 13:51:27.380836 2026] [proxy_fcgi:error] [pid 36492:tid 36540] [client 20.226.33.48:14405] AH01071: Got error 'Primary script unknown'
[Mon May 18 13:51:27.747558 2026] [proxy_fcgi:error] [pid 36492:tid 36532] [client 20.226.33.48:14405] AH01071: Got error 'Primary script unknown'
[Mon May 18 13:51:28.118488 2026] [:error] [pid 36492:tid 36538] [client 20.226.33.48:14405] [client 20.226.33.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/about.php"] [unique_id "agqo4GCVlogrkn9m2w6Q5QAAABA"]
[Mon May 18 13:51:30.614115 2026] [:error] [pid 44046:tid 44066] [client 20.226.33.48:8251] [client 20.226.33.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/about.php"] [unique_id "agqo4oYF4k2jfXJBXk3f0gAAAZI"]
[Mon May 18 13:51:37.593478 2026] [:error] [pid 44046:tid 44063] [client 20.226.33.48:8235] [client 20.226.33.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/about.php"] [unique_id "agqo6YYF4k2jfXJBXk3f1QAAAY8"]
[Mon May 18 13:51:40.551626 2026] [:error] [pid 36491:tid 36498] [client 20.226.33.48:15691] [client 20.226.33.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/about.php"] [unique_id "agqo7E555B9CZb6D60mQogAAAUM"]
[Mon May 18 23:28:42.088479 2026] [:error] [pid 36493:tid 36567] [client 20.151.117.104:33769] [client 20.151.117.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "agswKgynkzQB5nM668rWFgAAARI"]
[Mon May 18 23:28:42.547648 2026] [:error] [pid 36491:tid 36498] [client 20.151.117.104:34329] [client 20.151.117.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "agswKk555B9CZb6D60nlHgAAAUM"]
[Mon May 18 23:28:42.984313 2026] [:error] [pid 36493:tid 36560] [client 20.151.117.104:34393] [client 20.151.117.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "agswKgynkzQB5nM668rWGAAAAQs"]
[Mon May 18 23:28:43.478559 2026] [:error] [pid 36492:tid 36526] [client 20.151.117.104:34326] [client 20.151.117.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "agswK2CVlogrkn9m2w4J0gAAAAQ"]
[Tue May 19 04:46:42.452119 2026] [:error] [pid 38814:tid 38840] [client 103.65.237.216:61116] [client 103.65.237.216] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/sftp-config.json"] [unique_id "agt6sgvkKuBwP0epzWdETQAAANg"]
[Tue May 19 04:46:42.752042 2026] [:error] [pid 38697:tid 38738] [client 103.65.237.216:61155] [client 103.65.237.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.vscode/sftp.json"] [unique_id "agt6sqXP9pP6Kgt-msSYggAAABc"]
[Tue May 19 06:49:32.444022 2026] [proxy_fcgi:error] [pid 38697:tid 38721] [client 4.228.184.113:50818] AH01071: Got error 'Primary script unknown'
[Tue May 19 06:49:32.790421 2026] [proxy_fcgi:error] [pid 38697:tid 38728] [client 4.228.184.113:50818] AH01071: Got error 'Primary script unknown'
[Tue May 19 06:49:33.129113 2026] [proxy_fcgi:error] [pid 38697:tid 38731] [client 4.228.184.113:50818] AH01071: Got error 'Primary script unknown'
[Tue May 19 06:49:33.451634 2026] [proxy_fcgi:error] [pid 38697:tid 38719] [client 4.228.184.113:50818] AH01071: Got error 'Primary script unknown'
[Tue May 19 06:49:33.797542 2026] [proxy_fcgi:error] [pid 38697:tid 38729] [client 4.228.184.113:50818] AH01071: Got error 'Primary script unknown'
[Tue May 19 06:49:34.156940 2026] [proxy_fcgi:error] [pid 38697:tid 38730] [client 4.228.184.113:50818] AH01071: Got error 'Primary script unknown'
[Tue May 19 06:49:34.520030 2026] [proxy_fcgi:error] [pid 38697:tid 38734] [client 4.228.184.113:50818] AH01071: Got error 'Primary script unknown'
[Tue May 19 06:49:34.845946 2026] [proxy_fcgi:error] [pid 38697:tid 38720] [client 4.228.184.113:50818] AH01071: Got error 'Primary script unknown'
[Tue May 19 06:49:35.183548 2026] [proxy_fcgi:error] [pid 38697:tid 38724] [client 4.228.184.113:50818] AH01071: Got error 'Primary script unknown'
[Tue May 19 06:49:35.510705 2026] [proxy_fcgi:error] [pid 38697:tid 38717] [client 4.228.184.113:50818] AH01071: Got error 'Primary script unknown'
[Tue May 19 06:49:35.830790 2026] [:error] [pid 38697:tid 38727] [client 4.228.184.113:50818] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/pha.php"] [unique_id "aguXf6XP9pP6Kgt-msSxcgAAAAw"]
[Tue May 19 06:49:36.459809 2026] [:error] [pid 38699:tid 38750] [client 4.228.184.113:50833] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/pha.php"] [unique_id "aguXgL--Adsw_P-dthY1xwAAAEg"]
[Tue May 19 06:49:37.198869 2026] [:error] [pid 38814:tid 38818] [client 4.228.184.113:50869] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/pha.php"] [unique_id "aguXgQvkKuBwP0epzWda7QAAAMI"]
[Tue May 19 06:49:38.018296 2026] [:error] [pid 41573:tid 41584] [client 4.228.184.113:32015] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/pha.php"] [unique_id "aguXgi1A2bd6JDSW9RY6JAAAAQk"]
[Tue May 19 06:49:38.695290 2026] [:error] [pid 41573:tid 41599] [client 4.228.184.113:32080] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/c55cdler.php"] [unique_id "aguXgi1A2bd6JDSW9RY6JQAAARg"]
[Tue May 19 06:49:39.357916 2026] [:error] [pid 38814:tid 38819] [client 4.228.184.113:61427] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/c55cdler.php"] [unique_id "aguXgwvkKuBwP0epzWda7wAAAMM"]
[Tue May 19 06:49:40.047584 2026] [:error] [pid 38697:tid 38729] [client 4.228.184.113:40358] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/c55cdler.php"] [unique_id "aguXhKXP9pP6Kgt-msSxeQAAAA4"]
[Tue May 19 06:49:40.688000 2026] [:error] [pid 38705:tid 38769] [client 4.228.184.113:40382] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/c55cdler.php"] [unique_id "aguXhMg5dNOZ5umN9lshaQAAAIA"]
[Tue May 19 06:49:41.346691 2026] [:error] [pid 46896:tid 46903] [client 4.228.184.113:36478] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/guiler.php"] [unique_id "aguXhaCHyzL3Ci9LGE3moAAAAYU"]
[Tue May 19 06:49:42.033117 2026] [:error] [pid 38705:tid 38783] [client 4.228.184.113:61439] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/guiler.php"] [unique_id "aguXhsg5dNOZ5umN9lshagAAAI4"]
[Tue May 19 06:49:42.678508 2026] [:error] [pid 38814:tid 38824] [client 4.228.184.113:39045] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/guiler.php"] [unique_id "aguXhgvkKuBwP0epzWda8wAAAMg"]
[Tue May 19 06:49:44.260297 2026] [:error] [pid 46815:tid 46822] [client 4.228.184.113:61384] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/guiler.php"] [unique_id "aguXiCPnRhJOmA06Lgr_6wAAAUU"]
[Tue May 19 06:49:45.063151 2026] [:error] [pid 38699:tid 38753] [client 4.228.184.113:50829] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/doko.php"] [unique_id "aguXib--Adsw_P-dthY10QAAAEs"]
[Tue May 19 06:49:45.754309 2026] [:error] [pid 38705:tid 38770] [client 4.228.184.113:32123] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/doko.php"] [unique_id "aguXicg5dNOZ5umN9lshcAAAAIE"]
[Tue May 19 06:49:46.517746 2026] [:error] [pid 38697:tid 38739] [client 4.228.184.113:39102] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/doko.php"] [unique_id "aguXiqXP9pP6Kgt-msSxgAAAABg"]
[Tue May 19 06:49:47.197341 2026] [:error] [pid 38705:tid 38787] [client 4.228.184.113:39078] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/doko.php"] [unique_id "aguXi8g5dNOZ5umN9lshcgAAAJI"]
[Tue May 19 06:49:47.904154 2026] [:error] [pid 38697:tid 38718] [client 4.228.184.113:50864] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Okxob.php"] [unique_id "aguXi6XP9pP6Kgt-msSxggAAAAM"]
[Tue May 19 06:49:48.543308 2026] [:error] [pid 38705:tid 38776] [client 4.228.184.113:32025] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Okxob.php"] [unique_id "aguXjMg5dNOZ5umN9lshcwAAAIc"]
[Tue May 19 06:49:49.203535 2026] [:error] [pid 38699:tid 38743] [client 4.228.184.113:39093] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Okxob.php"] [unique_id "aguXjb--Adsw_P-dthY11QAAAEE"]
[Tue May 19 06:49:49.904791 2026] [:error] [pid 38699:tid 38757] [client 4.228.184.113:32046] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Okxob.php"] [unique_id "aguXjb--Adsw_P-dthY11gAAAE8"]
[Tue May 19 06:49:50.634729 2026] [:error] [pid 41573:tid 41580] [client 4.228.184.113:50207] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/error_log.php"] [unique_id "aguXji1A2bd6JDSW9RY6MQAAAQU"]
[Tue May 19 06:49:51.401196 2026] [:error] [pid 38697:tid 38737] [client 4.228.184.113:32045] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/error_log.php"] [unique_id "aguXj6XP9pP6Kgt-msSxhQAAABY"]
[Tue May 19 06:49:52.045702 2026] [:error] [pid 38697:tid 38723] [client 4.228.184.113:39057] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/error_log.php"] [unique_id "aguXkKXP9pP6Kgt-msSxhgAAAAg"]
[Tue May 19 06:49:52.703929 2026] [:error] [pid 38705:tid 38780] [client 4.228.184.113:50867] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/error_log.php"] [unique_id "aguXkMg5dNOZ5umN9lshdgAAAIs"]
[Tue May 19 06:49:53.502566 2026] [:error] [pid 46896:tid 46915] [client 4.228.184.113:50216] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xenon1337.php"] [unique_id "aguXkaCHyzL3Ci9LGE3mogAAAZE"]
[Tue May 19 06:49:54.218492 2026] [:error] [pid 38697:tid 38738] [client 4.228.184.113:32106] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xenon1337.php"] [unique_id "aguXkqXP9pP6Kgt-msSxiAAAABc"]
[Tue May 19 06:49:54.845852 2026] [:error] [pid 38814:tid 38839] [client 4.228.184.113:32024] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xenon1337.php"] [unique_id "aguXkgvkKuBwP0epzWda9QAAANc"]
[Tue May 19 06:49:55.491622 2026] [:error] [pid 46896:tid 46920] [client 4.228.184.113:36450] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xenon1337.php"] [unique_id "aguXk6CHyzL3Ci9LGE3mpQAAAZY"]
[Tue May 19 06:49:56.150553 2026] [:error] [pid 46896:tid 46905] [client 4.228.184.113:40356] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/alfa403.php"] [unique_id "aguXlKCHyzL3Ci9LGE3mqAAAAYc"]
[Tue May 19 06:49:56.806776 2026] [:error] [pid 46896:tid 46901] [client 4.228.184.113:32022] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/alfa403.php"] [unique_id "aguXlKCHyzL3Ci9LGE3mqgAAAYM"]
[Tue May 19 06:49:57.504365 2026] [:error] [pid 38697:tid 38735] [client 4.228.184.113:40321] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/alfa403.php"] [unique_id "aguXlaXP9pP6Kgt-msSxiQAAABQ"]
[Tue May 19 06:49:58.151629 2026] [:error] [pid 38699:tid 38749] [client 4.228.184.113:36428] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/alfa403.php"] [unique_id "aguXlr--Adsw_P-dthY12AAAAEc"]
[Tue May 19 06:49:58.833662 2026] [:error] [pid 38699:tid 38764] [client 4.228.184.113:36475] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/yenifm.php"] [unique_id "aguXlr--Adsw_P-dthY12QAAAFY"]
[Tue May 19 06:49:59.516651 2026] [:error] [pid 38699:tid 38742] [client 4.228.184.113:50872] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/yenifm.php"] [unique_id "aguXl7--Adsw_P-dthY13QAAAEA"]
[Tue May 19 06:50:00.205548 2026] [:error] [pid 38814:tid 38821] [client 4.228.184.113:50827] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/yenifm.php"] [unique_id "aguXmAvkKuBwP0epzWda9gAAAMU"]
[Tue May 19 06:50:00.876095 2026] [:error] [pid 38699:tid 38750] [client 4.228.184.113:50817] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/yenifm.php"] [unique_id "aguXmL--Adsw_P-dthY14QAAAEg"]
[Tue May 19 06:50:01.556510 2026] [:error] [pid 46896:tid 46915] [client 4.228.184.113:36463] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/test11.php"] [unique_id "aguXmaCHyzL3Ci9LGE3msgAAAZE"]
[Tue May 19 06:50:02.218638 2026] [:error] [pid 38697:tid 38716] [client 4.228.184.113:32032] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/test11.php"] [unique_id "aguXmqXP9pP6Kgt-msSxjAAAAAE"]
[Tue May 19 06:50:02.886664 2026] [:error] [pid 38705:tid 38790] [client 4.228.184.113:36444] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/test11.php"] [unique_id "aguXmsg5dNOZ5umN9lshfAAAAJU"]
[Tue May 19 06:50:03.547711 2026] [:error] [pid 38814:tid 38817] [client 4.228.184.113:15728] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/test11.php"] [unique_id "aguXmwvkKuBwP0epzWda-QAAAME"]
[Tue May 19 06:50:04.401763 2026] [:error] [pid 38697:tid 38726] [client 4.228.184.113:32026] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-widget.php"] [unique_id "aguXnKXP9pP6Kgt-msSxjgAAAAs"]
[Tue May 19 06:50:05.067673 2026] [:error] [pid 38697:tid 38722] [client 4.228.184.113:32000] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-widget.php"] [unique_id "aguXnaXP9pP6Kgt-msSxkAAAAAc"]
[Tue May 19 06:50:05.800103 2026] [:error] [pid 38699:tid 38760] [client 4.228.184.113:39080] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-widget.php"] [unique_id "aguXnb--Adsw_P-dthY15wAAAFI"]
[Tue May 19 06:50:06.426113 2026] [:error] [pid 38697:tid 38731] [client 4.228.184.113:39098] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-widget.php"] [unique_id "aguXnqXP9pP6Kgt-msSxkwAAABA"]
[Tue May 19 06:50:07.054939 2026] [:error] [pid 38697:tid 38729] [client 4.228.184.113:50188] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/25d653587fdfd1.php"] [unique_id "aguXn6XP9pP6Kgt-msSxlQAAAA4"]
[Tue May 19 06:50:07.783030 2026] [:error] [pid 38697:tid 38723] [client 4.228.184.113:50207] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/25d653587fdfd1.php"] [unique_id "aguXn6XP9pP6Kgt-msSxlgAAAAg"]
[Tue May 19 06:50:08.545087 2026] [:error] [pid 38705:tid 38789] [client 4.228.184.113:50204] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/25d653587fdfd1.php"] [unique_id "aguXoMg5dNOZ5umN9lshfwAAAJQ"]
[Tue May 19 06:50:09.593677 2026] [:error] [pid 38705:tid 38787] [client 4.228.184.113:32113] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/25d653587fdfd1.php"] [unique_id "aguXocg5dNOZ5umN9lshgAAAAJI"]
[Tue May 19 06:50:10.276138 2026] [:error] [pid 46815:tid 46820] [client 4.228.184.113:50203] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/test5.php"] [unique_id "aguXoiPnRhJOmA06Lgr_9AAAAUM"]
[Tue May 19 06:50:10.934675 2026] [:error] [pid 38699:tid 38766] [client 4.228.184.113:39041] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/test5.php"] [unique_id "aguXor--Adsw_P-dthY17gAAAFg"]
[Tue May 19 06:50:11.785876 2026] [:error] [pid 38699:tid 38758] [client 4.228.184.113:32082] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/test5.php"] [unique_id "aguXo7--Adsw_P-dthY17wAAAFA"]
[Tue May 19 06:50:12.576090 2026] [:error] [pid 38814:tid 38816] [client 4.228.184.113:40327] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/test5.php"] [unique_id "aguXpAvkKuBwP0epzWda-gAAAMA"]
[Tue May 19 06:50:13.217217 2026] [:error] [pid 38814:tid 38831] [client 4.228.184.113:32012] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mih.php"] [unique_id "aguXpQvkKuBwP0epzWda_AAAAM8"]
[Tue May 19 06:50:13.992004 2026] [:error] [pid 38814:tid 38818] [client 4.228.184.113:42835] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mih.php"] [unique_id "aguXpQvkKuBwP0epzWda_QAAAMI"]
[Tue May 19 06:50:14.741437 2026] [:error] [pid 46896:tid 46903] [client 4.228.184.113:32121] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mih.php"] [unique_id "aguXpqCHyzL3Ci9LGE3mxAAAAYU"]
[Tue May 19 06:50:15.403509 2026] [:error] [pid 46896:tid 46904] [client 4.228.184.113:32014] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mih.php"] [unique_id "aguXp6CHyzL3Ci9LGE3mxgAAAYY"]
[Tue May 19 06:50:16.044121 2026] [:error] [pid 46896:tid 46908] [client 4.228.184.113:32017] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zero.php"] [unique_id "aguXqKCHyzL3Ci9LGE3mxwAAAYo"]
[Tue May 19 06:50:16.718334 2026] [:error] [pid 46815:tid 46833] [client 4.228.184.113:50842] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zero.php"] [unique_id "aguXqCPnRhJOmA06Lgr_9gAAAVA"]
[Tue May 19 06:50:17.401490 2026] [:error] [pid 46896:tid 46920] [client 4.228.184.113:50185] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zero.php"] [unique_id "aguXqaCHyzL3Ci9LGE3myQAAAZY"]
[Tue May 19 06:50:18.085850 2026] [:error] [pid 46896:tid 46912] [client 4.228.184.113:36422] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zero.php"] [unique_id "aguXqqCHyzL3Ci9LGE3mywAAAY4"]
[Tue May 19 06:50:18.790756 2026] [:error] [pid 46896:tid 46901] [client 4.228.184.113:36417] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/koala.php"] [unique_id "aguXqqCHyzL3Ci9LGE3mzAAAAYM"]
[Tue May 19 06:50:19.469721 2026] [:error] [pid 46896:tid 46902] [client 4.228.184.113:39049] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/koala.php"] [unique_id "aguXq6CHyzL3Ci9LGE3mzgAAAYQ"]
[Tue May 19 06:50:20.243516 2026] [:error] [pid 46896:tid 46907] [client 4.228.184.113:61394] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/koala.php"] [unique_id "aguXrKCHyzL3Ci9LGE3mzwAAAYk"]
[Tue May 19 06:50:20.997124 2026] [:error] [pid 38814:tid 38819] [client 4.228.184.113:39094] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/koala.php"] [unique_id "aguXrAvkKuBwP0epzWda_gAAAMM"]
[Tue May 19 06:50:21.655481 2026] [:error] [pid 46896:tid 46919] [client 4.228.184.113:32115] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mac.php"] [unique_id "aguXraCHyzL3Ci9LGE3m0QAAAZU"]
[Tue May 19 06:50:22.355745 2026] [:error] [pid 46896:tid 46904] [client 4.228.184.113:32013] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mac.php"] [unique_id "aguXrqCHyzL3Ci9LGE3m1AAAAYY"]
[Tue May 19 06:50:23.026303 2026] [:error] [pid 38814:tid 38830] [client 4.228.184.113:39066] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mac.php"] [unique_id "aguXrwvkKuBwP0epzWda_wAAAM4"]
[Tue May 19 06:50:23.690522 2026] [:error] [pid 41573:tid 41579] [client 4.228.184.113:40372] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mac.php"] [unique_id "aguXry1A2bd6JDSW9RY6PAAAAQQ"]
[Tue May 19 06:50:24.388686 2026] [:error] [pid 46896:tid 46908] [client 4.228.184.113:50877] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hayuk.php"] [unique_id "aguXsKCHyzL3Ci9LGE3m1wAAAYo"]
[Tue May 19 06:50:25.079533 2026] [:error] [pid 46896:tid 46899] [client 4.228.184.113:32100] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hayuk.php"] [unique_id "aguXsaCHyzL3Ci9LGE3m2gAAAYE"]
[Tue May 19 06:50:25.800346 2026] [:error] [pid 46815:tid 46832] [client 4.228.184.113:61405] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hayuk.php"] [unique_id "aguXsSPnRhJOmA06LgoABQAAAU8"]
[Tue May 19 06:50:26.499268 2026] [:error] [pid 38699:tid 38749] [client 4.228.184.113:32103] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hayuk.php"] [unique_id "aguXsr--Adsw_P-dthY1-AAAAEc"]
[Tue May 19 06:50:27.146772 2026] [:error] [pid 46896:tid 46922] [client 4.228.184.113:61437] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/0d.php"] [unique_id "aguXs6CHyzL3Ci9LGE3m3QAAAZg"]
[Tue May 19 06:50:28.075167 2026] [:error] [pid 38699:tid 38766] [client 4.228.184.113:39103] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/0d.php"] [unique_id "aguXtL--Adsw_P-dthY1_QAAAFg"]
[Tue May 19 06:50:28.717090 2026] [:error] [pid 38699:tid 38763] [client 4.228.184.113:40332] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/0d.php"] [unique_id "aguXtL--Adsw_P-dthY1_wAAAFU"]
[Tue May 19 06:50:29.359741 2026] [:error] [pid 46896:tid 46907] [client 4.228.184.113:39083] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/0d.php"] [unique_id "aguXtaCHyzL3Ci9LGE3m4gAAAYk"]
[Tue May 19 06:50:30.086762 2026] [:error] [pid 38697:tid 38725] [client 4.228.184.113:40381] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wefile.php"] [unique_id "aguXtqXP9pP6Kgt-msSxoAAAAAo"]
[Tue May 19 06:50:30.737158 2026] [:error] [pid 46815:tid 46825] [client 4.228.184.113:39096] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wefile.php"] [unique_id "aguXtiPnRhJOmA06LgoACAAAAUg"]
[Tue May 19 06:50:31.422687 2026] [:error] [pid 46815:tid 46826] [client 4.228.184.113:32039] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wefile.php"] [unique_id "aguXtyPnRhJOmA06LgoACgAAAUk"]
[Tue May 19 06:50:32.095439 2026] [:error] [pid 38814:tid 38835] [client 4.228.184.113:50850] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wefile.php"] [unique_id "aguXuAvkKuBwP0epzWdbCAAAANM"]
[Tue May 19 06:50:32.735847 2026] [:error] [pid 38814:tid 38817] [client 4.228.184.113:36468] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/casp3.php"] [unique_id "aguXuAvkKuBwP0epzWdbCgAAAME"]
[Tue May 19 06:50:33.469565 2026] [:error] [pid 41573:tid 41580] [client 4.228.184.113:32090] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/casp3.php"] [unique_id "aguXuS1A2bd6JDSW9RY6PwAAAQU"]
[Tue May 19 06:50:34.142447 2026] [:error] [pid 46815:tid 46835] [client 4.228.184.113:32072] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/casp3.php"] [unique_id "aguXuiPnRhJOmA06LgoADwAAAVI"]
[Tue May 19 06:50:34.774155 2026] [:error] [pid 46815:tid 46840] [client 4.228.184.113:50221] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/casp3.php"] [unique_id "aguXuiPnRhJOmA06LgoAEQAAAVc"]
[Tue May 19 06:50:35.534099 2026] [proxy_fcgi:error] [pid 38697:tid 38733] [client 4.228.184.113:50832] AH01071: Got error 'Primary script unknown'
[Tue May 19 06:50:35.900315 2026] [proxy_fcgi:error] [pid 38697:tid 38719] [client 4.228.184.113:50832] AH01071: Got error 'Primary script unknown'
[Tue May 19 06:50:36.874769 2026] [proxy_fcgi:error] [pid 38697:tid 38723] [client 4.228.184.113:50832] AH01071: Got error 'Primary script unknown'
[Tue May 19 06:50:37.873101 2026] [proxy_fcgi:error] [pid 38697:tid 38720] [client 4.228.184.113:50832] AH01071: Got error 'Primary script unknown'
[Tue May 19 06:50:38.235861 2026] [proxy_fcgi:error] [pid 38697:tid 38727] [client 4.228.184.113:50832] AH01071: Got error 'Primary script unknown'
[Tue May 19 06:50:38.576198 2026] [proxy_fcgi:error] [pid 38697:tid 38739] [client 4.228.184.113:50832] AH01071: Got error 'Primary script unknown'
[Tue May 19 06:50:38.923393 2026] [proxy_fcgi:error] [pid 38697:tid 38718] [client 4.228.184.113:50832] AH01071: Got error 'Primary script unknown'
[Tue May 19 06:50:39.245155 2026] [:error] [pid 38697:tid 38722] [client 4.228.184.113:50832] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wordpress/wp-admin/maint/"] [unique_id "aguXv6XP9pP6Kgt-msSxuQAAAAc"]
[Tue May 19 06:50:39.936016 2026] [:error] [pid 38699:tid 38757] [client 4.228.184.113:50849] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wordpress/wp-admin/maint/"] [unique_id "aguXv7--Adsw_P-dthY2BgAAAE8"]
[Tue May 19 06:50:40.627659 2026] [:error] [pid 38697:tid 38724] [client 4.228.184.113:32046] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wordpress/wp-admin/maint/"] [unique_id "aguXwKXP9pP6Kgt-msSxvQAAAAk"]
[Tue May 19 06:50:41.286401 2026] [:error] [pid 46896:tid 46908] [client 4.228.184.113:32127] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wordpress/wp-admin/maint/"] [unique_id "aguXwaCHyzL3Ci9LGE3m5AAAAYo"]
[Tue May 19 06:50:41.962813 2026] [:error] [pid 41573:tid 41598] [client 4.228.184.113:36426] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-block.php"] [unique_id "aguXwS1A2bd6JDSW9RY6QQAAARc"]
[Tue May 19 06:50:42.678156 2026] [:error] [pid 38697:tid 38717] [client 4.228.184.113:32118] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-block.php"] [unique_id "aguXwqXP9pP6Kgt-msSxvgAAAAI"]
[Tue May 19 06:50:43.336315 2026] [:error] [pid 46815:tid 46826] [client 4.228.184.113:50189] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-block.php"] [unique_id "aguXwyPnRhJOmA06LgoAGAAAAUk"]
[Tue May 19 06:50:43.967806 2026] [:error] [pid 38697:tid 38722] [client 4.228.184.113:39097] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-block.php"] [unique_id "aguXw6XP9pP6Kgt-msSxwAAAAAc"]
[Tue May 19 06:50:44.644172 2026] [:error] [pid 38814:tid 38827] [client 4.228.184.113:36458] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/like.php"] [unique_id "aguXxAvkKuBwP0epzWdbEgAAAMs"]
[Tue May 19 06:50:45.363723 2026] [:error] [pid 38705:tid 38784] [client 4.228.184.113:32124] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/like.php"] [unique_id "aguXxcg5dNOZ5umN9lshiAAAAI8"]
[Tue May 19 06:50:46.084868 2026] [:error] [pid 46896:tid 46913] [client 4.228.184.113:40368] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/like.php"] [unique_id "aguXxqCHyzL3Ci9LGE3m5gAAAY8"]
[Tue May 19 06:50:46.745696 2026] [:error] [pid 41573:tid 41587] [client 4.228.184.113:32112] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/like.php"] [unique_id "aguXxi1A2bd6JDSW9RY6QgAAAQw"]
[Tue May 19 06:50:47.413034 2026] [:error] [pid 38705:tid 38780] [client 4.228.184.113:61393] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kj.php"] [unique_id "aguXx8g5dNOZ5umN9lshjAAAAIs"]
[Tue May 19 06:50:48.099827 2026] [:error] [pid 38697:tid 38733] [client 4.228.184.113:40363] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kj.php"] [unique_id "aguXyKXP9pP6Kgt-msSxwgAAABI"]
[Tue May 19 06:50:48.763935 2026] [:error] [pid 46896:tid 46902] [client 4.228.184.113:50225] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kj.php"] [unique_id "aguXyKCHyzL3Ci9LGE3m7QAAAYQ"]
[Tue May 19 06:50:49.435903 2026] [:error] [pid 38705:tid 38793] [client 4.228.184.113:32016] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kj.php"] [unique_id "aguXycg5dNOZ5umN9lshjgAAAJg"]
[Tue May 19 06:50:50.082152 2026] [:error] [pid 38699:tid 38753] [client 4.228.184.113:50831] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/about.php"] [unique_id "aguXyr--Adsw_P-dthY2CwAAAEs"]
[Tue May 19 06:50:50.738133 2026] [:error] [pid 38699:tid 38746] [client 4.228.184.113:50868] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/about.php"] [unique_id "aguXyr--Adsw_P-dthY2DQAAAEQ"]
[Tue May 19 06:50:51.376258 2026] [:error] [pid 38699:tid 38752] [client 4.228.184.113:50237] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/about.php"] [unique_id "aguXy7--Adsw_P-dthY2DwAAAEo"]
[Tue May 19 06:50:52.015705 2026] [:error] [pid 41573:tid 41599] [client 4.228.184.113:39079] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/.well-known/about.php"] [unique_id "aguXzC1A2bd6JDSW9RY6RAAAARg"]
[Tue May 19 06:50:52.704998 2026] [:error] [pid 38699:tid 38751] [client 4.228.184.113:32048] [client 4.228.184.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aguXzL--Adsw_P-dthY2EAAAAEk"]
[Tue May 19 06:50:53.405652 2026] [:error] [pid 38699:tid 38755] [client 4.228.184.113:50856] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wpxml.php"] [unique_id "aguXzb--Adsw_P-dthY2EgAAAE0"]
[Tue May 19 06:50:54.110337 2026] [:error] [pid 38699:tid 38743] [client 4.228.184.113:36429] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wpxml.php"] [unique_id "aguXzr--Adsw_P-dthY2FAAAAEE"]
[Tue May 19 06:50:54.815308 2026] [:error] [pid 38699:tid 38760] [client 4.228.184.113:50184] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wpxml.php"] [unique_id "aguXzr--Adsw_P-dthY2FgAAAFI"]
[Tue May 19 06:50:55.475009 2026] [:error] [pid 46896:tid 46917] [client 4.228.184.113:15692] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wpxml.php"] [unique_id "aguXz6CHyzL3Ci9LGE3m8AAAAZM"]
[Tue May 19 06:50:56.138383 2026] [:error] [pid 38814:tid 38833] [client 4.228.184.113:39085] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bob.php"] [unique_id "aguX0AvkKuBwP0epzWdbGQAAANE"]
[Tue May 19 06:50:56.870821 2026] [:error] [pid 38699:tid 38756] [client 4.228.184.113:32075] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bob.php"] [unique_id "aguX0L--Adsw_P-dthY2GQAAAE4"]
[Tue May 19 06:50:57.841103 2026] [:error] [pid 38699:tid 38742] [client 4.228.184.113:40325] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bob.php"] [unique_id "aguX0b--Adsw_P-dthY2GgAAAEA"]
[Tue May 19 06:50:58.600751 2026] [:error] [pid 46815:tid 46826] [client 4.228.184.113:8161] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bob.php"] [unique_id "aguX0iPnRhJOmA06LgoAKAAAAUk"]
[Tue May 19 06:50:59.262491 2026] [:error] [pid 46896:tid 46915] [client 4.228.184.113:50851] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/spawns.php"] [unique_id "aguX06CHyzL3Ci9LGE3m8QAAAZE"]
[Tue May 19 06:50:59.918832 2026] [:error] [pid 46896:tid 46908] [client 4.228.184.113:39061] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/spawns.php"] [unique_id "aguX06CHyzL3Ci9LGE3m8gAAAYo"]
[Tue May 19 06:51:00.587314 2026] [:error] [pid 38699:tid 38745] [client 4.228.184.113:39063] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/spawns.php"] [unique_id "aguX1L--Adsw_P-dthY2GwAAAEM"]
[Tue May 19 06:51:01.245090 2026] [:error] [pid 38699:tid 38763] [client 4.228.184.113:36477] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/spawns.php"] [unique_id "aguX1b--Adsw_P-dthY2HgAAAFU"]
[Tue May 19 06:51:02.138662 2026] [:error] [pid 38699:tid 38746] [client 4.228.184.113:39050] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/t3s.php"] [unique_id "aguX1r--Adsw_P-dthY2HwAAAEQ"]
[Tue May 19 06:51:02.932431 2026] [:error] [pid 38705:tid 38772] [client 4.228.184.113:50231] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/t3s.php"] [unique_id "aguX1sg5dNOZ5umN9lshkgAAAIM"]
[Tue May 19 06:51:03.695885 2026] [:error] [pid 46896:tid 46913] [client 4.228.184.113:32028] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/t3s.php"] [unique_id "aguX16CHyzL3Ci9LGE3m8wAAAY8"]
[Tue May 19 06:51:04.451840 2026] [:error] [pid 38699:tid 38752] [client 4.228.184.113:32107] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/t3s.php"] [unique_id "aguX2L--Adsw_P-dthY2IQAAAEo"]
[Tue May 19 06:51:05.191634 2026] [:error] [pid 46896:tid 46918] [client 4.228.184.113:36419] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/"] [unique_id "aguX2aCHyzL3Ci9LGE3m9AAAAZQ"]
[Tue May 19 06:51:05.920781 2026] [:error] [pid 41573:tid 41589] [client 4.228.184.113:50838] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/"] [unique_id "aguX2S1A2bd6JDSW9RY6RwAAAQ4"]
[Tue May 19 06:51:06.658555 2026] [:error] [pid 46896:tid 46898] [client 4.228.184.113:32087] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/"] [unique_id "aguX2qCHyzL3Ci9LGE3m9QAAAYA"]
[Tue May 19 06:51:07.374595 2026] [:error] [pid 38697:tid 38720] [client 4.228.184.113:40361] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/"] [unique_id "aguX26XP9pP6Kgt-msSx1wAAAAU"]
[Tue May 19 06:51:08.069286 2026] [:error] [pid 41573:tid 41588] [client 4.228.184.113:61390] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x/"] [unique_id "aguX3C1A2bd6JDSW9RY6SQAAAQ0"]
[Tue May 19 06:51:08.699518 2026] [:error] [pid 38705:tid 38790] [client 4.228.184.113:36435] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x/"] [unique_id "aguX3Mg5dNOZ5umN9lshlQAAAJU"]
[Tue May 19 06:51:09.383817 2026] [:error] [pid 46815:tid 46823] [client 4.228.184.113:61419] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x/"] [unique_id "aguX3SPnRhJOmA06LgoALwAAAUY"]
[Tue May 19 06:51:10.052324 2026] [:error] [pid 38699:tid 38748] [client 4.228.184.113:8164] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x/"] [unique_id "aguX3r--Adsw_P-dthY2IwAAAEY"]
[Tue May 19 06:51:10.684995 2026] [:error] [pid 46815:tid 46840] [client 4.228.184.113:8167] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/colors/modern/"] [unique_id "aguX3iPnRhJOmA06LgoAMQAAAVc"]
[Tue May 19 06:51:11.351987 2026] [:error] [pid 38699:tid 38755] [client 4.228.184.113:36461] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/colors/modern/"] [unique_id "aguX37--Adsw_P-dthY2JAAAAE0"]
[Tue May 19 06:51:12.050121 2026] [:error] [pid 38697:tid 38715] [client 4.228.184.113:32105] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/colors/modern/"] [unique_id "aguX4KXP9pP6Kgt-msSx2gAAAAA"]
[Tue May 19 06:51:12.693282 2026] [:error] [pid 38697:tid 38723] [client 4.228.184.113:32058] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/colors/modern/"] [unique_id "aguX4KXP9pP6Kgt-msSx2wAAAAg"]
[Tue May 19 06:51:13.322777 2026] [:error] [pid 41573:tid 41593] [client 4.228.184.113:39090] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/js/"] [unique_id "aguX4S1A2bd6JDSW9RY6SgAAARI"]
[Tue May 19 06:51:13.953446 2026] [:error] [pid 41573:tid 41591] [client 4.228.184.113:39073] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/js/"] [unique_id "aguX4S1A2bd6JDSW9RY6SwAAARA"]
[Tue May 19 06:51:14.655337 2026] [:error] [pid 41573:tid 41586] [client 4.228.184.113:32070] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/js/"] [unique_id "aguX4i1A2bd6JDSW9RY6TAAAAQs"]
[Tue May 19 06:51:15.325056 2026] [:error] [pid 38697:tid 38719] [client 4.228.184.113:61410] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/js/"] [unique_id "aguX46XP9pP6Kgt-msSx4QAAAAQ"]
[Tue May 19 06:51:15.951205 2026] [:error] [pid 38697:tid 38720] [client 4.228.184.113:20520] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/uwu.php"] [unique_id "aguX46XP9pP6Kgt-msSx5AAAAAU"]
[Tue May 19 06:51:16.593927 2026] [:error] [pid 41573:tid 41597] [client 4.228.184.113:8145] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/uwu.php"] [unique_id "aguX5C1A2bd6JDSW9RY6TQAAARY"]
[Tue May 19 06:51:17.258011 2026] [:error] [pid 46896:tid 46909] [client 4.228.184.113:61412] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/uwu.php"] [unique_id "aguX5aCHyzL3Ci9LGE3m-gAAAYs"]
[Tue May 19 06:51:17.895533 2026] [:error] [pid 38697:tid 38715] [client 4.228.184.113:20588] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/uwu.php"] [unique_id "aguX5aXP9pP6Kgt-msSx6AAAAAA"]
[Tue May 19 06:51:18.520624 2026] [:error] [pid 38697:tid 38735] [client 4.228.184.113:32093] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/uwa.php"] [unique_id "aguX5qXP9pP6Kgt-msSx6QAAABQ"]
[Tue May 19 06:51:19.170445 2026] [:error] [pid 38697:tid 38737] [client 4.228.184.113:8137] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/uwa.php"] [unique_id "aguX56XP9pP6Kgt-msSx7QAAABY"]
[Tue May 19 06:51:19.831955 2026] [:error] [pid 46896:tid 46902] [client 4.228.184.113:61436] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/uwa.php"] [unique_id "aguX56CHyzL3Ci9LGE3m-wAAAYQ"]
[Tue May 19 06:51:20.475367 2026] [:error] [pid 38699:tid 38764] [client 4.228.184.113:50859] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/uwa.php"] [unique_id "aguX6L--Adsw_P-dthY2JwAAAFY"]
[Tue May 19 06:51:21.121431 2026] [:error] [pid 38699:tid 38749] [client 4.228.184.113:61432] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/crgio.php"] [unique_id "aguX6b--Adsw_P-dthY2KAAAAEc"]
[Tue May 19 06:51:21.769493 2026] [:error] [pid 41573:tid 41592] [client 4.228.184.113:39091] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/crgio.php"] [unique_id "aguX6S1A2bd6JDSW9RY6TwAAARE"]
[Tue May 19 06:51:22.470816 2026] [:error] [pid 41573:tid 41579] [client 4.228.184.113:50865] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/crgio.php"] [unique_id "aguX6i1A2bd6JDSW9RY6UAAAAQQ"]
[Tue May 19 06:51:23.125049 2026] [:error] [pid 38697:tid 38729] [client 4.228.184.113:32083] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/crgio.php"] [unique_id "aguX66XP9pP6Kgt-msSx8wAAAA4"]
[Tue May 19 06:51:23.794714 2026] [:error] [pid 38697:tid 38734] [client 4.228.184.113:32002] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/geforce.php"] [unique_id "aguX66XP9pP6Kgt-msSx9QAAABM"]
[Tue May 19 06:51:24.458585 2026] [:error] [pid 38705:tid 38788] [client 4.228.184.113:50190] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/geforce.php"] [unique_id "aguX7Mg5dNOZ5umN9lshmQAAAJM"]
[Tue May 19 06:51:25.119493 2026] [:error] [pid 41573:tid 41576] [client 4.228.184.113:15698] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/geforce.php"] [unique_id "aguX7S1A2bd6JDSW9RY6UwAAAQE"]
[Tue May 19 06:51:25.783457 2026] [:error] [pid 41573:tid 41594] [client 4.228.184.113:40365] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/geforce.php"] [unique_id "aguX7S1A2bd6JDSW9RY6VAAAARM"]
[Tue May 19 06:51:26.473718 2026] [:error] [pid 41573:tid 41584] [client 4.228.184.113:40380] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-load.php"] [unique_id "aguX7i1A2bd6JDSW9RY6VgAAAQk"]
[Tue May 19 06:51:27.113383 2026] [:error] [pid 41573:tid 41595] [client 4.228.184.113:50224] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-load.php"] [unique_id "aguX7y1A2bd6JDSW9RY6WAAAARQ"]
[Tue May 19 06:51:27.779376 2026] [:error] [pid 41573:tid 41578] [client 4.228.184.113:40345] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-load.php"] [unique_id "aguX7y1A2bd6JDSW9RY6WgAAAQM"]
[Tue May 19 06:51:28.420992 2026] [:error] [pid 46815:tid 46838] [client 4.228.184.113:50878] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-load.php"] [unique_id "aguX8CPnRhJOmA06LgoANgAAAVU"]
[Tue May 19 06:51:29.077435 2026] [:error] [pid 46896:tid 46910] [client 4.228.184.113:50183] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/3PJcpMFsD8B.php"] [unique_id "aguX8aCHyzL3Ci9LGE3m_AAAAYw"]
[Tue May 19 06:51:29.804110 2026] [:error] [pid 46896:tid 46914] [client 4.228.184.113:20519] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/3PJcpMFsD8B.php"] [unique_id "aguX8aCHyzL3Ci9LGE3m_gAAAZA"]
[Tue May 19 06:51:30.444204 2026] [:error] [pid 38705:tid 38774] [client 4.228.184.113:15621] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/3PJcpMFsD8B.php"] [unique_id "aguX8sg5dNOZ5umN9lshnQAAAIU"]
[Tue May 19 06:51:31.112877 2026] [:error] [pid 38697:tid 38735] [client 4.228.184.113:40380] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/3PJcpMFsD8B.php"] [unique_id "aguX86XP9pP6Kgt-msSx9gAAABQ"]
[Tue May 19 06:51:31.774374 2026] [:error] [pid 38697:tid 38736] [client 4.228.184.113:50229] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/UsbXax.php"] [unique_id "aguX86XP9pP6Kgt-msSx9wAAABU"]
[Tue May 19 06:51:32.436632 2026] [:error] [pid 38697:tid 38739] [client 4.228.184.113:32054] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/UsbXax.php"] [unique_id "aguX9KXP9pP6Kgt-msSx-gAAABg"]
[Tue May 19 06:51:33.096345 2026] [:error] [pid 38699:tid 38748] [client 4.228.184.113:32088] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/UsbXax.php"] [unique_id "aguX9b--Adsw_P-dthY2MQAAAEY"]
[Tue May 19 06:51:33.743645 2026] [:error] [pid 38699:tid 38743] [client 4.228.184.113:36472] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/UsbXax.php"] [unique_id "aguX9b--Adsw_P-dthY2MgAAAEE"]
[Tue May 19 06:51:34.391359 2026] [:error] [pid 46815:tid 46821] [client 4.228.184.113:50202] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zoko.php"] [unique_id "aguX9iPnRhJOmA06LgoAOQAAAUQ"]
[Tue May 19 06:51:35.046334 2026] [:error] [pid 38699:tid 38749] [client 4.228.184.113:61415] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zoko.php"] [unique_id "aguX97--Adsw_P-dthY2NQAAAEc"]
[Tue May 19 06:51:35.695032 2026] [:error] [pid 38697:tid 38725] [client 4.228.184.113:50198] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zoko.php"] [unique_id "aguX96XP9pP6Kgt-msSx-wAAAAo"]
[Tue May 19 06:51:36.349174 2026] [:error] [pid 38697:tid 38722] [client 4.228.184.113:40350] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zoko.php"] [unique_id "aguX-KXP9pP6Kgt-msSx_AAAAAc"]
[Tue May 19 06:51:37.010341 2026] [:error] [pid 46815:tid 46834] [client 4.228.184.113:32027] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/pucci.php"] [unique_id "aguX-SPnRhJOmA06LgoAPgAAAVE"]
[Tue May 19 06:51:37.656707 2026] [:error] [pid 46815:tid 46827] [client 4.228.184.113:32029] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/pucci.php"] [unique_id "aguX-SPnRhJOmA06LgoAPwAAAUo"]
[Tue May 19 06:51:38.319606 2026] [proxy_fcgi:error] [pid 46815:tid 46836] [client 4.228.184.113:32069] AH01071: Got error 'Primary script unknown'
[Tue May 19 06:51:40.002042 2026] [proxy_fcgi:error] [pid 46815:tid 46841] [client 4.228.184.113:32069] AH01071: Got error 'Primary script unknown'
[Tue May 19 06:51:40.353064 2026] [proxy_fcgi:error] [pid 46815:tid 46820] [client 4.228.184.113:32069] AH01071: Got error 'Primary script unknown'
[Tue May 19 06:51:40.675179 2026] [proxy_fcgi:error] [pid 46815:tid 46822] [client 4.228.184.113:32069] AH01071: Got error 'Primary script unknown'
[Tue May 19 06:51:41.365857 2026] [proxy_fcgi:error] [pid 46815:tid 46825] [client 4.228.184.113:32069] AH01071: Got error 'Primary script unknown'
[Tue May 19 06:51:41.707560 2026] [proxy_fcgi:error] [pid 46815:tid 46826] [client 4.228.184.113:32069] AH01071: Got error 'Primary script unknown'
[Tue May 19 06:51:42.047652 2026] [:error] [pid 46815:tid 46838] [client 4.228.184.113:32069] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aguX_iPnRhJOmA06LgoASwAAAVU"]
[Tue May 19 06:51:42.718812 2026] [:error] [pid 46815:tid 46828] [client 4.228.184.113:15737] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aguX_iPnRhJOmA06LgoATAAAAUs"]
[Tue May 19 06:51:43.375866 2026] [:error] [pid 46815:tid 46829] [client 4.228.184.113:32059] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aguX_yPnRhJOmA06LgoATQAAAUw"]
[Tue May 19 06:51:44.074358 2026] [:error] [pid 38705:tid 38783] [client 4.228.184.113:50874] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aguYAMg5dNOZ5umN9lshnwAAAI4"]
[Tue May 19 06:51:44.726497 2026] [:error] [pid 38705:tid 38772] [client 4.228.184.113:50852] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dx.php"] [unique_id "aguYAMg5dNOZ5umN9lshoQAAAIM"]
[Tue May 19 06:51:45.393083 2026] [:error] [pid 38699:tid 38757] [client 4.228.184.113:61403] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dx.php"] [unique_id "aguYAb--Adsw_P-dthY2QgAAAE8"]
[Tue May 19 06:51:46.110477 2026] [:error] [pid 38705:tid 38769] [client 4.228.184.113:15687] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dx.php"] [unique_id "aguYAsg5dNOZ5umN9lshogAAAIA"]
[Tue May 19 06:51:46.746919 2026] [:error] [pid 46815:tid 46834] [client 4.228.184.113:32005] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dx.php"] [unique_id "aguYAiPnRhJOmA06LgoATwAAAVE"]
[Tue May 19 06:51:47.414846 2026] [:error] [pid 38697:tid 38719] [client 4.228.184.113:36459] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/puc.php"] [unique_id "aguYA6XP9pP6Kgt-msSx_gAAAAQ"]
[Tue May 19 06:51:48.096735 2026] [:error] [pid 38697:tid 38729] [client 4.228.184.113:32120] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/puc.php"] [unique_id "aguYBKXP9pP6Kgt-msSx_wAAAA4"]
[Tue May 19 06:51:48.773932 2026] [:error] [pid 46815:tid 46839] [client 4.228.184.113:39047] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/puc.php"] [unique_id "aguYBCPnRhJOmA06LgoAVQAAAVY"]
[Tue May 19 06:51:49.405916 2026] [:error] [pid 38697:tid 38720] [client 4.228.184.113:36466] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/puc.php"] [unique_id "aguYBaXP9pP6Kgt-msSyAQAAAAU"]
[Tue May 19 06:51:50.046188 2026] [:error] [pid 38697:tid 38734] [client 4.228.184.113:61428] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/themes.php"] [unique_id "aguYBqXP9pP6Kgt-msSyAwAAABM"]
[Tue May 19 06:51:50.714462 2026] [:error] [pid 38697:tid 38738] [client 4.228.184.113:32011] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/themes.php"] [unique_id "aguYBqXP9pP6Kgt-msSyBAAAABc"]
[Tue May 19 06:51:51.389327 2026] [:error] [pid 38697:tid 38733] [client 4.228.184.113:20538] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/themes.php"] [unique_id "aguYB6XP9pP6Kgt-msSyBQAAABI"]
[Tue May 19 06:51:52.019171 2026] [:error] [pid 46896:tid 46903] [client 4.228.184.113:15646] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/themes.php"] [unique_id "aguYCKCHyzL3Ci9LGE3m_wAAAYU"]
[Tue May 19 06:51:52.662009 2026] [:error] [pid 38697:tid 38735] [client 4.228.184.113:32110] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dx.php"] [unique_id "aguYCKXP9pP6Kgt-msSyBgAAABQ"]
[Tue May 19 06:51:53.300732 2026] [:error] [pid 38697:tid 38739] [client 4.228.184.113:32068] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dx.php"] [unique_id "aguYCaXP9pP6Kgt-msSyCQAAABg"]
[Tue May 19 06:51:53.972885 2026] [:error] [pid 38697:tid 38724] [client 4.228.184.113:50835] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dx.php"] [unique_id "aguYCaXP9pP6Kgt-msSyCgAAAAk"]
[Tue May 19 06:51:54.643507 2026] [:error] [pid 38697:tid 38732] [client 4.228.184.113:8163] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dx.php"] [unique_id "aguYCqXP9pP6Kgt-msSyDAAAABE"]
[Tue May 19 06:51:55.300985 2026] [:error] [pid 38697:tid 38726] [client 4.228.184.113:32076] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/awa.php"] [unique_id "aguYC6XP9pP6Kgt-msSyDQAAAAs"]
[Tue May 19 06:51:55.974019 2026] [:error] [pid 46815:tid 46838] [client 4.228.184.113:20542] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/awa.php"] [unique_id "aguYCyPnRhJOmA06LgoAWgAAAVU"]
[Tue May 19 06:51:56.656523 2026] [:error] [pid 38705:tid 38778] [client 4.228.184.113:50186] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/awa.php"] [unique_id "aguYDMg5dNOZ5umN9lshpAAAAIk"]
[Tue May 19 06:51:57.347657 2026] [:error] [pid 46896:tid 46917] [client 4.228.184.113:32018] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/awa.php"] [unique_id "aguYDaCHyzL3Ci9LGE3nAgAAAZM"]
[Tue May 19 06:51:57.988657 2026] [:error] [pid 46896:tid 46918] [client 4.228.184.113:50192] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/11.php"] [unique_id "aguYDaCHyzL3Ci9LGE3nAwAAAZQ"]
[Tue May 19 06:51:58.656322 2026] [:error] [pid 41573:tid 41594] [client 4.228.184.113:32091] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/11.php"] [unique_id "aguYDi1A2bd6JDSW9RY6eQAAARM"]
[Tue May 19 06:51:59.356143 2026] [:error] [pid 41573:tid 41584] [client 4.228.184.113:40377] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/11.php"] [unique_id "aguYDy1A2bd6JDSW9RY6egAAAQk"]
[Tue May 19 06:52:00.021613 2026] [:error] [pid 41573:tid 41582] [client 4.228.184.113:50879] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/11.php"] [unique_id "aguYEC1A2bd6JDSW9RY6fQAAAQc"]
[Tue May 19 06:52:00.727096 2026] [:error] [pid 46896:tid 46911] [client 4.228.184.113:40348] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/p.php"] [unique_id "aguYEKCHyzL3Ci9LGE3nBwAAAY0"]
[Tue May 19 06:52:01.442538 2026] [:error] [pid 38705:tid 38789] [client 4.228.184.113:50232] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/p.php"] [unique_id "aguYEcg5dNOZ5umN9lshpgAAAJQ"]
[Tue May 19 06:52:02.144230 2026] [:error] [pid 41573:tid 41580] [client 4.228.184.113:32089] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/p.php"] [unique_id "aguYEi1A2bd6JDSW9RY6ggAAAQU"]
[Tue May 19 06:52:02.916942 2026] [:error] [pid 38697:tid 38716] [client 4.228.184.113:39089] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/p.php"] [unique_id "aguYEqXP9pP6Kgt-msSyEgAAAAE"]
[Tue May 19 06:52:03.603734 2026] [:error] [pid 46815:tid 46817] [client 4.228.184.113:39048] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Requests/"] [unique_id "aguYEyPnRhJOmA06LgoAXgAAAUA"]
[Tue May 19 06:52:04.311432 2026] [:error] [pid 38705:tid 38788] [client 4.228.184.113:50834] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Requests/"] [unique_id "aguYFMg5dNOZ5umN9lshpwAAAJM"]
[Tue May 19 06:52:04.962372 2026] [:error] [pid 38814:tid 38838] [client 4.228.184.113:50839] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Requests/"] [unique_id "aguYFAvkKuBwP0epzWdbHAAAANY"]
[Tue May 19 06:52:05.746361 2026] [:error] [pid 46896:tid 46904] [client 4.228.184.113:20544] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Requests/"] [unique_id "aguYFaCHyzL3Ci9LGE3nCwAAAYY"]
[Tue May 19 06:52:06.477006 2026] [:error] [pid 38705:tid 38777] [client 4.228.184.113:8142] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bthil.php"] [unique_id "aguYFsg5dNOZ5umN9lshqQAAAIg"]
[Tue May 19 06:52:07.108750 2026] [:error] [pid 46896:tid 46917] [client 4.228.184.113:39101] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bthil.php"] [unique_id "aguYF6CHyzL3Ci9LGE3nDAAAAZM"]
[Tue May 19 06:52:07.884110 2026] [:error] [pid 41573:tid 41587] [client 4.228.184.113:39046] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bthil.php"] [unique_id "aguYFy1A2bd6JDSW9RY6gwAAAQw"]
[Tue May 19 06:52:08.698765 2026] [:error] [pid 38705:tid 38774] [client 4.228.184.113:40364] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bthil.php"] [unique_id "aguYGMg5dNOZ5umN9lshqgAAAIU"]
[Tue May 19 06:52:09.346090 2026] [:error] [pid 46896:tid 46918] [client 4.228.184.113:32117] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/seo.php"] [unique_id "aguYGaCHyzL3Ci9LGE3nDwAAAZQ"]
[Tue May 19 06:52:10.088298 2026] [:error] [pid 38699:tid 38761] [client 4.228.184.113:32006] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/seo.php"] [unique_id "aguYGr--Adsw_P-dthY2UgAAAFM"]
[Tue May 19 06:52:10.729578 2026] [:error] [pid 38705:tid 38780] [client 4.228.184.113:50864] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/seo.php"] [unique_id "aguYGsg5dNOZ5umN9lshrAAAAIs"]
[Tue May 19 06:52:11.364219 2026] [:error] [pid 46896:tid 46920] [client 4.228.184.113:32126] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/seo.php"] [unique_id "aguYG6CHyzL3Ci9LGE3nEgAAAZY"]
[Tue May 19 06:52:12.042137 2026] [:error] [pid 46896:tid 46922] [client 4.228.184.113:50194] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/7.php"] [unique_id "aguYHKCHyzL3Ci9LGE3nEwAAAZg"]
[Tue May 19 06:52:12.673357 2026] [:error] [pid 38705:tid 38783] [client 4.228.184.113:50212] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/7.php"] [unique_id "aguYHMg5dNOZ5umN9lshrwAAAI4"]
[Tue May 19 06:52:13.335018 2026] [:error] [pid 41573:tid 41595] [client 4.228.184.113:40341] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/7.php"] [unique_id "aguYHS1A2bd6JDSW9RY6hQAAARQ"]
[Tue May 19 06:52:13.996603 2026] [:error] [pid 41573:tid 41581] [client 4.228.184.113:32040] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/7.php"] [unique_id "aguYHS1A2bd6JDSW9RY6hgAAAQY"]
[Tue May 19 06:52:14.865287 2026] [:error] [pid 41573:tid 41582] [client 4.228.184.113:39082] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/8.php"] [unique_id "aguYHi1A2bd6JDSW9RY6hwAAAQc"]
[Tue May 19 06:52:15.574193 2026] [:error] [pid 38814:tid 38819] [client 4.228.184.113:40373] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/8.php"] [unique_id "aguYHwvkKuBwP0epzWdbHQAAAMM"]
[Tue May 19 06:52:16.364218 2026] [:error] [pid 41573:tid 41577] [client 4.228.184.113:32098] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/8.php"] [unique_id "aguYIC1A2bd6JDSW9RY6igAAAQI"]
[Tue May 19 06:52:17.018475 2026] [:error] [pid 41573:tid 41599] [client 4.228.184.113:32111] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/8.php"] [unique_id "aguYIS1A2bd6JDSW9RY6iwAAARg"]
[Tue May 19 06:52:17.658691 2026] [:error] [pid 41573:tid 41597] [client 4.228.184.113:32096] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/1.php"] [unique_id "aguYIS1A2bd6JDSW9RY6jgAAARY"]
[Tue May 19 06:52:18.468288 2026] [:error] [pid 41573:tid 41586] [client 4.228.184.113:50844] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/1.php"] [unique_id "aguYIi1A2bd6JDSW9RY6jwAAAQs"]
[Tue May 19 06:52:19.157751 2026] [:error] [pid 41573:tid 41579] [client 4.228.184.113:40326] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/1.php"] [unique_id "aguYIy1A2bd6JDSW9RY6kAAAAQQ"]
[Tue May 19 06:52:19.793878 2026] [:error] [pid 38699:tid 38760] [client 4.228.184.113:61420] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/1.php"] [unique_id "aguYI7--Adsw_P-dthY2VAAAAFI"]
[Tue May 19 06:52:20.536144 2026] [:error] [pid 38697:tid 38732] [client 4.228.184.113:50823] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class.php"] [unique_id "aguYJKXP9pP6Kgt-msSyFwAAABE"]
[Tue May 19 06:52:21.867029 2026] [:error] [pid 38699:tid 38757] [client 4.228.184.113:50223] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class.php"] [unique_id "aguYJb--Adsw_P-dthY2VQAAAE8"]
[Tue May 19 06:52:22.510203 2026] [:error] [pid 38697:tid 38728] [client 4.228.184.113:36479] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class.php"] [unique_id "aguYJqXP9pP6Kgt-msSyGQAAAA0"]
[Tue May 19 06:52:23.274448 2026] [:error] [pid 38697:tid 38729] [client 4.228.184.113:39044] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class.php"] [unique_id "aguYJ6XP9pP6Kgt-msSyHAAAAA4"]
[Tue May 19 06:52:24.082756 2026] [:error] [pid 38697:tid 38735] [client 4.228.184.113:50238] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/100.php"] [unique_id "aguYKKXP9pP6Kgt-msSyIQAAABQ"]
[Tue May 19 06:52:24.739594 2026] [:error] [pid 38705:tid 38770] [client 4.228.184.113:40320] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/100.php"] [unique_id "aguYKMg5dNOZ5umN9lshtAAAAIE"]
[Tue May 19 06:52:25.380692 2026] [:error] [pid 38697:tid 38737] [client 4.228.184.113:20502] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/100.php"] [unique_id "aguYKaXP9pP6Kgt-msSyJAAAABY"]
[Tue May 19 06:52:26.118891 2026] [:error] [pid 38697:tid 38725] [client 4.228.184.113:36418] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/100.php"] [unique_id "aguYKqXP9pP6Kgt-msSyJwAAAAo"]
[Tue May 19 06:52:26.919938 2026] [:error] [pid 46896:tid 46917] [client 4.228.184.113:39040] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2026w.php"] [unique_id "aguYKqCHyzL3Ci9LGE3nGQAAAZM"]
[Tue May 19 06:52:27.701217 2026] [:error] [pid 38697:tid 38735] [client 4.228.184.113:32010] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2026w.php"] [unique_id "aguYK6XP9pP6Kgt-msSyQQAAABQ"]
[Tue May 19 06:52:28.377287 2026] [:error] [pid 46896:tid 46898] [client 4.228.184.113:15709] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2026w.php"] [unique_id "aguYLKCHyzL3Ci9LGE3nHQAAAYA"]
[Tue May 19 06:52:29.376697 2026] [:error] [pid 38814:tid 38830] [client 4.228.184.113:36433] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/2026w.php"] [unique_id "aguYLQvkKuBwP0epzWdbIAAAAM4"]
[Tue May 19 06:52:30.037780 2026] [:error] [pid 38814:tid 38827] [client 4.228.184.113:20485] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/about.php"] [unique_id "aguYLgvkKuBwP0epzWdbIQAAAMs"]
[Tue May 19 06:52:30.842428 2026] [:error] [pid 38699:tid 38749] [client 4.228.184.113:50199] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/about.php"] [unique_id "aguYLr--Adsw_P-dthY2VgAAAEc"]
[Tue May 19 06:52:31.757977 2026] [:error] [pid 38699:tid 38763] [client 4.228.184.113:15701] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/about.php"] [unique_id "aguYL7--Adsw_P-dthY2VwAAAFU"]
[Tue May 19 06:52:32.549434 2026] [:error] [pid 38705:tid 38793] [client 4.228.184.113:39069] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/about.php"] [unique_id "aguYMMg5dNOZ5umN9lshvQAAAJg"]
[Tue May 19 06:52:33.295712 2026] [:error] [pid 38705:tid 38783] [client 4.228.184.113:32114] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xa.php"] [unique_id "aguYMcg5dNOZ5umN9lshvgAAAI4"]
[Tue May 19 06:52:33.963355 2026] [:error] [pid 38705:tid 38772] [client 4.228.184.113:7644] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xa.php"] [unique_id "aguYMcg5dNOZ5umN9lshvwAAAIM"]
[Tue May 19 06:52:34.790626 2026] [:error] [pid 38699:tid 38746] [client 4.228.184.113:15721] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xa.php"] [unique_id "aguYMr--Adsw_P-dthY2WgAAAEQ"]
[Tue May 19 06:52:35.477197 2026] [:error] [pid 46815:tid 46830] [client 4.228.184.113:40354] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xa.php"] [unique_id "aguYMyPnRhJOmA06LgoAcAAAAU0"]
[Tue May 19 06:52:36.131200 2026] [:error] [pid 38697:tid 38716] [client 4.228.184.113:50208] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin.php"] [unique_id "aguYNKXP9pP6Kgt-msSycwAAAAE"]
[Tue May 19 06:52:36.885984 2026] [:error] [pid 38705:tid 38786] [client 4.228.184.113:40374] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin.php"] [unique_id "aguYNMg5dNOZ5umN9lshwAAAAJE"]
[Tue May 19 06:52:37.538609 2026] [:error] [pid 38697:tid 38736] [client 4.228.184.113:15678] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin.php"] [unique_id "aguYNaXP9pP6Kgt-msSydAAAABU"]
[Tue May 19 06:52:38.214461 2026] [:error] [pid 38699:tid 38750] [client 4.228.184.113:40355] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin.php"] [unique_id "aguYNr--Adsw_P-dthY2XQAAAEg"]
[Tue May 19 06:52:38.969834 2026] [:error] [pid 38705:tid 38769] [client 4.228.184.113:32043] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/do.php"] [unique_id "aguYNsg5dNOZ5umN9lshwgAAAIA"]
[Tue May 19 06:52:39.621205 2026] [:error] [pid 38705:tid 38779] [client 4.228.184.113:32077] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/do.php"] [unique_id "aguYN8g5dNOZ5umN9lshwwAAAIo"]
[Tue May 19 06:52:40.249130 2026] [:error] [pid 46815:tid 46839] [client 4.228.184.113:50821] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/do.php"] [unique_id "aguYOCPnRhJOmA06LgoAdAAAAVY"]
[Tue May 19 06:52:40.908585 2026] [:error] [pid 38705:tid 38787] [client 4.228.184.113:50876] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/do.php"] [unique_id "aguYOMg5dNOZ5umN9lshxAAAAJI"]
[Tue May 19 06:52:41.598034 2026] [proxy_fcgi:error] [pid 41573:tid 41595] [client 4.228.184.113:50840] AH01071: Got error 'Primary script unknown'
[Tue May 19 06:52:41.937861 2026] [proxy_fcgi:error] [pid 41573:tid 41581] [client 4.228.184.113:50840] AH01071: Got error 'Primary script unknown'
[Tue May 19 06:52:42.291391 2026] [proxy_fcgi:error] [pid 41573:tid 41582] [client 4.228.184.113:50840] AH01071: Got error 'Primary script unknown'
[Tue May 19 06:52:42.952155 2026] [proxy_fcgi:error] [pid 41573:tid 41599] [client 4.228.184.113:50840] AH01071: Got error 'Primary script unknown'
[Tue May 19 06:52:43.273635 2026] [proxy_fcgi:error] [pid 41573:tid 41585] [client 4.228.184.113:50840] AH01071: Got error 'Primary script unknown'
[Tue May 19 06:52:43.614307 2026] [proxy_fcgi:error] [pid 41573:tid 41578] [client 4.228.184.113:50840] AH01071: Got error 'Primary script unknown'
[Tue May 19 06:52:44.258866 2026] [proxy_fcgi:error] [pid 41573:tid 41593] [client 4.228.184.113:50840] AH01071: Got error 'Primary script unknown'
[Tue May 19 06:52:44.651637 2026] [proxy_fcgi:error] [pid 41573:tid 41588] [client 4.228.184.113:50840] AH01071: Got error 'Primary script unknown'
[Tue May 19 06:52:45.299960 2026] [:error] [pid 41573:tid 41579] [client 4.228.184.113:50840] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-blog.php"] [unique_id "aguYPS1A2bd6JDSW9RY6oAAAAQQ"]
[Tue May 19 06:52:45.960524 2026] [:error] [pid 46815:tid 46836] [client 4.228.184.113:50873] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-blog.php"] [unique_id "aguYPSPnRhJOmA06LgoArQAAAVM"]
[Tue May 19 06:52:46.680393 2026] [:error] [pid 46815:tid 46833] [client 4.228.184.113:61376] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-blog.php"] [unique_id "aguYPiPnRhJOmA06LgoAwwAAAVA"]
[Tue May 19 06:52:47.348377 2026] [:error] [pid 46815:tid 46824] [client 4.228.184.113:36443] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-blog.php"] [unique_id "aguYPyPnRhJOmA06LgoA1QAAAUc"]
[Tue May 19 06:52:48.049159 2026] [:error] [pid 38699:tid 38758] [client 4.228.184.113:64886] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aguYQL--Adsw_P-dthY2hgAAAFA"]
[Tue May 19 06:52:48.728925 2026] [:error] [pid 38699:tid 38763] [client 4.228.184.113:20497] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aguYQL--Adsw_P-dthY2jgAAAFU"]
[Tue May 19 06:52:49.434669 2026] [:error] [pid 38697:tid 38737] [client 4.228.184.113:32041] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aguYQaXP9pP6Kgt-msSyjQAAABY"]
[Tue May 19 06:52:50.238695 2026] [:error] [pid 38697:tid 38736] [client 4.228.184.113:39077] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aguYQqXP9pP6Kgt-msSylAAAABU"]
[Tue May 19 06:52:51.138005 2026] [:error] [pid 38697:tid 38735] [client 4.228.184.113:32031] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "aguYQ6XP9pP6Kgt-msSylgAAABQ"]
[Tue May 19 06:52:51.789124 2026] [:error] [pid 38697:tid 38719] [client 4.228.184.113:50824] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "aguYQ6XP9pP6Kgt-msSylwAAAAQ"]
[Tue May 19 06:52:52.536952 2026] [:error] [pid 38699:tid 38759] [client 4.228.184.113:50819] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "aguYRL--Adsw_P-dthY2oQAAAFE"]
[Tue May 19 06:52:53.210397 2026] [:error] [pid 46815:tid 46833] [client 4.228.184.113:32020] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "aguYRSPnRhJOmA06LgoBBAAAAVA"]
[Tue May 19 06:52:53.928910 2026] [:error] [pid 38699:tid 38753] [client 4.228.184.113:32108] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/adminfuns.php"] [unique_id "aguYRb--Adsw_P-dthY2ogAAAEs"]
[Tue May 19 06:52:54.598549 2026] [:error] [pid 38699:tid 38755] [client 4.228.184.113:64867] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/adminfuns.php"] [unique_id "aguYRr--Adsw_P-dthY2pAAAAE0"]
[Tue May 19 06:52:55.252869 2026] [:error] [pid 46815:tid 46840] [client 4.228.184.113:20507] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/adminfuns.php"] [unique_id "aguYRyPnRhJOmA06LgoBCAAAAVc"]
[Tue May 19 06:52:55.955903 2026] [:error] [pid 38697:tid 38733] [client 4.228.184.113:20525] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/adminfuns.php"] [unique_id "aguYR6XP9pP6Kgt-msSymgAAABI"]
[Tue May 19 06:52:56.661158 2026] [:error] [pid 38697:tid 38734] [client 4.228.184.113:20582] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/goods.php"] [unique_id "aguYSKXP9pP6Kgt-msSynAAAABM"]
[Tue May 19 06:52:57.362179 2026] [:error] [pid 38697:tid 38727] [client 4.228.184.113:61387] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/goods.php"] [unique_id "aguYSaXP9pP6Kgt-msSyngAAAAw"]
[Tue May 19 06:52:58.080798 2026] [:error] [pid 38697:tid 38721] [client 4.228.184.113:20517] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/goods.php"] [unique_id "aguYSqXP9pP6Kgt-msSyogAAAAY"]
[Tue May 19 06:52:58.841134 2026] [:error] [pid 46896:tid 46913] [client 4.228.184.113:42817] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/goods.php"] [unique_id "aguYSqCHyzL3Ci9LGE3nKAAAAY8"]
[Tue May 19 06:52:59.516652 2026] [:error] [pid 38697:tid 38738] [client 4.228.184.113:39064] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ms-edit.php"] [unique_id "aguYS6XP9pP6Kgt-msSyuwAAABc"]
[Tue May 19 06:53:00.273585 2026] [:error] [pid 38697:tid 38734] [client 4.228.184.113:36437] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ms-edit.php"] [unique_id "aguYTKXP9pP6Kgt-msSyvwAAABM"]
[Tue May 19 06:53:01.028092 2026] [:error] [pid 38814:tid 38840] [client 4.228.184.113:20555] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ms-edit.php"] [unique_id "aguYTQvkKuBwP0epzWdbMQAAANg"]
[Tue May 19 06:53:01.966953 2026] [:error] [pid 38697:tid 38720] [client 4.228.184.113:61400] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ms-edit.php"] [unique_id "aguYTaXP9pP6Kgt-msSyywAAAAU"]
[Tue May 19 06:53:02.731353 2026] [:error] [pid 38697:tid 38733] [client 4.228.184.113:32016] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/222.php"] [unique_id "aguYTqXP9pP6Kgt-msSyzgAAABI"]
[Tue May 19 06:53:03.905772 2026] [:error] [pid 38697:tid 38719] [client 4.228.184.113:32097] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/222.php"] [unique_id "aguYT6XP9pP6Kgt-msSy0gAAAAQ"]
[Tue May 19 06:53:04.769948 2026] [:error] [pid 46815:tid 46820] [client 4.228.184.113:61407] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/222.php"] [unique_id "aguYUCPnRhJOmA06LgoBDgAAAUM"]
[Tue May 19 06:53:05.585851 2026] [:error] [pid 41573:tid 41598] [client 4.228.184.113:20563] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/222.php"] [unique_id "aguYUS1A2bd6JDSW9RY6qAAAARc"]
[Tue May 19 06:53:06.830611 2026] [:error] [pid 38697:tid 38720] [client 4.228.184.113:15664] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aguYUqXP9pP6Kgt-msSy1gAAAAU"]
[Tue May 19 06:53:08.019021 2026] [:error] [pid 38697:tid 38732] [client 4.228.184.113:50862] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aguYVKXP9pP6Kgt-msSy1wAAABE"]
[Tue May 19 06:53:09.873856 2026] [:error] [pid 41573:tid 41585] [client 4.228.184.113:15735] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aguYVS1A2bd6JDSW9RY6qwAAAQo"]
[Tue May 19 06:53:11.167797 2026] [:error] [pid 38814:tid 38832] [client 4.228.184.113:32065] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aguYVwvkKuBwP0epzWdbNQAAANA"]
[Tue May 19 06:53:12.284170 2026] [:error] [pid 38697:tid 38737] [client 4.228.184.113:7646] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aguYWKXP9pP6Kgt-msSy3gAAABY"]
[Tue May 19 06:53:13.145533 2026] [:error] [pid 46815:tid 46823] [client 4.228.184.113:20483] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aguYWSPnRhJOmA06LgoBGwAAAUY"]
[Tue May 19 06:53:14.349571 2026] [:error] [pid 38705:tid 38778] [client 4.228.184.113:61414] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aguYWsg5dNOZ5umN9lsh0wAAAIk"]
[Tue May 19 06:53:15.519812 2026] [:error] [pid 46815:tid 46836] [client 4.228.184.113:7646] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aguYWyPnRhJOmA06LgoBHQAAAVM"]
[Tue May 19 06:53:16.298984 2026] [:error] [pid 46896:tid 46907] [client 4.228.184.113:40347] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/BDKR28WP.php"] [unique_id "aguYXKCHyzL3Ci9LGE3nLwAAAYk"]
[Tue May 19 06:53:17.045133 2026] [:error] [pid 46815:tid 46825] [client 4.228.184.113:50875] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/BDKR28WP.php"] [unique_id "aguYXSPnRhJOmA06LgoBIgAAAUg"]
[Tue May 19 06:53:17.882977 2026] [:error] [pid 38697:tid 38733] [client 4.228.184.113:15712] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/BDKR28WP.php"] [unique_id "aguYXaXP9pP6Kgt-msSy8QAAABI"]
[Tue May 19 06:53:18.988579 2026] [:error] [pid 38697:tid 38736] [client 4.228.184.113:50858] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/BDKR28WP.php"] [unique_id "aguYXqXP9pP6Kgt-msSy9gAAABU"]
[Tue May 19 06:53:27.277360 2026] [:error] [pid 46896:tid 46906] [client 4.228.184.113:7643] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aguYZ6CHyzL3Ci9LGE3nOQAAAYg"]
[Tue May 19 06:53:28.823930 2026] [:error] [pid 41573:tid 41587] [client 4.228.184.113:20546] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aguYaC1A2bd6JDSW9RY6tAAAAQw"]
[Tue May 19 06:53:29.543424 2026] [:error] [pid 46896:tid 46921] [client 4.228.184.113:59323] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aguYaaCHyzL3Ci9LGE3nPAAAAZc"]
[Tue May 19 06:53:30.221726 2026] [:error] [pid 38705:tid 38784] [client 4.228.184.113:55865] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aguYasg5dNOZ5umN9lsh2QAAAI8"]
[Tue May 19 06:53:30.940631 2026] [:error] [pid 46896:tid 46912] [client 4.228.184.113:61416] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/uploads/"] [unique_id "aguYaqCHyzL3Ci9LGE3nPQAAAY4"]
[Tue May 19 06:53:31.586542 2026] [:error] [pid 46896:tid 46899] [client 4.228.184.113:20585] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/uploads/"] [unique_id "aguYa6CHyzL3Ci9LGE3nPgAAAYE"]
[Tue May 19 06:53:32.346723 2026] [:error] [pid 41573:tid 41581] [client 4.228.184.113:50837] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/uploads/"] [unique_id "aguYbC1A2bd6JDSW9RY6tgAAAQY"]
[Tue May 19 06:53:33.062345 2026] [:error] [pid 38705:tid 38781] [client 4.228.184.113:40353] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/uploads/"] [unique_id "aguYbcg5dNOZ5umN9lsh2wAAAIw"]
[Tue May 19 06:53:33.799116 2026] [:error] [pid 46896:tid 46914] [client 4.228.184.113:50854] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp.php"] [unique_id "aguYbaCHyzL3Ci9LGE3nPwAAAZA"]
[Tue May 19 06:53:34.462452 2026] [:error] [pid 46815:tid 46836] [client 4.228.184.113:50233] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp.php"] [unique_id "aguYbiPnRhJOmA06LgoBKgAAAVM"]
[Tue May 19 06:53:35.210266 2026] [:error] [pid 46896:tid 46901] [client 4.228.184.113:61379] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp.php"] [unique_id "aguYb6CHyzL3Ci9LGE3nQAAAAYM"]
[Tue May 19 06:53:35.891782 2026] [:error] [pid 46896:tid 46910] [client 4.228.184.113:40331] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp.php"] [unique_id "aguYb6CHyzL3Ci9LGE3nQQAAAYw"]
[Tue May 19 06:53:36.590814 2026] [:error] [pid 46896:tid 46903] [client 4.228.184.113:50209] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aguYcKCHyzL3Ci9LGE3nQgAAAYU"]
[Tue May 19 06:53:37.301119 2026] [:error] [pid 38699:tid 38766] [client 4.228.184.113:50828] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aguYcb--Adsw_P-dthY2sAAAAFg"]
[Tue May 19 06:53:38.031132 2026] [:error] [pid 41573:tid 41593] [client 4.228.184.113:8155] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aguYci1A2bd6JDSW9RY6ugAAARI"]
[Tue May 19 06:53:38.734556 2026] [:error] [pid 38814:tid 38824] [client 4.228.184.113:20606] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aguYcgvkKuBwP0epzWdbPgAAAMg"]
[Tue May 19 06:53:39.367971 2026] [:error] [pid 46815:tid 46824] [client 4.228.184.113:39084] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/av.php"] [unique_id "aguYcyPnRhJOmA06LgoBKwAAAUc"]
[Tue May 19 06:53:39.995508 2026] [:error] [pid 38814:tid 38827] [client 4.228.184.113:20552] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/av.php"] [unique_id "aguYcwvkKuBwP0epzWdbPwAAAMs"]
[Tue May 19 06:53:40.620758 2026] [:error] [pid 46896:tid 46917] [client 4.228.184.113:40362] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/av.php"] [unique_id "aguYdKCHyzL3Ci9LGE3nRQAAAZM"]
[Tue May 19 06:53:41.316160 2026] [:error] [pid 38814:tid 38826] [client 4.228.184.113:32064] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/av.php"] [unique_id "aguYdQvkKuBwP0epzWdbQAAAAMo"]
[Tue May 19 06:53:42.024266 2026] [:error] [pid 38814:tid 38829] [client 4.228.184.113:8191] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/abcd.php"] [unique_id "aguYdgvkKuBwP0epzWdbQgAAAM0"]
[Tue May 19 06:53:42.797977 2026] [:error] [pid 38705:tid 38787] [client 4.228.184.113:36446] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/abcd.php"] [unique_id "aguYdsg5dNOZ5umN9lsh3wAAAJI"]
[Tue May 19 06:53:43.500034 2026] [:error] [pid 38705:tid 38778] [client 4.228.184.113:40359] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/abcd.php"] [unique_id "aguYd8g5dNOZ5umN9lsh4gAAAIk"]
[Tue May 19 06:53:44.180575 2026] [proxy_fcgi:error] [pid 38705:tid 38785] [client 4.228.184.113:39075] AH01071: Got error 'Primary script unknown'
[Tue May 19 06:53:44.498658 2026] [proxy_fcgi:error] [pid 38705:tid 38773] [client 4.228.184.113:39075] AH01071: Got error 'Primary script unknown'
[Tue May 19 06:53:45.191890 2026] [:error] [pid 38705:tid 38792] [client 4.228.184.113:39075] [client 4.228.184.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aguYecg5dNOZ5umN9lsh5wAAAJc"]
[Tue May 19 06:53:45.844012 2026] [proxy_fcgi:error] [pid 46815:tid 46821] [client 4.228.184.113:42825] AH01071: Got error 'Primary script unknown'
[Tue May 19 06:53:46.504642 2026] [proxy_fcgi:error] [pid 46815:tid 46822] [client 4.228.184.113:42825] AH01071: Got error 'Primary script unknown'
[Tue May 19 06:53:47.462352 2026] [proxy_fcgi:error] [pid 46815:tid 46830] [client 4.228.184.113:42825] AH01071: Got error 'Primary script unknown'
[Tue May 19 06:53:48.455918 2026] [:error] [pid 46815:tid 46826] [client 4.228.184.113:42825] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/simple.php"] [unique_id "aguYfCPnRhJOmA06LgoBNwAAAUk"]
[Tue May 19 06:53:49.335636 2026] [:error] [pid 41573:tid 41586] [client 4.228.184.113:36478] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/simple.php"] [unique_id "aguYfS1A2bd6JDSW9RY6uwAAAQs"]
[Tue May 19 06:53:49.974130 2026] [:error] [pid 38814:tid 38836] [client 4.228.184.113:36445] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/simple.php"] [unique_id "aguYfQvkKuBwP0epzWdbSQAAANQ"]
[Tue May 19 06:53:50.756606 2026] [:error] [pid 38705:tid 38781] [client 4.228.184.113:20564] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/simple.php"] [unique_id "aguYfsg5dNOZ5umN9lsh6gAAAIw"]
[Tue May 19 06:53:51.524390 2026] [:error] [pid 38699:tid 38752] [client 4.228.184.113:40343] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/buy.php"] [unique_id "aguYf7--Adsw_P-dthY2ugAAAEo"]
[Tue May 19 06:53:52.165749 2026] [:error] [pid 41573:tid 41588] [client 4.228.184.113:32033] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/buy.php"] [unique_id "aguYgC1A2bd6JDSW9RY6vAAAAQ0"]
[Tue May 19 06:53:52.830396 2026] [:error] [pid 41573:tid 41592] [client 4.228.184.113:36469] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/buy.php"] [unique_id "aguYgC1A2bd6JDSW9RY6vQAAARE"]
[Tue May 19 06:53:53.629446 2026] [:error] [pid 46815:tid 46827] [client 4.228.184.113:50847] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/buy.php"] [unique_id "aguYgSPnRhJOmA06LgoBOQAAAUo"]
[Tue May 19 06:53:54.303371 2026] [:error] [pid 41573:tid 41583] [client 4.228.184.113:61395] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xxx.php"] [unique_id "aguYgi1A2bd6JDSW9RY6vgAAAQg"]
[Tue May 19 06:53:54.983975 2026] [:error] [pid 46896:tid 46920] [client 4.228.184.113:15632] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xxx.php"] [unique_id "aguYgqCHyzL3Ci9LGE3nSAAAAZY"]
[Tue May 19 06:53:55.734348 2026] [:error] [pid 38814:tid 38838] [client 4.228.184.113:15695] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xxx.php"] [unique_id "aguYgwvkKuBwP0epzWdbSwAAANY"]
[Tue May 19 06:53:56.568327 2026] [:error] [pid 41573:tid 41576] [client 4.228.184.113:61383] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xxx.php"] [unique_id "aguYhC1A2bd6JDSW9RY6wgAAAQE"]
[Tue May 19 06:53:57.206088 2026] [:error] [pid 38705:tid 38771] [client 4.228.184.113:39076] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hypo.php"] [unique_id "aguYhcg5dNOZ5umN9lsh6wAAAII"]
[Tue May 19 06:53:57.905667 2026] [:error] [pid 41573:tid 41598] [client 4.228.184.113:20557] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hypo.php"] [unique_id "aguYhS1A2bd6JDSW9RY6xAAAARc"]
[Tue May 19 06:53:58.607131 2026] [:error] [pid 38699:tid 38750] [client 4.228.184.113:50829] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hypo.php"] [unique_id "aguYhr--Adsw_P-dthY2wAAAAEg"]
[Tue May 19 06:53:59.555757 2026] [:error] [pid 38699:tid 38758] [client 4.228.184.113:32057] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hypo.php"] [unique_id "aguYh7--Adsw_P-dthY2wwAAAFA"]
[Tue May 19 06:54:00.961749 2026] [:error] [pid 38699:tid 38757] [client 4.228.184.113:32079] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "aguYiL--Adsw_P-dthY2xgAAAE8"]
[Tue May 19 06:54:01.586412 2026] [:error] [pid 46815:tid 46836] [client 4.228.184.113:7620] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "aguYiSPnRhJOmA06LgoBPAAAAVM"]
[Tue May 19 06:54:02.232714 2026] [:error] [pid 38699:tid 38765] [client 4.228.184.113:39095] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "aguYir--Adsw_P-dthY2xwAAAFc"]
[Tue May 19 06:54:02.905117 2026] [:error] [pid 38697:tid 38735] [client 4.228.184.113:36447] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "aguYiqXP9pP6Kgt-msSy-gAAABQ"]
[Tue May 19 06:54:03.538446 2026] [:error] [pid 38699:tid 38749] [client 4.228.184.113:42823] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/chosen.php"] [unique_id "aguYi7--Adsw_P-dthY2ygAAAEc"]
[Tue May 19 06:54:04.204484 2026] [:error] [pid 38705:tid 38786] [client 4.228.184.113:36432] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/chosen.php"] [unique_id "aguYjMg5dNOZ5umN9lsh7AAAAJE"]
[Tue May 19 06:54:04.901671 2026] [:error] [pid 46896:tid 46907] [client 4.228.184.113:7661] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/chosen.php"] [unique_id "aguYjKCHyzL3Ci9LGE3nSgAAAYk"]
[Tue May 19 06:54:05.567328 2026] [:error] [pid 41573:tid 41581] [client 4.228.184.113:61422] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/chosen.php"] [unique_id "aguYjS1A2bd6JDSW9RY6xgAAAQY"]
[Tue May 19 06:54:06.242212 2026] [:error] [pid 41573:tid 41577] [client 4.228.184.113:15682] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/block-bindings/"] [unique_id "aguYji1A2bd6JDSW9RY6xwAAAQI"]
[Tue May 19 06:54:06.886719 2026] [:error] [pid 38699:tid 38745] [client 4.228.184.113:32001] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/block-bindings/"] [unique_id "aguYjr--Adsw_P-dthY2zgAAAEM"]
[Tue May 19 06:54:07.570171 2026] [:error] [pid 38699:tid 38748] [client 4.228.184.113:40367] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/block-bindings/"] [unique_id "aguYj7--Adsw_P-dthY2zwAAAEY"]
[Tue May 19 06:54:08.206762 2026] [:error] [pid 38814:tid 38837] [client 4.228.184.113:50201] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/block-bindings/"] [unique_id "aguYkAvkKuBwP0epzWdbUgAAANU"]
[Tue May 19 06:54:08.858909 2026] [:error] [pid 38814:tid 38822] [client 4.228.184.113:39071] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/00.php"] [unique_id "aguYkAvkKuBwP0epzWdbVAAAAMY"]
[Tue May 19 06:54:09.558459 2026] [:error] [pid 38697:tid 38733] [client 4.228.184.113:39072] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/00.php"] [unique_id "aguYkaXP9pP6Kgt-msSy_AAAABI"]
[Tue May 19 06:54:10.198824 2026] [:error] [pid 38697:tid 38723] [client 4.228.184.113:32095] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/00.php"] [unique_id "aguYkqXP9pP6Kgt-msSy_QAAAAg"]
[Tue May 19 06:54:10.856938 2026] [:error] [pid 38705:tid 38775] [client 4.228.184.113:15715] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/00.php"] [unique_id "aguYksg5dNOZ5umN9lsh8AAAAIY"]
[Tue May 19 06:54:11.502880 2026] [:error] [pid 38814:tid 38818] [client 4.228.184.113:40335] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/als.php"] [unique_id "aguYkwvkKuBwP0epzWdbWAAAAMI"]
[Tue May 19 06:54:12.136984 2026] [:error] [pid 46815:tid 46820] [client 4.228.184.113:32066] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/als.php"] [unique_id "aguYlCPnRhJOmA06LgoBQgAAAUM"]
[Tue May 19 06:54:12.856741 2026] [:error] [pid 46815:tid 46841] [client 4.228.184.113:8141] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/als.php"] [unique_id "aguYlCPnRhJOmA06LgoBRgAAAVg"]
[Tue May 19 06:54:13.565137 2026] [:error] [pid 46815:tid 46822] [client 4.228.184.113:50866] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/als.php"] [unique_id "aguYlSPnRhJOmA06LgoBRwAAAUU"]
[Tue May 19 06:54:14.284550 2026] [:error] [pid 38705:tid 38776] [client 4.228.184.113:50867] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/pol.php"] [unique_id "aguYlsg5dNOZ5umN9lsh8wAAAIc"]
[Tue May 19 06:54:14.961206 2026] [:error] [pid 46815:tid 46837] [client 4.228.184.113:20580] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/pol.php"] [unique_id "aguYliPnRhJOmA06LgoBSAAAAVQ"]
[Tue May 19 06:54:15.712615 2026] [:error] [pid 38705:tid 38774] [client 4.228.184.113:50217] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/pol.php"] [unique_id "aguYl8g5dNOZ5umN9lsh9AAAAIU"]
[Tue May 19 06:54:16.418083 2026] [:error] [pid 38699:tid 38755] [client 4.228.184.113:32123] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/pol.php"] [unique_id "aguYmL--Adsw_P-dthY23wAAAE0"]
[Tue May 19 06:54:17.132481 2026] [:error] [pid 38697:tid 38737] [client 4.228.184.113:40323] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ms-amdin.php"] [unique_id "aguYmaXP9pP6Kgt-msSzCAAAABY"]
[Tue May 19 06:54:17.895874 2026] [:error] [pid 38697:tid 38739] [client 4.228.184.113:40351] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ms-amdin.php"] [unique_id "aguYmaXP9pP6Kgt-msSzDAAAABg"]
[Tue May 19 06:54:18.802191 2026] [:error] [pid 38697:tid 38732] [client 4.228.184.113:36463] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ms-amdin.php"] [unique_id "aguYmqXP9pP6Kgt-msSzDwAAABE"]
[Tue May 19 06:54:19.447781 2026] [:error] [pid 38705:tid 38781] [client 4.228.184.113:40340] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ms-amdin.php"] [unique_id "aguYm8g5dNOZ5umN9lsh9wAAAIw"]
[Tue May 19 06:54:20.189856 2026] [:error] [pid 38697:tid 38727] [client 4.228.184.113:15633] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sf.php"] [unique_id "aguYnKXP9pP6Kgt-msSzEgAAAAw"]
[Tue May 19 06:54:20.838589 2026] [:error] [pid 38697:tid 38719] [client 4.228.184.113:20575] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sf.php"] [unique_id "aguYnKXP9pP6Kgt-msSzEwAAAAQ"]
[Tue May 19 06:54:21.504800 2026] [:error] [pid 38699:tid 38755] [client 4.228.184.113:39054] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sf.php"] [unique_id "aguYnb--Adsw_P-dthY26wAAAE0"]
[Tue May 19 06:54:22.221747 2026] [:error] [pid 38699:tid 38746] [client 4.228.184.113:20486] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sf.php"] [unique_id "aguYnr--Adsw_P-dthY27AAAAEQ"]
[Tue May 19 06:54:22.849128 2026] [:error] [pid 38699:tid 38756] [client 4.228.184.113:40349] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file5.php"] [unique_id "aguYnr--Adsw_P-dthY27wAAAE4"]
[Tue May 19 06:54:23.607905 2026] [:error] [pid 38697:tid 38737] [client 4.228.184.113:50861] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file5.php"] [unique_id "aguYn6XP9pP6Kgt-msSzFQAAABY"]
[Tue May 19 06:54:24.280540 2026] [:error] [pid 38697:tid 38726] [client 4.228.184.113:15713] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file5.php"] [unique_id "aguYoKXP9pP6Kgt-msSzFgAAAAs"]
[Tue May 19 06:54:24.938836 2026] [:error] [pid 41573:tid 41588] [client 4.228.184.113:32044] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file5.php"] [unique_id "aguYoC1A2bd6JDSW9RY6ygAAAQ0"]
[Tue May 19 06:54:25.565518 2026] [:error] [pid 38699:tid 38750] [client 4.228.184.113:15706] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fs.php"] [unique_id "aguYob--Adsw_P-dthY2-gAAAEg"]
[Tue May 19 06:54:28.300515 2026] [:error] [pid 38697:tid 38718] [client 4.228.184.113:15714] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fs.php"] [unique_id "aguYpKXP9pP6Kgt-msSzNAAAAAM"]
[Tue May 19 06:54:29.083069 2026] [:error] [pid 38705:tid 38785] [client 4.228.184.113:32052] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fs.php"] [unique_id "aguYpcg5dNOZ5umN9lsiDgAAAJA"]
[Tue May 19 06:54:29.805285 2026] [:error] [pid 38697:tid 38738] [client 4.228.184.113:32099] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fs.php"] [unique_id "aguYpaXP9pP6Kgt-msSzOwAAABc"]
[Tue May 19 06:54:30.524119 2026] [:error] [pid 41573:tid 41592] [client 4.228.184.113:32032] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/4PJcpMFsD8B.php"] [unique_id "aguYpi1A2bd6JDSW9RY6ywAAARE"]
[Tue May 19 06:54:31.683835 2026] [:error] [pid 38697:tid 38738] [client 4.228.184.113:50230] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/4PJcpMFsD8B.php"] [unique_id "aguYp6XP9pP6Kgt-msSzRAAAABc"]
[Tue May 19 06:54:32.370677 2026] [:error] [pid 46815:tid 46837] [client 4.228.184.113:59290] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/4PJcpMFsD8B.php"] [unique_id "aguYqCPnRhJOmA06LgoBYAAAAVQ"]
[Tue May 19 06:54:33.087425 2026] [:error] [pid 46815:tid 46824] [client 4.228.184.113:64841] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/4PJcpMFsD8B.php"] [unique_id "aguYqSPnRhJOmA06LgoBYQAAAUc"]
[Tue May 19 06:54:33.721024 2026] [:error] [pid 38697:tid 38736] [client 4.228.184.113:20498] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file.php"] [unique_id "aguYqaXP9pP6Kgt-msSzRwAAABU"]
[Tue May 19 06:54:34.463353 2026] [:error] [pid 38697:tid 38732] [client 4.228.184.113:39078] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file.php"] [unique_id "aguYqqXP9pP6Kgt-msSzSwAAABE"]
[Tue May 19 06:54:35.154633 2026] [:error] [pid 38697:tid 38717] [client 4.228.184.113:36454] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file.php"] [unique_id "aguYq6XP9pP6Kgt-msSzUgAAAAI"]
[Tue May 19 06:54:35.855891 2026] [:error] [pid 38697:tid 38728] [client 4.228.184.113:32113] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file.php"] [unique_id "aguYq6XP9pP6Kgt-msSzVAAAAA0"]
[Tue May 19 06:54:36.593992 2026] [:error] [pid 38697:tid 38737] [client 4.228.184.113:50178] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cfile.php"] [unique_id "aguYrKXP9pP6Kgt-msSzWAAAABY"]
[Tue May 19 06:54:37.225017 2026] [:error] [pid 38697:tid 38734] [client 4.228.184.113:39065] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cfile.php"] [unique_id "aguYraXP9pP6Kgt-msSzWwAAABM"]
[Tue May 19 06:54:37.917154 2026] [:error] [pid 38699:tid 38748] [client 4.228.184.113:39070] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cfile.php"] [unique_id "aguYrb--Adsw_P-dthY3LAAAAEY"]
[Tue May 19 06:54:38.592382 2026] [:error] [pid 38697:tid 38723] [client 4.228.184.113:20482] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cfile.php"] [unique_id "aguYrqXP9pP6Kgt-msSzXQAAAAg"]
[Tue May 19 06:54:39.954946 2026] [:error] [pid 38697:tid 38716] [client 4.228.184.113:36476] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class-wp.php"] [unique_id "aguYr6XP9pP6Kgt-msSzYAAAAAE"]
[Tue May 19 06:54:40.611978 2026] [:error] [pid 38697:tid 38732] [client 4.228.184.113:20484] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class-wp.php"] [unique_id "aguYsKXP9pP6Kgt-msSzYwAAABE"]
[Tue May 19 06:54:41.350285 2026] [:error] [pid 46896:tid 46917] [client 4.228.184.113:61439] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class-wp.php"] [unique_id "aguYsaCHyzL3Ci9LGE3nWQAAAZM"]
[Tue May 19 06:54:42.071695 2026] [:error] [pid 38699:tid 38766] [client 4.228.184.113:32125] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/class-wp.php"] [unique_id "aguYsr--Adsw_P-dthY3MwAAAFg"]
[Tue May 19 06:54:42.750916 2026] [:error] [pid 38699:tid 38761] [client 4.228.184.113:20587] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ahax.php"] [unique_id "aguYsr--Adsw_P-dthY3NQAAAFM"]
[Tue May 19 06:54:43.490498 2026] [:error] [pid 41573:tid 41576] [client 4.228.184.113:15617] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ahax.php"] [unique_id "aguYsy1A2bd6JDSW9RY6zgAAAQE"]
[Tue May 19 06:54:44.144151 2026] [:error] [pid 41573:tid 41584] [client 4.228.184.113:61421] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ahax.php"] [unique_id "aguYtC1A2bd6JDSW9RY60wAAAQk"]
[Tue May 19 06:54:44.784930 2026] [:error] [pid 38697:tid 38732] [client 4.228.184.113:7619] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ahax.php"] [unique_id "aguYtKXP9pP6Kgt-msSzaAAAABE"]
[Tue May 19 06:54:45.426544 2026] [:error] [pid 46815:tid 46825] [client 4.228.184.113:32003] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aa2.php"] [unique_id "aguYtSPnRhJOmA06LgoBZwAAAUg"]
[Tue May 19 06:54:46.142682 2026] [:error] [pid 46896:tid 46921] [client 4.228.184.113:50842] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aa2.php"] [unique_id "aguYtqCHyzL3Ci9LGE3nXgAAAZc"]
[Tue May 19 06:54:46.826378 2026] [:error] [pid 38697:tid 38723] [client 4.228.184.113:20514] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aa2.php"] [unique_id "aguYtqXP9pP6Kgt-msSzawAAAAg"]
[Tue May 19 06:54:47.453830 2026] [:error] [pid 46896:tid 46906] [client 4.228.184.113:42837] [client 4.228.184.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aa2.php"] [unique_id "aguYt6CHyzL3Ci9LGE3nXwAAAYg"]
[Tue May 19 06:54:48.115058 2026] [proxy_fcgi:error] [pid 41573:tid 41581] [client 4.228.184.113:40381] AH01071: Got error 'Primary script unknown'
[Tue May 19 06:54:48.436435 2026] [proxy_fcgi:error] [pid 41573:tid 41577] [client 4.228.184.113:40381] AH01071: Got error 'Primary script unknown'
[Tue May 19 06:54:48.771719 2026] [proxy_fcgi:error] [pid 41573:tid 41578] [client 4.228.184.113:40381] AH01071: Got error 'Primary script unknown'
[Tue May 19 06:54:49.099811 2026] [proxy_fcgi:error] [pid 41573:tid 41597] [client 4.228.184.113:40381] AH01071: Got error 'Primary script unknown'
[Tue May 19 06:54:49.421566 2026] [proxy_fcgi:error] [pid 41573:tid 41593] [client 4.228.184.113:40381] AH01071: Got error 'Primary script unknown'
[Tue May 19 06:54:49.773658 2026] [proxy_fcgi:error] [pid 41573:tid 41599] [client 4.228.184.113:40381] AH01071: Got error 'Primary script unknown'
[Tue May 19 06:54:50.099331 2026] [proxy_fcgi:error] [pid 41573:tid 41588] [client 4.228.184.113:40381] AH01071: Got error 'Primary script unknown'
[Tue May 19 06:54:50.420016 2026] [proxy_fcgi:error] [pid 41573:tid 41592] [client 4.228.184.113:40381] AH01071: Got error 'Primary script unknown'
[Tue May 19 09:02:01.499889 2026] [:error] [pid 38699:tid 38753] [client 52.57.215.214:57002] [client 52.57.215.214] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.git/HEAD"] [unique_id "agu2ib--Adsw_P-dthZOywAAAEs"]
[Tue May 19 10:44:11.524361 2026] [proxy_fcgi:error] [pid 38705:tid 38786] [client 4.204.239.169:65390] AH01071: Got error 'Primary script unknown'
[Tue May 19 10:44:11.738306 2026] [proxy_fcgi:error] [pid 38705:tid 38773] [client 4.204.239.169:65390] AH01071: Got error 'Primary script unknown'
[Tue May 19 10:44:12.078925 2026] [proxy_fcgi:error] [pid 38705:tid 38793] [client 4.204.239.169:65390] AH01071: Got error 'Primary script unknown'
[Tue May 19 10:44:12.304462 2026] [proxy_fcgi:error] [pid 38705:tid 38781] [client 4.204.239.169:65390] AH01071: Got error 'Primary script unknown'
[Tue May 19 10:44:12.518021 2026] [proxy_fcgi:error] [pid 38705:tid 38787] [client 4.204.239.169:65390] AH01071: Got error 'Primary script unknown'
[Tue May 19 10:44:12.733060 2026] [proxy_fcgi:error] [pid 38705:tid 38772] [client 4.204.239.169:65390] AH01071: Got error 'Primary script unknown'
[Tue May 19 10:44:13.241453 2026] [proxy_fcgi:error] [pid 38705:tid 38784] [client 4.204.239.169:65390] AH01071: Got error 'Primary script unknown'
[Tue May 19 10:44:13.461980 2026] [proxy_fcgi:error] [pid 38705:tid 38788] [client 4.204.239.169:65390] AH01071: Got error 'Primary script unknown'
[Tue May 19 10:44:13.821046 2026] [proxy_fcgi:error] [pid 38705:tid 38778] [client 4.204.239.169:65390] AH01071: Got error 'Primary script unknown'
[Tue May 19 10:44:14.031148 2026] [:error] [pid 38705:tid 38777] [client 4.204.239.169:65390] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-blog-header.php"] [unique_id "agvOfsg5dNOZ5umN9ls5owAAAIg"]
[Tue May 19 10:44:15.060139 2026] [:error] [pid 46896:tid 46917] [client 4.204.239.169:65080] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-blog-header.php"] [unique_id "agvOf6CHyzL3Ci9LGE0WWgAAAZM"]
[Tue May 19 10:44:17.231490 2026] [:error] [pid 38697:tid 38724] [client 4.204.239.169:65460] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-blog-header.php"] [unique_id "agvOgaXP9pP6Kgt-msTzJwAAAAk"]
[Tue May 19 10:44:18.416897 2026] [:error] [pid 38705:tid 38785] [client 4.204.239.169:65469] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-blog-header.php"] [unique_id "agvOgsg5dNOZ5umN9ls5pAAAAJA"]
[Tue May 19 10:44:20.053421 2026] [:error] [pid 46815:tid 46823] [client 4.204.239.169:65428] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sa.php7"] [unique_id "agvOhCPnRhJOmA06LgofvAAAAUY"]
[Tue May 19 10:44:22.350078 2026] [:error] [pid 38699:tid 38753] [client 4.204.239.169:65404] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sa.php7"] [unique_id "agvOhr--Adsw_P-dthZfpwAAAEs"]
[Tue May 19 10:44:23.533689 2026] [:error] [pid 38699:tid 38759] [client 4.204.239.169:65347] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sa.php7"] [unique_id "agvOh7--Adsw_P-dthZfqAAAAFE"]
[Tue May 19 10:44:24.275959 2026] [:error] [pid 41573:tid 41596] [client 4.204.239.169:65443] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sa.php7"] [unique_id "agvOiC1A2bd6JDSW9RZQ7QAAARU"]
[Tue May 19 10:44:25.466862 2026] [:error] [pid 41573:tid 41594] [client 4.204.239.169:65383] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/public/ws49.php"] [unique_id "agvOiS1A2bd6JDSW9RZQ8gAAARM"]
[Tue May 19 10:44:26.309636 2026] [:error] [pid 46896:tid 46920] [client 4.204.239.169:64998] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/public/ws49.php"] [unique_id "agvOiqCHyzL3Ci9LGE0WbAAAAZY"]
[Tue May 19 10:44:27.515172 2026] [:error] [pid 46896:tid 46921] [client 4.204.239.169:65364] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/public/ws49.php"] [unique_id "agvOi6CHyzL3Ci9LGE0WbwAAAZc"]
[Tue May 19 10:44:29.606910 2026] [:error] [pid 38697:tid 38729] [client 4.204.239.169:65421] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/public/ws49.php"] [unique_id "agvOjaXP9pP6Kgt-msTzMQAAAA4"]
[Tue May 19 10:44:31.528953 2026] [:error] [pid 38705:tid 38793] [client 4.204.239.169:65370] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/inputs.php"] [unique_id "agvOj8g5dNOZ5umN9ls5rwAAAJg"]
[Tue May 19 10:44:36.176167 2026] [:error] [pid 38705:tid 38784] [client 4.204.239.169:64679] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/inputs.php"] [unique_id "agvOlMg5dNOZ5umN9ls5swAAAI8"]
[Tue May 19 10:44:40.116128 2026] [:error] [pid 38814:tid 38816] [client 4.204.239.169:65031] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/inputs.php"] [unique_id "agvOmAvkKuBwP0epzWduegAAAMA"]
[Tue May 19 10:44:41.319118 2026] [:error] [pid 38814:tid 38828] [client 4.204.239.169:65026] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/inputs.php"] [unique_id "agvOmQvkKuBwP0epzWdufAAAAMw"]
[Tue May 19 10:44:42.198344 2026] [:error] [pid 41573:tid 41592] [client 4.204.239.169:65367] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xxw.php"] [unique_id "agvOmi1A2bd6JDSW9RZQ9wAAARE"]
[Tue May 19 10:44:42.894083 2026] [:error] [pid 46815:tid 46836] [client 4.204.239.169:65415] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xxw.php"] [unique_id "agvOmiPnRhJOmA06LgofxgAAAVM"]
[Tue May 19 10:44:43.803032 2026] [:error] [pid 41573:tid 41576] [client 4.204.239.169:64970] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xxw.php"] [unique_id "agvOmy1A2bd6JDSW9RZQ-wAAAQE"]
[Tue May 19 10:44:44.434810 2026] [:error] [pid 38699:tid 38742] [client 4.204.239.169:65359] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xxw.php"] [unique_id "agvOnL--Adsw_P-dthZfrgAAAEA"]
[Tue May 19 10:44:45.241953 2026] [:error] [pid 46896:tid 46909] [client 4.204.239.169:65391] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/amwxl.php"] [unique_id "agvOnaCHyzL3Ci9LGE0WdgAAAYs"]
[Tue May 19 10:44:46.233293 2026] [:error] [pid 41573:tid 41598] [client 4.204.239.169:64978] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/amwxl.php"] [unique_id "agvOni1A2bd6JDSW9RZRBgAAARc"]
[Tue May 19 10:44:47.631765 2026] [:error] [pid 46896:tid 46920] [client 4.204.239.169:65378] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/amwxl.php"] [unique_id "agvOn6CHyzL3Ci9LGE0WegAAAZY"]
[Tue May 19 10:44:49.151213 2026] [:error] [pid 38699:tid 38751] [client 4.204.239.169:65039] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/amwxl.php"] [unique_id "agvOob--Adsw_P-dthZfsAAAAEk"]
[Tue May 19 10:44:50.249151 2026] [:error] [pid 38814:tid 38837] [client 4.204.239.169:65400] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "agvOogvkKuBwP0epzWdufwAAANU"]
[Tue May 19 10:44:51.291338 2026] [:error] [pid 38705:tid 38789] [client 4.204.239.169:64995] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "agvOo8g5dNOZ5umN9ls5vAAAAJQ"]
[Tue May 19 10:44:53.139304 2026] [:error] [pid 38814:tid 38832] [client 4.204.239.169:65351] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "agvOpQvkKuBwP0epzWdugQAAANA"]
[Tue May 19 10:44:55.385360 2026] [:error] [pid 46815:tid 46820] [client 4.204.239.169:65010] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "agvOpyPnRhJOmA06LgofzAAAAUM"]
[Tue May 19 10:44:57.019025 2026] [:error] [pid 38814:tid 38826] [client 4.204.239.169:65050] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws83.php"] [unique_id "agvOqQvkKuBwP0epzWduggAAAMo"]
[Tue May 19 10:44:58.577435 2026] [:error] [pid 38697:tid 38731] [client 4.204.239.169:65414] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws83.php"] [unique_id "agvOqqXP9pP6Kgt-msTzYAAAABA"]
[Tue May 19 10:44:59.076552 2026] [:error] [pid 38814:tid 38822] [client 4.204.239.169:65025] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws83.php"] [unique_id "agvOqwvkKuBwP0epzWdugwAAAMY"]
[Tue May 19 10:44:59.827192 2026] [:error] [pid 38699:tid 38748] [client 4.204.239.169:64993] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws83.php"] [unique_id "agvOq7--Adsw_P-dthZfswAAAEY"]
[Tue May 19 10:45:01.027969 2026] [:error] [pid 41573:tid 41589] [client 4.204.239.169:65386] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/amax.php"] [unique_id "agvOrS1A2bd6JDSW9RZRDwAAAQ4"]
[Tue May 19 10:45:01.791465 2026] [:error] [pid 38699:tid 38747] [client 4.204.239.169:65000] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/amax.php"] [unique_id "agvOrb--Adsw_P-dthZftQAAAEU"]
[Tue May 19 10:45:02.605285 2026] [:error] [pid 38814:tid 38827] [client 4.204.239.169:65403] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/amax.php"] [unique_id "agvOrgvkKuBwP0epzWduhQAAAMs"]
[Tue May 19 10:45:03.397911 2026] [:error] [pid 46896:tid 46914] [client 4.204.239.169:65411] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/amax.php"] [unique_id "agvOr6CHyzL3Ci9LGE0WggAAAZA"]
[Tue May 19 10:45:04.243488 2026] [:error] [pid 38705:tid 38793] [client 4.204.239.169:65076] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zc-104.php"] [unique_id "agvOsMg5dNOZ5umN9ls5wAAAAJg"]
[Tue May 19 10:45:04.826529 2026] [:error] [pid 38699:tid 38758] [client 4.204.239.169:65054] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zc-104.php"] [unique_id "agvOsL--Adsw_P-dthZftgAAAFA"]
[Tue May 19 10:45:05.315904 2026] [:error] [pid 38697:tid 38738] [client 4.204.239.169:65402] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zc-104.php"] [unique_id "agvOsaXP9pP6Kgt-msTzZwAAABc"]
[Tue May 19 10:45:06.014690 2026] [:error] [pid 38699:tid 38762] [client 4.204.239.169:64988] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/zc-104.php"] [unique_id "agvOsr--Adsw_P-dthZftwAAAFQ"]
[Tue May 19 10:45:06.733194 2026] [:error] [pid 38699:tid 38754] [client 4.204.239.169:65057] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/grsiuk.php"] [unique_id "agvOsr--Adsw_P-dthZfuQAAAEw"]
[Tue May 19 10:45:07.847279 2026] [:error] [pid 46815:tid 46837] [client 4.204.239.169:65388] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/grsiuk.php"] [unique_id "agvOsyPnRhJOmA06LgofzwAAAVQ"]
[Tue May 19 10:45:08.859484 2026] [:error] [pid 46815:tid 46817] [client 4.204.239.169:65044] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/grsiuk.php"] [unique_id "agvOtCPnRhJOmA06Lgof0AAAAUA"]
[Tue May 19 10:45:09.794818 2026] [:error] [pid 38699:tid 38761] [client 4.204.239.169:65072] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/grsiuk.php"] [unique_id "agvOtb--Adsw_P-dthZfugAAAFM"]
[Tue May 19 10:45:11.170113 2026] [:error] [pid 46815:tid 46831] [client 4.204.239.169:64973] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp9.php"] [unique_id "agvOtyPnRhJOmA06Lgof0QAAAU4"]
[Tue May 19 10:45:12.816174 2026] [:error] [pid 46815:tid 46822] [client 4.204.239.169:65009] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp9.php"] [unique_id "agvOuCPnRhJOmA06Lgof0wAAAUU"]
[Tue May 19 10:45:15.951451 2026] [proxy_fcgi:error] [pid 38699:tid 38755] [client 4.204.239.169:65004] AH01071: Got error 'Primary script unknown'
[Tue May 19 10:45:16.248169 2026] [proxy_fcgi:error] [pid 38699:tid 38756] [client 4.204.239.169:65004] AH01071: Got error 'Primary script unknown'
[Tue May 19 10:45:16.508221 2026] [proxy_fcgi:error] [pid 38699:tid 38751] [client 4.204.239.169:65004] AH01071: Got error 'Primary script unknown'
[Tue May 19 10:45:16.763484 2026] [proxy_fcgi:error] [pid 38699:tid 38750] [client 4.204.239.169:65004] AH01071: Got error 'Primary script unknown'
[Tue May 19 10:45:17.012835 2026] [proxy_fcgi:error] [pid 38699:tid 38753] [client 4.204.239.169:65004] AH01071: Got error 'Primary script unknown'
[Tue May 19 10:45:17.261355 2026] [proxy_fcgi:error] [pid 38699:tid 38759] [client 4.204.239.169:65004] AH01071: Got error 'Primary script unknown'
[Tue May 19 10:45:17.506699 2026] [proxy_fcgi:error] [pid 38699:tid 38765] [client 4.204.239.169:65004] AH01071: Got error 'Primary script unknown'
[Tue May 19 10:45:17.753747 2026] [proxy_fcgi:error] [pid 38699:tid 38760] [client 4.204.239.169:65004] AH01071: Got error 'Primary script unknown'
[Tue May 19 10:45:18.010205 2026] [proxy_fcgi:error] [pid 38699:tid 38748] [client 4.204.239.169:65004] AH01071: Got error 'Primary script unknown'
[Tue May 19 10:45:18.330244 2026] [proxy_fcgi:error] [pid 38699:tid 38747] [client 4.204.239.169:65004] AH01071: Got error 'Primary script unknown'
[Tue May 19 10:45:18.575478 2026] [proxy_fcgi:error] [pid 38699:tid 38746] [client 4.204.239.169:65004] AH01071: Got error 'Primary script unknown'
[Tue May 19 10:45:18.834466 2026] [:error] [pid 38699:tid 38745] [client 4.204.239.169:65004] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ajax.php"] [unique_id "agvOvr--Adsw_P-dthZfyAAAAEM"]
[Tue May 19 10:45:20.095180 2026] [:error] [pid 38705:tid 38774] [client 4.204.239.169:65418] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ajax.php"] [unique_id "agvOwMg5dNOZ5umN9ls5xgAAAIU"]
[Tue May 19 10:45:21.103896 2026] [:error] [pid 38705:tid 38780] [client 4.204.239.169:65437] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ajax.php"] [unique_id "agvOwcg5dNOZ5umN9ls5yAAAAIs"]
[Tue May 19 10:45:22.301398 2026] [:error] [pid 38697:tid 38730] [client 4.204.239.169:65431] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ajax.php"] [unique_id "agvOwqXP9pP6Kgt-msTzbQAAAA8"]
[Tue May 19 10:45:23.258691 2026] [:error] [pid 38699:tid 38761] [client 4.204.239.169:65389] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tx78.php"] [unique_id "agvOw7--Adsw_P-dthZfzAAAAFM"]
[Tue May 19 10:45:24.518696 2026] [:error] [pid 38697:tid 38723] [client 4.204.239.169:65048] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tx78.php"] [unique_id "agvOxKXP9pP6Kgt-msTzbwAAAAg"]
[Tue May 19 10:45:25.120934 2026] [:error] [pid 38697:tid 38715] [client 4.204.239.169:65371] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tx78.php"] [unique_id "agvOxaXP9pP6Kgt-msTzcQAAAAA"]
[Tue May 19 10:45:26.449958 2026] [:error] [pid 38814:tid 38819] [client 4.204.239.169:65081] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tx78.php"] [unique_id "agvOxgvkKuBwP0epzWdujQAAAMM"]
[Tue May 19 10:45:29.090113 2026] [:error] [pid 41573:tid 41590] [client 4.204.239.169:65070] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/csv.php"] [unique_id "agvOyS1A2bd6JDSW9RZRGAAAAQ8"]
[Tue May 19 10:45:30.121416 2026] [:error] [pid 38697:tid 38728] [client 4.204.239.169:65385] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/csv.php"] [unique_id "agvOyqXP9pP6Kgt-msTzeAAAAA0"]
[Tue May 19 10:45:31.795598 2026] [:error] [pid 38697:tid 38722] [client 4.204.239.169:65436] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/csv.php"] [unique_id "agvOy6XP9pP6Kgt-msTzgAAAAAc"]
[Tue May 19 10:45:32.922270 2026] [:error] [pid 38705:tid 38773] [client 4.204.239.169:65360] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/csv.php"] [unique_id "agvOzMg5dNOZ5umN9ls5zQAAAIQ"]
[Tue May 19 10:45:33.799166 2026] [:error] [pid 38705:tid 38786] [client 4.204.239.169:65078] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "agvOzcg5dNOZ5umN9ls5zgAAAJE"]
[Tue May 19 10:45:34.426592 2026] [:error] [pid 41573:tid 41593] [client 4.204.239.169:65011] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "agvOzi1A2bd6JDSW9RZRGQAAARI"]
[Tue May 19 10:45:35.165350 2026] [:error] [pid 41573:tid 41589] [client 4.204.239.169:65447] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "agvOzy1A2bd6JDSW9RZRGwAAAQ4"]
[Tue May 19 10:45:36.390726 2026] [:error] [pid 41573:tid 41584] [client 4.204.239.169:64577] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "agvO0C1A2bd6JDSW9RZRHQAAAQk"]
[Tue May 19 10:45:37.541498 2026] [:error] [pid 41573:tid 41587] [client 4.204.239.169:64577] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ne2026.php"] [unique_id "agvO0S1A2bd6JDSW9RZRHwAAAQw"]
[Tue May 19 10:45:38.692601 2026] [:error] [pid 38699:tid 38746] [client 4.204.239.169:64981] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ne2026.php"] [unique_id "agvO0r--Adsw_P-dthZf1QAAAEQ"]
[Tue May 19 10:45:39.817070 2026] [:error] [pid 38699:tid 38745] [client 4.204.239.169:64965] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ne2026.php"] [unique_id "agvO07--Adsw_P-dthZf1gAAAEM"]
[Tue May 19 10:45:41.290589 2026] [:error] [pid 38705:tid 38778] [client 4.204.239.169:64968] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ne2026.php"] [unique_id "agvO1cg5dNOZ5umN9ls50AAAAIk"]
[Tue May 19 10:45:43.686475 2026] [:error] [pid 38814:tid 38817] [client 4.204.239.169:65467] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-act.php"] [unique_id "agvO1wvkKuBwP0epzWdumwAAAME"]
[Tue May 19 10:45:44.998166 2026] [:error] [pid 38814:tid 38825] [client 4.204.239.169:65059] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-act.php"] [unique_id "agvO2AvkKuBwP0epzWdunwAAAMk"]
[Tue May 19 10:45:46.427168 2026] [:error] [pid 38814:tid 38837] [client 4.204.239.169:64684] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-act.php"] [unique_id "agvO2gvkKuBwP0epzWduogAAANU"]
[Tue May 19 10:45:47.697690 2026] [:error] [pid 38705:tid 38793] [client 4.204.239.169:65065] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-act.php"] [unique_id "agvO28g5dNOZ5umN9ls53wAAAJg"]
[Tue May 19 10:45:49.115361 2026] [:error] [pid 38697:tid 38719] [client 4.204.239.169:65362] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws86.php"] [unique_id "agvO3aXP9pP6Kgt-msTziwAAAAQ"]
[Tue May 19 10:45:50.198247 2026] [:error] [pid 38697:tid 38724] [client 4.204.239.169:65470] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws86.php"] [unique_id "agvO3qXP9pP6Kgt-msTzjQAAAAk"]
[Tue May 19 10:45:51.000617 2026] [:error] [pid 38697:tid 38725] [client 4.204.239.169:65082] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws86.php"] [unique_id "agvO3qXP9pP6Kgt-msTzkgAAAAo"]
[Tue May 19 10:45:52.110771 2026] [:error] [pid 46896:tid 46911] [client 4.204.239.169:65056] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws86.php"] [unique_id "agvO4KCHyzL3Ci9LGE0WhwAAAY0"]
[Tue May 19 10:45:53.658818 2026] [:error] [pid 38814:tid 38834] [client 4.204.239.169:65422] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/asd.php"] [unique_id "agvO4QvkKuBwP0epzWdutwAAANI"]
[Tue May 19 10:45:54.798394 2026] [:error] [pid 46896:tid 46910] [client 4.204.239.169:65060] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/asd.php"] [unique_id "agvO4qCHyzL3Ci9LGE0WiQAAAYw"]
[Tue May 19 10:45:55.952638 2026] [:error] [pid 38699:tid 38764] [client 4.204.239.169:65461] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/asd.php"] [unique_id "agvO47--Adsw_P-dthZf2QAAAFY"]
[Tue May 19 10:45:57.174541 2026] [:error] [pid 38699:tid 38742] [client 4.204.239.169:64694] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/asd.php"] [unique_id "agvO5b--Adsw_P-dthZf3QAAAEA"]
[Tue May 19 10:45:57.911283 2026] [:error] [pid 41573:tid 41598] [client 4.204.239.169:64655] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/torsa1.php"] [unique_id "agvO5S1A2bd6JDSW9RZRMgAAARc"]
[Tue May 19 10:45:58.693695 2026] [:error] [pid 38697:tid 38726] [client 4.204.239.169:65441] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/torsa1.php"] [unique_id "agvO5qXP9pP6Kgt-msTzrwAAAAs"]
[Tue May 19 10:45:59.605018 2026] [:error] [pid 38699:tid 38743] [client 4.204.239.169:65398] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/torsa1.php"] [unique_id "agvO57--Adsw_P-dthZf4AAAAEE"]
[Tue May 19 10:46:00.193374 2026] [:error] [pid 38814:tid 38820] [client 4.204.239.169:64974] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/torsa1.php"] [unique_id "agvO6AvkKuBwP0epzWduvAAAAMQ"]
[Tue May 19 10:46:00.844541 2026] [:error] [pid 38814:tid 38838] [client 4.204.239.169:64986] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a4.php"] [unique_id "agvO6AvkKuBwP0epzWduvQAAANY"]
[Tue May 19 10:46:01.919080 2026] [:error] [pid 38699:tid 38765] [client 4.204.239.169:65071] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a4.php"] [unique_id "agvO6b--Adsw_P-dthZf4QAAAFc"]
[Tue May 19 10:46:02.712630 2026] [:error] [pid 41573:tid 41578] [client 4.204.239.169:64645] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a4.php"] [unique_id "agvO6i1A2bd6JDSW9RZRMwAAAQM"]
[Tue May 19 10:46:03.820448 2026] [:error] [pid 46896:tid 46909] [client 4.204.239.169:64588] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a4.php"] [unique_id "agvO66CHyzL3Ci9LGE0WkQAAAYs"]
[Tue May 19 10:46:04.467331 2026] [:error] [pid 38699:tid 38746] [client 4.204.239.169:65368] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/myfile.php"] [unique_id "agvO7L--Adsw_P-dthZf4wAAAEQ"]
[Tue May 19 10:46:05.414016 2026] [:error] [pid 46896:tid 46910] [client 4.204.239.169:64964] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/myfile.php"] [unique_id "agvO7aCHyzL3Ci9LGE0WlQAAAYw"]
[Tue May 19 10:46:06.154733 2026] [:error] [pid 46896:tid 46904] [client 4.204.239.169:65051] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/myfile.php"] [unique_id "agvO7qCHyzL3Ci9LGE0WlgAAAYY"]
[Tue May 19 10:46:07.800209 2026] [:error] [pid 46896:tid 46913] [client 4.204.239.169:65066] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/myfile.php"] [unique_id "agvO76CHyzL3Ci9LGE0WmgAAAY8"]
[Tue May 19 10:46:08.556339 2026] [:error] [pid 46896:tid 46918] [client 4.204.239.169:65412] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/as.php"] [unique_id "agvO8KCHyzL3Ci9LGE0WnAAAAZQ"]
[Tue May 19 10:46:09.279707 2026] [:error] [pid 46896:tid 46905] [client 4.204.239.169:65045] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/as.php"] [unique_id "agvO8aCHyzL3Ci9LGE0WnQAAAYc"]
[Tue May 19 10:46:10.046004 2026] [:error] [pid 46815:tid 46821] [client 4.204.239.169:65075] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/as.php"] [unique_id "agvO8iPnRhJOmA06Lgof3wAAAUQ"]
[Tue May 19 10:46:11.391225 2026] [:error] [pid 41573:tid 41595] [client 4.204.239.169:65440] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/as.php"] [unique_id "agvO8y1A2bd6JDSW9RZRNAAAARQ"]
[Tue May 19 10:46:12.443370 2026] [:error] [pid 46815:tid 46830] [client 4.204.239.169:64990] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cu.php"] [unique_id "agvO9CPnRhJOmA06Lgof6wAAAU0"]
[Tue May 19 10:46:13.063361 2026] [:error] [pid 46815:tid 46823] [client 4.204.239.169:65408] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cu.php"] [unique_id "agvO9SPnRhJOmA06Lgof7AAAAUY"]
[Tue May 19 10:46:14.261593 2026] [:error] [pid 46896:tid 46910] [client 4.204.239.169:65055] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cu.php"] [unique_id "agvO9qCHyzL3Ci9LGE0W0wAAAYw"]
[Tue May 19 10:46:15.118492 2026] [:error] [pid 41573:tid 41596] [client 4.204.239.169:65392] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cu.php"] [unique_id "agvO9y1A2bd6JDSW9RZRNQAAARU"]
[Tue May 19 10:46:16.229278 2026] [:error] [pid 46896:tid 46920] [client 4.204.239.169:64994] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/100.php"] [unique_id "agvO-KCHyzL3Ci9LGE0W2QAAAZY"]
[Tue May 19 10:46:17.078515 2026] [:error] [pid 46896:tid 46906] [client 4.204.239.169:65020] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/100.php"] [unique_id "agvO-aCHyzL3Ci9LGE0W4AAAAYg"]
[Tue May 19 10:46:18.095831 2026] [proxy_fcgi:error] [pid 46896:tid 46916] [client 4.204.239.169:65041] AH01071: Got error 'Primary script unknown'
[Tue May 19 10:46:18.334775 2026] [proxy_fcgi:error] [pid 46896:tid 46908] [client 4.204.239.169:65041] AH01071: Got error 'Primary script unknown'
[Tue May 19 10:46:18.580042 2026] [proxy_fcgi:error] [pid 46896:tid 46905] [client 4.204.239.169:65041] AH01071: Got error 'Primary script unknown'
[Tue May 19 10:46:18.841029 2026] [proxy_fcgi:error] [pid 46896:tid 46909] [client 4.204.239.169:65041] AH01071: Got error 'Primary script unknown'
[Tue May 19 10:46:19.144774 2026] [proxy_fcgi:error] [pid 46896:tid 46899] [client 4.204.239.169:65041] AH01071: Got error 'Primary script unknown'
[Tue May 19 10:46:19.388693 2026] [proxy_fcgi:error] [pid 46896:tid 46900] [client 4.204.239.169:65041] AH01071: Got error 'Primary script unknown'
[Tue May 19 10:46:19.638640 2026] [proxy_fcgi:error] [pid 46896:tid 46912] [client 4.204.239.169:65041] AH01071: Got error 'Primary script unknown'
[Tue May 19 10:46:20.026329 2026] [proxy_fcgi:error] [pid 46896:tid 46907] [client 4.204.239.169:65041] AH01071: Got error 'Primary script unknown'
[Tue May 19 10:46:20.276327 2026] [proxy_fcgi:error] [pid 46896:tid 46916] [client 4.204.239.169:65041] AH01071: Got error 'Primary script unknown'
[Tue May 19 10:46:20.542506 2026] [proxy_fcgi:error] [pid 46896:tid 46908] [client 4.204.239.169:65041] AH01071: Got error 'Primary script unknown'
[Tue May 19 10:46:20.808411 2026] [proxy_fcgi:error] [pid 46896:tid 46905] [client 4.204.239.169:65041] AH01071: Got error 'Primary script unknown'
[Tue May 19 10:46:21.057679 2026] [:error] [pid 46896:tid 46911] [client 4.204.239.169:65041] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lowpr.php"] [unique_id "agvO_aCHyzL3Ci9LGE0W9gAAAY0"]
[Tue May 19 10:46:21.917757 2026] [:error] [pid 46896:tid 46921] [client 4.204.239.169:65462] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lowpr.php"] [unique_id "agvO_aCHyzL3Ci9LGE0W-AAAAZc"]
[Tue May 19 10:46:23.145547 2026] [:error] [pid 46896:tid 46920] [client 4.204.239.169:64983] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lowpr.php"] [unique_id "agvO_6CHyzL3Ci9LGE0W-gAAAZY"]
[Tue May 19 10:46:24.163736 2026] [:error] [pid 38699:tid 38766] [client 4.204.239.169:64675] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lowpr.php"] [unique_id "agvPAL--Adsw_P-dthZf6wAAAFg"]
[Tue May 19 10:46:25.504908 2026] [:error] [pid 46896:tid 46898] [client 4.204.239.169:65452] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/term.php"] [unique_id "agvPAaCHyzL3Ci9LGE0XAAAAAYA"]
[Tue May 19 10:46:26.776840 2026] [:error] [pid 46896:tid 46906] [client 4.204.239.169:65027] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/term.php"] [unique_id "agvPAqCHyzL3Ci9LGE0XAgAAAYg"]
[Tue May 19 10:46:27.548515 2026] [:error] [pid 38699:tid 38750] [client 4.204.239.169:65439] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/term.php"] [unique_id "agvPA7--Adsw_P-dthZf7AAAAEg"]
[Tue May 19 10:46:29.205160 2026] [:error] [pid 38814:tid 38820] [client 4.204.239.169:65077] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/term.php"] [unique_id "agvPBQvkKuBwP0epzWdu2AAAAMQ"]
[Tue May 19 10:46:31.003536 2026] [:error] [pid 38697:tid 38734] [client 4.204.239.169:64678] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fs.php"] [unique_id "agvPB6XP9pP6Kgt-msTzzgAAABM"]
[Tue May 19 10:46:32.281321 2026] [:error] [pid 38699:tid 38746] [client 4.204.239.169:64260] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fs.php"] [unique_id "agvPCL--Adsw_P-dthZf8AAAAEQ"]
[Tue May 19 10:46:33.075419 2026] [:error] [pid 46815:tid 46841] [client 4.204.239.169:64621] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fs.php"] [unique_id "agvPCSPnRhJOmA06Lgof-QAAAVg"]
[Tue May 19 10:46:33.749009 2026] [:error] [pid 38697:tid 38729] [client 4.204.239.169:64999] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fs.php"] [unique_id "agvPCaXP9pP6Kgt-msTz0AAAAA4"]
[Tue May 19 10:46:35.090575 2026] [:error] [pid 46815:tid 46826] [client 4.204.239.169:65019] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ortasekerli1.php"] [unique_id "agvPCyPnRhJOmA06Lgof-wAAAUk"]
[Tue May 19 10:46:36.945015 2026] [:error] [pid 38697:tid 38737] [client 4.204.239.169:64960] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ortasekerli1.php"] [unique_id "agvPDKXP9pP6Kgt-msTz1wAAABY"]
[Tue May 19 10:46:38.147638 2026] [:error] [pid 38699:tid 38747] [client 4.204.239.169:65043] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ortasekerli1.php"] [unique_id "agvPDr--Adsw_P-dthZf8gAAAEU"]
[Tue May 19 10:46:39.064928 2026] [:error] [pid 38814:tid 38827] [client 4.204.239.169:65361] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ortasekerli1.php"] [unique_id "agvPDwvkKuBwP0epzWdu2gAAAMs"]
[Tue May 19 10:46:39.916882 2026] [:error] [pid 38699:tid 38758] [client 4.204.239.169:65029] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws80.php"] [unique_id "agvPD7--Adsw_P-dthZf9QAAAFA"]
[Tue May 19 10:46:40.790729 2026] [:error] [pid 38705:tid 38774] [client 4.204.239.169:65419] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws80.php"] [unique_id "agvPEMg5dNOZ5umN9ls5_wAAAIU"]
[Tue May 19 10:46:41.596974 2026] [:error] [pid 38705:tid 38770] [client 4.204.239.169:65037] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws80.php"] [unique_id "agvPEcg5dNOZ5umN9ls6AAAAAIE"]
[Tue May 19 10:46:42.777569 2026] [:error] [pid 46815:tid 46835] [client 4.204.239.169:65068] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws80.php"] [unique_id "agvPEiPnRhJOmA06LgogAwAAAVI"]
[Tue May 19 10:46:43.830653 2026] [:error] [pid 46896:tid 46903] [client 4.204.239.169:64589] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gk.php"] [unique_id "agvPE6CHyzL3Ci9LGE0XEAAAAYU"]
[Tue May 19 10:46:44.650085 2026] [:error] [pid 46896:tid 46908] [client 4.204.239.169:63476] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gk.php"] [unique_id "agvPFKCHyzL3Ci9LGE0XEgAAAYo"]
[Tue May 19 10:46:46.102955 2026] [:error] [pid 38705:tid 38772] [client 4.204.239.169:65067] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gk.php"] [unique_id "agvPFsg5dNOZ5umN9ls6CgAAAIM"]
[Tue May 19 10:46:47.263189 2026] [:error] [pid 41573:tid 41579] [client 4.204.239.169:64667] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gk.php"] [unique_id "agvPFy1A2bd6JDSW9RZRRQAAAQQ"]
[Tue May 19 10:46:48.093397 2026] [:error] [pid 38814:tid 38824] [client 4.204.239.169:65069] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/varb.php"] [unique_id "agvPGAvkKuBwP0epzWdu5AAAAMg"]
[Tue May 19 10:46:48.735352 2026] [:error] [pid 38697:tid 38728] [client 4.204.239.169:64963] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/varb.php"] [unique_id "agvPGKXP9pP6Kgt-msTz3wAAAA0"]
[Tue May 19 10:46:49.778042 2026] [:error] [pid 38699:tid 38755] [client 4.204.239.169:64987] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/varb.php"] [unique_id "agvPGb--Adsw_P-dthZf_wAAAE0"]
[Tue May 19 10:46:50.462024 2026] [:error] [pid 38705:tid 38770] [client 4.204.239.169:65356] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/varb.php"] [unique_id "agvPGsg5dNOZ5umN9ls6EgAAAIE"]
[Tue May 19 10:46:51.092286 2026] [:error] [pid 41573:tid 41597] [client 4.204.239.169:64985] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "agvPGy1A2bd6JDSW9RZRRwAAARY"]
[Tue May 19 10:46:51.936568 2026] [:error] [pid 38699:tid 38751] [client 4.204.239.169:64657] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "agvPG7--Adsw_P-dthZgBwAAAEk"]
[Tue May 19 10:46:52.934232 2026] [:error] [pid 46815:tid 46833] [client 4.204.239.169:64615] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "agvPHCPnRhJOmA06LgogCQAAAVA"]
[Tue May 19 10:46:54.459185 2026] [:error] [pid 46815:tid 46836] [client 4.204.239.169:64984] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "agvPHiPnRhJOmA06LgogDQAAAVM"]
[Tue May 19 10:46:55.186524 2026] [:error] [pid 38697:tid 38732] [client 4.204.239.169:65006] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/classwithtostring.php"] [unique_id "agvPH6XP9pP6Kgt-msTz-gAAABE"]
[Tue May 19 10:46:56.232403 2026] [:error] [pid 46896:tid 46920] [client 4.204.239.169:65353] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/classwithtostring.php"] [unique_id "agvPIKCHyzL3Ci9LGE0XLwAAAZY"]
[Tue May 19 10:46:57.004660 2026] [:error] [pid 46896:tid 46922] [client 4.204.239.169:65458] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/classwithtostring.php"] [unique_id "agvPIaCHyzL3Ci9LGE0XMQAAAZg"]
[Tue May 19 10:46:57.650863 2026] [:error] [pid 38705:tid 38777] [client 4.204.239.169:64646] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/classwithtostring.php"] [unique_id "agvPIcg5dNOZ5umN9ls6NgAAAIg"]
[Tue May 19 10:46:58.306689 2026] [:error] [pid 38697:tid 38734] [client 4.204.239.169:64640] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/uuu.php"] [unique_id "agvPIqXP9pP6Kgt-msTz-wAAABM"]
[Tue May 19 10:46:59.638526 2026] [:error] [pid 46815:tid 46832] [client 4.204.239.169:65399] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/uuu.php"] [unique_id "agvPIyPnRhJOmA06LgogDgAAAU8"]
[Tue May 19 10:47:00.591950 2026] [:error] [pid 38697:tid 38735] [client 4.204.239.169:65052] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/uuu.php"] [unique_id "agvPJKXP9pP6Kgt-msTz_gAAABQ"]
[Tue May 19 10:47:01.819394 2026] [:error] [pid 38705:tid 38774] [client 4.204.239.169:65397] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/uuu.php"] [unique_id "agvPJcg5dNOZ5umN9ls6OAAAAIU"]
[Tue May 19 10:47:02.405988 2026] [:error] [pid 46815:tid 46840] [client 4.204.239.169:65429] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-good.php"] [unique_id "agvPJiPnRhJOmA06LgogDwAAAVc"]
[Tue May 19 10:47:03.098543 2026] [:error] [pid 38814:tid 38837] [client 4.204.239.169:64975] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-good.php"] [unique_id "agvPJwvkKuBwP0epzWdu_AAAANU"]
[Tue May 19 10:47:03.669265 2026] [:error] [pid 38814:tid 38829] [client 4.204.239.169:65047] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-good.php"] [unique_id "agvPJwvkKuBwP0epzWdu_QAAAM0"]
[Tue May 19 10:47:04.170760 2026] [:error] [pid 38705:tid 38772] [client 4.204.239.169:65049] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-good.php"] [unique_id "agvPKMg5dNOZ5umN9ls6OgAAAIM"]
[Tue May 19 10:47:04.721435 2026] [:error] [pid 41573:tid 41576] [client 4.204.239.169:64992] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cilus.php"] [unique_id "agvPKC1A2bd6JDSW9RZRZwAAAQE"]
[Tue May 19 10:47:05.203876 2026] [:error] [pid 41573:tid 41593] [client 4.204.239.169:64966] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cilus.php"] [unique_id "agvPKS1A2bd6JDSW9RZRaQAAARI"]
[Tue May 19 10:47:05.826903 2026] [:error] [pid 46896:tid 46907] [client 4.204.239.169:65463] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cilus.php"] [unique_id "agvPKaCHyzL3Ci9LGE0XQQAAAYk"]
[Tue May 19 10:47:06.307769 2026] [:error] [pid 46896:tid 46903] [client 4.204.239.169:65455] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cilus.php"] [unique_id "agvPKqCHyzL3Ci9LGE0XQgAAAYU"]
[Tue May 19 10:47:06.854293 2026] [:error] [pid 38699:tid 38750] [client 4.204.239.169:64278] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/edit.php"] [unique_id "agvPKr--Adsw_P-dthZgMAAAAEg"]
[Tue May 19 10:47:07.349194 2026] [:error] [pid 38699:tid 38764] [client 4.204.239.169:64223] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/edit.php"] [unique_id "agvPK7--Adsw_P-dthZgMQAAAFY"]
[Tue May 19 10:47:07.864707 2026] [:error] [pid 38697:tid 38718] [client 4.204.239.169:64256] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/edit.php"] [unique_id "agvPK6XP9pP6Kgt-msT0AgAAAAM"]
[Tue May 19 10:47:08.400846 2026] [:error] [pid 38697:tid 38739] [client 4.204.239.169:64996] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/edit.php"] [unique_id "agvPLKXP9pP6Kgt-msT0BQAAABg"]
[Tue May 19 10:47:08.893740 2026] [:error] [pid 38697:tid 38725] [client 4.204.239.169:65001] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws60.php"] [unique_id "agvPLKXP9pP6Kgt-msT0BgAAAAo"]
[Tue May 19 10:47:09.376991 2026] [:error] [pid 38697:tid 38716] [client 4.204.239.169:64977] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws60.php"] [unique_id "agvPLaXP9pP6Kgt-msT0BwAAAAE"]
[Tue May 19 10:47:09.999310 2026] [:error] [pid 38697:tid 38721] [client 4.204.239.169:64192] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws60.php"] [unique_id "agvPLaXP9pP6Kgt-msT0CQAAAAY"]
[Tue May 19 10:47:10.527733 2026] [:error] [pid 38699:tid 38761] [client 4.204.239.169:65464] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws60.php"] [unique_id "agvPLr--Adsw_P-dthZgMgAAAFM"]
[Tue May 19 10:47:11.116847 2026] [:error] [pid 38814:tid 38835] [client 4.204.239.169:65432] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rzki.php"] [unique_id "agvPLwvkKuBwP0epzWdu_wAAANM"]
[Tue May 19 10:47:11.808106 2026] [:error] [pid 46815:tid 46839] [client 4.204.239.169:65064] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rzki.php"] [unique_id "agvPLyPnRhJOmA06LgogEwAAAVY"]
[Tue May 19 10:47:12.318000 2026] [:error] [pid 41573:tid 41575] [client 4.204.239.169:64697] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rzki.php"] [unique_id "agvPMC1A2bd6JDSW9RZRawAAAQA"]
[Tue May 19 10:47:12.911933 2026] [:error] [pid 41573:tid 41578] [client 4.204.239.169:64979] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/rzki.php"] [unique_id "agvPMC1A2bd6JDSW9RZRbAAAAQM"]
[Tue May 19 10:47:13.457000 2026] [:error] [pid 38697:tid 38722] [client 4.204.239.169:64216] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jp.php"] [unique_id "agvPMaXP9pP6Kgt-msT0CwAAAAc"]
[Tue May 19 10:47:14.003466 2026] [:error] [pid 38697:tid 38719] [client 4.204.239.169:65083] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jp.php"] [unique_id "agvPMqXP9pP6Kgt-msT0DAAAAAQ"]
[Tue May 19 10:47:14.487167 2026] [:error] [pid 46815:tid 46834] [client 4.204.239.169:65413] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jp.php"] [unique_id "agvPMiPnRhJOmA06LgogFQAAAVE"]
[Tue May 19 10:47:14.986573 2026] [:error] [pid 38697:tid 38731] [client 4.204.239.169:63519] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jp.php"] [unique_id "agvPMqXP9pP6Kgt-msT0DgAAABA"]
[Tue May 19 10:47:15.613939 2026] [:error] [pid 38705:tid 38769] [client 4.204.239.169:65074] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/G-In.php"] [unique_id "agvPM8g5dNOZ5umN9ls6PwAAAIA"]
[Tue May 19 10:47:16.206687 2026] [:error] [pid 38697:tid 38738] [client 4.204.239.169:65442] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/G-In.php"] [unique_id "agvPNKXP9pP6Kgt-msT0EAAAABc"]
[Tue May 19 10:47:16.738848 2026] [:error] [pid 46815:tid 46824] [client 4.204.239.169:64610] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/G-In.php"] [unique_id "agvPNCPnRhJOmA06LgogFwAAAUc"]
[Tue May 19 10:47:17.216795 2026] [:error] [pid 38699:tid 38763] [client 4.204.239.169:64585] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/G-In.php"] [unique_id "agvPNb--Adsw_P-dthZgOgAAAFU"]
[Tue May 19 10:47:17.843560 2026] [:error] [pid 38697:tid 38718] [client 4.204.239.169:65363] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/public/file.php"] [unique_id "agvPNaXP9pP6Kgt-msT0EwAAAAM"]
[Tue May 19 10:47:18.361961 2026] [:error] [pid 38697:tid 38739] [client 4.204.239.169:64700] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/public/file.php"] [unique_id "agvPNqXP9pP6Kgt-msT0FAAAABg"]
[Tue May 19 10:47:18.809709 2026] [:error] [pid 38697:tid 38716] [client 4.204.239.169:64630] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/public/file.php"] [unique_id "agvPNqXP9pP6Kgt-msT0FgAAAAE"]
[Tue May 19 10:47:19.468665 2026] [:error] [pid 38697:tid 38732] [client 4.204.239.169:64689] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/public/file.php"] [unique_id "agvPN6XP9pP6Kgt-msT0FwAAABE"]
[Tue May 19 10:47:20.076765 2026] [proxy_fcgi:error] [pid 46896:tid 46912] [client 4.204.239.169:64318] AH01071: Got error 'Primary script unknown'
[Tue May 19 10:47:20.320516 2026] [proxy_fcgi:error] [pid 46896:tid 46920] [client 4.204.239.169:64318] AH01071: Got error 'Primary script unknown'
[Tue May 19 10:47:20.586517 2026] [proxy_fcgi:error] [pid 46896:tid 46915] [client 4.204.239.169:64318] AH01071: Got error 'Primary script unknown'
[Tue May 19 10:47:20.840801 2026] [proxy_fcgi:error] [pid 46896:tid 46904] [client 4.204.239.169:64318] AH01071: Got error 'Primary script unknown'
[Tue May 19 10:47:21.081140 2026] [proxy_fcgi:error] [pid 46896:tid 46922] [client 4.204.239.169:64318] AH01071: Got error 'Primary script unknown'
[Tue May 19 10:47:22.311065 2026] [proxy_fcgi:error] [pid 46896:tid 46906] [client 4.204.239.169:64318] AH01071: Got error 'Primary script unknown'
[Tue May 19 10:47:22.578792 2026] [proxy_fcgi:error] [pid 46896:tid 46902] [client 4.204.239.169:64318] AH01071: Got error 'Primary script unknown'
[Tue May 19 10:47:22.820002 2026] [proxy_fcgi:error] [pid 46896:tid 46917] [client 4.204.239.169:64318] AH01071: Got error 'Primary script unknown'
[Tue May 19 10:47:23.061745 2026] [proxy_fcgi:error] [pid 46896:tid 46903] [client 4.204.239.169:64318] AH01071: Got error 'Primary script unknown'
[Tue May 19 10:47:23.323514 2026] [proxy_fcgi:error] [pid 46896:tid 46899] [client 4.204.239.169:64318] AH01071: Got error 'Primary script unknown'
[Tue May 19 10:47:23.563149 2026] [proxy_fcgi:error] [pid 46896:tid 46916] [client 4.204.239.169:64318] AH01071: Got error 'Primary script unknown'
[Tue May 19 10:47:23.799403 2026] [:error] [pid 46896:tid 46914] [client 4.204.239.169:64318] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sadcut1.php"] [unique_id "agvPO6CHyzL3Ci9LGE0XVgAAAZA"]
[Tue May 19 10:47:24.252494 2026] [:error] [pid 46815:tid 46837] [client 4.204.239.169:65358] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sadcut1.php"] [unique_id "agvPPCPnRhJOmA06LgogGAAAAVQ"]
[Tue May 19 10:47:24.818929 2026] [:error] [pid 38699:tid 38750] [client 4.204.239.169:65357] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sadcut1.php"] [unique_id "agvPPL--Adsw_P-dthZgQAAAAEg"]
[Tue May 19 10:47:25.374085 2026] [:error] [pid 38697:tid 38721] [client 4.204.239.169:64228] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sadcut1.php"] [unique_id "agvPPaXP9pP6Kgt-msT0JAAAAAY"]
[Tue May 19 10:47:25.862674 2026] [:error] [pid 46896:tid 46905] [client 4.204.239.169:64582] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/users.php"] [unique_id "agvPPaCHyzL3Ci9LGE0XVwAAAYc"]
[Tue May 19 10:47:26.347521 2026] [:error] [pid 46896:tid 46909] [client 4.204.239.169:65406] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/users.php"] [unique_id "agvPPqCHyzL3Ci9LGE0XWAAAAYs"]
[Tue May 19 10:47:26.779141 2026] [:error] [pid 46896:tid 46921] [client 4.204.239.169:64664] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/users.php"] [unique_id "agvPPqCHyzL3Ci9LGE0XWQAAAZc"]
[Tue May 19 10:47:27.226966 2026] [:error] [pid 38697:tid 38730] [client 4.204.239.169:65384] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/users.php"] [unique_id "agvPP6XP9pP6Kgt-msT0JwAAAA8"]
[Tue May 19 10:47:27.790067 2026] [:error] [pid 38697:tid 38736] [client 4.204.239.169:65409] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "agvPP6XP9pP6Kgt-msT0KAAAABU"]
[Tue May 19 10:47:28.284332 2026] [:error] [pid 38697:tid 38731] [client 4.204.239.169:64685] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "agvPQKXP9pP6Kgt-msT0KQAAABA"]
[Tue May 19 10:47:28.755035 2026] [:error] [pid 38699:tid 38755] [client 4.204.239.169:65084] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "agvPQL--Adsw_P-dthZgRAAAAE0"]
[Tue May 19 10:47:29.203072 2026] [:error] [pid 46815:tid 46838] [client 4.204.239.169:65005] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "agvPQSPnRhJOmA06LgogGwAAAVU"]
[Tue May 19 10:47:29.633812 2026] [:error] [pid 38705:tid 38788] [client 4.204.239.169:64663] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xwx1.php"] [unique_id "agvPQcg5dNOZ5umN9ls6RgAAAJM"]
[Tue May 19 10:47:30.092152 2026] [:error] [pid 38705:tid 38792] [client 4.204.239.169:64699] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xwx1.php"] [unique_id "agvPQsg5dNOZ5umN9ls6SAAAAJc"]
[Tue May 19 10:47:30.618620 2026] [:error] [pid 38699:tid 38757] [client 4.204.239.169:64275] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xwx1.php"] [unique_id "agvPQr--Adsw_P-dthZgRgAAAE8"]
[Tue May 19 10:47:31.158163 2026] [:error] [pid 38699:tid 38754] [client 4.204.239.169:65035] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xwx1.php"] [unique_id "agvPQ7--Adsw_P-dthZgRwAAAEw"]
[Tue May 19 10:47:31.713111 2026] [:error] [pid 41573:tid 41592] [client 4.204.239.169:64625] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ox.php"] [unique_id "agvPQy1A2bd6JDSW9RZRbwAAARE"]
[Tue May 19 10:47:32.190771 2026] [:error] [pid 38814:tid 38827] [client 4.204.239.169:65468] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ox.php"] [unique_id "agvPRAvkKuBwP0epzWdvAwAAAMs"]
[Tue May 19 10:47:32.663017 2026] [:error] [pid 38814:tid 38816] [client 4.204.239.169:64259] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ox.php"] [unique_id "agvPRAvkKuBwP0epzWdvBAAAAMA"]
[Tue May 19 10:47:33.156067 2026] [:error] [pid 46896:tid 46903] [client 4.204.239.169:64962] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ox.php"] [unique_id "agvPRaCHyzL3Ci9LGE0XXwAAAYU"]
[Tue May 19 10:47:33.676118 2026] [:error] [pid 46815:tid 46818] [client 4.204.239.169:64593] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sid3.php"] [unique_id "agvPRSPnRhJOmA06LgogIQAAAUE"]
[Tue May 19 10:47:34.159488 2026] [:error] [pid 38697:tid 38733] [client 4.204.239.169:64967] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sid3.php"] [unique_id "agvPRqXP9pP6Kgt-msT0MQAAABI"]
[Tue May 19 10:47:34.669864 2026] [:error] [pid 38697:tid 38720] [client 4.204.239.169:64627] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sid3.php"] [unique_id "agvPRqXP9pP6Kgt-msT0NAAAAAU"]
[Tue May 19 10:47:35.312186 2026] [:error] [pid 38699:tid 38746] [client 4.204.239.169:65024] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sid3.php"] [unique_id "agvPR7--Adsw_P-dthZgSQAAAEQ"]
[Tue May 19 10:47:35.879339 2026] [:error] [pid 38697:tid 38722] [client 4.204.239.169:64273] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/drhunthq.php"] [unique_id "agvPR6XP9pP6Kgt-msT0OAAAAAc"]
[Tue May 19 10:47:36.364094 2026] [:error] [pid 38705:tid 38790] [client 4.204.239.169:64262] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/drhunthq.php"] [unique_id "agvPSMg5dNOZ5umN9ls6TwAAAJU"]
[Tue May 19 10:47:36.860841 2026] [:error] [pid 38699:tid 38743] [client 4.204.239.169:64199] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/drhunthq.php"] [unique_id "agvPSL--Adsw_P-dthZgTgAAAEE"]
[Tue May 19 10:47:37.399771 2026] [:error] [pid 38697:tid 38725] [client 4.204.239.169:65018] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/drhunthq.php"] [unique_id "agvPSaXP9pP6Kgt-msT0OwAAAAo"]
[Tue May 19 10:47:37.904701 2026] [:error] [pid 46896:tid 46911] [client 4.204.239.169:65410] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/s.php"] [unique_id "agvPSaCHyzL3Ci9LGE0XYgAAAY0"]
[Tue May 19 10:47:38.367450 2026] [:error] [pid 46815:tid 46824] [client 4.204.239.169:64651] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/s.php"] [unique_id "agvPSiPnRhJOmA06LgogIgAAAUc"]
[Tue May 19 10:47:39.058091 2026] [:error] [pid 46896:tid 46919] [client 4.204.239.169:64701] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/s.php"] [unique_id "agvPS6CHyzL3Ci9LGE0XZQAAAZU"]
[Tue May 19 10:47:39.575328 2026] [:error] [pid 46896:tid 46912] [client 4.204.239.169:65366] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/s.php"] [unique_id "agvPS6CHyzL3Ci9LGE0XZgAAAY4"]
[Tue May 19 10:47:40.162750 2026] [:error] [pid 38697:tid 38720] [client 4.204.239.169:65058] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/clss.php"] [unique_id "agvPTKXP9pP6Kgt-msT0PgAAAAU"]
[Tue May 19 10:47:40.644978 2026] [:error] [pid 38697:tid 38727] [client 4.204.239.169:64311] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/clss.php"] [unique_id "agvPTKXP9pP6Kgt-msT0QAAAAAw"]
[Tue May 19 10:47:41.171170 2026] [:error] [pid 46815:tid 46826] [client 4.204.239.169:64695] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/clss.php"] [unique_id "agvPTSPnRhJOmA06LgogIwAAAUk"]
[Tue May 19 10:47:41.630326 2026] [:error] [pid 46815:tid 46830] [client 4.204.239.169:64632] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/clss.php"] [unique_id "agvPTSPnRhJOmA06LgogJQAAAU0"]
[Tue May 19 10:47:42.103816 2026] [:error] [pid 38699:tid 38758] [client 4.204.239.169:64637] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mh.php"] [unique_id "agvPTr--Adsw_P-dthZgVAAAAFA"]
[Tue May 19 10:47:42.603119 2026] [:error] [pid 38705:tid 38788] [client 4.204.239.169:65465] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mh.php"] [unique_id "agvPTsg5dNOZ5umN9ls6UgAAAJM"]
[Tue May 19 10:47:43.077114 2026] [:error] [pid 41573:tid 41576] [client 4.204.239.169:65453] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mh.php"] [unique_id "agvPTy1A2bd6JDSW9RZRcgAAAQE"]
[Tue May 19 10:47:43.626380 2026] [:error] [pid 46815:tid 46817] [client 4.204.239.169:64290] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mh.php"] [unique_id "agvPTyPnRhJOmA06LgogKAAAAUA"]
[Tue May 19 10:47:44.114721 2026] [:error] [pid 41573:tid 41597] [client 4.204.239.169:64595] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wen.php"] [unique_id "agvPUC1A2bd6JDSW9RZRdAAAARY"]
[Tue May 19 10:47:44.563078 2026] [:error] [pid 41573:tid 41593] [client 4.204.239.169:64629] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wen.php"] [unique_id "agvPUC1A2bd6JDSW9RZRdQAAARI"]
[Tue May 19 10:47:45.055130 2026] [:error] [pid 38705:tid 38791] [client 4.204.239.169:64600] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wen.php"] [unique_id "agvPUcg5dNOZ5umN9ls6VgAAAJY"]
[Tue May 19 10:47:45.552926 2026] [:error] [pid 41573:tid 41589] [client 4.204.239.169:65002] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wen.php"] [unique_id "agvPUS1A2bd6JDSW9RZRdgAAAQ4"]
[Tue May 19 10:47:45.982809 2026] [:error] [pid 46815:tid 46838] [client 4.204.239.169:64261] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Sanskrit.php"] [unique_id "agvPUSPnRhJOmA06LgogKwAAAVU"]
[Tue May 19 10:47:46.440810 2026] [:error] [pid 41573:tid 41586] [client 4.204.239.169:64976] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Sanskrit.php"] [unique_id "agvPUi1A2bd6JDSW9RZRdwAAAQs"]
[Tue May 19 10:47:46.956793 2026] [:error] [pid 46815:tid 46840] [client 4.204.239.169:65073] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Sanskrit.php"] [unique_id "agvPUiPnRhJOmA06LgogLQAAAVc"]
[Tue May 19 10:47:47.427044 2026] [:error] [pid 46815:tid 46821] [client 4.204.239.169:65446] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/Sanskrit.php"] [unique_id "agvPUyPnRhJOmA06LgogLgAAAUQ"]
[Tue May 19 10:47:47.927147 2026] [:error] [pid 46815:tid 46818] [client 4.204.239.169:64597] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gettest.php"] [unique_id "agvPUyPnRhJOmA06LgogMAAAAUE"]
[Tue May 19 10:47:48.381974 2026] [:error] [pid 38699:tid 38752] [client 4.204.239.169:64631] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gettest.php"] [unique_id "agvPVL--Adsw_P-dthZgVQAAAEo"]
[Tue May 19 10:47:48.814878 2026] [:error] [pid 38705:tid 38778] [client 4.204.239.169:64604] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gettest.php"] [unique_id "agvPVMg5dNOZ5umN9ls6VwAAAIk"]
[Tue May 19 10:47:49.273403 2026] [:error] [pid 38705:tid 38769] [client 4.204.239.169:64692] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/gettest.php"] [unique_id "agvPVcg5dNOZ5umN9ls6WAAAAIA"]
[Tue May 19 10:47:49.825860 2026] [:error] [pid 38814:tid 38837] [client 4.204.239.169:65348] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bfil.php"] [unique_id "agvPVQvkKuBwP0epzWdvCgAAANU"]
[Tue May 19 10:47:50.317945 2026] [:error] [pid 38814:tid 38829] [client 4.204.239.169:65032] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bfil.php"] [unique_id "agvPVgvkKuBwP0epzWdvCwAAAM0"]
[Tue May 19 10:47:50.781846 2026] [:error] [pid 46815:tid 46820] [client 4.204.239.169:63493] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bfil.php"] [unique_id "agvPViPnRhJOmA06LgogMQAAAUM"]
[Tue May 19 10:47:51.254231 2026] [:error] [pid 46896:tid 46906] [client 4.204.239.169:65420] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bfil.php"] [unique_id "agvPV6CHyzL3Ci9LGE0XaAAAAYg"]
[Tue May 19 10:47:51.794386 2026] [:error] [pid 38697:tid 38724] [client 4.204.239.169:65471] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ww.php"] [unique_id "agvPV6XP9pP6Kgt-msT0QQAAAAk"]
[Tue May 19 10:47:52.331861 2026] [:error] [pid 38699:tid 38743] [client 4.204.239.169:65087] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ww.php"] [unique_id "agvPWL--Adsw_P-dthZgVwAAAEE"]
[Tue May 19 10:47:52.779049 2026] [:error] [pid 38705:tid 38787] [client 4.204.239.169:64686] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ww.php"] [unique_id "agvPWMg5dNOZ5umN9ls6WwAAAJI"]
[Tue May 19 10:47:53.388088 2026] [:error] [pid 46896:tid 46901] [client 4.204.239.169:64972] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ww.php"] [unique_id "agvPWaCHyzL3Ci9LGE0XbAAAAYM"]
[Tue May 19 10:47:53.847308 2026] [:error] [pid 46896:tid 46908] [client 4.204.239.169:64961] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/byypas.php"] [unique_id "agvPWaCHyzL3Ci9LGE0XbgAAAYo"]
[Tue May 19 10:47:54.294285 2026] [:error] [pid 46896:tid 46899] [client 4.204.239.169:65015] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/byypas.php"] [unique_id "agvPWqCHyzL3Ci9LGE0XbwAAAYE"]
[Tue May 19 10:47:54.746138 2026] [:error] [pid 38705:tid 38786] [client 4.204.239.169:64673] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/byypas.php"] [unique_id "agvPWsg5dNOZ5umN9ls6XAAAAJE"]
[Tue May 19 10:47:55.217440 2026] [:error] [pid 46896:tid 46916] [client 4.204.239.169:63540] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/byypas.php"] [unique_id "agvPW6CHyzL3Ci9LGE0XcAAAAZI"]
[Tue May 19 10:47:55.664207 2026] [:error] [pid 38699:tid 38760] [client 4.204.239.169:65394] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ms-edit.php"] [unique_id "agvPW7--Adsw_P-dthZgWAAAAFI"]
[Tue May 19 10:47:56.127650 2026] [:error] [pid 38697:tid 38735] [client 4.204.239.169:65086] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ms-edit.php"] [unique_id "agvPXKXP9pP6Kgt-msT0QwAAABQ"]
[Tue May 19 10:47:56.636822 2026] [:error] [pid 38697:tid 38717] [client 4.204.239.169:65451] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ms-edit.php"] [unique_id "agvPXKXP9pP6Kgt-msT0RAAAAAI"]
[Tue May 19 10:47:57.157144 2026] [:error] [pid 38697:tid 38725] [client 4.204.239.169:64271] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ms-edit.php"] [unique_id "agvPXaXP9pP6Kgt-msT0RQAAAAo"]
[Tue May 19 10:47:57.640474 2026] [:error] [pid 38697:tid 38737] [client 4.204.239.169:65369] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws87.php"] [unique_id "agvPXaXP9pP6Kgt-msT0RgAAABY"]
[Tue May 19 10:47:58.160366 2026] [:error] [pid 38699:tid 38764] [client 4.204.239.169:65425] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws87.php"] [unique_id "agvPXr--Adsw_P-dthZgWwAAAFY"]
[Tue May 19 10:47:58.637873 2026] [:error] [pid 38814:tid 38835] [client 4.204.239.169:64688] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws87.php"] [unique_id "agvPXgvkKuBwP0epzWdvDQAAANM"]
[Tue May 19 10:47:59.063201 2026] [:error] [pid 38699:tid 38765] [client 4.204.239.169:64643] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ws87.php"] [unique_id "agvPX7--Adsw_P-dthZgXAAAAFc"]
[Tue May 19 10:47:59.523889 2026] [:error] [pid 41573:tid 41598] [client 4.204.239.169:65427] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aa21.php"] [unique_id "agvPXy1A2bd6JDSW9RZRfAAAARc"]
[Tue May 19 10:47:59.963556 2026] [:error] [pid 38814:tid 38840] [client 4.204.239.169:63551] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aa21.php"] [unique_id "agvPXwvkKuBwP0epzWdvDgAAANg"]
[Tue May 19 10:48:00.470578 2026] [:error] [pid 41573:tid 41582] [client 4.204.239.169:64594] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aa21.php"] [unique_id "agvPYC1A2bd6JDSW9RZRfgAAAQc"]
[Tue May 19 10:48:00.936327 2026] [:error] [pid 41573:tid 41579] [client 4.204.239.169:64591] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aa21.php"] [unique_id "agvPYC1A2bd6JDSW9RZRfwAAAQQ"]
[Tue May 19 10:48:01.418149 2026] [:error] [pid 41573:tid 41588] [client 4.204.239.169:65454] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/okxh.php"] [unique_id "agvPYS1A2bd6JDSW9RZRggAAAQ0"]
[Tue May 19 10:48:01.927980 2026] [:error] [pid 41573:tid 41591] [client 4.204.239.169:64596] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/okxh.php"] [unique_id "agvPYS1A2bd6JDSW9RZRgwAAARA"]
[Tue May 19 10:48:02.389490 2026] [:error] [pid 41573:tid 41597] [client 4.204.239.169:64272] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/okxh.php"] [unique_id "agvPYi1A2bd6JDSW9RZRhAAAARY"]
[Tue May 19 10:48:02.864329 2026] [:error] [pid 38814:tid 38833] [client 4.204.239.169:65063] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/okxh.php"] [unique_id "agvPYgvkKuBwP0epzWdvEQAAANE"]
[Tue May 19 10:48:03.341674 2026] [:error] [pid 38814:tid 38823] [client 4.204.239.169:65053] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "agvPYwvkKuBwP0epzWdvEgAAAMc"]
[Tue May 19 10:48:03.783318 2026] [:error] [pid 38699:tid 38753] [client 4.204.239.169:64659] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "agvPY7--Adsw_P-dthZgXQAAAEs"]
[Tue May 19 10:48:04.251458 2026] [:error] [pid 38697:tid 38720] [client 4.204.239.169:65405] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "agvPZKXP9pP6Kgt-msT0TQAAAAU"]
[Tue May 19 10:48:04.780411 2026] [:error] [pid 41573:tid 41586] [client 4.204.239.169:65466] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "agvPZC1A2bd6JDSW9RZRhwAAAQs"]
[Tue May 19 10:48:05.244542 2026] [:error] [pid 46896:tid 46910] [client 4.204.239.169:64264] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fsjzs.php"] [unique_id "agvPZaCHyzL3Ci9LGE0XcQAAAYw"]
[Tue May 19 10:48:05.690340 2026] [:error] [pid 41573:tid 41584] [client 4.204.239.169:64619] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fsjzs.php"] [unique_id "agvPZS1A2bd6JDSW9RZRiAAAAQk"]
[Tue May 19 10:48:06.122528 2026] [:error] [pid 38697:tid 38718] [client 4.204.239.169:63497] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fsjzs.php"] [unique_id "agvPZqXP9pP6Kgt-msT0WAAAAAM"]
[Tue May 19 10:48:06.588677 2026] [:error] [pid 38697:tid 38725] [client 4.204.239.169:63537] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fsjzs.php"] [unique_id "agvPZqXP9pP6Kgt-msT0WwAAAAo"]
[Tue May 19 10:48:07.053098 2026] [:error] [pid 41573:tid 41598] [client 4.204.239.169:64264] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sale.php"] [unique_id "agvPZy1A2bd6JDSW9RZRigAAARc"]
[Tue May 19 10:48:07.532945 2026] [:error] [pid 41573:tid 41582] [client 4.204.239.169:64980] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sale.php"] [unique_id "agvPZy1A2bd6JDSW9RZRjAAAAQc"]
[Tue May 19 10:48:08.024889 2026] [:error] [pid 38697:tid 38719] [client 4.204.239.169:65038] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sale.php"] [unique_id "agvPaKXP9pP6Kgt-msT0YQAAAAQ"]
[Tue May 19 10:48:08.573612 2026] [:error] [pid 38697:tid 38724] [client 4.204.239.169:65355] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sale.php"] [unique_id "agvPaKXP9pP6Kgt-msT0ZQAAAAk"]
[Tue May 19 10:48:09.071202 2026] [:error] [pid 46896:tid 46911] [client 4.204.239.169:64628] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/t00l.php"] [unique_id "agvPaaCHyzL3Ci9LGE0XcwAAAY0"]
[Tue May 19 10:48:09.536536 2026] [:error] [pid 38697:tid 38739] [client 4.204.239.169:64644] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/t00l.php"] [unique_id "agvPaaXP9pP6Kgt-msT0bQAAABg"]
[Tue May 19 10:48:09.985883 2026] [:error] [pid 38697:tid 38729] [client 4.204.239.169:63522] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/t00l.php"] [unique_id "agvPaaXP9pP6Kgt-msT0bwAAAA4"]
[Tue May 19 10:48:10.483534 2026] [:error] [pid 38697:tid 38724] [client 4.204.239.169:64703] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/t00l.php"] [unique_id "agvPaqXP9pP6Kgt-msT0cAAAAAk"]
[Tue May 19 10:48:10.988009 2026] [:error] [pid 38697:tid 38738] [client 4.204.239.169:64316] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wziar1.php"] [unique_id "agvPaqXP9pP6Kgt-msT0dAAAABc"]
[Tue May 19 10:48:11.478523 2026] [:error] [pid 46815:tid 46840] [client 4.204.239.169:64576] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wziar1.php"] [unique_id "agvPayPnRhJOmA06LgogNgAAAVc"]
[Tue May 19 10:48:11.936786 2026] [:error] [pid 38697:tid 38715] [client 4.204.239.169:65377] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wziar1.php"] [unique_id "agvPa6XP9pP6Kgt-msT0eAAAAAA"]
[Tue May 19 10:48:12.457749 2026] [:error] [pid 38697:tid 38721] [client 4.204.239.169:64681] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wziar1.php"] [unique_id "agvPbKXP9pP6Kgt-msT0egAAAAY"]
[Tue May 19 10:48:13.013551 2026] [:error] [pid 38697:tid 38719] [client 4.204.239.169:63431] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lib.php"] [unique_id "agvPbaXP9pP6Kgt-msT0fAAAAAQ"]
[Tue May 19 10:48:13.550717 2026] [:error] [pid 38697:tid 38737] [client 4.204.239.169:64580] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lib.php"] [unique_id "agvPbaXP9pP6Kgt-msT0gAAAABY"]
[Tue May 19 10:48:14.015753 2026] [:error] [pid 38697:tid 38735] [client 4.204.239.169:64296] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lib.php"] [unique_id "agvPbqXP9pP6Kgt-msT0ggAAABQ"]
[Tue May 19 10:48:14.473801 2026] [:error] [pid 41573:tid 41591] [client 4.204.239.169:64971] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lib.php"] [unique_id "agvPbi1A2bd6JDSW9RZRjgAAARA"]
[Tue May 19 10:48:15.039493 2026] [:error] [pid 46896:tid 46915] [client 4.204.239.169:64691] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/222.php"] [unique_id "agvPb6CHyzL3Ci9LGE0XdwAAAZE"]
[Tue May 19 10:48:15.480080 2026] [:error] [pid 46896:tid 46906] [client 4.204.239.169:64649] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/222.php"] [unique_id "agvPb6CHyzL3Ci9LGE0XegAAAYg"]
[Tue May 19 10:48:15.905652 2026] [:error] [pid 46896:tid 46900] [client 4.204.239.169:64299] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/222.php"] [unique_id "agvPb6CHyzL3Ci9LGE0XewAAAYI"]
[Tue May 19 10:48:16.361500 2026] [:error] [pid 46815:tid 46822] [client 4.204.239.169:64193] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/222.php"] [unique_id "agvPcCPnRhJOmA06LgogOQAAAUU"]
[Tue May 19 10:48:17.035729 2026] [:error] [pid 41573:tid 41589] [client 4.204.239.169:65423] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kj.php"] [unique_id "agvPcS1A2bd6JDSW9RZRkAAAAQ4"]
[Tue May 19 10:48:17.516712 2026] [:error] [pid 41573:tid 41586] [client 4.204.239.169:65008] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kj.php"] [unique_id "agvPcS1A2bd6JDSW9RZRkgAAAQs"]
[Tue May 19 10:48:18.004965 2026] [:error] [pid 38699:tid 38762] [client 4.204.239.169:65007] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kj.php"] [unique_id "agvPcr--Adsw_P-dthZgYgAAAFQ"]
[Tue May 19 10:48:18.527484 2026] [:error] [pid 41573:tid 41587] [client 4.204.239.169:64297] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kj.php"] [unique_id "agvPci1A2bd6JDSW9RZRlgAAAQw"]
[Tue May 19 10:48:19.013891 2026] [:error] [pid 46815:tid 46818] [client 4.204.239.169:64669] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/amp.php"] [unique_id "agvPcyPnRhJOmA06LgogOgAAAUE"]
[Tue May 19 10:48:19.478285 2026] [:error] [pid 38699:tid 38746] [client 4.204.239.169:64661] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/amp.php"] [unique_id "agvPc7--Adsw_P-dthZgZAAAAEQ"]
[Tue May 19 10:48:20.028606 2026] [:error] [pid 46815:tid 46839] [client 4.204.239.169:63496] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/amp.php"] [unique_id "agvPdCPnRhJOmA06LgogPAAAAVY"]
[Tue May 19 10:48:20.499971 2026] [:error] [pid 46896:tid 46910] [client 4.204.239.169:65023] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/amp.php"] [unique_id "agvPdKCHyzL3Ci9LGE0XhAAAAYw"]
[Tue May 19 10:48:21.063849 2026] [:error] [pid 46815:tid 46834] [client 4.204.239.169:64698] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bo.php"] [unique_id "agvPdSPnRhJOmA06LgogPgAAAVE"]
[Tue May 19 10:48:21.596579 2026] [:error] [pid 46896:tid 46918] [client 4.204.239.169:64207] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bo.php"] [unique_id "agvPdaCHyzL3Ci9LGE0XhQAAAZQ"]
[Tue May 19 10:48:22.307065 2026] [:error] [pid 46896:tid 46920] [client 4.204.239.169:65376] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bo.php"] [unique_id "agvPdqCHyzL3Ci9LGE0XhgAAAZY"]
[Tue May 19 10:48:22.738922 2026] [:error] [pid 46896:tid 46912] [client 4.204.239.169:64666] [client 4.204.239.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bo.php"] [unique_id "agvPdqCHyzL3Ci9LGE0XhwAAAY4"]
[Tue May 19 10:48:23.317188 2026] [proxy_fcgi:error] [pid 46815:tid 46830] [client 4.204.239.169:65012] AH01071: Got error 'Primary script unknown'
[Tue May 19 10:48:23.532040 2026] [proxy_fcgi:error] [pid 46815:tid 46837] [client 4.204.239.169:65012] AH01071: Got error 'Primary script unknown'
[Tue May 19 10:48:23.746721 2026] [proxy_fcgi:error] [pid 46815:tid 46817] [client 4.204.239.169:65012] AH01071: Got error 'Primary script unknown'
[Tue May 19 10:48:23.958865 2026] [proxy_fcgi:error] [pid 46815:tid 46836] [client 4.204.239.169:65012] AH01071: Got error 'Primary script unknown'
[Tue May 19 10:48:24.186957 2026] [proxy_fcgi:error] [pid 46815:tid 46838] [client 4.204.239.169:65012] AH01071: Got error 'Primary script unknown'
[Tue May 19 10:48:24.410967 2026] [proxy_fcgi:error] [pid 46815:tid 46832] [client 4.204.239.169:65012] AH01071: Got error 'Primary script unknown'
[Tue May 19 21:11:57.351582 2026] [:error] [pid 29823:tid 29862] [client 208.84.101.238:55712] [client 208.84.101.238] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/api/.env"] [unique_id "agxhnWO09C0nAz8vRk5RQQAAAdc"]
[Tue May 19 21:11:57.351940 2026] [:error] [pid 46815:tid 46825] [client 208.84.101.238:55696] [client 208.84.101.238] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/app/.env"] [unique_id "agxhnSPnRhJOmA06Lgp2lAAAAUg"]
[Tue May 19 21:11:57.352143 2026] [:error] [pid 46815:tid 46836] [client 208.84.101.238:55728] [client 208.84.101.238] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/backend/.env"] [unique_id "agxhnSPnRhJOmA06Lgp2kwAAAVM"]
[Tue May 19 21:11:57.352583 2026] [:error] [pid 29823:tid 29854] [client 208.84.101.238:55686] [client 208.84.101.238] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.production"] [unique_id "agxhnWO09C0nAz8vRk5RQgAAAc8"]
[Tue May 19 21:11:57.414343 2026] [:error] [pid 29823:tid 29848] [client 208.84.101.238:55684] [client 208.84.101.238] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env"] [unique_id "agxhnWO09C0nAz8vRk5RQwAAAck"]
[Tue May 19 21:11:57.423294 2026] [:error] [pid 46815:tid 46817] [client 208.84.101.238:55776] [client 208.84.101.238] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.local"] [unique_id "agxhnSPnRhJOmA06Lgp2lQAAAUA"]
[Tue May 19 21:11:58.648588 2026] [:error] [pid 29823:tid 29854] [client 208.84.101.238:55758] [client 208.84.101.238] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.production.copy"] [unique_id "agxhnmO09C0nAz8vRk5RSAAAAc8"]
[Tue May 19 21:11:58.685991 2026] [:error] [pid 29823:tid 29837] [client 208.84.101.238:55754] [client 208.84.101.238] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.git/HEAD"] [unique_id "agxhnmO09C0nAz8vRk5RSQAAAcI"]
[Tue May 19 21:11:58.685991 2026] [:error] [pid 29823:tid 29840] [client 208.84.101.238:55746] [client 208.84.101.238] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.git/config"] [unique_id "agxhnmO09C0nAz8vRk5RSgAAAcU"]
[Tue May 19 21:11:58.686731 2026] [:error] [pid 29823:tid 29849] [client 208.84.101.238:59066] [client 208.84.101.238] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.git/FETCH_HEAD"] [unique_id "agxhnmO09C0nAz8vRk5RSwAAAco"]
[Tue May 19 21:11:59.408744 2026] [:error] [pid 38699:tid 38762] [client 208.84.101.238:55932] [client 208.84.101.238] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.local.orig"] [unique_id "agxhn7--Adsw_P-dthaltgAAAFQ"]
[Tue May 19 21:11:59.411520 2026] [:error] [pid 29622:tid 29642] [client 208.84.101.238:55958] [client 208.84.101.238] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.production.bak"] [unique_id "agxhnzkOqPKWkPs_P15TcQAAAhI"]
[Tue May 19 21:11:59.412265 2026] [:error] [pid 38705:tid 38785] [client 208.84.101.238:55926] [client 208.84.101.238] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.local.swp"] [unique_id "agxhn8g5dNOZ5umN9ltjBgAAAJA"]
[Tue May 19 21:11:59.418856 2026] [:error] [pid 46815:tid 46827] [client 208.84.101.238:55918] [client 208.84.101.238] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.local~"] [unique_id "agxhnyPnRhJOmA06Lgp2lwAAAUo"]
[Tue May 19 21:11:59.423589 2026] [:error] [pid 46815:tid 46824] [client 208.84.101.238:55948] [client 208.84.101.238] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.local.copy"] [unique_id "agxhnyPnRhJOmA06Lgp2mAAAAUc"]
[Tue May 19 21:11:59.429930 2026] [:error] [pid 46815:tid 46818] [client 208.84.101.238:55904] [client 208.84.101.238] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.local.save"] [unique_id "agxhnyPnRhJOmA06Lgp2mQAAAUE"]
[Tue May 19 21:11:59.524038 2026] [:error] [pid 29823:tid 29857] [client 208.84.101.238:55880] [client 208.84.101.238] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.local.bak"] [unique_id "agxhn2O09C0nAz8vRk5RTgAAAdI"]
[Tue May 19 21:11:59.524245 2026] [:error] [pid 29823:tid 29835] [client 208.84.101.238:55892] [client 208.84.101.238] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.local.old"] [unique_id "agxhn2O09C0nAz8vRk5RTwAAAcA"]
[Tue May 19 21:11:59.524977 2026] [:error] [pid 38697:tid 38725] [client 208.84.101.238:55878] [client 208.84.101.238] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.copy"] [unique_id "agxhn6XP9pP6Kgt-msRWEQAAAAo"]
[Tue May 19 21:11:59.527012 2026] [:error] [pid 29823:tid 29852] [client 208.84.101.238:55868] [client 208.84.101.238] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.orig"] [unique_id "agxhn2O09C0nAz8vRk5RUAAAAc0"]
[Tue May 19 21:11:59.527600 2026] [:error] [pid 29823:tid 29852] [client 208.84.101.238:55852] [client 208.84.101.238] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env~"] [unique_id "agxhn2O09C0nAz8vRk5RUQAAAc0"]
[Tue May 19 21:11:59.528593 2026] [:error] [pid 46815:tid 46841] [client 208.84.101.238:55842] [client 208.84.101.238] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.save"] [unique_id "agxhnyPnRhJOmA06Lgp2mgAAAVg"]
[Tue May 19 21:11:59.530632 2026] [:error] [pid 29823:tid 29856] [client 208.84.101.238:55830] [client 208.84.101.238] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.backup"] [unique_id "agxhn2O09C0nAz8vRk5RUgAAAdE"]
[Tue May 19 21:11:59.532100 2026] [:error] [pid 46815:tid 46833] [client 208.84.101.238:55826] [client 208.84.101.238] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.old"] [unique_id "agxhnyPnRhJOmA06Lgp2mwAAAVA"]
[Tue May 19 21:11:59.532609 2026] [:error] [pid 38697:tid 38729] [client 208.84.101.238:55814] [client 208.84.101.238] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.bak"] [unique_id "agxhn6XP9pP6Kgt-msRWEgAAAA4"]
[Tue May 19 21:11:59.533570 2026] [:error] [pid 29622:tid 29630] [client 208.84.101.238:55972] [client 208.84.101.238] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.git/refs/heads/master"] [unique_id "agxhnzkOqPKWkPs_P15TcgAAAgY"]
[Tue May 19 21:11:59.534369 2026] [:error] [pid 46815:tid 46834] [client 208.84.101.238:55780] [client 208.84.101.238] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.git/logs/HEAD"] [unique_id "agxhnyPnRhJOmA06Lgp2nAAAAVE"]
[Tue May 19 21:11:59.534800 2026] [:error] [pid 29622:tid 29628] [client 208.84.101.238:55804] [client 208.84.101.238] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.swp"] [unique_id "agxhnzkOqPKWkPs_P15TcwAAAgQ"]
[Tue May 19 21:11:59.536369 2026] [:error] [pid 29622:tid 29646] [client 208.84.101.238:55794] [client 208.84.101.238] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.local.backup"] [unique_id "agxhnzkOqPKWkPs_P15TdAAAAhY"]
[Tue May 19 21:11:59.536925 2026] [:error] [pid 38697:tid 38730] [client 208.84.101.238:55974] [client 208.84.101.238] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.production.old"] [unique_id "agxhn6XP9pP6Kgt-msRWEwAAAA8"]
[Tue May 19 21:11:59.537317 2026] [:error] [pid 38697:tid 38732] [client 208.84.101.238:55978] [client 208.84.101.238] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.production.backup"] [unique_id "agxhn6XP9pP6Kgt-msRWFAAAABE"]
[Tue May 19 21:11:59.550673 2026] [:error] [pid 29622:tid 29648] [client 208.84.101.238:56006] [client 208.84.101.238] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.production~"] [unique_id "agxhnzkOqPKWkPs_P15TdQAAAhg"]
[Tue May 19 21:11:59.551908 2026] [:error] [pid 38699:tid 38747] [client 208.84.101.238:55996] [client 208.84.101.238] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.production.orig"] [unique_id "agxhn7--Adsw_P-dthaltwAAAEU"]
[Tue May 19 21:11:59.552131 2026] [:error] [pid 46815:tid 46838] [client 208.84.101.238:55986] [client 208.84.101.238] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.production.swp"] [unique_id "agxhnyPnRhJOmA06Lgp2nQAAAVU"]
[Tue May 19 21:11:59.553648 2026] [:error] [pid 29823:tid 29836] [client 208.84.101.238:55980] [client 208.84.101.238] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.git/refs/heads/main"] [unique_id "agxhn2O09C0nAz8vRk5RUwAAAcE"]
[Tue May 19 21:11:59.593388 2026] [:error] [pid 38697:tid 38733] [client 208.84.101.238:55898] [client 208.84.101.238] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.production.save"] [unique_id "agxhn6XP9pP6Kgt-msRWFQAAABI"]
[Wed May 20 04:42:13.483781 2026] [:error] [pid 59244:tid 59258] [client 194.62.107.243:60291] [client 194.62.107.243] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env"] [unique_id "agzLJbxU0SdQQE7pLs2tNgAAAAU"]
[Wed May 20 07:55:24.564113 2026] [proxy_fcgi:error] [pid 41278:tid 41311] [client 20.226.79.57:13715] AH01071: Got error 'Primary script unknown'
[Wed May 20 07:55:24.887022 2026] [proxy_fcgi:error] [pid 41278:tid 41310] [client 20.226.79.57:13715] AH01071: Got error 'Primary script unknown'
[Wed May 20 07:55:25.209704 2026] [proxy_fcgi:error] [pid 41278:tid 41319] [client 20.226.79.57:13715] AH01071: Got error 'Primary script unknown'
[Wed May 20 07:55:25.534667 2026] [proxy_fcgi:error] [pid 41278:tid 41325] [client 20.226.79.57:13715] AH01071: Got error 'Primary script unknown'
[Wed May 20 07:55:25.858176 2026] [proxy_fcgi:error] [pid 41278:tid 41327] [client 20.226.79.57:13715] AH01071: Got error 'Primary script unknown'
[Wed May 20 07:55:26.181103 2026] [proxy_fcgi:error] [pid 41278:tid 41328] [client 20.226.79.57:13715] AH01071: Got error 'Primary script unknown'
[Wed May 20 07:55:26.503148 2026] [proxy_fcgi:error] [pid 41278:tid 41331] [client 20.226.79.57:13715] AH01071: Got error 'Primary script unknown'
[Wed May 20 07:55:27.163508 2026] [proxy_fcgi:error] [pid 41278:tid 41312] [client 20.226.79.57:13715] AH01071: Got error 'Primary script unknown'
[Wed May 20 07:55:27.499362 2026] [proxy_fcgi:error] [pid 41278:tid 41315] [client 20.226.79.57:13715] AH01071: Got error 'Primary script unknown'
[Wed May 20 07:55:27.847603 2026] [proxy_fcgi:error] [pid 41278:tid 41311] [client 20.226.79.57:13715] AH01071: Got error 'Primary script unknown'
[Wed May 20 07:55:28.168928 2026] [:error] [pid 41278:tid 41316] [client 20.226.79.57:13715] [client 20.226.79.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/about.php"] [unique_id "agz4cPWiNKASEfiGdwZg2QAAAEc"]
[Wed May 20 07:55:29.461480 2026] [:error] [pid 41277:tid 41285] [client 20.226.79.57:12557] [client 20.226.79.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/about.php"] [unique_id "agz4cbTTCltJmboB5ue5CgAAAAM"]
[Wed May 20 07:55:30.796856 2026] [:error] [pid 41278:tid 41313] [client 20.226.79.57:12594] [client 20.226.79.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/about.php"] [unique_id "agz4cvWiNKASEfiGdwZg7gAAAEQ"]
[Wed May 20 07:55:32.097732 2026] [:error] [pid 41364:tid 41377] [client 20.226.79.57:12415] [client 20.226.79.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/about.php"] [unique_id "agz4dBKTmyvxtNXrN-gvxQAAAIs"]
[Wed May 20 14:33:59.630560 2026] [:error] [pid 41279:tid 41351] [client 34.46.57.55:55515] [client 34.46.57.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/"] [unique_id "ag1V17EFyfaehGZbt4xzEgAAAM8"]
[Wed May 20 14:34:00.041040 2026] [:error] [pid 7731:tid 7743] [client 34.46.57.55:53211] [client 34.46.57.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/"] [unique_id "ag1V2H9qQlHXbkl2nEueXgAAAYo"]
[Wed May 20 14:34:00.429473 2026] [:error] [pid 7731:tid 7741] [client 34.46.57.55:53500] [client 34.46.57.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "ag1V2H9qQlHXbkl2nEueeAAAAYg"]
[Wed May 20 19:56:06.209340 2026] [:error] [pid 41278:tid 41326] [client 34.180.1.79:56498] [client 34.180.1.79] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.180.1.79, incrementing ddos counter"] [hostname "dwelectservices.com.au"] [uri "/xmlrpc.php"] [unique_id "ag2hVvWiNKASEfiGdwazSAAAAFE"]
[Wed May 20 19:56:06.219720 2026] [proxy_fcgi:error] [pid 41278:tid 41326] [client 34.180.1.79:56498] AH01071: Got error 'Primary script unknown'
[Wed May 20 19:56:08.319335 2026] [:error] [pid 41278:tid 41317] [client 34.180.1.79:56498] [client 34.180.1.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "ag2hWPWiNKASEfiGdwazVAAAAEg"]
[Wed May 20 19:56:09.153004 2026] [:error] [pid 7731:tid 7738] [client 34.180.1.79:62140] [client 34.180.1.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "ag2hWX9qQlHXbkl2nEsEggAAAYU"]
[Wed May 20 19:56:09.876647 2026] [:error] [pid 41278:tid 41314] [client 34.180.1.79:60991] [client 34.180.1.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "ag2hWfWiNKASEfiGdwazVQAAAEU"]
[Wed May 20 19:56:10.424997 2026] [:error] [pid 41364:tid 41367] [client 34.180.1.79:55093] [client 34.180.1.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "ag2hWhKTmyvxtNXrN-jLuQAAAIE"]
[Wed May 20 19:56:11.344269 2026] [:error] [pid 41277:tid 41284] [client 34.180.1.79:65163] [client 34.180.1.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "ag2hW7TTCltJmboB5uf-RAAAAAI"]
[Wed May 20 19:56:11.991569 2026] [:error] [pid 44059:tid 44068] [client 34.180.1.79:55173] [client 34.180.1.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "ag2hWxfFs-oSOOcyjywY-wAAAQc"]
[Wed May 20 19:56:12.866024 2026] [:error] [pid 41278:tid 41312] [client 34.180.1.79:63643] [client 34.180.1.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "ag2hXPWiNKASEfiGdwazVwAAAEM"]
[Thu May 21 03:30:44.600117 2026] [:error] [pid 41364:tid 41373] [client 35.231.80.215:44996] [client 35.231.80.215] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dwelectservices.com.au"] [uri "/.git/config"] [unique_id "ag4L5BKTmyvxtNXrN-hPpQAAAIc"]
[Thu May 21 10:34:49.316139 2026] [:error] [pid 49982:tid 50006] [client 167.99.44.42:58321] [client 167.99.44.42] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 167.99.44.42, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-login.php"] [unique_id "ag5vSWFwIDa5Tf8O4bZkfgAAANY"]
[Thu May 21 10:34:49.328073 2026] [proxy_fcgi:error] [pid 49982:tid 50006] [client 167.99.44.42:58321] AH01071: Got error 'Primary script unknown'
[Thu May 21 10:58:25.419364 2026] [:error] [pid 9188:tid 9199] [client 142.93.111.42:50263] [client 142.93.111.42] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 142.93.111.42, incrementing brute counter"] [hostname "dwelectservices.com.au"] [uri "/wp-login.php"] [unique_id "ag500bGYm6q5dNSUvA-ItQAAAcc"]
[Thu May 21 10:58:25.429204 2026] [proxy_fcgi:error] [pid 9188:tid 9199] [client 142.93.111.42:50263] AH01071: Got error 'Primary script unknown'
[Thu May 21 14:29:18.474179 2026] [:error] [pid 49879:tid 49931] [client 52.67.242.126:33218] [client 52.67.242.126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.git/config"] [unique_id "ag6mPoVqYDjFSyG2gFpCYwAAAEs"]
[Thu May 21 14:29:20.293961 2026] [:error] [pid 9157:tid 9176] [client 52.67.242.126:52446] [client 52.67.242.126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env"] [unique_id "ag6mQMGfHcLNqE8m88JntgAAAZE"]
[Thu May 21 14:29:21.746457 2026] [:error] [pid 9157:tid 9170] [client 52.67.242.126:52450] [client 52.67.242.126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.local"] [unique_id "ag6mQcGfHcLNqE8m88JntwAAAYs"]
[Thu May 21 14:29:23.199177 2026] [:error] [pid 9157:tid 9172] [client 52.67.242.126:52452] [client 52.67.242.126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.production"] [unique_id "ag6mQ8GfHcLNqE8m88JnuQAAAY0"]
[Thu May 21 14:29:24.649162 2026] [:error] [pid 49982:tid 50006] [client 52.67.242.126:52458] [client 52.67.242.126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.staging"] [unique_id "ag6mRGFwIDa5Tf8O4bakhAAAANY"]
[Thu May 21 14:29:27.629590 2026] [:error] [pid 9189:tid 9242] [client 52.67.242.126:57124] [client 52.67.242.126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.test"] [unique_id "ag6mR5vTDh1NbYizKVxxEAAAAhc"]
[Thu May 21 14:29:29.079019 2026] [:error] [pid 49884:tid 49947] [client 52.67.242.126:57128] [client 52.67.242.126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.remote"] [unique_id "ag6mSa5MPpsTNNHWS6hqEAAAAIA"]
[Thu May 21 14:29:30.529005 2026] [:error] [pid 9114:tid 9139] [client 52.67.242.126:57136] [client 52.67.242.126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.bak"] [unique_id "ag6mSm8FiJqDBEoTvqxYLwAAAVc"]
[Thu May 21 14:29:31.980901 2026] [:error] [pid 49884:tid 49955] [client 52.67.242.126:57152] [client 52.67.242.126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.backup"] [unique_id "ag6mS65MPpsTNNHWS6hqFgAAAIg"]
[Thu May 21 14:29:33.428825 2026] [:error] [pid 9114:tid 9126] [client 52.67.242.126:57162] [client 52.67.242.126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.save"] [unique_id "ag6mTW8FiJqDBEoTvqxYMwAAAUo"]
[Thu May 21 14:29:34.876320 2026] [:error] [pid 49879:tid 49925] [client 52.67.242.126:57170] [client 52.67.242.126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.old"] [unique_id "ag6mToVqYDjFSyG2gFpCbAAAAEU"]
[Thu May 21 14:29:36.328045 2026] [:error] [pid 9114:tid 9132] [client 52.67.242.126:57184] [client 52.67.242.126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.sample"] [unique_id "ag6mUG8FiJqDBEoTvqxYNgAAAVA"]
[Thu May 21 14:29:37.777798 2026] [:error] [pid 49884:tid 49961] [client 52.67.242.126:50796] [client 52.67.242.126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.example"] [unique_id "ag6mUa5MPpsTNNHWS6hqGwAAAI4"]
[Thu May 21 14:29:39.225757 2026] [:error] [pid 49877:tid 49901] [client 52.67.242.126:50798] [client 52.67.242.126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.dev"] [unique_id "ag6mUxgN4MeSe4kIL9AhwgAAAA0"]
[Thu May 21 14:29:40.678904 2026] [:error] [pid 49884:tid 49957] [client 52.67.242.126:50812] [client 52.67.242.126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.prod"] [unique_id "ag6mVK5MPpsTNNHWS6hqIAAAAIo"]
[Thu May 21 14:29:42.128367 2026] [:error] [pid 49884:tid 49948] [client 52.67.242.126:50826] [client 52.67.242.126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.stage"] [unique_id "ag6mVq5MPpsTNNHWS6hqJQAAAIE"]
[Thu May 21 14:29:43.584931 2026] [:error] [pid 9189:tid 9223] [client 52.67.242.126:50842] [client 52.67.242.126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.ci"] [unique_id "ag6mV5vTDh1NbYizKVxxGQAAAgQ"]
[Thu May 21 14:29:45.036633 2026] [:error] [pid 9114:tid 9129] [client 52.67.242.126:50852] [client 52.67.242.126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.docker"] [unique_id "ag6mWW8FiJqDBEoTvqxYPQAAAU0"]
[Thu May 21 14:29:46.484274 2026] [:error] [pid 49884:tid 49957] [client 52.67.242.126:50858] [client 52.67.242.126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.live"] [unique_id "ag6mWq5MPpsTNNHWS6hqLwAAAIo"]
[Thu May 21 14:29:47.930884 2026] [:error] [pid 49884:tid 49958] [client 52.67.242.126:58058] [client 52.67.242.126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.preprod"] [unique_id "ag6mW65MPpsTNNHWS6hqNAAAAIs"]
[Thu May 21 14:29:49.376720 2026] [:error] [pid 49982:tid 50002] [client 52.67.242.126:58074] [client 52.67.242.126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.uat"] [unique_id "ag6mXWFwIDa5Tf8O4bakjQAAANI"]
[Thu May 21 14:29:50.826922 2026] [:error] [pid 49982:tid 49997] [client 52.67.242.126:58086] [client 52.67.242.126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.dist"] [unique_id "ag6mXmFwIDa5Tf8O4bakkgAAAM0"]
[Thu May 21 14:29:52.295424 2026] [:error] [pid 49879:tid 49937] [client 52.67.242.126:58090] [client 52.67.242.126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.swp"] [unique_id "ag6mYIVqYDjFSyG2gFpCbwAAAFE"]
[Thu May 21 14:29:53.743311 2026] [:error] [pid 9188:tid 9204] [client 52.67.242.126:58098] [client 52.67.242.126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env~"] [unique_id "ag6mYbGYm6q5dNSUvA-t5AAAAcw"]
[Thu May 21 14:29:55.189103 2026] [:error] [pid 49982:tid 50002] [client 52.67.242.126:58106] [client 52.67.242.126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env1"] [unique_id "ag6mY2FwIDa5Tf8O4bakmgAAANI"]
[Thu May 21 14:29:56.638620 2026] [:error] [pid 9189:tid 9243] [client 52.67.242.126:58118] [client 52.67.242.126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env2"] [unique_id "ag6mZJvTDh1NbYizKVxxJwAAAhg"]
[Thu May 21 14:29:58.088742 2026] [:error] [pid 9114:tid 9140] [client 52.67.242.126:58988] [client 52.67.242.126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env_copy"] [unique_id "ag6mZm8FiJqDBEoTvqxYRQAAAVg"]
[Thu May 21 14:29:59.537732 2026] [:error] [pid 49879:tid 49933] [client 52.67.242.126:58994] [client 52.67.242.126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.txt"] [unique_id "ag6mZ4VqYDjFSyG2gFpCcwAAAE0"]
[Thu May 21 14:30:00.995391 2026] [:error] [pid 51613:tid 51626] [client 52.67.242.126:59002] [client 52.67.242.126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.json"] [unique_id "ag6maGbP0MDvqrVnwerQfwAAAQs"]
[Thu May 21 14:30:02.451501 2026] [:error] [pid 9157:tid 9175] [client 52.67.242.126:59004] [client 52.67.242.126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.yaml"] [unique_id "ag6masGfHcLNqE8m88JnzAAAAZA"]
[Thu May 21 14:30:03.903646 2026] [:error] [pid 9188:tid 9207] [client 52.67.242.126:59010] [client 52.67.242.126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env.yml"] [unique_id "ag6ma7GYm6q5dNSUvA-t5wAAAc8"]
[Thu May 21 14:30:05.359944 2026] [:error] [pid 49884:tid 49954] [client 52.67.242.126:59014] [client 52.67.242.126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/app/.env"] [unique_id "ag6mba5MPpsTNNHWS6hqOwAAAIc"]
[Thu May 21 14:30:06.817927 2026] [:error] [pid 49884:tid 49970] [client 52.67.242.126:59018] [client 52.67.242.126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/apps/.env"] [unique_id "ag6mbq5MPpsTNNHWS6hqPwAAAJc"]
[Thu May 21 14:30:08.271908 2026] [:error] [pid 49877:tid 49908] [client 52.67.242.126:60232] [client 52.67.242.126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/api/.env"] [unique_id "ag6mcBgN4MeSe4kIL9AhzwAAABQ"]
[Thu May 21 14:30:09.722897 2026] [:error] [pid 9188:tid 9215] [client 52.67.242.126:60240] [client 52.67.242.126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/web/.env"] [unique_id "ag6mcbGYm6q5dNSUvA-t7wAAAdc"]
[Thu May 21 15:47:31.976895 2026] [:error] [pid 49884:tid 49955] [client 34.240.206.59:49628] [client 34.240.206.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dwelectservices.com.au"] [uri "/.git/config"] [unique_id "ag64k65MPpsTNNHWS6iKEAAAAIg"]
[Thu May 21 15:47:33.265619 2026] [:error] [pid 51613:tid 51619] [client 34.240.206.59:46038] [client 34.240.206.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dwelectservices.com.au"] [uri "/.env"] [unique_id "ag64lWbP0MDvqrVnwercqQAAAQQ"]
[Thu May 21 15:47:34.298646 2026] [:error] [pid 9189:tid 9234] [client 34.240.206.59:46052] [client 34.240.206.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dwelectservices.com.au"] [uri "/.env.local"] [unique_id "ag64lpvTDh1NbYizKVyFPwAAAg8"]
[Thu May 21 15:47:35.319325 2026] [:error] [pid 49884:tid 49955] [client 34.240.206.59:46064] [client 34.240.206.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dwelectservices.com.au"] [uri "/.env.production"] [unique_id "ag64l65MPpsTNNHWS6iKGAAAAIg"]
[Thu May 21 15:47:36.342796 2026] [:error] [pid 9114:tid 9116] [client 34.240.206.59:46074] [client 34.240.206.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dwelectservices.com.au"] [uri "/.env.staging"] [unique_id "ag64mG8FiJqDBEoTvqxiGwAAAUA"]
[Thu May 21 15:47:37.378794 2026] [:error] [pid 49884:tid 49958] [client 34.240.206.59:46080] [client 34.240.206.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dwelectservices.com.au"] [uri "/.env.development"] [unique_id "ag64ma5MPpsTNNHWS6iKHQAAAIs"]
[Thu May 21 15:47:38.415503 2026] [:error] [pid 49884:tid 49956] [client 34.240.206.59:46090] [client 34.240.206.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dwelectservices.com.au"] [uri "/.env.test"] [unique_id "ag64mq5MPpsTNNHWS6iKIQAAAIk"]
[Thu May 21 15:47:39.447367 2026] [:error] [pid 49884:tid 49954] [client 34.240.206.59:46094] [client 34.240.206.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dwelectservices.com.au"] [uri "/.env.remote"] [unique_id "ag64m65MPpsTNNHWS6iKJQAAAIc"]
[Thu May 21 15:47:40.470918 2026] [:error] [pid 49884:tid 49963] [client 34.240.206.59:46108] [client 34.240.206.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dwelectservices.com.au"] [uri "/.env.bak"] [unique_id "ag64nK5MPpsTNNHWS6iKKQAAAJA"]
[Thu May 21 15:47:41.496069 2026] [:error] [pid 49982:tid 49996] [client 34.240.206.59:46110] [client 34.240.206.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dwelectservices.com.au"] [uri "/.env.backup"] [unique_id "ag64nWFwIDa5Tf8O4ba6dAAAAMw"]
[Thu May 21 15:47:42.529295 2026] [:error] [pid 9188:tid 9194] [client 34.240.206.59:46120] [client 34.240.206.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dwelectservices.com.au"] [uri "/.env.save"] [unique_id "ag64nrGYm6q5dNSUvA-9qAAAAcI"]
[Thu May 21 15:47:43.553374 2026] [:error] [pid 49982:tid 49994] [client 34.240.206.59:44234] [client 34.240.206.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dwelectservices.com.au"] [uri "/.env.old"] [unique_id "ag64n2FwIDa5Tf8O4ba6eAAAAMo"]
[Thu May 21 15:47:44.575989 2026] [:error] [pid 49982:tid 50008] [client 34.240.206.59:44238] [client 34.240.206.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dwelectservices.com.au"] [uri "/.env.sample"] [unique_id "ag64oGFwIDa5Tf8O4ba6fAAAANg"]
[Thu May 21 15:47:45.607921 2026] [:error] [pid 9157:tid 9171] [client 34.240.206.59:44248] [client 34.240.206.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dwelectservices.com.au"] [uri "/.env.example"] [unique_id "ag64ocGfHcLNqE8m88Jy1AAAAYw"]
[Thu May 21 15:47:46.637662 2026] [:error] [pid 9157:tid 9162] [client 34.240.206.59:44250] [client 34.240.206.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dwelectservices.com.au"] [uri "/.env.dev"] [unique_id "ag64osGfHcLNqE8m88Jy2AAAAYM"]
[Thu May 21 15:47:47.667469 2026] [:error] [pid 9114:tid 9128] [client 34.240.206.59:44256] [client 34.240.206.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dwelectservices.com.au"] [uri "/.env.prod"] [unique_id "ag64o28FiJqDBEoTvqxiHAAAAUw"]
[Thu May 21 15:47:48.689833 2026] [:error] [pid 9114:tid 9135] [client 34.240.206.59:44264] [client 34.240.206.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dwelectservices.com.au"] [uri "/.env.stage"] [unique_id "ag64pG8FiJqDBEoTvqxiHQAAAVM"]
[Thu May 21 15:47:49.713694 2026] [:error] [pid 51613:tid 51625] [client 34.240.206.59:44270] [client 34.240.206.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dwelectservices.com.au"] [uri "/.env.ci"] [unique_id "ag64pWbP0MDvqrVnwercrwAAAQo"]
[Thu May 21 15:47:50.754152 2026] [:error] [pid 9188:tid 9198] [client 34.240.206.59:44278] [client 34.240.206.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dwelectservices.com.au"] [uri "/.env.docker"] [unique_id "ag64prGYm6q5dNSUvA-9qwAAAcY"]
[Thu May 21 15:47:51.788601 2026] [:error] [pid 9188:tid 9213] [client 34.240.206.59:44282] [client 34.240.206.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dwelectservices.com.au"] [uri "/.env.live"] [unique_id "ag64p7GYm6q5dNSUvA-9rAAAAdU"]
[Thu May 21 15:47:52.822726 2026] [:error] [pid 9114:tid 9127] [client 34.240.206.59:44286] [client 34.240.206.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dwelectservices.com.au"] [uri "/.env.preprod"] [unique_id "ag64qG8FiJqDBEoTvqxiHgAAAUs"]
[Thu May 21 15:47:53.848930 2026] [:error] [pid 49879:tid 49936] [client 34.240.206.59:40892] [client 34.240.206.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dwelectservices.com.au"] [uri "/.env.uat"] [unique_id "ag64qYVqYDjFSyG2gFpK_QAAAFA"]
[Thu May 21 15:47:54.882029 2026] [:error] [pid 9189:tid 9239] [client 34.240.206.59:40902] [client 34.240.206.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dwelectservices.com.au"] [uri "/.env.dist"] [unique_id "ag64qpvTDh1NbYizKVyFRwAAAhQ"]
[Thu May 21 15:47:55.917777 2026] [:error] [pid 9188:tid 9205] [client 34.240.206.59:40904] [client 34.240.206.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dwelectservices.com.au"] [uri "/.env.swp"] [unique_id "ag64q7GYm6q5dNSUvA-9rgAAAc0"]
[Thu May 21 15:47:56.953920 2026] [:error] [pid 49877:tid 49892] [client 34.240.206.59:40910] [client 34.240.206.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dwelectservices.com.au"] [uri "/.env~"] [unique_id "ag64rBgN4MeSe4kIL9Ao3AAAAAQ"]
[Thu May 21 15:47:57.977647 2026] [:error] [pid 9189:tid 9222] [client 34.240.206.59:40924] [client 34.240.206.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dwelectservices.com.au"] [uri "/.env1"] [unique_id "ag64rZvTDh1NbYizKVyFSAAAAgM"]
[Thu May 21 15:47:59.014052 2026] [:error] [pid 49877:tid 49898] [client 34.240.206.59:40936] [client 34.240.206.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dwelectservices.com.au"] [uri "/.env2"] [unique_id "ag64rxgN4MeSe4kIL9Ao3gAAAAo"]
[Thu May 21 15:48:00.037219 2026] [:error] [pid 9189:tid 9225] [client 34.240.206.59:40952] [client 34.240.206.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dwelectservices.com.au"] [uri "/.env_copy"] [unique_id "ag64sJvTDh1NbYizKVyFTAAAAgY"]
[Thu May 21 15:48:01.079332 2026] [:error] [pid 49884:tid 49949] [client 34.240.206.59:40968] [client 34.240.206.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dwelectservices.com.au"] [uri "/.env.txt"] [unique_id "ag64sa5MPpsTNNHWS6iKLwAAAII"]
[Thu May 21 15:48:03.600694 2026] [:error] [pid 9189:tid 9241] [client 34.240.206.59:50162] [client 34.240.206.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dwelectservices.com.au"] [uri "/.env.yaml"] [unique_id "ag64s5vTDh1NbYizKVyFTQAAAhY"]
[Thu May 21 15:48:04.636762 2026] [:error] [pid 51613:tid 51639] [client 34.240.206.59:50176] [client 34.240.206.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dwelectservices.com.au"] [uri "/.env.yml"] [unique_id "ag64tGbP0MDvqrVnwercswAAARg"]
[Thu May 21 15:48:05.674989 2026] [:error] [pid 49884:tid 49965] [client 34.240.206.59:50186] [client 34.240.206.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dwelectservices.com.au"] [uri "/app/.env"] [unique_id "ag64ta5MPpsTNNHWS6iKOgAAAJI"]
[Thu May 21 15:48:06.707546 2026] [:error] [pid 49884:tid 49958] [client 34.240.206.59:50188] [client 34.240.206.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dwelectservices.com.au"] [uri "/apps/.env"] [unique_id "ag64tq5MPpsTNNHWS6iKPgAAAIs"]
[Thu May 21 15:48:07.737335 2026] [:error] [pid 49884:tid 49950] [client 34.240.206.59:50202] [client 34.240.206.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dwelectservices.com.au"] [uri "/api/.env"] [unique_id "ag64t65MPpsTNNHWS6iKRQAAAIM"]
[Thu May 21 15:48:08.774144 2026] [:error] [pid 49884:tid 49968] [client 34.240.206.59:50218] [client 34.240.206.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dwelectservices.com.au"] [uri "/web/.env"] [unique_id "ag64uK5MPpsTNNHWS6iKSAAAAJU"]
[Thu May 21 15:48:09.802859 2026] [:error] [pid 49884:tid 49954] [client 34.240.206.59:50224] [client 34.240.206.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dwelectservices.com.au"] [uri "/site/.env"] [unique_id "ag64ua5MPpsTNNHWS6iKSgAAAIc"]
[Thu May 21 15:48:10.823765 2026] [:error] [pid 9189:tid 9235] [client 34.240.206.59:50226] [client 34.240.206.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dwelectservices.com.au"] [uri "/public/.env"] [unique_id "ag64upvTDh1NbYizKVyFVQAAAhA"]
[Thu May 21 15:48:11.850926 2026] [:error] [pid 49884:tid 49967] [client 34.240.206.59:50234] [client 34.240.206.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dwelectservices.com.au"] [uri "/admin/.env"] [unique_id "ag64u65MPpsTNNHWS6iKUwAAAJQ"]
[Thu May 21 23:24:10.035602 2026] [:error] [pid 49884:tid 49969] [client 34.150.255.112:50507] [client 34.150.255.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/"] [unique_id "ag8jmq5MPpsTNNHWS6gXXAAAAJY"]
[Thu May 21 23:24:10.467906 2026] [:error] [pid 49884:tid 49962] [client 34.150.255.112:53592] [client 34.150.255.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/"] [unique_id "ag8jmq5MPpsTNNHWS6gXxgAAAI8"]
[Thu May 21 23:24:10.896125 2026] [:error] [pid 9188:tid 9201] [client 34.150.255.112:63257] [client 34.150.255.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "ag8jmrGYm6q5dNSUvA__EgAAAck"]
[Fri May 22 08:00:24.623999 2026] [:error] [pid 58782:tid 58788] [client 185.198.240.222:58577] [client 185.198.240.222] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/css/buttons.css"] [unique_id "ag-cmIxsdTFafgO8vhS60QAAAQQ"]
[Fri May 22 08:40:56.417091 2026] [:error] [pid 15585:tid 15660] [client 176.65.139.229:59764] [client 176.65.139.229] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env"] [unique_id "ag-mGCKb-vB41AF-LC19oQAAAI0"]
[Fri May 22 11:38:26.847070 2026] [proxy_fcgi:error] [pid 15679:tid 15683] [client 191.234.188.166:18355] AH01071: Got error 'Primary script unknown'
[Fri May 22 11:38:27.173920 2026] [proxy_fcgi:error] [pid 15679:tid 15690] [client 191.234.188.166:18355] AH01071: Got error 'Primary script unknown'
[Fri May 22 11:38:27.798896 2026] [proxy_fcgi:error] [pid 15679:tid 15692] [client 191.234.188.166:18355] AH01071: Got error 'Primary script unknown'
[Fri May 22 11:38:28.850452 2026] [proxy_fcgi:error] [pid 15679:tid 15691] [client 191.234.188.166:18355] AH01071: Got error 'Primary script unknown'
[Fri May 22 11:38:29.273491 2026] [proxy_fcgi:error] [pid 15679:tid 15702] [client 191.234.188.166:18355] AH01071: Got error 'Primary script unknown'
[Fri May 22 11:38:29.598680 2026] [proxy_fcgi:error] [pid 15679:tid 15681] [client 191.234.188.166:18355] AH01071: Got error 'Primary script unknown'
[Fri May 22 11:38:30.061342 2026] [proxy_fcgi:error] [pid 15679:tid 15701] [client 191.234.188.166:18355] AH01071: Got error 'Primary script unknown'
[Fri May 22 11:38:30.812869 2026] [proxy_fcgi:error] [pid 15679:tid 15700] [client 191.234.188.166:18355] AH01071: Got error 'Primary script unknown'
[Fri May 22 11:38:31.139033 2026] [proxy_fcgi:error] [pid 15679:tid 15705] [client 191.234.188.166:18355] AH01071: Got error 'Primary script unknown'
[Fri May 22 11:38:31.467492 2026] [proxy_fcgi:error] [pid 15679:tid 15703] [client 191.234.188.166:18355] AH01071: Got error 'Primary script unknown'
[Fri May 22 11:38:31.794130 2026] [:error] [pid 15679:tid 15682] [client 191.234.188.166:18355] [client 191.234.188.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/about.php"] [unique_id "ag_Ptyh8tgGc38WJ-GzRiAAAAME"]
[Fri May 22 11:38:34.401579 2026] [:error] [pid 15584:tid 15623] [client 191.234.188.166:18350] [client 191.234.188.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/about.php"] [unique_id "ag_Put9Z_TVLbNEx52jF0gAAAEM"]
[Fri May 22 11:38:42.164699 2026] [:error] [pid 58813:tid 58840] [client 191.234.188.166:30118] [client 191.234.188.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/about.php"] [unique_id "ag_Pwp6yyKWDKULhxJ0zaAAAAVg"]
[Fri May 22 11:38:44.951523 2026] [:error] [pid 15583:tid 15611] [client 191.234.188.166:17503] [client 191.234.188.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/about.php"] [unique_id "ag_PxHnaOncRcIm17YW4sgAAABc"]
[Fri May 22 17:11:08.814413 2026] [:error] [pid 58813:tid 58834] [client 34.93.63.75:64645] [client 34.93.63.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/"] [unique_id "ahAdrJ6yyKWDKULhxJ1rcwAAAVI"]
[Fri May 22 17:11:09.104042 2026] [:error] [pid 15583:tid 15595] [client 34.93.63.75:49591] [client 34.93.63.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/ID3/license.txt"] [unique_id "ahAdrXnaOncRcIm17YX1WAAAAAc"]
[Fri May 22 17:11:09.389230 2026] [:error] [pid 15584:tid 15634] [client 34.93.63.75:50866] [client 34.93.63.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/feed/"] [unique_id "ahAdrd9Z_TVLbNEx52gMPwAAAE4"]
[Fri May 22 20:16:08.547341 2026] [:error] [pid 15679:tid 15693] [client 35.153.54.47:60040] [client 35.153.54.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.env"] [unique_id "ahBJCCh8tgGc38WJ-GxY5AAAAMw"]
[Fri May 22 22:52:26.643668 2026] [:error] [pid 15679:tid 15683] [client 136.115.53.208:49362] [client 136.115.53.208] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dwelectservices.com.au"] [uri "/.git/config"] [unique_id "ahBtqih8tgGc38WJ-Gx_4wAAAMI"]
[Sat May 23 06:38:48.132630 2026] [:error] [pid 30941:tid 30993] [client 134.199.171.224:47730] [client 134.199.171.224] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.git/config"] [unique_id "ahDa-HTIgjSDhiZmvlUk-wAAAFE"]
[Sat May 23 06:38:48.303865 2026] [:error] [pid 30942:tid 31017] [client 134.199.171.224:42118] [client 134.199.171.224] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.git/config"] [unique_id "ahDa-NUosz64YFiBlG3BDQAAAI4"]
[Sat May 23 06:38:48.582973 2026] [:error] [pid 25876:tid 25894] [client 134.199.171.224:47746] [client 134.199.171.224] ModSecurity: Warning. Match of "pmFromFile userdata_wl_content_type" against "TX:0" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "17"] [id "210710"] [rev "5"] [msg "COMODO WAF: Request content type is not allowed by policy. Please update file userdata_wl_content_type.||dwelectservices.com.au|F|2"] [data "TX:0=text/plain"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "dwelectservices.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "ahDa-ASpWUCKPezIBJCEbQAAARA"]
[Sat May 23 06:38:48.606269 2026] [:error] [pid 25876:tid 25895] [client 134.199.171.224:47760] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jquery-file-upload/server/php/"] [unique_id "ahDa-ASpWUCKPezIBJCEbwAAARE"]
[Sat May 23 06:38:48.612072 2026] [:error] [pid 25876:tid 25889] [client 134.199.171.224:60162] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/assets/vendor/jquery.filer/php/readme.txt"] [unique_id "ahDa-ASpWUCKPezIBJCEcAAAAQs"]
[Sat May 23 06:38:48.620604 2026] [:error] [pid 31039:tid 31057] [client 134.199.171.224:47744] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jquery-file-upload/server/php/"] [unique_id "ahDa-KIYDYo8WvA5zLJnsAAAANA"]
[Sat May 23 06:38:48.626651 2026] [:error] [pid 25876:tid 25898] [client 134.199.171.224:47746] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/assets/vendor/jquery.filer/php/readme.txt"] [unique_id "ahDa-ASpWUCKPezIBJCEcQAAARQ"]
[Sat May 23 06:38:48.635487 2026] [:error] [pid 25876:tid 25880] [client 134.199.171.224:47776] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jquery-file-upload/server/php/"] [unique_id "ahDa-ASpWUCKPezIBJCEcgAAAQI"]
[Sat May 23 06:38:48.664736 2026] [:error] [pid 25876:tid 25887] [client 134.199.171.224:60176] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/assets/js/frontend/jquery-file-upload/server/php/"] [unique_id "ahDa-ASpWUCKPezIBJCEcwAAAQk"]
[Sat May 23 06:38:48.668733 2026] [:error] [pid 25876:tid 25888] [client 134.199.171.224:60190] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/assets/vendor/jquery.filer/php/readme.txt"] [unique_id "ahDa-ASpWUCKPezIBJCEdAAAAQo"]
[Sat May 23 06:38:48.669800 2026] [:error] [pid 30942:tid 31005] [client 134.199.171.224:60194] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/assets/app-assets/data/jquery-file-upload/server/php/"] [unique_id "ahDa-NUosz64YFiBlG3BDwAAAII"]
[Sat May 23 06:38:48.690721 2026] [:error] [pid 25876:tid 25893] [client 134.199.171.224:60196] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin/blueimp-jQuery-File-Upload/server/php/"] [unique_id "ahDa-ASpWUCKPezIBJCEdQAAAQ8"]
[Sat May 23 06:38:48.697388 2026] [:error] [pid 25876:tid 25885] [client 134.199.171.224:60212] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin/jquery-file-upload/server/php/"] [unique_id "ahDa-ASpWUCKPezIBJCEdgAAAQc"]
[Sat May 23 06:38:48.706288 2026] [:error] [pid 25876:tid 25884] [client 134.199.171.224:60228] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/assets/js/frontend/jquery-file-upload/server/php/"] [unique_id "ahDa-ASpWUCKPezIBJCEdwAAAQY"]
[Sat May 23 06:38:48.712649 2026] [:error] [pid 30942:tid 31026] [client 134.199.171.224:60232] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/assets/app-assets/data/jquery-file-upload/server/php/"] [unique_id "ahDa-NUosz64YFiBlG3BEAAAAJc"]
[Sat May 23 06:38:48.729575 2026] [:error] [pid 31039:tid 31054] [client 134.199.171.224:60242] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/upload/server/php/"] [unique_id "ahDa-KIYDYo8WvA5zLJnsQAAAM0"]
[Sat May 23 06:38:48.732009 2026] [:error] [pid 30942:tid 31016] [client 134.199.171.224:60246] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin/blueimp-jQuery-File-Upload/server/php/"] [unique_id "ahDa-NUosz64YFiBlG3BEQAAAI0"]
[Sat May 23 06:38:48.736531 2026] [:error] [pid 30941:tid 30987] [client 134.199.171.224:60250] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/asset_admin/assets/plugins/jquery-file-upload/server/php/"] [unique_id "ahDa-HTIgjSDhiZmvlUk_AAAAEs"]
[Sat May 23 06:38:48.737591 2026] [:error] [pid 30941:tid 30985] [client 134.199.171.224:60254] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin/jquery-file-upload/server/php/"] [unique_id "ahDa-HTIgjSDhiZmvlUk_QAAAEk"]
[Sat May 23 06:38:48.744797 2026] [:error] [pid 30941:tid 30995] [client 134.199.171.224:60268] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/plugins/jQuery-File-Upload/server/php/"] [unique_id "ahDa-HTIgjSDhiZmvlUk_gAAAFM"]
[Sat May 23 06:38:48.748313 2026] [:error] [pid 30941:tid 30978] [client 134.199.171.224:60280] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/assets/js/frontend/jquery-file-upload/server/php/"] [unique_id "ahDa-HTIgjSDhiZmvlUk_wAAAEI"]
[Sat May 23 06:38:48.753982 2026] [:error] [pid 30941:tid 31000] [client 134.199.171.224:60294] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fileupload/server/php/"] [unique_id "ahDa-HTIgjSDhiZmvlUlAAAAAFg"]
[Sat May 23 06:38:48.755928 2026] [:error] [pid 30942:tid 31015] [client 134.199.171.224:60298] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/assets/app-assets/data/jquery-file-upload/server/php/"] [unique_id "ahDa-NUosz64YFiBlG3BEgAAAIw"]
[Sat May 23 06:38:48.756509 2026] [:error] [pid 30941:tid 30992] [client 134.199.171.224:60304] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin/galerie/server/php/"] [unique_id "ahDa-HTIgjSDhiZmvlUlAQAAAFA"]
[Sat May 23 06:38:48.763738 2026] [:error] [pid 30942:tid 31003] [client 134.199.171.224:60306] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin/server/php/"] [unique_id "ahDa-NUosz64YFiBlG3BEwAAAIA"]
[Sat May 23 06:38:48.764541 2026] [:error] [pid 30942:tid 31024] [client 134.199.171.224:60316] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/blueimp-jQuery-File-Upload/server/php/"] [unique_id "ahDa-NUosz64YFiBlG3BFAAAAJU"]
[Sat May 23 06:38:48.770689 2026] [:error] [pid 30942:tid 31010] [client 134.199.171.224:60328] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/upload/server/php/"] [unique_id "ahDa-NUosz64YFiBlG3BFQAAAIc"]
[Sat May 23 06:38:48.773839 2026] [:error] [pid 30942:tid 31019] [client 134.199.171.224:60332] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin/blueimp-jQuery-File-Upload/server/php/"] [unique_id "ahDa-NUosz64YFiBlG3BFgAAAJA"]
[Sat May 23 06:38:48.779863 2026] [:error] [pid 30942:tid 31020] [client 134.199.171.224:60344] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/asset_admin/assets/plugins/jquery-file-upload/server/php/"] [unique_id "ahDa-NUosz64YFiBlG3BFwAAAJE"]
[Sat May 23 06:38:48.782006 2026] [:error] [pid 30942:tid 31011] [client 134.199.171.224:60358] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin/jquery-file-upload/server/php/"] [unique_id "ahDa-NUosz64YFiBlG3BGAAAAIg"]
[Sat May 23 06:38:48.788648 2026] [:error] [pid 30942:tid 31012] [client 134.199.171.224:60360] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/plugins/jQuery-File-Upload/server/php/"] [unique_id "ahDa-NUosz64YFiBlG3BGQAAAIk"]
[Sat May 23 06:38:48.795638 2026] [:error] [pid 30941:tid 30990] [client 134.199.171.224:60374] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fileupload/server/php/"] [unique_id "ahDa-HTIgjSDhiZmvlUlAgAAAE4"]
[Sat May 23 06:38:48.799526 2026] [:error] [pid 30941:tid 30976] [client 134.199.171.224:60376] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin/galerie/server/php/"] [unique_id "ahDa-HTIgjSDhiZmvlUlAwAAAEA"]
[Sat May 23 06:38:48.807959 2026] [:error] [pid 30942:tid 31021] [client 134.199.171.224:60404] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/blueimp-jQuery-File-Upload/server/php/"] [unique_id "ahDa-NUosz64YFiBlG3BGgAAAJI"]
[Sat May 23 06:38:48.807977 2026] [:error] [pid 30942:tid 31009] [client 134.199.171.224:60392] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin/server/php/"] [unique_id "ahDa-NUosz64YFiBlG3BGwAAAIY"]
[Sat May 23 06:38:48.810966 2026] [:error] [pid 30942:tid 31007] [client 134.199.171.224:60412] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/upload/server/php/"] [unique_id "ahDa-NUosz64YFiBlG3BHAAAAIQ"]
[Sat May 23 06:38:48.821520 2026] [:error] [pid 30942:tid 31004] [client 134.199.171.224:60422] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/public/server/php/"] [unique_id "ahDa-NUosz64YFiBlG3BHQAAAIE"]
[Sat May 23 06:38:48.823692 2026] [:error] [pid 30942:tid 31006] [client 134.199.171.224:60418] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/asset_admin/assets/plugins/jquery-file-upload/server/php/"] [unique_id "ahDa-NUosz64YFiBlG3BHgAAAIM"]
[Sat May 23 06:38:48.831479 2026] [:error] [pid 25876:tid 25902] [client 134.199.171.224:60424] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/plugins/jQuery-File-Upload/server/php/"] [unique_id "ahDa-ASpWUCKPezIBJCEeQAAARg"]
[Sat May 23 06:38:48.840185 2026] [:error] [pid 31039:tid 31043] [client 134.199.171.224:60434] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fileupload/server/php/"] [unique_id "ahDa-KIYDYo8WvA5zLJnsgAAAMI"]
[Sat May 23 06:38:48.841370 2026] [:error] [pid 30940:tid 30949] [client 134.199.171.224:60446] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin/galerie/server/php/"] [unique_id "ahDa-JqUP2XZmzp7RDp-WwAAAAA"]
[Sat May 23 06:38:48.851504 2026] [:error] [pid 25876:tid 25900] [client 134.199.171.224:60452] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/blueimp-jQuery-File-Upload/server/php/"] [unique_id "ahDa-ASpWUCKPezIBJCEegAAARY"]
[Sat May 23 06:38:48.852117 2026] [:error] [pid 30942:tid 31023] [client 134.199.171.224:60458] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin/server/php/"] [unique_id "ahDa-NUosz64YFiBlG3BHwAAAJQ"]
[Sat May 23 06:38:48.855885 2026] [:error] [pid 30941:tid 30979] [client 134.199.171.224:60470] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/libraries/jsupload/server/php/"] [unique_id "ahDa-HTIgjSDhiZmvlUlBAAAAEM"]
[Sat May 23 06:38:48.863330 2026] [:error] [pid 30942:tid 31025] [client 134.199.171.224:60474] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/public/server/php/"] [unique_id "ahDa-NUosz64YFiBlG3BIAAAAJY"]
[Sat May 23 06:38:48.880705 2026] [:error] [pid 31039:tid 31059] [client 134.199.171.224:60486] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/assets/plugins/js/server/php/"] [unique_id "ahDa-KIYDYo8WvA5zLJnswAAANI"]
[Sat May 23 06:38:48.898377 2026] [:error] [pid 31039:tid 31055] [client 134.199.171.224:60490] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/libraries/jsupload/server/php/"] [unique_id "ahDa-KIYDYo8WvA5zLJntAAAAM4"]
[Sat May 23 06:38:48.909299 2026] [:error] [pid 31039:tid 31045] [client 134.199.171.224:60506] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/public/server/php/"] [unique_id "ahDa-KIYDYo8WvA5zLJntQAAAMQ"]
[Sat May 23 06:38:48.926812 2026] [:error] [pid 30941:tid 30984] [client 134.199.171.224:60514] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/assets/plugins/js/server/php/"] [unique_id "ahDa-HTIgjSDhiZmvlUlBgAAAEg"]
[Sat May 23 06:38:48.938386 2026] [:error] [pid 30941:tid 30999] [client 134.199.171.224:60526] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/assets/plugins/js/jquery-file-upload/server/php/"] [unique_id "ahDa-HTIgjSDhiZmvlUlBwAAAFc"]
[Sat May 23 06:38:48.939455 2026] [:error] [pid 30942:tid 31013] [client 134.199.171.224:60536] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/libraries/jsupload/server/php/"] [unique_id "ahDa-NUosz64YFiBlG3BIgAAAIo"]
[Sat May 23 06:38:48.942318 2026] [:error] [pid 25876:tid 25897] [client 134.199.171.224:60546] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/assets/global/plugins/server/php/"] [unique_id "ahDa-ASpWUCKPezIBJCEewAAARM"]
[Sat May 23 06:38:48.964842 2026] [:error] [pid 25876:tid 25882] [client 134.199.171.224:60550] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/assets/plugins/jquery-file-upload/server/php/"] [unique_id "ahDa-ASpWUCKPezIBJCEfAAAAQQ"]
[Sat May 23 06:38:48.965922 2026] [:error] [pid 30942:tid 31022] [client 134.199.171.224:60564] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/assets/global/plugins/jquery-file-upload/server/php/"] [unique_id "ahDa-NUosz64YFiBlG3BIwAAAJM"]
[Sat May 23 06:38:48.968657 2026] [:error] [pid 30942:tid 31017] [client 134.199.171.224:60576] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/assets/plugins/server/php/"] [unique_id "ahDa-NUosz64YFiBlG3BJAAAAI4"]
[Sat May 23 06:38:48.969293 2026] [:error] [pid 30942:tid 31008] [client 134.199.171.224:60580] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/assets/plugins/js/server/php/"] [unique_id "ahDa-NUosz64YFiBlG3BJQAAAIU"]
[Sat May 23 06:38:48.985359 2026] [:error] [pid 30942:tid 31005] [client 134.199.171.224:60584] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/assets/plugins/js/jquery-file-upload/server/php/"] [unique_id "ahDa-NUosz64YFiBlG3BJgAAAII"]
[Sat May 23 06:38:48.985776 2026] [:error] [pid 30942:tid 31026] [client 134.199.171.224:60588] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/assets/global/plugins/server/php/"] [unique_id "ahDa-NUosz64YFiBlG3BJwAAAJc"]
[Sat May 23 06:38:49.007723 2026] [:error] [pid 30942:tid 31016] [client 134.199.171.224:60598] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/assets/plugins/jquery-file-upload/server/php/"] [unique_id "ahDa-dUosz64YFiBlG3BKAAAAI0"]
[Sat May 23 06:38:49.009205 2026] [:error] [pid 30941:tid 30996] [client 134.199.171.224:60608] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/assets/global/plugins/jquery-file-upload/server/php/"] [unique_id "ahDa-XTIgjSDhiZmvlUlCAAAAFQ"]
[Sat May 23 06:38:49.010436 2026] [:error] [pid 30941:tid 30986] [client 134.199.171.224:60624] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/assets/plugins/server/php/"] [unique_id "ahDa-XTIgjSDhiZmvlUlCQAAAEo"]
[Sat May 23 06:38:49.027349 2026] [:error] [pid 30941:tid 30983] [client 134.199.171.224:60634] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/assets/plugins/js/jquery-file-upload/server/php/"] [unique_id "ahDa-XTIgjSDhiZmvlUlCgAAAEc"]
[Sat May 23 06:38:49.027890 2026] [:error] [pid 30942:tid 31015] [client 134.199.171.224:60646] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/assets/global/plugins/server/php/"] [unique_id "ahDa-dUosz64YFiBlG3BKgAAAIw"]
[Sat May 23 06:38:49.049813 2026] [:error] [pid 30941:tid 30988] [client 134.199.171.224:60656] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/assets/plugins/jquery-file-upload/server/php/"] [unique_id "ahDa-XTIgjSDhiZmvlUlCwAAAEw"]
[Sat May 23 06:38:49.050673 2026] [:error] [pid 30942:tid 31003] [client 134.199.171.224:60664] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/assets/global/plugins/jquery-file-upload/server/php/"] [unique_id "ahDa-dUosz64YFiBlG3BKwAAAIA"]
[Sat May 23 06:38:49.051862 2026] [:error] [pid 30941:tid 30991] [client 134.199.171.224:60670] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/assets/plugins/server/php/"] [unique_id "ahDa-XTIgjSDhiZmvlUlDAAAAE8"]
[Sat May 23 06:38:49.155807 2026] [:error] [pid 30942:tid 31010] [client 134.199.171.224:60686] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/js/kcfinder/upload.php"] [unique_id "ahDa-dUosz64YFiBlG3BLAAAAIc"]
[Sat May 23 06:38:49.163449 2026] [:error] [pid 30941:tid 30997] [client 134.199.171.224:60692] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/plugins/server/php/"] [unique_id "ahDa-XTIgjSDhiZmvlUlDQAAAFU"]
[Sat May 23 06:38:49.168619 2026] [:error] [pid 30941:tid 30977] [client 134.199.171.224:60708] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kcfinder/upload.php"] [unique_id "ahDa-XTIgjSDhiZmvlUlDgAAAEE"]
[Sat May 23 06:38:49.176518 2026] [:error] [pid 30942:tid 31020] [client 134.199.171.224:60726] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/plugins/js/jquery-file-upload/server/php/"] [unique_id "ahDa-dUosz64YFiBlG3BLQAAAJE"]
[Sat May 23 06:38:49.178498 2026] [:error] [pid 30942:tid 31019] [client 134.199.171.224:60714] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/assets/jquery-file-upload/server/php/"] [unique_id "ahDa-dUosz64YFiBlG3BLgAAAJA"]
[Sat May 23 06:38:49.178699 2026] [:error] [pid 30941:tid 30998] [client 134.199.171.224:60734] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/assets/server/php/"] [unique_id "ahDa-XTIgjSDhiZmvlUlDwAAAFY"]
[Sat May 23 06:38:49.186525 2026] [:error] [pid 30941:tid 30980] [client 134.199.171.224:60746] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/asset/server/php/"] [unique_id "ahDa-XTIgjSDhiZmvlUlEAAAAEQ"]
[Sat May 23 06:38:49.189878 2026] [:error] [pid 30941:tid 30989] [client 134.199.171.224:60756] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/js/jquery-file-upload/server/php/"] [unique_id "ahDa-XTIgjSDhiZmvlUlEQAAAE0"]
[Sat May 23 06:38:49.198550 2026] [:error] [pid 31039:tid 31056] [client 134.199.171.224:60758] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/js/kcfinder/upload.php"] [unique_id "ahDa-aIYDYo8WvA5zLJntwAAAM8"]
[Sat May 23 06:38:49.201499 2026] [:error] [pid 30942:tid 31011] [client 134.199.171.224:60766] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/js/server/php/"] [unique_id "ahDa-dUosz64YFiBlG3BLwAAAIg"]
[Sat May 23 06:38:49.205955 2026] [:error] [pid 25876:tid 25901] [client 134.199.171.224:60774] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/plugins/server/php/"] [unique_id "ahDa-QSpWUCKPezIBJCEfQAAARc"]
[Sat May 23 06:38:49.210118 2026] [:error] [pid 25876:tid 25878] [client 134.199.171.224:60778] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kcfinder/upload.php"] [unique_id "ahDa-QSpWUCKPezIBJCEfgAAAQA"]
[Sat May 23 06:38:49.221613 2026] [:error] [pid 31039:tid 31052] [client 134.199.171.224:60796] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/assets/jquery-file-upload/server/php/"] [unique_id "ahDa-aIYDYo8WvA5zLJnuAAAAMs"]
[Sat May 23 06:38:49.221970 2026] [:error] [pid 31039:tid 31041] [client 134.199.171.224:60808] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/assets/server/php/"] [unique_id "ahDa-aIYDYo8WvA5zLJnuQAAAMA"]
[Sat May 23 06:38:49.222215 2026] [:error] [pid 25876:tid 25892] [client 134.199.171.224:60794] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/plugins/js/jquery-file-upload/server/php/"] [unique_id "ahDa-QSpWUCKPezIBJCEfwAAAQ4"]
[Sat May 23 06:38:49.227100 2026] [:error] [pid 31039:tid 31064] [client 134.199.171.224:60812] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/asset/server/php/"] [unique_id "ahDa-aIYDYo8WvA5zLJnugAAANc"]
[Sat May 23 06:38:49.230945 2026] [:error] [pid 25876:tid 25879] [client 134.199.171.224:60818] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/js/jquery-file-upload/server/php/"] [unique_id "ahDa-QSpWUCKPezIBJCEgAAAAQE"]
[Sat May 23 06:38:49.231883 2026] [:error] [pid 25876:tid 25883] [client 134.199.171.224:60830] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/plugin/server/php/"] [unique_id "ahDa-QSpWUCKPezIBJCEgQAAAQU"]
[Sat May 23 06:38:49.239501 2026] [:error] [pid 25876:tid 25890] [client 134.199.171.224:60840] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/assets/kcfinder/upload.php"] [unique_id "ahDa-QSpWUCKPezIBJCEggAAAQw"]
[Sat May 23 06:38:49.241670 2026] [:error] [pid 25876:tid 25894] [client 134.199.171.224:60850] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/js/kcfinder/upload.php"] [unique_id "ahDa-QSpWUCKPezIBJCEgwAAARA"]
[Sat May 23 06:38:49.242572 2026] [:error] [pid 25876:tid 25891] [client 134.199.171.224:60846] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/asset/kcfinder/upload.php"] [unique_id "ahDa-QSpWUCKPezIBJCEhAAAAQ0"]
[Sat May 23 06:38:49.243601 2026] [:error] [pid 25876:tid 25899] [client 134.199.171.224:60858] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/js/server/php/"] [unique_id "ahDa-QSpWUCKPezIBJCEhQAAARU"]
[Sat May 23 06:38:49.246905 2026] [:error] [pid 25876:tid 25895] [client 134.199.171.224:60868] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/plugins/server/php/"] [unique_id "ahDa-QSpWUCKPezIBJCEhgAAARE"]
[Sat May 23 06:38:49.256649 2026] [:error] [pid 25876:tid 25889] [client 134.199.171.224:60874] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kcfinder/upload.php"] [unique_id "ahDa-QSpWUCKPezIBJCEhwAAAQs"]
[Sat May 23 06:38:49.265580 2026] [:error] [pid 30942:tid 31012] [client 134.199.171.224:60892] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/assets/server/php/"] [unique_id "ahDa-dUosz64YFiBlG3BMAAAAIk"]
[Sat May 23 06:38:49.266451 2026] [:error] [pid 30940:tid 30972] [client 134.199.171.224:60894] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/plugins/js/jquery-file-upload/server/php/"] [unique_id "ahDa-ZqUP2XZmzp7RDp-XAAAABc"]
[Sat May 23 06:38:49.267650 2026] [:error] [pid 30940:tid 30970] [client 134.199.171.224:60878] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/assets/jquery-file-upload/server/php/"] [unique_id "ahDa-ZqUP2XZmzp7RDp-XQAAABU"]
[Sat May 23 06:38:49.269951 2026] [:error] [pid 25876:tid 25898] [client 134.199.171.224:60900] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/asset/server/php/"] [unique_id "ahDa-QSpWUCKPezIBJCEiAAAARQ"]
[Sat May 23 06:38:49.274000 2026] [:error] [pid 30942:tid 31021] [client 134.199.171.224:60914] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/plugin/server/php/"] [unique_id "ahDa-dUosz64YFiBlG3BMQAAAJI"]
[Sat May 23 06:38:49.274061 2026] [:error] [pid 30942:tid 31009] [client 134.199.171.224:60904] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/js/jquery-file-upload/server/php/"] [unique_id "ahDa-dUosz64YFiBlG3BMgAAAIY"]
[Sat May 23 06:38:49.283106 2026] [:error] [pid 30942:tid 31007] [client 134.199.171.224:60926] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/assets/kcfinder/upload.php"] [unique_id "ahDa-dUosz64YFiBlG3BMwAAAIQ"]
[Sat May 23 06:38:49.286141 2026] [:error] [pid 30940:tid 30959] [client 134.199.171.224:60930] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/asset/kcfinder/upload.php"] [unique_id "ahDa-ZqUP2XZmzp7RDp-XgAAAAo"]
[Sat May 23 06:38:49.286740 2026] [:error] [pid 30942:tid 31004] [client 134.199.171.224:60932] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/js/server/php/"] [unique_id "ahDa-dUosz64YFiBlG3BNAAAAIE"]
[Sat May 23 06:38:49.316327 2026] [:error] [pid 30942:tid 31006] [client 134.199.171.224:60938] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/plugin/server/php/"] [unique_id "ahDa-dUosz64YFiBlG3BNQAAAIM"]
[Sat May 23 06:38:49.324761 2026] [:error] [pid 30940:tid 30958] [client 134.199.171.224:60950] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/assets/kcfinder/upload.php"] [unique_id "ahDa-ZqUP2XZmzp7RDp-XwAAAAk"]
[Sat May 23 06:38:49.328612 2026] [:error] [pid 30942:tid 31023] [client 134.199.171.224:60960] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/asset/kcfinder/upload.php"] [unique_id "ahDa-dUosz64YFiBlG3BNgAAAJQ"]
[Sat May 23 06:38:49.397753 2026] [:error] [pid 30942:tid 31025] [client 134.199.171.224:60964] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/assets/js/kcfinder/upload.php"] [unique_id "ahDa-dUosz64YFiBlG3BNwAAAJY"]
[Sat May 23 06:38:49.398849 2026] [:error] [pid 30942:tid 31013] [client 134.199.171.224:60962] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ckeditor/kcfinder/upload.php"] [unique_id "ahDa-dUosz64YFiBlG3BOAAAAIo"]
[Sat May 23 06:38:49.399902 2026] [:error] [pid 30941:tid 30993] [client 134.199.171.224:60966] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/js/tinymce/kcfinder/upload.php"] [unique_id "ahDa-XTIgjSDhiZmvlUlEgAAAFE"]
[Sat May 23 06:38:49.405796 2026] [:error] [pid 30940:tid 30964] [client 134.199.171.224:60980] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/plugins/kcfinder/upload.php"] [unique_id "ahDa-ZqUP2XZmzp7RDp-YAAAAA8"]
[Sat May 23 06:38:49.419469 2026] [:error] [pid 30941:tid 30994] [client 134.199.171.224:60986] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/core/scripts/kcfinder/upload.php"] [unique_id "ahDa-XTIgjSDhiZmvlUlEwAAAFI"]
[Sat May 23 06:38:49.419486 2026] [:error] [pid 30942:tid 31022] [client 134.199.171.224:60982] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/assets/plugins/kcfinder/upload.php"] [unique_id "ahDa-dUosz64YFiBlG3BOQAAAJM"]
[Sat May 23 06:38:49.426632 2026] [:error] [pid 30940:tid 30952] [client 134.199.171.224:32770] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/components/kcfinder/upload.php"] [unique_id "ahDa-ZqUP2XZmzp7RDp-YQAAAAM"]
[Sat May 23 06:38:49.430039 2026] [:error] [pid 30942:tid 31017] [client 134.199.171.224:32784] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lib/kcfinder/upload.php"] [unique_id "ahDa-dUosz64YFiBlG3BOgAAAI4"]
[Sat May 23 06:38:49.434124 2026] [:error] [pid 30941:tid 30987] [client 134.199.171.224:32800] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ckeditor/plugins/kcfinder/upload.php"] [unique_id "ahDa-XTIgjSDhiZmvlUlFAAAAEs"]
[Sat May 23 06:38:49.439379 2026] [:error] [pid 30941:tid 30985] [client 134.199.171.224:32808] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/assets/js/kcfinder/upload.php"] [unique_id "ahDa-XTIgjSDhiZmvlUlFQAAAEk"]
[Sat May 23 06:38:49.442291 2026] [:error] [pid 30940:tid 30952] [client 134.199.171.224:32816] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ckeditor/kcfinder/upload.php"] [unique_id "ahDa-ZqUP2XZmzp7RDp-YgAAAAM"]
[Sat May 23 06:38:49.443852 2026] [:error] [pid 30941:tid 30978] [client 134.199.171.224:32830] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/js/tinymce/kcfinder/upload.php"] [unique_id "ahDa-XTIgjSDhiZmvlUlFgAAAEI"]
[Sat May 23 06:38:49.450089 2026] [:error] [pid 30941:tid 31000] [client 134.199.171.224:32844] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/plugins/kcfinder/upload.php"] [unique_id "ahDa-XTIgjSDhiZmvlUlFwAAAFg"]
[Sat May 23 06:38:49.454432 2026] [:error] [pid 30941:tid 30992] [client 134.199.171.224:32848] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kcfinder/upload.php"] [unique_id "ahDa-XTIgjSDhiZmvlUlGAAAAFA"]
[Sat May 23 06:38:49.459941 2026] [:error] [pid 30940:tid 30954] [client 134.199.171.224:32860] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/core/scripts/wysiwyg/kcfinder/upload.php"] [unique_id "ahDa-ZqUP2XZmzp7RDp-YwAAAAU"]
[Sat May 23 06:38:49.461276 2026] [:error] [pid 30941:tid 30990] [client 134.199.171.224:32864] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/core/scripts/kcfinder/upload.php"] [unique_id "ahDa-XTIgjSDhiZmvlUlGQAAAE4"]
[Sat May 23 06:38:49.462461 2026] [:error] [pid 30940:tid 30971] [client 134.199.171.224:32874] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/assets/plugins/kcfinder/upload.php"] [unique_id "ahDa-ZqUP2XZmzp7RDp-ZAAAABY"]
[Sat May 23 06:38:49.469137 2026] [:error] [pid 30941:tid 30976] [client 134.199.171.224:32880] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/components/kcfinder/upload.php"] [unique_id "ahDa-XTIgjSDhiZmvlUlGgAAAEA"]
[Sat May 23 06:38:49.476105 2026] [:error] [pid 30941:tid 30979] [client 134.199.171.224:32902] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ckeditor/plugins/kcfinder/upload.php"] [unique_id "ahDa-XTIgjSDhiZmvlUlGwAAAEM"]
[Sat May 23 06:38:49.477127 2026] [:error] [pid 30940:tid 30956] [client 134.199.171.224:32886] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lib/kcfinder/upload.php"] [unique_id "ahDa-ZqUP2XZmzp7RDp-ZQAAAAc"]
[Sat May 23 06:38:49.480720 2026] [:error] [pid 30940:tid 30973] [client 134.199.171.224:32904] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/assets/js/kcfinder/upload.php"] [unique_id "ahDa-ZqUP2XZmzp7RDp-ZgAAABg"]
[Sat May 23 06:38:49.484524 2026] [:error] [pid 31039:tid 31048] [client 134.199.171.224:32918] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ckeditor/kcfinder/upload.php"] [unique_id "ahDa-aIYDYo8WvA5zLJnuwAAAMc"]
[Sat May 23 06:38:49.485317 2026] [:error] [pid 30940:tid 30967] [client 134.199.171.224:32928] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/js/tinymce/kcfinder/upload.php"] [unique_id "ahDa-ZqUP2XZmzp7RDp-ZwAAABI"]
[Sat May 23 06:38:49.486128 2026] [:error] [pid 30941:tid 30984] [client 134.199.171.224:32936] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/libs/kcfinder/upload.php"] [unique_id "ahDa-XTIgjSDhiZmvlUlHAAAAEg"]
[Sat May 23 06:38:49.492718 2026] [:error] [pid 25876:tid 25880] [client 134.199.171.224:32948] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/plugins/kcfinder/upload.php"] [unique_id "ahDa-QSpWUCKPezIBJCEiQAAAQI"]
[Sat May 23 06:38:49.495659 2026] [:error] [pid 31039:tid 31061] [client 134.199.171.224:32952] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kcfinder/upload.php"] [unique_id "ahDa-aIYDYo8WvA5zLJnvAAAANQ"]
[Sat May 23 06:38:49.501843 2026] [:error] [pid 31039:tid 31063] [client 134.199.171.224:32968] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/core/scripts/wysiwyg/kcfinder/upload.php"] [unique_id "ahDa-aIYDYo8WvA5zLJnvQAAANY"]
[Sat May 23 06:38:49.502512 2026] [:error] [pid 30941:tid 30981] [client 134.199.171.224:32984] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/core/scripts/kcfinder/upload.php"] [unique_id "ahDa-XTIgjSDhiZmvlUlHQAAAEU"]
[Sat May 23 06:38:49.505530 2026] [:error] [pid 30940:tid 30950] [client 134.199.171.224:32986] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/assets/plugins/kcfinder/upload.php"] [unique_id "ahDa-ZqUP2XZmzp7RDp-aAAAAAE"]
[Sat May 23 06:38:49.510459 2026] [:error] [pid 30941:tid 30999] [client 134.199.171.224:33002] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/components/kcfinder/upload.php"] [unique_id "ahDa-XTIgjSDhiZmvlUlHgAAAFc"]
[Sat May 23 06:38:49.517397 2026] [:error] [pid 30940:tid 30966] [client 134.199.171.224:33010] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ckeditor/plugins/kcfinder/upload.php"] [unique_id "ahDa-ZqUP2XZmzp7RDp-aQAAABE"]
[Sat May 23 06:38:49.518279 2026] [:error] [pid 30941:tid 30996] [client 134.199.171.224:33026] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lib/kcfinder/upload.php"] [unique_id "ahDa-XTIgjSDhiZmvlUlHwAAAFQ"]
[Sat May 23 06:38:49.528812 2026] [:error] [pid 30940:tid 30953] [client 134.199.171.224:33034] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/libs/kcfinder/upload.php"] [unique_id "ahDa-ZqUP2XZmzp7RDp-agAAAAQ"]
[Sat May 23 06:38:49.538023 2026] [:error] [pid 30941:tid 30986] [client 134.199.171.224:33042] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kcfinder/upload.php"] [unique_id "ahDa-XTIgjSDhiZmvlUlIAAAAEo"]
[Sat May 23 06:38:49.543579 2026] [:error] [pid 30940:tid 30951] [client 134.199.171.224:33044] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/core/scripts/wysiwyg/kcfinder/upload.php"] [unique_id "ahDa-ZqUP2XZmzp7RDp-awAAAAI"]
[Sat May 23 06:38:49.573954 2026] [:error] [pid 30941:tid 30983] [client 134.199.171.224:33048] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/libs/kcfinder/upload.php"] [unique_id "ahDa-XTIgjSDhiZmvlUlIQAAAEc"]
[Sat May 23 06:38:49.577648 2026] [:error] [pid 30940:tid 30957] [client 134.199.171.224:33056] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/app/webroot/js/kcfinder/upload.php"] [unique_id "ahDa-ZqUP2XZmzp7RDp-bAAAAAg"]
[Sat May 23 06:38:49.600843 2026] [:error] [pid 30941:tid 30988] [client 134.199.171.224:33062] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/media/kcfinder/upload.php"] [unique_id "ahDa-XTIgjSDhiZmvlUlIgAAAEw"]
[Sat May 23 06:38:49.609558 2026] [:error] [pid 30942:tid 31008] [client 134.199.171.224:33078] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jquery/kcfinder/upload.php"] [unique_id "ahDa-dUosz64YFiBlG3BOwAAAIU"]
[Sat May 23 06:38:49.617265 2026] [:error] [pid 30941:tid 30991] [client 134.199.171.224:33094] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin/kcfinder/upload.php"] [unique_id "ahDa-XTIgjSDhiZmvlUlIwAAAE8"]
[Sat May 23 06:38:49.619641 2026] [:error] [pid 30940:tid 30969] [client 134.199.171.224:33106] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/app/webroot/js/kcfinder/upload.php"] [unique_id "ahDa-ZqUP2XZmzp7RDp-bQAAABQ"]
[Sat May 23 06:38:49.620919 2026] [:error] [pid 30942:tid 31005] [client 134.199.171.224:33110] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/application/themes/admin/assets/js/kcfinder/upload.php"] [unique_id "ahDa-dUosz64YFiBlG3BPAAAAII"]
[Sat May 23 06:38:49.624575 2026] [:error] [pid 30940:tid 30961] [client 134.199.171.224:33118] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin/ckeditor/kcfinder/upload.php"] [unique_id "ahDa-ZqUP2XZmzp7RDp-bgAAAAw"]
[Sat May 23 06:38:49.643720 2026] [:error] [pid 30941:tid 30997] [client 134.199.171.224:33132] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/media/kcfinder/upload.php"] [unique_id "ahDa-XTIgjSDhiZmvlUlJAAAAFU"]
[Sat May 23 06:38:49.653082 2026] [:error] [pid 25876:tid 25893] [client 134.199.171.224:33134] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jquery/kcfinder/upload.php"] [unique_id "ahDa-QSpWUCKPezIBJCEigAAAQ8"]
[Sat May 23 06:38:49.658486 2026] [:error] [pid 25876:tid 25881] [client 134.199.171.224:33154] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin/ckeditor/plugins/kcfinder/upload.php"] [unique_id "ahDa-QSpWUCKPezIBJCEiwAAAQM"]
[Sat May 23 06:38:49.659630 2026] [:error] [pid 25876:tid 25885] [client 134.199.171.224:33150] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin/kcfinder/upload.php"] [unique_id "ahDa-QSpWUCKPezIBJCEjAAAAQc"]
[Sat May 23 06:38:49.660538 2026] [:error] [pid 25876:tid 25884] [client 134.199.171.224:33166] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/app/webroot/kcfinder/upload.php"] [unique_id "ahDa-QSpWUCKPezIBJCEjQAAAQY"]
[Sat May 23 06:38:49.661747 2026] [:error] [pid 30940:tid 30968] [client 134.199.171.224:33174] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/app/webroot/js/kcfinder/upload.php"] [unique_id "ahDa-ZqUP2XZmzp7RDp-bwAAABM"]
[Sat May 23 06:38:49.662849 2026] [:error] [pid 30940:tid 30963] [client 134.199.171.224:33188] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/application/themes/admin/assets/js/kcfinder/upload.php"] [unique_id "ahDa-ZqUP2XZmzp7RDp-cAAAAA4"]
[Sat May 23 06:38:49.667213 2026] [:error] [pid 31039:tid 31049] [client 134.199.171.224:33190] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin/ckeditor/kcfinder/upload.php"] [unique_id "ahDa-aIYDYo8WvA5zLJnvgAAAMg"]
[Sat May 23 06:38:49.687579 2026] [:error] [pid 31039:tid 31051] [client 134.199.171.224:33196] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/media/kcfinder/upload.php"] [unique_id "ahDa-aIYDYo8WvA5zLJnvwAAAMo"]
[Sat May 23 06:38:49.696620 2026] [:error] [pid 31039:tid 31065] [client 134.199.171.224:33204] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/jquery/kcfinder/upload.php"] [unique_id "ahDa-aIYDYo8WvA5zLJnwAAAANg"]
[Sat May 23 06:38:49.698261 2026] [:error] [pid 25876:tid 25902] [client 134.199.171.224:33208] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin/ckeditor/plugins/kcfinder/upload.php"] [unique_id "ahDa-QSpWUCKPezIBJCEjgAAARg"]
[Sat May 23 06:38:49.701869 2026] [:error] [pid 30940:tid 30960] [client 134.199.171.224:33212] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin/kcfinder/upload.php"] [unique_id "ahDa-ZqUP2XZmzp7RDp-cQAAAAs"]
[Sat May 23 06:38:49.702838 2026] [:error] [pid 25876:tid 25900] [client 134.199.171.224:33228] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/app/webroot/kcfinder/upload.php"] [unique_id "ahDa-QSpWUCKPezIBJCEjwAAARY"]
[Sat May 23 06:38:49.703491 2026] [:error] [pid 25876:tid 25897] [client 134.199.171.224:33232] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/application/themes/admin/assets/js/kcfinder/upload.php"] [unique_id "ahDa-QSpWUCKPezIBJCEkAAAARM"]
[Sat May 23 06:38:49.708317 2026] [:error] [pid 25876:tid 25882] [client 134.199.171.224:33236] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin/ckeditor/kcfinder/upload.php"] [unique_id "ahDa-QSpWUCKPezIBJCEkQAAAQQ"]
[Sat May 23 06:38:49.739531 2026] [:error] [pid 25876:tid 25886] [client 134.199.171.224:33246] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin/ckeditor/plugins/kcfinder/upload.php"] [unique_id "ahDa-QSpWUCKPezIBJCEkgAAAQg"]
[Sat May 23 06:38:49.742660 2026] [:error] [pid 30942:tid 31026] [client 134.199.171.224:33248] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/app/webroot/kcfinder/upload.php"] [unique_id "ahDa-dUosz64YFiBlG3BPQAAAJc"]
[Sat May 23 06:38:49.839349 2026] [:error] [pid 30941:tid 30998] [client 134.199.171.224:33250] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin/js/kcfinder/upload.php"] [unique_id "ahDa-XTIgjSDhiZmvlUlJQAAAFY"]
[Sat May 23 06:38:49.843483 2026] [:error] [pid 30941:tid 30980] [client 134.199.171.224:33266] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin/core/kcfinder/upload.php"] [unique_id "ahDa-XTIgjSDhiZmvlUlJgAAAEQ"]
[Sat May 23 06:38:49.844056 2026] [:error] [pid 30941:tid 30989] [client 134.199.171.224:33280] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/filemanager/dialog.php"] [unique_id "ahDa-XTIgjSDhiZmvlUlJwAAAE0"]
[Sat May 23 06:38:49.856784 2026] [:error] [pid 30941:tid 30994] [client 134.199.171.224:33292] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/asset/filemanager/dialog.php"] [unique_id "ahDa-XTIgjSDhiZmvlUlKAAAAFI"]
[Sat May 23 06:38:49.861534 2026] [:error] [pid 30941:tid 30987] [client 134.199.171.224:33304] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/assets/filemanager/dialog.php"] [unique_id "ahDa-XTIgjSDhiZmvlUlKQAAAEs"]
[Sat May 23 06:38:49.866687 2026] [:error] [pid 30940:tid 30949] [client 134.199.171.224:33310] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin/filemanager/dialog.php"] [unique_id "ahDa-ZqUP2XZmzp7RDp-cgAAAAA"]
[Sat May 23 06:38:49.874492 2026] [:error] [pid 30940:tid 30972] [client 134.199.171.224:33314] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/assets/scripts/filemanager/dialog.php"] [unique_id "ahDa-ZqUP2XZmzp7RDp-cwAAABc"]
[Sat May 23 06:38:49.877855 2026] [:error] [pid 30941:tid 30985] [client 134.199.171.224:33320] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/assets/plugins/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahDa-XTIgjSDhiZmvlUlKgAAAEk"]
[Sat May 23 06:38:49.882724 2026] [:error] [pid 30940:tid 30970] [client 134.199.171.224:33334] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin/js/kcfinder/upload.php"] [unique_id "ahDa-ZqUP2XZmzp7RDp-dAAAABU"]
[Sat May 23 06:38:49.886652 2026] [:error] [pid 30940:tid 30959] [client 134.199.171.224:33348] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin/core/kcfinder/upload.php"] [unique_id "ahDa-ZqUP2XZmzp7RDp-dQAAAAo"]
[Sat May 23 06:38:49.887518 2026] [:error] [pid 30940:tid 30958] [client 134.199.171.224:33356] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/filemanager/dialog.php"] [unique_id "ahDa-ZqUP2XZmzp7RDp-dgAAAAk"]
[Sat May 23 06:38:49.891274 2026] [:error] [pid 30941:tid 30978] [client 134.199.171.224:33358] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/scripts/filemanager/dialog.php"] [unique_id "ahDa-XTIgjSDhiZmvlUlKwAAAEI"]
[Sat May 23 06:38:49.898570 2026] [:error] [pid 30941:tid 31000] [client 134.199.171.224:33366] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/asset/filemanager/dialog.php"] [unique_id "ahDa-XTIgjSDhiZmvlUlLAAAAFg"]
[Sat May 23 06:38:49.904098 2026] [:error] [pid 30940:tid 30964] [client 134.199.171.224:33374] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/phpformbuilder/plugins/filemanager/dialog.php"] [unique_id "ahDa-ZqUP2XZmzp7RDp-dwAAAA8"]
[Sat May 23 06:38:49.906161 2026] [:error] [pid 30940:tid 30962] [client 134.199.171.224:33380] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/assets/filemanager/dialog.php"] [unique_id "ahDa-ZqUP2XZmzp7RDp-eAAAAA0"]
[Sat May 23 06:38:49.909703 2026] [:error] [pid 30940:tid 30952] [client 134.199.171.224:33386] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin/filemanager/dialog.php"] [unique_id "ahDa-ZqUP2XZmzp7RDp-eQAAAAM"]
[Sat May 23 06:38:49.912323 2026] [:error] [pid 30940:tid 30954] [client 134.199.171.224:33400] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/assets/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahDa-ZqUP2XZmzp7RDp-egAAAAU"]
[Sat May 23 06:38:49.915034 2026] [:error] [pid 30941:tid 30992] [client 134.199.171.224:33410] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/assets/plugins/filemanager/dialog.php"] [unique_id "ahDa-XTIgjSDhiZmvlUlLQAAAFA"]
[Sat May 23 06:38:49.916197 2026] [:error] [pid 31039:tid 31042] [client 134.199.171.224:33422] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/assets/scripts/filemanager/dialog.php"] [unique_id "ahDa-aIYDYo8WvA5zLJnwQAAAME"]
[Sat May 23 06:38:49.919636 2026] [:error] [pid 30941:tid 30990] [client 134.199.171.224:33428] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/assets/plugins/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahDa-XTIgjSDhiZmvlUlLgAAAE4"]
[Sat May 23 06:38:49.925842 2026] [:error] [pid 30940:tid 30971] [client 134.199.171.224:33432] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin/js/kcfinder/upload.php"] [unique_id "ahDa-ZqUP2XZmzp7RDp-ewAAABY"]
[Sat May 23 06:38:49.928622 2026] [:error] [pid 30941:tid 30976] [client 134.199.171.224:33436] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin/core/kcfinder/upload.php"] [unique_id "ahDa-XTIgjSDhiZmvlUlLwAAAEA"]
[Sat May 23 06:38:49.931498 2026] [:error] [pid 30941:tid 30979] [client 134.199.171.224:33438] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/filemanager/dialog.php"] [unique_id "ahDa-XTIgjSDhiZmvlUlMAAAAEM"]
[Sat May 23 06:38:49.935652 2026] [:error] [pid 30940:tid 30956] [client 134.199.171.224:33454] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/scripts/filemanager/dialog.php"] [unique_id "ahDa-ZqUP2XZmzp7RDp-fAAAAAc"]
[Sat May 23 06:38:49.941374 2026] [:error] [pid 30941:tid 30984] [client 134.199.171.224:33464] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/asset/filemanager/dialog.php"] [unique_id "ahDa-XTIgjSDhiZmvlUlMQAAAEg"]
[Sat May 23 06:38:49.946610 2026] [:error] [pid 30941:tid 30981] [client 134.199.171.224:33472] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/phpformbuilder/plugins/filemanager/dialog.php"] [unique_id "ahDa-XTIgjSDhiZmvlUlMgAAAEU"]
[Sat May 23 06:38:49.947642 2026] [:error] [pid 30941:tid 30999] [client 134.199.171.224:33478] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/assets/filemanager/dialog.php"] [unique_id "ahDa-XTIgjSDhiZmvlUlMwAAAFc"]
[Sat May 23 06:38:49.951895 2026] [:error] [pid 30940:tid 30973] [client 134.199.171.224:33482] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin/filemanager/dialog.php"] [unique_id "ahDa-ZqUP2XZmzp7RDp-fQAAABg"]
[Sat May 23 06:38:49.954223 2026] [:error] [pid 30940:tid 30967] [client 134.199.171.224:33498] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/assets/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahDa-ZqUP2XZmzp7RDp-fgAAABI"]
[Sat May 23 06:38:49.956928 2026] [:error] [pid 30941:tid 30996] [client 134.199.171.224:33510] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/assets/plugins/filemanager/dialog.php"] [unique_id "ahDa-XTIgjSDhiZmvlUlNAAAAFQ"]
[Sat May 23 06:38:49.957935 2026] [:error] [pid 30941:tid 30986] [client 134.199.171.224:33526] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/assets/scripts/filemanager/dialog.php"] [unique_id "ahDa-XTIgjSDhiZmvlUlNQAAAEo"]
[Sat May 23 06:38:49.962477 2026] [:error] [pid 30941:tid 30983] [client 134.199.171.224:33538] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/assets/plugins/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahDa-XTIgjSDhiZmvlUlNgAAAEc"]
[Sat May 23 06:38:49.977492 2026] [:error] [pid 30942:tid 31016] [client 134.199.171.224:33540] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/scripts/filemanager/dialog.php"] [unique_id "ahDa-dUosz64YFiBlG3BPgAAAI0"]
[Sat May 23 06:38:49.986500 2026] [:error] [pid 30942:tid 31015] [client 134.199.171.224:33548] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/phpformbuilder/plugins/filemanager/dialog.php"] [unique_id "ahDa-dUosz64YFiBlG3BPwAAAIw"]
[Sat May 23 06:38:49.993560 2026] [:error] [pid 30940:tid 30950] [client 134.199.171.224:33558] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/assets/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahDa-ZqUP2XZmzp7RDp-fwAAAAE"]
[Sat May 23 06:38:49.997561 2026] [:error] [pid 30940:tid 30966] [client 134.199.171.224:33560] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/assets/plugins/filemanager/dialog.php"] [unique_id "ahDa-ZqUP2XZmzp7RDp-gAAAABE"]
[Sat May 23 06:38:50.063165 2026] [:error] [pid 30941:tid 30991] [client 134.199.171.224:33566] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahDa-nTIgjSDhiZmvlUlNwAAAE8"]
[Sat May 23 06:38:50.072920 2026] [:error] [pid 30940:tid 30953] [client 134.199.171.224:33580] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/assets/admin/js/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahDa-pqUP2XZmzp7RDp-gQAAAAQ"]
[Sat May 23 06:38:50.083370 2026] [:error] [pid 30940:tid 30951] [client 134.199.171.224:33594] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/public/scripts/filemanager/dialog.php"] [unique_id "ahDa-pqUP2XZmzp7RDp-ggAAAAI"]
[Sat May 23 06:38:50.088869 2026] [:error] [pid 30940:tid 30957] [client 134.199.171.224:33596] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/js/fileManager/filemanager/dialog.php"] [unique_id "ahDa-pqUP2XZmzp7RDp-gwAAAAg"]
[Sat May 23 06:38:50.097861 2026] [:error] [pid 31039:tid 31053] [client 134.199.171.224:33608] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/media/filemanager/dialog.php"] [unique_id "ahDa-qIYDYo8WvA5zLJnwwAAAMw"]
[Sat May 23 06:38:50.099919 2026] [:error] [pid 30940:tid 30969] [client 134.199.171.224:33624] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/assets/admin/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahDa-pqUP2XZmzp7RDp-hAAAABQ"]
[Sat May 23 06:38:50.100969 2026] [:error] [pid 30940:tid 30961] [client 134.199.171.224:33636] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/js/tinymce4/plugins/filemanager/dialog.php"] [unique_id "ahDa-pqUP2XZmzp7RDp-hQAAAAw"]
[Sat May 23 06:38:50.102009 2026] [:error] [pid 30941:tid 30998] [client 134.199.171.224:33642] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tinymce/filemanager/dialog.php"] [unique_id "ahDa-nTIgjSDhiZmvlUlOAAAAFY"]
[Sat May 23 06:38:50.103996 2026] [:error] [pid 30941:tid 30980] [client 134.199.171.224:33648] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cms/tinymce/filemanager/filemanager/dialog.php"] [unique_id "ahDa-nTIgjSDhiZmvlUlOQAAAEQ"]
[Sat May 23 06:38:50.106451 2026] [:error] [pid 30941:tid 30989] [client 134.199.171.224:33664] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahDa-nTIgjSDhiZmvlUlOgAAAE0"]
[Sat May 23 06:38:50.118911 2026] [:error] [pid 30940:tid 30968] [client 134.199.171.224:33670] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/assets/admin/js/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahDa-pqUP2XZmzp7RDp-hgAAABM"]
[Sat May 23 06:38:50.123777 2026] [:error] [pid 30940:tid 30963] [client 134.199.171.224:33676] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/filemanager/filemanager/dialog.php"] [unique_id "ahDa-pqUP2XZmzp7RDp-hwAAAA4"]
[Sat May 23 06:38:50.124096 2026] [:error] [pid 30940:tid 30960] [client 134.199.171.224:33682] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/public/filemanager/dialog.php"] [unique_id "ahDa-pqUP2XZmzp7RDp-iAAAAAs"]
[Sat May 23 06:38:50.127833 2026] [:error] [pid 30940:tid 30949] [client 134.199.171.224:33690] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/public/scripts/filemanager/dialog.php"] [unique_id "ahDa-pqUP2XZmzp7RDp-iQAAAAA"]
[Sat May 23 06:38:50.135222 2026] [:error] [pid 30940:tid 30970] [client 134.199.171.224:33706] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/js/fileManager/filemanager/dialog.php"] [unique_id "ahDa-pqUP2XZmzp7RDp-igAAABU"]
[Sat May 23 06:38:50.141628 2026] [:error] [pid 30940:tid 30959] [client 134.199.171.224:33718] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/media/filemanager/dialog.php"] [unique_id "ahDa-pqUP2XZmzp7RDp-iwAAAAo"]
[Sat May 23 06:38:50.144161 2026] [:error] [pid 30941:tid 30994] [client 134.199.171.224:33726] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/assets/admin/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahDa-nTIgjSDhiZmvlUlOwAAAFI"]
[Sat May 23 06:38:50.145658 2026] [:error] [pid 30940:tid 30958] [client 134.199.171.224:33728] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/public/js/libraries/filemanager/dialog.php"] [unique_id "ahDa-pqUP2XZmzp7RDp-jAAAAAk"]
[Sat May 23 06:38:50.146283 2026] [:error] [pid 30941:tid 30987] [client 134.199.171.224:33746] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tinymce/filemanager/dialog.php"] [unique_id "ahDa-nTIgjSDhiZmvlUlPAAAAEs"]
[Sat May 23 06:38:50.147216 2026] [:error] [pid 30940:tid 30964] [client 134.199.171.224:33736] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/js/tinymce4/plugins/filemanager/dialog.php"] [unique_id "ahDa-pqUP2XZmzp7RDp-jQAAAA8"]
[Sat May 23 06:38:50.148994 2026] [:error] [pid 30941:tid 30985] [client 134.199.171.224:33758] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cms/tinymce/filemanager/filemanager/dialog.php"] [unique_id "ahDa-nTIgjSDhiZmvlUlPQAAAEk"]
[Sat May 23 06:38:50.151331 2026] [:error] [pid 30940:tid 30962] [client 134.199.171.224:33774] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahDa-pqUP2XZmzp7RDp-jgAAAA0"]
[Sat May 23 06:38:50.163711 2026] [:error] [pid 30940:tid 30952] [client 134.199.171.224:33776] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/assets/admin/js/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahDa-pqUP2XZmzp7RDp-jwAAAAM"]
[Sat May 23 06:38:50.167359 2026] [:error] [pid 30941:tid 30978] [client 134.199.171.224:33794] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/public/filemanager/dialog.php"] [unique_id "ahDa-nTIgjSDhiZmvlUlPgAAAEI"]
[Sat May 23 06:38:50.168628 2026] [:error] [pid 31039:tid 31057] [client 134.199.171.224:33780] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/filemanager/filemanager/dialog.php"] [unique_id "ahDa-qIYDYo8WvA5zLJnxAAAANA"]
[Sat May 23 06:38:50.171093 2026] [:error] [pid 31039:tid 31050] [client 134.199.171.224:33798] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/public/scripts/filemanager/dialog.php"] [unique_id "ahDa-qIYDYo8WvA5zLJnxQAAAMk"]
[Sat May 23 06:38:50.179707 2026] [:error] [pid 30941:tid 31000] [client 134.199.171.224:33812] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/js/fileManager/filemanager/dialog.php"] [unique_id "ahDa-nTIgjSDhiZmvlUlPwAAAFg"]
[Sat May 23 06:38:50.186139 2026] [:error] [pid 30942:tid 31027] [client 134.199.171.224:33826] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/assets/admin/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahDa-tUosz64YFiBlG3BQAAAAJg"]
[Sat May 23 06:38:50.186959 2026] [:error] [pid 30942:tid 31003] [client 134.199.171.224:33838] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/public/js/libraries/filemanager/dialog.php"] [unique_id "ahDa-tUosz64YFiBlG3BQQAAAIA"]
[Sat May 23 06:38:50.188283 2026] [:error] [pid 30941:tid 30992] [client 134.199.171.224:33848] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/tinymce/filemanager/dialog.php"] [unique_id "ahDa-nTIgjSDhiZmvlUlQAAAAFA"]
[Sat May 23 06:38:50.189007 2026] [:error] [pid 30941:tid 30990] [client 134.199.171.224:33852] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/js/tinymce4/plugins/filemanager/dialog.php"] [unique_id "ahDa-nTIgjSDhiZmvlUlQQAAAE4"]
[Sat May 23 06:38:50.194426 2026] [:error] [pid 30941:tid 30976] [client 134.199.171.224:33854] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cms/tinymce/filemanager/filemanager/dialog.php"] [unique_id "ahDa-nTIgjSDhiZmvlUlQgAAAEA"]
[Sat May 23 06:38:50.210012 2026] [:error] [pid 30942:tid 31010] [client 134.199.171.224:33856] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/public/filemanager/dialog.php"] [unique_id "ahDa-tUosz64YFiBlG3BQgAAAIc"]
[Sat May 23 06:38:50.210332 2026] [:error] [pid 30941:tid 30979] [client 134.199.171.224:33868] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/filemanager/filemanager/dialog.php"] [unique_id "ahDa-nTIgjSDhiZmvlUlQwAAAEM"]
[Sat May 23 06:38:50.226729 2026] [:error] [pid 30940:tid 30954] [client 134.199.171.224:33816] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/media/filemanager/dialog.php"] [unique_id "ahDa-pqUP2XZmzp7RDp-kQAAAAU"]
[Sat May 23 06:38:50.228866 2026] [:error] [pid 30940:tid 30971] [client 134.199.171.224:33880] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/public/js/libraries/filemanager/dialog.php"] [unique_id "ahDa-pqUP2XZmzp7RDp-kgAAABY"]
[Sat May 23 06:38:50.287929 2026] [:error] [pid 30940:tid 30956] [client 134.199.171.224:33892] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/editor/filemanager/dialog.php"] [unique_id "ahDa-pqUP2XZmzp7RDp-kwAAAAc"]
[Sat May 23 06:38:50.295410 2026] [:error] [pid 30940:tid 30973] [client 134.199.171.224:33896] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/resources/plugins/tiny_mce/plugins/filemanager/dialog.php"] [unique_id "ahDa-pqUP2XZmzp7RDp-lAAAABg"]
[Sat May 23 06:38:50.309076 2026] [:error] [pid 30941:tid 30984] [client 134.199.171.224:33908] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin/events/lib/external/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahDa-nTIgjSDhiZmvlUlRAAAAEg"]
[Sat May 23 06:38:50.331420 2026] [:error] [pid 30940:tid 30967] [client 134.199.171.224:33916] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/editor/filemanager/dialog.php"] [unique_id "ahDa-pqUP2XZmzp7RDp-lQAAABI"]
[Sat May 23 06:38:50.337546 2026] [:error] [pid 30940:tid 30950] [client 134.199.171.224:33920] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/resources/js/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahDa-pqUP2XZmzp7RDp-lgAAAAE"]
[Sat May 23 06:38:50.339437 2026] [:error] [pid 30940:tid 30966] [client 134.199.171.224:33924] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/resources/plugins/tiny_mce/plugins/filemanager/dialog.php"] [unique_id "ahDa-pqUP2XZmzp7RDp-lwAAABE"]
[Sat May 23 06:38:50.342407 2026] [:error] [pid 30941:tid 30981] [client 134.199.171.224:33940] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahDa-nTIgjSDhiZmvlUlRQAAAEU"]
[Sat May 23 06:38:50.344676 2026] [:error] [pid 30940:tid 30953] [client 134.199.171.224:33946] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lib/filemanager/dialog.php"] [unique_id "ahDa-pqUP2XZmzp7RDp-mAAAAAQ"]
[Sat May 23 06:38:50.351928 2026] [:error] [pid 30941:tid 30999] [client 134.199.171.224:33952] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin/events/lib/external/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahDa-nTIgjSDhiZmvlUlRgAAAFc"]
[Sat May 23 06:38:50.353261 2026] [:error] [pid 30940:tid 30950] [client 134.199.171.224:33966] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/assets/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahDa-pqUP2XZmzp7RDp-mQAAAAE"]
[Sat May 23 06:38:50.373609 2026] [:error] [pid 30940:tid 30957] [client 134.199.171.224:33970] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/editor/filemanager/dialog.php"] [unique_id "ahDa-pqUP2XZmzp7RDp-mgAAAAg"]
[Sat May 23 06:38:50.380894 2026] [:error] [pid 30941:tid 30996] [client 134.199.171.224:33982] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/resources/js/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahDa-nTIgjSDhiZmvlUlRwAAAFQ"]
[Sat May 23 06:38:50.382982 2026] [:error] [pid 30940:tid 30969] [client 134.199.171.224:33996] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/resources/plugins/tiny_mce/plugins/filemanager/dialog.php"] [unique_id "ahDa-pqUP2XZmzp7RDp-mwAAABQ"]
[Sat May 23 06:38:50.383902 2026] [:error] [pid 30942:tid 31018] [client 134.199.171.224:34006] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahDa-tUosz64YFiBlG3BQwAAAI8"]
[Sat May 23 06:38:50.386700 2026] [:error] [pid 30942:tid 31020] [client 134.199.171.224:34018] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lib/filemanager/dialog.php"] [unique_id "ahDa-tUosz64YFiBlG3BRAAAAJE"]
[Sat May 23 06:38:50.392817 2026] [:error] [pid 30940:tid 30961] [client 134.199.171.224:34030] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin/events/lib/external/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahDa-pqUP2XZmzp7RDp-nAAAAAw"]
[Sat May 23 06:38:50.400343 2026] [:error] [pid 30942:tid 31019] [client 134.199.171.224:34032] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/assets/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahDa-tUosz64YFiBlG3BRQAAAJA"]
[Sat May 23 06:38:50.422974 2026] [:error] [pid 30942:tid 31011] [client 134.199.171.224:34036] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/resources/js/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahDa-tUosz64YFiBlG3BRgAAAIg"]
[Sat May 23 06:38:50.427353 2026] [:error] [pid 30942:tid 31012] [client 134.199.171.224:34046] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahDa-tUosz64YFiBlG3BRwAAAIk"]
[Sat May 23 06:38:50.430436 2026] [:error] [pid 30941:tid 30986] [client 134.199.171.224:34058] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lib/filemanager/dialog.php"] [unique_id "ahDa-nTIgjSDhiZmvlUlSQAAAEo"]
[Sat May 23 06:38:50.443297 2026] [:error] [pid 30941:tid 30983] [client 134.199.171.224:34062] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/assets/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahDa-nTIgjSDhiZmvlUlSgAAAEc"]
[Sat May 23 06:38:50.546868 2026] [:error] [pid 31039:tid 31055] [client 134.199.171.224:34078] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cms/vendor/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahDa-qIYDYo8WvA5zLJnyAAAAM4"]
[Sat May 23 06:38:50.552005 2026] [:error] [pid 31039:tid 31045] [client 134.199.171.224:34082] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/arquivos/javascript/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahDa-qIYDYo8WvA5zLJnygAAAMQ"]
[Sat May 23 06:38:50.589215 2026] [:error] [pid 30940:tid 30963] [client 134.199.171.224:34090] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cms/vendor/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahDa-pqUP2XZmzp7RDp-nwAAAA4"]
[Sat May 23 06:38:50.592419 2026] [:error] [pid 30941:tid 30991] [client 134.199.171.224:34096] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahDa-nTIgjSDhiZmvlUlTAAAAE8"]
[Sat May 23 06:38:50.593192 2026] [:error] [pid 30941:tid 30997] [client 134.199.171.224:34100] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/arquivos/javascript/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahDa-nTIgjSDhiZmvlUlTQAAAFU"]
[Sat May 23 06:38:50.600611 2026] [:error] [pid 30942:tid 31021] [client 134.199.171.224:34110] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/plugins/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahDa-tUosz64YFiBlG3BSAAAAJI"]
[Sat May 23 06:38:50.630720 2026] [:error] [pid 30942:tid 31009] [client 134.199.171.224:34118] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cms/vendor/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahDa-tUosz64YFiBlG3BSQAAAIY"]
[Sat May 23 06:38:50.636306 2026] [:error] [pid 30941:tid 30977] [client 134.199.171.224:34136] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/arquivos/javascript/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahDa-nTIgjSDhiZmvlUlTgAAAEE"]
[Sat May 23 06:38:50.636306 2026] [:error] [pid 30940:tid 30960] [client 134.199.171.224:34134] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahDa-pqUP2XZmzp7RDp-oAAAAAs"]
[Sat May 23 06:38:50.644160 2026] [:error] [pid 30940:tid 30949] [client 134.199.171.224:34150] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/plugins/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahDa-pqUP2XZmzp7RDp-oQAAAAA"]
[Sat May 23 06:38:50.677569 2026] [:error] [pid 30941:tid 30980] [client 134.199.171.224:34160] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/admin/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahDa-nTIgjSDhiZmvlUlTwAAAEQ"]
[Sat May 23 06:38:50.686652 2026] [:error] [pid 30940:tid 30970] [client 134.199.171.224:34170] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/plugins/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahDa-pqUP2XZmzp7RDp-ogAAABU"]
[Sat May 23 21:39:46.825569 2026] [proxy_fcgi:error] [pid 44325:tid 44334] [client 4.228.100.214:2033] AH01071: Got error 'Primary script unknown'
[Sat May 23 21:39:47.139285 2026] [proxy_fcgi:error] [pid 44325:tid 44339] [client 4.228.100.214:2033] AH01071: Got error 'Primary script unknown'
[Sat May 23 21:39:47.451773 2026] [proxy_fcgi:error] [pid 44325:tid 44352] [client 4.228.100.214:2033] AH01071: Got error 'Primary script unknown'
[Sat May 23 21:39:47.772788 2026] [:error] [pid 44325:tid 44332] [client 4.228.100.214:2033] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/amxloxxr.php"] [unique_id "ahGuI1gUQb4puB_2yV8vCwAAAYQ"]
[Sat May 23 21:39:48.442907 2026] [:error] [pid 44326:tid 44373] [client 4.228.100.214:2027] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/amxloxxr.php"] [unique_id "ahGuJMyrPrcAqE-FOKKtNAAAAdI"]
[Sat May 23 21:39:49.071813 2026] [:error] [pid 31039:tid 31041] [client 4.228.100.214:16047] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/amxloxxr.php"] [unique_id "ahGuJaIYDYo8WvA5zLJMfwAAAMA"]
[Sat May 23 21:39:49.727894 2026] [:error] [pid 44326:tid 44362] [client 4.228.100.214:34492] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/amxloxxr.php"] [unique_id "ahGuJcyrPrcAqE-FOKKtOAAAAcc"]
[Sat May 23 21:39:50.370938 2026] [:error] [pid 44325:tid 44349] [client 4.228.100.214:22887] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-block.php"] [unique_id "ahGuJlgUQb4puB_2yV8vEAAAAZU"]
[Sat May 23 21:39:50.988771 2026] [:error] [pid 44325:tid 44343] [client 4.228.100.214:27370] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-block.php"] [unique_id "ahGuJlgUQb4puB_2yV8vEwAAAY8"]
[Sat May 23 21:39:51.624760 2026] [:error] [pid 31039:tid 31053] [client 4.228.100.214:1421] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-block.php"] [unique_id "ahGuJ6IYDYo8WvA5zLJMgQAAAMw"]
[Sat May 23 21:39:52.241863 2026] [:error] [pid 44326:tid 44374] [client 4.228.100.214:2010] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-block.php"] [unique_id "ahGuKMyrPrcAqE-FOKKtOgAAAdM"]
[Sat May 23 21:39:52.861889 2026] [:error] [pid 44326:tid 44360] [client 4.228.100.214:32811] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wehrman.php"] [unique_id "ahGuKMyrPrcAqE-FOKKtPQAAAcU"]
[Sat May 23 21:39:53.496761 2026] [:error] [pid 44325:tid 44337] [client 4.228.100.214:2026] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wehrman.php"] [unique_id "ahGuKVgUQb4puB_2yV8vFwAAAYk"]
[Sat May 23 21:39:54.190539 2026] [:error] [pid 25876:tid 25878] [client 4.228.100.214:20178] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wehrman.php"] [unique_id "ahGuKgSpWUCKPezIBJC1KwAAAQA"]
[Sat May 23 21:39:54.811429 2026] [:error] [pid 25876:tid 25883] [client 4.228.100.214:16031] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wehrman.php"] [unique_id "ahGuKgSpWUCKPezIBJC1LQAAAQU"]
[Sat May 23 21:39:55.441436 2026] [:error] [pid 44325:tid 44352] [client 4.228.100.214:34435] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-thi.php"] [unique_id "ahGuK1gUQb4puB_2yV8vHQAAAZg"]
[Sat May 23 21:39:56.060928 2026] [:error] [pid 44326:tid 44374] [client 4.228.100.214:32546] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-thi.php"] [unique_id "ahGuLMyrPrcAqE-FOKKtQgAAAdM"]
[Sat May 23 21:39:56.686591 2026] [:error] [pid 44326:tid 44360] [client 4.228.100.214:16024] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-thi.php"] [unique_id "ahGuLMyrPrcAqE-FOKKtRQAAAcU"]
[Sat May 23 21:39:57.315868 2026] [:error] [pid 25876:tid 25894] [client 4.228.100.214:1413] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-thi.php"] [unique_id "ahGuLQSpWUCKPezIBJC1MQAAARA"]
[Sat May 23 21:39:57.933252 2026] [:error] [pid 44296:tid 44304] [client 4.228.100.214:1422] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/z.php"] [unique_id "ahGuLZdrUdFI6ijvMkmVxgAAAUY"]
[Sat May 23 21:39:58.551416 2026] [:error] [pid 25876:tid 25901] [client 4.228.100.214:1467] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/z.php"] [unique_id "ahGuLgSpWUCKPezIBJC1MwAAARc"]
[Sat May 23 21:39:59.191461 2026] [:error] [pid 44326:tid 44373] [client 4.228.100.214:25042] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/z.php"] [unique_id "ahGuL8yrPrcAqE-FOKKtSgAAAdI"]
[Sat May 23 21:39:59.826012 2026] [:error] [pid 44296:tid 44311] [client 4.228.100.214:59533] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/z.php"] [unique_id "ahGuL5drUdFI6ijvMkmVzAAAAU0"]
[Sat May 23 21:40:00.482214 2026] [:error] [pid 30940:tid 30960] [client 4.228.100.214:13747] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-trackback.php"] [unique_id "ahGuMJqUP2XZmzp7RDoSSAAAAAs"]
[Sat May 23 21:40:01.108947 2026] [:error] [pid 30940:tid 30958] [client 4.228.100.214:29096] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-trackback.php"] [unique_id "ahGuMZqUP2XZmzp7RDoSSgAAAAk"]
[Sat May 23 21:40:01.728587 2026] [:error] [pid 44296:tid 44317] [client 4.228.100.214:9454] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-trackback.php"] [unique_id "ahGuMZdrUdFI6ijvMkmVzgAAAVM"]
[Sat May 23 21:40:02.349926 2026] [:error] [pid 44325:tid 44344] [client 4.228.100.214:25054] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-trackback.php"] [unique_id "ahGuMlgUQb4puB_2yV8vIAAAAZA"]
[Sat May 23 21:40:02.982492 2026] [:error] [pid 30942:tid 31006] [client 4.228.100.214:13704] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/333.php"] [unique_id "ahGuMtUosz64YFiBlG17SQAAAIM"]
[Sat May 23 21:40:03.611576 2026] [:error] [pid 30941:tid 30976] [client 4.228.100.214:11241] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/333.php"] [unique_id "ahGuM3TIgjSDhiZmvlX_hQAAAEA"]
[Sat May 23 21:40:04.274540 2026] [:error] [pid 44326:tid 44378] [client 4.228.100.214:19725] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/333.php"] [unique_id "ahGuNMyrPrcAqE-FOKKtUAAAAdc"]
[Sat May 23 21:40:04.929064 2026] [:error] [pid 25876:tid 25900] [client 4.228.100.214:60426] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/333.php"] [unique_id "ahGuNASpWUCKPezIBJC1OQAAARY"]
[Sat May 23 21:40:05.650029 2026] [:error] [pid 30941:tid 30978] [client 4.228.100.214:25067] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/edit.php"] [unique_id "ahGuNXTIgjSDhiZmvlX_igAAAEI"]
[Sat May 23 21:40:06.286072 2026] [:error] [pid 44325:tid 44338] [client 4.228.100.214:14376] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/edit.php"] [unique_id "ahGuNlgUQb4puB_2yV8vIgAAAYo"]
[Sat May 23 21:40:06.940440 2026] [:error] [pid 44325:tid 44339] [client 4.228.100.214:13734] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/edit.php"] [unique_id "ahGuNlgUQb4puB_2yV8vIwAAAYs"]
[Sat May 23 21:40:07.562790 2026] [:error] [pid 30940:tid 30954] [client 4.228.100.214:19763] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/edit.php"] [unique_id "ahGuN5qUP2XZmzp7RDoSTgAAAAU"]
[Sat May 23 21:40:08.189531 2026] [:error] [pid 30942:tid 31008] [client 4.228.100.214:29617] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-load.php"] [unique_id "ahGuONUosz64YFiBlG17TAAAAIU"]
[Sat May 23 21:40:08.815556 2026] [:error] [pid 30941:tid 30989] [client 4.228.100.214:7907] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-load.php"] [unique_id "ahGuOHTIgjSDhiZmvlX_kQAAAE0"]
[Sat May 23 21:40:09.435350 2026] [:error] [pid 44326:tid 44369] [client 4.228.100.214:52859] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-load.php"] [unique_id "ahGuOcyrPrcAqE-FOKKtWgAAAc4"]
[Sat May 23 21:40:10.067107 2026] [:error] [pid 30941:tid 30985] [client 4.228.100.214:11240] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-load.php"] [unique_id "ahGuOnTIgjSDhiZmvlX_kwAAAEk"]
[Sat May 23 21:40:10.694722 2026] [:error] [pid 30941:tid 30997] [client 4.228.100.214:52812] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/atomlib.php"] [unique_id "ahGuOnTIgjSDhiZmvlX_lAAAAFU"]
[Sat May 23 21:40:11.320268 2026] [:error] [pid 44326:tid 44370] [client 4.228.100.214:28736] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/atomlib.php"] [unique_id "ahGuO8yrPrcAqE-FOKKtaQAAAc8"]
[Sat May 23 21:40:11.939552 2026] [:error] [pid 44326:tid 44369] [client 4.228.100.214:15406] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/atomlib.php"] [unique_id "ahGuO8yrPrcAqE-FOKKtbQAAAc4"]
[Sat May 23 21:40:12.561990 2026] [:error] [pid 30941:tid 30979] [client 4.228.100.214:52822] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/atomlib.php"] [unique_id "ahGuPHTIgjSDhiZmvlX_mgAAAEM"]
[Sat May 23 21:40:13.180065 2026] [:error] [pid 44325:tid 44334] [client 4.228.100.214:7902] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-der.php"] [unique_id "ahGuPVgUQb4puB_2yV8vLgAAAYY"]
[Sat May 23 21:40:13.824321 2026] [:error] [pid 44296:tid 44312] [client 4.228.100.214:33214] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-der.php"] [unique_id "ahGuPZdrUdFI6ijvMkmV0wAAAU4"]
[Sat May 23 21:40:14.460729 2026] [:error] [pid 44325:tid 44328] [client 4.228.100.214:33156] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-der.php"] [unique_id "ahGuPlgUQb4puB_2yV8vMwAAAYA"]
[Sat May 23 21:40:15.079165 2026] [:error] [pid 44326:tid 44368] [client 4.228.100.214:8307] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-der.php"] [unique_id "ahGuP8yrPrcAqE-FOKKtcwAAAc0"]
[Sat May 23 21:40:15.702112 2026] [:error] [pid 30941:tid 30997] [client 4.228.100.214:15404] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ftde.php"] [unique_id "ahGuP3TIgjSDhiZmvlX_oAAAAFU"]
[Sat May 23 21:40:16.319022 2026] [:error] [pid 44326:tid 44379] [client 4.228.100.214:29586] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ftde.php"] [unique_id "ahGuQMyrPrcAqE-FOKKtdgAAAdg"]
[Sat May 23 21:40:16.941946 2026] [:error] [pid 44326:tid 44370] [client 4.228.100.214:28310] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ftde.php"] [unique_id "ahGuQMyrPrcAqE-FOKKtegAAAc8"]
[Sat May 23 21:40:17.565980 2026] [:error] [pid 44296:tid 44299] [client 4.228.100.214:28768] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ftde.php"] [unique_id "ahGuQZdrUdFI6ijvMkmV1gAAAUE"]
[Sat May 23 21:40:18.192313 2026] [:error] [pid 30942:tid 31018] [client 4.228.100.214:11148] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/asasx.php"] [unique_id "ahGuQtUosz64YFiBlG17TQAAAI8"]
[Sat May 23 21:40:18.815470 2026] [:error] [pid 44325:tid 44337] [client 4.228.100.214:28782] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/asasx.php"] [unique_id "ahGuQlgUQb4puB_2yV8vNwAAAYk"]
[Sat May 23 21:40:19.455172 2026] [:error] [pid 44325:tid 44331] [client 4.228.100.214:7911] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/asasx.php"] [unique_id "ahGuQ1gUQb4puB_2yV8vOgAAAYM"]
[Sat May 23 21:40:20.072652 2026] [:error] [pid 44325:tid 44346] [client 4.228.100.214:7898] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/asasx.php"] [unique_id "ahGuRFgUQb4puB_2yV8vPQAAAZI"]
[Sat May 23 21:40:20.709132 2026] [:error] [pid 30942:tid 31021] [client 4.228.100.214:7926] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-good.php"] [unique_id "ahGuRNUosz64YFiBlG17TgAAAJI"]
[Sat May 23 21:40:21.339080 2026] [:error] [pid 30941:tid 30995] [client 4.228.100.214:28651] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-good.php"] [unique_id "ahGuRXTIgjSDhiZmvlX_qQAAAFM"]
[Sat May 23 21:40:21.958406 2026] [:error] [pid 44326:tid 44362] [client 4.228.100.214:28653] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-good.php"] [unique_id "ahGuRcyrPrcAqE-FOKKtggAAAcc"]
[Sat May 23 21:40:22.586474 2026] [:error] [pid 30940:tid 30960] [client 4.228.100.214:15415] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-good.php"] [unique_id "ahGuRpqUP2XZmzp7RDoSUwAAAAs"]
[Sat May 23 21:40:23.203361 2026] [:error] [pid 25876:tid 25879] [client 4.228.100.214:15385] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/app.php"] [unique_id "ahGuRwSpWUCKPezIBJC1QAAAAQE"]
[Sat May 23 21:40:23.823926 2026] [:error] [pid 30940:tid 30969] [client 4.228.100.214:28624] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/app.php"] [unique_id "ahGuR5qUP2XZmzp7RDoSVgAAABQ"]
[Sat May 23 21:40:24.440545 2026] [:error] [pid 30940:tid 30956] [client 4.228.100.214:27120] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/app.php"] [unique_id "ahGuSJqUP2XZmzp7RDoSVwAAAAc"]
[Sat May 23 21:40:25.070503 2026] [:error] [pid 25876:tid 25878] [client 4.228.100.214:29608] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/app.php"] [unique_id "ahGuSQSpWUCKPezIBJC1RAAAAQA"]
[Sat May 23 21:40:25.694827 2026] [:error] [pid 44325:tid 44339] [client 4.228.100.214:7892] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/colors/blue/file.php"] [unique_id "ahGuSVgUQb4puB_2yV8vSAAAAYs"]
[Sat May 23 21:40:26.324851 2026] [:error] [pid 44325:tid 44329] [client 4.228.100.214:28776] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/colors/blue/file.php"] [unique_id "ahGuSlgUQb4puB_2yV8vTAAAAYE"]
[Sat May 23 21:40:26.983966 2026] [:error] [pid 25876:tid 25880] [client 4.228.100.214:28760] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/colors/blue/file.php"] [unique_id "ahGuSgSpWUCKPezIBJC1RgAAAQI"]
[Sat May 23 21:40:27.602711 2026] [:error] [pid 44325:tid 44342] [client 4.228.100.214:15397] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/css/colors/blue/file.php"] [unique_id "ahGuS1gUQb4puB_2yV8vUgAAAY4"]
[Sat May 23 21:40:28.265072 2026] [:error] [pid 25876:tid 25891] [client 4.228.100.214:28633] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wuasr.php"] [unique_id "ahGuTASpWUCKPezIBJC1SQAAAQ0"]
[Sat May 23 21:40:28.894940 2026] [:error] [pid 25876:tid 25892] [client 4.228.100.214:28783] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wuasr.php"] [unique_id "ahGuTASpWUCKPezIBJC1SgAAAQ4"]
[Sat May 23 21:40:29.574630 2026] [:error] [pid 30940:tid 30957] [client 4.228.100.214:29580] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wuasr.php"] [unique_id "ahGuTZqUP2XZmzp7RDoSYwAAAAg"]
[Sat May 23 21:40:30.193739 2026] [:error] [pid 30941:tid 30998] [client 4.228.100.214:29590] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wuasr.php"] [unique_id "ahGuTnTIgjSDhiZmvlX_sgAAAFY"]
[Sat May 23 21:40:30.822686 2026] [:error] [pid 30941:tid 30986] [client 4.228.100.214:28625] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bthil.php"] [unique_id "ahGuTnTIgjSDhiZmvlX_tQAAAEo"]
[Sat May 23 21:40:31.538251 2026] [:error] [pid 30941:tid 30992] [client 4.228.100.214:28658] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bthil.php"] [unique_id "ahGuT3TIgjSDhiZmvlX_uQAAAFA"]
[Sat May 23 21:40:32.191738 2026] [:error] [pid 30941:tid 30989] [client 4.228.100.214:52848] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bthil.php"] [unique_id "ahGuUHTIgjSDhiZmvlX_vgAAAE0"]
[Sat May 23 21:40:32.893627 2026] [:error] [pid 25876:tid 25894] [client 4.228.100.214:15372] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bthil.php"] [unique_id "ahGuUASpWUCKPezIBJC1UAAAARA"]
[Sat May 23 21:40:33.574887 2026] [:error] [pid 30941:tid 30979] [client 4.228.100.214:8318] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/albin.php"] [unique_id "ahGuUXTIgjSDhiZmvlX_xwAAAEM"]
[Sat May 23 21:40:34.193769 2026] [:error] [pid 30941:tid 30985] [client 4.228.100.214:29606] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/albin.php"] [unique_id "ahGuUnTIgjSDhiZmvlX_yAAAAEk"]
[Sat May 23 21:40:34.903752 2026] [:error] [pid 30941:tid 30999] [client 4.228.100.214:28784] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/albin.php"] [unique_id "ahGuUnTIgjSDhiZmvlX_yQAAAFc"]
[Sat May 23 21:40:35.558785 2026] [:error] [pid 30941:tid 31000] [client 4.228.100.214:27122] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/albin.php"] [unique_id "ahGuU3TIgjSDhiZmvlX_ywAAAFg"]
[Sat May 23 21:40:36.179900 2026] [:error] [pid 30941:tid 30998] [client 4.228.100.214:8285] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wefile.php"] [unique_id "ahGuVHTIgjSDhiZmvlX_zwAAAFY"]
[Sat May 23 21:40:36.808085 2026] [:error] [pid 30941:tid 30983] [client 4.228.100.214:16790] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wefile.php"] [unique_id "ahGuVHTIgjSDhiZmvlX_1AAAAEc"]
[Sat May 23 21:40:37.428158 2026] [:error] [pid 30941:tid 30988] [client 4.228.100.214:27077] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wefile.php"] [unique_id "ahGuVXTIgjSDhiZmvlX_2AAAAEw"]
[Sat May 23 21:40:38.052589 2026] [:error] [pid 31039:tid 31041] [client 4.228.100.214:17933] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wefile.php"] [unique_id "ahGuVqIYDYo8WvA5zLJMiAAAAMA"]
[Sat May 23 21:40:38.685820 2026] [:error] [pid 30942:tid 31013] [client 4.228.100.214:28706] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file30.php"] [unique_id "ahGuVtUosz64YFiBlG17UgAAAIo"]
[Sat May 23 21:40:39.305703 2026] [:error] [pid 31039:tid 31058] [client 4.228.100.214:7901] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file30.php"] [unique_id "ahGuV6IYDYo8WvA5zLJMigAAANE"]
[Sat May 23 21:40:39.932971 2026] [:error] [pid 30941:tid 30998] [client 4.228.100.214:28716] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file30.php"] [unique_id "ahGuV3TIgjSDhiZmvlX_4AAAAFY"]
[Sat May 23 21:40:40.560295 2026] [:error] [pid 31039:tid 31063] [client 4.228.100.214:28686] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file30.php"] [unique_id "ahGuWKIYDYo8WvA5zLJMiwAAANY"]
[Sat May 23 21:40:41.218273 2026] [:error] [pid 25876:tid 25881] [client 4.228.100.214:29328] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file4.php"] [unique_id "ahGuWQSpWUCKPezIBJC1VAAAAQM"]
[Sat May 23 21:40:41.861971 2026] [:error] [pid 31039:tid 31050] [client 4.228.100.214:28709] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file4.php"] [unique_id "ahGuWaIYDYo8WvA5zLJMkAAAAMk"]
[Sat May 23 21:40:42.481646 2026] [:error] [pid 25876:tid 25878] [client 4.228.100.214:19329] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file4.php"] [unique_id "ahGuWgSpWUCKPezIBJC1VwAAAQA"]
[Sat May 23 21:40:43.102329 2026] [:error] [pid 30940:tid 30971] [client 4.228.100.214:28705] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file4.php"] [unique_id "ahGuW5qUP2XZmzp7RDoSZwAAABY"]
[Sat May 23 21:40:43.721661 2026] [:error] [pid 44325:tid 44333] [client 4.228.100.214:28733] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dropdown.php"] [unique_id "ahGuW1gUQb4puB_2yV8vaAAAAYU"]
[Sat May 23 21:40:44.355730 2026] [:error] [pid 31039:tid 31047] [client 4.228.100.214:26624] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dropdown.php"] [unique_id "ahGuXKIYDYo8WvA5zLJMkgAAAMY"]
[Sat May 23 21:40:44.980404 2026] [:error] [pid 31039:tid 31054] [client 4.228.100.214:26643] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dropdown.php"] [unique_id "ahGuXKIYDYo8WvA5zLJMlAAAAM0"]
[Sat May 23 21:40:45.600308 2026] [:error] [pid 44325:tid 44338] [client 4.228.100.214:13028] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/dropdown.php"] [unique_id "ahGuXVgUQb4puB_2yV8vawAAAYo"]
[Sat May 23 21:40:46.240514 2026] [:error] [pid 30942:tid 31009] [client 4.228.100.214:8213] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/txets.php"] [unique_id "ahGuXtUosz64YFiBlG17WgAAAIY"]
[Sat May 23 21:40:46.873123 2026] [:error] [pid 44325:tid 44352] [client 4.228.100.214:12940] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/txets.php"] [unique_id "ahGuXlgUQb4puB_2yV8vbAAAAZg"]
[Sat May 23 21:40:47.511286 2026] [proxy_fcgi:error] [pid 30942:tid 31018] [client 4.228.100.214:29375] AH01071: Got error 'Primary script unknown'
[Sat May 23 21:40:47.823359 2026] [proxy_fcgi:error] [pid 30942:tid 31021] [client 4.228.100.214:29375] AH01071: Got error 'Primary script unknown'
[Sat May 23 21:40:48.140051 2026] [proxy_fcgi:error] [pid 30942:tid 31023] [client 4.228.100.214:29375] AH01071: Got error 'Primary script unknown'
[Sat May 23 21:40:48.452334 2026] [proxy_fcgi:error] [pid 30942:tid 31013] [client 4.228.100.214:29375] AH01071: Got error 'Primary script unknown'
[Sat May 23 21:40:48.764135 2026] [proxy_fcgi:error] [pid 30942:tid 31005] [client 4.228.100.214:29375] AH01071: Got error 'Primary script unknown'
[Sat May 23 21:40:49.076392 2026] [proxy_fcgi:error] [pid 30942:tid 31003] [client 4.228.100.214:29375] AH01071: Got error 'Primary script unknown'
[Sat May 23 21:40:49.387752 2026] [proxy_fcgi:error] [pid 30942:tid 31014] [client 4.228.100.214:29375] AH01071: Got error 'Primary script unknown'
[Sat May 23 21:40:50.871923 2026] [proxy_fcgi:error] [pid 30942:tid 31006] [client 4.228.100.214:29375] AH01071: Got error 'Primary script unknown'
[Sat May 23 21:40:51.183610 2026] [proxy_fcgi:error] [pid 30942:tid 31011] [client 4.228.100.214:29375] AH01071: Got error 'Primary script unknown'
[Sat May 23 21:40:51.494721 2026] [proxy_fcgi:error] [pid 30942:tid 31026] [client 4.228.100.214:29375] AH01071: Got error 'Primary script unknown'
[Sat May 23 21:40:52.878507 2026] [proxy_fcgi:error] [pid 30942:tid 31004] [client 4.228.100.214:29375] AH01071: Got error 'Primary script unknown'
[Sat May 23 21:40:53.186859 2026] [:error] [pid 30942:tid 31007] [client 4.228.100.214:29375] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/yellow.php"] [unique_id "ahGuZdUosz64YFiBlG17aQAAAIQ"]
[Sat May 23 21:40:53.804094 2026] [:error] [pid 25876:tid 25879] [client 4.228.100.214:26625] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/yellow.php"] [unique_id "ahGuZQSpWUCKPezIBJC1XgAAAQE"]
[Sat May 23 21:40:54.420339 2026] [:error] [pid 44325:tid 44348] [client 4.228.100.214:1616] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/yellow.php"] [unique_id "ahGuZlgUQb4puB_2yV8vcgAAAZQ"]
[Sat May 23 21:40:55.035506 2026] [:error] [pid 44326:tid 44378] [client 4.228.100.214:1654] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/yellow.php"] [unique_id "ahGuZ8yrPrcAqE-FOKKtlQAAAdc"]
[Sat May 23 21:40:55.684861 2026] [:error] [pid 31039:tid 31047] [client 4.228.100.214:13033] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mifta.php"] [unique_id "ahGuZ6IYDYo8WvA5zLJMnAAAAMY"]
[Sat May 23 21:40:56.302667 2026] [:error] [pid 44325:tid 44340] [client 4.228.100.214:13030] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mifta.php"] [unique_id "ahGuaFgUQb4puB_2yV8vdQAAAYw"]
[Sat May 23 21:40:56.932100 2026] [:error] [pid 31039:tid 31055] [client 4.228.100.214:26658] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mifta.php"] [unique_id "ahGuaKIYDYo8WvA5zLJMngAAAM4"]
[Sat May 23 21:40:57.550778 2026] [:error] [pid 30942:tid 31008] [client 4.228.100.214:13031] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mifta.php"] [unique_id "ahGuadUosz64YFiBlG17awAAAIU"]
[Sat May 23 21:40:58.183117 2026] [:error] [pid 30942:tid 31012] [client 4.228.100.214:9451] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-firewall.php"] [unique_id "ahGuatUosz64YFiBlG17bgAAAIk"]
[Sat May 23 21:40:58.807935 2026] [:error] [pid 30942:tid 31013] [client 4.228.100.214:26649] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-firewall.php"] [unique_id "ahGuatUosz64YFiBlG17bwAAAIo"]
[Sat May 23 21:40:59.434883 2026] [:error] [pid 44325:tid 44349] [client 4.228.100.214:15624] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-firewall.php"] [unique_id "ahGua1gUQb4puB_2yV8vewAAAZU"]
[Sat May 23 21:41:00.061869 2026] [:error] [pid 44325:tid 44348] [client 4.228.100.214:15619] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-firewall.php"] [unique_id "ahGubFgUQb4puB_2yV8vgQAAAZQ"]
[Sat May 23 21:41:00.692093 2026] [:error] [pid 44325:tid 44330] [client 4.228.100.214:1625] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fun.php"] [unique_id "ahGubFgUQb4puB_2yV8vgwAAAYI"]
[Sat May 23 21:41:01.315147 2026] [:error] [pid 44325:tid 44334] [client 4.228.100.214:13054] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fun.php"] [unique_id "ahGubVgUQb4puB_2yV8vhAAAAYY"]
[Sat May 23 21:41:02.035226 2026] [:error] [pid 44325:tid 44331] [client 4.228.100.214:26628] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fun.php"] [unique_id "ahGublgUQb4puB_2yV8vhQAAAYM"]
[Sat May 23 21:41:02.653187 2026] [:error] [pid 31039:tid 31041] [client 4.228.100.214:26671] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fun.php"] [unique_id "ahGubqIYDYo8WvA5zLJMogAAAMA"]
[Sat May 23 21:41:03.318940 2026] [:error] [pid 25876:tid 25895] [client 4.228.100.214:12963] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/drykl.php"] [unique_id "ahGubwSpWUCKPezIBJC1YwAAARE"]
[Sat May 23 21:41:03.955108 2026] [:error] [pid 44326:tid 44367] [client 4.228.100.214:15639] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/drykl.php"] [unique_id "ahGub8yrPrcAqE-FOKKtmgAAAcw"]
[Sat May 23 21:41:04.581171 2026] [:error] [pid 25876:tid 25884] [client 4.228.100.214:26638] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/drykl.php"] [unique_id "ahGucASpWUCKPezIBJC1ZAAAAQY"]
[Sat May 23 21:41:05.205889 2026] [:error] [pid 44325:tid 44337] [client 4.228.100.214:9423] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/drykl.php"] [unique_id "ahGucVgUQb4puB_2yV8viwAAAYk"]
[Sat May 23 21:41:05.876919 2026] [:error] [pid 44325:tid 44342] [client 4.228.100.214:15632] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sys.php"] [unique_id "ahGucVgUQb4puB_2yV8vjAAAAY4"]
[Sat May 23 21:41:06.528427 2026] [:error] [pid 30942:tid 31021] [client 4.228.100.214:26642] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sys.php"] [unique_id "ahGuctUosz64YFiBlG17dQAAAJI"]
[Sat May 23 21:41:07.164419 2026] [:error] [pid 44325:tid 44344] [client 4.228.100.214:12222] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sys.php"] [unique_id "ahGuc1gUQb4puB_2yV8vkQAAAZA"]
[Sat May 23 21:41:07.792984 2026] [:error] [pid 44296:tid 44318] [client 4.228.100.214:9447] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sys.php"] [unique_id "ahGuc5drUdFI6ijvMkmV3AAAAVQ"]
[Sat May 23 21:41:08.451311 2026] [:error] [pid 44326:tid 44379] [client 4.228.100.214:1661] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/1index.php"] [unique_id "ahGudMyrPrcAqE-FOKKtpgAAAdg"]
[Sat May 23 21:41:09.186140 2026] [:error] [pid 30941:tid 30976] [client 4.228.100.214:12162] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/1index.php"] [unique_id "ahGudXTIgjSDhiZmvlX_7wAAAEA"]
[Sat May 23 21:41:09.813794 2026] [:error] [pid 44326:tid 44360] [client 4.228.100.214:15643] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/1index.php"] [unique_id "ahGudcyrPrcAqE-FOKKtqgAAAcU"]
[Sat May 23 21:41:10.487561 2026] [:error] [pid 30942:tid 31005] [client 4.228.100.214:9448] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/1index.php"] [unique_id "ahGudtUosz64YFiBlG17eAAAAII"]
[Sat May 23 21:41:11.207752 2026] [:error] [pid 30942:tid 31024] [client 4.228.100.214:29364] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/shell20211028.php"] [unique_id "ahGud9Uosz64YFiBlG17egAAAJU"]
[Sat May 23 21:41:11.856996 2026] [:error] [pid 44326:tid 44370] [client 4.228.100.214:32887] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/shell20211028.php"] [unique_id "ahGud8yrPrcAqE-FOKKtsQAAAc8"]
[Sat May 23 21:41:12.510926 2026] [:error] [pid 44326:tid 44357] [client 4.228.100.214:12995] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/shell20211028.php"] [unique_id "ahGueMyrPrcAqE-FOKKtswAAAcI"]
[Sat May 23 21:41:13.158484 2026] [:error] [pid 44325:tid 44333] [client 4.228.100.214:16823] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/shell20211028.php"] [unique_id "ahGueVgUQb4puB_2yV8vmwAAAYU"]
[Sat May 23 21:41:13.884869 2026] [:error] [pid 30941:tid 30994] [client 4.228.100.214:13041] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-ver.php"] [unique_id "ahGueXTIgjSDhiZmvlX_8gAAAFI"]
[Sat May 23 21:41:14.596972 2026] [:error] [pid 44326:tid 44355] [client 4.228.100.214:21820] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-ver.php"] [unique_id "ahGuesyrPrcAqE-FOKKttQAAAcA"]
[Sat May 23 21:41:15.242110 2026] [:error] [pid 30941:tid 30999] [client 4.228.100.214:38439] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-ver.php"] [unique_id "ahGue3TIgjSDhiZmvlX_9wAAAFc"]
[Sat May 23 21:41:15.883379 2026] [:error] [pid 30941:tid 30987] [client 4.228.100.214:13001] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-ver.php"] [unique_id "ahGue3TIgjSDhiZmvlX_-wAAAEs"]
[Sat May 23 21:41:16.694150 2026] [:error] [pid 30941:tid 30988] [client 4.228.100.214:9471] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lala.php"] [unique_id "ahGufHTIgjSDhiZmvlX__gAAAEw"]
[Sat May 23 21:41:17.316293 2026] [:error] [pid 44296:tid 44321] [client 4.228.100.214:28722] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lala.php"] [unique_id "ahGufZdrUdFI6ijvMkmV5wAAAVc"]
[Sat May 23 21:41:18.008642 2026] [:error] [pid 31039:tid 31064] [client 4.228.100.214:9424] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lala.php"] [unique_id "ahGufqIYDYo8WvA5zLJMpAAAANc"]
[Sat May 23 21:41:18.665930 2026] [:error] [pid 30941:tid 30998] [client 4.228.100.214:26666] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lala.php"] [unique_id "ahGufnTIgjSDhiZmvlUABwAAAFY"]
[Sat May 23 21:41:19.309148 2026] [:error] [pid 44325:tid 44341] [client 4.228.100.214:29317] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sbhu.php"] [unique_id "ahGuf1gUQb4puB_2yV8vpgAAAY0"]
[Sat May 23 21:41:19.949598 2026] [:error] [pid 44296:tid 44318] [client 4.228.100.214:38454] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sbhu.php"] [unique_id "ahGuf5drUdFI6ijvMkmV6QAAAVQ"]
[Sat May 23 21:41:20.636688 2026] [:error] [pid 44296:tid 44307] [client 4.228.100.214:38425] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sbhu.php"] [unique_id "ahGugJdrUdFI6ijvMkmV6wAAAUk"]
[Sat May 23 21:41:21.273349 2026] [:error] [pid 30940:tid 30955] [client 4.228.100.214:1627] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sbhu.php"] [unique_id "ahGugZqUP2XZmzp7RDoSfQAAAAY"]
[Sat May 23 21:41:21.988637 2026] [:error] [pid 44326:tid 44364] [client 4.228.100.214:1660] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-sing.php"] [unique_id "ahGugcyrPrcAqE-FOKKtuAAAAck"]
[Sat May 23 21:41:22.642179 2026] [:error] [pid 44296:tid 44300] [client 4.228.100.214:1405] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-sing.php"] [unique_id "ahGugpdrUdFI6ijvMkmV8QAAAUI"]
[Sat May 23 21:41:23.278867 2026] [:error] [pid 31039:tid 31042] [client 4.228.100.214:29373] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-sing.php"] [unique_id "ahGug6IYDYo8WvA5zLJMrgAAAME"]
[Sat May 23 21:41:23.938507 2026] [:error] [pid 30941:tid 30981] [client 4.228.100.214:38410] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-sing.php"] [unique_id "ahGug3TIgjSDhiZmvlUADAAAAEU"]
[Sat May 23 21:41:24.578325 2026] [:error] [pid 31039:tid 31041] [client 4.228.100.214:29313] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file59.php"] [unique_id "ahGuhKIYDYo8WvA5zLJMsQAAAMA"]
[Sat May 23 21:41:25.202920 2026] [:error] [pid 31039:tid 31045] [client 4.228.100.214:13045] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file59.php"] [unique_id "ahGuhaIYDYo8WvA5zLJMsgAAAMQ"]
[Sat May 23 21:41:25.851842 2026] [:error] [pid 31039:tid 31064] [client 4.228.100.214:12992] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file59.php"] [unique_id "ahGuhaIYDYo8WvA5zLJMtgAAANc"]
[Sat May 23 21:41:26.504466 2026] [:error] [pid 31039:tid 31059] [client 4.228.100.214:21765] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file59.php"] [unique_id "ahGuhqIYDYo8WvA5zLJMugAAANI"]
[Sat May 23 21:41:27.130831 2026] [:error] [pid 30940:tid 30959] [client 4.228.100.214:1619] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-slss.php"] [unique_id "ahGuh5qUP2XZmzp7RDoShQAAAAo"]
[Sat May 23 21:41:27.751407 2026] [:error] [pid 31039:tid 31055] [client 4.228.100.214:38421] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-slss.php"] [unique_id "ahGuh6IYDYo8WvA5zLJMvQAAAM4"]
[Sat May 23 21:41:28.379184 2026] [:error] [pid 44326:tid 44379] [client 4.228.100.214:21804] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-slss.php"] [unique_id "ahGuiMyrPrcAqE-FOKKtwAAAAdg"]
[Sat May 23 21:41:29.028003 2026] [:error] [pid 44296:tid 44313] [client 4.228.100.214:1634] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-slss.php"] [unique_id "ahGuiZdrUdFI6ijvMkmV9wAAAU8"]
[Sat May 23 21:41:29.647291 2026] [:error] [pid 44296:tid 44314] [client 4.228.100.214:21799] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x.php"] [unique_id "ahGuiZdrUdFI6ijvMkmV-AAAAVA"]
[Sat May 23 21:41:30.280529 2026] [:error] [pid 44326:tid 44370] [client 4.228.100.214:1397] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x.php"] [unique_id "ahGuisyrPrcAqE-FOKKtwwAAAc8"]
[Sat May 23 21:41:30.914357 2026] [:error] [pid 44326:tid 44362] [client 4.228.100.214:12185] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x.php"] [unique_id "ahGuisyrPrcAqE-FOKKtxAAAAcc"]
[Sat May 23 21:41:31.552986 2026] [:error] [pid 44326:tid 44363] [client 4.228.100.214:15626] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x.php"] [unique_id "ahGui8yrPrcAqE-FOKKtxgAAAcg"]
[Sat May 23 21:41:32.169202 2026] [:error] [pid 44326:tid 44368] [client 4.228.100.214:15622] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/atkno.php"] [unique_id "ahGujMyrPrcAqE-FOKKtyAAAAc0"]
[Sat May 23 21:41:32.786712 2026] [:error] [pid 30941:tid 30982] [client 4.228.100.214:12197] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/atkno.php"] [unique_id "ahGujHTIgjSDhiZmvlUAFAAAAEY"]
[Sat May 23 21:41:33.408917 2026] [:error] [pid 31039:tid 31056] [client 4.228.100.214:29367] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/atkno.php"] [unique_id "ahGujaIYDYo8WvA5zLJMwAAAAM8"]
[Sat May 23 21:41:34.081161 2026] [:error] [pid 44296:tid 44300] [client 4.228.100.214:8194] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/atkno.php"] [unique_id "ahGujpdrUdFI6ijvMkmV-wAAAUI"]
[Sat May 23 21:41:34.717433 2026] [:error] [pid 30942:tid 31014] [client 4.228.100.214:14763] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ff.php"] [unique_id "ahGujtUosz64YFiBlG17fAAAAIs"]
[Sat May 23 21:41:35.354146 2026] [:error] [pid 44325:tid 44341] [client 4.228.100.214:29374] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ff.php"] [unique_id "ahGuj1gUQb4puB_2yV8vugAAAY0"]
[Sat May 23 21:41:35.991762 2026] [:error] [pid 30941:tid 30987] [client 4.228.100.214:21795] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ff.php"] [unique_id "ahGuj3TIgjSDhiZmvlUAHQAAAEs"]
[Sat May 23 21:41:36.612134 2026] [:error] [pid 25876:tid 25895] [client 4.228.100.214:1647] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ff.php"] [unique_id "ahGukASpWUCKPezIBJC1bQAAARE"]
[Sat May 23 21:41:37.248363 2026] [:error] [pid 25876:tid 25902] [client 4.228.100.214:9412] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/yas.php"] [unique_id "ahGukQSpWUCKPezIBJC1cQAAARg"]
[Sat May 23 21:41:37.884453 2026] [:error] [pid 44325:tid 44336] [client 4.228.100.214:21800] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/yas.php"] [unique_id "ahGukVgUQb4puB_2yV8vvAAAAYg"]
[Sat May 23 21:41:38.513748 2026] [:error] [pid 25876:tid 25887] [client 4.228.100.214:12160] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/yas.php"] [unique_id "ahGukgSpWUCKPezIBJC1dwAAAQk"]
[Sat May 23 21:41:39.130946 2026] [:error] [pid 25876:tid 25893] [client 4.228.100.214:15668] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/yas.php"] [unique_id "ahGukwSpWUCKPezIBJC1eQAAAQ8"]
[Sat May 23 21:41:39.758070 2026] [:error] [pid 44325:tid 44348] [client 4.228.100.214:21769] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/png.php"] [unique_id "ahGuk1gUQb4puB_2yV8vvQAAAZQ"]
[Sat May 23 21:41:40.384689 2026] [:error] [pid 30942:tid 31015] [client 4.228.100.214:14731] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/png.php"] [unique_id "ahGulNUosz64YFiBlG17fwAAAIw"]
[Sat May 23 21:41:41.003860 2026] [:error] [pid 30942:tid 31027] [client 4.228.100.214:38451] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/png.php"] [unique_id "ahGuldUosz64YFiBlG17gAAAAJg"]
[Sat May 23 21:41:41.621019 2026] [:error] [pid 31039:tid 31054] [client 4.228.100.214:24968] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/png.php"] [unique_id "ahGulaIYDYo8WvA5zLJMwgAAAM0"]
[Sat May 23 21:41:42.237726 2026] [:error] [pid 44325:tid 44339] [client 4.228.100.214:32888] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wmore1.php"] [unique_id "ahGullgUQb4puB_2yV8vwQAAAYs"]
[Sat May 23 21:41:42.858026 2026] [:error] [pid 30942:tid 31026] [client 4.228.100.214:15648] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wmore1.php"] [unique_id "ahGultUosz64YFiBlG17gQAAAJc"]
[Sat May 23 21:41:43.477216 2026] [:error] [pid 25876:tid 25889] [client 4.228.100.214:30688] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wmore1.php"] [unique_id "ahGulwSpWUCKPezIBJC1fgAAAQs"]
[Sat May 23 21:41:44.103415 2026] [:error] [pid 30941:tid 30984] [client 4.228.100.214:26685] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wmore1.php"] [unique_id "ahGumHTIgjSDhiZmvlUAMwAAAEg"]
[Sat May 23 21:41:44.733292 2026] [:error] [pid 30941:tid 30988] [client 4.228.100.214:38411] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ah25.php"] [unique_id "ahGumHTIgjSDhiZmvlUANQAAAEw"]
[Sat May 23 21:41:45.349094 2026] [:error] [pid 44326:tid 44356] [client 4.228.100.214:15618] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ah25.php"] [unique_id "ahGumcyrPrcAqE-FOKKt3AAAAcE"]
[Sat May 23 21:41:45.966843 2026] [:error] [pid 30941:tid 30992] [client 4.228.100.214:12205] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ah25.php"] [unique_id "ahGumXTIgjSDhiZmvlUAOwAAAFA"]
[Sat May 23 21:41:46.598653 2026] [:error] [pid 30941:tid 30989] [client 4.228.100.214:26466] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ah25.php"] [unique_id "ahGumnTIgjSDhiZmvlUAPAAAAE0"]
[Sat May 23 21:41:47.225876 2026] [:error] [pid 44296:tid 44299] [client 4.228.100.214:21768] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/forbidals.php"] [unique_id "ahGum5drUdFI6ijvMkmWBAAAAUE"]
[Sat May 23 21:41:47.875389 2026] [:error] [pid 25876:tid 25888] [client 4.228.100.214:29327] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/forbidals.php"] [unique_id "ahGumwSpWUCKPezIBJC1gQAAAQo"]
[Sat May 23 21:41:48.508425 2026] [:error] [pid 25876:tid 25901] [client 4.228.100.214:21770] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/forbidals.php"] [unique_id "ahGunASpWUCKPezIBJC1ggAAARc"]
[Sat May 23 21:41:49.136170 2026] [:error] [pid 44326:tid 44367] [client 4.228.100.214:14765] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/forbidals.php"] [unique_id "ahGuncyrPrcAqE-FOKKt3gAAAcw"]
[Sat May 23 21:41:49.754518 2026] [:error] [pid 44296:tid 44320] [client 4.228.100.214:32271] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lv.php"] [unique_id "ahGunZdrUdFI6ijvMkmWCgAAAVY"]
[Sat May 23 21:41:50.400615 2026] [:error] [pid 25876:tid 25879] [client 4.228.100.214:38424] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lv.php"] [unique_id "ahGungSpWUCKPezIBJC1hQAAAQE"]
[Sat May 23 21:41:51.016997 2026] [:error] [pid 30941:tid 30980] [client 4.228.100.214:30662] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lv.php"] [unique_id "ahGun3TIgjSDhiZmvlUARAAAAEQ"]
[Sat May 23 21:41:51.636015 2026] [:error] [pid 30941:tid 30988] [client 4.228.100.214:38416] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lv.php"] [unique_id "ahGun3TIgjSDhiZmvlUASAAAAEw"]
[Sat May 23 21:41:52.579758 2026] [proxy_fcgi:error] [pid 30940:tid 30956] [client 4.228.100.214:30676] AH01071: Got error 'Primary script unknown'
[Sat May 23 21:41:52.892424 2026] [proxy_fcgi:error] [pid 30940:tid 30969] [client 4.228.100.214:30676] AH01071: Got error 'Primary script unknown'
[Sat May 23 21:41:53.224136 2026] [proxy_fcgi:error] [pid 30940:tid 30967] [client 4.228.100.214:30676] AH01071: Got error 'Primary script unknown'
[Sat May 23 21:41:53.537323 2026] [proxy_fcgi:error] [pid 30940:tid 30962] [client 4.228.100.214:30676] AH01071: Got error 'Primary script unknown'
[Sat May 23 21:41:53.852379 2026] [proxy_fcgi:error] [pid 30940:tid 30964] [client 4.228.100.214:30676] AH01071: Got error 'Primary script unknown'
[Sat May 23 21:41:54.167171 2026] [proxy_fcgi:error] [pid 30940:tid 30965] [client 4.228.100.214:30676] AH01071: Got error 'Primary script unknown'
[Sat May 23 21:41:54.479280 2026] [proxy_fcgi:error] [pid 30940:tid 30953] [client 4.228.100.214:30676] AH01071: Got error 'Primary script unknown'
[Sat May 23 21:41:54.794663 2026] [proxy_fcgi:error] [pid 30940:tid 30963] [client 4.228.100.214:30676] AH01071: Got error 'Primary script unknown'
[Sat May 23 21:41:55.107860 2026] [proxy_fcgi:error] [pid 30940:tid 30961] [client 4.228.100.214:30676] AH01071: Got error 'Primary script unknown'
[Sat May 23 21:41:55.421418 2026] [proxy_fcgi:error] [pid 30940:tid 30970] [client 4.228.100.214:30676] AH01071: Got error 'Primary script unknown'
[Sat May 23 21:41:55.731320 2026] [:error] [pid 30940:tid 30950] [client 4.228.100.214:30676] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/like.php"] [unique_id "ahGuo5qUP2XZmzp7RDoSkwAAAAE"]
[Sat May 23 21:41:56.350315 2026] [:error] [pid 30941:tid 30993] [client 4.228.100.214:12178] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/like.php"] [unique_id "ahGupHTIgjSDhiZmvlUAVgAAAFE"]
[Sat May 23 21:41:57.038167 2026] [:error] [pid 31039:tid 31055] [client 4.228.100.214:12165] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/like.php"] [unique_id "ahGupaIYDYo8WvA5zLJMzwAAAM4"]
[Sat May 23 21:41:57.721266 2026] [:error] [pid 44296:tid 44298] [client 4.228.100.214:32274] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/like.php"] [unique_id "ahGupZdrUdFI6ijvMkmWDwAAAUA"]
[Sat May 23 21:41:58.365797 2026] [:error] [pid 44325:tid 44338] [client 4.228.100.214:32258] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mass.php"] [unique_id "ahGuplgUQb4puB_2yV8vyAAAAYo"]
[Sat May 23 21:41:58.986428 2026] [:error] [pid 31039:tid 31044] [client 4.228.100.214:25015] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mass.php"] [unique_id "ahGupqIYDYo8WvA5zLJM0gAAAMM"]
[Sat May 23 21:41:59.611104 2026] [:error] [pid 44326:tid 44374] [client 4.228.100.214:32858] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mass.php"] [unique_id "ahGup8yrPrcAqE-FOKKt7wAAAdM"]
[Sat May 23 21:42:00.238697 2026] [:error] [pid 44326:tid 44369] [client 4.228.100.214:24963] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mass.php"] [unique_id "ahGuqMyrPrcAqE-FOKKt8gAAAc4"]
[Sat May 23 21:42:00.866283 2026] [:error] [pid 30940:tid 30952] [client 4.228.100.214:32275] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/i.php"] [unique_id "ahGuqJqUP2XZmzp7RDoSlAAAAAM"]
[Sat May 23 21:42:01.484085 2026] [:error] [pid 44326:tid 44370] [client 4.228.100.214:32262] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/i.php"] [unique_id "ahGuqcyrPrcAqE-FOKKt-QAAAc8"]
[Sat May 23 21:42:02.102062 2026] [:error] [pid 31039:tid 31050] [client 4.228.100.214:23593] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/i.php"] [unique_id "ahGuqqIYDYo8WvA5zLJM1QAAAMk"]
[Sat May 23 21:42:02.739112 2026] [:error] [pid 44326:tid 44367] [client 4.228.100.214:32313] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/i.php"] [unique_id "ahGuqsyrPrcAqE-FOKKt_gAAAcw"]
[Sat May 23 21:42:03.371018 2026] [:error] [pid 30942:tid 31012] [client 4.228.100.214:30599] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/test.php"] [unique_id "ahGuq9Uosz64YFiBlG17hgAAAIk"]
[Sat May 23 21:42:04.001908 2026] [:error] [pid 30940:tid 30959] [client 4.228.100.214:8614] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/test.php"] [unique_id "ahGurJqUP2XZmzp7RDoSlQAAAAo"]
[Sat May 23 21:42:04.629410 2026] [:error] [pid 25876:tid 25880] [client 4.228.100.214:23559] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/test.php"] [unique_id "ahGurASpWUCKPezIBJC1iQAAAQI"]
[Sat May 23 21:42:05.285344 2026] [:error] [pid 30940:tid 30951] [client 4.228.100.214:28550] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/test.php"] [unique_id "ahGurZqUP2XZmzp7RDoSlwAAAAI"]
[Sat May 23 21:42:05.918103 2026] [:error] [pid 44326:tid 44379] [client 4.228.100.214:23602] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/la.php"] [unique_id "ahGurcyrPrcAqE-FOKKuAwAAAdg"]
[Sat May 23 21:42:06.533451 2026] [:error] [pid 44325:tid 44338] [client 4.228.100.214:19392] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/la.php"] [unique_id "ahGurlgUQb4puB_2yV8v0QAAAYo"]
[Sat May 23 21:42:07.155898 2026] [:error] [pid 44326:tid 44361] [client 4.228.100.214:25022] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/la.php"] [unique_id "ahGur8yrPrcAqE-FOKKuBgAAAcY"]
[Sat May 23 21:42:07.779513 2026] [:error] [pid 31039:tid 31052] [client 4.228.100.214:28568] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/la.php"] [unique_id "ahGur6IYDYo8WvA5zLJM3AAAAMs"]
[Sat May 23 21:42:08.399208 2026] [:error] [pid 31039:tid 31045] [client 4.228.100.214:8618] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/reze.php"] [unique_id "ahGusKIYDYo8WvA5zLJM3wAAAMQ"]
[Sat May 23 21:42:09.016118 2026] [:error] [pid 25876:tid 25896] [client 4.228.100.214:1155] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/reze.php"] [unique_id "ahGusQSpWUCKPezIBJC1jgAAARI"]
[Sat May 23 21:42:09.645274 2026] [:error] [pid 30940:tid 30960] [client 4.228.100.214:39797] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/reze.php"] [unique_id "ahGusZqUP2XZmzp7RDoSmgAAAAs"]
[Sat May 23 21:42:10.271497 2026] [:error] [pid 44326:tid 44367] [client 4.228.100.214:28548] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/reze.php"] [unique_id "ahGussyrPrcAqE-FOKKuCwAAAcw"]
[Sat May 23 21:42:10.922876 2026] [:error] [pid 30942:tid 31007] [client 4.228.100.214:8581] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/database.php"] [unique_id "ahGustUosz64YFiBlG17jAAAAIQ"]
[Sat May 23 21:42:11.564019 2026] [:error] [pid 30942:tid 31018] [client 4.228.100.214:28555] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/database.php"] [unique_id "ahGus9Uosz64YFiBlG17jwAAAI8"]
[Sat May 23 21:42:12.221514 2026] [:error] [pid 44326:tid 44375] [client 4.228.100.214:30628] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/database.php"] [unique_id "ahGutMyrPrcAqE-FOKKuEwAAAdQ"]
[Sat May 23 21:42:12.872858 2026] [:error] [pid 25876:tid 25897] [client 4.228.100.214:18026] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/database.php"] [unique_id "ahGutASpWUCKPezIBJC1kwAAARM"]
[Sat May 23 21:42:13.505572 2026] [:error] [pid 25876:tid 25891] [client 4.228.100.214:28121] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/favicon.php"] [unique_id "ahGutQSpWUCKPezIBJC1lAAAAQ0"]
[Sat May 23 21:42:14.134429 2026] [:error] [pid 44296:tid 44311] [client 4.228.100.214:8318] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/favicon.php"] [unique_id "ahGutpdrUdFI6ijvMkmWEQAAAU0"]
[Sat May 23 21:42:14.759124 2026] [:error] [pid 25876:tid 25884] [client 4.228.100.214:1833] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/favicon.php"] [unique_id "ahGutgSpWUCKPezIBJC1lwAAAQY"]
[Sat May 23 21:42:15.380991 2026] [:error] [pid 44296:tid 44321] [client 4.228.100.214:39756] [client 4.228.100.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/favicon.php"] [unique_id "ahGut5drUdFI6ijvMkmWEwAAAVc"]
[Sun May 24 08:19:47.121760 2026] [:error] [pid 50978:tid 51007] [client 185.213.175.92:36462] [client 185.213.175.92] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.git/config"] [unique_id "ahJEIyu0qFnUKJJuyO6VdAAAANQ"]
[Sun May 24 08:19:47.125684 2026] [:error] [pid 58521:tid 58523] [client 185.213.175.92:36466] [client 185.213.175.92] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.git/HEAD"] [unique_id "ahJEI2u03QVCX-cF2G_sXAAAAQA"]
[Sun May 24 17:22:42.193999 2026] [:error] [pid 23497:tid 23515] [client 88.151.33.24:33598] [client 88.151.33.24] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dwelectservices.com.au"] [uri "/.git/config"] [unique_id "ahLDYiPlV47QcYwd2v_g-gAAAU8"]
[Sun May 24 17:22:42.244292 2026] [:error] [pid 23497:tid 23519] [client 88.151.33.24:33606] [client 88.151.33.24] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dwelectservices.com.au"] [uri "/.git/HEAD"] [unique_id "ahLDYiPlV47QcYwd2v_g-wAAAVM"]
[Mon May 25 00:10:34.019537 2026] [proxy_fcgi:error] [pid 11368:tid 11377] [client 52.139.38.60:29933] AH01071: Got error 'Primary script unknown'
[Mon May 25 00:10:34.264967 2026] [proxy_fcgi:error] [pid 11368:tid 11378] [client 52.139.38.60:29933] AH01071: Got error 'Primary script unknown'
[Mon May 25 00:10:34.732954 2026] [proxy_fcgi:error] [pid 11368:tid 11382] [client 52.139.38.60:29933] AH01071: Got error 'Primary script unknown'
[Mon May 25 00:10:34.941607 2026] [proxy_fcgi:error] [pid 11368:tid 11392] [client 52.139.38.60:29933] AH01071: Got error 'Primary script unknown'
[Mon May 25 00:10:35.455945 2026] [proxy_fcgi:error] [pid 11368:tid 11370] [client 52.139.38.60:29933] AH01071: Got error 'Primary script unknown'
[Mon May 25 00:10:35.665450 2026] [proxy_fcgi:error] [pid 11368:tid 11386] [client 52.139.38.60:29933] AH01071: Got error 'Primary script unknown'
[Mon May 25 00:10:35.875005 2026] [proxy_fcgi:error] [pid 11368:tid 11383] [client 52.139.38.60:29933] AH01071: Got error 'Primary script unknown'
[Mon May 25 00:10:36.330025 2026] [:error] [pid 11368:tid 11393] [client 52.139.38.60:29933] [client 52.139.38.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/randkeyword.PhP7"] [unique_id "ahMi_Ifq_sTmmtTKm1VfKwAAARc"]
[Mon May 25 00:10:38.053281 2026] [:error] [pid 11280:tid 11288] [client 52.139.38.60:5898] [client 52.139.38.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/randkeyword.PhP7"] [unique_id "ahMi_oRn5s7laoSxy1Qx1wAAAEM"]
[Mon May 25 00:10:39.315495 2026] [:error] [pid 11282:tid 11362] [client 52.139.38.60:38042] [client 52.139.38.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/randkeyword.PhP7"] [unique_id "ahMi_-0bPyN3C7HZ1R_IHAAAANY"]
[Mon May 25 00:10:42.168023 2026] [:error] [pid 11280:tid 11294] [client 52.139.38.60:20066] [client 52.139.38.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/randkeyword.PhP7"] [unique_id "ahMjAoRn5s7laoSxy1Qx2gAAAEk"]
[Mon May 25 07:09:21.404711 2026] [:error] [pid 9303:tid 9349] [client 104.28.214.122:38628] [client 104.28.214.122] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/ms-themes.php"] [unique_id "ahOFIX3bQScbssitjPRD1wAAAE8"]
[Mon May 25 07:09:21.853083 2026] [:error] [pid 9398:tid 9403] [client 104.28.214.122:38668] [client 104.28.214.122] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/chosen.php"] [unique_id "ahOFIehIu7KstzsCua-3KwAAAMM"]
[Mon May 25 07:09:22.302473 2026] [:error] [pid 9304:tid 9385] [client 104.28.214.122:38798] [client 104.28.214.122] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/file.php"] [unique_id "ahOFIuVEV2qpMC_1UzSWBgAAAJg"]
[Mon May 25 08:38:10.478647 2026] [proxy_fcgi:error] [pid 62722:tid 62748] [client 20.151.114.114:20838] AH01071: Got error 'Primary script unknown'
[Tue May 26 01:10:33.660076 2026] [:error] [pid 62426:tid 62432] [client 185.100.87.250:30286] [client 185.100.87.250] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.git/config"] [unique_id "ahSCiUj3D3Mo8ANpTRBfxgAAAAI"]
[Tue May 26 01:10:34.940535 2026] [:error] [pid 62515:tid 62523] [client 107.189.14.4:39316] [client 107.189.14.4] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.dwelectservices.com.au"] [uri "/.DS_Store"] [unique_id "ahSCihig0_XsOwmnrv-MAgAAAMY"]
[Tue May 26 01:10:35.095110 2026] [:error] [pid 62426:tid 62441] [client 109.70.100.5:45858] [client 109.70.100.5] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/.DS_Store"] [unique_id "ahSCi0j3D3Mo8ANpTRBfyAAAAAs"]
[Tue May 26 01:10:35.173860 2026] [:error] [pid 62426:tid 62445] [client 185.241.208.71:38258] [client 185.241.208.71] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwelectservices.com.au"] [uri "/.git/config"] [unique_id "ahSCi0j3D3Mo8ANpTRBfyQAAAA8"]
[Tue May 26 01:10:38.681988 2026] [:error] [pid 62428:tid 62489] [client 171.25.193.132:39950] [client 171.25.193.132] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dwelectservices.com.au"] [uri "/.DS_Store"] [unique_id "ahSCjpNosGBa7mui3VSVxAAAAIU"]
[Tue May 26 11:15:34.532603 2026] [:error] [pid 20025:tid 20067] [client 134.199.171.224:53676] [client 134.199.171.224] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dwelectservices.com.au"] [uri "/.git/config"] [unique_id "ahUQVn7k8Vts-JPOkgUpZAAAAEI"]
[Tue May 26 11:15:34.613561 2026] [:error] [pid 20026:tid 20115] [client 134.199.171.224:38052] [client 134.199.171.224] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dwelectservices.com.au"] [uri "/.git/config"] [unique_id "ahUQVjXIXIr-5BZ8nR4vnAAAAJc"]
[Tue May 26 11:15:34.847722 2026] [:error] [pid 20025:tid 20070] [client 134.199.171.224:53690] [client 134.199.171.224] ModSecurity: Warning. Match of "pmFromFile userdata_wl_content_type" against "TX:0" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "17"] [id "210710"] [rev "5"] [msg "COMODO WAF: Request content type is not allowed by policy. Please update file userdata_wl_content_type.||www.dwelectservices.com.au|F|2"] [data "TX:0=text/plain"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.dwelectservices.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "ahUQVn7k8Vts-JPOkgUpaQAAAEU"]
[Tue May 26 11:15:34.896928 2026] [:error] [pid 20025:tid 20075] [client 134.199.171.224:53690] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/alfacgiapi/perl.alfa"] [unique_id "ahUQVn7k8Vts-JPOkgUpawAAAEo"]
[Tue May 26 11:15:34.897604 2026] [:error] [pid 20025:tid 20076] [client 134.199.171.224:53678] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/assets/js/frontend/jquery-file-upload/server/php/"] [unique_id "ahUQVn7k8Vts-JPOkgUpbAAAAEs"]
[Tue May 26 11:15:34.912406 2026] [:error] [pid 20026:tid 20103] [client 134.199.171.224:53700] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/assets/js/frontend/jquery-file-upload/server/php/"] [unique_id "ahUQVjXIXIr-5BZ8nR4vnwAAAIs"]
[Tue May 26 11:15:34.926567 2026] [:error] [pid 20025:tid 20072] [client 134.199.171.224:53710] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/assets/js/frontend/jquery-file-upload/server/php/"] [unique_id "ahUQVn7k8Vts-JPOkgUpbQAAAEc"]
[Tue May 26 11:15:34.942876 2026] [:error] [pid 20125:tid 20136] [client 134.199.171.224:53724] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/admin/blueimp-jQuery-File-Upload/server/php/"] [unique_id "ahUQVtk9jeWERFDLJc7asAAAAMk"]
[Tue May 26 11:15:34.951832 2026] [:error] [pid 55988:tid 55999] [client 134.199.171.224:53740] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/plugins/jQuery-File-Upload/server/php/"] [unique_id "ahUQVv3kVIz2sql52sfXywAAAQg"]
[Tue May 26 11:15:34.955680 2026] [:error] [pid 55988:tid 56009] [client 134.199.171.224:53756] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/upload/server/php/"] [unique_id "ahUQVv3kVIz2sql52sfXzAAAARI"]
[Tue May 26 11:15:34.956711 2026] [:error] [pid 55988:tid 55997] [client 134.199.171.224:53752] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/admin/blueimp-jQuery-File-Upload/server/php/"] [unique_id "ahUQVv3kVIz2sql52sfXzQAAAQY"]
[Tue May 26 11:15:34.963881 2026] [:error] [pid 20026:tid 20096] [client 134.199.171.224:53770] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/admin/jquery-file-upload/server/php/"] [unique_id "ahUQVjXIXIr-5BZ8nR4voAAAAIQ"]
[Tue May 26 11:15:34.965885 2026] [:error] [pid 20024:tid 20051] [client 134.199.171.224:53786] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/plugins/jQuery-File-Upload/server/php/"] [unique_id "ahUQVldk7QtxEB93NpdFlAAAAA0"]
[Tue May 26 11:15:34.998663 2026] [:error] [pid 55988:tid 55996] [client 134.199.171.224:53790] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/admin/blueimp-jQuery-File-Upload/server/php/"] [unique_id "ahUQVv3kVIz2sql52sfXzgAAAQU"]
[Tue May 26 11:15:34.999237 2026] [:error] [pid 20024:tid 20057] [client 134.199.171.224:53788] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/upload/server/php/"] [unique_id "ahUQVldk7QtxEB93NpdFlQAAABM"]
[Tue May 26 11:15:35.006474 2026] [:error] [pid 20024:tid 20048] [client 134.199.171.224:53792] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/admin/jquery-file-upload/server/php/"] [unique_id "ahUQV1dk7QtxEB93NpdFlgAAAAo"]
[Tue May 26 11:15:35.008549 2026] [:error] [pid 55988:tid 56003] [client 134.199.171.224:53796] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/plugins/jQuery-File-Upload/server/php/"] [unique_id "ahUQV_3kVIz2sql52sfXzwAAAQw"]
[Tue May 26 11:15:35.021255 2026] [:error] [pid 55988:tid 56011] [client 134.199.171.224:53798] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/asset_admin/assets/plugins/jquery-file-upload/server/php/"] [unique_id "ahUQV_3kVIz2sql52sfX0AAAARQ"]
[Tue May 26 11:15:35.023967 2026] [:error] [pid 20026:tid 20094] [client 134.199.171.224:53810] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/jquery-file-upload/server/php/"] [unique_id "ahUQVzXIXIr-5BZ8nR4voQAAAII"]
[Tue May 26 11:15:35.024378 2026] [:error] [pid 20024:tid 20038] [client 134.199.171.224:53822] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/blueimp-jQuery-File-Upload/server/php/"] [unique_id "ahUQV1dk7QtxEB93NpdFlwAAAAA"]
[Tue May 26 11:15:35.026965 2026] [:error] [pid 20024:tid 20047] [client 134.199.171.224:53824] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/assets/app-assets/data/jquery-file-upload/server/php/"] [unique_id "ahUQV1dk7QtxEB93NpdFmAAAAAk"]
[Tue May 26 11:15:35.042378 2026] [:error] [pid 20026:tid 20108] [client 134.199.171.224:53828] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/upload/server/php/"] [unique_id "ahUQVzXIXIr-5BZ8nR4vogAAAJA"]
[Tue May 26 11:15:35.045938 2026] [:error] [pid 20025:tid 20065] [client 134.199.171.224:53834] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/public/server/php/"] [unique_id "ahUQV37k8Vts-JPOkgUpbgAAAEA"]
[Tue May 26 11:15:35.048659 2026] [:error] [pid 55988:tid 56013] [client 134.199.171.224:53850] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/admin/jquery-file-upload/server/php/"] [unique_id "ahUQV_3kVIz2sql52sfX0QAAARY"]
[Tue May 26 11:15:35.075954 2026] [:error] [pid 20024:tid 20053] [client 134.199.171.224:53882] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/jquery-file-upload/server/php/"] [unique_id "ahUQV1dk7QtxEB93NpdFmQAAAA8"]
[Tue May 26 11:15:35.076499 2026] [:error] [pid 20125:tid 20127] [client 134.199.171.224:53880] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/asset_admin/assets/plugins/jquery-file-upload/server/php/"] [unique_id "ahUQV9k9jeWERFDLJc7asQAAAMA"]
[Tue May 26 11:15:35.078742 2026] [:error] [pid 20024:tid 20060] [client 134.199.171.224:53876] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/fileupload/server/php/"] [unique_id "ahUQV1dk7QtxEB93NpdFmgAAABY"]
[Tue May 26 11:15:35.080072 2026] [:error] [pid 55988:tid 56010] [client 134.199.171.224:53866] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/admin/server/php/"] [unique_id "ahUQV_3kVIz2sql52sfX0gAAARM"]
[Tue May 26 11:15:35.092003 2026] [:error] [pid 20125:tid 20137] [client 134.199.171.224:53914] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/admin/galerie/server/php/"] [unique_id "ahUQV9k9jeWERFDLJc7asgAAAMo"]
[Tue May 26 11:15:35.094512 2026] [:error] [pid 20026:tid 20092] [client 134.199.171.224:53898] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/assets/app-assets/data/jquery-file-upload/server/php/"] [unique_id "ahUQVzXIXIr-5BZ8nR4vowAAAIA"]
[Tue May 26 11:15:35.094726 2026] [:error] [pid 55988:tid 56002] [client 134.199.171.224:53888] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/blueimp-jQuery-File-Upload/server/php/"] [unique_id "ahUQV_3kVIz2sql52sfX0wAAAQs"]
[Tue May 26 11:15:35.111864 2026] [:error] [pid 55988:tid 56008] [client 134.199.171.224:53928] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/public/server/php/"] [unique_id "ahUQV_3kVIz2sql52sfX1AAAARE"]
[Tue May 26 11:15:35.114857 2026] [:error] [pid 55988:tid 55994] [client 134.199.171.224:53932] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/libraries/jsupload/server/php/"] [unique_id "ahUQV_3kVIz2sql52sfX1QAAAQM"]
[Tue May 26 11:15:35.118930 2026] [:error] [pid 55988:tid 56004] [client 134.199.171.224:53944] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/jquery-file-upload/server/php/"] [unique_id "ahUQV_3kVIz2sql52sfX1gAAAQ0"]
[Tue May 26 11:15:35.120171 2026] [:error] [pid 20024:tid 20044] [client 134.199.171.224:53946] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/asset_admin/assets/plugins/jquery-file-upload/server/php/"] [unique_id "ahUQV1dk7QtxEB93NpdFmwAAAAY"]
[Tue May 26 11:15:35.121725 2026] [:error] [pid 20125:tid 20134] [client 134.199.171.224:53950] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/fileupload/server/php/"] [unique_id "ahUQV9k9jeWERFDLJc7aswAAAMc"]
[Tue May 26 11:15:35.124595 2026] [:error] [pid 55988:tid 55995] [client 134.199.171.224:53958] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/admin/server/php/"] [unique_id "ahUQV_3kVIz2sql52sfX1wAAAQQ"]
[Tue May 26 11:15:35.132760 2026] [:error] [pid 20024:tid 20058] [client 134.199.171.224:53962] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/admin/galerie/server/php/"] [unique_id "ahUQV1dk7QtxEB93NpdFnAAAABQ"]
[Tue May 26 11:15:35.137891 2026] [:error] [pid 20026:tid 20104] [client 134.199.171.224:53976] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/assets/app-assets/data/jquery-file-upload/server/php/"] [unique_id "ahUQVzXIXIr-5BZ8nR4vpAAAAIw"]
[Tue May 26 11:15:35.141143 2026] [:error] [pid 20024:tid 20039] [client 134.199.171.224:53964] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/blueimp-jQuery-File-Upload/server/php/"] [unique_id "ahUQV1dk7QtxEB93NpdFnQAAAAE"]
[Tue May 26 11:15:35.155107 2026] [:error] [pid 20026:tid 20110] [client 134.199.171.224:53986] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/public/server/php/"] [unique_id "ahUQVzXIXIr-5BZ8nR4vpQAAAJI"]
[Tue May 26 11:15:35.156534 2026] [:error] [pid 55988:tid 56001] [client 134.199.171.224:53992] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/libraries/jsupload/server/php/"] [unique_id "ahUQV_3kVIz2sql52sfX2AAAAQo"]
[Tue May 26 11:15:35.163923 2026] [:error] [pid 55988:tid 56014] [client 134.199.171.224:53994] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/fileupload/server/php/"] [unique_id "ahUQV_3kVIz2sql52sfX2QAAARc"]
[Tue May 26 11:15:35.164781 2026] [:error] [pid 55988:tid 56006] [client 134.199.171.224:53998] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/assets/plugins/js/server/php/"] [unique_id "ahUQV_3kVIz2sql52sfX2gAAAQ8"]
[Tue May 26 11:15:35.166615 2026] [:error] [pid 20024:tid 20059] [client 134.199.171.224:54004] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/admin/server/php/"] [unique_id "ahUQV1dk7QtxEB93NpdFngAAABU"]
[Tue May 26 11:15:35.168893 2026] [:error] [pid 20026:tid 20106] [client 134.199.171.224:54012] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/assets/global/plugins/jquery-file-upload/server/php/"] [unique_id "ahUQVzXIXIr-5BZ8nR4vpgAAAI4"]
[Tue May 26 11:15:35.177500 2026] [:error] [pid 20026:tid 20116] [client 134.199.171.224:54016] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/admin/galerie/server/php/"] [unique_id "ahUQVzXIXIr-5BZ8nR4vpwAAAJg"]
[Tue May 26 11:15:35.195584 2026] [:error] [pid 20125:tid 20146] [client 134.199.171.224:54032] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/assets/global/plugins/server/php/"] [unique_id "ahUQV9k9jeWERFDLJc7atAAAANM"]
[Tue May 26 11:15:35.203980 2026] [:error] [pid 20125:tid 20148] [client 134.199.171.224:54036] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/libraries/jsupload/server/php/"] [unique_id "ahUQV9k9jeWERFDLJc7atQAAANU"]
[Tue May 26 11:15:35.205867 2026] [:error] [pid 55988:tid 55992] [client 134.199.171.224:54050] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/assets/plugins/js/server/php/"] [unique_id "ahUQV_3kVIz2sql52sfX2wAAAQE"]
[Tue May 26 11:15:35.210453 2026] [:error] [pid 20024:tid 20040] [client 134.199.171.224:54062] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/assets/global/plugins/jquery-file-upload/server/php/"] [unique_id "ahUQV1dk7QtxEB93NpdFnwAAAAI"]
[Tue May 26 11:15:35.229965 2026] [:error] [pid 55988:tid 55991] [client 134.199.171.224:54074] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/assets/plugins/js/jquery-file-upload/server/php/"] [unique_id "ahUQV_3kVIz2sql52sfX3AAAAQA"]
[Tue May 26 11:15:35.236196 2026] [:error] [pid 20024:tid 20054] [client 134.199.171.224:54086] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/assets/global/plugins/server/php/"] [unique_id "ahUQV1dk7QtxEB93NpdFoAAAABA"]
[Tue May 26 11:15:35.243229 2026] [:error] [pid 55988:tid 56000] [client 134.199.171.224:54098] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/assets/plugins/jquery-file-upload/server/php/"] [unique_id "ahUQV_3kVIz2sql52sfX3QAAAQk"]
[Tue May 26 11:15:35.247084 2026] [:error] [pid 20026:tid 20102] [client 134.199.171.224:54114] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/assets/plugins/js/server/php/"] [unique_id "ahUQVzXIXIr-5BZ8nR4vqAAAAIo"]
[Tue May 26 11:15:35.252535 2026] [:error] [pid 20024:tid 20046] [client 134.199.171.224:54128] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/assets/global/plugins/jquery-file-upload/server/php/"] [unique_id "ahUQV1dk7QtxEB93NpdFoQAAAAg"]
[Tue May 26 11:15:35.259949 2026] [:error] [pid 55988:tid 55998] [client 134.199.171.224:54144] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/assets/plugins/server/php/"] [unique_id "ahUQV_3kVIz2sql52sfX3gAAAQc"]
[Tue May 26 11:15:35.273508 2026] [:error] [pid 20024:tid 20050] [client 134.199.171.224:54158] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/assets/plugins/js/jquery-file-upload/server/php/"] [unique_id "ahUQV1dk7QtxEB93NpdFogAAAAw"]
[Tue May 26 11:15:35.277324 2026] [:error] [pid 55988:tid 56005] [client 134.199.171.224:54160] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/assets/global/plugins/server/php/"] [unique_id "ahUQV_3kVIz2sql52sfX3wAAAQ4"]
[Tue May 26 11:15:35.286305 2026] [:error] [pid 20026:tid 20098] [client 134.199.171.224:54172] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/assets/plugins/jquery-file-upload/server/php/"] [unique_id "ahUQVzXIXIr-5BZ8nR4vqQAAAIY"]
[Tue May 26 11:15:35.303052 2026] [:error] [pid 55988:tid 56015] [client 134.199.171.224:54188] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/assets/plugins/server/php/"] [unique_id "ahUQV_3kVIz2sql52sfX4AAAARg"]
[Tue May 26 11:15:35.316825 2026] [:error] [pid 55988:tid 56012] [client 134.199.171.224:54196] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/assets/plugins/js/jquery-file-upload/server/php/"] [unique_id "ahUQV_3kVIz2sql52sfX4QAAARU"]
[Tue May 26 11:15:35.334401 2026] [:error] [pid 55988:tid 55999] [client 134.199.171.224:54208] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/assets/plugins/jquery-file-upload/server/php/"] [unique_id "ahUQV_3kVIz2sql52sfX4gAAAQg"]
[Tue May 26 11:15:35.350415 2026] [:error] [pid 55988:tid 56009] [client 134.199.171.224:54212] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/assets/plugins/server/php/"] [unique_id "ahUQV_3kVIz2sql52sfX4wAAARI"]
[Tue May 26 11:15:35.453133 2026] [:error] [pid 55988:tid 55997] [client 134.199.171.224:54226] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/plugins/js/jquery-file-upload/server/php/"] [unique_id "ahUQV_3kVIz2sql52sfX5QAAAQY"]
[Tue May 26 11:15:35.453164 2026] [:error] [pid 55988:tid 55996] [client 134.199.171.224:54230] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/asset/server/php/"] [unique_id "ahUQV_3kVIz2sql52sfX5AAAAQU"]
[Tue May 26 11:15:35.456037 2026] [:error] [pid 55988:tid 56003] [client 134.199.171.224:54244] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/js/server/php/"] [unique_id "ahUQV_3kVIz2sql52sfX5gAAAQw"]
[Tue May 26 11:15:35.466936 2026] [:error] [pid 55988:tid 56011] [client 134.199.171.224:54258] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/asset/kcfinder/upload.php"] [unique_id "ahUQV_3kVIz2sql52sfX5wAAARQ"]
[Tue May 26 11:15:35.469901 2026] [:error] [pid 55988:tid 56013] [client 134.199.171.224:54264] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/assets/jquery-file-upload/server/php/"] [unique_id "ahUQV_3kVIz2sql52sfX6AAAARY"]
[Tue May 26 11:15:35.498251 2026] [:error] [pid 55988:tid 56002] [client 134.199.171.224:54280] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/asset/server/php/"] [unique_id "ahUQV_3kVIz2sql52sfX6QAAAQs"]
[Tue May 26 11:15:35.498837 2026] [:error] [pid 55988:tid 56010] [client 134.199.171.224:54274] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/plugins/js/jquery-file-upload/server/php/"] [unique_id "ahUQV_3kVIz2sql52sfX6gAAARM"]
[Tue May 26 11:15:35.502031 2026] [:error] [pid 55988:tid 56008] [client 134.199.171.224:54288] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/js/server/php/"] [unique_id "ahUQV_3kVIz2sql52sfX6wAAARE"]
[Tue May 26 11:15:35.509867 2026] [:error] [pid 55988:tid 55994] [client 134.199.171.224:54290] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/asset/kcfinder/upload.php"] [unique_id "ahUQV_3kVIz2sql52sfX7AAAAQM"]
[Tue May 26 11:15:35.514620 2026] [:error] [pid 55988:tid 56010] [client 134.199.171.224:54296] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/assets/server/php/"] [unique_id "ahUQV_3kVIz2sql52sfX7QAAARM"]
[Tue May 26 11:15:35.516399 2026] [:error] [pid 20024:tid 20042] [client 134.199.171.224:54298] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/assets/jquery-file-upload/server/php/"] [unique_id "ahUQV1dk7QtxEB93NpdFowAAAAQ"]
[Tue May 26 11:15:35.517800 2026] [:error] [pid 20024:tid 20062] [client 134.199.171.224:54314] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/assets/kcfinder/upload.php"] [unique_id "ahUQV1dk7QtxEB93NpdFpAAAABg"]
[Tue May 26 11:15:35.522930 2026] [:error] [pid 20125:tid 20141] [client 134.199.171.224:54318] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/plugins/server/php/"] [unique_id "ahUQV9k9jeWERFDLJc7atgAAAM4"]
[Tue May 26 11:15:35.531713 2026] [:error] [pid 20024:tid 20055] [client 134.199.171.224:54322] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/js/jquery-file-upload/server/php/"] [unique_id "ahUQV1dk7QtxEB93NpdFpQAAABE"]
[Tue May 26 11:15:35.533573 2026] [:error] [pid 20024:tid 20062] [client 134.199.171.224:54328] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/plugin/server/php/"] [unique_id "ahUQV1dk7QtxEB93NpdFpgAAABg"]
[Tue May 26 11:15:35.535636 2026] [:error] [pid 20024:tid 20061] [client 134.199.171.224:54332] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/kcfinder/upload.php"] [unique_id "ahUQV1dk7QtxEB93NpdFpwAAABc"]
[Tue May 26 11:15:35.539918 2026] [:error] [pid 20024:tid 20049] [client 134.199.171.224:54346] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/asset/server/php/"] [unique_id "ahUQV1dk7QtxEB93NpdFqAAAAAs"]
[Tue May 26 11:15:35.541129 2026] [:error] [pid 20024:tid 20045] [client 134.199.171.224:54348] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/plugins/js/jquery-file-upload/server/php/"] [unique_id "ahUQV1dk7QtxEB93NpdFqQAAAAc"]
[Tue May 26 11:15:35.550110 2026] [:error] [pid 20024:tid 20041] [client 134.199.171.224:54372] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/js/server/php/"] [unique_id "ahUQV1dk7QtxEB93NpdFqgAAAAM"]
[Tue May 26 11:15:35.551727 2026] [:error] [pid 20025:tid 20080] [client 134.199.171.224:54362] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/js/kcfinder/upload.php"] [unique_id "ahUQV37k8Vts-JPOkgUpcAAAAE8"]
[Tue May 26 11:15:35.559077 2026] [:error] [pid 20024:tid 20056] [client 134.199.171.224:54380] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/assets/server/php/"] [unique_id "ahUQV1dk7QtxEB93NpdFqwAAABI"]
[Tue May 26 11:15:35.560562 2026] [:error] [pid 20024:tid 20052] [client 134.199.171.224:54376] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/asset/kcfinder/upload.php"] [unique_id "ahUQV1dk7QtxEB93NpdFrAAAAA4"]
[Tue May 26 11:15:35.561490 2026] [:error] [pid 20024:tid 20051] [client 134.199.171.224:54396] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/assets/jquery-file-upload/server/php/"] [unique_id "ahUQV1dk7QtxEB93NpdFrQAAAA0"]
[Tue May 26 11:15:35.563689 2026] [:error] [pid 55988:tid 55995] [client 134.199.171.224:54400] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/assets/kcfinder/upload.php"] [unique_id "ahUQV_3kVIz2sql52sfX7gAAAQQ"]
[Tue May 26 11:15:35.575416 2026] [:error] [pid 20024:tid 20056] [client 134.199.171.224:54406] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/plugins/server/php/"] [unique_id "ahUQV1dk7QtxEB93NpdFrgAAABI"]
[Tue May 26 11:15:35.577113 2026] [:error] [pid 20025:tid 20082] [client 134.199.171.224:54414] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/js/jquery-file-upload/server/php/"] [unique_id "ahUQV37k8Vts-JPOkgUpcQAAAFE"]
[Tue May 26 11:15:35.577846 2026] [:error] [pid 20125:tid 20142] [client 134.199.171.224:54416] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/plugin/server/php/"] [unique_id "ahUQV9k9jeWERFDLJc7atwAAAM8"]
[Tue May 26 11:15:35.584396 2026] [:error] [pid 20024:tid 20048] [client 134.199.171.224:54420] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/kcfinder/upload.php"] [unique_id "ahUQV1dk7QtxEB93NpdFrwAAAAo"]
[Tue May 26 11:15:35.593906 2026] [:error] [pid 20125:tid 20151] [client 134.199.171.224:54428] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/js/kcfinder/upload.php"] [unique_id "ahUQV9k9jeWERFDLJc7auAAAANg"]
[Tue May 26 11:15:35.599806 2026] [:error] [pid 20024:tid 20038] [client 134.199.171.224:54438] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/assets/server/php/"] [unique_id "ahUQV1dk7QtxEB93NpdFsAAAAAA"]
[Tue May 26 11:15:35.606760 2026] [:error] [pid 20024:tid 20047] [client 134.199.171.224:54448] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/assets/kcfinder/upload.php"] [unique_id "ahUQV1dk7QtxEB93NpdFsQAAAAk"]
[Tue May 26 11:15:35.615341 2026] [:error] [pid 20024:tid 20053] [client 134.199.171.224:54464] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/plugins/server/php/"] [unique_id "ahUQV1dk7QtxEB93NpdFsgAAAA8"]
[Tue May 26 11:15:35.619417 2026] [:error] [pid 55988:tid 56001] [client 134.199.171.224:54480] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/js/jquery-file-upload/server/php/"] [unique_id "ahUQV_3kVIz2sql52sfX7wAAAQo"]
[Tue May 26 11:15:35.620178 2026] [:error] [pid 55988:tid 56014] [client 134.199.171.224:54484] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/plugin/server/php/"] [unique_id "ahUQV_3kVIz2sql52sfX8AAAARc"]
[Tue May 26 11:15:35.625588 2026] [:error] [pid 20026:tid 20111] [client 134.199.171.224:54486] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/kcfinder/upload.php"] [unique_id "ahUQVzXIXIr-5BZ8nR4vqgAAAJM"]
[Tue May 26 11:15:35.635686 2026] [:error] [pid 20026:tid 20099] [client 134.199.171.224:54502] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/js/kcfinder/upload.php"] [unique_id "ahUQVzXIXIr-5BZ8nR4vqwAAAIc"]
[Tue May 26 11:15:35.660415 2026] [:error] [pid 55988:tid 56006] [client 134.199.171.224:54516] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/assets/plugins/kcfinder/upload.php"] [unique_id "ahUQV_3kVIz2sql52sfX8gAAAQ8"]
[Tue May 26 11:15:35.667367 2026] [:error] [pid 20026:tid 20105] [client 134.199.171.224:54524] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ckeditor/kcfinder/upload.php"] [unique_id "ahUQVzXIXIr-5BZ8nR4vrAAAAI0"]
[Tue May 26 11:15:35.679106 2026] [:error] [pid 20026:tid 20109] [client 134.199.171.224:54538] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/assets/js/kcfinder/upload.php"] [unique_id "ahUQVzXIXIr-5BZ8nR4vrQAAAJE"]
[Tue May 26 11:15:35.701047 2026] [:error] [pid 20024:tid 20058] [client 134.199.171.224:54544] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/assets/plugins/kcfinder/upload.php"] [unique_id "ahUQV1dk7QtxEB93NpdFswAAABQ"]
[Tue May 26 11:15:35.710192 2026] [:error] [pid 20026:tid 20114] [client 134.199.171.224:54558] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ckeditor/kcfinder/upload.php"] [unique_id "ahUQVzXIXIr-5BZ8nR4vrgAAAJY"]
[Tue May 26 11:15:35.711988 2026] [:error] [pid 20024:tid 20039] [client 134.199.171.224:54560] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/kcfinder/upload.php"] [unique_id "ahUQV1dk7QtxEB93NpdFtAAAAAE"]
[Tue May 26 11:15:35.719988 2026] [:error] [pid 20026:tid 20100] [client 134.199.171.224:54574] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/plugins/kcfinder/upload.php"] [unique_id "ahUQVzXIXIr-5BZ8nR4vrwAAAIg"]
[Tue May 26 11:15:35.721175 2026] [:error] [pid 20125:tid 20133] [client 134.199.171.224:54588] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/assets/js/kcfinder/upload.php"] [unique_id "ahUQV9k9jeWERFDLJc7auQAAAMY"]
[Tue May 26 11:15:35.725361 2026] [:error] [pid 20024:tid 20059] [client 134.199.171.224:54604] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/lib/kcfinder/upload.php"] [unique_id "ahUQV1dk7QtxEB93NpdFtQAAABU"]
[Tue May 26 11:15:35.742748 2026] [:error] [pid 55988:tid 55992] [client 134.199.171.224:54622] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/libs/kcfinder/upload.php"] [unique_id "ahUQV_3kVIz2sql52sfX8wAAAQE"]
[Tue May 26 11:15:35.742949 2026] [:error] [pid 20026:tid 20107] [client 134.199.171.224:54618] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ckeditor/plugins/kcfinder/upload.php"] [unique_id "ahUQVzXIXIr-5BZ8nR4vsAAAAI8"]
[Tue May 26 11:15:35.743948 2026] [:error] [pid 20026:tid 20093] [client 134.199.171.224:54638] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/assets/plugins/kcfinder/upload.php"] [unique_id "ahUQVzXIXIr-5BZ8nR4vsQAAAIE"]
[Tue May 26 11:15:35.746149 2026] [:error] [pid 20125:tid 20129] [client 134.199.171.224:54640] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/components/kcfinder/upload.php"] [unique_id "ahUQV9k9jeWERFDLJc7augAAAMI"]
[Tue May 26 11:15:35.750789 2026] [:error] [pid 20026:tid 20101] [client 134.199.171.224:54644] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ckeditor/kcfinder/upload.php"] [unique_id "ahUQVzXIXIr-5BZ8nR4vsgAAAIk"]
[Tue May 26 11:15:35.754753 2026] [:error] [pid 20024:tid 20040] [client 134.199.171.224:54660] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/kcfinder/upload.php"] [unique_id "ahUQV1dk7QtxEB93NpdFtgAAAAI"]
[Tue May 26 11:15:35.759955 2026] [:error] [pid 20125:tid 20131] [client 134.199.171.224:54666] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/core/scripts/wysiwyg/kcfinder/upload.php"] [unique_id "ahUQV9k9jeWERFDLJc7auwAAAMQ"]
[Tue May 26 11:15:35.762648 2026] [:error] [pid 20026:tid 20115] [client 134.199.171.224:54672] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/plugins/kcfinder/upload.php"] [unique_id "ahUQVzXIXIr-5BZ8nR4vswAAAJc"]
[Tue May 26 11:15:35.763528 2026] [:error] [pid 20026:tid 20097] [client 134.199.171.224:54686] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/js/tinymce/kcfinder/upload.php"] [unique_id "ahUQVzXIXIr-5BZ8nR4vtAAAAIU"]
[Tue May 26 11:15:35.765111 2026] [:error] [pid 20026:tid 20112] [client 134.199.171.224:54700] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/assets/js/kcfinder/upload.php"] [unique_id "ahUQVzXIXIr-5BZ8nR4vtQAAAJQ"]
[Tue May 26 11:15:35.767299 2026] [:error] [pid 20026:tid 20103] [client 134.199.171.224:54704] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/lib/kcfinder/upload.php"] [unique_id "ahUQVzXIXIr-5BZ8nR4vtgAAAIs"]
[Tue May 26 11:15:35.881124 2026] [:error] [pid 20026:tid 20096] [client 134.199.171.224:54724] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/core/scripts/kcfinder/upload.php"] [unique_id "ahUQVzXIXIr-5BZ8nR4vtwAAAIQ"]
[Tue May 26 11:15:35.881822 2026] [:error] [pid 20026:tid 20094] [client 134.199.171.224:54708] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/libs/kcfinder/upload.php"] [unique_id "ahUQVzXIXIr-5BZ8nR4vuAAAAII"]
[Tue May 26 11:15:35.897407 2026] [:error] [pid 20026:tid 20108] [client 134.199.171.224:54744] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/kcfinder/upload.php"] [unique_id "ahUQVzXIXIr-5BZ8nR4vuQAAAJA"]
[Tue May 26 11:15:35.900619 2026] [:error] [pid 20024:tid 20054] [client 134.199.171.224:54740] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/components/kcfinder/upload.php"] [unique_id "ahUQV1dk7QtxEB93NpdFtwAAABA"]
[Tue May 26 11:15:35.901869 2026] [:error] [pid 20026:tid 20092] [client 134.199.171.224:54736] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ckeditor/plugins/kcfinder/upload.php"] [unique_id "ahUQVzXIXIr-5BZ8nR4vugAAAIA"]
[Tue May 26 11:15:35.906891 2026] [:error] [pid 20026:tid 20104] [client 134.199.171.224:54748] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/media/kcfinder/upload.php"] [unique_id "ahUQVzXIXIr-5BZ8nR4vuwAAAIw"]
[Tue May 26 11:15:35.908603 2026] [:error] [pid 20024:tid 20046] [client 134.199.171.224:54752] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/jquery/kcfinder/upload.php"] [unique_id "ahUQV1dk7QtxEB93NpdFuAAAAAg"]
[Tue May 26 11:15:35.910615 2026] [:error] [pid 20026:tid 20110] [client 134.199.171.224:54766] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/lib/kcfinder/upload.php"] [unique_id "ahUQVzXIXIr-5BZ8nR4vvAAAAJI"]
[Tue May 26 11:15:35.912628 2026] [:error] [pid 20024:tid 20050] [client 134.199.171.224:54780] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/core/scripts/wysiwyg/kcfinder/upload.php"] [unique_id "ahUQV1dk7QtxEB93NpdFuQAAAAw"]
[Tue May 26 11:15:35.913584 2026] [:error] [pid 20025:tid 20089] [client 134.199.171.224:54786] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/js/tinymce/kcfinder/upload.php"] [unique_id "ahUQV37k8Vts-JPOkgUpcgAAAFg"]
[Tue May 26 11:15:35.914658 2026] [:error] [pid 20025:tid 20079] [client 134.199.171.224:54792] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/plugins/kcfinder/upload.php"] [unique_id "ahUQV37k8Vts-JPOkgUpcwAAAE4"]
[Tue May 26 11:15:35.924242 2026] [:error] [pid 55988:tid 55991] [client 134.199.171.224:54808] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/core/scripts/kcfinder/upload.php"] [unique_id "ahUQV_3kVIz2sql52sfX9AAAAQA"]
[Tue May 26 11:15:35.925315 2026] [:error] [pid 20125:tid 20150] [client 134.199.171.224:54812] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/libs/kcfinder/upload.php"] [unique_id "ahUQV9k9jeWERFDLJc7avAAAANc"]
[Tue May 26 11:15:35.944202 2026] [:error] [pid 20125:tid 20143] [client 134.199.171.224:54832] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/ckeditor/plugins/kcfinder/upload.php"] [unique_id "ahUQV9k9jeWERFDLJc7avQAAANA"]
[Tue May 26 11:15:35.944932 2026] [:error] [pid 55988:tid 56000] [client 134.199.171.224:54818] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/components/kcfinder/upload.php"] [unique_id "ahUQV_3kVIz2sql52sfX9QAAAQk"]
[Tue May 26 11:15:35.948506 2026] [:error] [pid 20125:tid 20149] [client 134.199.171.224:54840] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/media/kcfinder/upload.php"] [unique_id "ahUQV9k9jeWERFDLJc7avgAAANY"]
[Tue May 26 11:15:35.952686 2026] [:error] [pid 20026:tid 20106] [client 134.199.171.224:54848] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/jquery/kcfinder/upload.php"] [unique_id "ahUQVzXIXIr-5BZ8nR4vvQAAAI4"]
[Tue May 26 11:15:35.954434 2026] [:error] [pid 20026:tid 20116] [client 134.199.171.224:54862] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/core/scripts/wysiwyg/kcfinder/upload.php"] [unique_id "ahUQVzXIXIr-5BZ8nR4vvgAAAJg"]
[Tue May 26 11:15:35.955189 2026] [:error] [pid 20125:tid 20144] [client 134.199.171.224:54870] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/js/tinymce/kcfinder/upload.php"] [unique_id "ahUQV9k9jeWERFDLJc7avwAAANE"]
[Tue May 26 11:15:35.978983 2026] [:error] [pid 20125:tid 20147] [client 134.199.171.224:54882] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/core/scripts/kcfinder/upload.php"] [unique_id "ahUQV9k9jeWERFDLJc7awAAAANQ"]
[Tue May 26 11:15:36.004544 2026] [:error] [pid 20125:tid 20128] [client 134.199.171.224:54890] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/jquery/kcfinder/upload.php"] [unique_id "ahUQWNk9jeWERFDLJc7awQAAAME"]
[Tue May 26 11:15:36.009669 2026] [:error] [pid 55988:tid 55998] [client 134.199.171.224:54896] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/media/kcfinder/upload.php"] [unique_id "ahUQWP3kVIz2sql52sfX9gAAAQc"]
[Tue May 26 11:15:36.011587 2026] [:error] [pid 55988:tid 56015] [client 134.199.171.224:54908] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/app/webroot/kcfinder/upload.php"] [unique_id "ahUQWP3kVIz2sql52sfX9wAAARg"]
[Tue May 26 11:15:36.013415 2026] [:error] [pid 55988:tid 56012] [client 134.199.171.224:54918] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/admin/kcfinder/upload.php"] [unique_id "ahUQWP3kVIz2sql52sfX-AAAARU"]
[Tue May 26 11:15:36.036939 2026] [:error] [pid 20026:tid 20102] [client 134.199.171.224:54920] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/app/webroot/js/kcfinder/upload.php"] [unique_id "ahUQWDXIXIr-5BZ8nR4vvwAAAIo"]
[Tue May 26 11:15:36.045267 2026] [:error] [pid 20026:tid 20098] [client 134.199.171.224:54924] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/admin/ckeditor/kcfinder/upload.php"] [unique_id "ahUQWDXIXIr-5BZ8nR4vwAAAAIY"]
[Tue May 26 11:15:36.058532 2026] [:error] [pid 20125:tid 20135] [client 134.199.171.224:54936] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/app/webroot/kcfinder/upload.php"] [unique_id "ahUQWNk9jeWERFDLJc7awgAAAMg"]
[Tue May 26 11:15:36.059099 2026] [:error] [pid 55988:tid 55999] [client 134.199.171.224:54926] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/admin/kcfinder/upload.php"] [unique_id "ahUQWP3kVIz2sql52sfX-QAAAQg"]
[Tue May 26 11:15:36.079219 2026] [:error] [pid 20026:tid 20111] [client 134.199.171.224:54946] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/app/webroot/js/kcfinder/upload.php"] [unique_id "ahUQWDXIXIr-5BZ8nR4vwQAAAJM"]
[Tue May 26 11:15:36.091869 2026] [:error] [pid 20125:tid 20140] [client 134.199.171.224:54958] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/admin/ckeditor/kcfinder/upload.php"] [unique_id "ahUQWNk9jeWERFDLJc7awwAAAM0"]
[Tue May 26 11:15:36.101396 2026] [:error] [pid 55988:tid 56009] [client 134.199.171.224:54962] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/application/themes/admin/assets/js/kcfinder/upload.php"] [unique_id "ahUQWP3kVIz2sql52sfX-gAAARI"]
[Tue May 26 11:15:36.104782 2026] [:error] [pid 55988:tid 55997] [client 134.199.171.224:54976] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/app/webroot/kcfinder/upload.php"] [unique_id "ahUQWP3kVIz2sql52sfX-wAAAQY"]
[Tue May 26 11:15:36.105204 2026] [:error] [pid 20125:tid 20138] [client 134.199.171.224:54984] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/admin/kcfinder/upload.php"] [unique_id "ahUQWNk9jeWERFDLJc7axAAAAMs"]
[Tue May 26 11:15:36.122122 2026] [:error] [pid 20125:tid 20145] [client 134.199.171.224:54986] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/app/webroot/js/kcfinder/upload.php"] [unique_id "ahUQWNk9jeWERFDLJc7axQAAANI"]
[Tue May 26 11:15:36.134902 2026] [:error] [pid 20024:tid 20042] [client 134.199.171.224:54998] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/admin/ckeditor/kcfinder/upload.php"] [unique_id "ahUQWFdk7QtxEB93NpdFugAAAAQ"]
[Tue May 26 11:15:36.136443 2026] [:error] [pid 55988:tid 55996] [client 134.199.171.224:55006] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/admin/ckeditor/plugins/kcfinder/upload.php"] [unique_id "ahUQWP3kVIz2sql52sfX_AAAAQU"]
[Tue May 26 11:15:36.144978 2026] [:error] [pid 55988:tid 56003] [client 134.199.171.224:55012] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/application/themes/admin/assets/js/kcfinder/upload.php"] [unique_id "ahUQWP3kVIz2sql52sfX_QAAAQw"]
[Tue May 26 11:15:36.179858 2026] [:error] [pid 20026:tid 20105] [client 134.199.171.224:55026] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/admin/ckeditor/plugins/kcfinder/upload.php"] [unique_id "ahUQWDXIXIr-5BZ8nR4vwgAAAI0"]
[Tue May 26 11:15:36.186088 2026] [:error] [pid 20026:tid 20109] [client 134.199.171.224:55040] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/application/themes/admin/assets/js/kcfinder/upload.php"] [unique_id "ahUQWDXIXIr-5BZ8nR4vwwAAAJE"]
[Tue May 26 11:15:36.222180 2026] [:error] [pid 55988:tid 56013] [client 134.199.171.224:55050] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/admin/ckeditor/plugins/kcfinder/upload.php"] [unique_id "ahUQWP3kVIz2sql52sfX_wAAARY"]
[Tue May 26 11:15:36.333647 2026] [:error] [pid 55988:tid 56002] [client 134.199.171.224:55054] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/assets/scripts/filemanager/dialog.php"] [unique_id "ahUQWP3kVIz2sql52sfYAAAAAQs"]
[Tue May 26 11:15:36.339274 2026] [:error] [pid 20125:tid 20127] [client 134.199.171.224:55058] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/scripts/filemanager/dialog.php"] [unique_id "ahUQWNk9jeWERFDLJc7axgAAAMA"]
[Tue May 26 11:15:36.350782 2026] [:error] [pid 20125:tid 20137] [client 134.199.171.224:55066] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/assets/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahUQWNk9jeWERFDLJc7axwAAAMo"]
[Tue May 26 11:15:36.364326 2026] [:error] [pid 55988:tid 56004] [client 134.199.171.224:55068] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/filemanager/dialog.php"] [unique_id "ahUQWP3kVIz2sql52sfYAQAAAQ0"]
[Tue May 26 11:15:36.368502 2026] [:error] [pid 20125:tid 20134] [client 134.199.171.224:55072] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/asset/filemanager/dialog.php"] [unique_id "ahUQWNk9jeWERFDLJc7ayAAAAMc"]
[Tue May 26 11:15:36.373684 2026] [:error] [pid 55988:tid 56008] [client 134.199.171.224:55088] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/assets/plugins/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahUQWP3kVIz2sql52sfYAgAAARE"]
[Tue May 26 11:15:36.376894 2026] [:error] [pid 20025:tid 20088] [client 134.199.171.224:55104] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/assets/scripts/filemanager/dialog.php"] [unique_id "ahUQWH7k8Vts-JPOkgUpdQAAAFc"]
[Tue May 26 11:15:36.378153 2026] [:error] [pid 20025:tid 20069] [client 134.199.171.224:55106] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/assets/filemanager/dialog.php"] [unique_id "ahUQWH7k8Vts-JPOkgUpdgAAAEQ"]
[Tue May 26 11:15:36.380983 2026] [:error] [pid 20125:tid 20146] [client 134.199.171.224:55112] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/phpformbuilder/plugins/filemanager/dialog.php"] [unique_id "ahUQWNk9jeWERFDLJc7ayQAAANM"]
[Tue May 26 11:15:36.381797 2026] [:error] [pid 55988:tid 55994] [client 134.199.171.224:55128] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/admin/core/kcfinder/upload.php"] [unique_id "ahUQWP3kVIz2sql52sfYAwAAAQM"]
[Tue May 26 11:15:36.384403 2026] [:error] [pid 20025:tid 20066] [client 134.199.171.224:55140] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/scripts/filemanager/dialog.php"] [unique_id "ahUQWH7k8Vts-JPOkgUpdwAAAEE"]
[Tue May 26 11:15:36.385668 2026] [:error] [pid 20125:tid 20148] [client 134.199.171.224:55142] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/admin/filemanager/dialog.php"] [unique_id "ahUQWNk9jeWERFDLJc7aygAAANU"]
[Tue May 26 11:15:36.388781 2026] [:error] [pid 20025:tid 20081] [client 134.199.171.224:55154] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/assets/plugins/filemanager/dialog.php"] [unique_id "ahUQWH7k8Vts-JPOkgUpeAAAAFA"]
[Tue May 26 11:15:36.397639 2026] [:error] [pid 20025:tid 20073] [client 134.199.171.224:55168] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/assets/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahUQWH7k8Vts-JPOkgUpeQAAAEg"]
[Tue May 26 11:15:36.407621 2026] [:error] [pid 20025:tid 20067] [client 134.199.171.224:55170] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/filemanager/dialog.php"] [unique_id "ahUQWH7k8Vts-JPOkgUpegAAAEI"]
[Tue May 26 11:15:36.415054 2026] [:error] [pid 20026:tid 20100] [client 134.199.171.224:55180] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/asset/filemanager/dialog.php"] [unique_id "ahUQWDXIXIr-5BZ8nR4vxQAAAIg"]
[Tue May 26 11:15:36.424517 2026] [:error] [pid 55988:tid 56010] [client 134.199.171.224:55182] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/admin/js/kcfinder/upload.php"] [unique_id "ahUQWP3kVIz2sql52sfYBAAAARM"]
[Tue May 26 11:15:36.425402 2026] [:error] [pid 55988:tid 55995] [client 134.199.171.224:55190] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/assets/plugins/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahUQWP3kVIz2sql52sfYBQAAAQQ"]
[Tue May 26 11:15:36.425770 2026] [:error] [pid 20026:tid 20107] [client 134.199.171.224:55214] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/assets/filemanager/dialog.php"] [unique_id "ahUQWDXIXIr-5BZ8nR4vxgAAAI8"]
[Tue May 26 11:15:36.426482 2026] [:error] [pid 20125:tid 20139] [client 134.199.171.224:55204] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/assets/scripts/filemanager/dialog.php"] [unique_id "ahUQWNk9jeWERFDLJc7aywAAAMw"]
[Tue May 26 11:15:36.428412 2026] [:error] [pid 20025:tid 20071] [client 134.199.171.224:55228] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/phpformbuilder/plugins/filemanager/dialog.php"] [unique_id "ahUQWH7k8Vts-JPOkgUpewAAAEY"]
[Tue May 26 11:15:36.429452 2026] [:error] [pid 20025:tid 20074] [client 134.199.171.224:55244] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/admin/core/kcfinder/upload.php"] [unique_id "ahUQWH7k8Vts-JPOkgUpfAAAAEk"]
[Tue May 26 11:15:36.435133 2026] [:error] [pid 55988:tid 56001] [client 134.199.171.224:55250] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/scripts/filemanager/dialog.php"] [unique_id "ahUQWP3kVIz2sql52sfYBgAAAQo"]
[Tue May 26 11:15:36.438085 2026] [:error] [pid 55988:tid 56014] [client 134.199.171.224:55270] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/assets/plugins/filemanager/dialog.php"] [unique_id "ahUQWP3kVIz2sql52sfYBwAAARc"]
[Tue May 26 11:15:36.443094 2026] [:error] [pid 55988:tid 56006] [client 134.199.171.224:55260] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/admin/filemanager/dialog.php"] [unique_id "ahUQWP3kVIz2sql52sfYCAAAAQ8"]
[Tue May 26 11:15:36.444339 2026] [:error] [pid 20025:tid 20087] [client 134.199.171.224:55284] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/assets/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahUQWH7k8Vts-JPOkgUpfQAAAFY"]
[Tue May 26 11:15:36.449868 2026] [:error] [pid 20026:tid 20093] [client 134.199.171.224:55296] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/filemanager/dialog.php"] [unique_id "ahUQWDXIXIr-5BZ8nR4vxwAAAIE"]
[Tue May 26 11:15:36.479558 2026] [:error] [pid 20026:tid 20101] [client 134.199.171.224:55298] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/asset/filemanager/dialog.php"] [unique_id "ahUQWDXIXIr-5BZ8nR4vyAAAAIk"]
[Tue May 26 11:15:36.479964 2026] [:error] [pid 20024:tid 20043] [client 134.199.171.224:55328] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/assets/filemanager/dialog.php"] [unique_id "ahUQWFdk7QtxEB93NpdFuwAAAAU"]
[Tue May 26 11:15:36.481135 2026] [:error] [pid 20025:tid 20086] [client 134.199.171.224:55310] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/admin/js/kcfinder/upload.php"] [unique_id "ahUQWH7k8Vts-JPOkgUpfgAAAFU"]
[Tue May 26 11:15:36.482374 2026] [:error] [pid 20025:tid 20068] [client 134.199.171.224:55338] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/phpformbuilder/plugins/filemanager/dialog.php"] [unique_id "ahUQWH7k8Vts-JPOkgUpfwAAAEM"]
[Tue May 26 11:15:36.483359 2026] [:error] [pid 20025:tid 20085] [client 134.199.171.224:55324] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/assets/plugins/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahUQWH7k8Vts-JPOkgUpgAAAAFQ"]
[Tue May 26 11:15:36.493428 2026] [:error] [pid 20025:tid 20083] [client 134.199.171.224:55350] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/admin/core/kcfinder/upload.php"] [unique_id "ahUQWH7k8Vts-JPOkgUpgQAAAFI"]
[Tue May 26 11:15:36.495757 2026] [:error] [pid 20025:tid 20070] [client 134.199.171.224:55356] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/assets/plugins/filemanager/dialog.php"] [unique_id "ahUQWH7k8Vts-JPOkgUpggAAAEU"]
[Tue May 26 11:15:36.498157 2026] [:error] [pid 20025:tid 20078] [client 134.199.171.224:55368] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/admin/filemanager/dialog.php"] [unique_id "ahUQWH7k8Vts-JPOkgUpgwAAAE0"]
[Tue May 26 11:15:36.526736 2026] [:error] [pid 20125:tid 20142] [client 134.199.171.224:55374] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/admin/js/kcfinder/upload.php"] [unique_id "ahUQWNk9jeWERFDLJc7azAAAAM8"]
[Tue May 26 11:15:36.541062 2026] [:error] [pid 20024:tid 20055] [client 134.199.171.224:55380] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/assets/admin/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahUQWFdk7QtxEB93NpdFvAAAABE"]
[Tue May 26 11:15:36.591314 2026] [:error] [pid 20024:tid 20062] [client 134.199.171.224:55398] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/filemanager/filemanager/dialog.php"] [unique_id "ahUQWFdk7QtxEB93NpdFvQAAABg"]
[Tue May 26 11:15:36.591820 2026] [:error] [pid 55988:tid 55992] [client 134.199.171.224:55386] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/js/tinymce4/plugins/filemanager/dialog.php"] [unique_id "ahUQWP3kVIz2sql52sfYCQAAAQE"]
[Tue May 26 11:15:36.592692 2026] [:error] [pid 20026:tid 20115] [client 134.199.171.224:55382] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/assets/admin/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahUQWDXIXIr-5BZ8nR4vyQAAAJc"]
[Tue May 26 11:15:36.602905 2026] [:error] [pid 55988:tid 55993] [client 134.199.171.224:55406] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/tinymce/filemanager/dialog.php"] [unique_id "ahUQWP3kVIz2sql52sfYCgAAAQI"]
[Tue May 26 11:15:36.614679 2026] [:error] [pid 20125:tid 20151] [client 134.199.171.224:55410] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/assets/admin/js/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahUQWNk9jeWERFDLJc7azQAAANg"]
[Tue May 26 11:15:36.631801 2026] [:error] [pid 20024:tid 20049] [client 134.199.171.224:55420] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/public/filemanager/dialog.php"] [unique_id "ahUQWFdk7QtxEB93NpdFvgAAAAs"]
[Tue May 26 11:15:36.632747 2026] [:error] [pid 20024:tid 20045] [client 134.199.171.224:55426] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/filemanager/filemanager/dialog.php"] [unique_id "ahUQWFdk7QtxEB93NpdFvwAAAAc"]
[Tue May 26 11:15:36.633860 2026] [:error] [pid 20026:tid 20103] [client 134.199.171.224:55432] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/js/tinymce4/plugins/filemanager/dialog.php"] [unique_id "ahUQWDXIXIr-5BZ8nR4vygAAAIs"]
[Tue May 26 11:15:36.635203 2026] [:error] [pid 20026:tid 20096] [client 134.199.171.224:55446] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/assets/admin/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahUQWDXIXIr-5BZ8nR4vywAAAIQ"]
[Tue May 26 11:15:36.637600 2026] [:error] [pid 55988:tid 55991] [client 134.199.171.224:55460] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahUQWP3kVIz2sql52sfYCwAAAQA"]
[Tue May 26 11:15:36.638763 2026] [:error] [pid 55988:tid 56000] [client 134.199.171.224:55468] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/cms/tinymce/filemanager/filemanager/dialog.php"] [unique_id "ahUQWP3kVIz2sql52sfYDAAAAQk"]
[Tue May 26 11:15:36.644360 2026] [:error] [pid 55988:tid 55998] [client 134.199.171.224:55472] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/tinymce/filemanager/dialog.php"] [unique_id "ahUQWP3kVIz2sql52sfYDQAAAQc"]
[Tue May 26 11:15:36.649565 2026] [:error] [pid 20024:tid 20041] [client 134.199.171.224:55474] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/public/js/libraries/filemanager/dialog.php"] [unique_id "ahUQWFdk7QtxEB93NpdFwAAAAAM"]
[Tue May 26 11:15:36.658527 2026] [:error] [pid 20024:tid 20057] [client 134.199.171.224:55486] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/assets/admin/js/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahUQWFdk7QtxEB93NpdFwQAAABM"]
[Tue May 26 11:15:36.665939 2026] [:error] [pid 20125:tid 20133] [client 134.199.171.224:55502] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/js/fileManager/filemanager/dialog.php"] [unique_id "ahUQWNk9jeWERFDLJc7azgAAAMY"]
[Tue May 26 11:15:36.669034 2026] [:error] [pid 20125:tid 20129] [client 134.199.171.224:55508] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/public/scripts/filemanager/dialog.php"] [unique_id "ahUQWNk9jeWERFDLJc7azwAAAMI"]
[Tue May 26 11:15:36.669850 2026] [:error] [pid 20125:tid 20131] [client 134.199.171.224:55512] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/media/filemanager/dialog.php"] [unique_id "ahUQWNk9jeWERFDLJc7a0AAAAMQ"]
[Tue May 26 11:15:36.673187 2026] [:error] [pid 20125:tid 20150] [client 134.199.171.224:55524] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/public/filemanager/dialog.php"] [unique_id "ahUQWNk9jeWERFDLJc7a0QAAANc"]
[Tue May 26 11:15:36.674502 2026] [:error] [pid 20125:tid 20143] [client 134.199.171.224:55540] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/filemanager/filemanager/dialog.php"] [unique_id "ahUQWNk9jeWERFDLJc7a0gAAANA"]
[Tue May 26 11:15:36.675646 2026] [:error] [pid 20125:tid 20149] [client 134.199.171.224:55546] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/js/tinymce4/plugins/filemanager/dialog.php"] [unique_id "ahUQWNk9jeWERFDLJc7a0wAAANY"]
[Tue May 26 11:15:36.678770 2026] [:error] [pid 20125:tid 20144] [client 134.199.171.224:55550] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahUQWNk9jeWERFDLJc7a1AAAANE"]
[Tue May 26 11:15:36.679613 2026] [:error] [pid 20125:tid 20147] [client 134.199.171.224:55558] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/cms/tinymce/filemanager/filemanager/dialog.php"] [unique_id "ahUQWNk9jeWERFDLJc7a1QAAANQ"]
[Tue May 26 11:15:36.686011 2026] [:error] [pid 20125:tid 20128] [client 134.199.171.224:55560] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/tinymce/filemanager/dialog.php"] [unique_id "ahUQWNk9jeWERFDLJc7a1gAAAME"]
[Tue May 26 11:15:36.690973 2026] [:error] [pid 55988:tid 56015] [client 134.199.171.224:55572] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/public/js/libraries/filemanager/dialog.php"] [unique_id "ahUQWP3kVIz2sql52sfYDgAAARg"]
[Tue May 26 11:15:36.698352 2026] [:error] [pid 20125:tid 20132] [client 134.199.171.224:55582] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/assets/admin/js/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahUQWNk9jeWERFDLJc7a1wAAAMU"]
[Tue May 26 11:15:36.708835 2026] [:error] [pid 20125:tid 20135] [client 134.199.171.224:55598] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/js/fileManager/filemanager/dialog.php"] [unique_id "ahUQWNk9jeWERFDLJc7a2AAAAMg"]
[Tue May 26 11:15:36.710640 2026] [:error] [pid 20024:tid 20052] [client 134.199.171.224:55614] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/public/scripts/filemanager/dialog.php"] [unique_id "ahUQWFdk7QtxEB93NpdFwgAAAA4"]
[Tue May 26 11:15:36.711240 2026] [:error] [pid 20024:tid 20051] [client 134.199.171.224:55622] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/media/filemanager/dialog.php"] [unique_id "ahUQWFdk7QtxEB93NpdFwwAAAA0"]
[Tue May 26 11:15:36.713797 2026] [:error] [pid 20024:tid 20056] [client 134.199.171.224:55630] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/public/filemanager/dialog.php"] [unique_id "ahUQWFdk7QtxEB93NpdFxAAAABI"]
[Tue May 26 11:15:36.721081 2026] [:error] [pid 20026:tid 20094] [client 134.199.171.224:55648] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/cms/tinymce/filemanager/filemanager/dialog.php"] [unique_id "ahUQWDXIXIr-5BZ8nR4vzQAAAII"]
[Tue May 26 11:15:36.722064 2026] [:error] [pid 20125:tid 20140] [client 134.199.171.224:55634] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahUQWNk9jeWERFDLJc7a2QAAAM0"]
[Tue May 26 11:15:36.732466 2026] [:error] [pid 20125:tid 20138] [client 134.199.171.224:55660] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/public/js/libraries/filemanager/dialog.php"] [unique_id "ahUQWNk9jeWERFDLJc7a2gAAAMs"]
[Tue May 26 11:15:36.744720 2026] [:error] [pid 20125:tid 20145] [client 134.199.171.224:55674] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/resources/plugins/tiny_mce/plugins/filemanager/dialog.php"] [unique_id "ahUQWNk9jeWERFDLJc7a2wAAANI"]
[Tue May 26 11:15:36.750199 2026] [:error] [pid 20026:tid 20108] [client 134.199.171.224:55676] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/js/fileManager/filemanager/dialog.php"] [unique_id "ahUQWDXIXIr-5BZ8nR4vzgAAAJA"]
[Tue May 26 11:15:36.752055 2026] [:error] [pid 20026:tid 20092] [client 134.199.171.224:55690] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/public/scripts/filemanager/dialog.php"] [unique_id "ahUQWDXIXIr-5BZ8nR4vzwAAAIA"]
[Tue May 26 11:15:36.753780 2026] [:error] [pid 20026:tid 20104] [client 134.199.171.224:55694] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/media/filemanager/dialog.php"] [unique_id "ahUQWDXIXIr-5BZ8nR4v0AAAAIw"]
[Tue May 26 11:15:36.787121 2026] [:error] [pid 20125:tid 20130] [client 134.199.171.224:55708] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/resources/plugins/tiny_mce/plugins/filemanager/dialog.php"] [unique_id "ahUQWNk9jeWERFDLJc7a3AAAAMM"]
[Tue May 26 11:15:36.802512 2026] [:error] [pid 20125:tid 20137] [client 134.199.171.224:55728] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/editor/filemanager/dialog.php"] [unique_id "ahUQWNk9jeWERFDLJc7a3QAAAMo"]
[Tue May 26 11:15:36.804304 2026] [:error] [pid 20026:tid 20110] [client 134.199.171.224:55720] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/lib/filemanager/dialog.php"] [unique_id "ahUQWDXIXIr-5BZ8nR4v0QAAAJI"]
[Tue May 26 11:15:36.818223 2026] [:error] [pid 20026:tid 20106] [client 134.199.171.224:55738] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/admin/events/lib/external/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahUQWDXIXIr-5BZ8nR4v0gAAAI4"]
[Tue May 26 11:15:36.823996 2026] [:error] [pid 20026:tid 20116] [client 134.199.171.224:55746] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahUQWDXIXIr-5BZ8nR4v0wAAAJg"]
[Tue May 26 11:15:36.830005 2026] [:error] [pid 20125:tid 20134] [client 134.199.171.224:55754] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/resources/plugins/tiny_mce/plugins/filemanager/dialog.php"] [unique_id "ahUQWNk9jeWERFDLJc7a3gAAAMc"]
[Tue May 26 11:15:36.843314 2026] [:error] [pid 20026:tid 20102] [client 134.199.171.224:55760] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/resources/js/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahUQWDXIXIr-5BZ8nR4v1AAAAIo"]
[Tue May 26 11:15:36.845035 2026] [:error] [pid 20025:tid 20076] [client 134.199.171.224:55766] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/editor/filemanager/dialog.php"] [unique_id "ahUQWH7k8Vts-JPOkgUphAAAAEs"]
[Tue May 26 11:15:36.847300 2026] [:error] [pid 20025:tid 20072] [client 134.199.171.224:55782] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/lib/filemanager/dialog.php"] [unique_id "ahUQWH7k8Vts-JPOkgUphQAAAEc"]
[Tue May 26 11:15:36.861514 2026] [:error] [pid 20026:tid 20098] [client 134.199.171.224:55798] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/admin/events/lib/external/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahUQWDXIXIr-5BZ8nR4v1QAAAIY"]
[Tue May 26 11:15:36.866301 2026] [:error] [pid 20125:tid 20146] [client 134.199.171.224:55800] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahUQWNk9jeWERFDLJc7a3wAAANM"]
[Tue May 26 11:15:36.886718 2026] [:error] [pid 20026:tid 20111] [client 134.199.171.224:55808] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/editor/filemanager/dialog.php"] [unique_id "ahUQWDXIXIr-5BZ8nR4v1gAAAJM"]
[Tue May 26 11:15:36.887647 2026] [:error] [pid 20125:tid 20139] [client 134.199.171.224:55802] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/resources/js/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahUQWNk9jeWERFDLJc7a4AAAAMw"]
[Tue May 26 11:15:36.889941 2026] [:error] [pid 20026:tid 20105] [client 134.199.171.224:55822] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/lib/filemanager/dialog.php"] [unique_id "ahUQWDXIXIr-5BZ8nR4v1wAAAI0"]
[Tue May 26 11:15:36.892972 2026] [:error] [pid 20026:tid 20109] [client 134.199.171.224:55836] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/assets/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahUQWDXIXIr-5BZ8nR4v2AAAAJE"]
[Tue May 26 11:15:36.903287 2026] [:error] [pid 20125:tid 20141] [client 134.199.171.224:55852] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/admin/events/lib/external/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahUQWNk9jeWERFDLJc7a4QAAAM4"]
[Tue May 26 11:15:36.907758 2026] [:error] [pid 20125:tid 20142] [client 134.199.171.224:55868] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahUQWNk9jeWERFDLJc7a4gAAAM8"]
[Tue May 26 11:15:36.929329 2026] [:error] [pid 20026:tid 20114] [client 134.199.171.224:55872] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/resources/js/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahUQWDXIXIr-5BZ8nR4v2QAAAJY"]
[Tue May 26 11:15:36.934836 2026] [:error] [pid 20125:tid 20133] [client 134.199.171.224:55880] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/assets/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahUQWNk9jeWERFDLJc7a4wAAAMY"]
[Tue May 26 11:15:36.978380 2026] [:error] [pid 20125:tid 20129] [client 134.199.171.224:55884] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/assets/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahUQWNk9jeWERFDLJc7a5AAAAMI"]
[Tue May 26 11:15:37.075012 2026] [:error] [pid 20026:tid 20113] [client 134.199.171.224:55888] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/arquivos/javascript/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahUQWTXIXIr-5BZ8nR4v2gAAAJU"]
[Tue May 26 11:15:37.114397 2026] [:error] [pid 20125:tid 20131] [client 134.199.171.224:55892] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/cms/vendor/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahUQWdk9jeWERFDLJc7a5QAAAMQ"]
[Tue May 26 11:15:37.116151 2026] [:error] [pid 20026:tid 20100] [client 134.199.171.224:55898] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/arquivos/javascript/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahUQWTXIXIr-5BZ8nR4v2wAAAIg"]
[Tue May 26 11:15:37.123604 2026] [:error] [pid 20026:tid 20107] [client 134.199.171.224:55904] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/admin/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahUQWTXIXIr-5BZ8nR4v3AAAAI8"]
[Tue May 26 11:15:37.157094 2026] [:error] [pid 20026:tid 20101] [client 134.199.171.224:55916] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/plugins/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahUQWTXIXIr-5BZ8nR4v3QAAAIk"]
[Tue May 26 11:15:37.158177 2026] [:error] [pid 20125:tid 20150] [client 134.199.171.224:55910] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/cms/vendor/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahUQWdk9jeWERFDLJc7a5gAAANc"]
[Tue May 26 11:15:37.158746 2026] [:error] [pid 20026:tid 20115] [client 134.199.171.224:55920] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/arquivos/javascript/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahUQWTXIXIr-5BZ8nR4v3gAAAJc"]
[Tue May 26 11:15:37.166708 2026] [:error] [pid 20125:tid 20143] [client 134.199.171.224:55930] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/admin/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahUQWdk9jeWERFDLJc7a5wAAANA"]
[Tue May 26 11:15:37.198144 2026] [:error] [pid 20026:tid 20097] [client 134.199.171.224:55946] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/plugins/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahUQWTXIXIr-5BZ8nR4v3wAAAIU"]
[Tue May 26 11:15:37.200046 2026] [:error] [pid 20125:tid 20149] [client 134.199.171.224:55952] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/cms/vendor/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahUQWdk9jeWERFDLJc7a6AAAANY"]
[Tue May 26 11:15:37.210291 2026] [:error] [pid 20026:tid 20112] [client 134.199.171.224:55960] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/admin/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahUQWTXIXIr-5BZ8nR4v4AAAAJQ"]
[Tue May 26 11:15:37.241220 2026] [:error] [pid 20024:tid 20048] [client 134.199.171.224:55968] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dwelectservices.com.au"] [uri "/plugins/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahUQWVdk7QtxEB93NpdFxgAAAAo"]
[Tue May 26 17:05:08.051514 2026] [:error] [pid 55988:tid 55997] [client 34.11.17.55:49854] [client 34.11.17.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/"] [unique_id "ahViRP3kVIz2sql52sdhlQAAAQY"]
[Tue May 26 17:05:08.498920 2026] [:error] [pid 20024:tid 20043] [client 34.11.17.55:56583] [client 34.11.17.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-includes/ID3/license.txt"] [unique_id "ahViRFdk7QtxEB93NpeBswAAAAU"]
[Tue May 26 17:05:08.923324 2026] [:error] [pid 55988:tid 56011] [client 34.11.17.55:53074] [client 34.11.17.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/feed/"] [unique_id "ahViRP3kVIz2sql52sdh3QAAARQ"]
[Tue May 26 19:30:58.831688 2026] [:error] [pid 33887:tid 33943] [client 34.181.177.21:62174] [client 34.181.177.21] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.181.177.21, incrementing ddos counter"] [hostname "dwelectservices.com.au"] [uri "/xmlrpc.php"] [unique_id "ahWEctCOI_FV7meOxGcU4AAAAJg"]
[Tue May 26 19:30:58.839760 2026] [proxy_fcgi:error] [pid 33887:tid 33943] [client 34.181.177.21:62174] AH01071: Got error 'Primary script unknown'
[Tue May 26 19:31:01.051758 2026] [:error] [pid 33887:tid 33920] [client 34.181.177.21:62174] [client 34.181.177.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "ahWEddCOI_FV7meOxGcU7QAAAIE"]
[Tue May 26 19:31:03.054959 2026] [:error] [pid 33977:tid 33987] [client 34.181.177.21:53699] [client 34.181.177.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "ahWEd-9cnSDNAU9sYPi1DgAAAAc"]
[Tue May 26 19:31:04.661868 2026] [:error] [pid 36497:tid 36527] [client 34.181.177.21:57858] [client 34.181.177.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "ahWEeLjKQWM1gBmBY4i9oAAAANE"]
[Tue May 26 19:31:06.069765 2026] [:error] [pid 33977:tid 33984] [client 34.181.177.21:58916] [client 34.181.177.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "ahWEeu9cnSDNAU9sYPi1IQAAAAQ"]
[Tue May 26 19:48:57.161343 2026] [proxy_fcgi:error] [pid 33886:tid 33907] [client 20.63.34.22:7105] AH01071: Got error 'Primary script unknown'
[Tue May 26 19:48:57.372089 2026] [proxy_fcgi:error] [pid 33886:tid 33911] [client 20.63.34.22:7105] AH01071: Got error 'Primary script unknown'
[Tue May 26 19:48:57.583575 2026] [proxy_fcgi:error] [pid 33886:tid 33902] [client 20.63.34.22:7105] AH01071: Got error 'Primary script unknown'
[Tue May 26 19:48:57.831051 2026] [proxy_fcgi:error] [pid 33886:tid 33909] [client 20.63.34.22:7105] AH01071: Got error 'Primary script unknown'
[Tue May 26 19:48:58.092000 2026] [proxy_fcgi:error] [pid 33886:tid 33896] [client 20.63.34.22:7105] AH01071: Got error 'Primary script unknown'
[Tue May 26 19:48:58.309360 2026] [proxy_fcgi:error] [pid 33886:tid 33893] [client 20.63.34.22:7105] AH01071: Got error 'Primary script unknown'
[Tue May 26 19:48:58.519718 2026] [proxy_fcgi:error] [pid 33886:tid 33899] [client 20.63.34.22:7105] AH01071: Got error 'Primary script unknown'
[Tue May 26 19:48:58.771330 2026] [proxy_fcgi:error] [pid 33886:tid 33910] [client 20.63.34.22:7105] AH01071: Got error 'Primary script unknown'
[Tue May 26 19:48:59.236686 2026] [proxy_fcgi:error] [pid 33886:tid 33894] [client 20.63.34.22:7105] AH01071: Got error 'Primary script unknown'
[Tue May 26 19:48:59.443528 2026] [:error] [pid 33886:tid 33906] [client 20.63.34.22:7105] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aboutc.php"] [unique_id "ahWIq7BYzgp5rPVdHcWHSwAAAE8"]
[Tue May 26 19:48:59.866167 2026] [:error] [pid 36497:tid 36528] [client 20.63.34.22:7052] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aboutc.php"] [unique_id "ahWIq7jKQWM1gBmBY4jJKQAAANI"]
[Tue May 26 19:49:00.377328 2026] [:error] [pid 43701:tid 43704] [client 20.63.34.22:7123] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aboutc.php"] [unique_id "ahWIrIWtVI_UGrhtwKBtUQAAAUE"]
[Tue May 26 19:49:00.849152 2026] [:error] [pid 43701:tid 43716] [client 20.63.34.22:7136] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aboutc.php"] [unique_id "ahWIrIWtVI_UGrhtwKBtUwAAAU0"]
[Tue May 26 19:49:01.280946 2026] [:error] [pid 43701:tid 43718] [client 20.63.34.22:7162] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-load.php"] [unique_id "ahWIrYWtVI_UGrhtwKBtVQAAAU8"]
[Tue May 26 19:49:02.101440 2026] [:error] [pid 43701:tid 43704] [client 20.63.34.22:7149] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-load.php"] [unique_id "ahWIroWtVI_UGrhtwKBtWwAAAUE"]
[Tue May 26 19:49:02.569705 2026] [:error] [pid 33977:tid 33982] [client 20.63.34.22:7126] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-load.php"] [unique_id "ahWIru9cnSDNAU9sYPi_DQAAAAI"]
[Tue May 26 19:49:03.008040 2026] [:error] [pid 43701:tid 43718] [client 20.63.34.22:7131] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-load.php"] [unique_id "ahWIr4WtVI_UGrhtwKBtYQAAAU8"]
[Tue May 26 19:49:03.502322 2026] [:error] [pid 33887:tid 33932] [client 20.63.34.22:7154] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aevly.php"] [unique_id "ahWIr9COI_FV7meOxGcbDwAAAI0"]
[Tue May 26 19:49:03.970961 2026] [:error] [pid 33888:tid 33962] [client 20.63.34.22:7141] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aevly.php"] [unique_id "ahWIrzqzTeoxiinZsGHp1wAAARA"]
[Tue May 26 19:49:04.444754 2026] [:error] [pid 43701:tid 43719] [client 20.63.34.22:7046] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aevly.php"] [unique_id "ahWIsIWtVI_UGrhtwKBtaAAAAVA"]
[Tue May 26 19:49:04.956302 2026] [:error] [pid 43701:tid 43720] [client 20.63.34.22:7054] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aevly.php"] [unique_id "ahWIsIWtVI_UGrhtwKBtaQAAAVE"]
[Tue May 26 19:49:05.428276 2026] [:error] [pid 43701:tid 43723] [client 20.63.34.22:7049] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/atkno.php"] [unique_id "ahWIsYWtVI_UGrhtwKBtbAAAAVQ"]
[Tue May 26 19:49:05.975051 2026] [:error] [pid 43701:tid 43703] [client 20.63.34.22:7041] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/atkno.php"] [unique_id "ahWIsYWtVI_UGrhtwKBtcAAAAUA"]
[Tue May 26 19:49:06.389835 2026] [:error] [pid 43701:tid 43717] [client 20.63.34.22:7125] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/atkno.php"] [unique_id "ahWIsoWtVI_UGrhtwKBtcwAAAU4"]
[Tue May 26 19:49:06.850493 2026] [:error] [pid 36497:tid 36519] [client 20.63.34.22:7097] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/atkno.php"] [unique_id "ahWIsrjKQWM1gBmBY4jJMgAAAMk"]
[Tue May 26 19:49:07.319543 2026] [:error] [pid 43701:tid 43711] [client 20.63.34.22:7152] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mini.php"] [unique_id "ahWIs4WtVI_UGrhtwKBtewAAAUg"]
[Tue May 26 19:49:07.784088 2026] [:error] [pid 33888:tid 33950] [client 20.63.34.22:7084] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mini.php"] [unique_id "ahWIszqzTeoxiinZsGHp2wAAAQQ"]
[Tue May 26 19:49:08.991316 2026] [:error] [pid 33888:tid 33965] [client 20.63.34.22:7120] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mini.php"] [unique_id "ahWItDqzTeoxiinZsGHp4AAAARM"]
[Tue May 26 19:49:09.466662 2026] [:error] [pid 33888:tid 33967] [client 20.63.34.22:7158] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mini.php"] [unique_id "ahWItTqzTeoxiinZsGHp4wAAARU"]
[Tue May 26 19:49:09.885881 2026] [:error] [pid 33888:tid 33961] [client 20.63.34.22:7160] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-thi.php"] [unique_id "ahWItTqzTeoxiinZsGHp5QAAAQ8"]
[Tue May 26 19:49:10.355679 2026] [:error] [pid 33886:tid 33907] [client 20.63.34.22:7119] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-thi.php"] [unique_id "ahWItrBYzgp5rPVdHcWHTQAAAFA"]
[Tue May 26 19:49:10.862019 2026] [:error] [pid 33886:tid 33911] [client 20.63.34.22:6413] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-thi.php"] [unique_id "ahWItrBYzgp5rPVdHcWHTwAAAFQ"]
[Tue May 26 19:49:11.583141 2026] [:error] [pid 33888:tid 33958] [client 20.63.34.22:7127] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-thi.php"] [unique_id "ahWItzqzTeoxiinZsGHp5wAAAQw"]
[Tue May 26 19:49:12.058554 2026] [:error] [pid 33888:tid 33963] [client 20.63.34.22:7167] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-kd4xalrg7m.php"] [unique_id "ahWIuDqzTeoxiinZsGHp6QAAARE"]
[Tue May 26 19:49:12.769081 2026] [:error] [pid 33888:tid 33961] [client 20.63.34.22:7117] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-kd4xalrg7m.php"] [unique_id "ahWIuDqzTeoxiinZsGHp8AAAAQ8"]
[Tue May 26 19:49:13.195582 2026] [:error] [pid 33977:tid 33999] [client 20.63.34.22:7043] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-kd4xalrg7m.php"] [unique_id "ahWIue9cnSDNAU9sYPi_FgAAABM"]
[Tue May 26 19:49:13.814224 2026] [:error] [pid 33888:tid 33947] [client 20.63.34.22:7164] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-kd4xalrg7m.php"] [unique_id "ahWIuTqzTeoxiinZsGHp9gAAAQE"]
[Tue May 26 19:49:14.438019 2026] [:error] [pid 43701:tid 43704] [client 20.63.34.22:7142] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/amax.php"] [unique_id "ahWIuoWtVI_UGrhtwKBtjgAAAUE"]
[Tue May 26 19:49:14.890418 2026] [:error] [pid 36497:tid 36534] [client 20.63.34.22:7148] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/amax.php"] [unique_id "ahWIurjKQWM1gBmBY4jJRwAAANg"]
[Tue May 26 19:49:15.375807 2026] [:error] [pid 36497:tid 36532] [client 20.63.34.22:7108] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/amax.php"] [unique_id "ahWIu7jKQWM1gBmBY4jJSgAAANY"]
[Tue May 26 19:49:16.054552 2026] [:error] [pid 43701:tid 43706] [client 20.63.34.22:7057] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/amax.php"] [unique_id "ahWIvIWtVI_UGrhtwKBttAAAAUM"]
[Tue May 26 19:49:16.578886 2026] [:error] [pid 33888:tid 33961] [client 20.63.34.22:7047] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wehrman.php"] [unique_id "ahWIvDqzTeoxiinZsGHp-gAAAQ8"]
[Tue May 26 19:49:17.250693 2026] [:error] [pid 36497:tid 36510] [client 20.63.34.22:7104] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wehrman.php"] [unique_id "ahWIvbjKQWM1gBmBY4jJVwAAAMA"]
[Tue May 26 19:49:17.793738 2026] [:error] [pid 43701:tid 43726] [client 20.63.34.22:7086] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wehrman.php"] [unique_id "ahWIvYWtVI_UGrhtwKBt4AAAAVc"]
[Tue May 26 19:49:18.279157 2026] [:error] [pid 43701:tid 43725] [client 20.63.34.22:7135] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wehrman.php"] [unique_id "ahWIvoWtVI_UGrhtwKBt5gAAAVY"]
[Tue May 26 19:49:18.715248 2026] [:error] [pid 43701:tid 43709] [client 20.63.34.22:7100] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/b.php"] [unique_id "ahWIvoWtVI_UGrhtwKBt6QAAAUY"]
[Tue May 26 19:49:19.305621 2026] [:error] [pid 36497:tid 36511] [client 20.63.34.22:7109] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/b.php"] [unique_id "ahWIv7jKQWM1gBmBY4jJYgAAAME"]
[Tue May 26 19:49:19.721843 2026] [:error] [pid 33977:tid 33987] [client 20.63.34.22:7139] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/b.php"] [unique_id "ahWIv-9cnSDNAU9sYPi_GwAAAAc"]
[Tue May 26 19:49:20.199676 2026] [:error] [pid 36497:tid 36513] [client 20.63.34.22:7068] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/b.php"] [unique_id "ahWIwLjKQWM1gBmBY4jJZgAAAMM"]
[Tue May 26 19:49:20.676048 2026] [:error] [pid 33886:tid 33907] [client 20.63.34.22:7044] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-sing.php"] [unique_id "ahWIwLBYzgp5rPVdHcWHWAAAAFA"]
[Tue May 26 19:49:21.135377 2026] [:error] [pid 33886:tid 33908] [client 20.63.34.22:7129] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-sing.php"] [unique_id "ahWIwbBYzgp5rPVdHcWHWQAAAFE"]
[Tue May 26 19:49:21.578153 2026] [:error] [pid 33887:tid 33926] [client 20.63.34.22:7145] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-sing.php"] [unique_id "ahWIwdCOI_FV7meOxGcbHQAAAIc"]
[Tue May 26 19:49:22.070474 2026] [:error] [pid 33886:tid 33914] [client 20.63.34.22:7118] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-sing.php"] [unique_id "ahWIwrBYzgp5rPVdHcWHYAAAAFc"]
[Tue May 26 19:49:22.735667 2026] [:error] [pid 33977:tid 33997] [client 20.63.34.22:7113] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-links-opml.php"] [unique_id "ahWIwu9cnSDNAU9sYPi_HwAAABE"]
[Tue May 26 19:49:23.313231 2026] [:error] [pid 33977:tid 33998] [client 20.63.34.22:6400] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-links-opml.php"] [unique_id "ahWIw-9cnSDNAU9sYPi_IAAAABI"]
[Tue May 26 19:49:23.944576 2026] [:error] [pid 33888:tid 33952] [client 20.63.34.22:7165] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-links-opml.php"] [unique_id "ahWIwzqzTeoxiinZsGHp_QAAAQY"]
[Tue May 26 19:49:24.465602 2026] [:error] [pid 33888:tid 33954] [client 20.63.34.22:7089] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-links-opml.php"] [unique_id "ahWIxDqzTeoxiinZsGHp_wAAAQg"]
[Tue May 26 19:49:25.020835 2026] [:error] [pid 36497:tid 36529] [client 20.63.34.22:7082] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/edit.php"] [unique_id "ahWIxbjKQWM1gBmBY4jJdAAAANM"]
[Tue May 26 19:49:25.517456 2026] [:error] [pid 33887:tid 33937] [client 20.63.34.22:7058] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/edit.php"] [unique_id "ahWIxdCOI_FV7meOxGcbJgAAAJI"]
[Tue May 26 19:49:25.981673 2026] [:error] [pid 33886:tid 33906] [client 20.63.34.22:7055] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/edit.php"] [unique_id "ahWIxbBYzgp5rPVdHcWHZgAAAE8"]
[Tue May 26 19:49:26.469771 2026] [:error] [pid 33886:tid 33891] [client 20.63.34.22:7114] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/edit.php"] [unique_id "ahWIxrBYzgp5rPVdHcWHaQAAAEA"]
[Tue May 26 19:49:27.001185 2026] [:error] [pid 43701:tid 43705] [client 20.63.34.22:6444] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wmore1.php"] [unique_id "ahWIx4WtVI_UGrhtwKBt7QAAAUI"]
[Tue May 26 19:49:27.455631 2026] [:error] [pid 33977:tid 33985] [client 20.63.34.22:7166] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wmore1.php"] [unique_id "ahWIx-9cnSDNAU9sYPi_JQAAAAU"]
[Tue May 26 19:49:28.476127 2026] [:error] [pid 43701:tid 43703] [client 20.63.34.22:7051] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wmore1.php"] [unique_id "ahWIyIWtVI_UGrhtwKBt8gAAAUA"]
[Tue May 26 19:49:29.438356 2026] [:error] [pid 43701:tid 43721] [client 20.63.34.22:7143] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wmore1.php"] [unique_id "ahWIyYWtVI_UGrhtwKBt9gAAAVI"]
[Tue May 26 19:49:30.792341 2026] [:error] [pid 43701:tid 43724] [client 20.63.34.22:7098] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-access.php"] [unique_id "ahWIyoWtVI_UGrhtwKBt-wAAAVU"]
[Tue May 26 19:49:31.573263 2026] [:error] [pid 33977:tid 34002] [client 20.63.34.22:7157] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-access.php"] [unique_id "ahWIy-9cnSDNAU9sYPi_LAAAABY"]
[Tue May 26 19:49:33.200208 2026] [:error] [pid 43701:tid 43719] [client 20.63.34.22:7150] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-access.php"] [unique_id "ahWIzYWtVI_UGrhtwKBuAQAAAVA"]
[Tue May 26 19:49:33.970575 2026] [:error] [pid 33977:tid 33991] [client 20.63.34.22:7103] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-access.php"] [unique_id "ahWIze9cnSDNAU9sYPi_MgAAAAs"]
[Tue May 26 19:49:34.419041 2026] [:error] [pid 36497:tid 36520] [client 20.63.34.22:7076] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/1.php"] [unique_id "ahWIzrjKQWM1gBmBY4jJgwAAAMo"]
[Tue May 26 19:49:34.883153 2026] [:error] [pid 43701:tid 43704] [client 20.63.34.22:7092] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/1.php"] [unique_id "ahWIzoWtVI_UGrhtwKBuCAAAAUE"]
[Tue May 26 19:49:35.389131 2026] [:error] [pid 36497:tid 36531] [client 20.63.34.22:7040] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/1.php"] [unique_id "ahWIz7jKQWM1gBmBY4jJhgAAANU"]
[Tue May 26 19:49:35.821303 2026] [:error] [pid 33888:tid 33955] [client 20.63.34.22:6415] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/1.php"] [unique_id "ahWIzzqzTeoxiinZsGHqCAAAAQk"]
[Tue May 26 19:49:36.289942 2026] [:error] [pid 33888:tid 33963] [client 20.63.34.22:7078] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sbhu.php"] [unique_id "ahWI0DqzTeoxiinZsGHqCwAAARE"]
[Tue May 26 19:49:36.802935 2026] [:error] [pid 36497:tid 36517] [client 20.63.34.22:7056] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sbhu.php"] [unique_id "ahWI0LjKQWM1gBmBY4jJjAAAAMc"]
[Tue May 26 19:49:37.366553 2026] [:error] [pid 36497:tid 36516] [client 20.63.34.22:7061] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sbhu.php"] [unique_id "ahWI0bjKQWM1gBmBY4jJjwAAAMY"]
[Tue May 26 19:49:37.822216 2026] [:error] [pid 36497:tid 36511] [client 20.63.34.22:7060] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sbhu.php"] [unique_id "ahWI0bjKQWM1gBmBY4jJkQAAAME"]
[Tue May 26 19:49:38.358940 2026] [:error] [pid 36497:tid 36533] [client 20.63.34.22:7070] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bgymj.php"] [unique_id "ahWI0rjKQWM1gBmBY4jJlQAAANc"]
[Tue May 26 19:49:39.161563 2026] [:error] [pid 43701:tid 43714] [client 20.63.34.22:6440] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bgymj.php"] [unique_id "ahWI04WtVI_UGrhtwKBuDgAAAUs"]
[Tue May 26 19:49:39.783728 2026] [:error] [pid 36497:tid 36518] [client 20.63.34.22:7163] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bgymj.php"] [unique_id "ahWI07jKQWM1gBmBY4jJnQAAAMg"]
[Tue May 26 19:49:40.285873 2026] [:error] [pid 36497:tid 36511] [client 20.63.34.22:7151] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bgymj.php"] [unique_id "ahWI1LjKQWM1gBmBY4jJngAAAME"]
[Tue May 26 19:49:40.785353 2026] [:error] [pid 36497:tid 36515] [client 20.63.34.22:7090] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file30.php"] [unique_id "ahWI1LjKQWM1gBmBY4jJoQAAAMU"]
[Tue May 26 19:49:41.258851 2026] [:error] [pid 36497:tid 36534] [client 20.63.34.22:7132] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file30.php"] [unique_id "ahWI1bjKQWM1gBmBY4jJogAAANg"]
[Tue May 26 19:49:41.716389 2026] [:error] [pid 33977:tid 33984] [client 20.63.34.22:6404] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file30.php"] [unique_id "ahWI1e9cnSDNAU9sYPi_OgAAAAQ"]
[Tue May 26 19:49:42.281865 2026] [:error] [pid 36497:tid 36523] [client 20.63.34.22:7111] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file30.php"] [unique_id "ahWI1rjKQWM1gBmBY4jJpgAAAM0"]
[Tue May 26 19:49:42.727195 2026] [:error] [pid 36497:tid 36527] [client 20.63.34.22:7094] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/yellow.php"] [unique_id "ahWI1rjKQWM1gBmBY4jJqAAAANE"]
[Tue May 26 19:49:43.205700 2026] [:error] [pid 33886:tid 33904] [client 20.63.34.22:7130] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/yellow.php"] [unique_id "ahWI17BYzgp5rPVdHcWHcQAAAE0"]
[Tue May 26 19:49:43.663908 2026] [:error] [pid 36497:tid 36512] [client 20.63.34.22:7121] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/yellow.php"] [unique_id "ahWI17jKQWM1gBmBY4jJqQAAAMI"]
[Tue May 26 19:49:44.370570 2026] [:error] [pid 36497:tid 36523] [client 20.63.34.22:7102] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/yellow.php"] [unique_id "ahWI2LjKQWM1gBmBY4jJrgAAAM0"]
[Tue May 26 19:49:45.253092 2026] [:error] [pid 36497:tid 36510] [client 20.63.34.22:6443] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/reze.php"] [unique_id "ahWI2bjKQWM1gBmBY4jJtgAAAMA"]
[Tue May 26 19:49:45.794468 2026] [:error] [pid 36497:tid 36523] [client 20.63.34.22:7118] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/reze.php"] [unique_id "ahWI2bjKQWM1gBmBY4jJtwAAAM0"]
[Tue May 26 19:49:46.395450 2026] [:error] [pid 33888:tid 33970] [client 20.63.34.22:6403] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/reze.php"] [unique_id "ahWI2jqzTeoxiinZsGHqFgAAARg"]
[Tue May 26 19:49:46.970818 2026] [:error] [pid 36497:tid 36519] [client 20.63.34.22:6416] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/reze.php"] [unique_id "ahWI2rjKQWM1gBmBY4jJuwAAAMk"]
[Tue May 26 19:49:47.496921 2026] [:error] [pid 36497:tid 36530] [client 20.63.34.22:6408] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wefile.php"] [unique_id "ahWI27jKQWM1gBmBY4jJvQAAANQ"]
[Tue May 26 19:49:48.034005 2026] [:error] [pid 36497:tid 36529] [client 20.63.34.22:6417] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wefile.php"] [unique_id "ahWI3LjKQWM1gBmBY4jJvwAAANM"]
[Tue May 26 19:49:48.483634 2026] [:error] [pid 43701:tid 43703] [client 20.63.34.22:7146] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wefile.php"] [unique_id "ahWI3IWtVI_UGrhtwKBuFgAAAUA"]
[Tue May 26 19:49:49.119206 2026] [:error] [pid 43701:tid 43714] [client 20.63.34.22:6441] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wefile.php"] [unique_id "ahWI3YWtVI_UGrhtwKBuGAAAAUs"]
[Tue May 26 19:49:49.595358 2026] [:error] [pid 36497:tid 36527] [client 20.63.34.22:7101] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xda.php"] [unique_id "ahWI3bjKQWM1gBmBY4jJxAAAANE"]
[Tue May 26 19:49:50.175867 2026] [:error] [pid 43701:tid 43713] [client 20.63.34.22:7134] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xda.php"] [unique_id "ahWI3oWtVI_UGrhtwKBuHAAAAUo"]
[Tue May 26 19:49:50.609250 2026] [:error] [pid 33888:tid 33950] [client 20.63.34.22:7069] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xda.php"] [unique_id "ahWI3jqzTeoxiinZsGHqGAAAAQQ"]
[Tue May 26 19:49:52.244046 2026] [:error] [pid 33887:tid 33927] [client 20.63.34.22:7079] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xda.php"] [unique_id "ahWI4NCOI_FV7meOxGcbMAAAAIg"]
[Tue May 26 19:49:52.860481 2026] [:error] [pid 43701:tid 43703] [client 20.63.34.22:7087] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/revealability.php"] [unique_id "ahWI4IWtVI_UGrhtwKBuIQAAAUA"]
[Tue May 26 19:49:53.581014 2026] [:error] [pid 33888:tid 33961] [client 20.63.34.22:7042] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/revealability.php"] [unique_id "ahWI4TqzTeoxiinZsGHqGgAAAQ8"]
[Tue May 26 19:49:54.159482 2026] [:error] [pid 33888:tid 33966] [client 20.63.34.22:7074] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/revealability.php"] [unique_id "ahWI4jqzTeoxiinZsGHqGwAAARQ"]
[Tue May 26 19:49:54.602499 2026] [:error] [pid 36497:tid 36511] [client 20.63.34.22:7095] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/revealability.php"] [unique_id "ahWI4rjKQWM1gBmBY4jJygAAAME"]
[Tue May 26 19:49:55.073840 2026] [:error] [pid 33887:tid 33940] [client 20.63.34.22:7075] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/forbidals.php"] [unique_id "ahWI49COI_FV7meOxGcbNgAAAJU"]
[Tue May 26 19:49:55.512834 2026] [:error] [pid 36497:tid 36519] [client 20.63.34.22:7062] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/forbidals.php"] [unique_id "ahWI47jKQWM1gBmBY4jJzgAAAMk"]
[Tue May 26 19:49:56.026431 2026] [:error] [pid 43701:tid 43705] [client 20.63.34.22:6420] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/forbidals.php"] [unique_id "ahWI5IWtVI_UGrhtwKBuJQAAAUI"]
[Tue May 26 19:49:56.478068 2026] [:error] [pid 43701:tid 43715] [client 20.63.34.22:7045] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/forbidals.php"] [unique_id "ahWI5IWtVI_UGrhtwKBuJwAAAUw"]
[Tue May 26 19:49:56.935193 2026] [:error] [pid 33888:tid 33958] [client 20.63.34.22:6414] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/i.php"] [unique_id "ahWI5DqzTeoxiinZsGHqHQAAAQw"]
[Tue May 26 19:49:57.592431 2026] [:error] [pid 33977:tid 33993] [client 20.63.34.22:7107] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/i.php"] [unique_id "ahWI5e9cnSDNAU9sYPi_SgAAAA0"]
[Tue May 26 19:49:58.226720 2026] [:error] [pid 33977:tid 34001] [client 20.63.34.22:7156] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/i.php"] [unique_id "ahWI5u9cnSDNAU9sYPi_SwAAABU"]
[Tue May 26 19:49:58.642583 2026] [:error] [pid 33888:tid 33949] [client 20.63.34.22:7063] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/i.php"] [unique_id "ahWI5jqzTeoxiinZsGHqIAAAAQM"]
[Tue May 26 19:49:59.068828 2026] [proxy_fcgi:error] [pid 33977:tid 33988] [client 20.63.34.22:7144] AH01071: Got error 'Primary script unknown'
[Tue May 26 19:49:59.282127 2026] [proxy_fcgi:error] [pid 33977:tid 33983] [client 20.63.34.22:7144] AH01071: Got error 'Primary script unknown'
[Tue May 26 19:49:59.516204 2026] [proxy_fcgi:error] [pid 33977:tid 34000] [client 20.63.34.22:7144] AH01071: Got error 'Primary script unknown'
[Tue May 26 19:49:59.727406 2026] [proxy_fcgi:error] [pid 33977:tid 33986] [client 20.63.34.22:7144] AH01071: Got error 'Primary script unknown'
[Tue May 26 19:49:59.996891 2026] [proxy_fcgi:error] [pid 33977:tid 33984] [client 20.63.34.22:7144] AH01071: Got error 'Primary script unknown'
[Tue May 26 19:50:00.223470 2026] [proxy_fcgi:error] [pid 33977:tid 33990] [client 20.63.34.22:7144] AH01071: Got error 'Primary script unknown'
[Tue May 26 19:50:00.436154 2026] [proxy_fcgi:error] [pid 33977:tid 33998] [client 20.63.34.22:7144] AH01071: Got error 'Primary script unknown'
[Tue May 26 19:50:00.656312 2026] [proxy_fcgi:error] [pid 33977:tid 33987] [client 20.63.34.22:7144] AH01071: Got error 'Primary script unknown'
[Tue May 26 19:50:00.882432 2026] [proxy_fcgi:error] [pid 33977:tid 33989] [client 20.63.34.22:7144] AH01071: Got error 'Primary script unknown'
[Tue May 26 19:50:01.119014 2026] [proxy_fcgi:error] [pid 33977:tid 33992] [client 20.63.34.22:7144] AH01071: Got error 'Primary script unknown'
[Tue May 26 19:50:01.416298 2026] [proxy_fcgi:error] [pid 33977:tid 33994] [client 20.63.34.22:7144] AH01071: Got error 'Primary script unknown'
[Tue May 26 19:50:01.624542 2026] [:error] [pid 33977:tid 34004] [client 20.63.34.22:7144] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mifta.php"] [unique_id "ahWI6e9cnSDNAU9sYPi_XAAAABg"]
[Tue May 26 19:50:02.055025 2026] [:error] [pid 43701:tid 43721] [client 20.63.34.22:6405] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mifta.php"] [unique_id "ahWI6oWtVI_UGrhtwKBuKwAAAVI"]
[Tue May 26 19:50:02.534990 2026] [:error] [pid 43701:tid 43726] [client 20.63.34.22:7159] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mifta.php"] [unique_id "ahWI6oWtVI_UGrhtwKBuLQAAAVc"]
[Tue May 26 19:50:03.016366 2026] [:error] [pid 43701:tid 43718] [client 20.63.34.22:7153] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/mifta.php"] [unique_id "ahWI64WtVI_UGrhtwKBuLwAAAU8"]
[Tue May 26 19:50:03.464722 2026] [:error] [pid 33888:tid 33951] [client 20.63.34.22:6411] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/amxloxxr.php"] [unique_id "ahWI6zqzTeoxiinZsGHqKQAAAQU"]
[Tue May 26 19:50:04.045934 2026] [:error] [pid 43701:tid 43708] [client 20.63.34.22:7140] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/amxloxxr.php"] [unique_id "ahWI7IWtVI_UGrhtwKBuMwAAAUU"]
[Tue May 26 19:50:04.461619 2026] [:error] [pid 43701:tid 43725] [client 20.63.34.22:6658] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/amxloxxr.php"] [unique_id "ahWI7IWtVI_UGrhtwKBuNQAAAVY"]
[Tue May 26 19:50:04.935911 2026] [:error] [pid 33977:tid 33995] [client 20.63.34.22:6461] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/amxloxxr.php"] [unique_id "ahWI7O9cnSDNAU9sYPi_XgAAAA8"]
[Tue May 26 19:50:05.391024 2026] [:error] [pid 43701:tid 43709] [client 20.63.34.22:7128] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file59.php"] [unique_id "ahWI7YWtVI_UGrhtwKBuOAAAAUY"]
[Tue May 26 19:50:05.852333 2026] [:error] [pid 33977:tid 33988] [client 20.63.34.22:6663] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file59.php"] [unique_id "ahWI7e9cnSDNAU9sYPi_XwAAAAg"]
[Tue May 26 19:50:06.309153 2026] [:error] [pid 33888:tid 33965] [client 20.63.34.22:7133] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file59.php"] [unique_id "ahWI7jqzTeoxiinZsGHqLQAAARM"]
[Tue May 26 19:50:06.788975 2026] [:error] [pid 36497:tid 36518] [client 20.63.34.22:7082] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file59.php"] [unique_id "ahWI7rjKQWM1gBmBY4jJ5AAAAMg"]
[Tue May 26 19:50:07.266165 2026] [:error] [pid 43701:tid 43726] [client 20.63.34.22:6407] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/asasx.php"] [unique_id "ahWI74WtVI_UGrhtwKBuPQAAAVc"]
[Tue May 26 19:50:07.716430 2026] [:error] [pid 36497:tid 36514] [client 20.63.34.22:7065] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/asasx.php"] [unique_id "ahWI77jKQWM1gBmBY4jJ6AAAAMQ"]
[Tue May 26 19:50:08.428630 2026] [:error] [pid 43701:tid 43707] [client 20.63.34.22:6700] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/asasx.php"] [unique_id "ahWI8IWtVI_UGrhtwKBuPwAAAUQ"]
[Tue May 26 19:50:08.936543 2026] [:error] [pid 33888:tid 33948] [client 20.63.34.22:6449] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/asasx.php"] [unique_id "ahWI8DqzTeoxiinZsGHqLwAAAQI"]
[Tue May 26 19:50:09.358550 2026] [:error] [pid 43701:tid 43716] [client 20.63.34.22:6406] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "ahWI8YWtVI_UGrhtwKBuRgAAAU0"]
[Tue May 26 19:50:09.788739 2026] [:error] [pid 43701:tid 43706] [client 20.63.34.22:7147] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "ahWI8YWtVI_UGrhtwKBuSgAAAUM"]
[Tue May 26 19:50:10.347173 2026] [:error] [pid 43701:tid 43709] [client 20.63.34.22:7122] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "ahWI8oWtVI_UGrhtwKBuSwAAAUY"]
[Tue May 26 19:50:10.793762 2026] [:error] [pid 33886:tid 33895] [client 20.63.34.22:6426] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "ahWI8rBYzgp5rPVdHcWHgAAAAEQ"]
[Tue May 26 19:50:11.357040 2026] [:error] [pid 36497:tid 36513] [client 20.63.34.22:7110] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ms-edit.php"] [unique_id "ahWI87jKQWM1gBmBY4jJ7AAAAMM"]
[Tue May 26 19:50:11.958088 2026] [:error] [pid 36497:tid 36531] [client 20.63.34.22:7116] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ms-edit.php"] [unique_id "ahWI87jKQWM1gBmBY4jJ7QAAANU"]
[Tue May 26 19:50:12.377104 2026] [:error] [pid 33888:tid 33955] [client 20.63.34.22:7080] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ms-edit.php"] [unique_id "ahWI9DqzTeoxiinZsGHqNQAAAQk"]
[Tue May 26 19:50:12.884832 2026] [:error] [pid 36497:tid 36516] [client 20.63.34.22:6453] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ms-edit.php"] [unique_id "ahWI9LjKQWM1gBmBY4jJ8QAAAMY"]
[Tue May 26 19:50:13.379084 2026] [:error] [pid 43701:tid 43707] [client 20.63.34.22:6462] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file4.php"] [unique_id "ahWI9YWtVI_UGrhtwKBuUAAAAUQ"]
[Tue May 26 19:50:13.821469 2026] [:error] [pid 43701:tid 43713] [client 20.63.34.22:6410] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file4.php"] [unique_id "ahWI9YWtVI_UGrhtwKBuUgAAAUo"]
[Tue May 26 19:50:14.426570 2026] [:error] [pid 43701:tid 43722] [client 20.63.34.22:6675] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file4.php"] [unique_id "ahWI9oWtVI_UGrhtwKBuUwAAAVM"]
[Tue May 26 19:50:15.559048 2026] [:error] [pid 43701:tid 43726] [client 20.63.34.22:6682] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/file4.php"] [unique_id "ahWI94WtVI_UGrhtwKBuWQAAAVc"]
[Tue May 26 19:50:16.023532 2026] [:error] [pid 43701:tid 43705] [client 20.63.34.22:6657] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hplfuns.php"] [unique_id "ahWI-IWtVI_UGrhtwKBuWgAAAUI"]
[Tue May 26 19:50:16.482882 2026] [:error] [pid 33888:tid 33970] [client 20.63.34.22:7096] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hplfuns.php"] [unique_id "ahWI-DqzTeoxiinZsGHqPAAAARg"]
[Tue May 26 19:50:16.963744 2026] [:error] [pid 33888:tid 33969] [client 20.63.34.22:6668] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hplfuns.php"] [unique_id "ahWI-DqzTeoxiinZsGHqPQAAARc"]
[Tue May 26 19:50:17.404019 2026] [:error] [pid 43701:tid 43714] [client 20.63.34.22:7093] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hplfuns.php"] [unique_id "ahWI-YWtVI_UGrhtwKBuXgAAAUs"]
[Tue May 26 19:50:17.917866 2026] [:error] [pid 43701:tid 43725] [client 20.63.34.22:7053] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/1index.php"] [unique_id "ahWI-YWtVI_UGrhtwKBuXwAAAVY"]
[Tue May 26 19:50:18.378332 2026] [:error] [pid 36497:tid 36534] [client 20.63.34.22:6448] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/1index.php"] [unique_id "ahWI-rjKQWM1gBmBY4jJ-gAAANg"]
[Tue May 26 19:50:18.830362 2026] [:error] [pid 33886:tid 33898] [client 20.63.34.22:6423] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/1index.php"] [unique_id "ahWI-rBYzgp5rPVdHcWHhwAAAEc"]
[Tue May 26 19:50:19.266367 2026] [:error] [pid 33888:tid 33958] [client 20.63.34.22:7048] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/1index.php"] [unique_id "ahWI-zqzTeoxiinZsGHqQAAAAQw"]
[Tue May 26 19:50:19.682932 2026] [:error] [pid 33888:tid 33962] [client 20.63.34.22:7067] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-su.php"] [unique_id "ahWI-zqzTeoxiinZsGHqQgAAARA"]
[Tue May 26 19:50:20.123359 2026] [:error] [pid 43701:tid 43717] [client 20.63.34.22:6459] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-su.php"] [unique_id "ahWI_IWtVI_UGrhtwKBuZAAAAU4"]
[Tue May 26 19:50:20.585442 2026] [:error] [pid 36497:tid 36514] [client 20.63.34.22:6661] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-su.php"] [unique_id "ahWI_LjKQWM1gBmBY4jJ_QAAAMQ"]
[Tue May 26 19:50:21.004907 2026] [:error] [pid 33887:tid 33927] [client 20.63.34.22:6418] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-su.php"] [unique_id "ahWI_dCOI_FV7meOxGcbOgAAAIg"]
[Tue May 26 19:50:21.434108 2026] [:error] [pid 43701:tid 43722] [client 20.63.34.22:7064] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ccou.php"] [unique_id "ahWI_YWtVI_UGrhtwKBuaQAAAVM"]
[Tue May 26 19:50:21.893161 2026] [:error] [pid 33887:tid 33934] [client 20.63.34.22:7099] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ccou.php"] [unique_id "ahWI_dCOI_FV7meOxGcbPAAAAI8"]
[Tue May 26 19:50:22.332905 2026] [:error] [pid 43701:tid 43716] [client 20.63.34.22:6419] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ccou.php"] [unique_id "ahWI_oWtVI_UGrhtwKBuawAAAU0"]
[Tue May 26 19:50:22.823919 2026] [:error] [pid 43701:tid 43720] [client 20.63.34.22:6451] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ccou.php"] [unique_id "ahWI_oWtVI_UGrhtwKBubQAAAVE"]
[Tue May 26 19:50:23.249817 2026] [:error] [pid 33887:tid 33920] [client 20.63.34.22:7059] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-ver.php"] [unique_id "ahWI_9COI_FV7meOxGcbPgAAAIE"]
[Tue May 26 19:50:23.721375 2026] [:error] [pid 43701:tid 43711] [client 20.63.34.22:7071] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-ver.php"] [unique_id "ahWI_4WtVI_UGrhtwKBucAAAAUg"]
[Tue May 26 19:50:24.302111 2026] [:error] [pid 33888:tid 33946] [client 20.63.34.22:7050] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-ver.php"] [unique_id "ahWJADqzTeoxiinZsGHqSAAAAQA"]
[Tue May 26 19:50:24.894342 2026] [:error] [pid 33977:tid 33993] [client 20.63.34.22:7085] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-ver.php"] [unique_id "ahWJAO9cnSDNAU9sYPi_bAAAAA0"]
[Tue May 26 19:50:25.340100 2026] [:error] [pid 33977:tid 34001] [client 20.63.34.22:6432] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/db.php"] [unique_id "ahWJAe9cnSDNAU9sYPi_bwAAABU"]
[Tue May 26 19:50:25.761107 2026] [:error] [pid 36497:tid 36529] [client 20.63.34.22:6436] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/db.php"] [unique_id "ahWJAbjKQWM1gBmBY4jKAAAAANM"]
[Tue May 26 19:50:26.228506 2026] [:error] [pid 33977:tid 33997] [client 20.63.34.22:6424] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/db.php"] [unique_id "ahWJAu9cnSDNAU9sYPi_cQAAABE"]
[Tue May 26 19:50:26.760476 2026] [:error] [pid 33977:tid 33988] [client 20.63.34.22:6656] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/db.php"] [unique_id "ahWJAu9cnSDNAU9sYPi_dAAAAAg"]
[Tue May 26 19:50:27.208718 2026] [:error] [pid 33886:tid 33900] [client 20.63.34.22:7122] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lib.php"] [unique_id "ahWJA7BYzgp5rPVdHcWHjQAAAEk"]
[Tue May 26 19:50:27.680021 2026] [:error] [pid 33977:tid 33991] [client 20.63.34.22:6433] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lib.php"] [unique_id "ahWJA-9cnSDNAU9sYPi_dgAAAAs"]
[Tue May 26 19:50:28.681892 2026] [:error] [pid 33977:tid 33987] [client 20.63.34.22:6679] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lib.php"] [unique_id "ahWJBO9cnSDNAU9sYPi_eQAAAAc"]
[Tue May 26 19:50:29.193343 2026] [:error] [pid 33977:tid 33992] [client 20.63.34.22:7124] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lib.php"] [unique_id "ahWJBe9cnSDNAU9sYPi_fAAAAAw"]
[Tue May 26 19:50:29.777784 2026] [:error] [pid 33888:tid 33965] [client 20.63.34.22:6707] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sys.php"] [unique_id "ahWJBTqzTeoxiinZsGHqUAAAARM"]
[Tue May 26 19:50:30.207992 2026] [:error] [pid 33888:tid 33948] [client 20.63.34.22:7073] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sys.php"] [unique_id "ahWJBjqzTeoxiinZsGHqUQAAAQI"]
[Tue May 26 19:50:30.642405 2026] [:error] [pid 33977:tid 33991] [client 20.63.34.22:7091] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sys.php"] [unique_id "ahWJBu9cnSDNAU9sYPi_gwAAAAs"]
[Tue May 26 19:50:31.292024 2026] [:error] [pid 33887:tid 33935] [client 20.63.34.22:7077] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sys.php"] [unique_id "ahWJB9COI_FV7meOxGcbPwAAAJA"]
[Tue May 26 19:50:31.792588 2026] [:error] [pid 33888:tid 33964] [client 20.63.34.22:6430] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lala.php"] [unique_id "ahWJBzqzTeoxiinZsGHqUwAAARI"]
[Tue May 26 19:50:32.303163 2026] [:error] [pid 33888:tid 33969] [client 20.63.34.22:6445] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lala.php"] [unique_id "ahWJCDqzTeoxiinZsGHqVAAAARc"]
[Tue May 26 19:50:32.784342 2026] [:error] [pid 43701:tid 43721] [client 20.63.34.22:6980] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lala.php"] [unique_id "ahWJCIWtVI_UGrhtwKBueAAAAVI"]
[Tue May 26 19:50:33.245098 2026] [:error] [pid 43701:tid 43708] [client 20.63.34.22:6667] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/lala.php"] [unique_id "ahWJCYWtVI_UGrhtwKBueQAAAUU"]
[Tue May 26 19:50:33.816925 2026] [:error] [pid 33886:tid 33898] [client 20.63.34.22:7155] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bthil.php"] [unique_id "ahWJCbBYzgp5rPVdHcWHkwAAAEc"]
[Tue May 26 19:50:34.566464 2026] [:error] [pid 33977:tid 33991] [client 20.63.34.22:6401] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bthil.php"] [unique_id "ahWJCu9cnSDNAU9sYPi_kwAAAAs"]
[Tue May 26 19:50:35.048750 2026] [:error] [pid 33977:tid 33987] [client 20.63.34.22:6412] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bthil.php"] [unique_id "ahWJC-9cnSDNAU9sYPi_lwAAAAc"]
[Tue May 26 19:50:35.461047 2026] [:error] [pid 36497:tid 36529] [client 20.63.34.22:6456] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bthil.php"] [unique_id "ahWJC7jKQWM1gBmBY4jKDgAAANM"]
[Tue May 26 19:50:35.903586 2026] [:error] [pid 43701:tid 43709] [client 20.63.34.22:6698] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fun.php"] [unique_id "ahWJC4WtVI_UGrhtwKBufgAAAUY"]
[Tue May 26 19:50:36.351165 2026] [:error] [pid 43701:tid 43718] [client 20.63.34.22:6429] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fun.php"] [unique_id "ahWJDIWtVI_UGrhtwKBugAAAAU8"]
[Tue May 26 19:50:36.782498 2026] [:error] [pid 33977:tid 33992] [client 20.63.34.22:6691] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fun.php"] [unique_id "ahWJDO9cnSDNAU9sYPi_mgAAAAw"]
[Tue May 26 19:50:37.202577 2026] [:error] [pid 43701:tid 43719] [client 20.63.34.22:6452] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fun.php"] [unique_id "ahWJDYWtVI_UGrhtwKBuhQAAAVA"]
[Tue May 26 19:50:37.765726 2026] [:error] [pid 43701:tid 43708] [client 20.63.34.22:6442] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-the.php"] [unique_id "ahWJDYWtVI_UGrhtwKBuhwAAAUU"]
[Tue May 26 19:50:38.232754 2026] [:error] [pid 33977:tid 33993] [client 20.63.34.22:6450] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-the.php"] [unique_id "ahWJDu9cnSDNAU9sYPi_nQAAAA0"]
[Tue May 26 19:50:38.692546 2026] [:error] [pid 43701:tid 43716] [client 20.63.34.22:6699] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-the.php"] [unique_id "ahWJDoWtVI_UGrhtwKBuiwAAAU0"]
[Tue May 26 19:50:39.230953 2026] [:error] [pid 43701:tid 43720] [client 20.63.34.22:7161] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-the.php"] [unique_id "ahWJD4WtVI_UGrhtwKBujQAAAVE"]
[Tue May 26 19:50:39.901668 2026] [:error] [pid 43701:tid 43719] [client 20.63.34.22:6660] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vx.php"] [unique_id "ahWJD4WtVI_UGrhtwKBukAAAAVA"]
[Tue May 26 19:50:40.336686 2026] [:error] [pid 43701:tid 43705] [client 20.63.34.22:6999] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vx.php"] [unique_id "ahWJEIWtVI_UGrhtwKBukwAAAUI"]
[Tue May 26 19:50:40.801035 2026] [:error] [pid 43701:tid 43712] [client 20.63.34.22:6447] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vx.php"] [unique_id "ahWJEIWtVI_UGrhtwKBulgAAAUk"]
[Tue May 26 19:50:41.235357 2026] [:error] [pid 33888:tid 33956] [client 20.63.34.22:6457] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vx.php"] [unique_id "ahWJETqzTeoxiinZsGHqVgAAAQo"]
[Tue May 26 19:50:41.767538 2026] [:error] [pid 43701:tid 43719] [client 20.63.34.22:6696] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ff1.php"] [unique_id "ahWJEYWtVI_UGrhtwKBumwAAAVA"]
[Tue May 26 19:50:42.190773 2026] [:error] [pid 43701:tid 43725] [client 20.63.34.22:6447] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ff1.php"] [unique_id "ahWJEoWtVI_UGrhtwKBunAAAAVY"]
[Tue May 26 19:50:42.627789 2026] [:error] [pid 36497:tid 36510] [client 20.63.34.22:6425] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ff1.php"] [unique_id "ahWJErjKQWM1gBmBY4jKFQAAAMA"]
[Tue May 26 19:50:43.098820 2026] [:error] [pid 33888:tid 33968] [client 20.63.34.22:7008] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ff1.php"] [unique_id "ahWJEzqzTeoxiinZsGHqWAAAARY"]
[Tue May 26 19:50:43.734374 2026] [:error] [pid 33886:tid 33913] [client 20.63.34.22:6670] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/explorer/index_.php"] [unique_id "ahWJE7BYzgp5rPVdHcWHnAAAAFY"]
[Tue May 26 19:50:44.194379 2026] [:error] [pid 33977:tid 33999] [client 20.63.34.22:6458] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/explorer/index_.php"] [unique_id "ahWJFO9cnSDNAU9sYPi_pwAAABM"]
[Tue May 26 19:50:44.614004 2026] [:error] [pid 43701:tid 43727] [client 20.63.34.22:7066] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/explorer/index_.php"] [unique_id "ahWJFIWtVI_UGrhtwKBuoAAAAVg"]
[Tue May 26 19:50:45.117911 2026] [:error] [pid 36497:tid 36531] [client 20.63.34.22:6438] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/explorer/index_.php"] [unique_id "ahWJFbjKQWM1gBmBY4jKHAAAANU"]
[Tue May 26 19:50:45.606929 2026] [:error] [pid 43701:tid 43708] [client 20.63.34.22:6693] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/error.php"] [unique_id "ahWJFYWtVI_UGrhtwKBuowAAAUU"]
[Tue May 26 19:50:46.075277 2026] [:error] [pid 33886:tid 33905] [client 20.63.34.22:6455] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/error.php"] [unique_id "ahWJFrBYzgp5rPVdHcWHoQAAAE4"]
[Tue May 26 19:50:46.521140 2026] [:error] [pid 33977:tid 33989] [client 20.63.34.22:6402] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/error.php"] [unique_id "ahWJFu9cnSDNAU9sYPi_qAAAAAk"]
[Tue May 26 19:50:46.972926 2026] [:error] [pid 33977:tid 33996] [client 20.63.34.22:6703] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/error.php"] [unique_id "ahWJFu9cnSDNAU9sYPi_qQAAABA"]
[Tue May 26 19:50:47.664936 2026] [:error] [pid 33977:tid 33980] [client 20.63.34.22:6982] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/333.php"] [unique_id "ahWJF-9cnSDNAU9sYPi_qwAAAAA"]
[Tue May 26 19:50:48.086915 2026] [:error] [pid 36497:tid 36533] [client 20.63.34.22:6689] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/333.php"] [unique_id "ahWJGLjKQWM1gBmBY4jKIAAAANc"]
[Tue May 26 19:50:48.533414 2026] [:error] [pid 33977:tid 33995] [client 20.63.34.22:6716] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/333.php"] [unique_id "ahWJGO9cnSDNAU9sYPi_rAAAAA8"]
[Tue May 26 19:50:48.996115 2026] [:error] [pid 36497:tid 36518] [client 20.63.34.22:6687] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/333.php"] [unique_id "ahWJGLjKQWM1gBmBY4jKIwAAAMg"]
[Tue May 26 19:50:49.427525 2026] [:error] [pid 33977:tid 33990] [client 20.63.34.22:7072] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ftde.php"] [unique_id "ahWJGe9cnSDNAU9sYPi_sQAAAAo"]
[Tue May 26 19:50:49.893718 2026] [:error] [pid 43701:tid 43720] [client 20.63.34.22:7138] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ftde.php"] [unique_id "ahWJGYWtVI_UGrhtwKBuqwAAAVE"]
[Tue May 26 19:50:50.314972 2026] [:error] [pid 33886:tid 33903] [client 20.63.34.22:6666] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ftde.php"] [unique_id "ahWJGrBYzgp5rPVdHcWHpAAAAEw"]
[Tue May 26 19:50:50.769343 2026] [:error] [pid 33977:tid 33988] [client 20.63.34.22:6422] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ftde.php"] [unique_id "ahWJGu9cnSDNAU9sYPi_swAAAAg"]
[Tue May 26 19:50:51.315693 2026] [:error] [pid 43701:tid 43720] [client 20.63.34.22:6712] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/app.php"] [unique_id "ahWJG4WtVI_UGrhtwKButAAAAVE"]
[Tue May 26 19:50:51.798307 2026] [:error] [pid 36497:tid 36511] [client 20.63.34.22:6914] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/app.php"] [unique_id "ahWJG7jKQWM1gBmBY4jKJgAAAME"]
[Tue May 26 19:50:52.309160 2026] [:error] [pid 33887:tid 33938] [client 20.63.34.22:6997] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/app.php"] [unique_id "ahWJHNCOI_FV7meOxGcbSwAAAJM"]
[Tue May 26 19:50:52.790017 2026] [:error] [pid 33888:tid 33959] [client 20.63.34.22:7026] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/app.php"] [unique_id "ahWJHDqzTeoxiinZsGHqZgAAAQ0"]
[Tue May 26 19:50:53.232260 2026] [:error] [pid 36497:tid 36518] [client 20.63.34.22:6664] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cilus.php"] [unique_id "ahWJHbjKQWM1gBmBY4jKLwAAAMg"]
[Tue May 26 19:50:53.772422 2026] [:error] [pid 33977:tid 34002] [client 20.63.34.22:6678] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cilus.php"] [unique_id "ahWJHe9cnSDNAU9sYPi_uQAAABY"]
[Tue May 26 19:50:54.222857 2026] [:error] [pid 33977:tid 33983] [client 20.63.34.22:7001] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cilus.php"] [unique_id "ahWJHu9cnSDNAU9sYPi_ugAAAAM"]
[Tue May 26 19:50:54.688369 2026] [:error] [pid 33888:tid 33948] [client 20.63.34.22:6685] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/cilus.php"] [unique_id "ahWJHjqzTeoxiinZsGHqdQAAAQI"]
[Tue May 26 19:50:55.102936 2026] [:error] [pid 33977:tid 33980] [client 20.63.34.22:7034] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a5.php"] [unique_id "ahWJH-9cnSDNAU9sYPi_xgAAAAA"]
[Tue May 26 19:50:55.585654 2026] [:error] [pid 33886:tid 33912] [client 20.63.34.22:6993] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a5.php"] [unique_id "ahWJH7BYzgp5rPVdHcWHpQAAAFU"]
[Tue May 26 19:50:55.997770 2026] [:error] [pid 33888:tid 33950] [client 20.63.34.22:6692] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a5.php"] [unique_id "ahWJHzqzTeoxiinZsGHqewAAAQQ"]
[Tue May 26 19:50:56.507127 2026] [:error] [pid 33887:tid 33925] [client 20.63.34.22:6978] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/a5.php"] [unique_id "ahWJINCOI_FV7meOxGcbTQAAAIY"]
[Tue May 26 19:50:56.999630 2026] [:error] [pid 36497:tid 36514] [client 20.63.34.22:6684] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/test.php"] [unique_id "ahWJILjKQWM1gBmBY4jKPAAAAMQ"]
[Tue May 26 19:50:57.476165 2026] [:error] [pid 33977:tid 33987] [client 20.63.34.22:7081] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/test.php"] [unique_id "ahWJIe9cnSDNAU9sYPi_0AAAAAc"]
[Tue May 26 19:50:57.922462 2026] [:error] [pid 33977:tid 33997] [client 20.63.34.22:6697] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/test.php"] [unique_id "ahWJIe9cnSDNAU9sYPi_0gAAABE"]
[Tue May 26 19:50:58.358310 2026] [:error] [pid 33977:tid 33994] [client 20.63.34.22:7018] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/test.php"] [unique_id "ahWJIu9cnSDNAU9sYPi_1AAAAA4"]
[Tue May 26 19:50:58.797817 2026] [:error] [pid 33888:tid 33957] [client 20.63.34.22:6977] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aa.php"] [unique_id "ahWJIjqzTeoxiinZsGHqggAAAQs"]
[Tue May 26 19:50:59.310331 2026] [:error] [pid 33888:tid 33961] [client 20.63.34.22:6446] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aa.php"] [unique_id "ahWJIzqzTeoxiinZsGHqhQAAAQ8"]
[Tue May 26 19:50:59.756211 2026] [:error] [pid 33886:tid 33905] [client 20.63.34.22:6676] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aa.php"] [unique_id "ahWJI7BYzgp5rPVdHcWHqAAAAE4"]
[Tue May 26 19:51:00.191127 2026] [:error] [pid 33977:tid 34000] [client 20.63.34.22:6713] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/aa.php"] [unique_id "ahWJJO9cnSDNAU9sYPi_3gAAABQ"]
[Tue May 26 19:51:00.674130 2026] [:error] [pid 36497:tid 36518] [client 20.63.34.22:6690] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/term.php"] [unique_id "ahWJJLjKQWM1gBmBY4jKPgAAAMg"]
[Tue May 26 19:51:01.195744 2026] [proxy_fcgi:error] [pid 33888:tid 33961] [client 20.63.34.22:7088] AH01071: Got error 'Primary script unknown'
[Tue May 26 19:51:02.610345 2026] [proxy_fcgi:error] [pid 33888:tid 33956] [client 20.63.34.22:7088] AH01071: Got error 'Primary script unknown'
[Tue May 26 19:51:02.822393 2026] [proxy_fcgi:error] [pid 33888:tid 33959] [client 20.63.34.22:7088] AH01071: Got error 'Primary script unknown'
[Tue May 26 19:51:03.034107 2026] [proxy_fcgi:error] [pid 33888:tid 33948] [client 20.63.34.22:7088] AH01071: Got error 'Primary script unknown'
[Tue May 26 19:51:03.277680 2026] [proxy_fcgi:error] [pid 33888:tid 33955] [client 20.63.34.22:7088] AH01071: Got error 'Primary script unknown'
[Tue May 26 19:51:03.505000 2026] [proxy_fcgi:error] [pid 33888:tid 33953] [client 20.63.34.22:7088] AH01071: Got error 'Primary script unknown'
[Tue May 26 19:51:03.720528 2026] [proxy_fcgi:error] [pid 33888:tid 33961] [client 20.63.34.22:7088] AH01071: Got error 'Primary script unknown'
[Tue May 26 19:51:03.964926 2026] [proxy_fcgi:error] [pid 33888:tid 33962] [client 20.63.34.22:7088] AH01071: Got error 'Primary script unknown'
[Tue May 26 19:51:04.225650 2026] [proxy_fcgi:error] [pid 33888:tid 33959] [client 20.63.34.22:7088] AH01071: Got error 'Primary script unknown'
[Tue May 26 19:51:04.443284 2026] [proxy_fcgi:error] [pid 33888:tid 33946] [client 20.63.34.22:7088] AH01071: Got error 'Primary script unknown'
[Tue May 26 19:51:04.654903 2026] [proxy_fcgi:error] [pid 33888:tid 33961] [client 20.63.34.22:7088] AH01071: Got error 'Primary script unknown'
[Tue May 26 19:51:04.862507 2026] [:error] [pid 33888:tid 33950] [client 20.63.34.22:7088] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/database.php"] [unique_id "ahWJKDqzTeoxiinZsGHqqAAAAQQ"]
[Tue May 26 19:51:05.324772 2026] [:error] [pid 43701:tid 43714] [client 20.63.34.22:6681] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/database.php"] [unique_id "ahWJKYWtVI_UGrhtwKBuzQAAAUs"]
[Tue May 26 19:51:05.769874 2026] [:error] [pid 43701:tid 43720] [client 20.63.34.22:7019] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/database.php"] [unique_id "ahWJKYWtVI_UGrhtwKBuzgAAAVE"]
[Tue May 26 19:51:06.445900 2026] [:error] [pid 36497:tid 36524] [client 20.63.34.22:6672] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/database.php"] [unique_id "ahWJKrjKQWM1gBmBY4jKQQAAAM4"]
[Tue May 26 19:51:06.917394 2026] [:error] [pid 36497:tid 36511] [client 20.63.34.22:6694] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/like.php"] [unique_id "ahWJKrjKQWM1gBmBY4jKQgAAAME"]
[Tue May 26 19:51:07.593725 2026] [:error] [pid 36497:tid 36527] [client 20.63.34.22:6984] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/like.php"] [unique_id "ahWJK7jKQWM1gBmBY4jKQwAAANE"]
[Tue May 26 19:51:08.383838 2026] [:error] [pid 33886:tid 33893] [client 20.63.34.22:7083] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/like.php"] [unique_id "ahWJLLBYzgp5rPVdHcWHsQAAAEI"]
[Tue May 26 19:51:08.875313 2026] [:error] [pid 33886:tid 33907] [client 20.63.34.22:7010] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/like.php"] [unique_id "ahWJLLBYzgp5rPVdHcWHswAAAFA"]
[Tue May 26 19:51:09.439762 2026] [:error] [pid 36497:tid 36525] [client 20.63.34.22:6988] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xxx.php"] [unique_id "ahWJLbjKQWM1gBmBY4jKRwAAAM8"]
[Tue May 26 19:51:10.002536 2026] [:error] [pid 33887:tid 33935] [client 20.63.34.22:6714] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xxx.php"] [unique_id "ahWJLtCOI_FV7meOxGcbXQAAAJA"]
[Tue May 26 19:51:10.501448 2026] [:error] [pid 33977:tid 33982] [client 20.63.34.22:6439] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xxx.php"] [unique_id "ahWJLu9cnSDNAU9sYPi_9wAAAAI"]
[Tue May 26 19:51:10.986316 2026] [:error] [pid 33887:tid 33931] [client 20.63.34.22:7000] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xxx.php"] [unique_id "ahWJLtCOI_FV7meOxGcbYAAAAIw"]
[Tue May 26 19:51:11.410272 2026] [:error] [pid 33886:tid 33913] [client 20.63.34.22:6683] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/new.php"] [unique_id "ahWJL7BYzgp5rPVdHcWHuAAAAFY"]
[Tue May 26 19:51:11.884989 2026] [:error] [pid 33886:tid 33908] [client 20.63.34.22:6409] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/new.php"] [unique_id "ahWJL7BYzgp5rPVdHcWHugAAAFE"]
[Tue May 26 19:51:12.315719 2026] [:error] [pid 33977:tid 33990] [client 20.63.34.22:6665] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/new.php"] [unique_id "ahWJMO9cnSDNAU9sYPi_-gAAAAo"]
[Tue May 26 19:51:12.753957 2026] [:error] [pid 33887:tid 33941] [client 20.63.34.22:7017] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/new.php"] [unique_id "ahWJMNCOI_FV7meOxGcbYQAAAJY"]
[Tue May 26 19:51:13.207593 2026] [:error] [pid 36497:tid 36512] [client 20.63.34.22:6913] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sid3.php"] [unique_id "ahWJMbjKQWM1gBmBY4jKTgAAAMI"]
[Tue May 26 19:51:13.865446 2026] [:error] [pid 36497:tid 36523] [client 20.63.34.22:6431] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sid3.php"] [unique_id "ahWJMbjKQWM1gBmBY4jKUAAAAM0"]
[Tue May 26 19:51:14.301822 2026] [:error] [pid 33887:tid 33932] [client 20.63.34.22:6421] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sid3.php"] [unique_id "ahWJMtCOI_FV7meOxGcbZQAAAI0"]
[Tue May 26 19:51:14.731497 2026] [:error] [pid 33886:tid 33903] [client 20.63.34.22:6719] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sid3.php"] [unique_id "ahWJMrBYzgp5rPVdHcWHuwAAAEw"]
[Tue May 26 19:51:15.192148 2026] [:error] [pid 33887:tid 33934] [client 20.63.34.22:6709] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/txets.php"] [unique_id "ahWJM9COI_FV7meOxGcbZwAAAI8"]
[Tue May 26 19:51:15.617005 2026] [:error] [pid 33977:tid 33987] [client 20.63.34.22:6669] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/txets.php"] [unique_id "ahWJM-9cnSDNAU9sYPjABQAAAAc"]
[Tue May 26 19:51:16.079686 2026] [:error] [pid 36497:tid 36534] [client 20.63.34.22:6659] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/txets.php"] [unique_id "ahWJNLjKQWM1gBmBY4jKUwAAANg"]
[Tue May 26 19:51:16.541976 2026] [:error] [pid 33886:tid 33896] [client 20.63.34.22:6983] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/txets.php"] [unique_id "ahWJNLBYzgp5rPVdHcWHvQAAAEU"]
[Tue May 26 19:51:17.062937 2026] [:error] [pid 33888:tid 33959] [client 20.63.34.22:6673] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/shell20211028.php"] [unique_id "ahWJNTqzTeoxiinZsGHqqgAAAQ0"]
[Tue May 26 19:51:17.678661 2026] [:error] [pid 33886:tid 33906] [client 20.63.34.22:6686] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/shell20211028.php"] [unique_id "ahWJNbBYzgp5rPVdHcWHvgAAAE8"]
[Tue May 26 19:51:18.278540 2026] [:error] [pid 36497:tid 36521] [client 20.63.34.22:6428] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/shell20211028.php"] [unique_id "ahWJNrjKQWM1gBmBY4jKWgAAAMs"]
[Tue May 26 19:51:18.769819 2026] [:error] [pid 33887:tid 33937] [client 20.63.34.22:6677] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/shell20211028.php"] [unique_id "ahWJNtCOI_FV7meOxGcbawAAAJI"]
[Tue May 26 19:51:19.244814 2026] [:error] [pid 33887:tid 33931] [client 20.63.34.22:6981] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-wz.php"] [unique_id "ahWJN9COI_FV7meOxGcbbAAAAIw"]
[Tue May 26 19:51:19.701347 2026] [:error] [pid 33887:tid 33941] [client 20.63.34.22:6688] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-wz.php"] [unique_id "ahWJN9COI_FV7meOxGcbbQAAAJY"]
[Tue May 26 19:51:20.491914 2026] [:error] [pid 43701:tid 43718] [client 20.63.34.22:7021] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-wz.php"] [unique_id "ahWJOIWtVI_UGrhtwKBu4wAAAU8"]
[Tue May 26 19:51:21.066172 2026] [:error] [pid 33888:tid 33954] [client 20.63.34.22:7137] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-wz.php"] [unique_id "ahWJOTqzTeoxiinZsGHqrwAAAQg"]
[Tue May 26 19:51:22.697452 2026] [:error] [pid 33888:tid 33966] [client 20.63.34.22:6704] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/albin.php"] [unique_id "ahWJOjqzTeoxiinZsGHqtAAAARQ"]
[Tue May 26 19:51:25.317089 2026] [:error] [pid 43701:tid 43719] [client 20.63.34.22:7035] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/albin.php"] [unique_id "ahWJPYWtVI_UGrhtwKBu9AAAAVA"]
[Tue May 26 19:51:28.396838 2026] [:error] [pid 33888:tid 33950] [client 20.63.34.22:6706] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/albin.php"] [unique_id "ahWJQDqzTeoxiinZsGHqvAAAAQQ"]
[Tue May 26 19:51:30.722438 2026] [:error] [pid 33887:tid 33920] [client 20.63.34.22:7012] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/albin.php"] [unique_id "ahWJQtCOI_FV7meOxGcbdQAAAIE"]
[Tue May 26 19:51:31.874866 2026] [:error] [pid 36497:tid 36530] [client 20.63.34.22:6709] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ok.php"] [unique_id "ahWJQ7jKQWM1gBmBY4jKeAAAANQ"]
[Tue May 26 19:51:32.750031 2026] [:error] [pid 43701:tid 43703] [client 20.63.34.22:6662] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ok.php"] [unique_id "ahWJRIWtVI_UGrhtwKBvAgAAAUA"]
[Tue May 26 19:51:33.361778 2026] [:error] [pid 43701:tid 43720] [client 20.63.34.22:6934] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ok.php"] [unique_id "ahWJRYWtVI_UGrhtwKBvBgAAAVE"]
[Tue May 26 19:51:33.817712 2026] [:error] [pid 43701:tid 43719] [client 20.63.34.22:7031] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ok.php"] [unique_id "ahWJRYWtVI_UGrhtwKBvCAAAAVA"]
[Tue May 26 19:51:34.288844 2026] [:error] [pid 33977:tid 34001] [client 20.63.34.22:6976] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/drykl.php"] [unique_id "ahWJRu9cnSDNAU9sYPjAIwAAABU"]
[Tue May 26 19:51:34.820152 2026] [:error] [pid 43701:tid 43704] [client 20.63.34.22:6460] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/drykl.php"] [unique_id "ahWJRoWtVI_UGrhtwKBvEQAAAUE"]
[Tue May 26 19:51:35.315011 2026] [:error] [pid 33888:tid 33969] [client 20.63.34.22:7028] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/drykl.php"] [unique_id "ahWJRzqzTeoxiinZsGHqwgAAARc"]
[Tue May 26 19:51:35.728305 2026] [:error] [pid 43701:tid 43721] [client 20.63.34.22:7022] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/drykl.php"] [unique_id "ahWJR4WtVI_UGrhtwKBvGAAAAVI"]
[Tue May 26 19:51:36.247729 2026] [:error] [pid 36497:tid 36516] [client 20.63.34.22:7038] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/atomlib.php"] [unique_id "ahWJSLjKQWM1gBmBY4jKmwAAAMY"]
[Tue May 26 19:51:36.675258 2026] [:error] [pid 33887:tid 33920] [client 20.63.34.22:7071] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/atomlib.php"] [unique_id "ahWJSNCOI_FV7meOxGcbmAAAAIE"]
[Tue May 26 19:51:37.148174 2026] [:error] [pid 43701:tid 43708] [client 20.63.34.22:6974] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/atomlib.php"] [unique_id "ahWJSYWtVI_UGrhtwKBvJQAAAUU"]
[Tue May 26 19:51:37.577899 2026] [:error] [pid 43701:tid 43727] [client 20.63.34.22:6680] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/atomlib.php"] [unique_id "ahWJSYWtVI_UGrhtwKBvKAAAAVg"]
[Tue May 26 19:51:38.016620 2026] [:error] [pid 43701:tid 43711] [client 20.63.34.22:6918] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/z.php"] [unique_id "ahWJSoWtVI_UGrhtwKBvLAAAAUg"]
[Tue May 26 19:51:38.500492 2026] [:error] [pid 33886:tid 33900] [client 20.63.34.22:7106] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/z.php"] [unique_id "ahWJSrBYzgp5rPVdHcWHvwAAAEk"]
[Tue May 26 19:51:39.021500 2026] [:error] [pid 33887:tid 33927] [client 20.63.34.22:6923] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/z.php"] [unique_id "ahWJS9COI_FV7meOxGcbowAAAIg"]
[Tue May 26 19:51:39.489147 2026] [:error] [pid 43701:tid 43703] [client 20.63.34.22:6427] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/z.php"] [unique_id "ahWJS4WtVI_UGrhtwKBvNAAAAUA"]
[Tue May 26 19:51:39.912510 2026] [:error] [pid 33887:tid 33926] [client 20.63.34.22:6435] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-png.php"] [unique_id "ahWJS9COI_FV7meOxGcbpwAAAIc"]
[Tue May 26 19:51:40.384279 2026] [:error] [pid 33977:tid 34003] [client 20.63.34.22:6933] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-png.php"] [unique_id "ahWJTO9cnSDNAU9sYPjAOgAAABc"]
[Tue May 26 19:51:40.851190 2026] [:error] [pid 33886:tid 33899] [client 20.63.34.22:7036] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-png.php"] [unique_id "ahWJTLBYzgp5rPVdHcWHwAAAAEg"]
[Tue May 26 19:51:41.273471 2026] [:error] [pid 33888:tid 33957] [client 20.63.34.22:6701] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-png.php"] [unique_id "ahWJTTqzTeoxiinZsGHqyAAAAQs"]
[Tue May 26 19:51:41.709378 2026] [:error] [pid 36497:tid 36525] [client 20.63.34.22:6454] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/uploads/admin.php"] [unique_id "ahWJTbjKQWM1gBmBY4jKzgAAAM8"]
[Tue May 26 19:51:42.277194 2026] [:error] [pid 36497:tid 36527] [client 20.63.34.22:6990] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/uploads/admin.php"] [unique_id "ahWJTrjKQWM1gBmBY4jK0gAAANE"]
[Tue May 26 19:51:42.735762 2026] [:error] [pid 33887:tid 33941] [client 20.63.34.22:6674] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/uploads/admin.php"] [unique_id "ahWJTtCOI_FV7meOxGcbrQAAAJY"]
[Tue May 26 19:51:43.176301 2026] [:error] [pid 43701:tid 43722] [client 20.63.34.22:7027] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-content/uploads/admin.php"] [unique_id "ahWJT4WtVI_UGrhtwKBvRgAAAVM"]
[Tue May 26 19:51:43.676183 2026] [:error] [pid 36497:tid 36513] [client 20.63.34.22:7005] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "ahWJT7jKQWM1gBmBY4jK1wAAAMM"]
[Tue May 26 19:51:44.154818 2026] [:error] [pid 43701:tid 43703] [client 20.63.34.22:6711] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "ahWJUIWtVI_UGrhtwKBvSwAAAUA"]
[Tue May 26 19:51:44.574475 2026] [:error] [pid 33887:tid 33932] [client 20.63.34.22:7020] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "ahWJUNCOI_FV7meOxGcbsAAAAI0"]
[Tue May 26 19:51:45.046860 2026] [:error] [pid 36497:tid 36521] [client 20.63.34.22:6927] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "ahWJUbjKQWM1gBmBY4jK2AAAAMs"]
[Tue May 26 19:51:45.592833 2026] [:error] [pid 43701:tid 43724] [client 20.63.34.22:6922] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sadcut1.php"] [unique_id "ahWJUYWtVI_UGrhtwKBvTwAAAVU"]
[Tue May 26 19:51:46.023117 2026] [:error] [pid 36497:tid 36515] [client 20.63.34.22:6702] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sadcut1.php"] [unique_id "ahWJUrjKQWM1gBmBY4jK2QAAAMU"]
[Tue May 26 19:51:46.492284 2026] [:error] [pid 36497:tid 36514] [client 20.63.34.22:7029] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sadcut1.php"] [unique_id "ahWJUrjKQWM1gBmBY4jK2gAAAMQ"]
[Tue May 26 19:51:46.999289 2026] [:error] [pid 33887:tid 33938] [client 20.63.34.22:6848] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/sadcut1.php"] [unique_id "ahWJUtCOI_FV7meOxGcbtgAAAJM"]
[Tue May 26 19:51:47.462412 2026] [:error] [pid 43701:tid 43710] [client 20.63.34.22:6710] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp.php"] [unique_id "ahWJU4WtVI_UGrhtwKBvWAAAAUc"]
[Tue May 26 19:51:47.887859 2026] [:error] [pid 43701:tid 43705] [client 20.63.34.22:6929] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp.php"] [unique_id "ahWJU4WtVI_UGrhtwKBvWwAAAUI"]
[Tue May 26 19:51:48.318852 2026] [:error] [pid 36497:tid 36532] [client 20.63.34.22:6695] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp.php"] [unique_id "ahWJVLjKQWM1gBmBY4jK3gAAANY"]
[Tue May 26 19:51:48.786111 2026] [:error] [pid 36497:tid 36533] [client 20.63.34.22:7115] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp.php"] [unique_id "ahWJVLjKQWM1gBmBY4jK4AAAANc"]
[Tue May 26 19:51:49.253736 2026] [:error] [pid 43701:tid 43706] [client 20.63.34.22:6928] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x.php"] [unique_id "ahWJVYWtVI_UGrhtwKBvXQAAAUM"]
[Tue May 26 19:51:49.693142 2026] [:error] [pid 33888:tid 33959] [client 20.63.34.22:6936] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x.php"] [unique_id "ahWJVTqzTeoxiinZsGHq0QAAAQ0"]
[Tue May 26 19:51:50.146107 2026] [:error] [pid 33886:tid 33904] [client 20.63.34.22:6991] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x.php"] [unique_id "ahWJVrBYzgp5rPVdHcWHyQAAAE0"]
[Tue May 26 19:51:50.644165 2026] [:error] [pid 43701:tid 43711] [client 20.63.34.22:6705] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/x.php"] [unique_id "ahWJVoWtVI_UGrhtwKBvYQAAAUg"]
[Tue May 26 19:51:51.115650 2026] [:error] [pid 43701:tid 43720] [client 20.63.34.22:6940] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-conflg.php"] [unique_id "ahWJV4WtVI_UGrhtwKBvZgAAAVE"]
[Tue May 26 19:51:51.540371 2026] [:error] [pid 33977:tid 33985] [client 20.63.34.22:7112] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-conflg.php"] [unique_id "ahWJV-9cnSDNAU9sYPjAUAAAAAU"]
[Tue May 26 19:51:52.220121 2026] [:error] [pid 43701:tid 43725] [client 20.63.34.22:7016] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-conflg.php"] [unique_id "ahWJWIWtVI_UGrhtwKBvbAAAAVY"]
[Tue May 26 19:51:52.758880 2026] [:error] [pid 36497:tid 36533] [client 20.63.34.22:6938] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-conflg.php"] [unique_id "ahWJWLjKQWM1gBmBY4jK6AAAANc"]
[Tue May 26 19:51:53.895174 2026] [:error] [pid 36497:tid 36519] [client 20.63.34.22:6994] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-update.php"] [unique_id "ahWJWbjKQWM1gBmBY4jK7gAAAMk"]
[Tue May 26 19:51:54.551114 2026] [:error] [pid 43701:tid 43706] [client 20.63.34.22:6434] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-update.php"] [unique_id "ahWJWoWtVI_UGrhtwKBvcwAAAUM"]
[Tue May 26 19:51:55.109213 2026] [:error] [pid 43701:tid 43712] [client 20.63.34.22:7006] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-update.php"] [unique_id "ahWJW4WtVI_UGrhtwKBvdwAAAUk"]
[Tue May 26 19:51:55.545579 2026] [:error] [pid 43701:tid 43711] [client 20.63.34.22:6992] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/wp-update.php"] [unique_id "ahWJW4WtVI_UGrhtwKBveAAAAUg"]
[Tue May 26 19:51:55.996113 2026] [:error] [pid 43701:tid 43709] [client 20.63.34.22:6953] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hello.php"] [unique_id "ahWJW4WtVI_UGrhtwKBvegAAAUY"]
[Tue May 26 19:51:56.465984 2026] [:error] [pid 33977:tid 34003] [client 20.63.34.22:7037] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hello.php"] [unique_id "ahWJXO9cnSDNAU9sYPjAVwAAABc"]
[Tue May 26 19:51:56.897310 2026] [:error] [pid 43701:tid 43704] [client 20.63.34.22:6964] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hello.php"] [unique_id "ahWJXIWtVI_UGrhtwKBvfwAAAUE"]
[Tue May 26 19:51:57.389347 2026] [:error] [pid 43701:tid 43711] [client 20.63.34.22:6463] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/hello.php"] [unique_id "ahWJXYWtVI_UGrhtwKBvggAAAUg"]
[Tue May 26 19:51:57.818305 2026] [:error] [pid 33886:tid 33910] [client 20.63.34.22:6912] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/NewFile.php"] [unique_id "ahWJXbBYzgp5rPVdHcWHywAAAFM"]
[Tue May 26 19:51:58.294402 2026] [:error] [pid 33886:tid 33908] [client 20.63.34.22:7024] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/NewFile.php"] [unique_id "ahWJXrBYzgp5rPVdHcWHzQAAAFE"]
[Tue May 26 19:51:58.733277 2026] [:error] [pid 33886:tid 33897] [client 20.63.34.22:6995] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/NewFile.php"] [unique_id "ahWJXrBYzgp5rPVdHcWHzgAAAEY"]
[Tue May 26 19:51:59.186438 2026] [:error] [pid 33886:tid 33915] [client 20.63.34.22:6945] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/NewFile.php"] [unique_id "ahWJX7BYzgp5rPVdHcWHzwAAAFg"]
[Tue May 26 19:52:00.299051 2026] [:error] [pid 33887:tid 33923] [client 20.63.34.22:6950] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bless5.php"] [unique_id "ahWJYNCOI_FV7meOxGcbxAAAAIQ"]
[Tue May 26 19:52:00.816046 2026] [:error] [pid 33886:tid 33907] [client 20.63.34.22:7025] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bless5.php"] [unique_id "ahWJYLBYzgp5rPVdHcWH0gAAAFA"]
[Tue May 26 19:52:01.423982 2026] [:error] [pid 43701:tid 43727] [client 20.63.34.22:6671] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bless5.php"] [unique_id "ahWJYYWtVI_UGrhtwKBvigAAAVg"]
[Tue May 26 19:52:01.903138 2026] [:error] [pid 33887:tid 33922] [client 20.63.34.22:6973] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/bless5.php"] [unique_id "ahWJYdCOI_FV7meOxGcbyQAAAIM"]
[Tue May 26 19:52:02.445381 2026] [:error] [pid 36497:tid 36523] [client 20.63.34.22:7015] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/v2.php"] [unique_id "ahWJYrjKQWM1gBmBY4jK-gAAAM0"]
[Tue May 26 19:52:02.932957 2026] [:error] [pid 33887:tid 33939] [client 20.63.34.22:6718] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/v2.php"] [unique_id "ahWJYtCOI_FV7meOxGcbzAAAAJQ"]
[Tue May 26 19:52:03.452669 2026] [:error] [pid 33977:tid 33987] [client 20.63.34.22:7013] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/v2.php"] [unique_id "ahWJY-9cnSDNAU9sYPjAYwAAAAc"]
[Tue May 26 19:52:04.749379 2026] [proxy_fcgi:error] [pid 33886:tid 33904] [client 20.63.34.22:6867] AH01071: Got error 'Primary script unknown'
[Tue May 26 19:52:04.963173 2026] [proxy_fcgi:error] [pid 33886:tid 33901] [client 20.63.34.22:6867] AH01071: Got error 'Primary script unknown'
[Tue May 26 19:52:05.185345 2026] [proxy_fcgi:error] [pid 33886:tid 33898] [client 20.63.34.22:6867] AH01071: Got error 'Primary script unknown'
[Tue May 26 19:52:05.433736 2026] [proxy_fcgi:error] [pid 33886:tid 33912] [client 20.63.34.22:6867] AH01071: Got error 'Primary script unknown'
[Tue May 26 19:52:05.685669 2026] [proxy_fcgi:error] [pid 33886:tid 33900] [client 20.63.34.22:6867] AH01071: Got error 'Primary script unknown'
[Tue May 26 19:52:05.898502 2026] [proxy_fcgi:error] [pid 33886:tid 33910] [client 20.63.34.22:6867] AH01071: Got error 'Primary script unknown'
[Tue May 26 19:52:06.111415 2026] [proxy_fcgi:error] [pid 33886:tid 33914] [client 20.63.34.22:6867] AH01071: Got error 'Primary script unknown'
[Tue May 26 19:52:06.403107 2026] [proxy_fcgi:error] [pid 33886:tid 33897] [client 20.63.34.22:6867] AH01071: Got error 'Primary script unknown'
[Tue May 26 19:52:06.618497 2026] [proxy_fcgi:error] [pid 33886:tid 33893] [client 20.63.34.22:6867] AH01071: Got error 'Primary script unknown'
[Tue May 26 19:52:06.830977 2026] [proxy_fcgi:error] [pid 33886:tid 33913] [client 20.63.34.22:6867] AH01071: Got error 'Primary script unknown'
[Tue May 26 19:52:07.083573 2026] [proxy_fcgi:error] [pid 33886:tid 33895] [client 20.63.34.22:6867] AH01071: Got error 'Primary script unknown'
[Tue May 26 19:52:07.295370 2026] [:error] [pid 33886:tid 33891] [client 20.63.34.22:6867] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kolda.php"] [unique_id "ahWJZ7BYzgp5rPVdHcWH5QAAAEA"]
[Tue May 26 19:52:07.901404 2026] [:error] [pid 36497:tid 36533] [client 20.63.34.22:6979] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kolda.php"] [unique_id "ahWJZ7jKQWM1gBmBY4jLAQAAANc"]
[Tue May 26 19:52:08.545947 2026] [:error] [pid 33977:tid 33997] [client 20.63.34.22:6979] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kolda.php"] [unique_id "ahWJaO9cnSDNAU9sYPjAcQAAABE"]
[Tue May 26 19:52:09.104815 2026] [:error] [pid 33977:tid 33996] [client 20.63.34.22:6998] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/kolda.php"] [unique_id "ahWJae9cnSDNAU9sYPjAdAAAABA"]
[Tue May 26 19:52:09.714993 2026] [:error] [pid 43701:tid 43718] [client 20.63.34.22:6916] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/666.php"] [unique_id "ahWJaYWtVI_UGrhtwKBvjAAAAU8"]
[Tue May 26 19:52:10.694076 2026] [:error] [pid 43701:tid 43727] [client 20.63.34.22:6869] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/666.php"] [unique_id "ahWJaoWtVI_UGrhtwKBvjwAAAVg"]
[Tue May 26 19:52:11.116685 2026] [:error] [pid 43701:tid 43722] [client 20.63.34.22:6925] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/666.php"] [unique_id "ahWJa4WtVI_UGrhtwKBvkAAAAVM"]
[Tue May 26 19:52:11.559617 2026] [:error] [pid 33888:tid 33962] [client 20.63.34.22:6942] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/666.php"] [unique_id "ahWJazqzTeoxiinZsGHq2wAAARA"]
[Tue May 26 19:52:12.206583 2026] [:error] [pid 33886:tid 33911] [client 20.63.34.22:6708] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xoot.php"] [unique_id "ahWJbLBYzgp5rPVdHcWH5gAAAFQ"]
[Tue May 26 19:52:12.648081 2026] [:error] [pid 43701:tid 43708] [client 20.63.34.22:6985] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xoot.php"] [unique_id "ahWJbIWtVI_UGrhtwKBvkwAAAUU"]
[Tue May 26 19:52:13.089643 2026] [:error] [pid 33888:tid 33960] [client 20.63.34.22:6926] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xoot.php"] [unique_id "ahWJbTqzTeoxiinZsGHq4QAAAQ4"]
[Tue May 26 19:52:13.565312 2026] [:error] [pid 33888:tid 33965] [client 20.63.34.22:6919] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xoot.php"] [unique_id "ahWJbTqzTeoxiinZsGHq4gAAARM"]
[Tue May 26 19:52:14.046647 2026] [:error] [pid 36497:tid 36530] [client 20.63.34.22:7030] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vgtyu.php"] [unique_id "ahWJbrjKQWM1gBmBY4jLEAAAANQ"]
[Tue May 26 19:52:14.542187 2026] [:error] [pid 33887:tid 33923] [client 20.63.34.22:6717] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vgtyu.php"] [unique_id "ahWJbtCOI_FV7meOxGcb1AAAAIQ"]
[Tue May 26 19:52:14.959766 2026] [:error] [pid 33887:tid 33932] [client 20.63.34.22:6941] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vgtyu.php"] [unique_id "ahWJbtCOI_FV7meOxGcb1QAAAI0"]
[Tue May 26 19:52:15.515293 2026] [:error] [pid 33888:tid 33970] [client 20.63.34.22:6971] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/vgtyu.php"] [unique_id "ahWJbzqzTeoxiinZsGHq5AAAARg"]
[Tue May 26 19:52:16.044738 2026] [:error] [pid 43701:tid 43719] [client 20.63.34.22:6963] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/06.php"] [unique_id "ahWJcIWtVI_UGrhtwKBvnQAAAVA"]
[Tue May 26 19:52:16.495955 2026] [:error] [pid 43701:tid 43708] [client 20.63.34.22:6943] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/06.php"] [unique_id "ahWJcIWtVI_UGrhtwKBvnwAAAUU"]
[Tue May 26 19:52:16.922291 2026] [:error] [pid 33888:tid 33955] [client 20.63.34.22:6861] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/06.php"] [unique_id "ahWJcDqzTeoxiinZsGHq5gAAAQk"]
[Tue May 26 19:52:17.351305 2026] [:error] [pid 43701:tid 43712] [client 20.63.34.22:6968] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/06.php"] [unique_id "ahWJcYWtVI_UGrhtwKBvowAAAUk"]
[Tue May 26 19:52:17.803318 2026] [:error] [pid 33888:tid 33968] [client 20.63.34.22:6972] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/erty.php"] [unique_id "ahWJcTqzTeoxiinZsGHq5wAAARY"]
[Tue May 26 19:52:18.507643 2026] [:error] [pid 33977:tid 33981] [client 20.63.34.22:6996] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/erty.php"] [unique_id "ahWJcu9cnSDNAU9sYPjAgwAAAAE"]
[Tue May 26 19:52:19.059178 2026] [:error] [pid 43701:tid 43719] [client 20.63.34.22:6951] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/erty.php"] [unique_id "ahWJc4WtVI_UGrhtwKBvpgAAAVA"]
[Tue May 26 19:52:19.480250 2026] [:error] [pid 33977:tid 34001] [client 20.63.34.22:7023] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/erty.php"] [unique_id "ahWJc-9cnSDNAU9sYPjAjAAAABU"]
[Tue May 26 19:52:20.160981 2026] [:error] [pid 36497:tid 36514] [client 20.63.34.22:6952] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fs.php"] [unique_id "ahWJdLjKQWM1gBmBY4jLFQAAAMQ"]
[Tue May 26 19:52:20.653352 2026] [:error] [pid 43701:tid 43709] [client 20.63.34.22:6935] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fs.php"] [unique_id "ahWJdIWtVI_UGrhtwKBvqwAAAUY"]
[Tue May 26 19:52:21.280133 2026] [:error] [pid 43701:tid 43707] [client 20.63.34.22:6965] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fs.php"] [unique_id "ahWJdYWtVI_UGrhtwKBvrwAAAUQ"]
[Tue May 26 19:52:21.702838 2026] [:error] [pid 33977:tid 33990] [client 20.63.34.22:7032] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/fs.php"] [unique_id "ahWJde9cnSDNAU9sYPjAlAAAAAo"]
[Tue May 26 19:52:22.156653 2026] [:error] [pid 36497:tid 36511] [client 20.63.34.22:6962] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/66.php"] [unique_id "ahWJdrjKQWM1gBmBY4jLFwAAAME"]
[Tue May 26 19:52:22.678856 2026] [:error] [pid 43701:tid 43703] [client 20.63.34.22:7003] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/66.php"] [unique_id "ahWJdoWtVI_UGrhtwKBvtwAAAUA"]
[Tue May 26 19:52:23.223174 2026] [:error] [pid 43701:tid 43714] [client 20.63.34.22:6437] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/66.php"] [unique_id "ahWJd4WtVI_UGrhtwKBvuwAAAUs"]
[Tue May 26 19:52:23.840746 2026] [:error] [pid 43701:tid 43704] [client 20.63.34.22:6946] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/66.php"] [unique_id "ahWJd4WtVI_UGrhtwKBvvgAAAUE"]
[Tue May 26 19:52:24.291980 2026] [:error] [pid 43701:tid 43716] [client 20.63.34.22:7009] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/grsiuk.php"] [unique_id "ahWJeIWtVI_UGrhtwKBvwwAAAU0"]
[Tue May 26 19:52:24.773379 2026] [:error] [pid 43701:tid 43726] [client 20.63.34.22:6866] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/grsiuk.php"] [unique_id "ahWJeIWtVI_UGrhtwKBvyAAAAVc"]
[Tue May 26 19:52:25.253714 2026] [:error] [pid 43701:tid 43723] [client 20.63.34.22:7033] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/grsiuk.php"] [unique_id "ahWJeYWtVI_UGrhtwKBv0AAAAVQ"]
[Tue May 26 19:52:25.697312 2026] [:error] [pid 33887:tid 33922] [client 20.63.34.22:6924] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/grsiuk.php"] [unique_id "ahWJedCOI_FV7meOxGcb2AAAAIM"]
[Tue May 26 19:52:26.112622 2026] [:error] [pid 43701:tid 43706] [client 20.63.34.22:6863] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/new4.php"] [unique_id "ahWJeoWtVI_UGrhtwKBv2AAAAUM"]
[Tue May 26 19:52:26.533046 2026] [:error] [pid 36497:tid 36532] [client 20.63.34.22:6961] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/new4.php"] [unique_id "ahWJerjKQWM1gBmBY4jLGQAAANY"]
[Tue May 26 19:52:27.629370 2026] [:error] [pid 43701:tid 43708] [client 20.63.34.22:6873] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/new4.php"] [unique_id "ahWJe4WtVI_UGrhtwKBv4QAAAUU"]
[Tue May 26 19:52:28.310165 2026] [:error] [pid 43701:tid 43725] [client 20.63.34.22:6888] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/new4.php"] [unique_id "ahWJfIWtVI_UGrhtwKBv5QAAAVY"]
[Tue May 26 19:52:28.773787 2026] [:error] [pid 43701:tid 43710] [client 20.63.34.22:6799] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/pouhg.php"] [unique_id "ahWJfIWtVI_UGrhtwKBv6gAAAUc"]
[Tue May 26 19:52:29.214062 2026] [:error] [pid 43701:tid 43704] [client 20.63.34.22:7007] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/pouhg.php"] [unique_id "ahWJfYWtVI_UGrhtwKBv7wAAAUE"]
[Tue May 26 19:52:29.988930 2026] [:error] [pid 33977:tid 33997] [client 20.63.34.22:6954] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/pouhg.php"] [unique_id "ahWJfe9cnSDNAU9sYPjAoAAAABE"]
[Tue May 26 19:52:30.736435 2026] [:error] [pid 33886:tid 33894] [client 20.63.34.22:6958] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/pouhg.php"] [unique_id "ahWJfrBYzgp5rPVdHcWH6QAAAEM"]
[Tue May 26 19:52:31.971756 2026] [:error] [pid 33888:tid 33948] [client 20.63.34.22:6986] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xa.php"] [unique_id "ahWJfzqzTeoxiinZsGHq8AAAAQI"]
[Tue May 26 19:52:32.883309 2026] [:error] [pid 43701:tid 43716] [client 20.63.34.22:6987] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xa.php"] [unique_id "ahWJgIWtVI_UGrhtwKBv-QAAAU0"]
[Tue May 26 19:52:33.439159 2026] [:error] [pid 36497:tid 36521] [client 20.63.34.22:6917] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xa.php"] [unique_id "ahWJgbjKQWM1gBmBY4jLIgAAAMs"]
[Tue May 26 19:52:34.070040 2026] [:error] [pid 43701:tid 43720] [client 20.63.34.22:6959] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/xa.php"] [unique_id "ahWJgoWtVI_UGrhtwKBv_wAAAVE"]
[Tue May 26 19:52:34.735636 2026] [:error] [pid 43701:tid 43719] [client 20.63.34.22:6956] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ms.php"] [unique_id "ahWJgoWtVI_UGrhtwKBwAwAAAVA"]
[Tue May 26 19:52:35.199136 2026] [:error] [pid 43701:tid 43708] [client 20.63.34.22:6851] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ms.php"] [unique_id "ahWJg4WtVI_UGrhtwKBwBgAAAUU"]
[Tue May 26 19:52:35.828633 2026] [:error] [pid 33977:tid 33996] [client 20.63.34.22:6889] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ms.php"] [unique_id "ahWJg-9cnSDNAU9sYPjArQAAABA"]
[Tue May 26 19:52:36.580526 2026] [:error] [pid 43701:tid 43716] [client 20.63.34.22:7011] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dwelectservices.com.au"] [uri "/ms.php"] [unique_id "ahWJhIWtVI_UGrhtwKBwDQAAAU0"]